httpd-2.4.41/0002755000000000000500000000000013523273356011247 5ustar rootsrchttpd-2.4.41/config.layout0000644000000000000500000003210513332554177013753 0ustar rootsrc## ## config.layout -- Pre-defined Installation Path Layouts ## ## Hints: ## - layouts can be loaded with configure's --enable-layout=ID option ## - when no --enable-layout option is given, the default layout is `Apache' ## - a trailing plus character (`+') on paths is replaced with a ## `/' suffix where is currently hardcoded to 'apache2'. ## (This may become a configurable parameter at some point.) ## # Classical Apache path layout. prefix: /usr/local/apache2 exec_prefix: ${prefix} bindir: ${exec_prefix}/bin sbindir: ${exec_prefix}/bin libdir: ${exec_prefix}/lib libexecdir: ${exec_prefix}/modules mandir: ${prefix}/man sysconfdir: ${prefix}/conf datadir: ${prefix} installbuilddir: ${datadir}/build errordir: ${datadir}/error iconsdir: ${datadir}/icons htdocsdir: ${datadir}/htdocs manualdir: ${datadir}/manual cgidir: ${datadir}/cgi-bin includedir: ${prefix}/include localstatedir: ${prefix} runtimedir: ${localstatedir}/logs logfiledir: ${localstatedir}/logs proxycachedir: ${localstatedir}/proxy # GNU standards conforming path layout. # See FSF's GNU project `make-stds' document for details. prefix: /usr/local exec_prefix: ${prefix} bindir: ${exec_prefix}/bin sbindir: ${exec_prefix}/sbin libdir: ${exec_prefix}/lib libexecdir: ${exec_prefix}/libexec mandir: ${prefix}/man sysconfdir: ${prefix}/etc+ datadir: ${prefix}/share+ installbuilddir: ${datadir}/build errordir: ${datadir}/error iconsdir: ${datadir}/icons htdocsdir: ${datadir}/htdocs manualdir: ${datadir}/manual cgidir: ${datadir}/cgi-bin includedir: ${prefix}/include+ localstatedir: ${prefix}/var+ runtimedir: ${localstatedir}/run logfiledir: ${localstatedir}/log proxycachedir: ${localstatedir}/proxy # Mac OS X Server (Rhapsody) prefix: /Local/Library/WebServer exec_prefix: /usr bindir: ${exec_prefix}/bin sbindir: ${exec_prefix}/sbin libdir: ${exec_prefix}/lib libexecdir: /System/Library/Apache/Modules mandir: ${exec_prefix}/share/man sysconfdir: ${prefix}/Configuration datadir: ${prefix} installbuilddir: /System/Library/Apache/Build errordir: /System/Library/Apache/Error iconsdir: /System/Library/Apache/Icons manualdir: /System/Library/Apache/Manual htdocsdir: ${datadir}/Documents cgidir: ${datadir}/CGI-Executables includedir: /System/Library/Frameworks/Apache.framework/Versions/2.0/Headers localstatedir: /var runtimedir: ${prefix}/Logs logfiledir: ${prefix}/Logs proxycachedir: ${prefix}/ProxyCache # Darwin/Mac OS Layout prefix: /usr exec_prefix: ${prefix} bindir: ${exec_prefix}/bin sbindir: ${exec_prefix}/sbin libdir: ${exec_prefix}/lib libexecdir: ${exec_prefix}/libexec+ mandir: ${prefix}/share/man datadir: /Library/WebServer sysconfdir: /etc+ installbuilddir: ${prefix}/share/httpd/build errordir: ${prefix}/share/httpd/error iconsdir: ${prefix}/share/httpd/icons htdocsdir: ${datadir}/Documents manualdir: ${datadir}/share/httpd/manual cgidir: ${datadir}/CGI-Executables includedir: ${prefix}/include+ localstatedir: /var runtimedir: ${localstatedir}/run logfiledir: ${localstatedir}/log+ proxycachedir: ${runtimedir}/proxy # Red Hat Linux 7.x layout prefix: /usr exec_prefix: ${prefix} bindir: ${prefix}/bin sbindir: ${prefix}/sbin libdir: ${prefix}/lib libexecdir: ${prefix}/lib/apache mandir: ${prefix}/man sysconfdir: /etc/httpd/conf datadir: /var/www installbuilddir: ${datadir}/build errordir: ${datadir}/error iconsdir: ${datadir}/icons htdocsdir: ${datadir}/html manualdir: ${datadir}/manual cgidir: ${datadir}/cgi-bin includedir: ${prefix}/include/apache localstatedir: /var runtimedir: ${localstatedir}/run logfiledir: ${localstatedir}/log/httpd proxycachedir: ${localstatedir}/cache/httpd # Layout used in Fedora httpd packaging. prefix: /usr localstatedir: /var exec_prefix: ${prefix} bindir: ${prefix}/bin sbindir: ${prefix}/sbin libdir: ${prefix}/lib libexecdir: ${prefix}/libexec mandir: ${prefix}/man sysconfdir: /etc/httpd/conf datadir: ${prefix}/share/httpd installbuilddir: ${libdir}/httpd/build errordir: ${datadir}/error iconsdir: ${datadir}/icons htdocsdir: ${localstatedir}/www/html manualdir: ${datadir}/manual cgidir: ${localstatedir}/www/cgi-bin includedir: ${prefix}/include/httpd runtimedir: /run/httpd logfiledir: ${localstatedir}/log/httpd proxycachedir: ${localstatedir}/cache/httpd/proxy # According to the /opt filesystem conventions prefix: /opt/apache exec_prefix: ${prefix} bindir: ${exec_prefix}/bin sbindir: ${exec_prefix}/sbin libdir: ${exec_prefix}/lib libexecdir: ${exec_prefix}/libexec mandir: ${prefix}/man sysconfdir: /etc${prefix} datadir: ${prefix}/share installbuilddir: ${datadir}/build errordir: ${datadir}/error iconsdir: ${datadir}/icons htdocsdir: ${datadir}/htdocs manualdir: ${datadir}/manual cgidir: ${datadir}/cgi-bin includedir: ${prefix}/include localstatedir: /var${prefix} runtimedir: ${localstatedir}/run logfiledir: ${localstatedir}/logs proxycachedir: ${localstatedir}/proxy # SuSE 6.x layout prefix: /usr exec_prefix: ${prefix} bindir: ${prefix}/bin sbindir: ${prefix}/sbin libdir: ${prefix}/lib libexecdir: ${prefix}/lib/apache mandir: ${prefix}/share/man sysconfdir: /etc/httpd datadir: /usr/local/httpd installbuilddir: ${datadir}/build errordir: ${datadir}/error iconsdir: ${datadir}/icons htdocsdir: ${datadir}/htdocs manualdir: ${datadir}/manual cgidir: ${datadir}/cgi-bin includedir: ${prefix}/include/apache localstatedir: /var/lib/httpd runtimedir: /var/run logfiledir: /var/log/httpd proxycachedir: /var/cache/httpd # BSD/OS layout prefix: /var/www exec_prefix: /usr/contrib bindir: ${exec_prefix}/bin sbindir: ${exec_prefix}/bin libdir: ${exec_prefix}/lib libexecdir: ${exec_prefix}/libexec/apache mandir: ${exec_prefix}/man sysconfdir: ${prefix}/conf datadir: ${prefix} installbuilddir: ${datadir}/build errordir: ${datadir}/error iconsdir: ${datadir}/icons htdocsdir: ${datadir}/htdocs manualdir: ${datadir}/manual cgidir: ${datadir}/cgi-bin includedir: ${exec_prefix}/include/apache localstatedir: /var runtimedir: ${localstatedir}/run logfiledir: ${localstatedir}/log/httpd proxycachedir: ${localstatedir}/proxy # Solaris 8 Layout prefix: /usr/apache exec_prefix: ${prefix} bindir: ${exec_prefix}/bin sbindir: ${exec_prefix}/bin libdir: ${exec_prefix}/lib libexecdir: ${exec_prefix}/libexec mandir: ${exec_prefix}/man sysconfdir: /etc/apache datadir: /var/apache installbuilddir: ${datadir}/build errordir: ${datadir}/error iconsdir: ${datadir}/icons htdocsdir: ${datadir}/htdocs manualdir: ${datadir}/manual cgidir: ${datadir}/cgi-bin includedir: ${exec_prefix}/include localstatedir: ${prefix} runtimedir: /var/run logfiledir: ${datadir}/logs proxycachedir: ${datadir}/proxy # OpenBSD Layout prefix: /var/www exec_prefix: /usr bindir: ${exec_prefix}/bin sbindir: ${exec_prefix}/sbin libdir: ${exec_prefix}/lib libexecdir: ${exec_prefix}/lib/apache/modules mandir: ${exec_prefix}/share/man sysconfdir: ${prefix}/conf datadir: ${prefix} installbuilddir: ${prefix}/build errordir: ${prefix}/error iconsdir: ${prefix}/icons htdocsdir: ${prefix}/htdocs manualdir: ${datadir}/manual cgidir: ${prefix}/cgi-bin includedir: ${exec_prefix}/lib/apache/include localstatedir: ${prefix} runtimedir: ${prefix}/logs logfiledir: ${prefix}/logs proxycachedir: ${prefix}/proxy # FreeBSD Layout prefix: /usr/local exec_prefix: ${prefix} bindir: ${exec_prefix}/bin sbindir: ${exec_prefix}/sbin libdir: ${exec_prefix}/lib libexecdir: ${exec_prefix}/libexec/apache2 mandir: ${prefix}/man sysconfdir: ${prefix}/etc/apache2 datadir: ${prefix}/www installbuilddir: ${prefix}/share/apache2/build errordir: ${datadir}/error iconsdir: ${datadir}/icons htdocsdir: ${datadir}/data manualdir: ${prefix}/share/doc/apache2 cgidir: ${datadir}/cgi-bin includedir: ${prefix}/include/apache2 localstatedir: /var runtimedir: ${localstatedir}/run logfiledir: ${localstatedir}/log proxycachedir: ${datadir}/proxy # Debian layout prefix: exec_prefix: ${prefix}/usr bindir: ${exec_prefix}/bin sbindir: ${exec_prefix}/sbin libdir: ${exec_prefix}/lib libexecdir: ${exec_prefix}/lib/apache2/modules mandir: ${exec_prefix}/share/man sysconfdir: ${prefix}/etc/apache2 datadir: ${exec_prefix}/share/apache2 iconsdir: ${datadir}/icons htdocsdir: ${prefix}/usr/share/apache2/default-site/htdocs manualdir: ${htdocsdir}/manual cgidir: ${prefix}/usr/lib/cgi-bin includedir: ${exec_prefix}/include/apache2 localstatedir: ${prefix}/var/lock/apache2 runtimedir: ${prefix}/var/run/apache2 logfiledir: ${prefix}/var/log/apache2 proxycachedir: ${prefix}/var/cache/apache2/proxy infodir: ${exec_prefix}/share/info installbuilddir: ${prefix}/usr/share/apache2/build errordir: ${datadir}/error # Generic RPM layout prefix: /usr exec_prefix: ${prefix} bindir: ${prefix}/bin sbindir: ${prefix}/sbin libdir: ${prefix}/lib libexecdir: ${libdir}/httpd/modules mandir: ${prefix}/share/man sysconfdir: /etc/httpd/conf installbuilddir: ${libdir}/httpd/build includedir: ${prefix}/include/httpd localstatedir: /var datadir: ${localstatedir}/www errordir: ${datadir}/error iconsdir: ${datadir}/icons htdocsdir: ${datadir}/html manualdir: ${datadir}/manual cgidir: ${datadir}/cgi-bin runtimedir: ${localstatedir}/run logfiledir: ${localstatedir}/log/httpd proxycachedir: ${localstatedir}/cache/httpd/cache-root # AIX layout prefix: /opt/httpd exec_prefix: /opt/httpd bindir: ${exec_prefix}/bin sbindir: ${exec_prefix}/sbin libdir: ${exec_prefix}/lib libexecdir: ${exec_prefix}/libexec mandir: /usr/share/man sysconfdir: /etc/httpd datadir: /var/httpd installbuilddir: ${datadir}/build errordir: ${datadir}/error htdocsdir: ${datadir}/htdocs cgidir: ${datadir}/cgi-bin iconsdir: ${prefix}/icons manualdir: ${prefix}/manual includedir: ${prefix}/include localstatedir: /var/httpd runtimedir: ${localstatedir}/run logfiledir: ${localstatedir}/logs proxycachedir: ${localstatedir}/proxy # FHS layout prefix: /usr exec_prefix: ${prefix} bindir: ${prefix}/bin sbindir: ${prefix}/sbin libdir: ${prefix}/lib/httpd libexecdir: ${prefix}/lib/httpd/modules installbuilddir: ${prefix}/lib/httpd/build mandir: ${prefix}/man sysconfdir: /etc/httpd datadir: /srv/httpd iconsdir: ${datadir}/icons htdocsdir: ${datadir}/htdocs manualdir: ${htdocsdir}/manual cgidir: ${datadir}/cgi-bin errordir: ${datadir}/error includedir: ${prefix}/include/httpd localstatedir: /var runtimedir: ${localstatedir}/run/httpd logfiledir: ${localstatedir}/log/httpd proxycachedir: ${localstatedir}/cache/httpd httpd-2.4.41/configure.in0000644000000000000500000007352513303573314013563 0ustar rootsrcdnl dnl Autoconf configuration for Apache httpd dnl dnl Use ./buildconf to produce a configure script dnl AC_PREREQ(2.50) AC_INIT(ABOUT_APACHE) AC_CONFIG_HEADER(include/ap_config_auto.h) AC_CONFIG_AUX_DIR(build) dnl Absolute source/build directory abs_srcdir=`(cd $srcdir && pwd)` abs_builddir=`pwd` dnl Ensure that the httpd version is included HTTPD_VERSION=`$abs_srcdir/build/get-version.sh all $abs_srcdir/include/ap_release.h AP_SERVER` HTTPD_MMN=`$abs_srcdir/build/get-version.sh mmn $abs_srcdir/include/ap_mmn.h MODULE_MAGIC_NUMBER` dnl # dnl # Include our own M4 macros along with those for APR and libtool dnl # sinclude(build/apr_common.m4) sinclude(build/find_apr.m4) sinclude(build/find_apu.m4) sinclude(acinclude.m4) dnl Later versions of autoconf (>= 2.62) by default cause the produced dnl configure script to emit at least warnings when it comes across unknown dnl command line options. These versions also have the macro dnl AC_DISABLE_OPTION_CHECKING defined which turns this off by default. dnl We want to have this turned off here since our configure calls can dnl contain options for APR / APR-UTIL configure that are unknown to us. dnl So avoid confusing the user by turning this off. See also PR 45221. ifdef([AC_DISABLE_OPTION_CHECKING], [AC_DISABLE_OPTION_CHECKING]) dnl XXX we can't just use AC_PREFIX_DEFAULT because that isn't subbed in dnl by configure until it is too late. Is that how it should be or not? dnl Something seems broken here. AC_PREFIX_DEFAULT(/usr/local/apache2) dnl Get the layout here, so we can pass the required variables to apr APR_ENABLE_LAYOUT(Apache, [errordir iconsdir htdocsdir cgidir]) dnl reparse the configure arguments. APR_PARSE_ARGUMENTS dnl export expanded and relative configure argument variables APACHE_EXPORT_ARGUMENTS dnl Save user-defined environment settings for later restoration dnl APR_SAVE_THE_ENVIRONMENT(CPPFLAGS) APR_SAVE_THE_ENVIRONMENT(CFLAGS) APR_SAVE_THE_ENVIRONMENT(CXXFLAGS) APR_SAVE_THE_ENVIRONMENT(LDFLAGS) APR_SAVE_THE_ENVIRONMENT(LIBS) APR_SAVE_THE_ENVIRONMENT(INCLUDES) dnl Generate ./config.nice for reproducing runs of configure dnl APR_CONFIG_NICE(config.nice) nl=' ' dnl Check that mkdir -p works APR_MKDIR_P_CHECK($top_srcdir/build/mkdir.sh) dnl get an EGREP to use in the Makefiles AC_PROG_EGREP APACHE_SUBST(EGREP) dnl ## Run configure for packages Apache uses dnl shared library support for these packages doesn't currently dnl work on some platforms AC_CANONICAL_SYSTEM orig_prefix="$prefix" AC_MSG_NOTICE([]) AC_MSG_NOTICE([Configuring Apache Portable Runtime library...]) AC_MSG_NOTICE([]) AC_ARG_WITH(included-apr, APACHE_HELP_STRING(--with-included-apr,Use bundled copies of APR/APR-Util)) if test "x$with_included_apr" = "xyes"; then apr_found=reconfig if test ! -d srclib/apr && test ! -d $srcdir/srclib/apr; then AC_MSG_ERROR([Bundled APR requested but not found at ./srclib/. Download and unpack the corresponding apr and apr-util packages to ./srclib/.]) fi else APR_FIND_APR("$srcdir/srclib/apr", "./srclib/apr", 1, 1 2, [ version=`$apr_config --version` case x${version} in x1.[[0-3]].*) AC_MSG_WARN([APR version 1.4.0 or later is required, found $version]) apr_acceptable=no ;; esac unset version ]) fi if test "$apr_found" = "no"; then AC_MSG_ERROR([APR not found. Please read the documentation.]) fi if test "$apr_found" = "reconfig"; then APR_SUBDIR_CONFIG(srclib/apr, [$apache_apr_flags --prefix=$prefix --exec-prefix=$exec_prefix --libdir=$libdir --includedir=$includedir --bindir=$bindir --datadir=$datadir --with-installbuilddir=$installbuilddir], [--enable-layout=*|\'--enable-layout=*]) dnl We must be the first to build and the last to be cleaned AP_BUILD_SRCLIB_DIRS="apr $AP_BUILD_SRCLIB_DIRS" AP_CLEAN_SRCLIB_DIRS="$AP_CLEAN_SRCLIB_DIRS apr" dnl We have to find apr-N-config when we reconfigure APR. for majorver in 1 2; do test_apr_config="./srclib/apr/apr-${majorver}-config" if test -f "$test_apr_config"; then apr_config="$test_apr_config" fi done fi APR_SETIFNULL(CC, `$apr_config --cc`) APR_SETIFNULL(CPP, `$apr_config --cpp`) APR_ADDTO(CFLAGS, `$apr_config --cflags`) APR_ADDTO(CPPFLAGS, `$apr_config --cppflags`) dnl internal-only CPPFLAGS (shouldn't affect third-party module builds) INTERNAL_CPPFLAGS="" APR_ADDTO(LDFLAGS, `$apr_config --ldflags`) SHLIBPATH_VAR=`$apr_config --shlib-path-var` APR_BINDIR=`$apr_config --bindir` APR_INCLUDEDIR=`$apr_config --includedir` APR_INCLUDES=`$apr_config --includes` APR_VERSION=`$apr_config --version` apr_major_version=`echo ${APR_VERSION} | sed 's,\..*,,'` APR_CONFIG="$APR_BINDIR/apr-${apr_major_version}-config" AC_MSG_NOTICE([]) AC_MSG_NOTICE([Configuring Apache Portable Runtime Utility library...]) AC_MSG_NOTICE([]) if test "x${apr_major_version}" = "x2"; then apu_found=obsolete elif test "x$with_included_apr" = "xyes"; then apu_found=reconfig if test ! -d srclib/apr-util && test ! -d $srcdir/srclib/apr-util; then AC_MSG_ERROR([Bundled APR-Util requested but not found at ./srclib/. Download and unpack the corresponding apr and apr-util packages to ./srclib/.]) fi else dnl If httpd is buildconf'ed against an apr 2.x tree, then 1.x dnl isn't supported. ifdef([APR_FIND_APU], [ APR_FIND_APU("$srcdir/srclib/apr-util", "./srclib/apr-util", 1, ${apr_major_version}) ], [apu_found=no]) fi if test "$apu_found" = "no"; then AC_MSG_ERROR([APR-util not found. Please read the documentation.]) fi # Catch some misconfigurations: case ${apr_found}.${apu_found} in reconfig.yes) AC_MSG_ERROR([Cannot use an external APR-util with the bundled APR]) ;; yes.reconfig) AC_MSG_ERROR([Cannot use an external APR with the bundled APR-util]) ;; esac if test "$apu_found" = "reconfig"; then APR_SUBDIR_CONFIG(srclib/apr-util, [--with-apr=../apr --prefix=$prefix --exec-prefix=$exec_prefix --libdir=$libdir --includedir=$includedir --bindir=$bindir], [--enable-layout=*|\'--enable-layout=*]) dnl We must be the last to build and the first to be cleaned AP_BUILD_SRCLIB_DIRS="$AP_BUILD_SRCLIB_DIRS apr-util" AP_CLEAN_SRCLIB_DIRS="apr-util $AP_CLEAN_SRCLIB_DIRS" dnl APR and APR-Util major versions must match apu_config="./srclib/apr-util/apu-${apr_major_version}-config" fi if test "$apu_found" = "obsolete"; then AC_MSG_NOTICE([APR-util obsoleted, woohoo]) else APR_ADDTO(LDFLAGS, `$apu_config --ldflags`) APU_BINDIR=`$apu_config --bindir` APU_INCLUDEDIR=`$apu_config --includedir` APU_INCLUDES=`$apu_config --includes` APU_VERSION=`$apu_config --version` APU_CONFIG="$APU_BINDIR/apu-`echo ${APU_VERSION} | sed 's,\..*,,'`-config" fi dnl In case we picked up CC and CPP from APR, get that info into the dnl config cache so that PCRE uses it. Otherwise, CC and CPP used for dnl PCRE and for our config tests will be whatever PCRE determines. AC_PROG_CC AC_PROG_CPP dnl Try to get c99 support for variadic macros ifdef([AC_PROG_CC_C99], [AC_PROG_CC_C99]) if test "x${cache_file}" = "x/dev/null"; then # Likewise, ensure that CC and CPP are passed through to the pcre # configure script iff caching is disabled (the autoconf 2.5x default). export CC; export CPP fi AC_ARG_WITH(pcre, APACHE_HELP_STRING(--with-pcre=PATH,Use external PCRE library)) AC_PATH_PROG(PCRE_CONFIG, pcre-config, false) if test -d "$with_pcre" && test -x "$with_pcre/bin/pcre-config"; then PCRE_CONFIG=$with_pcre/bin/pcre-config elif test -x "$with_pcre"; then PCRE_CONFIG=$with_pcre fi if test "$PCRE_CONFIG" != "false"; then if $PCRE_CONFIG --version >/dev/null 2>&1; then :; else AC_MSG_ERROR([Did not find pcre-config script at $PCRE_CONFIG]) fi case `$PCRE_CONFIG --version` in [[1-5].*]) AC_MSG_ERROR([Need at least pcre version 6.0]) ;; esac AC_MSG_NOTICE([Using external PCRE library from $PCRE_CONFIG]) APR_ADDTO(PCRE_INCLUDES, [`$PCRE_CONFIG --cflags`]) APR_ADDTO(PCRE_LIBS, [`$PCRE_CONFIG --libs`]) else AC_MSG_ERROR([pcre-config for libpcre not found. PCRE is required and available from http://pcre.org/]) fi APACHE_SUBST(PCRE_LIBS) AC_MSG_NOTICE([]) AC_MSG_NOTICE([Configuring Apache httpd...]) AC_MSG_NOTICE([]) dnl If the source dir is not equal to the build dir, dnl then we are running in VPATH mode. APR_ADDTO(INCLUDES, [-I.]) if test "$abs_builddir" != "$abs_srcdir"; then APR_ADDTO(INCLUDES, [-I\$(top_builddir)/include]) fi APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/os/\$(OS_DIR) -I\$(top_srcdir)/include]) # apr/apr-util --includes may pick up system paths for dependent # libraries, so ensure these are later in INCLUDES than local source # directories. APR_ADDTO(INCLUDES, $APR_INCLUDES) APR_ADDTO(INCLUDES, $APU_INCLUDES) dnl Add in path to PCRE includes APR_ADDTO(INCLUDES, $PCRE_INCLUDES) AC_MSG_NOTICE([]) AC_MSG_NOTICE([Applying OS-specific hints for httpd...]) AC_MSG_NOTICE([]) case $host in *os2*) # Use a custom made libtool replacement echo "using aplibtool" LIBTOOL="$abs_srcdir/srclib/apr/build/aplibtool" SH_LIBTOOL="$LIBTOOL --shared --export-all" SH_LIBS="\$(ALL_LIBS)" CORE_IMPLIB_FILE="ApacheCoreOS2.la" CORE_IMPLIB="$abs_srcdir/server/$CORE_IMPLIB_FILE" MK_IMPLIB="emximp" other_targets="$other_targets os2core" INSTALL_PROG_FLAGS="-e .exe" SHLTCFLAGS="" LTCFLAGS="" ;; *) if test "x$LTFLAGS" = "x"; then LTFLAGS='--silent' fi my_libtool=`$apr_config --apr-libtool` LIBTOOL="$my_libtool \$(LTFLAGS)" libtoolversion=`$my_libtool --version` case $libtoolversion in *1.[[45]]* | *[[2-9]].[[0-9]]*) SH_LIBTOOL='$(LIBTOOL)' SHLTCFLAGS="-prefer-pic" LTCFLAGS="-prefer-non-pic -static" ;; *) SH_LIBTOOL='$(SHELL) $(top_builddir)/shlibtool $(LTFLAGS)' SHLTCFLAGS="" LTCFLAGS="" ;; esac ;; esac APACHE_SUBST(SHLTCFLAGS) APACHE_SUBST(LTCFLAGS) case $host in *-apple-aux3*) APR_SETVAR(SINGLE_LISTEN_UNSERIALIZED_ACCEPT, [1]) ;; *os2-emx*) APR_SETVAR(SINGLE_LISTEN_UNSERIALIZED_ACCEPT, [1]) ;; *-linux-*) case `uname -r` in # Unserialized accept() was not recommended until Linux 2.2. [[01]].* | 2.[[01]]* ) ;; * ) APR_SETVAR(SINGLE_LISTEN_UNSERIALIZED_ACCEPT, [1]) ;; esac ;; *486-*-bsdi* | *-netbsd* | *-freebsd* | *-apple-darwin* | *-dec-osf* | *-qnx) APR_SETVAR(SINGLE_LISTEN_UNSERIALIZED_ACCEPT, [1]) ;; *-solaris2*) dnl This is a hack -- we should be using AC_TRY_RUN instead ap_platform_runtime_link_flag="-R" dnl solaris 8 and above don't have a thundering herd dnl not sure about rev's before this one. case `uname -r` in 5.[[567]]*) ;; * ) APR_SETVAR(SINGLE_LISTEN_UNSERIALIZED_ACCEPT, [1]) ;; esac ;; *cygwin*) APR_SETVAR(SINGLE_LISTEN_UNSERIALIZED_ACCEPT, [1]) ;; *mingw32*) APR_ADDTO(INTERNAL_CPPFLAGS, [-DAP_DECLARE_EXPORT]) APR_SETIFNULL(ac_cv_func_times, [no]) APR_SETIFNULL(ac_cv_func_getpwnam, [no]) APR_SETIFNULL(ac_cv_func_getgrnam, [no]) ;; *aix*) aixver=`echo $host | sed 's/^[[^0-9]]*//' | sed 's/\.//g'` if test $aixver -ge 4320; then APR_SETVAR(SINGLE_LISTEN_UNSERIALIZED_ACCEPT, [1]) fi ;; *os390*) APR_SETVAR(SINGLE_LISTEN_UNSERIALIZED_ACCEPT, [1]) ;; esac APR_SETVAR(AP_NONBLOCK_WHEN_MULTI_LISTEN, [1]) dnl dnl Process command line arguments. This is done early in the process so the dnl user can get feedback quickly in case of an error. dnl dnl ### need to move some of the arguments "up here" dnl ## Check for programs AC_PATH_PROG(RM, rm) AC_PATH_PROG(PKGCONFIG, pkg-config) AC_PATH_PROG(RSYNC, rsync) AC_PROG_AWK AC_PROG_LN_S AC_CHECK_TOOL(RANLIB, ranlib, true) dnl AC_PATH_PROG(PERL_PATH, perl) AC_CHECK_PROGS(LYNX_PATH,[lynx links elinks], [lynx]) # Hard-coded install programs MKINSTALLDIRS="\$(abs_srcdir)/build/mkdir.sh" INSTALL="\$(LIBTOOL) --mode=install \$(abs_srcdir)/build/install.sh -c" APACHE_SUBST(MKINSTALLDIRS) APACHE_SUBST(INSTALL) dnl Various OS checks that apparently set required flags ifdef([AC_USE_SYSTEM_EXTENSIONS], [ AC_USE_SYSTEM_EXTENSIONS ], [ AC_AIX AC_MINIX ]) AC_ISC_POSIX # Ensure that satisfactory versions of apr and apr-util are # found if external copies are configured. if test "${apr_found}" = "yes"; then # Require at least APR 1.3.x otherwise fail APACHE_CHECK_APxVER([apr], 1, 3) fi if test "${apu_found}" = "yes"; then # Require at least APR-util 1.3.x otherwise fail if test "${apr_found}" = "yes"; then # we need to add the APR includes to CPPFLAGS apu_ckver_CPPFLAGS="$CPPFLAGS" CPPFLAGS="$CPPFLAGS `$apr_config --includes`" APACHE_CHECK_APxVER([apu], 1, 3) CPPFLAGS="$apu_ckver_CPPFLAGS" else APACHE_CHECK_APxVER([apu], 1, 3) fi fi dnl Check for what we can generate dependency files with APR_CHECK_DEPEND dnl ## Check for libraries dnl ## Check for header files dnl I think these are just used all over the place, so just check for dnl them at the base of the tree. If some are specific to a single dnl directory, they should be moved (Comment #Spoon) dnl Regarding standard header files: AC_HEADER_STDC doesn't set symbols dnl HAVE_STRING_H, HAVE_STDLIB_H, etc., so those are checked for dnl explicitly so that the normal HAVE_xxx_H symbol is defined. AC_HEADER_STDC AC_CHECK_HEADERS( \ string.h \ limits.h \ unistd.h \ sys/socket.h \ pwd.h \ grp.h \ strings.h \ sys/prctl.h \ sys/processor.h \ sys/sem.h \ sys/sdt.h \ sys/loadavg.h ) AC_HEADER_SYS_WAIT dnl ## Check for typedefs, structures, and compiler characteristics. AC_C_CONST dnl ## Check for library functions dnl ## sqrt() only needed in support/ab.c saved_LIBS="$LIBS" LIBS="" AC_SEARCH_LIBS(sqrt, m) MATH_LIBS="$LIBS" APACHE_SUBST(MATH_LIBS) LIBS="$saved_LIBS" saved_LIBS="$LIBS" LIBS="" AC_SEARCH_LIBS(crypt, crypt) CRYPT_LIBS="$LIBS" APACHE_SUBST(CRYPT_LIBS) LIBS="$saved_LIBS" dnl See Comment #Spoon AC_CHECK_FUNCS( \ getpwnam \ getgrnam \ initgroups \ bindprocessor \ prctl \ timegm \ getpgid \ fopen64 \ getloadavg ) dnl confirm that a void pointer is large enough to store a long integer APACHE_CHECK_VOID_PTR_LEN AC_CACHE_CHECK([for gettid()], ac_cv_gettid, [AC_TRY_RUN(#define _GNU_SOURCE #include #include #include int main(int argc, char **argv) { pid_t t = syscall(SYS_gettid); return t == -1 ? 1 : 0; }, [ac_cv_gettid=yes], [ac_cv_gettid=no], [ac_cv_gettid=no])]) if test "$ac_cv_gettid" = "yes"; then AC_DEFINE(HAVE_GETTID, 1, [Define if you have gettid()]) fi dnl ## Check for the tm_gmtoff field in struct tm to get the timezone diffs AC_CACHE_CHECK([for tm_gmtoff in struct tm], ac_cv_struct_tm_gmtoff, [AC_TRY_COMPILE([#include #include ], [struct tm tm; tm.tm_gmtoff;], ac_cv_struct_tm_gmtoff=yes, ac_cv_struct_tm_gmtoff=no)]) if test "$ac_cv_struct_tm_gmtoff" = "yes"; then AC_DEFINE(HAVE_GMTOFF, 1, [Define if struct tm has a tm_gmtoff field]) fi dnl ## Set up any appropriate OS-specific environment variables for apachectl case $host in *aix*) # for 32-bit builds, increase MAXDATA to allow lots of threads if test x$OBJECT_MODE != x64; then OS_SPECIFIC_VARS="LDR_CNTRL=\"MAXDATA=0x80000000\" ; export LDR_CNTRL ;" fi OS_SPECIFIC_VARS="$OS_SPECIFIC_VARS AIXTHREAD_SCOPE=S ; export AIXTHREAD_SCOPE" OS_SPECIFIC_VARS="$OS_SPECIFIC_VARS ; AIXTHREAD_MUTEX_DEBUG=OFF ; export AIXTHREAD_MUTEX_DEBUG" OS_SPECIFIC_VARS="$OS_SPECIFIC_VARS ; AIXTHREAD_RWLOCK_DEBUG=OFF ; export AIXTHREAD_RWLOCK_DEBUG" OS_SPECIFIC_VARS="$OS_SPECIFIC_VARS ; AIXTHREAD_COND_DEBUG=OFF ; export AIXTHREAD_COND_DEBUG" OS_SPECIFIC_VARS="$OS_SPECIFIC_VARS ; SPINLOOPTIME=1000 ; export SPINLOOPTIME" OS_SPECIFIC_VARS="$OS_SPECIFIC_VARS ; YIELDLOOPTIME=8 ; export YIELDLOOPTIME" OS_SPECIFIC_VARS="$OS_SPECIFIC_VARS ; MALLOCMULTIHEAP=considersize,heaps:8 ; export MALLOCMULTIHEAP" ;; *os390*) OS_SPECIFIC_VARS="export _CEE_RUNOPTS=\"STACK(,,ANY)\" ; export _EDC_ADD_ERRNO2=1" ;; *) OS_SPECIFIC_VARS="" esac AC_ARG_WITH(port,APACHE_HELP_STRING(--with-port=PORT,Port on which to listen (default is 80)), [if test "$withval" = "yes"; then AC_MSG_ERROR('option --with-port requires a value (the TCP port number)'); else PORT="$withval"; fi], [PORT=80]) AC_ARG_WITH(sslport,APACHE_HELP_STRING(--with-sslport=SSLPORT,Port on which to securelisten (default is 443)), [if test "$withval" = "yes"; then AC_MSG_ERROR('option --with-sslport requires a value (the SSL TCP port number)'); else SSLPORT="$withval"; fi], [SSLPORT=443]) DTRACE=true AC_ARG_ENABLE(dtrace,APACHE_HELP_STRING(--enable-dtrace,Enable DTrace probes), [ enable_dtrace=$enableval if test "$enableval" = "yes"; then APR_ADDTO(CPPFLAGS, -DAPR_DTRACE_PROVIDER) AC_MSG_ERROR('DTrace Support in the build system is not complete. Patches Welcome!') fi ], [ enable_dtrace=no ]) dnl Disabled dtrace build for now. enable_dtrace=no case $host in *-solaris2*) if test $enable_dtrace = "yes" -a "$ac_cv_header_sys_sdt_h" = "yes"; then AC_DEFINE(AP_ENABLE_DTRACE, 1, [Enable DTrace probes]) DTRACE="/usr/sbin/dtrace $DTRACEFLAGS" test -f include/apache_probes.h || $DTRACE -h -s apache_probes.d -o include/apache_probes.h fi ;; esac APACHE_SUBST(DTRACE) AC_ARG_ENABLE(hook-probes,APACHE_HELP_STRING(--enable-hook-probes,Enable APR hook probes), [ if test "$enableval" = "yes"; then AC_DEFINE(AP_HOOK_PROBES_ENABLED, 1, [Enable the APR hook probes capability, reading from ap_hook_probes.h]) APR_ADDTO(INTERNAL_CPPFLAGS, -DAP_HOOK_PROBES_ENABLED) fi ])dnl AC_ARG_ENABLE(exception-hook,APACHE_HELP_STRING(--enable-exception-hook,Enable fatal exception hook), [ if test "$enableval" = "yes"; then AC_DEFINE(AP_ENABLE_EXCEPTION_HOOK, 1, [Allow modules to run hook after a fatal exception]) fi ])dnl AC_ARG_ENABLE(load-all-modules,APACHE_HELP_STRING(--enable-load-all-modules,Load all modules), [ LOAD_ALL_MODULES=$enableval AC_MSG_NOTICE([Setting "LOAD_ALL_MODULES" to $LOAD_ALL_MODULES]) ], [ LOAD_ALL_MODULES="no" ]) AC_ARG_ENABLE(maintainer-mode,APACHE_HELP_STRING(--enable-maintainer-mode,Turn on debugging and compile time warnings and load all compiled modules), [ if test "$enableval" = "yes"; then APR_ADDTO(NOTEST_CPPFLAGS, -DAP_DEBUG) if test "$GCC" = "yes"; then APACHE_ADD_GCC_CFLAG([-std=c89]) APACHE_ADD_GCC_CFLAG([-Werror]) APACHE_ADD_GCC_CFLAG([-Wall]) APACHE_ADD_GCC_CFLAG([-Wstrict-prototypes]) APACHE_ADD_GCC_CFLAG([-Wmissing-prototypes]) APACHE_ADD_GCC_CFLAG([-Wmissing-declarations]) APACHE_ADD_GCC_CFLAG([-Wdeclaration-after-statement]) APACHE_ADD_GCC_CFLAG([-Wpointer-arith]) APACHE_ADD_GCC_CFLAG([-Wformat]) APACHE_ADD_GCC_CFLAG([-Wformat-security]) APACHE_ADD_GCC_CFLAG([-Wunused]) elif test "$AIX_XLC" = "yes"; then APR_ADDTO(NOTEST_CFLAGS,-qfullpath -qinitauto=FE -qcheck=all -qinfo=pro) fi if test "x$enable_load_all_modules" = "x"; then LOAD_ALL_MODULES=yes AC_MSG_NOTICE([Maintainer mode setting "LOAD_ALL_MODULES" to $LOAD_ALL_MODULES]) fi if test "x$enable_bucketeer" = "x"; then enable_bucketeer=yes AC_MSG_NOTICE([Maintainer mode setting "enable_bucketeer" to yes]) fi fi ])dnl AC_ARG_ENABLE(debugger-mode,APACHE_HELP_STRING(--enable-debugger-mode,Turn on debugging and compile time warnings and turn off optimization), [ if test "$enableval" = "yes"; then APR_ADDTO(NOTEST_CPPFLAGS, -DAP_DEBUG) if test "$GCC" = "yes"; then APACHE_ADD_GCC_CFLAG([-O0]) APACHE_ADD_GCC_CFLAG([-Wall]) APACHE_ADD_GCC_CFLAG([-Wstrict-prototypes]) APACHE_ADD_GCC_CFLAG([-Wmissing-prototypes]) APACHE_ADD_GCC_CFLAG([-Wmissing-declarations]) APACHE_ADD_GCC_CFLAG([-Wdeclaration-after-statement]) APACHE_ADD_GCC_CFLAG([-Werror=declaration-after-statement]) APACHE_ADD_GCC_CFLAG([-Wpointer-arith]) APACHE_ADD_GCC_CFLAG([-Wformat]) APACHE_ADD_GCC_CFLAG([-Wformat-security]) APACHE_ADD_GCC_CFLAG([-Werror=format-security]) elif test "$AIX_XLC" = "yes"; then APR_ADDTO(NOTEST_CFLAGS,-qfullpath -qinitauto=FE -qcheck=all -qinfo=pro) fi fi ])dnl dnl Conditionally enable PIE support for GNU toolchains. AC_ARG_ENABLE(pie,APACHE_HELP_STRING(--enable-pie,Build httpd as a Position Independent Executable)) if test "$enable_pie" = "yes"; then AC_CACHE_CHECK([whether $CC accepts PIE flags], [ap_cv_cc_pie], [ save_CFLAGS=$CFLAGS save_LDFLAGS=$LDFLAGS CFLAGS="$CFLAGS -fPIE" LDFLAGS="$LDFLAGS -pie" AC_TRY_RUN([static int foo[30000]; int main () { return 0; }], [ap_cv_cc_pie=yes], [ap_cv_cc_pie=no], [ap_cv_cc_pie=yes]) CFLAGS=$save_CFLAGS LDFLAGS=$save_LDFLAGS ]) if test "$ap_cv_cc_pie" = "yes"; then PICFLAGS="-fPIE" PILDFLAGS="-pie" else AC_ERROR([--enable-pie requested but $CC failed using PIE flags]) fi fi APACHE_SUBST(PICFLAGS) APACHE_SUBST(PILDFLAGS) prefix="$orig_prefix" APACHE_ENABLE_MODULES dnl reading config stubs esyscmd(./build/config-stubs .) APACHE_SUBST(progname) APACHE_SUBST(OS) APACHE_SUBST(OS_DIR) APACHE_SUBST(BUILTIN_LIBS) APACHE_SUBST(SHLIBPATH_VAR) APACHE_SUBST(OS_SPECIFIC_VARS) PRE_SHARED_CMDS='echo ""' POST_SHARED_CMDS='echo ""' dnl apache_need_shared tells us if Apache modules are being built as DSOs if test "$apache_need_shared" = "yes"; then if test -f $ac_aux_dir/ltconfig; then $SHELL $ac_aux_dir/ltconfig --output=shlibtool --disable-static --srcdir=$ac_aux_dir --cache-file=./config.cache $ac_aux_dir/ltmain.sh fi shared_build="shared-build" fi dnl enable_so tells us if *any* modules can be built as DSOs if test "$enable_so" = "yes" -o "$enable_so" = "static"; then case $host in *-ibm-aix*) APR_ADDTO(HTTPD_LDFLAGS, [-Wl,-uXML_Parse -Wl,-bE:$abs_builddir/server/httpd.exp]) APR_ADDTO(SH_LDFLAGS, [\$(EXTRA_LDFLAGS) \$(EXTRA_LIBS)]) APR_ADDTO(UTIL_LDFLAGS, [-Wl,-uXML_Parse]) ;; *os390) APR_ADDTO(HTTPD_LDFLAGS, [--main=$abs_srcdir/server/main.o --core-dll=$abs_srcdir/apachecore.dll]) APR_ADDTO(SH_LDFLAGS, [--core-dll=$abs_srcdir/apachecore.dll]) esac MOD_SO_ENABLED=yes fi AC_SUBST(MOD_SO_ENABLED) APACHE_SUBST(PRE_SHARED_CMDS) APACHE_SUBST(POST_SHARED_CMDS) APACHE_SUBST(shared_build) AC_ARG_WITH(program-name, APACHE_HELP_STRING(--with-program-name,alternate executable name),[ progname="$withval" ], [ progname="httpd"] ) # SuExec parameters AC_ARG_WITH(suexec-bin, APACHE_HELP_STRING(--with-suexec-bin,Path to suexec binary),[ AC_DEFINE_UNQUOTED(SUEXEC_BIN, "$withval", [Path to suexec binary] ) ] ) AC_ARG_WITH(suexec-caller, APACHE_HELP_STRING(--with-suexec-caller,User allowed to call SuExec),[ AC_DEFINE_UNQUOTED(AP_HTTPD_USER, "$withval", [User allowed to call SuExec] ) ] ) AC_ARG_WITH(suexec-userdir, APACHE_HELP_STRING(--with-suexec-userdir,User subdirectory),[ AC_DEFINE_UNQUOTED(AP_USERDIR_SUFFIX, "$withval", [User subdirectory] ) ] ) AC_ARG_WITH(suexec-docroot, APACHE_HELP_STRING(--with-suexec-docroot,SuExec root directory),[ AC_DEFINE_UNQUOTED(AP_DOC_ROOT, "$withval", [SuExec root directory] ) ] ) AC_ARG_WITH(suexec-uidmin, APACHE_HELP_STRING(--with-suexec-uidmin,Minimal allowed UID),[ AC_DEFINE_UNQUOTED(AP_UID_MIN, $withval, [Minimum allowed UID] ) ] ) AC_ARG_WITH(suexec-gidmin, APACHE_HELP_STRING(--with-suexec-gidmin,Minimal allowed GID),[ AC_DEFINE_UNQUOTED(AP_GID_MIN, $withval, [Minimum allowed GID] ) ] ) AC_ARG_WITH(suexec-logfile, APACHE_HELP_STRING(--with-suexec-logfile,Set the logfile),[ if test "x$withval" = "xyes"; then AC_MSG_ERROR([log filename required for --with-suexec-logfile option]) elif test "x$withval" != "xno"; then AC_DEFINE_UNQUOTED(AP_LOG_EXEC, "$withval", [SuExec log file]) fi ]) AC_ARG_WITH(suexec-syslog, APACHE_HELP_STRING(--with-suexec-syslog,Use syslog for suexec logging),[ if test $withval = "yes"; then if test "x${with_suexec_logfile}" != "xno"; then AC_MSG_NOTICE([hint: use "--without-suexec-logfile --with-suexec-syslog"]) AC_MSG_ERROR([suexec does not support both logging to file and syslog]) fi AC_CHECK_FUNCS([vsyslog], [], [ AC_MSG_ERROR([cannot support syslog from suexec without vsyslog()])]) AC_DEFINE(AP_LOG_SYSLOG, 1, [SuExec log to syslog]) fi ]) AC_ARG_WITH(suexec-safepath, APACHE_HELP_STRING(--with-suexec-safepath,Set the safepath),[ AC_DEFINE_UNQUOTED(AP_SAFE_PATH, "$withval", [safe shell path for SuExec] ) ] ) AC_ARG_WITH(suexec-umask, APACHE_HELP_STRING(--with-suexec-umask,umask for suexec'd process),[ AC_DEFINE_UNQUOTED(AP_SUEXEC_UMASK, 0$withval, [umask for suexec'd process] ) ] ) INSTALL_SUEXEC=setuid AC_ARG_ENABLE([suexec-capabilities], APACHE_HELP_STRING(--enable-suexec-capabilities,Use Linux capability bits not setuid root suexec), [ INSTALL_SUEXEC=caps AC_DEFINE(AP_SUEXEC_CAPABILITIES, 1, [Enable if suexec is installed with Linux capabilities, not setuid]) ]) APACHE_SUBST(INSTALL_SUEXEC) dnl APR should go after the other libs, so the right symbols can be picked up if test x${apu_found} != xobsolete; then AP_LIBS="$AP_LIBS `$apu_config --avoid-ldap --link-libtool --libs`" fi AP_LIBS="$AP_LIBS `$apr_config --link-libtool --libs`" APACHE_SUBST(AP_LIBS) APACHE_SUBST(AP_BUILD_SRCLIB_DIRS) APACHE_SUBST(AP_CLEAN_SRCLIB_DIRS) AC_DEFINE(AP_USING_AUTOCONF, 1, [Using autoconf to configure Apache]) if test "$SINGLE_LISTEN_UNSERIALIZED_ACCEPT" = "1"; then AC_DEFINE(SINGLE_LISTEN_UNSERIALIZED_ACCEPT, 1, [This platform doesn't suffer from the thundering herd problem]) fi if test "$AP_NONBLOCK_WHEN_MULTI_LISTEN" = "1"; then AC_DEFINE(AP_NONBLOCK_WHEN_MULTI_LISTEN, 1, [Listening sockets are non-blocking when there are more than 1]) fi APR_CHECK_APR_DEFINE(APR_HAVE_IPV6) AC_ARG_ENABLE(v4-mapped,APACHE_HELP_STRING(--enable-v4-mapped,Allow IPv6 sockets to handle IPv4 connections), [ v4mapped=$enableval ], [ case $host in *freebsd[[1234]].*) v4mapped=yes ;; *freebsd*|*netbsd*|*openbsd*) v4mapped=no ;; *) v4mapped=yes ;; esac if ap_mpm_is_enabled winnt; then dnl WinNT MPM doesn't support this. v4mapped=no fi ]) if test $v4mapped = "yes" -a $ac_cv_define_APR_HAVE_IPV6 = "yes"; then AC_DEFINE(AP_ENABLE_V4_MAPPED, 1, [Allow IPv4 connections on IPv6 listening sockets]) fi APACHE_FAST_OUTPUT(Makefile modules/Makefile srclib/Makefile) APACHE_FAST_OUTPUT(os/Makefile server/Makefile) APACHE_FAST_OUTPUT(support/Makefile) if test -d ./test; then APACHE_FAST_OUTPUT(test/Makefile) fi dnl ## Finalize the variables AC_MSG_NOTICE([]) AC_MSG_NOTICE([Restore user-defined environment settings...]) AC_MSG_NOTICE([]) APACHE_CONF_SEL_CC=${CC} APACHE_CONF_SEL_CFLAGS="${CFLAGS} ${EXTRA_CFLAGS} ${NOTEST_CFLAGS}" APACHE_CONF_SEL_CPPFLAGS="${CPPFLAGS} ${EXTRA_CPPFLAGS} ${NOTEST_CPPFLAGS}" APACHE_CONF_SEL_LDFLAGS="${LDFLAGS} ${EXTRA_LDFLAGS} ${NOTEST_LDFLAGS}" APACHE_CONF_SEL_LIBS="${LIBS} ${EXTRA_LIBS} ${NOTEST_LIBS}" APACHE_CONF_SEL_CPP=${CPP} APR_RESTORE_THE_ENVIRONMENT(CPPFLAGS, EXTRA_) APR_RESTORE_THE_ENVIRONMENT(CFLAGS, EXTRA_) APR_RESTORE_THE_ENVIRONMENT(CXXFLAGS, EXTRA_) APR_RESTORE_THE_ENVIRONMENT(LDFLAGS, EXTRA_) APR_RESTORE_THE_ENVIRONMENT(LIBS, EXTRA_) APR_RESTORE_THE_ENVIRONMENT(INCLUDES, EXTRA_) AC_MSG_NOTICE([]) AC_MSG_NOTICE([Construct makefiles and header files...]) AC_MSG_NOTICE([]) APACHE_GEN_CONFIG_VARS dnl ## Build modules.c rm -f modules.c echo $MODLIST | $AWK -f $srcdir/build/build-modules-c.awk > modules.c APR_EXPAND_VAR(ap_prefix, $prefix) AC_DEFINE_UNQUOTED(HTTPD_ROOT, "${ap_prefix}", [Root directory of the Apache install area]) AC_DEFINE_UNQUOTED(SERVER_CONFIG_FILE, "${rel_sysconfdir}/${progname}.conf", [Location of the config file, relative to the Apache root directory]) AC_DEFINE_UNQUOTED(AP_TYPES_CONFIG_FILE, "${rel_sysconfdir}/mime.types", [Location of the MIME types config file, relative to the Apache root directory]) perlbin=`$ac_aux_dir/PrintPath perl` if test "x$perlbin" = "x"; then perlbin="/replace/with/path/to/perl/interpreter" fi AC_SUBST(perlbin) dnl If we are running on BSD/OS, we need to use the BSD .include syntax. BSD_MAKEFILE=no ap_make_include=include ap_make_delimiter=' ' case $host in *bsdi*) # Check whether they've installed GNU make if make --version > /dev/null 2>&1; then true else BSD_MAKEFILE=yes ap_make_include=.include ap_make_delimiter='"' fi ;; esac AC_SUBST(ap_make_include) AC_SUBST(ap_make_delimiter) dnl Ensure that docs/conf is created. test -d docs/conf||$mkdir_p docs/conf AC_CONFIG_FILES(docs/conf/httpd.conf docs/conf/extra/httpd-autoindex.conf docs/conf/extra/httpd-dav.conf docs/conf/extra/httpd-default.conf docs/conf/extra/httpd-info.conf docs/conf/extra/httpd-languages.conf docs/conf/extra/httpd-manual.conf docs/conf/extra/httpd-mpm.conf docs/conf/extra/httpd-multilang-errordoc.conf docs/conf/extra/httpd-ssl.conf docs/conf/extra/httpd-userdir.conf docs/conf/extra/httpd-vhosts.conf docs/conf/extra/proxy-html.conf include/ap_config_layout.h support/apxs support/apachectl support/dbmmanage support/envvars-std support/log_server_status support/logresolve.pl support/phf_abuse_log.cgi support/split-logfile build/rules.mk build/pkg/pkginfo build/config_vars.sh) AC_CONFIG_COMMANDS([default], [true], [APACHE_GEN_MAKEFILES]) AC_OUTPUT AC_MSG_NOTICE([summary of build options: Server Version: ${HTTPD_VERSION} Install prefix: ${prefix} C compiler: ${APACHE_CONF_SEL_CC} CFLAGS: ${APACHE_CONF_SEL_CFLAGS} CPPFLAGS: ${APACHE_CONF_SEL_CPPFLAGS} LDFLAGS: ${APACHE_CONF_SEL_LDFLAGS} LIBS: ${APACHE_CONF_SEL_LIBS} C preprocessor: ${APACHE_CONF_SEL_CPP} ]) httpd-2.4.41/Makefile.win0000644000000000000500000015076513446306656013523 0ustar rootsrc# Makefile for Windows NT and Windows 95/98/2000 # Targets are: # _buildr - build Apache in Release mode # _buildd - build Apache in Debug mode # installr - build and install a Release build # installd - build and install a Debug build # clean - remove (most) generated files # _cleanr - remove (most) files generated by a Release build # _cleand - remove (most) files generated by a Debug build # _browse - build the browse info file # # The following install defaults may be customized; # # Option Default # INSTDIR /Apache24 # PORT 80 # SSLPORT 443 # DOMAINNAME example.com # SERVERNAME www.example.com # SERVERNAME admin@example.com # # ALL (unset) Includes additional modules for build testing # # Provide a DBD_LIST argument after configuring LIB and INCLUDE with # the SDK paths of the corresponding client support libraries. # The ODBC driver is always built on Windows # # DBD_LIST="sqlite3 pgsql oracle mysql freetds" # # Provide a DBM_LIST argument after configuring LIB and INCLUDE with # the SDK paths of the corresponding client support libraries. # The sdbm driver is always built in. # # DBM_LIST="db gdbm" # # For example; # # nmake -f Makefile.win PORT=80 INSTDIR="d:\Program Files\Apache" installr # # Be aware that certain awk's will not accept backslashed names, # so the server root should be given in forward slashes (quoted), # preferably with the drive designation! !IF EXIST("Apache.sln") && ([devenv /help > NUL 2>&1] == 0) \ && !defined(USEMAK) && !defined(USEDSW) USESLN=1 USEMAK=0 USEDSW=0 !ELSEIF EXIST("httpd.mak") && !defined(USEDSW) USESLN=0 USEMAK=1 USEDSW=0 !ELSE USESLN=0 USEMAK=0 USEDSW=1 !ENDIF # APU 1.6 (and up?) !IF EXIST("srclib\apr-util\xml\xml.mak") EXPAT=xml EXPBCK = .. !ELSE EXPAT=xml\expat\lib EXPBCK = ..\..\.. !ENDIF default: _buildr !IF ("$(CTARGET)" == "") && ($(USESLN) == 1) CTARGET=/build !ENDIF !IF EXIST("srclib\apr\include\apu.h") TLP=Apache-apr2 UTILDIR=apr !ELSEIF !EXIST("srclib\apr") || !EXIST("srclib\apr-util") || !EXIST("srclib\apr-iconv") !MESSAGE Please check out or download and unpack the Apache Portability Runtime !MESSAGE sources (apr, apr-iconv and apr-util) into your srclib dir. !MESSAGE Apache cannot build without these libraries! !MESSAGE !ERROR Need srclib\ apr, apr-iconv and apr-util !ELSE TLP=Apache UTILDIR=apr-util !ENDIF !IF !EXIST("srclib\expat") && !EXIST("srclib\apr-util\xml\expat") !MESSAGE Please check out or download and unpack the current expat library source !MESSAGE under your srclib dir for apr 2.x, or srclib\apr-util\xml\expat for apr 1.x !MESSAGE Apache cannot build without this library! !MESSAGE !ERROR Need srclib\expat or srclib\apr-util\xml\expat !ENDIF !IF !EXIST("srclib\pcre") !MESSAGE Please check out or download and unpack the current PCRE library source !MESSAGE under your srclib dir, and compile the pcre.dll with CMake options !MESSAGE BUILD_SHARED_LIBS and CMAKE_BUILD_TYPE RelWithDebInfo. !MESSAGE Apache cannot build without this library! !MESSAGE !ERROR Need srclib\pcre !ENDIF # Note; _tryfoo: blocks are used only by the msvc developer studio environment # to 'fix up' the build, since conditional dependencies aren't supported. # !IF EXIST("srclib\openssl") !IF "$(LONG)" == "Debug" && EXIST("srclib\openssl\out32dll.dbg\openssl.exe") SSLBIN=out32dll.dbg SSLAPP=out32dll.dbg SSLCRP=libeay32 SSLLIB=ssleay32 !ELSEIF EXIST("srclib\openssl\libcrypto.lib") !MESSAGE Building with OpenSSL 1.1.0 !MESSAGE SSLBIN=. SSLAPP=apps SSLCRP=libcrypto SSLLIB=libssl SSLOPT=_HAVE_OSSL110=1 !ELSE SSLBIN=out32dll SSLAPP=out32dll SSLCRP=libeay32 SSLLIB=ssleay32 !ENDIF _tryssl: !IF $(USEMAK) == 1 cd modules\ssl $(MAKE) $(MAKEOPT) $(SSLOPT) -f mod_ssl.mak CFG="mod_ssl - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd support $(MAKE) $(MAKEOPT) $(SSLOPT) -f abs.mak CFG="abs - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd .. !ELSEIF $(USESLN) == 1 devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project mod_ssl devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project abs !ELSE @msdev $(TLP).dsw /USEENV /MAKE \ "mod_ssl - Win32 $(LONG)" \ "abs - Win32 $(LONG)" /NORECURSE $(CTARGET) !ENDIF !ELSE # NOT EXIST("srclib\openssl") _tryssl: @echo ----- @echo mod_ssl and ab/ssl will not build unless openssl is installed @echo in srclib\openssl. They must be precompiled using the @echo ms/ntdll.mak file, see srclib\openssl\INSTALL.W32. The most @echo recent version confirmed to build with mod_ssl and ab is 0.9.8d. @echo Available from http://www.openssl.org/ !ENDIF # NOT EXIST("srclib\openssl") !IF EXIST("srclib\zlib") _tryzlib: !IF $(USEMAK) == 1 cd modules\filters $(MAKE) $(MAKEOPT) -f mod_deflate.mak CFG="mod_deflate - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !ELSEIF $(USESLN) == 1 devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project mod_deflate !ELSE @msdev $(TLP).dsw /USEENV /MAKE \ "mod_deflate - Win32 $(LONG)" /NORECURSE $(CTARGET) !ENDIF !ELSE # NOT EXIST("srclib\zlib") _tryzlib: @echo ----- @echo mod_deflate will not build unless zlib is built in srclib\zlib. @echo Version 1.2.1 and later available from http://www.gzip.org/zlib/ @echo built w/ nmake -f win32/Makefile.msc will satisfy this requirement. !ENDIF !IF EXIST("srclib\libxml2") _tryxml: !IF $(USEMAK) == 1 cd modules\filters $(MAKE) $(MAKEOPT) -f mod_proxy_html.mak CFG="mod_proxy_html - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_xml2enc.mak CFG="mod_xml2enc - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !ELSEIF $(USESLN) == 1 devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project mod_proxy_html devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project mod_xml2enc !ELSE @msdev $(TLP).dsw /USEENV /MAKE \ "mod_proxy_html - Win32 $(LONG)" /NORECURSE $(CTARGET) @msdev $(TLP).dsw /USEENV /MAKE \ "mod_xml2enc - Win32 $(LONG)" /NORECURSE $(CTARGET) !ENDIF !ELSE # NOT EXIST("srclib\libxml2") _tryxml: @echo ----- @echo mod_proxy_html and mod_xml2enc will not build unless libxml2 is @echo built in srclib\libxml2. Version 2.7.7 and later available from @echo http://xmlsoft.org/ will satisfy this requirement. !ENDIF !IF EXIST("srclib\lua") _trylua: !IF $(USEMAK) == 1 cd modules\lua $(MAKE) $(MAKEOPT) -f mod_lua.mak CFG="mod_lua - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !ELSEIF $(USESLN) == 1 devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project mod_lua !ELSE @msdev $(TLP).dsw /USEENV /MAKE \ "mod_lua - Win32 $(LONG)" /NORECURSE $(CTARGET) !ENDIF !ELSE # NOT EXIST("srclib\lua") _trylua: @echo ----- @echo mod_lua will not build unless lua is installed in srclib\lua. @echo Version 5.1 includes an etc\luavs.bat that will satisfy this requirement. !ENDIF !IF EXIST("srclib\nghttp2") _trynghttp2: !IF $(USEMAK) == 1 cd modules\http2 $(MAKE) $(MAKEOPT) -f mod_http2.mak CFG="mod_http2 - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_proxy_http2.mak CFG="mod_proxy_http2 - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !ELSEIF $(USESLN) == 1 devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project mod_http2 devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project mod_proxy_http2 !ELSE @msdev $(TLP).dsw /USEENV /MAKE \ "mod_http2 - Win32 $(LONG)" /NORECURSE $(CTARGET) @msdev $(TLP).dsw /USEENV /MAKE \ "mod_proxy_http2 - Win32 $(LONG)" /NORECURSE $(CTARGET) !ENDIF !ELSE # NOT EXIST("srclib\nghttp2") _trynghttp2: @echo ----- @echo mod_http2 will not build unless nghttp2 is installed in srclib\nghttp2. @echo Version 1.0 includes an lib\makefile.msvc that will satisfy this @echo requirement. !ENDIF !IF EXIST("srclib\brotli") _trybrotli: !IF $(USEMAK) == 1 cd modules\filters $(MAKE) $(MAKEOPT) -f mod_brotli.mak CFG="mod_brotli - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !ELSEIF $(USESLN) == 1 devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project mod_brotli !ELSE @msdev $(TLP).dsw /USEENV /MAKE \ "mod_brotli - Win32 $(LONG)" /NORECURSE $(CTARGET) !ENDIF !ELSE # NOT EXIST("srclib\brotli") _trybrotli: @echo ----- @echo mod_brotli will not build unless brotli is built in srclib\brotli. @echo Version 1.0.0 and later available from https://github.com/google/brotli/releases @echo build with: @echo cmake -G "NMake Makefiles" -DCMAKE_BUILD_TYPE=Release -DBUILD_SHARED_LIBS=OFF @echo nmake !ENDIF !IF EXIST("srclib\openssl") && EXIST("srclib\jansson") && EXIST("srclib\curl") _trymd: !IF $(USEMAK) == 1 cd modules\md $(MAKE) $(MAKEOPT) $(SSLOPT) -f mod_md.mak CFG="mod_md - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !ELSEIF $(USESLN) == 1 devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project mod_md !ELSE @msdev $(TLP).dsw /USEENV /MAKE \ "mod_md - Win32 $(LONG)" /NORECURSE $(CTARGET) !ENDIF !ELSE # NOT EXIST("srclib\openssl") && EXIST("srclib\jansson") && EXIST("srclib\curl") _trymd: @echo ----- @echo mod_md will not build unless OpenSSL, Jansson and Curl are built and placed @echo in srclib. Example: srclib/openssl, srclib/jansson and srclib/curl !ENDIF _trydb: !IF $(USEMAK) == 1 cd srclib\$(UTILDIR)\dbd for %d in (odbc $(DBD_LIST)) do \ $(MAKE) $(MAKEOPT) -f apr_dbd_%d.mak CFG="apr_dbd_%d - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\dbm for %d in ($(DBM_LIST) x) do if not %d == x \ $(MAKE) $(MAKEOPT) -f apr_dbm_%d.mak CFG="apr_dbm_%d - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\..\.. !ELSEIF $(USESLN) == 1 for %d in (odbc $(DBD_LIST)) do \ devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project apr_dbd_%d for %d in ($(DBM_LIST) x) do if not %d == x \ devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project apr_dbm_%d !ELSE @for %d in (odbc $(DBD_LIST)) do \ msdev $(TLP).dsw /USEENV /MAKE \ "apr_dbd_%d - Win32 $(LONG)" /NORECURSE $(CTARGET) @for %d in ($(DBM_LIST) x) do if not %d == x \ msdev $(TLP).dsw /USEENV /MAKE \ "apr_dbm_%d - Win32 $(LONG)" /NORECURSE $(CTARGET) !ENDIF !IF "$(INSTDIR)" == "" INSTDIR=\Apache24 !ENDIF !IF "$(DOMAINNAME)" == "" DOMAINNAME=example.com !ENDIF !IF "$(SERVERNAME)" == "" SERVERNAME=www.$(DOMAINNAME) !ENDIF !IF "$(SERVERADMIN)" == "" SERVERADMIN=admin@$(DOMAINNAME) !ENDIF !IF "$(PORT)" == "" PORT=80 !ENDIF !IF "$(SSLPORT)" == "" SSLPORT=443 !ENDIF !IF "$(LONG)" == "" !MESSAGE !MESSAGE INSTDIR = $(INSTDIR) !MESSAGE DOMAINNAME = $(DOMAINNAME) !MESSAGE SERVERNAME = $(SERVERNAME) !MESSAGE SERVERADMIN = $(SERVERADMIN) !MESSAGE PORT = $(PORT) !IF EXIST("srclib\openssl") !MESSAGE SSLPORT = $(SSLPORT) !ENDIF !MESSAGE !MESSAGE To change these options use 'nmake -f Makefile.win [option=value]' !MESSAGE Example: nmake -f Makefile.win PORT=8080 !MESSAGE !MESSAGE !ENDIF !IFNDEF MAKEOPT # Only default the behavior if MAKEOPT= is omitted !IFDEF _NMAKE_VER # Microsoft NMake options MAKEOPT=-nologo !ELSEIF "$(MAKE)" == "make" # Borland make options? Not really supported (yet) MAKEOPT=-s -N !ENDIF !ENDIF _dummy: _browse: cd Browse bscmake.exe -nologo -Iu -o Apache.bsc *.sbr cd .. _buildr: @$(MAKE) $(MAKEOPT) -f Makefile.win SHORT=R LONG=Release _build _buildd: @$(MAKE) $(MAKEOPT) -f Makefile.win SHORT=D LONG=Debug _build installr: @$(MAKE) $(MAKEOPT) -f Makefile.win SHORT=R LONG=Release _build _install installd: @$(MAKE) $(MAKEOPT) -f Makefile.win SHORT=D LONG=Debug _build _install clean: _cleanr _cleand -if exist Browse\. rd /s Browse < << > nul y << !IF $(USEMAK) == 1 _cleanr: $(MAKE) $(MAKEOPT) -f Makefile.win SHORT=R LONG=Release CTARGET=CLEAN _build _cleand: $(MAKE) $(MAKEOPT) -f Makefile.win SHORT=D LONG=Debug CTARGET=CLEAN _build _build: echo Building Win32 $(LONG) targets ($(SHORT) suffixes) !IF !EXIST("srclib\apr-util") cd srclib\expat\lib $(MAKE) $(MAKEOPT) -f expat.mak CFG="expat - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\..\.. !ENDIF cd srclib\apr $(MAKE) $(MAKEOPT) -f apr.mak CFG="apr - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f libapr.mak CFG="libapr - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !IF EXIST("srclib\apr-util") cd srclib\apr-iconv $(MAKE) $(MAKEOPT) -f apriconv.mak CFG="apriconv - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f libapriconv.mak CFG="libapriconv - Win32 $(LONG)" RECURSE=0 $(CTARGET) !IF "$(CTARGET)" == "CLEAN" $(MAKE) $(MAKEOPT) -f build\modules.mk.win clean \ BUILD_MODE=$(LONG) BIND_MODE=shared API_SOURCE=. !ELSE cd ccs $(MAKE) $(MAKEOPT) -f Makefile.win all \ BUILD_MODE=$(LONG) BIND_MODE=shared cd ..\ces $(MAKE) $(MAKEOPT) -f Makefile.win all \ BUILD_MODE=$(LONG) BIND_MODE=shared cd .. !ENDIF cd ..\.. cd srclib\apr-util\$(EXPAT) $(MAKE) $(MAKEOPT) -f xml.mak CFG="xml - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd $(EXPBCK) $(MAKE) $(MAKEOPT) $(SSLOPT) -f aprutil.mak CFG="aprutil - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) $(SSLOPT) -f libaprutil.mak CFG="libaprutil - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ldap $(MAKE) $(MAKEOPT) -f apr_ldap.mak CFG="apr_ldap - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd .. !ELSE # DBD, DBM components live now in apr cd srclib\apr !ENDIF cd dbd for %d in (odbc $(DBD_LIST)) do \ $(MAKE) $(MAKEOPT) -f apr_dbd_%d.mak CFG="apr_dbd_%d - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd .. cd dbm for %d in ($(DBM_LIST) x) do if not %d == x \ $(MAKE) $(MAKEOPT) -f apr_dbm_%d.mak CFG="apr_dbm_%d - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd .. cd ..\.. cd server $(MAKE) $(MAKEOPT) -f gen_test_char.mak CFG="gen_test_char - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd .. $(MAKE) $(MAKEOPT) -f libhttpd.mak CFG="libhttpd - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f httpd.mak CFG="httpd - Win32 $(LONG)" RECURSE=0 $(CTARGET) # build ldap prior to authnz_ldap cd modules\ldap $(MAKE) $(MAKEOPT) -f mod_ldap.mak CFG="mod_ldap - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd modules\database $(MAKE) $(MAKEOPT) -f mod_dbd.mak CFG="mod_dbd - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd modules\aaa $(MAKE) $(MAKEOPT) -f mod_access_compat.mak CFG="mod_access_compat - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_allowmethods.mak CFG="mod_allowmethods - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_auth_basic.mak CFG="mod_auth_basic - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_auth_digest.mak CFG="mod_auth_digest - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_auth_form.mak CFG="mod_auth_form - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authn_anon.mak CFG="mod_authn_anon - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authn_core.mak CFG="mod_authn_core - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authn_dbd.mak CFG="mod_authn_dbd - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authn_dbm.mak CFG="mod_authn_dbm - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authn_file.mak CFG="mod_authn_file - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authn_socache.mak CFG="mod_authn_socache - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authnz_fcgi.mak CFG="mod_authnz_fcgi - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authnz_ldap.mak CFG="mod_authnz_ldap - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authz_core.mak CFG="mod_authz_core - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authz_dbd.mak CFG="mod_authz_dbd - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authz_dbm.mak CFG="mod_authz_dbm - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authz_groupfile.mak CFG="mod_authz_groupfile - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authz_host.mak CFG="mod_authz_host - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authz_owner.mak CFG="mod_authz_owner - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_authz_user.mak CFG="mod_authz_user - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd modules\arch\win32 $(MAKE) $(MAKEOPT) -f mod_isapi.mak CFG="mod_isapi - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\..\.. cd modules\cache $(MAKE) $(MAKEOPT) -f mod_cache.mak CFG="mod_cache - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_cache_disk.mak CFG="mod_cache_disk - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_cache_socache.mak CFG="mod_cache_socache - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_file_cache.mak CFG="mod_file_cache - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_socache_dbm.mak CFG="mod_socache_dbm - Win32 $(LONG)" RECURSE=0 $(CTARGET) # $(MAKE) $(MAKEOPT) -f mod_socache_dc.mak CFG="mod_socache_dc - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_socache_memcache.mak CFG="mod_socache_memcache - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_socache_shmcb.mak CFG="mod_socache_shmcb - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_socache_redis.mak CFG="mod_socache_redis - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd modules\core $(MAKE) $(MAKEOPT) -f mod_macro.mak CFG="mod_macro - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_watchdog.mak CFG="mod_watchdog - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd modules\cluster $(MAKE) $(MAKEOPT) -f mod_heartbeat.mak CFG="mod_heartbeat - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_heartmonitor.mak CFG="mod_heartmonitor - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd modules\dav\main $(MAKE) $(MAKEOPT) -f mod_dav.mak CFG="mod_dav - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\..\.. cd modules\dav\fs $(MAKE) $(MAKEOPT) -f mod_dav_fs.mak CFG="mod_dav_fs - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\..\.. cd modules\dav\lock $(MAKE) $(MAKEOPT) -f mod_dav_lock.mak CFG="mod_dav_lock - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\..\.. cd modules\debugging !IFDEF ALL $(MAKE) $(MAKEOPT) -f mod_bucketeer.mak CFG="mod_bucketeer - Win32 $(LONG)" RECURSE=0 $(CTARGET) !ENDIF $(MAKE) $(MAKEOPT) -f mod_dumpio.mak CFG="mod_dumpio - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd modules\echo !IFDEF ALL $(MAKE) $(MAKEOPT) -f mod_echo.mak CFG="mod_echo - Win32 $(LONG)" RECURSE=0 $(CTARGET) !ENDIF cd ..\.. !IFDEF ALL cd modules\examples $(MAKE) $(MAKEOPT) -f mod_case_filter.mak CFG="mod_case_filter - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_case_filter_in.mak CFG="mod_case_filter_in - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_example_hooks.mak CFG="mod_example_hooks - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_example_ipc.mak CFG="mod_example_ipc - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !ENDIF cd modules\filters !IF EXIST("srclib\brotli") $(MAKE) $(MAKEOPT) -f mod_brotli.mak CFG="mod_brotli - Win32 $(LONG)" RECURSE=0 $(CTARGET) !ENDIF $(MAKE) $(MAKEOPT) -f mod_buffer.mak CFG="mod_buffer - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_charset_lite.mak CFG="mod_charset_lite - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_data.mak CFG="mod_data - Win32 $(LONG)" RECURSE=0 $(CTARGET) !IF EXIST("srclib\zlib") $(MAKE) $(MAKEOPT) -f mod_deflate.mak CFG="mod_deflate - Win32 $(LONG)" RECURSE=0 $(CTARGET) !ENDIF $(MAKE) $(MAKEOPT) -f mod_ext_filter.mak CFG="mod_ext_filter - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_filter.mak CFG="mod_filter - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_include.mak CFG="mod_include - Win32 $(LONG)" RECURSE=0 $(CTARGET) !IF EXIST("srclib\libxml2") $(MAKE) $(MAKEOPT) -f mod_proxy_html.mak CFG="mod_proxy_html - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_xml2enc.mak CFG="mod_xml2enc - Win32 $(LONG)" RECURSE=0 $(CTARGET) !ENDIF $(MAKE) $(MAKEOPT) -f mod_ratelimit.mak CFG="mod_ratelimit - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_reflector.mak CFG="mod_reflector - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_reqtimeout.mak CFG="mod_reqtimeout - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_request.mak CFG="mod_request - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_sed.mak CFG="mod_sed - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_substitute.mak CFG="mod_substitute - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd modules\generators $(MAKE) $(MAKEOPT) -f mod_asis.mak CFG="mod_asis - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_autoindex.mak CFG="mod_autoindex - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_cgi.mak CFG="mod_cgi - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_info.mak CFG="mod_info - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_status.mak CFG="mod_status - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd modules\http $(MAKE) $(MAKEOPT) -f mod_mime.mak CFG="mod_mime - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd modules\loggers $(MAKE) $(MAKEOPT) -f mod_log_config.mak CFG="mod_log_config - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_log_debug.mak CFG="mod_log_debug - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_log_forensic.mak CFG="mod_log_forensic - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_logio.mak CFG="mod_logio - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !IF EXIST("srclib\lua") cd modules\lua $(MAKE) $(MAKEOPT) -f mod_lua.mak CFG="mod_lua - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !ENDIF cd modules\mappers $(MAKE) $(MAKEOPT) -f mod_actions.mak CFG="mod_actions - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_alias.mak CFG="mod_alias - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_dir.mak CFG="mod_dir - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_imagemap.mak CFG="mod_imagemap - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_negotiation.mak CFG="mod_negotiation - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_rewrite.mak CFG="mod_rewrite - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_speling.mak CFG="mod_speling - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_userdir.mak CFG="mod_userdir - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_vhost_alias.mak CFG="mod_vhost_alias - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !IF EXIST("srclib\openssl") && EXIST("srclib\jansson") && EXIST("srclib\curl") cd modules\md $(MAKE) $(MAKEOPT) $(SSLOPT) -f mod_md.mak CFG="mod_md - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !ENDIF cd modules\metadata $(MAKE) $(MAKEOPT) -f mod_cern_meta.mak CFG="mod_cern_meta - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_env.mak CFG="mod_env - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_expires.mak CFG="mod_expires - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_headers.mak CFG="mod_headers - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_ident.mak CFG="mod_ident - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_mime_magic.mak CFG="mod_mime_magic - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_remoteip.mak CFG="mod_remoteip - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_setenvif.mak CFG="mod_setenvif - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_unique_id.mak CFG="mod_unique_id - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_usertrack.mak CFG="mod_usertrack - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_version.mak CFG="mod_version - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd modules\proxy $(MAKE) $(MAKEOPT) -f mod_proxy.mak CFG="mod_proxy - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_proxy_ajp.mak CFG="mod_proxy_ajp - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_proxy_balancer.mak CFG="mod_proxy_balancer - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_proxy_connect.mak CFG="mod_proxy_connect - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_proxy_express.mak CFG="mod_proxy_express - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_proxy_fcgi.mak CFG="mod_proxy_fcgi - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_proxy_ftp.mak CFG="mod_proxy_ftp - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_proxy_hcheck.mak CFG="mod_proxy_hcheck - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_proxy_http.mak CFG="mod_proxy_http - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_proxy_scgi.mak CFG="mod_proxy_scgi - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_proxy_uwsgi.mak CFG="mod_proxy_uwsgi - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_proxy_wstunnel.mak CFG="mod_proxy_wstunnel - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd modules\proxy\balancers $(MAKE) $(MAKEOPT) -f mod_lbmethod_bybusyness.mak CFG="mod_lbmethod_bybusyness - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_lbmethod_byrequests.mak CFG="mod_lbmethod_byrequests - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_lbmethod_bytraffic.mak CFG="mod_lbmethod_bytraffic - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_lbmethod_heartbeat.mak CFG="mod_lbmethod_heartbeat - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\..\.. # mod_proxy_http2 must be built after mod_proxy and mod_http2 !IF EXIST("srclib\nghttp2") cd modules\http2 $(MAKE) $(MAKEOPT) -f mod_http2.mak CFG="mod_http2 - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_proxy_http2.mak CFG="mod_proxy_http2 - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !ENDIF cd modules\session $(MAKE) $(MAKEOPT) -f mod_session.mak CFG="mod_session - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_session_cookie.mak CFG="mod_session_cookie - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_session_dbd.mak CFG="mod_session_dbd - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd modules\slotmem $(MAKE) $(MAKEOPT) -f mod_slotmem_plain.mak CFG="mod_slotmem_plain - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f mod_slotmem_shm.mak CFG="mod_slotmem_shm - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !IF EXIST("srclib\openssl") # cd modules\session # $(MAKE) $(MAKEOPT) -f mod_session_crypto.mak CFG="mod_session_crypto - Win32 $(LONG)" RECURSE=0 $(CTARGET) # cd ..\.. cd modules\ssl $(MAKE) $(MAKEOPT) $(SSLOPT) -f mod_ssl.mak CFG="mod_ssl - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. cd support $(MAKE) $(MAKEOPT) $(SSLOPT) -f abs.mak CFG="abs - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd .. !ENDIF cd support $(MAKE) $(MAKEOPT) -f ab.mak CFG="ab - Win32 $(LONG)" RECURSE=0 $(CTARGET) # $(MAKE) $(MAKEOPT) -f fcgistarter.mak CFG="fcgistarter - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f htcacheclean.mak CFG="htcacheclean - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f htdbm.mak CFG="htdbm - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f htdigest.mak CFG="htdigest - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f htpasswd.mak CFG="htpasswd - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f httxt2dbm.mak CFG="httxt2dbm - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f logresolve.mak CFG="logresolve - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f rotatelogs.mak CFG="rotatelogs - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd .. cd support\win32 $(MAKE) $(MAKEOPT) -f ApacheMonitor.mak CFG="ApacheMonitor - Win32 $(LONG)" RECURSE=0 $(CTARGET) $(MAKE) $(MAKEOPT) -f wintty.mak CFG="wintty - Win32 $(LONG)" RECURSE=0 $(CTARGET) cd ..\.. !ELSEIF $(USESLN) == 1 _cleanr: $(MAKE) $(MAKEOPT) -f Makefile.win SHORT=R LONG=Release CTARGET="/clean" _build _cleand: $(MAKE) $(MAKEOPT) -f Makefile.win SHORT=D LONG=Debug CTARGET="/clean" _build _build: echo Building Win32 $(LONG) targets ($(SHORT) suffixes) !IFDEF ALL devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project BuildAll !ELSE devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project BuildBin !ENDIF !IF EXIST("srclib\openssl") devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project mod_ssl devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project abs !ENDIF !IF EXIST("srclib\zlib") devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project mod_deflate !ENDIF !IF EXIST("srclib\lua") devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project mod_lua !ENDIF !IF EXIST("srclib\libxml2") devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project mod_proxy_html devenv $(TLP).sln /useenv $(CTARGET) $(LONG) /project mod_xml2enc !ENDIF !ELSE _cleanr: @$(MAKE) $(MAKEOPT) -f Makefile.win SHORT=R LONG=Release CTARGET="/CLEAN" _build _cleand: @$(MAKE) $(MAKEOPT) -f Makefile.win SHORT=D LONG=Debug CTARGET="/CLEAN" _build _build: @echo Building Win32 $(LONG) targets ($(SHORT) suffixes) !IFDEF ALL @msdev $(TLP).dsw /USEENV /MAKE \ "BuildAll - Win32 $(LONG)" $(CTARGET) !ELSE @msdev $(TLP).dsw /USEENV /MAKE \ "BuildBin - Win32 $(LONG)" $(CTARGET) !ENDIF !IF "$(CTARGET)" == "/CLEAN" !IF EXIST("srclib\apr-iconv") @cd srclib\apr-iconv @$(MAKE) $(MAKEOPT) -f build\modules.mk.win clean \ BUILD_MODE=$(LONG) BIND_MODE=shared API_SOURCE=. @cd ..\.. !ENDIF !ENDIF !IF EXIST("srclib\openssl") @msdev $(TLP).dsw /USEENV /MAKE \ "mod_ssl - Win32 $(LONG)" \ "abs - Win32 $(LONG)" /NORECURSE $(CTARGET) !ENDIF !IF EXIST("srclib\zlib") @msdev $(TLP).dsw /USEENV /MAKE \ "mod_deflate - Win32 $(LONG)" /NORECURSE $(CTARGET) !ENDIF !IF EXIST("srclib\lua") @msdev $(TLP).dsw /USEENV /MAKE \ "mod_lua - Win32 $(LONG)" /NORECURSE $(CTARGET) !ENDIF !IF EXIST("srclib\libxml2") @msdev $(TLP).dsw /USEENV /MAKE \ "mod_proxy_html - Win32 $(LONG)" /NORECURSE $(CTARGET) @msdev $(TLP).dsw /USEENV /MAKE \ "mod_xml2enc - Win32 $(LONG)" /NORECURSE $(CTARGET) !ENDIF !ENDIF _copybin: copy $(LONG)\httpd.$(src_exe) "$(inst_exe)" <.y copy $(LONG)\libhttpd.$(src_dll) "$(inst_dll)" <.y copy srclib\apr\$(LONG)\libapr-1.$(src_dll) "$(inst_dll)" <.y !IF EXIST("srclib\apr-util") copy srclib\apr-iconv\$(LONG)\libapriconv-1.$(src_dll) "$(inst_dll)" <.y copy srclib\apr-util\$(LONG)\libaprutil-1.$(src_dll) "$(inst_dll)" <.y copy srclib\apr-util\ldap\$(LONG)\apr_ldap-1.$(src_dll) "$(inst_dll)" <.y !ENDIF for %d in (odbc $(DBD_LIST)) do ( \ copy srclib\$(UTILDIR)\dbd\$(LONG)\apr_dbd_%d-1.$(src_dll) "$(inst_dll)" <.y \ ) for %d in ($(DBM_LIST) x) do if not %d == x ( \ copy srclib\$(UTILDIR)\dbm\$(LONG)\apr_dbm_%d-1.$(src_dll) "$(inst_dll)" <.y \ ) !IF "$(SHORT)" == "D" copy srclib\pcre\pcred.$(src_dll) "$(inst_dll)" <.y !ELSE copy srclib\pcre\pcre.$(src_dll) "$(inst_dll)" <.y !ENDIF copy modules\aaa\$(LONG)\mod_access_compat.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_allowmethods.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_auth_basic.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_auth_digest.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_auth_form.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authn_anon.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authn_core.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authn_dbd.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authn_dbm.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authn_file.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authn_socache.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authnz_fcgi.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authnz_ldap.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authz_core.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authz_dbd.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authz_dbm.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authz_core.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authz_groupfile.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authz_host.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authz_owner.$(src_so) "$(inst_so)" <.y copy modules\aaa\$(LONG)\mod_authz_user.$(src_so) "$(inst_so)" <.y copy modules\arch\win32\$(LONG)\mod_isapi.$(src_so) "$(inst_so)" <.y copy modules\cache\$(LONG)\mod_cache.$(src_so) "$(inst_so)" <.y copy modules\cache\$(LONG)\mod_cache_disk.$(src_so) "$(inst_so)" <.y copy modules\cache\$(LONG)\mod_cache_socache.$(src_so) "$(inst_so)" <.y copy modules\cache\$(LONG)\mod_file_cache.$(src_so) "$(inst_so)" <.y copy modules\cache\$(LONG)\mod_socache_dbm.$(src_so) "$(inst_so)" <.y # copy modules\cache\$(LONG)\mod_socache_dc.$(src_so) "$(inst_so)" <.y copy modules\cache\$(LONG)\mod_socache_memcache.$(src_so) "$(inst_so)" <.y copy modules\cache\$(LONG)\mod_socache_shmcb.$(src_so) "$(inst_so)" <.y copy modules\cache\$(LONG)\mod_socache_redis.$(src_so) "$(inst_so)" <.y copy modules\core\$(LONG)\mod_macro.$(src_so) "$(inst_so)" <.y copy modules\core\$(LONG)\mod_watchdog.$(src_so) "$(inst_so)" <.y copy modules\cluster\$(LONG)\mod_heartbeat.$(src_so) "$(inst_so)" <.y copy modules\cluster\$(LONG)\mod_heartmonitor.$(src_so) "$(inst_so)" <.y copy modules\database\$(LONG)\mod_dbd.$(src_so) "$(inst_so)" <.y copy modules\dav\fs\$(LONG)\mod_dav_fs.$(src_so) "$(inst_so)" <.y copy modules\dav\lock\$(LONG)\mod_dav_lock.$(src_so) "$(inst_so)" <.y copy modules\dav\main\$(LONG)\mod_dav.$(src_so) "$(inst_so)" <.y !IFDEF ALL copy modules\debugging\$(LONG)\mod_bucketeer.$(src_so) "$(inst_so)" <.y !ENDIF copy modules\debugging\$(LONG)\mod_dumpio.$(src_so) "$(inst_so)" <.y !IFDEF ALL copy modules\echo\$(LONG)\mod_echo.$(src_so) "$(inst_so)" <.y copy modules\examples\$(LONG)\mod_case_filter.$(src_so) "$(inst_so)" <.y copy modules\examples\$(LONG)\mod_case_filter_in.$(src_so) "$(inst_so)" <.y copy modules\examples\$(LONG)\mod_example_hooks.$(src_so) "$(inst_so)" <.y copy modules\examples\$(LONG)\mod_example_ipc.$(src_so) "$(inst_so)" <.y !ENDIF !IF EXIST("srclib\brotli") copy modules\filters\$(LONG)\mod_brotli.$(src_so) "$(inst_so)" <.y !ENDIF copy modules\filters\$(LONG)\mod_buffer.$(src_so) "$(inst_so)" <.y copy modules\filters\$(LONG)\mod_charset_lite.$(src_so) "$(inst_so)" <.y copy modules\filters\$(LONG)\mod_data.$(src_so) "$(inst_so)" <.y !IF EXIST("srclib\zlib") copy modules\filters\$(LONG)\mod_deflate.$(src_so) "$(inst_so)" <.y !IF EXIST("srclib\zlib\zlib1.$(src_dll)") copy srclib\zlib\zlib1.$(src_dll) "$(inst_dll)" <.y !ENDIF !ENDIF copy modules\filters\$(LONG)\mod_ext_filter.$(src_so) "$(inst_so)" <.y copy modules\filters\$(LONG)\mod_filter.$(src_so) "$(inst_so)" <.y copy modules\filters\$(LONG)\mod_include.$(src_so) "$(inst_so)" <.y !IF EXIST("srclib\libxml2") copy modules\filters\$(LONG)\mod_proxy_html.$(src_so) "$(inst_so)" <.y copy modules\filters\$(LONG)\mod_xml2enc.$(src_so) "$(inst_so)" <.y !IF EXIST("srclib\libxml2\win32\bin.msvc\libxml2.$(src_dll)") copy srclib\libxml2\win32\bin.msvc\libxml2.$(src_dll) "$(inst_dll)" <.y !ENDIF !ENDIF copy modules\filters\$(LONG)\mod_ratelimit.$(src_so) "$(inst_so)" <.y copy modules\filters\$(LONG)\mod_reflector.$(src_so) "$(inst_so)" <.y copy modules\filters\$(LONG)\mod_reqtimeout.$(src_so) "$(inst_so)" <.y copy modules\filters\$(LONG)\mod_request.$(src_so) "$(inst_so)" <.y copy modules\filters\$(LONG)\mod_sed.$(src_so) "$(inst_so)" <.y copy modules\filters\$(LONG)\mod_substitute.$(src_so) "$(inst_so)" <.y copy modules\generators\$(LONG)\mod_asis.$(src_so) "$(inst_so)" <.y copy modules\generators\$(LONG)\mod_autoindex.$(src_so) "$(inst_so)" <.y copy modules\generators\$(LONG)\mod_cgi.$(src_so) "$(inst_so)" <.y copy modules\generators\$(LONG)\mod_info.$(src_so) "$(inst_so)" <.y copy modules\generators\$(LONG)\mod_status.$(src_so) "$(inst_so)" <.y copy modules\http\$(LONG)\mod_mime.$(src_so) "$(inst_so)" <.y !IF EXIST("srclib\nghttp2") copy modules\http2\$(LONG)\mod_http2.$(src_so) "$(inst_so)" <.y copy modules\http2\$(LONG)\mod_proxy_http2.$(src_so) "$(inst_so)" <.y !IF "$(SHORT)" == "D" copy srclib\nghttp2\lib\MSVC_obj\nghttp2d.$(src_dll) "$(inst_dll)" <.y !ELSE copy srclib\nghttp2\lib\MSVC_obj\nghttp2.$(src_dll) "$(inst_dll)" <.y !ENDIF !ENDIF copy modules\ldap\$(LONG)\mod_ldap.$(src_so) "$(inst_so)" <.y copy modules\loggers\$(LONG)\mod_log_config.$(src_so) "$(inst_so)" <.y copy modules\loggers\$(LONG)\mod_log_debug.$(src_so) "$(inst_so)" <.y copy modules\loggers\$(LONG)\mod_log_forensic.$(src_so) "$(inst_so)" <.y copy modules\loggers\$(LONG)\mod_logio.$(src_so) "$(inst_so)" <.y !IF EXIST("srclib\lua") copy modules\lua\$(LONG)\mod_lua.$(src_so) "$(inst_so)" <.y !IF EXIST("srclib\lua\src\lua51.$(src_dll)") copy srclib\lua\src\lua51.$(src_dll) "$(inst_dll)" <.y !ENDIF !ENDIF copy modules\mappers\$(LONG)\mod_actions.$(src_so) "$(inst_so)" <.y copy modules\mappers\$(LONG)\mod_alias.$(src_so) "$(inst_so)" <.y copy modules\mappers\$(LONG)\mod_dir.$(src_so) "$(inst_so)" <.y copy modules\mappers\$(LONG)\mod_imagemap.$(src_so) "$(inst_so)" <.y copy modules\mappers\$(LONG)\mod_negotiation.$(src_so) "$(inst_so)" <.y copy modules\mappers\$(LONG)\mod_rewrite.$(src_so) "$(inst_so)" <.y copy modules\mappers\$(LONG)\mod_speling.$(src_so) "$(inst_so)" <.y copy modules\mappers\$(LONG)\mod_userdir.$(src_so) "$(inst_so)" <.y copy modules\mappers\$(LONG)\mod_vhost_alias.$(src_so) "$(inst_so)" <.y !IF EXIST("srclib\openssl") && EXIST("srclib\jansson") && EXIST("srclib\curl") copy modules\md\$(LONG)\mod_md.$(src_so) "$(inst_so)" <.y !IF "$(SHORT)" == "D" -copy srclib\curl\bin\libcurl_debug.$(src_dll) "$(inst_dll)" <.y -copy srclib\jansson\bin\jansson_d.$(src_dll) "$(inst_dll)" <.y !ELSE -copy srclib\curl\bin\libcurl.$(src_dll) "$(inst_dll)" <.y -copy srclib\jansson\bin\jansson.$(src_dll) "$(inst_dll)" <.y !ENDIF !ENDIF copy modules\metadata\$(LONG)\mod_cern_meta.$(src_so) "$(inst_so)" <.y copy modules\metadata\$(LONG)\mod_env.$(src_so) "$(inst_so)" <.y copy modules\metadata\$(LONG)\mod_expires.$(src_so) "$(inst_so)" <.y copy modules\metadata\$(LONG)\mod_headers.$(src_so) "$(inst_so)" <.y copy modules\metadata\$(LONG)\mod_ident.$(src_so) "$(inst_so)" <.y copy modules\metadata\$(LONG)\mod_mime_magic.$(src_so) "$(inst_so)" <.y copy modules\metadata\$(LONG)\mod_remoteip.$(src_so) "$(inst_so)" <.y copy modules\metadata\$(LONG)\mod_setenvif.$(src_so) "$(inst_so)" <.y copy modules\metadata\$(LONG)\mod_unique_id.$(src_so) "$(inst_so)" <.y copy modules\metadata\$(LONG)\mod_usertrack.$(src_so) "$(inst_so)" <.y copy modules\metadata\$(LONG)\mod_version.$(src_so) "$(inst_so)" <.y copy modules\proxy\$(LONG)\mod_proxy.$(src_so) "$(inst_so)" <.y copy modules\proxy\$(LONG)\mod_proxy_ajp.$(src_so) "$(inst_so)" <.y copy modules\proxy\$(LONG)\mod_proxy_balancer.$(src_so) "$(inst_so)" <.y copy modules\proxy\$(LONG)\mod_proxy_connect.$(src_so) "$(inst_so)" <.y copy modules\proxy\$(LONG)\mod_proxy_express.$(src_so) "$(inst_so)" <.y copy modules\proxy\$(LONG)\mod_proxy_fcgi.$(src_so) "$(inst_so)" <.y copy modules\proxy\$(LONG)\mod_proxy_ftp.$(src_so) "$(inst_so)" <.y copy modules\proxy\$(LONG)\mod_proxy_hcheck.$(src_so) "$(inst_so)" <.y copy modules\proxy\$(LONG)\mod_proxy_http.$(src_so) "$(inst_so)" <.y copy modules\proxy\$(LONG)\mod_proxy_scgi.$(src_so) "$(inst_so)" <.y copy modules\proxy\$(LONG)\mod_proxy_uwsgi.$(src_so) "$(inst_so)" <.y copy modules\proxy\$(LONG)\mod_proxy_wstunnel.$(src_so) "$(inst_so)" <.y copy modules\proxy\balancers\$(LONG)\mod_lbmethod_bybusyness.$(src_so) "$(inst_so)" <.y copy modules\proxy\balancers\$(LONG)\mod_lbmethod_byrequests.$(src_so) "$(inst_so)" <.y copy modules\proxy\balancers\$(LONG)\mod_lbmethod_bytraffic.$(src_so) "$(inst_so)" <.y copy modules\proxy\balancers\$(LONG)\mod_lbmethod_heartbeat.$(src_so) "$(inst_so)" <.y copy modules\session\$(LONG)\mod_session.$(src_so) "$(inst_so)" <.y copy modules\session\$(LONG)\mod_session_cookie.$(src_so) "$(inst_so)" <.y copy modules\session\$(LONG)\mod_session_dbd.$(src_so) "$(inst_so)" <.y copy modules\slotmem\$(LONG)\mod_slotmem_plain.$(src_so) "$(inst_so)" <.y copy modules\slotmem\$(LONG)\mod_slotmem_shm.$(src_so) "$(inst_so)" <.y !IF EXIST("srclib\openssl") # copy modules\session\$(LONG)\mod_session_crypto.$(src_so) "$(inst_so)" <.y copy modules\ssl\$(LONG)\mod_ssl.$(src_so) "$(inst_so)" <.y -copy srclib\openssl\$(SSLBIN)\$(SSLCRP)*.$(src_dll) "$(inst_dll)" <.y -copy srclib\openssl\$(SSLBIN)\$(SSLLIB)*.$(src_dll) "$(inst_dll)" <.y -copy srclib\openssl\$(SSLAPP)\openssl.$(src_exe) "$(inst_exe)" <.y copy support\$(LONG)\abs.$(src_exe) "$(inst_exe)" <.y !ENDIF copy support\$(LONG)\ab.$(src_exe) "$(inst_exe)" <.y # copy support\$(LONG)\fcgistarter.$(src_exe) "$(inst_exe)" <.y copy support\$(LONG)\htcacheclean.$(src_exe) "$(inst_exe)" <.y copy support\$(LONG)\htdbm.$(src_exe) "$(inst_exe)" <.y copy support\$(LONG)\htdigest.$(src_exe) "$(inst_exe)" <.y copy support\$(LONG)\htpasswd.$(src_exe) "$(inst_exe)" <.y copy support\$(LONG)\httxt2dbm.$(src_exe) "$(inst_exe)" <.y copy support\$(LONG)\logresolve.$(src_exe) "$(inst_exe)" <.y copy support\$(LONG)\rotatelogs.$(src_exe) "$(inst_exe)" <.y copy support\win32\$(LONG)\ApacheMonitor.$(src_exe) "$(inst_exe)" <.y copy support\win32\$(LONG)\wintty.$(src_exe) "$(inst_exe)" <.y # First we create the tree and populate the README so that # whatever happens, all licensing has already propagated. # Then repeatedly invoke the _copybin build to copy the # real binaries, then pdb symbols, anf finally dbg syms. # Then hit docs of various sorts, then includes and libs, # and finally do the .conf magic. # _install: echo Y >.y echo A >.A -mkdir "$(INSTDIR)" -mkdir "$(INSTDIR)\bin" !IF EXIST("srclib\apr-util") -mkdir "$(INSTDIR)\bin\iconv" !ENDIF -mkdir "$(INSTDIR)\cgi-bin" -mkdir "$(INSTDIR)\conf" -mkdir "$(INSTDIR)\conf\extra" -mkdir "$(INSTDIR)\conf\original" -mkdir "$(INSTDIR)\conf\original\extra" -mkdir "$(INSTDIR)\error" -mkdir "$(INSTDIR)\htdocs" -mkdir "$(INSTDIR)\manual" -mkdir "$(INSTDIR)\icons" -mkdir "$(INSTDIR)\include" -mkdir "$(INSTDIR)\lib" -mkdir "$(INSTDIR)\logs" -mkdir "$(INSTDIR)\modules" copy ABOUT_APACHE "$(INSTDIR)\ABOUT_APACHE.txt" <.y copy CHANGES "$(INSTDIR)\CHANGES.txt" <.y copy INSTALL "$(INSTDIR)\INSTALL.txt" <.y copy LICENSE "$(INSTDIR)\LICENSE.txt" <.y copy NOTICE "$(INSTDIR)\NOTICE.txt" <.y copy README "$(INSTDIR)\README.txt" <.y type << >> "$(INSTDIR)\NOTICE.txt" Regular expression support is provided by the PCRE library package, which is open source software, written by Philip Hazel, and copyright by the University of Cambridge, England. The original software is available from ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/ << -awk -f <> "$(INSTDIR)\LICENSE.txt" BEGIN { print ""; print "For the pcre.dll component:"; print ""; while ( getline > 0 ) { if ( $$0 ~ /^End$$/ ) $$0 = "END OF PCRE LICENSE"; print $$0; } } << !IF EXIST("srclib\openssl") -copy srclib\openssl\apps\openssl.cnf "$(INSTDIR)\conf\openssl.cnf" <.y type << >> "$(INSTDIR)\NOTICE.txt" This binary distribution includes cryptographic software written by Eric Young (eay@cryptsoft.com), software written by Tim Hudson (tjh@cryptsoft.com), and software developed by the OpenSSL Project for use in the OpenSSL Toolkit . << -awk -f <> "$(INSTDIR)\LICENSE.txt" BEGIN { print ""; print "For the libeay32.dll, ssleay32.dll and openssl.exe components:"; print ""; while ( getline > 0 ) { print $$0; } } << copy << "$(INSTDIR)\OPENSSL-NEWS.txt" <.y Apache HTTP Server 2.4 Limited OpenSSL Distribution This binary distribution includes the minimal components of OpenSSL required to support mod_ssl for Apache HTTP Server version 2.4 (details are listed in OPENSSL-README.txt.) For the complete list of CHANGES to this and later versions of OpenSSL, please refer to the definative source, , or see the CHANGES file in the full binary or source distribution package from . These OpenSSL binaries were built for distribution from the U.S. without support for the patented encryption methods IDEA, MDC-2 or RC5. -------------------------------------------------------------------------------- << -copy "$(INSTDIR)\OPENSSL-NEWS.txt" \ + srclib\openssl\NEWS "$(INSTDIR)\OPENSSL-NEWS.txt" copy << "$(INSTDIR)\OPENSSL-README.txt" <.y Apache HTTP Server 2.4 Limited OpenSSL Distribution This binary installation of OpenSSL is a limited distribution of the files derived from the OpenSSL project: LICENSE.txt (includes openssl LICENSE) OPENSSL-NEWS.txt OPENSSL-README.txt conf\openssl.cnf bin\libeay32.dll bin\ssleay32.dll bin\openssl.exe These are the minimal libraries and tools required to use mod_ssl as distributed with Apache HTTP Server version 2.4. No library link files, headers or sources are distributed with this binary distribution. Please refer to the site for complete source or binary distributions. These OpenSSL binaries were built for distribution from the U.S. without support for the patented encryption methods IDEA, MDC-2 or RC5. The Apache HTTP Project only supports the binary distribution of these files and development of the mod_ssl module. We cannot provide support assistance for using or configuring the OpenSSL package or these modules. Please refer all installation and configuration questions to the appropriate forum, such as the user supported lists, the Apache HTTP Server user's list or the OpenSSL support page. -------------------------------------------------------------------------------- << -copy "$(INSTDIR)\OPENSSL-README.txt" \ + srclib\openssl\README "$(INSTDIR)\OPENSSL-README.txt" !ENDIF !IF EXIST("srclib\zlib") type << >> "$(INSTDIR)\NOTICE.txt" This binary distribution of mod_deflate.so includes zlib compression code written by Jean-loup Gailly (jloup@gzip.org) and Mark Adler (madler@alumni.caltech.edu) . << -awk -f <> "$(INSTDIR)\LICENSE.txt" BEGIN { while ( getline > 0 ) { if ( $$0 ~ /Copyright notice:/ ) { print ""; print "For the mod_deflate zlib compression component:"; while ( getline > 0 && $$0 !~ /^[^ ]/ ) { print $$0; } exit 0; } } exit 1; } << !ENDIF !IF EXIST("srclib\lua") type << >> "$(INSTDIR)\NOTICE.txt" This binary distribution of mod_lua.so includes the Lua language, developed at Lua.org, a laboratory of the Department of Computer Science of PUC-Rio (the Pontifical Catholic University of Rio de Janeiro in Brazil). For complete information, visit Lua's web site at http://www.lua.org/ << -awk -f <> "$(INSTDIR)\LICENSE.txt" BEGIN { print ""; print "For the mod_lua language component:"; print ""; while ( getline > 0 && $$0 !~ /end of COPYRIGHT/ ) { print $$0; } exit 0; } << !ENDIF !IF EXIST("srclib\libxml2") type << >> "$(INSTDIR)\NOTICE.txt" This binary distributions of mod_proxy_html.so and mod_xml2enc.so include the libxml2 C library written by Daniel Veillard (daniel veillard.com), Bjorn Reese (breese users.sourceforge.net) and Gary Pennington (Gary.Pennington uk.sun.com). For complete information, visit LibXML2's web site at https://http://www.xmlsoft.org/ << -awk -f <> "$(INSTDIR)\LICENSE.txt" BEGIN { print ""; print "For the mod_proxy_html and mod_xml2enc components:"; print ""; while ( getline > 0 ) { print $$0; } exit 0; } << !ENDIF !IF EXIST("srclib\nghttp2") type << >> "$(INSTDIR)\NOTICE.txt" This binary distribution of mod_http2.so includes nghttp2 C library written by Tatsuhiro Tsujikawa. For complete information, visit nghttp2's web site at https://nghttp2.org/ << -awk -f <> "$(INSTDIR)\LICENSE.txt" BEGIN { print ""; print "For the mod_http2 component:"; print ""; while ( getline > 0 ) { print $$0; } exit 0; } << !ENDIF !IF EXIST("srclib\brotli") type << >> "$(INSTDIR)\NOTICE.txt" This binary distribution of mod_brotli.so includes Brotli C library written by the Brotli Authors. For complete information, visit Brotli's web site at https://github.com/google/brotli << -awk -f <> "$(INSTDIR)\LICENSE.txt" BEGIN { print ""; print "For the mod_brotli component:"; print ""; while ( getline > 0 ) { print $$0; } exit 0; } << !ENDIF $(MAKE) $(MAKEOPT) -f Makefile.win SHORT=$(SHORT) LONG=$(LONG) \ _copybin src_exe=exe src_dll=dll src_so=so \ inst_exe="$(INSTDIR)\bin" \ inst_dll="$(INSTDIR)\bin" \ inst_so="$(INSTDIR)\modules" $(MAKE) $(MAKEOPT) -f Makefile.win SHORT=$(SHORT) LONG=$(LONG) \ _copybin src_exe=pdb src_dll=pdb src_so=pdb \ inst_exe="$(INSTDIR)\bin" \ inst_dll="$(INSTDIR)\bin" \ inst_so="$(INSTDIR)\modules" !IF EXIST("srclib\apr-util") cd srclib\apr-iconv $(MAKE) $(MAKEOPT) -f build\modules.mk.win install \ BUILD_MODE=$(LONG) BIND_MODE=shared API_SOURCE=. \ INSTALL_DIR="$(INSTDIR)\bin\iconv" cd ..\.. !ENDIF copy docs\cgi-examples\printenv "$(INSTDIR)\cgi-bin\printenv.pl" <.y -awk -f < "$(INSTDIR)\cgi-bin\printenv.pl" BEGIN { if ( "perl -e \"print $$^X;\"" | getline perlroot ) { gsub( /\\/, "/", perlroot ); print "#!" perlroot; } } { if ( $$0 !~ /^#!/ ) { print $$0; } } << xcopy docs\error "$(INSTDIR)\error" /s /d < .a xcopy docs\docroot "$(INSTDIR)\htdocs" /d < .a xcopy docs\icons "$(INSTDIR)\icons" /s /d < .a xcopy docs\manual "$(INSTDIR)\manual" /s /d < .a for %f in ( \ srclib\expat\lib\expat.h \ srclib\apr-util\xml\expat\lib\expat.h \ srclib\apr\include\*.h \ srclib\apr-util\include\*.h \ include\*.h \ os\win32\os.h \ modules\cache\mod_cache.h \ modules\cache\cache_common.h \ modules\core\mod_so.h \ modules\core\mod_watchdog.h \ modules\database\mod_dbd.h \ modules\dav\main\mod_dav.h \ modules\filters\mod_include.h \ modules\generators\mod_cgi.h \ modules\generators\mod_status.h \ modules\http2\mod_http2.h \ modules\loggers\mod_log_config.h \ modules\mappers\mod_rewrite.h \ modules\proxy\mod_proxy.h \ modules\ssl\mod_ssl.h \ modules\ssl\mod_ssl_openssl.h \ ) do \ @copy %f "$(INSTDIR)\include" < .y > nul copy srclib\apr\Lib$(SHORT)\apr-1.lib "$(INSTDIR)\lib" <.y copy srclib\apr\Lib$(SHORT)\apr-1.pdb "$(INSTDIR)\lib" <.y copy srclib\apr\$(LONG)\libapr-1.lib "$(INSTDIR)\lib" <.y copy srclib\apr\$(LONG)\libapr-1.exp "$(INSTDIR)\lib" <.y !IF EXIST("srclib\apr-util") copy srclib\apr-util\Lib$(SHORT)\aprutil-1.lib "$(INSTDIR)\lib" <.y copy srclib\apr-util\Lib$(SHORT)\aprutil-1.pdb "$(INSTDIR)\lib" <.y copy srclib\apr-util\$(EXPAT)\Lib$(SHORT)\xml.lib "$(INSTDIR)\lib" <.y copy srclib\apr-util\$(EXPAT)\Lib$(SHORT)\xml.pdb "$(INSTDIR)\lib" <.y copy srclib\apr-util\$(LONG)\libaprutil-1.lib "$(INSTDIR)\lib" <.y copy srclib\apr-util\$(LONG)\libaprutil-1.exp "$(INSTDIR)\lib" <.y copy srclib\apr-iconv\$(LONG)\libapriconv-1.lib "$(INSTDIR)\lib" <.y copy srclib\apr-iconv\$(LONG)\libapriconv-1.exp "$(INSTDIR)\lib" <.y !ELSE copy srclib\expat\win32\$(LONG)\libexpatMT.lib "$(INSTDIR)\lib" <.y copy srclib\expat\win32\$(LONG)\libexpatMT.exp "$(INSTDIR)\lib" <.y copy srclib\expat\win32\$(LONG)\libexpat.lib "$(INSTDIR)\lib" <.y copy srclib\expat\win32\$(LONG)\libexpat.exp "$(INSTDIR)\lib" <.y copy srclib\expat\win32\$(LONG)\libexpat.dll "$(INSTDIR)\bin" <.y !ENDIF copy $(LONG)\libhttpd.exp "$(INSTDIR)\lib" <.y copy $(LONG)\libhttpd.lib "$(INSTDIR)\lib" <.y copy modules\dav\main\$(LONG)\mod_dav.exp "$(INSTDIR)\lib" <.y copy modules\dav\main\$(LONG)\mod_dav.lib "$(INSTDIR)\lib" <.y for %f in ( charset.conv magic mime.types ) do ( \ copy docs\conf\%f "$(INSTDIR)\conf\original\%f" <.y ) awk -f build\installwinconf.awk $(DOMAINNAME) $(SERVERNAME) \ $(SERVERADMIN) $(PORT) $(SSLPORT) "$(INSTDIR) " docs/conf/ copy "support\dbmmanage.in" "$(INSTDIR)\bin\dbmmanage.pl" -awk -f <"$(INSTDIR)\bin\dbmmanage.pl" { if ( $$0 ~ /^BEGIN \{ @AnyDBM_File::/ ) { sub( /ISA = qw\(.*\)/, "ISA = qw(SDBM_File)" ); } if ( $$0 !~ /^#!@perlbin@/ ) print $$0; } << del .y del .a httpd-2.4.41/configure0000755000000000000500000444743213523273356013176 0ustar rootsrc#! /bin/sh # Guess values for system-dependent variables and create Makefiles. # Generated by GNU Autoconf 2.69. # # # Copyright (C) 1992-1996, 1998-2012 Free Software Foundation, Inc. # # # This configure script is free software; the Free Software Foundation # gives unlimited permission to copy, distribute and modify it. ## -------------------- ## ## M4sh Initialization. ## ## -------------------- ## # Be more Bourne compatible DUALCASE=1; export DUALCASE # for MKS sh if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then : emulate sh NULLCMD=: # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which # is contrary to our usage. Disable this feature. alias -g '${1+"$@"}'='"$@"' setopt NO_GLOB_SUBST else case `(set -o) 2>/dev/null` in #( *posix*) : set -o posix ;; #( *) : ;; esac fi as_nl=' ' export as_nl # Printing a long string crashes Solaris 7 /usr/bin/printf. as_echo='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo # Prefer a ksh shell builtin over an external printf program on Solaris, # but without wasting forks for bash or zsh. if test -z "$BASH_VERSION$ZSH_VERSION" \ && (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/null; then as_echo='print -r --' as_echo_n='print -rn --' elif (test "X`printf %s $as_echo`" = "X$as_echo") 2>/dev/null; then as_echo='printf %s\n' as_echo_n='printf %s' else if test "X`(/usr/ucb/echo -n -n $as_echo) 2>/dev/null`" = "X-n $as_echo"; then as_echo_body='eval /usr/ucb/echo -n "$1$as_nl"' as_echo_n='/usr/ucb/echo -n' else as_echo_body='eval expr "X$1" : "X\\(.*\\)"' as_echo_n_body='eval arg=$1; case $arg in #( *"$as_nl"*) expr "X$arg" : "X\\(.*\\)$as_nl"; arg=`expr "X$arg" : ".*$as_nl\\(.*\\)"`;; esac; expr "X$arg" : "X\\(.*\\)" | tr -d "$as_nl" ' export as_echo_n_body as_echo_n='sh -c $as_echo_n_body as_echo' fi export as_echo_body as_echo='sh -c $as_echo_body as_echo' fi # The user is always right. if test "${PATH_SEPARATOR+set}" != set; then PATH_SEPARATOR=: (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && { (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 || PATH_SEPARATOR=';' } fi # IFS # We need space, tab and new line, in precisely that order. Quoting is # there to prevent editors from complaining about space-tab. # (If _AS_PATH_WALK were called with IFS unset, it would disable word # splitting by setting IFS to empty value.) IFS=" "" $as_nl" # Find who we are. Look in the path if we contain no directory separator. as_myself= case $0 in #(( *[\\/]* ) as_myself=$0 ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break done IFS=$as_save_IFS ;; esac # We did not find ourselves, most probably we were run as `sh COMMAND' # in which case we are not to be found in the path. if test "x$as_myself" = x; then as_myself=$0 fi if test ! -f "$as_myself"; then $as_echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2 exit 1 fi # Unset variables that we do not need and which cause bugs (e.g. in # pre-3.0 UWIN ksh). But do not cause bugs in bash 2.01; the "|| exit 1" # suppresses any "Segmentation fault" message there. '((' could # trigger a bug in pdksh 5.2.14. for as_var in BASH_ENV ENV MAIL MAILPATH do eval test x\${$as_var+set} = xset \ && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || : done PS1='$ ' PS2='> ' PS4='+ ' # NLS nuisances. LC_ALL=C export LC_ALL LANGUAGE=C export LANGUAGE # CDPATH. (unset CDPATH) >/dev/null 2>&1 && unset CDPATH # Use a proper internal environment variable to ensure we don't fall # into an infinite loop, continuously re-executing ourselves. if test x"${_as_can_reexec}" != xno && test "x$CONFIG_SHELL" != x; then _as_can_reexec=no; export _as_can_reexec; # We cannot yet assume a decent shell, so we have to provide a # neutralization value for shells without unset; and this also # works around shells that cannot unset nonexistent variables. # Preserve -v and -x to the replacement shell. BASH_ENV=/dev/null ENV=/dev/null (unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV case $- in # (((( *v*x* | *x*v* ) as_opts=-vx ;; *v* ) as_opts=-v ;; *x* ) as_opts=-x ;; * ) as_opts= ;; esac exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"} # Admittedly, this is quite paranoid, since all the known shells bail # out after a failed `exec'. $as_echo "$0: could not re-execute with $CONFIG_SHELL" >&2 as_fn_exit 255 fi # We don't want this to propagate to other subprocesses. { _as_can_reexec=; unset _as_can_reexec;} if test "x$CONFIG_SHELL" = x; then as_bourne_compatible="if test -n \"\${ZSH_VERSION+set}\" && (emulate sh) >/dev/null 2>&1; then : emulate sh NULLCMD=: # Pre-4.2 versions of Zsh do word splitting on \${1+\"\$@\"}, which # is contrary to our usage. Disable this feature. alias -g '\${1+\"\$@\"}'='\"\$@\"' setopt NO_GLOB_SUBST else case \`(set -o) 2>/dev/null\` in #( *posix*) : set -o posix ;; #( *) : ;; esac fi " as_required="as_fn_return () { (exit \$1); } as_fn_success () { as_fn_return 0; } as_fn_failure () { as_fn_return 1; } as_fn_ret_success () { return 0; } as_fn_ret_failure () { return 1; } exitcode=0 as_fn_success || { exitcode=1; echo as_fn_success failed.; } as_fn_failure && { exitcode=1; echo as_fn_failure succeeded.; } as_fn_ret_success || { exitcode=1; echo as_fn_ret_success failed.; } as_fn_ret_failure && { exitcode=1; echo as_fn_ret_failure succeeded.; } if ( set x; as_fn_ret_success y && test x = \"\$1\" ); then : else exitcode=1; echo positional parameters were not saved. fi test x\$exitcode = x0 || exit 1 test -x / || exit 1" as_suggested=" as_lineno_1=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_1a=\$LINENO as_lineno_2=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_2a=\$LINENO eval 'test \"x\$as_lineno_1'\$as_run'\" != \"x\$as_lineno_2'\$as_run'\" && test \"x\`expr \$as_lineno_1'\$as_run' + 1\`\" = \"x\$as_lineno_2'\$as_run'\"' || exit 1 test \$(( 1 + 1 )) = 2 || exit 1" if (eval "$as_required") 2>/dev/null; then : as_have_required=yes else as_have_required=no fi if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null; then : else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR as_found=false for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. as_found=: case $as_dir in #( /*) for as_base in sh bash ksh sh5; do # Try only shells that exist, to save several forks. as_shell=$as_dir/$as_base if { test -f "$as_shell" || test -f "$as_shell.exe"; } && { $as_echo "$as_bourne_compatible""$as_required" | as_run=a "$as_shell"; } 2>/dev/null; then : CONFIG_SHELL=$as_shell as_have_required=yes if { $as_echo "$as_bourne_compatible""$as_suggested" | as_run=a "$as_shell"; } 2>/dev/null; then : break 2 fi fi done;; esac as_found=false done $as_found || { if { test -f "$SHELL" || test -f "$SHELL.exe"; } && { $as_echo "$as_bourne_compatible""$as_required" | as_run=a "$SHELL"; } 2>/dev/null; then : CONFIG_SHELL=$SHELL as_have_required=yes fi; } IFS=$as_save_IFS if test "x$CONFIG_SHELL" != x; then : export CONFIG_SHELL # We cannot yet assume a decent shell, so we have to provide a # neutralization value for shells without unset; and this also # works around shells that cannot unset nonexistent variables. # Preserve -v and -x to the replacement shell. BASH_ENV=/dev/null ENV=/dev/null (unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV case $- in # (((( *v*x* | *x*v* ) as_opts=-vx ;; *v* ) as_opts=-v ;; *x* ) as_opts=-x ;; * ) as_opts= ;; esac exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"} # Admittedly, this is quite paranoid, since all the known shells bail # out after a failed `exec'. $as_echo "$0: could not re-execute with $CONFIG_SHELL" >&2 exit 255 fi if test x$as_have_required = xno; then : $as_echo "$0: This script requires a shell more modern than all" $as_echo "$0: the shells that I found on your system." if test x${ZSH_VERSION+set} = xset ; then $as_echo "$0: In particular, zsh $ZSH_VERSION has bugs and should" $as_echo "$0: be upgraded to zsh 4.3.4 or later." else $as_echo "$0: Please tell bug-autoconf@gnu.org about your system, $0: including any error possibly output before this $0: message. Then install a modern shell, or manually run $0: the script under such a shell if you do have one." fi exit 1 fi fi fi SHELL=${CONFIG_SHELL-/bin/sh} export SHELL # Unset more variables known to interfere with behavior of common tools. CLICOLOR_FORCE= GREP_OPTIONS= unset CLICOLOR_FORCE GREP_OPTIONS ## --------------------- ## ## M4sh Shell Functions. ## ## --------------------- ## # as_fn_unset VAR # --------------- # Portably unset VAR. as_fn_unset () { { eval $1=; unset $1;} } as_unset=as_fn_unset # as_fn_set_status STATUS # ----------------------- # Set $? to STATUS, without forking. as_fn_set_status () { return $1 } # as_fn_set_status # as_fn_exit STATUS # ----------------- # Exit the shell with STATUS, even in a "trap 0" or "set -e" context. as_fn_exit () { set +e as_fn_set_status $1 exit $1 } # as_fn_exit # as_fn_mkdir_p # ------------- # Create "$as_dir" as a directory, including parents if necessary. as_fn_mkdir_p () { case $as_dir in #( -*) as_dir=./$as_dir;; esac test -d "$as_dir" || eval $as_mkdir_p || { as_dirs= while :; do case $as_dir in #( *\'*) as_qdir=`$as_echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'( *) as_qdir=$as_dir;; esac as_dirs="'$as_qdir' $as_dirs" as_dir=`$as_dirname -- "$as_dir" || $as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$as_dir" : 'X\(//\)[^/]' \| \ X"$as_dir" : 'X\(//\)$' \| \ X"$as_dir" : 'X\(/\)' \| . 2>/dev/null || $as_echo X"$as_dir" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'` test -d "$as_dir" && break done test -z "$as_dirs" || eval "mkdir $as_dirs" } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir" } # as_fn_mkdir_p # as_fn_executable_p FILE # ----------------------- # Test if FILE is an executable regular file. as_fn_executable_p () { test -f "$1" && test -x "$1" } # as_fn_executable_p # as_fn_append VAR VALUE # ---------------------- # Append the text in VALUE to the end of the definition contained in VAR. Take # advantage of any shell optimizations that allow amortized linear growth over # repeated appends, instead of the typical quadratic growth present in naive # implementations. if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null; then : eval 'as_fn_append () { eval $1+=\$2 }' else as_fn_append () { eval $1=\$$1\$2 } fi # as_fn_append # as_fn_arith ARG... # ------------------ # Perform arithmetic evaluation on the ARGs, and store the result in the # global $as_val. Take advantage of shells that can avoid forks. The arguments # must be portable across $(()) and expr. if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null; then : eval 'as_fn_arith () { as_val=$(( $* )) }' else as_fn_arith () { as_val=`expr "$@" || test $? -eq 1` } fi # as_fn_arith # as_fn_error STATUS ERROR [LINENO LOG_FD] # ---------------------------------------- # Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are # provided, also output the error to LOG_FD, referencing LINENO. Then exit the # script with STATUS, using 1 if that was 0. as_fn_error () { as_status=$1; test $as_status -eq 0 && as_status=1 if test "$4"; then as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack $as_echo "$as_me:${as_lineno-$LINENO}: error: $2" >&$4 fi $as_echo "$as_me: error: $2" >&2 as_fn_exit $as_status } # as_fn_error if expr a : '\(a\)' >/dev/null 2>&1 && test "X`expr 00001 : '.*\(...\)'`" = X001; then as_expr=expr else as_expr=false fi if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then as_basename=basename else as_basename=false fi if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then as_dirname=dirname else as_dirname=false fi as_me=`$as_basename -- "$0" || $as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \ X"$0" : 'X\(//\)$' \| \ X"$0" : 'X\(/\)' \| . 2>/dev/null || $as_echo X/"$0" | sed '/^.*\/\([^/][^/]*\)\/*$/{ s//\1/ q } /^X\/\(\/\/\)$/{ s//\1/ q } /^X\/\(\/\).*/{ s//\1/ q } s/.*/./; q'` # Avoid depending upon Character Ranges. as_cr_letters='abcdefghijklmnopqrstuvwxyz' as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ' as_cr_Letters=$as_cr_letters$as_cr_LETTERS as_cr_digits='0123456789' as_cr_alnum=$as_cr_Letters$as_cr_digits as_lineno_1=$LINENO as_lineno_1a=$LINENO as_lineno_2=$LINENO as_lineno_2a=$LINENO eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2'$as_run'" && test "x`expr $as_lineno_1'$as_run' + 1`" = "x$as_lineno_2'$as_run'"' || { # Blame Lee E. McMahon (1931-1989) for sed's syntax. :-) sed -n ' p /[$]LINENO/= ' <$as_myself | sed ' s/[$]LINENO.*/&-/ t lineno b :lineno N :loop s/[$]LINENO\([^'$as_cr_alnum'_].*\n\)\(.*\)/\2\1\2/ t loop s/-\n.*// ' >$as_me.lineno && chmod +x "$as_me.lineno" || { $as_echo "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2; as_fn_exit 1; } # If we had to re-execute with $CONFIG_SHELL, we're ensured to have # already done that, so ensure we don't try to do so again and fall # in an infinite loop. This has already happened in practice. _as_can_reexec=no; export _as_can_reexec # Don't try to exec as it changes $[0], causing all sort of problems # (the dirname of $[0] is not the place where we might find the # original and so on. Autoconf is especially sensitive to this). . "./$as_me.lineno" # Exit status is that of the last command. exit } ECHO_C= ECHO_N= ECHO_T= case `echo -n x` in #((((( -n*) case `echo 'xy\c'` in *c*) ECHO_T=' ';; # ECHO_T is single tab character. xy) ECHO_C='\c';; *) echo `echo ksh88 bug on AIX 6.1` > /dev/null ECHO_T=' ';; esac;; *) ECHO_N='-n';; esac rm -f conf$$ conf$$.exe conf$$.file if test -d conf$$.dir; then rm -f conf$$.dir/conf$$.file else rm -f conf$$.dir mkdir conf$$.dir 2>/dev/null fi if (echo >conf$$.file) 2>/dev/null; then if ln -s conf$$.file conf$$ 2>/dev/null; then as_ln_s='ln -s' # ... but there are two gotchas: # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail. # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable. # In both cases, we have to default to `cp -pR'. ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe || as_ln_s='cp -pR' elif ln conf$$.file conf$$ 2>/dev/null; then as_ln_s=ln else as_ln_s='cp -pR' fi else as_ln_s='cp -pR' fi rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file rmdir conf$$.dir 2>/dev/null if mkdir -p . 2>/dev/null; then as_mkdir_p='mkdir -p "$as_dir"' else test -d ./-p && rmdir ./-p as_mkdir_p=false fi as_test_x='test -x' as_executable_p=as_fn_executable_p # Sed expression to map a string onto a valid CPP name. as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'" # Sed expression to map a string onto a valid variable name. as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'" test -n "$DJDIR" || exec 7<&0 &1 # Name of the host. # hostname on some systems (SVR3.2, old GNU/Linux) returns a bogus exit status, # so uname gets run too. ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q` # # Initializations. # ac_default_prefix=/usr/local ac_clean_files= ac_config_libobj_dir=. LIBOBJS= cross_compiling=no subdirs= MFLAGS= MAKEFLAGS= # Identity of this package. PACKAGE_NAME= PACKAGE_TARNAME= PACKAGE_VERSION= PACKAGE_STRING= PACKAGE_BUGREPORT= PACKAGE_URL= ac_unique_file="ABOUT_APACHE" enable_option_checking=no ac_default_prefix=/usr/local/apache2 # Factoring default headers for most tests. ac_includes_default="\ #include #ifdef HAVE_SYS_TYPES_H # include #endif #ifdef HAVE_SYS_STAT_H # include #endif #ifdef STDC_HEADERS # include # include #else # ifdef HAVE_STDLIB_H # include # endif #endif #ifdef HAVE_STRING_H # if !defined STDC_HEADERS && defined HAVE_MEMORY_H # include # endif # include #endif #ifdef HAVE_STRINGS_H # include #endif #ifdef HAVE_INTTYPES_H # include #endif #ifdef HAVE_STDINT_H # include #endif #ifdef HAVE_UNISTD_H # include #endif" ac_subst_vars='LTLIBOBJS LIBOBJS ap_make_delimiter ap_make_include perlbin APU_CONFIG APU_VERSION APU_INCLUDEDIR APU_BINDIR APR_CONFIG APR_VERSION APR_INCLUDEDIR APR_BINDIR LOAD_ALL_MODULES ENABLED_DSO_MODULES DSO_MODULES ENABLED_MPM_MODULE MPM_MODULES INSTALL_PROG_FLAGS MK_IMPLIB SH_LIBTOOL SH_LIBS CORE_IMPLIB CORE_IMPLIB_FILE SSLPORT PORT MODULE_CLEANDIRS MODULE_DIRS LIBTOOL INTERNAL_CPPFLAGS NOTEST_LIBS NOTEST_LDFLAGS NOTEST_CXXFLAGS NOTEST_CFLAGS NOTEST_CPPFLAGS INCLUDES UTIL_LDFLAGS HTTPD_LDFLAGS SH_LDFLAGS LT_LDFLAGS LTFLAGS CXXFLAGS CXX other_targets proxycachedir runtimedir installbuilddir iconsdir errordir manualdir htdocsdir logfiledir cgidir abs_srcdir HTTPD_MMN HTTPD_VERSION EXTRA_INCLUDES EXTRA_LIBS EXTRA_LDFLAGS EXTRA_CXXFLAGS EXTRA_CFLAGS EXTRA_CPPFLAGS AP_CLEAN_SRCLIB_DIRS AP_BUILD_SRCLIB_DIRS AP_LIBS INSTALL_SUEXEC shared_build POST_SHARED_CMDS PRE_SHARED_CMDS MOD_SO_ENABLED OS_SPECIFIC_VARS SHLIBPATH_VAR BUILTIN_LIBS OS_DIR OS progname MOD_REWRITE_LDADD MOD_ALIAS_LDADD MOD_USERDIR_LDADD MOD_SPELING_LDADD MOD_ACTIONS_LDADD MOD_IMAGEMAP_LDADD MOD_DIR_LDADD MOD_NEGOTIATION_LDADD MOD_VHOST_ALIAS_LDADD MOD_DAV_LOCK_LDADD MOD_DAV_FS_LDADD MOD_CGI_LDADD MOD_CGID_LDADD MOD_SUEXEC_LDADD MOD_INFO_LDADD MOD_ASIS_LDADD MOD_AUTOINDEX_LDADD MOD_STATUS_LDADD MOD_DAV_LDADD MOD_HEARTMONITOR_LDADD MOD_HEARTBEAT_LDADD MOD_PRIVILEGES_LDADD MOD_UNIXD_LDADD MOD_MPM_EVENT_LDADD MPM_LIB MPM_SUBDIRS MOD_LBMETHOD_HEARTBEAT_LDADD MOD_LBMETHOD_BYBUSYNESS_LDADD MOD_LBMETHOD_BYTRAFFIC_LDADD MOD_LBMETHOD_BYREQUESTS_LDADD MOD_MD_LDADD MOD_PROXY_HTTP2_LDADD MOD_HTTP2_LDADD APACHECTL_ULIMIT NONPORTABLE_SUPPORT fcgistarter_LTFLAGS httxt2dbm_LTFLAGS htcacheclean_LTFLAGS checkgid_LTFLAGS ab_LTFLAGS htdbm_LTFLAGS logresolve_LTFLAGS rotatelogs_LTFLAGS htdigest_LTFLAGS htpasswd_LTFLAGS MOD_DIALUP_LDADD MOD_OPTIONAL_FN_EXPORT_LDADD MOD_OPTIONAL_FN_IMPORT_LDADD MOD_OPTIONAL_HOOK_IMPORT_LDADD MOD_OPTIONAL_HOOK_EXPORT_LDADD MOD_SSL_LDADD ab_LIBS ab_CFLAGS MOD_SLOTMEM_PLAIN_LDADD MOD_SLOTMEM_SHM_LDADD MOD_SESSION_DBD_LDADD MOD_SESSION_CRYPTO_LDADD MOD_SESSION_COOKIE_LDADD MOD_SESSION_LDADD MOD_PROXY_HCHECK_LDADD MOD_PROXY_EXPRESS_LDADD MOD_PROXY_BALANCER_LDADD MOD_PROXY_AJP_LDADD MOD_PROXY_WSTUNNEL_LDADD MOD_PROXY_FDPASS_LDADD MOD_PROXY_UWSGI_LDADD MOD_PROXY_SCGI_LDADD MOD_PROXY_FCGI_LDADD MOD_PROXY_HTTP_LDADD MOD_PROXY_FTP_LDADD MOD_PROXY_CONNECT_LDADD MOD_PROXY_LDADD MOD_REMOTEIP_LDADD MOD_VERSION_LDADD MOD_SETENVIF_LDADD MOD_UNIQUE_ID_LDADD MOD_USERTRACK_LDADD MOD_IDENT_LDADD MOD_HEADERS_LDADD MOD_EXPIRES_LDADD MOD_CERN_META_LDADD MOD_MIME_MAGIC_LDADD MOD_ENV_LDADD MOD_LUA_LDADD LUA_CFLAGS LUA_LIBS MOD_LOGIO_LDADD MOD_LOG_FORENSIC_LDADD MOD_LOG_DEBUG_LDADD MOD_LOG_CONFIG_LDADD MOD_LDAP_LDADD MOD_MIME_LDADD MOD_HTTP_LDADD MOD_BROTLI_LDADD MOD_PROXY_HTML_LDADD MOD_XML2ENC_LDADD MOD_DEFLATE_LDADD MOD_CHARSET_LITE_LDADD MOD_SED_LDADD MOD_SUBSTITUTE_LDADD MOD_REFLECTOR_LDADD MOD_FILTER_LDADD MOD_INCLUDE_LDADD MOD_REQUEST_LDADD MOD_EXT_FILTER_LDADD MOD_REQTIMEOUT_LDADD MOD_RATELIMIT_LDADD MOD_DATA_LDADD MOD_BUFFER_LDADD MOD_EXAMPLE_IPC_LDADD MOD_CASE_FILTER_IN_LDADD MOD_CASE_FILTER_LDADD MOD_EXAMPLE_HOOKS_LDADD MOD_ECHO_LDADD MOD_DUMPIO_LDADD MOD_BUCKETEER_LDADD MOD_DBD_LDADD MOD_MACRO_LDADD MOD_WATCHDOG_LDADD MOD_SO_LDADD INSTALL_DSO MOD_SOCACHE_DC_LDADD MOD_SOCACHE_REDIS_LDADD MOD_SOCACHE_MEMCACHE_LDADD MOD_SOCACHE_DBM_LDADD MOD_SOCACHE_SHMCB_LDADD MOD_CACHE_SOCACHE_LDADD MOD_CACHE_DISK_LDADD MOD_CACHE_LDADD MOD_FILE_CACHE_LDADD MOD_ISAPI_LDADD MOD_ALLOWMETHODS_LDADD MOD_AUTH_DIGEST_LDADD MOD_AUTH_FORM_LDADD MOD_AUTH_BASIC_LDADD MOD_ACCESS_COMPAT_LDADD MOD_AUTHNZ_FCGI_LDADD MOD_AUTHNZ_LDAP_LDADD MOD_AUTHZ_CORE_LDADD MOD_AUTHZ_DBD_LDADD MOD_AUTHZ_OWNER_LDADD MOD_AUTHZ_DBM_LDADD MOD_AUTHZ_USER_LDADD MOD_AUTHZ_GROUPFILE_LDADD MOD_AUTHZ_HOST_LDADD MOD_AUTHN_CORE_LDADD MOD_AUTHN_SOCACHE_LDADD MOD_AUTHN_DBD_LDADD MOD_AUTHN_ANON_LDADD MOD_AUTHN_DBM_LDADD MOD_AUTHN_FILE_LDADD PILDFLAGS PICFLAGS DTRACE CRYPT_LIBS MATH_LIBS MKDEP INSTALL MKINSTALLDIRS LYNX_PATH RANLIB LN_S AWK RSYNC PKGCONFIG RM LTCFLAGS SHLTCFLAGS PCRE_LIBS PCRE_CONFIG CPP OBJEXT EXEEXT ac_ct_CC CPPFLAGS LDFLAGS CFLAGS CC target_os target_vendor target_cpu target host_os host_vendor host_cpu host build_os build_vendor build_cpu build EGREP GREP rel_proxycachedir exp_proxycachedir rel_logfiledir exp_logfiledir rel_runtimedir exp_runtimedir rel_localstatedir exp_localstatedir rel_includedir exp_includedir rel_cgidir exp_cgidir rel_manualdir exp_manualdir rel_htdocsdir exp_htdocsdir rel_iconsdir exp_iconsdir rel_errordir exp_errordir rel_installbuilddir exp_installbuilddir rel_datadir exp_datadir rel_sysconfdir exp_sysconfdir rel_mandir exp_mandir rel_libexecdir exp_libexecdir rel_libdir exp_libdir rel_sbindir exp_sbindir rel_bindir exp_bindir rel_exec_prefix exp_exec_prefix target_alias host_alias build_alias LIBS ECHO_T ECHO_N ECHO_C DEFS mandir localedir libdir psdir pdfdir dvidir htmldir infodir docdir oldincludedir includedir runstatedir localstatedir sharedstatedir sysconfdir datadir datarootdir libexecdir sbindir bindir program_transform_name prefix exec_prefix PACKAGE_URL PACKAGE_BUGREPORT PACKAGE_STRING PACKAGE_VERSION PACKAGE_TARNAME PACKAGE_NAME PATH_SEPARATOR SHELL' ac_subst_files='' ac_user_opts=' enable_option_checking enable_layout with_included_apr with_apr with_apr_util with_pcre with_port with_sslport enable_dtrace enable_hook_probes enable_exception_hook enable_load_all_modules enable_maintainer_mode enable_debugger_mode enable_pie enable_modules enable_mods_shared enable_mods_static enable_authn_file enable_authn_dbm enable_authn_anon enable_authn_dbd enable_authn_socache enable_authn_core enable_authz_host enable_authz_groupfile enable_authz_user enable_authz_dbm enable_authz_owner enable_authz_dbd enable_authz_core enable_authnz_ldap enable_authnz_fcgi enable_access_compat enable_auth_basic enable_auth_form enable_auth_digest enable_allowmethods enable_isapi enable_file_cache enable_cache enable_cache_disk enable_cache_socache enable_socache_shmcb enable_socache_dbm enable_socache_memcache enable_socache_redis enable_socache_dc with_distcache enable_so enable_watchdog enable_macro enable_dbd enable_bucketeer enable_dumpio enable_echo enable_example_hooks enable_case_filter enable_case_filter_in enable_example_ipc enable_buffer enable_data enable_ratelimit enable_reqtimeout enable_ext_filter enable_request enable_include enable_filter enable_reflector enable_substitute enable_sed enable_charset_lite enable_deflate with_z enable_xml2enc with_libxml2 enable_proxy_html enable_brotli with_brotli enable_http enable_mime enable_ldap enable_log_config enable_log_debug enable_log_forensic enable_logio enable_lua with_lua enable_luajit enable_env enable_mime_magic enable_cern_meta enable_expires enable_headers enable_ident enable_usertrack enable_unique_id enable_setenvif enable_version enable_remoteip enable_proxy enable_proxy_connect enable_proxy_ftp enable_proxy_http enable_proxy_fcgi enable_proxy_scgi enable_proxy_uwsgi enable_proxy_fdpass enable_proxy_wstunnel enable_proxy_ajp enable_proxy_balancer enable_proxy_express enable_proxy_hcheck enable_session enable_session_cookie enable_session_crypto enable_session_dbd enable_slotmem_shm enable_slotmem_plain enable_ssl with_ssl enable_ssl_staticlib_deps enable_optional_hook_export enable_optional_hook_import enable_optional_fn_import enable_optional_fn_export enable_dialup enable_static_support enable_static_htpasswd enable_static_htdigest enable_static_rotatelogs enable_static_logresolve enable_static_htdbm enable_static_ab enable_static_checkgid enable_static_htcacheclean enable_static_httxt2dbm enable_static_fcgistarter enable_http2 with_nghttp2 enable_nghttp2_staticlib_deps enable_proxy_http2 enable_md with_jansson enable_jansson_staticlib_deps with_curl enable_curl_staticlib_deps enable_lbmethod_byrequests enable_lbmethod_bytraffic enable_lbmethod_bybusyness enable_lbmethod_heartbeat with_mpm enable_mpms_shared enable_unixd enable_privileges enable_heartbeat enable_heartmonitor enable_dav enable_status enable_autoindex enable_asis enable_info enable_suexec enable_cgid enable_cgi enable_dav_fs enable_dav_lock with_module enable_vhost_alias enable_negotiation enable_dir enable_imagemap enable_actions enable_speling enable_userdir enable_alias enable_rewrite with_program_name with_suexec_bin with_suexec_caller with_suexec_userdir with_suexec_docroot with_suexec_uidmin with_suexec_gidmin with_suexec_logfile with_suexec_syslog with_suexec_safepath with_suexec_umask enable_suexec_capabilities enable_v4_mapped ' ac_precious_vars='build_alias host_alias target_alias CC CFLAGS LDFLAGS LIBS CPPFLAGS CPP' # Initialize some variables set by options. ac_init_help= ac_init_version=false ac_unrecognized_opts= ac_unrecognized_sep= # The variables have the same names as the options, with # dashes changed to underlines. cache_file=/dev/null exec_prefix=NONE no_create= no_recursion= prefix=NONE program_prefix=NONE program_suffix=NONE program_transform_name=s,x,x, silent= site= srcdir= verbose= x_includes=NONE x_libraries=NONE # Installation directory options. # These are left unexpanded so users can "make install exec_prefix=/foo" # and all the variables that are supposed to be based on exec_prefix # by default will actually change. # Use braces instead of parens because sh, perl, etc. also accept them. # (The list follows the same order as the GNU Coding Standards.) bindir='${exec_prefix}/bin' sbindir='${exec_prefix}/sbin' libexecdir='${exec_prefix}/libexec' datarootdir='${prefix}/share' datadir='${datarootdir}' sysconfdir='${prefix}/etc' sharedstatedir='${prefix}/com' localstatedir='${prefix}/var' runstatedir='${localstatedir}/run' includedir='${prefix}/include' oldincludedir='/usr/include' docdir='${datarootdir}/doc/${PACKAGE}' infodir='${datarootdir}/info' htmldir='${docdir}' dvidir='${docdir}' pdfdir='${docdir}' psdir='${docdir}' libdir='${exec_prefix}/lib' localedir='${datarootdir}/locale' mandir='${datarootdir}/man' ac_prev= ac_dashdash= for ac_option do # If the previous option needs an argument, assign it. if test -n "$ac_prev"; then eval $ac_prev=\$ac_option ac_prev= continue fi case $ac_option in *=?*) ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;; *=) ac_optarg= ;; *) ac_optarg=yes ;; esac # Accept the important Cygnus configure options, so we can diagnose typos. case $ac_dashdash$ac_option in --) ac_dashdash=yes ;; -bindir | --bindir | --bindi | --bind | --bin | --bi) ac_prev=bindir ;; -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*) bindir=$ac_optarg ;; -build | --build | --buil | --bui | --bu) ac_prev=build_alias ;; -build=* | --build=* | --buil=* | --bui=* | --bu=*) build_alias=$ac_optarg ;; -cache-file | --cache-file | --cache-fil | --cache-fi \ | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c) ac_prev=cache_file ;; -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \ | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*) cache_file=$ac_optarg ;; --config-cache | -C) cache_file=config.cache ;; -datadir | --datadir | --datadi | --datad) ac_prev=datadir ;; -datadir=* | --datadir=* | --datadi=* | --datad=*) datadir=$ac_optarg ;; -datarootdir | --datarootdir | --datarootdi | --datarootd | --dataroot \ | --dataroo | --dataro | --datar) ac_prev=datarootdir ;; -datarootdir=* | --datarootdir=* | --datarootdi=* | --datarootd=* \ | --dataroot=* | --dataroo=* | --dataro=* | --datar=*) datarootdir=$ac_optarg ;; -disable-* | --disable-*) ac_useropt=`expr "x$ac_option" : 'x-*disable-\(.*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && as_fn_error $? "invalid feature name: $ac_useropt" ac_useropt_orig=$ac_useropt ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in *" "enable_$ac_useropt" "*) ;; *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--disable-$ac_useropt_orig" ac_unrecognized_sep=', ';; esac eval enable_$ac_useropt=no ;; -docdir | --docdir | --docdi | --doc | --do) ac_prev=docdir ;; -docdir=* | --docdir=* | --docdi=* | --doc=* | --do=*) docdir=$ac_optarg ;; -dvidir | --dvidir | --dvidi | --dvid | --dvi | --dv) ac_prev=dvidir ;; -dvidir=* | --dvidir=* | --dvidi=* | --dvid=* | --dvi=* | --dv=*) dvidir=$ac_optarg ;; -enable-* | --enable-*) ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && as_fn_error $? "invalid feature name: $ac_useropt" ac_useropt_orig=$ac_useropt ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in *" "enable_$ac_useropt" "*) ;; *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--enable-$ac_useropt_orig" ac_unrecognized_sep=', ';; esac eval enable_$ac_useropt=\$ac_optarg ;; -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \ | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \ | --exec | --exe | --ex) ac_prev=exec_prefix ;; -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \ | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \ | --exec=* | --exe=* | --ex=*) exec_prefix=$ac_optarg ;; -gas | --gas | --ga | --g) # Obsolete; use --with-gas. with_gas=yes ;; -help | --help | --hel | --he | -h) ac_init_help=long ;; -help=r* | --help=r* | --hel=r* | --he=r* | -hr*) ac_init_help=recursive ;; -help=s* | --help=s* | --hel=s* | --he=s* | -hs*) ac_init_help=short ;; -host | --host | --hos | --ho) ac_prev=host_alias ;; -host=* | --host=* | --hos=* | --ho=*) host_alias=$ac_optarg ;; -htmldir | --htmldir | --htmldi | --htmld | --html | --htm | --ht) ac_prev=htmldir ;; -htmldir=* | --htmldir=* | --htmldi=* | --htmld=* | --html=* | --htm=* \ | --ht=*) htmldir=$ac_optarg ;; -includedir | --includedir | --includedi | --included | --include \ | --includ | --inclu | --incl | --inc) ac_prev=includedir ;; -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \ | --includ=* | --inclu=* | --incl=* | --inc=*) includedir=$ac_optarg ;; -infodir | --infodir | --infodi | --infod | --info | --inf) ac_prev=infodir ;; -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*) infodir=$ac_optarg ;; -libdir | --libdir | --libdi | --libd) ac_prev=libdir ;; -libdir=* | --libdir=* | --libdi=* | --libd=*) libdir=$ac_optarg ;; -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \ | --libexe | --libex | --libe) ac_prev=libexecdir ;; -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \ | --libexe=* | --libex=* | --libe=*) libexecdir=$ac_optarg ;; -localedir | --localedir | --localedi | --localed | --locale) ac_prev=localedir ;; -localedir=* | --localedir=* | --localedi=* | --localed=* | --locale=*) localedir=$ac_optarg ;; -localstatedir | --localstatedir | --localstatedi | --localstated \ | --localstate | --localstat | --localsta | --localst | --locals) ac_prev=localstatedir ;; -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \ | --localstate=* | --localstat=* | --localsta=* | --localst=* | --locals=*) localstatedir=$ac_optarg ;; -mandir | --mandir | --mandi | --mand | --man | --ma | --m) ac_prev=mandir ;; -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*) mandir=$ac_optarg ;; -nfp | --nfp | --nf) # Obsolete; use --without-fp. with_fp=no ;; -no-create | --no-create | --no-creat | --no-crea | --no-cre \ | --no-cr | --no-c | -n) no_create=yes ;; -no-recursion | --no-recursion | --no-recursio | --no-recursi \ | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r) no_recursion=yes ;; -oldincludedir | --oldincludedir | --oldincludedi | --oldincluded \ | --oldinclude | --oldinclud | --oldinclu | --oldincl | --oldinc \ | --oldin | --oldi | --old | --ol | --o) ac_prev=oldincludedir ;; -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \ | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \ | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*) oldincludedir=$ac_optarg ;; -prefix | --prefix | --prefi | --pref | --pre | --pr | --p) ac_prev=prefix ;; -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*) prefix=$ac_optarg ;; -program-prefix | --program-prefix | --program-prefi | --program-pref \ | --program-pre | --program-pr | --program-p) ac_prev=program_prefix ;; -program-prefix=* | --program-prefix=* | --program-prefi=* \ | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*) program_prefix=$ac_optarg ;; -program-suffix | --program-suffix | --program-suffi | --program-suff \ | --program-suf | --program-su | --program-s) ac_prev=program_suffix ;; -program-suffix=* | --program-suffix=* | --program-suffi=* \ | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*) program_suffix=$ac_optarg ;; -program-transform-name | --program-transform-name \ | --program-transform-nam | --program-transform-na \ | --program-transform-n | --program-transform- \ | --program-transform | --program-transfor \ | --program-transfo | --program-transf \ | --program-trans | --program-tran \ | --progr-tra | --program-tr | --program-t) ac_prev=program_transform_name ;; -program-transform-name=* | --program-transform-name=* \ | --program-transform-nam=* | --program-transform-na=* \ | --program-transform-n=* | --program-transform-=* \ | --program-transform=* | --program-transfor=* \ | --program-transfo=* | --program-transf=* \ | --program-trans=* | --program-tran=* \ | --progr-tra=* | --program-tr=* | --program-t=*) program_transform_name=$ac_optarg ;; -pdfdir | --pdfdir | --pdfdi | --pdfd | --pdf | --pd) ac_prev=pdfdir ;; -pdfdir=* | --pdfdir=* | --pdfdi=* | --pdfd=* | --pdf=* | --pd=*) pdfdir=$ac_optarg ;; -psdir | --psdir | --psdi | --psd | --ps) ac_prev=psdir ;; -psdir=* | --psdir=* | --psdi=* | --psd=* | --ps=*) psdir=$ac_optarg ;; -q | -quiet | --quiet | --quie | --qui | --qu | --q \ | -silent | --silent | --silen | --sile | --sil) silent=yes ;; -runstatedir | --runstatedir | --runstatedi | --runstated \ | --runstate | --runstat | --runsta | --runst | --runs \ | --run | --ru | --r) ac_prev=runstatedir ;; -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \ | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \ | --run=* | --ru=* | --r=*) runstatedir=$ac_optarg ;; -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb) ac_prev=sbindir ;; -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \ | --sbi=* | --sb=*) sbindir=$ac_optarg ;; -sharedstatedir | --sharedstatedir | --sharedstatedi \ | --sharedstated | --sharedstate | --sharedstat | --sharedsta \ | --sharedst | --shareds | --shared | --share | --shar \ | --sha | --sh) ac_prev=sharedstatedir ;; -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \ | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \ | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \ | --sha=* | --sh=*) sharedstatedir=$ac_optarg ;; -site | --site | --sit) ac_prev=site ;; -site=* | --site=* | --sit=*) site=$ac_optarg ;; -srcdir | --srcdir | --srcdi | --srcd | --src | --sr) ac_prev=srcdir ;; -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*) srcdir=$ac_optarg ;; -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \ | --syscon | --sysco | --sysc | --sys | --sy) ac_prev=sysconfdir ;; -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \ | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*) sysconfdir=$ac_optarg ;; -target | --target | --targe | --targ | --tar | --ta | --t) ac_prev=target_alias ;; -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*) target_alias=$ac_optarg ;; -v | -verbose | --verbose | --verbos | --verbo | --verb) verbose=yes ;; -version | --version | --versio | --versi | --vers | -V) ac_init_version=: ;; -with-* | --with-*) ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && as_fn_error $? "invalid package name: $ac_useropt" ac_useropt_orig=$ac_useropt ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in *" "with_$ac_useropt" "*) ;; *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--with-$ac_useropt_orig" ac_unrecognized_sep=', ';; esac eval with_$ac_useropt=\$ac_optarg ;; -without-* | --without-*) ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && as_fn_error $? "invalid package name: $ac_useropt" ac_useropt_orig=$ac_useropt ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in *" "with_$ac_useropt" "*) ;; *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--without-$ac_useropt_orig" ac_unrecognized_sep=', ';; esac eval with_$ac_useropt=no ;; --x) # Obsolete; use --with-x. with_x=yes ;; -x-includes | --x-includes | --x-include | --x-includ | --x-inclu \ | --x-incl | --x-inc | --x-in | --x-i) ac_prev=x_includes ;; -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \ | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*) x_includes=$ac_optarg ;; -x-libraries | --x-libraries | --x-librarie | --x-librari \ | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l) ac_prev=x_libraries ;; -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \ | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*) x_libraries=$ac_optarg ;; -*) as_fn_error $? "unrecognized option: \`$ac_option' Try \`$0 --help' for more information" ;; *=*) ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='` # Reject names that are not valid shell variable names. case $ac_envvar in #( '' | [0-9]* | *[!_$as_cr_alnum]* ) as_fn_error $? "invalid variable name: \`$ac_envvar'" ;; esac eval $ac_envvar=\$ac_optarg export $ac_envvar ;; *) # FIXME: should be removed in autoconf 3.0. $as_echo "$as_me: WARNING: you should use --build, --host, --target" >&2 expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null && $as_echo "$as_me: WARNING: invalid host type: $ac_option" >&2 : "${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}" ;; esac done if test -n "$ac_prev"; then ac_option=--`echo $ac_prev | sed 's/_/-/g'` as_fn_error $? "missing argument to $ac_option" fi if test -n "$ac_unrecognized_opts"; then case $enable_option_checking in no) ;; fatal) as_fn_error $? "unrecognized options: $ac_unrecognized_opts" ;; *) $as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2 ;; esac fi # Check all directory arguments for consistency. for ac_var in exec_prefix prefix bindir sbindir libexecdir datarootdir \ datadir sysconfdir sharedstatedir localstatedir includedir \ oldincludedir docdir infodir htmldir dvidir pdfdir psdir \ libdir localedir mandir runstatedir do eval ac_val=\$$ac_var # Remove trailing slashes. case $ac_val in */ ) ac_val=`expr "X$ac_val" : 'X\(.*[^/]\)' \| "X$ac_val" : 'X\(.*\)'` eval $ac_var=\$ac_val;; esac # Be sure to have absolute directory names. case $ac_val in [\\/$]* | ?:[\\/]* ) continue;; NONE | '' ) case $ac_var in *prefix ) continue;; esac;; esac as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val" done # There might be people who depend on the old broken behavior: `$host' # used to hold the argument of --host etc. # FIXME: To remove some day. build=$build_alias host=$host_alias target=$target_alias # FIXME: To remove some day. if test "x$host_alias" != x; then if test "x$build_alias" = x; then cross_compiling=maybe elif test "x$build_alias" != "x$host_alias"; then cross_compiling=yes fi fi ac_tool_prefix= test -n "$host_alias" && ac_tool_prefix=$host_alias- test "$silent" = yes && exec 6>/dev/null ac_pwd=`pwd` && test -n "$ac_pwd" && ac_ls_di=`ls -di .` && ac_pwd_ls_di=`cd "$ac_pwd" && ls -di .` || as_fn_error $? "working directory cannot be determined" test "X$ac_ls_di" = "X$ac_pwd_ls_di" || as_fn_error $? "pwd does not report name of working directory" # Find the source files, if location was not specified. if test -z "$srcdir"; then ac_srcdir_defaulted=yes # Try the directory containing this script, then the parent directory. ac_confdir=`$as_dirname -- "$as_myself" || $as_expr X"$as_myself" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$as_myself" : 'X\(//\)[^/]' \| \ X"$as_myself" : 'X\(//\)$' \| \ X"$as_myself" : 'X\(/\)' \| . 2>/dev/null || $as_echo X"$as_myself" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'` srcdir=$ac_confdir if test ! -r "$srcdir/$ac_unique_file"; then srcdir=.. fi else ac_srcdir_defaulted=no fi if test ! -r "$srcdir/$ac_unique_file"; then test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .." as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir" fi ac_msg="sources are in $srcdir, but \`cd $srcdir' does not work" ac_abs_confdir=`( cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg" pwd)` # When building in place, set srcdir=. if test "$ac_abs_confdir" = "$ac_pwd"; then srcdir=. fi # Remove unnecessary trailing slashes from srcdir. # Double slashes in file names in object file debugging info # mess up M-x gdb in Emacs. case $srcdir in */) srcdir=`expr "X$srcdir" : 'X\(.*[^/]\)' \| "X$srcdir" : 'X\(.*\)'`;; esac for ac_var in $ac_precious_vars; do eval ac_env_${ac_var}_set=\${${ac_var}+set} eval ac_env_${ac_var}_value=\$${ac_var} eval ac_cv_env_${ac_var}_set=\${${ac_var}+set} eval ac_cv_env_${ac_var}_value=\$${ac_var} done # # Report the --help message. # if test "$ac_init_help" = "long"; then # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF \`configure' configures this package to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... To assign environment variables (e.g., CC, CFLAGS...), specify them as VAR=VALUE. See below for descriptions of some of the useful variables. Defaults for the options are specified in brackets. Configuration: -h, --help display this help and exit --help=short display options specific to this package --help=recursive display the short help of all the included packages -V, --version display version information and exit -q, --quiet, --silent do not print \`checking ...' messages --cache-file=FILE cache test results in FILE [disabled] -C, --config-cache alias for \`--cache-file=config.cache' -n, --no-create do not create output files --srcdir=DIR find the sources in DIR [configure dir or \`..'] Installation directories: --prefix=PREFIX install architecture-independent files in PREFIX [$ac_default_prefix] --exec-prefix=EPREFIX install architecture-dependent files in EPREFIX [PREFIX] By default, \`make install' will install all the files in \`$ac_default_prefix/bin', \`$ac_default_prefix/lib' etc. You can specify an installation prefix other than \`$ac_default_prefix' using \`--prefix', for instance \`--prefix=\$HOME'. For better control, use the options below. Fine tuning of the installation directories: --bindir=DIR user executables [EPREFIX/bin] --sbindir=DIR system admin executables [EPREFIX/sbin] --libexecdir=DIR program executables [EPREFIX/libexec] --sysconfdir=DIR read-only single-machine data [PREFIX/etc] --sharedstatedir=DIR modifiable architecture-independent data [PREFIX/com] --localstatedir=DIR modifiable single-machine data [PREFIX/var] --runstatedir=DIR modifiable per-process data [LOCALSTATEDIR/run] --libdir=DIR object code libraries [EPREFIX/lib] --includedir=DIR C header files [PREFIX/include] --oldincludedir=DIR C header files for non-gcc [/usr/include] --datarootdir=DIR read-only arch.-independent data root [PREFIX/share] --datadir=DIR read-only architecture-independent data [DATAROOTDIR] --infodir=DIR info documentation [DATAROOTDIR/info] --localedir=DIR locale-dependent data [DATAROOTDIR/locale] --mandir=DIR man documentation [DATAROOTDIR/man] --docdir=DIR documentation root [DATAROOTDIR/doc/PACKAGE] --htmldir=DIR html documentation [DOCDIR] --dvidir=DIR dvi documentation [DOCDIR] --pdfdir=DIR pdf documentation [DOCDIR] --psdir=DIR ps documentation [DOCDIR] _ACEOF cat <<\_ACEOF System types: --build=BUILD configure for building on BUILD [guessed] --host=HOST cross-compile to build programs to run on HOST [BUILD] --target=TARGET configure for building compilers for TARGET [HOST] _ACEOF fi if test -n "$ac_init_help"; then cat <<\_ACEOF Optional Features: --disable-option-checking ignore unrecognized --enable/--with options --disable-FEATURE do not include FEATURE (same as --enable-FEATURE=no) --enable-FEATURE[=ARG] include FEATURE [ARG=yes] --enable-layout=LAYOUT --enable-dtrace Enable DTrace probes --enable-hook-probes Enable APR hook probes --enable-exception-hook Enable fatal exception hook --enable-load-all-modules Load all modules --enable-maintainer-mode Turn on debugging and compile time warnings and load all compiled modules --enable-debugger-mode Turn on debugging and compile time warnings and turn off optimization --enable-pie Build httpd as a Position Independent Executable --enable-modules=MODULE-LIST Space-separated list of modules to enable | "all" | "most" | "few" | "none" | "reallyall" --enable-mods-shared=MODULE-LIST Space-separated list of shared modules to enable | "all" | "most" | "few" | "reallyall" --enable-mods-static=MODULE-LIST Space-separated list of static modules to enable | "all" | "most" | "few" | "reallyall" --disable-authn-file file-based authentication control --enable-authn-dbm DBM-based authentication control --enable-authn-anon anonymous user authentication control --enable-authn-dbd SQL-based authentication control --enable-authn-socache Cached authentication control --disable-authn-core core authentication module --disable-authz-host host-based authorization control --disable-authz-groupfile 'require group' authorization control --disable-authz-user 'require user' authorization control --enable-authz-dbm DBM-based authorization control --enable-authz-owner 'require file-owner' authorization control --enable-authz-dbd SQL based authorization and Login/Session support --disable-authz-core core authorization provider vector module --enable-authnz-ldap LDAP based authentication --enable-authnz-fcgi FastCGI authorizer-based authentication and authorization --disable-access-compat mod_access compatibility --disable-auth-basic basic authentication --enable-auth-form form authentication --enable-auth-digest RFC2617 Digest authentication --enable-allowmethods restrict allowed HTTP methods --enable-isapi isapi extension support --enable-file-cache File cache --enable-cache dynamic file caching. At least one storage management module (e.g. mod_cache_disk) is also necessary. --enable-cache-disk disk caching module --enable-cache-socache shared object caching module --enable-socache-shmcb shmcb small object cache provider --enable-socache-dbm dbm small object cache provider --enable-socache-memcache memcache small object cache provider --enable-socache-redis redis small object cache provider --enable-socache-dc distcache small object cache provider --enable-so DSO capability. This module will be automatically enabled unless you build all modules statically. --enable-watchdog Watchdog module --enable-macro Define and use macros in configuration files --enable-dbd Apache DBD Framework --enable-bucketeer buckets manipulation filter. Useful only for developers and testing purposes. --enable-dumpio I/O dump filter --enable-echo ECHO server --enable-example-hooks Example hook callback handler module --enable-case-filter Example uppercase conversion filter --enable-case-filter-in Example uppercase conversion input filter --enable-example-ipc Example of shared memory and mutex usage --enable-buffer Filter Buffering --enable-data RFC2397 data encoder --enable-ratelimit Output Bandwidth Limiting --disable-reqtimeout Limit time waiting for request from client --enable-ext-filter external filter module --enable-request Request Body Filtering --enable-include Server Side Includes --disable-filter Smart Filtering --enable-reflector Reflect request through the output filter stack --enable-substitute response content rewrite-like filtering --enable-sed filter request and/or response bodies through sed --disable-charset-lite character set translation. Enabled by default only on EBCDIC systems. --enable-charset-lite character set translation. Enabled by default only on EBCDIC systems. --enable-deflate Deflate transfer encoding support --enable-xml2enc i18n support for markup filters --enable-proxy-html Fix HTML Links in a Reverse Proxy --enable-brotli Brotli compression support --enable-http HTTP protocol handling. The http module is a basic one that enables the server to function as an HTTP server. It is only useful to disable it if you want to use another protocol module instead. Don't disable this module unless you are really sure what you are doing. Note: This module will always be linked statically. --disable-mime mapping of file-extension to MIME. Disabling this module is normally not recommended. --enable-ldap LDAP caching and connection pooling services --disable-log-config logging configuration. You won't be able to log requests to the server without this module. --enable-log-debug configurable debug logging --enable-log-forensic forensic logging --enable-logio input and output logging --enable-lua Apache Lua Framework --enable-luajit Enable LuaJit Support --disable-env clearing/setting of ENV vars --enable-mime-magic automagically determining MIME type --enable-cern-meta CERN-type meta files --enable-expires Expires header control --disable-headers HTTP header control --enable-ident RFC 1413 identity check --enable-usertrack user-session tracking --enable-unique-id per-request unique ids --disable-setenvif basing ENV vars on headers --disable-version determining httpd version in config files --enable-remoteip translate header contents to an apparent client remote_ip --enable-proxy Apache proxy module --enable-proxy-connect Apache proxy CONNECT module. Requires --enable-proxy. --enable-proxy-ftp Apache proxy FTP module. Requires --enable-proxy. --enable-proxy-http Apache proxy HTTP module. Requires --enable-proxy. --enable-proxy-fcgi Apache proxy FastCGI module. Requires --enable-proxy. --enable-proxy-scgi Apache proxy SCGI module. Requires --enable-proxy. --enable-proxy-uwsgi Apache proxy UWSGI module. Requires --enable-proxy. --enable-proxy-fdpass Apache proxy to Unix Daemon Socket module. Requires --enable-proxy. --enable-proxy-wstunnel Apache proxy Websocket Tunnel module. Requires --enable-proxy. --enable-proxy-ajp Apache proxy AJP module. Requires --enable-proxy. --enable-proxy-balancer Apache proxy BALANCER module. Requires --enable-proxy. --enable-proxy-express mass reverse-proxy module. Requires --enable-proxy. --enable-proxy-hcheck reverse-proxy health-check module. Requires --enable-proxy and --enable-watchdog. --enable-session session module --enable-session-cookie session cookie module --enable-session-crypto session crypto module --enable-session-dbd session dbd module --enable-slotmem-shm slotmem provider that uses shared memory --enable-slotmem-plain slotmem provider that uses plain memory --enable-ssl SSL/TLS support (mod_ssl) --enable-ssl-staticlib-deps link mod_ssl with dependencies of OpenSSL's static libraries (as indicated by "pkg-config --static"). Must be specified in addition to --enable-ssl. --enable-optional-hook-export example optional hook exporter --enable-optional-hook-import example optional hook importer --enable-optional-fn-import example optional function importer --enable-optional-fn-export example optional function exporter --enable-dialup rate limits static files to dialup modem speeds --enable-static-support Build a statically linked version of the support binaries --enable-static-htpasswd Build a statically linked version of htpasswd --enable-static-htdigest Build a statically linked version of htdigest --enable-static-rotatelogs Build a statically linked version of rotatelogs --enable-static-logresolve Build a statically linked version of logresolve --enable-static-htdbm Build a statically linked version of htdbm --enable-static-ab Build a statically linked version of ab --enable-static-checkgid Build a statically linked version of checkgid --enable-static-htcacheclean Build a statically linked version of htcacheclean --enable-static-httxt2dbm Build a statically linked version of httxt2dbm --enable-static-fcgistarter Build a statically linked version of fcgistarter --enable-http2 HTTP/2 protocol handling in addition to HTTP protocol handling. Implemented by mod_http2. This module requires a libnghttp2 installation. See --with-nghttp2 on how to manage non-standard locations. This module is usually linked shared and requires loading. --enable-nghttp2-staticlib-deps link mod_http2 with dependencies of libnghttp2's static libraries (as indicated by "pkg-config --static"). Must be specified in addition to --enable-http2. --enable-proxy-http2 HTTP/2 proxy module. This module requires a libnghttp2 installation. See --with-nghttp2 on how to manage non-standard locations. Also requires --enable-proxy. --enable-md Managed Domain handling --enable-jansson-staticlib-deps link mod_md with dependencies of libjansson's static libraries (as indicated by "pkg-config --static"). Must be specified in addition to --enable-md. --enable-curl-staticlib-deps link mod_md with dependencies of libcurl's static libraries (as indicated by "pkg-config --static"). Must be specified in addition to --enable-md. --enable-lbmethod-byrequests Apache proxy Load balancing by request counting --enable-lbmethod-bytraffic Apache proxy Load balancing by traffic counting --enable-lbmethod-bybusyness Apache proxy Load balancing by busyness --enable-lbmethod-heartbeat Apache proxy Load balancing from Heartbeats --enable-mpms-shared=MPM-LIST Space-separated list of MPM modules to enable for dynamic loading. MPM-LIST=list | "all" --enable-unixd unix specific support --enable-privileges Per-virtualhost Unix UserIDs and enhanced security for Solaris --enable-heartbeat Generates Heartbeats --enable-heartmonitor Collects Heartbeats --enable-dav WebDAV protocol handling. --enable-dav also enables mod_dav_fs --disable-status process/thread monitoring --disable-autoindex directory listing --enable-asis as-is filetypes --enable-info server information --enable-suexec set uid and gid for spawned processes --enable-cgid CGI scripts. Enabled by default with threaded MPMs --enable-cgi CGI scripts. Enabled by default with non-threaded MPMs --enable-dav-fs DAV provider for the filesystem. --enable-dav also enables mod_dav_fs. --enable-dav-lock DAV provider for generic locking --enable-vhost-alias mass virtual hosting module --enable-negotiation content negotiation --disable-dir directory request handling --enable-imagemap server-side imagemaps --enable-actions Action triggering on requests --enable-speling correct common URL misspellings --enable-userdir mapping of requests to user-specific directories --disable-alias mapping of requests to different filesystem parts --enable-rewrite rule based URL manipulation --enable-suexec-capabilities Use Linux capability bits not setuid root suexec --enable-v4-mapped Allow IPv6 sockets to handle IPv4 connections Optional Packages: --with-PACKAGE[=ARG] use PACKAGE [ARG=yes] --without-PACKAGE do not use PACKAGE (same as --with-PACKAGE=no) --with-included-apr Use bundled copies of APR/APR-Util --with-apr=PATH prefix for installed APR or the full path to apr-config --with-apr-util=PATH prefix for installed APU or the full path to apu-config --with-pcre=PATH Use external PCRE library --with-port=PORT Port on which to listen (default is 80) --with-sslport=SSLPORT Port on which to securelisten (default is 443) --with-distcache=PATH Distcache installation directory --with-z=PATH use a specific zlib library --with-libxml2=PATH location for libxml2 --with-brotli=PATH Brotli installation directory --with-lua=PATH Path to the Lua 5.3/5.2/5.1 prefix --with-ssl=PATH OpenSSL installation directory --with-nghttp2=PATH nghttp2 installation directory --with-jansson=PATH jansson installation directory --with-curl=PATH curl installation directory --with-mpm=MPM Choose the process model for Apache to use by default. MPM={event|worker|prefork|winnt} This will be statically linked as the only available MPM unless --enable-mpms-shared is also specified. --with-module=module-type:module-file Enable module-file in the modules/ directory. --with-program-name alternate executable name --with-suexec-bin Path to suexec binary --with-suexec-caller User allowed to call SuExec --with-suexec-userdir User subdirectory --with-suexec-docroot SuExec root directory --with-suexec-uidmin Minimal allowed UID --with-suexec-gidmin Minimal allowed GID --with-suexec-logfile Set the logfile --with-suexec-syslog Use syslog for suexec logging --with-suexec-safepath Set the safepath --with-suexec-umask umask for suexec'd process Some influential environment variables: CC C compiler command CFLAGS C compiler flags LDFLAGS linker flags, e.g. -L if you have libraries in a nonstandard directory LIBS libraries to pass to the linker, e.g. -l CPPFLAGS (Objective) C/C++ preprocessor flags, e.g. -I if you have headers in a nonstandard directory CPP C preprocessor Use these variables to override the choices made by `configure' or to help it to find libraries and programs with nonstandard names/locations. Report bugs to the package provider. _ACEOF ac_status=$? fi if test "$ac_init_help" = "recursive"; then # If there are subdirs, report their specific --help. for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue test -d "$ac_dir" || { cd "$srcdir" && ac_pwd=`pwd` && srcdir=. && test -d "$ac_dir"; } || continue ac_builddir=. case "$ac_dir" in .) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;; *) ac_dir_suffix=/`$as_echo "$ac_dir" | sed 's|^\.[\\/]||'` # A ".." for each directory in $ac_dir_suffix. ac_top_builddir_sub=`$as_echo "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'` case $ac_top_builddir_sub in "") ac_top_builddir_sub=. ac_top_build_prefix= ;; *) ac_top_build_prefix=$ac_top_builddir_sub/ ;; esac ;; esac ac_abs_top_builddir=$ac_pwd ac_abs_builddir=$ac_pwd$ac_dir_suffix # for backward compatibility: ac_top_builddir=$ac_top_build_prefix case $srcdir in .) # We are building in place. ac_srcdir=. ac_top_srcdir=$ac_top_builddir_sub ac_abs_top_srcdir=$ac_pwd ;; [\\/]* | ?:[\\/]* ) # Absolute name. ac_srcdir=$srcdir$ac_dir_suffix; ac_top_srcdir=$srcdir ac_abs_top_srcdir=$srcdir ;; *) # Relative name. ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix ac_top_srcdir=$ac_top_build_prefix$srcdir ac_abs_top_srcdir=$ac_pwd/$srcdir ;; esac ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix cd "$ac_dir" || { ac_status=$?; continue; } # Check for guested configure. if test -f "$ac_srcdir/configure.gnu"; then echo && $SHELL "$ac_srcdir/configure.gnu" --help=recursive elif test -f "$ac_srcdir/configure"; then echo && $SHELL "$ac_srcdir/configure" --help=recursive else $as_echo "$as_me: WARNING: no configuration information is in $ac_dir" >&2 fi || ac_status=$? cd "$ac_pwd" || { ac_status=$?; break; } done fi test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF configure generated by GNU Autoconf 2.69 Copyright (C) 2012 Free Software Foundation, Inc. This configure script is free software; the Free Software Foundation gives unlimited permission to copy, distribute and modify it. _ACEOF exit fi ## ------------------------ ## ## Autoconf initialization. ## ## ------------------------ ## # ac_fn_c_try_compile LINENO # -------------------------- # Try to compile conftest.$ac_ext, and return whether this succeeded. ac_fn_c_try_compile () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack rm -f conftest.$ac_objext if { { ac_try="$ac_compile" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_compile") 2>conftest.err ac_status=$? if test -s conftest.err; then grep -v '^ *+' conftest.err >conftest.er1 cat conftest.er1 >&5 mv -f conftest.er1 conftest.err fi $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && { test -z "$ac_c_werror_flag" || test ! -s conftest.err } && test -s conftest.$ac_objext; then : ac_retval=0 else $as_echo "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 ac_retval=1 fi eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno as_fn_set_status $ac_retval } # ac_fn_c_try_compile # ac_fn_c_try_cpp LINENO # ---------------------- # Try to preprocess conftest.$ac_ext, and return whether this succeeded. ac_fn_c_try_cpp () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack if { { ac_try="$ac_cpp conftest.$ac_ext" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_cpp conftest.$ac_ext") 2>conftest.err ac_status=$? if test -s conftest.err; then grep -v '^ *+' conftest.err >conftest.er1 cat conftest.er1 >&5 mv -f conftest.er1 conftest.err fi $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } > conftest.i && { test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" || test ! -s conftest.err }; then : ac_retval=0 else $as_echo "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 ac_retval=1 fi eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno as_fn_set_status $ac_retval } # ac_fn_c_try_cpp # ac_fn_c_check_header_mongrel LINENO HEADER VAR INCLUDES # ------------------------------------------------------- # Tests whether HEADER exists, giving a warning if it cannot be compiled using # the include files in INCLUDES and setting the cache variable VAR # accordingly. ac_fn_c_check_header_mongrel () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack if eval \${$3+:} false; then : { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5 $as_echo_n "checking for $2... " >&6; } if eval \${$3+:} false; then : $as_echo_n "(cached) " >&6 fi eval ac_res=\$$3 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 $as_echo "$ac_res" >&6; } else # Is the header compilable? { $as_echo "$as_me:${as_lineno-$LINENO}: checking $2 usability" >&5 $as_echo_n "checking $2 usability... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ $4 #include <$2> _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_header_compiler=yes else ac_header_compiler=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_header_compiler" >&5 $as_echo "$ac_header_compiler" >&6; } # Is the header present? { $as_echo "$as_me:${as_lineno-$LINENO}: checking $2 presence" >&5 $as_echo_n "checking $2 presence... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include <$2> _ACEOF if ac_fn_c_try_cpp "$LINENO"; then : ac_header_preproc=yes else ac_header_preproc=no fi rm -f conftest.err conftest.i conftest.$ac_ext { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_header_preproc" >&5 $as_echo "$ac_header_preproc" >&6; } # So? What about this header? case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in #(( yes:no: ) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: accepted by the compiler, rejected by the preprocessor!" >&5 $as_echo "$as_me: WARNING: $2: accepted by the compiler, rejected by the preprocessor!" >&2;} { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: proceeding with the compiler's result" >&5 $as_echo "$as_me: WARNING: $2: proceeding with the compiler's result" >&2;} ;; no:yes:* ) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: present but cannot be compiled" >&5 $as_echo "$as_me: WARNING: $2: present but cannot be compiled" >&2;} { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: check for missing prerequisite headers?" >&5 $as_echo "$as_me: WARNING: $2: check for missing prerequisite headers?" >&2;} { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: see the Autoconf documentation" >&5 $as_echo "$as_me: WARNING: $2: see the Autoconf documentation" >&2;} { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: section \"Present But Cannot Be Compiled\"" >&5 $as_echo "$as_me: WARNING: $2: section \"Present But Cannot Be Compiled\"" >&2;} { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: proceeding with the compiler's result" >&5 $as_echo "$as_me: WARNING: $2: proceeding with the compiler's result" >&2;} ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5 $as_echo_n "checking for $2... " >&6; } if eval \${$3+:} false; then : $as_echo_n "(cached) " >&6 else eval "$3=\$ac_header_compiler" fi eval ac_res=\$$3 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 $as_echo "$ac_res" >&6; } fi eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno } # ac_fn_c_check_header_mongrel # ac_fn_c_try_run LINENO # ---------------------- # Try to link conftest.$ac_ext, and return whether this succeeded. Assumes # that executables *can* be run. ac_fn_c_try_run () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack if { { ac_try="$ac_link" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_link") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && { ac_try='./conftest$ac_exeext' { { case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_try") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; }; then : ac_retval=0 else $as_echo "$as_me: program exited with status $ac_status" >&5 $as_echo "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 ac_retval=$ac_status fi rm -rf conftest.dSYM conftest_ipa8_conftest.oo eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno as_fn_set_status $ac_retval } # ac_fn_c_try_run # ac_fn_c_check_header_compile LINENO HEADER VAR INCLUDES # ------------------------------------------------------- # Tests whether HEADER exists and can be compiled using the include files in # INCLUDES, setting the cache variable VAR accordingly. ac_fn_c_check_header_compile () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5 $as_echo_n "checking for $2... " >&6; } if eval \${$3+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ $4 #include <$2> _ACEOF if ac_fn_c_try_compile "$LINENO"; then : eval "$3=yes" else eval "$3=no" fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi eval ac_res=\$$3 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 $as_echo "$ac_res" >&6; } eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno } # ac_fn_c_check_header_compile # ac_fn_c_try_link LINENO # ----------------------- # Try to link conftest.$ac_ext, and return whether this succeeded. ac_fn_c_try_link () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack rm -f conftest.$ac_objext conftest$ac_exeext if { { ac_try="$ac_link" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_link") 2>conftest.err ac_status=$? if test -s conftest.err; then grep -v '^ *+' conftest.err >conftest.er1 cat conftest.er1 >&5 mv -f conftest.er1 conftest.err fi $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && { test -z "$ac_c_werror_flag" || test ! -s conftest.err } && test -s conftest$ac_exeext && { test "$cross_compiling" = yes || test -x conftest$ac_exeext }; then : ac_retval=0 else $as_echo "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 ac_retval=1 fi # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would # interfere with the next link command; also delete a directory that is # left behind by Apple's compiler. We do this before executing the actions. rm -rf conftest.dSYM conftest_ipa8_conftest.oo eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno as_fn_set_status $ac_retval } # ac_fn_c_try_link # ac_fn_c_check_func LINENO FUNC VAR # ---------------------------------- # Tests whether FUNC exists, setting the cache variable VAR accordingly ac_fn_c_check_func () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5 $as_echo_n "checking for $2... " >&6; } if eval \${$3+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Define $2 to an innocuous variant, in case declares $2. For example, HP-UX 11i declares gettimeofday. */ #define $2 innocuous_$2 /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $2 (); below. Prefer to if __STDC__ is defined, since exists even on freestanding compilers. */ #ifdef __STDC__ # include #else # include #endif #undef $2 /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char $2 (); /* The GNU C library defines this for functions which it implements to always fail with ENOSYS. Some functions are actually named something starting with __ and the normal name is an alias. */ #if defined __stub_$2 || defined __stub___$2 choke me #endif int main () { return $2 (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : eval "$3=yes" else eval "$3=no" fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext fi eval ac_res=\$$3 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 $as_echo "$ac_res" >&6; } eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno } # ac_fn_c_check_func # ac_fn_c_check_decl LINENO SYMBOL VAR INCLUDES # --------------------------------------------- # Tests whether SYMBOL is declared in INCLUDES, setting cache variable VAR # accordingly. ac_fn_c_check_decl () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack as_decl_name=`echo $2|sed 's/ *(.*//'` as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'` { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $as_decl_name is declared" >&5 $as_echo_n "checking whether $as_decl_name is declared... " >&6; } if eval \${$3+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ $4 int main () { #ifndef $as_decl_name #ifdef __cplusplus (void) $as_decl_use; #else (void) $as_decl_name; #endif #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : eval "$3=yes" else eval "$3=no" fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi eval ac_res=\$$3 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 $as_echo "$ac_res" >&6; } eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno } # ac_fn_c_check_decl cat >config.log <<_ACEOF This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. It was created by $as_me, which was generated by GNU Autoconf 2.69. Invocation command line was $ $0 $@ _ACEOF exec 5>>config.log { cat <<_ASUNAME ## --------- ## ## Platform. ## ## --------- ## hostname = `(hostname || uname -n) 2>/dev/null | sed 1q` uname -m = `(uname -m) 2>/dev/null || echo unknown` uname -r = `(uname -r) 2>/dev/null || echo unknown` uname -s = `(uname -s) 2>/dev/null || echo unknown` uname -v = `(uname -v) 2>/dev/null || echo unknown` /usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown` /bin/uname -X = `(/bin/uname -X) 2>/dev/null || echo unknown` /bin/arch = `(/bin/arch) 2>/dev/null || echo unknown` /usr/bin/arch -k = `(/usr/bin/arch -k) 2>/dev/null || echo unknown` /usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown` /usr/bin/hostinfo = `(/usr/bin/hostinfo) 2>/dev/null || echo unknown` /bin/machine = `(/bin/machine) 2>/dev/null || echo unknown` /usr/bin/oslevel = `(/usr/bin/oslevel) 2>/dev/null || echo unknown` /bin/universe = `(/bin/universe) 2>/dev/null || echo unknown` _ASUNAME as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. $as_echo "PATH: $as_dir" done IFS=$as_save_IFS } >&5 cat >&5 <<_ACEOF ## ----------- ## ## Core tests. ## ## ----------- ## _ACEOF # Keep a trace of the command line. # Strip out --no-create and --no-recursion so they do not pile up. # Strip out --silent because we don't want to record it for future runs. # Also quote any args containing shell meta-characters. # Make two passes to allow for proper duplicate-argument suppression. ac_configure_args= ac_configure_args0= ac_configure_args1= ac_must_keep_next=false for ac_pass in 1 2 do for ac_arg do case $ac_arg in -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;; -q | -quiet | --quiet | --quie | --qui | --qu | --q \ | -silent | --silent | --silen | --sile | --sil) continue ;; *\'*) ac_arg=`$as_echo "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;; esac case $ac_pass in 1) as_fn_append ac_configure_args0 " '$ac_arg'" ;; 2) as_fn_append ac_configure_args1 " '$ac_arg'" if test $ac_must_keep_next = true; then ac_must_keep_next=false # Got value, back to normal. else case $ac_arg in *=* | --config-cache | -C | -disable-* | --disable-* \ | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \ | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \ | -with-* | --with-* | -without-* | --without-* | --x) case "$ac_configure_args0 " in "$ac_configure_args1"*" '$ac_arg' "* ) continue ;; esac ;; -* ) ac_must_keep_next=true ;; esac fi as_fn_append ac_configure_args " '$ac_arg'" ;; esac done done { ac_configure_args0=; unset ac_configure_args0;} { ac_configure_args1=; unset ac_configure_args1;} # When interrupted or exit'd, cleanup temporary files, and complete # config.log. We remove comments because anyway the quotes in there # would cause problems or look ugly. # WARNING: Use '\'' to represent an apostrophe within the trap. # WARNING: Do not start the trap code with a newline, due to a FreeBSD 4.0 bug. trap 'exit_status=$? # Save into config.log some information that might help in debugging. { echo $as_echo "## ---------------- ## ## Cache variables. ## ## ---------------- ##" echo # The following way of writing the cache mishandles newlines in values, ( for ac_var in `(set) 2>&1 | sed -n '\''s/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'\''`; do eval ac_val=\$$ac_var case $ac_val in #( *${as_nl}*) case $ac_var in #( *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5 $as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;; esac case $ac_var in #( _ | IFS | as_nl) ;; #( BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #( *) { eval $ac_var=; unset $ac_var;} ;; esac ;; esac done (set) 2>&1 | case $as_nl`(ac_space='\'' '\''; set) 2>&1` in #( *${as_nl}ac_space=\ *) sed -n \ "s/'\''/'\''\\\\'\'''\''/g; s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\''\\2'\''/p" ;; #( *) sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p" ;; esac | sort ) echo $as_echo "## ----------------- ## ## Output variables. ## ## ----------------- ##" echo for ac_var in $ac_subst_vars do eval ac_val=\$$ac_var case $ac_val in *\'\''*) ac_val=`$as_echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;; esac $as_echo "$ac_var='\''$ac_val'\''" done | sort echo if test -n "$ac_subst_files"; then $as_echo "## ------------------- ## ## File substitutions. ## ## ------------------- ##" echo for ac_var in $ac_subst_files do eval ac_val=\$$ac_var case $ac_val in *\'\''*) ac_val=`$as_echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;; esac $as_echo "$ac_var='\''$ac_val'\''" done | sort echo fi if test -s confdefs.h; then $as_echo "## ----------- ## ## confdefs.h. ## ## ----------- ##" echo cat confdefs.h echo fi test "$ac_signal" != 0 && $as_echo "$as_me: caught signal $ac_signal" $as_echo "$as_me: exit $exit_status" } >&5 rm -f core *.core core.conftest.* && rm -f -r conftest* confdefs* conf$$* $ac_clean_files && exit $exit_status ' 0 for ac_signal in 1 2 13 15; do trap 'ac_signal='$ac_signal'; as_fn_exit 1' $ac_signal done ac_signal=0 # confdefs.h avoids OS command line length limits that DEFS can exceed. rm -f -r conftest* confdefs.h $as_echo "/* confdefs.h */" > confdefs.h # Predefined preprocessor variables. cat >>confdefs.h <<_ACEOF #define PACKAGE_NAME "$PACKAGE_NAME" _ACEOF cat >>confdefs.h <<_ACEOF #define PACKAGE_TARNAME "$PACKAGE_TARNAME" _ACEOF cat >>confdefs.h <<_ACEOF #define PACKAGE_VERSION "$PACKAGE_VERSION" _ACEOF cat >>confdefs.h <<_ACEOF #define PACKAGE_STRING "$PACKAGE_STRING" _ACEOF cat >>confdefs.h <<_ACEOF #define PACKAGE_BUGREPORT "$PACKAGE_BUGREPORT" _ACEOF cat >>confdefs.h <<_ACEOF #define PACKAGE_URL "$PACKAGE_URL" _ACEOF # Let the site file select an alternate cache file if it wants to. # Prefer an explicitly selected file to automatically selected ones. ac_site_file1=NONE ac_site_file2=NONE if test -n "$CONFIG_SITE"; then # We do not want a PATH search for config.site. case $CONFIG_SITE in #(( -*) ac_site_file1=./$CONFIG_SITE;; */*) ac_site_file1=$CONFIG_SITE;; *) ac_site_file1=./$CONFIG_SITE;; esac elif test "x$prefix" != xNONE; then ac_site_file1=$prefix/share/config.site ac_site_file2=$prefix/etc/config.site else ac_site_file1=$ac_default_prefix/share/config.site ac_site_file2=$ac_default_prefix/etc/config.site fi for ac_site_file in "$ac_site_file1" "$ac_site_file2" do test "x$ac_site_file" = xNONE && continue if test /dev/null != "$ac_site_file" && test -r "$ac_site_file"; then { $as_echo "$as_me:${as_lineno-$LINENO}: loading site script $ac_site_file" >&5 $as_echo "$as_me: loading site script $ac_site_file" >&6;} sed 's/^/| /' "$ac_site_file" >&5 . "$ac_site_file" \ || { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "failed to load site script $ac_site_file See \`config.log' for more details" "$LINENO" 5; } fi done if test -r "$cache_file"; then # Some versions of bash will fail to source /dev/null (special files # actually), so we avoid doing that. DJGPP emulates it as a regular file. if test /dev/null != "$cache_file" && test -f "$cache_file"; then { $as_echo "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5 $as_echo "$as_me: loading cache $cache_file" >&6;} case $cache_file in [\\/]* | ?:[\\/]* ) . "$cache_file";; *) . "./$cache_file";; esac fi else { $as_echo "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5 $as_echo "$as_me: creating cache $cache_file" >&6;} >$cache_file fi # Check that the precious variables saved in the cache have kept the same # value. ac_cache_corrupted=false for ac_var in $ac_precious_vars; do eval ac_old_set=\$ac_cv_env_${ac_var}_set eval ac_new_set=\$ac_env_${ac_var}_set eval ac_old_val=\$ac_cv_env_${ac_var}_value eval ac_new_val=\$ac_env_${ac_var}_value case $ac_old_set,$ac_new_set in set,) { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&5 $as_echo "$as_me: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&2;} ac_cache_corrupted=: ;; ,set) { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was not set in the previous run" >&5 $as_echo "$as_me: error: \`$ac_var' was not set in the previous run" >&2;} ac_cache_corrupted=: ;; ,);; *) if test "x$ac_old_val" != "x$ac_new_val"; then # differences in whitespace do not lead to failure. ac_old_val_w=`echo x $ac_old_val` ac_new_val_w=`echo x $ac_new_val` if test "$ac_old_val_w" != "$ac_new_val_w"; then { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' has changed since the previous run:" >&5 $as_echo "$as_me: error: \`$ac_var' has changed since the previous run:" >&2;} ac_cache_corrupted=: else { $as_echo "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&5 $as_echo "$as_me: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&2;} eval $ac_var=\$ac_old_val fi { $as_echo "$as_me:${as_lineno-$LINENO}: former value: \`$ac_old_val'" >&5 $as_echo "$as_me: former value: \`$ac_old_val'" >&2;} { $as_echo "$as_me:${as_lineno-$LINENO}: current value: \`$ac_new_val'" >&5 $as_echo "$as_me: current value: \`$ac_new_val'" >&2;} fi;; esac # Pass precious variables to config.status. if test "$ac_new_set" = set; then case $ac_new_val in *\'*) ac_arg=$ac_var=`$as_echo "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;; *) ac_arg=$ac_var=$ac_new_val ;; esac case " $ac_configure_args " in *" '$ac_arg' "*) ;; # Avoid dups. Use of quotes ensures accuracy. *) as_fn_append ac_configure_args " '$ac_arg'" ;; esac fi done if $ac_cache_corrupted; then { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} { $as_echo "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5 $as_echo "$as_me: error: changes in the environment can compromise the build" >&2;} as_fn_error $? "run \`make distclean' and/or \`rm $cache_file' and start over" "$LINENO" 5 fi ## -------------------- ## ## Main body of script. ## ## -------------------- ## ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu ac_config_headers="$ac_config_headers include/ap_config_auto.h" ac_aux_dir= for ac_dir in build "$srcdir"/build; do if test -f "$ac_dir/install-sh"; then ac_aux_dir=$ac_dir ac_install_sh="$ac_aux_dir/install-sh -c" break elif test -f "$ac_dir/install.sh"; then ac_aux_dir=$ac_dir ac_install_sh="$ac_aux_dir/install.sh -c" break elif test -f "$ac_dir/shtool"; then ac_aux_dir=$ac_dir ac_install_sh="$ac_aux_dir/shtool install -c" break fi done if test -z "$ac_aux_dir"; then as_fn_error $? "cannot find install-sh, install.sh, or shtool in build \"$srcdir\"/build" "$LINENO" 5 fi # These three variables are undocumented and unsupported, # and are intended to be withdrawn in a future Autoconf release. # They can cause serious problems if a builder's source tree is in a directory # whose full name contains unusual characters. ac_config_guess="$SHELL $ac_aux_dir/config.guess" # Please don't use this var. ac_config_sub="$SHELL $ac_aux_dir/config.sub" # Please don't use this var. ac_configure="$SHELL $ac_aux_dir/configure" # Please don't use this var. abs_srcdir=`(cd $srcdir && pwd)` abs_builddir=`pwd` HTTPD_VERSION=`$abs_srcdir/build/get-version.sh all $abs_srcdir/include/ap_release.h AP_SERVER` HTTPD_MMN=`$abs_srcdir/build/get-version.sh mmn $abs_srcdir/include/ap_mmn.h MODULE_MAGIC_NUMBER` # Check whether --enable-layout was given. if test "${enable_layout+set}" = set; then : enableval=$enable_layout; LAYOUT=$enableval fi if test -z "$LAYOUT"; then LAYOUT="Apache" fi if test ! -f $srcdir/config.layout; then echo "** Error: Layout file $srcdir/config.layout not found" echo "** Error: Cannot use undefined layout '$LAYOUT'" exit 1 fi # Catch layout names including a slash which will otherwise # confuse the heck out of the sed script. case $LAYOUT in */*) echo "** Error: $LAYOUT is not a valid layout name" exit 1 ;; esac pldconf=./config.pld sed -e "1s/[ ]*<[lL]ayout[ ]*$LAYOUT[ ]*>[ ]*//;1t" \ -e "1,/[ ]*<[lL]ayout[ ]*$LAYOUT[ ]*>[ ]*/d" \ -e '/[ ]*<\/Layout>[ ]*/,$d' \ -e "s/^[ ]*//g" \ -e "s/:[ ]*/=\'/g" \ -e "s/[ ]*$/'/g" \ $srcdir/config.layout > $pldconf layout_name=$LAYOUT if test ! -s $pldconf; then echo "** Error: unable to find layout $layout_name" exit 1 fi . $pldconf rm $pldconf for var in prefix exec_prefix bindir sbindir libexecdir mandir \ sysconfdir datadir includedir localstatedir runtimedir \ logfiledir libdir installbuilddir libsuffix errordir iconsdir htdocsdir cgidir; do eval "val=\"\$$var\"" case $val in *+) val=`echo $val | sed -e 's;\+$;;'` eval "$var=\"\$val\"" autosuffix=yes ;; *) autosuffix=no ;; esac val=`echo $val | sed -e 's:\(.\)/*$:\1:'` val=`echo $val | sed -e 's:[\$]\([a-z_]*\):$\1:g'` if test "$autosuffix" = "yes"; then if echo $val | grep apache >/dev/null; then addtarget=no else addtarget=yes fi if test "$addtarget" = "yes"; then val="$val/apache2" fi fi eval "$var='$val'" done { $as_echo "$as_me:${as_lineno-$LINENO}: checking for chosen layout" >&5 $as_echo_n "checking for chosen layout... " >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: result: $layout_name" >&5 $as_echo "$layout_name" >&6; } ac_prev= # Retrieve the command-line arguments. The eval is needed because # the arguments are quoted to preserve accuracy. eval "set x $ac_configure_args" shift for ac_option do # If the previous option needs an argument, assign it. if test -n "$ac_prev"; then eval "$ac_prev=\$ac_option" ac_prev= continue fi ac_optarg=`expr "x$ac_option" : 'x[^=]*=\(.*\)'` case $ac_option in -bindir | --bindir | --bindi | --bind | --bin | --bi) ac_prev=bindir ;; -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*) bindir="$ac_optarg" ;; -datadir | --datadir | --datadi | --datad | --data | --dat | --da) ac_prev=datadir ;; -datadir=* | --datadir=* | --datadi=* | --datad=* | --data=* | --dat=* \ | --da=*) datadir="$ac_optarg" ;; -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \ | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \ | --exec | --exe | --ex) ac_prev=exec_prefix ;; -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \ | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \ | --exec=* | --exe=* | --ex=*) exec_prefix="$ac_optarg" ;; -includedir | --includedir | --includedi | --included | --include \ | --includ | --inclu | --incl | --inc) ac_prev=includedir ;; -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \ | --includ=* | --inclu=* | --incl=* | --inc=*) includedir="$ac_optarg" ;; -infodir | --infodir | --infodi | --infod | --info | --inf) ac_prev=infodir ;; -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*) infodir="$ac_optarg" ;; -libdir | --libdir | --libdi | --libd) ac_prev=libdir ;; -libdir=* | --libdir=* | --libdi=* | --libd=*) libdir="$ac_optarg" ;; -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \ | --libexe | --libex | --libe) ac_prev=libexecdir ;; -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \ | --libexe=* | --libex=* | --libe=*) libexecdir="$ac_optarg" ;; -localstatedir | --localstatedir | --localstatedi | --localstated \ | --localstate | --localstat | --localsta | --localst \ | --locals | --local | --loca | --loc | --lo) ac_prev=localstatedir ;; -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \ | --localstate=* | --localstat=* | --localsta=* | --localst=* \ | --locals=* | --local=* | --loca=* | --loc=* | --lo=*) localstatedir="$ac_optarg" ;; -mandir | --mandir | --mandi | --mand | --man | --ma | --m) ac_prev=mandir ;; -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*) mandir="$ac_optarg" ;; -prefix | --prefix | --prefi | --pref | --pre | --pr | --p) ac_prev=prefix ;; -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*) prefix="$ac_optarg" ;; -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb) ac_prev=sbindir ;; -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \ | --sbi=* | --sb=*) sbindir="$ac_optarg" ;; -sharedstatedir | --sharedstatedir | --sharedstatedi \ | --sharedstated | --sharedstate | --sharedstat | --sharedsta \ | --sharedst | --shareds | --shared | --share | --shar \ | --sha | --sh) ac_prev=sharedstatedir ;; -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \ | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \ | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \ | --sha=* | --sh=*) sharedstatedir="$ac_optarg" ;; -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \ | --syscon | --sysco | --sysc | --sys | --sy) ac_prev=sysconfdir ;; -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \ | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*) sysconfdir="$ac_optarg" ;; esac done # Be sure to have absolute paths. for ac_var in exec_prefix prefix do eval ac_val=$`echo $ac_var` case $ac_val in [\\/$]* | ?:[\\/]* | NONE | '' ) ;; *) as_fn_error $? "expected an absolute path for --$ac_var: $ac_val" "$LINENO" 5;; esac done ap_last= ap_cur="$exec_prefix" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_exec_prefix="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_exec_prefix" ap_stripped=`echo $exp_exec_prefix | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_exec_prefix" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_exec_prefix="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_exec_prefix="$exp_exec_prefix" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_exec_prefix" ap_last= ap_cur="$bindir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_bindir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_bindir" ap_stripped=`echo $exp_bindir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_bindir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_bindir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_bindir="$exp_bindir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_bindir" ap_last= ap_cur="$sbindir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_sbindir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_sbindir" ap_stripped=`echo $exp_sbindir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_sbindir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_sbindir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_sbindir="$exp_sbindir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_sbindir" ap_last= ap_cur="$libdir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_libdir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_libdir" ap_stripped=`echo $exp_libdir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_libdir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_libdir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_libdir="$exp_libdir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_libdir" ap_last= ap_cur="$libexecdir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_libexecdir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_libexecdir" ap_stripped=`echo $exp_libexecdir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_libexecdir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_libexecdir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_libexecdir="$exp_libexecdir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_libexecdir" ap_last= ap_cur="$mandir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_mandir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_mandir" ap_stripped=`echo $exp_mandir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_mandir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_mandir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_mandir="$exp_mandir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_mandir" ap_last= ap_cur="$sysconfdir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_sysconfdir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_sysconfdir" ap_stripped=`echo $exp_sysconfdir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_sysconfdir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_sysconfdir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_sysconfdir="$exp_sysconfdir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_sysconfdir" ap_last= ap_cur="$datadir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_datadir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_datadir" ap_stripped=`echo $exp_datadir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_datadir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_datadir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_datadir="$exp_datadir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_datadir" ap_last= ap_cur="$installbuilddir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_installbuilddir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_installbuilddir" ap_stripped=`echo $exp_installbuilddir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_installbuilddir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_installbuilddir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_installbuilddir="$exp_installbuilddir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_installbuilddir" ap_last= ap_cur="$errordir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_errordir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_errordir" ap_stripped=`echo $exp_errordir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_errordir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_errordir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_errordir="$exp_errordir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_errordir" ap_last= ap_cur="$iconsdir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_iconsdir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_iconsdir" ap_stripped=`echo $exp_iconsdir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_iconsdir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_iconsdir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_iconsdir="$exp_iconsdir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_iconsdir" ap_last= ap_cur="$htdocsdir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_htdocsdir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_htdocsdir" ap_stripped=`echo $exp_htdocsdir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_htdocsdir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_htdocsdir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_htdocsdir="$exp_htdocsdir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_htdocsdir" ap_last= ap_cur="$manualdir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_manualdir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_manualdir" ap_stripped=`echo $exp_manualdir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_manualdir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_manualdir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_manualdir="$exp_manualdir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_manualdir" ap_last= ap_cur="$cgidir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_cgidir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_cgidir" ap_stripped=`echo $exp_cgidir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_cgidir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_cgidir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_cgidir="$exp_cgidir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_cgidir" ap_last= ap_cur="$includedir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_includedir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_includedir" ap_stripped=`echo $exp_includedir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_includedir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_includedir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_includedir="$exp_includedir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_includedir" ap_last= ap_cur="$localstatedir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_localstatedir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_localstatedir" ap_stripped=`echo $exp_localstatedir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_localstatedir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_localstatedir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_localstatedir="$exp_localstatedir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_localstatedir" ap_last= ap_cur="$runtimedir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_runtimedir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_runtimedir" ap_stripped=`echo $exp_runtimedir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_runtimedir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_runtimedir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_runtimedir="$exp_runtimedir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_runtimedir" ap_last= ap_cur="$logfiledir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_logfiledir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_logfiledir" ap_stripped=`echo $exp_logfiledir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_logfiledir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_logfiledir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_logfiledir="$exp_logfiledir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_logfiledir" ap_last= ap_cur="$proxycachedir" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done exp_proxycachedir="${ap_cur}" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exp_proxycachedir" ap_stripped=`echo $exp_proxycachedir | sed -e "s#^${prefix}##"` # check if the stripping was successful if test "x$exp_proxycachedir" != "x${ap_stripped}"; then # it was, so strip of any leading slashes rel_proxycachedir="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original rel_proxycachedir="$exp_proxycachedir" fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rel_proxycachedir" apr_ste_save_CPPFLAGS="$CPPFLAGS" apr_ste_save_CFLAGS="$CFLAGS" apr_ste_save_CXXFLAGS="$CXXFLAGS" apr_ste_save_LDFLAGS="$LDFLAGS" apr_ste_save_LIBS="$LIBS" apr_ste_save_INCLUDES="$INCLUDES" rm -f config.nice cat >config.nice<> config.nice fi if test -n "$CFLAGS"; then echo "CFLAGS=\"$CFLAGS\"; export CFLAGS" >> config.nice fi if test -n "$CPPFLAGS"; then echo "CPPFLAGS=\"$CPPFLAGS\"; export CPPFLAGS" >> config.nice fi if test -n "$LDFLAGS"; then echo "LDFLAGS=\"$LDFLAGS\"; export LDFLAGS" >> config.nice fi if test -n "$LTFLAGS"; then echo "LTFLAGS=\"$LTFLAGS\"; export LTFLAGS" >> config.nice fi if test -n "$LIBS"; then echo "LIBS=\"$LIBS\"; export LIBS" >> config.nice fi if test -n "$INCLUDES"; then echo "INCLUDES=\"$INCLUDES\"; export INCLUDES" >> config.nice fi if test -n "$NOTEST_CFLAGS"; then echo "NOTEST_CFLAGS=\"$NOTEST_CFLAGS\"; export NOTEST_CFLAGS" >> config.nice fi if test -n "$NOTEST_CPPFLAGS"; then echo "NOTEST_CPPFLAGS=\"$NOTEST_CPPFLAGS\"; export NOTEST_CPPFLAGS" >> config.nice fi if test -n "$NOTEST_LDFLAGS"; then echo "NOTEST_LDFLAGS=\"$NOTEST_LDFLAGS\"; export NOTEST_LDFLAGS" >> config.nice fi if test -n "$NOTEST_LIBS"; then echo "NOTEST_LIBS=\"$NOTEST_LIBS\"; export NOTEST_LIBS" >> config.nice fi # Retrieve command-line arguments. eval "set x $0 $ac_configure_args" shift for arg do ap_last= ap_cur="$arg" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done arg="${ap_cur}" echo "\"$arg\" \\" >> config.nice done echo '"$@"' >> config.nice chmod +x config.nice nl=' ' { $as_echo "$as_me:${as_lineno-$LINENO}: checking for working mkdir -p" >&5 $as_echo_n "checking for working mkdir -p... " >&6; } if ${ac_cv_mkdir_p+:} false; then : $as_echo_n "(cached) " >&6 else test -d conftestdir && rm -rf conftestdir mkdir -p conftestdir/somedir >/dev/null 2>&1 if test -d conftestdir/somedir; then ac_cv_mkdir_p=yes else ac_cv_mkdir_p=no fi rm -rf conftestdir fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_mkdir_p" >&5 $as_echo "$ac_cv_mkdir_p" >&6; } if test "$ac_cv_mkdir_p" = "yes"; then mkdir_p="mkdir -p" else mkdir_p="$top_srcdir/build/mkdir.sh" fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5 $as_echo_n "checking for grep that handles long lines and -e... " >&6; } if ${ac_cv_path_GREP+:} false; then : $as_echo_n "(cached) " >&6 else if test -z "$GREP"; then ac_path_GREP_found=false # Loop through the user's path and test for each of PROGNAME-LIST as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_prog in grep ggrep; do for ac_exec_ext in '' $ac_executable_extensions; do ac_path_GREP="$as_dir/$ac_prog$ac_exec_ext" as_fn_executable_p "$ac_path_GREP" || continue # Check for GNU ac_path_GREP and select it if it is found. # Check for GNU $ac_path_GREP case `"$ac_path_GREP" --version 2>&1` in *GNU*) ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;; *) ac_count=0 $as_echo_n 0123456789 >"conftest.in" while : do cat "conftest.in" "conftest.in" >"conftest.tmp" mv "conftest.tmp" "conftest.in" cp "conftest.in" "conftest.nl" $as_echo 'GREP' >> "conftest.nl" "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break as_fn_arith $ac_count + 1 && ac_count=$as_val if test $ac_count -gt ${ac_path_GREP_max-0}; then # Best one so far, save it but keep looking for a better one ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_max=$ac_count fi # 10*(2^10) chars as input seems more than enough test $ac_count -gt 10 && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out;; esac $ac_path_GREP_found && break 3 done done done IFS=$as_save_IFS if test -z "$ac_cv_path_GREP"; then as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5 fi else ac_cv_path_GREP=$GREP fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5 $as_echo "$ac_cv_path_GREP" >&6; } GREP="$ac_cv_path_GREP" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5 $as_echo_n "checking for egrep... " >&6; } if ${ac_cv_path_EGREP+:} false; then : $as_echo_n "(cached) " >&6 else if echo a | $GREP -E '(a|b)' >/dev/null 2>&1 then ac_cv_path_EGREP="$GREP -E" else if test -z "$EGREP"; then ac_path_EGREP_found=false # Loop through the user's path and test for each of PROGNAME-LIST as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_prog in egrep; do for ac_exec_ext in '' $ac_executable_extensions; do ac_path_EGREP="$as_dir/$ac_prog$ac_exec_ext" as_fn_executable_p "$ac_path_EGREP" || continue # Check for GNU ac_path_EGREP and select it if it is found. # Check for GNU $ac_path_EGREP case `"$ac_path_EGREP" --version 2>&1` in *GNU*) ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;; *) ac_count=0 $as_echo_n 0123456789 >"conftest.in" while : do cat "conftest.in" "conftest.in" >"conftest.tmp" mv "conftest.tmp" "conftest.in" cp "conftest.in" "conftest.nl" $as_echo 'EGREP' >> "conftest.nl" "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break as_fn_arith $ac_count + 1 && ac_count=$as_val if test $ac_count -gt ${ac_path_EGREP_max-0}; then # Best one so far, save it but keep looking for a better one ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_max=$ac_count fi # 10*(2^10) chars as input seems more than enough test $ac_count -gt 10 && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out;; esac $ac_path_EGREP_found && break 3 done done done IFS=$as_save_IFS if test -z "$ac_cv_path_EGREP"; then as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5 fi else ac_cv_path_EGREP=$EGREP fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5 $as_echo "$ac_cv_path_EGREP" >&6; } EGREP="$ac_cv_path_EGREP" APACHE_VAR_SUBST="$APACHE_VAR_SUBST EGREP" # Make sure we can run config.sub. $SHELL "$ac_aux_dir/config.sub" sun4 >/dev/null 2>&1 || as_fn_error $? "cannot run $SHELL $ac_aux_dir/config.sub" "$LINENO" 5 { $as_echo "$as_me:${as_lineno-$LINENO}: checking build system type" >&5 $as_echo_n "checking build system type... " >&6; } if ${ac_cv_build+:} false; then : $as_echo_n "(cached) " >&6 else ac_build_alias=$build_alias test "x$ac_build_alias" = x && ac_build_alias=`$SHELL "$ac_aux_dir/config.guess"` test "x$ac_build_alias" = x && as_fn_error $? "cannot guess build type; you must specify one" "$LINENO" 5 ac_cv_build=`$SHELL "$ac_aux_dir/config.sub" $ac_build_alias` || as_fn_error $? "$SHELL $ac_aux_dir/config.sub $ac_build_alias failed" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_build" >&5 $as_echo "$ac_cv_build" >&6; } case $ac_cv_build in *-*-*) ;; *) as_fn_error $? "invalid value of canonical build" "$LINENO" 5;; esac build=$ac_cv_build ac_save_IFS=$IFS; IFS='-' set x $ac_cv_build shift build_cpu=$1 build_vendor=$2 shift; shift # Remember, the first character of IFS is used to create $*, # except with old shells: build_os=$* IFS=$ac_save_IFS case $build_os in *\ *) build_os=`echo "$build_os" | sed 's/ /-/g'`;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking host system type" >&5 $as_echo_n "checking host system type... " >&6; } if ${ac_cv_host+:} false; then : $as_echo_n "(cached) " >&6 else if test "x$host_alias" = x; then ac_cv_host=$ac_cv_build else ac_cv_host=`$SHELL "$ac_aux_dir/config.sub" $host_alias` || as_fn_error $? "$SHELL $ac_aux_dir/config.sub $host_alias failed" "$LINENO" 5 fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_host" >&5 $as_echo "$ac_cv_host" >&6; } case $ac_cv_host in *-*-*) ;; *) as_fn_error $? "invalid value of canonical host" "$LINENO" 5;; esac host=$ac_cv_host ac_save_IFS=$IFS; IFS='-' set x $ac_cv_host shift host_cpu=$1 host_vendor=$2 shift; shift # Remember, the first character of IFS is used to create $*, # except with old shells: host_os=$* IFS=$ac_save_IFS case $host_os in *\ *) host_os=`echo "$host_os" | sed 's/ /-/g'`;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking target system type" >&5 $as_echo_n "checking target system type... " >&6; } if ${ac_cv_target+:} false; then : $as_echo_n "(cached) " >&6 else if test "x$target_alias" = x; then ac_cv_target=$ac_cv_host else ac_cv_target=`$SHELL "$ac_aux_dir/config.sub" $target_alias` || as_fn_error $? "$SHELL $ac_aux_dir/config.sub $target_alias failed" "$LINENO" 5 fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_target" >&5 $as_echo "$ac_cv_target" >&6; } case $ac_cv_target in *-*-*) ;; *) as_fn_error $? "invalid value of canonical target" "$LINENO" 5;; esac target=$ac_cv_target ac_save_IFS=$IFS; IFS='-' set x $ac_cv_target shift target_cpu=$1 target_vendor=$2 shift; shift # Remember, the first character of IFS is used to create $*, # except with old shells: target_os=$* IFS=$ac_save_IFS case $target_os in *\ *) target_os=`echo "$target_os" | sed 's/ /-/g'`;; esac # The aliases save the names the user supplied, while $host etc. # will get canonicalized. test -n "$target_alias" && test "$program_prefix$program_suffix$program_transform_name" = \ NONENONEs,x,x, && program_prefix=${target_alias}- orig_prefix="$prefix" { $as_echo "$as_me:${as_lineno-$LINENO}: " >&5 $as_echo "$as_me: " >&6;} { $as_echo "$as_me:${as_lineno-$LINENO}: Configuring Apache Portable Runtime library..." >&5 $as_echo "$as_me: Configuring Apache Portable Runtime library..." >&6;} { $as_echo "$as_me:${as_lineno-$LINENO}: " >&5 $as_echo "$as_me: " >&6;} # Check whether --with-included-apr was given. if test "${with_included_apr+set}" = set; then : withval=$with_included_apr; fi if test "x$with_included_apr" = "xyes"; then apr_found=reconfig if test ! -d srclib/apr && test ! -d $srcdir/srclib/apr; then as_fn_error $? "Bundled APR requested but not found at ./srclib/. Download and unpack the corresponding apr and apr-util packages to ./srclib/." "$LINENO" 5 fi else apr_found="no" if test "$target_os" = "os2-emx"; then # Scripts don't pass test -x on OS/2 TEST_X="test -f" else TEST_X="test -x" fi acceptable_majors="1 2" apr_temp_acceptable_apr_config="" for apr_temp_major in $acceptable_majors do case $apr_temp_major in 0) apr_temp_acceptable_apr_config="$apr_temp_acceptable_apr_config apr-config" ;; *) apr_temp_acceptable_apr_config="$apr_temp_acceptable_apr_config apr-$apr_temp_major-config" ;; esac done { $as_echo "$as_me:${as_lineno-$LINENO}: checking for APR" >&5 $as_echo_n "checking for APR... " >&6; } # Check whether --with-apr was given. if test "${with_apr+set}" = set; then : withval=$with_apr; if test "$withval" = "no" || test "$withval" = "yes"; then as_fn_error $? "--with-apr requires a directory or file to be provided" "$LINENO" 5 fi for apr_temp_apr_config_file in $apr_temp_acceptable_apr_config do for lookdir in "$withval/bin" "$withval" do if $TEST_X "$lookdir/$apr_temp_apr_config_file"; then apr_config="$lookdir/$apr_temp_apr_config_file" apr_acceptable="yes" version=`$apr_config --version` case x${version} in x1.[0-3].*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: APR version 1.4.0 or later is required, found $version" >&5 $as_echo "$as_me: WARNING: APR version 1.4.0 or later is required, found $version" >&2;} apr_acceptable=no ;; esac unset version if test "$apr_acceptable" != "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Found APR in $apr_config, but we think it is considered unacceptable" >&5 $as_echo "$as_me: WARNING: Found APR in $apr_config, but we think it is considered unacceptable" >&2;} continue fi apr_found="yes" break 2 fi done done if test "$apr_found" != "yes" && $TEST_X "$withval" && $withval --help > /dev/null 2>&1 ; then apr_config="$withval" apr_acceptable="yes" version=`$apr_config --version` case x${version} in x1.[0-3].*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: APR version 1.4.0 or later is required, found $version" >&5 $as_echo "$as_me: WARNING: APR version 1.4.0 or later is required, found $version" >&2;} apr_acceptable=no ;; esac unset version if test "$apr_acceptable" = "yes"; then apr_found="yes" fi fi if test "$apr_found" != "yes"; then as_fn_error $? "the --with-apr parameter is incorrect. It must specify an install prefix, a build directory, or an apr-config file." "$LINENO" 5 fi else if test -n "1" && test "1" = "1"; then for apr_temp_apr_config_file in $apr_temp_acceptable_apr_config do if $apr_temp_apr_config_file --help > /dev/null 2>&1 ; then apr_config="$apr_temp_apr_config_file" apr_acceptable="yes" version=`$apr_config --version` case x${version} in x1.[0-3].*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: APR version 1.4.0 or later is required, found $version" >&5 $as_echo "$as_me: WARNING: APR version 1.4.0 or later is required, found $version" >&2;} apr_acceptable=no ;; esac unset version if test "$apr_acceptable" != "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: skipped APR at $apr_config, version not acceptable" >&5 $as_echo "$as_me: WARNING: skipped APR at $apr_config, version not acceptable" >&2;} continue fi apr_found="yes" break else for lookdir in /usr /usr/local /usr/local/apr /opt/apr; do if $TEST_X "$lookdir/bin/$apr_temp_apr_config_file"; then apr_config="$lookdir/bin/$apr_temp_apr_config_file" apr_acceptable="yes" version=`$apr_config --version` case x${version} in x1.[0-3].*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: APR version 1.4.0 or later is required, found $version" >&5 $as_echo "$as_me: WARNING: APR version 1.4.0 or later is required, found $version" >&2;} apr_acceptable=no ;; esac unset version if test "$apr_acceptable" != "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: skipped APR at $apr_config, version not acceptable" >&5 $as_echo "$as_me: WARNING: skipped APR at $apr_config, version not acceptable" >&2;} continue fi apr_found="yes" break 2 fi done fi done fi if test "$apr_found" = "no" && test -d ""$srcdir/srclib/apr""; then apr_temp_abs_srcdir="`cd \""$srcdir/srclib/apr"\" && pwd`" apr_found="reconfig" apr_bundled_major="`sed -n '/#define.*APR_MAJOR_VERSION/s/^[^0-9]*\([0-9]*\).*$/\1/p' \""$srcdir/srclib/apr"/include/apr_version.h\"`" case $apr_bundled_major in "") as_fn_error $? "failed to find major version of bundled APR" "$LINENO" 5 ;; 0) apr_temp_apr_config_file="apr-config" ;; *) apr_temp_apr_config_file="apr-$apr_bundled_major-config" ;; esac if test -n ""./srclib/apr""; then apr_config=""./srclib/apr"/$apr_temp_apr_config_file" else apr_config=""$srcdir/srclib/apr"/$apr_temp_apr_config_file" fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $apr_found" >&5 $as_echo "$apr_found" >&6; } fi if test "$apr_found" = "no"; then as_fn_error $? "APR not found. Please read the documentation." "$LINENO" 5 fi if test "$apr_found" = "reconfig"; then # save our work to this point; this allows the sub-package to use it cat >confcache <<\_ACEOF # This file is a shell script that caches the results of configure # tests run on this system so they can be shared between configure # scripts and configure runs, see configure's option --config-cache. # It is not useful on other systems. If it contains results you don't # want to keep, you may remove or edit it. # # config.status only pays attention to the cache file if you give it # the --recheck option to rerun configure. # # `ac_cv_env_foo' variables (set or unset) will be overridden when # loading this file, other *unset* `ac_cv_foo' will be assigned the # following values. _ACEOF # The following way of writing the cache mishandles newlines in values, # but we know of no workaround that is simple, portable, and efficient. # So, we kill variables containing newlines. # Ultrix sh set writes to stderr and can't be redirected directly, # and sets the high bit in the cache file unless we assign to the vars. ( for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do eval ac_val=\$$ac_var case $ac_val in #( *${as_nl}*) case $ac_var in #( *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5 $as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;; esac case $ac_var in #( _ | IFS | as_nl) ;; #( BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #( *) { eval $ac_var=; unset $ac_var;} ;; esac ;; esac done (set) 2>&1 | case $as_nl`(ac_space=' '; set) 2>&1` in #( *${as_nl}ac_space=\ *) # `set' does not quote correctly, so add quotes: double-quote # substitution turns \\\\ into \\, and sed turns \\ into \. sed -n \ "s/'/'\\\\''/g; s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p" ;; #( *) # `set' quotes correctly as required by POSIX, so do not add quotes. sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p" ;; esac | sort ) | sed ' /^ac_cv_env_/b end t clear :clear s/^\([^=]*\)=\(.*[{}].*\)$/test "${\1+set}" = set || &/ t end s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/ :end' >>confcache if diff "$cache_file" confcache >/dev/null 2>&1; then :; else if test -w "$cache_file"; then if test "x$cache_file" != "x/dev/null"; then { $as_echo "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5 $as_echo "$as_me: updating cache $cache_file" >&6;} if test ! -f "$cache_file" || test -h "$cache_file"; then cat confcache >"$cache_file" else case $cache_file in #( */* | ?:*) mv -f confcache "$cache_file"$$ && mv -f "$cache_file"$$ "$cache_file" ;; #( *) mv -f confcache "$cache_file" ;; esac fi fi else { $as_echo "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5 $as_echo "$as_me: not updating unwritable cache $cache_file" >&6;} fi fi rm -f confcache echo "configuring package in srclib/apr now" ac_popdir=`pwd` apr_config_subdirs="srclib/apr" test -d srclib/apr || $mkdir_p srclib/apr ac_abs_srcdir=`(cd $srcdir/srclib/apr && pwd)` cd srclib/apr # A "../" for each directory in /$config_subdirs. ac_dots=`echo $apr_config_subdirs|sed -e 's%^\./%%' -e 's%[^/]$%&/%' -e 's%[^/]*/%../%g'` # Make the cache file pathname absolute for the subdirs # required to correctly handle subdirs that might actually # be symlinks case "$cache_file" in /*) # already absolute ac_sub_cache_file=$cache_file ;; *) # Was relative path. ac_sub_cache_file="$ac_popdir/$cache_file" ;; esac apr_configure_args= apr_sep= for apr_configure_arg in $ac_configure_args do case "$apr_configure_arg" in --enable-layout=*|\'--enable-layout=*) continue ;; esac apr_configure_args="$apr_configure_args$apr_sep'$apr_configure_arg'" apr_sep=" " done test "x$silent" = "xyes" && apr_configure_args="$apr_configure_args --silent" apr_configure_args="--disable-option-checking $apr_configure_args" if eval $SHELL $ac_abs_srcdir/configure $apr_configure_args --cache-file=$ac_sub_cache_file --srcdir=$ac_abs_srcdir $apache_apr_flags --prefix=$prefix --exec-prefix=$exec_prefix --libdir=$libdir --includedir=$includedir --bindir=$bindir --datadir=$datadir --with-installbuilddir=$installbuilddir then : echo "srclib/apr configured properly" else echo "configure failed for srclib/apr" exit 1 fi cd $ac_popdir # grab any updates from the sub-package if test -r "$cache_file"; then # Some versions of bash will fail to source /dev/null (special files # actually), so we avoid doing that. DJGPP emulates it as a regular file. if test /dev/null != "$cache_file" && test -f "$cache_file"; then { $as_echo "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5 $as_echo "$as_me: loading cache $cache_file" >&6;} case $cache_file in [\\/]* | ?:[\\/]* ) . "$cache_file";; *) . "./$cache_file";; esac fi else { $as_echo "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5 $as_echo "$as_me: creating cache $cache_file" >&6;} >$cache_file fi AP_BUILD_SRCLIB_DIRS="apr $AP_BUILD_SRCLIB_DIRS" AP_CLEAN_SRCLIB_DIRS="$AP_CLEAN_SRCLIB_DIRS apr" for majorver in 1 2; do test_apr_config="./srclib/apr/apr-${majorver}-config" if test -f "$test_apr_config"; then apr_config="$test_apr_config" fi done fi if test -z "$CC"; then test "x$silent" != "xyes" && echo " setting CC to \"`$apr_config --cc`\"" CC="`$apr_config --cc`" fi if test -z "$CPP"; then test "x$silent" != "xyes" && echo " setting CPP to \"`$apr_config --cpp`\"" CPP="`$apr_config --cpp`" fi if test "x$CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CFLAGS to \"`$apr_config --cflags`\"" CFLAGS="`$apr_config --cflags`" else apr_addto_bugger="`$apr_config --cflags`" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CFLAGS" CFLAGS="$CFLAGS $i" fi done fi if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"`$apr_config --cppflags`\"" CPPFLAGS="`$apr_config --cppflags`" else apr_addto_bugger="`$apr_config --cppflags`" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi INTERNAL_CPPFLAGS="" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"`$apr_config --ldflags`\"" LDFLAGS="`$apr_config --ldflags`" else apr_addto_bugger="`$apr_config --ldflags`" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi SHLIBPATH_VAR=`$apr_config --shlib-path-var` APR_BINDIR=`$apr_config --bindir` APR_INCLUDEDIR=`$apr_config --includedir` APR_INCLUDES=`$apr_config --includes` APR_VERSION=`$apr_config --version` apr_major_version=`echo ${APR_VERSION} | sed 's,\..*,,'` APR_CONFIG="$APR_BINDIR/apr-${apr_major_version}-config" { $as_echo "$as_me:${as_lineno-$LINENO}: " >&5 $as_echo "$as_me: " >&6;} { $as_echo "$as_me:${as_lineno-$LINENO}: Configuring Apache Portable Runtime Utility library..." >&5 $as_echo "$as_me: Configuring Apache Portable Runtime Utility library..." >&6;} { $as_echo "$as_me:${as_lineno-$LINENO}: " >&5 $as_echo "$as_me: " >&6;} if test "x${apr_major_version}" = "x2"; then apu_found=obsolete elif test "x$with_included_apr" = "xyes"; then apu_found=reconfig if test ! -d srclib/apr-util && test ! -d $srcdir/srclib/apr-util; then as_fn_error $? "Bundled APR-Util requested but not found at ./srclib/. Download and unpack the corresponding apr and apr-util packages to ./srclib/." "$LINENO" 5 fi else apu_found="no" if test "$target_os" = "os2-emx"; then # Scripts don't pass test -x on OS/2 TEST_X="test -f" else TEST_X="test -x" fi acceptable_majors="${apr_major_version}" apu_temp_acceptable_apu_config="" for apu_temp_major in $acceptable_majors do case $apu_temp_major in 0) apu_temp_acceptable_apu_config="$apu_temp_acceptable_apu_config apu-config" ;; *) apu_temp_acceptable_apu_config="$apu_temp_acceptable_apu_config apu-$apu_temp_major-config" ;; esac done { $as_echo "$as_me:${as_lineno-$LINENO}: checking for APR-util" >&5 $as_echo_n "checking for APR-util... " >&6; } # Check whether --with-apr-util was given. if test "${with_apr_util+set}" = set; then : withval=$with_apr_util; if test "$withval" = "no" || test "$withval" = "yes"; then as_fn_error $? "--with-apr-util requires a directory or file to be provided" "$LINENO" 5 fi for apu_temp_apu_config_file in $apu_temp_acceptable_apu_config do for lookdir in "$withval/bin" "$withval" do if $TEST_X "$lookdir/$apu_temp_apu_config_file"; then apu_config="$lookdir/$apu_temp_apu_config_file" apu_found="yes" break 2 fi done done if test "$apu_found" != "yes" && $TEST_X "$withval" && $withval --help > /dev/null 2>&1 ; then apu_config="$withval" apu_found="yes" fi if test "$apu_found" != "yes"; then as_fn_error $? "the --with-apr-util parameter is incorrect. It must specify an install prefix, a build directory, or an apu-config file." "$LINENO" 5 fi else if test -n "1" && test "1" = "1"; then for apu_temp_apu_config_file in $apu_temp_acceptable_apu_config do if $apu_temp_apu_config_file --help > /dev/null 2>&1 ; then apu_config="$apu_temp_apu_config_file" apu_found="yes" break else for lookdir in /usr /usr/local /usr/local/apr /opt/apr; do if $TEST_X "$lookdir/bin/$apu_temp_apu_config_file"; then apu_config="$lookdir/bin/$apu_temp_apu_config_file" apu_found="yes" break 2 fi done fi done fi if test "$apu_found" = "no" && test -d ""$srcdir/srclib/apr-util""; then apu_temp_abs_srcdir="`cd \""$srcdir/srclib/apr-util"\" && pwd`" apu_found="reconfig" apu_bundled_major="`sed -n '/#define.*APU_MAJOR_VERSION/s/^[^0-9]*\([0-9]*\).*$/\1/p' \""$srcdir/srclib/apr-util"/include/apu_version.h\"`" case $apu_bundled_major in "") as_fn_error $? "failed to find major version of bundled APU" "$LINENO" 5 ;; 0) apu_temp_apu_config_file="apu-config" ;; *) apu_temp_apu_config_file="apu-$apu_bundled_major-config" ;; esac if test -n ""./srclib/apr-util""; then apu_config=""./srclib/apr-util"/$apu_temp_apu_config_file" else apu_config=""$srcdir/srclib/apr-util"/$apu_temp_apu_config_file" fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $apu_found" >&5 $as_echo "$apu_found" >&6; } fi if test "$apu_found" = "no"; then as_fn_error $? "APR-util not found. Please read the documentation." "$LINENO" 5 fi # Catch some misconfigurations: case ${apr_found}.${apu_found} in reconfig.yes) as_fn_error $? "Cannot use an external APR-util with the bundled APR" "$LINENO" 5 ;; yes.reconfig) as_fn_error $? "Cannot use an external APR with the bundled APR-util" "$LINENO" 5 ;; esac if test "$apu_found" = "reconfig"; then # save our work to this point; this allows the sub-package to use it cat >confcache <<\_ACEOF # This file is a shell script that caches the results of configure # tests run on this system so they can be shared between configure # scripts and configure runs, see configure's option --config-cache. # It is not useful on other systems. If it contains results you don't # want to keep, you may remove or edit it. # # config.status only pays attention to the cache file if you give it # the --recheck option to rerun configure. # # `ac_cv_env_foo' variables (set or unset) will be overridden when # loading this file, other *unset* `ac_cv_foo' will be assigned the # following values. _ACEOF # The following way of writing the cache mishandles newlines in values, # but we know of no workaround that is simple, portable, and efficient. # So, we kill variables containing newlines. # Ultrix sh set writes to stderr and can't be redirected directly, # and sets the high bit in the cache file unless we assign to the vars. ( for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do eval ac_val=\$$ac_var case $ac_val in #( *${as_nl}*) case $ac_var in #( *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5 $as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;; esac case $ac_var in #( _ | IFS | as_nl) ;; #( BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #( *) { eval $ac_var=; unset $ac_var;} ;; esac ;; esac done (set) 2>&1 | case $as_nl`(ac_space=' '; set) 2>&1` in #( *${as_nl}ac_space=\ *) # `set' does not quote correctly, so add quotes: double-quote # substitution turns \\\\ into \\, and sed turns \\ into \. sed -n \ "s/'/'\\\\''/g; s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p" ;; #( *) # `set' quotes correctly as required by POSIX, so do not add quotes. sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p" ;; esac | sort ) | sed ' /^ac_cv_env_/b end t clear :clear s/^\([^=]*\)=\(.*[{}].*\)$/test "${\1+set}" = set || &/ t end s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/ :end' >>confcache if diff "$cache_file" confcache >/dev/null 2>&1; then :; else if test -w "$cache_file"; then if test "x$cache_file" != "x/dev/null"; then { $as_echo "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5 $as_echo "$as_me: updating cache $cache_file" >&6;} if test ! -f "$cache_file" || test -h "$cache_file"; then cat confcache >"$cache_file" else case $cache_file in #( */* | ?:*) mv -f confcache "$cache_file"$$ && mv -f "$cache_file"$$ "$cache_file" ;; #( *) mv -f confcache "$cache_file" ;; esac fi fi else { $as_echo "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5 $as_echo "$as_me: not updating unwritable cache $cache_file" >&6;} fi fi rm -f confcache echo "configuring package in srclib/apr-util now" ac_popdir=`pwd` apr_config_subdirs="srclib/apr-util" test -d srclib/apr-util || $mkdir_p srclib/apr-util ac_abs_srcdir=`(cd $srcdir/srclib/apr-util && pwd)` cd srclib/apr-util # A "../" for each directory in /$config_subdirs. ac_dots=`echo $apr_config_subdirs|sed -e 's%^\./%%' -e 's%[^/]$%&/%' -e 's%[^/]*/%../%g'` # Make the cache file pathname absolute for the subdirs # required to correctly handle subdirs that might actually # be symlinks case "$cache_file" in /*) # already absolute ac_sub_cache_file=$cache_file ;; *) # Was relative path. ac_sub_cache_file="$ac_popdir/$cache_file" ;; esac apr_configure_args= apr_sep= for apr_configure_arg in $ac_configure_args do case "$apr_configure_arg" in --enable-layout=*|\'--enable-layout=*) continue ;; esac apr_configure_args="$apr_configure_args$apr_sep'$apr_configure_arg'" apr_sep=" " done test "x$silent" = "xyes" && apr_configure_args="$apr_configure_args --silent" apr_configure_args="--disable-option-checking $apr_configure_args" if eval $SHELL $ac_abs_srcdir/configure $apr_configure_args --cache-file=$ac_sub_cache_file --srcdir=$ac_abs_srcdir --with-apr=../apr --prefix=$prefix --exec-prefix=$exec_prefix --libdir=$libdir --includedir=$includedir --bindir=$bindir then : echo "srclib/apr-util configured properly" else echo "configure failed for srclib/apr-util" exit 1 fi cd $ac_popdir # grab any updates from the sub-package if test -r "$cache_file"; then # Some versions of bash will fail to source /dev/null (special files # actually), so we avoid doing that. DJGPP emulates it as a regular file. if test /dev/null != "$cache_file" && test -f "$cache_file"; then { $as_echo "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5 $as_echo "$as_me: loading cache $cache_file" >&6;} case $cache_file in [\\/]* | ?:[\\/]* ) . "$cache_file";; *) . "./$cache_file";; esac fi else { $as_echo "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5 $as_echo "$as_me: creating cache $cache_file" >&6;} >$cache_file fi AP_BUILD_SRCLIB_DIRS="$AP_BUILD_SRCLIB_DIRS apr-util" AP_CLEAN_SRCLIB_DIRS="apr-util $AP_CLEAN_SRCLIB_DIRS" apu_config="./srclib/apr-util/apu-${apr_major_version}-config" fi if test "$apu_found" = "obsolete"; then { $as_echo "$as_me:${as_lineno-$LINENO}: APR-util obsoleted, woohoo" >&5 $as_echo "$as_me: APR-util obsoleted, woohoo" >&6;} else if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"`$apu_config --ldflags`\"" LDFLAGS="`$apu_config --ldflags`" else apr_addto_bugger="`$apu_config --ldflags`" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi APU_BINDIR=`$apu_config --bindir` APU_INCLUDEDIR=`$apu_config --includedir` APU_INCLUDES=`$apu_config --includes` APU_VERSION=`$apu_config --version` APU_CONFIG="$APU_BINDIR/apu-`echo ${APU_VERSION} | sed 's,\..*,,'`-config" fi ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args. set dummy ${ac_tool_prefix}gcc; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_CC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_CC="${ac_tool_prefix}gcc" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5 $as_echo "$CC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_CC"; then ac_ct_CC=$CC # Extract the first word of "gcc", so it can be a program name with args. set dummy gcc; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_CC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_CC"; then ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_CC="gcc" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_CC=$ac_cv_prog_ac_ct_CC if test -n "$ac_ct_CC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5 $as_echo "$ac_ct_CC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_CC" = x; then CC="" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac CC=$ac_ct_CC fi else CC="$ac_cv_prog_CC" fi if test -z "$CC"; then if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args. set dummy ${ac_tool_prefix}cc; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_CC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_CC="${ac_tool_prefix}cc" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5 $as_echo "$CC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi fi if test -z "$CC"; then # Extract the first word of "cc", so it can be a program name with args. set dummy cc; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_CC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else ac_prog_rejected=no as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then if test "$as_dir/$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then ac_prog_rejected=yes continue fi ac_cv_prog_CC="cc" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS if test $ac_prog_rejected = yes; then # We found a bogon in the path, so make sure we never use it. set dummy $ac_cv_prog_CC shift if test $# != 0; then # We chose a different compiler from the bogus one. # However, it has the same basename, so the bogon will be chosen # first if we set CC to just the basename; use the full file name. shift ac_cv_prog_CC="$as_dir/$ac_word${1+' '}$@" fi fi fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5 $as_echo "$CC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$CC"; then if test -n "$ac_tool_prefix"; then for ac_prog in cl.exe do # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args. set dummy $ac_tool_prefix$ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_CC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_CC="$ac_tool_prefix$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5 $as_echo "$CC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$CC" && break done fi if test -z "$CC"; then ac_ct_CC=$CC for ac_prog in cl.exe do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_CC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_CC"; then ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_CC="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_CC=$ac_cv_prog_ac_ct_CC if test -n "$ac_ct_CC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5 $as_echo "$ac_ct_CC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$ac_ct_CC" && break done if test "x$ac_ct_CC" = x; then CC="" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac CC=$ac_ct_CC fi fi fi test -z "$CC" && { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "no acceptable C compiler found in \$PATH See \`config.log' for more details" "$LINENO" 5; } # Provide some information about the compiler. $as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5 set X $ac_compile ac_compiler=$2 for ac_option in --version -v -V -qversion; do { { ac_try="$ac_compiler $ac_option >&5" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_compiler $ac_option >&5") 2>conftest.err ac_status=$? if test -s conftest.err; then sed '10a\ ... rest of stderr output deleted ... 10q' conftest.err >conftest.er1 cat conftest.er1 >&5 fi rm -f conftest.er1 conftest.err $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } done cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF ac_clean_files_save=$ac_clean_files ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out" # Try to create an executable without -o first, disregard a.out. # It will help us diagnose broken compilers, and finding out an intuition # of exeext. { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5 $as_echo_n "checking whether the C compiler works... " >&6; } ac_link_default=`$as_echo "$ac_link" | sed 's/ -o *conftest[^ ]*//'` # The possible output files: ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*" ac_rmfiles= for ac_file in $ac_files do case $ac_file in *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;; * ) ac_rmfiles="$ac_rmfiles $ac_file";; esac done rm -f $ac_rmfiles if { { ac_try="$ac_link_default" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_link_default") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then : # Autoconf-2.13 could set the ac_cv_exeext variable to `no'. # So ignore a value of `no', otherwise this would lead to `EXEEXT = no' # in a Makefile. We should not override ac_cv_exeext if it was cached, # so that the user can short-circuit this test for compilers unknown to # Autoconf. for ac_file in $ac_files '' do test -f "$ac_file" || continue case $ac_file in *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;; [ab].out ) # We found the default executable, but exeext='' is most # certainly right. break;; *.* ) if test "${ac_cv_exeext+set}" = set && test "$ac_cv_exeext" != no; then :; else ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'` fi # We set ac_cv_exeext here because the later test for it is not # safe: cross compilers may not add the suffix if given an `-o' # argument, so we may need to know it at that point already. # Even if this section looks crufty: it has the advantage of # actually working. break;; * ) break;; esac done test "$ac_cv_exeext" = no && ac_cv_exeext= else ac_file='' fi if test -z "$ac_file"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } $as_echo "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error 77 "C compiler cannot create executables See \`config.log' for more details" "$LINENO" 5; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5 $as_echo_n "checking for C compiler default output file name... " >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5 $as_echo "$ac_file" >&6; } ac_exeext=$ac_cv_exeext rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out ac_clean_files=$ac_clean_files_save { $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5 $as_echo_n "checking for suffix of executables... " >&6; } if { { ac_try="$ac_link" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_link") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then : # If both `conftest.exe' and `conftest' are `present' (well, observable) # catch `conftest.exe'. For instance with Cygwin, `ls conftest' will # work properly (i.e., refer to `conftest.exe'), while it won't with # `rm'. for ac_file in conftest.exe conftest conftest.*; do test -f "$ac_file" || continue case $ac_file in *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;; *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'` break;; * ) break;; esac done else { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "cannot compute suffix of executables: cannot compile and link See \`config.log' for more details" "$LINENO" 5; } fi rm -f conftest conftest$ac_cv_exeext { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5 $as_echo "$ac_cv_exeext" >&6; } rm -f conftest.$ac_ext EXEEXT=$ac_cv_exeext ac_exeext=$EXEEXT cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { FILE *f = fopen ("conftest.out", "w"); return ferror (f) || fclose (f) != 0; ; return 0; } _ACEOF ac_clean_files="$ac_clean_files conftest.out" # Check that the compiler produces executables we can run. If not, either # the compiler is broken, or we cross compile. { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5 $as_echo_n "checking whether we are cross compiling... " >&6; } if test "$cross_compiling" != yes; then { { ac_try="$ac_link" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_link") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } if { ac_try='./conftest$ac_cv_exeext' { { case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_try") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; }; then cross_compiling=no else if test "$cross_compiling" = maybe; then cross_compiling=yes else { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "cannot run C compiled programs. If you meant to cross compile, use \`--host'. See \`config.log' for more details" "$LINENO" 5; } fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5 $as_echo "$cross_compiling" >&6; } rm -f conftest.$ac_ext conftest$ac_cv_exeext conftest.out ac_clean_files=$ac_clean_files_save { $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5 $as_echo_n "checking for suffix of object files... " >&6; } if ${ac_cv_objext+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF rm -f conftest.o conftest.obj if { { ac_try="$ac_compile" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_compile") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then : for ac_file in conftest.o conftest.obj conftest.*; do test -f "$ac_file" || continue; case $ac_file in *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;; *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'` break;; esac done else $as_echo "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "cannot compute suffix of object files: cannot compile See \`config.log' for more details" "$LINENO" 5; } fi rm -f conftest.$ac_cv_objext conftest.$ac_ext fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5 $as_echo "$ac_cv_objext" >&6; } OBJEXT=$ac_cv_objext ac_objext=$OBJEXT { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using the GNU C compiler" >&5 $as_echo_n "checking whether we are using the GNU C compiler... " >&6; } if ${ac_cv_c_compiler_gnu+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { #ifndef __GNUC__ choke me #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_compiler_gnu=yes else ac_compiler_gnu=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext ac_cv_c_compiler_gnu=$ac_compiler_gnu fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5 $as_echo "$ac_cv_c_compiler_gnu" >&6; } if test $ac_compiler_gnu = yes; then GCC=yes else GCC= fi ac_test_CFLAGS=${CFLAGS+set} ac_save_CFLAGS=$CFLAGS { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5 $as_echo_n "checking whether $CC accepts -g... " >&6; } if ${ac_cv_prog_cc_g+:} false; then : $as_echo_n "(cached) " >&6 else ac_save_c_werror_flag=$ac_c_werror_flag ac_c_werror_flag=yes ac_cv_prog_cc_g=no CFLAGS="-g" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_prog_cc_g=yes else CFLAGS="" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : else ac_c_werror_flag=$ac_save_c_werror_flag CFLAGS="-g" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_prog_cc_g=yes fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext ac_c_werror_flag=$ac_save_c_werror_flag fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5 $as_echo "$ac_cv_prog_cc_g" >&6; } if test "$ac_test_CFLAGS" = set; then CFLAGS=$ac_save_CFLAGS elif test $ac_cv_prog_cc_g = yes; then if test "$GCC" = yes; then CFLAGS="-g -O2" else CFLAGS="-g" fi else if test "$GCC" = yes; then CFLAGS="-O2" else CFLAGS= fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $CC option to accept ISO C89" >&5 $as_echo_n "checking for $CC option to accept ISO C89... " >&6; } if ${ac_cv_prog_cc_c89+:} false; then : $as_echo_n "(cached) " >&6 else ac_cv_prog_cc_c89=no ac_save_CC=$CC cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include struct stat; /* Most of the following tests are stolen from RCS 5.7's src/conf.sh. */ struct buf { int x; }; FILE * (*rcsopen) (struct buf *, struct stat *, int); static char *e (p, i) char **p; int i; { return p[i]; } static char *f (char * (*g) (char **, int), char **p, ...) { char *s; va_list v; va_start (v,p); s = g (p, va_arg (v,int)); va_end (v); return s; } /* OSF 4.0 Compaq cc is some sort of almost-ANSI by default. It has function prototypes and stuff, but not '\xHH' hex character constants. These don't provoke an error unfortunately, instead are silently treated as 'x'. The following induces an error, until -std is added to get proper ANSI mode. Curiously '\x00'!='x' always comes out true, for an array size at least. It's necessary to write '\x00'==0 to get something that's true only with -std. */ int osf4_cc_array ['\x00' == 0 ? 1 : -1]; /* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters inside strings and character constants. */ #define FOO(x) 'x' int xlc6_cc_array[FOO(a) == 'x' ? 1 : -1]; int test (int i, double x); struct s1 {int (*f) (int a);}; struct s2 {int (*f) (double a);}; int pairnames (int, char **, FILE *(*)(struct buf *, struct stat *, int), int, int); int argc; char **argv; int main () { return f (e, argv, 0) != argv[0] || f (e, argv, 1) != argv[1]; ; return 0; } _ACEOF for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std \ -Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__" do CC="$ac_save_CC $ac_arg" if ac_fn_c_try_compile "$LINENO"; then : ac_cv_prog_cc_c89=$ac_arg fi rm -f core conftest.err conftest.$ac_objext test "x$ac_cv_prog_cc_c89" != "xno" && break done rm -f conftest.$ac_ext CC=$ac_save_CC fi # AC_CACHE_VAL case "x$ac_cv_prog_cc_c89" in x) { $as_echo "$as_me:${as_lineno-$LINENO}: result: none needed" >&5 $as_echo "none needed" >&6; } ;; xno) { $as_echo "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5 $as_echo "unsupported" >&6; } ;; *) CC="$CC $ac_cv_prog_cc_c89" { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5 $as_echo "$ac_cv_prog_cc_c89" >&6; } ;; esac if test "x$ac_cv_prog_cc_c89" != xno; then : fi ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu { $as_echo "$as_me:${as_lineno-$LINENO}: checking how to run the C preprocessor" >&5 $as_echo_n "checking how to run the C preprocessor... " >&6; } # On Suns, sometimes $CPP names a directory. if test -n "$CPP" && test -d "$CPP"; then CPP= fi if test -z "$CPP"; then if ${ac_cv_prog_CPP+:} false; then : $as_echo_n "(cached) " >&6 else # Double quotes because CPP needs to be expanded for CPP in "$CC -E" "$CC -E -traditional-cpp" "/lib/cpp" do ac_preproc_ok=false for ac_c_preproc_warn_flag in '' yes do # Use a header file that comes with gcc, so configuring glibc # with a fresh cross-compiler works. # Prefer to if __STDC__ is defined, since # exists even on freestanding compilers. # On the NeXT, cc -E runs the code through the compiler's parser, # not just through cpp. "Syntax error" is here to catch this case. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #ifdef __STDC__ # include #else # include #endif Syntax error _ACEOF if ac_fn_c_try_cpp "$LINENO"; then : else # Broken: fails on valid input. continue fi rm -f conftest.err conftest.i conftest.$ac_ext # OK, works on sane cases. Now check whether nonexistent headers # can be detected and how. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include _ACEOF if ac_fn_c_try_cpp "$LINENO"; then : # Broken: success on invalid input. continue else # Passes both tests. ac_preproc_ok=: break fi rm -f conftest.err conftest.i conftest.$ac_ext done # Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped. rm -f conftest.i conftest.err conftest.$ac_ext if $ac_preproc_ok; then : break fi done ac_cv_prog_CPP=$CPP fi CPP=$ac_cv_prog_CPP else ac_cv_prog_CPP=$CPP fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CPP" >&5 $as_echo "$CPP" >&6; } ac_preproc_ok=false for ac_c_preproc_warn_flag in '' yes do # Use a header file that comes with gcc, so configuring glibc # with a fresh cross-compiler works. # Prefer to if __STDC__ is defined, since # exists even on freestanding compilers. # On the NeXT, cc -E runs the code through the compiler's parser, # not just through cpp. "Syntax error" is here to catch this case. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #ifdef __STDC__ # include #else # include #endif Syntax error _ACEOF if ac_fn_c_try_cpp "$LINENO"; then : else # Broken: fails on valid input. continue fi rm -f conftest.err conftest.i conftest.$ac_ext # OK, works on sane cases. Now check whether nonexistent headers # can be detected and how. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include _ACEOF if ac_fn_c_try_cpp "$LINENO"; then : # Broken: success on invalid input. continue else # Passes both tests. ac_preproc_ok=: break fi rm -f conftest.err conftest.i conftest.$ac_ext done # Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped. rm -f conftest.i conftest.err conftest.$ac_ext if $ac_preproc_ok; then : else { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "C preprocessor \"$CPP\" fails sanity check See \`config.log' for more details" "$LINENO" 5; } fi ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $CC option to accept ISO C99" >&5 $as_echo_n "checking for $CC option to accept ISO C99... " >&6; } if ${ac_cv_prog_cc_c99+:} false; then : $as_echo_n "(cached) " >&6 else ac_cv_prog_cc_c99=no ac_save_CC=$CC cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include #include #include #include // Check varargs macros. These examples are taken from C99 6.10.3.5. #define debug(...) fprintf (stderr, __VA_ARGS__) #define showlist(...) puts (#__VA_ARGS__) #define report(test,...) ((test) ? puts (#test) : printf (__VA_ARGS__)) static void test_varargs_macros (void) { int x = 1234; int y = 5678; debug ("Flag"); debug ("X = %d\n", x); showlist (The first, second, and third items.); report (x>y, "x is %d but y is %d", x, y); } // Check long long types. #define BIG64 18446744073709551615ull #define BIG32 4294967295ul #define BIG_OK (BIG64 / BIG32 == 4294967297ull && BIG64 % BIG32 == 0) #if !BIG_OK your preprocessor is broken; #endif #if BIG_OK #else your preprocessor is broken; #endif static long long int bignum = -9223372036854775807LL; static unsigned long long int ubignum = BIG64; struct incomplete_array { int datasize; double data[]; }; struct named_init { int number; const wchar_t *name; double average; }; typedef const char *ccp; static inline int test_restrict (ccp restrict text) { // See if C++-style comments work. // Iterate through items via the restricted pointer. // Also check for declarations in for loops. for (unsigned int i = 0; *(text+i) != '\0'; ++i) continue; return 0; } // Check varargs and va_copy. static void test_varargs (const char *format, ...) { va_list args; va_start (args, format); va_list args_copy; va_copy (args_copy, args); const char *str; int number; float fnumber; while (*format) { switch (*format++) { case 's': // string str = va_arg (args_copy, const char *); break; case 'd': // int number = va_arg (args_copy, int); break; case 'f': // float fnumber = va_arg (args_copy, double); break; default: break; } } va_end (args_copy); va_end (args); } int main () { // Check bool. _Bool success = false; // Check restrict. if (test_restrict ("String literal") == 0) success = true; char *restrict newvar = "Another string"; // Check varargs. test_varargs ("s, d' f .", "string", 65, 34.234); test_varargs_macros (); // Check flexible array members. struct incomplete_array *ia = malloc (sizeof (struct incomplete_array) + (sizeof (double) * 10)); ia->datasize = 10; for (int i = 0; i < ia->datasize; ++i) ia->data[i] = i * 1.234; // Check named initializers. struct named_init ni = { .number = 34, .name = L"Test wide string", .average = 543.34343, }; ni.number = 58; int dynamic_array[ni.number]; dynamic_array[ni.number - 1] = 543; // work around unused variable warnings return (!success || bignum == 0LL || ubignum == 0uLL || newvar[0] == 'x' || dynamic_array[ni.number - 1] != 543); ; return 0; } _ACEOF for ac_arg in '' -std=gnu99 -std=c99 -c99 -AC99 -D_STDC_C99= -qlanglvl=extc99 do CC="$ac_save_CC $ac_arg" if ac_fn_c_try_compile "$LINENO"; then : ac_cv_prog_cc_c99=$ac_arg fi rm -f core conftest.err conftest.$ac_objext test "x$ac_cv_prog_cc_c99" != "xno" && break done rm -f conftest.$ac_ext CC=$ac_save_CC fi # AC_CACHE_VAL case "x$ac_cv_prog_cc_c99" in x) { $as_echo "$as_me:${as_lineno-$LINENO}: result: none needed" >&5 $as_echo "none needed" >&6; } ;; xno) { $as_echo "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5 $as_echo "unsupported" >&6; } ;; *) CC="$CC $ac_cv_prog_cc_c99" { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c99" >&5 $as_echo "$ac_cv_prog_cc_c99" >&6; } ;; esac if test "x$ac_cv_prog_cc_c99" != xno; then : fi if test "x${cache_file}" = "x/dev/null"; then # Likewise, ensure that CC and CPP are passed through to the pcre # configure script iff caching is disabled (the autoconf 2.5x default). export CC; export CPP fi # Check whether --with-pcre was given. if test "${with_pcre+set}" = set; then : withval=$with_pcre; fi # Extract the first word of "pcre-config", so it can be a program name with args. set dummy pcre-config; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_path_PCRE_CONFIG+:} false; then : $as_echo_n "(cached) " >&6 else case $PCRE_CONFIG in [\\/]* | ?:[\\/]*) ac_cv_path_PCRE_CONFIG="$PCRE_CONFIG" # Let the user override the test with a path. ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_path_PCRE_CONFIG="$as_dir/$ac_word$ac_exec_ext" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_path_PCRE_CONFIG" && ac_cv_path_PCRE_CONFIG="false" ;; esac fi PCRE_CONFIG=$ac_cv_path_PCRE_CONFIG if test -n "$PCRE_CONFIG"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PCRE_CONFIG" >&5 $as_echo "$PCRE_CONFIG" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test -d "$with_pcre" && test -x "$with_pcre/bin/pcre-config"; then PCRE_CONFIG=$with_pcre/bin/pcre-config elif test -x "$with_pcre"; then PCRE_CONFIG=$with_pcre fi if test "$PCRE_CONFIG" != "false"; then if $PCRE_CONFIG --version >/dev/null 2>&1; then :; else as_fn_error $? "Did not find pcre-config script at $PCRE_CONFIG" "$LINENO" 5 fi case `$PCRE_CONFIG --version` in [1-5].*) as_fn_error $? "Need at least pcre version 6.0" "$LINENO" 5 ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: Using external PCRE library from $PCRE_CONFIG" >&5 $as_echo "$as_me: Using external PCRE library from $PCRE_CONFIG" >&6;} if test "x$PCRE_INCLUDES" = "x"; then test "x$silent" != "xyes" && echo " setting PCRE_INCLUDES to \"`$PCRE_CONFIG --cflags`\"" PCRE_INCLUDES="`$PCRE_CONFIG --cflags`" else apr_addto_bugger="`$PCRE_CONFIG --cflags`" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $PCRE_INCLUDES; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to PCRE_INCLUDES" PCRE_INCLUDES="$PCRE_INCLUDES $i" fi done fi if test "x$PCRE_LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting PCRE_LIBS to \"`$PCRE_CONFIG --libs`\"" PCRE_LIBS="`$PCRE_CONFIG --libs`" else apr_addto_bugger="`$PCRE_CONFIG --libs`" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $PCRE_LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to PCRE_LIBS" PCRE_LIBS="$PCRE_LIBS $i" fi done fi else as_fn_error $? "pcre-config for libpcre not found. PCRE is required and available from http://pcre.org/" "$LINENO" 5 fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST PCRE_LIBS" { $as_echo "$as_me:${as_lineno-$LINENO}: " >&5 $as_echo "$as_me: " >&6;} { $as_echo "$as_me:${as_lineno-$LINENO}: Configuring Apache httpd..." >&5 $as_echo "$as_me: Configuring Apache httpd..." >&6;} { $as_echo "$as_me:${as_lineno-$LINENO}: " >&5 $as_echo "$as_me: " >&6;} if test "x$INCLUDES" = "x"; then test "x$silent" != "xyes" && echo " setting INCLUDES to \"-I.\"" INCLUDES="-I." else apr_addto_bugger="-I." for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $INCLUDES; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to INCLUDES" INCLUDES="$INCLUDES $i" fi done fi if test "$abs_builddir" != "$abs_srcdir"; then if test "x$INCLUDES" = "x"; then test "x$silent" != "xyes" && echo " setting INCLUDES to \"-I\$(top_builddir)/include\"" INCLUDES="-I\$(top_builddir)/include" else apr_addto_bugger="-I\$(top_builddir)/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $INCLUDES; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to INCLUDES" INCLUDES="$INCLUDES $i" fi done fi fi if test "x$INCLUDES" = "x"; then test "x$silent" != "xyes" && echo " setting INCLUDES to \"-I\$(top_srcdir)/os/\$(OS_DIR) -I\$(top_srcdir)/include\"" INCLUDES="-I\$(top_srcdir)/os/\$(OS_DIR) -I\$(top_srcdir)/include" else apr_addto_bugger="-I\$(top_srcdir)/os/\$(OS_DIR) -I\$(top_srcdir)/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $INCLUDES; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to INCLUDES" INCLUDES="$INCLUDES $i" fi done fi # apr/apr-util --includes may pick up system paths for dependent # libraries, so ensure these are later in INCLUDES than local source # directories. if test "x$INCLUDES" = "x"; then test "x$silent" != "xyes" && echo " setting INCLUDES to \"$APR_INCLUDES\"" INCLUDES="$APR_INCLUDES" else apr_addto_bugger="$APR_INCLUDES" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $INCLUDES; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to INCLUDES" INCLUDES="$INCLUDES $i" fi done fi if test "x$INCLUDES" = "x"; then test "x$silent" != "xyes" && echo " setting INCLUDES to \"$APU_INCLUDES\"" INCLUDES="$APU_INCLUDES" else apr_addto_bugger="$APU_INCLUDES" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $INCLUDES; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to INCLUDES" INCLUDES="$INCLUDES $i" fi done fi if test "x$INCLUDES" = "x"; then test "x$silent" != "xyes" && echo " setting INCLUDES to \"$PCRE_INCLUDES\"" INCLUDES="$PCRE_INCLUDES" else apr_addto_bugger="$PCRE_INCLUDES" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $INCLUDES; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to INCLUDES" INCLUDES="$INCLUDES $i" fi done fi { $as_echo "$as_me:${as_lineno-$LINENO}: " >&5 $as_echo "$as_me: " >&6;} { $as_echo "$as_me:${as_lineno-$LINENO}: Applying OS-specific hints for httpd..." >&5 $as_echo "$as_me: Applying OS-specific hints for httpd..." >&6;} { $as_echo "$as_me:${as_lineno-$LINENO}: " >&5 $as_echo "$as_me: " >&6;} case $host in *os2*) # Use a custom made libtool replacement echo "using aplibtool" LIBTOOL="$abs_srcdir/srclib/apr/build/aplibtool" SH_LIBTOOL="$LIBTOOL --shared --export-all" SH_LIBS="\$(ALL_LIBS)" CORE_IMPLIB_FILE="ApacheCoreOS2.la" CORE_IMPLIB="$abs_srcdir/server/$CORE_IMPLIB_FILE" MK_IMPLIB="emximp" other_targets="$other_targets os2core" INSTALL_PROG_FLAGS="-e .exe" SHLTCFLAGS="" LTCFLAGS="" ;; *) if test "x$LTFLAGS" = "x"; then LTFLAGS='--silent' fi my_libtool=`$apr_config --apr-libtool` LIBTOOL="$my_libtool \$(LTFLAGS)" libtoolversion=`$my_libtool --version` case $libtoolversion in *1.[45]* | *[2-9].[0-9]*) SH_LIBTOOL='$(LIBTOOL)' SHLTCFLAGS="-prefer-pic" LTCFLAGS="-prefer-non-pic -static" ;; *) SH_LIBTOOL='$(SHELL) $(top_builddir)/shlibtool $(LTFLAGS)' SHLTCFLAGS="" LTCFLAGS="" ;; esac ;; esac APACHE_VAR_SUBST="$APACHE_VAR_SUBST SHLTCFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST LTCFLAGS" case $host in *-apple-aux3*) test "x$silent" != "xyes" && echo " forcing SINGLE_LISTEN_UNSERIALIZED_ACCEPT to \"1\"" SINGLE_LISTEN_UNSERIALIZED_ACCEPT="1" ;; *os2-emx*) test "x$silent" != "xyes" && echo " forcing SINGLE_LISTEN_UNSERIALIZED_ACCEPT to \"1\"" SINGLE_LISTEN_UNSERIALIZED_ACCEPT="1" ;; *-linux-*) case `uname -r` in # Unserialized accept() was not recommended until Linux 2.2. [01].* | 2.[01]* ) ;; * ) test "x$silent" != "xyes" && echo " forcing SINGLE_LISTEN_UNSERIALIZED_ACCEPT to \"1\"" SINGLE_LISTEN_UNSERIALIZED_ACCEPT="1" ;; esac ;; *486-*-bsdi* | *-netbsd* | *-freebsd* | *-apple-darwin* | *-dec-osf* | *-qnx) test "x$silent" != "xyes" && echo " forcing SINGLE_LISTEN_UNSERIALIZED_ACCEPT to \"1\"" SINGLE_LISTEN_UNSERIALIZED_ACCEPT="1" ;; *-solaris2*) ap_platform_runtime_link_flag="-R" case `uname -r` in 5.[567]*) ;; * ) test "x$silent" != "xyes" && echo " forcing SINGLE_LISTEN_UNSERIALIZED_ACCEPT to \"1\"" SINGLE_LISTEN_UNSERIALIZED_ACCEPT="1" ;; esac ;; *cygwin*) test "x$silent" != "xyes" && echo " forcing SINGLE_LISTEN_UNSERIALIZED_ACCEPT to \"1\"" SINGLE_LISTEN_UNSERIALIZED_ACCEPT="1" ;; *mingw32*) if test "x$INTERNAL_CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting INTERNAL_CPPFLAGS to \"-DAP_DECLARE_EXPORT\"" INTERNAL_CPPFLAGS="-DAP_DECLARE_EXPORT" else apr_addto_bugger="-DAP_DECLARE_EXPORT" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $INTERNAL_CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to INTERNAL_CPPFLAGS" INTERNAL_CPPFLAGS="$INTERNAL_CPPFLAGS $i" fi done fi if test -z "$ac_cv_func_times"; then test "x$silent" != "xyes" && echo " setting ac_cv_func_times to \"no\"" ac_cv_func_times="no" fi if test -z "$ac_cv_func_getpwnam"; then test "x$silent" != "xyes" && echo " setting ac_cv_func_getpwnam to \"no\"" ac_cv_func_getpwnam="no" fi if test -z "$ac_cv_func_getgrnam"; then test "x$silent" != "xyes" && echo " setting ac_cv_func_getgrnam to \"no\"" ac_cv_func_getgrnam="no" fi ;; *aix*) aixver=`echo $host | sed 's/^[^0-9]*//' | sed 's/\.//g'` if test $aixver -ge 4320; then test "x$silent" != "xyes" && echo " forcing SINGLE_LISTEN_UNSERIALIZED_ACCEPT to \"1\"" SINGLE_LISTEN_UNSERIALIZED_ACCEPT="1" fi ;; *os390*) test "x$silent" != "xyes" && echo " forcing SINGLE_LISTEN_UNSERIALIZED_ACCEPT to \"1\"" SINGLE_LISTEN_UNSERIALIZED_ACCEPT="1" ;; esac test "x$silent" != "xyes" && echo " forcing AP_NONBLOCK_WHEN_MULTI_LISTEN to \"1\"" AP_NONBLOCK_WHEN_MULTI_LISTEN="1" # Extract the first word of "rm", so it can be a program name with args. set dummy rm; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_path_RM+:} false; then : $as_echo_n "(cached) " >&6 else case $RM in [\\/]* | ?:[\\/]*) ac_cv_path_RM="$RM" # Let the user override the test with a path. ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_path_RM="$as_dir/$ac_word$ac_exec_ext" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS ;; esac fi RM=$ac_cv_path_RM if test -n "$RM"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $RM" >&5 $as_echo "$RM" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi # Extract the first word of "pkg-config", so it can be a program name with args. set dummy pkg-config; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_path_PKGCONFIG+:} false; then : $as_echo_n "(cached) " >&6 else case $PKGCONFIG in [\\/]* | ?:[\\/]*) ac_cv_path_PKGCONFIG="$PKGCONFIG" # Let the user override the test with a path. ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_path_PKGCONFIG="$as_dir/$ac_word$ac_exec_ext" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS ;; esac fi PKGCONFIG=$ac_cv_path_PKGCONFIG if test -n "$PKGCONFIG"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PKGCONFIG" >&5 $as_echo "$PKGCONFIG" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi # Extract the first word of "rsync", so it can be a program name with args. set dummy rsync; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_path_RSYNC+:} false; then : $as_echo_n "(cached) " >&6 else case $RSYNC in [\\/]* | ?:[\\/]*) ac_cv_path_RSYNC="$RSYNC" # Let the user override the test with a path. ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_path_RSYNC="$as_dir/$ac_word$ac_exec_ext" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS ;; esac fi RSYNC=$ac_cv_path_RSYNC if test -n "$RSYNC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $RSYNC" >&5 $as_echo "$RSYNC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi for ac_prog in gawk mawk nawk awk do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_AWK+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$AWK"; then ac_cv_prog_AWK="$AWK" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_AWK="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi AWK=$ac_cv_prog_AWK if test -n "$AWK"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5 $as_echo "$AWK" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$AWK" && break done { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ln -s works" >&5 $as_echo_n "checking whether ln -s works... " >&6; } LN_S=$as_ln_s if test "$LN_S" = "ln -s"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no, using $LN_S" >&5 $as_echo "no, using $LN_S" >&6; } fi if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args. set dummy ${ac_tool_prefix}ranlib; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_RANLIB+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$RANLIB"; then ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi RANLIB=$ac_cv_prog_RANLIB if test -n "$RANLIB"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5 $as_echo "$RANLIB" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_RANLIB"; then ac_ct_RANLIB=$RANLIB # Extract the first word of "ranlib", so it can be a program name with args. set dummy ranlib; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_RANLIB+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_RANLIB"; then ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_RANLIB="ranlib" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB if test -n "$ac_ct_RANLIB"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5 $as_echo "$ac_ct_RANLIB" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_RANLIB" = x; then RANLIB="true" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac RANLIB=$ac_ct_RANLIB fi else RANLIB="$ac_cv_prog_RANLIB" fi for ac_prog in lynx links elinks do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_LYNX_PATH+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$LYNX_PATH"; then ac_cv_prog_LYNX_PATH="$LYNX_PATH" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_LYNX_PATH="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi LYNX_PATH=$ac_cv_prog_LYNX_PATH if test -n "$LYNX_PATH"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $LYNX_PATH" >&5 $as_echo "$LYNX_PATH" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$LYNX_PATH" && break done test -n "$LYNX_PATH" || LYNX_PATH="lynx" # Hard-coded install programs MKINSTALLDIRS="\$(abs_srcdir)/build/mkdir.sh" INSTALL="\$(LIBTOOL) --mode=install \$(abs_srcdir)/build/install.sh -c" APACHE_VAR_SUBST="$APACHE_VAR_SUBST MKINSTALLDIRS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST INSTALL" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ANSI C header files" >&5 $as_echo_n "checking for ANSI C header files... " >&6; } if ${ac_cv_header_stdc+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include #include #include int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_header_stdc=yes else ac_cv_header_stdc=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext if test $ac_cv_header_stdc = yes; then # SunOS 4.x string.h does not declare mem*, contrary to ANSI. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "memchr" >/dev/null 2>&1; then : else ac_cv_header_stdc=no fi rm -f conftest* fi if test $ac_cv_header_stdc = yes; then # ISC 2.0.2 stdlib.h does not declare free, contrary to ANSI. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "free" >/dev/null 2>&1; then : else ac_cv_header_stdc=no fi rm -f conftest* fi if test $ac_cv_header_stdc = yes; then # /bin/cc in Irix-4.0.5 gets non-ANSI ctype macros unless using -ansi. if test "$cross_compiling" = yes; then : : else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include #if ((' ' & 0x0FF) == 0x020) # define ISLOWER(c) ('a' <= (c) && (c) <= 'z') # define TOUPPER(c) (ISLOWER(c) ? 'A' + ((c) - 'a') : (c)) #else # define ISLOWER(c) \ (('a' <= (c) && (c) <= 'i') \ || ('j' <= (c) && (c) <= 'r') \ || ('s' <= (c) && (c) <= 'z')) # define TOUPPER(c) (ISLOWER(c) ? ((c) | 0x40) : (c)) #endif #define XOR(e, f) (((e) && !(f)) || (!(e) && (f))) int main () { int i; for (i = 0; i < 256; i++) if (XOR (islower (i), ISLOWER (i)) || toupper (i) != TOUPPER (i)) return 2; return 0; } _ACEOF if ac_fn_c_try_run "$LINENO"; then : else ac_cv_header_stdc=no fi rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \ conftest.$ac_objext conftest.beam conftest.$ac_ext fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_stdc" >&5 $as_echo "$ac_cv_header_stdc" >&6; } if test $ac_cv_header_stdc = yes; then $as_echo "#define STDC_HEADERS 1" >>confdefs.h fi # On IRIX 5.3, sys/types and inttypes.h are conflicting. for ac_header in sys/types.h sys/stat.h stdlib.h string.h memory.h strings.h \ inttypes.h stdint.h unistd.h do : as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh` ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default " if eval test \"x\$"$as_ac_Header"\" = x"yes"; then : cat >>confdefs.h <<_ACEOF #define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1 _ACEOF fi done ac_fn_c_check_header_mongrel "$LINENO" "minix/config.h" "ac_cv_header_minix_config_h" "$ac_includes_default" if test "x$ac_cv_header_minix_config_h" = xyes; then : MINIX=yes else MINIX= fi if test "$MINIX" = yes; then $as_echo "#define _POSIX_SOURCE 1" >>confdefs.h $as_echo "#define _POSIX_1_SOURCE 2" >>confdefs.h $as_echo "#define _MINIX 1" >>confdefs.h fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether it is safe to define __EXTENSIONS__" >&5 $as_echo_n "checking whether it is safe to define __EXTENSIONS__... " >&6; } if ${ac_cv_safe_to_define___extensions__+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ # define __EXTENSIONS__ 1 $ac_includes_default int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_safe_to_define___extensions__=yes else ac_cv_safe_to_define___extensions__=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_safe_to_define___extensions__" >&5 $as_echo "$ac_cv_safe_to_define___extensions__" >&6; } test $ac_cv_safe_to_define___extensions__ = yes && $as_echo "#define __EXTENSIONS__ 1" >>confdefs.h $as_echo "#define _ALL_SOURCE 1" >>confdefs.h $as_echo "#define _GNU_SOURCE 1" >>confdefs.h $as_echo "#define _POSIX_PTHREAD_SEMANTICS 1" >>confdefs.h $as_echo "#define _TANDEM_SOURCE 1" >>confdefs.h { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing strerror" >&5 $as_echo_n "checking for library containing strerror... " >&6; } if ${ac_cv_search_strerror+:} false; then : $as_echo_n "(cached) " >&6 else ac_func_search_save_LIBS=$LIBS cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char strerror (); int main () { return strerror (); ; return 0; } _ACEOF for ac_lib in '' cposix; do if test -z "$ac_lib"; then ac_res="none required" else ac_res=-l$ac_lib LIBS="-l$ac_lib $ac_func_search_save_LIBS" fi if ac_fn_c_try_link "$LINENO"; then : ac_cv_search_strerror=$ac_res fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext if ${ac_cv_search_strerror+:} false; then : break fi done if ${ac_cv_search_strerror+:} false; then : else ac_cv_search_strerror=no fi rm conftest.$ac_ext LIBS=$ac_func_search_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_strerror" >&5 $as_echo "$ac_cv_search_strerror" >&6; } ac_res=$ac_cv_search_strerror if test "$ac_res" != no; then : test "$ac_res" = "none required" || LIBS="$ac_res $LIBS" fi # Ensure that satisfactory versions of apr and apr-util are # found if external copies are configured. if test "${apr_found}" = "yes"; then # Require at least APR 1.3.x otherwise fail ap_ckver_CPPFLAGS="$CPPFLAGS" CPPFLAGS="$CPPFLAGS `$apr_config --includes`" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for APR version 1.3.0 or later" >&5 $as_echo_n "checking for APR version 1.3.0 or later... " >&6; } if ${ap_cv_aprver13+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #if APR_MAJOR_VERSION > 1 || (APR_MAJOR_VERSION == 1 && APR_MINOR_VERSION >= 3) good #endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "good" >/dev/null 2>&1; then : ap_cv_aprver13=yes else ap_cv_aprver13=no fi rm -f conftest* fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_cv_aprver13" >&5 $as_echo "$ap_cv_aprver13" >&6; } if test "$ap_cv_aprver13" = "yes"; then : else as_fn_error $? "APR version 1.3.0 or later is required" "$LINENO" 5 fi CPPFLAGS="$ap_ckver_CPPFLAGS" fi if test "${apu_found}" = "yes"; then # Require at least APR-util 1.3.x otherwise fail if test "${apr_found}" = "yes"; then # we need to add the APR includes to CPPFLAGS apu_ckver_CPPFLAGS="$CPPFLAGS" CPPFLAGS="$CPPFLAGS `$apr_config --includes`" ap_ckver_CPPFLAGS="$CPPFLAGS" CPPFLAGS="$CPPFLAGS `$apu_config --includes`" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for APR-util version 1.3.0 or later" >&5 $as_echo_n "checking for APR-util version 1.3.0 or later... " >&6; } if ${ap_cv_apuver13+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #if APU_MAJOR_VERSION > 1 || (APU_MAJOR_VERSION == 1 && APU_MINOR_VERSION >= 3) good #endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "good" >/dev/null 2>&1; then : ap_cv_apuver13=yes else ap_cv_apuver13=no fi rm -f conftest* fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_cv_apuver13" >&5 $as_echo "$ap_cv_apuver13" >&6; } if test "$ap_cv_apuver13" = "yes"; then : else as_fn_error $? "APR-util version 1.3.0 or later is required" "$LINENO" 5 fi CPPFLAGS="$ap_ckver_CPPFLAGS" CPPFLAGS="$apu_ckver_CPPFLAGS" else ap_ckver_CPPFLAGS="$CPPFLAGS" CPPFLAGS="$CPPFLAGS `$apu_config --includes`" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for APR-util version 1.3.0 or later" >&5 $as_echo_n "checking for APR-util version 1.3.0 or later... " >&6; } if ${ap_cv_apuver13+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #if APU_MAJOR_VERSION > 1 || (APU_MAJOR_VERSION == 1 && APU_MINOR_VERSION >= 3) good #endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "good" >/dev/null 2>&1; then : ap_cv_apuver13=yes else ap_cv_apuver13=no fi rm -f conftest* fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_cv_apuver13" >&5 $as_echo "$ap_cv_apuver13" >&6; } if test "$ap_cv_apuver13" = "yes"; then : else as_fn_error $? "APR-util version 1.3.0 or later is required" "$LINENO" 5 fi CPPFLAGS="$ap_ckver_CPPFLAGS" fi fi if test "$GCC" = "yes"; then MKDEP='$(CC) -MM' else rm -f conftest.c cat > conftest.c < int main() { return 0; } EOF MKDEP="true" for i in "$CC -MM" "$CC -M" "$CPP -MM" "$CPP -M" "cpp -M"; do { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $i can create proper make dependencies" >&5 $as_echo_n "checking if $i can create proper make dependencies... " >&6; } if $i conftest.c 2>/dev/null | grep 'conftest.o: conftest.c' >/dev/null; then MKDEP=$i { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } break; fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } done rm -f conftest.c fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ANSI C header files" >&5 $as_echo_n "checking for ANSI C header files... " >&6; } if ${ac_cv_header_stdc+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include #include #include int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_header_stdc=yes else ac_cv_header_stdc=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext if test $ac_cv_header_stdc = yes; then # SunOS 4.x string.h does not declare mem*, contrary to ANSI. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "memchr" >/dev/null 2>&1; then : else ac_cv_header_stdc=no fi rm -f conftest* fi if test $ac_cv_header_stdc = yes; then # ISC 2.0.2 stdlib.h does not declare free, contrary to ANSI. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "free" >/dev/null 2>&1; then : else ac_cv_header_stdc=no fi rm -f conftest* fi if test $ac_cv_header_stdc = yes; then # /bin/cc in Irix-4.0.5 gets non-ANSI ctype macros unless using -ansi. if test "$cross_compiling" = yes; then : : else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include #if ((' ' & 0x0FF) == 0x020) # define ISLOWER(c) ('a' <= (c) && (c) <= 'z') # define TOUPPER(c) (ISLOWER(c) ? 'A' + ((c) - 'a') : (c)) #else # define ISLOWER(c) \ (('a' <= (c) && (c) <= 'i') \ || ('j' <= (c) && (c) <= 'r') \ || ('s' <= (c) && (c) <= 'z')) # define TOUPPER(c) (ISLOWER(c) ? ((c) | 0x40) : (c)) #endif #define XOR(e, f) (((e) && !(f)) || (!(e) && (f))) int main () { int i; for (i = 0; i < 256; i++) if (XOR (islower (i), ISLOWER (i)) || toupper (i) != TOUPPER (i)) return 2; return 0; } _ACEOF if ac_fn_c_try_run "$LINENO"; then : else ac_cv_header_stdc=no fi rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \ conftest.$ac_objext conftest.beam conftest.$ac_ext fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_stdc" >&5 $as_echo "$ac_cv_header_stdc" >&6; } if test $ac_cv_header_stdc = yes; then $as_echo "#define STDC_HEADERS 1" >>confdefs.h fi for ac_header in \ string.h \ limits.h \ unistd.h \ sys/socket.h \ pwd.h \ grp.h \ strings.h \ sys/prctl.h \ sys/processor.h \ sys/sem.h \ sys/sdt.h \ sys/loadavg.h do : as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh` ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default" if eval test \"x\$"$as_ac_Header"\" = x"yes"; then : cat >>confdefs.h <<_ACEOF #define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1 _ACEOF fi done { $as_echo "$as_me:${as_lineno-$LINENO}: checking for sys/wait.h that is POSIX.1 compatible" >&5 $as_echo_n "checking for sys/wait.h that is POSIX.1 compatible... " >&6; } if ${ac_cv_header_sys_wait_h+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include #ifndef WEXITSTATUS # define WEXITSTATUS(stat_val) ((unsigned int) (stat_val) >> 8) #endif #ifndef WIFEXITED # define WIFEXITED(stat_val) (((stat_val) & 255) == 0) #endif int main () { int s; wait (&s); s = WIFEXITED (s) ? WEXITSTATUS (s) : 1; ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_header_sys_wait_h=yes else ac_cv_header_sys_wait_h=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_sys_wait_h" >&5 $as_echo "$ac_cv_header_sys_wait_h" >&6; } if test $ac_cv_header_sys_wait_h = yes; then $as_echo "#define HAVE_SYS_WAIT_H 1" >>confdefs.h fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for an ANSI C-conforming const" >&5 $as_echo_n "checking for an ANSI C-conforming const... " >&6; } if ${ac_cv_c_const+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { #ifndef __cplusplus /* Ultrix mips cc rejects this sort of thing. */ typedef int charset[2]; const charset cs = { 0, 0 }; /* SunOS 4.1.1 cc rejects this. */ char const *const *pcpcc; char **ppc; /* NEC SVR4.0.2 mips cc rejects this. */ struct point {int x, y;}; static struct point const zero = {0,0}; /* AIX XL C 1.02.0.0 rejects this. It does not let you subtract one const X* pointer from another in an arm of an if-expression whose if-part is not a constant expression */ const char *g = "string"; pcpcc = &g + (g ? g-g : 0); /* HPUX 7.0 cc rejects these. */ ++pcpcc; ppc = (char**) pcpcc; pcpcc = (char const *const *) ppc; { /* SCO 3.2v4 cc rejects this sort of thing. */ char tx; char *t = &tx; char const *s = 0 ? (char *) 0 : (char const *) 0; *t++ = 0; if (s) return 0; } { /* Someone thinks the Sun supposedly-ANSI compiler will reject this. */ int x[] = {25, 17}; const int *foo = &x[0]; ++foo; } { /* Sun SC1.0 ANSI compiler rejects this -- but not the above. */ typedef const int *iptr; iptr p = 0; ++p; } { /* AIX XL C 1.02.0.0 rejects this sort of thing, saying "k.c", line 2.27: 1506-025 (S) Operand must be a modifiable lvalue. */ struct s { int j; const int *ap[3]; } bx; struct s *b = &bx; b->j = 5; } { /* ULTRIX-32 V3.1 (Rev 9) vcc rejects this */ const int foo = 10; if (!foo) return 0; } return !cs[0] && !zero.x; #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_c_const=yes else ac_cv_c_const=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_const" >&5 $as_echo "$ac_cv_c_const" >&6; } if test $ac_cv_c_const = no; then $as_echo "#define const /**/" >>confdefs.h fi saved_LIBS="$LIBS" LIBS="" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing sqrt" >&5 $as_echo_n "checking for library containing sqrt... " >&6; } if ${ac_cv_search_sqrt+:} false; then : $as_echo_n "(cached) " >&6 else ac_func_search_save_LIBS=$LIBS cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char sqrt (); int main () { return sqrt (); ; return 0; } _ACEOF for ac_lib in '' m; do if test -z "$ac_lib"; then ac_res="none required" else ac_res=-l$ac_lib LIBS="-l$ac_lib $ac_func_search_save_LIBS" fi if ac_fn_c_try_link "$LINENO"; then : ac_cv_search_sqrt=$ac_res fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext if ${ac_cv_search_sqrt+:} false; then : break fi done if ${ac_cv_search_sqrt+:} false; then : else ac_cv_search_sqrt=no fi rm conftest.$ac_ext LIBS=$ac_func_search_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_sqrt" >&5 $as_echo "$ac_cv_search_sqrt" >&6; } ac_res=$ac_cv_search_sqrt if test "$ac_res" != no; then : test "$ac_res" = "none required" || LIBS="$ac_res $LIBS" fi MATH_LIBS="$LIBS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST MATH_LIBS" LIBS="$saved_LIBS" saved_LIBS="$LIBS" LIBS="" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing crypt" >&5 $as_echo_n "checking for library containing crypt... " >&6; } if ${ac_cv_search_crypt+:} false; then : $as_echo_n "(cached) " >&6 else ac_func_search_save_LIBS=$LIBS cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char crypt (); int main () { return crypt (); ; return 0; } _ACEOF for ac_lib in '' crypt; do if test -z "$ac_lib"; then ac_res="none required" else ac_res=-l$ac_lib LIBS="-l$ac_lib $ac_func_search_save_LIBS" fi if ac_fn_c_try_link "$LINENO"; then : ac_cv_search_crypt=$ac_res fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext if ${ac_cv_search_crypt+:} false; then : break fi done if ${ac_cv_search_crypt+:} false; then : else ac_cv_search_crypt=no fi rm conftest.$ac_ext LIBS=$ac_func_search_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_crypt" >&5 $as_echo "$ac_cv_search_crypt" >&6; } ac_res=$ac_cv_search_crypt if test "$ac_res" != no; then : test "$ac_res" = "none required" || LIBS="$ac_res $LIBS" fi CRYPT_LIBS="$LIBS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST CRYPT_LIBS" LIBS="$saved_LIBS" for ac_func in \ getpwnam \ getgrnam \ initgroups \ bindprocessor \ prctl \ timegm \ getpgid \ fopen64 \ getloadavg do : as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh` ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var" if eval test \"x\$"$as_ac_var"\" = x"yes"; then : cat >>confdefs.h <<_ACEOF #define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1 _ACEOF fi done { $as_echo "$as_me:${as_lineno-$LINENO}: checking for void pointer length" >&5 $as_echo_n "checking for void pointer length... " >&6; } if ${ap_cv_void_ptr_lt_long+:} false; then : $as_echo_n "(cached) " >&6 else if test "$cross_compiling" = yes; then : ap_cv_void_ptr_lt_long=yes else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main(void) { return sizeof(void *) < sizeof(long); } _ACEOF if ac_fn_c_try_run "$LINENO"; then : ap_cv_void_ptr_lt_long=no else ap_cv_void_ptr_lt_long=yes fi rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \ conftest.$ac_objext conftest.beam conftest.$ac_ext fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_cv_void_ptr_lt_long" >&5 $as_echo "$ap_cv_void_ptr_lt_long" >&6; } if test "$ap_cv_void_ptr_lt_long" = "yes"; then as_fn_error $? "Size of \"void *\" is less than size of \"long\"" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for gettid()" >&5 $as_echo_n "checking for gettid()... " >&6; } if ${ac_cv_gettid+:} false; then : $as_echo_n "(cached) " >&6 else if test "$cross_compiling" = yes; then : ac_cv_gettid=no else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #define _GNU_SOURCE #include #include #include int main(int argc, char **argv) { pid_t t = syscall(SYS_gettid); return t == -1 ? 1 : 0; } _ACEOF if ac_fn_c_try_run "$LINENO"; then : ac_cv_gettid=yes else ac_cv_gettid=no fi rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \ conftest.$ac_objext conftest.beam conftest.$ac_ext fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gettid" >&5 $as_echo "$ac_cv_gettid" >&6; } if test "$ac_cv_gettid" = "yes"; then $as_echo "#define HAVE_GETTID 1" >>confdefs.h fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for tm_gmtoff in struct tm" >&5 $as_echo_n "checking for tm_gmtoff in struct tm... " >&6; } if ${ac_cv_struct_tm_gmtoff+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include int main () { struct tm tm; tm.tm_gmtoff; ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_struct_tm_gmtoff=yes else ac_cv_struct_tm_gmtoff=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_struct_tm_gmtoff" >&5 $as_echo "$ac_cv_struct_tm_gmtoff" >&6; } if test "$ac_cv_struct_tm_gmtoff" = "yes"; then $as_echo "#define HAVE_GMTOFF 1" >>confdefs.h fi case $host in *aix*) # for 32-bit builds, increase MAXDATA to allow lots of threads if test x$OBJECT_MODE != x64; then OS_SPECIFIC_VARS="LDR_CNTRL=\"MAXDATA=0x80000000\" ; export LDR_CNTRL ;" fi OS_SPECIFIC_VARS="$OS_SPECIFIC_VARS AIXTHREAD_SCOPE=S ; export AIXTHREAD_SCOPE" OS_SPECIFIC_VARS="$OS_SPECIFIC_VARS ; AIXTHREAD_MUTEX_DEBUG=OFF ; export AIXTHREAD_MUTEX_DEBUG" OS_SPECIFIC_VARS="$OS_SPECIFIC_VARS ; AIXTHREAD_RWLOCK_DEBUG=OFF ; export AIXTHREAD_RWLOCK_DEBUG" OS_SPECIFIC_VARS="$OS_SPECIFIC_VARS ; AIXTHREAD_COND_DEBUG=OFF ; export AIXTHREAD_COND_DEBUG" OS_SPECIFIC_VARS="$OS_SPECIFIC_VARS ; SPINLOOPTIME=1000 ; export SPINLOOPTIME" OS_SPECIFIC_VARS="$OS_SPECIFIC_VARS ; YIELDLOOPTIME=8 ; export YIELDLOOPTIME" OS_SPECIFIC_VARS="$OS_SPECIFIC_VARS ; MALLOCMULTIHEAP=considersize,heaps:8 ; export MALLOCMULTIHEAP" ;; *os390*) OS_SPECIFIC_VARS="export _CEE_RUNOPTS=\"STACK(,,ANY)\" ; export _EDC_ADD_ERRNO2=1" ;; *) OS_SPECIFIC_VARS="" esac # Check whether --with-port was given. if test "${with_port+set}" = set; then : withval=$with_port; if test "$withval" = "yes"; then as_fn_error $? "'option --with-port requires a value (the TCP port number)'" "$LINENO" 5; else PORT="$withval"; fi else PORT=80 fi # Check whether --with-sslport was given. if test "${with_sslport+set}" = set; then : withval=$with_sslport; if test "$withval" = "yes"; then as_fn_error $? "'option --with-sslport requires a value (the SSL TCP port number)'" "$LINENO" 5; else SSLPORT="$withval"; fi else SSLPORT=443 fi DTRACE=true # Check whether --enable-dtrace was given. if test "${enable_dtrace+set}" = set; then : enableval=$enable_dtrace; enable_dtrace=$enableval if test "$enableval" = "yes"; then if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"-DAPR_DTRACE_PROVIDER\"" CPPFLAGS="-DAPR_DTRACE_PROVIDER" else apr_addto_bugger="-DAPR_DTRACE_PROVIDER" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi as_fn_error $? "'DTrace Support in the build system is not complete. Patches Welcome!'" "$LINENO" 5 fi else enable_dtrace=no fi enable_dtrace=no case $host in *-solaris2*) if test $enable_dtrace = "yes" -a "$ac_cv_header_sys_sdt_h" = "yes"; then $as_echo "#define AP_ENABLE_DTRACE 1" >>confdefs.h DTRACE="/usr/sbin/dtrace $DTRACEFLAGS" test -f include/apache_probes.h || $DTRACE -h -s apache_probes.d -o include/apache_probes.h fi ;; esac APACHE_VAR_SUBST="$APACHE_VAR_SUBST DTRACE" # Check whether --enable-hook-probes was given. if test "${enable_hook_probes+set}" = set; then : enableval=$enable_hook_probes; if test "$enableval" = "yes"; then $as_echo "#define AP_HOOK_PROBES_ENABLED 1" >>confdefs.h if test "x$INTERNAL_CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting INTERNAL_CPPFLAGS to \"-DAP_HOOK_PROBES_ENABLED\"" INTERNAL_CPPFLAGS="-DAP_HOOK_PROBES_ENABLED" else apr_addto_bugger="-DAP_HOOK_PROBES_ENABLED" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $INTERNAL_CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to INTERNAL_CPPFLAGS" INTERNAL_CPPFLAGS="$INTERNAL_CPPFLAGS $i" fi done fi fi fi # Check whether --enable-exception-hook was given. if test "${enable_exception_hook+set}" = set; then : enableval=$enable_exception_hook; if test "$enableval" = "yes"; then $as_echo "#define AP_ENABLE_EXCEPTION_HOOK 1" >>confdefs.h fi fi # Check whether --enable-load-all-modules was given. if test "${enable_load_all_modules+set}" = set; then : enableval=$enable_load_all_modules; LOAD_ALL_MODULES=$enableval { $as_echo "$as_me:${as_lineno-$LINENO}: Setting \"LOAD_ALL_MODULES\" to $LOAD_ALL_MODULES" >&5 $as_echo "$as_me: Setting \"LOAD_ALL_MODULES\" to $LOAD_ALL_MODULES" >&6;} else LOAD_ALL_MODULES="no" fi # Check whether --enable-maintainer-mode was given. if test "${enable_maintainer_mode+set}" = set; then : enableval=$enable_maintainer_mode; if test "$enableval" = "yes"; then if test "x$NOTEST_CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CPPFLAGS to \"-DAP_DEBUG\"" NOTEST_CPPFLAGS="-DAP_DEBUG" else apr_addto_bugger="-DAP_DEBUG" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CPPFLAGS" NOTEST_CPPFLAGS="$NOTEST_CPPFLAGS $i" fi done fi if test "$GCC" = "yes"; then if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -std=c89" >&5 $as_echo_n "checking whether gcc accepts -std=c89... " >&6; } if ${ac_cv_gcc__std_c89+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -std=c89 -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__std_c89=yes else ac_cv_gcc__std_c89=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__std_c89" >&5 $as_echo "$ac_cv_gcc__std_c89" >&6; } if test "$ac_cv_gcc__std_c89" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-std=c89\"" NOTEST_CFLAGS="-std=c89" else apr_addto_bugger="-std=c89" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Werror" >&5 $as_echo_n "checking whether gcc accepts -Werror... " >&6; } if ${ac_cv_gcc__Werror+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Werror -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Werror=yes else ac_cv_gcc__Werror=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Werror" >&5 $as_echo "$ac_cv_gcc__Werror" >&6; } if test "$ac_cv_gcc__Werror" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Werror\"" NOTEST_CFLAGS="-Werror" else apr_addto_bugger="-Werror" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wall" >&5 $as_echo_n "checking whether gcc accepts -Wall... " >&6; } if ${ac_cv_gcc__Wall+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wall -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wall=yes else ac_cv_gcc__Wall=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wall" >&5 $as_echo "$ac_cv_gcc__Wall" >&6; } if test "$ac_cv_gcc__Wall" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wall\"" NOTEST_CFLAGS="-Wall" else apr_addto_bugger="-Wall" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wstrict-prototypes" >&5 $as_echo_n "checking whether gcc accepts -Wstrict-prototypes... " >&6; } if ${ac_cv_gcc__Wstrict_prototypes+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wstrict-prototypes -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wstrict_prototypes=yes else ac_cv_gcc__Wstrict_prototypes=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wstrict_prototypes" >&5 $as_echo "$ac_cv_gcc__Wstrict_prototypes" >&6; } if test "$ac_cv_gcc__Wstrict_prototypes" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wstrict-prototypes\"" NOTEST_CFLAGS="-Wstrict-prototypes" else apr_addto_bugger="-Wstrict-prototypes" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wmissing-prototypes" >&5 $as_echo_n "checking whether gcc accepts -Wmissing-prototypes... " >&6; } if ${ac_cv_gcc__Wmissing_prototypes+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wmissing-prototypes -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wmissing_prototypes=yes else ac_cv_gcc__Wmissing_prototypes=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wmissing_prototypes" >&5 $as_echo "$ac_cv_gcc__Wmissing_prototypes" >&6; } if test "$ac_cv_gcc__Wmissing_prototypes" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wmissing-prototypes\"" NOTEST_CFLAGS="-Wmissing-prototypes" else apr_addto_bugger="-Wmissing-prototypes" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wmissing-declarations" >&5 $as_echo_n "checking whether gcc accepts -Wmissing-declarations... " >&6; } if ${ac_cv_gcc__Wmissing_declarations+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wmissing-declarations -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wmissing_declarations=yes else ac_cv_gcc__Wmissing_declarations=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wmissing_declarations" >&5 $as_echo "$ac_cv_gcc__Wmissing_declarations" >&6; } if test "$ac_cv_gcc__Wmissing_declarations" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wmissing-declarations\"" NOTEST_CFLAGS="-Wmissing-declarations" else apr_addto_bugger="-Wmissing-declarations" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wdeclaration-after-statement" >&5 $as_echo_n "checking whether gcc accepts -Wdeclaration-after-statement... " >&6; } if ${ac_cv_gcc__Wdeclaration_after_statement+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wdeclaration-after-statement -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wdeclaration_after_statement=yes else ac_cv_gcc__Wdeclaration_after_statement=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wdeclaration_after_statement" >&5 $as_echo "$ac_cv_gcc__Wdeclaration_after_statement" >&6; } if test "$ac_cv_gcc__Wdeclaration_after_statement" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wdeclaration-after-statement\"" NOTEST_CFLAGS="-Wdeclaration-after-statement" else apr_addto_bugger="-Wdeclaration-after-statement" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wpointer-arith" >&5 $as_echo_n "checking whether gcc accepts -Wpointer-arith... " >&6; } if ${ac_cv_gcc__Wpointer_arith+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wpointer-arith -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wpointer_arith=yes else ac_cv_gcc__Wpointer_arith=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wpointer_arith" >&5 $as_echo "$ac_cv_gcc__Wpointer_arith" >&6; } if test "$ac_cv_gcc__Wpointer_arith" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wpointer-arith\"" NOTEST_CFLAGS="-Wpointer-arith" else apr_addto_bugger="-Wpointer-arith" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wformat" >&5 $as_echo_n "checking whether gcc accepts -Wformat... " >&6; } if ${ac_cv_gcc__Wformat+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wformat -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wformat=yes else ac_cv_gcc__Wformat=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wformat" >&5 $as_echo "$ac_cv_gcc__Wformat" >&6; } if test "$ac_cv_gcc__Wformat" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wformat\"" NOTEST_CFLAGS="-Wformat" else apr_addto_bugger="-Wformat" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wformat-security" >&5 $as_echo_n "checking whether gcc accepts -Wformat-security... " >&6; } if ${ac_cv_gcc__Wformat_security+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wformat-security -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wformat_security=yes else ac_cv_gcc__Wformat_security=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wformat_security" >&5 $as_echo "$ac_cv_gcc__Wformat_security" >&6; } if test "$ac_cv_gcc__Wformat_security" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wformat-security\"" NOTEST_CFLAGS="-Wformat-security" else apr_addto_bugger="-Wformat-security" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wunused" >&5 $as_echo_n "checking whether gcc accepts -Wunused... " >&6; } if ${ac_cv_gcc__Wunused+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wunused -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wunused=yes else ac_cv_gcc__Wunused=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wunused" >&5 $as_echo "$ac_cv_gcc__Wunused" >&6; } if test "$ac_cv_gcc__Wunused" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wunused\"" NOTEST_CFLAGS="-Wunused" else apr_addto_bugger="-Wunused" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi elif test "$AIX_XLC" = "yes"; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-qfullpath -qinitauto=FE -qcheck=all -qinfo=pro\"" NOTEST_CFLAGS="-qfullpath -qinitauto=FE -qcheck=all -qinfo=pro" else apr_addto_bugger="-qfullpath -qinitauto=FE -qcheck=all -qinfo=pro" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi if test "x$enable_load_all_modules" = "x"; then LOAD_ALL_MODULES=yes { $as_echo "$as_me:${as_lineno-$LINENO}: Maintainer mode setting \"LOAD_ALL_MODULES\" to $LOAD_ALL_MODULES" >&5 $as_echo "$as_me: Maintainer mode setting \"LOAD_ALL_MODULES\" to $LOAD_ALL_MODULES" >&6;} fi if test "x$enable_bucketeer" = "x"; then enable_bucketeer=yes { $as_echo "$as_me:${as_lineno-$LINENO}: Maintainer mode setting \"enable_bucketeer\" to yes" >&5 $as_echo "$as_me: Maintainer mode setting \"enable_bucketeer\" to yes" >&6;} fi fi fi # Check whether --enable-debugger-mode was given. if test "${enable_debugger_mode+set}" = set; then : enableval=$enable_debugger_mode; if test "$enableval" = "yes"; then if test "x$NOTEST_CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CPPFLAGS to \"-DAP_DEBUG\"" NOTEST_CPPFLAGS="-DAP_DEBUG" else apr_addto_bugger="-DAP_DEBUG" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CPPFLAGS" NOTEST_CPPFLAGS="$NOTEST_CPPFLAGS $i" fi done fi if test "$GCC" = "yes"; then if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -O0" >&5 $as_echo_n "checking whether gcc accepts -O0... " >&6; } if ${ac_cv_gcc__O0+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -O0 -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__O0=yes else ac_cv_gcc__O0=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__O0" >&5 $as_echo "$ac_cv_gcc__O0" >&6; } if test "$ac_cv_gcc__O0" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-O0\"" NOTEST_CFLAGS="-O0" else apr_addto_bugger="-O0" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wall" >&5 $as_echo_n "checking whether gcc accepts -Wall... " >&6; } if ${ac_cv_gcc__Wall+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wall -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wall=yes else ac_cv_gcc__Wall=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wall" >&5 $as_echo "$ac_cv_gcc__Wall" >&6; } if test "$ac_cv_gcc__Wall" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wall\"" NOTEST_CFLAGS="-Wall" else apr_addto_bugger="-Wall" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wstrict-prototypes" >&5 $as_echo_n "checking whether gcc accepts -Wstrict-prototypes... " >&6; } if ${ac_cv_gcc__Wstrict_prototypes+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wstrict-prototypes -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wstrict_prototypes=yes else ac_cv_gcc__Wstrict_prototypes=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wstrict_prototypes" >&5 $as_echo "$ac_cv_gcc__Wstrict_prototypes" >&6; } if test "$ac_cv_gcc__Wstrict_prototypes" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wstrict-prototypes\"" NOTEST_CFLAGS="-Wstrict-prototypes" else apr_addto_bugger="-Wstrict-prototypes" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wmissing-prototypes" >&5 $as_echo_n "checking whether gcc accepts -Wmissing-prototypes... " >&6; } if ${ac_cv_gcc__Wmissing_prototypes+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wmissing-prototypes -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wmissing_prototypes=yes else ac_cv_gcc__Wmissing_prototypes=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wmissing_prototypes" >&5 $as_echo "$ac_cv_gcc__Wmissing_prototypes" >&6; } if test "$ac_cv_gcc__Wmissing_prototypes" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wmissing-prototypes\"" NOTEST_CFLAGS="-Wmissing-prototypes" else apr_addto_bugger="-Wmissing-prototypes" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wmissing-declarations" >&5 $as_echo_n "checking whether gcc accepts -Wmissing-declarations... " >&6; } if ${ac_cv_gcc__Wmissing_declarations+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wmissing-declarations -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wmissing_declarations=yes else ac_cv_gcc__Wmissing_declarations=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wmissing_declarations" >&5 $as_echo "$ac_cv_gcc__Wmissing_declarations" >&6; } if test "$ac_cv_gcc__Wmissing_declarations" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wmissing-declarations\"" NOTEST_CFLAGS="-Wmissing-declarations" else apr_addto_bugger="-Wmissing-declarations" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wdeclaration-after-statement" >&5 $as_echo_n "checking whether gcc accepts -Wdeclaration-after-statement... " >&6; } if ${ac_cv_gcc__Wdeclaration_after_statement+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wdeclaration-after-statement -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wdeclaration_after_statement=yes else ac_cv_gcc__Wdeclaration_after_statement=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wdeclaration_after_statement" >&5 $as_echo "$ac_cv_gcc__Wdeclaration_after_statement" >&6; } if test "$ac_cv_gcc__Wdeclaration_after_statement" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wdeclaration-after-statement\"" NOTEST_CFLAGS="-Wdeclaration-after-statement" else apr_addto_bugger="-Wdeclaration-after-statement" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Werror=declaration-after-statement" >&5 $as_echo_n "checking whether gcc accepts -Werror=declaration-after-statement... " >&6; } if ${ac_cv_gcc__Werror_declaration_after_statement+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Werror=declaration-after-statement -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Werror_declaration_after_statement=yes else ac_cv_gcc__Werror_declaration_after_statement=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Werror_declaration_after_statement" >&5 $as_echo "$ac_cv_gcc__Werror_declaration_after_statement" >&6; } if test "$ac_cv_gcc__Werror_declaration_after_statement" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Werror=declaration-after-statement\"" NOTEST_CFLAGS="-Werror=declaration-after-statement" else apr_addto_bugger="-Werror=declaration-after-statement" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wpointer-arith" >&5 $as_echo_n "checking whether gcc accepts -Wpointer-arith... " >&6; } if ${ac_cv_gcc__Wpointer_arith+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wpointer-arith -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wpointer_arith=yes else ac_cv_gcc__Wpointer_arith=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wpointer_arith" >&5 $as_echo "$ac_cv_gcc__Wpointer_arith" >&6; } if test "$ac_cv_gcc__Wpointer_arith" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wpointer-arith\"" NOTEST_CFLAGS="-Wpointer-arith" else apr_addto_bugger="-Wpointer-arith" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wformat" >&5 $as_echo_n "checking whether gcc accepts -Wformat... " >&6; } if ${ac_cv_gcc__Wformat+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wformat -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wformat=yes else ac_cv_gcc__Wformat=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wformat" >&5 $as_echo "$ac_cv_gcc__Wformat" >&6; } if test "$ac_cv_gcc__Wformat" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wformat\"" NOTEST_CFLAGS="-Wformat" else apr_addto_bugger="-Wformat" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Wformat-security" >&5 $as_echo_n "checking whether gcc accepts -Wformat-security... " >&6; } if ${ac_cv_gcc__Wformat_security+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wformat-security -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Wformat_security=yes else ac_cv_gcc__Wformat_security=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wformat_security" >&5 $as_echo "$ac_cv_gcc__Wformat_security" >&6; } if test "$ac_cv_gcc__Wformat_security" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Wformat-security\"" NOTEST_CFLAGS="-Wformat-security" else apr_addto_bugger="-Wformat-security" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi if test "$GCC" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gcc accepts -Werror=format-security" >&5 $as_echo_n "checking whether gcc accepts -Werror=format-security... " >&6; } if ${ac_cv_gcc__Werror_format_security+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Werror=format-security -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_gcc__Werror_format_security=yes else ac_cv_gcc__Werror_format_security=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS="$save_CFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Werror_format_security" >&5 $as_echo "$ac_cv_gcc__Werror_format_security" >&6; } if test "$ac_cv_gcc__Werror_format_security" = "yes" ; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-Werror=format-security\"" NOTEST_CFLAGS="-Werror=format-security" else apr_addto_bugger="-Werror=format-security" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi elif test "$AIX_XLC" = "yes"; then if test "x$NOTEST_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting NOTEST_CFLAGS to \"-qfullpath -qinitauto=FE -qcheck=all -qinfo=pro\"" NOTEST_CFLAGS="-qfullpath -qinitauto=FE -qcheck=all -qinfo=pro" else apr_addto_bugger="-qfullpath -qinitauto=FE -qcheck=all -qinfo=pro" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $NOTEST_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to NOTEST_CFLAGS" NOTEST_CFLAGS="$NOTEST_CFLAGS $i" fi done fi fi fi fi # Check whether --enable-pie was given. if test "${enable_pie+set}" = set; then : enableval=$enable_pie; fi if test "$enable_pie" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts PIE flags" >&5 $as_echo_n "checking whether $CC accepts PIE flags... " >&6; } if ${ap_cv_cc_pie+:} false; then : $as_echo_n "(cached) " >&6 else save_CFLAGS=$CFLAGS save_LDFLAGS=$LDFLAGS CFLAGS="$CFLAGS -fPIE" LDFLAGS="$LDFLAGS -pie" if test "$cross_compiling" = yes; then : ap_cv_cc_pie=yes else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ static int foo[30000]; int main () { return 0; } _ACEOF if ac_fn_c_try_run "$LINENO"; then : ap_cv_cc_pie=yes else ap_cv_cc_pie=no fi rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \ conftest.$ac_objext conftest.beam conftest.$ac_ext fi CFLAGS=$save_CFLAGS LDFLAGS=$save_LDFLAGS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_cv_cc_pie" >&5 $as_echo "$ap_cv_cc_pie" >&6; } if test "$ap_cv_cc_pie" = "yes"; then PICFLAGS="-fPIE" PILDFLAGS="-pie" else as_fn_error $? "--enable-pie requested but $CC failed using PIE flags" "$LINENO" 5 fi fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST PICFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST PILDFLAGS" prefix="$orig_prefix" module_selection=most module_default=shared apr_old_cppflags=$CPPFLAGS CPPFLAGS="$CPPFLAGS $INCLUDES" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #if APR_HAS_DSO YES_IS_DEFINED #endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "YES_IS_DEFINED" >/dev/null 2>&1; then : ac_cv_define_APR_HAS_DSO=yes else ac_cv_define_APR_HAS_DSO=no fi rm -f conftest* CPPFLAGS=$apr_old_cppflags if test $ac_cv_define_APR_HAS_DSO = "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Missing DSO support - building static modules by default." >&5 $as_echo "$as_me: WARNING: Missing DSO support - building static modules by default." >&2;} module_default=static fi # Check whether --enable-modules was given. if test "${enable_modules+set}" = set; then : enableval=$enable_modules; if test "$enableval" = "none"; then module_default=no module_selection=none else for i in $enableval; do if test "$i" = "all" -o "$i" = "most" -o "$i" = "few" -o "$i" = "reallyall" then module_selection=$i else i=`echo $i | sed 's/-/_/g'` eval "enable_$i=shared" fi done fi fi # Check whether --enable-mods-shared was given. if test "${enable_mods_shared+set}" = set; then : enableval=$enable_mods_shared; for i in $enableval; do if test "$i" = "all" -o "$i" = "most" -o "$i" = "few" -o "$i" = "reallyall" then module_selection=$i module_default=shared else i=`echo $i | sed 's/-/_/g'` eval "enable_$i=shared" fi done fi # Check whether --enable-mods-static was given. if test "${enable_mods_static+set}" = set; then : enableval=$enable_mods_static; for i in $enableval; do if test "$i" = "all" -o "$i" = "most" -o "$i" = "few" -o "$i" = "reallyall"; then module_selection=$i module_default=static else i=`echo $i | sed 's/-/_/g'` eval "enable_$i=static" fi done fi current_dir=aaa modpath_current=modules/aaa modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d aaa || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_authn_file" >&5 $as_echo_n "checking whether to enable mod_authn_file... " >&6; } # Check whether --enable-authn-file was given. if test "${enable_authn_file+set}" = set; then : enableval=$enable_authn_file; force_authn_file=$enableval else enable_authn_file=yes fi _apmod_extra_msg="" case "$enable_authn_file" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authn_file" = "static" -o "$enable_authn_file" = "shared"; then : elif test "$enable_authn_file" = "yes"; then enable_authn_file=$module_default elif test "$enable_authn_file" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authn_file=$module_default else enable_authn_file=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authn_file" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authn_file=$module_default else enable_authn_file=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authn_file" = "all" -o "$enable_authn_file" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authn_file=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authn_file=no fi elif test "$enable_authn_file" = "reallyall" -o "$enable_authn_file" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authn_file" != "no" ; then enable_authn_file=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authn_file=no fi else enable_authn_file=no fi if test "$enable_authn_file" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authn_file$_apmod_extra_msg" >&5 $as_echo "$enable_authn_file$_apmod_extra_msg" >&6; } if test "$enable_authn_file" != "no"; then case "$enable_authn_file" in static*) MODLIST="$MODLIST authn_file" if test "authn_file" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authn_file" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authn_file" fi ;; esac if test -z ""; then objects="mod_authn_file.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authn_file.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_authn_dbm... " >&6; } # Check whether --enable-authn-dbm was given. if test "${enable_authn_dbm+set}" = set; then : enableval=$enable_authn_dbm; force_authn_dbm=$enableval else enable_authn_dbm=most fi _apmod_extra_msg="" case "$enable_authn_dbm" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authn_dbm" = "static" -o "$enable_authn_dbm" = "shared"; then : elif test "$enable_authn_dbm" = "yes"; then enable_authn_dbm=$module_default elif test "$enable_authn_dbm" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authn_dbm=$module_default else enable_authn_dbm=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authn_dbm" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authn_dbm=$module_default else enable_authn_dbm=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authn_dbm" = "all" -o "$enable_authn_dbm" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authn_dbm=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authn_dbm=no fi elif test "$enable_authn_dbm" = "reallyall" -o "$enable_authn_dbm" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authn_dbm" != "no" ; then enable_authn_dbm=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authn_dbm=no fi else enable_authn_dbm=no fi if test "$enable_authn_dbm" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authn_dbm$_apmod_extra_msg" >&5 $as_echo "$enable_authn_dbm$_apmod_extra_msg" >&6; } if test "$enable_authn_dbm" != "no"; then case "$enable_authn_dbm" in static*) MODLIST="$MODLIST authn_dbm" if test "authn_dbm" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authn_dbm" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authn_dbm" fi ;; esac if test -z ""; then objects="mod_authn_dbm.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authn_dbm.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_authn_anon... " >&6; } # Check whether --enable-authn-anon was given. if test "${enable_authn_anon+set}" = set; then : enableval=$enable_authn_anon; force_authn_anon=$enableval else enable_authn_anon=most fi _apmod_extra_msg="" case "$enable_authn_anon" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authn_anon" = "static" -o "$enable_authn_anon" = "shared"; then : elif test "$enable_authn_anon" = "yes"; then enable_authn_anon=$module_default elif test "$enable_authn_anon" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authn_anon=$module_default else enable_authn_anon=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authn_anon" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authn_anon=$module_default else enable_authn_anon=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authn_anon" = "all" -o "$enable_authn_anon" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authn_anon=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authn_anon=no fi elif test "$enable_authn_anon" = "reallyall" -o "$enable_authn_anon" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authn_anon" != "no" ; then enable_authn_anon=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authn_anon=no fi else enable_authn_anon=no fi if test "$enable_authn_anon" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authn_anon$_apmod_extra_msg" >&5 $as_echo "$enable_authn_anon$_apmod_extra_msg" >&6; } if test "$enable_authn_anon" != "no"; then case "$enable_authn_anon" in static*) MODLIST="$MODLIST authn_anon" if test "authn_anon" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authn_anon" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authn_anon" fi ;; esac if test -z ""; then objects="mod_authn_anon.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authn_anon.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_authn_dbd... " >&6; } # Check whether --enable-authn-dbd was given. if test "${enable_authn_dbd+set}" = set; then : enableval=$enable_authn_dbd; force_authn_dbd=$enableval else enable_authn_dbd=most fi _apmod_extra_msg="" case "$enable_authn_dbd" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authn_dbd" = "static" -o "$enable_authn_dbd" = "shared"; then : elif test "$enable_authn_dbd" = "yes"; then enable_authn_dbd=$module_default elif test "$enable_authn_dbd" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authn_dbd=$module_default else enable_authn_dbd=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authn_dbd" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authn_dbd=$module_default else enable_authn_dbd=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authn_dbd" = "all" -o "$enable_authn_dbd" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authn_dbd=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authn_dbd=no fi elif test "$enable_authn_dbd" = "reallyall" -o "$enable_authn_dbd" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authn_dbd" != "no" ; then enable_authn_dbd=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authn_dbd=no fi else enable_authn_dbd=no fi if test "$enable_authn_dbd" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authn_dbd$_apmod_extra_msg" >&5 $as_echo "$enable_authn_dbd$_apmod_extra_msg" >&6; } if test "$enable_authn_dbd" != "no"; then case "$enable_authn_dbd" in static*) MODLIST="$MODLIST authn_dbd" if test "authn_dbd" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authn_dbd" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authn_dbd" fi ;; esac if test -z ""; then objects="mod_authn_dbd.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authn_dbd.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_authn_socache... " >&6; } # Check whether --enable-authn-socache was given. if test "${enable_authn_socache+set}" = set; then : enableval=$enable_authn_socache; force_authn_socache=$enableval else enable_authn_socache=most fi _apmod_extra_msg="" case "$enable_authn_socache" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authn_socache" = "static" -o "$enable_authn_socache" = "shared"; then : elif test "$enable_authn_socache" = "yes"; then enable_authn_socache=$module_default elif test "$enable_authn_socache" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authn_socache=$module_default else enable_authn_socache=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authn_socache" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authn_socache=$module_default else enable_authn_socache=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authn_socache" = "all" -o "$enable_authn_socache" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authn_socache=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authn_socache=no fi elif test "$enable_authn_socache" = "reallyall" -o "$enable_authn_socache" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authn_socache" != "no" ; then enable_authn_socache=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authn_socache=no fi else enable_authn_socache=no fi if test "$enable_authn_socache" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authn_socache$_apmod_extra_msg" >&5 $as_echo "$enable_authn_socache$_apmod_extra_msg" >&6; } if test "$enable_authn_socache" != "no"; then case "$enable_authn_socache" in static*) MODLIST="$MODLIST authn_socache" if test "authn_socache" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authn_socache" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authn_socache" fi ;; esac if test -z ""; then objects="mod_authn_socache.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authn_socache.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_authn_core... " >&6; } # Check whether --enable-authn-core was given. if test "${enable_authn_core+set}" = set; then : enableval=$enable_authn_core; force_authn_core=$enableval else enable_authn_core=yes fi _apmod_extra_msg="" case "$enable_authn_core" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authn_core" = "static" -o "$enable_authn_core" = "shared"; then : elif test "$enable_authn_core" = "yes"; then enable_authn_core=$module_default elif test "$enable_authn_core" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authn_core=$module_default else enable_authn_core=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authn_core" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authn_core=$module_default else enable_authn_core=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authn_core" = "all" -o "$enable_authn_core" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authn_core=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authn_core=no fi elif test "$enable_authn_core" = "reallyall" -o "$enable_authn_core" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authn_core" != "no" ; then enable_authn_core=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authn_core=no fi else enable_authn_core=no fi if test "$enable_authn_core" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authn_core$_apmod_extra_msg" >&5 $as_echo "$enable_authn_core$_apmod_extra_msg" >&6; } if test "$enable_authn_core" != "no"; then case "$enable_authn_core" in static*) MODLIST="$MODLIST authn_core" if test "authn_core" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authn_core" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authn_core" fi ;; esac if test -z ""; then objects="mod_authn_core.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authn_core.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_authz_host... " >&6; } # Check whether --enable-authz-host was given. if test "${enable_authz_host+set}" = set; then : enableval=$enable_authz_host; force_authz_host=$enableval else enable_authz_host=yes fi _apmod_extra_msg="" case "$enable_authz_host" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authz_host" = "static" -o "$enable_authz_host" = "shared"; then : elif test "$enable_authz_host" = "yes"; then enable_authz_host=$module_default elif test "$enable_authz_host" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authz_host=$module_default else enable_authz_host=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authz_host" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authz_host=$module_default else enable_authz_host=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authz_host" = "all" -o "$enable_authz_host" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authz_host=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authz_host=no fi elif test "$enable_authz_host" = "reallyall" -o "$enable_authz_host" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authz_host" != "no" ; then enable_authz_host=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authz_host=no fi else enable_authz_host=no fi if test "$enable_authz_host" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authz_host$_apmod_extra_msg" >&5 $as_echo "$enable_authz_host$_apmod_extra_msg" >&6; } if test "$enable_authz_host" != "no"; then case "$enable_authz_host" in static*) MODLIST="$MODLIST authz_host" if test "authz_host" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authz_host" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authz_host" fi ;; esac if test -z ""; then objects="mod_authz_host.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authz_host.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_authz_groupfile... " >&6; } # Check whether --enable-authz-groupfile was given. if test "${enable_authz_groupfile+set}" = set; then : enableval=$enable_authz_groupfile; force_authz_groupfile=$enableval else enable_authz_groupfile=yes fi _apmod_extra_msg="" case "$enable_authz_groupfile" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authz_groupfile" = "static" -o "$enable_authz_groupfile" = "shared"; then : elif test "$enable_authz_groupfile" = "yes"; then enable_authz_groupfile=$module_default elif test "$enable_authz_groupfile" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authz_groupfile=$module_default else enable_authz_groupfile=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authz_groupfile" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authz_groupfile=$module_default else enable_authz_groupfile=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authz_groupfile" = "all" -o "$enable_authz_groupfile" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authz_groupfile=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authz_groupfile=no fi elif test "$enable_authz_groupfile" = "reallyall" -o "$enable_authz_groupfile" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authz_groupfile" != "no" ; then enable_authz_groupfile=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authz_groupfile=no fi else enable_authz_groupfile=no fi if test "$enable_authz_groupfile" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authz_groupfile$_apmod_extra_msg" >&5 $as_echo "$enable_authz_groupfile$_apmod_extra_msg" >&6; } if test "$enable_authz_groupfile" != "no"; then case "$enable_authz_groupfile" in static*) MODLIST="$MODLIST authz_groupfile" if test "authz_groupfile" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authz_groupfile" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authz_groupfile" fi ;; esac if test -z ""; then objects="mod_authz_groupfile.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authz_groupfile.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_authz_user... " >&6; } # Check whether --enable-authz-user was given. if test "${enable_authz_user+set}" = set; then : enableval=$enable_authz_user; force_authz_user=$enableval else enable_authz_user=yes fi _apmod_extra_msg="" case "$enable_authz_user" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authz_user" = "static" -o "$enable_authz_user" = "shared"; then : elif test "$enable_authz_user" = "yes"; then enable_authz_user=$module_default elif test "$enable_authz_user" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authz_user=$module_default else enable_authz_user=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authz_user" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authz_user=$module_default else enable_authz_user=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authz_user" = "all" -o "$enable_authz_user" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authz_user=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authz_user=no fi elif test "$enable_authz_user" = "reallyall" -o "$enable_authz_user" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authz_user" != "no" ; then enable_authz_user=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authz_user=no fi else enable_authz_user=no fi if test "$enable_authz_user" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authz_user$_apmod_extra_msg" >&5 $as_echo "$enable_authz_user$_apmod_extra_msg" >&6; } if test "$enable_authz_user" != "no"; then case "$enable_authz_user" in static*) MODLIST="$MODLIST authz_user" if test "authz_user" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authz_user" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authz_user" fi ;; esac if test -z ""; then objects="mod_authz_user.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authz_user.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_authz_dbm... " >&6; } # Check whether --enable-authz-dbm was given. if test "${enable_authz_dbm+set}" = set; then : enableval=$enable_authz_dbm; force_authz_dbm=$enableval else enable_authz_dbm=most fi _apmod_extra_msg="" case "$enable_authz_dbm" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authz_dbm" = "static" -o "$enable_authz_dbm" = "shared"; then : elif test "$enable_authz_dbm" = "yes"; then enable_authz_dbm=$module_default elif test "$enable_authz_dbm" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authz_dbm=$module_default else enable_authz_dbm=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authz_dbm" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authz_dbm=$module_default else enable_authz_dbm=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authz_dbm" = "all" -o "$enable_authz_dbm" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authz_dbm=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authz_dbm=no fi elif test "$enable_authz_dbm" = "reallyall" -o "$enable_authz_dbm" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authz_dbm" != "no" ; then enable_authz_dbm=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authz_dbm=no fi else enable_authz_dbm=no fi if test "$enable_authz_dbm" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authz_dbm$_apmod_extra_msg" >&5 $as_echo "$enable_authz_dbm$_apmod_extra_msg" >&6; } if test "$enable_authz_dbm" != "no"; then case "$enable_authz_dbm" in static*) MODLIST="$MODLIST authz_dbm" if test "authz_dbm" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authz_dbm" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authz_dbm" fi ;; esac if test -z ""; then objects="mod_authz_dbm.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authz_dbm.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_authz_owner... " >&6; } # Check whether --enable-authz-owner was given. if test "${enable_authz_owner+set}" = set; then : enableval=$enable_authz_owner; force_authz_owner=$enableval else enable_authz_owner=most fi _apmod_extra_msg="" case "$enable_authz_owner" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authz_owner" = "static" -o "$enable_authz_owner" = "shared"; then : elif test "$enable_authz_owner" = "yes"; then enable_authz_owner=$module_default elif test "$enable_authz_owner" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authz_owner=$module_default else enable_authz_owner=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authz_owner" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authz_owner=$module_default else enable_authz_owner=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authz_owner" = "all" -o "$enable_authz_owner" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authz_owner=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authz_owner=no fi elif test "$enable_authz_owner" = "reallyall" -o "$enable_authz_owner" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authz_owner" != "no" ; then enable_authz_owner=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authz_owner=no fi else enable_authz_owner=no fi if test "$enable_authz_owner" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authz_owner$_apmod_extra_msg" >&5 $as_echo "$enable_authz_owner$_apmod_extra_msg" >&6; } if test "$enable_authz_owner" != "no"; then case "$enable_authz_owner" in static*) MODLIST="$MODLIST authz_owner" if test "authz_owner" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authz_owner" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authz_owner" fi ;; esac if test -z ""; then objects="mod_authz_owner.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authz_owner.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_authz_dbd... " >&6; } # Check whether --enable-authz-dbd was given. if test "${enable_authz_dbd+set}" = set; then : enableval=$enable_authz_dbd; force_authz_dbd=$enableval else enable_authz_dbd=most fi _apmod_extra_msg="" case "$enable_authz_dbd" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authz_dbd" = "static" -o "$enable_authz_dbd" = "shared"; then : elif test "$enable_authz_dbd" = "yes"; then enable_authz_dbd=$module_default elif test "$enable_authz_dbd" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authz_dbd=$module_default else enable_authz_dbd=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authz_dbd" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authz_dbd=$module_default else enable_authz_dbd=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authz_dbd" = "all" -o "$enable_authz_dbd" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authz_dbd=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authz_dbd=no fi elif test "$enable_authz_dbd" = "reallyall" -o "$enable_authz_dbd" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authz_dbd" != "no" ; then enable_authz_dbd=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authz_dbd=no fi else enable_authz_dbd=no fi if test "$enable_authz_dbd" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authz_dbd$_apmod_extra_msg" >&5 $as_echo "$enable_authz_dbd$_apmod_extra_msg" >&6; } if test "$enable_authz_dbd" != "no"; then case "$enable_authz_dbd" in static*) MODLIST="$MODLIST authz_dbd" if test "authz_dbd" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authz_dbd" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authz_dbd" fi ;; esac if test -z ""; then objects="mod_authz_dbd.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authz_dbd.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_authz_core... " >&6; } # Check whether --enable-authz-core was given. if test "${enable_authz_core+set}" = set; then : enableval=$enable_authz_core; force_authz_core=$enableval else enable_authz_core=yes fi _apmod_extra_msg="" case "$enable_authz_core" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authz_core" = "static" -o "$enable_authz_core" = "shared"; then : elif test "$enable_authz_core" = "yes"; then enable_authz_core=$module_default elif test "$enable_authz_core" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authz_core=$module_default else enable_authz_core=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authz_core" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authz_core=$module_default else enable_authz_core=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authz_core" = "all" -o "$enable_authz_core" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authz_core=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authz_core=no fi elif test "$enable_authz_core" = "reallyall" -o "$enable_authz_core" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authz_core" != "no" ; then enable_authz_core=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authz_core=no fi else enable_authz_core=no fi if test "$enable_authz_core" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authz_core$_apmod_extra_msg" >&5 $as_echo "$enable_authz_core$_apmod_extra_msg" >&6; } if test "$enable_authz_core" != "no"; then case "$enable_authz_core" in static*) MODLIST="$MODLIST authz_core" if test "authz_core" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authz_core" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authz_core" fi ;; esac if test -z ""; then objects="mod_authz_core.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authz_core.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_authnz_ldap... " >&6; } # Check whether --enable-authnz-ldap was given. if test "${enable_authnz_ldap+set}" = set; then : enableval=$enable_authnz_ldap; force_authnz_ldap=$enableval else enable_authnz_ldap=most fi _apmod_extra_msg="" case "$enable_authnz_ldap" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authnz_ldap" = "static" -o "$enable_authnz_ldap" = "shared"; then : elif test "$enable_authnz_ldap" = "yes"; then enable_authnz_ldap=$module_default elif test "$enable_authnz_ldap" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authnz_ldap=$module_default else enable_authnz_ldap=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authnz_ldap" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authnz_ldap=$module_default else enable_authnz_ldap=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authnz_ldap" = "all" -o "$enable_authnz_ldap" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authnz_ldap=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authnz_ldap=no fi elif test "$enable_authnz_ldap" = "reallyall" -o "$enable_authnz_ldap" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authnz_ldap" != "no" ; then enable_authnz_ldap=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authnz_ldap=no fi else enable_authnz_ldap=no fi if test "$enable_authnz_ldap" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ldap support in apr/apr-util" >&5 $as_echo_n "checking for ldap support in apr/apr-util... " >&6; } if ${ac_cv_APR_HAS_LDAP+:} false; then : $as_echo_n "(cached) " >&6 else apache_old_cppflags="$CPPFLAGS" CPPFLAGS="$CPPFLAGS $INCLUDES" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #if APR_HAS_LDAP YES_IS_DEFINED #endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "YES_IS_DEFINED" >/dev/null 2>&1; then : ac_cv_APR_HAS_LDAP=yes else ac_cv_APR_HAS_LDAP=no fi rm -f conftest* CPPFLAGS="$apache_old_cppflags" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_APR_HAS_LDAP" >&5 $as_echo "$ac_cv_APR_HAS_LDAP" >&6; } if test "$ac_cv_APR_HAS_LDAP" = "yes" ; then if test -z "$apu_config" ; then LDAP_LIBS="`$apr_config --ldap-libs`" else LDAP_LIBS="`$apu_config --ldap-libs`" fi if test "x$MOD_AUTHNZ_LDAP_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_AUTHNZ_LDAP_LDADD to \"$LDAP_LIBS\"" MOD_AUTHNZ_LDAP_LDADD="$LDAP_LIBS" else apr_addto_bugger="$LDAP_LIBS" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_AUTHNZ_LDAP_LDADD; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_AUTHNZ_LDAP_LDADD" MOD_AUTHNZ_LDAP_LDADD="$MOD_AUTHNZ_LDAP_LDADD $i" fi done fi else { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: apr/apr-util is compiled without ldap support" >&5 $as_echo "$as_me: WARNING: apr/apr-util is compiled without ldap support" >&2;} enable_authnz_ldap=no fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_authnz_ldap" >&5 $as_echo_n "checking whether to enable mod_authnz_ldap... " >&6; } if test "$enable_authnz_ldap" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_authnz_ldap has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authnz_ldap$_apmod_extra_msg" >&5 $as_echo "$enable_authnz_ldap$_apmod_extra_msg" >&6; } if test "$enable_authnz_ldap" != "no"; then case "$enable_authnz_ldap" in static*) MODLIST="$MODLIST authnz_ldap" if test "authnz_ldap" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authnz_ldap" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authnz_ldap" fi ;; esac if test -z ""; then objects="mod_authnz_ldap.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authnz_ldap.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_authnz_fcgi... " >&6; } # Check whether --enable-authnz-fcgi was given. if test "${enable_authnz_fcgi+set}" = set; then : enableval=$enable_authnz_fcgi; force_authnz_fcgi=$enableval else enable_authnz_fcgi=no fi _apmod_extra_msg="" case "$enable_authnz_fcgi" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_authnz_fcgi" = "static" -o "$enable_authnz_fcgi" = "shared"; then : elif test "$enable_authnz_fcgi" = "yes"; then enable_authnz_fcgi=$module_default elif test "$enable_authnz_fcgi" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authnz_fcgi=$module_default else enable_authnz_fcgi=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authnz_fcgi" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_authnz_fcgi=$module_default else enable_authnz_fcgi=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_authnz_fcgi" = "all" -o "$enable_authnz_fcgi" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_authnz_fcgi=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authnz_fcgi=no fi elif test "$enable_authnz_fcgi" = "reallyall" -o "$enable_authnz_fcgi" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_authnz_fcgi" != "no" ; then enable_authnz_fcgi=$module_default _apmod_extra_msg=" ($module_selection)" else enable_authnz_fcgi=no fi else enable_authnz_fcgi=no fi if test "$enable_authnz_fcgi" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_authnz_fcgi$_apmod_extra_msg" >&5 $as_echo "$enable_authnz_fcgi$_apmod_extra_msg" >&6; } if test "$enable_authnz_fcgi" != "no"; then case "$enable_authnz_fcgi" in static*) MODLIST="$MODLIST authnz_fcgi" if test "authnz_fcgi" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES authnz_fcgi" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},authnz_fcgi" fi ;; esac if test -z ""; then objects="mod_authnz_fcgi.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_authnz_fcgi.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_access_compat... " >&6; } # Check whether --enable-access-compat was given. if test "${enable_access_compat+set}" = set; then : enableval=$enable_access_compat; force_access_compat=$enableval else enable_access_compat=yes fi _apmod_extra_msg="" case "$enable_access_compat" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_access_compat" = "static" -o "$enable_access_compat" = "shared"; then : elif test "$enable_access_compat" = "yes"; then enable_access_compat=$module_default elif test "$enable_access_compat" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_access_compat=$module_default else enable_access_compat=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_access_compat" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_access_compat=$module_default else enable_access_compat=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_access_compat" = "all" -o "$enable_access_compat" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_access_compat=$module_default _apmod_extra_msg=" ($module_selection)" else enable_access_compat=no fi elif test "$enable_access_compat" = "reallyall" -o "$enable_access_compat" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_access_compat" != "no" ; then enable_access_compat=$module_default _apmod_extra_msg=" ($module_selection)" else enable_access_compat=no fi else enable_access_compat=no fi if test "$enable_access_compat" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_access_compat$_apmod_extra_msg" >&5 $as_echo "$enable_access_compat$_apmod_extra_msg" >&6; } if test "$enable_access_compat" != "no"; then case "$enable_access_compat" in static*) MODLIST="$MODLIST access_compat" if test "access_compat" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES access_compat" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},access_compat" fi ;; esac if test -z ""; then objects="mod_access_compat.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_access_compat.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_auth_basic... " >&6; } # Check whether --enable-auth-basic was given. if test "${enable_auth_basic+set}" = set; then : enableval=$enable_auth_basic; force_auth_basic=$enableval else enable_auth_basic=yes fi _apmod_extra_msg="" case "$enable_auth_basic" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_auth_basic" = "static" -o "$enable_auth_basic" = "shared"; then : elif test "$enable_auth_basic" = "yes"; then enable_auth_basic=$module_default elif test "$enable_auth_basic" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_auth_basic=$module_default else enable_auth_basic=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_auth_basic" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_auth_basic=$module_default else enable_auth_basic=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_auth_basic" = "all" -o "$enable_auth_basic" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_auth_basic=$module_default _apmod_extra_msg=" ($module_selection)" else enable_auth_basic=no fi elif test "$enable_auth_basic" = "reallyall" -o "$enable_auth_basic" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_auth_basic" != "no" ; then enable_auth_basic=$module_default _apmod_extra_msg=" ($module_selection)" else enable_auth_basic=no fi else enable_auth_basic=no fi if test "$enable_auth_basic" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_auth_basic$_apmod_extra_msg" >&5 $as_echo "$enable_auth_basic$_apmod_extra_msg" >&6; } if test "$enable_auth_basic" != "no"; then case "$enable_auth_basic" in static*) MODLIST="$MODLIST auth_basic" if test "auth_basic" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES auth_basic" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},auth_basic" fi ;; esac if test -z ""; then objects="mod_auth_basic.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_auth_basic.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_auth_form... " >&6; } # Check whether --enable-auth-form was given. if test "${enable_auth_form+set}" = set; then : enableval=$enable_auth_form; force_auth_form=$enableval else enable_auth_form=most fi _apmod_extra_msg="" case "$enable_auth_form" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_auth_form" = "static" -o "$enable_auth_form" = "shared"; then : elif test "$enable_auth_form" = "yes"; then enable_auth_form=$module_default elif test "$enable_auth_form" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_auth_form=$module_default else enable_auth_form=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_auth_form" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_auth_form=$module_default else enable_auth_form=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_auth_form" = "all" -o "$enable_auth_form" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_auth_form=$module_default _apmod_extra_msg=" ($module_selection)" else enable_auth_form=no fi elif test "$enable_auth_form" = "reallyall" -o "$enable_auth_form" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_auth_form" != "no" ; then enable_auth_form=$module_default _apmod_extra_msg=" ($module_selection)" else enable_auth_form=no fi else enable_auth_form=no fi if test "$enable_auth_form" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_auth_form$_apmod_extra_msg" >&5 $as_echo "$enable_auth_form$_apmod_extra_msg" >&6; } if test "$enable_auth_form" != "no"; then case "$enable_auth_form" in static*) MODLIST="$MODLIST auth_form" if test "auth_form" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES auth_form" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},auth_form" fi ;; esac if test -z ""; then objects="mod_auth_form.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_auth_form.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_auth_digest... " >&6; } # Check whether --enable-auth-digest was given. if test "${enable_auth_digest+set}" = set; then : enableval=$enable_auth_digest; force_auth_digest=$enableval else enable_auth_digest=most fi _apmod_extra_msg="" case "$enable_auth_digest" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_auth_digest" = "static" -o "$enable_auth_digest" = "shared"; then : elif test "$enable_auth_digest" = "yes"; then enable_auth_digest=$module_default elif test "$enable_auth_digest" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_auth_digest=$module_default else enable_auth_digest=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_auth_digest" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_auth_digest=$module_default else enable_auth_digest=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_auth_digest" = "all" -o "$enable_auth_digest" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_auth_digest=$module_default _apmod_extra_msg=" ($module_selection)" else enable_auth_digest=no fi elif test "$enable_auth_digest" = "reallyall" -o "$enable_auth_digest" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_auth_digest" != "no" ; then enable_auth_digest=$module_default _apmod_extra_msg=" ($module_selection)" else enable_auth_digest=no fi else enable_auth_digest=no fi if test "$enable_auth_digest" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : apr_old_cppflags=$CPPFLAGS CPPFLAGS="$CPPFLAGS $INCLUDES" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #if APR_HAS_RANDOM YES_IS_DEFINED #endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "YES_IS_DEFINED" >/dev/null 2>&1; then : ac_cv_define_APR_HAS_RANDOM=yes else ac_cv_define_APR_HAS_RANDOM=no fi rm -f conftest* CPPFLAGS=$apr_old_cppflags if test $ac_cv_define_APR_HAS_RANDOM = "no"; then echo "You need APR random support to use mod_auth_digest." echo "Look at APR configure options --with-egd and --with-devrandom." enable_auth_digest="no" fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_auth_digest" >&5 $as_echo_n "checking whether to enable mod_auth_digest... " >&6; } if test "$enable_auth_digest" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_auth_digest has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_auth_digest$_apmod_extra_msg" >&5 $as_echo "$enable_auth_digest$_apmod_extra_msg" >&6; } if test "$enable_auth_digest" != "no"; then case "$enable_auth_digest" in static*) MODLIST="$MODLIST auth_digest" if test "auth_digest" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES auth_digest" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},auth_digest" fi ;; esac if test -z ""; then objects="mod_auth_digest.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_auth_digest.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_allowmethods... " >&6; } # Check whether --enable-allowmethods was given. if test "${enable_allowmethods+set}" = set; then : enableval=$enable_allowmethods; force_allowmethods=$enableval else enable_allowmethods=most fi _apmod_extra_msg="" case "$enable_allowmethods" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_allowmethods" = "static" -o "$enable_allowmethods" = "shared"; then : elif test "$enable_allowmethods" = "yes"; then enable_allowmethods=$module_default elif test "$enable_allowmethods" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_allowmethods=$module_default else enable_allowmethods=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_allowmethods" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_allowmethods=$module_default else enable_allowmethods=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_allowmethods" = "all" -o "$enable_allowmethods" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_allowmethods=$module_default _apmod_extra_msg=" ($module_selection)" else enable_allowmethods=no fi elif test "$enable_allowmethods" = "reallyall" -o "$enable_allowmethods" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_allowmethods" != "no" ; then enable_allowmethods=$module_default _apmod_extra_msg=" ($module_selection)" else enable_allowmethods=no fi else enable_allowmethods=no fi if test "$enable_allowmethods" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_allowmethods$_apmod_extra_msg" >&5 $as_echo "$enable_allowmethods$_apmod_extra_msg" >&6; } if test "$enable_allowmethods" != "no"; then case "$enable_allowmethods" in static*) MODLIST="$MODLIST allowmethods" if test "allowmethods" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES allowmethods" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},allowmethods" fi ;; esac if test -z ""; then objects="mod_allowmethods.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_allowmethods.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=arch/win32 modpath_current=modules/arch/win32 modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d arch/win32 || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_isapi" >&5 $as_echo_n "checking whether to enable mod_isapi... " >&6; } # Check whether --enable-isapi was given. if test "${enable_isapi+set}" = set; then : enableval=$enable_isapi; force_isapi=$enableval else enable_isapi=no fi _apmod_extra_msg="" case "$enable_isapi" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_isapi" = "static" -o "$enable_isapi" = "shared"; then : elif test "$enable_isapi" = "yes"; then enable_isapi=$module_default elif test "$enable_isapi" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_isapi=$module_default else enable_isapi=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_isapi" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_isapi=$module_default else enable_isapi=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_isapi" = "all" -o "$enable_isapi" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_isapi=$module_default _apmod_extra_msg=" ($module_selection)" else enable_isapi=no fi elif test "$enable_isapi" = "reallyall" -o "$enable_isapi" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_isapi" != "no" ; then enable_isapi=$module_default _apmod_extra_msg=" ($module_selection)" else enable_isapi=no fi else enable_isapi=no fi if test "$enable_isapi" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_isapi$_apmod_extra_msg" >&5 $as_echo "$enable_isapi$_apmod_extra_msg" >&6; } if test "$enable_isapi" != "no"; then case "$enable_isapi" in static*) MODLIST="$MODLIST isapi" if test "isapi" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES isapi" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},isapi" fi ;; esac if test -z ""; then objects="mod_isapi.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_isapi.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=cache modpath_current=modules/cache modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d cache || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_file_cache" >&5 $as_echo_n "checking whether to enable mod_file_cache... " >&6; } # Check whether --enable-file-cache was given. if test "${enable_file_cache+set}" = set; then : enableval=$enable_file_cache; force_file_cache=$enableval else enable_file_cache=most fi _apmod_extra_msg="" case "$enable_file_cache" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_file_cache" = "static" -o "$enable_file_cache" = "shared"; then : elif test "$enable_file_cache" = "yes"; then enable_file_cache=$module_default elif test "$enable_file_cache" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_file_cache=$module_default else enable_file_cache=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_file_cache" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_file_cache=$module_default else enable_file_cache=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_file_cache" = "all" -o "$enable_file_cache" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_file_cache=$module_default _apmod_extra_msg=" ($module_selection)" else enable_file_cache=no fi elif test "$enable_file_cache" = "reallyall" -o "$enable_file_cache" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_file_cache" != "no" ; then enable_file_cache=$module_default _apmod_extra_msg=" ($module_selection)" else enable_file_cache=no fi else enable_file_cache=no fi if test "$enable_file_cache" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_file_cache$_apmod_extra_msg" >&5 $as_echo "$enable_file_cache$_apmod_extra_msg" >&6; } if test "$enable_file_cache" != "no"; then case "$enable_file_cache" in static*) MODLIST="$MODLIST file_cache" if test "file_cache" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES file_cache" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},file_cache" fi ;; esac if test -z ""; then objects="mod_file_cache.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_file_cache.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_cache... " >&6; } # Check whether --enable-cache was given. if test "${enable_cache+set}" = set; then : enableval=$enable_cache; force_cache=$enableval else enable_cache=most fi _apmod_extra_msg="" case "$enable_cache" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_cache" = "static" -o "$enable_cache" = "shared"; then : elif test "$enable_cache" = "yes"; then enable_cache=$module_default elif test "$enable_cache" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cache=$module_default else enable_cache=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cache" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_cache=$module_default else enable_cache=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cache" = "all" -o "$enable_cache" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cache=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cache=no fi elif test "$enable_cache" = "reallyall" -o "$enable_cache" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_cache" != "no" ; then enable_cache=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cache=no fi else enable_cache=no fi if test "$enable_cache" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_cache$_apmod_extra_msg" >&5 $as_echo "$enable_cache$_apmod_extra_msg" >&6; } if test "$enable_cache" != "no"; then case "$enable_cache" in static*) MODLIST="$MODLIST cache" if test "cache" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES cache" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},cache" fi ;; esac if test -z "$cache_objs"; then objects="mod_cache.lo" else objects="$cache_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_cache.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_cache_disk... " >&6; } # Check whether --enable-cache-disk was given. if test "${enable_cache_disk+set}" = set; then : enableval=$enable_cache_disk; force_cache_disk=$enableval else enable_cache_disk=most fi _apmod_extra_msg="" case "$enable_cache_disk" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_cache_disk" = "static" -o "$enable_cache_disk" = "shared"; then : elif test "$enable_cache_disk" = "yes"; then enable_cache_disk=$module_default elif test "$enable_cache_disk" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cache_disk=$module_default else enable_cache_disk=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cache_disk" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_cache_disk=$module_default else enable_cache_disk=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cache_disk" = "all" -o "$enable_cache_disk" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cache_disk=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cache_disk=no fi elif test "$enable_cache_disk" = "reallyall" -o "$enable_cache_disk" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_cache_disk" != "no" ; then enable_cache_disk=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cache_disk=no fi else enable_cache_disk=no fi if test "$enable_cache_disk" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_cache" = "no" ; then enable_cache_disk=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_cache is disabled but required for mod_cache_disk\"" >&5 $as_echo "$as_me: WARNING: \"mod_cache is disabled but required for mod_cache_disk\"" >&2;} elif test "$enable_cache_disk" = "static" && test "$enable_cache" != "static" ; then enable_cache_disk=$enable_cache { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_cache_disk shared because mod_cache is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_cache_disk shared because mod_cache is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_cache_disk" >&5 $as_echo_n "checking whether to enable mod_cache_disk... " >&6; } if test "$enable_cache_disk" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_cache_disk has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_cache_disk$_apmod_extra_msg" >&5 $as_echo "$enable_cache_disk$_apmod_extra_msg" >&6; } if test "$enable_cache_disk" != "no"; then case "$enable_cache_disk" in static*) MODLIST="$MODLIST cache_disk" if test "cache_disk" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES cache_disk" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},cache_disk" fi ;; esac if test -z "$cache_disk_objs"; then objects="mod_cache_disk.lo" else objects="$cache_disk_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_cache_disk.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_cache_socache... " >&6; } # Check whether --enable-cache-socache was given. if test "${enable_cache_socache+set}" = set; then : enableval=$enable_cache_socache; force_cache_socache=$enableval else enable_cache_socache=most fi _apmod_extra_msg="" case "$enable_cache_socache" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_cache_socache" = "static" -o "$enable_cache_socache" = "shared"; then : elif test "$enable_cache_socache" = "yes"; then enable_cache_socache=$module_default elif test "$enable_cache_socache" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cache_socache=$module_default else enable_cache_socache=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cache_socache" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_cache_socache=$module_default else enable_cache_socache=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cache_socache" = "all" -o "$enable_cache_socache" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cache_socache=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cache_socache=no fi elif test "$enable_cache_socache" = "reallyall" -o "$enable_cache_socache" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_cache_socache" != "no" ; then enable_cache_socache=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cache_socache=no fi else enable_cache_socache=no fi if test "$enable_cache_socache" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_cache_socache$_apmod_extra_msg" >&5 $as_echo "$enable_cache_socache$_apmod_extra_msg" >&6; } if test "$enable_cache_socache" != "no"; then case "$enable_cache_socache" in static*) MODLIST="$MODLIST cache_socache" if test "cache_socache" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES cache_socache" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},cache_socache" fi ;; esac if test -z "$cache_socache_objs"; then objects="mod_cache_socache.lo" else objects="$cache_socache_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_cache_socache.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_socache_shmcb... " >&6; } # Check whether --enable-socache-shmcb was given. if test "${enable_socache_shmcb+set}" = set; then : enableval=$enable_socache_shmcb; force_socache_shmcb=$enableval else enable_socache_shmcb=most fi _apmod_extra_msg="" case "$enable_socache_shmcb" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_socache_shmcb" = "static" -o "$enable_socache_shmcb" = "shared"; then : elif test "$enable_socache_shmcb" = "yes"; then enable_socache_shmcb=$module_default elif test "$enable_socache_shmcb" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_socache_shmcb=$module_default else enable_socache_shmcb=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_socache_shmcb" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_socache_shmcb=$module_default else enable_socache_shmcb=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_socache_shmcb" = "all" -o "$enable_socache_shmcb" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_socache_shmcb=$module_default _apmod_extra_msg=" ($module_selection)" else enable_socache_shmcb=no fi elif test "$enable_socache_shmcb" = "reallyall" -o "$enable_socache_shmcb" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_socache_shmcb" != "no" ; then enable_socache_shmcb=$module_default _apmod_extra_msg=" ($module_selection)" else enable_socache_shmcb=no fi else enable_socache_shmcb=no fi if test "$enable_socache_shmcb" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_socache_shmcb$_apmod_extra_msg" >&5 $as_echo "$enable_socache_shmcb$_apmod_extra_msg" >&6; } if test "$enable_socache_shmcb" != "no"; then case "$enable_socache_shmcb" in static*) MODLIST="$MODLIST socache_shmcb" if test "socache_shmcb" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES socache_shmcb" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},socache_shmcb" fi ;; esac if test -z ""; then objects="mod_socache_shmcb.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_socache_shmcb.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_socache_dbm... " >&6; } # Check whether --enable-socache-dbm was given. if test "${enable_socache_dbm+set}" = set; then : enableval=$enable_socache_dbm; force_socache_dbm=$enableval else enable_socache_dbm=most fi _apmod_extra_msg="" case "$enable_socache_dbm" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_socache_dbm" = "static" -o "$enable_socache_dbm" = "shared"; then : elif test "$enable_socache_dbm" = "yes"; then enable_socache_dbm=$module_default elif test "$enable_socache_dbm" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_socache_dbm=$module_default else enable_socache_dbm=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_socache_dbm" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_socache_dbm=$module_default else enable_socache_dbm=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_socache_dbm" = "all" -o "$enable_socache_dbm" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_socache_dbm=$module_default _apmod_extra_msg=" ($module_selection)" else enable_socache_dbm=no fi elif test "$enable_socache_dbm" = "reallyall" -o "$enable_socache_dbm" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_socache_dbm" != "no" ; then enable_socache_dbm=$module_default _apmod_extra_msg=" ($module_selection)" else enable_socache_dbm=no fi else enable_socache_dbm=no fi if test "$enable_socache_dbm" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_socache_dbm$_apmod_extra_msg" >&5 $as_echo "$enable_socache_dbm$_apmod_extra_msg" >&6; } if test "$enable_socache_dbm" != "no"; then case "$enable_socache_dbm" in static*) MODLIST="$MODLIST socache_dbm" if test "socache_dbm" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES socache_dbm" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},socache_dbm" fi ;; esac if test -z ""; then objects="mod_socache_dbm.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_socache_dbm.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_socache_memcache... " >&6; } # Check whether --enable-socache-memcache was given. if test "${enable_socache_memcache+set}" = set; then : enableval=$enable_socache_memcache; force_socache_memcache=$enableval else enable_socache_memcache=most fi _apmod_extra_msg="" case "$enable_socache_memcache" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_socache_memcache" = "static" -o "$enable_socache_memcache" = "shared"; then : elif test "$enable_socache_memcache" = "yes"; then enable_socache_memcache=$module_default elif test "$enable_socache_memcache" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_socache_memcache=$module_default else enable_socache_memcache=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_socache_memcache" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_socache_memcache=$module_default else enable_socache_memcache=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_socache_memcache" = "all" -o "$enable_socache_memcache" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_socache_memcache=$module_default _apmod_extra_msg=" ($module_selection)" else enable_socache_memcache=no fi elif test "$enable_socache_memcache" = "reallyall" -o "$enable_socache_memcache" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_socache_memcache" != "no" ; then enable_socache_memcache=$module_default _apmod_extra_msg=" ($module_selection)" else enable_socache_memcache=no fi else enable_socache_memcache=no fi if test "$enable_socache_memcache" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_socache_memcache$_apmod_extra_msg" >&5 $as_echo "$enable_socache_memcache$_apmod_extra_msg" >&6; } if test "$enable_socache_memcache" != "no"; then case "$enable_socache_memcache" in static*) MODLIST="$MODLIST socache_memcache" if test "socache_memcache" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES socache_memcache" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},socache_memcache" fi ;; esac if test -z ""; then objects="mod_socache_memcache.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_socache_memcache.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_socache_redis... " >&6; } # Check whether --enable-socache-redis was given. if test "${enable_socache_redis+set}" = set; then : enableval=$enable_socache_redis; force_socache_redis=$enableval else enable_socache_redis=most fi _apmod_extra_msg="" case "$enable_socache_redis" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_socache_redis" = "static" -o "$enable_socache_redis" = "shared"; then : elif test "$enable_socache_redis" = "yes"; then enable_socache_redis=$module_default elif test "$enable_socache_redis" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_socache_redis=$module_default else enable_socache_redis=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_socache_redis" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_socache_redis=$module_default else enable_socache_redis=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_socache_redis" = "all" -o "$enable_socache_redis" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_socache_redis=$module_default _apmod_extra_msg=" ($module_selection)" else enable_socache_redis=no fi elif test "$enable_socache_redis" = "reallyall" -o "$enable_socache_redis" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_socache_redis" != "no" ; then enable_socache_redis=$module_default _apmod_extra_msg=" ($module_selection)" else enable_socache_redis=no fi else enable_socache_redis=no fi if test "$enable_socache_redis" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_socache_redis$_apmod_extra_msg" >&5 $as_echo "$enable_socache_redis$_apmod_extra_msg" >&6; } if test "$enable_socache_redis" != "no"; then case "$enable_socache_redis" in static*) MODLIST="$MODLIST socache_redis" if test "socache_redis" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES socache_redis" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},socache_redis" fi ;; esac if test -z ""; then objects="mod_socache_redis.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_socache_redis.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_socache_dc... " >&6; } # Check whether --enable-socache-dc was given. if test "${enable_socache_dc+set}" = set; then : enableval=$enable_socache_dc; force_socache_dc=$enableval else enable_socache_dc=no fi _apmod_extra_msg="" case "$enable_socache_dc" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_socache_dc" = "static" -o "$enable_socache_dc" = "shared"; then : elif test "$enable_socache_dc" = "yes"; then enable_socache_dc=$module_default elif test "$enable_socache_dc" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_socache_dc=$module_default else enable_socache_dc=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_socache_dc" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_socache_dc=$module_default else enable_socache_dc=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_socache_dc" = "all" -o "$enable_socache_dc" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_socache_dc=$module_default _apmod_extra_msg=" ($module_selection)" else enable_socache_dc=no fi elif test "$enable_socache_dc" = "reallyall" -o "$enable_socache_dc" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_socache_dc" != "no" ; then enable_socache_dc=$module_default _apmod_extra_msg=" ($module_selection)" else enable_socache_dc=no fi else enable_socache_dc=no fi if test "$enable_socache_dc" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : if test "x$ap_distcache_configured" = "x"; then ap_distcache_found="" ap_distcache_base="" ap_distcache_libs="" ap_distcache_ldflags="" ap_distcache_with="" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for user-provided distcache base" >&5 $as_echo_n "checking for user-provided distcache base... " >&6; } # Check whether --with-distcache was given. if test "${with_distcache+set}" = set; then : withval=$with_distcache; if test "x$withval" != "xyes" -a "x$withval" != "x"; then ap_distcache_with="yes" ap_distcache_base="`cd $withval ; pwd`" fi fi if test "x$ap_distcache_base" = "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: none" >&5 $as_echo "none" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_distcache_base" >&5 $as_echo "$ap_distcache_base" >&6; } fi saved_CPPFLAGS="$CPPFLAGS" saved_LIBS="$LIBS" saved_LDFLAGS="$LDFLAGS" if test "x$ap_distcache_base" != "x"; then if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"-I$ap_distcache_base/include\"" CPPFLAGS="-I$ap_distcache_base/include" else apr_addto_bugger="-I$ap_distcache_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_INCLUDES" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_INCLUDES to \"-I$ap_distcache_base/include\"" MOD_INCLUDES="-I$ap_distcache_base/include" else apr_addto_bugger="-I$ap_distcache_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_INCLUDES; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_INCLUDES" MOD_INCLUDES="$MOD_INCLUDES $i" fi done fi if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"-L$ap_distcache_base/lib\"" LDFLAGS="-L$ap_distcache_base/lib" else apr_addto_bugger="-L$ap_distcache_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$ap_distcache_ldflags" = "x"; then test "x$silent" != "xyes" && echo " setting ap_distcache_ldflags to \"-L$ap_distcache_base/lib\"" ap_distcache_ldflags="-L$ap_distcache_base/lib" else apr_addto_bugger="-L$ap_distcache_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $ap_distcache_ldflags; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to ap_distcache_ldflags" ap_distcache_ldflags="$ap_distcache_ldflags $i" fi done fi if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$ap_platform_runtime_link_flag$ap_distcache_base/lib\"" LDFLAGS="$ap_platform_runtime_link_flag$ap_distcache_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_distcache_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$ap_distcache_ldflags" = "x"; then test "x$silent" != "xyes" && echo " setting ap_distcache_ldflags to \"$ap_platform_runtime_link_flag$ap_distcache_base/lib\"" ap_distcache_ldflags="$ap_platform_runtime_link_flag$ap_distcache_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_distcache_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $ap_distcache_ldflags; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to ap_distcache_ldflags" ap_distcache_ldflags="$ap_distcache_ldflags $i" fi done fi fi fi for ac_header in distcache/dc_client.h do : ac_fn_c_check_header_mongrel "$LINENO" "distcache/dc_client.h" "ac_cv_header_distcache_dc_client_h" "$ac_includes_default" if test "x$ac_cv_header_distcache_dc_client_h" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_DISTCACHE_DC_CLIENT_H 1 _ACEOF ap_distcache_found="yes" fi done if test "$ap_distcache_found" = "yes"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking for distcache version" >&5 $as_echo_n "checking for distcache version... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { #if DISTCACHE_CLIENT_API != 0x0001 #error "distcache API version is unrecognised" #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : else ap_distcache_found="no" fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_distcache_found" >&5 $as_echo "$ap_distcache_found" >&6; } fi if test "$ap_distcache_found" != "yes"; then if test "x$ap_distcache_with" = "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: ...No distcache detected" >&5 $as_echo "$as_me: WARNING: ...No distcache detected" >&2;} else as_fn_error $? "...No distcache detected" "$LINENO" 5 fi else { $as_echo "$as_me:${as_lineno-$LINENO}: checking for distcache libraries" >&5 $as_echo_n "checking for distcache libraries... " >&6; } ap_distcache_libs="-ldistcache -lnal" if test "x$LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LIBS to \"$ap_distcache_libs\"" LIBS="$ap_distcache_libs" else apr_addto_bugger="$ap_distcache_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LIBS" LIBS="$LIBS $i" fi done fi cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { DC_CTX *foo = DC_CTX_new((const char *)0,0); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : else ap_distcache_found="no" fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_distcache_found" >&5 $as_echo "$ap_distcache_found" >&6; } if test "$ap_distcache_found" != "yes"; then if test "x$ap_distcache_base" = "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: ... Error, distcache libraries were missing or unusable" >&5 $as_echo "$as_me: WARNING: ... Error, distcache libraries were missing or unusable" >&2;} else as_fn_error $? "... Error, distcache libraries were missing or unusable" "$LINENO" 5 fi fi fi CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" if test "$ap_distcache_found" = "yes"; then if test "x$MOD_SOCACHE_DC_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_SOCACHE_DC_LDADD to \"$ap_distcache_ldflags $ap_distcache_libs\"" MOD_SOCACHE_DC_LDADD="$ap_distcache_ldflags $ap_distcache_libs" else apr_addto_bugger="$ap_distcache_ldflags $ap_distcache_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_SOCACHE_DC_LDADD; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_SOCACHE_DC_LDADD" MOD_SOCACHE_DC_LDADD="$MOD_SOCACHE_DC_LDADD $i" fi done fi $as_echo "#define HAVE_DISTCACHE 1" >>confdefs.h else enable_socache_dc=no fi ap_distcache_configured="yes" fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_socache_dc" >&5 $as_echo_n "checking whether to enable mod_socache_dc... " >&6; } if test "$enable_socache_dc" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_socache_dc has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_socache_dc$_apmod_extra_msg" >&5 $as_echo "$enable_socache_dc$_apmod_extra_msg" >&6; } if test "$enable_socache_dc" != "no"; then case "$enable_socache_dc" in static*) MODLIST="$MODLIST socache_dc" if test "socache_dc" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES socache_dc" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},socache_dc" fi ;; esac if test -z ""; then objects="mod_socache_dc.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_socache_dc.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=core modpath_current=modules/core modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d core || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk apr_old_cppflags=$CPPFLAGS CPPFLAGS="$CPPFLAGS $INCLUDES" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #if APR_HAS_DSO YES_IS_DEFINED #endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "YES_IS_DEFINED" >/dev/null 2>&1; then : ac_cv_define_APR_HAS_DSO=yes else ac_cv_define_APR_HAS_DSO=no fi rm -f conftest* CPPFLAGS=$apr_old_cppflags case "x$enable_so" in "xyes") if test $ac_cv_define_APR_HAS_DSO = "no"; then as_fn_error $? "mod_so has been requested but cannot be built on your system" "$LINENO" 5 fi ;; "xshared") as_fn_error $? "mod_so can not be built as a shared DSO" "$LINENO" 5 ;; "xno") ;; "x") enable_so=$ac_cv_define_APR_HAS_DSO ;; esac if test "x$enable_so" = "xyes"; then enable_so="static" fi if test "x$enable_so" = "xstatic"; then if test "x$HTTPD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting HTTPD_LDFLAGS to \"-export-dynamic\"" HTTPD_LDFLAGS="-export-dynamic" else apr_addto_bugger="-export-dynamic" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $HTTPD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to HTTPD_LDFLAGS" HTTPD_LDFLAGS="$HTTPD_LDFLAGS $i" fi done fi INSTALL_DSO=yes else INSTALL_DSO=no fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST INSTALL_DSO" if test "$sharedobjs" = "yes"; then if test $ac_cv_define_APR_HAS_DSO = "no"; then as_fn_error $? "shared objects have been requested but cannot be built since mod_so cannot be built" "$LINENO" 5 elif test $enable_so = "no"; then as_fn_error $? "shared objects have been requested but cannot be built since mod_so was disabled" "$LINENO" 5 fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_so" >&5 $as_echo_n "checking whether to enable mod_so... " >&6; } # Check whether --enable-so was given. if test "${enable_so+set}" = set; then : enableval=$enable_so; force_so=$enableval else enable_so=$enable_so fi _apmod_extra_msg="" case "$enable_so" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_so" = "static" -o "$enable_so" = "shared"; then : elif test "$enable_so" = "yes"; then enable_so=$module_default elif test "$enable_so" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_so=$module_default else enable_so=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_so" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_so=$module_default else enable_so=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_so" = "all" -o "$enable_so" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_so=$module_default _apmod_extra_msg=" ($module_selection)" else enable_so=no fi elif test "$enable_so" = "reallyall" -o "$enable_so" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_so" != "no" ; then enable_so=$module_default _apmod_extra_msg=" ($module_selection)" else enable_so=no fi else enable_so=no fi if test "$enable_so" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_so$_apmod_extra_msg" >&5 $as_echo "$enable_so$_apmod_extra_msg" >&6; } if test "$enable_so" != "no"; then case "$enable_so" in static*) MODLIST="$MODLIST so" if test "so" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES so" if test "$enable_so" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},so" fi ;; esac if test -z ""; then objects="mod_so.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_so.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_watchdog... " >&6; } # Check whether --enable-watchdog was given. if test "${enable_watchdog+set}" = set; then : enableval=$enable_watchdog; force_watchdog=$enableval else enable_watchdog=most fi _apmod_extra_msg="" case "$enable_watchdog" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_watchdog" = "static" -o "$enable_watchdog" = "shared"; then : elif test "$enable_watchdog" = "yes"; then enable_watchdog=$module_default elif test "$enable_watchdog" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_watchdog=$module_default else enable_watchdog=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_watchdog" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_watchdog=$module_default else enable_watchdog=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_watchdog" = "all" -o "$enable_watchdog" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_watchdog=$module_default _apmod_extra_msg=" ($module_selection)" else enable_watchdog=no fi elif test "$enable_watchdog" = "reallyall" -o "$enable_watchdog" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_watchdog" != "no" ; then enable_watchdog=$module_default _apmod_extra_msg=" ($module_selection)" else enable_watchdog=no fi else enable_watchdog=no fi if test "$enable_watchdog" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : apr_old_cppflags=$CPPFLAGS CPPFLAGS="$CPPFLAGS $INCLUDES" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #if APR_HAS_THREADS YES_IS_DEFINED #endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "YES_IS_DEFINED" >/dev/null 2>&1; then : ac_cv_define_APR_HAS_THREADS=yes else ac_cv_define_APR_HAS_THREADS=no fi rm -f conftest* CPPFLAGS=$apr_old_cppflags if test $ac_cv_define_APR_HAS_THREADS = "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: mod_watchdog requires apr to be built with --enable-threads" >&5 $as_echo "$as_me: WARNING: mod_watchdog requires apr to be built with --enable-threads" >&2;} enable_watchdog=no fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_watchdog" >&5 $as_echo_n "checking whether to enable mod_watchdog... " >&6; } if test "$enable_watchdog" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_watchdog has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_watchdog$_apmod_extra_msg" >&5 $as_echo "$enable_watchdog$_apmod_extra_msg" >&6; } if test "$enable_watchdog" != "no"; then case "$enable_watchdog" in static*) MODLIST="$MODLIST watchdog" if test "watchdog" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES watchdog" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},watchdog" fi ;; esac if test -z ""; then objects="mod_watchdog.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_watchdog.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_macro... " >&6; } # Check whether --enable-macro was given. if test "${enable_macro+set}" = set; then : enableval=$enable_macro; force_macro=$enableval else enable_macro=most fi _apmod_extra_msg="" case "$enable_macro" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_macro" = "static" -o "$enable_macro" = "shared"; then : elif test "$enable_macro" = "yes"; then enable_macro=$module_default elif test "$enable_macro" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_macro=$module_default else enable_macro=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_macro" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_macro=$module_default else enable_macro=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_macro" = "all" -o "$enable_macro" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_macro=$module_default _apmod_extra_msg=" ($module_selection)" else enable_macro=no fi elif test "$enable_macro" = "reallyall" -o "$enable_macro" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_macro" != "no" ; then enable_macro=$module_default _apmod_extra_msg=" ($module_selection)" else enable_macro=no fi else enable_macro=no fi if test "$enable_macro" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_macro$_apmod_extra_msg" >&5 $as_echo "$enable_macro$_apmod_extra_msg" >&6; } if test "$enable_macro" != "no"; then case "$enable_macro" in static*) MODLIST="$MODLIST macro" if test "macro" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES macro" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},macro" fi ;; esac if test -z ""; then objects="mod_macro.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_macro.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=database modpath_current=modules/database modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d database || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_dbd" >&5 $as_echo_n "checking whether to enable mod_dbd... " >&6; } # Check whether --enable-dbd was given. if test "${enable_dbd+set}" = set; then : enableval=$enable_dbd; force_dbd=$enableval else enable_dbd=most fi _apmod_extra_msg="" case "$enable_dbd" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_dbd" = "static" -o "$enable_dbd" = "shared"; then : elif test "$enable_dbd" = "yes"; then enable_dbd=$module_default elif test "$enable_dbd" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_dbd=$module_default else enable_dbd=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_dbd" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_dbd=$module_default else enable_dbd=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_dbd" = "all" -o "$enable_dbd" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_dbd=$module_default _apmod_extra_msg=" ($module_selection)" else enable_dbd=no fi elif test "$enable_dbd" = "reallyall" -o "$enable_dbd" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_dbd" != "no" ; then enable_dbd=$module_default _apmod_extra_msg=" ($module_selection)" else enable_dbd=no fi else enable_dbd=no fi if test "$enable_dbd" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_dbd$_apmod_extra_msg" >&5 $as_echo "$enable_dbd$_apmod_extra_msg" >&6; } if test "$enable_dbd" != "no"; then case "$enable_dbd" in static*) MODLIST="$MODLIST dbd" if test "dbd" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES dbd" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},dbd" fi ;; esac if test -z ""; then objects="mod_dbd.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_dbd.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=debugging modpath_current=modules/debugging modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d debugging || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_bucketeer" >&5 $as_echo_n "checking whether to enable mod_bucketeer... " >&6; } # Check whether --enable-bucketeer was given. if test "${enable_bucketeer+set}" = set; then : enableval=$enable_bucketeer; force_bucketeer=$enableval else enable_bucketeer=no fi _apmod_extra_msg="" case "$enable_bucketeer" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_bucketeer" = "static" -o "$enable_bucketeer" = "shared"; then : elif test "$enable_bucketeer" = "yes"; then enable_bucketeer=$module_default elif test "$enable_bucketeer" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_bucketeer=$module_default else enable_bucketeer=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_bucketeer" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_bucketeer=$module_default else enable_bucketeer=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_bucketeer" = "all" -o "$enable_bucketeer" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_bucketeer=$module_default _apmod_extra_msg=" ($module_selection)" else enable_bucketeer=no fi elif test "$enable_bucketeer" = "reallyall" -o "$enable_bucketeer" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_bucketeer" != "no" ; then enable_bucketeer=$module_default _apmod_extra_msg=" ($module_selection)" else enable_bucketeer=no fi else enable_bucketeer=no fi if test "$enable_bucketeer" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_bucketeer$_apmod_extra_msg" >&5 $as_echo "$enable_bucketeer$_apmod_extra_msg" >&6; } if test "$enable_bucketeer" != "no"; then case "$enable_bucketeer" in static*) MODLIST="$MODLIST bucketeer" if test "bucketeer" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES bucketeer" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},bucketeer" fi ;; esac if test -z ""; then objects="mod_bucketeer.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_bucketeer.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_dumpio... " >&6; } # Check whether --enable-dumpio was given. if test "${enable_dumpio+set}" = set; then : enableval=$enable_dumpio; force_dumpio=$enableval else enable_dumpio=most fi _apmod_extra_msg="" case "$enable_dumpio" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_dumpio" = "static" -o "$enable_dumpio" = "shared"; then : elif test "$enable_dumpio" = "yes"; then enable_dumpio=$module_default elif test "$enable_dumpio" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_dumpio=$module_default else enable_dumpio=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_dumpio" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_dumpio=$module_default else enable_dumpio=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_dumpio" = "all" -o "$enable_dumpio" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_dumpio=$module_default _apmod_extra_msg=" ($module_selection)" else enable_dumpio=no fi elif test "$enable_dumpio" = "reallyall" -o "$enable_dumpio" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_dumpio" != "no" ; then enable_dumpio=$module_default _apmod_extra_msg=" ($module_selection)" else enable_dumpio=no fi else enable_dumpio=no fi if test "$enable_dumpio" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_dumpio$_apmod_extra_msg" >&5 $as_echo "$enable_dumpio$_apmod_extra_msg" >&6; } if test "$enable_dumpio" != "no"; then case "$enable_dumpio" in static*) MODLIST="$MODLIST dumpio" if test "dumpio" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES dumpio" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},dumpio" fi ;; esac if test -z ""; then objects="mod_dumpio.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_dumpio.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=echo modpath_current=modules/echo modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d echo || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_echo" >&5 $as_echo_n "checking whether to enable mod_echo... " >&6; } # Check whether --enable-echo was given. if test "${enable_echo+set}" = set; then : enableval=$enable_echo; force_echo=$enableval else enable_echo=maybe-all fi _apmod_extra_msg="" case "$enable_echo" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_echo" = "static" -o "$enable_echo" = "shared"; then : elif test "$enable_echo" = "yes"; then enable_echo=$module_default elif test "$enable_echo" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_echo=$module_default else enable_echo=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_echo" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_echo=$module_default else enable_echo=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_echo" = "all" -o "$enable_echo" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_echo=$module_default _apmod_extra_msg=" ($module_selection)" else enable_echo=no fi elif test "$enable_echo" = "reallyall" -o "$enable_echo" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_echo" != "no" ; then enable_echo=$module_default _apmod_extra_msg=" ($module_selection)" else enable_echo=no fi else enable_echo=no fi if test "$enable_echo" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_echo$_apmod_extra_msg" >&5 $as_echo "$enable_echo$_apmod_extra_msg" >&6; } if test "$enable_echo" != "no"; then case "$enable_echo" in static*) MODLIST="$MODLIST echo" if test "echo" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES echo" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},echo" fi ;; esac if test -z ""; then objects="mod_echo.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_echo.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=examples modpath_current=modules/examples modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d examples || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_example_hooks" >&5 $as_echo_n "checking whether to enable mod_example_hooks... " >&6; } # Check whether --enable-example-hooks was given. if test "${enable_example_hooks+set}" = set; then : enableval=$enable_example_hooks; force_example_hooks=$enableval else enable_example_hooks=no fi _apmod_extra_msg="" case "$enable_example_hooks" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_example_hooks" = "static" -o "$enable_example_hooks" = "shared"; then : elif test "$enable_example_hooks" = "yes"; then enable_example_hooks=$module_default elif test "$enable_example_hooks" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_example_hooks=$module_default else enable_example_hooks=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_example_hooks" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_example_hooks=$module_default else enable_example_hooks=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_example_hooks" = "all" -o "$enable_example_hooks" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_example_hooks=$module_default _apmod_extra_msg=" ($module_selection)" else enable_example_hooks=no fi elif test "$enable_example_hooks" = "reallyall" -o "$enable_example_hooks" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_example_hooks" != "no" ; then enable_example_hooks=$module_default _apmod_extra_msg=" ($module_selection)" else enable_example_hooks=no fi else enable_example_hooks=no fi if test "$enable_example_hooks" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_example_hooks$_apmod_extra_msg" >&5 $as_echo "$enable_example_hooks$_apmod_extra_msg" >&6; } if test "$enable_example_hooks" != "no"; then case "$enable_example_hooks" in static*) MODLIST="$MODLIST example_hooks" if test "example_hooks" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES example_hooks" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},example_hooks" fi ;; esac if test -z ""; then objects="mod_example_hooks.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_example_hooks.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_case_filter... " >&6; } # Check whether --enable-case-filter was given. if test "${enable_case_filter+set}" = set; then : enableval=$enable_case_filter; force_case_filter=$enableval else enable_case_filter=no fi _apmod_extra_msg="" case "$enable_case_filter" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_case_filter" = "static" -o "$enable_case_filter" = "shared"; then : elif test "$enable_case_filter" = "yes"; then enable_case_filter=$module_default elif test "$enable_case_filter" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_case_filter=$module_default else enable_case_filter=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_case_filter" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_case_filter=$module_default else enable_case_filter=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_case_filter" = "all" -o "$enable_case_filter" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_case_filter=$module_default _apmod_extra_msg=" ($module_selection)" else enable_case_filter=no fi elif test "$enable_case_filter" = "reallyall" -o "$enable_case_filter" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_case_filter" != "no" ; then enable_case_filter=$module_default _apmod_extra_msg=" ($module_selection)" else enable_case_filter=no fi else enable_case_filter=no fi if test "$enable_case_filter" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_case_filter$_apmod_extra_msg" >&5 $as_echo "$enable_case_filter$_apmod_extra_msg" >&6; } if test "$enable_case_filter" != "no"; then case "$enable_case_filter" in static*) MODLIST="$MODLIST case_filter" if test "case_filter" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES case_filter" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},case_filter" fi ;; esac if test -z ""; then objects="mod_case_filter.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_case_filter.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_case_filter_in... " >&6; } # Check whether --enable-case-filter-in was given. if test "${enable_case_filter_in+set}" = set; then : enableval=$enable_case_filter_in; force_case_filter_in=$enableval else enable_case_filter_in=no fi _apmod_extra_msg="" case "$enable_case_filter_in" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_case_filter_in" = "static" -o "$enable_case_filter_in" = "shared"; then : elif test "$enable_case_filter_in" = "yes"; then enable_case_filter_in=$module_default elif test "$enable_case_filter_in" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_case_filter_in=$module_default else enable_case_filter_in=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_case_filter_in" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_case_filter_in=$module_default else enable_case_filter_in=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_case_filter_in" = "all" -o "$enable_case_filter_in" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_case_filter_in=$module_default _apmod_extra_msg=" ($module_selection)" else enable_case_filter_in=no fi elif test "$enable_case_filter_in" = "reallyall" -o "$enable_case_filter_in" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_case_filter_in" != "no" ; then enable_case_filter_in=$module_default _apmod_extra_msg=" ($module_selection)" else enable_case_filter_in=no fi else enable_case_filter_in=no fi if test "$enable_case_filter_in" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_case_filter_in$_apmod_extra_msg" >&5 $as_echo "$enable_case_filter_in$_apmod_extra_msg" >&6; } if test "$enable_case_filter_in" != "no"; then case "$enable_case_filter_in" in static*) MODLIST="$MODLIST case_filter_in" if test "case_filter_in" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES case_filter_in" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},case_filter_in" fi ;; esac if test -z ""; then objects="mod_case_filter_in.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_case_filter_in.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_example_ipc... " >&6; } # Check whether --enable-example-ipc was given. if test "${enable_example_ipc+set}" = set; then : enableval=$enable_example_ipc; force_example_ipc=$enableval else enable_example_ipc=no fi _apmod_extra_msg="" case "$enable_example_ipc" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_example_ipc" = "static" -o "$enable_example_ipc" = "shared"; then : elif test "$enable_example_ipc" = "yes"; then enable_example_ipc=$module_default elif test "$enable_example_ipc" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_example_ipc=$module_default else enable_example_ipc=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_example_ipc" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_example_ipc=$module_default else enable_example_ipc=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_example_ipc" = "all" -o "$enable_example_ipc" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_example_ipc=$module_default _apmod_extra_msg=" ($module_selection)" else enable_example_ipc=no fi elif test "$enable_example_ipc" = "reallyall" -o "$enable_example_ipc" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_example_ipc" != "no" ; then enable_example_ipc=$module_default _apmod_extra_msg=" ($module_selection)" else enable_example_ipc=no fi else enable_example_ipc=no fi if test "$enable_example_ipc" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_example_ipc$_apmod_extra_msg" >&5 $as_echo "$enable_example_ipc$_apmod_extra_msg" >&6; } if test "$enable_example_ipc" != "no"; then case "$enable_example_ipc" in static*) MODLIST="$MODLIST example_ipc" if test "example_ipc" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES example_ipc" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},example_ipc" fi ;; esac if test -z ""; then objects="mod_example_ipc.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_example_ipc.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=experimental modpath_current=modules/experimental modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d experimental || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk echo "DISTCLEAN_TARGETS = modules.mk" >> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=filters modpath_current=modules/filters modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d filters || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_buffer" >&5 $as_echo_n "checking whether to enable mod_buffer... " >&6; } # Check whether --enable-buffer was given. if test "${enable_buffer+set}" = set; then : enableval=$enable_buffer; force_buffer=$enableval else enable_buffer=most fi _apmod_extra_msg="" case "$enable_buffer" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_buffer" = "static" -o "$enable_buffer" = "shared"; then : elif test "$enable_buffer" = "yes"; then enable_buffer=$module_default elif test "$enable_buffer" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_buffer=$module_default else enable_buffer=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_buffer" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_buffer=$module_default else enable_buffer=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_buffer" = "all" -o "$enable_buffer" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_buffer=$module_default _apmod_extra_msg=" ($module_selection)" else enable_buffer=no fi elif test "$enable_buffer" = "reallyall" -o "$enable_buffer" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_buffer" != "no" ; then enable_buffer=$module_default _apmod_extra_msg=" ($module_selection)" else enable_buffer=no fi else enable_buffer=no fi if test "$enable_buffer" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_buffer$_apmod_extra_msg" >&5 $as_echo "$enable_buffer$_apmod_extra_msg" >&6; } if test "$enable_buffer" != "no"; then case "$enable_buffer" in static*) MODLIST="$MODLIST buffer" if test "buffer" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES buffer" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},buffer" fi ;; esac if test -z ""; then objects="mod_buffer.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_buffer.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_data... " >&6; } # Check whether --enable-data was given. if test "${enable_data+set}" = set; then : enableval=$enable_data; force_data=$enableval else enable_data=maybe-all fi _apmod_extra_msg="" case "$enable_data" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_data" = "static" -o "$enable_data" = "shared"; then : elif test "$enable_data" = "yes"; then enable_data=$module_default elif test "$enable_data" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_data=$module_default else enable_data=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_data" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_data=$module_default else enable_data=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_data" = "all" -o "$enable_data" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_data=$module_default _apmod_extra_msg=" ($module_selection)" else enable_data=no fi elif test "$enable_data" = "reallyall" -o "$enable_data" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_data" != "no" ; then enable_data=$module_default _apmod_extra_msg=" ($module_selection)" else enable_data=no fi else enable_data=no fi if test "$enable_data" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_data$_apmod_extra_msg" >&5 $as_echo "$enable_data$_apmod_extra_msg" >&6; } if test "$enable_data" != "no"; then case "$enable_data" in static*) MODLIST="$MODLIST data" if test "data" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES data" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},data" fi ;; esac if test -z ""; then objects="mod_data.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_data.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_ratelimit... " >&6; } # Check whether --enable-ratelimit was given. if test "${enable_ratelimit+set}" = set; then : enableval=$enable_ratelimit; force_ratelimit=$enableval else enable_ratelimit=most fi _apmod_extra_msg="" case "$enable_ratelimit" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_ratelimit" = "static" -o "$enable_ratelimit" = "shared"; then : elif test "$enable_ratelimit" = "yes"; then enable_ratelimit=$module_default elif test "$enable_ratelimit" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_ratelimit=$module_default else enable_ratelimit=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_ratelimit" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_ratelimit=$module_default else enable_ratelimit=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_ratelimit" = "all" -o "$enable_ratelimit" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_ratelimit=$module_default _apmod_extra_msg=" ($module_selection)" else enable_ratelimit=no fi elif test "$enable_ratelimit" = "reallyall" -o "$enable_ratelimit" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_ratelimit" != "no" ; then enable_ratelimit=$module_default _apmod_extra_msg=" ($module_selection)" else enable_ratelimit=no fi else enable_ratelimit=no fi if test "$enable_ratelimit" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_ratelimit$_apmod_extra_msg" >&5 $as_echo "$enable_ratelimit$_apmod_extra_msg" >&6; } if test "$enable_ratelimit" != "no"; then case "$enable_ratelimit" in static*) MODLIST="$MODLIST ratelimit" if test "ratelimit" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES ratelimit" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},ratelimit" fi ;; esac if test -z ""; then objects="mod_ratelimit.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_ratelimit.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_reqtimeout... " >&6; } # Check whether --enable-reqtimeout was given. if test "${enable_reqtimeout+set}" = set; then : enableval=$enable_reqtimeout; force_reqtimeout=$enableval else enable_reqtimeout=yes fi _apmod_extra_msg="" case "$enable_reqtimeout" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_reqtimeout" = "static" -o "$enable_reqtimeout" = "shared"; then : elif test "$enable_reqtimeout" = "yes"; then enable_reqtimeout=$module_default elif test "$enable_reqtimeout" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_reqtimeout=$module_default else enable_reqtimeout=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_reqtimeout" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_reqtimeout=$module_default else enable_reqtimeout=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_reqtimeout" = "all" -o "$enable_reqtimeout" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_reqtimeout=$module_default _apmod_extra_msg=" ($module_selection)" else enable_reqtimeout=no fi elif test "$enable_reqtimeout" = "reallyall" -o "$enable_reqtimeout" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_reqtimeout" != "no" ; then enable_reqtimeout=$module_default _apmod_extra_msg=" ($module_selection)" else enable_reqtimeout=no fi else enable_reqtimeout=no fi if test "$enable_reqtimeout" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_reqtimeout$_apmod_extra_msg" >&5 $as_echo "$enable_reqtimeout$_apmod_extra_msg" >&6; } if test "$enable_reqtimeout" != "no"; then case "$enable_reqtimeout" in static*) MODLIST="$MODLIST reqtimeout" if test "reqtimeout" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES reqtimeout" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},reqtimeout" fi ;; esac if test -z ""; then objects="mod_reqtimeout.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_reqtimeout.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_ext_filter... " >&6; } # Check whether --enable-ext-filter was given. if test "${enable_ext_filter+set}" = set; then : enableval=$enable_ext_filter; force_ext_filter=$enableval else enable_ext_filter=most fi _apmod_extra_msg="" case "$enable_ext_filter" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_ext_filter" = "static" -o "$enable_ext_filter" = "shared"; then : elif test "$enable_ext_filter" = "yes"; then enable_ext_filter=$module_default elif test "$enable_ext_filter" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_ext_filter=$module_default else enable_ext_filter=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_ext_filter" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_ext_filter=$module_default else enable_ext_filter=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_ext_filter" = "all" -o "$enable_ext_filter" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_ext_filter=$module_default _apmod_extra_msg=" ($module_selection)" else enable_ext_filter=no fi elif test "$enable_ext_filter" = "reallyall" -o "$enable_ext_filter" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_ext_filter" != "no" ; then enable_ext_filter=$module_default _apmod_extra_msg=" ($module_selection)" else enable_ext_filter=no fi else enable_ext_filter=no fi if test "$enable_ext_filter" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_ext_filter$_apmod_extra_msg" >&5 $as_echo "$enable_ext_filter$_apmod_extra_msg" >&6; } if test "$enable_ext_filter" != "no"; then case "$enable_ext_filter" in static*) MODLIST="$MODLIST ext_filter" if test "ext_filter" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES ext_filter" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},ext_filter" fi ;; esac if test -z ""; then objects="mod_ext_filter.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_ext_filter.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_request... " >&6; } # Check whether --enable-request was given. if test "${enable_request+set}" = set; then : enableval=$enable_request; force_request=$enableval else enable_request=most fi _apmod_extra_msg="" case "$enable_request" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_request" = "static" -o "$enable_request" = "shared"; then : elif test "$enable_request" = "yes"; then enable_request=$module_default elif test "$enable_request" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_request=$module_default else enable_request=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_request" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_request=$module_default else enable_request=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_request" = "all" -o "$enable_request" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_request=$module_default _apmod_extra_msg=" ($module_selection)" else enable_request=no fi elif test "$enable_request" = "reallyall" -o "$enable_request" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_request" != "no" ; then enable_request=$module_default _apmod_extra_msg=" ($module_selection)" else enable_request=no fi else enable_request=no fi if test "$enable_request" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_request$_apmod_extra_msg" >&5 $as_echo "$enable_request$_apmod_extra_msg" >&6; } if test "$enable_request" != "no"; then case "$enable_request" in static*) MODLIST="$MODLIST request" if test "request" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES request" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},request" fi ;; esac if test -z ""; then objects="mod_request.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_request.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_include... " >&6; } # Check whether --enable-include was given. if test "${enable_include+set}" = set; then : enableval=$enable_include; force_include=$enableval else enable_include=most fi _apmod_extra_msg="" case "$enable_include" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_include" = "static" -o "$enable_include" = "shared"; then : elif test "$enable_include" = "yes"; then enable_include=$module_default elif test "$enable_include" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_include=$module_default else enable_include=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_include" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_include=$module_default else enable_include=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_include" = "all" -o "$enable_include" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_include=$module_default _apmod_extra_msg=" ($module_selection)" else enable_include=no fi elif test "$enable_include" = "reallyall" -o "$enable_include" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_include" != "no" ; then enable_include=$module_default _apmod_extra_msg=" ($module_selection)" else enable_include=no fi else enable_include=no fi if test "$enable_include" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_include$_apmod_extra_msg" >&5 $as_echo "$enable_include$_apmod_extra_msg" >&6; } if test "$enable_include" != "no"; then case "$enable_include" in static*) MODLIST="$MODLIST include" if test "include" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES include" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},include" fi ;; esac if test -z ""; then objects="mod_include.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_include.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_filter... " >&6; } # Check whether --enable-filter was given. if test "${enable_filter+set}" = set; then : enableval=$enable_filter; force_filter=$enableval else enable_filter=yes fi _apmod_extra_msg="" case "$enable_filter" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_filter" = "static" -o "$enable_filter" = "shared"; then : elif test "$enable_filter" = "yes"; then enable_filter=$module_default elif test "$enable_filter" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_filter=$module_default else enable_filter=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_filter" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_filter=$module_default else enable_filter=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_filter" = "all" -o "$enable_filter" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_filter=$module_default _apmod_extra_msg=" ($module_selection)" else enable_filter=no fi elif test "$enable_filter" = "reallyall" -o "$enable_filter" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_filter" != "no" ; then enable_filter=$module_default _apmod_extra_msg=" ($module_selection)" else enable_filter=no fi else enable_filter=no fi if test "$enable_filter" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_filter$_apmod_extra_msg" >&5 $as_echo "$enable_filter$_apmod_extra_msg" >&6; } if test "$enable_filter" != "no"; then case "$enable_filter" in static*) MODLIST="$MODLIST filter" if test "filter" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES filter" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},filter" fi ;; esac if test -z ""; then objects="mod_filter.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_filter.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_reflector... " >&6; } # Check whether --enable-reflector was given. if test "${enable_reflector+set}" = set; then : enableval=$enable_reflector; force_reflector=$enableval else enable_reflector=maybe-all fi _apmod_extra_msg="" case "$enable_reflector" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_reflector" = "static" -o "$enable_reflector" = "shared"; then : elif test "$enable_reflector" = "yes"; then enable_reflector=$module_default elif test "$enable_reflector" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_reflector=$module_default else enable_reflector=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_reflector" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_reflector=$module_default else enable_reflector=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_reflector" = "all" -o "$enable_reflector" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_reflector=$module_default _apmod_extra_msg=" ($module_selection)" else enable_reflector=no fi elif test "$enable_reflector" = "reallyall" -o "$enable_reflector" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_reflector" != "no" ; then enable_reflector=$module_default _apmod_extra_msg=" ($module_selection)" else enable_reflector=no fi else enable_reflector=no fi if test "$enable_reflector" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_reflector$_apmod_extra_msg" >&5 $as_echo "$enable_reflector$_apmod_extra_msg" >&6; } if test "$enable_reflector" != "no"; then case "$enable_reflector" in static*) MODLIST="$MODLIST reflector" if test "reflector" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES reflector" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},reflector" fi ;; esac if test -z ""; then objects="mod_reflector.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_reflector.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_substitute... " >&6; } # Check whether --enable-substitute was given. if test "${enable_substitute+set}" = set; then : enableval=$enable_substitute; force_substitute=$enableval else enable_substitute=most fi _apmod_extra_msg="" case "$enable_substitute" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_substitute" = "static" -o "$enable_substitute" = "shared"; then : elif test "$enable_substitute" = "yes"; then enable_substitute=$module_default elif test "$enable_substitute" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_substitute=$module_default else enable_substitute=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_substitute" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_substitute=$module_default else enable_substitute=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_substitute" = "all" -o "$enable_substitute" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_substitute=$module_default _apmod_extra_msg=" ($module_selection)" else enable_substitute=no fi elif test "$enable_substitute" = "reallyall" -o "$enable_substitute" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_substitute" != "no" ; then enable_substitute=$module_default _apmod_extra_msg=" ($module_selection)" else enable_substitute=no fi else enable_substitute=no fi if test "$enable_substitute" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_substitute$_apmod_extra_msg" >&5 $as_echo "$enable_substitute$_apmod_extra_msg" >&6; } if test "$enable_substitute" != "no"; then case "$enable_substitute" in static*) MODLIST="$MODLIST substitute" if test "substitute" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES substitute" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},substitute" fi ;; esac if test -z ""; then objects="mod_substitute.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_substitute.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_sed... " >&6; } # Check whether --enable-sed was given. if test "${enable_sed+set}" = set; then : enableval=$enable_sed; force_sed=$enableval else enable_sed=most fi _apmod_extra_msg="" case "$enable_sed" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_sed" = "static" -o "$enable_sed" = "shared"; then : elif test "$enable_sed" = "yes"; then enable_sed=$module_default elif test "$enable_sed" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_sed=$module_default else enable_sed=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_sed" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_sed=$module_default else enable_sed=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_sed" = "all" -o "$enable_sed" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_sed=$module_default _apmod_extra_msg=" ($module_selection)" else enable_sed=no fi elif test "$enable_sed" = "reallyall" -o "$enable_sed" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_sed" != "no" ; then enable_sed=$module_default _apmod_extra_msg=" ($module_selection)" else enable_sed=no fi else enable_sed=no fi if test "$enable_sed" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : if test "x$enable_sed" = "xshared"; then # The only symbol which needs to be exported is the module # structure, so ask libtool to hide libsed internals: if test "x$MOD_SED_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_SED_LDADD to \"-export-symbols-regex sed_module\"" MOD_SED_LDADD="-export-symbols-regex sed_module" else apr_addto_bugger="-export-symbols-regex sed_module" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_SED_LDADD; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_SED_LDADD" MOD_SED_LDADD="$MOD_SED_LDADD $i" fi done fi fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_sed" >&5 $as_echo_n "checking whether to enable mod_sed... " >&6; } if test "$enable_sed" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_sed has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_sed$_apmod_extra_msg" >&5 $as_echo "$enable_sed$_apmod_extra_msg" >&6; } if test "$enable_sed" != "no"; then case "$enable_sed" in static*) MODLIST="$MODLIST sed" if test "sed" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES sed" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},sed" fi ;; esac if test -z "$sed_obj"; then objects="mod_sed.lo" else objects="$sed_obj" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_sed.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_charset_lite... " >&6; } # Check whether --enable-charset-lite was given. if test "${enable_charset_lite+set}" = set; then : enableval=$enable_charset_lite; force_charset_lite=$enableval else enable_charset_lite=yes fi _apmod_extra_msg="" case "$enable_charset_lite" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_charset_lite" = "static" -o "$enable_charset_lite" = "shared"; then : elif test "$enable_charset_lite" = "yes"; then enable_charset_lite=$module_default elif test "$enable_charset_lite" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_charset_lite=$module_default else enable_charset_lite=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_charset_lite" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_charset_lite=$module_default else enable_charset_lite=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_charset_lite" = "all" -o "$enable_charset_lite" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_charset_lite=$module_default _apmod_extra_msg=" ($module_selection)" else enable_charset_lite=no fi elif test "$enable_charset_lite" = "reallyall" -o "$enable_charset_lite" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_charset_lite" != "no" ; then enable_charset_lite=$module_default _apmod_extra_msg=" ($module_selection)" else enable_charset_lite=no fi else enable_charset_lite=no fi if test "$enable_charset_lite" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_charset_lite$_apmod_extra_msg" >&5 $as_echo "$enable_charset_lite$_apmod_extra_msg" >&6; } if test "$enable_charset_lite" != "no"; then case "$enable_charset_lite" in static*) MODLIST="$MODLIST charset_lite" if test "charset_lite" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES charset_lite" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},charset_lite" fi ;; esac if test -z ""; then objects="mod_charset_lite.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_charset_lite.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_charset_lite... " >&6; } # Check whether --enable-charset-lite was given. if test "${enable_charset_lite+set}" = set; then : enableval=$enable_charset_lite; force_charset_lite=$enableval else enable_charset_lite=maybe-all fi _apmod_extra_msg="" case "$enable_charset_lite" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_charset_lite" = "static" -o "$enable_charset_lite" = "shared"; then : elif test "$enable_charset_lite" = "yes"; then enable_charset_lite=$module_default elif test "$enable_charset_lite" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_charset_lite=$module_default else enable_charset_lite=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_charset_lite" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_charset_lite=$module_default else enable_charset_lite=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_charset_lite" = "all" -o "$enable_charset_lite" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_charset_lite=$module_default _apmod_extra_msg=" ($module_selection)" else enable_charset_lite=no fi elif test "$enable_charset_lite" = "reallyall" -o "$enable_charset_lite" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_charset_lite" != "no" ; then enable_charset_lite=$module_default _apmod_extra_msg=" ($module_selection)" else enable_charset_lite=no fi else enable_charset_lite=no fi if test "$enable_charset_lite" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_charset_lite$_apmod_extra_msg" >&5 $as_echo "$enable_charset_lite$_apmod_extra_msg" >&6; } if test "$enable_charset_lite" != "no"; then case "$enable_charset_lite" in static*) MODLIST="$MODLIST charset_lite" if test "charset_lite" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES charset_lite" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},charset_lite" fi ;; esac if test -z ""; then objects="mod_charset_lite.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_charset_lite.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_deflate... " >&6; } # Check whether --enable-deflate was given. if test "${enable_deflate+set}" = set; then : enableval=$enable_deflate; force_deflate=$enableval else enable_deflate=most fi _apmod_extra_msg="" case "$enable_deflate" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_deflate" = "static" -o "$enable_deflate" = "shared"; then : elif test "$enable_deflate" = "yes"; then enable_deflate=$module_default elif test "$enable_deflate" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_deflate=$module_default else enable_deflate=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_deflate" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_deflate=$module_default else enable_deflate=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_deflate" = "all" -o "$enable_deflate" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_deflate=$module_default _apmod_extra_msg=" ($module_selection)" else enable_deflate=no fi elif test "$enable_deflate" = "reallyall" -o "$enable_deflate" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_deflate" != "no" ; then enable_deflate=$module_default _apmod_extra_msg=" ($module_selection)" else enable_deflate=no fi else enable_deflate=no fi if test "$enable_deflate" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : # Check whether --with-z was given. if test "${with_z+set}" = set; then : withval=$with_z; if test "x$withval" != "xyes" && test "x$withval" != "x"; then ap_zlib_base="$withval" ap_zlib_with="yes" fi fi if test "x$ap_zlib_base" = "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking for zlib location" >&5 $as_echo_n "checking for zlib location... " >&6; } if ${ap_cv_zlib+:} false; then : $as_echo_n "(cached) " >&6 else for dir in /usr/local /usr ; do if test -d $dir && test -f $dir/include/zlib.h; then ap_cv_zlib=$dir break fi done fi ap_zlib_base=$ap_cv_zlib if test "x$ap_zlib_base" = "x"; then enable_deflate=no { $as_echo "$as_me:${as_lineno-$LINENO}: result: not found" >&5 $as_echo "not found" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_zlib_base" >&5 $as_echo "$ap_zlib_base" >&6; } fi fi if test "$enable_deflate" != "no"; then ap_save_includes=$INCLUDES ap_save_ldflags=$LDFLAGS ap_save_cppflags=$CPPFLAGS ap_zlib_ldflags="" if test "$ap_zlib_base" != "/usr"; then if test "x$INCLUDES" = "x"; then test "x$silent" != "xyes" && echo " setting INCLUDES to \"-I${ap_zlib_base}/include\"" INCLUDES="-I${ap_zlib_base}/include" else apr_addto_bugger="-I${ap_zlib_base}/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $INCLUDES; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to INCLUDES" INCLUDES="$INCLUDES $i" fi done fi if test "x$MOD_INCLUDES" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_INCLUDES to \"-I${ap_zlib_base}/include\"" MOD_INCLUDES="-I${ap_zlib_base}/include" else apr_addto_bugger="-I${ap_zlib_base}/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_INCLUDES; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_INCLUDES" MOD_INCLUDES="$MOD_INCLUDES $i" fi done fi CPPFLAGS="$CPPFLAGS $INCLUDES" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"-L${ap_zlib_base}/lib\"" LDFLAGS="-L${ap_zlib_base}/lib" else apr_addto_bugger="-L${ap_zlib_base}/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$ap_zlib_ldflags" = "x"; then test "x$silent" != "xyes" && echo " setting ap_zlib_ldflags to \"-L${ap_zlib_base}/lib\"" ap_zlib_ldflags="-L${ap_zlib_base}/lib" else apr_addto_bugger="-L${ap_zlib_base}/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $ap_zlib_ldflags; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to ap_zlib_ldflags" ap_zlib_ldflags="$ap_zlib_ldflags $i" fi done fi if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$ap_platform_runtime_link_flag${ap_zlib_base}/lib\"" LDFLAGS="$ap_platform_runtime_link_flag${ap_zlib_base}/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag${ap_zlib_base}/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$ap_zlib_ldflags" = "x"; then test "x$silent" != "xyes" && echo " setting ap_zlib_ldflags to \"$ap_platform_runtime_link_flag${ap_zlib_base}/lib\"" ap_zlib_ldflags="$ap_platform_runtime_link_flag${ap_zlib_base}/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag${ap_zlib_base}/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $ap_zlib_ldflags; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to ap_zlib_ldflags" ap_zlib_ldflags="$ap_zlib_ldflags $i" fi done fi fi fi if test "x$LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LIBS to \"-lz\"" LIBS="-lz" else apr_addto_bugger="-lz" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LIBS" LIBS="$LIBS $i" fi done fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for zlib library" >&5 $as_echo_n "checking for zlib library... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { int i = Z_OK; ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: result: found" >&5 $as_echo "found" >&6; } if test "x$MOD_DEFLATE_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_DEFLATE_LDADD to \"$ap_zlib_ldflags -lz\"" MOD_DEFLATE_LDADD="$ap_zlib_ldflags -lz" else apr_addto_bugger="$ap_zlib_ldflags -lz" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_DEFLATE_LDADD; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_DEFLATE_LDADD" MOD_DEFLATE_LDADD="$MOD_DEFLATE_LDADD $i" fi done fi else { $as_echo "$as_me:${as_lineno-$LINENO}: result: not found" >&5 $as_echo "not found" >&6; } enable_deflate=no if test "x$ap_zlib_with" = "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: ... Error, zlib was missing or unusable" >&5 $as_echo "$as_me: WARNING: ... Error, zlib was missing or unusable" >&2;} else as_fn_error $? "... Error, zlib was missing or unusable" "$LINENO" 5 fi fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext INCLUDES=$ap_save_includes LDFLAGS=$ap_save_ldflags CPPFLAGS=$ap_save_cppflags if test "x$LIBS" = "x-lz"; then test "x$silent" != "xyes" && echo " nulling LIBS" LIBS="" else apr_new_bugger="" apr_removed=0 for i in $LIBS; do if test "x$i" != "x-lz"; then apr_new_bugger="$apr_new_bugger $i" else apr_removed=1 fi done if test $apr_removed = "1"; then test "x$silent" != "xyes" && echo " removed \"-lz\" from LIBS" LIBS=$apr_new_bugger fi fi fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_deflate" >&5 $as_echo_n "checking whether to enable mod_deflate... " >&6; } if test "$enable_deflate" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_deflate has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_deflate$_apmod_extra_msg" >&5 $as_echo "$enable_deflate$_apmod_extra_msg" >&6; } if test "$enable_deflate" != "no"; then case "$enable_deflate" in static*) MODLIST="$MODLIST deflate" if test "deflate" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES deflate" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},deflate" fi ;; esac if test -z ""; then objects="mod_deflate.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_deflate.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_xml2enc... " >&6; } # Check whether --enable-xml2enc was given. if test "${enable_xml2enc+set}" = set; then : enableval=$enable_xml2enc; force_xml2enc=$enableval else enable_xml2enc=maybe-all fi _apmod_extra_msg="" case "$enable_xml2enc" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_xml2enc" = "static" -o "$enable_xml2enc" = "shared"; then : elif test "$enable_xml2enc" = "yes"; then enable_xml2enc=$module_default elif test "$enable_xml2enc" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_xml2enc=$module_default else enable_xml2enc=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_xml2enc" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_xml2enc=$module_default else enable_xml2enc=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_xml2enc" = "all" -o "$enable_xml2enc" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_xml2enc=$module_default _apmod_extra_msg=" ($module_selection)" else enable_xml2enc=no fi elif test "$enable_xml2enc" = "reallyall" -o "$enable_xml2enc" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_xml2enc" != "no" ; then enable_xml2enc=$module_default _apmod_extra_msg=" ($module_selection)" else enable_xml2enc=no fi else enable_xml2enc=no fi if test "$enable_xml2enc" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : { $as_echo "$as_me:${as_lineno-$LINENO}: checking for libxml2" >&5 $as_echo_n "checking for libxml2... " >&6; } if ${ac_cv_libxml2+:} false; then : $as_echo_n "(cached) " >&6 else # Check whether --with-libxml2 was given. if test "${with_libxml2+set}" = set; then : withval=$with_libxml2; test_paths="${with_libxml2}/include/libxml2 ${with_libxml2}/include ${with_libxml2}" else test_paths="/usr/include/libxml2 /usr/local/include/libxml2 /usr/include /usr/local/include" fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for libxml2" >&5 $as_echo_n "checking for libxml2... " >&6; } xml2_path="" for x in ${test_paths}; do if test -f "${x}/libxml/parser.h"; then xml2_path="${x}" break fi done if test -n "${xml2_path}" ; then ac_cv_libxml2=yes XML2_INCLUDES="${xml2_path}" else ac_cv_libxml2=no fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_libxml2" >&5 $as_echo "$ac_cv_libxml2" >&6; } if test "$ac_cv_libxml2" = "yes" ; then if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"-I${XML2_INCLUDES}\"" MOD_CFLAGS="-I${XML2_INCLUDES}" else apr_addto_bugger="-I${XML2_INCLUDES}" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi if test "x$MOD_XML2ENC_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_XML2ENC_LDADD to \"-lxml2\"" MOD_XML2ENC_LDADD="-lxml2" else apr_addto_bugger="-lxml2" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_XML2ENC_LDADD; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_XML2ENC_LDADD" MOD_XML2ENC_LDADD="$MOD_XML2ENC_LDADD $i" fi done fi else enable_xml2enc=no fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_xml2enc" >&5 $as_echo_n "checking whether to enable mod_xml2enc... " >&6; } if test "$enable_xml2enc" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_xml2enc has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_xml2enc$_apmod_extra_msg" >&5 $as_echo "$enable_xml2enc$_apmod_extra_msg" >&6; } if test "$enable_xml2enc" != "no"; then case "$enable_xml2enc" in static*) MODLIST="$MODLIST xml2enc" if test "xml2enc" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES xml2enc" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},xml2enc" fi ;; esac if test -z ""; then objects="mod_xml2enc.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_xml2enc.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_proxy_html... " >&6; } # Check whether --enable-proxy-html was given. if test "${enable_proxy_html+set}" = set; then : enableval=$enable_proxy_html; force_proxy_html=$enableval else enable_proxy_html=maybe-all fi _apmod_extra_msg="" case "$enable_proxy_html" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy_html" = "static" -o "$enable_proxy_html" = "shared"; then : elif test "$enable_proxy_html" = "yes"; then enable_proxy_html=$module_default elif test "$enable_proxy_html" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_html=$module_default else enable_proxy_html=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_html" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy_html=$module_default else enable_proxy_html=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_html" = "all" -o "$enable_proxy_html" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_html=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_html=no fi elif test "$enable_proxy_html" = "reallyall" -o "$enable_proxy_html" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy_html" != "no" ; then enable_proxy_html=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_html=no fi else enable_proxy_html=no fi if test "$enable_proxy_html" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : { $as_echo "$as_me:${as_lineno-$LINENO}: checking for libxml2" >&5 $as_echo_n "checking for libxml2... " >&6; } if ${ac_cv_libxml2+:} false; then : $as_echo_n "(cached) " >&6 else # Check whether --with-libxml2 was given. if test "${with_libxml2+set}" = set; then : withval=$with_libxml2; test_paths="${with_libxml2}/include/libxml2 ${with_libxml2}/include ${with_libxml2}" else test_paths="/usr/include/libxml2 /usr/local/include/libxml2 /usr/include /usr/local/include" fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for libxml2" >&5 $as_echo_n "checking for libxml2... " >&6; } xml2_path="" for x in ${test_paths}; do if test -f "${x}/libxml/parser.h"; then xml2_path="${x}" break fi done if test -n "${xml2_path}" ; then ac_cv_libxml2=yes XML2_INCLUDES="${xml2_path}" else ac_cv_libxml2=no fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_libxml2" >&5 $as_echo "$ac_cv_libxml2" >&6; } if test "$ac_cv_libxml2" = "yes" ; then if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"-I${XML2_INCLUDES}\"" MOD_CFLAGS="-I${XML2_INCLUDES}" else apr_addto_bugger="-I${XML2_INCLUDES}" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi if test "x$MOD_PROXY_HTML_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_PROXY_HTML_LDADD to \"-lxml2\"" MOD_PROXY_HTML_LDADD="-lxml2" else apr_addto_bugger="-lxml2" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_PROXY_HTML_LDADD; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_PROXY_HTML_LDADD" MOD_PROXY_HTML_LDADD="$MOD_PROXY_HTML_LDADD $i" fi done fi else enable_proxy_html=no fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy_html" >&5 $as_echo_n "checking whether to enable mod_proxy_html... " >&6; } if test "$enable_proxy_html" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_proxy_html has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy_html$_apmod_extra_msg" >&5 $as_echo "$enable_proxy_html$_apmod_extra_msg" >&6; } if test "$enable_proxy_html" != "no"; then case "$enable_proxy_html" in static*) MODLIST="$MODLIST proxy_html" if test "proxy_html" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy_html" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy_html" fi ;; esac if test -z ""; then objects="mod_proxy_html.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy_html.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_brotli... " >&6; } # Check whether --enable-brotli was given. if test "${enable_brotli+set}" = set; then : enableval=$enable_brotli; force_brotli=$enableval else enable_brotli=most fi _apmod_extra_msg="" case "$enable_brotli" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_brotli" = "static" -o "$enable_brotli" = "shared"; then : elif test "$enable_brotli" = "yes"; then enable_brotli=$module_default elif test "$enable_brotli" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_brotli=$module_default else enable_brotli=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_brotli" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_brotli=$module_default else enable_brotli=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_brotli" = "all" -o "$enable_brotli" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_brotli=$module_default _apmod_extra_msg=" ($module_selection)" else enable_brotli=no fi elif test "$enable_brotli" = "reallyall" -o "$enable_brotli" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_brotli" != "no" ; then enable_brotli=$module_default _apmod_extra_msg=" ($module_selection)" else enable_brotli=no fi else enable_brotli=no fi if test "$enable_brotli" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : # Check whether --with-brotli was given. if test "${with_brotli+set}" = set; then : withval=$with_brotli; if test "$withval" != "yes" -a "x$withval" != "x"; then ap_brotli_base="$withval" ap_brotli_with=yes fi fi ap_brotli_found=no if test -n "$ap_brotli_base"; then ap_save_cppflags=$CPPFLAGS if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"-I${ap_brotli_base}/include\"" CPPFLAGS="-I${ap_brotli_base}/include" else apr_addto_bugger="-I${ap_brotli_base}/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for Brotli library >= 0.6.0 via prefix" >&5 $as_echo_n "checking for Brotli library >= 0.6.0 via prefix... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { const uint8_t *o = BrotliEncoderTakeOutput((BrotliEncoderState*)0, (size_t*)0); if (o) return *o; ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } ap_brotli_found=yes ap_brotli_cflags="-I${ap_brotli_base}/include" ap_brotli_libs="-L${ap_brotli_base}/lib -lbrotlienc -lbrotlicommon" else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CPPFLAGS=$ap_save_cppflags else if test -n "$PKGCONFIG"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking for Brotli library >= 0.6.0 via pkg-config" >&5 $as_echo_n "checking for Brotli library >= 0.6.0 via pkg-config... " >&6; } if $PKGCONFIG --exists "libbrotlienc >= 0.6.0"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } ap_brotli_found=yes ap_brotli_cflags=`$PKGCONFIG libbrotlienc --cflags` ap_brotli_libs=`$PKGCONFIG libbrotlienc --libs` else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi fi if test "$ap_brotli_found" = "yes"; then if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"$ap_brotli_cflags\"" MOD_CFLAGS="$ap_brotli_cflags" else apr_addto_bugger="$ap_brotli_cflags" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi if test "x$MOD_BROTLI_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_BROTLI_LDADD to \"$ap_brotli_libs\"" MOD_BROTLI_LDADD="$ap_brotli_libs" else apr_addto_bugger="$ap_brotli_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_BROTLI_LDADD; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_BROTLI_LDADD" MOD_BROTLI_LDADD="$MOD_BROTLI_LDADD $i" fi done fi if test "$enable_brotli" = "shared"; then if test "x$MOD_BROTLI_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_BROTLI_LDADD to \"-export-symbols-regex brotli_module\"" MOD_BROTLI_LDADD="-export-symbols-regex brotli_module" else apr_addto_bugger="-export-symbols-regex brotli_module" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_BROTLI_LDADD; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_BROTLI_LDADD" MOD_BROTLI_LDADD="$MOD_BROTLI_LDADD $i" fi done fi fi else enable_brotli=no if test "$ap_brotli_with" = "yes"; then as_fn_error $? "Brotli library was missing or unusable" "$LINENO" 5 fi fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_brotli" >&5 $as_echo_n "checking whether to enable mod_brotli... " >&6; } if test "$enable_brotli" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_brotli has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_brotli$_apmod_extra_msg" >&5 $as_echo "$enable_brotli$_apmod_extra_msg" >&6; } if test "$enable_brotli" != "no"; then case "$enable_brotli" in static*) MODLIST="$MODLIST brotli" if test "brotli" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES brotli" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},brotli" fi ;; esac if test -z ""; then objects="mod_brotli.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_brotli.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=http modpath_current=modules/http modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d http || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk http_objects="http_core.lo http_protocol.lo http_request.lo http_filters.lo chunk_filter.lo byterange_filter.lo http_etag.lo" if test "$enable_http" = "yes"; then enable_http="static" elif test "$enable_http" = "shared"; then as_fn_error $? "mod_http can not be built as a shared DSO" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_http" >&5 $as_echo_n "checking whether to enable mod_http... " >&6; } # Check whether --enable-http was given. if test "${enable_http+set}" = set; then : enableval=$enable_http; force_http=$enableval else enable_http=static fi _apmod_extra_msg="" case "$enable_http" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_http" = "static" -o "$enable_http" = "shared"; then : elif test "$enable_http" = "yes"; then enable_http=$module_default elif test "$enable_http" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_http=$module_default else enable_http=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_http" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_http=$module_default else enable_http=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_http" = "all" -o "$enable_http" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_http=$module_default _apmod_extra_msg=" ($module_selection)" else enable_http=no fi elif test "$enable_http" = "reallyall" -o "$enable_http" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_http" != "no" ; then enable_http=$module_default _apmod_extra_msg=" ($module_selection)" else enable_http=no fi else enable_http=no fi if test "$enable_http" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_http$_apmod_extra_msg" >&5 $as_echo "$enable_http$_apmod_extra_msg" >&6; } if test "$enable_http" != "no"; then case "$enable_http" in static*) MODLIST="$MODLIST http" if test "http" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES http" if test "static" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},http" fi ;; esac if test -z "$http_objects"; then objects="mod_http.lo" else objects="$http_objects" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_http.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_mime... " >&6; } # Check whether --enable-mime was given. if test "${enable_mime+set}" = set; then : enableval=$enable_mime; force_mime=$enableval else enable_mime=yes fi _apmod_extra_msg="" case "$enable_mime" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_mime" = "static" -o "$enable_mime" = "shared"; then : elif test "$enable_mime" = "yes"; then enable_mime=$module_default elif test "$enable_mime" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_mime=$module_default else enable_mime=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_mime" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_mime=$module_default else enable_mime=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_mime" = "all" -o "$enable_mime" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_mime=$module_default _apmod_extra_msg=" ($module_selection)" else enable_mime=no fi elif test "$enable_mime" = "reallyall" -o "$enable_mime" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_mime" != "no" ; then enable_mime=$module_default _apmod_extra_msg=" ($module_selection)" else enable_mime=no fi else enable_mime=no fi if test "$enable_mime" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_mime$_apmod_extra_msg" >&5 $as_echo "$enable_mime$_apmod_extra_msg" >&6; } if test "$enable_mime" != "no"; then case "$enable_mime" in static*) MODLIST="$MODLIST mime" if test "mime" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES mime" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},mime" fi ;; esac if test -z ""; then objects="mod_mime.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_mime.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=ldap modpath_current=modules/ldap modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d ldap || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk ldap_objects="util_ldap.lo util_ldap_cache.lo util_ldap_cache_mgr.lo" { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_ldap" >&5 $as_echo_n "checking whether to enable mod_ldap... " >&6; } # Check whether --enable-ldap was given. if test "${enable_ldap+set}" = set; then : enableval=$enable_ldap; force_ldap=$enableval else enable_ldap=most fi _apmod_extra_msg="" case "$enable_ldap" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_ldap" = "static" -o "$enable_ldap" = "shared"; then : elif test "$enable_ldap" = "yes"; then enable_ldap=$module_default elif test "$enable_ldap" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_ldap=$module_default else enable_ldap=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_ldap" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_ldap=$module_default else enable_ldap=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_ldap" = "all" -o "$enable_ldap" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_ldap=$module_default _apmod_extra_msg=" ($module_selection)" else enable_ldap=no fi elif test "$enable_ldap" = "reallyall" -o "$enable_ldap" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_ldap" != "no" ; then enable_ldap=$module_default _apmod_extra_msg=" ($module_selection)" else enable_ldap=no fi else enable_ldap=no fi if test "$enable_ldap" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ldap support in apr/apr-util" >&5 $as_echo_n "checking for ldap support in apr/apr-util... " >&6; } if ${ac_cv_APR_HAS_LDAP+:} false; then : $as_echo_n "(cached) " >&6 else apache_old_cppflags="$CPPFLAGS" CPPFLAGS="$CPPFLAGS $INCLUDES" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #if APR_HAS_LDAP YES_IS_DEFINED #endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "YES_IS_DEFINED" >/dev/null 2>&1; then : ac_cv_APR_HAS_LDAP=yes else ac_cv_APR_HAS_LDAP=no fi rm -f conftest* CPPFLAGS="$apache_old_cppflags" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_APR_HAS_LDAP" >&5 $as_echo "$ac_cv_APR_HAS_LDAP" >&6; } if test "$ac_cv_APR_HAS_LDAP" = "yes" ; then if test -z "$apu_config" ; then LDAP_LIBS="`$apr_config --ldap-libs`" else LDAP_LIBS="`$apu_config --ldap-libs`" fi if test "x$MOD_LDAP_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDAP_LDADD to \"$LDAP_LIBS\"" MOD_LDAP_LDADD="$LDAP_LIBS" else apr_addto_bugger="$LDAP_LIBS" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDAP_LDADD; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDAP_LDADD" MOD_LDAP_LDADD="$MOD_LDAP_LDADD $i" fi done fi else { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: apr/apr-util is compiled without ldap support" >&5 $as_echo "$as_me: WARNING: apr/apr-util is compiled without ldap support" >&2;} enable_ldap=no fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_ldap" >&5 $as_echo_n "checking whether to enable mod_ldap... " >&6; } if test "$enable_ldap" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_ldap has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_ldap$_apmod_extra_msg" >&5 $as_echo "$enable_ldap$_apmod_extra_msg" >&6; } if test "$enable_ldap" != "no"; then case "$enable_ldap" in static*) MODLIST="$MODLIST ldap" if test "ldap" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES ldap" if test "most " = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},ldap" fi ;; esac if test -z "$ldap_objects"; then objects="mod_ldap.lo" else objects="$ldap_objects" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_ldap.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=loggers modpath_current=modules/loggers modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d loggers || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_log_config" >&5 $as_echo_n "checking whether to enable mod_log_config... " >&6; } # Check whether --enable-log-config was given. if test "${enable_log_config+set}" = set; then : enableval=$enable_log_config; force_log_config=$enableval else enable_log_config=yes fi _apmod_extra_msg="" case "$enable_log_config" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_log_config" = "static" -o "$enable_log_config" = "shared"; then : elif test "$enable_log_config" = "yes"; then enable_log_config=$module_default elif test "$enable_log_config" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_log_config=$module_default else enable_log_config=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_log_config" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_log_config=$module_default else enable_log_config=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_log_config" = "all" -o "$enable_log_config" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_log_config=$module_default _apmod_extra_msg=" ($module_selection)" else enable_log_config=no fi elif test "$enable_log_config" = "reallyall" -o "$enable_log_config" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_log_config" != "no" ; then enable_log_config=$module_default _apmod_extra_msg=" ($module_selection)" else enable_log_config=no fi else enable_log_config=no fi if test "$enable_log_config" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_log_config$_apmod_extra_msg" >&5 $as_echo "$enable_log_config$_apmod_extra_msg" >&6; } if test "$enable_log_config" != "no"; then case "$enable_log_config" in static*) MODLIST="$MODLIST log_config" if test "log_config" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES log_config" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},log_config" fi ;; esac if test -z ""; then objects="mod_log_config.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_log_config.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_log_debug... " >&6; } # Check whether --enable-log-debug was given. if test "${enable_log_debug+set}" = set; then : enableval=$enable_log_debug; force_log_debug=$enableval else enable_log_debug=most fi _apmod_extra_msg="" case "$enable_log_debug" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_log_debug" = "static" -o "$enable_log_debug" = "shared"; then : elif test "$enable_log_debug" = "yes"; then enable_log_debug=$module_default elif test "$enable_log_debug" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_log_debug=$module_default else enable_log_debug=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_log_debug" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_log_debug=$module_default else enable_log_debug=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_log_debug" = "all" -o "$enable_log_debug" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_log_debug=$module_default _apmod_extra_msg=" ($module_selection)" else enable_log_debug=no fi elif test "$enable_log_debug" = "reallyall" -o "$enable_log_debug" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_log_debug" != "no" ; then enable_log_debug=$module_default _apmod_extra_msg=" ($module_selection)" else enable_log_debug=no fi else enable_log_debug=no fi if test "$enable_log_debug" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_log_debug$_apmod_extra_msg" >&5 $as_echo "$enable_log_debug$_apmod_extra_msg" >&6; } if test "$enable_log_debug" != "no"; then case "$enable_log_debug" in static*) MODLIST="$MODLIST log_debug" if test "log_debug" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES log_debug" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},log_debug" fi ;; esac if test -z ""; then objects="mod_log_debug.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_log_debug.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_log_forensic... " >&6; } # Check whether --enable-log-forensic was given. if test "${enable_log_forensic+set}" = set; then : enableval=$enable_log_forensic; force_log_forensic=$enableval else enable_log_forensic=maybe-all fi _apmod_extra_msg="" case "$enable_log_forensic" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_log_forensic" = "static" -o "$enable_log_forensic" = "shared"; then : elif test "$enable_log_forensic" = "yes"; then enable_log_forensic=$module_default elif test "$enable_log_forensic" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_log_forensic=$module_default else enable_log_forensic=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_log_forensic" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_log_forensic=$module_default else enable_log_forensic=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_log_forensic" = "all" -o "$enable_log_forensic" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_log_forensic=$module_default _apmod_extra_msg=" ($module_selection)" else enable_log_forensic=no fi elif test "$enable_log_forensic" = "reallyall" -o "$enable_log_forensic" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_log_forensic" != "no" ; then enable_log_forensic=$module_default _apmod_extra_msg=" ($module_selection)" else enable_log_forensic=no fi else enable_log_forensic=no fi if test "$enable_log_forensic" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_log_forensic$_apmod_extra_msg" >&5 $as_echo "$enable_log_forensic$_apmod_extra_msg" >&6; } if test "$enable_log_forensic" != "no"; then case "$enable_log_forensic" in static*) MODLIST="$MODLIST log_forensic" if test "log_forensic" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES log_forensic" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},log_forensic" fi ;; esac if test -z ""; then objects="mod_log_forensic.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_log_forensic.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_logio... " >&6; } # Check whether --enable-logio was given. if test "${enable_logio+set}" = set; then : enableval=$enable_logio; force_logio=$enableval else enable_logio=most fi _apmod_extra_msg="" case "$enable_logio" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_logio" = "static" -o "$enable_logio" = "shared"; then : elif test "$enable_logio" = "yes"; then enable_logio=$module_default elif test "$enable_logio" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_logio=$module_default else enable_logio=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_logio" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_logio=$module_default else enable_logio=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_logio" = "all" -o "$enable_logio" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_logio=$module_default _apmod_extra_msg=" ($module_selection)" else enable_logio=no fi elif test "$enable_logio" = "reallyall" -o "$enable_logio" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_logio" != "no" ; then enable_logio=$module_default _apmod_extra_msg=" ($module_selection)" else enable_logio=no fi else enable_logio=no fi if test "$enable_logio" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_logio$_apmod_extra_msg" >&5 $as_echo "$enable_logio$_apmod_extra_msg" >&6; } if test "$enable_logio" != "no"; then case "$enable_logio" in static*) MODLIST="$MODLIST logio" if test "logio" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES logio" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},logio" fi ;; esac if test -z ""; then objects="mod_logio.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_logio.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=lua modpath_current=modules/lua modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d lua || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk lua_objects="lua_apr.lo lua_config.lo mod_lua.lo lua_request.lo lua_vmprep.lo lua_dbd.lo lua_passwd.lo" { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_lua" >&5 $as_echo_n "checking whether to enable mod_lua... " >&6; } # Check whether --enable-lua was given. if test "${enable_lua+set}" = set; then : enableval=$enable_lua; force_lua=$enableval else enable_lua=maybe-all fi _apmod_extra_msg="" case "$enable_lua" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_lua" = "static" -o "$enable_lua" = "shared"; then : elif test "$enable_lua" = "yes"; then enable_lua=$module_default elif test "$enable_lua" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_lua=$module_default else enable_lua=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_lua" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_lua=$module_default else enable_lua=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_lua" = "all" -o "$enable_lua" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_lua=$module_default _apmod_extra_msg=" ($module_selection)" else enable_lua=no fi elif test "$enable_lua" = "reallyall" -o "$enable_lua" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_lua" != "no" ; then enable_lua=$module_default _apmod_extra_msg=" ($module_selection)" else enable_lua=no fi else enable_lua=no fi if test "$enable_lua" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : # Check whether --with-lua was given. if test "${with_lua+set}" = set; then : withval=$with_lua; lua_path="$withval" else : fi if test -z "$lua_path"; then test_paths=". /usr/local /usr" else test_paths="${lua_path}" fi if test -n "$PKGCONFIG" -a -z "$lua_path" \ && $PKGCONFIG --atleast-version=5.1 lua; then LUA_LIBS="`$PKGCONFIG --libs lua`" LUA_CFLAGS="`$PKGCONFIG --cflags lua`" LUA_VERSION="`$PKGCONFIG --modversion lua`" { $as_echo "$as_me:${as_lineno-$LINENO}: using Lua $LUA_VERSION configuration from pkg-config" >&5 $as_echo "$as_me: using Lua $LUA_VERSION configuration from pkg-config" >&6;} else { $as_echo "$as_me:${as_lineno-$LINENO}: checking for pow in -lm" >&5 $as_echo_n "checking for pow in -lm... " >&6; } if ${ac_cv_lib_m_pow+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-lm $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char pow (); int main () { return pow (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_m_pow=yes else ac_cv_lib_m_pow=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_m_pow" >&5 $as_echo "$ac_cv_lib_m_pow" >&6; } if test "x$ac_cv_lib_m_pow" = xyes; then : lib_m="-lm" fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for sqrt in -lm" >&5 $as_echo_n "checking for sqrt in -lm... " >&6; } if ${ac_cv_lib_m_sqrt+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-lm $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char sqrt (); int main () { return sqrt (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_m_sqrt=yes else ac_cv_lib_m_sqrt=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_m_sqrt" >&5 $as_echo "$ac_cv_lib_m_sqrt" >&6; } if test "x$ac_cv_lib_m_sqrt" = xyes; then : lib_m="-lm" fi for x in $test_paths ; do { $as_echo "$as_me:${as_lineno-$LINENO}: checking for lua.h in ${x}/include/lua-5.3" >&5 $as_echo_n "checking for lua.h in ${x}/include/lua-5.3... " >&6; } if test -f ${x}/include/lua-5.3/lua.h; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } save_CFLAGS=$CFLAGS save_LDFLAGS=$LDFLAGS CFLAGS="$CFLAGS" LDFLAGS="-L${x}/lib/lua-5.3 $LDFLAGS $lib_m" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for luaL_newstate in -llua-5.3" >&5 $as_echo_n "checking for luaL_newstate in -llua-5.3... " >&6; } if ${ac_cv_lib_lua_5_3_luaL_newstate+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-llua-5.3 $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char luaL_newstate (); int main () { return luaL_newstate (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_lua_5_3_luaL_newstate=yes else ac_cv_lib_lua_5_3_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_5_3_luaL_newstate" >&5 $as_echo "$ac_cv_lib_lua_5_3_luaL_newstate" >&6; } if test "x$ac_cv_lib_lua_5_3_luaL_newstate" = xyes; then : LUA_LIBS="-L${x}/lib/lua-5.3 -llua-5.3 $lib_m" if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LUA_LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LUA_LIBS to \"$ap_platform_runtime_link_flag${x}/lib/lua-5.3\"" LUA_LIBS="$ap_platform_runtime_link_flag${x}/lib/lua-5.3" else apr_addto_bugger="$ap_platform_runtime_link_flag${x}/lib/lua-5.3" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LUA_LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LUA_LIBS" LUA_LIBS="$LUA_LIBS $i" fi done fi fi LUA_CFLAGS="-I${x}/include/lua-5.3" fi CFLAGS=$save_CFLAGS LDFLAGS=$save_LDFLAGS if test -n "${LUA_LIBS}"; then break fi else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for lua.h in ${x}/include/lua5.3" >&5 $as_echo_n "checking for lua.h in ${x}/include/lua5.3... " >&6; } if test -f ${x}/include/lua5.3/lua.h; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } save_CFLAGS=$CFLAGS save_LDFLAGS=$LDFLAGS CFLAGS="$CFLAGS" LDFLAGS="-L${x}/lib $LDFLAGS $lib_m" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for luaL_newstate in -llua5.3" >&5 $as_echo_n "checking for luaL_newstate in -llua5.3... " >&6; } if ${ac_cv_lib_lua5_3_luaL_newstate+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-llua5.3 $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char luaL_newstate (); int main () { return luaL_newstate (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_lua5_3_luaL_newstate=yes else ac_cv_lib_lua5_3_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua5_3_luaL_newstate" >&5 $as_echo "$ac_cv_lib_lua5_3_luaL_newstate" >&6; } if test "x$ac_cv_lib_lua5_3_luaL_newstate" = xyes; then : LUA_LIBS="-L${x}/lib -llua5.3 $lib_m" if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LUA_LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LUA_LIBS to \"$ap_platform_runtime_link_flag${x}/lib\"" LUA_LIBS="$ap_platform_runtime_link_flag${x}/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag${x}/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LUA_LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LUA_LIBS" LUA_LIBS="$LUA_LIBS $i" fi done fi fi LUA_CFLAGS="-I${x}/include/lua5.3" fi CFLAGS=$save_CFLAGS LDFLAGS=$save_LDFLAGS if test -n "${LUA_LIBS}"; then break fi else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for lua.h in ${x}/include/lua53" >&5 $as_echo_n "checking for lua.h in ${x}/include/lua53... " >&6; } if test -f ${x}/include/lua53/lua.h; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } save_CFLAGS=$CFLAGS save_LDFLAGS=$LDFLAGS CFLAGS="$CFLAGS" LDFLAGS="-L${x}/lib/lua53 $LDFLAGS $lib_m" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for luaL_newstate in -llua" >&5 $as_echo_n "checking for luaL_newstate in -llua... " >&6; } if ${ac_cv_lib_lua_luaL_newstate+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-llua $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char luaL_newstate (); int main () { return luaL_newstate (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_lua_luaL_newstate=yes else ac_cv_lib_lua_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_luaL_newstate" >&5 $as_echo "$ac_cv_lib_lua_luaL_newstate" >&6; } if test "x$ac_cv_lib_lua_luaL_newstate" = xyes; then : LUA_LIBS="-L${x}/lib/lua53 -llua $lib_m" if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LUA_LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LUA_LIBS to \"$ap_platform_runtime_link_flag${x}/lib/lua53\"" LUA_LIBS="$ap_platform_runtime_link_flag${x}/lib/lua53" else apr_addto_bugger="$ap_platform_runtime_link_flag${x}/lib/lua53" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LUA_LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LUA_LIBS" LUA_LIBS="$LUA_LIBS $i" fi done fi fi LUA_CFLAGS="-I${x}/include/lua53" fi CFLAGS=$save_CFLAGS LDFLAGS=$save_LDFLAGS if test -n "${LUA_LIBS}"; then break fi else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for lua.h in ${x}/include" >&5 $as_echo_n "checking for lua.h in ${x}/include... " >&6; } if test -f ${x}/include/lua.h; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } save_CFLAGS=$CFLAGS save_LDFLAGS=$LDFLAGS CFLAGS="$CFLAGS" LDFLAGS="-L${x}/lib $LDFLAGS $lib_m" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for luaL_newstate in -llua" >&5 $as_echo_n "checking for luaL_newstate in -llua... " >&6; } if ${ac_cv_lib_lua_luaL_newstate+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-llua $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char luaL_newstate (); int main () { return luaL_newstate (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_lua_luaL_newstate=yes else ac_cv_lib_lua_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_luaL_newstate" >&5 $as_echo "$ac_cv_lib_lua_luaL_newstate" >&6; } if test "x$ac_cv_lib_lua_luaL_newstate" = xyes; then : LUA_LIBS="-L${x}/lib -llua $lib_m" if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LUA_LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LUA_LIBS to \"$ap_platform_runtime_link_flag${x}/lib\"" LUA_LIBS="$ap_platform_runtime_link_flag${x}/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag${x}/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LUA_LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LUA_LIBS" LUA_LIBS="$LUA_LIBS $i" fi done fi fi LUA_CFLAGS="-I${x}/include" fi CFLAGS=$save_CFLAGS LDFLAGS=$save_LDFLAGS if test -n "${LUA_LIBS}"; then break fi else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for lua.h in ${x}/include/lua-5.2" >&5 $as_echo_n "checking for lua.h in ${x}/include/lua-5.2... " >&6; } if test -f ${x}/include/lua-5.2/lua.h; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } save_CFLAGS=$CFLAGS save_LDFLAGS=$LDFLAGS CFLAGS="$CFLAGS" LDFLAGS="-L${x}/lib/lua-5.2 $LDFLAGS $lib_m" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for luaL_newstate in -llua-5.2" >&5 $as_echo_n "checking for luaL_newstate in -llua-5.2... " >&6; } if ${ac_cv_lib_lua_5_2_luaL_newstate+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-llua-5.2 $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char luaL_newstate (); int main () { return luaL_newstate (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_lua_5_2_luaL_newstate=yes else ac_cv_lib_lua_5_2_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_5_2_luaL_newstate" >&5 $as_echo "$ac_cv_lib_lua_5_2_luaL_newstate" >&6; } if test "x$ac_cv_lib_lua_5_2_luaL_newstate" = xyes; then : LUA_LIBS="-L${x}/lib/lua-5.2 -llua-5.2 $lib_m" if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LUA_LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LUA_LIBS to \"$ap_platform_runtime_link_flag${x}/lib/lua-5.2\"" LUA_LIBS="$ap_platform_runtime_link_flag${x}/lib/lua-5.2" else apr_addto_bugger="$ap_platform_runtime_link_flag${x}/lib/lua-5.2" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LUA_LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LUA_LIBS" LUA_LIBS="$LUA_LIBS $i" fi done fi fi LUA_CFLAGS="-I${x}/include/lua-5.2" fi CFLAGS=$save_CFLAGS LDFLAGS=$save_LDFLAGS if test -n "${LUA_LIBS}"; then break fi else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for lua.h in ${x}/include/lua5.2" >&5 $as_echo_n "checking for lua.h in ${x}/include/lua5.2... " >&6; } if test -f ${x}/include/lua5.2/lua.h; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } save_CFLAGS=$CFLAGS save_LDFLAGS=$LDFLAGS CFLAGS="$CFLAGS" LDFLAGS="-L${x}/lib $LDFLAGS $lib_m" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for luaL_newstate in -llua5.2" >&5 $as_echo_n "checking for luaL_newstate in -llua5.2... " >&6; } if ${ac_cv_lib_lua5_2_luaL_newstate+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-llua5.2 $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char luaL_newstate (); int main () { return luaL_newstate (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_lua5_2_luaL_newstate=yes else ac_cv_lib_lua5_2_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua5_2_luaL_newstate" >&5 $as_echo "$ac_cv_lib_lua5_2_luaL_newstate" >&6; } if test "x$ac_cv_lib_lua5_2_luaL_newstate" = xyes; then : LUA_LIBS="-L${x}/lib -llua5.2 $lib_m" if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LUA_LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LUA_LIBS to \"$ap_platform_runtime_link_flag${x}/lib\"" LUA_LIBS="$ap_platform_runtime_link_flag${x}/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag${x}/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LUA_LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LUA_LIBS" LUA_LIBS="$LUA_LIBS $i" fi done fi fi LUA_CFLAGS="-I${x}/include/lua5.2" fi CFLAGS=$save_CFLAGS LDFLAGS=$save_LDFLAGS if test -n "${LUA_LIBS}"; then break fi else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for lua.h in ${x}/include/lua52" >&5 $as_echo_n "checking for lua.h in ${x}/include/lua52... " >&6; } if test -f ${x}/include/lua52/lua.h; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } save_CFLAGS=$CFLAGS save_LDFLAGS=$LDFLAGS CFLAGS="$CFLAGS" LDFLAGS="-L${x}/lib/lua52 $LDFLAGS $lib_m" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for luaL_newstate in -llua" >&5 $as_echo_n "checking for luaL_newstate in -llua... " >&6; } if ${ac_cv_lib_lua_luaL_newstate+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-llua $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char luaL_newstate (); int main () { return luaL_newstate (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_lua_luaL_newstate=yes else ac_cv_lib_lua_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_luaL_newstate" >&5 $as_echo "$ac_cv_lib_lua_luaL_newstate" >&6; } if test "x$ac_cv_lib_lua_luaL_newstate" = xyes; then : LUA_LIBS="-L${x}/lib/lua52 -llua $lib_m" if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LUA_LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LUA_LIBS to \"$ap_platform_runtime_link_flag${x}/lib/lua52\"" LUA_LIBS="$ap_platform_runtime_link_flag${x}/lib/lua52" else apr_addto_bugger="$ap_platform_runtime_link_flag${x}/lib/lua52" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LUA_LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LUA_LIBS" LUA_LIBS="$LUA_LIBS $i" fi done fi fi LUA_CFLAGS="-I${x}/include/lua52" fi CFLAGS=$save_CFLAGS LDFLAGS=$save_LDFLAGS if test -n "${LUA_LIBS}"; then break fi else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for lua.h in ${x}/include/lua-5.1" >&5 $as_echo_n "checking for lua.h in ${x}/include/lua-5.1... " >&6; } if test -f ${x}/include/lua-5.1/lua.h; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } save_CFLAGS=$CFLAGS save_LDFLAGS=$LDFLAGS CFLAGS="$CFLAGS" LDFLAGS="-L${x}/lib/lua-5.1 $LDFLAGS $lib_m" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for luaL_newstate in -llua-5.1" >&5 $as_echo_n "checking for luaL_newstate in -llua-5.1... " >&6; } if ${ac_cv_lib_lua_5_1_luaL_newstate+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-llua-5.1 $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char luaL_newstate (); int main () { return luaL_newstate (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_lua_5_1_luaL_newstate=yes else ac_cv_lib_lua_5_1_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_5_1_luaL_newstate" >&5 $as_echo "$ac_cv_lib_lua_5_1_luaL_newstate" >&6; } if test "x$ac_cv_lib_lua_5_1_luaL_newstate" = xyes; then : LUA_LIBS="-L${x}/lib/lua-5.1 -llua-5.1 $lib_m" if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LUA_LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LUA_LIBS to \"$ap_platform_runtime_link_flag${x}/lib/lua-5.1\"" LUA_LIBS="$ap_platform_runtime_link_flag${x}/lib/lua-5.1" else apr_addto_bugger="$ap_platform_runtime_link_flag${x}/lib/lua-5.1" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LUA_LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LUA_LIBS" LUA_LIBS="$LUA_LIBS $i" fi done fi fi LUA_CFLAGS="-I${x}/include/lua-5.1" fi CFLAGS=$save_CFLAGS LDFLAGS=$save_LDFLAGS if test -n "${LUA_LIBS}"; then break fi else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for lua.h in ${x}/include/lua5.1" >&5 $as_echo_n "checking for lua.h in ${x}/include/lua5.1... " >&6; } if test -f ${x}/include/lua5.1/lua.h; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } save_CFLAGS=$CFLAGS save_LDFLAGS=$LDFLAGS CFLAGS="$CFLAGS" LDFLAGS="-L${x}/lib $LDFLAGS $lib_m" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for luaL_newstate in -llua5.1" >&5 $as_echo_n "checking for luaL_newstate in -llua5.1... " >&6; } if ${ac_cv_lib_lua5_1_luaL_newstate+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-llua5.1 $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char luaL_newstate (); int main () { return luaL_newstate (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_lua5_1_luaL_newstate=yes else ac_cv_lib_lua5_1_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua5_1_luaL_newstate" >&5 $as_echo "$ac_cv_lib_lua5_1_luaL_newstate" >&6; } if test "x$ac_cv_lib_lua5_1_luaL_newstate" = xyes; then : LUA_LIBS="-L${x}/lib -llua5.1 $lib_m" if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LUA_LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LUA_LIBS to \"$ap_platform_runtime_link_flag${x}/lib\"" LUA_LIBS="$ap_platform_runtime_link_flag${x}/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag${x}/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LUA_LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LUA_LIBS" LUA_LIBS="$LUA_LIBS $i" fi done fi fi LUA_CFLAGS="-I${x}/include/lua5.1" fi CFLAGS=$save_CFLAGS LDFLAGS=$save_LDFLAGS if test -n "${LUA_LIBS}"; then break fi else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for lua.h in ${x}/include/lua51" >&5 $as_echo_n "checking for lua.h in ${x}/include/lua51... " >&6; } if test -f ${x}/include/lua51/lua.h; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } save_CFLAGS=$CFLAGS save_LDFLAGS=$LDFLAGS CFLAGS="$CFLAGS" LDFLAGS="-L${x}/lib/lua51 $LDFLAGS $lib_m" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for luaL_newstate in -llua" >&5 $as_echo_n "checking for luaL_newstate in -llua... " >&6; } if ${ac_cv_lib_lua_luaL_newstate+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-llua $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char luaL_newstate (); int main () { return luaL_newstate (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_lua_luaL_newstate=yes else ac_cv_lib_lua_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_luaL_newstate" >&5 $as_echo "$ac_cv_lib_lua_luaL_newstate" >&6; } if test "x$ac_cv_lib_lua_luaL_newstate" = xyes; then : LUA_LIBS="-L${x}/lib/lua51 -llua $lib_m" if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LUA_LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LUA_LIBS to \"$ap_platform_runtime_link_flag${x}/lib/lua51\"" LUA_LIBS="$ap_platform_runtime_link_flag${x}/lib/lua51" else apr_addto_bugger="$ap_platform_runtime_link_flag${x}/lib/lua51" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LUA_LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LUA_LIBS" LUA_LIBS="$LUA_LIBS $i" fi done fi fi LUA_CFLAGS="-I${x}/include/lua51" fi CFLAGS=$save_CFLAGS LDFLAGS=$save_LDFLAGS if test -n "${LUA_LIBS}"; then break fi else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi done fi if test -z "${LUA_LIBS}"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: *** Lua 5.3 5.2 or 5.1 library not found." >&5 $as_echo "$as_me: WARNING: *** Lua 5.3 5.2 or 5.1 library not found." >&2;} enable_lua="no" if test -z "${lua_path}"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Lua 5.3 5.2 or 5.1 library is required" >&5 $as_echo "$as_me: WARNING: Lua 5.3 5.2 or 5.1 library is required" >&2;} else as_fn_error $? "Lua 5.3 5.2 or 5.1 library is required" "$LINENO" 5 fi else { $as_echo "$as_me:${as_lineno-$LINENO}: using '${LUA_LIBS}' for Lua Library" >&5 $as_echo "$as_me: using '${LUA_LIBS}' for Lua Library" >&6;} # Check whether --enable-luajit was given. if test "${enable_luajit+set}" = set; then : enableval=$enable_luajit; if test "$enableval" = "yes"; then if test "x$MOD_CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CPPFLAGS to \""-DAP_ENABLE_LUAJIT"\"" MOD_CPPFLAGS=""-DAP_ENABLE_LUAJIT"" else apr_addto_bugger=""-DAP_ENABLE_LUAJIT"" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CPPFLAGS" MOD_CPPFLAGS="$MOD_CPPFLAGS $i" fi done fi fi fi fi if test "x$enable_lua" != "xno" ; then if test "x$MOD_INCLUDES" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_INCLUDES to \"$LUA_CFLAGS\"" MOD_INCLUDES="$LUA_CFLAGS" else apr_addto_bugger="$LUA_CFLAGS" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_INCLUDES; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_INCLUDES" MOD_INCLUDES="$MOD_INCLUDES $i" fi done fi if test "x$MOD_LUA_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LUA_LDADD to \"$LUA_LIBS $CRYPT_LIBS\"" MOD_LUA_LDADD="$LUA_LIBS $CRYPT_LIBS" else apr_addto_bugger="$LUA_LIBS $CRYPT_LIBS" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LUA_LDADD; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LUA_LDADD" MOD_LUA_LDADD="$MOD_LUA_LDADD $i" fi done fi fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_lua" >&5 $as_echo_n "checking whether to enable mod_lua... " >&6; } if test "$enable_lua" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_lua has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_lua$_apmod_extra_msg" >&5 $as_echo "$enable_lua$_apmod_extra_msg" >&6; } if test "$enable_lua" != "no"; then case "$enable_lua" in static*) MODLIST="$MODLIST lua" if test "lua" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES lua" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},lua" fi ;; esac if test -z "$lua_objects"; then objects="mod_lua.lo" else objects="$lua_objects" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_lua.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=metadata modpath_current=modules/metadata modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d metadata || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_env" >&5 $as_echo_n "checking whether to enable mod_env... " >&6; } # Check whether --enable-env was given. if test "${enable_env+set}" = set; then : enableval=$enable_env; force_env=$enableval else enable_env=yes fi _apmod_extra_msg="" case "$enable_env" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_env" = "static" -o "$enable_env" = "shared"; then : elif test "$enable_env" = "yes"; then enable_env=$module_default elif test "$enable_env" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_env=$module_default else enable_env=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_env" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_env=$module_default else enable_env=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_env" = "all" -o "$enable_env" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_env=$module_default _apmod_extra_msg=" ($module_selection)" else enable_env=no fi elif test "$enable_env" = "reallyall" -o "$enable_env" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_env" != "no" ; then enable_env=$module_default _apmod_extra_msg=" ($module_selection)" else enable_env=no fi else enable_env=no fi if test "$enable_env" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_env$_apmod_extra_msg" >&5 $as_echo "$enable_env$_apmod_extra_msg" >&6; } if test "$enable_env" != "no"; then case "$enable_env" in static*) MODLIST="$MODLIST env" if test "env" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES env" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},env" fi ;; esac if test -z ""; then objects="mod_env.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_env.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_mime_magic... " >&6; } # Check whether --enable-mime-magic was given. if test "${enable_mime_magic+set}" = set; then : enableval=$enable_mime_magic; force_mime_magic=$enableval else enable_mime_magic=maybe-all fi _apmod_extra_msg="" case "$enable_mime_magic" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_mime_magic" = "static" -o "$enable_mime_magic" = "shared"; then : elif test "$enable_mime_magic" = "yes"; then enable_mime_magic=$module_default elif test "$enable_mime_magic" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_mime_magic=$module_default else enable_mime_magic=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_mime_magic" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_mime_magic=$module_default else enable_mime_magic=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_mime_magic" = "all" -o "$enable_mime_magic" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_mime_magic=$module_default _apmod_extra_msg=" ($module_selection)" else enable_mime_magic=no fi elif test "$enable_mime_magic" = "reallyall" -o "$enable_mime_magic" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_mime_magic" != "no" ; then enable_mime_magic=$module_default _apmod_extra_msg=" ($module_selection)" else enable_mime_magic=no fi else enable_mime_magic=no fi if test "$enable_mime_magic" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_mime_magic$_apmod_extra_msg" >&5 $as_echo "$enable_mime_magic$_apmod_extra_msg" >&6; } if test "$enable_mime_magic" != "no"; then case "$enable_mime_magic" in static*) MODLIST="$MODLIST mime_magic" if test "mime_magic" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES mime_magic" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},mime_magic" fi ;; esac if test -z ""; then objects="mod_mime_magic.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_mime_magic.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_cern_meta... " >&6; } # Check whether --enable-cern-meta was given. if test "${enable_cern_meta+set}" = set; then : enableval=$enable_cern_meta; force_cern_meta=$enableval else enable_cern_meta=no fi _apmod_extra_msg="" case "$enable_cern_meta" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_cern_meta" = "static" -o "$enable_cern_meta" = "shared"; then : elif test "$enable_cern_meta" = "yes"; then enable_cern_meta=$module_default elif test "$enable_cern_meta" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cern_meta=$module_default else enable_cern_meta=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cern_meta" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_cern_meta=$module_default else enable_cern_meta=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cern_meta" = "all" -o "$enable_cern_meta" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cern_meta=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cern_meta=no fi elif test "$enable_cern_meta" = "reallyall" -o "$enable_cern_meta" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_cern_meta" != "no" ; then enable_cern_meta=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cern_meta=no fi else enable_cern_meta=no fi if test "$enable_cern_meta" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_cern_meta$_apmod_extra_msg" >&5 $as_echo "$enable_cern_meta$_apmod_extra_msg" >&6; } if test "$enable_cern_meta" != "no"; then case "$enable_cern_meta" in static*) MODLIST="$MODLIST cern_meta" if test "cern_meta" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES cern_meta" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},cern_meta" fi ;; esac if test -z ""; then objects="mod_cern_meta.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_cern_meta.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_expires... " >&6; } # Check whether --enable-expires was given. if test "${enable_expires+set}" = set; then : enableval=$enable_expires; force_expires=$enableval else enable_expires=most fi _apmod_extra_msg="" case "$enable_expires" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_expires" = "static" -o "$enable_expires" = "shared"; then : elif test "$enable_expires" = "yes"; then enable_expires=$module_default elif test "$enable_expires" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_expires=$module_default else enable_expires=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_expires" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_expires=$module_default else enable_expires=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_expires" = "all" -o "$enable_expires" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_expires=$module_default _apmod_extra_msg=" ($module_selection)" else enable_expires=no fi elif test "$enable_expires" = "reallyall" -o "$enable_expires" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_expires" != "no" ; then enable_expires=$module_default _apmod_extra_msg=" ($module_selection)" else enable_expires=no fi else enable_expires=no fi if test "$enable_expires" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_expires$_apmod_extra_msg" >&5 $as_echo "$enable_expires$_apmod_extra_msg" >&6; } if test "$enable_expires" != "no"; then case "$enable_expires" in static*) MODLIST="$MODLIST expires" if test "expires" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES expires" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},expires" fi ;; esac if test -z ""; then objects="mod_expires.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_expires.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_headers... " >&6; } # Check whether --enable-headers was given. if test "${enable_headers+set}" = set; then : enableval=$enable_headers; force_headers=$enableval else enable_headers=yes fi _apmod_extra_msg="" case "$enable_headers" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_headers" = "static" -o "$enable_headers" = "shared"; then : elif test "$enable_headers" = "yes"; then enable_headers=$module_default elif test "$enable_headers" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_headers=$module_default else enable_headers=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_headers" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_headers=$module_default else enable_headers=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_headers" = "all" -o "$enable_headers" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_headers=$module_default _apmod_extra_msg=" ($module_selection)" else enable_headers=no fi elif test "$enable_headers" = "reallyall" -o "$enable_headers" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_headers" != "no" ; then enable_headers=$module_default _apmod_extra_msg=" ($module_selection)" else enable_headers=no fi else enable_headers=no fi if test "$enable_headers" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_headers$_apmod_extra_msg" >&5 $as_echo "$enable_headers$_apmod_extra_msg" >&6; } if test "$enable_headers" != "no"; then case "$enable_headers" in static*) MODLIST="$MODLIST headers" if test "headers" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES headers" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},headers" fi ;; esac if test -z ""; then objects="mod_headers.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_headers.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_ident... " >&6; } # Check whether --enable-ident was given. if test "${enable_ident+set}" = set; then : enableval=$enable_ident; force_ident=$enableval else enable_ident=no fi _apmod_extra_msg="" case "$enable_ident" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_ident" = "static" -o "$enable_ident" = "shared"; then : elif test "$enable_ident" = "yes"; then enable_ident=$module_default elif test "$enable_ident" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_ident=$module_default else enable_ident=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_ident" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_ident=$module_default else enable_ident=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_ident" = "all" -o "$enable_ident" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_ident=$module_default _apmod_extra_msg=" ($module_selection)" else enable_ident=no fi elif test "$enable_ident" = "reallyall" -o "$enable_ident" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_ident" != "no" ; then enable_ident=$module_default _apmod_extra_msg=" ($module_selection)" else enable_ident=no fi else enable_ident=no fi if test "$enable_ident" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_ident$_apmod_extra_msg" >&5 $as_echo "$enable_ident$_apmod_extra_msg" >&6; } if test "$enable_ident" != "no"; then case "$enable_ident" in static*) MODLIST="$MODLIST ident" if test "ident" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES ident" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},ident" fi ;; esac if test -z ""; then objects="mod_ident.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_ident.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_usertrack... " >&6; } # Check whether --enable-usertrack was given. if test "${enable_usertrack+set}" = set; then : enableval=$enable_usertrack; force_usertrack=$enableval else enable_usertrack=maybe-all fi _apmod_extra_msg="" case "$enable_usertrack" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_usertrack" = "static" -o "$enable_usertrack" = "shared"; then : elif test "$enable_usertrack" = "yes"; then enable_usertrack=$module_default elif test "$enable_usertrack" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_usertrack=$module_default else enable_usertrack=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_usertrack" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_usertrack=$module_default else enable_usertrack=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_usertrack" = "all" -o "$enable_usertrack" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_usertrack=$module_default _apmod_extra_msg=" ($module_selection)" else enable_usertrack=no fi elif test "$enable_usertrack" = "reallyall" -o "$enable_usertrack" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_usertrack" != "no" ; then enable_usertrack=$module_default _apmod_extra_msg=" ($module_selection)" else enable_usertrack=no fi else enable_usertrack=no fi if test "$enable_usertrack" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : for ac_header in sys/times.h do : ac_fn_c_check_header_mongrel "$LINENO" "sys/times.h" "ac_cv_header_sys_times_h" "$ac_includes_default" if test "x$ac_cv_header_sys_times_h" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_SYS_TIMES_H 1 _ACEOF fi done for ac_func in times do : ac_fn_c_check_func "$LINENO" "times" "ac_cv_func_times" if test "x$ac_cv_func_times" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_TIMES 1 _ACEOF fi done : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_usertrack" >&5 $as_echo_n "checking whether to enable mod_usertrack... " >&6; } if test "$enable_usertrack" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_usertrack has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_usertrack$_apmod_extra_msg" >&5 $as_echo "$enable_usertrack$_apmod_extra_msg" >&6; } if test "$enable_usertrack" != "no"; then case "$enable_usertrack" in static*) MODLIST="$MODLIST usertrack" if test "usertrack" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES usertrack" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},usertrack" fi ;; esac if test -z ""; then objects="mod_usertrack.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_usertrack.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_unique_id... " >&6; } # Check whether --enable-unique-id was given. if test "${enable_unique_id+set}" = set; then : enableval=$enable_unique_id; force_unique_id=$enableval else enable_unique_id=most fi _apmod_extra_msg="" case "$enable_unique_id" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_unique_id" = "static" -o "$enable_unique_id" = "shared"; then : elif test "$enable_unique_id" = "yes"; then enable_unique_id=$module_default elif test "$enable_unique_id" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_unique_id=$module_default else enable_unique_id=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_unique_id" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_unique_id=$module_default else enable_unique_id=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_unique_id" = "all" -o "$enable_unique_id" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_unique_id=$module_default _apmod_extra_msg=" ($module_selection)" else enable_unique_id=no fi elif test "$enable_unique_id" = "reallyall" -o "$enable_unique_id" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_unique_id" != "no" ; then enable_unique_id=$module_default _apmod_extra_msg=" ($module_selection)" else enable_unique_id=no fi else enable_unique_id=no fi if test "$enable_unique_id" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_unique_id$_apmod_extra_msg" >&5 $as_echo "$enable_unique_id$_apmod_extra_msg" >&6; } if test "$enable_unique_id" != "no"; then case "$enable_unique_id" in static*) MODLIST="$MODLIST unique_id" if test "unique_id" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES unique_id" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},unique_id" fi ;; esac if test -z ""; then objects="mod_unique_id.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_unique_id.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_setenvif... " >&6; } # Check whether --enable-setenvif was given. if test "${enable_setenvif+set}" = set; then : enableval=$enable_setenvif; force_setenvif=$enableval else enable_setenvif=yes fi _apmod_extra_msg="" case "$enable_setenvif" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_setenvif" = "static" -o "$enable_setenvif" = "shared"; then : elif test "$enable_setenvif" = "yes"; then enable_setenvif=$module_default elif test "$enable_setenvif" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_setenvif=$module_default else enable_setenvif=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_setenvif" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_setenvif=$module_default else enable_setenvif=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_setenvif" = "all" -o "$enable_setenvif" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_setenvif=$module_default _apmod_extra_msg=" ($module_selection)" else enable_setenvif=no fi elif test "$enable_setenvif" = "reallyall" -o "$enable_setenvif" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_setenvif" != "no" ; then enable_setenvif=$module_default _apmod_extra_msg=" ($module_selection)" else enable_setenvif=no fi else enable_setenvif=no fi if test "$enable_setenvif" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_setenvif$_apmod_extra_msg" >&5 $as_echo "$enable_setenvif$_apmod_extra_msg" >&6; } if test "$enable_setenvif" != "no"; then case "$enable_setenvif" in static*) MODLIST="$MODLIST setenvif" if test "setenvif" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES setenvif" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},setenvif" fi ;; esac if test -z ""; then objects="mod_setenvif.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_setenvif.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_version... " >&6; } # Check whether --enable-version was given. if test "${enable_version+set}" = set; then : enableval=$enable_version; force_version=$enableval else enable_version=yes fi _apmod_extra_msg="" case "$enable_version" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_version" = "static" -o "$enable_version" = "shared"; then : elif test "$enable_version" = "yes"; then enable_version=$module_default elif test "$enable_version" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_version=$module_default else enable_version=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_version" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_version=$module_default else enable_version=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_version" = "all" -o "$enable_version" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_version=$module_default _apmod_extra_msg=" ($module_selection)" else enable_version=no fi elif test "$enable_version" = "reallyall" -o "$enable_version" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_version" != "no" ; then enable_version=$module_default _apmod_extra_msg=" ($module_selection)" else enable_version=no fi else enable_version=no fi if test "$enable_version" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_version$_apmod_extra_msg" >&5 $as_echo "$enable_version$_apmod_extra_msg" >&6; } if test "$enable_version" != "no"; then case "$enable_version" in static*) MODLIST="$MODLIST version" if test "version" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES version" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},version" fi ;; esac if test -z ""; then objects="mod_version.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_version.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_remoteip... " >&6; } # Check whether --enable-remoteip was given. if test "${enable_remoteip+set}" = set; then : enableval=$enable_remoteip; force_remoteip=$enableval else enable_remoteip=most fi _apmod_extra_msg="" case "$enable_remoteip" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_remoteip" = "static" -o "$enable_remoteip" = "shared"; then : elif test "$enable_remoteip" = "yes"; then enable_remoteip=$module_default elif test "$enable_remoteip" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_remoteip=$module_default else enable_remoteip=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_remoteip" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_remoteip=$module_default else enable_remoteip=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_remoteip" = "all" -o "$enable_remoteip" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_remoteip=$module_default _apmod_extra_msg=" ($module_selection)" else enable_remoteip=no fi elif test "$enable_remoteip" = "reallyall" -o "$enable_remoteip" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_remoteip" != "no" ; then enable_remoteip=$module_default _apmod_extra_msg=" ($module_selection)" else enable_remoteip=no fi else enable_remoteip=no fi if test "$enable_remoteip" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_remoteip$_apmod_extra_msg" >&5 $as_echo "$enable_remoteip$_apmod_extra_msg" >&6; } if test "$enable_remoteip" != "no"; then case "$enable_remoteip" in static*) MODLIST="$MODLIST remoteip" if test "remoteip" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES remoteip" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},remoteip" fi ;; esac if test -z ""; then objects="mod_remoteip.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_remoteip.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=proxy modpath_current=modules/proxy modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d proxy || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk proxy_objs="mod_proxy.lo proxy_util.lo" { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy" >&5 $as_echo_n "checking whether to enable mod_proxy... " >&6; } # Check whether --enable-proxy was given. if test "${enable_proxy+set}" = set; then : enableval=$enable_proxy; force_proxy=$enableval else enable_proxy=most fi _apmod_extra_msg="" case "$enable_proxy" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy" = "static" -o "$enable_proxy" = "shared"; then : elif test "$enable_proxy" = "yes"; then enable_proxy=$module_default elif test "$enable_proxy" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy=$module_default else enable_proxy=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy=$module_default else enable_proxy=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy" = "all" -o "$enable_proxy" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy=no fi elif test "$enable_proxy" = "reallyall" -o "$enable_proxy" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy" != "no" ; then enable_proxy=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy=no fi else enable_proxy=no fi if test "$enable_proxy" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy$_apmod_extra_msg" >&5 $as_echo "$enable_proxy$_apmod_extra_msg" >&6; } if test "$enable_proxy" != "no"; then case "$enable_proxy" in static*) MODLIST="$MODLIST proxy" if test "proxy" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy" fi ;; esac if test -z "$proxy_objs"; then objects="mod_proxy.lo" else objects="$proxy_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_proxy_connect... " >&6; } # Check whether --enable-proxy-connect was given. if test "${enable_proxy_connect+set}" = set; then : enableval=$enable_proxy_connect; force_proxy_connect=$enableval else enable_proxy_connect=most fi _apmod_extra_msg="" case "$enable_proxy_connect" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy_connect" = "static" -o "$enable_proxy_connect" = "shared"; then : elif test "$enable_proxy_connect" = "yes"; then enable_proxy_connect=$module_default elif test "$enable_proxy_connect" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_connect=$module_default else enable_proxy_connect=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_connect" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy_connect=$module_default else enable_proxy_connect=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_connect" = "all" -o "$enable_proxy_connect" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_connect=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_connect=no fi elif test "$enable_proxy_connect" = "reallyall" -o "$enable_proxy_connect" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy_connect" != "no" ; then enable_proxy_connect=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_connect=no fi else enable_proxy_connect=no fi if test "$enable_proxy_connect" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy" = "no" ; then enable_proxy_connect=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy is disabled but required for mod_proxy_connect\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy is disabled but required for mod_proxy_connect\"" >&2;} elif test "$enable_proxy_connect" = "static" && test "$enable_proxy" != "static" ; then enable_proxy_connect=$enable_proxy { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_proxy_connect shared because mod_proxy is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_proxy_connect shared because mod_proxy is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy_connect" >&5 $as_echo_n "checking whether to enable mod_proxy_connect... " >&6; } if test "$enable_proxy_connect" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_proxy_connect has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy_connect$_apmod_extra_msg" >&5 $as_echo "$enable_proxy_connect$_apmod_extra_msg" >&6; } if test "$enable_proxy_connect" != "no"; then case "$enable_proxy_connect" in static*) MODLIST="$MODLIST proxy_connect" if test "proxy_connect" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy_connect" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy_connect" fi ;; esac if test -z "$proxy_connect_objs"; then objects="mod_proxy_connect.lo" else objects="$proxy_connect_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy_connect.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_proxy_ftp... " >&6; } # Check whether --enable-proxy-ftp was given. if test "${enable_proxy_ftp+set}" = set; then : enableval=$enable_proxy_ftp; force_proxy_ftp=$enableval else enable_proxy_ftp=most fi _apmod_extra_msg="" case "$enable_proxy_ftp" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy_ftp" = "static" -o "$enable_proxy_ftp" = "shared"; then : elif test "$enable_proxy_ftp" = "yes"; then enable_proxy_ftp=$module_default elif test "$enable_proxy_ftp" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_ftp=$module_default else enable_proxy_ftp=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_ftp" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy_ftp=$module_default else enable_proxy_ftp=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_ftp" = "all" -o "$enable_proxy_ftp" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_ftp=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_ftp=no fi elif test "$enable_proxy_ftp" = "reallyall" -o "$enable_proxy_ftp" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy_ftp" != "no" ; then enable_proxy_ftp=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_ftp=no fi else enable_proxy_ftp=no fi if test "$enable_proxy_ftp" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy" = "no" ; then enable_proxy_ftp=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy is disabled but required for mod_proxy_ftp\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy is disabled but required for mod_proxy_ftp\"" >&2;} elif test "$enable_proxy_ftp" = "static" && test "$enable_proxy" != "static" ; then enable_proxy_ftp=$enable_proxy { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_proxy_ftp shared because mod_proxy is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_proxy_ftp shared because mod_proxy is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy_ftp" >&5 $as_echo_n "checking whether to enable mod_proxy_ftp... " >&6; } if test "$enable_proxy_ftp" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_proxy_ftp has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy_ftp$_apmod_extra_msg" >&5 $as_echo "$enable_proxy_ftp$_apmod_extra_msg" >&6; } if test "$enable_proxy_ftp" != "no"; then case "$enable_proxy_ftp" in static*) MODLIST="$MODLIST proxy_ftp" if test "proxy_ftp" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy_ftp" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy_ftp" fi ;; esac if test -z "$proxy_ftp_objs"; then objects="mod_proxy_ftp.lo" else objects="$proxy_ftp_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy_ftp.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_proxy_http... " >&6; } # Check whether --enable-proxy-http was given. if test "${enable_proxy_http+set}" = set; then : enableval=$enable_proxy_http; force_proxy_http=$enableval else enable_proxy_http=most fi _apmod_extra_msg="" case "$enable_proxy_http" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy_http" = "static" -o "$enable_proxy_http" = "shared"; then : elif test "$enable_proxy_http" = "yes"; then enable_proxy_http=$module_default elif test "$enable_proxy_http" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_http=$module_default else enable_proxy_http=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_http" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy_http=$module_default else enable_proxy_http=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_http" = "all" -o "$enable_proxy_http" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_http=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_http=no fi elif test "$enable_proxy_http" = "reallyall" -o "$enable_proxy_http" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy_http" != "no" ; then enable_proxy_http=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_http=no fi else enable_proxy_http=no fi if test "$enable_proxy_http" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy" = "no" ; then enable_proxy_http=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy is disabled but required for mod_proxy_http\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy is disabled but required for mod_proxy_http\"" >&2;} elif test "$enable_proxy_http" = "static" && test "$enable_proxy" != "static" ; then enable_proxy_http=$enable_proxy { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_proxy_http shared because mod_proxy is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_proxy_http shared because mod_proxy is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy_http" >&5 $as_echo_n "checking whether to enable mod_proxy_http... " >&6; } if test "$enable_proxy_http" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_proxy_http has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy_http$_apmod_extra_msg" >&5 $as_echo "$enable_proxy_http$_apmod_extra_msg" >&6; } if test "$enable_proxy_http" != "no"; then case "$enable_proxy_http" in static*) MODLIST="$MODLIST proxy_http" if test "proxy_http" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy_http" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy_http" fi ;; esac if test -z "$proxy_http_objs"; then objects="mod_proxy_http.lo" else objects="$proxy_http_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy_http.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_proxy_fcgi... " >&6; } # Check whether --enable-proxy-fcgi was given. if test "${enable_proxy_fcgi+set}" = set; then : enableval=$enable_proxy_fcgi; force_proxy_fcgi=$enableval else enable_proxy_fcgi=most fi _apmod_extra_msg="" case "$enable_proxy_fcgi" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy_fcgi" = "static" -o "$enable_proxy_fcgi" = "shared"; then : elif test "$enable_proxy_fcgi" = "yes"; then enable_proxy_fcgi=$module_default elif test "$enable_proxy_fcgi" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_fcgi=$module_default else enable_proxy_fcgi=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_fcgi" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy_fcgi=$module_default else enable_proxy_fcgi=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_fcgi" = "all" -o "$enable_proxy_fcgi" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_fcgi=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_fcgi=no fi elif test "$enable_proxy_fcgi" = "reallyall" -o "$enable_proxy_fcgi" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy_fcgi" != "no" ; then enable_proxy_fcgi=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_fcgi=no fi else enable_proxy_fcgi=no fi if test "$enable_proxy_fcgi" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy" = "no" ; then enable_proxy_fcgi=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy is disabled but required for mod_proxy_fcgi\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy is disabled but required for mod_proxy_fcgi\"" >&2;} elif test "$enable_proxy_fcgi" = "static" && test "$enable_proxy" != "static" ; then enable_proxy_fcgi=$enable_proxy { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_proxy_fcgi shared because mod_proxy is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_proxy_fcgi shared because mod_proxy is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy_fcgi" >&5 $as_echo_n "checking whether to enable mod_proxy_fcgi... " >&6; } if test "$enable_proxy_fcgi" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_proxy_fcgi has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy_fcgi$_apmod_extra_msg" >&5 $as_echo "$enable_proxy_fcgi$_apmod_extra_msg" >&6; } if test "$enable_proxy_fcgi" != "no"; then case "$enable_proxy_fcgi" in static*) MODLIST="$MODLIST proxy_fcgi" if test "proxy_fcgi" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy_fcgi" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy_fcgi" fi ;; esac if test -z "$proxy_fcgi_objs"; then objects="mod_proxy_fcgi.lo" else objects="$proxy_fcgi_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy_fcgi.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_proxy_scgi... " >&6; } # Check whether --enable-proxy-scgi was given. if test "${enable_proxy_scgi+set}" = set; then : enableval=$enable_proxy_scgi; force_proxy_scgi=$enableval else enable_proxy_scgi=most fi _apmod_extra_msg="" case "$enable_proxy_scgi" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy_scgi" = "static" -o "$enable_proxy_scgi" = "shared"; then : elif test "$enable_proxy_scgi" = "yes"; then enable_proxy_scgi=$module_default elif test "$enable_proxy_scgi" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_scgi=$module_default else enable_proxy_scgi=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_scgi" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy_scgi=$module_default else enable_proxy_scgi=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_scgi" = "all" -o "$enable_proxy_scgi" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_scgi=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_scgi=no fi elif test "$enable_proxy_scgi" = "reallyall" -o "$enable_proxy_scgi" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy_scgi" != "no" ; then enable_proxy_scgi=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_scgi=no fi else enable_proxy_scgi=no fi if test "$enable_proxy_scgi" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy" = "no" ; then enable_proxy_scgi=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy is disabled but required for mod_proxy_scgi\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy is disabled but required for mod_proxy_scgi\"" >&2;} elif test "$enable_proxy_scgi" = "static" && test "$enable_proxy" != "static" ; then enable_proxy_scgi=$enable_proxy { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_proxy_scgi shared because mod_proxy is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_proxy_scgi shared because mod_proxy is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy_scgi" >&5 $as_echo_n "checking whether to enable mod_proxy_scgi... " >&6; } if test "$enable_proxy_scgi" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_proxy_scgi has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy_scgi$_apmod_extra_msg" >&5 $as_echo "$enable_proxy_scgi$_apmod_extra_msg" >&6; } if test "$enable_proxy_scgi" != "no"; then case "$enable_proxy_scgi" in static*) MODLIST="$MODLIST proxy_scgi" if test "proxy_scgi" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy_scgi" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy_scgi" fi ;; esac if test -z "$proxy_scgi_objs"; then objects="mod_proxy_scgi.lo" else objects="$proxy_scgi_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy_scgi.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_proxy_uwsgi... " >&6; } # Check whether --enable-proxy-uwsgi was given. if test "${enable_proxy_uwsgi+set}" = set; then : enableval=$enable_proxy_uwsgi; force_proxy_uwsgi=$enableval else enable_proxy_uwsgi=most fi _apmod_extra_msg="" case "$enable_proxy_uwsgi" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy_uwsgi" = "static" -o "$enable_proxy_uwsgi" = "shared"; then : elif test "$enable_proxy_uwsgi" = "yes"; then enable_proxy_uwsgi=$module_default elif test "$enable_proxy_uwsgi" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_uwsgi=$module_default else enable_proxy_uwsgi=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_uwsgi" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy_uwsgi=$module_default else enable_proxy_uwsgi=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_uwsgi" = "all" -o "$enable_proxy_uwsgi" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_uwsgi=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_uwsgi=no fi elif test "$enable_proxy_uwsgi" = "reallyall" -o "$enable_proxy_uwsgi" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy_uwsgi" != "no" ; then enable_proxy_uwsgi=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_uwsgi=no fi else enable_proxy_uwsgi=no fi if test "$enable_proxy_uwsgi" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy" = "no" ; then enable_proxy_uwsgi=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy is disabled but required for mod_proxy_uwsgi\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy is disabled but required for mod_proxy_uwsgi\"" >&2;} elif test "$enable_proxy_uwsgi" = "static" && test "$enable_proxy" != "static" ; then enable_proxy_uwsgi=$enable_proxy { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_proxy_uwsgi shared because mod_proxy is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_proxy_uwsgi shared because mod_proxy is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy_uwsgi" >&5 $as_echo_n "checking whether to enable mod_proxy_uwsgi... " >&6; } if test "$enable_proxy_uwsgi" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_proxy_uwsgi has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy_uwsgi$_apmod_extra_msg" >&5 $as_echo "$enable_proxy_uwsgi$_apmod_extra_msg" >&6; } if test "$enable_proxy_uwsgi" != "no"; then case "$enable_proxy_uwsgi" in static*) MODLIST="$MODLIST proxy_uwsgi" if test "proxy_uwsgi" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy_uwsgi" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy_uwsgi" fi ;; esac if test -z "$proxy_uwsgi_objs"; then objects="mod_proxy_uwsgi.lo" else objects="$proxy_uwsgi_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy_uwsgi.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_proxy_fdpass... " >&6; } # Check whether --enable-proxy-fdpass was given. if test "${enable_proxy_fdpass+set}" = set; then : enableval=$enable_proxy_fdpass; force_proxy_fdpass=$enableval else enable_proxy_fdpass=most fi _apmod_extra_msg="" case "$enable_proxy_fdpass" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy_fdpass" = "static" -o "$enable_proxy_fdpass" = "shared"; then : elif test "$enable_proxy_fdpass" = "yes"; then enable_proxy_fdpass=$module_default elif test "$enable_proxy_fdpass" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_fdpass=$module_default else enable_proxy_fdpass=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_fdpass" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy_fdpass=$module_default else enable_proxy_fdpass=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_fdpass" = "all" -o "$enable_proxy_fdpass" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_fdpass=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_fdpass=no fi elif test "$enable_proxy_fdpass" = "reallyall" -o "$enable_proxy_fdpass" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy_fdpass" != "no" ; then enable_proxy_fdpass=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_fdpass=no fi else enable_proxy_fdpass=no fi if test "$enable_proxy_fdpass" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy" = "no" ; then enable_proxy_fdpass=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy is disabled but required for mod_proxy_fdpass\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy is disabled but required for mod_proxy_fdpass\"" >&2;} elif test "$enable_proxy_fdpass" = "static" && test "$enable_proxy" != "static" ; then enable_proxy_fdpass=$enable_proxy { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_proxy_fdpass shared because mod_proxy is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_proxy_fdpass shared because mod_proxy is built shared\"" >&2;} else ac_fn_c_check_decl "$LINENO" "CMSG_DATA" "ac_cv_have_decl_CMSG_DATA" " #include #include " if test "x$ac_cv_have_decl_CMSG_DATA" = xyes; then : fi if test $ac_cv_have_decl_CMSG_DATA = "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Your system does not support CMSG_DATA." >&5 $as_echo "$as_me: WARNING: Your system does not support CMSG_DATA." >&2;} enable_proxy_fdpass=no fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy_fdpass" >&5 $as_echo_n "checking whether to enable mod_proxy_fdpass... " >&6; } if test "$enable_proxy_fdpass" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_proxy_fdpass has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy_fdpass$_apmod_extra_msg" >&5 $as_echo "$enable_proxy_fdpass$_apmod_extra_msg" >&6; } if test "$enable_proxy_fdpass" != "no"; then case "$enable_proxy_fdpass" in static*) MODLIST="$MODLIST proxy_fdpass" if test "proxy_fdpass" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy_fdpass" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy_fdpass" fi ;; esac if test -z "$proxy_fdpass_objs"; then objects="mod_proxy_fdpass.lo" else objects="$proxy_fdpass_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy_fdpass.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_proxy_wstunnel... " >&6; } # Check whether --enable-proxy-wstunnel was given. if test "${enable_proxy_wstunnel+set}" = set; then : enableval=$enable_proxy_wstunnel; force_proxy_wstunnel=$enableval else enable_proxy_wstunnel=most fi _apmod_extra_msg="" case "$enable_proxy_wstunnel" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy_wstunnel" = "static" -o "$enable_proxy_wstunnel" = "shared"; then : elif test "$enable_proxy_wstunnel" = "yes"; then enable_proxy_wstunnel=$module_default elif test "$enable_proxy_wstunnel" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_wstunnel=$module_default else enable_proxy_wstunnel=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_wstunnel" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy_wstunnel=$module_default else enable_proxy_wstunnel=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_wstunnel" = "all" -o "$enable_proxy_wstunnel" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_wstunnel=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_wstunnel=no fi elif test "$enable_proxy_wstunnel" = "reallyall" -o "$enable_proxy_wstunnel" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy_wstunnel" != "no" ; then enable_proxy_wstunnel=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_wstunnel=no fi else enable_proxy_wstunnel=no fi if test "$enable_proxy_wstunnel" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy" = "no" ; then enable_proxy_wstunnel=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy is disabled but required for mod_proxy_wstunnel\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy is disabled but required for mod_proxy_wstunnel\"" >&2;} elif test "$enable_proxy_wstunnel" = "static" && test "$enable_proxy" != "static" ; then enable_proxy_wstunnel=$enable_proxy { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_proxy_wstunnel shared because mod_proxy is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_proxy_wstunnel shared because mod_proxy is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy_wstunnel" >&5 $as_echo_n "checking whether to enable mod_proxy_wstunnel... " >&6; } if test "$enable_proxy_wstunnel" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_proxy_wstunnel has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy_wstunnel$_apmod_extra_msg" >&5 $as_echo "$enable_proxy_wstunnel$_apmod_extra_msg" >&6; } if test "$enable_proxy_wstunnel" != "no"; then case "$enable_proxy_wstunnel" in static*) MODLIST="$MODLIST proxy_wstunnel" if test "proxy_wstunnel" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy_wstunnel" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy_wstunnel" fi ;; esac if test -z "$proxy_wstunnel_objs"; then objects="mod_proxy_wstunnel.lo" else objects="$proxy_wstunnel_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy_wstunnel.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_proxy_ajp... " >&6; } # Check whether --enable-proxy-ajp was given. if test "${enable_proxy_ajp+set}" = set; then : enableval=$enable_proxy_ajp; force_proxy_ajp=$enableval else enable_proxy_ajp=most fi _apmod_extra_msg="" case "$enable_proxy_ajp" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy_ajp" = "static" -o "$enable_proxy_ajp" = "shared"; then : elif test "$enable_proxy_ajp" = "yes"; then enable_proxy_ajp=$module_default elif test "$enable_proxy_ajp" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_ajp=$module_default else enable_proxy_ajp=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_ajp" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy_ajp=$module_default else enable_proxy_ajp=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_ajp" = "all" -o "$enable_proxy_ajp" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_ajp=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_ajp=no fi elif test "$enable_proxy_ajp" = "reallyall" -o "$enable_proxy_ajp" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy_ajp" != "no" ; then enable_proxy_ajp=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_ajp=no fi else enable_proxy_ajp=no fi if test "$enable_proxy_ajp" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy" = "no" ; then enable_proxy_ajp=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy is disabled but required for mod_proxy_ajp\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy is disabled but required for mod_proxy_ajp\"" >&2;} elif test "$enable_proxy_ajp" = "static" && test "$enable_proxy" != "static" ; then enable_proxy_ajp=$enable_proxy { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_proxy_ajp shared because mod_proxy is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_proxy_ajp shared because mod_proxy is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy_ajp" >&5 $as_echo_n "checking whether to enable mod_proxy_ajp... " >&6; } if test "$enable_proxy_ajp" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_proxy_ajp has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy_ajp$_apmod_extra_msg" >&5 $as_echo "$enable_proxy_ajp$_apmod_extra_msg" >&6; } if test "$enable_proxy_ajp" != "no"; then case "$enable_proxy_ajp" in static*) MODLIST="$MODLIST proxy_ajp" if test "proxy_ajp" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy_ajp" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy_ajp" fi ;; esac if test -z "$proxy_ajp_objs"; then objects="mod_proxy_ajp.lo" else objects="$proxy_ajp_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy_ajp.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_proxy_balancer... " >&6; } # Check whether --enable-proxy-balancer was given. if test "${enable_proxy_balancer+set}" = set; then : enableval=$enable_proxy_balancer; force_proxy_balancer=$enableval else enable_proxy_balancer=most fi _apmod_extra_msg="" case "$enable_proxy_balancer" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy_balancer" = "static" -o "$enable_proxy_balancer" = "shared"; then : elif test "$enable_proxy_balancer" = "yes"; then enable_proxy_balancer=$module_default elif test "$enable_proxy_balancer" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_balancer=$module_default else enable_proxy_balancer=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_balancer" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy_balancer=$module_default else enable_proxy_balancer=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_balancer" = "all" -o "$enable_proxy_balancer" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_balancer=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_balancer=no fi elif test "$enable_proxy_balancer" = "reallyall" -o "$enable_proxy_balancer" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy_balancer" != "no" ; then enable_proxy_balancer=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_balancer=no fi else enable_proxy_balancer=no fi if test "$enable_proxy_balancer" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy" = "no" ; then enable_proxy_balancer=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy is disabled but required for mod_proxy_balancer\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy is disabled but required for mod_proxy_balancer\"" >&2;} elif test "$enable_proxy_balancer" = "static" && test "$enable_proxy" != "static" ; then enable_proxy_balancer=$enable_proxy { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_proxy_balancer shared because mod_proxy is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_proxy_balancer shared because mod_proxy is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy_balancer" >&5 $as_echo_n "checking whether to enable mod_proxy_balancer... " >&6; } if test "$enable_proxy_balancer" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_proxy_balancer has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy_balancer$_apmod_extra_msg" >&5 $as_echo "$enable_proxy_balancer$_apmod_extra_msg" >&6; } if test "$enable_proxy_balancer" != "no"; then case "$enable_proxy_balancer" in static*) MODLIST="$MODLIST proxy_balancer" if test "proxy_balancer" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy_balancer" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy_balancer" fi ;; esac if test -z "$proxy_balancer_objs"; then objects="mod_proxy_balancer.lo" else objects="$proxy_balancer_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy_balancer.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_proxy_express... " >&6; } # Check whether --enable-proxy-express was given. if test "${enable_proxy_express+set}" = set; then : enableval=$enable_proxy_express; force_proxy_express=$enableval else enable_proxy_express=most fi _apmod_extra_msg="" case "$enable_proxy_express" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy_express" = "static" -o "$enable_proxy_express" = "shared"; then : elif test "$enable_proxy_express" = "yes"; then enable_proxy_express=$module_default elif test "$enable_proxy_express" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_express=$module_default else enable_proxy_express=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_express" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy_express=$module_default else enable_proxy_express=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_express" = "all" -o "$enable_proxy_express" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_express=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_express=no fi elif test "$enable_proxy_express" = "reallyall" -o "$enable_proxy_express" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy_express" != "no" ; then enable_proxy_express=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_express=no fi else enable_proxy_express=no fi if test "$enable_proxy_express" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy" = "no" ; then enable_proxy_express=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy is disabled but required for mod_proxy_express\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy is disabled but required for mod_proxy_express\"" >&2;} elif test "$enable_proxy_express" = "static" && test "$enable_proxy" != "static" ; then enable_proxy_express=$enable_proxy { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_proxy_express shared because mod_proxy is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_proxy_express shared because mod_proxy is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy_express" >&5 $as_echo_n "checking whether to enable mod_proxy_express... " >&6; } if test "$enable_proxy_express" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_proxy_express has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy_express$_apmod_extra_msg" >&5 $as_echo "$enable_proxy_express$_apmod_extra_msg" >&6; } if test "$enable_proxy_express" != "no"; then case "$enable_proxy_express" in static*) MODLIST="$MODLIST proxy_express" if test "proxy_express" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy_express" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy_express" fi ;; esac if test -z ""; then objects="mod_proxy_express.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy_express.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_proxy_hcheck... " >&6; } # Check whether --enable-proxy-hcheck was given. if test "${enable_proxy_hcheck+set}" = set; then : enableval=$enable_proxy_hcheck; force_proxy_hcheck=$enableval else enable_proxy_hcheck=most fi _apmod_extra_msg="" case "$enable_proxy_hcheck" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy_hcheck" = "static" -o "$enable_proxy_hcheck" = "shared"; then : elif test "$enable_proxy_hcheck" = "yes"; then enable_proxy_hcheck=$module_default elif test "$enable_proxy_hcheck" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_hcheck=$module_default else enable_proxy_hcheck=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_hcheck" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy_hcheck=$module_default else enable_proxy_hcheck=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_hcheck" = "all" -o "$enable_proxy_hcheck" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_hcheck=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_hcheck=no fi elif test "$enable_proxy_hcheck" = "reallyall" -o "$enable_proxy_hcheck" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy_hcheck" != "no" ; then enable_proxy_hcheck=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_hcheck=no fi else enable_proxy_hcheck=no fi if test "$enable_proxy_hcheck" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy" = "no" ; then enable_proxy_hcheck=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy is disabled but required for mod_proxy_hcheck\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy is disabled but required for mod_proxy_hcheck\"" >&2;} elif test "$enable_proxy_hcheck" = "static" && test "$enable_proxy" != "static" ; then enable_proxy_hcheck=$enable_proxy { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_proxy_hcheck shared because mod_proxy is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_proxy_hcheck shared because mod_proxy is built shared\"" >&2;} elif test "$enable_watchdog" = "no" ; then enable_proxy_hcheck=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_watchdog is disabled but required for mod_proxy_hcheck\"" >&5 $as_echo "$as_me: WARNING: \"mod_watchdog is disabled but required for mod_proxy_hcheck\"" >&2;} elif test "$enable_proxy_hcheck" = "static" && test "$enable_watchdog" != "static" ; then enable_proxy_hcheck=$enable_watchdog { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_proxy_hcheck shared because mod_watchdog is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_proxy_hcheck shared because mod_watchdog is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy_hcheck" >&5 $as_echo_n "checking whether to enable mod_proxy_hcheck... " >&6; } if test "$enable_proxy_hcheck" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_proxy_hcheck has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy_hcheck$_apmod_extra_msg" >&5 $as_echo "$enable_proxy_hcheck$_apmod_extra_msg" >&6; } if test "$enable_proxy_hcheck" != "no"; then case "$enable_proxy_hcheck" in static*) MODLIST="$MODLIST proxy_hcheck" if test "proxy_hcheck" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy_hcheck" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy_hcheck" fi ;; esac if test -z ""; then objects="mod_proxy_hcheck.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy_hcheck.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" if test -z "$enable_session" ; then session_mods_enable=most else session_mods_enable=$enable_session fi current_dir=session modpath_current=modules/session modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d session || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk session_cookie_objects='mod_session_cookie.lo' session_crypto_objects='mod_session_crypto.lo' session_dbd_objects='mod_session_dbd.lo' case "$host" in *os2*) # OS/2 DLLs must resolve all symbols at build time # and we need some from main session module session_cookie_objects="$session_cookie_objects mod_session.la" session_crypto_objects="$session_crypto_objects mod_session.la" session_dbd_objects="$session_dbd_objects mod_session.la" ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_session" >&5 $as_echo_n "checking whether to enable mod_session... " >&6; } # Check whether --enable-session was given. if test "${enable_session+set}" = set; then : enableval=$enable_session; force_session=$enableval else enable_session=most fi _apmod_extra_msg="" case "$enable_session" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_session" = "static" -o "$enable_session" = "shared"; then : elif test "$enable_session" = "yes"; then enable_session=$module_default elif test "$enable_session" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_session=$module_default else enable_session=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_session" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_session=$module_default else enable_session=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_session" = "all" -o "$enable_session" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_session=$module_default _apmod_extra_msg=" ($module_selection)" else enable_session=no fi elif test "$enable_session" = "reallyall" -o "$enable_session" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_session" != "no" ; then enable_session=$module_default _apmod_extra_msg=" ($module_selection)" else enable_session=no fi else enable_session=no fi if test "$enable_session" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_session$_apmod_extra_msg" >&5 $as_echo "$enable_session$_apmod_extra_msg" >&6; } if test "$enable_session" != "no"; then case "$enable_session" in static*) MODLIST="$MODLIST session" if test "session" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES session" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},session" fi ;; esac if test -z ""; then objects="mod_session.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_session.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_session_cookie... " >&6; } # Check whether --enable-session-cookie was given. if test "${enable_session_cookie+set}" = set; then : enableval=$enable_session_cookie; force_session_cookie=$enableval else enable_session_cookie=$session_mods_enable fi _apmod_extra_msg="" case "$enable_session_cookie" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_session_cookie" = "static" -o "$enable_session_cookie" = "shared"; then : elif test "$enable_session_cookie" = "yes"; then enable_session_cookie=$module_default elif test "$enable_session_cookie" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_session_cookie=$module_default else enable_session_cookie=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_session_cookie" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_session_cookie=$module_default else enable_session_cookie=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_session_cookie" = "all" -o "$enable_session_cookie" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_session_cookie=$module_default _apmod_extra_msg=" ($module_selection)" else enable_session_cookie=no fi elif test "$enable_session_cookie" = "reallyall" -o "$enable_session_cookie" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_session_cookie" != "no" ; then enable_session_cookie=$module_default _apmod_extra_msg=" ($module_selection)" else enable_session_cookie=no fi else enable_session_cookie=no fi if test "$enable_session_cookie" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_session" = "no" ; then enable_session_cookie=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_session is disabled but required for mod_session_cookie\"" >&5 $as_echo "$as_me: WARNING: \"mod_session is disabled but required for mod_session_cookie\"" >&2;} elif test "$enable_session_cookie" = "static" && test "$enable_session" != "static" ; then enable_session_cookie=$enable_session { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_session_cookie shared because mod_session is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_session_cookie shared because mod_session is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_session_cookie" >&5 $as_echo_n "checking whether to enable mod_session_cookie... " >&6; } if test "$enable_session_cookie" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_session_cookie has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_session_cookie$_apmod_extra_msg" >&5 $as_echo "$enable_session_cookie$_apmod_extra_msg" >&6; } if test "$enable_session_cookie" != "no"; then case "$enable_session_cookie" in static*) MODLIST="$MODLIST session_cookie" if test "session_cookie" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES session_cookie" if test "$session_mods_enable" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},session_cookie" fi ;; esac if test -z "$session_cookie_objects"; then objects="mod_session_cookie.lo" else objects="$session_cookie_objects" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_session_cookie.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<conftest.$ac_ext /* end confdefs.h. */ #include int main () { #if APU_HAVE_CRYPTO == 0 #error no crypto support #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ap_HAVE_APR_CRYPTO="yes" else ap_HAVE_APR_CRYPTO="no" fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CPPFLAGS="$saved_CPPFLAGS" if test $ap_HAVE_APR_CRYPTO = "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Your APR does not include SSL/EVP support. To enable it: configure --with-crypto" >&5 $as_echo "$as_me: WARNING: Your APR does not include SSL/EVP support. To enable it: configure --with-crypto" >&2;} if test "$enable_session_crypto" != "" -a "$enable_session_crypto" != "no"; then as_fn_error $? "mod_session_crypto cannot be enabled" "$LINENO" 5 fi session_mods_enable_crypto="no" fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_session_crypto" >&5 $as_echo_n "checking whether to enable mod_session_crypto... " >&6; } # Check whether --enable-session-crypto was given. if test "${enable_session_crypto+set}" = set; then : enableval=$enable_session_crypto; force_session_crypto=$enableval else enable_session_crypto=$session_mods_enable_crypto fi _apmod_extra_msg="" case "$enable_session_crypto" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_session_crypto" = "static" -o "$enable_session_crypto" = "shared"; then : elif test "$enable_session_crypto" = "yes"; then enable_session_crypto=$module_default elif test "$enable_session_crypto" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_session_crypto=$module_default else enable_session_crypto=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_session_crypto" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_session_crypto=$module_default else enable_session_crypto=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_session_crypto" = "all" -o "$enable_session_crypto" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_session_crypto=$module_default _apmod_extra_msg=" ($module_selection)" else enable_session_crypto=no fi elif test "$enable_session_crypto" = "reallyall" -o "$enable_session_crypto" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_session_crypto" != "no" ; then enable_session_crypto=$module_default _apmod_extra_msg=" ($module_selection)" else enable_session_crypto=no fi else enable_session_crypto=no fi if test "$enable_session_crypto" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_session" = "no" ; then enable_session_crypto=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_session is disabled but required for mod_session_crypto\"" >&5 $as_echo "$as_me: WARNING: \"mod_session is disabled but required for mod_session_crypto\"" >&2;} elif test "$enable_session_crypto" = "static" && test "$enable_session" != "static" ; then enable_session_crypto=$enable_session { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_session_crypto shared because mod_session is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_session_crypto shared because mod_session is built shared\"" >&2;} else if test "$session_mods_enable_crypto" = "no" ; then enable_session_crypto=no fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_session_crypto" >&5 $as_echo_n "checking whether to enable mod_session_crypto... " >&6; } if test "$enable_session_crypto" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_session_crypto has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_session_crypto$_apmod_extra_msg" >&5 $as_echo "$enable_session_crypto$_apmod_extra_msg" >&6; } if test "$enable_session_crypto" != "no"; then case "$enable_session_crypto" in static*) MODLIST="$MODLIST session_crypto" if test "session_crypto" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES session_crypto" if test "$session_mods_enable_crypto" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},session_crypto" fi ;; esac if test -z "$session_crypto_objects"; then objects="mod_session_crypto.lo" else objects="$session_crypto_objects" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_session_crypto.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_session_dbd... " >&6; } # Check whether --enable-session-dbd was given. if test "${enable_session_dbd+set}" = set; then : enableval=$enable_session_dbd; force_session_dbd=$enableval else enable_session_dbd=$session_mods_enable fi _apmod_extra_msg="" case "$enable_session_dbd" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_session_dbd" = "static" -o "$enable_session_dbd" = "shared"; then : elif test "$enable_session_dbd" = "yes"; then enable_session_dbd=$module_default elif test "$enable_session_dbd" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_session_dbd=$module_default else enable_session_dbd=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_session_dbd" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_session_dbd=$module_default else enable_session_dbd=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_session_dbd" = "all" -o "$enable_session_dbd" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_session_dbd=$module_default _apmod_extra_msg=" ($module_selection)" else enable_session_dbd=no fi elif test "$enable_session_dbd" = "reallyall" -o "$enable_session_dbd" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_session_dbd" != "no" ; then enable_session_dbd=$module_default _apmod_extra_msg=" ($module_selection)" else enable_session_dbd=no fi else enable_session_dbd=no fi if test "$enable_session_dbd" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_session" = "no" ; then enable_session_dbd=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_session is disabled but required for mod_session_dbd\"" >&5 $as_echo "$as_me: WARNING: \"mod_session is disabled but required for mod_session_dbd\"" >&2;} elif test "$enable_session_dbd" = "static" && test "$enable_session" != "static" ; then enable_session_dbd=$enable_session { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_session_dbd shared because mod_session is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_session_dbd shared because mod_session is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_session_dbd" >&5 $as_echo_n "checking whether to enable mod_session_dbd... " >&6; } if test "$enable_session_dbd" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_session_dbd has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_session_dbd$_apmod_extra_msg" >&5 $as_echo "$enable_session_dbd$_apmod_extra_msg" >&6; } if test "$enable_session_dbd" != "no"; then case "$enable_session_dbd" in static*) MODLIST="$MODLIST session_dbd" if test "session_dbd" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES session_dbd" if test "$session_mods_enable" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},session_dbd" fi ;; esac if test -z "$session_dbd_objects"; then objects="mod_session_dbd.lo" else objects="$session_dbd_objects" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_session_dbd.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=slotmem modpath_current=modules/slotmem modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d slotmem || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_slotmem_shm" >&5 $as_echo_n "checking whether to enable mod_slotmem_shm... " >&6; } # Check whether --enable-slotmem-shm was given. if test "${enable_slotmem_shm+set}" = set; then : enableval=$enable_slotmem_shm; force_slotmem_shm=$enableval else enable_slotmem_shm=most fi _apmod_extra_msg="" case "$enable_slotmem_shm" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_slotmem_shm" = "static" -o "$enable_slotmem_shm" = "shared"; then : elif test "$enable_slotmem_shm" = "yes"; then enable_slotmem_shm=$module_default elif test "$enable_slotmem_shm" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_slotmem_shm=$module_default else enable_slotmem_shm=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_slotmem_shm" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_slotmem_shm=$module_default else enable_slotmem_shm=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_slotmem_shm" = "all" -o "$enable_slotmem_shm" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_slotmem_shm=$module_default _apmod_extra_msg=" ($module_selection)" else enable_slotmem_shm=no fi elif test "$enable_slotmem_shm" = "reallyall" -o "$enable_slotmem_shm" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_slotmem_shm" != "no" ; then enable_slotmem_shm=$module_default _apmod_extra_msg=" ($module_selection)" else enable_slotmem_shm=no fi else enable_slotmem_shm=no fi if test "$enable_slotmem_shm" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_slotmem_shm$_apmod_extra_msg" >&5 $as_echo "$enable_slotmem_shm$_apmod_extra_msg" >&6; } if test "$enable_slotmem_shm" != "no"; then case "$enable_slotmem_shm" in static*) MODLIST="$MODLIST slotmem_shm" if test "slotmem_shm" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES slotmem_shm" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},slotmem_shm" fi ;; esac if test -z ""; then objects="mod_slotmem_shm.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_slotmem_shm.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_slotmem_plain... " >&6; } # Check whether --enable-slotmem-plain was given. if test "${enable_slotmem_plain+set}" = set; then : enableval=$enable_slotmem_plain; force_slotmem_plain=$enableval else enable_slotmem_plain=maybe-all fi _apmod_extra_msg="" case "$enable_slotmem_plain" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_slotmem_plain" = "static" -o "$enable_slotmem_plain" = "shared"; then : elif test "$enable_slotmem_plain" = "yes"; then enable_slotmem_plain=$module_default elif test "$enable_slotmem_plain" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_slotmem_plain=$module_default else enable_slotmem_plain=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_slotmem_plain" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_slotmem_plain=$module_default else enable_slotmem_plain=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_slotmem_plain" = "all" -o "$enable_slotmem_plain" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_slotmem_plain=$module_default _apmod_extra_msg=" ($module_selection)" else enable_slotmem_plain=no fi elif test "$enable_slotmem_plain" = "reallyall" -o "$enable_slotmem_plain" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_slotmem_plain" != "no" ; then enable_slotmem_plain=$module_default _apmod_extra_msg=" ($module_selection)" else enable_slotmem_plain=no fi else enable_slotmem_plain=no fi if test "$enable_slotmem_plain" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_slotmem_plain$_apmod_extra_msg" >&5 $as_echo "$enable_slotmem_plain$_apmod_extra_msg" >&6; } if test "$enable_slotmem_plain" != "no"; then case "$enable_slotmem_plain" in static*) MODLIST="$MODLIST slotmem_plain" if test "slotmem_plain" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES slotmem_plain" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},slotmem_plain" fi ;; esac if test -z ""; then objects="mod_slotmem_plain.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_slotmem_plain.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=ssl modpath_current=modules/ssl modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d ssl || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk ssl_objs="mod_ssl.lo ssl_engine_config.lo ssl_engine_init.lo ssl_engine_io.lo ssl_engine_kernel.lo ssl_engine_log.lo ssl_engine_mutex.lo ssl_engine_pphrase.lo ssl_engine_rand.lo ssl_engine_vars.lo ssl_scache.lo ssl_util_stapling.lo ssl_util.lo ssl_util_ssl.lo ssl_engine_ocsp.lo ssl_util_ocsp.lo " { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_ssl" >&5 $as_echo_n "checking whether to enable mod_ssl... " >&6; } # Check whether --enable-ssl was given. if test "${enable_ssl+set}" = set; then : enableval=$enable_ssl; force_ssl=$enableval else enable_ssl=most fi _apmod_extra_msg="" case "$enable_ssl" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_ssl" = "static" -o "$enable_ssl" = "shared"; then : elif test "$enable_ssl" = "yes"; then enable_ssl=$module_default elif test "$enable_ssl" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_ssl=$module_default else enable_ssl=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_ssl" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_ssl=$module_default else enable_ssl=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_ssl" = "all" -o "$enable_ssl" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_ssl=$module_default _apmod_extra_msg=" ($module_selection)" else enable_ssl=no fi elif test "$enable_ssl" = "reallyall" -o "$enable_ssl" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_ssl" != "no" ; then enable_ssl=$module_default _apmod_extra_msg=" ($module_selection)" else enable_ssl=no fi else enable_ssl=no fi if test "$enable_ssl" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL" >&5 $as_echo_n "checking for OpenSSL... " >&6; } if ${ac_cv_openssl+:} false; then : $as_echo_n "(cached) " >&6 else ac_cv_openssl=no ap_openssl_found="" ap_openssl_base="" ap_openssl_libs="" ap_openssl_mod_cflags="" ap_openssl_mod_ldflags="" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for user-provided OpenSSL base directory" >&5 $as_echo_n "checking for user-provided OpenSSL base directory... " >&6; } # Check whether --with-ssl was given. if test "${with_ssl+set}" = set; then : withval=$with_ssl; if test "x$withval" != "xyes" -a "x$withval" != "x"; then ap_openssl_base="`cd $withval ; pwd`" fi fi if test "x$ap_openssl_base" = "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: none" >&5 $as_echo "none" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_openssl_base" >&5 $as_echo "$ap_openssl_base" >&6; } fi saved_CPPFLAGS="$CPPFLAGS" saved_LIBS="$LIBS" saved_LDFLAGS="$LDFLAGS" if test -n "$PKGCONFIG"; then saved_PKG_CONFIG_PATH="$PKG_CONFIG_PATH" if test "x$ap_openssl_base" != "x" -a \ -f "${ap_openssl_base}/lib/pkgconfig/openssl.pc"; then PKG_CONFIG_PATH="${ap_openssl_base}/lib/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH fi # Check whether --enable-ssl-staticlib-deps was given. if test "${enable_ssl_staticlib_deps+set}" = set; then : enableval=$enable_ssl_staticlib_deps; if test "$enableval" = "yes"; then PKGCONFIG_LIBOPTS="--static" fi fi ap_openssl_libs="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-l --silence-errors openssl`" if test $? -eq 0; then ap_openssl_found="yes" pkglookup="`$PKGCONFIG --cflags-only-I openssl`" if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"$pkglookup\"" CPPFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"$pkglookup\"" MOD_CFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi if test "x$ab_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting ab_CFLAGS to \"$pkglookup\"" ab_CFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $ab_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to ab_CFLAGS" ab_CFLAGS="$ab_CFLAGS $i" fi done fi pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-L openssl`" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$pkglookup\"" LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$pkglookup\"" MOD_LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-other openssl`" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$pkglookup\"" LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$pkglookup\"" MOD_LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi fi PKG_CONFIG_PATH="$saved_PKG_CONFIG_PATH" fi if test "x$ap_openssl_base" != "x" -a "x$ap_openssl_found" = "x"; then if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"-I$ap_openssl_base/include\"" CPPFLAGS="-I$ap_openssl_base/include" else apr_addto_bugger="-I$ap_openssl_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"-I$ap_openssl_base/include\"" MOD_CFLAGS="-I$ap_openssl_base/include" else apr_addto_bugger="-I$ap_openssl_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi if test "x$ab_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting ab_CFLAGS to \"-I$ap_openssl_base/include\"" ab_CFLAGS="-I$ap_openssl_base/include" else apr_addto_bugger="-I$ap_openssl_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $ab_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to ab_CFLAGS" ab_CFLAGS="$ab_CFLAGS $i" fi done fi if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"-L$ap_openssl_base/lib\"" LDFLAGS="-L$ap_openssl_base/lib" else apr_addto_bugger="-L$ap_openssl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"-L$ap_openssl_base/lib\"" MOD_LDFLAGS="-L$ap_openssl_base/lib" else apr_addto_bugger="-L$ap_openssl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$ap_platform_runtime_link_flag$ap_openssl_base/lib\"" LDFLAGS="$ap_platform_runtime_link_flag$ap_openssl_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_openssl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_platform_runtime_link_flag$ap_openssl_base/lib\"" MOD_LDFLAGS="$ap_platform_runtime_link_flag$ap_openssl_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_openssl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL version >= 0.9.8a" >&5 $as_echo_n "checking for OpenSSL version >= 0.9.8a... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { #if !defined(OPENSSL_VERSION_NUMBER) #error "Missing OpenSSL version" #endif #if OPENSSL_VERSION_NUMBER < 0x0090801f #error "Unsupported OpenSSL version " OPENSSL_VERSION_TEXT #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: result: OK" >&5 $as_echo "OK" >&6; } ac_cv_openssl=yes else { $as_echo "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 $as_echo "FAILED" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext if test "x$ac_cv_openssl" = "xyes"; then ap_openssl_libs="${ap_openssl_libs:--lssl -lcrypto} `$apr_config --libs`" if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_openssl_libs\"" MOD_LDFLAGS="$ap_openssl_libs" else apr_addto_bugger="$ap_openssl_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LIBS to \"$ap_openssl_libs\"" LIBS="$ap_openssl_libs" else apr_addto_bugger="$ap_openssl_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LIBS" LIBS="$LIBS $i" fi done fi test "x$silent" != "xyes" && echo " forcing ab_LIBS to \"$MOD_LDFLAGS\"" ab_LIBS="$MOD_LDFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST ab_CFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST ab_LIBS" liberrors="" for ac_header in openssl/engine.h do : ac_fn_c_check_header_mongrel "$LINENO" "openssl/engine.h" "ac_cv_header_openssl_engine_h" "$ac_includes_default" if test "x$ac_cv_header_openssl_engine_h" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_OPENSSL_ENGINE_H 1 _ACEOF fi done for ac_func in SSL_CTX_new do : ac_fn_c_check_func "$LINENO" "SSL_CTX_new" "ac_cv_func_SSL_CTX_new" if test "x$ac_cv_func_SSL_CTX_new" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_SSL_CTX_NEW 1 _ACEOF else liberrors="yes" fi done for ac_func in ENGINE_init ENGINE_load_builtin_engines RAND_egd do : as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh` ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var" if eval test \"x\$"$as_ac_var"\" = x"yes"; then : cat >>confdefs.h <<_ACEOF #define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1 _ACEOF fi done if test "x$liberrors" != "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: OpenSSL libraries are unusable" >&5 $as_echo "$as_me: WARNING: OpenSSL libraries are unusable" >&2;} fi else { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: OpenSSL version is too old" >&5 $as_echo "$as_me: WARNING: OpenSSL version is too old" >&2;} fi CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" ap_openssl_mod_cflags=$MOD_CFLAGS ap_openssl_mod_ldflags=$MOD_LDFLAGS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_openssl" >&5 $as_echo "$ac_cv_openssl" >&6; } if test "x$ac_cv_openssl" = "xyes"; then $as_echo "#define HAVE_OPENSSL 1" >>confdefs.h if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_openssl_mod_ldflags\"" MOD_LDFLAGS="$ap_openssl_mod_ldflags" else apr_addto_bugger="$ap_openssl_mod_ldflags" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"$ap_openssl_mod_cflags\"" MOD_CFLAGS="$ap_openssl_mod_cflags" else apr_addto_bugger="$ap_openssl_mod_cflags" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi fi if test "$ac_cv_openssl" = "yes" ; then if test "x$enable_ssl" = "xshared"; then # The only symbol which needs to be exported is the module # structure, so ask libtool to hide everything else: if test "x$MOD_SSL_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_SSL_LDADD to \"-export-symbols-regex ssl_module\"" MOD_SSL_LDADD="-export-symbols-regex ssl_module" else apr_addto_bugger="-export-symbols-regex ssl_module" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_SSL_LDADD; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_SSL_LDADD" MOD_SSL_LDADD="$MOD_SSL_LDADD $i" fi done fi fi else enable_ssl=no fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_ssl" >&5 $as_echo_n "checking whether to enable mod_ssl... " >&6; } if test "$enable_ssl" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_ssl has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_ssl$_apmod_extra_msg" >&5 $as_echo "$enable_ssl$_apmod_extra_msg" >&6; } if test "$enable_ssl" != "no"; then case "$enable_ssl" in static*) MODLIST="$MODLIST ssl" if test "ssl" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES ssl" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},ssl" fi ;; esac if test -z "$ssl_objs"; then objects="mod_ssl.lo" else objects="$ssl_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_ssl.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=test modpath_current=modules/test modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d test || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_optional_hook_export" >&5 $as_echo_n "checking whether to enable mod_optional_hook_export... " >&6; } # Check whether --enable-optional-hook-export was given. if test "${enable_optional_hook_export+set}" = set; then : enableval=$enable_optional_hook_export; force_optional_hook_export=$enableval else enable_optional_hook_export=no fi _apmod_extra_msg="" case "$enable_optional_hook_export" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_optional_hook_export" = "static" -o "$enable_optional_hook_export" = "shared"; then : elif test "$enable_optional_hook_export" = "yes"; then enable_optional_hook_export=$module_default elif test "$enable_optional_hook_export" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_optional_hook_export=$module_default else enable_optional_hook_export=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_optional_hook_export" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_optional_hook_export=$module_default else enable_optional_hook_export=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_optional_hook_export" = "all" -o "$enable_optional_hook_export" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_optional_hook_export=$module_default _apmod_extra_msg=" ($module_selection)" else enable_optional_hook_export=no fi elif test "$enable_optional_hook_export" = "reallyall" -o "$enable_optional_hook_export" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_optional_hook_export" != "no" ; then enable_optional_hook_export=$module_default _apmod_extra_msg=" ($module_selection)" else enable_optional_hook_export=no fi else enable_optional_hook_export=no fi if test "$enable_optional_hook_export" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_optional_hook_export$_apmod_extra_msg" >&5 $as_echo "$enable_optional_hook_export$_apmod_extra_msg" >&6; } if test "$enable_optional_hook_export" != "no"; then case "$enable_optional_hook_export" in static*) MODLIST="$MODLIST optional_hook_export" if test "optional_hook_export" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES optional_hook_export" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},optional_hook_export" fi ;; esac if test -z ""; then objects="mod_optional_hook_export.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_optional_hook_export.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_optional_hook_import... " >&6; } # Check whether --enable-optional-hook-import was given. if test "${enable_optional_hook_import+set}" = set; then : enableval=$enable_optional_hook_import; force_optional_hook_import=$enableval else enable_optional_hook_import=no fi _apmod_extra_msg="" case "$enable_optional_hook_import" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_optional_hook_import" = "static" -o "$enable_optional_hook_import" = "shared"; then : elif test "$enable_optional_hook_import" = "yes"; then enable_optional_hook_import=$module_default elif test "$enable_optional_hook_import" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_optional_hook_import=$module_default else enable_optional_hook_import=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_optional_hook_import" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_optional_hook_import=$module_default else enable_optional_hook_import=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_optional_hook_import" = "all" -o "$enable_optional_hook_import" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_optional_hook_import=$module_default _apmod_extra_msg=" ($module_selection)" else enable_optional_hook_import=no fi elif test "$enable_optional_hook_import" = "reallyall" -o "$enable_optional_hook_import" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_optional_hook_import" != "no" ; then enable_optional_hook_import=$module_default _apmod_extra_msg=" ($module_selection)" else enable_optional_hook_import=no fi else enable_optional_hook_import=no fi if test "$enable_optional_hook_import" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_optional_hook_import$_apmod_extra_msg" >&5 $as_echo "$enable_optional_hook_import$_apmod_extra_msg" >&6; } if test "$enable_optional_hook_import" != "no"; then case "$enable_optional_hook_import" in static*) MODLIST="$MODLIST optional_hook_import" if test "optional_hook_import" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES optional_hook_import" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},optional_hook_import" fi ;; esac if test -z ""; then objects="mod_optional_hook_import.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_optional_hook_import.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_optional_fn_import... " >&6; } # Check whether --enable-optional-fn-import was given. if test "${enable_optional_fn_import+set}" = set; then : enableval=$enable_optional_fn_import; force_optional_fn_import=$enableval else enable_optional_fn_import=no fi _apmod_extra_msg="" case "$enable_optional_fn_import" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_optional_fn_import" = "static" -o "$enable_optional_fn_import" = "shared"; then : elif test "$enable_optional_fn_import" = "yes"; then enable_optional_fn_import=$module_default elif test "$enable_optional_fn_import" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_optional_fn_import=$module_default else enable_optional_fn_import=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_optional_fn_import" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_optional_fn_import=$module_default else enable_optional_fn_import=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_optional_fn_import" = "all" -o "$enable_optional_fn_import" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_optional_fn_import=$module_default _apmod_extra_msg=" ($module_selection)" else enable_optional_fn_import=no fi elif test "$enable_optional_fn_import" = "reallyall" -o "$enable_optional_fn_import" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_optional_fn_import" != "no" ; then enable_optional_fn_import=$module_default _apmod_extra_msg=" ($module_selection)" else enable_optional_fn_import=no fi else enable_optional_fn_import=no fi if test "$enable_optional_fn_import" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_optional_fn_import$_apmod_extra_msg" >&5 $as_echo "$enable_optional_fn_import$_apmod_extra_msg" >&6; } if test "$enable_optional_fn_import" != "no"; then case "$enable_optional_fn_import" in static*) MODLIST="$MODLIST optional_fn_import" if test "optional_fn_import" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES optional_fn_import" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},optional_fn_import" fi ;; esac if test -z ""; then objects="mod_optional_fn_import.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_optional_fn_import.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_optional_fn_export... " >&6; } # Check whether --enable-optional-fn-export was given. if test "${enable_optional_fn_export+set}" = set; then : enableval=$enable_optional_fn_export; force_optional_fn_export=$enableval else enable_optional_fn_export=no fi _apmod_extra_msg="" case "$enable_optional_fn_export" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_optional_fn_export" = "static" -o "$enable_optional_fn_export" = "shared"; then : elif test "$enable_optional_fn_export" = "yes"; then enable_optional_fn_export=$module_default elif test "$enable_optional_fn_export" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_optional_fn_export=$module_default else enable_optional_fn_export=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_optional_fn_export" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_optional_fn_export=$module_default else enable_optional_fn_export=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_optional_fn_export" = "all" -o "$enable_optional_fn_export" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_optional_fn_export=$module_default _apmod_extra_msg=" ($module_selection)" else enable_optional_fn_export=no fi elif test "$enable_optional_fn_export" = "reallyall" -o "$enable_optional_fn_export" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_optional_fn_export" != "no" ; then enable_optional_fn_export=$module_default _apmod_extra_msg=" ($module_selection)" else enable_optional_fn_export=no fi else enable_optional_fn_export=no fi if test "$enable_optional_fn_export" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_optional_fn_export$_apmod_extra_msg" >&5 $as_echo "$enable_optional_fn_export$_apmod_extra_msg" >&6; } if test "$enable_optional_fn_export" != "no"; then case "$enable_optional_fn_export" in static*) MODLIST="$MODLIST optional_fn_export" if test "optional_fn_export" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES optional_fn_export" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},optional_fn_export" fi ;; esac if test -z ""; then objects="mod_optional_fn_export.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_optional_fn_export.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_dialup... " >&6; } # Check whether --enable-dialup was given. if test "${enable_dialup+set}" = set; then : enableval=$enable_dialup; force_dialup=$enableval else enable_dialup=maybe-all fi _apmod_extra_msg="" case "$enable_dialup" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_dialup" = "static" -o "$enable_dialup" = "shared"; then : elif test "$enable_dialup" = "yes"; then enable_dialup=$module_default elif test "$enable_dialup" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_dialup=$module_default else enable_dialup=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_dialup" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_dialup=$module_default else enable_dialup=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_dialup" = "all" -o "$enable_dialup" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_dialup=$module_default _apmod_extra_msg=" ($module_selection)" else enable_dialup=no fi elif test "$enable_dialup" = "reallyall" -o "$enable_dialup" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_dialup" != "no" ; then enable_dialup=$module_default _apmod_extra_msg=" ($module_selection)" else enable_dialup=no fi else enable_dialup=no fi if test "$enable_dialup" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_dialup$_apmod_extra_msg" >&5 $as_echo "$enable_dialup$_apmod_extra_msg" >&6; } if test "$enable_dialup" != "no"; then case "$enable_dialup" in static*) MODLIST="$MODLIST dialup" if test "dialup" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES dialup" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},dialup" fi ;; esac if test -z ""; then objects="mod_dialup.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_dialup.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for target platform" >&5 $as_echo_n "checking for target platform... " >&6; } case $host in *pc-os2-emx*) OS="os2" OS_DIR=$OS ;; bs2000*) OS="unix" OS_DIR=$OS ;; *cygwin*) OS="cygwin" OS_DIR="unix" ;; *mingw32*) OS="win32" OS_DIR=$OS ;; *) OS="unix" OS_DIR=$OS;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: result: $OS" >&5 $as_echo "$OS" >&6; } APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES os/${OS_DIR}/Makefile" if test "$OS" = "os2" ; then if test "x$CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CFLAGS to \"-DOS2 -O2\"" CFLAGS="-DOS2 -O2" else apr_addto_bugger="-DOS2 -O2" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CFLAGS" CFLAGS="$CFLAGS $i" fi done fi fi if test "$OS" = "unix" ; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking for rlim_t" >&5 $as_echo_n "checking for rlim_t... " >&6; } if ${ac_cv_type_rlim_t+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include #include int main () { rlim_t spoon; ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_type_rlim_t=yes else ac_cv_type_rlim_t=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_type_rlim_t" >&5 $as_echo "$ac_cv_type_rlim_t" >&6; } if test "$ac_cv_type_rlim_t" = "no" ; then $as_echo "#define rlim_t int" >>confdefs.h fi for ac_header in sys/time.h sys/resource.h sys/sem.h sys/ipc.h do : as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh` ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default" if eval test \"x\$"$as_ac_Header"\" = x"yes"; then : cat >>confdefs.h <<_ACEOF #define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1 _ACEOF fi done for ac_func in setsid killpg do : as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh` ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var" if eval test \"x\$"$as_ac_var"\" = x"yes"; then : cat >>confdefs.h <<_ACEOF #define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1 _ACEOF fi done fi for ac_header in bstring.h unistd.h do : as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh` ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default" if eval test \"x\$"$as_ac_Header"\" = x"yes"; then : cat >>confdefs.h <<_ACEOF #define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1 _ACEOF fi done for ac_func in syslog do : ac_fn_c_check_func "$LINENO" "syslog" "ac_cv_func_syslog" if test "x$ac_cv_func_syslog" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_SYSLOG 1 _ACEOF fi done for ac_header in sys/times.h do : ac_fn_c_check_header_mongrel "$LINENO" "sys/times.h" "ac_cv_header_sys_times_h" "$ac_includes_default" if test "x$ac_cv_header_sys_times_h" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_SYS_TIMES_H 1 _ACEOF fi done for ac_func in times do : ac_fn_c_check_func "$LINENO" "times" "ac_cv_func_times" if test "x$ac_cv_func_times" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_TIMES 1 _ACEOF fi done # util_expr needs header files in server source dir if test "x$INCLUDES" = "x"; then test "x$silent" != "xyes" && echo " setting INCLUDES to \"-I\$(top_srcdir)/server\"" INCLUDES="-I\$(top_srcdir)/server" else apr_addto_bugger="-I\$(top_srcdir)/server" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $INCLUDES; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to INCLUDES" INCLUDES="$INCLUDES $i" fi done fi apr_old_cppflags=$CPPFLAGS CPPFLAGS="$CPPFLAGS $INCLUDES" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #if APR_HAS_THREADS YES_IS_DEFINED #endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "YES_IS_DEFINED" >/dev/null 2>&1; then : ac_cv_define_APR_HAS_THREADS=yes else ac_cv_define_APR_HAS_THREADS=no fi rm -f conftest* CPPFLAGS=$apr_old_cppflags have_threaded_sig_graceful=yes case $host in *-linux-*) case `uname -r` in 2.0* ) have_threaded_sig_graceful=no ;; esac ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether APR supports thread-safe pollsets" >&5 $as_echo_n "checking whether APR supports thread-safe pollsets... " >&6; } if ${ac_cv_have_threadsafe_pollset+:} false; then : $as_echo_n "(cached) " >&6 else case $host in *-apple-darwin[1-9].*) if test -z "$ac_cv_func_kqueue"; then test "x$silent" != "xyes" && echo " setting ac_cv_func_kqueue to \"no\"" ac_cv_func_kqueue="no" fi ;; esac for ac_func in kqueue port_create epoll_create do : as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh` ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var" if eval test \"x\$"$as_ac_var"\" = x"yes"; then : cat >>confdefs.h <<_ACEOF #define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1 _ACEOF fi done if test "$ac_cv_func_kqueue$ac_cv_func_port_create$ac_cv_func_epoll_create" != "nonono"; then ac_cv_have_threadsafe_pollset=yes else ac_cv_have_threadsafe_pollset=no fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_threadsafe_pollset" >&5 $as_echo "$ac_cv_have_threadsafe_pollset" >&6; } case $APR_VERSION in 1.4*) apr_has_skiplist=no ;; *) apr_has_skiplist=yes esac case $host in *mingw32* | *os2-emx*) forking_mpms_supported=no ;; *) forking_mpms_supported=yes ;; esac ap_mpm_is_supported () { eval "tmp=\$ap_supported_mpm_$1" if test -z "$tmp"; then return 1 else return 0 fi } ap_mpm_supports_shared () { eval "tmp=\$ap_supported_mpm_$1" if test "$tmp" = "shared"; then return 0 else return 1 fi } ap_mpm_is_threaded () { if test "$mpm_build" = "shared" -a ac_cv_define_APR_HAS_THREADS = "yes"; then return 0 fi for mpm in $ap_enabled_mpms; do eval "tmp=\$ap_threaded_mpm_$mpm" if test "$tmp" = "yes"; then return 0 fi done return 1 } ap_mpm_is_enabled () { eval "tmp=\$ap_enabled_mpm_$1" if test "$tmp" = "yes"; then return 0 else return 1 fi } { $as_echo "$as_me:${as_lineno-$LINENO}: checking if event MPM supports this platform" >&5 $as_echo_n "checking if event MPM supports this platform... " >&6; } if test $forking_mpms_supported != yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no - This is not a forking platform" >&5 $as_echo "no - This is not a forking platform" >&6; } elif test $ac_cv_define_APR_HAS_THREADS != yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no - APR does not support threads" >&5 $as_echo "no - APR does not support threads" >&6; } elif test $have_threaded_sig_graceful != yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no - SIG_GRACEFUL cannot be used with a threaded MPM" >&5 $as_echo "no - SIG_GRACEFUL cannot be used with a threaded MPM" >&6; } elif test $ac_cv_have_threadsafe_pollset != yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no - APR_POLLSET_THREADSAFE is not supported" >&5 $as_echo "no - APR_POLLSET_THREADSAFE is not supported" >&6; } elif test $apr_has_skiplist != yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no - APR skiplist is not available" >&5 $as_echo "no - APR skiplist is not available" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } if test "yes" = "yes"; then eval "ap_supported_mpm_event=shared" ap_supported_shared_mpms="$ap_supported_shared_mpms event " else eval "ap_supported_mpm_event=static" fi if test "yes" = "yes"; then eval "ap_threaded_mpm_event=yes" fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking if mpmt_os2 MPM supports this platform" >&5 $as_echo_n "checking if mpmt_os2 MPM supports this platform... " >&6; } case $host in *os2-emx*) { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } if test "no" = "yes"; then eval "ap_supported_mpm_mpmt_os2=shared" ap_supported_shared_mpms="$ap_supported_shared_mpms mpmt_os2 " else eval "ap_supported_mpm_mpmt_os2=static" fi if test "yes" = "yes"; then eval "ap_threaded_mpm_mpmt_os2=yes" fi ;; *) { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking if prefork MPM supports this platform" >&5 $as_echo_n "checking if prefork MPM supports this platform... " >&6; } if test $forking_mpms_supported != yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no - This is not a forking platform" >&5 $as_echo "no - This is not a forking platform" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } if test "yes" = "yes"; then eval "ap_supported_mpm_prefork=shared" ap_supported_shared_mpms="$ap_supported_shared_mpms prefork " else eval "ap_supported_mpm_prefork=static" fi if test "no" = "yes"; then eval "ap_threaded_mpm_prefork=yes" fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking if WinNT MPM supports this platform" >&5 $as_echo_n "checking if WinNT MPM supports this platform... " >&6; } case $host in *mingw32*) { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } if test "no" = "yes"; then eval "ap_supported_mpm_winnt=shared" ap_supported_shared_mpms="$ap_supported_shared_mpms winnt " else eval "ap_supported_mpm_winnt=static" fi if test "yes" = "yes"; then eval "ap_threaded_mpm_winnt=yes" fi ;; *) { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking if worker MPM supports this platform" >&5 $as_echo_n "checking if worker MPM supports this platform... " >&6; } if test $forking_mpms_supported != yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no - This is not a forking platform" >&5 $as_echo "no - This is not a forking platform" >&6; } elif test $ac_cv_define_APR_HAS_THREADS != yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no - APR does not support threads" >&5 $as_echo "no - APR does not support threads" >&6; } elif test $have_threaded_sig_graceful != yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no - SIG_GRACEFUL cannot be used with a threaded MPM" >&5 $as_echo "no - SIG_GRACEFUL cannot be used with a threaded MPM" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } if test "yes" = "yes"; then eval "ap_supported_mpm_worker=shared" ap_supported_shared_mpms="$ap_supported_shared_mpms worker " else eval "ap_supported_mpm_worker=static" fi if test "yes" = "yes"; then eval "ap_threaded_mpm_worker=yes" fi fi htpasswd_LTFLAGS="" htdigest_LTFLAGS="" rotatelogs_LTFLAGS="" logresolve_LTFLAGS="" htdbm_LTFLAGS="" ab_LTFLAGS="" checkgid_LTFLAGS="" htcacheclean_LTFLAGS="" httxt2dbm_LTFLAGS="" fcgistarter_LTFLAGS="" # Check whether --enable-static-support was given. if test "${enable_static_support+set}" = set; then : enableval=$enable_static_support; if test "$enableval" = "yes" ; then if test "x$htpasswd_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting htpasswd_LTFLAGS to \"-static\"" htpasswd_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $htpasswd_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to htpasswd_LTFLAGS" htpasswd_LTFLAGS="$htpasswd_LTFLAGS $i" fi done fi if test "x$htdigest_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting htdigest_LTFLAGS to \"-static\"" htdigest_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $htdigest_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to htdigest_LTFLAGS" htdigest_LTFLAGS="$htdigest_LTFLAGS $i" fi done fi if test "x$rotatelogs_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting rotatelogs_LTFLAGS to \"-static\"" rotatelogs_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $rotatelogs_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to rotatelogs_LTFLAGS" rotatelogs_LTFLAGS="$rotatelogs_LTFLAGS $i" fi done fi if test "x$logresolve_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting logresolve_LTFLAGS to \"-static\"" logresolve_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $logresolve_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to logresolve_LTFLAGS" logresolve_LTFLAGS="$logresolve_LTFLAGS $i" fi done fi if test "x$htdbm_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting htdbm_LTFLAGS to \"-static\"" htdbm_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $htdbm_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to htdbm_LTFLAGS" htdbm_LTFLAGS="$htdbm_LTFLAGS $i" fi done fi if test "x$ab_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting ab_LTFLAGS to \"-static\"" ab_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $ab_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to ab_LTFLAGS" ab_LTFLAGS="$ab_LTFLAGS $i" fi done fi if test "x$checkgid_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting checkgid_LTFLAGS to \"-static\"" checkgid_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $checkgid_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to checkgid_LTFLAGS" checkgid_LTFLAGS="$checkgid_LTFLAGS $i" fi done fi if test "x$htcacheclean_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting htcacheclean_LTFLAGS to \"-static\"" htcacheclean_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $htcacheclean_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to htcacheclean_LTFLAGS" htcacheclean_LTFLAGS="$htcacheclean_LTFLAGS $i" fi done fi if test "x$httxt2dbm_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting httxt2dbm_LTFLAGS to \"-static\"" httxt2dbm_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $httxt2dbm_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to httxt2dbm_LTFLAGS" httxt2dbm_LTFLAGS="$httxt2dbm_LTFLAGS $i" fi done fi if test "x$fcgistarter_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting fcgistarter_LTFLAGS to \"-static\"" fcgistarter_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $fcgistarter_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to fcgistarter_LTFLAGS" fcgistarter_LTFLAGS="$fcgistarter_LTFLAGS $i" fi done fi fi fi # Check whether --enable-static-htpasswd was given. if test "${enable_static_htpasswd+set}" = set; then : enableval=$enable_static_htpasswd; if test "$enableval" = "yes" ; then if test "x$htpasswd_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting htpasswd_LTFLAGS to \"-static\"" htpasswd_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $htpasswd_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to htpasswd_LTFLAGS" htpasswd_LTFLAGS="$htpasswd_LTFLAGS $i" fi done fi else if test "x$htpasswd_LTFLAGS" = "x-static"; then test "x$silent" != "xyes" && echo " nulling htpasswd_LTFLAGS" htpasswd_LTFLAGS="" else apr_new_bugger="" apr_removed=0 for i in $htpasswd_LTFLAGS; do if test "x$i" != "x-static"; then apr_new_bugger="$apr_new_bugger $i" else apr_removed=1 fi done if test $apr_removed = "1"; then test "x$silent" != "xyes" && echo " removed \"-static\" from htpasswd_LTFLAGS" htpasswd_LTFLAGS=$apr_new_bugger fi fi fi fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST htpasswd_LTFLAGS" # Check whether --enable-static-htdigest was given. if test "${enable_static_htdigest+set}" = set; then : enableval=$enable_static_htdigest; if test "$enableval" = "yes" ; then if test "x$htdigest_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting htdigest_LTFLAGS to \"-static\"" htdigest_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $htdigest_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to htdigest_LTFLAGS" htdigest_LTFLAGS="$htdigest_LTFLAGS $i" fi done fi else if test "x$htdigest_LTFLAGS" = "x-static"; then test "x$silent" != "xyes" && echo " nulling htdigest_LTFLAGS" htdigest_LTFLAGS="" else apr_new_bugger="" apr_removed=0 for i in $htdigest_LTFLAGS; do if test "x$i" != "x-static"; then apr_new_bugger="$apr_new_bugger $i" else apr_removed=1 fi done if test $apr_removed = "1"; then test "x$silent" != "xyes" && echo " removed \"-static\" from htdigest_LTFLAGS" htdigest_LTFLAGS=$apr_new_bugger fi fi fi fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST htdigest_LTFLAGS" # Check whether --enable-static-rotatelogs was given. if test "${enable_static_rotatelogs+set}" = set; then : enableval=$enable_static_rotatelogs; if test "$enableval" = "yes" ; then if test "x$rotatelogs_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting rotatelogs_LTFLAGS to \"-static\"" rotatelogs_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $rotatelogs_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to rotatelogs_LTFLAGS" rotatelogs_LTFLAGS="$rotatelogs_LTFLAGS $i" fi done fi else if test "x$rotatelogs_LTFLAGS" = "x-static"; then test "x$silent" != "xyes" && echo " nulling rotatelogs_LTFLAGS" rotatelogs_LTFLAGS="" else apr_new_bugger="" apr_removed=0 for i in $rotatelogs_LTFLAGS; do if test "x$i" != "x-static"; then apr_new_bugger="$apr_new_bugger $i" else apr_removed=1 fi done if test $apr_removed = "1"; then test "x$silent" != "xyes" && echo " removed \"-static\" from rotatelogs_LTFLAGS" rotatelogs_LTFLAGS=$apr_new_bugger fi fi fi fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST rotatelogs_LTFLAGS" # Check whether --enable-static-logresolve was given. if test "${enable_static_logresolve+set}" = set; then : enableval=$enable_static_logresolve; if test "$enableval" = "yes" ; then if test "x$logresolve_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting logresolve_LTFLAGS to \"-static\"" logresolve_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $logresolve_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to logresolve_LTFLAGS" logresolve_LTFLAGS="$logresolve_LTFLAGS $i" fi done fi else if test "x$logresolve_LTFLAGS" = "x-static"; then test "x$silent" != "xyes" && echo " nulling logresolve_LTFLAGS" logresolve_LTFLAGS="" else apr_new_bugger="" apr_removed=0 for i in $logresolve_LTFLAGS; do if test "x$i" != "x-static"; then apr_new_bugger="$apr_new_bugger $i" else apr_removed=1 fi done if test $apr_removed = "1"; then test "x$silent" != "xyes" && echo " removed \"-static\" from logresolve_LTFLAGS" logresolve_LTFLAGS=$apr_new_bugger fi fi fi fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST logresolve_LTFLAGS" # Check whether --enable-static-htdbm was given. if test "${enable_static_htdbm+set}" = set; then : enableval=$enable_static_htdbm; if test "$enableval" = "yes" ; then if test "x$htdbm_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting htdbm_LTFLAGS to \"-static\"" htdbm_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $htdbm_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to htdbm_LTFLAGS" htdbm_LTFLAGS="$htdbm_LTFLAGS $i" fi done fi else if test "x$htdbm_LTFLAGS" = "x-static"; then test "x$silent" != "xyes" && echo " nulling htdbm_LTFLAGS" htdbm_LTFLAGS="" else apr_new_bugger="" apr_removed=0 for i in $htdbm_LTFLAGS; do if test "x$i" != "x-static"; then apr_new_bugger="$apr_new_bugger $i" else apr_removed=1 fi done if test $apr_removed = "1"; then test "x$silent" != "xyes" && echo " removed \"-static\" from htdbm_LTFLAGS" htdbm_LTFLAGS=$apr_new_bugger fi fi fi fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST htdbm_LTFLAGS" # Check whether --enable-static-ab was given. if test "${enable_static_ab+set}" = set; then : enableval=$enable_static_ab; if test "$enableval" = "yes" ; then if test "x$ab_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting ab_LTFLAGS to \"-static\"" ab_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $ab_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to ab_LTFLAGS" ab_LTFLAGS="$ab_LTFLAGS $i" fi done fi else if test "x$ab_LTFLAGS" = "x-static"; then test "x$silent" != "xyes" && echo " nulling ab_LTFLAGS" ab_LTFLAGS="" else apr_new_bugger="" apr_removed=0 for i in $ab_LTFLAGS; do if test "x$i" != "x-static"; then apr_new_bugger="$apr_new_bugger $i" else apr_removed=1 fi done if test $apr_removed = "1"; then test "x$silent" != "xyes" && echo " removed \"-static\" from ab_LTFLAGS" ab_LTFLAGS=$apr_new_bugger fi fi fi fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST ab_LTFLAGS" # Check whether --enable-static-checkgid was given. if test "${enable_static_checkgid+set}" = set; then : enableval=$enable_static_checkgid; if test "$enableval" = "yes" ; then if test "x$checkgid_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting checkgid_LTFLAGS to \"-static\"" checkgid_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $checkgid_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to checkgid_LTFLAGS" checkgid_LTFLAGS="$checkgid_LTFLAGS $i" fi done fi else if test "x$checkgid_LTFLAGS" = "x-static"; then test "x$silent" != "xyes" && echo " nulling checkgid_LTFLAGS" checkgid_LTFLAGS="" else apr_new_bugger="" apr_removed=0 for i in $checkgid_LTFLAGS; do if test "x$i" != "x-static"; then apr_new_bugger="$apr_new_bugger $i" else apr_removed=1 fi done if test $apr_removed = "1"; then test "x$silent" != "xyes" && echo " removed \"-static\" from checkgid_LTFLAGS" checkgid_LTFLAGS=$apr_new_bugger fi fi fi fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST checkgid_LTFLAGS" # Check whether --enable-static-htcacheclean was given. if test "${enable_static_htcacheclean+set}" = set; then : enableval=$enable_static_htcacheclean; if test "$enableval" = "yes" ; then if test "x$htcacheclean_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting htcacheclean_LTFLAGS to \"-static\"" htcacheclean_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $htcacheclean_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to htcacheclean_LTFLAGS" htcacheclean_LTFLAGS="$htcacheclean_LTFLAGS $i" fi done fi else if test "x$htcacheclean_LTFLAGS" = "x-static"; then test "x$silent" != "xyes" && echo " nulling htcacheclean_LTFLAGS" htcacheclean_LTFLAGS="" else apr_new_bugger="" apr_removed=0 for i in $htcacheclean_LTFLAGS; do if test "x$i" != "x-static"; then apr_new_bugger="$apr_new_bugger $i" else apr_removed=1 fi done if test $apr_removed = "1"; then test "x$silent" != "xyes" && echo " removed \"-static\" from htcacheclean_LTFLAGS" htcacheclean_LTFLAGS=$apr_new_bugger fi fi fi fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST htcacheclean_LTFLAGS" # Check whether --enable-static-httxt2dbm was given. if test "${enable_static_httxt2dbm+set}" = set; then : enableval=$enable_static_httxt2dbm; if test "$enableval" = "yes" ; then if test "x$httxt2dbm_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting httxt2dbm_LTFLAGS to \"-static\"" httxt2dbm_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $httxt2dbm_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to httxt2dbm_LTFLAGS" httxt2dbm_LTFLAGS="$httxt2dbm_LTFLAGS $i" fi done fi else if test "x$httxt2dbm" = "x-static"; then test "x$silent" != "xyes" && echo " nulling httxt2dbm" httxt2dbm="" else apr_new_bugger="" apr_removed=0 for i in $httxt2dbm; do if test "x$i" != "x-static"; then apr_new_bugger="$apr_new_bugger $i" else apr_removed=1 fi done if test $apr_removed = "1"; then test "x$silent" != "xyes" && echo " removed \"-static\" from httxt2dbm" httxt2dbm=$apr_new_bugger fi fi fi fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST httxt2dbm_LTFLAGS" # Check whether --enable-static-fcgistarter was given. if test "${enable_static_fcgistarter+set}" = set; then : enableval=$enable_static_fcgistarter; if test "$enableval" = "yes" ; then if test "x$fcgistarter_LTFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting fcgistarter_LTFLAGS to \"-static\"" fcgistarter_LTFLAGS="-static" else apr_addto_bugger="-static" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $fcgistarter_LTFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to fcgistarter_LTFLAGS" fcgistarter_LTFLAGS="$fcgistarter_LTFLAGS $i" fi done fi else if test "x$fcgistarter" = "x-static"; then test "x$silent" != "xyes" && echo " nulling fcgistarter" fcgistarter="" else apr_new_bugger="" apr_removed=0 for i in $fcgistarter; do if test "x$i" != "x-static"; then apr_new_bugger="$apr_new_bugger $i" else apr_removed=1 fi done if test $apr_removed = "1"; then test "x$silent" != "xyes" && echo " removed \"-static\" from fcgistarter" fcgistarter=$apr_new_bugger fi fi fi fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST fcgistarter_LTFLAGS" # Configure or check which of the non-portable support programs can be enabled. NONPORTABLE_SUPPORT="" case $host in *mingw*) ;; *) NONPORTABLE_SUPPORT="checkgid fcgistarter" ;; esac APACHE_VAR_SUBST="$APACHE_VAR_SUBST NONPORTABLE_SUPPORT" # Configure the ulimit -n command used by apachectl. case $host in *aix*) # this works in any locale, unlike the default command below, which # fails in a non-English locale if the hard limit is unlimited # since the display of the limit will translate "unlimited", but # ulimit only accepts English "unlimited" on input APACHECTL_ULIMIT="ulimit -S -n unlimited" ;; *alpha*-dec-osf*) # Tru64: -H is for setting, not retrieving APACHECTL_ULIMIT="ulimit -S -n \`ulimit -h -n\`" ;; *) if TMP_ULIMIT=`ulimit -H -n` && ulimit -S -n $TMP_ULIMIT >/dev/null 2>&1; then APACHECTL_ULIMIT="ulimit -S -n \`ulimit -H -n\`" else APACHECTL_ULIMIT="" fi ;; esac APACHE_VAR_SUBST="$APACHE_VAR_SUBST APACHECTL_ULIMIT" current_dir=http2 modpath_current=modules/http2 modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d http2 || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk http2_objs="mod_http2.lo h2_alt_svc.lo h2_bucket_beam.lo h2_bucket_eos.lo h2_config.lo h2_conn.lo h2_conn_io.lo h2_ctx.lo h2_filter.lo h2_from_h1.lo h2_h2.lo h2_headers.lo h2_mplx.lo h2_push.lo h2_request.lo h2_session.lo h2_stream.lo h2_switch.lo h2_task.lo h2_util.lo h2_workers.lo " { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_http2" >&5 $as_echo_n "checking whether to enable mod_http2... " >&6; } # Check whether --enable-http2 was given. if test "${enable_http2+set}" = set; then : enableval=$enable_http2; force_http2=$enableval else enable_http2=most fi _apmod_extra_msg="" case "$enable_http2" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_http2" = "static" -o "$enable_http2" = "shared"; then : elif test "$enable_http2" = "yes"; then enable_http2=$module_default elif test "$enable_http2" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_http2=$module_default else enable_http2=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_http2" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_http2=$module_default else enable_http2=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_http2" = "all" -o "$enable_http2" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_http2=$module_default _apmod_extra_msg=" ($module_selection)" else enable_http2=no fi elif test "$enable_http2" = "reallyall" -o "$enable_http2" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_http2" != "no" ; then enable_http2=$module_default _apmod_extra_msg=" ($module_selection)" else enable_http2=no fi else enable_http2=no fi if test "$enable_http2" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL" >&5 $as_echo_n "checking for OpenSSL... " >&6; } if ${ac_cv_openssl+:} false; then : $as_echo_n "(cached) " >&6 else ac_cv_openssl=no ap_openssl_found="" ap_openssl_base="" ap_openssl_libs="" ap_openssl_mod_cflags="" ap_openssl_mod_ldflags="" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for user-provided OpenSSL base directory" >&5 $as_echo_n "checking for user-provided OpenSSL base directory... " >&6; } # Check whether --with-ssl was given. if test "${with_ssl+set}" = set; then : withval=$with_ssl; if test "x$withval" != "xyes" -a "x$withval" != "x"; then ap_openssl_base="`cd $withval ; pwd`" fi fi if test "x$ap_openssl_base" = "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: none" >&5 $as_echo "none" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_openssl_base" >&5 $as_echo "$ap_openssl_base" >&6; } fi saved_CPPFLAGS="$CPPFLAGS" saved_LIBS="$LIBS" saved_LDFLAGS="$LDFLAGS" if test -n "$PKGCONFIG"; then saved_PKG_CONFIG_PATH="$PKG_CONFIG_PATH" if test "x$ap_openssl_base" != "x" -a \ -f "${ap_openssl_base}/lib/pkgconfig/openssl.pc"; then PKG_CONFIG_PATH="${ap_openssl_base}/lib/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH fi # Check whether --enable-ssl-staticlib-deps was given. if test "${enable_ssl_staticlib_deps+set}" = set; then : enableval=$enable_ssl_staticlib_deps; if test "$enableval" = "yes"; then PKGCONFIG_LIBOPTS="--static" fi fi ap_openssl_libs="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-l --silence-errors openssl`" if test $? -eq 0; then ap_openssl_found="yes" pkglookup="`$PKGCONFIG --cflags-only-I openssl`" if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"$pkglookup\"" CPPFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"$pkglookup\"" MOD_CFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi if test "x$ab_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting ab_CFLAGS to \"$pkglookup\"" ab_CFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $ab_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to ab_CFLAGS" ab_CFLAGS="$ab_CFLAGS $i" fi done fi pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-L openssl`" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$pkglookup\"" LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$pkglookup\"" MOD_LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-other openssl`" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$pkglookup\"" LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$pkglookup\"" MOD_LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi fi PKG_CONFIG_PATH="$saved_PKG_CONFIG_PATH" fi if test "x$ap_openssl_base" != "x" -a "x$ap_openssl_found" = "x"; then if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"-I$ap_openssl_base/include\"" CPPFLAGS="-I$ap_openssl_base/include" else apr_addto_bugger="-I$ap_openssl_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"-I$ap_openssl_base/include\"" MOD_CFLAGS="-I$ap_openssl_base/include" else apr_addto_bugger="-I$ap_openssl_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi if test "x$ab_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting ab_CFLAGS to \"-I$ap_openssl_base/include\"" ab_CFLAGS="-I$ap_openssl_base/include" else apr_addto_bugger="-I$ap_openssl_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $ab_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to ab_CFLAGS" ab_CFLAGS="$ab_CFLAGS $i" fi done fi if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"-L$ap_openssl_base/lib\"" LDFLAGS="-L$ap_openssl_base/lib" else apr_addto_bugger="-L$ap_openssl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"-L$ap_openssl_base/lib\"" MOD_LDFLAGS="-L$ap_openssl_base/lib" else apr_addto_bugger="-L$ap_openssl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$ap_platform_runtime_link_flag$ap_openssl_base/lib\"" LDFLAGS="$ap_platform_runtime_link_flag$ap_openssl_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_openssl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_platform_runtime_link_flag$ap_openssl_base/lib\"" MOD_LDFLAGS="$ap_platform_runtime_link_flag$ap_openssl_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_openssl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL version >= 0.9.8a" >&5 $as_echo_n "checking for OpenSSL version >= 0.9.8a... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { #if !defined(OPENSSL_VERSION_NUMBER) #error "Missing OpenSSL version" #endif #if OPENSSL_VERSION_NUMBER < 0x0090801f #error "Unsupported OpenSSL version " OPENSSL_VERSION_TEXT #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: result: OK" >&5 $as_echo "OK" >&6; } ac_cv_openssl=yes else { $as_echo "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 $as_echo "FAILED" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext if test "x$ac_cv_openssl" = "xyes"; then ap_openssl_libs="${ap_openssl_libs:--lssl -lcrypto} `$apr_config --libs`" if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_openssl_libs\"" MOD_LDFLAGS="$ap_openssl_libs" else apr_addto_bugger="$ap_openssl_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LIBS to \"$ap_openssl_libs\"" LIBS="$ap_openssl_libs" else apr_addto_bugger="$ap_openssl_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LIBS" LIBS="$LIBS $i" fi done fi test "x$silent" != "xyes" && echo " forcing ab_LIBS to \"$MOD_LDFLAGS\"" ab_LIBS="$MOD_LDFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST ab_CFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST ab_LIBS" liberrors="" for ac_header in openssl/engine.h do : ac_fn_c_check_header_mongrel "$LINENO" "openssl/engine.h" "ac_cv_header_openssl_engine_h" "$ac_includes_default" if test "x$ac_cv_header_openssl_engine_h" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_OPENSSL_ENGINE_H 1 _ACEOF fi done for ac_func in SSL_CTX_new do : ac_fn_c_check_func "$LINENO" "SSL_CTX_new" "ac_cv_func_SSL_CTX_new" if test "x$ac_cv_func_SSL_CTX_new" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_SSL_CTX_NEW 1 _ACEOF else liberrors="yes" fi done for ac_func in ENGINE_init ENGINE_load_builtin_engines RAND_egd do : as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh` ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var" if eval test \"x\$"$as_ac_var"\" = x"yes"; then : cat >>confdefs.h <<_ACEOF #define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1 _ACEOF fi done if test "x$liberrors" != "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: OpenSSL libraries are unusable" >&5 $as_echo "$as_me: WARNING: OpenSSL libraries are unusable" >&2;} fi else { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: OpenSSL version is too old" >&5 $as_echo "$as_me: WARNING: OpenSSL version is too old" >&2;} fi CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" ap_openssl_mod_cflags=$MOD_CFLAGS ap_openssl_mod_ldflags=$MOD_LDFLAGS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_openssl" >&5 $as_echo "$ac_cv_openssl" >&6; } if test "x$ac_cv_openssl" = "xyes"; then $as_echo "#define HAVE_OPENSSL 1" >>confdefs.h if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_openssl_mod_ldflags\"" MOD_LDFLAGS="$ap_openssl_mod_ldflags" else apr_addto_bugger="$ap_openssl_mod_ldflags" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"$ap_openssl_mod_cflags\"" MOD_CFLAGS="$ap_openssl_mod_cflags" else apr_addto_bugger="$ap_openssl_mod_cflags" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi fi if test "$ac_cv_openssl" = "yes" ; then if test "x$MOD_CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CPPFLAGS to \""-DH2_OPENSSL"\"" MOD_CPPFLAGS=""-DH2_OPENSSL"" else apr_addto_bugger=""-DH2_OPENSSL"" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CPPFLAGS" MOD_CPPFLAGS="$MOD_CPPFLAGS $i" fi done fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for nghttp2" >&5 $as_echo_n "checking for nghttp2... " >&6; } if ${ac_cv_nghttp2+:} false; then : $as_echo_n "(cached) " >&6 else ac_cv_nghttp2=no ap_nghttp2_found="" ap_nghttp2_base="" ap_nghttp2_libs="" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for user-provided nghttp2 base directory" >&5 $as_echo_n "checking for user-provided nghttp2 base directory... " >&6; } # Check whether --with-nghttp2 was given. if test "${with_nghttp2+set}" = set; then : withval=$with_nghttp2; if test "x$withval" != "xyes" -a "x$withval" != "x"; then ap_nghttp2_base="`cd $withval ; pwd`" fi fi if test "x$ap_nghttp2_base" = "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: none" >&5 $as_echo "none" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_nghttp2_base" >&5 $as_echo "$ap_nghttp2_base" >&6; } fi saved_CPPFLAGS="$CPPFLAGS" saved_LIBS="$LIBS" saved_LDFLAGS="$LDFLAGS" if test -n "$PKGCONFIG"; then saved_PKG_CONFIG_PATH="$PKG_CONFIG_PATH" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for pkg-config along $PKG_CONFIG_PATH" >&5 $as_echo_n "checking for pkg-config along $PKG_CONFIG_PATH... " >&6; } if test "x$ap_nghttp2_base" != "x" ; then if test -f "${ap_nghttp2_base}/lib/pkgconfig/libnghttp2.pc"; then PKG_CONFIG_PATH="${ap_nghttp2_base}/lib/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH elif test -f "${ap_nghttp2_base}/lib64/pkgconfig/libnghttp2.pc"; then PKG_CONFIG_PATH="${ap_nghttp2_base}/lib64/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH fi fi # Check whether --enable-nghttp2-staticlib-deps was given. if test "${enable_nghttp2_staticlib_deps+set}" = set; then : enableval=$enable_nghttp2_staticlib_deps; if test "$enableval" = "yes"; then PKGCONFIG_LIBOPTS="--static" fi fi ap_nghttp2_libs="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-l --silence-errors libnghttp2`" if test $? -eq 0; then ap_nghttp2_found="yes" pkglookup="`$PKGCONFIG --cflags-only-I libnghttp2`" if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"$pkglookup\"" CPPFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"$pkglookup\"" MOD_CFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-L libnghttp2`" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$pkglookup\"" LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$pkglookup\"" MOD_LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-other libnghttp2`" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$pkglookup\"" LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$pkglookup\"" MOD_LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi fi PKG_CONFIG_PATH="$saved_PKG_CONFIG_PATH" fi if test "x$ap_nghttp2_base" != "x" -a "x$ap_nghttp2_found" = "x"; then if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"-I$ap_nghttp2_base/include\"" CPPFLAGS="-I$ap_nghttp2_base/include" else apr_addto_bugger="-I$ap_nghttp2_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"-I$ap_nghttp2_base/include\"" MOD_CFLAGS="-I$ap_nghttp2_base/include" else apr_addto_bugger="-I$ap_nghttp2_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"-L$ap_nghttp2_base/lib\"" LDFLAGS="-L$ap_nghttp2_base/lib" else apr_addto_bugger="-L$ap_nghttp2_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"-L$ap_nghttp2_base/lib\"" MOD_LDFLAGS="-L$ap_nghttp2_base/lib" else apr_addto_bugger="-L$ap_nghttp2_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$ap_platform_runtime_link_flag$ap_nghttp2_base/lib\"" LDFLAGS="$ap_platform_runtime_link_flag$ap_nghttp2_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_nghttp2_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_platform_runtime_link_flag$ap_nghttp2_base/lib\"" MOD_LDFLAGS="$ap_platform_runtime_link_flag$ap_nghttp2_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_nghttp2_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for nghttp2 version >= 1.2.1" >&5 $as_echo_n "checking for nghttp2 version >= 1.2.1... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { #if !defined(NGHTTP2_VERSION_NUM) #error "Missing nghttp2 version" #endif #if NGHTTP2_VERSION_NUM < 0x010201 #error "Unsupported nghttp2 version " NGHTTP2_VERSION_TEXT #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: result: OK" >&5 $as_echo "OK" >&6; } ac_cv_nghttp2=yes else { $as_echo "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 $as_echo "FAILED" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext if test "x$ac_cv_nghttp2" = "xyes"; then ap_nghttp2_libs="${ap_nghttp2_libs:--lnghttp2} `$apr_config --libs`" if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_nghttp2_libs\"" MOD_LDFLAGS="$ap_nghttp2_libs" else apr_addto_bugger="$ap_nghttp2_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LIBS to \"$ap_nghttp2_libs\"" LIBS="$ap_nghttp2_libs" else apr_addto_bugger="$ap_nghttp2_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LIBS" LIBS="$LIBS $i" fi done fi liberrors="" for ac_header in nghttp2/nghttp2.h do : ac_fn_c_check_header_mongrel "$LINENO" "nghttp2/nghttp2.h" "ac_cv_header_nghttp2_nghttp2_h" "$ac_includes_default" if test "x$ac_cv_header_nghttp2_nghttp2_h" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_NGHTTP2_NGHTTP2_H 1 _ACEOF fi done for ac_func in nghttp2_session_server_new2 do : ac_fn_c_check_func "$LINENO" "nghttp2_session_server_new2" "ac_cv_func_nghttp2_session_server_new2" if test "x$ac_cv_func_nghttp2_session_server_new2" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_NGHTTP2_SESSION_SERVER_NEW2 1 _ACEOF else liberrors="yes" fi done if test "x$liberrors" != "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: nghttp2 library is unusable" >&5 $as_echo "$as_me: WARNING: nghttp2 library is unusable" >&2;} fi for ac_func in nghttp2_stream_get_weight do : ac_fn_c_check_func "$LINENO" "nghttp2_stream_get_weight" "ac_cv_func_nghttp2_stream_get_weight" if test "x$ac_cv_func_nghttp2_stream_get_weight" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_NGHTTP2_STREAM_GET_WEIGHT 1 _ACEOF else liberrors="yes" fi done if test "x$liberrors" != "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: nghttp2 version >= 1.3.0 is required" >&5 $as_echo "$as_me: WARNING: nghttp2 version >= 1.3.0 is required" >&2;} fi for ac_func in nghttp2_session_change_stream_priority do : ac_fn_c_check_func "$LINENO" "nghttp2_session_change_stream_priority" "ac_cv_func_nghttp2_session_change_stream_priority" if test "x$ac_cv_func_nghttp2_session_change_stream_priority" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_NGHTTP2_SESSION_CHANGE_STREAM_PRIORITY 1 _ACEOF if test "x$MOD_CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CPPFLAGS to \""-DH2_NG2_CHANGE_PRIO"\"" MOD_CPPFLAGS=""-DH2_NG2_CHANGE_PRIO"" else apr_addto_bugger=""-DH2_NG2_CHANGE_PRIO"" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CPPFLAGS" MOD_CPPFLAGS="$MOD_CPPFLAGS $i" fi done fi fi done for ac_func in nghttp2_session_callbacks_set_on_invalid_header_callback do : ac_fn_c_check_func "$LINENO" "nghttp2_session_callbacks_set_on_invalid_header_callback" "ac_cv_func_nghttp2_session_callbacks_set_on_invalid_header_callback" if test "x$ac_cv_func_nghttp2_session_callbacks_set_on_invalid_header_callback" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_NGHTTP2_SESSION_CALLBACKS_SET_ON_INVALID_HEADER_CALLBACK 1 _ACEOF if test "x$MOD_CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CPPFLAGS to \""-DH2_NG2_INVALID_HEADER_CB"\"" MOD_CPPFLAGS=""-DH2_NG2_INVALID_HEADER_CB"" else apr_addto_bugger=""-DH2_NG2_INVALID_HEADER_CB"" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CPPFLAGS" MOD_CPPFLAGS="$MOD_CPPFLAGS $i" fi done fi fi done for ac_func in nghttp2_session_get_stream_local_window_size do : ac_fn_c_check_func "$LINENO" "nghttp2_session_get_stream_local_window_size" "ac_cv_func_nghttp2_session_get_stream_local_window_size" if test "x$ac_cv_func_nghttp2_session_get_stream_local_window_size" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_NGHTTP2_SESSION_GET_STREAM_LOCAL_WINDOW_SIZE 1 _ACEOF if test "x$MOD_CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CPPFLAGS to \""-DH2_NG2_LOCAL_WIN_SIZE"\"" MOD_CPPFLAGS=""-DH2_NG2_LOCAL_WIN_SIZE"" else apr_addto_bugger=""-DH2_NG2_LOCAL_WIN_SIZE"" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CPPFLAGS" MOD_CPPFLAGS="$MOD_CPPFLAGS $i" fi done fi fi done else { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: nghttp2 version is too old" >&5 $as_echo "$as_me: WARNING: nghttp2 version is too old" >&2;} fi CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_nghttp2" >&5 $as_echo "$ac_cv_nghttp2" >&6; } if test "x$ac_cv_nghttp2" = "xyes"; then $as_echo "#define HAVE_NGHTTP2 1" >>confdefs.h fi if test "$ac_cv_nghttp2" = "yes" ; then if test "x$enable_http2" = "xshared"; then # The only symbol which needs to be exported is the module # structure, so ask libtool to hide everything else: if test "x$MOD_HTTP2_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_HTTP2_LDADD to \"-export-symbols-regex http2_module\"" MOD_HTTP2_LDADD="-export-symbols-regex http2_module" else apr_addto_bugger="-export-symbols-regex http2_module" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_HTTP2_LDADD; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_HTTP2_LDADD" MOD_HTTP2_LDADD="$MOD_HTTP2_LDADD $i" fi done fi fi else enable_http2=no fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_http2" >&5 $as_echo_n "checking whether to enable mod_http2... " >&6; } if test "$enable_http2" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_http2 has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_http2$_apmod_extra_msg" >&5 $as_echo "$enable_http2$_apmod_extra_msg" >&6; } if test "$enable_http2" != "no"; then case "$enable_http2" in static*) MODLIST="$MODLIST http2" if test "http2" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES http2" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},http2" fi ;; esac if test -z "$http2_objs"; then objects="mod_http2.lo" else objects="$http2_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_http2.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_proxy_http2... " >&6; } # Check whether --enable-proxy-http2 was given. if test "${enable_proxy_http2+set}" = set; then : enableval=$enable_proxy_http2; force_proxy_http2=$enableval else enable_proxy_http2=no fi _apmod_extra_msg="" case "$enable_proxy_http2" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_proxy_http2" = "static" -o "$enable_proxy_http2" = "shared"; then : elif test "$enable_proxy_http2" = "yes"; then enable_proxy_http2=$module_default elif test "$enable_proxy_http2" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_http2=$module_default else enable_proxy_http2=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_http2" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_proxy_http2=$module_default else enable_proxy_http2=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_proxy_http2" = "all" -o "$enable_proxy_http2" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_proxy_http2=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_http2=no fi elif test "$enable_proxy_http2" = "reallyall" -o "$enable_proxy_http2" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_proxy_http2" != "no" ; then enable_proxy_http2=$module_default _apmod_extra_msg=" ($module_selection)" else enable_proxy_http2=no fi else enable_proxy_http2=no fi if test "$enable_proxy_http2" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy" = "no" ; then enable_proxy_http2=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy is disabled but required for mod_proxy_http2\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy is disabled but required for mod_proxy_http2\"" >&2;} elif test "$enable_proxy_http2" = "static" && test "$enable_proxy" != "static" ; then enable_proxy_http2=$enable_proxy { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_proxy_http2 shared because mod_proxy is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_proxy_http2 shared because mod_proxy is built shared\"" >&2;} else { $as_echo "$as_me:${as_lineno-$LINENO}: checking for nghttp2" >&5 $as_echo_n "checking for nghttp2... " >&6; } if ${ac_cv_nghttp2+:} false; then : $as_echo_n "(cached) " >&6 else ac_cv_nghttp2=no ap_nghttp2_found="" ap_nghttp2_base="" ap_nghttp2_libs="" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for user-provided nghttp2 base directory" >&5 $as_echo_n "checking for user-provided nghttp2 base directory... " >&6; } # Check whether --with-nghttp2 was given. if test "${with_nghttp2+set}" = set; then : withval=$with_nghttp2; if test "x$withval" != "xyes" -a "x$withval" != "x"; then ap_nghttp2_base="`cd $withval ; pwd`" fi fi if test "x$ap_nghttp2_base" = "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: none" >&5 $as_echo "none" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_nghttp2_base" >&5 $as_echo "$ap_nghttp2_base" >&6; } fi saved_CPPFLAGS="$CPPFLAGS" saved_LIBS="$LIBS" saved_LDFLAGS="$LDFLAGS" if test -n "$PKGCONFIG"; then saved_PKG_CONFIG_PATH="$PKG_CONFIG_PATH" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for pkg-config along $PKG_CONFIG_PATH" >&5 $as_echo_n "checking for pkg-config along $PKG_CONFIG_PATH... " >&6; } if test "x$ap_nghttp2_base" != "x" ; then if test -f "${ap_nghttp2_base}/lib/pkgconfig/libnghttp2.pc"; then PKG_CONFIG_PATH="${ap_nghttp2_base}/lib/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH elif test -f "${ap_nghttp2_base}/lib64/pkgconfig/libnghttp2.pc"; then PKG_CONFIG_PATH="${ap_nghttp2_base}/lib64/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH fi fi # Check whether --enable-nghttp2-staticlib-deps was given. if test "${enable_nghttp2_staticlib_deps+set}" = set; then : enableval=$enable_nghttp2_staticlib_deps; if test "$enableval" = "yes"; then PKGCONFIG_LIBOPTS="--static" fi fi ap_nghttp2_libs="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-l --silence-errors libnghttp2`" if test $? -eq 0; then ap_nghttp2_found="yes" pkglookup="`$PKGCONFIG --cflags-only-I libnghttp2`" if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"$pkglookup\"" CPPFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"$pkglookup\"" MOD_CFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-L libnghttp2`" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$pkglookup\"" LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$pkglookup\"" MOD_LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-other libnghttp2`" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$pkglookup\"" LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$pkglookup\"" MOD_LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi fi PKG_CONFIG_PATH="$saved_PKG_CONFIG_PATH" fi if test "x$ap_nghttp2_base" != "x" -a "x$ap_nghttp2_found" = "x"; then if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"-I$ap_nghttp2_base/include\"" CPPFLAGS="-I$ap_nghttp2_base/include" else apr_addto_bugger="-I$ap_nghttp2_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"-I$ap_nghttp2_base/include\"" MOD_CFLAGS="-I$ap_nghttp2_base/include" else apr_addto_bugger="-I$ap_nghttp2_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"-L$ap_nghttp2_base/lib\"" LDFLAGS="-L$ap_nghttp2_base/lib" else apr_addto_bugger="-L$ap_nghttp2_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"-L$ap_nghttp2_base/lib\"" MOD_LDFLAGS="-L$ap_nghttp2_base/lib" else apr_addto_bugger="-L$ap_nghttp2_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$ap_platform_runtime_link_flag$ap_nghttp2_base/lib\"" LDFLAGS="$ap_platform_runtime_link_flag$ap_nghttp2_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_nghttp2_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_platform_runtime_link_flag$ap_nghttp2_base/lib\"" MOD_LDFLAGS="$ap_platform_runtime_link_flag$ap_nghttp2_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_nghttp2_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for nghttp2 version >= 1.2.1" >&5 $as_echo_n "checking for nghttp2 version >= 1.2.1... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { #if !defined(NGHTTP2_VERSION_NUM) #error "Missing nghttp2 version" #endif #if NGHTTP2_VERSION_NUM < 0x010201 #error "Unsupported nghttp2 version " NGHTTP2_VERSION_TEXT #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: result: OK" >&5 $as_echo "OK" >&6; } ac_cv_nghttp2=yes else { $as_echo "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 $as_echo "FAILED" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext if test "x$ac_cv_nghttp2" = "xyes"; then ap_nghttp2_libs="${ap_nghttp2_libs:--lnghttp2} `$apr_config --libs`" if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_nghttp2_libs\"" MOD_LDFLAGS="$ap_nghttp2_libs" else apr_addto_bugger="$ap_nghttp2_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LIBS to \"$ap_nghttp2_libs\"" LIBS="$ap_nghttp2_libs" else apr_addto_bugger="$ap_nghttp2_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LIBS" LIBS="$LIBS $i" fi done fi liberrors="" for ac_header in nghttp2/nghttp2.h do : ac_fn_c_check_header_mongrel "$LINENO" "nghttp2/nghttp2.h" "ac_cv_header_nghttp2_nghttp2_h" "$ac_includes_default" if test "x$ac_cv_header_nghttp2_nghttp2_h" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_NGHTTP2_NGHTTP2_H 1 _ACEOF fi done for ac_func in nghttp2_session_server_new2 do : ac_fn_c_check_func "$LINENO" "nghttp2_session_server_new2" "ac_cv_func_nghttp2_session_server_new2" if test "x$ac_cv_func_nghttp2_session_server_new2" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_NGHTTP2_SESSION_SERVER_NEW2 1 _ACEOF else liberrors="yes" fi done if test "x$liberrors" != "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: nghttp2 library is unusable" >&5 $as_echo "$as_me: WARNING: nghttp2 library is unusable" >&2;} fi for ac_func in nghttp2_stream_get_weight do : ac_fn_c_check_func "$LINENO" "nghttp2_stream_get_weight" "ac_cv_func_nghttp2_stream_get_weight" if test "x$ac_cv_func_nghttp2_stream_get_weight" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_NGHTTP2_STREAM_GET_WEIGHT 1 _ACEOF else liberrors="yes" fi done if test "x$liberrors" != "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: nghttp2 version >= 1.3.0 is required" >&5 $as_echo "$as_me: WARNING: nghttp2 version >= 1.3.0 is required" >&2;} fi for ac_func in nghttp2_session_change_stream_priority do : ac_fn_c_check_func "$LINENO" "nghttp2_session_change_stream_priority" "ac_cv_func_nghttp2_session_change_stream_priority" if test "x$ac_cv_func_nghttp2_session_change_stream_priority" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_NGHTTP2_SESSION_CHANGE_STREAM_PRIORITY 1 _ACEOF if test "x$MOD_CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CPPFLAGS to \""-DH2_NG2_CHANGE_PRIO"\"" MOD_CPPFLAGS=""-DH2_NG2_CHANGE_PRIO"" else apr_addto_bugger=""-DH2_NG2_CHANGE_PRIO"" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CPPFLAGS" MOD_CPPFLAGS="$MOD_CPPFLAGS $i" fi done fi fi done for ac_func in nghttp2_session_callbacks_set_on_invalid_header_callback do : ac_fn_c_check_func "$LINENO" "nghttp2_session_callbacks_set_on_invalid_header_callback" "ac_cv_func_nghttp2_session_callbacks_set_on_invalid_header_callback" if test "x$ac_cv_func_nghttp2_session_callbacks_set_on_invalid_header_callback" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_NGHTTP2_SESSION_CALLBACKS_SET_ON_INVALID_HEADER_CALLBACK 1 _ACEOF if test "x$MOD_CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CPPFLAGS to \""-DH2_NG2_INVALID_HEADER_CB"\"" MOD_CPPFLAGS=""-DH2_NG2_INVALID_HEADER_CB"" else apr_addto_bugger=""-DH2_NG2_INVALID_HEADER_CB"" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CPPFLAGS" MOD_CPPFLAGS="$MOD_CPPFLAGS $i" fi done fi fi done for ac_func in nghttp2_session_get_stream_local_window_size do : ac_fn_c_check_func "$LINENO" "nghttp2_session_get_stream_local_window_size" "ac_cv_func_nghttp2_session_get_stream_local_window_size" if test "x$ac_cv_func_nghttp2_session_get_stream_local_window_size" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_NGHTTP2_SESSION_GET_STREAM_LOCAL_WINDOW_SIZE 1 _ACEOF if test "x$MOD_CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CPPFLAGS to \""-DH2_NG2_LOCAL_WIN_SIZE"\"" MOD_CPPFLAGS=""-DH2_NG2_LOCAL_WIN_SIZE"" else apr_addto_bugger=""-DH2_NG2_LOCAL_WIN_SIZE"" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CPPFLAGS" MOD_CPPFLAGS="$MOD_CPPFLAGS $i" fi done fi fi done else { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: nghttp2 version is too old" >&5 $as_echo "$as_me: WARNING: nghttp2 version is too old" >&2;} fi CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_nghttp2" >&5 $as_echo "$ac_cv_nghttp2" >&6; } if test "x$ac_cv_nghttp2" = "xyes"; then $as_echo "#define HAVE_NGHTTP2 1" >>confdefs.h fi if test "$ac_cv_nghttp2" = "yes" ; then if test "x$enable_http2" = "xshared"; then # The only symbol which needs to be exported is the module # structure, so ask libtool to hide everything else: if test "x$MOD_PROXY_HTTP2_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_PROXY_HTTP2_LDADD to \"-export-symbols-regex proxy_http2_module\"" MOD_PROXY_HTTP2_LDADD="-export-symbols-regex proxy_http2_module" else apr_addto_bugger="-export-symbols-regex proxy_http2_module" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_PROXY_HTTP2_LDADD; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_PROXY_HTTP2_LDADD" MOD_PROXY_HTTP2_LDADD="$MOD_PROXY_HTTP2_LDADD $i" fi done fi fi else enable_proxy_http2=no fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_proxy_http2" >&5 $as_echo_n "checking whether to enable mod_proxy_http2... " >&6; } if test "$enable_proxy_http2" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_proxy_http2 has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_proxy_http2$_apmod_extra_msg" >&5 $as_echo "$enable_proxy_http2$_apmod_extra_msg" >&6; } if test "$enable_proxy_http2" != "no"; then case "$enable_proxy_http2" in static*) MODLIST="$MODLIST proxy_http2" if test "proxy_http2" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES proxy_http2" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},proxy_http2" fi ;; esac if test -z "$proxy_http2_objs"; then objects="mod_proxy_http2.lo" else objects="$proxy_http2_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_proxy_http2.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=md modpath_current=modules/md modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d md || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk md_objs="md_acme.lo md_acme_acct.lo md_acme_authz.lo md_acme_drive.lo md_acmev1_drive.lo md_acmev2_drive.lo md_acme_order.lo md_core.lo md_curl.lo md_crypt.lo md_http.lo md_json.lo md_jws.lo md_log.lo md_result.lo md_reg.lo md_status.lo md_store.lo md_store_fs.lo md_time.lo md_util.lo mod_md.lo mod_md_config.lo mod_md_drive.lo mod_md_os.lo mod_md_status.lo " # Ensure that other modules can pick up mod_md.h if test "x$INCLUDES" = "x"; then test "x$silent" != "xyes" && echo " setting INCLUDES to \"-I\$(top_srcdir)/$modpath_current\"" INCLUDES="-I\$(top_srcdir)/$modpath_current" else apr_addto_bugger="-I\$(top_srcdir)/$modpath_current" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $INCLUDES; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to INCLUDES" INCLUDES="$INCLUDES $i" fi done fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_md" >&5 $as_echo_n "checking whether to enable mod_md... " >&6; } # Check whether --enable-md was given. if test "${enable_md+set}" = set; then : enableval=$enable_md; force_md=$enableval else enable_md=most fi _apmod_extra_msg="" case "$enable_md" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_md" = "static" -o "$enable_md" = "shared"; then : elif test "$enable_md" = "yes"; then enable_md=$module_default elif test "$enable_md" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_md=$module_default else enable_md=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_md" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_md=$module_default else enable_md=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_md" = "all" -o "$enable_md" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_md=$module_default _apmod_extra_msg=" ($module_selection)" else enable_md=no fi elif test "$enable_md" = "reallyall" -o "$enable_md" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_md" != "no" ; then enable_md=$module_default _apmod_extra_msg=" ($module_selection)" else enable_md=no fi else enable_md=no fi if test "$enable_md" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL" >&5 $as_echo_n "checking for OpenSSL... " >&6; } if ${ac_cv_openssl+:} false; then : $as_echo_n "(cached) " >&6 else ac_cv_openssl=no ap_openssl_found="" ap_openssl_base="" ap_openssl_libs="" ap_openssl_mod_cflags="" ap_openssl_mod_ldflags="" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for user-provided OpenSSL base directory" >&5 $as_echo_n "checking for user-provided OpenSSL base directory... " >&6; } # Check whether --with-ssl was given. if test "${with_ssl+set}" = set; then : withval=$with_ssl; if test "x$withval" != "xyes" -a "x$withval" != "x"; then ap_openssl_base="`cd $withval ; pwd`" fi fi if test "x$ap_openssl_base" = "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: none" >&5 $as_echo "none" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_openssl_base" >&5 $as_echo "$ap_openssl_base" >&6; } fi saved_CPPFLAGS="$CPPFLAGS" saved_LIBS="$LIBS" saved_LDFLAGS="$LDFLAGS" if test -n "$PKGCONFIG"; then saved_PKG_CONFIG_PATH="$PKG_CONFIG_PATH" if test "x$ap_openssl_base" != "x" -a \ -f "${ap_openssl_base}/lib/pkgconfig/openssl.pc"; then PKG_CONFIG_PATH="${ap_openssl_base}/lib/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH fi # Check whether --enable-ssl-staticlib-deps was given. if test "${enable_ssl_staticlib_deps+set}" = set; then : enableval=$enable_ssl_staticlib_deps; if test "$enableval" = "yes"; then PKGCONFIG_LIBOPTS="--static" fi fi ap_openssl_libs="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-l --silence-errors openssl`" if test $? -eq 0; then ap_openssl_found="yes" pkglookup="`$PKGCONFIG --cflags-only-I openssl`" if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"$pkglookup\"" CPPFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"$pkglookup\"" MOD_CFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi if test "x$ab_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting ab_CFLAGS to \"$pkglookup\"" ab_CFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $ab_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to ab_CFLAGS" ab_CFLAGS="$ab_CFLAGS $i" fi done fi pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-L openssl`" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$pkglookup\"" LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$pkglookup\"" MOD_LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-other openssl`" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$pkglookup\"" LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$pkglookup\"" MOD_LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi fi PKG_CONFIG_PATH="$saved_PKG_CONFIG_PATH" fi if test "x$ap_openssl_base" != "x" -a "x$ap_openssl_found" = "x"; then if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"-I$ap_openssl_base/include\"" CPPFLAGS="-I$ap_openssl_base/include" else apr_addto_bugger="-I$ap_openssl_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"-I$ap_openssl_base/include\"" MOD_CFLAGS="-I$ap_openssl_base/include" else apr_addto_bugger="-I$ap_openssl_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi if test "x$ab_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting ab_CFLAGS to \"-I$ap_openssl_base/include\"" ab_CFLAGS="-I$ap_openssl_base/include" else apr_addto_bugger="-I$ap_openssl_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $ab_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to ab_CFLAGS" ab_CFLAGS="$ab_CFLAGS $i" fi done fi if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"-L$ap_openssl_base/lib\"" LDFLAGS="-L$ap_openssl_base/lib" else apr_addto_bugger="-L$ap_openssl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"-L$ap_openssl_base/lib\"" MOD_LDFLAGS="-L$ap_openssl_base/lib" else apr_addto_bugger="-L$ap_openssl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$ap_platform_runtime_link_flag$ap_openssl_base/lib\"" LDFLAGS="$ap_platform_runtime_link_flag$ap_openssl_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_openssl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_platform_runtime_link_flag$ap_openssl_base/lib\"" MOD_LDFLAGS="$ap_platform_runtime_link_flag$ap_openssl_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_openssl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL version >= 0.9.8a" >&5 $as_echo_n "checking for OpenSSL version >= 0.9.8a... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { #if !defined(OPENSSL_VERSION_NUMBER) #error "Missing OpenSSL version" #endif #if OPENSSL_VERSION_NUMBER < 0x0090801f #error "Unsupported OpenSSL version " OPENSSL_VERSION_TEXT #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: result: OK" >&5 $as_echo "OK" >&6; } ac_cv_openssl=yes else { $as_echo "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 $as_echo "FAILED" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext if test "x$ac_cv_openssl" = "xyes"; then ap_openssl_libs="${ap_openssl_libs:--lssl -lcrypto} `$apr_config --libs`" if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_openssl_libs\"" MOD_LDFLAGS="$ap_openssl_libs" else apr_addto_bugger="$ap_openssl_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LIBS to \"$ap_openssl_libs\"" LIBS="$ap_openssl_libs" else apr_addto_bugger="$ap_openssl_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LIBS" LIBS="$LIBS $i" fi done fi test "x$silent" != "xyes" && echo " forcing ab_LIBS to \"$MOD_LDFLAGS\"" ab_LIBS="$MOD_LDFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST ab_CFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST ab_LIBS" liberrors="" for ac_header in openssl/engine.h do : ac_fn_c_check_header_mongrel "$LINENO" "openssl/engine.h" "ac_cv_header_openssl_engine_h" "$ac_includes_default" if test "x$ac_cv_header_openssl_engine_h" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_OPENSSL_ENGINE_H 1 _ACEOF fi done for ac_func in SSL_CTX_new do : ac_fn_c_check_func "$LINENO" "SSL_CTX_new" "ac_cv_func_SSL_CTX_new" if test "x$ac_cv_func_SSL_CTX_new" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_SSL_CTX_NEW 1 _ACEOF else liberrors="yes" fi done for ac_func in ENGINE_init ENGINE_load_builtin_engines RAND_egd do : as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh` ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var" if eval test \"x\$"$as_ac_var"\" = x"yes"; then : cat >>confdefs.h <<_ACEOF #define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1 _ACEOF fi done if test "x$liberrors" != "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: OpenSSL libraries are unusable" >&5 $as_echo "$as_me: WARNING: OpenSSL libraries are unusable" >&2;} fi else { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: OpenSSL version is too old" >&5 $as_echo "$as_me: WARNING: OpenSSL version is too old" >&2;} fi CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" ap_openssl_mod_cflags=$MOD_CFLAGS ap_openssl_mod_ldflags=$MOD_LDFLAGS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_openssl" >&5 $as_echo "$ac_cv_openssl" >&6; } if test "x$ac_cv_openssl" = "xyes"; then $as_echo "#define HAVE_OPENSSL 1" >>confdefs.h if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_openssl_mod_ldflags\"" MOD_LDFLAGS="$ap_openssl_mod_ldflags" else apr_addto_bugger="$ap_openssl_mod_ldflags" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"$ap_openssl_mod_cflags\"" MOD_CFLAGS="$ap_openssl_mod_cflags" else apr_addto_bugger="$ap_openssl_mod_cflags" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi fi if test "x$ac_cv_openssl" = "xno" ; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: libssl (or compatible) not found" >&5 $as_echo "$as_me: WARNING: libssl (or compatible) not found" >&2;} enable_md=no fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for jansson" >&5 $as_echo_n "checking for jansson... " >&6; } if ${ac_cv_jansson+:} false; then : $as_echo_n "(cached) " >&6 else ac_cv_jansson=no ap_jansson_found="" ap_jansson_base="" ap_jansson_libs="" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for user-provided jansson base directory" >&5 $as_echo_n "checking for user-provided jansson base directory... " >&6; } # Check whether --with-jansson was given. if test "${with_jansson+set}" = set; then : withval=$with_jansson; if test "x$withval" != "xyes" -a "x$withval" != "x"; then ap_jansson_base="`cd $withval ; pwd`" fi fi if test "x$ap_jansson_base" = "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: none" >&5 $as_echo "none" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_jansson_base" >&5 $as_echo "$ap_jansson_base" >&6; } fi saved_CPPFLAGS="$CPPFLAGS" saved_LIBS="$LIBS" saved_LDFLAGS="$LDFLAGS" if test -n "$PKGCONFIG"; then saved_PKG_CONFIG_PATH="$PKG_CONFIG_PATH" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for pkg-config along $PKG_CONFIG_PATH" >&5 $as_echo_n "checking for pkg-config along $PKG_CONFIG_PATH... " >&6; } if test "x$ap_jansson_base" != "x" ; then if test -f "${ap_jansson_base}/lib/pkgconfig/libjansson.pc"; then PKG_CONFIG_PATH="${ap_jansson_base}/lib/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH elif test -f "${ap_jansson_base}/lib64/pkgconfig/libjansson.pc"; then PKG_CONFIG_PATH="${ap_jansson_base}/lib64/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH fi fi # Check whether --enable-jansson-staticlib-deps was given. if test "${enable_jansson_staticlib_deps+set}" = set; then : enableval=$enable_jansson_staticlib_deps; if test "$enableval" = "yes"; then PKGCONFIG_LIBOPTS="--static" fi fi ap_jansson_libs="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-l --silence-errors libjansson`" if test $? -eq 0; then ap_jansson_found="yes" pkglookup="`$PKGCONFIG --cflags-only-I libjansson`" if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"$pkglookup\"" CPPFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"$pkglookup\"" MOD_CFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-L libjansson`" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$pkglookup\"" LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$pkglookup\"" MOD_LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-other libjansson`" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$pkglookup\"" LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$pkglookup\"" MOD_LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi fi PKG_CONFIG_PATH="$saved_PKG_CONFIG_PATH" fi if test "x$ap_jansson_base" != "x" -a "x$ap_jansson_found" = "x"; then if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"-I$ap_jansson_base/include\"" CPPFLAGS="-I$ap_jansson_base/include" else apr_addto_bugger="-I$ap_jansson_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"-I$ap_jansson_base/include\"" MOD_CFLAGS="-I$ap_jansson_base/include" else apr_addto_bugger="-I$ap_jansson_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"-L$ap_jansson_base/lib\"" LDFLAGS="-L$ap_jansson_base/lib" else apr_addto_bugger="-L$ap_jansson_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"-L$ap_jansson_base/lib\"" MOD_LDFLAGS="-L$ap_jansson_base/lib" else apr_addto_bugger="-L$ap_jansson_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$ap_platform_runtime_link_flag$ap_jansson_base/lib\"" LDFLAGS="$ap_platform_runtime_link_flag$ap_jansson_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_jansson_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_platform_runtime_link_flag$ap_jansson_base/lib\"" MOD_LDFLAGS="$ap_platform_runtime_link_flag$ap_jansson_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_jansson_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi fi fi # attempts to include jansson.h fail me. So lets make sure we can at least # include its other header file cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: result: OK" >&5 $as_echo "OK" >&6; } ac_cv_jansson=yes else { $as_echo "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 $as_echo "FAILED" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext if test "x$ac_cv_jansson" = "xyes"; then ap_jansson_libs="${ap_jansson_libs:--ljansson} `$apr_config --libs`" if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_jansson_libs\"" MOD_LDFLAGS="$ap_jansson_libs" else apr_addto_bugger="$ap_jansson_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LIBS to \"$ap_jansson_libs\"" LIBS="$ap_jansson_libs" else apr_addto_bugger="$ap_jansson_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LIBS" LIBS="$LIBS $i" fi done fi fi CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_jansson" >&5 $as_echo "$ac_cv_jansson" >&6; } if test "x$ac_cv_jansson" = "xyes"; then $as_echo "#define HAVE_JANSSON 1" >>confdefs.h fi if test "x$ac_cv_jansson" != "xyes" ; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: libjansson not found" >&5 $as_echo "$as_me: WARNING: libjansson not found" >&2;} enable_md=no fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for curl" >&5 $as_echo_n "checking for curl... " >&6; } if ${ac_cv_curl+:} false; then : $as_echo_n "(cached) " >&6 else ac_cv_curl=no ap_curl_found="" ap_curl_base="" ap_curl_libs="" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for user-provided curl base directory" >&5 $as_echo_n "checking for user-provided curl base directory... " >&6; } # Check whether --with-curl was given. if test "${with_curl+set}" = set; then : withval=$with_curl; if test "x$withval" != "xyes" -a "x$withval" != "x"; then ap_curl_base="`cd $withval ; pwd`" fi fi if test "x$ap_curl_base" = "x"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: none" >&5 $as_echo "none" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ap_curl_base" >&5 $as_echo "$ap_curl_base" >&6; } fi saved_CPPFLAGS="$CPPFLAGS" saved_LIBS="$LIBS" saved_LDFLAGS="$LDFLAGS" if test -n "$PKGCONFIG"; then saved_PKG_CONFIG_PATH="$PKG_CONFIG_PATH" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for pkg-config along $PKG_CONFIG_PATH" >&5 $as_echo_n "checking for pkg-config along $PKG_CONFIG_PATH... " >&6; } if test "x$ap_curl_base" != "x" ; then if test -f "${ap_curl_base}/lib/pkgconfig/libcurl.pc"; then PKG_CONFIG_PATH="${ap_curl_base}/lib/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH elif test -f "${ap_curl_base}/lib64/pkgconfig/libcurl.pc"; then PKG_CONFIG_PATH="${ap_curl_base}/lib64/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH fi fi # Check whether --enable-curl-staticlib-deps was given. if test "${enable_curl_staticlib_deps+set}" = set; then : enableval=$enable_curl_staticlib_deps; if test "$enableval" = "yes"; then PKGCONFIG_LIBOPTS="--static" fi fi ap_curl_libs="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-l --silence-errors libcurl`" if test $? -eq 0; then ap_curl_found="yes" pkglookup="`$PKGCONFIG --cflags-only-I libcurl`" if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"$pkglookup\"" CPPFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"$pkglookup\"" MOD_CFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-L libcurl`" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$pkglookup\"" LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$pkglookup\"" MOD_LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-other libcurl`" if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$pkglookup\"" LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$pkglookup\"" MOD_LDFLAGS="$pkglookup" else apr_addto_bugger="$pkglookup" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi fi PKG_CONFIG_PATH="$saved_PKG_CONFIG_PATH" fi if test "x$ap_curl_base" != "x" -a "x$ap_curl_found" = "x"; then if test "x$CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting CPPFLAGS to \"-I$ap_curl_base/include\"" CPPFLAGS="-I$ap_curl_base/include" else apr_addto_bugger="-I$ap_curl_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to CPPFLAGS" CPPFLAGS="$CPPFLAGS $i" fi done fi if test "x$MOD_CFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CFLAGS to \"-I$ap_curl_base/include\"" MOD_CFLAGS="-I$ap_curl_base/include" else apr_addto_bugger="-I$ap_curl_base/include" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CFLAGS" MOD_CFLAGS="$MOD_CFLAGS $i" fi done fi if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"-L$ap_curl_base/lib\"" LDFLAGS="-L$ap_curl_base/lib" else apr_addto_bugger="-L$ap_curl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"-L$ap_curl_base/lib\"" MOD_LDFLAGS="-L$ap_curl_base/lib" else apr_addto_bugger="-L$ap_curl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$ap_platform_runtime_link_flag" != "x"; then if test "x$LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting LDFLAGS to \"$ap_platform_runtime_link_flag$ap_curl_base/lib\"" LDFLAGS="$ap_platform_runtime_link_flag$ap_curl_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_curl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LDFLAGS" LDFLAGS="$LDFLAGS $i" fi done fi if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_platform_runtime_link_flag$ap_curl_base/lib\"" MOD_LDFLAGS="$ap_platform_runtime_link_flag$ap_curl_base/lib" else apr_addto_bugger="$ap_platform_runtime_link_flag$ap_curl_base/lib" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi fi fi for ac_header in curl/curl.h do : ac_fn_c_check_header_mongrel "$LINENO" "curl/curl.h" "ac_cv_header_curl_curl_h" "$ac_includes_default" if test "x$ac_cv_header_curl_curl_h" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_CURL_CURL_H 1 _ACEOF fi done { $as_echo "$as_me:${as_lineno-$LINENO}: checking for curl version >= 7.50" >&5 $as_echo_n "checking for curl version >= 7.50... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { #if !defined(LIBCURL_VERSION_MAJOR) #error "Missing libcurl version" #endif #if LIBCURL_VERSION_MAJOR < 7 #error "Unsupported libcurl version " LIBCURL_VERSION #endif #if LIBCURL_VERSION_MAJOR == 7 && LIBCURL_VERSION_MINOR < 50 #error "Unsupported libcurl version " LIBCURL_VERSION #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: result: OK" >&5 $as_echo "OK" >&6; } ac_cv_curl=yes else { $as_echo "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 $as_echo "FAILED" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext if test "x$ac_cv_curl" = "xyes"; then ap_curl_libs="${ap_curl_libs:--lcurl} `$apr_config --libs`" if test "x$MOD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_LDFLAGS to \"$ap_curl_libs\"" MOD_LDFLAGS="$ap_curl_libs" else apr_addto_bugger="$ap_curl_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_LDFLAGS" MOD_LDFLAGS="$MOD_LDFLAGS $i" fi done fi if test "x$LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting LIBS to \"$ap_curl_libs\"" LIBS="$ap_curl_libs" else apr_addto_bugger="$ap_curl_libs" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to LIBS" LIBS="$LIBS $i" fi done fi fi CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_curl" >&5 $as_echo "$ac_cv_curl" >&6; } if test "x$ac_cv_curl" = "xyes"; then $as_echo "#define HAVE_CURL 1" >>confdefs.h fi if test "x$ac_cv_curl" != "xyes" ; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: libcurl not found" >&5 $as_echo "$as_me: WARNING: libcurl not found" >&2;} enable_md=no fi for ac_func in arc4random_buf do : ac_fn_c_check_func "$LINENO" "arc4random_buf" "ac_cv_func_arc4random_buf" if test "x$ac_cv_func_arc4random_buf" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_ARC4RANDOM_BUF 1 _ACEOF if test "x$MOD_CPPFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_CPPFLAGS to \""-DMD_HAVE_ARC4RANDOM"\"" MOD_CPPFLAGS=""-DMD_HAVE_ARC4RANDOM"" else apr_addto_bugger=""-DMD_HAVE_ARC4RANDOM"" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_CPPFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_CPPFLAGS" MOD_CPPFLAGS="$MOD_CPPFLAGS $i" fi done fi fi done if test "x$enable_md" = "xshared"; then if test "x$MOD_MD_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_MD_LDADD to \"-export-symbols-regex md_module\"" MOD_MD_LDADD="-export-symbols-regex md_module" else apr_addto_bugger="-export-symbols-regex md_module" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $MOD_MD_LDADD; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_MD_LDADD" MOD_MD_LDADD="$MOD_MD_LDADD $i" fi done fi fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_md" >&5 $as_echo_n "checking whether to enable mod_md... " >&6; } if test "$enable_md" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_md has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_md$_apmod_extra_msg" >&5 $as_echo "$enable_md$_apmod_extra_msg" >&6; } if test "$enable_md" != "no"; then case "$enable_md" in static*) MODLIST="$MODLIST md" if test "md" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES md" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},md" fi ;; esac if test -z "$md_objs"; then objects="mod_md.lo" else objects="$md_objs" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_md.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=proxy/balancers modpath_current=modules/proxy/balancers modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d proxy/balancers || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_lbmethod_byrequests" >&5 $as_echo_n "checking whether to enable mod_lbmethod_byrequests... " >&6; } # Check whether --enable-lbmethod-byrequests was given. if test "${enable_lbmethod_byrequests+set}" = set; then : enableval=$enable_lbmethod_byrequests; force_lbmethod_byrequests=$enableval else enable_lbmethod_byrequests=$enable_proxy_balancer fi _apmod_extra_msg="" case "$enable_lbmethod_byrequests" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_lbmethod_byrequests" = "static" -o "$enable_lbmethod_byrequests" = "shared"; then : elif test "$enable_lbmethod_byrequests" = "yes"; then enable_lbmethod_byrequests=$module_default elif test "$enable_lbmethod_byrequests" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_lbmethod_byrequests=$module_default else enable_lbmethod_byrequests=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_lbmethod_byrequests" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_lbmethod_byrequests=$module_default else enable_lbmethod_byrequests=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_lbmethod_byrequests" = "all" -o "$enable_lbmethod_byrequests" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_lbmethod_byrequests=$module_default _apmod_extra_msg=" ($module_selection)" else enable_lbmethod_byrequests=no fi elif test "$enable_lbmethod_byrequests" = "reallyall" -o "$enable_lbmethod_byrequests" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_lbmethod_byrequests" != "no" ; then enable_lbmethod_byrequests=$module_default _apmod_extra_msg=" ($module_selection)" else enable_lbmethod_byrequests=no fi else enable_lbmethod_byrequests=no fi if test "$enable_lbmethod_byrequests" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy_balancer" = "no" ; then enable_lbmethod_byrequests=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy_balancer is disabled but required for mod_lbmethod_byrequests\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy_balancer is disabled but required for mod_lbmethod_byrequests\"" >&2;} elif test "$enable_lbmethod_byrequests" = "static" && test "$enable_proxy_balancer" != "static" ; then enable_lbmethod_byrequests=$enable_proxy_balancer { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_lbmethod_byrequests shared because mod_proxy_balancer is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_lbmethod_byrequests shared because mod_proxy_balancer is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_lbmethod_byrequests" >&5 $as_echo_n "checking whether to enable mod_lbmethod_byrequests... " >&6; } if test "$enable_lbmethod_byrequests" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_lbmethod_byrequests has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_lbmethod_byrequests$_apmod_extra_msg" >&5 $as_echo "$enable_lbmethod_byrequests$_apmod_extra_msg" >&6; } if test "$enable_lbmethod_byrequests" != "no"; then case "$enable_lbmethod_byrequests" in static*) MODLIST="$MODLIST lbmethod_byrequests" if test "lbmethod_byrequests" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES lbmethod_byrequests" if test "$enable_proxy_balancer" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},lbmethod_byrequests" fi ;; esac if test -z ""; then objects="mod_lbmethod_byrequests.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_lbmethod_byrequests.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_lbmethod_bytraffic... " >&6; } # Check whether --enable-lbmethod-bytraffic was given. if test "${enable_lbmethod_bytraffic+set}" = set; then : enableval=$enable_lbmethod_bytraffic; force_lbmethod_bytraffic=$enableval else enable_lbmethod_bytraffic=$enable_proxy_balancer fi _apmod_extra_msg="" case "$enable_lbmethod_bytraffic" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_lbmethod_bytraffic" = "static" -o "$enable_lbmethod_bytraffic" = "shared"; then : elif test "$enable_lbmethod_bytraffic" = "yes"; then enable_lbmethod_bytraffic=$module_default elif test "$enable_lbmethod_bytraffic" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_lbmethod_bytraffic=$module_default else enable_lbmethod_bytraffic=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_lbmethod_bytraffic" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_lbmethod_bytraffic=$module_default else enable_lbmethod_bytraffic=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_lbmethod_bytraffic" = "all" -o "$enable_lbmethod_bytraffic" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_lbmethod_bytraffic=$module_default _apmod_extra_msg=" ($module_selection)" else enable_lbmethod_bytraffic=no fi elif test "$enable_lbmethod_bytraffic" = "reallyall" -o "$enable_lbmethod_bytraffic" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_lbmethod_bytraffic" != "no" ; then enable_lbmethod_bytraffic=$module_default _apmod_extra_msg=" ($module_selection)" else enable_lbmethod_bytraffic=no fi else enable_lbmethod_bytraffic=no fi if test "$enable_lbmethod_bytraffic" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy_balancer" = "no" ; then enable_lbmethod_bytraffic=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy_balancer is disabled but required for mod_lbmethod_bytraffic\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy_balancer is disabled but required for mod_lbmethod_bytraffic\"" >&2;} elif test "$enable_lbmethod_bytraffic" = "static" && test "$enable_proxy_balancer" != "static" ; then enable_lbmethod_bytraffic=$enable_proxy_balancer { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_lbmethod_bytraffic shared because mod_proxy_balancer is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_lbmethod_bytraffic shared because mod_proxy_balancer is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_lbmethod_bytraffic" >&5 $as_echo_n "checking whether to enable mod_lbmethod_bytraffic... " >&6; } if test "$enable_lbmethod_bytraffic" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_lbmethod_bytraffic has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_lbmethod_bytraffic$_apmod_extra_msg" >&5 $as_echo "$enable_lbmethod_bytraffic$_apmod_extra_msg" >&6; } if test "$enable_lbmethod_bytraffic" != "no"; then case "$enable_lbmethod_bytraffic" in static*) MODLIST="$MODLIST lbmethod_bytraffic" if test "lbmethod_bytraffic" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES lbmethod_bytraffic" if test "$enable_proxy_balancer" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},lbmethod_bytraffic" fi ;; esac if test -z ""; then objects="mod_lbmethod_bytraffic.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_lbmethod_bytraffic.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_lbmethod_bybusyness... " >&6; } # Check whether --enable-lbmethod-bybusyness was given. if test "${enable_lbmethod_bybusyness+set}" = set; then : enableval=$enable_lbmethod_bybusyness; force_lbmethod_bybusyness=$enableval else enable_lbmethod_bybusyness=$enable_proxy_balancer fi _apmod_extra_msg="" case "$enable_lbmethod_bybusyness" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_lbmethod_bybusyness" = "static" -o "$enable_lbmethod_bybusyness" = "shared"; then : elif test "$enable_lbmethod_bybusyness" = "yes"; then enable_lbmethod_bybusyness=$module_default elif test "$enable_lbmethod_bybusyness" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_lbmethod_bybusyness=$module_default else enable_lbmethod_bybusyness=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_lbmethod_bybusyness" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_lbmethod_bybusyness=$module_default else enable_lbmethod_bybusyness=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_lbmethod_bybusyness" = "all" -o "$enable_lbmethod_bybusyness" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_lbmethod_bybusyness=$module_default _apmod_extra_msg=" ($module_selection)" else enable_lbmethod_bybusyness=no fi elif test "$enable_lbmethod_bybusyness" = "reallyall" -o "$enable_lbmethod_bybusyness" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_lbmethod_bybusyness" != "no" ; then enable_lbmethod_bybusyness=$module_default _apmod_extra_msg=" ($module_selection)" else enable_lbmethod_bybusyness=no fi else enable_lbmethod_bybusyness=no fi if test "$enable_lbmethod_bybusyness" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy_balancer" = "no" ; then enable_lbmethod_bybusyness=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy_balancer is disabled but required for mod_lbmethod_bybusyness\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy_balancer is disabled but required for mod_lbmethod_bybusyness\"" >&2;} elif test "$enable_lbmethod_bybusyness" = "static" && test "$enable_proxy_balancer" != "static" ; then enable_lbmethod_bybusyness=$enable_proxy_balancer { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_lbmethod_bybusyness shared because mod_proxy_balancer is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_lbmethod_bybusyness shared because mod_proxy_balancer is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_lbmethod_bybusyness" >&5 $as_echo_n "checking whether to enable mod_lbmethod_bybusyness... " >&6; } if test "$enable_lbmethod_bybusyness" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_lbmethod_bybusyness has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_lbmethod_bybusyness$_apmod_extra_msg" >&5 $as_echo "$enable_lbmethod_bybusyness$_apmod_extra_msg" >&6; } if test "$enable_lbmethod_bybusyness" != "no"; then case "$enable_lbmethod_bybusyness" in static*) MODLIST="$MODLIST lbmethod_bybusyness" if test "lbmethod_bybusyness" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES lbmethod_bybusyness" if test "$enable_proxy_balancer" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},lbmethod_bybusyness" fi ;; esac if test -z ""; then objects="mod_lbmethod_bybusyness.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_lbmethod_bybusyness.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_lbmethod_heartbeat... " >&6; } # Check whether --enable-lbmethod-heartbeat was given. if test "${enable_lbmethod_heartbeat+set}" = set; then : enableval=$enable_lbmethod_heartbeat; force_lbmethod_heartbeat=$enableval else enable_lbmethod_heartbeat=$enable_proxy_balancer fi _apmod_extra_msg="" case "$enable_lbmethod_heartbeat" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_lbmethod_heartbeat" = "static" -o "$enable_lbmethod_heartbeat" = "shared"; then : elif test "$enable_lbmethod_heartbeat" = "yes"; then enable_lbmethod_heartbeat=$module_default elif test "$enable_lbmethod_heartbeat" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_lbmethod_heartbeat=$module_default else enable_lbmethod_heartbeat=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_lbmethod_heartbeat" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_lbmethod_heartbeat=$module_default else enable_lbmethod_heartbeat=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_lbmethod_heartbeat" = "all" -o "$enable_lbmethod_heartbeat" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_lbmethod_heartbeat=$module_default _apmod_extra_msg=" ($module_selection)" else enable_lbmethod_heartbeat=no fi elif test "$enable_lbmethod_heartbeat" = "reallyall" -o "$enable_lbmethod_heartbeat" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_lbmethod_heartbeat" != "no" ; then enable_lbmethod_heartbeat=$module_default _apmod_extra_msg=" ($module_selection)" else enable_lbmethod_heartbeat=no fi else enable_lbmethod_heartbeat=no fi if test "$enable_lbmethod_heartbeat" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_proxy_balancer" = "no" ; then enable_lbmethod_heartbeat=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_proxy_balancer is disabled but required for mod_lbmethod_heartbeat\"" >&5 $as_echo "$as_me: WARNING: \"mod_proxy_balancer is disabled but required for mod_lbmethod_heartbeat\"" >&2;} elif test "$enable_lbmethod_heartbeat" = "static" && test "$enable_proxy_balancer" != "static" ; then enable_lbmethod_heartbeat=$enable_proxy_balancer { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_lbmethod_heartbeat shared because mod_proxy_balancer is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_lbmethod_heartbeat shared because mod_proxy_balancer is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_lbmethod_heartbeat" >&5 $as_echo_n "checking whether to enable mod_lbmethod_heartbeat... " >&6; } if test "$enable_lbmethod_heartbeat" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_lbmethod_heartbeat has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_lbmethod_heartbeat$_apmod_extra_msg" >&5 $as_echo "$enable_lbmethod_heartbeat$_apmod_extra_msg" >&6; } if test "$enable_lbmethod_heartbeat" != "no"; then case "$enable_lbmethod_heartbeat" in static*) MODLIST="$MODLIST lbmethod_heartbeat" if test "lbmethod_heartbeat" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES lbmethod_heartbeat" if test "$enable_proxy_balancer" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},lbmethod_heartbeat" fi ;; esac if test -z ""; then objects="mod_lbmethod_heartbeat.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_lbmethod_heartbeat.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" { $as_echo "$as_me:${as_lineno-$LINENO}: checking which MPM to use by default" >&5 $as_echo_n "checking which MPM to use by default... " >&6; } # Check whether --with-mpm was given. if test "${with_mpm+set}" = set; then : withval=$with_mpm; default_mpm=$withval { $as_echo "$as_me:${as_lineno-$LINENO}: result: $withval" >&5 $as_echo "$withval" >&6; }; else if ap_mpm_is_supported "winnt"; then default_mpm=winnt { $as_echo "$as_me:${as_lineno-$LINENO}: result: winnt" >&5 $as_echo "winnt" >&6; } elif ap_mpm_is_supported "mpmt_os2"; then default_mpm=mpmt_os2 { $as_echo "$as_me:${as_lineno-$LINENO}: result: mpmt_os2" >&5 $as_echo "mpmt_os2" >&6; } elif ap_mpm_is_supported "event"; then default_mpm=event { $as_echo "$as_me:${as_lineno-$LINENO}: result: event" >&5 $as_echo "event" >&6; } elif ap_mpm_is_supported "worker"; then default_mpm=worker { $as_echo "$as_me:${as_lineno-$LINENO}: result: worker - event is not supported" >&5 $as_echo "worker - event is not supported" >&6; } else default_mpm=prefork { $as_echo "$as_me:${as_lineno-$LINENO}: result: prefork - event and worker are not supported" >&5 $as_echo "prefork - event and worker are not supported" >&6; } fi fi if ap_mpm_is_enabled $default_mpm; then : else eval "ap_enabled_mpm_$default_mpm=yes" ap_enabled_mpms="$ap_enabled_mpms $default_mpm " fi # Check whether --enable-mpms-shared was given. if test "${enable_mpms_shared+set}" = set; then : enableval=$enable_mpms_shared; if test "$enableval" = "no"; then mpm_build=static else mpm_build=shared if test "$enableval" = "yes"; then enableval=$default_mpm fi for i in $enableval; do if test "$i" = "all"; then for j in $ap_supported_shared_mpms; do eval "enable_mpm_$j=shared" if ap_mpm_is_enabled $j; then : else eval "ap_enabled_mpm_$j=yes" ap_enabled_mpms="$ap_enabled_mpms $j " fi done else i=`echo $i | sed 's/-/_/g'` if ap_mpm_supports_shared $i; then eval "enable_mpm_$i=shared" if ap_mpm_is_enabled $i; then : else eval "ap_enabled_mpm_$i=yes" ap_enabled_mpms="$ap_enabled_mpms $i " fi else as_fn_error $? "MPM $i does not support dynamic loading." "$LINENO" 5 fi fi done fi else mpm_build=static fi for i in $ap_enabled_mpms; do if ap_mpm_is_supported $i; then : else as_fn_error $? "MPM $i is not supported on this platform." "$LINENO" 5 fi done if test $mpm_build = "shared"; then eval "tmp=\$enable_mpm_$default_mpm" if test "$tmp" != "shared"; then as_fn_error $? "The default MPM ($default_mpm) must be included in --enable-mpms-shared. Use --with-mpm to change the default MPM." "$LINENO" 5 fi fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES server/mpm/Makefile" if test $mpm_build = "shared"; then MPM_LIB="" else MPM_LIB=server/mpm/$default_mpm/lib${default_mpm}.la MODLIST="$MODLIST mpm_${default_mpm}" fi MPM_SUBDIRS=$ap_enabled_mpms APACHE_VAR_SUBST="$APACHE_VAR_SUBST MPM_SUBDIRS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST MPM_LIB" APACHE_VAR_SUBST="$APACHE_VAR_SUBST MOD_MPM_EVENT_LDADD" if ap_mpm_is_enabled event; then if test -z "event.lo"; then objects="event.lo" else objects="event.lo" fi if test -z ""; then mpmpath="server/mpm/event" else mpmpath= fi test -d $mpmpath || $srcdir/build/mkdir.sh $mpmpath APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $mpmpath/Makefile" if test -z "$enable_mpm_event"; then if test "x$AP_LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting AP_LIBS to \"\$(MOD_MPM_EVENT_LDADD)\"" AP_LIBS="\$(MOD_MPM_EVENT_LDADD)" else apr_addto_bugger="\$(MOD_MPM_EVENT_LDADD)" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $AP_LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to AP_LIBS" AP_LIBS="$AP_LIBS $i" fi done fi libname="libevent.la" cat >$mpmpath/modules.mk<$mpmpath/modules.mk<>confdefs.h <<_ACEOF #define HAVE_PTHREAD_KILL 1 _ACEOF fi done fi if ap_mpm_is_enabled prefork; then if test -z ""; then objects="prefork.lo" else objects="" fi if test -z ""; then mpmpath="server/mpm/prefork" else mpmpath= fi test -d $mpmpath || $srcdir/build/mkdir.sh $mpmpath APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $mpmpath/Makefile" if test -z "$enable_mpm_prefork"; then if test "x$AP_LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting AP_LIBS to \"\"" AP_LIBS="" else apr_addto_bugger="" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $AP_LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to AP_LIBS" AP_LIBS="$AP_LIBS $i" fi done fi libname="libprefork.la" cat >$mpmpath/modules.mk<$mpmpath/modules.mk<$mpmpath/modules.mk<$mpmpath/modules.mk<$mpmpath/modules.mk<$mpmpath/modules.mk<>confdefs.h <<_ACEOF #define HAVE_PTHREAD_KILL 1 _ACEOF fi done fi current_dir=arch/unix modpath_current=modules/arch/unix modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d arch/unix || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk if ap_mpm_is_enabled "worker" \ || ap_mpm_is_enabled "event" \ || ap_mpm_is_enabled "prefork"; then unixd_mods_enable=yes else unixd_mods_enable=no fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_unixd" >&5 $as_echo_n "checking whether to enable mod_unixd... " >&6; } # Check whether --enable-unixd was given. if test "${enable_unixd+set}" = set; then : enableval=$enable_unixd; force_unixd=$enableval else enable_unixd=$unixd_mods_enable fi _apmod_extra_msg="" case "$enable_unixd" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_unixd" = "static" -o "$enable_unixd" = "shared"; then : elif test "$enable_unixd" = "yes"; then enable_unixd=$module_default elif test "$enable_unixd" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_unixd=$module_default else enable_unixd=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_unixd" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_unixd=$module_default else enable_unixd=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_unixd" = "all" -o "$enable_unixd" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_unixd=$module_default _apmod_extra_msg=" ($module_selection)" else enable_unixd=no fi elif test "$enable_unixd" = "reallyall" -o "$enable_unixd" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_unixd" != "no" ; then enable_unixd=$module_default _apmod_extra_msg=" ($module_selection)" else enable_unixd=no fi else enable_unixd=no fi if test "$enable_unixd" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_unixd$_apmod_extra_msg" >&5 $as_echo "$enable_unixd$_apmod_extra_msg" >&6; } if test "$enable_unixd" != "no"; then case "$enable_unixd" in static*) MODLIST="$MODLIST unixd" if test "unixd" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES unixd" if test "$unixd_mods_enable" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},unixd" fi ;; esac if test -z ""; then objects="mod_unixd.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_unixd.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_privileges... " >&6; } # Check whether --enable-privileges was given. if test "${enable_privileges+set}" = set; then : enableval=$enable_privileges; force_privileges=$enableval else enable_privileges=no fi _apmod_extra_msg="" case "$enable_privileges" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_privileges" = "static" -o "$enable_privileges" = "shared"; then : elif test "$enable_privileges" = "yes"; then enable_privileges=$module_default elif test "$enable_privileges" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_privileges=$module_default else enable_privileges=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_privileges" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_privileges=$module_default else enable_privileges=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_privileges" = "all" -o "$enable_privileges" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_privileges=$module_default _apmod_extra_msg=" ($module_selection)" else enable_privileges=no fi elif test "$enable_privileges" = "reallyall" -o "$enable_privileges" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_privileges" != "no" ; then enable_privileges=$module_default _apmod_extra_msg=" ($module_selection)" else enable_privileges=no fi else enable_privileges=no fi if test "$enable_privileges" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : for ac_header in priv.h do : ac_fn_c_check_header_mongrel "$LINENO" "priv.h" "ac_cv_header_priv_h" "$ac_includes_default" if test "x$ac_cv_header_priv_h" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_PRIV_H 1 _ACEOF ap_HAVE_PRIV_H="yes" else ap_HAVE_PRIV_H="no" fi done if test $ap_HAVE_PRIV_H = "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Your system does not support privileges." >&5 $as_echo "$as_me: WARNING: Your system does not support privileges." >&2;} enable_privileges="no" fi : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_privileges" >&5 $as_echo_n "checking whether to enable mod_privileges... " >&6; } if test "$enable_privileges" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_privileges has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_privileges$_apmod_extra_msg" >&5 $as_echo "$enable_privileges$_apmod_extra_msg" >&6; } if test "$enable_privileges" != "no"; then case "$enable_privileges" in static*) MODLIST="$MODLIST privileges" if test "privileges" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES privileges" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},privileges" fi ;; esac if test -z ""; then objects="mod_privileges.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_privileges.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=cluster modpath_current=modules/cluster modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d cluster || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk heartbeat_objects='mod_heartbeat.lo' case "$host" in *os2*) # OS/2 DLLs must resolve all symbols at build time # and we need some from the watchdog module heartbeat_objects="$heartbeat_objects ../core/mod_watchdog.la" ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_heartbeat" >&5 $as_echo_n "checking whether to enable mod_heartbeat... " >&6; } # Check whether --enable-heartbeat was given. if test "${enable_heartbeat+set}" = set; then : enableval=$enable_heartbeat; force_heartbeat=$enableval else enable_heartbeat=maybe-all fi _apmod_extra_msg="" case "$enable_heartbeat" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_heartbeat" = "static" -o "$enable_heartbeat" = "shared"; then : elif test "$enable_heartbeat" = "yes"; then enable_heartbeat=$module_default elif test "$enable_heartbeat" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_heartbeat=$module_default else enable_heartbeat=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_heartbeat" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_heartbeat=$module_default else enable_heartbeat=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_heartbeat" = "all" -o "$enable_heartbeat" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_heartbeat=$module_default _apmod_extra_msg=" ($module_selection)" else enable_heartbeat=no fi elif test "$enable_heartbeat" = "reallyall" -o "$enable_heartbeat" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_heartbeat" != "no" ; then enable_heartbeat=$module_default _apmod_extra_msg=" ($module_selection)" else enable_heartbeat=no fi else enable_heartbeat=no fi if test "$enable_heartbeat" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_watchdog" = "no" ; then enable_heartbeat=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_watchdog is disabled but required for mod_heartbeat\"" >&5 $as_echo "$as_me: WARNING: \"mod_watchdog is disabled but required for mod_heartbeat\"" >&2;} elif test "$enable_heartbeat" = "static" && test "$enable_watchdog" != "static" ; then enable_heartbeat=$enable_watchdog { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_heartbeat shared because mod_watchdog is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_heartbeat shared because mod_watchdog is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_heartbeat" >&5 $as_echo_n "checking whether to enable mod_heartbeat... " >&6; } if test "$enable_heartbeat" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_heartbeat has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_heartbeat$_apmod_extra_msg" >&5 $as_echo "$enable_heartbeat$_apmod_extra_msg" >&6; } if test "$enable_heartbeat" != "no"; then case "$enable_heartbeat" in static*) MODLIST="$MODLIST heartbeat" if test "heartbeat" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES heartbeat" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},heartbeat" fi ;; esac if test -z "$heartbeat_objects"; then objects="mod_heartbeat.lo" else objects="$heartbeat_objects" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_heartbeat.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_heartmonitor... " >&6; } # Check whether --enable-heartmonitor was given. if test "${enable_heartmonitor+set}" = set; then : enableval=$enable_heartmonitor; force_heartmonitor=$enableval else enable_heartmonitor=maybe-all fi _apmod_extra_msg="" case "$enable_heartmonitor" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_heartmonitor" = "static" -o "$enable_heartmonitor" = "shared"; then : elif test "$enable_heartmonitor" = "yes"; then enable_heartmonitor=$module_default elif test "$enable_heartmonitor" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_heartmonitor=$module_default else enable_heartmonitor=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_heartmonitor" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_heartmonitor=$module_default else enable_heartmonitor=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_heartmonitor" = "all" -o "$enable_heartmonitor" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_heartmonitor=$module_default _apmod_extra_msg=" ($module_selection)" else enable_heartmonitor=no fi elif test "$enable_heartmonitor" = "reallyall" -o "$enable_heartmonitor" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_heartmonitor" != "no" ; then enable_heartmonitor=$module_default _apmod_extra_msg=" ($module_selection)" else enable_heartmonitor=no fi else enable_heartmonitor=no fi if test "$enable_heartmonitor" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_heartmonitor$_apmod_extra_msg" >&5 $as_echo "$enable_heartmonitor$_apmod_extra_msg" >&6; } if test "$enable_heartmonitor" != "no"; then case "$enable_heartmonitor" in static*) MODLIST="$MODLIST heartmonitor" if test "heartmonitor" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES heartmonitor" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},heartmonitor" fi ;; esac if test -z ""; then objects="mod_heartmonitor.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_heartmonitor.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=dav/main modpath_current=modules/dav/main modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d dav/main || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk dav_objects="mod_dav.lo props.lo util.lo util_lock.lo liveprop.lo providers.lo std_liveprop.lo" if test "$enable_http" = "no"; then dav_enable=no else dav_enable=most fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_dav" >&5 $as_echo_n "checking whether to enable mod_dav... " >&6; } # Check whether --enable-dav was given. if test "${enable_dav+set}" = set; then : enableval=$enable_dav; force_dav=$enableval else enable_dav=$dav_enable fi _apmod_extra_msg="" case "$enable_dav" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_dav" = "static" -o "$enable_dav" = "shared"; then : elif test "$enable_dav" = "yes"; then enable_dav=$module_default elif test "$enable_dav" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_dav=$module_default else enable_dav=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_dav" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_dav=$module_default else enable_dav=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_dav" = "all" -o "$enable_dav" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_dav=$module_default _apmod_extra_msg=" ($module_selection)" else enable_dav=no fi elif test "$enable_dav" = "reallyall" -o "$enable_dav" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_dav" != "no" ; then enable_dav=$module_default _apmod_extra_msg=" ($module_selection)" else enable_dav=no fi else enable_dav=no fi if test "$enable_dav" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_dav$_apmod_extra_msg" >&5 $as_echo "$enable_dav$_apmod_extra_msg" >&6; } if test "$enable_dav" != "no"; then case "$enable_dav" in static*) MODLIST="$MODLIST dav" if test "dav" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES dav" if test "$dav_enable" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},dav" fi ;; esac if test -z "$dav_objects"; then objects="mod_dav.lo" else objects="$dav_objects" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_dav.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=generators modpath_current=modules/generators modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d generators || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_status" >&5 $as_echo_n "checking whether to enable mod_status... " >&6; } # Check whether --enable-status was given. if test "${enable_status+set}" = set; then : enableval=$enable_status; force_status=$enableval else enable_status=yes fi _apmod_extra_msg="" case "$enable_status" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_status" = "static" -o "$enable_status" = "shared"; then : elif test "$enable_status" = "yes"; then enable_status=$module_default elif test "$enable_status" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_status=$module_default else enable_status=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_status" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_status=$module_default else enable_status=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_status" = "all" -o "$enable_status" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_status=$module_default _apmod_extra_msg=" ($module_selection)" else enable_status=no fi elif test "$enable_status" = "reallyall" -o "$enable_status" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_status" != "no" ; then enable_status=$module_default _apmod_extra_msg=" ($module_selection)" else enable_status=no fi else enable_status=no fi if test "$enable_status" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_status$_apmod_extra_msg" >&5 $as_echo "$enable_status$_apmod_extra_msg" >&6; } if test "$enable_status" != "no"; then case "$enable_status" in static*) MODLIST="$MODLIST status" if test "status" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES status" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},status" fi ;; esac if test -z ""; then objects="mod_status.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_status.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_autoindex... " >&6; } # Check whether --enable-autoindex was given. if test "${enable_autoindex+set}" = set; then : enableval=$enable_autoindex; force_autoindex=$enableval else enable_autoindex=yes fi _apmod_extra_msg="" case "$enable_autoindex" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_autoindex" = "static" -o "$enable_autoindex" = "shared"; then : elif test "$enable_autoindex" = "yes"; then enable_autoindex=$module_default elif test "$enable_autoindex" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_autoindex=$module_default else enable_autoindex=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_autoindex" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_autoindex=$module_default else enable_autoindex=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_autoindex" = "all" -o "$enable_autoindex" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_autoindex=$module_default _apmod_extra_msg=" ($module_selection)" else enable_autoindex=no fi elif test "$enable_autoindex" = "reallyall" -o "$enable_autoindex" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_autoindex" != "no" ; then enable_autoindex=$module_default _apmod_extra_msg=" ($module_selection)" else enable_autoindex=no fi else enable_autoindex=no fi if test "$enable_autoindex" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_autoindex$_apmod_extra_msg" >&5 $as_echo "$enable_autoindex$_apmod_extra_msg" >&6; } if test "$enable_autoindex" != "no"; then case "$enable_autoindex" in static*) MODLIST="$MODLIST autoindex" if test "autoindex" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES autoindex" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},autoindex" fi ;; esac if test -z ""; then objects="mod_autoindex.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_autoindex.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_asis... " >&6; } # Check whether --enable-asis was given. if test "${enable_asis+set}" = set; then : enableval=$enable_asis; force_asis=$enableval else enable_asis=maybe-all fi _apmod_extra_msg="" case "$enable_asis" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_asis" = "static" -o "$enable_asis" = "shared"; then : elif test "$enable_asis" = "yes"; then enable_asis=$module_default elif test "$enable_asis" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_asis=$module_default else enable_asis=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_asis" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_asis=$module_default else enable_asis=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_asis" = "all" -o "$enable_asis" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_asis=$module_default _apmod_extra_msg=" ($module_selection)" else enable_asis=no fi elif test "$enable_asis" = "reallyall" -o "$enable_asis" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_asis" != "no" ; then enable_asis=$module_default _apmod_extra_msg=" ($module_selection)" else enable_asis=no fi else enable_asis=no fi if test "$enable_asis" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_asis$_apmod_extra_msg" >&5 $as_echo "$enable_asis$_apmod_extra_msg" >&6; } if test "$enable_asis" != "no"; then case "$enable_asis" in static*) MODLIST="$MODLIST asis" if test "asis" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES asis" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},asis" fi ;; esac if test -z ""; then objects="mod_asis.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_asis.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_info... " >&6; } # Check whether --enable-info was given. if test "${enable_info+set}" = set; then : enableval=$enable_info; force_info=$enableval else enable_info=most fi _apmod_extra_msg="" case "$enable_info" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_info" = "static" -o "$enable_info" = "shared"; then : elif test "$enable_info" = "yes"; then enable_info=$module_default elif test "$enable_info" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_info=$module_default else enable_info=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_info" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_info=$module_default else enable_info=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_info" = "all" -o "$enable_info" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_info=$module_default _apmod_extra_msg=" ($module_selection)" else enable_info=no fi elif test "$enable_info" = "reallyall" -o "$enable_info" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_info" != "no" ; then enable_info=$module_default _apmod_extra_msg=" ($module_selection)" else enable_info=no fi else enable_info=no fi if test "$enable_info" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_info$_apmod_extra_msg" >&5 $as_echo "$enable_info$_apmod_extra_msg" >&6; } if test "$enable_info" != "no"; then case "$enable_info" in static*) MODLIST="$MODLIST info" if test "info" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES info" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},info" fi ;; esac if test -z ""; then objects="mod_info.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_info.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_suexec... " >&6; } # Check whether --enable-suexec was given. if test "${enable_suexec+set}" = set; then : enableval=$enable_suexec; force_suexec=$enableval else enable_suexec=no fi _apmod_extra_msg="" case "$enable_suexec" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_suexec" = "static" -o "$enable_suexec" = "shared"; then : elif test "$enable_suexec" = "yes"; then enable_suexec=$module_default elif test "$enable_suexec" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_suexec=$module_default else enable_suexec=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_suexec" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_suexec=$module_default else enable_suexec=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_suexec" = "all" -o "$enable_suexec" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_suexec=$module_default _apmod_extra_msg=" ($module_selection)" else enable_suexec=no fi elif test "$enable_suexec" = "reallyall" -o "$enable_suexec" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_suexec" != "no" ; then enable_suexec=$module_default _apmod_extra_msg=" ($module_selection)" else enable_suexec=no fi else enable_suexec=no fi if test "$enable_suexec" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : other_targets=suexec : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_suexec" >&5 $as_echo_n "checking whether to enable mod_suexec... " >&6; } if test "$enable_suexec" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_suexec has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_suexec$_apmod_extra_msg" >&5 $as_echo "$enable_suexec$_apmod_extra_msg" >&6; } if test "$enable_suexec" != "no"; then case "$enable_suexec" in static*) MODLIST="$MODLIST suexec" if test "suexec" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES suexec" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},suexec" fi ;; esac if test -z ""; then objects="mod_suexec.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_suexec.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_cgid... " >&6; } # Check whether --enable-cgid was given. if test "${enable_cgid+set}" = set; then : enableval=$enable_cgid; force_cgid=$enableval else enable_cgid=most fi _apmod_extra_msg="" case "$enable_cgid" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_cgid" = "static" -o "$enable_cgid" = "shared"; then : elif test "$enable_cgid" = "yes"; then enable_cgid=$module_default elif test "$enable_cgid" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cgid=$module_default else enable_cgid=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cgid" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_cgid=$module_default else enable_cgid=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cgid" = "all" -o "$enable_cgid" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cgid=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cgid=no fi elif test "$enable_cgid" = "reallyall" -o "$enable_cgid" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_cgid" != "no" ; then enable_cgid=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cgid=no fi else enable_cgid=no fi if test "$enable_cgid" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } : case $host in *-solaris2*) case `uname -r` in 5.10) case `uname -p` in i386) patch_id="120665" ;; sparc) patch_id="120664" ;; *) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Unknown platform" >&5 $as_echo "$as_me: WARNING: Unknown platform" >&2;} patch_id="120664" ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking for Solaris patch $patch_id" >&5 $as_echo_n "checking for Solaris patch $patch_id... " >&6; } showrev -p | grep "$patch_id" >/dev/null 2>&1 if test $? -eq 1; then as_fn_error $? "Please apply either patch # 120664 (Sparc) or # 120665 (x86). Without these patches, mod_cgid is non-functional on Solaris 10 due to an OS bug with AF_UNIX sockets. If you can not apply these patches, you can do one of the following: - run configure with --disable-cgid - switch to the prefork MPM For more info: " "$LINENO" 5 else { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } fi ;; esac ;; esac : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_cgid" >&5 $as_echo_n "checking whether to enable mod_cgid... " >&6; } if test "$enable_cgid" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_cgid has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_cgid$_apmod_extra_msg" >&5 $as_echo "$enable_cgid$_apmod_extra_msg" >&6; } if test "$enable_cgid" != "no"; then case "$enable_cgid" in static*) MODLIST="$MODLIST cgid" if test "cgid" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES cgid" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},cgid" fi ;; esac if test -z ""; then objects="mod_cgid.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_cgid.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_cgi... " >&6; } # Check whether --enable-cgi was given. if test "${enable_cgi+set}" = set; then : enableval=$enable_cgi; force_cgi=$enableval else enable_cgi=no fi _apmod_extra_msg="" case "$enable_cgi" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_cgi" = "static" -o "$enable_cgi" = "shared"; then : elif test "$enable_cgi" = "yes"; then enable_cgi=$module_default elif test "$enable_cgi" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cgi=$module_default else enable_cgi=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cgi" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_cgi=$module_default else enable_cgi=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cgi" = "all" -o "$enable_cgi" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cgi=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cgi=no fi elif test "$enable_cgi" = "reallyall" -o "$enable_cgi" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_cgi" != "no" ; then enable_cgi=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cgi=no fi else enable_cgi=no fi if test "$enable_cgi" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_cgi$_apmod_extra_msg" >&5 $as_echo "$enable_cgi$_apmod_extra_msg" >&6; } if test "$enable_cgi" != "no"; then case "$enable_cgi" in static*) MODLIST="$MODLIST cgi" if test "cgi" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES cgi" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},cgi" fi ;; esac if test -z ""; then objects="mod_cgi.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_cgi.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_cgi... " >&6; } # Check whether --enable-cgi was given. if test "${enable_cgi+set}" = set; then : enableval=$enable_cgi; force_cgi=$enableval else enable_cgi=most fi _apmod_extra_msg="" case "$enable_cgi" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_cgi" = "static" -o "$enable_cgi" = "shared"; then : elif test "$enable_cgi" = "yes"; then enable_cgi=$module_default elif test "$enable_cgi" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cgi=$module_default else enable_cgi=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cgi" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_cgi=$module_default else enable_cgi=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cgi" = "all" -o "$enable_cgi" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cgi=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cgi=no fi elif test "$enable_cgi" = "reallyall" -o "$enable_cgi" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_cgi" != "no" ; then enable_cgi=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cgi=no fi else enable_cgi=no fi if test "$enable_cgi" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_cgi$_apmod_extra_msg" >&5 $as_echo "$enable_cgi$_apmod_extra_msg" >&6; } if test "$enable_cgi" != "no"; then case "$enable_cgi" in static*) MODLIST="$MODLIST cgi" if test "cgi" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES cgi" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},cgi" fi ;; esac if test -z ""; then objects="mod_cgi.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_cgi.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_cgid... " >&6; } # Check whether --enable-cgid was given. if test "${enable_cgid+set}" = set; then : enableval=$enable_cgid; force_cgid=$enableval else enable_cgid=no fi _apmod_extra_msg="" case "$enable_cgid" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_cgid" = "static" -o "$enable_cgid" = "shared"; then : elif test "$enable_cgid" = "yes"; then enable_cgid=$module_default elif test "$enable_cgid" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cgid=$module_default else enable_cgid=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cgid" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_cgid=$module_default else enable_cgid=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_cgid" = "all" -o "$enable_cgid" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_cgid=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cgid=no fi elif test "$enable_cgid" = "reallyall" -o "$enable_cgid" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_cgid" != "no" ; then enable_cgid=$module_default _apmod_extra_msg=" ($module_selection)" else enable_cgid=no fi else enable_cgid=no fi if test "$enable_cgid" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_cgid$_apmod_extra_msg" >&5 $as_echo "$enable_cgid$_apmod_extra_msg" >&6; } if test "$enable_cgid" != "no"; then case "$enable_cgid" in static*) MODLIST="$MODLIST cgid" if test "cgid" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES cgid" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},cgid" fi ;; esac if test -z ""; then objects="mod_cgid.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_cgid.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" if ap_mpm_is_enabled mpmt_os2; then if test -z "mpmt_os2.lo mpmt_os2_child.lo"; then objects="mpmt_os2.lo" else objects="mpmt_os2.lo mpmt_os2_child.lo" fi if test -z ""; then mpmpath="server/mpm/mpmt_os2" else mpmpath= fi test -d $mpmpath || $srcdir/build/mkdir.sh $mpmpath APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $mpmpath/Makefile" if test -z "$enable_mpm_mpmt_os2"; then if test "x$AP_LIBS" = "x"; then test "x$silent" != "xyes" && echo " setting AP_LIBS to \"\"" AP_LIBS="" else apr_addto_bugger="" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $AP_LIBS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to AP_LIBS" AP_LIBS="$AP_LIBS $i" fi done fi libname="libmpmt_os2.la" cat >$mpmpath/modules.mk<$mpmpath/modules.mk< $modpath_current/modules.mk dav_fs_objects="mod_dav_fs.lo dbm.lo lock.lo repos.lo" if test "x$enable_dav" != "x"; then dav_fs_enable=$enable_dav else dav_fs_enable=$dav_enable fi case "$host" in *os2*) # OS/2 DLLs must resolve all symbols at build time # and we need some from main DAV module dav_fs_objects="$dav_fs_objects ../main/mod_dav.la" ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_dav_fs" >&5 $as_echo_n "checking whether to enable mod_dav_fs... " >&6; } # Check whether --enable-dav-fs was given. if test "${enable_dav_fs+set}" = set; then : enableval=$enable_dav_fs; force_dav_fs=$enableval else enable_dav_fs=$dav_fs_enable fi _apmod_extra_msg="" case "$enable_dav_fs" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_dav_fs" = "static" -o "$enable_dav_fs" = "shared"; then : elif test "$enable_dav_fs" = "yes"; then enable_dav_fs=$module_default elif test "$enable_dav_fs" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_dav_fs=$module_default else enable_dav_fs=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_dav_fs" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_dav_fs=$module_default else enable_dav_fs=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_dav_fs" = "all" -o "$enable_dav_fs" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_dav_fs=$module_default _apmod_extra_msg=" ($module_selection)" else enable_dav_fs=no fi elif test "$enable_dav_fs" = "reallyall" -o "$enable_dav_fs" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_dav_fs" != "no" ; then enable_dav_fs=$module_default _apmod_extra_msg=" ($module_selection)" else enable_dav_fs=no fi else enable_dav_fs=no fi if test "$enable_dav_fs" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_dav" = "no" ; then enable_dav_fs=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_dav is disabled but required for mod_dav_fs\"" >&5 $as_echo "$as_me: WARNING: \"mod_dav is disabled but required for mod_dav_fs\"" >&2;} elif test "$enable_dav_fs" = "static" && test "$enable_dav" != "static" ; then enable_dav_fs=$enable_dav { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_dav_fs shared because mod_dav is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_dav_fs shared because mod_dav is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_dav_fs" >&5 $as_echo_n "checking whether to enable mod_dav_fs... " >&6; } if test "$enable_dav_fs" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_dav_fs has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_dav_fs$_apmod_extra_msg" >&5 $as_echo "$enable_dav_fs$_apmod_extra_msg" >&6; } if test "$enable_dav_fs" != "no"; then case "$enable_dav_fs" in static*) MODLIST="$MODLIST dav_fs" if test "dav_fs" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES dav_fs" if test "$dav_fs_enable" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},dav_fs" fi ;; esac if test -z "$dav_fs_objects"; then objects="mod_dav_fs.lo" else objects="$dav_fs_objects" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_dav_fs.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" current_dir=dav/lock modpath_current=modules/dav/lock modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d dav/lock || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk dav_lock_objects="mod_dav_lock.lo locks.lo" case "$host" in *os2*) # OS/2 DLLs must resolve all symbols at build time # and we need some from main DAV module dav_lock_objects="$dav_lock_objects ../main/mod_dav.la" ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_dav_lock" >&5 $as_echo_n "checking whether to enable mod_dav_lock... " >&6; } # Check whether --enable-dav-lock was given. if test "${enable_dav_lock+set}" = set; then : enableval=$enable_dav_lock; force_dav_lock=$enableval else enable_dav_lock=maybe-all fi _apmod_extra_msg="" case "$enable_dav_lock" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_dav_lock" = "static" -o "$enable_dav_lock" = "shared"; then : elif test "$enable_dav_lock" = "yes"; then enable_dav_lock=$module_default elif test "$enable_dav_lock" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_dav_lock=$module_default else enable_dav_lock=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_dav_lock" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_dav_lock=$module_default else enable_dav_lock=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_dav_lock" = "all" -o "$enable_dav_lock" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_dav_lock=$module_default _apmod_extra_msg=" ($module_selection)" else enable_dav_lock=no fi elif test "$enable_dav_lock" = "reallyall" -o "$enable_dav_lock" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_dav_lock" != "no" ; then enable_dav_lock=$module_default _apmod_extra_msg=" ($module_selection)" else enable_dav_lock=no fi else enable_dav_lock=no fi if test "$enable_dav_lock" != "no"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: checking dependencies" >&5 $as_echo "checking dependencies" >&6; } if test "$enable_dav" = "no" ; then enable_dav_lock=no { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"mod_dav is disabled but required for mod_dav_lock\"" >&5 $as_echo "$as_me: WARNING: \"mod_dav is disabled but required for mod_dav_lock\"" >&2;} elif test "$enable_dav_lock" = "static" && test "$enable_dav" != "static" ; then enable_dav_lock=$enable_dav { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: \"building mod_dav_lock shared because mod_dav is built shared\"" >&5 $as_echo "$as_me: WARNING: \"building mod_dav_lock shared because mod_dav is built shared\"" >&2;} else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_dav_lock" >&5 $as_echo_n "checking whether to enable mod_dav_lock... " >&6; } if test "$enable_dav_lock" = "no"; then if test "$_apmod_required" = "no"; then _apmod_extra_msg=" (disabled)" else as_fn_error $? "mod_dav_lock has been requested but can not be built due to prerequisite failures" "$LINENO" 5 fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_dav_lock$_apmod_extra_msg" >&5 $as_echo "$enable_dav_lock$_apmod_extra_msg" >&6; } if test "$enable_dav_lock" != "no"; then case "$enable_dav_lock" in static*) MODLIST="$MODLIST dav_lock" if test "dav_lock" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES dav_lock" if test "" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},dav_lock" fi ;; esac if test -z "$dav_lock_objects"; then objects="mod_dav_lock.lo" else objects="$dav_lock_objects" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_dav_lock.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for extra modules" >&5 $as_echo_n "checking for extra modules... " >&6; } # Check whether --with-module was given. if test "${with_module+set}" = set; then : withval=$with_module; withval=`echo $withval | sed -e 's/,/ /g'` for mod in $withval do modtype=`echo $mod | sed -e's/\(.*\):.*/\1/'` pkg=`echo $mod | sed -e's/.*:\(.*\)/\1/'` modfilec=`echo $pkg | sed -e 's;^.*/;;'` modfileo=`echo $pkg | sed -e 's;^.*/;;' -e 's;\.c$;.o;'` modpath_current="modules/$modtype" if test "x$mod" != "x$modpath_current/$modfilec"; then if test ! -d "$modpath_current"; then mkdir $modpath_current echo 'include $(top_srcdir)/build/special.mk' > $modpath_current/Makefile.in fi cp $pkg $modpath_current/$modfilec fi module=`echo $pkg | sed -e 's;\(.*/\).*mod_\(.*\).c;\2;'` objects="mod_$module.lo" # The filename of a convenience library must have a "lib" prefix: libname="libmod_$module.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" if test ! -s "$modpath_current/modules.mk"; then cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk.tmp<> $modpath_current/modules.mk.tmp rm $modpath_current/modules.mk mv $modpath_current/modules.mk.tmp $modpath_current/modules.mk sed -e "s/\(static =.*\)/\1 $libname/" $modpath_current/modules.mk > $modpath_current/modules.mk.tmp rm $modpath_current/modules.mk mv $modpath_current/modules.mk.tmp $modpath_current/modules.mk fi MODLIST="$MODLIST $module" EXTRA_MODLIST="$EXTRA_MODLIST $modtype:$modfilec" MODULE_DIRS="$MODULE_DIRS $modtype" APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" done if test ! -z "$EXTRA_MODLIST"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: added:$EXTRA_MODLIST" >&5 $as_echo "added:$EXTRA_MODLIST" >&6; } fi else { $as_echo "$as_me:${as_lineno-$LINENO}: result: none" >&5 $as_echo "none" >&6; } fi current_dir=mappers modpath_current=modules/mappers modpath_static= modpath_shared= for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do eval MOD_$var= done test -d mappers || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable mod_vhost_alias" >&5 $as_echo_n "checking whether to enable mod_vhost_alias... " >&6; } # Check whether --enable-vhost-alias was given. if test "${enable_vhost_alias+set}" = set; then : enableval=$enable_vhost_alias; force_vhost_alias=$enableval else enable_vhost_alias=most fi _apmod_extra_msg="" case "$enable_vhost_alias" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_vhost_alias" = "static" -o "$enable_vhost_alias" = "shared"; then : elif test "$enable_vhost_alias" = "yes"; then enable_vhost_alias=$module_default elif test "$enable_vhost_alias" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_vhost_alias=$module_default else enable_vhost_alias=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_vhost_alias" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_vhost_alias=$module_default else enable_vhost_alias=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_vhost_alias" = "all" -o "$enable_vhost_alias" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_vhost_alias=$module_default _apmod_extra_msg=" ($module_selection)" else enable_vhost_alias=no fi elif test "$enable_vhost_alias" = "reallyall" -o "$enable_vhost_alias" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_vhost_alias" != "no" ; then enable_vhost_alias=$module_default _apmod_extra_msg=" ($module_selection)" else enable_vhost_alias=no fi else enable_vhost_alias=no fi if test "$enable_vhost_alias" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_vhost_alias$_apmod_extra_msg" >&5 $as_echo "$enable_vhost_alias$_apmod_extra_msg" >&6; } if test "$enable_vhost_alias" != "no"; then case "$enable_vhost_alias" in static*) MODLIST="$MODLIST vhost_alias" if test "vhost_alias" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES vhost_alias" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},vhost_alias" fi ;; esac if test -z ""; then objects="mod_vhost_alias.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_vhost_alias.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_negotiation... " >&6; } # Check whether --enable-negotiation was given. if test "${enable_negotiation+set}" = set; then : enableval=$enable_negotiation; force_negotiation=$enableval else enable_negotiation=most fi _apmod_extra_msg="" case "$enable_negotiation" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_negotiation" = "static" -o "$enable_negotiation" = "shared"; then : elif test "$enable_negotiation" = "yes"; then enable_negotiation=$module_default elif test "$enable_negotiation" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_negotiation=$module_default else enable_negotiation=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_negotiation" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_negotiation=$module_default else enable_negotiation=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_negotiation" = "all" -o "$enable_negotiation" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_negotiation=$module_default _apmod_extra_msg=" ($module_selection)" else enable_negotiation=no fi elif test "$enable_negotiation" = "reallyall" -o "$enable_negotiation" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_negotiation" != "no" ; then enable_negotiation=$module_default _apmod_extra_msg=" ($module_selection)" else enable_negotiation=no fi else enable_negotiation=no fi if test "$enable_negotiation" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_negotiation$_apmod_extra_msg" >&5 $as_echo "$enable_negotiation$_apmod_extra_msg" >&6; } if test "$enable_negotiation" != "no"; then case "$enable_negotiation" in static*) MODLIST="$MODLIST negotiation" if test "negotiation" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES negotiation" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},negotiation" fi ;; esac if test -z ""; then objects="mod_negotiation.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_negotiation.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_dir... " >&6; } # Check whether --enable-dir was given. if test "${enable_dir+set}" = set; then : enableval=$enable_dir; force_dir=$enableval else enable_dir=yes fi _apmod_extra_msg="" case "$enable_dir" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_dir" = "static" -o "$enable_dir" = "shared"; then : elif test "$enable_dir" = "yes"; then enable_dir=$module_default elif test "$enable_dir" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_dir=$module_default else enable_dir=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_dir" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_dir=$module_default else enable_dir=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_dir" = "all" -o "$enable_dir" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_dir=$module_default _apmod_extra_msg=" ($module_selection)" else enable_dir=no fi elif test "$enable_dir" = "reallyall" -o "$enable_dir" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_dir" != "no" ; then enable_dir=$module_default _apmod_extra_msg=" ($module_selection)" else enable_dir=no fi else enable_dir=no fi if test "$enable_dir" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_dir$_apmod_extra_msg" >&5 $as_echo "$enable_dir$_apmod_extra_msg" >&6; } if test "$enable_dir" != "no"; then case "$enable_dir" in static*) MODLIST="$MODLIST dir" if test "dir" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES dir" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},dir" fi ;; esac if test -z ""; then objects="mod_dir.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_dir.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_imagemap... " >&6; } # Check whether --enable-imagemap was given. if test "${enable_imagemap+set}" = set; then : enableval=$enable_imagemap; force_imagemap=$enableval else enable_imagemap=no fi _apmod_extra_msg="" case "$enable_imagemap" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_imagemap" = "static" -o "$enable_imagemap" = "shared"; then : elif test "$enable_imagemap" = "yes"; then enable_imagemap=$module_default elif test "$enable_imagemap" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_imagemap=$module_default else enable_imagemap=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_imagemap" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_imagemap=$module_default else enable_imagemap=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_imagemap" = "all" -o "$enable_imagemap" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_imagemap=$module_default _apmod_extra_msg=" ($module_selection)" else enable_imagemap=no fi elif test "$enable_imagemap" = "reallyall" -o "$enable_imagemap" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_imagemap" != "no" ; then enable_imagemap=$module_default _apmod_extra_msg=" ($module_selection)" else enable_imagemap=no fi else enable_imagemap=no fi if test "$enable_imagemap" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_imagemap$_apmod_extra_msg" >&5 $as_echo "$enable_imagemap$_apmod_extra_msg" >&6; } if test "$enable_imagemap" != "no"; then case "$enable_imagemap" in static*) MODLIST="$MODLIST imagemap" if test "imagemap" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES imagemap" if test "no" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},imagemap" fi ;; esac if test -z ""; then objects="mod_imagemap.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_imagemap.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_actions... " >&6; } # Check whether --enable-actions was given. if test "${enable_actions+set}" = set; then : enableval=$enable_actions; force_actions=$enableval else enable_actions=most fi _apmod_extra_msg="" case "$enable_actions" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_actions" = "static" -o "$enable_actions" = "shared"; then : elif test "$enable_actions" = "yes"; then enable_actions=$module_default elif test "$enable_actions" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_actions=$module_default else enable_actions=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_actions" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_actions=$module_default else enable_actions=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_actions" = "all" -o "$enable_actions" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_actions=$module_default _apmod_extra_msg=" ($module_selection)" else enable_actions=no fi elif test "$enable_actions" = "reallyall" -o "$enable_actions" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_actions" != "no" ; then enable_actions=$module_default _apmod_extra_msg=" ($module_selection)" else enable_actions=no fi else enable_actions=no fi if test "$enable_actions" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_actions$_apmod_extra_msg" >&5 $as_echo "$enable_actions$_apmod_extra_msg" >&6; } if test "$enable_actions" != "no"; then case "$enable_actions" in static*) MODLIST="$MODLIST actions" if test "actions" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES actions" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},actions" fi ;; esac if test -z ""; then objects="mod_actions.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_actions.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_speling... " >&6; } # Check whether --enable-speling was given. if test "${enable_speling+set}" = set; then : enableval=$enable_speling; force_speling=$enableval else enable_speling=most fi _apmod_extra_msg="" case "$enable_speling" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_speling" = "static" -o "$enable_speling" = "shared"; then : elif test "$enable_speling" = "yes"; then enable_speling=$module_default elif test "$enable_speling" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_speling=$module_default else enable_speling=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_speling" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_speling=$module_default else enable_speling=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_speling" = "all" -o "$enable_speling" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_speling=$module_default _apmod_extra_msg=" ($module_selection)" else enable_speling=no fi elif test "$enable_speling" = "reallyall" -o "$enable_speling" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_speling" != "no" ; then enable_speling=$module_default _apmod_extra_msg=" ($module_selection)" else enable_speling=no fi else enable_speling=no fi if test "$enable_speling" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_speling$_apmod_extra_msg" >&5 $as_echo "$enable_speling$_apmod_extra_msg" >&6; } if test "$enable_speling" != "no"; then case "$enable_speling" in static*) MODLIST="$MODLIST speling" if test "speling" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES speling" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},speling" fi ;; esac if test -z ""; then objects="mod_speling.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_speling.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_userdir... " >&6; } # Check whether --enable-userdir was given. if test "${enable_userdir+set}" = set; then : enableval=$enable_userdir; force_userdir=$enableval else enable_userdir=most fi _apmod_extra_msg="" case "$enable_userdir" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_userdir" = "static" -o "$enable_userdir" = "shared"; then : elif test "$enable_userdir" = "yes"; then enable_userdir=$module_default elif test "$enable_userdir" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_userdir=$module_default else enable_userdir=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_userdir" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_userdir=$module_default else enable_userdir=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_userdir" = "all" -o "$enable_userdir" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_userdir=$module_default _apmod_extra_msg=" ($module_selection)" else enable_userdir=no fi elif test "$enable_userdir" = "reallyall" -o "$enable_userdir" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_userdir" != "no" ; then enable_userdir=$module_default _apmod_extra_msg=" ($module_selection)" else enable_userdir=no fi else enable_userdir=no fi if test "$enable_userdir" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_userdir$_apmod_extra_msg" >&5 $as_echo "$enable_userdir$_apmod_extra_msg" >&6; } if test "$enable_userdir" != "no"; then case "$enable_userdir" in static*) MODLIST="$MODLIST userdir" if test "userdir" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES userdir" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},userdir" fi ;; esac if test -z ""; then objects="mod_userdir.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_userdir.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_alias... " >&6; } # Check whether --enable-alias was given. if test "${enable_alias+set}" = set; then : enableval=$enable_alias; force_alias=$enableval else enable_alias=yes fi _apmod_extra_msg="" case "$enable_alias" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_alias" = "static" -o "$enable_alias" = "shared"; then : elif test "$enable_alias" = "yes"; then enable_alias=$module_default elif test "$enable_alias" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_alias=$module_default else enable_alias=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_alias" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_alias=$module_default else enable_alias=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_alias" = "all" -o "$enable_alias" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_alias=$module_default _apmod_extra_msg=" ($module_selection)" else enable_alias=no fi elif test "$enable_alias" = "reallyall" -o "$enable_alias" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_alias" != "no" ; then enable_alias=$module_default _apmod_extra_msg=" ($module_selection)" else enable_alias=no fi else enable_alias=no fi if test "$enable_alias" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_alias$_apmod_extra_msg" >&5 $as_echo "$enable_alias$_apmod_extra_msg" >&6; } if test "$enable_alias" != "no"; then case "$enable_alias" in static*) MODLIST="$MODLIST alias" if test "alias" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES alias" if test "yes" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},alias" fi ;; esac if test -z ""; then objects="mod_alias.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_alias.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<&5 $as_echo_n "checking whether to enable mod_rewrite... " >&6; } # Check whether --enable-rewrite was given. if test "${enable_rewrite+set}" = set; then : enableval=$enable_rewrite; force_rewrite=$enableval else enable_rewrite=most fi _apmod_extra_msg="" case "$enable_rewrite" in yes|static|shared) _apmod_required="yes" ;; *) _apmod_required="no" ;; esac if test "$enable_rewrite" = "static" -o "$enable_rewrite" = "shared"; then : elif test "$enable_rewrite" = "yes"; then enable_rewrite=$module_default elif test "$enable_rewrite" = "few"; then if test "$module_selection" = "few" -o "$module_selection" = "most" -o \ "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_rewrite=$module_default else enable_rewrite=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_rewrite" = "most"; then if test "$module_selection" = "most" -o "$module_selection" = "all" -o \ "$module_selection" = "reallyall" then enable_rewrite=$module_default else enable_rewrite=no fi _apmod_extra_msg=" ($module_selection)" elif test "$enable_rewrite" = "all" -o "$enable_rewrite" = "maybe-all"; then if test "$module_selection" = "all" -o "$module_selection" = "reallyall" then enable_rewrite=$module_default _apmod_extra_msg=" ($module_selection)" else enable_rewrite=no fi elif test "$enable_rewrite" = "reallyall" -o "$enable_rewrite" = "no" ; then if test "$module_selection" = "reallyall" -a "$force_rewrite" != "no" ; then enable_rewrite=$module_default _apmod_extra_msg=" ($module_selection)" else enable_rewrite=no fi else enable_rewrite=no fi if test "$enable_rewrite" != "no"; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_rewrite$_apmod_extra_msg" >&5 $as_echo "$enable_rewrite$_apmod_extra_msg" >&6; } if test "$enable_rewrite" != "no"; then case "$enable_rewrite" in static*) MODLIST="$MODLIST rewrite" if test "rewrite" = "so"; then sharedobjs=yes fi shared="";; *) sharedobjs=yes shared=yes DSO_MODULES="$DSO_MODULES rewrite" if test "most" = "yes" ; then ENABLED_DSO_MODULES="${ENABLED_DSO_MODULES},rewrite" fi ;; esac if test -z ""; then objects="mod_rewrite.lo" else objects="" fi if test -z "$module_standalone"; then if test -z "$shared"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_rewrite.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $modpath_current/Makefile" APACHE_VAR_SUBST="$APACHE_VAR_SUBST progname" APACHE_VAR_SUBST="$APACHE_VAR_SUBST OS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST OS_DIR" APACHE_VAR_SUBST="$APACHE_VAR_SUBST BUILTIN_LIBS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST SHLIBPATH_VAR" APACHE_VAR_SUBST="$APACHE_VAR_SUBST OS_SPECIFIC_VARS" PRE_SHARED_CMDS='echo ""' POST_SHARED_CMDS='echo ""' if test "$apache_need_shared" = "yes"; then if test -f $ac_aux_dir/ltconfig; then $SHELL $ac_aux_dir/ltconfig --output=shlibtool --disable-static --srcdir=$ac_aux_dir --cache-file=./config.cache $ac_aux_dir/ltmain.sh fi shared_build="shared-build" fi if test "$enable_so" = "yes" -o "$enable_so" = "static"; then case $host in *-ibm-aix*) if test "x$HTTPD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting HTTPD_LDFLAGS to \"-Wl,-uXML_Parse -Wl,-bE:$abs_builddir/server/httpd.exp\"" HTTPD_LDFLAGS="-Wl,-uXML_Parse -Wl,-bE:$abs_builddir/server/httpd.exp" else apr_addto_bugger="-Wl,-uXML_Parse -Wl,-bE:$abs_builddir/server/httpd.exp" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $HTTPD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to HTTPD_LDFLAGS" HTTPD_LDFLAGS="$HTTPD_LDFLAGS $i" fi done fi if test "x$SH_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting SH_LDFLAGS to \"\$(EXTRA_LDFLAGS) \$(EXTRA_LIBS)\"" SH_LDFLAGS="\$(EXTRA_LDFLAGS) \$(EXTRA_LIBS)" else apr_addto_bugger="\$(EXTRA_LDFLAGS) \$(EXTRA_LIBS)" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $SH_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to SH_LDFLAGS" SH_LDFLAGS="$SH_LDFLAGS $i" fi done fi if test "x$UTIL_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting UTIL_LDFLAGS to \"-Wl,-uXML_Parse\"" UTIL_LDFLAGS="-Wl,-uXML_Parse" else apr_addto_bugger="-Wl,-uXML_Parse" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $UTIL_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to UTIL_LDFLAGS" UTIL_LDFLAGS="$UTIL_LDFLAGS $i" fi done fi ;; *os390) if test "x$HTTPD_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting HTTPD_LDFLAGS to \"--main=$abs_srcdir/server/main.o --core-dll=$abs_srcdir/apachecore.dll\"" HTTPD_LDFLAGS="--main=$abs_srcdir/server/main.o --core-dll=$abs_srcdir/apachecore.dll" else apr_addto_bugger="--main=$abs_srcdir/server/main.o --core-dll=$abs_srcdir/apachecore.dll" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $HTTPD_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to HTTPD_LDFLAGS" HTTPD_LDFLAGS="$HTTPD_LDFLAGS $i" fi done fi if test "x$SH_LDFLAGS" = "x"; then test "x$silent" != "xyes" && echo " setting SH_LDFLAGS to \"--core-dll=$abs_srcdir/apachecore.dll\"" SH_LDFLAGS="--core-dll=$abs_srcdir/apachecore.dll" else apr_addto_bugger="--core-dll=$abs_srcdir/apachecore.dll" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $SH_LDFLAGS; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to SH_LDFLAGS" SH_LDFLAGS="$SH_LDFLAGS $i" fi done fi esac MOD_SO_ENABLED=yes fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST PRE_SHARED_CMDS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST POST_SHARED_CMDS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST shared_build" # Check whether --with-program-name was given. if test "${with_program_name+set}" = set; then : withval=$with_program_name; progname="$withval" else progname="httpd" fi # SuExec parameters # Check whether --with-suexec-bin was given. if test "${with_suexec_bin+set}" = set; then : withval=$with_suexec_bin; cat >>confdefs.h <<_ACEOF #define SUEXEC_BIN "$withval" _ACEOF fi # Check whether --with-suexec-caller was given. if test "${with_suexec_caller+set}" = set; then : withval=$with_suexec_caller; cat >>confdefs.h <<_ACEOF #define AP_HTTPD_USER "$withval" _ACEOF fi # Check whether --with-suexec-userdir was given. if test "${with_suexec_userdir+set}" = set; then : withval=$with_suexec_userdir; cat >>confdefs.h <<_ACEOF #define AP_USERDIR_SUFFIX "$withval" _ACEOF fi # Check whether --with-suexec-docroot was given. if test "${with_suexec_docroot+set}" = set; then : withval=$with_suexec_docroot; cat >>confdefs.h <<_ACEOF #define AP_DOC_ROOT "$withval" _ACEOF fi # Check whether --with-suexec-uidmin was given. if test "${with_suexec_uidmin+set}" = set; then : withval=$with_suexec_uidmin; cat >>confdefs.h <<_ACEOF #define AP_UID_MIN $withval _ACEOF fi # Check whether --with-suexec-gidmin was given. if test "${with_suexec_gidmin+set}" = set; then : withval=$with_suexec_gidmin; cat >>confdefs.h <<_ACEOF #define AP_GID_MIN $withval _ACEOF fi # Check whether --with-suexec-logfile was given. if test "${with_suexec_logfile+set}" = set; then : withval=$with_suexec_logfile; if test "x$withval" = "xyes"; then as_fn_error $? "log filename required for --with-suexec-logfile option" "$LINENO" 5 elif test "x$withval" != "xno"; then cat >>confdefs.h <<_ACEOF #define AP_LOG_EXEC "$withval" _ACEOF fi fi # Check whether --with-suexec-syslog was given. if test "${with_suexec_syslog+set}" = set; then : withval=$with_suexec_syslog; if test $withval = "yes"; then if test "x${with_suexec_logfile}" != "xno"; then { $as_echo "$as_me:${as_lineno-$LINENO}: hint: use \"--without-suexec-logfile --with-suexec-syslog\"" >&5 $as_echo "$as_me: hint: use \"--without-suexec-logfile --with-suexec-syslog\"" >&6;} as_fn_error $? "suexec does not support both logging to file and syslog" "$LINENO" 5 fi for ac_func in vsyslog do : ac_fn_c_check_func "$LINENO" "vsyslog" "ac_cv_func_vsyslog" if test "x$ac_cv_func_vsyslog" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_VSYSLOG 1 _ACEOF else as_fn_error $? "cannot support syslog from suexec without vsyslog()" "$LINENO" 5 fi done $as_echo "#define AP_LOG_SYSLOG 1" >>confdefs.h fi fi # Check whether --with-suexec-safepath was given. if test "${with_suexec_safepath+set}" = set; then : withval=$with_suexec_safepath; cat >>confdefs.h <<_ACEOF #define AP_SAFE_PATH "$withval" _ACEOF fi # Check whether --with-suexec-umask was given. if test "${with_suexec_umask+set}" = set; then : withval=$with_suexec_umask; cat >>confdefs.h <<_ACEOF #define AP_SUEXEC_UMASK 0$withval _ACEOF fi INSTALL_SUEXEC=setuid # Check whether --enable-suexec-capabilities was given. if test "${enable_suexec_capabilities+set}" = set; then : enableval=$enable_suexec_capabilities; INSTALL_SUEXEC=caps $as_echo "#define AP_SUEXEC_CAPABILITIES 1" >>confdefs.h fi APACHE_VAR_SUBST="$APACHE_VAR_SUBST INSTALL_SUEXEC" if test x${apu_found} != xobsolete; then AP_LIBS="$AP_LIBS `$apu_config --avoid-ldap --link-libtool --libs`" fi AP_LIBS="$AP_LIBS `$apr_config --link-libtool --libs`" APACHE_VAR_SUBST="$APACHE_VAR_SUBST AP_LIBS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST AP_BUILD_SRCLIB_DIRS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST AP_CLEAN_SRCLIB_DIRS" $as_echo "#define AP_USING_AUTOCONF 1" >>confdefs.h if test "$SINGLE_LISTEN_UNSERIALIZED_ACCEPT" = "1"; then $as_echo "#define SINGLE_LISTEN_UNSERIALIZED_ACCEPT 1" >>confdefs.h fi if test "$AP_NONBLOCK_WHEN_MULTI_LISTEN" = "1"; then $as_echo "#define AP_NONBLOCK_WHEN_MULTI_LISTEN 1" >>confdefs.h fi apr_old_cppflags=$CPPFLAGS CPPFLAGS="$CPPFLAGS $INCLUDES" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #if APR_HAVE_IPV6 YES_IS_DEFINED #endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "YES_IS_DEFINED" >/dev/null 2>&1; then : ac_cv_define_APR_HAVE_IPV6=yes else ac_cv_define_APR_HAVE_IPV6=no fi rm -f conftest* CPPFLAGS=$apr_old_cppflags # Check whether --enable-v4-mapped was given. if test "${enable_v4_mapped+set}" = set; then : enableval=$enable_v4_mapped; v4mapped=$enableval else case $host in *freebsd[1234].*) v4mapped=yes ;; *freebsd*|*netbsd*|*openbsd*) v4mapped=no ;; *) v4mapped=yes ;; esac if ap_mpm_is_enabled winnt; then v4mapped=no fi fi if test $v4mapped = "yes" -a $ac_cv_define_APR_HAVE_IPV6 = "yes"; then $as_echo "#define AP_ENABLE_V4_MAPPED 1" >>confdefs.h fi APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES Makefile modules/Makefile srclib/Makefile" APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES os/Makefile server/Makefile" APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES support/Makefile" if test -d ./test; then APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES test/Makefile" fi { $as_echo "$as_me:${as_lineno-$LINENO}: " >&5 $as_echo "$as_me: " >&6;} { $as_echo "$as_me:${as_lineno-$LINENO}: Restore user-defined environment settings..." >&5 $as_echo "$as_me: Restore user-defined environment settings..." >&6;} { $as_echo "$as_me:${as_lineno-$LINENO}: " >&5 $as_echo "$as_me: " >&6;} APACHE_CONF_SEL_CC=${CC} APACHE_CONF_SEL_CFLAGS="${CFLAGS} ${EXTRA_CFLAGS} ${NOTEST_CFLAGS}" APACHE_CONF_SEL_CPPFLAGS="${CPPFLAGS} ${EXTRA_CPPFLAGS} ${NOTEST_CPPFLAGS}" APACHE_CONF_SEL_LDFLAGS="${LDFLAGS} ${EXTRA_LDFLAGS} ${NOTEST_LDFLAGS}" APACHE_CONF_SEL_LIBS="${LIBS} ${EXTRA_LIBS} ${NOTEST_LIBS}" APACHE_CONF_SEL_CPP=${CPP} set X $apr_ste_save_CPPFLAGS if test ${#} -eq 1; then EXTRA_CPPFLAGS="$CPPFLAGS" CPPFLAGS= else if test "x$apr_ste_save_CPPFLAGS" = "x$CPPFLAGS"; then EXTRA_CPPFLAGS= else EXTRA_CPPFLAGS=`echo "$CPPFLAGS" | sed -e "s%${apr_ste_save_CPPFLAGS}%%"` CPPFLAGS="$apr_ste_save_CPPFLAGS" fi fi if test "x$silent" != "xyes"; then echo " restoring CPPFLAGS to \"$CPPFLAGS\"" echo " setting EXTRA_CPPFLAGS to \"$EXTRA_CPPFLAGS\"" fi set X $apr_ste_save_CFLAGS if test ${#} -eq 1; then EXTRA_CFLAGS="$CFLAGS" CFLAGS= else if test "x$apr_ste_save_CFLAGS" = "x$CFLAGS"; then EXTRA_CFLAGS= else EXTRA_CFLAGS=`echo "$CFLAGS" | sed -e "s%${apr_ste_save_CFLAGS}%%"` CFLAGS="$apr_ste_save_CFLAGS" fi fi if test "x$silent" != "xyes"; then echo " restoring CFLAGS to \"$CFLAGS\"" echo " setting EXTRA_CFLAGS to \"$EXTRA_CFLAGS\"" fi set X $apr_ste_save_CXXFLAGS if test ${#} -eq 1; then EXTRA_CXXFLAGS="$CXXFLAGS" CXXFLAGS= else if test "x$apr_ste_save_CXXFLAGS" = "x$CXXFLAGS"; then EXTRA_CXXFLAGS= else EXTRA_CXXFLAGS=`echo "$CXXFLAGS" | sed -e "s%${apr_ste_save_CXXFLAGS}%%"` CXXFLAGS="$apr_ste_save_CXXFLAGS" fi fi if test "x$silent" != "xyes"; then echo " restoring CXXFLAGS to \"$CXXFLAGS\"" echo " setting EXTRA_CXXFLAGS to \"$EXTRA_CXXFLAGS\"" fi set X $apr_ste_save_LDFLAGS if test ${#} -eq 1; then EXTRA_LDFLAGS="$LDFLAGS" LDFLAGS= else if test "x$apr_ste_save_LDFLAGS" = "x$LDFLAGS"; then EXTRA_LDFLAGS= else EXTRA_LDFLAGS=`echo "$LDFLAGS" | sed -e "s%${apr_ste_save_LDFLAGS}%%"` LDFLAGS="$apr_ste_save_LDFLAGS" fi fi if test "x$silent" != "xyes"; then echo " restoring LDFLAGS to \"$LDFLAGS\"" echo " setting EXTRA_LDFLAGS to \"$EXTRA_LDFLAGS\"" fi set X $apr_ste_save_LIBS if test ${#} -eq 1; then EXTRA_LIBS="$LIBS" LIBS= else if test "x$apr_ste_save_LIBS" = "x$LIBS"; then EXTRA_LIBS= else EXTRA_LIBS=`echo "$LIBS" | sed -e "s%${apr_ste_save_LIBS}%%"` LIBS="$apr_ste_save_LIBS" fi fi if test "x$silent" != "xyes"; then echo " restoring LIBS to \"$LIBS\"" echo " setting EXTRA_LIBS to \"$EXTRA_LIBS\"" fi set X $apr_ste_save_INCLUDES if test ${#} -eq 1; then EXTRA_INCLUDES="$INCLUDES" INCLUDES= else if test "x$apr_ste_save_INCLUDES" = "x$INCLUDES"; then EXTRA_INCLUDES= else EXTRA_INCLUDES=`echo "$INCLUDES" | sed -e "s%${apr_ste_save_INCLUDES}%%"` INCLUDES="$apr_ste_save_INCLUDES" fi fi if test "x$silent" != "xyes"; then echo " restoring INCLUDES to \"$INCLUDES\"" echo " setting EXTRA_INCLUDES to \"$EXTRA_INCLUDES\"" fi { $as_echo "$as_me:${as_lineno-$LINENO}: " >&5 $as_echo "$as_me: " >&6;} { $as_echo "$as_me:${as_lineno-$LINENO}: Construct makefiles and header files..." >&5 $as_echo "$as_me: Construct makefiles and header files..." >&6;} { $as_echo "$as_me:${as_lineno-$LINENO}: " >&5 $as_echo "$as_me: " >&6;} APACHE_VAR_SUBST="$APACHE_VAR_SUBST HTTPD_VERSION" APACHE_VAR_SUBST="$APACHE_VAR_SUBST HTTPD_MMN" APACHE_VAR_SUBST="$APACHE_VAR_SUBST abs_srcdir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST bindir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST sbindir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST cgidir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST logfiledir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST exec_prefix" APACHE_VAR_SUBST="$APACHE_VAR_SUBST datadir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST localstatedir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST mandir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST libdir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST libexecdir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST htdocsdir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST manualdir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST includedir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST errordir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST iconsdir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST sysconfdir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST installbuilddir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST runtimedir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST proxycachedir" APACHE_VAR_SUBST="$APACHE_VAR_SUBST other_targets" APACHE_VAR_SUBST="$APACHE_VAR_SUBST progname" APACHE_VAR_SUBST="$APACHE_VAR_SUBST prefix" APACHE_VAR_SUBST="$APACHE_VAR_SUBST AWK" APACHE_VAR_SUBST="$APACHE_VAR_SUBST CC" APACHE_VAR_SUBST="$APACHE_VAR_SUBST CPP" APACHE_VAR_SUBST="$APACHE_VAR_SUBST CXX" APACHE_VAR_SUBST="$APACHE_VAR_SUBST CPPFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST CFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST CXXFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST LTFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST LDFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST LT_LDFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST SH_LDFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST HTTPD_LDFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST UTIL_LDFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST LIBS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST DEFS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST INCLUDES" APACHE_VAR_SUBST="$APACHE_VAR_SUBST NOTEST_CPPFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST NOTEST_CFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST NOTEST_CXXFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST NOTEST_LDFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST NOTEST_LIBS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST EXTRA_CPPFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST EXTRA_CFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST EXTRA_CXXFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST EXTRA_LDFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST EXTRA_LIBS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST EXTRA_INCLUDES" APACHE_VAR_SUBST="$APACHE_VAR_SUBST INTERNAL_CPPFLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST LIBTOOL" APACHE_VAR_SUBST="$APACHE_VAR_SUBST SHELL" APACHE_VAR_SUBST="$APACHE_VAR_SUBST RSYNC" APACHE_VAR_SUBST="$APACHE_VAR_SUBST MODULE_DIRS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST MODULE_CLEANDIRS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST PORT" APACHE_VAR_SUBST="$APACHE_VAR_SUBST SSLPORT" APACHE_VAR_SUBST="$APACHE_VAR_SUBST CORE_IMPLIB_FILE" APACHE_VAR_SUBST="$APACHE_VAR_SUBST CORE_IMPLIB" APACHE_VAR_SUBST="$APACHE_VAR_SUBST SH_LIBS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST SH_LIBTOOL" APACHE_VAR_SUBST="$APACHE_VAR_SUBST MK_IMPLIB" APACHE_VAR_SUBST="$APACHE_VAR_SUBST MKDEP" APACHE_VAR_SUBST="$APACHE_VAR_SUBST INSTALL_PROG_FLAGS" APACHE_VAR_SUBST="$APACHE_VAR_SUBST MPM_MODULES" APACHE_VAR_SUBST="$APACHE_VAR_SUBST ENABLED_MPM_MODULE" APACHE_VAR_SUBST="$APACHE_VAR_SUBST DSO_MODULES" APACHE_VAR_SUBST="$APACHE_VAR_SUBST ENABLED_DSO_MODULES" APACHE_VAR_SUBST="$APACHE_VAR_SUBST LOAD_ALL_MODULES" APACHE_VAR_SUBST="$APACHE_VAR_SUBST APR_BINDIR" APACHE_VAR_SUBST="$APACHE_VAR_SUBST APR_INCLUDEDIR" APACHE_VAR_SUBST="$APACHE_VAR_SUBST APR_VERSION" APACHE_VAR_SUBST="$APACHE_VAR_SUBST APR_CONFIG" APACHE_VAR_SUBST="$APACHE_VAR_SUBST APU_BINDIR" APACHE_VAR_SUBST="$APACHE_VAR_SUBST APU_INCLUDEDIR" APACHE_VAR_SUBST="$APACHE_VAR_SUBST APU_VERSION" APACHE_VAR_SUBST="$APACHE_VAR_SUBST APU_CONFIG" abs_srcdir="`(cd $srcdir && pwd)`" { $as_echo "$as_me:${as_lineno-$LINENO}: creating config_vars.mk" >&5 $as_echo "$as_me: creating config_vars.mk" >&6;} test -d build || $mkdir_p build > build/config_vars.mk for i in $APACHE_VAR_SUBST; do eval echo "$i = \$$i" >> build/config_vars.mk done rm -f modules.c echo $MODLIST | $AWK -f $srcdir/build/build-modules-c.awk > modules.c ap_last= ap_cur="$prefix" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done ap_prefix="${ap_cur}" cat >>confdefs.h <<_ACEOF #define HTTPD_ROOT "${ap_prefix}" _ACEOF cat >>confdefs.h <<_ACEOF #define SERVER_CONFIG_FILE "${rel_sysconfdir}/${progname}.conf" _ACEOF cat >>confdefs.h <<_ACEOF #define AP_TYPES_CONFIG_FILE "${rel_sysconfdir}/mime.types" _ACEOF perlbin=`$ac_aux_dir/PrintPath perl` if test "x$perlbin" = "x"; then perlbin="/replace/with/path/to/perl/interpreter" fi BSD_MAKEFILE=no ap_make_include=include ap_make_delimiter=' ' case $host in *bsdi*) # Check whether they've installed GNU make if make --version > /dev/null 2>&1; then true else BSD_MAKEFILE=yes ap_make_include=.include ap_make_delimiter='"' fi ;; esac test -d docs/conf||$mkdir_p docs/conf ac_config_files="$ac_config_files docs/conf/httpd.conf docs/conf/extra/httpd-autoindex.conf docs/conf/extra/httpd-dav.conf docs/conf/extra/httpd-default.conf docs/conf/extra/httpd-info.conf docs/conf/extra/httpd-languages.conf docs/conf/extra/httpd-manual.conf docs/conf/extra/httpd-mpm.conf docs/conf/extra/httpd-multilang-errordoc.conf docs/conf/extra/httpd-ssl.conf docs/conf/extra/httpd-userdir.conf docs/conf/extra/httpd-vhosts.conf docs/conf/extra/proxy-html.conf include/ap_config_layout.h support/apxs support/apachectl support/dbmmanage support/envvars-std support/log_server_status support/logresolve.pl support/phf_abuse_log.cgi support/split-logfile build/rules.mk build/pkg/pkginfo build/config_vars.sh" ac_config_commands="$ac_config_commands default" cat >confcache <<\_ACEOF # This file is a shell script that caches the results of configure # tests run on this system so they can be shared between configure # scripts and configure runs, see configure's option --config-cache. # It is not useful on other systems. If it contains results you don't # want to keep, you may remove or edit it. # # config.status only pays attention to the cache file if you give it # the --recheck option to rerun configure. # # `ac_cv_env_foo' variables (set or unset) will be overridden when # loading this file, other *unset* `ac_cv_foo' will be assigned the # following values. _ACEOF # The following way of writing the cache mishandles newlines in values, # but we know of no workaround that is simple, portable, and efficient. # So, we kill variables containing newlines. # Ultrix sh set writes to stderr and can't be redirected directly, # and sets the high bit in the cache file unless we assign to the vars. ( for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do eval ac_val=\$$ac_var case $ac_val in #( *${as_nl}*) case $ac_var in #( *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5 $as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;; esac case $ac_var in #( _ | IFS | as_nl) ;; #( BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #( *) { eval $ac_var=; unset $ac_var;} ;; esac ;; esac done (set) 2>&1 | case $as_nl`(ac_space=' '; set) 2>&1` in #( *${as_nl}ac_space=\ *) # `set' does not quote correctly, so add quotes: double-quote # substitution turns \\\\ into \\, and sed turns \\ into \. sed -n \ "s/'/'\\\\''/g; s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p" ;; #( *) # `set' quotes correctly as required by POSIX, so do not add quotes. sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p" ;; esac | sort ) | sed ' /^ac_cv_env_/b end t clear :clear s/^\([^=]*\)=\(.*[{}].*\)$/test "${\1+set}" = set || &/ t end s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/ :end' >>confcache if diff "$cache_file" confcache >/dev/null 2>&1; then :; else if test -w "$cache_file"; then if test "x$cache_file" != "x/dev/null"; then { $as_echo "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5 $as_echo "$as_me: updating cache $cache_file" >&6;} if test ! -f "$cache_file" || test -h "$cache_file"; then cat confcache >"$cache_file" else case $cache_file in #( */* | ?:*) mv -f confcache "$cache_file"$$ && mv -f "$cache_file"$$ "$cache_file" ;; #( *) mv -f confcache "$cache_file" ;; esac fi fi else { $as_echo "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5 $as_echo "$as_me: not updating unwritable cache $cache_file" >&6;} fi fi rm -f confcache test "x$prefix" = xNONE && prefix=$ac_default_prefix # Let make expand exec_prefix. test "x$exec_prefix" = xNONE && exec_prefix='${prefix}' DEFS=-DHAVE_CONFIG_H ac_libobjs= ac_ltlibobjs= U= for ac_i in : $LIBOBJS; do test "x$ac_i" = x: && continue # 1. Remove the extension, and $U if already installed. ac_script='s/\$U\././;s/\.o$//;s/\.obj$//' ac_i=`$as_echo "$ac_i" | sed "$ac_script"` # 2. Prepend LIBOBJDIR. When used with automake>=1.10 LIBOBJDIR # will be set to the directory where LIBOBJS objects are built. as_fn_append ac_libobjs " \${LIBOBJDIR}$ac_i\$U.$ac_objext" as_fn_append ac_ltlibobjs " \${LIBOBJDIR}$ac_i"'$U.lo' done LIBOBJS=$ac_libobjs LTLIBOBJS=$ac_ltlibobjs : "${CONFIG_STATUS=./config.status}" ac_write_fail=0 ac_clean_files_save=$ac_clean_files ac_clean_files="$ac_clean_files $CONFIG_STATUS" { $as_echo "$as_me:${as_lineno-$LINENO}: creating $CONFIG_STATUS" >&5 $as_echo "$as_me: creating $CONFIG_STATUS" >&6;} as_write_fail=0 cat >$CONFIG_STATUS <<_ASEOF || as_write_fail=1 #! $SHELL # Generated by $as_me. # Run this file to recreate the current configuration. # Compiler output produced by configure, useful for debugging # configure, is in config.log if it exists. debug=false ac_cs_recheck=false ac_cs_silent=false SHELL=\${CONFIG_SHELL-$SHELL} export SHELL _ASEOF cat >>$CONFIG_STATUS <<\_ASEOF || as_write_fail=1 ## -------------------- ## ## M4sh Initialization. ## ## -------------------- ## # Be more Bourne compatible DUALCASE=1; export DUALCASE # for MKS sh if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then : emulate sh NULLCMD=: # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which # is contrary to our usage. Disable this feature. alias -g '${1+"$@"}'='"$@"' setopt NO_GLOB_SUBST else case `(set -o) 2>/dev/null` in #( *posix*) : set -o posix ;; #( *) : ;; esac fi as_nl=' ' export as_nl # Printing a long string crashes Solaris 7 /usr/bin/printf. as_echo='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo # Prefer a ksh shell builtin over an external printf program on Solaris, # but without wasting forks for bash or zsh. if test -z "$BASH_VERSION$ZSH_VERSION" \ && (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/null; then as_echo='print -r --' as_echo_n='print -rn --' elif (test "X`printf %s $as_echo`" = "X$as_echo") 2>/dev/null; then as_echo='printf %s\n' as_echo_n='printf %s' else if test "X`(/usr/ucb/echo -n -n $as_echo) 2>/dev/null`" = "X-n $as_echo"; then as_echo_body='eval /usr/ucb/echo -n "$1$as_nl"' as_echo_n='/usr/ucb/echo -n' else as_echo_body='eval expr "X$1" : "X\\(.*\\)"' as_echo_n_body='eval arg=$1; case $arg in #( *"$as_nl"*) expr "X$arg" : "X\\(.*\\)$as_nl"; arg=`expr "X$arg" : ".*$as_nl\\(.*\\)"`;; esac; expr "X$arg" : "X\\(.*\\)" | tr -d "$as_nl" ' export as_echo_n_body as_echo_n='sh -c $as_echo_n_body as_echo' fi export as_echo_body as_echo='sh -c $as_echo_body as_echo' fi # The user is always right. if test "${PATH_SEPARATOR+set}" != set; then PATH_SEPARATOR=: (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && { (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 || PATH_SEPARATOR=';' } fi # IFS # We need space, tab and new line, in precisely that order. Quoting is # there to prevent editors from complaining about space-tab. # (If _AS_PATH_WALK were called with IFS unset, it would disable word # splitting by setting IFS to empty value.) IFS=" "" $as_nl" # Find who we are. Look in the path if we contain no directory separator. as_myself= case $0 in #(( *[\\/]* ) as_myself=$0 ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break done IFS=$as_save_IFS ;; esac # We did not find ourselves, most probably we were run as `sh COMMAND' # in which case we are not to be found in the path. if test "x$as_myself" = x; then as_myself=$0 fi if test ! -f "$as_myself"; then $as_echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2 exit 1 fi # Unset variables that we do not need and which cause bugs (e.g. in # pre-3.0 UWIN ksh). But do not cause bugs in bash 2.01; the "|| exit 1" # suppresses any "Segmentation fault" message there. '((' could # trigger a bug in pdksh 5.2.14. for as_var in BASH_ENV ENV MAIL MAILPATH do eval test x\${$as_var+set} = xset \ && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || : done PS1='$ ' PS2='> ' PS4='+ ' # NLS nuisances. LC_ALL=C export LC_ALL LANGUAGE=C export LANGUAGE # CDPATH. (unset CDPATH) >/dev/null 2>&1 && unset CDPATH # as_fn_error STATUS ERROR [LINENO LOG_FD] # ---------------------------------------- # Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are # provided, also output the error to LOG_FD, referencing LINENO. Then exit the # script with STATUS, using 1 if that was 0. as_fn_error () { as_status=$1; test $as_status -eq 0 && as_status=1 if test "$4"; then as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack $as_echo "$as_me:${as_lineno-$LINENO}: error: $2" >&$4 fi $as_echo "$as_me: error: $2" >&2 as_fn_exit $as_status } # as_fn_error # as_fn_set_status STATUS # ----------------------- # Set $? to STATUS, without forking. as_fn_set_status () { return $1 } # as_fn_set_status # as_fn_exit STATUS # ----------------- # Exit the shell with STATUS, even in a "trap 0" or "set -e" context. as_fn_exit () { set +e as_fn_set_status $1 exit $1 } # as_fn_exit # as_fn_unset VAR # --------------- # Portably unset VAR. as_fn_unset () { { eval $1=; unset $1;} } as_unset=as_fn_unset # as_fn_append VAR VALUE # ---------------------- # Append the text in VALUE to the end of the definition contained in VAR. Take # advantage of any shell optimizations that allow amortized linear growth over # repeated appends, instead of the typical quadratic growth present in naive # implementations. if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null; then : eval 'as_fn_append () { eval $1+=\$2 }' else as_fn_append () { eval $1=\$$1\$2 } fi # as_fn_append # as_fn_arith ARG... # ------------------ # Perform arithmetic evaluation on the ARGs, and store the result in the # global $as_val. Take advantage of shells that can avoid forks. The arguments # must be portable across $(()) and expr. if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null; then : eval 'as_fn_arith () { as_val=$(( $* )) }' else as_fn_arith () { as_val=`expr "$@" || test $? -eq 1` } fi # as_fn_arith if expr a : '\(a\)' >/dev/null 2>&1 && test "X`expr 00001 : '.*\(...\)'`" = X001; then as_expr=expr else as_expr=false fi if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then as_basename=basename else as_basename=false fi if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then as_dirname=dirname else as_dirname=false fi as_me=`$as_basename -- "$0" || $as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \ X"$0" : 'X\(//\)$' \| \ X"$0" : 'X\(/\)' \| . 2>/dev/null || $as_echo X/"$0" | sed '/^.*\/\([^/][^/]*\)\/*$/{ s//\1/ q } /^X\/\(\/\/\)$/{ s//\1/ q } /^X\/\(\/\).*/{ s//\1/ q } s/.*/./; q'` # Avoid depending upon Character Ranges. as_cr_letters='abcdefghijklmnopqrstuvwxyz' as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ' as_cr_Letters=$as_cr_letters$as_cr_LETTERS as_cr_digits='0123456789' as_cr_alnum=$as_cr_Letters$as_cr_digits ECHO_C= ECHO_N= ECHO_T= case `echo -n x` in #((((( -n*) case `echo 'xy\c'` in *c*) ECHO_T=' ';; # ECHO_T is single tab character. xy) ECHO_C='\c';; *) echo `echo ksh88 bug on AIX 6.1` > /dev/null ECHO_T=' ';; esac;; *) ECHO_N='-n';; esac rm -f conf$$ conf$$.exe conf$$.file if test -d conf$$.dir; then rm -f conf$$.dir/conf$$.file else rm -f conf$$.dir mkdir conf$$.dir 2>/dev/null fi if (echo >conf$$.file) 2>/dev/null; then if ln -s conf$$.file conf$$ 2>/dev/null; then as_ln_s='ln -s' # ... but there are two gotchas: # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail. # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable. # In both cases, we have to default to `cp -pR'. ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe || as_ln_s='cp -pR' elif ln conf$$.file conf$$ 2>/dev/null; then as_ln_s=ln else as_ln_s='cp -pR' fi else as_ln_s='cp -pR' fi rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file rmdir conf$$.dir 2>/dev/null # as_fn_mkdir_p # ------------- # Create "$as_dir" as a directory, including parents if necessary. as_fn_mkdir_p () { case $as_dir in #( -*) as_dir=./$as_dir;; esac test -d "$as_dir" || eval $as_mkdir_p || { as_dirs= while :; do case $as_dir in #( *\'*) as_qdir=`$as_echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'( *) as_qdir=$as_dir;; esac as_dirs="'$as_qdir' $as_dirs" as_dir=`$as_dirname -- "$as_dir" || $as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$as_dir" : 'X\(//\)[^/]' \| \ X"$as_dir" : 'X\(//\)$' \| \ X"$as_dir" : 'X\(/\)' \| . 2>/dev/null || $as_echo X"$as_dir" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'` test -d "$as_dir" && break done test -z "$as_dirs" || eval "mkdir $as_dirs" } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir" } # as_fn_mkdir_p if mkdir -p . 2>/dev/null; then as_mkdir_p='mkdir -p "$as_dir"' else test -d ./-p && rmdir ./-p as_mkdir_p=false fi # as_fn_executable_p FILE # ----------------------- # Test if FILE is an executable regular file. as_fn_executable_p () { test -f "$1" && test -x "$1" } # as_fn_executable_p as_test_x='test -x' as_executable_p=as_fn_executable_p # Sed expression to map a string onto a valid CPP name. as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'" # Sed expression to map a string onto a valid variable name. as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'" exec 6>&1 ## ----------------------------------- ## ## Main body of $CONFIG_STATUS script. ## ## ----------------------------------- ## _ASEOF test $as_write_fail = 0 && chmod +x $CONFIG_STATUS || ac_write_fail=1 cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # Save the log message, to keep $0 and so on meaningful, and to # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" This file was extended by $as_me, which was generated by GNU Autoconf 2.69. Invocation command line was CONFIG_FILES = $CONFIG_FILES CONFIG_HEADERS = $CONFIG_HEADERS CONFIG_LINKS = $CONFIG_LINKS CONFIG_COMMANDS = $CONFIG_COMMANDS $ $0 $@ on `(hostname || uname -n) 2>/dev/null | sed 1q` " _ACEOF case $ac_config_files in *" "*) set x $ac_config_files; shift; ac_config_files=$*;; esac case $ac_config_headers in *" "*) set x $ac_config_headers; shift; ac_config_headers=$*;; esac cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 # Files that config.status was made for. config_files="$ac_config_files" config_headers="$ac_config_headers" config_commands="$ac_config_commands" _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 ac_cs_usage="\ \`$as_me' instantiates files and other configuration actions from templates according to the current configuration. Unless the files and actions are specified as TAGs, all are instantiated by default. Usage: $0 [OPTION]... [TAG]... -h, --help print this help, then exit -V, --version print version number and configuration settings, then exit --config print configuration, then exit -q, --quiet, --silent do not print progress messages -d, --debug don't remove temporary files --recheck update $as_me by reconfiguring in the same conditions --file=FILE[:TEMPLATE] instantiate the configuration file FILE --header=FILE[:TEMPLATE] instantiate the configuration header FILE Configuration files: $config_files Configuration headers: $config_headers Configuration commands: $config_commands Report bugs to the package provider." _ACEOF cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ config.status configured by $0, generated by GNU Autoconf 2.69, with options \\"\$ac_cs_config\\" Copyright (C) 2012 Free Software Foundation, Inc. This config.status script is free software; the Free Software Foundation gives unlimited permission to copy, distribute and modify it." ac_pwd='$ac_pwd' srcdir='$srcdir' AWK='$AWK' test -n "\$AWK" || AWK=awk _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # The default lists apply if the user does not specify any file. ac_need_defaults=: while test $# != 0 do case $1 in --*=?*) ac_option=`expr "X$1" : 'X\([^=]*\)='` ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'` ac_shift=: ;; --*=) ac_option=`expr "X$1" : 'X\([^=]*\)='` ac_optarg= ac_shift=: ;; *) ac_option=$1 ac_optarg=$2 ac_shift=shift ;; esac case $ac_option in # Handling of the options. -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r) ac_cs_recheck=: ;; --version | --versio | --versi | --vers | --ver | --ve | --v | -V ) $as_echo "$ac_cs_version"; exit ;; --config | --confi | --conf | --con | --co | --c ) $as_echo "$ac_cs_config"; exit ;; --debug | --debu | --deb | --de | --d | -d ) debug=: ;; --file | --fil | --fi | --f ) $ac_shift case $ac_optarg in *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;; '') as_fn_error $? "missing file argument" ;; esac as_fn_append CONFIG_FILES " '$ac_optarg'" ac_need_defaults=false;; --header | --heade | --head | --hea ) $ac_shift case $ac_optarg in *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;; esac as_fn_append CONFIG_HEADERS " '$ac_optarg'" ac_need_defaults=false;; --he | --h) # Conflict between --help and --header as_fn_error $? "ambiguous option: \`$1' Try \`$0 --help' for more information.";; --help | --hel | -h ) $as_echo "$ac_cs_usage"; exit ;; -q | -quiet | --quiet | --quie | --qui | --qu | --q \ | -silent | --silent | --silen | --sile | --sil | --si | --s) ac_cs_silent=: ;; # This is an error. -*) as_fn_error $? "unrecognized option: \`$1' Try \`$0 --help' for more information." ;; *) as_fn_append ac_config_targets " $1" ac_need_defaults=false ;; esac shift done ac_configure_extra_args= if $ac_cs_silent; then exec 6>/dev/null ac_configure_extra_args="$ac_configure_extra_args --silent" fi _ACEOF cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 if \$ac_cs_recheck; then set X $SHELL '$0' $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion shift \$as_echo "running CONFIG_SHELL=$SHELL \$*" >&6 CONFIG_SHELL='$SHELL' export CONFIG_SHELL exec "\$@" fi _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 exec 5>>config.log { echo sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<_ASBOX ## Running $as_me. ## _ASBOX $as_echo "$ac_log" } >&5 _ACEOF cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 # # INIT-COMMANDS # $SHELL $srcdir/build/fastgen.sh $srcdir $ac_cv_mkdir_p $BSD_MAKEFILE $APACHE_FAST_OUTPUT_FILES _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # Handling of arguments. for ac_config_target in $ac_config_targets do case $ac_config_target in "include/ap_config_auto.h") CONFIG_HEADERS="$CONFIG_HEADERS include/ap_config_auto.h" ;; "docs/conf/httpd.conf") CONFIG_FILES="$CONFIG_FILES docs/conf/httpd.conf" ;; "docs/conf/extra/httpd-autoindex.conf") CONFIG_FILES="$CONFIG_FILES docs/conf/extra/httpd-autoindex.conf" ;; "docs/conf/extra/httpd-dav.conf") CONFIG_FILES="$CONFIG_FILES docs/conf/extra/httpd-dav.conf" ;; "docs/conf/extra/httpd-default.conf") CONFIG_FILES="$CONFIG_FILES docs/conf/extra/httpd-default.conf" ;; "docs/conf/extra/httpd-info.conf") CONFIG_FILES="$CONFIG_FILES docs/conf/extra/httpd-info.conf" ;; "docs/conf/extra/httpd-languages.conf") CONFIG_FILES="$CONFIG_FILES docs/conf/extra/httpd-languages.conf" ;; "docs/conf/extra/httpd-manual.conf") CONFIG_FILES="$CONFIG_FILES docs/conf/extra/httpd-manual.conf" ;; "docs/conf/extra/httpd-mpm.conf") CONFIG_FILES="$CONFIG_FILES docs/conf/extra/httpd-mpm.conf" ;; "docs/conf/extra/httpd-multilang-errordoc.conf") CONFIG_FILES="$CONFIG_FILES docs/conf/extra/httpd-multilang-errordoc.conf" ;; "docs/conf/extra/httpd-ssl.conf") CONFIG_FILES="$CONFIG_FILES docs/conf/extra/httpd-ssl.conf" ;; "docs/conf/extra/httpd-userdir.conf") CONFIG_FILES="$CONFIG_FILES docs/conf/extra/httpd-userdir.conf" ;; "docs/conf/extra/httpd-vhosts.conf") CONFIG_FILES="$CONFIG_FILES docs/conf/extra/httpd-vhosts.conf" ;; "docs/conf/extra/proxy-html.conf") CONFIG_FILES="$CONFIG_FILES docs/conf/extra/proxy-html.conf" ;; "include/ap_config_layout.h") CONFIG_FILES="$CONFIG_FILES include/ap_config_layout.h" ;; "support/apxs") CONFIG_FILES="$CONFIG_FILES support/apxs" ;; "support/apachectl") CONFIG_FILES="$CONFIG_FILES support/apachectl" ;; "support/dbmmanage") CONFIG_FILES="$CONFIG_FILES support/dbmmanage" ;; "support/envvars-std") CONFIG_FILES="$CONFIG_FILES support/envvars-std" ;; "support/log_server_status") CONFIG_FILES="$CONFIG_FILES support/log_server_status" ;; "support/logresolve.pl") CONFIG_FILES="$CONFIG_FILES support/logresolve.pl" ;; "support/phf_abuse_log.cgi") CONFIG_FILES="$CONFIG_FILES support/phf_abuse_log.cgi" ;; "support/split-logfile") CONFIG_FILES="$CONFIG_FILES support/split-logfile" ;; "build/rules.mk") CONFIG_FILES="$CONFIG_FILES build/rules.mk" ;; "build/pkg/pkginfo") CONFIG_FILES="$CONFIG_FILES build/pkg/pkginfo" ;; "build/config_vars.sh") CONFIG_FILES="$CONFIG_FILES build/config_vars.sh" ;; "default") CONFIG_COMMANDS="$CONFIG_COMMANDS default" ;; *) as_fn_error $? "invalid argument: \`$ac_config_target'" "$LINENO" 5;; esac done # If the user did not use the arguments to specify the items to instantiate, # then the envvar interface is used. Set only those that are not. # We use the long form for the default assignment because of an extremely # bizarre bug on SunOS 4.1.3. if $ac_need_defaults; then test "${CONFIG_FILES+set}" = set || CONFIG_FILES=$config_files test "${CONFIG_HEADERS+set}" = set || CONFIG_HEADERS=$config_headers test "${CONFIG_COMMANDS+set}" = set || CONFIG_COMMANDS=$config_commands fi # Have a temporary directory for convenience. Make it in the build tree # simply because there is no reason against having it here, and in addition, # creating and moving files from /tmp can sometimes cause problems. # Hook for its removal unless debugging. # Note that there is a small window in which the directory will not be cleaned: # after its creation but before its name has been assigned to `$tmp'. $debug || { tmp= ac_tmp= trap 'exit_status=$? : "${ac_tmp:=$tmp}" { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status ' 0 trap 'as_fn_exit 1' 1 2 13 15 } # Create a (secure) tmp directory for tmp files. { tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` && test -d "$tmp" } || { tmp=./conf$$-$RANDOM (umask 077 && mkdir "$tmp") } || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5 ac_tmp=$tmp # Set up the scripts for CONFIG_FILES section. # No need to generate them if there are no CONFIG_FILES. # This happens for instance with `./config.status config.h'. if test -n "$CONFIG_FILES"; then ac_cr=`echo X | tr X '\015'` # On cygwin, bash can eat \r inside `` if the user requested igncr. # But we know of no other shell where ac_cr would be empty at this # point, so we can use a bashism as a fallback. if test "x$ac_cr" = x; then eval ac_cr=\$\'\\r\' fi ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' /dev/null` if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then ac_cs_awk_cr='\\r' else ac_cs_awk_cr=$ac_cr fi echo 'BEGIN {' >"$ac_tmp/subs1.awk" && _ACEOF { echo "cat >conf$$subs.awk <<_ACEOF" && echo "$ac_subst_vars" | sed 's/.*/&!$&$ac_delim/' && echo "_ACEOF" } >conf$$subs.sh || as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5 ac_delim_num=`echo "$ac_subst_vars" | grep -c '^'` ac_delim='%!_!# ' for ac_last_try in false false false false false :; do . ./conf$$subs.sh || as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5 ac_delim_n=`sed -n "s/.*$ac_delim\$/X/p" conf$$subs.awk | grep -c X` if test $ac_delim_n = $ac_delim_num; then break elif $ac_last_try; then as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5 else ac_delim="$ac_delim!$ac_delim _$ac_delim!! " fi done rm -f conf$$subs.sh cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK && _ACEOF sed -n ' h s/^/S["/; s/!.*/"]=/ p g s/^[^!]*!// :repl t repl s/'"$ac_delim"'$// t delim :nl h s/\(.\{148\}\)..*/\1/ t more1 s/["\\]/\\&/g; s/^/"/; s/$/\\n"\\/ p n b repl :more1 s/["\\]/\\&/g; s/^/"/; s/$/"\\/ p g s/.\{148\}// t nl :delim h s/\(.\{148\}\)..*/\1/ t more2 s/["\\]/\\&/g; s/^/"/; s/$/"/ p b :more2 s/["\\]/\\&/g; s/^/"/; s/$/"\\/ p g s/.\{148\}// t delim ' >$CONFIG_STATUS || ac_write_fail=1 rm -f conf$$subs.awk cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 _ACAWK cat >>"\$ac_tmp/subs1.awk" <<_ACAWK && for (key in S) S_is_set[key] = 1 FS = "" } { line = $ 0 nfields = split(line, field, "@") substed = 0 len = length(field[1]) for (i = 2; i < nfields; i++) { key = field[i] keylen = length(key) if (S_is_set[key]) { value = S[key] line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3) len += length(value) + length(field[++i]) substed = 1 } else len += 1 + keylen } print line } _ACAWK _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g" else cat fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \ || as_fn_error $? "could not setup config files machinery" "$LINENO" 5 _ACEOF # VPATH may cause trouble with some makes, so we remove sole $(srcdir), # ${srcdir} and @srcdir@ entries from VPATH if srcdir is ".", strip leading and # trailing colons and then remove the whole line if VPATH becomes empty # (actually we leave an empty line to preserve line numbers). if test "x$srcdir" = x.; then ac_vpsub='/^[ ]*VPATH[ ]*=[ ]*/{ h s/// s/^/:/ s/[ ]*$/:/ s/:\$(srcdir):/:/g s/:\${srcdir}:/:/g s/:@srcdir@:/:/g s/^:*// s/:*$// x s/\(=[ ]*\).*/\1/ G s/\n// s/^[^=]*=[ ]*$// }' fi cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 fi # test -n "$CONFIG_FILES" # Set up the scripts for CONFIG_HEADERS section. # No need to generate them if there are no CONFIG_HEADERS. # This happens for instance with `./config.status Makefile'. if test -n "$CONFIG_HEADERS"; then cat >"$ac_tmp/defines.awk" <<\_ACAWK || BEGIN { _ACEOF # Transform confdefs.h into an awk script `defines.awk', embedded as # here-document in config.status, that substitutes the proper values into # config.h.in to produce config.h. # Create a delimiter string that does not exist in confdefs.h, to ease # handling of long lines. ac_delim='%!_!# ' for ac_last_try in false false :; do ac_tt=`sed -n "/$ac_delim/p" confdefs.h` if test -z "$ac_tt"; then break elif $ac_last_try; then as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5 else ac_delim="$ac_delim!$ac_delim _$ac_delim!! " fi done # For the awk script, D is an array of macro values keyed by name, # likewise P contains macro parameters if any. Preserve backslash # newline sequences. ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]* sed -n ' s/.\{148\}/&'"$ac_delim"'/g t rset :rset s/^[ ]*#[ ]*define[ ][ ]*/ / t def d :def s/\\$// t bsnl s/["\\]/\\&/g s/^ \('"$ac_word_re"'\)\(([^()]*)\)[ ]*\(.*\)/P["\1"]="\2"\ D["\1"]=" \3"/p s/^ \('"$ac_word_re"'\)[ ]*\(.*\)/D["\1"]=" \2"/p d :bsnl s/["\\]/\\&/g s/^ \('"$ac_word_re"'\)\(([^()]*)\)[ ]*\(.*\)/P["\1"]="\2"\ D["\1"]=" \3\\\\\\n"\\/p t cont s/^ \('"$ac_word_re"'\)[ ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p t cont d :cont n s/.\{148\}/&'"$ac_delim"'/g t clear :clear s/\\$// t bsnlc s/["\\]/\\&/g; s/^/"/; s/$/"/p d :bsnlc s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p b cont ' >$CONFIG_STATUS || ac_write_fail=1 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 for (key in D) D_is_set[key] = 1 FS = "" } /^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ { line = \$ 0 split(line, arg, " ") if (arg[1] == "#") { defundef = arg[2] mac1 = arg[3] } else { defundef = substr(arg[1], 2) mac1 = arg[2] } split(mac1, mac2, "(") #) macro = mac2[1] prefix = substr(line, 1, index(line, defundef) - 1) if (D_is_set[macro]) { # Preserve the white space surrounding the "#". print prefix "define", macro P[macro] D[macro] next } else { # Replace #undef with comments. This is necessary, for example, # in the case of _POSIX_SOURCE, which is predefined and required # on some systems where configure will not decide to define it. if (defundef == "undef") { print "/*", prefix defundef, macro, "*/" next } } } { print } _ACAWK _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 as_fn_error $? "could not setup config headers machinery" "$LINENO" 5 fi # test -n "$CONFIG_HEADERS" eval set X " :F $CONFIG_FILES :H $CONFIG_HEADERS :C $CONFIG_COMMANDS" shift for ac_tag do case $ac_tag in :[FHLC]) ac_mode=$ac_tag; continue;; esac case $ac_mode$ac_tag in :[FHL]*:*);; :L* | :C*:*) as_fn_error $? "invalid tag \`$ac_tag'" "$LINENO" 5;; :[FH]-) ac_tag=-:-;; :[FH]*) ac_tag=$ac_tag:$ac_tag.in;; esac ac_save_IFS=$IFS IFS=: set x $ac_tag IFS=$ac_save_IFS shift ac_file=$1 shift case $ac_mode in :L) ac_source=$1;; :[FH]) ac_file_inputs= for ac_f do case $ac_f in -) ac_f="$ac_tmp/stdin";; *) # Look for the file first in the build tree, then in the source tree # (if the path is not absolute). The absolute path cannot be DOS-style, # because $ac_f cannot contain `:'. test -f "$ac_f" || case $ac_f in [\\/$]*) false;; *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";; esac || as_fn_error 1 "cannot find input file: \`$ac_f'" "$LINENO" 5;; esac case $ac_f in *\'*) ac_f=`$as_echo "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac as_fn_append ac_file_inputs " '$ac_f'" done # Let's still pretend it is `configure' which instantiates (i.e., don't # use $as_me), people would be surprised to read: # /* config.h. Generated by config.status. */ configure_input='Generated from '` $as_echo "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g' `' by configure.' if test x"$ac_file" != x-; then configure_input="$ac_file. $configure_input" { $as_echo "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5 $as_echo "$as_me: creating $ac_file" >&6;} fi # Neutralize special characters interpreted by sed in replacement strings. case $configure_input in #( *\&* | *\|* | *\\* ) ac_sed_conf_input=`$as_echo "$configure_input" | sed 's/[\\\\&|]/\\\\&/g'`;; #( *) ac_sed_conf_input=$configure_input;; esac case $ac_tag in *:-:* | *:-) cat >"$ac_tmp/stdin" \ || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;; esac ;; esac ac_dir=`$as_dirname -- "$ac_file" || $as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$ac_file" : 'X\(//\)[^/]' \| \ X"$ac_file" : 'X\(//\)$' \| \ X"$ac_file" : 'X\(/\)' \| . 2>/dev/null || $as_echo X"$ac_file" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'` as_dir="$ac_dir"; as_fn_mkdir_p ac_builddir=. case "$ac_dir" in .) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;; *) ac_dir_suffix=/`$as_echo "$ac_dir" | sed 's|^\.[\\/]||'` # A ".." for each directory in $ac_dir_suffix. ac_top_builddir_sub=`$as_echo "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'` case $ac_top_builddir_sub in "") ac_top_builddir_sub=. ac_top_build_prefix= ;; *) ac_top_build_prefix=$ac_top_builddir_sub/ ;; esac ;; esac ac_abs_top_builddir=$ac_pwd ac_abs_builddir=$ac_pwd$ac_dir_suffix # for backward compatibility: ac_top_builddir=$ac_top_build_prefix case $srcdir in .) # We are building in place. ac_srcdir=. ac_top_srcdir=$ac_top_builddir_sub ac_abs_top_srcdir=$ac_pwd ;; [\\/]* | ?:[\\/]* ) # Absolute name. ac_srcdir=$srcdir$ac_dir_suffix; ac_top_srcdir=$srcdir ac_abs_top_srcdir=$srcdir ;; *) # Relative name. ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix ac_top_srcdir=$ac_top_build_prefix$srcdir ac_abs_top_srcdir=$ac_pwd/$srcdir ;; esac ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix case $ac_mode in :F) # # CONFIG_FILE # _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # If the template does not know about datarootdir, expand it. # FIXME: This hack should be removed a few years after 2.60. ac_datarootdir_hack=; ac_datarootdir_seen= ac_sed_dataroot=' /datarootdir/ { p q } /@datadir@/p /@docdir@/p /@infodir@/p /@localedir@/p /@mandir@/p' case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in *datarootdir*) ac_datarootdir_seen=yes;; *@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5 $as_echo "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;} _ACEOF cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_datarootdir_hack=' s&@datadir@&$datadir&g s&@docdir@&$docdir&g s&@infodir@&$infodir&g s&@localedir@&$localedir&g s&@mandir@&$mandir&g s&\\\${datarootdir}&$datarootdir&g' ;; esac _ACEOF # Neutralize VPATH when `$srcdir' = `.'. # Shell code in configure.ac might set extrasub. # FIXME: do we really want to maintain this feature? cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_sed_extra="$ac_vpsub $extrasub _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 :t /@[a-zA-Z_][a-zA-Z_0-9]*@/!b s|@configure_input@|$ac_sed_conf_input|;t t s&@top_builddir@&$ac_top_builddir_sub&;t t s&@top_build_prefix@&$ac_top_build_prefix&;t t s&@srcdir@&$ac_srcdir&;t t s&@abs_srcdir@&$ac_abs_srcdir&;t t s&@top_srcdir@&$ac_top_srcdir&;t t s&@abs_top_srcdir@&$ac_abs_top_srcdir&;t t s&@builddir@&$ac_builddir&;t t s&@abs_builddir@&$ac_abs_builddir&;t t s&@abs_top_builddir@&$ac_abs_top_builddir&;t t $ac_datarootdir_hack " eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \ >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5 test -z "$ac_datarootdir_hack$ac_datarootdir_seen" && { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } && { ac_out=`sed -n '/^[ ]*datarootdir[ ]*:*=/p' \ "$ac_tmp/out"`; test -z "$ac_out"; } && { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable \`datarootdir' which seems to be undefined. Please make sure it is defined" >&5 $as_echo "$as_me: WARNING: $ac_file contains a reference to the variable \`datarootdir' which seems to be undefined. Please make sure it is defined" >&2;} rm -f "$ac_tmp/stdin" case $ac_file in -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";; *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";; esac \ || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;; :H) # # CONFIG_HEADER # if test x"$ac_file" != x-; then { $as_echo "/* $configure_input */" \ && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" } >"$ac_tmp/config.h" \ || as_fn_error $? "could not create $ac_file" "$LINENO" 5 if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then { $as_echo "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5 $as_echo "$as_me: $ac_file is unchanged" >&6;} else rm -f "$ac_file" mv "$ac_tmp/config.h" "$ac_file" \ || as_fn_error $? "could not create $ac_file" "$LINENO" 5 fi else $as_echo "/* $configure_input */" \ && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \ || as_fn_error $? "could not create -" "$LINENO" 5 fi ;; :C) { $as_echo "$as_me:${as_lineno-$LINENO}: executing $ac_file commands" >&5 $as_echo "$as_me: executing $ac_file commands" >&6;} ;; esac case $ac_file$ac_mode in "default":C) true ;; esac done # for ac_tag as_fn_exit 0 _ACEOF ac_clean_files=$ac_clean_files_save test $ac_write_fail = 0 || as_fn_error $? "write failure creating $CONFIG_STATUS" "$LINENO" 5 # configure is writing to config.log, and then calls config.status. # config.status does its own redirection, appending to config.log. # Unfortunately, on DOS this fails, as config.log is still kept open # by configure, so config.status won't be able to write to it; its # output is simply discarded. So we exec the FD to /dev/null, # effectively closing config.log, so it can be properly (re)opened and # appended to by config.status. When coming back to configure, we # need to make the FD available again. if test "$no_create" != yes; then ac_cs_success=: ac_config_status_args= test "$silent" = yes && ac_config_status_args="$ac_config_status_args --quiet" exec 5>/dev/null $SHELL $CONFIG_STATUS $ac_config_status_args || ac_cs_success=false exec 5>>config.log # Use ||, not &&, to avoid exiting from the if with $? = 1, which # would make configure fail if this is the last instruction. $ac_cs_success || as_fn_exit 1 fi if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: unrecognized options: $ac_unrecognized_opts" >&5 $as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;} fi { $as_echo "$as_me:${as_lineno-$LINENO}: summary of build options: Server Version: ${HTTPD_VERSION} Install prefix: ${prefix} C compiler: ${APACHE_CONF_SEL_CC} CFLAGS: ${APACHE_CONF_SEL_CFLAGS} CPPFLAGS: ${APACHE_CONF_SEL_CPPFLAGS} LDFLAGS: ${APACHE_CONF_SEL_LDFLAGS} LIBS: ${APACHE_CONF_SEL_LIBS} C preprocessor: ${APACHE_CONF_SEL_CPP} " >&5 $as_echo "$as_me: summary of build options: Server Version: ${HTTPD_VERSION} Install prefix: ${prefix} C compiler: ${APACHE_CONF_SEL_CC} CFLAGS: ${APACHE_CONF_SEL_CFLAGS} CPPFLAGS: ${APACHE_CONF_SEL_CPPFLAGS} LDFLAGS: ${APACHE_CONF_SEL_LDFLAGS} LIBS: ${APACHE_CONF_SEL_LIBS} C preprocessor: ${APACHE_CONF_SEL_CPP} " >&6;} httpd-2.4.41/test/0002755000000000000500000000000013523273343012222 5ustar rootsrchttpd-2.4.41/test/test_parser.c0000644000000000000500000000411210455005461014710 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* This program tests the ap_get_list_item routine in ../main/util.c. * * The defines in this sample compile line are specific to Roy's system. * They should match whatever was used to compile Apache first. * gcc -g -O2 -I../os/unix -I../include -o test_parser \ -DSOLARIS2=250 -Wall -DALLOC_DEBUG -DPOOL_DEBUG \ ../main/alloc.o ../main/buff.o ../main/util.o \ ../ap/libap.a -lsocket -lnsl test_parser.c * * Roy Fielding, 1999 */ #include #include #include "httpd.h" #include "apr_general.h" /* * Dummy a bunch of stuff just to get a compile */ uid_t ap_user_id; gid_t ap_group_id; void *ap_dummy_mutex = &ap_dummy_mutex; char *ap_server_argv0; AP_DECLARE(void) ap_block_alarms(void) { ; } AP_DECLARE(void) ap_unblock_alarms(void) { ; } AP_DECLARE(void) ap_log_error(const char *file, int line, int level, const request_rec *r, const char *fmt, ...) { ; } int main (void) { apr_pool_t *p; const char *field; char *newstr; char instr[512]; p = apr_pool_alloc_init(); while (gets(instr)) { printf(" [%s] ==\n", instr); field = instr; while ((newstr = ap_get_list_item(p, &field)) != NULL) printf(" <%s> ..\n", newstr); } exit(0); } httpd-2.4.41/test/check_chunked0000644000000000000500000000327110455012627014721 0ustar rootsrc#!/usr/bin/perl -w # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # This is meant to be used on the raw output of an HTTP/1.1 connection # to check that the chunks are all correctly laid out. It's easiest # to use a tool like netcat to generate the output. This script # *insists* that \r exist in the output. # # You can find netcat at avian.org:/src/hacks/nc110.tgz. use strict; my $is_chunked = 0; # must toss headers while(<>) { if (/^Transfer-Encoding:\s+chunked/i) { $is_chunked = 1; } last if ($_ eq "\r\n"); } $is_chunked || die "wasn't chunked\n"; for(;;) { $_ = <> || die "unexpected end of file!\n"; m#^([0-9a-f]+) *\r$#i || die "bogus chunklen: $_"; my $chunklen = hex($1); exit 0 if ($chunklen == 0); chop; chop; print "$_ "; my $data = ''; read(ARGV, $data, $chunklen) == $chunklen || die "short read!\n"; $_ = <> || die "unexpected end of file!\n"; $_ eq "\r\n" || die "missing chunk trailer!\n"; } httpd-2.4.41/test/make_sni.sh0000644000000000000500000003035112757564422014355 0ustar rootsrc#!/bin/sh # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # This script will populate a directory 'sni' with 3 sites, httpd.conf # and certificates as to facilitate testing of TLS server name # indication support (RFC 4366) or SNI. # # OPENSSL=${OPENSSL:-openssl} DOMAIN=${DOMAIN:-my-sni-test.org} DIR=${DIR:-$PWD/sni} # List of hostnames automatically created by default. NAMES=${NAMES:-ape nut pear apple banana} # IP address these hostnames are bound to. IP=${IP:-127.0.0.1} # A certificate password for the .p12 files of the client # authentication test. Normally not set. However some browsers # require a password of at least 4 characters. # PASSWD=${PASSWD:-} args=`getopt a:fd:D:p: $*` if [ $? != 0 ]; then echo "Syntax: $0 [-f] [-a IPaddress] [-d outdir] [-D domain ] [two or more vhost names ]" echo " -f Force overwriting of outdir (default is $DIR)" echo " -d dir Directory to create the SNI test server in (default is $DIR)" echo " -D domain Domain name to use for this test (default is $DOMAIN)" echo " -a IP IP address to use for this virtual host (default is $IP)" echo " -p str Password for the client certificate test (some browsers require a set password)" echo " [names] List of optional vhost names (default is $NAMES)" echo echo "Example:" echo " $0 -D SecureBlogsAreUs.com peter fred mary jane ardy" echo echo "Which will create peter.SecureBlogsAreUs.com, fred.SecureBlogsAreUs.com and" echo "so on. Note that the _first_ FQDN is also the default for non SNI hosts. It" echo "may make sense to give this host a generic name - and allow each of the real" echo "SNI site as sub directories/URI's of this generic name; thus allowing the " echo "few non-SNI browsers access." exit 1 fi set -- $args for i do case "$i" in -f) FORCE=1 shift;; -a) IP=$2; shift shift;; -d) DIR=$2; shift shift;; -p) PASSWD=$2; shift shift;; -D) DOMAIN=$2; shift shift;; --) shift; break; esac done if [ $# = 1 ]; then echo "Aborted - just specifying one vhost makes no sense for SNI testing. Go wild !" exit 1 fi if [ $# -gt 0 ]; then NAMES=$* fi if ! openssl version | grep -q OpenSSL; then echo Aborted - your openssl is very old or misconfigured. exit 1 fi set `openssl version` if test "0$2" \< "00.9"; then echo Aborted - version of openssl too old, 0.9 or up required. exit 1 fi if test -d ${DIR} -a "x$FORCE" != "x1"; then echo Aborted - already an ${DIR} directory. Use the -f flag to overwrite. exit 1 fi mkdir -p ${DIR} || exit 1 mkdir -p ${DIR}/ssl ${DIR}/htdocs ${DIR}/logs || exit 1 # Create a 'CA' - keep using different serial numbers # as the browsers get upset if they see an identical # serial with a different pub-key. # # Note that we're not relying on the 'v3_ca' section as # in the default openssl.conf file - so the certificate # will be without the basicConstraints = CA:true and # keyUsage = cRLSign, keyCertSign values. This is fine # for most browsers. # serial=$RANDOM$$ openssl req -new -nodes -batch \ -x509 \ -days 10 -subj '/CN=Da Root/O=SNI testing/' -set_serial $serial \ -keyout ${DIR}/root.key -out ${DIR}/root.pem \ || exit 2 CDIR=${DIR}/client-xs-control mkdir -p ${CDIR} # Create some certificate authorities for testing client controls # openssl req -new -nodes -batch \ -x509 \ -days 10 -subj '/CN=Da Second Root/O=SNI user access I/' -set_serial 2$serial$$\ -keyout ${CDIR}/xs-root-1.key -out ${CDIR}/xs-root-1.pem \ || exit 2 openssl req -new -nodes -batch \ -x509 \ -days 10 -subj '/CN=Da Second Root/O=SNI user access II/' -set_serial 3$serial$$ \ -keyout ${CDIR}/xs-root-2.key -out ${CDIR}/xs-root-2.pem \ || exit 2 # Create a chain of just the two access authorites: cat ${CDIR}/xs-root-2.pem ${CDIR}/xs-root-1.pem > ${CDIR}/xs-root-chain.pem # And likewise a directory with the same information (using the # required 'hash' naming format # mkdir -p ${CDIR}/xs-root-dir || exit 1 rm -f {$CDIR}/*.0 ln ${CDIR}/xs-root-1.pem ${CDIR}/xs-root-dir/`openssl x509 -noout -hash -in ${CDIR}/xs-root-1.pem`.0 ln ${CDIR}/xs-root-2.pem ${CDIR}/xs-root-dir/`openssl x509 -noout -hash -in ${CDIR}/xs-root-2.pem`.0 # Use the above two client certificate authorities to make a few users for i in 1 2 do # Create a certificate request for a test user. # openssl req -new -nodes -batch \ -days 9 -subj "/CN=User $i/O=SNI Test Crash Dummy Dept/" \ -keyout ${CDIR}/client-$i.key -out ${CDIR}/client-$i.req -batch \ || exit 3 # And get it signed by either our client cert issuing root authority. # openssl x509 -text -req \ -CA ${CDIR}/xs-root-$i.pem -CAkey ${CDIR}/xs-root-$i.key \ -set_serial 3$serial$$ -in ${CDIR}/client-$i.req -out ${CDIR}/client-$i.pem \ || exit 4 # And create a pkcs#12 version for easy browser import. # openssl pkcs12 -export \ -inkey ${CDIR}/client-$i.key -in ${CDIR}/client-$i.pem -name "Client $i" \ -caname "Issuing client root $i" -certfile ${CDIR}/xs-root-$i.pem \ -out ${CDIR}/client.p12 -passout pass:"$PASSWD" || exit 5 rm ${CDIR}/client-$i.req done # Create the header for the example '/etc/hosts' file. # echo '# To append to your hosts file' > ${DIR}/hosts # Create a header for the httpd.conf snipped. # cat > ${DIR}/httpd-sni.conf << EOM # To append to your httpd.conf file' Listen ${IP}:443 NameVirtualHost ${IP}:443 LoadModule ssl_module modules/mod_ssl.so SSLRandomSeed startup builtin SSLRandomSeed connect builtin LogLevel debug TransferLog ${DIR}/logs/access_log ErrorLog ${DIR}/logs/error_log # You'll get a warning about this. # SSLSessionCache none # Note that this SSL configuration is far # from complete - you propably will want # to configure SSLSession Caches at the # very least. Options None AllowOverride None Require all denied allow from all Require all granted # This first entry is also the default for non SNI # supporting clients. # EOM # Create the header of a sample BIND zone file. # ( echo "; Configuration sample to be added to the $DOMAIN zone file of BIND." echo "\$ORIGIN $DOMAIN." ) > ${DIR}/zone-file ZADD="IN A $IP" INFO="and also the site you see when the browser does not support SNI." set -- ${NAMES} DEFAULT=$1 for n in ${NAMES} do FQDN=$n.$DOMAIN serial=`expr $serial + 1` # Create a certificate request for this host. # openssl req -new -nodes -batch \ -days 9 -subj "/CN=$FQDN/O=SNI Testing/" \ -keyout ${DIR}/$n.key -out ${DIR}/$n.req -batch \ || exit 3 # And get it signed by our root authority. # openssl x509 -text -req \ -CA ${DIR}/root.pem -CAkey ${DIR}/root.key \ -set_serial $serial -in ${DIR}/$n.req -out ${DIR}/$n.pem \ || exit 4 # Combine the key and certificate in one file. # cat ${DIR}/$n.pem ${DIR}/$n.key > ${DIR}/ssl/$n.crt rm ${DIR}/$n.req ${DIR}/$n.key ${DIR}/$n.pem LST="$LST https://$FQDN/index.html" # Create a /etc/host and bind-zone file example # echo "${IP} $FQDN $n" >> ${DIR}/hosts echo "$n $ZADD" >> ${DIR}/zone-file ZADD="IN CNAME $DEFAULT" # Create and populate a docroot for this host. # mkdir -p ${DIR}/htdocs/$n || exit 1 echo We are $FQDN $INFO > ${DIR}/htdocs/$n/index.html || exit 1 # And change the info text - so that only the default/fallback site # gets marked as such. # INFO="and you'd normally only see this site when there is proper SNI support." # And create a configuration snipped. # cat >> ${DIR}/httpd-sni.conf << EOM SSLEngine On ServerName $FQDN:443 DocumentRoot ${DIR}/htdocs/$n SSLCertificateChainFile ${DIR}/root.pem SSLCertificateFile ${DIR}/ssl/$n.crt # Uncomment the following lines if you # want to only allow access to clients with # a certificate issued/signed by some # selection of the issuing authorites # # SSLCACertificate ${CDIR}/xs-root-1.pem # just root 1 # SSLCACertificate ${CDIR}/xs-root-2.pem # just root 2 # SSLCACertificate ${CDIR}/xs-root-chain.pem # 1 & 2 # SSLCACertificateDir ${CDIR}/xs-root-dir # 1 & 2 - but as a directory. # # SSLVerifyClient require # SSLVerifyDepth 2 # TransferLog ${DIR}/logs/access_$n EOM done cat << EOM SNI Files generated =================== The directory ${DIR}/sni has been populated with the following - root.key|pem Certificate authority root and key. (You could import the root.pem key into your browser to quell warnings about an unknown authority). - hosts /etc/hosts file with fake entries for the hosts - htdocs directory with one docroot for each domain, each with a small sample file. - ssl directory with an ssl cert (signed by root) for each of the domains). - logs logfiles, one for each domain and an access_log for any misses. The directory ${CDIR} contains optional test files to allow client authentication testing: - client*pem/p12 Files for client authentication testing. These need to be imported into the browser. - xs-root-1/2 Certificate authority which has issued above client authentication certificates. - xs-root-dir A directory specific for the SSLCACertificateDir directive. - xs-root-chain A chain of the two client xs authorities for the SSLCACertificate directive. SNI Test ======== A directory ${DIR}/sni has been created. Run an apache server against it with .../httpd -f ${DIR}/httpd-sni.conf and keep an eye on ${DIR}/logs/error_log. When everything is fine you will see entries like: Feb 11 16:12:26 2008] [debug] Init: SSL server IP/port overlap: ape.*:443 (httpd-sni.conf:24) vs. jane.*:443 (httpd-sni.conf:42) for each vhost configured and a concluding warning: [Mon Feb 11 16:12:26 2008] [warn] Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366) HOWEVER - If you see an entry like: [Mon Feb 11 15:41:41 2008] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!! then you are either using an OpenSSL which is too old and/or you need to ensure that the TLS Extensions are compiled into openssl with the 'enable-tlsext' flag. Once you have recompiled or reinstalled OpenSSL with TLS Extensions you will have to recompile mod_ssl to allow it to recognize SNI support. Meanwhile add 'hosts' to your c:\windows\system32\drivers\etc\hosts or /etc/hosts file as to point the various URL's to your server: $LST and verify that each returns its own name (and an entry in its own ${DIR}/logs) file). NOTE ==== Note that in the generated example the 'first' domain is special - and is the catch all for non-SNI browsers. Depending on your circumstances it may make sense to use a generic name - and have each of the SNI domains as subdirectories (and hence URI's under this generic name). Thus allowing non SNI browsers also access to those sites. EOM exit 0 httpd-2.4.41/test/README0000644000000000000500000000025510150161574013075 0ustar rootsrcThis directory contains useful test code for testing various bits of Apache functionality. This stuff is for the developers only, so we might remove it on public releases. httpd-2.4.41/test/test-writev.c0000644000000000000500000000613210455005461014656 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* test-writev: use this to figure out if your writev() does intelligent things on the network. Some writev()s when given multiple buffers will break them up into multiple packets, which is a waste. Linux prior to 2.0.31 has this problem. Solaris 2.5, 2.5.1 doesn't appear to, 2.6 hasn't been tested. IRIX 5.3 doesn't have this problem. To use this you want to snoop the wire with tcpdump, and then run "test-writev a.b.c.d port#" ... against some TCP service on another box. For example you can run it against port 80 on another server. You want to look to see how many data packets are sent, you're hoping only one of size 300 is sent. */ #include #include #include #include #include #include #include #include #include #ifndef INADDR_NONE #define INADDR_NONE (-1ul) #endif void main( int argc, char **argv ) { struct sockaddr_in server_addr; int s; struct iovec vector[3]; char buf[100]; int i; const int just_say_no = 1; if( argc != 3 ) { usage: fprintf( stderr, "usage: test-writev a.b.c.d port#\n" ); exit( 1 ); } server_addr.sin_family = AF_INET; server_addr.sin_addr.s_addr = inet_addr( argv[1] ); if( server_addr.sin_addr.s_addr == INADDR_NONE ) { fprintf( stderr, "bogus address\n" ); goto usage; } server_addr.sin_port = htons( atoi( argv[2] ) ); s = socket( AF_INET, SOCK_STREAM, 0 ); if( s < 0 ) { perror("socket"); exit(1); } if( connect( s, (struct sockaddr *)&server_addr, sizeof( server_addr ) ) != 0 ) { perror("connect"); exit(1); } if( setsockopt(s, IPPROTO_TCP, TCP_NODELAY, (char*)&just_say_no, sizeof(just_say_no)) != 0 ) { perror( "TCP_NODELAY" ); exit(1); } /* now build up a two part writev and write it out */ for( i = 0; i < sizeof( buf ); ++i ) { buf[i] = 'x'; } vector[0].iov_base = buf; vector[0].iov_len = sizeof(buf); vector[1].iov_base = buf; vector[1].iov_len = sizeof(buf); vector[2].iov_base = buf; vector[2].iov_len = sizeof(buf); i = writev( s, &vector[0], 3 ); fprintf( stdout, "i=%d, errno=%d\n", i, errno ); exit(0); } httpd-2.4.41/test/test_limits.c0000644000000000000500000001345212117404217014723 0ustar rootsrc/************************************************************** * test_limits.c * * A simple program for sending abusive requests to a server, based * on the sioux.c exploit code that this nimrod posted (see below). * Roy added options for testing long header fieldsize (-t h), long * request-lines (-t r), and a long request body (-t b). * * FreeBSD 2.2.x, FreeBSD 3.0, IRIX 5.3, IRIX 6.2: * gcc -o test_limits test_limits.c * * Solaris 2.5.1: * gcc -o test_limits test_limits.c -lsocket -lnsl * * * Message-ID: <861zqspvtw.fsf@niobe.ewox.org> * Date: Fri, 7 Aug 1998 19:04:27 +0200 * Sender: Bugtraq List * From: Dag-Erling Coidan =?ISO-8859-1?Q?Sm=F8rgrav?= * Subject: YA Apache DoS attack * * Copyright (c) 1998 Dag-Erling Codan Smrgrav * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer * in this position and unchanged. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * 3. The name of the author may not be used to endorse or promote products * derived from this software withough specific prior written permission * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. * */ /* * Kudos to Mark Huizer who originally suggested this on freebsd-current */ #include #include #include #include #include #include #include #include #include #define TEST_LONG_REQUEST_LINE 1 #define TEST_LONG_REQUEST_FIELDS 2 #define TEST_LONG_REQUEST_FIELDSIZE 3 #define TEST_LONG_REQUEST_BODY 4 void usage(void) { fprintf(stderr, "usage: test_limits [-t (r|n|h|b)] [-a address] [-p port] [-n num]\n"); exit(1); } int main(int argc, char *argv[]) { struct sockaddr_in sin; struct hostent *he; FILE *f; int o, sd; /* default parameters */ char *addr = "localhost"; int port = 80; int num = 1000; int testtype = TEST_LONG_REQUEST_FIELDS; /* get options */ while ((o = getopt(argc, argv, "t:a:p:n:")) != EOF) switch (o) { case 't': if (*optarg == 'r') testtype = TEST_LONG_REQUEST_LINE; else if (*optarg == 'n') testtype = TEST_LONG_REQUEST_FIELDS; else if (*optarg == 'h') testtype = TEST_LONG_REQUEST_FIELDSIZE; else if (*optarg == 'b') testtype = TEST_LONG_REQUEST_BODY; break; case 'a': addr = optarg; break; case 'p': port = atoi(optarg); break; case 'n': num = atoi(optarg); break; default: usage(); } if (argc != optind) usage(); /* connect */ if ((he = gethostbyname(addr)) == NULL) { perror("gethostbyname"); exit(1); } memset(&sin, sizeof(sin)); memcpy((char *)&sin.sin_addr, he->h_addr, he->h_length); sin.sin_family = he->h_addrtype; sin.sin_port = htons(port); if ((sd = socket(sin.sin_family, SOCK_STREAM, IPPROTO_TCP)) == -1) { perror("socket"); exit(1); } if (connect(sd, (struct sockaddr *)&sin, sizeof(sin)) == -1) { perror("connect"); exit(1); } if ((f = fdopen(sd, "r+")) == NULL) { perror("fdopen"); exit(1); } /* attack! */ fprintf(stderr, "Testing like a plague of locusts on %s\n", addr); if (testtype == TEST_LONG_REQUEST_LINE) { fprintf(f, "GET "); while (num-- && !ferror(f)) { fprintf(f, "/123456789"); fflush(f); } fprintf(f, " HTTP/1.0\r\n\r\n"); } else { fprintf(f, "GET /fred/foo HTTP/1.0\r\n"); if (testtype == TEST_LONG_REQUEST_FIELDSIZE) { while (num-- && !ferror(f)) { fprintf(f, "User-Agent: sioux"); fflush(f); } fprintf(f, "\r\n"); } else if (testtype == TEST_LONG_REQUEST_FIELDS) { while (num-- && !ferror(f)) fprintf(f, "User-Agent: sioux\r\n"); fprintf(f, "\r\n"); } else if (testtype == TEST_LONG_REQUEST_BODY) { fprintf(f, "User-Agent: sioux\r\n"); fprintf(f, "Content-Length: 33554433\r\n"); fprintf(f, "\r\n"); while (num-- && !ferror(f)) fprintf(f, "User-Agent: sioux\r\n"); } else { fprintf(f, "\r\n"); } } fflush(f); { apr_ssize_t len; char buff[512]; while ((len = read(sd, buff, 512)) > 0) len = write(1, buff, len); } if (ferror(f)) { perror("fprintf"); exit(1); } fclose(f); exit(0); } httpd-2.4.41/test/tcpdumpscii.txt0000644000000000000500000000231510150161574015301 0ustar rootsrc From marcs@znep.com Fri Apr 17 15:16:16 1998 Date: Sat, 22 Nov 1997 20:44:10 -0700 (MST) From: Marc Slemko To: TLOSAP Subject: Re: Getting ethernet packets content under FreeBSD? (fwd) Reply-To: new-httpd@apache.org Anyone too lazy to hack tcpdump (eg. my tcpdump has a -X option to display the data in ASCII) can use something like the below to grab HTTP headers when debugging broken clients. Nothing complicated, but handy. ---------- Forwarded message ---------- Date: Sat, 22 Nov 1997 14:35:23 PST From: Bill Fenner To: Nate Williams Cc: bmah@ca.sandia.gov, hackers@FreeBSD.ORG Subject: Re: Getting ethernet packets content under FreeBSD? I usually just use this perl script, which I call "tcpdumpscii". Then run "tcpdumpscii -s 1500 -x [other tcpdump args]". Bill #!/import/misc/bin/perl # # open(TCPDUMP,"tcpdump -l @ARGV|"); while () { if (/^\s+(\S\S)+/) { $sav = $_; $asc = ""; while (s/\s*(\S\S)\s*//) { $i = hex($1); if ($i < 32 || $i > 126) { $asc .= "."; } else { $asc .= pack(C,hex($1)); } } $foo = "." x length($asc); $_ = $sav; s/\t/ /g; s/^$foo/$asc/; } print; } httpd-2.4.41/test/test_find.c0000644000000000000500000000425310455005461014342 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* This program tests the ap_find_list_item routine in ../main/util.c. * * The defines in this sample compile line are specific to Roy's system. * They should match whatever was used to compile Apache first. * gcc -g -O2 -I../os/unix -I../include -o test_find \ -DSOLARIS2=250 -Wall -DALLOC_DEBUG -DPOOL_DEBUG \ ../main/alloc.o ../main/buff.o ../main/util.o \ ../ap/libap.a -lsocket -lnsl test_find.c * * Roy Fielding, 1999 */ #include #include #include "httpd.h" #include "apr_general.h" /* * Dummy a bunch of stuff just to get a compile */ uid_t ap_user_id; gid_t ap_group_id; void *ap_dummy_mutex = &ap_dummy_mutex; char *ap_server_argv0; AP_DECLARE(void) ap_block_alarms(void) { ; } AP_DECLARE(void) ap_unblock_alarms(void) { ; } AP_DECLARE(void) ap_log_error(const char *file, int line, int level, const request_rec *r, const char *fmt, ...) { ; } int main (void) { apr_pool_t *p; char line[512]; char tok[512]; p = apr_pool_alloc_init(); printf("Enter field value to find items within:\n"); if (!gets(line)) exit(0); printf("Enter search item:\n"); while (gets(tok)) { printf(" [%s] == %s\n", tok, ap_find_list_item(p, line, tok) ? "Yes" : "No"); printf("Enter search item:\n"); } exit(0); } httpd-2.4.41/test/.indent.pro0000644000000000000500000000127510150161574014301 0ustar rootsrc-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int httpd-2.4.41/test/test_select.c0000644000000000000500000000266510455005461014706 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* This is just a quick test program to see how long a wait is * produced by a select loop with an exponential backoff. * * gcc -g -O2 -o test_select test_select.c * test_select * * Roy Fielding, 1996 */ #include #include #include int main (void) { int srv; long waittime = 4096; struct timeval tv; printf("Start\n"); while ((waittime > 0) && (waittime < 3000000)) { printf("%d\n", waittime); tv.tv_sec = waittime/1000000; tv.tv_usec = waittime%1000000; waittime <<= 1; srv = select(0, NULL, NULL, NULL, &tv); } printf("End\n"); exit(0); } httpd-2.4.41/test/cls.c0000644000000000000500000001100510455005461013135 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include /* * Compare a string to a mask * Mask characters: * @ - uppercase letter * # - lowercase letter * & - hex digit * # - digit * * - swallow remaining characters * - exact match for any other character */ static int checkmask(const char *data, const char *mask) { int i, ch, d; for (i = 0; mask[i] != '\0' && mask[i] != '*'; i++) { ch = mask[i]; d = data[i]; if (ch == '@') { if (!isupper(d)) return 0; } else if (ch == '$') { if (!islower(d)) return 0; } else if (ch == '#') { if (!isdigit(d)) return 0; } else if (ch == '&') { if (!isxdigit(d)) return 0; } else if (ch != d) return 0; } if (mask[i] == '*') return 1; else return (data[i] == '\0'); } /* * Converts 8 hex digits to a time integer */ static int hex2sec(const char *x) { int i, ch; unsigned int j; for (i = 0, j = 0; i < 8; i++) { ch = x[i]; j <<= 4; if (isdigit(ch)) j |= ch - '0'; else if (isupper(ch)) j |= ch - ('A' - 10); else j |= ch - ('a' - 10); } if (j == 0xffffffff) return -1; /* so that it works with 8-byte ints */ else return j; } int main(int argc, char **argv) { int i, ver; DIR *d; struct dirent *e; const char *s; FILE *fp; char path[FILENAME_MAX + 1]; char line[1035]; time_t date, lmod, expire; unsigned int len; struct tm ts; char sdate[30], slmod[30], sexpire[30]; const char time_format[] = "%e %b %Y %R"; if (argc != 2) { printf("Usage: cls directory\n"); exit(0); } d = opendir(argv[1]); if (d == NULL) { perror("opendir"); exit(1); } for (;;) { e = readdir(d); if (e == NULL) break; s = e->d_name; if (s[0] == '.' || s[0] == '#') continue; sprintf(path, "%s/%s", argv[1], s); fp = fopen(path, "r"); if (fp == NULL) { perror("fopen"); continue; } if (fgets(line, 1034, fp) == NULL) { perror("fgets"); fclose(fp); continue; } if (!checkmask(line, "&&&&&&&& &&&&&&&& &&&&&&&& &&&&&&&& &&&&&&&&\n")) { fprintf(stderr, "Bad cache file\n"); fclose(fp); continue; } date = hex2sec(line); lmod = hex2sec(line + 9); expire = hex2sec(line + 18); ver = hex2sec(line + 27); len = hex2sec(line + 35); if (fgets(line, 1034, fp) == NULL) { perror("fgets"); fclose(fp); continue; } fclose(fp); i = strlen(line); if (strncmp(line, "X-URL: ", 7) != 0 || line[i - 1] != '\n') { fprintf(stderr, "Bad cache file\n"); continue; } line[i - 1] = '\0'; if (date != -1) { ts = *gmtime(&date); strftime(sdate, 30, time_format, &ts); } else strcpy(sdate, "-"); if (lmod != -1) { ts = *gmtime(&lmod); strftime(slmod, 30, time_format, &ts); } else strcpy(slmod, "-"); if (expire != -1) { ts = *gmtime(&expire); strftime(sexpire, 30, time_format, &ts); } else strcpy(sexpire, "-"); printf("%s: %d; %s %s %s\n", line + 7, ver, sdate, slmod, sexpire); } closedir(d); return 0; } httpd-2.4.41/test/Makefile.in0000644000000000000500000000100011673671761014266 0ustar rootsrc # no targets: we don't want to build anything by default. if you want the # test programs, then "make test" TARGETS = bin_PROGRAMS = PROGRAM_LDADD = $(EXTRA_LDFLAGS) $(PROGRAM_DEPENDENCIES) $(EXTRA_LIBS) PROGRAM_DEPENDENCIES = \ $(top_srcdir)/srclib/apr-util/libaprutil.la \ $(top_srcdir)/srclib/apr/libapr.la include $(top_builddir)/build/rules.mk test: $(bin_PROGRAMS) # example for building a test proggie # dbu_OBJECTS = dbu.lo # dbu: $(dbu_OBJECTS) # $(LINK) $(dbu_OBJECTS) $(PROGRAM_LDADD) httpd-2.4.41/test/time-sem.c0000644000000000000500000003464210455005461014110 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* time-sem.c has the basics of the semaphores we use in http_main.c. It's intended for timing differences between various methods on an architecture. In practice we've found many things affect which semaphore to be used: - NFS filesystems absolutely suck for fcntl() and flock() - uslock absolutely sucks on single-processor IRIX boxes, but absolutely rocks on multi-processor boxes. The converse is true for fcntl. sysvsem seems a moderate balance. - Under Solaris you can't have too many processes use SEM_UNDO, there might be a tuneable somewhere that increases the limit from 29. We're not sure what the tunable is, so there's a define NO_SEM_UNDO which can be used to simulate us trapping/blocking signals to be able to properly release the semaphore on a clean child death. You'll also need to define NEED_UNION_SEMUN under solaris. You'll need to define USE_SHMGET_SCOREBOARD if anonymous shared mmap() doesn't work on your system (i.e. linux). argv[1] is the #children, argv[2] is the #iterations per child You should run each over many different #children inputs, and choose #iter such that the program runs for at least a second or so... or even longer depending on your patience. compile with: gcc -o time-FCNTL -Wall -O time-sem.c -DUSE_FCNTL_SERIALIZED_ACCEPT gcc -o time-FLOCK -Wall -O time-sem.c -DUSE_FLOCK_SERIALIZED_ACCEPT gcc -o time-SYSVSEM -Wall -O time-sem.c -DUSE_SYSVSEM_SERIALIZED_ACCEPT gcc -o time-SYSVSEM2 -Wall -O time-sem.c -DUSE_SYSVSEM_SERIALIZED_ACCEPT -DNO_SEM_UNDO gcc -o time-PTHREAD -Wall -O time-sem.c -DUSE_PTHREAD_SERIALIZED_ACCEPT -lpthread gcc -o time-USLOCK -Wall -O time-sem.c -DUSE_USLOCK_SERIALIZED_ACCEPT not all versions work on all systems. */ #include #include #include #include #include #include #include #include #include #include #include #include #if defined(USE_FCNTL_SERIALIZED_ACCEPT) static struct flock lock_it; static struct flock unlock_it; static int fcntl_fd=-1; #define accept_mutex_child_init() #define accept_mutex_cleanup() /* * Initialize mutex lock. * Must be safe to call this on a restart. */ void accept_mutex_init(void) { lock_it.l_whence = SEEK_SET; /* from current point */ lock_it.l_start = 0; /* -"- */ lock_it.l_len = 0; /* until end of file */ lock_it.l_type = F_WRLCK; /* set exclusive/write lock */ lock_it.l_pid = 0; /* pid not actually interesting */ unlock_it.l_whence = SEEK_SET; /* from current point */ unlock_it.l_start = 0; /* -"- */ unlock_it.l_len = 0; /* until end of file */ unlock_it.l_type = F_UNLCK; /* set exclusive/write lock */ unlock_it.l_pid = 0; /* pid not actually interesting */ printf("opening test-lock-thing in current directory\n"); fcntl_fd = open("test-lock-thing", O_CREAT | O_WRONLY | O_EXCL, 0644); if (fcntl_fd == -1) { perror ("open"); fprintf (stderr, "Cannot open lock file: %s\n", "test-lock-thing"); exit (1); } unlink("test-lock-thing"); } void accept_mutex_on(void) { int ret; while ((ret = fcntl(fcntl_fd, F_SETLKW, &lock_it)) < 0 && errno == EINTR) continue; if (ret < 0) { perror ("fcntl lock_it"); exit(1); } } void accept_mutex_off(void) { if (fcntl (fcntl_fd, F_SETLKW, &unlock_it) < 0) { perror ("fcntl unlock_it"); exit(1); } } #elif defined(USE_FLOCK_SERIALIZED_ACCEPT) #include static int flock_fd=-1; #define FNAME "test-lock-thing" /* * Initialize mutex lock. * Must be safe to call this on a restart. */ void accept_mutex_init(void) { printf("opening " FNAME " in current directory\n"); flock_fd = open(FNAME, O_CREAT | O_WRONLY | O_EXCL, 0644); if (flock_fd == -1) { perror ("open"); fprintf (stderr, "Cannot open lock file: %s\n", "test-lock-thing"); exit (1); } } void accept_mutex_child_init(void) { flock_fd = open(FNAME, O_WRONLY, 0600); if (flock_fd == -1) { perror("open"); exit(1); } } void accept_mutex_cleanup(void) { unlink(FNAME); } void accept_mutex_on(void) { int ret; while ((ret = flock(flock_fd, LOCK_EX)) < 0 && errno == EINTR) continue; if (ret < 0) { perror ("flock(LOCK_EX)"); exit(1); } } void accept_mutex_off(void) { if (flock (flock_fd, LOCK_UN) < 0) { perror ("flock(LOCK_UN)"); exit(1); } } #elif defined (USE_SYSVSEM_SERIALIZED_ACCEPT) #include #include #include static int sem_id = -1; #ifdef NO_SEM_UNDO static sigset_t accept_block_mask; static sigset_t accept_previous_mask; #endif #define accept_mutex_child_init() #define accept_mutex_cleanup() void accept_mutex_init(void) { #ifdef NEED_UNION_SEMUN /* believe it or not, you need to define this under solaris */ union semun { int val; struct semid_ds *buf; ushort *array; }; #endif union semun ick; sem_id = semget(999, 1, IPC_CREAT | 0666); if (sem_id < 0) { perror ("semget"); exit (1); } ick.val = 1; if (semctl(sem_id, 0, SETVAL, ick) < 0) { perror ("semctl"); exit(1); } #ifdef NO_SEM_UNDO sigfillset(&accept_block_mask); sigdelset(&accept_block_mask, SIGHUP); sigdelset(&accept_block_mask, SIGTERM); sigdelset(&accept_block_mask, SIGUSR1); #endif } void accept_mutex_on() { struct sembuf op; #ifdef NO_SEM_UNDO if (sigprocmask(SIG_BLOCK, &accept_block_mask, &accept_previous_mask)) { perror("sigprocmask(SIG_BLOCK)"); exit (1); } op.sem_flg = 0; #else op.sem_flg = SEM_UNDO; #endif op.sem_num = 0; op.sem_op = -1; if (semop(sem_id, &op, 1) < 0) { perror ("accept_mutex_on"); exit (1); } } void accept_mutex_off() { struct sembuf op; op.sem_num = 0; op.sem_op = 1; #ifdef NO_SEM_UNDO op.sem_flg = 0; #else op.sem_flg = SEM_UNDO; #endif if (semop(sem_id, &op, 1) < 0) { perror ("accept_mutex_off"); exit (1); } #ifdef NO_SEM_UNDO if (sigprocmask(SIG_SETMASK, &accept_previous_mask, NULL)) { perror("sigprocmask(SIG_SETMASK)"); exit (1); } #endif } #elif defined (USE_PTHREAD_SERIALIZED_ACCEPT) /* note: pthread mutexes aren't released on child death, hence the * signal goop ... in a real implementation we'd do special things * during hup, term, usr1. */ #include static pthread_mutex_t *mutex; static sigset_t accept_block_mask; static sigset_t accept_previous_mask; #define accept_mutex_child_init() #define accept_mutex_cleanup() void accept_mutex_init(void) { pthread_mutexattr_t mattr; int fd; fd = open ("/dev/zero", O_RDWR); if (fd == -1) { perror ("open(/dev/zero)"); exit (1); } mutex = (pthread_mutex_t *)mmap ((caddr_t)0, sizeof (*mutex), PROT_READ|PROT_WRITE, MAP_SHARED, fd, 0); if (mutex == (void *)(caddr_t)-1) { perror ("mmap"); exit (1); } close (fd); if (pthread_mutexattr_init(&mattr)) { perror ("pthread_mutexattr_init"); exit (1); } if (pthread_mutexattr_setpshared(&mattr, PTHREAD_PROCESS_SHARED)) { perror ("pthread_mutexattr_setpshared"); exit (1); } if (pthread_mutex_init(mutex, &mattr)) { perror ("pthread_mutex_init"); exit (1); } sigfillset(&accept_block_mask); sigdelset(&accept_block_mask, SIGHUP); sigdelset(&accept_block_mask, SIGTERM); sigdelset(&accept_block_mask, SIGUSR1); } void accept_mutex_on() { if (sigprocmask(SIG_BLOCK, &accept_block_mask, &accept_previous_mask)) { perror("sigprocmask(SIG_BLOCK)"); exit (1); } if (pthread_mutex_lock (mutex)) { perror ("pthread_mutex_lock"); exit (1); } } void accept_mutex_off() { if (pthread_mutex_unlock (mutex)) { perror ("pthread_mutex_unlock"); exit (1); } if (sigprocmask(SIG_SETMASK, &accept_previous_mask, NULL)) { perror("sigprocmask(SIG_SETMASK)"); exit (1); } } #elif defined (USE_USLOCK_SERIALIZED_ACCEPT) #include static usptr_t *us = NULL; static ulock_t uslock = NULL; #define accept_mutex_child_init() #define accept_mutex_cleanup() void accept_mutex_init(void) { ptrdiff_t old; /* default is 8 */ #define CONF_INITUSERS_MAX 15 if ((old = usconfig(CONF_INITUSERS, CONF_INITUSERS_MAX)) == -1) { perror("usconfig"); exit(-1); } if ((old = usconfig(CONF_LOCKTYPE, US_NODEBUG)) == -1) { perror("usconfig"); exit(-1); } if ((old = usconfig(CONF_ARENATYPE, US_SHAREDONLY)) == -1) { perror("usconfig"); exit(-1); } if ((us = usinit("/dev/zero")) == NULL) { perror("usinit"); exit(-1); } if ((uslock = usnewlock(us)) == NULL) { perror("usnewlock"); exit(-1); } } void accept_mutex_on() { switch(ussetlock(uslock)) { case 1: /* got lock */ break; case 0: fprintf(stderr, "didn't get lock\n"); exit(-1); case -1: perror("ussetlock"); exit(-1); } } void accept_mutex_off() { if (usunsetlock(uslock) == -1) { perror("usunsetlock"); exit(-1); } } #endif #ifndef USE_SHMGET_SCOREBOARD static void *get_shared_mem(apr_size_t size) { void *result; /* allocate shared memory for the shared_counter */ result = (unsigned long *)mmap ((caddr_t)0, size, PROT_READ|PROT_WRITE, MAP_ANON|MAP_SHARED, -1, 0); if (result == (void *)(caddr_t)-1) { perror ("mmap"); exit (1); } return result; } #else #include #include #ifdef HAVE_SYS_MUTEX_H #include #endif #include static void *get_shared_mem(apr_size_t size) { key_t shmkey = IPC_PRIVATE; int shmid = -1; void *result; #ifdef MOVEBREAK char *obrk; #endif if ((shmid = shmget(shmkey, size, IPC_CREAT | SHM_R | SHM_W)) == -1) { perror("shmget"); exit(1); } #ifdef MOVEBREAK /* * Some SysV systems place the shared segment WAY too close * to the dynamic memory break point (sbrk(0)). This severely * limits the use of malloc/sbrk in the program since sbrk will * refuse to move past that point. * * To get around this, we move the break point "way up there", * attach the segment and then move break back down. Ugly */ if ((obrk = sbrk(MOVEBREAK)) == (char *) -1) { perror("sbrk"); } #endif #define BADSHMAT ((void *)(-1)) if ((result = shmat(shmid, 0, 0)) == BADSHMAT) { perror("shmat"); } /* * We must avoid leaving segments in the kernel's * (small) tables. */ if (shmctl(shmid, IPC_RMID, NULL) != 0) { perror("shmctl(IPC_RMID)"); } if (result == BADSHMAT) /* now bailout */ exit(1); #ifdef MOVEBREAK if (obrk == (char *) -1) return; /* nothing else to do */ if (sbrk(-(MOVEBREAK)) == (char *) -1) { perror("sbrk 2"); } #endif return result; } #endif #ifdef _POSIX_PRIORITY_SCHEDULING /* don't ask */ #define _P __P #include #define YIELD sched_yield() #else #define YIELD do { struct timeval zero; zero.tv_sec = zero.tv_usec = 0; select(0,0,0,0,&zero); } while(0) #endif void main (int argc, char **argv) { int num_iter; int num_child; int i; struct timeval first; struct timeval last; long ms; int pid; unsigned long *shared_counter; if (argc != 3) { fprintf (stderr, "Usage: time-sem num-child num iter\n"); exit (1); } num_child = atoi (argv[1]); num_iter = atoi (argv[2]); /* allocate shared memory for the shared_counter */ shared_counter = get_shared_mem(sizeof(*shared_counter)); /* initialize counter to 0 */ *shared_counter = 0; accept_mutex_init (); /* parent grabs mutex until done spawning children */ accept_mutex_on (); for (i = 0; i < num_child; ++i) { pid = fork(); if (pid == 0) { /* child, do our thing */ accept_mutex_child_init(); for (i = 0; i < num_iter; ++i) { unsigned long tmp; accept_mutex_on (); tmp = *shared_counter; YIELD; *shared_counter = tmp + 1; accept_mutex_off (); } exit (0); } else if (pid == -1) { perror ("fork"); exit (1); } } /* a quick test to see that nothing is screwed up */ if (*shared_counter != 0) { puts ("WTF! shared_counter != 0 before the children have been started!"); exit (1); } gettimeofday (&first, NULL); /* launch children into action */ accept_mutex_off (); for (i = 0; i < num_child; ++i) { if (wait(NULL) == -1) { perror ("wait"); } } gettimeofday (&last, NULL); if (*shared_counter != num_child * num_iter) { printf ("WTF! shared_counter != num_child * num_iter!\n" "shared_counter = %lu\nnum_child = %d\nnum_iter=%d\n", *shared_counter, num_child, num_iter); } last.tv_sec -= first.tv_sec; ms = last.tv_usec - first.tv_usec; if (ms < 0) { --last.tv_sec; ms += 1000000; } last.tv_usec = ms; printf ("%8lu.%06lu\n", last.tv_sec, last.tv_usec); accept_mutex_cleanup(); exit(0); } httpd-2.4.41/BuildAll.dsp0000644000000000000500000000512410663436562013451 0ustar rootsrc# Microsoft Developer Studio Project File - Name="BuildAll" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) External Target" 0x0106 CFG=BuildAll - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "BuildAll.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "BuildAll.mak" CFG="BuildAll - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "BuildAll - Win32 Release" (based on "Win32 (x86) External Target") !MESSAGE "BuildAll - Win32 Debug" (based on "Win32 (x86) External Target") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" !IF "$(CFG)" == "BuildAll - Win32 Release" # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "" # PROP BASE Intermediate_Dir "" # PROP BASE Cmd_Line "NMAKE /f makefile.win" # PROP BASE Rebuild_Opt "/a" # PROP BASE Target_File "\Apache2\bin\httpd.exe" # PROP BASE Bsc_Name ".\Browse\BuildAll.bsc" # PROP BASE Target_Dir "" # PROP Use_Debug_Libraries 0 # PROP Output_Dir "" # PROP Intermediate_Dir "" # PROP Cmd_Line "NMAKE /f makefile.win INSTDIR="\Apache2" LONG=Release _dummy" # PROP Rebuild_Opt "" # PROP Target_File "\Apache2\bin\httpd.exe" # PROP Bsc_Name ".\Browse\httpd.bsc" # PROP Target_Dir "" !ELSEIF "$(CFG)" == "BuildAll - Win32 Debug" # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "" # PROP BASE Intermediate_Dir "" # PROP BASE Cmd_Line "NMAKE /f makefile.win" # PROP BASE Rebuild_Opt "/a" # PROP BASE Target_File "\Apache2\bin\httpd.exe" # PROP BASE Bsc_Name ".\Browse\BuildAll.bsc" # PROP BASE Target_Dir "" # PROP Use_Debug_Libraries 1 # PROP Output_Dir "" # PROP Intermediate_Dir "" # PROP Cmd_Line "NMAKE /f makefile.win INSTDIR="\Apache2" LONG=Debug _dummy" # PROP Rebuild_Opt "" # PROP Target_File "\Apache2\bin\httpd.exe" # PROP Bsc_Name ".\Browse\httpd.bsc" # PROP Target_Dir "" !ENDIF # Begin Target # Name "BuildAll - Win32 Release" # Name "BuildAll - Win32 Debug" !IF "$(CFG)" == "BuildAll - Win32 Release" !ELSEIF "$(CFG)" == "BuildAll - Win32 Debug" !ENDIF # Begin Source File SOURCE=.\os\win32\BaseAddr.ref # End Source File # Begin Source File SOURCE=.\CHANGES # End Source File # Begin Source File SOURCE=.\Makefile.win # End Source File # Begin Source File SOURCE=.\STATUS # End Source File # End Target # End Project httpd-2.4.41/LICENSE0000644000000000000500000006160613243304246012253 0ustar rootsrc Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document. "Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License. "Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity. "You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License. "Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files. "Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types. "Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below). "Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof. "Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution." "Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work. 2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form. 3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed. 4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions: (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and (b) You must cause any modified files to carry prominent notices stating that You changed the files; and (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License. You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License. 5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions. 6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file. 7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License. 8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages. 9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability. END OF TERMS AND CONDITIONS APPENDIX: How to apply the Apache License to your work. To apply the Apache License to your work, attach the following boilerplate notice, with the fields enclosed by brackets "[]" replaced with your own identifying information. (Don't include the brackets!) The text should be enclosed in the appropriate comment syntax for the file format. We also recommend that a file or class name and description of purpose be included on the same "printed page" as the copyright notice for easier identification within third-party archives. Copyright [yyyy] [name of copyright owner] Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. APACHE HTTP SERVER SUBCOMPONENTS: The Apache HTTP Server includes a number of subcomponents with separate copyright notices and license terms. Your use of the source code for the these subcomponents is subject to the terms and conditions of the following licenses. For the mod_mime_magic component: /* * mod_mime_magic: MIME type lookup via file magic numbers * Copyright (c) 1996-1997 Cisco Systems, Inc. * * This software was submitted by Cisco Systems to the Apache Group in July * 1997. Future revisions and derivatives of this source code must * acknowledge Cisco Systems as the original contributor of this module. * All other licensing and usage conditions are those of the Apache Group. * * Some of this code is derived from the free version of the file command * originally posted to comp.sources.unix. Copyright info for that program * is included below as required. * --------------------------------------------------------------------------- * - Copyright (c) Ian F. Darwin, 1987. Written by Ian F. Darwin. * * This software is not subject to any license of the American Telephone and * Telegraph Company or of the Regents of the University of California. * * Permission is granted to anyone to use this software for any purpose on any * computer system, and to alter it and redistribute it freely, subject to * the following restrictions: * * 1. The author is not responsible for the consequences of use of this * software, no matter how awful, even if they arise from flaws in it. * * 2. The origin of this software must not be misrepresented, either by * explicit claim or by omission. Since few users ever read sources, credits * must appear in the documentation. * * 3. Altered versions must be plainly marked as such, and must not be * misrepresented as being the original software. Since few users ever read * sources, credits must appear in the documentation. * * 4. This notice may not be removed or altered. * ------------------------------------------------------------------------- * */ For the modules\mappers\mod_imagemap.c component: "macmartinized" polygon code copyright 1992 by Eric Haines, erich@eye.com For the server\util_md5.c component: /************************************************************************ * NCSA HTTPd Server * Software Development Group * National Center for Supercomputing Applications * University of Illinois at Urbana-Champaign * 605 E. Springfield, Champaign, IL 61820 * httpd@ncsa.uiuc.edu * * Copyright (C) 1995, Board of Trustees of the University of Illinois * ************************************************************************ * * md5.c: NCSA HTTPd code which uses the md5c.c RSA Code * * Original Code Copyright (C) 1994, Jeff Hostetler, Spyglass, Inc. * Portions of Content-MD5 code Copyright (C) 1993, 1994 by Carnegie Mellon * University (see Copyright below). * Portions of Content-MD5 code Copyright (C) 1991 Bell Communications * Research, Inc. (Bellcore) (see Copyright below). * Portions extracted from mpack, John G. Myers - jgm+@cmu.edu * Content-MD5 Code contributed by Martin Hamilton (martin@net.lut.ac.uk) * */ /* these portions extracted from mpack, John G. Myers - jgm+@cmu.edu */ /* (C) Copyright 1993,1994 by Carnegie Mellon University * All Rights Reserved. * * Permission to use, copy, modify, distribute, and sell this software * and its documentation for any purpose is hereby granted without * fee, provided that the above copyright notice appear in all copies * and that both that copyright notice and this permission notice * appear in supporting documentation, and that the name of Carnegie * Mellon University not be used in advertising or publicity * pertaining to distribution of the software without specific, * written prior permission. Carnegie Mellon University makes no * representations about the suitability of this software for any * purpose. It is provided "as is" without express or implied * warranty. * * CARNEGIE MELLON UNIVERSITY DISCLAIMS ALL WARRANTIES WITH REGARD TO * THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY * AND FITNESS, IN NO EVENT SHALL CARNEGIE MELLON UNIVERSITY BE LIABLE * FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN * AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING * OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS * SOFTWARE. */ /* * Copyright (c) 1991 Bell Communications Research, Inc. (Bellcore) * * Permission to use, copy, modify, and distribute this material * for any purpose and without fee is hereby granted, provided * that the above copyright notice and this permission notice * appear in all copies, and that the name of Bellcore not be * used in advertising or publicity pertaining to this * material without the specific, prior written permission * of an authorized representative of Bellcore. BELLCORE * MAKES NO REPRESENTATIONS ABOUT THE ACCURACY OR SUITABILITY * OF THIS MATERIAL FOR ANY PURPOSE. IT IS PROVIDED "AS IS", * WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES. */ For the util_pcre.c and ap_regex.h components: Copyright (c) 1997-2004 University of Cambridge ----------------------------------------------------------------------------- Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of the University of Cambridge nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. ----------------------------------------------------------------------------- For the srclib\apr\include\apr_md5.h component: /* * This is work is derived from material Copyright RSA Data Security, Inc. * * The RSA copyright statement and Licence for that original material is * included below. This is followed by the Apache copyright statement and * licence for the modifications made to that material. */ /* Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991. All rights reserved. License to copy and use this software is granted provided that it is identified as the "RSA Data Security, Inc. MD5 Message-Digest Algorithm" in all material mentioning or referencing this software or this function. License is also granted to make and use derivative works provided that such works are identified as "derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm" in all material mentioning or referencing the derived work. RSA Data Security, Inc. makes no representations concerning either the merchantability of this software or the suitability of this software for any particular purpose. It is provided "as is" without express or implied warranty of any kind. These notices must be retained in any copies of any part of this documentation and/or software. */ For the srclib\apr\passwd\apr_md5.c component: /* * This is work is derived from material Copyright RSA Data Security, Inc. * * The RSA copyright statement and Licence for that original material is * included below. This is followed by the Apache copyright statement and * licence for the modifications made to that material. */ /* MD5C.C - RSA Data Security, Inc., MD5 message-digest algorithm */ /* Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991. All rights reserved. License to copy and use this software is granted provided that it is identified as the "RSA Data Security, Inc. MD5 Message-Digest Algorithm" in all material mentioning or referencing this software or this function. License is also granted to make and use derivative works provided that such works are identified as "derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm" in all material mentioning or referencing the derived work. RSA Data Security, Inc. makes no representations concerning either the merchantability of this software or the suitability of this software for any particular purpose. It is provided "as is" without express or implied warranty of any kind. These notices must be retained in any copies of any part of this documentation and/or software. */ /* * The apr_md5_encode() routine uses much code obtained from the FreeBSD 3.0 * MD5 crypt() function, which is licenced as follows: * ---------------------------------------------------------------------------- * "THE BEER-WARE LICENSE" (Revision 42): * wrote this file. As long as you retain this notice you * can do whatever you want with this stuff. If we meet some day, and you think * this stuff is worth it, you can buy me a beer in return. Poul-Henning Kamp * ---------------------------------------------------------------------------- */ For the srclib\apr-util\crypto\apr_md4.c component: * This is derived from material copyright RSA Data Security, Inc. * Their notice is reproduced below in its entirety. * * Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991. All * rights reserved. * * License to copy and use this software is granted provided that it * is identified as the "RSA Data Security, Inc. MD4 Message-Digest * Algorithm" in all material mentioning or referencing this software * or this function. * * License is also granted to make and use derivative works provided * that such works are identified as "derived from the RSA Data * Security, Inc. MD4 Message-Digest Algorithm" in all material * mentioning or referencing the derived work. * * RSA Data Security, Inc. makes no representations concerning either * the merchantability of this software or the suitability of this * software for any particular purpose. It is provided "as is" * without express or implied warranty of any kind. * * These notices must be retained in any copies of any part of this * documentation and/or software. */ For the srclib\apr-util\include\apr_md4.h component: * * This is derived from material copyright RSA Data Security, Inc. * Their notice is reproduced below in its entirety. * * Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991. All * rights reserved. * * License to copy and use this software is granted provided that it * is identified as the "RSA Data Security, Inc. MD4 Message-Digest * Algorithm" in all material mentioning or referencing this software * or this function. * * License is also granted to make and use derivative works provided * that such works are identified as "derived from the RSA Data * Security, Inc. MD4 Message-Digest Algorithm" in all material * mentioning or referencing the derived work. * * RSA Data Security, Inc. makes no representations concerning either * the merchantability of this software or the suitability of this * software for any particular purpose. It is provided "as is" * without express or implied warranty of any kind. * * These notices must be retained in any copies of any part of this * documentation and/or software. */ For the srclib\apr-util\test\testmd4.c component: * * This is derived from material copyright RSA Data Security, Inc. * Their notice is reproduced below in its entirety. * * Copyright (C) 1990-2, RSA Data Security, Inc. Created 1990. All * rights reserved. * * RSA Data Security, Inc. makes no representations concerning either * the merchantability of this software or the suitability of this * software for any particular purpose. It is provided "as is" * without express or implied warranty of any kind. * * These notices must be retained in any copies of any part of this * documentation and/or software. */ For the test\zb.c component: /* ZeusBench V1.01 =============== This program is Copyright (C) Zeus Technology Limited 1996. This program may be used and copied freely providing this copyright notice is not removed. This software is provided "as is" and any express or implied waranties, including but not limited to, the implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall Zeus Technology Ltd. be liable for any direct, indirect, incidental, special, exemplary, or consequential damaged (including, but not limited to, procurement of substitute good or services; loss of use, data, or profits; or business interruption) however caused and on theory of liability. Whether in contract, strict liability or tort (including negligence or otherwise) arising in any way out of the use of this software, even if advised of the possibility of such damage. Written by Adam Twiss (adam@zeus.co.uk). March 1996 Thanks to the following people for their input: Mike Belshe (mbelshe@netscape.com) Michael Campanella (campanella@stevms.enet.dec.com) */ httpd-2.4.41/ap.d0000644000000000000500000000472011123517417012006 0ustar rootsrc#pragma D depends_on provider io typedef struct request_rec { uintptr_t pool; uintptr_t connection; uintptr_t server; uintptr_t next; uintptr_t prev; uintptr_t main; char *the_request; int assbackwards; int proxyreq; int header_only; char *protocol; int proto_num; char *hostname; int64_t request_time; char *status_line; int status; const char *method; int method_number; int64_t allowed; uintptr_t allowed_xmethods; uintptr_t allowed_methods; offset_t sent_bodyct; offset_t bytes_sent; int64_t mtime; int chunked; char *range; offset_t clength; offset_t remaining; offset_t read_length; int read_body; int read_chunked; unsigned expecting_100; uintptr_t headers_in; uintptr_t headers_out; uintptr_t err_headers_out; uintptr_t subprocess_env; uintptr_t notes; char *content_type; /* Break these out --- we dispatch on 'em */ char *handler; /* What we *really* dispatch on */ char *content_encoding; uintptr_t content_languages; char *vlist_validator; char *user; char *ap_auth_type; int no_cache; int no_local_copy; char *unparsed_uri; char *uri; char *filename; char *canonical_filename; char *path_info; char *args; /* finfo */ uintptr_t finfo_pool; int32_t finfo_valid; int32_t finfo_protection; int32_t finfo_filetype; int finfo_user; int finfo_group; uint64_t finfo_inode; uint64_t finfo_device; int32_t finfo_nlink; offset_t finfo_size; offset_t finfo_csize; int64_t finfo_atime; int64_t finfo_mtime; int64_t finfo_ctime; char *finfo_fname; char *finfo_name; uintptr_t finfo_ffilehand; /* parsed_uri */ char *uri_scheme; char *uri_hostinfo; char *uri_user; char *uri_password; char *uri_hostname; char *uri_port_str; char *uri_path; char *uri_query; char *uri_fragment; uintptr_t uri_hostent; uint16_t uri_port; unsigned uri_is_initialized:1; unsigned uri_dns_looked_up:1; unsigned uri_dns_resolved:1; /* back to request_rec */ int used_path_info; uintptr_t per_dir_config; uintptr_t request_config; uintptr_t htaccess; uintptr_t output_filters; uintptr_t input_filters; uintptr_t proto_output_filters; uintptr_t proto_input_filters; int eos_sent; uintptr_t kept_body; uintptr_t invoke_mtx; } request_rec; httpd-2.4.41/BuildBin.dsp0000644000000000000500000000534013226637151013444 0ustar rootsrc# Microsoft Developer Studio Project File - Name="BuildBin" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) External Target" 0x0106 CFG=BuildBin - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "BuildBin.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "BuildBin.mak" CFG="BuildBin - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "BuildBin - Win32 Release" (based on "Win32 (x86) External Target") !MESSAGE "BuildBin - Win32 Debug" (based on "Win32 (x86) External Target") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" !IF "$(CFG)" == "BuildBin - Win32 Release" # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "" # PROP BASE Intermediate_Dir "" # PROP BASE Cmd_Line "NMAKE /f makefile.win" # PROP BASE Rebuild_Opt "/a" # PROP BASE Target_File "\Apache2\bin\httpd.exe" # PROP BASE Bsc_Name ".\Browse\BuildBin.bsc" # PROP BASE Target_Dir "" # PROP Use_Debug_Libraries 0 # PROP Output_Dir "" # PROP Intermediate_Dir "" # PROP Cmd_Line "NMAKE /f makefile.win INSTDIR="\Apache2" LONG=Release _trydb _trylua _tryxml _tryssl _tryzlib _trynghttp2 _trybrotli _trymd _dummy" # PROP Rebuild_Opt "" # PROP Target_File "\Apache2\bin\httpd.exe" # PROP Bsc_Name ".\Browse\httpd.bsc" # PROP Target_Dir "" !ELSEIF "$(CFG)" == "BuildBin - Win32 Debug" # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "" # PROP BASE Intermediate_Dir "" # PROP BASE Cmd_Line "NMAKE /f makefile.win" # PROP BASE Rebuild_Opt "/a" # PROP BASE Target_File "\Apache2\bin\httpd.exe" # PROP BASE Bsc_Name ".\Browse\BuildBin.bsc" # PROP BASE Target_Dir "" # PROP Use_Debug_Libraries 1 # PROP Output_Dir "" # PROP Intermediate_Dir "" # PROP Cmd_Line "NMAKE /f makefile.win INSTDIR="\Apache2" LONG=Debug _trydb _trylua _tryxml _tryssl _tryzlib _trynghttp2 _trybrotli _trymd _dummy" # PROP Rebuild_Opt "" # PROP Target_File "\Apache2\bin\httpd.exe" # PROP Bsc_Name ".\Browse\httpd.bsc" # PROP Target_Dir "" !ENDIF # Begin Target # Name "BuildBin - Win32 Release" # Name "BuildBin - Win32 Debug" !IF "$(CFG)" == "BuildBin - Win32 Release" !ELSEIF "$(CFG)" == "BuildBin - Win32 Debug" !ENDIF # Begin Source File SOURCE=.\os\win32\BaseAddr.ref # End Source File # Begin Source File SOURCE=.\CHANGES # End Source File # Begin Source File SOURCE=.\Makefile.win # End Source File # Begin Source File SOURCE=.\STATUS # End Source File # End Target # End Project httpd-2.4.41/include/0002755000000000000500000000000013523273355012671 5ustar rootsrchttpd-2.4.41/include/http_config.h0000644000000000000500000015745313514074076015362 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file http_config.h * @brief Apache Configuration * * @defgroup APACHE_CORE_CONFIG Configuration * @ingroup APACHE_CORE * @{ */ #ifndef APACHE_HTTP_CONFIG_H #define APACHE_HTTP_CONFIG_H #include "util_cfgtree.h" #include "ap_config.h" #include "apr_tables.h" #ifdef __cplusplus extern "C" { #endif /* * The central data structures around here... */ /* Command dispatch structures... */ /** * How the directives arguments should be parsed. * @remark Note that for all of these except RAW_ARGS, the config routine is * passed a freshly allocated string which can be modified or stored * or whatever... */ enum cmd_how { RAW_ARGS, /**< cmd_func parses command line itself */ TAKE1, /**< one argument only */ TAKE2, /**< two arguments only */ ITERATE, /**< one argument, occurring multiple times * (e.g., IndexIgnore) */ ITERATE2, /**< two arguments, 2nd occurs multiple times * (e.g., AddIcon) */ FLAG, /**< One of 'On' or 'Off' */ NO_ARGS, /**< No args at all, e.g. </Directory> */ TAKE12, /**< one or two arguments */ TAKE3, /**< three arguments only */ TAKE23, /**< two or three arguments */ TAKE123, /**< one, two or three arguments */ TAKE13, /**< one or three arguments */ TAKE_ARGV /**< an argc and argv are passed */ }; /** * This structure is passed to a command which is being invoked, * to carry a large variety of miscellaneous data which is all of * use to *somebody*... */ typedef struct cmd_parms_struct cmd_parms; #if defined(AP_HAVE_DESIGNATED_INITIALIZER) || defined(DOXYGEN) /** * All the types of functions that can be used in directives * @internal */ typedef union { /** function to call for a no-args */ const char *(*no_args) (cmd_parms *parms, void *mconfig); /** function to call for a raw-args */ const char *(*raw_args) (cmd_parms *parms, void *mconfig, const char *args); /** function to call for a argv/argc */ const char *(*take_argv) (cmd_parms *parms, void *mconfig, int argc, char *const argv[]); /** function to call for a take1 */ const char *(*take1) (cmd_parms *parms, void *mconfig, const char *w); /** function to call for a take2 */ const char *(*take2) (cmd_parms *parms, void *mconfig, const char *w, const char *w2); /** function to call for a take3 */ const char *(*take3) (cmd_parms *parms, void *mconfig, const char *w, const char *w2, const char *w3); /** function to call for a flag */ const char *(*flag) (cmd_parms *parms, void *mconfig, int on); } cmd_func; /** This configuration directive does not take any arguments */ # define AP_NO_ARGS func.no_args /** This configuration directive will handle its own parsing of arguments*/ # define AP_RAW_ARGS func.raw_args /** This configuration directive will handle its own parsing of arguments*/ # define AP_TAKE_ARGV func.take_argv /** This configuration directive takes 1 argument*/ # define AP_TAKE1 func.take1 /** This configuration directive takes 2 arguments */ # define AP_TAKE2 func.take2 /** This configuration directive takes 3 arguments */ # define AP_TAKE3 func.take3 /** This configuration directive takes a flag (on/off) as a argument*/ # define AP_FLAG func.flag /** mechanism for declaring a directive with no arguments */ # define AP_INIT_NO_ARGS(directive, func, mconfig, where, help) \ { directive, { .no_args=func }, mconfig, where, RAW_ARGS, help } /** mechanism for declaring a directive with raw argument parsing */ # define AP_INIT_RAW_ARGS(directive, func, mconfig, where, help) \ { directive, { .raw_args=func }, mconfig, where, RAW_ARGS, help } /** mechanism for declaring a directive with raw argument parsing */ # define AP_INIT_TAKE_ARGV(directive, func, mconfig, where, help) \ { directive, { .take_argv=func }, mconfig, where, TAKE_ARGV, help } /** mechanism for declaring a directive which takes 1 argument */ # define AP_INIT_TAKE1(directive, func, mconfig, where, help) \ { directive, { .take1=func }, mconfig, where, TAKE1, help } /** mechanism for declaring a directive which takes multiple arguments */ # define AP_INIT_ITERATE(directive, func, mconfig, where, help) \ { directive, { .take1=func }, mconfig, where, ITERATE, help } /** mechanism for declaring a directive which takes 2 arguments */ # define AP_INIT_TAKE2(directive, func, mconfig, where, help) \ { directive, { .take2=func }, mconfig, where, TAKE2, help } /** mechanism for declaring a directive which takes 1 or 2 arguments */ # define AP_INIT_TAKE12(directive, func, mconfig, where, help) \ { directive, { .take2=func }, mconfig, where, TAKE12, help } /** mechanism for declaring a directive which takes multiple 2 arguments */ # define AP_INIT_ITERATE2(directive, func, mconfig, where, help) \ { directive, { .take2=func }, mconfig, where, ITERATE2, help } /** mechanism for declaring a directive which takes 1 or 3 arguments */ # define AP_INIT_TAKE13(directive, func, mconfig, where, help) \ { directive, { .take3=func }, mconfig, where, TAKE13, help } /** mechanism for declaring a directive which takes 2 or 3 arguments */ # define AP_INIT_TAKE23(directive, func, mconfig, where, help) \ { directive, { .take3=func }, mconfig, where, TAKE23, help } /** mechanism for declaring a directive which takes 1 to 3 arguments */ # define AP_INIT_TAKE123(directive, func, mconfig, where, help) \ { directive, { .take3=func }, mconfig, where, TAKE123, help } /** mechanism for declaring a directive which takes 3 arguments */ # define AP_INIT_TAKE3(directive, func, mconfig, where, help) \ { directive, { .take3=func }, mconfig, where, TAKE3, help } /** mechanism for declaring a directive which takes a flag (on/off) argument */ # define AP_INIT_FLAG(directive, func, mconfig, where, help) \ { directive, { .flag=func }, mconfig, where, FLAG, help } #else /* AP_HAVE_DESIGNATED_INITIALIZER */ typedef const char *(*cmd_func) (); # define AP_NO_ARGS func # define AP_RAW_ARGS func # define AP_TAKE_ARGV func # define AP_TAKE1 func # define AP_TAKE2 func # define AP_TAKE3 func # define AP_FLAG func # define AP_INIT_NO_ARGS(directive, func, mconfig, where, help) \ { directive, func, mconfig, where, RAW_ARGS, help } # define AP_INIT_RAW_ARGS(directive, func, mconfig, where, help) \ { directive, func, mconfig, where, RAW_ARGS, help } # define AP_INIT_TAKE_ARGV(directive, func, mconfig, where, help) \ { directive, func, mconfig, where, TAKE_ARGV, help } # define AP_INIT_TAKE1(directive, func, mconfig, where, help) \ { directive, func, mconfig, where, TAKE1, help } # define AP_INIT_ITERATE(directive, func, mconfig, where, help) \ { directive, func, mconfig, where, ITERATE, help } # define AP_INIT_TAKE2(directive, func, mconfig, where, help) \ { directive, func, mconfig, where, TAKE2, help } # define AP_INIT_TAKE12(directive, func, mconfig, where, help) \ { directive, func, mconfig, where, TAKE12, help } # define AP_INIT_ITERATE2(directive, func, mconfig, where, help) \ { directive, func, mconfig, where, ITERATE2, help } # define AP_INIT_TAKE13(directive, func, mconfig, where, help) \ { directive, func, mconfig, where, TAKE13, help } # define AP_INIT_TAKE23(directive, func, mconfig, where, help) \ { directive, func, mconfig, where, TAKE23, help } # define AP_INIT_TAKE123(directive, func, mconfig, where, help) \ { directive, func, mconfig, where, TAKE123, help } # define AP_INIT_TAKE3(directive, func, mconfig, where, help) \ { directive, func, mconfig, where, TAKE3, help } # define AP_INIT_FLAG(directive, func, mconfig, where, help) \ { directive, func, mconfig, where, FLAG, help } #endif /* AP_HAVE_DESIGNATED_INITIALIZER */ /** * The command record structure. Modules can define a table of these * to define the directives it will implement. */ typedef struct command_struct command_rec; struct command_struct { /** Name of this command */ const char *name; /** The function to be called when this directive is parsed */ cmd_func func; /** Extra data, for functions which implement multiple commands... */ void *cmd_data; /** What overrides need to be allowed to enable this command. */ int req_override; /** What the command expects as arguments */ enum cmd_how args_how; /** 'usage' message, in case of syntax errors */ const char *errmsg; }; /** * @defgroup ConfigDirectives Allowed locations for configuration directives. * * The allowed locations for a configuration directive are the union of * those indicated by each set bit in the req_override mask. * * @{ */ #define OR_NONE 0 /**< *.conf is not available anywhere in this override */ #define OR_LIMIT 1 /**< *.conf inside <Directory> or <Location> and .htaccess when AllowOverride Limit */ #define OR_OPTIONS 2 /**< *.conf anywhere and .htaccess when AllowOverride Options */ #define OR_FILEINFO 4 /**< *.conf anywhere and .htaccess when AllowOverride FileInfo */ #define OR_AUTHCFG 8 /**< *.conf inside <Directory> or <Location> and .htaccess when AllowOverride AuthConfig */ #define OR_INDEXES 16 /**< *.conf anywhere and .htaccess when AllowOverride Indexes */ #define OR_UNSET 32 /**< bit to indicate that AllowOverride has not been set */ #define ACCESS_CONF 64 /**< *.conf inside <Directory> or <Location> */ #define RSRC_CONF 128 /**< *.conf outside <Directory> or <Location> */ #define EXEC_ON_READ 256 /**< force directive to execute a command which would modify the configuration (like including another file, or IFModule */ /* Flags to determine whether syntax errors in .htaccess should be * treated as nonfatal (log and ignore errors) */ #define NONFATAL_OVERRIDE 512 /* Violation of AllowOverride rule */ #define NONFATAL_UNKNOWN 1024 /* Unrecognised directive */ #define NONFATAL_ALL (NONFATAL_OVERRIDE|NONFATAL_UNKNOWN) #define PROXY_CONF 2048 /**< *.conf inside <Proxy> only */ /** this directive can be placed anywhere */ #define OR_ALL (OR_LIMIT|OR_OPTIONS|OR_FILEINFO|OR_AUTHCFG|OR_INDEXES) /** @} */ /** * This can be returned by a function if they don't wish to handle * a command. Make it something not likely someone will actually use * as an error code. */ #define DECLINE_CMD "\a\b" /** Common structure for reading of config files / passwd files etc. */ typedef struct ap_configfile_t ap_configfile_t; struct ap_configfile_t { /**< an apr_file_getc()-like function */ apr_status_t (*getch) (char *ch, void *param); /**< an apr_file_gets()-like function */ apr_status_t (*getstr) (void *buf, apr_size_t bufsiz, void *param); /**< a close handler function */ apr_status_t (*close) (void *param); /**< the argument passed to getch/getstr/close */ void *param; /**< the filename / description */ const char *name; /**< current line number, starting at 1 */ unsigned line_number; }; /** * This structure is passed to a command which is being invoked, * to carry a large variety of miscellaneous data which is all of * use to *somebody*... */ struct cmd_parms_struct { /** Argument to command from cmd_table */ void *info; /** Which allow-override bits are set */ int override; /** Which allow-override-opts bits are set */ int override_opts; /** Table of directives allowed per AllowOverrideList */ apr_table_t *override_list; /** Which methods are <Limit>ed */ apr_int64_t limited; /** methods which are limited */ apr_array_header_t *limited_xmethods; /** methods which are xlimited */ ap_method_list_t *xlimited; /** Config file structure. */ ap_configfile_t *config_file; /** the directive specifying this command */ ap_directive_t *directive; /** Pool to allocate new storage in */ apr_pool_t *pool; /** Pool for scratch memory; persists during configuration, but * wiped before the first request is served... */ apr_pool_t *temp_pool; /** Server_rec being configured for */ server_rec *server; /** If configuring for a directory, pathname of that directory. * NOPE! That's what it meant previous to the existence of <Files>, * <Location> and regex matching. Now the only usefulness that can be * derived from this field is whether a command is being called in a * server context (path == NULL) or being called in a dir context * (path != NULL). */ char *path; /** configuration command */ const command_rec *cmd; /** per_dir_config vector passed to handle_command */ struct ap_conf_vector_t *context; /** directive with syntax error */ const ap_directive_t *err_directive; }; /** * Flags associated with a module. */ #define AP_MODULE_FLAG_NONE (0) #define AP_MODULE_FLAG_ALWAYS_MERGE (1 << 0) /** * Module structures. Just about everything is dispatched through * these, directly or indirectly (through the command and handler * tables). */ typedef struct module_struct module; struct module_struct { /** API version, *not* module version; check that module is * compatible with this version of the server. */ int version; /** API minor version. Provides API feature milestones. Not checked * during module init */ int minor_version; /** Index to this modules structures in config vectors. */ int module_index; /** The name of the module's C file */ const char *name; /** The handle for the DSO. Internal use only */ void *dynamic_load_handle; /** A pointer to the next module in the list * @var module_struct *next */ struct module_struct *next; /** Magic Cookie to identify a module structure; It's mainly * important for the DSO facility (see also mod_so). */ unsigned long magic; /** Function to allow MPMs to re-write command line arguments. This * hook is only available to MPMs. * @param The process that the server is running in. */ void (*rewrite_args) (process_rec *process); /** Function to allow all modules to create per directory configuration * structures. * @param p The pool to use for all allocations. * @param dir The directory currently being processed. * @return The per-directory structure created */ void *(*create_dir_config) (apr_pool_t *p, char *dir); /** Function to allow all modules to merge the per directory configuration * structures for two directories. * @param p The pool to use for all allocations. * @param base_conf The directory structure created for the parent directory. * @param new_conf The directory structure currently being processed. * @return The new per-directory structure created */ void *(*merge_dir_config) (apr_pool_t *p, void *base_conf, void *new_conf); /** Function to allow all modules to create per server configuration * structures. * @param p The pool to use for all allocations. * @param s The server currently being processed. * @return The per-server structure created */ void *(*create_server_config) (apr_pool_t *p, server_rec *s); /** Function to allow all modules to merge the per server configuration * structures for two servers. * @param p The pool to use for all allocations. * @param base_conf The directory structure created for the parent directory. * @param new_conf The directory structure currently being processed. * @return The new per-directory structure created */ void *(*merge_server_config) (apr_pool_t *p, void *base_conf, void *new_conf); /** A command_rec table that describes all of the directives this module * defines. */ const command_rec *cmds; /** A hook to allow modules to hook other points in the request processing. * In this function, modules should call the ap_hook_*() functions to * register an interest in a specific step in processing the current * request. * @param p the pool to use for all allocations */ void (*register_hooks) (apr_pool_t *p); /** A bitmask of AP_MODULE_FLAG_* */ int flags; }; /** * The AP_MAYBE_UNUSED macro is used for variable declarations that * might potentially exhibit "unused var" warnings on some compilers if * left untreated. * Since static intializers are not part of the C language (C89), making * (void) usage is not possible. However many compiler have proprietary * mechanism to suppress those warnings. */ #ifdef AP_MAYBE_UNUSED #elif defined(__GNUC__) # define AP_MAYBE_UNUSED(x) x __attribute__((unused)) #elif defined(__LCLINT__) # define AP_MAYBE_UNUSED(x) /*@unused@*/ x #else # define AP_MAYBE_UNUSED(x) x #endif /** * The APLOG_USE_MODULE macro is used choose which module a file belongs to. * This is necessary to allow per-module loglevel configuration. * * APLOG_USE_MODULE indirectly sets APLOG_MODULE_INDEX and APLOG_MARK. * * If a module should be backward compatible with versions before 2.3.6, * APLOG_USE_MODULE needs to be enclosed in a ifdef APLOG_USE_MODULE block. * * @param foo name of the module symbol of the current module, without the * trailing "_module" part * @see APLOG_MARK */ #define APLOG_USE_MODULE(foo) \ extern module AP_MODULE_DECLARE_DATA foo##_module; \ AP_MAYBE_UNUSED(static int * const aplog_module_index) = &(foo##_module.module_index) /** * AP_DECLARE_MODULE is a convenience macro that combines a call of * APLOG_USE_MODULE with the definition of the module symbol. * * If a module should be backward compatible with versions before 2.3.6, * APLOG_USE_MODULE should be used explicitly instead of AP_DECLARE_MODULE. */ #define AP_DECLARE_MODULE(foo) \ APLOG_USE_MODULE(foo); \ module AP_MODULE_DECLARE_DATA foo##_module /** * @defgroup ModuleInit Module structure initializers * * Initializer for the first few module slots, which are only * really set up once we start running. Note that the first two slots * provide a version check; this should allow us to deal with changes to * the API. The major number should reflect changes to the API handler table * itself or removal of functionality. The minor number should reflect * additions of functionality to the existing API. (the server can detect * an old-format module, and either handle it back-compatibly, or at least * signal an error). See src/include/ap_mmn.h for MMN version history. * @{ */ /** The one used in Apache 1.3, which will deliberately cause an error */ #define STANDARD_MODULE_STUFF this_module_needs_to_be_ported_to_apache_2_0 /** Use this in all standard modules */ #define STANDARD20_MODULE_STUFF MODULE_MAGIC_NUMBER_MAJOR, \ MODULE_MAGIC_NUMBER_MINOR, \ -1, \ __FILE__, \ NULL, \ NULL, \ MODULE_MAGIC_COOKIE, \ NULL /* rewrite args spot */ /** Use this only in MPMs */ #define MPM20_MODULE_STUFF MODULE_MAGIC_NUMBER_MAJOR, \ MODULE_MAGIC_NUMBER_MINOR, \ -1, \ __FILE__, \ NULL, \ NULL, \ MODULE_MAGIC_COOKIE /** @} */ /* CONFIGURATION VECTOR FUNCTIONS */ /** configuration vector structure */ typedef struct ap_conf_vector_t ap_conf_vector_t; /** * Generic accessors for other modules to get at their own module-specific * data * @param cv The vector in which the modules configuration is stored. * usually r->per_dir_config or s->module_config * @param m The module to get the data for. * @return The module-specific data */ AP_DECLARE(void *) ap_get_module_config(const ap_conf_vector_t *cv, const module *m); /** * Generic accessors for other modules to set their own module-specific * data * @param cv The vector in which the modules configuration is stored. * usually r->per_dir_config or s->module_config * @param m The module to set the data for. * @param val The module-specific data to set */ AP_DECLARE(void) ap_set_module_config(ap_conf_vector_t *cv, const module *m, void *val); /** * When module flags have been introduced, and a way to check this. */ #define AP_MODULE_FLAGS_MMN_MAJOR 20120211 #define AP_MODULE_FLAGS_MMN_MINOR 70 #define AP_MODULE_HAS_FLAGS(m) \ AP_MODULE_MAGIC_AT_LEAST(AP_MODULE_FLAGS_MMN_MAJOR, \ AP_MODULE_FLAGS_MMN_MINOR) /** * Generic accessor for the module's flags * @param m The module to get the flags from. * @return The module-specific flags */ AP_DECLARE(int) ap_get_module_flags(const module *m); #if !defined(AP_DEBUG) #define ap_get_module_config(v,m) \ (((void **)(v))[(m)->module_index]) #define ap_set_module_config(v,m,val) \ ((((void **)(v))[(m)->module_index]) = (val)) #endif /* AP_DEBUG */ /** * Generic accessor for modules to get the module-specific loglevel * @param s The server from which to get the loglevel. * @param index The module_index of the module to get the loglevel for. * @return The module-specific loglevel */ AP_DECLARE(int) ap_get_server_module_loglevel(const server_rec *s, int index); /** * Generic accessor for modules the module-specific loglevel * @param c The connection from which to get the loglevel. * @param index The module_index of the module to get the loglevel for. * @return The module-specific loglevel */ AP_DECLARE(int) ap_get_conn_module_loglevel(const conn_rec *c, int index); /** * Generic accessor for modules the module-specific loglevel * @param c The connection from which to get the loglevel. * @param s The server from which to get the loglevel if c does not have a * specific loglevel configuration. * @param index The module_index of the module to get the loglevel for. * @return The module-specific loglevel */ AP_DECLARE(int) ap_get_conn_server_module_loglevel(const conn_rec *c, const server_rec *s, int index); /** * Generic accessor for modules to get the module-specific loglevel * @param r The request from which to get the loglevel. * @param index The module_index of the module to get the loglevel for. * @return The module-specific loglevel */ AP_DECLARE(int) ap_get_request_module_loglevel(const request_rec *r, int index); /** * Accessor to set module-specific loglevel * @param p A pool * @param l The ap_logconf struct to modify. * @param index The module_index of the module to set the loglevel for. * @param level The new log level */ AP_DECLARE(void) ap_set_module_loglevel(apr_pool_t *p, struct ap_logconf *l, int index, int level); #if !defined(AP_DEBUG) #define ap_get_conn_logconf(c) \ ((c)->log ? (c)->log : \ &(c)->base_server->log) #define ap_get_conn_server_logconf(c,s) \ ( ( (c)->log != &(c)->base_server->log && (c)->log != NULL ) ? \ (c)->log : \ &(s)->log ) #define ap_get_request_logconf(r) \ ((r)->log ? (r)->log : \ (r)->connection->log ? (r)->connection->log : \ &(r)->server->log) #define ap_get_module_loglevel(l,i) \ (((i) < 0 || (l)->module_levels == NULL || (l)->module_levels[i] < 0) ? \ (l)->level : \ (l)->module_levels[i]) #define ap_get_server_module_loglevel(s,i) \ (ap_get_module_loglevel(&(s)->log,i)) #define ap_get_conn_module_loglevel(c,i) \ (ap_get_module_loglevel(ap_get_conn_logconf(c),i)) #define ap_get_conn_server_module_loglevel(c,s,i) \ (ap_get_module_loglevel(ap_get_conn_server_logconf(c,s),i)) #define ap_get_request_module_loglevel(r,i) \ (ap_get_module_loglevel(ap_get_request_logconf(r),i)) #endif /* AP_DEBUG */ /** * Set all module-specific loglevels to val * @param l The log config for which to set the loglevels. * @param val the value to set all loglevels to */ AP_DECLARE(void) ap_reset_module_loglevels(struct ap_logconf *l, int val); /** * Generic command handling function for strings * @param cmd The command parameters for this directive * @param struct_ptr pointer into a given type * @param arg The argument to the directive * @return An error string or NULL on success */ AP_DECLARE_NONSTD(const char *) ap_set_string_slot(cmd_parms *cmd, void *struct_ptr, const char *arg); /** * Generic command handling function for integers * @param cmd The command parameters for this directive * @param struct_ptr pointer into a given type * @param arg The argument to the directive * @return An error string or NULL on success */ AP_DECLARE_NONSTD(const char *) ap_set_int_slot(cmd_parms *cmd, void *struct_ptr, const char *arg); /** * Parsing function for log level * @param str The string to parse * @param val The parsed log level * @return An error string or NULL on success */ AP_DECLARE(const char *) ap_parse_log_level(const char *str, int *val); /** * Return true if the specified method is limited by being listed in * a <Limit> container, or by *not* being listed in a <LimitExcept> * container. * * @param method Pointer to a string specifying the method to check. * @param cmd Pointer to the cmd_parms structure passed to the * directive handler. * @return 0 if the method is not limited in the current scope */ AP_DECLARE(int) ap_method_is_limited(cmd_parms *cmd, const char *method); /** * Generic command handling function for strings, always sets the value * to a lowercase string * @param cmd The command parameters for this directive * @param struct_ptr pointer into a given type * @param arg The argument to the directive * @return An error string or NULL on success */ AP_DECLARE_NONSTD(const char *) ap_set_string_slot_lower(cmd_parms *cmd, void *struct_ptr, const char *arg); /** * Generic command handling function for flags stored in an int * @param cmd The command parameters for this directive * @param struct_ptr pointer into a given type * @param arg The argument to the directive (either 1 or 0) * @return An error string or NULL on success */ AP_DECLARE_NONSTD(const char *) ap_set_flag_slot(cmd_parms *cmd, void *struct_ptr, int arg); /** * Generic command handling function for flags stored in a char * @param cmd The command parameters for this directive * @param struct_ptr pointer into a given type * @param arg The argument to the directive (either 1 or 0) * @return An error string or NULL on success */ AP_DECLARE_NONSTD(const char *) ap_set_flag_slot_char(cmd_parms *cmd, void *struct_ptr, int arg); /** * Generic command handling function for files * @param cmd The command parameters for this directive * @param struct_ptr pointer into a given type * @param arg The argument to the directive * @return An error string or NULL on success */ AP_DECLARE_NONSTD(const char *) ap_set_file_slot(cmd_parms *cmd, void *struct_ptr, const char *arg); /** * Generic command handling function to respond with cmd->help as an error * @param cmd The command parameters for this directive * @param struct_ptr pointer into a given type * @param arg The argument to the directive * @return The cmd->help value as the error string * @note This allows simple declarations such as: * @code * AP_INIT_RAW_ARGS("Foo", ap_set_deprecated, NULL, OR_ALL, * "The Foo directive is no longer supported, use Bar"), * @endcode */ AP_DECLARE_NONSTD(const char *) ap_set_deprecated(cmd_parms *cmd, void *struct_ptr, const char *arg); /** * For modules which need to read config files, open logs, etc. this returns * the canonical form of fname made absolute to ap_server_root. * @param p pool to allocate data from * @param fname The file name */ AP_DECLARE(char *) ap_server_root_relative(apr_pool_t *p, const char *fname); /** * Compute the name of a run-time file (e.g., shared memory "file") relative * to the appropriate run-time directory. Absolute paths are returned as-is. * The run-time directory is configured via the DefaultRuntimeDir directive or * at build time. */ AP_DECLARE(char *) ap_runtime_dir_relative(apr_pool_t *p, const char *fname); /* Finally, the hook for dynamically loading modules in... */ /** * Add a module to the server * @param m The module structure of the module to add * @param p The pool of the same lifetime as the module * @param s The module's symbol name (used for logging) */ AP_DECLARE(const char *) ap_add_module(module *m, apr_pool_t *p, const char *s); /** * Remove a module from the server. There are some caveats: * when the module is removed, its slot is lost so all the current * per-dir and per-server configurations are invalid. So we should * only ever call this function when you are invalidating almost * all our current data. I.e. when doing a restart. * @param m the module structure of the module to remove */ AP_DECLARE(void) ap_remove_module(module *m); /** * Add a module to the chained modules list and the list of loaded modules * @param mod The module structure of the module to add * @param p The pool with the same lifetime as the module * @param s The module's symbol name (used for logging) */ AP_DECLARE(const char *) ap_add_loaded_module(module *mod, apr_pool_t *p, const char *s); /** * Remove a module fromthe chained modules list and the list of loaded modules * @param mod the module structure of the module to remove */ AP_DECLARE(void) ap_remove_loaded_module(module *mod); /** * Find the name of the specified module * @param m The module to get the name for * @return the name of the module */ AP_DECLARE(const char *) ap_find_module_name(module *m); /** * Find the short name of the module identified by the specified module index * @param module_index The module index to get the name for * @return the name of the module, NULL if not found */ AP_DECLARE(const char *) ap_find_module_short_name(int module_index); /** * Find a module based on the name of the module * @param name the name of the module * @return the module structure if found, NULL otherwise */ AP_DECLARE(module *) ap_find_linked_module(const char *name); /** * Open a ap_configfile_t as apr_file_t * @param ret_cfg open ap_configfile_t struct pointer * @param p The pool to allocate the structure from * @param name the name of the file to open */ AP_DECLARE(apr_status_t) ap_pcfg_openfile(ap_configfile_t **ret_cfg, apr_pool_t *p, const char *name); /** * Allocate a ap_configfile_t handle with user defined functions and params * @param p The pool to allocate from * @param descr The name of the file * @param param The argument passed to getch/getstr/close * @param getc_func The getch function * @param gets_func The getstr function * @param close_func The close function */ AP_DECLARE(ap_configfile_t *) ap_pcfg_open_custom(apr_pool_t *p, const char *descr, void *param, apr_status_t (*getc_func) (char *ch, void *param), apr_status_t (*gets_func) (void *buf, apr_size_t bufsiz, void *param), apr_status_t (*close_func) (void *param)); /** * Read one line from open ap_configfile_t, strip leading and trailing * whitespace, increase line number * @param buf place to store the line read * @param bufsize size of the buffer * @param cfp File to read from * @return error status, APR_ENOSPC if bufsize is too small for the line */ AP_DECLARE(apr_status_t) ap_cfg_getline(char *buf, apr_size_t bufsize, ap_configfile_t *cfp); /** * Read one char from open configfile_t, increase line number upon LF * @param ch place to store the char read * @param cfp The file to read from * @return error status */ AP_DECLARE(apr_status_t) ap_cfg_getc(char *ch, ap_configfile_t *cfp); /** * Detach from open ap_configfile_t, calling the close handler * @param cfp The file to close * @return 1 on success, 0 on failure */ AP_DECLARE(int) ap_cfg_closefile(ap_configfile_t *cfp); /** * Convert a return value from ap_cfg_getline or ap_cfg_getc to a user friendly * string. * @param p The pool to allocate the string from * @param cfp The config file * @param rc The return value to convert * @return The error string, NULL if rc == APR_SUCCESS */ AP_DECLARE(const char *) ap_pcfg_strerror(apr_pool_t *p, ap_configfile_t *cfp, apr_status_t rc); /** * Read all data between the current <foo> and the matching </foo>. All * of this data is forgotten immediately. * @param cmd The cmd_parms to pass to the directives inside the container * @param directive The directive name to read until * @return Error string on failure, NULL on success * @note If cmd->pool == cmd->temp_pool, ap_soak_end_container() will assume * .htaccess context and use a lower maximum line length. */ AP_DECLARE(const char *) ap_soak_end_container(cmd_parms *cmd, char *directive); /** * Read all data between the current <foo> and the matching </foo> and build * a config tree from it * @param p pool to allocate from * @param temp_pool Temporary pool to allocate from * @param parms The cmd_parms to pass to all directives read * @param current The current node in the tree * @param curr_parent The current parent node * @param orig_directive The directive to read until hit. * @return Error string on failure, NULL on success * @note If p == temp_pool, ap_build_cont_config() will assume .htaccess * context and use a lower maximum line length. */ AP_DECLARE(const char *) ap_build_cont_config(apr_pool_t *p, apr_pool_t *temp_pool, cmd_parms *parms, ap_directive_t **current, ap_directive_t **curr_parent, char *orig_directive); /** * Build a config tree from a config file * @param parms The cmd_parms to pass to all of the directives in the file * @param conf_pool The pconf pool * @param temp_pool The temporary pool * @param conftree Place to store the root node of the config tree * @return Error string on erro, NULL otherwise * @note If conf_pool == temp_pool, ap_build_config() will assume .htaccess * context and use a lower maximum line length. */ AP_DECLARE(const char *) ap_build_config(cmd_parms *parms, apr_pool_t *conf_pool, apr_pool_t *temp_pool, ap_directive_t **conftree); /** * Walk a config tree and setup the server's internal structures * @param conftree The config tree to walk * @param parms The cmd_parms to pass to all functions * @param section_vector The per-section config vector. * @return Error string on error, NULL otherwise */ AP_DECLARE(const char *) ap_walk_config(ap_directive_t *conftree, cmd_parms *parms, ap_conf_vector_t *section_vector); /** * Convenience function to create a ap_dir_match_t structure from a cmd_parms. * * @param cmd The command. * @param flags Flags to indicate whether optional or recursive. * @param cb Callback for each file found that matches the wildcard. Return NULL on * success, an error string on error. * @param ctx Context for the callback. * @return Structure ap_dir_match_t with fields populated, allocated from the * cmd->temp_pool. */ AP_DECLARE(ap_dir_match_t *)ap_dir_cfgmatch(cmd_parms *cmd, int flags, const char *(*cb)(ap_dir_match_t *w, const char *fname), void *ctx) __attribute__((nonnull(1,3))); /** * @defgroup ap_check_cmd_context Check command context * @{ */ /** * Check the context a command is used in. * @param cmd The command to check * @param forbidden Where the command is forbidden. * @return Error string on error, NULL on success */ AP_DECLARE(const char *) ap_check_cmd_context(cmd_parms *cmd, unsigned forbidden); #define NOT_IN_VIRTUALHOST 0x01 /**< Forbidden in <VirtualHost> */ #define NOT_IN_LIMIT 0x02 /**< Forbidden in <Limit> */ #define NOT_IN_DIRECTORY 0x04 /**< Forbidden in <Directory> */ #define NOT_IN_LOCATION 0x08 /**< Forbidden in <Location> */ #define NOT_IN_FILES 0x10 /**< Forbidden in <Files> or <If>*/ #define NOT_IN_HTACCESS 0x20 /**< Forbidden in .htaccess files */ #define NOT_IN_PROXY 0x40 /**< Forbidden in <Proxy> */ /** Forbidden in <Directory>/<Location>/<Files><If>*/ #define NOT_IN_DIR_LOC_FILE (NOT_IN_DIRECTORY|NOT_IN_LOCATION|NOT_IN_FILES) /** Forbidden in <Directory>/<Location>/<Files><If><Proxy>*/ #define NOT_IN_DIR_CONTEXT (NOT_IN_LIMIT|NOT_IN_DIR_LOC_FILE|NOT_IN_PROXY) /** Forbidden in <VirtualHost>/<Limit>/<Directory>/<Location>/<Files>/<If><Proxy>*/ #define GLOBAL_ONLY (NOT_IN_VIRTUALHOST|NOT_IN_DIR_CONTEXT) /** @} */ /** * @brief This structure is used to assign symbol names to module pointers */ typedef struct { const char *name; module *modp; } ap_module_symbol_t; /** * The topmost module in the list * @var module *ap_top_module */ AP_DECLARE_DATA extern module *ap_top_module; /** * Array of all statically linked modules * @var module *ap_prelinked_modules[] */ AP_DECLARE_DATA extern module *ap_prelinked_modules[]; /** * Array of all statically linked modulenames (symbols) * @var ap_module_symbol_t ap_prelinked_module_symbols[] */ AP_DECLARE_DATA extern ap_module_symbol_t ap_prelinked_module_symbols[]; /** * Array of all preloaded modules * @var module *ap_preloaded_modules[] */ AP_DECLARE_DATA extern module *ap_preloaded_modules[]; /** * Array of all loaded modules * @var module **ap_loaded_modules */ AP_DECLARE_DATA extern module **ap_loaded_modules; /* For mod_so.c... */ /** Run a single module's two create_config hooks * @param p the pool to allocate from * @param s The server to configure for. * @param m The module to configure */ AP_DECLARE(void) ap_single_module_configure(apr_pool_t *p, server_rec *s, module *m); /* For http_main.c... */ /** * Add all of the prelinked modules into the loaded module list * @param process The process that is currently running the server */ AP_DECLARE(const char *) ap_setup_prelinked_modules(process_rec *process); /** * Show the preloaded configuration directives, the help string explaining * the directive arguments, in what module they are handled, and in * what parts of the configuration they are allowed. Used for httpd -h. */ AP_DECLARE(void) ap_show_directives(void); /** * Returns non-zero if a configuration directive of the given name has * been registered by a module at the time of calling. * @param p Pool for temporary allocations * @param name Directive name */ AP_DECLARE(int) ap_exists_directive(apr_pool_t *p, const char *name); /** * Show the preloaded module names. Used for httpd -l. */ AP_DECLARE(void) ap_show_modules(void); /** * Show the MPM name. Used in reporting modules such as mod_info to * provide extra information to the user */ AP_DECLARE(const char *) ap_show_mpm(void); /** * Read all config files and setup the server * @param process The process running the server * @param temp_pool A pool to allocate temporary data from. * @param config_name The name of the config file * @param conftree Place to store the root of the config tree * @return The setup server_rec list. */ AP_DECLARE(server_rec *) ap_read_config(process_rec *process, apr_pool_t *temp_pool, const char *config_name, ap_directive_t **conftree); /** * Run all rewrite args hooks for loaded modules * @param process The process currently running the server */ AP_DECLARE(void) ap_run_rewrite_args(process_rec *process); /** * Run the register hooks function for a specified module * @param m The module to run the register hooks function fo * @param p The pool valid for the lifetime of the module */ AP_DECLARE(void) ap_register_hooks(module *m, apr_pool_t *p); /** * Setup all virtual hosts * @param p The pool to allocate from * @param main_server The head of the server_rec list */ AP_DECLARE(void) ap_fixup_virtual_hosts(apr_pool_t *p, server_rec *main_server); /** * Reserve some modules slots for modules loaded by other means than * EXEC_ON_READ directives. * Relevant modules should call this in the pre_config stage. * @param count The number of slots to reserve. */ AP_DECLARE(void) ap_reserve_module_slots(int count); /** * Reserve some modules slots for modules loaded by a specific * non-EXEC_ON_READ config directive. * This counts how often the given directive is used in the config and calls * ap_reserve_module_slots() accordingly. * @param directive The name of the directive */ AP_DECLARE(void) ap_reserve_module_slots_directive(const char *directive); /* For http_request.c... */ /** * Setup the config vector for a request_rec * @param p The pool to allocate the config vector from * @return The config vector */ AP_DECLARE(ap_conf_vector_t*) ap_create_request_config(apr_pool_t *p); /** * Setup the config vector for per dir module configs * @param p The pool to allocate the config vector from * @return The config vector */ AP_CORE_DECLARE(ap_conf_vector_t *) ap_create_per_dir_config(apr_pool_t *p); /** * Run all of the modules merge per dir config functions * @param p The pool to pass to the merge functions * @param base The base directory config structure * @param new_conf The new directory config structure */ AP_CORE_DECLARE(ap_conf_vector_t*) ap_merge_per_dir_configs(apr_pool_t *p, ap_conf_vector_t *base, ap_conf_vector_t *new_conf); /** * Allocate new ap_logconf and make (deep) copy of old ap_logconf * @param p The pool to alloc from * @param old The ap_logconf to copy (may be NULL) * @return The new ap_logconf struct */ AP_DECLARE(struct ap_logconf *) ap_new_log_config(apr_pool_t *p, const struct ap_logconf *old); /** * Merge old ap_logconf into new ap_logconf. * old and new must have the same life time. * @param old_conf The ap_logconf to merge from * @param new_conf The ap_logconf to merge into */ AP_DECLARE(void) ap_merge_log_config(const struct ap_logconf *old_conf, struct ap_logconf *new_conf); /* For http_connection.c... */ /** * Setup the config vector for a connection_rec * @param p The pool to allocate the config vector from * @return The config vector */ AP_CORE_DECLARE(ap_conf_vector_t*) ap_create_conn_config(apr_pool_t *p); /* For http_core.c... (<Directory> command and virtual hosts) */ /** * parse an htaccess file * @param result htaccess_result * @param r The request currently being served * @param override Which overrides are active * @param override_opts Which allow-override-opts bits are set * @param override_list Table of directives allowed for override * @param path The path to the htaccess file * @param access_name The list of possible names for .htaccess files * int The status of the current request */ AP_CORE_DECLARE(int) ap_parse_htaccess(ap_conf_vector_t **result, request_rec *r, int override, int override_opts, apr_table_t *override_list, const char *path, const char *access_name); /** * Setup a virtual host * @param p The pool to allocate all memory from * @param hostname The hostname of the virtual hsot * @param main_server The main server for this Apache configuration * @param ps Place to store the new server_rec * return Error string on error, NULL on success */ AP_CORE_DECLARE(const char *) ap_init_virtual_host(apr_pool_t *p, const char *hostname, server_rec *main_server, server_rec **ps); /** * Process a config file for Apache * @param s The server rec to use for the command parms * @param fname The name of the config file * @param conftree The root node of the created config tree * @param p Pool for general allocation * @param ptemp Pool for temporary allocation */ AP_DECLARE(const char *) ap_process_resource_config(server_rec *s, const char *fname, ap_directive_t **conftree, apr_pool_t *p, apr_pool_t *ptemp); /** * Process all matching files as Apache configs * @param s The server rec to use for the command parms * @param fname The filename pattern of the config file * @param conftree The root node of the created config tree * @param p Pool for general allocation * @param ptemp Pool for temporary allocation * @param optional Whether a no-match wildcard is allowed * @see apr_fnmatch for pattern handling */ AP_DECLARE(const char *) ap_process_fnmatch_configs(server_rec *s, const char *fname, ap_directive_t **conftree, apr_pool_t *p, apr_pool_t *ptemp, int optional); /** * Process all directives in the config tree * @param s The server rec to use in the command parms * @param conftree The config tree to process * @param p The pool for general allocation * @param ptemp The pool for temporary allocations * @return OK if no problems */ AP_DECLARE(int) ap_process_config_tree(server_rec *s, ap_directive_t *conftree, apr_pool_t *p, apr_pool_t *ptemp); /** * Store data which will be retained across unload/load of modules * @param key The unique key associated with this module's retained data * @param size in bytes of the retained data (to be allocated) * @return Address of new retained data structure, initially cleared */ AP_DECLARE(void *) ap_retained_data_create(const char *key, apr_size_t size); /** * Retrieve data which was stored by ap_retained_data_create() * @param key The unique key associated with this module's retained data * @return Address of previously retained data structure, or NULL if not yet saved */ AP_DECLARE(void *) ap_retained_data_get(const char *key); /* Module-method dispatchers, also for http_request.c */ /** * Run the handler phase of each module until a module accepts the * responsibility of serving the request * @param r The current request * @return The status of the current request */ AP_CORE_DECLARE(int) ap_invoke_handler(request_rec *r); /* for mod_perl */ /** * Find a given directive in a command_rec table * @param name The directive to search for * @param cmds The table to search * @return The directive definition of the specified directive */ AP_CORE_DECLARE(const command_rec *) ap_find_command(const char *name, const command_rec *cmds); /** * Find a given directive in a list of modules. * @param cmd_name The directive to search for * @param mod Pointer to the first module in the linked list; will be set to * the module providing cmd_name * @return The directive definition of the specified directive. * *mod will be changed to point to the module containing the * directive. */ AP_CORE_DECLARE(const command_rec *) ap_find_command_in_modules(const char *cmd_name, module **mod); /** * Ask a module to create per-server and per-section (dir/loc/file) configs * (if it hasn't happened already). The results are stored in the server's * config, and the specified per-section config vector. * @param server The server to operate upon. * @param section_vector The per-section config vector. * @param section Which section to create a config for. * @param mod The module which is defining the config data. * @param pconf A pool for all configuration allocations. * @return The (new) per-section config data. */ AP_CORE_DECLARE(void *) ap_set_config_vectors(server_rec *server, ap_conf_vector_t *section_vector, const char *section, module *mod, apr_pool_t *pconf); /* Hooks */ /** * Run the header parser functions for each module * @param r The current request * @return OK or DECLINED */ AP_DECLARE_HOOK(int,header_parser,(request_rec *r)) /** * Run the pre_config function for each module * @param pconf The config pool * @param plog The logging streams pool * @param ptemp The temporary pool * @return OK or DECLINED on success anything else is a error */ AP_DECLARE_HOOK(int,pre_config,(apr_pool_t *pconf,apr_pool_t *plog, apr_pool_t *ptemp)) /** * Run the check_config function for each module * @param pconf The config pool * @param plog The logging streams pool * @param ptemp The temporary pool * @param s the server to operate upon * @return OK or DECLINED on success anything else is a error */ AP_DECLARE_HOOK(int,check_config,(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s)) /** * Run the test_config function for each module; this hook is run * only if the server was invoked to test the configuration syntax. * @param pconf The config pool * @param s The list of server_recs * @note To avoid reordering problems due to different buffering, hook * functions should only apr_file_*() to print to stdout/stderr and * not simple printf()/fprintf(). * */ AP_DECLARE_HOOK(void,test_config,(apr_pool_t *pconf, server_rec *s)) /** * Run the post_config function for each module * @param pconf The config pool * @param plog The logging streams pool * @param ptemp The temporary pool * @param s The list of server_recs * @return OK or DECLINED on success anything else is a error */ AP_DECLARE_HOOK(int,post_config,(apr_pool_t *pconf,apr_pool_t *plog, apr_pool_t *ptemp,server_rec *s)) /** * Run the open_logs functions for each module * @param pconf The config pool * @param plog The logging streams pool * @param ptemp The temporary pool * @param s The list of server_recs * @return OK or DECLINED on success anything else is a error */ AP_DECLARE_HOOK(int,open_logs,(apr_pool_t *pconf,apr_pool_t *plog, apr_pool_t *ptemp,server_rec *s)) /** * Run the child_init functions for each module * @param pchild The child pool * @param s The list of server_recs in this server */ AP_DECLARE_HOOK(void,child_init,(apr_pool_t *pchild, server_rec *s)) /** * Run the handler functions for each module * @param r The request_rec * @remark non-wildcard handlers should HOOK_MIDDLE, wildcard HOOK_LAST */ AP_DECLARE_HOOK(int,handler,(request_rec *r)) /** * Run the quick handler functions for each module. The quick_handler * is run before any other requests hooks are called (location_walk, * directory_walk, access checking, et. al.). This hook was added * to provide a quick way to serve content from a URI keyed cache. * * @param r The request_rec * @param lookup_uri Controls whether the caller actually wants content or not. * lookup is set when the quick_handler is called out of * ap_sub_req_lookup_uri() */ AP_DECLARE_HOOK(int,quick_handler,(request_rec *r, int lookup_uri)) /** * Retrieve the optional functions for each module. * This is run immediately before the server starts. Optional functions should * be registered during the hook registration phase. */ AP_DECLARE_HOOK(void,optional_fn_retrieve,(void)) /** * Allow modules to open htaccess files or perform operations before doing so * @param r The current request * @param dir_name The directory for which the htaccess file should be opened * @param access_name The filename for which the htaccess file should be opened * @param conffile Where the pointer to the opened ap_configfile_t must be * stored * @param full_name Where the full file name of the htaccess file must be * stored. * @return APR_SUCCESS on success, * APR_ENOENT or APR_ENOTDIR if no htaccess file exists, * AP_DECLINED to let later modules do the opening, * any other error code on error. */ AP_DECLARE_HOOK(apr_status_t,open_htaccess, (request_rec *r, const char *dir_name, const char *access_name, ap_configfile_t **conffile, const char **full_name)) /** * Core internal function, use ap_run_open_htaccess() instead. */ apr_status_t ap_open_htaccess(request_rec *r, const char *dir_name, const char *access_name, ap_configfile_t **conffile, const char **full_name); /** * A generic pool cleanup that will reset a pointer to NULL. For use with * apr_pool_cleanup_register. * @param data The address of the pointer * @return APR_SUCCESS */ AP_DECLARE_NONSTD(apr_status_t) ap_pool_cleanup_set_null(void *data); #ifdef __cplusplus } #endif #endif /* !APACHE_HTTP_CONFIG_H */ /** @} */ httpd-2.4.41/include/http_request.h0000644000000000000500000006236713003356461015576 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file http_request.h * @brief Apache Request library * * @defgroup APACHE_CORE_REQ Apache Request Processing * @ingroup APACHE_CORE * @{ */ /* * request.c is the code which handles the main line of request * processing, once a request has been read in (finding the right per- * directory configuration, building it if necessary, and calling all * the module dispatch functions in the right order). * * The pieces here which are public to the modules, allow them to learn * how the server would handle some other file or URI, or perhaps even * direct the server to serve that other file instead of the one the * client requested directly. * * There are two ways to do that. The first is the sub_request mechanism, * which handles looking up files and URIs as adjuncts to some other * request (e.g., directory entries for multiviews and directory listings); * the lookup functions stop short of actually running the request, but * (e.g., for includes), a module may call for the request to be run * by calling run_sub_req. The space allocated to create sub_reqs can be * reclaimed by calling destroy_sub_req --- be sure to copy anything you care * about which was allocated in its apr_pool_t elsewhere before doing this. */ #ifndef APACHE_HTTP_REQUEST_H #define APACHE_HTTP_REQUEST_H #include "apr_optional.h" #include "util_filter.h" #ifdef __cplusplus extern "C" { #endif #define AP_SUBREQ_NO_ARGS 0 #define AP_SUBREQ_MERGE_ARGS 1 /** * An internal handler used by the ap_process_request, all subrequest mechanisms * and the redirect mechanism. * @param r The request, subrequest or internal redirect to pre-process * @return The return code for the request */ AP_DECLARE(int) ap_process_request_internal(request_rec *r); /** * Create a subrequest from the given URI. This subrequest can be * inspected to find information about the requested URI * @param new_uri The URI to lookup * @param r The current request * @param next_filter The first filter the sub_request should use. If this is * NULL, it defaults to the first filter for the main request * @return The new request record */ AP_DECLARE(request_rec *) ap_sub_req_lookup_uri(const char *new_uri, const request_rec *r, ap_filter_t *next_filter); /** * Create a subrequest for the given file. This subrequest can be * inspected to find information about the requested file * @param new_file The file to lookup * @param r The current request * @param next_filter The first filter the sub_request should use. If this is * NULL, it defaults to the first filter for the main request * @return The new request record */ AP_DECLARE(request_rec *) ap_sub_req_lookup_file(const char *new_file, const request_rec *r, ap_filter_t *next_filter); /** * Create a subrequest for the given apr_dir_read result. This subrequest * can be inspected to find information about the requested file * @param finfo The apr_dir_read result to lookup * @param r The current request * @param subtype What type of subrequest to perform, one of; *
 *      AP_SUBREQ_NO_ARGS     ignore r->args and r->path_info
 *      AP_SUBREQ_MERGE_ARGS  merge r->args and r->path_info
 * 
* @param next_filter The first filter the sub_request should use. If this is * NULL, it defaults to the first filter for the main request * @return The new request record * @note The apr_dir_read flags value APR_FINFO_MIN|APR_FINFO_NAME flag is the * minimum recommended query if the results will be passed to apr_dir_read. * The file info passed must include the name, and must have the same relative * directory as the current request. */ AP_DECLARE(request_rec *) ap_sub_req_lookup_dirent(const apr_finfo_t *finfo, const request_rec *r, int subtype, ap_filter_t *next_filter); /** * Create a subrequest for the given URI using a specific method. This * subrequest can be inspected to find information about the requested URI * @param method The method to use in the new subrequest * @param new_uri The URI to lookup * @param r The current request * @param next_filter The first filter the sub_request should use. If this is * NULL, it defaults to the first filter for the main request * @return The new request record */ AP_DECLARE(request_rec *) ap_sub_req_method_uri(const char *method, const char *new_uri, const request_rec *r, ap_filter_t *next_filter); /** * An output filter to strip EOS buckets from sub-requests. This always * has to be inserted at the end of a sub-requests filter stack. * @param f The current filter * @param bb The brigade to filter * @return status code */ AP_CORE_DECLARE_NONSTD(apr_status_t) ap_sub_req_output_filter(ap_filter_t *f, apr_bucket_brigade *bb); /** * Run the handler for the subrequest * @param r The subrequest to run * @return The return code for the subrequest */ AP_DECLARE(int) ap_run_sub_req(request_rec *r); /** * Free the memory associated with a subrequest * @param r The subrequest to finish */ AP_DECLARE(void) ap_destroy_sub_req(request_rec *r); /* * Then there's the case that you want some other request to be served * as the top-level request INSTEAD of what the client requested directly. * If so, call this from a handler, and then immediately return OK. */ /** * Redirect the current request to some other uri * @param new_uri The URI to replace the current request with * @param r The current request */ AP_DECLARE(void) ap_internal_redirect(const char *new_uri, request_rec *r); /** * This function is designed for things like actions or CGI scripts, when * using AddHandler, and you want to preserve the content type across * an internal redirect. * @param new_uri The URI to replace the current request with. * @param r The current request */ AP_DECLARE(void) ap_internal_redirect_handler(const char *new_uri, request_rec *r); /** * Redirect the current request to a sub_req, merging the pools * @param sub_req A subrequest created from this request * @param r The current request * @note the sub_req's pool will be merged into r's pool, be very careful * not to destroy this subrequest, it will be destroyed with the main request! */ AP_DECLARE(void) ap_internal_fast_redirect(request_rec *sub_req, request_rec *r); /** * Can be used within any handler to determine if any authentication * is required for the current request * @param r The current request * @return 1 if authentication is required, 0 otherwise * @bug Behavior changed in 2.4.x refactoring, API no longer usable * @deprecated @see ap_some_authn_required() */ AP_DECLARE(int) ap_some_auth_required(request_rec *r); /** * @defgroup APACHE_CORE_REQ_AUTH Access Control for Sub-Requests and * Internal Redirects * @ingroup APACHE_CORE_REQ * @{ */ #define AP_AUTH_INTERNAL_PER_URI 0 /**< Run access control hooks on all internal requests with URIs distinct from that of initial request */ #define AP_AUTH_INTERNAL_PER_CONF 1 /**< Run access control hooks only on internal requests with configurations distinct from that of initial request */ #define AP_AUTH_INTERNAL_MASK 0x000F /**< mask to extract internal request processing mode */ /** * Clear flag which determines when access control hooks will be run for * internal requests. */ AP_DECLARE(void) ap_clear_auth_internal(void); /** * Determine whether access control hooks will be run for all internal * requests with URIs distinct from that of the initial request, or only * those for which different configurations apply than those which applied * to the initial request. To accommodate legacy external modules which * may expect access control hooks to be run for all internal requests * with distinct URIs, this is the default behaviour unless all access * control hooks and authentication and authorization providers are * registered with AP_AUTH_INTERNAL_PER_CONF. * @param ptemp Pool used for temporary allocations */ AP_DECLARE(void) ap_setup_auth_internal(apr_pool_t *ptemp); /** * Register an authentication or authorization provider with the global * provider pool. * @param pool The pool to create any storage from * @param provider_group The group to store the provider in * @param provider_name The name for this provider * @param provider_version The version for this provider * @param provider Opaque structure for this provider * @param type Internal request processing mode, either * AP_AUTH_INTERNAL_PER_URI or AP_AUTH_INTERNAL_PER_CONF * @return APR_SUCCESS if all went well */ AP_DECLARE(apr_status_t) ap_register_auth_provider(apr_pool_t *pool, const char *provider_group, const char *provider_name, const char *provider_version, const void *provider, int type); /** @} */ /* Optional functions coming from mod_authn_core and mod_authz_core * that list all registered authn/z providers. */ APR_DECLARE_OPTIONAL_FN(apr_array_header_t *, authn_ap_list_provider_names, (apr_pool_t *ptemp)); APR_DECLARE_OPTIONAL_FN(apr_array_header_t *, authz_ap_list_provider_names, (apr_pool_t *ptemp)); /** * Determine if the current request is the main request or a subrequest * @param r The current request * @return 1 if this is the main request, 0 otherwise */ AP_DECLARE(int) ap_is_initial_req(request_rec *r); /** * Function to set the r->mtime field to the specified value if it's later * than what's already there. * @param r The current request * @param dependency_mtime Time to set the mtime to */ AP_DECLARE(void) ap_update_mtime(request_rec *r, apr_time_t dependency_mtime); /** * Add one or more methods to the list permitted to access the resource. * Usually executed by the content handler before the response header is * sent, but sometimes invoked at an earlier phase if a module knows it * can set the list authoritatively. Note that the methods are ADDED * to any already permitted unless the reset flag is non-zero. The * list is used to generate the Allow response header field when it * is needed. * @param r The pointer to the request identifying the resource. * @param reset Boolean flag indicating whether this list should * completely replace any current settings. * @param ... A NULL-terminated list of strings, each identifying a * method name to add. * @return None. */ AP_DECLARE(void) ap_allow_methods(request_rec *r, int reset, ...) AP_FN_ATTR_SENTINEL; /** * Add one or more methods to the list permitted to access the resource. * Usually executed by the content handler before the response header is * sent, but sometimes invoked at an earlier phase if a module knows it * can set the list authoritatively. Note that the methods are ADDED * to any already permitted unless the reset flag is non-zero. The * list is used to generate the Allow response header field when it * is needed. * @param r The pointer to the request identifying the resource. * @param reset Boolean flag indicating whether this list should * completely replace any current settings. * @param ... A list of method identifiers, from the "M_" series * defined in httpd.h, terminated with a value of -1 * (e.g., "M_GET, M_POST, M_OPTIONS, -1") * @return None. */ AP_DECLARE(void) ap_allow_standard_methods(request_rec *r, int reset, ...); #define MERGE_ALLOW 0 #define REPLACE_ALLOW 1 /** * Process a top-level request from a client, and synchronously write * the response to the client * @param r The current request */ AP_DECLARE(void) ap_process_request(request_rec *r); /* For post-processing after a handler has finished with a request. * (Commonly used after it was suspended) */ AP_DECLARE(void) ap_process_request_after_handler(request_rec *r); /** * Process a top-level request from a client, allowing some or all of * the response to remain buffered in the core output filter for later, * asynchronous write completion * @param r The current request */ void ap_process_async_request(request_rec *r); /** * Kill the current request * @param type Why the request is dieing * @param r The current request */ AP_DECLARE(void) ap_die(int type, request_rec *r); /** * Check whether a connection is still established and has data available, * optionnaly consuming blank lines ([CR]LF). * @param c The current connection * @param bb The brigade to filter * @param max_blank_lines Max number of blank lines to consume, or zero * to consider them as data (single read). * @return APR_SUCCESS: connection established with data available, * APR_EAGAIN: connection established and empty, * APR_NOTFOUND: too much blank lines, * APR_E*: connection/general error. */ AP_DECLARE(apr_status_t) ap_check_pipeline(conn_rec *c, apr_bucket_brigade *bb, unsigned int max_blank_lines); /* Hooks */ /** * Gives modules a chance to create their request_config entry when the * request is created. * @param r The current request * @ingroup hooks */ AP_DECLARE_HOOK(int,create_request,(request_rec *r)) /** * This hook allow modules an opportunity to translate the URI into an * actual filename. If no modules do anything special, the server's default * rules will be followed. * @param r The current request * @return OK, DECLINED, or HTTP_... * @ingroup hooks */ AP_DECLARE_HOOK(int,translate_name,(request_rec *r)) /** * This hook allow modules to set the per_dir_config based on their own * context (such as "" sections) and responds to contextless requests * such as TRACE that need no security or filesystem mapping. * based on the filesystem. * @param r The current request * @return DONE (or HTTP_) if this contextless request was just fulfilled * (such as TRACE), OK if this is not a file, and DECLINED if this is a file. * The core map_to_storage (HOOK_RUN_REALLY_LAST) will directory_walk * and file_walk the r->filename. * * @ingroup hooks */ AP_DECLARE_HOOK(int,map_to_storage,(request_rec *r)) /** * This hook is used to analyze the request headers, authenticate the user, * and set the user information in the request record (r->user and * r->ap_auth_type). This hook is only run when Apache determines that * authentication/authorization is required for this resource (as determined * by the 'Require' directive). It runs after the access_checker hook, and * before the auth_checker hook. This hook should be registered with * ap_hook_check_authn(). * * @param r The current request * @return OK, DECLINED, or HTTP_... * @ingroup hooks * @see ap_hook_check_authn */ AP_DECLARE_HOOK(int,check_user_id,(request_rec *r)) /** * Allows modules to perform module-specific fixing of header fields. This * is invoked just before any content-handler * @param r The current request * @return OK, DECLINED, or HTTP_... * @ingroup hooks */ AP_DECLARE_HOOK(int,fixups,(request_rec *r)) /** * This routine is called to determine and/or set the various document type * information bits, like Content-type (via r->content_type), language, et * cetera. * @param r the current request * @return OK, DECLINED, or HTTP_... * @ingroup hooks */ AP_DECLARE_HOOK(int,type_checker,(request_rec *r)) /** * This hook is used to apply additional access control to this resource. * It runs *before* a user is authenticated, so this hook is really to * apply additional restrictions independent of a user. It also runs * independent of 'Require' directive usage. This hook should be registered * with ap_hook_check_access(). * * @param r the current request * @return OK, DECLINED, or HTTP_... * @ingroup hooks * @see ap_hook_check_access */ AP_DECLARE_HOOK(int,access_checker,(request_rec *r)) /** * This hook is used to apply additional access control and/or bypass * authentication for this resource. It runs *before* a user is authenticated, * but after the auth_checker hook. * This hook should be registered with ap_hook_check_access_ex(). * * @param r the current request * @return OK (allow acces), DECLINED (let later modules decide), * or HTTP_... (deny access) * @ingroup hooks * @see ap_hook_check_access_ex */ AP_DECLARE_HOOK(int,access_checker_ex,(request_rec *r)) /** * This hook is used to check to see if the resource being requested * is available for the authenticated user (r->user and r->ap_auth_type). * It runs after the access_checker and check_user_id hooks. Note that * it will *only* be called if Apache determines that access control has * been applied to this resource (through a 'Require' directive). This * hook should be registered with ap_hook_check_authz(). * * @param r the current request * @return OK, DECLINED, or HTTP_... * @ingroup hooks * @see ap_hook_check_authz */ AP_DECLARE_HOOK(int,auth_checker,(request_rec *r)) /** * Register a hook function that will apply additional access control to * the current request. * @param pf An access_checker hook function * @param aszPre A NULL-terminated array of strings that name modules whose * hooks should precede this one * @param aszSucc A NULL-terminated array of strings that name modules whose * hooks should succeed this one * @param nOrder An integer determining order before honouring aszPre and * aszSucc (for example, HOOK_MIDDLE) * @param type Internal request processing mode, either * AP_AUTH_INTERNAL_PER_URI or AP_AUTH_INTERNAL_PER_CONF */ AP_DECLARE(void) ap_hook_check_access(ap_HOOK_access_checker_t *pf, const char * const *aszPre, const char * const *aszSucc, int nOrder, int type); /** * Register a hook function that will apply additional access control * and/or bypass authentication for the current request. * @param pf An access_checker_ex hook function * @param aszPre A NULL-terminated array of strings that name modules whose * hooks should precede this one * @param aszSucc A NULL-terminated array of strings that name modules whose * hooks should succeed this one * @param nOrder An integer determining order before honouring aszPre and * aszSucc (for example, HOOK_MIDDLE) * @param type Internal request processing mode, either * AP_AUTH_INTERNAL_PER_URI or AP_AUTH_INTERNAL_PER_CONF */ AP_DECLARE(void) ap_hook_check_access_ex(ap_HOOK_access_checker_ex_t *pf, const char * const *aszPre, const char * const *aszSucc, int nOrder, int type); /** * Register a hook function that will analyze the request headers, * authenticate the user, and set the user information in the request record. * @param pf A check_user_id hook function * @param aszPre A NULL-terminated array of strings that name modules whose * hooks should precede this one * @param aszSucc A NULL-terminated array of strings that name modules whose * hooks should succeed this one * @param nOrder An integer determining order before honouring aszPre and * aszSucc (for example, HOOK_MIDDLE) * @param type Internal request processing mode, either * AP_AUTH_INTERNAL_PER_URI or AP_AUTH_INTERNAL_PER_CONF */ AP_DECLARE(void) ap_hook_check_authn(ap_HOOK_check_user_id_t *pf, const char * const *aszPre, const char * const *aszSucc, int nOrder, int type); /** * Register a hook function that determine if the resource being requested * is available for the currently authenticated user. * @param pf An auth_checker hook function * @param aszPre A NULL-terminated array of strings that name modules whose * hooks should precede this one * @param aszSucc A NULL-terminated array of strings that name modules whose * hooks should succeed this one * @param nOrder An integer determining order before honouring aszPre and * aszSucc (for example, HOOK_MIDDLE) * @param type Internal request processing mode, either * AP_AUTH_INTERNAL_PER_URI or AP_AUTH_INTERNAL_PER_CONF */ AP_DECLARE(void) ap_hook_check_authz(ap_HOOK_auth_checker_t *pf, const char * const *aszPre, const char * const *aszSucc, int nOrder, int type); /** * This hook allows modules to insert filters for the current request * @param r the current request * @ingroup hooks */ AP_DECLARE_HOOK(void,insert_filter,(request_rec *r)) /** * This hook allows modules to affect the request immediately after the * per-directory configuration for the request has been generated. * @param r The current request * @return OK (allow acces), DECLINED (let later modules decide), * or HTTP_... (deny access) * @ingroup hooks */ AP_DECLARE_HOOK(int,post_perdir_config,(request_rec *r)) /** * This hook allows a module to force authn to be required when * processing a request. * This hook should be registered with ap_hook_force_authn(). * @param r The current request * @return OK (force authn), DECLINED (let later modules decide) * @ingroup hooks */ AP_DECLARE_HOOK(int,force_authn,(request_rec *r)) /** * This hook allows modules to handle/emulate the apr_stat() calls * needed for directory walk. * @param finfo where to put the stat data * @param r The current request * @param wanted APR_FINFO_* flags to pass to apr_stat() * @return apr_status_t or AP_DECLINED (let later modules decide) * @ingroup hooks */ AP_DECLARE_HOOK(apr_status_t,dirwalk_stat,(apr_finfo_t *finfo, request_rec *r, apr_int32_t wanted)) AP_DECLARE(int) ap_location_walk(request_rec *r); AP_DECLARE(int) ap_directory_walk(request_rec *r); AP_DECLARE(int) ap_file_walk(request_rec *r); AP_DECLARE(int) ap_if_walk(request_rec *r); /** End Of REQUEST (EOR) bucket */ AP_DECLARE_DATA extern const apr_bucket_type_t ap_bucket_type_eor; /** * Determine if a bucket is an End Of REQUEST (EOR) bucket * @param e The bucket to inspect * @return true or false */ #define AP_BUCKET_IS_EOR(e) (e->type == &ap_bucket_type_eor) /** * Make the bucket passed in an End Of REQUEST (EOR) bucket * @param b The bucket to make into an EOR bucket * @param r The request to destroy when this bucket is destroyed * @return The new bucket, or NULL if allocation failed */ AP_DECLARE(apr_bucket *) ap_bucket_eor_make(apr_bucket *b, request_rec *r); /** * Create a bucket referring to an End Of REQUEST (EOR). This bucket * holds a pointer to the request_rec, so that the request can be * destroyed right after all of the output has been sent to the client. * * @param list The freelist from which this bucket should be allocated * @param r The request to destroy when this bucket is destroyed * @return The new bucket, or NULL if allocation failed */ AP_DECLARE(apr_bucket *) ap_bucket_eor_create(apr_bucket_alloc_t *list, request_rec *r); /** * Can be used within any handler to determine if any authentication * is required for the current request. Note that if used with an * access_checker hook, an access_checker_ex hook or an authz provider; the * caller should take steps to avoid a loop since this function is * implemented by calling these hooks. * @param r The current request * @return TRUE if authentication is required, FALSE otherwise */ AP_DECLARE(int) ap_some_authn_required(request_rec *r); #ifdef __cplusplus } #endif #endif /* !APACHE_HTTP_REQUEST_H */ /** @} */ httpd-2.4.41/include/util_cfgtree.h0000644000000000000500000000612111637105701015505 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file util_cfgtree.h * @brief Config Tree Package * * @defgroup APACHE_CORE_CONFIG_TREE Config Tree Package * @ingroup APACHE_CORE_CONFIG * @{ */ #ifndef AP_CONFTREE_H #define AP_CONFTREE_H #include "ap_config.h" #ifdef __cplusplus extern "C" { #endif typedef struct ap_directive_t ap_directive_t; /** * @brief Structure used to build the config tree. * * The config tree only stores * the directives that will be active in the running server. Directives * that contain other directions, such as <Directory ...> cause a sub-level * to be created, where the included directives are stored. The closing * directive (</Directory>) is not stored in the tree. */ struct ap_directive_t { /** The current directive */ const char *directive; /** The arguments for the current directive, stored as a space * separated list */ const char *args; /** The next directive node in the tree */ struct ap_directive_t *next; /** The first child node of this directive */ struct ap_directive_t *first_child; /** The parent node of this directive */ struct ap_directive_t *parent; /** directive's module can store add'l data here */ void *data; /* ### these may go away in the future, but are needed for now */ /** The name of the file this directive was found in */ const char *filename; /** The line number the directive was on */ int line_num; /** A short-cut towards the last directive node in the tree. * The value may not always be up-to-date but it always points to * somewhere in the tree, nearer to the tail. * This value is only set in the first node */ struct ap_directive_t *last; }; /** * The root of the configuration tree */ AP_DECLARE_DATA extern ap_directive_t *ap_conftree; /** * Add a node to the configuration tree. * @param parent The current parent node. If the added node is a first_child, then this is changed to the current node * @param current The current node * @param toadd The node to add to the tree * @param child Is the node to add a child node * @return the added node */ ap_directive_t *ap_add_node(ap_directive_t **parent, ap_directive_t *current, ap_directive_t *toadd, int child); #ifdef __cplusplus } #endif #endif /** @} */ httpd-2.4.41/include/util_varbuf.h0000644000000000000500000002013612362524526015363 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file util_varbuf.h * @brief Apache resizable variable length buffer library * * @defgroup APACHE_CORE_VARBUF Variable length buffer library * @ingroup APACHE_CORE * * This set of functions provides resizable buffers. While the primary * usage is with NUL-terminated strings, most functions also work with * arbitrary binary data. * * @{ */ #ifndef AP_VARBUF_H #define AP_VARBUF_H #include "apr.h" #include "apr_allocator.h" #include "httpd.h" #ifdef __cplusplus extern "C" { #endif #define AP_VARBUF_UNKNOWN APR_SIZE_MAX struct ap_varbuf_info; /** A resizable buffer. */ struct ap_varbuf { /** The actual buffer; will point to a const '\\0' if avail == 0 and * to memory of the same lifetime as the pool otherwise. */ char *buf; /** Allocated size of the buffer (minus one for the final \\0); * must only be changed using ap_varbuf_grow(). */ apr_size_t avail; /** Length of string in buffer, or AP_VARBUF_UNKNOWN. This determines how * much memory is copied by ap_varbuf_grow() and where * ap_varbuf_strmemcat() will append to the buffer. */ apr_size_t strlen; /** The pool for memory allocations and for registering the cleanup; * the buffer memory will be released when this pool is cleared. */ apr_pool_t *pool; /** Opaque info for memory allocation. */ struct ap_varbuf_info *info; }; /** * Initialize a resizable buffer. It is safe to re-initialize a previously * used ap_varbuf. The old buffer will be released when the corresponding * pool is cleared. The buffer remains usable until the pool is cleared, * even if the ap_varbuf was located on the stack and has gone out of scope. * @param pool The pool to allocate small buffers from and to register * the cleanup with * @param vb Pointer to the ap_varbuf struct * @param init_size The initial size of the buffer (see ap_varbuf_grow() for * details) */ AP_DECLARE(void) ap_varbuf_init(apr_pool_t *pool, struct ap_varbuf *vb, apr_size_t init_size); /** * Grow a resizable buffer. If the vb->buf cannot be grown in place, it will * be reallocated and the first vb->strlen + 1 bytes of memory will be copied * to the new location. If vb->strlen == AP_VARBUF_UNKNOWN, the whole buffer * is copied. * @param vb Pointer to the ap_varbuf struct * @param new_size The minimum new size of the buffer * @note ap_varbuf_grow() will usually at least double vb->buf's size with * every invocation in order to reduce reallocations. * @note ap_varbuf_grow() will use pool memory for small and allocator * mem nodes for larger allocations. * @note ap_varbuf_grow() will call vb->pool's abort function if out of memory. */ AP_DECLARE(void) ap_varbuf_grow(struct ap_varbuf *vb, apr_size_t new_size); /** * Release memory from a ap_varbuf immediately, if possible. * This allows to free large buffers before the corresponding pool is * cleared. Only larger allocations using mem nodes will be freed. * @param vb Pointer to the ap_varbuf struct * @note After ap_varbuf_free(), vb must not be used unless ap_varbuf_init() * is called again. */ AP_DECLARE(void) ap_varbuf_free(struct ap_varbuf *vb); /** * Concatenate a string to an ap_varbuf. vb->strlen determines where * the string is appended in the buffer. If vb->strlen == AP_VARBUF_UNKNOWN, * the string will be appended at the first NUL byte in the buffer. * If len == 0, ap_varbuf_strmemcat() does nothing. * @param vb Pointer to the ap_varbuf struct * @param str The string to append; must be at least len bytes long * @param len The number of characters of *str to concatenate to the buf * @note vb->strlen will be set to the length of the new string * @note if len != 0, vb->buf will always be NUL-terminated */ AP_DECLARE(void) ap_varbuf_strmemcat(struct ap_varbuf *vb, const char *str, int len); /** * Duplicate an ap_varbuf's content into pool memory. * @param p The pool to allocate from * @param vb The ap_varbuf to copy from * @param prepend An optional buffer to prepend (may be NULL) * @param prepend_len Length of prepend * @param append An optional buffer to append (may be NULL) * @param append_len Length of append * @param new_len Where to store the length of the resulting string * (may be NULL) * @return The new string * @note ap_varbuf_pdup() uses vb->strlen to determine how much memory to * copy. It works even if 0-bytes are embedded in vb->buf, prepend, or * append. * @note If vb->strlen equals AP_VARBUF_UNKNOWN, it will be set to * strlen(vb->buf). */ AP_DECLARE(char *) ap_varbuf_pdup(apr_pool_t *p, struct ap_varbuf *vb, const char *prepend, apr_size_t prepend_len, const char *append, apr_size_t append_len, apr_size_t *new_len); /** * Concatenate a string to an ap_varbuf. * @param vb Pointer to the ap_varbuf struct * @param str The string to append * @note vb->strlen will be set to the length of the new string */ #define ap_varbuf_strcat(vb, str) ap_varbuf_strmemcat(vb, str, strlen(str)) /** * Perform string substitutions based on regexp match, using an ap_varbuf. * This function behaves like ap_pregsub(), but appends to an ap_varbuf * instead of allocating the result from a pool. * @param vb The ap_varbuf to which the string will be appended * @param input An arbitrary string containing $1 through $9. These are * replaced with the corresponding matched sub-expressions * @param source The string that was originally matched to the regex * @param nmatch The nmatch returned from ap_pregex * @param pmatch The pmatch array returned from ap_pregex * @param maxlen The maximum string length to append to vb, 0 for unlimited * @return APR_SUCCESS if successful * @note Just like ap_pregsub(), this function does not copy the part of * *source before the matching part (i.e. the first pmatch[0].rm_so * characters). * @note If vb->strlen equals AP_VARBUF_UNKNOWN, it will be set to * strlen(vb->buf) first. */ AP_DECLARE(apr_status_t) ap_varbuf_regsub(struct ap_varbuf *vb, const char *input, const char *source, apr_size_t nmatch, ap_regmatch_t pmatch[], apr_size_t maxlen); /** * Read a line from an ap_configfile_t and append it to an ap_varbuf. * @param vb Pointer to the ap_varbuf struct * @param cfp Pointer to the ap_configfile_t * @param max_len Maximum line length, including leading/trailing whitespace * @return See ap_cfg_getline() * @note vb->strlen will be set to the length of the line * @note If vb->strlen equals AP_VARBUF_UNKNOWN, it will be set to * strlen(vb->buf) first. */ AP_DECLARE(apr_status_t) ap_varbuf_cfg_getline(struct ap_varbuf *vb, ap_configfile_t *cfp, apr_size_t max_len); #ifdef __cplusplus } #endif #endif /* !AP_VARBUF_H */ /** @} */ httpd-2.4.41/include/ap_socache.h0000644000000000000500000002225311715317150015122 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ap_socache.h * @brief Small object cache provider interface. * * @defgroup AP_SOCACHE ap_socache * @ingroup APACHE_MODS * @{ */ #ifndef AP_SOCACHE_H #define AP_SOCACHE_H #include "httpd.h" #include "ap_provider.h" #include "apr_pools.h" #include "apr_time.h" #ifdef __cplusplus extern "C" { #endif /** If this flag is set, the store/retrieve/remove/status interfaces * of the provider are NOT safe to be called concurrently from * multiple processes or threads, and an external global mutex must be * used to serialize access to the provider. */ /* XXX: Even if store/retrieve/remove is atomic, isn't it useful to note * independently that status and iterate may or may not be? */ #define AP_SOCACHE_FLAG_NOTMPSAFE (0x0001) /** A cache instance. */ typedef struct ap_socache_instance_t ap_socache_instance_t; /** Hints which may be passed to the init function; providers may * ignore some or all of these hints. */ struct ap_socache_hints { /** Approximate average length of IDs: */ apr_size_t avg_id_len; /** Approximate average size of objects: */ apr_size_t avg_obj_size; /** Suggested interval between expiry cleanup runs; */ apr_interval_time_t expiry_interval; }; /** * Iterator callback prototype for the ap_socache_provider_t->iterate() method * @param instance The cache instance * @param s Associated server context (for logging) * @param userctx User defined pointer passed from the iterator call * @param id Unique ID for the object (binary blob) * with a trailing null char for convenience * @param idlen Length of id blob * @param data Output buffer to place retrieved data (binary blob) * with a trailing null char for convenience * @param datalen Length of data buffer * @param pool Pool for temporary allocations * @return APR status value; return APR_SUCCESS or the iteration will halt; * this value is returned to the ap_socache_provider_t->iterate() caller */ typedef apr_status_t (ap_socache_iterator_t)(ap_socache_instance_t *instance, server_rec *s, void *userctx, const unsigned char *id, unsigned int idlen, const unsigned char *data, unsigned int datalen, apr_pool_t *pool); /** A socache provider structure. socache providers are registered * with the ap_provider.h interface using the AP_SOCACHE_PROVIDER_* * constants. */ typedef struct ap_socache_provider_t { /** Canonical provider name. */ const char *name; /** Bitmask of AP_SOCACHE_FLAG_* flags. */ unsigned int flags; /** * Create a session cache based on the given configuration string. * The instance pointer returned in the instance parameter will be * passed as the first argument to subsequent invocations. * * @param instance Output parameter to which instance object is written. * @param arg User-specified configuration string. May be NULL to * force use of defaults. * @param tmp Pool to be used for any temporary allocations * @param p Pool to be use for any allocations lasting as long as * the created instance * @return NULL on success, or an error string on failure. */ const char *(*create)(ap_socache_instance_t **instance, const char *arg, apr_pool_t *tmp, apr_pool_t *p); /** * Initialize the cache. The cname must be of maximum length 16 * characters, and uniquely identifies the consumer of the cache * within the server; using the module name is recommended, e.g. * "mod_ssl-sess". This string may be used within a filesystem * path so use of only alphanumeric [a-z0-9_-] characters is * recommended. If hints is non-NULL, it gives a set of hints for * the provider. Returns APR error code. * * @param instance The cache instance * @param cname A unique string identifying the consumer of this API * @param hints Optional hints argument describing expected cache use * @param s Server structure to which the cache is associated * @param pool Pool for long-lived allocations * @return APR status value indicating success. */ apr_status_t (*init)(ap_socache_instance_t *instance, const char *cname, const struct ap_socache_hints *hints, server_rec *s, apr_pool_t *pool); /** * Destroy a given cache instance object. * @param instance The cache instance to destroy. * @param s Associated server structure (for logging purposes) */ void (*destroy)(ap_socache_instance_t *instance, server_rec *s); /** * Store an object in a cache instance. * @param instance The cache instance * @param s Associated server structure (for logging purposes) * @param id Unique ID for the object; binary blob * @param idlen Length of id blob * @param expiry Absolute time at which the object expires * @param data Data to store; binary blob * @param datalen Length of data blob * @param pool Pool for temporary allocations. * @return APR status value. */ apr_status_t (*store)(ap_socache_instance_t *instance, server_rec *s, const unsigned char *id, unsigned int idlen, apr_time_t expiry, unsigned char *data, unsigned int datalen, apr_pool_t *pool); /** * Retrieve a cached object. * * @param instance The cache instance * @param s Associated server structure (for logging purposes) * @param id Unique ID for the object; binary blob * @param idlen Length of id blob * @param data Output buffer to place retrievd data (binary blob) * @param datalen On entry, length of data buffer; on exit, the * number of bytes written to the data buffer. * @param pool Pool for temporary allocations. * @return APR status value; APR_NOTFOUND if the object was not * found */ apr_status_t (*retrieve)(ap_socache_instance_t *instance, server_rec *s, const unsigned char *id, unsigned int idlen, unsigned char *data, unsigned int *datalen, apr_pool_t *pool); /** * Remove an object from the cache * * @param instance The cache instance * @param s Associated server structure (for logging purposes) * @param id Unique ID for the object; binary blob * @param idlen Length of id blob * @param pool Pool for temporary allocations. */ apr_status_t (*remove)(ap_socache_instance_t *instance, server_rec *s, const unsigned char *id, unsigned int idlen, apr_pool_t *pool); /** * Dump the status of a cache instance for mod_status. Will use * the ap_r* interfaces to produce appropriate status output. * XXX: ap_r* are deprecated, bad dogfood * * @param instance The cache instance * @param r The request structure * @param flags The AP_STATUS_* constants used (see mod_status.h) */ void (*status)(ap_socache_instance_t *instance, request_rec *r, int flags); /** * Dump all cached objects through an iterator callback. * @param instance The cache instance * @param s Associated server context (for processing and logging) * @param userctx User defined pointer passed through to the iterator * @param iterator The user provided callback function which will receive * individual calls for each unexpired id/data pair * @param pool Pool for temporary allocations. * @return APR status value; APR_NOTFOUND if the object was not * found */ apr_status_t (*iterate)(ap_socache_instance_t *instance, server_rec *s, void *userctx, ap_socache_iterator_t *iterator, apr_pool_t *pool); } ap_socache_provider_t; /** The provider group used to register socache providers. */ #define AP_SOCACHE_PROVIDER_GROUP "socache" /** The provider version used to register socache providers. */ #define AP_SOCACHE_PROVIDER_VERSION "0" /** Default provider name. */ #define AP_SOCACHE_DEFAULT_PROVIDER "default" #ifdef __cplusplus } #endif #endif /* AP_SOCACHE_H */ /** @} */ httpd-2.4.41/include/http_vhost.h0000644000000000000500000000767211637145452015256 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file http_vhost.h * @brief Virtual Host package * * @defgroup APACHE_CORE_VHOST Virtual Host Package * @ingroup APACHE_CORE * @{ */ #ifndef APACHE_HTTP_VHOST_H #define APACHE_HTTP_VHOST_H #ifdef __cplusplus extern "C" { #endif /** * called before any config is read * @param p Pool to allocate out of */ AP_DECLARE(void) ap_init_vhost_config(apr_pool_t *p); /** * called after the config has been read to compile the tables needed to do * the run-time vhost lookups * @param p The pool to allocate out of * @param main_server The start of the virtual host list */ AP_DECLARE(void) ap_fini_vhost_config(apr_pool_t *p, server_rec *main_server); /** * handle addresses in "" statement * @param p The pool to allocate out of * @param hostname The hostname in the VirtualHost statement * @param s The list of Virtual Hosts. */ const char *ap_parse_vhost_addrs(apr_pool_t *p, const char *hostname, server_rec *s); /** * handle NameVirtualHost directive * @param cmd Command Parameters structure * @param dummy NOT USED * @param arg a host of the form "
[:port]" */ AP_DECLARE_NONSTD(const char *)ap_set_name_virtual_host(cmd_parms *cmd, void *dummy, const char *arg); /** * Callback function for every Name Based Virtual Host. * @param baton Opaque user object * @param conn The current Connection * @param s The current Server * @see ap_vhost_iterate_given_conn * @return 0 on success, any non-zero return will stop the iteration. */ typedef int(*ap_vhost_iterate_conn_cb)(void* baton, conn_rec* conn, server_rec* s); /** * For every virtual host on this connection, call func_cb. * @param conn The current connection * @param func_cb Function called for every Name Based Virtual Host for this * connection. * @param baton Opaque object passed to func_cb. * @return The return value from func_cb. * @note If func_cb returns non-zero, the function will return at this point, * and not continue iterating the virtual hosts. */ AP_DECLARE(int) ap_vhost_iterate_given_conn(conn_rec *conn, ap_vhost_iterate_conn_cb func_cb, void* baton); /** * given an ip address only, give our best guess as to what vhost it is * @param conn The current connection */ AP_DECLARE(void) ap_update_vhost_given_ip(conn_rec *conn); /** * ap_update_vhost_given_ip is never enough, and this is always called after * the headers have been read. It may change r->server. * @param r The current request */ AP_DECLARE(void) ap_update_vhost_from_headers(request_rec *r); /** * Match the host in the header with the hostname of the server for this * request. * @param r The current request * @param host The hostname in the headers * @param port The port from the headers * @return return 1 if the host:port matches any of the aliases of r->server, * return 0 otherwise */ AP_DECLARE(int) ap_matches_request_vhost(request_rec *r, const char *host, apr_port_t port); #ifdef __cplusplus } #endif #endif /* !APACHE_HTTP_VHOST_H */ /** @} */ httpd-2.4.41/include/mod_core.h0000644000000000000500000000651612030026303014614 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_core.h * @brief mod_core private header file * * @defgroup MOD_CORE mod_core * @ingroup APACHE_MODS * @{ */ #ifndef MOD_CORE_H #define MOD_CORE_H #include "apr.h" #include "apr_buckets.h" #include "httpd.h" #include "util_filter.h" #ifdef __cplusplus extern "C" { #endif /* Handles for core filters */ AP_DECLARE_DATA extern ap_filter_rec_t *ap_http_input_filter_handle; AP_DECLARE_DATA extern ap_filter_rec_t *ap_http_header_filter_handle; AP_DECLARE_DATA extern ap_filter_rec_t *ap_chunk_filter_handle; AP_DECLARE_DATA extern ap_filter_rec_t *ap_http_outerror_filter_handle; AP_DECLARE_DATA extern ap_filter_rec_t *ap_byterange_filter_handle; /* * These (input) filters are internal to the mod_core operation. */ apr_status_t ap_http_filter(ap_filter_t *f, apr_bucket_brigade *b, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes); /* HTTP/1.1 chunked transfer encoding filter. */ apr_status_t ap_http_chunk_filter(ap_filter_t *f, apr_bucket_brigade *b); /* Filter to handle any error buckets on output */ apr_status_t ap_http_outerror_filter(ap_filter_t *f, apr_bucket_brigade *b); char *ap_response_code_string(request_rec *r, int error_index); /** * Send the minimal part of an HTTP response header. * @param r The current request * @param bb The brigade to add the header to. * @warning Modules should be very careful about using this, and should * the default behavior. Much of the HTTP/1.1 implementation * correctness depends on the full headers. * @fn void ap_basic_http_header(request_rec *r, apr_bucket_brigade *bb) */ AP_DECLARE(void) ap_basic_http_header(request_rec *r, apr_bucket_brigade *bb); /** * Send an appropriate response to an http TRACE request. * @param r The current request * @note returns DONE or the HTTP status error if it handles the TRACE, * or DECLINED if the request was not for TRACE. * request method was not TRACE. */ AP_DECLARE_NONSTD(int) ap_send_http_trace(request_rec *r); /** * Send an appropriate response to an http OPTIONS request. * @param r The current request */ AP_DECLARE(int) ap_send_http_options(request_rec *r); /* Used for multipart/byteranges boundary string */ AP_DECLARE_DATA extern const char *ap_multipart_boundary; /* Init RNG at startup */ AP_CORE_DECLARE(void) ap_init_rng(apr_pool_t *p); /* Update RNG state in parent after fork */ AP_CORE_DECLARE(void) ap_random_parent_after_fork(void); #ifdef __cplusplus } #endif #endif /* !MOD_CORE_H */ /** @} */ httpd-2.4.41/include/ap_release.h0000644000000000000500000000611013523273316015133 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ap_release.h * @brief Version Release defines */ #ifndef AP_RELEASE_H #define AP_RELEASE_H #define AP_SERVER_COPYRIGHT \ "Copyright 2019 The Apache Software Foundation." /* * The below defines the base string of the Server: header. Additional * tokens can be added via the ap_add_version_component() API call. * * The tokens are listed in order of their significance for identifying the * application. * * "Product tokens should be short and to the point -- use of them for * advertizing or other non-essential information is explicitly forbidden." * * Example: "Apache/1.1.0 MrWidget/0.1-alpha" */ #define AP_SERVER_BASEVENDOR "Apache Software Foundation" #define AP_SERVER_BASEPROJECT "Apache HTTP Server" #define AP_SERVER_BASEPRODUCT "Apache" #define AP_SERVER_MAJORVERSION_NUMBER 2 #define AP_SERVER_MINORVERSION_NUMBER 4 #define AP_SERVER_PATCHLEVEL_NUMBER 41 #define AP_SERVER_DEVBUILD_BOOLEAN 0 /* Synchronize the above with docs/manual/style/version.ent */ #if !AP_SERVER_DEVBUILD_BOOLEAN #define AP_SERVER_ADD_STRING "" #else #ifndef AP_SERVER_ADD_STRING #define AP_SERVER_ADD_STRING "-dev" #endif #endif /* APR_STRINGIFY is defined here, and also in apr_general.h, so wrap it */ #ifndef APR_STRINGIFY /** Properly quote a value as a string in the C preprocessor */ #define APR_STRINGIFY(n) APR_STRINGIFY_HELPER(n) /** Helper macro for APR_STRINGIFY */ #define APR_STRINGIFY_HELPER(n) #n #endif /* keep old macros as well */ #define AP_SERVER_MAJORVERSION APR_STRINGIFY(AP_SERVER_MAJORVERSION_NUMBER) #define AP_SERVER_MINORVERSION APR_STRINGIFY(AP_SERVER_MINORVERSION_NUMBER) #define AP_SERVER_PATCHLEVEL APR_STRINGIFY(AP_SERVER_PATCHLEVEL_NUMBER) \ AP_SERVER_ADD_STRING #define AP_SERVER_MINORREVISION AP_SERVER_MAJORVERSION "." AP_SERVER_MINORVERSION #define AP_SERVER_BASEREVISION AP_SERVER_MINORREVISION "." AP_SERVER_PATCHLEVEL #define AP_SERVER_BASEVERSION AP_SERVER_BASEPRODUCT "/" AP_SERVER_BASEREVISION #define AP_SERVER_VERSION AP_SERVER_BASEVERSION /* macro for Win32 .rc files using numeric csv representation */ #define AP_SERVER_PATCHLEVEL_CSV AP_SERVER_MAJORVERSION_NUMBER, \ AP_SERVER_MINORVERSION_NUMBER, \ AP_SERVER_PATCHLEVEL_NUMBER #endif httpd-2.4.41/include/ap_expr.h0000644000000000000500000003337412206471775014513 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ap_expr.h * @brief Expression parser * * @defgroup AP_EXPR Expression parser * @ingroup APACHE_CORE * @{ */ #ifndef AP_EXPR_H #define AP_EXPR_H #include "httpd.h" #include "http_config.h" #include "ap_regex.h" #ifdef __cplusplus extern "C" { #endif /** A node in the expression parse tree */ typedef struct ap_expr_node ap_expr_t; /** Struct describing a parsed expression */ typedef struct { /** The root of the actual expression parse tree */ ap_expr_t *root_node; /** The filename where the expression has been defined (for logging). * May be NULL */ const char *filename; /** The line number where the expression has been defined (for logging). */ unsigned int line_number; /** Flags relevant for the expression, see AP_EXPR_FLAG_* */ unsigned int flags; /** The module that is used for loglevel configuration */ int module_index; } ap_expr_info_t; /** Use ssl_expr compatibility mode (changes the meaning of the comparison * operators) */ #define AP_EXPR_FLAG_SSL_EXPR_COMPAT 1 /** Don't add siginificant request headers to the Vary response header */ #define AP_EXPR_FLAG_DONT_VARY 2 /** Don't allow functions/vars that bypass the current request's access * restrictions or would otherwise leak confidential information. * Used by e.g. mod_include. */ #define AP_EXPR_FLAG_RESTRICTED 4 /** Expression evaluates to a string, not to a bool */ #define AP_EXPR_FLAG_STRING_RESULT 8 /** * Evaluate a parse tree, simple interface * @param r The current request * @param expr The expression to be evaluated * @param err Where an error message should be stored * @return > 0 if expression evaluates to true, == 0 if false, < 0 on error * @note err will be set to NULL on success, or to an error message on error * @note request headers used during evaluation will be added to the Vary: * response header, unless ::AP_EXPR_FLAG_DONT_VARY is set. */ AP_DECLARE(int) ap_expr_exec(request_rec *r, const ap_expr_info_t *expr, const char **err); /** * Evaluate a parse tree, with access to regexp backreference * @param r The current request * @param expr The expression to be evaluated * @param nmatch size of the regex match vector pmatch * @param pmatch information about regex matches * @param source the string that pmatch applies to * @param err Where an error message should be stored * @return > 0 if expression evaluates to true, == 0 if false, < 0 on error * @note err will be set to NULL on success, or to an error message on error * @note nmatch/pmatch/source can be used both to make previous matches * available to ap_expr_exec_re and to use ap_expr_exec_re's matches * later on. * @note request headers used during evaluation will be added to the Vary: * response header, unless ::AP_EXPR_FLAG_DONT_VARY is set. */ AP_DECLARE(int) ap_expr_exec_re(request_rec *r, const ap_expr_info_t *expr, apr_size_t nmatch, ap_regmatch_t *pmatch, const char **source, const char **err); /** Context used during evaluation of a parse tree, created by ap_expr_exec */ typedef struct { /** the current request */ request_rec *r; /** the current connection */ conn_rec *c; /** the current virtual host */ server_rec *s; /** the pool to use */ apr_pool_t *p; /** where to store the error string */ const char **err; /** ap_expr_info_t for the expression */ const ap_expr_info_t *info; /** regex match information for back references */ ap_regmatch_t *re_pmatch; /** size of the vector pointed to by re_pmatch */ apr_size_t re_nmatch; /** the string corresponding to the re_pmatch */ const char **re_source; /** A string where the comma separated names of headers are stored * to be later added to the Vary: header. If NULL, the caller is not * interested in this information. */ const char **vary_this; /** where to store the result string */ const char **result_string; /** Arbitrary context data provided by the caller for custom functions */ void *data; /** The current recursion level */ int reclvl; } ap_expr_eval_ctx_t; /** * Evaluate a parse tree, full featured version * @param ctx The evaluation context with all data filled in * @return > 0 if expression evaluates to true, == 0 if false, < 0 on error * @note *ctx->err will be set to NULL on success, or to an error message on * error * @note request headers used during evaluation will be added to the Vary: * response header if ctx->vary_this is set. */ AP_DECLARE(int) ap_expr_exec_ctx(ap_expr_eval_ctx_t *ctx); /** * Evaluate a parse tree of a string valued expression * @param r The current request * @param expr The expression to be evaluated * @param err Where an error message should be stored * @return The result string, NULL on error * @note err will be set to NULL on success, or to an error message on error * @note request headers used during evaluation will be added to the Vary: * response header, unless ::AP_EXPR_FLAG_DONT_VARY is set. */ AP_DECLARE(const char *) ap_expr_str_exec(request_rec *r, const ap_expr_info_t *expr, const char **err); /** * Evaluate a parse tree of a string valued expression * @param r The current request * @param expr The expression to be evaluated * @param nmatch size of the regex match vector pmatch * @param pmatch information about regex matches * @param source the string that pmatch applies to * @param err Where an error message should be stored * @return The result string, NULL on error * @note err will be set to NULL on success, or to an error message on error * @note nmatch/pmatch/source can be used both to make previous matches * available to ap_expr_exec_re and to use ap_expr_exec_re's matches * later on. * @note request headers used during evaluation will be added to the Vary: * response header, unless ::AP_EXPR_FLAG_DONT_VARY is set. */ AP_DECLARE(const char *) ap_expr_str_exec_re(request_rec *r, const ap_expr_info_t *expr, apr_size_t nmatch, ap_regmatch_t *pmatch, const char **source, const char **err); /** * The parser can be extended with variable lookup, functions, and * and operators. * * During parsing, the parser calls the lookup function to resolve a * name into a function pointer and an opaque context for the function. * If the argument to a function or operator is constant, the lookup function * may also parse that argument and store the parsed data in the context. * * The default lookup function is the hook ::ap_expr_lookup_default which just * calls ap_run_expr_lookup. Modules can use it to make functions and * variables generally available. * * An ap_expr consumer can also provide its own custom lookup function to * modify the set of variables and functions that are available. The custom * lookup function can in turn call 'ap_run_expr_lookup'. */ /** Unary operator, takes one string argument and returns a bool value. * The name must have the form '-z' (one letter only). * @param ctx The evaluation context * @param data An opaque context provided by the lookup hook function * @param arg The (right) operand * @return 0 or 1 */ typedef int ap_expr_op_unary_t(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg); /** Binary operator, takes two string arguments and returns a bool value. * The name must have the form '-cmp' (at least two letters). * @param ctx The evaluation context * @param data An opaque context provided by the lookup hook function * @param arg1 The left operand * @param arg2 The right operand * @return 0 or 1 */ typedef int ap_expr_op_binary_t(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg1, const char *arg2); /** String valued function, takes a string argument and returns a string * @param ctx The evaluation context * @param data An opaque context provided by the lookup hook function * @param arg The argument * @return The functions result string, may be NULL for 'empty string' */ typedef const char *(ap_expr_string_func_t)(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg); /** List valued function, takes a string argument and returns a list of strings * Can currently only be called following the builtin '-in' operator. * @param ctx The evaluation context * @param data An opaque context provided by the lookup hook function * @param arg The argument * @return The functions result list of strings, may be NULL for 'empty array' */ typedef apr_array_header_t *(ap_expr_list_func_t)(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg); /** Variable lookup function, takes no argument and returns a string * @param ctx The evaluation context * @param data An opaque context provided by the lookup hook function * @return The expanded variable */ typedef const char *(ap_expr_var_func_t)(ap_expr_eval_ctx_t *ctx, const void *data); /** parameter struct passed to the lookup hook functions */ typedef struct { /** type of the looked up object */ int type; #define AP_EXPR_FUNC_VAR 0 #define AP_EXPR_FUNC_STRING 1 #define AP_EXPR_FUNC_LIST 2 #define AP_EXPR_FUNC_OP_UNARY 3 #define AP_EXPR_FUNC_OP_BINARY 4 /** name of the looked up object */ const char *name; int flags; apr_pool_t *pool; apr_pool_t *ptemp; /** where to store the function pointer */ const void **func; /** where to store the function's context */ const void **data; /** where to store the error message (if any) */ const char **err; /** arg for pre-parsing (only if a simple string). * For binary ops, this is the right argument. */ const char *arg; } ap_expr_lookup_parms; /** Function for looking up the provider function for a variable, operator * or function in an expression. * @param parms The parameter struct, also determins where the result is * stored. * @return OK on success, * !OK on failure, * DECLINED if the requested name is not handled by this function */ typedef int (ap_expr_lookup_fn_t)(ap_expr_lookup_parms *parms); /** Default lookup function which just calls ap_run_expr_lookup(). * ap_run_expr_lookup cannot be used directly because it has the wrong * calling convention under Windows. */ AP_DECLARE_NONSTD(int) ap_expr_lookup_default(ap_expr_lookup_parms *parms); AP_DECLARE_HOOK(int, expr_lookup, (ap_expr_lookup_parms *parms)) /** * Parse an expression into a parse tree * @param pool Pool * @param ptemp temp pool * @param info The ap_expr_info_t struct (with values filled in) * @param expr The expression string to parse * @param lookup_fn The lookup function to use, NULL for default * @return NULL on success, error message on error. * A pointer to the resulting parse tree will be stored in * info->root_node. */ AP_DECLARE(const char *) ap_expr_parse(apr_pool_t *pool, apr_pool_t *ptemp, ap_expr_info_t *info, const char *expr, ap_expr_lookup_fn_t *lookup_fn); /** * High level interface to ap_expr_parse that also creates ap_expr_info_t and * uses info from cmd_parms to fill in most of it. * @param cmd The cmd_parms struct * @param expr The expression string to parse * @param flags The flags to use, see AP_EXPR_FLAG_* * @param err Set to NULL on success, error message on error * @param lookup_fn The lookup function used to lookup vars, functions, and * operators * @param module_index The module_index to set for the expression * @return The parsed expression * @note Usually ap_expr_parse_cmd() should be used */ AP_DECLARE(ap_expr_info_t *) ap_expr_parse_cmd_mi(const cmd_parms *cmd, const char *expr, unsigned int flags, const char **err, ap_expr_lookup_fn_t *lookup_fn, int module_index); /** * Convenience wrapper for ap_expr_parse_cmd_mi() that sets * module_index = APLOG_MODULE_INDEX */ #define ap_expr_parse_cmd(cmd, expr, flags, err, lookup_fn) \ ap_expr_parse_cmd_mi(cmd, expr, flags, err, lookup_fn, APLOG_MODULE_INDEX) /** * Internal initialisation of ap_expr (for httpd internal use) */ void ap_expr_init(apr_pool_t *pool); #ifdef __cplusplus } #endif #endif /* AP_EXPR_H */ /** @} */ httpd-2.4.41/include/util_mutex.h0000644000000000000500000002211411644364553015242 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file util_mutex.h * @brief Apache Mutex support library * * @defgroup APACHE_CORE_MUTEX Mutex Library * @ingroup APACHE_CORE * @{ */ #ifndef UTIL_MUTEX_H #define UTIL_MUTEX_H #include "httpd.h" #include "http_config.h" #include "apr_global_mutex.h" #if APR_HAS_FLOCK_SERIALIZE # define AP_LIST_FLOCK_SERIALIZE ", 'flock:/path/to/file'" #else # define AP_LIST_FLOCK_SERIALIZE #endif #if APR_HAS_FCNTL_SERIALIZE # define AP_LIST_FCNTL_SERIALIZE ", 'fcntl:/path/to/file'" #else # define AP_LIST_FCNTL_SERIALIZE #endif #if APR_HAS_SYSVSEM_SERIALIZE # define AP_LIST_SYSVSEM_SERIALIZE ", 'sysvsem'" #else # define AP_LIST_SYSVSEM_SERIALIZE #endif #if APR_HAS_POSIXSEM_SERIALIZE # define AP_LIST_POSIXSEM_SERIALIZE ", 'posixsem'" #else # define AP_LIST_POSIXSEM_SERIALIZE #endif #if APR_HAS_PROC_PTHREAD_SERIALIZE # define AP_LIST_PTHREAD_SERIALIZE ", 'pthread'" #else # define AP_LIST_PTHREAD_SERIALIZE #endif #if APR_HAS_FLOCK_SERIALIZE || APR_HAS_FCNTL_SERIALIZE # define AP_LIST_FILE_SERIALIZE ", 'file:/path/to/file'" #else # define AP_LIST_FILE_SERIALIZE #endif #if APR_HAS_SYSVSEM_SERIALIZE || APR_HAS_POSIXSEM_SERIALIZE # define AP_LIST_SEM_SERIALIZE ", 'sem'" #else # define AP_LIST_SEM_SERIALIZE #endif #define AP_ALL_AVAILABLE_MUTEXES_STRING \ "Mutex mechanisms are: 'none', 'default'" \ AP_LIST_FLOCK_SERIALIZE AP_LIST_FCNTL_SERIALIZE \ AP_LIST_FILE_SERIALIZE AP_LIST_PTHREAD_SERIALIZE \ AP_LIST_SYSVSEM_SERIALIZE AP_LIST_POSIXSEM_SERIALIZE \ AP_LIST_SEM_SERIALIZE #define AP_AVAILABLE_MUTEXES_STRING \ "Mutex mechanisms are: 'default'" \ AP_LIST_FLOCK_SERIALIZE AP_LIST_FCNTL_SERIALIZE \ AP_LIST_FILE_SERIALIZE AP_LIST_PTHREAD_SERIALIZE \ AP_LIST_SYSVSEM_SERIALIZE AP_LIST_POSIXSEM_SERIALIZE \ AP_LIST_SEM_SERIALIZE #ifdef __cplusplus extern "C" { #endif /** * Get Mutex config data and parse it * @param arg The mutex config string * @param pool The allocation pool * @param mutexmech The APR mutex locking mechanism * @param mutexfile The lockfile to use as required * @return APR status code * @fn apr_status_t ap_parse_mutex(const char *arg, apr_pool_t *pool, apr_lockmech_e *mutexmech, const char **mutexfile) */ AP_DECLARE(apr_status_t) ap_parse_mutex(const char *arg, apr_pool_t *pool, apr_lockmech_e *mutexmech, const char **mutexfile); /* private function to process the Mutex directive */ AP_DECLARE_NONSTD(const char *) ap_set_mutex(cmd_parms *cmd, void *dummy, const char *arg); /* private function to initialize Mutex infrastructure */ AP_DECLARE_NONSTD(void) ap_mutex_init(apr_pool_t *p); /** * option flags for ap_mutex_register(), ap_global_mutex_create(), and * ap_proc_mutex_create() */ #define AP_MUTEX_ALLOW_NONE 1 /* allow "none" as mutex implementation; * respected only on ap_mutex_register() */ #define AP_MUTEX_DEFAULT_NONE 2 /* default to "none" for this mutex; * respected only on ap_mutex_register() */ /** * Register a module's mutex type with core to allow configuration * with the Mutex directive. This must be called in the pre_config * hook; otherwise, configuration directives referencing this mutex * type will be rejected. * * The default_dir and default_mech parameters allow a module to set * defaults for the lock file directory and mechanism. These could * be based on compile-time settings. These aren't required except * in special circumstances. * * The order of precedence for the choice of mechanism and lock file * directory is: * * 1. Mutex directive specifically for this mutex * e.g., Mutex mpm-default flock:/tmp/mpmlocks * 2. Mutex directive for global default * e.g., Mutex default flock:/tmp/httpdlocks * 3. Defaults for this mutex provided on the ap_mutex_register() * 4. Built-in defaults for all mutexes, which are * APR_LOCK_DEFAULT and DEFAULT_REL_RUNTIMEDIR. * * @param pconf The pconf pool * @param type The type name of the mutex, used as the basename of the * file associated with the mutex, if any. This must be unique among * all mutex types (mutex creation accommodates multi-instance mutex * types); mod_foo might have mutex types "foo-pipe" and "foo-shm" * @param default_dir Default dir for any lock file required for this * lock, to override built-in defaults; should be NULL for most * modules, to respect built-in defaults * @param default_mech Default mechanism for this lock, to override * built-in defaults; should be APR_LOCK_DEFAULT for most modules, to * respect built-in defaults * or NULL if there are no defaults for this mutex. * @param options combination of AP_MUTEX_* constants, or 0 for defaults */ AP_DECLARE(apr_status_t) ap_mutex_register(apr_pool_t *pconf, const char *type, const char *default_dir, apr_lockmech_e default_mech, apr_int32_t options); /** * Create an APR global mutex that has been registered previously with * ap_mutex_register(). Mutex files, permissions, and error logging will * be handled internally. * @param mutex The memory address where the newly created mutex will be * stored. If this mutex is disabled, mutex will be set to NULL on * output. (That is allowed only if the AP_MUTEX_ALLOW_NONE flag is * passed to ap_mutex_register().) * @param name The generated filename of the created mutex, or NULL if * no file was created. Pass NULL if this result is not needed. * @param type The type name of the mutex, matching the type name passed * to ap_mutex_register(). * @param instance_id A unique string to be used in the lock filename IFF * this mutex type is multi-instance, NULL otherwise. * @param server server_rec of main server * @param pool pool lifetime of the mutex * @param options combination of AP_MUTEX_* constants, or 0 for defaults * (currently none are defined for this function) */ AP_DECLARE(apr_status_t) ap_global_mutex_create(apr_global_mutex_t **mutex, const char **name, const char *type, const char *instance_id, server_rec *server, apr_pool_t *pool, apr_int32_t options); /** * Create an APR proc mutex that has been registered previously with * ap_mutex_register(). Mutex files, permissions, and error logging will * be handled internally. * @param mutex The memory address where the newly created mutex will be * stored. If this mutex is disabled, mutex will be set to NULL on * output. (That is allowed only if the AP_MUTEX_ALLOW_NONE flag is * passed to ap_mutex_register().) * @param name The generated filename of the created mutex, or NULL if * no file was created. Pass NULL if this result is not needed. * @param type The type name of the mutex, matching the type name passed * to ap_mutex_register(). * @param instance_id A unique string to be used in the lock filename IFF * this mutex type is multi-instance, NULL otherwise. * @param server server_rec of main server * @param pool pool lifetime of the mutex * @param options combination of AP_MUTEX_* constants, or 0 for defaults * (currently none are defined for this function) */ AP_DECLARE(apr_status_t) ap_proc_mutex_create(apr_proc_mutex_t **mutex, const char **name, const char *type, const char *instance_id, server_rec *server, apr_pool_t *pool, apr_int32_t options); AP_CORE_DECLARE(void) ap_dump_mutexes(apr_pool_t *p, server_rec *s, apr_file_t *out); #ifdef __cplusplus } #endif #endif /* UTIL_MUTEX_H */ /** @} */ httpd-2.4.41/include/util_xml.h0000644000000000000500000000247512362524526014704 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file util_xml.h * @brief Apache XML library * * @defgroup APACHE_CORE_XML XML Library * @ingroup APACHE_CORE * @{ */ #ifndef UTIL_XML_H #define UTIL_XML_H #include "apr_xml.h" #include "httpd.h" #ifdef __cplusplus extern "C" { #endif /** * Get XML post data and parse it. * @param r The current request * @param pdoc The XML post data * @return HTTP status code */ AP_DECLARE(int) ap_xml_parse_input(request_rec *r, apr_xml_doc **pdoc); #ifdef __cplusplus } #endif #endif /* UTIL_XML_H */ /** @} */ httpd-2.4.41/include/http_core.h0000644000000000000500000010525013443655667015045 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file http_core.h * @brief CORE HTTP Daemon * * @defgroup APACHE_CORE_HTTPD Core HTTP Daemon * @ingroup APACHE_CORE * @{ */ #ifndef APACHE_HTTP_CORE_H #define APACHE_HTTP_CORE_H #include "apr.h" #include "apr_hash.h" #include "apr_optional.h" #include "util_filter.h" #include "ap_expr.h" #include "apr_tables.h" #include "http_config.h" #if APR_HAVE_STRUCT_RLIMIT #include #include #endif #ifdef __cplusplus extern "C" { #endif /* **************************************************************** * * The most basic server code is encapsulated in a single module * known as the core, which is just *barely* functional enough to * serve documents, though not terribly well. * * Largely for NCSA back-compatibility reasons, the core needs to * make pieces of its config structures available to other modules. * The accessors are declared here, along with the interpretation * of one of them (allow_options). */ /** * @defgroup APACHE_CORE_HTTPD_ACESSORS Acessors * * @brief File/Directory Accessor directives * * @{ */ /** No directives */ #define OPT_NONE 0 /** Indexes directive */ #define OPT_INDEXES 1 /** SSI is enabled without exec= permission */ #define OPT_INCLUDES 2 /** FollowSymLinks directive */ #define OPT_SYM_LINKS 4 /** ExecCGI directive */ #define OPT_EXECCGI 8 /** directive unset */ #define OPT_UNSET 16 /** SSI exec= permission is permitted, iff OPT_INCLUDES is also set */ #define OPT_INC_WITH_EXEC 32 /** SymLinksIfOwnerMatch directive */ #define OPT_SYM_OWNER 64 /** MultiViews directive */ #define OPT_MULTI 128 /** All directives */ #define OPT_ALL (OPT_INDEXES|OPT_INCLUDES|OPT_INC_WITH_EXEC|OPT_SYM_LINKS|OPT_EXECCGI) /** @} */ /** * @defgroup get_remote_host Remote Host Resolution * @ingroup APACHE_CORE_HTTPD * @{ */ /** REMOTE_HOST returns the hostname, or NULL if the hostname * lookup fails. It will force a DNS lookup according to the * HostnameLookups setting. */ #define REMOTE_HOST (0) /** REMOTE_NAME returns the hostname, or the dotted quad if the * hostname lookup fails. It will force a DNS lookup according * to the HostnameLookups setting. */ #define REMOTE_NAME (1) /** REMOTE_NOLOOKUP is like REMOTE_NAME except that a DNS lookup is * never forced. */ #define REMOTE_NOLOOKUP (2) /** REMOTE_DOUBLE_REV will always force a DNS lookup, and also force * a double reverse lookup, regardless of the HostnameLookups * setting. The result is the (double reverse checked) hostname, * or NULL if any of the lookups fail. */ #define REMOTE_DOUBLE_REV (3) /** @} // get_remote_host */ /** all of the requirements must be met */ #define SATISFY_ALL 0 /** any of the requirements must be met */ #define SATISFY_ANY 1 /** There are no applicable satisfy lines */ #define SATISFY_NOSPEC 2 /** Make sure we don't write less than 8000 bytes at any one time. */ #define AP_MIN_BYTES_TO_WRITE 8000 /** default maximum of internal redirects */ # define AP_DEFAULT_MAX_INTERNAL_REDIRECTS 10 /** default maximum subrequest nesting level */ # define AP_DEFAULT_MAX_SUBREQ_DEPTH 10 /** * Retrieve the value of Options for this request * @param r The current request * @return the Options bitmask */ AP_DECLARE(int) ap_allow_options(request_rec *r); /** * Retrieve the value of the AllowOverride for this request * @param r The current request * @return the overrides bitmask */ AP_DECLARE(int) ap_allow_overrides(request_rec *r); /** * Retrieve the document root for this server * @param r The current request * @warning Don't use this! If your request went through a Userdir, or * something like that, it'll screw you. But it's back-compatible... * @return The document root */ AP_DECLARE(const char *) ap_document_root(request_rec *r); /** * Lookup the remote user agent's DNS name or IP address * @ingroup get_remote_hostname * @param req The current request * @param type The type of lookup to perform. One of: *
 *     REMOTE_HOST returns the hostname, or NULL if the hostname
 *                 lookup fails.  It will force a DNS lookup according to the
 *                 HostnameLookups setting.
 *     REMOTE_NAME returns the hostname, or the dotted quad if the
 *                 hostname lookup fails.  It will force a DNS lookup according
 *                 to the HostnameLookups setting.
 *     REMOTE_NOLOOKUP is like REMOTE_NAME except that a DNS lookup is
 *                     never forced.
 *     REMOTE_DOUBLE_REV will always force a DNS lookup, and also force
 *                   a double reverse lookup, regardless of the HostnameLookups
 *                   setting.  The result is the (double reverse checked)
 *                   hostname, or NULL if any of the lookups fail.
 * 
* @param str_is_ip unless NULL is passed, this will be set to non-zero on * output when an IP address string is returned * @return The remote hostname (based on the request useragent_ip) */ AP_DECLARE(const char *) ap_get_useragent_host(request_rec *req, int type, int *str_is_ip); /** * Lookup the remote client's DNS name or IP address * @ingroup get_remote_host * @param conn The current connection * @param dir_config The directory config vector from the request * @param type The type of lookup to perform. One of: *
 *     REMOTE_HOST returns the hostname, or NULL if the hostname
 *                 lookup fails.  It will force a DNS lookup according to the
 *                 HostnameLookups setting.
 *     REMOTE_NAME returns the hostname, or the dotted quad if the
 *                 hostname lookup fails.  It will force a DNS lookup according
 *                 to the HostnameLookups setting.
 *     REMOTE_NOLOOKUP is like REMOTE_NAME except that a DNS lookup is
 *                     never forced.
 *     REMOTE_DOUBLE_REV will always force a DNS lookup, and also force
 *                   a double reverse lookup, regardless of the HostnameLookups
 *                   setting.  The result is the (double reverse checked)
 *                   hostname, or NULL if any of the lookups fail.
 * 
* @param str_is_ip unless NULL is passed, this will be set to non-zero on output when an IP address * string is returned * @return The remote hostname (based on the connection client_ip) */ AP_DECLARE(const char *) ap_get_remote_host(conn_rec *conn, void *dir_config, int type, int *str_is_ip); /** * Retrieve the login name of the remote user. Undef if it could not be * determined * @param r The current request * @return The user logged in to the client machine */ AP_DECLARE(const char *) ap_get_remote_logname(request_rec *r); /* Used for constructing self-referencing URLs, and things like SERVER_PORT, * and SERVER_NAME. */ /** * build a fully qualified URL from the uri and information in the request rec * @param p The pool to allocate the URL from * @param uri The path to the requested file * @param r The current request * @return A fully qualified URL */ AP_DECLARE(char *) ap_construct_url(apr_pool_t *p, const char *uri, request_rec *r); /** * Get the current server name from the request * @param r The current request * @return the server name */ AP_DECLARE(const char *) ap_get_server_name(request_rec *r); /** * Get the current server name from the request for the purposes * of using in a URL. If the server name is an IPv6 literal * address, it will be returned in URL format (e.g., "[fe80::1]"). * @param r The current request * @return the server name */ AP_DECLARE(const char *) ap_get_server_name_for_url(request_rec *r); /** * Get the current server port * @param r The current request * @return The server's port */ AP_DECLARE(apr_port_t) ap_get_server_port(const request_rec *r); /** * Return the limit on bytes in request msg body * @param r The current request * @return the maximum number of bytes in the request msg body */ AP_DECLARE(apr_off_t) ap_get_limit_req_body(const request_rec *r); /** * Return the limit on bytes in XML request msg body * @param r The current request * @return the maximum number of bytes in XML request msg body */ AP_DECLARE(apr_size_t) ap_get_limit_xml_body(const request_rec *r); /** * Install a custom response handler for a given status * @param r The current request * @param status The status for which the custom response should be used * @param string The custom response. This can be a static string, a file * or a URL */ AP_DECLARE(void) ap_custom_response(request_rec *r, int status, const char *string); /** * Check if the current request is beyond the configured max. number of redirects or subrequests * @param r The current request * @return true (is exceeded) or false */ AP_DECLARE(int) ap_is_recursion_limit_exceeded(const request_rec *r); /** * Check for a definition from the server command line * @param name The define to check for * @return 1 if defined, 0 otherwise */ AP_DECLARE(int) ap_exists_config_define(const char *name); /* FIXME! See STATUS about how */ AP_DECLARE_NONSTD(int) ap_core_translate(request_rec *r); /* Authentication stuff. This is one of the places where compatibility * with the old config files *really* hurts; they don't discriminate at * all between different authentication schemes, meaning that we need * to maintain common state for all of them in the core, and make it * available to the other modules through interfaces. */ /** @see require_line */ typedef struct require_line require_line; /** * @brief A structure to keep track of authorization requirements */ struct require_line { /** Where the require line is in the config file. */ apr_int64_t method_mask; /** The complete string from the command line */ char *requirement; }; /** * Return the type of authorization required for this request * @param r The current request * @return The authorization required */ AP_DECLARE(const char *) ap_auth_type(request_rec *r); /** * Return the current Authorization realm * @param r The current request * @return The current authorization realm */ AP_DECLARE(const char *) ap_auth_name(request_rec *r); /** * How the requires lines must be met. * @param r The current request * @return How the requirements must be met. One of: *
 *      SATISFY_ANY    -- any of the requirements must be met.
 *      SATISFY_ALL    -- all of the requirements must be met.
 *      SATISFY_NOSPEC -- There are no applicable satisfy lines
 * 
*/ AP_DECLARE(int) ap_satisfies(request_rec *r); /** * Core is also unlike other modules in being implemented in more than * one file... so, data structures are declared here, even though most of * the code that cares really is in http_core.c. Also, another accessor. */ AP_DECLARE_DATA extern module core_module; /** * Accessor for core_module's specific data. Equivalent to * ap_get_module_config(cv, &core_module) but more efficient. * @param cv The vector in which the modules configuration is stored. * usually r->per_dir_config or s->module_config * @return The module-specific data */ AP_DECLARE(void *) ap_get_core_module_config(const ap_conf_vector_t *cv); /** * Accessor to set core_module's specific data. Equivalent to * ap_set_module_config(cv, &core_module, val) but more efficient. * @param cv The vector in which the modules configuration is stored. * usually r->per_dir_config or s->module_config * @param val The module-specific data to set */ AP_DECLARE(void) ap_set_core_module_config(ap_conf_vector_t *cv, void *val); /** Get the socket from the core network filter. This should be used instead of * accessing the core connection config directly. * @param c The connection record * @return The socket */ AP_DECLARE(apr_socket_t *) ap_get_conn_socket(conn_rec *c); #ifndef AP_DEBUG #define AP_CORE_MODULE_INDEX 0 #define ap_get_core_module_config(v) \ (((void **)(v))[AP_CORE_MODULE_INDEX]) #define ap_set_core_module_config(v, val) \ ((((void **)(v))[AP_CORE_MODULE_INDEX]) = (val)) #else #define AP_CORE_MODULE_INDEX (AP_DEBUG_ASSERT(core_module.module_index == 0), 0) #endif /** * @brief Per-request configuration */ typedef struct { /** bucket brigade used by getline for look-ahead and * ap_get_client_block for holding left-over request body */ struct apr_bucket_brigade *bb; /** an array of per-request working data elements, accessed * by ID using ap_get_request_note() * (Use ap_register_request_note() during initialization * to add elements) */ void **notes; /** Custom response strings registered via ap_custom_response(), * or NULL; check per-dir config if nothing found here */ char **response_code_strings; /* from ap_custom_response(), not from * ErrorDocument */ /** per-request document root of the server. This allows mass vhosting * modules better compatibility with some scripts. Normally the * context_* info should be used instead */ const char *document_root; /* * more fine-grained context information which is set by modules like * mod_alias and mod_userdir */ /** the context root directory on disk for the current resource, * without trailing slash */ const char *context_document_root; /** the URI prefix that corresponds to the context_document_root directory, * without trailing slash */ const char *context_prefix; /** There is a script processor installed on the output filter chain, * so it needs the default_handler to deliver a (script) file into * the chain so it can process it. Normally, default_handler only * serves files on a GET request (assuming the file is actual content), * since other methods are not content-retrieval. This flag overrides * that behavior, stating that the "content" is actually a script and * won't actually be delivered as the response for the non-GET method. */ int deliver_script; /** Should addition of charset= be suppressed for this request? */ int suppress_charset; } core_request_config; /* Standard entries that are guaranteed to be accessible via * ap_get_request_note() for each request (additional entries * can be added with ap_register_request_note()) */ #define AP_NOTE_DIRECTORY_WALK 0 #define AP_NOTE_LOCATION_WALK 1 #define AP_NOTE_FILE_WALK 2 #define AP_NOTE_IF_WALK 3 #define AP_NUM_STD_NOTES 4 /** * Reserve an element in the core_request_config->notes array * for some application-specific data * @return An integer key that can be passed to ap_get_request_note() * during request processing to access this element for the * current request. */ AP_DECLARE(apr_size_t) ap_register_request_note(void); /** * Retrieve a pointer to an element in the core_request_config->notes array * @param r The request * @param note_num A key for the element: either a value obtained from * ap_register_request_note() or one of the predefined AP_NOTE_* * values. * @return NULL if the note_num is invalid, otherwise a pointer to the * requested note element. * @remark At the start of a request, each note element is NULL. The * handle provided by ap_get_request_note() is a pointer-to-pointer * so that the caller can point the element to some app-specific * data structure. The caller should guarantee that any such * structure will last as long as the request itself. */ AP_DECLARE(void **) ap_get_request_note(request_rec *r, apr_size_t note_num); typedef unsigned char allow_options_t; typedef unsigned int overrides_t; /* * Bits of info that go into making an ETag for a file * document. Why a long? Because char historically * proved too short for Options, and int can be different * sizes on different platforms. */ typedef unsigned long etag_components_t; #define ETAG_UNSET 0 #define ETAG_NONE (1 << 0) #define ETAG_MTIME (1 << 1) #define ETAG_INODE (1 << 2) #define ETAG_SIZE (1 << 3) #define ETAG_ALL (ETAG_MTIME | ETAG_INODE | ETAG_SIZE) /* This is the default value used */ #define ETAG_BACKWARD (ETAG_MTIME | ETAG_SIZE) /* Generic ON/OFF/UNSET for unsigned int foo :2 */ #define AP_CORE_CONFIG_OFF (0) #define AP_CORE_CONFIG_ON (1) #define AP_CORE_CONFIG_UNSET (2) /* Generic merge of flag */ #define AP_CORE_MERGE_FLAG(field, to, base, over) to->field = \ over->field != AP_CORE_CONFIG_UNSET \ ? over->field \ : base->field /** * @brief Server Signature Enumeration */ typedef enum { srv_sig_unset, srv_sig_off, srv_sig_on, srv_sig_withmail } server_signature_e; /** * @brief Per-directory configuration */ typedef struct { /** path of the directory/regex/etc. see also d_is_fnmatch/absolute below */ char *d; /** the number of slashes in d */ unsigned d_components; /** If (opts & OPT_UNSET) then no absolute assignment to options has * been made. * invariant: (opts_add & opts_remove) == 0 * Which said another way means that the last relative (options + or -) * assignment made to each bit is recorded in exactly one of opts_add * or opts_remove. */ allow_options_t opts; allow_options_t opts_add; allow_options_t opts_remove; overrides_t override; allow_options_t override_opts; /* Used to be the custom response config. No longer used. */ char **response_code_strings; /* from ErrorDocument, not from * ap_custom_response() */ /* Hostname resolution etc */ #define HOSTNAME_LOOKUP_OFF 0 #define HOSTNAME_LOOKUP_ON 1 #define HOSTNAME_LOOKUP_DOUBLE 2 #define HOSTNAME_LOOKUP_UNSET 3 unsigned int hostname_lookups : 4; unsigned int content_md5 : 2; /* calculate Content-MD5? */ #define USE_CANONICAL_NAME_OFF (0) #define USE_CANONICAL_NAME_ON (1) #define USE_CANONICAL_NAME_DNS (2) #define USE_CANONICAL_NAME_UNSET (3) unsigned use_canonical_name : 2; /* since is_fnmatch(conf->d) was being called so frequently in * directory_walk() and its relatives, this field was created and * is set to the result of that call. */ unsigned d_is_fnmatch : 1; /* should we force a charset on any outgoing parameterless content-type? * if so, which charset? */ #define ADD_DEFAULT_CHARSET_OFF (0) #define ADD_DEFAULT_CHARSET_ON (1) #define ADD_DEFAULT_CHARSET_UNSET (2) unsigned add_default_charset : 2; const char *add_default_charset_name; /* System Resource Control */ #ifdef RLIMIT_CPU struct rlimit *limit_cpu; #endif #if defined (RLIMIT_DATA) || defined (RLIMIT_VMEM) || defined(RLIMIT_AS) struct rlimit *limit_mem; #endif #ifdef RLIMIT_NPROC struct rlimit *limit_nproc; #endif apr_off_t limit_req_body; /* limit on bytes in request msg body */ long limit_xml_body; /* limit on bytes in XML request msg body */ /* logging options */ server_signature_e server_signature; /* Access control */ apr_array_header_t *sec_file; apr_array_header_t *sec_if; ap_regex_t *r; const char *mime_type; /* forced with ForceType */ const char *handler; /* forced by something other than SetHandler */ const char *output_filters; /* forced with SetOutputFilters */ const char *input_filters; /* forced with SetInputFilters */ int accept_path_info; /* forced with AcceptPathInfo */ /* * What attributes/data should be included in ETag generation? */ etag_components_t etag_bits; etag_components_t etag_add; etag_components_t etag_remove; /* * Run-time performance tuning */ #define ENABLE_MMAP_OFF (0) #define ENABLE_MMAP_ON (1) #define ENABLE_MMAP_UNSET (2) unsigned int enable_mmap : 2; /* whether files in this dir can be mmap'ed */ #define ENABLE_SENDFILE_OFF (0) #define ENABLE_SENDFILE_ON (1) #define ENABLE_SENDFILE_UNSET (2) unsigned int enable_sendfile : 2; /* files in this dir can be sendfile'ed */ #define USE_CANONICAL_PHYS_PORT_OFF (0) #define USE_CANONICAL_PHYS_PORT_ON (1) #define USE_CANONICAL_PHYS_PORT_UNSET (2) unsigned int use_canonical_phys_port : 2; unsigned int allow_encoded_slashes : 1; /* URLs may contain %2f w/o being * pitched indiscriminately */ unsigned int decode_encoded_slashes : 1; /* whether to decode encoded slashes in URLs */ #define AP_CONDITION_IF 1 #define AP_CONDITION_ELSE 2 #define AP_CONDITION_ELSEIF (AP_CONDITION_ELSE|AP_CONDITION_IF) unsigned int condition_ifelse : 2; /* is this an , , or */ ap_expr_info_t *condition; /* Conditionally merge sections */ /** per-dir log config */ struct ap_logconf *log; /** Table of directives allowed per AllowOverrideList */ apr_table_t *override_list; #define AP_MAXRANGES_UNSET -1 #define AP_MAXRANGES_DEFAULT -2 #define AP_MAXRANGES_UNLIMITED -3 #define AP_MAXRANGES_NORANGES 0 /** Number of Ranges before returning HTTP_OK. **/ int max_ranges; /** Max number of Range overlaps (merges) allowed **/ int max_overlaps; /** Max number of Range reversals (eg: 200-300, 100-125) allowed **/ int max_reversals; /** Named back references */ apr_array_header_t *refs; /** Custom response config with expression support. The hash table * contains compiled expressions keyed against the custom response * code. */ apr_hash_t *response_code_exprs; #define AP_CGI_PASS_AUTH_OFF (0) #define AP_CGI_PASS_AUTH_ON (1) #define AP_CGI_PASS_AUTH_UNSET (2) /** CGIPassAuth: Whether HTTP authorization headers will be passed to * scripts as CGI variables; affects all modules calling * ap_add_common_vars(), as well as any others using this field as * advice */ unsigned int cgi_pass_auth : 2; unsigned int qualify_redirect_url :2; ap_expr_info_t *expr_handler; /* forced with SetHandler */ /** Table of rules for building CGI variables, NULL if none configured */ apr_hash_t *cgi_var_rules; } core_dir_config; /* macro to implement off by default behaviour */ #define AP_SENDFILE_ENABLED(x) \ ((x) == ENABLE_SENDFILE_ON ? APR_SENDFILE_ENABLED : 0) /* Per-server core configuration */ typedef struct { char *gprof_dir; /* Name translations --- we want the core to be able to do *something* * so it's at least a minimally functional web server on its own (and * can be tested that way). But let's keep it to the bare minimum: */ const char *ap_document_root; /* Access control */ char *access_name; apr_array_header_t *sec_dir; apr_array_header_t *sec_url; /* recursion backstopper */ int redirect_limit; /* maximum number of internal redirects */ int subreq_limit; /* maximum nesting level of subrequests */ const char *protocol; apr_table_t *accf_map; /* array of ap_errorlog_format_item for error log format string */ apr_array_header_t *error_log_format; /* * two arrays of arrays of ap_errorlog_format_item for additional information * logged to the error log once per connection/request */ apr_array_header_t *error_log_conn; apr_array_header_t *error_log_req; /* TRACE control */ #define AP_TRACE_UNSET -1 #define AP_TRACE_DISABLE 0 #define AP_TRACE_ENABLE 1 #define AP_TRACE_EXTENDED 2 int trace_enable; #define AP_MERGE_TRAILERS_UNSET 0 #define AP_MERGE_TRAILERS_ENABLE 1 #define AP_MERGE_TRAILERS_DISABLE 2 int merge_trailers; apr_array_header_t *protocols; int protocols_honor_order; #define AP_HTTP09_UNSET 0 #define AP_HTTP09_ENABLE 1 #define AP_HTTP09_DISABLE 2 char http09_enable; #define AP_HTTP_CONFORMANCE_UNSET 0 #define AP_HTTP_CONFORMANCE_UNSAFE 1 #define AP_HTTP_CONFORMANCE_STRICT 2 char http_conformance; #define AP_HTTP_METHODS_UNSET 0 #define AP_HTTP_METHODS_LENIENT 1 #define AP_HTTP_METHODS_REGISTERED 2 char http_methods; unsigned int merge_slashes; } core_server_config; /* for AddOutputFiltersByType in core.c */ void ap_add_output_filters_by_type(request_rec *r); /* for http_config.c */ void ap_core_reorder_directories(apr_pool_t *, server_rec *); /* for mod_perl */ AP_CORE_DECLARE(void) ap_add_per_dir_conf(server_rec *s, void *dir_config); AP_CORE_DECLARE(void) ap_add_per_url_conf(server_rec *s, void *url_config); AP_CORE_DECLARE(void) ap_add_file_conf(apr_pool_t *p, core_dir_config *conf, void *url_config); AP_CORE_DECLARE(const char *) ap_add_if_conf(apr_pool_t *p, core_dir_config *conf, void *url_config); AP_CORE_DECLARE_NONSTD(const char *) ap_limit_section(cmd_parms *cmd, void *dummy, const char *arg); /* Core filters; not exported. */ apr_status_t ap_core_input_filter(ap_filter_t *f, apr_bucket_brigade *b, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes); apr_status_t ap_core_output_filter(ap_filter_t *f, apr_bucket_brigade *b); AP_DECLARE(const char*) ap_get_server_protocol(server_rec* s); AP_DECLARE(void) ap_set_server_protocol(server_rec* s, const char* proto); typedef struct core_output_filter_ctx core_output_filter_ctx_t; typedef struct core_filter_ctx core_ctx_t; typedef struct core_net_rec { /** Connection to the client */ apr_socket_t *client_socket; /** connection record */ conn_rec *c; core_output_filter_ctx_t *out_ctx; core_ctx_t *in_ctx; } core_net_rec; /** * Insert the network bucket into the core input filter's input brigade. * This hook is intended for MPMs or protocol modules that need to do special * socket setup. * @param c The connection * @param bb The brigade to insert the bucket into * @param socket The socket to put into a bucket * @return AP_DECLINED if the current function does not handle this connection, * APR_SUCCESS or an error otherwise. */ AP_DECLARE_HOOK(apr_status_t, insert_network_bucket, (conn_rec *c, apr_bucket_brigade *bb, apr_socket_t *socket)) /* ---------------------------------------------------------------------- * * Runtime status/management */ typedef enum { ap_mgmt_type_string, ap_mgmt_type_long, ap_mgmt_type_hash } ap_mgmt_type_e; typedef union { const char *s_value; long i_value; apr_hash_t *h_value; } ap_mgmt_value; typedef struct { const char *description; const char *name; ap_mgmt_type_e vtype; ap_mgmt_value v; } ap_mgmt_item_t; /* Handles for core filters */ AP_DECLARE_DATA extern ap_filter_rec_t *ap_subreq_core_filter_handle; AP_DECLARE_DATA extern ap_filter_rec_t *ap_core_output_filter_handle; AP_DECLARE_DATA extern ap_filter_rec_t *ap_content_length_filter_handle; AP_DECLARE_DATA extern ap_filter_rec_t *ap_core_input_filter_handle; /** * This hook provdes a way for modules to provide metrics/statistics about * their operational status. * * @param p A pool to use to create entries in the hash table * @param val The name of the parameter(s) that is wanted. This is * tree-structured would be in the form ('*' is all the tree, * 'module.*' all of the module , 'module.foo.*', or * 'module.foo.bar' ) * @param ht The hash table to store the results. Keys are item names, and * the values point to ap_mgmt_item_t structures. * @ingroup hooks */ AP_DECLARE_HOOK(int, get_mgmt_items, (apr_pool_t *p, const char * val, apr_hash_t *ht)) /* ---------------------------------------------------------------------- */ /* ---------------------------------------------------------------------- * * I/O logging with mod_logio */ APR_DECLARE_OPTIONAL_FN(void, ap_logio_add_bytes_out, (conn_rec *c, apr_off_t bytes)); APR_DECLARE_OPTIONAL_FN(void, ap_logio_add_bytes_in, (conn_rec *c, apr_off_t bytes)); APR_DECLARE_OPTIONAL_FN(apr_off_t, ap_logio_get_last_bytes, (conn_rec *c)); /* ---------------------------------------------------------------------- * * Error log formats */ /** * The info structure passed to callback functions of errorlog handlers. * Not all information is available in all contexts. In particular, all * pointers may be NULL. */ typedef struct ap_errorlog_info { /** current server_rec. * Should be preferred over c->base_server and r->server */ const server_rec *s; /** current conn_rec. * Should be preferred over r->connection */ const conn_rec *c; /** current request_rec. */ const request_rec *r; /** r->main if r is a subrequest, otherwise equal to r */ const request_rec *rmain; /** pool passed to ap_log_perror, NULL otherwise */ apr_pool_t *pool; /** name of source file where the log message was produced, NULL if N/A. */ const char *file; /** line number in the source file, 0 if N/A */ int line; /** module index of module that produced the log message, APLOG_NO_MODULE if N/A. */ int module_index; /** log level of error message (flags like APLOG_STARTUP have been removed), -1 if N/A */ int level; /** apr error status related to the log message, 0 if no error */ apr_status_t status; /** 1 if logging to syslog, 0 otherwise */ int using_syslog; /** 1 if APLOG_STARTUP was set for the log message, 0 otherwise */ int startup; /** message format */ const char *format; } ap_errorlog_info; /** * callback function prototype for a external errorlog handler * @note To avoid unbounded memory usage, these functions must not allocate * memory from the server, connection, or request pools. If an errorlog * handler absolutely needs a pool to pass to other functions, it must create * and destroy a sub-pool. */ typedef int ap_errorlog_handler_fn_t(const ap_errorlog_info *info, const char *arg, char *buf, int buflen); /** * Register external errorlog handler * @param p config pool to use * @param tag the new format specifier (i.e. the letter after the %) * @param handler the handler function * @param flags flags (reserved, set to 0) */ AP_DECLARE(void) ap_register_errorlog_handler(apr_pool_t *p, char *tag, ap_errorlog_handler_fn_t *handler, int flags); typedef struct ap_errorlog_handler { ap_errorlog_handler_fn_t *func; int flags; /* for future extensions */ } ap_errorlog_handler; /** item starts a new field */ #define AP_ERRORLOG_FLAG_FIELD_SEP 1 /** item is the actual error message */ #define AP_ERRORLOG_FLAG_MESSAGE 2 /** skip whole line if item is zero-length */ #define AP_ERRORLOG_FLAG_REQUIRED 4 /** log zero-length item as '-' */ #define AP_ERRORLOG_FLAG_NULL_AS_HYPHEN 8 typedef struct { /** ap_errorlog_handler function */ ap_errorlog_handler_fn_t *func; /** argument passed to item in {} */ const char *arg; /** a combination of the AP_ERRORLOG_* flags */ unsigned int flags; /** only log item if the message's log level is higher than this */ unsigned int min_loglevel; } ap_errorlog_format_item; /** * hook method to log error messages * @ingroup hooks * @param info pointer to ap_errorlog_info struct which contains all * the details * @param errstr the (unformatted) message to log * @warning Allocating from the usual pools (pool, info->c->pool, info->p->pool) * must be avoided because it can cause memory leaks. * Use a subpool if necessary. */ AP_DECLARE_HOOK(void, error_log, (const ap_errorlog_info *info, const char *errstr)) AP_CORE_DECLARE(void) ap_register_log_hooks(apr_pool_t *p); AP_CORE_DECLARE(void) ap_register_config_hooks(apr_pool_t *p); /* ---------------------------------------------------------------------- * * ident lookups with mod_ident */ APR_DECLARE_OPTIONAL_FN(const char *, ap_ident_lookup, (request_rec *r)); /* ---------------------------------------------------------------------- * * authorization values with mod_authz_core */ APR_DECLARE_OPTIONAL_FN(int, authz_some_auth_required, (request_rec *r)); APR_DECLARE_OPTIONAL_FN(const char *, authn_ap_auth_type, (request_rec *r)); APR_DECLARE_OPTIONAL_FN(const char *, authn_ap_auth_name, (request_rec *r)); /* ---------------------------------------------------------------------- * * authorization values with mod_access_compat */ APR_DECLARE_OPTIONAL_FN(int, access_compat_ap_satisfies, (request_rec *r)); /* ---------------------------------------------------------------------- */ /** Query the server for some state information * @param query_code Which information is requested * @return the requested state information */ AP_DECLARE(int) ap_state_query(int query_code); /* * possible values for query_code in ap_state_query() */ /** current status of the server */ #define AP_SQ_MAIN_STATE 0 /** are we going to serve requests or are we just testing/dumping config */ #define AP_SQ_RUN_MODE 1 /** generation of the top-level apache parent */ #define AP_SQ_CONFIG_GEN 2 /* * return values for ap_state_query() */ /** return value for unknown query_code */ #define AP_SQ_NOT_SUPPORTED -1 /* values returned for AP_SQ_MAIN_STATE */ /** before the config preflight */ #define AP_SQ_MS_INITIAL_STARTUP 1 /** initial configuration run for setting up log config, etc. */ #define AP_SQ_MS_CREATE_PRE_CONFIG 2 /** tearing down configuration */ #define AP_SQ_MS_DESTROY_CONFIG 3 /** normal configuration run */ #define AP_SQ_MS_CREATE_CONFIG 4 /** running the MPM */ #define AP_SQ_MS_RUN_MPM 5 /** cleaning up for exit */ #define AP_SQ_MS_EXITING 6 /* values returned for AP_SQ_RUN_MODE */ /** command line not yet parsed */ #define AP_SQ_RM_UNKNOWN 1 /** normal operation (server requests or signal server) */ #define AP_SQ_RM_NORMAL 2 /** config test only */ #define AP_SQ_RM_CONFIG_TEST 3 /** only dump some parts of the config */ #define AP_SQ_RM_CONFIG_DUMP 4 #ifdef __cplusplus } #endif #endif /* !APACHE_HTTP_CORE_H */ /** @} */ httpd-2.4.41/include/util_filter.h0000644000000000000500000006353312132772247015373 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file util_filter.h * @brief Apache filter library */ #ifndef AP_FILTER_H #define AP_FILTER_H #include "apr.h" #include "apr_buckets.h" #include "httpd.h" #if APR_HAVE_STDARG_H #include #endif #ifdef __cplusplus extern "C" { #endif /** * @brief input filtering modes */ typedef enum { /** The filter should return at most readbytes data. */ AP_MODE_READBYTES, /** The filter should return at most one line of CRLF data. * (If a potential line is too long or no CRLF is found, the * filter may return partial data). */ AP_MODE_GETLINE, /** The filter should implicitly eat any CRLF pairs that it sees. */ AP_MODE_EATCRLF, /** The filter read should be treated as speculative and any returned * data should be stored for later retrieval in another mode. */ AP_MODE_SPECULATIVE, /** The filter read should be exhaustive and read until it can not * read any more. * Use this mode with extreme caution. */ AP_MODE_EXHAUSTIVE, /** The filter should initialize the connection if needed, * NNTP or FTP over SSL for example. */ AP_MODE_INIT } ap_input_mode_t; /** * @defgroup APACHE_CORE_FILTER Filter Chain * @ingroup APACHE_CORE * * Filters operate using a "chaining" mechanism. The filters are chained * together into a sequence. When output is generated, it is passed through * each of the filters on this chain, until it reaches the end (or "bottom") * and is placed onto the network. * * The top of the chain, the code generating the output, is typically called * a "content generator." The content generator's output is fed into the * filter chain using the standard Apache output mechanisms: ap_rputs(), * ap_rprintf(), ap_rwrite(), etc. * * Each filter is defined by a callback. This callback takes the output from * the previous filter (or the content generator if there is no previous * filter), operates on it, and passes the result to the next filter in the * chain. This pass-off is performed using the ap_fc_* functions, such as * ap_fc_puts(), ap_fc_printf(), ap_fc_write(), etc. * * When content generation is complete, the system will pass an "end of * stream" marker into the filter chain. The filters will use this to flush * out any internal state and to detect incomplete syntax (for example, an * unterminated SSI directive). * * @{ */ /* forward declare the filter type */ typedef struct ap_filter_t ap_filter_t; /** * @name Filter callbacks * * This function type is used for filter callbacks. It will be passed a * pointer to "this" filter, and a "bucket brigade" containing the content * to be filtered. * * In filter->ctx, the callback will find its context. This context is * provided here, so that a filter may be installed multiple times, each * receiving its own per-install context pointer. * * Callbacks are associated with a filter definition, which is specified * by name. See ap_register_input_filter() and ap_register_output_filter() * for setting the association between a name for a filter and its * associated callback (and other information). * * If the initialization function argument passed to the registration * functions is non-NULL, it will be called iff the filter is in the input * or output filter chains and before any data is generated to allow the * filter to prepare for processing. * * The bucket brigade always belongs to the caller, but the filter * is free to use the buckets within it as it sees fit. Normally, * the brigade will be returned empty. Buckets *may not* be retained * between successive calls to the filter unless they have been * "set aside" with a call apr_bucket_setaside. Typically this will * be done with ap_save_brigade(). Buckets removed from the brigade * become the responsibility of the filter, which must arrange for * them to be deleted, either by doing so directly or by inserting * them in a brigade which will subsequently be destroyed. * * For the input and output filters, the return value of a filter should be * an APR status value. For the init function, the return value should * be an HTTP error code or OK if it was successful. * * @ingroup filter * @{ */ typedef apr_status_t (*ap_out_filter_func)(ap_filter_t *f, apr_bucket_brigade *b); typedef apr_status_t (*ap_in_filter_func)(ap_filter_t *f, apr_bucket_brigade *b, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes); typedef int (*ap_init_filter_func)(ap_filter_t *f); typedef union ap_filter_func { ap_out_filter_func out_func; ap_in_filter_func in_func; } ap_filter_func; /** @} */ /** * Filters have different types/classifications. These are used to group * and sort the filters to properly sequence their operation. * * The types have a particular sort order, which allows us to insert them * into the filter chain in a determistic order. Within a particular grouping, * the ordering is equivalent to the order of calls to ap_add_*_filter(). */ typedef enum { /** These filters are used to alter the content that is passed through * them. Examples are SSI or PHP. */ AP_FTYPE_RESOURCE = 10, /** These filters are used to alter the content as a whole, but after all * AP_FTYPE_RESOURCE filters are executed. These filters should not * change the content-type. An example is deflate. */ AP_FTYPE_CONTENT_SET = 20, /** These filters are used to handle the protocol between server and * client. Examples are HTTP and POP. */ AP_FTYPE_PROTOCOL = 30, /** These filters implement transport encodings (e.g., chunking). */ AP_FTYPE_TRANSCODE = 40, /** These filters will alter the content, but in ways that are * more strongly associated with the connection. Examples are * splitting an HTTP connection into multiple requests and * buffering HTTP responses across multiple requests. * * It is important to note that these types of filters are not * allowed in a sub-request. A sub-request's output can certainly * be filtered by ::AP_FTYPE_RESOURCE filters, but all of the "final * processing" is determined by the main request. */ AP_FTYPE_CONNECTION = 50, /** These filters don't alter the content. They are responsible for * sending/receiving data to/from the client. */ AP_FTYPE_NETWORK = 60 } ap_filter_type; /** * This is the request-time context structure for an installed filter (in * the output filter chain). It provides the callback to use for filtering, * the request this filter is associated with (which is important when * an output chain also includes sub-request filters), the context for this * installed filter, and the filter ordering/chaining fields. * * Filter callbacks are free to use ->ctx as they please, to store context * during the filter process. Generally, this is superior over associating * the state directly with the request. A callback should not change any of * the other fields. */ typedef struct ap_filter_rec_t ap_filter_rec_t; typedef struct ap_filter_provider_t ap_filter_provider_t; /** * @brief This structure is used for recording information about the * registered filters. It associates a name with the filter's callback * and filter type. * * At the moment, these are simply linked in a chain, so a ->next pointer * is available. * * It is used for any filter that can be inserted in the filter chain. * This may be either a httpd-2.0 filter or a mod_filter harness. * In the latter case it contains dispatch, provider and protocol information. * In the former case, the new fields (from dispatch) are ignored. */ struct ap_filter_rec_t { /** The registered name for this filter */ const char *name; /** The function to call when this filter is invoked. */ ap_filter_func filter_func; /** The function to call directly before the handlers are invoked * for a request. The init function is called once directly * before running the handlers for a request or subrequest. The * init function is never called for a connection filter (with * ftype >= AP_FTYPE_CONNECTION). Any use of this function for * filters for protocols other than HTTP is specified by the * module supported that protocol. */ ap_init_filter_func filter_init_func; /** The next filter_rec in the list */ struct ap_filter_rec_t *next; /** Providers for this filter */ ap_filter_provider_t *providers; /** The type of filter, either AP_FTYPE_CONTENT or AP_FTYPE_CONNECTION. * An AP_FTYPE_CONTENT filter modifies the data based on information * found in the content. An AP_FTYPE_CONNECTION filter modifies the * data based on the type of connection. */ ap_filter_type ftype; /** Trace level for this filter */ int debug; /** Protocol flags for this filter */ unsigned int proto_flags; }; /** * @brief The representation of a filter chain. * * Each request has a list * of these structures which are called in turn to filter the data. Sub * requests get an exact copy of the main requests filter chain. */ struct ap_filter_t { /** The internal representation of this filter. This includes * the filter's name, type, and the actual function pointer. */ ap_filter_rec_t *frec; /** A place to store any data associated with the current filter */ void *ctx; /** The next filter in the chain */ ap_filter_t *next; /** The request_rec associated with the current filter. If a sub-request * adds filters, then the sub-request is the request associated with the * filter. */ request_rec *r; /** The conn_rec associated with the current filter. This is analogous * to the request_rec, except that it is used for connection filters. */ conn_rec *c; }; /** * Get the current bucket brigade from the next filter on the filter * stack. The filter returns an apr_status_t value. If the bottom-most * filter doesn't read from the network, then ::AP_NOBODY_READ is returned. * The bucket brigade will be empty when there is nothing left to get. * @param filter The next filter in the chain * @param bucket The current bucket brigade. The original brigade passed * to ap_get_brigade() must be empty. * @param mode The way in which the data should be read * @param block How the operations should be performed * ::APR_BLOCK_READ, ::APR_NONBLOCK_READ * @param readbytes How many bytes to read from the next filter. */ AP_DECLARE(apr_status_t) ap_get_brigade(ap_filter_t *filter, apr_bucket_brigade *bucket, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes); /** * Pass the current bucket brigade down to the next filter on the filter * stack. The filter returns an apr_status_t value. If the bottom-most * filter doesn't write to the network, then ::AP_NOBODY_WROTE is returned. * @param filter The next filter in the chain * @param bucket The current bucket brigade * * @remark Ownership of the brigade is retained by the caller. On return, * the contents of the brigade are UNDEFINED, and the caller must * either call apr_brigade_cleanup or apr_brigade_destroy on * the brigade. */ AP_DECLARE(apr_status_t) ap_pass_brigade(ap_filter_t *filter, apr_bucket_brigade *bucket); /** * Pass the current bucket brigade down to the next filter on the filter * stack checking for filter errors. The filter returns an apr_status_t value. * Returns ::OK if the brigade is successfully passed * ::AP_FILTER_ERROR on a filter error * ::HTTP_INTERNAL_SERVER_ERROR on all other errors * @param r The request rec * @param bucket The current bucket brigade * @param fmt The format string. If NULL defaults to "ap_pass_brigade returned" * @param ... The arguments to use to fill out the format string * @remark Ownership of the brigade is retained by the caller. On return, * the contents of the brigade are UNDEFINED, and the caller must * either call apr_brigade_cleanup or apr_brigade_destroy on * the brigade. */ AP_DECLARE(apr_status_t) ap_pass_brigade_fchk(request_rec *r, apr_bucket_brigade *bucket, const char *fmt, ...) __attribute__((format(printf,3,4))); /** * This function is used to register an input filter with the system. * After this registration is performed, then a filter may be added * into the filter chain by using ap_add_input_filter() and simply * specifying the name. * * @param name The name to attach to the filter function * @param filter_func The filter function to name * @param filter_init The function to call before the filter handlers are invoked * @param ftype The type of filter function, either ::AP_FTYPE_CONTENT_SET or * ::AP_FTYPE_CONNECTION * @see add_input_filter() */ AP_DECLARE(ap_filter_rec_t *) ap_register_input_filter(const char *name, ap_in_filter_func filter_func, ap_init_filter_func filter_init, ap_filter_type ftype); /** @deprecated @see ap_register_output_filter_protocol */ AP_DECLARE(ap_filter_rec_t *) ap_register_output_filter(const char *name, ap_out_filter_func filter_func, ap_init_filter_func filter_init, ap_filter_type ftype); /* For httpd-?.? I suggest replacing the above with #define ap_register_output_filter(name,ffunc,init,ftype) \ ap_register_output_filter_protocol(name,ffunc,init,ftype,0) */ /** * This function is used to register an output filter with the system. * After this registration is performed, then a filter may be added * directly to the filter chain by using ap_add_output_filter() and * simply specifying the name, or as a provider under mod_filter. * * @param name The name to attach to the filter function * @param filter_func The filter function to name * @param filter_init The function to call before the filter handlers * are invoked * @param ftype The type of filter function, either ::AP_FTYPE_CONTENT_SET or * ::AP_FTYPE_CONNECTION * @param proto_flags Protocol flags: logical OR of AP_FILTER_PROTO_* bits * @return the filter rec * @see ap_add_output_filter() */ AP_DECLARE(ap_filter_rec_t *) ap_register_output_filter_protocol( const char *name, ap_out_filter_func filter_func, ap_init_filter_func filter_init, ap_filter_type ftype, unsigned int proto_flags); /** * Adds a named filter into the filter chain on the specified request record. * The filter will be installed with the specified context pointer. * * Filters added in this way will always be placed at the end of the filters * that have the same type (thus, the filters have the same order as the * calls to ap_add_filter). If the current filter chain contains filters * from another request, then this filter will be added before those other * filters. * * To re-iterate that last comment. This function is building a FIFO * list of filters. Take note of that when adding your filter to the chain. * * @param name The name of the filter to add * @param ctx Context data to provide to the filter * @param r The request to add this filter for (or NULL if it isn't associated with a request) * @param c The connection to add the fillter for */ AP_DECLARE(ap_filter_t *) ap_add_input_filter(const char *name, void *ctx, request_rec *r, conn_rec *c); /** * Variant of ap_add_input_filter() that accepts a registered filter handle * (as returned by ap_register_input_filter()) rather than a filter name * * @param f The filter handle to add * @param ctx Context data to provide to the filter * @param r The request to add this filter for (or NULL if it isn't associated with a request) * @param c The connection to add the fillter for */ AP_DECLARE(ap_filter_t *) ap_add_input_filter_handle(ap_filter_rec_t *f, void *ctx, request_rec *r, conn_rec *c); /** * Returns the filter handle for use with ap_add_input_filter_handle. * * @param name The filter name to look up */ AP_DECLARE(ap_filter_rec_t *) ap_get_input_filter_handle(const char *name); /** * Add a filter to the current request. Filters are added in a FIFO manner. * The first filter added will be the first filter called. * @param name The name of the filter to add * @param ctx Context data to set in the filter * @param r The request to add this filter for (or NULL if it isn't associated with a request) * @param c The connection to add this filter for * @note If adding a connection-level output filter (i.e. where the type * is >= AP_FTYPE_CONNECTION) during processing of a request, the request * object r must be passed in to ensure the filter chains are modified * correctly. f->r will still be initialized as NULL in the new filter. */ AP_DECLARE(ap_filter_t *) ap_add_output_filter(const char *name, void *ctx, request_rec *r, conn_rec *c); /** * Variant of ap_add_output_filter() that accepts a registered filter handle * (as returned by ap_register_output_filter()) rather than a filter name * * @param f The filter handle to add * @param ctx Context data to set in the filter * @param r The request to add this filter for (or NULL if it isn't associated with a request) * @param c The connection to add the filter for * @note If adding a connection-level output filter (i.e. where the type * is >= AP_FTYPE_CONNECTION) during processing of a request, the request * object r must be passed in to ensure the filter chains are modified * correctly. f->r will still be initialized as NULL in the new filter. */ AP_DECLARE(ap_filter_t *) ap_add_output_filter_handle(ap_filter_rec_t *f, void *ctx, request_rec *r, conn_rec *c); /** * Returns the filter handle for use with ap_add_output_filter_handle. * * @param name The filter name to look up */ AP_DECLARE(ap_filter_rec_t *) ap_get_output_filter_handle(const char *name); /** * Remove an input filter from either the request or connection stack * it is associated with. * @param f The filter to remove */ AP_DECLARE(void) ap_remove_input_filter(ap_filter_t *f); /** * Remove an output filter from either the request or connection stack * it is associated with. * @param f The filter to remove */ AP_DECLARE(void) ap_remove_output_filter(ap_filter_t *f); /** * Remove an input filter from either the request or connection stack * it is associated with. * @param next The filter stack to search * @param handle The filter handle (name) to remove * @return APR_SUCCESS on removal or error */ AP_DECLARE(apr_status_t) ap_remove_input_filter_byhandle(ap_filter_t *next, const char *handle); /** * Remove an output filter from either the request or connection stack * it is associated with. * @param next The filter stack to search * @param handle The filter handle (name) to remove * @return APR_SUCCESS on removal or error */ AP_DECLARE(apr_status_t) ap_remove_output_filter_byhandle(ap_filter_t *next, const char *handle); /* The next two filters are for abstraction purposes only. They could be * done away with, but that would require that we break modules if we ever * want to change our filter registration method. The basic idea, is that * all filters have a place to store data, the ctx pointer. These functions * fill out that pointer with a bucket brigade, and retrieve that data on * the next call. The nice thing about these functions, is that they * automatically concatenate the bucket brigades together for you. This means * that if you have already stored a brigade in the filters ctx pointer, then * when you add more it will be tacked onto the end of that brigade. When * you retrieve data, if you pass in a bucket brigade to the get function, * it will append the current brigade onto the one that you are retrieving. */ /** * prepare a bucket brigade to be setaside. If a different brigade was * set-aside earlier, then the two brigades are concatenated together. * @param f The current filter * @param save_to The brigade that was previously set-aside. Regardless, the * new bucket brigade is returned in this location. * @param b The bucket brigade to save aside. This brigade is always empty * on return * @param p Ensure that all data in the brigade lives as long as this pool */ AP_DECLARE(apr_status_t) ap_save_brigade(ap_filter_t *f, apr_bucket_brigade **save_to, apr_bucket_brigade **b, apr_pool_t *p); /** * Flush function for apr_brigade_* calls. This calls ap_pass_brigade * to flush the brigade if the brigade buffer overflows. * @param bb The brigade to flush * @param ctx The filter to pass the brigade to * @note this function has nothing to do with FLUSH buckets. It is simply * a way to flush content out of a brigade and down a filter stack. */ AP_DECLARE_NONSTD(apr_status_t) ap_filter_flush(apr_bucket_brigade *bb, void *ctx); /** * Flush the current brigade down the filter stack. * @param f The filter we are passing to * @param bb The brigade to flush */ AP_DECLARE(apr_status_t) ap_fflush(ap_filter_t *f, apr_bucket_brigade *bb); /** * Write a buffer for the current filter, buffering if possible. * @param f the filter we are writing to * @param bb The brigade to buffer into * @param data The data to write * @param nbyte The number of bytes in the data */ #define ap_fwrite(f, bb, data, nbyte) \ apr_brigade_write(bb, ap_filter_flush, f, data, nbyte) /** * Write a buffer for the current filter, buffering if possible. * @param f the filter we are writing to * @param bb The brigade to buffer into * @param str The string to write */ #define ap_fputs(f, bb, str) \ apr_brigade_write(bb, ap_filter_flush, f, str, strlen(str)) /** * Write a character for the current filter, buffering if possible. * @param f the filter we are writing to * @param bb The brigade to buffer into * @param c The character to write */ #define ap_fputc(f, bb, c) \ apr_brigade_putc(bb, ap_filter_flush, f, c) /** * Write an unspecified number of strings to the current filter * @param f the filter we are writing to * @param bb The brigade to buffer into * @param ... The strings to write */ AP_DECLARE_NONSTD(apr_status_t) ap_fputstrs(ap_filter_t *f, apr_bucket_brigade *bb, ...) AP_FN_ATTR_SENTINEL; /** * Output data to the filter in printf format * @param f the filter we are writing to * @param bb The brigade to buffer into * @param fmt The format string * @param ... The arguments to use to fill out the format string */ AP_DECLARE_NONSTD(apr_status_t) ap_fprintf(ap_filter_t *f, apr_bucket_brigade *bb, const char *fmt, ...) __attribute__((format(printf,3,4))); /** * set protocol requirements for an output content filter * (only works with AP_FTYPE_RESOURCE and AP_FTYPE_CONTENT_SET) * @param f the filter in question * @param proto_flags Logical OR of AP_FILTER_PROTO_* bits */ AP_DECLARE(void) ap_filter_protocol(ap_filter_t* f, unsigned int proto_flags); /** Filter changes contents (so invalidating checksums/etc) */ #define AP_FILTER_PROTO_CHANGE 0x1 /** Filter changes length of contents (so invalidating content-length/etc) */ #define AP_FILTER_PROTO_CHANGE_LENGTH 0x2 /** Filter requires complete input and can't work on byteranges */ #define AP_FILTER_PROTO_NO_BYTERANGE 0x4 /** Filter should not run in a proxy */ #define AP_FILTER_PROTO_NO_PROXY 0x8 /** Filter makes output non-cacheable */ #define AP_FILTER_PROTO_NO_CACHE 0x10 /** Filter is incompatible with "Cache-Control: no-transform" */ #define AP_FILTER_PROTO_TRANSFORM 0x20 /** * @} */ #ifdef __cplusplus } #endif #endif /* !AP_FILTER_H */ httpd-2.4.41/include/http_main.h0000644000000000000500000000625511733715415015032 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file http_main.h * @brief Command line options * * @defgroup APACHE_CORE_MAIN Command line options * @ingroup APACHE_CORE * @{ */ #ifndef APACHE_HTTP_MAIN_H #define APACHE_HTTP_MAIN_H #include "httpd.h" #include "apr_optional.h" /** AP_SERVER_BASEARGS is the command argument list parsed by http_main.c * in apr_getopt() format. Use this for default'ing args that the MPM * can safely ignore and pass on from its rewrite_args() handler. */ #define AP_SERVER_BASEARGS "C:c:D:d:E:e:f:vVlLtTSMh?X" #ifdef __cplusplus extern "C" { #endif /** The name of the Apache executable */ AP_DECLARE_DATA extern const char *ap_server_argv0; /** The global server's ServerRoot */ AP_DECLARE_DATA extern const char *ap_server_root; /** The global server's DefaultRuntimeDir * This is not usable directly in the general case; use * ap_runtime_dir_relative() instead. */ AP_DECLARE_DATA extern const char *ap_runtime_dir; /** The global server's server_rec */ AP_DECLARE_DATA extern server_rec *ap_server_conf; /** global pool, for access prior to creation of server_rec */ AP_DECLARE_DATA extern apr_pool_t *ap_pglobal; /** state of the server (startup, exiting, ...) */ AP_DECLARE_DATA extern int ap_main_state; /** run mode (normal, config test, config dump, ...) */ AP_DECLARE_DATA extern int ap_run_mode; /** run mode (normal, config test, config dump, ...) */ AP_DECLARE_DATA extern int ap_config_generation; /* for -C, -c and -D switches */ /** An array of all -C directives. These are processed before the server's * config file */ AP_DECLARE_DATA extern apr_array_header_t *ap_server_pre_read_config; /** An array of all -c directives. These are processed after the server's * config file */ AP_DECLARE_DATA extern apr_array_header_t *ap_server_post_read_config; /** An array of all -D defines on the command line. This allows people to * effect the server based on command line options */ AP_DECLARE_DATA extern apr_array_header_t *ap_server_config_defines; /** Available integer for using the -T switch */ AP_DECLARE_DATA extern int ap_document_root_check; /** * An optional function to send signal to server on presence of '-k' * command line argument. * @param status The exit status after sending signal * @param pool Memory pool to allocate from */ APR_DECLARE_OPTIONAL_FN(int, ap_signal_server, (int *status, apr_pool_t *pool)); #ifdef __cplusplus } #endif #endif /* !APACHE_HTTP_MAIN_H */ /** @} */ httpd-2.4.41/include/util_cookies.h0000644000000000000500000001154111702564442015530 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file util_cookies.h * @brief Apache cookie library */ #ifndef UTIL_COOKIES_H #define UTIL_COOKIES_H #ifdef __cplusplus extern "C" { #endif /** * @defgroup APACHE_CORE_COOKIE Cookies * @ingroup APACHE_CORE * * RFC2109 and RFC2965 compliant HTTP cookies can be read from and written * to using this set of functions. * * @{ * */ #include "apr_errno.h" #include "httpd.h" #define SET_COOKIE "Set-Cookie" #define SET_COOKIE2 "Set-Cookie2" #define DEFAULT_ATTRS "HttpOnly;Secure;Version=1" #define CLEAR_ATTRS "Version=1" typedef struct { request_rec *r; const char *name; const char *encoded; apr_table_t *new_cookies; int duplicated; } ap_cookie_do; /** * Write an RFC2109 compliant cookie. * * @param r The request * @param name The name of the cookie. * @param val The value to place in the cookie. * @param attrs The string containing additional cookie attributes. If NULL, the * DEFAULT_ATTRS will be used. * @param maxage If non zero, a Max-Age header will be added to the cookie. * @param ... A varargs array of zero or more (apr_table_t *) tables followed by NULL * to which the cookies should be added. */ AP_DECLARE(apr_status_t) ap_cookie_write(request_rec * r, const char *name, const char *val, const char *attrs, long maxage, ...) AP_FN_ATTR_SENTINEL; /** * Write an RFC2965 compliant cookie. * * @param r The request * @param name2 The name of the cookie. * @param val The value to place in the cookie. * @param attrs2 The string containing additional cookie attributes. If NULL, the * DEFAULT_ATTRS will be used. * @param maxage If non zero, a Max-Age header will be added to the cookie. * @param ... A varargs array of zero or more (apr_table_t *) tables followed by NULL * to which the cookies should be added. */ AP_DECLARE(apr_status_t) ap_cookie_write2(request_rec * r, const char *name2, const char *val, const char *attrs2, long maxage, ...) AP_FN_ATTR_SENTINEL; /** * Remove an RFC2109 compliant cookie. * * @param r The request * @param name The name of the cookie. * @param attrs The string containing additional cookie attributes. If NULL, the * CLEAR_ATTRS will be used. * @param ... A varargs array of zero or more (apr_table_t *) tables followed by NULL * to which the cookies should be added. */ AP_DECLARE(apr_status_t) ap_cookie_remove(request_rec * r, const char *name, const char *attrs, ...) AP_FN_ATTR_SENTINEL; /** * Remove an RFC2965 compliant cookie. * * @param r The request * @param name2 The name of the cookie. * @param attrs2 The string containing additional cookie attributes. If NULL, the * CLEAR_ATTRS will be used. * @param ... A varargs array of zero or more (apr_table_t *) tables followed by NULL * to which the cookies should be added. */ AP_DECLARE(apr_status_t) ap_cookie_remove2(request_rec * r, const char *name2, const char *attrs2, ...) AP_FN_ATTR_SENTINEL; /** * Read a cookie called name, placing its value in val. * * Both the Cookie and Cookie2 headers are scanned for the cookie. * * If the cookie is duplicated, this function returns APR_EGENERAL. If found, * and if remove is non zero, the cookie will be removed from the headers, and * thus kept private from the backend. */ AP_DECLARE(apr_status_t) ap_cookie_read(request_rec * r, const char *name, const char **val, int remove); /** * Sanity check a given string that it exists, is not empty, * and does not contain the special characters '=', ';' and '&'. * * It is used to sanity check the cookie names. */ AP_DECLARE(apr_status_t) ap_cookie_check_string(const char *string); /** * @} */ #ifdef __cplusplus } #endif #endif /* !UTIL_COOKIES_H */ httpd-2.4.41/include/http_log.h0000644000000000000500000011000712757564422014665 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file http_log.h * @brief Apache Logging library * * @defgroup APACHE_CORE_LOG Logging library * @ingroup APACHE_CORE * @{ */ #ifndef APACHE_HTTP_LOG_H #define APACHE_HTTP_LOG_H #ifdef __cplusplus extern "C" { #endif #include "apr_thread_proc.h" #include "http_config.h" #ifdef HAVE_SYSLOG #include #ifndef LOG_PRIMASK #define LOG_PRIMASK 7 #endif #define APLOG_EMERG LOG_EMERG /* system is unusable */ #define APLOG_ALERT LOG_ALERT /* action must be taken immediately */ #define APLOG_CRIT LOG_CRIT /* critical conditions */ #define APLOG_ERR LOG_ERR /* error conditions */ #define APLOG_WARNING LOG_WARNING /* warning conditions */ #define APLOG_NOTICE LOG_NOTICE /* normal but significant condition */ #define APLOG_INFO LOG_INFO /* informational */ #define APLOG_DEBUG LOG_DEBUG /* debug-level messages */ #define APLOG_TRACE1 (LOG_DEBUG + 1) /* trace-level 1 messages */ #define APLOG_TRACE2 (LOG_DEBUG + 2) /* trace-level 2 messages */ #define APLOG_TRACE3 (LOG_DEBUG + 3) /* trace-level 3 messages */ #define APLOG_TRACE4 (LOG_DEBUG + 4) /* trace-level 4 messages */ #define APLOG_TRACE5 (LOG_DEBUG + 5) /* trace-level 5 messages */ #define APLOG_TRACE6 (LOG_DEBUG + 6) /* trace-level 6 messages */ #define APLOG_TRACE7 (LOG_DEBUG + 7) /* trace-level 7 messages */ #define APLOG_TRACE8 (LOG_DEBUG + 8) /* trace-level 8 messages */ #define APLOG_LEVELMASK 15 /* mask off the level value */ #else #define APLOG_EMERG 0 /* system is unusable */ #define APLOG_ALERT 1 /* action must be taken immediately */ #define APLOG_CRIT 2 /* critical conditions */ #define APLOG_ERR 3 /* error conditions */ #define APLOG_WARNING 4 /* warning conditions */ #define APLOG_NOTICE 5 /* normal but significant condition */ #define APLOG_INFO 6 /* informational */ #define APLOG_DEBUG 7 /* debug-level messages */ #define APLOG_TRACE1 8 /* trace-level 1 messages */ #define APLOG_TRACE2 9 /* trace-level 2 messages */ #define APLOG_TRACE3 10 /* trace-level 3 messages */ #define APLOG_TRACE4 11 /* trace-level 4 messages */ #define APLOG_TRACE5 12 /* trace-level 5 messages */ #define APLOG_TRACE6 13 /* trace-level 6 messages */ #define APLOG_TRACE7 14 /* trace-level 7 messages */ #define APLOG_TRACE8 15 /* trace-level 8 messages */ #define APLOG_LEVELMASK 15 /* mask off the level value */ #endif /* APLOG_NOERRNO is ignored and should not be used. It will be * removed in a future release of Apache. */ #define APLOG_NOERRNO (APLOG_LEVELMASK + 1) /** Use APLOG_TOCLIENT on ap_log_rerror() to give content * handlers the option of including the error text in the * ErrorDocument sent back to the client. Setting APLOG_TOCLIENT * will cause the error text to be saved in the request_rec->notes * table, keyed to the string "error-notes", if and only if: * - the severity level of the message is APLOG_WARNING or greater * - there are no other "error-notes" set in request_rec->notes * Once error-notes is set, it is up to the content handler to * determine whether this text should be sent back to the client. * Note: Client generated text streams sent back to the client MUST * be escaped to prevent CSS attacks. */ #define APLOG_TOCLIENT ((APLOG_LEVELMASK + 1) * 2) /* normal but significant condition on startup, usually printed to stderr */ #define APLOG_STARTUP ((APLOG_LEVELMASK + 1) * 4) #ifndef DEFAULT_LOGLEVEL #define DEFAULT_LOGLEVEL APLOG_WARNING #endif /** * APLOGNO() should be used at the start of the format string passed * to ap_log_error() and friends. The argument must be a 5 digit decimal * number. It creates a tag of the form "AH02182: " * See docs/log-message-tags/README for details. */ #define APLOGNO(n) "AH" #n ": " /** * APLOG_NO_MODULE may be passed as module_index to ap_log_error() and related * functions if the module causing the log message is not known. Normally this * should not be used directly. Use ::APLOG_MARK or ::APLOG_MODULE_INDEX * instead. * * @see APLOG_MARK * @see APLOG_MODULE_INDEX * @see ap_log_error */ #define APLOG_NO_MODULE -1 #ifdef __cplusplus /** * C++ modules must invoke ::APLOG_USE_MODULE or ::AP_DECLARE_MODULE in * every file which uses ap_log_* before the first use of ::APLOG_MARK * or ::APLOG_MODULE_INDEX. * (C modules *should* do that as well, to enable module-specific log * levels. C modules need not obey the ordering, though). */ #else /* __cplusplus */ /** * Constant to store module_index for the current file. * Objects with static storage duration are set to NULL if not * initialized explicitly. This means that if aplog_module_index * is not initialized using the ::APLOG_USE_MODULE or the * ::AP_DECLARE_MODULE macro, we can safely fall back to * use ::APLOG_NO_MODULE. This variable will usually be optimized away. */ static int * const aplog_module_index; #endif /* __cplusplus */ /** * APLOG_MODULE_INDEX contains the module_index of the current module if * it has been set via the ::APLOG_USE_MODULE or ::AP_DECLARE_MODULE macro. * Otherwise it contains ::APLOG_NO_MODULE (for example in unmodified httpd * 2.2 modules). * * If ::APLOG_MARK is used in ap_log_error() and related functions, * ::APLOG_MODULE_INDEX will be passed as module_index. In cases where * ::APLOG_MARK cannot be used, ::APLOG_MODULE_INDEX should normally be passed * as module_index. * * @see APLOG_MARK * @see ap_log_error */ #ifdef __cplusplus #define APLOG_MODULE_INDEX (*aplog_module_index) #else /* __cplusplus */ #define APLOG_MODULE_INDEX \ (aplog_module_index ? *aplog_module_index : APLOG_NO_MODULE) #endif /* __cplusplus */ /** * APLOG_MAX_LOGLEVEL can be defined to remove logging above some * specified level at compile time. * * This requires a C99 compiler. */ #ifdef DOXYGEN #define APLOG_MAX_LOGLEVEL #endif #ifndef APLOG_MAX_LOGLEVEL #define APLOG_MODULE_IS_LEVEL(s,module_index,level) \ ( (((level)&APLOG_LEVELMASK) <= APLOG_NOTICE) || \ (s == NULL) || \ (ap_get_server_module_loglevel(s, module_index) \ >= ((level)&APLOG_LEVELMASK) ) ) #define APLOG_C_MODULE_IS_LEVEL(c,module_index,level) \ ( (((level)&APLOG_LEVELMASK) <= APLOG_NOTICE) || \ (ap_get_conn_module_loglevel(c, module_index) \ >= ((level)&APLOG_LEVELMASK) ) ) #define APLOG_CS_MODULE_IS_LEVEL(c,s,module_index,level) \ ( (((level)&APLOG_LEVELMASK) <= APLOG_NOTICE) || \ (ap_get_conn_server_module_loglevel(c, s, module_index) \ >= ((level)&APLOG_LEVELMASK) ) ) #define APLOG_R_MODULE_IS_LEVEL(r,module_index,level) \ ( (((level)&APLOG_LEVELMASK) <= APLOG_NOTICE) || \ (ap_get_request_module_loglevel(r, module_index) \ >= ((level)&APLOG_LEVELMASK) ) ) #else #define APLOG_MODULE_IS_LEVEL(s,module_index,level) \ ( (((level)&APLOG_LEVELMASK) <= APLOG_MAX_LOGLEVEL) && \ ( (((level)&APLOG_LEVELMASK) <= APLOG_NOTICE) || \ (s == NULL) || \ (ap_get_server_module_loglevel(s, module_index) \ >= ((level)&APLOG_LEVELMASK) ) ) ) #define APLOG_CS_MODULE_IS_LEVEL(c,s,module_index,level) \ ( (((level)&APLOG_LEVELMASK) <= APLOG_MAX_LOGLEVEL) && \ ( (((level)&APLOG_LEVELMASK) <= APLOG_NOTICE) || \ (ap_get_conn_server_module_loglevel(c, s, module_index) \ >= ((level)&APLOG_LEVELMASK) ) ) ) #define APLOG_C_MODULE_IS_LEVEL(c,module_index,level) \ ( (((level)&APLOG_LEVELMASK) <= APLOG_MAX_LOGLEVEL) && \ ( (((level)&APLOG_LEVELMASK) <= APLOG_NOTICE) || \ (ap_get_conn_module_loglevel(c, module_index) \ >= ((level)&APLOG_LEVELMASK) ) ) ) #define APLOG_R_MODULE_IS_LEVEL(r,module_index,level) \ ( (((level)&APLOG_LEVELMASK) <= APLOG_MAX_LOGLEVEL) && \ ( (((level)&APLOG_LEVELMASK) <= APLOG_NOTICE) || \ (ap_get_request_module_loglevel(r, module_index) \ >= ((level)&APLOG_LEVELMASK) ) ) ) #endif #define APLOG_IS_LEVEL(s,level) \ APLOG_MODULE_IS_LEVEL(s,APLOG_MODULE_INDEX,level) #define APLOG_C_IS_LEVEL(c,level) \ APLOG_C_MODULE_IS_LEVEL(c,APLOG_MODULE_INDEX,level) #define APLOG_CS_IS_LEVEL(c,s,level) \ APLOG_CS_MODULE_IS_LEVEL(c,s,APLOG_MODULE_INDEX,level) #define APLOG_R_IS_LEVEL(r,level) \ APLOG_R_MODULE_IS_LEVEL(r,APLOG_MODULE_INDEX,level) #define APLOGinfo(s) APLOG_IS_LEVEL(s,APLOG_INFO) #define APLOGdebug(s) APLOG_IS_LEVEL(s,APLOG_DEBUG) #define APLOGtrace1(s) APLOG_IS_LEVEL(s,APLOG_TRACE1) #define APLOGtrace2(s) APLOG_IS_LEVEL(s,APLOG_TRACE2) #define APLOGtrace3(s) APLOG_IS_LEVEL(s,APLOG_TRACE3) #define APLOGtrace4(s) APLOG_IS_LEVEL(s,APLOG_TRACE4) #define APLOGtrace5(s) APLOG_IS_LEVEL(s,APLOG_TRACE5) #define APLOGtrace6(s) APLOG_IS_LEVEL(s,APLOG_TRACE6) #define APLOGtrace7(s) APLOG_IS_LEVEL(s,APLOG_TRACE7) #define APLOGtrace8(s) APLOG_IS_LEVEL(s,APLOG_TRACE8) #define APLOGrinfo(r) APLOG_R_IS_LEVEL(r,APLOG_INFO) #define APLOGrdebug(r) APLOG_R_IS_LEVEL(r,APLOG_DEBUG) #define APLOGrtrace1(r) APLOG_R_IS_LEVEL(r,APLOG_TRACE1) #define APLOGrtrace2(r) APLOG_R_IS_LEVEL(r,APLOG_TRACE2) #define APLOGrtrace3(r) APLOG_R_IS_LEVEL(r,APLOG_TRACE3) #define APLOGrtrace4(r) APLOG_R_IS_LEVEL(r,APLOG_TRACE4) #define APLOGrtrace5(r) APLOG_R_IS_LEVEL(r,APLOG_TRACE5) #define APLOGrtrace6(r) APLOG_R_IS_LEVEL(r,APLOG_TRACE6) #define APLOGrtrace7(r) APLOG_R_IS_LEVEL(r,APLOG_TRACE7) #define APLOGrtrace8(r) APLOG_R_IS_LEVEL(r,APLOG_TRACE8) #define APLOGcinfo(c) APLOG_C_IS_LEVEL(c,APLOG_INFO) #define APLOGcdebug(c) APLOG_C_IS_LEVEL(c,APLOG_DEBUG) #define APLOGctrace1(c) APLOG_C_IS_LEVEL(c,APLOG_TRACE1) #define APLOGctrace2(c) APLOG_C_IS_LEVEL(c,APLOG_TRACE2) #define APLOGctrace3(c) APLOG_C_IS_LEVEL(c,APLOG_TRACE3) #define APLOGctrace4(c) APLOG_C_IS_LEVEL(c,APLOG_TRACE4) #define APLOGctrace5(c) APLOG_C_IS_LEVEL(c,APLOG_TRACE5) #define APLOGctrace6(c) APLOG_C_IS_LEVEL(c,APLOG_TRACE6) #define APLOGctrace7(c) APLOG_C_IS_LEVEL(c,APLOG_TRACE7) #define APLOGctrace8(c) APLOG_C_IS_LEVEL(c,APLOG_TRACE8) AP_DECLARE_DATA extern int ap_default_loglevel; /** * APLOG_MARK is a convenience macro for use as the first three parameters in * ap_log_error() and related functions, i.e. file, line, and module_index. * * The module_index parameter was introduced in version 2.3.6. Before that * version, APLOG_MARK only replaced the file and line parameters. * This means that APLOG_MARK can be used with ap_log_*error in all versions * of Apache httpd. * * @see APLOG_MODULE_INDEX * @see ap_log_error * @see ap_log_cerror * @see ap_log_rerror * @see ap_log_cserror */ #define APLOG_MARK __FILE__,__LINE__,APLOG_MODULE_INDEX /** * Set up for logging to stderr. * @param p The pool to allocate out of */ AP_DECLARE(void) ap_open_stderr_log(apr_pool_t *p); /** * Replace logging to stderr with logging to the given file. * @param p The pool to allocate out of * @param file Name of the file to log stderr output */ AP_DECLARE(apr_status_t) ap_replace_stderr_log(apr_pool_t *p, const char *file); /** * Open the error log and replace stderr with it. * @param pconf Not used * @param plog The pool to allocate the logs from * @param ptemp Pool used for temporary allocations * @param s_main The main server * @note ap_open_logs isn't expected to be used by modules, it is * an internal core function */ int ap_open_logs(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s_main); /** * Perform special processing for piped loggers in MPM child * processes. * @param p Not used * @param s Not used * @note ap_logs_child_init is not for use by modules; it is an * internal core function */ void ap_logs_child_init(apr_pool_t *p, server_rec *s); /* * The primary logging functions, ap_log_error, ap_log_rerror, ap_log_cerror, * and ap_log_perror use a printf style format string to build the log message. * It is VERY IMPORTANT that you not include any raw data from the network, * such as the request-URI or request header fields, within the format * string. Doing so makes the server vulnerable to a denial-of-service * attack and other messy behavior. Instead, use a simple format string * like "%s", followed by the string containing the untrusted data. */ /** * ap_log_error() - log messages which are not related to a particular * request or connection. This uses a printf-like format to log messages * to the error_log. * @param file The file in which this function is called * @param line The line number on which this function is called * @param module_index The module_index of the module generating this message * @param level The level of this error message * @param status The status code from the previous command * @param s The server on which we are logging * @param fmt The format string * @param ... The arguments to use to fill out fmt. * @note ap_log_error is implemented as a macro * @note Use APLOG_MARK to fill out file and line * @note If a request_rec is available, use that with ap_log_rerror() * in preference to calling this function. Otherwise, if a conn_rec is * available, use that with ap_log_cerror() in preference to calling * this function. * @warning It is VERY IMPORTANT that you not include any raw data from * the network, such as the request-URI or request header fields, within * the format string. Doing so makes the server vulnerable to a * denial-of-service attack and other messy behavior. Instead, use a * simple format string like "%s", followed by the string containing the * untrusted data. */ #ifdef DOXYGEN AP_DECLARE(void) ap_log_error(const char *file, int line, int module_index, int level, apr_status_t status, const server_rec *s, const char *fmt, ...); #else #ifdef AP_HAVE_C99 /* need additional step to expand APLOG_MARK first */ #define ap_log_error(...) ap_log_error__(__VA_ARGS__) /* need server_rec *sr = ... for the case if s is verbatim NULL */ #define ap_log_error__(file, line, mi, level, status, s, ...) \ do { const server_rec *sr__ = s; if (APLOG_MODULE_IS_LEVEL(sr__, mi, level)) \ ap_log_error_(file, line, mi, level, status, sr__, __VA_ARGS__); \ } while(0) #else #define ap_log_error ap_log_error_ #endif AP_DECLARE(void) ap_log_error_(const char *file, int line, int module_index, int level, apr_status_t status, const server_rec *s, const char *fmt, ...) __attribute__((format(printf,7,8))); #endif /** * ap_log_perror() - log messages which are not related to a particular * request, connection, or virtual server. This uses a printf-like * format to log messages to the error_log. * @param file The file in which this function is called * @param line The line number on which this function is called * @param module_index ignored dummy value for use by APLOG_MARK * @param level The level of this error message * @param status The status code from the previous command * @param p The pool which we are logging for * @param fmt The format string * @param ... The arguments to use to fill out fmt. * @note ap_log_perror is implemented as a macro * @note Use APLOG_MARK to fill out file, line, and module_index * @warning It is VERY IMPORTANT that you not include any raw data from * the network, such as the request-URI or request header fields, within * the format string. Doing so makes the server vulnerable to a * denial-of-service attack and other messy behavior. Instead, use a * simple format string like "%s", followed by the string containing the * untrusted data. */ #ifdef DOXYGEN AP_DECLARE(void) ap_log_perror(const char *file, int line, int module_index, int level, apr_status_t status, apr_pool_t *p, const char *fmt, ...); #else #if defined(AP_HAVE_C99) && defined(APLOG_MAX_LOGLEVEL) /* need additional step to expand APLOG_MARK first */ #define ap_log_perror(...) ap_log_perror__(__VA_ARGS__) #define ap_log_perror__(file, line, mi, level, status, p, ...) \ do { if ((level) <= APLOG_MAX_LOGLEVEL ) \ ap_log_perror_(file, line, mi, level, status, p, \ __VA_ARGS__); } while(0) #else #define ap_log_perror ap_log_perror_ #endif AP_DECLARE(void) ap_log_perror_(const char *file, int line, int module_index, int level, apr_status_t status, apr_pool_t *p, const char *fmt, ...) __attribute__((format(printf,7,8))); #endif /** * ap_log_rerror() - log messages which are related to a particular * request. This uses a printf-like format to log messages to the * error_log. * @param file The file in which this function is called * @param line The line number on which this function is called * @param module_index The module_index of the module generating this message * @param level The level of this error message * @param status The status code from the previous command * @param r The request which we are logging for * @param fmt The format string * @param ... The arguments to use to fill out fmt. * @note ap_log_rerror is implemented as a macro * @note Use APLOG_MARK to fill out file, line, and module_index * @warning It is VERY IMPORTANT that you not include any raw data from * the network, such as the request-URI or request header fields, within * the format string. Doing so makes the server vulnerable to a * denial-of-service attack and other messy behavior. Instead, use a * simple format string like "%s", followed by the string containing the * untrusted data. */ #ifdef DOXYGEN AP_DECLARE(void) ap_log_rerror(const char *file, int line, int module_index, int level, apr_status_t status, const request_rec *r, const char *fmt, ...); #else #ifdef AP_HAVE_C99 /* need additional step to expand APLOG_MARK first */ #define ap_log_rerror(...) ap_log_rerror__(__VA_ARGS__) #define ap_log_rerror__(file, line, mi, level, status, r, ...) \ do { if (APLOG_R_MODULE_IS_LEVEL(r, mi, level)) \ ap_log_rerror_(file, line, mi, level, status, r, __VA_ARGS__); \ } while(0) #else #define ap_log_rerror ap_log_rerror_ #endif AP_DECLARE(void) ap_log_rerror_(const char *file, int line, int module_index, int level, apr_status_t status, const request_rec *r, const char *fmt, ...) __attribute__((format(printf,7,8))); #endif /** * ap_log_cerror() - log messages which are related to a particular * connection. This uses a printf-like format to log messages to the * error_log. * @param file The file in which this function is called * @param line The line number on which this function is called * @param level The level of this error message * @param module_index The module_index of the module generating this message * @param status The status code from the previous command * @param c The connection which we are logging for * @param fmt The format string * @param ... The arguments to use to fill out fmt. * @note ap_log_cerror is implemented as a macro * @note Use APLOG_MARK to fill out file, line, and module_index * @note If a request_rec is available, use that with ap_log_rerror() * in preference to calling this function. * @warning It is VERY IMPORTANT that you not include any raw data from * the network, such as the request-URI or request header fields, within * the format string. Doing so makes the server vulnerable to a * denial-of-service attack and other messy behavior. Instead, use a * simple format string like "%s", followed by the string containing the * untrusted data. */ #ifdef DOXYGEN AP_DECLARE(void) ap_log_cerror(const char *file, int line, int module_index, int level, apr_status_t status, const conn_rec *c, const char *fmt, ...); #else #ifdef AP_HAVE_C99 /* need additional step to expand APLOG_MARK first */ #define ap_log_cerror(...) ap_log_cerror__(__VA_ARGS__) #define ap_log_cerror__(file, line, mi, level, status, c, ...) \ do { if (APLOG_C_MODULE_IS_LEVEL(c, mi, level)) \ ap_log_cerror_(file, line, mi, level, status, c, __VA_ARGS__); \ } while(0) #else #define ap_log_cerror ap_log_cerror_ #endif AP_DECLARE(void) ap_log_cerror_(const char *file, int line, int module_index, int level, apr_status_t status, const conn_rec *c, const char *fmt, ...) __attribute__((format(printf,7,8))); #endif /** * ap_log_cserror() - log messages which are related to a particular * connection and to a vhost other than c->base_server. This uses a * printf-like format to log messages to the error_log. * @param file The file in which this function is called * @param line The line number on which this function is called * @param level The level of this error message * @param module_index The module_index of the module generating this message * @param status The status code from the previous command * @param c The connection which we are logging for * @param s The server which we are logging for * @param fmt The format string * @param ... The arguments to use to fill out fmt. * @note ap_log_cserror is implemented as a macro * @note Use APLOG_MARK to fill out file, line, and module_index * @note If a request_rec is available, use that with ap_log_rerror() * in preference to calling this function. This function is mainly useful for * modules like mod_ssl to use before the request_rec is created. * @warning It is VERY IMPORTANT that you not include any raw data from * the network, such as the request-URI or request header fields, within * the format string. Doing so makes the server vulnerable to a * denial-of-service attack and other messy behavior. Instead, use a * simple format string like "%s", followed by the string containing the * untrusted data. */ #ifdef DOXYGEN AP_DECLARE(void) ap_log_cserror(const char *file, int line, int module_index, int level, apr_status_t status, const conn_rec *c, const server_rec *s, const char *fmt, ...); #else #ifdef AP_HAVE_C99 /* need additional step to expand APLOG_MARK first */ #define ap_log_cserror(...) ap_log_cserror__(__VA_ARGS__) #define ap_log_cserror__(file, line, mi, level, status, c, s, ...) \ do { if (APLOG_CS_MODULE_IS_LEVEL(c, s, mi, level)) \ ap_log_cserror_(file, line, mi, level, status, c, s, \ __VA_ARGS__); \ } while(0) #else #define ap_log_cserror ap_log_cserror_ #endif AP_DECLARE(void) ap_log_cserror_(const char *file, int line, int module_index, int level, apr_status_t status, const conn_rec *c, const server_rec *s, const char *fmt, ...) __attribute__((format(printf,8,9))); #endif /* * The buffer logging functions, ap_log_data, ap_log_rdata, ap_log_cdata, * and ap_log_csdata log a buffer in printable and hex format. The exact * format is controlled by processing flags, described next. */ /** * Processing flags for ap_log_data() et al * * AP_LOG_DATA_DEFAULT - default formatting, with printable chars and hex * AP_LOG_DATA_SHOW_OFFSET - prefix each line with hex offset from the start * of the buffer */ #define AP_LOG_DATA_DEFAULT 0 #define AP_LOG_DATA_SHOW_OFFSET 1 /** * ap_log_data() - log buffers which are not related to a particular request * or connection. * @param file The file in which this function is called * @param line The line number on which this function is called * @param module_index The module_index of the module logging this buffer * @param level The log level * @param s The server on which we are logging * @param label A label for the buffer, to be logged preceding the buffer * @param data The buffer to be logged * @param len The length of the buffer * @param flags Special processing flags like AP_LOG_DATA_SHOW_OFFSET * @note ap_log_data is implemented as a macro. * @note Use APLOG_MARK to fill out file, line, and module_index * @note If a request_rec is available, use that with ap_log_rdata() * in preference to calling this function. Otherwise, if a conn_rec is * available, use that with ap_log_cdata() in preference to calling * this function. */ #ifdef DOXYGEN AP_DECLARE(void) ap_log_data(const char *file, int line, int module_index, int level, const server_rec *s, const char *label, const void *data, apr_size_t len, unsigned int flags); #else #ifdef AP_HAVE_C99 /* need additional step to expand APLOG_MARK first */ #define ap_log_data(...) ap_log_data__(__VA_ARGS__) /* need server_rec *sr = ... for the case if s is verbatim NULL */ #define ap_log_data__(file, line, mi, level, s, ...) \ do { const server_rec *sr__ = s; if (APLOG_MODULE_IS_LEVEL(sr__, mi, level)) \ ap_log_data_(file, line, mi, level, sr__, __VA_ARGS__); \ } while(0) #else #define ap_log_data ap_log_data_ #endif AP_DECLARE(void) ap_log_data_(const char *file, int line, int module_index, int level, const server_rec *s, const char *label, const void *data, apr_size_t len, unsigned int flags); #endif /** * ap_log_rdata() - log buffers which are related to a particular request. * @param file The file in which this function is called * @param line The line number on which this function is called * @param module_index The module_index of the module logging this buffer * @param level The log level * @param r The request which we are logging for * @param label A label for the buffer, to be logged preceding the buffer * @param data The buffer to be logged * @param len The length of the buffer * @param flags Special processing flags like AP_LOG_DATA_SHOW_OFFSET * @note ap_log_rdata is implemented as a macro. * @note Use APLOG_MARK to fill out file, line, and module_index * @note If a request_rec is available, use that with ap_log_rerror() * in preference to calling this function. Otherwise, if a conn_rec is * available, use that with ap_log_cerror() in preference to calling * this function. */ #ifdef DOXYGEN AP_DECLARE(void) ap_log_rdata(const char *file, int line, int module_index, int level, const request_rec *r, const char *label, const void *data, apr_size_t len, unsigned int flags); #else #ifdef AP_HAVE_C99 /* need additional step to expand APLOG_MARK first */ #define ap_log_rdata(...) ap_log_rdata__(__VA_ARGS__) #define ap_log_rdata__(file, line, mi, level, r, ...) \ do { if (APLOG_R_MODULE_IS_LEVEL(r, mi, level)) \ ap_log_rdata_(file, line, mi, level, r, __VA_ARGS__); \ } while(0) #else #define ap_log_rdata ap_log_rdata_ #endif AP_DECLARE(void) ap_log_rdata_(const char *file, int line, int module_index, int level, const request_rec *r, const char *label, const void *data, apr_size_t len, unsigned int flags); #endif /** * ap_log_cdata() - log buffers which are related to a particular connection. * @param file The file in which this function is called * @param line The line number on which this function is called * @param module_index The module_index of the module logging this buffer * @param level The log level * @param c The connection which we are logging for * @param label A label for the buffer, to be logged preceding the buffer * @param data The buffer to be logged * @param len The length of the buffer * @param flags Special processing flags like AP_LOG_DATA_SHOW_OFFSET * @note ap_log_cdata is implemented as a macro * @note Use APLOG_MARK to fill out file, line, and module_index * @note If a request_rec is available, use that with ap_log_rerror() * in preference to calling this function. Otherwise, if a conn_rec is * available, use that with ap_log_cerror() in preference to calling * this function. */ #ifdef DOXYGEN AP_DECLARE(void) ap_log_cdata(const char *file, int line, int module_index, int level, const conn_rec *c, const char *label, const void *data, apr_size_t len, unsigned int flags); #else #ifdef AP_HAVE_C99 /* need additional step to expand APLOG_MARK first */ #define ap_log_cdata(...) ap_log_cdata__(__VA_ARGS__) #define ap_log_cdata__(file, line, mi, level, c, ...) \ do { if (APLOG_C_MODULE_IS_LEVEL(c, mi, level)) \ ap_log_cdata_(file, line, mi, level, c, __VA_ARGS__); \ } while(0) #else #define ap_log_cdata ap_log_cdata_ #endif AP_DECLARE(void) ap_log_cdata_(const char *file, int line, int module_index, int level, const conn_rec *c, const char *label, const void *data, apr_size_t len, unsigned int flags); #endif /** * ap_log_csdata() - log buffers which are related to a particular connection * and to a vhost other than c->base_server. * @param file The file in which this function is called * @param line The line number on which this function is called * @param module_index The module_index of the module logging this buffer * @param level The log level * @param c The connection which we are logging for * @param s The server which we are logging for * @param label A label for the buffer, to be logged preceding the buffer * @param data The buffer to be logged * @param len The length of the buffer * @param flags Special processing flags like AP_LOG_DATA_SHOW_OFFSET * @note ap_log_csdata is implemented as a macro * @note Use APLOG_MARK to fill out file, line, and module_index * @note If a request_rec is available, use that with ap_log_rerror() * in preference to calling this function. Otherwise, if a conn_rec is * available, use that with ap_log_cerror() in preference to calling * this function. */ #ifdef DOXYGEN AP_DECLARE(void) ap_log_csdata(const char *file, int line, int module_index, int level, const conn_rec *c, const server_rec *s, const char *label, const void *data, apr_size_t len, unsigned int flags); #else #ifdef AP_HAVE_C99 /* need additional step to expand APLOG_MARK first */ #define ap_log_csdata(...) ap_log_csdata__(__VA_ARGS__) #define ap_log_csdata__(file, line, mi, level, c, s, ...) \ do { if (APLOG_CS_MODULE_IS_LEVEL(c, s, mi, level)) \ ap_log_csdata_(file, line, mi, level, c, s, __VA_ARGS__); \ } while(0) #else #define ap_log_cdata ap_log_cdata_ #endif AP_DECLARE(void) ap_log_csdata_(const char *file, int line, int module_index, int level, const conn_rec *c, const server_rec *s, const char *label, const void *data, apr_size_t len, unsigned int flags); #endif /** * Convert stderr to the error log * @param s The current server */ AP_DECLARE(void) ap_error_log2stderr(server_rec *s); /** * Log the command line used to start the server. * @param p The pool to use for logging * @param s The server_rec whose process's command line we want to log. * The command line is logged to that server's error log. */ AP_DECLARE(void) ap_log_command_line(apr_pool_t *p, server_rec *s); /** * Log common (various) MPM shared data at startup. * @param s The server_rec of the error log we want to log to. * Misc commonly logged data is logged to that server's error log. */ AP_DECLARE(void) ap_log_mpm_common(server_rec *s); /** * Log the current pid of the parent process * @param p The pool to use for processing * @param fname The name of the file to log to. If the filename is not * absolute then it is assumed to be relative to ServerRoot. */ AP_DECLARE(void) ap_log_pid(apr_pool_t *p, const char *fname); /** * Remove the pidfile. * @param p The pool to use for processing * @param fname The name of the pid file to remove. If the filename is not * absolute then it is assumed to be relative to ServerRoot. */ AP_DECLARE(void) ap_remove_pid(apr_pool_t *p, const char *fname); /** * Retrieve the pid from a pidfile. * @param p The pool to use for processing * @param filename The name of the file containing the pid. If the filename is not * absolute then it is assumed to be relative to ServerRoot. * @param mypid Pointer to pid_t (valid only if return APR_SUCCESS) */ AP_DECLARE(apr_status_t) ap_read_pid(apr_pool_t *p, const char *filename, pid_t *mypid); /** @see piped_log */ typedef struct piped_log piped_log; /** * Open the piped log process * @param p The pool to allocate out of * @param program The program to run in the logging process * @return The piped log structure * @note The log program is invoked as @p APR_PROGRAM_ENV, * @see ap_open_piped_log_ex to modify this behavior */ AP_DECLARE(piped_log *) ap_open_piped_log(apr_pool_t *p, const char *program); /** * Open the piped log process specifying the execution choice for program * @param p The pool to allocate out of * @param program The program to run in the logging process * @param cmdtype How to invoke program, e.g. APR_PROGRAM, APR_SHELLCMD_ENV, etc * @return The piped log structure */ AP_DECLARE(piped_log *) ap_open_piped_log_ex(apr_pool_t *p, const char *program, apr_cmdtype_e cmdtype); /** * Close the piped log and kill the logging process * @param pl The piped log structure */ AP_DECLARE(void) ap_close_piped_log(piped_log *pl); /** * A function to return the read side of the piped log pipe * @param pl The piped log structure * @return The native file descriptor */ AP_DECLARE(apr_file_t *) ap_piped_log_read_fd(piped_log *pl); /** * A function to return the write side of the piped log pipe * @param pl The piped log structure * @return The native file descriptor */ AP_DECLARE(apr_file_t *) ap_piped_log_write_fd(piped_log *pl); /** * hook method to generate unique id for connection or request * @ingroup hooks * @param c the conn_rec of the connections * @param r the request_req (may be NULL) * @param id the place where to store the unique id * @return OK or DECLINE */ AP_DECLARE_HOOK(int, generate_log_id, (const conn_rec *c, const request_rec *r, const char **id)) #ifdef __cplusplus } #endif #endif /* !APACHE_HTTP_LOG_H */ /** @} */ httpd-2.4.41/include/ap_config_layout.h.in0000644000000000000500000000534010455010104016747 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ap_config_layout.h * @brief Apache Config Layout */ #ifndef AP_CONFIG_LAYOUT_H #define AP_CONFIG_LAYOUT_H /* Configured Apache directory layout */ #define DEFAULT_PREFIX "@prefix@" #define DEFAULT_EXP_EXEC_PREFIX "@exp_exec_prefix@" #define DEFAULT_REL_EXEC_PREFIX "@rel_exec_prefix@" #define DEFAULT_EXP_BINDIR "@exp_bindir@" #define DEFAULT_REL_BINDIR "@rel_bindir@" #define DEFAULT_EXP_SBINDIR "@exp_sbindir@" #define DEFAULT_REL_SBINDIR "@rel_sbindir@" #define DEFAULT_EXP_LIBEXECDIR "@exp_libexecdir@" #define DEFAULT_REL_LIBEXECDIR "@rel_libexecdir@" #define DEFAULT_EXP_MANDIR "@exp_mandir@" #define DEFAULT_REL_MANDIR "@rel_mandir@" #define DEFAULT_EXP_SYSCONFDIR "@exp_sysconfdir@" #define DEFAULT_REL_SYSCONFDIR "@rel_sysconfdir@" #define DEFAULT_EXP_DATADIR "@exp_datadir@" #define DEFAULT_REL_DATADIR "@rel_datadir@" #define DEFAULT_EXP_INSTALLBUILDDIR "@exp_installbuilddir@" #define DEFAULT_REL_INSTALLBUILDDIR "@rel_installbuilddir@" #define DEFAULT_EXP_ERRORDIR "@exp_errordir@" #define DEFAULT_REL_ERRORDIR "@rel_errordir@" #define DEFAULT_EXP_ICONSDIR "@exp_iconsdir@" #define DEFAULT_REL_ICONSDIR "@rel_iconsdir@" #define DEFAULT_EXP_HTDOCSDIR "@exp_htdocsdir@" #define DEFAULT_REL_HTDOCSDIR "@rel_htdocsdir@" #define DEFAULT_EXP_MANUALDIR "@exp_manualdir@" #define DEFAULT_REL_MANUALDIR "@rel_manualdir@" #define DEFAULT_EXP_CGIDIR "@exp_cgidir@" #define DEFAULT_REL_CGIDIR "@rel_cgidir@" #define DEFAULT_EXP_INCLUDEDIR "@exp_includedir@" #define DEFAULT_REL_INCLUDEDIR "@rel_includedir@" #define DEFAULT_EXP_LOCALSTATEDIR "@exp_localstatedir@" #define DEFAULT_REL_LOCALSTATEDIR "@rel_localstatedir@" #define DEFAULT_EXP_RUNTIMEDIR "@exp_runtimedir@" #define DEFAULT_REL_RUNTIMEDIR "@rel_runtimedir@" #define DEFAULT_EXP_LOGFILEDIR "@exp_logfiledir@" #define DEFAULT_REL_LOGFILEDIR "@rel_logfiledir@" #define DEFAULT_EXP_PROXYCACHEDIR "@exp_proxycachedir@" #define DEFAULT_REL_PROXYCACHEDIR "@rel_proxycachedir@" #endif /* AP_CONFIG_LAYOUT_H */ httpd-2.4.41/include/ap_config_auto.h.in0000644000000000000000000002042313523273355016612 0ustar rootroot/* include/ap_config_auto.h.in. Generated from configure.in by autoheader. */ /* SuExec root directory */ #undef AP_DOC_ROOT /* Enable DTrace probes */ #undef AP_ENABLE_DTRACE /* Allow modules to run hook after a fatal exception */ #undef AP_ENABLE_EXCEPTION_HOOK /* Allow IPv4 connections on IPv6 listening sockets */ #undef AP_ENABLE_V4_MAPPED /* Minimum allowed GID */ #undef AP_GID_MIN /* Enable the APR hook probes capability, reading from ap_hook_probes.h */ #undef AP_HOOK_PROBES_ENABLED /* User allowed to call SuExec */ #undef AP_HTTPD_USER /* SuExec log file */ #undef AP_LOG_EXEC /* SuExec log to syslog */ #undef AP_LOG_SYSLOG /* Listening sockets are non-blocking when there are more than 1 */ #undef AP_NONBLOCK_WHEN_MULTI_LISTEN /* safe shell path for SuExec */ #undef AP_SAFE_PATH /* Enable if suexec is installed with Linux capabilities, not setuid */ #undef AP_SUEXEC_CAPABILITIES /* umask for suexec'd process */ #undef AP_SUEXEC_UMASK /* Location of the MIME types config file, relative to the Apache root directory */ #undef AP_TYPES_CONFIG_FILE /* Minimum allowed UID */ #undef AP_UID_MIN /* User subdirectory */ #undef AP_USERDIR_SUFFIX /* Using autoconf to configure Apache */ #undef AP_USING_AUTOCONF /* Define to 1 if you have the `arc4random_buf' function. */ #undef HAVE_ARC4RANDOM_BUF /* Define to 1 if you have the `bindprocessor' function. */ #undef HAVE_BINDPROCESSOR /* Define to 1 if you have the header file. */ #undef HAVE_BSTRING_H /* Define if curl is available */ #undef HAVE_CURL /* Define to 1 if you have the header file. */ #undef HAVE_CURL_CURL_H /* Define if distcache support is enabled */ #undef HAVE_DISTCACHE /* Define to 1 if you have the header file. */ #undef HAVE_DISTCACHE_DC_CLIENT_H /* Define to 1 if you have the `ENGINE_init' function. */ #undef HAVE_ENGINE_INIT /* Define to 1 if you have the `ENGINE_load_builtin_engines' function. */ #undef HAVE_ENGINE_LOAD_BUILTIN_ENGINES /* Define to 1 if you have the `epoll_create' function. */ #undef HAVE_EPOLL_CREATE /* Define to 1 if you have the `fopen64' function. */ #undef HAVE_FOPEN64 /* Define to 1 if you have the `getgrnam' function. */ #undef HAVE_GETGRNAM /* Define to 1 if you have the `getloadavg' function. */ #undef HAVE_GETLOADAVG /* Define to 1 if you have the `getpgid' function. */ #undef HAVE_GETPGID /* Define to 1 if you have the `getpwnam' function. */ #undef HAVE_GETPWNAM /* Define if you have gettid() */ #undef HAVE_GETTID /* Define if struct tm has a tm_gmtoff field */ #undef HAVE_GMTOFF /* Define to 1 if you have the header file. */ #undef HAVE_GRP_H /* Define to 1 if you have the `initgroups' function. */ #undef HAVE_INITGROUPS /* Define to 1 if you have the header file. */ #undef HAVE_INTTYPES_H /* Define if jansson is available */ #undef HAVE_JANSSON /* Define to 1 if you have the `killpg' function. */ #undef HAVE_KILLPG /* Define to 1 if you have the `kqueue' function. */ #undef HAVE_KQUEUE /* Define to 1 if you have the header file. */ #undef HAVE_LIMITS_H /* Define to 1 if you have the header file. */ #undef HAVE_MEMORY_H /* Define if nghttp2 is available */ #undef HAVE_NGHTTP2 /* Define to 1 if you have the header file. */ #undef HAVE_NGHTTP2_NGHTTP2_H /* Define to 1 if you have the `nghttp2_session_callbacks_set_on_invalid_header_callback' function. */ #undef HAVE_NGHTTP2_SESSION_CALLBACKS_SET_ON_INVALID_HEADER_CALLBACK /* Define to 1 if you have the `nghttp2_session_change_stream_priority' function. */ #undef HAVE_NGHTTP2_SESSION_CHANGE_STREAM_PRIORITY /* Define to 1 if you have the `nghttp2_session_get_stream_local_window_size' function. */ #undef HAVE_NGHTTP2_SESSION_GET_STREAM_LOCAL_WINDOW_SIZE /* Define to 1 if you have the `nghttp2_session_server_new2' function. */ #undef HAVE_NGHTTP2_SESSION_SERVER_NEW2 /* Define to 1 if you have the `nghttp2_stream_get_weight' function. */ #undef HAVE_NGHTTP2_STREAM_GET_WEIGHT /* Define if OpenSSL is available */ #undef HAVE_OPENSSL /* Define to 1 if you have the header file. */ #undef HAVE_OPENSSL_ENGINE_H /* Define to 1 if you have the `port_create' function. */ #undef HAVE_PORT_CREATE /* Define to 1 if you have the `prctl' function. */ #undef HAVE_PRCTL /* Define to 1 if you have the header file. */ #undef HAVE_PRIV_H /* Define to 1 if you have the `pthread_kill' function. */ #undef HAVE_PTHREAD_KILL /* Define to 1 if you have the header file. */ #undef HAVE_PWD_H /* Define to 1 if you have the `RAND_egd' function. */ #undef HAVE_RAND_EGD /* Define to 1 if you have the `setsid' function. */ #undef HAVE_SETSID /* Define to 1 if you have the `SSL_CTX_new' function. */ #undef HAVE_SSL_CTX_NEW /* Define to 1 if you have the header file. */ #undef HAVE_STDINT_H /* Define to 1 if you have the header file. */ #undef HAVE_STDLIB_H /* Define to 1 if you have the header file. */ #undef HAVE_STRINGS_H /* Define to 1 if you have the header file. */ #undef HAVE_STRING_H /* Define to 1 if you have the `syslog' function. */ #undef HAVE_SYSLOG /* Define to 1 if you have the header file. */ #undef HAVE_SYS_IPC_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_LOADAVG_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_PRCTL_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_PROCESSOR_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_RESOURCE_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_SDT_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_SEM_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_SOCKET_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_STAT_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_TIMES_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_TIME_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_TYPES_H /* Define to 1 if you have that is POSIX.1 compatible. */ #undef HAVE_SYS_WAIT_H /* Define to 1 if you have the `timegm' function. */ #undef HAVE_TIMEGM /* Define to 1 if you have the `times' function. */ #undef HAVE_TIMES /* Define to 1 if you have the header file. */ #undef HAVE_UNISTD_H /* Define to 1 if you have the `vsyslog' function. */ #undef HAVE_VSYSLOG /* Root directory of the Apache install area */ #undef HTTPD_ROOT /* Define to the address where bug reports for this package should be sent. */ #undef PACKAGE_BUGREPORT /* Define to the full name of this package. */ #undef PACKAGE_NAME /* Define to the full name and version of this package. */ #undef PACKAGE_STRING /* Define to the one symbol short name of this package. */ #undef PACKAGE_TARNAME /* Define to the home page for this package. */ #undef PACKAGE_URL /* Define to the version of this package. */ #undef PACKAGE_VERSION /* Location of the config file, relative to the Apache root directory */ #undef SERVER_CONFIG_FILE /* This platform doesn't suffer from the thundering herd problem */ #undef SINGLE_LISTEN_UNSERIALIZED_ACCEPT /* Define to 1 if you have the ANSI C header files. */ #undef STDC_HEADERS /* Path to suexec binary */ #undef SUEXEC_BIN /* Enable extensions on AIX 3, Interix. */ #ifndef _ALL_SOURCE # undef _ALL_SOURCE #endif /* Enable GNU extensions on systems that have them. */ #ifndef _GNU_SOURCE # undef _GNU_SOURCE #endif /* Enable threading extensions on Solaris. */ #ifndef _POSIX_PTHREAD_SEMANTICS # undef _POSIX_PTHREAD_SEMANTICS #endif /* Enable extensions on HP NonStop. */ #ifndef _TANDEM_SOURCE # undef _TANDEM_SOURCE #endif /* Enable general extensions on Solaris. */ #ifndef __EXTENSIONS__ # undef __EXTENSIONS__ #endif /* Define to 1 if on MINIX. */ #undef _MINIX /* Define to 2 if the system does not provide POSIX.1 features except with this defined. */ #undef _POSIX_1_SOURCE /* Define to 1 if you need to in order for `stat' and other things to work. */ #undef _POSIX_SOURCE /* Define to empty if `const' does not conform to ANSI C. */ #undef const /* Define to 'int' if doesn't define it for us */ #undef rlim_t httpd-2.4.41/include/ap_regex.h0000644000000000000500000002461313243304246014631 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* This code is based on pcreposix.h from the PCRE Library distribution, * as originally written by Philip Hazel , and forked by * the Apache HTTP Server project to provide POSIX-style regex function * wrappers around underlying PCRE library functions for httpd. * * The original source file pcreposix.h is copyright and licensed as follows; Copyright (c) 1997-2004 University of Cambridge ----------------------------------------------------------------------------- Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of the University of Cambridge nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. ----------------------------------------------------------------------------- */ /** * @file ap_regex.h * @brief Apache Regex defines */ #ifndef AP_REGEX_H #define AP_REGEX_H #include "apr.h" /* Allow for C++ users */ #ifdef __cplusplus extern "C" { #endif /* Options for ap_regcomp, ap_regexec, and ap_rxplus versions: */ #define AP_REG_ICASE 0x01 /** use a case-insensitive match */ #define AP_REG_NEWLINE 0x02 /** don't match newlines against '.' etc */ #define AP_REG_NOTBOL 0x04 /** ^ will not match against start-of-string */ #define AP_REG_NOTEOL 0x08 /** $ will not match against end-of-string */ #define AP_REG_EXTENDED (0) /** unused */ #define AP_REG_NOSUB (0) /** unused */ #define AP_REG_MULTI 0x10 /* perl's /g (needs fixing) */ #define AP_REG_NOMEM 0x20 /* nomem in our code */ #define AP_REG_DOTALL 0x40 /* perl's /s flag */ #define AP_REG_DOLLAR_ENDONLY 0x200 /* '$' matches at end of subject string only */ #define AP_REG_MATCH "MATCH_" /** suggested prefix for ap_regname */ /* Error values: */ enum { AP_REG_ASSERT = 1, /** internal error ? */ AP_REG_ESPACE, /** failed to get memory */ AP_REG_INVARG, /** invalid argument */ AP_REG_NOMATCH /** match failed */ }; /* The structure representing a compiled regular expression. */ typedef struct { void *re_pcre; int re_nsub; apr_size_t re_erroffset; } ap_regex_t; /* The structure in which a captured offset is returned. */ typedef struct { int rm_so; int rm_eo; } ap_regmatch_t; /* The functions */ /** * Get default compile flags * @return Bitwise OR of AP_REG_* flags */ AP_DECLARE(int) ap_regcomp_get_default_cflags(void); /** * Set default compile flags * @param cflags Bitwise OR of AP_REG_* flags */ AP_DECLARE(void) ap_regcomp_set_default_cflags(int cflags); /** * Get the AP_REG_* corresponding to the string. * @param name The name (i.e. AP_REG_) * @return The AP_REG_*, or zero if the string is unknown * */ AP_DECLARE(int) ap_regcomp_default_cflag_by_name(const char *name); /** * Compile a regular expression. * @param preg Returned compiled regex * @param regex The regular expression string * @param cflags Bitwise OR of AP_REG_* flags (ICASE and NEWLINE supported, * other flags are ignored) * @return Zero on success or non-zero on error */ AP_DECLARE(int) ap_regcomp(ap_regex_t *preg, const char *regex, int cflags); /** * Match a NUL-terminated string against a pre-compiled regex. * @param preg The pre-compiled regex * @param string The string to match * @param nmatch Provide information regarding the location of any matches * @param pmatch Provide information regarding the location of any matches * @param eflags Bitwise OR of AP_REG_* flags (NOTBOL and NOTEOL supported, * other flags are ignored) * @return 0 for successful match, \p AP_REG_NOMATCH otherwise */ AP_DECLARE(int) ap_regexec(const ap_regex_t *preg, const char *string, apr_size_t nmatch, ap_regmatch_t *pmatch, int eflags); /** * Match a string with given length against a pre-compiled regex. The string * does not need to be NUL-terminated. * @param preg The pre-compiled regex * @param buff The string to match * @param len Length of the string to match * @param nmatch Provide information regarding the location of any matches * @param pmatch Provide information regarding the location of any matches * @param eflags Bitwise OR of AP_REG_* flags (NOTBOL and NOTEOL supported, * other flags are ignored) * @return 0 for successful match, AP_REG_NOMATCH otherwise */ AP_DECLARE(int) ap_regexec_len(const ap_regex_t *preg, const char *buff, apr_size_t len, apr_size_t nmatch, ap_regmatch_t *pmatch, int eflags); /** * Return the error code returned by regcomp or regexec into error messages * @param errcode the error code returned by regexec or regcomp * @param preg The precompiled regex * @param errbuf A buffer to store the error in * @param errbuf_size The size of the buffer */ AP_DECLARE(apr_size_t) ap_regerror(int errcode, const ap_regex_t *preg, char *errbuf, apr_size_t errbuf_size); /** * Return an array of named regex backreferences * @param preg The precompiled regex * @param names The array to which the names will be added * @param upper If non zero, uppercase the names */ AP_DECLARE(int) ap_regname(const ap_regex_t *preg, apr_array_header_t *names, const char *prefix, int upper); /** Destroy a pre-compiled regex. * @param preg The pre-compiled regex to free. */ AP_DECLARE(void) ap_regfree(ap_regex_t *preg); /* ap_rxplus: higher-level regexps */ typedef struct { ap_regex_t rx; apr_uint32_t flags; const char *subs; const char *match; apr_size_t nmatch; ap_regmatch_t *pmatch; } ap_rxplus_t; /** * Compile a pattern into a regexp. * supports perl-like formats * match-string * /match-string/flags * s/match-string/replacement-string/flags * Intended to support more perl-like stuff as and when round tuits happen * match-string is anything supported by ap_regcomp * replacement-string is a substitution string as supported in ap_pregsub * flags should correspond with perl syntax: treat failure to do so as a bug * (documentation TBD) * @param pool Pool to allocate from * @param pattern Pattern to compile * @return Compiled regexp, or NULL in case of compile/syntax error */ AP_DECLARE(ap_rxplus_t*) ap_rxplus_compile(apr_pool_t *pool, const char *pattern); /** * Apply a regexp operation to a string. * @param pool Pool to allocate from * @param rx The regex match to apply * @param pattern The string to apply it to * NOTE: This MUST be kept in scope to use regexp memory * @param newpattern The modified string (ignored if the operation doesn't * modify the string) * @return Number of times a match happens. Normally 0 (no match) or 1 * (match found), but may be greater if a transforming pattern * is applied with the 'g' flag. */ AP_DECLARE(int) ap_rxplus_exec(apr_pool_t *pool, ap_rxplus_t *rx, const char *pattern, char **newpattern); #ifdef DOXYGEN /** * Number of matches in the regexp operation's memory * This may be 0 if no match is in memory, or up to nmatch from compilation * @param rx The regexp * @return Number of matches in memory */ AP_DECLARE(int) ap_rxplus_nmatch(ap_rxplus_t *rx); #else #define ap_rxplus_nmatch(rx) (((rx)->match != NULL) ? (rx)->nmatch : 0) #endif /** * Get a pointer to a match from regex memory * NOTE: this relies on the match pattern from the last call to * ap_rxplus_exec still being valid (i.e. not freed or out-of-scope) * @param rx The regexp * @param n The match number to retrieve (must be between 0 and nmatch) * @param len Returns the length of the match. * @param match Returns the match pattern */ AP_DECLARE(void) ap_rxplus_match(ap_rxplus_t *rx, int n, int *len, const char **match); /** * Get a match from regex memory in a string copy * NOTE: this relies on the match pattern from the last call to * ap_rxplus_exec still being valid (i.e. not freed or out-of-scope) * @param pool Pool to allocate from * @param rx The regexp * @param n The match number to retrieve (must be between 0 and nmatch) * @return The matched string */ AP_DECLARE(char*) ap_rxplus_pmatch(apr_pool_t *pool, ap_rxplus_t *rx, int n); #ifdef __cplusplus } /* extern "C" */ #endif #endif /* AP_REGEX_T */ httpd-2.4.41/include/scoreboard.h0000644000000000000500000002336013472754234015172 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file scoreboard.h * @brief Apache scoreboard library */ #ifndef APACHE_SCOREBOARD_H #define APACHE_SCOREBOARD_H #ifdef __cplusplus extern "C" { #endif #if APR_HAVE_SYS_TIME_H #include #include #endif #include "ap_config.h" #include "http_config.h" #include "apr_thread_proc.h" #include "apr_portable.h" #include "apr_shm.h" #include "apr_optional.h" /* Scoreboard file, if there is one */ #ifndef DEFAULT_SCOREBOARD #define DEFAULT_SCOREBOARD "logs/apache_runtime_status" #endif /* Scoreboard info on a process is, for now, kept very brief --- * just status value and pid (the latter so that the caretaker process * can properly update the scoreboard when a process dies). We may want * to eventually add a separate set of long_score structures which would * give, for each process, the number of requests serviced, and info on * the current, or most recent, request. * * Status values: */ #define SERVER_DEAD 0 #define SERVER_STARTING 1 /* Server Starting up */ #define SERVER_READY 2 /* Waiting for connection (or accept() lock) */ #define SERVER_BUSY_READ 3 /* Reading a client request */ #define SERVER_BUSY_WRITE 4 /* Processing a client request */ #define SERVER_BUSY_KEEPALIVE 5 /* Waiting for more requests via keepalive */ #define SERVER_BUSY_LOG 6 /* Logging the request */ #define SERVER_BUSY_DNS 7 /* Looking up a hostname */ #define SERVER_CLOSING 8 /* Closing the connection */ #define SERVER_GRACEFUL 9 /* server is gracefully finishing request */ #define SERVER_IDLE_KILL 10 /* Server is cleaning up idle children. */ #define SERVER_NUM_STATUS 11 /* number of status settings */ /* Type used for generation indicies. Startup and every restart cause a * new generation of children to be spawned. Children within the same * generation share the same configuration information -- pointers to stuff * created at config time in the parent are valid across children. However, * this can't work effectively with non-forked architectures. So while the * arrays in the scoreboard never change between the parent and forked * children, so they do not require shm storage, the contents of the shm * may contain no pointers. */ typedef int ap_generation_t; /* Is the scoreboard shared between processes or not? * Set by the MPM when the scoreboard is created. */ typedef enum { SB_NOT_SHARED = 1, SB_SHARED = 2 } ap_scoreboard_e; /* stuff which is worker specific */ typedef struct worker_score worker_score; struct worker_score { #if APR_HAS_THREADS apr_os_thread_t tid; #endif int thread_num; /* With some MPMs (e.g., worker), a worker_score can represent * a thread in a terminating process which is no longer * represented by the corresponding process_score. These MPMs * should set pid and generation fields in the worker_score. */ pid_t pid; ap_generation_t generation; unsigned char status; unsigned short conn_count; apr_off_t conn_bytes; unsigned long access_count; apr_off_t bytes_served; unsigned long my_access_count; apr_off_t my_bytes_served; apr_time_t start_time; apr_time_t stop_time; apr_time_t last_used; #ifdef HAVE_TIMES struct tms times; #endif char client[32]; /* DEPRECATED: Keep 'em small... */ char request[64]; /* We just want an idea... */ char vhost[32]; /* What virtual host is being accessed? */ char protocol[16]; /* What protocol is used on the connection? */ apr_time_t duration; char client64[64]; }; typedef struct { int server_limit; int thread_limit; ap_generation_t running_generation; /* the generation of children which * should still be serving requests. */ apr_time_t restart_time; #ifdef HAVE_TIMES struct tms times; #endif } global_score; /* stuff which the parent generally writes and the children rarely read */ typedef struct process_score process_score; struct process_score { pid_t pid; ap_generation_t generation; /* generation of this child */ char quiescing; /* the process whose pid is stored above is * going down gracefully */ char not_accepting; /* the process is busy and is not accepting more * connections (for async MPMs) */ apr_uint32_t connections; /* total connections (for async MPMs) */ apr_uint32_t write_completion; /* async connections doing write completion */ apr_uint32_t lingering_close; /* async connections in lingering close */ apr_uint32_t keep_alive; /* async connections in keep alive */ apr_uint32_t suspended; /* connections suspended by some module */ int bucket; /* Listener bucket used by this child; this field is DEPRECATED * and no longer updated by the MPMs (i.e. always zero). */ }; /* Scoreboard is now in 'local' memory, since it isn't updated once created, * even in forked architectures. Child created-processes (non-fork) will * set up these indicies into the (possibly relocated) shmem records. */ typedef struct { global_score *global; process_score *parent; worker_score **servers; } scoreboard; typedef struct ap_sb_handle_t ap_sb_handle_t; /* * Creation and deletion (internal) */ int ap_create_scoreboard(apr_pool_t *p, ap_scoreboard_e t); apr_status_t ap_cleanup_scoreboard(void *d); /* * APIs for MPMs and other modules */ AP_DECLARE(int) ap_exists_scoreboard_image(void); AP_DECLARE(void) ap_increment_counts(ap_sb_handle_t *sbh, request_rec *r); AP_DECLARE(void) ap_set_conn_count(ap_sb_handle_t *sb, request_rec *r, unsigned short conn_count); AP_DECLARE(apr_status_t) ap_reopen_scoreboard(apr_pool_t *p, apr_shm_t **shm, int detached); AP_DECLARE(void) ap_init_scoreboard(void *shared_score); AP_DECLARE(int) ap_calc_scoreboard_size(void); AP_DECLARE(void) ap_create_sb_handle(ap_sb_handle_t **new_sbh, apr_pool_t *p, int child_num, int thread_num); AP_DECLARE(void) ap_update_sb_handle(ap_sb_handle_t *sbh, int child_num, int thread_num); AP_DECLARE(int) ap_find_child_by_pid(apr_proc_t *pid); AP_DECLARE(int) ap_update_child_status(ap_sb_handle_t *sbh, int status, request_rec *r); AP_DECLARE(int) ap_update_child_status_from_indexes(int child_num, int thread_num, int status, request_rec *r); AP_DECLARE(int) ap_update_child_status_from_conn(ap_sb_handle_t *sbh, int status, conn_rec *c); AP_DECLARE(int) ap_update_child_status_from_server(ap_sb_handle_t *sbh, int status, conn_rec *c, server_rec *s); AP_DECLARE(int) ap_update_child_status_descr(ap_sb_handle_t *sbh, int status, const char *descr); AP_DECLARE(void) ap_time_process_request(ap_sb_handle_t *sbh, int status); AP_DECLARE(int) ap_update_global_status(void); AP_DECLARE(worker_score *) ap_get_scoreboard_worker(ap_sb_handle_t *sbh); /** Return a pointer to the worker_score for a given child, thread pair. * @param child_num The child number. * @param thread_num The thread number. * @return A pointer to the worker_score structure. * @deprecated This function is deprecated, use ap_copy_scoreboard_worker instead. */ AP_DECLARE(worker_score *) ap_get_scoreboard_worker_from_indexes(int child_num, int thread_num); /** Copy the contents of a worker scoreboard entry. The contents of * the worker_score structure are copied verbatim into the dest * structure. * @param dest Output parameter. * @param child_num The child number. * @param thread_num The thread number. */ AP_DECLARE(void) ap_copy_scoreboard_worker(worker_score *dest, int child_num, int thread_num); AP_DECLARE(process_score *) ap_get_scoreboard_process(int x); AP_DECLARE(global_score *) ap_get_scoreboard_global(void); AP_DECLARE_DATA extern scoreboard *ap_scoreboard_image; AP_DECLARE_DATA extern const char *ap_scoreboard_fname; AP_DECLARE_DATA extern int ap_extended_status; AP_DECLARE_DATA extern int ap_mod_status_reqtail; /* * Command handlers [internal] */ const char *ap_set_scoreboard(cmd_parms *cmd, void *dummy, const char *arg); const char *ap_set_extended_status(cmd_parms *cmd, void *dummy, int arg); const char *ap_set_reqtail(cmd_parms *cmd, void *dummy, int arg); /* Hooks */ /** * Hook for post scoreboard creation, pre mpm. * @param p Apache pool to allocate from. * @param sb_type * @ingroup hooks * @return OK or DECLINE on success; anything else is a error */ AP_DECLARE_HOOK(int, pre_mpm, (apr_pool_t *p, ap_scoreboard_e sb_type)) /* for time_process_request() in http_main.c */ #define START_PREQUEST 1 #define STOP_PREQUEST 2 #ifdef __cplusplus } #endif #endif /* !APACHE_SCOREBOARD_H */ httpd-2.4.41/include/ap_mpm.h0000644000000000000500000002354111722706157014316 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ap_mpm.h * @brief Apache Multi-Processing Module library * * @defgroup APACHE_CORE_MPM Multi-Processing Module library * @ingroup APACHE_CORE * @{ */ #ifndef AP_MPM_H #define AP_MPM_H #include "apr_thread_proc.h" #include "httpd.h" #include "scoreboard.h" #ifdef __cplusplus extern "C" { #endif /* The MPM, "multi-processing model" provides an abstraction of the interface with the OS for distributing incoming connections to threads/process for processing. http_main invokes the MPM, and the MPM runs until a shutdown/restart has been indicated. The MPM calls out to the apache core via the ap_process_connection function when a connection arrives. The MPM may or may not be multithreaded. In the event that it is multithreaded, at any instant it guarantees a 1:1 mapping of threads ap_process_connection invocations. Note: In the future it will be possible for ap_process_connection to return to the MPM prior to finishing the entire connection; and the MPM will proceed with asynchronous handling for the connection; in the future the MPM may call ap_process_connection again -- but does not guarantee it will occur on the same thread as the first call. The MPM further guarantees that no asynchronous behaviour such as longjmps and signals will interfere with the user code that is invoked through ap_process_connection. The MPM may reserve some signals for its use (i.e. SIGUSR1), but guarantees that these signals are ignored when executing outside the MPM code itself. (This allows broken user code that does not handle EINTR to function properly.) The suggested server restart and stop behaviour will be "graceful". However the MPM may choose to terminate processes when the user requests a non-graceful restart/stop. When this occurs, the MPM kills all threads with extreme prejudice, and destroys the pchild pool. User cleanups registered in the pchild apr_pool_t will be invoked at this point. (This can pose some complications, the user cleanups are asynchronous behaviour not unlike longjmp/signal... but if the admin is asking for a non-graceful shutdown, how much effort should we put into doing it in a nice way?) unix/posix notes: - The MPM does not set a SIGALRM handler, user code may use SIGALRM. But the preferred method of handling timeouts is to use the timeouts provided by the BUFF abstraction. - The proper setting for SIGPIPE is SIG_IGN, if user code changes it for any of their own processing, it must be restored to SIG_IGN prior to executing or returning to any apache code. TODO: add SIGPIPE debugging check somewhere to make sure it's SIG_IGN */ /** * Pass control to the MPM for steady-state processing. It is responsible * for controlling the parent and child processes. It will run until a * restart/shutdown is indicated. * @param pconf the configuration pool, reset before the config file is read * @param plog the log pool, reset after the config file is read * @param server_conf the global server config. * @return DONE for shutdown OK otherwise. */ AP_DECLARE_HOOK(int, mpm, (apr_pool_t *pconf, apr_pool_t *plog, server_rec *server_conf)) /** * Spawn a process with privileges that another module has requested * @param r The request_rec of the current request * @param newproc The resulting process handle. * @param progname The program to run * @param args the arguments to pass to the new program. The first * one should be the program name. * @param env The new environment apr_table_t for the new process. This * should be a list of NULL-terminated strings. * @param attr the procattr we should use to determine how to create the new * process * @param p The pool to use. */ AP_DECLARE(apr_status_t) ap_os_create_privileged_process( const request_rec *r, apr_proc_t *newproc, const char *progname, const char * const *args, const char * const *env, apr_procattr_t *attr, apr_pool_t *p); /* Subtypes/Values for AP_MPMQ_IS_THREADED and AP_MPMQ_IS_FORKED */ #define AP_MPMQ_NOT_SUPPORTED 0 /* This value specifies that an */ /* MPM is not capable of */ /* threading or forking. */ #define AP_MPMQ_STATIC 1 /* This value specifies that */ /* an MPM is using a static */ /* number of threads or daemons */ #define AP_MPMQ_DYNAMIC 2 /* This value specifies that */ /* an MPM is using a dynamic */ /* number of threads or daemons */ /* Values returned for AP_MPMQ_MPM_STATE */ #define AP_MPMQ_STARTING 0 #define AP_MPMQ_RUNNING 1 #define AP_MPMQ_STOPPING 2 #define AP_MPMQ_MAX_DAEMON_USED 1 /* Max # of daemons used so far */ #define AP_MPMQ_IS_THREADED 2 /* MPM can do threading */ #define AP_MPMQ_IS_FORKED 3 /* MPM can do forking */ #define AP_MPMQ_HARD_LIMIT_DAEMONS 4 /* The compiled max # daemons */ #define AP_MPMQ_HARD_LIMIT_THREADS 5 /* The compiled max # threads */ #define AP_MPMQ_MAX_THREADS 6 /* # of threads/child by config */ #define AP_MPMQ_MIN_SPARE_DAEMONS 7 /* Min # of spare daemons */ #define AP_MPMQ_MIN_SPARE_THREADS 8 /* Min # of spare threads */ #define AP_MPMQ_MAX_SPARE_DAEMONS 9 /* Max # of spare daemons */ #define AP_MPMQ_MAX_SPARE_THREADS 10 /* Max # of spare threads */ #define AP_MPMQ_MAX_REQUESTS_DAEMON 11 /* Max # of requests per daemon */ #define AP_MPMQ_MAX_DAEMONS 12 /* Max # of daemons by config */ #define AP_MPMQ_MPM_STATE 13 /* starting, running, stopping */ #define AP_MPMQ_IS_ASYNC 14 /* MPM can process async connections */ #define AP_MPMQ_GENERATION 15 /* MPM generation */ #define AP_MPMQ_HAS_SERF 16 /* MPM can drive serf internally */ /** * Query a property of the current MPM. * @param query_code One of APM_MPMQ_* * @param result A location to place the result of the query * @return APR_EGENERAL if an mpm-query hook has not been registered; * APR_SUCCESS or APR_ENOTIMPL otherwise * @remark The MPM doesn't register the implementing hook until the * register_hooks hook is called, so modules cannot use ap_mpm_query() * until after that point. * @fn int ap_mpm_query(int query_code, int *result) */ AP_DECLARE(apr_status_t) ap_mpm_query(int query_code, int *result); typedef void (ap_mpm_callback_fn_t)(void *baton); /* only added support in the Event MPM.... check for APR_ENOTIMPL */ AP_DECLARE(apr_status_t) ap_mpm_register_timed_callback(apr_time_t t, ap_mpm_callback_fn_t *cbfn, void *baton); typedef enum mpm_child_status { MPM_CHILD_STARTED, MPM_CHILD_EXITED, MPM_CHILD_LOST_SLOT } mpm_child_status; /** * Allow a module to remain aware of MPM child process state changes, * along with the generation and scoreboard slot of the process changing * state. * * With some MPMs (event and worker), an active MPM child process may lose * its scoreboard slot if the child process is exiting and the scoreboard * slot is needed by other processes. When this occurs, the hook will be * called with the MPM_CHILD_LOST_SLOT state. * * @param s The main server_rec. * @param pid The id of the MPM child process. * @param gen The server generation of that child process. * @param slot The scoreboard slot number, or -1. It will be -1 when an * MPM child process exits, and that child had previously lost its * scoreboard slot. * @param state One of the mpm_child_status values. Modules should ignore * unrecognized values. */ AP_DECLARE_HOOK(void,child_status,(server_rec *s, pid_t pid, ap_generation_t gen, int slot, mpm_child_status state)) /** * Allow a module to be notified when the last child process of a generation * exits. * * @param s The main server_rec. * @param gen The server generation which is now completely finished. */ AP_DECLARE_HOOK(void,end_generation,(server_rec *s, ap_generation_t gen)) /* Defining GPROF when compiling uses the moncontrol() function to * disable gprof profiling in the parent, and enable it only for * request processing in children (or in one_process mode). It's * absolutely required to get useful gprof results under linux * because the profile itimers and such are disabled across a * fork(). It's probably useful elsewhere as well. */ #ifdef GPROF extern void moncontrol(int); #define AP_MONCONTROL(x) moncontrol(x) #else #define AP_MONCONTROL(x) #endif #ifdef AP_ENABLE_EXCEPTION_HOOK typedef struct ap_exception_info_t { int sig; pid_t pid; } ap_exception_info_t; AP_DECLARE_HOOK(int,fatal_exception,(ap_exception_info_t *ei)) #endif /*AP_ENABLE_EXCEPTION_HOOK*/ #ifdef __cplusplus } #endif #endif /** @} */ httpd-2.4.41/include/ap_mmn.h0000644000000000000500000010446013514436612014311 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ap_mmn.h * @brief Module Magic Number * * @defgroup APACHE_CORE_MMN Module Magic Number * @ingroup APACHE_CORE * @{ */ #ifndef APACHE_AP_MMN_H #define APACHE_AP_MMN_H /* * MODULE_MAGIC_NUMBER_MAJOR * Major API changes that could cause compatibility problems for older modules * such as structure size changes. No binary compatibility is possible across * a change in the major version. * * MODULE_MAGIC_NUMBER_MINOR * Minor API changes that do not cause binary compatibility problems. * Should be reset to 0 when upgrading MODULE_MAGIC_NUMBER_MAJOR. * * See the AP_MODULE_MAGIC_AT_LEAST macro below for an example. */ /* * 20010224 (2.0.13-dev) MODULE_MAGIC_COOKIE reset to "AP20" * 20010523 (2.0.19-dev) bump for scoreboard structure reordering * 20010627 (2.0.19-dev) more API changes than I can count * 20010726 (2.0.22-dev) more big API changes * 20010808 (2.0.23-dev) dir d_is_absolute bit introduced, bucket changes, etc * 20010825 (2.0.25-dev) removed d_is_absolute, introduced map_to_storage hook * 20011002 (2.0.26-dev) removed 1.3-deprecated request_rec.content_language * 20011127 (2.0.29-dev) bump for postconfig hook change, and removal of * socket from connection record * 20011212 (2.0.30-dev) bump for new used_path_info member of request_rec * 20011218 (2.0.30-dev) bump for new sbh member of conn_rec, different * declarations for scoreboard, new parameter to * create_connection hook * 20020102 (2.0.30-dev) bump for changed type of limit_req_body in * core_dir_config * 20020109 (2.0.31-dev) bump for changed shm and scoreboard declarations * 20020111 (2.0.31-dev) bump for ETag fields added at end of cor_dir_config * 20020114 (2.0.31-dev) mod_dav changed how it asks its provider to fulfill * a GET request * 20020118 (2.0.31-dev) Input filtering split of blocking and mode * 20020127 (2.0.31-dev) bump for pre_mpm hook change * 20020128 (2.0.31-dev) bump for pre_config hook change * 20020218 (2.0.33-dev) bump for AddOutputFilterByType directive * 20020220 (2.0.33-dev) bump for scoreboard.h structure change * 20020302 (2.0.33-dev) bump for protocol_filter additions. * 20020306 (2.0.34-dev) bump for filter type renames. * 20020318 (2.0.34-dev) mod_dav's API for REPORT generation changed * 20020319 (2.0.34-dev) M_INVALID changed, plus new M_* methods for RFC 3253 * 20020327 (2.0.35-dev) Add parameter to quick_handler hook * 20020329 (2.0.35-dev) bump for addition of freelists to bucket API * 20020329.1 (2.0.36) minor bump for new arg to opt fn ap_cgi_build_command * 20020506 (2.0.37-dev) Removed r->boundary in request_rec. * 20020529 (2.0.37-dev) Standardized the names of some apr_pool_*_set funcs * 20020602 (2.0.37-dev) Bucket API change (metadata buckets) * 20020612 (2.0.38-dev) Changed server_rec->[keep_alive_]timeout to apr time * 20020625 (2.0.40-dev) Changed conn_rec->keepalive to an enumeration * 20020628 (2.0.40-dev) Added filter_init to filter registration functions * 20020903 (2.0.41-dev) APR's error constants changed * 20020903.1 (2.1.0-dev) allow_encoded_slashes added to core_dir_config * 20020903.2 (2.0.46-dev) add ap_escape_logitem * 20030213.1 (2.1.0-dev) changed log_writer optional fn's to return previous * handler * 20030821 (2.1.0-dev) bumped mod_include's entire API * 20030821.1 (2.1.0-dev) added XHTML doctypes * 20030821.2 (2.1.0-dev) added ap_escape_errorlog_item * 20030821.3 (2.1.0-dev) added ap_get_server_revision / ap_version_t * 20040425 (2.1.0-dev) removed ap_add_named_module API * changed ap_add_module, ap_add_loaded_module, * ap_setup_prelinked_modules, * ap_process_resource_config * 20040425.1 (2.1.0-dev) Added ap_module_symbol_t and * ap_prelinked_module_symbols * 20050101.0 (2.1.2-dev) Axed misnamed http_method for http_scheme * (which it was!) * 20050127.0 (2.1.3-dev) renamed regex_t->ap_regex_t, * regmatch_t->ap_regmatch_t, REG_*->AP_REG_*, * removed reg* in place of ap_reg*; added ap_regex.h * 20050217.0 (2.1.3-dev) Axed find_child_by_pid, mpm_*_completion_context * (winnt mpm) symbols from the public sector, and * decorated real_exit_code with ap_ in the win32/os.h. * 20050305.0 (2.1.4-dev) added pid and generation fields to worker_score * 20050305.1 (2.1.5-dev) added ap_vhost_iterate_given_conn. * 20050305.2 (2.1.5-dev) added AP_INIT_TAKE_ARGV. * 20050305.3 (2.1.5-dev) added Protocol Framework. * 20050701.0 (2.1.7-dev) Bump MODULE_MAGIC_COOKIE to "AP21"! * 20050701.1 (2.1.7-dev) trace_enable member added to core server_config * 20050708.0 (2.1.7-dev) Bump MODULE_MAGIC_COOKIE to "AP22"! * 20050708.1 (2.1.7-dev) add proxy request_status hook (minor) * 20050919.0 (2.1.8-dev) mod_ssl ssl_ext_list optional function added * 20051005.0 (2.1.8-dev) NET_TIME filter eliminated * 20051005.0 (2.3.0-dev) Bump MODULE_MAGIC_COOKIE to "AP24"! * 20051115.0 (2.3.0-dev) Added use_canonical_phys_port to core_dir_config * 20060110.0 (2.3.0-dev) Conversion of Authz to be provider based * addition of * removal of Satisfy, Allow, Deny, Order * 20060110.1 (2.3.0-dev) minex and minex_set members added to * cache_server_conf (minor) * 20060110.2 (2.3.0-dev) flush_packets and flush_wait members added to * proxy_server (minor) * 20060110.3 (2.3.0-dev) added inreslist member to proxy_conn_rec (minor) * 20060110.4 (2.3.0-dev) Added server_scheme member to server_rec (minor) * 20060905.0 (2.3.0-dev) Replaced ap_get_server_version() with * ap_get_server_banner() and ap_get_server_description() * 20060905.1 (2.3.0-dev) Enable retry=0 for the worker (minor) * 20060905.2 (2.3.0-dev) Added ap_all_available_mutexes_string, * ap_available_mutexes_string and * ap_parse_mutex() * 20060905.3 (2.3.0-dev) Added conn_rec::clogging_input_filters. * 20060905.4 (2.3.0-dev) Added proxy_balancer::sticky_path. * 20060905.5 (2.3.0-dev) Added ap_mpm_safe_kill() * 20070823.0 (2.3.0-dev) Removed ap_all_available_mutexes_string, * ap_available_mutexes_string for macros * 20070823.1 (2.3.0-dev) add ap_send_interim_response() * 20071023.0 (2.3.0-dev) add ap_get_scoreboard(sbh) split from the less * conventional ap_get_scoreboard(proc, thread) * 20071023.1 (2.3.0-dev) Add flags field to struct proxy_alias * 20071023.2 (2.3.0-dev) Add ap_mod_status_reqtail * 20071023.3 (2.3.0-dev) Declare ap_time_process_request() as part of the * public scoreboard API. * 20071108.1 (2.3.0-dev) Add the optional kept_body brigade to request_rec * 20071108.2 (2.3.0-dev) Add st and keep fields to struct util_ldap_connection_t * 20071108.3 (2.3.0-dev) Add API guarantee for adding connection filters * with non-NULL request_rec pointer (ap_add_*_filter*) * 20071108.4 (2.3.0-dev) Add ap_proxy_ssl_connection_cleanup * 20071108.5 (2.3.0-dev) Add *scpool to proxy_conn_rec structure * 20071108.6 (2.3.0-dev) Add *r and need_flush to proxy_conn_rec structure * 20071108.7 (2.3.0-dev) Add *ftp_directory_charset to proxy_dir_conf * 20071108.8 (2.3.0-dev) Add optional function ap_logio_add_bytes_in() to mog_logio * 20071108.9 (2.3.0-dev) Add chroot support to unixd_config * 20071108.10(2.3.0-dev) Introduce new ap_expr API * 20071108.11(2.3.0-dev) Revise/Expand new ap_expr API * 20071108.12(2.3.0-dev) Remove ap_expr_clone from the API (same day it was added) * 20080403.0 (2.3.0-dev) Add condition field to core dir config * 20080403.1 (2.3.0-dev) Add authn/z hook and provider registration wrappers. * 20080403.2 (2.3.0-dev) Add ap_escape_path_segment_buffer() and ap_unescape_all(). * 20080407.0 (2.3.0-dev) Remove ap_graceful_stop_signalled. * 20080407.1 Deprecate ap_cache_cacheable_hdrs_out and add two * generalized ap_cache_cacheable_headers_(in|out). * 20080528.0 (2.3.0-dev) Switch order of ftp_directory_charset and * interpolate_env in proxy_dir_conf. * Rationale: see r661069. * 20080528.1 (2.3.0-dev) add has_realm_hash() to authn_provider struct * 20080722.0 (2.3.0-dev) remove has_realm_hash() from authn_provider struct * 20080722.1 (2.3.0-dev) Add conn_timeout and conn_timeout_set to * proxy_worker struct. * 20080722.2 (2.3.0-dev) Add scolonsep to proxy_balancer * 20080829.0 (2.3.0-dev) Add cookie attributes when removing cookies * 20080830.0 (2.3.0-dev) Cookies can be set on headers_out and err_headers_out * 20080920.0 (2.3.0-dev) Add ap_mpm_register_timed_callback. * 20080920.1 (2.3.0-dev) Export mod_rewrite.h in the public API. * 20080920.2 (2.3.0-dev) Added ap_timeout_parameter_parse to util.c / httpd.h * 20081101.0 (2.3.0-dev) Remove unused AUTHZ_GROUP_NOTE define. * 20081102.0 (2.3.0-dev) Remove authz_provider_list, authz_request_state, * and AUTHZ_ACCESS_PASSED_NOTE. * 20081104.0 (2.3.0-dev) Remove r and need_flush fields from proxy_conn_rec * as they are no longer used and add * ap_proxy_buckets_lifetime_transform to mod_proxy.h * 20081129.0 (2.3.0-dev) Move AP_FILTER_ERROR and AP_NOBODY_READ|WROTE * from util_filter.h to httpd.h and change their * numeric values so they do not overlap with other * potential status codes * 20081201.0 (2.3.0-dev) Rename several APIs to include ap_ prefix. * 20081201.1 (2.3.0-dev) Added ap_args_to_table and ap_body_to_table. * 20081212.0 (2.3.0-dev) Remove sb_type from process_score in scoreboard.h. * 20081231.0 (2.3.0-dev) Switch ap_escape_html API: add ap_escape_html2, * and make ap_escape_html a macro for it. * 20090130.0 (2.3.2-dev) Add ap_ prefix to unixd_setup_child(). * 20090131.0 (2.3.2-dev) Remove ap_default_type(), disable DefaultType * 20090208.0 (2.3.2-dev) Add conn_rec::current_thread. * 20090208.1 (2.3.3-dev) Add ap_retained_data_create()/ap_retained_data_get() * 20090401.0 (2.3.3-dev) Remove ap_threads_per_child, ap_max_daemons_limit, * ap_my_generation, etc. ap_mpm_query() can't be called * until after the register-hooks phase. * 20090401.1 (2.3.3-dev) Protected log.c internals, http_log.h changes * 20090401.2 (2.3.3-dev) Added tmp_flush_bb to core_output_filter_ctx_t * 20090401.3 (2.3.3-dev) Added DAV options provider to mod_dav.h * 20090925.0 (2.3.3-dev) Added server_rec::context and added *server_rec * param to ap_wait_or_timeout() * 20090925.1 (2.3.3-dev) Add optional function ap_logio_get_last_bytes() to * mod_logio * 20091011.0 (2.3.3-dev) Move preserve_host{,_set} from proxy_server_conf to * proxy_dir_conf * 20091011.1 (2.3.3-dev) add debug_level to util_ldap_state_t * 20091031.0 (2.3.3-dev) remove public LDAP referral-related macros * 20091119.0 (2.3.4-dev) dav_error interface uses apr_status_t parm, not errno * 20091119.1 (2.3.4-dev) ap_mutex_register(), ap_{proc,global}_mutex_create() * 20091229.0 (2.3.5-dev) Move allowed_connect_ports from proxy_server_conf * to mod_proxy_connect * 20091230.0 (2.3.5-dev) Move ftp_directory_charset from proxy_dir_conf * to proxy_ftp_dir_conf(mod_proxy_ftp) * 20091230.1 (2.3.5-dev) add util_ldap_state_t.opTimeout * 20091230.2 (2.3.5-dev) add ap_get_server_name_for_url() * 20091230.3 (2.3.6-dev) add ap_parse_log_level() * 20091230.4 (2.3.6-dev) export ap_process_request_after_handler() for mod_serf * 20100208.0 (2.3.6-dev) ap_socache_provider_t API changes to store and iterate * 20100208.1 (2.3.6-dev) Added forward member to proxy_conn_rec * 20100208.2 (2.3.6-dev) Added ap_log_command_line(). * 20100223.0 (2.3.6-dev) LDAP client_certs per-server moved to per-dir * 20100223.1 (2.3.6-dev) Added ap_process_fnmatch_configs(). * 20100504.0 (2.3.6-dev) Added name arg to ap_{proc,global}_mutex_create(). * 20100604.0 (2.3.6-dev) Remove unused core_dir_config::loglevel * 20100606.0 (2.3.6-dev) Make ap_log_*error macro wrappers around * ap_log_*error_ to save argument preparation and * function call overhead. * Introduce per-module loglevels, including new APIs * APLOG_USE_MODULE() and AP_DECLARE_MODULE(). * 20100606.1 (2.3.6-dev) Added extended timestamp formatting via * ap_recent_ctime_ex(). * 20100609.0 (2.3.6-dev) Dropped ap_body_to_table due to missing constraints. * 20100609.1 (2.3.7-dev) Introduce ap_log_cserror() * 20100609.2 (2.3.7-dev) Add deferred write pool to core_output_filter_ctx * 20100625.0 (2.3.7-dev) Add 'userctx' to socache iterator callback prototype * 20100630.0 (2.3.7-dev) make module_levels vector of char instead of int * 20100701.0 (2.3.7-dev) re-order struct members to improve alignment * 20100701.1 (2.3.7-dev) add note_auth_failure hook * 20100701.2 (2.3.7-dev) add ap_proxy_*_wid() functions * 20100714.0 (2.3.7-dev) add access_checker_ex hook, add AUTHZ_DENIED_NO_USER * to authz_status, call authz providers twice to allow * authz without authenticated user * 20100719.0 (2.3.7-dev) Add symbol name parameter to ap_add_module and * ap_add_loaded_module. Add ap_find_module_short_name * 20100723.0 (2.3.7-dev) Remove ct_output_filters from core rec * 20100723.1 (2.3.7-dev) Added ap_proxy_hashfunc() and hash elements to * proxy worker structs * 20100723.2 (2.3.7-dev) Add ap_request_has_body() * 20100723.3 (2.3.8-dev) Add ap_check_mpm() * 20100905.0 (2.3.9-dev) Add log_id to conn and req recs. Add error log * format handlers. Support AP_CTIME_OPTION_COMPACT in * ap_recent_ctime_ex(). * 20100905.1 (2.3.9-dev) Add ap_cache_check_allowed() * 20100912.0 (2.3.9-dev) Add an additional "out" brigade parameter to the * mod_cache store_body() provider function. * 20100916.0 (2.3.9-dev) Add commit_entity() to the mod_cache provider * interface. * 20100918.0 (2.3.9-dev) Move the request_rec within mod_include to be * exposed within include_ctx_t. * 20100919.0 (2.3.9-dev) Authz providers: Add parsed_require_line parameter * to check_authorization() function. Add * parse_require_line() function. * 20100919.1 (2.3.9-dev) Introduce ap_rxplus util/API * 20100921.0 (2.3.9-dev) Add an apr_bucket_brigade to the create_entity * provider interface for mod_cache.h. * 20100922.0 (2.3.9-dev) Move cache_* functions from mod_cache.h to a * private header file. * 20100923.0 (2.3.9-dev) Remove MOD_CACHE_REQUEST_REC, remove deprecated * ap_cache_cacheable_hdrs_out, trim cache_object_t, * make ap_cache_accept_headers, ap_cache_accept_headers * ap_cache_try_lock, ap_cache_check_freshness, * cache_server_conf, cache_enable, cache_disable, * cache_request_rec and cache_provider_list private. * 20100923.1 (2.3.9-dev) Add cache_status hook. * 20100923.2 (2.3.9-dev) Add generate_log_id hook. * Make root parameter of ap_expr_eval() const. * 20100923.3 (2.3.9-dev) Add "last" member to ap_directive_t * 20101012.0 (2.3.9-dev) Add header to cache_status hook. * 20101016.0 (2.3.9-dev) Remove ap_cache_check_allowed(). * 20101017.0 (2.3.9-dev) Make ap_cache_control() public, add cache_control_t * to mod_disk_cache format. * 20101106.0 (2.3.9-dev) Replace the ap_expr parser derived from * mod_include's parser with one derived from * mod_ssl's parser. Clean up ap_expr's public * interface. * 20101106.1 (2.3.9-dev) Add ap_pool_cleanup_set_null() generic cleanup * 20101106.2 (2.3.9-dev) Add suexec_disabled_reason field to ap_unixd_config * 20101113.0 (2.3.9-dev) Add source address to mod_proxy.h * 20101113.1 (2.3.9-dev) Add ap_set_flag_slot_char() * 20101113.2 (2.3.9-dev) Add ap_expr_exec_re() * 20101204.0 (2.3.10-dev) Add _t to ap_expr's typedef names * 20101223.0 (2.3.11-dev) Remove cleaned from proxy_conn_rec. * 20101223.1 (2.3.11-dev) Rework mod_proxy, et.al. Remove proxy_worker_stat * and replace w/ proxy_worker_shared; remove worker * info from scoreboard and use slotmem; Allow * dynamic growth of balancer members; Remove * BalancerNonce in favor of 'nonce' parameter. * 20110117.0 (2.3.11-dev) Merge sections in separate step (ap_if_walk). * Add core_dir_config->sec_if. Add ap_add_if_conf(). * Add pool argument to ap_add_file_conf(). * 20110117.1 (2.3.11-dev) Add ap_pstr2_alnum() and ap_str2_alnum() * 20110203.0 (2.3.11-dev) Raise DYNAMIC_MODULE_LIMIT to 256 * 20110203.1 (2.3.11-dev) Add ap_state_query() * 20110203.2 (2.3.11-dev) Add ap_run_pre_read_request() hook and * ap_parse_form_data() util * 20110312.0 (2.3.12-dev) remove uldap_connection_cleanup and add util_ldap_state_t.connectionPoolTTL, util_ldap_connection_t.freed, and util_ldap_connection_t.rebind_pool. * 20110312.1 (2.3.12-dev) Add core_dir_config.decode_encoded_slashes. * 20110328.0 (2.3.12-dev) change type and name of connectionPoolTTL in util_ldap_state_t connectionPoolTTL (connection_pool_ttl, int->apr_interval_t) * 20110329.0 (2.3.12-dev) Change single-bit signed fields to unsigned in * proxy and cache interfaces. * Change ap_configfile_t/ap_cfg_getline()/ * ap_cfg_getc() API, add ap_pcfg_strerror() * Axe mpm_note_child_killed hook, change * ap_reclaim_child_process and ap_recover_child_process * interfaces. * 20110329.1 (2.3.12-dev) Add ap_reserve_module_slots()/ap_reserve_module_slots_directive() * change AP_CORE_DECLARE to AP_DECLARE: ap_create_request_config() * change AP_DECLARE to AP_CORE_DECLARE: ap_register_log_hooks() * 20110329.2 (2.3.12-dev) Add child_status and end_generation hooks. * 20110329.3 (2.3.12-dev) Add format field to ap_errorlog_info. * 20110329.4 (2.3.13-dev) bgrowth and max_balancers to proxy_server_conf. * 20110329.5 (2.3.13-dev) Add ap_regexec_len() * 20110329.6 (2.3.13-dev) Add AP_EXPR_FLAGS_RESTRICTED, ap_expr_eval_ctx_t->data, * ap_expr_exec_ctx() * 20110604.0 (2.3.13-dev) Make ap_rputs() inline * 20110605.0 (2.3.13-dev) add core_dir_config->condition_ifelse, change return * type of ap_add_if_conf(). * Add members of core_request_config: document_root, * context_document_root, context_prefix. * Add ap_context_*(), ap_set_context_info(), ap_set_document_root() * 20110605.1 (2.3.13-dev) add ap_(get|set)_core_module_config() * 20110605.2 (2.3.13-dev) add ap_get_conn_socket() * 20110619.0 (2.3.13-dev) add async connection infos to process_score in scoreboard, * add ap_start_lingering_close(), * add conn_state_e:CONN_STATE_LINGER_NORMAL and CONN_STATE_LINGER_SHORT * 20110619.1 (2.3.13-dev) add ap_str_toupper() * 20110702.0 (2.3.14-dev) make ap_expr_parse_cmd() macro wrapper for new * ap_expr_parse_cmd_mi() function, add ap_expr_str_*() functions, * rename AP_EXPR_FLAGS_* -> AP_EXPR_FLAG_* * 20110702.1 (2.3.14-dev) Add ap_scan_script_header_err*_ex functions * 20110723.0 (2.3.14-dev) Revert addition of ap_ldap* * 20110724.0 (2.3.14-dev) Add override_list as parameter to ap_parse_htaccess * Add member override_list to cmd_parms_struct, * core_dir_config and htaccess_result * 20110724.1 (2.3.15-dev) add NOT_IN_HTACCESS * 20110724.2 (2.3.15-dev) retries and retry_delay in util_ldap_state_t * 20110724.3 (2.3.15-dev) add util_varbuf.h / ap_varbuf API * 20110724.4 (2.3.15-dev) add max_ranges to core_dir_config * 20110724.5 (2.3.15-dev) add ap_set_accept_ranges() * 20110724.6 (2.3.15-dev) add max_overlaps and max_reversals to core_dir_config * 20110724.7 (2.3.15-dev) add ap_random_insecure_bytes(), ap_random_pick() * 20110724.8 (2.3.15-dev) add ap_abort_on_oom(), ap_malloc(), ap_calloc(), * ap_realloc() * 20110724.9 (2.3.15-dev) add ap_varbuf_pdup() and ap_varbuf_regsub() * 20110724.10(2.3.15-dev) Export ap_max_mem_free * 20111009.0 (2.3.15-dev) Remove ap_proxy_removestr(), * add ap_unixd_config.group_name * 20111014.0 (2.3.15-dev) Remove cookie_path_str and cookie_domain_str from * proxy_dir_conf * 20111025.0 (2.3.15-dev) Add return value and maxlen to ap_varbuf_regsub(), * add ap_pregsub_ex() * 20111025.1 (2.3.15-dev) Add ap_escape_urlencoded(), ap_escape_urlencoded_buffer() * and ap_unescape_urlencoded(). * 20111025.2 (2.3.15-dev) Add ap_lua_ssl_val to mod_lua * 20111025.3 (2.4.0-dev) Add reclvl to ap_expr_eval_ctx_t * 20111122.0 (2.4.0-dev) Remove parts of conn_state_t that are private to the MPM * 20111123.0 (2.4.0-dev) Pass ap_errorlog_info struct to error_log hook, * add pool to ap_errorlog_info. * 20111130.0 (2.4.0-dev) c->remote_ip becomes c->peer_ip and r->client_ip, * c->remote_addr becomes c->peer_addr and r->client_addr * 20111201.0 (2.4.0-dev) Add invalidate_entity() to the cache provider. * 20111202.0 (2.4.0-dev) Use apr_status_t across mod_session API. * 20111202.1 (2.4.0-dev) add APLOGNO() * 20111203.0 (2.4.0-dev) Optional ap_proxy_retry_worker(), remove * ap_proxy_string_read(), ap_cache_liststr(), * ap_proxy_buckets_lifetime_transform(), * ap_proxy_date_canon(), ap_proxy_is_ipaddr(), * ap_proxy_is_domainname(), ap_proxy_is_hostname(), * ap_proxy_is_word(), ap_proxy_hex2sec(), * ap_proxy_sec2hex(), ap_proxy_make_fake_req(), * ap_proxy_strmatch_path, ap_proxy_strmatch_domain, * ap_proxy_table_unmerge(), proxy_lb_workers. * 20120109.0 (2.4.1-dev) Changes sizeof(overrides_t) in core config. * 20120109.1 (2.4.1-dev) remove sb_type in global_score. * 20120109.2 (2.4.1-dev) Make core_output_filter_ctx_t and core_ctx_t * private; * move core_net rec definition to http_core.h; * add insert_network_bucket hook, AP_DECLINED * 20120211.0 (2.4.1-dev) Change re_nsub in ap_regex_t from apr_size_t to int. * 20120211.1 (2.4.2-dev) Add AP_HAVE_C99 * 20120211.2 (2.4.2-dev) Add ap_runtime_dir_relative * 20120211.3 (2.4.2-dev) Add forcerecovery to proxy_balancer_shared struct * 20120211.4 (2.4.3-dev) Add ap_list_provider_groups() * 20120211.5 (2.4.3-dev) Add missing HTTP status codes registered with IANA. * 20120211.6 (2.4.3-dev) Add ap_proxy_checkproxyblock2. * 20120211.7 (2.4.3-dev) Add ap_get_loadavg() * 20120211.8 (2.4.3-dev) Add sticky_separator to proxy_balancer_shared struct. * 20120211.9 (2.4.4-dev) Add fgrab() to ap_slotmem_provider_t. * 20120211.10 (2.4.4-dev) Add in bal_persist field to proxy_server_conf * 20120211.11 (2.4.4-dev) Add ap_bin2hex() * 20120211.12 (2.4.5-dev) Add ap_remove_input|output_filter_byhandle() * 20120211.13 (2.4.5-dev) Add ap_get_exec_line * 20120211.14 (2.4.5-dev) Add ppinherit and inherit to proxy_server_conf * 20120211.15 (2.4.5-dev) Add dav_join_error() * 20120211.16 (2.4.5-dev) Add cache_control_t.invalidated * 20120211.17 (2.4.5-dev) Add ap_find_etag_weak(), ap_find_etag_strong() * 20120211.18 (2.4.5-dev) Add ap_condition_e, ap_condition_if_match(), * ap_condition_if_unmodified_since(), * ap_condition_if_none_match(), * ap_condition_if_modified_since(), * ap_condition_if_range() * 20120211.19 (2.4.5-dev) Add post_perdir_config hook. * 20120211.20 (2.4.5-dev) Add dirwalk_stat hook. * 20120211.21 (2.4.5-dev) Add in ap_proxy_create_hdrbrgd() and * ap_proxy_pass_brigade() * 20120211.22 (2.4.5-dev) No longer prevent usage of strtoul() * 20120211.23 (2.4.5-dev) Add ap_proxy_clear_connection() * 20120211.24 (2.4.7-dev) add open_htaccess hook. * 20120211.25 (2.4.7-dev) Add conn_sense_e * 20120211.26 (2.4.7-dev) Add util_fcgi.h, FastCGI protocol support * 20120211.27 (2.4.7-dev) Add ap_podx_restart_t and ap_mpm_podx_* * 20120211.28 (2.4.7-dev) Add ap_regname * 20120211.29 (2.4.7-dev) Add uds_path to proxy_conn_rec and proxy_worker_shared. * The change to proxy_worker_shared is an * unintended API break, especially for balancer * lbmethod modules. * 20120211.30 (2.4.7-dev) REWRITE_REDIRECT_HANDLER_NAME in mod_rewrite.h * 20120211.31 (2.4.7-dev) Add ap_proxy_port_of_scheme() * 20120211.32 (2.4.10-dev) Add SSL reusable SNI to mod_proxy.h's proxy_conn_rec * 20120211.33 (2.4.10-dev) Add suspend_connection and resume_connection hooks * 20120211.34 (2.4.10-dev) AP_DEFAULT_HANDLER_NAME/AP_IS_DEFAULT_HANDLER_NAME * 20120211.35 (2.4.10-dev) Add "r", "must_rebind", and last_backend_conn to util_ldap_connection_t * 20120211.36 (2.4.10-dev) Add ap_copy_scoreboard_worker() * 20120211.37 (2.4.11-dev) Add r->trailers_{in,out} * 20120211.38 (2.4.11-dev) Added ap_shutdown_conn(). * 20120211.39 (2.4.11-dev) Add ap_proxy_connect_uds(). * 20120211.40 (2.4.11-dev) Add ap_log_data(), ap_log_rdata(), etc. * 20120211.41 (2.4.11-dev) Add ap_proxy_de_socketfy to mod_proxy.h * 20120211.42 (2.4.13-dev) Add response_code_exprs to http_core.h * 20120211.43 (2.4.13-dev) Add keep_alive_timeout_set to server_rec * 20120211.44 (2.4.13-dev) Add cgi_pass_auth and AP_CGI_PASS_AUTH_* to * core_dir_config * 20120211.45 (2.4.13-dev) Add ap_proxy_connection_reusable() * 20120211.46 (2.4.13-dev) Add ap_map_http_request_error() * 20120211.47 (2.4.13-dev) Add ap_some_authn_required, ap_force_authn hook. * Deprecate broken ap_some_auth_required. * 20120211.48 (2.4.17-dev) Added ap_log_mpm_common(). * 20120211.49 (2.4.17-dev) Add listener bucket in scoreboard.h's process_score. * 20120211.50 (2.4.17-dev) Add ap_set_listencbratio(), ap_close_listeners_ex(), * ap_duplicate_listeners(), ap_num_listen_buckets and * ap_have_so_reuseport to ap_listen.h. * 20120211.51 (2.4.17-dev) Add protocols and protocols_honor_order to * core_server_config. Add hooks protocol_propose * protocol_switch and protocol_get. Add * ap_select_protocol(), ap_switch_protocol(), * ap_get_protocol(). Add HTTP_MISDIRECTED_REQUEST. * Added ap_parse_token_list_strict() to httpd.h * 20120211.52 (2.4.17-dev) Add master conn_rec* member in conn_rec. * 20120211.53 (2.4.19-dev) Add expr_handler to core_dir_config. * 20120211.54 (2.4.19-dev) Add ap_proxy_buckets_lifetime_transform and * ap_proxy_transfer_between_connections to * mod_proxy.h * 20120211.55 (2.4.19-dev) Add new ap_update_child_status...() methods, * add protocol to worker_score in scoreboard.h, * Add pre_close connection hook and * ap_prep_lingering_close(). * 20120211.56 (2.4.19-dev) Split useragent_host from the conn_rec into * the request_rec, with ap_get_useragent_host() * 20120211.57 (2.4.19-dev) Add mod_ssl_openssl.h and OpenSSL-specific hooks * 20120211.58 (2.4.21-dev) Add cgi_var_rules to core_dir_config. * 20120211.59 (2.4.21-dev) Add ap_getword_conf2[_nc](), * ap_proxy_is_socket_connected() and * extended proxy_worker_shared. * 20120211.60 (2.4.21-dev) Add dav_get_provider_name. * 20120211.61 (2.4.21-dev) Add ap_cstr_casecmp[n]() - placeholder of apr_ fns * 20120211.62 (2.4.24-dev) Add childtags to dav_error. * 20120211.63 (2.4.24-dev) Add dav_begin_multistatus, dav_send_one_response, * dav_finish_multistatus, dav_send_multistatus, * dav_handle_err, dav_failed_proppatch, * dav_success_proppatch. * 20120211.64 (2.4.24-dev) Add ap_proxy_check_backend(), and tmp_bb to struct * proxy_conn_rec. * 20120211.65 (2.4.24-dev) Add ap_check_pipeline(). * 20120211.66 (2.4.24-dev) Rename ap_proxy_check_backend() to * ap_proxy_check_connection(). * 20120211.67 (2.4.24-dev) Add http09_enable, http_conformance, and * http_methods to core_server_config * Add ap_scan_http_field_token(), * ap_scan_http_field_content(), * and ap_scan_vchar_obstext() * Replaced fold boolean with with multiple bit flags * to ap_[r]getline() * 20120211.68 (2.4.26-dev) Add ap_get_basic_auth_components() and deprecate * ap_get_basic_auth_pw() * 20120211.69 (2.4.30-dev) Add ap_update_sb_handle() * 20120211.70 (2.4.30-dev) Add flags field to module_struct and function * ap_get_module_flags() * 20120211.71 (2.4.30-dev) Add optional proxy_{hook,run}_section_post_config(), * ap_proxy_connection_create_ex() and section_config * to struct proxy_{worker,balancer} in mod_proxy.h, * and optional ssl_engine_set() to mod_ssl.h. * 20120211.72 (2.4.30-dev) Add NOT_IN_DIR_CONTEXT replacing NOT_IN_DIR_LOC_FILE * semantics * 20120211.73 (2.4.30-dev) Add failontimeout_set, growth_set and lbmethod_set * to proxy_balancer struct * 20120211.74 (2.4.30-dev) Add AP_REG_DOLLAR_ENDONLY, ap_regcomp_get_default_cflags * ap_regcomp_set_default_cflags and * ap_regcomp_default_cflag_by_name * 20120211.75 (2.4.30-dev) Add hostname_ex to proxy_worker_shared * 20120211.76 (2.4.30-dev) Add CONN_STATE_NUM to enum conn_state_e * 20120211.77 (2.4.34-dev) Add ap_exists_directive() * 20120211.78 (2.4.34-dev) Add response_field_size to proxy_worker_shared * 20120211.79 (2.4.34-dev) Add AP_GETLINE_NOSPC_EOL flag to http_protocol.h * 20120211.80 (2.4.35-dev) Add new ap_update_global_status() method and * times field in the global_score structure in * scoreboard.h. * 20120211.81 (2.4.35-dev) Add new duration field to worker_score struct in * scoreboard.h * 20120211.82 (2.4.35-dev) Add optional function declaration for * ap_proxy_balancer_get_best_worker to mod_proxy.h. * 20120211.83 (2.4.35-dev) Add client64 field to worker_score struct * 20120211.84 (2.4.35-dev) Add ap_no2slash_ex() and merge_slashes to * core_server_conf. * 20120211.85 (2.4.40-dev) add ap_set_conn_count(). * 20120211.86 (2.4.40-dev) Add forward_100_continue{,_set} to proxy_dir_conf * 20120211.87 (2.4.40-dev) Add dav_popen_propdb * 20120211.88 (2.4.40-dev) Add ap_dir_nofnmatch() and ap_dir_fnmatch(). */ #define MODULE_MAGIC_COOKIE 0x41503234UL /* "AP24" */ #ifndef MODULE_MAGIC_NUMBER_MAJOR #define MODULE_MAGIC_NUMBER_MAJOR 20120211 #endif #define MODULE_MAGIC_NUMBER_MINOR 88 /* 0...n */ /** * Determine if the server's current MODULE_MAGIC_NUMBER is at least a * specified value. * * Useful for testing for features. * For example, suppose you wish to use the apr_table_overlap * function. You can do this: * * \code * #if AP_MODULE_MAGIC_AT_LEAST(19980812,2) * ... use apr_table_overlap() * #else * ... alternative code which doesn't use apr_table_overlap() * #endif * \endcode * * @param major The major module magic number * @param minor The minor module magic number * @def AP_MODULE_MAGIC_AT_LEAST(int major, int minor) */ #define AP_MODULE_MAGIC_AT_LEAST(major,minor) \ ((major) < MODULE_MAGIC_NUMBER_MAJOR \ || ((major) == MODULE_MAGIC_NUMBER_MAJOR \ && (minor) <= MODULE_MAGIC_NUMBER_MINOR)) /** @deprecated present for backwards compatibility */ #define MODULE_MAGIC_NUMBER MODULE_MAGIC_NUMBER_MAJOR #define MODULE_MAGIC_AT_LEAST old_broken_macro_we_hope_you_are_not_using #endif /* !APACHE_AP_MMN_H */ /** @} */ httpd-2.4.41/include/heartbeat.h0000644000000000000500000000307312350027455014775 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file heartbeat.h * @brief commun structures for mod_heartmonitor.c and mod_lbmethod_heartbeat.c * * @defgroup HEARTBEAT heartbeat * @ingroup APACHE_MODS * @{ */ #ifndef HEARTBEAT_H #define HEARTBEAT_H #include "apr.h" #include "apr_time.h" #ifdef __cplusplus extern "C" { #endif /* * Worse Case: IPv4-Mapped IPv6 Address * 0000:0000:0000:0000:0000:FFFF:255.255.255.255 */ #define MAXIPSIZE 46 typedef struct hm_slot_server_t { char ip[MAXIPSIZE]; int busy; int ready; apr_time_t seen; int id; } hm_slot_server_t; /* default name of heartbeat data file, created in the configured * runtime directory when mod_slotmem_shm is not available */ #define DEFAULT_HEARTBEAT_STORAGE "hb.dat" #ifdef __cplusplus } #endif #endif /* HEARTBEAT_H */ /** @} */ httpd-2.4.41/include/ap_listen.h0000644000000000000500000001330512723111776015017 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ap_listen.h * @brief Apache Listeners Library * * @defgroup APACHE_CORE_LISTEN Apache Listeners Library * @ingroup APACHE_CORE * @{ */ #ifndef AP_LISTEN_H #define AP_LISTEN_H #include "apr_network_io.h" #include "httpd.h" #include "http_config.h" #ifdef __cplusplus extern "C" { #endif typedef struct ap_slave_t ap_slave_t; typedef struct ap_listen_rec ap_listen_rec; typedef apr_status_t (*accept_function)(void **csd, ap_listen_rec *lr, apr_pool_t *ptrans); /** * @brief Apache's listeners record. * * These are used in the Multi-Processing Modules * to setup all of the sockets for the MPM to listen to and accept on. */ struct ap_listen_rec { /** * The next listener in the list */ ap_listen_rec *next; /** * The actual socket */ apr_socket_t *sd; /** * The sockaddr the socket should bind to */ apr_sockaddr_t *bind_addr; /** * The accept function for this socket */ accept_function accept_func; /** * Is this socket currently active */ int active; /** * The default protocol for this listening socket. */ const char* protocol; ap_slave_t *slave; }; /** * The global list of ap_listen_rec structures */ AP_DECLARE_DATA extern ap_listen_rec *ap_listeners; AP_DECLARE_DATA extern int ap_num_listen_buckets; AP_DECLARE_DATA extern int ap_have_so_reuseport; /** * Setup all of the defaults for the listener list */ AP_DECLARE(void) ap_listen_pre_config(void); /** * Loop through the global ap_listen_rec list and create all of the required * sockets. This executes the listen and bind on the sockets. * @param s The global server_rec * @return The number of open sockets. */ AP_DECLARE(int) ap_setup_listeners(server_rec *s); /** * This function duplicates ap_listeners into multiple buckets when configured * to (see ListenCoresBucketsRatio) and the platform supports it (eg. number of * online CPU cores and SO_REUSEPORT available). * @param p The config pool * @param s The global server_rec * @param buckets The array of listeners buckets. * @param num_buckets The total number of listeners buckets (array size). * @remark If the given *num_buckets is 0 (input), it will be computed * according to the platform capacities, otherwise (positive) it * will be preserved. The number of listeners duplicated will * always match *num_buckets, be it computed or given. */ AP_DECLARE(apr_status_t) ap_duplicate_listeners(apr_pool_t *p, server_rec *s, ap_listen_rec ***buckets, int *num_buckets); /** * Loop through the global ap_listen_rec list and close each of the sockets. */ AP_DECLARE_NONSTD(void) ap_close_listeners(void); /** * Loop through the given ap_listen_rec list and close each of the sockets. * @param listeners The listener to close. */ AP_DECLARE_NONSTD(void) ap_close_listeners_ex(ap_listen_rec *listeners); /** * FIXMEDOC */ AP_DECLARE_NONSTD(int) ap_close_selected_listeners(ap_slave_t *); /* Although these functions are exported from libmain, they are not really * public functions. These functions are actually called while parsing the * config file, when one of the LISTEN_COMMANDS directives is read. These * should not ever be called by external modules. ALL MPMs should include * LISTEN_COMMANDS in their command_rec table so that these functions are * called. */ AP_DECLARE_NONSTD(const char *) ap_set_listenbacklog(cmd_parms *cmd, void *dummy, const char *arg); AP_DECLARE_NONSTD(const char *) ap_set_listencbratio(cmd_parms *cmd, void *dummy, const char *arg); AP_DECLARE_NONSTD(const char *) ap_set_listener(cmd_parms *cmd, void *dummy, int argc, char *const argv[]); AP_DECLARE_NONSTD(const char *) ap_set_send_buffer_size(cmd_parms *cmd, void *dummy, const char *arg); AP_DECLARE_NONSTD(const char *) ap_set_receive_buffer_size(cmd_parms *cmd, void *dummy, const char *arg); #define LISTEN_COMMANDS \ AP_INIT_TAKE1("ListenBacklog", ap_set_listenbacklog, NULL, RSRC_CONF, \ "Maximum length of the queue of pending connections, as used by listen(2)"), \ AP_INIT_TAKE1("ListenCoresBucketsRatio", ap_set_listencbratio, NULL, RSRC_CONF, \ "Ratio between the number of CPU cores (online) and the number of listeners buckets"), \ AP_INIT_TAKE_ARGV("Listen", ap_set_listener, NULL, RSRC_CONF, \ "A port number or a numeric IP address and a port number, and an optional protocol"), \ AP_INIT_TAKE1("SendBufferSize", ap_set_send_buffer_size, NULL, RSRC_CONF, \ "Send buffer size in bytes"), \ AP_INIT_TAKE1("ReceiveBufferSize", ap_set_receive_buffer_size, NULL, \ RSRC_CONF, "Receive buffer size in bytes") #ifdef __cplusplus } #endif #endif /** @} */ httpd-2.4.41/include/ap_compat.h0000644000000000000500000000206310455005461014774 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ap_compat.h * @brief Redefine Apache 1.3 symbols */ #ifndef AP_COMPAT_H #define AP_COMPAT_H /* redefine 1.3.x symbols to the new symbol names */ #define MODULE_VAR_EXPORT AP_MODULE_DECLARE_DATA #define ap_send_http_header(r) ; #endif /* AP_COMPAT_H */ httpd-2.4.41/include/util_script.h0000644000000000000500000002311211702564442015375 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file util_script.h * @brief Apache script tools * * @defgroup APACHE_CORE_SCRIPT Script Tools * @ingroup APACHE_CORE * @{ */ #ifndef APACHE_UTIL_SCRIPT_H #define APACHE_UTIL_SCRIPT_H #include "apr_buckets.h" #include "ap_config.h" #ifdef __cplusplus extern "C" { #endif #ifndef APACHE_ARG_MAX #ifdef _POSIX_ARG_MAX #define APACHE_ARG_MAX _POSIX_ARG_MAX #else #define APACHE_ARG_MAX 512 #endif #endif /** * Create an environment variable out of an Apache table of key-value pairs * @param p pool to allocate out of * @param t Apache table of key-value pairs * @return An array containing the same key-value pairs suitable for * use with an exec call. * @fn char **ap_create_environment(apr_pool_t *p, apr_table_t *t) */ AP_DECLARE(char **) ap_create_environment(apr_pool_t *p, apr_table_t *t); /** * This "cute" little function comes about because the path info on * filenames and URLs aren't always the same. So we take the two, * and find as much of the two that match as possible. * @param uri The uri we are currently parsing * @param path_info The current path info * @return The length of the path info * @fn int ap_find_path_info(const char *uri, const char *path_info) */ AP_DECLARE(int) ap_find_path_info(const char *uri, const char *path_info); /** * Add CGI environment variables required by HTTP/1.1 to the request's * environment table * @param r the current request * @fn void ap_add_cgi_vars(request_rec *r) */ AP_DECLARE(void) ap_add_cgi_vars(request_rec *r); /** * Add common CGI environment variables to the requests environment table * @param r The current request * @fn void ap_add_common_vars(request_rec *r) */ AP_DECLARE(void) ap_add_common_vars(request_rec *r); /** * Read headers output from a script, ensuring that the output is valid. If * the output is valid, then the headers are added to the headers out of the * current request * @param r The current request * @param f The file to read from * @param buffer Empty when calling the function. On output, if there was an * error, the string that cause the error is stored here. * @return HTTP_OK on success, HTTP_INTERNAL_SERVER_ERROR otherwise * @fn int ap_scan_script_header_err(request_rec *r, apr_file_t *f, char *buffer) */ AP_DECLARE(int) ap_scan_script_header_err(request_rec *r, apr_file_t *f, char *buffer); /** * Read headers output from a script, ensuring that the output is valid. If * the output is valid, then the headers are added to the headers out of the * current request * @param r The current request * @param f The file to read from * @param buffer Empty when calling the function. On output, if there was an * error, the string that cause the error is stored here. * @param module_index The module index to be used for logging * @return HTTP_OK on success, HTTP_INTERNAL_SERVER_ERROR otherwise */ AP_DECLARE(int) ap_scan_script_header_err_ex(request_rec *r, apr_file_t *f, char *buffer, int module_index); /** * Read headers output from a script, ensuring that the output is valid. If * the output is valid, then the headers are added to the headers out of the * current request * @param r The current request * @param bb The brigade from which to read * @param buffer Empty when calling the function. On output, if there was an * error, the string that cause the error is stored here. * @return HTTP_OK on success, HTTP_INTERNAL_SERVER_ERROR otherwise * @fn int ap_scan_script_header_err_brigade(request_rec *r, apr_bucket_brigade *bb, char *buffer) */ AP_DECLARE(int) ap_scan_script_header_err_brigade(request_rec *r, apr_bucket_brigade *bb, char *buffer); /** * Read headers output from a script, ensuring that the output is valid. If * the output is valid, then the headers are added to the headers out of the * current request * @param r The current request * @param bb The brigade from which to read * @param buffer Empty when calling the function. On output, if there was an * error, the string that cause the error is stored here. * @param module_index The module index to be used for logging * @return HTTP_OK on success, HTTP_INTERNAL_SERVER_ERROR otherwise */ AP_DECLARE(int) ap_scan_script_header_err_brigade_ex(request_rec *r, apr_bucket_brigade *bb, char *buffer, int module_index); /** * Read headers strings from a script, ensuring that the output is valid. If * the output is valid, then the headers are added to the headers out of the * current request * @param r The current request * @param buffer Empty when calling the function. On output, if there was an * error, the string that cause the error is stored here. * @param termch Pointer to the last character parsed. * @param termarg Pointer to an int to capture the last argument parsed. * * The varargs are string arguments to parse consecutively for headers, * with a NULL argument to terminate the list. * * @return HTTP_OK on success, HTTP_INTERNAL_SERVER_ERROR otherwise */ AP_DECLARE_NONSTD(int) ap_scan_script_header_err_strs(request_rec *r, char *buffer, const char **termch, int *termarg, ...) AP_FN_ATTR_SENTINEL; /** * Read headers strings from a script, ensuring that the output is valid. If * the output is valid, then the headers are added to the headers out of the * current request * @param r The current request * @param buffer Empty when calling the function. On output, if there was an * error, the string that cause the error is stored here. * @param module_index The module index to be used for logging * @param termch Pointer to the last character parsed. * @param termarg Pointer to an int to capture the last argument parsed. * * The varargs are string arguments to parse consecutively for headers, * with a NULL argument to terminate the list. * * @return HTTP_OK on success, HTTP_INTERNAL_SERVER_ERROR otherwise */ AP_DECLARE_NONSTD(int) ap_scan_script_header_err_strs_ex(request_rec *r, char *buffer, int module_index, const char **termch, int *termarg, ...) AP_FN_ATTR_SENTINEL; /** * Read headers output from a script, ensuring that the output is valid. If * the output is valid, then the headers are added to the headers out of the * current request * @param r The current request * @param buffer Empty when calling the function. On output, if there was an * error, the string that cause the error is stored here. * @param getsfunc Function to read the headers from. This function should act like gets() * @param getsfunc_data The place to read from * @return HTTP_OK on success, HTTP_INTERNAL_SERVER_ERROR otherwise */ AP_DECLARE(int) ap_scan_script_header_err_core(request_rec *r, char *buffer, int (*getsfunc) (char *, int, void *), void *getsfunc_data); /** * Read headers output from a script, ensuring that the output is valid. If * the output is valid, then the headers are added to the headers out of the * current request * @param r The current request * @param buffer Empty when calling the function. On output, if there was an * error, the string that cause the error is stored here. * @param getsfunc Function to read the headers from. This function should act like gets() * @param getsfunc_data The place to read from * @param module_index The module index to be used for logging * @return HTTP_OK on success, HTTP_INTERNAL_SERVER_ERROR otherwise */ AP_DECLARE(int) ap_scan_script_header_err_core_ex(request_rec *r, char *buffer, int (*getsfunc) (char *, int, void *), void *getsfunc_data, int module_index); /** * Parse query args for the request and store in a new table allocated * from the request pool. * For args with no value, "1" will be used instead. * If no query args were specified, the table will be empty. * @param r The current request * @param table A new table on output. */ AP_DECLARE(void) ap_args_to_table(request_rec *r, apr_table_t **table); #ifdef __cplusplus } #endif #endif /* !APACHE_UTIL_SCRIPT_H */ /** @} */ httpd-2.4.41/include/mpm_common.h0000644000000000000500000004122613334641026015200 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* The purpose of this file is to store the code that MOST mpm's will need * this does not mean a function only goes into this file if every MPM needs * it. It means that if a function is needed by more than one MPM, and * future maintenance would be served by making the code common, then the * function belongs here. * * This is going in src/main because it is not platform specific, it is * specific to multi-process servers, but NOT to Unix. Which is why it * does not belong in src/os/unix */ /** * @file mpm_common.h * @brief Multi-Processing Modules functions * * @defgroup APACHE_MPM Multi-Processing Modules * @ingroup APACHE * @{ */ #ifndef APACHE_MPM_COMMON_H #define APACHE_MPM_COMMON_H #include "ap_config.h" #include "ap_mpm.h" #include "scoreboard.h" #if APR_HAVE_NETINET_TCP_H #include /* for TCP_NODELAY */ #endif #include "apr_proc_mutex.h" #ifdef __cplusplus extern "C" { #endif /* The maximum length of the queue of pending connections, as defined * by listen(2). Under some systems, it should be increased if you * are experiencing a heavy TCP SYN flood attack. * * It defaults to 511 instead of 512 because some systems store it * as an 8-bit datatype; 512 truncated to 8-bits is 0, while 511 is * 255 when truncated. */ #ifndef DEFAULT_LISTENBACKLOG #define DEFAULT_LISTENBACKLOG 511 #endif /* Signal used to gracefully restart */ #define AP_SIG_GRACEFUL SIGUSR1 /* Signal used to gracefully restart (without SIG prefix) */ #define AP_SIG_GRACEFUL_SHORT USR1 /* Signal used to gracefully restart (as a quoted string) */ #define AP_SIG_GRACEFUL_STRING "SIGUSR1" /* Signal used to gracefully stop */ #define AP_SIG_GRACEFUL_STOP SIGWINCH /* Signal used to gracefully stop (without SIG prefix) */ #define AP_SIG_GRACEFUL_STOP_SHORT WINCH /* Signal used to gracefully stop (as a quoted string) */ #define AP_SIG_GRACEFUL_STOP_STRING "SIGWINCH" /** * Callback function used for ap_reclaim_child_processes() and * ap_relieve_child_processes(). The callback function will be * called for each terminated child process. */ typedef void ap_reclaim_callback_fn_t(int childnum, pid_t pid, ap_generation_t gen); #if (!defined(WIN32) && !defined(NETWARE)) || defined(DOXYGEN) /** * Make sure all child processes that have been spawned by the parent process * have died. This includes process registered as "other_children". * * @param terminate Either 1 or 0. If 1, send the child processes SIGTERM * each time through the loop. If 0, give the process time to die * on its own before signalling it. * @param mpm_callback Callback invoked for each dead child process * * @note The MPM child processes which are reclaimed are those listed * in the scoreboard as well as those currently registered via * ap_register_extra_mpm_process(). */ AP_DECLARE(void) ap_reclaim_child_processes(int terminate, ap_reclaim_callback_fn_t *mpm_callback); /** * Catch any child processes that have been spawned by the parent process * which have exited. This includes processes registered as "other_children". * * @param mpm_callback Callback invoked for each dead child process * @note The MPM child processes which are relieved are those listed * in the scoreboard as well as those currently registered via * ap_register_extra_mpm_process(). */ AP_DECLARE(void) ap_relieve_child_processes(ap_reclaim_callback_fn_t *mpm_callback); /** * Tell ap_reclaim_child_processes() and ap_relieve_child_processes() about * an MPM child process which has no entry in the scoreboard. * @param pid The process id of an MPM child process which should be * reclaimed when ap_reclaim_child_processes() is called. * @param gen The generation of this MPM child process. * * @note If an extra MPM child process terminates prior to calling * ap_reclaim_child_processes(), remove it from the list of such processes * by calling ap_unregister_extra_mpm_process(). */ AP_DECLARE(void) ap_register_extra_mpm_process(pid_t pid, ap_generation_t gen); /** * Unregister an MPM child process which was previously registered by a * call to ap_register_extra_mpm_process(). * @param pid The process id of an MPM child process which no longer needs to * be reclaimed. * @param old_gen Set to the server generation of the process, if found. * @return 1 if the process was found and removed, 0 otherwise */ AP_DECLARE(int) ap_unregister_extra_mpm_process(pid_t pid, ap_generation_t *old_gen); /** * Safely signal an MPM child process, if the process is in the * current process group. Otherwise fail. * @param pid the process id of a child process to signal * @param sig the signal number to send * @return APR_SUCCESS if signal is sent, otherwise an error as per kill(3); * APR_EINVAL is returned if passed either an invalid (< 1) pid, or if * the pid is not in the current process group */ AP_DECLARE(apr_status_t) ap_mpm_safe_kill(pid_t pid, int sig); /** * Log why a child died to the error log, if the child died without the * parent signalling it. * @param pid The child that has died * @param why The return code of the child process * @param status The status returned from ap_wait_or_timeout * @return 0 on success, APEXIT_CHILDFATAL if MPM should terminate */ AP_DECLARE(int) ap_process_child_status(apr_proc_t *pid, apr_exit_why_e why, int status); AP_DECLARE(apr_status_t) ap_fatal_signal_setup(server_rec *s, apr_pool_t *in_pconf); AP_DECLARE(apr_status_t) ap_fatal_signal_child_setup(server_rec *s); #endif /* (!WIN32 && !NETWARE) || DOXYGEN */ /** * Pool cleanup for end-generation hook implementation * (core httpd function) */ apr_status_t ap_mpm_end_gen_helper(void *unused); /** * Run the monitor hook (once every ten calls), determine if any child * process has died and, if none died, sleep one second. * @param status The return code if a process has died * @param exitcode The returned exit status of the child, if a child process * dies, or the signal that caused the child to die. * @param ret The process id of the process that died * @param p The pool to allocate out of * @param s The server_rec to pass */ AP_DECLARE(void) ap_wait_or_timeout(apr_exit_why_e *status, int *exitcode, apr_proc_t *ret, apr_pool_t *p, server_rec *s); #if defined(TCP_NODELAY) /** * Turn off the nagle algorithm for the specified socket. The nagle algorithm * says that we should delay sending partial packets in the hopes of getting * more data. There are bad interactions between persistent connections and * Nagle's algorithm that have severe performance penalties. * @param s The socket to disable nagle for. */ void ap_sock_disable_nagle(apr_socket_t *s); #else #define ap_sock_disable_nagle(s) /* NOOP */ #endif #ifdef HAVE_GETPWNAM /** * Convert a username to a numeric ID * @param name The name to convert * @return The user id corresponding to a name * @fn uid_t ap_uname2id(const char *name) */ AP_DECLARE(uid_t) ap_uname2id(const char *name); #endif #ifdef HAVE_GETGRNAM /** * Convert a group name to a numeric ID * @param name The name to convert * @return The group id corresponding to a name * @fn gid_t ap_gname2id(const char *name) */ AP_DECLARE(gid_t) ap_gname2id(const char *name); #endif #ifndef HAVE_INITGROUPS /** * The initgroups() function initializes the group access list by reading the * group database /etc/group and using all groups of which user is a member. * The additional group basegid is also added to the list. * @param name The user name - must be non-NULL * @param basegid The basegid to add * @return returns 0 on success * @fn int initgroups(const char *name, gid_t basegid) */ int initgroups(const char *name, gid_t basegid); #endif #if (!defined(WIN32) && !defined(NETWARE)) || defined(DOXYGEN) typedef struct ap_pod_t ap_pod_t; struct ap_pod_t { apr_file_t *pod_in; apr_file_t *pod_out; apr_pool_t *p; }; /** * Open the pipe-of-death. The pipe of death is used to tell all child * processes that it is time to die gracefully. * @param p The pool to use for allocating the pipe * @param pod the pipe-of-death that is created. */ AP_DECLARE(apr_status_t) ap_mpm_pod_open(apr_pool_t *p, ap_pod_t **pod); /** * Check the pipe to determine if the process has been signalled to die. */ AP_DECLARE(apr_status_t) ap_mpm_pod_check(ap_pod_t *pod); /** * Close the pipe-of-death * * @param pod the pipe-of-death to close. */ AP_DECLARE(apr_status_t) ap_mpm_pod_close(ap_pod_t *pod); /** * Write data to the pipe-of-death, signalling that one child process * should die. * @param pod the pipe-of-death to write to. */ AP_DECLARE(apr_status_t) ap_mpm_pod_signal(ap_pod_t *pod); /** * Write data to the pipe-of-death, signalling that all child process * should die. * @param pod The pipe-of-death to write to. * @param num The number of child processes to kill */ AP_DECLARE(void) ap_mpm_pod_killpg(ap_pod_t *pod, int num); #define AP_MPM_PODX_RESTART_CHAR '$' #define AP_MPM_PODX_GRACEFUL_CHAR '!' typedef enum { AP_MPM_PODX_NORESTART, AP_MPM_PODX_RESTART, AP_MPM_PODX_GRACEFUL } ap_podx_restart_t; /** * Open the extended pipe-of-death. * @param p The pool to use for allocating the pipe * @param pod The pipe-of-death that is created. */ AP_DECLARE(apr_status_t) ap_mpm_podx_open(apr_pool_t *p, ap_pod_t **pod); /** * Check the extended pipe to determine if the process has been signalled to die. */ AP_DECLARE(int) ap_mpm_podx_check(ap_pod_t *pod); /** * Close the pipe-of-death * * @param pod The pipe-of-death to close. */ AP_DECLARE(apr_status_t) ap_mpm_podx_close(ap_pod_t *pod); /** * Write data to the extended pipe-of-death, signalling that one child process * should die. * @param pod the pipe-of-death to write to. * @param graceful restart-type */ AP_DECLARE(apr_status_t) ap_mpm_podx_signal(ap_pod_t *pod, ap_podx_restart_t graceful); /** * Write data to the extended pipe-of-death, signalling that all child process * should die. * @param pod The pipe-of-death to write to. * @param num The number of child processes to kill * @param graceful restart-type */ AP_DECLARE(void) ap_mpm_podx_killpg(ap_pod_t *pod, int num, ap_podx_restart_t graceful); #endif /* (!WIN32 && !NETWARE) || DOXYGEN */ /** * Check that exactly one MPM is loaded * Returns NULL if yes, error string if not. */ AP_DECLARE(const char *) ap_check_mpm(void); /* * These data members are common to all mpms. Each new mpm * should either use the appropriate ap_mpm_set_* function * in their command table or create their own for custom or * OS specific needs. These should work for most. */ /** * The maximum number of requests each child thread or * process handles before dying off */ AP_DECLARE_DATA extern int ap_max_requests_per_child; const char *ap_mpm_set_max_requests(cmd_parms *cmd, void *dummy, const char *arg); /** * The filename used to store the process id. */ AP_DECLARE_DATA extern const char *ap_pid_fname; const char *ap_mpm_set_pidfile(cmd_parms *cmd, void *dummy, const char *arg); void ap_mpm_dump_pidfile(apr_pool_t *p, apr_file_t *out); /* * The directory that the server changes directory to dump core. */ AP_DECLARE_DATA extern char ap_coredump_dir[MAX_STRING_LEN]; AP_DECLARE_DATA extern int ap_coredumpdir_configured; const char *ap_mpm_set_coredumpdir(cmd_parms *cmd, void *dummy, const char *arg); /** * Set the timeout period for a graceful shutdown. */ AP_DECLARE_DATA extern int ap_graceful_shutdown_timeout; AP_DECLARE(const char *)ap_mpm_set_graceful_shutdown(cmd_parms *cmd, void *dummy, const char *arg); #define AP_GRACEFUL_SHUTDOWN_TIMEOUT_COMMAND \ AP_INIT_TAKE1("GracefulShutdownTimeout", ap_mpm_set_graceful_shutdown, NULL, \ RSRC_CONF, "Maximum time in seconds to wait for child " \ "processes to complete transactions during shutdown") int ap_signal_server(int *, apr_pool_t *); void ap_mpm_rewrite_args(process_rec *); AP_DECLARE_DATA extern apr_uint32_t ap_max_mem_free; extern const char *ap_mpm_set_max_mem_free(cmd_parms *cmd, void *dummy, const char *arg); AP_DECLARE_DATA extern apr_size_t ap_thread_stacksize; extern const char *ap_mpm_set_thread_stacksize(cmd_parms *cmd, void *dummy, const char *arg); /* core's implementation of child_status hook */ extern void ap_core_child_status(server_rec *s, pid_t pid, ap_generation_t gen, int slot, mpm_child_status status); #if defined(AP_ENABLE_EXCEPTION_HOOK) && AP_ENABLE_EXCEPTION_HOOK extern const char *ap_mpm_set_exception_hook(cmd_parms *cmd, void *dummy, const char *arg); #endif AP_DECLARE_HOOK(int,monitor,(apr_pool_t *p, server_rec *s)) /* register modules that undertake to manage system security */ AP_DECLARE(int) ap_sys_privileges_handlers(int inc); AP_DECLARE_HOOK(int, drop_privileges, (apr_pool_t * pchild, server_rec * s)) /* implement the ap_mpm_query() function * The MPM should return OK+APR_ENOTIMPL for any unimplemented query codes; * modules which intercede for specific query codes should DECLINE for others. */ AP_DECLARE_HOOK(int, mpm_query, (int query_code, int *result, apr_status_t *rv)) /* register the specified callback */ AP_DECLARE_HOOK(apr_status_t, mpm_register_timed_callback, (apr_time_t t, ap_mpm_callback_fn_t *cbfn, void *baton)) /* get MPM name (e.g., "prefork" or "event") */ AP_DECLARE_HOOK(const char *,mpm_get_name,(void)) /** * Notification that connection handling is suspending (disassociating from the * current thread) * @param c The current connection * @param r The current request, or NULL if there is no active request * @ingroup hooks * @see ap_hook_resume_connection * @note This hook is not implemented by MPMs like Prefork and Worker which * handle all processing of a particular connection on the same thread. * @note This hook will be called on the thread that was previously * processing the connection. * @note This hook is not called at the end of connection processing. This * hook only notifies a module when processing of an active connection is * suspended. * @note Resumption and subsequent suspension of a connection solely to perform * I/O by the MPM, with no execution of non-MPM code, may not necessarily result * in a call to this hook. */ AP_DECLARE_HOOK(void, suspend_connection, (conn_rec *c, request_rec *r)) /** * Notification that connection handling is resuming (associating with a thread) * @param c The current connection * @param r The current request, or NULL if there is no active request * @ingroup hooks * @see ap_hook_suspend_connection * @note This hook is not implemented by MPMs like Prefork and Worker which * handle all processing of a particular connection on the same thread. * @note This hook will be called on the thread that will resume processing * the connection. * @note This hook is not called at the beginning of connection processing. * This hook only notifies a module when processing resumes for a * previously-suspended connection. * @note Resumption and subsequent suspension of a connection solely to perform * I/O by the MPM, with no execution of non-MPM code, may not necessarily result * in a call to this hook. */ AP_DECLARE_HOOK(void, resume_connection, (conn_rec *c, request_rec *r)) /* mutex type string for accept mutex, if any; MPMs should use the * same mutex type for ease of configuration */ #define AP_ACCEPT_MUTEX_TYPE "mpm-accept" /* internal pre-config logic for MPM-related settings, callable only from * core's pre-config hook */ void mpm_common_pre_config(apr_pool_t *pconf); #ifdef __cplusplus } #endif #endif /* !APACHE_MPM_COMMON_H */ /** @} */ httpd-2.4.41/include/util_charset.h0000644000000000000500000000433312425122625015522 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file util_charset.h * @brief charset conversion * * @defgroup APACHE_CORE_CHARSET Charset Conversion * @ingroup APACHE_CORE * * These are the translation handles used to translate between the network * format of protocol headers and the local machine format. * * For an EBCDIC machine, these are valid handles which are set up at * initialization to translate between ISO-8859-1 and the code page of * the source code.\n * For an ASCII machine, they are undefined. * * @see ap_init_ebcdic() * @{ */ #ifndef APACHE_UTIL_CHARSET_H #define APACHE_UTIL_CHARSET_H #ifdef __cplusplus extern "C" { #endif #include "apr.h" #if APR_CHARSET_EBCDIC || defined(DOXYGEN) #include "apr_xlate.h" /** * On EBCDIC machine this is a translation handle used to translate the * headers from the local machine format to ASCII for network transmission. * @note On ASCII system, this variable does not exist. * So, its use should be guarded by \#if APR_CHARSET_EBCDIC. */ extern apr_xlate_t *ap_hdrs_to_ascii; /** * On EBCDIC machine this is a translation handle used to translate the * headers from ASCII to the local machine format after network transmission. * @note On ASCII system, this variable does not exist. * So, its use should be guarded by \#if APR_CHARSET_EBCDIC. */ extern apr_xlate_t *ap_hdrs_from_ascii; #endif /* APR_CHARSET_EBCDIC */ #ifdef __cplusplus } #endif #endif /* !APACHE_UTIL_CHARSET_H */ /** @} */ httpd-2.4.41/include/httpd.h0000644000000000000500000025615213514075127014173 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file httpd.h * @brief HTTP Daemon routines * * @defgroup APACHE Apache HTTP Server * * Top level group of which all other groups are a member * @{ * * @defgroup APACHE_MODS Loadable modules * Top level group for modules * @defgroup APACHE_OS Operating System Specific * @defgroup APACHE_INTERNAL Internal interfaces * @defgroup APACHE_CORE Core routines * @{ * @defgroup APACHE_CORE_DAEMON HTTP Daemon Routine * @{ */ #ifndef APACHE_HTTPD_H #define APACHE_HTTPD_H /* XXX - We need to push more stuff to other .h files, or even .c files, to * make this file smaller */ /* Headers in which EVERYONE has an interest... */ #include "ap_config.h" #include "ap_mmn.h" #include "ap_release.h" #include "apr.h" #include "apr_general.h" #include "apr_tables.h" #include "apr_pools.h" #include "apr_time.h" #include "apr_network_io.h" #include "apr_buckets.h" #include "apr_poll.h" #include "apr_thread_proc.h" #include "os.h" #include "ap_regex.h" #if APR_HAVE_STDLIB_H #include #endif /* Note: apr_uri.h is also included, see below */ #ifdef __cplusplus extern "C" { #endif /* ----------------------------- config dir ------------------------------ */ /** Define this to be the default server home dir. Most things later in this * file with a relative pathname will have this added. */ #ifndef HTTPD_ROOT #ifdef OS2 /** Set default for OS/2 file system */ #define HTTPD_ROOT "/os2httpd" #elif defined(WIN32) /** Set default for Windows file system */ #define HTTPD_ROOT "/apache" #elif defined (NETWARE) /** Set the default for NetWare */ #define HTTPD_ROOT "/apache" #else /** Set for all other OSs */ #define HTTPD_ROOT "/usr/local/apache" #endif #endif /* HTTPD_ROOT */ /* * --------- You shouldn't have to edit anything below this line ---------- * * Any modifications to any defaults not defined above should be done in the * respective configuration file. * */ /** * Default location of documents. Can be overridden by the DocumentRoot * directive. */ #ifndef DOCUMENT_LOCATION #ifdef OS2 /* Set default for OS/2 file system */ #define DOCUMENT_LOCATION HTTPD_ROOT "/docs" #else /* Set default for non OS/2 file system */ #define DOCUMENT_LOCATION HTTPD_ROOT "/htdocs" #endif #endif /* DOCUMENT_LOCATION */ /** Maximum number of dynamically loaded modules */ #ifndef DYNAMIC_MODULE_LIMIT #define DYNAMIC_MODULE_LIMIT 256 #endif /** Default administrator's address */ #define DEFAULT_ADMIN "[no address given]" /** The name of the log files */ #ifndef DEFAULT_ERRORLOG #if defined(OS2) || defined(WIN32) #define DEFAULT_ERRORLOG "logs/error.log" #else #define DEFAULT_ERRORLOG "logs/error_log" #endif #endif /* DEFAULT_ERRORLOG */ /** Define this to be what your per-directory security files are called */ #ifndef DEFAULT_ACCESS_FNAME #ifdef OS2 /* Set default for OS/2 file system */ #define DEFAULT_ACCESS_FNAME "htaccess" #else #define DEFAULT_ACCESS_FNAME ".htaccess" #endif #endif /* DEFAULT_ACCESS_FNAME */ /** The name of the server config file */ #ifndef SERVER_CONFIG_FILE #define SERVER_CONFIG_FILE "conf/httpd.conf" #endif /** The default path for CGI scripts if none is currently set */ #ifndef DEFAULT_PATH #define DEFAULT_PATH "/bin:/usr/bin:/usr/ucb:/usr/bsd:/usr/local/bin" #endif /** The path to the suExec wrapper, can be overridden in Configuration */ #ifndef SUEXEC_BIN #define SUEXEC_BIN HTTPD_ROOT "/bin/suexec" #endif /** The timeout for waiting for messages */ #ifndef DEFAULT_TIMEOUT #define DEFAULT_TIMEOUT 60 #endif /** The timeout for waiting for keepalive timeout until next request */ #ifndef DEFAULT_KEEPALIVE_TIMEOUT #define DEFAULT_KEEPALIVE_TIMEOUT 5 #endif /** The number of requests to entertain per connection */ #ifndef DEFAULT_KEEPALIVE #define DEFAULT_KEEPALIVE 100 #endif /* * Limits on the size of various request items. These limits primarily * exist to prevent simple denial-of-service attacks on a server based * on misuse of the protocol. The recommended values will depend on the * nature of the server resources -- CGI scripts and database backends * might require large values, but most servers could get by with much * smaller limits than we use below. The request message body size can * be limited by the per-dir config directive LimitRequestBody. * * Internal buffer sizes are two bytes more than the DEFAULT_LIMIT_REQUEST_LINE * and DEFAULT_LIMIT_REQUEST_FIELDSIZE below, which explains the 8190. * These two limits can be lowered or raised by the server config * directives LimitRequestLine and LimitRequestFieldsize, respectively. * * DEFAULT_LIMIT_REQUEST_FIELDS can be modified or disabled (set = 0) by * the server config directive LimitRequestFields. */ /** default limit on bytes in Request-Line (Method+URI+HTTP-version) */ #ifndef DEFAULT_LIMIT_REQUEST_LINE #define DEFAULT_LIMIT_REQUEST_LINE 8190 #endif /** default limit on bytes in any one header field */ #ifndef DEFAULT_LIMIT_REQUEST_FIELDSIZE #define DEFAULT_LIMIT_REQUEST_FIELDSIZE 8190 #endif /** default limit on number of request header fields */ #ifndef DEFAULT_LIMIT_REQUEST_FIELDS #define DEFAULT_LIMIT_REQUEST_FIELDS 100 #endif /** default/hard limit on number of leading/trailing empty lines */ #ifndef DEFAULT_LIMIT_BLANK_LINES #define DEFAULT_LIMIT_BLANK_LINES 10 #endif /** * The default default character set name to add if AddDefaultCharset is * enabled. Overridden with AddDefaultCharsetName. */ #define DEFAULT_ADD_DEFAULT_CHARSET_NAME "iso-8859-1" /** default HTTP Server protocol */ #define AP_SERVER_PROTOCOL "HTTP/1.1" /* ------------------ stuff that modules are allowed to look at ----------- */ /** Define this to be what your HTML directory content files are called */ #ifndef AP_DEFAULT_INDEX #define AP_DEFAULT_INDEX "index.html" #endif /** The name of the MIME types file */ #ifndef AP_TYPES_CONFIG_FILE #define AP_TYPES_CONFIG_FILE "conf/mime.types" #endif /* * Define the HTML doctype strings centrally. */ /** HTML 2.0 Doctype */ #define DOCTYPE_HTML_2_0 "\n" /** HTML 3.2 Doctype */ #define DOCTYPE_HTML_3_2 "\n" /** HTML 4.0 Strict Doctype */ #define DOCTYPE_HTML_4_0S "\n" /** HTML 4.0 Transitional Doctype */ #define DOCTYPE_HTML_4_0T "\n" /** HTML 4.0 Frameset Doctype */ #define DOCTYPE_HTML_4_0F "\n" /** XHTML 1.0 Strict Doctype */ #define DOCTYPE_XHTML_1_0S "\n" /** XHTML 1.0 Transitional Doctype */ #define DOCTYPE_XHTML_1_0T "\n" /** XHTML 1.0 Frameset Doctype */ #define DOCTYPE_XHTML_1_0F "" /** Internal representation for a HTTP protocol number, e.g., HTTP/1.1 */ #define HTTP_VERSION(major,minor) (1000*(major)+(minor)) /** Major part of HTTP protocol */ #define HTTP_VERSION_MAJOR(number) ((number)/1000) /** Minor part of HTTP protocol */ #define HTTP_VERSION_MINOR(number) ((number)%1000) /* -------------- Port number for server running standalone --------------- */ /** default HTTP Port */ #define DEFAULT_HTTP_PORT 80 /** default HTTPS Port */ #define DEFAULT_HTTPS_PORT 443 /** * Check whether @a port is the default port for the request @a r. * @param port The port number * @param r The request * @see #ap_default_port */ #define ap_is_default_port(port,r) ((port) == ap_default_port(r)) /** * Get the default port for a request (which depends on the scheme). * @param r The request */ #define ap_default_port(r) ap_run_default_port(r) /** * Get the scheme for a request. * @param r The request */ #define ap_http_scheme(r) ap_run_http_scheme(r) /** The default string length */ #define MAX_STRING_LEN HUGE_STRING_LEN /** The length of a Huge string */ #define HUGE_STRING_LEN 8192 /** The size of the server's internal read-write buffers */ #define AP_IOBUFSIZE 8192 /** The max number of regex captures that can be expanded by ap_pregsub */ #define AP_MAX_REG_MATCH 10 /** * APR_HAS_LARGE_FILES introduces the problem of spliting sendfile into * multiple buckets, no greater than MAX(apr_size_t), and more granular * than that in case the brigade code/filters attempt to read it directly. * ### 16mb is an invention, no idea if it is reasonable. */ #define AP_MAX_SENDFILE 16777216 /* 2^24 */ /** * MPM child process exit status values * The MPM parent process may check the status to see if special * error handling is required. */ /** a normal exit */ #define APEXIT_OK 0x0 /** A fatal error arising during the server's init sequence */ #define APEXIT_INIT 0x2 /** The child died during its init sequence */ #define APEXIT_CHILDINIT 0x3 /** * The child exited due to a resource shortage. * The parent should limit the rate of forking until * the situation is resolved. */ #define APEXIT_CHILDSICK 0x7 /** * A fatal error, resulting in the whole server aborting. * If a child exits with this error, the parent process * considers this a server-wide fatal error and aborts. */ #define APEXIT_CHILDFATAL 0xf #ifndef AP_DECLARE /** * Stuff marked #AP_DECLARE is part of the API, and intended for use * by modules. Its purpose is to allow us to add attributes that * particular platforms or compilers require to every exported function. */ # define AP_DECLARE(type) type #endif #ifndef AP_DECLARE_NONSTD /** * Stuff marked #AP_DECLARE_NONSTD is part of the API, and intended for * use by modules. The difference between #AP_DECLARE and * #AP_DECLARE_NONSTD is that the latter is required for any functions * which use varargs or are used via indirect function call. This * is to accommodate the two calling conventions in windows dlls. */ # define AP_DECLARE_NONSTD(type) type #endif #ifndef AP_DECLARE_DATA # define AP_DECLARE_DATA #endif #ifndef AP_MODULE_DECLARE # define AP_MODULE_DECLARE(type) type #endif #ifndef AP_MODULE_DECLARE_NONSTD # define AP_MODULE_DECLARE_NONSTD(type) type #endif #ifndef AP_MODULE_DECLARE_DATA # define AP_MODULE_DECLARE_DATA #endif /** * @internal * modules should not use functions marked AP_CORE_DECLARE */ #ifndef AP_CORE_DECLARE # define AP_CORE_DECLARE AP_DECLARE #endif /** * @internal * modules should not use functions marked AP_CORE_DECLARE_NONSTD */ #ifndef AP_CORE_DECLARE_NONSTD # define AP_CORE_DECLARE_NONSTD AP_DECLARE_NONSTD #endif /** * @defgroup APACHE_APR_STATUS_T HTTPD specific values of apr_status_t * @{ */ #define AP_START_USERERR (APR_OS_START_USERERR + 2000) #define AP_USERERR_LEN 1000 /** The function declines to handle the request */ #define AP_DECLINED (AP_START_USERERR + 0) /** @} */ /** * @brief The numeric version information is broken out into fields within this * structure. */ typedef struct { int major; /**< major number */ int minor; /**< minor number */ int patch; /**< patch number */ const char *add_string; /**< additional string like "-dev" */ } ap_version_t; /** * Return httpd's version information in a numeric form. * * @param version Pointer to a version structure for returning the version * information. */ AP_DECLARE(void) ap_get_server_revision(ap_version_t *version); /** * Get the server banner in a form suitable for sending over the * network, with the level of information controlled by the * ServerTokens directive. * @return The server banner */ AP_DECLARE(const char *) ap_get_server_banner(void); /** * Get the server description in a form suitable for local displays, * status reports, or logging. This includes the detailed server * version and information about some modules. It is not affected * by the ServerTokens directive. * @return The server description */ AP_DECLARE(const char *) ap_get_server_description(void); /** * Add a component to the server description and banner strings * @param pconf The pool to allocate the component from * @param component The string to add */ AP_DECLARE(void) ap_add_version_component(apr_pool_t *pconf, const char *component); /** * Get the date a time that the server was built * @return The server build time string */ AP_DECLARE(const char *) ap_get_server_built(void); /* non-HTTP status codes returned by hooks */ #define OK 0 /**< Module has handled this stage. */ #define DECLINED -1 /**< Module declines to handle */ #define DONE -2 /**< Module has served the response completely * - it's safe to die() with no more output */ #define SUSPENDED -3 /**< Module will handle the remainder of the request. * The core will never invoke the request again, */ /** Returned by the bottom-most filter if no data was written. * @see ap_pass_brigade(). */ #define AP_NOBODY_WROTE -100 /** Returned by the bottom-most filter if no data was read. * @see ap_get_brigade(). */ #define AP_NOBODY_READ -101 /** Returned by any filter if the filter chain encounters an error * and has already dealt with the error response. */ #define AP_FILTER_ERROR -102 /** * @defgroup HTTP_Status HTTP Status Codes * @{ */ /** * The size of the static status_lines array in http_protocol.c for * storing all of the potential response status-lines (a sparse table). * When adding a new code here add it to status_lines as well. * A future version should dynamically generate the apr_table_t at startup. */ #define RESPONSE_CODES 103 #define HTTP_CONTINUE 100 #define HTTP_SWITCHING_PROTOCOLS 101 #define HTTP_PROCESSING 102 #define HTTP_OK 200 #define HTTP_CREATED 201 #define HTTP_ACCEPTED 202 #define HTTP_NON_AUTHORITATIVE 203 #define HTTP_NO_CONTENT 204 #define HTTP_RESET_CONTENT 205 #define HTTP_PARTIAL_CONTENT 206 #define HTTP_MULTI_STATUS 207 #define HTTP_ALREADY_REPORTED 208 #define HTTP_IM_USED 226 #define HTTP_MULTIPLE_CHOICES 300 #define HTTP_MOVED_PERMANENTLY 301 #define HTTP_MOVED_TEMPORARILY 302 #define HTTP_SEE_OTHER 303 #define HTTP_NOT_MODIFIED 304 #define HTTP_USE_PROXY 305 #define HTTP_TEMPORARY_REDIRECT 307 #define HTTP_PERMANENT_REDIRECT 308 #define HTTP_BAD_REQUEST 400 #define HTTP_UNAUTHORIZED 401 #define HTTP_PAYMENT_REQUIRED 402 #define HTTP_FORBIDDEN 403 #define HTTP_NOT_FOUND 404 #define HTTP_METHOD_NOT_ALLOWED 405 #define HTTP_NOT_ACCEPTABLE 406 #define HTTP_PROXY_AUTHENTICATION_REQUIRED 407 #define HTTP_REQUEST_TIME_OUT 408 #define HTTP_CONFLICT 409 #define HTTP_GONE 410 #define HTTP_LENGTH_REQUIRED 411 #define HTTP_PRECONDITION_FAILED 412 #define HTTP_REQUEST_ENTITY_TOO_LARGE 413 #define HTTP_REQUEST_URI_TOO_LARGE 414 #define HTTP_UNSUPPORTED_MEDIA_TYPE 415 #define HTTP_RANGE_NOT_SATISFIABLE 416 #define HTTP_EXPECTATION_FAILED 417 #define HTTP_MISDIRECTED_REQUEST 421 #define HTTP_UNPROCESSABLE_ENTITY 422 #define HTTP_LOCKED 423 #define HTTP_FAILED_DEPENDENCY 424 #define HTTP_UPGRADE_REQUIRED 426 #define HTTP_PRECONDITION_REQUIRED 428 #define HTTP_TOO_MANY_REQUESTS 429 #define HTTP_REQUEST_HEADER_FIELDS_TOO_LARGE 431 #define HTTP_UNAVAILABLE_FOR_LEGAL_REASONS 451 #define HTTP_INTERNAL_SERVER_ERROR 500 #define HTTP_NOT_IMPLEMENTED 501 #define HTTP_BAD_GATEWAY 502 #define HTTP_SERVICE_UNAVAILABLE 503 #define HTTP_GATEWAY_TIME_OUT 504 #define HTTP_VERSION_NOT_SUPPORTED 505 #define HTTP_VARIANT_ALSO_VARIES 506 #define HTTP_INSUFFICIENT_STORAGE 507 #define HTTP_LOOP_DETECTED 508 #define HTTP_NOT_EXTENDED 510 #define HTTP_NETWORK_AUTHENTICATION_REQUIRED 511 /** is the status code informational */ #define ap_is_HTTP_INFO(x) (((x) >= 100)&&((x) < 200)) /** is the status code OK ?*/ #define ap_is_HTTP_SUCCESS(x) (((x) >= 200)&&((x) < 300)) /** is the status code a redirect */ #define ap_is_HTTP_REDIRECT(x) (((x) >= 300)&&((x) < 400)) /** is the status code a error (client or server) */ #define ap_is_HTTP_ERROR(x) (((x) >= 400)&&((x) < 600)) /** is the status code a client error */ #define ap_is_HTTP_CLIENT_ERROR(x) (((x) >= 400)&&((x) < 500)) /** is the status code a server error */ #define ap_is_HTTP_SERVER_ERROR(x) (((x) >= 500)&&((x) < 600)) /** is the status code a (potentially) valid response code? */ #define ap_is_HTTP_VALID_RESPONSE(x) (((x) >= 100)&&((x) < 600)) /** should the status code drop the connection */ #define ap_status_drops_connection(x) \ (((x) == HTTP_BAD_REQUEST) || \ ((x) == HTTP_REQUEST_TIME_OUT) || \ ((x) == HTTP_LENGTH_REQUIRED) || \ ((x) == HTTP_REQUEST_ENTITY_TOO_LARGE) || \ ((x) == HTTP_REQUEST_URI_TOO_LARGE) || \ ((x) == HTTP_INTERNAL_SERVER_ERROR) || \ ((x) == HTTP_SERVICE_UNAVAILABLE) || \ ((x) == HTTP_NOT_IMPLEMENTED)) /** does the status imply header only response (i.e. never w/ a body)? */ #define AP_STATUS_IS_HEADER_ONLY(x) ((x) == HTTP_NO_CONTENT || \ (x) == HTTP_NOT_MODIFIED) /** @} */ /** * @defgroup Methods List of Methods recognized by the server * @ingroup APACHE_CORE_DAEMON * @{ * * @brief Methods recognized (but not necessarily handled) by the server. * * These constants are used in bit shifting masks of size int, so it is * unsafe to have more methods than bits in an int. HEAD == M_GET. * This list must be tracked by the list in http_protocol.c in routine * ap_method_name_of(). * */ #define M_GET 0 /** RFC 2616: HTTP */ #define M_PUT 1 /* : */ #define M_POST 2 #define M_DELETE 3 #define M_CONNECT 4 #define M_OPTIONS 5 #define M_TRACE 6 /** RFC 2616: HTTP */ #define M_PATCH 7 /** RFC 5789: PATCH Method for HTTP */ #define M_PROPFIND 8 /** RFC 2518: WebDAV */ #define M_PROPPATCH 9 /* : */ #define M_MKCOL 10 #define M_COPY 11 #define M_MOVE 12 #define M_LOCK 13 #define M_UNLOCK 14 /** RFC 2518: WebDAV */ #define M_VERSION_CONTROL 15 /** RFC 3253: WebDAV Versioning */ #define M_CHECKOUT 16 /* : */ #define M_UNCHECKOUT 17 #define M_CHECKIN 18 #define M_UPDATE 19 #define M_LABEL 20 #define M_REPORT 21 #define M_MKWORKSPACE 22 #define M_MKACTIVITY 23 #define M_BASELINE_CONTROL 24 #define M_MERGE 25 #define M_INVALID 26 /** no valid method */ /** * METHODS needs to be equal to the number of bits * we are using for limit masks. */ #define METHODS 64 /** * The method mask bit to shift for anding with a bitmask. */ #define AP_METHOD_BIT ((apr_int64_t)1) /** @} */ /** @see ap_method_list_t */ typedef struct ap_method_list_t ap_method_list_t; /** * @struct ap_method_list_t * @brief Structure for handling HTTP methods. * * Methods known to the server are accessed via a bitmask shortcut; * extension methods are handled by an array. */ struct ap_method_list_t { /** The bitmask used for known methods */ apr_int64_t method_mask; /** the array used for extension methods */ apr_array_header_t *method_list; }; /** * @defgroup module_magic Module Magic mime types * @{ */ /** Magic for mod_cgi[d] */ #define CGI_MAGIC_TYPE "application/x-httpd-cgi" /** Magic for mod_include */ #define INCLUDES_MAGIC_TYPE "text/x-server-parsed-html" /** Magic for mod_include */ #define INCLUDES_MAGIC_TYPE3 "text/x-server-parsed-html3" /** Magic for mod_dir */ #define DIR_MAGIC_TYPE "httpd/unix-directory" /** Default for r->handler if no content-type set by type_checker */ #define AP_DEFAULT_HANDLER_NAME "" #define AP_IS_DEFAULT_HANDLER_NAME(x) (*x == '\0') /** @} */ /* Just in case your linefeed isn't the one the other end is expecting. */ #if !APR_CHARSET_EBCDIC /** linefeed */ #define LF 10 /** carrige return */ #define CR 13 /** carrige return /Line Feed Combo */ #define CRLF "\015\012" #else /* APR_CHARSET_EBCDIC */ /* For platforms using the EBCDIC charset, the transition ASCII->EBCDIC is done * in the buff package (bread/bputs/bwrite). Everywhere else, we use * "native EBCDIC" CR and NL characters. These are therefore * defined as * '\r' and '\n'. */ #define CR '\r' #define LF '\n' #define CRLF "\r\n" #endif /* APR_CHARSET_EBCDIC */ /** Useful for common code with either platform charset. */ #define CRLF_ASCII "\015\012" /** * @defgroup values_request_rec_body Possible values for request_rec.read_body * @{ * Possible values for request_rec.read_body (set by handling module): */ /** Send 413 error if message has any body */ #define REQUEST_NO_BODY 0 /** Send 411 error if body without Content-Length */ #define REQUEST_CHUNKED_ERROR 1 /** If chunked, remove the chunks for me. */ #define REQUEST_CHUNKED_DECHUNK 2 /** @} // values_request_rec_body */ /** * @defgroup values_request_rec_used_path_info Possible values for request_rec.used_path_info * @ingroup APACHE_CORE_DAEMON * @{ * Possible values for request_rec.used_path_info: */ /** Accept the path_info from the request */ #define AP_REQ_ACCEPT_PATH_INFO 0 /** Return a 404 error if path_info was given */ #define AP_REQ_REJECT_PATH_INFO 1 /** Module may chose to use the given path_info */ #define AP_REQ_DEFAULT_PATH_INFO 2 /** @} // values_request_rec_used_path_info */ /* * Things which may vary per file-lookup WITHIN a request --- * e.g., state of MIME config. Basically, the name of an object, info * about the object, and any other info we may ahve which may need to * change as we go poking around looking for it (e.g., overridden by * .htaccess files). * * Note how the default state of almost all these things is properly * zero, so that allocating it with pcalloc does the right thing without * a whole lot of hairy initialization... so long as we are willing to * make the (fairly) portable assumption that the bit pattern of a NULL * pointer is, in fact, zero. */ /** * @brief This represents the result of calling htaccess; these are cached for * each request. */ struct htaccess_result { /** the directory to which this applies */ const char *dir; /** the overrides allowed for the .htaccess file */ int override; /** the override options allowed for the .htaccess file */ int override_opts; /** Table of allowed directives for override */ apr_table_t *override_list; /** the configuration directives */ struct ap_conf_vector_t *htaccess; /** the next one, or NULL if no more; N.B. never change this */ const struct htaccess_result *next; }; /* The following four types define a hierarchy of activities, so that * given a request_rec r you can write r->connection->server->process * to get to the process_rec. While this reduces substantially the * number of arguments that various hooks require beware that in * threaded versions of the server you must consider multiplexing * issues. */ /** A structure that represents one process */ typedef struct process_rec process_rec; /** A structure that represents a virtual server */ typedef struct server_rec server_rec; /** A structure that represents one connection */ typedef struct conn_rec conn_rec; /** A structure that represents the current request */ typedef struct request_rec request_rec; /** A structure that represents the status of the current connection */ typedef struct conn_state_t conn_state_t; /* ### would be nice to not include this from httpd.h ... */ /* This comes after we have defined the request_rec type */ #include "apr_uri.h" /** * @brief A structure that represents one process */ struct process_rec { /** Global pool. Cleared upon normal exit */ apr_pool_t *pool; /** Configuration pool. Cleared upon restart */ apr_pool_t *pconf; /** The program name used to execute the program */ const char *short_name; /** The command line arguments */ const char * const *argv; /** Number of command line arguments passed to the program */ int argc; }; /** * @brief A structure that represents the current request */ struct request_rec { /** The pool associated with the request */ apr_pool_t *pool; /** The connection to the client */ conn_rec *connection; /** The virtual host for this request */ server_rec *server; /** Pointer to the redirected request if this is an external redirect */ request_rec *next; /** Pointer to the previous request if this is an internal redirect */ request_rec *prev; /** Pointer to the main request if this is a sub-request * (see http_request.h) */ request_rec *main; /* Info about the request itself... we begin with stuff that only * protocol.c should ever touch... */ /** First line of request */ char *the_request; /** HTTP/0.9, "simple" request (e.g. GET /foo\n w/no headers) */ int assbackwards; /** A proxy request (calculated during post_read_request/translate_name) * possible values PROXYREQ_NONE, PROXYREQ_PROXY, PROXYREQ_REVERSE, * PROXYREQ_RESPONSE */ int proxyreq; /** HEAD request, as opposed to GET */ int header_only; /** Protocol version number of protocol; 1.1 = 1001 */ int proto_num; /** Protocol string, as given to us, or HTTP/0.9 */ char *protocol; /** Host, as set by full URI or Host: header. * For literal IPv6 addresses, this does NOT include the surrounding [ ] */ const char *hostname; /** Time when the request started */ apr_time_t request_time; /** Status line, if set by script */ const char *status_line; /** Status line */ int status; /* Request method, two ways; also, protocol, etc.. Outside of protocol.c, * look, but don't touch. */ /** M_GET, M_POST, etc. */ int method_number; /** Request method (eg. GET, HEAD, POST, etc.) */ const char *method; /** * 'allowed' is a bitvector of the allowed methods. * * A handler must ensure that the request method is one that * it is capable of handling. Generally modules should DECLINE * any request methods they do not handle. Prior to aborting the * handler like this the handler should set r->allowed to the list * of methods that it is willing to handle. This bitvector is used * to construct the "Allow:" header required for OPTIONS requests, * and HTTP_METHOD_NOT_ALLOWED and HTTP_NOT_IMPLEMENTED status codes. * * Since the default_handler deals with OPTIONS, all modules can * usually decline to deal with OPTIONS. TRACE is always allowed, * modules don't need to set it explicitly. * * Since the default_handler will always handle a GET, a * module which does *not* implement GET should probably return * HTTP_METHOD_NOT_ALLOWED. Unfortunately this means that a Script GET * handler can't be installed by mod_actions. */ apr_int64_t allowed; /** Array of extension methods */ apr_array_header_t *allowed_xmethods; /** List of allowed methods */ ap_method_list_t *allowed_methods; /** byte count in stream is for body */ apr_off_t sent_bodyct; /** body byte count, for easy access */ apr_off_t bytes_sent; /** Last modified time of the requested resource */ apr_time_t mtime; /* HTTP/1.1 connection-level features */ /** The Range: header */ const char *range; /** The "real" content length */ apr_off_t clength; /** sending chunked transfer-coding */ int chunked; /** Method for reading the request body * (eg. REQUEST_CHUNKED_ERROR, REQUEST_NO_BODY, * REQUEST_CHUNKED_DECHUNK, etc...) */ int read_body; /** reading chunked transfer-coding */ int read_chunked; /** is client waiting for a 100 response? */ unsigned expecting_100; /** The optional kept body of the request. */ apr_bucket_brigade *kept_body; /** For ap_body_to_table(): parsed body */ /* XXX: ap_body_to_table has been removed. Remove body_table too or * XXX: keep it to reintroduce ap_body_to_table without major bump? */ apr_table_t *body_table; /** Remaining bytes left to read from the request body */ apr_off_t remaining; /** Number of bytes that have been read from the request body */ apr_off_t read_length; /* MIME header environments, in and out. Also, an array containing * environment variables to be passed to subprocesses, so people can * write modules to add to that environment. * * The difference between headers_out and err_headers_out is that the * latter are printed even on error, and persist across internal redirects * (so the headers printed for ErrorDocument handlers will have them). * * The 'notes' apr_table_t is for notes from one module to another, with no * other set purpose in mind... */ /** MIME header environment from the request */ apr_table_t *headers_in; /** MIME header environment for the response */ apr_table_t *headers_out; /** MIME header environment for the response, printed even on errors and * persist across internal redirects */ apr_table_t *err_headers_out; /** Array of environment variables to be used for sub processes */ apr_table_t *subprocess_env; /** Notes from one module to another */ apr_table_t *notes; /* content_type, handler, content_encoding, and all content_languages * MUST be lowercased strings. They may be pointers to static strings; * they should not be modified in place. */ /** The content-type for the current request */ const char *content_type; /* Break these out --- we dispatch on 'em */ /** The handler string that we use to call a handler function */ const char *handler; /* What we *really* dispatch on */ /** How to encode the data */ const char *content_encoding; /** Array of strings representing the content languages */ apr_array_header_t *content_languages; /** variant list validator (if negotiated) */ char *vlist_validator; /** If an authentication check was made, this gets set to the user name. */ char *user; /** If an authentication check was made, this gets set to the auth type. */ char *ap_auth_type; /* What object is being requested (either directly, or via include * or content-negotiation mapping). */ /** The URI without any parsing performed */ char *unparsed_uri; /** The path portion of the URI, or "/" if no path provided */ char *uri; /** The filename on disk corresponding to this response */ char *filename; /** The true filename stored in the filesystem, as in the true alpha case * and alias correction, e.g. "Image.jpeg" not "IMAGE$1.JPE" on Windows. * The core map_to_storage canonicalizes r->filename when they mismatch */ char *canonical_filename; /** The PATH_INFO extracted from this request */ char *path_info; /** The QUERY_ARGS extracted from this request */ char *args; /** * Flag for the handler to accept or reject path_info on * the current request. All modules should respect the * AP_REQ_ACCEPT_PATH_INFO and AP_REQ_REJECT_PATH_INFO * values, while AP_REQ_DEFAULT_PATH_INFO indicates they * may follow existing conventions. This is set to the * user's preference upon HOOK_VERY_FIRST of the fixups. */ int used_path_info; /** A flag to determine if the eos bucket has been sent yet */ int eos_sent; /* Various other config info which may change with .htaccess files * These are config vectors, with one void* pointer for each module * (the thing pointed to being the module's business). */ /** Options set in config files, etc. */ struct ap_conf_vector_t *per_dir_config; /** Notes on *this* request */ struct ap_conf_vector_t *request_config; /** Optional request log level configuration. Will usually point * to a server or per_dir config, i.e. must be copied before * modifying */ const struct ap_logconf *log; /** Id to identify request in access and error log. Set when the first * error log entry for this request is generated. */ const char *log_id; /** * A linked list of the .htaccess configuration directives * accessed by this request. * N.B. always add to the head of the list, _never_ to the end. * that way, a sub request's list can (temporarily) point to a parent's list */ const struct htaccess_result *htaccess; /** A list of output filters to be used for this request */ struct ap_filter_t *output_filters; /** A list of input filters to be used for this request */ struct ap_filter_t *input_filters; /** A list of protocol level output filters to be used for this * request */ struct ap_filter_t *proto_output_filters; /** A list of protocol level input filters to be used for this * request */ struct ap_filter_t *proto_input_filters; /** This response can not be cached */ int no_cache; /** There is no local copy of this response */ int no_local_copy; /** Mutex protect callbacks registered with ap_mpm_register_timed_callback * from being run before the original handler finishes running */ apr_thread_mutex_t *invoke_mtx; /** A struct containing the components of URI */ apr_uri_t parsed_uri; /** finfo.protection (st_mode) set to zero if no such file */ apr_finfo_t finfo; /** remote address information from conn_rec, can be overridden if * necessary by a module. * This is the address that originated the request. */ apr_sockaddr_t *useragent_addr; char *useragent_ip; /** MIME trailer environment from the request */ apr_table_t *trailers_in; /** MIME trailer environment from the response */ apr_table_t *trailers_out; /** Originator's DNS name, if known. NULL if DNS hasn't been checked, * "" if it has and no address was found. N.B. Only access this though * ap_get_useragent_host() */ char *useragent_host; /** have we done double-reverse DNS? -1 yes/failure, 0 not yet, * 1 yes/success */ int double_reverse; }; /** * @defgroup ProxyReq Proxy request types * * Possible values of request_rec->proxyreq. A request could be normal, * proxied or reverse proxied. Normally proxied and reverse proxied are * grouped together as just "proxied", but sometimes it's necessary to * tell the difference between the two, such as for authentication. * @{ */ #define PROXYREQ_NONE 0 /**< No proxy */ #define PROXYREQ_PROXY 1 /**< Standard proxy */ #define PROXYREQ_REVERSE 2 /**< Reverse proxy */ #define PROXYREQ_RESPONSE 3 /**< Origin response */ /* @} */ /** * @brief Enumeration of connection keepalive options */ typedef enum { AP_CONN_UNKNOWN, AP_CONN_CLOSE, AP_CONN_KEEPALIVE } ap_conn_keepalive_e; /** * @brief Structure to store things which are per connection */ struct conn_rec { /** Pool associated with this connection */ apr_pool_t *pool; /** Physical vhost this conn came in on */ server_rec *base_server; /** used by http_vhost.c */ void *vhost_lookup_data; /* Information about the connection itself */ /** local address */ apr_sockaddr_t *local_addr; /** remote address; this is the end-point of the next hop, for the address * of the request creator, see useragent_addr in request_rec */ apr_sockaddr_t *client_addr; /** Client's IP address; this is the end-point of the next hop, for the * IP of the request creator, see useragent_ip in request_rec */ char *client_ip; /** Client's DNS name, if known. NULL if DNS hasn't been checked, * "" if it has and no address was found. N.B. Only access this though * get_remote_host() */ char *remote_host; /** Only ever set if doing rfc1413 lookups. N.B. Only access this through * get_remote_logname() */ char *remote_logname; /** server IP address */ char *local_ip; /** used for ap_get_server_name when UseCanonicalName is set to DNS * (ignores setting of HostnameLookups) */ char *local_host; /** ID of this connection; unique at any point in time */ long id; /** Config vector containing pointers to connections per-server * config structures. */ struct ap_conf_vector_t *conn_config; /** Notes on *this* connection: send note from one module to * another. must remain valid for all requests on this conn */ apr_table_t *notes; /** A list of input filters to be used for this connection */ struct ap_filter_t *input_filters; /** A list of output filters to be used for this connection */ struct ap_filter_t *output_filters; /** handle to scoreboard information for this connection */ void *sbh; /** The bucket allocator to use for all bucket/brigade creations */ struct apr_bucket_alloc_t *bucket_alloc; /** The current state of this connection; may be NULL if not used by MPM */ conn_state_t *cs; /** Is there data pending in the input filters? */ int data_in_input_filters; /** Is there data pending in the output filters? */ int data_in_output_filters; /** Are there any filters that clogg/buffer the input stream, breaking * the event mpm. */ unsigned int clogging_input_filters:1; /** have we done double-reverse DNS? -1 yes/failure, 0 not yet, * 1 yes/success */ signed int double_reverse:2; /** Are we still talking? */ unsigned aborted; /** Are we going to keep the connection alive for another request? * @see ap_conn_keepalive_e */ ap_conn_keepalive_e keepalive; /** How many times have we used it? */ int keepalives; /** Optional connection log level configuration. May point to a server or * per_dir config, i.e. must be copied before modifying */ const struct ap_logconf *log; /** Id to identify this connection in error log. Set when the first * error log entry for this connection is generated. */ const char *log_id; /** This points to the current thread being used to process this request, * over the lifetime of a request, the value may change. Users of the connection * record should not rely upon it staying the same between calls that involve * the MPM. */ #if APR_HAS_THREADS apr_thread_t *current_thread; #endif /** The "real" master connection. NULL if I am the master. */ conn_rec *master; }; /** * Enumeration of connection states * The two states CONN_STATE_LINGER_NORMAL and CONN_STATE_LINGER_SHORT may * only be set by the MPM. Use CONN_STATE_LINGER outside of the MPM. */ typedef enum { CONN_STATE_CHECK_REQUEST_LINE_READABLE, CONN_STATE_READ_REQUEST_LINE, CONN_STATE_HANDLER, CONN_STATE_WRITE_COMPLETION, CONN_STATE_SUSPENDED, CONN_STATE_LINGER, /* connection may be closed with lingering */ CONN_STATE_LINGER_NORMAL, /* MPM has started lingering close with normal timeout */ CONN_STATE_LINGER_SHORT, /* MPM has started lingering close with short timeout */ CONN_STATE_NUM /* Number of states (keep/kept last) */ } conn_state_e; typedef enum { CONN_SENSE_DEFAULT, CONN_SENSE_WANT_READ, /* next event must be read */ CONN_SENSE_WANT_WRITE /* next event must be write */ } conn_sense_e; /** * @brief A structure to contain connection state information */ struct conn_state_t { /** Current state of the connection */ conn_state_e state; /** Whether to read instead of write, or write instead of read */ conn_sense_e sense; }; /* Per-vhost config... */ /** * The address 255.255.255.255, when used as a virtualhost address, * will become the "default" server when the ip doesn't match other vhosts. */ #define DEFAULT_VHOST_ADDR 0xfffffffful /** * @struct server_addr_rec * @brief A structure to be used for Per-vhost config */ typedef struct server_addr_rec server_addr_rec; struct server_addr_rec { /** The next server in the list */ server_addr_rec *next; /** The name given in "" */ char *virthost; /** The bound address, for this server */ apr_sockaddr_t *host_addr; /** The bound port, for this server */ apr_port_t host_port; }; struct ap_logconf { /** The per-module log levels */ signed char *module_levels; /** The log level for this server */ int level; }; /** * @brief A structure to store information for each virtual server */ struct server_rec { /** The process this server is running in */ process_rec *process; /** The next server in the list */ server_rec *next; /* Log files --- note that transfer log is now in the modules... */ /** The name of the error log */ char *error_fname; /** A file descriptor that references the error log */ apr_file_t *error_log; /** The log level configuration */ struct ap_logconf log; /* Module-specific configuration for server, and defaults... */ /** Config vector containing pointers to modules' per-server config * structures. */ struct ap_conf_vector_t *module_config; /** MIME type info, etc., before we start checking per-directory info */ struct ap_conf_vector_t *lookup_defaults; /** The name of the server */ const char *defn_name; /** The line of the config file that the server was defined on */ unsigned defn_line_number; /** true if this is the virtual server */ char is_virtual; /* Information for redirects */ /** for redirects, etc. */ apr_port_t port; /** The server request scheme for redirect responses */ const char *server_scheme; /* Contact information */ /** The admin's contact information */ char *server_admin; /** The server hostname */ char *server_hostname; /* Transaction handling */ /** I haven't got a clue */ server_addr_rec *addrs; /** Timeout, as an apr interval, before we give up */ apr_interval_time_t timeout; /** The apr interval we will wait for another request */ apr_interval_time_t keep_alive_timeout; /** Maximum requests per connection */ int keep_alive_max; /** Use persistent connections? */ int keep_alive; /** Normal names for ServerAlias servers */ apr_array_header_t *names; /** Wildcarded names for ServerAlias servers */ apr_array_header_t *wild_names; /** Pathname for ServerPath */ const char *path; /** Length of path */ int pathlen; /** limit on size of the HTTP request line */ int limit_req_line; /** limit on size of any request header field */ int limit_req_fieldsize; /** limit on number of request header fields */ int limit_req_fields; /** Opaque storage location */ void *context; /** Whether the keepalive timeout is explicit (1) or * inherited (0) from the base server (either first * server on the same IP:port or main server) */ unsigned int keep_alive_timeout_set:1; }; /** * @struct ap_sload_t * @brief A structure to hold server load params */ typedef struct ap_sload_t ap_sload_t; struct ap_sload_t { /* percentage of process/threads ready/idle (0->100)*/ int idle; /* percentage of process/threads busy (0->100) */ int busy; /* total bytes served */ apr_off_t bytes_served; /* total access count */ unsigned long access_count; }; /** * @struct ap_loadavg_t * @brief A structure to hold various server loadavg */ typedef struct ap_loadavg_t ap_loadavg_t; struct ap_loadavg_t { /* current loadavg, ala getloadavg() */ float loadavg; /* 5 min loadavg */ float loadavg5; /* 15 min loadavg */ float loadavg15; }; /** * Get the context_document_root for a request. This is a generalization of * the document root, which is too limited in the presence of mappers like * mod_userdir and mod_alias. The context_document_root is the directory * on disk that maps to the context_prefix URI prefix. * @param r The request * @note For resources that do not map to the file system or for very complex * mappings, this information may still be wrong. */ AP_DECLARE(const char *) ap_context_document_root(request_rec *r); /** * Get the context_prefix for a request. The context_prefix URI prefix * maps to the context_document_root on disk. * @param r The request */ AP_DECLARE(const char *) ap_context_prefix(request_rec *r); /** Set context_prefix and context_document_root for a request. * @param r The request * @param prefix the URI prefix, without trailing slash * @param document_root the corresponding directory on disk, without trailing * slash * @note If one of prefix of document_root is NULL, the corrsponding * property will not be changed. */ AP_DECLARE(void) ap_set_context_info(request_rec *r, const char *prefix, const char *document_root); /** Set per-request document root. This is for mass virtual hosting modules * that want to provide the correct DOCUMENT_ROOT value to scripts. * @param r The request * @param document_root the document root for the request. */ AP_DECLARE(void) ap_set_document_root(request_rec *r, const char *document_root); /** * Examine a field value (such as a media-/content-type) string and return * it sans any parameters; e.g., strip off any ';charset=foo' and the like. * @param p Pool to allocate memory from * @param intype The field to examine * @return A copy of the field minus any parameters */ AP_DECLARE(char *) ap_field_noparam(apr_pool_t *p, const char *intype); /** * Convert a time from an integer into a string in a specified format * @param p The pool to allocate memory from * @param t The time to convert * @param fmt The format to use for the conversion * @param gmt Convert the time for GMT? * @return The string that represents the specified time */ AP_DECLARE(char *) ap_ht_time(apr_pool_t *p, apr_time_t t, const char *fmt, int gmt); /* String handling. The *_nc variants allow you to use non-const char **s as arguments (unfortunately C won't automatically convert a char ** to a const char **) */ /** * Get the characters until the first occurrence of a specified character * @param p The pool to allocate memory from * @param line The string to get the characters from * @param stop The character to stop at * @return A copy of the characters up to the first stop character */ AP_DECLARE(char *) ap_getword(apr_pool_t *p, const char **line, char stop); /** * Get the characters until the first occurrence of a specified character * @param p The pool to allocate memory from * @param line The string to get the characters from * @param stop The character to stop at * @return A copy of the characters up to the first stop character * @note This is the same as ap_getword(), except it doesn't use const char **. */ AP_DECLARE(char *) ap_getword_nc(apr_pool_t *p, char **line, char stop); /** * Get the first word from a given string. A word is defined as all characters * up to the first whitespace. * @param p The pool to allocate memory from * @param line The string to traverse * @return The first word in the line */ AP_DECLARE(char *) ap_getword_white(apr_pool_t *p, const char **line); /** * Get the first word from a given string. A word is defined as all characters * up to the first whitespace. * @param p The pool to allocate memory from * @param line The string to traverse * @return The first word in the line * @note The same as ap_getword_white(), except it doesn't use const char** */ AP_DECLARE(char *) ap_getword_white_nc(apr_pool_t *p, char **line); /** * Get all characters from the first occurrence of @a stop to the first "\0" * @param p The pool to allocate memory from * @param line The line to traverse * @param stop The character to start at * @return A copy of all characters after the first occurrence of the specified * character */ AP_DECLARE(char *) ap_getword_nulls(apr_pool_t *p, const char **line, char stop); /** * Get all characters from the first occurrence of @a stop to the first "\0" * @param p The pool to allocate memory from * @param line The line to traverse * @param stop The character to start at * @return A copy of all characters after the first occurrence of the specified * character * @note The same as ap_getword_nulls(), except it doesn't use const char **. */ AP_DECLARE(char *) ap_getword_nulls_nc(apr_pool_t *p, char **line, char stop); /** * Get the second word in the string paying attention to quoting * @param p The pool to allocate from * @param line The line to traverse * @return A copy of the string */ AP_DECLARE(char *) ap_getword_conf(apr_pool_t *p, const char **line); /** * Get the second word in the string paying attention to quoting * @param p The pool to allocate from * @param line The line to traverse * @return A copy of the string * @note The same as ap_getword_conf(), except it doesn't use const char **. */ AP_DECLARE(char *) ap_getword_conf_nc(apr_pool_t *p, char **line); /** * Get the second word in the string paying attention to quoting, * with {...} supported as well as "..." and '...' * @param p The pool to allocate from * @param line The line to traverse * @return A copy of the string */ AP_DECLARE(char *) ap_getword_conf2(apr_pool_t *p, const char **line); /** * Get the second word in the string paying attention to quoting, * with {...} supported as well as "..." and '...' * @param p The pool to allocate from * @param line The line to traverse * @return A copy of the string * @note The same as ap_getword_conf2(), except it doesn't use const char **. */ AP_DECLARE(char *) ap_getword_conf2_nc(apr_pool_t *p, char **line); /** * Check a string for any config define or environment variable construct * and replace each of them by the value of that variable, if it exists. * The default syntax of the constructs is ${ENV} but can be changed by * setting the define::* config defines. If the variable does not exist, * leave the ${ENV} construct alone but print a warning. * @param p The pool to allocate from * @param word The string to check * @return The string with the replaced environment variables */ AP_DECLARE(const char *) ap_resolve_env(apr_pool_t *p, const char * word); /** * Size an HTTP header field list item, as separated by a comma. * @param field The field to size * @param len The length of the field * @return The return value is a pointer to the beginning of the non-empty * list item within the original string (or NULL if there is none) and the * address of field is shifted to the next non-comma, non-whitespace * character. len is the length of the item excluding any beginning whitespace. */ AP_DECLARE(const char *) ap_size_list_item(const char **field, int *len); /** * Retrieve an HTTP header field list item, as separated by a comma, * while stripping insignificant whitespace and lowercasing anything not in * a quoted string or comment. * @param p The pool to allocate from * @param field The field to retrieve * @return The return value is a new string containing the converted list * item (or NULL if none) and the address pointed to by field is * shifted to the next non-comma, non-whitespace. */ AP_DECLARE(char *) ap_get_list_item(apr_pool_t *p, const char **field); /** * Find an item in canonical form (lowercase, no extra spaces) within * an HTTP field value list. * @param p The pool to allocate from * @param line The field value list to search * @param tok The token to search for * @return 1 if found, 0 if not found. */ AP_DECLARE(int) ap_find_list_item(apr_pool_t *p, const char *line, const char *tok); /** * Do a weak ETag comparison within an HTTP field value list. * @param p The pool to allocate from * @param line The field value list to search * @param tok The token to search for * @return 1 if found, 0 if not found. */ AP_DECLARE(int) ap_find_etag_weak(apr_pool_t *p, const char *line, const char *tok); /** * Do a strong ETag comparison within an HTTP field value list. * @param p The pool to allocate from * @param line The field value list to search * @param tok The token to search for * @return 1 if found, 0 if not found. */ AP_DECLARE(int) ap_find_etag_strong(apr_pool_t *p, const char *line, const char *tok); /* Scan a string for field content chars, as defined by RFC7230 section 3.2 * including VCHAR/obs-text, as well as HT and SP * @param ptr The string to scan * @return A pointer to the first (non-HT) ASCII ctrl character. * @note lws and trailing whitespace are scanned, the caller is responsible * for trimming leading and trailing whitespace */ AP_DECLARE(const char *) ap_scan_http_field_content(const char *ptr); /* Scan a string for token characters, as defined by RFC7230 section 3.2.6 * @param ptr The string to scan * @return A pointer to the first non-token character. */ AP_DECLARE(const char *) ap_scan_http_token(const char *ptr); /* Scan a string for visible ASCII (0x21-0x7E) or obstext (0x80+) * and return a pointer to the first SP/CTL/NUL character encountered. * @param ptr The string to scan * @return A pointer to the first SP/CTL character. */ AP_DECLARE(const char *) ap_scan_vchar_obstext(const char *ptr); /** * Retrieve an array of tokens in the format "1#token" defined in RFC2616. Only * accepts ',' as a delimiter, does not accept quoted strings, and errors on * any separator. * @param p The pool to allocate from * @param tok The line to read tokens from * @param tokens Pointer to an array of tokens. If not NULL, must be an array * of char*, otherwise it will be allocated on @a p when a token is found * @param skip_invalid If true, when an invalid separator is encountered, it * will be ignored. * @return NULL on success, an error string otherwise. * @remark *tokens may be NULL on output if NULL in input and no token is found */ AP_DECLARE(const char *) ap_parse_token_list_strict(apr_pool_t *p, const char *tok, apr_array_header_t **tokens, int skip_invalid); /** * Retrieve a token, spacing over it and adjusting the pointer to * the first non-white byte afterwards. Note that these tokens * are delimited by semis and commas and can also be delimited * by whitespace at the caller's option. * @param p The pool to allocate from * @param accept_line The line to retrieve the token from (adjusted afterwards) * @param accept_white Is it delimited by whitespace * @return the token */ AP_DECLARE(char *) ap_get_token(apr_pool_t *p, const char **accept_line, int accept_white); /** * Find http tokens, see the definition of token from RFC2068 * @param p The pool to allocate from * @param line The line to find the token * @param tok The token to find * @return 1 if the token is found, 0 otherwise */ AP_DECLARE(int) ap_find_token(apr_pool_t *p, const char *line, const char *tok); /** * find http tokens from the end of the line * @param p The pool to allocate from * @param line The line to find the token * @param tok The token to find * @return 1 if the token is found, 0 otherwise */ AP_DECLARE(int) ap_find_last_token(apr_pool_t *p, const char *line, const char *tok); /** * Check for an Absolute URI syntax * @param u The string to check * @return 1 if URI, 0 otherwise */ AP_DECLARE(int) ap_is_url(const char *u); /** * Unescape a string * @param url The string to unescape * @return 0 on success, non-zero otherwise */ AP_DECLARE(int) ap_unescape_all(char *url); /** * Unescape a URL * @param url The url to unescape * @return 0 on success, non-zero otherwise */ AP_DECLARE(int) ap_unescape_url(char *url); /** * Unescape a URL, but leaving %2f (slashes) escaped * @param url The url to unescape * @param decode_slashes Whether or not slashes should be decoded * @return 0 on success, non-zero otherwise */ AP_DECLARE(int) ap_unescape_url_keep2f(char *url, int decode_slashes); /** * Unescape an application/x-www-form-urlencoded string * @param query The query to unescape * @return 0 on success, non-zero otherwise */ AP_DECLARE(int) ap_unescape_urlencoded(char *query); /** * Convert all double slashes to single slashes, except where significant * to the filesystem on the current platform. * @param name The string to convert, assumed to be a filesystem path */ AP_DECLARE(void) ap_no2slash(char *name); /** * Convert all double slashes to single slashes, except where significant * to the filesystem on the current platform. * @param name The string to convert * @param is_fs_path if set to 0, the significance of any double-slashes is * ignored. */ AP_DECLARE(void) ap_no2slash_ex(char *name, int is_fs_path); /** * Remove all ./ and xx/../ substrings from a file name. Also remove * any leading ../ or /../ substrings. * @param name the file name to parse */ AP_DECLARE(void) ap_getparents(char *name); /** * Escape a path segment, as defined in RFC 1808 * @param p The pool to allocate from * @param s The path to convert * @return The converted URL */ AP_DECLARE(char *) ap_escape_path_segment(apr_pool_t *p, const char *s); /** * Escape a path segment, as defined in RFC 1808, to a preallocated buffer. * @param c The preallocated buffer to write to * @param s The path to convert * @return The converted URL (c) */ AP_DECLARE(char *) ap_escape_path_segment_buffer(char *c, const char *s); /** * convert an OS path to a URL in an OS dependent way. * @param p The pool to allocate from * @param path The path to convert * @param partial if set, assume that the path will be appended to something * with a '/' in it (and thus does not prefix "./") * @return The converted URL */ AP_DECLARE(char *) ap_os_escape_path(apr_pool_t *p, const char *path, int partial); /** @see ap_os_escape_path */ #define ap_escape_uri(ppool,path) ap_os_escape_path(ppool,path,1) /** * Escape a string as application/x-www-form-urlencoded * @param p The pool to allocate from * @param s The path to convert * @return The converted URL */ AP_DECLARE(char *) ap_escape_urlencoded(apr_pool_t *p, const char *s); /** * Escape a string as application/x-www-form-urlencoded, to a preallocated buffer * @param c The preallocated buffer to write to * @param s The path to convert * @return The converted URL (c) */ AP_DECLARE(char *) ap_escape_urlencoded_buffer(char *c, const char *s); /** * Escape an html string * @param p The pool to allocate from * @param s The html to escape * @return The escaped string */ #define ap_escape_html(p,s) ap_escape_html2(p,s,0) /** * Escape an html string * @param p The pool to allocate from * @param s The html to escape * @param toasc Whether to escape all non-ASCII chars to \&\#nnn; * @return The escaped string */ AP_DECLARE(char *) ap_escape_html2(apr_pool_t *p, const char *s, int toasc); /** * Escape a string for logging * @param p The pool to allocate from * @param str The string to escape * @return The escaped string */ AP_DECLARE(char *) ap_escape_logitem(apr_pool_t *p, const char *str); /** * Escape a string for logging into the error log (without a pool) * @param dest The buffer to write to * @param source The string to escape * @param buflen The buffer size for the escaped string (including "\0") * @return The len of the escaped string (always < maxlen) */ AP_DECLARE(apr_size_t) ap_escape_errorlog_item(char *dest, const char *source, apr_size_t buflen); /** * Construct a full hostname * @param p The pool to allocate from * @param hostname The hostname of the server * @param port The port the server is running on * @param r The current request * @return The server's hostname */ AP_DECLARE(char *) ap_construct_server(apr_pool_t *p, const char *hostname, apr_port_t port, const request_rec *r); /** * Escape a shell command * @param p The pool to allocate from * @param s The command to escape * @return The escaped shell command */ AP_DECLARE(char *) ap_escape_shell_cmd(apr_pool_t *p, const char *s); /** * Count the number of directories in a path * @param path The path to count * @return The number of directories */ AP_DECLARE(int) ap_count_dirs(const char *path); /** * Copy at most @a n leading directories of @a s into @a d. @a d * should be at least as large as @a s plus 1 extra byte * * @param d The location to copy to * @param s The location to copy from * @param n The number of directories to copy * @return value is the ever useful pointer to the trailing "\0" of d * @note on platforms with drive letters, n = 0 returns the "/" root, * whereas n = 1 returns the "d:/" root. On all other platforms, n = 0 * returns the empty string. */ AP_DECLARE(char *) ap_make_dirstr_prefix(char *d, const char *s, int n); /** * Return the parent directory name (including trailing /) of the file * @a s * @param p The pool to allocate from * @param s The file to get the parent of * @return A copy of the file's parent directory */ AP_DECLARE(char *) ap_make_dirstr_parent(apr_pool_t *p, const char *s); /** * Given a directory and filename, create a single path from them. This * function is smart enough to ensure that there is a single '/' between the * directory and file names * @param a The pool to allocate from * @param dir The directory name * @param f The filename * @return A copy of the full path * @note Never consider using this function if you are dealing with filesystem * names that need to remain canonical, unless you are merging an apr_dir_read * path and returned filename. Otherwise, the result is not canonical. */ AP_DECLARE(char *) ap_make_full_path(apr_pool_t *a, const char *dir, const char *f); /** * Test if the given path has an absolute path. * @param p The pool to allocate from * @param dir The directory name * @note The converse is not necessarily true, some OS's (Win32/OS2/Netware) have * multiple forms of absolute paths. This only reports if the path is absolute * in a canonical sense. */ AP_DECLARE(int) ap_os_is_path_absolute(apr_pool_t *p, const char *dir); /** * Does the provided string contain wildcard characters? This is useful * for determining if the string should be passed to strcmp_match or to strcmp. * The only wildcard characters recognized are '?' and '*' * @param str The string to check * @return 1 if the string has wildcards, 0 otherwise */ AP_DECLARE(int) ap_is_matchexp(const char *str); /** * Determine if a string matches a pattern containing the wildcards '?' or '*' * @param str The string to check * @param expected The pattern to match against * @return 0 if the two strings match, 1 otherwise */ AP_DECLARE(int) ap_strcmp_match(const char *str, const char *expected); /** * Determine if a string matches a pattern containing the wildcards '?' or '*', * ignoring case * @param str The string to check * @param expected The pattern to match against * @return 0 if the two strings match, 1 otherwise */ AP_DECLARE(int) ap_strcasecmp_match(const char *str, const char *expected); /** * Find the first occurrence of the substring s2 in s1, regardless of case * @param s1 The string to search * @param s2 The substring to search for * @return A pointer to the beginning of the substring * @remark See apr_strmatch() for a faster alternative */ AP_DECLARE(char *) ap_strcasestr(const char *s1, const char *s2); /** * Return a pointer to the location inside of bigstring immediately after prefix * @param bigstring The input string * @param prefix The prefix to strip away * @return A pointer relative to bigstring after prefix */ AP_DECLARE(const char *) ap_stripprefix(const char *bigstring, const char *prefix); /** * Decode a base64 encoded string into memory allocated from a pool * @param p The pool to allocate from * @param bufcoded The encoded string * @return The decoded string */ AP_DECLARE(char *) ap_pbase64decode(apr_pool_t *p, const char *bufcoded); /** * Encode a string into memory allocated from a pool in base 64 format * @param p The pool to allocate from * @param string The plaintext string * @return The encoded string */ AP_DECLARE(char *) ap_pbase64encode(apr_pool_t *p, char *string); /** * Compile a regular expression to be used later. The regex is freed when * the pool is destroyed. * @param p The pool to allocate from * @param pattern the regular expression to compile * @param cflags The bitwise or of one or more of the following: * @li REG_EXTENDED - Use POSIX extended Regular Expressions * @li REG_ICASE - Ignore case * @li REG_NOSUB - Support for substring addressing of matches * not required * @li REG_NEWLINE - Match-any-character operators don't match new-line * @return The compiled regular expression */ AP_DECLARE(ap_regex_t *) ap_pregcomp(apr_pool_t *p, const char *pattern, int cflags); /** * Free the memory associated with a compiled regular expression * @param p The pool the regex was allocated from * @param reg The regular expression to free * @note This function is only necessary if the regex should be cleaned * up before the pool */ AP_DECLARE(void) ap_pregfree(apr_pool_t *p, ap_regex_t *reg); /** * After performing a successful regex match, you may use this function to * perform a series of string substitutions based on subexpressions that were * matched during the call to ap_regexec. This function is limited to * result strings of 64K. Consider using ap_pregsub_ex() instead. * @param p The pool to allocate from * @param input An arbitrary string containing $1 through $9. These are * replaced with the corresponding matched sub-expressions * @param source The string that was originally matched to the regex * @param nmatch the nmatch returned from ap_pregex * @param pmatch the pmatch array returned from ap_pregex * @return The substituted string, or NULL on error */ AP_DECLARE(char *) ap_pregsub(apr_pool_t *p, const char *input, const char *source, apr_size_t nmatch, ap_regmatch_t pmatch[]); /** * After performing a successful regex match, you may use this function to * perform a series of string substitutions based on subexpressions that were * matched during the call to ap_regexec * @param p The pool to allocate from * @param result where to store the result, will be set to NULL on error * @param input An arbitrary string containing $1 through $9. These are * replaced with the corresponding matched sub-expressions * @param source The string that was originally matched to the regex * @param nmatch the nmatch returned from ap_pregex * @param pmatch the pmatch array returned from ap_pregex * @param maxlen the maximum string length to return, 0 for unlimited * @return APR_SUCCESS if successful, APR_ENOMEM or other error code otherwise. */ AP_DECLARE(apr_status_t) ap_pregsub_ex(apr_pool_t *p, char **result, const char *input, const char *source, apr_size_t nmatch, ap_regmatch_t pmatch[], apr_size_t maxlen); /** * We want to downcase the type/subtype for comparison purposes * but nothing else because ;parameter=foo values are case sensitive. * @param s The content-type to convert to lowercase */ AP_DECLARE(void) ap_content_type_tolower(char *s); /** * convert a string to all lowercase * @param s The string to convert to lowercase */ AP_DECLARE(void) ap_str_tolower(char *s); /** * convert a string to all uppercase * @param s The string to convert to uppercase */ AP_DECLARE(void) ap_str_toupper(char *s); /** * Search a string from left to right for the first occurrence of a * specific character * @param str The string to search * @param c The character to search for * @return The index of the first occurrence of c in str */ AP_DECLARE(int) ap_ind(const char *str, char c); /* Sigh... */ /** * Search a string from right to left for the first occurrence of a * specific character * @param str The string to search * @param c The character to search for * @return The index of the first occurrence of c in str */ AP_DECLARE(int) ap_rind(const char *str, char c); /** * Given a string, replace any bare " with \\" . * @param p The pool to allocate memory from * @param instring The string to search for " * @return A copy of the string with escaped quotes */ AP_DECLARE(char *) ap_escape_quotes(apr_pool_t *p, const char *instring); /** * Given a string, append the PID deliminated by delim. * Usually used to create a pid-appended filepath name * (eg: /a/b/foo -> /a/b/foo.6726). A function, and not * a macro, to avoid unistd.h dependency * @param p The pool to allocate memory from * @param string The string to append the PID to * @param delim The string to use to deliminate the string from the PID * @return A copy of the string with the PID appended */ AP_DECLARE(char *) ap_append_pid(apr_pool_t *p, const char *string, const char *delim); /** * Parse a given timeout parameter string into an apr_interval_time_t value. * The unit of the time interval is given as postfix string to the numeric * string. Currently the following units are understood: * * ms : milliseconds * s : seconds * mi[n] : minutes * h : hours * * If no unit is contained in the given timeout parameter the default_time_unit * will be used instead. * @param timeout_parameter The string containing the timeout parameter. * @param timeout The timeout value to be returned. * @param default_time_unit The default time unit to use if none is specified * in timeout_parameter. * @return Status value indicating whether the parsing was successful or not. */ AP_DECLARE(apr_status_t) ap_timeout_parameter_parse( const char *timeout_parameter, apr_interval_time_t *timeout, const char *default_time_unit); /** * Determine if a request has a request body or not. * * @param r the request_rec of the request * @return truth value */ AP_DECLARE(int) ap_request_has_body(request_rec *r); /** * Cleanup a string (mainly to be filesystem safe) * We only allow '_' and alphanumeric chars. Non-printable * map to 'x' and all others map to '_' * * @param p pool to use to allocate dest * @param src string to clean up * @param dest cleaned up, allocated string * @return Status value indicating whether the cleaning was successful or not. */ AP_DECLARE(apr_status_t) ap_pstr2_alnum(apr_pool_t *p, const char *src, const char **dest); /** * Cleanup a string (mainly to be filesystem safe) * We only allow '_' and alphanumeric chars. Non-printable * map to 'x' and all others map to '_' * * @param src string to clean up * @param dest cleaned up, pre-allocated string * @return Status value indicating whether the cleaning was successful or not. */ AP_DECLARE(apr_status_t) ap_str2_alnum(const char *src, char *dest); /** * Structure to store the contents of an HTTP form of the type * application/x-www-form-urlencoded. * * Currently it contains the name as a char* of maximum length * HUGE_STRING_LEN, and a value in the form of a bucket brigade * of arbitrary length. */ typedef struct { const char *name; apr_bucket_brigade *value; } ap_form_pair_t; /** * Read the body and parse any form found, which must be of the * type application/x-www-form-urlencoded. * @param r request containing POSTed form data * @param f filter * @param ptr returned array of ap_form_pair_t * @param num max num of params or -1 for unlimited * @param size max size allowed for parsed data * @return OK or HTTP error */ AP_DECLARE(int) ap_parse_form_data(request_rec *r, struct ap_filter_t *f, apr_array_header_t **ptr, apr_size_t num, apr_size_t size); /* Misc system hackery */ /** * Given the name of an object in the file system determine if it is a directory * @param p The pool to allocate from * @param name The name of the object to check * @return 1 if it is a directory, 0 otherwise */ AP_DECLARE(int) ap_is_rdirectory(apr_pool_t *p, const char *name); /** * Given the name of an object in the file system determine if it is a directory - this version is symlink aware * @param p The pool to allocate from * @param name The name of the object to check * @return 1 if it is a directory, 0 otherwise */ AP_DECLARE(int) ap_is_directory(apr_pool_t *p, const char *name); #ifdef _OSD_POSIX extern int os_init_job_environment(server_rec *s, const char *user_name, int one_process); #endif /* _OSD_POSIX */ /** * Determine the local host name for the current machine * @param p The pool to allocate from * @return A copy of the local host name */ char *ap_get_local_host(apr_pool_t *p); /** * Log an assertion to the error log * @param szExp The assertion that failed * @param szFile The file the assertion is in * @param nLine The line the assertion is defined on */ AP_DECLARE(void) ap_log_assert(const char *szExp, const char *szFile, int nLine) __attribute__((noreturn)); /** * @internal Internal Assert function */ #define ap_assert(exp) ((exp) ? (void)0 : ap_log_assert(#exp,__FILE__,__LINE__)) /** * Redefine assert() to something more useful for an Apache... * * Use ap_assert() if the condition should always be checked. * Use AP_DEBUG_ASSERT() if the condition should only be checked when AP_DEBUG * is defined. */ #ifdef AP_DEBUG #define AP_DEBUG_ASSERT(exp) ap_assert(exp) #else #define AP_DEBUG_ASSERT(exp) ((void)0) #endif /** * @defgroup stopsignal Flags which indicate places where the server should stop for debugging. * @{ * A set of flags which indicate places where the server should raise(SIGSTOP). * This is useful for debugging, because you can then attach to that process * with gdb and continue. This is important in cases where one_process * debugging isn't possible. */ /** stop on a Detach */ #define SIGSTOP_DETACH 1 /** stop making a child process */ #define SIGSTOP_MAKE_CHILD 2 /** stop spawning a child process */ #define SIGSTOP_SPAWN_CHILD 4 /** stop spawning a child process with a piped log */ #define SIGSTOP_PIPED_LOG_SPAWN 8 /** stop spawning a CGI child process */ #define SIGSTOP_CGI_CHILD 16 /** Macro to get GDB started */ #ifdef DEBUG_SIGSTOP extern int raise_sigstop_flags; #define RAISE_SIGSTOP(x) do { \ if (raise_sigstop_flags & SIGSTOP_##x) raise(SIGSTOP);\ } while (0) #else #define RAISE_SIGSTOP(x) #endif /** @} */ /** * Get HTML describing the address and (optionally) admin of the server. * @param prefix Text which is prepended to the return value * @param r The request_rec * @return HTML describing the server, allocated in @a r's pool. */ AP_DECLARE(const char *) ap_psignature(const char *prefix, request_rec *r); /* The C library has functions that allow const to be silently dropped ... these macros detect the drop in maintainer mode, but use the native methods for normal builds Note that on some platforms (e.g., AIX with gcc, Solaris with gcc), string.h needs to be included before the macros are defined or compilation will fail. */ #include AP_DECLARE(char *) ap_strchr(char *s, int c); AP_DECLARE(const char *) ap_strchr_c(const char *s, int c); AP_DECLARE(char *) ap_strrchr(char *s, int c); AP_DECLARE(const char *) ap_strrchr_c(const char *s, int c); AP_DECLARE(char *) ap_strstr(char *s, const char *c); AP_DECLARE(const char *) ap_strstr_c(const char *s, const char *c); #ifdef AP_DEBUG #undef strchr # define strchr(s, c) ap_strchr(s,c) #undef strrchr # define strrchr(s, c) ap_strrchr(s,c) #undef strstr # define strstr(s, c) ap_strstr(s,c) #else /** use this instead of strchr */ # define ap_strchr(s, c) strchr(s, c) /** use this instead of strchr */ # define ap_strchr_c(s, c) strchr(s, c) /** use this instead of strrchr */ # define ap_strrchr(s, c) strrchr(s, c) /** use this instead of strrchr */ # define ap_strrchr_c(s, c) strrchr(s, c) /** use this instead of strrstr*/ # define ap_strstr(s, c) strstr(s, c) /** use this instead of strrstr*/ # define ap_strstr_c(s, c) strstr(s, c) #endif /** * Generate pseudo random bytes. * This is a convenience interface to apr_random. It is cheaper but less * secure than apr_generate_random_bytes(). * @param buf where to store the bytes * @param size number of bytes to generate * @note ap_random_insecure_bytes() is thread-safe, it uses a mutex on * threaded MPMs. */ AP_DECLARE(void) ap_random_insecure_bytes(void *buf, apr_size_t size); /** * Get a pseudo random number in a range. * @param min low end of range * @param max high end of range * @return a number in the range */ AP_DECLARE(apr_uint32_t) ap_random_pick(apr_uint32_t min, apr_uint32_t max); /** * Abort with a error message signifying out of memory */ AP_DECLARE(void) ap_abort_on_oom(void) __attribute__((noreturn)); /** * Wrapper for malloc() that calls ap_abort_on_oom() if out of memory * @param size size of the memory block * @return pointer to the allocated memory * @note ap_malloc may be implemented as a macro */ AP_DECLARE(void *) ap_malloc(size_t size) __attribute__((malloc)) AP_FN_ATTR_ALLOC_SIZE(1); /** * Wrapper for calloc() that calls ap_abort_on_oom() if out of memory * @param nelem number of elements to allocate memory for * @param size size of a single element * @return pointer to the allocated memory * @note ap_calloc may be implemented as a macro */ AP_DECLARE(void *) ap_calloc(size_t nelem, size_t size) __attribute__((malloc)) AP_FN_ATTR_ALLOC_SIZE2(1,2); /** * Wrapper for realloc() that calls ap_abort_on_oom() if out of memory * @param ptr pointer to the old memory block (or NULL) * @param size new size of the memory block * @return pointer to the reallocated memory * @note ap_realloc may be implemented as a macro */ AP_DECLARE(void *) ap_realloc(void *ptr, size_t size) AP_FN_ATTR_WARN_UNUSED_RESULT AP_FN_ATTR_ALLOC_SIZE(2); /** * Get server load params * @param ld struct to populate: -1 in fields means error */ AP_DECLARE(void) ap_get_sload(ap_sload_t *ld); /** * Get server load averages (ala getloadavg) * @param ld struct to populate: -1 in fields means error */ AP_DECLARE(void) ap_get_loadavg(ap_loadavg_t *ld); /** * Convert binary data into a hex string * @param src pointer to the data * @param srclen length of the data * @param dest pointer to buffer of length (2 * srclen + 1). The resulting * string will be NUL-terminated. */ AP_DECLARE(void) ap_bin2hex(const void *src, apr_size_t srclen, char *dest); /** * Short function to execute a command and return the first line of * output minus \r \n. Useful for "obscuring" passwords via exec calls * @param p the pool to allocate from * @param cmd the command to execute * @param argv the arguments to pass to the cmd * @return ptr to characters or NULL on any error */ AP_DECLARE(char *) ap_get_exec_line(apr_pool_t *p, const char *cmd, const char * const *argv); #define AP_NORESTART APR_OS_START_USEERR + 1 /** * Get the first index of the string in the array or -1 if not found. Start * searching a start. * @param array The array the check * @param s The string to find * @param start Start index for search. If start is out of bounds (negative or equal to array length or greater), -1 will be returned. * @return index of string in array or -1 */ AP_DECLARE(int) ap_array_str_index(const apr_array_header_t *array, const char *s, int start); /** * Check if the string is member of the given array by strcmp. * @param array The array the check * @param s The string to find * @return !=0 iff string is member of array (via strcmp) */ AP_DECLARE(int) ap_array_str_contains(const apr_array_header_t *array, const char *s); /** * Perform a case-insensitive comparison of two strings @a str1 and @a str2, * treating upper and lower case values of the 26 standard C/POSIX alphabetic * characters as equivalent. Extended latin characters outside of this set * are treated as unique octets, irrespective of the current locale. * * Returns in integer greater than, equal to, or less than 0, * according to whether @a str1 is considered greater than, equal to, * or less than @a str2. * * @note Same code as apr_cstr_casecmp, which arrives in APR 1.6 */ AP_DECLARE(int) ap_cstr_casecmp(const char *s1, const char *s2); /** * Perform a case-insensitive comparison of two strings @a str1 and @a str2, * treating upper and lower case values of the 26 standard C/POSIX alphabetic * characters as equivalent. Extended latin characters outside of this set * are treated as unique octets, irrespective of the current locale. * * Returns in integer greater than, equal to, or less than 0, * according to whether @a str1 is considered greater than, equal to, * or less than @a str2. * * @note Same code as apr_cstr_casecmpn, which arrives in APR 1.6 */ AP_DECLARE(int) ap_cstr_casecmpn(const char *s1, const char *s2, apr_size_t n); /** * Default flags for ap_dir_*fnmatch(). */ #define AP_DIR_FLAG_NONE 0 /** * If set, wildcards that match no files or directories will be ignored, otherwise * an error is triggered. */ #define AP_DIR_FLAG_OPTIONAL 1 /** * If set, and the wildcard resolves to a directory, recursively find all files * below that directory, otherwise return the directory. */ #define AP_DIR_FLAG_RECURSIVE 2 /** * Structure to provide the state of a directory match. */ typedef struct ap_dir_match_t ap_dir_match_t; /** * Concrete structure to provide the state of a directory match. */ struct ap_dir_match_t { /** Pool to use for allocating the result */ apr_pool_t *p; /** Temporary pool used for directory traversal */ apr_pool_t *ptemp; /** Prefix for log messages */ const char *prefix; /** Callback for each file found that matches the wildcard. Return NULL on success, an error string on error. */ const char *(*cb)(ap_dir_match_t *w, const char *fname); /** Context for the callback */ void *ctx; /** Flags to indicate whether optional or recursive */ int flags; /** Recursion depth safety check */ unsigned int depth; }; /** * Search for files given a non wildcard filename with non native separators. * * If the provided filename points at a file, the callback within ap_dir_match_t is * triggered for that file, and this function returns the result of the callback. * * If the provided filename points at a directory, and recursive within ap_dir_match_t * is true, the callback will be triggered for every file found recursively beneath * that directory, otherwise the callback is triggered once for the directory itself. * This function returns the result of the callback. * * If the provided path points to neither a file nor a directory, and optional within * ap_dir_match_t is true, this function returns NULL. If optional within ap_dir_match_t * is false, this function will return an error string indicating that the path does not * exist. * * @param w Directory match structure containing callback and context. * @param fname The name of the file or directory, with non native separators. * @return NULL on success, or a string describing the error. */ AP_DECLARE(const char *)ap_dir_nofnmatch(ap_dir_match_t *w, const char *fname) __attribute__((nonnull(1,2))); /** * Search for files given a wildcard filename with non native separators. * * If the filename contains a wildcard, all files and directories that match the wildcard * will be returned. * * ap_dir_nofnmatch() is called for each directory and file found, and the callback * within ap_dir_match_t triggered as described above. * * Wildcards may appear in both directory and file components in the path, and * wildcards may appear more than once. * * @param w Directory match structure containing callback and context. * @param path Path prefix for search, with non native separators and no wildcards. * @param fname The name of the file or directory, with non native separators and * optional wildcards. * @return NULL on success, or a string describing the error. */ AP_DECLARE(const char *)ap_dir_fnmatch(ap_dir_match_t *w, const char *path, const char *fname) __attribute__((nonnull(1,3))); #ifdef __cplusplus } #endif #endif /* !APACHE_HTTPD_H */ /** @} //APACHE Daemon */ /** @} //APACHE Core */ /** @} //APACHE super group */ httpd-2.4.41/include/http_connection.h0000644000000000000500000001435612663553417016253 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file http_connection.h * @brief Apache connection library * * @defgroup APACHE_CORE_CONNECTION Connection Library * @ingroup APACHE_CORE * @{ */ #ifndef APACHE_HTTP_CONNECTION_H #define APACHE_HTTP_CONNECTION_H #include "apr_network_io.h" #include "apr_buckets.h" #ifdef __cplusplus extern "C" { #endif /** * This is the protocol module driver. This calls all of the * pre-connection and connection hooks for all protocol modules. * @param c The connection on which the request is read * @param csd The mechanism on which this connection is to be read. * Most times this will be a socket, but it is up to the module * that accepts the request to determine the exact type. */ AP_CORE_DECLARE(void) ap_process_connection(conn_rec *c, void *csd); /** * Shutdown the connection for writing. * @param c The connection to shutdown * @param flush Whether or not to flush pending data before * @return APR_SUCCESS or the underlying error */ AP_CORE_DECLARE(apr_status_t) ap_shutdown_conn(conn_rec *c, int flush); /** * Flushes all remain data in the client send buffer * @param c The connection to flush * @remark calls ap_shutdown_conn(c, 1) */ AP_CORE_DECLARE(void) ap_flush_conn(conn_rec *c); /** * This function is responsible for the following cases: *
 * we now proceed to read from the client until we get EOF, or until
 * MAX_SECS_TO_LINGER has passed.  The reasons for doing this are
 * documented in a draft:
 *
 * http://tools.ietf.org/html/draft-ietf-http-connection-00.txt
 *
 * in a nutshell -- if we don't make this effort we risk causing
 * TCP RST packets to be sent which can tear down a connection before
 * all the response data has been sent to the client.
 * 
* @param c The connection we are closing */ AP_DECLARE(void) ap_lingering_close(conn_rec *c); AP_DECLARE(int) ap_prep_lingering_close(conn_rec *c); AP_DECLARE(int) ap_start_lingering_close(conn_rec *c); /* Hooks */ /** * create_connection is a RUN_FIRST hook which allows modules to create * connections. In general, you should not install filters with the * create_connection hook. If you require vhost configuration information * to make filter installation decisions, you must use the pre_connection * or install_network_transport hook. This hook should close the connection * if it encounters a fatal error condition. * * @param p The pool from which to allocate the connection record * @param server The server record to create the connection too. * @param csd The socket that has been accepted * @param conn_id A unique identifier for this connection. The ID only * needs to be unique at that time, not forever. * @param sbh A handle to scoreboard information for this connection. * @param alloc The bucket allocator to use for all bucket/brigade creations * @return An allocated connection record or NULL. */ AP_DECLARE_HOOK(conn_rec *, create_connection, (apr_pool_t *p, server_rec *server, apr_socket_t *csd, long conn_id, void *sbh, apr_bucket_alloc_t *alloc)) /** * This hook gives protocol modules an opportunity to set everything up * before calling the protocol handler. All pre-connection hooks are * run until one returns something other than ok or decline * @param c The connection on which the request has been received. * @param csd The mechanism on which this connection is to be read. * Most times this will be a socket, but it is up to the module * that accepts the request to determine the exact type. * @return OK or DECLINED */ AP_DECLARE_HOOK(int,pre_connection,(conn_rec *c, void *csd)) /** * This hook implements different protocols. After a connection has been * established, the protocol module must read and serve the request. This * function does that for each protocol module. The first protocol module * to handle the request is the last module run. * @param c The connection on which the request has been received. * @return OK or DECLINED */ AP_DECLARE_HOOK(int,process_connection,(conn_rec *c)) /** * This hook implements different protocols. Before a connection is closed, * protocols might have to perform some housekeeping actions, such as * sending one last goodbye packet. The connection is, unless some other * error already happened before, still open and operational. * All pre-close-connection hooks are run until one returns something * other than ok or decline * @param c The connection on which the request has been received. * @return OK or DECLINED */ AP_DECLARE_HOOK(int,pre_close_connection,(conn_rec *c)) /** End Of Connection (EOC) bucket */ AP_DECLARE_DATA extern const apr_bucket_type_t ap_bucket_type_eoc; /** * Determine if a bucket is an End Of Connection (EOC) bucket * @param e The bucket to inspect * @return true or false */ #define AP_BUCKET_IS_EOC(e) (e->type == &ap_bucket_type_eoc) /** * Make the bucket passed in an End Of Connection (EOC) bucket * @param b The bucket to make into an EOC bucket * @return The new bucket, or NULL if allocation failed */ AP_DECLARE(apr_bucket *) ap_bucket_eoc_make(apr_bucket *b); /** * Create a bucket referring to an End Of Connection (EOC). This indicates * that the connection will be closed. * @param list The freelist from which this bucket should be allocated * @return The new bucket, or NULL if allocation failed */ AP_DECLARE(apr_bucket *) ap_bucket_eoc_create(apr_bucket_alloc_t *list); #ifdef __cplusplus } #endif #endif /* !APACHE_HTTP_CONNECTION_H */ /** @} */ httpd-2.4.41/include/ap_provider.h0000644000000000000500000000672111774644007015362 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ap_provider.h * @brief Apache Provider API * * @defgroup APACHE_CORE_PROVIDER Provider API * @ingroup APACHE_CORE * @{ */ #ifndef AP_PROVIDER_H #define AP_PROVIDER_H #include "ap_config.h" #ifdef __cplusplus extern "C" { #endif typedef struct { const char *provider_name; } ap_list_provider_names_t; typedef struct { const char *provider_group; const char *provider_version; } ap_list_provider_groups_t; /** * This function is used to register a provider with the global * provider pool. * @param pool The pool to create any storage from * @param provider_group The group to store the provider in * @param provider_name The name for this provider * @param provider_version The version for this provider * @param provider Opaque structure for this provider * @return APR_SUCCESS if all went well */ AP_DECLARE(apr_status_t) ap_register_provider(apr_pool_t *pool, const char *provider_group, const char *provider_name, const char *provider_version, const void *provider); /** * This function is used to retrieve a provider from the global * provider pool. * @param provider_group The group to look for this provider in * @param provider_name The name for the provider * @param provider_version The version for the provider * @return provider pointer to provider if found, NULL otherwise */ AP_DECLARE(void *) ap_lookup_provider(const char *provider_group, const char *provider_name, const char *provider_version); /** * This function is used to retrieve a list (array) of provider * names from the specified group with the specified version. * @param pool The pool to create any storage from * @param provider_group The group to look for this provider in * @param provider_version The version for the provider * @return pointer to array of ap_list_provider_names_t of provider names (could be empty) */ AP_DECLARE(apr_array_header_t *) ap_list_provider_names(apr_pool_t *pool, const char *provider_group, const char *provider_version); /** * This function is used to retrieve a list (array) of provider groups and versions * @param pool The pool to create any storage from * @return pointer to array of ap_list_provider_groups_t of provider groups * and versions (could be empty) */ AP_DECLARE(apr_array_header_t *) ap_list_provider_groups(apr_pool_t *pool); #ifdef __cplusplus } #endif #endif /** @} */ httpd-2.4.41/include/http_protocol.h0000644000000000000500000011473513313144701015740 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file http_protocol.h * @brief HTTP protocol handling * * @defgroup APACHE_CORE_PROTO HTTP Protocol Handling * @ingroup APACHE_CORE * @{ */ #ifndef APACHE_HTTP_PROTOCOL_H #define APACHE_HTTP_PROTOCOL_H #include "httpd.h" #include "apr_portable.h" #include "apr_mmap.h" #include "apr_buckets.h" #include "util_filter.h" #ifdef __cplusplus extern "C" { #endif /** * This hook allows modules to insert filters for the current error response * @param r the current request * @ingroup hooks */ AP_DECLARE_HOOK(void,insert_error_filter,(request_rec *r)) /** This is an optimization. We keep a record of the filter_rec that * stores the old_write filter, so that we can avoid strcmp's later. */ AP_DECLARE_DATA extern ap_filter_rec_t *ap_old_write_func; /* * Prototypes for routines which either talk directly back to the user, * or control the ones that eventually do. */ /** * Read a request and fill in the fields. * @param c The current connection * @return The new request_rec */ request_rec *ap_read_request(conn_rec *c); /** * Read the mime-encoded headers. * @param r The current request */ AP_DECLARE(void) ap_get_mime_headers(request_rec *r); /** * Optimized version of ap_get_mime_headers() that requires a * temporary brigade to work with * @param r The current request * @param bb temp brigade */ AP_DECLARE(void) ap_get_mime_headers_core(request_rec *r, apr_bucket_brigade *bb); /* Finish up stuff after a request */ /** * Called at completion of sending the response. It sends the terminating * protocol information. * @param r The current request */ AP_DECLARE(void) ap_finalize_request_protocol(request_rec *r); /** * Send error back to client. * @param r The current request * @param recursive_error last arg indicates error status in case we get * an error in the process of trying to deal with an ErrorDocument * to handle some other error. In that case, we print the default * report for the first thing that went wrong, and more briefly report * on the problem with the ErrorDocument. */ AP_DECLARE(void) ap_send_error_response(request_rec *r, int recursive_error); /* Set last modified header line from the lastmod date of the associated file. * Also, set content length. * * May return an error status, typically HTTP_NOT_MODIFIED (that when the * permit_cache argument is set to one). */ /** * Set the content length for this request * @param r The current request * @param length The new content length */ AP_DECLARE(void) ap_set_content_length(request_rec *r, apr_off_t length); /** * Set the keepalive status for this request * @param r The current request * @return 1 if keepalive can be set, 0 otherwise */ AP_DECLARE(int) ap_set_keepalive(request_rec *r); /** * Return the latest rational time from a request/mtime pair. Mtime is * returned unless it's in the future, in which case we return the current time. * @param r The current request * @param mtime The last modified time * @return the latest rational time. */ AP_DECLARE(apr_time_t) ap_rationalize_mtime(request_rec *r, apr_time_t mtime); /** * Build the content-type that should be sent to the client from the * content-type specified. The following rules are followed: * - if type is NULL or "", return NULL (do not set content-type). * - if charset adding is disabled, stop processing and return type. * - then, if there are no parameters on type, add the default charset * - return type * @param r The current request * @param type The content type * @return The content-type */ AP_DECLARE(const char *) ap_make_content_type(request_rec *r, const char *type); /** * Precompile metadata structures used by ap_make_content_type() * @param pool The pool to use for allocations */ AP_DECLARE(void) ap_setup_make_content_type(apr_pool_t *pool); /** * Construct an entity tag from the resource information. If it's a real * file, build in some of the file characteristics. * @param r The current request * @param force_weak Force the entity tag to be weak - it could be modified * again in as short an interval. * @return The entity tag */ AP_DECLARE(char *) ap_make_etag(request_rec *r, int force_weak); /** * Set the E-tag outgoing header * @param r The current request */ AP_DECLARE(void) ap_set_etag(request_rec *r); /** * Set the last modified time for the file being sent * @param r The current request */ AP_DECLARE(void) ap_set_last_modified(request_rec *r); typedef enum { AP_CONDITION_NONE, AP_CONDITION_NOMATCH, AP_CONDITION_WEAK, AP_CONDITION_STRONG } ap_condition_e; /** * Tests conditional request rules for the If-Match header. * @param r The current request * @param headers The response headers to check against * @return AP_CONDITION_NONE if the header is missing, AP_CONDITION_NOMATCH * if the header does not match, AP_CONDITION_STRONG for a strong * match. Weak matches are not permitted for the If-Match header. */ AP_DECLARE(ap_condition_e) ap_condition_if_match(request_rec *r, apr_table_t *headers); /** * Tests conditional request rules for the If-Unmodified-Since header. * @param r The current request * @param headers The response headers to check against * @return AP_CONDITION_NONE if the header is missing, AP_CONDITION_NOMATCH * if the header does not match, AP_CONDITION_WEAK if a weak match * was present and allowed by RFC2616, AP_CONDITION_STRONG for a * strong match. */ AP_DECLARE(ap_condition_e) ap_condition_if_unmodified_since(request_rec *r, apr_table_t *headers); /** * Tests conditional request rules for the If-None-Match header. * @param r The current request * @param headers The response headers to check against * @return AP_CONDITION_NONE if the header is missing, AP_CONDITION_NOMATCH * if the header does not match, AP_CONDITION_WEAK if a weak match * was present and allowed by RFC2616, AP_CONDITION_STRONG for a * strong match. */ AP_DECLARE(ap_condition_e) ap_condition_if_none_match(request_rec *r, apr_table_t *headers); /** * Tests conditional request rules for the If-Modified-Since header. * @param r The current request * @param headers The response headers to check against * @return AP_CONDITION_NONE if the header is missing, AP_CONDITION_NOMATCH * if the header does not match, AP_CONDITION_WEAK if a weak match * was present and allowed by RFC2616, AP_CONDITION_STRONG for a * strong match. */ AP_DECLARE(ap_condition_e) ap_condition_if_modified_since(request_rec *r, apr_table_t *headers); /** * Tests conditional request rules for the If-Range header. * @param r The current request * @param headers The response headers to check against * @return AP_CONDITION_NONE if either the If-Range or Range header is * missing, AP_CONDITION_NOMATCH if the header does not match, * AP_CONDITION_STRONG for a strong match. Weak matches are not * permitted for the If-Range header. */ AP_DECLARE(ap_condition_e) ap_condition_if_range(request_rec *r, apr_table_t *headers); /** * Implements condition GET rules for HTTP/1.1 specification. This function * inspects the client headers and determines if the response fulfills * the requirements specified. * @param r The current request * @return OK if the response fulfills the condition GET rules, some * other status code otherwise */ AP_DECLARE(int) ap_meets_conditions(request_rec *r); /* Other ways to send stuff at the client. All of these keep track * of bytes_sent automatically. This indirection is intended to make * it a little more painless to slide things like HTTP-NG packetization * underneath the main body of the code later. In the meantime, it lets * us centralize a bit of accounting (bytes_sent). * * These also return the number of bytes written by the call. * They should only be called with a timeout registered, for obvious reaasons. * (Ditto the send_header stuff). */ /** * Send an entire file to the client, using sendfile if supported by the * current platform * @param fd The file to send. * @param r The current request * @param offset Offset into the file to start sending. * @param length Amount of data to send * @param nbytes Amount of data actually sent */ AP_DECLARE(apr_status_t) ap_send_fd(apr_file_t *fd, request_rec *r, apr_off_t offset, apr_size_t length, apr_size_t *nbytes); #if APR_HAS_MMAP /** * Send an MMAP'ed file to the client * @param mm The MMAP'ed file to send * @param r The current request * @param offset The offset into the MMAP to start sending * @param length The amount of data to send * @return The number of bytes sent */ AP_DECLARE(apr_size_t) ap_send_mmap(apr_mmap_t *mm, request_rec *r, apr_size_t offset, apr_size_t length); #endif /** * Register a new request method, and return the offset that will be * associated with that method. * * @param p The pool to create registered method numbers from. * @param methname The name of the new method to register. * @return An int value representing an offset into a bitmask. */ AP_DECLARE(int) ap_method_register(apr_pool_t *p, const char *methname); /** * Initialize the method_registry and allocate memory for it. * * @param p Pool to allocate memory for the registry from. */ AP_DECLARE(void) ap_method_registry_init(apr_pool_t *p); /** * This is a convenience macro to ease with checking a mask * against a method name. */ #define AP_METHOD_CHECK_ALLOWED(mask, methname) \ ((mask) & (AP_METHOD_BIT << ap_method_number_of((methname)))) /** * Create a new method list with the specified number of preallocated * slots for extension methods. * * @param p Pointer to a pool in which the structure should be * allocated. * @param nelts Number of preallocated extension slots * @return Pointer to the newly created structure. */ AP_DECLARE(ap_method_list_t *) ap_make_method_list(apr_pool_t *p, int nelts); /** * Copy a method list * * @param dest List to copy to * @param src List to copy from */ AP_DECLARE(void) ap_copy_method_list(ap_method_list_t *dest, ap_method_list_t *src); /** * Search for an HTTP method name in an ap_method_list_t structure, and * return true if found. * * @param method String containing the name of the method to check. * @param l Pointer to a method list, such as r->allowed_methods. * @return 1 if method is in the list, otherwise 0 */ AP_DECLARE(int) ap_method_in_list(ap_method_list_t *l, const char *method); /** * Add an HTTP method name to an ap_method_list_t structure if it isn't * already listed. * * @param method String containing the name of the method to check. * @param l Pointer to a method list, such as r->allowed_methods. * @return None. */ AP_DECLARE(void) ap_method_list_add(ap_method_list_t *l, const char *method); /** * Remove an HTTP method name from an ap_method_list_t structure. * * @param l Pointer to a method list, such as r->allowed_methods. * @param method String containing the name of the method to remove. * @return None. */ AP_DECLARE(void) ap_method_list_remove(ap_method_list_t *l, const char *method); /** * Reset a method list to be completely empty. * * @param l Pointer to a method list, such as r->allowed_methods. * @return None. */ AP_DECLARE(void) ap_clear_method_list(ap_method_list_t *l); /** * Set the content type for this request (r->content_type). * @param r The current request * @param ct The new content type * @warning This function must be called to set r->content_type in order * for the AddOutputFilterByType directive to work correctly. */ AP_DECLARE(void) ap_set_content_type(request_rec *r, const char *ct); /** * Set the Accept-Ranges header for this response * @param r The current request */ AP_DECLARE(void) ap_set_accept_ranges(request_rec *r); /* Hmmm... could macrofy these for now, and maybe forever, though the * definitions of the macros would get a whole lot hairier. */ /** * Output one character for this request * @param c the character to output * @param r the current request * @return The number of bytes sent */ AP_DECLARE(int) ap_rputc(int c, request_rec *r); /** * Write a buffer for the current request * @param buf The buffer to write * @param nbyte The number of bytes to send from the buffer * @param r The current request * @return The number of bytes sent */ AP_DECLARE(int) ap_rwrite(const void *buf, int nbyte, request_rec *r); /** * Output a string for the current request * @param str The string to output * @param r The current request * @return The number of bytes sent * @note ap_rputs may be implemented as macro or inline function */ static APR_INLINE int ap_rputs(const char *str, request_rec *r) { return ap_rwrite(str, (int)strlen(str), r); } /** * Write an unspecified number of strings to the request * @param r The current request * @param ... The strings to write * @return The number of bytes sent */ AP_DECLARE_NONSTD(int) ap_rvputs(request_rec *r,...) AP_FN_ATTR_SENTINEL; /** * Output data to the client in a printf format * @param r The current request * @param fmt The format string * @param vlist The arguments to use to fill out the format string * @return The number of bytes sent */ AP_DECLARE(int) ap_vrprintf(request_rec *r, const char *fmt, va_list vlist); /** * Output data to the client in a printf format * @param r The current request * @param fmt The format string * @param ... The arguments to use to fill out the format string * @return The number of bytes sent */ AP_DECLARE_NONSTD(int) ap_rprintf(request_rec *r, const char *fmt,...) __attribute__((format(printf,2,3))); /** * Flush all of the data for the current request to the client * @param r The current request * @return 0 on success, -1 if an error occurred */ AP_DECLARE(int) ap_rflush(request_rec *r); /** * Index used in custom_responses array for a specific error code * (only use outside protocol.c is in getting them configured). * @param status HTTP status code * @return The index of the response */ AP_DECLARE(int) ap_index_of_response(int status); /** * Return the Status-Line for a given status code (excluding the * HTTP-Version field). If an invalid or unknown status code is * passed, "500 Internal Server Error" will be returned. * @param status The HTTP status code * @return The Status-Line */ AP_DECLARE(const char *) ap_get_status_line(int status); /* Reading a block of data from the client connection (e.g., POST arg) */ /** * Setup the client to allow Apache to read the request body. * @param r The current request * @param read_policy How the server should interpret a chunked * transfer-encoding. One of:
 *    REQUEST_NO_BODY          Send 413 error if message has any body
 *    REQUEST_CHUNKED_ERROR    Send 411 error if body without Content-Length
 *    REQUEST_CHUNKED_DECHUNK  If chunked, remove the chunks for me.
 * 
* @return either OK or an error code */ AP_DECLARE(int) ap_setup_client_block(request_rec *r, int read_policy); /** * Determine if the client has sent any data. This also sends a * 100 Continue response to HTTP/1.1 clients, so modules should not be called * until the module is ready to read content. * @warning Never call this function more than once. * @param r The current request * @return 0 if there is no message to read, 1 otherwise */ AP_DECLARE(int) ap_should_client_block(request_rec *r); /** * Call this in a loop. It will put data into a buffer and return the length * of the input block * @param r The current request * @param buffer The buffer in which to store the data * @param bufsiz The size of the buffer * @return Number of bytes inserted into the buffer. When done reading, 0 * if EOF, or -1 if there was an error */ AP_DECLARE(long) ap_get_client_block(request_rec *r, char *buffer, apr_size_t bufsiz); /** * Map specific APR codes returned by the filter stack to HTTP error * codes, or the default status code provided. Use it as follows: * * return ap_map_http_request_error(rv, HTTP_BAD_REQUEST); * * If the filter has already handled the error, AP_FILTER_ERROR will * be returned, which is cleanly passed through. * * These mappings imply that the filter stack is reading from the * downstream client, the proxy will map these codes differently. * @param rv APR status code * @param status Default HTTP code should the APR code not be recognised * @return Mapped HTTP status code */ AP_DECLARE(int) ap_map_http_request_error(apr_status_t rv, int status); /** * In HTTP/1.1, any method can have a body. However, most GET handlers * wouldn't know what to do with a request body if they received one. * This helper routine tests for and reads any message body in the request, * simply discarding whatever it receives. We need to do this because * failing to read the request body would cause it to be interpreted * as the next request on a persistent connection. * @param r The current request * @return error status if request is malformed, OK otherwise */ AP_DECLARE(int) ap_discard_request_body(request_rec *r); /** * Setup the output headers so that the client knows how to authenticate * itself the next time, if an authentication request failed. * @param r The current request */ AP_DECLARE(void) ap_note_auth_failure(request_rec *r); /** * @deprecated @see ap_note_auth_failure */ AP_DECLARE(void) ap_note_basic_auth_failure(request_rec *r); /** * @deprecated @see ap_note_auth_failure */ AP_DECLARE(void) ap_note_digest_auth_failure(request_rec *r); /** * This hook allows modules to add support for a specific auth type to * ap_note_auth_failure * @param r the current request * @param auth_type the configured auth_type * @return OK, DECLINED */ AP_DECLARE_HOOK(int, note_auth_failure, (request_rec *r, const char *auth_type)) /** * Get the password from the request headers. This function has multiple side * effects due to its prior use in the old authentication framework. * ap_get_basic_auth_components() should be preferred. * * @deprecated @see ap_get_basic_auth_components * @param r The current request * @param pw The password as set in the headers * @return 0 (OK) if it set the 'pw' argument (and assured * a correct value in r->user); otherwise it returns * an error code, either HTTP_INTERNAL_SERVER_ERROR if things are * really confused, HTTP_UNAUTHORIZED if no authentication at all * seemed to be in use, or DECLINED if there was authentication but * it wasn't Basic (in which case, the caller should presumably * decline as well). */ AP_DECLARE(int) ap_get_basic_auth_pw(request_rec *r, const char **pw); #define AP_GET_BASIC_AUTH_PW_NOTE "AP_GET_BASIC_AUTH_PW_NOTE" /** * Get the username and/or password from the request's Basic authentication * headers. Unlike ap_get_basic_auth_pw(), calling this function has no side * effects on the passed request_rec. * * @param r The current request * @param username If not NULL, set to the username sent by the client * @param password If not NULL, set to the password sent by the client * @return APR_SUCCESS if the credentials were successfully parsed and returned; * APR_EINVAL if there was no authentication header sent or if the * client was not using the Basic authentication scheme. username and * password are unchanged on failure. */ AP_DECLARE(apr_status_t) ap_get_basic_auth_components(const request_rec *r, const char **username, const char **password); /** * parse_uri: break apart the uri * @warning Side Effects: * @li sets r->args to rest after '?' (or NULL if no '?') * @li sets r->uri to request uri (without r->args part) * @li sets r->hostname (if not set already) from request (scheme://host:port) * @param r The current request * @param uri The uri to break apart */ AP_CORE_DECLARE(void) ap_parse_uri(request_rec *r, const char *uri); #define AP_GETLINE_FOLD 1 /* Whether to merge continuation lines */ #define AP_GETLINE_CRLF 2 /* Whether line ends must be in the form CR LF */ #define AP_GETLINE_NOSPC_EOL 4 /* Whether to consume up to and including the end of line on APR_ENOSPC */ /** * Get the next line of input for the request * @param s The buffer into which to read the line * @param n The size of the buffer * @param r The request * @param flags Bit flag of multiple parsing options * AP_GETLINE_FOLD Whether to merge continuation lines * AP_GETLINE_CRLF Whether line ends must be in the form CR LF * @return The length of the line, if successful * n, if the line is too big to fit in the buffer * -1 for miscellaneous errors */ AP_DECLARE(int) ap_getline(char *s, int n, request_rec *r, int flags); /** * Get the next line of input for the request * * Note: on ASCII boxes, ap_rgetline is a macro which simply calls * ap_rgetline_core to get the line of input. * * on EBCDIC boxes, ap_rgetline is a wrapper function which * translates ASCII protocol lines to the local EBCDIC code page * after getting the line of input. * * @param s Pointer to the pointer to the buffer into which the line * should be read; if *s==NULL, a buffer of the necessary size * to hold the data will be allocated from the request pool * @param n The size of the buffer * @param read The length of the line. * @param r The request * @param flags Bit flag of multiple parsing options * AP_GETLINE_FOLD Whether to merge continuation lines * AP_GETLINE_CRLF Whether line ends must be in the form CR LF * @param bb Working brigade to use when reading buckets * @return APR_SUCCESS, if successful * APR_ENOSPC, if the line is too big to fit in the buffer * Other errors where appropriate */ #if APR_CHARSET_EBCDIC AP_DECLARE(apr_status_t) ap_rgetline(char **s, apr_size_t n, apr_size_t *read, request_rec *r, int flags, apr_bucket_brigade *bb); #else /* ASCII box */ #define ap_rgetline(s, n, read, r, fold, bb) \ ap_rgetline_core((s), (n), (read), (r), (fold), (bb)) #endif /** @see ap_rgetline */ AP_DECLARE(apr_status_t) ap_rgetline_core(char **s, apr_size_t n, apr_size_t *read, request_rec *r, int flags, apr_bucket_brigade *bb); /** * Get the method number associated with the given string, assumed to * contain an HTTP method. Returns M_INVALID if not recognized. * @param method A string containing a valid HTTP method * @return The method number */ AP_DECLARE(int) ap_method_number_of(const char *method); /** * Get the method name associated with the given internal method * number. Returns NULL if not recognized. * @param p A pool to use for temporary allocations. * @param methnum An integer value corresponding to an internal method number * @return The name corresponding to the method number */ AP_DECLARE(const char *) ap_method_name_of(apr_pool_t *p, int methnum); /* Hooks */ /* * pre_read_request --- run right before read_request_line(), * and not run during any subrequests. */ /** * This hook allows modules to affect the request or connection immediately before * the request has been read, and before any other phases have been processes. * @param r The current request of the soon-to-be-read request * @param c The connection * @return None/void */ AP_DECLARE_HOOK(void,pre_read_request,(request_rec *r, conn_rec *c)) /* * post_read_request --- run right after read_request or internal_redirect, * and not run during any subrequests. */ /** * This hook allows modules to affect the request immediately after the request * has been read, and before any other phases have been processes. This allows * modules to make decisions based upon the input header fields * @param r The current request * @return OK or DECLINED */ AP_DECLARE_HOOK(int,post_read_request,(request_rec *r)) /** * This hook allows modules to perform any module-specific logging activities * over and above the normal server things. * @param r The current request * @return OK, DECLINED, or HTTP_... */ AP_DECLARE_HOOK(int,log_transaction,(request_rec *r)) /** * This hook allows modules to retrieve the http scheme for a request. This * allows Apache modules to easily extend the schemes that Apache understands * @param r The current request * @return The http scheme from the request */ AP_DECLARE_HOOK(const char *,http_scheme,(const request_rec *r)) /** * Return the default port from the current request * @param r The current request * @return The current port */ AP_DECLARE_HOOK(apr_port_t,default_port,(const request_rec *r)) #define AP_PROTOCOL_HTTP1 "http/1.1" /** * Determine the list of protocols available for a connection/request. This may * be collected with or without any request sent, in which case the request is * NULL. Or it may be triggered by the request received, e.g. through the * "Upgrade" header. * * This hook will be run whenever protocols are being negotiated (ALPN as * one example). It may also be invoked at other times, e.g. when the server * wants to advertise protocols it is capable of switching to. * * The identifiers for protocols are taken from the TLS extension type ALPN: * https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xml * * If no protocols are added to the proposals, the server not perform any * switch. If the protocol selected from the proposals is the protocol * already in place, also no protocol switch will be invoked. * * The client may already have announced the protocols it is willing to * accept. These will then be listed as offers. This parameter may also * be NULL, indicating that offers from the client are not known and * the hooks should propose all protocols that are valid for the * current connection/request. * * All hooks are run, unless one returns an error. Proposals may contain * duplicates. The order in which proposals are added is usually ignored. * * @param c The current connection * @param r The current request or NULL * @param s The server/virtual host selected * @param offers A list of protocol identifiers offered by the client or * NULL to indicated that the hooks are free to propose * @param proposals The list of protocol identifiers proposed by the hooks * @return OK or DECLINED * @bug This API or implementation and order of operations should be considered * experimental and will continue to evolve in future 2.4 releases, with * a corresponding minor module magic number (MMN) bump to indicate the * API revision level. */ AP_DECLARE_HOOK(int,protocol_propose,(conn_rec *c, request_rec *r, server_rec *s, const apr_array_header_t *offers, apr_array_header_t *proposals)) /** * Perform a protocol switch on the connection. The exact requirements for * that depend on the protocol in place and the one switched to. The first * protocol module to handle the switch is the last module run. * * For a connection level switch (r == NULL), the handler must on return * leave the conn_rec in a state suitable for processing the switched * protocol, e.g. correct filters in place. * * For a request triggered switch (r != NULL), the protocol switch is done * before the response is sent out. When switching from "http/1.1" via Upgrade * header, the 101 intermediate response will have been sent. The * hook needs then to process the connection until it can be closed. Which * the server will enforce on hook return. * Any error the hook might encounter must already be sent by the hook itself * to the client in whatever form the new protocol requires. * * @param c The current connection * @param r The current request or NULL * @param s The server/virtual host selected * @param choices A list of protocol identifiers, normally the clients whishes * @param proposals the list of protocol identifiers proposed by the hooks * @return OK or DECLINED * @bug This API or implementation and order of operations should be considered * experimental and will continue to evolve in future 2.4 releases, with * a corresponding minor module magic number (MMN) bump to indicate the * API revision level. */ AP_DECLARE_HOOK(int,protocol_switch,(conn_rec *c, request_rec *r, server_rec *s, const char *protocol)) /** * Return the protocol used on the connection. Modules implementing * protocol switching must register here and return the correct protocol * identifier for connections they switched. * * To find out the protocol for the current connection, better call * @see ap_get_protocol which internally uses this hook. * * @param c The current connection * @return The identifier of the protocol in place or NULL * @bug This API or implementation and order of operations should be considered * experimental and will continue to evolve in future 2.4 releases, with * a corresponding minor module magic number (MMN) bump to indicate the * API revision level. */ AP_DECLARE_HOOK(const char *,protocol_get,(const conn_rec *c)) /** * Get the protocols that the connection and optional request may * upgrade to - besides the protocol currently active on the connection. These * values may be used to announce to a client what choices it has. * * If report_all == 0, only protocols more preferable than the one currently * being used, are reported. Otherwise, all available protocols beside the * current one are being reported. * * @param c The current connection * @param r The current request or NULL * @param s The server/virtual host selected or NULL * @param report_all include also protocols less preferred than the current one * @param pupgrades on return, possible protocols to upgrade to in descending order * of preference. Maybe NULL if none are available. * @bug This API or implementation and order of operations should be considered * experimental and will continue to evolve in future 2.4 releases, with * a corresponding minor module magic number (MMN) bump to indicate the * API revision level. */ AP_DECLARE(apr_status_t) ap_get_protocol_upgrades(conn_rec *c, request_rec *r, server_rec *s, int report_all, const apr_array_header_t **pupgrades); /** * Select a protocol for the given connection and optional request. Will return * the protocol identifier selected which may be the protocol already in place * on the connection. The selected protocol will be NULL if non of the given * choices could be agreed upon (e.g. no proposal as made). * * A special case is where the choices itself is NULL (instead of empty). In * this case there are no restrictions imposed on protocol selection. * * @param c The current connection * @param r The current request or NULL * @param s The server/virtual host selected * @param choices A list of protocol identifiers, normally the clients whishes * @return The selected protocol or NULL if no protocol could be agreed upon * @bug This API or implementation and order of operations should be considered * experimental and will continue to evolve in future 2.4 releases, with * a corresponding minor module magic number (MMN) bump to indicate the * API revision level. */ AP_DECLARE(const char *) ap_select_protocol(conn_rec *c, request_rec *r, server_rec *s, const apr_array_header_t *choices); /** * Perform the actual protocol switch. The protocol given must have been * selected before on the very same connection and request pair. * * @param c The current connection * @param r The current request or NULL * @param s The server/virtual host selected * @param protocol the protocol to switch to * @return APR_SUCCESS, if caller may continue processing as usual * APR_EOF, if caller needs to stop processing the connection * APR_EINVAL, if the protocol is already in place * APR_NOTIMPL, if no module performed the switch * Other errors where appropriate * @bug This API or implementation and order of operations should be considered * experimental and will continue to evolve in future 2.4 releases, with * a corresponding minor module magic number (MMN) bump to indicate the * API revision level. */ AP_DECLARE(apr_status_t) ap_switch_protocol(conn_rec *c, request_rec *r, server_rec *s, const char *protocol); /** * Call the protocol_get hook to determine the protocol currently in use * for the given connection. * * Unless another protocol has been switch to, will default to * @see AP_PROTOCOL_HTTP1 and modules implementing a new protocol must * report a switched connection via the protocol_get hook. * * @param c The connection to determine the protocol for * @return the protocol in use, never NULL * @bug This API or implementation and order of operations should be considered * experimental and will continue to evolve in future 2.4 releases, with * a corresponding minor module magic number (MMN) bump to indicate the * API revision level. */ AP_DECLARE(const char *) ap_get_protocol(conn_rec *c); /** * Check if the given protocol is an allowed choice on the given * combination of connection, request and server. * * When server is NULL, it is taken from request_rec, unless * request_rec is NULL. Then it is taken from the connection base * server. * * @param c The current connection * @param r The current request or NULL * @param s The server/virtual host selected or NULL * @param protocol the protocol to switch to * @return != 0 iff protocol is allowed * @bug This API or implementation and order of operations should be considered * experimental and will continue to evolve in future 2.4 releases, with * a corresponding minor module magic number (MMN) bump to indicate the * API revision level. */ AP_DECLARE(int) ap_is_allowed_protocol(conn_rec *c, request_rec *r, server_rec *s, const char *protocol); /** @see ap_bucket_type_error */ typedef struct ap_bucket_error ap_bucket_error; /** * @struct ap_bucket_error * @brief A bucket referring to an HTTP error * * This bucket can be passed down the filter stack to indicate that an * HTTP error occurred while running a filter. In order for this bucket * to be used successfully, it MUST be sent as the first bucket in the * first brigade to be sent from a given filter. */ struct ap_bucket_error { /** Number of buckets using this memory */ apr_bucket_refcount refcount; /** The error code */ int status; /** The error string */ const char *data; }; /** @see ap_bucket_type_error */ AP_DECLARE_DATA extern const apr_bucket_type_t ap_bucket_type_error; /** * Determine if a bucket is an error bucket * @param e The bucket to inspect * @return true or false */ #define AP_BUCKET_IS_ERROR(e) (e->type == &ap_bucket_type_error) /** * Make the bucket passed in an error bucket * @param b The bucket to make into an error bucket * @param error The HTTP error code to put in the bucket. * @param buf An optional error string to put in the bucket. * @param p A pool to allocate out of. * @return The new bucket, or NULL if allocation failed */ AP_DECLARE(apr_bucket *) ap_bucket_error_make(apr_bucket *b, int error, const char *buf, apr_pool_t *p); /** * Create a bucket referring to an HTTP error. * @param error The HTTP error code to put in the bucket. * @param buf An optional error string to put in the bucket. * @param p A pool to allocate the error string out of. * @param list The bucket allocator from which to allocate the bucket * @return The new bucket, or NULL if allocation failed */ AP_DECLARE(apr_bucket *) ap_bucket_error_create(int error, const char *buf, apr_pool_t *p, apr_bucket_alloc_t *list); AP_DECLARE_NONSTD(apr_status_t) ap_byterange_filter(ap_filter_t *f, apr_bucket_brigade *b); AP_DECLARE_NONSTD(apr_status_t) ap_http_header_filter(ap_filter_t *f, apr_bucket_brigade *b); AP_DECLARE_NONSTD(apr_status_t) ap_content_length_filter(ap_filter_t *, apr_bucket_brigade *); AP_DECLARE_NONSTD(apr_status_t) ap_old_write_filter(ap_filter_t *f, apr_bucket_brigade *b); /** * Sett up the protocol fields for subsidiary requests * @param rnew New Sub Request * @param r current request */ AP_DECLARE(void) ap_set_sub_req_protocol(request_rec *rnew, const request_rec *r); /** * A wrapup function to keep the internal accounting straight. * Indicates that there is no more content coming. * @param sub_r Subrequest that is now compete */ AP_DECLARE(void) ap_finalize_sub_req_protocol(request_rec *sub_r); /** * Send an interim (HTTP 1xx) response immediately. * @param r The request * @param send_headers Whether to send&clear headers in r->headers_out */ AP_DECLARE(void) ap_send_interim_response(request_rec *r, int send_headers); #ifdef __cplusplus } #endif #endif /* !APACHE_HTTP_PROTOCOL_H */ /** @} */ httpd-2.4.41/include/util_ldap.h0000644000000000000500000004374312757564422015036 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file util_ldap.h * @brief Apache LDAP library */ #ifndef UTIL_LDAP_H #define UTIL_LDAP_H /* APR header files */ #include "apr.h" #include "apr_thread_mutex.h" #include "apr_thread_rwlock.h" #include "apr_tables.h" #include "apr_time.h" #include "apr_version.h" #if APR_MAJOR_VERSION < 2 /* The LDAP API is currently only present in APR 1.x */ #include "apr_ldap.h" #include "apr_ldap_rebind.h" #else #define APR_HAS_LDAP 0 #endif #if APR_HAS_SHARED_MEMORY #include "apr_rmm.h" #include "apr_shm.h" #endif /* this whole thing disappears if LDAP is not enabled */ #if APR_HAS_LDAP #if defined(LDAP_UNAVAILABLE) || APR_HAS_MICROSOFT_LDAPSDK #define AP_LDAP_IS_SERVER_DOWN(s) ((s) == LDAP_SERVER_DOWN \ ||(s) == LDAP_UNAVAILABLE) #else #define AP_LDAP_IS_SERVER_DOWN(s) ((s) == LDAP_SERVER_DOWN) #endif /* Apache header files */ #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "apr_optional.h" /* Create a set of LDAP_DECLARE macros with appropriate export * and import tags for the platform */ #if !defined(WIN32) #define LDAP_DECLARE(type) type #define LDAP_DECLARE_NONSTD(type) type #define LDAP_DECLARE_DATA #elif defined(LDAP_DECLARE_STATIC) #define LDAP_DECLARE(type) type __stdcall #define LDAP_DECLARE_NONSTD(type) type #define LDAP_DECLARE_DATA #elif defined(LDAP_DECLARE_EXPORT) #define LDAP_DECLARE(type) __declspec(dllexport) type __stdcall #define LDAP_DECLARE_NONSTD(type) __declspec(dllexport) type #define LDAP_DECLARE_DATA __declspec(dllexport) #else #define LDAP_DECLARE(type) __declspec(dllimport) type __stdcall #define LDAP_DECLARE_NONSTD(type) __declspec(dllimport) type #define LDAP_DECLARE_DATA __declspec(dllimport) #endif #if APR_HAS_MICROSOFT_LDAPSDK #define timeval l_timeval #endif #ifdef __cplusplus extern "C" { #endif /* * LDAP Connections */ /* Values that the deref member can have */ typedef enum { never=LDAP_DEREF_NEVER, searching=LDAP_DEREF_SEARCHING, finding=LDAP_DEREF_FINDING, always=LDAP_DEREF_ALWAYS } deref_options; /* Structure representing an LDAP connection */ typedef struct util_ldap_connection_t { LDAP *ldap; apr_pool_t *pool; /* Pool from which this connection is created */ #if APR_HAS_THREADS apr_thread_mutex_t *lock; /* Lock to indicate this connection is in use */ #endif const char *host; /* Name of the LDAP server (or space separated list) */ int port; /* Port of the LDAP server */ deref_options deref; /* how to handle alias dereferening */ const char *binddn; /* DN to bind to server (can be NULL) */ const char *bindpw; /* Password to bind to server (can be NULL) */ int bound; /* Flag to indicate whether this connection is bound yet */ int secure; /* SSL/TLS mode of the connection */ apr_array_header_t *client_certs; /* Client certificates on this connection */ const char *reason; /* Reason for an error failure */ struct util_ldap_connection_t *next; struct util_ldap_state_t *st; /* The LDAP vhost config this connection belongs to */ int keep; /* Will this connection be kept when it's unlocked */ int ChaseReferrals; /* [on|off] (default = AP_LDAP_CHASEREFERRALS_ON)*/ int ReferralHopLimit; /* # of referral hops to follow (default = AP_LDAP_DEFAULT_HOPLIMIT) */ apr_time_t freed; /* the time this conn was placed back in the pool */ apr_pool_t *rebind_pool; /* frequently cleared pool for rebind data */ int must_rebind; /* The connection was last bound with other then binddn/bindpw */ request_rec *r; /* request_rec used to find this util_ldap_connection_t */ apr_time_t last_backend_conn; /* the approximate time of the last backend LDAP requst */ } util_ldap_connection_t; typedef struct util_ldap_config_t { int ChaseReferrals; int ReferralHopLimit; apr_array_header_t *client_certs; /* Client certificates */ } util_ldap_config_t; /* LDAP cache state information */ typedef struct util_ldap_state_t { apr_pool_t *pool; /* pool from which this state is allocated */ #if APR_HAS_THREADS apr_thread_mutex_t *mutex; /* mutex lock for the connection list */ #endif apr_global_mutex_t *util_ldap_cache_lock; apr_size_t cache_bytes; /* Size (in bytes) of shared memory cache */ char *cache_file; /* filename for shm */ long search_cache_ttl; /* TTL for search cache */ long search_cache_size; /* Size (in entries) of search cache */ long compare_cache_ttl; /* TTL for compare cache */ long compare_cache_size; /* Size (in entries) of compare cache */ struct util_ldap_connection_t *connections; apr_array_header_t *global_certs; /* Global CA certificates */ int ssl_supported; int secure; int secure_set; int verify_svr_cert; #if APR_HAS_SHARED_MEMORY apr_shm_t *cache_shm; apr_rmm_t *cache_rmm; #endif /* cache ald */ void *util_ldap_cache; long connectionTimeout; struct timeval *opTimeout; int debug_level; /* SDK debug level */ apr_interval_time_t connection_pool_ttl; int retries; /* number of retries for failed bind/search/compare */ apr_interval_time_t retry_delay; /* delay between retries of failed bind/search/compare */ } util_ldap_state_t; /* Used to store arrays of attribute labels/values. */ struct mod_auth_ldap_groupattr_entry_t { char *name; }; /** * Open a connection to an LDAP server * @param ldc A structure containing the expanded details of the server * to connect to. The handle to the LDAP connection is returned * as ldc->ldap. * @tip This function connects to the LDAP server and binds. It does not * connect if already connected (ldc->ldap != NULL). Does not bind * if already bound. * @return If successful LDAP_SUCCESS is returned. * @fn int util_ldap_connection_open(request_rec *r, * util_ldap_connection_t *ldc) */ APR_DECLARE_OPTIONAL_FN(int,uldap_connection_open,(request_rec *r, util_ldap_connection_t *ldc)); /** * Close a connection to an LDAP server * @param ldc A structure containing the expanded details of the server * that was connected. * @tip This function unbinds from the LDAP server, and clears ldc->ldap. * It is possible to rebind to this server again using the same ldc * structure, using apr_ldap_open_connection(). * @fn util_ldap_close_connection(util_ldap_connection_t *ldc) */ APR_DECLARE_OPTIONAL_FN(void,uldap_connection_close,(util_ldap_connection_t *ldc)); /** * Unbind a connection to an LDAP server * @param ldc A structure containing the expanded details of the server * that was connected. * @tip This function unbinds the LDAP connection, and disconnects from * the server. It is used during error conditions, to bring the LDAP * connection back to a known state. * @fn apr_status_t util_ldap_connection_unbind(util_ldap_connection_t *ldc) */ APR_DECLARE_OPTIONAL_FN(apr_status_t,uldap_connection_unbind,(void *param)); /** * Find a connection in a list of connections * @param r The request record * @param host The hostname to connect to (multiple hosts space separated) * @param port The port to connect to * @param binddn The DN to bind with * @param bindpw The password to bind with * @param deref The dereferencing behavior * @param secure use SSL on the connection * @tip Once a connection is found and returned, a lock will be acquired to * lock that particular connection, so that another thread does not try and * use this connection while it is busy. Once you are finished with a connection, * apr_ldap_connection_close() must be called to release this connection. * @fn util_ldap_connection_t *util_ldap_connection_find(request_rec *r, const char *host, int port, * const char *binddn, const char *bindpw, deref_options deref, * int netscapessl, int starttls) */ APR_DECLARE_OPTIONAL_FN(util_ldap_connection_t *,uldap_connection_find,(request_rec *r, const char *host, int port, const char *binddn, const char *bindpw, deref_options deref, int secure)); /** * Compare two DNs for sameness * @param r The request record * @param ldc The LDAP connection being used. * @param url The URL of the LDAP connection - used for deciding which cache to use. * @param dn The first DN to compare. * @param reqdn The DN to compare the first DN to. * @param compare_dn_on_server Flag to determine whether the DNs should be checked using * LDAP calls or with a direct string comparison. A direct * string comparison is faster, but not as accurate - false * negative comparisons are possible. * @tip Two DNs can be equal and still fail a string comparison. Eg "dc=example,dc=com" * and "dc=example, dc=com". Use the compare_dn_on_server unless there are serious * performance issues. * @fn int util_ldap_cache_comparedn(request_rec *r, util_ldap_connection_t *ldc, * const char *url, const char *dn, const char *reqdn, * int compare_dn_on_server) */ APR_DECLARE_OPTIONAL_FN(int,uldap_cache_comparedn,(request_rec *r, util_ldap_connection_t *ldc, const char *url, const char *dn, const char *reqdn, int compare_dn_on_server)); /** * A generic LDAP compare function * @param r The request record * @param ldc The LDAP connection being used. * @param url The URL of the LDAP connection - used for deciding which cache to use. * @param dn The DN of the object in which we do the compare. * @param attrib The attribute within the object we are comparing for. * @param value The value of the attribute we are trying to compare for. * @tip Use this function to determine whether an attribute/value pair exists within an * object. Typically this would be used to determine LDAP top-level group * membership. * @fn int util_ldap_cache_compare(request_rec *r, util_ldap_connection_t *ldc, * const char *url, const char *dn, const char *attrib, const char *value) */ APR_DECLARE_OPTIONAL_FN(int,uldap_cache_compare,(request_rec *r, util_ldap_connection_t *ldc, const char *url, const char *dn, const char *attrib, const char *value)); /** * An LDAP function that checks if the specified user is a member of a subgroup. * @param r The request record * @param ldc The LDAP connection being used. * @param url The URL of the LDAP connection - used for deciding which cache to use. * @param dn The DN of the object in which we find subgroups to search within. * @param attrib The attribute within group objects that identify users. * @param value The user attribute value we are trying to compare for. * @param subgroupAttrs The attributes within group objects that identify subgroups. * Array of strings. * @param subgroupclasses The objectClass values used to identify groups (and * subgroups). apr_array_header_t *. * @param cur_subgroup_depth Current recursive depth during subgroup processing. * @param max_subgroup_depth Maximum depth of recursion allowed during subgroup * processing. * @tip Use this function to determine whether an attribute/value pair exists within a * starting group object or one of its nested subgroups. Typically this would be * used to determine LDAP nested group membership. * @deffunc int util_ldap_cache_check_subgroups(request_rec *r, util_ldap_connection_t * *ldc, const char *url, const char *dn, * const char *attrib, const char value, * char **subgroupAttrs, apr_array_header_t * *subgroupclasses, int cur_subgroup_depth, int * max_subgroup_depth ) */ APR_DECLARE_OPTIONAL_FN(int,uldap_cache_check_subgroups,(request_rec *r, util_ldap_connection_t *ldc, const char *url, const char *dn, const char *attrib, const char *value, char **subgroupAttrs, apr_array_header_t *subgroupclasses, int cur_subgroup_depth, int max_subgroup_depth)); /** * Checks a username/password combination by binding to the LDAP server * @param r The request record * @param ldc The LDAP connection being used. * @param url The URL of the LDAP connection - used for deciding which cache to use. * @param basedn The Base DN to search for the user in. * @param scope LDAP scope of the search. * @param attrs LDAP attributes to return in search. * @param filter The user to search for in the form of an LDAP filter. This filter must return * exactly one user for the check to be successful. * @param bindpw The user password to bind as. * @param binddn The DN of the user will be returned in this variable. * @param retvals The values corresponding to the attributes requested in the attrs array. * @tip The filter supplied will be searched for. If a single entry is returned, an attempt * is made to bind as that user. If this bind succeeds, the user is not validated. * @fn int util_ldap_cache_checkuserid(request_rec *r, util_ldap_connection_t *ldc, * char *url, const char *basedn, int scope, char **attrs, * char *filter, char *bindpw, char **binddn, char ***retvals) */ APR_DECLARE_OPTIONAL_FN(int,uldap_cache_checkuserid,(request_rec *r, util_ldap_connection_t *ldc, const char *url, const char *basedn, int scope, char **attrs, const char *filter, const char *bindpw, const char **binddn, const char ***retvals)); /** * Searches for a specified user object in an LDAP directory * @param r The request record * @param ldc The LDAP connection being used. * @param url The URL of the LDAP connection - used for deciding which cache to use. * @param basedn The Base DN to search for the user in. * @param scope LDAP scope of the search. * @param attrs LDAP attributes to return in search. * @param filter The user to search for in the form of an LDAP filter. This filter must return * exactly one user for the check to be successful. * @param binddn The DN of the user will be returned in this variable. * @param retvals The values corresponding to the attributes requested in the attrs array. * @tip The filter supplied will be searched for. If a single entry is returned, an attempt * is made to bind as that user. If this bind succeeds, the user is not validated. * @fn int util_ldap_cache_getuserdn(request_rec *r, util_ldap_connection_t *ldc, * char *url, const char *basedn, int scope, char **attrs, * char *filter, char **binddn, char ***retvals) */ APR_DECLARE_OPTIONAL_FN(int,uldap_cache_getuserdn,(request_rec *r, util_ldap_connection_t *ldc, const char *url, const char *basedn, int scope, char **attrs, const char *filter, const char **binddn, const char ***retvals)); /** * Checks if SSL support is available in mod_ldap * @fn int util_ldap_ssl_supported(request_rec *r) */ APR_DECLARE_OPTIONAL_FN(int,uldap_ssl_supported,(request_rec *r)); /* from apr_ldap_cache.c */ /** * Init the LDAP cache * @param pool The pool to use to initialise the cache * @param reqsize The size of the shared memory segment to request. A size * of zero requests the max size possible from * apr_shmem_init() * @fn void util_ldap_cache_init(apr_pool_t *p, util_ldap_state_t *st) * @return The status code returned is the status code of the * apr_smmem_init() call. Regardless of the status, the cache * will be set up at least for in-process or in-thread operation. */ apr_status_t util_ldap_cache_init(apr_pool_t *pool, util_ldap_state_t *st); /* from apr_ldap_cache_mgr.c */ /** * Display formatted stats for cache * @param The pool to allocate the returned string from * @tip This function returns a string allocated from the provided pool that describes * various stats about the cache. * @fn char *util_ald_cache_display(apr_pool_t *pool, util_ldap_state_t *st) */ char *util_ald_cache_display(request_rec *r, util_ldap_state_t *st); #ifdef __cplusplus } #endif #endif /* APR_HAS_LDAP */ #endif /* UTIL_LDAP_H */ httpd-2.4.41/include/util_md5.h0000644000000000000500000000416712361574225014571 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file util_md5.h * @brief Apache MD5 library * * @defgroup APACHE_CORE_MD5 MD5 Package Library * @ingroup APACHE_CORE * @{ */ #ifndef APACHE_UTIL_MD5_H #define APACHE_UTIL_MD5_H #ifdef __cplusplus extern "C" { #endif #include "apr_md5.h" /** * Create an MD5 checksum of a given string. * @param a Pool to allocate out of * @param string String to get the checksum of * @return The checksum */ AP_DECLARE(char *) ap_md5(apr_pool_t *a, const unsigned char *string); /** * Create an MD5 checksum of a string of binary data. * @param a Pool to allocate out of * @param buf Buffer to generate checksum for * @param len The length of the buffer * @return The checksum */ AP_DECLARE(char *) ap_md5_binary(apr_pool_t *a, const unsigned char *buf, int len); /** * Convert an MD5 checksum into a base64 encoding. * @param p The pool to allocate out of * @param context The context to convert * @return The converted encoding */ AP_DECLARE(char *) ap_md5contextTo64(apr_pool_t *p, apr_md5_ctx_t *context); /** * Create an MD5 Digest for a given file. * @param p The pool to allocate out of * @param infile The file to create the digest for */ AP_DECLARE(char *) ap_md5digest(apr_pool_t *p, apr_file_t *infile); #ifdef __cplusplus } #endif #endif /* !APACHE_UTIL_MD5_H */ /** @} */ httpd-2.4.41/include/mod_auth.h0000644000000000000500000001065411641236676014652 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_auth.h * @brief Authentication and Authorization Extension for Apache * * @defgroup MOD_AUTH mod_auth * @ingroup APACHE_MODS */ #ifndef APACHE_MOD_AUTH_H #define APACHE_MOD_AUTH_H #include "apr_pools.h" #include "apr_hash.h" #include "apr_optional.h" #include "httpd.h" #include "http_config.h" #ifdef __cplusplus extern "C" { #endif #define AUTHN_PROVIDER_GROUP "authn" #define AUTHZ_PROVIDER_GROUP "authz" #define AUTHN_PROVIDER_VERSION "0" #define AUTHZ_PROVIDER_VERSION "0" #define AUTHN_DEFAULT_PROVIDER "file" #define AUTHN_PROVIDER_NAME_NOTE "authn_provider_name" #define AUTHZ_PROVIDER_NAME_NOTE "authz_provider_name" #define AUTHN_PREFIX "AUTHENTICATE_" #define AUTHZ_PREFIX "AUTHORIZE_" /** all of the requirements must be met */ #ifndef SATISFY_ALL #define SATISFY_ALL 0 #endif /** any of the requirements must be met */ #ifndef SATISFY_ANY #define SATISFY_ANY 1 #endif /** There are no applicable satisfy lines */ #ifndef SATISFY_NOSPEC #define SATISFY_NOSPEC 2 #endif typedef enum { AUTH_DENIED, AUTH_GRANTED, AUTH_USER_FOUND, AUTH_USER_NOT_FOUND, AUTH_GENERAL_ERROR } authn_status; typedef enum { AUTHZ_DENIED, AUTHZ_GRANTED, AUTHZ_NEUTRAL, AUTHZ_GENERAL_ERROR, AUTHZ_DENIED_NO_USER /* denied because r->user == NULL */ } authz_status; typedef struct { /* Given a username and password, expected to return AUTH_GRANTED * if we can validate this user/password combination. */ authn_status (*check_password)(request_rec *r, const char *user, const char *password); /* Given a user and realm, expected to return AUTH_USER_FOUND if we * can find a md5 hash of 'user:realm:password' */ authn_status (*get_realm_hash)(request_rec *r, const char *user, const char *realm, char **rethash); } authn_provider; /* A linked-list of authn providers. */ typedef struct authn_provider_list authn_provider_list; struct authn_provider_list { const char *provider_name; const authn_provider *provider; authn_provider_list *next; }; typedef struct { /* Given a request_rec, expected to return AUTHZ_GRANTED * if we can authorize user access. * @param r the request record * @param require_line the argument to the authz provider * @param parsed_require_line the value set by parse_require_line(), if any */ authz_status (*check_authorization)(request_rec *r, const char *require_line, const void *parsed_require_line); /** Check the syntax of a require line and optionally cache the parsed * line. This function may be NULL. * @param cmd the config directive * @param require_line the argument to the authz provider * @param parsed_require_line place to store parsed require_line for use by provider * @return Error message or NULL on success */ const char *(*parse_require_line)(cmd_parms *cmd, const char *require_line, const void **parsed_require_line); } authz_provider; /* ap_authn_cache_store: Optional function for authn providers * to enable cacheing their lookups with mod_authn_cache * @param r The request rec * @param module Module identifier * @param user User name to authenticate * @param realm Digest authn realm (NULL for basic authn) * @param data The value looked up by the authn provider, to cache */ APR_DECLARE_OPTIONAL_FN(void, ap_authn_cache_store, (request_rec*, const char*, const char*, const char*, const char*)); #ifdef __cplusplus } #endif #endif httpd-2.4.41/include/apache_noprobes.h0000644000000000000500000003714011737125415016173 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef _APACHE_NOPROBES_H_ #define _APACHE_NOPROBES_H_ #define AP_ACCESS_CHECKER_DISPATCH_COMPLETE(arg0, arg1) #define AP_ACCESS_CHECKER_DISPATCH_COMPLETE_ENABLED() (0) #define AP_ACCESS_CHECKER_DISPATCH_INVOKE(arg0) #define AP_ACCESS_CHECKER_DISPATCH_INVOKE_ENABLED() (0) #define AP_ACCESS_CHECKER_ENTRY() #define AP_ACCESS_CHECKER_ENTRY_ENABLED() (0) #define AP_ACCESS_CHECKER_RETURN(arg0) #define AP_ACCESS_CHECKER_RETURN_ENABLED() (0) #define AP_AUTH_CHECKER_DISPATCH_COMPLETE(arg0, arg1) #define AP_AUTH_CHECKER_DISPATCH_COMPLETE_ENABLED() (0) #define AP_AUTH_CHECKER_DISPATCH_INVOKE(arg0) #define AP_AUTH_CHECKER_DISPATCH_INVOKE_ENABLED() (0) #define AP_AUTH_CHECKER_ENTRY() #define AP_AUTH_CHECKER_ENTRY_ENABLED() (0) #define AP_AUTH_CHECKER_RETURN(arg0) #define AP_AUTH_CHECKER_RETURN_ENABLED() (0) #define AP_CANON_HANDLER_DISPATCH_COMPLETE(arg0, arg1) #define AP_CANON_HANDLER_DISPATCH_COMPLETE_ENABLED() (0) #define AP_CANON_HANDLER_DISPATCH_INVOKE(arg0) #define AP_CANON_HANDLER_DISPATCH_INVOKE_ENABLED() (0) #define AP_CANON_HANDLER_ENTRY() #define AP_CANON_HANDLER_ENTRY_ENABLED() (0) #define AP_CANON_HANDLER_RETURN(arg0) #define AP_CANON_HANDLER_RETURN_ENABLED() (0) #define AP_CHECK_USER_ID_DISPATCH_COMPLETE(arg0, arg1) #define AP_CHECK_USER_ID_DISPATCH_COMPLETE_ENABLED() (0) #define AP_CHECK_USER_ID_DISPATCH_INVOKE(arg0) #define AP_CHECK_USER_ID_DISPATCH_INVOKE_ENABLED() (0) #define AP_CHECK_USER_ID_ENTRY() #define AP_CHECK_USER_ID_ENTRY_ENABLED() (0) #define AP_CHECK_USER_ID_RETURN(arg0) #define AP_CHECK_USER_ID_RETURN_ENABLED() (0) #define AP_CHILD_INIT_DISPATCH_COMPLETE(arg0, arg1) #define AP_CHILD_INIT_DISPATCH_COMPLETE_ENABLED() (0) #define AP_CHILD_INIT_DISPATCH_INVOKE(arg0) #define AP_CHILD_INIT_DISPATCH_INVOKE_ENABLED() (0) #define AP_CHILD_INIT_ENTRY() #define AP_CHILD_INIT_ENTRY_ENABLED() (0) #define AP_CHILD_INIT_RETURN(arg0) #define AP_CHILD_INIT_RETURN_ENABLED() (0) #define AP_CREATE_CONNECTION_DISPATCH_COMPLETE(arg0, arg1) #define AP_CREATE_CONNECTION_DISPATCH_COMPLETE_ENABLED() (0) #define AP_CREATE_CONNECTION_DISPATCH_INVOKE(arg0) #define AP_CREATE_CONNECTION_DISPATCH_INVOKE_ENABLED() (0) #define AP_CREATE_CONNECTION_ENTRY() #define AP_CREATE_CONNECTION_ENTRY_ENABLED() (0) #define AP_CREATE_CONNECTION_RETURN(arg0) #define AP_CREATE_CONNECTION_RETURN_ENABLED() (0) #define AP_CREATE_REQUEST_DISPATCH_COMPLETE(arg0, arg1) #define AP_CREATE_REQUEST_DISPATCH_COMPLETE_ENABLED() (0) #define AP_CREATE_REQUEST_DISPATCH_INVOKE(arg0) #define AP_CREATE_REQUEST_DISPATCH_INVOKE_ENABLED() (0) #define AP_CREATE_REQUEST_ENTRY() #define AP_CREATE_REQUEST_ENTRY_ENABLED() (0) #define AP_CREATE_REQUEST_RETURN(arg0) #define AP_CREATE_REQUEST_RETURN_ENABLED() (0) #define AP_DEFAULT_PORT_DISPATCH_COMPLETE(arg0, arg1) #define AP_DEFAULT_PORT_DISPATCH_COMPLETE_ENABLED() (0) #define AP_DEFAULT_PORT_DISPATCH_INVOKE(arg0) #define AP_DEFAULT_PORT_DISPATCH_INVOKE_ENABLED() (0) #define AP_DEFAULT_PORT_ENTRY() #define AP_DEFAULT_PORT_ENTRY_ENABLED() (0) #define AP_DEFAULT_PORT_RETURN(arg0) #define AP_DEFAULT_PORT_RETURN_ENABLED() (0) #define AP_ERROR_LOG_DISPATCH_COMPLETE(arg0, arg1) #define AP_ERROR_LOG_DISPATCH_COMPLETE_ENABLED() (0) #define AP_ERROR_LOG_DISPATCH_INVOKE(arg0) #define AP_ERROR_LOG_DISPATCH_INVOKE_ENABLED() (0) #define AP_ERROR_LOG_ENTRY() #define AP_ERROR_LOG_ENTRY_ENABLED() (0) #define AP_ERROR_LOG_RETURN(arg0) #define AP_ERROR_LOG_RETURN_ENABLED() (0) #define AP_FIND_LIVEPROP_DISPATCH_COMPLETE(arg0, arg1) #define AP_FIND_LIVEPROP_DISPATCH_COMPLETE_ENABLED() (0) #define AP_FIND_LIVEPROP_DISPATCH_INVOKE(arg0) #define AP_FIND_LIVEPROP_DISPATCH_INVOKE_ENABLED() (0) #define AP_FIND_LIVEPROP_ENTRY() #define AP_FIND_LIVEPROP_ENTRY_ENABLED() (0) #define AP_FIND_LIVEPROP_RETURN(arg0) #define AP_FIND_LIVEPROP_RETURN_ENABLED() (0) #define AP_FIXUPS_DISPATCH_COMPLETE(arg0, arg1) #define AP_FIXUPS_DISPATCH_COMPLETE_ENABLED() (0) #define AP_FIXUPS_DISPATCH_INVOKE(arg0) #define AP_FIXUPS_DISPATCH_INVOKE_ENABLED() (0) #define AP_FIXUPS_ENTRY() #define AP_FIXUPS_ENTRY_ENABLED() (0) #define AP_FIXUPS_RETURN(arg0) #define AP_FIXUPS_RETURN_ENABLED() (0) #define AP_GATHER_PROPSETS_DISPATCH_COMPLETE(arg0, arg1) #define AP_GATHER_PROPSETS_DISPATCH_COMPLETE_ENABLED() (0) #define AP_GATHER_PROPSETS_DISPATCH_INVOKE(arg0) #define AP_GATHER_PROPSETS_DISPATCH_INVOKE_ENABLED() (0) #define AP_GATHER_PROPSETS_ENTRY() #define AP_GATHER_PROPSETS_ENTRY_ENABLED() (0) #define AP_GATHER_PROPSETS_RETURN(arg0) #define AP_GATHER_PROPSETS_RETURN_ENABLED() (0) #define AP_GET_MGMT_ITEMS_DISPATCH_COMPLETE(arg0, arg1) #define AP_GET_MGMT_ITEMS_DISPATCH_COMPLETE_ENABLED() (0) #define AP_GET_MGMT_ITEMS_DISPATCH_INVOKE(arg0) #define AP_GET_MGMT_ITEMS_DISPATCH_INVOKE_ENABLED() (0) #define AP_GET_MGMT_ITEMS_ENTRY() #define AP_GET_MGMT_ITEMS_ENTRY_ENABLED() (0) #define AP_GET_MGMT_ITEMS_RETURN(arg0) #define AP_GET_MGMT_ITEMS_RETURN_ENABLED() (0) #define AP_GET_SUEXEC_IDENTITY_DISPATCH_COMPLETE(arg0, arg1) #define AP_GET_SUEXEC_IDENTITY_DISPATCH_COMPLETE_ENABLED() (0) #define AP_GET_SUEXEC_IDENTITY_DISPATCH_INVOKE(arg0) #define AP_GET_SUEXEC_IDENTITY_DISPATCH_INVOKE_ENABLED() (0) #define AP_GET_SUEXEC_IDENTITY_ENTRY() #define AP_GET_SUEXEC_IDENTITY_ENTRY_ENABLED() (0) #define AP_GET_SUEXEC_IDENTITY_RETURN(arg0) #define AP_GET_SUEXEC_IDENTITY_RETURN_ENABLED() (0) #define AP_HANDLER_DISPATCH_COMPLETE(arg0, arg1) #define AP_HANDLER_DISPATCH_COMPLETE_ENABLED() (0) #define AP_HANDLER_DISPATCH_INVOKE(arg0) #define AP_HANDLER_DISPATCH_INVOKE_ENABLED() (0) #define AP_HANDLER_ENTRY() #define AP_HANDLER_ENTRY_ENABLED() (0) #define AP_HANDLER_RETURN(arg0) #define AP_HANDLER_RETURN_ENABLED() (0) #define AP_HEADER_PARSER_DISPATCH_COMPLETE(arg0, arg1) #define AP_HEADER_PARSER_DISPATCH_COMPLETE_ENABLED() (0) #define AP_HEADER_PARSER_DISPATCH_INVOKE(arg0) #define AP_HEADER_PARSER_DISPATCH_INVOKE_ENABLED() (0) #define AP_HEADER_PARSER_ENTRY() #define AP_HEADER_PARSER_ENTRY_ENABLED() (0) #define AP_HEADER_PARSER_RETURN(arg0) #define AP_HEADER_PARSER_RETURN_ENABLED() (0) #define AP_HTTP_SCHEME_DISPATCH_COMPLETE(arg0, arg1) #define AP_HTTP_SCHEME_DISPATCH_COMPLETE_ENABLED() (0) #define AP_HTTP_SCHEME_DISPATCH_INVOKE(arg0) #define AP_HTTP_SCHEME_DISPATCH_INVOKE_ENABLED() (0) #define AP_HTTP_SCHEME_ENTRY() #define AP_HTTP_SCHEME_ENTRY_ENABLED() (0) #define AP_HTTP_SCHEME_RETURN(arg0) #define AP_HTTP_SCHEME_RETURN_ENABLED() (0) #define AP_INSERT_ALL_LIVEPROPS_DISPATCH_COMPLETE(arg0, arg1) #define AP_INSERT_ALL_LIVEPROPS_DISPATCH_COMPLETE_ENABLED() (0) #define AP_INSERT_ALL_LIVEPROPS_DISPATCH_INVOKE(arg0) #define AP_INSERT_ALL_LIVEPROPS_DISPATCH_INVOKE_ENABLED() (0) #define AP_INSERT_ALL_LIVEPROPS_ENTRY() #define AP_INSERT_ALL_LIVEPROPS_ENTRY_ENABLED() (0) #define AP_INSERT_ALL_LIVEPROPS_RETURN(arg0) #define AP_INSERT_ALL_LIVEPROPS_RETURN_ENABLED() (0) #define AP_INSERT_ERROR_FILTER_DISPATCH_COMPLETE(arg0, arg1) #define AP_INSERT_ERROR_FILTER_DISPATCH_COMPLETE_ENABLED() (0) #define AP_INSERT_ERROR_FILTER_DISPATCH_INVOKE(arg0) #define AP_INSERT_ERROR_FILTER_DISPATCH_INVOKE_ENABLED() (0) #define AP_INSERT_ERROR_FILTER_ENTRY() #define AP_INSERT_ERROR_FILTER_ENTRY_ENABLED() (0) #define AP_INSERT_ERROR_FILTER_RETURN(arg0) #define AP_INSERT_ERROR_FILTER_RETURN_ENABLED() (0) #define AP_INSERT_FILTER_DISPATCH_COMPLETE(arg0, arg1) #define AP_INSERT_FILTER_DISPATCH_COMPLETE_ENABLED() (0) #define AP_INSERT_FILTER_DISPATCH_INVOKE(arg0) #define AP_INSERT_FILTER_DISPATCH_INVOKE_ENABLED() (0) #define AP_INSERT_FILTER_ENTRY() #define AP_INSERT_FILTER_ENTRY_ENABLED() (0) #define AP_INSERT_FILTER_RETURN(arg0) #define AP_INSERT_FILTER_RETURN_ENABLED() (0) #define AP_INTERNAL_REDIRECT(arg0, arg1) #define AP_INTERNAL_REDIRECT_ENABLED() (0) #define AP_LOG_TRANSACTION_DISPATCH_COMPLETE(arg0, arg1) #define AP_LOG_TRANSACTION_DISPATCH_COMPLETE_ENABLED() (0) #define AP_LOG_TRANSACTION_DISPATCH_INVOKE(arg0) #define AP_LOG_TRANSACTION_DISPATCH_INVOKE_ENABLED() (0) #define AP_LOG_TRANSACTION_ENTRY() #define AP_LOG_TRANSACTION_ENTRY_ENABLED() (0) #define AP_LOG_TRANSACTION_RETURN(arg0) #define AP_LOG_TRANSACTION_RETURN_ENABLED() (0) #define AP_MAP_TO_STORAGE_DISPATCH_COMPLETE(arg0, arg1) #define AP_MAP_TO_STORAGE_DISPATCH_COMPLETE_ENABLED() (0) #define AP_MAP_TO_STORAGE_DISPATCH_INVOKE(arg0) #define AP_MAP_TO_STORAGE_DISPATCH_INVOKE_ENABLED() (0) #define AP_MAP_TO_STORAGE_ENTRY() #define AP_MAP_TO_STORAGE_ENTRY_ENABLED() (0) #define AP_MAP_TO_STORAGE_RETURN(arg0) #define AP_MAP_TO_STORAGE_RETURN_ENABLED() (0) #define AP_MONITOR_DISPATCH_COMPLETE(arg0, arg1) #define AP_MONITOR_DISPATCH_COMPLETE_ENABLED() (0) #define AP_MONITOR_DISPATCH_INVOKE(arg0) #define AP_MONITOR_DISPATCH_INVOKE_ENABLED() (0) #define AP_MONITOR_ENTRY() #define AP_MONITOR_ENTRY_ENABLED() (0) #define AP_MONITOR_RETURN(arg0) #define AP_MONITOR_RETURN_ENABLED() (0) #define AP_OPEN_LOGS_DISPATCH_COMPLETE(arg0, arg1) #define AP_OPEN_LOGS_DISPATCH_COMPLETE_ENABLED() (0) #define AP_OPEN_LOGS_DISPATCH_INVOKE(arg0) #define AP_OPEN_LOGS_DISPATCH_INVOKE_ENABLED() (0) #define AP_OPEN_LOGS_ENTRY() #define AP_OPEN_LOGS_ENTRY_ENABLED() (0) #define AP_OPEN_LOGS_RETURN(arg0) #define AP_OPEN_LOGS_RETURN_ENABLED() (0) #define AP_OPTIONAL_FN_RETRIEVE_DISPATCH_COMPLETE(arg0, arg1) #define AP_OPTIONAL_FN_RETRIEVE_DISPATCH_COMPLETE_ENABLED() (0) #define AP_OPTIONAL_FN_RETRIEVE_DISPATCH_INVOKE(arg0) #define AP_OPTIONAL_FN_RETRIEVE_DISPATCH_INVOKE_ENABLED() (0) #define AP_OPTIONAL_FN_RETRIEVE_ENTRY() #define AP_OPTIONAL_FN_RETRIEVE_ENTRY_ENABLED() (0) #define AP_OPTIONAL_FN_RETRIEVE_RETURN(arg0) #define AP_OPTIONAL_FN_RETRIEVE_RETURN_ENABLED() (0) #define AP_POST_CONFIG_DISPATCH_COMPLETE(arg0, arg1) #define AP_POST_CONFIG_DISPATCH_COMPLETE_ENABLED() (0) #define AP_POST_CONFIG_DISPATCH_INVOKE(arg0) #define AP_POST_CONFIG_DISPATCH_INVOKE_ENABLED() (0) #define AP_POST_CONFIG_ENTRY() #define AP_POST_CONFIG_ENTRY_ENABLED() (0) #define AP_POST_CONFIG_RETURN(arg0) #define AP_POST_CONFIG_RETURN_ENABLED() (0) #define AP_POST_READ_REQUEST_DISPATCH_COMPLETE(arg0, arg1) #define AP_POST_READ_REQUEST_DISPATCH_COMPLETE_ENABLED() (0) #define AP_POST_READ_REQUEST_DISPATCH_INVOKE(arg0) #define AP_POST_READ_REQUEST_DISPATCH_INVOKE_ENABLED() (0) #define AP_POST_READ_REQUEST_ENTRY() #define AP_POST_READ_REQUEST_ENTRY_ENABLED() (0) #define AP_POST_READ_REQUEST_RETURN(arg0) #define AP_POST_READ_REQUEST_RETURN_ENABLED() (0) #define AP_POST_REQUEST_DISPATCH_COMPLETE(arg0, arg1) #define AP_POST_REQUEST_DISPATCH_COMPLETE_ENABLED() (0) #define AP_POST_REQUEST_DISPATCH_INVOKE(arg0) #define AP_POST_REQUEST_DISPATCH_INVOKE_ENABLED() (0) #define AP_POST_REQUEST_ENTRY() #define AP_POST_REQUEST_ENTRY_ENABLED() (0) #define AP_POST_REQUEST_RETURN(arg0) #define AP_POST_REQUEST_RETURN_ENABLED() (0) #define AP_PRE_CONFIG_DISPATCH_COMPLETE(arg0, arg1) #define AP_PRE_CONFIG_DISPATCH_COMPLETE_ENABLED() (0) #define AP_PRE_CONFIG_DISPATCH_INVOKE(arg0) #define AP_PRE_CONFIG_DISPATCH_INVOKE_ENABLED() (0) #define AP_PRE_CONFIG_ENTRY() #define AP_PRE_CONFIG_ENTRY_ENABLED() (0) #define AP_PRE_CONFIG_RETURN(arg0) #define AP_PRE_CONFIG_RETURN_ENABLED() (0) #define AP_PRE_CONNECTION_DISPATCH_COMPLETE(arg0, arg1) #define AP_PRE_CONNECTION_DISPATCH_COMPLETE_ENABLED() (0) #define AP_PRE_CONNECTION_DISPATCH_INVOKE(arg0) #define AP_PRE_CONNECTION_DISPATCH_INVOKE_ENABLED() (0) #define AP_PRE_CONNECTION_ENTRY() #define AP_PRE_CONNECTION_ENTRY_ENABLED() (0) #define AP_PRE_CONNECTION_RETURN(arg0) #define AP_PRE_CONNECTION_RETURN_ENABLED() (0) #define AP_PRE_MPM_DISPATCH_COMPLETE(arg0, arg1) #define AP_PRE_MPM_DISPATCH_COMPLETE_ENABLED() (0) #define AP_PRE_MPM_DISPATCH_INVOKE(arg0) #define AP_PRE_MPM_DISPATCH_INVOKE_ENABLED() (0) #define AP_PRE_MPM_ENTRY() #define AP_PRE_MPM_ENTRY_ENABLED() (0) #define AP_PRE_MPM_RETURN(arg0) #define AP_PRE_MPM_RETURN_ENABLED() (0) #define AP_PRE_REQUEST_DISPATCH_COMPLETE(arg0, arg1) #define AP_PRE_REQUEST_DISPATCH_COMPLETE_ENABLED() (0) #define AP_PRE_REQUEST_DISPATCH_INVOKE(arg0) #define AP_PRE_REQUEST_DISPATCH_INVOKE_ENABLED() (0) #define AP_PRE_REQUEST_ENTRY() #define AP_PRE_REQUEST_ENTRY_ENABLED() (0) #define AP_PRE_REQUEST_RETURN(arg0) #define AP_PRE_REQUEST_RETURN_ENABLED() (0) #define AP_PROCESS_REQUEST_ENTRY(arg0, arg1) #define AP_PROCESS_REQUEST_ENTRY_ENABLED() (0) #define AP_PROCESS_REQUEST_RETURN(arg0, arg1, arg2) #define AP_PROCESS_REQUEST_RETURN_ENABLED() (0) #define AP_PROCESS_CONNECTION_DISPATCH_COMPLETE(arg0, arg1) #define AP_PROCESS_CONNECTION_DISPATCH_COMPLETE_ENABLED() (0) #define AP_PROCESS_CONNECTION_DISPATCH_INVOKE(arg0) #define AP_PROCESS_CONNECTION_DISPATCH_INVOKE_ENABLED() (0) #define AP_PROCESS_CONNECTION_ENTRY() #define AP_PROCESS_CONNECTION_ENTRY_ENABLED() (0) #define AP_PROCESS_CONNECTION_RETURN(arg0) #define AP_PROCESS_CONNECTION_RETURN_ENABLED() (0) #define AP_PROXY_RUN(arg0, arg1, arg2, arg3, arg4) #define AP_PROXY_RUN_ENABLED() (0) #define AP_PROXY_RUN_FINISHED(arg0, arg1, arg2) #define AP_PROXY_RUN_FINISHED_ENABLED() (0) #define AP_QUICK_HANDLER_DISPATCH_COMPLETE(arg0, arg1) #define AP_QUICK_HANDLER_DISPATCH_COMPLETE_ENABLED() (0) #define AP_QUICK_HANDLER_DISPATCH_INVOKE(arg0) #define AP_QUICK_HANDLER_DISPATCH_INVOKE_ENABLED() (0) #define AP_QUICK_HANDLER_ENTRY() #define AP_QUICK_HANDLER_ENTRY_ENABLED() (0) #define AP_QUICK_HANDLER_RETURN(arg0) #define AP_QUICK_HANDLER_RETURN_ENABLED() (0) #define AP_READ_REQUEST_ENTRY(arg0, arg1) #define AP_READ_REQUEST_ENTRY_ENABLED() (0) #define AP_READ_REQUEST_FAILURE(arg0) #define AP_READ_REQUEST_FAILURE_ENABLED() (0) #define AP_READ_REQUEST_SUCCESS(arg0, arg1, arg2, arg3, arg4) #define AP_READ_REQUEST_SUCCESS_ENABLED() (0) #define AP_REWRITE_LOG(arg0, arg1, arg2, arg3, arg4) #define AP_REWRITE_LOG_ENABLED() (0) #define AP_SCHEME_HANDLER_DISPATCH_COMPLETE(arg0, arg1) #define AP_SCHEME_HANDLER_DISPATCH_COMPLETE_ENABLED() (0) #define AP_SCHEME_HANDLER_DISPATCH_INVOKE(arg0) #define AP_SCHEME_HANDLER_DISPATCH_INVOKE_ENABLED() (0) #define AP_SCHEME_HANDLER_ENTRY() #define AP_SCHEME_HANDLER_ENTRY_ENABLED() (0) #define AP_SCHEME_HANDLER_RETURN(arg0) #define AP_SCHEME_HANDLER_RETURN_ENABLED() (0) #define AP_TEST_CONFIG_DISPATCH_COMPLETE(arg0, arg1) #define AP_TEST_CONFIG_DISPATCH_COMPLETE_ENABLED() (0) #define AP_TEST_CONFIG_DISPATCH_INVOKE(arg0) #define AP_TEST_CONFIG_DISPATCH_INVOKE_ENABLED() (0) #define AP_TEST_CONFIG_ENTRY() #define AP_TEST_CONFIG_ENTRY_ENABLED() (0) #define AP_TEST_CONFIG_RETURN(arg0) #define AP_TEST_CONFIG_RETURN_ENABLED() (0) #define AP_TRANSLATE_NAME_DISPATCH_COMPLETE(arg0, arg1) #define AP_TRANSLATE_NAME_DISPATCH_COMPLETE_ENABLED() (0) #define AP_TRANSLATE_NAME_DISPATCH_INVOKE(arg0) #define AP_TRANSLATE_NAME_DISPATCH_INVOKE_ENABLED() (0) #define AP_TRANSLATE_NAME_ENTRY() #define AP_TRANSLATE_NAME_ENTRY_ENABLED() (0) #define AP_TRANSLATE_NAME_RETURN(arg0) #define AP_TRANSLATE_NAME_RETURN_ENABLED() (0) #define AP_TYPE_CHECKER_DISPATCH_COMPLETE(arg0, arg1) #define AP_TYPE_CHECKER_DISPATCH_COMPLETE_ENABLED() (0) #define AP_TYPE_CHECKER_DISPATCH_INVOKE(arg0) #define AP_TYPE_CHECKER_DISPATCH_INVOKE_ENABLED() (0) #define AP_TYPE_CHECKER_ENTRY() #define AP_TYPE_CHECKER_ENTRY_ENABLED() (0) #define AP_TYPE_CHECKER_RETURN(arg0) #define AP_TYPE_CHECKER_RETURN_ENABLED() (0) #endif httpd-2.4.41/include/ap_regkey.h0000644000000000000500000002173711637105701015011 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ap_regkey.h * @brief APR-style Win32 Registry Manipulation */ #ifndef AP_REGKEY_H #define AP_REGKEY_H #if defined(WIN32) || defined(DOXYGEN) #include "apr.h" #include "apr_pools.h" #include "ap_config.h" /* Just for AP_DECLARE */ #ifdef __cplusplus extern "C" { #endif typedef struct ap_regkey_t ap_regkey_t; /* Used to recover AP_REGKEY_* constants */ AP_DECLARE(const ap_regkey_t *) ap_regkey_const(int i); /** * Win32 Only: Constants for ap_regkey_open() */ #define AP_REGKEY_CLASSES_ROOT ap_regkey_const(0) #define AP_REGKEY_CURRENT_CONFIG ap_regkey_const(1) #define AP_REGKEY_CURRENT_USER ap_regkey_const(2) #define AP_REGKEY_LOCAL_MACHINE ap_regkey_const(3) #define AP_REGKEY_USERS ap_regkey_const(4) #define AP_REGKEY_PERFORMANCE_DATA ap_regkey_const(5) #define AP_REGKEY_DYN_DATA ap_regkey_const(6) /** * Win32 Only: Flags for ap_regkey_value_set() */ #define AP_REGKEY_EXPAND 0x0001 /** * Win32 Only: Open the specified registry key. * @param newkey The opened registry key * @param parentkey The open registry key of the parent, or one of *
 *           AP_REGKEY_CLASSES_ROOT
 *           AP_REGKEY_CURRENT_CONFIG
 *           AP_REGKEY_CURRENT_USER
 *           AP_REGKEY_LOCAL_MACHINE
 *           AP_REGKEY_USERS
 *           AP_REGKEY_PERFORMANCE_DATA
 *           AP_REGKEY_DYN_DATA
 * 
* @param keyname The path of the key relative to the parent key * @param flags Or'ed value of: *
 *           APR_READ             open key for reading
 *           APR_WRITE            open key for writing
 *           APR_CREATE           create the key if it doesn't exist
 *           APR_EXCL             return error if APR_CREATE and key exists
 * 
* @param pool The pool in which newkey is allocated */ AP_DECLARE(apr_status_t) ap_regkey_open(ap_regkey_t **newkey, const ap_regkey_t *parentkey, const char *keyname, apr_int32_t flags, apr_pool_t *pool); /** * Win32 Only: Close the registry key opened or created by ap_regkey_open(). * @param key The registry key to close */ AP_DECLARE(apr_status_t) ap_regkey_close(ap_regkey_t *key); /** * Win32 Only: Remove the given registry key. * @param parent The open registry key of the parent, or one of *
 *           AP_REGKEY_CLASSES_ROOT
 *           AP_REGKEY_CURRENT_CONFIG
 *           AP_REGKEY_CURRENT_USER
 *           AP_REGKEY_LOCAL_MACHINE
 *           AP_REGKEY_USERS
 *           AP_REGKEY_PERFORMANCE_DATA
 *           AP_REGKEY_DYN_DATA
 * 
* @param keyname The path of the key relative to the parent key * @param pool The pool used for temp allocations * @remark ap_regkey_remove() is not recursive, although it removes * all values within the given keyname, it will not remove a key * containing subkeys. */ AP_DECLARE(apr_status_t) ap_regkey_remove(const ap_regkey_t *parent, const char *keyname, apr_pool_t *pool); /** * Win32 Only: Retrieve a registry value string from an open key. * @param result The string value retrieved * @param key The registry key to retrieve the value from * @param valuename The named value to retrieve (pass "" for the default) * @param pool The pool used to store the result * @remark There is no toggle to prevent environment variable expansion * if the registry value is set with AP_REG_EXPAND (REG_EXPAND_SZ), such * expansions are always performed. */ AP_DECLARE(apr_status_t) ap_regkey_value_get(char **result, ap_regkey_t *key, const char *valuename, apr_pool_t *pool); /** * Win32 Only: Store a registry value string into an open key. * @param key The registry key to store the value into * @param valuename The named value to store (pass "" for the default) * @param value The string to store for the named value * @param flags The option AP_REGKEY_EXPAND or 0, where AP_REGKEY_EXPAND * values will find all %foo% variables expanded from the environment. * @param pool The pool used for temp allocations */ AP_DECLARE(apr_status_t) ap_regkey_value_set(ap_regkey_t *key, const char *valuename, const char *value, apr_int32_t flags, apr_pool_t *pool); /** * Win32 Only: Retrieve a raw byte value from an open key. * @param result The raw bytes value retrieved * @param resultsize Pointer to a variable to store the number raw bytes retrieved * @param resulttype Pointer to a variable to store the registry type of the value retrieved * @param key The registry key to retrieve the value from * @param valuename The named value to retrieve (pass "" for the default) * @param pool The pool used to store the result */ AP_DECLARE(apr_status_t) ap_regkey_value_raw_get(void **result, apr_size_t *resultsize, apr_int32_t *resulttype, ap_regkey_t *key, const char *valuename, apr_pool_t *pool); /** * Win32 Only: Store a raw bytes value into an open key. * @param key The registry key to store the value into * @param valuename The named value to store (pass "" for the default) * @param value The bytes to store for the named value * @param valuesize The number of bytes for value * @param valuetype The * values will find all %foo% variables expanded from the environment. * @param pool The pool used for temp allocations */ AP_DECLARE(apr_status_t) ap_regkey_value_raw_set(ap_regkey_t *key, const char *valuename, const void *value, apr_size_t valuesize, apr_int32_t valuetype, apr_pool_t *pool); /** * Win32 Only: Retrieve a registry value string from an open key. * @param result The string elements retrieved from a REG_MULTI_SZ string array * @param key The registry key to retrieve the value from * @param valuename The named value to retrieve (pass "" for the default) * @param pool The pool used to store the result */ AP_DECLARE(apr_status_t) ap_regkey_value_array_get(apr_array_header_t **result, ap_regkey_t *key, const char *valuename, apr_pool_t *pool); /** * Win32 Only: Store a registry value string array into an open key. * @param key The registry key to store the value into * @param valuename The named value to store (pass "" for the default) * @param nelts The string elements to store in a REG_MULTI_SZ string array * @param elts The number of elements in the elts string array * @param pool The pool used for temp allocations */ AP_DECLARE(apr_status_t) ap_regkey_value_array_set(ap_regkey_t *key, const char *valuename, int nelts, const char * const * elts, apr_pool_t *pool); /** * Win32 Only: Remove a registry value from an open key. * @param key The registry key to remove the value from * @param valuename The named value to remove (pass "" for the default) * @param pool The pool used for temp allocations */ AP_DECLARE(apr_status_t) ap_regkey_value_remove(const ap_regkey_t *key, const char *valuename, apr_pool_t *pool); #ifdef __cplusplus } #endif #endif /* def WIN32 || def DOXYGEN */ #endif /* AP_REGKEY_H */ httpd-2.4.41/include/ap_slotmem.h0000644000000000000500000001610312242221264015166 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef SLOTMEM_H #define SLOTMEM_H /* Memory handler for a shared memory divided in slot. */ /** * @file ap_slotmem.h * @brief Memory Slot Extension Storage Module for Apache * * @defgroup MEM mem * @ingroup APACHE_MODS * @{ */ #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "ap_provider.h" #include "apr.h" #include "apr_strings.h" #include "apr_pools.h" #include "apr_shm.h" #include "apr_global_mutex.h" #include "apr_file_io.h" #include "apr_md5.h" #if APR_HAVE_UNISTD_H #include /* for getpid() */ #endif #ifdef __cplusplus extern "C" { #endif #define AP_SLOTMEM_PROVIDER_GROUP "slotmem" #define AP_SLOTMEM_PROVIDER_VERSION "0" typedef unsigned int ap_slotmem_type_t; /* * Values for ap_slotmem_type_t:: * * AP_SLOTMEM_TYPE_PERSIST: For transitory providers, persist * the data on the file-system * * AP_SLOTMEM_TYPE_NOTMPSAFE: * * AP_SLOTMEM_TYPE_PREALLOC: Access to slots require they be grabbed 1st * * AP_SLOTMEM_TYPE_CLEARINUSE: If persisting, clear 'inuse' array before * storing */ #define AP_SLOTMEM_TYPE_PERSIST (1 << 0) #define AP_SLOTMEM_TYPE_NOTMPSAFE (1 << 1) #define AP_SLOTMEM_TYPE_PREGRAB (1 << 2) #define AP_SLOTMEM_TYPE_CLEARINUSE (1 << 3) typedef struct ap_slotmem_instance_t ap_slotmem_instance_t; /** * callback function used for slotmem doall. * @param mem is the memory associated with a worker. * @param data is what is passed to slotmem. * @param pool is pool used * @return APR_SUCCESS if all went well */ typedef apr_status_t ap_slotmem_callback_fn_t(void* mem, void *data, apr_pool_t *pool); struct ap_slotmem_provider_t { /* * Name of the provider method */ const char *name; /** * call the callback on all worker slots * @param s ap_slotmem_instance_t to use. * @param funct callback function to call for each element. * @param data parameter for the callback function. * @param pool is pool used * @return APR_SUCCESS if all went well */ apr_status_t (* doall)(ap_slotmem_instance_t *s, ap_slotmem_callback_fn_t *func, void *data, apr_pool_t *pool); /** * create a new slotmem with each item size is item_size. * This would create shared memory, basically. * @param inst where to store pointer to slotmem * @param name a key used for debugging and in mod_status output or allow another process to share this space. * @param item_size size of each item * @param item_num number of item to create. * @param type type of slotmem. * @param pool is pool used * @return APR_SUCCESS if all went well */ apr_status_t (* create)(ap_slotmem_instance_t **inst, const char *name, apr_size_t item_size, unsigned int item_num, ap_slotmem_type_t type, apr_pool_t *pool); /** * attach to an existing slotmem. * This would attach to shared memory, basically. * @param inst where to store pointer to slotmem * @param name a key used for debugging and in mod_status output or allow another process to share this space. * @param item_size size of each item * @param item_num max number of item. * @param pool is pool to memory allocate. * @return APR_SUCCESS if all went well */ apr_status_t (* attach)(ap_slotmem_instance_t **inst, const char *name, apr_size_t *item_size, unsigned int *item_num, apr_pool_t *pool); /** * get the memory ptr associated with this worker slot. * @param s ap_slotmem_instance_t to use. * @param item_id item to return for 0 to item_num * @param mem address to store the pointer to the slot * @return APR_SUCCESS if all went well */ apr_status_t (* dptr)(ap_slotmem_instance_t *s, unsigned int item_id, void**mem); /** * get/read the data associated with this worker slot. * @param s ap_slotmem_instance_t to use. * @param item_id item to return for 0 to item_num * @param dest address to store the data * @param dest_len length of dataset to retrieve * @return APR_SUCCESS if all went well */ apr_status_t (* get)(ap_slotmem_instance_t *s, unsigned int item_id, unsigned char *dest, apr_size_t dest_len); /** * put/write the data associated with this worker slot. * @param s ap_slotmem_instance_t to use. * @param item_id item to return for 0 to item_num * @param src address of the data to store in the slot * @param src_len length of dataset to store in the slot * @return APR_SUCCESS if all went well */ apr_status_t (* put)(ap_slotmem_instance_t *slot, unsigned int item_id, unsigned char *src, apr_size_t src_len); /** * return number of slots allocated for this entry. * @param s ap_slotmem_instance_t to use. * @return number of slots */ unsigned int (* num_slots)(ap_slotmem_instance_t *s); /** * return number of free (not used) slots allocated for this entry. * Valid for slots which are AP_SLOTMEM_TYPE_PREGRAB as well as * any which use get/release. * @param s ap_slotmem_instance_t to use. * @return number of slots */ unsigned int (* num_free_slots)(ap_slotmem_instance_t *s); /** * return slot size allocated for this entry. * @param s ap_slotmem_instance_t to use. * @return size of slot */ apr_size_t (* slot_size)(ap_slotmem_instance_t *s); /** * grab (or alloc) a free slot * @param s ap_slotmem_instance_t to use. * @param item_id ptr to the available slot id and marked as in-use * @return APR_SUCCESS if all went well */ apr_status_t (* grab)(ap_slotmem_instance_t *s, unsigned int *item_id); /** * release (or free) the slot associated with this item_id * @param s ap_slotmem_instance_t to use. * @param item_id slot id to free and mark as no longer in-use * @return APR_SUCCESS if all went well */ apr_status_t (* release)(ap_slotmem_instance_t *s, unsigned int item_id); /** * forced grab (or alloc) a slot associated with this item_id * @param s ap_slotmem_instance_t to use. * @param item_id to the specified slot id and marked as in-use * @return APR_SUCCESS if all went well */ apr_status_t (* fgrab)(ap_slotmem_instance_t *s, unsigned int item_id); }; typedef struct ap_slotmem_provider_t ap_slotmem_provider_t; #ifdef __cplusplus } #endif #endif /** @} */ httpd-2.4.41/include/ap_config.h0000644000000000000500000001471612012563134014763 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ap_config.h * @brief Symbol export macros and hook functions */ #ifndef AP_CONFIG_H #define AP_CONFIG_H #include "ap_hooks.h" /* Although this file doesn't declare any hooks, declare the exports group here */ /** * @defgroup exports Apache exports * @ingroup APACHE_CORE */ #ifdef DOXYGEN /* define these just so doxygen documents them */ /** * AP_DECLARE_STATIC is defined when including Apache's Core headers, * to provide static linkage when the dynamic library may be unavailable. * * @see AP_DECLARE_EXPORT * * AP_DECLARE_STATIC and AP_DECLARE_EXPORT are left undefined when * including Apache's Core headers, to import and link the symbols from the * dynamic Apache Core library and assure appropriate indirection and calling * conventions at compile time. */ # define AP_DECLARE_STATIC /** * AP_DECLARE_EXPORT is defined when building the Apache Core dynamic * library, so that all public symbols are exported. * * @see AP_DECLARE_STATIC */ # define AP_DECLARE_EXPORT #endif /* def DOXYGEN */ #if !defined(WIN32) /** * Apache Core dso functions are declared with AP_DECLARE(), so they may * use the most appropriate calling convention. Hook functions and other * Core functions with variable arguments must use AP_DECLARE_NONSTD(). * @code * AP_DECLARE(rettype) ap_func(args) * @endcode */ #define AP_DECLARE(type) type /** * Apache Core dso variable argument and hook functions are declared with * AP_DECLARE_NONSTD(), as they must use the C language calling convention. * @see AP_DECLARE * @code * AP_DECLARE_NONSTD(rettype) ap_func(args [...]) * @endcode */ #define AP_DECLARE_NONSTD(type) type /** * Apache Core dso variables are declared with AP_MODULE_DECLARE_DATA. * This assures the appropriate indirection is invoked at compile time. * * @note AP_DECLARE_DATA extern type apr_variable; syntax is required for * declarations within headers to properly import the variable. * @code * AP_DECLARE_DATA type apr_variable * @endcode */ #define AP_DECLARE_DATA #elif defined(AP_DECLARE_STATIC) #define AP_DECLARE(type) type __stdcall #define AP_DECLARE_NONSTD(type) type #define AP_DECLARE_DATA #elif defined(AP_DECLARE_EXPORT) #define AP_DECLARE(type) __declspec(dllexport) type __stdcall #define AP_DECLARE_NONSTD(type) __declspec(dllexport) type #define AP_DECLARE_DATA __declspec(dllexport) #else #define AP_DECLARE(type) __declspec(dllimport) type __stdcall #define AP_DECLARE_NONSTD(type) __declspec(dllimport) type #define AP_DECLARE_DATA __declspec(dllimport) #endif #if !defined(WIN32) || defined(AP_MODULE_DECLARE_STATIC) /** * Declare a dso module's exported module structure as AP_MODULE_DECLARE_DATA. * * Unless AP_MODULE_DECLARE_STATIC is defined at compile time, symbols * declared with AP_MODULE_DECLARE_DATA are always exported. * @code * module AP_MODULE_DECLARE_DATA mod_tag * @endcode */ #if defined(WIN32) #define AP_MODULE_DECLARE(type) type __stdcall #else #define AP_MODULE_DECLARE(type) type #endif #define AP_MODULE_DECLARE_NONSTD(type) type #define AP_MODULE_DECLARE_DATA #else /** * AP_MODULE_DECLARE_EXPORT is a no-op. Unless contradicted by the * AP_MODULE_DECLARE_STATIC compile-time symbol, it is assumed and defined. * * The old SHARED_MODULE compile-time symbol is now the default behavior, * so it is no longer referenced anywhere with Apache 2.0. */ #define AP_MODULE_DECLARE_EXPORT #define AP_MODULE_DECLARE(type) __declspec(dllexport) type __stdcall #define AP_MODULE_DECLARE_NONSTD(type) __declspec(dllexport) type #define AP_MODULE_DECLARE_DATA __declspec(dllexport) #endif #include "os.h" #if (!defined(WIN32) && !defined(NETWARE)) || defined(__MINGW32__) #include "ap_config_auto.h" #endif #include "ap_config_layout.h" /* Where the main/parent process's pid is logged */ #ifndef DEFAULT_PIDLOG #define DEFAULT_PIDLOG DEFAULT_REL_RUNTIMEDIR "/httpd.pid" #endif #if defined(NETWARE) #define AP_NONBLOCK_WHEN_MULTI_LISTEN 1 #endif #if defined(AP_ENABLE_DTRACE) && HAVE_SYS_SDT_H #include #else #undef _DTRACE_VERSION #endif #ifdef _DTRACE_VERSION #include "apache_probes.h" #else #include "apache_noprobes.h" #endif /* If APR has OTHER_CHILD logic, use reliable piped logs. */ #if APR_HAS_OTHER_CHILD #define AP_HAVE_RELIABLE_PIPED_LOGS TRUE #endif #if defined(__STDC_VERSION__) && __STDC_VERSION__ >= 199901L #define AP_HAVE_C99 #endif /* Presume that the compiler supports C99-style designated * initializers if using GCC (but not G++), or for any other compiler * which claims C99 support. */ #if (defined(__GNUC__) && !defined(__cplusplus)) || defined(AP_HAVE_C99) #define AP_HAVE_DESIGNATED_INITIALIZER #endif #ifndef __has_attribute /* check for supported attributes on clang */ #define __has_attribute(x) 0 #endif #if (defined(__GNUC__) && __GNUC__ >= 4) || __has_attribute(sentinel) #define AP_FN_ATTR_SENTINEL __attribute__((sentinel)) #else #define AP_FN_ATTR_SENTINEL #endif #if ( defined(__GNUC__) && \ (__GNUC__ >= 4 || ( __GNUC__ == 3 && __GNUC_MINOR__ >= 4))) \ || __has_attribute(warn_unused_result) #define AP_FN_ATTR_WARN_UNUSED_RESULT __attribute__((warn_unused_result)) #else #define AP_FN_ATTR_WARN_UNUSED_RESULT #endif #if ( defined(__GNUC__) && \ (__GNUC__ >= 4 && __GNUC_MINOR__ >= 3)) \ || __has_attribute(alloc_size) #define AP_FN_ATTR_ALLOC_SIZE(x) __attribute__((alloc_size(x))) #define AP_FN_ATTR_ALLOC_SIZE2(x,y) __attribute__((alloc_size(x,y))) #else #define AP_FN_ATTR_ALLOC_SIZE(x) #define AP_FN_ATTR_ALLOC_SIZE2(x,y) #endif #endif /* AP_CONFIG_H */ httpd-2.4.41/include/.indent.pro0000644000000000000500000000127510150161574014745 0ustar rootsrc-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int httpd-2.4.41/include/util_fcgi.h0000644000000000000500000002337612553146475015024 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file util_fcgi.h * @brief FastCGI protocol defitions and support routines * * @defgroup APACHE_CORE_FASTCGI FastCGI Tools * @ingroup APACHE_CORE * @{ */ #ifndef APACHE_UTIL_FCGI_H #define APACHE_UTIL_FCGI_H #ifdef __cplusplus extern "C" { #endif #include "httpd.h" /** * @brief A structure that represents the fixed header fields * at the beginning of a "FastCGI record" (i.e., the data prior * to content data and padding). */ typedef struct { /** See values for version, below */ unsigned char version; /** See values for type, below */ unsigned char type; /** request id, in two parts */ unsigned char requestIdB1; unsigned char requestIdB0; /** content length, in two parts */ unsigned char contentLengthB1; unsigned char contentLengthB0; /** padding length */ unsigned char paddingLength; /** 8-bit reserved field */ unsigned char reserved; } ap_fcgi_header; /* * Number of bytes in the header portion of a FastCGI record * (i.e., ap_fcgi_header structure). Future versions of the * protocol may increase the size. */ #define AP_FCGI_HEADER_LEN 8 /* * Maximum number of bytes in the content portion of a FastCGI record. */ #define AP_FCGI_MAX_CONTENT_LEN 65535 /** * Possible values for the version field of ap_fcgi_header */ #define AP_FCGI_VERSION_1 1 /** * Possible values for the type field of ap_fcgi_header */ #define AP_FCGI_BEGIN_REQUEST 1 #define AP_FCGI_ABORT_REQUEST 2 #define AP_FCGI_END_REQUEST 3 #define AP_FCGI_PARAMS 4 #define AP_FCGI_STDIN 5 #define AP_FCGI_STDOUT 6 #define AP_FCGI_STDERR 7 #define AP_FCGI_DATA 8 #define AP_FCGI_GET_VALUES 9 #define AP_FCGI_GET_VALUES_RESULT 10 #define AP_FCGI_UNKNOWN_TYPE 11 #define AP_FCGI_MAXTYPE (AP_FCGI_UNKNOWN_TYPE) /** * Offsets of the various fields of ap_fcgi_header */ #define AP_FCGI_HDR_VERSION_OFFSET 0 #define AP_FCGI_HDR_TYPE_OFFSET 1 #define AP_FCGI_HDR_REQUEST_ID_B1_OFFSET 2 #define AP_FCGI_HDR_REQUEST_ID_B0_OFFSET 3 #define AP_FCGI_HDR_CONTENT_LEN_B1_OFFSET 4 #define AP_FCGI_HDR_CONTENT_LEN_B0_OFFSET 5 #define AP_FCGI_HDR_PADDING_LEN_OFFSET 6 #define AP_FCGI_HDR_RESERVED_OFFSET 7 /** * @brief This represents the content data of the FastCGI record when * the type is AP_FCGI_BEGIN_REQUEST. */ typedef struct { /** * role, in two parts * See values for role, below */ unsigned char roleB1; unsigned char roleB0; /** * flags * See values for flags bits, below */ unsigned char flags; /** reserved */ unsigned char reserved[5]; } ap_fcgi_begin_request_body; /* * Values for role component of ap_fcgi_begin_request_body */ #define AP_FCGI_RESPONDER 1 #define AP_FCGI_AUTHORIZER 2 #define AP_FCGI_FILTER 3 /* * Values for flags bits of ap_fcgi_begin_request_body */ #define AP_FCGI_KEEP_CONN 1 /* otherwise the application closes */ /** * Offsets of the various fields of ap_fcgi_begin_request_body */ #define AP_FCGI_BRB_ROLEB1_OFFSET 0 #define AP_FCGI_BRB_ROLEB0_OFFSET 1 #define AP_FCGI_BRB_FLAGS_OFFSET 2 #define AP_FCGI_BRB_RESERVED0_OFFSET 3 #define AP_FCGI_BRB_RESERVED1_OFFSET 4 #define AP_FCGI_BRB_RESERVED2_OFFSET 5 #define AP_FCGI_BRB_RESERVED3_OFFSET 6 #define AP_FCGI_BRB_RESERVED4_OFFSET 7 /** * Pack ap_fcgi_header * @param h The header to read from * @param a The array to write to, of size AP_FCGI_HEADER_LEN */ AP_DECLARE(void) ap_fcgi_header_to_array(ap_fcgi_header *h, unsigned char a[]); /** * Unpack header of FastCGI record into ap_fcgi_header * @param h The header to write to * @param a The array to read from, of size AP_FCGI_HEADER_LEN */ AP_DECLARE(void) ap_fcgi_header_from_array(ap_fcgi_header *h, unsigned char a[]); /** * Unpack header of FastCGI record into individual fields * @param version The version, on output * @param type The type, on output * @param request_id The request id, on output * @param content_len The content length, on output * @param padding_len The amount of padding following the content, on output * @param a The array to read from, of size AP_FCGI_HEADER_LEN */ AP_DECLARE(void) ap_fcgi_header_fields_from_array(unsigned char *version, unsigned char *type, apr_uint16_t *request_id, apr_uint16_t *content_len, unsigned char *padding_len, unsigned char a[]); /** * Pack ap_fcgi_begin_request_body * @param h The begin-request body to read from * @param a The array to write to, of size AP_FCGI_HEADER_LEN */ AP_DECLARE(void) ap_fcgi_begin_request_body_to_array(ap_fcgi_begin_request_body *h, unsigned char a[]); /** * Fill in a FastCGI request header with the required field values. * @param header The header to fill in * @param type The type of record * @param request_id The request id * @param content_len The amount of content which follows the header * @param padding_len The amount of padding which follows the content * * The header array must be at least AP_FCGI_HEADER_LEN bytes long. */ AP_DECLARE(void) ap_fcgi_fill_in_header(ap_fcgi_header *header, unsigned char type, apr_uint16_t request_id, apr_uint16_t content_len, unsigned char padding_len); /** * Fill in a FastCGI begin request body with the required field values. * @param brb The begin-request-body to fill in * @param role AP_FCGI_RESPONDER or other roles * @param flags 0 or a combination of flags like AP_FCGI_KEEP_CONN */ AP_DECLARE(void) ap_fcgi_fill_in_request_body(ap_fcgi_begin_request_body *brb, int role, unsigned char flags); /** * Compute the buffer size needed to encode the next portion of * the provided environment table. * @param env The environment table * @param maxlen The maximum buffer size allowable, capped at * AP_FCGI_MAX_CONTENT_LEN. * @param starting_elem On input, the next element of the table array * to process in this FastCGI record. On output, the next element to * process on the *next* FastCGI record. * @return Size of buffer needed to encode the next part, or 0 * if no more can be encoded. When 0 is returned: If starting_elem * has reached the end of the table array, all has been encoded; * otherwise, the next envvar can't be encoded within the specified * limit. * @note If an envvar can't be encoded within the specified limit, * the caller can log a warning and increment starting_elem and try * again or increase the limit or fail, as appropriate for the module. */ AP_DECLARE(apr_size_t) ap_fcgi_encoded_env_len(apr_table_t *env, apr_size_t maxlen, int *starting_elem); /** * Encode the next portion of the provided environment table using * a buffer previously allocated. * @param r The request, for logging * @param env The environment table * @param buffer A buffer to contain the encoded environment table * @param buflen The length of the buffer, previously computed by * ap_fcgi_encoded_env_len(). * @param starting_elem On input, the next element of the table array * to process in this FastCGI record. On output, the next element to * process on the *next* FastCGI record. * @return APR_SUCCESS if a section could be encoded or APR_ENOSPC * otherwise. * @note The output starting_elem from ap_fcgi_encoded_env_len * shouldn't be used as input to ap_fcgi_encode_env when building the * same FastCGI record. */ AP_DECLARE(apr_status_t) ap_fcgi_encode_env(request_rec *r, apr_table_t *env, void *buffer, apr_size_t buflen, int *starting_elem); /** * String forms for the value of the FCGI_ROLE envvar */ #define AP_FCGI_RESPONDER_STR "RESPONDER" #define AP_FCGI_AUTHORIZER_STR "AUTHORIZER" #define AP_FCGI_FILTER_STR "FILTER" /** * FastCGI implementations that implement the AUTHORIZER role * for Apache httpd and allow the application to participate in * any of the Apache httpd AAA phases typically set the variable * FCGI_APACHE_ROLE to one of these strings to indicate the * specific AAA phase. */ #define AP_FCGI_APACHE_ROLE_AUTHENTICATOR_STR "AUTHENTICATOR" #define AP_FCGI_APACHE_ROLE_AUTHORIZER_STR "AUTHORIZER" #define AP_FCGI_APACHE_ROLE_ACCESS_CHECKER_STR "ACCESS_CHECKER" #ifdef __cplusplus } #endif #endif /* !APACHE_UTIL_FCGI_H */ /** @} */ httpd-2.4.41/include/mod_request.h0000644000000000000500000000313411527536437015375 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_request.h * @brief mod_request private header file * * @defgroup MOD_REQUEST mod_request * @ingroup APACHE_MODS * @{ */ #ifndef MOD_REQUEST_H #define MOD_REQUEST_H #include "apr.h" #include "apr_buckets.h" #include "apr_optional.h" #include "httpd.h" #include "util_filter.h" #ifdef __cplusplus extern "C" { #endif extern module AP_MODULE_DECLARE_DATA request_module; #define KEEP_BODY_FILTER "KEEP_BODY" #define KEPT_BODY_FILTER "KEPT_BODY" /** * Core per-directory configuration. */ typedef struct { apr_off_t keep_body; int keep_body_set; } request_dir_conf; APR_DECLARE_OPTIONAL_FN(void, ap_request_insert_filter, (request_rec * r)); APR_DECLARE_OPTIONAL_FN(void, ap_request_remove_filter, (request_rec * r)); #ifdef __cplusplus } #endif #endif /* !MOD_REQUEST_H */ /** @} */ httpd-2.4.41/include/util_ebcdic.h0000644000000000000500000000530012425122625015275 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file util_ebcdic.h * @brief Utilities for EBCDIC conversion * * @defgroup APACHE_CORE_EBCDIC Utilities for EBCDIC conversion * @ingroup APACHE_CORE * @{ */ #ifndef APACHE_UTIL_EBCDIC_H #define APACHE_UTIL_EBCDIC_H #ifdef __cplusplus extern "C" { #endif #include "apr_xlate.h" #include "httpd.h" #include "util_charset.h" #if APR_CHARSET_EBCDIC || defined(DOXYGEN) /** * Setup all of the global translation handlers. * @param pool The pool to allocate out of. * @note On non-EBCDIC system, this function does not exist. * So, its use should be guarded by \#if APR_CHARSET_EBCDIC. */ apr_status_t ap_init_ebcdic(apr_pool_t *pool); /** * Convert protocol data from the implementation character * set to ASCII. * @param buffer Buffer to translate. * @param len Number of bytes to translate. * @note On non-EBCDIC system, this function is replaced by an * empty macro. */ void ap_xlate_proto_to_ascii(char *buffer, apr_size_t len); /** * Convert protocol data to the implementation character * set from ASCII. * @param buffer Buffer to translate. * @param len Number of bytes to translate. * @note On non-EBCDIC system, this function is replaced by an * empty macro. */ void ap_xlate_proto_from_ascii(char *buffer, apr_size_t len); /** * Convert protocol data from the implementation character * set to ASCII, then send it. * @param r The current request. * @param ... The strings to write, followed by a NULL pointer. * @note On non-EBCDIC system, this function is replaced by a call to * #ap_rvputs. */ int ap_rvputs_proto_in_ascii(request_rec *r, ...); #else /* APR_CHARSET_EBCDIC */ #define ap_xlate_proto_to_ascii(x,y) /* NOOP */ #define ap_xlate_proto_from_ascii(x,y) /* NOOP */ #define ap_rvputs_proto_in_ascii ap_rvputs #endif /* APR_CHARSET_EBCDIC */ #ifdef __cplusplus } #endif #endif /* !APACHE_UTIL_EBCDIC_H */ /** @} */ httpd-2.4.41/include/util_time.h0000644000000000000500000000776711637105701015045 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file util_time.h * @brief Apache date-time handling functions * * @defgroup APACHE_CORE_TIME Date-time handling functions * @ingroup APACHE_CORE * @{ */ #ifndef APACHE_UTIL_TIME_H #define APACHE_UTIL_TIME_H #include "apr.h" #include "apr_time.h" #include "httpd.h" #ifdef __cplusplus extern "C" { #endif /* Maximum delta from the current time, in seconds, for a past time * to qualify as "recent" for use in the ap_explode_recent_*() functions: * (Must be a power of two minus one!) */ #define AP_TIME_RECENT_THRESHOLD 15 /* Options for ap_recent_ctime_ex */ /* No extension */ #define AP_CTIME_OPTION_NONE 0x0 /* Add sub second timestamps with micro second resolution */ #define AP_CTIME_OPTION_USEC 0x1 /* Use more compact ISO 8601 format */ #define AP_CTIME_OPTION_COMPACT 0x2 /** * convert a recent time to its human readable components in local timezone * @param tm the exploded time * @param t the time to explode: MUST be within the last * AP_TIME_RECENT_THRESHOLD seconds * @note This is a faster alternative to apr_time_exp_lt that uses * a cache of pre-exploded time structures. It is useful for things * that need to explode the current time multiple times per second, * like loggers. * @return APR_SUCCESS iff successful */ AP_DECLARE(apr_status_t) ap_explode_recent_localtime(apr_time_exp_t *tm, apr_time_t t); /** * convert a recent time to its human readable components in GMT timezone * @param tm the exploded time * @param t the time to explode: MUST be within the last * AP_TIME_RECENT_THRESHOLD seconds * @note This is a faster alternative to apr_time_exp_gmt that uses * a cache of pre-exploded time structures. It is useful for things * that need to explode the current time multiple times per second, * like loggers. * @return APR_SUCCESS iff successful */ AP_DECLARE(apr_status_t) ap_explode_recent_gmt(apr_time_exp_t *tm, apr_time_t t); /** * format a recent timestamp in the ctime() format. * @param date_str String to write to. * @param t the time to convert * @note Consider using ap_recent_ctime_ex instead. * @return APR_SUCCESS iff successful */ AP_DECLARE(apr_status_t) ap_recent_ctime(char *date_str, apr_time_t t); /** * format a recent timestamp in an extended ctime() format. * @param date_str String to write to. * @param t the time to convert * @param option Additional formatting options (AP_CTIME_OPTION_*). * @param len Pointer to an int containing the length of the provided buffer. * On successful return it contains the number of bytes written to the * buffer. * @return APR_SUCCESS iff successful, APR_ENOMEM if buffer was to short. */ AP_DECLARE(apr_status_t) ap_recent_ctime_ex(char *date_str, apr_time_t t, int option, int *len); /** * format a recent timestamp in the RFC822 format * @param date_str String to write to (must have length >= APR_RFC822_DATE_LEN) * @param t the time to convert */ AP_DECLARE(apr_status_t) ap_recent_rfc822_date(char *date_str, apr_time_t t); #ifdef __cplusplus } #endif #endif /* !APACHE_UTIL_TIME_H */ /** @} */ httpd-2.4.41/include/ap_hooks.h0000644000000000000500000001354411637145452014652 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ap_hooks.h * @brief ap hook functions and macros */ #ifndef AP_HOOKS_H #define AP_HOOKS_H /* Although this file doesn't declare any hooks, declare the hook group here */ /** * @defgroup hooks Apache Hooks * @ingroup APACHE_CORE */ #if defined(AP_HOOK_PROBES_ENABLED) && !defined(APR_HOOK_PROBES_ENABLED) #define APR_HOOK_PROBES_ENABLED 1 #endif #ifdef APR_HOOK_PROBES_ENABLED #include "ap_hook_probes.h" #endif #include "apr.h" #include "apr_hooks.h" #include "apr_optional_hooks.h" #ifdef DOXYGEN /* define these just so doxygen documents them */ /** * AP_DECLARE_STATIC is defined when including Apache's Core headers, * to provide static linkage when the dynamic library may be unavailable. * * @see AP_DECLARE_EXPORT * * AP_DECLARE_STATIC and AP_DECLARE_EXPORT are left undefined when * including Apache's Core headers, to import and link the symbols from the * dynamic Apache Core library and assure appropriate indirection and calling * conventions at compile time. */ # define AP_DECLARE_STATIC /** * AP_DECLARE_EXPORT is defined when building the Apache Core dynamic * library, so that all public symbols are exported. * * @see AP_DECLARE_STATIC */ # define AP_DECLARE_EXPORT #endif /* def DOXYGEN */ /** * Declare a hook function * @param ret The return type of the hook * @param name The hook's name (as a literal) * @param args The arguments the hook function takes, in brackets. */ #define AP_DECLARE_HOOK(ret,name,args) \ APR_DECLARE_EXTERNAL_HOOK(ap,AP,ret,name,args) /** @internal */ #define AP_IMPLEMENT_HOOK_BASE(name) \ APR_IMPLEMENT_EXTERNAL_HOOK_BASE(ap,AP,name) /** * Implement an Apache core hook that has no return code, and * therefore runs all of the registered functions. The implementation * is called ap_run_name. * * @param name The name of the hook * @param args_decl The declaration of the arguments for the hook, for example * "(int x,void *y)" * @param args_use The arguments for the hook as used in a call, for example * "(x,y)" * @note If IMPLEMENTing a hook that is not linked into the Apache core, * (e.g. within a dso) see APR_IMPLEMENT_EXTERNAL_HOOK_VOID. */ #define AP_IMPLEMENT_HOOK_VOID(name,args_decl,args_use) \ APR_IMPLEMENT_EXTERNAL_HOOK_VOID(ap,AP,name,args_decl,args_use) /** * Implement an Apache core hook that runs until one of the functions * returns something other than ok or decline. That return value is * then returned from the hook runner. If the hooks run to completion, * then ok is returned. Note that if no hook runs it would probably be * more correct to return decline, but this currently does not do * so. The implementation is called ap_run_name. * * @param ret The return type of the hook (and the hook runner) * @param name The name of the hook * @param args_decl The declaration of the arguments for the hook, for example * "(int x,void *y)" * @param args_use The arguments for the hook as used in a call, for example * "(x,y)" * @param ok The "ok" return value * @param decline The "decline" return value * @return ok, decline or an error. * @note If IMPLEMENTing a hook that is not linked into the Apache core, * (e.g. within a dso) see APR_IMPLEMENT_EXTERNAL_HOOK_RUN_ALL. */ #define AP_IMPLEMENT_HOOK_RUN_ALL(ret,name,args_decl,args_use,ok,decline) \ APR_IMPLEMENT_EXTERNAL_HOOK_RUN_ALL(ap,AP,ret,name,args_decl, \ args_use,ok,decline) /** * Implement a hook that runs until a function returns something other than * decline. If all functions return decline, the hook runner returns decline. * The implementation is called ap_run_name. * * @param ret The return type of the hook (and the hook runner) * @param name The name of the hook * @param args_decl The declaration of the arguments for the hook, for example * "(int x,void *y)" * @param args_use The arguments for the hook as used in a call, for example * "(x,y)" * @param decline The "decline" return value * @return decline or an error. * @note If IMPLEMENTing a hook that is not linked into the Apache core * (e.g. within a dso) see APR_IMPLEMENT_EXTERNAL_HOOK_RUN_FIRST. */ #define AP_IMPLEMENT_HOOK_RUN_FIRST(ret,name,args_decl,args_use,decline) \ APR_IMPLEMENT_EXTERNAL_HOOK_RUN_FIRST(ap,AP,ret,name,args_decl, \ args_use,decline) /* Note that the other optional hook implementations are straightforward but * have not yet been needed */ /** * Implement an optional hook. This is exactly the same as a standard hook * implementation, except the hook is optional. * @see AP_IMPLEMENT_HOOK_RUN_ALL */ #define AP_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(ret,name,args_decl,args_use,ok, \ decline) \ APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(ap,AP,ret,name,args_decl, \ args_use,ok,decline) /** * Hook an optional hook. Unlike static hooks, this uses a macro instead of a * function. */ #define AP_OPTIONAL_HOOK(name,fn,pre,succ,order) \ APR_OPTIONAL_HOOK(ap,name,fn,pre,succ,order) #endif /* AP_HOOKS_H */ httpd-2.4.41/README.cmake0000644000000000000500000003200512674410527013203 0ustar rootsrcExperimental cmake-based build support for Apache httpd on Microsoft Windows Status ------ This build support is currently intended only for Microsoft Windows. This build support is experimental. Specifically, * It does not support all features of Apache httpd. * Some components may not be built correctly and/or in a manner compatible with the previous Windows build support. * Build interfaces, such as the mechanisms which are used to enable optional functionality or specify prerequisites, may change from release to release as feedback is received from users and bugs and limitations are resolved. Important: Refer to the "Known Bugs and Limitations" section for further information. It is beyond the scope of this document to document or explain how to utilize the various cmake features, such as different build backends or provisions for finding support libraries. Please refer to the cmake documentation for additional information that applies to building any project with cmake. Prerequisites ------------- The following tools must be in PATH: * cmake, version 2.8 or later cmake version 3.1.3 or later is required to work with current OpenSSL releases. (OpenSSL is an optional prerequisite of httpd.) * Perl * If the WITH_MODULES feature is used: awk * If using a command-line compiler: compiler and linker and related tools (Refer to the cmake documentation for more information.) The following support libraries are mandatory: * APR, built with cmake + Either APR 2.0-dev (trunk) or APR 1.5.x and APR-Util 1.5.x. + When building APR (but not APR-Util), specify the build option APR_INSTALL_PRIVATE_H so that non-standard files required for building Apache httpd are installed. + Additional APR settings affect httpd but are not mandatory, such as APR_HAVE_IPV6. * PCRE Certain optional features of APR 2.0-dev (trunk) or APR-Util 1.5.x allow some optional features of httpd to be enabled. For example, APU_HAVE_CRYPTO is required for mod_session_crypto. Additional support libraries allow some optional features of httpd to be enabled: * libxml2 (e.g., mod_proxy_html) * lua 5.1 (mod_lua) * nghttp2 (mod_http2) * openssl (mod_ssl and https support for ab) * zlib (mod_deflate) OpenSSL ------- If you have a binary install of OpenSSL in a well-known directory (e.g., %HOME%\OpenSSL-Win64) and you wish to build httpd against a different install of OpenSSL, the cmake build may unexpectedly select OpenSSL libraries in the well-known directory even if the expected include files are used. Check the cmake output from your httpd build to confirm that the expected OpenSSL libraries and include files are used. The cmake FindOpenSSL module searches for OpenSSL libraries in a "VC" subdirectory of the OpenSSL install with filenames that indicate the build type (e.g., "/lib/VC/ssleay32MD.lib"); defining CMAKE_PREFIX_PATH or OPENSSL_ROOT_DIR or even OPENSSL_LIBRARIES does not circumvent finding these libraries. To work around this issue, rename the well-known OpenSSL directory while building httpd. Let us know if you find a better solution. nghttp2 ------- This is required for mod_http2. cmake-based build support for nghttp2 for Windows can be found at https://github.com/trawick/nghttp2-minimal-cmake. That easily fits into a build system that already uses cmake for httpd, apr, and perhaps other packages. A dynamic build of nghttp2 using its normal Windows build system should also be usable by nghttp2. How to build ------------ 1. cd to a clean directory for building (i.e., don't build in your source tree) 2. Make sure cmake and Perl are in PATH. Additionally, some backends require compile tools in PATH. (Hint: "Visual Studio Command Prompt") In the unlikely event that you use -DWITH_MODULES, described below, make sure awk is in PATH. 3. cmake -G "some backend, like 'NMake Makefiles'" -DCMAKE_INSTALL_PREFIX=d:/path/to/httpdinst -DENABLE_foo=A|I|O|a|i -DENABLE_MODULES=A|I|O|a|i d:/path/to/httpdsource Alternately, you can use the cmake-gui and update settings in the GUI. PCRE_INCLUDE_DIR, PCRE_LIBRARIES, APR_INCLUDE_DIR, APR_LIBRARIES, NGHTTP2_INCLUDE_DIR, NGHTTP2_LIBRARIES: cmake doesn't bundle FindXXX for these packages, so the crucial information has to be specified in this manner if they aren't found in their default location. -DPCRE_INCLUDE_DIR=d:/path/to/pcreinst/include -DPCRE_LIBRARIES=d:/path/to/pcreinst/lib/pcre[d].lib These will have to be specified only if PCRE is installed to a different directory than httpd, or if debug *and* release builds of PCRE were installed there and you want to control which is used. (Currently the build will use pcred.lib (debug) if it is found in the default location and not overridden with -DPCRE_LIBRARIES.) -DAPR_INCLUDE_DIR=d:/path/to/aprinst/include -DAPR_LIBRARIES="d:/path/to/aprinst/lib/libapr-1.lib;d:/path/to/aprinst/lib/libaprutil-1.lib" These will have to be specified if APR[-Util] was installed to a different directory than httpd. When building with APR trunk (future APR 2.x, with integrated APR-Util), specify just the path to libapr-2.lib: -DAPR_LIBRARIES=d:/path/to/aprinst/lib/libapr-2.lib APR+APR-Util 1.x vs. APR trunk will be detected automatically if they are installed to the same location as httpd. APR-Util 1.x has an optional LDAP library. If APR-Util has LDAP enabled and httpd's mod_ldap and mod_authnz_ldap are being used, include the path to the LDAP library in the APR_LIBRARIES setting. (If APR and APR-Util are found in the default location, the LDAP library will be included if it is present. -DNGHTTP2_INCLUDE_DIR=d:/path/to/nghttp2inst/include (which has nghttp2/*.h) -DNGHTTP2_LIBRARIES=d:/path/to/nghttp2inst/lib/nghttp2.lib" These will have to be specified if nghttp2 was installed to a different directory than httpd. LIBXML2_ICONV_INCLUDE_DIR, LIBXML2_ICONV_LIBRARIES If using a module that requires libxml2 *and* the build of libxml2 requires iconv, set these variables to allow iconv includes and libraries to be used. For example: -DLIBXML2_ICONV_INCLUDE_DIR=c:\iconv-1.9.2.win32\include -DLIBXML2_ICONV_LIBRARIES=c:\iconv-1.9.2.win32\lib\iconv.lib CMAKE_C_FLAGS_RELEASE, _DEBUG, _RELWITHDEBINFO, _MINSIZEREL CMAKE_BUILD_TYPE For NMake Makefiles the choices are at least DEBUG, RELEASE, RELWITHDEBINFO, and MINSIZEREL Other backends may have other selections. ENABLE_foo: Each module has a default setting which can be overridden with one of the following values: A build and Activate module a build and Activate module IFF prereqs are available; if prereqs are unavailable, don't build it I build module but leave it Inactive (commented-out LoadModule directive) i build module but leave it Inactive IFF prereqs are available; if prereqs are unavailable, don't build it O Omit module completely Examples: -DENABLE_ACCESS_COMPAT=O -DENABLE_PROXY_HTML=i ENABLE_MODULES: This changes the *minimum* enablement of all modules to the specified value (one of A, a, I, i, O, as described under ENABLE_foo above). The ranking of enablement from lowest to highest is O, i, I, a, A. If a specific module has a higher rank enablement setting, either from a built-in default or from -DENABLE_foo, ENABLE_MODULES won't affect that module. However, if a specific module has a lower-rank enablement setting, presumably from a built-in default, the value of ENABLE_MODULES will be used for that module. Explanations for possible values: -DENABLE_MODULES=a build and activate all possible modules, ignoring any with missing prereqs (doesn't affect modules with A for ENABLE_foo) -DENABLE_MODULES=i build but leave inactive all possible modules, ignoring any with missing prereqs (doesn't affect modules with A, a, or I for ENABLE_foo) -DENABLE_MODULES=O no impact, since all modules are either already disabled or have a higher setting -DENABLE_MODULES=A build and activate all possible modules, failing the build if any module is missing a prereq -DENABLE_MODULES=I similar to -DENABLE_MODULES=A (doesn't affect modules with A or a for ENABLE_foo) WITH_MODULES: Comma-separated paths to single file modules to statically linked into the server, like the --with-module=modpath:/path/to/mod_foo.c with the autoconf-based build. Key differences: The modpath (e.g., "generators") isn't provided or used, and the copy of the module source being built is automatically updated when it changes. See also EXTRA_COMPILE_FLAGS, EXTRA_INCLUDES, and EXTRA_LIBS. EXTRA_COMPILE_FLAGS: Space-delimited compile flags to define with the build. EXTRA_INCLUDES: List of additional directories to search for .h files. This may be necessary when including third-party modules in the httpd build via WITH_MODULES. EXTRA_LIBS: List of additional libraries to link with. This may be necessary when including third-party modules in the httpd build via WITH_MODULES. Port and SSLPort: Port numbers for substitution into default .conf files. (The defaults are 80 and 443.) INSTALL_PDB: If .pdb files are generated for debugging, install them. Default: ON The .pdb files are generally needed for debugging low-level code problems. If they aren't installed, they are still available in the build directory for use by alternate packaging implementations or when debugging on the build machine. INSTALL_MANUAL: Install the Apache HTTP Server manual. Default: ON This could be turned off when developing changes in order to speed up installation time. 4. Build using the chosen generator (e.g., "nmake install" for cmake's "NMake Makefiles" generator). Running the server and support programs --------------------------------------- This build system does not copy binaries such as dlls from other projects into the httpd install location. Without taking some precautions, httpd and support programs can fail to start or modules can fail to load because a support library can't be found in PATH or in the directory of the httpd binary. This can be resolved in several different ways: * Install httpd and the various support libraries to a common install prefix so that support libraries and httpd programs are installed in the same bin directory and are found without setting PATH. * Update PATH to include the bin directories of all necessary support libraries. Depending on where PATH is set, it may not affect starting httpd as a service. * Maintain a script which combines required binaries into a common location, such as the httpd installion bin directory, and use that script after building or otherwise installing or updating support libraries. * AVOID THE USE of any unrepeatable process of copying dll files around from different install locations until something starts working. The result is that when you later update a support library to pick up a security fix, httpd will likely continue to use the old, vulnerable library file. Known Bugs and Limitations -------------------------- * no standard script or makefile is provided to tie together the builds of httpd and support libraries in a manner suitable for typical users * no logic to find support libraries or otherwise build these modules: + mod_socache_dc (requires distcache), mod_serf (requires serf) + additionally, mod_firehose doesn't compile on Windows anyway * buildmark.c isn't necessarily rebuilt when httpd.exe is regenerated * ApacheMonitor has a build error and is disabled * CGI examples aren't installed * dbmmanage.pl and wintty aren't built/installed * module enablement defaults are not in sync with the autoconf-based build * no support for static support library builds; unclear if that is a requirement; if so: taking PCRE as an example, we'd need to detect that it is static and then turn on PCRE_STATIC for the libhttpd build Generally: * Many httpd features have not been tested with this build. * Developers need to examine the existing Windows build in great detail and see what is missing from the cmake-based build, whether a feature or some build nuance. * Any feedback you can provide on your experiences with this build will be helpful. httpd-2.4.41/acinclude.m40000644000000000000500000006034313237272472013444 0ustar rootsrc dnl APACHE_HELP_STRING(LHS, RHS) dnl Autoconf 2.50 can not handle substr correctly. It does have dnl AC_HELP_STRING, so let's try to call it if we can. dnl Note: this define must be on one line so that it can be properly returned dnl as the help string. AC_DEFUN([APACHE_HELP_STRING],[ifelse(regexp(AC_ACVERSION, 2\.1), -1, AC_HELP_STRING($1,$2),[ ]$1 substr([ ],len($1))$2)])dnl dnl APACHE_SUBST(VARIABLE) dnl Makes VARIABLE available in generated files dnl (do not use @variable@ in Makefiles, but $(variable)) AC_DEFUN([APACHE_SUBST],[ APACHE_VAR_SUBST="$APACHE_VAR_SUBST $1" AC_SUBST($1) ]) dnl APACHE_FAST_OUTPUT(FILENAME) dnl Perform substitutions on FILENAME (Makefiles only) AC_DEFUN([APACHE_FAST_OUTPUT],[ APACHE_FAST_OUTPUT_FILES="$APACHE_FAST_OUTPUT_FILES $1" ]) dnl APACHE_GEN_CONFIG_VARS dnl Creates config_vars.mk AC_DEFUN([APACHE_GEN_CONFIG_VARS],[ APACHE_SUBST(HTTPD_VERSION) APACHE_SUBST(HTTPD_MMN) APACHE_SUBST(abs_srcdir) APACHE_SUBST(bindir) APACHE_SUBST(sbindir) APACHE_SUBST(cgidir) APACHE_SUBST(logfiledir) APACHE_SUBST(exec_prefix) APACHE_SUBST(datadir) APACHE_SUBST(localstatedir) APACHE_SUBST(mandir) APACHE_SUBST(libdir) APACHE_SUBST(libexecdir) APACHE_SUBST(htdocsdir) APACHE_SUBST(manualdir) APACHE_SUBST(includedir) APACHE_SUBST(errordir) APACHE_SUBST(iconsdir) APACHE_SUBST(sysconfdir) APACHE_SUBST(installbuilddir) APACHE_SUBST(runtimedir) APACHE_SUBST(proxycachedir) APACHE_SUBST(other_targets) APACHE_SUBST(progname) APACHE_SUBST(prefix) APACHE_SUBST(AWK) APACHE_SUBST(CC) APACHE_SUBST(CPP) APACHE_SUBST(CXX) APACHE_SUBST(CPPFLAGS) APACHE_SUBST(CFLAGS) APACHE_SUBST(CXXFLAGS) APACHE_SUBST(LTFLAGS) APACHE_SUBST(LDFLAGS) APACHE_SUBST(LT_LDFLAGS) APACHE_SUBST(SH_LDFLAGS) APACHE_SUBST(HTTPD_LDFLAGS) APACHE_SUBST(UTIL_LDFLAGS) APACHE_SUBST(LIBS) APACHE_SUBST(DEFS) APACHE_SUBST(INCLUDES) APACHE_SUBST(NOTEST_CPPFLAGS) APACHE_SUBST(NOTEST_CFLAGS) APACHE_SUBST(NOTEST_CXXFLAGS) APACHE_SUBST(NOTEST_LDFLAGS) APACHE_SUBST(NOTEST_LIBS) APACHE_SUBST(EXTRA_CPPFLAGS) APACHE_SUBST(EXTRA_CFLAGS) APACHE_SUBST(EXTRA_CXXFLAGS) APACHE_SUBST(EXTRA_LDFLAGS) APACHE_SUBST(EXTRA_LIBS) APACHE_SUBST(EXTRA_INCLUDES) APACHE_SUBST(INTERNAL_CPPFLAGS) APACHE_SUBST(LIBTOOL) APACHE_SUBST(SHELL) APACHE_SUBST(RSYNC) APACHE_SUBST(MODULE_DIRS) APACHE_SUBST(MODULE_CLEANDIRS) APACHE_SUBST(PORT) APACHE_SUBST(SSLPORT) APACHE_SUBST(CORE_IMPLIB_FILE) APACHE_SUBST(CORE_IMPLIB) APACHE_SUBST(SH_LIBS) APACHE_SUBST(SH_LIBTOOL) APACHE_SUBST(MK_IMPLIB) APACHE_SUBST(MKDEP) APACHE_SUBST(INSTALL_PROG_FLAGS) APACHE_SUBST(MPM_MODULES) APACHE_SUBST(ENABLED_MPM_MODULE) APACHE_SUBST(DSO_MODULES) APACHE_SUBST(ENABLED_DSO_MODULES) APACHE_SUBST(LOAD_ALL_MODULES) APACHE_SUBST(APR_BINDIR) APACHE_SUBST(APR_INCLUDEDIR) APACHE_SUBST(APR_VERSION) APACHE_SUBST(APR_CONFIG) APACHE_SUBST(APU_BINDIR) APACHE_SUBST(APU_INCLUDEDIR) APACHE_SUBST(APU_VERSION) APACHE_SUBST(APU_CONFIG) abs_srcdir="`(cd $srcdir && pwd)`" AC_MSG_NOTICE([creating config_vars.mk]) test -d build || $mkdir_p build > build/config_vars.mk for i in $APACHE_VAR_SUBST; do eval echo "$i = \$$i" >> build/config_vars.mk done ]) dnl APACHE_GEN_MAKEFILES dnl Creates Makefiles AC_DEFUN([APACHE_GEN_MAKEFILES],[ $SHELL $srcdir/build/fastgen.sh $srcdir $ac_cv_mkdir_p $BSD_MAKEFILE $APACHE_FAST_OUTPUT_FILES ]) dnl dnl APACHE_TYPE_RLIM_T dnl dnl If rlim_t is not defined, define it to int dnl AC_DEFUN([APACHE_TYPE_RLIM_T], [ AC_CACHE_CHECK([for rlim_t], ac_cv_type_rlim_t, [ AC_TRY_COMPILE([ #include #include #include ], [rlim_t spoon;], [ ac_cv_type_rlim_t=yes ],[ac_cv_type_rlim_t=no ]) ]) if test "$ac_cv_type_rlim_t" = "no" ; then AC_DEFINE(rlim_t, int, [Define to 'int' if doesn't define it for us]) fi ]) dnl the list of build variables which are available for customization on a dnl per module subdir basis (to be inserted into modules.mk with a "MOD_" dnl prefix, i.e. MOD_CFLAGS etc.). Used in APACHE_MODPATH_{INIT,FINISH}. define(mod_buildvars, [CFLAGS CXXFLAGS CPPFLAGS LDFLAGS LIBS INCLUDES]) dnl dnl APACHE_MODPATH_INIT(modpath) AC_DEFUN([APACHE_MODPATH_INIT],[ current_dir=$1 modpath_current=modules/$1 modpath_static= modpath_shared= for var in mod_buildvars; do eval MOD_$var= done test -d $1 || $srcdir/build/mkdir.sh $modpath_current > $modpath_current/modules.mk ])dnl dnl AC_DEFUN([APACHE_MODPATH_FINISH],[ echo "DISTCLEAN_TARGETS = modules.mk" >> $modpath_current/modules.mk echo "static = $modpath_static" >> $modpath_current/modules.mk echo "shared = $modpath_shared" >> $modpath_current/modules.mk for var in mod_buildvars; do if eval val=\"\$MOD_$var\"; test -n "$val"; then echo "MOD_$var = $val" >> $modpath_current/modules.mk fi done if test ! -z "$modpath_static" -o ! -z "$modpath_shared"; then MODULE_DIRS="$MODULE_DIRS $current_dir" else MODULE_CLEANDIRS="$MODULE_CLEANDIRS $current_dir" fi APACHE_FAST_OUTPUT($modpath_current/Makefile) ])dnl dnl dnl APACHE_MODPATH_ADD(name[, shared[, objects [, ldflags[, libs]]]]) AC_DEFUN([APACHE_MODPATH_ADD],[ if test -z "$3"; then objects="mod_$1.lo" else objects="$3" fi if test -z "$module_standalone"; then if test -z "$2"; then # The filename of a convenience library must have a "lib" prefix: libname="libmod_$1.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" modpath_static="$modpath_static $libname" cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk<$mpmpath/modules.mk<$mpmpath/modules.mk<" if it was specified. dnl AC_DEFUN([APACHE_CHECK_OPENSSL],[ AC_CACHE_CHECK([for OpenSSL], [ac_cv_openssl], [ dnl initialise the variables we use ac_cv_openssl=no ap_openssl_found="" ap_openssl_base="" ap_openssl_libs="" ap_openssl_mod_cflags="" ap_openssl_mod_ldflags="" dnl Determine the OpenSSL base directory, if any AC_MSG_CHECKING([for user-provided OpenSSL base directory]) AC_ARG_WITH(ssl, APACHE_HELP_STRING(--with-ssl=PATH,OpenSSL installation directory), [ dnl If --with-ssl specifies a directory, we use that directory if test "x$withval" != "xyes" -a "x$withval" != "x"; then dnl This ensures $withval is actually a directory and that it is absolute ap_openssl_base="`cd $withval ; pwd`" fi ]) if test "x$ap_openssl_base" = "x"; then AC_MSG_RESULT(none) else AC_MSG_RESULT($ap_openssl_base) fi dnl Run header and version checks saved_CPPFLAGS="$CPPFLAGS" saved_LIBS="$LIBS" saved_LDFLAGS="$LDFLAGS" dnl Before doing anything else, load in pkg-config variables if test -n "$PKGCONFIG"; then saved_PKG_CONFIG_PATH="$PKG_CONFIG_PATH" if test "x$ap_openssl_base" != "x" -a \ -f "${ap_openssl_base}/lib/pkgconfig/openssl.pc"; then dnl Ensure that the given path is used by pkg-config too, otherwise dnl the system openssl.pc might be picked up instead. PKG_CONFIG_PATH="${ap_openssl_base}/lib/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH fi AC_ARG_ENABLE(ssl-staticlib-deps,APACHE_HELP_STRING(--enable-ssl-staticlib-deps,[link mod_ssl with dependencies of OpenSSL's static libraries (as indicated by "pkg-config --static"). Must be specified in addition to --enable-ssl.]), [ if test "$enableval" = "yes"; then PKGCONFIG_LIBOPTS="--static" fi ]) ap_openssl_libs="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-l --silence-errors openssl`" if test $? -eq 0; then ap_openssl_found="yes" pkglookup="`$PKGCONFIG --cflags-only-I openssl`" APR_ADDTO(CPPFLAGS, [$pkglookup]) APR_ADDTO(MOD_CFLAGS, [$pkglookup]) APR_ADDTO(ab_CFLAGS, [$pkglookup]) pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-L openssl`" APR_ADDTO(LDFLAGS, [$pkglookup]) APR_ADDTO(MOD_LDFLAGS, [$pkglookup]) pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-other openssl`" APR_ADDTO(LDFLAGS, [$pkglookup]) APR_ADDTO(MOD_LDFLAGS, [$pkglookup]) fi PKG_CONFIG_PATH="$saved_PKG_CONFIG_PATH" fi dnl fall back to the user-supplied directory if not found via pkg-config if test "x$ap_openssl_base" != "x" -a "x$ap_openssl_found" = "x"; then APR_ADDTO(CPPFLAGS, [-I$ap_openssl_base/include]) APR_ADDTO(MOD_CFLAGS, [-I$ap_openssl_base/include]) APR_ADDTO(ab_CFLAGS, [-I$ap_openssl_base/include]) APR_ADDTO(LDFLAGS, [-L$ap_openssl_base/lib]) APR_ADDTO(MOD_LDFLAGS, [-L$ap_openssl_base/lib]) if test "x$ap_platform_runtime_link_flag" != "x"; then APR_ADDTO(LDFLAGS, [$ap_platform_runtime_link_flag$ap_openssl_base/lib]) APR_ADDTO(MOD_LDFLAGS, [$ap_platform_runtime_link_flag$ap_openssl_base/lib]) fi fi AC_MSG_CHECKING([for OpenSSL version >= 0.9.8a]) AC_TRY_COMPILE([#include ],[ #if !defined(OPENSSL_VERSION_NUMBER) #error "Missing OpenSSL version" #endif #if OPENSSL_VERSION_NUMBER < 0x0090801f #error "Unsupported OpenSSL version " OPENSSL_VERSION_TEXT #endif], [AC_MSG_RESULT(OK) ac_cv_openssl=yes], [AC_MSG_RESULT(FAILED)]) if test "x$ac_cv_openssl" = "xyes"; then ap_openssl_libs="${ap_openssl_libs:--lssl -lcrypto} `$apr_config --libs`" APR_ADDTO(MOD_LDFLAGS, [$ap_openssl_libs]) APR_ADDTO(LIBS, [$ap_openssl_libs]) APR_SETVAR(ab_LIBS, [$MOD_LDFLAGS]) APACHE_SUBST(ab_CFLAGS) APACHE_SUBST(ab_LIBS) dnl Run library and function checks liberrors="" AC_CHECK_HEADERS([openssl/engine.h]) AC_CHECK_FUNCS([SSL_CTX_new], [], [liberrors="yes"]) AC_CHECK_FUNCS([ENGINE_init ENGINE_load_builtin_engines RAND_egd]) if test "x$liberrors" != "x"; then AC_MSG_WARN([OpenSSL libraries are unusable]) fi else AC_MSG_WARN([OpenSSL version is too old]) fi dnl restore CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" dnl cache MOD_LDFLAGS, MOD_CFLAGS ap_openssl_mod_cflags=$MOD_CFLAGS ap_openssl_mod_ldflags=$MOD_LDFLAGS ]) if test "x$ac_cv_openssl" = "xyes"; then AC_DEFINE(HAVE_OPENSSL, 1, [Define if OpenSSL is available]) APR_ADDTO(MOD_LDFLAGS, [$ap_openssl_mod_ldflags]) APR_ADDTO(MOD_CFLAGS, [$ap_openssl_mod_cflags]) fi ]) dnl dnl APACHE_EXPORT_ARGUMENTS dnl Export (via APACHE_SUBST) the various path-related variables that dnl apache will use while generating scripts like autoconf and apxs and dnl the default config file. AC_DEFUN([APACHE_SUBST_EXPANDED_ARG],[ APR_EXPAND_VAR(exp_$1, [$]$1) APACHE_SUBST(exp_$1) APR_PATH_RELATIVE(rel_$1, [$]exp_$1, ${prefix}) APACHE_SUBST(rel_$1) ]) AC_DEFUN([APACHE_EXPORT_ARGUMENTS],[ APACHE_SUBST_EXPANDED_ARG(exec_prefix) APACHE_SUBST_EXPANDED_ARG(bindir) APACHE_SUBST_EXPANDED_ARG(sbindir) APACHE_SUBST_EXPANDED_ARG(libdir) APACHE_SUBST_EXPANDED_ARG(libexecdir) APACHE_SUBST_EXPANDED_ARG(mandir) APACHE_SUBST_EXPANDED_ARG(sysconfdir) APACHE_SUBST_EXPANDED_ARG(datadir) APACHE_SUBST_EXPANDED_ARG(installbuilddir) APACHE_SUBST_EXPANDED_ARG(errordir) APACHE_SUBST_EXPANDED_ARG(iconsdir) APACHE_SUBST_EXPANDED_ARG(htdocsdir) APACHE_SUBST_EXPANDED_ARG(manualdir) APACHE_SUBST_EXPANDED_ARG(cgidir) APACHE_SUBST_EXPANDED_ARG(includedir) APACHE_SUBST_EXPANDED_ARG(localstatedir) APACHE_SUBST_EXPANDED_ARG(runtimedir) APACHE_SUBST_EXPANDED_ARG(logfiledir) APACHE_SUBST_EXPANDED_ARG(proxycachedir) ]) dnl dnl APACHE_CHECK_APxVER({apr|apu}, major, minor, dnl [actions-if-ok], [actions-if-not-ok]) dnl dnl Checks for APR or APR-util of given major/minor version or later; dnl if so, runs actions-if-ok; otherwise runs actions-if-not-ok if given. dnl If the version is not satisfactory and actions-if-not-ok is not dnl given, then an error is printed and the configure script is aborted. dnl dnl The first argument must be [apr] or [apu]. dnl AC_DEFUN([APACHE_CHECK_APxVER], [ define(ap_ckver_major, translit($1, [apru], [APRU])[_MAJOR_VERSION]) define(ap_ckver_minor, translit($1, [apru], [APRU])[_MINOR_VERSION]) define(ap_ckver_cvar, [ap_cv_$1ver$2$3]) define(ap_ckver_name, ifelse([$1],[apr],[APR],[APR-util])) ap_ckver_CPPFLAGS="$CPPFLAGS" CPPFLAGS="$CPPFLAGS `$[$1]_config --includes`" AC_CACHE_CHECK([for ap_ckver_name version $2.$3.0 or later], ap_ckver_cvar, [ AC_EGREP_CPP([good], [ #include <$1_version.h> #if ]ap_ckver_major[ > $2 || (]ap_ckver_major[ == $2 && ]ap_ckver_minor[ >= $3) good #endif ], [ap_ckver_cvar=yes], [ap_ckver_cvar=no])]) if test "$ap_ckver_cvar" = "yes"; then ifelse([$4],[],[:],[$4]) else ifelse([$5],[],[AC_MSG_ERROR([ap_ckver_name version $2.$3.0 or later is required])], [$5]) fi CPPFLAGS="$ap_ckver_CPPFLAGS" undefine([ap_ckver_major]) undefine([ap_ckver_minor]) undefine([ap_ckver_cvar]) undefine([ap_ckver_name]) ]) dnl dnl APACHE_CHECK_VOID_PTR_LEN dnl dnl Checks if the size of a void pointer is at least as big as a "long" dnl integer type. dnl AC_DEFUN([APACHE_CHECK_VOID_PTR_LEN], [ AC_CACHE_CHECK([for void pointer length], [ap_cv_void_ptr_lt_long], [AC_TRY_RUN([ int main(void) { return sizeof(void *) < sizeof(long); }], [ap_cv_void_ptr_lt_long=no], [ap_cv_void_ptr_lt_long=yes], [ap_cv_void_ptr_lt_long=yes])]) if test "$ap_cv_void_ptr_lt_long" = "yes"; then AC_MSG_ERROR([Size of "void *" is less than size of "long"]) fi ]) dnl dnl APACHE_CHECK_APR_HAS_LDAP dnl dnl Check if APR_HAS_LDAP is 1 dnl Unfortunately, we can't use APR_CHECK_APR_DEFINE (because it only includes apr.h) dnl or APR_CHECK_DEFINE (because it only checks for defined'ness and not for 0/1). dnl AC_DEFUN([APACHE_CHECK_APR_HAS_LDAP], [ AC_CACHE_CHECK([for ldap support in apr/apr-util],ac_cv_APR_HAS_LDAP,[ apache_old_cppflags="$CPPFLAGS" CPPFLAGS="$CPPFLAGS $INCLUDES" AC_EGREP_CPP(YES_IS_DEFINED, [ #include #if APR_HAS_LDAP YES_IS_DEFINED #endif ], ac_cv_APR_HAS_LDAP=yes, ac_cv_APR_HAS_LDAP=no) CPPFLAGS="$apache_old_cppflags" ]) ]) dnl dnl APACHE_ADD_GCC_CFLAG dnl dnl Check if compiler is gcc and supports flag. If yes, add to NOTEST_CFLAGS. dnl NOTEST_CFLAGS is merged lately, thus it won't accumulate in CFLAGS here. dnl Also, AC_LANG_PROGRAM() itself is known to trigger [-Wstrict-prototypes] dnl with some autoconf versions, so we force -Wno-strict-prototypes for the dnl check to avoid spurious failures when adding flags like -Werror. dnl AC_DEFUN([APACHE_ADD_GCC_CFLAG], [ define([ap_gcc_ckvar], [ac_cv_gcc_]translit($1, [-:.=], [____])) if test "$GCC" = "yes"; then AC_CACHE_CHECK([whether gcc accepts $1], ap_gcc_ckvar, [ save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS $1 -Wno-strict-prototypes" AC_COMPILE_IFELSE([AC_LANG_PROGRAM()], [ap_gcc_ckvar=yes], [ap_gcc_ckvar=no]) CFLAGS="$save_CFLAGS" ]) if test "$]ap_gcc_ckvar[" = "yes" ; then APR_ADDTO(NOTEST_CFLAGS,[$1]) fi fi undefine([ap_gcc_ckvar]) ]) httpd-2.4.41/README.platforms0000644000000000000500000001050212377404546014134 0ustar rootsrc Apache HTTP Server Platform specific notes: ------------------------ ================ Darwin (OS X): Apache 2 relies heavily on the use of autoconf and libtool to provide a build environment. Darwin provides these tools as part of the Developers Tools package. Under Darwin, however, GNUlibtool is installed as 'glibtool' to avoid conflicting with the Darwin 'libtool' program. Apache 2 knows about this so that's not a problem. As of OS X 10.2 (Jaguar), the bundled versions work perfectly. Partly this is due to the fact that /bin/sh is now 'bash' and not 'zsh' as well as the fact that the bundled versions are up-to-date: autoconf 2.52 and (g)libtool 1.4.2. You will note that GNU libtool should actually be installed as glibtool, to avoid conflict with a Darwin program of the same name. There have been some reports that autoconf 2.52 prevents Apache's build system from correctly handling passing multi-value envvars to the build system (eg: CFLAGS="-g -O3" ./configure), causing errors. Use of bash does not seem to help in this situation. If this affects you, downgrading to autoconf 2.13 (which is installed on Darwin) will help. With Leopard (at least up to 10.5.2), when running configure you will likely see errors such as: rm: conftest.dSYM: is a directory This is a known issue and will be fixed in a later version of the autoconf suite. These errors can be safely ignored. For later versions of OS X, (10.8 and 10.9), be sure to have Xcode AND Xcode Command Line Tools installed. httpd will built both with gcc and clang. ========== FreeBSD: autoconf 2.52 creates scripts that are incompatible with the Posix shell implementation (/bin/sh) on FreeBSD. Be sure to use v2.13 of autoconf. Threaded MPMs are not supported on FreeBSD 4.x. Current releases of FreeBSD 5.x (5.2 or later) support threaded MPMs correctly. You must pass '--enable-threads=yes' to APR's configure in order to enable threads. Additionally, you must use libthr or libkse via libmap.conf as the default libc_r is still broken as of this writing. Please consult the man page for libmap.conf for more details about configuring libthr or libkse. ================ HP-UX: The dlopen() system call in HP-UX has problems when loading/unloading C++ modules. The problem can be resolved by using shl_load() instead of dlopen(). This is fixed in the Apache 2.0.44 release. To enable loading of C++ modules, the httpd binary has to be linked with the following libraries : HP-UX (11.0 / 11i): When using shl_load : "cpprt0_stub.s -lcl" When using dlopen : "cpprt0_stub.s -lcl -lCsup" HP-UX (11i version 1.5 and greater): When using dlopen/shl_load : "cpprt0_stub.s -lcl -lunwind" The cpprt0_stub.s can be downloaded from the web site : http://h21007.www2.hp.com/hpux-devtools/CXX/hpux-devtools.0107/0083.html Compile cpprt0_stub.s with the PIC option cc -c +z cpprt0_stub.s - OR - gcc -c -fPIC cpprt0_stub.s ================ AIX, using the vendor C compiler with optimization: There is an issue with compiling server/core.c with optimization enabled which has been seen with C for AIX 5.0.2.3 and above. (5.0.2.0, 5.0.2.1, and 5.0.2.2 have an additional problem with Apache 2.0.x, so either upgrade the compiler or don't use optimization in order to avoid it.) cc_r works fine with -O2 but xlc_r does not. In order to use xlc_r with -O2, apply the patch at http://www.apache.org/dist/httpd/patches/apply_to_2.0.49/aix_xlc_optimization.patch (That patch works with many recent levels of Apache 2+.) ================ Solaris: On Solaris, better performance may be achieved by using the Sun Studio compiler instead of gcc. As of version 11, it is now free (registration required). Download the compiler from: http://developers.sun.com/prodtech/cc/downloads/index.jsp If you use Sun Studio, the following compiler flags (CFLAGS) are recommended: -XO4 -xchip=generic ================ Ubuntu: You will need to ensure that you have either libtool 1.5.6 or 2.2.6b, or later. Expat 2.0.1 and PCRE 8.02 are also recommended to be installed. If building PCRE from source, you'll also need g++. httpd-2.4.41/server/0002755000000000000500000000000013523273341012547 5ustar rootsrchttpd-2.4.41/server/util_pcre.c0000644000000000000500000002631313521000552014672 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* This code is based on pcreposix.c from the PCRE Library distribution, * as originally written by Philip Hazel , and forked by * the Apache HTTP Server project to provide POSIX-style regex function * wrappers around underlying PCRE library functions for httpd. * * The original source file pcreposix.c is copyright and licensed as follows; Copyright (c) 1997-2004 University of Cambridge ----------------------------------------------------------------------------- Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of the University of Cambridge nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. ----------------------------------------------------------------------------- */ #include "httpd.h" #include "apr_strings.h" #include "apr_tables.h" #include "pcre.h" #define APR_WANT_STRFUNC #include "apr_want.h" #ifndef POSIX_MALLOC_THRESHOLD #define POSIX_MALLOC_THRESHOLD (10) #endif /* Table of error strings corresponding to POSIX error codes; must be * kept in synch with include/ap_regex.h's AP_REG_E* definitions. */ static const char *const pstring[] = { "", /* Dummy for value 0 */ "internal error", /* AP_REG_ASSERT */ "failed to get memory", /* AP_REG_ESPACE */ "bad argument", /* AP_REG_INVARG */ "match failed" /* AP_REG_NOMATCH */ }; AP_DECLARE(apr_size_t) ap_regerror(int errcode, const ap_regex_t *preg, char *errbuf, apr_size_t errbuf_size) { const char *message, *addmessage; apr_size_t length, addlength; message = (errcode >= (int)(sizeof(pstring) / sizeof(char *))) ? "unknown error code" : pstring[errcode]; length = strlen(message) + 1; addmessage = " at offset "; addlength = (preg != NULL && (int)preg->re_erroffset != -1) ? strlen(addmessage) + 6 : 0; if (errbuf_size > 0) { if (addlength > 0 && errbuf_size >= length + addlength) apr_snprintf(errbuf, errbuf_size, "%s%s%-6d", message, addmessage, (int)preg->re_erroffset); else apr_cpystrn(errbuf, message, errbuf_size); } return length + addlength; } /************************************************* * Free store held by a regex * *************************************************/ AP_DECLARE(void) ap_regfree(ap_regex_t *preg) { (pcre_free)(preg->re_pcre); } /************************************************* * Compile a regular expression * *************************************************/ static int default_cflags = AP_REG_DOTALL | AP_REG_DOLLAR_ENDONLY; AP_DECLARE(int) ap_regcomp_get_default_cflags(void) { return default_cflags; } AP_DECLARE(void) ap_regcomp_set_default_cflags(int cflags) { default_cflags = cflags; } AP_DECLARE(int) ap_regcomp_default_cflag_by_name(const char *name) { int cflag = 0; if (ap_cstr_casecmp(name, "ICASE") == 0) { cflag = AP_REG_ICASE; } else if (ap_cstr_casecmp(name, "DOTALL") == 0) { cflag = AP_REG_DOTALL; } else if (ap_cstr_casecmp(name, "DOLLAR_ENDONLY") == 0) { cflag = AP_REG_DOLLAR_ENDONLY; } else if (ap_cstr_casecmp(name, "EXTENDED") == 0) { cflag = AP_REG_EXTENDED; } return cflag; } /* * Arguments: * preg points to a structure for recording the compiled expression * pattern the pattern to compile * cflags compilation flags * * Returns: 0 on success * various non-zero codes on failure */ AP_DECLARE(int) ap_regcomp(ap_regex_t * preg, const char *pattern, int cflags) { const char *errorptr; int erroffset; int errcode = 0; int options = PCRE_DUPNAMES; cflags |= default_cflags; if ((cflags & AP_REG_ICASE) != 0) options |= PCRE_CASELESS; if ((cflags & AP_REG_NEWLINE) != 0) options |= PCRE_MULTILINE; if ((cflags & AP_REG_DOTALL) != 0) options |= PCRE_DOTALL; if ((cflags & AP_REG_DOLLAR_ENDONLY) != 0) options |= PCRE_DOLLAR_ENDONLY; preg->re_pcre = pcre_compile2(pattern, options, &errcode, &errorptr, &erroffset, NULL); preg->re_erroffset = erroffset; if (preg->re_pcre == NULL) { /* * There doesn't seem to be constants defined for compile time error * codes. 21 is "failed to get memory" according to pcreapi(3). */ if (errcode == 21) return AP_REG_ESPACE; return AP_REG_INVARG; } pcre_fullinfo((const pcre *)preg->re_pcre, NULL, PCRE_INFO_CAPTURECOUNT, &(preg->re_nsub)); return 0; } /************************************************* * Match a regular expression * *************************************************/ /* Unfortunately, PCRE requires 3 ints of working space for each captured * substring, so we have to get and release working store instead of just using * the POSIX structures as was done in earlier releases when PCRE needed only 2 * ints. However, if the number of possible capturing brackets is small, use a * block of store on the stack, to reduce the use of malloc/free. The threshold * is in a macro that can be changed at configure time. */ AP_DECLARE(int) ap_regexec(const ap_regex_t *preg, const char *string, apr_size_t nmatch, ap_regmatch_t *pmatch, int eflags) { return ap_regexec_len(preg, string, strlen(string), nmatch, pmatch, eflags); } AP_DECLARE(int) ap_regexec_len(const ap_regex_t *preg, const char *buff, apr_size_t len, apr_size_t nmatch, ap_regmatch_t *pmatch, int eflags) { int rc; int options = 0; int *ovector = NULL; int small_ovector[POSIX_MALLOC_THRESHOLD * 3]; int allocated_ovector = 0; if ((eflags & AP_REG_NOTBOL) != 0) options |= PCRE_NOTBOL; if ((eflags & AP_REG_NOTEOL) != 0) options |= PCRE_NOTEOL; ((ap_regex_t *)preg)->re_erroffset = (apr_size_t)(-1); /* Only has meaning after compile */ if (nmatch > 0) { if (nmatch <= POSIX_MALLOC_THRESHOLD) { ovector = &(small_ovector[0]); } else { ovector = (int *)malloc(sizeof(int) * nmatch * 3); if (ovector == NULL) return AP_REG_ESPACE; allocated_ovector = 1; } } rc = pcre_exec((const pcre *)preg->re_pcre, NULL, buff, (int)len, 0, options, ovector, nmatch * 3); if (rc == 0) rc = nmatch; /* All captured slots were filled in */ if (rc >= 0) { apr_size_t i; for (i = 0; i < (apr_size_t)rc; i++) { pmatch[i].rm_so = ovector[i * 2]; pmatch[i].rm_eo = ovector[i * 2 + 1]; } if (allocated_ovector) free(ovector); for (; i < nmatch; i++) pmatch[i].rm_so = pmatch[i].rm_eo = -1; return 0; } else { if (allocated_ovector) free(ovector); switch (rc) { case PCRE_ERROR_NOMATCH: return AP_REG_NOMATCH; case PCRE_ERROR_NULL: return AP_REG_INVARG; case PCRE_ERROR_BADOPTION: return AP_REG_INVARG; case PCRE_ERROR_BADMAGIC: return AP_REG_INVARG; case PCRE_ERROR_UNKNOWN_NODE: return AP_REG_ASSERT; case PCRE_ERROR_NOMEMORY: return AP_REG_ESPACE; #ifdef PCRE_ERROR_MATCHLIMIT case PCRE_ERROR_MATCHLIMIT: return AP_REG_ESPACE; #endif #ifdef PCRE_ERROR_BADUTF8 case PCRE_ERROR_BADUTF8: return AP_REG_INVARG; #endif #ifdef PCRE_ERROR_BADUTF8_OFFSET case PCRE_ERROR_BADUTF8_OFFSET: return AP_REG_INVARG; #endif default: return AP_REG_ASSERT; } } } AP_DECLARE(int) ap_regname(const ap_regex_t *preg, apr_array_header_t *names, const char *prefix, int upper) { int namecount; int nameentrysize; int i; char *nametable; pcre_fullinfo((const pcre *)preg->re_pcre, NULL, PCRE_INFO_NAMECOUNT, &namecount); pcre_fullinfo((const pcre *)preg->re_pcre, NULL, PCRE_INFO_NAMEENTRYSIZE, &nameentrysize); pcre_fullinfo((const pcre *)preg->re_pcre, NULL, PCRE_INFO_NAMETABLE, &nametable); for (i = 0; i < namecount; i++) { const char *offset = nametable + i * nameentrysize; int capture = ((offset[0] << 8) + offset[1]); while (names->nelts <= capture) { apr_array_push(names); } if (upper || prefix) { char *name = ((char **) names->elts)[capture] = prefix ? apr_pstrcat(names->pool, prefix, offset + 2, NULL) : apr_pstrdup(names->pool, offset + 2); if (upper) { ap_str_toupper(name); } } else { ((const char **)names->elts)[capture] = offset + 2; } } return namecount; } /* End of pcreposix.c */ httpd-2.4.41/server/util_expr_parse.y0000644000000000000500000001702513523273356016157 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* based on ap_expr_parse.y from mod_ssl */ /* _________________________________________________________________ ** ** Expression Parser ** _________________________________________________________________ */ %pure-parser %error-verbose %defines %lex-param { void *yyscanner } %parse-param { ap_expr_parse_ctx_t *ctx } %{ #include "util_expr_private.h" %} %union { char *cpVal; ap_expr_t *exVal; int num; } %token T_TRUE %token T_FALSE %token T_EXPR_BOOL %token T_EXPR_STRING %token T_ERROR %token T_DIGIT %token T_ID %token T_STRING %token T_REGEX %token T_REGEX_I %token T_REGEX_BACKREF %token T_OP_UNARY %token T_OP_BINARY %token T_STR_BEGIN %token T_STR_END %token T_VAR_BEGIN %token T_VAR_END %token T_OP_EQ %token T_OP_NE %token T_OP_LT %token T_OP_LE %token T_OP_GT %token T_OP_GE %token T_OP_REG %token T_OP_NRE %token T_OP_IN %token T_OP_STR_EQ %token T_OP_STR_NE %token T_OP_STR_LT %token T_OP_STR_LE %token T_OP_STR_GT %token T_OP_STR_GE %token T_OP_CONCAT %token T_OP_OR %token T_OP_AND %token T_OP_NOT %right T_OP_OR %right T_OP_AND %right T_OP_NOT %right T_OP_CONCAT %type expr %type comparison %type strfunccall %type lstfunccall %type regex %type words %type wordlist %type word %type string %type strpart %type var %type backref %{ #include "util_expr_private.h" #define yyscanner ctx->scanner int ap_expr_yylex(YYSTYPE *lvalp, void *scanner); %} %% root : T_EXPR_BOOL expr { ctx->expr = $2; } | T_EXPR_STRING string { ctx->expr = $2; } | T_ERROR { YYABORT; } ; expr : T_TRUE { $$ = ap_expr_make(op_True, NULL, NULL, ctx); } | T_FALSE { $$ = ap_expr_make(op_False, NULL, NULL, ctx); } | T_OP_NOT expr { $$ = ap_expr_make(op_Not, $2, NULL, ctx); } | expr T_OP_OR expr { $$ = ap_expr_make(op_Or, $1, $3, ctx); } | expr T_OP_AND expr { $$ = ap_expr_make(op_And, $1, $3, ctx); } | comparison { $$ = ap_expr_make(op_Comp, $1, NULL, ctx); } | T_OP_UNARY word { $$ = ap_expr_unary_op_make( $1, $2, ctx); } | word T_OP_BINARY word { $$ = ap_expr_binary_op_make($2, $1, $3, ctx); } | '(' expr ')' { $$ = $2; } | T_ERROR { YYABORT; } ; comparison: word T_OP_EQ word { $$ = ap_expr_make(op_EQ, $1, $3, ctx); } | word T_OP_NE word { $$ = ap_expr_make(op_NE, $1, $3, ctx); } | word T_OP_LT word { $$ = ap_expr_make(op_LT, $1, $3, ctx); } | word T_OP_LE word { $$ = ap_expr_make(op_LE, $1, $3, ctx); } | word T_OP_GT word { $$ = ap_expr_make(op_GT, $1, $3, ctx); } | word T_OP_GE word { $$ = ap_expr_make(op_GE, $1, $3, ctx); } | word T_OP_STR_EQ word { $$ = ap_expr_make(op_STR_EQ, $1, $3, ctx); } | word T_OP_STR_NE word { $$ = ap_expr_make(op_STR_NE, $1, $3, ctx); } | word T_OP_STR_LT word { $$ = ap_expr_make(op_STR_LT, $1, $3, ctx); } | word T_OP_STR_LE word { $$ = ap_expr_make(op_STR_LE, $1, $3, ctx); } | word T_OP_STR_GT word { $$ = ap_expr_make(op_STR_GT, $1, $3, ctx); } | word T_OP_STR_GE word { $$ = ap_expr_make(op_STR_GE, $1, $3, ctx); } | word T_OP_IN wordlist { $$ = ap_expr_make(op_IN, $1, $3, ctx); } | word T_OP_REG regex { $$ = ap_expr_make(op_REG, $1, $3, ctx); } | word T_OP_NRE regex { $$ = ap_expr_make(op_NRE, $1, $3, ctx); } ; wordlist : lstfunccall { $$ = $1; } | '{' words '}' { $$ = $2; } ; words : word { $$ = ap_expr_make(op_ListElement, $1, NULL, ctx); } | words ',' word { $$ = ap_expr_make(op_ListElement, $3, $1, ctx); } ; string : string strpart { $$ = ap_expr_make(op_Concat, $1, $2, ctx); } | strpart { $$ = $1; } | T_ERROR { YYABORT; } ; strpart : T_STRING { $$ = ap_expr_make(op_String, $1, NULL, ctx); } | var { $$ = $1; } | backref { $$ = $1; } ; var : T_VAR_BEGIN T_ID T_VAR_END { $$ = ap_expr_var_make($2, ctx); } | T_VAR_BEGIN T_ID ':' string T_VAR_END { $$ = ap_expr_str_func_make($2, $4, ctx); } ; word : T_DIGIT { $$ = ap_expr_make(op_Digit, $1, NULL, ctx); } | word T_OP_CONCAT word { $$ = ap_expr_make(op_Concat, $1, $3, ctx); } | var { $$ = $1; } | backref { $$ = $1; } | strfunccall { $$ = $1; } | T_STR_BEGIN string T_STR_END { $$ = $2; } | T_STR_BEGIN T_STR_END { $$ = ap_expr_make(op_String, "", NULL, ctx); } ; regex : T_REGEX { ap_regex_t *regex; if ((regex = ap_pregcomp(ctx->pool, $1, AP_REG_EXTENDED|AP_REG_NOSUB)) == NULL) { ctx->error = "Failed to compile regular expression"; YYERROR; } $$ = ap_expr_make(op_Regex, regex, NULL, ctx); } | T_REGEX_I { ap_regex_t *regex; if ((regex = ap_pregcomp(ctx->pool, $1, AP_REG_EXTENDED|AP_REG_NOSUB|AP_REG_ICASE)) == NULL) { ctx->error = "Failed to compile regular expression"; YYERROR; } $$ = ap_expr_make(op_Regex, regex, NULL, ctx); } ; backref : T_REGEX_BACKREF { int *n = apr_palloc(ctx->pool, sizeof(int)); *n = $1; $$ = ap_expr_make(op_RegexBackref, n, NULL, ctx); } ; lstfunccall : T_ID '(' word ')' { $$ = ap_expr_list_func_make($1, $3, ctx); } ; strfunccall : T_ID '(' word ')' { $$ = ap_expr_str_func_make($1, $3, ctx); } ; %% void yyerror(ap_expr_parse_ctx_t *ctx, const char *s) { /* s is allocated on the stack */ ctx->error = apr_pstrdup(ctx->ptemp, s); } httpd-2.4.41/server/util_ebcdic.c0000644000000000000500000000656412411243364015167 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ap_config.h" #if APR_CHARSET_EBCDIC #include "apr_strings.h" #include "httpd.h" #include "http_log.h" #include "http_core.h" #include "util_ebcdic.h" /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX apr_status_t ap_init_ebcdic(apr_pool_t *pool) { apr_status_t rv; rv = apr_xlate_open(&ap_hdrs_to_ascii, "ISO-8859-1", APR_DEFAULT_CHARSET, pool); if (rv) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, NULL, APLOGNO(00040) "apr_xlate_open() failed"); return rv; } rv = apr_xlate_open(&ap_hdrs_from_ascii, APR_DEFAULT_CHARSET, "ISO-8859-1", pool); if (rv) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, NULL, APLOGNO(00041) "apr_xlate_open() failed"); return rv; } rv = apr_MD5InitEBCDIC(ap_hdrs_to_ascii); if (rv) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, NULL, APLOGNO(00042) "apr_MD5InitEBCDIC() failed"); return rv; } rv = apr_base64init_ebcdic(ap_hdrs_to_ascii, ap_hdrs_from_ascii); if (rv) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, NULL, APLOGNO(00043) "apr_base64init_ebcdic() failed"); return rv; } rv = apr_SHA1InitEBCDIC(ap_hdrs_to_ascii); if (rv) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, NULL, APLOGNO(00044) "apr_SHA1InitEBCDIC() failed"); return rv; } return APR_SUCCESS; } void ap_xlate_proto_to_ascii(char *buffer, apr_size_t len) { apr_size_t inbytes_left, outbytes_left; inbytes_left = outbytes_left = len; apr_xlate_conv_buffer(ap_hdrs_to_ascii, buffer, &inbytes_left, buffer, &outbytes_left); } void ap_xlate_proto_from_ascii(char *buffer, apr_size_t len) { apr_size_t inbytes_left, outbytes_left; inbytes_left = outbytes_left = len; apr_xlate_conv_buffer(ap_hdrs_from_ascii, buffer, &inbytes_left, buffer, &outbytes_left); } int ap_rvputs_proto_in_ascii(request_rec *r, ...) { va_list va; const char *s; char *ascii_s; apr_size_t len; apr_size_t written = 0; va_start(va, r); while (1) { s = va_arg(va, const char *); if (s == NULL) break; len = strlen(s); ascii_s = apr_pstrmemdup(r->pool, s, len); ap_xlate_proto_to_ascii(ascii_s, len); if (ap_rputs(ascii_s, r) < 0) { va_end(va); return -1; } written += len; } va_end(va); return written; } #endif /* APR_CHARSET_EBCDIC */ httpd-2.4.41/server/util_fcgi.c0000644000000000000500000002161213034776412014664 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_core.h" #include "http_log.h" #include "util_fcgi.h" /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX AP_DECLARE(void) ap_fcgi_header_to_array(ap_fcgi_header *h, unsigned char a[]) { a[AP_FCGI_HDR_VERSION_OFFSET] = h->version; a[AP_FCGI_HDR_TYPE_OFFSET] = h->type; a[AP_FCGI_HDR_REQUEST_ID_B1_OFFSET] = h->requestIdB1; a[AP_FCGI_HDR_REQUEST_ID_B0_OFFSET] = h->requestIdB0; a[AP_FCGI_HDR_CONTENT_LEN_B1_OFFSET] = h->contentLengthB1; a[AP_FCGI_HDR_CONTENT_LEN_B0_OFFSET] = h->contentLengthB0; a[AP_FCGI_HDR_PADDING_LEN_OFFSET] = h->paddingLength; a[AP_FCGI_HDR_RESERVED_OFFSET] = h->reserved; } AP_DECLARE(void) ap_fcgi_header_from_array(ap_fcgi_header *h, unsigned char a[]) { h->version = a[AP_FCGI_HDR_VERSION_OFFSET]; h->type = a[AP_FCGI_HDR_TYPE_OFFSET]; h->requestIdB1 = a[AP_FCGI_HDR_REQUEST_ID_B1_OFFSET]; h->requestIdB0 = a[AP_FCGI_HDR_REQUEST_ID_B0_OFFSET]; h->contentLengthB1 = a[AP_FCGI_HDR_CONTENT_LEN_B1_OFFSET]; h->contentLengthB0 = a[AP_FCGI_HDR_CONTENT_LEN_B0_OFFSET]; h->paddingLength = a[AP_FCGI_HDR_PADDING_LEN_OFFSET]; h->reserved = a[AP_FCGI_HDR_RESERVED_OFFSET]; } AP_DECLARE(void) ap_fcgi_header_fields_from_array(unsigned char *version, unsigned char *type, apr_uint16_t *request_id, apr_uint16_t *content_len, unsigned char *padding_len, unsigned char a[]) { *version = a[AP_FCGI_HDR_VERSION_OFFSET]; *type = a[AP_FCGI_HDR_TYPE_OFFSET]; *request_id = (a[AP_FCGI_HDR_REQUEST_ID_B1_OFFSET] << 8) + a[AP_FCGI_HDR_REQUEST_ID_B0_OFFSET]; *content_len = (a[AP_FCGI_HDR_CONTENT_LEN_B1_OFFSET] << 8) + a[AP_FCGI_HDR_CONTENT_LEN_B0_OFFSET]; *padding_len = a[AP_FCGI_HDR_PADDING_LEN_OFFSET]; } AP_DECLARE(void) ap_fcgi_begin_request_body_to_array(ap_fcgi_begin_request_body *h, unsigned char a[]) { a[AP_FCGI_BRB_ROLEB1_OFFSET] = h->roleB1; a[AP_FCGI_BRB_ROLEB0_OFFSET] = h->roleB0; a[AP_FCGI_BRB_FLAGS_OFFSET] = h->flags; a[AP_FCGI_BRB_RESERVED0_OFFSET] = h->reserved[0]; a[AP_FCGI_BRB_RESERVED1_OFFSET] = h->reserved[1]; a[AP_FCGI_BRB_RESERVED2_OFFSET] = h->reserved[2]; a[AP_FCGI_BRB_RESERVED3_OFFSET] = h->reserved[3]; a[AP_FCGI_BRB_RESERVED4_OFFSET] = h->reserved[4]; } AP_DECLARE(void) ap_fcgi_fill_in_header(ap_fcgi_header *header, unsigned char type, apr_uint16_t request_id, apr_uint16_t content_len, unsigned char padding_len) { header->version = AP_FCGI_VERSION_1; header->type = type; header->requestIdB1 = ((request_id >> 8) & 0xff); header->requestIdB0 = ((request_id) & 0xff); header->contentLengthB1 = ((content_len >> 8) & 0xff); header->contentLengthB0 = ((content_len) & 0xff); header->paddingLength = padding_len; header->reserved = 0; } AP_DECLARE(void) ap_fcgi_fill_in_request_body(ap_fcgi_begin_request_body *brb, int role, unsigned char flags) { brb->roleB1 = ((role >> 8) & 0xff); brb->roleB0 = (role & 0xff); brb->flags = flags; brb->reserved[0] = 0; brb->reserved[1] = 0; brb->reserved[2] = 0; brb->reserved[3] = 0; brb->reserved[4] = 0; } AP_DECLARE(apr_size_t) ap_fcgi_encoded_env_len(apr_table_t *env, apr_size_t maxlen, int *starting_elem) { const apr_array_header_t *envarr; const apr_table_entry_t *elts; apr_size_t envlen, actualenvlen; int i; if (maxlen > AP_FCGI_MAX_CONTENT_LEN) { maxlen = AP_FCGI_MAX_CONTENT_LEN; } envarr = apr_table_elts(env); elts = (const apr_table_entry_t *) envarr->elts; /* envlen - speculative, may overflow the limit * actualenvlen - len required without overflowing */ envlen = actualenvlen = 0; for (i = *starting_elem; i < envarr->nelts; ) { apr_size_t keylen, vallen; if (!elts[i].key) { (*starting_elem)++; i++; continue; } keylen = strlen(elts[i].key); if (keylen >> 7 == 0) { envlen += 1; } else { envlen += 4; } envlen += keylen; vallen = elts[i].val ? strlen(elts[i].val) : 0; if (vallen >> 7 == 0) { envlen += 1; } else { envlen += 4; } envlen += vallen; if (envlen > maxlen) { break; } actualenvlen = envlen; (*starting_elem)++; i++; } return actualenvlen; } AP_DECLARE(apr_status_t) ap_fcgi_encode_env(request_rec *r, apr_table_t *env, void *buffer, apr_size_t buflen, int *starting_elem) { apr_status_t rv = APR_SUCCESS; const apr_array_header_t *envarr; const apr_table_entry_t *elts; char *itr; int i; envarr = apr_table_elts(env); elts = (const apr_table_entry_t *) envarr->elts; itr = buffer; for (i = *starting_elem; i < envarr->nelts; ) { apr_size_t keylen, vallen; if (!elts[i].key) { (*starting_elem)++; i++; continue; } keylen = strlen(elts[i].key); if (keylen >> 7 == 0) { if (buflen < 1) { rv = APR_ENOSPC; /* overflow */ break; } itr[0] = keylen & 0xff; itr += 1; buflen -= 1; } else { if (buflen < 4) { rv = APR_ENOSPC; /* overflow */ break; } itr[0] = ((keylen >> 24) & 0xff) | 0x80; itr[1] = ((keylen >> 16) & 0xff); itr[2] = ((keylen >> 8) & 0xff); itr[3] = ((keylen) & 0xff); itr += 4; buflen -= 4; } vallen = elts[i].val ? strlen(elts[i].val) : 0; if (vallen >> 7 == 0) { if (buflen < 1) { rv = APR_ENOSPC; /* overflow */ break; } itr[0] = vallen & 0xff; itr += 1; buflen -= 1; } else { if (buflen < 4) { rv = APR_ENOSPC; /* overflow */ break; } itr[0] = ((vallen >> 24) & 0xff) | 0x80; itr[1] = ((vallen >> 16) & 0xff); itr[2] = ((vallen >> 8) & 0xff); itr[3] = ((vallen) & 0xff); itr += 4; buflen -= 4; } if (buflen < keylen) { rv = APR_ENOSPC; /* overflow */ break; } memcpy(itr, elts[i].key, keylen); itr += keylen; buflen -= keylen; if (buflen < vallen) { rv = APR_ENOSPC; /* overflow */ break; } if (elts[i].val) { memcpy(itr, elts[i].val, vallen); itr += vallen; } if (buflen == vallen) { (*starting_elem)++; i++; break; /* filled up predicted space, as expected */ } buflen -= vallen; (*starting_elem)++; i++; } if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02492) "ap_fcgi_encode_env: out of space " "encoding environment"); } return rv; } httpd-2.4.41/server/util_xml.c0000644000000000000500000001035112532143363014545 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_xml.h" #include "httpd.h" #include "http_protocol.h" #include "http_log.h" #include "http_core.h" #include "util_charset.h" #include "util_xml.h" /* used for reading input blocks */ #define READ_BLOCKSIZE 2048 /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX AP_DECLARE(int) ap_xml_parse_input(request_rec * r, apr_xml_doc **pdoc) { apr_xml_parser *parser; apr_bucket_brigade *brigade; int seen_eos; apr_status_t status; char errbuf[200]; apr_size_t total_read = 0; apr_size_t limit_xml_body = ap_get_limit_xml_body(r); int result = HTTP_BAD_REQUEST; parser = apr_xml_parser_create(r->pool); brigade = apr_brigade_create(r->pool, r->connection->bucket_alloc); seen_eos = 0; total_read = 0; do { apr_bucket *bucket; /* read the body, stuffing it into the parser */ status = ap_get_brigade(r->input_filters, brigade, AP_MODE_READBYTES, APR_BLOCK_READ, READ_BLOCKSIZE); if (status != APR_SUCCESS) { result = ap_map_http_request_error(status, HTTP_BAD_REQUEST); goto read_error; } for (bucket = APR_BRIGADE_FIRST(brigade); bucket != APR_BRIGADE_SENTINEL(brigade); bucket = APR_BUCKET_NEXT(bucket)) { const char *data; apr_size_t len; if (APR_BUCKET_IS_EOS(bucket)) { seen_eos = 1; break; } if (APR_BUCKET_IS_METADATA(bucket)) { continue; } status = apr_bucket_read(bucket, &data, &len, APR_BLOCK_READ); if (status != APR_SUCCESS) { goto read_error; } total_read += len; if (limit_xml_body && total_read > limit_xml_body) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00539) "XML request body is larger than the configured " "limit of %lu", (unsigned long)limit_xml_body); result = HTTP_REQUEST_ENTITY_TOO_LARGE; goto read_error; } status = apr_xml_parser_feed(parser, data, len); if (status) { goto parser_error; } } apr_brigade_cleanup(brigade); } while (!seen_eos); apr_brigade_destroy(brigade); /* tell the parser that we're done */ status = apr_xml_parser_done(parser, pdoc); if (status) { /* Some parsers are stupid and return an error on blank documents. */ if (!total_read) { *pdoc = NULL; return OK; } ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00540) "XML parser error (at end). status=%d", status); return HTTP_BAD_REQUEST; } #if APR_CHARSET_EBCDIC apr_xml_parser_convert_doc(r->pool, *pdoc, ap_hdrs_from_ascii); #endif return OK; parser_error: (void) apr_xml_parser_geterror(parser, errbuf, sizeof(errbuf)); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00541) "XML Parser Error: %s", errbuf); /* FALLTHRU */ read_error: /* make sure the parser is terminated */ (void) apr_xml_parser_done(parser, NULL); apr_brigade_destroy(brigade); /* Apache will supply a default error, plus the error log above. */ return result; } httpd-2.4.41/server/util_mutex.c0000644000000000000500000004036613262704500015115 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * util_mutex.c: Useful functions for determining allowable * mutexes and mutex settings */ #include "apr.h" #include "apr_hash.h" #include "apr_strings.h" #include "apr_lib.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_main.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "util_mutex.h" #if AP_NEED_SET_MUTEX_PERMS #include "unixd.h" #endif #ifdef HAVE_UNISTD_H #include /* getpid() */ #endif /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX AP_DECLARE(apr_status_t) ap_parse_mutex(const char *arg, apr_pool_t *pool, apr_lockmech_e *mutexmech, const char **mutexfile) { /* Split arg into meth and file */ char *meth = apr_pstrdup(pool, arg); char *file = strchr(meth, ':'); if (file) { *(file++) = '\0'; if (!*file) { file = NULL; } } /* APR determines temporary filename unless overridden below, * we presume file indicates an mutexfile is a file path * unless the method sets mutexfile=file and NULLs file */ *mutexfile = NULL; if (!strcasecmp(meth, "none") || !strcasecmp(meth, "no")) { return APR_ENOLOCK; } /* NOTE: previously, 'yes' implied 'sem' */ if (!strcasecmp(meth, "default") || !strcasecmp(meth, "yes")) { *mutexmech = APR_LOCK_DEFAULT; } #if APR_HAS_FCNTL_SERIALIZE else if (!strcasecmp(meth, "fcntl") || !strcasecmp(meth, "file")) { *mutexmech = APR_LOCK_FCNTL; } #endif #if APR_HAS_FLOCK_SERIALIZE else if (!strcasecmp(meth, "flock") || !strcasecmp(meth, "file")) { *mutexmech = APR_LOCK_FLOCK; } #endif #if APR_HAS_POSIXSEM_SERIALIZE else if (!strcasecmp(meth, "posixsem") || !strcasecmp(meth, "sem")) { *mutexmech = APR_LOCK_POSIXSEM; /* Posix/SysV semaphores aren't file based, use the literal name * if provided and fall back on APR's default if not. Today, APR * will ignore it, but once supported it has an absurdly short limit. */ if (file) { *mutexfile = apr_pstrdup(pool, file); file = NULL; } } #endif #if APR_HAS_SYSVSEM_SERIALIZE else if (!strcasecmp(meth, "sysvsem") || !strcasecmp(meth, "sem")) { *mutexmech = APR_LOCK_SYSVSEM; } #endif #if APR_HAS_PROC_PTHREAD_SERIALIZE else if (!strcasecmp(meth, "pthread")) { *mutexmech = APR_LOCK_PROC_PTHREAD; } #endif else { return APR_ENOTIMPL; } /* Unless the method above assumed responsibility for setting up * mutexfile and NULLing out file, presume it is a file we * are looking to use */ if (file) { *mutexfile = ap_server_root_relative(pool, file); if (!*mutexfile) { return APR_BADARG; } } return APR_SUCCESS; } typedef struct { apr_int32_t options; int set; int none; int omit_pid; apr_lockmech_e mech; const char *dir; } mutex_cfg_t; /* hash is created the first time a module calls ap_mutex_register(), * rather than attempting to be the REALLY_REALLY_FIRST pre-config * hook; it is cleaned up when the associated pool goes away; assume * pconf is the pool passed to ap_mutex_register() */ static apr_hash_t *mxcfg_by_type; AP_DECLARE_NONSTD(void) ap_mutex_init(apr_pool_t *p) { mutex_cfg_t *def; if (mxcfg_by_type) { return; } mxcfg_by_type = apr_hash_make(p); apr_pool_cleanup_register(p, &mxcfg_by_type, ap_pool_cleanup_set_null, apr_pool_cleanup_null); /* initialize default mutex configuration */ def = apr_pcalloc(p, sizeof *def); def->mech = APR_LOCK_DEFAULT; def->dir = ap_runtime_dir_relative(p, ""); apr_hash_set(mxcfg_by_type, "default", APR_HASH_KEY_STRING, def); } AP_DECLARE_NONSTD(const char *)ap_set_mutex(cmd_parms *cmd, void *dummy, const char *arg) { apr_pool_t *p = cmd->pool; apr_pool_t *ptemp = cmd->temp_pool; const char **elt; const char *mechdir; int no_mutex = 0, omit_pid = 0; apr_array_header_t *type_list; apr_lockmech_e mech; apr_status_t rv; const char *mutexdir; mutex_cfg_t *mxcfg; const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } mechdir = ap_getword_conf(cmd->pool, &arg); if (*mechdir == '\0') { return "Mutex requires at least a mechanism argument (" AP_ALL_AVAILABLE_MUTEXES_STRING ")"; } rv = ap_parse_mutex(mechdir, p, &mech, &mutexdir); if (rv == APR_ENOTIMPL) { return apr_pstrcat(p, "Invalid Mutex argument ", mechdir, " (" AP_ALL_AVAILABLE_MUTEXES_STRING ")", NULL); } else if (rv == APR_BADARG || (mutexdir && !ap_is_directory(ptemp, mutexdir))) { return apr_pstrcat(p, "Invalid Mutex directory in argument ", mechdir, NULL); } else if (rv == APR_ENOLOCK) { /* "none" */ no_mutex = 1; } /* "OmitPID" can appear at the end of the list, so build a list of * mutex type names while looking for "OmitPID" (anywhere) or the end */ type_list = apr_array_make(cmd->pool, 4, sizeof(const char *)); while (*arg) { const char *s = ap_getword_conf(cmd->pool, &arg); if (!strcasecmp(s, "omitpid")) { omit_pid = 1; } else { const char **new_type = (const char **)apr_array_push(type_list); *new_type = s; } } if (apr_is_empty_array(type_list)) { /* no mutex type? assume "default" */ const char **new_type = (const char **)apr_array_push(type_list); *new_type = "default"; } while ((elt = (const char **)apr_array_pop(type_list)) != NULL) { const char *type = *elt; mxcfg = apr_hash_get(mxcfg_by_type, type, APR_HASH_KEY_STRING); if (!mxcfg) { return apr_psprintf(p, "Mutex type %s is not valid", type); } mxcfg->none = 0; /* in case that was the default */ mxcfg->omit_pid = omit_pid; mxcfg->set = 1; if (no_mutex) { if (!(mxcfg->options & AP_MUTEX_ALLOW_NONE)) { return apr_psprintf(p, "None is not allowed for mutex type %s", type); } mxcfg->none = 1; } else { mxcfg->mech = mech; if (mutexdir) { /* retain mutex default if not configured */ mxcfg->dir = mutexdir; } } } return NULL; } AP_DECLARE(apr_status_t) ap_mutex_register(apr_pool_t *pconf, const char *type, const char *default_dir, apr_lockmech_e default_mech, apr_int32_t options) { mutex_cfg_t *mxcfg = apr_pcalloc(pconf, sizeof *mxcfg); if ((options & ~(AP_MUTEX_ALLOW_NONE | AP_MUTEX_DEFAULT_NONE))) { return APR_EINVAL; } ap_mutex_init(pconf); /* in case this mod's pre-config ran before core's */ mxcfg->options = options; if (options & AP_MUTEX_DEFAULT_NONE) { mxcfg->none = 1; } mxcfg->dir = default_dir; /* usually NULL */ mxcfg->mech = default_mech; /* usually APR_LOCK_DEFAULT */ apr_hash_set(mxcfg_by_type, type, APR_HASH_KEY_STRING, mxcfg); return APR_SUCCESS; } static int mutex_needs_file(apr_lockmech_e mech) { if (mech != APR_LOCK_FLOCK && mech != APR_LOCK_FCNTL #if APR_USE_FLOCK_SERIALIZE || APR_USE_FCNTL_SERIALIZE && mech != APR_LOCK_DEFAULT #endif ) { return 0; } return 1; } static const char *get_mutex_filename(apr_pool_t *p, mutex_cfg_t *mxcfg, const char *type, const char *instance_id) { const char *pid_suffix = ""; if (!mutex_needs_file(mxcfg->mech)) { return NULL; } #if HAVE_UNISTD_H if (!mxcfg->omit_pid) { pid_suffix = apr_psprintf(p, ".%" APR_PID_T_FMT, getpid()); } #endif return ap_server_root_relative(p, apr_pstrcat(p, mxcfg->dir, "/", type, instance_id ? "-" : "", instance_id ? instance_id : "", pid_suffix, NULL)); } static mutex_cfg_t *mxcfg_lookup(apr_pool_t *p, const char *type) { mutex_cfg_t *defcfg, *mxcfg, *newcfg; defcfg = apr_hash_get(mxcfg_by_type, "default", APR_HASH_KEY_STRING); /* MUST exist in table, or wasn't registered */ mxcfg = apr_hash_get(mxcfg_by_type, type, APR_HASH_KEY_STRING); if (!mxcfg) { return NULL; } /* order of precedence: * 1. Mutex directive for this mutex * 2. Mutex directive for "default" * 3. Defaults for this mutex from ap_mutex_register() * 4. Global defaults */ if (mxcfg->set) { newcfg = mxcfg; } else if (defcfg->set) { newcfg = defcfg; } else if (mxcfg->none || mxcfg->mech != APR_LOCK_DEFAULT) { newcfg = mxcfg; } else { newcfg = defcfg; } if (!newcfg->none && mutex_needs_file(newcfg->mech) && !newcfg->dir) { /* a file-based mutex mechanism was configured, but * without a mutex file directory; go back through * the chain to find the directory, store in new * mutex cfg structure */ newcfg = apr_pmemdup(p, newcfg, sizeof *newcfg); /* !true if dir not already set: mxcfg->set && defcfg->dir */ if (defcfg->set && defcfg->dir) { newcfg->dir = defcfg->dir; } else if (mxcfg->dir) { newcfg->dir = mxcfg->dir; } else { newcfg->dir = defcfg->dir; } } return newcfg; } static void log_bad_create_options(server_rec *s, const char *type) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(00021) "Invalid options were specified when creating the %s mutex", type); } static void log_unknown_type(server_rec *s, const char *type) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(00022) "Can't create mutex of unknown type %s", type); } static void log_create_failure(apr_status_t rv, server_rec *s, const char *type, const char *fname) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(00023) "Couldn't create the %s mutex %s%s%s", type, fname ? "(file " : "", fname ? fname : "", fname ? ")" : ""); } #ifdef AP_NEED_SET_MUTEX_PERMS static void log_perms_failure(apr_status_t rv, server_rec *s, const char *type) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(00024) "Couldn't set permissions on the %s mutex; " "check User and Group directives", type); } #endif AP_DECLARE(apr_status_t) ap_global_mutex_create(apr_global_mutex_t **mutex, const char **name, const char *type, const char *instance_id, server_rec *s, apr_pool_t *p, apr_int32_t options) { apr_status_t rv; const char *fname; mutex_cfg_t *mxcfg = mxcfg_lookup(p, type); if (options) { log_bad_create_options(s, type); return APR_EINVAL; } if (!mxcfg) { log_unknown_type(s, type); return APR_EINVAL; } if (mxcfg->none) { *mutex = NULL; return APR_SUCCESS; } fname = get_mutex_filename(p, mxcfg, type, instance_id); rv = apr_global_mutex_create(mutex, fname, mxcfg->mech, p); if (rv != APR_SUCCESS) { log_create_failure(rv, s, type, fname); return rv; } if (name) *name = fname; #ifdef AP_NEED_SET_MUTEX_PERMS rv = ap_unixd_set_global_mutex_perms(*mutex); if (rv != APR_SUCCESS) { log_perms_failure(rv, s, type); } #endif return rv; } AP_DECLARE(apr_status_t) ap_proc_mutex_create(apr_proc_mutex_t **mutex, const char **name, const char *type, const char *instance_id, server_rec *s, apr_pool_t *p, apr_int32_t options) { apr_status_t rv; const char *fname; mutex_cfg_t *mxcfg = mxcfg_lookup(p, type); if (options) { log_bad_create_options(s, type); return APR_EINVAL; } if (!mxcfg) { log_unknown_type(s, type); return APR_EINVAL; } if (mxcfg->none) { *mutex = NULL; return APR_SUCCESS; } fname = get_mutex_filename(p, mxcfg, type, instance_id); rv = apr_proc_mutex_create(mutex, fname, mxcfg->mech, p); if (rv != APR_SUCCESS) { log_create_failure(rv, s, type, fname); return rv; } if (name) *name = fname; #ifdef AP_NEED_SET_MUTEX_PERMS rv = ap_unixd_set_proc_mutex_perms(*mutex); if (rv != APR_SUCCESS) { log_perms_failure(rv, s, type); } #endif return rv; } AP_CORE_DECLARE(void) ap_dump_mutexes(apr_pool_t *p, server_rec *s, apr_file_t *out) { apr_hash_index_t *idx; mutex_cfg_t *defcfg = apr_hash_get(mxcfg_by_type, "default", APR_HASH_KEY_STRING); for (idx = apr_hash_first(p, mxcfg_by_type); idx; idx = apr_hash_next(idx)) { mutex_cfg_t *mxcfg; const char *name, *mech = ""; const void *name_; const char *dir = ""; apr_hash_this(idx, &name_, NULL, NULL); name = name_; mxcfg = mxcfg_lookup(p, name); if (mxcfg == defcfg && strcmp(name, "default") != 0) { apr_file_printf(out, "Mutex %s: using_defaults\n", name); continue; } if (mxcfg->none) { apr_file_printf(out, "Mutex %s: none\n", name); continue; } switch (mxcfg->mech) { case APR_LOCK_DEFAULT: mech = "default"; break; #if APR_HAS_FCNTL_SERIALIZE case APR_LOCK_FCNTL: mech = "fcntl"; break; #endif #if APR_HAS_FLOCK_SERIALIZE case APR_LOCK_FLOCK: mech = "flock"; break; #endif #if APR_HAS_POSIXSEM_SERIALIZE case APR_LOCK_POSIXSEM: mech = "posixsem"; break; #endif #if APR_HAS_SYSVSEM_SERIALIZE case APR_LOCK_SYSVSEM: mech = "sysvsem"; break; #endif #if APR_HAS_PROC_PTHREAD_SERIALIZE case APR_LOCK_PROC_PTHREAD: mech = "pthread"; break; #endif default: ap_assert(0); } if (mxcfg->dir) dir = ap_server_root_relative(p, mxcfg->dir); apr_file_printf(out, "Mutex %s: dir=\"%s\" mechanism=%s %s\n", name, dir, mech, mxcfg->omit_pid ? "[OmitPid]" : ""); } } httpd-2.4.41/server/util_expr_parse.c0000644000000000000500000017237013523273357016137 0ustar rootsrc/* A Bison parser, made by GNU Bison 2.5. */ /* Bison implementation for Yacc-like parsers in C Copyright (C) 1984, 1989-1990, 2000-2011 Free Software Foundation, Inc. This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . */ /* As a special exception, you may create a larger work that contains part or all of the Bison parser skeleton and distribute that work under terms of your choice, so long as that work isn't itself a parser generator using the skeleton or a modified version thereof as a parser skeleton. Alternatively, if you modify or redistribute the parser skeleton itself, you may (at your option) remove this special exception, which will cause the skeleton and the resulting Bison output files to be licensed under the GNU General Public License without this special exception. This special exception was added by the Free Software Foundation in version 2.2 of Bison. */ /* C LALR(1) parser skeleton written by Richard Stallman, by simplifying the original so-called "semantic" parser. */ /* All symbols defined below should begin with yy or YY, to avoid infringing on user name space. This should be done even for local variables, as they might otherwise be expanded by user macros. There are some unavoidable exceptions within include files to define necessary library symbols; they are noted "INFRINGES ON USER NAME SPACE" below. */ /* Identify Bison output. */ #define YYBISON 1 /* Bison version. */ #define YYBISON_VERSION "2.5" /* Skeleton name. */ #define YYSKELETON_NAME "yacc.c" /* Pure parsers. */ #define YYPURE 1 /* Push parsers. */ #define YYPUSH 0 /* Pull parsers. */ #define YYPULL 1 /* Using locations. */ #define YYLSP_NEEDED 0 /* Substitute the variable and function names. */ #define yyparse ap_expr_yyparse #define yylex ap_expr_yylex #define yyerror ap_expr_yyerror #define yylval ap_expr_yylval #define yychar ap_expr_yychar #define yydebug ap_expr_yydebug #define yynerrs ap_expr_yynerrs /* Copy the first part of user declarations. */ /* Line 268 of yacc.c */ #line 31 "util_expr_parse.y" #include "util_expr_private.h" /* Line 268 of yacc.c */ #line 84 "util_expr_parse.c" /* Enabling traces. */ #ifndef YYDEBUG # define YYDEBUG 0 #endif /* Enabling verbose error messages. */ #ifdef YYERROR_VERBOSE # undef YYERROR_VERBOSE # define YYERROR_VERBOSE 1 #else # define YYERROR_VERBOSE 1 #endif /* Enabling the token table. */ #ifndef YYTOKEN_TABLE # define YYTOKEN_TABLE 0 #endif /* Tokens. */ #ifndef YYTOKENTYPE # define YYTOKENTYPE /* Put the tokens into the symbol table, so that GDB and other debuggers know about them. */ enum yytokentype { T_TRUE = 258, T_FALSE = 259, T_EXPR_BOOL = 260, T_EXPR_STRING = 261, T_ERROR = 262, T_DIGIT = 263, T_ID = 264, T_STRING = 265, T_REGEX = 266, T_REGEX_I = 267, T_REGEX_BACKREF = 268, T_OP_UNARY = 269, T_OP_BINARY = 270, T_STR_BEGIN = 271, T_STR_END = 272, T_VAR_BEGIN = 273, T_VAR_END = 274, T_OP_EQ = 275, T_OP_NE = 276, T_OP_LT = 277, T_OP_LE = 278, T_OP_GT = 279, T_OP_GE = 280, T_OP_REG = 281, T_OP_NRE = 282, T_OP_IN = 283, T_OP_STR_EQ = 284, T_OP_STR_NE = 285, T_OP_STR_LT = 286, T_OP_STR_LE = 287, T_OP_STR_GT = 288, T_OP_STR_GE = 289, T_OP_CONCAT = 290, T_OP_OR = 291, T_OP_AND = 292, T_OP_NOT = 293 }; #endif #if ! defined YYSTYPE && ! defined YYSTYPE_IS_DECLARED typedef union YYSTYPE { /* Line 293 of yacc.c */ #line 35 "util_expr_parse.y" char *cpVal; ap_expr_t *exVal; int num; /* Line 293 of yacc.c */ #line 166 "util_expr_parse.c" } YYSTYPE; # define YYSTYPE_IS_TRIVIAL 1 # define yystype YYSTYPE /* obsolescent; will be withdrawn */ # define YYSTYPE_IS_DECLARED 1 #endif /* Copy the second part of user declarations. */ /* Line 343 of yacc.c */ #line 102 "util_expr_parse.y" #include "util_expr_private.h" #define yyscanner ctx->scanner int ap_expr_yylex(YYSTYPE *lvalp, void *scanner); /* Line 343 of yacc.c */ #line 186 "util_expr_parse.c" #ifdef short # undef short #endif #ifdef YYTYPE_UINT8 typedef YYTYPE_UINT8 yytype_uint8; #else typedef unsigned char yytype_uint8; #endif #ifdef YYTYPE_INT8 typedef YYTYPE_INT8 yytype_int8; #elif (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) typedef signed char yytype_int8; #else typedef short int yytype_int8; #endif #ifdef YYTYPE_UINT16 typedef YYTYPE_UINT16 yytype_uint16; #else typedef unsigned short int yytype_uint16; #endif #ifdef YYTYPE_INT16 typedef YYTYPE_INT16 yytype_int16; #else typedef short int yytype_int16; #endif #ifndef YYSIZE_T # ifdef __SIZE_TYPE__ # define YYSIZE_T __SIZE_TYPE__ # elif defined size_t # define YYSIZE_T size_t # elif ! defined YYSIZE_T && (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) # include /* INFRINGES ON USER NAME SPACE */ # define YYSIZE_T size_t # else # define YYSIZE_T unsigned int # endif #endif #define YYSIZE_MAXIMUM ((YYSIZE_T) -1) #ifndef YY_ # if defined YYENABLE_NLS && YYENABLE_NLS # if ENABLE_NLS # include /* INFRINGES ON USER NAME SPACE */ # define YY_(msgid) dgettext ("bison-runtime", msgid) # endif # endif # ifndef YY_ # define YY_(msgid) msgid # endif #endif /* Suppress unused-variable warnings by "using" E. */ #if ! defined lint || defined __GNUC__ # define YYUSE(e) ((void) (e)) #else # define YYUSE(e) /* empty */ #endif /* Identity function, used to suppress warnings about constant conditions. */ #ifndef lint # define YYID(n) (n) #else #if (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) static int YYID (int yyi) #else static int YYID (yyi) int yyi; #endif { return yyi; } #endif #if ! defined yyoverflow || YYERROR_VERBOSE /* The parser invokes alloca or malloc; define the necessary symbols. */ # ifdef YYSTACK_USE_ALLOCA # if YYSTACK_USE_ALLOCA # ifdef __GNUC__ # define YYSTACK_ALLOC __builtin_alloca # elif defined __BUILTIN_VA_ARG_INCR # include /* INFRINGES ON USER NAME SPACE */ # elif defined _AIX # define YYSTACK_ALLOC __alloca # elif defined _MSC_VER # include /* INFRINGES ON USER NAME SPACE */ # define alloca _alloca # else # define YYSTACK_ALLOC alloca # if ! defined _ALLOCA_H && ! defined EXIT_SUCCESS && (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) # include /* INFRINGES ON USER NAME SPACE */ # ifndef EXIT_SUCCESS # define EXIT_SUCCESS 0 # endif # endif # endif # endif # endif # ifdef YYSTACK_ALLOC /* Pacify GCC's `empty if-body' warning. */ # define YYSTACK_FREE(Ptr) do { /* empty */; } while (YYID (0)) # ifndef YYSTACK_ALLOC_MAXIMUM /* The OS might guarantee only one guard page at the bottom of the stack, and a page size can be as small as 4096 bytes. So we cannot safely invoke alloca (N) if N exceeds 4096. Use a slightly smaller number to allow for a few compiler-allocated temporary stack slots. */ # define YYSTACK_ALLOC_MAXIMUM 4032 /* reasonable circa 2006 */ # endif # else # define YYSTACK_ALLOC YYMALLOC # define YYSTACK_FREE YYFREE # ifndef YYSTACK_ALLOC_MAXIMUM # define YYSTACK_ALLOC_MAXIMUM YYSIZE_MAXIMUM # endif # if (defined __cplusplus && ! defined EXIT_SUCCESS \ && ! ((defined YYMALLOC || defined malloc) \ && (defined YYFREE || defined free))) # include /* INFRINGES ON USER NAME SPACE */ # ifndef EXIT_SUCCESS # define EXIT_SUCCESS 0 # endif # endif # ifndef YYMALLOC # define YYMALLOC malloc # if ! defined malloc && ! defined EXIT_SUCCESS && (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) void *malloc (YYSIZE_T); /* INFRINGES ON USER NAME SPACE */ # endif # endif # ifndef YYFREE # define YYFREE free # if ! defined free && ! defined EXIT_SUCCESS && (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) void free (void *); /* INFRINGES ON USER NAME SPACE */ # endif # endif # endif #endif /* ! defined yyoverflow || YYERROR_VERBOSE */ #if (! defined yyoverflow \ && (! defined __cplusplus \ || (defined YYSTYPE_IS_TRIVIAL && YYSTYPE_IS_TRIVIAL))) /* A type that is properly aligned for any stack member. */ union yyalloc { yytype_int16 yyss_alloc; YYSTYPE yyvs_alloc; }; /* The size of the maximum gap between one aligned stack and the next. */ # define YYSTACK_GAP_MAXIMUM (sizeof (union yyalloc) - 1) /* The size of an array large to enough to hold all stacks, each with N elements. */ # define YYSTACK_BYTES(N) \ ((N) * (sizeof (yytype_int16) + sizeof (YYSTYPE)) \ + YYSTACK_GAP_MAXIMUM) # define YYCOPY_NEEDED 1 /* Relocate STACK from its old location to the new one. The local variables YYSIZE and YYSTACKSIZE give the old and new number of elements in the stack, and YYPTR gives the new location of the stack. Advance YYPTR to a properly aligned location for the next stack. */ # define YYSTACK_RELOCATE(Stack_alloc, Stack) \ do \ { \ YYSIZE_T yynewbytes; \ YYCOPY (&yyptr->Stack_alloc, Stack, yysize); \ Stack = &yyptr->Stack_alloc; \ yynewbytes = yystacksize * sizeof (*Stack) + YYSTACK_GAP_MAXIMUM; \ yyptr += yynewbytes / sizeof (*yyptr); \ } \ while (YYID (0)) #endif #if defined YYCOPY_NEEDED && YYCOPY_NEEDED /* Copy COUNT objects from FROM to TO. The source and destination do not overlap. */ # ifndef YYCOPY # if defined __GNUC__ && 1 < __GNUC__ # define YYCOPY(To, From, Count) \ __builtin_memcpy (To, From, (Count) * sizeof (*(From))) # else # define YYCOPY(To, From, Count) \ do \ { \ YYSIZE_T yyi; \ for (yyi = 0; yyi < (Count); yyi++) \ (To)[yyi] = (From)[yyi]; \ } \ while (YYID (0)) # endif # endif #endif /* !YYCOPY_NEEDED */ /* YYFINAL -- State number of the termination state. */ #define YYFINAL 28 /* YYLAST -- Last index in YYTABLE. */ #define YYLAST 128 /* YYNTOKENS -- Number of terminals. */ #define YYNTOKENS 45 /* YYNNTS -- Number of nonterminals. */ #define YYNNTS 14 /* YYNRULES -- Number of rules. */ #define YYNRULES 53 /* YYNRULES -- Number of states. */ #define YYNSTATES 96 /* YYTRANSLATE(YYLEX) -- Bison symbol number corresponding to YYLEX. */ #define YYUNDEFTOK 2 #define YYMAXUTOK 293 #define YYTRANSLATE(YYX) \ ((unsigned int) (YYX) <= YYMAXUTOK ? yytranslate[YYX] : YYUNDEFTOK) /* YYTRANSLATE[YYLEX] -- Bison symbol number corresponding to YYLEX. */ static const yytype_uint8 yytranslate[] = { 0, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 39, 40, 2, 2, 43, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 44, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 41, 2, 42, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38 }; #if YYDEBUG /* YYPRHS[YYN] -- Index of the first RHS symbol of rule number YYN in YYRHS. */ static const yytype_uint8 yyprhs[] = { 0, 0, 3, 6, 9, 11, 13, 15, 18, 22, 26, 28, 31, 35, 39, 41, 45, 49, 53, 57, 61, 65, 69, 73, 77, 81, 85, 89, 93, 97, 101, 103, 107, 109, 113, 116, 118, 120, 122, 124, 126, 130, 136, 138, 142, 144, 146, 148, 152, 155, 157, 159, 161, 166 }; /* YYRHS -- A `-1'-separated list of the rules' RHS. */ static const yytype_int8 yyrhs[] = { 46, 0, -1, 5, 47, -1, 6, 51, -1, 7, -1, 3, -1, 4, -1, 38, 47, -1, 47, 36, 47, -1, 47, 37, 47, -1, 48, -1, 14, 54, -1, 54, 15, 54, -1, 39, 47, 40, -1, 7, -1, 54, 20, 54, -1, 54, 21, 54, -1, 54, 22, 54, -1, 54, 23, 54, -1, 54, 24, 54, -1, 54, 25, 54, -1, 54, 29, 54, -1, 54, 30, 54, -1, 54, 31, 54, -1, 54, 32, 54, -1, 54, 33, 54, -1, 54, 34, 54, -1, 54, 28, 49, -1, 54, 26, 55, -1, 54, 27, 55, -1, 57, -1, 41, 50, 42, -1, 54, -1, 50, 43, 54, -1, 51, 52, -1, 52, -1, 7, -1, 10, -1, 53, -1, 56, -1, 18, 9, 19, -1, 18, 9, 44, 51, 19, -1, 8, -1, 54, 35, 54, -1, 53, -1, 56, -1, 58, -1, 16, 51, 17, -1, 16, 17, -1, 11, -1, 12, -1, 13, -1, 9, 39, 54, 40, -1, 9, 39, 54, 40, -1 }; /* YYRLINE[YYN] -- source line where rule number YYN was defined. */ static const yytype_uint8 yyrline[] = { 0, 112, 112, 113, 114, 117, 118, 119, 120, 121, 122, 123, 124, 125, 126, 129, 130, 131, 132, 133, 134, 135, 136, 137, 138, 139, 140, 141, 142, 143, 146, 147, 150, 151, 154, 155, 156, 159, 160, 161, 164, 165, 168, 169, 170, 171, 172, 173, 174, 177, 186, 197, 204, 207 }; #endif #if YYDEBUG || YYERROR_VERBOSE || YYTOKEN_TABLE /* YYTNAME[SYMBOL-NUM] -- String name of the symbol SYMBOL-NUM. First, the terminals, then, starting at YYNTOKENS, nonterminals. */ static const char *const yytname[] = { "$end", "error", "$undefined", "T_TRUE", "T_FALSE", "T_EXPR_BOOL", "T_EXPR_STRING", "T_ERROR", "T_DIGIT", "T_ID", "T_STRING", "T_REGEX", "T_REGEX_I", "T_REGEX_BACKREF", "T_OP_UNARY", "T_OP_BINARY", "T_STR_BEGIN", "T_STR_END", "T_VAR_BEGIN", "T_VAR_END", "T_OP_EQ", "T_OP_NE", "T_OP_LT", "T_OP_LE", "T_OP_GT", "T_OP_GE", "T_OP_REG", "T_OP_NRE", "T_OP_IN", "T_OP_STR_EQ", "T_OP_STR_NE", "T_OP_STR_LT", "T_OP_STR_LE", "T_OP_STR_GT", "T_OP_STR_GE", "T_OP_CONCAT", "T_OP_OR", "T_OP_AND", "T_OP_NOT", "'('", "')'", "'{'", "'}'", "','", "':'", "$accept", "root", "expr", "comparison", "wordlist", "words", "string", "strpart", "var", "word", "regex", "backref", "lstfunccall", "strfunccall", 0 }; #endif # ifdef YYPRINT /* YYTOKNUM[YYLEX-NUM] -- Internal token number corresponding to token YYLEX-NUM. */ static const yytype_uint16 yytoknum[] = { 0, 256, 257, 258, 259, 260, 261, 262, 263, 264, 265, 266, 267, 268, 269, 270, 271, 272, 273, 274, 275, 276, 277, 278, 279, 280, 281, 282, 283, 284, 285, 286, 287, 288, 289, 290, 291, 292, 293, 40, 41, 123, 125, 44, 58 }; # endif /* YYR1[YYN] -- Symbol number of symbol that rule YYN derives. */ static const yytype_uint8 yyr1[] = { 0, 45, 46, 46, 46, 47, 47, 47, 47, 47, 47, 47, 47, 47, 47, 48, 48, 48, 48, 48, 48, 48, 48, 48, 48, 48, 48, 48, 48, 48, 49, 49, 50, 50, 51, 51, 51, 52, 52, 52, 53, 53, 54, 54, 54, 54, 54, 54, 54, 55, 55, 56, 57, 58 }; /* YYR2[YYN] -- Number of symbols composing right hand side of rule YYN. */ static const yytype_uint8 yyr2[] = { 0, 2, 2, 2, 1, 1, 1, 2, 3, 3, 1, 2, 3, 3, 1, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 3, 1, 3, 2, 1, 1, 1, 1, 1, 3, 5, 1, 3, 1, 1, 1, 3, 2, 1, 1, 1, 4, 4 }; /* YYDEFACT[STATE-NAME] -- Default reduction number in state STATE-NUM. Performed when YYTABLE doesn't specify something else to do. Zero means the default is an error. */ static const yytype_uint8 yydefact[] = { 0, 0, 0, 4, 0, 5, 6, 14, 42, 0, 51, 0, 0, 0, 0, 0, 2, 10, 44, 0, 45, 46, 36, 37, 3, 35, 38, 39, 1, 0, 11, 48, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 34, 0, 47, 40, 0, 13, 8, 9, 12, 15, 16, 17, 18, 19, 20, 49, 50, 28, 29, 0, 0, 27, 30, 21, 22, 23, 24, 25, 26, 43, 53, 0, 0, 0, 32, 41, 0, 31, 0, 52, 33 }; /* YYDEFGOTO[NTERM-NUM]. */ static const yytype_int8 yydefgoto[] = { -1, 4, 16, 17, 76, 88, 24, 25, 18, 19, 72, 20, 77, 21 }; /* YYPACT[STATE-NUM] -- Index in YYTABLE of the portion describing STATE-NUM. */ #define YYPACT_NINF -35 static const yytype_int8 yypact[] = { 48, 60, 73, -35, 7, -35, -35, -35, -35, -34, -35, 43, 8, 11, 60, 60, 86, -35, -35, 80, -35, -35, -35, -35, 108, -35, -35, -35, -35, 43, 25, -35, 79, -17, -35, -8, 60, 60, 43, 43, 43, 43, 43, 43, 43, 5, 5, 0, 43, 43, 43, 43, 43, 43, 43, -35, -27, -35, -35, 73, -35, 86, 3, 25, 25, 25, 25, 25, 25, 25, -35, -35, -35, -35, 23, 43, -35, -35, 25, 25, 25, 25, 25, 25, 25, -35, 106, 43, 85, 25, -35, -21, -35, 43, -35, 25 }; /* YYPGOTO[NTERM-NUM]. */ static const yytype_int8 yypgoto[] = { -35, -35, 57, -35, -35, -35, -9, -20, -2, -5, -4, -1, -35, -35 }; /* YYTABLE[YYPACT[STATE-NUM]]. What to do in state STATE-NUM. If positive, shift that token. If negative, reduce the rule which number is the opposite. If YYTABLE_NINF, syntax error. */ #define YYTABLE_NINF -1 static const yytype_uint8 yytable[] = { 26, 27, 58, 32, 55, 29, 30, 28, 54, 74, 26, 27, 55, 85, 54, 22, 70, 71, 23, 94, 33, 10, 26, 27, 56, 31, 13, 59, 36, 37, 26, 27, 60, 63, 64, 65, 66, 67, 68, 69, 37, 75, 73, 78, 79, 80, 81, 82, 83, 84, 86, 8, 9, 1, 2, 3, 10, 26, 27, 12, 54, 13, 87, 5, 6, 0, 55, 7, 8, 9, 89, 34, 35, 10, 11, 0, 12, 0, 13, 0, 22, 0, 91, 23, 26, 27, 10, 0, 95, 23, 0, 13, 10, 61, 62, 38, 57, 13, 14, 15, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 23, 0, 23, 10, 0, 10, 36, 37, 13, 90, 13, 92, 93 }; #define yypact_value_is_default(yystate) \ ((yystate) == (-35)) #define yytable_value_is_error(yytable_value) \ YYID (0) static const yytype_int8 yycheck[] = { 2, 2, 19, 12, 24, 39, 11, 0, 35, 9, 12, 12, 32, 40, 35, 7, 11, 12, 10, 40, 9, 13, 24, 24, 29, 17, 18, 44, 36, 37, 32, 32, 40, 38, 39, 40, 41, 42, 43, 44, 37, 41, 46, 48, 49, 50, 51, 52, 53, 54, 59, 8, 9, 5, 6, 7, 13, 59, 59, 16, 35, 18, 39, 3, 4, -1, 86, 7, 8, 9, 75, 14, 15, 13, 14, -1, 16, -1, 18, -1, 7, -1, 87, 10, 86, 86, 13, -1, 93, 10, -1, 18, 13, 36, 37, 15, 17, 18, 38, 39, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 10, -1, 10, 13, -1, 13, 36, 37, 18, 19, 18, 42, 43 }; /* YYSTOS[STATE-NUM] -- The (internal number of the) accessing symbol of state STATE-NUM. */ static const yytype_uint8 yystos[] = { 0, 5, 6, 7, 46, 3, 4, 7, 8, 9, 13, 14, 16, 18, 38, 39, 47, 48, 53, 54, 56, 58, 7, 10, 51, 52, 53, 56, 0, 39, 54, 17, 51, 9, 47, 47, 36, 37, 15, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 52, 54, 17, 19, 44, 40, 47, 47, 54, 54, 54, 54, 54, 54, 54, 11, 12, 55, 55, 9, 41, 49, 57, 54, 54, 54, 54, 54, 54, 54, 40, 51, 39, 50, 54, 19, 54, 42, 43, 40, 54 }; #define yyerrok (yyerrstatus = 0) #define yyclearin (yychar = YYEMPTY) #define YYEMPTY (-2) #define YYEOF 0 #define YYACCEPT goto yyacceptlab #define YYABORT goto yyabortlab #define YYERROR goto yyerrorlab /* Like YYERROR except do call yyerror. This remains here temporarily to ease the transition to the new meaning of YYERROR, for GCC. Once GCC version 2 has supplanted version 1, this can go. However, YYFAIL appears to be in use. Nevertheless, it is formally deprecated in Bison 2.4.2's NEWS entry, where a plan to phase it out is discussed. */ #define YYFAIL goto yyerrlab #if defined YYFAIL /* This is here to suppress warnings from the GCC cpp's -Wunused-macros. Normally we don't worry about that warning, but some users do, and we want to make it easy for users to remove YYFAIL uses, which will produce warnings from Bison 2.5. */ #endif #define YYRECOVERING() (!!yyerrstatus) #define YYBACKUP(Token, Value) \ do \ if (yychar == YYEMPTY && yylen == 1) \ { \ yychar = (Token); \ yylval = (Value); \ YYPOPSTACK (1); \ goto yybackup; \ } \ else \ { \ yyerror (ctx, YY_("syntax error: cannot back up")); \ YYERROR; \ } \ while (YYID (0)) #define YYTERROR 1 #define YYERRCODE 256 /* YYLLOC_DEFAULT -- Set CURRENT to span from RHS[1] to RHS[N]. If N is 0, then set CURRENT to the empty location which ends the previous symbol: RHS[0] (always defined). */ #define YYRHSLOC(Rhs, K) ((Rhs)[K]) #ifndef YYLLOC_DEFAULT # define YYLLOC_DEFAULT(Current, Rhs, N) \ do \ if (YYID (N)) \ { \ (Current).first_line = YYRHSLOC (Rhs, 1).first_line; \ (Current).first_column = YYRHSLOC (Rhs, 1).first_column; \ (Current).last_line = YYRHSLOC (Rhs, N).last_line; \ (Current).last_column = YYRHSLOC (Rhs, N).last_column; \ } \ else \ { \ (Current).first_line = (Current).last_line = \ YYRHSLOC (Rhs, 0).last_line; \ (Current).first_column = (Current).last_column = \ YYRHSLOC (Rhs, 0).last_column; \ } \ while (YYID (0)) #endif /* This macro is provided for backward compatibility. */ #ifndef YY_LOCATION_PRINT # define YY_LOCATION_PRINT(File, Loc) ((void) 0) #endif /* YYLEX -- calling `yylex' with the right arguments. */ #ifdef YYLEX_PARAM # define YYLEX yylex (&yylval, YYLEX_PARAM) #else # define YYLEX yylex (&yylval, yyscanner) #endif /* Enable debugging if requested. */ #if YYDEBUG # ifndef YYFPRINTF # include /* INFRINGES ON USER NAME SPACE */ # define YYFPRINTF fprintf # endif # define YYDPRINTF(Args) \ do { \ if (yydebug) \ YYFPRINTF Args; \ } while (YYID (0)) # define YY_SYMBOL_PRINT(Title, Type, Value, Location) \ do { \ if (yydebug) \ { \ YYFPRINTF (stderr, "%s ", Title); \ yy_symbol_print (stderr, \ Type, Value, ctx); \ YYFPRINTF (stderr, "\n"); \ } \ } while (YYID (0)) /*--------------------------------. | Print this symbol on YYOUTPUT. | `--------------------------------*/ /*ARGSUSED*/ #if (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) static void yy_symbol_value_print (FILE *yyoutput, int yytype, YYSTYPE const * const yyvaluep, ap_expr_parse_ctx_t *ctx) #else static void yy_symbol_value_print (yyoutput, yytype, yyvaluep, ctx) FILE *yyoutput; int yytype; YYSTYPE const * const yyvaluep; ap_expr_parse_ctx_t *ctx; #endif { if (!yyvaluep) return; YYUSE (ctx); # ifdef YYPRINT if (yytype < YYNTOKENS) YYPRINT (yyoutput, yytoknum[yytype], *yyvaluep); # else YYUSE (yyoutput); # endif switch (yytype) { default: break; } } /*--------------------------------. | Print this symbol on YYOUTPUT. | `--------------------------------*/ #if (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) static void yy_symbol_print (FILE *yyoutput, int yytype, YYSTYPE const * const yyvaluep, ap_expr_parse_ctx_t *ctx) #else static void yy_symbol_print (yyoutput, yytype, yyvaluep, ctx) FILE *yyoutput; int yytype; YYSTYPE const * const yyvaluep; ap_expr_parse_ctx_t *ctx; #endif { if (yytype < YYNTOKENS) YYFPRINTF (yyoutput, "token %s (", yytname[yytype]); else YYFPRINTF (yyoutput, "nterm %s (", yytname[yytype]); yy_symbol_value_print (yyoutput, yytype, yyvaluep, ctx); YYFPRINTF (yyoutput, ")"); } /*------------------------------------------------------------------. | yy_stack_print -- Print the state stack from its BOTTOM up to its | | TOP (included). | `------------------------------------------------------------------*/ #if (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) static void yy_stack_print (yytype_int16 *yybottom, yytype_int16 *yytop) #else static void yy_stack_print (yybottom, yytop) yytype_int16 *yybottom; yytype_int16 *yytop; #endif { YYFPRINTF (stderr, "Stack now"); for (; yybottom <= yytop; yybottom++) { int yybot = *yybottom; YYFPRINTF (stderr, " %d", yybot); } YYFPRINTF (stderr, "\n"); } # define YY_STACK_PRINT(Bottom, Top) \ do { \ if (yydebug) \ yy_stack_print ((Bottom), (Top)); \ } while (YYID (0)) /*------------------------------------------------. | Report that the YYRULE is going to be reduced. | `------------------------------------------------*/ #if (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) static void yy_reduce_print (YYSTYPE *yyvsp, int yyrule, ap_expr_parse_ctx_t *ctx) #else static void yy_reduce_print (yyvsp, yyrule, ctx) YYSTYPE *yyvsp; int yyrule; ap_expr_parse_ctx_t *ctx; #endif { int yynrhs = yyr2[yyrule]; int yyi; unsigned long int yylno = yyrline[yyrule]; YYFPRINTF (stderr, "Reducing stack by rule %d (line %lu):\n", yyrule - 1, yylno); /* The symbols being reduced. */ for (yyi = 0; yyi < yynrhs; yyi++) { YYFPRINTF (stderr, " $%d = ", yyi + 1); yy_symbol_print (stderr, yyrhs[yyprhs[yyrule] + yyi], &(yyvsp[(yyi + 1) - (yynrhs)]) , ctx); YYFPRINTF (stderr, "\n"); } } # define YY_REDUCE_PRINT(Rule) \ do { \ if (yydebug) \ yy_reduce_print (yyvsp, Rule, ctx); \ } while (YYID (0)) /* Nonzero means print parse trace. It is left uninitialized so that multiple parsers can coexist. */ int yydebug; #else /* !YYDEBUG */ # define YYDPRINTF(Args) # define YY_SYMBOL_PRINT(Title, Type, Value, Location) # define YY_STACK_PRINT(Bottom, Top) # define YY_REDUCE_PRINT(Rule) #endif /* !YYDEBUG */ /* YYINITDEPTH -- initial size of the parser's stacks. */ #ifndef YYINITDEPTH # define YYINITDEPTH 200 #endif /* YYMAXDEPTH -- maximum size the stacks can grow to (effective only if the built-in stack extension method is used). Do not make this value too large; the results are undefined if YYSTACK_ALLOC_MAXIMUM < YYSTACK_BYTES (YYMAXDEPTH) evaluated with infinite-precision integer arithmetic. */ #ifndef YYMAXDEPTH # define YYMAXDEPTH 10000 #endif #if YYERROR_VERBOSE # ifndef yystrlen # if defined __GLIBC__ && defined _STRING_H # define yystrlen strlen # else /* Return the length of YYSTR. */ #if (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) static YYSIZE_T yystrlen (const char *yystr) #else static YYSIZE_T yystrlen (yystr) const char *yystr; #endif { YYSIZE_T yylen; for (yylen = 0; yystr[yylen]; yylen++) continue; return yylen; } # endif # endif # ifndef yystpcpy # if defined __GLIBC__ && defined _STRING_H && defined _GNU_SOURCE # define yystpcpy stpcpy # else /* Copy YYSRC to YYDEST, returning the address of the terminating '\0' in YYDEST. */ #if (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) static char * yystpcpy (char *yydest, const char *yysrc) #else static char * yystpcpy (yydest, yysrc) char *yydest; const char *yysrc; #endif { char *yyd = yydest; const char *yys = yysrc; while ((*yyd++ = *yys++) != '\0') continue; return yyd - 1; } # endif # endif # ifndef yytnamerr /* Copy to YYRES the contents of YYSTR after stripping away unnecessary quotes and backslashes, so that it's suitable for yyerror. The heuristic is that double-quoting is unnecessary unless the string contains an apostrophe, a comma, or backslash (other than backslash-backslash). YYSTR is taken from yytname. If YYRES is null, do not copy; instead, return the length of what the result would have been. */ static YYSIZE_T yytnamerr (char *yyres, const char *yystr) { if (*yystr == '"') { YYSIZE_T yyn = 0; char const *yyp = yystr; for (;;) switch (*++yyp) { case '\'': case ',': goto do_not_strip_quotes; case '\\': if (*++yyp != '\\') goto do_not_strip_quotes; /* Fall through. */ default: if (yyres) yyres[yyn] = *yyp; yyn++; break; case '"': if (yyres) yyres[yyn] = '\0'; return yyn; } do_not_strip_quotes: ; } if (! yyres) return yystrlen (yystr); return yystpcpy (yyres, yystr) - yyres; } # endif /* Copy into *YYMSG, which is of size *YYMSG_ALLOC, an error message about the unexpected token YYTOKEN for the state stack whose top is YYSSP. Return 0 if *YYMSG was successfully written. Return 1 if *YYMSG is not large enough to hold the message. In that case, also set *YYMSG_ALLOC to the required number of bytes. Return 2 if the required number of bytes is too large to store. */ static int yysyntax_error (YYSIZE_T *yymsg_alloc, char **yymsg, yytype_int16 *yyssp, int yytoken) { YYSIZE_T yysize0 = yytnamerr (0, yytname[yytoken]); YYSIZE_T yysize = yysize0; YYSIZE_T yysize1; enum { YYERROR_VERBOSE_ARGS_MAXIMUM = 5 }; /* Internationalized format string. */ const char *yyformat = 0; /* Arguments of yyformat. */ char const *yyarg[YYERROR_VERBOSE_ARGS_MAXIMUM]; /* Number of reported tokens (one for the "unexpected", one per "expected"). */ int yycount = 0; /* There are many possibilities here to consider: - Assume YYFAIL is not used. It's too flawed to consider. See for details. YYERROR is fine as it does not invoke this function. - If this state is a consistent state with a default action, then the only way this function was invoked is if the default action is an error action. In that case, don't check for expected tokens because there are none. - The only way there can be no lookahead present (in yychar) is if this state is a consistent state with a default action. Thus, detecting the absence of a lookahead is sufficient to determine that there is no unexpected or expected token to report. In that case, just report a simple "syntax error". - Don't assume there isn't a lookahead just because this state is a consistent state with a default action. There might have been a previous inconsistent state, consistent state with a non-default action, or user semantic action that manipulated yychar. - Of course, the expected token list depends on states to have correct lookahead information, and it depends on the parser not to perform extra reductions after fetching a lookahead from the scanner and before detecting a syntax error. Thus, state merging (from LALR or IELR) and default reductions corrupt the expected token list. However, the list is correct for canonical LR with one exception: it will still contain any token that will not be accepted due to an error action in a later state. */ if (yytoken != YYEMPTY) { int yyn = yypact[*yyssp]; yyarg[yycount++] = yytname[yytoken]; if (!yypact_value_is_default (yyn)) { /* Start YYX at -YYN if negative to avoid negative indexes in YYCHECK. In other words, skip the first -YYN actions for this state because they are default actions. */ int yyxbegin = yyn < 0 ? -yyn : 0; /* Stay within bounds of both yycheck and yytname. */ int yychecklim = YYLAST - yyn + 1; int yyxend = yychecklim < YYNTOKENS ? yychecklim : YYNTOKENS; int yyx; for (yyx = yyxbegin; yyx < yyxend; ++yyx) if (yycheck[yyx + yyn] == yyx && yyx != YYTERROR && !yytable_value_is_error (yytable[yyx + yyn])) { if (yycount == YYERROR_VERBOSE_ARGS_MAXIMUM) { yycount = 1; yysize = yysize0; break; } yyarg[yycount++] = yytname[yyx]; yysize1 = yysize + yytnamerr (0, yytname[yyx]); if (! (yysize <= yysize1 && yysize1 <= YYSTACK_ALLOC_MAXIMUM)) return 2; yysize = yysize1; } } } switch (yycount) { # define YYCASE_(N, S) \ case N: \ yyformat = S; \ break YYCASE_(0, YY_("syntax error")); YYCASE_(1, YY_("syntax error, unexpected %s")); YYCASE_(2, YY_("syntax error, unexpected %s, expecting %s")); YYCASE_(3, YY_("syntax error, unexpected %s, expecting %s or %s")); YYCASE_(4, YY_("syntax error, unexpected %s, expecting %s or %s or %s")); YYCASE_(5, YY_("syntax error, unexpected %s, expecting %s or %s or %s or %s")); # undef YYCASE_ } yysize1 = yysize + yystrlen (yyformat); if (! (yysize <= yysize1 && yysize1 <= YYSTACK_ALLOC_MAXIMUM)) return 2; yysize = yysize1; if (*yymsg_alloc < yysize) { *yymsg_alloc = 2 * yysize; if (! (yysize <= *yymsg_alloc && *yymsg_alloc <= YYSTACK_ALLOC_MAXIMUM)) *yymsg_alloc = YYSTACK_ALLOC_MAXIMUM; return 1; } /* Avoid sprintf, as that infringes on the user's name space. Don't have undefined behavior even if the translation produced a string with the wrong number of "%s"s. */ { char *yyp = *yymsg; int yyi = 0; while ((*yyp = *yyformat) != '\0') if (*yyp == '%' && yyformat[1] == 's' && yyi < yycount) { yyp += yytnamerr (yyp, yyarg[yyi++]); yyformat += 2; } else { yyp++; yyformat++; } } return 0; } #endif /* YYERROR_VERBOSE */ /*-----------------------------------------------. | Release the memory associated to this symbol. | `-----------------------------------------------*/ /*ARGSUSED*/ #if (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) static void yydestruct (const char *yymsg, int yytype, YYSTYPE *yyvaluep, ap_expr_parse_ctx_t *ctx) #else static void yydestruct (yymsg, yytype, yyvaluep, ctx) const char *yymsg; int yytype; YYSTYPE *yyvaluep; ap_expr_parse_ctx_t *ctx; #endif { YYUSE (yyvaluep); YYUSE (ctx); if (!yymsg) yymsg = "Deleting"; YY_SYMBOL_PRINT (yymsg, yytype, yyvaluep, yylocationp); switch (yytype) { default: break; } } /* Prevent warnings from -Wmissing-prototypes. */ #ifdef YYPARSE_PARAM #if defined __STDC__ || defined __cplusplus int yyparse (void *YYPARSE_PARAM); #else int yyparse (); #endif #else /* ! YYPARSE_PARAM */ #if defined __STDC__ || defined __cplusplus int yyparse (ap_expr_parse_ctx_t *ctx); #else int yyparse (); #endif #endif /* ! YYPARSE_PARAM */ /*----------. | yyparse. | `----------*/ #ifdef YYPARSE_PARAM #if (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) int yyparse (void *YYPARSE_PARAM) #else int yyparse (YYPARSE_PARAM) void *YYPARSE_PARAM; #endif #else /* ! YYPARSE_PARAM */ #if (defined __STDC__ || defined __C99__FUNC__ \ || defined __cplusplus || defined _MSC_VER) int yyparse (ap_expr_parse_ctx_t *ctx) #else int yyparse (ctx) ap_expr_parse_ctx_t *ctx; #endif #endif { /* The lookahead symbol. */ int yychar; /* The semantic value of the lookahead symbol. */ YYSTYPE yylval; /* Number of syntax errors so far. */ int yynerrs; int yystate; /* Number of tokens to shift before error messages enabled. */ int yyerrstatus; /* The stacks and their tools: `yyss': related to states. `yyvs': related to semantic values. Refer to the stacks thru separate pointers, to allow yyoverflow to reallocate them elsewhere. */ /* The state stack. */ yytype_int16 yyssa[YYINITDEPTH]; yytype_int16 *yyss; yytype_int16 *yyssp; /* The semantic value stack. */ YYSTYPE yyvsa[YYINITDEPTH]; YYSTYPE *yyvs; YYSTYPE *yyvsp; YYSIZE_T yystacksize; int yyn; int yyresult; /* Lookahead token as an internal (translated) token number. */ int yytoken; /* The variables used to return semantic value and location from the action routines. */ YYSTYPE yyval; #if YYERROR_VERBOSE /* Buffer for error messages, and its allocated size. */ char yymsgbuf[128]; char *yymsg = yymsgbuf; YYSIZE_T yymsg_alloc = sizeof yymsgbuf; #endif #define YYPOPSTACK(N) (yyvsp -= (N), yyssp -= (N)) /* The number of symbols on the RHS of the reduced rule. Keep to zero when no symbol should be popped. */ int yylen = 0; yytoken = 0; yyss = yyssa; yyvs = yyvsa; yystacksize = YYINITDEPTH; YYDPRINTF ((stderr, "Starting parse\n")); yystate = 0; yyerrstatus = 0; yynerrs = 0; yychar = YYEMPTY; /* Cause a token to be read. */ /* Initialize stack pointers. Waste one element of value and location stack so that they stay on the same level as the state stack. The wasted elements are never initialized. */ yyssp = yyss; yyvsp = yyvs; goto yysetstate; /*------------------------------------------------------------. | yynewstate -- Push a new state, which is found in yystate. | `------------------------------------------------------------*/ yynewstate: /* In all cases, when you get here, the value and location stacks have just been pushed. So pushing a state here evens the stacks. */ yyssp++; yysetstate: *yyssp = yystate; if (yyss + yystacksize - 1 <= yyssp) { /* Get the current used size of the three stacks, in elements. */ YYSIZE_T yysize = yyssp - yyss + 1; #ifdef yyoverflow { /* Give user a chance to reallocate the stack. Use copies of these so that the &'s don't force the real ones into memory. */ YYSTYPE *yyvs1 = yyvs; yytype_int16 *yyss1 = yyss; /* Each stack pointer address is followed by the size of the data in use in that stack, in bytes. This used to be a conditional around just the two extra args, but that might be undefined if yyoverflow is a macro. */ yyoverflow (YY_("memory exhausted"), &yyss1, yysize * sizeof (*yyssp), &yyvs1, yysize * sizeof (*yyvsp), &yystacksize); yyss = yyss1; yyvs = yyvs1; } #else /* no yyoverflow */ # ifndef YYSTACK_RELOCATE goto yyexhaustedlab; # else /* Extend the stack our own way. */ if (YYMAXDEPTH <= yystacksize) goto yyexhaustedlab; yystacksize *= 2; if (YYMAXDEPTH < yystacksize) yystacksize = YYMAXDEPTH; { yytype_int16 *yyss1 = yyss; union yyalloc *yyptr = (union yyalloc *) YYSTACK_ALLOC (YYSTACK_BYTES (yystacksize)); if (! yyptr) goto yyexhaustedlab; YYSTACK_RELOCATE (yyss_alloc, yyss); YYSTACK_RELOCATE (yyvs_alloc, yyvs); # undef YYSTACK_RELOCATE if (yyss1 != yyssa) YYSTACK_FREE (yyss1); } # endif #endif /* no yyoverflow */ yyssp = yyss + yysize - 1; yyvsp = yyvs + yysize - 1; YYDPRINTF ((stderr, "Stack size increased to %lu\n", (unsigned long int) yystacksize)); if (yyss + yystacksize - 1 <= yyssp) YYABORT; } YYDPRINTF ((stderr, "Entering state %d\n", yystate)); if (yystate == YYFINAL) YYACCEPT; goto yybackup; /*-----------. | yybackup. | `-----------*/ yybackup: /* Do appropriate processing given the current state. Read a lookahead token if we need one and don't already have one. */ /* First try to decide what to do without reference to lookahead token. */ yyn = yypact[yystate]; if (yypact_value_is_default (yyn)) goto yydefault; /* Not known => get a lookahead token if don't already have one. */ /* YYCHAR is either YYEMPTY or YYEOF or a valid lookahead symbol. */ if (yychar == YYEMPTY) { YYDPRINTF ((stderr, "Reading a token: ")); yychar = YYLEX; } if (yychar <= YYEOF) { yychar = yytoken = YYEOF; YYDPRINTF ((stderr, "Now at end of input.\n")); } else { yytoken = YYTRANSLATE (yychar); YY_SYMBOL_PRINT ("Next token is", yytoken, &yylval, &yylloc); } /* If the proper action on seeing token YYTOKEN is to reduce or to detect an error, take that action. */ yyn += yytoken; if (yyn < 0 || YYLAST < yyn || yycheck[yyn] != yytoken) goto yydefault; yyn = yytable[yyn]; if (yyn <= 0) { if (yytable_value_is_error (yyn)) goto yyerrlab; yyn = -yyn; goto yyreduce; } /* Count tokens shifted since error; after three, turn off error status. */ if (yyerrstatus) yyerrstatus--; /* Shift the lookahead token. */ YY_SYMBOL_PRINT ("Shifting", yytoken, &yylval, &yylloc); /* Discard the shifted token. */ yychar = YYEMPTY; yystate = yyn; *++yyvsp = yylval; goto yynewstate; /*-----------------------------------------------------------. | yydefault -- do the default action for the current state. | `-----------------------------------------------------------*/ yydefault: yyn = yydefact[yystate]; if (yyn == 0) goto yyerrlab; goto yyreduce; /*-----------------------------. | yyreduce -- Do a reduction. | `-----------------------------*/ yyreduce: /* yyn is the number of a rule to reduce with. */ yylen = yyr2[yyn]; /* If YYLEN is nonzero, implement the default value of the action: `$$ = $1'. Otherwise, the following line sets YYVAL to garbage. This behavior is undocumented and Bison users should not rely upon it. Assigning to YYVAL unconditionally makes the parser a bit smaller, and it avoids a GCC warning that YYVAL may be used uninitialized. */ yyval = yyvsp[1-yylen]; YY_REDUCE_PRINT (yyn); switch (yyn) { case 2: /* Line 1806 of yacc.c */ #line 112 "util_expr_parse.y" { ctx->expr = (yyvsp[(2) - (2)].exVal); } break; case 3: /* Line 1806 of yacc.c */ #line 113 "util_expr_parse.y" { ctx->expr = (yyvsp[(2) - (2)].exVal); } break; case 4: /* Line 1806 of yacc.c */ #line 114 "util_expr_parse.y" { YYABORT; } break; case 5: /* Line 1806 of yacc.c */ #line 117 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_True, NULL, NULL, ctx); } break; case 6: /* Line 1806 of yacc.c */ #line 118 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_False, NULL, NULL, ctx); } break; case 7: /* Line 1806 of yacc.c */ #line 119 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_Not, (yyvsp[(2) - (2)].exVal), NULL, ctx); } break; case 8: /* Line 1806 of yacc.c */ #line 120 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_Or, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 9: /* Line 1806 of yacc.c */ #line 121 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_And, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 10: /* Line 1806 of yacc.c */ #line 122 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_Comp, (yyvsp[(1) - (1)].exVal), NULL, ctx); } break; case 11: /* Line 1806 of yacc.c */ #line 123 "util_expr_parse.y" { (yyval.exVal) = ap_expr_unary_op_make( (yyvsp[(1) - (2)].cpVal), (yyvsp[(2) - (2)].exVal), ctx); } break; case 12: /* Line 1806 of yacc.c */ #line 124 "util_expr_parse.y" { (yyval.exVal) = ap_expr_binary_op_make((yyvsp[(2) - (3)].cpVal), (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 13: /* Line 1806 of yacc.c */ #line 125 "util_expr_parse.y" { (yyval.exVal) = (yyvsp[(2) - (3)].exVal); } break; case 14: /* Line 1806 of yacc.c */ #line 126 "util_expr_parse.y" { YYABORT; } break; case 15: /* Line 1806 of yacc.c */ #line 129 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_EQ, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 16: /* Line 1806 of yacc.c */ #line 130 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_NE, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 17: /* Line 1806 of yacc.c */ #line 131 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_LT, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 18: /* Line 1806 of yacc.c */ #line 132 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_LE, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 19: /* Line 1806 of yacc.c */ #line 133 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_GT, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 20: /* Line 1806 of yacc.c */ #line 134 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_GE, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 21: /* Line 1806 of yacc.c */ #line 135 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_STR_EQ, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 22: /* Line 1806 of yacc.c */ #line 136 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_STR_NE, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 23: /* Line 1806 of yacc.c */ #line 137 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_STR_LT, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 24: /* Line 1806 of yacc.c */ #line 138 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_STR_LE, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 25: /* Line 1806 of yacc.c */ #line 139 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_STR_GT, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 26: /* Line 1806 of yacc.c */ #line 140 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_STR_GE, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 27: /* Line 1806 of yacc.c */ #line 141 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_IN, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 28: /* Line 1806 of yacc.c */ #line 142 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_REG, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 29: /* Line 1806 of yacc.c */ #line 143 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_NRE, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 30: /* Line 1806 of yacc.c */ #line 146 "util_expr_parse.y" { (yyval.exVal) = (yyvsp[(1) - (1)].exVal); } break; case 31: /* Line 1806 of yacc.c */ #line 147 "util_expr_parse.y" { (yyval.exVal) = (yyvsp[(2) - (3)].exVal); } break; case 32: /* Line 1806 of yacc.c */ #line 150 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_ListElement, (yyvsp[(1) - (1)].exVal), NULL, ctx); } break; case 33: /* Line 1806 of yacc.c */ #line 151 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_ListElement, (yyvsp[(3) - (3)].exVal), (yyvsp[(1) - (3)].exVal), ctx); } break; case 34: /* Line 1806 of yacc.c */ #line 154 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_Concat, (yyvsp[(1) - (2)].exVal), (yyvsp[(2) - (2)].exVal), ctx); } break; case 35: /* Line 1806 of yacc.c */ #line 155 "util_expr_parse.y" { (yyval.exVal) = (yyvsp[(1) - (1)].exVal); } break; case 36: /* Line 1806 of yacc.c */ #line 156 "util_expr_parse.y" { YYABORT; } break; case 37: /* Line 1806 of yacc.c */ #line 159 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_String, (yyvsp[(1) - (1)].cpVal), NULL, ctx); } break; case 38: /* Line 1806 of yacc.c */ #line 160 "util_expr_parse.y" { (yyval.exVal) = (yyvsp[(1) - (1)].exVal); } break; case 39: /* Line 1806 of yacc.c */ #line 161 "util_expr_parse.y" { (yyval.exVal) = (yyvsp[(1) - (1)].exVal); } break; case 40: /* Line 1806 of yacc.c */ #line 164 "util_expr_parse.y" { (yyval.exVal) = ap_expr_var_make((yyvsp[(2) - (3)].cpVal), ctx); } break; case 41: /* Line 1806 of yacc.c */ #line 165 "util_expr_parse.y" { (yyval.exVal) = ap_expr_str_func_make((yyvsp[(2) - (5)].cpVal), (yyvsp[(4) - (5)].exVal), ctx); } break; case 42: /* Line 1806 of yacc.c */ #line 168 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_Digit, (yyvsp[(1) - (1)].cpVal), NULL, ctx); } break; case 43: /* Line 1806 of yacc.c */ #line 169 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_Concat, (yyvsp[(1) - (3)].exVal), (yyvsp[(3) - (3)].exVal), ctx); } break; case 44: /* Line 1806 of yacc.c */ #line 170 "util_expr_parse.y" { (yyval.exVal) = (yyvsp[(1) - (1)].exVal); } break; case 45: /* Line 1806 of yacc.c */ #line 171 "util_expr_parse.y" { (yyval.exVal) = (yyvsp[(1) - (1)].exVal); } break; case 46: /* Line 1806 of yacc.c */ #line 172 "util_expr_parse.y" { (yyval.exVal) = (yyvsp[(1) - (1)].exVal); } break; case 47: /* Line 1806 of yacc.c */ #line 173 "util_expr_parse.y" { (yyval.exVal) = (yyvsp[(2) - (3)].exVal); } break; case 48: /* Line 1806 of yacc.c */ #line 174 "util_expr_parse.y" { (yyval.exVal) = ap_expr_make(op_String, "", NULL, ctx); } break; case 49: /* Line 1806 of yacc.c */ #line 177 "util_expr_parse.y" { ap_regex_t *regex; if ((regex = ap_pregcomp(ctx->pool, (yyvsp[(1) - (1)].cpVal), AP_REG_EXTENDED|AP_REG_NOSUB)) == NULL) { ctx->error = "Failed to compile regular expression"; YYERROR; } (yyval.exVal) = ap_expr_make(op_Regex, regex, NULL, ctx); } break; case 50: /* Line 1806 of yacc.c */ #line 186 "util_expr_parse.y" { ap_regex_t *regex; if ((regex = ap_pregcomp(ctx->pool, (yyvsp[(1) - (1)].cpVal), AP_REG_EXTENDED|AP_REG_NOSUB|AP_REG_ICASE)) == NULL) { ctx->error = "Failed to compile regular expression"; YYERROR; } (yyval.exVal) = ap_expr_make(op_Regex, regex, NULL, ctx); } break; case 51: /* Line 1806 of yacc.c */ #line 197 "util_expr_parse.y" { int *n = apr_palloc(ctx->pool, sizeof(int)); *n = (yyvsp[(1) - (1)].num); (yyval.exVal) = ap_expr_make(op_RegexBackref, n, NULL, ctx); } break; case 52: /* Line 1806 of yacc.c */ #line 204 "util_expr_parse.y" { (yyval.exVal) = ap_expr_list_func_make((yyvsp[(1) - (4)].cpVal), (yyvsp[(3) - (4)].exVal), ctx); } break; case 53: /* Line 1806 of yacc.c */ #line 207 "util_expr_parse.y" { (yyval.exVal) = ap_expr_str_func_make((yyvsp[(1) - (4)].cpVal), (yyvsp[(3) - (4)].exVal), ctx); } break; /* Line 1806 of yacc.c */ #line 1891 "util_expr_parse.c" default: break; } /* User semantic actions sometimes alter yychar, and that requires that yytoken be updated with the new translation. We take the approach of translating immediately before every use of yytoken. One alternative is translating here after every semantic action, but that translation would be missed if the semantic action invokes YYABORT, YYACCEPT, or YYERROR immediately after altering yychar or if it invokes YYBACKUP. In the case of YYABORT or YYACCEPT, an incorrect destructor might then be invoked immediately. In the case of YYERROR or YYBACKUP, subsequent parser actions might lead to an incorrect destructor call or verbose syntax error message before the lookahead is translated. */ YY_SYMBOL_PRINT ("-> $$ =", yyr1[yyn], &yyval, &yyloc); YYPOPSTACK (yylen); yylen = 0; YY_STACK_PRINT (yyss, yyssp); *++yyvsp = yyval; /* Now `shift' the result of the reduction. Determine what state that goes to, based on the state we popped back to and the rule number reduced by. */ yyn = yyr1[yyn]; yystate = yypgoto[yyn - YYNTOKENS] + *yyssp; if (0 <= yystate && yystate <= YYLAST && yycheck[yystate] == *yyssp) yystate = yytable[yystate]; else yystate = yydefgoto[yyn - YYNTOKENS]; goto yynewstate; /*------------------------------------. | yyerrlab -- here on detecting error | `------------------------------------*/ yyerrlab: /* Make sure we have latest lookahead translation. See comments at user semantic actions for why this is necessary. */ yytoken = yychar == YYEMPTY ? YYEMPTY : YYTRANSLATE (yychar); /* If not already recovering from an error, report this error. */ if (!yyerrstatus) { ++yynerrs; #if ! YYERROR_VERBOSE yyerror (ctx, YY_("syntax error")); #else # define YYSYNTAX_ERROR yysyntax_error (&yymsg_alloc, &yymsg, \ yyssp, yytoken) { char const *yymsgp = YY_("syntax error"); int yysyntax_error_status; yysyntax_error_status = YYSYNTAX_ERROR; if (yysyntax_error_status == 0) yymsgp = yymsg; else if (yysyntax_error_status == 1) { if (yymsg != yymsgbuf) YYSTACK_FREE (yymsg); yymsg = (char *) YYSTACK_ALLOC (yymsg_alloc); if (!yymsg) { yymsg = yymsgbuf; yymsg_alloc = sizeof yymsgbuf; yysyntax_error_status = 2; } else { yysyntax_error_status = YYSYNTAX_ERROR; yymsgp = yymsg; } } yyerror (ctx, yymsgp); if (yysyntax_error_status == 2) goto yyexhaustedlab; } # undef YYSYNTAX_ERROR #endif } if (yyerrstatus == 3) { /* If just tried and failed to reuse lookahead token after an error, discard it. */ if (yychar <= YYEOF) { /* Return failure if at end of input. */ if (yychar == YYEOF) YYABORT; } else { yydestruct ("Error: discarding", yytoken, &yylval, ctx); yychar = YYEMPTY; } } /* Else will try to reuse lookahead token after shifting the error token. */ goto yyerrlab1; /*---------------------------------------------------. | yyerrorlab -- error raised explicitly by YYERROR. | `---------------------------------------------------*/ yyerrorlab: /* Pacify compilers like GCC when the user code never invokes YYERROR and the label yyerrorlab therefore never appears in user code. */ if (/*CONSTCOND*/ 0) goto yyerrorlab; /* Do not reclaim the symbols of the rule which action triggered this YYERROR. */ YYPOPSTACK (yylen); yylen = 0; YY_STACK_PRINT (yyss, yyssp); yystate = *yyssp; goto yyerrlab1; /*-------------------------------------------------------------. | yyerrlab1 -- common code for both syntax error and YYERROR. | `-------------------------------------------------------------*/ yyerrlab1: yyerrstatus = 3; /* Each real token shifted decrements this. */ for (;;) { yyn = yypact[yystate]; if (!yypact_value_is_default (yyn)) { yyn += YYTERROR; if (0 <= yyn && yyn <= YYLAST && yycheck[yyn] == YYTERROR) { yyn = yytable[yyn]; if (0 < yyn) break; } } /* Pop the current state because it cannot handle the error token. */ if (yyssp == yyss) YYABORT; yydestruct ("Error: popping", yystos[yystate], yyvsp, ctx); YYPOPSTACK (1); yystate = *yyssp; YY_STACK_PRINT (yyss, yyssp); } *++yyvsp = yylval; /* Shift the error token. */ YY_SYMBOL_PRINT ("Shifting", yystos[yyn], yyvsp, yylsp); yystate = yyn; goto yynewstate; /*-------------------------------------. | yyacceptlab -- YYACCEPT comes here. | `-------------------------------------*/ yyacceptlab: yyresult = 0; goto yyreturn; /*-----------------------------------. | yyabortlab -- YYABORT comes here. | `-----------------------------------*/ yyabortlab: yyresult = 1; goto yyreturn; #if !defined(yyoverflow) || YYERROR_VERBOSE /*-------------------------------------------------. | yyexhaustedlab -- memory exhaustion comes here. | `-------------------------------------------------*/ yyexhaustedlab: yyerror (ctx, YY_("memory exhausted")); yyresult = 2; /* Fall through. */ #endif yyreturn: if (yychar != YYEMPTY) { /* Make sure we have latest lookahead translation. See comments at user semantic actions for why this is necessary. */ yytoken = YYTRANSLATE (yychar); yydestruct ("Cleanup: discarding lookahead", yytoken, &yylval, ctx); } /* Do not reclaim the symbols of the rule which action triggered this YYABORT or YYACCEPT. */ YYPOPSTACK (yylen); YY_STACK_PRINT (yyss, yyssp); while (yyssp != yyss) { yydestruct ("Cleanup: popping", yystos[*yyssp], yyvsp, ctx); YYPOPSTACK (1); } #ifndef yyoverflow if (yyss != yyssa) YYSTACK_FREE (yyss); #endif #if YYERROR_VERBOSE if (yymsg != yymsgbuf) YYSTACK_FREE (yymsg); #endif /* Make sure YYID is used. */ return YYID (yyresult); } /* Line 2067 of yacc.c */ #line 210 "util_expr_parse.y" void yyerror(ap_expr_parse_ctx_t *ctx, const char *s) { /* s is allocated on the stack */ ctx->error = apr_pstrdup(ctx->ptemp, s); } httpd-2.4.41/server/request.c0000644000000000000500000026275413443705247014427 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * @file request.c * @brief functions to get and process requests * * @author Rob McCool 3/21/93 * * Thoroughly revamped by rst for Apache. NB this file reads * best from the bottom up. * */ #include "apr_strings.h" #include "apr_file_io.h" #include "apr_fnmatch.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "ap_provider.h" #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_core.h" #include "http_protocol.h" #include "http_log.h" #include "http_main.h" #include "util_filter.h" #include "util_charset.h" #include "util_script.h" #include "ap_expr.h" #include "mod_request.h" #include "mod_core.h" #include "mod_auth.h" #if APR_HAVE_STDARG_H #include #endif /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX APR_HOOK_STRUCT( APR_HOOK_LINK(translate_name) APR_HOOK_LINK(map_to_storage) APR_HOOK_LINK(check_user_id) APR_HOOK_LINK(fixups) APR_HOOK_LINK(type_checker) APR_HOOK_LINK(access_checker) APR_HOOK_LINK(access_checker_ex) APR_HOOK_LINK(auth_checker) APR_HOOK_LINK(insert_filter) APR_HOOK_LINK(create_request) APR_HOOK_LINK(post_perdir_config) APR_HOOK_LINK(dirwalk_stat) APR_HOOK_LINK(force_authn) ) AP_IMPLEMENT_HOOK_RUN_FIRST(int,translate_name, (request_rec *r), (r), DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(int,map_to_storage, (request_rec *r), (r), DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(int,check_user_id, (request_rec *r), (r), DECLINED) AP_IMPLEMENT_HOOK_RUN_ALL(int,fixups, (request_rec *r), (r), OK, DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(int,type_checker, (request_rec *r), (r), DECLINED) AP_IMPLEMENT_HOOK_RUN_ALL(int,access_checker, (request_rec *r), (r), OK, DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(int,access_checker_ex, (request_rec *r), (r), DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(int,auth_checker, (request_rec *r), (r), DECLINED) AP_IMPLEMENT_HOOK_VOID(insert_filter, (request_rec *r), (r)) AP_IMPLEMENT_HOOK_RUN_ALL(int, create_request, (request_rec *r), (r), OK, DECLINED) AP_IMPLEMENT_HOOK_RUN_ALL(int, post_perdir_config, (request_rec *r), (r), OK, DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(apr_status_t,dirwalk_stat, (apr_finfo_t *finfo, request_rec *r, apr_int32_t wanted), (finfo, r, wanted), AP_DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(int,force_authn, (request_rec *r), (r), DECLINED) static int auth_internal_per_conf = 0; static int auth_internal_per_conf_hooks = 0; static int auth_internal_per_conf_providers = 0; static int decl_die(int status, const char *phase, request_rec *r) { if (status == DECLINED) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(00025) "configuration error: couldn't %s: %s", phase, r->uri); return HTTP_INTERNAL_SERVER_ERROR; } else { ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "auth phase '%s' gave status %d: %s", phase, status, r->uri); return status; } } AP_DECLARE(int) ap_some_authn_required(request_rec *r) { int access_status; char *olduser = r->user; int rv = FALSE; switch (ap_satisfies(r)) { case SATISFY_ALL: case SATISFY_NOSPEC: if ((access_status = ap_run_access_checker(r)) != OK) { break; } access_status = ap_run_access_checker_ex(r); if (access_status == DECLINED) { rv = TRUE; } break; case SATISFY_ANY: if ((access_status = ap_run_access_checker(r)) == OK) { break; } access_status = ap_run_access_checker_ex(r); if (access_status == DECLINED) { rv = TRUE; } break; } r->user = olduser; return rv; } /* This is the master logic for processing requests. Do NOT duplicate * this logic elsewhere, or the security model will be broken by future * API changes. Each phase must be individually optimized to pick up * redundant/duplicate calls by subrequests, and redirects. */ AP_DECLARE(int) ap_process_request_internal(request_rec *r) { int file_req = (r->main && r->filename); int access_status; core_dir_config *d; core_server_config *sconf = ap_get_core_module_config(r->server->module_config); /* Ignore embedded %2F's in path for proxy requests */ if (!r->proxyreq && r->parsed_uri.path) { d = ap_get_core_module_config(r->per_dir_config); if (d->allow_encoded_slashes) { access_status = ap_unescape_url_keep2f(r->parsed_uri.path, d->decode_encoded_slashes); } else { access_status = ap_unescape_url(r->parsed_uri.path); } if (access_status) { if (access_status == HTTP_NOT_FOUND) { if (! d->allow_encoded_slashes) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00026) "found %%2f (encoded '/') in URI " "(decoded='%s'), returning 404", r->parsed_uri.path); } } return access_status; } } ap_getparents(r->uri); /* OK --- shrinking transformations... */ if (sconf->merge_slashes != AP_CORE_CONFIG_OFF) { ap_no2slash(r->uri); if (r->parsed_uri.path) { ap_no2slash(r->parsed_uri.path); } } /* All file subrequests are a huge pain... they cannot bubble through the * next several steps. Only file subrequests are allowed an empty uri, * otherwise let translate_name kill the request. */ if (!file_req) { if ((access_status = ap_location_walk(r))) { return access_status; } if ((access_status = ap_if_walk(r))) { return access_status; } d = ap_get_core_module_config(r->per_dir_config); if (d->log) { r->log = d->log; } if ((access_status = ap_run_translate_name(r))) { return decl_die(access_status, "translate", r); } } /* Reset to the server default config prior to running map_to_storage */ r->per_dir_config = r->server->lookup_defaults; if ((access_status = ap_run_map_to_storage(r))) { /* This request wasn't in storage (e.g. TRACE) */ return access_status; } /* Rerun the location walk, which overrides any map_to_storage config. */ if ((access_status = ap_location_walk(r))) { return access_status; } if ((access_status = ap_if_walk(r))) { return access_status; } d = ap_get_core_module_config(r->per_dir_config); if (d->log) { r->log = d->log; } if ((access_status = ap_run_post_perdir_config(r))) { return access_status; } /* Only on the main request! */ if (r->main == NULL) { if ((access_status = ap_run_header_parser(r))) { return access_status; } } /* Skip authn/authz if the parent or prior request passed the authn/authz, * and that configuration didn't change (this requires optimized _walk() * functions in map_to_storage that use the same merge results given * identical input.) If the config changes, we must re-auth. */ if (r->prev && (r->prev->per_dir_config == r->per_dir_config)) { r->user = r->prev->user; r->ap_auth_type = r->prev->ap_auth_type; } else if (r->main && (r->main->per_dir_config == r->per_dir_config)) { r->user = r->main->user; r->ap_auth_type = r->main->ap_auth_type; } else { /* A module using a confusing API (ap_get_basic_auth_pw) caused ** r->user to be filled out prior to check_authn hook. We treat ** it is inadvertent. */ if (r->user && apr_table_get(r->notes, AP_GET_BASIC_AUTH_PW_NOTE)) { r->user = NULL; } switch (ap_satisfies(r)) { case SATISFY_ALL: case SATISFY_NOSPEC: if ((access_status = ap_run_access_checker(r)) != OK) { return decl_die(access_status, "check access (with Satisfy All)", r); } access_status = ap_run_access_checker_ex(r); if (access_status == DECLINED || (access_status == OK && ap_run_force_authn(r) == OK)) { if ((access_status = ap_run_check_user_id(r)) != OK) { return decl_die(access_status, "check user", r); } if (r->user == NULL) { /* don't let buggy authn module crash us in authz */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00027) "No authentication done but request not " "allowed without authentication for %s. " "Authentication not configured?", r->uri); access_status = HTTP_INTERNAL_SERVER_ERROR; return decl_die(access_status, "check user", r); } if ((access_status = ap_run_auth_checker(r)) != OK) { return decl_die(access_status, "check authorization", r); } } else if (access_status == OK) { ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "request authorized without authentication by " "access_checker_ex hook: %s", r->uri); } else { return decl_die(access_status, "check access", r); } break; case SATISFY_ANY: if ((access_status = ap_run_access_checker(r)) == OK) { ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "request authorized without authentication by " "access_checker hook and 'Satisfy any': %s", r->uri); break; } access_status = ap_run_access_checker_ex(r); if (access_status == DECLINED || (access_status == OK && ap_run_force_authn(r) == OK)) { if ((access_status = ap_run_check_user_id(r)) != OK) { return decl_die(access_status, "check user", r); } if (r->user == NULL) { /* don't let buggy authn module crash us in authz */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00028) "No authentication done but request not " "allowed without authentication for %s. " "Authentication not configured?", r->uri); access_status = HTTP_INTERNAL_SERVER_ERROR; return decl_die(access_status, "check user", r); } if ((access_status = ap_run_auth_checker(r)) != OK) { return decl_die(access_status, "check authorization", r); } } else if (access_status == OK) { ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "request authorized without authentication by " "access_checker_ex hook: %s", r->uri); } else { return decl_die(access_status, "check access", r); } break; } } /* XXX Must make certain the ap_run_type_checker short circuits mime * in mod-proxy for r->proxyreq && r->parsed_uri.scheme * && !strcmp(r->parsed_uri.scheme, "http") */ if ((access_status = ap_run_type_checker(r)) != OK) { return decl_die(access_status, "find types", r); } if ((access_status = ap_run_fixups(r)) != OK) { ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "fixups hook gave %d: %s", access_status, r->uri); return access_status; } return OK; } /* Useful caching structures to repeat _walk/merge sequences as required * when a subrequest or redirect reuses substantially the same config. * * Directive order in the httpd.conf file and its Includes significantly * impact this optimization. Grouping common blocks at the front of the * config that are less likely to change between a request and * its subrequests, or between a request and its redirects reduced * the work of these functions significantly. */ typedef struct walk_walked_t { ap_conf_vector_t *matched; /* A dir_conf sections we matched */ ap_conf_vector_t *merged; /* The dir_conf merged result */ } walk_walked_t; typedef struct walk_cache_t { const char *cached; /* The identifier we matched */ ap_conf_vector_t **dir_conf_tested; /* The sections we matched against */ ap_conf_vector_t *dir_conf_merged; /* Base per_dir_config */ ap_conf_vector_t *per_dir_result; /* per_dir_config += walked result */ apr_array_header_t *walked; /* The list of walk_walked_t results */ struct walk_cache_t *prev; /* Prev cache of same call in this (sub)req */ int count; /* Number of prev invocations of same call in this (sub)req */ } walk_cache_t; static walk_cache_t *prep_walk_cache(apr_size_t t, request_rec *r) { void **note, **inherit_note; walk_cache_t *cache, *prev_cache, *copy_cache; int count; /* Find the most relevant, recent walk cache to work from and provide * a copy the caller is allowed to munge. In the case of a sub-request * or internal redirect, this is the cache corresponding to the equivalent * invocation of the same function call in the "parent" request, if such * a cache exists. Otherwise it is the walk cache of the previous * invocation of the same function call in the current request, if * that exists; if not, then create a new walk cache. */ note = ap_get_request_note(r, t); AP_DEBUG_ASSERT(note != NULL); copy_cache = prev_cache = *note; count = prev_cache ? (prev_cache->count + 1) : 0; if ((r->prev && (inherit_note = ap_get_request_note(r->prev, t)) && *inherit_note) || (r->main && (inherit_note = ap_get_request_note(r->main, t)) && *inherit_note)) { walk_cache_t *inherit_cache = *inherit_note; while (inherit_cache->count > count) { inherit_cache = inherit_cache->prev; } if (inherit_cache->count == count) { copy_cache = inherit_cache; } } if (copy_cache) { cache = apr_pmemdup(r->pool, copy_cache, sizeof(*cache)); cache->walked = apr_array_copy(r->pool, cache->walked); cache->prev = prev_cache; cache->count = count; } else { cache = apr_pcalloc(r->pool, sizeof(*cache)); cache->walked = apr_array_make(r->pool, 4, sizeof(walk_walked_t)); } *note = cache; return cache; } /***************************************************************** * * Getting and checking directory configuration. Also checks the * FollowSymlinks and FollowSymOwner stuff, since this is really the * only place that can happen (barring a new mid_dir_walk callout). * * We can't do it as an access_checker module function which gets * called with the final per_dir_config, since we could have a directory * with FollowSymLinks disabled, which contains a symlink to another * with a .htaccess file which turns FollowSymLinks back on --- and * access in such a case must be denied. So, whatever it is that * checks FollowSymLinks needs to know the state of the options as * they change, all the way down. */ /* * resolve_symlink must _always_ be called on an APR_LNK file type! * It will resolve the actual target file type, modification date, etc, * and provide any processing required for symlink evaluation. * Path must already be cleaned, no trailing slash, no multi-slashes, * and don't call this on the root! * * Simply, the number of times we deref a symlink are minimal compared * to the number of times we had an extra lstat() since we 'weren't sure'. * * To optimize, we stat() anything when given (opts & OPT_SYM_LINKS), otherwise * we start off with an lstat(). Every lstat() must be dereferenced in case * it points at a 'nasty' - we must always rerun check_safe_file (or similar.) */ static int resolve_symlink(char *d, apr_finfo_t *lfi, int opts, apr_pool_t *p) { apr_finfo_t fi; const char *savename; if (!(opts & (OPT_SYM_OWNER | OPT_SYM_LINKS))) { return HTTP_FORBIDDEN; } /* Save the name from the valid bits. */ savename = (lfi->valid & APR_FINFO_NAME) ? lfi->name : NULL; /* if OPT_SYM_OWNER is unset, we only need to check target accessible */ if (!(opts & OPT_SYM_OWNER)) { if (apr_stat(&fi, d, lfi->valid & ~(APR_FINFO_NAME | APR_FINFO_LINK), p) != APR_SUCCESS) { return HTTP_FORBIDDEN; } /* Give back the target */ memcpy(lfi, &fi, sizeof(fi)); if (savename) { lfi->name = savename; lfi->valid |= APR_FINFO_NAME; } return OK; } /* OPT_SYM_OWNER only works if we can get the owner of * both the file and symlink. First fill in a missing * owner of the symlink, then get the info of the target. */ if (!(lfi->valid & APR_FINFO_OWNER)) { if (apr_stat(lfi, d, lfi->valid | APR_FINFO_LINK | APR_FINFO_OWNER, p) != APR_SUCCESS) { return HTTP_FORBIDDEN; } } if (apr_stat(&fi, d, lfi->valid & ~(APR_FINFO_NAME), p) != APR_SUCCESS) { return HTTP_FORBIDDEN; } if (apr_uid_compare(fi.user, lfi->user) != APR_SUCCESS) { return HTTP_FORBIDDEN; } /* Give back the target */ memcpy(lfi, &fi, sizeof(fi)); if (savename) { lfi->name = savename; lfi->valid |= APR_FINFO_NAME; } return OK; } /* * As we walk the directory configuration, the merged config won't * be 'rooted' to a specific vhost until the very end of the merge. * * We need a very fast mini-merge to a real, vhost-rooted merge * of core.opts and core.override, the only options tested within * directory_walk itself. * * See core.c::merge_core_dir_configs() for explanation. */ typedef struct core_opts_t { allow_options_t opts; allow_options_t add; allow_options_t remove; overrides_t override; overrides_t override_opts; apr_table_t *override_list; } core_opts_t; static void core_opts_merge(const ap_conf_vector_t *sec, core_opts_t *opts) { core_dir_config *this_dir = ap_get_core_module_config(sec); if (!this_dir) { return; } if (this_dir->opts & OPT_UNSET) { opts->add = (opts->add & ~this_dir->opts_remove) | this_dir->opts_add; opts->remove = (opts->remove & ~this_dir->opts_add) | this_dir->opts_remove; opts->opts = (opts->opts & ~opts->remove) | opts->add; } else { opts->opts = this_dir->opts; opts->add = this_dir->opts_add; opts->remove = this_dir->opts_remove; } if (!(this_dir->override & OR_UNSET)) { opts->override = this_dir->override; opts->override_opts = this_dir->override_opts; } if (this_dir->override_list != NULL) { opts->override_list = this_dir->override_list; } } /***************************************************************** * * Getting and checking directory configuration. Also checks the * FollowSymlinks and FollowSymOwner stuff, since this is really the * only place that can happen (barring a new mid_dir_walk callout). * * We can't do it as an access_checker module function which gets * called with the final per_dir_config, since we could have a directory * with FollowSymLinks disabled, which contains a symlink to another * with a .htaccess file which turns FollowSymLinks back on --- and * access in such a case must be denied. So, whatever it is that * checks FollowSymLinks needs to know the state of the options as * they change, all the way down. */ AP_DECLARE(int) ap_directory_walk(request_rec *r) { ap_conf_vector_t *now_merged = NULL; core_server_config *sconf = ap_get_core_module_config(r->server->module_config); ap_conf_vector_t **sec_ent = (ap_conf_vector_t **) sconf->sec_dir->elts; int num_sec = sconf->sec_dir->nelts; walk_cache_t *cache; char *entry_dir; apr_status_t rv; int cached; /* XXX: Better (faster) tests needed!!! * * "OK" as a response to a real problem is not _OK_, but to allow broken * modules to proceed, we will permit the not-a-path filename to pass the * following two tests. This behavior may be revoked in future versions * of Apache. We still must catch it later if it's heading for the core * handler. Leave INFO notes here for module debugging. */ if (r->filename == NULL) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00029) "Module bug? Request filename is missing for URI %s", r->uri); return OK; } /* Canonicalize the file path without resolving filename case or aliases * so we can begin by checking the cache for a recent directory walk. * This call will ensure we have an absolute path in the same pass. */ if ((rv = apr_filepath_merge(&entry_dir, NULL, r->filename, APR_FILEPATH_NOTRELATIVE, r->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00030) "Module bug? Request filename path %s is invalid or " "or not absolute for uri %s", r->filename, r->uri); return OK; } /* XXX Notice that this forces path_info to be canonical. That might * not be desired by all apps. However, some of those same apps likely * have significant security holes. */ r->filename = entry_dir; cache = prep_walk_cache(AP_NOTE_DIRECTORY_WALK, r); cached = (cache->cached != NULL); /* If this is not a dirent subrequest with a preconstructed * r->finfo value, then we can simply stat the filename to * save burning mega-cycles with unneeded stats - if this is * an exact file match. We don't care about failure... we * will stat by component failing this meager attempt. * * It would be nice to distinguish APR_ENOENT from other * types of failure, such as APR_ENOTDIR. We can do something * with APR_ENOENT, knowing that the path is good. */ if (r->finfo.filetype == APR_NOFILE || r->finfo.filetype == APR_LNK) { rv = ap_run_dirwalk_stat(&r->finfo, r, APR_FINFO_MIN); /* some OSs will return APR_SUCCESS/APR_REG if we stat * a regular file but we have '/' at the end of the name; * * other OSs will return APR_ENOTDIR for that situation; * * handle it the same everywhere by simulating a failure * if it looks like a directory but really isn't * * Also reset if the stat failed, just for safety. */ if ((rv != APR_SUCCESS) || (r->finfo.filetype != APR_NOFILE && (r->finfo.filetype != APR_DIR) && (r->filename[strlen(r->filename) - 1] == '/'))) { r->finfo.filetype = APR_NOFILE; /* forget what we learned */ } } if (r->finfo.filetype == APR_REG) { entry_dir = ap_make_dirstr_parent(r->pool, entry_dir); } else if (r->filename[strlen(r->filename) - 1] != '/') { entry_dir = apr_pstrcat(r->pool, r->filename, "/", NULL); } /* If we have a file already matches the path of r->filename, * and the vhost's list of directory sections hasn't changed, * we can skip rewalking the directory_walk entries. */ if (cached && ((r->finfo.filetype == APR_REG) || ((r->finfo.filetype == APR_DIR) && (!r->path_info || !*r->path_info))) && (cache->dir_conf_tested == sec_ent) && (strcmp(entry_dir, cache->cached) == 0)) { int familiar = 0; /* Well this looks really familiar! If our end-result (per_dir_result) * didn't change, we have absolutely nothing to do :) * Otherwise (as is the case with most dir_merged/file_merged requests) * we must merge our dir_conf_merged onto this new r->per_dir_config. */ if (r->per_dir_config == cache->per_dir_result) { familiar = 1; } if (r->per_dir_config == cache->dir_conf_merged) { r->per_dir_config = cache->per_dir_result; familiar = 1; } if (familiar) { apr_finfo_t thisinfo; int res; allow_options_t opts; core_dir_config *this_dir; this_dir = ap_get_core_module_config(r->per_dir_config); opts = this_dir->opts; /* * If Symlinks are allowed in general we do not need the following * check. */ if (!(opts & OPT_SYM_LINKS)) { rv = ap_run_dirwalk_stat(&thisinfo, r, APR_FINFO_MIN | APR_FINFO_NAME | APR_FINFO_LINK); /* * APR_INCOMPLETE is as fine as result as APR_SUCCESS as we * have added APR_FINFO_NAME to the wanted parameter of * apr_stat above. On Unix platforms this means that apr_stat * is always going to return APR_INCOMPLETE in the case that * the call to the native stat / lstat did not fail. */ if ((rv != APR_INCOMPLETE) && (rv != APR_SUCCESS)) { /* * This should never happen, because we did a stat on the * same file, resolving a possible symlink several lines * above. Therefore do not make a detailed analysis of rv * in this case for the reason of the failure, just bail out * with a HTTP_FORBIDDEN in case we hit a race condition * here. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00031) "access to %s failed; stat of '%s' failed.", r->uri, r->filename); return r->status = HTTP_FORBIDDEN; } if (thisinfo.filetype == APR_LNK) { /* Is this a possibly acceptable symlink? */ if ((res = resolve_symlink(r->filename, &thisinfo, opts, r->pool)) != OK) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00032) "Symbolic link not allowed " "or link target not accessible: %s", r->filename); return r->status = res; } } } return OK; } if (cache->walked->nelts) { now_merged = ((walk_walked_t*)cache->walked->elts) [cache->walked->nelts - 1].merged; } } else { /* We start now_merged from NULL since we want to build * a locations list that can be merged to any vhost. */ int sec_idx; int matches = cache->walked->nelts; int cached_matches = matches; walk_walked_t *last_walk = (walk_walked_t*)cache->walked->elts; core_dir_config *this_dir; core_opts_t opts; apr_finfo_t thisinfo; char *save_path_info; apr_size_t buflen; char *buf; unsigned int seg, startseg; apr_pool_t *rxpool = NULL; /* Invariant: from the first time filename_len is set until * it goes out of scope, filename_len==strlen(r->filename) */ apr_size_t filename_len; #ifdef CASE_BLIND_FILESYSTEM apr_size_t canonical_len; #endif cached &= auth_internal_per_conf; /* * We must play our own mini-merge game here, for the few * running dir_config values we care about within dir_walk. * We didn't start the merge from r->per_dir_config, so we * accumulate opts and override as we merge, from the globals. */ this_dir = ap_get_core_module_config(r->per_dir_config); opts.opts = this_dir->opts; opts.add = this_dir->opts_add; opts.remove = this_dir->opts_remove; opts.override = this_dir->override; opts.override_opts = this_dir->override_opts; opts.override_list = this_dir->override_list; /* Set aside path_info to merge back onto path_info later. * If r->filename is a directory, we must remerge the path_info, * before we continue! [Directories cannot, by definition, have * path info. Either the next segment is not-found, or a file.] * * r->path_info tracks the unconsumed source path. * r->filename tracks the path as we process it */ if ((r->finfo.filetype == APR_DIR) && r->path_info && *r->path_info) { if ((rv = apr_filepath_merge(&r->path_info, r->filename, r->path_info, APR_FILEPATH_NOTABOVEROOT, r->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00033) "dir_walk error, path_info %s is not relative " "to the filename path %s for uri %s", r->path_info, r->filename, r->uri); return HTTP_INTERNAL_SERVER_ERROR; } save_path_info = NULL; } else { save_path_info = r->path_info; r->path_info = r->filename; } #ifdef CASE_BLIND_FILESYSTEM canonical_len = 0; while (r->canonical_filename && r->canonical_filename[canonical_len] && (r->canonical_filename[canonical_len] == r->path_info[canonical_len])) { ++canonical_len; } while (canonical_len && ((r->canonical_filename[canonical_len - 1] != '/' && r->canonical_filename[canonical_len - 1]) || (r->path_info[canonical_len - 1] != '/' && r->path_info[canonical_len - 1]))) { --canonical_len; } /* * Now build r->filename component by component, starting * with the root (on Unix, simply "/"). We will make a huge * assumption here for efficiency, that any canonical path * already given included a canonical root. */ rv = apr_filepath_root((const char **)&r->filename, (const char **)&r->path_info, canonical_len ? 0 : APR_FILEPATH_TRUENAME, r->pool); filename_len = strlen(r->filename); /* * Bad assumption above? If the root's length is longer * than the canonical length, then it cannot be trusted as * a truename. So try again, this time more seriously. */ if ((rv == APR_SUCCESS) && canonical_len && (filename_len > canonical_len)) { rv = apr_filepath_root((const char **)&r->filename, (const char **)&r->path_info, APR_FILEPATH_TRUENAME, r->pool); filename_len = strlen(r->filename); canonical_len = 0; } #else /* ndef CASE_BLIND_FILESYSTEM, really this simple for Unix today; */ rv = apr_filepath_root((const char **)&r->filename, (const char **)&r->path_info, 0, r->pool); filename_len = strlen(r->filename); #endif if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00034) "dir_walk error, could not determine the root " "path of filename %s%s for uri %s", r->filename, r->path_info, r->uri); return HTTP_INTERNAL_SERVER_ERROR; } /* Working space for terminating null and an extra / is required. */ buflen = filename_len + strlen(r->path_info) + 2; buf = apr_palloc(r->pool, buflen); memcpy(buf, r->filename, filename_len + 1); r->filename = buf; thisinfo.valid = APR_FINFO_TYPE; thisinfo.filetype = APR_DIR; /* It's the root, of course it's a dir */ /* * seg keeps track of which segment we've copied. * sec_idx keeps track of which section we're on, since sections are * ordered by number of segments. See core_reorder_directories * startseg tells us how many segments describe the root path * e.g. the complete path "//host/foo/" to a UNC share (4) */ startseg = seg = ap_count_dirs(r->filename); sec_idx = 0; /* * Go down the directory hierarchy. Where we have to check for * symlinks, do so. Where a .htaccess file has permission to * override anything, try to find one. */ do { int res; char *seg_name; char *delim; int temp_slash=0; /* We have no trailing slash, but we sure would appreciate one. * However, we don't want to append a / our first time through. */ if ((seg > startseg) && r->filename[filename_len-1] != '/') { r->filename[filename_len++] = '/'; r->filename[filename_len] = 0; temp_slash=1; } /* Begin *this* level by looking for matching sections * from the server config. */ for (; sec_idx < num_sec; ++sec_idx) { ap_conf_vector_t *entry_config = sec_ent[sec_idx]; core_dir_config *entry_core; entry_core = ap_get_core_module_config(entry_config); /* No more possible matches for this many segments? * We are done when we find relative/regex/longer components. */ if (entry_core->r || entry_core->d_components > seg) { break; } /* We will never skip '0' element components, e.g. plain old * , and are classified as zero * so that Win32/Netware/OS2 etc all pick them up. * Otherwise, skip over the mismatches. */ if (entry_core->d_components && ((entry_core->d_components < seg) || (entry_core->d_is_fnmatch ? (apr_fnmatch(entry_core->d, r->filename, APR_FNM_PATHNAME) != APR_SUCCESS) : (strcmp(r->filename, entry_core->d) != 0)))) { continue; } /* If we haven't continue'd above, we have a match. * * Calculate our full-context core opts & override. */ core_opts_merge(sec_ent[sec_idx], &opts); /* If we merged this same section last time, reuse it */ if (matches) { if (last_walk->matched == sec_ent[sec_idx]) { now_merged = last_walk->merged; ++last_walk; --matches; continue; } /* We fell out of sync. This is our own copy of walked, * so truncate the remaining matches and reset remaining. */ cache->walked->nelts -= matches; matches = 0; cached = 0; } if (now_merged) { now_merged = ap_merge_per_dir_configs(r->pool, now_merged, sec_ent[sec_idx]); } else { now_merged = sec_ent[sec_idx]; } last_walk = (walk_walked_t*)apr_array_push(cache->walked); last_walk->matched = sec_ent[sec_idx]; last_walk->merged = now_merged; } /* If .htaccess files are enabled, check for one, provided we * have reached a real path. */ do { /* Not really a loop, just a break'able code block */ ap_conf_vector_t *htaccess_conf = NULL; /* No htaccess in an incomplete root path, * nor if it's disabled */ if (seg < startseg || (!opts.override && apr_is_empty_table(opts.override_list) )) { break; } res = ap_parse_htaccess(&htaccess_conf, r, opts.override, opts.override_opts, opts.override_list, r->filename, sconf->access_name); if (res) { return res; } if (!htaccess_conf) { break; } /* If we are still here, we found our htaccess. * * Calculate our full-context core opts & override. */ core_opts_merge(htaccess_conf, &opts); /* If we merged this same htaccess last time, reuse it... * this wouldn't work except that we cache the htaccess * sections for the lifetime of the request, so we match * the same conf. Good planning (no, pure luck ;) */ if (matches) { if (last_walk->matched == htaccess_conf) { now_merged = last_walk->merged; ++last_walk; --matches; break; } /* We fell out of sync. This is our own copy of walked, * so truncate the remaining matches and reset * remaining. */ cache->walked->nelts -= matches; matches = 0; cached = 0; } if (now_merged) { now_merged = ap_merge_per_dir_configs(r->pool, now_merged, htaccess_conf); } else { now_merged = htaccess_conf; } last_walk = (walk_walked_t*)apr_array_push(cache->walked); last_walk->matched = htaccess_conf; last_walk->merged = now_merged; } while (0); /* Only one htaccess, not a real loop */ /* That temporary trailing slash was useful, now drop it. */ if (temp_slash) { r->filename[--filename_len] = '\0'; } /* Time for all good things to come to an end? */ if (!r->path_info || !*r->path_info) { break; } /* Now it's time for the next segment... * We will assume the next element is an end node, and fix it up * below as necessary... */ seg_name = r->filename + filename_len; delim = strchr(r->path_info + (*r->path_info == '/' ? 1 : 0), '/'); if (delim) { apr_size_t path_info_len = delim - r->path_info; *delim = '\0'; memcpy(seg_name, r->path_info, path_info_len + 1); filename_len += path_info_len; r->path_info = delim; *delim = '/'; } else { apr_size_t path_info_len = strlen(r->path_info); memcpy(seg_name, r->path_info, path_info_len + 1); filename_len += path_info_len; r->path_info += path_info_len; } if (*seg_name == '/') ++seg_name; /* If nothing remained but a '/' string, we are finished * XXX: NO WE ARE NOT!!! Now process this puppy!!! */ if (!*seg_name) { break; } /* First optimization; * If...we knew r->filename was a file, and * if...we have strict (case-sensitive) filenames, or * we know the canonical_filename matches to _this_ name, and * if...we have allowed symlinks * skip the lstat and dummy up an APR_DIR value for thisinfo. */ if (r->finfo.filetype != APR_NOFILE #ifdef CASE_BLIND_FILESYSTEM && (filename_len <= canonical_len) #endif && ((opts.opts & (OPT_SYM_OWNER | OPT_SYM_LINKS)) == OPT_SYM_LINKS)) { thisinfo.filetype = APR_DIR; ++seg; continue; } /* We choose apr_stat with flag APR_FINFO_LINK here, rather that * plain apr_stat, so that we capture this path object rather than * its target. We will replace the info with our target's info * below. We especially want the name of this 'link' object, not * the name of its target, if we are fixing the filename * case/resolving aliases. */ rv = ap_run_dirwalk_stat(&thisinfo, r, APR_FINFO_MIN | APR_FINFO_NAME | APR_FINFO_LINK); if (APR_STATUS_IS_ENOENT(rv)) { /* Nothing? That could be nice. But our directory * walk is done. */ thisinfo.filetype = APR_NOFILE; break; } else if (APR_STATUS_IS_EACCES(rv)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00035) "access to %s denied (filesystem path '%s') " "because search permissions are missing on a " "component of the path", r->uri, r->filename); return r->status = HTTP_FORBIDDEN; } else if ((rv != APR_SUCCESS && rv != APR_INCOMPLETE) || !(thisinfo.valid & APR_FINFO_TYPE)) { /* If we hit ENOTDIR, we must have over-optimized, deny * rather than assume not found. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00036) "access to %s failed (filesystem path '%s')", r->uri, r->filename); return r->status = HTTP_FORBIDDEN; } /* Fix up the path now if we have a name, and they don't agree */ if ((thisinfo.valid & APR_FINFO_NAME) && strcmp(seg_name, thisinfo.name)) { /* TODO: provide users an option that an internal/external * redirect is required here? We need to walk the URI and * filename in tandem to properly correlate these. */ strcpy(seg_name, thisinfo.name); filename_len = strlen(r->filename); } if (thisinfo.filetype == APR_LNK) { /* Is this a possibly acceptable symlink? */ if ((res = resolve_symlink(r->filename, &thisinfo, opts.opts, r->pool)) != OK) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00037) "Symbolic link not allowed " "or link target not accessible: %s", r->filename); return r->status = res; } } /* Ok, we are done with the link's info, test the real target */ if (thisinfo.filetype == APR_REG || thisinfo.filetype == APR_NOFILE) { /* That was fun, nothing left for us here */ break; } else if (thisinfo.filetype != APR_DIR) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00038) "Forbidden: %s doesn't point to " "a file or directory", r->filename); return r->status = HTTP_FORBIDDEN; } ++seg; } while (thisinfo.filetype == APR_DIR); /* If we have _not_ optimized, this is the time to recover * the final stat result. */ if (r->finfo.filetype == APR_NOFILE || r->finfo.filetype == APR_LNK) { r->finfo = thisinfo; } /* Now splice the saved path_info back onto any new path_info */ if (save_path_info) { if (r->path_info && *r->path_info) { r->path_info = ap_make_full_path(r->pool, r->path_info, save_path_info); } else { r->path_info = save_path_info; } } /* * Now we'll deal with the regexes, note we pick up sec_idx * where we left off (we gave up after we hit entry_core->r) */ for (; sec_idx < num_sec; ++sec_idx) { int nmatch = 0; int i; ap_regmatch_t *pmatch = NULL; core_dir_config *entry_core; entry_core = ap_get_core_module_config(sec_ent[sec_idx]); if (!entry_core->r) { continue; } if (entry_core->refs && entry_core->refs->nelts) { if (!rxpool) { apr_pool_create(&rxpool, r->pool); } nmatch = entry_core->refs->nelts; pmatch = apr_palloc(rxpool, nmatch*sizeof(ap_regmatch_t)); } if (ap_regexec(entry_core->r, r->filename, nmatch, pmatch, 0)) { continue; } for (i = 0; i < nmatch; i++) { if (pmatch[i].rm_so >= 0 && pmatch[i].rm_eo >= 0 && ((const char **)entry_core->refs->elts)[i]) { apr_table_setn(r->subprocess_env, ((const char **)entry_core->refs->elts)[i], apr_pstrndup(r->pool, r->filename + pmatch[i].rm_so, pmatch[i].rm_eo - pmatch[i].rm_so)); } } /* If we haven't already continue'd above, we have a match. * * Calculate our full-context core opts & override. */ core_opts_merge(sec_ent[sec_idx], &opts); /* If we merged this same section last time, reuse it */ if (matches) { if (last_walk->matched == sec_ent[sec_idx]) { now_merged = last_walk->merged; ++last_walk; --matches; continue; } /* We fell out of sync. This is our own copy of walked, * so truncate the remaining matches and reset remaining. */ cache->walked->nelts -= matches; matches = 0; cached = 0; } if (now_merged) { now_merged = ap_merge_per_dir_configs(r->pool, now_merged, sec_ent[sec_idx]); } else { now_merged = sec_ent[sec_idx]; } last_walk = (walk_walked_t*)apr_array_push(cache->walked); last_walk->matched = sec_ent[sec_idx]; last_walk->merged = now_merged; } if (rxpool) { apr_pool_destroy(rxpool); } /* Whoops - everything matched in sequence, but either the original * walk found some additional matches (which we need to truncate), or * this walk found some additional matches. */ if (matches) { cache->walked->nelts -= matches; cached = 0; } else if (cache->walked->nelts > cached_matches) { cached = 0; } } /* It seems this shouldn't be needed anymore. We translated the x symlink above into a real resource, and should have died up there. x Even if we keep this, it needs more thought (maybe an r->file_is_symlink) x perhaps it should actually happen in file_walk, so we catch more x obscure cases in autoindex subrequests, etc. x x * Symlink permissions are determined by the parent. If the request is x * for a directory then applying the symlink test here would use the x * permissions of the directory as opposed to its parent. Consider a x * symlink pointing to a dir with a .htaccess disallowing symlinks. If x * you access /symlink (or /symlink/) you would get a 403 without this x * APR_DIR test. But if you accessed /symlink/index.html, for example, x * you would *not* get the 403. x x if (r->finfo.filetype != APR_DIR x && (res = resolve_symlink(r->filename, r->info, ap_allow_options(r), x r->pool))) { x ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, x "Symbolic link not allowed: %s", r->filename); x return res; x } */ /* Save future sub-requestors much angst in processing * this subrequest. If dir_walk couldn't canonicalize * the file path, nothing can. */ r->canonical_filename = r->filename; if (r->finfo.filetype == APR_DIR) { cache->cached = r->filename; } else { cache->cached = ap_make_dirstr_parent(r->pool, r->filename); } if (cached && r->per_dir_config == cache->dir_conf_merged) { r->per_dir_config = cache->per_dir_result; return OK; } cache->dir_conf_tested = sec_ent; cache->dir_conf_merged = r->per_dir_config; /* Merge our cache->dir_conf_merged construct with the r->per_dir_configs, * and note the end result to (potentially) skip this step next time. */ if (now_merged) { r->per_dir_config = ap_merge_per_dir_configs(r->pool, r->per_dir_config, now_merged); } cache->per_dir_result = r->per_dir_config; return OK; } AP_DECLARE(int) ap_location_walk(request_rec *r) { ap_conf_vector_t *now_merged = NULL; core_server_config *sconf = ap_get_core_module_config(r->server->module_config); ap_conf_vector_t **sec_ent = (ap_conf_vector_t **)sconf->sec_url->elts; int num_sec = sconf->sec_url->nelts; walk_cache_t *cache; const char *entry_uri; int cached; /* No tricks here, there are no to parse in this vhost. * We won't destroy the cache, just in case _this_ redirect is later * redirected again to a vhost with blocks to optimize. */ if (!num_sec) { return OK; } cache = prep_walk_cache(AP_NOTE_LOCATION_WALK, r); cached = (cache->cached != NULL); entry_uri = r->uri; /* If we have an cache->cached location that matches r->uri, * and the vhost's list of locations hasn't changed, we can skip * rewalking the location_walk entries. */ if (cached && (cache->dir_conf_tested == sec_ent) && (strcmp(entry_uri, cache->cached) == 0)) { /* Well this looks really familiar! If our end-result (per_dir_result) * didn't change, we have absolutely nothing to do :) * Otherwise (as is the case with most dir_merged/file_merged requests) * we must merge our dir_conf_merged onto this new r->per_dir_config. */ if (r->per_dir_config == cache->per_dir_result) { return OK; } if (cache->walked->nelts) { now_merged = ((walk_walked_t*)cache->walked->elts) [cache->walked->nelts - 1].merged; } } else { /* We start now_merged from NULL since we want to build * a locations list that can be merged to any vhost. */ int len, sec_idx; int matches = cache->walked->nelts; int cached_matches = matches; walk_walked_t *last_walk = (walk_walked_t*)cache->walked->elts; apr_pool_t *rxpool = NULL; cached &= auth_internal_per_conf; cache->cached = entry_uri; /* Go through the location entries, and check for matches. * We apply the directive sections in given order, we should * really try them with the most general first. */ for (sec_idx = 0; sec_idx < num_sec; ++sec_idx) { core_dir_config *entry_core; entry_core = ap_get_core_module_config(sec_ent[sec_idx]); /* ### const strlen can be optimized in location config parsing */ len = strlen(entry_core->d); /* Test the regex, fnmatch or string as appropriate. * If it's a strcmp, and the pattern was * not slash terminated, then this uri must be slash * terminated (or at the end of the string) to match. */ if (entry_core->r) { int nmatch = 0; int i; ap_regmatch_t *pmatch = NULL; if (entry_core->refs && entry_core->refs->nelts) { if (!rxpool) { apr_pool_create(&rxpool, r->pool); } nmatch = entry_core->refs->nelts; pmatch = apr_palloc(rxpool, nmatch*sizeof(ap_regmatch_t)); } if (ap_regexec(entry_core->r, entry_uri, nmatch, pmatch, 0)) { continue; } for (i = 0; i < nmatch; i++) { if (pmatch[i].rm_so >= 0 && pmatch[i].rm_eo >= 0 && ((const char **)entry_core->refs->elts)[i]) { apr_table_setn(r->subprocess_env, ((const char **)entry_core->refs->elts)[i], apr_pstrndup(r->pool, entry_uri + pmatch[i].rm_so, pmatch[i].rm_eo - pmatch[i].rm_so)); } } } else { if ((entry_core->d_is_fnmatch ? apr_fnmatch(entry_core->d, cache->cached, APR_FNM_PATHNAME) : (strncmp(entry_core->d, cache->cached, len) || (len > 0 && entry_core->d[len - 1] != '/' && cache->cached[len] != '/' && cache->cached[len] != '\0')))) { continue; } } /* If we merged this same section last time, reuse it */ if (matches) { if (last_walk->matched == sec_ent[sec_idx]) { now_merged = last_walk->merged; ++last_walk; --matches; continue; } /* We fell out of sync. This is our own copy of walked, * so truncate the remaining matches and reset remaining. */ cache->walked->nelts -= matches; matches = 0; cached = 0; } if (now_merged) { now_merged = ap_merge_per_dir_configs(r->pool, now_merged, sec_ent[sec_idx]); } else { now_merged = sec_ent[sec_idx]; } last_walk = (walk_walked_t*)apr_array_push(cache->walked); last_walk->matched = sec_ent[sec_idx]; last_walk->merged = now_merged; } if (rxpool) { apr_pool_destroy(rxpool); } /* Whoops - everything matched in sequence, but either the original * walk found some additional matches (which we need to truncate), or * this walk found some additional matches. */ if (matches) { cache->walked->nelts -= matches; cached = 0; } else if (cache->walked->nelts > cached_matches) { cached = 0; } } if (cached && r->per_dir_config == cache->dir_conf_merged) { r->per_dir_config = cache->per_dir_result; return OK; } cache->dir_conf_tested = sec_ent; cache->dir_conf_merged = r->per_dir_config; /* Merge our cache->dir_conf_merged construct with the r->per_dir_configs, * and note the end result to (potentially) skip this step next time. */ if (now_merged) { r->per_dir_config = ap_merge_per_dir_configs(r->pool, r->per_dir_config, now_merged); } cache->per_dir_result = r->per_dir_config; return OK; } AP_DECLARE(int) ap_file_walk(request_rec *r) { ap_conf_vector_t *now_merged = NULL; core_dir_config *dconf = ap_get_core_module_config(r->per_dir_config); ap_conf_vector_t **sec_ent = NULL; int num_sec = 0; walk_cache_t *cache; const char *test_file; int cached; if (dconf->sec_file) { sec_ent = (ap_conf_vector_t **)dconf->sec_file->elts; num_sec = dconf->sec_file->nelts; } /* To allow broken modules to proceed, we allow missing filenames to pass. * We will catch it later if it's heading for the core handler. * directory_walk already posted an INFO note for module debugging. */ if (r->filename == NULL) { return OK; } /* No tricks here, there are just no to parse in this context. * We won't destroy the cache, just in case _this_ redirect is later * redirected again to a context containing the same or similar . */ if (!num_sec) { return OK; } cache = prep_walk_cache(AP_NOTE_FILE_WALK, r); cached = (cache->cached != NULL); /* Get the basename .. and copy for the cache just * in case r->filename is munged by another module */ test_file = strrchr(r->filename, '/'); if (test_file == NULL) { test_file = apr_pstrdup(r->pool, r->filename); } else { test_file = apr_pstrdup(r->pool, ++test_file); } /* If we have an cache->cached file name that matches test_file, * and the directory's list of file sections hasn't changed, we * can skip rewalking the file_walk entries. */ if (cached && (cache->dir_conf_tested == sec_ent) && (strcmp(test_file, cache->cached) == 0)) { /* Well this looks really familiar! If our end-result (per_dir_result) * didn't change, we have absolutely nothing to do :) * Otherwise (as is the case with most dir_merged requests) * we must merge our dir_conf_merged onto this new r->per_dir_config. */ if (r->per_dir_config == cache->per_dir_result) { return OK; } if (cache->walked->nelts) { now_merged = ((walk_walked_t*)cache->walked->elts) [cache->walked->nelts - 1].merged; } } else { /* We start now_merged from NULL since we want to build * a file section list that can be merged to any dir_walk. */ int sec_idx; int matches = cache->walked->nelts; int cached_matches = matches; walk_walked_t *last_walk = (walk_walked_t*)cache->walked->elts; apr_pool_t *rxpool = NULL; cached &= auth_internal_per_conf; cache->cached = test_file; /* Go through the location entries, and check for matches. * We apply the directive sections in given order, we should * really try them with the most general first. */ for (sec_idx = 0; sec_idx < num_sec; ++sec_idx) { core_dir_config *entry_core; entry_core = ap_get_core_module_config(sec_ent[sec_idx]); if (entry_core->r) { int nmatch = 0; int i; ap_regmatch_t *pmatch = NULL; if (entry_core->refs && entry_core->refs->nelts) { if (!rxpool) { apr_pool_create(&rxpool, r->pool); } nmatch = entry_core->refs->nelts; pmatch = apr_palloc(rxpool, nmatch*sizeof(ap_regmatch_t)); } if (ap_regexec(entry_core->r, cache->cached, nmatch, pmatch, 0)) { continue; } for (i = 0; i < nmatch; i++) { if (pmatch[i].rm_so >= 0 && pmatch[i].rm_eo >= 0 && ((const char **)entry_core->refs->elts)[i]) { apr_table_setn(r->subprocess_env, ((const char **)entry_core->refs->elts)[i], apr_pstrndup(r->pool, cache->cached + pmatch[i].rm_so, pmatch[i].rm_eo - pmatch[i].rm_so)); } } } else { if ((entry_core->d_is_fnmatch ? apr_fnmatch(entry_core->d, cache->cached, APR_FNM_PATHNAME) : strcmp(entry_core->d, cache->cached))) { continue; } } /* If we merged this same section last time, reuse it */ if (matches) { if (last_walk->matched == sec_ent[sec_idx]) { now_merged = last_walk->merged; ++last_walk; --matches; continue; } /* We fell out of sync. This is our own copy of walked, * so truncate the remaining matches and reset remaining. */ cache->walked->nelts -= matches; matches = 0; cached = 0; } if (now_merged) { now_merged = ap_merge_per_dir_configs(r->pool, now_merged, sec_ent[sec_idx]); } else { now_merged = sec_ent[sec_idx]; } last_walk = (walk_walked_t*)apr_array_push(cache->walked); last_walk->matched = sec_ent[sec_idx]; last_walk->merged = now_merged; } if (rxpool) { apr_pool_destroy(rxpool); } /* Whoops - everything matched in sequence, but either the original * walk found some additional matches (which we need to truncate), or * this walk found some additional matches. */ if (matches) { cache->walked->nelts -= matches; cached = 0; } else if (cache->walked->nelts > cached_matches) { cached = 0; } } if (cached && r->per_dir_config == cache->dir_conf_merged) { r->per_dir_config = cache->per_dir_result; return OK; } cache->dir_conf_tested = sec_ent; cache->dir_conf_merged = r->per_dir_config; /* Merge our cache->dir_conf_merged construct with the r->per_dir_configs, * and note the end result to (potentially) skip this step next time. */ if (now_merged) { r->per_dir_config = ap_merge_per_dir_configs(r->pool, r->per_dir_config, now_merged); } cache->per_dir_result = r->per_dir_config; return OK; } static int ap_if_walk_sub(request_rec *r, core_dir_config* dconf) { ap_conf_vector_t *now_merged = NULL; ap_conf_vector_t **sec_ent = NULL; int num_sec = 0; walk_cache_t *cache; int cached; int sec_idx; int matches; int cached_matches; int prev_result = -1; walk_walked_t *last_walk; if (dconf && dconf->sec_if) { sec_ent = (ap_conf_vector_t **)dconf->sec_if->elts; num_sec = dconf->sec_if->nelts; } /* No tricks here, there are just no to parse in this context. * We won't destroy the cache, just in case _this_ redirect is later * redirected again to a context containing the same or similar . */ if (!num_sec) { return OK; } cache = prep_walk_cache(AP_NOTE_IF_WALK, r); cached = (cache->cached != NULL); cache->cached = (void *)1; matches = cache->walked->nelts; cached_matches = matches; last_walk = (walk_walked_t*)cache->walked->elts; cached &= auth_internal_per_conf; /* Go through the if entries, and check for matches */ for (sec_idx = 0; sec_idx < num_sec; ++sec_idx) { const char *err = NULL; core_dir_config *entry_core; int rc; entry_core = ap_get_core_module_config(sec_ent[sec_idx]); AP_DEBUG_ASSERT(entry_core->condition_ifelse != 0); if (entry_core->condition_ifelse & AP_CONDITION_ELSE) { AP_DEBUG_ASSERT(prev_result != -1); if (prev_result == 1) continue; } if (entry_core->condition_ifelse & AP_CONDITION_IF) { rc = ap_expr_exec(r, entry_core->condition, &err); if (rc <= 0) { if (rc < 0) ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00039) "Failed to evaluate condition: %s", err); prev_result = 0; continue; } prev_result = 1; } else { prev_result = -1; } /* If we merged this same section last time, reuse it */ if (matches) { if (last_walk->matched == sec_ent[sec_idx]) { now_merged = last_walk->merged; ++last_walk; --matches; continue; } /* We fell out of sync. This is our own copy of walked, * so truncate the remaining matches and reset remaining. */ cache->walked->nelts -= matches; matches = 0; cached = 0; } if (now_merged) { now_merged = ap_merge_per_dir_configs(r->pool, now_merged, sec_ent[sec_idx]); } else { now_merged = sec_ent[sec_idx]; } last_walk = (walk_walked_t*)apr_array_push(cache->walked); last_walk->matched = sec_ent[sec_idx]; last_walk->merged = now_merged; } /* Everything matched in sequence, but it may be that the original * walk found some additional matches (which we need to truncate), or * this walk found some additional matches. */ if (matches) { cache->walked->nelts -= matches; cached = 0; } else if (cache->walked->nelts > cached_matches) { cached = 0; } if (cached && r->per_dir_config == cache->dir_conf_merged) { r->per_dir_config = cache->per_dir_result; return OK; } cache->dir_conf_tested = sec_ent; cache->dir_conf_merged = r->per_dir_config; /* Merge our cache->dir_conf_merged construct with the r->per_dir_configs, * and note the end result to (potentially) skip this step next time. */ if (now_merged) { r->per_dir_config = ap_merge_per_dir_configs(r->pool, r->per_dir_config, now_merged); } cache->per_dir_result = r->per_dir_config; if (now_merged) { core_dir_config *dconf_merged = ap_get_core_module_config(now_merged); /* Allow nested s and their configs to get merged * with the current one. */ return ap_if_walk_sub(r, dconf_merged); } return OK; } AP_DECLARE(int) ap_if_walk(request_rec *r) { core_dir_config *dconf = ap_get_core_module_config(r->per_dir_config); int status = ap_if_walk_sub(r, dconf); return status; } /***************************************************************** * * The sub_request mechanism. * * Fns to look up a relative URI from, e.g., a map file or SSI document. * These do all access checks, etc., but don't actually run the transaction * ... use run_sub_req below for that. Also, be sure to use destroy_sub_req * as appropriate if you're likely to be creating more than a few of these. * (An early Apache version didn't destroy the sub_reqs used in directory * indexing. The result, when indexing a directory with 800-odd files in * it, was massively excessive storage allocation). * * Note more manipulation of protocol-specific vars in the request * structure... */ static request_rec *make_sub_request(const request_rec *r, ap_filter_t *next_filter) { apr_pool_t *rrp; request_rec *rnew; apr_pool_create(&rrp, r->pool); apr_pool_tag(rrp, "subrequest"); rnew = apr_pcalloc(rrp, sizeof(request_rec)); rnew->pool = rrp; rnew->hostname = r->hostname; rnew->request_time = r->request_time; rnew->connection = r->connection; rnew->server = r->server; rnew->log = r->log; rnew->request_config = ap_create_request_config(rnew->pool); /* Start a clean config from this subrequest's vhost. Optimization in * Location/File/Dir walks from the parent request assure that if the * config blocks of the subrequest match the parent request, no merges * will actually occur (and generally a minimal number of merges are * required, even if the parent and subrequest aren't quite identical.) */ rnew->per_dir_config = r->server->lookup_defaults; rnew->htaccess = r->htaccess; rnew->allowed_methods = ap_make_method_list(rnew->pool, 2); /* make a copy of the allowed-methods list */ ap_copy_method_list(rnew->allowed_methods, r->allowed_methods); /* start with the same set of output filters */ if (next_filter) { ap_filter_t *scan = next_filter; /* while there are no input filters for a subrequest, we will * try to insert some, so if we don't have valid data, the code * will seg fault. */ rnew->input_filters = r->input_filters; rnew->proto_input_filters = r->proto_input_filters; rnew->output_filters = next_filter; rnew->proto_output_filters = r->proto_output_filters; while (scan && (scan != r->proto_output_filters)) { if (scan->frec == ap_subreq_core_filter_handle) { break; } scan = scan->next; } if (!scan || scan == r->proto_output_filters) { ap_add_output_filter_handle(ap_subreq_core_filter_handle, NULL, rnew, rnew->connection); } } else { /* If NULL - we are expecting to be internal_fast_redirect'ed * to this subrequest - or this request will never be invoked. * Ignore the original request filter stack entirely, and * drill the input and output stacks back to the connection. */ rnew->proto_input_filters = r->proto_input_filters; rnew->proto_output_filters = r->proto_output_filters; rnew->input_filters = r->proto_input_filters; rnew->output_filters = r->proto_output_filters; } rnew->useragent_addr = r->useragent_addr; rnew->useragent_ip = r->useragent_ip; /* no input filters for a subrequest */ ap_set_sub_req_protocol(rnew, r); /* We have to run this after we fill in sub req vars, * or the r->main pointer won't be setup */ ap_run_create_request(rnew); /* Begin by presuming any module can make its own path_info assumptions, * until some module interjects and changes the value. */ rnew->used_path_info = AP_REQ_DEFAULT_PATH_INFO; /* Pass on the kept body (if any) into the new request. */ rnew->kept_body = r->kept_body; return rnew; } AP_CORE_DECLARE_NONSTD(apr_status_t) ap_sub_req_output_filter(ap_filter_t *f, apr_bucket_brigade *bb) { apr_bucket *e = APR_BRIGADE_LAST(bb); if (APR_BUCKET_IS_EOS(e)) { apr_bucket_delete(e); } if (!APR_BRIGADE_EMPTY(bb)) { return ap_pass_brigade(f->next, bb); } return APR_SUCCESS; } extern APR_OPTIONAL_FN_TYPE(authz_some_auth_required) *ap__authz_ap_some_auth_required; AP_DECLARE(int) ap_some_auth_required(request_rec *r) { /* Is there a require line configured for the type of *this* req? */ if (ap__authz_ap_some_auth_required) { return ap__authz_ap_some_auth_required(r); } else return 0; } AP_DECLARE(void) ap_clear_auth_internal(void) { auth_internal_per_conf_hooks = 0; auth_internal_per_conf_providers = 0; } AP_DECLARE(void) ap_setup_auth_internal(apr_pool_t *ptemp) { int total_auth_hooks = 0; int total_auth_providers = 0; auth_internal_per_conf = 0; if (_hooks.link_access_checker) { total_auth_hooks += _hooks.link_access_checker->nelts; } if (_hooks.link_access_checker_ex) { total_auth_hooks += _hooks.link_access_checker_ex->nelts; } if (_hooks.link_check_user_id) { total_auth_hooks += _hooks.link_check_user_id->nelts; } if (_hooks.link_auth_checker) { total_auth_hooks += _hooks.link_auth_checker->nelts; } if (total_auth_hooks > auth_internal_per_conf_hooks) { return; } total_auth_providers += ap_list_provider_names(ptemp, AUTHN_PROVIDER_GROUP, AUTHN_PROVIDER_VERSION)->nelts; total_auth_providers += ap_list_provider_names(ptemp, AUTHZ_PROVIDER_GROUP, AUTHZ_PROVIDER_VERSION)->nelts; if (total_auth_providers > auth_internal_per_conf_providers) { return; } auth_internal_per_conf = 1; } AP_DECLARE(apr_status_t) ap_register_auth_provider(apr_pool_t *pool, const char *provider_group, const char *provider_name, const char *provider_version, const void *provider, int type) { if ((type & AP_AUTH_INTERNAL_MASK) == AP_AUTH_INTERNAL_PER_CONF) { ++auth_internal_per_conf_providers; } return ap_register_provider(pool, provider_group, provider_name, provider_version, provider); } AP_DECLARE(void) ap_hook_check_access(ap_HOOK_access_checker_t *pf, const char * const *aszPre, const char * const *aszSucc, int nOrder, int type) { if ((type & AP_AUTH_INTERNAL_MASK) == AP_AUTH_INTERNAL_PER_CONF) { ++auth_internal_per_conf_hooks; } ap_hook_access_checker(pf, aszPre, aszSucc, nOrder); } AP_DECLARE(void) ap_hook_check_access_ex(ap_HOOK_access_checker_ex_t *pf, const char * const *aszPre, const char * const *aszSucc, int nOrder, int type) { if ((type & AP_AUTH_INTERNAL_MASK) == AP_AUTH_INTERNAL_PER_CONF) { ++auth_internal_per_conf_hooks; } ap_hook_access_checker_ex(pf, aszPre, aszSucc, nOrder); } AP_DECLARE(void) ap_hook_check_authn(ap_HOOK_check_user_id_t *pf, const char * const *aszPre, const char * const *aszSucc, int nOrder, int type) { if ((type & AP_AUTH_INTERNAL_MASK) == AP_AUTH_INTERNAL_PER_CONF) { ++auth_internal_per_conf_hooks; } ap_hook_check_user_id(pf, aszPre, aszSucc, nOrder); } AP_DECLARE(void) ap_hook_check_authz(ap_HOOK_auth_checker_t *pf, const char * const *aszPre, const char * const *aszSucc, int nOrder, int type) { if ((type & AP_AUTH_INTERNAL_MASK) == AP_AUTH_INTERNAL_PER_CONF) { ++auth_internal_per_conf_hooks; } ap_hook_auth_checker(pf, aszPre, aszSucc, nOrder); } AP_DECLARE(request_rec *) ap_sub_req_method_uri(const char *method, const char *new_uri, const request_rec *r, ap_filter_t *next_filter) { request_rec *rnew; /* Initialise res, to avoid a gcc warning */ int res = HTTP_INTERNAL_SERVER_ERROR; char *udir; rnew = make_sub_request(r, next_filter); /* would be nicer to pass "method" to ap_set_sub_req_protocol */ rnew->method = method; rnew->method_number = ap_method_number_of(method); if (new_uri[0] == '/') { ap_parse_uri(rnew, new_uri); } else { udir = ap_make_dirstr_parent(rnew->pool, r->uri); udir = ap_escape_uri(rnew->pool, udir); /* re-escape it */ ap_parse_uri(rnew, ap_make_full_path(rnew->pool, udir, new_uri)); } /* We cannot return NULL without violating the API. So just turn this * subrequest into a 500 to indicate the failure. */ if (ap_is_recursion_limit_exceeded(r)) { rnew->status = HTTP_INTERNAL_SERVER_ERROR; return rnew; } /* lookup_uri * If the content can be served by the quick_handler, we can * safely bypass request_internal processing. * * If next_filter is NULL we are expecting to be * internal_fast_redirect'ed to the subrequest, or the subrequest will * never be invoked. We need to make sure that the quickhandler is not * invoked by any lookups. Since an internal_fast_redirect will always * occur too late for the quickhandler to handle the request. */ if (next_filter) { res = ap_run_quick_handler(rnew, 1); } if (next_filter == NULL || res != OK) { if ((res = ap_process_request_internal(rnew))) { rnew->status = res; } } return rnew; } AP_DECLARE(request_rec *) ap_sub_req_lookup_uri(const char *new_uri, const request_rec *r, ap_filter_t *next_filter) { return ap_sub_req_method_uri("GET", new_uri, r, next_filter); } AP_DECLARE(request_rec *) ap_sub_req_lookup_dirent(const apr_finfo_t *dirent, const request_rec *r, int subtype, ap_filter_t *next_filter) { request_rec *rnew; int res; char *fdir; char *udir; rnew = make_sub_request(r, next_filter); /* Special case: we are looking at a relative lookup in the same directory. * This is 100% safe, since dirent->name just came from the filesystem. */ if (r->path_info && *r->path_info) { /* strip path_info off the end of the uri to keep it in sync * with r->filename, which has already been stripped by directory_walk, * merge the dirent->name, and then, if the caller wants us to remerge * the original path info, do so. Note we never fix the path_info back * to r->filename, since dir_walk would do so (but we don't expect it * to happen in the usual cases) */ udir = apr_pstrdup(rnew->pool, r->uri); udir[ap_find_path_info(udir, r->path_info)] = '\0'; udir = ap_make_dirstr_parent(rnew->pool, udir); rnew->uri = ap_make_full_path(rnew->pool, udir, dirent->name); if (subtype == AP_SUBREQ_MERGE_ARGS) { rnew->uri = ap_make_full_path(rnew->pool, rnew->uri, r->path_info + 1); rnew->path_info = apr_pstrdup(rnew->pool, r->path_info); } rnew->uri = ap_escape_uri(rnew->pool, rnew->uri); } else { udir = ap_make_dirstr_parent(rnew->pool, r->uri); rnew->uri = ap_escape_uri(rnew->pool, ap_make_full_path(rnew->pool, udir, dirent->name)); } fdir = ap_make_dirstr_parent(rnew->pool, r->filename); rnew->filename = ap_make_full_path(rnew->pool, fdir, dirent->name); if (r->canonical_filename == r->filename) { rnew->canonical_filename = rnew->filename; } /* XXX This is now less relevant; we will do a full location walk * these days for this case. Preserve the apr_stat results, and * perhaps we also tag that symlinks were tested and/or found for * r->filename. */ rnew->per_dir_config = r->server->lookup_defaults; if ((dirent->valid & APR_FINFO_MIN) != APR_FINFO_MIN) { /* * apr_dir_read isn't very complete on this platform, so * we need another apr_stat (with or without APR_FINFO_LINK * depending on whether we allow all symlinks here.) If this * is an APR_LNK that resolves to an APR_DIR, then we will rerun * everything anyways... this should be safe. */ apr_status_t rv; if (ap_allow_options(rnew) & OPT_SYM_LINKS) { if (((rv = apr_stat(&rnew->finfo, rnew->filename, APR_FINFO_MIN, rnew->pool)) != APR_SUCCESS) && (rv != APR_INCOMPLETE)) { rnew->finfo.filetype = APR_NOFILE; } } else { if (((rv = apr_stat(&rnew->finfo, rnew->filename, APR_FINFO_LINK | APR_FINFO_MIN, rnew->pool)) != APR_SUCCESS) && (rv != APR_INCOMPLETE)) { rnew->finfo.filetype = APR_NOFILE; } } } else { memcpy(&rnew->finfo, dirent, sizeof(apr_finfo_t)); } if (rnew->finfo.filetype == APR_LNK) { /* * Resolve this symlink. We should tie this back to dir_walk's cache */ if ((res = resolve_symlink(rnew->filename, &rnew->finfo, ap_allow_options(rnew), rnew->pool)) != OK) { rnew->status = res; return rnew; } } if (rnew->finfo.filetype == APR_DIR) { /* ap_make_full_path overallocated the buffers * by one character to help us out here. */ strcat(rnew->filename, "/"); if (!rnew->path_info || !*rnew->path_info) { strcat(rnew->uri, "/"); } } /* fill in parsed_uri values */ if (r->args && *r->args && (subtype == AP_SUBREQ_MERGE_ARGS)) { ap_parse_uri(rnew, apr_pstrcat(r->pool, rnew->uri, "?", r->args, NULL)); } else { ap_parse_uri(rnew, rnew->uri); } /* We cannot return NULL without violating the API. So just turn this * subrequest into a 500. */ if (ap_is_recursion_limit_exceeded(r)) { rnew->status = HTTP_INTERNAL_SERVER_ERROR; return rnew; } if ((res = ap_process_request_internal(rnew))) { rnew->status = res; } return rnew; } AP_DECLARE(request_rec *) ap_sub_req_lookup_file(const char *new_file, const request_rec *r, ap_filter_t *next_filter) { request_rec *rnew; int res; char *fdir; apr_size_t fdirlen; rnew = make_sub_request(r, next_filter); fdir = ap_make_dirstr_parent(rnew->pool, r->filename); fdirlen = strlen(fdir); /* Translate r->filename, if it was canonical, it stays canonical */ if (r->canonical_filename == r->filename) { rnew->canonical_filename = (char*)(1); } if (apr_filepath_merge(&rnew->filename, fdir, new_file, APR_FILEPATH_TRUENAME, rnew->pool) != APR_SUCCESS) { rnew->status = HTTP_FORBIDDEN; return rnew; } if (rnew->canonical_filename) { rnew->canonical_filename = rnew->filename; } /* * Check for a special case... if there are no '/' characters in new_file * at all, and the path was the same, then we are looking at a relative * lookup in the same directory. Fixup the URI to match. */ if (strncmp(rnew->filename, fdir, fdirlen) == 0 && rnew->filename[fdirlen] && ap_strchr_c(rnew->filename + fdirlen, '/') == NULL) { apr_status_t rv; if (ap_allow_options(rnew) & OPT_SYM_LINKS) { if (((rv = apr_stat(&rnew->finfo, rnew->filename, APR_FINFO_MIN, rnew->pool)) != APR_SUCCESS) && (rv != APR_INCOMPLETE)) { rnew->finfo.filetype = APR_NOFILE; } } else { if (((rv = apr_stat(&rnew->finfo, rnew->filename, APR_FINFO_LINK | APR_FINFO_MIN, rnew->pool)) != APR_SUCCESS) && (rv != APR_INCOMPLETE)) { rnew->finfo.filetype = APR_NOFILE; } } if (r->uri && *r->uri) { char *udir = ap_make_dirstr_parent(rnew->pool, r->uri); rnew->uri = ap_make_full_path(rnew->pool, udir, rnew->filename + fdirlen); ap_parse_uri(rnew, rnew->uri); /* fill in parsed_uri values */ } else { ap_parse_uri(rnew, new_file); /* fill in parsed_uri values */ rnew->uri = apr_pstrdup(rnew->pool, ""); } } else { /* XXX: @@@: What should be done with the parsed_uri values? * We would be better off stripping down to the 'common' elements * of the path, then reassembling the URI as best as we can. */ ap_parse_uri(rnew, new_file); /* fill in parsed_uri values */ /* * XXX: this should be set properly like it is in the same-dir case * but it's actually sometimes to impossible to do it... because the * file may not have a uri associated with it -djg */ rnew->uri = apr_pstrdup(rnew->pool, ""); } /* We cannot return NULL without violating the API. So just turn this * subrequest into a 500. */ if (ap_is_recursion_limit_exceeded(r)) { rnew->status = HTTP_INTERNAL_SERVER_ERROR; return rnew; } if ((res = ap_process_request_internal(rnew))) { rnew->status = res; } return rnew; } AP_DECLARE(int) ap_run_sub_req(request_rec *r) { int retval = DECLINED; /* Run the quick handler if the subrequest is not a dirent or file * subrequest */ if (!(r->filename && r->finfo.filetype != APR_NOFILE)) { retval = ap_run_quick_handler(r, 0); } if (retval != OK) { retval = ap_invoke_handler(r); if (retval == DONE) { retval = OK; } } ap_finalize_sub_req_protocol(r); return retval; } AP_DECLARE(void) ap_destroy_sub_req(request_rec *r) { /* Reclaim the space */ apr_pool_destroy(r->pool); } /* * Function to set the r->mtime field to the specified value if it's later * than what's already there. */ AP_DECLARE(void) ap_update_mtime(request_rec *r, apr_time_t dependency_mtime) { if (r->mtime < dependency_mtime) { r->mtime = dependency_mtime; } } /* * Is it the initial main request, which we only get *once* per HTTP request? */ AP_DECLARE(int) ap_is_initial_req(request_rec *r) { return (r->main == NULL) /* otherwise, this is a sub-request */ && (r->prev == NULL); /* otherwise, this is an internal redirect */ } httpd-2.4.41/server/util_expr_private.h0000644000000000000500000001111611644654166016475 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __AP_EXPR_PRIVATE_H__ #define __AP_EXPR_PRIVATE_H__ #include "httpd.h" #include "apr_strings.h" #include "apr_tables.h" #include "ap_expr.h" #ifndef YY_NULL #define YY_NULL 0 #endif #ifndef MIN #define MIN(a,b) (((a)<(b))?(a):(b)) #endif #if !APR_HAVE_UNISTD_H #define YY_NO_UNISTD_H #endif #ifdef _MSC_VER /* Avoid some warnings with Visual Studio (likely due to a bug in bison) */ #define YYMALLOC malloc #define YYFREE free #endif #ifndef YYDEBUG #define YYDEBUG 0 #endif /** The operations in a parse tree node */ typedef enum { op_NOP, op_True, op_False, op_Not, op_Or, op_And, op_Comp, op_EQ, op_NE, op_LT, op_LE, op_GT, op_GE, op_IN, op_REG, op_NRE, op_STR_EQ, op_STR_NE, op_STR_LT, op_STR_LE, op_STR_GT, op_STR_GE, op_Concat, op_Digit, op_String, op_Regex, op_RegexBackref, op_Var, op_ListElement, /* * call external functions/operators. * The info node contains the function pointer and some function specific * info. * For Binary operators, the Call node links to the Info node and the * Args node, which in turn links to the left and right operand. * For all other variants, the Call node links to the Info node and the * argument. */ op_UnaryOpCall, op_UnaryOpInfo, op_BinaryOpCall, op_BinaryOpInfo, op_BinaryOpArgs, op_StringFuncCall, op_StringFuncInfo, op_ListFuncCall, op_ListFuncInfo } ap_expr_node_op_e; /** The basic parse tree node */ struct ap_expr_node { ap_expr_node_op_e node_op; const void *node_arg1; const void *node_arg2; }; /** The context used by scanner and parser */ typedef struct { /* internal state of the scanner */ const char *inputbuf; int inputlen; const char *inputptr; void *scanner; char *scan_ptr; char scan_buf[MAX_STRING_LEN]; char scan_del; int at_start; /* pools for result and temporary usage */ apr_pool_t *pool; apr_pool_t *ptemp; /* The created parse tree */ ap_expr_t *expr; const char *error; const char *error2; unsigned flags; /* * The function to use to lookup provider functions for variables * and funtctions */ ap_expr_lookup_fn_t *lookup_fn; } ap_expr_parse_ctx_t; /* flex/bison functions */ int ap_expr_yyparse(ap_expr_parse_ctx_t *context); void ap_expr_yyerror(ap_expr_parse_ctx_t *context, const char *err); int ap_expr_yylex_init(void **scanner); int ap_expr_yylex_destroy(void *scanner); void ap_expr_yyset_extra(ap_expr_parse_ctx_t *context, void *scanner); /* create a parse tree node */ ap_expr_t *ap_expr_make(ap_expr_node_op_e op, const void *arg1, const void *arg2, ap_expr_parse_ctx_t *ctx); /* create parse tree node for the string-returning function 'name' */ ap_expr_t *ap_expr_str_func_make(const char *name, const ap_expr_t *arg, ap_expr_parse_ctx_t *ctx); /* create parse tree node for the list-returning function 'name' */ ap_expr_t *ap_expr_list_func_make(const char *name, const ap_expr_t *arg, ap_expr_parse_ctx_t *ctx); /* create parse tree node for the variable 'name' */ ap_expr_t *ap_expr_var_make(const char *name, ap_expr_parse_ctx_t *ctx); /* create parse tree node for the unary operator 'name' */ ap_expr_t *ap_expr_unary_op_make(const char *name, const ap_expr_t *arg, ap_expr_parse_ctx_t *ctx); /* create parse tree node for the binary operator 'name' */ ap_expr_t *ap_expr_binary_op_make(const char *name, const ap_expr_t *arg1, const ap_expr_t *arg2, ap_expr_parse_ctx_t *ctx); #endif /* __AP_EXPR_PRIVATE_H__ */ /** @} */ httpd-2.4.41/server/gen_test_char.mak0000644000000000000500000001227212674411515016053 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on gen_test_char.dsp !IF "$(CFG)" == "" CFG=gen_test_char - Win32 Debug !MESSAGE No configuration specified. Defaulting to gen_test_char - Win32 Debug. !ENDIF !IF "$(CFG)" != "gen_test_char - Win32 Release" && "$(CFG)" != "gen_test_char - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "gen_test_char.mak" CFG="gen_test_char - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "gen_test_char - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "gen_test_char - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "gen_test_char - Win32 Release" OUTDIR=. INTDIR=.\Release # Begin Custom Macros OutDir=. # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\gen_test_char.exe" !ELSE ALL : "libapr - Win32 Release" "$(OUTDIR)\gen_test_char.exe" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\gen_test_char.idb" -@erase "$(INTDIR)\gen_test_char.obj" -@erase "$(OUTDIR)\gen_test_char.exe" "$(INTDIR)" : if not exist "$(INTDIR)/$(NULL)" mkdir "$(INTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /O2 /I "..\include" /I "..\srclib\apr\include" /I "..\srclib\apr-util\include" /I "..\os\win32" /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\gen_test_char" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\gen_test_char.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\Release\gen_test_char.pdb" /out:"$(OUTDIR)\gen_test_char.exe" /opt:ref LINK32_OBJS= \ "$(INTDIR)\gen_test_char.obj" \ "..\srclib\apr\Release\libapr-1.lib" "$(OUTDIR)\gen_test_char.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << !ELSEIF "$(CFG)" == "gen_test_char - Win32 Debug" OUTDIR=. INTDIR=.\Debug # Begin Custom Macros OutDir=. # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\gen_test_char.exe" !ELSE ALL : "libapr - Win32 Debug" "$(OUTDIR)\gen_test_char.exe" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\gen_test_char.idb" -@erase "$(INTDIR)\gen_test_char.obj" -@erase "$(OUTDIR)\Debug\gen_test_char.pdb" -@erase "$(OUTDIR)\gen_test_char.exe" "$(INTDIR)" : if not exist "$(INTDIR)/$(NULL)" mkdir "$(INTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "..\include" /I "..\srclib\apr\include" /I "..\srclib\apr-util\include" /I "..\os\win32" /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\gen_test_char" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\gen_test_char.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\Debug\gen_test_char.pdb" /debug /out:"$(OUTDIR)\gen_test_char.exe" LINK32_OBJS= \ "$(INTDIR)\gen_test_char.obj" \ "..\srclib\apr\Debug\libapr-1.lib" "$(OUTDIR)\gen_test_char.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("gen_test_char.dep") !INCLUDE "gen_test_char.dep" !ELSE !MESSAGE Warning: cannot find "gen_test_char.dep" !ENDIF !ENDIF !IF "$(CFG)" == "gen_test_char - Win32 Release" || "$(CFG)" == "gen_test_char - Win32 Debug" !IF "$(CFG)" == "gen_test_char - Win32 Release" "libapr - Win32 Release" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\server" "libapr - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\server" !ELSEIF "$(CFG)" == "gen_test_char - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\server" "libapr - Win32 DebugCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\server" !ENDIF SOURCE=.\gen_test_char.c "$(INTDIR)\gen_test_char.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/server/util_charset.c0000644000000000000500000000177712425122625015411 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ap_config.h" #if APR_CHARSET_EBCDIC #include "httpd.h" #include "http_log.h" #include "http_core.h" #include "util_charset.h" apr_xlate_t *ap_hdrs_to_ascii, *ap_hdrs_from_ascii; #endif /*APR_CHARSET_EBCDIC */ httpd-2.4.41/server/util_script.c0000644000000000000500000007271713335040064015263 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr.h" #include "apr_lib.h" #include "apr_strings.h" #define APR_WANT_STRFUNC #include "apr_want.h" #if APR_HAVE_STDLIB_H #include #endif #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_main.h" #include "http_log.h" #include "http_core.h" #include "http_protocol.h" #include "http_request.h" /* for sub_req_lookup_uri() */ #include "util_script.h" #include "apr_date.h" /* For apr_date_parse_http() */ #include "util_ebcdic.h" #ifdef OS2 #define INCL_DOS #include #endif /* * Various utility functions which are common to a whole lot of * script-type extensions mechanisms, and might as well be gathered * in one place (if only to avoid creating inter-module dependancies * where there don't have to be). */ /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX static char *http2env(request_rec *r, const char *w) { char *res = (char *)apr_palloc(r->pool, sizeof("HTTP_") + strlen(w)); char *cp = res; char c; *cp++ = 'H'; *cp++ = 'T'; *cp++ = 'T'; *cp++ = 'P'; *cp++ = '_'; while ((c = *w++) != 0) { if (apr_isalnum(c)) { *cp++ = apr_toupper(c); } else if (c == '-') { *cp++ = '_'; } else { if (APLOGrtrace1(r)) ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Not exporting header with invalid name as envvar: %s", ap_escape_logitem(r->pool, w)); return NULL; } } *cp = 0; return res; } static void add_unless_null(apr_table_t *table, const char *name, const char *val) { if (name && val) { apr_table_addn(table, name, val); } } static void env2env(apr_table_t *table, const char *name) { add_unless_null(table, name, getenv(name)); } AP_DECLARE(char **) ap_create_environment(apr_pool_t *p, apr_table_t *t) { const apr_array_header_t *env_arr = apr_table_elts(t); const apr_table_entry_t *elts = (const apr_table_entry_t *) env_arr->elts; char **env = (char **) apr_palloc(p, (env_arr->nelts + 2) * sizeof(char *)); int i, j; char *tz; char *whack; j = 0; if (!apr_table_get(t, "TZ")) { tz = getenv("TZ"); if (tz != NULL) { env[j++] = apr_pstrcat(p, "TZ=", tz, NULL); } } for (i = 0; i < env_arr->nelts; ++i) { if (!elts[i].key) { continue; } env[j] = apr_pstrcat(p, elts[i].key, "=", elts[i].val, NULL); whack = env[j]; if (apr_isdigit(*whack)) { *whack++ = '_'; } while (*whack != '=') { #ifdef WIN32 if (!apr_isalnum(*whack) && *whack != '(' && *whack != ')') { #else if (!apr_isalnum(*whack)) { #endif *whack = '_'; } ++whack; } ++j; } env[j] = NULL; return env; } AP_DECLARE(void) ap_add_common_vars(request_rec *r) { apr_table_t *e; server_rec *s = r->server; conn_rec *c = r->connection; core_dir_config *conf = (core_dir_config *)ap_get_core_module_config(r->per_dir_config); const char *env_temp; const apr_array_header_t *hdrs_arr = apr_table_elts(r->headers_in); const apr_table_entry_t *hdrs = (const apr_table_entry_t *) hdrs_arr->elts; int i; apr_port_t rport; char *q; /* use a temporary apr_table_t which we'll overlap onto * r->subprocess_env later * (exception: if r->subprocess_env is empty at the start, * write directly into it) */ if (apr_is_empty_table(r->subprocess_env)) { e = r->subprocess_env; } else { e = apr_table_make(r->pool, 25 + hdrs_arr->nelts); } /* First, add environment vars from headers... this is as per * CGI specs, though other sorts of scripting interfaces see * the same vars... */ for (i = 0; i < hdrs_arr->nelts; ++i) { if (!hdrs[i].key) { continue; } /* A few headers are special cased --- Authorization to prevent * rogue scripts from capturing passwords; content-type and -length * for no particular reason. */ if (!strcasecmp(hdrs[i].key, "Content-type")) { apr_table_addn(e, "CONTENT_TYPE", hdrs[i].val); } else if (!strcasecmp(hdrs[i].key, "Content-length")) { apr_table_addn(e, "CONTENT_LENGTH", hdrs[i].val); } /* HTTP_PROXY collides with a popular envvar used to configure * proxies, don't let clients set/override it. But, if you must... */ #ifndef SECURITY_HOLE_PASS_PROXY else if (!ap_cstr_casecmp(hdrs[i].key, "Proxy")) { ; } #endif /* * You really don't want to disable this check, since it leaves you * wide open to CGIs stealing passwords and people viewing them * in the environment with "ps -e". But, if you must... */ #ifndef SECURITY_HOLE_PASS_AUTHORIZATION else if (!strcasecmp(hdrs[i].key, "Authorization") || !strcasecmp(hdrs[i].key, "Proxy-Authorization")) { if (conf->cgi_pass_auth == AP_CGI_PASS_AUTH_ON) { add_unless_null(e, http2env(r, hdrs[i].key), hdrs[i].val); } } #endif else add_unless_null(e, http2env(r, hdrs[i].key), hdrs[i].val); } env_temp = apr_table_get(r->subprocess_env, "PATH"); if (env_temp == NULL) { env_temp = getenv("PATH"); } if (env_temp == NULL) { env_temp = DEFAULT_PATH; } apr_table_addn(e, "PATH", apr_pstrdup(r->pool, env_temp)); #if defined(WIN32) env2env(e, "SystemRoot"); env2env(e, "COMSPEC"); env2env(e, "PATHEXT"); env2env(e, "WINDIR"); #elif defined(OS2) env2env(e, "COMSPEC"); env2env(e, "ETC"); env2env(e, "DPATH"); env2env(e, "PERLLIB_PREFIX"); #elif defined(BEOS) env2env(e, "LIBRARY_PATH"); #elif defined(DARWIN) env2env(e, "DYLD_LIBRARY_PATH"); #elif defined(_AIX) env2env(e, "LIBPATH"); #elif defined(__HPUX__) /* HPUX PARISC 2.0W knows both, otherwise redundancy is harmless */ env2env(e, "SHLIB_PATH"); env2env(e, "LD_LIBRARY_PATH"); #else /* Some Unix */ env2env(e, "LD_LIBRARY_PATH"); #endif apr_table_addn(e, "SERVER_SIGNATURE", ap_psignature("", r)); apr_table_addn(e, "SERVER_SOFTWARE", ap_get_server_banner()); apr_table_addn(e, "SERVER_NAME", ap_escape_html(r->pool, ap_get_server_name_for_url(r))); apr_table_addn(e, "SERVER_ADDR", r->connection->local_ip); /* Apache */ apr_table_addn(e, "SERVER_PORT", apr_psprintf(r->pool, "%u", ap_get_server_port(r))); add_unless_null(e, "REMOTE_HOST", ap_get_useragent_host(r, REMOTE_HOST, NULL)); apr_table_addn(e, "REMOTE_ADDR", r->useragent_ip); apr_table_addn(e, "DOCUMENT_ROOT", ap_document_root(r)); /* Apache */ apr_table_setn(e, "REQUEST_SCHEME", ap_http_scheme(r)); apr_table_addn(e, "CONTEXT_PREFIX", ap_context_prefix(r)); apr_table_addn(e, "CONTEXT_DOCUMENT_ROOT", ap_context_document_root(r)); apr_table_addn(e, "SERVER_ADMIN", s->server_admin); /* Apache */ if (apr_table_get(r->notes, "proxy-noquery") && (q = ap_strchr(r->filename, '?'))) { char *script_filename = apr_pstrmemdup(r->pool, r->filename, q - r->filename); apr_table_addn(e, "SCRIPT_FILENAME", script_filename); } else { apr_table_addn(e, "SCRIPT_FILENAME", r->filename); /* Apache */ } rport = c->client_addr->port; apr_table_addn(e, "REMOTE_PORT", apr_itoa(r->pool, rport)); if (r->user) { apr_table_addn(e, "REMOTE_USER", r->user); } else if (r->prev) { request_rec *back = r->prev; while (back) { if (back->user) { apr_table_addn(e, "REDIRECT_REMOTE_USER", back->user); break; } back = back->prev; } } add_unless_null(e, "AUTH_TYPE", r->ap_auth_type); env_temp = ap_get_remote_logname(r); if (env_temp) { apr_table_addn(e, "REMOTE_IDENT", apr_pstrdup(r->pool, env_temp)); } /* Apache custom error responses. If we have redirected set two new vars */ if (r->prev) { if (conf->qualify_redirect_url != AP_CORE_CONFIG_ON) { add_unless_null(e, "REDIRECT_URL", r->prev->uri); } else { /* PR#57785: reconstruct full URL here */ apr_uri_t *uri = &r->prev->parsed_uri; if (!uri->scheme) { uri->scheme = (char*)ap_http_scheme(r->prev); } if (!uri->port) { uri->port = ap_get_server_port(r->prev); uri->port_str = apr_psprintf(r->pool, "%u", uri->port); } if (!uri->hostname) { uri->hostname = (char*)ap_get_server_name_for_url(r->prev); } add_unless_null(e, "REDIRECT_URL", apr_uri_unparse(r->pool, uri, 0)); } add_unless_null(e, "REDIRECT_QUERY_STRING", r->prev->args); } if (e != r->subprocess_env) { apr_table_overlap(r->subprocess_env, e, APR_OVERLAP_TABLES_SET); } } /* This "cute" little function comes about because the path info on * filenames and URLs aren't always the same. So we take the two, * and find as much of the two that match as possible. */ AP_DECLARE(int) ap_find_path_info(const char *uri, const char *path_info) { int lu = strlen(uri); int lp = strlen(path_info); while (lu-- && lp-- && uri[lu] == path_info[lp]) { if (path_info[lp] == '/') { while (lu && uri[lu-1] == '/') lu--; } } if (lu == -1) { lu = 0; } while (uri[lu] != '\0' && uri[lu] != '/') { lu++; } return lu; } /* Obtain the Request-URI from the original request-line, returning * a new string from the request pool containing the URI or "". */ static char *original_uri(request_rec *r) { char *first, *last; if (r->the_request == NULL) { return (char *) apr_pcalloc(r->pool, 1); } first = r->the_request; /* use the request-line */ while (*first && !apr_isspace(*first)) { ++first; /* skip over the method */ } while (apr_isspace(*first)) { ++first; /* and the space(s) */ } last = first; while (*last && !apr_isspace(*last)) { ++last; /* end at next whitespace */ } return apr_pstrmemdup(r->pool, first, last - first); } AP_DECLARE(void) ap_add_cgi_vars(request_rec *r) { apr_table_t *e = r->subprocess_env; core_dir_config *conf = (core_dir_config *)ap_get_core_module_config(r->per_dir_config); int request_uri_from_original = 1; const char *request_uri_rule; apr_table_setn(e, "GATEWAY_INTERFACE", "CGI/1.1"); apr_table_setn(e, "SERVER_PROTOCOL", r->protocol); apr_table_setn(e, "REQUEST_METHOD", r->method); apr_table_setn(e, "QUERY_STRING", r->args ? r->args : ""); if (conf->cgi_var_rules) { request_uri_rule = apr_hash_get(conf->cgi_var_rules, "REQUEST_URI", APR_HASH_KEY_STRING); if (request_uri_rule && !strcmp(request_uri_rule, "current-uri")) { request_uri_from_original = 0; } } apr_table_setn(e, "REQUEST_URI", request_uri_from_original ? original_uri(r) : r->uri); /* Note that the code below special-cases scripts run from includes, * because it "knows" that the sub_request has been hacked to have the * args and path_info of the original request, and not any that may have * come with the script URI in the include command. Ugh. */ if (!strcmp(r->protocol, "INCLUDED")) { apr_table_setn(e, "SCRIPT_NAME", r->uri); if (r->path_info && *r->path_info) { apr_table_setn(e, "PATH_INFO", r->path_info); } } else if (!r->path_info || !*r->path_info) { apr_table_setn(e, "SCRIPT_NAME", r->uri); } else { int path_info_start = ap_find_path_info(r->uri, r->path_info); apr_table_setn(e, "SCRIPT_NAME", apr_pstrndup(r->pool, r->uri, path_info_start)); apr_table_setn(e, "PATH_INFO", r->path_info); } if (r->path_info && r->path_info[0]) { /* * To get PATH_TRANSLATED, treat PATH_INFO as a URI path. * Need to re-escape it for this, since the entire URI was * un-escaped before we determined where the PATH_INFO began. */ request_rec *pa_req; pa_req = ap_sub_req_lookup_uri(ap_escape_uri(r->pool, r->path_info), r, NULL); if (pa_req->filename) { char *pt = apr_pstrcat(r->pool, pa_req->filename, pa_req->path_info, NULL); #ifdef WIN32 /* We need to make this a real Windows path name */ apr_filepath_merge(&pt, "", pt, APR_FILEPATH_NATIVE, r->pool); #endif apr_table_setn(e, "PATH_TRANSLATED", pt); } ap_destroy_sub_req(pa_req); } } static int set_cookie_doo_doo(void *v, const char *key, const char *val) { apr_table_addn(v, key, val); return 1; } #define HTTP_UNSET (-HTTP_OK) #define SCRIPT_LOG_MARK __FILE__,__LINE__,module_index AP_DECLARE(int) ap_scan_script_header_err_core_ex(request_rec *r, char *buffer, int (*getsfunc) (char *, int, void *), void *getsfunc_data, int module_index) { char x[MAX_STRING_LEN]; char *w, *l; int p; int cgi_status = HTTP_UNSET; apr_table_t *merge; apr_table_t *cookie_table; int trace_log = APLOG_R_MODULE_IS_LEVEL(r, module_index, APLOG_TRACE1); int first_header = 1; if (buffer) { *buffer = '\0'; } w = buffer ? buffer : x; /* temporary place to hold headers to merge in later */ merge = apr_table_make(r->pool, 10); /* The HTTP specification says that it is legal to merge duplicate * headers into one. Some browsers that support Cookies don't like * merged headers and prefer that each Set-Cookie header is sent * separately. Lets humour those browsers by not merging. * Oh what a pain it is. */ cookie_table = apr_table_make(r->pool, 2); apr_table_do(set_cookie_doo_doo, cookie_table, r->err_headers_out, "Set-Cookie", NULL); while (1) { int rv = (*getsfunc) (w, MAX_STRING_LEN - 1, getsfunc_data); if (rv == 0) { const char *msg = "Premature end of script headers"; if (first_header) msg = "End of script output before headers"; /* Intentional no APLOGNO */ ap_log_rerror(SCRIPT_LOG_MARK, APLOG_ERR|APLOG_TOCLIENT, 0, r, "%s: %s", msg, apr_filepath_name_get(r->filename)); return HTTP_INTERNAL_SERVER_ERROR; } else if (rv == -1) { /* Intentional no APLOGNO */ ap_log_rerror(SCRIPT_LOG_MARK, APLOG_ERR|APLOG_TOCLIENT, 0, r, "Script timed out before returning headers: %s", apr_filepath_name_get(r->filename)); return HTTP_GATEWAY_TIME_OUT; } /* Delete terminal (CR?)LF */ p = strlen(w); /* Indeed, the host's '\n': '\012' for UNIX; '\015' for MacOS; '\025' for OS/390 -- whatever the script generates. */ if (p > 0 && w[p - 1] == '\n') { if (p > 1 && w[p - 2] == CR) { w[p - 2] = '\0'; } else { w[p - 1] = '\0'; } } /* * If we've finished reading the headers, check to make sure any * HTTP/1.1 conditions are met. If so, we're done; normal processing * will handle the script's output. If not, just return the error. * The appropriate thing to do would be to send the script process a * SIGPIPE to let it know we're ignoring it, close the channel to the * script process, and *then* return the failed-to-meet-condition * error. Otherwise we'd be waiting for the script to finish * blithering before telling the client the output was no good. * However, we don't have the information to do that, so we have to * leave it to an upper layer. */ if (w[0] == '\0') { int cond_status = OK; /* PR#38070: This fails because it gets confused when a * CGI Status header overrides ap_meets_conditions. * * We can fix that by dropping ap_meets_conditions when * Status has been set. Since this is the only place * cgi_status gets used, let's test it explicitly. * * The alternative would be to ignore CGI Status when * ap_meets_conditions returns anything interesting. * That would be safer wrt HTTP, but would break CGI. */ if ((cgi_status == HTTP_UNSET) && (r->method_number == M_GET)) { cond_status = ap_meets_conditions(r); } apr_table_overlap(r->err_headers_out, merge, APR_OVERLAP_TABLES_MERGE); if (!apr_is_empty_table(cookie_table)) { /* the cookies have already been copied to the cookie_table */ apr_table_unset(r->err_headers_out, "Set-Cookie"); r->err_headers_out = apr_table_overlay(r->pool, r->err_headers_out, cookie_table); } return cond_status; } if (trace_log) { if (first_header) ap_log_rerror(SCRIPT_LOG_MARK, APLOG_TRACE4, 0, r, "Headers from script '%s':", apr_filepath_name_get(r->filename)); ap_log_rerror(SCRIPT_LOG_MARK, APLOG_TRACE4, 0, r, " %s", w); } /* if we see a bogus header don't ignore it. Shout and scream */ #if APR_CHARSET_EBCDIC /* Chances are that we received an ASCII header text instead of * the expected EBCDIC header lines. Try to auto-detect: */ if (!(l = strchr(w, ':'))) { int maybeASCII = 0, maybeEBCDIC = 0; unsigned char *cp, native; apr_size_t inbytes_left, outbytes_left; for (cp = w; *cp != '\0'; ++cp) { native = apr_xlate_conv_byte(ap_hdrs_from_ascii, *cp); if (apr_isprint(*cp) && !apr_isprint(native)) ++maybeEBCDIC; if (!apr_isprint(*cp) && apr_isprint(native)) ++maybeASCII; } if (maybeASCII > maybeEBCDIC) { ap_log_error(SCRIPT_LOG_MARK, APLOG_ERR, 0, r->server, APLOGNO(02660) "CGI Interface Error: " "Script headers apparently ASCII: (CGI = %s)", r->filename); inbytes_left = outbytes_left = cp - w; apr_xlate_conv_buffer(ap_hdrs_from_ascii, w, &inbytes_left, w, &outbytes_left); } } #endif /*APR_CHARSET_EBCDIC*/ if (!(l = strchr(w, ':'))) { if (!buffer) { /* Soak up all the script output - may save an outright kill */ while ((*getsfunc)(w, MAX_STRING_LEN - 1, getsfunc_data) > 0) { continue; } } /* Intentional no APLOGNO */ ap_log_rerror(SCRIPT_LOG_MARK, APLOG_ERR|APLOG_TOCLIENT, 0, r, "malformed header from script '%s': Bad header: %.30s", apr_filepath_name_get(r->filename), w); return HTTP_INTERNAL_SERVER_ERROR; } *l++ = '\0'; while (apr_isspace(*l)) { ++l; } if (!strcasecmp(w, "Content-type")) { char *tmp; /* Nuke trailing whitespace */ char *endp = l + strlen(l) - 1; while (endp > l && apr_isspace(*endp)) { *endp-- = '\0'; } tmp = apr_pstrdup(r->pool, l); ap_content_type_tolower(tmp); ap_set_content_type(r, tmp); } /* * If the script returned a specific status, that's what * we'll use - otherwise we assume 200 OK. */ else if (!strcasecmp(w, "Status")) { r->status = cgi_status = atoi(l); if (!ap_is_HTTP_VALID_RESPONSE(cgi_status)) /* Intentional no APLOGNO */ ap_log_rerror(SCRIPT_LOG_MARK, APLOG_ERR|APLOG_TOCLIENT, 0, r, "Invalid status line from script '%s': %.30s", apr_filepath_name_get(r->filename), l); else if (APLOGrtrace1(r)) ap_log_rerror(SCRIPT_LOG_MARK, APLOG_TRACE1, 0, r, "Status line from script '%s': %.30s", apr_filepath_name_get(r->filename), l); r->status_line = apr_pstrdup(r->pool, l); } else if (!strcasecmp(w, "Location")) { apr_table_set(r->headers_out, w, l); } else if (!strcasecmp(w, "Content-Length")) { apr_table_set(r->headers_out, w, l); } else if (!strcasecmp(w, "Content-Range")) { apr_table_set(r->headers_out, w, l); } else if (!strcasecmp(w, "Transfer-Encoding")) { apr_table_set(r->headers_out, w, l); } else if (!strcasecmp(w, "ETag")) { apr_table_set(r->headers_out, w, l); } /* * If the script gave us a Last-Modified header, we can't just * pass it on blindly because of restrictions on future values. */ else if (!strcasecmp(w, "Last-Modified")) { ap_update_mtime(r, apr_date_parse_http(l)); ap_set_last_modified(r); } else if (!strcasecmp(w, "Set-Cookie")) { apr_table_add(cookie_table, w, l); } else { apr_table_add(merge, w, l); } first_header = 0; } /* never reached - we leave this function within the while loop above */ return OK; } AP_DECLARE(int) ap_scan_script_header_err_core(request_rec *r, char *buffer, int (*getsfunc) (char *, int, void *), void *getsfunc_data) { return ap_scan_script_header_err_core_ex(r, buffer, getsfunc, getsfunc_data, APLOG_MODULE_INDEX); } static int getsfunc_FILE(char *buf, int len, void *f) { return apr_file_gets(buf, len, (apr_file_t *) f) == APR_SUCCESS; } AP_DECLARE(int) ap_scan_script_header_err(request_rec *r, apr_file_t *f, char *buffer) { return ap_scan_script_header_err_core_ex(r, buffer, getsfunc_FILE, f, APLOG_MODULE_INDEX); } AP_DECLARE(int) ap_scan_script_header_err_ex(request_rec *r, apr_file_t *f, char *buffer, int module_index) { return ap_scan_script_header_err_core_ex(r, buffer, getsfunc_FILE, f, module_index); } static int getsfunc_BRIGADE(char *buf, int len, void *arg) { apr_bucket_brigade *bb = (apr_bucket_brigade *)arg; const char *dst_end = buf + len - 1; /* leave room for terminating null */ char *dst = buf; apr_bucket *e = APR_BRIGADE_FIRST(bb); apr_status_t rv; int done = 0; while ((dst < dst_end) && !done && e != APR_BRIGADE_SENTINEL(bb) && !APR_BUCKET_IS_EOS(e)) { const char *bucket_data; apr_size_t bucket_data_len; const char *src; const char *src_end; apr_bucket * next; rv = apr_bucket_read(e, &bucket_data, &bucket_data_len, APR_BLOCK_READ); if (rv != APR_SUCCESS || (bucket_data_len == 0)) { *dst = '\0'; return APR_STATUS_IS_TIMEUP(rv) ? -1 : 0; } src = bucket_data; src_end = bucket_data + bucket_data_len; while ((src < src_end) && (dst < dst_end) && !done) { if (*src == '\n') { done = 1; } else if (*src != '\r') { *dst++ = *src; } src++; } if (src < src_end) { apr_bucket_split(e, src - bucket_data); } next = APR_BUCKET_NEXT(e); apr_bucket_delete(e); e = next; } *dst = 0; return done; } AP_DECLARE(int) ap_scan_script_header_err_brigade(request_rec *r, apr_bucket_brigade *bb, char *buffer) { return ap_scan_script_header_err_core_ex(r, buffer, getsfunc_BRIGADE, bb, APLOG_MODULE_INDEX); } AP_DECLARE(int) ap_scan_script_header_err_brigade_ex(request_rec *r, apr_bucket_brigade *bb, char *buffer, int module_index) { return ap_scan_script_header_err_core_ex(r, buffer, getsfunc_BRIGADE, bb, module_index); } struct vastrs { va_list args; int arg; const char *curpos; }; static int getsfunc_STRING(char *w, int len, void *pvastrs) { struct vastrs *strs = (struct vastrs*) pvastrs; const char *p; int t; if (!strs->curpos || !*strs->curpos) { w[0] = '\0'; return 0; } p = ap_strchr_c(strs->curpos, '\n'); if (p) ++p; else p = ap_strchr_c(strs->curpos, '\0'); t = p - strs->curpos; if (t > len) t = len; strncpy (w, strs->curpos, t); w[t] = '\0'; if (!strs->curpos[t]) { ++strs->arg; strs->curpos = va_arg(strs->args, const char *); } else strs->curpos += t; return t; } /* ap_scan_script_header_err_strs() accepts additional const char* args... * each is treated as one or more header lines, and the first non-header * character is returned to **arg, **data. (The first optional arg is * counted as 0.) */ AP_DECLARE_NONSTD(int) ap_scan_script_header_err_strs_ex(request_rec *r, char *buffer, int module_index, const char **termch, int *termarg, ...) { struct vastrs strs; int res; va_start(strs.args, termarg); strs.arg = 0; strs.curpos = va_arg(strs.args, char*); res = ap_scan_script_header_err_core_ex(r, buffer, getsfunc_STRING, (void *) &strs, module_index); if (termch) *termch = strs.curpos; if (termarg) *termarg = strs.arg; va_end(strs.args); return res; } AP_DECLARE_NONSTD(int) ap_scan_script_header_err_strs(request_rec *r, char *buffer, const char **termch, int *termarg, ...) { struct vastrs strs; int res; va_start(strs.args, termarg); strs.arg = 0; strs.curpos = va_arg(strs.args, char*); res = ap_scan_script_header_err_core_ex(r, buffer, getsfunc_STRING, (void *) &strs, APLOG_MODULE_INDEX); if (termch) *termch = strs.curpos; if (termarg) *termarg = strs.arg; va_end(strs.args); return res; } static void argstr_to_table(char *str, apr_table_t *parms) { char *key; char *value; char *strtok_state; if (str == NULL) { return; } key = apr_strtok(str, "&", &strtok_state); while (key) { value = strchr(key, '='); if (value) { *value = '\0'; /* Split the string in two */ value++; /* Skip passed the = */ } else { value = "1"; } ap_unescape_url(key); ap_unescape_url(value); apr_table_set(parms, key, value); key = apr_strtok(NULL, "&", &strtok_state); } } AP_DECLARE(void) ap_args_to_table(request_rec *r, apr_table_t **table) { apr_table_t *t = apr_table_make(r->pool, 10); argstr_to_table(apr_pstrdup(r->pool, r->args), t); *table = t; } httpd-2.4.41/server/util_expr_scan.l0000644000000000000500000002173413523273356015756 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * ap_expr_scan.l, based on ssl_expr_scan.l from mod_ssl */ /* _________________________________________________________________ ** ** Expression Scanner ** _________________________________________________________________ */ %pointer %option batch %option never-interactive %option nodefault %option noyywrap %option reentrant %option bison-bridge %option warn %option noinput nounput noyy_top_state %option stack %x str %x var %x vararg %x regex regex_flags %{ #include "util_expr_private.h" #include "util_expr_parse.h" #undef YY_INPUT #define YY_INPUT(buf,result,max_size) \ { \ if ((result = MIN(max_size, yyextra->inputbuf \ + yyextra->inputlen \ - yyextra->inputptr)) <= 0) \ { \ result = YY_NULL; \ } \ else { \ memcpy(buf, yyextra->inputptr, result); \ yyextra->inputptr += result; \ } \ } #define YY_EXTRA_TYPE ap_expr_parse_ctx_t* #define PERROR(msg) do { yyextra->error2 = msg ; return T_ERROR; } while (0) #define str_ptr (yyextra->scan_ptr) #define str_buf (yyextra->scan_buf) #define str_del (yyextra->scan_del) #define STR_APPEND(c) do { \ *str_ptr++ = (c); \ if (str_ptr >= str_buf + sizeof(str_buf)) \ PERROR("String too long"); \ } while (0) %} %% char regex_buf[MAX_STRING_LEN]; char *regex_ptr = NULL; char regex_del = '\0'; %{ /* * Set initial state for string expressions */ if (yyextra->at_start) { yyextra->at_start = 0; if (yyextra->flags & AP_EXPR_FLAG_STRING_RESULT) { BEGIN(str); return T_EXPR_STRING; } else { return T_EXPR_BOOL; } } %} /* * Whitespaces */ [ \t\n]+ { /* NOP */ } /* * strings ("..." and '...') */ ["'] { str_ptr = str_buf; str_del = yytext[0]; BEGIN(str); return T_STR_BEGIN; } ["'] { if (yytext[0] == str_del) { if (YY_START == var) { PERROR("Unterminated variable in string"); } else if (str_ptr == str_buf) { BEGIN(INITIAL); return T_STR_END; } else { /* return what we have so far and scan delimiter again */ *str_ptr = '\0'; yylval->cpVal = apr_pstrdup(yyextra->pool, str_buf); yyless(0); str_ptr = str_buf; return T_STRING; } } else { STR_APPEND(yytext[0]); } } \n { PERROR("Unterminated string or variable"); } <> { PERROR("Unterminated string or variable"); } <> { if (!(yyextra->flags & AP_EXPR_FLAG_STRING_RESULT)) { PERROR("Unterminated string or variable"); } else { *str_ptr = '\0'; yylval->cpVal = apr_pstrdup(yyextra->pool, str_buf); str_ptr = str_buf; BEGIN(INITIAL); return T_STRING; } } \\[0-7]{1,3} { int result; (void)sscanf(yytext+1, "%o", &result); if (result > 0xff) { PERROR("Escape sequence out of bound"); } else { STR_APPEND(result); } } \\[0-9]+ { PERROR("Bad escape sequence"); } \\n { STR_APPEND('\n'); } \\r { STR_APPEND('\r'); } \\t { STR_APPEND('\t'); } \\b { STR_APPEND('\b'); } \\f { STR_APPEND('\f'); } \\(.|\n) { STR_APPEND(yytext[1]); } /* regexp backref inside string/arg */ [$][0-9] { if (str_ptr != str_buf) { /* return what we have so far and scan '$x' again */ *str_ptr = '\0'; yylval->cpVal = apr_pstrdup(yyextra->pool, str_buf); str_ptr = str_buf; yyless(0); return T_STRING; } else { yylval->num = yytext[1] - '0'; return T_REGEX_BACKREF; } } [^\\\n"'%}$]+ { char *cp = yytext; while (*cp != '\0') { STR_APPEND(*cp); cp++; } } /* variable inside string/arg */ %\{ { if (str_ptr != str_buf) { /* return what we have so far and scan '%{' again */ *str_ptr = '\0'; yylval->cpVal = apr_pstrdup(yyextra->pool, str_buf); yyless(0); str_ptr = str_buf; return T_STRING; } else { yy_push_state(var, yyscanner); return T_VAR_BEGIN; } } [%$] { STR_APPEND(yytext[0]); } [%}$] { STR_APPEND(yytext[0]); } %\{ { yy_push_state(var, yyscanner); return T_VAR_BEGIN; } [$][0-9] { yylval->num = yytext[1] - '0'; return T_REGEX_BACKREF; } /* * fixed name variable expansion %{XXX} and function call in %{func:arg} syntax */ [a-zA-Z][a-zA-Z0-9_]* { yylval->cpVal = apr_pstrdup(yyextra->pool, yytext); return T_ID; } \} { yy_pop_state(yyscanner); return T_VAR_END; } : { BEGIN(vararg); return yytext[0]; } .|\n { char *msg = apr_psprintf(yyextra->pool, "Invalid character in variable name '%c'", yytext[0]); PERROR(msg); } \} { if (str_ptr != str_buf) { /* return what we have so far and scan '}' again */ *str_ptr = '\0'; yylval->cpVal = apr_pstrdup(yyextra->pool, str_buf); str_ptr = str_buf; yyless(0); return T_STRING; } else { yy_pop_state(yyscanner); return T_VAR_END; } } /* * Regular Expression */ "m"[/#$%^,;:_\?\|\^\-\!\.\'\"] { regex_del = yytext[1]; regex_ptr = regex_buf; BEGIN(regex); } "/" { regex_del = yytext[0]; regex_ptr = regex_buf; BEGIN(regex); } .|\n { if (yytext[0] == regex_del) { *regex_ptr = '\0'; BEGIN(regex_flags); } else { *regex_ptr++ = yytext[0]; if (regex_ptr >= regex_buf + sizeof(regex_buf)) PERROR("Regexp too long"); } } i { yylval->cpVal = apr_pstrdup(yyextra->pool, regex_buf); BEGIN(INITIAL); return T_REGEX_I; } .|\n { yylval->cpVal = apr_pstrdup(yyextra->pool, regex_buf); yyless(0); BEGIN(INITIAL); return T_REGEX; } <> { yylval->cpVal = apr_pstrdup(yyextra->pool, regex_buf); BEGIN(INITIAL); return T_REGEX; } /* * Operators */ ==? { return T_OP_STR_EQ; } "!=" { return T_OP_STR_NE; } "<" { return T_OP_STR_LT; } "<=" { return T_OP_STR_LE; } ">" { return T_OP_STR_GT; } ">=" { return T_OP_STR_GE; } "=~" { return T_OP_REG; } "!~" { return T_OP_NRE; } "and" { return T_OP_AND; } "&&" { return T_OP_AND; } "or" { return T_OP_OR; } "||" { return T_OP_OR; } "not" { return T_OP_NOT; } "!" { return T_OP_NOT; } "." { return T_OP_CONCAT; } "-in" { return T_OP_IN; } "-eq" { return T_OP_EQ; } "-ne" { return T_OP_NE; } "-ge" { return T_OP_GE; } "-le" { return T_OP_LE; } "-gt" { return T_OP_GT; } "-lt" { return T_OP_LT; } /* for compatibility with ssl_expr */ "lt" { return T_OP_LT; } "le" { return T_OP_LE; } "gt" { return T_OP_GT; } "ge" { return T_OP_GE; } "ne" { return T_OP_NE; } "eq" { return T_OP_EQ; } "in" { return T_OP_IN; } "-"[a-zA-Z_] { yylval->cpVal = apr_pstrdup(yyextra->pool, yytext + 1); return T_OP_UNARY; } "-"[a-zA-Z_][a-zA-Z_0-9]+ { yylval->cpVal = apr_pstrdup(yyextra->pool, yytext + 1); return T_OP_BINARY; } /* * Specials */ "true" { return T_TRUE; } "false" { return T_FALSE; } /* * Digits */ -?[0-9]+ { yylval->cpVal = apr_pstrdup(yyextra->pool, yytext); return T_DIGIT; } /* * Identifiers */ [a-zA-Z][a-zA-Z0-9_]* { yylval->cpVal = apr_pstrdup(yyextra->pool, yytext); return T_ID; } /* * These are parts of the grammar and are returned as is */ [(){},:] { return yytext[0]; } /* * Anything else is an error */ .|\n { char *msg = apr_psprintf(yyextra->pool, "Parse error near '%c'", yytext[0]); PERROR(msg); } %% httpd-2.4.41/server/eoc_bucket.c0000644000000000000500000000330310455005461015010 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_connection.h" static apr_status_t eoc_bucket_read(apr_bucket *b, const char **str, apr_size_t *len, apr_read_type_e block) { *str = NULL; *len = 0; return APR_SUCCESS; } AP_DECLARE(apr_bucket *) ap_bucket_eoc_make(apr_bucket *b) { b->length = 0; b->start = 0; b->data = NULL; b->type = &ap_bucket_type_eoc; return b; } AP_DECLARE(apr_bucket *) ap_bucket_eoc_create(apr_bucket_alloc_t *list) { apr_bucket *b = apr_bucket_alloc(sizeof(*b), list); APR_BUCKET_INIT(b); b->free = apr_bucket_free; b->list = list; return ap_bucket_eoc_make(b); } AP_DECLARE_DATA const apr_bucket_type_t ap_bucket_type_eoc = { "EOC", 5, APR_BUCKET_METADATA, apr_bucket_destroy_noop, eoc_bucket_read, apr_bucket_setaside_noop, apr_bucket_split_notimpl, apr_bucket_simple_copy }; httpd-2.4.41/server/gen_test_char.dsp0000644000000000000500000000643010424053377016067 0ustar rootsrc# Microsoft Developer Studio Project File - Name="gen_test_char" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Console Application" 0x0103 CFG=gen_test_char - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "gen_test_char.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "gen_test_char.mak" CFG="gen_test_char - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "gen_test_char - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "gen_test_char - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe RSC=rc.exe !IF "$(CFG)" == "gen_test_char - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /I "..\include" /I "..\srclib\apr\include" /I "..\srclib\apr-util\include" /I "..\os\win32" /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /Fd"Release\gen_test_char" /FD /c # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x809 /d "NDEBUG" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:console /pdb:"Release\gen_test_char.pdb" # SUBTRACT BASE LINK32 /pdb:none # ADD LINK32 kernel32.lib /nologo /subsystem:console /pdb:"Release\gen_test_char.pdb" /opt:ref # SUBTRACT LINK32 /pdb:none !ELSEIF "$(CFG)" == "gen_test_char - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "..\include" /I "..\srclib\apr\include" /I "..\srclib\apr-util\include" /I "..\os\win32" /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /Fd"Debug\gen_test_char" /FD /c # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x809 /d "_DEBUG" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:console /incremental:no /pdb:"Debug\gen_test_char.pdb" /debug /pdbtype:sept # SUBTRACT BASE LINK32 /pdb:none # ADD LINK32 kernel32.lib /nologo /subsystem:console /incremental:no /pdb:"Debug\gen_test_char.pdb" /debug # SUBTRACT LINK32 /pdb:none !ENDIF # Begin Target # Name "gen_test_char - Win32 Release" # Name "gen_test_char - Win32 Debug" # Begin Source File SOURCE=.\gen_test_char.c # End Source File # End Target # End Project httpd-2.4.41/server/gen_test_char.dep0000644000000000000500000000033112674411515016044 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by gen_test_char.mak .\gen_test_char.c : \ "..\srclib\apr\include\apr.h"\ "..\srclib\apr\include\apr_errno.h"\ "..\srclib\apr\include\apr_lib.h"\ httpd-2.4.41/server/provider.c0000644000000000000500000001515412057152146014551 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_pools.h" #include "apr_hash.h" #include "apr_tables.h" #include "apr_strings.h" #include "ap_provider.h" static apr_hash_t *global_providers = NULL; static apr_hash_t *global_providers_names = NULL; static apr_status_t cleanup_global_providers(void *ctx) { global_providers = NULL; global_providers_names = NULL; return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_register_provider(apr_pool_t *pool, const char *provider_group, const char *provider_name, const char *provider_version, const void *provider) { apr_hash_t *provider_group_hash, *provider_version_hash; if (global_providers == NULL) { global_providers = apr_hash_make(pool); global_providers_names = apr_hash_make(pool); apr_pool_cleanup_register(pool, NULL, cleanup_global_providers, apr_pool_cleanup_null); } /* First, deal with storing the provider away */ provider_group_hash = apr_hash_get(global_providers, provider_group, APR_HASH_KEY_STRING); if (!provider_group_hash) { provider_group_hash = apr_hash_make(pool); apr_hash_set(global_providers, provider_group, APR_HASH_KEY_STRING, provider_group_hash); } provider_version_hash = apr_hash_get(provider_group_hash, provider_name, APR_HASH_KEY_STRING); if (!provider_version_hash) { provider_version_hash = apr_hash_make(pool); apr_hash_set(provider_group_hash, provider_name, APR_HASH_KEY_STRING, provider_version_hash); } /* just set it. no biggy if it was there before. */ apr_hash_set(provider_version_hash, provider_version, APR_HASH_KEY_STRING, provider); /* Now, tuck away the provider names in an easy-to-get format */ provider_group_hash = apr_hash_get(global_providers_names, provider_group, APR_HASH_KEY_STRING); if (!provider_group_hash) { provider_group_hash = apr_hash_make(pool); apr_hash_set(global_providers_names, provider_group, APR_HASH_KEY_STRING, provider_group_hash); } provider_version_hash = apr_hash_get(provider_group_hash, provider_version, APR_HASH_KEY_STRING); if (!provider_version_hash) { provider_version_hash = apr_hash_make(pool); apr_hash_set(provider_group_hash, provider_version, APR_HASH_KEY_STRING, provider_version_hash); } /* just set it. no biggy if it was there before. */ apr_hash_set(provider_version_hash, provider_name, APR_HASH_KEY_STRING, provider_name); return APR_SUCCESS; } AP_DECLARE(void *) ap_lookup_provider(const char *provider_group, const char *provider_name, const char *provider_version) { apr_hash_t *provider_group_hash, *provider_name_hash; if (global_providers == NULL) { return NULL; } provider_group_hash = apr_hash_get(global_providers, provider_group, APR_HASH_KEY_STRING); if (provider_group_hash == NULL) { return NULL; } provider_name_hash = apr_hash_get(provider_group_hash, provider_name, APR_HASH_KEY_STRING); if (provider_name_hash == NULL) { return NULL; } return apr_hash_get(provider_name_hash, provider_version, APR_HASH_KEY_STRING); } AP_DECLARE(apr_array_header_t *) ap_list_provider_names(apr_pool_t *pool, const char *provider_group, const char *provider_version) { apr_array_header_t *ret = apr_array_make(pool, 10, sizeof(ap_list_provider_names_t)); ap_list_provider_names_t *entry; apr_hash_t *provider_group_hash, *h; apr_hash_index_t *hi; char *val; if (global_providers_names == NULL) { return ret; } provider_group_hash = apr_hash_get(global_providers_names, provider_group, APR_HASH_KEY_STRING); if (provider_group_hash == NULL) { return ret; } h = apr_hash_get(provider_group_hash, provider_version, APR_HASH_KEY_STRING); if (h == NULL) { return ret; } for (hi = apr_hash_first(pool, h); hi; hi = apr_hash_next(hi)) { apr_hash_this(hi, NULL, NULL, (void *)&val); entry = apr_array_push(ret); entry->provider_name = apr_pstrdup(pool, val); } return ret; } AP_DECLARE(apr_array_header_t *) ap_list_provider_groups(apr_pool_t *pool) { apr_array_header_t *ret = apr_array_make(pool, 10, sizeof(ap_list_provider_groups_t)); ap_list_provider_groups_t *entry; apr_hash_t *provider_group_hash; apr_hash_index_t *groups_hi, *vers_hi; char *group, *version; if (global_providers_names == NULL) return ret; for (groups_hi = apr_hash_first(pool, global_providers_names); groups_hi; groups_hi = apr_hash_next(groups_hi)) { apr_hash_this(groups_hi, (void *)&group, NULL, (void *)&provider_group_hash); if (provider_group_hash == NULL) continue; for (vers_hi = apr_hash_first(pool, provider_group_hash); vers_hi; vers_hi = apr_hash_next(vers_hi)) { apr_hash_this(vers_hi, (void *)&version, NULL, NULL); entry = apr_array_push(ret); entry->provider_group = group; entry->provider_version = version; } } return ret; } httpd-2.4.41/server/listen.c0000644000000000000500000007521413145073535014223 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_network_io.h" #include "apr_strings.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_main.h" #include "http_config.h" #include "http_core.h" #include "ap_listen.h" #include "http_log.h" #include "mpm_common.h" #include #if APR_HAVE_UNISTD_H #include #endif /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX AP_DECLARE_DATA ap_listen_rec *ap_listeners = NULL; /* Let ap_num_listen_buckets be global so that it can * be printed by ap_log_mpm_common(), but keep the listeners * buckets static since it is used only here to close them * all (including duplicated) with ap_close_listeners(). */ AP_DECLARE_DATA int ap_num_listen_buckets; static ap_listen_rec **ap_listen_buckets; /* Determine once, at runtime, whether or not SO_REUSEPORT * is usable on this platform, and hence whether or not * listeners can be duplicated (if configured). */ AP_DECLARE_DATA int ap_have_so_reuseport = -1; static ap_listen_rec *old_listeners; static int ap_listenbacklog; static int ap_listencbratio; static int send_buffer_size; static int receive_buffer_size; /* TODO: make_sock is just begging and screaming for APR abstraction */ static apr_status_t make_sock(apr_pool_t *p, ap_listen_rec *server) { apr_socket_t *s = server->sd; int one = 1; #if APR_HAVE_IPV6 #ifdef AP_ENABLE_V4_MAPPED int v6only_setting = 0; #else int v6only_setting = 1; #endif #endif apr_status_t stat; #ifndef WIN32 stat = apr_socket_opt_set(s, APR_SO_REUSEADDR, one); if (stat != APR_SUCCESS && stat != APR_ENOTIMPL) { ap_log_perror(APLOG_MARK, APLOG_CRIT, stat, p, APLOGNO(00067) "make_sock: for address %pI, apr_socket_opt_set: (SO_REUSEADDR)", server->bind_addr); apr_socket_close(s); return stat; } #endif stat = apr_socket_opt_set(s, APR_SO_KEEPALIVE, one); if (stat != APR_SUCCESS && stat != APR_ENOTIMPL) { ap_log_perror(APLOG_MARK, APLOG_CRIT, stat, p, APLOGNO(00068) "make_sock: for address %pI, apr_socket_opt_set: (SO_KEEPALIVE)", server->bind_addr); apr_socket_close(s); return stat; } #if APR_HAVE_IPV6 if (server->bind_addr->family == APR_INET6) { stat = apr_socket_opt_set(s, APR_IPV6_V6ONLY, v6only_setting); if (stat != APR_SUCCESS && stat != APR_ENOTIMPL) { ap_log_perror(APLOG_MARK, APLOG_CRIT, stat, p, APLOGNO(00069) "make_sock: for address %pI, apr_socket_opt_set: " "(IPV6_V6ONLY)", server->bind_addr); apr_socket_close(s); return stat; } } #endif /* * To send data over high bandwidth-delay connections at full * speed we must force the TCP window to open wide enough to keep the * pipe full. The default window size on many systems * is only 4kB. Cross-country WAN connections of 100ms * at 1Mb/s are not impossible for well connected sites. * If we assume 100ms cross-country latency, * a 4kB buffer limits throughput to 40kB/s. * * To avoid this problem I've added the SendBufferSize directive * to allow the web master to configure send buffer size. * * The trade-off of larger buffers is that more kernel memory * is consumed. YMMV, know your customers and your network! * * -John Heidemann 25-Oct-96 * * If no size is specified, use the kernel default. */ if (send_buffer_size) { stat = apr_socket_opt_set(s, APR_SO_SNDBUF, send_buffer_size); if (stat != APR_SUCCESS && stat != APR_ENOTIMPL) { ap_log_perror(APLOG_MARK, APLOG_WARNING, stat, p, APLOGNO(00070) "make_sock: failed to set SendBufferSize for " "address %pI, using default", server->bind_addr); /* not a fatal error */ } } if (receive_buffer_size) { stat = apr_socket_opt_set(s, APR_SO_RCVBUF, receive_buffer_size); if (stat != APR_SUCCESS && stat != APR_ENOTIMPL) { ap_log_perror(APLOG_MARK, APLOG_WARNING, stat, p, APLOGNO(00071) "make_sock: failed to set ReceiveBufferSize for " "address %pI, using default", server->bind_addr); /* not a fatal error */ } } #if APR_TCP_NODELAY_INHERITED ap_sock_disable_nagle(s); #endif #if defined(SO_REUSEPORT) if (ap_have_so_reuseport && ap_listencbratio > 0) { int thesock; apr_os_sock_get(&thesock, s); if (setsockopt(thesock, SOL_SOCKET, SO_REUSEPORT, (void *)&one, sizeof(int)) < 0) { stat = apr_get_netos_error(); ap_log_perror(APLOG_MARK, APLOG_CRIT, stat, p, APLOGNO(02638) "make_sock: for address %pI, apr_socket_opt_set: " "(SO_REUSEPORT)", server->bind_addr); apr_socket_close(s); return stat; } } #endif if ((stat = apr_socket_bind(s, server->bind_addr)) != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_STARTUP|APLOG_CRIT, stat, p, APLOGNO(00072) "make_sock: could not bind to address %pI", server->bind_addr); apr_socket_close(s); return stat; } if ((stat = apr_socket_listen(s, ap_listenbacklog)) != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_STARTUP|APLOG_ERR, stat, p, APLOGNO(00073) "make_sock: unable to listen for connections " "on address %pI", server->bind_addr); apr_socket_close(s); return stat; } #ifdef WIN32 /* I seriously doubt that this would work on Unix; I have doubts that * it entirely solves the problem on Win32. However, since setting * reuseaddr on the listener -prior- to binding the socket has allowed * us to attach to the same port as an already running instance of * Apache, or even another web server, we cannot identify that this * port was exclusively granted to this instance of Apache. * * So set reuseaddr, but do not attempt to do so until we have the * parent listeners successfully bound. */ stat = apr_socket_opt_set(s, APR_SO_REUSEADDR, one); if (stat != APR_SUCCESS && stat != APR_ENOTIMPL) { ap_log_perror(APLOG_MARK, APLOG_CRIT, stat, p, APLOGNO(00074) "make_sock: for address %pI, apr_socket_opt_set: (SO_REUSEADDR)", server->bind_addr); apr_socket_close(s); return stat; } #endif server->sd = s; server->active = 1; server->accept_func = NULL; return APR_SUCCESS; } static const char* find_accf_name(server_rec *s, const char *proto) { const char* accf; core_server_config *conf = ap_get_core_module_config(s->module_config); if (!proto) { return NULL; } accf = apr_table_get(conf->accf_map, proto); if (accf && !strcmp("none", accf)) { return NULL; } return accf; } static void ap_apply_accept_filter(apr_pool_t *p, ap_listen_rec *lis, server_rec *server) { apr_socket_t *s = lis->sd; const char *accf; apr_status_t rv; const char *proto; proto = lis->protocol; if (!proto) { proto = ap_get_server_protocol(server); } accf = find_accf_name(server, proto); if (accf) { #if APR_HAS_SO_ACCEPTFILTER /* In APR 1.x, the 2nd and 3rd parameters are char * instead of * const char *, so make a copy of those args here. */ rv = apr_socket_accept_filter(s, apr_pstrdup(p, accf), apr_pstrdup(p, "")); if (rv != APR_SUCCESS && !APR_STATUS_IS_ENOTIMPL(rv)) { ap_log_perror(APLOG_MARK, APLOG_WARNING, rv, p, APLOGNO(00075) "Failed to enable the '%s' Accept Filter", accf); } #else rv = apr_socket_opt_set(s, APR_TCP_DEFER_ACCEPT, 30); if (rv != APR_SUCCESS && !APR_STATUS_IS_ENOTIMPL(rv)) { ap_log_perror(APLOG_MARK, APLOG_WARNING, rv, p, APLOGNO(00076) "Failed to enable APR_TCP_DEFER_ACCEPT"); } #endif } } static apr_status_t close_listeners_on_exec(void *v) { ap_close_listeners(); return APR_SUCCESS; } static int find_listeners(ap_listen_rec **from, ap_listen_rec **to, const char *addr, apr_port_t port) { int found = 0; while (*from) { apr_sockaddr_t *sa = (*from)->bind_addr; /* Some listeners are not real so they will not have a bind_addr. */ if (sa) { ap_listen_rec *new; apr_port_t oldport; oldport = sa->port; /* If both ports are equivalent, then if their names are equivalent, * then we will re-use the existing record. */ if (port == oldport && ((!addr && !sa->hostname) || ((addr && sa->hostname) && !strcmp(sa->hostname, addr)))) { found = 1; if (!to) { break; } new = *from; *from = new->next; new->next = *to; *to = new; continue; } } from = &(*from)->next; } return found; } static const char *alloc_listener(process_rec *process, const char *addr, apr_port_t port, const char* proto, void *slave) { ap_listen_rec *last; apr_status_t status; apr_sockaddr_t *sa; /* see if we've got a listener for this address:port, which is an error */ if (find_listeners(&ap_listeners, NULL, addr, port)) { return "Cannot define multiple Listeners on the same IP:port"; } /* see if we've got an old listener for this address:port */ if (find_listeners(&old_listeners, &ap_listeners, addr, port)) { if (ap_listeners->slave != slave) { return "Cannot define a slave on the same IP:port as a Listener"; } return NULL; } if ((status = apr_sockaddr_info_get(&sa, addr, APR_UNSPEC, port, 0, process->pool)) != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_CRIT, status, process->pool, APLOGNO(00077) "alloc_listener: failed to set up sockaddr for %s", addr); return "Listen setup failed"; } /* Initialize to our last configured ap_listener. */ last = ap_listeners; while (last && last->next) { last = last->next; } while (sa) { ap_listen_rec *new; /* this has to survive restarts */ new = apr_palloc(process->pool, sizeof(ap_listen_rec)); new->active = 0; new->next = 0; new->bind_addr = sa; new->protocol = apr_pstrdup(process->pool, proto); /* Go to the next sockaddr. */ sa = sa->next; status = apr_socket_create(&new->sd, new->bind_addr->family, SOCK_STREAM, 0, process->pool); #if APR_HAVE_IPV6 /* What could happen is that we got an IPv6 address, but this system * doesn't actually support IPv6. Try the next address. */ if (status != APR_SUCCESS && !addr && new->bind_addr->family == APR_INET6) { continue; } #endif if (status != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_CRIT, status, process->pool, APLOGNO(00078) "alloc_listener: failed to get a socket for %s", addr); return "Listen setup failed"; } /* We need to preserve the order returned by getaddrinfo() */ if (last == NULL) { ap_listeners = last = new; } else { last->next = new; last = new; } new->slave = slave; } return NULL; } /* Evaluates to true if the (apr_sockaddr_t *) addr argument is the * IPv4 match-any-address, 0.0.0.0. */ #define IS_INADDR_ANY(addr) ((addr)->family == APR_INET \ && (addr)->sa.sin.sin_addr.s_addr == INADDR_ANY) /* Evaluates to true if the (apr_sockaddr_t *) addr argument is the * IPv6 match-any-address, [::]. */ #define IS_IN6ADDR_ANY(addr) ((addr)->family == APR_INET6 \ && IN6_IS_ADDR_UNSPECIFIED(&(addr)->sa.sin6.sin6_addr)) /** * Create, open, listen, and bind all sockets. * @param process The process record for the currently running server * @return The number of open sockets */ static int open_listeners(apr_pool_t *pool) { ap_listen_rec *lr; ap_listen_rec *next; ap_listen_rec *previous; int num_open; const char *userdata_key = "ap_open_listeners"; void *data; #if AP_NONBLOCK_WHEN_MULTI_LISTEN int use_nonblock; #endif /* Don't allocate a default listener. If we need to listen to a * port, then the user needs to have a Listen directive in their * config file. */ num_open = 0; previous = NULL; for (lr = ap_listeners; lr; previous = lr, lr = lr->next) { if (lr->active) { ++num_open; } else { #if APR_HAVE_IPV6 ap_listen_rec *cur; int v6only_setting; int skip = 0; /* If we have the unspecified IPv4 address (0.0.0.0) and * the unspecified IPv6 address (::) is next, we need to * swap the order of these in the list. We always try to * bind to IPv6 first, then IPv4, since an IPv6 socket * might be able to receive IPv4 packets if V6ONLY is not * enabled, but never the other way around. * Note: In some configurations, the unspecified IPv6 address * could be even later in the list. This logic only corrects * the situation where it is next in the list, such as when * apr_sockaddr_info_get() returns an IPv4 and an IPv6 address, * in that order. */ if (lr->next != NULL && IS_INADDR_ANY(lr->bind_addr) && lr->bind_addr->port == lr->next->bind_addr->port && IS_IN6ADDR_ANY(lr->next->bind_addr)) { /* Exchange lr and lr->next */ next = lr->next; lr->next = next->next; next->next = lr; if (previous) { previous->next = next; } else { ap_listeners = next; } lr = next; } /* If we are trying to bind to 0.0.0.0 and a previous listener * was :: on the same port and in turn that socket does not have * the IPV6_V6ONLY flag set; we must skip the current attempt to * listen (which would generate an error). IPv4 will be handled * on the established IPv6 socket. */ if (IS_INADDR_ANY(lr->bind_addr) && previous) { for (cur = ap_listeners; cur != lr; cur = cur->next) { if (lr->bind_addr->port == cur->bind_addr->port && IS_IN6ADDR_ANY(cur->bind_addr) && apr_socket_opt_get(cur->sd, APR_IPV6_V6ONLY, &v6only_setting) == APR_SUCCESS && v6only_setting == 0) { /* Remove the current listener from the list */ previous->next = lr->next; lr = previous; /* maintain current value of previous after * post-loop expression is evaluated */ skip = 1; break; } } if (skip) { continue; } } #endif if (make_sock(pool, lr) == APR_SUCCESS) { ++num_open; } else { #if APR_HAVE_IPV6 /* If we tried to bind to ::, and the next listener is * on 0.0.0.0 with the same port, don't give a fatal * error. The user will still get a warning from make_sock * though. */ if (lr->next != NULL && IS_IN6ADDR_ANY(lr->bind_addr) && lr->bind_addr->port == lr->next->bind_addr->port && IS_INADDR_ANY(lr->next->bind_addr)) { /* Remove the current listener from the list */ if (previous) { previous->next = lr->next; } else { ap_listeners = lr->next; } /* Although we've removed ourselves from the list, * we need to make sure that the next iteration won't * consider "previous" a working IPv6 '::' socket. * Changing the family is enough to make sure the * conditions before make_sock() fail. */ lr->bind_addr->family = AF_INET; continue; } #endif /* fatal error */ return -1; } } } /* close the old listeners */ ap_close_listeners_ex(old_listeners); old_listeners = NULL; #if AP_NONBLOCK_WHEN_MULTI_LISTEN /* if multiple listening sockets, make them non-blocking so that * if select()/poll() reports readability for a reset connection that * is already forgotten about by the time we call accept, we won't * be hung until another connection arrives on that port */ use_nonblock = (ap_listeners && ap_listeners->next); for (lr = ap_listeners; lr; lr = lr->next) { apr_status_t status; status = apr_socket_opt_set(lr->sd, APR_SO_NONBLOCK, use_nonblock); if (status != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_STARTUP|APLOG_ERR, status, pool, APLOGNO(00079) "unable to control socket non-blocking status"); return -1; } } #endif /* AP_NONBLOCK_WHEN_MULTI_LISTEN */ /* we come through here on both passes of the open logs phase * only register the cleanup once... otherwise we try to close * listening sockets twice when cleaning up prior to exec */ apr_pool_userdata_get(&data, userdata_key, pool); if (!data) { apr_pool_userdata_set((const void *)1, userdata_key, apr_pool_cleanup_null, pool); apr_pool_cleanup_register(pool, NULL, apr_pool_cleanup_null, close_listeners_on_exec); } return num_open ? 0 : -1; } AP_DECLARE(int) ap_setup_listeners(server_rec *s) { server_rec *ls; server_addr_rec *addr; ap_listen_rec *lr; int num_listeners = 0; const char* proto; int found; for (ls = s; ls; ls = ls->next) { proto = ap_get_server_protocol(ls); if (!proto) { found = 0; /* No protocol was set for this vhost, * use the default for this listener. */ for (addr = ls->addrs; addr && !found; addr = addr->next) { for (lr = ap_listeners; lr; lr = lr->next) { if (apr_sockaddr_equal(lr->bind_addr, addr->host_addr) && lr->bind_addr->port == addr->host_port) { ap_set_server_protocol(ls, lr->protocol); found = 1; break; } } } if (!found) { /* TODO: set protocol defaults per-Port, eg 25=smtp */ ap_set_server_protocol(ls, "http"); } } } if (open_listeners(s->process->pool)) { return 0; } for (lr = ap_listeners; lr; lr = lr->next) { num_listeners++; found = 0; for (ls = s; ls && !found; ls = ls->next) { for (addr = ls->addrs; addr && !found; addr = addr->next) { if (apr_sockaddr_equal(lr->bind_addr, addr->host_addr) && lr->bind_addr->port == addr->host_port) { found = 1; ap_apply_accept_filter(s->process->pool, lr, ls); } } } if (!found) { ap_apply_accept_filter(s->process->pool, lr, s); } } return num_listeners; } AP_DECLARE(apr_status_t) ap_duplicate_listeners(apr_pool_t *p, server_rec *s, ap_listen_rec ***buckets, int *num_buckets) { static int warn_once; int i; apr_status_t stat; int use_nonblock = 0; ap_listen_rec *lr; if (*num_buckets < 1) { *num_buckets = 1; if (ap_listencbratio > 0) { #ifdef _SC_NPROCESSORS_ONLN if (ap_have_so_reuseport) { int num_online_cores = sysconf(_SC_NPROCESSORS_ONLN), val = num_online_cores / ap_listencbratio; if (val > 1) { *num_buckets = val; } ap_log_perror(APLOG_MARK, APLOG_INFO, 0, p, APLOGNO(02819) "Using %i listeners bucket(s) based on %i " "online CPU cores and a ratio of %i", *num_buckets, num_online_cores, ap_listencbratio); } else #endif if (!warn_once) { ap_log_perror(APLOG_MARK, APLOG_WARNING, 0, p, APLOGNO(02820) "ListenCoresBucketsRatio ignored without " "SO_REUSEPORT and _SC_NPROCESSORS_ONLN " "support: using a single listeners bucket"); warn_once = 1; } } } *buckets = apr_pcalloc(p, *num_buckets * sizeof(ap_listen_rec *)); (*buckets)[0] = ap_listeners; for (i = 1; i < *num_buckets; i++) { ap_listen_rec *last = NULL; lr = ap_listeners; while (lr) { ap_listen_rec *duplr; char *hostname; apr_port_t port; apr_sockaddr_t *sa; duplr = apr_palloc(p, sizeof(ap_listen_rec)); duplr->slave = NULL; duplr->protocol = apr_pstrdup(p, lr->protocol); hostname = apr_pstrdup(p, lr->bind_addr->hostname); port = lr->bind_addr->port; apr_sockaddr_info_get(&sa, hostname, APR_UNSPEC, port, 0, p); duplr->bind_addr = sa; duplr->next = NULL; stat = apr_socket_create(&duplr->sd, duplr->bind_addr->family, SOCK_STREAM, 0, p); if (stat != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_CRIT, 0, p, APLOGNO(02640) "ap_duplicate_listeners: for address %pI, " "cannot duplicate a new socket!", duplr->bind_addr); return stat; } make_sock(p, duplr); #if AP_NONBLOCK_WHEN_MULTI_LISTEN use_nonblock = (ap_listeners && ap_listeners->next); stat = apr_socket_opt_set(duplr->sd, APR_SO_NONBLOCK, use_nonblock); if (stat != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_CRIT, stat, p, APLOGNO(02641) "unable to control socket non-blocking status"); return stat; } #endif ap_apply_accept_filter(p, duplr, s); if (last == NULL) { (*buckets)[i] = last = duplr; } else { last->next = duplr; last = duplr; } lr = lr->next; } } ap_listen_buckets = *buckets; ap_num_listen_buckets = *num_buckets; return APR_SUCCESS; } AP_DECLARE_NONSTD(void) ap_close_listeners(void) { int i; ap_close_listeners_ex(ap_listeners); /* Start from index 1 since either ap_duplicate_listeners() * was called and ap_listen_buckets[0] == ap_listeners, or * it wasn't and ap_num_listen_buckets == 0. */ for (i = 1; i < ap_num_listen_buckets; i++) { ap_close_listeners_ex(ap_listen_buckets[i]); } } AP_DECLARE_NONSTD(void) ap_close_listeners_ex(ap_listen_rec *listeners) { ap_listen_rec *lr; for (lr = listeners; lr; lr = lr->next) { apr_socket_close(lr->sd); lr->active = 0; } } AP_DECLARE_NONSTD(int) ap_close_selected_listeners(ap_slave_t *slave) { ap_listen_rec *lr; int n = 0; for (lr = ap_listeners; lr; lr = lr->next) { if (lr->slave != slave) { apr_socket_close(lr->sd); lr->active = 0; } else { ++n; } } return n; } AP_DECLARE(void) ap_listen_pre_config(void) { old_listeners = ap_listeners; ap_listeners = NULL; ap_listen_buckets = NULL; ap_num_listen_buckets = 0; ap_listenbacklog = DEFAULT_LISTENBACKLOG; ap_listencbratio = 0; /* Check once whether or not SO_REUSEPORT is supported. */ if (ap_have_so_reuseport < 0) { /* This is limited to Linux with defined SO_REUSEPORT (ie. 3.9+) for * now since the implementation evenly distributes connections across * all the listening threads/processes. * * *BSDs have SO_REUSEPORT too but with a different semantic: the first * wildcard address bound socket or the last non-wildcard address bound * socket will receive connections (no evenness garantee); the rest of * the sockets bound to the same port will not. * This can't (always) work for httpd. * * TODO: latests DragonFlyBSD's SO_REUSEPORT (seems to?) have the same * semantic as Linux, so we may need HAVE_SO_REUSEPORT available from * configure.in some day. */ #if defined(SO_REUSEPORT) && defined(__linux__) apr_socket_t *sock; if (apr_socket_create(&sock, APR_UNSPEC, SOCK_STREAM, 0, ap_pglobal) == APR_SUCCESS) { int thesock, on = 1; apr_os_sock_get(&thesock, sock); ap_have_so_reuseport = (setsockopt(thesock, SOL_SOCKET, SO_REUSEPORT, (void *)&on, sizeof(int)) == 0); apr_socket_close(sock); } else #endif ap_have_so_reuseport = 0; } } AP_DECLARE_NONSTD(const char *) ap_set_listener(cmd_parms *cmd, void *dummy, int argc, char *const argv[]) { char *host, *scope_id, *proto; apr_port_t port; apr_status_t rv; const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (argc < 1 || argc > 2) { return "Listen requires 1 or 2 arguments."; } rv = apr_parse_addr_port(&host, &scope_id, &port, argv[0], cmd->pool); if (rv != APR_SUCCESS) { return "Invalid address or port"; } if (host && !strcmp(host, "*")) { host = NULL; } if (scope_id) { /* XXX scope id support is useful with link-local IPv6 addresses */ return "Scope id is not supported"; } if (!port) { return "Port must be specified"; } if (argc != 2) { if (port == 443) { proto = "https"; } else { proto = "http"; } } else { proto = apr_pstrdup(cmd->pool, argv[1]); ap_str_tolower(proto); } return alloc_listener(cmd->server->process, host, port, proto, NULL); } AP_DECLARE_NONSTD(const char *) ap_set_listenbacklog(cmd_parms *cmd, void *dummy, const char *arg) { int b; const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } b = atoi(arg); if (b < 1) { return "ListenBacklog must be > 0"; } ap_listenbacklog = b; return NULL; } AP_DECLARE_NONSTD(const char *) ap_set_listencbratio(cmd_parms *cmd, void *dummy, const char *arg) { int b; const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } b = atoi(arg); if (b < 1) { return "ListenCoresBucketsRatio must be > 0"; } ap_listencbratio = b; return NULL; } AP_DECLARE_NONSTD(const char *) ap_set_send_buffer_size(cmd_parms *cmd, void *dummy, const char *arg) { int s = atoi(arg); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (s < 512 && s != 0) { return "SendBufferSize must be >= 512 bytes, or 0 for system default."; } send_buffer_size = s; return NULL; } AP_DECLARE_NONSTD(const char *) ap_set_receive_buffer_size(cmd_parms *cmd, void *dummy, const char *arg) { int s = atoi(arg); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (s < 512 && s != 0) { return "ReceiveBufferSize must be >= 512 bytes, or 0 for system default."; } receive_buffer_size = s; return NULL; } httpd-2.4.41/server/core.c0000644000000000000500000054067613512041043013651 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr.h" #include "apr_strings.h" #include "apr_lib.h" #include "apr_fnmatch.h" #include "apr_hash.h" #include "apr_thread_proc.h" /* for RLIMIT stuff */ #include "apr_random.h" #define APR_WANT_IOVEC #define APR_WANT_STRFUNC #define APR_WANT_MEMFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_protocol.h" /* For index_of_response(). Grump. */ #include "http_request.h" #include "http_vhost.h" #include "http_main.h" /* For the default_handler below... */ #include "http_log.h" #include "util_md5.h" #include "http_connection.h" #include "apr_buckets.h" #include "util_filter.h" #include "util_ebcdic.h" #include "util_mutex.h" #include "util_time.h" #include "mpm_common.h" #include "scoreboard.h" #include "mod_core.h" #include "mod_proxy.h" #include "ap_listen.h" #include "ap_regex.h" #include "mod_so.h" /* for ap_find_loaded_module_symbol */ #if defined(RLIMIT_CPU) || defined (RLIMIT_DATA) || defined (RLIMIT_VMEM) || defined(RLIMIT_AS) || defined (RLIMIT_NPROC) #include "unixd.h" #endif #if APR_HAVE_UNISTD_H #include #endif /* LimitRequestBody handling */ #define AP_LIMIT_REQ_BODY_UNSET ((apr_off_t) -1) #define AP_DEFAULT_LIMIT_REQ_BODY ((apr_off_t) 0) /* LimitXMLRequestBody handling */ #define AP_LIMIT_UNSET ((long) -1) #define AP_DEFAULT_LIMIT_XML_BODY ((apr_size_t)1000000) #define AP_MIN_SENDFILE_BYTES (256) /* maximum include nesting level */ #ifndef AP_MAX_INCLUDE_DEPTH #define AP_MAX_INCLUDE_DEPTH (128) #endif /* valid in core-conf, but not in runtime r->used_path_info */ #define AP_ACCEPT_PATHINFO_UNSET 3 #define AP_CONTENT_MD5_OFF 0 #define AP_CONTENT_MD5_ON 1 #define AP_CONTENT_MD5_UNSET 2 APR_HOOK_STRUCT( APR_HOOK_LINK(get_mgmt_items) APR_HOOK_LINK(insert_network_bucket) ) AP_IMPLEMENT_HOOK_RUN_ALL(int, get_mgmt_items, (apr_pool_t *p, const char *val, apr_hash_t *ht), (p, val, ht), OK, DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(apr_status_t, insert_network_bucket, (conn_rec *c, apr_bucket_brigade *bb, apr_socket_t *socket), (c, bb, socket), AP_DECLINED) /* Server core module... This module provides support for really basic * server operations, including options and commands which control the * operation of other modules. Consider this the bureaucracy module. * * The core module also defines handlers, etc., to handle just enough * to allow a server with the core module ONLY to actually serve documents. * * This file could almost be mod_core.c, except for the stuff which affects * the http_conf_globals. */ /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX /* Handles for core filters */ AP_DECLARE_DATA ap_filter_rec_t *ap_subreq_core_filter_handle; AP_DECLARE_DATA ap_filter_rec_t *ap_core_output_filter_handle; AP_DECLARE_DATA ap_filter_rec_t *ap_content_length_filter_handle; AP_DECLARE_DATA ap_filter_rec_t *ap_core_input_filter_handle; /* Provide ap_document_root_check storage and default value = true */ AP_DECLARE_DATA int ap_document_root_check = 1; /* magic pointer for ErrorDocument xxx "default" */ static char errordocument_default; static apr_array_header_t *saved_server_config_defines = NULL; static apr_table_t *server_config_defined_vars = NULL; AP_DECLARE_DATA int ap_main_state = AP_SQ_MS_INITIAL_STARTUP; AP_DECLARE_DATA int ap_run_mode = AP_SQ_RM_UNKNOWN; AP_DECLARE_DATA int ap_config_generation = 0; static void *create_core_dir_config(apr_pool_t *a, char *dir) { core_dir_config *conf; conf = (core_dir_config *)apr_pcalloc(a, sizeof(core_dir_config)); /* conf->r and conf->d[_*] are initialized by dirsection() or left NULL */ conf->opts = dir ? OPT_UNSET : OPT_UNSET|OPT_SYM_LINKS; conf->opts_add = conf->opts_remove = OPT_NONE; conf->override = OR_UNSET|OR_NONE; conf->override_opts = OPT_UNSET | OPT_ALL | OPT_SYM_OWNER | OPT_MULTI; conf->content_md5 = AP_CONTENT_MD5_UNSET; conf->accept_path_info = AP_ACCEPT_PATHINFO_UNSET; conf->use_canonical_name = USE_CANONICAL_NAME_UNSET; conf->use_canonical_phys_port = USE_CANONICAL_PHYS_PORT_UNSET; conf->hostname_lookups = HOSTNAME_LOOKUP_UNSET; /* * left as NULL (we use apr_pcalloc): * conf->limit_cpu = NULL; * conf->limit_mem = NULL; * conf->limit_nproc = NULL; * conf->sec_file = NULL; * conf->sec_if = NULL; */ conf->limit_req_body = AP_LIMIT_REQ_BODY_UNSET; conf->limit_xml_body = AP_LIMIT_UNSET; conf->server_signature = srv_sig_unset; conf->add_default_charset = ADD_DEFAULT_CHARSET_UNSET; conf->add_default_charset_name = DEFAULT_ADD_DEFAULT_CHARSET_NAME; /* Overriding all negotiation * Set NULL by apr_pcalloc: * conf->mime_type = NULL; * conf->handler = NULL; * conf->output_filters = NULL; * conf->input_filters = NULL; */ /* * Flag for use of inodes in ETags. */ conf->etag_bits = ETAG_UNSET; conf->etag_add = ETAG_UNSET; conf->etag_remove = ETAG_UNSET; conf->enable_mmap = ENABLE_MMAP_UNSET; conf->enable_sendfile = ENABLE_SENDFILE_UNSET; conf->allow_encoded_slashes = 0; conf->decode_encoded_slashes = 0; conf->max_ranges = AP_MAXRANGES_UNSET; conf->max_overlaps = AP_MAXRANGES_UNSET; conf->max_reversals = AP_MAXRANGES_UNSET; conf->cgi_pass_auth = AP_CGI_PASS_AUTH_UNSET; conf->qualify_redirect_url = AP_CORE_CONFIG_UNSET; return (void *)conf; } static void *merge_core_dir_configs(apr_pool_t *a, void *basev, void *newv) { core_dir_config *base = (core_dir_config *)basev; core_dir_config *new = (core_dir_config *)newv; core_dir_config *conf; /* Create this conf by duplicating the base, replacing elements * (or creating copies for merging) where new-> values exist. */ conf = (core_dir_config *)apr_pmemdup(a, base, sizeof(core_dir_config)); conf->d = new->d; conf->d_is_fnmatch = new->d_is_fnmatch; conf->d_components = new->d_components; conf->r = new->r; conf->refs = new->refs; conf->condition = new->condition; if (new->opts & OPT_UNSET) { /* there was no explicit setting of new->opts, so we merge * preserve the invariant (opts_add & opts_remove) == 0 */ conf->opts_add = (conf->opts_add & ~new->opts_remove) | new->opts_add; conf->opts_remove = (conf->opts_remove & ~new->opts_add) | new->opts_remove; conf->opts = (conf->opts & ~conf->opts_remove) | conf->opts_add; /* If Includes was enabled with exec in the base config, but * was enabled without exec in the new config, then disable * exec in the merged set. */ if (((base->opts & (OPT_INCLUDES|OPT_INC_WITH_EXEC)) == (OPT_INCLUDES|OPT_INC_WITH_EXEC)) && ((new->opts & (OPT_INCLUDES|OPT_INC_WITH_EXEC)) == OPT_INCLUDES)) { conf->opts &= ~OPT_INC_WITH_EXEC; } } else { /* otherwise we just copy, because an explicit opts setting * overrides all earlier +/- modifiers */ conf->opts = new->opts; conf->opts_add = new->opts_add; conf->opts_remove = new->opts_remove; } if (!(new->override & OR_UNSET)) { conf->override = new->override; } if (!(new->override_opts & OPT_UNSET)) { conf->override_opts = new->override_opts; } if (new->override_list != NULL) { conf->override_list = new->override_list; } if (conf->response_code_exprs == NULL) { conf->response_code_exprs = new->response_code_exprs; } else if (new->response_code_exprs != NULL) { conf->response_code_exprs = apr_hash_overlay(a, new->response_code_exprs, conf->response_code_exprs); } /* Otherwise we simply use the base->response_code_exprs array */ if (new->hostname_lookups != HOSTNAME_LOOKUP_UNSET) { conf->hostname_lookups = new->hostname_lookups; } if (new->content_md5 != AP_CONTENT_MD5_UNSET) { conf->content_md5 = new->content_md5; } if (new->accept_path_info != AP_ACCEPT_PATHINFO_UNSET) { conf->accept_path_info = new->accept_path_info; } if (new->use_canonical_name != USE_CANONICAL_NAME_UNSET) { conf->use_canonical_name = new->use_canonical_name; } if (new->use_canonical_phys_port != USE_CANONICAL_PHYS_PORT_UNSET) { conf->use_canonical_phys_port = new->use_canonical_phys_port; } #ifdef RLIMIT_CPU if (new->limit_cpu) { conf->limit_cpu = new->limit_cpu; } #endif #if defined(RLIMIT_DATA) || defined(RLIMIT_VMEM) || defined(RLIMIT_AS) if (new->limit_mem) { conf->limit_mem = new->limit_mem; } #endif #ifdef RLIMIT_NPROC if (new->limit_nproc) { conf->limit_nproc = new->limit_nproc; } #endif if (new->limit_req_body != AP_LIMIT_REQ_BODY_UNSET) { conf->limit_req_body = new->limit_req_body; } if (new->limit_xml_body != AP_LIMIT_UNSET) conf->limit_xml_body = new->limit_xml_body; if (!conf->sec_file) { conf->sec_file = new->sec_file; } else if (new->sec_file) { /* If we merge, the merge-result must have its own array */ conf->sec_file = apr_array_append(a, base->sec_file, new->sec_file); } /* Otherwise we simply use the base->sec_file array */ if (!conf->sec_if) { conf->sec_if = new->sec_if; } else if (new->sec_if) { /* If we merge, the merge-result must have its own array */ conf->sec_if = apr_array_append(a, base->sec_if, new->sec_if); } /* Otherwise we simply use the base->sec_if array */ if (new->server_signature != srv_sig_unset) { conf->server_signature = new->server_signature; } if (new->add_default_charset != ADD_DEFAULT_CHARSET_UNSET) { conf->add_default_charset = new->add_default_charset; conf->add_default_charset_name = new->add_default_charset_name; } /* Overriding all negotiation */ if (new->mime_type) { conf->mime_type = new->mime_type; } if (new->handler) { conf->handler = new->handler; } if (new->expr_handler) { conf->expr_handler = new->expr_handler; } if (new->output_filters) { conf->output_filters = new->output_filters; } if (new->input_filters) { conf->input_filters = new->input_filters; } /* * Now merge the setting of the FileETag directive. */ if (new->etag_bits == ETAG_UNSET) { conf->etag_add = (conf->etag_add & (~ new->etag_remove)) | new->etag_add; conf->etag_remove = (conf->etag_remove & (~ new->etag_add)) | new->etag_remove; conf->etag_bits = (conf->etag_bits & (~ conf->etag_remove)) | conf->etag_add; } else { conf->etag_bits = new->etag_bits; conf->etag_add = new->etag_add; conf->etag_remove = new->etag_remove; } if (conf->etag_bits != ETAG_NONE) { conf->etag_bits &= (~ ETAG_NONE); } if (new->enable_mmap != ENABLE_MMAP_UNSET) { conf->enable_mmap = new->enable_mmap; } if (new->enable_sendfile != ENABLE_SENDFILE_UNSET) { conf->enable_sendfile = new->enable_sendfile; } conf->allow_encoded_slashes = new->allow_encoded_slashes; conf->decode_encoded_slashes = new->decode_encoded_slashes; if (new->log) { if (!conf->log) { conf->log = new->log; } else { conf->log = ap_new_log_config(a, new->log); ap_merge_log_config(base->log, conf->log); } } conf->max_ranges = new->max_ranges != AP_MAXRANGES_UNSET ? new->max_ranges : base->max_ranges; conf->max_overlaps = new->max_overlaps != AP_MAXRANGES_UNSET ? new->max_overlaps : base->max_overlaps; conf->max_reversals = new->max_reversals != AP_MAXRANGES_UNSET ? new->max_reversals : base->max_reversals; conf->cgi_pass_auth = new->cgi_pass_auth != AP_CGI_PASS_AUTH_UNSET ? new->cgi_pass_auth : base->cgi_pass_auth; if (new->cgi_var_rules) { if (!conf->cgi_var_rules) { conf->cgi_var_rules = new->cgi_var_rules; } else { conf->cgi_var_rules = apr_hash_overlay(a, new->cgi_var_rules, conf->cgi_var_rules); } } AP_CORE_MERGE_FLAG(qualify_redirect_url, conf, base, new); return (void*)conf; } #if APR_HAS_SO_ACCEPTFILTER #ifndef ACCEPT_FILTER_NAME #define ACCEPT_FILTER_NAME "httpready" #ifdef __FreeBSD_version #if __FreeBSD_version < 411000 /* httpready broken before 4.1.1 */ #undef ACCEPT_FILTER_NAME #define ACCEPT_FILTER_NAME "dataready" #endif #endif #endif #endif static void *create_core_server_config(apr_pool_t *a, server_rec *s) { core_server_config *conf; int is_virtual = s->is_virtual; conf = (core_server_config *)apr_pcalloc(a, sizeof(core_server_config)); /* global-default / global-only settings */ if (!is_virtual) { conf->ap_document_root = DOCUMENT_LOCATION; conf->access_name = DEFAULT_ACCESS_FNAME; /* A mapping only makes sense in the global context */ conf->accf_map = apr_table_make(a, 5); #if APR_HAS_SO_ACCEPTFILTER apr_table_setn(conf->accf_map, "http", ACCEPT_FILTER_NAME); apr_table_setn(conf->accf_map, "https", "dataready"); #elif defined(WIN32) /* 'data' is disabled on Windows due to a DoS vuln (PR 59970) */ apr_table_setn(conf->accf_map, "http", "connect"); apr_table_setn(conf->accf_map, "https", "connect"); #else apr_table_setn(conf->accf_map, "http", "data"); apr_table_setn(conf->accf_map, "https", "data"); #endif } /* pcalloc'ed - we have NULL's/0's else ** is_virtual ** { conf->ap_document_root = NULL; conf->access_name = NULL; conf->accf_map = NULL; } */ /* initialization, no special case for global context */ conf->sec_dir = apr_array_make(a, 40, sizeof(ap_conf_vector_t *)); conf->sec_url = apr_array_make(a, 40, sizeof(ap_conf_vector_t *)); /* pcalloc'ed - we have NULL's/0's conf->gprof_dir = NULL; ** recursion stopper; 0 == unset conf->redirect_limit = 0; conf->subreq_limit = 0; conf->protocol = NULL; */ conf->trace_enable = AP_TRACE_UNSET; conf->protocols = apr_array_make(a, 5, sizeof(const char *)); conf->protocols_honor_order = -1; conf->merge_slashes = AP_CORE_CONFIG_UNSET; return (void *)conf; } static void *merge_core_server_configs(apr_pool_t *p, void *basev, void *virtv) { core_server_config *base = (core_server_config *)basev; core_server_config *virt = (core_server_config *)virtv; core_server_config *conf = (core_server_config *) apr_pmemdup(p, base, sizeof(core_server_config)); if (virt->ap_document_root) conf->ap_document_root = virt->ap_document_root; if (virt->access_name) conf->access_name = virt->access_name; /* XXX optimize to keep base->sec_ pointers if virt->sec_ array is empty */ conf->sec_dir = apr_array_append(p, base->sec_dir, virt->sec_dir); conf->sec_url = apr_array_append(p, base->sec_url, virt->sec_url); if (virt->redirect_limit) conf->redirect_limit = virt->redirect_limit; if (virt->subreq_limit) conf->subreq_limit = virt->subreq_limit; if (virt->trace_enable != AP_TRACE_UNSET) conf->trace_enable = virt->trace_enable; if (virt->http09_enable != AP_HTTP09_UNSET) conf->http09_enable = virt->http09_enable; if (virt->http_conformance != AP_HTTP_CONFORMANCE_UNSET) conf->http_conformance = virt->http_conformance; if (virt->http_methods != AP_HTTP_METHODS_UNSET) conf->http_methods = virt->http_methods; /* no action for virt->accf_map, not allowed per-vhost */ if (virt->protocol) conf->protocol = virt->protocol; if (virt->gprof_dir) conf->gprof_dir = virt->gprof_dir; if (virt->error_log_format) conf->error_log_format = virt->error_log_format; if (virt->error_log_conn) conf->error_log_conn = virt->error_log_conn; if (virt->error_log_req) conf->error_log_req = virt->error_log_req; conf->merge_trailers = (virt->merge_trailers != AP_MERGE_TRAILERS_UNSET) ? virt->merge_trailers : base->merge_trailers; conf->protocols = ((virt->protocols->nelts > 0)? virt->protocols : base->protocols); conf->protocols_honor_order = ((virt->protocols_honor_order < 0)? base->protocols_honor_order : virt->protocols_honor_order); AP_CORE_MERGE_FLAG(merge_slashes, conf, base, virt); return conf; } /* Add per-directory configuration entry (for section); * these are part of the core server config. */ AP_CORE_DECLARE(void) ap_add_per_dir_conf(server_rec *s, void *dir_config) { core_server_config *sconf = ap_get_core_module_config(s->module_config); void **new_space = (void **)apr_array_push(sconf->sec_dir); *new_space = dir_config; } AP_CORE_DECLARE(void) ap_add_per_url_conf(server_rec *s, void *url_config) { core_server_config *sconf = ap_get_core_module_config(s->module_config); void **new_space = (void **)apr_array_push(sconf->sec_url); *new_space = url_config; } AP_CORE_DECLARE(void) ap_add_file_conf(apr_pool_t *p, core_dir_config *conf, void *url_config) { void **new_space; if (!conf->sec_file) conf->sec_file = apr_array_make(p, 2, sizeof(ap_conf_vector_t *)); new_space = (void **)apr_array_push(conf->sec_file); *new_space = url_config; } AP_CORE_DECLARE(const char *) ap_add_if_conf(apr_pool_t *p, core_dir_config *conf, void *if_config) { void **new_space; core_dir_config *new = ap_get_module_config(if_config, &core_module); if (!conf->sec_if) { conf->sec_if = apr_array_make(p, 2, sizeof(ap_conf_vector_t *)); } if (new->condition_ifelse & AP_CONDITION_ELSE) { int have_if = 0; if (conf->sec_if->nelts > 0) { core_dir_config *last; ap_conf_vector_t *lastelt = APR_ARRAY_IDX(conf->sec_if, conf->sec_if->nelts - 1, ap_conf_vector_t *); last = ap_get_module_config(lastelt, &core_module); if (last->condition_ifelse & AP_CONDITION_IF) have_if = 1; } if (!have_if) return " or section without previous or " " section in same scope"; } new_space = (void **)apr_array_push(conf->sec_if); *new_space = if_config; return NULL; } /* We need to do a stable sort, qsort isn't stable. So to make it stable * we'll be maintaining the original index into the list, and using it * as the minor key during sorting. The major key is the number of * components (where the root component is zero). */ struct reorder_sort_rec { ap_conf_vector_t *elt; int orig_index; }; static int reorder_sorter(const void *va, const void *vb) { const struct reorder_sort_rec *a = va; const struct reorder_sort_rec *b = vb; core_dir_config *core_a; core_dir_config *core_b; core_a = ap_get_core_module_config(a->elt); core_b = ap_get_core_module_config(b->elt); /* a regex always sorts after a non-regex */ if (!core_a->r && core_b->r) { return -1; } else if (core_a->r && !core_b->r) { return 1; } /* we always sort next by the number of components */ if (core_a->d_components < core_b->d_components) { return -1; } else if (core_a->d_components > core_b->d_components) { return 1; } /* They have the same number of components, we now have to compare * the minor key to maintain the original order (from the config.) */ return a->orig_index - b->orig_index; } void ap_core_reorder_directories(apr_pool_t *p, server_rec *s) { core_server_config *sconf; apr_array_header_t *sec_dir; struct reorder_sort_rec *sortbin; int nelts; ap_conf_vector_t **elts; int i; apr_pool_t *tmp; sconf = ap_get_core_module_config(s->module_config); sec_dir = sconf->sec_dir; nelts = sec_dir->nelts; elts = (ap_conf_vector_t **)sec_dir->elts; if (!nelts) { /* simple case of already being sorted... */ /* We're not checking this condition to be fast... we're checking * it to avoid trying to palloc zero bytes, which can trigger some * memory debuggers to barf */ return; } /* we have to allocate tmp space to do a stable sort */ apr_pool_create(&tmp, p); sortbin = apr_palloc(tmp, sec_dir->nelts * sizeof(*sortbin)); for (i = 0; i < nelts; ++i) { sortbin[i].orig_index = i; sortbin[i].elt = elts[i]; } qsort(sortbin, nelts, sizeof(*sortbin), reorder_sorter); /* and now copy back to the original array */ for (i = 0; i < nelts; ++i) { elts[i] = sortbin[i].elt; } apr_pool_destroy(tmp); } /***************************************************************** * * There are some elements of the core config structures in which * other modules have a legitimate interest (this is ugly, but necessary * to preserve NCSA back-compatibility). So, we have a bunch of accessors * here... */ AP_DECLARE(int) ap_allow_options(request_rec *r) { core_dir_config *conf = (core_dir_config *)ap_get_core_module_config(r->per_dir_config); return conf->opts; } AP_DECLARE(int) ap_allow_overrides(request_rec *r) { core_dir_config *conf; conf = (core_dir_config *)ap_get_core_module_config(r->per_dir_config); return conf->override; } /* * Optional function coming from mod_authn_core, used for * retrieving the type of autorization */ static APR_OPTIONAL_FN_TYPE(authn_ap_auth_type) *authn_ap_auth_type; AP_DECLARE(const char *) ap_auth_type(request_rec *r) { if (authn_ap_auth_type) { return authn_ap_auth_type(r); } return NULL; } /* * Optional function coming from mod_authn_core, used for * retrieving the authorization realm */ static APR_OPTIONAL_FN_TYPE(authn_ap_auth_name) *authn_ap_auth_name; AP_DECLARE(const char *) ap_auth_name(request_rec *r) { if (authn_ap_auth_name) { return authn_ap_auth_name(r); } return NULL; } /* * Optional function coming from mod_access_compat, used to determine how access control interacts with authentication/authorization */ static APR_OPTIONAL_FN_TYPE(access_compat_ap_satisfies) *access_compat_ap_satisfies; AP_DECLARE(int) ap_satisfies(request_rec *r) { if (access_compat_ap_satisfies) { return access_compat_ap_satisfies(r); } return SATISFY_NOSPEC; } AP_DECLARE(const char *) ap_document_root(request_rec *r) /* Don't use this! */ { core_server_config *sconf; core_request_config *rconf = ap_get_core_module_config(r->request_config); if (rconf->document_root) return rconf->document_root; sconf = ap_get_core_module_config(r->server->module_config); return sconf->ap_document_root; } AP_DECLARE(const char *) ap_context_prefix(request_rec *r) { core_request_config *conf = ap_get_core_module_config(r->request_config); if (conf->context_prefix) return conf->context_prefix; else return ""; } AP_DECLARE(const char *) ap_context_document_root(request_rec *r) { core_request_config *conf = ap_get_core_module_config(r->request_config); if (conf->context_document_root) return conf->context_document_root; else return ap_document_root(r); } AP_DECLARE(void) ap_set_document_root(request_rec *r, const char *document_root) { core_request_config *conf = ap_get_core_module_config(r->request_config); conf->document_root = document_root; } AP_DECLARE(void) ap_set_context_info(request_rec *r, const char *context_prefix, const char *context_document_root) { core_request_config *conf = ap_get_core_module_config(r->request_config); if (context_prefix) conf->context_prefix = context_prefix; if (context_document_root) conf->context_document_root = context_document_root; } /* Should probably just get rid of this... the only code that cares is * part of the core anyway (and in fact, it isn't publicised to other * modules). */ char *ap_response_code_string(request_rec *r, int error_index) { core_dir_config *dirconf; core_request_config *reqconf = ap_get_core_module_config(r->request_config); const char *err; const char *response; ap_expr_info_t *expr; /* check for string registered via ap_custom_response() first */ if (reqconf->response_code_strings != NULL && reqconf->response_code_strings[error_index] != NULL) { return reqconf->response_code_strings[error_index]; } /* check for string specified via ErrorDocument */ dirconf = ap_get_core_module_config(r->per_dir_config); if (!dirconf->response_code_exprs) { return NULL; } expr = apr_hash_get(dirconf->response_code_exprs, &error_index, sizeof(error_index)); if (!expr) { return NULL; } /* special token to indicate revert back to default */ if ((char *) expr == &errordocument_default) { return NULL; } err = NULL; response = ap_expr_str_exec(r, expr, &err); if (err) { ap_log_rerror( APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02841) "core: ErrorDocument: can't " "evaluate require expression: %s", err); return NULL; } /* alas, duplication required as we return not-const */ return apr_pstrdup(r->pool, response); } /* Code from Harald Hanche-Olsen */ static APR_INLINE int do_double_reverse (int double_reverse, const char *remote_host, apr_sockaddr_t *client_addr, apr_pool_t *pool) { apr_sockaddr_t *sa; apr_status_t rv; if (double_reverse) { /* already done */ return double_reverse; } if (remote_host == NULL || remote_host[0] == '\0') { /* single reverse failed, so don't bother */ return -1; } rv = apr_sockaddr_info_get(&sa, remote_host, APR_UNSPEC, 0, 0, pool); if (rv == APR_SUCCESS) { while (sa) { if (apr_sockaddr_equal(sa, client_addr)) { return 1; } sa = sa->next; } } return -1; } AP_DECLARE(const char *) ap_get_remote_host(conn_rec *conn, void *dir_config, int type, int *str_is_ip) { int hostname_lookups; int ignored_str_is_ip; if (!str_is_ip) { /* caller doesn't want to know */ str_is_ip = &ignored_str_is_ip; } *str_is_ip = 0; /* If we haven't checked the host name, and we want to */ if (dir_config) { hostname_lookups = ((core_dir_config *)ap_get_core_module_config(dir_config)) ->hostname_lookups; if (hostname_lookups == HOSTNAME_LOOKUP_UNSET) { hostname_lookups = HOSTNAME_LOOKUP_OFF; } } else { /* the default */ hostname_lookups = HOSTNAME_LOOKUP_OFF; } if (type != REMOTE_NOLOOKUP && conn->remote_host == NULL && (type == REMOTE_DOUBLE_REV || hostname_lookups != HOSTNAME_LOOKUP_OFF)) { if (apr_getnameinfo(&conn->remote_host, conn->client_addr, 0) == APR_SUCCESS) { ap_str_tolower(conn->remote_host); if (hostname_lookups == HOSTNAME_LOOKUP_DOUBLE) { conn->double_reverse = do_double_reverse(conn->double_reverse, conn->remote_host, conn->client_addr, conn->pool); if (conn->double_reverse != 1) { conn->remote_host = NULL; } } } /* if failed, set it to the NULL string to indicate error */ if (conn->remote_host == NULL) { conn->remote_host = ""; } } if (type == REMOTE_DOUBLE_REV) { conn->double_reverse = do_double_reverse(conn->double_reverse, conn->remote_host, conn->client_addr, conn->pool); if (conn->double_reverse == -1) { return NULL; } } /* * Return the desired information; either the remote DNS name, if found, * or either NULL (if the hostname was requested) or the IP address * (if any identifier was requested). */ if (conn->remote_host != NULL && conn->remote_host[0] != '\0') { return conn->remote_host; } else { if (type == REMOTE_HOST || type == REMOTE_DOUBLE_REV) { return NULL; } else { *str_is_ip = 1; return conn->client_ip; } } } AP_DECLARE(const char *) ap_get_useragent_host(request_rec *r, int type, int *str_is_ip) { conn_rec *conn = r->connection; int hostname_lookups; int ignored_str_is_ip; /* Guard here when examining the host before the read_request hook * has populated an r->useragent_addr */ if (!r->useragent_addr || (r->useragent_addr == conn->client_addr)) { return ap_get_remote_host(conn, r->per_dir_config, type, str_is_ip); } if (!str_is_ip) { /* caller doesn't want to know */ str_is_ip = &ignored_str_is_ip; } *str_is_ip = 0; hostname_lookups = ((core_dir_config *) ap_get_core_module_config(r->per_dir_config)) ->hostname_lookups; if (hostname_lookups == HOSTNAME_LOOKUP_UNSET) { hostname_lookups = HOSTNAME_LOOKUP_OFF; } if (type != REMOTE_NOLOOKUP && r->useragent_host == NULL && (type == REMOTE_DOUBLE_REV || hostname_lookups != HOSTNAME_LOOKUP_OFF)) { if (apr_getnameinfo(&r->useragent_host, r->useragent_addr, 0) == APR_SUCCESS) { ap_str_tolower(r->useragent_host); if (hostname_lookups == HOSTNAME_LOOKUP_DOUBLE) { r->double_reverse = do_double_reverse(r->double_reverse, r->useragent_host, r->useragent_addr, r->pool); if (r->double_reverse != 1) { r->useragent_host = NULL; } } } /* if failed, set it to the NULL string to indicate error */ if (r->useragent_host == NULL) { r->useragent_host = ""; } } if (type == REMOTE_DOUBLE_REV) { r->double_reverse = do_double_reverse(r->double_reverse, r->useragent_host, r->useragent_addr, r->pool); if (r->double_reverse == -1) { return NULL; } } /* * Return the desired information; either the remote DNS name, if found, * or either NULL (if the hostname was requested) or the IP address * (if any identifier was requested). */ if (r->useragent_host != NULL && r->useragent_host[0] != '\0') { return r->useragent_host; } else { if (type == REMOTE_HOST || type == REMOTE_DOUBLE_REV) { return NULL; } else { *str_is_ip = 1; return r->useragent_ip; } } } /* * Optional function coming from mod_ident, used for looking up ident user */ static APR_OPTIONAL_FN_TYPE(ap_ident_lookup) *ident_lookup; AP_DECLARE(const char *) ap_get_remote_logname(request_rec *r) { if (r->connection->remote_logname != NULL) { return r->connection->remote_logname; } if (ident_lookup) { return ident_lookup(r); } return NULL; } /* There are two options regarding what the "name" of a server is. The * "canonical" name as defined by ServerName and Port, or the "client's * name" as supplied by a possible Host: header or full URI. * * The DNS option to UseCanonicalName causes this routine to do a * reverse lookup on the local IP address of the connection and use * that for the ServerName. This makes its value more reliable while * at the same time allowing Demon's magic virtual hosting to work. * The assumption is that DNS lookups are sufficiently quick... * -- fanf 1998-10-03 */ AP_DECLARE(const char *) ap_get_server_name(request_rec *r) { conn_rec *conn = r->connection; core_dir_config *d; const char *retval; d = (core_dir_config *)ap_get_core_module_config(r->per_dir_config); switch (d->use_canonical_name) { case USE_CANONICAL_NAME_ON: retval = r->server->server_hostname; break; case USE_CANONICAL_NAME_DNS: if (conn->local_host == NULL) { if (apr_getnameinfo(&conn->local_host, conn->local_addr, 0) != APR_SUCCESS) conn->local_host = apr_pstrdup(conn->pool, r->server->server_hostname); else { ap_str_tolower(conn->local_host); } } retval = conn->local_host; break; case USE_CANONICAL_NAME_OFF: case USE_CANONICAL_NAME_UNSET: retval = r->hostname ? r->hostname : r->server->server_hostname; break; default: ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00109) "ap_get_server_name: Invalid UCN Option somehow"); retval = "localhost"; break; } return retval; } /* * Get the current server name from the request for the purposes * of using in a URL. If the server name is an IPv6 literal * address, it will be returned in URL format (e.g., "[fe80::1]"). */ AP_DECLARE(const char *) ap_get_server_name_for_url(request_rec *r) { const char *plain_server_name = ap_get_server_name(r); #if APR_HAVE_IPV6 if (ap_strchr_c(plain_server_name, ':')) { /* IPv6 literal? */ return apr_pstrcat(r->pool, "[", plain_server_name, "]", NULL); } #endif return plain_server_name; } AP_DECLARE(apr_port_t) ap_get_server_port(const request_rec *r) { apr_port_t port; core_dir_config *d = (core_dir_config *)ap_get_core_module_config(r->per_dir_config); switch (d->use_canonical_name) { case USE_CANONICAL_NAME_OFF: case USE_CANONICAL_NAME_DNS: case USE_CANONICAL_NAME_UNSET: if (d->use_canonical_phys_port == USE_CANONICAL_PHYS_PORT_ON) port = r->parsed_uri.port_str ? r->parsed_uri.port : r->connection->local_addr->port ? r->connection->local_addr->port : r->server->port ? r->server->port : ap_default_port(r); else /* USE_CANONICAL_PHYS_PORT_OFF or USE_CANONICAL_PHYS_PORT_UNSET */ port = r->parsed_uri.port_str ? r->parsed_uri.port : r->server->port ? r->server->port : ap_default_port(r); break; case USE_CANONICAL_NAME_ON: /* With UseCanonicalName on (and in all versions prior to 1.3) * Apache will use the hostname and port specified in the * ServerName directive to construct a canonical name for the * server. (If no port was specified in the ServerName * directive, Apache uses the port supplied by the client if * any is supplied, and finally the default port for the protocol * used. */ if (d->use_canonical_phys_port == USE_CANONICAL_PHYS_PORT_ON) port = r->server->port ? r->server->port : r->connection->local_addr->port ? r->connection->local_addr->port : ap_default_port(r); else /* USE_CANONICAL_PHYS_PORT_OFF or USE_CANONICAL_PHYS_PORT_UNSET */ port = r->server->port ? r->server->port : ap_default_port(r); break; default: ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00110) "ap_get_server_port: Invalid UCN Option somehow"); port = ap_default_port(r); break; } return port; } AP_DECLARE(char *) ap_construct_url(apr_pool_t *p, const char *uri, request_rec *r) { unsigned port = ap_get_server_port(r); const char *host = ap_get_server_name_for_url(r); if (ap_is_default_port(port, r)) { return apr_pstrcat(p, ap_http_scheme(r), "://", host, uri, NULL); } return apr_psprintf(p, "%s://%s:%u%s", ap_http_scheme(r), host, port, uri); } AP_DECLARE(apr_off_t) ap_get_limit_req_body(const request_rec *r) { core_dir_config *d = (core_dir_config *)ap_get_core_module_config(r->per_dir_config); if (d->limit_req_body == AP_LIMIT_REQ_BODY_UNSET) { return AP_DEFAULT_LIMIT_REQ_BODY; } return d->limit_req_body; } /***************************************************************** * * Commands... this module handles almost all of the NCSA httpd.conf * commands, but most of the old srm.conf is in the modules. */ /* returns a parent if it matches the given directive */ static const ap_directive_t * find_parent(const ap_directive_t *dirp, const char *what) { while (dirp->parent != NULL) { dirp = dirp->parent; /* ### it would be nice to have atom-ized directives */ if (strcasecmp(dirp->directive, what) == 0) return dirp; } return NULL; } AP_DECLARE(const char *) ap_check_cmd_context(cmd_parms *cmd, unsigned forbidden) { const char *gt = (cmd->cmd->name[0] == '<' && cmd->cmd->name[strlen(cmd->cmd->name)-1] != '>') ? ">" : ""; const ap_directive_t *found; if ((forbidden & NOT_IN_VIRTUALHOST) && cmd->server->is_virtual) { return apr_pstrcat(cmd->pool, cmd->cmd->name, gt, " cannot occur within section", NULL); } if ((forbidden & NOT_IN_DIR_CONTEXT) && cmd->limited != -1) { return apr_pstrcat(cmd->pool, cmd->cmd->name, gt, " cannot occur within or " "section", NULL); } if ((forbidden & NOT_IN_HTACCESS) && (cmd->pool == cmd->temp_pool)) { return apr_pstrcat(cmd->pool, cmd->cmd->name, gt, " cannot occur within htaccess files", NULL); } if ((forbidden & NOT_IN_DIR_LOC_FILE) == NOT_IN_DIR_LOC_FILE) { if (cmd->path != NULL) { return apr_pstrcat(cmd->pool, cmd->cmd->name, gt, " cannot occur within directory context", NULL); } if (cmd->cmd->req_override & EXEC_ON_READ) { /* EXEC_ON_READ must be NOT_IN_DIR_LOC_FILE, if not, it will * (deliberately) segfault below in the individual tests... */ return NULL; } } if (((forbidden & NOT_IN_DIRECTORY) && ((found = find_parent(cmd->directive, "directive, "directive, "directive, "directive, "directive, "directive, "directive, "directive, "directive, "directive, "pool, cmd->cmd->name, gt, " cannot occur within ", found->directive, "> section", NULL); } return NULL; } static const char *set_access_name(cmd_parms *cmd, void *dummy, const char *arg) { void *sconf = cmd->server->module_config; core_server_config *conf = ap_get_core_module_config(sconf); const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err != NULL) { return err; } conf->access_name = apr_pstrdup(cmd->pool, arg); return NULL; } AP_DECLARE(const char *) ap_resolve_env(apr_pool_t *p, const char * word) { # define SMALL_EXPANSION 5 struct sll { struct sll *next; const char *string; apr_size_t len; } *result, *current, sresult[SMALL_EXPANSION]; char *res_buf, *cp; const char *s, *e, *ep; unsigned spc; apr_size_t outlen; s = ap_strchr_c(word, '$'); if (!s) { return word; } /* well, actually something to do */ ep = word + strlen(word); spc = 0; result = current = &(sresult[spc++]); current->next = NULL; current->string = word; current->len = s - word; outlen = current->len; do { /* prepare next entry */ if (current->len) { current->next = (spc < SMALL_EXPANSION) ? &(sresult[spc++]) : (struct sll *)apr_palloc(p, sizeof(*current->next)); current = current->next; current->next = NULL; current->len = 0; } if (*s == '$') { if (s[1] == '{' && (e = ap_strchr_c(s+2, '}'))) { char *name = apr_pstrmemdup(p, s+2, e-s-2); word = NULL; if (server_config_defined_vars) word = apr_table_get(server_config_defined_vars, name); if (!word) word = apr_pstrdup(p, getenv(name)); if (word) { current->string = word; current->len = strlen(word); outlen += current->len; } else { if (ap_strchr(name, ':') == 0) ap_log_error(APLOG_MARK, APLOG_WARNING, 0, NULL, APLOGNO(00111) "Config variable ${%s} is not defined", name); current->string = s; current->len = e - s + 1; outlen += current->len; } s = e + 1; } else { current->string = s++; current->len = 1; ++outlen; } } else { word = s; s = ap_strchr_c(s, '$'); current->string = word; current->len = s ? s - word : ep - word; outlen += current->len; } } while (s && *s); /* assemble result */ res_buf = cp = apr_palloc(p, outlen + 1); do { if (result->len) { memcpy(cp, result->string, result->len); cp += result->len; } result = result->next; } while (result); res_buf[outlen] = '\0'; return res_buf; } static int reset_config_defines(void *dummy) { ap_server_config_defines = saved_server_config_defines; saved_server_config_defines = NULL; server_config_defined_vars = NULL; return OK; } /* * Make sure we can revert the effects of Define/UnDefine when restarting. * This function must be called once per loading of the config, before * ap_server_config_defines is changed. This may be during reading of the * config, which is even before the pre_config hook is run (due to * EXEC_ON_READ for Define/UnDefine). */ static void init_config_defines(apr_pool_t *pconf) { saved_server_config_defines = ap_server_config_defines; /* Use apr_array_copy instead of apr_array_copy_hdr because it does not * protect from the way unset_define removes entries. */ ap_server_config_defines = apr_array_copy(pconf, ap_server_config_defines); } static const char *set_define(cmd_parms *cmd, void *dummy, const char *name, const char *value) { const char *err = ap_check_cmd_context(cmd, NOT_IN_HTACCESS); if (err) return err; if (ap_strchr_c(name, ':') != NULL) { return "Variable name must not contain ':'"; } if (!saved_server_config_defines) { init_config_defines(cmd->pool); } if (!ap_exists_config_define(name)) { *(const char **)apr_array_push(ap_server_config_defines) = name; } if (value) { if (!server_config_defined_vars) { server_config_defined_vars = apr_table_make(cmd->pool, 5); } apr_table_setn(server_config_defined_vars, name, value); } return NULL; } static const char *unset_define(cmd_parms *cmd, void *dummy, const char *name) { int i; const char **defines; const char *err = ap_check_cmd_context(cmd, NOT_IN_HTACCESS); if (err) return err; if (ap_strchr_c(name, ':') != NULL) { return "Variable name must not contain ':'"; } if (!saved_server_config_defines) { init_config_defines(cmd->pool); } defines = (const char **)ap_server_config_defines->elts; for (i = 0; i < ap_server_config_defines->nelts; i++) { if (strcmp(defines[i], name) == 0) { defines[i] = *(const char **)apr_array_pop(ap_server_config_defines); break; } } if (server_config_defined_vars) { apr_table_unset(server_config_defined_vars, name); } return NULL; } static const char *generate_error(cmd_parms *cmd, void *dummy, const char *arg) { if (!arg || !*arg) { return "The Error directive was used with no message."; } if (*arg == '"' || *arg == '\'') { /* strip off quotes */ apr_size_t len = strlen(arg); char last = *(arg + len - 1); if (*arg == last) { return apr_pstrndup(cmd->pool, arg + 1, len - 2); } } return arg; } #ifdef GPROF static const char *set_gprof_dir(cmd_parms *cmd, void *dummy, const char *arg) { void *sconf = cmd->server->module_config; core_server_config *conf = ap_get_core_module_config(sconf); const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err != NULL) { return err; } conf->gprof_dir = apr_pstrdup(cmd->pool, arg); return NULL; } #endif /*GPROF*/ static const char *set_add_default_charset(cmd_parms *cmd, void *d_, const char *arg) { core_dir_config *d = d_; if (!strcasecmp(arg, "Off")) { d->add_default_charset = ADD_DEFAULT_CHARSET_OFF; } else if (!strcasecmp(arg, "On")) { d->add_default_charset = ADD_DEFAULT_CHARSET_ON; d->add_default_charset_name = DEFAULT_ADD_DEFAULT_CHARSET_NAME; } else { d->add_default_charset = ADD_DEFAULT_CHARSET_ON; d->add_default_charset_name = arg; } return NULL; } static const char *set_document_root(cmd_parms *cmd, void *dummy, const char *arg) { void *sconf = cmd->server->module_config; core_server_config *conf = ap_get_core_module_config(sconf); const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err != NULL) { return err; } /* When ap_document_root_check is false; skip all the stuff below */ if (!ap_document_root_check) { conf->ap_document_root = arg; return NULL; } /* Make it absolute, relative to ServerRoot */ arg = ap_server_root_relative(cmd->pool, arg); if (arg == NULL) { return "DocumentRoot must be a directory"; } /* TODO: ap_configtestonly */ if (apr_filepath_merge((char**)&conf->ap_document_root, NULL, arg, APR_FILEPATH_TRUENAME, cmd->pool) != APR_SUCCESS || !ap_is_directory(cmd->temp_pool, arg)) { if (cmd->server->is_virtual) { ap_log_perror(APLOG_MARK, APLOG_STARTUP, 0, cmd->pool, APLOGNO(00112) "Warning: DocumentRoot [%s] does not exist", arg); conf->ap_document_root = arg; } else { return apr_psprintf(cmd->pool, "DocumentRoot '%s' is not a directory, or is not readable", arg); } } return NULL; } AP_DECLARE(void) ap_custom_response(request_rec *r, int status, const char *string) { core_request_config *conf = ap_get_core_module_config(r->request_config); int idx; if (conf->response_code_strings == NULL) { conf->response_code_strings = apr_pcalloc(r->pool, sizeof(*conf->response_code_strings) * RESPONSE_CODES); } idx = ap_index_of_response(status); conf->response_code_strings[idx] = ((ap_is_url(string) || (*string == '/')) && (*string != '"')) ? apr_pstrdup(r->pool, string) : apr_pstrcat(r->pool, "\"", string, NULL); } static const char *set_error_document(cmd_parms *cmd, void *conf_, const char *errno_str, const char *msg) { core_dir_config *conf = conf_; int error_number, index_number, idx500; enum { MSG, LOCAL_PATH, REMOTE_PATH } what = MSG; /* 1st parameter should be a 3 digit number, which we recognize; * convert it into an array index */ error_number = atoi(errno_str); idx500 = ap_index_of_response(HTTP_INTERNAL_SERVER_ERROR); if (error_number == HTTP_INTERNAL_SERVER_ERROR) { index_number = idx500; } else if ((index_number = ap_index_of_response(error_number)) == idx500) { return apr_pstrcat(cmd->pool, "Unsupported HTTP response code ", errno_str, NULL); } /* Heuristic to determine second argument. */ if (ap_strchr_c(msg,' ')) what = MSG; else if (msg[0] == '/') what = LOCAL_PATH; else if (ap_is_url(msg)) what = REMOTE_PATH; else what = MSG; /* The entry should be ignored if it is a full URL for a 401 error */ if (error_number == 401 && what == REMOTE_PATH) { ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, cmd->server, APLOGNO(00113) "%s:%d cannot use a full URL in a 401 ErrorDocument " "directive --- ignoring!", cmd->directive->filename, cmd->directive->line_num); } else { /* Store it... */ if (conf->response_code_exprs == NULL) { conf->response_code_exprs = apr_hash_make(cmd->pool); } if (strcasecmp(msg, "default") == 0) { /* special case: ErrorDocument 404 default restores the * canned server error response */ apr_hash_set(conf->response_code_exprs, apr_pmemdup(cmd->pool, &index_number, sizeof(index_number)), sizeof(index_number), &errordocument_default); } else { ap_expr_info_t *expr; const char *expr_err = NULL; /* hack. Prefix a " if it is a msg; as that is what * http_protocol.c relies on to distinguish between * a msg and a (local) path. */ const char *response = (what == MSG) ? apr_pstrcat(cmd->pool, "\"", msg, NULL) : apr_pstrdup(cmd->pool, msg); expr = ap_expr_parse_cmd(cmd, response, AP_EXPR_FLAG_STRING_RESULT, &expr_err, NULL); if (expr_err) { return apr_pstrcat(cmd->temp_pool, "Cannot parse expression in ErrorDocument: ", expr_err, NULL); } apr_hash_set(conf->response_code_exprs, apr_pmemdup(cmd->pool, &index_number, sizeof(index_number)), sizeof(index_number), expr); } } return NULL; } static const char *set_allow_opts(cmd_parms *cmd, allow_options_t *opts, const char *l) { allow_options_t opt; int first = 1; char *w, *p = (char *) l; char *tok_state; while ((w = apr_strtok(p, ",", &tok_state)) != NULL) { if (first) { p = NULL; *opts = OPT_NONE; first = 0; } if (!strcasecmp(w, "Indexes")) { opt = OPT_INDEXES; } else if (!strcasecmp(w, "Includes")) { /* If Includes is permitted, both Includes and * IncludesNOEXEC may be changed. */ opt = (OPT_INCLUDES | OPT_INC_WITH_EXEC); } else if (!strcasecmp(w, "IncludesNOEXEC")) { opt = OPT_INCLUDES; } else if (!strcasecmp(w, "FollowSymLinks")) { opt = OPT_SYM_LINKS; } else if (!strcasecmp(w, "SymLinksIfOwnerMatch")) { opt = OPT_SYM_OWNER; } else if (!strcasecmp(w, "ExecCGI")) { opt = OPT_EXECCGI; } else if (!strcasecmp(w, "MultiViews")) { opt = OPT_MULTI; } else if (!strcasecmp(w, "RunScripts")) { /* AI backcompat. Yuck */ opt = OPT_MULTI|OPT_EXECCGI; } else if (!strcasecmp(w, "None")) { opt = OPT_NONE; } else if (!strcasecmp(w, "All")) { opt = OPT_ALL; } else { return apr_pstrcat(cmd->pool, "Illegal option ", w, NULL); } *opts |= opt; } (*opts) &= (~OPT_UNSET); return NULL; } static const char *set_override(cmd_parms *cmd, void *d_, const char *l) { core_dir_config *d = d_; char *w; char *k, *v; const char *err; /* Throw a warning if we're in or */ if (ap_check_cmd_context(cmd, NOT_IN_LOCATION | NOT_IN_FILES)) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(00114) "Useless use of AllowOverride in line %d of %s.", cmd->directive->line_num, cmd->directive->filename); } if ((err = ap_check_cmd_context(cmd, NOT_IN_HTACCESS)) != NULL) return err; d->override = OR_NONE; while (l[0]) { w = ap_getword_conf(cmd->temp_pool, &l); k = w; v = strchr(k, '='); if (v) { *v++ = '\0'; } if (!strcasecmp(w, "Limit")) { d->override |= OR_LIMIT; } else if (!strcasecmp(k, "Options")) { d->override |= OR_OPTIONS; if (v) set_allow_opts(cmd, &(d->override_opts), v); else d->override_opts = OPT_ALL; } else if (!strcasecmp(w, "FileInfo")) { d->override |= OR_FILEINFO; } else if (!strcasecmp(w, "AuthConfig")) { d->override |= OR_AUTHCFG; } else if (!strcasecmp(w, "Indexes")) { d->override |= OR_INDEXES; } else if (!strcasecmp(w, "Nonfatal")) { if (!strcasecmp(v, "Override")) { d->override |= NONFATAL_OVERRIDE; } else if (!strcasecmp(v, "Unknown")) { d->override |= NONFATAL_UNKNOWN; } else if (!strcasecmp(v, "All")) { d->override |= NONFATAL_ALL; } } else if (!strcasecmp(w, "None")) { d->override = OR_NONE; } else if (!strcasecmp(w, "All")) { d->override = OR_ALL; } else { return apr_pstrcat(cmd->pool, "Illegal override option ", w, NULL); } d->override &= ~OR_UNSET; } return NULL; } static const char *set_cgi_pass_auth(cmd_parms *cmd, void *d_, int flag) { core_dir_config *d = d_; d->cgi_pass_auth = flag ? AP_CGI_PASS_AUTH_ON : AP_CGI_PASS_AUTH_OFF; return NULL; } static const char *set_cgi_var(cmd_parms *cmd, void *d_, const char *var, const char *rule_) { core_dir_config *d = d_; char *rule = apr_pstrdup(cmd->pool, rule_); ap_str_tolower(rule); if (!strcmp(var, "REQUEST_URI")) { if (strcmp(rule, "current-uri") && strcmp(rule, "original-uri")) { return "Valid rules for REQUEST_URI are 'current-uri' and 'original-uri'"; } } else { return apr_pstrcat(cmd->pool, "Unrecognized CGI variable: \"", var, "\"", NULL); } if (!d->cgi_var_rules) { d->cgi_var_rules = apr_hash_make(cmd->pool); } apr_hash_set(d->cgi_var_rules, var, APR_HASH_KEY_STRING, rule); return NULL; } static const char *set_qualify_redirect_url(cmd_parms *cmd, void *d_, int flag) { core_dir_config *d = d_; d->qualify_redirect_url = flag ? AP_CORE_CONFIG_ON : AP_CORE_CONFIG_OFF; return NULL; } static const char *set_core_server_flag(cmd_parms *cmd, void *s_, int flag) { core_server_config *conf = ap_get_core_module_config(cmd->server->module_config); return ap_set_flag_slot(cmd, conf, flag); } static const char *set_override_list(cmd_parms *cmd, void *d_, int argc, char *const argv[]) { core_dir_config *d = d_; int i; const char *err; /* Throw a warning if we're in or */ if (ap_check_cmd_context(cmd, NOT_IN_LOCATION | NOT_IN_FILES)) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(00115) "Useless use of AllowOverrideList at %s:%d", cmd->directive->filename, cmd->directive->line_num); } if ((err = ap_check_cmd_context(cmd, NOT_IN_HTACCESS)) != NULL) return err; d->override_list = apr_table_make(cmd->pool, argc); for (i = 0; i < argc; i++) { if (!strcasecmp(argv[i], "None")) { if (argc != 1) { return "'None' not allowed with other directives in " "AllowOverrideList"; } return NULL; } else { const command_rec *result = NULL; module *mod = ap_top_module; result = ap_find_command_in_modules(argv[i], &mod); if (result == NULL) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(00116) "Discarding unrecognized " "directive `%s' in AllowOverrideList at %s:%d", argv[i], cmd->directive->filename, cmd->directive->line_num); continue; } else if ((result->req_override & (OR_ALL|ACCESS_CONF)) == 0) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(02304) "Discarding directive `%s' not " "allowed in AllowOverrideList at %s:%d", argv[i], cmd->directive->filename, cmd->directive->line_num); continue; } else { apr_table_setn(d->override_list, argv[i], "1"); } } } return NULL; } static const char *set_options(cmd_parms *cmd, void *d_, const char *l) { core_dir_config *d = d_; allow_options_t opt; int first = 1; int merge = 0; int all_none = 0; char action; while (l[0]) { char *w = ap_getword_conf(cmd->temp_pool, &l); action = '\0'; if (*w == '+' || *w == '-') { action = *(w++); if (!merge && !first && !all_none) { return "Either all Options must start with + or -, or no Option may."; } merge = 1; } else if (first) { d->opts = OPT_NONE; } else if (merge) { return "Either all Options must start with + or -, or no Option may."; } if (!strcasecmp(w, "Indexes")) { opt = OPT_INDEXES; } else if (!strcasecmp(w, "Includes")) { opt = (OPT_INCLUDES | OPT_INC_WITH_EXEC); } else if (!strcasecmp(w, "IncludesNOEXEC")) { opt = OPT_INCLUDES; } else if (!strcasecmp(w, "FollowSymLinks")) { opt = OPT_SYM_LINKS; } else if (!strcasecmp(w, "SymLinksIfOwnerMatch")) { opt = OPT_SYM_OWNER; } else if (!strcasecmp(w, "ExecCGI")) { opt = OPT_EXECCGI; } else if (!strcasecmp(w, "MultiViews")) { opt = OPT_MULTI; } else if (!strcasecmp(w, "RunScripts")) { /* AI backcompat. Yuck */ opt = OPT_MULTI|OPT_EXECCGI; } else if (!strcasecmp(w, "None")) { if (!first) { return "'Options None' must be the first Option given."; } else if (merge) { /* Only works since None may not follow any other option. */ return "You may not use 'Options +None' or 'Options -None'."; } opt = OPT_NONE; all_none = 1; } else if (!strcasecmp(w, "All")) { if (!first) { return "'Options All' must be the first option given."; } else if (merge) { /* Only works since All may not follow any other option. */ return "You may not use 'Options +All' or 'Options -All'."; } opt = OPT_ALL; all_none = 1; } else { return apr_pstrcat(cmd->pool, "Illegal option ", w, NULL); } if ( (cmd->override_opts & opt) != opt ) { return apr_pstrcat(cmd->pool, "Option ", w, " not allowed here", NULL); } else if (action == '-') { /* we ensure the invariant (d->opts_add & d->opts_remove) == 0 */ d->opts_remove |= opt; d->opts_add &= ~opt; d->opts &= ~opt; } else if (action == '+') { d->opts_add |= opt; d->opts_remove &= ~opt; d->opts |= opt; } else { d->opts |= opt; } first = 0; } return NULL; } static const char *set_default_type(cmd_parms *cmd, void *d_, const char *arg) { if ((strcasecmp(arg, "off") != 0) && (strcasecmp(arg, "none") != 0)) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(00117) "Ignoring deprecated use of DefaultType in line %d of %s.", cmd->directive->line_num, cmd->directive->filename); } return NULL; } static const char *set_sethandler(cmd_parms *cmd, void *d_, const char *arg_) { core_dir_config *dirconf = d_; const char *err; dirconf->expr_handler = ap_expr_parse_cmd(cmd, arg_, AP_EXPR_FLAG_STRING_RESULT, &err, NULL); if (err) { return apr_pstrcat(cmd->pool, "Can't parse expression : ", err, NULL); } return NULL; } /* * Note what data should be used when forming file ETag values. * It would be nicer to do this as an ITERATE, but then we couldn't * remember the +/- state properly. */ static const char *set_etag_bits(cmd_parms *cmd, void *mconfig, const char *args_p) { core_dir_config *cfg; etag_components_t bit; char action; char *token; const char *args; int valid; int first; int explicit; cfg = (core_dir_config *)mconfig; args = args_p; first = 1; explicit = 0; while (args[0] != '\0') { action = '*'; bit = ETAG_UNSET; valid = 1; token = ap_getword_conf(cmd->temp_pool, &args); if ((*token == '+') || (*token == '-')) { action = *token; token++; } else { /* * The occurrence of an absolute setting wipes * out any previous relative ones. The first such * occurrence forgets any inherited ones, too. */ if (first) { cfg->etag_bits = ETAG_UNSET; cfg->etag_add = ETAG_UNSET; cfg->etag_remove = ETAG_UNSET; first = 0; } } if (strcasecmp(token, "None") == 0) { if (action != '*') { valid = 0; } else { cfg->etag_bits = bit = ETAG_NONE; explicit = 1; } } else if (strcasecmp(token, "All") == 0) { if (action != '*') { valid = 0; } else { explicit = 1; cfg->etag_bits = bit = ETAG_ALL; } } else if (strcasecmp(token, "Size") == 0) { bit = ETAG_SIZE; } else if ((strcasecmp(token, "LMTime") == 0) || (strcasecmp(token, "MTime") == 0) || (strcasecmp(token, "LastModified") == 0)) { bit = ETAG_MTIME; } else if (strcasecmp(token, "INode") == 0) { bit = ETAG_INODE; } else { return apr_pstrcat(cmd->pool, "Unknown keyword '", token, "' for ", cmd->cmd->name, " directive", NULL); } if (! valid) { return apr_pstrcat(cmd->pool, cmd->cmd->name, " keyword '", token, "' cannot be used with '+' or '-'", NULL); } if (action == '+') { /* * Make sure it's in the 'add' list and absent from the * 'subtract' list. */ cfg->etag_add |= bit; cfg->etag_remove &= (~ bit); } else if (action == '-') { cfg->etag_remove |= bit; cfg->etag_add &= (~ bit); } else { /* * Non-relative values wipe out any + or - values * accumulated so far. */ cfg->etag_bits |= bit; cfg->etag_add = ETAG_UNSET; cfg->etag_remove = ETAG_UNSET; explicit = 1; } } /* * Any setting at all will clear the 'None' and 'Unset' bits. */ if (cfg->etag_add != ETAG_UNSET) { cfg->etag_add &= (~ ETAG_UNSET); } if (cfg->etag_remove != ETAG_UNSET) { cfg->etag_remove &= (~ ETAG_UNSET); } if (explicit) { cfg->etag_bits &= (~ ETAG_UNSET); if ((cfg->etag_bits & ETAG_NONE) != ETAG_NONE) { cfg->etag_bits &= (~ ETAG_NONE); } } return NULL; } static const char *set_enable_mmap(cmd_parms *cmd, void *d_, const char *arg) { core_dir_config *d = d_; if (strcasecmp(arg, "on") == 0) { d->enable_mmap = ENABLE_MMAP_ON; } else if (strcasecmp(arg, "off") == 0) { d->enable_mmap = ENABLE_MMAP_OFF; } else { return "parameter must be 'on' or 'off'"; } return NULL; } static const char *set_enable_sendfile(cmd_parms *cmd, void *d_, const char *arg) { core_dir_config *d = d_; if (strcasecmp(arg, "on") == 0) { d->enable_sendfile = ENABLE_SENDFILE_ON; } else if (strcasecmp(arg, "off") == 0) { d->enable_sendfile = ENABLE_SENDFILE_OFF; } else { return "parameter must be 'on' or 'off'"; } return NULL; } /* * Report a missing-'>' syntax error. */ static char *unclosed_directive(cmd_parms *cmd) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive missing closing '>'", NULL); } /* * Report a missing args in '' syntax error. */ static char *missing_container_arg(cmd_parms *cmd) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive requires additional arguments", NULL); } AP_CORE_DECLARE_NONSTD(const char *) ap_limit_section(cmd_parms *cmd, void *dummy, const char *arg) { const char *endp = ap_strrchr_c(arg, '>'); const char *limited_methods; void *tog = cmd->cmd->cmd_data; apr_int64_t limited = 0; apr_int64_t old_limited = cmd->limited; const char *errmsg; if (endp == NULL) { return unclosed_directive(cmd); } limited_methods = apr_pstrmemdup(cmd->temp_pool, arg, endp - arg); if (!limited_methods[0]) { return missing_container_arg(cmd); } while (limited_methods[0]) { char *method = ap_getword_conf(cmd->temp_pool, &limited_methods); int methnum; /* check for builtin or module registered method number */ methnum = ap_method_number_of(method); if (methnum == M_TRACE && !tog) { return "TRACE cannot be controlled by , see TraceEnable"; } else if (methnum == M_INVALID) { /* method has not been registered yet, but resource restriction * is always checked before method handling, so register it. */ if (cmd->pool == cmd->temp_pool) { /* In .htaccess, we can't globally register new methods. */ return apr_psprintf(cmd->pool, "Could not register method '%s' " "for %s from .htaccess configuration", method, cmd->cmd->name); } methnum = ap_method_register(cmd->pool, apr_pstrdup(cmd->pool, method)); } limited |= (AP_METHOD_BIT << methnum); } /* Killing two features with one function, * if (tog == NULL) , else */ limited = tog ? ~limited : limited; if (!(old_limited & limited)) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive excludes all methods", NULL); } else if ((old_limited & limited) == old_limited) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive specifies methods already excluded", NULL); } cmd->limited &= limited; errmsg = ap_walk_config(cmd->directive->first_child, cmd, cmd->context); cmd->limited = old_limited; return errmsg; } /* XXX: Bogus - need to do this differently (at least OS2/Netware suffer * the same problem!!! * We use this in and , to ensure that * people don't get bitten by wrong-cased regex matches */ #ifdef WIN32 #define USE_ICASE AP_REG_ICASE #else #define USE_ICASE 0 #endif static const char *dirsection(cmd_parms *cmd, void *mconfig, const char *arg) { const char *errmsg; const char *endp = ap_strrchr_c(arg, '>'); int old_overrides = cmd->override; char *old_path = cmd->path; core_dir_config *conf; ap_conf_vector_t *new_dir_conf = ap_create_per_dir_config(cmd->pool); ap_regex_t *r = NULL; const command_rec *thiscmd = cmd->cmd; const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err != NULL) { return err; } if (endp == NULL) { return unclosed_directive(cmd); } arg = apr_pstrndup(cmd->temp_pool, arg, endp - arg); if (!arg[0]) { return missing_container_arg(cmd); } cmd->path = ap_getword_conf(cmd->pool, &arg); cmd->override = OR_ALL|ACCESS_CONF; if (!strcmp(cmd->path, "~")) { cmd->path = ap_getword_conf(cmd->pool, &arg); if (!cmd->path) return " block must specify a path"; r = ap_pregcomp(cmd->pool, cmd->path, AP_REG_EXTENDED|USE_ICASE); if (!r) { return "Regex could not be compiled"; } } else if (thiscmd->cmd_data) { /* */ r = ap_pregcomp(cmd->pool, cmd->path, AP_REG_EXTENDED|USE_ICASE); if (!r) { return "Regex could not be compiled"; } } else if (strcmp(cmd->path, "/") != 0) { char *newpath; /* * Ensure that the pathname is canonical, and append the trailing / */ apr_status_t rv = apr_filepath_merge(&newpath, NULL, cmd->path, APR_FILEPATH_TRUENAME, cmd->pool); if (rv != APR_SUCCESS && rv != APR_EPATHWILD) { return apr_pstrcat(cmd->pool, "path, "\"> path is invalid.", NULL); } cmd->path = newpath; if (cmd->path[strlen(cmd->path) - 1] != '/') cmd->path = apr_pstrcat(cmd->pool, cmd->path, "/", NULL); } /* initialize our config and fetch it */ conf = ap_set_config_vectors(cmd->server, new_dir_conf, cmd->path, &core_module, cmd->pool); errmsg = ap_walk_config(cmd->directive->first_child, cmd, new_dir_conf); if (errmsg != NULL) return errmsg; conf->r = r; conf->d = cmd->path; conf->d_is_fnmatch = (apr_fnmatch_test(conf->d) != 0); if (r) { conf->refs = apr_array_make(cmd->pool, 8, sizeof(char *)); ap_regname(r, conf->refs, AP_REG_MATCH, 1); } /* Make this explicit - the "/" root has 0 elements, that is, we * will always merge it, and it will always sort and merge first. * All others are sorted and tested by the number of slashes. */ if (strcmp(conf->d, "/") == 0) conf->d_components = 0; else conf->d_components = ap_count_dirs(conf->d); ap_add_per_dir_conf(cmd->server, new_dir_conf); if (*arg != '\0') { return apr_pstrcat(cmd->pool, "Multiple ", thiscmd->name, "> arguments not (yet) supported.", NULL); } cmd->path = old_path; cmd->override = old_overrides; return NULL; } static const char *urlsection(cmd_parms *cmd, void *mconfig, const char *arg) { const char *errmsg; const char *endp = ap_strrchr_c(arg, '>'); int old_overrides = cmd->override; char *old_path = cmd->path; core_dir_config *conf; ap_regex_t *r = NULL; const command_rec *thiscmd = cmd->cmd; ap_conf_vector_t *new_url_conf = ap_create_per_dir_config(cmd->pool); const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err != NULL) { return err; } if (endp == NULL) { return unclosed_directive(cmd); } arg = apr_pstrndup(cmd->temp_pool, arg, endp - arg); if (!arg[0]) { return missing_container_arg(cmd); } cmd->path = ap_getword_conf(cmd->pool, &arg); cmd->override = OR_ALL|ACCESS_CONF; if (thiscmd->cmd_data) { /* */ r = ap_pregcomp(cmd->pool, cmd->path, AP_REG_EXTENDED); if (!r) { return "Regex could not be compiled"; } } else if (!strcmp(cmd->path, "~")) { cmd->path = ap_getword_conf(cmd->pool, &arg); r = ap_pregcomp(cmd->pool, cmd->path, AP_REG_EXTENDED); if (!r) { return "Regex could not be compiled"; } } /* initialize our config and fetch it */ conf = ap_set_config_vectors(cmd->server, new_url_conf, cmd->path, &core_module, cmd->pool); errmsg = ap_walk_config(cmd->directive->first_child, cmd, new_url_conf); if (errmsg != NULL) return errmsg; conf->d = apr_pstrdup(cmd->pool, cmd->path); /* No mangling, please */ conf->d_is_fnmatch = apr_fnmatch_test(conf->d) != 0; conf->r = r; if (r) { conf->refs = apr_array_make(cmd->pool, 8, sizeof(char *)); ap_regname(r, conf->refs, AP_REG_MATCH, 1); } ap_add_per_url_conf(cmd->server, new_url_conf); if (*arg != '\0') { return apr_pstrcat(cmd->pool, "Multiple ", thiscmd->name, "> arguments not (yet) supported.", NULL); } cmd->path = old_path; cmd->override = old_overrides; return NULL; } static const char *filesection(cmd_parms *cmd, void *mconfig, const char *arg) { const char *errmsg; const char *endp = ap_strrchr_c(arg, '>'); int old_overrides = cmd->override; char *old_path = cmd->path; core_dir_config *conf; ap_regex_t *r = NULL; const command_rec *thiscmd = cmd->cmd; ap_conf_vector_t *new_file_conf = ap_create_per_dir_config(cmd->pool); const char *err = ap_check_cmd_context(cmd, NOT_IN_LOCATION | NOT_IN_LIMIT); if (err != NULL) { return err; } if (endp == NULL) { return unclosed_directive(cmd); } arg = apr_pstrndup(cmd->temp_pool, arg, endp - arg); if (!arg[0]) { return missing_container_arg(cmd); } cmd->path = ap_getword_conf(cmd->pool, &arg); /* Only if not an .htaccess file */ if (!old_path) { cmd->override = OR_ALL|ACCESS_CONF; } if (thiscmd->cmd_data) { /* */ r = ap_pregcomp(cmd->pool, cmd->path, AP_REG_EXTENDED|USE_ICASE); if (!r) { return "Regex could not be compiled"; } } else if (!strcmp(cmd->path, "~")) { cmd->path = ap_getword_conf(cmd->pool, &arg); r = ap_pregcomp(cmd->pool, cmd->path, AP_REG_EXTENDED|USE_ICASE); if (!r) { return "Regex could not be compiled"; } } else { char *newpath; /* Ensure that the pathname is canonical, but we * can't test the case/aliases without a fixed path */ if (apr_filepath_merge(&newpath, "", cmd->path, 0, cmd->pool) != APR_SUCCESS) return apr_pstrcat(cmd->pool, "path, "\"> is invalid.", NULL); cmd->path = newpath; } /* initialize our config and fetch it */ conf = ap_set_config_vectors(cmd->server, new_file_conf, cmd->path, &core_module, cmd->pool); errmsg = ap_walk_config(cmd->directive->first_child, cmd, new_file_conf); if (errmsg != NULL) return errmsg; conf->d = cmd->path; conf->d_is_fnmatch = apr_fnmatch_test(conf->d) != 0; conf->r = r; if (r) { conf->refs = apr_array_make(cmd->pool, 8, sizeof(char *)); ap_regname(r, conf->refs, AP_REG_MATCH, 1); } ap_add_file_conf(cmd->pool, (core_dir_config *)mconfig, new_file_conf); if (*arg != '\0') { return apr_pstrcat(cmd->pool, "Multiple ", thiscmd->name, "> arguments not (yet) supported.", NULL); } cmd->path = old_path; cmd->override = old_overrides; return NULL; } #define COND_IF ((void *)1) #define COND_ELSE ((void *)2) #define COND_ELSEIF ((void *)3) static const char *ifsection(cmd_parms *cmd, void *mconfig, const char *arg) { const char *errmsg; const char *endp = ap_strrchr_c(arg, '>'); int old_overrides = cmd->override; char *old_path = cmd->path; core_dir_config *conf; const command_rec *thiscmd = cmd->cmd; ap_conf_vector_t *new_if_conf = ap_create_per_dir_config(cmd->pool); const char *err = ap_check_cmd_context(cmd, NOT_IN_LIMIT); const char *condition; const char *expr_err; if (err != NULL) { return err; } if (endp == NULL) { return unclosed_directive(cmd); } arg = apr_pstrndup(cmd->temp_pool, arg, endp - arg); /* * Set a dummy value so that other directives notice that they are inside * a config section. */ cmd->path = "*If"; /* Only if not an .htaccess file */ if (!old_path) { cmd->override = OR_ALL|ACCESS_CONF; } /* initialize our config and fetch it */ conf = ap_set_config_vectors(cmd->server, new_if_conf, cmd->path, &core_module, cmd->pool); if (cmd->cmd->cmd_data == COND_IF) conf->condition_ifelse = AP_CONDITION_IF; else if (cmd->cmd->cmd_data == COND_ELSEIF) conf->condition_ifelse = AP_CONDITION_ELSEIF; else if (cmd->cmd->cmd_data == COND_ELSE) conf->condition_ifelse = AP_CONDITION_ELSE; else ap_assert(0); if (conf->condition_ifelse == AP_CONDITION_ELSE) { if (arg[0]) return " does not take an argument"; } else { if (!arg[0]) return missing_container_arg(cmd); condition = ap_getword_conf(cmd->pool, &arg); conf->condition = ap_expr_parse_cmd(cmd, condition, 0, &expr_err, NULL); if (expr_err) return apr_psprintf(cmd->pool, "Cannot parse condition clause: %s", expr_err); } errmsg = ap_walk_config(cmd->directive->first_child, cmd, new_if_conf); if (errmsg != NULL) return errmsg; conf->d = cmd->path; conf->d_is_fnmatch = 0; conf->r = NULL; errmsg = ap_add_if_conf(cmd->pool, (core_dir_config *)mconfig, new_if_conf); if (errmsg != NULL) return errmsg; if (*arg != '\0') { return apr_pstrcat(cmd->pool, "Multiple ", thiscmd->name, "> arguments not supported.", NULL); } cmd->path = old_path; cmd->override = old_overrides; return NULL; } static module *find_module(server_rec *s, const char *name) { module *found = ap_find_linked_module(name); /* search prelinked stuff */ if (!found) { ap_module_symbol_t *current = ap_prelinked_module_symbols; for (; current->name; ++current) { if (!strcmp(current->name, name)) { found = current->modp; break; } } } /* search dynamic stuff */ if (!found) { APR_OPTIONAL_FN_TYPE(ap_find_loaded_module_symbol) *check_symbol = APR_RETRIEVE_OPTIONAL_FN(ap_find_loaded_module_symbol); if (check_symbol) { /* * There are two phases where calling ap_find_loaded_module_symbol * is problematic: * * During reading of the config, ap_server_conf is invalid but s * points to the main server config, if passed from cmd->server * of an EXEC_ON_READ directive. * * During config parsing, s may be a virtual host that would cause * a segfault in mod_so if passed to ap_find_loaded_module_symbol, * because mod_so's server config for vhosts is initialized later. * But ap_server_conf is already set at this time. * * Therefore we use s if it is not virtual and ap_server_conf if * s is virtual. */ found = check_symbol(s->is_virtual ? ap_server_conf : s, name); } } return found; } /* Callback function type used by start_cond_section. */ typedef int (*test_cond_section_fn)(cmd_parms *cmd, const char *arg); /* Implementation of -style conditional sections. Callback * to test condition must be in cmd->info, matching function type * test_cond_section_fn. */ static const char *start_cond_section(cmd_parms *cmd, void *mconfig, const char *arg) { const char *endp = ap_strrchr_c(arg, '>'); int result, not = (arg[0] == '!'); test_cond_section_fn testfn = (test_cond_section_fn)cmd->info; const char *arg1; if (endp == NULL) { return unclosed_directive(cmd); } arg = apr_pstrmemdup(cmd->temp_pool, arg, endp - arg); if (not) { arg++; } arg1 = ap_getword_conf(cmd->temp_pool, &arg); if (!arg1[0]) { return missing_container_arg(cmd); } result = testfn(cmd, arg1); if ((!not && result) || (not && !result)) { ap_directive_t *parent = NULL; ap_directive_t *current = NULL; const char *retval; retval = ap_build_cont_config(cmd->pool, cmd->temp_pool, cmd, ¤t, &parent, (char *)cmd->cmd->name); *(ap_directive_t **)mconfig = current; return retval; } else { *(ap_directive_t **)mconfig = NULL; return ap_soak_end_container(cmd, (char *)cmd->cmd->name); } } /* Callback to implement test for start_cond_section. */ static int test_ifmod_section(cmd_parms *cmd, const char *arg) { return find_module(cmd->server, arg) != NULL; } AP_DECLARE(int) ap_exists_config_define(const char *name) { return ap_array_str_contains(ap_server_config_defines, name); } static int test_ifdefine_section(cmd_parms *cmd, const char *arg) { return ap_exists_config_define(arg); } static int test_iffile_section(cmd_parms *cmd, const char *arg) { const char *relative; apr_finfo_t sb; relative = ap_server_root_relative(cmd->temp_pool, arg); return (apr_stat(&sb, relative, 0, cmd->pool) == APR_SUCCESS); } static int test_ifdirective_section(cmd_parms *cmd, const char *arg) { return ap_exists_directive(cmd->temp_pool, arg); } static int test_ifsection_section(cmd_parms *cmd, const char *arg) { const char *name = apr_pstrcat(cmd->temp_pool, "<", arg, NULL); return ap_exists_directive(cmd->temp_pool, name); } /* httpd.conf commands... beginning with the business */ static const char *virtualhost_section(cmd_parms *cmd, void *dummy, const char *arg) { server_rec *main_server = cmd->server, *s; const char *errmsg; const char *endp = ap_strrchr_c(arg, '>'); apr_pool_t *p = cmd->pool; const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (endp == NULL) { return unclosed_directive(cmd); } arg = apr_pstrndup(cmd->temp_pool, arg, endp - arg); if (!arg[0]) { return missing_container_arg(cmd); } /* FIXME: There's another feature waiting to happen here -- since you can now put multiple addresses/names on a single you might want to use it to group common definitions and then define other "subhosts" with their individual differences. But personally I'd rather just do it with a macro preprocessor. -djg */ if (main_server->is_virtual) { return " doesn't nest!"; } errmsg = ap_init_virtual_host(p, arg, main_server, &s); if (errmsg) { return errmsg; } s->next = main_server->next; main_server->next = s; s->defn_name = cmd->directive->filename; s->defn_line_number = cmd->directive->line_num; cmd->server = s; errmsg = ap_walk_config(cmd->directive->first_child, cmd, s->lookup_defaults); cmd->server = main_server; return errmsg; } static const char *set_regex_default_options(cmd_parms *cmd, void *dummy, const char *arg) { const command_rec *thiscmd = cmd->cmd; int cflags, cflag; const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } cflags = ap_regcomp_get_default_cflags(); while (*arg) { const char *name = ap_getword_conf(cmd->pool, &arg); int how = 0; if (strcasecmp(name, "none") == 0) { cflags = 0; continue; } if (*name == '+') { name++; how = +1; } else if (*name == '-') { name++; how = -1; } cflag = ap_regcomp_default_cflag_by_name(name); if (!cflag) { return apr_psprintf(cmd->pool, "%s: option '%s' unknown", thiscmd->name, name); } if (how > 0) { cflags |= cflag; } else if (how < 0) { cflags &= ~cflag; } else { cflags = cflag; } } ap_regcomp_set_default_cflags(cflags); return NULL; } static const char *set_server_alias(cmd_parms *cmd, void *dummy, const char *arg) { if (!cmd->server->names) { return "ServerAlias only used in "; } while (*arg) { char **item, *name = ap_getword_conf(cmd->pool, &arg); if (ap_is_matchexp(name)) { item = (char **)apr_array_push(cmd->server->wild_names); } else { item = (char **)apr_array_push(cmd->server->names); } *item = name; } return NULL; } static const char *set_accf_map(cmd_parms *cmd, void *dummy, const char *iproto, const char* iaccf) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); core_server_config *conf = ap_get_core_module_config(cmd->server->module_config); char* proto; char* accf; if (err != NULL) { return err; } proto = apr_pstrdup(cmd->pool, iproto); ap_str_tolower(proto); accf = apr_pstrdup(cmd->pool, iaccf); ap_str_tolower(accf); apr_table_setn(conf->accf_map, proto, accf); return NULL; } AP_DECLARE(const char*) ap_get_server_protocol(server_rec* s) { core_server_config *conf = ap_get_core_module_config(s->module_config); return conf->protocol; } AP_DECLARE(void) ap_set_server_protocol(server_rec* s, const char* proto) { core_server_config *conf = ap_get_core_module_config(s->module_config); conf->protocol = proto; } static const char *set_protocol(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); core_server_config *conf = ap_get_core_module_config(cmd->server->module_config); char* proto; if (err != NULL) { return err; } proto = apr_pstrdup(cmd->pool, arg); ap_str_tolower(proto); conf->protocol = proto; return NULL; } static const char *set_server_string_slot(cmd_parms *cmd, void *dummy, const char *arg) { /* This one's pretty generic... */ int offset = (int)(long)cmd->info; char *struct_ptr = (char *)cmd->server; const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err != NULL) { return err; } *(const char **)(struct_ptr + offset) = arg; return NULL; } /* * The ServerName directive takes one argument with format * [scheme://]fully-qualified-domain-name[:port], for instance * ServerName www.example.com * ServerName www.example.com:80 * ServerName https://www.example.com:443 */ static const char *server_hostname_port(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); const char *portstr, *part; char *scheme; int port; if (err != NULL) { return err; } if (apr_fnmatch_test(arg)) return apr_pstrcat(cmd->temp_pool, "Invalid ServerName \"", arg, "\" use ServerAlias to set multiple server names.", NULL); part = ap_strstr_c(arg, "://"); if (part) { scheme = apr_pstrndup(cmd->pool, arg, part - arg); ap_str_tolower(scheme); cmd->server->server_scheme = (const char *)scheme; part += 3; } else { part = arg; } portstr = ap_strchr_c(part, ':'); if (portstr) { cmd->server->server_hostname = apr_pstrndup(cmd->pool, part, portstr - part); portstr++; port = atoi(portstr); if (port <= 0 || port >= 65536) { /* 65536 == 1<<16 */ return apr_pstrcat(cmd->temp_pool, "The port number \"", arg, "\" is outside the appropriate range " "(i.e., 1..65535).", NULL); } } else { cmd->server->server_hostname = apr_pstrdup(cmd->pool, part); port = 0; } cmd->server->port = port; return NULL; } static const char *set_signature_flag(cmd_parms *cmd, void *d_, const char *arg) { core_dir_config *d = d_; if (strcasecmp(arg, "On") == 0) { d->server_signature = srv_sig_on; } else if (strcasecmp(arg, "Off") == 0) { d->server_signature = srv_sig_off; } else if (strcasecmp(arg, "EMail") == 0) { d->server_signature = srv_sig_withmail; } else { return "ServerSignature: use one of: off | on | email"; } return NULL; } static const char *set_server_root(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if ((apr_filepath_merge((char**)&ap_server_root, NULL, arg, APR_FILEPATH_TRUENAME, cmd->pool) != APR_SUCCESS) || !ap_is_directory(cmd->temp_pool, ap_server_root)) { return "ServerRoot must be a valid directory"; } return NULL; } static const char *set_runtime_dir(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if ((apr_filepath_merge((char**)&ap_runtime_dir, NULL, ap_server_root_relative(cmd->temp_pool, arg), APR_FILEPATH_TRUENAME, cmd->pool) != APR_SUCCESS) || !ap_is_directory(cmd->temp_pool, ap_runtime_dir)) { return "DefaultRuntimeDir must be a valid directory, absolute or relative to ServerRoot"; } return NULL; } static const char *set_timeout(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err != NULL) { return err; } cmd->server->timeout = apr_time_from_sec(atoi(arg)); return NULL; } static const char *set_allow2f(cmd_parms *cmd, void *d_, const char *arg) { core_dir_config *d = d_; if (0 == strcasecmp(arg, "on")) { d->allow_encoded_slashes = 1; d->decode_encoded_slashes = 1; /* for compatibility with 2.0 & 2.2 */ } else if (0 == strcasecmp(arg, "off")) { d->allow_encoded_slashes = 0; d->decode_encoded_slashes = 0; } else if (0 == strcasecmp(arg, "nodecode")) { d->allow_encoded_slashes = 1; d->decode_encoded_slashes = 0; } else { return apr_pstrcat(cmd->pool, cmd->cmd->name, " must be On, Off, or NoDecode", NULL); } return NULL; } static const char *set_hostname_lookups(cmd_parms *cmd, void *d_, const char *arg) { core_dir_config *d = d_; if (!strcasecmp(arg, "on")) { d->hostname_lookups = HOSTNAME_LOOKUP_ON; } else if (!strcasecmp(arg, "off")) { d->hostname_lookups = HOSTNAME_LOOKUP_OFF; } else if (!strcasecmp(arg, "double")) { d->hostname_lookups = HOSTNAME_LOOKUP_DOUBLE; } else { return "parameter must be 'on', 'off', or 'double'"; } return NULL; } static const char *set_serverpath(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err != NULL) { return err; } cmd->server->path = arg; cmd->server->pathlen = (int)strlen(arg); return NULL; } static const char *set_content_md5(cmd_parms *cmd, void *d_, int arg) { core_dir_config *d = d_; d->content_md5 = arg ? AP_CONTENT_MD5_ON : AP_CONTENT_MD5_OFF; return NULL; } static const char *set_accept_path_info(cmd_parms *cmd, void *d_, const char *arg) { core_dir_config *d = d_; if (strcasecmp(arg, "on") == 0) { d->accept_path_info = AP_REQ_ACCEPT_PATH_INFO; } else if (strcasecmp(arg, "off") == 0) { d->accept_path_info = AP_REQ_REJECT_PATH_INFO; } else if (strcasecmp(arg, "default") == 0) { d->accept_path_info = AP_REQ_DEFAULT_PATH_INFO; } else { return "AcceptPathInfo must be set to on, off or default"; } return NULL; } static const char *set_use_canonical_name(cmd_parms *cmd, void *d_, const char *arg) { core_dir_config *d = d_; if (strcasecmp(arg, "on") == 0) { d->use_canonical_name = USE_CANONICAL_NAME_ON; } else if (strcasecmp(arg, "off") == 0) { d->use_canonical_name = USE_CANONICAL_NAME_OFF; } else if (strcasecmp(arg, "dns") == 0) { d->use_canonical_name = USE_CANONICAL_NAME_DNS; } else { return "parameter must be 'on', 'off', or 'dns'"; } return NULL; } static const char *set_use_canonical_phys_port(cmd_parms *cmd, void *d_, const char *arg) { core_dir_config *d = d_; if (strcasecmp(arg, "on") == 0) { d->use_canonical_phys_port = USE_CANONICAL_PHYS_PORT_ON; } else if (strcasecmp(arg, "off") == 0) { d->use_canonical_phys_port = USE_CANONICAL_PHYS_PORT_OFF; } else { return "parameter must be 'on' or 'off'"; } return NULL; } static const char *include_config (cmd_parms *cmd, void *dummy, const char *name) { ap_directive_t *conftree = NULL; const char *conffile, *error; unsigned *recursion; int optional = cmd->cmd->cmd_data ? 1 : 0; void *data; /* NOTE: ap_include_sentinel is also used by ap_process_resource_config() * during DUMP_INCLUDES; don't change its type or remove it without updating * the other. */ apr_pool_userdata_get(&data, "ap_include_sentinel", cmd->pool); if (data) { recursion = data; } else { data = recursion = apr_palloc(cmd->pool, sizeof(*recursion)); *recursion = 0; apr_pool_userdata_setn(data, "ap_include_sentinel", NULL, cmd->pool); } if (++*recursion > AP_MAX_INCLUDE_DEPTH) { *recursion = 0; return apr_psprintf(cmd->pool, "Exceeded maximum include depth of %u, " "There appears to be a recursion.", AP_MAX_INCLUDE_DEPTH); } conffile = ap_server_root_relative(cmd->pool, name); if (!conffile) { *recursion = 0; return apr_pstrcat(cmd->pool, "Invalid Include path ", name, NULL); } if (ap_exists_config_define("DUMP_INCLUDES")) { unsigned *line_number; /* NOTE: ap_include_lineno is used by ap_process_resource_config() * during DUMP_INCLUDES; don't change its type or remove it without * updating the other. */ apr_pool_userdata_get(&data, "ap_include_lineno", cmd->pool); if (data) { line_number = data; } else { data = line_number = apr_palloc(cmd->pool, sizeof(*line_number)); apr_pool_userdata_setn(data, "ap_include_lineno", NULL, cmd->pool); } *line_number = cmd->config_file->line_number; } error = ap_process_fnmatch_configs(cmd->server, conffile, &conftree, cmd->pool, cmd->temp_pool, optional); if (error) { *recursion = 0; return error; } *(ap_directive_t **)dummy = conftree; /* recursion level done */ if (*recursion) { --*recursion; } return NULL; } static const char *set_loglevel(cmd_parms *cmd, void *config_, const char *arg_) { char *level_str; int level; module *module; char *arg = apr_pstrdup(cmd->temp_pool, arg_); struct ap_logconf *log; const char *err; if (cmd->path) { core_dir_config *dconf = config_; if (!dconf->log) { dconf->log = ap_new_log_config(cmd->pool, NULL); } log = dconf->log; } else { log = &cmd->server->log; } if (arg == NULL) return "LogLevel requires level keyword or module loglevel specifier"; level_str = ap_strrchr(arg, ':'); if (level_str == NULL) { err = ap_parse_log_level(arg, &log->level); if (err != NULL) return err; ap_reset_module_loglevels(log, APLOG_NO_MODULE); ap_log_error(APLOG_MARK, APLOG_TRACE3, 0, cmd->server, "Setting LogLevel for all modules to %s", arg); return NULL; } *level_str++ = '\0'; if (!*level_str) { return apr_psprintf(cmd->temp_pool, "Module specifier '%s' must be " "followed by a log level keyword", arg); } err = ap_parse_log_level(level_str, &level); if (err != NULL) return apr_psprintf(cmd->temp_pool, "%s:%s: %s", arg, level_str, err); if ((module = find_module(cmd->server, arg)) == NULL) { char *name = apr_psprintf(cmd->temp_pool, "%s_module", arg); ap_log_error(APLOG_MARK, APLOG_TRACE6, 0, cmd->server, "Cannot find module '%s', trying '%s'", arg, name); module = find_module(cmd->server, name); } if (module == NULL) { return apr_psprintf(cmd->temp_pool, "Cannot find module %s", arg); } ap_set_module_loglevel(cmd->pool, log, module->module_index, level); ap_log_error(APLOG_MARK, APLOG_TRACE3, 0, cmd->server, "Setting LogLevel for module %s to %s", module->name, level_str); return NULL; } AP_DECLARE(const char *) ap_psignature(const char *prefix, request_rec *r) { char sport[20]; core_dir_config *conf; conf = (core_dir_config *)ap_get_core_module_config(r->per_dir_config); if ((conf->server_signature == srv_sig_off) || (conf->server_signature == srv_sig_unset)) { return ""; } apr_snprintf(sport, sizeof sport, "%u", (unsigned) ap_get_server_port(r)); if (conf->server_signature == srv_sig_withmail) { return apr_pstrcat(r->pool, prefix, "
", ap_get_server_banner(), " Server at server->server_admin) ? "" : "mailto:", ap_escape_html(r->pool, r->server->server_admin), "\">", ap_escape_html(r->pool, ap_get_server_name(r)), " Port ", sport, "
\n", NULL); } return apr_pstrcat(r->pool, prefix, "
", ap_get_server_banner(), " Server at ", ap_escape_html(r->pool, ap_get_server_name(r)), " Port ", sport, "
\n", NULL); } /* * Handle a request to include the server's OS platform in the Server * response header field (the ServerTokens directive). Unfortunately * this requires a new global in order to communicate the setting back to * http_main so it can insert the information in the right place in the * string. */ static char *server_banner = NULL; static int banner_locked = 0; static const char *server_description = NULL; enum server_token_type { SrvTk_MAJOR, /* eg: Apache/2 */ SrvTk_MINOR, /* eg. Apache/2.0 */ SrvTk_MINIMAL, /* eg: Apache/2.0.41 */ SrvTk_OS, /* eg: Apache/2.0.41 (UNIX) */ SrvTk_FULL, /* eg: Apache/2.0.41 (UNIX) PHP/4.2.2 FooBar/1.2b */ SrvTk_PRODUCT_ONLY /* eg: Apache */ }; static enum server_token_type ap_server_tokens = SrvTk_FULL; static apr_status_t reset_banner(void *dummy) { banner_locked = 0; ap_server_tokens = SrvTk_FULL; server_banner = NULL; server_description = NULL; return APR_SUCCESS; } AP_DECLARE(void) ap_get_server_revision(ap_version_t *version) { version->major = AP_SERVER_MAJORVERSION_NUMBER; version->minor = AP_SERVER_MINORVERSION_NUMBER; version->patch = AP_SERVER_PATCHLEVEL_NUMBER; version->add_string = AP_SERVER_ADD_STRING; } AP_DECLARE(const char *) ap_get_server_description(void) { return server_description ? server_description : AP_SERVER_BASEVERSION " (" PLATFORM ")"; } AP_DECLARE(const char *) ap_get_server_banner(void) { return server_banner ? server_banner : AP_SERVER_BASEVERSION; } AP_DECLARE(void) ap_add_version_component(apr_pool_t *pconf, const char *component) { if (! banner_locked) { /* * If the version string is null, register our cleanup to reset the * pointer on pool destruction. We also know that, if NULL, * we are adding the original SERVER_BASEVERSION string. */ if (server_banner == NULL) { apr_pool_cleanup_register(pconf, NULL, reset_banner, apr_pool_cleanup_null); server_banner = apr_pstrdup(pconf, component); } else { /* * Tack the given component identifier to the end of * the existing string. */ server_banner = apr_pstrcat(pconf, server_banner, " ", component, NULL); } } server_description = apr_pstrcat(pconf, server_description, " ", component, NULL); } /* * This routine adds the real server base identity to the banner string, * and then locks out changes until the next reconfig. */ static void set_banner(apr_pool_t *pconf) { if (ap_server_tokens == SrvTk_PRODUCT_ONLY) { ap_add_version_component(pconf, AP_SERVER_BASEPRODUCT); } else if (ap_server_tokens == SrvTk_MINIMAL) { ap_add_version_component(pconf, AP_SERVER_BASEVERSION); } else if (ap_server_tokens == SrvTk_MINOR) { ap_add_version_component(pconf, AP_SERVER_BASEPRODUCT "/" AP_SERVER_MINORREVISION); } else if (ap_server_tokens == SrvTk_MAJOR) { ap_add_version_component(pconf, AP_SERVER_BASEPRODUCT "/" AP_SERVER_MAJORVERSION); } else { ap_add_version_component(pconf, AP_SERVER_BASEVERSION " (" PLATFORM ")"); } /* * Lock the server_banner string if we're not displaying * the full set of tokens */ if (ap_server_tokens != SrvTk_FULL) { banner_locked++; } server_description = AP_SERVER_BASEVERSION " (" PLATFORM ")"; } static const char *set_serv_tokens(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (!strcasecmp(arg, "OS")) { ap_server_tokens = SrvTk_OS; } else if (!strcasecmp(arg, "Min") || !strcasecmp(arg, "Minimal")) { ap_server_tokens = SrvTk_MINIMAL; } else if (!strcasecmp(arg, "Major")) { ap_server_tokens = SrvTk_MAJOR; } else if (!strcasecmp(arg, "Minor") ) { ap_server_tokens = SrvTk_MINOR; } else if (!strcasecmp(arg, "Prod") || !strcasecmp(arg, "ProductOnly")) { ap_server_tokens = SrvTk_PRODUCT_ONLY; } else if (!strcasecmp(arg, "Full")) { ap_server_tokens = SrvTk_FULL; } else { return "ServerTokens takes 1 argument: 'Prod(uctOnly)', 'Major', 'Minor', 'Min(imal)', 'OS', or 'Full'"; } return NULL; } static const char *set_limit_req_line(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); int lim; if (err != NULL) { return err; } lim = atoi(arg); if (lim < 0) { return apr_pstrcat(cmd->temp_pool, "LimitRequestLine \"", arg, "\" must be a non-negative integer", NULL); } cmd->server->limit_req_line = lim; return NULL; } static const char *set_limit_req_fieldsize(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); int lim; if (err != NULL) { return err; } lim = atoi(arg); if (lim < 0) { return apr_pstrcat(cmd->temp_pool, "LimitRequestFieldsize \"", arg, "\" must be a non-negative integer", NULL); } cmd->server->limit_req_fieldsize = lim; return NULL; } static const char *set_limit_req_fields(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); int lim; if (err != NULL) { return err; } lim = atoi(arg); if (lim < 0) { return apr_pstrcat(cmd->temp_pool, "LimitRequestFields \"", arg, "\" must be a non-negative integer (0 = no limit)", NULL); } cmd->server->limit_req_fields = lim; return NULL; } static const char *set_limit_req_body(cmd_parms *cmd, void *conf_, const char *arg) { core_dir_config *conf = conf_; char *errp; if (APR_SUCCESS != apr_strtoff(&conf->limit_req_body, arg, &errp, 10)) { return "LimitRequestBody argument is not parsable."; } if (*errp || conf->limit_req_body < 0) { return "LimitRequestBody requires a non-negative integer."; } return NULL; } static const char *set_limit_xml_req_body(cmd_parms *cmd, void *conf_, const char *arg) { core_dir_config *conf = conf_; conf->limit_xml_body = atol(arg); if (conf->limit_xml_body < 0) return "LimitXMLRequestBody requires a non-negative integer."; return NULL; } static const char *set_max_ranges(cmd_parms *cmd, void *conf_, const char *arg) { core_dir_config *conf = conf_; int val = 0; if (!strcasecmp(arg, "none")) { val = AP_MAXRANGES_NORANGES; } else if (!strcasecmp(arg, "default")) { val = AP_MAXRANGES_DEFAULT; } else if (!strcasecmp(arg, "unlimited")) { val = AP_MAXRANGES_UNLIMITED; } else { val = atoi(arg); if (val <= 0) return "MaxRanges requires 'none', 'default', 'unlimited' or " "a positive integer"; } conf->max_ranges = val; return NULL; } static const char *set_max_overlaps(cmd_parms *cmd, void *conf_, const char *arg) { core_dir_config *conf = conf_; int val = 0; if (!strcasecmp(arg, "none")) { val = AP_MAXRANGES_NORANGES; } else if (!strcasecmp(arg, "default")) { val = AP_MAXRANGES_DEFAULT; } else if (!strcasecmp(arg, "unlimited")) { val = AP_MAXRANGES_UNLIMITED; } else { val = atoi(arg); if (val <= 0) return "MaxRangeOverlaps requires 'none', 'default', 'unlimited' or " "a positive integer"; } conf->max_overlaps = val; return NULL; } static const char *set_max_reversals(cmd_parms *cmd, void *conf_, const char *arg) { core_dir_config *conf = conf_; int val = 0; if (!strcasecmp(arg, "none")) { val = AP_MAXRANGES_NORANGES; } else if (!strcasecmp(arg, "default")) { val = AP_MAXRANGES_DEFAULT; } else if (!strcasecmp(arg, "unlimited")) { val = AP_MAXRANGES_UNLIMITED; } else { val = atoi(arg); if (val <= 0) return "MaxRangeReversals requires 'none', 'default', 'unlimited' or " "a positive integer"; } conf->max_reversals = val; return NULL; } AP_DECLARE(apr_size_t) ap_get_limit_xml_body(const request_rec *r) { core_dir_config *conf; conf = ap_get_core_module_config(r->per_dir_config); if (conf->limit_xml_body == AP_LIMIT_UNSET) return AP_DEFAULT_LIMIT_XML_BODY; return (apr_size_t)conf->limit_xml_body; } #if !defined (RLIMIT_CPU) || !(defined (RLIMIT_DATA) || defined (RLIMIT_VMEM) || defined(RLIMIT_AS)) || !defined (RLIMIT_NPROC) static const char *no_set_limit(cmd_parms *cmd, void *conf_, const char *arg, const char *arg2) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, cmd->server, APLOGNO(00118) "%s not supported on this platform", cmd->cmd->name); return NULL; } #endif #ifdef RLIMIT_CPU static const char *set_limit_cpu(cmd_parms *cmd, void *conf_, const char *arg, const char *arg2) { core_dir_config *conf = conf_; ap_unixd_set_rlimit(cmd, &conf->limit_cpu, arg, arg2, RLIMIT_CPU); return NULL; } #endif #if defined (RLIMIT_DATA) || defined (RLIMIT_VMEM) || defined(RLIMIT_AS) static const char *set_limit_mem(cmd_parms *cmd, void *conf_, const char *arg, const char * arg2) { core_dir_config *conf = conf_; #if defined(RLIMIT_AS) ap_unixd_set_rlimit(cmd, &conf->limit_mem, arg, arg2 ,RLIMIT_AS); #elif defined(RLIMIT_DATA) ap_unixd_set_rlimit(cmd, &conf->limit_mem, arg, arg2, RLIMIT_DATA); #elif defined(RLIMIT_VMEM) ap_unixd_set_rlimit(cmd, &conf->limit_mem, arg, arg2, RLIMIT_VMEM); #endif return NULL; } #endif #ifdef RLIMIT_NPROC static const char *set_limit_nproc(cmd_parms *cmd, void *conf_, const char *arg, const char * arg2) { core_dir_config *conf = conf_; ap_unixd_set_rlimit(cmd, &conf->limit_nproc, arg, arg2, RLIMIT_NPROC); return NULL; } #endif static const char *set_recursion_limit(cmd_parms *cmd, void *dummy, const char *arg1, const char *arg2) { core_server_config *conf = ap_get_core_module_config(cmd->server->module_config); int limit = atoi(arg1); if (limit <= 0) { return "The recursion limit must be greater than zero."; } if (limit < 4) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(00119) "Limiting internal redirects to very low numbers may " "cause normal requests to fail."); } conf->redirect_limit = limit; if (arg2) { limit = atoi(arg2); if (limit <= 0) { return "The recursion limit must be greater than zero."; } if (limit < 4) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(00120) "Limiting the subrequest depth to a very low level may" " cause normal requests to fail."); } } conf->subreq_limit = limit; return NULL; } static void log_backtrace(const request_rec *r) { const request_rec *top = r; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00121) "r->uri = %s", r->uri ? r->uri : "(unexpectedly NULL)"); while (top && (top->prev || top->main)) { if (top->prev) { top = top->prev; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00122) "redirected from r->uri = %s", top->uri ? top->uri : "(unexpectedly NULL)"); } if (!top->prev && top->main) { top = top->main; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00123) "subrequested from r->uri = %s", top->uri ? top->uri : "(unexpectedly NULL)"); } } } /* * check whether redirect limit is reached */ AP_DECLARE(int) ap_is_recursion_limit_exceeded(const request_rec *r) { core_server_config *conf = ap_get_core_module_config(r->server->module_config); const request_rec *top = r; int redirects = 0, subreqs = 0; int rlimit = conf->redirect_limit ? conf->redirect_limit : AP_DEFAULT_MAX_INTERNAL_REDIRECTS; int slimit = conf->subreq_limit ? conf->subreq_limit : AP_DEFAULT_MAX_SUBREQ_DEPTH; while (top->prev || top->main) { if (top->prev) { if (++redirects >= rlimit) { /* uuh, too much. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00124) "Request exceeded the limit of %d internal " "redirects due to probable configuration error. " "Use 'LimitInternalRecursion' to increase the " "limit if necessary. Use 'LogLevel debug' to get " "a backtrace.", rlimit); /* post backtrace */ log_backtrace(r); /* return failure */ return 1; } top = top->prev; } if (!top->prev && top->main) { if (++subreqs >= slimit) { /* uuh, too much. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00125) "Request exceeded the limit of %d subrequest " "nesting levels due to probable configuration " "error. Use 'LimitInternalRecursion' to increase " "the limit if necessary. Use 'LogLevel debug' to " "get a backtrace.", slimit); /* post backtrace */ log_backtrace(r); /* return failure */ return 1; } top = top->main; } } /* recursion state: ok */ return 0; } static const char *set_trace_enable(cmd_parms *cmd, void *dummy, const char *arg1) { core_server_config *conf = ap_get_core_module_config(cmd->server->module_config); if (strcasecmp(arg1, "on") == 0) { conf->trace_enable = AP_TRACE_ENABLE; } else if (strcasecmp(arg1, "off") == 0) { conf->trace_enable = AP_TRACE_DISABLE; } else if (strcasecmp(arg1, "extended") == 0) { conf->trace_enable = AP_TRACE_EXTENDED; } else { return "TraceEnable must be one of 'on', 'off', or 'extended'"; } return NULL; } static const char *set_protocols(cmd_parms *cmd, void *dummy, const char *arg) { core_server_config *conf = ap_get_core_module_config(cmd->server->module_config); const char **np; const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err) { return err; } np = (const char **)apr_array_push(conf->protocols); *np = arg; return NULL; } static const char *set_protocols_honor_order(cmd_parms *cmd, void *dummy, const char *arg) { core_server_config *conf = ap_get_core_module_config(cmd->server->module_config); const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err) { return err; } if (strcasecmp(arg, "on") == 0) { conf->protocols_honor_order = 1; } else if (strcasecmp(arg, "off") == 0) { conf->protocols_honor_order = 0; } else { return "ProtocolsHonorOrder must be 'on' or 'off'"; } return NULL; } static const char *set_http_protocol_options(cmd_parms *cmd, void *dummy, const char *arg) { core_server_config *conf = ap_get_core_module_config(cmd->server->module_config); if (strcasecmp(arg, "allow0.9") == 0) conf->http09_enable |= AP_HTTP09_ENABLE; else if (strcasecmp(arg, "require1.0") == 0) conf->http09_enable |= AP_HTTP09_DISABLE; else if (strcasecmp(arg, "strict") == 0) conf->http_conformance |= AP_HTTP_CONFORMANCE_STRICT; else if (strcasecmp(arg, "unsafe") == 0) conf->http_conformance |= AP_HTTP_CONFORMANCE_UNSAFE; else if (strcasecmp(arg, "registeredmethods") == 0) conf->http_methods |= AP_HTTP_METHODS_REGISTERED; else if (strcasecmp(arg, "lenientmethods") == 0) conf->http_methods |= AP_HTTP_METHODS_LENIENT; else return "HttpProtocolOptions accepts " "'Unsafe' or 'Strict' (default), " "'RegisteredMethods' or 'LenientMethods' (default), and " "'Require1.0' or 'Allow0.9' (default)"; if ((conf->http09_enable & AP_HTTP09_ENABLE) && (conf->http09_enable & AP_HTTP09_DISABLE)) return "HttpProtocolOptions 'Allow0.9' and 'Require1.0'" " are mutually exclusive"; if ((conf->http_conformance & AP_HTTP_CONFORMANCE_STRICT) && (conf->http_conformance & AP_HTTP_CONFORMANCE_UNSAFE)) return "HttpProtocolOptions 'Strict' and 'Unsafe'" " are mutually exclusive"; if ((conf->http_methods & AP_HTTP_METHODS_REGISTERED) && (conf->http_methods & AP_HTTP_METHODS_LENIENT)) return "HttpProtocolOptions 'RegisteredMethods' and 'LenientMethods'" " are mutually exclusive"; return NULL; } static const char *set_http_method(cmd_parms *cmd, void *conf, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) return err; ap_method_register(cmd->pool, arg); return NULL; } static apr_hash_t *errorlog_hash; static int log_constant_item(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { char *end = apr_cpystrn(buf, arg, buflen); return end - buf; } static char *parse_errorlog_misc_string(apr_pool_t *p, ap_errorlog_format_item *it, const char **sa) { const char *s; char scratch[MAX_STRING_LEN]; char *d = scratch; /* * non-leading white space terminates this string to allow the next field * separator to be inserted */ int at_start = 1; it->func = log_constant_item; s = *sa; while (*s && *s != '%' && (*s != ' ' || at_start) && d < scratch + MAX_STRING_LEN) { if (*s != '\\') { if (*s != ' ') { at_start = 0; } *d++ = *s++; } else { s++; switch (*s) { case 'r': *d++ = '\r'; s++; break; case 'n': *d++ = '\n'; s++; break; case 't': *d++ = '\t'; s++; break; case '\0': /* handle end of string */ *d++ = '\\'; break; default: /* copy next char verbatim */ *d++ = *s++; break; } } } *d = '\0'; it->arg = apr_pstrdup(p, scratch); *sa = s; return NULL; } static char *parse_errorlog_item(apr_pool_t *p, ap_errorlog_format_item *it, const char **sa) { const char *s = *sa; ap_errorlog_handler *handler; int i; if (*s != '%') { if (*s == ' ') { it->flags |= AP_ERRORLOG_FLAG_FIELD_SEP; } return parse_errorlog_misc_string(p, it, sa); } ++s; if (*s == ' ') { /* percent-space (% ) is a field separator */ it->flags |= AP_ERRORLOG_FLAG_FIELD_SEP; *sa = ++s; /* recurse */ return parse_errorlog_item(p, it, sa); } else if (*s == '%') { it->arg = "%"; it->func = log_constant_item; *sa = ++s; return NULL; } while (*s) { switch (*s) { case '{': ++s; it->arg = ap_getword(p, &s, '}'); break; case '+': ++s; it->flags |= AP_ERRORLOG_FLAG_REQUIRED; break; case '-': ++s; it->flags |= AP_ERRORLOG_FLAG_NULL_AS_HYPHEN; break; case '0': case '1': case '2': case '3': case '4': case '5': case '6': case '7': case '8': case '9': i = *s - '0'; while (apr_isdigit(*++s)) i = i * 10 + (*s) - '0'; it->min_loglevel = i; break; case 'M': it->func = NULL; it->flags |= AP_ERRORLOG_FLAG_MESSAGE; *sa = ++s; return NULL; default: handler = (ap_errorlog_handler *)apr_hash_get(errorlog_hash, s, 1); if (!handler) { char dummy[2]; dummy[0] = *s; dummy[1] = '\0'; return apr_pstrcat(p, "Unrecognized error log format directive %", dummy, NULL); } it->func = handler->func; *sa = ++s; return NULL; } } return "Ran off end of error log format parsing args to some directive"; } static apr_array_header_t *parse_errorlog_string(apr_pool_t *p, const char *s, const char **err, int is_main_fmt) { apr_array_header_t *a = apr_array_make(p, 30, sizeof(ap_errorlog_format_item)); char *res; int seen_msg_fmt = 0; while (s && *s) { ap_errorlog_format_item *item = (ap_errorlog_format_item *)apr_array_push(a); memset(item, 0, sizeof(*item)); res = parse_errorlog_item(p, item, &s); if (res) { *err = res; return NULL; } if (item->flags & AP_ERRORLOG_FLAG_MESSAGE) { if (!is_main_fmt) { *err = "%M cannot be used in once-per-request or " "once-per-connection formats"; return NULL; } seen_msg_fmt = 1; } if (is_main_fmt && item->flags & AP_ERRORLOG_FLAG_REQUIRED) { *err = "The '+' flag cannot be used in the main error log format"; return NULL; } if (!is_main_fmt && item->min_loglevel) { *err = "The loglevel cannot be used as a condition in " "once-per-request or once-per-connection formats"; return NULL; } if (item->min_loglevel > APLOG_TRACE8) { *err = "The specified loglevel modifier is out of range"; return NULL; } } if (is_main_fmt && !seen_msg_fmt) { *err = "main ErrorLogFormat must contain message format string '%M'"; return NULL; } return a; } static const char *set_errorlog_format(cmd_parms *cmd, void *dummy, const char *arg1, const char *arg2) { const char *err_string = NULL; core_server_config *conf = ap_get_core_module_config(cmd->server->module_config); if (!arg2) { conf->error_log_format = parse_errorlog_string(cmd->pool, arg1, &err_string, 1); } else if (!strcasecmp(arg1, "connection")) { if (!conf->error_log_conn) { conf->error_log_conn = apr_array_make(cmd->pool, 5, sizeof(apr_array_header_t *)); } if (*arg2) { apr_array_header_t **e; e = (apr_array_header_t **) apr_array_push(conf->error_log_conn); *e = parse_errorlog_string(cmd->pool, arg2, &err_string, 0); } } else if (!strcasecmp(arg1, "request")) { if (!conf->error_log_req) { conf->error_log_req = apr_array_make(cmd->pool, 5, sizeof(apr_array_header_t *)); } if (*arg2) { apr_array_header_t **e; e = (apr_array_header_t **) apr_array_push(conf->error_log_req); *e = parse_errorlog_string(cmd->pool, arg2, &err_string, 0); } } else { err_string = "ErrorLogFormat type must be one of request, connection"; } return err_string; } AP_DECLARE(void) ap_register_errorlog_handler(apr_pool_t *p, char *tag, ap_errorlog_handler_fn_t *handler, int flags) { ap_errorlog_handler *log_struct = apr_palloc(p, sizeof(*log_struct)); log_struct->func = handler; log_struct->flags = flags; apr_hash_set(errorlog_hash, tag, 1, (const void *)log_struct); } static const char *set_merge_trailers(cmd_parms *cmd, void *dummy, int arg) { core_server_config *conf = ap_get_module_config(cmd->server->module_config, &core_module); conf->merge_trailers = (arg ? AP_MERGE_TRAILERS_ENABLE : AP_MERGE_TRAILERS_DISABLE); return NULL; } /* Note --- ErrorDocument will now work from .htaccess files. * The AllowOverride of Fileinfo allows webmasters to turn it off */ static const command_rec core_cmds[] = { /* Old access config file commands */ AP_INIT_RAW_ARGS("proxyreq) { return HTTP_FORBIDDEN; } if (!r->uri || ((r->uri[0] != '/') && strcmp(r->uri, "*"))) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00126) "Invalid URI in request %s", r->the_request); return HTTP_BAD_REQUEST; } if (r->server->path && !strncmp(r->uri, r->server->path, r->server->pathlen) && (r->server->path[r->server->pathlen - 1] == '/' || r->uri[r->server->pathlen] == '/' || r->uri[r->server->pathlen] == '\0')) { path = r->uri + r->server->pathlen; } else { path = r->uri; } /* * Make sure that we do not mess up the translation by adding two * /'s in a row. This happens under windows when the document * root ends with a / */ /* skip all leading /'s (e.g. http://localhost///foo) * so we are looking at only the relative path. */ while (*path == '/') { ++path; } if ((rv = apr_filepath_merge(&r->filename, ap_document_root(r), path, APR_FILEPATH_TRUENAME | APR_FILEPATH_SECUREROOT, r->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00127) "Cannot map %s to file", r->the_request); return HTTP_FORBIDDEN; } r->canonical_filename = r->filename; return OK; } /***************************************************************** * * Test the filesystem name through directory_walk and file_walk */ static int core_map_to_storage(request_rec *r) { int access_status; if ((access_status = ap_directory_walk(r))) { return access_status; } if ((access_status = ap_file_walk(r))) { return access_status; } return OK; } static int do_nothing(request_rec *r) { return OK; } static int core_override_type(request_rec *r) { core_dir_config *conf = (core_dir_config *)ap_get_core_module_config(r->per_dir_config); /* Check for overrides with ForceType / SetHandler */ if (conf->mime_type && strcmp(conf->mime_type, "none")) ap_set_content_type(r, (char*) conf->mime_type); if (conf->expr_handler) { const char *err; const char *val; val = ap_expr_str_exec(r, conf->expr_handler, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(03154) "Can't evaluate handler expression: %s", err); return HTTP_INTERNAL_SERVER_ERROR; } if (val != ap_strstr_c(val, "proxy:unix")) { /* Retained for compatibility -- but not for UDS */ char *tmp = apr_pstrdup(r->pool, val); ap_str_tolower(tmp); val = tmp; } if (strcmp(val, "none")) { r->handler = val; } } else if (conf->handler && strcmp(conf->handler, "none")) { r->handler = conf->handler; } /* Deal with the poor soul who is trying to force path_info to be * accepted within the core_handler, where they will let the subreq * address its contents. This is toggled by the user in the very * beginning of the fixup phase (here!), so modules should override the user's * discretion in their own module fixup phase. It is tristate, if * the user doesn't specify, the result is AP_REQ_DEFAULT_PATH_INFO. * (which the module may interpret to its own customary behavior.) * It won't be touched if the value is no longer AP_ACCEPT_PATHINFO_UNSET, * so any module changing the value prior to the fixup phase * OVERRIDES the user's choice. */ if ((r->used_path_info == AP_REQ_DEFAULT_PATH_INFO) && (conf->accept_path_info != AP_ACCEPT_PATHINFO_UNSET)) { /* No module knew better, and the user coded AcceptPathInfo */ r->used_path_info = conf->accept_path_info; } return OK; } static int default_handler(request_rec *r) { conn_rec *c = r->connection; apr_bucket_brigade *bb; apr_bucket *e; core_dir_config *d; int errstatus; apr_file_t *fd = NULL; apr_status_t status; /* XXX if/when somebody writes a content-md5 filter we either need to * remove this support or coordinate when to use the filter vs. * when to use this code * The current choice of when to compute the md5 here matches the 1.3 * support fairly closely (unlike 1.3, we don't handle computing md5 * when the charset is translated). */ int bld_content_md5; d = (core_dir_config *)ap_get_core_module_config(r->per_dir_config); bld_content_md5 = (d->content_md5 == AP_CONTENT_MD5_ON) && r->output_filters->frec->ftype != AP_FTYPE_RESOURCE; ap_allow_standard_methods(r, MERGE_ALLOW, M_GET, M_OPTIONS, M_POST, -1); /* If filters intend to consume the request body, they must * register an InputFilter to slurp the contents of the POST * data from the POST input stream. It no longer exists when * the output filters are invoked by the default handler. */ if ((errstatus = ap_discard_request_body(r)) != OK) { return errstatus; } if (r->method_number == M_GET || r->method_number == M_POST) { if (r->finfo.filetype == APR_NOFILE) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00128) "File does not exist: %s", apr_pstrcat(r->pool, r->filename, r->path_info, NULL)); return HTTP_NOT_FOUND; } /* Don't try to serve a dir. Some OSs do weird things with * raw I/O on a dir. */ if (r->finfo.filetype == APR_DIR) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00129) "Attempt to serve directory: %s", r->filename); return HTTP_NOT_FOUND; } if ((r->used_path_info != AP_REQ_ACCEPT_PATH_INFO) && r->path_info && *r->path_info) { /* default to reject */ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00130) "File does not exist: %s", apr_pstrcat(r->pool, r->filename, r->path_info, NULL)); return HTTP_NOT_FOUND; } /* We understood the (non-GET) method, but it might not be legal for this particular resource. Check to see if the 'deliver_script' flag is set. If so, then we go ahead and deliver the file since it isn't really content (only GET normally returns content). Note: based on logic further above, the only possible non-GET method at this point is POST. In the future, we should enable script delivery for all methods. */ if (r->method_number != M_GET) { core_request_config *req_cfg; req_cfg = ap_get_core_module_config(r->request_config); if (!req_cfg->deliver_script) { /* The flag hasn't been set for this request. Punt. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00131) "This resource does not accept the %s method.", r->method); return HTTP_METHOD_NOT_ALLOWED; } } if ((status = apr_file_open(&fd, r->filename, APR_READ | APR_BINARY #if APR_HAS_SENDFILE | AP_SENDFILE_ENABLED(d->enable_sendfile) #endif , 0, r->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(00132) "file permissions deny server access: %s", r->filename); return HTTP_FORBIDDEN; } ap_update_mtime(r, r->finfo.mtime); ap_set_last_modified(r); ap_set_etag(r); ap_set_accept_ranges(r); ap_set_content_length(r, r->finfo.size); if (bld_content_md5) { apr_table_setn(r->headers_out, "Content-MD5", ap_md5digest(r->pool, fd)); } bb = apr_brigade_create(r->pool, c->bucket_alloc); if ((errstatus = ap_meets_conditions(r)) != OK) { apr_file_close(fd); r->status = errstatus; } else { e = apr_brigade_insert_file(bb, fd, 0, r->finfo.size, r->pool); #if APR_HAS_MMAP if (d->enable_mmap == ENABLE_MMAP_OFF) { (void)apr_bucket_file_enable_mmap(e, 0); } #endif } e = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); status = ap_pass_brigade(r->output_filters, bb); if (status == APR_SUCCESS || r->status != HTTP_OK || c->aborted) { return OK; } else { /* no way to know what type of error occurred */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, r, APLOGNO(00133) "default_handler: ap_pass_brigade returned %i", status); return AP_FILTER_ERROR; } } else { /* unusual method (not GET or POST) */ if (r->method_number == M_INVALID) { /* See if this looks like an undecrypted SSL handshake attempt. * It's safe to look a couple bytes into the_request if it exists, as it's * always allocated at least MIN_LINE_ALLOC (80) bytes. */ if (r->the_request && r->the_request[0] == 0x16 && (r->the_request[1] == 0x2 || r->the_request[1] == 0x3)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00134) "Invalid method in request %s - possible attempt to establish SSL connection on non-SSL port", r->the_request); } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00135) "Invalid method in request %s", r->the_request); } return HTTP_NOT_IMPLEMENTED; } if (r->method_number == M_OPTIONS) { return ap_send_http_options(r); } return HTTP_METHOD_NOT_ALLOWED; } } /* Optional function coming from mod_logio, used for logging of output * traffic */ APR_OPTIONAL_FN_TYPE(ap_logio_add_bytes_out) *ap__logio_add_bytes_out; APR_OPTIONAL_FN_TYPE(authz_some_auth_required) *ap__authz_ap_some_auth_required; /* Insist that at least one module will undertake to provide system * security by dropping startup privileges. */ static int sys_privileges = 0; AP_DECLARE(int) ap_sys_privileges_handlers(int inc) { sys_privileges += inc; return sys_privileges; } static int check_errorlog_dir(apr_pool_t *p, server_rec *s) { if (!s->error_fname || s->error_fname[0] == '|' || strcmp(s->error_fname, "syslog") == 0 || strncmp(s->error_fname, "syslog:", 7) == 0) { return APR_SUCCESS; } else { char *abs = ap_server_root_relative(p, s->error_fname); char *dir = ap_make_dirstr_parent(p, abs); apr_finfo_t finfo; apr_status_t rv = apr_stat(&finfo, dir, APR_FINFO_TYPE, p); if (rv == APR_SUCCESS && finfo.filetype != APR_DIR) rv = APR_ENOTDIR; if (rv != APR_SUCCESS) { const char *desc = "main error log"; if (s->defn_name) desc = apr_psprintf(p, "error log of vhost defined at %s:%d", s->defn_name, s->defn_line_number); ap_log_error(APLOG_MARK, APLOG_STARTUP|APLOG_EMERG, rv, ap_server_conf, APLOGNO(02291) "Cannot access directory '%s' for %s", dir, desc); return !OK; } } return OK; } static int core_check_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { int rv = OK; while (s) { if (check_errorlog_dir(ptemp, s) != OK) rv = !OK; s = s->next; } return rv; } static int core_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { ap_mutex_init(pconf); if (!saved_server_config_defines) init_config_defines(pconf); apr_pool_cleanup_register(pconf, NULL, reset_config_defines, apr_pool_cleanup_null); ap_regcomp_set_default_cflags(AP_REG_DOLLAR_ENDONLY); mpm_common_pre_config(pconf); return OK; } static int core_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { ap__logio_add_bytes_out = APR_RETRIEVE_OPTIONAL_FN(ap_logio_add_bytes_out); ident_lookup = APR_RETRIEVE_OPTIONAL_FN(ap_ident_lookup); ap__authz_ap_some_auth_required = APR_RETRIEVE_OPTIONAL_FN(authz_some_auth_required); authn_ap_auth_type = APR_RETRIEVE_OPTIONAL_FN(authn_ap_auth_type); authn_ap_auth_name = APR_RETRIEVE_OPTIONAL_FN(authn_ap_auth_name); access_compat_ap_satisfies = APR_RETRIEVE_OPTIONAL_FN(access_compat_ap_satisfies); set_banner(pconf); ap_setup_make_content_type(pconf); ap_setup_auth_internal(ptemp); if (!sys_privileges) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, NULL, APLOGNO(00136) "Server MUST relinquish startup privileges before " "accepting connections. Please ensure mod_unixd " "or other system security module is loaded."); return !OK; } apr_pool_cleanup_register(pconf, NULL, ap_mpm_end_gen_helper, apr_pool_cleanup_null); return OK; } static void core_insert_filter(request_rec *r) { core_dir_config *conf = (core_dir_config *) ap_get_core_module_config(r->per_dir_config); const char *filter, *filters = conf->output_filters; if (filters) { while (*filters && (filter = ap_getword(r->pool, &filters, ';'))) { ap_add_output_filter(filter, NULL, r, r->connection); } } filters = conf->input_filters; if (filters) { while (*filters && (filter = ap_getword(r->pool, &filters, ';'))) { ap_add_input_filter(filter, NULL, r, r->connection); } } } static apr_size_t num_request_notes = AP_NUM_STD_NOTES; static apr_status_t reset_request_notes(void *dummy) { num_request_notes = AP_NUM_STD_NOTES; return APR_SUCCESS; } AP_DECLARE(apr_size_t) ap_register_request_note(void) { apr_pool_cleanup_register(apr_hook_global_pool, NULL, reset_request_notes, apr_pool_cleanup_null); return num_request_notes++; } AP_DECLARE(void **) ap_get_request_note(request_rec *r, apr_size_t note_num) { core_request_config *req_cfg; if (note_num >= num_request_notes) { return NULL; } req_cfg = (core_request_config *) ap_get_core_module_config(r->request_config); if (!req_cfg) { return NULL; } return &(req_cfg->notes[note_num]); } AP_DECLARE(apr_socket_t *) ap_get_conn_socket(conn_rec *c) { return ap_get_core_module_config(c->conn_config); } static int core_create_req(request_rec *r) { /* Alloc the config struct and the array of request notes in * a single block for efficiency */ core_request_config *req_cfg; req_cfg = apr_pcalloc(r->pool, sizeof(core_request_config) + sizeof(void *) * num_request_notes); req_cfg->notes = (void **)((char *)req_cfg + sizeof(core_request_config)); /* ### temporarily enable script delivery as the default */ req_cfg->deliver_script = 1; if (r->main) { core_request_config *main_req_cfg = (core_request_config *) ap_get_core_module_config(r->main->request_config); req_cfg->bb = main_req_cfg->bb; } else { req_cfg->bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); } ap_set_core_module_config(r->request_config, req_cfg); return OK; } static int core_create_proxy_req(request_rec *r, request_rec *pr) { return core_create_req(pr); } static conn_rec *core_create_conn(apr_pool_t *ptrans, server_rec *server, apr_socket_t *csd, long id, void *sbh, apr_bucket_alloc_t *alloc) { apr_status_t rv; conn_rec *c = (conn_rec *) apr_pcalloc(ptrans, sizeof(conn_rec)); c->sbh = sbh; ap_update_child_status(c->sbh, SERVER_BUSY_READ, NULL); /* Got a connection structure, so initialize what fields we can * (the rest are zeroed out by pcalloc). */ c->conn_config = ap_create_conn_config(ptrans); c->notes = apr_table_make(ptrans, 5); c->pool = ptrans; if ((rv = apr_socket_addr_get(&c->local_addr, APR_LOCAL, csd)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_INFO, rv, server, APLOGNO(00137) "apr_socket_addr_get(APR_LOCAL)"); apr_socket_close(csd); return NULL; } apr_sockaddr_ip_get(&c->local_ip, c->local_addr); if ((rv = apr_socket_addr_get(&c->client_addr, APR_REMOTE, csd)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_INFO, rv, server, APLOGNO(00138) "apr_socket_addr_get(APR_REMOTE)"); apr_socket_close(csd); return NULL; } apr_sockaddr_ip_get(&c->client_ip, c->client_addr); c->base_server = server; c->id = id; c->bucket_alloc = alloc; c->clogging_input_filters = 0; return c; } static int core_pre_connection(conn_rec *c, void *csd) { core_net_rec *net = apr_palloc(c->pool, sizeof(*net)); apr_status_t rv; /* The Nagle algorithm says that we should delay sending partial * packets in hopes of getting more data. We don't want to do * this; we are not telnet. There are bad interactions between * persistent connections and Nagle's algorithm that have very severe * performance penalties. (Failing to disable Nagle is not much of a * problem with simple HTTP.) */ rv = apr_socket_opt_set(csd, APR_TCP_NODELAY, 1); if (rv != APR_SUCCESS && rv != APR_ENOTIMPL) { /* expected cause is that the client disconnected already, * hence the debug level */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, rv, c, APLOGNO(00139) "apr_socket_opt_set(APR_TCP_NODELAY)"); } /* The core filter requires the timeout mode to be set, which * incidentally sets the socket to be nonblocking. If this * is not initialized correctly, Linux - for example - will * be initially blocking, while Solaris will be non blocking * and any initial read will fail. */ rv = apr_socket_timeout_set(csd, c->base_server->timeout); if (rv != APR_SUCCESS) { /* expected cause is that the client disconnected already */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, rv, c, APLOGNO(00140) "apr_socket_timeout_set"); } net->c = c; net->in_ctx = NULL; net->out_ctx = NULL; net->client_socket = csd; ap_set_core_module_config(net->c->conn_config, csd); ap_add_input_filter_handle(ap_core_input_filter_handle, net, NULL, net->c); ap_add_output_filter_handle(ap_core_output_filter_handle, net, NULL, net->c); return DONE; } AP_DECLARE(int) ap_state_query(int query) { switch (query) { case AP_SQ_MAIN_STATE: return ap_main_state; case AP_SQ_RUN_MODE: return ap_run_mode; case AP_SQ_CONFIG_GEN: return ap_config_generation; default: return AP_SQ_NOT_SUPPORTED; } } static apr_random_t *rng = NULL; #if APR_HAS_THREADS static apr_thread_mutex_t *rng_mutex = NULL; #endif static void core_child_init(apr_pool_t *pchild, server_rec *s) { apr_proc_t proc; #if APR_HAS_THREADS int threaded_mpm; if (ap_mpm_query(AP_MPMQ_IS_THREADED, &threaded_mpm) == APR_SUCCESS && threaded_mpm) { apr_thread_mutex_create(&rng_mutex, APR_THREAD_MUTEX_DEFAULT, pchild); } #endif /* The MPMs use plain fork() and not apr_proc_fork(), so we have to call * apr_random_after_fork() manually in the child */ proc.pid = getpid(); apr_random_after_fork(&proc); } static void core_optional_fn_retrieve(void) { ap_init_scoreboard(NULL); } AP_CORE_DECLARE(void) ap_random_parent_after_fork(void) { /* * To ensure that the RNG state in the parent changes after the fork, we * pull some data from the RNG and discard it. This ensures that the RNG * states in the children are different even after the pid wraps around. * As we only use apr_random for insecure random bytes, pulling 2 bytes * should be enough. * XXX: APR should probably have some dedicated API to do this, but it * XXX: currently doesn't. */ apr_uint16_t data; apr_random_insecure_bytes(rng, &data, sizeof(data)); } AP_CORE_DECLARE(void) ap_init_rng(apr_pool_t *p) { unsigned char seed[8]; apr_status_t rv; rng = apr_random_standard_new(p); do { rv = apr_generate_random_bytes(seed, sizeof(seed)); if (rv != APR_SUCCESS) goto error; apr_random_add_entropy(rng, seed, sizeof(seed)); rv = apr_random_insecure_ready(rng); } while (rv == APR_ENOTENOUGHENTROPY); if (rv == APR_SUCCESS) return; error: ap_log_error(APLOG_MARK, APLOG_CRIT, rv, NULL, APLOGNO(00141) "Could not initialize random number generator"); exit(1); } AP_DECLARE(void) ap_random_insecure_bytes(void *buf, apr_size_t size) { #if APR_HAS_THREADS if (rng_mutex) apr_thread_mutex_lock(rng_mutex); #endif /* apr_random_insecure_bytes can only fail with APR_ENOTENOUGHENTROPY, * and we have ruled that out during initialization. Therefore we don't * need to check the return code. */ apr_random_insecure_bytes(rng, buf, size); #if APR_HAS_THREADS if (rng_mutex) apr_thread_mutex_unlock(rng_mutex); #endif } /* * Finding a random number in a range. * n' = a + n(b-a+1)/(M+1) * where: * n' = random number in range * a = low end of range * b = high end of range * n = random number of 0..M * M = maxint * Algorithm 'borrowed' from PHP's rand() function. */ #define RAND_RANGE(__n, __min, __max, __tmax) \ (__n) = (__min) + (long) ((double) ((__max) - (__min) + 1.0) * ((__n) / ((__tmax) + 1.0))) AP_DECLARE(apr_uint32_t) ap_random_pick(apr_uint32_t min, apr_uint32_t max) { apr_uint32_t number; #if (!__GNUC__ || __GNUC__ >= 5 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 8) || \ !__sparc__ || APR_SIZEOF_VOIDP != 8) /* This triggers a gcc bug on sparc/64bit with gcc < 4.8, PR 52900 */ if (max < 16384) { apr_uint16_t num16; ap_random_insecure_bytes(&num16, sizeof(num16)); RAND_RANGE(num16, min, max, APR_UINT16_MAX); number = num16; } else #endif { ap_random_insecure_bytes(&number, sizeof(number)); RAND_RANGE(number, min, max, APR_UINT32_MAX); } return number; } static apr_status_t core_insert_network_bucket(conn_rec *c, apr_bucket_brigade *bb, apr_socket_t *socket) { apr_bucket *e = apr_bucket_socket_create(socket, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); return APR_SUCCESS; } static apr_status_t core_dirwalk_stat(apr_finfo_t *finfo, request_rec *r, apr_int32_t wanted) { return apr_stat(finfo, r->filename, wanted, r->pool); } static void core_dump_config(apr_pool_t *p, server_rec *s) { core_server_config *sconf = ap_get_core_module_config(s->module_config); apr_file_t *out = NULL; const char *tmp; const char **defines; int i; if (!ap_exists_config_define("DUMP_RUN_CFG")) return; apr_file_open_stdout(&out, p); apr_file_printf(out, "ServerRoot: \"%s\"\n", ap_server_root); tmp = ap_server_root_relative(p, sconf->ap_document_root); apr_file_printf(out, "Main DocumentRoot: \"%s\"\n", tmp); if (s->error_fname[0] != '|' && strcmp(s->error_fname, "syslog") != 0 && strncmp(s->error_fname, "syslog:", 7) != 0) tmp = ap_server_root_relative(p, s->error_fname); else tmp = s->error_fname; apr_file_printf(out, "Main ErrorLog: \"%s\"\n", tmp); if (ap_scoreboard_fname) { tmp = ap_server_root_relative(p, ap_scoreboard_fname); apr_file_printf(out, "ScoreBoardFile: \"%s\"\n", tmp); } ap_dump_mutexes(p, s, out); ap_mpm_dump_pidfile(p, out); defines = (const char **)ap_server_config_defines->elts; for (i = 0; i < ap_server_config_defines->nelts; i++) { const char *name = defines[i]; const char *val = NULL; if (server_config_defined_vars) val = apr_table_get(server_config_defined_vars, name); if (val) apr_file_printf(out, "Define: %s=%s\n", name, val); else apr_file_printf(out, "Define: %s\n", name); } } static int core_upgrade_handler(request_rec *r) { conn_rec *c = r->connection; const char *upgrade; if (c->master) { /* Not possible to perform an HTTP/1.1 upgrade from a slave * connection. */ return DECLINED; } upgrade = apr_table_get(r->headers_in, "Upgrade"); if (upgrade && *upgrade) { const char *conn = apr_table_get(r->headers_in, "Connection"); if (ap_find_token(r->pool, conn, "upgrade")) { apr_array_header_t *offers = NULL; const char *err; err = ap_parse_token_list_strict(r->pool, upgrade, &offers, 0); if (err) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02910) "parsing Upgrade header: %s", err); return DECLINED; } if (offers && offers->nelts > 0) { const char *protocol = ap_select_protocol(c, r, NULL, offers); if (protocol && strcmp(protocol, ap_get_protocol(c))) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02909) "Upgrade selects '%s'", protocol); /* Let the client know what we are upgrading to. */ apr_table_clear(r->headers_out); apr_table_setn(r->headers_out, "Upgrade", protocol); apr_table_setn(r->headers_out, "Connection", "Upgrade"); r->status = HTTP_SWITCHING_PROTOCOLS; r->status_line = ap_get_status_line(r->status); ap_send_interim_response(r, 1); ap_switch_protocol(c, r, r->server, protocol); /* make sure httpd closes the connection after this */ c->keepalive = AP_CONN_CLOSE; return DONE; } } } } else if (!c->keepalives) { /* first request on a master connection, if we have protocols other * than the current one enabled here, announce them to the * client. If the client is already talking a protocol with requests * on slave connections, leave it be. */ const apr_array_header_t *upgrades; ap_get_protocol_upgrades(c, r, NULL, 0, &upgrades); if (upgrades && upgrades->nelts > 0) { char *protocols = apr_array_pstrcat(r->pool, upgrades, ','); apr_table_setn(r->headers_out, "Upgrade", protocols); apr_table_setn(r->headers_out, "Connection", "Upgrade"); } } return DECLINED; } static int core_upgrade_storage(request_rec *r) { if ((r->method_number == M_OPTIONS) && r->uri && (r->uri[0] == '*') && (r->uri[1] == '\0')) { return core_upgrade_handler(r); } return DECLINED; } static void register_hooks(apr_pool_t *p) { errorlog_hash = apr_hash_make(p); ap_register_log_hooks(p); ap_register_config_hooks(p); ap_expr_init(p); /* create_connection and pre_connection should always be hooked * APR_HOOK_REALLY_LAST by core to give other modules the opportunity * to install alternate network transports and stop other functions * from being run. */ ap_hook_create_connection(core_create_conn, NULL, NULL, APR_HOOK_REALLY_LAST); ap_hook_pre_connection(core_pre_connection, NULL, NULL, APR_HOOK_REALLY_LAST); ap_hook_pre_config(core_pre_config, NULL, NULL, APR_HOOK_REALLY_FIRST); ap_hook_post_config(core_post_config,NULL,NULL,APR_HOOK_REALLY_FIRST); ap_hook_check_config(core_check_config,NULL,NULL,APR_HOOK_FIRST); ap_hook_test_config(core_dump_config,NULL,NULL,APR_HOOK_FIRST); ap_hook_translate_name(ap_core_translate,NULL,NULL,APR_HOOK_REALLY_LAST); ap_hook_map_to_storage(core_upgrade_storage,NULL,NULL,APR_HOOK_REALLY_FIRST); ap_hook_map_to_storage(core_map_to_storage,NULL,NULL,APR_HOOK_REALLY_LAST); ap_hook_open_logs(ap_open_logs,NULL,NULL,APR_HOOK_REALLY_FIRST); ap_hook_child_init(core_child_init,NULL,NULL,APR_HOOK_REALLY_FIRST); ap_hook_child_init(ap_logs_child_init,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_handler(core_upgrade_handler,NULL,NULL,APR_HOOK_REALLY_FIRST); ap_hook_handler(default_handler,NULL,NULL,APR_HOOK_REALLY_LAST); /* FIXME: I suspect we can eliminate the need for these do_nothings - Ben */ ap_hook_type_checker(do_nothing,NULL,NULL,APR_HOOK_REALLY_LAST); ap_hook_fixups(core_override_type,NULL,NULL,APR_HOOK_REALLY_FIRST); ap_hook_create_request(core_create_req, NULL, NULL, APR_HOOK_MIDDLE); APR_OPTIONAL_HOOK(proxy, create_req, core_create_proxy_req, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_pre_mpm(ap_create_scoreboard, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_child_status(ap_core_child_status, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_insert_network_bucket(core_insert_network_bucket, NULL, NULL, APR_HOOK_REALLY_LAST); ap_hook_dirwalk_stat(core_dirwalk_stat, NULL, NULL, APR_HOOK_REALLY_LAST); ap_hook_open_htaccess(ap_open_htaccess, NULL, NULL, APR_HOOK_REALLY_LAST); ap_hook_optional_fn_retrieve(core_optional_fn_retrieve, NULL, NULL, APR_HOOK_MIDDLE); /* register the core's insert_filter hook and register core-provided * filters */ ap_hook_insert_filter(core_insert_filter, NULL, NULL, APR_HOOK_MIDDLE); ap_core_input_filter_handle = ap_register_input_filter("CORE_IN", ap_core_input_filter, NULL, AP_FTYPE_NETWORK); ap_content_length_filter_handle = ap_register_output_filter("CONTENT_LENGTH", ap_content_length_filter, NULL, AP_FTYPE_PROTOCOL); ap_core_output_filter_handle = ap_register_output_filter("CORE", ap_core_output_filter, NULL, AP_FTYPE_NETWORK); ap_subreq_core_filter_handle = ap_register_output_filter("SUBREQ_CORE", ap_sub_req_output_filter, NULL, AP_FTYPE_CONTENT_SET); ap_old_write_func = ap_register_output_filter("OLD_WRITE", ap_old_write_filter, NULL, AP_FTYPE_RESOURCE - 10); } AP_DECLARE_MODULE(core) = { MPM20_MODULE_STUFF, AP_PLATFORM_REWRITE_ARGS_HOOK, /* hook to run before apache parses args */ create_core_dir_config, /* create per-directory config structure */ merge_core_dir_configs, /* merge per-directory config structures */ create_core_server_config, /* create per-server config structure */ merge_core_server_configs, /* merge per-server config structures */ core_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/server/core_filters.c0000644000000000000500000010152713335040064015372 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file core_filters.c * @brief Core input/output network filters. */ #include "apr.h" #include "apr_strings.h" #include "apr_lib.h" #include "apr_fnmatch.h" #include "apr_hash.h" #include "apr_thread_proc.h" /* for RLIMIT stuff */ #define APR_WANT_IOVEC #define APR_WANT_STRFUNC #define APR_WANT_MEMFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_protocol.h" /* For index_of_response(). Grump. */ #include "http_request.h" #include "http_vhost.h" #include "http_main.h" /* For the default_handler below... */ #include "http_log.h" #include "util_md5.h" #include "http_connection.h" #include "apr_buckets.h" #include "util_filter.h" #include "util_ebcdic.h" #include "mpm_common.h" #include "scoreboard.h" #include "mod_core.h" #include "ap_listen.h" #include "mod_so.h" /* for ap_find_loaded_module_symbol */ #define AP_MIN_SENDFILE_BYTES (256) /** * Remove all zero length buckets from the brigade. */ #define BRIGADE_NORMALIZE(b) \ do { \ apr_bucket *e = APR_BRIGADE_FIRST(b); \ do { \ if (e->length == 0 && !APR_BUCKET_IS_METADATA(e)) { \ apr_bucket *d; \ d = APR_BUCKET_NEXT(e); \ apr_bucket_delete(e); \ e = d; \ } \ else { \ e = APR_BUCKET_NEXT(e); \ } \ } while (!APR_BRIGADE_EMPTY(b) && (e != APR_BRIGADE_SENTINEL(b))); \ } while (0) /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX struct core_output_filter_ctx { apr_bucket_brigade *buffered_bb; apr_bucket_brigade *tmp_flush_bb; apr_pool_t *deferred_write_pool; apr_size_t bytes_written; }; struct core_filter_ctx { apr_bucket_brigade *b; apr_bucket_brigade *tmpbb; }; apr_status_t ap_core_input_filter(ap_filter_t *f, apr_bucket_brigade *b, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { apr_status_t rv; core_net_rec *net = f->ctx; core_ctx_t *ctx = net->in_ctx; const char *str; apr_size_t len; if (mode == AP_MODE_INIT) { /* * this mode is for filters that might need to 'initialize' * a connection before reading request data from a client. * NNTP over SSL for example needs to handshake before the * server sends the welcome message. * such filters would have changed the mode before this point * is reached. however, protocol modules such as NNTP should * not need to know anything about SSL. given the example, if * SSL is not in the filter chain, AP_MODE_INIT is a noop. */ return APR_SUCCESS; } if (!ctx) { net->in_ctx = ctx = apr_palloc(f->c->pool, sizeof(*ctx)); ctx->b = apr_brigade_create(f->c->pool, f->c->bucket_alloc); ctx->tmpbb = apr_brigade_create(f->c->pool, f->c->bucket_alloc); /* seed the brigade with the client socket. */ rv = ap_run_insert_network_bucket(f->c, ctx->b, net->client_socket); if (rv != APR_SUCCESS) return rv; } else if (APR_BRIGADE_EMPTY(ctx->b)) { return APR_EOF; } /* ### This is bad. */ BRIGADE_NORMALIZE(ctx->b); /* check for empty brigade again *AFTER* BRIGADE_NORMALIZE() * If we have lost our socket bucket (see above), we are EOF. * * Ideally, this should be returning SUCCESS with EOS bucket, but * some higher-up APIs (spec. read_request_line via ap_rgetline) * want an error code. */ if (APR_BRIGADE_EMPTY(ctx->b)) { return APR_EOF; } if (mode == AP_MODE_GETLINE) { /* we are reading a single LF line, e.g. the HTTP headers */ rv = apr_brigade_split_line(b, ctx->b, block, HUGE_STRING_LEN); /* We should treat EAGAIN here the same as we do for EOF (brigade is * empty). We do this by returning whatever we have read. This may * or may not be bogus, but is consistent (for now) with EOF logic. */ if (APR_STATUS_IS_EAGAIN(rv) && block == APR_NONBLOCK_READ) { rv = APR_SUCCESS; } return rv; } /* ### AP_MODE_PEEK is a horrific name for this mode because we also * eat any CRLFs that we see. That's not the obvious intention of * this mode. Determine whether anyone actually uses this or not. */ if (mode == AP_MODE_EATCRLF) { apr_bucket *e; const char *c; /* The purpose of this loop is to ignore any CRLF (or LF) at the end * of a request. Many browsers send extra lines at the end of POST * requests. We use the PEEK method to determine if there is more * data on the socket, so that we know if we should delay sending the * end of one request until we have served the second request in a * pipelined situation. We don't want to actually delay sending a * response if the server finds a CRLF (or LF), becuause that doesn't * mean that there is another request, just a blank line. */ while (1) { if (APR_BRIGADE_EMPTY(ctx->b)) return APR_EOF; e = APR_BRIGADE_FIRST(ctx->b); rv = apr_bucket_read(e, &str, &len, APR_NONBLOCK_READ); if (rv != APR_SUCCESS) return rv; c = str; while (c < str + len) { if (*c == APR_ASCII_LF) c++; else if (*c == APR_ASCII_CR && *(c + 1) == APR_ASCII_LF) c += 2; else return APR_SUCCESS; } /* If we reach here, we were a bucket just full of CRLFs, so * just toss the bucket. */ /* FIXME: Is this the right thing to do in the core? */ apr_bucket_delete(e); } return APR_SUCCESS; } /* If mode is EXHAUSTIVE, we want to just read everything until the end * of the brigade, which in this case means the end of the socket. * To do this, we attach the brigade that has currently been setaside to * the brigade that was passed down, and send that brigade back. * * NOTE: This is VERY dangerous to use, and should only be done with * extreme caution. FWLIW, this would be needed by an MPM like Perchild; * such an MPM can easily request the socket and all data that has been * read, which means that it can pass it to the correct child process. */ if (mode == AP_MODE_EXHAUSTIVE) { apr_bucket *e; /* Tack on any buckets that were set aside. */ APR_BRIGADE_CONCAT(b, ctx->b); /* Since we've just added all potential buckets (which will most * likely simply be the socket bucket) we know this is the end, * so tack on an EOS too. */ /* We have read until the brigade was empty, so we know that we * must be EOS. */ e = apr_bucket_eos_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(b, e); return APR_SUCCESS; } /* read up to the amount they specified. */ if (mode == AP_MODE_READBYTES || mode == AP_MODE_SPECULATIVE) { apr_bucket *e; AP_DEBUG_ASSERT(readbytes > 0); e = APR_BRIGADE_FIRST(ctx->b); rv = apr_bucket_read(e, &str, &len, block); if (APR_STATUS_IS_EAGAIN(rv) && block == APR_NONBLOCK_READ) { /* getting EAGAIN for a blocking read is an error; for a * non-blocking read, return an empty brigade. */ return APR_SUCCESS; } else if (rv != APR_SUCCESS) { return rv; } else if (block == APR_BLOCK_READ && len == 0) { /* We wanted to read some bytes in blocking mode. We read * 0 bytes. Hence, we now assume we are EOS. * * When we are in normal mode, return an EOS bucket to the * caller. * When we are in speculative mode, leave ctx->b empty, so * that the next call returns an EOS bucket. */ apr_bucket_delete(e); if (mode == AP_MODE_READBYTES) { e = apr_bucket_eos_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(b, e); } return APR_SUCCESS; } /* Have we read as much data as we wanted (be greedy)? */ if (len < readbytes) { apr_size_t bucket_len; rv = APR_SUCCESS; /* We already registered the data in e in len */ e = APR_BUCKET_NEXT(e); while ((len < readbytes) && (rv == APR_SUCCESS) && (e != APR_BRIGADE_SENTINEL(ctx->b))) { /* Check for the availability of buckets with known length */ if (e->length != -1) { len += e->length; e = APR_BUCKET_NEXT(e); } else { /* * Read from bucket, but non blocking. If there isn't any * more data, well than this is fine as well, we will * not wait for more since we already got some and we are * only checking if there isn't more. */ rv = apr_bucket_read(e, &str, &bucket_len, APR_NONBLOCK_READ); if (rv == APR_SUCCESS) { len += bucket_len; e = APR_BUCKET_NEXT(e); } } } } /* We can only return at most what we read. */ if (len < readbytes) { readbytes = len; } rv = apr_brigade_partition(ctx->b, readbytes, &e); if (rv != APR_SUCCESS) { return rv; } /* Must do move before CONCAT */ ctx->tmpbb = apr_brigade_split_ex(ctx->b, e, ctx->tmpbb); if (mode == AP_MODE_READBYTES) { APR_BRIGADE_CONCAT(b, ctx->b); } else if (mode == AP_MODE_SPECULATIVE) { apr_bucket *copy_bucket; for (e = APR_BRIGADE_FIRST(ctx->b); e != APR_BRIGADE_SENTINEL(ctx->b); e = APR_BUCKET_NEXT(e)) { rv = apr_bucket_copy(e, ©_bucket); if (rv != APR_SUCCESS) { return rv; } APR_BRIGADE_INSERT_TAIL(b, copy_bucket); } } /* Take what was originally there and place it back on ctx->b */ APR_BRIGADE_CONCAT(ctx->b, ctx->tmpbb); } return APR_SUCCESS; } static void setaside_remaining_output(ap_filter_t *f, core_output_filter_ctx_t *ctx, apr_bucket_brigade *bb, conn_rec *c); static apr_status_t send_brigade_nonblocking(apr_socket_t *s, apr_bucket_brigade *bb, apr_size_t *bytes_written, conn_rec *c); static void remove_empty_buckets(apr_bucket_brigade *bb); static apr_status_t send_brigade_blocking(apr_socket_t *s, apr_bucket_brigade *bb, apr_size_t *bytes_written, conn_rec *c); static apr_status_t writev_nonblocking(apr_socket_t *s, struct iovec *vec, apr_size_t nvec, apr_bucket_brigade *bb, apr_size_t *cumulative_bytes_written, conn_rec *c); #if APR_HAS_SENDFILE static apr_status_t sendfile_nonblocking(apr_socket_t *s, apr_bucket *bucket, apr_size_t *cumulative_bytes_written, conn_rec *c); #endif /* XXX: Should these be configurable parameters? */ #define THRESHOLD_MIN_WRITE 4096 #define THRESHOLD_MAX_BUFFER 65536 #define MAX_REQUESTS_IN_PIPELINE 5 /* Optional function coming from mod_logio, used for logging of output * traffic */ extern APR_OPTIONAL_FN_TYPE(ap_logio_add_bytes_out) *ap__logio_add_bytes_out; apr_status_t ap_core_output_filter(ap_filter_t *f, apr_bucket_brigade *new_bb) { conn_rec *c = f->c; core_net_rec *net = f->ctx; core_output_filter_ctx_t *ctx = net->out_ctx; apr_bucket_brigade *bb = NULL; apr_bucket *bucket, *next, *flush_upto = NULL; apr_size_t bytes_in_brigade, non_file_bytes_in_brigade; int eor_buckets_in_brigade, morphing_bucket_in_brigade; apr_status_t rv; int loglevel = ap_get_conn_module_loglevel(c, APLOG_MODULE_INDEX); /* Fail quickly if the connection has already been aborted. */ if (c->aborted) { if (new_bb != NULL) { apr_brigade_cleanup(new_bb); } return APR_ECONNABORTED; } if (ctx == NULL) { ctx = apr_pcalloc(c->pool, sizeof(*ctx)); net->out_ctx = (core_output_filter_ctx_t *)ctx; /* * Need to create tmp brigade with correct lifetime. Passing * NULL to apr_brigade_split_ex would result in a brigade * allocated from bb->pool which might be wrong. */ ctx->tmp_flush_bb = apr_brigade_create(c->pool, c->bucket_alloc); /* same for buffered_bb and ap_save_brigade */ ctx->buffered_bb = apr_brigade_create(c->pool, c->bucket_alloc); } if (new_bb != NULL) bb = new_bb; if ((ctx->buffered_bb != NULL) && !APR_BRIGADE_EMPTY(ctx->buffered_bb)) { if (new_bb != NULL) { APR_BRIGADE_PREPEND(bb, ctx->buffered_bb); } else { bb = ctx->buffered_bb; } c->data_in_output_filters = 0; } else if (new_bb == NULL) { return APR_SUCCESS; } /* Scan through the brigade and decide whether to attempt a write, * and how much to write, based on the following rules: * * 1) The new_bb is null: Do a nonblocking write of as much as * possible: do a nonblocking write of as much data as possible, * then save the rest in ctx->buffered_bb. (If new_bb == NULL, * it probably means that the MPM is doing asynchronous write * completion and has just determined that this connection * is writable.) * * 2) Determine if and up to which bucket we need to do a blocking * write: * * a) The brigade contains a flush bucket: Do a blocking write * of everything up that point. * * b) The request is in CONN_STATE_HANDLER state, and the brigade * contains at least THRESHOLD_MAX_BUFFER bytes in non-file * buckets: Do blocking writes until the amount of data in the * buffer is less than THRESHOLD_MAX_BUFFER. (The point of this * rule is to provide flow control, in case a handler is * streaming out lots of data faster than the data can be * sent to the client.) * * c) The request is in CONN_STATE_HANDLER state, and the brigade * contains at least MAX_REQUESTS_IN_PIPELINE EOR buckets: * Do blocking writes until less than MAX_REQUESTS_IN_PIPELINE EOR * buckets are left. (The point of this rule is to prevent too many * FDs being kept open by pipelined requests, possibly allowing a * DoS). * * d) The brigade contains a morphing bucket: If there was no other * reason to do a blocking write yet, try reading the bucket. If its * contents fit into memory before THRESHOLD_MAX_BUFFER is reached, * everything is fine. Otherwise we need to do a blocking write the * up to and including the morphing bucket, because ap_save_brigade() * would read the whole bucket into memory later on. * * 3) Actually do the blocking write up to the last bucket determined * by rules 2a-d. The point of doing only one flush is to make as * few calls to writev() as possible. * * 4) If the brigade contains at least THRESHOLD_MIN_WRITE * bytes: Do a nonblocking write of as much data as possible, * then save the rest in ctx->buffered_bb. */ if (new_bb == NULL) { rv = send_brigade_nonblocking(net->client_socket, bb, &(ctx->bytes_written), c); if (rv != APR_SUCCESS && !APR_STATUS_IS_EAGAIN(rv)) { /* The client has aborted the connection */ ap_log_cerror(APLOG_MARK, APLOG_TRACE1, rv, c, "core_output_filter: writing data to the network"); apr_brigade_cleanup(bb); c->aborted = 1; return rv; } setaside_remaining_output(f, ctx, bb, c); return APR_SUCCESS; } bytes_in_brigade = 0; non_file_bytes_in_brigade = 0; eor_buckets_in_brigade = 0; morphing_bucket_in_brigade = 0; for (bucket = APR_BRIGADE_FIRST(bb); bucket != APR_BRIGADE_SENTINEL(bb); bucket = next) { next = APR_BUCKET_NEXT(bucket); if (!APR_BUCKET_IS_METADATA(bucket)) { if (bucket->length == (apr_size_t)-1) { /* * A setaside of morphing buckets would read everything into * memory. Instead, we will flush everything up to and * including this bucket. */ morphing_bucket_in_brigade = 1; } else { bytes_in_brigade += bucket->length; if (!APR_BUCKET_IS_FILE(bucket)) non_file_bytes_in_brigade += bucket->length; } } else if (AP_BUCKET_IS_EOR(bucket)) { eor_buckets_in_brigade++; } if (APR_BUCKET_IS_FLUSH(bucket) || non_file_bytes_in_brigade >= THRESHOLD_MAX_BUFFER || morphing_bucket_in_brigade || eor_buckets_in_brigade > MAX_REQUESTS_IN_PIPELINE) { /* this segment of the brigade MUST be sent before returning. */ if (loglevel >= APLOG_TRACE6) { char *reason = APR_BUCKET_IS_FLUSH(bucket) ? "FLUSH bucket" : (non_file_bytes_in_brigade >= THRESHOLD_MAX_BUFFER) ? "THRESHOLD_MAX_BUFFER" : morphing_bucket_in_brigade ? "morphing bucket" : "MAX_REQUESTS_IN_PIPELINE"; ap_log_cerror(APLOG_MARK, APLOG_TRACE6, 0, c, "will flush because of %s", reason); ap_log_cerror(APLOG_MARK, APLOG_TRACE8, 0, c, "seen in brigade%s: bytes: %" APR_SIZE_T_FMT ", non-file bytes: %" APR_SIZE_T_FMT ", eor " "buckets: %d, morphing buckets: %d", flush_upto == NULL ? " so far" : " since last flush point", bytes_in_brigade, non_file_bytes_in_brigade, eor_buckets_in_brigade, morphing_bucket_in_brigade); } /* * Defer the actual blocking write to avoid doing many writes. */ flush_upto = next; bytes_in_brigade = 0; non_file_bytes_in_brigade = 0; eor_buckets_in_brigade = 0; morphing_bucket_in_brigade = 0; } } if (flush_upto != NULL) { ctx->tmp_flush_bb = apr_brigade_split_ex(bb, flush_upto, ctx->tmp_flush_bb); if (loglevel >= APLOG_TRACE8) { ap_log_cerror(APLOG_MARK, APLOG_TRACE8, 0, c, "flushing now"); } rv = send_brigade_blocking(net->client_socket, bb, &(ctx->bytes_written), c); if (rv != APR_SUCCESS) { /* The client has aborted the connection */ ap_log_cerror(APLOG_MARK, APLOG_TRACE1, rv, c, "core_output_filter: writing data to the network"); apr_brigade_cleanup(bb); c->aborted = 1; return rv; } if (loglevel >= APLOG_TRACE8) { ap_log_cerror(APLOG_MARK, APLOG_TRACE8, 0, c, "total bytes written: %" APR_SIZE_T_FMT, ctx->bytes_written); } APR_BRIGADE_CONCAT(bb, ctx->tmp_flush_bb); } if (loglevel >= APLOG_TRACE8) { ap_log_cerror(APLOG_MARK, APLOG_TRACE8, 0, c, "brigade contains: bytes: %" APR_SIZE_T_FMT ", non-file bytes: %" APR_SIZE_T_FMT ", eor buckets: %d, morphing buckets: %d", bytes_in_brigade, non_file_bytes_in_brigade, eor_buckets_in_brigade, morphing_bucket_in_brigade); } if (bytes_in_brigade >= THRESHOLD_MIN_WRITE) { rv = send_brigade_nonblocking(net->client_socket, bb, &(ctx->bytes_written), c); if ((rv != APR_SUCCESS) && (!APR_STATUS_IS_EAGAIN(rv))) { /* The client has aborted the connection */ ap_log_cerror(APLOG_MARK, APLOG_TRACE1, rv, c, "core_output_filter: writing data to the network"); apr_brigade_cleanup(bb); c->aborted = 1; return rv; } if (loglevel >= APLOG_TRACE8) { ap_log_cerror(APLOG_MARK, APLOG_TRACE8, 0, c, "tried nonblocking write, total bytes " "written: %" APR_SIZE_T_FMT, ctx->bytes_written); } } setaside_remaining_output(f, ctx, bb, c); return APR_SUCCESS; } /* * This function assumes that either ctx->buffered_bb == NULL, or * ctx->buffered_bb is empty, or ctx->buffered_bb == bb */ static void setaside_remaining_output(ap_filter_t *f, core_output_filter_ctx_t *ctx, apr_bucket_brigade *bb, conn_rec *c) { if (bb == NULL) { return; } remove_empty_buckets(bb); if (!APR_BRIGADE_EMPTY(bb)) { c->data_in_output_filters = 1; if (bb != ctx->buffered_bb) { if (!ctx->deferred_write_pool) { apr_pool_create(&ctx->deferred_write_pool, c->pool); apr_pool_tag(ctx->deferred_write_pool, "deferred_write"); } ap_save_brigade(f, &(ctx->buffered_bb), &bb, ctx->deferred_write_pool); } } else if (ctx->deferred_write_pool) { /* * There are no more requests in the pipeline. We can just clear the * pool. */ apr_pool_clear(ctx->deferred_write_pool); } } #ifndef APR_MAX_IOVEC_SIZE #define MAX_IOVEC_TO_WRITE 16 #else #if APR_MAX_IOVEC_SIZE > 16 #define MAX_IOVEC_TO_WRITE 16 #else #define MAX_IOVEC_TO_WRITE APR_MAX_IOVEC_SIZE #endif #endif static apr_status_t send_brigade_nonblocking(apr_socket_t *s, apr_bucket_brigade *bb, apr_size_t *bytes_written, conn_rec *c) { apr_bucket *bucket, *next; apr_status_t rv; struct iovec vec[MAX_IOVEC_TO_WRITE]; apr_size_t nvec = 0; remove_empty_buckets(bb); for (bucket = APR_BRIGADE_FIRST(bb); bucket != APR_BRIGADE_SENTINEL(bb); bucket = next) { next = APR_BUCKET_NEXT(bucket); #if APR_HAS_SENDFILE if (APR_BUCKET_IS_FILE(bucket)) { apr_bucket_file *file_bucket = (apr_bucket_file *)(bucket->data); apr_file_t *fd = file_bucket->fd; /* Use sendfile to send this file unless: * - the platform doesn't support sendfile, * - the file is too small for sendfile to be useful, or * - sendfile is disabled in the httpd config via "EnableSendfile off" */ if ((apr_file_flags_get(fd) & APR_SENDFILE_ENABLED) && (bucket->length >= AP_MIN_SENDFILE_BYTES)) { if (nvec > 0) { (void)apr_socket_opt_set(s, APR_TCP_NOPUSH, 1); rv = writev_nonblocking(s, vec, nvec, bb, bytes_written, c); if (rv != APR_SUCCESS) { (void)apr_socket_opt_set(s, APR_TCP_NOPUSH, 0); return rv; } } rv = sendfile_nonblocking(s, bucket, bytes_written, c); if (nvec > 0) { (void)apr_socket_opt_set(s, APR_TCP_NOPUSH, 0); nvec = 0; } if (rv != APR_SUCCESS) { return rv; } break; } } #endif /* APR_HAS_SENDFILE */ /* didn't sendfile */ if (!APR_BUCKET_IS_METADATA(bucket)) { const char *data; apr_size_t length; /* Non-blocking read first, in case this is a morphing * bucket type. */ rv = apr_bucket_read(bucket, &data, &length, APR_NONBLOCK_READ); if (APR_STATUS_IS_EAGAIN(rv)) { /* Read would block; flush any pending data and retry. */ if (nvec) { rv = writev_nonblocking(s, vec, nvec, bb, bytes_written, c); if (rv) { return rv; } nvec = 0; } rv = apr_bucket_read(bucket, &data, &length, APR_BLOCK_READ); } if (rv != APR_SUCCESS) { return rv; } /* reading may have split the bucket, so recompute next: */ next = APR_BUCKET_NEXT(bucket); vec[nvec].iov_base = (char *)data; vec[nvec].iov_len = length; nvec++; if (nvec == MAX_IOVEC_TO_WRITE) { rv = writev_nonblocking(s, vec, nvec, bb, bytes_written, c); nvec = 0; if (rv != APR_SUCCESS) { return rv; } break; } } } if (nvec > 0) { rv = writev_nonblocking(s, vec, nvec, bb, bytes_written, c); if (rv != APR_SUCCESS) { return rv; } } remove_empty_buckets(bb); return APR_SUCCESS; } static void remove_empty_buckets(apr_bucket_brigade *bb) { apr_bucket *bucket; while (((bucket = APR_BRIGADE_FIRST(bb)) != APR_BRIGADE_SENTINEL(bb)) && (APR_BUCKET_IS_METADATA(bucket) || (bucket->length == 0))) { apr_bucket_delete(bucket); } } static apr_status_t send_brigade_blocking(apr_socket_t *s, apr_bucket_brigade *bb, apr_size_t *bytes_written, conn_rec *c) { apr_status_t rv; rv = APR_SUCCESS; while (!APR_BRIGADE_EMPTY(bb)) { rv = send_brigade_nonblocking(s, bb, bytes_written, c); if (rv != APR_SUCCESS) { if (APR_STATUS_IS_EAGAIN(rv)) { /* Wait until we can send more data */ apr_int32_t nsds; apr_interval_time_t timeout; apr_pollfd_t pollset; pollset.p = c->pool; pollset.desc_type = APR_POLL_SOCKET; pollset.reqevents = APR_POLLOUT; pollset.desc.s = s; apr_socket_timeout_get(s, &timeout); do { rv = apr_poll(&pollset, 1, &nsds, timeout); } while (APR_STATUS_IS_EINTR(rv)); if (rv != APR_SUCCESS) { break; } } else { break; } } } return rv; } static apr_status_t writev_nonblocking(apr_socket_t *s, struct iovec *vec, apr_size_t nvec, apr_bucket_brigade *bb, apr_size_t *cumulative_bytes_written, conn_rec *c) { apr_status_t rv = APR_SUCCESS, arv; apr_size_t bytes_written = 0, bytes_to_write = 0; apr_size_t i, offset; apr_interval_time_t old_timeout; arv = apr_socket_timeout_get(s, &old_timeout); if (arv != APR_SUCCESS) { return arv; } arv = apr_socket_timeout_set(s, 0); if (arv != APR_SUCCESS) { return arv; } for (i = 0; i < nvec; i++) { bytes_to_write += vec[i].iov_len; } offset = 0; while (bytes_written < bytes_to_write) { apr_size_t n = 0; rv = apr_socket_sendv(s, vec + offset, nvec - offset, &n); if (n > 0) { bytes_written += n; for (i = offset; i < nvec; ) { apr_bucket *bucket = APR_BRIGADE_FIRST(bb); if (APR_BUCKET_IS_METADATA(bucket)) { apr_bucket_delete(bucket); } else if (n >= vec[i].iov_len) { apr_bucket_delete(bucket); offset++; n -= vec[i++].iov_len; } else { apr_bucket_split(bucket, n); apr_bucket_delete(bucket); vec[i].iov_len -= n; vec[i].iov_base = (char *) vec[i].iov_base + n; break; } } } if (rv != APR_SUCCESS) { break; } } if ((ap__logio_add_bytes_out != NULL) && (bytes_written > 0)) { ap__logio_add_bytes_out(c, bytes_written); } *cumulative_bytes_written += bytes_written; arv = apr_socket_timeout_set(s, old_timeout); if ((arv != APR_SUCCESS) && (rv == APR_SUCCESS)) { return arv; } else { return rv; } } #if APR_HAS_SENDFILE static apr_status_t sendfile_nonblocking(apr_socket_t *s, apr_bucket *bucket, apr_size_t *cumulative_bytes_written, conn_rec *c) { apr_status_t rv = APR_SUCCESS; apr_bucket_file *file_bucket; apr_file_t *fd; apr_size_t file_length; apr_off_t file_offset; apr_size_t bytes_written = 0; if (!APR_BUCKET_IS_FILE(bucket)) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, c->base_server, APLOGNO(00006) "core_filter: sendfile_nonblocking: " "this should never happen"); return APR_EGENERAL; } file_bucket = (apr_bucket_file *)(bucket->data); fd = file_bucket->fd; file_length = bucket->length; file_offset = bucket->start; if (bytes_written < file_length) { apr_size_t n = file_length - bytes_written; apr_status_t arv; apr_interval_time_t old_timeout; arv = apr_socket_timeout_get(s, &old_timeout); if (arv != APR_SUCCESS) { return arv; } arv = apr_socket_timeout_set(s, 0); if (arv != APR_SUCCESS) { return arv; } rv = apr_socket_sendfile(s, fd, NULL, &file_offset, &n, 0); if (rv == APR_SUCCESS) { bytes_written += n; file_offset += n; } arv = apr_socket_timeout_set(s, old_timeout); if ((arv != APR_SUCCESS) && (rv == APR_SUCCESS)) { rv = arv; } } if ((ap__logio_add_bytes_out != NULL) && (bytes_written > 0)) { ap__logio_add_bytes_out(c, bytes_written); } *cumulative_bytes_written += bytes_written; if ((bytes_written < file_length) && (bytes_written > 0)) { apr_bucket_split(bucket, bytes_written); apr_bucket_delete(bucket); } else if (bytes_written == file_length) { apr_bucket_delete(bucket); } return rv; } #endif httpd-2.4.41/server/util.c0000644000000000000500000031366613515407116013705 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * util.c: string utility things * * 3/21/93 Rob McCool * 1995-96 Many changes by the Apache Software Foundation * */ /* Debugging aid: * #define DEBUG to trace all cfg_open*()/cfg_closefile() calls * #define DEBUG_CFG_LINES to trace every line read from the config files */ #include "apr.h" #include "apr_strings.h" #include "apr_lib.h" #define APR_WANT_STDIO #define APR_WANT_STRFUNC #include "apr_want.h" #if APR_HAVE_UNISTD_H #include #endif #if APR_HAVE_PROCESS_H #include /* for getpid() on Win32 */ #endif #if APR_HAVE_NETDB_H #include /* for gethostbyname() */ #endif #include "ap_config.h" #include "apr_base64.h" #include "apr_fnmatch.h" #include "httpd.h" #include "http_main.h" #include "http_log.h" #include "http_protocol.h" #include "http_config.h" #include "http_core.h" #include "util_ebcdic.h" #include "util_varbuf.h" #ifdef HAVE_PWD_H #include #endif #ifdef HAVE_GRP_H #include #endif #ifdef HAVE_SYS_LOADAVG_H #include #endif #include "ap_mpm.h" /* A bunch of functions in util.c scan strings looking for certain characters. * To make that more efficient we encode a lookup table. The test_char_table * is generated automatically by gen_test_char.c. */ #include "test_char.h" /* we assume the folks using this ensure 0 <= c < 256... which means * you need a cast to (unsigned char) first, you can't just plug a * char in here and get it to work, because if char is signed then it * will first be sign extended. */ #define TEST_CHAR(c, f) (test_char_table[(unsigned char)(c)] & (f)) /* Win32/NetWare/OS2 need to check for both forward and back slashes * in ap_getparents() and ap_escape_url. */ #ifdef CASE_BLIND_FILESYSTEM #define IS_SLASH(s) ((s == '/') || (s == '\\')) #define SLASHES "/\\" #else #define IS_SLASH(s) (s == '/') #define SLASHES "/" #endif /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX /* maximum nesting level for config directories */ #ifndef AP_MAX_FNMATCH_DIR_DEPTH #define AP_MAX_FNMATCH_DIR_DEPTH (128) #endif /* * Examine a field value (such as a media-/content-type) string and return * it sans any parameters; e.g., strip off any ';charset=foo' and the like. */ AP_DECLARE(char *) ap_field_noparam(apr_pool_t *p, const char *intype) { const char *semi; if (intype == NULL) return NULL; semi = ap_strchr_c(intype, ';'); if (semi == NULL) { return apr_pstrdup(p, intype); } else { while ((semi > intype) && apr_isspace(semi[-1])) { semi--; } return apr_pstrmemdup(p, intype, semi - intype); } } AP_DECLARE(char *) ap_ht_time(apr_pool_t *p, apr_time_t t, const char *fmt, int gmt) { apr_size_t retcode; char ts[MAX_STRING_LEN]; char tf[MAX_STRING_LEN]; apr_time_exp_t xt; if (gmt) { const char *f; char *strp; apr_time_exp_gmt(&xt, t); /* Convert %Z to "GMT" and %z to "+0000"; * on hosts that do not have a time zone string in struct tm, * strftime must assume its argument is local time. */ for(strp = tf, f = fmt; strp < tf + sizeof(tf) - 6 && (*strp = *f) ; f++, strp++) { if (*f != '%') continue; switch (f[1]) { case '%': *++strp = *++f; break; case 'Z': *strp++ = 'G'; *strp++ = 'M'; *strp = 'T'; f++; break; case 'z': /* common extension */ *strp++ = '+'; *strp++ = '0'; *strp++ = '0'; *strp++ = '0'; *strp = '0'; f++; break; } } *strp = '\0'; fmt = tf; } else { apr_time_exp_lt(&xt, t); } /* check return code? */ apr_strftime(ts, &retcode, MAX_STRING_LEN, fmt, &xt); ts[MAX_STRING_LEN - 1] = '\0'; return apr_pstrdup(p, ts); } /* Roy owes Rob beer. */ /* Rob owes Roy dinner. */ /* These legacy comments would make a lot more sense if Roy hadn't * replaced the old later_than() routine with util_date.c. * * Well, okay, they still wouldn't make any sense. */ /* Match = 0, NoMatch = 1, Abort = -1 * Based loosely on sections of wildmat.c by Rich Salz * Hmmm... shouldn't this really go component by component? */ AP_DECLARE(int) ap_strcmp_match(const char *str, const char *expected) { int x, y; for (x = 0, y = 0; expected[y]; ++y, ++x) { if ((!str[x]) && (expected[y] != '*')) return -1; if (expected[y] == '*') { while (expected[++y] == '*'); if (!expected[y]) return 0; while (str[x]) { int ret; if ((ret = ap_strcmp_match(&str[x++], &expected[y])) != 1) return ret; } return -1; } else if ((expected[y] != '?') && (str[x] != expected[y])) return 1; } return (str[x] != '\0'); } AP_DECLARE(int) ap_strcasecmp_match(const char *str, const char *expected) { int x, y; for (x = 0, y = 0; expected[y]; ++y, ++x) { if (!str[x] && expected[y] != '*') return -1; if (expected[y] == '*') { while (expected[++y] == '*'); if (!expected[y]) return 0; while (str[x]) { int ret; if ((ret = ap_strcasecmp_match(&str[x++], &expected[y])) != 1) return ret; } return -1; } else if (expected[y] != '?' && apr_tolower(str[x]) != apr_tolower(expected[y])) return 1; } return (str[x] != '\0'); } /* We actually compare the canonical root to this root, (but we don't * waste time checking the case), since every use of this function in * httpd-2.1 tests if the path is 'proper', meaning we've already passed * it through apr_filepath_merge, or we haven't. */ AP_DECLARE(int) ap_os_is_path_absolute(apr_pool_t *p, const char *dir) { const char *newpath; const char *ourdir = dir; if (apr_filepath_root(&newpath, &dir, 0, p) != APR_SUCCESS || strncmp(newpath, ourdir, strlen(newpath)) != 0) { return 0; } return 1; } AP_DECLARE(int) ap_is_matchexp(const char *str) { int x; for (x = 0; str[x]; x++) if ((str[x] == '*') || (str[x] == '?')) return 1; return 0; } /* * Here's a pool-based interface to the POSIX-esque ap_regcomp(). * Note that we return ap_regex_t instead of being passed one. * The reason is that if you use an already-used ap_regex_t structure, * the memory that you've already allocated gets forgotten, and * regfree() doesn't clear it. So we don't allow it. */ static apr_status_t regex_cleanup(void *preg) { ap_regfree((ap_regex_t *) preg); return APR_SUCCESS; } AP_DECLARE(ap_regex_t *) ap_pregcomp(apr_pool_t *p, const char *pattern, int cflags) { ap_regex_t *preg = apr_palloc(p, sizeof *preg); int err = ap_regcomp(preg, pattern, cflags); if (err) { if (err == AP_REG_ESPACE) ap_abort_on_oom(); return NULL; } apr_pool_cleanup_register(p, (void *) preg, regex_cleanup, apr_pool_cleanup_null); return preg; } AP_DECLARE(void) ap_pregfree(apr_pool_t *p, ap_regex_t *reg) { ap_regfree(reg); apr_pool_cleanup_kill(p, (void *) reg, regex_cleanup); } /* * Similar to standard strstr() but we ignore case in this version. * Based on the strstr() implementation further below. */ AP_DECLARE(char *) ap_strcasestr(const char *s1, const char *s2) { char *p1, *p2; if (*s2 == '\0') { /* an empty s2 */ return((char *)s1); } while(1) { for ( ; (*s1 != '\0') && (apr_tolower(*s1) != apr_tolower(*s2)); s1++); if (*s1 == '\0') { return(NULL); } /* found first character of s2, see if the rest matches */ p1 = (char *)s1; p2 = (char *)s2; for (++p1, ++p2; apr_tolower(*p1) == apr_tolower(*p2); ++p1, ++p2) { if (*p1 == '\0') { /* both strings ended together */ return((char *)s1); } } if (*p2 == '\0') { /* second string ended, a match */ break; } /* didn't find a match here, try starting at next character in s1 */ s1++; } return((char *)s1); } /* * Returns an offsetted pointer in bigstring immediately after * prefix. Returns bigstring if bigstring doesn't start with * prefix or if prefix is longer than bigstring while still matching. * NOTE: pointer returned is relative to bigstring, so we * can use standard pointer comparisons in the calling function * (eg: test if ap_stripprefix(a,b) == a) */ AP_DECLARE(const char *) ap_stripprefix(const char *bigstring, const char *prefix) { const char *p1; if (*prefix == '\0') return bigstring; p1 = bigstring; while (*p1 && *prefix) { if (*p1++ != *prefix++) return bigstring; } if (*prefix == '\0') return p1; /* hit the end of bigstring! */ return bigstring; } /* This function substitutes for $0-$9, filling in regular expression * submatches. Pass it the same nmatch and pmatch arguments that you * passed ap_regexec(). pmatch should not be greater than the maximum number * of subexpressions - i.e. one more than the re_nsub member of ap_regex_t. * * nmatch must be <=AP_MAX_REG_MATCH (10). * * input should be the string with the $-expressions, source should be the * string that was matched against. * * It returns the substituted string, or NULL if a vbuf is used. * On errors, returns the orig string. * * Parts of this code are based on Henry Spencer's regsub(), from his * AT&T V8 regexp package. */ static apr_status_t regsub_core(apr_pool_t *p, char **result, struct ap_varbuf *vb, const char *input, const char *source, apr_size_t nmatch, ap_regmatch_t pmatch[], apr_size_t maxlen) { const char *src = input; char *dst; char c; apr_size_t no; apr_size_t len = 0; AP_DEBUG_ASSERT((result && p && !vb) || (vb && !p && !result)); if (!source || nmatch>AP_MAX_REG_MATCH) return APR_EINVAL; if (!nmatch) { len = strlen(src); if (maxlen > 0 && len >= maxlen) return APR_ENOMEM; if (!vb) { *result = apr_pstrmemdup(p, src, len); return APR_SUCCESS; } else { ap_varbuf_strmemcat(vb, src, len); return APR_SUCCESS; } } /* First pass, find the size */ while ((c = *src++) != '\0') { if (c == '$' && apr_isdigit(*src)) no = *src++ - '0'; else no = AP_MAX_REG_MATCH; if (no >= AP_MAX_REG_MATCH) { /* Ordinary character. */ if (c == '\\' && *src) src++; len++; } else if (no < nmatch && pmatch[no].rm_so < pmatch[no].rm_eo) { if (APR_SIZE_MAX - len <= pmatch[no].rm_eo - pmatch[no].rm_so) return APR_ENOMEM; len += pmatch[no].rm_eo - pmatch[no].rm_so; } } if (len >= maxlen && maxlen > 0) return APR_ENOMEM; if (!vb) { *result = dst = apr_palloc(p, len + 1); } else { if (vb->strlen == AP_VARBUF_UNKNOWN) vb->strlen = strlen(vb->buf); ap_varbuf_grow(vb, vb->strlen + len); dst = vb->buf + vb->strlen; vb->strlen += len; } /* Now actually fill in the string */ src = input; while ((c = *src++) != '\0') { if (c == '$' && apr_isdigit(*src)) no = *src++ - '0'; else no = AP_MAX_REG_MATCH; if (no >= AP_MAX_REG_MATCH) { /* Ordinary character. */ if (c == '\\' && *src) c = *src++; *dst++ = c; } else if (no < nmatch && pmatch[no].rm_so < pmatch[no].rm_eo) { len = pmatch[no].rm_eo - pmatch[no].rm_so; memcpy(dst, source + pmatch[no].rm_so, len); dst += len; } } *dst = '\0'; return APR_SUCCESS; } #ifndef AP_PREGSUB_MAXLEN #define AP_PREGSUB_MAXLEN (HUGE_STRING_LEN * 8) #endif AP_DECLARE(char *) ap_pregsub(apr_pool_t *p, const char *input, const char *source, apr_size_t nmatch, ap_regmatch_t pmatch[]) { char *result; apr_status_t rc = regsub_core(p, &result, NULL, input, source, nmatch, pmatch, AP_PREGSUB_MAXLEN); if (rc != APR_SUCCESS) result = NULL; return result; } AP_DECLARE(apr_status_t) ap_pregsub_ex(apr_pool_t *p, char **result, const char *input, const char *source, apr_size_t nmatch, ap_regmatch_t pmatch[], apr_size_t maxlen) { apr_status_t rc = regsub_core(p, result, NULL, input, source, nmatch, pmatch, maxlen); if (rc != APR_SUCCESS) *result = NULL; return rc; } /* * Parse .. so we don't compromise security */ AP_DECLARE(void) ap_getparents(char *name) { char *next; int l, w, first_dot; /* Four paseses, as per RFC 1808 */ /* a) remove ./ path segments */ for (next = name; *next && (*next != '.'); next++) { } l = w = first_dot = next - name; while (name[l] != '\0') { if (name[l] == '.' && IS_SLASH(name[l + 1]) && (l == 0 || IS_SLASH(name[l - 1]))) l += 2; else name[w++] = name[l++]; } /* b) remove trailing . path, segment */ if (w == 1 && name[0] == '.') w--; else if (w > 1 && name[w - 1] == '.' && IS_SLASH(name[w - 2])) w--; name[w] = '\0'; /* c) remove all xx/../ segments. (including leading ../ and /../) */ l = first_dot; while (name[l] != '\0') { if (name[l] == '.' && name[l + 1] == '.' && IS_SLASH(name[l + 2]) && (l == 0 || IS_SLASH(name[l - 1]))) { int m = l + 3, n; l = l - 2; if (l >= 0) { while (l >= 0 && !IS_SLASH(name[l])) l--; l++; } else l = 0; n = l; while ((name[n] = name[m])) (++n, ++m); } else ++l; } /* d) remove trailing xx/.. segment. */ if (l == 2 && name[0] == '.' && name[1] == '.') name[0] = '\0'; else if (l > 2 && name[l - 1] == '.' && name[l - 2] == '.' && IS_SLASH(name[l - 3])) { l = l - 4; if (l >= 0) { while (l >= 0 && !IS_SLASH(name[l])) l--; l++; } else l = 0; name[l] = '\0'; } } AP_DECLARE(void) ap_no2slash_ex(char *name, int is_fs_path) { char *d, *s; if (!*name) { return; } s = d = name; #ifdef HAVE_UNC_PATHS /* Check for UNC names. Leave leading two slashes. */ if (is_fs_path && s[0] == '/' && s[1] == '/') *d++ = *s++; #endif while (*s) { if ((*d++ = *s) == '/') { do { ++s; } while (*s == '/'); } else { ++s; } } *d = '\0'; } AP_DECLARE(void) ap_no2slash(char *name) { ap_no2slash_ex(name, 1); } /* * copy at most n leading directories of s into d * d should be at least as large as s plus 1 extra byte * assumes n > 0 * the return value is the ever useful pointer to the trailing \0 of d * * MODIFIED FOR HAVE_DRIVE_LETTERS and NETWARE environments, * so that if n == 0, "/" is returned in d with n == 1 * and s == "e:/test.html", "e:/" is returned in d * *** See also ap_directory_walk in server/request.c * * examples: * /a/b, 0 ==> / (true for all platforms) * /a/b, 1 ==> / * /a/b, 2 ==> /a/ * /a/b, 3 ==> /a/b/ * /a/b, 4 ==> /a/b/ * * c:/a/b 0 ==> / * c:/a/b 1 ==> c:/ * c:/a/b 2 ==> c:/a/ * c:/a/b 3 ==> c:/a/b * c:/a/b 4 ==> c:/a/b */ AP_DECLARE(char *) ap_make_dirstr_prefix(char *d, const char *s, int n) { if (n < 1) { *d = '/'; *++d = '\0'; return (d); } for (;;) { if (*s == '\0' || (*s == '/' && (--n) == 0)) { *d = '/'; break; } *d++ = *s++; } *++d = 0; return (d); } /* * return the parent directory name including trailing / of the file s */ AP_DECLARE(char *) ap_make_dirstr_parent(apr_pool_t *p, const char *s) { const char *last_slash = ap_strrchr_c(s, '/'); char *d; int l; if (last_slash == NULL) { return apr_pstrdup(p, ""); } l = (last_slash - s) + 1; d = apr_pstrmemdup(p, s, l); return (d); } AP_DECLARE(int) ap_count_dirs(const char *path) { int x, n; for (x = 0, n = 0; path[x]; x++) if (path[x] == '/') n++; return n; } AP_DECLARE(char *) ap_getword_nc(apr_pool_t *atrans, char **line, char stop) { return ap_getword(atrans, (const char **) line, stop); } AP_DECLARE(char *) ap_getword(apr_pool_t *atrans, const char **line, char stop) { const char *pos = *line; int len; char *res; while ((*pos != stop) && *pos) { ++pos; } len = pos - *line; res = apr_pstrmemdup(atrans, *line, len); if (stop) { while (*pos == stop) { ++pos; } } *line = pos; return res; } AP_DECLARE(char *) ap_getword_white_nc(apr_pool_t *atrans, char **line) { return ap_getword_white(atrans, (const char **) line); } AP_DECLARE(char *) ap_getword_white(apr_pool_t *atrans, const char **line) { const char *pos = *line; int len; char *res; while (!apr_isspace(*pos) && *pos) { ++pos; } len = pos - *line; res = apr_pstrmemdup(atrans, *line, len); while (apr_isspace(*pos)) { ++pos; } *line = pos; return res; } AP_DECLARE(char *) ap_getword_nulls_nc(apr_pool_t *atrans, char **line, char stop) { return ap_getword_nulls(atrans, (const char **) line, stop); } AP_DECLARE(char *) ap_getword_nulls(apr_pool_t *atrans, const char **line, char stop) { const char *pos = ap_strchr_c(*line, stop); char *res; if (!pos) { apr_size_t len = strlen(*line); res = apr_pstrmemdup(atrans, *line, len); *line += len; return res; } res = apr_pstrmemdup(atrans, *line, pos - *line); ++pos; *line = pos; return res; } /* Get a word, (new) config-file style --- quoted strings and backslashes * all honored */ static char *substring_conf(apr_pool_t *p, const char *start, int len, char quote) { char *result = apr_palloc(p, len + 1); char *resp = result; int i; for (i = 0; i < len; ++i) { if (start[i] == '\\' && (start[i + 1] == '\\' || (quote && start[i + 1] == quote))) *resp++ = start[++i]; else *resp++ = start[i]; } *resp++ = '\0'; #if RESOLVE_ENV_PER_TOKEN return (char *)ap_resolve_env(p,result); #else return result; #endif } AP_DECLARE(char *) ap_getword_conf_nc(apr_pool_t *p, char **line) { return ap_getword_conf(p, (const char **) line); } AP_DECLARE(char *) ap_getword_conf(apr_pool_t *p, const char **line) { const char *str = *line, *strend; char *res; char quote; while (apr_isspace(*str)) ++str; if (!*str) { *line = str; return ""; } if ((quote = *str) == '"' || quote == '\'') { strend = str + 1; while (*strend && *strend != quote) { if (*strend == '\\' && strend[1] && (strend[1] == quote || strend[1] == '\\')) { strend += 2; } else { ++strend; } } res = substring_conf(p, str + 1, strend - str - 1, quote); if (*strend == quote) ++strend; } else { strend = str; while (*strend && !apr_isspace(*strend)) ++strend; res = substring_conf(p, str, strend - str, 0); } while (apr_isspace(*strend)) ++strend; *line = strend; return res; } AP_DECLARE(char *) ap_getword_conf2_nc(apr_pool_t *p, char **line) { return ap_getword_conf2(p, (const char **) line); } AP_DECLARE(char *) ap_getword_conf2(apr_pool_t *p, const char **line) { const char *str = *line, *strend; char *res; char quote; int count = 1; while (apr_isspace(*str)) ++str; if (!*str) { *line = str; return ""; } if ((quote = *str) == '"' || quote == '\'') return ap_getword_conf(p, line); if (quote == '{') { strend = str + 1; while (*strend) { if (*strend == '}' && !--count) break; if (*strend == '{') ++count; if (*strend == '\\' && strend[1] && strend[1] == '\\') { ++strend; } ++strend; } res = substring_conf(p, str + 1, strend - str - 1, 0); if (*strend == '}') ++strend; } else { strend = str; while (*strend && !apr_isspace(*strend)) ++strend; res = substring_conf(p, str, strend - str, 0); } while (apr_isspace(*strend)) ++strend; *line = strend; return res; } AP_DECLARE(int) ap_cfg_closefile(ap_configfile_t *cfp) { #ifdef DEBUG ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, NULL, APLOGNO(00551) "Done with config file %s", cfp->name); #endif return (cfp->close == NULL) ? 0 : cfp->close(cfp->param); } /* we can't use apr_file_* directly because of linking issues on Windows */ static apr_status_t cfg_close(void *param) { return apr_file_close(param); } static apr_status_t cfg_getch(char *ch, void *param) { return apr_file_getc(ch, param); } static apr_status_t cfg_getstr(void *buf, apr_size_t bufsiz, void *param) { return apr_file_gets(buf, bufsiz, param); } /* Open a ap_configfile_t as FILE, return open ap_configfile_t struct pointer */ AP_DECLARE(apr_status_t) ap_pcfg_openfile(ap_configfile_t **ret_cfg, apr_pool_t *p, const char *name) { ap_configfile_t *new_cfg; apr_file_t *file = NULL; apr_finfo_t finfo; apr_status_t status; #ifdef DEBUG char buf[120]; #endif if (name == NULL) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(00552) "Internal error: pcfg_openfile() called with NULL filename"); return APR_EBADF; } status = apr_file_open(&file, name, APR_READ | APR_BUFFERED, APR_OS_DEFAULT, p); #ifdef DEBUG ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, NULL, APLOGNO(00553) "Opening config file %s (%s)", name, (status != APR_SUCCESS) ? apr_strerror(status, buf, sizeof(buf)) : "successful"); #endif if (status != APR_SUCCESS) return status; status = apr_file_info_get(&finfo, APR_FINFO_TYPE, file); if (status != APR_SUCCESS) return status; if (finfo.filetype != APR_REG && #if defined(WIN32) || defined(OS2) || defined(NETWARE) strcasecmp(apr_filepath_name_get(name), "nul") != 0) { #else strcmp(name, "/dev/null") != 0) { #endif /* WIN32 || OS2 */ ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(00554) "Access to file %s denied by server: not a regular file", name); apr_file_close(file); return APR_EBADF; } #ifdef WIN32 /* Some twisted character [no pun intended] at MS decided that a * zero width joiner as the lead wide character would be ideal for * describing Unicode text files. This was further convoluted to * another MSism that the same character mapped into utf-8, EF BB BF * would signify utf-8 text files. * * Since MS configuration files are all protecting utf-8 encoded * Unicode path, file and resource names, we already have the correct * WinNT encoding. But at least eat the stupid three bytes up front. */ { unsigned char buf[4]; apr_size_t len = 3; status = apr_file_read(file, buf, &len); if ((status != APR_SUCCESS) || (len < 3) || memcmp(buf, "\xEF\xBB\xBF", 3) != 0) { apr_off_t zero = 0; apr_file_seek(file, APR_SET, &zero); } } #endif new_cfg = apr_palloc(p, sizeof(*new_cfg)); new_cfg->param = file; new_cfg->name = apr_pstrdup(p, name); new_cfg->getch = cfg_getch; new_cfg->getstr = cfg_getstr; new_cfg->close = cfg_close; new_cfg->line_number = 0; *ret_cfg = new_cfg; return APR_SUCCESS; } /* Allocate a ap_configfile_t handle with user defined functions and params */ AP_DECLARE(ap_configfile_t *) ap_pcfg_open_custom( apr_pool_t *p, const char *descr, void *param, apr_status_t (*getc_func) (char *ch, void *param), apr_status_t (*gets_func) (void *buf, apr_size_t bufsize, void *param), apr_status_t (*close_func) (void *param)) { ap_configfile_t *new_cfg = apr_palloc(p, sizeof(*new_cfg)); new_cfg->param = param; new_cfg->name = descr; new_cfg->getch = getc_func; new_cfg->getstr = gets_func; new_cfg->close = close_func; new_cfg->line_number = 0; return new_cfg; } /* Read one character from a configfile_t */ AP_DECLARE(apr_status_t) ap_cfg_getc(char *ch, ap_configfile_t *cfp) { apr_status_t rc = cfp->getch(ch, cfp->param); if (rc == APR_SUCCESS && *ch == LF) ++cfp->line_number; return rc; } AP_DECLARE(const char *) ap_pcfg_strerror(apr_pool_t *p, ap_configfile_t *cfp, apr_status_t rc) { if (rc == APR_SUCCESS) return NULL; if (rc == APR_ENOSPC) return apr_psprintf(p, "Error reading %s at line %d: Line too long", cfp->name, cfp->line_number); return apr_psprintf(p, "Error reading %s at line %d: %pm", cfp->name, cfp->line_number, &rc); } /* Read one line from open ap_configfile_t, strip LF, increase line number */ /* If custom handler does not define a getstr() function, read char by char */ static apr_status_t ap_cfg_getline_core(char *buf, apr_size_t bufsize, apr_size_t offset, ap_configfile_t *cfp) { apr_status_t rc; /* If a "get string" function is defined, use it */ if (cfp->getstr != NULL) { char *cp; char *cbuf = buf + offset; apr_size_t cbufsize = bufsize - offset; while (1) { ++cfp->line_number; rc = cfp->getstr(cbuf, cbufsize, cfp->param); if (rc == APR_EOF) { if (cbuf != buf + offset) { *cbuf = '\0'; break; } else { return APR_EOF; } } if (rc != APR_SUCCESS) { return rc; } /* * check for line continuation, * i.e. match [^\\]\\[\r]\n only */ cp = cbuf; cp += strlen(cp); if (cp > buf && cp[-1] == LF) { cp--; if (cp > buf && cp[-1] == CR) cp--; if (cp > buf && cp[-1] == '\\') { cp--; /* * line continuation requested - * then remove backslash and continue */ cbufsize -= (cp-cbuf); cbuf = cp; continue; } } else if (cp - buf >= bufsize - 1) { return APR_ENOSPC; } break; } } else { /* No "get string" function defined; read character by character */ apr_size_t i = offset; if (bufsize < 2) { /* too small, assume caller is crazy */ return APR_EINVAL; } buf[offset] = '\0'; while (1) { char c; rc = cfp->getch(&c, cfp->param); if (rc == APR_EOF) { if (i > offset) break; else return APR_EOF; } if (rc != APR_SUCCESS) return rc; if (c == LF) { ++cfp->line_number; /* check for line continuation */ if (i > 0 && buf[i-1] == '\\') { i--; continue; } else { break; } } buf[i] = c; ++i; if (i >= bufsize - 1) { return APR_ENOSPC; } } buf[i] = '\0'; } return APR_SUCCESS; } static int cfg_trim_line(char *buf) { char *start, *end; /* * Leading and trailing white space is eliminated completely */ start = buf; while (apr_isspace(*start)) ++start; /* blast trailing whitespace */ end = &start[strlen(start)]; while (--end >= start && apr_isspace(*end)) *end = '\0'; /* Zap leading whitespace by shifting */ if (start != buf) memmove(buf, start, end - start + 2); #ifdef DEBUG_CFG_LINES ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, NULL, APLOGNO(00555) "Read config: '%s'", buf); #endif return end - start + 1; } /* Read one line from open ap_configfile_t, strip LF, increase line number */ /* If custom handler does not define a getstr() function, read char by char */ AP_DECLARE(apr_status_t) ap_cfg_getline(char *buf, apr_size_t bufsize, ap_configfile_t *cfp) { apr_status_t rc = ap_cfg_getline_core(buf, bufsize, 0, cfp); if (rc == APR_SUCCESS) cfg_trim_line(buf); return rc; } AP_DECLARE(apr_status_t) ap_varbuf_cfg_getline(struct ap_varbuf *vb, ap_configfile_t *cfp, apr_size_t max_len) { apr_status_t rc; apr_size_t new_len; vb->strlen = 0; *vb->buf = '\0'; if (vb->strlen == AP_VARBUF_UNKNOWN) vb->strlen = strlen(vb->buf); if (vb->avail - vb->strlen < 3) { new_len = vb->avail * 2; if (new_len > max_len) new_len = max_len; else if (new_len < 3) new_len = 3; ap_varbuf_grow(vb, new_len); } for (;;) { rc = ap_cfg_getline_core(vb->buf, vb->avail, vb->strlen, cfp); if (rc == APR_ENOSPC || rc == APR_SUCCESS) vb->strlen += strlen(vb->buf + vb->strlen); if (rc != APR_ENOSPC) break; if (vb->avail >= max_len) return APR_ENOSPC; new_len = vb->avail * 2; if (new_len > max_len) new_len = max_len; ap_varbuf_grow(vb, new_len); --cfp->line_number; } if (vb->strlen > max_len) return APR_ENOSPC; if (rc == APR_SUCCESS) vb->strlen = cfg_trim_line(vb->buf); return rc; } /* Size an HTTP header field list item, as separated by a comma. * The return value is a pointer to the beginning of the non-empty list item * within the original string (or NULL if there is none) and the address * of field is shifted to the next non-comma, non-whitespace character. * len is the length of the item excluding any beginning whitespace. */ AP_DECLARE(const char *) ap_size_list_item(const char **field, int *len) { const unsigned char *ptr = (const unsigned char *)*field; const unsigned char *token; int in_qpair, in_qstr, in_com; /* Find first non-comma, non-whitespace byte */ while (*ptr == ',' || apr_isspace(*ptr)) ++ptr; token = ptr; /* Find the end of this item, skipping over dead bits */ for (in_qpair = in_qstr = in_com = 0; *ptr && (in_qpair || in_qstr || in_com || *ptr != ','); ++ptr) { if (in_qpair) { in_qpair = 0; } else { switch (*ptr) { case '\\': in_qpair = 1; /* quoted-pair */ break; case '"' : if (!in_com) /* quoted string delim */ in_qstr = !in_qstr; break; case '(' : if (!in_qstr) /* comment (may nest) */ ++in_com; break; case ')' : if (in_com) /* end comment */ --in_com; break; default : break; } } } if ((*len = (ptr - token)) == 0) { *field = (const char *)ptr; return NULL; } /* Advance field pointer to the next non-comma, non-white byte */ while (*ptr == ',' || apr_isspace(*ptr)) ++ptr; *field = (const char *)ptr; return (const char *)token; } /* Retrieve an HTTP header field list item, as separated by a comma, * while stripping insignificant whitespace and lowercasing anything not in * a quoted string or comment. The return value is a new string containing * the converted list item (or NULL if none) and the address pointed to by * field is shifted to the next non-comma, non-whitespace. */ AP_DECLARE(char *) ap_get_list_item(apr_pool_t *p, const char **field) { const char *tok_start; const unsigned char *ptr; unsigned char *pos; char *token; int addspace = 0, in_qpair = 0, in_qstr = 0, in_com = 0, tok_len = 0; /* Find the beginning and maximum length of the list item so that * we can allocate a buffer for the new string and reset the field. */ if ((tok_start = ap_size_list_item(field, &tok_len)) == NULL) { return NULL; } token = apr_palloc(p, tok_len + 1); /* Scan the token again, but this time copy only the good bytes. * We skip extra whitespace and any whitespace around a '=', '/', * or ';' and lowercase normal characters not within a comment, * quoted-string or quoted-pair. */ for (ptr = (const unsigned char *)tok_start, pos = (unsigned char *)token; *ptr && (in_qpair || in_qstr || in_com || *ptr != ','); ++ptr) { if (in_qpair) { in_qpair = 0; *pos++ = *ptr; } else { switch (*ptr) { case '\\': in_qpair = 1; if (addspace == 1) *pos++ = ' '; *pos++ = *ptr; addspace = 0; break; case '"' : if (!in_com) in_qstr = !in_qstr; if (addspace == 1) *pos++ = ' '; *pos++ = *ptr; addspace = 0; break; case '(' : if (!in_qstr) ++in_com; if (addspace == 1) *pos++ = ' '; *pos++ = *ptr; addspace = 0; break; case ')' : if (in_com) --in_com; *pos++ = *ptr; addspace = 0; break; case ' ' : case '\t': if (addspace) break; if (in_com || in_qstr) *pos++ = *ptr; else addspace = 1; break; case '=' : case '/' : case ';' : if (!(in_com || in_qstr)) addspace = -1; *pos++ = *ptr; break; default : if (addspace == 1) *pos++ = ' '; *pos++ = (in_com || in_qstr) ? *ptr : apr_tolower(*ptr); addspace = 0; break; } } } *pos = '\0'; return token; } typedef enum ap_etag_e { AP_ETAG_NONE, AP_ETAG_WEAK, AP_ETAG_STRONG } ap_etag_e; /* Find an item in canonical form (lowercase, no extra spaces) within * an HTTP field value list. Returns 1 if found, 0 if not found. * This would be much more efficient if we stored header fields as * an array of list items as they are received instead of a plain string. */ static int find_list_item(apr_pool_t *p, const char *line, const char *tok, ap_etag_e type) { const unsigned char *pos; const unsigned char *ptr = (const unsigned char *)line; int good = 0, addspace = 0, in_qpair = 0, in_qstr = 0, in_com = 0; if (!line || !tok) { return 0; } if (type == AP_ETAG_STRONG && *tok != '\"') { return 0; } if (type == AP_ETAG_WEAK) { if (*tok == 'W' && (*(tok+1)) == '/' && (*(tok+2)) == '\"') { tok += 2; } else if (*tok != '\"') { return 0; } } do { /* loop for each item in line's list */ /* Find first non-comma, non-whitespace byte */ while (*ptr == ',' || apr_isspace(*ptr)) { ++ptr; } /* Account for strong or weak Etags, depending on our search */ if (type == AP_ETAG_STRONG && *ptr != '\"') { break; } if (type == AP_ETAG_WEAK) { if (*ptr == 'W' && (*(ptr+1)) == '/' && (*(ptr+2)) == '\"') { ptr += 2; } else if (*ptr != '\"') { break; } } if (*ptr) good = 1; /* until proven otherwise for this item */ else break; /* no items left and nothing good found */ /* We skip extra whitespace and any whitespace around a '=', '/', * or ';' and lowercase normal characters not within a comment, * quoted-string or quoted-pair. */ for (pos = (const unsigned char *)tok; *ptr && (in_qpair || in_qstr || in_com || *ptr != ','); ++ptr) { if (in_qpair) { in_qpair = 0; if (good) good = (*pos++ == *ptr); } else { switch (*ptr) { case '\\': in_qpair = 1; if (addspace == 1) good = good && (*pos++ == ' '); good = good && (*pos++ == *ptr); addspace = 0; break; case '"' : if (!in_com) in_qstr = !in_qstr; if (addspace == 1) good = good && (*pos++ == ' '); good = good && (*pos++ == *ptr); addspace = 0; break; case '(' : if (!in_qstr) ++in_com; if (addspace == 1) good = good && (*pos++ == ' '); good = good && (*pos++ == *ptr); addspace = 0; break; case ')' : if (in_com) --in_com; good = good && (*pos++ == *ptr); addspace = 0; break; case ' ' : case '\t': if (addspace || !good) break; if (in_com || in_qstr) good = (*pos++ == *ptr); else addspace = 1; break; case '=' : case '/' : case ';' : if (!(in_com || in_qstr)) addspace = -1; good = good && (*pos++ == *ptr); break; default : if (!good) break; if (addspace == 1) good = (*pos++ == ' '); if (in_com || in_qstr) good = good && (*pos++ == *ptr); else good = good && (apr_tolower(*pos++) == apr_tolower(*ptr)); addspace = 0; break; } } } if (good && *pos) good = 0; /* not good if only a prefix was matched */ } while (*ptr && !good); return good; } /* Find an item in canonical form (lowercase, no extra spaces) within * an HTTP field value list. Returns 1 if found, 0 if not found. * This would be much more efficient if we stored header fields as * an array of list items as they are received instead of a plain string. */ AP_DECLARE(int) ap_find_list_item(apr_pool_t *p, const char *line, const char *tok) { return find_list_item(p, line, tok, AP_ETAG_NONE); } /* Find a strong Etag in canonical form (lowercase, no extra spaces) within * an HTTP field value list. Returns 1 if found, 0 if not found. */ AP_DECLARE(int) ap_find_etag_strong(apr_pool_t *p, const char *line, const char *tok) { return find_list_item(p, line, tok, AP_ETAG_STRONG); } /* Find a weak ETag in canonical form (lowercase, no extra spaces) within * an HTTP field value list. Returns 1 if found, 0 if not found. */ AP_DECLARE(int) ap_find_etag_weak(apr_pool_t *p, const char *line, const char *tok) { return find_list_item(p, line, tok, AP_ETAG_WEAK); } /* Grab a list of tokens of the format 1#token (from RFC7230) */ AP_DECLARE(const char *) ap_parse_token_list_strict(apr_pool_t *p, const char *str_in, apr_array_header_t **tokens, int skip_invalid) { int in_leading_space = 1; int in_trailing_space = 0; int string_end = 0; const char *tok_begin; const char *cur; if (!str_in) { return NULL; } tok_begin = cur = str_in; while (!string_end) { const unsigned char c = (unsigned char)*cur; if (!TEST_CHAR(c, T_HTTP_TOKEN_STOP)) { /* Non-separator character; we are finished with leading * whitespace. We must never have encountered any trailing * whitespace before the delimiter (comma) */ in_leading_space = 0; if (in_trailing_space) { return "Encountered illegal whitespace in token"; } } else if (c == ' ' || c == '\t') { /* "Linear whitespace" only includes ASCII CRLF, space, and tab; * we can't get a CRLF since headers are split on them already, * so only look for a space or a tab */ if (in_leading_space) { /* We're still in leading whitespace */ ++tok_begin; } else { /* We must be in trailing whitespace */ ++in_trailing_space; } } else if (c == ',' || c == '\0') { if (!in_leading_space) { /* If we're out of the leading space, we know we've read some * characters of a token */ if (*tokens == NULL) { *tokens = apr_array_make(p, 4, sizeof(char *)); } APR_ARRAY_PUSH(*tokens, char *) = apr_pstrmemdup((*tokens)->pool, tok_begin, (cur - tok_begin) - in_trailing_space); } /* We're allowed to have null elements, just don't add them to the * array */ tok_begin = cur + 1; in_leading_space = 1; in_trailing_space = 0; string_end = (c == '\0'); } else { /* Encountered illegal separator char */ if (skip_invalid) { /* Skip to the next separator */ const char *temp; temp = ap_strchr_c(cur, ','); if(!temp) { temp = ap_strchr_c(cur, '\0'); } /* Act like we haven't seen a token so we reset */ cur = temp - 1; in_leading_space = 1; in_trailing_space = 0; } else { return apr_psprintf(p, "Encountered illegal separator " "'\\x%.2x'", (unsigned int)c); } } ++cur; } return NULL; } /* Scan a string for HTTP VCHAR/obs-text characters including HT and SP * (as used in header values, for example, in RFC 7230 section 3.2) * returning the pointer to the first non-HT ASCII ctrl character. */ AP_DECLARE(const char *) ap_scan_http_field_content(const char *ptr) { for ( ; !TEST_CHAR(*ptr, T_HTTP_CTRLS); ++ptr) ; return ptr; } /* Scan a string for HTTP token characters, returning the pointer to * the first non-token character. */ AP_DECLARE(const char *) ap_scan_http_token(const char *ptr) { for ( ; !TEST_CHAR(*ptr, T_HTTP_TOKEN_STOP); ++ptr) ; return ptr; } /* Scan a string for visible ASCII (0x21-0x7E) or obstext (0x80+) * and return a pointer to the first ctrl/space character encountered. */ AP_DECLARE(const char *) ap_scan_vchar_obstext(const char *ptr) { for ( ; TEST_CHAR(*ptr, T_VCHAR_OBSTEXT); ++ptr) ; return ptr; } /* Retrieve a token, spacing over it and returning a pointer to * the first non-white byte afterwards. Note that these tokens * are delimited by semis and commas; and can also be delimited * by whitespace at the caller's option. */ AP_DECLARE(char *) ap_get_token(apr_pool_t *p, const char **accept_line, int accept_white) { const char *ptr = *accept_line; const char *tok_start; char *token; /* Find first non-white byte */ while (apr_isspace(*ptr)) ++ptr; tok_start = ptr; /* find token end, skipping over quoted strings. * (comments are already gone). */ while (*ptr && (accept_white || !apr_isspace(*ptr)) && *ptr != ';' && *ptr != ',') { if (*ptr++ == '"') while (*ptr) if (*ptr++ == '"') break; } token = apr_pstrmemdup(p, tok_start, ptr - tok_start); /* Advance accept_line pointer to the next non-white byte */ while (apr_isspace(*ptr)) ++ptr; *accept_line = ptr; return token; } /* find http tokens, see the definition of token from RFC2068 */ AP_DECLARE(int) ap_find_token(apr_pool_t *p, const char *line, const char *tok) { const unsigned char *start_token; const unsigned char *s; if (!line) return 0; s = (const unsigned char *)line; for (;;) { /* find start of token, skip all stop characters */ while (*s && TEST_CHAR(*s, T_HTTP_TOKEN_STOP)) { ++s; } if (!*s) { return 0; } start_token = s; /* find end of the token */ while (*s && !TEST_CHAR(*s, T_HTTP_TOKEN_STOP)) { ++s; } if (!strncasecmp((const char *)start_token, (const char *)tok, s - start_token)) { return 1; } if (!*s) { return 0; } } } AP_DECLARE(int) ap_find_last_token(apr_pool_t *p, const char *line, const char *tok) { int llen, tlen, lidx; if (!line) return 0; llen = strlen(line); tlen = strlen(tok); lidx = llen - tlen; if (lidx < 0 || (lidx > 0 && !(apr_isspace(line[lidx - 1]) || line[lidx - 1] == ','))) return 0; return (strncasecmp(&line[lidx], tok, tlen) == 0); } AP_DECLARE(char *) ap_escape_shell_cmd(apr_pool_t *p, const char *str) { char *cmd; unsigned char *d; const unsigned char *s; cmd = apr_palloc(p, 2 * strlen(str) + 1); /* Be safe */ d = (unsigned char *)cmd; s = (const unsigned char *)str; for (; *s; ++s) { #if defined(OS2) || defined(WIN32) /* * Newlines to Win32/OS2 CreateProcess() are ill advised. * Convert them to spaces since they are effectively white * space to most applications */ if (*s == '\r' || *s == '\n') { *d++ = ' '; continue; } #endif if (TEST_CHAR(*s, T_ESCAPE_SHELL_CMD)) { *d++ = '\\'; } *d++ = *s; } *d = '\0'; return cmd; } static char x2c(const char *what) { char digit; #if !APR_CHARSET_EBCDIC digit = ((what[0] >= 'A') ? ((what[0] & 0xdf) - 'A') + 10 : (what[0] - '0')); digit *= 16; digit += (what[1] >= 'A' ? ((what[1] & 0xdf) - 'A') + 10 : (what[1] - '0')); #else /*APR_CHARSET_EBCDIC*/ char xstr[5]; xstr[0]='0'; xstr[1]='x'; xstr[2]=what[0]; xstr[3]=what[1]; xstr[4]='\0'; digit = apr_xlate_conv_byte(ap_hdrs_from_ascii, 0xFF & strtol(xstr, NULL, 16)); #endif /*APR_CHARSET_EBCDIC*/ return (digit); } /* * Unescapes a URL, leaving reserved characters intact. * Returns 0 on success, non-zero on error * Failure is due to * bad % escape returns HTTP_BAD_REQUEST * * decoding %00 or a forbidden character returns HTTP_NOT_FOUND */ static int unescape_url(char *url, const char *forbid, const char *reserved) { int badesc, badpath; char *x, *y; badesc = 0; badpath = 0; /* Initial scan for first '%'. Don't bother writing values before * seeing a '%' */ y = strchr(url, '%'); if (y == NULL) { return OK; } for (x = y; *y; ++x, ++y) { if (*y != '%') { *x = *y; } else { if (!apr_isxdigit(*(y + 1)) || !apr_isxdigit(*(y + 2))) { badesc = 1; *x = '%'; } else { char decoded; decoded = x2c(y + 1); if ((decoded == '\0') || (forbid && ap_strchr_c(forbid, decoded))) { badpath = 1; *x = decoded; y += 2; } else if (reserved && ap_strchr_c(reserved, decoded)) { *x++ = *y++; *x++ = *y++; *x = *y; } else { *x = decoded; y += 2; } } } } *x = '\0'; if (badesc) { return HTTP_BAD_REQUEST; } else if (badpath) { return HTTP_NOT_FOUND; } else { return OK; } } AP_DECLARE(int) ap_unescape_url(char *url) { /* Traditional */ return unescape_url(url, SLASHES, NULL); } AP_DECLARE(int) ap_unescape_url_keep2f(char *url, int decode_slashes) { /* AllowEncodedSlashes (corrected) */ if (decode_slashes) { /* no chars reserved */ return unescape_url(url, NULL, NULL); } else { /* reserve (do not decode) encoded slashes */ return unescape_url(url, NULL, SLASHES); } } #ifdef NEW_APIS /* IFDEF these out until they've been thought through. * Just a germ of an API extension for now */ AP_DECLARE(int) ap_unescape_url_proxy(char *url) { /* leave RFC1738 reserved characters intact, * so proxied URLs * don't get mangled. Where does that leave encoded '&' ? */ return unescape_url(url, NULL, "/;?"); } AP_DECLARE(int) ap_unescape_url_reserved(char *url, const char *reserved) { return unescape_url(url, NULL, reserved); } #endif AP_DECLARE(int) ap_unescape_urlencoded(char *query) { char *slider; /* replace plus with a space */ if (query) { for (slider = query; *slider; slider++) { if (*slider == '+') { *slider = ' '; } } } /* unescape everything else */ return unescape_url(query, NULL, NULL); } AP_DECLARE(char *) ap_construct_server(apr_pool_t *p, const char *hostname, apr_port_t port, const request_rec *r) { if (ap_is_default_port(port, r)) { return apr_pstrdup(p, hostname); } else { return apr_psprintf(p, "%s:%u", hostname, port); } } AP_DECLARE(int) ap_unescape_all(char *url) { return unescape_url(url, NULL, NULL); } /* c2x takes an unsigned, and expects the caller has guaranteed that * 0 <= what < 256... which usually means that you have to cast to * unsigned char first, because (unsigned)(char)(x) first goes through * signed extension to an int before the unsigned cast. * * The reason for this assumption is to assist gcc code generation -- * the unsigned char -> unsigned extension is already done earlier in * both uses of this code, so there's no need to waste time doing it * again. */ static const char c2x_table[] = "0123456789abcdef"; static APR_INLINE unsigned char *c2x(unsigned what, unsigned char prefix, unsigned char *where) { #if APR_CHARSET_EBCDIC what = apr_xlate_conv_byte(ap_hdrs_to_ascii, (unsigned char)what); #endif /*APR_CHARSET_EBCDIC*/ *where++ = prefix; *where++ = c2x_table[what >> 4]; *where++ = c2x_table[what & 0xf]; return where; } /* * escape_path_segment() escapes a path segment, as defined in RFC 1808. This * routine is (should be) OS independent. * * os_escape_path() converts an OS path to a URL, in an OS dependent way. In all * cases if a ':' occurs before the first '/' in the URL, the URL should be * prefixed with "./" (or the ':' escaped). In the case of Unix, this means * leaving '/' alone, but otherwise doing what escape_path_segment() does. For * efficiency reasons, we don't use escape_path_segment(), which is provided for * reference. Again, RFC 1808 is where this stuff is defined. * * If partial is set, os_escape_path() assumes that the path will be appended to * something with a '/' in it (and thus does not prefix "./"). */ AP_DECLARE(char *) ap_escape_path_segment_buffer(char *copy, const char *segment) { const unsigned char *s = (const unsigned char *)segment; unsigned char *d = (unsigned char *)copy; unsigned c; while ((c = *s)) { if (TEST_CHAR(c, T_ESCAPE_PATH_SEGMENT)) { d = c2x(c, '%', d); } else { *d++ = c; } ++s; } *d = '\0'; return copy; } AP_DECLARE(char *) ap_escape_path_segment(apr_pool_t *p, const char *segment) { return ap_escape_path_segment_buffer(apr_palloc(p, 3 * strlen(segment) + 1), segment); } AP_DECLARE(char *) ap_os_escape_path(apr_pool_t *p, const char *path, int partial) { char *copy = apr_palloc(p, 3 * strlen(path) + 3); const unsigned char *s = (const unsigned char *)path; unsigned char *d = (unsigned char *)copy; unsigned c; if (!partial) { const char *colon = ap_strchr_c(path, ':'); const char *slash = ap_strchr_c(path, '/'); if (colon && (!slash || colon < slash)) { *d++ = '.'; *d++ = '/'; } } while ((c = *s)) { if (TEST_CHAR(c, T_OS_ESCAPE_PATH)) { d = c2x(c, '%', d); } else { *d++ = c; } ++s; } *d = '\0'; return copy; } AP_DECLARE(char *) ap_escape_urlencoded_buffer(char *copy, const char *buffer) { const unsigned char *s = (const unsigned char *)buffer; unsigned char *d = (unsigned char *)copy; unsigned c; while ((c = *s)) { if (TEST_CHAR(c, T_ESCAPE_URLENCODED)) { d = c2x(c, '%', d); } else if (c == ' ') { *d++ = '+'; } else { *d++ = c; } ++s; } *d = '\0'; return copy; } AP_DECLARE(char *) ap_escape_urlencoded(apr_pool_t *p, const char *buffer) { return ap_escape_urlencoded_buffer(apr_palloc(p, 3 * strlen(buffer) + 1), buffer); } /* ap_escape_uri is now a macro for os_escape_path */ AP_DECLARE(char *) ap_escape_html2(apr_pool_t *p, const char *s, int toasc) { int i, j; char *x; /* first, count the number of extra characters */ for (i = 0, j = 0; s[i] != '\0'; i++) if (s[i] == '<' || s[i] == '>') j += 3; else if (s[i] == '&') j += 4; else if (s[i] == '"') j += 5; else if (toasc && !apr_isascii(s[i])) j += 5; if (j == 0) return apr_pstrmemdup(p, s, i); x = apr_palloc(p, i + j + 1); for (i = 0, j = 0; s[i] != '\0'; i++, j++) if (s[i] == '<') { memcpy(&x[j], "<", 4); j += 3; } else if (s[i] == '>') { memcpy(&x[j], ">", 4); j += 3; } else if (s[i] == '&') { memcpy(&x[j], "&", 5); j += 4; } else if (s[i] == '"') { memcpy(&x[j], """, 6); j += 5; } else if (toasc && !apr_isascii(s[i])) { char *esc = apr_psprintf(p, "&#%3.3d;", (unsigned char)s[i]); memcpy(&x[j], esc, 6); j += 5; } else x[j] = s[i]; x[j] = '\0'; return x; } AP_DECLARE(char *) ap_escape_logitem(apr_pool_t *p, const char *str) { char *ret; unsigned char *d; const unsigned char *s; apr_size_t length, escapes = 0; if (!str) { return NULL; } /* Compute how many characters need to be escaped */ s = (const unsigned char *)str; for (; *s; ++s) { if (TEST_CHAR(*s, T_ESCAPE_LOGITEM)) { escapes++; } } /* Compute the length of the input string, including NULL */ length = s - (const unsigned char *)str + 1; /* Fast path: nothing to escape */ if (escapes == 0) { return apr_pmemdup(p, str, length); } /* Each escaped character needs up to 3 extra bytes (0 --> \x00) */ ret = apr_palloc(p, length + 3 * escapes); d = (unsigned char *)ret; s = (const unsigned char *)str; for (; *s; ++s) { if (TEST_CHAR(*s, T_ESCAPE_LOGITEM)) { *d++ = '\\'; switch(*s) { case '\b': *d++ = 'b'; break; case '\n': *d++ = 'n'; break; case '\r': *d++ = 'r'; break; case '\t': *d++ = 't'; break; case '\v': *d++ = 'v'; break; case '\\': case '"': *d++ = *s; break; default: c2x(*s, 'x', d); d += 3; } } else { *d++ = *s; } } *d = '\0'; return ret; } AP_DECLARE(apr_size_t) ap_escape_errorlog_item(char *dest, const char *source, apr_size_t buflen) { unsigned char *d, *ep; const unsigned char *s; if (!source || !buflen) { /* be safe */ return 0; } d = (unsigned char *)dest; s = (const unsigned char *)source; ep = d + buflen - 1; for (; d < ep && *s; ++s) { if (TEST_CHAR(*s, T_ESCAPE_LOGITEM)) { *d++ = '\\'; if (d >= ep) { --d; break; } switch(*s) { case '\b': *d++ = 'b'; break; case '\n': *d++ = 'n'; break; case '\r': *d++ = 'r'; break; case '\t': *d++ = 't'; break; case '\v': *d++ = 'v'; break; case '\\': *d++ = *s; break; case '"': /* no need for this in error log */ d[-1] = *s; break; default: if (d >= ep - 2) { ep = --d; /* break the for loop as well */ break; } c2x(*s, 'x', d); d += 3; } } else { *d++ = *s; } } *d = '\0'; return (d - (unsigned char *)dest); } AP_DECLARE(void) ap_bin2hex(const void *src, apr_size_t srclen, char *dest) { const unsigned char *in = src; apr_size_t i; for (i = 0; i < srclen; i++) { *dest++ = c2x_table[in[i] >> 4]; *dest++ = c2x_table[in[i] & 0xf]; } *dest = '\0'; } AP_DECLARE(int) ap_is_directory(apr_pool_t *p, const char *path) { apr_finfo_t finfo; if (apr_stat(&finfo, path, APR_FINFO_TYPE, p) != APR_SUCCESS) return 0; /* in error condition, just return no */ return (finfo.filetype == APR_DIR); } AP_DECLARE(int) ap_is_rdirectory(apr_pool_t *p, const char *path) { apr_finfo_t finfo; if (apr_stat(&finfo, path, APR_FINFO_LINK | APR_FINFO_TYPE, p) != APR_SUCCESS) return 0; /* in error condition, just return no */ return (finfo.filetype == APR_DIR); } AP_DECLARE(char *) ap_make_full_path(apr_pool_t *a, const char *src1, const char *src2) { apr_size_t len1, len2; char *path; len1 = strlen(src1); len2 = strlen(src2); /* allocate +3 for '/' delimiter, trailing NULL and overallocate * one extra byte to allow the caller to add a trailing '/' */ path = (char *)apr_palloc(a, len1 + len2 + 3); if (len1 == 0) { *path = '/'; memcpy(path + 1, src2, len2 + 1); } else { char *next; memcpy(path, src1, len1); next = path + len1; if (next[-1] != '/') { *next++ = '/'; } memcpy(next, src2, len2 + 1); } return path; } /* * Check for an absoluteURI syntax (see section 3.2 in RFC2068). */ AP_DECLARE(int) ap_is_url(const char *u) { int x; for (x = 0; u[x] != ':'; x++) { if ((!u[x]) || ((!apr_isalnum(u[x])) && (u[x] != '+') && (u[x] != '-') && (u[x] != '.'))) { return 0; } } return (x ? 1 : 0); /* If the first character is ':', it's broken, too */ } AP_DECLARE(int) ap_ind(const char *s, char c) { const char *p = ap_strchr_c(s, c); if (p == NULL) return -1; return p - s; } AP_DECLARE(int) ap_rind(const char *s, char c) { const char *p = ap_strrchr_c(s, c); if (p == NULL) return -1; return p - s; } AP_DECLARE(void) ap_str_tolower(char *str) { while (*str) { *str = apr_tolower(*str); ++str; } } AP_DECLARE(void) ap_str_toupper(char *str) { while (*str) { *str = apr_toupper(*str); ++str; } } /* * We must return a FQDN */ char *ap_get_local_host(apr_pool_t *a) { #ifndef MAXHOSTNAMELEN #define MAXHOSTNAMELEN 256 #endif char str[MAXHOSTNAMELEN + 1]; char *server_hostname = NULL; apr_sockaddr_t *sockaddr; char *hostname; if (apr_gethostname(str, sizeof(str) - 1, a) != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_STARTUP | APLOG_WARNING, 0, a, APLOGNO(00556) "%s: apr_gethostname() failed to determine ServerName", ap_server_argv0); } else { str[sizeof(str) - 1] = '\0'; if (apr_sockaddr_info_get(&sockaddr, str, APR_UNSPEC, 0, 0, a) == APR_SUCCESS) { if ( (apr_getnameinfo(&hostname, sockaddr, 0) == APR_SUCCESS) && (ap_strchr_c(hostname, '.')) ) { server_hostname = apr_pstrdup(a, hostname); return server_hostname; } else if (ap_strchr_c(str, '.')) { server_hostname = apr_pstrdup(a, str); } else { apr_sockaddr_ip_get(&hostname, sockaddr); server_hostname = apr_pstrdup(a, hostname); } } else { ap_log_perror(APLOG_MARK, APLOG_STARTUP | APLOG_WARNING, 0, a, APLOGNO(00557) "%s: apr_sockaddr_info_get() failed for %s", ap_server_argv0, str); } } if (!server_hostname) server_hostname = apr_pstrdup(a, "127.0.0.1"); ap_log_perror(APLOG_MARK, APLOG_ALERT|APLOG_STARTUP, 0, a, APLOGNO(00558) "%s: Could not reliably determine the server's fully qualified " "domain name, using %s. Set the 'ServerName' directive globally " "to suppress this message", ap_server_argv0, server_hostname); return server_hostname; } /* simple 'pool' alloc()ing glue to apr_base64.c */ AP_DECLARE(char *) ap_pbase64decode(apr_pool_t *p, const char *bufcoded) { char *decoded; int l; decoded = (char *) apr_palloc(p, 1 + apr_base64_decode_len(bufcoded)); l = apr_base64_decode(decoded, bufcoded); decoded[l] = '\0'; /* make binary sequence into string */ return decoded; } AP_DECLARE(char *) ap_pbase64encode(apr_pool_t *p, char *string) { char *encoded; int l = strlen(string); encoded = (char *) apr_palloc(p, 1 + apr_base64_encode_len(l)); l = apr_base64_encode(encoded, string, l); encoded[l] = '\0'; /* make binary sequence into string */ return encoded; } /* we want to downcase the type/subtype for comparison purposes * but nothing else because ;parameter=foo values are case sensitive. * XXX: in truth we want to downcase parameter names... but really, * apache has never handled parameters and such correctly. You * also need to compress spaces and such to be able to compare * properly. -djg */ AP_DECLARE(void) ap_content_type_tolower(char *str) { char *semi; semi = strchr(str, ';'); if (semi) { *semi = '\0'; } ap_str_tolower(str); if (semi) { *semi = ';'; } } /* * Given a string, replace any bare " with \" . */ AP_DECLARE(char *) ap_escape_quotes(apr_pool_t *p, const char *instring) { int newlen = 0; const char *inchr = instring; char *outchr, *outstring; /* * Look through the input string, jogging the length of the output * string up by an extra byte each time we find an unescaped ". */ while (*inchr != '\0') { newlen++; if (*inchr == '"') { newlen++; } /* * If we find a slosh, and it's not the last byte in the string, * it's escaping something - advance past both bytes. */ if ((*inchr == '\\') && (inchr[1] != '\0')) { inchr++; newlen++; } inchr++; } outstring = apr_palloc(p, newlen + 1); inchr = instring; outchr = outstring; /* * Now copy the input string to the output string, inserting a slosh * in front of every " that doesn't already have one. */ while (*inchr != '\0') { if ((*inchr == '\\') && (inchr[1] != '\0')) { *outchr++ = *inchr++; *outchr++ = *inchr++; } if (*inchr == '"') { *outchr++ = '\\'; } if (*inchr != '\0') { *outchr++ = *inchr++; } } *outchr = '\0'; return outstring; } /* * Given a string, append the PID deliminated by delim. * Usually used to create a pid-appended filepath name * (eg: /a/b/foo -> /a/b/foo.6726). A function, and not * a macro, to avoid unistd.h dependency */ AP_DECLARE(char *) ap_append_pid(apr_pool_t *p, const char *string, const char *delim) { return apr_psprintf(p, "%s%s%" APR_PID_T_FMT, string, delim, getpid()); } /** * Parse a given timeout parameter string into an apr_interval_time_t value. * The unit of the time interval is given as postfix string to the numeric * string. Currently the following units are understood: * * ms : milliseconds * s : seconds * mi[n] : minutes * h : hours * * If no unit is contained in the given timeout parameter the default_time_unit * will be used instead. * @param timeout_parameter The string containing the timeout parameter. * @param timeout The timeout value to be returned. * @param default_time_unit The default time unit to use if none is specified * in timeout_parameter. * @return Status value indicating whether the parsing was successful or not. */ AP_DECLARE(apr_status_t) ap_timeout_parameter_parse( const char *timeout_parameter, apr_interval_time_t *timeout, const char *default_time_unit) { char *endp; const char *time_str; apr_int64_t tout; tout = apr_strtoi64(timeout_parameter, &endp, 10); if (errno) { return errno; } if (!endp || !*endp) { time_str = default_time_unit; } else { time_str = endp; } switch (*time_str) { /* Time is in seconds */ case 's': *timeout = (apr_interval_time_t) apr_time_from_sec(tout); break; case 'h': /* Time is in hours */ *timeout = (apr_interval_time_t) apr_time_from_sec(tout * 3600); break; case 'm': switch (*(++time_str)) { /* Time is in milliseconds */ case 's': *timeout = (apr_interval_time_t) tout * 1000; break; /* Time is in minutes */ case 'i': *timeout = (apr_interval_time_t) apr_time_from_sec(tout * 60); break; default: return APR_EGENERAL; } break; default: return APR_EGENERAL; } return APR_SUCCESS; } /** * Determine if a request has a request body or not. * * @param r the request_rec of the request * @return truth value */ AP_DECLARE(int) ap_request_has_body(request_rec *r) { apr_off_t cl; char *estr; const char *cls; int has_body; has_body = (!r->header_only && (r->kept_body || apr_table_get(r->headers_in, "Transfer-Encoding") || ( (cls = apr_table_get(r->headers_in, "Content-Length")) && (apr_strtoff(&cl, cls, &estr, 10) == APR_SUCCESS) && (!*estr) && (cl > 0) ) ) ); return has_body; } AP_DECLARE_NONSTD(apr_status_t) ap_pool_cleanup_set_null(void *data_) { void **ptr = (void **)data_; *ptr = NULL; return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_str2_alnum(const char *src, char *dest) { for ( ; *src; src++, dest++) { if (!apr_isprint(*src)) *dest = 'x'; else if (!apr_isalnum(*src)) *dest = '_'; else *dest = (char)*src; } *dest = '\0'; return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_pstr2_alnum(apr_pool_t *p, const char *src, const char **dest) { char *new = apr_palloc(p, strlen(src)+1); if (!new) return APR_ENOMEM; *dest = new; return ap_str2_alnum(src, new); } /** * Read the body and parse any form found, which must be of the * type application/x-www-form-urlencoded. * * Name/value pairs are returned in an array, with the names as * strings with a maximum length of HUGE_STRING_LEN, and the * values as bucket brigades. This allows values to be arbitrarily * large. * * All url-encoding is removed from both the names and the values * on the fly. The names are interpreted as strings, while the * values are interpreted as blocks of binary data, that may * contain the 0 character. * * In order to ensure that resource limits are not exceeded, a * maximum size must be provided. If the sum of the lengths of * the names and the values exceed this size, this function * will return HTTP_REQUEST_ENTITY_TOO_LARGE. * * An optional number of parameters can be provided, if the number * of parameters provided exceeds this amount, this function will * return HTTP_REQUEST_ENTITY_TOO_LARGE. If this value is negative, * no limit is imposed, and the number of parameters is in turn * constrained by the size parameter above. * * This function honours any kept_body configuration, and the * original raw request body will be saved to the kept_body brigade * if so configured, just as ap_discard_request_body does. * * NOTE: File upload is not yet supported, but can be without change * to the function call. */ /* form parsing stuff */ typedef enum { FORM_NORMAL, FORM_AMP, FORM_NAME, FORM_VALUE, FORM_PERCENTA, FORM_PERCENTB, FORM_ABORT } ap_form_type_t; AP_DECLARE(int) ap_parse_form_data(request_rec *r, ap_filter_t *f, apr_array_header_t **ptr, apr_size_t num, apr_size_t usize) { apr_bucket_brigade *bb = NULL; int seen_eos = 0; char buffer[HUGE_STRING_LEN + 1]; const char *ct; apr_size_t offset = 0; apr_ssize_t size; ap_form_type_t state = FORM_NAME, percent = FORM_NORMAL; ap_form_pair_t *pair = NULL; apr_array_header_t *pairs = apr_array_make(r->pool, 4, sizeof(ap_form_pair_t)); char escaped_char[2] = { 0 }; *ptr = pairs; /* sanity check - we only support forms for now */ ct = apr_table_get(r->headers_in, "Content-Type"); if (!ct || strncasecmp("application/x-www-form-urlencoded", ct, 33)) { return ap_discard_request_body(r); } if (usize > APR_SIZE_MAX >> 1) size = APR_SIZE_MAX >> 1; else size = usize; if (!f) { f = r->input_filters; } bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); do { apr_bucket *bucket = NULL, *last = NULL; int rv = ap_get_brigade(f, bb, AP_MODE_READBYTES, APR_BLOCK_READ, HUGE_STRING_LEN); if (rv != APR_SUCCESS) { apr_brigade_destroy(bb); return ap_map_http_request_error(rv, HTTP_BAD_REQUEST); } for (bucket = APR_BRIGADE_FIRST(bb); bucket != APR_BRIGADE_SENTINEL(bb); last = bucket, bucket = APR_BUCKET_NEXT(bucket)) { const char *data; apr_size_t len, slide; if (last) { apr_bucket_delete(last); } if (APR_BUCKET_IS_EOS(bucket)) { seen_eos = 1; break; } if (bucket->length == 0) { continue; } rv = apr_bucket_read(bucket, &data, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS) { apr_brigade_destroy(bb); return HTTP_BAD_REQUEST; } slide = len; while (state != FORM_ABORT && slide-- > 0 && size >= 0 && num != 0) { char c = *data++; if ('+' == c) { c = ' '; } else if ('&' == c) { state = FORM_AMP; } if ('%' == c) { percent = FORM_PERCENTA; continue; } if (FORM_PERCENTA == percent) { escaped_char[0] = c; percent = FORM_PERCENTB; continue; } if (FORM_PERCENTB == percent) { escaped_char[1] = c; c = x2c(escaped_char); percent = FORM_NORMAL; } switch (state) { case FORM_AMP: if (pair) { const char *tmp = apr_pmemdup(r->pool, buffer, offset); apr_bucket *b = apr_bucket_pool_create(tmp, offset, r->pool, r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(pair->value, b); } state = FORM_NAME; pair = NULL; offset = 0; num--; break; case FORM_NAME: if (offset < HUGE_STRING_LEN) { if ('=' == c) { pair = (ap_form_pair_t *) apr_array_push(pairs); pair->name = apr_pstrmemdup(r->pool, buffer, offset); pair->value = apr_brigade_create(r->pool, r->connection->bucket_alloc); state = FORM_VALUE; offset = 0; } else { buffer[offset++] = c; size--; } } else { state = FORM_ABORT; } break; case FORM_VALUE: if (offset >= HUGE_STRING_LEN) { const char *tmp = apr_pmemdup(r->pool, buffer, offset); apr_bucket *b = apr_bucket_pool_create(tmp, offset, r->pool, r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(pair->value, b); offset = 0; } buffer[offset++] = c; size--; break; default: break; } } } apr_brigade_cleanup(bb); } while (!seen_eos); if (FORM_ABORT == state || size < 0 || num == 0) { return HTTP_REQUEST_ENTITY_TOO_LARGE; } else if (FORM_VALUE == state && pair && offset > 0) { const char *tmp = apr_pmemdup(r->pool, buffer, offset); apr_bucket *b = apr_bucket_pool_create(tmp, offset, r->pool, r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(pair->value, b); } return OK; } #define VARBUF_SMALL_SIZE 2048 #define VARBUF_MAX_SIZE (APR_SIZE_MAX - 1 - \ APR_ALIGN_DEFAULT(sizeof(struct ap_varbuf_info))) struct ap_varbuf_info { struct apr_memnode_t *node; apr_allocator_t *allocator; }; static apr_status_t varbuf_cleanup(void *info_) { struct ap_varbuf_info *info = info_; info->node->next = NULL; apr_allocator_free(info->allocator, info->node); return APR_SUCCESS; } static const char nul = '\0'; static char * const varbuf_empty = (char *)&nul; AP_DECLARE(void) ap_varbuf_init(apr_pool_t *p, struct ap_varbuf *vb, apr_size_t init_size) { vb->buf = varbuf_empty; vb->avail = 0; vb->strlen = AP_VARBUF_UNKNOWN; vb->pool = p; vb->info = NULL; ap_varbuf_grow(vb, init_size); } AP_DECLARE(void) ap_varbuf_grow(struct ap_varbuf *vb, apr_size_t new_len) { apr_memnode_t *new_node = NULL; apr_allocator_t *allocator; struct ap_varbuf_info *new_info; char *new; AP_DEBUG_ASSERT(vb->strlen == AP_VARBUF_UNKNOWN || vb->avail >= vb->strlen); if (new_len <= vb->avail) return; if (new_len < 2 * vb->avail && vb->avail < VARBUF_MAX_SIZE/2) { /* at least double the size, to avoid repeated reallocations */ new_len = 2 * vb->avail; } else if (new_len > VARBUF_MAX_SIZE) { apr_abortfunc_t abort_fn = apr_pool_abort_get(vb->pool); ap_assert(abort_fn != NULL); abort_fn(APR_ENOMEM); return; } new_len++; /* add space for trailing \0 */ if (new_len <= VARBUF_SMALL_SIZE) { new_len = APR_ALIGN_DEFAULT(new_len); new = apr_palloc(vb->pool, new_len); if (vb->avail && vb->strlen != 0) { AP_DEBUG_ASSERT(vb->buf != NULL); AP_DEBUG_ASSERT(vb->buf != varbuf_empty); if (new == vb->buf + vb->avail + 1) { /* We are lucky: the new memory lies directly after our old * buffer, we can now use both. */ vb->avail += new_len; return; } else { /* copy up to vb->strlen + 1 bytes */ memcpy(new, vb->buf, vb->strlen == AP_VARBUF_UNKNOWN ? vb->avail + 1 : vb->strlen + 1); } } else { *new = '\0'; } vb->avail = new_len - 1; vb->buf = new; return; } /* The required block is rather larger. Use allocator directly so that * the memory can be freed independently from the pool. */ allocator = apr_pool_allocator_get(vb->pool); /* Happens if APR was compiled with APR_POOL_DEBUG */ if (allocator == NULL) { apr_allocator_create(&allocator); ap_assert(allocator != NULL); } if (new_len <= VARBUF_MAX_SIZE) new_node = apr_allocator_alloc(allocator, new_len + APR_ALIGN_DEFAULT(sizeof(*new_info))); if (!new_node) { apr_abortfunc_t abort_fn = apr_pool_abort_get(vb->pool); ap_assert(abort_fn != NULL); abort_fn(APR_ENOMEM); return; } new_info = (struct ap_varbuf_info *)new_node->first_avail; new_node->first_avail += APR_ALIGN_DEFAULT(sizeof(*new_info)); new_info->node = new_node; new_info->allocator = allocator; new = new_node->first_avail; AP_DEBUG_ASSERT(new_node->endp - new_node->first_avail >= new_len); new_len = new_node->endp - new_node->first_avail; if (vb->avail && vb->strlen != 0) memcpy(new, vb->buf, vb->strlen == AP_VARBUF_UNKNOWN ? vb->avail + 1 : vb->strlen + 1); else *new = '\0'; if (vb->info) apr_pool_cleanup_run(vb->pool, vb->info, varbuf_cleanup); apr_pool_cleanup_register(vb->pool, new_info, varbuf_cleanup, apr_pool_cleanup_null); vb->info = new_info; vb->buf = new; vb->avail = new_len - 1; } AP_DECLARE(void) ap_varbuf_strmemcat(struct ap_varbuf *vb, const char *str, int len) { if (len == 0) return; if (!vb->avail) { ap_varbuf_grow(vb, len); memcpy(vb->buf, str, len); vb->buf[len] = '\0'; vb->strlen = len; return; } if (vb->strlen == AP_VARBUF_UNKNOWN) vb->strlen = strlen(vb->buf); ap_varbuf_grow(vb, vb->strlen + len); memcpy(vb->buf + vb->strlen, str, len); vb->strlen += len; vb->buf[vb->strlen] = '\0'; } AP_DECLARE(void) ap_varbuf_free(struct ap_varbuf *vb) { if (vb->info) { apr_pool_cleanup_run(vb->pool, vb->info, varbuf_cleanup); vb->info = NULL; } vb->buf = NULL; } AP_DECLARE(char *) ap_varbuf_pdup(apr_pool_t *p, struct ap_varbuf *buf, const char *prepend, apr_size_t prepend_len, const char *append, apr_size_t append_len, apr_size_t *new_len) { apr_size_t i = 0; struct iovec vec[3]; if (prepend) { vec[i].iov_base = (void *)prepend; vec[i].iov_len = prepend_len; i++; } if (buf->avail && buf->strlen) { if (buf->strlen == AP_VARBUF_UNKNOWN) buf->strlen = strlen(buf->buf); vec[i].iov_base = (void *)buf->buf; vec[i].iov_len = buf->strlen; i++; } if (append) { vec[i].iov_base = (void *)append; vec[i].iov_len = append_len; i++; } if (i) return apr_pstrcatv(p, vec, i, new_len); if (new_len) *new_len = 0; return ""; } AP_DECLARE(apr_status_t) ap_varbuf_regsub(struct ap_varbuf *vb, const char *input, const char *source, apr_size_t nmatch, ap_regmatch_t pmatch[], apr_size_t maxlen) { return regsub_core(NULL, NULL, vb, input, source, nmatch, pmatch, maxlen); } static const char * const oom_message = "[crit] Memory allocation failed, " "aborting process." APR_EOL_STR; AP_DECLARE(void) ap_abort_on_oom() { int written, count = strlen(oom_message); const char *buf = oom_message; do { written = write(STDERR_FILENO, buf, count); if (written == count) break; if (written > 0) { buf += written; count -= written; } } while (written >= 0 || errno == EINTR); abort(); } AP_DECLARE(void *) ap_malloc(size_t size) { void *p = malloc(size); if (p == NULL && size != 0) ap_abort_on_oom(); return p; } AP_DECLARE(void *) ap_calloc(size_t nelem, size_t size) { void *p = calloc(nelem, size); if (p == NULL && nelem != 0 && size != 0) ap_abort_on_oom(); return p; } AP_DECLARE(void *) ap_realloc(void *ptr, size_t size) { void *p = realloc(ptr, size); if (p == NULL && size != 0) ap_abort_on_oom(); return p; } AP_DECLARE(void) ap_get_sload(ap_sload_t *ld) { int i, j, server_limit, thread_limit; int ready = 0; int busy = 0; int total; ap_generation_t mpm_generation; /* preload errored fields, we overwrite */ ld->idle = -1; ld->busy = -1; ld->bytes_served = 0; ld->access_count = 0; ap_mpm_query(AP_MPMQ_GENERATION, &mpm_generation); ap_mpm_query(AP_MPMQ_HARD_LIMIT_THREADS, &thread_limit); ap_mpm_query(AP_MPMQ_HARD_LIMIT_DAEMONS, &server_limit); for (i = 0; i < server_limit; i++) { process_score *ps; ps = ap_get_scoreboard_process(i); for (j = 0; j < thread_limit; j++) { int res; worker_score *ws = NULL; ws = &ap_scoreboard_image->servers[i][j]; res = ws->status; if (!ps->quiescing && ps->pid) { if (res == SERVER_READY && ps->generation == mpm_generation) { ready++; } else if (res != SERVER_DEAD && res != SERVER_STARTING && res != SERVER_IDLE_KILL && ps->generation == mpm_generation) { busy++; } } if (ap_extended_status && !ps->quiescing && ps->pid) { if (ws->access_count != 0 || (res != SERVER_READY && res != SERVER_DEAD)) { ld->access_count += ws->access_count; ld->bytes_served += ws->bytes_served; } } } } total = busy + ready; if (total) { ld->idle = ready * 100 / total; ld->busy = busy * 100 / total; } } AP_DECLARE(void) ap_get_loadavg(ap_loadavg_t *ld) { /* preload errored fields, we overwrite */ ld->loadavg = -1.0; ld->loadavg5 = -1.0; ld->loadavg15 = -1.0; #if HAVE_GETLOADAVG { double la[3]; int num; num = getloadavg(la, 3); if (num > 0) { ld->loadavg = (float)la[0]; } if (num > 1) { ld->loadavg5 = (float)la[1]; } if (num > 2) { ld->loadavg15 = (float)la[2]; } } #endif } AP_DECLARE(char *) ap_get_exec_line(apr_pool_t *p, const char *cmd, const char * const * argv) { char buf[MAX_STRING_LEN]; apr_procattr_t *procattr; apr_proc_t *proc; apr_file_t *fp; apr_size_t nbytes = 1; char c; int k; if (apr_procattr_create(&procattr, p) != APR_SUCCESS) return NULL; if (apr_procattr_io_set(procattr, APR_FULL_BLOCK, APR_FULL_BLOCK, APR_FULL_BLOCK) != APR_SUCCESS) return NULL; if (apr_procattr_dir_set(procattr, ap_make_dirstr_parent(p, cmd)) != APR_SUCCESS) return NULL; if (apr_procattr_cmdtype_set(procattr, APR_PROGRAM) != APR_SUCCESS) return NULL; proc = apr_pcalloc(p, sizeof(apr_proc_t)); if (apr_proc_create(proc, cmd, argv, NULL, procattr, p) != APR_SUCCESS) return NULL; fp = proc->out; if (fp == NULL) return NULL; /* XXX: we are reading 1 byte at a time here */ for (k = 0; apr_file_read(fp, &c, &nbytes) == APR_SUCCESS && nbytes == 1 && (k < MAX_STRING_LEN-1) ; ) { if (c == '\n' || c == '\r') break; buf[k++] = c; } buf[k] = '\0'; apr_file_close(fp); return apr_pstrndup(p, buf, k); } AP_DECLARE(int) ap_array_str_index(const apr_array_header_t *array, const char *s, int start) { if (start >= 0) { int i; for (i = start; i < array->nelts; i++) { const char *p = APR_ARRAY_IDX(array, i, const char *); if (!strcmp(p, s)) { return i; } } } return -1; } AP_DECLARE(int) ap_array_str_contains(const apr_array_header_t *array, const char *s) { return (ap_array_str_index(array, s, 0) >= 0); } #if !APR_CHARSET_EBCDIC /* * Our own known-fast translation table for casecmp by character. * Only ASCII alpha characters 41-5A are folded to 61-7A, other * octets (such as extended latin alphabetics) are never case-folded. * NOTE: Other than Alpha A-Z/a-z, each code point is unique! */ static const short ucharmap[] = { 0x0, 0x1, 0x2, 0x3, 0x4, 0x5, 0x6, 0x7, 0x8, 0x9, 0xa, 0xb, 0xc, 0xd, 0xe, 0xf, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f, 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38, 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f, 0x40, 'a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x', 'y', 'z', 0x5b, 0x5c, 0x5d, 0x5e, 0x5f, 0x60, 'a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x', 'y', 'z', 0x7b, 0x7c, 0x7d, 0x7e, 0x7f, 0x80, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87, 0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f, 0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97, 0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f, 0xa0, 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7, 0xa8, 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf, 0xb0, 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7, 0xb8, 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf, 0xc0, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7, 0xc8, 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf, 0xd0, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7, 0xd8, 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf, 0xe0, 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7, 0xe8, 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef, 0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7, 0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff }; #else /* APR_CHARSET_EBCDIC */ /* * Derived from apr-iconv/ccs/cp037.c for EBCDIC case comparison, * provides unique identity of every char value (strict ISO-646 * conformance, arbitrary election of an ISO-8859-1 ordering, and * very arbitrary control code assignments into C1 to achieve * identity and a reversible mapping of code points), * then folding the equivalences of ASCII 41-5A into 61-7A, * presenting comparison results in a somewhat ISO/IEC 10646 * (ASCII-like) order, depending on the EBCDIC code page in use. * * NOTE: Other than Alpha A-Z/a-z, each code point is unique! */ static const short ucharmap[] = { 0x00, 0x01, 0x02, 0x03, 0x9C, 0x09, 0x86, 0x7F, 0x97, 0x8D, 0x8E, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F, 0x10, 0x11, 0x12, 0x13, 0x9D, 0x85, 0x08, 0x87, 0x18, 0x19, 0x92, 0x8F, 0x1C, 0x1D, 0x1E, 0x1F, 0x80, 0x81, 0x82, 0x83, 0x84, 0x0A, 0x17, 0x1B, 0x88, 0x89, 0x8A, 0x8B, 0x8C, 0x05, 0x06, 0x07, 0x90, 0x91, 0x16, 0x93, 0x94, 0x95, 0x96, 0x04, 0x98, 0x99, 0x9A, 0x9B, 0x14, 0x15, 0x9E, 0x1A, 0x20, 0xA0, 0xE2, 0xE4, 0xE0, 0xE1, 0xE3, 0xE5, 0xE7, 0xF1, 0xA2, 0x2E, 0x3C, 0x28, 0x2B, 0x7C, 0x26, 0xE9, 0xEA, 0xEB, 0xE8, 0xED, 0xEE, 0xEF, 0xEC, 0xDF, 0x21, 0x24, 0x2A, 0x29, 0x3B, 0xAC, 0x2D, 0x2F, 0xC2, 0xC4, 0xC0, 0xC1, 0xC3, 0xC5, 0xC7, 0xD1, 0xA6, 0x2C, 0x25, 0x5F, 0x3E, 0x3F, 0xF8, 0xC9, 0xCA, 0xCB, 0xC8, 0xCD, 0xCE, 0xCF, 0xCC, 0x60, 0x3A, 0x23, 0x40, 0x27, 0x3D, 0x22, 0xD8, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68, 0x69, 0xAB, 0xBB, 0xF0, 0xFD, 0xFE, 0xB1, 0xB0, 0x6A, 0x6B, 0x6C, 0x6D, 0x6E, 0x6F, 0x70, 0x71, 0x72, 0xAA, 0xBA, 0xE6, 0xB8, 0xC6, 0xA4, 0xB5, 0x7E, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78, 0x79, 0x7A, 0xA1, 0xBF, 0xD0, 0xDD, 0xDE, 0xAE, 0x5E, 0xA3, 0xA5, 0xB7, 0xA9, 0xA7, 0xB6, 0xBC, 0xBD, 0xBE, 0x5B, 0x5D, 0xAF, 0xA8, 0xB4, 0xD7, 0x7B, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68, 0x69, 0xAD, 0xF4, 0xF6, 0xF2, 0xF3, 0xF5, 0x7D, 0x6A, 0x6B, 0x6C, 0x6D, 0x6E, 0x6F, 0x70, 0x71, 0x72, 0xB9, 0xFB, 0xFC, 0xF9, 0xFA, 0xFF, 0x5C, 0xF7, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78, 0x79, 0x7A, 0xB2, 0xD4, 0xD6, 0xD2, 0xD3, 0xD5, 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38, 0x39, 0xB3, 0xDB, 0xDC, 0xD9, 0xDA, 0x9F }; #endif AP_DECLARE(int) ap_cstr_casecmp(const char *s1, const char *s2) { const unsigned char *str1 = (const unsigned char *)s1; const unsigned char *str2 = (const unsigned char *)s2; for (;;) { const int c1 = (int)(*str1); const int c2 = (int)(*str2); const int cmp = ucharmap[c1] - ucharmap[c2]; /* Not necessary to test for !c2, this is caught by cmp */ if (cmp || !c1) return cmp; str1++; str2++; } } AP_DECLARE(int) ap_cstr_casecmpn(const char *s1, const char *s2, apr_size_t n) { const unsigned char *str1 = (const unsigned char *)s1; const unsigned char *str2 = (const unsigned char *)s2; while (n--) { const int c1 = (int)(*str1); const int c2 = (int)(*str2); const int cmp = ucharmap[c1] - ucharmap[c2]; /* Not necessary to test for !c2, this is caught by cmp */ if (cmp || !c1) return cmp; str1++; str2++; } return 0; } typedef struct { const char *fname; } fnames; static int fname_alphasort(const void *fn1, const void *fn2) { const fnames *f1 = fn1; const fnames *f2 = fn2; return strcmp(f1->fname, f2->fname); } AP_DECLARE(ap_dir_match_t *)ap_dir_cfgmatch(cmd_parms *cmd, int flags, const char *(*cb)(ap_dir_match_t *w, const char *fname), void *ctx) { ap_dir_match_t *w = apr_palloc(cmd->temp_pool, sizeof(*w)); w->prefix = apr_pstrcat(cmd->pool, cmd->cmd->name, ": ", NULL); w->p = cmd->pool; w->ptemp = cmd->temp_pool; w->flags = flags; w->cb = cb; w->ctx = ctx; w->depth = 0; return w; } AP_DECLARE(const char *)ap_dir_nofnmatch(ap_dir_match_t *w, const char *fname) { const char *error; apr_status_t rv; if ((w->flags & AP_DIR_FLAG_RECURSIVE) && ap_is_directory(w->ptemp, fname)) { apr_dir_t *dirp; apr_finfo_t dirent; int current; apr_array_header_t *candidates = NULL; fnames *fnew; char *path = apr_pstrdup(w->ptemp, fname); if (++w->depth > AP_MAX_FNMATCH_DIR_DEPTH) { return apr_psprintf(w->p, "%sDirectory '%s' exceeds the maximum include " "directory nesting level of %u. You have " "probably a recursion somewhere.", w->prefix ? w->prefix : "", path, AP_MAX_FNMATCH_DIR_DEPTH); } /* * first course of business is to grok all the directory * entries here and store 'em away. Recall we need full pathnames * for this. */ rv = apr_dir_open(&dirp, path, w->ptemp); if (rv != APR_SUCCESS) { return apr_psprintf(w->p, "%sCould not open directory %s: %pm", w->prefix ? w->prefix : "", path, &rv); } candidates = apr_array_make(w->ptemp, 1, sizeof(fnames)); while (apr_dir_read(&dirent, APR_FINFO_DIRENT, dirp) == APR_SUCCESS) { /* strip out '.' and '..' */ if (strcmp(dirent.name, ".") && strcmp(dirent.name, "..")) { fnew = (fnames *) apr_array_push(candidates); fnew->fname = ap_make_full_path(w->ptemp, path, dirent.name); } } apr_dir_close(dirp); if (candidates->nelts != 0) { qsort((void *) candidates->elts, candidates->nelts, sizeof(fnames), fname_alphasort); /* * Now recurse these... we handle errors and subdirectories * via the recursion, which is nice */ for (current = 0; current < candidates->nelts; ++current) { fnew = &((fnames *) candidates->elts)[current]; error = ap_dir_nofnmatch(w, fnew->fname); if (error) { return error; } } } w->depth--; return NULL; } else if (w->flags & AP_DIR_FLAG_OPTIONAL) { /* If the optional flag is set (like for IncludeOptional) we can * tolerate that no file or directory is present and bail out. */ apr_finfo_t finfo; if (apr_stat(&finfo, fname, APR_FINFO_TYPE, w->ptemp) != APR_SUCCESS || finfo.filetype == APR_NOFILE) return NULL; } return w->cb(w, fname); } AP_DECLARE(const char *)ap_dir_fnmatch(ap_dir_match_t *w, const char *path, const char *fname) { const char *rest; apr_status_t rv; apr_dir_t *dirp; apr_finfo_t dirent; apr_array_header_t *candidates = NULL; fnames *fnew; int current; /* find the first part of the filename */ rest = ap_strchr_c(fname, '/'); if (rest) { fname = apr_pstrmemdup(w->ptemp, fname, rest - fname); rest++; } /* optimisation - if the filename isn't a wildcard, process it directly */ if (!apr_fnmatch_test(fname)) { path = path ? ap_make_full_path(w->ptemp, path, fname) : fname; if (!rest) { return ap_dir_nofnmatch(w, path); } else { return ap_dir_fnmatch(w, path, rest); } } /* * first course of business is to grok all the directory * entries here and store 'em away. Recall we need full pathnames * for this. */ rv = apr_dir_open(&dirp, path, w->ptemp); if (rv != APR_SUCCESS) { /* If the directory doesn't exist and the optional flag is set * there is no need to return an error. */ if (rv == APR_ENOENT && (w->flags & AP_DIR_FLAG_OPTIONAL)) { return NULL; } return apr_psprintf(w->p, "%sCould not open directory %s: %pm", w->prefix ? w->prefix : "", path, &rv); } candidates = apr_array_make(w->ptemp, 1, sizeof(fnames)); while (apr_dir_read(&dirent, APR_FINFO_DIRENT | APR_FINFO_TYPE, dirp) == APR_SUCCESS) { /* strip out '.' and '..' */ if (strcmp(dirent.name, ".") && strcmp(dirent.name, "..") && (apr_fnmatch(fname, dirent.name, APR_FNM_PERIOD) == APR_SUCCESS)) { const char *full_path = ap_make_full_path(w->ptemp, path, dirent.name); /* If matching internal to path, and we happen to match something * other than a directory, skip it */ if (rest && (dirent.filetype != APR_DIR)) { continue; } fnew = (fnames *) apr_array_push(candidates); fnew->fname = full_path; } } apr_dir_close(dirp); if (candidates->nelts != 0) { const char *error; qsort((void *) candidates->elts, candidates->nelts, sizeof(fnames), fname_alphasort); /* * Now recurse these... we handle errors and subdirectories * via the recursion, which is nice */ for (current = 0; current < candidates->nelts; ++current) { fnew = &((fnames *) candidates->elts)[current]; if (!rest) { error = ap_dir_nofnmatch(w, fnew->fname); } else { error = ap_dir_fnmatch(w, fnew->fname, rest); } if (error) { return error; } } } else { if (!(w->flags & AP_DIR_FLAG_OPTIONAL)) { return apr_psprintf(w->p, "%sNo matches for the wildcard '%s' in '%s', failing", w->prefix ? w->prefix : "", fname, path); } } return NULL; } httpd-2.4.41/server/util_expr_eval.c0000644000000000000500000016007013472755016015746 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * ap_expr_eval.c, based on ssl_expr_eval.c from mod_ssl */ #include "httpd.h" #include "http_log.h" #include "http_core.h" #include "http_protocol.h" #include "http_request.h" #include "ap_provider.h" #include "util_expr_private.h" #include "util_md5.h" #include "apr_lib.h" #include "apr_fnmatch.h" #include "apr_base64.h" #include "apr_sha1.h" #include /* for INT_MAX */ /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX APR_HOOK_STRUCT( APR_HOOK_LINK(expr_lookup) ) AP_IMPLEMENT_HOOK_RUN_FIRST(int, expr_lookup, (ap_expr_lookup_parms *parms), (parms), DECLINED) #define LOG_MARK(info) __FILE__, __LINE__, (info)->module_index static const char *ap_expr_eval_string_func(ap_expr_eval_ctx_t *ctx, const ap_expr_t *info, const ap_expr_t *args); static const char *ap_expr_eval_re_backref(ap_expr_eval_ctx_t *ctx, unsigned int n); static const char *ap_expr_eval_var(ap_expr_eval_ctx_t *ctx, ap_expr_var_func_t *func, const void *data); /* define AP_EXPR_DEBUG to log the parse tree when parsing an expression */ #ifdef AP_EXPR_DEBUG static void expr_dump_tree(const ap_expr_t *e, const server_rec *s, int loglevel, int indent); #endif /* * To reduce counting overhead, we only count calls to * ap_expr_eval_word() and ap_expr_eval(). The max number of * stack frames is larger by some factor. */ #define AP_EXPR_MAX_RECURSION 20 static int inc_rec(ap_expr_eval_ctx_t *ctx) { if (ctx->reclvl < AP_EXPR_MAX_RECURSION) { ctx->reclvl++; return 0; } *ctx->err = "Recursion limit reached"; /* short circuit further evaluation */ ctx->reclvl = INT_MAX; return 1; } static const char *ap_expr_eval_word(ap_expr_eval_ctx_t *ctx, const ap_expr_t *node) { const char *result = ""; if (inc_rec(ctx)) return result; switch (node->node_op) { case op_Digit: case op_String: result = node->node_arg1; break; case op_Var: result = ap_expr_eval_var(ctx, (ap_expr_var_func_t *)node->node_arg1, node->node_arg2); break; case op_Concat: if (((ap_expr_t *)node->node_arg2)->node_op != op_Concat && ((ap_expr_t *)node->node_arg1)->node_op != op_Concat) { const char *s1 = ap_expr_eval_word(ctx, node->node_arg1); const char *s2 = ap_expr_eval_word(ctx, node->node_arg2); if (!*s1) result = s2; else if (!*s2) result = s1; else result = apr_pstrcat(ctx->p, s1, s2, NULL); } else if (((ap_expr_t *)node->node_arg1)->node_op == op_Concat) { const ap_expr_t *nodep = node; int n; int i = 1; struct iovec *vec; do { nodep = nodep->node_arg1; i++; } while (nodep->node_op == op_Concat); vec = apr_palloc(ctx->p, i * sizeof(struct iovec)); n = i; nodep = node; i--; do { vec[i].iov_base = (void *)ap_expr_eval_word(ctx, nodep->node_arg2); vec[i].iov_len = strlen(vec[i].iov_base); i--; nodep = nodep->node_arg1; } while (nodep->node_op == op_Concat); vec[i].iov_base = (void *)ap_expr_eval_word(ctx, nodep); vec[i].iov_len = strlen(vec[i].iov_base); result = apr_pstrcatv(ctx->p, vec, n, NULL); } else { const ap_expr_t *nodep = node; int i = 1; struct iovec *vec; do { nodep = nodep->node_arg2; i++; } while (nodep->node_op == op_Concat); vec = apr_palloc(ctx->p, i * sizeof(struct iovec)); nodep = node; i = 0; do { vec[i].iov_base = (void *)ap_expr_eval_word(ctx, nodep->node_arg1); vec[i].iov_len = strlen(vec[i].iov_base); i++; nodep = nodep->node_arg2; } while (nodep->node_op == op_Concat); vec[i].iov_base = (void *)ap_expr_eval_word(ctx, nodep); vec[i].iov_len = strlen(vec[i].iov_base); i++; result = apr_pstrcatv(ctx->p, vec, i, NULL); } break; case op_StringFuncCall: { const ap_expr_t *info = node->node_arg1; const ap_expr_t *args = node->node_arg2; result = ap_expr_eval_string_func(ctx, info, args); break; } case op_RegexBackref: { const unsigned int *np = node->node_arg1; result = ap_expr_eval_re_backref(ctx, *np); break; } default: *ctx->err = "Internal evaluation error: Unknown word expression node"; break; } if (!result) result = ""; ctx->reclvl--; return result; } static const char *ap_expr_eval_var(ap_expr_eval_ctx_t *ctx, ap_expr_var_func_t *func, const void *data) { AP_DEBUG_ASSERT(func != NULL); AP_DEBUG_ASSERT(data != NULL); return (*func)(ctx, data); } static const char *ap_expr_eval_re_backref(ap_expr_eval_ctx_t *ctx, unsigned int n) { int len; if (!ctx->re_pmatch || !ctx->re_source || !*ctx->re_source || **ctx->re_source == '\0' || ctx->re_nmatch < n + 1) return ""; len = ctx->re_pmatch[n].rm_eo - ctx->re_pmatch[n].rm_so; if (len == 0) return ""; return apr_pstrndup(ctx->p, *ctx->re_source + ctx->re_pmatch[n].rm_so, len); } static const char *ap_expr_eval_string_func(ap_expr_eval_ctx_t *ctx, const ap_expr_t *info, const ap_expr_t *arg) { ap_expr_string_func_t *func = (ap_expr_string_func_t *)info->node_arg1; const void *data = info->node_arg2; AP_DEBUG_ASSERT(info->node_op == op_StringFuncInfo); AP_DEBUG_ASSERT(func != NULL); AP_DEBUG_ASSERT(data != NULL); return (*func)(ctx, data, ap_expr_eval_word(ctx, arg)); } static int intstrcmp(const char *s1, const char *s2) { apr_int64_t i1 = apr_atoi64(s1); apr_int64_t i2 = apr_atoi64(s2); if (i1 < i2) return -1; else if (i1 == i2) return 0; else return 1; } static int ap_expr_eval_comp(ap_expr_eval_ctx_t *ctx, const ap_expr_t *node) { const ap_expr_t *e1 = node->node_arg1; const ap_expr_t *e2 = node->node_arg2; switch (node->node_op) { case op_EQ: return (intstrcmp(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) == 0); case op_NE: return (intstrcmp(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) != 0); case op_LT: return (intstrcmp(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) < 0); case op_LE: return (intstrcmp(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) <= 0); case op_GT: return (intstrcmp(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) > 0); case op_GE: return (intstrcmp(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) >= 0); case op_STR_EQ: return (strcmp(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) == 0); case op_STR_NE: return (strcmp(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) != 0); case op_STR_LT: return (strcmp(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) < 0); case op_STR_LE: return (strcmp(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) <= 0); case op_STR_GT: return (strcmp(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) > 0); case op_STR_GE: return (strcmp(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) >= 0); case op_IN: { const char *needle = ap_expr_eval_word(ctx, e1); if (e2->node_op == op_ListElement) { do { const ap_expr_t *val = e2->node_arg1; AP_DEBUG_ASSERT(e2->node_op == op_ListElement); if (strcmp(needle, ap_expr_eval_word(ctx, val)) == 0) return 1; e2 = e2->node_arg2; } while (e2 != NULL); } else if (e2->node_op == op_ListFuncCall) { const ap_expr_t *info = e2->node_arg1; const ap_expr_t *arg = e2->node_arg2; ap_expr_list_func_t *func = (ap_expr_list_func_t *)info->node_arg1; apr_array_header_t *haystack; AP_DEBUG_ASSERT(func != NULL); AP_DEBUG_ASSERT(info->node_op == op_ListFuncInfo); haystack = (*func)(ctx, info->node_arg2, ap_expr_eval_word(ctx, arg)); if (haystack == NULL) { return 0; } if (ap_array_str_contains(haystack, needle)) { return 1; } } return 0; } case op_REG: case op_NRE: { const char *word = ap_expr_eval_word(ctx, e1); const ap_regex_t *regex = e2->node_arg1; int result; /* * $0 ... $9 may contain stuff the user wants to keep. Therefore * we only set them if there are capturing parens in the regex. */ if (regex->re_nsub > 0) { result = (0 == ap_regexec(regex, word, ctx->re_nmatch, ctx->re_pmatch, 0)); *ctx->re_source = result ? word : NULL; } else { result = (0 == ap_regexec(regex, word, 0, NULL, 0)); } if (node->node_op == op_REG) return result; else return !result; } default: *ctx->err = "Internal evaluation error: Unknown comp expression node"; return -1; } } /* combined string/int comparison for compatibility with ssl_expr */ static int strcmplex(const char *str1, const char *str2) { int i, n1, n2; if (str1 == NULL) return -1; if (str2 == NULL) return +1; n1 = strlen(str1); n2 = strlen(str2); if (n1 > n2) return 1; if (n1 < n2) return -1; for (i = 0; i < n1; i++) { if (str1[i] > str2[i]) return 1; if (str1[i] < str2[i]) return -1; } return 0; } static int ssl_expr_eval_comp(ap_expr_eval_ctx_t *ctx, const ap_expr_t *node) { const ap_expr_t *e1 = node->node_arg1; const ap_expr_t *e2 = node->node_arg2; switch (node->node_op) { case op_EQ: case op_STR_EQ: return (strcmplex(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) == 0); case op_NE: case op_STR_NE: return (strcmplex(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) != 0); case op_LT: case op_STR_LT: return (strcmplex(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) < 0); case op_LE: case op_STR_LE: return (strcmplex(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) <= 0); case op_GT: case op_STR_GT: return (strcmplex(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) > 0); case op_GE: case op_STR_GE: return (strcmplex(ap_expr_eval_word(ctx, e1), ap_expr_eval_word(ctx, e2)) >= 0); default: return ap_expr_eval_comp(ctx, node); } } AP_DECLARE_NONSTD(int) ap_expr_lookup_default(ap_expr_lookup_parms *parms) { return ap_run_expr_lookup(parms); } AP_DECLARE(const char *) ap_expr_parse(apr_pool_t *pool, apr_pool_t *ptemp, ap_expr_info_t *info, const char *expr, ap_expr_lookup_fn_t *lookup_fn) { ap_expr_parse_ctx_t ctx; int rc; ctx.pool = pool; ctx.ptemp = ptemp; ctx.inputbuf = expr; ctx.inputlen = strlen(expr); ctx.inputptr = ctx.inputbuf; ctx.expr = NULL; ctx.error = NULL; /* generic bison error message (XXX: usually not very useful, should be axed) */ ctx.error2 = NULL; /* additional error message */ ctx.flags = info->flags; ctx.scan_del = '\0'; ctx.scan_buf[0] = '\0'; ctx.scan_ptr = ctx.scan_buf; ctx.lookup_fn = lookup_fn ? lookup_fn : ap_expr_lookup_default; ctx.at_start = 1; ap_expr_yylex_init(&ctx.scanner); ap_expr_yyset_extra(&ctx, ctx.scanner); rc = ap_expr_yyparse(&ctx); ap_expr_yylex_destroy(ctx.scanner); if (ctx.error) { if (ctx.error2) return apr_psprintf(pool, "%s: %s", ctx.error, ctx.error2); else return ctx.error; } else if (ctx.error2) { return ctx.error2; } if (rc) /* XXX can this happen? */ return "syntax error"; #ifdef AP_EXPR_DEBUG if (ctx.expr) expr_dump_tree(ctx.expr, NULL, APLOG_NOTICE, 2); #endif info->root_node = ctx.expr; return NULL; } AP_DECLARE(ap_expr_info_t*) ap_expr_parse_cmd_mi(const cmd_parms *cmd, const char *expr, unsigned int flags, const char **err, ap_expr_lookup_fn_t *lookup_fn, int module_index) { ap_expr_info_t *info = apr_pcalloc(cmd->pool, sizeof(ap_expr_info_t)); info->filename = cmd->directive->filename; info->line_number = cmd->directive->line_num; info->flags = flags; info->module_index = module_index; *err = ap_expr_parse(cmd->pool, cmd->temp_pool, info, expr, lookup_fn); if (*err) return NULL; return info; } ap_expr_t *ap_expr_make(ap_expr_node_op_e op, const void *a1, const void *a2, ap_expr_parse_ctx_t *ctx) { ap_expr_t *node = apr_palloc(ctx->pool, sizeof(ap_expr_t)); node->node_op = op; node->node_arg1 = a1; node->node_arg2 = a2; return node; } static ap_expr_t *ap_expr_info_make(int type, const char *name, ap_expr_parse_ctx_t *ctx, const ap_expr_t *arg) { ap_expr_t *info = apr_palloc(ctx->pool, sizeof(ap_expr_t)); ap_expr_lookup_parms parms; parms.type = type; parms.flags = ctx->flags; parms.pool = ctx->pool; parms.ptemp = ctx->ptemp; parms.name = name; parms.func = &info->node_arg1; parms.data = &info->node_arg2; parms.err = &ctx->error2; parms.arg = (arg && arg->node_op == op_String) ? arg->node_arg1 : NULL; if (ctx->lookup_fn(&parms) != OK) return NULL; return info; } ap_expr_t *ap_expr_str_func_make(const char *name, const ap_expr_t *arg, ap_expr_parse_ctx_t *ctx) { ap_expr_t *info = ap_expr_info_make(AP_EXPR_FUNC_STRING, name, ctx, arg); if (!info) return NULL; info->node_op = op_StringFuncInfo; return ap_expr_make(op_StringFuncCall, info, arg, ctx); } ap_expr_t *ap_expr_list_func_make(const char *name, const ap_expr_t *arg, ap_expr_parse_ctx_t *ctx) { ap_expr_t *info = ap_expr_info_make(AP_EXPR_FUNC_LIST, name, ctx, arg); if (!info) return NULL; info->node_op = op_ListFuncInfo; return ap_expr_make(op_ListFuncCall, info, arg, ctx); } ap_expr_t *ap_expr_unary_op_make(const char *name, const ap_expr_t *arg, ap_expr_parse_ctx_t *ctx) { ap_expr_t *info = ap_expr_info_make(AP_EXPR_FUNC_OP_UNARY, name, ctx, arg); if (!info) return NULL; info->node_op = op_UnaryOpInfo; return ap_expr_make(op_UnaryOpCall, info, arg, ctx); } ap_expr_t *ap_expr_binary_op_make(const char *name, const ap_expr_t *arg1, const ap_expr_t *arg2, ap_expr_parse_ctx_t *ctx) { ap_expr_t *args; ap_expr_t *info = ap_expr_info_make(AP_EXPR_FUNC_OP_BINARY, name, ctx, arg2); if (!info) return NULL; info->node_op = op_BinaryOpInfo; args = ap_expr_make(op_BinaryOpArgs, arg1, arg2, ctx); return ap_expr_make(op_BinaryOpCall, info, args, ctx); } ap_expr_t *ap_expr_var_make(const char *name, ap_expr_parse_ctx_t *ctx) { ap_expr_t *node = ap_expr_info_make(AP_EXPR_FUNC_VAR, name, ctx, NULL); if (!node) return NULL; node->node_op = op_Var; return node; } #ifdef AP_EXPR_DEBUG #define MARK APLOG_MARK,loglevel,0,s #define DUMP_E_E(op, e1, e2) \ do { ap_log_error(MARK,"%*s%s: %pp %pp", indent, " ", op, e1, e2); \ if (e1) expr_dump_tree(e1, s, loglevel, indent + 2); \ if (e2) expr_dump_tree(e2, s, loglevel, indent + 2); \ } while (0) #define DUMP_S_E(op, s1, e1) \ do { ap_log_error(MARK,"%*s%s: '%s' %pp", indent, " ", op, (char *)s1, e1); \ if (e1) expr_dump_tree(e1, s, loglevel, indent + 2); \ } while (0) #define DUMP_S_P(op, s1, p1) \ ap_log_error(MARK,"%*s%s: '%s' %pp", indent, " ", op, (char *)s1, p1); #define DUMP_P_P(op, p1, p2) \ ap_log_error(MARK,"%*s%s: %pp %pp", indent, " ", op, p1, p2); #define DUMP_S_S(op, s1, s2) \ ap_log_error(MARK,"%*s%s: '%s' '%s'", indent, " ", op, (char *)s1, (char *)s2) #define DUMP_P(op, p1) \ ap_log_error(MARK,"%*s%s: %pp", indent, " ", op, p1); #define DUMP_IP(op, p1) \ ap_log_error(MARK,"%*s%s: %d", indent, " ", op, *(int *)p1); #define DUMP_S(op, s1) \ ap_log_error(MARK,"%*s%s: '%s'", indent, " ", op, (char *)s1) #define CASE_OP(op) case op: name = #op ; break; static void expr_dump_tree(const ap_expr_t *e, const server_rec *s, int loglevel, int indent) { switch (e->node_op) { /* no arg */ case op_NOP: case op_True: case op_False: { char *name; switch (e->node_op) { CASE_OP(op_NOP); CASE_OP(op_True); CASE_OP(op_False); default: ap_assert(0); } ap_log_error(MARK, "%*s%s", indent, " ", name); } break; /* arg1: string, arg2: expr */ case op_UnaryOpCall: case op_BinaryOpCall: case op_BinaryOpArgs: { char *name; switch (e->node_op) { CASE_OP(op_BinaryOpCall); CASE_OP(op_UnaryOpCall); CASE_OP(op_BinaryOpArgs); default: ap_assert(0); } DUMP_S_E(name, e->node_arg1, e->node_arg2); } break; /* arg1: expr, arg2: expr */ case op_Comp: case op_Not: case op_Or: case op_And: case op_EQ: case op_NE: case op_LT: case op_LE: case op_GT: case op_GE: case op_STR_EQ: case op_STR_NE: case op_STR_LT: case op_STR_LE: case op_STR_GT: case op_STR_GE: case op_IN: case op_REG: case op_NRE: case op_Concat: case op_StringFuncCall: case op_ListFuncCall: case op_ListElement: { char *name; switch (e->node_op) { CASE_OP(op_Comp); CASE_OP(op_Not); CASE_OP(op_Or); CASE_OP(op_And); CASE_OP(op_EQ); CASE_OP(op_NE); CASE_OP(op_LT); CASE_OP(op_LE); CASE_OP(op_GT); CASE_OP(op_GE); CASE_OP(op_STR_EQ); CASE_OP(op_STR_NE); CASE_OP(op_STR_LT); CASE_OP(op_STR_LE); CASE_OP(op_STR_GT); CASE_OP(op_STR_GE); CASE_OP(op_IN); CASE_OP(op_REG); CASE_OP(op_NRE); CASE_OP(op_Concat); CASE_OP(op_StringFuncCall); CASE_OP(op_ListFuncCall); CASE_OP(op_ListElement); default: ap_assert(0); } DUMP_E_E(name, e->node_arg1, e->node_arg2); } break; /* arg1: string */ case op_Digit: case op_String: { char *name; switch (e->node_op) { CASE_OP(op_Digit); CASE_OP(op_String); default: ap_assert(0); } DUMP_S(name, e->node_arg1); } break; /* arg1: pointer, arg2: pointer */ case op_Var: case op_StringFuncInfo: case op_UnaryOpInfo: case op_BinaryOpInfo: case op_ListFuncInfo: { char *name; switch (e->node_op) { CASE_OP(op_Var); CASE_OP(op_StringFuncInfo); CASE_OP(op_UnaryOpInfo); CASE_OP(op_BinaryOpInfo); CASE_OP(op_ListFuncInfo); default: ap_assert(0); } DUMP_P_P(name, e->node_arg1, e->node_arg2); } break; /* arg1: pointer */ case op_Regex: DUMP_P("op_Regex", e->node_arg1); break; /* arg1: pointer to int */ case op_RegexBackref: DUMP_IP("op_RegexBackref", e->node_arg1); break; default: ap_log_error(MARK, "%*sERROR: INVALID OP %d", indent, " ", e->node_op); break; } } #endif /* AP_EXPR_DEBUG */ static int ap_expr_eval_unary_op(ap_expr_eval_ctx_t *ctx, const ap_expr_t *info, const ap_expr_t *arg) { ap_expr_op_unary_t *op_func = (ap_expr_op_unary_t *)info->node_arg1; const void *data = info->node_arg2; AP_DEBUG_ASSERT(info->node_op == op_UnaryOpInfo); AP_DEBUG_ASSERT(op_func != NULL); AP_DEBUG_ASSERT(data != NULL); return (*op_func)(ctx, data, ap_expr_eval_word(ctx, arg)); } static int ap_expr_eval_binary_op(ap_expr_eval_ctx_t *ctx, const ap_expr_t *info, const ap_expr_t *args) { ap_expr_op_binary_t *op_func = (ap_expr_op_binary_t *)info->node_arg1; const void *data = info->node_arg2; const ap_expr_t *a1 = args->node_arg1; const ap_expr_t *a2 = args->node_arg2; AP_DEBUG_ASSERT(info->node_op == op_BinaryOpInfo); AP_DEBUG_ASSERT(args->node_op == op_BinaryOpArgs); AP_DEBUG_ASSERT(op_func != NULL); AP_DEBUG_ASSERT(data != NULL); return (*op_func)(ctx, data, ap_expr_eval_word(ctx, a1), ap_expr_eval_word(ctx, a2)); } static int ap_expr_eval(ap_expr_eval_ctx_t *ctx, const ap_expr_t *node) { const ap_expr_t *e1 = node->node_arg1; const ap_expr_t *e2 = node->node_arg2; int result = FALSE; if (inc_rec(ctx)) return result; while (1) { switch (node->node_op) { case op_True: result ^= TRUE; goto out; case op_False: result ^= FALSE; goto out; case op_Not: result = !result; node = e1; break; case op_Or: do { if (e1->node_op == op_Not) { if (!ap_expr_eval(ctx, e1->node_arg1)) { result ^= TRUE; goto out; } } else { if (ap_expr_eval(ctx, e1)) { result ^= TRUE; goto out; } } node = node->node_arg2; e1 = node->node_arg1; } while (node->node_op == op_Or); break; case op_And: do { if (e1->node_op == op_Not) { if (ap_expr_eval(ctx, e1->node_arg1)) { result ^= FALSE; goto out; } } else { if (!ap_expr_eval(ctx, e1)) { result ^= FALSE; goto out; } } node = node->node_arg2; e1 = node->node_arg1; } while (node->node_op == op_And); break; case op_UnaryOpCall: result ^= ap_expr_eval_unary_op(ctx, e1, e2); goto out; case op_BinaryOpCall: result ^= ap_expr_eval_binary_op(ctx, e1, e2); goto out; case op_Comp: if (ctx->info->flags & AP_EXPR_FLAG_SSL_EXPR_COMPAT) result ^= ssl_expr_eval_comp(ctx, e1); else result ^= ap_expr_eval_comp(ctx, e1); goto out; default: *ctx->err = "Internal evaluation error: Unknown expression node"; goto out; } e1 = node->node_arg1; e2 = node->node_arg2; } out: ctx->reclvl--; return result; } AP_DECLARE(int) ap_expr_exec(request_rec *r, const ap_expr_info_t *info, const char **err) { return ap_expr_exec_re(r, info, 0, NULL, NULL, err); } AP_DECLARE(int) ap_expr_exec_ctx(ap_expr_eval_ctx_t *ctx) { int rc; AP_DEBUG_ASSERT(ctx->p != NULL); /* XXX: allow r, c == NULL */ AP_DEBUG_ASSERT(ctx->r != NULL); AP_DEBUG_ASSERT(ctx->c != NULL); AP_DEBUG_ASSERT(ctx->s != NULL); AP_DEBUG_ASSERT(ctx->err != NULL); AP_DEBUG_ASSERT(ctx->info != NULL); if (ctx->re_pmatch) { AP_DEBUG_ASSERT(ctx->re_source != NULL); AP_DEBUG_ASSERT(ctx->re_nmatch > 0); } ctx->reclvl = 0; *ctx->err = NULL; if (ctx->info->flags & AP_EXPR_FLAG_STRING_RESULT) { *ctx->result_string = ap_expr_eval_word(ctx, ctx->info->root_node); if (*ctx->err != NULL) { ap_log_rerror(LOG_MARK(ctx->info), APLOG_ERR, 0, ctx->r, "Evaluation of expression from %s:%d failed: %s", ctx->info->filename, ctx->info->line_number, *ctx->err); return -1; } else { ap_log_rerror(LOG_MARK(ctx->info), APLOG_TRACE4, 0, ctx->r, "Evaluation of string expression from %s:%d gave: %s", ctx->info->filename, ctx->info->line_number, *ctx->result_string); return 1; } } else { rc = ap_expr_eval(ctx, ctx->info->root_node); if (*ctx->err != NULL) { ap_log_rerror(LOG_MARK(ctx->info), APLOG_ERR, 0, ctx->r, "Evaluation of expression from %s:%d failed: %s", ctx->info->filename, ctx->info->line_number, *ctx->err); return -1; } else { rc = rc ? 1 : 0; ap_log_rerror(LOG_MARK(ctx->info), APLOG_TRACE4, 0, ctx->r, "Evaluation of expression from %s:%d gave: %d", ctx->info->filename, ctx->info->line_number, rc); if (ctx->vary_this && *ctx->vary_this) apr_table_merge(ctx->r->headers_out, "Vary", *ctx->vary_this); return rc; } } } AP_DECLARE(int) ap_expr_exec_re(request_rec *r, const ap_expr_info_t *info, apr_size_t nmatch, ap_regmatch_t *pmatch, const char **source, const char **err) { ap_expr_eval_ctx_t ctx; int dont_vary = (info->flags & AP_EXPR_FLAG_DONT_VARY); const char *tmp_source = NULL, *vary_this = NULL; ap_regmatch_t tmp_pmatch[AP_MAX_REG_MATCH]; AP_DEBUG_ASSERT((info->flags & AP_EXPR_FLAG_STRING_RESULT) == 0); ctx.r = r; ctx.c = r->connection; ctx.s = r->server; ctx.p = r->pool; ctx.err = err; ctx.info = info; ctx.re_nmatch = nmatch; ctx.re_pmatch = pmatch; ctx.re_source = source; ctx.vary_this = dont_vary ? NULL : &vary_this; ctx.data = NULL; if (!pmatch) { ctx.re_nmatch = AP_MAX_REG_MATCH; ctx.re_pmatch = tmp_pmatch; ctx.re_source = &tmp_source; } return ap_expr_exec_ctx(&ctx); } AP_DECLARE(const char *) ap_expr_str_exec_re(request_rec *r, const ap_expr_info_t *info, apr_size_t nmatch, ap_regmatch_t *pmatch, const char **source, const char **err) { ap_expr_eval_ctx_t ctx; int dont_vary, rc; const char *tmp_source, *vary_this; ap_regmatch_t tmp_pmatch[AP_MAX_REG_MATCH]; const char *result; AP_DEBUG_ASSERT(info->flags & AP_EXPR_FLAG_STRING_RESULT); if (info->root_node->node_op == op_String) { /* short-cut for constant strings */ *err = NULL; return (const char *)info->root_node->node_arg1; } tmp_source = NULL; vary_this = NULL; dont_vary = (info->flags & AP_EXPR_FLAG_DONT_VARY); ctx.r = r; ctx.c = r->connection; ctx.s = r->server; ctx.p = r->pool; ctx.err = err; ctx.info = info; ctx.re_nmatch = nmatch; ctx.re_pmatch = pmatch; ctx.re_source = source; ctx.vary_this = dont_vary ? NULL : &vary_this; ctx.data = NULL; ctx.result_string = &result; if (!pmatch) { ctx.re_nmatch = AP_MAX_REG_MATCH; ctx.re_pmatch = tmp_pmatch; ctx.re_source = &tmp_source; } rc = ap_expr_exec_ctx(&ctx); if (rc > 0) return result; else if (rc < 0) return NULL; else ap_assert(0); /* Not reached */ return NULL; } AP_DECLARE(const char *) ap_expr_str_exec(request_rec *r, const ap_expr_info_t *info, const char **err) { return ap_expr_str_exec_re(r, info, 0, NULL, NULL, err); } static void add_vary(ap_expr_eval_ctx_t *ctx, const char *name) { if (!ctx->vary_this) return; if (*ctx->vary_this) { *ctx->vary_this = apr_pstrcat(ctx->p, *ctx->vary_this, ", ", name, NULL); } else { *ctx->vary_this = name; } } static const char *req_table_func(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { const char *name = (const char *)data; apr_table_t *t; if (!ctx->r) return ""; if (name[2] == 's') { /* resp */ /* Try r->headers_out first, fall back on err_headers_out. */ const char *v = apr_table_get(ctx->r->headers_out, arg); if (v) { return v; } t = ctx->r->err_headers_out; } else if (name[0] == 'n') /* notes */ t = ctx->r->notes; else if (name[3] == 'e') /* reqenv */ t = ctx->r->subprocess_env; else if (name[3] == '_') /* req_novary */ t = ctx->r->headers_in; else { /* req, http */ t = ctx->r->headers_in; /* Skip the 'Vary: Host' header combination * as indicated in rfc7231 section-7.1.4 */ if (strcasecmp(arg, "Host")){ add_vary(ctx, arg); } } return apr_table_get(t, arg); } static const char *env_func(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { const char *res; /* this order is for ssl_expr compatibility */ if (ctx->r) { if ((res = apr_table_get(ctx->r->notes, arg)) != NULL) return res; else if ((res = apr_table_get(ctx->r->subprocess_env, arg)) != NULL) return res; } return getenv(arg); } static const char *osenv_func(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { return getenv(arg); } static const char *tolower_func(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { char *result = apr_pstrdup(ctx->p, arg); ap_str_tolower(result); return result; } static const char *toupper_func(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { char *result = apr_pstrdup(ctx->p, arg); ap_str_toupper(result); return result; } static const char *escape_func(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { return ap_escape_uri(ctx->p, arg); } static const char *base64_func(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { return ap_pbase64encode(ctx->p, (char *)arg); } static const char *unbase64_func(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { return ap_pbase64decode(ctx->p, arg); } static const char *sha1_func(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { apr_sha1_ctx_t context; apr_byte_t sha1[APR_SHA1_DIGESTSIZE]; char *out; out = apr_palloc(ctx->p, APR_SHA1_DIGESTSIZE*2+1); apr_sha1_init(&context); apr_sha1_update(&context, arg, strlen(arg)); apr_sha1_final(sha1, &context); ap_bin2hex(sha1, APR_SHA1_DIGESTSIZE, out); return out; } static const char *md5_func(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { return ap_md5(ctx->p, (const unsigned char *)arg); } #define MAX_FILE_SIZE 10*1024*1024 static const char *file_func(ap_expr_eval_ctx_t *ctx, const void *data, char *arg) { apr_file_t *fp; char *buf; apr_off_t offset; apr_size_t len; apr_finfo_t finfo; if (apr_file_open(&fp, arg, APR_READ|APR_BUFFERED, APR_OS_DEFAULT, ctx->p) != APR_SUCCESS) { *ctx->err = apr_psprintf(ctx->p, "Cannot open file %s", arg); return ""; } apr_file_info_get(&finfo, APR_FINFO_SIZE, fp); if (finfo.size > MAX_FILE_SIZE) { *ctx->err = apr_psprintf(ctx->p, "File %s too large", arg); apr_file_close(fp); return ""; } len = (apr_size_t)finfo.size; if (len == 0) { apr_file_close(fp); return ""; } else { if ((buf = (char *)apr_palloc(ctx->p, sizeof(char)*(len+1))) == NULL) { *ctx->err = "Cannot allocate memory"; apr_file_close(fp); return ""; } offset = 0; apr_file_seek(fp, APR_SET, &offset); if (apr_file_read(fp, buf, &len) != APR_SUCCESS) { *ctx->err = apr_psprintf(ctx->p, "Cannot read from file %s", arg); apr_file_close(fp); return ""; } buf[len] = '\0'; } apr_file_close(fp); return buf; } static const char *filesize_func(ap_expr_eval_ctx_t *ctx, const void *data, char *arg) { apr_finfo_t sb; if (apr_stat(&sb, arg, APR_FINFO_MIN, ctx->p) == APR_SUCCESS && sb.filetype == APR_REG && sb.size > 0) return apr_psprintf(ctx->p, "%" APR_OFF_T_FMT, sb.size); else return "0"; } static const char *unescape_func(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { char *result = apr_pstrdup(ctx->p, arg); int ret = ap_unescape_url_keep2f(result, 0); if (ret == OK) return result; ap_log_rerror(LOG_MARK(ctx->info), APLOG_DEBUG, 0, ctx->r, APLOGNO(00538) "%s %% escape in unescape('%s') at %s:%d", ret == HTTP_BAD_REQUEST ? "Bad" : "Forbidden", arg, ctx->info->filename, ctx->info->line_number); return ""; } static int op_nz(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { const char *name = (const char *)data; if (name[0] == 'z') return (arg[0] == '\0'); else return (arg[0] != '\0'); } static int op_file_min(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { apr_finfo_t sb; const char *name = (const char *)data; if (apr_stat(&sb, arg, APR_FINFO_MIN, ctx->p) != APR_SUCCESS) return FALSE; switch (name[0]) { case 'd': return (sb.filetype == APR_DIR); case 'e': return TRUE; case 'f': return (sb.filetype == APR_REG); case 's': return (sb.filetype == APR_REG && sb.size > 0); default: ap_assert(0); } return FALSE; } static int op_file_link(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { #if !defined(OS2) apr_finfo_t sb; if (apr_stat(&sb, arg, APR_FINFO_MIN | APR_FINFO_LINK, ctx->p) == APR_SUCCESS && sb.filetype == APR_LNK) { return TRUE; } #endif return FALSE; } static int op_file_xbit(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { apr_finfo_t sb; if (apr_stat(&sb, arg, APR_FINFO_PROT| APR_FINFO_LINK, ctx->p) == APR_SUCCESS && (sb.protection & (APR_UEXECUTE | APR_GEXECUTE | APR_WEXECUTE))) { return TRUE; } return FALSE; } static int op_url_subr(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { int rc = FALSE; request_rec *rsub, *r = ctx->r; if (!r) return FALSE; /* avoid some infinite recursions */ if (r->main && r->main->uri && r->uri && strcmp(r->main->uri, r->uri) == 0) return FALSE; rsub = ap_sub_req_lookup_uri(arg, r, NULL); if (rsub->status < 400) { rc = TRUE; } ap_log_rerror(LOG_MARK(ctx->info), APLOG_TRACE5, 0, r, "Subrequest for -U %s at %s:%d gave status: %d", arg, ctx->info->filename, ctx->info->line_number, rsub->status); ap_destroy_sub_req(rsub); return rc; } static int op_file_subr(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { int rc = FALSE; apr_finfo_t sb; request_rec *rsub, *r = ctx->r; if (!r) return FALSE; rsub = ap_sub_req_lookup_file(arg, r, NULL); if (rsub->status < 300 && /* double-check that file exists since default result is 200 */ apr_stat(&sb, rsub->filename, APR_FINFO_MIN, ctx->p) == APR_SUCCESS) { rc = TRUE; } ap_log_rerror(LOG_MARK(ctx->info), APLOG_TRACE5, 0, r, "Subrequest for -F %s at %s:%d gave status: %d", arg, ctx->info->filename, ctx->info->line_number, rsub->status); ap_destroy_sub_req(rsub); return rc; } APR_DECLARE_OPTIONAL_FN(int, ssl_is_https, (conn_rec *)); static APR_OPTIONAL_FN_TYPE(ssl_is_https) *is_https = NULL; APR_DECLARE_OPTIONAL_FN(int, http2_is_h2, (conn_rec *)); static APR_OPTIONAL_FN_TYPE(http2_is_h2) *is_http2 = NULL; static const char *conn_var_names[] = { "HTTPS", /* 0 */ "IPV6", /* 1 */ "CONN_LOG_ID", /* 2 */ "CONN_REMOTE_ADDR", /* 3 */ "HTTP2", /* 4 */ NULL }; static const char *conn_var_fn(ap_expr_eval_ctx_t *ctx, const void *data) { int index = ((const char **)data - conn_var_names); conn_rec *c = ctx->c; if (!c) return ""; switch (index) { case 0: if (is_https && is_https(c)) return "on"; else return "off"; case 1: #if APR_HAVE_IPV6 { apr_sockaddr_t *addr = c->client_addr; if (addr->family == AF_INET6 && !IN6_IS_ADDR_V4MAPPED((struct in6_addr *)addr->ipaddr_ptr)) return "on"; else return "off"; } #else return "off"; #endif case 2: return c->log_id; case 3: return c->client_ip; case 4: if (is_http2 && is_http2(c)) return "on"; else return "off"; default: ap_assert(0); return NULL; } } static const char *request_var_names[] = { "REQUEST_METHOD", /* 0 */ "REQUEST_SCHEME", /* 1 */ "REQUEST_URI", /* 2 */ "REQUEST_FILENAME", /* 3 */ "REMOTE_HOST", /* 4 */ "REMOTE_IDENT", /* 5 */ "REMOTE_USER", /* 6 */ "SERVER_ADMIN", /* 7 */ "SERVER_NAME", /* 8 */ "SERVER_PORT", /* 9 */ "SERVER_PROTOCOL", /* 10 */ "SCRIPT_FILENAME", /* 11 */ "PATH_INFO", /* 12 */ "QUERY_STRING", /* 13 */ "IS_SUBREQ", /* 14 */ "DOCUMENT_ROOT", /* 15 */ "AUTH_TYPE", /* 16 */ "THE_REQUEST", /* 17 */ "CONTENT_TYPE", /* 18 */ "HANDLER", /* 19 */ "REQUEST_LOG_ID", /* 20 */ "SCRIPT_USER", /* 21 */ "SCRIPT_GROUP", /* 22 */ "DOCUMENT_URI", /* 23 */ "LAST_MODIFIED", /* 24 */ "CONTEXT_PREFIX", /* 25 */ "CONTEXT_DOCUMENT_ROOT", /* 26 */ "REQUEST_STATUS", /* 27 */ "REMOTE_ADDR", /* 28 */ "REMOTE_PORT", /* 29 */ NULL }; static const char *request_var_fn(ap_expr_eval_ctx_t *ctx, const void *data) { int index = ((const char **)data - request_var_names); request_rec *r = ctx->r; if (!r) return ""; switch (index) { case 0: return r->method; case 1: return ap_http_scheme(r); case 2: return r->uri; case 3: return r->filename; case 4: return ap_get_useragent_host(r, REMOTE_NAME, NULL); case 5: return ap_get_remote_logname(r); case 6: return r->user; case 7: return r->server->server_admin; case 8: return ap_get_server_name_for_url(r); case 9: return apr_psprintf(ctx->p, "%u", ap_get_server_port(r)); case 10: return r->protocol; case 11: return r->filename; case 12: return r->path_info; case 13: return r->args; case 14: return (r->main != NULL ? "true" : "false"); case 15: return ap_document_root(r); case 16: return r->ap_auth_type; case 17: return r->the_request; case 18: return r->content_type; case 19: return r->handler; case 20: return r->log_id; case 21: { char *result = ""; if (r->finfo.valid & APR_FINFO_USER) apr_uid_name_get(&result, r->finfo.user, ctx->p); return result; } case 22: { char *result = ""; if (r->finfo.valid & APR_FINFO_USER) apr_gid_name_get(&result, r->finfo.group, ctx->p); return result; } case 23: { const char *uri = apr_table_get(r->subprocess_env, "DOCUMENT_URI"); return uri ? uri : r->uri; } case 24: { apr_time_exp_t tm; apr_time_exp_lt(&tm, r->mtime); return apr_psprintf(ctx->p, "%02d%02d%02d%02d%02d%02d%02d", (tm.tm_year / 100) + 19, (tm.tm_year % 100), tm.tm_mon+1, tm.tm_mday, tm.tm_hour, tm.tm_min, tm.tm_sec); } case 25: return ap_context_prefix(r); case 26: return ap_context_document_root(r); case 27: return r->status ? apr_psprintf(ctx->p, "%d", r->status) : ""; case 28: return r->useragent_ip; case 29: return apr_psprintf(ctx->p, "%u", ctx->c->client_addr->port); default: ap_assert(0); return NULL; } } static const char *req_header_var_names[] = { "HTTP_USER_AGENT", /* 0 */ "HTTP_PROXY_CONNECTION", /* 1 */ "HTTP_REFERER", /* 2 */ "HTTP_COOKIE", /* 3 */ "HTTP_FORWARDED", /* 4 */ "HTTP_HOST", /* 5 */ "HTTP_ACCEPT", /* 6 */ NULL }; static const char *req_header_header_names[] = { "User-Agent", "Proxy-Connection", "Referer", "Cookie", "Forwarded", "Host", "Accept" }; static const char *req_header_var_fn(ap_expr_eval_ctx_t *ctx, const void *data) { const char **varname = (const char **)data; int index = (varname - req_header_var_names); const char *name; AP_DEBUG_ASSERT(index < 7); if (!ctx->r) return ""; name = req_header_header_names[index]; /* Skip the 'Vary: Host' header combination * as indicated in rfc7231 section-7.1.4 */ if (strcasecmp(name, "Host")){ add_vary(ctx, name); } return apr_table_get(ctx->r->headers_in, name); } static const char *misc_var_names[] = { "TIME_YEAR", /* 0 */ "TIME_MON", /* 1 */ "TIME_DAY", /* 2 */ "TIME_HOUR", /* 3 */ "TIME_MIN", /* 4 */ "TIME_SEC", /* 5 */ "TIME_WDAY", /* 6 */ "TIME", /* 7 */ "SERVER_SOFTWARE", /* 8 */ "API_VERSION", /* 9 */ NULL }; static const char *misc_var_fn(ap_expr_eval_ctx_t *ctx, const void *data) { apr_time_exp_t tm; int index = ((const char **)data - misc_var_names); apr_time_exp_lt(&tm, apr_time_now()); switch (index) { case 0: return apr_psprintf(ctx->p, "%02d%02d", (tm.tm_year / 100) + 19, tm.tm_year % 100); case 1: return apr_psprintf(ctx->p, "%02d", tm.tm_mon+1); case 2: return apr_psprintf(ctx->p, "%02d", tm.tm_mday); case 3: return apr_psprintf(ctx->p, "%02d", tm.tm_hour); case 4: return apr_psprintf(ctx->p, "%02d", tm.tm_min); case 5: return apr_psprintf(ctx->p, "%02d", tm.tm_sec); case 6: return apr_psprintf(ctx->p, "%d", tm.tm_wday); case 7: return apr_psprintf(ctx->p, "%02d%02d%02d%02d%02d%02d%02d", (tm.tm_year / 100) + 19, (tm.tm_year % 100), tm.tm_mon+1, tm.tm_mday, tm.tm_hour, tm.tm_min, tm.tm_sec); case 8: return ap_get_server_banner(); case 9: return apr_itoa(ctx->p, MODULE_MAGIC_NUMBER_MAJOR); default: ap_assert(0); } return NULL; } static int subnet_parse_arg(ap_expr_lookup_parms *parms) { apr_ipsubnet_t *subnet; const char *addr = parms->arg; const char *mask; apr_status_t ret; if (!parms->arg) { *parms->err = apr_psprintf(parms->ptemp, "-%s requires subnet/netmask as constant argument", parms->name); return !OK; } mask = ap_strchr_c(addr, '/'); if (mask) { addr = apr_pstrmemdup(parms->ptemp, addr, mask - addr); mask++; } ret = apr_ipsubnet_create(&subnet, addr, mask, parms->pool); if (ret != APR_SUCCESS) { *parms->err = "parsing of subnet/netmask failed"; return !OK; } *parms->data = subnet; return OK; } static int op_ipmatch(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg1, const char *arg2) { apr_ipsubnet_t *subnet = (apr_ipsubnet_t *)data; apr_sockaddr_t *saddr; AP_DEBUG_ASSERT(subnet != NULL); /* maybe log an error if this goes wrong? */ if (apr_sockaddr_info_get(&saddr, arg1, APR_UNSPEC, 0, 0, ctx->p) != APR_SUCCESS) return FALSE; return apr_ipsubnet_test(subnet, saddr); } static int op_R(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg1) { apr_ipsubnet_t *subnet = (apr_ipsubnet_t *)data; AP_DEBUG_ASSERT(subnet != NULL); if (!ctx->r) return FALSE; return apr_ipsubnet_test(subnet, ctx->r->useragent_addr); } static int op_T(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { switch (arg[0]) { case '\0': return FALSE; case 'o': case 'O': return strcasecmp(arg, "off") == 0 ? FALSE : TRUE; case 'n': case 'N': return strcasecmp(arg, "no") == 0 ? FALSE : TRUE; case 'f': case 'F': return strcasecmp(arg, "false") == 0 ? FALSE : TRUE; case '0': return arg[1] == '\0' ? FALSE : TRUE; default: return TRUE; } } static int op_fnmatch(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg1, const char *arg2) { return (APR_SUCCESS == apr_fnmatch(arg2, arg1, APR_FNM_PATHNAME)); } static int op_strmatch(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg1, const char *arg2) { return (APR_SUCCESS == apr_fnmatch(arg2, arg1, 0)); } static int op_strcmatch(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg1, const char *arg2) { return (APR_SUCCESS == apr_fnmatch(arg2, arg1, APR_FNM_CASE_BLIND)); } struct expr_provider_single { const void *func; const char *name; ap_expr_lookup_fn_t *arg_parsing_func; int restricted; }; struct expr_provider_multi { const void *func; const char **names; }; static const struct expr_provider_multi var_providers[] = { { misc_var_fn, misc_var_names }, { req_header_var_fn, req_header_var_names }, { request_var_fn, request_var_names }, { conn_var_fn, conn_var_names }, { NULL, NULL } }; static const struct expr_provider_single string_func_providers[] = { { osenv_func, "osenv", NULL, 0 }, { env_func, "env", NULL, 0 }, { req_table_func, "resp", NULL, 0 }, { req_table_func, "req", NULL, 0 }, /* 'http' as alias for 'req' for compatibility with ssl_expr */ { req_table_func, "http", NULL, 0 }, { req_table_func, "note", NULL, 0 }, { req_table_func, "reqenv", NULL, 0 }, { req_table_func, "req_novary", NULL, 0 }, { tolower_func, "tolower", NULL, 0 }, { toupper_func, "toupper", NULL, 0 }, { escape_func, "escape", NULL, 0 }, { unescape_func, "unescape", NULL, 0 }, { file_func, "file", NULL, 1 }, { filesize_func, "filesize", NULL, 1 }, { base64_func, "base64", NULL, 0 }, { unbase64_func, "unbase64", NULL, 0 }, { sha1_func, "sha1", NULL, 0 }, { md5_func, "md5", NULL, 0 }, { NULL, NULL, NULL} }; static const struct expr_provider_single unary_op_providers[] = { { op_nz, "n", NULL, 0 }, { op_nz, "z", NULL, 0 }, { op_R, "R", subnet_parse_arg, 0 }, { op_T, "T", NULL, 0 }, { op_file_min, "d", NULL, 1 }, { op_file_min, "e", NULL, 1 }, { op_file_min, "f", NULL, 1 }, { op_file_min, "s", NULL, 1 }, { op_file_link, "L", NULL, 1 }, { op_file_link, "h", NULL, 1 }, { op_file_xbit, "x", NULL, 1 }, { op_file_subr, "F", NULL, 0 }, { op_url_subr, "U", NULL, 0 }, { op_url_subr, "A", NULL, 0 }, { NULL, NULL, NULL } }; static const struct expr_provider_single binary_op_providers[] = { { op_ipmatch, "ipmatch", subnet_parse_arg, 0 }, { op_fnmatch, "fnmatch", NULL, 0 }, { op_strmatch, "strmatch", NULL, 0 }, { op_strcmatch, "strcmatch", NULL, 0 }, { NULL, NULL, NULL } }; static int core_expr_lookup(ap_expr_lookup_parms *parms) { switch (parms->type) { case AP_EXPR_FUNC_VAR: { const struct expr_provider_multi *prov = var_providers; while (prov->func) { const char **name = prov->names; while (*name) { if (strcasecmp(*name, parms->name) == 0) { *parms->func = prov->func; *parms->data = name; return OK; } name++; } prov++; } } break; case AP_EXPR_FUNC_STRING: case AP_EXPR_FUNC_OP_UNARY: case AP_EXPR_FUNC_OP_BINARY: { const struct expr_provider_single *prov = NULL; switch (parms->type) { case AP_EXPR_FUNC_STRING: prov = string_func_providers; break; case AP_EXPR_FUNC_OP_UNARY: prov = unary_op_providers; break; case AP_EXPR_FUNC_OP_BINARY: prov = binary_op_providers; break; default: ap_assert(0); } while (prov && prov->func) { int match; if (parms->type == AP_EXPR_FUNC_OP_UNARY) match = !strcmp(prov->name, parms->name); else match = !strcasecmp(prov->name, parms->name); if (match) { if ((parms->flags & AP_EXPR_FLAG_RESTRICTED) && prov->restricted) { *parms->err = apr_psprintf(parms->ptemp, "%s%s not available in restricted context", (parms->type == AP_EXPR_FUNC_STRING) ? "" : "-", prov->name); return !OK; } *parms->func = prov->func; if (prov->arg_parsing_func) { return prov->arg_parsing_func(parms); } else { *parms->data = prov->name; return OK; } } prov++; } } break; default: break; } return DECLINED; } static int expr_lookup_not_found(ap_expr_lookup_parms *parms) { const char *type; const char *prefix = ""; switch (parms->type) { case AP_EXPR_FUNC_VAR: type = "Variable"; break; case AP_EXPR_FUNC_STRING: type = "Function"; break; case AP_EXPR_FUNC_LIST: type = "List-returning function"; break; case AP_EXPR_FUNC_OP_UNARY: type = "Unary operator"; break; case AP_EXPR_FUNC_OP_BINARY: type = "Binary operator"; break; default: *parms->err = "Invalid expression type in expr_lookup"; return !OK; } if ( parms->type == AP_EXPR_FUNC_OP_UNARY || parms->type == AP_EXPR_FUNC_OP_BINARY) { prefix = "-"; } *parms->err = apr_psprintf(parms->ptemp, "%s '%s%s' does not exist", type, prefix, parms->name); return !OK; } static int ap_expr_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { is_https = APR_RETRIEVE_OPTIONAL_FN(ssl_is_https); is_http2 = APR_RETRIEVE_OPTIONAL_FN(http2_is_h2); apr_pool_cleanup_register(pconf, &is_https, ap_pool_cleanup_set_null, apr_pool_cleanup_null); return OK; } void ap_expr_init(apr_pool_t *p) { ap_hook_expr_lookup(core_expr_lookup, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_expr_lookup(expr_lookup_not_found, NULL, NULL, APR_HOOK_REALLY_LAST); ap_hook_post_config(ap_expr_post_config, NULL, NULL, APR_HOOK_MIDDLE); } httpd-2.4.41/server/util_filter.c0000644000000000000500000005603312656470644015255 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #define APR_WANT_STRFUNC #include "apr_want.h" #include "apr_lib.h" #include "apr_hash.h" #include "apr_strings.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "util_filter.h" /* NOTE: Apache's current design doesn't allow a pool to be passed thru, so we depend on a global to hold the correct pool */ #define FILTER_POOL apr_hook_global_pool #include "ap_hooks.h" /* for apr_hook_global_pool */ /* ** This macro returns true/false if a given filter should be inserted BEFORE ** another filter. This will happen when one of: 1) there isn't another ** filter; 2) that filter has a higher filter type (class); 3) that filter ** corresponds to a different request. */ #define INSERT_BEFORE(f, before_this) ((before_this) == NULL \ || (before_this)->frec->ftype > (f)->frec->ftype \ || (before_this)->r != (f)->r) /* Trie structure to hold the mapping from registered * filter names to filters */ /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX typedef struct filter_trie_node filter_trie_node; typedef struct { int c; filter_trie_node *child; } filter_trie_child_ptr; /* Each trie node has an array of pointers to its children. * The array is kept in sorted order so that add_any_filter() * can do a binary search */ struct filter_trie_node { ap_filter_rec_t *frec; filter_trie_child_ptr *children; int nchildren; int size; }; #define TRIE_INITIAL_SIZE 4 /* Link a trie node to its parent */ static void trie_node_link(apr_pool_t *p, filter_trie_node *parent, filter_trie_node *child, int c) { int i, j; if (parent->nchildren == parent->size) { filter_trie_child_ptr *new; parent->size *= 2; new = (filter_trie_child_ptr *)apr_palloc(p, parent->size * sizeof(filter_trie_child_ptr)); memcpy(new, parent->children, parent->nchildren * sizeof(filter_trie_child_ptr)); parent->children = new; } for (i = 0; i < parent->nchildren; i++) { if (c == parent->children[i].c) { return; } else if (c < parent->children[i].c) { break; } } for (j = parent->nchildren; j > i; j--) { parent->children[j].c = parent->children[j - 1].c; parent->children[j].child = parent->children[j - 1].child; } parent->children[i].c = c; parent->children[i].child = child; parent->nchildren++; } /* Allocate a new node for a trie. * If parent is non-NULL, link the new node under the parent node with * key 'c' (or, if an existing child node matches, return that one) */ static filter_trie_node *trie_node_alloc(apr_pool_t *p, filter_trie_node *parent, char c) { filter_trie_node *new_node; if (parent) { int i; for (i = 0; i < parent->nchildren; i++) { if (c == parent->children[i].c) { return parent->children[i].child; } else if (c < parent->children[i].c) { break; } } new_node = (filter_trie_node *)apr_palloc(p, sizeof(filter_trie_node)); trie_node_link(p, parent, new_node, c); } else { /* No parent node */ new_node = (filter_trie_node *)apr_palloc(p, sizeof(filter_trie_node)); } new_node->frec = NULL; new_node->nchildren = 0; new_node->size = TRIE_INITIAL_SIZE; new_node->children = (filter_trie_child_ptr *)apr_palloc(p, new_node->size * sizeof(filter_trie_child_ptr)); return new_node; } static filter_trie_node *registered_output_filters = NULL; static filter_trie_node *registered_input_filters = NULL; static apr_status_t filter_cleanup(void *ctx) { registered_output_filters = NULL; registered_input_filters = NULL; return APR_SUCCESS; } static ap_filter_rec_t *get_filter_handle(const char *name, const filter_trie_node *filter_set) { if (filter_set) { const char *n; const filter_trie_node *node; node = filter_set; for (n = name; *n; n++) { int start, end; start = 0; end = node->nchildren - 1; while (end >= start) { int middle = (end + start) / 2; char ch = node->children[middle].c; if (*n == ch) { node = node->children[middle].child; break; } else if (*n < ch) { end = middle - 1; } else { start = middle + 1; } } if (end < start) { node = NULL; break; } } if (node && node->frec) { return node->frec; } } return NULL; } AP_DECLARE(ap_filter_rec_t *)ap_get_output_filter_handle(const char *name) { return get_filter_handle(name, registered_output_filters); } AP_DECLARE(ap_filter_rec_t *)ap_get_input_filter_handle(const char *name) { return get_filter_handle(name, registered_input_filters); } static ap_filter_rec_t *register_filter(const char *name, ap_filter_func filter_func, ap_init_filter_func filter_init, ap_filter_type ftype, filter_trie_node **reg_filter_set) { ap_filter_rec_t *frec; char *normalized_name; const char *n; filter_trie_node *node; if (!*reg_filter_set) { *reg_filter_set = trie_node_alloc(FILTER_POOL, NULL, 0); } normalized_name = apr_pstrdup(FILTER_POOL, name); ap_str_tolower(normalized_name); node = *reg_filter_set; for (n = normalized_name; *n; n++) { filter_trie_node *child = trie_node_alloc(FILTER_POOL, node, *n); if (apr_isalpha(*n)) { trie_node_link(FILTER_POOL, node, child, apr_toupper(*n)); } node = child; } if (node->frec) { frec = node->frec; } else { frec = apr_pcalloc(FILTER_POOL, sizeof(*frec)); node->frec = frec; frec->name = normalized_name; } frec->filter_func = filter_func; frec->filter_init_func = filter_init; frec->ftype = ftype; apr_pool_cleanup_register(FILTER_POOL, NULL, filter_cleanup, apr_pool_cleanup_null); return frec; } AP_DECLARE(ap_filter_rec_t *) ap_register_input_filter(const char *name, ap_in_filter_func filter_func, ap_init_filter_func filter_init, ap_filter_type ftype) { ap_filter_func f; f.in_func = filter_func; return register_filter(name, f, filter_init, ftype, ®istered_input_filters); } AP_DECLARE(ap_filter_rec_t *) ap_register_output_filter(const char *name, ap_out_filter_func filter_func, ap_init_filter_func filter_init, ap_filter_type ftype) { return ap_register_output_filter_protocol(name, filter_func, filter_init, ftype, 0); } AP_DECLARE(ap_filter_rec_t *) ap_register_output_filter_protocol( const char *name, ap_out_filter_func filter_func, ap_init_filter_func filter_init, ap_filter_type ftype, unsigned int proto_flags) { ap_filter_rec_t* ret ; ap_filter_func f; f.out_func = filter_func; ret = register_filter(name, f, filter_init, ftype, ®istered_output_filters); ret->proto_flags = proto_flags ; return ret ; } static ap_filter_t *add_any_filter_handle(ap_filter_rec_t *frec, void *ctx, request_rec *r, conn_rec *c, ap_filter_t **r_filters, ap_filter_t **p_filters, ap_filter_t **c_filters) { apr_pool_t *p = frec->ftype < AP_FTYPE_CONNECTION && r ? r->pool : c->pool; ap_filter_t *f = apr_palloc(p, sizeof(*f)); ap_filter_t **outf; if (frec->ftype < AP_FTYPE_PROTOCOL) { if (r) { outf = r_filters; } else { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(00080) "a content filter was added without a request: %s", frec->name); return NULL; } } else if (frec->ftype < AP_FTYPE_CONNECTION) { if (r) { outf = p_filters; } else { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(00081) "a protocol filter was added without a request: %s", frec->name); return NULL; } } else { outf = c_filters; } f->frec = frec; f->ctx = ctx; /* f->r must always be NULL for connection filters */ f->r = frec->ftype < AP_FTYPE_CONNECTION ? r : NULL; f->c = c; f->next = NULL; if (INSERT_BEFORE(f, *outf)) { f->next = *outf; if (*outf) { ap_filter_t *first = NULL; if (r) { /* If we are adding our first non-connection filter, * Then don't try to find the right location, it is * automatically first. */ if (*r_filters != *c_filters) { first = *r_filters; while (first && (first->next != (*outf))) { first = first->next; } } } if (first && first != (*outf)) { first->next = f; } } *outf = f; } else { ap_filter_t *fscan = *outf; while (!INSERT_BEFORE(f, fscan->next)) fscan = fscan->next; f->next = fscan->next; fscan->next = f; } if (frec->ftype < AP_FTYPE_CONNECTION && (*r_filters == *c_filters)) { *r_filters = *p_filters; } return f; } static ap_filter_t *add_any_filter(const char *name, void *ctx, request_rec *r, conn_rec *c, const filter_trie_node *reg_filter_set, ap_filter_t **r_filters, ap_filter_t **p_filters, ap_filter_t **c_filters) { if (reg_filter_set) { const char *n; const filter_trie_node *node; node = reg_filter_set; for (n = name; *n; n++) { int start, end; start = 0; end = node->nchildren - 1; while (end >= start) { int middle = (end + start) / 2; char ch = node->children[middle].c; if (*n == ch) { node = node->children[middle].child; break; } else if (*n < ch) { end = middle - 1; } else { start = middle + 1; } } if (end < start) { node = NULL; break; } } if (node && node->frec) { return add_any_filter_handle(node->frec, ctx, r, c, r_filters, p_filters, c_filters); } } ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, r ? r->connection : c, APLOGNO(00082) "an unknown filter was not added: %s", name); return NULL; } AP_DECLARE(ap_filter_t *) ap_add_input_filter(const char *name, void *ctx, request_rec *r, conn_rec *c) { return add_any_filter(name, ctx, r, c, registered_input_filters, r ? &r->input_filters : NULL, r ? &r->proto_input_filters : NULL, &c->input_filters); } AP_DECLARE(ap_filter_t *) ap_add_input_filter_handle(ap_filter_rec_t *f, void *ctx, request_rec *r, conn_rec *c) { return add_any_filter_handle(f, ctx, r, c, r ? &r->input_filters : NULL, r ? &r->proto_input_filters : NULL, &c->input_filters); } AP_DECLARE(ap_filter_t *) ap_add_output_filter(const char *name, void *ctx, request_rec *r, conn_rec *c) { return add_any_filter(name, ctx, r, c, registered_output_filters, r ? &r->output_filters : NULL, r ? &r->proto_output_filters : NULL, &c->output_filters); } AP_DECLARE(ap_filter_t *) ap_add_output_filter_handle(ap_filter_rec_t *f, void *ctx, request_rec *r, conn_rec *c) { return add_any_filter_handle(f, ctx, r, c, r ? &r->output_filters : NULL, r ? &r->proto_output_filters : NULL, &c->output_filters); } static void remove_any_filter(ap_filter_t *f, ap_filter_t **r_filt, ap_filter_t **p_filt, ap_filter_t **c_filt) { ap_filter_t **curr = r_filt ? r_filt : c_filt; ap_filter_t *fscan = *curr; if (p_filt && *p_filt == f) *p_filt = (*p_filt)->next; if (*curr == f) { *curr = (*curr)->next; return; } while (fscan->next != f) { if (!(fscan = fscan->next)) { return; } } fscan->next = f->next; } AP_DECLARE(void) ap_remove_input_filter(ap_filter_t *f) { remove_any_filter(f, f->r ? &f->r->input_filters : NULL, f->r ? &f->r->proto_input_filters : NULL, &f->c->input_filters); } AP_DECLARE(void) ap_remove_output_filter(ap_filter_t *f) { remove_any_filter(f, f->r ? &f->r->output_filters : NULL, f->r ? &f->r->proto_output_filters : NULL, &f->c->output_filters); } AP_DECLARE(apr_status_t) ap_remove_input_filter_byhandle(ap_filter_t *next, const char *handle) { ap_filter_t *found = NULL; ap_filter_rec_t *filter; if (!handle) { return APR_EINVAL; } filter = ap_get_input_filter_handle(handle); if (!filter) { return APR_NOTFOUND; } while (next) { if (next->frec == filter) { found = next; break; } next = next->next; } if (found) { ap_remove_input_filter(found); return APR_SUCCESS; } return APR_NOTFOUND; } AP_DECLARE(apr_status_t) ap_remove_output_filter_byhandle(ap_filter_t *next, const char *handle) { ap_filter_t *found = NULL; ap_filter_rec_t *filter; if (!handle) { return APR_EINVAL; } filter = ap_get_output_filter_handle(handle); if (!filter) { return APR_NOTFOUND; } while (next) { if (next->frec == filter) { found = next; break; } next = next->next; } if (found) { ap_remove_output_filter(found); return APR_SUCCESS; } return APR_NOTFOUND; } /* * Read data from the next filter in the filter stack. Data should be * modified in the bucket brigade that is passed in. The core allocates the * bucket brigade, modules that wish to replace large chunks of data or to * save data off to the side should probably create their own temporary * brigade especially for that use. */ AP_DECLARE(apr_status_t) ap_get_brigade(ap_filter_t *next, apr_bucket_brigade *bb, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { if (next) { return next->frec->filter_func.in_func(next, bb, mode, block, readbytes); } return AP_NOBODY_READ; } /* Pass the buckets to the next filter in the filter stack. If the * current filter is a handler, we should get NULL passed in instead of * the current filter. At that point, we can just call the first filter in * the stack, or r->output_filters. */ AP_DECLARE(apr_status_t) ap_pass_brigade(ap_filter_t *next, apr_bucket_brigade *bb) { if (next) { apr_bucket *e; if ((e = APR_BRIGADE_LAST(bb)) && APR_BUCKET_IS_EOS(e) && next->r) { /* This is only safe because HTTP_HEADER filter is always in * the filter stack. This ensures that there is ALWAYS a * request-based filter that we can attach this to. If the * HTTP_FILTER is removed, and another filter is not put in its * place, then handlers like mod_cgi, which attach their own * EOS bucket to the brigade will be broken, because we will * get two EOS buckets on the same request. */ next->r->eos_sent = 1; /* remember the eos for internal redirects, too */ if (next->r->prev) { request_rec *prev = next->r->prev; while (prev) { prev->eos_sent = 1; prev = prev->prev; } } } return next->frec->filter_func.out_func(next, bb); } return AP_NOBODY_WROTE; } /* Pass the buckets to the next filter in the filter stack * checking return status for filter errors. * returns: OK if ap_pass_brigade returns APR_SUCCESS * AP_FILTER_ERROR if filter error exists * HTTP_INTERNAL_SERVER_ERROR for all other cases * logged with optional errmsg */ AP_DECLARE(apr_status_t) ap_pass_brigade_fchk(request_rec *r, apr_bucket_brigade *bb, const char *fmt, ...) { apr_status_t rv; rv = ap_pass_brigade(r->output_filters, bb); if (rv != APR_SUCCESS) { if (rv != AP_FILTER_ERROR) { if (!fmt) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(00083) "ap_pass_brigade returned %d", rv); else { va_list ap; const char *res; va_start(ap, fmt); res = apr_pvsprintf(r->pool, fmt, ap); va_end(ap); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(03158) "%s", res); } return HTTP_INTERNAL_SERVER_ERROR; } return AP_FILTER_ERROR; } return OK; } AP_DECLARE(apr_status_t) ap_save_brigade(ap_filter_t *f, apr_bucket_brigade **saveto, apr_bucket_brigade **b, apr_pool_t *p) { apr_bucket *e; apr_status_t rv, srv = APR_SUCCESS; /* If have never stored any data in the filter, then we had better * create an empty bucket brigade so that we can concat. */ if (!(*saveto)) { *saveto = apr_brigade_create(p, f->c->bucket_alloc); } for (e = APR_BRIGADE_FIRST(*b); e != APR_BRIGADE_SENTINEL(*b); e = APR_BUCKET_NEXT(e)) { rv = apr_bucket_setaside(e, p); /* If the bucket type does not implement setaside, then * (hopefully) morph it into a bucket type which does, and set * *that* aside... */ if (rv == APR_ENOTIMPL) { const char *s; apr_size_t n; rv = apr_bucket_read(e, &s, &n, APR_BLOCK_READ); if (rv == APR_SUCCESS) { rv = apr_bucket_setaside(e, p); } } if (rv != APR_SUCCESS) { srv = rv; /* Return an error but still save the brigade if * ->setaside() is really not implemented. */ if (rv != APR_ENOTIMPL) { return rv; } } } APR_BRIGADE_CONCAT(*saveto, *b); return srv; } AP_DECLARE_NONSTD(apr_status_t) ap_filter_flush(apr_bucket_brigade *bb, void *ctx) { ap_filter_t *f = ctx; apr_status_t rv; rv = ap_pass_brigade(f, bb); /* Before invocation of the flush callback, apr_brigade_write et * al may place transient buckets in the brigade, which will fall * out of scope after returning. Empty the brigade here, to avoid * issues with leaving such buckets in the brigade if some filter * fails and leaves a non-empty brigade. */ apr_brigade_cleanup(bb); return rv; } AP_DECLARE(apr_status_t) ap_fflush(ap_filter_t *f, apr_bucket_brigade *bb) { apr_bucket *b; b = apr_bucket_flush_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); return ap_pass_brigade(f, bb); } AP_DECLARE_NONSTD(apr_status_t) ap_fputstrs(ap_filter_t *f, apr_bucket_brigade *bb, ...) { va_list args; apr_status_t rv; va_start(args, bb); rv = apr_brigade_vputstrs(bb, ap_filter_flush, f, args); va_end(args); return rv; } AP_DECLARE_NONSTD(apr_status_t) ap_fprintf(ap_filter_t *f, apr_bucket_brigade *bb, const char *fmt, ...) { va_list args; apr_status_t rv; va_start(args, fmt); rv = apr_brigade_vprintf(bb, ap_filter_flush, f, fmt, args); va_end(args); return rv; } AP_DECLARE(void) ap_filter_protocol(ap_filter_t *f, unsigned int flags) { f->frec->proto_flags = flags ; } httpd-2.4.41/server/mpm_fdqueue.c0000644000000000000500000003752513243014561015230 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mpm_fdqueue.h" #if APR_HAS_THREADS #include static const apr_uint32_t zero_pt = APR_UINT32_MAX/2; struct recycled_pool { apr_pool_t *pool; struct recycled_pool *next; }; struct fd_queue_info_t { apr_uint32_t volatile idlers; /** * >= zero_pt: number of idle worker threads * < zero_pt: number of threads blocked, * waiting for an idle worker */ apr_thread_mutex_t *idlers_mutex; apr_thread_cond_t *wait_for_idler; int terminated; int max_idlers; int max_recycled_pools; apr_uint32_t recycled_pools_count; struct recycled_pool *volatile recycled_pools; }; struct fd_queue_elem_t { apr_socket_t *sd; void *sd_baton; apr_pool_t *p; }; static apr_status_t queue_info_cleanup(void *data_) { fd_queue_info_t *qi = data_; apr_thread_cond_destroy(qi->wait_for_idler); apr_thread_mutex_destroy(qi->idlers_mutex); /* Clean up any pools in the recycled list */ for (;;) { struct recycled_pool *first_pool = qi->recycled_pools; if (first_pool == NULL) { break; } if (apr_atomic_casptr((void *)&qi->recycled_pools, first_pool->next, first_pool) == first_pool) { apr_pool_destroy(first_pool->pool); } } return APR_SUCCESS; } apr_status_t ap_queue_info_create(fd_queue_info_t **queue_info, apr_pool_t *pool, int max_idlers, int max_recycled_pools) { apr_status_t rv; fd_queue_info_t *qi; qi = apr_pcalloc(pool, sizeof(*qi)); rv = apr_thread_mutex_create(&qi->idlers_mutex, APR_THREAD_MUTEX_DEFAULT, pool); if (rv != APR_SUCCESS) { return rv; } rv = apr_thread_cond_create(&qi->wait_for_idler, pool); if (rv != APR_SUCCESS) { return rv; } qi->recycled_pools = NULL; qi->max_recycled_pools = max_recycled_pools; qi->max_idlers = max_idlers; qi->idlers = zero_pt; apr_pool_cleanup_register(pool, qi, queue_info_cleanup, apr_pool_cleanup_null); *queue_info = qi; return APR_SUCCESS; } apr_status_t ap_queue_info_set_idle(fd_queue_info_t *queue_info, apr_pool_t *pool_to_recycle) { apr_status_t rv; ap_queue_info_push_pool(queue_info, pool_to_recycle); /* If other threads are waiting on a worker, wake one up */ if (apr_atomic_inc32(&queue_info->idlers) < zero_pt) { rv = apr_thread_mutex_lock(queue_info->idlers_mutex); if (rv != APR_SUCCESS) { AP_DEBUG_ASSERT(0); return rv; } rv = apr_thread_cond_signal(queue_info->wait_for_idler); if (rv != APR_SUCCESS) { apr_thread_mutex_unlock(queue_info->idlers_mutex); return rv; } rv = apr_thread_mutex_unlock(queue_info->idlers_mutex); if (rv != APR_SUCCESS) { return rv; } } return APR_SUCCESS; } apr_status_t ap_queue_info_try_get_idler(fd_queue_info_t *queue_info) { /* Don't block if there isn't any idle worker. */ for (;;) { apr_uint32_t idlers = queue_info->idlers; if (idlers <= zero_pt) { return APR_EAGAIN; } if (apr_atomic_cas32(&queue_info->idlers, idlers - 1, idlers) == idlers) { return APR_SUCCESS; } } } apr_status_t ap_queue_info_wait_for_idler(fd_queue_info_t *queue_info, int *had_to_block) { apr_status_t rv; /* Block if there isn't any idle worker. * apr_atomic_add32(x, -1) does the same as dec32(x), except * that it returns the previous value (unlike dec32's bool). */ if (apr_atomic_add32(&queue_info->idlers, -1) <= zero_pt) { rv = apr_thread_mutex_lock(queue_info->idlers_mutex); if (rv != APR_SUCCESS) { AP_DEBUG_ASSERT(0); apr_atomic_inc32(&(queue_info->idlers)); /* back out dec */ return rv; } /* Re-check the idle worker count to guard against a * race condition. Now that we're in the mutex-protected * region, one of two things may have happened: * - If the idle worker count is still negative, the * workers are all still busy, so it's safe to * block on a condition variable. * - If the idle worker count is non-negative, then a * worker has become idle since the first check * of queue_info->idlers above. It's possible * that the worker has also signaled the condition * variable--and if so, the listener missed it * because it wasn't yet blocked on the condition * variable. But if the idle worker count is * now non-negative, it's safe for this function to * return immediately. * * A "negative value" (relative to zero_pt) in * queue_info->idlers tells how many * threads are waiting on an idle worker. */ if (queue_info->idlers < zero_pt) { if (had_to_block) { *had_to_block = 1; } rv = apr_thread_cond_wait(queue_info->wait_for_idler, queue_info->idlers_mutex); if (rv != APR_SUCCESS) { AP_DEBUG_ASSERT(0); apr_thread_mutex_unlock(queue_info->idlers_mutex); return rv; } } rv = apr_thread_mutex_unlock(queue_info->idlers_mutex); if (rv != APR_SUCCESS) { return rv; } } if (queue_info->terminated) { return APR_EOF; } else { return APR_SUCCESS; } } apr_uint32_t ap_queue_info_num_idlers(fd_queue_info_t *queue_info) { apr_uint32_t val; val = apr_atomic_read32(&queue_info->idlers); return (val > zero_pt) ? val - zero_pt : 0; } void ap_queue_info_push_pool(fd_queue_info_t *queue_info, apr_pool_t *pool_to_recycle) { struct recycled_pool *new_recycle; /* If we have been given a pool to recycle, atomically link * it into the queue_info's list of recycled pools */ if (!pool_to_recycle) return; if (queue_info->max_recycled_pools >= 0) { apr_uint32_t n = apr_atomic_read32(&queue_info->recycled_pools_count); if (n >= queue_info->max_recycled_pools) { apr_pool_destroy(pool_to_recycle); return; } apr_atomic_inc32(&queue_info->recycled_pools_count); } apr_pool_clear(pool_to_recycle); new_recycle = apr_palloc(pool_to_recycle, sizeof *new_recycle); new_recycle->pool = pool_to_recycle; for (;;) { /* * Save queue_info->recycled_pool in local variable next because * new_recycle->next can be changed after apr_atomic_casptr * function call. For gory details see PR 44402. */ struct recycled_pool *next = queue_info->recycled_pools; new_recycle->next = next; if (apr_atomic_casptr((void *)&queue_info->recycled_pools, new_recycle, next) == next) break; } } void ap_queue_info_pop_pool(fd_queue_info_t *queue_info, apr_pool_t **recycled_pool) { /* Atomically pop a pool from the recycled list */ /* This function is safe only as long as it is single threaded because * it reaches into the queue and accesses "next" which can change. * We are OK today because it is only called from the listener thread. * cas-based pushes do not have the same limitation - any number can * happen concurrently with a single cas-based pop. */ *recycled_pool = NULL; /* Atomically pop a pool from the recycled list */ for (;;) { struct recycled_pool *first_pool = queue_info->recycled_pools; if (first_pool == NULL) { break; } if (apr_atomic_casptr((void *)&queue_info->recycled_pools, first_pool->next, first_pool) == first_pool) { *recycled_pool = first_pool->pool; if (queue_info->max_recycled_pools >= 0) apr_atomic_dec32(&queue_info->recycled_pools_count); break; } } } void ap_queue_info_free_idle_pools(fd_queue_info_t *queue_info) { apr_pool_t *p; queue_info->max_recycled_pools = 0; for (;;) { ap_queue_info_pop_pool(queue_info, &p); if (p == NULL) break; apr_pool_destroy(p); } apr_atomic_set32(&queue_info->recycled_pools_count, 0); } apr_status_t ap_queue_info_term(fd_queue_info_t *queue_info) { apr_status_t rv; rv = apr_thread_mutex_lock(queue_info->idlers_mutex); if (rv != APR_SUCCESS) { return rv; } queue_info->terminated = 1; apr_thread_cond_broadcast(queue_info->wait_for_idler); return apr_thread_mutex_unlock(queue_info->idlers_mutex); } /** * Detects when the fd_queue_t is full. This utility function is expected * to be called from within critical sections, and is not threadsafe. */ #define ap_queue_full(queue) ((queue)->nelts == (queue)->bounds) /** * Detects when the fd_queue_t is empty. This utility function is expected * to be called from within critical sections, and is not threadsafe. */ #define ap_queue_empty(queue) ((queue)->nelts == 0 && \ APR_RING_EMPTY(&queue->timers, \ timer_event_t, link)) /** * Callback routine that is called to destroy this * fd_queue_t when its pool is destroyed. */ static apr_status_t ap_queue_destroy(void *data) { fd_queue_t *queue = data; /* Ignore errors here, we can't do anything about them anyway. * XXX: We should at least try to signal an error here, it is * indicative of a programmer error. -aaron */ apr_thread_cond_destroy(queue->not_empty); apr_thread_mutex_destroy(queue->one_big_mutex); return APR_SUCCESS; } /** * Initialize the fd_queue_t. */ apr_status_t ap_queue_create(fd_queue_t **pqueue, int capacity, apr_pool_t *p) { apr_status_t rv; fd_queue_t *queue; queue = apr_pcalloc(p, sizeof *queue); if ((rv = apr_thread_mutex_create(&queue->one_big_mutex, APR_THREAD_MUTEX_DEFAULT, p)) != APR_SUCCESS) { return rv; } if ((rv = apr_thread_cond_create(&queue->not_empty, p)) != APR_SUCCESS) { return rv; } APR_RING_INIT(&queue->timers, timer_event_t, link); queue->data = apr_pcalloc(p, capacity * sizeof(fd_queue_elem_t)); queue->bounds = capacity; apr_pool_cleanup_register(p, queue, ap_queue_destroy, apr_pool_cleanup_null); *pqueue = queue; return APR_SUCCESS; } /** * Push a new socket onto the queue. * * precondition: ap_queue_info_wait_for_idler has already been called * to reserve an idle worker thread */ apr_status_t ap_queue_push_socket(fd_queue_t *queue, apr_socket_t *sd, void *sd_baton, apr_pool_t *p) { fd_queue_elem_t *elem; apr_status_t rv; if ((rv = apr_thread_mutex_lock(queue->one_big_mutex)) != APR_SUCCESS) { return rv; } AP_DEBUG_ASSERT(!queue->terminated); AP_DEBUG_ASSERT(!ap_queue_full(queue)); elem = &queue->data[queue->in++]; if (queue->in >= queue->bounds) queue->in -= queue->bounds; elem->sd = sd; elem->sd_baton = sd_baton; elem->p = p; queue->nelts++; apr_thread_cond_signal(queue->not_empty); return apr_thread_mutex_unlock(queue->one_big_mutex); } apr_status_t ap_queue_push_timer(fd_queue_t *queue, timer_event_t *te) { apr_status_t rv; if ((rv = apr_thread_mutex_lock(queue->one_big_mutex)) != APR_SUCCESS) { return rv; } AP_DEBUG_ASSERT(!queue->terminated); APR_RING_INSERT_TAIL(&queue->timers, te, timer_event_t, link); apr_thread_cond_signal(queue->not_empty); return apr_thread_mutex_unlock(queue->one_big_mutex); } /** * Retrieves the next available socket from the queue. If there are no * sockets available, it will block until one becomes available. * Once retrieved, the socket is placed into the address specified by * 'sd'. */ apr_status_t ap_queue_pop_something(fd_queue_t *queue, apr_socket_t **sd, void **sd_baton, apr_pool_t **p, timer_event_t **te_out) { fd_queue_elem_t *elem; timer_event_t *te; apr_status_t rv; if ((rv = apr_thread_mutex_lock(queue->one_big_mutex)) != APR_SUCCESS) { return rv; } /* Keep waiting until we wake up and find that the queue is not empty. */ if (ap_queue_empty(queue)) { if (!queue->terminated) { apr_thread_cond_wait(queue->not_empty, queue->one_big_mutex); } /* If we wake up and it's still empty, then we were interrupted */ if (ap_queue_empty(queue)) { rv = apr_thread_mutex_unlock(queue->one_big_mutex); if (rv != APR_SUCCESS) { return rv; } if (queue->terminated) { return APR_EOF; /* no more elements ever again */ } else { return APR_EINTR; } } } te = NULL; if (te_out) { if (!APR_RING_EMPTY(&queue->timers, timer_event_t, link)) { te = APR_RING_FIRST(&queue->timers); APR_RING_REMOVE(te, link); } *te_out = te; } if (!te) { elem = &queue->data[queue->out++]; if (queue->out >= queue->bounds) queue->out -= queue->bounds; queue->nelts--; *sd = elem->sd; if (sd_baton) { *sd_baton = elem->sd_baton; } *p = elem->p; #ifdef AP_DEBUG elem->sd = NULL; elem->p = NULL; #endif /* AP_DEBUG */ } return apr_thread_mutex_unlock(queue->one_big_mutex); } static apr_status_t queue_interrupt(fd_queue_t *queue, int all, int term) { apr_status_t rv; if ((rv = apr_thread_mutex_lock(queue->one_big_mutex)) != APR_SUCCESS) { return rv; } /* we must hold one_big_mutex when setting this... otherwise, * we could end up setting it and waking everybody up just after a * would-be popper checks it but right before they block */ if (term) { queue->terminated = 1; } if (all) apr_thread_cond_broadcast(queue->not_empty); else apr_thread_cond_signal(queue->not_empty); return apr_thread_mutex_unlock(queue->one_big_mutex); } apr_status_t ap_queue_interrupt_all(fd_queue_t *queue) { return queue_interrupt(queue, 1, 0); } apr_status_t ap_queue_interrupt_one(fd_queue_t *queue) { return queue_interrupt(queue, 0, 0); } apr_status_t ap_queue_term(fd_queue_t *queue) { return queue_interrupt(queue, 1, 1); } #endif /* APR_HAS_THREADS */ httpd-2.4.41/server/util_expr_scan.c0000644000000000000500000021723313523273357015747 0ustar rootsrc#line 2 "util_expr_scan.c" #line 4 "util_expr_scan.c" #define YY_INT_ALIGNED short int /* A lexical scanner generated by flex */ #define FLEX_SCANNER #define YY_FLEX_MAJOR_VERSION 2 #define YY_FLEX_MINOR_VERSION 5 #define YY_FLEX_SUBMINOR_VERSION 35 #if YY_FLEX_SUBMINOR_VERSION > 0 #define FLEX_BETA #endif /* First, we deal with platform-specific or compiler-specific issues. */ /* begin standard C headers. */ #include #include #include #include /* end standard C headers. */ /* flex integer type definitions */ #ifndef FLEXINT_H #define FLEXINT_H /* C99 systems have . Non-C99 systems may or may not. */ #if defined (__STDC_VERSION__) && __STDC_VERSION__ >= 199901L /* C99 says to define __STDC_LIMIT_MACROS before including stdint.h, * if you want the limit (max/min) macros for int types. */ #ifndef __STDC_LIMIT_MACROS #define __STDC_LIMIT_MACROS 1 #endif #include typedef int8_t flex_int8_t; typedef uint8_t flex_uint8_t; typedef int16_t flex_int16_t; typedef uint16_t flex_uint16_t; typedef int32_t flex_int32_t; typedef uint32_t flex_uint32_t; #else typedef signed char flex_int8_t; typedef short int flex_int16_t; typedef int flex_int32_t; typedef unsigned char flex_uint8_t; typedef unsigned short int flex_uint16_t; typedef unsigned int flex_uint32_t; /* Limits of integral types. */ #ifndef INT8_MIN #define INT8_MIN (-128) #endif #ifndef INT16_MIN #define INT16_MIN (-32767-1) #endif #ifndef INT32_MIN #define INT32_MIN (-2147483647-1) #endif #ifndef INT8_MAX #define INT8_MAX (127) #endif #ifndef INT16_MAX #define INT16_MAX (32767) #endif #ifndef INT32_MAX #define INT32_MAX (2147483647) #endif #ifndef UINT8_MAX #define UINT8_MAX (255U) #endif #ifndef UINT16_MAX #define UINT16_MAX (65535U) #endif #ifndef UINT32_MAX #define UINT32_MAX (4294967295U) #endif #endif /* ! C99 */ #endif /* ! FLEXINT_H */ #ifdef __cplusplus /* The "const" storage-class-modifier is valid. */ #define YY_USE_CONST #else /* ! __cplusplus */ /* C99 requires __STDC__ to be defined as 1. */ #if defined (__STDC__) #define YY_USE_CONST #endif /* defined (__STDC__) */ #endif /* ! __cplusplus */ #ifdef YY_USE_CONST #define yyconst const #else #define yyconst #endif /* Returned upon end-of-file. */ #define YY_NULL 0 /* Promotes a possibly negative, possibly signed char to an unsigned * integer for use as an array index. If the signed char is negative, * we want to instead treat it as an 8-bit unsigned char, hence the * double cast. */ #define YY_SC_TO_UI(c) ((unsigned int) (unsigned char) c) /* An opaque pointer. */ #ifndef YY_TYPEDEF_YY_SCANNER_T #define YY_TYPEDEF_YY_SCANNER_T typedef void* yyscan_t; #endif /* For convenience, these vars (plus the bison vars far below) are macros in the reentrant scanner. */ #define yyin yyg->yyin_r #define yyout yyg->yyout_r #define yyextra yyg->yyextra_r #define yyleng yyg->yyleng_r #define yytext yyg->yytext_r #define yylineno (YY_CURRENT_BUFFER_LVALUE->yy_bs_lineno) #define yycolumn (YY_CURRENT_BUFFER_LVALUE->yy_bs_column) #define yy_flex_debug yyg->yy_flex_debug_r /* Enter a start condition. This macro really ought to take a parameter, * but we do it the disgusting crufty way forced on us by the ()-less * definition of BEGIN. */ #define BEGIN yyg->yy_start = 1 + 2 * /* Translate the current start state into a value that can be later handed * to BEGIN to return to the state. The YYSTATE alias is for lex * compatibility. */ #define YY_START ((yyg->yy_start - 1) / 2) #define YYSTATE YY_START /* Action number for EOF rule of a given start state. */ #define YY_STATE_EOF(state) (YY_END_OF_BUFFER + state + 1) /* Special action meaning "start processing a new file". */ #define YY_NEW_FILE ap_expr_yyrestart(yyin ,yyscanner ) #define YY_END_OF_BUFFER_CHAR 0 /* Size of default input buffer. */ #ifndef YY_BUF_SIZE #ifdef __ia64__ /* On IA-64, the buffer size is 16k, not 8k. * Moreover, YY_BUF_SIZE is 2*YY_READ_BUF_SIZE in the general case. * Ditto for the __ia64__ case accordingly. */ #define YY_BUF_SIZE 32768 #else #define YY_BUF_SIZE 16384 #endif /* __ia64__ */ #endif /* The state buf must be large enough to hold one state per character in the main buffer. */ #define YY_STATE_BUF_SIZE ((YY_BUF_SIZE + 2) * sizeof(yy_state_type)) #ifndef YY_TYPEDEF_YY_BUFFER_STATE #define YY_TYPEDEF_YY_BUFFER_STATE typedef struct yy_buffer_state *YY_BUFFER_STATE; #endif #define EOB_ACT_CONTINUE_SCAN 0 #define EOB_ACT_END_OF_FILE 1 #define EOB_ACT_LAST_MATCH 2 #define YY_LESS_LINENO(n) /* Return all but the first "n" matched characters back to the input stream. */ #define yyless(n) \ do \ { \ /* Undo effects of setting up yytext. */ \ int yyless_macro_arg = (n); \ YY_LESS_LINENO(yyless_macro_arg);\ *yy_cp = yyg->yy_hold_char; \ YY_RESTORE_YY_MORE_OFFSET \ yyg->yy_c_buf_p = yy_cp = yy_bp + yyless_macro_arg - YY_MORE_ADJ; \ YY_DO_BEFORE_ACTION; /* set up yytext again */ \ } \ while ( 0 ) #define unput(c) yyunput( c, yyg->yytext_ptr , yyscanner ) #ifndef YY_TYPEDEF_YY_SIZE_T #define YY_TYPEDEF_YY_SIZE_T typedef size_t yy_size_t; #endif #ifndef YY_STRUCT_YY_BUFFER_STATE #define YY_STRUCT_YY_BUFFER_STATE struct yy_buffer_state { FILE *yy_input_file; char *yy_ch_buf; /* input buffer */ char *yy_buf_pos; /* current position in input buffer */ /* Size of input buffer in bytes, not including room for EOB * characters. */ yy_size_t yy_buf_size; /* Number of characters read into yy_ch_buf, not including EOB * characters. */ int yy_n_chars; /* Whether we "own" the buffer - i.e., we know we created it, * and can realloc() it to grow it, and should free() it to * delete it. */ int yy_is_our_buffer; /* Whether this is an "interactive" input source; if so, and * if we're using stdio for input, then we want to use getc() * instead of fread(), to make sure we stop fetching input after * each newline. */ int yy_is_interactive; /* Whether we're considered to be at the beginning of a line. * If so, '^' rules will be active on the next match, otherwise * not. */ int yy_at_bol; int yy_bs_lineno; /**< The line count. */ int yy_bs_column; /**< The column count. */ /* Whether to try to fill the input buffer when we reach the * end of it. */ int yy_fill_buffer; int yy_buffer_status; #define YY_BUFFER_NEW 0 #define YY_BUFFER_NORMAL 1 /* When an EOF's been seen but there's still some text to process * then we mark the buffer as YY_EOF_PENDING, to indicate that we * shouldn't try reading from the input source any more. We might * still have a bunch of tokens to match, though, because of * possible backing-up. * * When we actually see the EOF, we change the status to "new" * (via ap_expr_yyrestart()), so that the user can continue scanning by * just pointing yyin at a new input file. */ #define YY_BUFFER_EOF_PENDING 2 }; #endif /* !YY_STRUCT_YY_BUFFER_STATE */ /* We provide macros for accessing buffer states in case in the * future we want to put the buffer states in a more general * "scanner state". * * Returns the top of the stack, or NULL. */ #define YY_CURRENT_BUFFER ( yyg->yy_buffer_stack \ ? yyg->yy_buffer_stack[yyg->yy_buffer_stack_top] \ : NULL) /* Same as previous macro, but useful when we know that the buffer stack is not * NULL or when we need an lvalue. For internal use only. */ #define YY_CURRENT_BUFFER_LVALUE yyg->yy_buffer_stack[yyg->yy_buffer_stack_top] void ap_expr_yyrestart (FILE *input_file ,yyscan_t yyscanner ); void ap_expr_yy_switch_to_buffer (YY_BUFFER_STATE new_buffer ,yyscan_t yyscanner ); YY_BUFFER_STATE ap_expr_yy_create_buffer (FILE *file,int size ,yyscan_t yyscanner ); void ap_expr_yy_delete_buffer (YY_BUFFER_STATE b ,yyscan_t yyscanner ); void ap_expr_yy_flush_buffer (YY_BUFFER_STATE b ,yyscan_t yyscanner ); void ap_expr_yypush_buffer_state (YY_BUFFER_STATE new_buffer ,yyscan_t yyscanner ); void ap_expr_yypop_buffer_state (yyscan_t yyscanner ); static void ap_expr_yyensure_buffer_stack (yyscan_t yyscanner ); static void ap_expr_yy_load_buffer_state (yyscan_t yyscanner ); static void ap_expr_yy_init_buffer (YY_BUFFER_STATE b,FILE *file ,yyscan_t yyscanner ); #define YY_FLUSH_BUFFER ap_expr_yy_flush_buffer(YY_CURRENT_BUFFER ,yyscanner) YY_BUFFER_STATE ap_expr_yy_scan_buffer (char *base,yy_size_t size ,yyscan_t yyscanner ); YY_BUFFER_STATE ap_expr_yy_scan_string (yyconst char *yy_str ,yyscan_t yyscanner ); YY_BUFFER_STATE ap_expr_yy_scan_bytes (yyconst char *bytes,int len ,yyscan_t yyscanner ); void *ap_expr_yyalloc (yy_size_t ,yyscan_t yyscanner ); void *ap_expr_yyrealloc (void *,yy_size_t ,yyscan_t yyscanner ); void ap_expr_yyfree (void * ,yyscan_t yyscanner ); #define yy_new_buffer ap_expr_yy_create_buffer #define yy_set_interactive(is_interactive) \ { \ if ( ! YY_CURRENT_BUFFER ){ \ ap_expr_yyensure_buffer_stack (yyscanner); \ YY_CURRENT_BUFFER_LVALUE = \ ap_expr_yy_create_buffer(yyin,YY_BUF_SIZE ,yyscanner); \ } \ YY_CURRENT_BUFFER_LVALUE->yy_is_interactive = is_interactive; \ } #define yy_set_bol(at_bol) \ { \ if ( ! YY_CURRENT_BUFFER ){\ ap_expr_yyensure_buffer_stack (yyscanner); \ YY_CURRENT_BUFFER_LVALUE = \ ap_expr_yy_create_buffer(yyin,YY_BUF_SIZE ,yyscanner); \ } \ YY_CURRENT_BUFFER_LVALUE->yy_at_bol = at_bol; \ } #define YY_AT_BOL() (YY_CURRENT_BUFFER_LVALUE->yy_at_bol) /* Begin user sect3 */ #define ap_expr_yywrap(n) 1 #define YY_SKIP_YYWRAP typedef unsigned char YY_CHAR; typedef int yy_state_type; #define yytext_ptr yytext_r static yy_state_type yy_get_previous_state (yyscan_t yyscanner ); static yy_state_type yy_try_NUL_trans (yy_state_type current_state ,yyscan_t yyscanner); static int yy_get_next_buffer (yyscan_t yyscanner ); static void yy_fatal_error (yyconst char msg[] ,yyscan_t yyscanner ); /* Done after the current pattern has been matched and before the * corresponding action - sets up yytext. */ #define YY_DO_BEFORE_ACTION \ yyg->yytext_ptr = yy_bp; \ yyleng = (size_t) (yy_cp - yy_bp); \ yyg->yy_hold_char = *yy_cp; \ *yy_cp = '\0'; \ yyg->yy_c_buf_p = yy_cp; #define YY_NUM_RULES 67 #define YY_END_OF_BUFFER 68 /* This struct is not used in this scanner, but its presence is necessary. */ struct yy_trans_info { flex_int32_t yy_verify; flex_int32_t yy_nxt; }; static yyconst flex_int16_t yy_accept[124] = { 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 68, 66, 1, 43, 2, 66, 66, 66, 65, 66, 44, 26, 63, 32, 30, 34, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 66, 14, 4, 3, 17, 17, 67, 17, 23, 4, 22, 20, 21, 67, 16, 16, 24, 27, 29, 28, 1, 31, 37, 19, 18, 39, 63, 59, 59, 59, 59, 59, 59, 33, 30, 36, 35, 64, 64, 57, 64, 55, 54, 58, 53, 52, 25, 25, 56, 64, 40, 64, 41, 14, 13, 15, 12, 5, 6, 10, 11, 7, 8, 9, 20, 60, 46, 48, 50, 45, 49, 51, 47, 38, 64, 42, 64, 5, 6, 64, 61, 5, 62, 0 } ; static yyconst flex_int32_t yy_ec[256] = { 0, 1, 1, 1, 1, 1, 1, 1, 1, 2, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 2, 4, 5, 6, 7, 8, 9, 5, 10, 10, 1, 1, 11, 12, 13, 14, 15, 15, 15, 15, 15, 15, 15, 15, 16, 16, 17, 6, 18, 19, 20, 6, 1, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 1, 22, 1, 6, 23, 1, 24, 25, 21, 26, 27, 28, 29, 21, 30, 21, 21, 31, 32, 33, 34, 21, 35, 36, 37, 38, 39, 21, 21, 21, 21, 21, 40, 41, 42, 43, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1 } ; static yyconst flex_int32_t yy_meta[44] = { 0, 1, 1, 2, 1, 2, 1, 2, 2, 1, 1, 1, 1, 1, 1, 3, 3, 1, 1, 1, 1, 3, 2, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 2, 1 } ; static yyconst flex_int16_t yy_base[133] = { 0, 0, 0, 41, 47, 89, 0, 130, 136, 0, 0, 147, 146, 175, 275, 54, 28, 275, 43, 134, 164, 275, 164, 275, 275, 45, 152, 32, 151, 0, 136, 133, 143, 26, 133, 35, 194, 38, 129, 128, 122, 0, 275, 275, 51, 122, 221, 275, 275, 275, 275, 0, 275, 275, 61, 121, 275, 275, 275, 275, 76, 275, 275, 275, 275, 275, 65, 0, 125, 47, 126, 107, 130, 275, 275, 275, 275, 0, 130, 0, 124, 0, 0, 0, 0, 0, 275, 0, 0, 104, 0, 101, 275, 0, 275, 275, 275, 71, 131, 275, 275, 275, 275, 275, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 99, 0, 61, 133, 135, 57, 0, 138, 0, 275, 259, 262, 265, 79, 67, 268, 271, 65, 42 } ; static yyconst flex_int16_t yy_def[133] = { 0, 123, 1, 124, 124, 123, 5, 124, 124, 125, 125, 126, 126, 123, 123, 123, 123, 123, 123, 123, 123, 123, 127, 123, 123, 123, 123, 123, 123, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 123, 129, 123, 123, 123, 123, 130, 123, 123, 123, 123, 131, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 132, 132, 132, 132, 132, 132, 123, 123, 123, 123, 128, 128, 128, 128, 128, 128, 128, 128, 128, 123, 128, 128, 128, 128, 128, 123, 129, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 131, 132, 132, 132, 132, 132, 132, 132, 132, 128, 128, 128, 128, 123, 123, 128, 128, 123, 128, 0, 123, 123, 123, 123, 123, 123, 123, 123, 123 } ; static yyconst flex_int16_t yy_nxt[319] = { 0, 14, 15, 15, 16, 17, 14, 18, 19, 20, 21, 21, 22, 23, 24, 25, 25, 21, 26, 27, 28, 29, 14, 14, 30, 29, 29, 31, 32, 33, 34, 35, 36, 37, 38, 29, 29, 29, 39, 29, 21, 40, 21, 14, 42, 105, 43, 61, 44, 45, 42, 74, 43, 81, 44, 45, 60, 60, 63, 63, 66, 66, 84, 46, 82, 88, 94, 94, 104, 46, 77, 62, 89, 85, 107, 75, 94, 94, 60, 60, 66, 66, 67, 47, 122, 108, 117, 118, 120, 47, 48, 48, 49, 48, 48, 48, 48, 48, 48, 48, 48, 48, 48, 48, 48, 48, 50, 48, 48, 48, 51, 48, 48, 51, 51, 51, 51, 51, 51, 51, 51, 51, 51, 51, 51, 51, 51, 51, 51, 48, 48, 52, 48, 42, 110, 53, 119, 54, 55, 42, 116, 53, 115, 54, 55, 111, 118, 118, 121, 118, 118, 118, 46, 118, 118, 114, 113, 112, 46, 109, 106, 95, 95, 92, 91, 90, 83, 80, 79, 78, 76, 73, 56, 65, 64, 123, 59, 59, 56, 66, 66, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 68, 123, 69, 70, 71, 123, 72, 86, 86, 86, 86, 86, 123, 123, 86, 86, 86, 86, 123, 123, 86, 123, 123, 123, 123, 123, 87, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 86, 97, 98, 123, 123, 123, 123, 123, 123, 123, 123, 99, 123, 123, 100, 123, 123, 123, 123, 101, 123, 123, 102, 123, 103, 41, 41, 41, 57, 57, 57, 58, 58, 58, 93, 123, 93, 96, 96, 96, 13, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123 } ; static yyconst flex_int16_t yy_chk[319] = { 0, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 3, 132, 3, 16, 3, 3, 4, 27, 4, 33, 4, 4, 15, 15, 18, 18, 25, 25, 35, 3, 33, 37, 44, 44, 131, 4, 128, 16, 37, 35, 69, 27, 54, 54, 60, 60, 66, 66, 127, 3, 119, 69, 97, 97, 116, 4, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 7, 71, 7, 114, 7, 7, 8, 91, 8, 89, 8, 8, 71, 98, 98, 117, 117, 118, 118, 7, 121, 121, 80, 78, 72, 8, 70, 68, 55, 45, 40, 39, 38, 34, 32, 31, 30, 28, 26, 7, 20, 19, 13, 12, 11, 8, 22, 22, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 22, 0, 22, 22, 22, 0, 22, 36, 36, 36, 36, 36, 0, 0, 36, 36, 36, 36, 0, 0, 36, 0, 0, 0, 0, 0, 36, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 36, 46, 46, 0, 0, 0, 0, 0, 0, 0, 0, 46, 0, 0, 46, 0, 0, 0, 0, 46, 0, 0, 46, 0, 46, 124, 124, 124, 125, 125, 125, 126, 126, 126, 129, 0, 129, 130, 130, 130, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123, 123 } ; /* The intent behind this definition is that it'll catch * any uses of REJECT which flex missed. */ #define REJECT reject_used_but_not_detected #define yymore() yymore_used_but_not_detected #define YY_MORE_ADJ 0 #define YY_RESTORE_YY_MORE_OFFSET #line 1 "util_expr_scan.l" /* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * ap_expr_scan.l, based on ssl_expr_scan.l from mod_ssl */ /* _________________________________________________________________ ** ** Expression Scanner ** _________________________________________________________________ */ #define YY_NO_INPUT 1 #line 43 "util_expr_scan.l" #include "util_expr_private.h" #include "util_expr_parse.h" #undef YY_INPUT #define YY_INPUT(buf,result,max_size) \ { \ if ((result = MIN(max_size, yyextra->inputbuf \ + yyextra->inputlen \ - yyextra->inputptr)) <= 0) \ { \ result = YY_NULL; \ } \ else { \ memcpy(buf, yyextra->inputptr, result); \ yyextra->inputptr += result; \ } \ } #define YY_EXTRA_TYPE ap_expr_parse_ctx_t* #define PERROR(msg) do { yyextra->error2 = msg ; return T_ERROR; } while (0) #define str_ptr (yyextra->scan_ptr) #define str_buf (yyextra->scan_buf) #define str_del (yyextra->scan_del) #define STR_APPEND(c) do { \ *str_ptr++ = (c); \ if (str_ptr >= str_buf + sizeof(str_buf)) \ PERROR("String too long"); \ } while (0) #line 615 "util_expr_scan.c" #define INITIAL 0 #define str 1 #define var 2 #define vararg 3 #define regex 4 #define regex_flags 5 #ifndef YY_NO_UNISTD_H /* Special case for "unistd.h", since it is non-ANSI. We include it way * down here because we want the user's section 1 to have been scanned first. * The user has a chance to override it with an option. */ #include #endif #ifndef YY_EXTRA_TYPE #define YY_EXTRA_TYPE void * #endif /* Holds the entire state of the reentrant scanner. */ struct yyguts_t { /* User-defined. Not touched by flex. */ YY_EXTRA_TYPE yyextra_r; /* The rest are the same as the globals declared in the non-reentrant scanner. */ FILE *yyin_r, *yyout_r; size_t yy_buffer_stack_top; /**< index of top of stack. */ size_t yy_buffer_stack_max; /**< capacity of stack. */ YY_BUFFER_STATE * yy_buffer_stack; /**< Stack as an array. */ char yy_hold_char; int yy_n_chars; int yyleng_r; char *yy_c_buf_p; int yy_init; int yy_start; int yy_did_buffer_switch_on_eof; int yy_start_stack_ptr; int yy_start_stack_depth; int *yy_start_stack; yy_state_type yy_last_accepting_state; char* yy_last_accepting_cpos; int yylineno_r; int yy_flex_debug_r; char *yytext_r; int yy_more_flag; int yy_more_len; YYSTYPE * yylval_r; }; /* end struct yyguts_t */ static int yy_init_globals (yyscan_t yyscanner ); /* This must go here because YYSTYPE and YYLTYPE are included * from bison output in section 1.*/ # define yylval yyg->yylval_r int ap_expr_yylex_init (yyscan_t* scanner); int ap_expr_yylex_init_extra (YY_EXTRA_TYPE user_defined,yyscan_t* scanner); /* Accessor methods to globals. These are made visible to non-reentrant scanners for convenience. */ int ap_expr_yylex_destroy (yyscan_t yyscanner ); int ap_expr_yyget_debug (yyscan_t yyscanner ); void ap_expr_yyset_debug (int debug_flag ,yyscan_t yyscanner ); YY_EXTRA_TYPE ap_expr_yyget_extra (yyscan_t yyscanner ); void ap_expr_yyset_extra (YY_EXTRA_TYPE user_defined ,yyscan_t yyscanner ); FILE *ap_expr_yyget_in (yyscan_t yyscanner ); void ap_expr_yyset_in (FILE * in_str ,yyscan_t yyscanner ); FILE *ap_expr_yyget_out (yyscan_t yyscanner ); void ap_expr_yyset_out (FILE * out_str ,yyscan_t yyscanner ); int ap_expr_yyget_leng (yyscan_t yyscanner ); char *ap_expr_yyget_text (yyscan_t yyscanner ); int ap_expr_yyget_lineno (yyscan_t yyscanner ); void ap_expr_yyset_lineno (int line_number ,yyscan_t yyscanner ); YYSTYPE * ap_expr_yyget_lval (yyscan_t yyscanner ); void ap_expr_yyset_lval (YYSTYPE * yylval_param ,yyscan_t yyscanner ); /* Macros after this point can all be overridden by user definitions in * section 1. */ #ifndef YY_SKIP_YYWRAP #ifdef __cplusplus extern "C" int ap_expr_yywrap (yyscan_t yyscanner ); #else extern int ap_expr_yywrap (yyscan_t yyscanner ); #endif #endif #ifndef yytext_ptr static void yy_flex_strncpy (char *,yyconst char *,int ,yyscan_t yyscanner); #endif #ifdef YY_NEED_STRLEN static int yy_flex_strlen (yyconst char * ,yyscan_t yyscanner); #endif #ifndef YY_NO_INPUT #ifdef __cplusplus static int yyinput (yyscan_t yyscanner ); #else static int input (yyscan_t yyscanner ); #endif #endif static void yy_push_state (int new_state ,yyscan_t yyscanner); static void yy_pop_state (yyscan_t yyscanner ); /* Amount of stuff to slurp up with each read. */ #ifndef YY_READ_BUF_SIZE #ifdef __ia64__ /* On IA-64, the buffer size is 16k, not 8k */ #define YY_READ_BUF_SIZE 16384 #else #define YY_READ_BUF_SIZE 8192 #endif /* __ia64__ */ #endif /* Copy whatever the last rule matched to the standard output. */ #ifndef ECHO /* This used to be an fputs(), but since the string might contain NUL's, * we now use fwrite(). */ #define ECHO do { if (fwrite( yytext, yyleng, 1, yyout )) {} } while (0) #endif /* Gets input and stuffs it into "buf". number of characters read, or YY_NULL, * is returned in "result". */ #ifndef YY_INPUT #define YY_INPUT(buf,result,max_size) \ if ( YY_CURRENT_BUFFER_LVALUE->yy_is_interactive ) \ { \ int c = '*'; \ size_t n; \ for ( n = 0; n < max_size && \ (c = getc( yyin )) != EOF && c != '\n'; ++n ) \ buf[n] = (char) c; \ if ( c == '\n' ) \ buf[n++] = (char) c; \ if ( c == EOF && ferror( yyin ) ) \ YY_FATAL_ERROR( "input in flex scanner failed" ); \ result = n; \ } \ else \ { \ errno=0; \ while ( (result = fread(buf, 1, max_size, yyin))==0 && ferror(yyin)) \ { \ if( errno != EINTR) \ { \ YY_FATAL_ERROR( "input in flex scanner failed" ); \ break; \ } \ errno=0; \ clearerr(yyin); \ } \ }\ \ #endif /* No semi-colon after return; correct usage is to write "yyterminate();" - * we don't want an extra ';' after the "return" because that will cause * some compilers to complain about unreachable statements. */ #ifndef yyterminate #define yyterminate() return YY_NULL #endif /* Number of entries by which start-condition stack grows. */ #ifndef YY_START_STACK_INCR #define YY_START_STACK_INCR 25 #endif /* Report a fatal error. */ #ifndef YY_FATAL_ERROR #define YY_FATAL_ERROR(msg) yy_fatal_error( msg , yyscanner) #endif /* end tables serialization structures and prototypes */ /* Default declaration of generated scanner - a define so the user can * easily add parameters. */ #ifndef YY_DECL #define YY_DECL_IS_OURS 1 extern int ap_expr_yylex \ (YYSTYPE * yylval_param ,yyscan_t yyscanner); #define YY_DECL int ap_expr_yylex \ (YYSTYPE * yylval_param , yyscan_t yyscanner) #endif /* !YY_DECL */ /* Code executed at the beginning of each rule, after yytext and yyleng * have been set up. */ #ifndef YY_USER_ACTION #define YY_USER_ACTION #endif /* Code executed at the end of each rule. */ #ifndef YY_BREAK #define YY_BREAK break; #endif #define YY_RULE_SETUP \ YY_USER_ACTION /** The main scanner function which does all the work. */ YY_DECL { register yy_state_type yy_current_state; register char *yy_cp, *yy_bp; register int yy_act; struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; #line 78 "util_expr_scan.l" char regex_buf[MAX_STRING_LEN]; char *regex_ptr = NULL; char regex_del = '\0'; /* * Set initial state for string expressions */ if (yyextra->at_start) { yyextra->at_start = 0; if (yyextra->flags & AP_EXPR_FLAG_STRING_RESULT) { BEGIN(str); return T_EXPR_STRING; } else { return T_EXPR_BOOL; } } /* * Whitespaces */ #line 886 "util_expr_scan.c" yylval = yylval_param; if ( !yyg->yy_init ) { yyg->yy_init = 1; #ifdef YY_USER_INIT YY_USER_INIT; #endif if ( ! yyg->yy_start ) yyg->yy_start = 1; /* first start state */ if ( ! yyin ) yyin = stdin; if ( ! yyout ) yyout = stdout; if ( ! YY_CURRENT_BUFFER ) { ap_expr_yyensure_buffer_stack (yyscanner); YY_CURRENT_BUFFER_LVALUE = ap_expr_yy_create_buffer(yyin,YY_BUF_SIZE ,yyscanner); } ap_expr_yy_load_buffer_state(yyscanner ); } while ( 1 ) /* loops until end-of-file is reached */ { yy_cp = yyg->yy_c_buf_p; /* Support of yytext. */ *yy_cp = yyg->yy_hold_char; /* yy_bp points to the position in yy_ch_buf of the start of * the current run. */ yy_bp = yy_cp; yy_current_state = yyg->yy_start; yy_match: do { register YY_CHAR yy_c = yy_ec[YY_SC_TO_UI(*yy_cp)]; if ( yy_accept[yy_current_state] ) { yyg->yy_last_accepting_state = yy_current_state; yyg->yy_last_accepting_cpos = yy_cp; } while ( yy_chk[yy_base[yy_current_state] + yy_c] != yy_current_state ) { yy_current_state = (int) yy_def[yy_current_state]; if ( yy_current_state >= 124 ) yy_c = yy_meta[(unsigned int) yy_c]; } yy_current_state = yy_nxt[yy_base[yy_current_state] + (unsigned int) yy_c]; ++yy_cp; } while ( yy_current_state != 123 ); yy_cp = yyg->yy_last_accepting_cpos; yy_current_state = yyg->yy_last_accepting_state; yy_find_action: yy_act = yy_accept[yy_current_state]; YY_DO_BEFORE_ACTION; do_action: /* This label is used only to access EOF actions. */ switch ( yy_act ) { /* beginning of action switch */ case 0: /* must back up */ /* undo the effects of YY_DO_BEFORE_ACTION */ *yy_cp = yyg->yy_hold_char; yy_cp = yyg->yy_last_accepting_cpos; yy_current_state = yyg->yy_last_accepting_state; goto yy_find_action; case 1: /* rule 1 can match eol */ YY_RULE_SETUP #line 103 "util_expr_scan.l" { /* NOP */ } YY_BREAK /* * strings ("..." and '...') */ case 2: YY_RULE_SETUP #line 110 "util_expr_scan.l" { str_ptr = str_buf; str_del = yytext[0]; BEGIN(str); return T_STR_BEGIN; } YY_BREAK case 3: YY_RULE_SETUP #line 116 "util_expr_scan.l" { if (yytext[0] == str_del) { if (YY_START == var) { PERROR("Unterminated variable in string"); } else if (str_ptr == str_buf) { BEGIN(INITIAL); return T_STR_END; } else { /* return what we have so far and scan delimiter again */ *str_ptr = '\0'; yylval->cpVal = apr_pstrdup(yyextra->pool, str_buf); yyless(0); str_ptr = str_buf; return T_STRING; } } else { STR_APPEND(yytext[0]); } } YY_BREAK case 4: /* rule 4 can match eol */ YY_RULE_SETUP #line 138 "util_expr_scan.l" { PERROR("Unterminated string or variable"); } YY_BREAK case YY_STATE_EOF(var): case YY_STATE_EOF(vararg): #line 141 "util_expr_scan.l" { PERROR("Unterminated string or variable"); } YY_BREAK case YY_STATE_EOF(str): #line 144 "util_expr_scan.l" { if (!(yyextra->flags & AP_EXPR_FLAG_STRING_RESULT)) { PERROR("Unterminated string or variable"); } else { *str_ptr = '\0'; yylval->cpVal = apr_pstrdup(yyextra->pool, str_buf); str_ptr = str_buf; BEGIN(INITIAL); return T_STRING; } } YY_BREAK case 5: YY_RULE_SETUP #line 157 "util_expr_scan.l" { int result; (void)sscanf(yytext+1, "%o", &result); if (result > 0xff) { PERROR("Escape sequence out of bound"); } else { STR_APPEND(result); } } YY_BREAK case 6: YY_RULE_SETUP #line 168 "util_expr_scan.l" { PERROR("Bad escape sequence"); } YY_BREAK case 7: YY_RULE_SETUP #line 171 "util_expr_scan.l" { STR_APPEND('\n'); } YY_BREAK case 8: YY_RULE_SETUP #line 172 "util_expr_scan.l" { STR_APPEND('\r'); } YY_BREAK case 9: YY_RULE_SETUP #line 173 "util_expr_scan.l" { STR_APPEND('\t'); } YY_BREAK case 10: YY_RULE_SETUP #line 174 "util_expr_scan.l" { STR_APPEND('\b'); } YY_BREAK case 11: YY_RULE_SETUP #line 175 "util_expr_scan.l" { STR_APPEND('\f'); } YY_BREAK case 12: /* rule 12 can match eol */ YY_RULE_SETUP #line 176 "util_expr_scan.l" { STR_APPEND(yytext[1]); } YY_BREAK /* regexp backref inside string/arg */ case 13: YY_RULE_SETUP #line 179 "util_expr_scan.l" { if (str_ptr != str_buf) { /* return what we have so far and scan '$x' again */ *str_ptr = '\0'; yylval->cpVal = apr_pstrdup(yyextra->pool, str_buf); str_ptr = str_buf; yyless(0); return T_STRING; } else { yylval->num = yytext[1] - '0'; return T_REGEX_BACKREF; } } YY_BREAK case 14: YY_RULE_SETUP #line 194 "util_expr_scan.l" { char *cp = yytext; while (*cp != '\0') { STR_APPEND(*cp); cp++; } } YY_BREAK /* variable inside string/arg */ case 15: YY_RULE_SETUP #line 203 "util_expr_scan.l" { if (str_ptr != str_buf) { /* return what we have so far and scan '%{' again */ *str_ptr = '\0'; yylval->cpVal = apr_pstrdup(yyextra->pool, str_buf); yyless(0); str_ptr = str_buf; return T_STRING; } else { yy_push_state(var, yyscanner); return T_VAR_BEGIN; } } YY_BREAK case 16: YY_RULE_SETUP #line 218 "util_expr_scan.l" { STR_APPEND(yytext[0]); } YY_BREAK case 17: YY_RULE_SETUP #line 222 "util_expr_scan.l" { STR_APPEND(yytext[0]); } YY_BREAK case 18: YY_RULE_SETUP #line 226 "util_expr_scan.l" { yy_push_state(var, yyscanner); return T_VAR_BEGIN; } YY_BREAK case 19: YY_RULE_SETUP #line 231 "util_expr_scan.l" { yylval->num = yytext[1] - '0'; return T_REGEX_BACKREF; } YY_BREAK /* * fixed name variable expansion %{XXX} and function call in %{func:arg} syntax */ case 20: YY_RULE_SETUP #line 239 "util_expr_scan.l" { yylval->cpVal = apr_pstrdup(yyextra->pool, yytext); return T_ID; } YY_BREAK case 21: YY_RULE_SETUP #line 244 "util_expr_scan.l" { yy_pop_state(yyscanner); return T_VAR_END; } YY_BREAK case 22: YY_RULE_SETUP #line 249 "util_expr_scan.l" { BEGIN(vararg); return yytext[0]; } YY_BREAK case 23: /* rule 23 can match eol */ YY_RULE_SETUP #line 254 "util_expr_scan.l" { char *msg = apr_psprintf(yyextra->pool, "Invalid character in variable name '%c'", yytext[0]); PERROR(msg); } YY_BREAK case 24: YY_RULE_SETUP #line 260 "util_expr_scan.l" { if (str_ptr != str_buf) { /* return what we have so far and scan '}' again */ *str_ptr = '\0'; yylval->cpVal = apr_pstrdup(yyextra->pool, str_buf); str_ptr = str_buf; yyless(0); return T_STRING; } else { yy_pop_state(yyscanner); return T_VAR_END; } } YY_BREAK /* * Regular Expression */ case 25: YY_RULE_SETUP #line 278 "util_expr_scan.l" { regex_del = yytext[1]; regex_ptr = regex_buf; BEGIN(regex); } YY_BREAK case 26: YY_RULE_SETUP #line 283 "util_expr_scan.l" { regex_del = yytext[0]; regex_ptr = regex_buf; BEGIN(regex); } YY_BREAK case 27: /* rule 27 can match eol */ YY_RULE_SETUP #line 288 "util_expr_scan.l" { if (yytext[0] == regex_del) { *regex_ptr = '\0'; BEGIN(regex_flags); } else { *regex_ptr++ = yytext[0]; if (regex_ptr >= regex_buf + sizeof(regex_buf)) PERROR("Regexp too long"); } } YY_BREAK case 28: YY_RULE_SETUP #line 299 "util_expr_scan.l" { yylval->cpVal = apr_pstrdup(yyextra->pool, regex_buf); BEGIN(INITIAL); return T_REGEX_I; } YY_BREAK case 29: /* rule 29 can match eol */ YY_RULE_SETUP #line 304 "util_expr_scan.l" { yylval->cpVal = apr_pstrdup(yyextra->pool, regex_buf); yyless(0); BEGIN(INITIAL); return T_REGEX; } YY_BREAK case YY_STATE_EOF(regex_flags): #line 310 "util_expr_scan.l" { yylval->cpVal = apr_pstrdup(yyextra->pool, regex_buf); BEGIN(INITIAL); return T_REGEX; } YY_BREAK /* * Operators */ case 30: YY_RULE_SETUP #line 319 "util_expr_scan.l" { return T_OP_STR_EQ; } YY_BREAK case 31: YY_RULE_SETUP #line 320 "util_expr_scan.l" { return T_OP_STR_NE; } YY_BREAK case 32: YY_RULE_SETUP #line 321 "util_expr_scan.l" { return T_OP_STR_LT; } YY_BREAK case 33: YY_RULE_SETUP #line 322 "util_expr_scan.l" { return T_OP_STR_LE; } YY_BREAK case 34: YY_RULE_SETUP #line 323 "util_expr_scan.l" { return T_OP_STR_GT; } YY_BREAK case 35: YY_RULE_SETUP #line 324 "util_expr_scan.l" { return T_OP_STR_GE; } YY_BREAK case 36: YY_RULE_SETUP #line 325 "util_expr_scan.l" { return T_OP_REG; } YY_BREAK case 37: YY_RULE_SETUP #line 326 "util_expr_scan.l" { return T_OP_NRE; } YY_BREAK case 38: YY_RULE_SETUP #line 327 "util_expr_scan.l" { return T_OP_AND; } YY_BREAK case 39: YY_RULE_SETUP #line 328 "util_expr_scan.l" { return T_OP_AND; } YY_BREAK case 40: YY_RULE_SETUP #line 329 "util_expr_scan.l" { return T_OP_OR; } YY_BREAK case 41: YY_RULE_SETUP #line 330 "util_expr_scan.l" { return T_OP_OR; } YY_BREAK case 42: YY_RULE_SETUP #line 331 "util_expr_scan.l" { return T_OP_NOT; } YY_BREAK case 43: YY_RULE_SETUP #line 332 "util_expr_scan.l" { return T_OP_NOT; } YY_BREAK case 44: YY_RULE_SETUP #line 333 "util_expr_scan.l" { return T_OP_CONCAT; } YY_BREAK case 45: YY_RULE_SETUP #line 334 "util_expr_scan.l" { return T_OP_IN; } YY_BREAK case 46: YY_RULE_SETUP #line 335 "util_expr_scan.l" { return T_OP_EQ; } YY_BREAK case 47: YY_RULE_SETUP #line 336 "util_expr_scan.l" { return T_OP_NE; } YY_BREAK case 48: YY_RULE_SETUP #line 337 "util_expr_scan.l" { return T_OP_GE; } YY_BREAK case 49: YY_RULE_SETUP #line 338 "util_expr_scan.l" { return T_OP_LE; } YY_BREAK case 50: YY_RULE_SETUP #line 339 "util_expr_scan.l" { return T_OP_GT; } YY_BREAK case 51: YY_RULE_SETUP #line 340 "util_expr_scan.l" { return T_OP_LT; } YY_BREAK /* for compatibility with ssl_expr */ case 52: YY_RULE_SETUP #line 343 "util_expr_scan.l" { return T_OP_LT; } YY_BREAK case 53: YY_RULE_SETUP #line 344 "util_expr_scan.l" { return T_OP_LE; } YY_BREAK case 54: YY_RULE_SETUP #line 345 "util_expr_scan.l" { return T_OP_GT; } YY_BREAK case 55: YY_RULE_SETUP #line 346 "util_expr_scan.l" { return T_OP_GE; } YY_BREAK case 56: YY_RULE_SETUP #line 347 "util_expr_scan.l" { return T_OP_NE; } YY_BREAK case 57: YY_RULE_SETUP #line 348 "util_expr_scan.l" { return T_OP_EQ; } YY_BREAK case 58: YY_RULE_SETUP #line 349 "util_expr_scan.l" { return T_OP_IN; } YY_BREAK case 59: YY_RULE_SETUP #line 351 "util_expr_scan.l" { yylval->cpVal = apr_pstrdup(yyextra->pool, yytext + 1); return T_OP_UNARY; } YY_BREAK case 60: YY_RULE_SETUP #line 356 "util_expr_scan.l" { yylval->cpVal = apr_pstrdup(yyextra->pool, yytext + 1); return T_OP_BINARY; } YY_BREAK /* * Specials */ case 61: YY_RULE_SETUP #line 364 "util_expr_scan.l" { return T_TRUE; } YY_BREAK case 62: YY_RULE_SETUP #line 365 "util_expr_scan.l" { return T_FALSE; } YY_BREAK /* * Digits */ case 63: YY_RULE_SETUP #line 370 "util_expr_scan.l" { yylval->cpVal = apr_pstrdup(yyextra->pool, yytext); return T_DIGIT; } YY_BREAK /* * Identifiers */ case 64: YY_RULE_SETUP #line 378 "util_expr_scan.l" { yylval->cpVal = apr_pstrdup(yyextra->pool, yytext); return T_ID; } YY_BREAK /* * These are parts of the grammar and are returned as is */ case 65: YY_RULE_SETUP #line 386 "util_expr_scan.l" { return yytext[0]; } YY_BREAK /* * Anything else is an error */ case 66: /* rule 66 can match eol */ YY_RULE_SETUP #line 393 "util_expr_scan.l" { char *msg = apr_psprintf(yyextra->pool, "Parse error near '%c'", yytext[0]); PERROR(msg); } YY_BREAK case 67: YY_RULE_SETUP #line 398 "util_expr_scan.l" YY_FATAL_ERROR( "flex scanner jammed" ); YY_BREAK #line 1523 "util_expr_scan.c" case YY_STATE_EOF(INITIAL): case YY_STATE_EOF(regex): yyterminate(); case YY_END_OF_BUFFER: { /* Amount of text matched not including the EOB char. */ int yy_amount_of_matched_text = (int) (yy_cp - yyg->yytext_ptr) - 1; /* Undo the effects of YY_DO_BEFORE_ACTION. */ *yy_cp = yyg->yy_hold_char; YY_RESTORE_YY_MORE_OFFSET if ( YY_CURRENT_BUFFER_LVALUE->yy_buffer_status == YY_BUFFER_NEW ) { /* We're scanning a new file or input source. It's * possible that this happened because the user * just pointed yyin at a new source and called * ap_expr_yylex(). If so, then we have to assure * consistency between YY_CURRENT_BUFFER and our * globals. Here is the right place to do so, because * this is the first action (other than possibly a * back-up) that will match for the new input source. */ yyg->yy_n_chars = YY_CURRENT_BUFFER_LVALUE->yy_n_chars; YY_CURRENT_BUFFER_LVALUE->yy_input_file = yyin; YY_CURRENT_BUFFER_LVALUE->yy_buffer_status = YY_BUFFER_NORMAL; } /* Note that here we test for yy_c_buf_p "<=" to the position * of the first EOB in the buffer, since yy_c_buf_p will * already have been incremented past the NUL character * (since all states make transitions on EOB to the * end-of-buffer state). Contrast this with the test * in input(). */ if ( yyg->yy_c_buf_p <= &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[yyg->yy_n_chars] ) { /* This was really a NUL. */ yy_state_type yy_next_state; yyg->yy_c_buf_p = yyg->yytext_ptr + yy_amount_of_matched_text; yy_current_state = yy_get_previous_state( yyscanner ); /* Okay, we're now positioned to make the NUL * transition. We couldn't have * yy_get_previous_state() go ahead and do it * for us because it doesn't know how to deal * with the possibility of jamming (and we don't * want to build jamming into it because then it * will run more slowly). */ yy_next_state = yy_try_NUL_trans( yy_current_state , yyscanner); yy_bp = yyg->yytext_ptr + YY_MORE_ADJ; if ( yy_next_state ) { /* Consume the NUL. */ yy_cp = ++yyg->yy_c_buf_p; yy_current_state = yy_next_state; goto yy_match; } else { yy_cp = yyg->yy_last_accepting_cpos; yy_current_state = yyg->yy_last_accepting_state; goto yy_find_action; } } else switch ( yy_get_next_buffer( yyscanner ) ) { case EOB_ACT_END_OF_FILE: { yyg->yy_did_buffer_switch_on_eof = 0; if ( ap_expr_yywrap(yyscanner ) ) { /* Note: because we've taken care in * yy_get_next_buffer() to have set up * yytext, we can now set up * yy_c_buf_p so that if some total * hoser (like flex itself) wants to * call the scanner after we return the * YY_NULL, it'll still work - another * YY_NULL will get returned. */ yyg->yy_c_buf_p = yyg->yytext_ptr + YY_MORE_ADJ; yy_act = YY_STATE_EOF(YY_START); goto do_action; } else { if ( ! yyg->yy_did_buffer_switch_on_eof ) YY_NEW_FILE; } break; } case EOB_ACT_CONTINUE_SCAN: yyg->yy_c_buf_p = yyg->yytext_ptr + yy_amount_of_matched_text; yy_current_state = yy_get_previous_state( yyscanner ); yy_cp = yyg->yy_c_buf_p; yy_bp = yyg->yytext_ptr + YY_MORE_ADJ; goto yy_match; case EOB_ACT_LAST_MATCH: yyg->yy_c_buf_p = &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[yyg->yy_n_chars]; yy_current_state = yy_get_previous_state( yyscanner ); yy_cp = yyg->yy_c_buf_p; yy_bp = yyg->yytext_ptr + YY_MORE_ADJ; goto yy_find_action; } break; } default: YY_FATAL_ERROR( "fatal flex scanner internal error--no action found" ); } /* end of action switch */ } /* end of scanning one token */ } /* end of ap_expr_yylex */ /* yy_get_next_buffer - try to read in a new buffer * * Returns a code representing an action: * EOB_ACT_LAST_MATCH - * EOB_ACT_CONTINUE_SCAN - continue scanning from current position * EOB_ACT_END_OF_FILE - end of file */ static int yy_get_next_buffer (yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; register char *dest = YY_CURRENT_BUFFER_LVALUE->yy_ch_buf; register char *source = yyg->yytext_ptr; register int number_to_move, i; int ret_val; if ( yyg->yy_c_buf_p > &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[yyg->yy_n_chars + 1] ) YY_FATAL_ERROR( "fatal flex scanner internal error--end of buffer missed" ); if ( YY_CURRENT_BUFFER_LVALUE->yy_fill_buffer == 0 ) { /* Don't try to fill the buffer, so this is an EOF. */ if ( yyg->yy_c_buf_p - yyg->yytext_ptr - YY_MORE_ADJ == 1 ) { /* We matched a single character, the EOB, so * treat this as a final EOF. */ return EOB_ACT_END_OF_FILE; } else { /* We matched some text prior to the EOB, first * process it. */ return EOB_ACT_LAST_MATCH; } } /* Try to read more data. */ /* First move last chars to start of buffer. */ number_to_move = (int) (yyg->yy_c_buf_p - yyg->yytext_ptr) - 1; for ( i = 0; i < number_to_move; ++i ) *(dest++) = *(source++); if ( YY_CURRENT_BUFFER_LVALUE->yy_buffer_status == YY_BUFFER_EOF_PENDING ) /* don't do the read, it's not guaranteed to return an EOF, * just force an EOF */ YY_CURRENT_BUFFER_LVALUE->yy_n_chars = yyg->yy_n_chars = 0; else { int num_to_read = YY_CURRENT_BUFFER_LVALUE->yy_buf_size - number_to_move - 1; while ( num_to_read <= 0 ) { /* Not enough room in the buffer - grow it. */ /* just a shorter name for the current buffer */ YY_BUFFER_STATE b = YY_CURRENT_BUFFER; int yy_c_buf_p_offset = (int) (yyg->yy_c_buf_p - b->yy_ch_buf); if ( b->yy_is_our_buffer ) { int new_size = b->yy_buf_size * 2; if ( new_size <= 0 ) b->yy_buf_size += b->yy_buf_size / 8; else b->yy_buf_size *= 2; b->yy_ch_buf = (char *) /* Include room in for 2 EOB chars. */ ap_expr_yyrealloc((void *) b->yy_ch_buf,b->yy_buf_size + 2 ,yyscanner ); } else /* Can't grow it, we don't own it. */ b->yy_ch_buf = 0; if ( ! b->yy_ch_buf ) YY_FATAL_ERROR( "fatal error - scanner input buffer overflow" ); yyg->yy_c_buf_p = &b->yy_ch_buf[yy_c_buf_p_offset]; num_to_read = YY_CURRENT_BUFFER_LVALUE->yy_buf_size - number_to_move - 1; } if ( num_to_read > YY_READ_BUF_SIZE ) num_to_read = YY_READ_BUF_SIZE; /* Read in more data. */ YY_INPUT( (&YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[number_to_move]), yyg->yy_n_chars, (size_t) num_to_read ); YY_CURRENT_BUFFER_LVALUE->yy_n_chars = yyg->yy_n_chars; } if ( yyg->yy_n_chars == 0 ) { if ( number_to_move == YY_MORE_ADJ ) { ret_val = EOB_ACT_END_OF_FILE; ap_expr_yyrestart(yyin ,yyscanner); } else { ret_val = EOB_ACT_LAST_MATCH; YY_CURRENT_BUFFER_LVALUE->yy_buffer_status = YY_BUFFER_EOF_PENDING; } } else ret_val = EOB_ACT_CONTINUE_SCAN; if ((yy_size_t) (yyg->yy_n_chars + number_to_move) > YY_CURRENT_BUFFER_LVALUE->yy_buf_size) { /* Extend the array by 50%, plus the number we really need. */ yy_size_t new_size = yyg->yy_n_chars + number_to_move + (yyg->yy_n_chars >> 1); YY_CURRENT_BUFFER_LVALUE->yy_ch_buf = (char *) ap_expr_yyrealloc((void *) YY_CURRENT_BUFFER_LVALUE->yy_ch_buf,new_size ,yyscanner ); if ( ! YY_CURRENT_BUFFER_LVALUE->yy_ch_buf ) YY_FATAL_ERROR( "out of dynamic memory in yy_get_next_buffer()" ); } yyg->yy_n_chars += number_to_move; YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[yyg->yy_n_chars] = YY_END_OF_BUFFER_CHAR; YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[yyg->yy_n_chars + 1] = YY_END_OF_BUFFER_CHAR; yyg->yytext_ptr = &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[0]; return ret_val; } /* yy_get_previous_state - get the state just before the EOB char was reached */ static yy_state_type yy_get_previous_state (yyscan_t yyscanner) { register yy_state_type yy_current_state; register char *yy_cp; struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; yy_current_state = yyg->yy_start; for ( yy_cp = yyg->yytext_ptr + YY_MORE_ADJ; yy_cp < yyg->yy_c_buf_p; ++yy_cp ) { register YY_CHAR yy_c = (*yy_cp ? yy_ec[YY_SC_TO_UI(*yy_cp)] : 1); if ( yy_accept[yy_current_state] ) { yyg->yy_last_accepting_state = yy_current_state; yyg->yy_last_accepting_cpos = yy_cp; } while ( yy_chk[yy_base[yy_current_state] + yy_c] != yy_current_state ) { yy_current_state = (int) yy_def[yy_current_state]; if ( yy_current_state >= 124 ) yy_c = yy_meta[(unsigned int) yy_c]; } yy_current_state = yy_nxt[yy_base[yy_current_state] + (unsigned int) yy_c]; } return yy_current_state; } /* yy_try_NUL_trans - try to make a transition on the NUL character * * synopsis * next_state = yy_try_NUL_trans( current_state ); */ static yy_state_type yy_try_NUL_trans (yy_state_type yy_current_state , yyscan_t yyscanner) { register int yy_is_jam; struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; /* This var may be unused depending upon options. */ register char *yy_cp = yyg->yy_c_buf_p; register YY_CHAR yy_c = 1; if ( yy_accept[yy_current_state] ) { yyg->yy_last_accepting_state = yy_current_state; yyg->yy_last_accepting_cpos = yy_cp; } while ( yy_chk[yy_base[yy_current_state] + yy_c] != yy_current_state ) { yy_current_state = (int) yy_def[yy_current_state]; if ( yy_current_state >= 124 ) yy_c = yy_meta[(unsigned int) yy_c]; } yy_current_state = yy_nxt[yy_base[yy_current_state] + (unsigned int) yy_c]; yy_is_jam = (yy_current_state == 123); return yy_is_jam ? 0 : yy_current_state; } #ifndef YY_NO_INPUT #ifdef __cplusplus static int yyinput (yyscan_t yyscanner) #else static int input (yyscan_t yyscanner) #endif { int c; struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; *yyg->yy_c_buf_p = yyg->yy_hold_char; if ( *yyg->yy_c_buf_p == YY_END_OF_BUFFER_CHAR ) { /* yy_c_buf_p now points to the character we want to return. * If this occurs *before* the EOB characters, then it's a * valid NUL; if not, then we've hit the end of the buffer. */ if ( yyg->yy_c_buf_p < &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[yyg->yy_n_chars] ) /* This was really a NUL. */ *yyg->yy_c_buf_p = '\0'; else { /* need more input */ int offset = yyg->yy_c_buf_p - yyg->yytext_ptr; ++yyg->yy_c_buf_p; switch ( yy_get_next_buffer( yyscanner ) ) { case EOB_ACT_LAST_MATCH: /* This happens because yy_g_n_b() * sees that we've accumulated a * token and flags that we need to * try matching the token before * proceeding. But for input(), * there's no matching to consider. * So convert the EOB_ACT_LAST_MATCH * to EOB_ACT_END_OF_FILE. */ /* Reset buffer status. */ ap_expr_yyrestart(yyin ,yyscanner); /*FALLTHROUGH*/ case EOB_ACT_END_OF_FILE: { if ( ap_expr_yywrap(yyscanner ) ) return EOF; if ( ! yyg->yy_did_buffer_switch_on_eof ) YY_NEW_FILE; #ifdef __cplusplus return yyinput(yyscanner); #else return input(yyscanner); #endif } case EOB_ACT_CONTINUE_SCAN: yyg->yy_c_buf_p = yyg->yytext_ptr + offset; break; } } } c = *(unsigned char *) yyg->yy_c_buf_p; /* cast for 8-bit char's */ *yyg->yy_c_buf_p = '\0'; /* preserve yytext */ yyg->yy_hold_char = *++yyg->yy_c_buf_p; return c; } #endif /* ifndef YY_NO_INPUT */ /** Immediately switch to a different input stream. * @param input_file A readable stream. * @param yyscanner The scanner object. * @note This function does not reset the start condition to @c INITIAL . */ void ap_expr_yyrestart (FILE * input_file , yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; if ( ! YY_CURRENT_BUFFER ){ ap_expr_yyensure_buffer_stack (yyscanner); YY_CURRENT_BUFFER_LVALUE = ap_expr_yy_create_buffer(yyin,YY_BUF_SIZE ,yyscanner); } ap_expr_yy_init_buffer(YY_CURRENT_BUFFER,input_file ,yyscanner); ap_expr_yy_load_buffer_state(yyscanner ); } /** Switch to a different input buffer. * @param new_buffer The new input buffer. * @param yyscanner The scanner object. */ void ap_expr_yy_switch_to_buffer (YY_BUFFER_STATE new_buffer , yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; /* TODO. We should be able to replace this entire function body * with * ap_expr_yypop_buffer_state(); * ap_expr_yypush_buffer_state(new_buffer); */ ap_expr_yyensure_buffer_stack (yyscanner); if ( YY_CURRENT_BUFFER == new_buffer ) return; if ( YY_CURRENT_BUFFER ) { /* Flush out information for old buffer. */ *yyg->yy_c_buf_p = yyg->yy_hold_char; YY_CURRENT_BUFFER_LVALUE->yy_buf_pos = yyg->yy_c_buf_p; YY_CURRENT_BUFFER_LVALUE->yy_n_chars = yyg->yy_n_chars; } YY_CURRENT_BUFFER_LVALUE = new_buffer; ap_expr_yy_load_buffer_state(yyscanner ); /* We don't actually know whether we did this switch during * EOF (ap_expr_yywrap()) processing, but the only time this flag * is looked at is after ap_expr_yywrap() is called, so it's safe * to go ahead and always set it. */ yyg->yy_did_buffer_switch_on_eof = 1; } static void ap_expr_yy_load_buffer_state (yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; yyg->yy_n_chars = YY_CURRENT_BUFFER_LVALUE->yy_n_chars; yyg->yytext_ptr = yyg->yy_c_buf_p = YY_CURRENT_BUFFER_LVALUE->yy_buf_pos; yyin = YY_CURRENT_BUFFER_LVALUE->yy_input_file; yyg->yy_hold_char = *yyg->yy_c_buf_p; } /** Allocate and initialize an input buffer state. * @param file A readable stream. * @param size The character buffer size in bytes. When in doubt, use @c YY_BUF_SIZE. * @param yyscanner The scanner object. * @return the allocated buffer state. */ YY_BUFFER_STATE ap_expr_yy_create_buffer (FILE * file, int size , yyscan_t yyscanner) { YY_BUFFER_STATE b; b = (YY_BUFFER_STATE) ap_expr_yyalloc(sizeof( struct yy_buffer_state ) ,yyscanner ); if ( ! b ) YY_FATAL_ERROR( "out of dynamic memory in ap_expr_yy_create_buffer()" ); b->yy_buf_size = size; /* yy_ch_buf has to be 2 characters longer than the size given because * we need to put in 2 end-of-buffer characters. */ b->yy_ch_buf = (char *) ap_expr_yyalloc(b->yy_buf_size + 2 ,yyscanner ); if ( ! b->yy_ch_buf ) YY_FATAL_ERROR( "out of dynamic memory in ap_expr_yy_create_buffer()" ); b->yy_is_our_buffer = 1; ap_expr_yy_init_buffer(b,file ,yyscanner); return b; } /** Destroy the buffer. * @param b a buffer created with ap_expr_yy_create_buffer() * @param yyscanner The scanner object. */ void ap_expr_yy_delete_buffer (YY_BUFFER_STATE b , yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; if ( ! b ) return; if ( b == YY_CURRENT_BUFFER ) /* Not sure if we should pop here. */ YY_CURRENT_BUFFER_LVALUE = (YY_BUFFER_STATE) 0; if ( b->yy_is_our_buffer ) ap_expr_yyfree((void *) b->yy_ch_buf ,yyscanner ); ap_expr_yyfree((void *) b ,yyscanner ); } /* Initializes or reinitializes a buffer. * This function is sometimes called more than once on the same buffer, * such as during a ap_expr_yyrestart() or at EOF. */ static void ap_expr_yy_init_buffer (YY_BUFFER_STATE b, FILE * file , yyscan_t yyscanner) { int oerrno = errno; struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; ap_expr_yy_flush_buffer(b ,yyscanner); b->yy_input_file = file; b->yy_fill_buffer = 1; /* If b is the current buffer, then ap_expr_yy_init_buffer was _probably_ * called from ap_expr_yyrestart() or through yy_get_next_buffer. * In that case, we don't want to reset the lineno or column. */ if (b != YY_CURRENT_BUFFER){ b->yy_bs_lineno = 1; b->yy_bs_column = 0; } b->yy_is_interactive = 0; errno = oerrno; } /** Discard all buffered characters. On the next scan, YY_INPUT will be called. * @param b the buffer state to be flushed, usually @c YY_CURRENT_BUFFER. * @param yyscanner The scanner object. */ void ap_expr_yy_flush_buffer (YY_BUFFER_STATE b , yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; if ( ! b ) return; b->yy_n_chars = 0; /* We always need two end-of-buffer characters. The first causes * a transition to the end-of-buffer state. The second causes * a jam in that state. */ b->yy_ch_buf[0] = YY_END_OF_BUFFER_CHAR; b->yy_ch_buf[1] = YY_END_OF_BUFFER_CHAR; b->yy_buf_pos = &b->yy_ch_buf[0]; b->yy_at_bol = 1; b->yy_buffer_status = YY_BUFFER_NEW; if ( b == YY_CURRENT_BUFFER ) ap_expr_yy_load_buffer_state(yyscanner ); } /** Pushes the new state onto the stack. The new state becomes * the current state. This function will allocate the stack * if necessary. * @param new_buffer The new state. * @param yyscanner The scanner object. */ void ap_expr_yypush_buffer_state (YY_BUFFER_STATE new_buffer , yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; if (new_buffer == NULL) return; ap_expr_yyensure_buffer_stack(yyscanner); /* This block is copied from ap_expr_yy_switch_to_buffer. */ if ( YY_CURRENT_BUFFER ) { /* Flush out information for old buffer. */ *yyg->yy_c_buf_p = yyg->yy_hold_char; YY_CURRENT_BUFFER_LVALUE->yy_buf_pos = yyg->yy_c_buf_p; YY_CURRENT_BUFFER_LVALUE->yy_n_chars = yyg->yy_n_chars; } /* Only push if top exists. Otherwise, replace top. */ if (YY_CURRENT_BUFFER) yyg->yy_buffer_stack_top++; YY_CURRENT_BUFFER_LVALUE = new_buffer; /* copied from ap_expr_yy_switch_to_buffer. */ ap_expr_yy_load_buffer_state(yyscanner ); yyg->yy_did_buffer_switch_on_eof = 1; } /** Removes and deletes the top of the stack, if present. * The next element becomes the new top. * @param yyscanner The scanner object. */ void ap_expr_yypop_buffer_state (yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; if (!YY_CURRENT_BUFFER) return; ap_expr_yy_delete_buffer(YY_CURRENT_BUFFER ,yyscanner); YY_CURRENT_BUFFER_LVALUE = NULL; if (yyg->yy_buffer_stack_top > 0) --yyg->yy_buffer_stack_top; if (YY_CURRENT_BUFFER) { ap_expr_yy_load_buffer_state(yyscanner ); yyg->yy_did_buffer_switch_on_eof = 1; } } /* Allocates the stack if it does not exist. * Guarantees space for at least one push. */ static void ap_expr_yyensure_buffer_stack (yyscan_t yyscanner) { int num_to_alloc; struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; if (!yyg->yy_buffer_stack) { /* First allocation is just for 2 elements, since we don't know if this * scanner will even need a stack. We use 2 instead of 1 to avoid an * immediate realloc on the next call. */ num_to_alloc = 1; yyg->yy_buffer_stack = (struct yy_buffer_state**)ap_expr_yyalloc (num_to_alloc * sizeof(struct yy_buffer_state*) , yyscanner); if ( ! yyg->yy_buffer_stack ) YY_FATAL_ERROR( "out of dynamic memory in ap_expr_yyensure_buffer_stack()" ); memset(yyg->yy_buffer_stack, 0, num_to_alloc * sizeof(struct yy_buffer_state*)); yyg->yy_buffer_stack_max = num_to_alloc; yyg->yy_buffer_stack_top = 0; return; } if (yyg->yy_buffer_stack_top >= (yyg->yy_buffer_stack_max) - 1){ /* Increase the buffer to prepare for a possible push. */ int grow_size = 8 /* arbitrary grow size */; num_to_alloc = yyg->yy_buffer_stack_max + grow_size; yyg->yy_buffer_stack = (struct yy_buffer_state**)ap_expr_yyrealloc (yyg->yy_buffer_stack, num_to_alloc * sizeof(struct yy_buffer_state*) , yyscanner); if ( ! yyg->yy_buffer_stack ) YY_FATAL_ERROR( "out of dynamic memory in ap_expr_yyensure_buffer_stack()" ); /* zero only the new slots.*/ memset(yyg->yy_buffer_stack + yyg->yy_buffer_stack_max, 0, grow_size * sizeof(struct yy_buffer_state*)); yyg->yy_buffer_stack_max = num_to_alloc; } } /** Setup the input buffer state to scan directly from a user-specified character buffer. * @param base the character buffer * @param size the size in bytes of the character buffer * @param yyscanner The scanner object. * @return the newly allocated buffer state object. */ YY_BUFFER_STATE ap_expr_yy_scan_buffer (char * base, yy_size_t size , yyscan_t yyscanner) { YY_BUFFER_STATE b; if ( size < 2 || base[size-2] != YY_END_OF_BUFFER_CHAR || base[size-1] != YY_END_OF_BUFFER_CHAR ) /* They forgot to leave room for the EOB's. */ return 0; b = (YY_BUFFER_STATE) ap_expr_yyalloc(sizeof( struct yy_buffer_state ) ,yyscanner ); if ( ! b ) YY_FATAL_ERROR( "out of dynamic memory in ap_expr_yy_scan_buffer()" ); b->yy_buf_size = size - 2; /* "- 2" to take care of EOB's */ b->yy_buf_pos = b->yy_ch_buf = base; b->yy_is_our_buffer = 0; b->yy_input_file = 0; b->yy_n_chars = b->yy_buf_size; b->yy_is_interactive = 0; b->yy_at_bol = 1; b->yy_fill_buffer = 0; b->yy_buffer_status = YY_BUFFER_NEW; ap_expr_yy_switch_to_buffer(b ,yyscanner ); return b; } /** Setup the input buffer state to scan a string. The next call to ap_expr_yylex() will * scan from a @e copy of @a str. * @param yystr a NUL-terminated string to scan * @param yyscanner The scanner object. * @return the newly allocated buffer state object. * @note If you want to scan bytes that may contain NUL values, then use * ap_expr_yy_scan_bytes() instead. */ YY_BUFFER_STATE ap_expr_yy_scan_string (yyconst char * yystr , yyscan_t yyscanner) { return ap_expr_yy_scan_bytes(yystr,strlen(yystr) ,yyscanner); } /** Setup the input buffer state to scan the given bytes. The next call to ap_expr_yylex() will * scan from a @e copy of @a bytes. * @param yybytes the byte buffer to scan * @param _yybytes_len the number of bytes in the buffer pointed to by @a bytes. * @param yyscanner The scanner object. * @return the newly allocated buffer state object. */ YY_BUFFER_STATE ap_expr_yy_scan_bytes (yyconst char * yybytes, int _yybytes_len , yyscan_t yyscanner) { YY_BUFFER_STATE b; char *buf; yy_size_t n; int i; /* Get memory for full buffer, including space for trailing EOB's. */ n = _yybytes_len + 2; buf = (char *) ap_expr_yyalloc(n ,yyscanner ); if ( ! buf ) YY_FATAL_ERROR( "out of dynamic memory in ap_expr_yy_scan_bytes()" ); for ( i = 0; i < _yybytes_len; ++i ) buf[i] = yybytes[i]; buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR; b = ap_expr_yy_scan_buffer(buf,n ,yyscanner); if ( ! b ) YY_FATAL_ERROR( "bad buffer in ap_expr_yy_scan_bytes()" ); /* It's okay to grow etc. this buffer, and we should throw it * away when we're done. */ b->yy_is_our_buffer = 1; return b; } static void yy_push_state (int new_state , yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; if ( yyg->yy_start_stack_ptr >= yyg->yy_start_stack_depth ) { yy_size_t new_size; yyg->yy_start_stack_depth += YY_START_STACK_INCR; new_size = yyg->yy_start_stack_depth * sizeof( int ); if ( ! yyg->yy_start_stack ) yyg->yy_start_stack = (int *) ap_expr_yyalloc(new_size ,yyscanner ); else yyg->yy_start_stack = (int *) ap_expr_yyrealloc((void *) yyg->yy_start_stack,new_size ,yyscanner ); if ( ! yyg->yy_start_stack ) YY_FATAL_ERROR( "out of memory expanding start-condition stack" ); } yyg->yy_start_stack[yyg->yy_start_stack_ptr++] = YY_START; BEGIN(new_state); } static void yy_pop_state (yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; if ( --yyg->yy_start_stack_ptr < 0 ) YY_FATAL_ERROR( "start-condition stack underflow" ); BEGIN(yyg->yy_start_stack[yyg->yy_start_stack_ptr]); } #ifndef YY_EXIT_FAILURE #define YY_EXIT_FAILURE 2 #endif static void yy_fatal_error (yyconst char* msg , yyscan_t yyscanner) { (void) fprintf( stderr, "%s\n", msg ); exit( YY_EXIT_FAILURE ); } /* Redefine yyless() so it works in section 3 code. */ #undef yyless #define yyless(n) \ do \ { \ /* Undo effects of setting up yytext. */ \ int yyless_macro_arg = (n); \ YY_LESS_LINENO(yyless_macro_arg);\ yytext[yyleng] = yyg->yy_hold_char; \ yyg->yy_c_buf_p = yytext + yyless_macro_arg; \ yyg->yy_hold_char = *yyg->yy_c_buf_p; \ *yyg->yy_c_buf_p = '\0'; \ yyleng = yyless_macro_arg; \ } \ while ( 0 ) /* Accessor methods (get/set functions) to struct members. */ /** Get the user-defined data for this scanner. * @param yyscanner The scanner object. */ YY_EXTRA_TYPE ap_expr_yyget_extra (yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; return yyextra; } /** Get the current line number. * @param yyscanner The scanner object. */ int ap_expr_yyget_lineno (yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; if (! YY_CURRENT_BUFFER) return 0; return yylineno; } /** Get the current column number. * @param yyscanner The scanner object. */ /** Get the input stream. * @param yyscanner The scanner object. */ FILE *ap_expr_yyget_in (yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; return yyin; } /** Get the output stream. * @param yyscanner The scanner object. */ FILE *ap_expr_yyget_out (yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; return yyout; } /** Get the length of the current token. * @param yyscanner The scanner object. */ int ap_expr_yyget_leng (yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; return yyleng; } /** Get the current token. * @param yyscanner The scanner object. */ char *ap_expr_yyget_text (yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; return yytext; } /** Set the user-defined data. This data is never touched by the scanner. * @param user_defined The data to be associated with this scanner. * @param yyscanner The scanner object. */ void ap_expr_yyset_extra (YY_EXTRA_TYPE user_defined , yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; yyextra = user_defined ; } /** Set the current line number. * @param line_number * @param yyscanner The scanner object. */ void ap_expr_yyset_lineno (int line_number , yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; /* lineno is only valid if an input buffer exists. */ if (! YY_CURRENT_BUFFER ) yy_fatal_error( "ap_expr_yyset_lineno called with no buffer" , yyscanner); yylineno = line_number; } /** Set the current column. * @param line_number * @param yyscanner The scanner object. */ /** Set the input stream. This does not discard the current * input buffer. * @param in_str A readable stream. * @param yyscanner The scanner object. * @see ap_expr_yy_switch_to_buffer */ void ap_expr_yyset_in (FILE * in_str , yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; yyin = in_str ; } void ap_expr_yyset_out (FILE * out_str , yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; yyout = out_str ; } int ap_expr_yyget_debug (yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; return yy_flex_debug; } void ap_expr_yyset_debug (int bdebug , yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; yy_flex_debug = bdebug ; } /* Accessor methods for yylval and yylloc */ YYSTYPE * ap_expr_yyget_lval (yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; return yylval; } void ap_expr_yyset_lval (YYSTYPE * yylval_param , yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; yylval = yylval_param; } /* User-visible API */ /* ap_expr_yylex_init is special because it creates the scanner itself, so it is * the ONLY reentrant function that doesn't take the scanner as the last argument. * That's why we explicitly handle the declaration, instead of using our macros. */ int ap_expr_yylex_init(yyscan_t* ptr_yy_globals) { if (ptr_yy_globals == NULL){ errno = EINVAL; return 1; } *ptr_yy_globals = (yyscan_t) ap_expr_yyalloc ( sizeof( struct yyguts_t ), NULL ); if (*ptr_yy_globals == NULL){ errno = ENOMEM; return 1; } /* By setting to 0xAA, we expose bugs in yy_init_globals. Leave at 0x00 for releases. */ memset(*ptr_yy_globals,0x00,sizeof(struct yyguts_t)); return yy_init_globals ( *ptr_yy_globals ); } /* ap_expr_yylex_init_extra has the same functionality as ap_expr_yylex_init, but follows the * convention of taking the scanner as the last argument. Note however, that * this is a *pointer* to a scanner, as it will be allocated by this call (and * is the reason, too, why this function also must handle its own declaration). * The user defined value in the first argument will be available to ap_expr_yyalloc in * the yyextra field. */ int ap_expr_yylex_init_extra(YY_EXTRA_TYPE yy_user_defined,yyscan_t* ptr_yy_globals ) { struct yyguts_t dummy_yyguts; ap_expr_yyset_extra (yy_user_defined, &dummy_yyguts); if (ptr_yy_globals == NULL){ errno = EINVAL; return 1; } *ptr_yy_globals = (yyscan_t) ap_expr_yyalloc ( sizeof( struct yyguts_t ), &dummy_yyguts ); if (*ptr_yy_globals == NULL){ errno = ENOMEM; return 1; } /* By setting to 0xAA, we expose bugs in yy_init_globals. Leave at 0x00 for releases. */ memset(*ptr_yy_globals,0x00,sizeof(struct yyguts_t)); ap_expr_yyset_extra (yy_user_defined, *ptr_yy_globals); return yy_init_globals ( *ptr_yy_globals ); } static int yy_init_globals (yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; /* Initialization is the same as for the non-reentrant scanner. * This function is called from ap_expr_yylex_destroy(), so don't allocate here. */ yyg->yy_buffer_stack = 0; yyg->yy_buffer_stack_top = 0; yyg->yy_buffer_stack_max = 0; yyg->yy_c_buf_p = (char *) 0; yyg->yy_init = 0; yyg->yy_start = 0; yyg->yy_start_stack_ptr = 0; yyg->yy_start_stack_depth = 0; yyg->yy_start_stack = NULL; /* Defined in main.c */ #ifdef YY_STDINIT yyin = stdin; yyout = stdout; #else yyin = (FILE *) 0; yyout = (FILE *) 0; #endif /* For future reference: Set errno on error, since we are called by * ap_expr_yylex_init() */ return 0; } /* ap_expr_yylex_destroy is for both reentrant and non-reentrant scanners. */ int ap_expr_yylex_destroy (yyscan_t yyscanner) { struct yyguts_t * yyg = (struct yyguts_t*)yyscanner; /* Pop the buffer stack, destroying each element. */ while(YY_CURRENT_BUFFER){ ap_expr_yy_delete_buffer(YY_CURRENT_BUFFER ,yyscanner ); YY_CURRENT_BUFFER_LVALUE = NULL; ap_expr_yypop_buffer_state(yyscanner); } /* Destroy the stack itself. */ ap_expr_yyfree(yyg->yy_buffer_stack ,yyscanner); yyg->yy_buffer_stack = NULL; /* Destroy the start condition stack. */ ap_expr_yyfree(yyg->yy_start_stack ,yyscanner ); yyg->yy_start_stack = NULL; /* Reset the globals. This is important in a non-reentrant scanner so the next time * ap_expr_yylex() is called, initialization will occur. */ yy_init_globals( yyscanner); /* Destroy the main struct (reentrant only). */ ap_expr_yyfree ( yyscanner , yyscanner ); yyscanner = NULL; return 0; } /* * Internal utility routines. */ #ifndef yytext_ptr static void yy_flex_strncpy (char* s1, yyconst char * s2, int n , yyscan_t yyscanner) { register int i; for ( i = 0; i < n; ++i ) s1[i] = s2[i]; } #endif #ifdef YY_NEED_STRLEN static int yy_flex_strlen (yyconst char * s , yyscan_t yyscanner) { register int n; for ( n = 0; s[n]; ++n ) ; return n; } #endif void *ap_expr_yyalloc (yy_size_t size , yyscan_t yyscanner) { return (void *) malloc( size ); } void *ap_expr_yyrealloc (void * ptr, yy_size_t size , yyscan_t yyscanner) { /* The cast to (char *) in the following accommodates both * implementations that use char* generic pointers, and those * that use void* generic pointers. It works with the latter * because both ANSI C and C++ allow castless assignment from * any pointer type to void*, and deal with argument conversions * as though doing an assignment. */ return (void *) realloc( (char *) ptr, size ); } void ap_expr_yyfree (void * ptr , yyscan_t yyscanner) { free( (char *) ptr ); /* see ap_expr_yyrealloc() for (char *) cast */ } #define YYTABLES_NAME "yytables" #line 398 "util_expr_scan.l" httpd-2.4.41/server/main.c0000644000000000000500000006734413317470400013647 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr.h" #include "apr_strings.h" #include "apr_getopt.h" #include "apr_general.h" #include "apr_lib.h" #include "apr_md5.h" #include "apr_time.h" #include "apr_version.h" #include "apu_version.h" #define APR_WANT_STDIO #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_main.h" #include "http_log.h" #include "http_config.h" #include "http_core.h" #include "mod_core.h" #include "http_request.h" #include "http_vhost.h" #include "apr_uri.h" #include "util_ebcdic.h" #include "ap_mpm.h" #if APR_HAVE_UNISTD_H #include #endif /* WARNING: Win32 binds http_main.c dynamically to the server. Please place * extern functions and global data in another appropriate module. * * Most significant main() global data can be found in http_config.c */ static void show_mpm_settings(void) { int mpm_query_info; apr_status_t retval; printf("Server MPM: %s\n", ap_show_mpm()); retval = ap_mpm_query(AP_MPMQ_IS_THREADED, &mpm_query_info); if (retval == APR_SUCCESS) { printf(" threaded: "); if (mpm_query_info == AP_MPMQ_DYNAMIC) { printf("yes (variable thread count)\n"); } else if (mpm_query_info == AP_MPMQ_STATIC) { printf("yes (fixed thread count)\n"); } else { printf("no\n"); } } retval = ap_mpm_query(AP_MPMQ_IS_FORKED, &mpm_query_info); if (retval == APR_SUCCESS) { printf(" forked: "); if (mpm_query_info == AP_MPMQ_DYNAMIC) { printf("yes (variable process count)\n"); } else if (mpm_query_info == AP_MPMQ_STATIC) { printf("yes (fixed process count)\n"); } else { printf("no\n"); } } } static void show_compile_settings(void) { printf("Server version: %s\n", ap_get_server_description()); printf("Server built: %s\n", ap_get_server_built()); printf("Server's Module Magic Number: %u:%u\n", MODULE_MAGIC_NUMBER_MAJOR, MODULE_MAGIC_NUMBER_MINOR); #if APR_MAJOR_VERSION >= 2 printf("Server loaded: APR %s\n", apr_version_string()); printf("Compiled using: APR %s\n", APR_VERSION_STRING); #else printf("Server loaded: APR %s, APR-UTIL %s\n", apr_version_string(), apu_version_string()); printf("Compiled using: APR %s, APR-UTIL %s\n", APR_VERSION_STRING, APU_VERSION_STRING); #endif /* sizeof(foo) is long on some platforms so we might as well * make it long everywhere to keep the printf format * consistent */ printf("Architecture: %ld-bit\n", 8 * (long)sizeof(void *)); show_mpm_settings(); printf("Server compiled with....\n"); #ifdef BIG_SECURITY_HOLE printf(" -D BIG_SECURITY_HOLE\n"); #endif #ifdef SECURITY_HOLE_PASS_AUTHORIZATION printf(" -D SECURITY_HOLE_PASS_AUTHORIZATION\n"); #endif #ifdef OS printf(" -D OS=\"" OS "\"\n"); #endif #ifdef HAVE_SHMGET printf(" -D HAVE_SHMGET\n"); #endif #if APR_FILE_BASED_SHM printf(" -D APR_FILE_BASED_SHM\n"); #endif #if APR_HAS_SENDFILE printf(" -D APR_HAS_SENDFILE\n"); #endif #if APR_HAS_MMAP printf(" -D APR_HAS_MMAP\n"); #endif #ifdef NO_WRITEV printf(" -D NO_WRITEV\n"); #endif #ifdef NO_LINGCLOSE printf(" -D NO_LINGCLOSE\n"); #endif #if APR_HAVE_IPV6 printf(" -D APR_HAVE_IPV6 (IPv4-mapped addresses "); #ifdef AP_ENABLE_V4_MAPPED printf("enabled)\n"); #else printf("disabled)\n"); #endif #endif #if APR_USE_FLOCK_SERIALIZE printf(" -D APR_USE_FLOCK_SERIALIZE\n"); #endif #if APR_USE_SYSVSEM_SERIALIZE printf(" -D APR_USE_SYSVSEM_SERIALIZE\n"); #endif #if APR_USE_POSIXSEM_SERIALIZE printf(" -D APR_USE_POSIXSEM_SERIALIZE\n"); #endif #if APR_USE_FCNTL_SERIALIZE printf(" -D APR_USE_FCNTL_SERIALIZE\n"); #endif #if APR_USE_PROC_PTHREAD_SERIALIZE printf(" -D APR_USE_PROC_PTHREAD_SERIALIZE\n"); #endif #if APR_USE_PTHREAD_SERIALIZE printf(" -D APR_USE_PTHREAD_SERIALIZE\n"); #endif #if APR_PROCESS_LOCK_IS_GLOBAL printf(" -D APR_PROCESS_LOCK_IS_GLOBAL\n"); #endif #ifdef SINGLE_LISTEN_UNSERIALIZED_ACCEPT printf(" -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT\n"); #endif #if APR_HAS_OTHER_CHILD printf(" -D APR_HAS_OTHER_CHILD\n"); #endif #ifdef AP_HAVE_RELIABLE_PIPED_LOGS printf(" -D AP_HAVE_RELIABLE_PIPED_LOGS\n"); #endif #ifdef BUFFERED_LOGS printf(" -D BUFFERED_LOGS\n"); #ifdef PIPE_BUF printf(" -D PIPE_BUF=%ld\n",(long)PIPE_BUF); #endif #endif printf(" -D DYNAMIC_MODULE_LIMIT=%ld\n",(long)DYNAMIC_MODULE_LIMIT); #if APR_CHARSET_EBCDIC printf(" -D APR_CHARSET_EBCDIC\n"); #endif #ifdef NEED_HASHBANG_EMUL printf(" -D NEED_HASHBANG_EMUL\n"); #endif /* This list displays the compiled in default paths: */ #ifdef HTTPD_ROOT printf(" -D HTTPD_ROOT=\"" HTTPD_ROOT "\"\n"); #endif #ifdef SUEXEC_BIN printf(" -D SUEXEC_BIN=\"" SUEXEC_BIN "\"\n"); #endif #ifdef DEFAULT_PIDLOG printf(" -D DEFAULT_PIDLOG=\"" DEFAULT_PIDLOG "\"\n"); #endif #ifdef DEFAULT_SCOREBOARD printf(" -D DEFAULT_SCOREBOARD=\"" DEFAULT_SCOREBOARD "\"\n"); #endif #ifdef DEFAULT_ERRORLOG printf(" -D DEFAULT_ERRORLOG=\"" DEFAULT_ERRORLOG "\"\n"); #endif #ifdef AP_TYPES_CONFIG_FILE printf(" -D AP_TYPES_CONFIG_FILE=\"" AP_TYPES_CONFIG_FILE "\"\n"); #endif #ifdef SERVER_CONFIG_FILE printf(" -D SERVER_CONFIG_FILE=\"" SERVER_CONFIG_FILE "\"\n"); #endif } #define TASK_SWITCH_SLEEP 10000 static void destroy_and_exit_process(process_rec *process, int process_exit_value) { /* * Sleep for TASK_SWITCH_SLEEP micro seconds to cause a task switch on * OS layer and thus give possibly started piped loggers a chance to * process their input. Otherwise it is possible that they get killed * by us before they can do so. In this case maybe valueable log messages * might get lost. */ apr_sleep(TASK_SWITCH_SLEEP); ap_main_state = AP_SQ_MS_EXITING; apr_pool_destroy(process->pool); /* and destroy all descendent pools */ apr_terminate(); exit(process_exit_value); } /* APR callback invoked if allocation fails. */ static int abort_on_oom(int retcode) { ap_abort_on_oom(); return retcode; /* unreachable, hopefully. */ } /* Deregister all hooks when clearing pconf (pre_cleanup). * TODO: have a hook to deregister and run them from here? * ap_clear_auth_internal() is already a candidate. */ static apr_status_t deregister_all_hooks(void *unused) { (void)unused; ap_clear_auth_internal(); apr_hook_deregister_all(); return APR_SUCCESS; } static void reset_process_pconf(process_rec *process) { if (process->pconf) { apr_pool_clear(process->pconf); ap_server_conf = NULL; } else { apr_pool_create(&process->pconf, process->pool); apr_pool_tag(process->pconf, "pconf"); } apr_pool_pre_cleanup_register(process->pconf, NULL, deregister_all_hooks); } static process_rec *init_process(int *argc, const char * const * *argv) { process_rec *process; apr_pool_t *cntx; apr_status_t stat; const char *failed = "apr_app_initialize()"; stat = apr_app_initialize(argc, argv, NULL); if (stat == APR_SUCCESS) { failed = "apr_pool_create()"; stat = apr_pool_create(&cntx, NULL); } if (stat != APR_SUCCESS) { /* For all intents and purposes, this is impossibly unlikely, * but APR doesn't exist yet, we can't use it for reporting * these earliest two failures; * * XXX: Note the apr_ctime() and apr_time_now() calls. These * work, today, against an uninitialized APR, but in the future * (if they relied on global pools or mutexes, for example) then * the datestamp logic will need to be replaced. */ char ctimebuff[APR_CTIME_LEN]; apr_ctime(ctimebuff, apr_time_now()); fprintf(stderr, "[%s] [crit] (%d) %s: %s failed " "to initial context, exiting\n", ctimebuff, stat, (*argv)[0], failed); apr_terminate(); exit(1); } apr_pool_abort_set(abort_on_oom, cntx); apr_pool_tag(cntx, "process"); ap_open_stderr_log(cntx); /* Now we have initialized apr and our logger, no more * exceptional error reporting required for the lifetime * of this server process. */ process = apr_palloc(cntx, sizeof(process_rec)); process->pool = cntx; process->pconf = NULL; reset_process_pconf(process); process->argc = *argc; process->argv = *argv; process->short_name = apr_filepath_name_get((*argv)[0]); return process; } static void usage(process_rec *process) { const char *bin = process->argv[0]; int pad_len = strlen(bin); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, "Usage: %s [-D name] [-d directory] [-f file]", bin); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " %*s [-C \"directive\"] [-c \"directive\"]", pad_len, " "); #ifdef WIN32 ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " %*s [-w] [-k start|restart|stop|shutdown] [-n service_name]", pad_len, " "); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " %*s [-k install|config|uninstall] [-n service_name]", pad_len, " "); #else /* XXX not all MPMs support signalling the server in general or graceful-stop * in particular */ ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " %*s [-k start|restart|graceful|graceful-stop|stop]", pad_len, " "); #endif ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " %*s [-v] [-V] [-h] [-l] [-L] [-t] [-T] [-S] [-X]", pad_len, " "); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, "Options:"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -D name : define a name for use in " " directives"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -d directory : specify an alternate initial " "ServerRoot"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -f file : specify an alternate ServerConfigFile"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -C \"directive\" : process directive before reading " "config files"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -c \"directive\" : process directive after reading " "config files"); #ifdef NETWARE ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -n name : set screen name"); #endif #ifdef WIN32 ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -n name : set service name and use its " "ServerConfigFile and ServerRoot"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -k start : tell Apache to start"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -k restart : tell running Apache to do a graceful " "restart"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -k stop|shutdown : tell running Apache to shutdown"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -k install : install an Apache service"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -k config : change startup Options of an Apache " "service"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -k uninstall : uninstall an Apache service"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -w : hold open the console window on error"); #endif ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -e level : show startup errors of level " "(see LogLevel)"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -E file : log startup errors to file"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -v : show version number"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -V : show compile settings"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -h : list available command line options " "(this page)"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -l : list compiled in modules"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -L : list available configuration " "directives"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -t -D DUMP_VHOSTS : show parsed vhost settings"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -t -D DUMP_RUN_CFG : show parsed run settings"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -S : a synonym for -t -D DUMP_VHOSTS -D DUMP_RUN_CFG"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -t -D DUMP_MODULES : show all loaded modules "); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -M : a synonym for -t -D DUMP_MODULES"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -t -D DUMP_INCLUDES: show all included configuration files"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -t : run syntax check for config files"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -T : start without DocumentRoot(s) check"); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, " -X : debug mode (only one worker, do not detach)"); destroy_and_exit_process(process, 1); } int main(int argc, const char * const argv[]) { char c; int showcompile = 0, showdirectives = 0; const char *confname = SERVER_CONFIG_FILE; const char *def_server_root = HTTPD_ROOT; const char *temp_error_log = NULL; const char *error; process_rec *process; apr_pool_t *pconf; apr_pool_t *plog; /* Pool of log streams, reset _after_ each read of conf */ apr_pool_t *ptemp; /* Pool for temporary config stuff, reset often */ apr_pool_t *pcommands; /* Pool for -D, -C and -c switches */ apr_getopt_t *opt; apr_status_t rv; module **mod; const char *opt_arg; APR_OPTIONAL_FN_TYPE(ap_signal_server) *signal_server; int rc = OK; AP_MONCONTROL(0); /* turn off profiling of startup */ process = init_process(&argc, &argv); ap_pglobal = process->pool; pconf = process->pconf; ap_server_argv0 = process->short_name; ap_init_rng(ap_pglobal); /* Set up the OOM callback in the global pool, so all pools should * by default inherit it. */ apr_pool_abort_set(abort_on_oom, apr_pool_parent_get(process->pool)); #if APR_CHARSET_EBCDIC if (ap_init_ebcdic(ap_pglobal) != APR_SUCCESS) { destroy_and_exit_process(process, 1); } #endif apr_pool_create(&pcommands, ap_pglobal); apr_pool_tag(pcommands, "pcommands"); ap_server_pre_read_config = apr_array_make(pcommands, 1, sizeof(const char *)); ap_server_post_read_config = apr_array_make(pcommands, 1, sizeof(const char *)); ap_server_config_defines = apr_array_make(pcommands, 1, sizeof(const char *)); error = ap_setup_prelinked_modules(process); if (error) { ap_log_error(APLOG_MARK, APLOG_STARTUP|APLOG_EMERG, 0, NULL, APLOGNO(00012) "%s: %s", ap_server_argv0, error); destroy_and_exit_process(process, 1); } ap_run_rewrite_args(process); /* Maintain AP_SERVER_BASEARGS list in http_main.h to allow the MPM * to safely pass on our args from its rewrite_args() handler. */ apr_getopt_init(&opt, pcommands, process->argc, process->argv); while ((rv = apr_getopt(opt, AP_SERVER_BASEARGS, &c, &opt_arg)) == APR_SUCCESS) { const char **new; switch (c) { case 'c': new = (const char **)apr_array_push(ap_server_post_read_config); *new = apr_pstrdup(pcommands, opt_arg); break; case 'C': new = (const char **)apr_array_push(ap_server_pre_read_config); *new = apr_pstrdup(pcommands, opt_arg); break; case 'd': def_server_root = opt_arg; break; case 'D': new = (const char **)apr_array_push(ap_server_config_defines); *new = apr_pstrdup(pcommands, opt_arg); /* Setting -D DUMP_VHOSTS should work like setting -S */ if (strcmp(opt_arg, "DUMP_VHOSTS") == 0) ap_run_mode = AP_SQ_RM_CONFIG_DUMP; /* Setting -D DUMP_RUN_CFG should work like setting -S */ else if (strcmp(opt_arg, "DUMP_RUN_CFG") == 0) ap_run_mode = AP_SQ_RM_CONFIG_DUMP; /* Setting -D DUMP_MODULES is equivalent to setting -M */ else if (strcmp(opt_arg, "DUMP_MODULES") == 0) ap_run_mode = AP_SQ_RM_CONFIG_DUMP; /* Setting -D DUMP_INCLUDES is a type of configuration dump */ else if (strcmp(opt_arg, "DUMP_INCLUDES") == 0) ap_run_mode = AP_SQ_RM_CONFIG_DUMP; break; case 'e': if (ap_parse_log_level(opt_arg, &ap_default_loglevel) != NULL) usage(process); break; case 'E': temp_error_log = apr_pstrdup(process->pool, opt_arg); break; case 'X': new = (const char **)apr_array_push(ap_server_config_defines); *new = "DEBUG"; break; case 'f': confname = opt_arg; break; case 'v': printf("Server version: %s\n", ap_get_server_description()); printf("Server built: %s\n", ap_get_server_built()); destroy_and_exit_process(process, 0); case 'l': ap_show_modules(); destroy_and_exit_process(process, 0); case 'L': ap_run_mode = AP_SQ_RM_CONFIG_DUMP; showdirectives = 1; break; case 't': if (ap_run_mode == AP_SQ_RM_UNKNOWN) ap_run_mode = AP_SQ_RM_CONFIG_TEST; break; case 'T': ap_document_root_check = 0; break; case 'S': ap_run_mode = AP_SQ_RM_CONFIG_DUMP; new = (const char **)apr_array_push(ap_server_config_defines); *new = "DUMP_VHOSTS"; new = (const char **)apr_array_push(ap_server_config_defines); *new = "DUMP_RUN_CFG"; break; case 'M': ap_run_mode = AP_SQ_RM_CONFIG_DUMP; new = (const char **)apr_array_push(ap_server_config_defines); *new = "DUMP_MODULES"; break; case 'V': if (strcmp(ap_show_mpm(), "")) { /* MPM built-in? */ show_compile_settings(); destroy_and_exit_process(process, 0); } else { showcompile = 1; ap_run_mode = AP_SQ_RM_CONFIG_DUMP; } break; case 'h': case '?': usage(process); } } if (ap_run_mode == AP_SQ_RM_UNKNOWN) ap_run_mode = AP_SQ_RM_NORMAL; /* bad cmdline option? then we die */ if (rv != APR_EOF || opt->ind < opt->argc) { usage(process); } ap_main_state = AP_SQ_MS_CREATE_PRE_CONFIG; apr_pool_create(&plog, ap_pglobal); apr_pool_tag(plog, "plog"); apr_pool_create(&ptemp, pconf); apr_pool_tag(ptemp, "ptemp"); /* Note that we preflight the config file once * before reading it _again_ in the main loop. * This allows things, log files configuration * for example, to settle down. */ ap_server_root = def_server_root; if (temp_error_log) { ap_replace_stderr_log(process->pool, temp_error_log); } ap_server_conf = ap_read_config(process, ptemp, confname, &ap_conftree); if (!ap_server_conf) { if (showcompile) { /* Well, we tried. Show as much as we can, but exit nonzero to * indicate that something's not right. The cause should have * already been logged. */ show_compile_settings(); } destroy_and_exit_process(process, 1); } apr_pool_cleanup_register(pconf, &ap_server_conf, ap_pool_cleanup_set_null, apr_pool_cleanup_null); if (showcompile) { /* deferred due to dynamically loaded MPM */ show_compile_settings(); destroy_and_exit_process(process, 0); } /* sort hooks here to make sure pre_config hooks are sorted properly */ apr_hook_sort_all(); if (ap_run_pre_config(pconf, plog, ptemp) != OK) { ap_log_error(APLOG_MARK, APLOG_STARTUP |APLOG_ERR, 0, NULL, APLOGNO(00013) "Pre-configuration failed"); destroy_and_exit_process(process, 1); } rv = ap_process_config_tree(ap_server_conf, ap_conftree, process->pconf, ptemp); if (rv == OK) { ap_fixup_virtual_hosts(pconf, ap_server_conf); ap_fini_vhost_config(pconf, ap_server_conf); /* * Sort hooks again because ap_process_config_tree may have add modules * and hence hooks. This happens with mod_perl and modules written in * perl. */ apr_hook_sort_all(); if (ap_run_check_config(pconf, plog, ptemp, ap_server_conf) != OK) { ap_log_error(APLOG_MARK, APLOG_STARTUP |APLOG_ERR, 0, NULL, APLOGNO(00014) "Configuration check failed"); destroy_and_exit_process(process, 1); } if (ap_run_mode != AP_SQ_RM_NORMAL) { if (showdirectives) { /* deferred in case of DSOs */ ap_show_directives(); destroy_and_exit_process(process, 0); } else { ap_run_test_config(pconf, ap_server_conf); if (ap_run_mode == AP_SQ_RM_CONFIG_TEST) ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, "Syntax OK"); } destroy_and_exit_process(process, 0); } } /* If our config failed, deal with that here. */ if (rv != OK) { destroy_and_exit_process(process, 1); } signal_server = APR_RETRIEVE_OPTIONAL_FN(ap_signal_server); if (signal_server) { int exit_status; if (signal_server(&exit_status, pconf) != 0) { destroy_and_exit_process(process, exit_status); } } apr_pool_clear(plog); if ( ap_run_open_logs(pconf, plog, ptemp, ap_server_conf) != OK) { ap_log_error(APLOG_MARK, APLOG_STARTUP |APLOG_ERR, 0, NULL, APLOGNO(00015) "Unable to open logs"); destroy_and_exit_process(process, 1); } if ( ap_run_post_config(pconf, plog, ptemp, ap_server_conf) != OK) { ap_log_error(APLOG_MARK, APLOG_STARTUP |APLOG_ERR, 0, NULL, APLOGNO(00016) "Configuration Failed"); destroy_and_exit_process(process, 1); } apr_pool_destroy(ptemp); do { ap_main_state = AP_SQ_MS_DESTROY_CONFIG; reset_process_pconf(process); ap_main_state = AP_SQ_MS_CREATE_CONFIG; ap_config_generation++; for (mod = ap_prelinked_modules; *mod != NULL; mod++) { ap_register_hooks(*mod, pconf); } /* This is a hack until we finish the code so that it only reads * the config file once and just operates on the tree already in * memory. rbb */ ap_conftree = NULL; apr_pool_create(&ptemp, pconf); apr_pool_tag(ptemp, "ptemp"); ap_server_root = def_server_root; ap_server_conf = ap_read_config(process, ptemp, confname, &ap_conftree); if (!ap_server_conf) { destroy_and_exit_process(process, 1); } apr_pool_cleanup_register(pconf, &ap_server_conf, ap_pool_cleanup_set_null, apr_pool_cleanup_null); /* sort hooks here to make sure pre_config hooks are sorted properly */ apr_hook_sort_all(); if (ap_run_pre_config(pconf, plog, ptemp) != OK) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, NULL, APLOGNO(00017) "Pre-configuration failed, exiting"); destroy_and_exit_process(process, 1); } if (ap_process_config_tree(ap_server_conf, ap_conftree, process->pconf, ptemp) != OK) { destroy_and_exit_process(process, 1); } ap_fixup_virtual_hosts(pconf, ap_server_conf); ap_fini_vhost_config(pconf, ap_server_conf); /* * Sort hooks again because ap_process_config_tree may have add modules * and hence hooks. This happens with mod_perl and modules written in * perl. */ apr_hook_sort_all(); if (ap_run_check_config(pconf, plog, ptemp, ap_server_conf) != OK) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, NULL, APLOGNO(00018) "Configuration check failed, exiting"); destroy_and_exit_process(process, 1); } apr_pool_clear(plog); if (ap_run_open_logs(pconf, plog, ptemp, ap_server_conf) != OK) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, NULL, APLOGNO(00019) "Unable to open logs, exiting"); destroy_and_exit_process(process, 1); } if (ap_run_post_config(pconf, plog, ptemp, ap_server_conf) != OK) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, NULL, APLOGNO(00020) "Configuration Failed, exiting"); destroy_and_exit_process(process, 1); } apr_pool_destroy(ptemp); apr_pool_lock(pconf, 1); ap_run_optional_fn_retrieve(); ap_main_state = AP_SQ_MS_RUN_MPM; rc = ap_run_mpm(pconf, plog, ap_server_conf); apr_pool_lock(pconf, 0); } while (rc == OK); if (rc == DONE) { rc = OK; } else if (rc != OK) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, NULL, APLOGNO(02818) "MPM run failed, exiting"); } destroy_and_exit_process(process, rc); /* NOTREACHED */ return !OK; } #ifdef AP_USING_AUTOCONF /* This ugly little hack pulls any function referenced in exports.c into * the web server. exports.c is generated during the build, and it * has all of the APR functions specified by the apr/apr.exports and * apr-util/aprutil.exports files. */ const void *ap_suck_in_APR(void); const void *ap_suck_in_APR(void) { extern const void *ap_ugly_hack; return ap_ugly_hack; } #endif httpd-2.4.41/server/error_bucket.c0000644000000000000500000000455712532143363015411 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "http_protocol.h" #include "apr_buckets.h" #include "apr_strings.h" #if APR_HAVE_STRINGS_H #include #endif static apr_status_t error_bucket_read(apr_bucket *b, const char **str, apr_size_t *len, apr_read_type_e block) { *str = NULL; *len = 0; return APR_SUCCESS; } static void error_bucket_destroy(void *data) { ap_bucket_error *h = data; if (apr_bucket_shared_destroy(h)) { apr_bucket_free(h); } } AP_DECLARE(apr_bucket *) ap_bucket_error_make(apr_bucket *b, int error, const char *buf, apr_pool_t *p) { ap_bucket_error *h; h = apr_bucket_alloc(sizeof(*h), b->list); h->status = error; h->data = apr_pstrdup(p, buf); b = apr_bucket_shared_make(b, h, 0, 0); b->type = &ap_bucket_type_error; return b; } AP_DECLARE(apr_bucket *) ap_bucket_error_create(int error, const char *buf, apr_pool_t *p, apr_bucket_alloc_t *list) { apr_bucket *b = apr_bucket_alloc(sizeof(*b), list); APR_BUCKET_INIT(b); b->free = apr_bucket_free; b->list = list; if (!ap_is_HTTP_VALID_RESPONSE(error)) { error = HTTP_INTERNAL_SERVER_ERROR; } return ap_bucket_error_make(b, error, buf, p); } AP_DECLARE_DATA const apr_bucket_type_t ap_bucket_type_error = { "ERROR", 5, APR_BUCKET_METADATA, error_bucket_destroy, error_bucket_read, apr_bucket_setaside_notimpl, apr_bucket_split_notimpl, apr_bucket_shared_copy }; httpd-2.4.41/server/config.c0000644000000000000500000023750313514075127014172 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * http_config.c: once was auxiliary functions for reading httpd's config * file and converting filenames into a namespace * * Rob McCool * * Wall-to-wall rewrite for Apache... commands which are part of the * server core can now be found next door in "http_core.c". Now contains * general command loop, and functions which do bookkeeping for the new * Apache config stuff (modules and configuration vectors). * * rst * */ #include "apr.h" #include "apr_strings.h" #include "apr_portable.h" #include "apr_file_io.h" #include "apr_fnmatch.h" #define APR_WANT_STDIO #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_protocol.h" #include "http_core.h" #include "http_log.h" /* for errors in parse_htaccess */ #include "http_request.h" /* for default_handler (see invoke_handler) */ #include "http_main.h" #include "http_vhost.h" #include "util_cfgtree.h" #include "util_varbuf.h" #include "mpm_common.h" #define APLOG_UNSET (APLOG_NO_MODULE - 1) /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX AP_DECLARE_DATA const char *ap_server_argv0 = NULL; AP_DECLARE_DATA const char *ap_server_root = NULL; AP_DECLARE_DATA const char *ap_runtime_dir = NULL; AP_DECLARE_DATA server_rec *ap_server_conf = NULL; AP_DECLARE_DATA apr_pool_t *ap_pglobal = NULL; AP_DECLARE_DATA apr_array_header_t *ap_server_pre_read_config = NULL; AP_DECLARE_DATA apr_array_header_t *ap_server_post_read_config = NULL; AP_DECLARE_DATA apr_array_header_t *ap_server_config_defines = NULL; AP_DECLARE_DATA ap_directive_t *ap_conftree = NULL; APR_HOOK_STRUCT( APR_HOOK_LINK(header_parser) APR_HOOK_LINK(pre_config) APR_HOOK_LINK(check_config) APR_HOOK_LINK(post_config) APR_HOOK_LINK(open_logs) APR_HOOK_LINK(child_init) APR_HOOK_LINK(handler) APR_HOOK_LINK(quick_handler) APR_HOOK_LINK(optional_fn_retrieve) APR_HOOK_LINK(test_config) APR_HOOK_LINK(open_htaccess) ) AP_IMPLEMENT_HOOK_RUN_ALL(int, header_parser, (request_rec *r), (r), OK, DECLINED) AP_IMPLEMENT_HOOK_RUN_ALL(int, pre_config, (apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp), (pconf, plog, ptemp), OK, DECLINED) AP_IMPLEMENT_HOOK_RUN_ALL(int, check_config, (apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s), (pconf, plog, ptemp, s), OK, DECLINED) AP_IMPLEMENT_HOOK_VOID(test_config, (apr_pool_t *pconf, server_rec *s), (pconf, s)) AP_IMPLEMENT_HOOK_RUN_ALL(int, post_config, (apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s), (pconf, plog, ptemp, s), OK, DECLINED) /* During the course of debugging I expanded this macro out, so * rather than remove all the useful information there is in the * following lines, I'm going to leave it here in case anyone * else finds it useful. * * Ben has looked at it and thinks it correct :) * AP_DECLARE(int) ap_hook_post_config(ap_HOOK_post_config_t *pf, const char * const *aszPre, const char * const *aszSucc, int nOrder) { ap_LINK_post_config_t *pHook; if (!_hooks.link_post_config) { _hooks.link_post_config = apr_array_make(apr_hook_global_pool, 1, sizeof(ap_LINK_post_config_t)); apr_hook_sort_register("post_config", &_hooks.link_post_config); } pHook = apr_array_push(_hooks.link_post_config); pHook->pFunc = pf; pHook->aszPredecessors = aszPre; pHook->aszSuccessors = aszSucc; pHook->nOrder = nOrder; pHook->szName = apr_hook_debug_current; if (apr_hook_debug_enabled) apr_hook_debug_show("post_config", aszPre, aszSucc); } AP_DECLARE(apr_array_header_t *) ap_hook_get_post_config(void) { return _hooks.link_post_config; } AP_DECLARE(int) ap_run_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { ap_LINK_post_config_t *pHook; int n; if (!_hooks.link_post_config) return; pHook = (ap_LINK_post_config_t *)_hooks.link_post_config->elts; for (n = 0; n < _hooks.link_post_config->nelts; ++n) pHook[n].pFunc (pconf, plog, ptemp, s); } */ AP_IMPLEMENT_HOOK_RUN_ALL(int, open_logs, (apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s), (pconf, plog, ptemp, s), OK, DECLINED) AP_IMPLEMENT_HOOK_VOID(child_init, (apr_pool_t *pchild, server_rec *s), (pchild, s)) AP_IMPLEMENT_HOOK_RUN_FIRST(int, handler, (request_rec *r), (r), DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(int, quick_handler, (request_rec *r, int lookup), (r, lookup), DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(apr_status_t, open_htaccess, (request_rec *r, const char *dir_name, const char *access_name, ap_configfile_t **conffile, const char **full_name), (r, dir_name, access_name, conffile, full_name), AP_DECLINED) /* hooks with no args are implemented last, after disabling APR hook probes */ #if defined(APR_HOOK_PROBES_ENABLED) #undef APR_HOOK_PROBES_ENABLED #undef APR_HOOK_PROBE_ENTRY #define APR_HOOK_PROBE_ENTRY(ud,ns,name,args) #undef APR_HOOK_PROBE_RETURN #define APR_HOOK_PROBE_RETURN(ud,ns,name,rv,args) #undef APR_HOOK_PROBE_INVOKE #define APR_HOOK_PROBE_INVOKE(ud,ns,name,src,args) #undef APR_HOOK_PROBE_COMPLETE #define APR_HOOK_PROBE_COMPLETE(ud,ns,name,src,rv,args) #undef APR_HOOK_INT_DCL_UD #define APR_HOOK_INT_DCL_UD #endif AP_IMPLEMENT_HOOK_VOID(optional_fn_retrieve, (void), ()) /**************************************************************** * * We begin with the functions which deal with the linked list * of modules which control just about all of the server operation. */ /* total_modules is the number of modules that have been linked * into the server. */ static int total_modules = 0; /* dynamic_modules is the number of modules that have been added * after the pre-loaded ones have been set up. It shouldn't be larger * than DYNAMIC_MODULE_LIMIT. */ static int dynamic_modules = 0; /* The maximum possible value for total_modules, i.e. number of static * modules plus DYNAMIC_MODULE_LIMIT. */ static int max_modules = 0; /* The number of elements we need to alloc for config vectors. Before loading * of dynamic modules, we must be liberal and set this to max_modules. After * loading of dynamic modules, we can trim it down to total_modules. On * restart, reset to max_modules. */ static int conf_vector_length = 0; static int reserved_module_slots = 0; AP_DECLARE_DATA module *ap_top_module = NULL; AP_DECLARE_DATA module **ap_loaded_modules=NULL; static apr_hash_t *ap_config_hash = NULL; /* a list of the module symbol names with the trailing "_module"removed */ static char **ap_module_short_names = NULL; typedef int (*handler_func)(request_rec *); typedef void *(*dir_maker_func)(apr_pool_t *, char *); typedef void *(*merger_func)(apr_pool_t *, void *, void *); /* A list of the merge_dir_config functions of all loaded modules, sorted * by module_index. * Using this list in ap_merge_per_dir_configs() is faster than following * the module->next linked list because of better memory locality (resulting * in better cache usage). */ static merger_func *merger_func_cache; /* maximum nesting level for config directories */ #ifndef AP_MAX_INCLUDE_DIR_DEPTH #define AP_MAX_INCLUDE_DIR_DEPTH (128) #endif /* Dealing with config vectors. These are associated with per-directory, * per-server, and per-request configuration, and have a void* pointer for * each modules. The nature of the structure pointed to is private to the * module in question... the core doesn't (and can't) know. However, there * are defined interfaces which allow it to create instances of its private * per-directory and per-server structures, and to merge the per-directory * structures of a directory and its subdirectory (producing a new one in * which the defaults applying to the base directory have been properly * overridden). */ static ap_conf_vector_t *create_empty_config(apr_pool_t *p) { void *conf_vector = apr_pcalloc(p, sizeof(void *) * conf_vector_length); return conf_vector; } static ap_conf_vector_t *create_default_per_dir_config(apr_pool_t *p) { void **conf_vector = apr_pcalloc(p, sizeof(void *) * conf_vector_length); module *modp; for (modp = ap_top_module; modp; modp = modp->next) { dir_maker_func df = modp->create_dir_config; if (df) conf_vector[modp->module_index] = (*df)(p, NULL); } return (ap_conf_vector_t *)conf_vector; } AP_CORE_DECLARE(ap_conf_vector_t *) ap_merge_per_dir_configs(apr_pool_t *p, ap_conf_vector_t *base, ap_conf_vector_t *new_conf) { void **conf_vector = apr_palloc(p, sizeof(void *) * conf_vector_length); void **base_vector = (void **)base; void **new_vector = (void **)new_conf; int i; for (i = 0; i < total_modules; i++) { if (!new_vector[i]) { conf_vector[i] = base_vector[i]; } else { const merger_func df = merger_func_cache[i]; if (df && base_vector[i]) { conf_vector[i] = (*df)(p, base_vector[i], new_vector[i]); } else conf_vector[i] = new_vector[i]; } } return (ap_conf_vector_t *)conf_vector; } static ap_conf_vector_t *create_server_config(apr_pool_t *p, server_rec *s) { void **conf_vector = apr_pcalloc(p, sizeof(void *) * conf_vector_length); module *modp; for (modp = ap_top_module; modp; modp = modp->next) { if (modp->create_server_config) conf_vector[modp->module_index] = (*modp->create_server_config)(p, s); } return (ap_conf_vector_t *)conf_vector; } static void merge_server_configs(apr_pool_t *p, ap_conf_vector_t *base, server_rec *virt) { /* Can reuse the 'virt' vector for the spine of it, since we don't * have to deal with the moral equivalent of .htaccess files here... */ void **base_vector = (void **)base; void **virt_vector = (void **)virt->module_config; module *modp; for (modp = ap_top_module; modp; modp = modp->next) { merger_func df = modp->merge_server_config; int i = modp->module_index; if (!virt_vector[i]) { if (df && modp->create_server_config && (ap_get_module_flags(modp) & AP_MODULE_FLAG_ALWAYS_MERGE)) { virt_vector[i] = (*modp->create_server_config)(p, virt); } else { virt_vector[i] = base_vector[i]; df = NULL; } } if (df) { virt_vector[i] = (*df)(p, base_vector[i], virt_vector[i]); } } } AP_CORE_DECLARE(ap_conf_vector_t *) ap_create_request_config(apr_pool_t *p) { return create_empty_config(p); } AP_CORE_DECLARE(ap_conf_vector_t *) ap_create_conn_config(apr_pool_t *p) { return create_empty_config(p); } AP_CORE_DECLARE(ap_conf_vector_t *) ap_create_per_dir_config(apr_pool_t *p) { return create_empty_config(p); } /* Invoke the filter_init_func for all filters with FILTERS where f->r * matches R. Restricting to a matching R avoids re-running init * functions for filters configured for r->main where r is a * subrequest. */ static int invoke_filter_init(request_rec *r, ap_filter_t *filters) { while (filters) { if (filters->frec->filter_init_func && filters->r == r) { int result = filters->frec->filter_init_func(filters); if (result != OK) { return result; } } filters = filters->next; } return OK; } AP_CORE_DECLARE(int) ap_invoke_handler(request_rec *r) { const char *handler; const char *p; int result; const char *old_handler = r->handler; const char *ignore; /* * The new insert_filter stage makes the most sense here. We only use * it when we are going to run the request, so we must insert filters * if any are available. Since the goal of this phase is to allow all * modules to insert a filter if they want to, this filter returns * void. I just can't see any way that this filter can reasonably * fail, either your modules inserts something or it doesn't. rbb */ ap_run_insert_filter(r); /* Before continuing, allow each filter that is in the two chains to * run their init function to let them do any magic before we could * start generating data. */ result = invoke_filter_init(r, r->input_filters); if (result != OK) { return result; } result = invoke_filter_init(r, r->output_filters); if (result != OK) { return result; } if (!r->handler) { if (r->content_type) { handler = r->content_type; if ((p=ap_strchr_c(handler, ';')) != NULL) { char *new_handler = (char *)apr_pmemdup(r->pool, handler, p - handler + 1); char *p2 = new_handler + (p - handler); handler = new_handler; /* exclude media type arguments */ while (p2 > handler && p2[-1] == ' ') --p2; /* strip trailing spaces */ *p2='\0'; } } else { handler = AP_DEFAULT_HANDLER_NAME; } r->handler = handler; } result = ap_run_handler(r); r->handler = old_handler; if (result == DECLINED && r->handler && r->filename) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(00523) "handler \"%s\" not found for: %s", r->handler, r->filename); } if ((result != OK) && (result != DONE) && (result != DECLINED) && (result != SUSPENDED) && (result != AP_FILTER_ERROR) /* ap_die() knows about this specifically */ && !ap_is_HTTP_VALID_RESPONSE(result)) { /* If a module is deliberately returning something else * (request_rec in non-HTTP or proprietary extension?) * let it set a note to allow it explicitly. * Otherwise, a return code that is neither reserved nor HTTP * is a bug, as in PR#31759. */ ignore = apr_table_get(r->notes, "HTTP_IGNORE_RANGE"); if (!ignore) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00524) "Handler for %s returned invalid result code %d", r->handler, result); result = HTTP_INTERNAL_SERVER_ERROR; } } return result == DECLINED ? HTTP_INTERNAL_SERVER_ERROR : result; } AP_DECLARE(int) ap_method_is_limited(cmd_parms *cmd, const char *method) { int methnum; methnum = ap_method_number_of(method); /* * A method number either hardcoded into apache or * added by a module and registered. */ if (methnum != M_INVALID) { return (cmd->limited & (AP_METHOD_BIT << methnum)) ? 1 : 0; } return 0; /* not found */ } AP_DECLARE(void) ap_register_hooks(module *m, apr_pool_t *p) { if (m->register_hooks) { if (getenv("SHOW_HOOKS")) { printf("Registering hooks for %s\n", m->name); apr_hook_debug_enabled = 1; } apr_hook_debug_current = m->name; m->register_hooks(p); } } static void ap_add_module_commands(module *m, apr_pool_t *p); typedef struct ap_mod_list_struct ap_mod_list; struct ap_mod_list_struct { struct ap_mod_list_struct *next; module *m; const command_rec *cmd; }; static void rebuild_conf_hash(apr_pool_t *p, int add_prelinked) { module **m; ap_config_hash = apr_hash_make(p); apr_pool_cleanup_register(p, &ap_config_hash, ap_pool_cleanup_set_null, apr_pool_cleanup_null); if (add_prelinked) { for (m = ap_prelinked_modules; *m != NULL; m++) { ap_add_module_commands(*m, p); } } } static void ap_add_module_commands(module *m, apr_pool_t *p) { apr_pool_t *tpool; ap_mod_list *mln; const command_rec *cmd; char *dir; cmd = m->cmds; if (ap_config_hash == NULL) { rebuild_conf_hash(p, 0); } tpool = apr_hash_pool_get(ap_config_hash); while (cmd && cmd->name) { mln = apr_palloc(tpool, sizeof(ap_mod_list)); mln->cmd = cmd; mln->m = m; dir = apr_pstrdup(tpool, cmd->name); ap_str_tolower(dir); mln->next = apr_hash_get(ap_config_hash, dir, APR_HASH_KEY_STRING); apr_hash_set(ap_config_hash, dir, APR_HASH_KEY_STRING, mln); ++cmd; } } /* One-time setup for precompiled modules --- NOT to be done on restart */ AP_DECLARE(const char *) ap_add_module(module *m, apr_pool_t *p, const char *sym_name) { ap_module_symbol_t *sym = ap_prelinked_module_symbols; /* This could be called from a LoadModule httpd.conf command, * after the file has been linked and the module structure within it * teased out... */ if (m->version != MODULE_MAGIC_NUMBER_MAJOR) { return apr_psprintf(p, "Module \"%s\" is not compatible with this " "version of Apache (found %d, need %d). Please " "contact the vendor for the correct version.", m->name, m->version, MODULE_MAGIC_NUMBER_MAJOR); } if (m->module_index == -1) { if (dynamic_modules >= DYNAMIC_MODULE_LIMIT) { return apr_psprintf(p, "Module \"%s\" could not be loaded, " "because the dynamic module limit was " "reached. Please increase " "DYNAMIC_MODULE_LIMIT and recompile.", m->name); } /* * If this fails some module forgot to call ap_reserve_module_slots*. */ ap_assert(total_modules < conf_vector_length); m->module_index = total_modules++; dynamic_modules++; } else if (!sym_name) { while (sym->modp != NULL) { if (sym->modp == m) { sym_name = sym->name; break; } sym++; } } if (m->next == NULL) { m->next = ap_top_module; ap_top_module = m; } if (sym_name) { int len = strlen(sym_name); int slen = strlen("_module"); if (len > slen && !strcmp(sym_name + len - slen, "_module")) { len -= slen; } ap_module_short_names[m->module_index] = ap_malloc(len + 1); memcpy(ap_module_short_names[m->module_index], sym_name, len); ap_module_short_names[m->module_index][len] = '\0'; merger_func_cache[m->module_index] = m->merge_dir_config; } /* Some C compilers put a complete path into __FILE__, but we want * only the filename (e.g. mod_includes.c). So check for path * components (Unix and DOS), and remove them. */ if (ap_strrchr_c(m->name, '/')) m->name = 1 + ap_strrchr_c(m->name, '/'); if (ap_strrchr_c(m->name, '\\')) m->name = 1 + ap_strrchr_c(m->name, '\\'); #ifdef _OSD_POSIX /* __FILE__ = * "*POSIX(/home/martin/apache/src/modules/standard/mod_info.c)" */ /* We cannot fix the string in-place, because it's const */ if (m->name[strlen(m->name)-1] == ')') { char *tmp = ap_malloc(strlen(m->name)); /* FIXME: memory leak, albeit a small one */ memcpy(tmp, m->name, strlen(m->name)-1); tmp[strlen(m->name)-1] = '\0'; m->name = tmp; } #endif /*_OSD_POSIX*/ ap_add_module_commands(m, p); /* FIXME: is this the right place to call this? * It doesn't appear to be */ ap_register_hooks(m, p); return NULL; } /* * remove_module undoes what add_module did. There are some caveats: * when the module is removed, its slot is lost so all the current * per-dir and per-server configurations are invalid. So we should * only ever call this function when you are invalidating almost * all our current data. I.e. when doing a restart. */ AP_DECLARE(void) ap_remove_module(module *m) { module *modp; modp = ap_top_module; if (modp == m) { /* We are the top module, special case */ ap_top_module = modp->next; m->next = NULL; } else { /* Not the top module, find use. When found modp will * point to the module _before_ us in the list */ while (modp && modp->next != m) { modp = modp->next; } if (!modp) { /* Uh-oh, this module doesn't exist */ ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(00525) "Cannot remove module %s: not found in module list", m->name); return; } /* Eliminate us from the module list */ modp->next = modp->next->next; } free(ap_module_short_names[m->module_index]); ap_module_short_names[m->module_index] = NULL; merger_func_cache[m->module_index] = NULL; m->module_index = -1; /* simulate being unloaded, should * be unnecessary */ dynamic_modules--; total_modules--; } AP_DECLARE(const char *) ap_add_loaded_module(module *mod, apr_pool_t *p, const char *short_name) { module **m; const char *error; /* * Add module pointer to top of chained module list */ error = ap_add_module(mod, p, short_name); if (error) { return error; } /* * And module pointer to list of loaded modules * * Notes: 1. ap_add_module() would already complain if no more space * exists for adding a dynamically loaded module * 2. ap_add_module() accepts double inclusion, so we have * to accept this, too. */ for (m = ap_loaded_modules; *m != NULL; m++) ; *m++ = mod; *m = NULL; return NULL; } AP_DECLARE(void) ap_remove_loaded_module(module *mod) { module **m; module **m2; int done; /* * Remove module pointer from chained module list */ ap_remove_module(mod); /* * Remove module pointer from list of loaded modules * * Note: 1. We cannot determine if the module was successfully * removed by ap_remove_module(). * 2. We have not to complain explicitly when the module * is not found because ap_remove_module() did it * for us already. */ for (m = m2 = ap_loaded_modules, done = 0; *m2 != NULL; m2++) { if (*m2 == mod && done == 0) done = 1; else *m++ = *m2; } *m = NULL; } AP_DECLARE(const char *) ap_setup_prelinked_modules(process_rec *process) { module **m; module **m2; const char *error; apr_hook_global_pool=process->pconf; rebuild_conf_hash(process->pconf, 0); /* * Initialise total_modules variable and module indices */ total_modules = 0; for (m = ap_preloaded_modules; *m != NULL; m++) (*m)->module_index = total_modules++; max_modules = total_modules + DYNAMIC_MODULE_LIMIT + 1; conf_vector_length = max_modules; /* * Initialise list of loaded modules and short names */ ap_loaded_modules = (module **)apr_palloc(process->pool, sizeof(module *) * conf_vector_length); if (!ap_module_short_names) ap_module_short_names = ap_calloc(sizeof(char *), conf_vector_length); if (!merger_func_cache) merger_func_cache = ap_calloc(sizeof(merger_func), conf_vector_length); if (ap_loaded_modules == NULL || ap_module_short_names == NULL || merger_func_cache == NULL) return "Ouch! Out of memory in ap_setup_prelinked_modules()!"; for (m = ap_preloaded_modules, m2 = ap_loaded_modules; *m != NULL; ) *m2++ = *m++; *m2 = NULL; /* * Initialize chain of linked (=activate) modules */ for (m = ap_prelinked_modules; *m != NULL; m++) { error = ap_add_module(*m, process->pconf, NULL); if (error) { return error; } } apr_hook_sort_all(); return NULL; } AP_DECLARE(const char *) ap_find_module_name(module *m) { return m->name; } AP_DECLARE(const char *) ap_find_module_short_name(int module_index) { if (module_index < 0 || module_index >= conf_vector_length) return NULL; return ap_module_short_names[module_index]; } AP_DECLARE(module *) ap_find_linked_module(const char *name) { module *modp; for (modp = ap_top_module; modp; modp = modp->next) { if (strcmp(modp->name, name) == 0) return modp; } return NULL; } /***************************************************************** * * Resource, access, and .htaccess config files now parsed by a common * command loop. * * Let's begin with the basics; parsing the line and * invoking the function... */ #define AP_MAX_ARGC 64 static const char *invoke_cmd(const command_rec *cmd, cmd_parms *parms, void *mconfig, const char *args) { int override_list_ok = 0; char *w, *w2, *w3; const char *errmsg = NULL; /* Have we been provided a list of acceptable directives? */ if (parms->override_list != NULL) { if (apr_table_get(parms->override_list, cmd->name) != NULL) { override_list_ok = 1; } } if ((parms->override & cmd->req_override) == 0 && !override_list_ok) { if (parms->override & NONFATAL_OVERRIDE) { ap_log_perror(APLOG_MARK, APLOG_WARNING, 0, parms->temp_pool, APLOGNO(02295) "%s in .htaccess forbidden by AllowOverride", cmd->name); return NULL; } else if (parms->directive && parms->directive->parent) { return apr_pstrcat(parms->pool, cmd->name, " not allowed in ", parms->directive->parent->directive, ">", " context", NULL); } else { return apr_pstrcat(parms->pool, cmd->name, " not allowed here", NULL); } } parms->info = cmd->cmd_data; parms->cmd = cmd; switch (cmd->args_how) { case RAW_ARGS: #ifdef RESOLVE_ENV_PER_TOKEN args = ap_resolve_env(parms->pool,args); #endif return cmd->AP_RAW_ARGS(parms, mconfig, args); case TAKE_ARGV: { char *argv[AP_MAX_ARGC]; int argc = 0; do { w = ap_getword_conf(parms->pool, &args); if (*w == '\0' && *args == '\0') { break; } argv[argc] = w; argc++; } while (argc < AP_MAX_ARGC && *args != '\0'); return cmd->AP_TAKE_ARGV(parms, mconfig, argc, argv); } case NO_ARGS: if (*args != 0) return apr_pstrcat(parms->pool, cmd->name, " takes no arguments", NULL); return cmd->AP_NO_ARGS(parms, mconfig); case TAKE1: w = ap_getword_conf(parms->pool, &args); if (*w == '\0' || *args != 0) return apr_pstrcat(parms->pool, cmd->name, " takes one argument", cmd->errmsg ? ", " : NULL, cmd->errmsg, NULL); return cmd->AP_TAKE1(parms, mconfig, w); case TAKE2: w = ap_getword_conf(parms->pool, &args); w2 = ap_getword_conf(parms->pool, &args); if (*w == '\0' || *w2 == '\0' || *args != 0) return apr_pstrcat(parms->pool, cmd->name, " takes two arguments", cmd->errmsg ? ", " : NULL, cmd->errmsg, NULL); return cmd->AP_TAKE2(parms, mconfig, w, w2); case TAKE12: w = ap_getword_conf(parms->pool, &args); w2 = ap_getword_conf(parms->pool, &args); if (*w == '\0' || *args != 0) return apr_pstrcat(parms->pool, cmd->name, " takes 1-2 arguments", cmd->errmsg ? ", " : NULL, cmd->errmsg, NULL); return cmd->AP_TAKE2(parms, mconfig, w, *w2 ? w2 : NULL); case TAKE3: w = ap_getword_conf(parms->pool, &args); w2 = ap_getword_conf(parms->pool, &args); w3 = ap_getword_conf(parms->pool, &args); if (*w == '\0' || *w2 == '\0' || *w3 == '\0' || *args != 0) return apr_pstrcat(parms->pool, cmd->name, " takes three arguments", cmd->errmsg ? ", " : NULL, cmd->errmsg, NULL); return cmd->AP_TAKE3(parms, mconfig, w, w2, w3); case TAKE23: w = ap_getword_conf(parms->pool, &args); w2 = ap_getword_conf(parms->pool, &args); w3 = *args ? ap_getword_conf(parms->pool, &args) : NULL; if (*w == '\0' || *w2 == '\0' || *args != 0) return apr_pstrcat(parms->pool, cmd->name, " takes two or three arguments", cmd->errmsg ? ", " : NULL, cmd->errmsg, NULL); return cmd->AP_TAKE3(parms, mconfig, w, w2, w3); case TAKE123: w = ap_getword_conf(parms->pool, &args); w2 = *args ? ap_getword_conf(parms->pool, &args) : NULL; w3 = *args ? ap_getword_conf(parms->pool, &args) : NULL; if (*w == '\0' || *args != 0) return apr_pstrcat(parms->pool, cmd->name, " takes one, two or three arguments", cmd->errmsg ? ", " : NULL, cmd->errmsg, NULL); return cmd->AP_TAKE3(parms, mconfig, w, w2, w3); case TAKE13: w = ap_getword_conf(parms->pool, &args); w2 = *args ? ap_getword_conf(parms->pool, &args) : NULL; w3 = *args ? ap_getword_conf(parms->pool, &args) : NULL; if (*w == '\0' || (w2 && *w2 && !w3) || *args != 0) return apr_pstrcat(parms->pool, cmd->name, " takes one or three arguments", cmd->errmsg ? ", " : NULL, cmd->errmsg, NULL); return cmd->AP_TAKE3(parms, mconfig, w, w2, w3); case ITERATE: w = ap_getword_conf(parms->pool, &args); if (*w == '\0') return apr_pstrcat(parms->pool, cmd->name, " requires at least one argument", cmd->errmsg ? ", " : NULL, cmd->errmsg, NULL); while (*w != '\0') { errmsg = cmd->AP_TAKE1(parms, mconfig, w); if (errmsg && strcmp(errmsg, DECLINE_CMD) != 0) return errmsg; w = ap_getword_conf(parms->pool, &args); } return errmsg; case ITERATE2: w = ap_getword_conf(parms->pool, &args); if (*w == '\0' || *args == 0) return apr_pstrcat(parms->pool, cmd->name, " requires at least two arguments", cmd->errmsg ? ", " : NULL, cmd->errmsg, NULL); while (*(w2 = ap_getword_conf(parms->pool, &args)) != '\0') { errmsg = cmd->AP_TAKE2(parms, mconfig, w, w2); if (errmsg && strcmp(errmsg, DECLINE_CMD) != 0) return errmsg; } return errmsg; case FLAG: /* * This is safe to use temp_pool here, because the 'flag' itself is not * forwarded as-is */ w = ap_getword_conf(parms->temp_pool, &args); if (*w == '\0' || (strcasecmp(w, "on") && strcasecmp(w, "off"))) return apr_pstrcat(parms->pool, cmd->name, " must be On or Off", NULL); return cmd->AP_FLAG(parms, mconfig, strcasecmp(w, "off") != 0); default: return apr_pstrcat(parms->pool, cmd->name, " is improperly configured internally (server bug)", NULL); } } AP_CORE_DECLARE(const command_rec *) ap_find_command(const char *name, const command_rec *cmds) { while (cmds->name) { if (!strcasecmp(name, cmds->name)) return cmds; ++cmds; } return NULL; } AP_CORE_DECLARE(const command_rec *) ap_find_command_in_modules( const char *cmd_name, module **mod) { const command_rec *cmdp; module *modp; for (modp = *mod; modp; modp = modp->next) { if (modp->cmds && (cmdp = ap_find_command(cmd_name, modp->cmds))) { *mod = modp; return cmdp; } } return NULL; } AP_CORE_DECLARE(void *) ap_set_config_vectors(server_rec *server, ap_conf_vector_t *section_vector, const char *section, module *mod, apr_pool_t *pconf) { void *section_config = ap_get_module_config(section_vector, mod); void *server_config = ap_get_module_config(server->module_config, mod); if (!section_config && mod->create_dir_config) { /* ### need to fix the create_dir_config functions' prototype... */ section_config = (*mod->create_dir_config)(pconf, (char *)section); ap_set_module_config(section_vector, mod, section_config); } if (!server_config && mod->create_server_config) { server_config = (*mod->create_server_config)(pconf, server); ap_set_module_config(server->module_config, mod, server_config); } return section_config; } static const char *execute_now(char *cmd_line, const char *args, cmd_parms *parms, apr_pool_t *p, apr_pool_t *ptemp, ap_directive_t **sub_tree, ap_directive_t *parent); static const char *ap_build_config_sub(apr_pool_t *p, apr_pool_t *temp_pool, const char *l, cmd_parms *parms, ap_directive_t **current, ap_directive_t **curr_parent, ap_directive_t **conftree) { const char *retval = NULL; const char *args; char *cmd_name; ap_directive_t *newdir; module *mod = ap_top_module; const command_rec *cmd; if (*l == '#' || *l == '\0') return NULL; #if RESOLVE_ENV_PER_TOKEN args = l; #else args = ap_resolve_env(temp_pool, l); #endif /* The first word is the name of a directive. We can safely use the * 'temp_pool' for it. If it matches the name of a known directive, we * can reference the string within the module if needed. Otherwise, we * can still make a copy in the 'p' pool. */ cmd_name = ap_getword_conf(temp_pool, &args); if (*cmd_name == '\0') { /* Note: this branch should not occur. An empty line should have * triggered the exit further above. */ return NULL; } if (cmd_name[1] != '/') { char *lastc = cmd_name + strlen(cmd_name) - 1; if (*lastc == '>') { *lastc = '\0' ; } if (cmd_name[0] == '<' && *args == '\0') { args = ">"; } } newdir = apr_pcalloc(p, sizeof(ap_directive_t)); newdir->filename = parms->config_file->name; newdir->line_num = parms->config_file->line_number; newdir->args = apr_pstrdup(p, args); if ((cmd = ap_find_command_in_modules(cmd_name, &mod)) != NULL) { newdir->directive = cmd->name; if (cmd->req_override & EXEC_ON_READ) { ap_directive_t *sub_tree = NULL; parms->err_directive = newdir; retval = execute_now(cmd_name, args, parms, p, temp_pool, &sub_tree, *curr_parent); if (*current) { (*current)->next = sub_tree; } else { *current = sub_tree; if (*curr_parent) { (*curr_parent)->first_child = (*current); } if (*current) { (*current)->parent = (*curr_parent); } } if (*current) { if (!*conftree) { /* Before walking *current to the end of the list, * set the head to *current. */ *conftree = *current; } while ((*current)->next != NULL) { (*current) = (*current)->next; (*current)->parent = (*curr_parent); } } return retval; } } else { /* No known directive found? Make a copy of what we have parsed. */ newdir->directive = apr_pstrdup(p, cmd_name); } if (cmd_name[0] == '<') { if (cmd_name[1] != '/') { (*current) = ap_add_node(curr_parent, *current, newdir, 1); } else if (*curr_parent == NULL) { parms->err_directive = newdir; return apr_pstrcat(p, cmd_name, " without matching <", cmd_name + 2, " section", NULL); } else { char *bracket = cmd_name + strlen(cmd_name) - 1; if (*bracket != '>') { parms->err_directive = newdir; return apr_pstrcat(p, cmd_name, "> directive missing closing '>'", NULL); } *bracket = '\0'; if (strcasecmp(cmd_name + 2, (*curr_parent)->directive + 1) != 0) { parms->err_directive = newdir; return apr_pstrcat(p, "Expected directive + 1, "> but saw ", cmd_name, ">", NULL); } *bracket = '>'; /* done with this section; move up a level */ *current = *curr_parent; *curr_parent = (*current)->parent; } } else { *current = ap_add_node(curr_parent, *current, newdir, 0); } return retval; } #define VARBUF_INIT_LEN 200 #define VARBUF_MAX_LEN (16*1024*1024) AP_DECLARE(const char *) ap_build_cont_config(apr_pool_t *p, apr_pool_t *temp_pool, cmd_parms *parms, ap_directive_t **current, ap_directive_t **curr_parent, char *orig_directive) { char *bracket; const char *retval; ap_directive_t *sub_tree = NULL; apr_status_t rc; struct ap_varbuf vb; apr_size_t max_len = VARBUF_MAX_LEN; if (p == temp_pool) max_len = HUGE_STRING_LEN; /* lower limit for .htaccess */ bracket = apr_pstrcat(temp_pool, orig_directive + 1, ">", NULL); ap_varbuf_init(temp_pool, &vb, VARBUF_INIT_LEN); while ((rc = ap_varbuf_cfg_getline(&vb, parms->config_file, max_len)) == APR_SUCCESS) { if (!memcmp(vb.buf, "config_file, rc); *current = sub_tree; return NULL; } static const char *ap_walk_config_sub(const ap_directive_t *current, cmd_parms *parms, ap_conf_vector_t *section_vector) { const command_rec *cmd; ap_mod_list *ml; char *dir = apr_pstrdup(parms->temp_pool, current->directive); ap_str_tolower(dir); ml = apr_hash_get(ap_config_hash, dir, APR_HASH_KEY_STRING); if (ml == NULL) { parms->err_directive = current; if (parms->override & NONFATAL_UNKNOWN) { ap_log_perror(APLOG_MARK, APLOG_WARNING, 0, parms->temp_pool, APLOGNO(02296) "Unknown directive %s " "perhaps misspelled or defined by a module " "not included in the server configuration", dir); return NULL; } else { return apr_pstrcat(parms->pool, "Invalid command '", current->directive, "', perhaps misspelled or defined by a module " "not included in the server configuration", NULL); } } for ( ; ml != NULL; ml = ml->next) { void *dir_config = ap_set_config_vectors(parms->server, section_vector, parms->path, ml->m, parms->pool); const char *retval; cmd = ml->cmd; /* Once was enough? */ if (cmd->req_override & EXEC_ON_READ) { continue; } retval = invoke_cmd(cmd, parms, dir_config, current->args); if (retval != NULL && strcmp(retval, DECLINE_CMD) != 0) { /* If the directive in error has already been set, don't * replace it. Otherwise, an error inside a container * will be reported as occurring on the first line of the * container. */ if (!parms->err_directive) { parms->err_directive = current; } return retval; } } return NULL; } AP_DECLARE(const char *) ap_walk_config(ap_directive_t *current, cmd_parms *parms, ap_conf_vector_t *section_vector) { ap_conf_vector_t *oldconfig = parms->context; parms->context = section_vector; /* scan through all directives, executing each one */ for (; current != NULL; current = current->next) { const char *errmsg; parms->directive = current; /* actually parse the command and execute the correct function */ errmsg = ap_walk_config_sub(current, parms, section_vector); if (errmsg != NULL) { /* restore the context (just in case) */ parms->context = oldconfig; return errmsg; } } parms->context = oldconfig; return NULL; } AP_DECLARE(const char *) ap_build_config(cmd_parms *parms, apr_pool_t *p, apr_pool_t *temp_pool, ap_directive_t **conftree) { ap_directive_t *current = *conftree; ap_directive_t *curr_parent = NULL; const char *errmsg; ap_directive_t **last_ptr = NULL; apr_status_t rc; struct ap_varbuf vb; apr_size_t max_len = VARBUF_MAX_LEN; if (p == temp_pool) max_len = HUGE_STRING_LEN; /* lower limit for .htaccess */ ap_varbuf_init(temp_pool, &vb, VARBUF_INIT_LEN); if (current != NULL) { /* If we have to traverse the whole tree again for every included * config file, the required time grows as O(n^2) with the number of * files. This can be a significant delay for large configurations. * Therefore we cache a pointer to the last node. */ last_ptr = &(current->last); if (last_ptr && *last_ptr) { current = *last_ptr; } while (current->next) { current = current->next; } if (last_ptr) { /* update cached pointer to last node */ *last_ptr = current; } } while ((rc = ap_varbuf_cfg_getline(&vb, parms->config_file, max_len)) == APR_SUCCESS) { errmsg = ap_build_config_sub(p, temp_pool, vb.buf, parms, ¤t, &curr_parent, conftree); if (errmsg != NULL) return errmsg; if (*conftree == NULL && curr_parent != NULL) { *conftree = curr_parent; } if (*conftree == NULL && current != NULL) { *conftree = current; } } ap_varbuf_free(&vb); if (rc != APR_EOF && rc != APR_SUCCESS) return ap_pcfg_strerror(temp_pool, parms->config_file, rc); if (curr_parent != NULL) { errmsg = ""; while (curr_parent != NULL) { errmsg = apr_psprintf(p, "%s%s%s:%u: %s> was not closed.", errmsg, *errmsg == '\0' ? "" : APR_EOL_STR, curr_parent->filename, curr_parent->line_num, curr_parent->directive); parms->err_directive = curr_parent; curr_parent = curr_parent->parent; } return errmsg; } return NULL; } /* * Generic command functions... */ AP_DECLARE_NONSTD(const char *) ap_set_string_slot(cmd_parms *cmd, void *struct_ptr, const char *arg) { int offset = (int)(long)cmd->info; *(const char **)((char *)struct_ptr + offset) = arg; return NULL; } AP_DECLARE_NONSTD(const char *) ap_set_int_slot(cmd_parms *cmd, void *struct_ptr, const char *arg) { char *endptr; char *error_str = NULL; int offset = (int)(long)cmd->info; *(int *)((char*)struct_ptr + offset) = strtol(arg, &endptr, 10); if ((*arg == '\0') || (*endptr != '\0')) { error_str = apr_psprintf(cmd->pool, "Invalid value for directive %s, expected integer", cmd->directive->directive); } return error_str; } AP_DECLARE_NONSTD(const char *) ap_set_string_slot_lower(cmd_parms *cmd, void *struct_ptr, const char *arg_) { char *arg = apr_pstrdup(cmd->pool,arg_); int offset = (int)(long)cmd->info; ap_str_tolower(arg); *(char **)((char *)struct_ptr + offset) = arg; return NULL; } AP_DECLARE_NONSTD(const char *) ap_set_flag_slot(cmd_parms *cmd, void *struct_ptr_v, int arg) { int offset = (int)(long)cmd->info; char *struct_ptr = (char *)struct_ptr_v; *(int *)(struct_ptr + offset) = arg ? 1 : 0; return NULL; } AP_DECLARE_NONSTD(const char *) ap_set_flag_slot_char(cmd_parms *cmd, void *struct_ptr_v, int arg) { int offset = (int)(long)cmd->info; char *struct_ptr = (char *)struct_ptr_v; *(struct_ptr + offset) = arg ? 1 : 0; return NULL; } AP_DECLARE_NONSTD(const char *) ap_set_file_slot(cmd_parms *cmd, void *struct_ptr, const char *arg) { /* Prepend server_root to relative arg. * This allows most args to be independent of server_root, * so the server can be moved or mirrored with less pain. */ const char *path; int offset = (int)(long)cmd->info; path = ap_server_root_relative(cmd->pool, arg); if (!path) { return apr_pstrcat(cmd->pool, cmd->cmd->name, ": Invalid file path '", arg, "'", NULL); } *(const char **) ((char*)struct_ptr + offset) = path; return NULL; } AP_DECLARE_NONSTD(const char *) ap_set_deprecated(cmd_parms *cmd, void *struct_ptr, const char *arg) { return cmd->cmd->errmsg; } AP_DECLARE(void) ap_reset_module_loglevels(struct ap_logconf *l, int val) { if (l->module_levels) memset(l->module_levels, val, conf_vector_length); } AP_DECLARE(void) ap_set_module_loglevel(apr_pool_t *pool, struct ap_logconf *l, int index, int level) { if (!l->module_levels) { l->module_levels = apr_palloc(pool, conf_vector_length); if (l->level == APLOG_UNSET) { ap_reset_module_loglevels(l, APLOG_UNSET); } else { ap_reset_module_loglevels(l, APLOG_NO_MODULE); } } l->module_levels[index] = level; } /***************************************************************** * * Reading whole config files... */ static cmd_parms default_parms = {NULL, 0, 0, NULL, -1, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL}; AP_DECLARE(char *) ap_server_root_relative(apr_pool_t *p, const char *file) { char *newpath = NULL; apr_status_t rv; rv = apr_filepath_merge(&newpath, ap_server_root, file, APR_FILEPATH_TRUENAME, p); if (newpath && (rv == APR_SUCCESS || APR_STATUS_IS_EPATHWILD(rv) || APR_STATUS_IS_ENOENT(rv) || APR_STATUS_IS_ENOTDIR(rv))) { return newpath; } else { return NULL; } } AP_DECLARE(char *) ap_runtime_dir_relative(apr_pool_t *p, const char *file) { char *newpath = NULL; apr_status_t rv; const char *runtime_dir = ap_runtime_dir ? ap_runtime_dir : ap_server_root_relative(p, DEFAULT_REL_RUNTIMEDIR); rv = apr_filepath_merge(&newpath, runtime_dir, file, APR_FILEPATH_TRUENAME, p); if (newpath && (rv == APR_SUCCESS || APR_STATUS_IS_EPATHWILD(rv) || APR_STATUS_IS_ENOENT(rv) || APR_STATUS_IS_ENOTDIR(rv))) { return newpath; } else { return NULL; } } AP_DECLARE(const char *) ap_soak_end_container(cmd_parms *cmd, char *directive) { struct ap_varbuf vb; const char *args; char *cmd_name; apr_status_t rc; apr_size_t max_len = VARBUF_MAX_LEN; if (cmd->pool == cmd->temp_pool) max_len = HUGE_STRING_LEN; /* lower limit for .htaccess */ ap_varbuf_init(cmd->temp_pool, &vb, VARBUF_INIT_LEN); while ((rc = ap_varbuf_cfg_getline(&vb, cmd->config_file, max_len)) == APR_SUCCESS) { args = vb.buf; cmd_name = ap_getword_conf(cmd->temp_pool, &args); if (cmd_name[0] == '<') { if (cmd_name[1] == '/') { cmd_name[strlen(cmd_name) - 1] = '\0'; if (strcasecmp(cmd_name + 2, directive + 1) != 0) { return apr_pstrcat(cmd->pool, "Expected but saw ", cmd_name, ">", NULL); } ap_varbuf_free(&vb); return NULL; /* found end of container */ } else { const char *msg; if (*args == '\0' && cmd_name[strlen(cmd_name) - 1] == '>') { cmd_name[strlen(cmd_name) - 1] = '\0'; } if ((msg = ap_soak_end_container(cmd, cmd_name)) != NULL) { return msg; } } } } if (rc != APR_EOF && rc != APR_SUCCESS) return ap_pcfg_strerror(cmd->temp_pool, cmd->config_file, rc); return apr_pstrcat(cmd->pool, "Expected before end of configuration", NULL); } static const char *execute_now(char *cmd_line, const char *args, cmd_parms *parms, apr_pool_t *p, apr_pool_t *ptemp, ap_directive_t **sub_tree, ap_directive_t *parent) { const command_rec *cmd; ap_mod_list *ml; char *dir = apr_pstrdup(parms->temp_pool, cmd_line); ap_str_tolower(dir); ml = apr_hash_get(ap_config_hash, dir, APR_HASH_KEY_STRING); if (ml == NULL) { return apr_pstrcat(parms->pool, "Invalid command '", cmd_line, "', perhaps misspelled or defined by a module " "not included in the server configuration", NULL); } for ( ; ml != NULL; ml = ml->next) { const char *retval; cmd = ml->cmd; retval = invoke_cmd(cmd, parms, sub_tree, args); if (retval != NULL) { return retval; } } return NULL; } /* This structure and the following functions are needed for the * table-based config file reading. They are passed to the * cfg_open_custom() routine. */ /* Structure to be passed to cfg_open_custom(): it contains an * index which is incremented from 0 to nelts on each call to * cfg_getline() (which in turn calls arr_elts_getstr()) * and an apr_array_header_t pointer for the string array. */ typedef struct { apr_array_header_t *array; int curr_idx; } arr_elts_param_t; /* arr_elts_getstr() returns the next line from the string array. */ static apr_status_t arr_elts_getstr(void *buf, apr_size_t bufsiz, void *param) { arr_elts_param_t *arr_param = (arr_elts_param_t *)param; const char *elt; /* End of array reached? */ if (++arr_param->curr_idx > arr_param->array->nelts) return APR_EOF; /* return the line */ elt = ((const char **)arr_param->array->elts)[arr_param->curr_idx - 1]; if (apr_cpystrn(buf, elt, bufsiz) - (char *)buf >= bufsiz - 1) return APR_ENOSPC; return APR_SUCCESS; } /* arr_elts_close(): dummy close routine (makes sure no more lines can be read) */ static apr_status_t arr_elts_close(void *param) { arr_elts_param_t *arr_param = (arr_elts_param_t *)param; arr_param->curr_idx = arr_param->array->nelts; return APR_SUCCESS; } static const char *process_command_config(server_rec *s, apr_array_header_t *arr, ap_directive_t **conftree, apr_pool_t *p, apr_pool_t *ptemp) { const char *errmsg; cmd_parms parms; arr_elts_param_t arr_parms; arr_parms.curr_idx = 0; arr_parms.array = arr; if (ap_config_hash == NULL) { rebuild_conf_hash(s->process->pconf, 1); } parms = default_parms; parms.pool = p; parms.temp_pool = ptemp; parms.server = s; parms.override = (RSRC_CONF | OR_ALL) & ~(OR_AUTHCFG | OR_LIMIT); parms.override_opts = OPT_ALL | OPT_SYM_OWNER | OPT_MULTI; parms.config_file = ap_pcfg_open_custom(p, "-c/-C directives", &arr_parms, NULL, arr_elts_getstr, arr_elts_close); errmsg = ap_build_config(&parms, p, ptemp, conftree); ap_cfg_closefile(parms.config_file); if (errmsg) { return apr_pstrcat(p, "Syntax error in -C/-c directive: ", errmsg, NULL); } return NULL; } /** * Used by -D DUMP_INCLUDES to output the config file "tree". */ static void dump_config_name(const char *fname, apr_pool_t *p) { unsigned i, recursion, line_number; void *data; apr_file_t *out = NULL; apr_file_open_stdout(&out, p); /* ap_include_sentinel is defined by the core Include directive; use it to * figure out how deep in the stack we are. */ apr_pool_userdata_get(&data, "ap_include_sentinel", p); if (data) { recursion = *(unsigned *)data; } else { recursion = 0; } /* Indent once for each level. */ for (i = 0; i < (recursion + 1); ++i) { apr_file_printf(out, " "); } /* ap_include_lineno is similarly defined to tell us where in the last * config file we were. */ apr_pool_userdata_get(&data, "ap_include_lineno", p); if (data) { line_number = *(unsigned *)data; } else { line_number = 0; } /* Print the line number and the name of the parsed file. */ if (line_number > 0) { apr_file_printf(out, "(%u)", line_number); } else { apr_file_printf(out, "(*)"); } apr_file_printf(out, " %s\n", fname); } AP_DECLARE(const char *) ap_process_resource_config(server_rec *s, const char *fname, ap_directive_t **conftree, apr_pool_t *p, apr_pool_t *ptemp) { ap_configfile_t *cfp; cmd_parms parms; apr_status_t rv; const char *error; parms = default_parms; parms.pool = p; parms.temp_pool = ptemp; parms.server = s; parms.override = (RSRC_CONF | OR_ALL) & ~(OR_AUTHCFG | OR_LIMIT); parms.override_opts = OPT_ALL | OPT_SYM_OWNER | OPT_MULTI; rv = ap_pcfg_openfile(&cfp, p, fname); if (rv != APR_SUCCESS) { return apr_psprintf(p, "Could not open configuration file %s: %pm", fname, &rv); } if (ap_exists_config_define("DUMP_INCLUDES")) { dump_config_name(fname, p); } parms.config_file = cfp; error = ap_build_config(&parms, p, ptemp, conftree); ap_cfg_closefile(cfp); if (error) { if (parms.err_directive) return apr_psprintf(p, "Syntax error on line %d of %s: %s", parms.err_directive->line_num, parms.err_directive->filename, error); else return error; } return NULL; } typedef struct { server_rec *s; ap_directive_t **conftree; } configs; static const char *process_resource_config_cb(ap_dir_match_t *w, const char *fname) { configs *cfgs = w->ctx; return ap_process_resource_config(cfgs->s, fname, cfgs->conftree, w->p, w->ptemp); } AP_DECLARE(const char *) ap_process_fnmatch_configs(server_rec *s, const char *fname, ap_directive_t **conftree, apr_pool_t *p, apr_pool_t *ptemp, int optional) { configs cfgs; ap_dir_match_t w; cfgs.s = s; cfgs.conftree = conftree; w.prefix = "Include/IncludeOptional: "; w.p = p; w.ptemp = ptemp; w.flags = (optional ? AP_DIR_FLAG_OPTIONAL : AP_DIR_FLAG_NONE) | AP_DIR_FLAG_RECURSIVE; w.cb = process_resource_config_cb; w.ctx = &cfgs; w.depth = 0; /* don't require conf/httpd.conf if we have a -C or -c switch */ if ((ap_server_pre_read_config->nelts || ap_server_post_read_config->nelts) && !(strcmp(fname, ap_server_root_relative(ptemp, SERVER_CONFIG_FILE)))) { apr_finfo_t finfo; if (apr_stat(&finfo, fname, APR_FINFO_LINK | APR_FINFO_TYPE, ptemp) != APR_SUCCESS) return NULL; } if (!apr_fnmatch_test(fname)) { return ap_dir_nofnmatch(&w, fname); } else { apr_status_t status; const char *rootpath, *filepath = fname; /* locate the start of the directories proper */ status = apr_filepath_root(&rootpath, &filepath, APR_FILEPATH_TRUENAME, ptemp); /* we allow APR_SUCCESS and APR_EINCOMPLETE */ if (APR_ERELATIVE == status) { return apr_pstrcat(p, "Include must have an absolute path, ", fname, NULL); } else if (APR_EBADPATH == status) { return apr_pstrcat(p, "Include has a bad path, ", fname, NULL); } /* walk the filepath */ return ap_dir_fnmatch(&w, rootpath, filepath); } } AP_DECLARE(int) ap_process_config_tree(server_rec *s, ap_directive_t *conftree, apr_pool_t *p, apr_pool_t *ptemp) { const char *errmsg; cmd_parms parms; parms = default_parms; parms.pool = p; parms.temp_pool = ptemp; parms.server = s; parms.override = (RSRC_CONF | OR_ALL) & ~(OR_AUTHCFG | OR_LIMIT); parms.override_opts = OPT_ALL | OPT_SYM_OWNER | OPT_MULTI; parms.limited = -1; errmsg = ap_walk_config(conftree, &parms, s->lookup_defaults); if (errmsg) { if (parms.err_directive) ap_log_perror(APLOG_MARK, APLOG_STARTUP, 0, p, APLOGNO(00526) "Syntax error on line %d of %s:", parms.err_directive->line_num, parms.err_directive->filename); ap_log_perror(APLOG_MARK, APLOG_STARTUP, 0, p, "%s", errmsg); return HTTP_INTERNAL_SERVER_ERROR; } return OK; } apr_status_t ap_open_htaccess(request_rec *r, const char *dir_name, const char *access_name, ap_configfile_t **conffile, const char **full_name) { *full_name = ap_make_full_path(r->pool, dir_name, access_name); return ap_pcfg_openfile(conffile, r->pool, *full_name); } AP_CORE_DECLARE(int) ap_parse_htaccess(ap_conf_vector_t **result, request_rec *r, int override, int override_opts, apr_table_t *override_list, const char *d, const char *access_names) { ap_configfile_t *f = NULL; cmd_parms parms; const char *filename; const struct htaccess_result *cache; struct htaccess_result *new; ap_conf_vector_t *dc = NULL; apr_status_t status; /* firstly, search cache */ for (cache = r->htaccess; cache != NULL; cache = cache->next) { if (cache->override == override && strcmp(cache->dir, d) == 0) { *result = cache->htaccess; return OK; } } parms = default_parms; parms.override = override; parms.override_opts = override_opts; parms.override_list = override_list; parms.pool = r->pool; parms.temp_pool = r->pool; parms.server = r->server; parms.path = apr_pstrdup(r->pool, d); /* loop through the access names and find the first one */ while (access_names[0]) { const char *access_name = ap_getword_conf(r->pool, &access_names); filename = NULL; status = ap_run_open_htaccess(r, d, access_name, &f, &filename); if (status == APR_SUCCESS) { const char *errmsg; ap_directive_t *temptree = NULL; dc = ap_create_per_dir_config(r->pool); parms.config_file = f; errmsg = ap_build_config(&parms, r->pool, r->pool, &temptree); if (errmsg == NULL) errmsg = ap_walk_config(temptree, &parms, dc); ap_cfg_closefile(f); if (errmsg) { ap_log_rerror(APLOG_MARK, APLOG_ALERT, 0, r, "%s: %s", filename, errmsg); return HTTP_INTERNAL_SERVER_ERROR; } *result = dc; break; } else { if (!APR_STATUS_IS_ENOENT(status) && !APR_STATUS_IS_ENOTDIR(status)) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, status, r, APLOGNO(00529) "%s pcfg_openfile: unable to check htaccess file, " "ensure it is readable and that '%s' " "is executable", filename, d); apr_table_setn(r->notes, "error-notes", "Server unable to read htaccess file, denying " "access to be safe"); return HTTP_FORBIDDEN; } } } /* cache it */ new = apr_palloc(r->pool, sizeof(struct htaccess_result)); new->dir = parms.path; new->override = override; new->override_opts = override_opts; new->htaccess = dc; /* add to head of list */ new->next = r->htaccess; r->htaccess = new; return OK; } AP_CORE_DECLARE(const char *) ap_init_virtual_host(apr_pool_t *p, const char *hostname, server_rec *main_server, server_rec **ps) { server_rec *s = (server_rec *) apr_pcalloc(p, sizeof(server_rec)); /* TODO: this crap belongs in http_core */ s->process = main_server->process; s->server_admin = NULL; s->server_hostname = NULL; s->server_scheme = NULL; s->error_fname = NULL; s->timeout = 0; s->keep_alive_timeout = 0; s->keep_alive = -1; s->keep_alive_max = -1; s->error_log = main_server->error_log; s->log.level = APLOG_UNSET; s->log.module_levels = NULL; /* useful default, otherwise we get a port of 0 on redirects */ s->port = main_server->port; s->next = NULL; s->is_virtual = 1; s->names = apr_array_make(p, 4, sizeof(char **)); s->wild_names = apr_array_make(p, 4, sizeof(char **)); s->module_config = create_empty_config(p); s->lookup_defaults = ap_create_per_dir_config(p); s->limit_req_line = main_server->limit_req_line; s->limit_req_fieldsize = main_server->limit_req_fieldsize; s->limit_req_fields = main_server->limit_req_fields; *ps = s; return ap_parse_vhost_addrs(p, hostname, s); } AP_DECLARE(struct ap_logconf *) ap_new_log_config(apr_pool_t *p, const struct ap_logconf *old) { struct ap_logconf *l = apr_pcalloc(p, sizeof(struct ap_logconf)); if (old) { l->level = old->level; if (old->module_levels) { l->module_levels = apr_pmemdup(p, old->module_levels, conf_vector_length); } } else { l->level = APLOG_UNSET; } return l; } AP_DECLARE(void) ap_merge_log_config(const struct ap_logconf *old_conf, struct ap_logconf *new_conf) { if (new_conf->level != APLOG_UNSET) { /* Setting the main loglevel resets all per-module log levels. * I.e. if new->level has been set, we must ignore old->module_levels. */ return; } new_conf->level = old_conf->level; if (new_conf->module_levels == NULL) { new_conf->module_levels = old_conf->module_levels; } else if (old_conf->module_levels != NULL) { int i; for (i = 0; i < conf_vector_length; i++) { if (new_conf->module_levels[i] == APLOG_UNSET) new_conf->module_levels[i] = old_conf->module_levels[i]; } } } AP_DECLARE(void) ap_fixup_virtual_hosts(apr_pool_t *p, server_rec *main_server) { server_rec *virt; core_dir_config *dconf = ap_get_core_module_config(main_server->lookup_defaults); dconf->log = &main_server->log; for (virt = main_server->next; virt; virt = virt->next) { merge_server_configs(p, main_server->module_config, virt); virt->lookup_defaults = ap_merge_per_dir_configs(p, main_server->lookup_defaults, virt->lookup_defaults); if (virt->server_admin == NULL) virt->server_admin = main_server->server_admin; if (virt->timeout == 0) virt->timeout = main_server->timeout; if (virt->keep_alive_timeout == 0) virt->keep_alive_timeout = main_server->keep_alive_timeout; if (virt->keep_alive == -1) virt->keep_alive = main_server->keep_alive; if (virt->keep_alive_max == -1) virt->keep_alive_max = main_server->keep_alive_max; ap_merge_log_config(&main_server->log, &virt->log); dconf = ap_get_core_module_config(virt->lookup_defaults); dconf->log = &virt->log; /* XXX: this is really something that should be dealt with by a * post-config api phase */ ap_core_reorder_directories(p, virt); } ap_core_reorder_directories(p, main_server); } /***************************************************************** * * Getting *everything* configured... */ static void init_config_globals(apr_pool_t *p) { /* Global virtual host hash bucket pointers. Init to null. */ ap_init_vhost_config(p); } static server_rec *init_server_config(process_rec *process, apr_pool_t *p) { apr_status_t rv; server_rec *s = (server_rec *) apr_pcalloc(p, sizeof(server_rec)); apr_file_open_stderr(&s->error_log, p); s->process = process; s->port = 0; s->server_admin = DEFAULT_ADMIN; s->server_hostname = NULL; s->server_scheme = NULL; s->error_fname = DEFAULT_ERRORLOG; s->log.level = DEFAULT_LOGLEVEL; s->log.module_levels = NULL; s->limit_req_line = DEFAULT_LIMIT_REQUEST_LINE; s->limit_req_fieldsize = DEFAULT_LIMIT_REQUEST_FIELDSIZE; s->limit_req_fields = DEFAULT_LIMIT_REQUEST_FIELDS; s->timeout = apr_time_from_sec(DEFAULT_TIMEOUT); s->keep_alive_timeout = apr_time_from_sec(DEFAULT_KEEPALIVE_TIMEOUT); s->keep_alive_max = DEFAULT_KEEPALIVE; s->keep_alive = 1; s->next = NULL; s->addrs = apr_pcalloc(p, sizeof(server_addr_rec)); /* NOT virtual host; don't match any real network interface */ rv = apr_sockaddr_info_get(&s->addrs->host_addr, NULL, APR_UNSPEC, 0, 0, p); if (rv != APR_SUCCESS) { /* should we test here for rv being an EAIERR? */ ap_log_error(APLOG_MARK, APLOG_STARTUP|APLOG_CRIT, rv, NULL, APLOGNO(00530) "initialisation: bug or getaddrinfo fail"); return NULL; } s->addrs->host_port = 0; /* matches any port */ s->addrs->virthost = ""; /* must be non-NULL */ s->names = s->wild_names = NULL; s->module_config = create_server_config(p, s); s->lookup_defaults = create_default_per_dir_config(p); return s; } static apr_status_t reset_conf_vector_length(void *dummy) { reserved_module_slots = 0; conf_vector_length = max_modules; return APR_SUCCESS; } static int conf_vector_length_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { /* * We have loaded all modules that are loaded by EXEC_ON_READ directives. * From now on we reduce the size of the config vectors to what we need, * plus what has been reserved (e.g. by mod_perl) for additional modules * loaded later on. * If max_modules is too small, ap_add_module() will abort. */ if (total_modules + reserved_module_slots < max_modules) { conf_vector_length = total_modules + reserved_module_slots; } apr_pool_cleanup_register(pconf, NULL, reset_conf_vector_length, apr_pool_cleanup_null); return OK; } AP_CORE_DECLARE(void) ap_register_config_hooks(apr_pool_t *p) { ap_hook_pre_config(conf_vector_length_pre_config, NULL, NULL, APR_HOOK_REALLY_LAST); } AP_DECLARE(server_rec*) ap_read_config(process_rec *process, apr_pool_t *ptemp, const char *filename, ap_directive_t **conftree) { const char *confname, *error; apr_pool_t *p = process->pconf; server_rec *s = init_server_config(process, p); if (s == NULL) { return s; } init_config_globals(p); if (ap_exists_config_define("DUMP_INCLUDES")) { apr_file_t *out = NULL; apr_file_open_stdout(&out, p); /* Included files will be dumped as the config is walked; print a * header. */ apr_file_printf(out, "Included configuration files:\n"); } /* All server-wide config files now have the SAME syntax... */ error = process_command_config(s, ap_server_pre_read_config, conftree, p, ptemp); if (error) { ap_log_error(APLOG_MARK, APLOG_STARTUP|APLOG_CRIT, 0, NULL, "%s: %s", ap_server_argv0, error); return NULL; } /* process_command_config may change the ServerRoot so * compute this config file name afterwards. */ confname = ap_server_root_relative(p, filename); if (!confname) { ap_log_error(APLOG_MARK, APLOG_STARTUP|APLOG_CRIT, APR_EBADPATH, NULL, APLOGNO(00532) "Invalid config file path %s", filename); return NULL; } error = ap_process_resource_config(s, confname, conftree, p, ptemp); if (error) { ap_log_error(APLOG_MARK, APLOG_STARTUP|APLOG_CRIT, 0, NULL, "%s: %s", ap_server_argv0, error); return NULL; } error = ap_check_mpm(); if (error) { ap_log_error(APLOG_MARK, APLOG_STARTUP|APLOG_CRIT, 0, NULL, APLOGNO(00534) "%s: Configuration error: %s", ap_server_argv0, error); return NULL; } error = process_command_config(s, ap_server_post_read_config, conftree, p, ptemp); if (error) { ap_log_error(APLOG_MARK, APLOG_STARTUP|APLOG_CRIT, 0, NULL, "%s: %s", ap_server_argv0, error); return NULL; } return s; } AP_DECLARE(void) ap_single_module_configure(apr_pool_t *p, server_rec *s, module *m) { if (m->create_server_config) ap_set_module_config(s->module_config, m, (*m->create_server_config)(p, s)); if (m->create_dir_config) ap_set_module_config(s->lookup_defaults, m, (*m->create_dir_config)(p, NULL)); } AP_DECLARE(void) ap_run_rewrite_args(process_rec *process) { module *m; for (m = ap_top_module; m; m = m->next) { if (m->rewrite_args) { (*m->rewrite_args)(process); } } } /******************************************************************** * Configuration directives are restricted in terms of where they may * appear in the main configuration files and/or .htaccess files according * to the bitmask req_override in the command_rec structure. * If any of the overrides set in req_override are also allowed in the * context in which the command is read, then the command is allowed. * The context is determined as follows: * * inside *.conf --> override = (RSRC_CONF|OR_ALL)&~(OR_AUTHCFG|OR_LIMIT); * within or --> override = OR_ALL|ACCESS_CONF; * within .htaccess --> override = AllowOverride for current directory; * * the result is, well, a rather confusing set of possibilities for when * a particular directive is allowed to be used. This procedure prints * in English where the given (pc) directive can be used. */ static void show_overrides(const command_rec *pc, module *pm) { int n = 0; printf("\tAllowed in *.conf "); if ((pc->req_override & (OR_OPTIONS | OR_FILEINFO | OR_INDEXES)) || ((pc->req_override & RSRC_CONF) && ((pc->req_override & (ACCESS_CONF | OR_AUTHCFG | OR_LIMIT))))) { printf("anywhere"); } else if (pc->req_override & RSRC_CONF) { printf("only outside , , , or "); } else { printf("only inside , , , or "); } /* Warn if the directive is allowed inside or .htaccess * but module doesn't support per-dir configuration */ if ((pc->req_override & (OR_ALL | ACCESS_CONF)) && !pm->create_dir_config) printf(" [no per-dir config]"); if (pc->req_override & OR_ALL) { printf(" and in .htaccess\n\twhen AllowOverride"); if ((pc->req_override & OR_ALL) == OR_ALL) { printf(" isn't None"); } else { printf(" includes "); if (pc->req_override & OR_AUTHCFG) { if (n++) printf(" or "); printf("AuthConfig"); } if (pc->req_override & OR_LIMIT) { if (n++) printf(" or "); printf("Limit"); } if (pc->req_override & OR_OPTIONS) { if (n++) printf(" or "); printf("Options"); } if (pc->req_override & OR_FILEINFO) { if (n++) printf(" or "); printf("FileInfo"); } if (pc->req_override & OR_INDEXES) { if (n++) printf(" or "); printf("Indexes"); } } } printf("\n"); } /* Show the preloaded configuration directives, the help string explaining * the directive arguments, in what module they are handled, and in * what parts of the configuration they are allowed. Used for httpd -L. */ AP_DECLARE(void) ap_show_directives(void) { const command_rec *pc; int n; for (n = 0; ap_loaded_modules[n]; ++n) { for (pc = ap_loaded_modules[n]->cmds; pc && pc->name; ++pc) { printf("%s (%s)\n", pc->name, ap_loaded_modules[n]->name); if (pc->errmsg) printf("\t%s\n", pc->errmsg); show_overrides(pc, ap_loaded_modules[n]); } } } /* Show the preloaded module names. Used for httpd -l. */ AP_DECLARE(void) ap_show_modules(void) { int n; printf("Compiled in modules:\n"); for (n = 0; ap_loaded_modules[n]; ++n) printf(" %s\n", ap_loaded_modules[n]->name); } AP_DECLARE(int) ap_exists_directive(apr_pool_t *p, const char *name) { char *lname = apr_pstrdup(p, name); ap_str_tolower(lname); return ap_config_hash && apr_hash_get(ap_config_hash, lname, APR_HASH_KEY_STRING) != NULL; } AP_DECLARE(void *) ap_retained_data_get(const char *key) { void *retained; apr_pool_userdata_get((void *)&retained, key, ap_pglobal); return retained; } AP_DECLARE(void *) ap_retained_data_create(const char *key, apr_size_t size) { void *retained; retained = apr_pcalloc(ap_pglobal, size); apr_pool_userdata_set((const void *)retained, key, apr_pool_cleanup_null, ap_pglobal); return retained; } static int count_directives_sub(const char *directive, ap_directive_t *current) { int count = 0; while (current != NULL) { if (current->first_child != NULL) count += count_directives_sub(directive, current->first_child); if (strcasecmp(current->directive, directive) == 0) count++; current = current->next; } return count; } AP_DECLARE(void) ap_reserve_module_slots(int count) { reserved_module_slots += count; } AP_DECLARE(void) ap_reserve_module_slots_directive(const char *directive) { ap_reserve_module_slots(count_directives_sub(directive, ap_conftree)); } httpd-2.4.41/server/util_time.c0000644000000000000500000002512111440735323014704 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "util_time.h" /* Number of characters needed to format the microsecond part of a timestamp. * Microseconds have 6 digits plus one separator character makes 7. * */ #define AP_CTIME_USEC_LENGTH 7 /* Length of ISO 8601 date/time */ #define AP_CTIME_COMPACT_LEN 20 /* Cache for exploded values of recent timestamps */ struct exploded_time_cache_element { apr_int64_t t; apr_time_exp_t xt; apr_int64_t t_validate; /* please see comments in cached_explode() */ }; /* the "+ 1" is for the current second: */ #define TIME_CACHE_SIZE (AP_TIME_RECENT_THRESHOLD + 1) /* Note that AP_TIME_RECENT_THRESHOLD is defined to * be a power of two minus one in util_time.h, so that * we can replace a modulo operation with a bitwise AND * when hashing items into a cache of size * AP_TIME_RECENT_THRESHOLD+1 */ #define TIME_CACHE_MASK (AP_TIME_RECENT_THRESHOLD) static struct exploded_time_cache_element exploded_cache_localtime[TIME_CACHE_SIZE]; static struct exploded_time_cache_element exploded_cache_gmt[TIME_CACHE_SIZE]; static apr_status_t cached_explode(apr_time_exp_t *xt, apr_time_t t, struct exploded_time_cache_element *cache, int use_gmt) { apr_int64_t seconds = apr_time_sec(t); struct exploded_time_cache_element *cache_element = &(cache[seconds & TIME_CACHE_MASK]); struct exploded_time_cache_element cache_element_snapshot; /* The cache is implemented as a ring buffer. Each second, * it uses a different element in the buffer. The timestamp * in the element indicates whether the element contains the * exploded time for the current second (vs the time * 'now - AP_TIME_RECENT_THRESHOLD' seconds ago). If the * cached value is for the current time, we use it. Otherwise, * we compute the apr_time_exp_t and store it in this * cache element. Note that the timestamp in the cache * element is updated only after the exploded time. Thus * if two threads hit this cache element simultaneously * at the start of a new second, they'll both explode the * time and store it. I.e., the writers will collide, but * they'll be writing the same value. */ if (cache_element->t >= seconds) { /* There is an intentional race condition in this design: * in a multithreaded app, one thread might be reading * from this cache_element to resolve a timestamp from * TIME_CACHE_SIZE seconds ago at the same time that * another thread is copying the exploded form of the * current time into the same cache_element. (I.e., the * first thread might hit this element of the ring buffer * just as the element is being recycled.) This can * also happen at the start of a new second, if a * reader accesses the cache_element after a writer * has updated cache_element.t but before the writer * has finished updating the whole cache_element. * * Rather than trying to prevent this race condition * with locks, we allow it to happen and then detect * and correct it. The detection works like this: * Step 1: Take a "snapshot" of the cache element by * copying it into a temporary buffer. * Step 2: Check whether the snapshot contains consistent * data: the timestamps at the start and end of * the cache_element should both match the 'seconds' * value that we computed from the input time. * If these three don't match, then the snapshot * shows the cache_element in the middle of an * update, and its contents are invalid. * Step 3: If the snapshot is valid, use it. Otherwise, * just give up on the cache and explode the * input time. */ memcpy(&cache_element_snapshot, cache_element, sizeof(struct exploded_time_cache_element)); if ((seconds != cache_element_snapshot.t) || (seconds != cache_element_snapshot.t_validate)) { /* Invalid snapshot */ if (use_gmt) { return apr_time_exp_gmt(xt, t); } else { return apr_time_exp_lt(xt, t); } } else { /* Valid snapshot */ memcpy(xt, &(cache_element_snapshot.xt), sizeof(apr_time_exp_t)); } } else { apr_status_t r; if (use_gmt) { r = apr_time_exp_gmt(xt, t); } else { r = apr_time_exp_lt(xt, t); } if (r != APR_SUCCESS) { return r; } cache_element->t = seconds; memcpy(&(cache_element->xt), xt, sizeof(apr_time_exp_t)); cache_element->t_validate = seconds; } xt->tm_usec = (int)apr_time_usec(t); return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_explode_recent_localtime(apr_time_exp_t * tm, apr_time_t t) { return cached_explode(tm, t, exploded_cache_localtime, 0); } AP_DECLARE(apr_status_t) ap_explode_recent_gmt(apr_time_exp_t * tm, apr_time_t t) { return cached_explode(tm, t, exploded_cache_gmt, 1); } AP_DECLARE(apr_status_t) ap_recent_ctime(char *date_str, apr_time_t t) { int len = APR_CTIME_LEN; return ap_recent_ctime_ex(date_str, t, AP_CTIME_OPTION_NONE, &len); } AP_DECLARE(apr_status_t) ap_recent_ctime_ex(char *date_str, apr_time_t t, int option, int *len) { /* ### This code is a clone of apr_ctime(), except that it * uses ap_explode_recent_localtime() instead of apr_time_exp_lt(). */ apr_time_exp_t xt; const char *s; int real_year; int needed; /* Calculate the needed buffer length */ if (option & AP_CTIME_OPTION_COMPACT) needed = AP_CTIME_COMPACT_LEN; else needed = APR_CTIME_LEN; if (option & AP_CTIME_OPTION_USEC) { needed += AP_CTIME_USEC_LENGTH; } /* Check the provided buffer length */ if (len && *len >= needed) { *len = needed; } else { if (len != NULL) { *len = 0; } return APR_ENOMEM; } /* example without options: "Wed Jun 30 21:49:08 1993" */ /* 123456789012345678901234 */ /* example for compact format: "1993-06-30 21:49:08" */ /* 1234567890123456789 */ ap_explode_recent_localtime(&xt, t); real_year = 1900 + xt.tm_year; if (option & AP_CTIME_OPTION_COMPACT) { int real_month = xt.tm_mon + 1; *date_str++ = real_year / 1000 + '0'; *date_str++ = real_year % 1000 / 100 + '0'; *date_str++ = real_year % 100 / 10 + '0'; *date_str++ = real_year % 10 + '0'; *date_str++ = '-'; *date_str++ = real_month / 10 + '0'; *date_str++ = real_month % 10 + '0'; *date_str++ = '-'; } else { s = &apr_day_snames[xt.tm_wday][0]; *date_str++ = *s++; *date_str++ = *s++; *date_str++ = *s++; *date_str++ = ' '; s = &apr_month_snames[xt.tm_mon][0]; *date_str++ = *s++; *date_str++ = *s++; *date_str++ = *s++; *date_str++ = ' '; } *date_str++ = xt.tm_mday / 10 + '0'; *date_str++ = xt.tm_mday % 10 + '0'; *date_str++ = ' '; *date_str++ = xt.tm_hour / 10 + '0'; *date_str++ = xt.tm_hour % 10 + '0'; *date_str++ = ':'; *date_str++ = xt.tm_min / 10 + '0'; *date_str++ = xt.tm_min % 10 + '0'; *date_str++ = ':'; *date_str++ = xt.tm_sec / 10 + '0'; *date_str++ = xt.tm_sec % 10 + '0'; if (option & AP_CTIME_OPTION_USEC) { int div; int usec = (int)xt.tm_usec; *date_str++ = '.'; for (div=100000; div>0; div=div/10) { *date_str++ = usec / div + '0'; usec = usec % div; } } if (!(option & AP_CTIME_OPTION_COMPACT)) { *date_str++ = ' '; *date_str++ = real_year / 1000 + '0'; *date_str++ = real_year % 1000 / 100 + '0'; *date_str++ = real_year % 100 / 10 + '0'; *date_str++ = real_year % 10 + '0'; } *date_str++ = 0; return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_recent_rfc822_date(char *date_str, apr_time_t t) { /* ### This code is a clone of apr_rfc822_date(), except that it * uses ap_explode_recent_gmt() instead of apr_time_exp_gmt(). */ apr_time_exp_t xt; const char *s; int real_year; ap_explode_recent_gmt(&xt, t); /* example: "Sat, 08 Jan 2000 18:31:41 GMT" */ /* 12345678901234567890123456789 */ s = &apr_day_snames[xt.tm_wday][0]; *date_str++ = *s++; *date_str++ = *s++; *date_str++ = *s++; *date_str++ = ','; *date_str++ = ' '; *date_str++ = xt.tm_mday / 10 + '0'; *date_str++ = xt.tm_mday % 10 + '0'; *date_str++ = ' '; s = &apr_month_snames[xt.tm_mon][0]; *date_str++ = *s++; *date_str++ = *s++; *date_str++ = *s++; *date_str++ = ' '; real_year = 1900 + xt.tm_year; /* This routine isn't y10k ready. */ *date_str++ = real_year / 1000 + '0'; *date_str++ = real_year % 1000 / 100 + '0'; *date_str++ = real_year % 100 / 10 + '0'; *date_str++ = real_year % 10 + '0'; *date_str++ = ' '; *date_str++ = xt.tm_hour / 10 + '0'; *date_str++ = xt.tm_hour % 10 + '0'; *date_str++ = ':'; *date_str++ = xt.tm_min / 10 + '0'; *date_str++ = xt.tm_min % 10 + '0'; *date_str++ = ':'; *date_str++ = xt.tm_sec / 10 + '0'; *date_str++ = xt.tm_sec % 10 + '0'; *date_str++ = ' '; *date_str++ = 'G'; *date_str++ = 'M'; *date_str++ = 'T'; *date_str++ = 0; return APR_SUCCESS; } httpd-2.4.41/server/util_expr_parse.h0000644000000000000500000000555013523273357016137 0ustar rootsrc/* A Bison parser, made by GNU Bison 2.5. */ /* Bison interface for Yacc-like parsers in C Copyright (C) 1984, 1989-1990, 2000-2011 Free Software Foundation, Inc. This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . */ /* As a special exception, you may create a larger work that contains part or all of the Bison parser skeleton and distribute that work under terms of your choice, so long as that work isn't itself a parser generator using the skeleton or a modified version thereof as a parser skeleton. Alternatively, if you modify or redistribute the parser skeleton itself, you may (at your option) remove this special exception, which will cause the skeleton and the resulting Bison output files to be licensed under the GNU General Public License without this special exception. This special exception was added by the Free Software Foundation in version 2.2 of Bison. */ /* Tokens. */ #ifndef YYTOKENTYPE # define YYTOKENTYPE /* Put the tokens into the symbol table, so that GDB and other debuggers know about them. */ enum yytokentype { T_TRUE = 258, T_FALSE = 259, T_EXPR_BOOL = 260, T_EXPR_STRING = 261, T_ERROR = 262, T_DIGIT = 263, T_ID = 264, T_STRING = 265, T_REGEX = 266, T_REGEX_I = 267, T_REGEX_BACKREF = 268, T_OP_UNARY = 269, T_OP_BINARY = 270, T_STR_BEGIN = 271, T_STR_END = 272, T_VAR_BEGIN = 273, T_VAR_END = 274, T_OP_EQ = 275, T_OP_NE = 276, T_OP_LT = 277, T_OP_LE = 278, T_OP_GT = 279, T_OP_GE = 280, T_OP_REG = 281, T_OP_NRE = 282, T_OP_IN = 283, T_OP_STR_EQ = 284, T_OP_STR_NE = 285, T_OP_STR_LT = 286, T_OP_STR_LE = 287, T_OP_STR_GT = 288, T_OP_STR_GE = 289, T_OP_CONCAT = 290, T_OP_OR = 291, T_OP_AND = 292, T_OP_NOT = 293 }; #endif #if ! defined YYSTYPE && ! defined YYSTYPE_IS_DECLARED typedef union YYSTYPE { /* Line 2068 of yacc.c */ #line 35 "util_expr_parse.y" char *cpVal; ap_expr_t *exVal; int num; /* Line 2068 of yacc.c */ #line 96 "util_expr_parse.h" } YYSTYPE; # define YYSTYPE_IS_TRIVIAL 1 # define yystype YYSTYPE /* obsolescent; will be withdrawn */ # define YYSTYPE_IS_DECLARED 1 #endif httpd-2.4.41/server/mpm_fdqueue.h0000644000000000000500000001025413243014561015223 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file server/mpm_fdqueue.h * @brief fd queue declarations * * @addtogroup APACHE_MPM_EVENT * @{ */ #ifndef MPM_FDQUEUE_H #define MPM_FDQUEUE_H #include /* This code is not AP_DECLARE()ed/exported, and used by MPMs event/worker * only (for now), not worth thinking about w/o threads either... */ #if APR_HAS_THREADS #include "ap_mpm.h" #include #include #include #include #include struct fd_queue_info_t; /* opaque */ struct fd_queue_elem_t; /* opaque */ typedef struct fd_queue_info_t fd_queue_info_t; typedef struct fd_queue_elem_t fd_queue_elem_t; AP_DECLARE(apr_status_t) ap_queue_info_create(fd_queue_info_t **queue_info, apr_pool_t *pool, int max_idlers, int max_recycled_pools); AP_DECLARE(apr_status_t) ap_queue_info_set_idle(fd_queue_info_t *queue_info, apr_pool_t *pool_to_recycle); AP_DECLARE(apr_status_t) ap_queue_info_try_get_idler(fd_queue_info_t *queue_info); AP_DECLARE(apr_status_t) ap_queue_info_wait_for_idler(fd_queue_info_t *queue_info, int *had_to_block); AP_DECLARE(apr_uint32_t) ap_queue_info_num_idlers(fd_queue_info_t *queue_info); AP_DECLARE(apr_status_t) ap_queue_info_term(fd_queue_info_t *queue_info); AP_DECLARE(void) ap_queue_info_pop_pool(fd_queue_info_t *queue_info, apr_pool_t **recycled_pool); AP_DECLARE(void) ap_queue_info_push_pool(fd_queue_info_t *queue_info, apr_pool_t *pool_to_recycle); AP_DECLARE(void) ap_queue_info_free_idle_pools(fd_queue_info_t *queue_info); struct timer_event_t { APR_RING_ENTRY(timer_event_t) link; apr_time_t when; ap_mpm_callback_fn_t *cbfunc; void *baton; int canceled; apr_array_header_t *remove; }; typedef struct timer_event_t timer_event_t; struct fd_queue_t { APR_RING_HEAD(timers_t, timer_event_t) timers; fd_queue_elem_t *data; unsigned int nelts; unsigned int bounds; unsigned int in; unsigned int out; apr_thread_mutex_t *one_big_mutex; apr_thread_cond_t *not_empty; int terminated; }; typedef struct fd_queue_t fd_queue_t; AP_DECLARE(apr_status_t) ap_queue_create(fd_queue_t **pqueue, int capacity, apr_pool_t *p); AP_DECLARE(apr_status_t) ap_queue_push_socket(fd_queue_t *queue, apr_socket_t *sd, void *sd_baton, apr_pool_t *p); AP_DECLARE(apr_status_t) ap_queue_push_timer(fd_queue_t *queue, timer_event_t *te); AP_DECLARE(apr_status_t) ap_queue_pop_something(fd_queue_t *queue, apr_socket_t **sd, void **sd_baton, apr_pool_t **p, timer_event_t **te); #define ap_queue_pop_socket(q_, s_, p_) \ ap_queue_pop_something((q_), (s_), NULL, (p_), NULL) AP_DECLARE(apr_status_t) ap_queue_interrupt_all(fd_queue_t *queue); AP_DECLARE(apr_status_t) ap_queue_interrupt_one(fd_queue_t *queue); AP_DECLARE(apr_status_t) ap_queue_term(fd_queue_t *queue); #endif /* APR_HAS_THREADS */ #endif /* MPM_FDQUEUE_H */ /** @} */ httpd-2.4.41/server/NWGNUmakefile0000644000000000000500000001076511540546347015103 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ ../build \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(NWOS) \ $(APR)/include \ $(AP_WORK)/include \ $(APRUTIL)/include \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = genchars # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Generate Test Characters # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = genchars # # If this is specified, it will override VERSION value in # $(AP_WORK)\NWGNUNetWare.rul # NLM_VERSION = 1,0,0 # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If this is specified it will be used by the link '-flags' directive # NLM_FLAGS = PSEUDOPREEMPTION # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # Declare all target files (you must add your files here) # # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/genchars.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/gen_test_char.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ Libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. # install :: nlms FORCE # # Any specialized rules here # # Make sure that the build doesn't attempt to regenerate the shipping files. # This requires a 'touch' utility. Can be downloaded from 'coreutils' at # http://sourceforge.net/projects/gnuwin32/ util_expr_parse.h : util_expr_parse.y touch util_expr_parse.h util_expr_parse.c : util_expr_parse.y touch util_expr_parse.c util_expr_scan.c : util_expr_scan.l touch util_expr_scan.c # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/server/mpm/0002755000000000000500000000000013523273341013340 5ustar rootsrchttpd-2.4.41/server/mpm/netware/0002755000000000000500000000000013523273341015005 5ustar rootsrchttpd-2.4.41/server/mpm/netware/mpm_netware.c0000644000000000000500000012673313351171147017501 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * httpd.c: simple http daemon for answering WWW file requests * * * 03-21-93 Rob McCool wrote original code (up to NCSA HTTPd 1.3) * * 03-06-95 blong * changed server number for child-alone processes to 0 and changed name * of processes * * 03-10-95 blong * Added numerous speed hacks proposed by Robert S. Thau (rst@ai.mit.edu) * including set group before fork, and call gettime before to fork * to set up libraries. * * 04-14-95 rst / rh * Brandon's code snarfed from NCSA 1.4, but tinkered to work with the * Apache server, and also to have child processes do accept() directly. * * April-July '95 rst * Extensive rework for Apache. */ #include "apr.h" #include "apr_portable.h" #include "apr_strings.h" #include "apr_thread_proc.h" #include "apr_signal.h" #include "apr_tables.h" #include "apr_getopt.h" #include "apr_thread_mutex.h" #define APR_WANT_STDIO #define APR_WANT_STRFUNC #include "apr_want.h" #if APR_HAVE_UNISTD_H #include #endif #if APR_HAVE_SYS_TYPES_H #include #endif #ifndef USE_WINSOCK #include #endif #include "ap_config.h" #include "httpd.h" #include "mpm_default.h" #include "http_main.h" #include "http_log.h" #include "http_config.h" #include "http_core.h" /* for get_remote_host */ #include "http_connection.h" #include "scoreboard.h" #include "ap_mpm.h" #include "mpm_common.h" #include "ap_listen.h" #include "ap_mmn.h" #ifdef HAVE_TIME_H #include #endif #include #include #include #include #include int nlmUnloadSignaled(int wait); /* Limit on the total --- clients will be locked out if more servers than * this are needed. It is intended solely to keep the server from crashing * when things get out of hand. * * We keep a hard maximum number of servers, for two reasons --- first off, * in case something goes seriously wrong, we want to stop the fork bomb * short of actually crashing the machine we're running on by filling some * kernel table. Secondly, it keeps the size of the scoreboard file small * enough that we can read the whole thing without worrying too much about * the overhead. */ #ifndef HARD_SERVER_LIMIT #define HARD_SERVER_LIMIT 1 #endif #define WORKER_DEAD SERVER_DEAD #define WORKER_STARTING SERVER_STARTING #define WORKER_READY SERVER_READY #define WORKER_IDLE_KILL SERVER_IDLE_KILL #define MPM_HARD_LIMITS_FILE "/mpm_default.h" /* *Non*-shared http_main globals... */ static int ap_threads_per_child=0; /* Worker threads per child */ static int ap_threads_to_start=0; static int ap_threads_min_free=0; static int ap_threads_max_free=0; static int ap_threads_limit=0; static int mpm_state = AP_MPMQ_STARTING; /* * The max child slot ever assigned, preserved across restarts. Necessary * to deal with MaxRequestWorkers changes across SIGWINCH restarts. We use this * value to optimize routines that have to scan the entire scoreboard. */ static int ap_max_workers_limit = -1; int hold_screen_on_exit = 0; /* Indicates whether the screen should be held open */ static fd_set listenfds; static int listenmaxfd; static apr_pool_t *pconf; /* Pool for config stuff */ static apr_pool_t *pmain; /* Pool for httpd child stuff */ static pid_t ap_my_pid; /* it seems silly to call getpid all the time */ static char *ap_my_addrspace = NULL; static int die_now = 0; /* Keep track of the number of worker threads currently active */ static unsigned long worker_thread_count; static int request_count; /* Structure used to register/deregister a console handler with the OS */ static int InstallConsoleHandler(void); static void RemoveConsoleHandler(void); static int CommandLineInterpreter(scr_t screenID, const char *commandLine); static CommandParser_t ConsoleHandler = {0, NULL, 0}; #define HANDLEDCOMMAND 0 #define NOTMYCOMMAND 1 static int show_settings = 0; //#define DBINFO_ON //#define DBPRINT_ON #ifdef DBPRINT_ON #define DBPRINT0(s) printf(s) #define DBPRINT1(s,v1) printf(s,v1) #define DBPRINT2(s,v1,v2) printf(s,v1,v2) #else #define DBPRINT0(s) #define DBPRINT1(s,v1) #define DBPRINT2(s,v1,v2) #endif /* volatile just in case */ static int volatile shutdown_pending; static int volatile restart_pending; static int volatile is_graceful; static int volatile wait_to_finish=1; static ap_generation_t volatile ap_my_generation=0; /* a clean exit from a child with proper cleanup */ static void clean_child_exit(int code, int worker_num, apr_pool_t *ptrans, apr_bucket_alloc_t *bucket_alloc) __attribute__ ((noreturn)); static void clean_child_exit(int code, int worker_num, apr_pool_t *ptrans, apr_bucket_alloc_t *bucket_alloc) { apr_bucket_alloc_destroy(bucket_alloc); if (!shutdown_pending) { apr_pool_destroy(ptrans); } atomic_dec (&worker_thread_count); if (worker_num >=0) ap_update_child_status_from_indexes(0, worker_num, WORKER_DEAD, (request_rec *) NULL); NXThreadExit((void*)&code); } /* proper cleanup when returning from ap_mpm_run() */ static void mpm_main_cleanup(void) { if (pmain) { apr_pool_destroy(pmain); } } static int netware_query(int query_code, int *result, apr_status_t *rv) { *rv = APR_SUCCESS; switch(query_code){ case AP_MPMQ_MAX_DAEMON_USED: *result = 1; break; case AP_MPMQ_IS_THREADED: *result = AP_MPMQ_DYNAMIC; break; case AP_MPMQ_IS_FORKED: *result = AP_MPMQ_NOT_SUPPORTED; break; case AP_MPMQ_HARD_LIMIT_DAEMONS: *result = HARD_SERVER_LIMIT; break; case AP_MPMQ_HARD_LIMIT_THREADS: *result = HARD_THREAD_LIMIT; break; case AP_MPMQ_MAX_THREADS: *result = ap_threads_limit; break; case AP_MPMQ_MIN_SPARE_DAEMONS: *result = 0; break; case AP_MPMQ_MIN_SPARE_THREADS: *result = ap_threads_min_free; break; case AP_MPMQ_MAX_SPARE_DAEMONS: *result = 0; break; case AP_MPMQ_MAX_SPARE_THREADS: *result = ap_threads_max_free; break; case AP_MPMQ_MAX_REQUESTS_DAEMON: *result = ap_max_requests_per_child; break; case AP_MPMQ_MAX_DAEMONS: *result = 1; break; case AP_MPMQ_MPM_STATE: *result = mpm_state; break; case AP_MPMQ_GENERATION: *result = ap_my_generation; break; default: *rv = APR_ENOTIMPL; break; } return OK; } static const char *netware_get_name(void) { return "NetWare"; } /***************************************************************** * Connection structures and accounting... */ static void mpm_term(void) { RemoveConsoleHandler(); wait_to_finish = 0; NXThreadYield(); } static void sig_term(int sig) { if (shutdown_pending == 1) { /* Um, is this _probably_ not an error, if the user has * tried to do a shutdown twice quickly, so we won't * worry about reporting it. */ return; } shutdown_pending = 1; DBPRINT0 ("waiting for threads\n"); while (wait_to_finish) { apr_thread_yield(); } DBPRINT0 ("goodbye\n"); } /* restart() is the signal handler for SIGHUP and SIGWINCH * in the parent process, unless running in ONE_PROCESS mode */ static void restart(void) { if (restart_pending == 1) { /* Probably not an error - don't bother reporting it */ return; } restart_pending = 1; is_graceful = 1; } static void set_signals(void) { apr_signal(SIGTERM, sig_term); apr_signal(SIGABRT, sig_term); } int nlmUnloadSignaled(int wait) { shutdown_pending = 1; if (wait) { while (wait_to_finish) { NXThreadYield(); } } return 0; } /***************************************************************** * Child process main loop. * The following vars are static to avoid getting clobbered by longjmp(); * they are really private to child_main. */ #define MAX_WB_RETRIES 3 #ifdef DBINFO_ON static int would_block = 0; static int retry_success = 0; static int retry_fail = 0; static int avg_retries = 0; #endif /*static */ void worker_main(void *arg) { ap_listen_rec *lr, *first_lr, *last_lr = NULL; apr_pool_t *ptrans; apr_allocator_t *allocator; apr_bucket_alloc_t *bucket_alloc; conn_rec *current_conn; apr_status_t stat = APR_EINIT; ap_sb_handle_t *sbh; apr_thread_t *thd = NULL; apr_os_thread_t osthd; int my_worker_num = (int)arg; apr_socket_t *csd = NULL; int requests_this_child = 0; apr_socket_t *sd = NULL; fd_set main_fds; int sockdes; int srv; struct timeval tv; int wouldblock_retry; osthd = apr_os_thread_current(); apr_os_thread_put(&thd, &osthd, pmain); tv.tv_sec = 1; tv.tv_usec = 0; apr_allocator_create(&allocator); apr_allocator_max_free_set(allocator, ap_max_mem_free); apr_pool_create_ex(&ptrans, pmain, NULL, allocator); apr_allocator_owner_set(allocator, ptrans); apr_pool_tag(ptrans, "transaction"); bucket_alloc = apr_bucket_alloc_create_ex(allocator); atomic_inc (&worker_thread_count); while (!die_now) { /* * (Re)initialize this child to a pre-connection state. */ current_conn = NULL; apr_pool_clear(ptrans); if ((ap_max_requests_per_child > 0 && requests_this_child++ >= ap_max_requests_per_child)) { DBPRINT1 ("\n**Thread slot %d is shutting down", my_worker_num); clean_child_exit(0, my_worker_num, ptrans, bucket_alloc); } ap_update_child_status_from_indexes(0, my_worker_num, WORKER_READY, (request_rec *) NULL); /* * Wait for an acceptable connection to arrive. */ for (;;) { if (shutdown_pending || restart_pending || (ap_scoreboard_image->servers[0][my_worker_num].status == WORKER_IDLE_KILL)) { DBPRINT1 ("\nThread slot %d is shutting down\n", my_worker_num); clean_child_exit(0, my_worker_num, ptrans, bucket_alloc); } /* Check the listen queue on all sockets for requests */ memcpy(&main_fds, &listenfds, sizeof(fd_set)); srv = select(listenmaxfd + 1, &main_fds, NULL, NULL, &tv); if (srv <= 0) { if (srv < 0) { ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00217) "select() failed on listen socket"); apr_thread_yield(); } continue; } /* remember the last_lr we searched last time around so that we don't end up starving any particular listening socket */ if (last_lr == NULL) { lr = ap_listeners; } else { lr = last_lr->next; if (!lr) lr = ap_listeners; } first_lr = lr; do { apr_os_sock_get(&sockdes, lr->sd); if (FD_ISSET(sockdes, &main_fds)) goto got_listener; lr = lr->next; if (!lr) lr = ap_listeners; } while (lr != first_lr); /* if we get here, something unexpected happened. Go back into the select state and try again. */ continue; got_listener: last_lr = lr; sd = lr->sd; wouldblock_retry = MAX_WB_RETRIES; while (wouldblock_retry) { if ((stat = apr_socket_accept(&csd, sd, ptrans)) == APR_SUCCESS) { break; } else { /* if the error is a wouldblock then maybe we were too quick try to pull the next request from the listen queue. Try a few more times then return to our idle listen state. */ if (!APR_STATUS_IS_EAGAIN(stat)) { break; } if (wouldblock_retry--) { apr_thread_yield(); } } } /* If we got a new socket, set it to non-blocking mode and process it. Otherwise handle the error. */ if (stat == APR_SUCCESS) { apr_socket_opt_set(csd, APR_SO_NONBLOCK, 0); #ifdef DBINFO_ON if (wouldblock_retry < MAX_WB_RETRIES) { retry_success++; avg_retries += (MAX_WB_RETRIES-wouldblock_retry); } #endif break; /* We have a socket ready for reading */ } else { #ifdef DBINFO_ON if (APR_STATUS_IS_EAGAIN(stat)) { would_block++; retry_fail++; } else if ( #else if (APR_STATUS_IS_EAGAIN(stat) || #endif APR_STATUS_IS_ECONNRESET(stat) || APR_STATUS_IS_ETIMEDOUT(stat) || APR_STATUS_IS_EHOSTUNREACH(stat) || APR_STATUS_IS_ENETUNREACH(stat)) { ; } #ifdef USE_WINSOCK else if (APR_STATUS_IS_ENETDOWN(stat)) { /* * When the network layer has been shut down, there * is not much use in simply exiting: the parent * would simply re-create us (and we'd fail again). * Use the CHILDFATAL code to tear the server down. * @@@ Martin's idea for possible improvement: * A different approach would be to define * a new APEXIT_NETDOWN exit code, the reception * of which would make the parent shutdown all * children, then idle-loop until it detected that * the network is up again, and restart the children. * Ben Hyde noted that temporary ENETDOWN situations * occur in mobile IP. */ ap_log_error(APLOG_MARK, APLOG_EMERG, stat, ap_server_conf, APLOGNO(00218) "apr_socket_accept: giving up."); clean_child_exit(APEXIT_CHILDFATAL, my_worker_num, ptrans, bucket_alloc); } #endif else { ap_log_error(APLOG_MARK, APLOG_ERR, stat, ap_server_conf, APLOGNO(00219) "apr_socket_accept: (client socket)"); clean_child_exit(1, my_worker_num, ptrans, bucket_alloc); } } } ap_create_sb_handle(&sbh, ptrans, 0, my_worker_num); /* * We now have a connection, so set it up with the appropriate * socket options, file descriptors, and read/write buffers. */ current_conn = ap_run_create_connection(ptrans, ap_server_conf, csd, my_worker_num, sbh, bucket_alloc); if (current_conn) { current_conn->current_thread = thd; ap_process_connection(current_conn, csd); ap_lingering_close(current_conn); } request_count++; } clean_child_exit(0, my_worker_num, ptrans, bucket_alloc); } static int make_child(server_rec *s, int slot) { int tid; int err=0; NXContext_t ctx; if (slot + 1 > ap_max_workers_limit) { ap_max_workers_limit = slot + 1; } ap_update_child_status_from_indexes(0, slot, WORKER_STARTING, (request_rec *) NULL); if (ctx = NXContextAlloc((void (*)(void *)) worker_main, (void*)slot, NX_PRIO_MED, ap_thread_stacksize, NX_CTX_NORMAL, &err)) { char threadName[32]; sprintf (threadName, "Apache_Worker %d", slot); NXContextSetName(ctx, threadName); err = NXThreadCreate(ctx, NX_THR_BIND_CONTEXT, &tid); if (err) { NXContextFree (ctx); } } if (err) { /* create thread didn't succeed. Fix the scoreboard or else * it will say SERVER_STARTING forever and ever */ ap_update_child_status_from_indexes(0, slot, WORKER_DEAD, (request_rec *) NULL); /* In case system resources are maxxed out, we don't want Apache running away with the CPU trying to fork over and over and over again. */ apr_thread_yield(); return -1; } ap_scoreboard_image->servers[0][slot].tid = tid; return 0; } /* start up a bunch of worker threads */ static void startup_workers(int number_to_start) { int i; for (i = 0; number_to_start && i < ap_threads_limit; ++i) { if (ap_scoreboard_image->servers[0][i].status != WORKER_DEAD) { continue; } if (make_child(ap_server_conf, i) < 0) { break; } --number_to_start; } } /* * idle_spawn_rate is the number of children that will be spawned on the * next maintenance cycle if there aren't enough idle servers. It is * doubled up to MAX_SPAWN_RATE, and reset only when a cycle goes by * without the need to spawn. */ static int idle_spawn_rate = 1; #ifndef MAX_SPAWN_RATE #define MAX_SPAWN_RATE (64) #endif static int hold_off_on_exponential_spawning; static void perform_idle_server_maintenance(apr_pool_t *p) { int i; int idle_count; worker_score *ws; int free_length; int free_slots[MAX_SPAWN_RATE]; int last_non_dead; int total_non_dead; /* initialize the free_list */ free_length = 0; idle_count = 0; last_non_dead = -1; total_non_dead = 0; for (i = 0; i < ap_threads_limit; ++i) { int status; if (i >= ap_max_workers_limit && free_length == idle_spawn_rate) break; ws = &ap_scoreboard_image->servers[0][i]; status = ws->status; if (status == WORKER_DEAD) { /* try to keep children numbers as low as possible */ if (free_length < idle_spawn_rate) { free_slots[free_length] = i; ++free_length; } } else if (status == WORKER_IDLE_KILL) { /* If it is already marked to die, skip it */ continue; } else { /* We consider a starting server as idle because we started it * at least a cycle ago, and if it still hasn't finished starting * then we're just going to swamp things worse by forking more. * So we hopefully won't need to fork more if we count it. * This depends on the ordering of SERVER_READY and SERVER_STARTING. */ if (status <= WORKER_READY) { ++ idle_count; } ++total_non_dead; last_non_dead = i; } } DBPRINT2("Total: %d Idle Count: %d \r", total_non_dead, idle_count); ap_max_workers_limit = last_non_dead + 1; if (idle_count > ap_threads_max_free) { /* kill off one child... we use the pod because that'll cause it to * shut down gracefully, in case it happened to pick up a request * while we were counting */ idle_spawn_rate = 1; ap_update_child_status_from_indexes(0, last_non_dead, WORKER_IDLE_KILL, (request_rec *) NULL); DBPRINT1("\nKilling idle thread: %d\n", last_non_dead); } else if (idle_count < ap_threads_min_free) { /* terminate the free list */ if (free_length == 0) { /* only report this condition once */ static int reported = 0; if (!reported) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(00220) "server reached MaxRequestWorkers setting, consider" " raising the MaxRequestWorkers setting"); reported = 1; } idle_spawn_rate = 1; } else { if (idle_spawn_rate >= 8) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, ap_server_conf, APLOGNO(00221) "server seems busy, (you may need " "to increase StartServers, or Min/MaxSpareServers), " "spawning %d children, there are %d idle, and " "%d total children", idle_spawn_rate, idle_count, total_non_dead); } DBPRINT0("\n"); for (i = 0; i < free_length; ++i) { DBPRINT1("Spawning additional thread slot: %d\n", free_slots[i]); make_child(ap_server_conf, free_slots[i]); } /* the next time around we want to spawn twice as many if this * wasn't good enough, but not if we've just done a graceful */ if (hold_off_on_exponential_spawning) { --hold_off_on_exponential_spawning; } else if (idle_spawn_rate < MAX_SPAWN_RATE) { idle_spawn_rate *= 2; } } } else { idle_spawn_rate = 1; } } static void display_settings() { int status_array[SERVER_NUM_STATUS]; int i, status, total=0; int reqs = request_count; #ifdef DBINFO_ON int wblock = would_block; would_block = 0; #endif request_count = 0; ClearScreen (getscreenhandle()); printf("%s \n", ap_get_server_description()); for (i=0;iservers[0][i]).status; status_array[status]++; } for (i=0;ibind_addr->port); lr = lr->next; } while (lr && lr != ap_listeners); /* Display dynamic modules loaded */ printf("\n"); for (m = ap_loaded_modules; *m != NULL; m++) { if (((module*)*m)->dynamic_load_handle) { printf(" Loaded dynamic module %s\n", ((module*)*m)->name); } } } static int setup_listeners(server_rec *s) { ap_listen_rec *lr; int sockdes; if (ap_setup_listeners(s) < 1 ) { ap_log_error(APLOG_MARK, APLOG_ALERT, 0, s, APLOGNO(00222) "no listening sockets available, shutting down"); return -1; } listenmaxfd = -1; FD_ZERO(&listenfds); for (lr = ap_listeners; lr; lr = lr->next) { apr_os_sock_get(&sockdes, lr->sd); FD_SET(sockdes, &listenfds); if (sockdes > listenmaxfd) { listenmaxfd = sockdes; } } return 0; } static int shutdown_listeners() { ap_listen_rec *lr; for (lr = ap_listeners; lr; lr = lr->next) { apr_socket_close(lr->sd); } ap_listeners = NULL; return 0; } /***************************************************************** * Executive routines. */ static int netware_run(apr_pool_t *_pconf, apr_pool_t *plog, server_rec *s) { apr_status_t status=0; pconf = _pconf; ap_server_conf = s; if (setup_listeners(s)) { ap_log_error(APLOG_MARK, APLOG_ALERT, status, s, APLOGNO(00223) "no listening sockets available, shutting down"); return !OK; } restart_pending = shutdown_pending = 0; worker_thread_count = 0; if (!is_graceful) { if (ap_run_pre_mpm(s->process->pool, SB_NOT_SHARED) != OK) { return !OK; } } /* Only set slot 0 since that is all NetWare will ever have. */ ap_scoreboard_image->parent[0].pid = getpid(); ap_scoreboard_image->parent[0].generation = ap_my_generation; ap_run_child_status(ap_server_conf, ap_scoreboard_image->parent[0].pid, ap_my_generation, 0, MPM_CHILD_STARTED); set_signals(); apr_pool_create(&pmain, pconf); ap_run_child_init(pmain, ap_server_conf); if (ap_threads_max_free < ap_threads_min_free + 1) /* Don't thrash... */ ap_threads_max_free = ap_threads_min_free + 1; request_count = 0; startup_workers(ap_threads_to_start); /* Allow the Apache screen to be closed normally on exit() only if it has not been explicitly forced to close on exit(). (ie. the -E flag was specified at startup) */ if (hold_screen_on_exit > 0) { hold_screen_on_exit = 0; } ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00224) "%s configured -- resuming normal operations", ap_get_server_description()); ap_log_error(APLOG_MARK, APLOG_INFO, 0, ap_server_conf, APLOGNO(00225) "Server built: %s", ap_get_server_built()); ap_log_command_line(plog, s); ap_log_mpm_common(s); show_server_data(); mpm_state = AP_MPMQ_RUNNING; while (!restart_pending && !shutdown_pending) { perform_idle_server_maintenance(pconf); if (show_settings) display_settings(); apr_thread_yield(); apr_sleep(SCOREBOARD_MAINTENANCE_INTERVAL); } mpm_state = AP_MPMQ_STOPPING; ap_run_child_status(ap_server_conf, ap_scoreboard_image->parent[0].pid, ap_my_generation, 0, MPM_CHILD_EXITED); /* Shutdown the listen sockets so that we don't get stuck in a blocking call. shutdown_listeners();*/ if (shutdown_pending) { /* Got an unload from the console */ ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00226) "caught SIGTERM, shutting down"); while (worker_thread_count > 0) { printf ("\rShutdown pending. Waiting for %lu thread(s) to terminate...", worker_thread_count); apr_thread_yield(); } mpm_main_cleanup(); return DONE; } else { /* the only other way out is a restart */ /* advance to the next generation */ /* XXX: we really need to make sure this new generation number isn't in * use by any of the children. */ ++ap_my_generation; ap_scoreboard_image->global->running_generation = ap_my_generation; ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00227) "Graceful restart requested, doing restart"); /* Wait for all of the threads to terminate before initiating the restart */ while (worker_thread_count > 0) { printf ("\rRestart pending. Waiting for %lu thread(s) to terminate...", worker_thread_count); apr_thread_yield(); } printf ("\nRestarting...\n"); } mpm_main_cleanup(); return OK; } static int netware_pre_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp) { char *addrname = NULL; mpm_state = AP_MPMQ_STARTING; is_graceful = 0; ap_my_pid = getpid(); addrname = getaddressspacename (NULL, NULL); if (addrname) { ap_my_addrspace = apr_pstrdup (p, addrname); free (addrname); } #ifndef USE_WINSOCK /* The following call has been moved to the mod_nw_ssl pre-config handler */ ap_listen_pre_config(); #endif ap_threads_to_start = DEFAULT_START_THREADS; ap_threads_min_free = DEFAULT_MIN_FREE_THREADS; ap_threads_max_free = DEFAULT_MAX_FREE_THREADS; ap_threads_limit = HARD_THREAD_LIMIT; ap_extended_status = 0; /* override core's default thread stacksize */ ap_thread_stacksize = DEFAULT_THREAD_STACKSIZE; return OK; } static int netware_check_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { static int restart_num = 0; int startup = 0; /* we want this only the first time around */ if (restart_num++ == 0) { startup = 1; } if (ap_threads_limit > HARD_THREAD_LIMIT) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00228) "WARNING: MaxThreads of %d exceeds compile-time " "limit of %d threads, decreasing to %d. " "To increase, please see the HARD_THREAD_LIMIT " "define in server/mpm/netware%s.", ap_threads_limit, HARD_THREAD_LIMIT, HARD_THREAD_LIMIT, MPM_HARD_LIMITS_FILE); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00229) "MaxThreads of %d exceeds compile-time limit " "of %d, decreasing to match", ap_threads_limit, HARD_THREAD_LIMIT); } ap_threads_limit = HARD_THREAD_LIMIT; } else if (ap_threads_limit < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00230) "WARNING: MaxThreads of %d not allowed, " "increasing to 1.", ap_threads_limit); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(02661) "MaxThreads of %d not allowed, increasing to 1", ap_threads_limit); } ap_threads_limit = 1; } /* ap_threads_to_start > ap_threads_limit effectively checked in * call to startup_workers(ap_threads_to_start) in ap_mpm_run() */ if (ap_threads_to_start < 0) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00231) "WARNING: StartThreads of %d not allowed, " "increasing to 1.", ap_threads_to_start); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00232) "StartThreads of %d not allowed, increasing to 1", ap_threads_to_start); } ap_threads_to_start = 1; } if (ap_threads_min_free < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00233) "WARNING: MinSpareThreads of %d not allowed, " "increasing to 1 to avoid almost certain server failure. " "Please read the documentation.", ap_threads_min_free); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00234) "MinSpareThreads of %d not allowed, increasing to 1", ap_threads_min_free); } ap_threads_min_free = 1; } /* ap_threads_max_free < ap_threads_min_free + 1 checked in ap_mpm_run() */ return OK; } static void netware_mpm_hooks(apr_pool_t *p) { /* Run the pre-config hook after core's so that it can override the * default setting of ThreadStackSize for NetWare. */ static const char * const predecessors[] = {"core.c", NULL}; ap_hook_pre_config(netware_pre_config, predecessors, NULL, APR_HOOK_MIDDLE); ap_hook_check_config(netware_check_config, NULL, NULL, APR_HOOK_MIDDLE); //ap_hook_post_config(netware_post_config, NULL, NULL, 0); //ap_hook_child_init(netware_child_init, NULL, NULL, APR_HOOK_MIDDLE); //ap_hook_open_logs(netware_open_logs, NULL, aszSucc, APR_HOOK_REALLY_FIRST); ap_hook_mpm(netware_run, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm_query(netware_query, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm_get_name(netware_get_name, NULL, NULL, APR_HOOK_MIDDLE); } static void netware_rewrite_args(process_rec *process) { char *def_server_root; char optbuf[3]; const char *opt_arg; apr_getopt_t *opt; apr_array_header_t *mpm_new_argv; atexit (mpm_term); InstallConsoleHandler(); /* Make sure to hold the Apache screen open if exit() is called */ hold_screen_on_exit = 1; /* Rewrite process->argv[]; * * add default -d serverroot from the path of this executable * * The end result will look like: * The -d serverroot default from the running executable */ if (process->argc > 0) { char *s = apr_pstrdup (process->pconf, process->argv[0]); if (s) { int i, len = strlen(s); for (i=len; i; i--) { if (s[i] == '\\' || s[i] == '/') { s[i] = '\0'; apr_filepath_merge(&def_server_root, NULL, s, APR_FILEPATH_TRUENAME, process->pool); break; } } /* Use process->pool so that the rewritten argv * lasts for the lifetime of the server process, * because pconf will be destroyed after the * initial pre-flight of the config parser. */ mpm_new_argv = apr_array_make(process->pool, process->argc + 2, sizeof(const char *)); *(const char **)apr_array_push(mpm_new_argv) = process->argv[0]; *(const char **)apr_array_push(mpm_new_argv) = "-d"; *(const char **)apr_array_push(mpm_new_argv) = def_server_root; optbuf[0] = '-'; optbuf[2] = '\0'; apr_getopt_init(&opt, process->pool, process->argc, process->argv); while (apr_getopt(opt, AP_SERVER_BASEARGS"n:", optbuf + 1, &opt_arg) == APR_SUCCESS) { switch (optbuf[1]) { case 'n': if (opt_arg) { renamescreen(opt_arg); } break; case 'E': /* Don't need to hold the screen open if the output is going to a file */ hold_screen_on_exit = -1; default: *(const char **)apr_array_push(mpm_new_argv) = apr_pstrdup(process->pool, optbuf); if (opt_arg) { *(const char **)apr_array_push(mpm_new_argv) = opt_arg; } break; } } process->argc = mpm_new_argv->nelts; process->argv = (const char * const *) mpm_new_argv->elts; } } } static int CommandLineInterpreter(scr_t screenID, const char *commandLine) { char *szCommand = "APACHE2 "; int iCommandLen = 8; char szcommandLine[256]; char *pID; screenID = screenID; if (commandLine == NULL) return NOTMYCOMMAND; if (strlen(commandLine) <= strlen(szCommand)) return NOTMYCOMMAND; apr_cpystrn(szcommandLine, commandLine, sizeof(szcommandLine)); /* All added commands begin with "APACHE2 " */ if (!strnicmp(szCommand, szcommandLine, iCommandLen)) { ActivateScreen (getscreenhandle()); /* If an instance id was not given but the nlm is loaded in protected space, then the command belongs to the OS address space instance to pass it on. */ pID = strstr (szcommandLine, "-p"); if ((pID == NULL) && nlmisloadedprotected()) return NOTMYCOMMAND; /* If we got an instance id but it doesn't match this instance of the nlm, pass it on. */ if (pID) { pID = &pID[2]; while (*pID && (*pID == ' ')) pID++; } if (pID && ap_my_addrspace && strnicmp(pID, ap_my_addrspace, strlen(ap_my_addrspace))) return NOTMYCOMMAND; /* If we have determined that this command belongs to this instance of the nlm, then handle it. */ if (!strnicmp("RESTART",&szcommandLine[iCommandLen],3)) { printf("Restart Requested...\n"); restart(); } else if (!strnicmp("VERSION",&szcommandLine[iCommandLen],3)) { printf("Server version: %s\n", ap_get_server_description()); printf("Server built: %s\n", ap_get_server_built()); } else if (!strnicmp("MODULES",&szcommandLine[iCommandLen],3)) { ap_show_modules(); } else if (!strnicmp("DIRECTIVES",&szcommandLine[iCommandLen],3)) { ap_show_directives(); } else if (!strnicmp("SHUTDOWN",&szcommandLine[iCommandLen],3)) { printf("Shutdown Requested...\n"); shutdown_pending = 1; } else if (!strnicmp("SETTINGS",&szcommandLine[iCommandLen],3)) { if (show_settings) { show_settings = 0; ClearScreen (getscreenhandle()); show_server_data(); } else { show_settings = 1; display_settings(); } } else { show_settings = 0; if (strnicmp("HELP",&szcommandLine[iCommandLen],3)) printf("Unknown APACHE2 command %s\n", &szcommandLine[iCommandLen]); printf("Usage: APACHE2 [command] [-p ]\n"); printf("Commands:\n"); printf("\tDIRECTIVES - Show directives\n"); printf("\tHELP - Display this help information\n"); printf("\tMODULES - Show a list of the loaded modules\n"); printf("\tRESTART - Reread the configuration file and restart Apache\n"); printf("\tSETTINGS - Show current thread status\n"); printf("\tSHUTDOWN - Shutdown Apache\n"); printf("\tVERSION - Display the server version information\n"); } /* Tell NetWare we handled the command */ return HANDLEDCOMMAND; } /* Tell NetWare that the command isn't mine */ return NOTMYCOMMAND; } static int InstallConsoleHandler(void) { /* Our command line handler interfaces the system operator with this NLM */ NX_WRAP_INTERFACE(CommandLineInterpreter, 2, (void*)&(ConsoleHandler.parser)); ConsoleHandler.rTag = AllocateResourceTag(getnlmhandle(), "Command Line Processor", ConsoleCommandSignature); if (!ConsoleHandler.rTag) { printf("Error on allocate resource tag\n"); return 1; } RegisterConsoleCommand(&ConsoleHandler); /* The Remove procedure unregisters the console handler */ return 0; } static void RemoveConsoleHandler(void) { UnRegisterConsoleCommand(&ConsoleHandler); NX_UNWRAP_INTERFACE(ConsoleHandler.parser); } static const char *set_threads_to_start(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_threads_to_start = atoi(arg); return NULL; } static const char *set_min_free_threads(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_threads_min_free = atoi(arg); return NULL; } static const char *set_max_free_threads(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_threads_max_free = atoi(arg); return NULL; } static const char *set_thread_limit (cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_threads_limit = atoi(arg); return NULL; } static const command_rec netware_mpm_cmds[] = { LISTEN_COMMANDS, AP_INIT_TAKE1("StartThreads", set_threads_to_start, NULL, RSRC_CONF, "Number of worker threads launched at server startup"), AP_INIT_TAKE1("MinSpareThreads", set_min_free_threads, NULL, RSRC_CONF, "Minimum number of idle threads, to handle request spikes"), AP_INIT_TAKE1("MaxSpareThreads", set_max_free_threads, NULL, RSRC_CONF, "Maximum number of idle threads"), AP_INIT_TAKE1("MaxThreads", set_thread_limit, NULL, RSRC_CONF, "Maximum number of worker threads alive at the same time"), { NULL } }; AP_DECLARE_MODULE(mpm_netware) = { MPM20_MODULE_STUFF, netware_rewrite_args, /* hook to run before apache parses args */ NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ netware_mpm_cmds, /* command apr_table_t */ netware_mpm_hooks, /* register hooks */ }; httpd-2.4.41/server/mpm/netware/mpm_default.h0000644000000000000500000000443211711754075017461 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file netware/mpm_default.h * @brief Defaults for Netware MPM * * @defgroup APACHE_MPM_NETWARE Netware MPM * @ingroup APACHE_INTERNAL * @{ */ #ifndef APACHE_MPM_DEFAULT_H #define APACHE_MPM_DEFAULT_H /* Limit on the threads per process. Clients will be locked out if more than * this * HARD_SERVER_LIMIT are needed. * * We keep this for one reason it keeps the size of the scoreboard file small * enough that we can read the whole thing without worrying too much about * the overhead. */ #ifndef HARD_THREAD_LIMIT #define HARD_THREAD_LIMIT 2048 #endif #ifndef DEFAULT_THREADS_PER_CHILD #define DEFAULT_THREADS_PER_CHILD 50 #endif /* Number of threads to spawn off by default --- also, if fewer than * this free when the caretaker checks, it will spawn more. */ #ifndef DEFAULT_START_THREADS #define DEFAULT_START_THREADS DEFAULT_THREADS_PER_CHILD #endif /* Maximum number of *free* threads --- more than this, and * they will die off. */ #ifndef DEFAULT_MAX_FREE_THREADS #define DEFAULT_MAX_FREE_THREADS 100 #endif /* Minimum --- fewer than this, and more will be created */ #ifndef DEFAULT_MIN_FREE_THREADS #define DEFAULT_MIN_FREE_THREADS 10 #endif /* * Interval, in microseconds, between scoreboard maintenance. */ #ifndef SCOREBOARD_MAINTENANCE_INTERVAL #define SCOREBOARD_MAINTENANCE_INTERVAL 1000000 #endif /* Default stack size allocated for each worker thread. */ #ifndef DEFAULT_THREAD_STACKSIZE #define DEFAULT_THREAD_STACKSIZE 65536 #endif #endif /* AP_MPM_DEFAULT_H */ /** @} */ httpd-2.4.41/server/mpm/winnt/0002755000000000000500000000000013523273341014477 5ustar rootsrchttpd-2.4.41/server/mpm/winnt/mpm_winnt.c0000644000000000000500000020315513351171147016657 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifdef WIN32 #include "httpd.h" #include "http_main.h" #include "http_log.h" #include "http_config.h" /* for read_config */ #include "http_core.h" /* for get_remote_host */ #include "http_connection.h" #include "apr_portable.h" #include "apr_thread_proc.h" #include "apr_getopt.h" #include "apr_strings.h" #include "apr_lib.h" #include "apr_shm.h" #include "apr_thread_mutex.h" #include "ap_mpm.h" #include "apr_general.h" #include "ap_config.h" #include "ap_listen.h" #include "mpm_default.h" #include "mpm_winnt.h" #include "mpm_common.h" #include #include "apr_atomic.h" #include "scoreboard.h" #ifdef __WATCOMC__ #define _environ environ #endif #ifndef STACK_SIZE_PARAM_IS_A_RESERVATION /* missing on MinGW */ #define STACK_SIZE_PARAM_IS_A_RESERVATION 0x00010000 #endif /* Because ap_setup_listeners() is skipped in the child, any merging * of [::]:80 and 0.0.0.0:80 for AP_ENABLE_V4_MAPPED in the parent * won't have taken place in the child, so the child will expect to * read two sockets for "Listen 80" but the parent will send only * one. */ #ifdef AP_ENABLE_V4_MAPPED #error The WinNT MPM does not currently support AP_ENABLE_V4_MAPPED #endif /* scoreboard.c does the heavy lifting; all we do is create the child * score by moving a handle down the pipe into the child's stdin. */ extern apr_shm_t *ap_scoreboard_shm; /* my_generation is returned to the scoreboard code */ static volatile ap_generation_t my_generation=0; /* Definitions of WINNT MPM specific config globals */ static HANDLE shutdown_event; /* used to signal the parent to shutdown */ static HANDLE restart_event; /* used to signal the parent to restart */ static int one_process = 0; static char const* signal_arg = NULL; OSVERSIONINFO osver; /* VER_PLATFORM_WIN32_NT */ /* set by child_main to STACK_SIZE_PARAM_IS_A_RESERVATION for NT >= 5.1 (XP/2003) */ DWORD stack_res_flag; static DWORD parent_pid; DWORD my_pid; /* used by parent to signal the child to start and exit */ apr_proc_mutex_t *start_mutex; HANDLE exit_event; int ap_threads_per_child = 0; static int thread_limit = 0; static int first_thread_limit = 0; int winnt_mpm_state = AP_MPMQ_STARTING; /* shared by service.c as global, although * perhaps it should be private. */ apr_pool_t *pconf; /* Only one of these, the pipe from our parent, meant only for * one child worker's consumption (not to be inherited!) * XXX: decorate this name for the trunk branch, was left simplified * only to make the 2.2 patch trivial to read. */ static HANDLE pipe; /* * Command processors */ static const char *set_threads_per_child (cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_threads_per_child = atoi(arg); return NULL; } static const char *set_thread_limit (cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } thread_limit = atoi(arg); return NULL; } static const command_rec winnt_cmds[] = { LISTEN_COMMANDS, AP_INIT_TAKE1("ThreadsPerChild", set_threads_per_child, NULL, RSRC_CONF, "Number of threads each child creates" ), AP_INIT_TAKE1("ThreadLimit", set_thread_limit, NULL, RSRC_CONF, "Maximum worker threads in a server for this run of Apache"), { NULL } }; static void winnt_note_child_started(int slot, pid_t pid) { ap_scoreboard_image->parent[slot].pid = pid; ap_scoreboard_image->parent[slot].generation = my_generation; ap_run_child_status(ap_server_conf, ap_scoreboard_image->parent[slot].pid, my_generation, slot, MPM_CHILD_STARTED); } static void winnt_note_child_killed(int slot) { ap_run_child_status(ap_server_conf, ap_scoreboard_image->parent[slot].pid, ap_scoreboard_image->parent[slot].generation, slot, MPM_CHILD_EXITED); ap_scoreboard_image->parent[slot].pid = 0; } /* * Signalling Apache on NT. * * Under Unix, Apache can be told to shutdown or restart by sending various * signals (HUP, USR, TERM). On NT we don't have easy access to signals, so * we use "events" instead. The parent apache process goes into a loop * where it waits forever for a set of events. Two of those events are * called * * apPID_shutdown * apPID_restart * * (where PID is the PID of the apache parent process). When one of these * is signalled, the Apache parent performs the appropriate action. The events * can become signalled through internal Apache methods (e.g. if the child * finds a fatal error and needs to kill its parent), via the service * control manager (the control thread will signal the shutdown event when * requested to stop the Apache service), from the -k Apache command line, * or from any external program which finds the Apache PID from the * httpd.pid file. * * The signal_parent() function, below, is used to signal one of these events. * It can be called by any child or parent process, since it does not * rely on global variables. * * On entry, type gives the event to signal. 0 means shutdown, 1 means * graceful restart. */ /* * Initialise the signal names, in the global variables signal_name_prefix, * signal_restart_name and signal_shutdown_name. */ #define MAX_SIGNAL_NAME 30 /* Long enough for apPID_shutdown, where PID is an int */ static char signal_name_prefix[MAX_SIGNAL_NAME]; static char signal_restart_name[MAX_SIGNAL_NAME]; static char signal_shutdown_name[MAX_SIGNAL_NAME]; static void setup_signal_names(char *prefix) { apr_snprintf(signal_name_prefix, sizeof(signal_name_prefix), prefix); apr_snprintf(signal_shutdown_name, sizeof(signal_shutdown_name), "%s_shutdown", signal_name_prefix); apr_snprintf(signal_restart_name, sizeof(signal_restart_name), "%s_restart", signal_name_prefix); } AP_DECLARE(void) ap_signal_parent(ap_signal_parent_e type) { HANDLE e; char *signal_name; if (parent_pid == my_pid) { switch(type) { case SIGNAL_PARENT_SHUTDOWN: { SetEvent(shutdown_event); break; } /* This MPM supports only graceful restarts right now */ case SIGNAL_PARENT_RESTART: case SIGNAL_PARENT_RESTART_GRACEFUL: { SetEvent(restart_event); break; } } return; } switch(type) { case SIGNAL_PARENT_SHUTDOWN: { signal_name = signal_shutdown_name; break; } /* This MPM supports only graceful restarts right now */ case SIGNAL_PARENT_RESTART: case SIGNAL_PARENT_RESTART_GRACEFUL: { signal_name = signal_restart_name; break; } default: return; } e = OpenEvent(EVENT_MODIFY_STATE, FALSE, signal_name); if (!e) { /* Um, problem, can't signal the parent, which means we can't * signal ourselves to die. Ignore for now... */ ap_log_error(APLOG_MARK, APLOG_EMERG, apr_get_os_error(), ap_server_conf, APLOGNO(00382) "OpenEvent on %s event", signal_name); return; } if (SetEvent(e) == 0) { /* Same problem as above */ ap_log_error(APLOG_MARK, APLOG_EMERG, apr_get_os_error(), ap_server_conf, APLOGNO(00383) "SetEvent on %s event", signal_name); CloseHandle(e); return; } CloseHandle(e); } /* * Passed the following handles [in sync with send_handles_to_child()] * * ready event [signal the parent immediately, then close] * exit event [save to poll later] * start mutex [signal from the parent to begin accept()] * scoreboard shm handle [to recreate the ap_scoreboard] */ static void get_handles_from_parent(server_rec *s, HANDLE *child_exit_event, apr_proc_mutex_t **child_start_mutex, apr_shm_t **scoreboard_shm) { HANDLE hScore; HANDLE ready_event; HANDLE os_start; DWORD BytesRead; void *sb_shared; apr_status_t rv; /* *** We now do this way back in winnt_rewrite_args * pipe = GetStdHandle(STD_INPUT_HANDLE); */ if (!ReadFile(pipe, &ready_event, sizeof(HANDLE), &BytesRead, (LPOVERLAPPED) NULL) || (BytesRead != sizeof(HANDLE))) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00384) "Child: Unable to retrieve the ready event from the parent"); exit(APEXIT_CHILDINIT); } SetEvent(ready_event); CloseHandle(ready_event); if (!ReadFile(pipe, child_exit_event, sizeof(HANDLE), &BytesRead, (LPOVERLAPPED) NULL) || (BytesRead != sizeof(HANDLE))) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00385) "Child: Unable to retrieve the exit event from the parent"); exit(APEXIT_CHILDINIT); } if (!ReadFile(pipe, &os_start, sizeof(os_start), &BytesRead, (LPOVERLAPPED) NULL) || (BytesRead != sizeof(os_start))) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00386) "Child: Unable to retrieve the start_mutex from the parent"); exit(APEXIT_CHILDINIT); } *child_start_mutex = NULL; if ((rv = apr_os_proc_mutex_put(child_start_mutex, &os_start, s->process->pool)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00387) "Child: Unable to access the start_mutex from the parent"); exit(APEXIT_CHILDINIT); } if (!ReadFile(pipe, &hScore, sizeof(hScore), &BytesRead, (LPOVERLAPPED) NULL) || (BytesRead != sizeof(hScore))) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00388) "Child: Unable to retrieve the scoreboard from the parent"); exit(APEXIT_CHILDINIT); } *scoreboard_shm = NULL; if ((rv = apr_os_shm_put(scoreboard_shm, &hScore, s->process->pool)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00389) "Child: Unable to access the scoreboard from the parent"); exit(APEXIT_CHILDINIT); } rv = ap_reopen_scoreboard(s->process->pool, scoreboard_shm, 1); if (rv || !(sb_shared = apr_shm_baseaddr_get(*scoreboard_shm))) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00390) "Child: Unable to reopen the scoreboard from the parent"); exit(APEXIT_CHILDINIT); } /* We must 'initialize' the scoreboard to relink all the * process-local pointer arrays into the shared memory block. */ ap_init_scoreboard(sb_shared); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(00391) "Child: Retrieved our scoreboard from the parent."); } static int send_handles_to_child(apr_pool_t *p, HANDLE child_ready_event, HANDLE child_exit_event, apr_proc_mutex_t *child_start_mutex, apr_shm_t *scoreboard_shm, HANDLE hProcess, apr_file_t *child_in) { apr_status_t rv; HANDLE hCurrentProcess = GetCurrentProcess(); HANDLE hDup; HANDLE os_start; HANDLE hScore; apr_size_t BytesWritten; if ((rv = apr_file_write_full(child_in, &my_generation, sizeof(my_generation), NULL)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(02964) "Parent: Unable to send its generation to the child"); return -1; } if (!DuplicateHandle(hCurrentProcess, child_ready_event, hProcess, &hDup, EVENT_MODIFY_STATE | SYNCHRONIZE, FALSE, 0)) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00392) "Parent: Unable to duplicate the ready event handle for the child"); return -1; } if ((rv = apr_file_write_full(child_in, &hDup, sizeof(hDup), &BytesWritten)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00393) "Parent: Unable to send the exit event handle to the child"); return -1; } if (!DuplicateHandle(hCurrentProcess, child_exit_event, hProcess, &hDup, EVENT_MODIFY_STATE | SYNCHRONIZE, FALSE, 0)) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00394) "Parent: Unable to duplicate the exit event handle for the child"); return -1; } if ((rv = apr_file_write_full(child_in, &hDup, sizeof(hDup), &BytesWritten)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00395) "Parent: Unable to send the exit event handle to the child"); return -1; } if ((rv = apr_os_proc_mutex_get(&os_start, child_start_mutex)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00396) "Parent: Unable to retrieve the start mutex for the child"); return -1; } if (!DuplicateHandle(hCurrentProcess, os_start, hProcess, &hDup, SYNCHRONIZE, FALSE, 0)) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00397) "Parent: Unable to duplicate the start mutex to the child"); return -1; } if ((rv = apr_file_write_full(child_in, &hDup, sizeof(hDup), &BytesWritten)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00398) "Parent: Unable to send the start mutex to the child"); return -1; } if ((rv = apr_os_shm_get(&hScore, scoreboard_shm)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00399) "Parent: Unable to retrieve the scoreboard handle for the child"); return -1; } if (!DuplicateHandle(hCurrentProcess, hScore, hProcess, &hDup, FILE_MAP_READ | FILE_MAP_WRITE, FALSE, 0)) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00400) "Parent: Unable to duplicate the scoreboard handle to the child"); return -1; } if ((rv = apr_file_write_full(child_in, &hDup, sizeof(hDup), &BytesWritten)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00401) "Parent: Unable to send the scoreboard handle to the child"); return -1; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(00402) "Parent: Sent the scoreboard to the child"); return 0; } /* * get_listeners_from_parent() * The listen sockets are opened in the parent. This function, which runs * exclusively in the child process, receives them from the parent and * makes them availeble in the child. */ static void get_listeners_from_parent(server_rec *s) { WSAPROTOCOL_INFO WSAProtocolInfo; ap_listen_rec *lr; DWORD BytesRead; int lcnt = 0; SOCKET nsd; /* Set up a default listener if necessary */ if (ap_listeners == NULL) { ap_listen_rec *lr; lr = apr_palloc(s->process->pool, sizeof(ap_listen_rec)); lr->sd = NULL; lr->next = ap_listeners; ap_listeners = lr; } /* Open the pipe to the parent process to receive the inherited socket * data. The sockets have been set to listening in the parent process. * * *** We now do this way back in winnt_rewrite_args * pipe = GetStdHandle(STD_INPUT_HANDLE); */ for (lr = ap_listeners; lr; lr = lr->next, ++lcnt) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(00403) "Child: Waiting for data for listening socket %pI", lr->bind_addr); if (!ReadFile(pipe, &WSAProtocolInfo, sizeof(WSAPROTOCOL_INFO), &BytesRead, (LPOVERLAPPED) NULL)) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00404) "Child: Unable to read socket data from parent"); exit(APEXIT_CHILDINIT); } nsd = WSASocket(FROM_PROTOCOL_INFO, FROM_PROTOCOL_INFO, FROM_PROTOCOL_INFO, &WSAProtocolInfo, 0, 0); if (nsd == INVALID_SOCKET) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_netos_error(), ap_server_conf, APLOGNO(00405) "Child: WSASocket failed to open the inherited socket"); exit(APEXIT_CHILDINIT); } if (!SetHandleInformation((HANDLE)nsd, HANDLE_FLAG_INHERIT, 0)) { ap_log_error(APLOG_MARK, APLOG_ERR, apr_get_os_error(), ap_server_conf, APLOGNO(00406) "Child: SetHandleInformation failed"); } apr_os_sock_put(&lr->sd, &nsd, s->process->pool); } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(00407) "Child: retrieved %d listeners from parent", lcnt); } static int send_listeners_to_child(apr_pool_t *p, DWORD dwProcessId, apr_file_t *child_in) { apr_status_t rv; int lcnt = 0; ap_listen_rec *lr; LPWSAPROTOCOL_INFO lpWSAProtocolInfo; apr_size_t BytesWritten; /* Run the chain of open sockets. For each socket, duplicate it * for the target process then send the WSAPROTOCOL_INFO * (returned by dup socket) to the child. */ for (lr = ap_listeners; lr; lr = lr->next, ++lcnt) { apr_os_sock_t nsd; lpWSAProtocolInfo = apr_pcalloc(p, sizeof(WSAPROTOCOL_INFO)); apr_os_sock_get(&nsd, lr->sd); ap_log_error(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, ap_server_conf, APLOGNO(00408) "Parent: Duplicating socket %d (%pI) and sending it to child process %lu", nsd, lr->bind_addr, dwProcessId); if (WSADuplicateSocket(nsd, dwProcessId, lpWSAProtocolInfo) == SOCKET_ERROR) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_netos_error(), ap_server_conf, APLOGNO(00409) "Parent: WSADuplicateSocket failed for socket %d. Check the FAQ.", nsd); return -1; } if ((rv = apr_file_write_full(child_in, lpWSAProtocolInfo, sizeof(WSAPROTOCOL_INFO), &BytesWritten)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00410) "Parent: Unable to write duplicated socket %d to the child.", nsd); return -1; } } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(00411) "Parent: Sent %d listeners to child %lu", lcnt, dwProcessId); return 0; } enum waitlist_e { waitlist_ready = 0, waitlist_term = 1 }; static int create_process(apr_pool_t *p, HANDLE *child_proc, HANDLE *child_exit_event, DWORD *child_pid) { /* These NEVER change for the lifetime of this parent */ static char **args = NULL; static char pidbuf[28]; apr_status_t rv; apr_pool_t *ptemp; apr_procattr_t *attr; apr_proc_t new_child; HANDLE hExitEvent; HANDLE waitlist[2]; /* see waitlist_e */ char *cmd; char *cwd; char **env; int envc; apr_pool_create_ex(&ptemp, p, NULL, NULL); /* Build the command line. Should look something like this: * C:/apache/bin/httpd.exe -f ap_server_confname * First, get the path to the executable... */ apr_procattr_create(&attr, ptemp); apr_procattr_cmdtype_set(attr, APR_PROGRAM); apr_procattr_detach_set(attr, 1); if (((rv = apr_filepath_get(&cwd, 0, ptemp)) != APR_SUCCESS) || ((rv = apr_procattr_dir_set(attr, cwd)) != APR_SUCCESS)) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00412) "Parent: Failed to get the current path"); } if (!args) { /* Build the args array, only once since it won't change * for the lifetime of this parent process. */ if ((rv = ap_os_proc_filepath(&cmd, ptemp)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, ERROR_BAD_PATHNAME, ap_server_conf, APLOGNO(00413) "Parent: Failed to get full path of %s", ap_server_conf->process->argv[0]); apr_pool_destroy(ptemp); return -1; } args = malloc((ap_server_conf->process->argc + 1) * sizeof (char*)); memcpy(args + 1, ap_server_conf->process->argv + 1, (ap_server_conf->process->argc - 1) * sizeof (char*)); args[0] = malloc(strlen(cmd) + 1); strcpy(args[0], cmd); args[ap_server_conf->process->argc] = NULL; } else { cmd = args[0]; } /* Create a pipe to send handles to the child */ if ((rv = apr_procattr_io_set(attr, APR_FULL_BLOCK, APR_NO_PIPE, APR_NO_PIPE)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00414) "Parent: Unable to create child stdin pipe."); apr_pool_destroy(ptemp); return -1; } /* Create the child_ready_event */ waitlist[waitlist_ready] = CreateEvent(NULL, TRUE, FALSE, NULL); if (!waitlist[waitlist_ready]) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00415) "Parent: Could not create ready event for child process"); apr_pool_destroy (ptemp); return -1; } /* Create the child_exit_event */ hExitEvent = CreateEvent(NULL, TRUE, FALSE, NULL); if (!hExitEvent) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00416) "Parent: Could not create exit event for child process"); apr_pool_destroy(ptemp); CloseHandle(waitlist[waitlist_ready]); return -1; } /* Build the env array */ for (envc = 0; _environ[envc]; ++envc) { ; } env = apr_palloc(ptemp, (envc + 2) * sizeof (char*)); memcpy(env, _environ, envc * sizeof (char*)); apr_snprintf(pidbuf, sizeof(pidbuf), "AP_PARENT_PID=%lu", parent_pid); env[envc] = pidbuf; env[envc + 1] = NULL; rv = apr_proc_create(&new_child, cmd, (const char * const *)args, (const char * const *)env, attr, ptemp); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00417) "Parent: Failed to create the child process."); apr_pool_destroy(ptemp); CloseHandle(hExitEvent); CloseHandle(waitlist[waitlist_ready]); CloseHandle(new_child.hproc); return -1; } ap_log_error(APLOG_MARK, APLOG_NOTICE, APR_SUCCESS, ap_server_conf, APLOGNO(00418) "Parent: Created child process %d", new_child.pid); if (send_handles_to_child(ptemp, waitlist[waitlist_ready], hExitEvent, start_mutex, ap_scoreboard_shm, new_child.hproc, new_child.in)) { /* * This error is fatal, mop up the child and move on * We toggle the child's exit event to cause this child * to quit even as it is attempting to start. */ SetEvent(hExitEvent); apr_pool_destroy(ptemp); CloseHandle(hExitEvent); CloseHandle(waitlist[waitlist_ready]); CloseHandle(new_child.hproc); return -1; } /* Important: * Give the child process a chance to run before dup'ing the sockets. * We have already set the listening sockets noninheritable, but if * WSADuplicateSocket runs before the child process initializes * the listeners will be inherited anyway. */ waitlist[waitlist_term] = new_child.hproc; rv = WaitForMultipleObjects(2, waitlist, FALSE, INFINITE); CloseHandle(waitlist[waitlist_ready]); if (rv != WAIT_OBJECT_0) { /* * Outch... that isn't a ready signal. It's dead, Jim! */ SetEvent(hExitEvent); apr_pool_destroy(ptemp); CloseHandle(hExitEvent); CloseHandle(new_child.hproc); return -1; } if (send_listeners_to_child(ptemp, new_child.pid, new_child.in)) { /* * This error is fatal, mop up the child and move on * We toggle the child's exit event to cause this child * to quit even as it is attempting to start. */ SetEvent(hExitEvent); apr_pool_destroy(ptemp); CloseHandle(hExitEvent); CloseHandle(new_child.hproc); return -1; } apr_file_close(new_child.in); *child_exit_event = hExitEvent; *child_proc = new_child.hproc; *child_pid = new_child.pid; return 0; } /*********************************************************************** * master_main() * master_main() runs in the parent process. It creates the child * process which handles HTTP requests then waits on one of three * events: * * restart_event * ------------- * The restart event causes master_main to start a new child process and * tells the old child process to exit (by setting the child_exit_event). * The restart event is set as a result of one of the following: * 1. An apache -k restart command on the command line * 2. A command received from Windows service manager which gets * translated into an ap_signal_parent(SIGNAL_PARENT_RESTART) * call by code in service.c. * 3. The child process calling ap_signal_parent(SIGNAL_PARENT_RESTART) * as a result of hitting MaxConnectionsPerChild. * * shutdown_event * -------------- * The shutdown event causes master_main to tell the child process to * exit and that the server is shutting down. The shutdown event is * set as a result of one of the following: * 1. An apache -k shutdown command on the command line * 2. A command received from Windows service manager which gets * translated into an ap_signal_parent(SIGNAL_PARENT_SHUTDOWN) * call by code in service.c. * * child process handle * -------------------- * The child process handle will be signaled if the child process * exits for any reason. In a normal running server, the signaling * of this event means that the child process has exited prematurely * due to a seg fault or other irrecoverable error. For server * robustness, master_main will restart the child process under this * condtion. * * master_main uses the child_exit_event to signal the child process * to exit. **********************************************************************/ #define NUM_WAIT_HANDLES 3 #define CHILD_HANDLE 0 #define SHUTDOWN_HANDLE 1 #define RESTART_HANDLE 2 static int master_main(server_rec *s, HANDLE shutdown_event, HANDLE restart_event) { int rv, cld; int child_created; int restart_pending; int shutdown_pending; HANDLE child_exit_event; HANDLE event_handles[NUM_WAIT_HANDLES]; DWORD child_pid; child_created = restart_pending = shutdown_pending = 0; event_handles[SHUTDOWN_HANDLE] = shutdown_event; event_handles[RESTART_HANDLE] = restart_event; /* Create a single child process */ rv = create_process(pconf, &event_handles[CHILD_HANDLE], &child_exit_event, &child_pid); if (rv < 0) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00419) "master_main: create child process failed. Exiting."); shutdown_pending = 1; goto die_now; } child_created = 1; if (!strcasecmp(signal_arg, "runservice")) { mpm_service_started(); } /* Update the scoreboard. Note that there is only a single active * child at once. */ ap_scoreboard_image->parent[0].quiescing = 0; winnt_note_child_started(/* slot */ 0, child_pid); /* Wait for shutdown or restart events or for child death */ winnt_mpm_state = AP_MPMQ_RUNNING; rv = WaitForMultipleObjects(NUM_WAIT_HANDLES, (HANDLE *) event_handles, FALSE, INFINITE); cld = rv - WAIT_OBJECT_0; if (rv == WAIT_FAILED) { /* Something serious is wrong */ ap_log_error(APLOG_MARK,APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00420) "master_main: WaitForMultipleObjects WAIT_FAILED -- doing server shutdown"); shutdown_pending = 1; } else if (rv == WAIT_TIMEOUT) { /* Hey, this cannot happen */ ap_log_error(APLOG_MARK, APLOG_ERR, apr_get_os_error(), s, APLOGNO(00421) "master_main: WaitForMultipleObjects with INFINITE wait exited with WAIT_TIMEOUT"); shutdown_pending = 1; } else if (cld == SHUTDOWN_HANDLE) { /* shutdown_event signalled */ shutdown_pending = 1; ap_log_error(APLOG_MARK, APLOG_NOTICE, APR_SUCCESS, s, APLOGNO(00422) "Parent: Received shutdown signal -- Shutting down the server."); if (ResetEvent(shutdown_event) == 0) { ap_log_error(APLOG_MARK, APLOG_ERR, apr_get_os_error(), s, APLOGNO(00423) "ResetEvent(shutdown_event)"); } } else if (cld == RESTART_HANDLE) { /* Received a restart event. Prepare the restart_event to be reused * then signal the child process to exit. */ restart_pending = 1; ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, s, APLOGNO(00424) "Parent: Received restart signal -- Restarting the server."); if (ResetEvent(restart_event) == 0) { ap_log_error(APLOG_MARK, APLOG_ERR, apr_get_os_error(), s, APLOGNO(00425) "Parent: ResetEvent(restart_event) failed."); } if (SetEvent(child_exit_event) == 0) { ap_log_error(APLOG_MARK, APLOG_ERR, apr_get_os_error(), s, APLOGNO(00426) "Parent: SetEvent for child process event %pp failed.", event_handles[CHILD_HANDLE]); } /* Don't wait to verify that the child process really exits, * just move on with the restart. */ CloseHandle(event_handles[CHILD_HANDLE]); event_handles[CHILD_HANDLE] = NULL; } else { /* The child process exited prematurely due to a fatal error. */ DWORD exitcode; if (!GetExitCodeProcess(event_handles[CHILD_HANDLE], &exitcode)) { /* HUH? We did exit, didn't we? */ exitcode = APEXIT_CHILDFATAL; } if ( exitcode == APEXIT_CHILDFATAL || exitcode == APEXIT_CHILDINIT || exitcode == APEXIT_INIT) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, ap_server_conf, APLOGNO(00427) "Parent: child process %lu exited with status %lu -- Aborting.", child_pid, exitcode); shutdown_pending = 1; } else { int i; restart_pending = 1; ap_log_error(APLOG_MARK, APLOG_NOTICE, APR_SUCCESS, ap_server_conf, APLOGNO(00428) "Parent: child process %lu exited with status %lu -- Restarting.", child_pid, exitcode); for (i = 0; i < ap_threads_per_child; i++) { ap_update_child_status_from_indexes(0, i, SERVER_DEAD, NULL); } } CloseHandle(event_handles[CHILD_HANDLE]); event_handles[CHILD_HANDLE] = NULL; } winnt_note_child_killed(/* slot */ 0); if (restart_pending) { ++my_generation; ap_scoreboard_image->global->running_generation = my_generation; } die_now: if (shutdown_pending) { int timeout = 30000; /* Timeout is milliseconds */ winnt_mpm_state = AP_MPMQ_STOPPING; if (!child_created) { return 0; /* Tell the caller we do not want to restart */ } /* This shutdown is only marginally graceful. We will give the * child a bit of time to exit gracefully. If the time expires, * the child will be wacked. */ if (!strcasecmp(signal_arg, "runservice")) { mpm_service_stopping(); } /* Signal the child processes to exit */ if (SetEvent(child_exit_event) == 0) { ap_log_error(APLOG_MARK,APLOG_ERR, apr_get_os_error(), ap_server_conf, APLOGNO(00429) "Parent: SetEvent for child process event %pp failed", event_handles[CHILD_HANDLE]); } if (event_handles[CHILD_HANDLE]) { rv = WaitForSingleObject(event_handles[CHILD_HANDLE], timeout); if (rv == WAIT_OBJECT_0) { ap_log_error(APLOG_MARK,APLOG_NOTICE, APR_SUCCESS, ap_server_conf, APLOGNO(00430) "Parent: Child process %lu exited successfully.", child_pid); CloseHandle(event_handles[CHILD_HANDLE]); event_handles[CHILD_HANDLE] = NULL; } else { ap_log_error(APLOG_MARK,APLOG_NOTICE, APR_SUCCESS, ap_server_conf, APLOGNO(00431) "Parent: Forcing termination of child process %lu", child_pid); TerminateProcess(event_handles[CHILD_HANDLE], 1); CloseHandle(event_handles[CHILD_HANDLE]); event_handles[CHILD_HANDLE] = NULL; } } CloseHandle(child_exit_event); return 0; /* Tell the caller we do not want to restart */ } winnt_mpm_state = AP_MPMQ_STARTING; CloseHandle(child_exit_event); return 1; /* Tell the caller we want a restart */ } /* service_nt_main_fn needs to append the StartService() args * outside of our call stack and thread as the service starts... */ apr_array_header_t *mpm_new_argv; /* Remember service_to_start failures to log and fail in pre_config. * Remember inst_argc and inst_argv for installing or starting the * service after we preflight the config. */ static int winnt_query(int query_code, int *result, apr_status_t *rv) { *rv = APR_SUCCESS; switch (query_code) { case AP_MPMQ_MAX_DAEMON_USED: *result = MAXIMUM_WAIT_OBJECTS; break; case AP_MPMQ_IS_THREADED: *result = AP_MPMQ_STATIC; break; case AP_MPMQ_IS_FORKED: *result = AP_MPMQ_NOT_SUPPORTED; break; case AP_MPMQ_HARD_LIMIT_DAEMONS: *result = HARD_SERVER_LIMIT; break; case AP_MPMQ_HARD_LIMIT_THREADS: *result = thread_limit; break; case AP_MPMQ_MAX_THREADS: *result = ap_threads_per_child; break; case AP_MPMQ_MIN_SPARE_DAEMONS: *result = 0; break; case AP_MPMQ_MIN_SPARE_THREADS: *result = 0; break; case AP_MPMQ_MAX_SPARE_DAEMONS: *result = 0; break; case AP_MPMQ_MAX_SPARE_THREADS: *result = 0; break; case AP_MPMQ_MAX_REQUESTS_DAEMON: *result = ap_max_requests_per_child; break; case AP_MPMQ_MAX_DAEMONS: *result = 1; break; case AP_MPMQ_MPM_STATE: *result = winnt_mpm_state; break; case AP_MPMQ_GENERATION: *result = my_generation; break; default: *rv = APR_ENOTIMPL; break; } return OK; } static const char *winnt_get_name(void) { return "WinNT"; } #define SERVICE_UNSET (-1) static apr_status_t service_set = SERVICE_UNSET; static apr_status_t service_to_start_success; static int inst_argc; static const char * const *inst_argv; static const char *service_name = NULL; static void winnt_rewrite_args(process_rec *process) { /* Handle the following SCM aspects in this phase: * * -k runservice [transition in service context only] * -k install * -k config * -k uninstall * -k stop * -k shutdown (same as -k stop). Maintained for backward compatibility. * * We can't leave this phase until we know our identity * and modify the command arguments appropriately. * * We do not care if the .conf file exists or is parsable when * attempting to stop or uninstall a service. */ apr_status_t rv; char *def_server_root; char *binpath; char optbuf[3]; const char *opt_arg; int fixed_args; char *pid; apr_getopt_t *opt; int running_as_service = 1; int errout = 0; apr_file_t *nullfile; pconf = process->pconf; osver.dwOSVersionInfoSize = sizeof(OSVERSIONINFO); GetVersionEx(&osver); /* We wish this was *always* a reservation, but sadly it wasn't so and * we couldn't break a hard limit prior to NT Kernel 5.1 */ if (osver.dwPlatformId == VER_PLATFORM_WIN32_NT && ((osver.dwMajorVersion > 5) || ((osver.dwMajorVersion == 5) && (osver.dwMinorVersion > 0)))) { stack_res_flag = STACK_SIZE_PARAM_IS_A_RESERVATION; } /* AP_PARENT_PID is only valid in the child */ pid = getenv("AP_PARENT_PID"); if (pid) { HANDLE filehand; HANDLE hproc = GetCurrentProcess(); DWORD BytesRead; /* This is the child */ my_pid = GetCurrentProcessId(); parent_pid = (DWORD) atol(pid); /* Prevent holding open the (nonexistent) console */ ap_real_exit_code = 0; /* The parent gave us stdin, we need to remember this * handle, and no longer inherit it at our children * (we can't slurp it up now, we just aren't ready yet). * The original handle is closed below, at apr_file_dup2() */ pipe = GetStdHandle(STD_INPUT_HANDLE); if (DuplicateHandle(hproc, pipe, hproc, &filehand, 0, FALSE, DUPLICATE_SAME_ACCESS)) { pipe = filehand; } /* The parent gave us stdout of the NUL device, * and expects us to suck up stdin of all of our * shared handles and data from the parent. * Don't infect child processes with our stdin * handle, use another handle to NUL! */ { apr_file_t *infile, *outfile; if ((apr_file_open_stdout(&outfile, process->pool) == APR_SUCCESS) && (apr_file_open_stdin(&infile, process->pool) == APR_SUCCESS)) apr_file_dup2(infile, outfile, process->pool); } /* This child needs the existing stderr opened for logging, * already */ /* Read this child's generation number as soon as now, * so that further hooks can query it. */ if (!ReadFile(pipe, &my_generation, sizeof(my_generation), &BytesRead, (LPOVERLAPPED) NULL) || (BytesRead != sizeof(my_generation))) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), NULL, APLOGNO(02965) "Child: Unable to retrieve my generation from the parent"); exit(APEXIT_CHILDINIT); } /* The parent is responsible for providing the * COMPLETE ARGUMENTS REQUIRED to the child. * * No further argument parsing is needed, but * for good measure we will provide a simple * signal string for later testing. */ signal_arg = "runchild"; return; } /* This is the parent, we have a long way to go :-) */ parent_pid = my_pid = GetCurrentProcessId(); /* This behavior is voided by setting real_exit_code to 0 */ atexit(hold_console_open_on_error); /* Rewrite process->argv[]; * * strip out -k signal into signal_arg * strip out -n servicename and set the names * add default -d serverroot from the path of this executable * * The end result will look like: * * The invocation command (%0) * The -d serverroot default from the running executable * The requested service's (-n) registry ConfigArgs * The WinNT SCM's StartService() args */ if ((rv = ap_os_proc_filepath(&binpath, process->pconf)) != APR_SUCCESS) { ap_log_error(APLOG_MARK,APLOG_CRIT, rv, NULL, APLOGNO(00432) "Failed to get the full path of %s", process->argv[0]); exit(APEXIT_INIT); } /* WARNING: There is an implict assumption here that the * executable resides in ServerRoot or ServerRoot\bin */ def_server_root = (char *) apr_filepath_name_get(binpath); if (def_server_root > binpath) { *(def_server_root - 1) = '\0'; def_server_root = (char *) apr_filepath_name_get(binpath); if (!strcasecmp(def_server_root, "bin")) *(def_server_root - 1) = '\0'; } apr_filepath_merge(&def_server_root, NULL, binpath, APR_FILEPATH_TRUENAME, process->pool); /* Use process->pool so that the rewritten argv * lasts for the lifetime of the server process, * because pconf will be destroyed after the * initial pre-flight of the config parser. */ mpm_new_argv = apr_array_make(process->pool, process->argc + 2, sizeof(const char *)); *(const char **)apr_array_push(mpm_new_argv) = process->argv[0]; *(const char **)apr_array_push(mpm_new_argv) = "-d"; *(const char **)apr_array_push(mpm_new_argv) = def_server_root; fixed_args = mpm_new_argv->nelts; optbuf[0] = '-'; optbuf[2] = '\0'; apr_getopt_init(&opt, process->pool, process->argc, process->argv); opt->errfn = NULL; while ((rv = apr_getopt(opt, "wn:k:" AP_SERVER_BASEARGS, optbuf + 1, &opt_arg)) == APR_SUCCESS) { switch (optbuf[1]) { /* Shortcuts; include the -w option to hold the window open on error. * This must not be toggled once we reset ap_real_exit_code to 0! */ case 'w': if (ap_real_exit_code) ap_real_exit_code = 2; break; case 'n': service_set = mpm_service_set_name(process->pool, &service_name, opt_arg); break; case 'k': signal_arg = opt_arg; break; case 'E': errout = 1; /* Fall through so the Apache main() handles the 'E' arg */ default: *(const char **)apr_array_push(mpm_new_argv) = apr_pstrdup(process->pool, optbuf); if (opt_arg) { *(const char **)apr_array_push(mpm_new_argv) = opt_arg; } break; } } /* back up to capture the bad argument */ if (rv == APR_BADCH || rv == APR_BADARG) { opt->ind--; } while (opt->ind < opt->argc) { *(const char **)apr_array_push(mpm_new_argv) = apr_pstrdup(process->pool, opt->argv[opt->ind++]); } /* Track the number of args actually entered by the user */ inst_argc = mpm_new_argv->nelts - fixed_args; /* Provide a default 'run' -k arg to simplify signal_arg tests */ if (!signal_arg) { signal_arg = "run"; running_as_service = 0; } if (!strcasecmp(signal_arg, "runservice")) { /* Start the NT Service _NOW_ because the WinNT SCM is * expecting us to rapidly assume control of our own * process, the SCM will tell us our service name, and * may have extra StartService() command arguments to * add for us. * * The SCM will generally invoke the executable with * the c:\win\system32 default directory. This is very * lethal if folks use ServerRoot /foopath on windows * without a drive letter. Change to the default root * (path to apache root, above /bin) for safety. */ apr_filepath_set(def_server_root, process->pool); /* Any other process has a console, so we don't to begin * a Win9x service until the configuration is parsed and * any command line errors are reported. * * We hold the return value so that we can die in pre_config * after logging begins, and the failure can land in the log. */ if (!errout) { mpm_nt_eventlog_stderr_open(service_name, process->pool); } service_to_start_success = mpm_service_to_start(&service_name, process->pool); if (service_to_start_success == APR_SUCCESS) { service_set = APR_SUCCESS; } /* Open a null handle to soak stdout in this process. * Windows service processes are missing any file handle * usable for stdin/out/err. This was the cause of later * trouble with invocations of apr_file_open_stdout() */ if ((rv = apr_file_open(&nullfile, "NUL", APR_READ | APR_WRITE, APR_OS_DEFAULT, process->pool)) == APR_SUCCESS) { apr_file_t *nullstdout; if (apr_file_open_stdout(&nullstdout, process->pool) == APR_SUCCESS) apr_file_dup2(nullstdout, nullfile, process->pool); apr_file_close(nullfile); } } /* Get the default for any -k option, except run */ if (service_set == SERVICE_UNSET && strcasecmp(signal_arg, "run")) { service_set = mpm_service_set_name(process->pool, &service_name, AP_DEFAULT_SERVICE_NAME); } if (!strcasecmp(signal_arg, "install")) /* -k install */ { if (service_set == APR_SUCCESS) { ap_log_error(APLOG_MARK,APLOG_ERR, 0, NULL, APLOGNO(00433) "%s: Service is already installed.", service_name); exit(APEXIT_INIT); } } else if (running_as_service) { if (service_set == APR_SUCCESS) { /* Attempt to Uninstall, or stop, before * we can read the arguments or .conf files */ if (!strcasecmp(signal_arg, "uninstall")) { rv = mpm_service_uninstall(); exit(rv); } if ((!strcasecmp(signal_arg, "stop")) || (!strcasecmp(signal_arg, "shutdown"))) { mpm_signal_service(process->pool, 0); exit(0); } rv = mpm_merge_service_args(process->pool, mpm_new_argv, fixed_args); if (rv == APR_SUCCESS) { ap_log_error(APLOG_MARK,APLOG_INFO, 0, NULL, APLOGNO(00434) "Using ConfigArgs of the installed service " "\"%s\".", service_name); } else { ap_log_error(APLOG_MARK,APLOG_WARNING, rv, NULL, APLOGNO(00435) "No installed ConfigArgs for the service " "\"%s\", using Apache defaults.", service_name); } } else { ap_log_error(APLOG_MARK,APLOG_ERR, service_set, NULL, APLOGNO(00436) "No installed service named \"%s\".", service_name); exit(APEXIT_INIT); } } if (strcasecmp(signal_arg, "install") && service_set && service_set != SERVICE_UNSET) { ap_log_error(APLOG_MARK,APLOG_ERR, service_set, NULL, APLOGNO(00437) "No installed service named \"%s\".", service_name); exit(APEXIT_INIT); } /* Track the args actually entered by the user. * These will be used for the -k install parameters, as well as * for the -k start service override arguments. */ inst_argv = (const char * const *)mpm_new_argv->elts + mpm_new_argv->nelts - inst_argc; /* Now, do service install or reconfigure then proceed to * post_config to test the installed configuration. */ if (!strcasecmp(signal_arg, "config")) { /* -k config */ /* Reconfigure the service */ rv = mpm_service_install(process->pool, inst_argc, inst_argv, 1); if (rv != APR_SUCCESS) { exit(rv); } fprintf(stderr,"Testing httpd.conf....\n"); fprintf(stderr,"Errors reported here must be corrected before the " "service can be started.\n"); } else if (!strcasecmp(signal_arg, "install")) { /* -k install */ /* Install the service */ rv = mpm_service_install(process->pool, inst_argc, inst_argv, 0); if (rv != APR_SUCCESS) { exit(rv); } fprintf(stderr,"Testing httpd.conf....\n"); fprintf(stderr,"Errors reported here must be corrected before the " "service can be started.\n"); } process->argc = mpm_new_argv->nelts; process->argv = (const char * const *) mpm_new_argv->elts; } static int winnt_pre_config(apr_pool_t *pconf_, apr_pool_t *plog, apr_pool_t *ptemp) { /* Handle the following SCM aspects in this phase: * * -k runservice [WinNT errors logged from rewrite_args] */ /* Initialize shared static objects. * TODO: Put config related statics into an sconf structure. */ pconf = pconf_; if (ap_exists_config_define("ONE_PROCESS") || ap_exists_config_define("DEBUG")) one_process = -1; /* XXX: presume proper privilages; one nice thing would be * a loud emit if running as "LocalSystem"/"SYSTEM" to indicate * they should change to a user with write access to logs/ alone. */ ap_sys_privileges_handlers(1); if (!strcasecmp(signal_arg, "runservice") && (service_to_start_success != APR_SUCCESS)) { ap_log_error(APLOG_MARK,APLOG_CRIT, service_to_start_success, NULL, APLOGNO(00438) "%s: Unable to start the service manager.", service_name); exit(APEXIT_INIT); } else if (ap_state_query(AP_SQ_RUN_MODE) == AP_SQ_RM_NORMAL && !one_process && !my_generation) { /* Open a null handle to soak stdout in this process. * We need to emulate apr_proc_detach, unix performs this * same check in the pre_config hook (although it is * arguably premature). Services already fixed this. */ apr_file_t *nullfile; apr_status_t rv; apr_pool_t *pproc = apr_pool_parent_get(pconf); if ((rv = apr_file_open(&nullfile, "NUL", APR_READ | APR_WRITE, APR_OS_DEFAULT, pproc)) == APR_SUCCESS) { apr_file_t *nullstdout; if (apr_file_open_stdout(&nullstdout, pproc) == APR_SUCCESS) apr_file_dup2(nullstdout, nullfile, pproc); apr_file_close(nullfile); } } ap_listen_pre_config(); thread_limit = DEFAULT_THREAD_LIMIT; ap_threads_per_child = DEFAULT_THREADS_PER_CHILD; return OK; } static int winnt_check_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec* s) { int is_parent; int startup = 0; /* We want this only in the parent and only the first time around */ is_parent = (parent_pid == my_pid); if (is_parent && ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) { startup = 1; } if (thread_limit > MAX_THREAD_LIMIT) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00439) "WARNING: ThreadLimit of %d exceeds compile-time " "limit of %d threads, decreasing to %d.", thread_limit, MAX_THREAD_LIMIT, MAX_THREAD_LIMIT); } else if (is_parent) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00440) "ThreadLimit of %d exceeds compile-time limit " "of %d, decreasing to match", thread_limit, MAX_THREAD_LIMIT); } thread_limit = MAX_THREAD_LIMIT; } else if (thread_limit < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00441) "WARNING: ThreadLimit of %d not allowed, " "increasing to 1.", thread_limit); } else if (is_parent) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00442) "ThreadLimit of %d not allowed, increasing to 1", thread_limit); } thread_limit = 1; } /* You cannot change ThreadLimit across a restart; ignore * any such attempts. */ if (!first_thread_limit) { first_thread_limit = thread_limit; } else if (thread_limit != first_thread_limit) { /* Don't need a startup console version here */ if (is_parent) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00443) "changing ThreadLimit to %d from original value " "of %d not allowed during restart", thread_limit, first_thread_limit); } thread_limit = first_thread_limit; } if (ap_threads_per_child > thread_limit) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00444) "WARNING: ThreadsPerChild of %d exceeds ThreadLimit " "of %d threads, decreasing to %d. To increase, please " "see the ThreadLimit directive.", ap_threads_per_child, thread_limit, thread_limit); } else if (is_parent) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00445) "ThreadsPerChild of %d exceeds ThreadLimit " "of %d, decreasing to match", ap_threads_per_child, thread_limit); } ap_threads_per_child = thread_limit; } else if (ap_threads_per_child < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00446) "WARNING: ThreadsPerChild of %d not allowed, " "increasing to 1.", ap_threads_per_child); } else if (is_parent) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00447) "ThreadsPerChild of %d not allowed, increasing to 1", ap_threads_per_child); } ap_threads_per_child = 1; } return OK; } static int winnt_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec* s) { apr_status_t rv = 0; /* Handle the following SCM aspects in this phase: * * -k install (catch and exit as install was handled in rewrite_args) * -k config (catch and exit as config was handled in rewrite_args) * -k start * -k restart * -k runservice [Win95, only once - after we parsed the config] * * because all of these signals are useful _only_ if there * is a valid conf\httpd.conf environment to start. * * We reached this phase by avoiding errors that would cause * these options to fail unexpectedly in another process. */ if (!strcasecmp(signal_arg, "install")) { /* Service install happens in the rewrite_args hooks. If we * made it this far, the server configuration is clean and the * service will successfully start. */ apr_pool_destroy(s->process->pool); apr_terminate(); exit(0); } if (!strcasecmp(signal_arg, "config")) { /* Service reconfiguration happens in the rewrite_args hooks. If we * made it this far, the server configuration is clean and the * service will successfully start. */ apr_pool_destroy(s->process->pool); apr_terminate(); exit(0); } if (!strcasecmp(signal_arg, "start")) { ap_listen_rec *lr; /* Close the listening sockets. */ for (lr = ap_listeners; lr; lr = lr->next) { apr_socket_close(lr->sd); lr->active = 0; } rv = mpm_service_start(ptemp, inst_argc, inst_argv); apr_pool_destroy(s->process->pool); apr_terminate(); exit (rv); } if (!strcasecmp(signal_arg, "restart")) { mpm_signal_service(ptemp, 1); apr_pool_destroy(s->process->pool); apr_terminate(); exit (rv); } if (parent_pid == my_pid) { if (ap_state_query(AP_SQ_MAIN_STATE) != AP_SQ_MS_CREATE_PRE_CONFIG && ap_state_query(AP_SQ_CONFIG_GEN) == 1) { /* This code should be run once in the parent and not run * across a restart */ PSECURITY_ATTRIBUTES sa = GetNullACL(); /* returns NULL if invalid (Win95?) */ setup_signal_names(apr_psprintf(pconf, "ap%lu", parent_pid)); ap_log_pid(pconf, ap_pid_fname); /* Create shutdown event, apPID_shutdown, where PID is the parent * Apache process ID. Shutdown is signaled by 'apache -k shutdown'. */ shutdown_event = CreateEvent(sa, FALSE, FALSE, signal_shutdown_name); if (!shutdown_event) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00448) "Parent: Cannot create shutdown event %s", signal_shutdown_name); CleanNullACL((void *)sa); return HTTP_INTERNAL_SERVER_ERROR; } /* Create restart event, apPID_restart, where PID is the parent * Apache process ID. Restart is signaled by 'apache -k restart'. */ restart_event = CreateEvent(sa, FALSE, FALSE, signal_restart_name); if (!restart_event) { CloseHandle(shutdown_event); ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00449) "Parent: Cannot create restart event %s", signal_restart_name); CleanNullACL((void *)sa); return HTTP_INTERNAL_SERVER_ERROR; } CleanNullACL((void *)sa); /* Create the start mutex, as an unnamed object for security. * Ths start mutex is used during a restart to prevent more than * one child process from entering the accept loop at once. */ rv = apr_proc_mutex_create(&start_mutex, NULL, APR_LOCK_DEFAULT, ap_server_conf->process->pool); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK,APLOG_ERR, rv, ap_server_conf, APLOGNO(00450) "%s: Unable to create the start_mutex.", service_name); return HTTP_INTERNAL_SERVER_ERROR; } } /* Always reset our console handler to be the first, even on a restart * because some modules (e.g. mod_perl) might have set a console * handler to terminate the process. */ if (strcasecmp(signal_arg, "runservice")) mpm_start_console_handler(); } else /* parent_pid != my_pid */ { mpm_start_child_console_handler(); } return OK; } /* This really should be a post_config hook, but the error log is already * redirected by that point, so we need to do this in the open_logs phase. */ static int winnt_open_logs(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { /* Initialize shared static objects. */ if (parent_pid != my_pid) { return OK; } /* We cannot initialize our listeners if we are restarting * (the parent process already has glomed on to them) * nor should we do so for service reconfiguration * (since the service may already be running.) */ if (!strcasecmp(signal_arg, "restart") || !strcasecmp(signal_arg, "config")) { return OK; } if (ap_setup_listeners(s) < 1) { ap_log_error(APLOG_MARK, APLOG_ALERT|APLOG_STARTUP, 0, NULL, APLOGNO(00451) "no listening sockets available, shutting down"); return !OK; } return OK; } static void winnt_child_init(apr_pool_t *pchild, struct server_rec *s) { apr_status_t rv; setup_signal_names(apr_psprintf(pchild, "ap%lu", parent_pid)); /* This is a child process, not in single process mode */ if (!one_process) { /* Set up events and the scoreboard */ get_handles_from_parent(s, &exit_event, &start_mutex, &ap_scoreboard_shm); /* Set up the listeners */ get_listeners_from_parent(s); /* Done reading from the parent, close that channel */ CloseHandle(pipe); } else { /* Single process mode - this lock doesn't even need to exist */ rv = apr_proc_mutex_create(&start_mutex, signal_name_prefix, APR_LOCK_DEFAULT, s->process->pool); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK,APLOG_ERR, rv, ap_server_conf, APLOGNO(00452) "%s child: Unable to init the start_mutex.", service_name); exit(APEXIT_CHILDINIT); } /* Borrow the shutdown_even as our _child_ loop exit event */ exit_event = shutdown_event; } } static int winnt_run(apr_pool_t *_pconf, apr_pool_t *plog, server_rec *s ) { static int restart = 0; /* Default is "not a restart" */ /* ### If non-graceful restarts are ever introduced - we need to rerun * the pre_mpm hook on subsequent non-graceful restarts. But Win32 * has only graceful style restarts - and we need this hook to act * the same on Win32 as on Unix. */ if (!restart && ((parent_pid == my_pid) || one_process)) { /* Set up the scoreboard. */ if (ap_run_pre_mpm(s->process->pool, SB_SHARED) != OK) { return !OK; } } if ((parent_pid != my_pid) || one_process) { /* The child process or in one_process (debug) mode */ ap_log_error(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, ap_server_conf, APLOGNO(00453) "Child process is running"); child_main(pconf, parent_pid); ap_log_error(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, ap_server_conf, APLOGNO(00454) "Child process is exiting"); return DONE; } else { /* A real-honest to goodness parent */ ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00455) "%s configured -- resuming normal operations", ap_get_server_description()); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00456) "Server built: %s", ap_get_server_built()); ap_log_command_line(plog, s); ap_log_mpm_common(s); restart = master_main(ap_server_conf, shutdown_event, restart_event); if (!restart) { /* Shutting down. Clean up... */ ap_remove_pid(pconf, ap_pid_fname); apr_proc_mutex_destroy(start_mutex); CloseHandle(restart_event); CloseHandle(shutdown_event); return DONE; } } return OK; /* Restart */ } static void winnt_hooks(apr_pool_t *p) { /* Our open_logs hook function must run before the core's, or stderr * will be redirected to a file, and the messages won't print to the * console. */ static const char *const aszSucc[] = {"core.c", NULL}; ap_hook_pre_config(winnt_pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_check_config(winnt_check_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(winnt_post_config, NULL, NULL, 0); ap_hook_child_init(winnt_child_init, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_open_logs(winnt_open_logs, NULL, aszSucc, APR_HOOK_REALLY_FIRST); ap_hook_mpm(winnt_run, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm_query(winnt_query, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm_get_name(winnt_get_name, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(mpm_winnt) = { MPM20_MODULE_STUFF, winnt_rewrite_args, /* hook to run before apache parses args */ NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ winnt_cmds, /* command apr_table_t */ winnt_hooks /* register_hooks */ }; #endif /* def WIN32 */ httpd-2.4.41/server/mpm/winnt/config3.m40000644000000000000500000000017411274040000016252 0ustar rootsrcwinnt_objects="child.lo mpm_winnt.lo nt_eventlog.lo service.lo" APACHE_MPM_MODULE(winnt, $enable_mpm_winnt, $winnt_objects) httpd-2.4.41/server/mpm/winnt/mpm_default.h0000644000000000000500000000403711711754075017154 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file winnt/mpm_default.h * @brief win32 MPM defaults * * @defgroup APACHE_MPM_WINNT WinNT MPM * @ingroup APACHE_INTERNAL * @{ */ #ifndef APACHE_MPM_DEFAULT_H #define APACHE_MPM_DEFAULT_H /* Default limit on the maximum setting of the ThreadsPerChild configuration * directive. This limit can be overridden with the ThreadLimit directive. * This limit directly influences the amount of shared storage that is allocated * for the scoreboard. DEFAULT_THREAD_LIMIT represents a good compromise * between scoreboard size and the ability of the server to handle the most * common installation requirements. */ #ifndef DEFAULT_THREAD_LIMIT #define DEFAULT_THREAD_LIMIT 1920 #endif /* The ThreadLimit directive can be used to override the DEFAULT_THREAD_LIMIT. * ThreadLimit cannot be tuned larger than MAX_THREAD_LIMIT. * This is a sort of compile-time limit to help catch typos. */ #ifndef MAX_THREAD_LIMIT #define MAX_THREAD_LIMIT 15000 #endif /* Number of threads started in the child process in the absence * of a ThreadsPerChild configuration directive */ #ifndef DEFAULT_THREADS_PER_CHILD #define DEFAULT_THREADS_PER_CHILD 64 #endif /* Max number of child processes allowed. */ #define HARD_SERVER_LIMIT 1 #endif /* AP_MPM_DEFAULT_H */ /** @} */ httpd-2.4.41/server/mpm/winnt/child.c0000644000000000000500000014126513351171147015735 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifdef WIN32 #include "apr.h" #include #include "httpd.h" #include "http_main.h" #include "http_log.h" #include "http_config.h" /* for read_config */ #include "http_core.h" /* for get_remote_host */ #include "http_connection.h" #include "http_vhost.h" /* for ap_update_vhost_given_ip */ #include "apr_portable.h" #include "apr_thread_proc.h" #include "apr_getopt.h" #include "apr_strings.h" #include "apr_lib.h" #include "apr_shm.h" #include "apr_thread_mutex.h" #include "ap_mpm.h" #include "ap_config.h" #include "ap_listen.h" #include "mpm_default.h" #include "mpm_winnt.h" #include "mpm_common.h" #include #include "apr_atomic.h" #include "apr_buckets.h" #include "scoreboard.h" #ifdef __MINGW32__ #include #ifndef WSAID_ACCEPTEX #define WSAID_ACCEPTEX \ {0xb5367df1, 0xcbac, 0x11cf, {0x95, 0xca, 0x00, 0x80, 0x5f, 0x48, 0xa1, 0x92}} typedef BOOL (WINAPI *LPFN_ACCEPTEX)(SOCKET, SOCKET, PVOID, DWORD, DWORD, DWORD, LPDWORD, LPOVERLAPPED); #endif /* WSAID_ACCEPTEX */ #ifndef WSAID_GETACCEPTEXSOCKADDRS #define WSAID_GETACCEPTEXSOCKADDRS \ {0xb5367df2, 0xcbac, 0x11cf, {0x95, 0xca, 0x00, 0x80, 0x5f, 0x48, 0xa1, 0x92}} typedef VOID (WINAPI *LPFN_GETACCEPTEXSOCKADDRS)(PVOID, DWORD, DWORD, DWORD, struct sockaddr **, LPINT, struct sockaddr **, LPINT); #endif /* WSAID_GETACCEPTEXSOCKADDRS */ #endif /* __MINGW32__ */ /* * The Windows MPM uses a queue of completion contexts that it passes * between the accept threads and the worker threads. Declare the * functions to access the queue and the structures passed on the * queue in the header file to enable modules to access them * if necessary. The queue resides in the MPM. */ #ifdef CONTAINING_RECORD #undef CONTAINING_RECORD #endif #define CONTAINING_RECORD(address, type, field) ((type *)( \ (char *)(address) - \ (char *)(&((type *)0)->field))) #if APR_HAVE_IPV6 #define PADDED_ADDR_SIZE (sizeof(SOCKADDR_IN6)+16) #else #define PADDED_ADDR_SIZE (sizeof(SOCKADDR_IN)+16) #endif APLOG_USE_MODULE(mpm_winnt); /* Queue for managing the passing of winnt_conn_ctx_t between * the accept and worker threads. */ typedef struct winnt_conn_ctx_t_s { struct winnt_conn_ctx_t_s *next; OVERLAPPED overlapped; apr_socket_t *sock; SOCKET accept_socket; char buff[2*PADDED_ADDR_SIZE]; struct sockaddr *sa_server; int sa_server_len; struct sockaddr *sa_client; int sa_client_len; apr_pool_t *ptrans; apr_bucket_alloc_t *ba; apr_bucket *data; #if APR_HAVE_IPV6 short socket_family; #endif } winnt_conn_ctx_t; typedef enum { IOCP_CONNECTION_ACCEPTED = 1, IOCP_WAIT_FOR_RECEIVE = 2, IOCP_WAIT_FOR_TRANSMITFILE = 3, IOCP_SHUTDOWN = 4 } io_state_e; static apr_pool_t *pchild; static int shutdown_in_progress = 0; static int workers_may_exit = 0; static unsigned int g_blocked_threads = 0; static HANDLE max_requests_per_child_event; static apr_thread_mutex_t *child_lock; static apr_thread_mutex_t *qlock; static winnt_conn_ctx_t *qhead = NULL; static winnt_conn_ctx_t *qtail = NULL; static apr_uint32_t num_completion_contexts = 0; static apr_uint32_t max_num_completion_contexts = 0; static HANDLE ThreadDispatchIOCP = NULL; static HANDLE qwait_event = NULL; static void mpm_recycle_completion_context(winnt_conn_ctx_t *context) { /* Recycle the completion context. * - clear the ptrans pool * - put the context on the queue to be consumed by the accept thread * Note: * context->accept_socket may be in a disconnected but reusable * state so -don't- close it. */ if (context) { HANDLE saved_event; apr_pool_clear(context->ptrans); context->ba = apr_bucket_alloc_create(context->ptrans); context->next = NULL; saved_event = context->overlapped.hEvent; memset(&context->overlapped, 0, sizeof(context->overlapped)); context->overlapped.hEvent = saved_event; ResetEvent(context->overlapped.hEvent); apr_thread_mutex_lock(qlock); if (qtail) { qtail->next = context; } else { qhead = context; SetEvent(qwait_event); } qtail = context; apr_thread_mutex_unlock(qlock); } } static winnt_conn_ctx_t *mpm_get_completion_context(int *timeout) { apr_status_t rv; winnt_conn_ctx_t *context = NULL; *timeout = 0; while (1) { /* Grab a context off the queue */ apr_thread_mutex_lock(qlock); if (qhead) { context = qhead; qhead = qhead->next; if (!qhead) qtail = NULL; } else { ResetEvent(qwait_event); } apr_thread_mutex_unlock(qlock); if (!context) { /* We failed to grab a context off the queue, consider allocating * a new one out of the child pool. There may be up to * (ap_threads_per_child + num_listeners) contexts in the system * at once. */ if (num_completion_contexts >= max_num_completion_contexts) { /* All workers are busy, need to wait for one */ static int reported = 0; if (!reported) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(00326) "Server ran out of threads to serve " "requests. Consider raising the " "ThreadsPerChild setting"); reported = 1; } /* Wait for a worker to free a context. Once per second, give * the caller a chance to check for shutdown. If the wait * succeeds, get the context off the queue. It must be * available, since there's only one consumer. */ rv = WaitForSingleObject(qwait_event, 1000); if (rv == WAIT_OBJECT_0) continue; else { if (rv == WAIT_TIMEOUT) { /* somewhat-normal condition where threads are busy */ ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(00327) "mpm_get_completion_context: Failed to get a " "free context within 1 second"); *timeout = 1; } else { /* should be the unexpected, generic WAIT_FAILED */ ap_log_error(APLOG_MARK, APLOG_WARNING, apr_get_os_error(), ap_server_conf, APLOGNO(00328) "mpm_get_completion_context: " "WaitForSingleObject failed to get free context"); } return NULL; } } else { /* Allocate another context. * Note: Multiple failures in the next two steps will cause * the pchild pool to 'leak' storage. I don't think this * is worth fixing... */ apr_allocator_t *allocator; apr_thread_mutex_lock(child_lock); context = (winnt_conn_ctx_t *)apr_pcalloc(pchild, sizeof(winnt_conn_ctx_t)); context->overlapped.hEvent = CreateEvent(NULL, TRUE, FALSE, NULL); if (context->overlapped.hEvent == NULL) { /* Hopefully this is a temporary condition ... */ ap_log_error(APLOG_MARK, APLOG_WARNING, apr_get_os_error(), ap_server_conf, APLOGNO(00329) "mpm_get_completion_context: " "CreateEvent failed."); apr_thread_mutex_unlock(child_lock); return NULL; } /* Create the transaction pool */ apr_allocator_create(&allocator); apr_allocator_max_free_set(allocator, ap_max_mem_free); rv = apr_pool_create_ex(&context->ptrans, pchild, NULL, allocator); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, ap_server_conf, APLOGNO(00330) "mpm_get_completion_context: Failed " "to create the transaction pool."); CloseHandle(context->overlapped.hEvent); apr_thread_mutex_unlock(child_lock); return NULL; } apr_allocator_owner_set(allocator, context->ptrans); apr_pool_tag(context->ptrans, "transaction"); context->accept_socket = INVALID_SOCKET; context->ba = apr_bucket_alloc_create(context->ptrans); apr_atomic_inc32(&num_completion_contexts); apr_thread_mutex_unlock(child_lock); break; } } else { /* Got a context from the queue */ break; } } return context; } typedef enum { ACCEPT_FILTER_NONE = 0, ACCEPT_FILTER_CONNECT = 1 } accept_filter_e; static const char * accept_filter_to_string(accept_filter_e accf) { switch (accf) { case ACCEPT_FILTER_NONE: return "none"; case ACCEPT_FILTER_CONNECT: return "connect"; default: return ""; } } static accept_filter_e get_accept_filter(const char *protocol) { core_server_config *core_sconf; const char *name; core_sconf = ap_get_core_module_config(ap_server_conf->module_config); name = apr_table_get(core_sconf->accf_map, protocol); if (!name) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ap_server_conf, APLOGNO(02531) "winnt_accept: Listen protocol '%s' has " "no known accept filter. Using 'none' instead", protocol); return ACCEPT_FILTER_NONE; } else if (strcmp(name, "data") == 0) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, ap_server_conf, APLOGNO(03458) "winnt_accept: 'data' accept filter is no " "longer supported. Using 'connect' instead"); return ACCEPT_FILTER_CONNECT; } else if (strcmp(name, "connect") == 0) { return ACCEPT_FILTER_CONNECT; } else if (strcmp(name, "none") == 0) { return ACCEPT_FILTER_NONE; } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ap_server_conf, APLOGNO(00331) "winnt_accept: unrecognized AcceptFilter '%s', " "only 'data', 'connect' or 'none' are valid. " "Using 'none' instead", name); return ACCEPT_FILTER_NONE; } } /* Windows NT/2000 specific code... * Accept processing for on Windows NT uses a producer/consumer queue * model. An accept thread accepts connections off the network then issues * PostQueuedCompletionStatus() to awake a thread blocked on the ThreadDispatch * IOCompletionPort. * * winnt_accept() * One or more accept threads run in this function, each of which accepts * connections off the network and calls PostQueuedCompletionStatus() to * queue an io completion packet to the ThreadDispatch IOCompletionPort. * winnt_get_connection() * Worker threads block on the ThreadDispatch IOCompletionPort awaiting * connections to service. */ #define MAX_ACCEPTEX_ERR_COUNT 10 static unsigned int __stdcall winnt_accept(void *lr_) { ap_listen_rec *lr = (ap_listen_rec *)lr_; apr_os_sock_info_t sockinfo; winnt_conn_ctx_t *context = NULL; DWORD BytesRead; SOCKET nlsd; LPFN_ACCEPTEX lpfnAcceptEx = NULL; LPFN_GETACCEPTEXSOCKADDRS lpfnGetAcceptExSockaddrs = NULL; GUID GuidAcceptEx = WSAID_ACCEPTEX; GUID GuidGetAcceptExSockaddrs = WSAID_GETACCEPTEXSOCKADDRS; int rv; accept_filter_e accf; int err_count = 0; HANDLE events[3]; #if APR_HAVE_IPV6 SOCKADDR_STORAGE ss_listen; int namelen = sizeof(ss_listen); #endif u_long zero = 0; apr_os_sock_get(&nlsd, lr->sd); #if APR_HAVE_IPV6 if (getsockname(nlsd, (struct sockaddr *)&ss_listen, &namelen) == SOCKET_ERROR) { ap_log_error(APLOG_MARK, APLOG_ERR, apr_get_netos_error(), ap_server_conf, APLOGNO(00332) "winnt_accept: getsockname error on listening socket, " "is IPv6 available?"); return 1; } #endif accf = get_accept_filter(lr->protocol); if (accf == ACCEPT_FILTER_CONNECT) { if (WSAIoctl(nlsd, SIO_GET_EXTENSION_FUNCTION_POINTER, &GuidAcceptEx, sizeof GuidAcceptEx, &lpfnAcceptEx, sizeof lpfnAcceptEx, &BytesRead, NULL, NULL) == SOCKET_ERROR) { ap_log_error(APLOG_MARK, APLOG_ERR, apr_get_netos_error(), ap_server_conf, APLOGNO(02322) "winnt_accept: failed to retrieve AcceptEx, try 'AcceptFilter none'"); return 1; } if (WSAIoctl(nlsd, SIO_GET_EXTENSION_FUNCTION_POINTER, &GuidGetAcceptExSockaddrs, sizeof GuidGetAcceptExSockaddrs, &lpfnGetAcceptExSockaddrs, sizeof lpfnGetAcceptExSockaddrs, &BytesRead, NULL, NULL) == SOCKET_ERROR) { ap_log_error(APLOG_MARK, APLOG_ERR, apr_get_netos_error(), ap_server_conf, APLOGNO(02323) "winnt_accept: failed to retrieve GetAcceptExSockaddrs, try 'AcceptFilter none'"); return 1; } /* first, high priority event is an already accepted connection */ events[1] = exit_event; events[2] = max_requests_per_child_event; } else /* accf == ACCEPT_FILTER_NONE */ { reinit: /* target of connect upon too many AcceptEx failures */ /* last, low priority event is a not yet accepted connection */ events[0] = exit_event; events[1] = max_requests_per_child_event; events[2] = CreateEvent(NULL, FALSE, FALSE, NULL); /* The event needs to be removed from the accepted socket, * if not removed from the listen socket prior to accept(), */ rv = WSAEventSelect(nlsd, events[2], FD_ACCEPT); if (rv) { ap_log_error(APLOG_MARK, APLOG_ERR, apr_get_netos_error(), ap_server_conf, APLOGNO(00333) "WSAEventSelect() failed."); CloseHandle(events[2]); return 1; } } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(00334) "Child: Accept thread listening on %pI using AcceptFilter %s", lr->bind_addr, accept_filter_to_string(accf)); while (!shutdown_in_progress) { if (!context) { int timeout; context = mpm_get_completion_context(&timeout); if (!context) { if (!timeout) { /* Hopefully a temporary condition in the provider? */ ++err_count; if (err_count > MAX_ACCEPTEX_ERR_COUNT) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, ap_server_conf, APLOGNO(00335) "winnt_accept: Too many failures grabbing a " "connection ctx. Aborting."); break; } } Sleep(100); continue; } } if (accf == ACCEPT_FILTER_CONNECT) { char *buf; /* Create and initialize the accept socket */ #if APR_HAVE_IPV6 if (context->accept_socket == INVALID_SOCKET) { context->accept_socket = socket(ss_listen.ss_family, SOCK_STREAM, IPPROTO_TCP); context->socket_family = ss_listen.ss_family; } else if (context->socket_family != ss_listen.ss_family) { closesocket(context->accept_socket); context->accept_socket = socket(ss_listen.ss_family, SOCK_STREAM, IPPROTO_TCP); context->socket_family = ss_listen.ss_family; } #else if (context->accept_socket == INVALID_SOCKET) context->accept_socket = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP); #endif if (context->accept_socket == INVALID_SOCKET) { ap_log_error(APLOG_MARK, APLOG_WARNING, apr_get_netos_error(), ap_server_conf, APLOGNO(00336) "winnt_accept: Failed to allocate an accept socket. " "Temporary resource constraint? Try again."); Sleep(100); continue; } buf = context->buff; /* AcceptEx on the completion context. The completion context will be * signaled when a connection is accepted. */ if (!lpfnAcceptEx(nlsd, context->accept_socket, buf, 0, PADDED_ADDR_SIZE, PADDED_ADDR_SIZE, &BytesRead, &context->overlapped)) { rv = apr_get_netos_error(); if ((rv == APR_FROM_OS_ERROR(WSAECONNRESET)) || (rv == APR_FROM_OS_ERROR(WSAEACCES))) { /* We can get here when: * 1) the client disconnects early * 2) handshake was incomplete */ closesocket(context->accept_socket); context->accept_socket = INVALID_SOCKET; continue; } else if ((rv == APR_FROM_OS_ERROR(WSAEINVAL)) || (rv == APR_FROM_OS_ERROR(WSAENOTSOCK))) { /* We can get here when: * 1) TransmitFile does not properly recycle the accept socket (typically * because the client disconnected) * 2) there is VPN or Firewall software installed with * buggy WSAAccept or WSADuplicateSocket implementation * 3) the dynamic address / adapter has changed * Give five chances, then fall back on AcceptFilter 'none' */ closesocket(context->accept_socket); context->accept_socket = INVALID_SOCKET; ++err_count; if (err_count > MAX_ACCEPTEX_ERR_COUNT) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_server_conf, APLOGNO(00337) "Child: Encountered too many AcceptEx " "faults accepting client connections. " "Possible causes: dynamic address renewal, " "or incompatible VPN or firewall software. "); ap_log_error(APLOG_MARK, APLOG_NOTICE, rv, ap_server_conf, APLOGNO(00338) "winnt_mpm: falling back to " "'AcceptFilter none'."); err_count = 0; accf = ACCEPT_FILTER_NONE; } continue; } else if ((rv != APR_FROM_OS_ERROR(ERROR_IO_PENDING)) && (rv != APR_FROM_OS_ERROR(WSA_IO_PENDING))) { closesocket(context->accept_socket); context->accept_socket = INVALID_SOCKET; ++err_count; if (err_count > MAX_ACCEPTEX_ERR_COUNT) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_server_conf, APLOGNO(00339) "Child: Encountered too many AcceptEx " "faults accepting client connections."); ap_log_error(APLOG_MARK, APLOG_NOTICE, rv, ap_server_conf, APLOGNO(00340) "winnt_mpm: falling back to " "'AcceptFilter none'."); err_count = 0; accf = ACCEPT_FILTER_NONE; goto reinit; } continue; } err_count = 0; events[0] = context->overlapped.hEvent; do { rv = WaitForMultipleObjectsEx(3, events, FALSE, INFINITE, TRUE); } while (rv == WAIT_IO_COMPLETION); if (rv == WAIT_OBJECT_0) { if ((context->accept_socket != INVALID_SOCKET) && !GetOverlappedResult((HANDLE)context->accept_socket, &context->overlapped, &BytesRead, FALSE)) { ap_log_error(APLOG_MARK, APLOG_WARNING, apr_get_os_error(), ap_server_conf, APLOGNO(00341) "winnt_accept: Asynchronous AcceptEx failed."); closesocket(context->accept_socket); context->accept_socket = INVALID_SOCKET; } } else { /* exit_event triggered or event handle was closed */ closesocket(context->accept_socket); context->accept_socket = INVALID_SOCKET; break; } if (context->accept_socket == INVALID_SOCKET) { continue; } } err_count = 0; /* Potential optimization; consider handing off to the worker */ /* Inherit the listen socket settings. Required for * shutdown() to work */ if (setsockopt(context->accept_socket, SOL_SOCKET, SO_UPDATE_ACCEPT_CONTEXT, (char *)&nlsd, sizeof(nlsd))) { ap_log_error(APLOG_MARK, APLOG_WARNING, apr_get_netos_error(), ap_server_conf, APLOGNO(00342) "setsockopt(SO_UPDATE_ACCEPT_CONTEXT) failed."); /* Not a failure condition. Keep running. */ } /* Get the local & remote address * TODO; error check */ lpfnGetAcceptExSockaddrs(buf, 0, PADDED_ADDR_SIZE, PADDED_ADDR_SIZE, &context->sa_server, &context->sa_server_len, &context->sa_client, &context->sa_client_len); } else /* accf == ACCEPT_FILTER_NONE */ { /* There is no socket reuse without AcceptEx() */ if (context->accept_socket != INVALID_SOCKET) closesocket(context->accept_socket); /* This could be a persistent event per-listener rather than * per-accept. However, the event needs to be removed from * the target socket if not removed from the listen socket * prior to accept(), or the event select is inherited. * and must be removed from the accepted socket. */ do { rv = WaitForMultipleObjectsEx(3, events, FALSE, INFINITE, TRUE); } while (rv == WAIT_IO_COMPLETION); if (rv != WAIT_OBJECT_0 + 2) { /* not FD_ACCEPT; * exit_event triggered or event handle was closed */ break; } context->sa_server = (void *) context->buff; context->sa_server_len = sizeof(context->buff) / 2; context->sa_client_len = context->sa_server_len; context->sa_client = (void *) (context->buff + context->sa_server_len); context->accept_socket = accept(nlsd, context->sa_server, &context->sa_server_len); if (context->accept_socket == INVALID_SOCKET) { rv = apr_get_netos_error(); if ( rv == APR_FROM_OS_ERROR(WSAECONNRESET) || rv == APR_FROM_OS_ERROR(WSAEINPROGRESS) || rv == APR_FROM_OS_ERROR(WSAEWOULDBLOCK) ) { ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, ap_server_conf, APLOGNO(00343) "accept() failed, retrying."); continue; } /* A more serious error than 'retry', log it */ ap_log_error(APLOG_MARK, APLOG_WARNING, rv, ap_server_conf, APLOGNO(00344) "accept() failed."); if ( rv == APR_FROM_OS_ERROR(WSAEMFILE) || rv == APR_FROM_OS_ERROR(WSAENOBUFS) ) { /* Hopefully a temporary condition in the provider? */ Sleep(100); ++err_count; if (err_count > MAX_ACCEPTEX_ERR_COUNT) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_server_conf, APLOGNO(00345) "Child: Encountered too many accept() " "resource faults, aborting."); break; } continue; } break; } /* Per MSDN, cancel the inherited association of this socket * to the WSAEventSelect API, and restore the state corresponding * to apr_os_sock_make's default assumptions (really, a flaw within * os_sock_make and os_sock_put that it does not query). */ WSAEventSelect(context->accept_socket, 0, 0); err_count = 0; context->sa_server_len = sizeof(context->buff) / 2; if (getsockname(context->accept_socket, context->sa_server, &context->sa_server_len) == SOCKET_ERROR) { ap_log_error(APLOG_MARK, APLOG_WARNING, apr_get_netos_error(), ap_server_conf, APLOGNO(00346) "getsockname failed"); continue; } if ((getpeername(context->accept_socket, context->sa_client, &context->sa_client_len)) == SOCKET_ERROR) { ap_log_error(APLOG_MARK, APLOG_WARNING, apr_get_netos_error(), ap_server_conf, APLOGNO(00347) "getpeername failed"); memset(&context->sa_client, '\0', sizeof(context->sa_client)); } } sockinfo.os_sock = &context->accept_socket; sockinfo.local = context->sa_server; sockinfo.remote = context->sa_client; sockinfo.family = context->sa_server->sa_family; sockinfo.type = SOCK_STREAM; sockinfo.protocol = IPPROTO_TCP; /* Restore the state corresponding to apr_os_sock_make's default * assumption of timeout -1 (really, a flaw of os_sock_make and * os_sock_put that it does not query to determine ->timeout). * XXX: Upon a fix to APR, these three statements should disappear. */ ioctlsocket(context->accept_socket, FIONBIO, &zero); setsockopt(context->accept_socket, SOL_SOCKET, SO_RCVTIMEO, (char *) &zero, sizeof(zero)); setsockopt(context->accept_socket, SOL_SOCKET, SO_SNDTIMEO, (char *) &zero, sizeof(zero)); apr_os_sock_make(&context->sock, &sockinfo, context->ptrans); /* When a connection is received, send an io completion notification * to the ThreadDispatchIOCP. */ PostQueuedCompletionStatus(ThreadDispatchIOCP, BytesRead, IOCP_CONNECTION_ACCEPTED, &context->overlapped); context = NULL; } if (accf == ACCEPT_FILTER_NONE) CloseHandle(events[2]); if (!shutdown_in_progress) { /* Yow, hit an irrecoverable error! Tell the child to die. */ SetEvent(exit_event); } ap_log_error(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, ap_server_conf, APLOGNO(00348) "Child: Accept thread exiting."); return 0; } static winnt_conn_ctx_t *winnt_get_connection(winnt_conn_ctx_t *context) { int rc; DWORD BytesRead; LPOVERLAPPED pol; #ifdef _WIN64 ULONG_PTR CompKey; #else DWORD CompKey; #endif mpm_recycle_completion_context(context); apr_atomic_inc32(&g_blocked_threads); while (1) { if (workers_may_exit) { apr_atomic_dec32(&g_blocked_threads); return NULL; } rc = GetQueuedCompletionStatus(ThreadDispatchIOCP, &BytesRead, &CompKey, &pol, INFINITE); if (!rc) { rc = apr_get_os_error(); ap_log_error(APLOG_MARK, APLOG_DEBUG, rc, ap_server_conf, APLOGNO(00349) "Child: GetQueuedCompletionStatus returned %d", rc); continue; } switch (CompKey) { case IOCP_CONNECTION_ACCEPTED: context = CONTAINING_RECORD(pol, winnt_conn_ctx_t, overlapped); break; case IOCP_SHUTDOWN: apr_atomic_dec32(&g_blocked_threads); return NULL; default: apr_atomic_dec32(&g_blocked_threads); return NULL; } break; } apr_atomic_dec32(&g_blocked_threads); return context; } /* * worker_main() * Main entry point for the worker threads. Worker threads block in * win*_get_connection() awaiting a connection to service. */ static DWORD __stdcall worker_main(void *thread_num_val) { apr_thread_t *thd; apr_os_thread_t osthd; static int requests_this_child = 0; winnt_conn_ctx_t *context = NULL; int thread_num = (int)thread_num_val; ap_sb_handle_t *sbh; conn_rec *c; apr_int32_t disconnected; osthd = apr_os_thread_current(); while (1) { ap_update_child_status_from_indexes(0, thread_num, SERVER_READY, NULL); /* Grab a connection off the network */ context = winnt_get_connection(context); if (!context) { /* Time for the thread to exit */ break; } /* Have we hit MaxConnectionsPerChild connections? */ if (ap_max_requests_per_child) { requests_this_child++; if (requests_this_child > ap_max_requests_per_child) { SetEvent(max_requests_per_child_event); } } ap_create_sb_handle(&sbh, context->ptrans, 0, thread_num); c = ap_run_create_connection(context->ptrans, ap_server_conf, context->sock, thread_num, sbh, context->ba); if (!c) { /* ap_run_create_connection closes the socket on failure */ context->accept_socket = INVALID_SOCKET; continue; } thd = NULL; apr_os_thread_put(&thd, &osthd, context->ptrans); c->current_thread = thd; ap_process_connection(c, context->sock); ap_lingering_close(c); apr_socket_opt_get(context->sock, APR_SO_DISCONNECTED, &disconnected); if (!disconnected) { context->accept_socket = INVALID_SOCKET; } } ap_update_child_status_from_indexes(0, thread_num, SERVER_DEAD, NULL); return 0; } static void cleanup_thread(HANDLE *handles, int *thread_cnt, int thread_to_clean) { int i; CloseHandle(handles[thread_to_clean]); for (i = thread_to_clean; i < ((*thread_cnt) - 1); i++) handles[i] = handles[i + 1]; (*thread_cnt)--; } /* * child_main() * Entry point for the main control thread for the child process. * This thread creates the accept thread, worker threads and * monitors the child process for maintenance and shutdown * events. */ static void create_listener_thread(void) { unsigned tid; int num_listeners = 0; /* Start an accept thread per listener * XXX: Why would we have a NULL sd in our listeners? */ ap_listen_rec *lr; /* Number of completion_contexts allowed in the system is * (ap_threads_per_child + num_listeners). We need the additional * completion contexts to prevent server hangs when ThreadsPerChild * is configured to something less than or equal to the number * of listeners. This is not a usual case, but people have * encountered it. */ for (lr = ap_listeners; lr ; lr = lr->next) { num_listeners++; } max_num_completion_contexts = ap_threads_per_child + num_listeners; /* Now start a thread per listener */ for (lr = ap_listeners; lr; lr = lr->next) { if (lr->sd != NULL) { /* A smaller stack is sufficient. * To convert to CreateThread, the returned handle cannot be * ignored, it must be closed/joined. */ _beginthreadex(NULL, 65536, winnt_accept, (void *) lr, stack_res_flag, &tid); } } } void child_main(apr_pool_t *pconf, DWORD parent_pid) { apr_status_t status; apr_hash_t *ht; ap_listen_rec *lr; HANDLE child_events[3]; HANDLE *child_handles; int listener_started = 0; int threads_created = 0; int watch_thread; int time_remains; int cld; DWORD tid; int rv; int i; int num_events; /* Get a sub context for global allocations in this child, so that * we can have cleanups occur when the child exits. */ apr_pool_create(&pchild, pconf); apr_pool_tag(pchild, "pchild"); ap_run_child_init(pchild, ap_server_conf); ht = apr_hash_make(pchild); /* Initialize the child_events */ max_requests_per_child_event = CreateEvent(NULL, TRUE, FALSE, NULL); if (!max_requests_per_child_event) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00350) "Child: Failed to create a max_requests event."); exit(APEXIT_CHILDINIT); } child_events[0] = exit_event; child_events[1] = max_requests_per_child_event; if (parent_pid != my_pid) { child_events[2] = OpenProcess(SYNCHRONIZE, FALSE, parent_pid); if (child_events[2] == NULL) { num_events = 2; ap_log_error(APLOG_MARK, APLOG_ERR, apr_get_os_error(), ap_server_conf, APLOGNO(02643) "Child: Failed to open handle to parent process %ld; " "will not react to abrupt parent termination", parent_pid); } else { num_events = 3; } } else { /* presumably -DONE_PROCESS */ child_events[2] = NULL; num_events = 2; } /* * Wait until we have permission to start accepting connections. * start_mutex is used to ensure that only one child ever * goes into the listen/accept loop at once. */ status = apr_proc_mutex_lock(start_mutex); if (status != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, status, ap_server_conf, APLOGNO(00351) "Child: Failed to acquire the start_mutex. " "Process will exit."); exit(APEXIT_CHILDINIT); } ap_log_error(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, ap_server_conf, APLOGNO(00352) "Child: Acquired the start mutex."); /* * Create the worker thread dispatch IOCompletionPort */ /* Create the worker thread dispatch IOCP */ ThreadDispatchIOCP = CreateIoCompletionPort(INVALID_HANDLE_VALUE, NULL, 0, 0); apr_thread_mutex_create(&qlock, APR_THREAD_MUTEX_DEFAULT, pchild); qwait_event = CreateEvent(NULL, TRUE, FALSE, NULL); if (!qwait_event) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00353) "Child: Failed to create a qwait event."); exit(APEXIT_CHILDINIT); } /* * Create the pool of worker threads */ ap_log_error(APLOG_MARK, APLOG_NOTICE, APR_SUCCESS, ap_server_conf, APLOGNO(00354) "Child: Starting %d worker threads.", ap_threads_per_child); child_handles = (HANDLE) apr_pcalloc(pchild, ap_threads_per_child * sizeof(HANDLE)); apr_thread_mutex_create(&child_lock, APR_THREAD_MUTEX_DEFAULT, pchild); while (1) { for (i = 0; i < ap_threads_per_child; i++) { int *score_idx; int status = ap_scoreboard_image->servers[0][i].status; if (status != SERVER_GRACEFUL && status != SERVER_DEAD) { continue; } ap_update_child_status_from_indexes(0, i, SERVER_STARTING, NULL); child_handles[i] = CreateThread(NULL, ap_thread_stacksize, worker_main, (void *) i, stack_res_flag, &tid); if (child_handles[i] == 0) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00355) "Child: CreateThread failed. Unable to " "create all worker threads. Created %d of the %d " "threads requested with the ThreadsPerChild " "configuration directive.", threads_created, ap_threads_per_child); ap_signal_parent(SIGNAL_PARENT_SHUTDOWN); goto shutdown; } threads_created++; /* Save the score board index in ht keyed to the thread handle. * We need this when cleaning up threads down below... */ apr_thread_mutex_lock(child_lock); score_idx = apr_pcalloc(pchild, sizeof(int)); *score_idx = i; apr_hash_set(ht, &child_handles[i], sizeof(HANDLE), score_idx); apr_thread_mutex_unlock(child_lock); } /* Start the listener only when workers are available */ if (!listener_started && threads_created) { create_listener_thread(); listener_started = 1; winnt_mpm_state = AP_MPMQ_RUNNING; } if (threads_created == ap_threads_per_child) { break; } /* Check to see if the child has been told to exit */ if (WaitForSingleObject(exit_event, 0) != WAIT_TIMEOUT) { break; } /* wait for previous generation to clean up an entry in the scoreboard */ apr_sleep(1 * APR_USEC_PER_SEC); } /* Wait for one of these events: * exit_event: * The exit_event is signaled by the parent process to notify * the child that it is time to exit. * * max_requests_per_child_event: * This event is signaled by the worker threads to indicate that * the process has handled MaxConnectionsPerChild connections. * * parent process exiting * * TIMEOUT: * To do periodic maintenance on the server (check for thread exits, * number of completion contexts, etc.) * * XXX: thread exits *aren't* being checked. * * XXX: other_child - we need the process handles to the other children * in order to map them to apr_proc_other_child_read (which is not * named well, it's more like a_p_o_c_died.) * * XXX: however - if we get a_p_o_c handle inheritance working, and * the parent process creates other children and passes the pipes * to our worker processes, then we have no business doing such * things in the child_main loop, but should happen in master_main. */ while (1) { #if !APR_HAS_OTHER_CHILD rv = WaitForMultipleObjects(num_events, (HANDLE *)child_events, FALSE, INFINITE); cld = rv - WAIT_OBJECT_0; #else /* THIS IS THE EXPECTED BUILD VARIATION -- APR_HAS_OTHER_CHILD */ rv = WaitForMultipleObjects(num_events, (HANDLE *)child_events, FALSE, 1000); cld = rv - WAIT_OBJECT_0; if (rv == WAIT_TIMEOUT) { apr_proc_other_child_refresh_all(APR_OC_REASON_RUNNING); } else #endif if (rv == WAIT_FAILED) { /* Something serious is wrong */ ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(00356) "Child: WAIT_FAILED -- shutting down server"); /* check handle validity to identify a possible culprit */ for (i = 0; i < num_events; i++) { DWORD out_flags; if (0 == GetHandleInformation(child_events[i], &out_flags)) { ap_log_error(APLOG_MARK, APLOG_CRIT, apr_get_os_error(), ap_server_conf, APLOGNO(02644) "Child: Event handle #%d (%pp) is invalid", i, child_events[i]); } } break; } else if (cld == 0) { /* Exit event was signaled */ ap_log_error(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, ap_server_conf, APLOGNO(00357) "Child: Exit event signaled. Child process is " "ending."); break; } else if (cld == 2) { /* The parent is dead. Shutdown the child process. */ ap_log_error(APLOG_MARK, APLOG_CRIT, 0, ap_server_conf, APLOGNO(02538) "Child: Parent process exited abruptly. Child process " "is ending"); break; } else { /* MaxConnectionsPerChild event set by the worker threads. * Signal the parent to restart */ ap_log_error(APLOG_MARK, APLOG_NOTICE, APR_SUCCESS, ap_server_conf, APLOGNO(00358) "Child: Process exiting because it reached " "MaxConnectionsPerChild. Signaling the parent to " "restart a new child process."); ap_signal_parent(SIGNAL_PARENT_RESTART); break; } } /* * Time to shutdown the child process */ shutdown: winnt_mpm_state = AP_MPMQ_STOPPING; /* Close the listening sockets. Note, we must close the listeners * before closing any accept sockets pending in AcceptEx to prevent * memory leaks in the kernel. */ for (lr = ap_listeners; lr ; lr = lr->next) { apr_socket_close(lr->sd); } /* Shutdown listener threads and pending AcceptEx sockets * but allow the worker threads to continue consuming from * the queue of accepted connections. */ shutdown_in_progress = 1; Sleep(1000); /* Tell the worker threads to exit */ workers_may_exit = 1; /* Release the start_mutex to let the new process (in the restart * scenario) a chance to begin accepting and servicing requests */ rv = apr_proc_mutex_unlock(start_mutex); if (rv == APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, ap_server_conf, APLOGNO(00359) "Child: Released the start mutex"); } else { ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_server_conf, APLOGNO(00360) "Child: Failure releasing the start mutex"); } /* Shutdown the worker threads * Post worker threads blocked on the ThreadDispatch IOCompletion port */ while (g_blocked_threads > 0) { ap_log_error(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, ap_server_conf, APLOGNO(00361) "Child: %d threads blocked on the completion port", g_blocked_threads); for (i=g_blocked_threads; i > 0; i--) { PostQueuedCompletionStatus(ThreadDispatchIOCP, 0, IOCP_SHUTDOWN, NULL); } Sleep(1000); } /* Empty the accept queue of completion contexts */ apr_thread_mutex_lock(qlock); while (qhead) { CloseHandle(qhead->overlapped.hEvent); closesocket(qhead->accept_socket); qhead = qhead->next; } apr_thread_mutex_unlock(qlock); /* Give busy threads a chance to service their connections * (no more than the global server timeout period which * we track in msec remaining). */ watch_thread = 0; time_remains = (int)(ap_server_conf->timeout / APR_TIME_C(1000)); while (threads_created) { int nFailsafe = MAXIMUM_WAIT_OBJECTS; DWORD dwRet; /* Every time we roll over to wait on the first group * of MAXIMUM_WAIT_OBJECTS threads, take a breather, * and infrequently update the error log. */ if (watch_thread >= threads_created) { if ((time_remains -= 100) < 0) break; /* Every 30 seconds give an update */ if ((time_remains % 30000) == 0) { ap_log_error(APLOG_MARK, APLOG_NOTICE, APR_SUCCESS, ap_server_conf, APLOGNO(00362) "Child: Waiting %d more seconds " "for %d worker threads to finish.", time_remains / 1000, threads_created); } /* We'll poll from the top, 10 times per second */ Sleep(100); watch_thread = 0; } /* Fairness, on each iteration we will pick up with the thread * after the one we just removed, even if it's a single thread. * We don't block here. */ dwRet = WaitForMultipleObjects(min(threads_created - watch_thread, MAXIMUM_WAIT_OBJECTS), child_handles + watch_thread, 0, 0); if (dwRet == WAIT_FAILED) { break; } if (dwRet == WAIT_TIMEOUT) { /* none ready */ watch_thread += MAXIMUM_WAIT_OBJECTS; continue; } else if (dwRet >= WAIT_ABANDONED_0) { /* We just got the ownership of the object, which * should happen at most MAXIMUM_WAIT_OBJECTS times. * It does NOT mean that the object is signaled. */ if ((nFailsafe--) < 1) break; } else { watch_thread += (dwRet - WAIT_OBJECT_0); if (watch_thread >= threads_created) break; cleanup_thread(child_handles, &threads_created, watch_thread); } } /* Kill remaining threads off the hard way */ if (threads_created) { ap_log_error(APLOG_MARK, APLOG_NOTICE, APR_SUCCESS, ap_server_conf, APLOGNO(00363) "Child: Terminating %d threads that failed to exit.", threads_created); } for (i = 0; i < threads_created; i++) { int *idx; TerminateThread(child_handles[i], 1); CloseHandle(child_handles[i]); /* Reset the scoreboard entry for the thread we just whacked */ idx = apr_hash_get(ht, &child_handles[i], sizeof(HANDLE)); if (idx) { ap_update_child_status_from_indexes(0, *idx, SERVER_DEAD, NULL); } } ap_log_error(APLOG_MARK, APLOG_NOTICE, APR_SUCCESS, ap_server_conf, APLOGNO(00364) "Child: All worker threads have exited."); apr_thread_mutex_destroy(child_lock); apr_thread_mutex_destroy(qlock); CloseHandle(qwait_event); CloseHandle(ThreadDispatchIOCP); apr_pool_destroy(pchild); CloseHandle(exit_event); if (child_events[2] != NULL) { CloseHandle(child_events[2]); } } #endif /* def WIN32 */ httpd-2.4.41/server/mpm/winnt/service.c0000644000000000000500000012350613102063375016305 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* This module ALONE requires the window message API from user.h * and the default APR include of windows.h will omit it, so * preload the API symbols now... */ #define _WINUSER_ #include "apr.h" #include "apr_strings.h" #include "apr_lib.h" #if APR_HAS_UNICODE_FS #include "arch/win32/apr_arch_utf8.h" #include "arch/win32/apr_arch_misc.h" #include #endif #include "httpd.h" #include "http_log.h" #include "mpm_winnt.h" #include "ap_regkey.h" #ifdef NOUSER #undef NOUSER #endif #undef _WINUSER_ #include #include APLOG_USE_MODULE(mpm_winnt); /* Todo; clear up statics */ static char *mpm_service_name = NULL; static char *mpm_display_name = NULL; #if APR_HAS_UNICODE_FS static apr_wchar_t *mpm_service_name_w; #endif typedef struct nt_service_ctx_t { HANDLE mpm_thread; /* primary thread handle of the apache server */ HANDLE service_thread; /* thread service/monitor handle */ DWORD service_thread_id;/* thread service/monitor ID */ HANDLE service_init; /* controller thread init mutex */ HANDLE service_term; /* NT service thread kill signal */ SERVICE_STATUS ssStatus; SERVICE_STATUS_HANDLE hServiceStatus; } nt_service_ctx_t; static nt_service_ctx_t globdat; static int ReportStatusToSCMgr(int currentState, int waitHint, nt_service_ctx_t *ctx); /* Rather than repeat this logic throughout, create an either-or wide or narrow * implementation because we don't actually pass strings to OpenSCManager. * This election is based on build time defines and runtime os version test. */ #undef OpenSCManager typedef SC_HANDLE (WINAPI *fpt_OpenSCManager)(const void *lpMachine, const void *lpDatabase, DWORD dwAccess); static fpt_OpenSCManager pfn_OpenSCManager = NULL; static APR_INLINE SC_HANDLE OpenSCManager(const void *lpMachine, const void *lpDatabase, DWORD dwAccess) { if (!pfn_OpenSCManager) { #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE pfn_OpenSCManager = (fpt_OpenSCManager)OpenSCManagerW; #endif #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI pfn_OpenSCManager = (fpt_OpenSCManager)OpenSCManagerA; #endif } return (*(pfn_OpenSCManager))(lpMachine, lpDatabase, dwAccess); } /* exit() for Win32 is macro mapped (horrible, we agree) that allows us * to catch the non-zero conditions and inform the console process that * the application died, and hang on to the console a bit longer. * * The macro only maps for http_main.c and other sources that include * the service.h header, so we best assume it's an error to exit from * _any_ other module. * * If ap_real_exit_code is reset to 0, it will not be set or trigger this * behavior on exit. All service and child processes are expected to * reset this flag to zero to avoid undesirable side effects. */ AP_DECLARE_DATA int ap_real_exit_code = 1; void hold_console_open_on_error(void) { HANDLE hConIn; HANDLE hConErr; DWORD result; time_t start; time_t remains; char *msg = "Note the errors or messages above, " "and press the key to exit. "; CONSOLE_SCREEN_BUFFER_INFO coninfo; INPUT_RECORD in; char count[16]; if (!ap_real_exit_code) return; hConIn = GetStdHandle(STD_INPUT_HANDLE); hConErr = GetStdHandle(STD_ERROR_HANDLE); if ((hConIn == INVALID_HANDLE_VALUE) || (hConErr == INVALID_HANDLE_VALUE)) return; if (!WriteConsole(hConErr, msg, (DWORD)strlen(msg), &result, NULL) || !result) return; if (!GetConsoleScreenBufferInfo(hConErr, &coninfo)) return; if (!SetConsoleMode(hConIn, ENABLE_MOUSE_INPUT | 0x80)) return; start = time(NULL); do { while (PeekConsoleInput(hConIn, &in, 1, &result) && result) { if (!ReadConsoleInput(hConIn, &in, 1, &result) || !result) return; if ((in.EventType == KEY_EVENT) && in.Event.KeyEvent.bKeyDown && (in.Event.KeyEvent.uChar.AsciiChar == 27)) return; if (in.EventType == MOUSE_EVENT && (in.Event.MouseEvent.dwEventFlags == DOUBLE_CLICK)) return; } remains = ((start + 30) - time(NULL)); sprintf(count, "%d...", (int)remains); /* 30 or less, so can't overflow int */ if (!SetConsoleCursorPosition(hConErr, coninfo.dwCursorPosition)) return; if (!WriteConsole(hConErr, count, (DWORD)strlen(count), &result, NULL) || !result) return; } while ((remains > 0) && WaitForSingleObject(hConIn, 1000) != WAIT_FAILED); } static BOOL CALLBACK console_control_handler(DWORD ctrl_type) { switch (ctrl_type) { case CTRL_BREAK_EVENT: fprintf(stderr, "Apache server restarting...\n"); ap_signal_parent(SIGNAL_PARENT_RESTART); return TRUE; case CTRL_C_EVENT: fprintf(stderr, "Apache server interrupted...\n"); /* for Interrupt signals, shut down the server. * Tell the system we have dealt with the signal * without waiting for Apache to terminate. */ ap_signal_parent(SIGNAL_PARENT_SHUTDOWN); return TRUE; case CTRL_CLOSE_EVENT: case CTRL_LOGOFF_EVENT: case CTRL_SHUTDOWN_EVENT: /* for Terminate signals, shut down the server. * Wait for Apache to terminate, but respond * after a reasonable time to tell the system * that we did attempt to shut ourself down. */ fprintf(stderr, "Apache server shutdown initiated...\n"); ap_signal_parent(SIGNAL_PARENT_SHUTDOWN); Sleep(30000); return TRUE; } /* We should never get here, but this is (mostly) harmless */ return FALSE; } static void stop_console_handler(void) { SetConsoleCtrlHandler(console_control_handler, FALSE); } void mpm_start_console_handler(void) { SetConsoleCtrlHandler(console_control_handler, TRUE); atexit(stop_console_handler); } void mpm_start_child_console_handler(void) { FreeConsole(); } /********************************** WinNT service control management **********************************/ static int ReportStatusToSCMgr(int currentState, int waitHint, nt_service_ctx_t *ctx) { int rv = APR_SUCCESS; if (ctx->hServiceStatus) { if (currentState == SERVICE_RUNNING) { ctx->ssStatus.dwWaitHint = 0; ctx->ssStatus.dwCheckPoint = 0; ctx->ssStatus.dwControlsAccepted = SERVICE_ACCEPT_STOP | SERVICE_ACCEPT_SHUTDOWN; } else if (currentState == SERVICE_STOPPED) { ctx->ssStatus.dwWaitHint = 0; ctx->ssStatus.dwCheckPoint = 0; /* An unexpected exit? Better to error! */ if (ctx->ssStatus.dwCurrentState != SERVICE_STOP_PENDING && !ctx->ssStatus.dwServiceSpecificExitCode) ctx->ssStatus.dwServiceSpecificExitCode = 1; if (ctx->ssStatus.dwServiceSpecificExitCode) ctx->ssStatus.dwWin32ExitCode = ERROR_SERVICE_SPECIFIC_ERROR; } else { ++ctx->ssStatus.dwCheckPoint; ctx->ssStatus.dwControlsAccepted = 0; if(waitHint) ctx->ssStatus.dwWaitHint = waitHint; } ctx->ssStatus.dwCurrentState = currentState; rv = SetServiceStatus(ctx->hServiceStatus, &ctx->ssStatus); } return(rv); } /* Note this works on Win2000 and later due to ChangeServiceConfig2 * Continue to test its existence, but at least drop the feature * of revising service description tags prior to Win2000. */ /* borrowed from mpm_winnt.c */ extern apr_pool_t *pconf; static void set_service_description(void) { const char *full_description; SC_HANDLE schSCManager; /* Nothing to do if we are a console */ if (!mpm_service_name) return; /* Time to fix up the description, upon each successful restart */ full_description = ap_get_server_description(); if ((ChangeServiceConfig2) && (schSCManager = OpenSCManager(NULL, NULL, SC_MANAGER_CONNECT))) { SC_HANDLE schService; #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { schService = OpenServiceW(schSCManager, (LPCWSTR)mpm_service_name_w, SERVICE_CHANGE_CONFIG); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { schService = OpenService(schSCManager, mpm_service_name, SERVICE_CHANGE_CONFIG); } #endif if (schService) { /* Cast is necessary, ChangeServiceConfig2 handles multiple * object types, some volatile, some not. */ #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { apr_size_t slen = strlen(full_description) + 1; apr_size_t wslen = slen; apr_wchar_t *full_description_w = (apr_wchar_t*)apr_palloc(pconf, wslen * sizeof(apr_wchar_t)); apr_status_t rv = apr_conv_utf8_to_ucs2(full_description, &slen, full_description_w, &wslen); if ((rv != APR_SUCCESS) || slen || ChangeServiceConfig2W(schService, 1 /*SERVICE_CONFIG_DESCRIPTION*/, (LPVOID) &full_description_w)) full_description = NULL; } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { if (ChangeServiceConfig2(schService, 1 /* SERVICE_CONFIG_DESCRIPTION */, (LPVOID) &full_description)) full_description = NULL; } #endif CloseServiceHandle(schService); } CloseServiceHandle(schSCManager); } } /* handle the SCM's ControlService() callbacks to our service */ static DWORD WINAPI service_nt_ctrl(DWORD dwCtrlCode, DWORD dwEventType, LPVOID lpEventData, LPVOID lpContext) { nt_service_ctx_t *ctx = lpContext; /* SHUTDOWN is offered before STOP, accept the first opportunity */ if ((dwCtrlCode == SERVICE_CONTROL_STOP) || (dwCtrlCode == SERVICE_CONTROL_SHUTDOWN)) { ap_signal_parent(SIGNAL_PARENT_SHUTDOWN); ReportStatusToSCMgr(SERVICE_STOP_PENDING, 30000, ctx); return (NO_ERROR); } if (dwCtrlCode == SERVICE_APACHE_RESTART) { ap_signal_parent(SIGNAL_PARENT_RESTART); ReportStatusToSCMgr(SERVICE_START_PENDING, 30000, ctx); return (NO_ERROR); } if (dwCtrlCode == SERVICE_CONTROL_INTERROGATE) { ReportStatusToSCMgr(globdat.ssStatus.dwCurrentState, 0, ctx); return (NO_ERROR); } return (ERROR_CALL_NOT_IMPLEMENTED); } /* service_nt_main_fn is outside of the call stack and outside of the * primary server thread... so now we _really_ need a placeholder! * The winnt_rewrite_args has created and shared mpm_new_argv with us. */ extern apr_array_header_t *mpm_new_argv; #if APR_HAS_UNICODE_FS static void __stdcall service_nt_main_fn_w(DWORD argc, LPWSTR *argv) { const char *ignored; nt_service_ctx_t *ctx = &globdat; char *service_name; apr_size_t wslen = wcslen(argv[0]) + 1; apr_size_t slen = wslen * 3 - 2; service_name = malloc(slen); (void)apr_conv_ucs2_to_utf8(argv[0], &wslen, service_name, &slen); /* args and service names live in the same pool */ mpm_service_set_name(mpm_new_argv->pool, &ignored, service_name); memset(&ctx->ssStatus, 0, sizeof(ctx->ssStatus)); ctx->ssStatus.dwServiceType = SERVICE_WIN32_OWN_PROCESS; ctx->ssStatus.dwCurrentState = SERVICE_START_PENDING; ctx->ssStatus.dwCheckPoint = 1; if (!(ctx->hServiceStatus = RegisterServiceCtrlHandlerExW(argv[0], service_nt_ctrl, ctx))) { ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, apr_get_os_error(), NULL, APLOGNO(00365) "Failure registering service handler"); return; } /* Report status, no errors, and buy 3 more seconds */ ReportStatusToSCMgr(SERVICE_START_PENDING, 30000, ctx); /* We need to append all the command arguments passed via StartService() * to our running service... which just got here via the SCM... * but we have no interest in argv[0] for the mpm_new_argv list. */ if (argc > 1) { char **cmb_data, **cmb; DWORD i; mpm_new_argv->nalloc = mpm_new_argv->nelts + argc - 1; cmb_data = malloc(mpm_new_argv->nalloc * sizeof(const char *)); /* mpm_new_argv remains first (of lower significance) */ memcpy (cmb_data, mpm_new_argv->elts, mpm_new_argv->elt_size * mpm_new_argv->nelts); /* Service args follow from StartService() invocation */ memcpy (cmb_data + mpm_new_argv->nelts, argv + 1, mpm_new_argv->elt_size * (argc - 1)); cmb = cmb_data + mpm_new_argv->nelts; for (i = 1; i < argc; ++i) { wslen = wcslen(argv[i]) + 1; slen = wslen * 3 - 2; service_name = malloc(slen); (void)apr_conv_ucs2_to_utf8(argv[i], &wslen, *(cmb++), &slen); } /* The replacement arg list is complete */ mpm_new_argv->elts = (char *)cmb_data; mpm_new_argv->nelts = mpm_new_argv->nalloc; } /* Let the main thread continue now... but hang on to the * signal_monitor event so we can take further action */ SetEvent(ctx->service_init); WaitForSingleObject(ctx->service_term, INFINITE); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS static void __stdcall service_nt_main_fn(DWORD argc, LPSTR *argv) { const char *ignored; nt_service_ctx_t *ctx = &globdat; /* args and service names live in the same pool */ mpm_service_set_name(mpm_new_argv->pool, &ignored, argv[0]); memset(&ctx->ssStatus, 0, sizeof(ctx->ssStatus)); ctx->ssStatus.dwServiceType = SERVICE_WIN32_OWN_PROCESS; ctx->ssStatus.dwCurrentState = SERVICE_START_PENDING; ctx->ssStatus.dwCheckPoint = 1; if (!(ctx->hServiceStatus = RegisterServiceCtrlHandlerExA(argv[0], service_nt_ctrl, ctx))) { ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, apr_get_os_error(), NULL, APLOGNO(10008) "Failure registering service handler"); return; } /* Report status, no errors, and buy 3 more seconds */ ReportStatusToSCMgr(SERVICE_START_PENDING, 30000, ctx); /* We need to append all the command arguments passed via StartService() * to our running service... which just got here via the SCM... * but we have no interest in argv[0] for the mpm_new_argv list. */ if (argc > 1) { char **cmb_data; mpm_new_argv->nalloc = mpm_new_argv->nelts + argc - 1; cmb_data = malloc(mpm_new_argv->nalloc * sizeof(const char *)); /* mpm_new_argv remains first (of lower significance) */ memcpy (cmb_data, mpm_new_argv->elts, mpm_new_argv->elt_size * mpm_new_argv->nelts); /* Service args follow from StartService() invocation */ memcpy (cmb_data + mpm_new_argv->nelts, argv + 1, mpm_new_argv->elt_size * (argc - 1)); /* The replacement arg list is complete */ mpm_new_argv->elts = (char *)cmb_data; mpm_new_argv->nelts = mpm_new_argv->nalloc; } /* Let the main thread continue now... but hang on to the * signal_monitor event so we can take further action */ SetEvent(ctx->service_init); WaitForSingleObject(ctx->service_term, INFINITE); } #endif static DWORD WINAPI service_nt_dispatch_thread(LPVOID nada) { #if APR_HAS_UNICODE_FS SERVICE_TABLE_ENTRYW dispatchTable_w[] = { { L"", service_nt_main_fn_w }, { NULL, NULL } }; #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS SERVICE_TABLE_ENTRYA dispatchTable[] = { { "", service_nt_main_fn }, { NULL, NULL } }; #endif apr_status_t rv; #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE rv = StartServiceCtrlDispatcherW(dispatchTable_w); #endif #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI rv = StartServiceCtrlDispatcherA(dispatchTable); #endif if (rv) { rv = APR_SUCCESS; } else { /* This is a genuine failure of the SCM. */ rv = apr_get_os_error(); ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, rv, NULL, APLOGNO(00366) "Error starting Windows service control " "dispatcher"); } return (rv); } /* The service configuration's is stored under the following trees: * * HKLM\System\CurrentControlSet\Services\[service name] * * \DisplayName * \ImagePath * \Parameters\ConfigArgs */ apr_status_t mpm_service_set_name(apr_pool_t *p, const char **display_name, const char *set_name) { char key_name[MAX_PATH]; ap_regkey_t *key; apr_status_t rv; /* ### Needs improvement, on Win2K the user can _easily_ * change the display name to a string that doesn't reflect * the internal service name + whitespace! */ mpm_service_name = apr_palloc(p, strlen(set_name) + 1); apr_collapse_spaces((char*) mpm_service_name, set_name); #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { apr_size_t slen = strlen(mpm_service_name) + 1; apr_size_t wslen = slen; mpm_service_name_w = apr_palloc(p, wslen * sizeof(apr_wchar_t)); rv = apr_conv_utf8_to_ucs2(mpm_service_name, &slen, mpm_service_name_w, &wslen); if (rv != APR_SUCCESS) return rv; else if (slen) return APR_ENAMETOOLONG; } #endif /* APR_HAS_UNICODE_FS */ apr_snprintf(key_name, sizeof(key_name), SERVICECONFIG, mpm_service_name); rv = ap_regkey_open(&key, AP_REGKEY_LOCAL_MACHINE, key_name, APR_READ, pconf); if (rv == APR_SUCCESS) { rv = ap_regkey_value_get(&mpm_display_name, key, "DisplayName", pconf); ap_regkey_close(key); } if (rv != APR_SUCCESS) { /* Take the given literal name if there is no service entry */ mpm_display_name = apr_pstrdup(p, set_name); } *display_name = mpm_display_name; return rv; } apr_status_t mpm_merge_service_args(apr_pool_t *p, apr_array_header_t *args, int fixed_args) { apr_array_header_t *svc_args = NULL; char conf_key[MAX_PATH]; char **cmb_data; apr_status_t rv; ap_regkey_t *key; apr_snprintf(conf_key, sizeof(conf_key), SERVICEPARAMS, mpm_service_name); rv = ap_regkey_open(&key, AP_REGKEY_LOCAL_MACHINE, conf_key, APR_READ, p); if (rv == APR_SUCCESS) { rv = ap_regkey_value_array_get(&svc_args, key, "ConfigArgs", p); ap_regkey_close(key); } if (rv != APR_SUCCESS) { if (rv == ERROR_FILE_NOT_FOUND) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, NULL, APLOGNO(00367) "No ConfigArgs registered for the '%s' service, " "perhaps this service is not installed?", mpm_service_name); return APR_SUCCESS; } else return (rv); } if (!svc_args || svc_args->nelts == 0) { return (APR_SUCCESS); } /* Now we have the mpm_service_name arg, and the mpm_runservice_nt() * call appended the arguments passed by StartService(), so it's * time to _prepend_ the default arguments for the server from * the service's default arguments (all others override them)... */ args->nalloc = args->nelts + svc_args->nelts; cmb_data = malloc(args->nalloc * sizeof(const char *)); /* First three args (argv[0], -f, path) remain first */ memcpy(cmb_data, args->elts, args->elt_size * fixed_args); /* Service args follow from service registry array */ memcpy(cmb_data + fixed_args, svc_args->elts, svc_args->elt_size * svc_args->nelts); /* Remaining new args follow */ memcpy(cmb_data + fixed_args + svc_args->nelts, (const char **)args->elts + fixed_args, args->elt_size * (args->nelts - fixed_args)); args->elts = (char *)cmb_data; args->nelts = args->nalloc; return APR_SUCCESS; } static void service_stopped(void) { /* Still have a thread & window to clean up, so signal now */ if (globdat.service_thread) { /* Stop logging to the event log */ mpm_nt_eventlog_stderr_flush(); /* Cause the service_nt_main_fn to complete */ ReleaseMutex(globdat.service_term); ReportStatusToSCMgr(SERVICE_STOPPED, 0, &globdat); WaitForSingleObject(globdat.service_thread, 5000); CloseHandle(globdat.service_thread); } } apr_status_t mpm_service_to_start(const char **display_name, apr_pool_t *p) { HANDLE hProc = GetCurrentProcess(); HANDLE hThread = GetCurrentThread(); HANDLE waitfor[2]; /* Prevent holding open the (hidden) console */ ap_real_exit_code = 0; /* GetCurrentThread returns a psuedo-handle, we need * a real handle for another thread to wait upon. */ if (!DuplicateHandle(hProc, hThread, hProc, &(globdat.mpm_thread), 0, FALSE, DUPLICATE_SAME_ACCESS)) { return APR_ENOTHREAD; } globdat.service_init = CreateEvent(NULL, FALSE, FALSE, NULL); globdat.service_term = CreateMutex(NULL, TRUE, NULL); if (!globdat.service_init || !globdat.service_term) { return APR_EGENERAL; } globdat.service_thread = CreateThread(NULL, 65536, service_nt_dispatch_thread, NULL, stack_res_flag, &globdat.service_thread_id); if (!globdat.service_thread) { return APR_ENOTHREAD; } waitfor[0] = globdat.service_init; waitfor[1] = globdat.service_thread; /* Wait for controlling thread init or termination */ if (WaitForMultipleObjects(2, waitfor, FALSE, 10000) != WAIT_OBJECT_0) { return APR_ENOTHREAD; } atexit(service_stopped); *display_name = mpm_display_name; return APR_SUCCESS; } apr_status_t mpm_service_started(void) { set_service_description(); ReportStatusToSCMgr(SERVICE_RUNNING, 0, &globdat); return APR_SUCCESS; } void mpm_service_stopping(void) { ReportStatusToSCMgr(SERVICE_STOP_PENDING, 30000, &globdat); } apr_status_t mpm_service_install(apr_pool_t *ptemp, int argc, const char * const * argv, int reconfig) { char key_name[MAX_PATH]; char *launch_cmd; ap_regkey_t *key; apr_status_t rv; SC_HANDLE schService; SC_HANDLE schSCManager; DWORD rc; #if APR_HAS_UNICODE_FS apr_wchar_t *display_name_w; apr_wchar_t *launch_cmd_w; #endif fprintf(stderr, reconfig ? "Reconfiguring the '%s' service\n" : "Installing the '%s' service\n", mpm_display_name); #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { apr_size_t slen = strlen(mpm_display_name) + 1; apr_size_t wslen = slen; display_name_w = apr_palloc(ptemp, wslen * sizeof(apr_wchar_t)); rv = apr_conv_utf8_to_ucs2(mpm_display_name, &slen, display_name_w, &wslen); if (rv != APR_SUCCESS) return rv; else if (slen) return APR_ENAMETOOLONG; launch_cmd_w = apr_palloc(ptemp, (MAX_PATH + 17) * sizeof(apr_wchar_t)); launch_cmd_w[0] = L'"'; rc = GetModuleFileNameW(NULL, launch_cmd_w + 1, MAX_PATH); wcscpy(launch_cmd_w + rc + 1, L"\" -k runservice"); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { launch_cmd = apr_palloc(ptemp, MAX_PATH + 17); launch_cmd[0] = '"'; rc = GetModuleFileName(NULL, launch_cmd + 1, MAX_PATH); strcpy(launch_cmd + rc + 1, "\" -k runservice"); } #endif if (rc == 0) { rv = apr_get_os_error(); ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, rv, NULL, APLOGNO(00368) "GetModuleFileName failed"); return rv; } schSCManager = OpenSCManager(NULL, NULL, /* local, default database */ SC_MANAGER_CREATE_SERVICE); if (!schSCManager) { rv = apr_get_os_error(); ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, rv, NULL, APLOGNO(00369) "Failed to open the Windows service " "manager, perhaps you forgot to log in as Adminstrator?"); return (rv); } if (reconfig) { #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { schService = OpenServiceW(schSCManager, mpm_service_name_w, SERVICE_CHANGE_CONFIG); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { schService = OpenService(schSCManager, mpm_service_name, SERVICE_CHANGE_CONFIG); } #endif if (!schService) { rv = apr_get_os_error(); CloseServiceHandle(schSCManager); ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, rv, NULL, APLOGNO(00373) "Failed to open the '%s' service", mpm_display_name); return (rv); } #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { rc = ChangeServiceConfigW(schService, SERVICE_WIN32_OWN_PROCESS, SERVICE_AUTO_START, SERVICE_ERROR_NORMAL, launch_cmd_w, NULL, NULL, L"Tcpip\0Afd\0", NULL, NULL, display_name_w); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { rc = ChangeServiceConfig(schService, SERVICE_WIN32_OWN_PROCESS, SERVICE_AUTO_START, SERVICE_ERROR_NORMAL, launch_cmd, NULL, NULL, "Tcpip\0Afd\0", NULL, NULL, mpm_display_name); } #endif if (!rc) { ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, apr_get_os_error(), NULL, APLOGNO(02652) "ChangeServiceConfig failed"); /* !schService aborts configuration below */ CloseServiceHandle(schService); schService = NULL; } } else { /* RPCSS is the Remote Procedure Call (RPC) Locator required * for DCOM communication pipes. I am far from convinced we * should add this to the default service dependencies, but * be warned that future apache modules or ISAPI dll's may * depend on it. */ #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { schService = CreateServiceW(schSCManager, // SCManager database mpm_service_name_w, // name of service display_name_w, // name to display SERVICE_ALL_ACCESS, // access required SERVICE_WIN32_OWN_PROCESS, // service type SERVICE_AUTO_START, // start type SERVICE_ERROR_NORMAL, // error control type launch_cmd_w, // service's binary NULL, // no load svc group NULL, // no tag identifier L"Tcpip\0Afd\0", // dependencies NULL, // use SYSTEM account NULL); // no password } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { schService = CreateService(schSCManager, // SCManager database mpm_service_name, // name of service mpm_display_name, // name to display SERVICE_ALL_ACCESS, // access required SERVICE_WIN32_OWN_PROCESS, // service type SERVICE_AUTO_START, // start type SERVICE_ERROR_NORMAL, // error control type launch_cmd, // service's binary NULL, // no load svc group NULL, // no tag identifier "Tcpip\0Afd\0", // dependencies NULL, // use SYSTEM account NULL); // no password } #endif if (!schService) { rv = apr_get_os_error(); ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, rv, NULL, APLOGNO(00370) "Failed to create the '%s' service", mpm_display_name); CloseServiceHandle(schSCManager); return (rv); } } CloseServiceHandle(schService); CloseServiceHandle(schSCManager); set_service_description(); /* Store the service ConfigArgs in the registry... */ apr_snprintf(key_name, sizeof(key_name), SERVICEPARAMS, mpm_service_name); rv = ap_regkey_open(&key, AP_REGKEY_LOCAL_MACHINE, key_name, APR_READ | APR_WRITE | APR_CREATE, pconf); if (rv == APR_SUCCESS) { rv = ap_regkey_value_array_set(key, "ConfigArgs", argc, argv, pconf); ap_regkey_close(key); } if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, rv, NULL, APLOGNO(00371) "Failed to store ConfigArgs for the " "'%s' service in the registry.", mpm_display_name); return (rv); } fprintf(stderr, "The '%s' service is successfully installed.\n", mpm_display_name); return APR_SUCCESS; } apr_status_t mpm_service_uninstall(void) { apr_status_t rv; SC_HANDLE schService; SC_HANDLE schSCManager; fprintf(stderr, "Removing the '%s' service\n", mpm_display_name); schSCManager = OpenSCManager(NULL, NULL, /* local, default database */ SC_MANAGER_CONNECT); if (!schSCManager) { rv = apr_get_os_error(); ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, rv, NULL, APLOGNO(10009) "Failed to open the Windows service " "manager, perhaps you forgot to log in as Adminstrator?"); return (rv); } #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { schService = OpenServiceW(schSCManager, mpm_service_name_w, DELETE); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { schService = OpenService(schSCManager, mpm_service_name, DELETE); } #endif if (!schService) { rv = apr_get_os_error(); ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, rv, NULL, APLOGNO(10010) "Failed to open the '%s' service", mpm_display_name); return (rv); } /* assure the service is stopped before continuing * * This may be out of order... we might not be able to be * granted all access if the service is running anyway. * * And do we want to make it *this easy* for them * to uninstall their service unintentionally? */ /* ap_stop_service(schService); */ if (DeleteService(schService) == 0) { rv = apr_get_os_error(); ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, rv, NULL, APLOGNO(00374) "Failed to delete the '%s' service", mpm_display_name); return (rv); } CloseServiceHandle(schService); CloseServiceHandle(schSCManager); fprintf(stderr, "The '%s' service has been removed successfully.\n", mpm_display_name); return APR_SUCCESS; } /* signal_service_transition is a simple thunk to signal the service * and monitor its successful transition. If the signal passed is 0, * then the caller is assumed to already have performed some service * operation to be monitored (such as StartService), and no actual * ControlService signal is sent. */ static int signal_service_transition(SC_HANDLE schService, DWORD signal, DWORD pending, DWORD complete) { if (signal && !ControlService(schService, signal, &globdat.ssStatus)) return FALSE; do { Sleep(1000); if (!QueryServiceStatus(schService, &globdat.ssStatus)) return FALSE; } while (globdat.ssStatus.dwCurrentState == pending); return (globdat.ssStatus.dwCurrentState == complete); } apr_status_t mpm_service_start(apr_pool_t *ptemp, int argc, const char * const * argv) { apr_status_t rv; SC_HANDLE schService; SC_HANDLE schSCManager; fprintf(stderr, "Starting the '%s' service\n", mpm_display_name); schSCManager = OpenSCManager(NULL, NULL, /* local, default database */ SC_MANAGER_CONNECT); if (!schSCManager) { rv = apr_get_os_error(); ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, rv, NULL, APLOGNO(10011) "Failed to open the Windows service " "manager, perhaps you forgot to log in as Adminstrator?"); return (rv); } #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { schService = OpenServiceW(schSCManager, mpm_service_name_w, SERVICE_START | SERVICE_QUERY_STATUS); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { schService = OpenService(schSCManager, mpm_service_name, SERVICE_START | SERVICE_QUERY_STATUS); } #endif if (!schService) { rv = apr_get_os_error(); ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, rv, NULL, APLOGNO(10012) "Failed to open the '%s' service", mpm_display_name); CloseServiceHandle(schSCManager); return (rv); } if (QueryServiceStatus(schService, &globdat.ssStatus) && (globdat.ssStatus.dwCurrentState == SERVICE_RUNNING)) { ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, 0, NULL, APLOGNO(00377) "The '%s' service is already started!", mpm_display_name); CloseServiceHandle(schService); CloseServiceHandle(schSCManager); return 0; } rv = APR_EINIT; #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { LPWSTR *start_argv_w = malloc((argc + 1) * sizeof(LPCWSTR)); int i; for (i = 0; i < argc; ++i) { apr_size_t slen = strlen(argv[i]) + 1; apr_size_t wslen = slen; start_argv_w[i] = malloc(wslen * sizeof(WCHAR)); rv = apr_conv_utf8_to_ucs2(argv[i], &slen, start_argv_w[i], &wslen); if (rv != APR_SUCCESS) return rv; else if (slen) return APR_ENAMETOOLONG; } start_argv_w[argc] = NULL; if (StartServiceW(schService, argc, start_argv_w) && signal_service_transition(schService, 0, /* test only */ SERVICE_START_PENDING, SERVICE_RUNNING)) rv = APR_SUCCESS; } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { char **start_argv = malloc((argc + 1) * sizeof(const char *)); memcpy(start_argv, argv, argc * sizeof(const char *)); start_argv[argc] = NULL; if (StartService(schService, argc, start_argv) && signal_service_transition(schService, 0, /* test only */ SERVICE_START_PENDING, SERVICE_RUNNING)) rv = APR_SUCCESS; } #endif if (rv != APR_SUCCESS) rv = apr_get_os_error(); CloseServiceHandle(schService); CloseServiceHandle(schSCManager); if (rv == APR_SUCCESS) fprintf(stderr, "The '%s' service is running.\n", mpm_display_name); else ap_log_error(APLOG_MARK, APLOG_CRIT, rv, NULL, APLOGNO(00378) "Failed to start the '%s' service", mpm_display_name); return rv; } /* signal is zero to stop, non-zero for restart */ void mpm_signal_service(apr_pool_t *ptemp, int signal) { int success = FALSE; SC_HANDLE schService; SC_HANDLE schSCManager; schSCManager = OpenSCManager(NULL, NULL, /* default machine & database */ SC_MANAGER_CONNECT); if (!schSCManager) { ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, apr_get_os_error(), NULL, APLOGNO(10013) "Failed to open the Windows service " "manager, perhaps you forgot to log in as Adminstrator?"); return; } #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { schService = OpenServiceW(schSCManager, mpm_service_name_w, SERVICE_INTERROGATE | SERVICE_QUERY_STATUS | SERVICE_USER_DEFINED_CONTROL | SERVICE_START | SERVICE_STOP); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { schService = OpenService(schSCManager, mpm_service_name, SERVICE_INTERROGATE | SERVICE_QUERY_STATUS | SERVICE_USER_DEFINED_CONTROL | SERVICE_START | SERVICE_STOP); } #endif if (schService == NULL) { /* Could not open the service */ ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, apr_get_os_error(), NULL, APLOGNO(10014) "Failed to open the '%s' service", mpm_display_name); CloseServiceHandle(schSCManager); return; } if (!QueryServiceStatus(schService, &globdat.ssStatus)) { ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, apr_get_os_error(), NULL, APLOGNO(00381) "Query of the '%s' service failed", mpm_display_name); CloseServiceHandle(schService); CloseServiceHandle(schSCManager); return; } if (!signal && (globdat.ssStatus.dwCurrentState == SERVICE_STOPPED)) { fprintf(stderr, "The '%s' service is not started.\n", mpm_display_name); CloseServiceHandle(schService); CloseServiceHandle(schSCManager); return; } fprintf(stderr, signal ? "The '%s' service is restarting.\n" : "The '%s' service is stopping.\n", mpm_display_name); if (!signal) success = signal_service_transition(schService, SERVICE_CONTROL_STOP, SERVICE_STOP_PENDING, SERVICE_STOPPED); else if (globdat.ssStatus.dwCurrentState == SERVICE_STOPPED) { mpm_service_start(ptemp, 0, NULL); CloseServiceHandle(schService); CloseServiceHandle(schSCManager); return; } else success = signal_service_transition(schService, SERVICE_APACHE_RESTART, SERVICE_START_PENDING, SERVICE_RUNNING); CloseServiceHandle(schService); CloseServiceHandle(schSCManager); if (success) fprintf(stderr, signal ? "The '%s' service has restarted.\n" : "The '%s' service has stopped.\n", mpm_display_name); else fprintf(stderr, signal ? "Failed to restart the '%s' service.\n" : "Failed to stop the '%s' service.\n", mpm_display_name); } httpd-2.4.41/server/mpm/winnt/mpm_winnt.h0000644000000000000500000000562612763577432016704 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mpm_winnt.h * @brief WinNT MPM specific * * @addtogroup APACHE_MPM_WINNT * @{ */ #ifndef APACHE_MPM_WINNT_H #define APACHE_MPM_WINNT_H #include "apr_proc_mutex.h" #include "ap_listen.h" /* From service.c: */ #define SERVICE_APACHE_RESTART 128 #ifndef AP_DEFAULT_SERVICE_NAME #define AP_DEFAULT_SERVICE_NAME "Apache2.4" #endif #define SERVICECONFIG "System\\CurrentControlSet\\Services\\%s" #define SERVICEPARAMS "System\\CurrentControlSet\\Services\\%s\\Parameters" apr_status_t mpm_service_set_name(apr_pool_t *p, const char **display_name, const char *set_name); apr_status_t mpm_merge_service_args(apr_pool_t *p, apr_array_header_t *args, int fixed_args); apr_status_t mpm_service_to_start(const char **display_name, apr_pool_t *p); apr_status_t mpm_service_started(void); apr_status_t mpm_service_install(apr_pool_t *ptemp, int argc, char const* const* argv, int reconfig); apr_status_t mpm_service_uninstall(void); apr_status_t mpm_service_start(apr_pool_t *ptemp, int argc, char const* const* argv); void mpm_signal_service(apr_pool_t *ptemp, int signal); void mpm_service_stopping(void); void mpm_start_console_handler(void); void mpm_start_child_console_handler(void); /* From nt_eventlog.c: */ void mpm_nt_eventlog_stderr_open(const char *display_name, apr_pool_t *p); void mpm_nt_eventlog_stderr_flush(void); /* From mpm_winnt.c: */ extern module AP_MODULE_DECLARE_DATA mpm_winnt_module; extern int ap_threads_per_child; extern DWORD my_pid; extern apr_proc_mutex_t *start_mutex; extern HANDLE exit_event; extern int winnt_mpm_state; extern OSVERSIONINFO osver; extern DWORD stack_res_flag; extern void clean_child_exit(int); typedef enum { SIGNAL_PARENT_SHUTDOWN, SIGNAL_PARENT_RESTART, SIGNAL_PARENT_RESTART_GRACEFUL } ap_signal_parent_e; AP_DECLARE(void) ap_signal_parent(ap_signal_parent_e type); void hold_console_open_on_error(void); /* From child.c: */ void child_main(apr_pool_t *pconf, DWORD parent_pid); #endif /* APACHE_MPM_WINNT_H */ /** @} */ httpd-2.4.41/server/mpm/winnt/nt_eventlog.c0000644000000000000500000001265311637106024017171 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_log.h" #include "mpm_winnt.h" #include "apr_strings.h" #include "apr_lib.h" #include "apr_portable.h" #include "ap_regkey.h" static const char *display_name = NULL; static HANDLE stderr_thread = NULL; static HANDLE stderr_ready; static DWORD WINAPI service_stderr_thread(LPVOID hPipe) { HANDLE hPipeRead = (HANDLE) hPipe; HANDLE hEventSource; char errbuf[256]; char *errmsg = errbuf; const char *errarg[9]; DWORD errres; ap_regkey_t *regkey; apr_status_t rv; apr_pool_t *p; apr_pool_create_ex(&p, NULL, NULL, NULL); errarg[0] = "The Apache service named"; errarg[1] = display_name; errarg[2] = "reported the following error:\r\n>>>"; errarg[3] = errbuf; errarg[4] = NULL; errarg[5] = NULL; errarg[6] = NULL; errarg[7] = NULL; errarg[8] = NULL; /* What are we going to do in here, bail on the user? not. */ if ((rv = ap_regkey_open(®key, AP_REGKEY_LOCAL_MACHINE, "SYSTEM\\CurrentControlSet\\Services\\" "EventLog\\Application\\Apache Service", APR_READ | APR_WRITE | APR_CREATE, p)) == APR_SUCCESS) { DWORD dwData = EVENTLOG_ERROR_TYPE | EVENTLOG_WARNING_TYPE | EVENTLOG_INFORMATION_TYPE; /* The stock message file */ ap_regkey_value_set(regkey, "EventMessageFile", "%SystemRoot%\\System32\\netmsg.dll", AP_REGKEY_EXPAND, p); ap_regkey_value_raw_set(regkey, "TypesSupported", &dwData, sizeof(dwData), REG_DWORD, p); ap_regkey_close(regkey); } hEventSource = RegisterEventSourceW(NULL, L"Apache Service"); SetEvent(stderr_ready); while (ReadFile(hPipeRead, errmsg, 1, &errres, NULL) && (errres == 1)) { if ((errmsg > errbuf) || !apr_isspace(*errmsg)) { ++errmsg; if ((*(errmsg - 1) == '\n') || (errmsg >= errbuf + sizeof(errbuf) - 1)) { while ((errmsg > errbuf) && apr_isspace(*(errmsg - 1))) { --errmsg; } *errmsg = '\0'; /* Generic message: '%1 %2 %3 %4 %5 %6 %7 %8 %9' * The event code in netmsg.dll is 3299 */ ReportEvent(hEventSource, EVENTLOG_ERROR_TYPE, 0, 3299, NULL, 9, 0, errarg, NULL); errmsg = errbuf; } } } if ((errres = GetLastError()) != ERROR_BROKEN_PIPE) { apr_snprintf(errbuf, sizeof(errbuf), "Win32 error %lu reading stderr pipe stream\r\n", GetLastError()); ReportEvent(hEventSource, EVENTLOG_ERROR_TYPE, 0, 3299, NULL, 9, 0, errarg, NULL); } CloseHandle(hPipeRead); DeregisterEventSource(hEventSource); CloseHandle(stderr_thread); stderr_thread = NULL; apr_pool_destroy(p); return 0; } void mpm_nt_eventlog_stderr_flush(void) { HANDLE cleanup_thread = stderr_thread; if (cleanup_thread) { HANDLE hErr = GetStdHandle(STD_ERROR_HANDLE); fclose(stderr); CloseHandle(hErr); WaitForSingleObject(cleanup_thread, 30000); CloseHandle(cleanup_thread); } } void mpm_nt_eventlog_stderr_open(const char *argv0, apr_pool_t *p) { SECURITY_ATTRIBUTES sa; HANDLE hPipeRead = NULL; HANDLE hPipeWrite = NULL; DWORD threadid; apr_file_t *eventlog_file; apr_file_t *stderr_file; display_name = argv0; /* Create a pipe to send stderr messages to the system error log. * * _dup2() duplicates the write handle inheritable for us. */ sa.nLength = sizeof(sa); sa.lpSecurityDescriptor = NULL; sa.bInheritHandle = FALSE; CreatePipe(&hPipeRead, &hPipeWrite, NULL, 0); ap_assert(hPipeRead && hPipeWrite); stderr_ready = CreateEvent(NULL, FALSE, FALSE, NULL); stderr_thread = CreateThread(NULL, 65536, service_stderr_thread, (LPVOID)hPipeRead, stack_res_flag, &threadid); ap_assert(stderr_ready && stderr_thread); WaitForSingleObject(stderr_ready, INFINITE); if ((apr_file_open_stderr(&stderr_file, p) == APR_SUCCESS) && (apr_os_file_put(&eventlog_file, &hPipeWrite, APR_WRITE, p) == APR_SUCCESS)) apr_file_dup2(stderr_file, eventlog_file, p); /* The code above _will_ corrupt the StdHandle... * and we must do so anyways. We set this up only * after we initialized the posix stderr API. */ ap_open_stderr_log(p); } httpd-2.4.41/server/mpm/winnt/config.m40000644000000000000500000000032611172132604016177 0ustar rootsrcAC_MSG_CHECKING(if WinNT MPM supports this platform) case $host in *mingw32*) AC_MSG_RESULT(yes) APACHE_MPM_SUPPORTED(winnt, no, yes) ;; *) AC_MSG_RESULT(no) ;; esac httpd-2.4.41/server/mpm/winnt/Makefile.in0000644000000000000500000000004711274040000016524 0ustar rootsrcinclude $(top_srcdir)/build/special.mk httpd-2.4.41/server/mpm/worker/0002755000000000000500000000000013523273341014651 5ustar rootsrchttpd-2.4.41/server/mpm/worker/config3.m40000644000000000000500000000024213243014561016433 0ustar rootsrcdnl ## XXX - Need a more thorough check of the proper flags to use APACHE_MPM_MODULE(worker, $enable_mpm_worker, worker.lo,[ AC_CHECK_FUNCS(pthread_kill) ]) httpd-2.4.41/server/mpm/worker/mpm_default.h0000644000000000000500000000314211711754075017322 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file worker/mpm_default.h * @brief Worker MPM defaults * * @defgroup APACHE_MPM_WORKER Worker MPM * @ingroup APACHE_INTERNAL * @{ */ #ifndef APACHE_MPM_DEFAULT_H #define APACHE_MPM_DEFAULT_H /* Number of servers to spawn off by default --- also, if fewer than * this free when the caretaker checks, it will spawn more. */ #ifndef DEFAULT_START_DAEMON #define DEFAULT_START_DAEMON 3 #endif /* Maximum number of *free* server processes --- more than this, and * they will die off. */ #ifndef DEFAULT_MAX_FREE_DAEMON #define DEFAULT_MAX_FREE_DAEMON 10 #endif /* Minimum --- fewer than this, and more will be created */ #ifndef DEFAULT_MIN_FREE_DAEMON #define DEFAULT_MIN_FREE_DAEMON 3 #endif #ifndef DEFAULT_THREADS_PER_CHILD #define DEFAULT_THREADS_PER_CHILD 25 #endif #endif /* AP_MPM_DEFAULT_H */ /** @} */ httpd-2.4.41/server/mpm/worker/config.m40000644000000000000500000000071111173774721016364 0ustar rootsrcAC_MSG_CHECKING(if worker MPM supports this platform) if test $forking_mpms_supported != yes; then AC_MSG_RESULT(no - This is not a forking platform) elif test $ac_cv_define_APR_HAS_THREADS != yes; then AC_MSG_RESULT(no - APR does not support threads) elif test $have_threaded_sig_graceful != yes; then AC_MSG_RESULT(no - SIG_GRACEFUL cannot be used with a threaded MPM) else AC_MSG_RESULT(yes) APACHE_MPM_SUPPORTED(worker, yes, yes) fi httpd-2.4.41/server/mpm/worker/worker.c0000644000000000000500000026341613442143212016331 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* The purpose of this MPM is to fix the design flaws in the threaded * model. Because of the way that pthreads and mutex locks interact, * it is basically impossible to cleanly gracefully shutdown a child * process if multiple threads are all blocked in accept. This model * fixes those problems. */ #include "apr.h" #include "apr_portable.h" #include "apr_strings.h" #include "apr_file_io.h" #include "apr_thread_proc.h" #include "apr_signal.h" #include "apr_thread_mutex.h" #include "apr_proc_mutex.h" #include "apr_poll.h" #include #define APR_WANT_STRFUNC #include "apr_want.h" #if APR_HAVE_UNISTD_H #include #endif #if APR_HAVE_SYS_SOCKET_H #include #endif #if APR_HAVE_SYS_WAIT_H #include #endif #ifdef HAVE_SYS_PROCESSOR_H #include /* for bindprocessor() */ #endif #if !APR_HAS_THREADS #error The Worker MPM requires APR threads, but they are unavailable. #endif #include "ap_config.h" #include "httpd.h" #include "http_main.h" #include "http_log.h" #include "http_config.h" /* for read_config */ #include "http_core.h" /* for get_remote_host */ #include "http_connection.h" #include "ap_mpm.h" #include "mpm_common.h" #include "ap_listen.h" #include "scoreboard.h" #include "mpm_fdqueue.h" #include "mpm_default.h" #include "util_mutex.h" #include "unixd.h" #include #include /* for INT_MAX */ /* Limit on the total --- clients will be locked out if more servers than * this are needed. It is intended solely to keep the server from crashing * when things get out of hand. * * We keep a hard maximum number of servers, for two reasons --- first off, * in case something goes seriously wrong, we want to stop the fork bomb * short of actually crashing the machine we're running on by filling some * kernel table. Secondly, it keeps the size of the scoreboard file small * enough that we can read the whole thing without worrying too much about * the overhead. */ #ifndef DEFAULT_SERVER_LIMIT #define DEFAULT_SERVER_LIMIT 16 #endif /* Admin can't tune ServerLimit beyond MAX_SERVER_LIMIT. We want * some sort of compile-time limit to help catch typos. */ #ifndef MAX_SERVER_LIMIT #define MAX_SERVER_LIMIT 20000 #endif /* Limit on the threads per process. Clients will be locked out if more than * this * server_limit are needed. * * We keep this for one reason it keeps the size of the scoreboard file small * enough that we can read the whole thing without worrying too much about * the overhead. */ #ifndef DEFAULT_THREAD_LIMIT #define DEFAULT_THREAD_LIMIT 64 #endif /* Admin can't tune ThreadLimit beyond MAX_THREAD_LIMIT. We want * some sort of compile-time limit to help catch typos. */ #ifndef MAX_THREAD_LIMIT #define MAX_THREAD_LIMIT 20000 #endif /* * Actual definitions of config globals */ static int threads_per_child = 0; /* Worker threads per child */ static int ap_daemons_to_start = 0; static int min_spare_threads = 0; static int max_spare_threads = 0; static int ap_daemons_limit = 0; static int max_workers = 0; static int server_limit = 0; static int thread_limit = 0; static int had_healthy_child = 0; static int dying = 0; static int workers_may_exit = 0; static int start_thread_may_exit = 0; static int listener_may_exit = 0; static int requests_this_child; static int num_listensocks = 0; static int resource_shortage = 0; static fd_queue_t *worker_queue; static fd_queue_info_t *worker_queue_info; static apr_pollset_t *worker_pollset; /* data retained by worker across load/unload of the module * allocated on first call to pre-config hook; located on * subsequent calls to pre-config hook */ typedef struct worker_retained_data { ap_unixd_mpm_retained_data *mpm; int first_server_limit; int first_thread_limit; int sick_child_detected; int maxclients_reported; int near_maxclients_reported; /* * The max child slot ever assigned, preserved across restarts. Necessary * to deal with MaxRequestWorkers changes across AP_SIG_GRACEFUL restarts. * We use this value to optimize routines that have to scan the entire * scoreboard. */ int max_daemons_limit; /* * idle_spawn_rate is the number of children that will be spawned on the * next maintenance cycle if there aren't enough idle servers. It is * maintained per listeners bucket, doubled up to MAX_SPAWN_RATE, and * reset only when a cycle goes by without the need to spawn. */ int *idle_spawn_rate; #ifndef MAX_SPAWN_RATE #define MAX_SPAWN_RATE (32) #endif int hold_off_on_exponential_spawning; } worker_retained_data; static worker_retained_data *retained; typedef struct worker_child_bucket { ap_pod_t *pod; ap_listen_rec *listeners; apr_proc_mutex_t *mutex; } worker_child_bucket; static worker_child_bucket *all_buckets, /* All listeners buckets */ *my_bucket; /* Current child bucket */ #define MPM_CHILD_PID(i) (ap_scoreboard_image->parent[i].pid) /* The structure used to pass unique initialization info to each thread */ typedef struct { int pid; int tid; int sd; } proc_info; /* Structure used to pass information to the thread responsible for * creating the rest of the threads. */ typedef struct { apr_thread_t **threads; apr_thread_t *listener; int child_num_arg; apr_threadattr_t *threadattr; } thread_starter; #define ID_FROM_CHILD_THREAD(c, t) ((c * thread_limit) + t) /* The worker MPM respects a couple of runtime flags that can aid * in debugging. Setting the -DNO_DETACH flag will prevent the root process * from detaching from its controlling terminal. Additionally, setting * the -DONE_PROCESS flag (which implies -DNO_DETACH) will get you the * child_main loop running in the process which originally started up. * This gives you a pretty nice debugging environment. (You'll get a SIGHUP * early in standalone_main; just continue through. This is the server * trying to kill off any child processes which it might have lying * around --- Apache doesn't keep track of their pids, it just sends * SIGHUP to the process group, ignoring it in the root process. * Continue through and you'll be fine.). */ static int one_process = 0; #ifdef DEBUG_SIGSTOP int raise_sigstop_flags; #endif static apr_pool_t *pconf; /* Pool for config stuff */ static apr_pool_t *pchild; /* Pool for httpd child stuff */ static apr_pool_t *pruntime; /* Pool for MPM threads stuff */ static pid_t ap_my_pid; /* Linux getpid() doesn't work except in main thread. Use this instead */ static pid_t parent_pid; static apr_os_thread_t *listener_os_thread; #ifdef SINGLE_LISTEN_UNSERIALIZED_ACCEPT #define SAFE_ACCEPT(stmt) (ap_listeners->next ? (stmt) : APR_SUCCESS) #else #define SAFE_ACCEPT(stmt) (stmt) #endif /* The LISTENER_SIGNAL signal will be sent from the main thread to the * listener thread to wake it up for graceful termination (what a child * process from an old generation does when the admin does "apachectl * graceful"). This signal will be blocked in all threads of a child * process except for the listener thread. */ #define LISTENER_SIGNAL SIGHUP /* The WORKER_SIGNAL signal will be sent from the main thread to the * worker threads during an ungraceful restart or shutdown. * This ensures that on systems (i.e., Linux) where closing the worker * socket doesn't awake the worker thread when it is polling on the socket * (especially in apr_wait_for_io_or_timeout() when handling * Keep-Alive connections), close_worker_sockets() and join_workers() * still function in timely manner and allow ungraceful shutdowns to * proceed to completion. Otherwise join_workers() doesn't return * before the main process decides the child process is non-responsive * and sends a SIGKILL. */ #define WORKER_SIGNAL AP_SIG_GRACEFUL /* An array of socket descriptors in use by each thread used to * perform a non-graceful (forced) shutdown of the server. */ static apr_socket_t **worker_sockets; static void close_worker_sockets(void) { int i; for (i = 0; i < threads_per_child; i++) { if (worker_sockets[i]) { apr_socket_close(worker_sockets[i]); worker_sockets[i] = NULL; } } } static void wakeup_listener(void) { listener_may_exit = 1; if (!listener_os_thread) { /* XXX there is an obscure path that this doesn't handle perfectly: * right after listener thread is created but before * listener_os_thread is set, the first worker thread hits an * error and starts graceful termination */ return; } /* unblock the listener if it's waiting for a worker */ ap_queue_info_term(worker_queue_info); /* * we should just be able to "kill(ap_my_pid, LISTENER_SIGNAL)" on all * platforms and wake up the listener thread since it is the only thread * with SIGHUP unblocked, but that doesn't work on Linux */ #ifdef HAVE_PTHREAD_KILL pthread_kill(*listener_os_thread, LISTENER_SIGNAL); #else kill(ap_my_pid, LISTENER_SIGNAL); #endif } #define ST_INIT 0 #define ST_GRACEFUL 1 #define ST_UNGRACEFUL 2 static int terminate_mode = ST_INIT; static void signal_threads(int mode) { if (terminate_mode == mode) { return; } terminate_mode = mode; retained->mpm->mpm_state = AP_MPMQ_STOPPING; /* in case we weren't called from the listener thread, wake up the * listener thread */ wakeup_listener(); /* for ungraceful termination, let the workers exit now; * for graceful termination, the listener thread will notify the * workers to exit once it has stopped accepting new connections */ if (mode == ST_UNGRACEFUL) { workers_may_exit = 1; ap_queue_interrupt_all(worker_queue); close_worker_sockets(); /* forcefully kill all current connections */ } } static int worker_query(int query_code, int *result, apr_status_t *rv) { *rv = APR_SUCCESS; switch (query_code) { case AP_MPMQ_MAX_DAEMON_USED: *result = retained->max_daemons_limit; break; case AP_MPMQ_IS_THREADED: *result = AP_MPMQ_STATIC; break; case AP_MPMQ_IS_FORKED: *result = AP_MPMQ_DYNAMIC; break; case AP_MPMQ_HARD_LIMIT_DAEMONS: *result = server_limit; break; case AP_MPMQ_HARD_LIMIT_THREADS: *result = thread_limit; break; case AP_MPMQ_MAX_THREADS: *result = threads_per_child; break; case AP_MPMQ_MIN_SPARE_DAEMONS: *result = 0; break; case AP_MPMQ_MIN_SPARE_THREADS: *result = min_spare_threads; break; case AP_MPMQ_MAX_SPARE_DAEMONS: *result = 0; break; case AP_MPMQ_MAX_SPARE_THREADS: *result = max_spare_threads; break; case AP_MPMQ_MAX_REQUESTS_DAEMON: *result = ap_max_requests_per_child; break; case AP_MPMQ_MAX_DAEMONS: *result = ap_daemons_limit; break; case AP_MPMQ_MPM_STATE: *result = retained->mpm->mpm_state; break; case AP_MPMQ_GENERATION: *result = retained->mpm->my_generation; break; default: *rv = APR_ENOTIMPL; break; } return OK; } static void worker_note_child_killed(int childnum, pid_t pid, ap_generation_t gen) { if (childnum != -1) { /* child had a scoreboard slot? */ ap_run_child_status(ap_server_conf, ap_scoreboard_image->parent[childnum].pid, ap_scoreboard_image->parent[childnum].generation, childnum, MPM_CHILD_EXITED); ap_scoreboard_image->parent[childnum].pid = 0; } else { ap_run_child_status(ap_server_conf, pid, gen, -1, MPM_CHILD_EXITED); } } static void worker_note_child_started(int slot, pid_t pid) { ap_generation_t gen = retained->mpm->my_generation; ap_scoreboard_image->parent[slot].pid = pid; ap_scoreboard_image->parent[slot].generation = gen; ap_run_child_status(ap_server_conf, pid, gen, slot, MPM_CHILD_STARTED); } static void worker_note_child_lost_slot(int slot, pid_t newpid) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(00263) "pid %" APR_PID_T_FMT " taking over scoreboard slot from " "%" APR_PID_T_FMT "%s", newpid, ap_scoreboard_image->parent[slot].pid, ap_scoreboard_image->parent[slot].quiescing ? " (quiescing)" : ""); ap_run_child_status(ap_server_conf, ap_scoreboard_image->parent[slot].pid, ap_scoreboard_image->parent[slot].generation, slot, MPM_CHILD_LOST_SLOT); /* Don't forget about this exiting child process, or we * won't be able to kill it if it doesn't exit by the * time the server is shut down. */ ap_register_extra_mpm_process(ap_scoreboard_image->parent[slot].pid, ap_scoreboard_image->parent[slot].generation); } static const char *worker_get_name(void) { return "worker"; } /* a clean exit from a child with proper cleanup */ static void clean_child_exit(int code) __attribute__ ((noreturn)); static void clean_child_exit(int code) { retained->mpm->mpm_state = AP_MPMQ_STOPPING; if (pchild) { apr_pool_destroy(pchild); } if (one_process) { worker_note_child_killed(/* slot */ 0, 0, 0); } exit(code); } static void just_die(int sig) { clean_child_exit(0); } /***************************************************************** * Connection structures and accounting... */ static int child_fatal; /***************************************************************** * Here follows a long bunch of generic server bookkeeping stuff... */ /***************************************************************** * Child process main loop. */ static void process_socket(apr_thread_t *thd, apr_pool_t *p, apr_socket_t *sock, int my_child_num, int my_thread_num, apr_bucket_alloc_t *bucket_alloc) { conn_rec *current_conn; long conn_id = ID_FROM_CHILD_THREAD(my_child_num, my_thread_num); ap_sb_handle_t *sbh; ap_create_sb_handle(&sbh, p, my_child_num, my_thread_num); current_conn = ap_run_create_connection(p, ap_server_conf, sock, conn_id, sbh, bucket_alloc); if (current_conn) { current_conn->current_thread = thd; ap_process_connection(current_conn, sock); ap_lingering_close(current_conn); } } /* requests_this_child has gone to zero or below. See if the admin coded "MaxConnectionsPerChild 0", and keep going in that case. Doing it this way simplifies the hot path in worker_thread */ static void check_infinite_requests(void) { if (ap_max_requests_per_child) { signal_threads(ST_GRACEFUL); } else { requests_this_child = INT_MAX; /* keep going */ } } static void unblock_signal(int sig) { sigset_t sig_mask; sigemptyset(&sig_mask); sigaddset(&sig_mask, sig); #if defined(SIGPROCMASK_SETS_THREAD_MASK) sigprocmask(SIG_UNBLOCK, &sig_mask, NULL); #else pthread_sigmask(SIG_UNBLOCK, &sig_mask, NULL); #endif } static void dummy_signal_handler(int sig) { /* XXX If specifying SIG_IGN is guaranteed to unblock a syscall, * then we don't need this goofy function. */ } static void accept_mutex_error(const char *func, apr_status_t rv, int process_slot) { int level = APLOG_EMERG; if (ap_scoreboard_image->parent[process_slot].generation != ap_scoreboard_image->global->running_generation) { level = APLOG_DEBUG; /* common to get these at restart time */ } else if (requests_this_child == INT_MAX || ((requests_this_child == ap_max_requests_per_child) && ap_max_requests_per_child)) { ap_log_error(APLOG_MARK, level, rv, ap_server_conf, APLOGNO(00272) "apr_proc_mutex_%s failed " "before this child process served any requests.", func); clean_child_exit(APEXIT_CHILDSICK); } ap_log_error(APLOG_MARK, level, rv, ap_server_conf, APLOGNO(00273) "apr_proc_mutex_%s failed. Attempting to " "shutdown process gracefully.", func); signal_threads(ST_GRACEFUL); } static void * APR_THREAD_FUNC listener_thread(apr_thread_t *thd, void * dummy) { proc_info * ti = dummy; int process_slot = ti->pid; void *csd = NULL; apr_pool_t *ptrans = NULL; /* Pool for per-transaction stuff */ apr_status_t rv; ap_listen_rec *lr = NULL; int have_idle_worker = 0; int last_poll_idx = 0; free(ti); /* Unblock the signal used to wake this thread up, and set a handler for * it. */ unblock_signal(LISTENER_SIGNAL); apr_signal(LISTENER_SIGNAL, dummy_signal_handler); /* TODO: Switch to a system where threads reuse the results from earlier poll calls - manoj */ while (1) { /* TODO: requests_this_child should be synchronized - aaron */ if (requests_this_child <= 0) { check_infinite_requests(); } if (listener_may_exit) break; if (!have_idle_worker) { rv = ap_queue_info_wait_for_idler(worker_queue_info, NULL); if (APR_STATUS_IS_EOF(rv)) { break; /* we've been signaled to die now */ } else if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, ap_server_conf, "apr_queue_info_wait failed. Attempting to " " shutdown process gracefully."); signal_threads(ST_GRACEFUL); break; } have_idle_worker = 1; } /* We've already decremented the idle worker count inside * ap_queue_info_wait_for_idler. */ if ((rv = SAFE_ACCEPT(apr_proc_mutex_lock(my_bucket->mutex))) != APR_SUCCESS) { if (!listener_may_exit) { accept_mutex_error("lock", rv, process_slot); } break; /* skip the lock release */ } if (!my_bucket->listeners->next) { /* Only one listener, so skip the poll */ lr = my_bucket->listeners; } else { while (!listener_may_exit) { apr_int32_t numdesc; const apr_pollfd_t *pdesc; rv = apr_pollset_poll(worker_pollset, -1, &numdesc, &pdesc); if (rv != APR_SUCCESS) { if (APR_STATUS_IS_EINTR(rv)) { continue; } /* apr_pollset_poll() will only return errors in catastrophic * circumstances. Let's try exiting gracefully, for now. */ ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_server_conf, APLOGNO(03137) "apr_pollset_poll: (listen)"); signal_threads(ST_GRACEFUL); } if (listener_may_exit) break; /* We can always use pdesc[0], but sockets at position N * could end up completely starved of attention in a very * busy server. Therefore, we round-robin across the * returned set of descriptors. While it is possible that * the returned set of descriptors might flip around and * continue to starve some sockets, we happen to know the * internal pollset implementation retains ordering * stability of the sockets. Thus, the round-robin should * ensure that a socket will eventually be serviced. */ if (last_poll_idx >= numdesc) last_poll_idx = 0; /* Grab a listener record from the client_data of the poll * descriptor, and advance our saved index to round-robin * the next fetch. * * ### hmm... this descriptor might have POLLERR rather * ### than POLLIN */ lr = pdesc[last_poll_idx++].client_data; break; } /* while */ } /* if/else */ if (!listener_may_exit) { /* the following pops a recycled ptrans pool off a stack */ ap_queue_info_pop_pool(worker_queue_info, &ptrans); if (ptrans == NULL) { /* we can't use a recycled transaction pool this time. * create a new transaction pool */ apr_allocator_t *allocator; apr_allocator_create(&allocator); apr_allocator_max_free_set(allocator, ap_max_mem_free); apr_pool_create_ex(&ptrans, pconf, NULL, allocator); apr_allocator_owner_set(allocator, ptrans); apr_pool_tag(ptrans, "transaction"); } rv = lr->accept_func(&csd, lr, ptrans); /* later we trash rv and rely on csd to indicate success/failure */ AP_DEBUG_ASSERT(rv == APR_SUCCESS || !csd); if (rv == APR_EGENERAL) { /* E[NM]FILE, ENOMEM, etc */ resource_shortage = 1; signal_threads(ST_GRACEFUL); } if ((rv = SAFE_ACCEPT(apr_proc_mutex_unlock(my_bucket->mutex))) != APR_SUCCESS) { if (listener_may_exit) { break; } accept_mutex_error("unlock", rv, process_slot); } if (csd != NULL) { rv = ap_queue_push_socket(worker_queue, csd, NULL, ptrans); if (rv) { /* trash the connection; we couldn't queue the connected * socket to a worker */ apr_socket_close(csd); ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(03138) "ap_queue_push_socket failed"); } else { have_idle_worker = 0; } } } else { if ((rv = SAFE_ACCEPT(apr_proc_mutex_unlock(my_bucket->mutex))) != APR_SUCCESS) { int level = APLOG_EMERG; if (ap_scoreboard_image->parent[process_slot].generation != ap_scoreboard_image->global->running_generation) { level = APLOG_DEBUG; /* common to get these at restart time */ } ap_log_error(APLOG_MARK, level, rv, ap_server_conf, APLOGNO(00274) "apr_proc_mutex_unlock failed. Attempting to " "shutdown process gracefully."); signal_threads(ST_GRACEFUL); } break; } } ap_close_listeners_ex(my_bucket->listeners); ap_queue_info_free_idle_pools(worker_queue_info); ap_queue_term(worker_queue); dying = 1; ap_scoreboard_image->parent[process_slot].quiescing = 1; /* wake up the main thread */ kill(ap_my_pid, SIGTERM); apr_thread_exit(thd, APR_SUCCESS); return NULL; } /* XXX For ungraceful termination/restart, we definitely don't want to * wait for active connections to finish but we may want to wait * for idle workers to get out of the queue code and release mutexes, * since those mutexes are cleaned up pretty soon and some systems * may not react favorably (i.e., segfault) if operations are attempted * on cleaned-up mutexes. */ static void * APR_THREAD_FUNC worker_thread(apr_thread_t *thd, void * dummy) { proc_info * ti = dummy; int process_slot = ti->pid; int thread_slot = ti->tid; apr_socket_t *csd = NULL; apr_bucket_alloc_t *bucket_alloc; apr_pool_t *last_ptrans = NULL; apr_pool_t *ptrans; /* Pool for per-transaction stuff */ apr_status_t rv; int is_idle = 0; free(ti); ap_scoreboard_image->servers[process_slot][thread_slot].pid = ap_my_pid; ap_scoreboard_image->servers[process_slot][thread_slot].tid = apr_os_thread_current(); ap_scoreboard_image->servers[process_slot][thread_slot].generation = retained->mpm->my_generation; ap_update_child_status_from_indexes(process_slot, thread_slot, SERVER_STARTING, NULL); #ifdef HAVE_PTHREAD_KILL unblock_signal(WORKER_SIGNAL); apr_signal(WORKER_SIGNAL, dummy_signal_handler); #endif while (!workers_may_exit) { if (!is_idle) { rv = ap_queue_info_set_idle(worker_queue_info, last_ptrans); last_ptrans = NULL; if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, ap_server_conf, "ap_queue_info_set_idle failed. Attempting to " "shutdown process gracefully."); signal_threads(ST_GRACEFUL); break; } is_idle = 1; } ap_update_child_status_from_indexes(process_slot, thread_slot, SERVER_READY, NULL); worker_pop: if (workers_may_exit) { break; } rv = ap_queue_pop_socket(worker_queue, &csd, &ptrans); if (rv != APR_SUCCESS) { /* We get APR_EOF during a graceful shutdown once all the connections * accepted by this server process have been handled. */ if (APR_STATUS_IS_EOF(rv)) { break; } /* We get APR_EINTR whenever ap_queue_pop_*() has been interrupted * from an explicit call to ap_queue_interrupt_all(). This allows * us to unblock threads stuck in ap_queue_pop_*() when a shutdown * is pending. * * If workers_may_exit is set and this is ungraceful termination/ * restart, we are bound to get an error on some systems (e.g., * AIX, which sanity-checks mutex operations) since the queue * may have already been cleaned up. Don't log the "error" if * workers_may_exit is set. */ else if (APR_STATUS_IS_EINTR(rv)) { goto worker_pop; } /* We got some other error. */ else if (!workers_may_exit) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(03139) "ap_queue_pop_socket failed"); } continue; } is_idle = 0; worker_sockets[thread_slot] = csd; bucket_alloc = apr_bucket_alloc_create(ptrans); process_socket(thd, ptrans, csd, process_slot, thread_slot, bucket_alloc); worker_sockets[thread_slot] = NULL; requests_this_child--; apr_pool_clear(ptrans); last_ptrans = ptrans; } ap_update_child_status_from_indexes(process_slot, thread_slot, dying ? SERVER_DEAD : SERVER_GRACEFUL, NULL); apr_thread_exit(thd, APR_SUCCESS); return NULL; } static int check_signal(int signum) { switch (signum) { case SIGTERM: case SIGINT: return 1; } return 0; } static void create_listener_thread(thread_starter *ts) { int my_child_num = ts->child_num_arg; apr_threadattr_t *thread_attr = ts->threadattr; proc_info *my_info; apr_status_t rv; my_info = (proc_info *)ap_malloc(sizeof(proc_info)); my_info->pid = my_child_num; my_info->tid = -1; /* listener thread doesn't have a thread slot */ my_info->sd = 0; rv = apr_thread_create(&ts->listener, thread_attr, listener_thread, my_info, pruntime); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ALERT, rv, ap_server_conf, APLOGNO(00275) "apr_thread_create: unable to create listener thread"); /* let the parent decide how bad this really is */ clean_child_exit(APEXIT_CHILDSICK); } apr_os_thread_get(&listener_os_thread, ts->listener); } static void setup_threads_runtime(void) { ap_listen_rec *lr; apr_status_t rv; /* All threads (listener, workers) and synchronization objects (queues, * pollset, mutexes...) created here should have at least the lifetime of * the connections they handle (i.e. ptrans). We can't use this thread's * self pool because all these objects survive it, nor use pchild or pconf * directly because this starter thread races with other modules' runtime, * nor finally pchild (or subpool thereof) because it is killed explicitely * before pconf (thus connections/ptrans can live longer, which matters in * ONE_PROCESS mode). So this leaves us with a subpool of pconf, created * before any ptrans hence destroyed after. */ apr_pool_create(&pruntime, pconf); apr_pool_tag(pruntime, "mpm_runtime"); /* We must create the fd queues before we start up the listener * and worker threads. */ rv = ap_queue_create(&worker_queue, threads_per_child, pruntime); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ALERT, rv, ap_server_conf, APLOGNO(03140) "ap_queue_create() failed"); clean_child_exit(APEXIT_CHILDFATAL); } rv = ap_queue_info_create(&worker_queue_info, pruntime, threads_per_child, -1); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ALERT, rv, ap_server_conf, APLOGNO(03141) "ap_queue_info_create() failed"); clean_child_exit(APEXIT_CHILDFATAL); } /* Create the main pollset */ rv = apr_pollset_create(&worker_pollset, num_listensocks, pruntime, APR_POLLSET_NOCOPY); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, ap_server_conf, APLOGNO(03285) "Couldn't create pollset in thread;" " check system or user limits"); /* let the parent decide how bad this really is */ clean_child_exit(APEXIT_CHILDSICK); } for (lr = my_bucket->listeners; lr != NULL; lr = lr->next) { apr_pollfd_t *pfd = apr_pcalloc(pruntime, sizeof *pfd); pfd->desc_type = APR_POLL_SOCKET; pfd->desc.s = lr->sd; pfd->reqevents = APR_POLLIN; pfd->client_data = lr; rv = apr_pollset_add(worker_pollset, pfd); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, ap_server_conf, APLOGNO(03286) "Couldn't create add listener to pollset;" " check system or user limits"); /* let the parent decide how bad this really is */ clean_child_exit(APEXIT_CHILDSICK); } lr->accept_func = ap_unixd_accept; } worker_sockets = apr_pcalloc(pruntime, threads_per_child * sizeof(apr_socket_t *)); } /* XXX under some circumstances not understood, children can get stuck * in start_threads forever trying to take over slots which will * never be cleaned up; for now there is an APLOG_DEBUG message issued * every so often when this condition occurs */ static void * APR_THREAD_FUNC start_threads(apr_thread_t *thd, void *dummy) { thread_starter *ts = dummy; apr_thread_t **threads = ts->threads; apr_threadattr_t *thread_attr = ts->threadattr; int my_child_num = ts->child_num_arg; proc_info *my_info; apr_status_t rv; int threads_created = 0; int listener_started = 0; int prev_threads_created; int loops, i; loops = prev_threads_created = 0; while (1) { /* threads_per_child does not include the listener thread */ for (i = 0; i < threads_per_child; i++) { int status = ap_scoreboard_image->servers[my_child_num][i].status; if (status != SERVER_GRACEFUL && status != SERVER_DEAD) { continue; } my_info = (proc_info *)ap_malloc(sizeof(proc_info)); my_info->pid = my_child_num; my_info->tid = i; my_info->sd = 0; /* We are creating threads right now */ ap_update_child_status_from_indexes(my_child_num, i, SERVER_STARTING, NULL); /* We let each thread update its own scoreboard entry. This is * done because it lets us deal with tid better. */ rv = apr_thread_create(&threads[i], thread_attr, worker_thread, my_info, pruntime); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ALERT, rv, ap_server_conf, APLOGNO(03142) "apr_thread_create: unable to create worker thread"); /* let the parent decide how bad this really is */ clean_child_exit(APEXIT_CHILDSICK); } threads_created++; } /* Start the listener only when there are workers available */ if (!listener_started && threads_created) { create_listener_thread(ts); listener_started = 1; } if (start_thread_may_exit || threads_created == threads_per_child) { break; } /* wait for previous generation to clean up an entry */ apr_sleep(apr_time_from_sec(1)); ++loops; if (loops % 120 == 0) { /* every couple of minutes */ if (prev_threads_created == threads_created) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, "child %" APR_PID_T_FMT " isn't taking over " "slots very quickly (%d of %d)", ap_my_pid, threads_created, threads_per_child); } prev_threads_created = threads_created; } } /* What state should this child_main process be listed as in the * scoreboard...? * ap_update_child_status_from_indexes(my_child_num, i, SERVER_STARTING, * (request_rec *) NULL); * * This state should be listed separately in the scoreboard, in some kind * of process_status, not mixed in with the worker threads' status. * "life_status" is almost right, but it's in the worker's structure, and * the name could be clearer. gla */ apr_thread_exit(thd, APR_SUCCESS); return NULL; } static void join_workers(apr_thread_t *listener, apr_thread_t **threads, int mode) { int i; apr_status_t rv, thread_rv; if (listener) { int iter; /* deal with a rare timing window which affects waking up the * listener thread... if the signal sent to the listener thread * is delivered between the time it verifies that the * listener_may_exit flag is clear and the time it enters a * blocking syscall, the signal didn't do any good... work around * that by sleeping briefly and sending it again */ iter = 0; while (iter < 10 && #ifdef HAVE_PTHREAD_KILL pthread_kill(*listener_os_thread, 0) #else kill(ap_my_pid, 0) #endif == 0) { /* listener not dead yet */ apr_sleep(apr_time_make(0, 500000)); wakeup_listener(); ++iter; } if (iter >= 10) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(00276) "the listener thread didn't exit"); } else { rv = apr_thread_join(&thread_rv, listener); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00277) "apr_thread_join: unable to join listener thread"); } } } for (i = 0; i < threads_per_child; i++) { if (threads[i]) { /* if we ever created this thread */ if (mode != ST_GRACEFUL) { #ifdef HAVE_PTHREAD_KILL apr_os_thread_t *worker_os_thread; apr_os_thread_get(&worker_os_thread, threads[i]); pthread_kill(*worker_os_thread, WORKER_SIGNAL); #endif } rv = apr_thread_join(&thread_rv, threads[i]); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00278) "apr_thread_join: unable to join worker " "thread %d", i); } } } } static void join_start_thread(apr_thread_t *start_thread_id) { apr_status_t rv, thread_rv; start_thread_may_exit = 1; /* tell it to give up in case it is still * trying to take over slots from a * previous generation */ rv = apr_thread_join(&thread_rv, start_thread_id); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00279) "apr_thread_join: unable to join the start " "thread"); } } static void child_main(int child_num_arg, int child_bucket) { apr_thread_t **threads; apr_status_t rv; thread_starter *ts; apr_threadattr_t *thread_attr; apr_thread_t *start_thread_id; int i; /* for benefit of any hooks that run as this child initializes */ retained->mpm->mpm_state = AP_MPMQ_STARTING; ap_my_pid = getpid(); ap_fatal_signal_child_setup(ap_server_conf); /* Get a sub context for global allocations in this child, so that * we can have cleanups occur when the child exits. */ apr_pool_create(&pchild, pconf); apr_pool_tag(pchild, "pchild"); /* close unused listeners and pods */ for (i = 0; i < retained->mpm->num_buckets; i++) { if (i != child_bucket) { ap_close_listeners_ex(all_buckets[i].listeners); ap_mpm_podx_close(all_buckets[i].pod); } } /*stuff to do before we switch id's, so we have permissions.*/ ap_reopen_scoreboard(pchild, NULL, 0); rv = SAFE_ACCEPT(apr_proc_mutex_child_init(&my_bucket->mutex, apr_proc_mutex_lockfile(my_bucket->mutex), pchild)); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, ap_server_conf, APLOGNO(00280) "Couldn't initialize cross-process lock in child"); clean_child_exit(APEXIT_CHILDFATAL); } /* done with init critical section */ if (ap_run_drop_privileges(pchild, ap_server_conf)) { clean_child_exit(APEXIT_CHILDFATAL); } /* Just use the standard apr_setup_signal_thread to block all signals * from being received. The child processes no longer use signals for * any communication with the parent process. Let's also do this before * child_init() hooks are called and possibly create threads that * otherwise could "steal" (implicitely) MPM's signals. */ rv = apr_setup_signal_thread(); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, ap_server_conf, APLOGNO(00281) "Couldn't initialize signal thread"); clean_child_exit(APEXIT_CHILDFATAL); } ap_run_child_init(pchild, ap_server_conf); if (ap_max_requests_per_child) { requests_this_child = ap_max_requests_per_child; } else { /* coding a value of zero means infinity */ requests_this_child = INT_MAX; } /* Setup threads */ /* Globals used by signal_threads() so to be initialized before */ setup_threads_runtime(); /* clear the storage; we may not create all our threads immediately, * and we want a 0 entry to indicate a thread which was not created */ threads = (apr_thread_t **)ap_calloc(1, sizeof(apr_thread_t *) * threads_per_child); ts = (thread_starter *)apr_palloc(pchild, sizeof(*ts)); apr_threadattr_create(&thread_attr, pchild); /* 0 means PTHREAD_CREATE_JOINABLE */ apr_threadattr_detach_set(thread_attr, 0); if (ap_thread_stacksize != 0) { rv = apr_threadattr_stacksize_set(thread_attr, ap_thread_stacksize); if (rv != APR_SUCCESS && rv != APR_ENOTIMPL) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, ap_server_conf, APLOGNO(02435) "WARNING: ThreadStackSize of %" APR_SIZE_T_FMT " is " "inappropriate, using default", ap_thread_stacksize); } } ts->threads = threads; ts->listener = NULL; ts->child_num_arg = child_num_arg; ts->threadattr = thread_attr; rv = apr_thread_create(&start_thread_id, thread_attr, start_threads, ts, pchild); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ALERT, rv, ap_server_conf, APLOGNO(00282) "apr_thread_create: unable to create worker thread"); /* let the parent decide how bad this really is */ clean_child_exit(APEXIT_CHILDSICK); } retained->mpm->mpm_state = AP_MPMQ_RUNNING; /* If we are only running in one_process mode, we will want to * still handle signals. */ if (one_process) { /* Block until we get a terminating signal. */ apr_signal_thread(check_signal); /* make sure the start thread has finished; signal_threads() * and join_workers() depend on that */ /* XXX join_start_thread() won't be awakened if one of our * threads encounters a critical error and attempts to * shutdown this child */ join_start_thread(start_thread_id); signal_threads(ST_UNGRACEFUL); /* helps us terminate a little more * quickly than the dispatch of the signal thread * beats the Pipe of Death and the browsers */ /* A terminating signal was received. Now join each of the * workers to clean them up. * If the worker already exited, then the join frees * their resources and returns. * If the worker hasn't exited, then this blocks until * they have (then cleans up). */ join_workers(ts->listener, threads, ST_UNGRACEFUL); } else { /* !one_process */ /* remove SIGTERM from the set of blocked signals... if one of * the other threads in the process needs to take us down * (e.g., for MaxConnectionsPerChild) it will send us SIGTERM */ unblock_signal(SIGTERM); apr_signal(SIGTERM, dummy_signal_handler); /* Watch for any messages from the parent over the POD */ while (1) { rv = ap_mpm_podx_check(my_bucket->pod); if (rv == AP_MPM_PODX_NORESTART) { /* see if termination was triggered while we slept */ switch(terminate_mode) { case ST_GRACEFUL: rv = AP_MPM_PODX_GRACEFUL; break; case ST_UNGRACEFUL: rv = AP_MPM_PODX_RESTART; break; } } if (rv == AP_MPM_PODX_GRACEFUL || rv == AP_MPM_PODX_RESTART) { /* make sure the start thread has finished; * signal_threads() and join_workers depend on that */ join_start_thread(start_thread_id); signal_threads(rv == AP_MPM_PODX_GRACEFUL ? ST_GRACEFUL : ST_UNGRACEFUL); break; } } /* A terminating signal was received. Now join each of the * workers to clean them up. * If the worker already exited, then the join frees * their resources and returns. * If the worker hasn't exited, then this blocks until * they have (then cleans up). */ join_workers(ts->listener, threads, rv == AP_MPM_PODX_GRACEFUL ? ST_GRACEFUL : ST_UNGRACEFUL); } free(threads); clean_child_exit(resource_shortage ? APEXIT_CHILDSICK : 0); } static int make_child(server_rec *s, int slot, int bucket) { int pid; if (slot + 1 > retained->max_daemons_limit) { retained->max_daemons_limit = slot + 1; } if (one_process) { my_bucket = &all_buckets[0]; worker_note_child_started(slot, getpid()); child_main(slot, 0); /* NOTREACHED */ ap_assert(0); return -1; } if ((pid = fork()) == -1) { ap_log_error(APLOG_MARK, APLOG_ERR, errno, s, APLOGNO(00283) "fork: Unable to fork new process"); /* fork didn't succeed. There's no need to touch the scoreboard; * if we were trying to replace a failed child process, then * server_main_loop() marked its workers SERVER_DEAD, and if * we were trying to replace a child process that exited normally, * its worker_thread()s left SERVER_DEAD or SERVER_GRACEFUL behind. */ /* In case system resources are maxxed out, we don't want Apache running away with the CPU trying to fork over and over and over again. */ apr_sleep(apr_time_from_sec(10)); return -1; } if (!pid) { my_bucket = &all_buckets[bucket]; #ifdef HAVE_BINDPROCESSOR /* By default, AIX binds to a single processor. This bit unbinds * children which will then bind to another CPU. */ int status = bindprocessor(BINDPROCESS, (int)getpid(), PROCESSOR_CLASS_ANY); if (status != OK) ap_log_error(APLOG_MARK, APLOG_DEBUG, errno, ap_server_conf, APLOGNO(00284) "processor unbind failed"); #endif RAISE_SIGSTOP(MAKE_CHILD); apr_signal(SIGTERM, just_die); child_main(slot, bucket); /* NOTREACHED */ ap_assert(0); return -1; } if (ap_scoreboard_image->parent[slot].pid != 0) { /* This new child process is squatting on the scoreboard * entry owned by an exiting child process, which cannot * exit until all active requests complete. */ worker_note_child_lost_slot(slot, pid); } ap_scoreboard_image->parent[slot].quiescing = 0; worker_note_child_started(slot, pid); return 0; } /* start up a bunch of children */ static void startup_children(int number_to_start) { int i; for (i = 0; number_to_start && i < ap_daemons_limit; ++i) { if (ap_scoreboard_image->parent[i].pid != 0) { continue; } if (make_child(ap_server_conf, i, i % retained->mpm->num_buckets) < 0) { break; } --number_to_start; } } static void perform_idle_server_maintenance(int child_bucket, int num_buckets) { int i, j; int idle_thread_count; worker_score *ws; process_score *ps; int free_length; int totally_free_length = 0; int free_slots[MAX_SPAWN_RATE]; int last_non_dead; int total_non_dead; int active_thread_count = 0; /* initialize the free_list */ free_length = 0; idle_thread_count = 0; last_non_dead = -1; total_non_dead = 0; for (i = 0; i < ap_daemons_limit; ++i) { /* Initialization to satisfy the compiler. It doesn't know * that threads_per_child is always > 0 */ int status = SERVER_DEAD; int any_dying_threads = 0; int any_dead_threads = 0; int all_dead_threads = 1; int child_threads_active = 0; int bucket = i % num_buckets; if (i >= retained->max_daemons_limit && totally_free_length == retained->idle_spawn_rate[child_bucket]) { /* short cut if all active processes have been examined and * enough empty scoreboard slots have been found */ break; } ps = &ap_scoreboard_image->parent[i]; for (j = 0; j < threads_per_child; j++) { ws = &ap_scoreboard_image->servers[i][j]; status = ws->status; /* XXX any_dying_threads is probably no longer needed GLA */ any_dying_threads = any_dying_threads || (status == SERVER_GRACEFUL); any_dead_threads = any_dead_threads || (status == SERVER_DEAD); all_dead_threads = all_dead_threads && (status == SERVER_DEAD || status == SERVER_GRACEFUL); /* We consider a starting server as idle because we started it * at least a cycle ago, and if it still hasn't finished starting * then we're just going to swamp things worse by forking more. * So we hopefully won't need to fork more if we count it. * This depends on the ordering of SERVER_READY and SERVER_STARTING. */ if (ps->pid != 0) { /* XXX just set all_dead_threads in outer for loop if no pid? not much else matters */ if (status <= SERVER_READY && !ps->quiescing && ps->generation == retained->mpm->my_generation && bucket == child_bucket) { ++idle_thread_count; } if (status >= SERVER_READY && status < SERVER_GRACEFUL) { ++child_threads_active; } } } active_thread_count += child_threads_active; if (any_dead_threads && bucket == child_bucket && totally_free_length < retained->idle_spawn_rate[child_bucket] && free_length < MAX_SPAWN_RATE / num_buckets && (!ps->pid /* no process in the slot */ || ps->quiescing)) { /* or at least one is going away */ if (all_dead_threads) { /* great! we prefer these, because the new process can * start more threads sooner. So prioritize this slot * by putting it ahead of any slots with active threads. * * first, make room by moving a slot that's potentially still * in use to the end of the array */ free_slots[free_length] = free_slots[totally_free_length]; free_slots[totally_free_length++] = i; } else { /* slot is still in use - back of the bus */ free_slots[free_length] = i; } ++free_length; } else if (child_threads_active == threads_per_child) { had_healthy_child = 1; } /* XXX if (!ps->quiescing) is probably more reliable GLA */ if (!any_dying_threads) { last_non_dead = i; ++total_non_dead; } } if (retained->sick_child_detected) { if (had_healthy_child) { /* Assume this is a transient error, even though it may not be. Leave * the server up in case it is able to serve some requests or the * problem will be resolved. */ retained->sick_child_detected = 0; } else { /* looks like a basket case, as no child ever fully initialized; give up. */ retained->mpm->shutdown_pending = 1; child_fatal = 1; ap_log_error(APLOG_MARK, APLOG_ALERT, 0, ap_server_conf, APLOGNO(02325) "A resource shortage or other unrecoverable failure " "was encountered before any child process initialized " "successfully... httpd is exiting!"); /* the child already logged the failure details */ return; } } retained->max_daemons_limit = last_non_dead + 1; if (idle_thread_count > max_spare_threads / num_buckets) { /* Kill off one child */ ap_mpm_podx_signal(all_buckets[child_bucket].pod, AP_MPM_PODX_GRACEFUL); retained->idle_spawn_rate[child_bucket] = 1; } else if (idle_thread_count < min_spare_threads / num_buckets) { /* terminate the free list */ if (free_length == 0) { /* scoreboard is full, can't fork */ if (active_thread_count >= ap_daemons_limit * threads_per_child) { /* no threads are "inactive" - starting, stopping, etc. */ /* have we reached MaxRequestWorkers, or just getting close? */ if (0 == idle_thread_count) { if (!retained->maxclients_reported) { /* only report this condition once */ ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(00286) "server reached MaxRequestWorkers " "setting, consider raising the " "MaxRequestWorkers setting"); retained->maxclients_reported = 1; } } else { if (!retained->near_maxclients_reported) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(00287) "server is within MinSpareThreads of " "MaxRequestWorkers, consider raising the " "MaxRequestWorkers setting"); retained->near_maxclients_reported = 1; } } } else { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(00288) "scoreboard is full, not at MaxRequestWorkers"); } retained->idle_spawn_rate[child_bucket] = 1; } else { if (free_length > retained->idle_spawn_rate[child_bucket]) { free_length = retained->idle_spawn_rate[child_bucket]; } if (retained->idle_spawn_rate[child_bucket] >= 8) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, ap_server_conf, APLOGNO(00289) "server seems busy, (you may need " "to increase StartServers, ThreadsPerChild " "or Min/MaxSpareThreads), " "spawning %d children, there are around %d idle " "threads, and %d total children", free_length, idle_thread_count, total_non_dead); } for (i = 0; i < free_length; ++i) { make_child(ap_server_conf, free_slots[i], child_bucket); } /* the next time around we want to spawn twice as many if this * wasn't good enough, but not if we've just done a graceful */ if (retained->hold_off_on_exponential_spawning) { --retained->hold_off_on_exponential_spawning; } else if (retained->idle_spawn_rate[child_bucket] < MAX_SPAWN_RATE / num_buckets) { retained->idle_spawn_rate[child_bucket] *= 2; } } } else { retained->idle_spawn_rate[child_bucket] = 1; } } static void server_main_loop(int remaining_children_to_start, int num_buckets) { ap_generation_t old_gen; int child_slot; apr_exit_why_e exitwhy; int status, processed_status; apr_proc_t pid; int i; while (!retained->mpm->restart_pending && !retained->mpm->shutdown_pending) { ap_wait_or_timeout(&exitwhy, &status, &pid, pconf, ap_server_conf); if (pid.pid != -1) { processed_status = ap_process_child_status(&pid, exitwhy, status); child_slot = ap_find_child_by_pid(&pid); if (processed_status == APEXIT_CHILDFATAL) { /* fix race condition found in PR 39311 * A child created at the same time as a graceful happens * can find the lock missing and create a fatal error. * It is not fatal for the last generation to be in this state. */ if (child_slot < 0 || ap_get_scoreboard_process(child_slot)->generation == retained->mpm->my_generation) { retained->mpm->shutdown_pending = 1; child_fatal = 1; return; } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ap_server_conf, APLOGNO(00290) "Ignoring fatal error in child of previous " "generation (pid %ld).", (long)pid.pid); retained->sick_child_detected = 1; } } else if (processed_status == APEXIT_CHILDSICK) { /* tell perform_idle_server_maintenance to check into this * on the next timer pop */ retained->sick_child_detected = 1; } /* non-fatal death... note that it's gone in the scoreboard. */ if (child_slot >= 0) { process_score *ps; for (i = 0; i < threads_per_child; i++) ap_update_child_status_from_indexes(child_slot, i, SERVER_DEAD, NULL); worker_note_child_killed(child_slot, 0, 0); ps = &ap_scoreboard_image->parent[child_slot]; ps->quiescing = 0; if (processed_status == APEXIT_CHILDSICK) { /* resource shortage, minimize the fork rate */ retained->idle_spawn_rate[child_slot % num_buckets] = 1; } else if (remaining_children_to_start && child_slot < ap_daemons_limit) { /* we're still doing a 1-for-1 replacement of dead * children with new children */ make_child(ap_server_conf, child_slot, child_slot % num_buckets); --remaining_children_to_start; } } else if (ap_unregister_extra_mpm_process(pid.pid, &old_gen) == 1) { worker_note_child_killed(-1, /* already out of the scoreboard */ pid.pid, old_gen); if (processed_status == APEXIT_CHILDSICK && old_gen == retained->mpm->my_generation) { /* resource shortage, minimize the fork rate */ for (i = 0; i < num_buckets; i++) { retained->idle_spawn_rate[i] = 1; } } #if APR_HAS_OTHER_CHILD } else if (apr_proc_other_child_alert(&pid, APR_OC_REASON_DEATH, status) == 0) { /* handled */ #endif } else if (retained->mpm->was_graceful) { /* Great, we've probably just lost a slot in the * scoreboard. Somehow we don't know about this child. */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ap_server_conf, APLOGNO(00291) "long lost child came home! (pid %ld)", (long)pid.pid); } /* Don't perform idle maintenance when a child dies, * only do it when there's a timeout. Remember only a * finite number of children can die, and it's pretty * pathological for a lot to die suddenly. */ continue; } else if (remaining_children_to_start) { /* we hit a 1 second timeout in which none of the previous * generation of children needed to be reaped... so assume * they're all done, and pick up the slack if any is left. */ startup_children(remaining_children_to_start); remaining_children_to_start = 0; /* In any event we really shouldn't do the code below because * few of the servers we just started are in the IDLE state * yet, so we'd mistakenly create an extra server. */ continue; } for (i = 0; i < num_buckets; i++) { perform_idle_server_maintenance(i, num_buckets); } } } static int worker_run(apr_pool_t *_pconf, apr_pool_t *plog, server_rec *s) { int num_buckets = retained->mpm->num_buckets; int remaining_children_to_start; int i; ap_log_pid(pconf, ap_pid_fname); if (!retained->mpm->was_graceful) { if (ap_run_pre_mpm(s->process->pool, SB_SHARED) != OK) { retained->mpm->mpm_state = AP_MPMQ_STOPPING; return !OK; } /* fix the generation number in the global score; we just got a new, * cleared scoreboard */ ap_scoreboard_image->global->running_generation = retained->mpm->my_generation; } ap_unixd_mpm_set_signals(pconf, one_process); /* Don't thrash since num_buckets depends on the * system and the number of online CPU cores... */ if (ap_daemons_limit < num_buckets) ap_daemons_limit = num_buckets; if (ap_daemons_to_start < num_buckets) ap_daemons_to_start = num_buckets; /* We want to create as much children at a time as the number of buckets, * so to optimally accept connections (evenly distributed across buckets). * Thus min_spare_threads should at least maintain num_buckets children, * and max_spare_threads allow num_buckets more children w/o triggering * immediately (e.g. num_buckets idle threads margin, one per bucket). */ if (min_spare_threads < threads_per_child * (num_buckets - 1) + num_buckets) min_spare_threads = threads_per_child * (num_buckets - 1) + num_buckets; if (max_spare_threads < min_spare_threads + (threads_per_child + 1) * num_buckets) max_spare_threads = min_spare_threads + (threads_per_child + 1) * num_buckets; /* If we're doing a graceful_restart then we're going to see a lot * of children exiting immediately when we get into the main loop * below (because we just sent them AP_SIG_GRACEFUL). This happens pretty * rapidly... and for each one that exits we may start a new one, until * there are at least min_spare_threads idle threads, counting across * all children. But we may be permitted to start more children than * that, so we'll just keep track of how many we're * supposed to start up without the 1 second penalty between each fork. */ remaining_children_to_start = ap_daemons_to_start; if (remaining_children_to_start > ap_daemons_limit) { remaining_children_to_start = ap_daemons_limit; } if (!retained->mpm->was_graceful) { startup_children(remaining_children_to_start); remaining_children_to_start = 0; } else { /* give the system some time to recover before kicking into * exponential mode */ retained->hold_off_on_exponential_spawning = 10; } ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00292) "%s configured -- resuming normal operations", ap_get_server_description()); ap_log_error(APLOG_MARK, APLOG_INFO, 0, ap_server_conf, APLOGNO(00293) "Server built: %s", ap_get_server_built()); ap_log_command_line(plog, s); ap_log_mpm_common(s); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(00294) "Accept mutex: %s (default: %s)", (all_buckets[0].mutex) ? apr_proc_mutex_name(all_buckets[0].mutex) : "none", apr_proc_mutex_defname()); retained->mpm->mpm_state = AP_MPMQ_RUNNING; server_main_loop(remaining_children_to_start, num_buckets); retained->mpm->mpm_state = AP_MPMQ_STOPPING; if (retained->mpm->shutdown_pending && retained->mpm->is_ungraceful) { /* Time to shut down: * Kill child processes, tell them to call child_exit, etc... */ for (i = 0; i < num_buckets; i++) { ap_mpm_podx_killpg(all_buckets[i].pod, ap_daemons_limit, AP_MPM_PODX_RESTART); } ap_reclaim_child_processes(1, /* Start with SIGTERM */ worker_note_child_killed); if (!child_fatal) { /* cleanup pid file on normal shutdown */ ap_remove_pid(pconf, ap_pid_fname); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00295) "caught SIGTERM, shutting down"); } return DONE; } if (retained->mpm->shutdown_pending) { /* Time to gracefully shut down: * Kill child processes, tell them to call child_exit, etc... */ int active_children; int index; apr_time_t cutoff = 0; /* Close our listeners, and then ask our children to do same */ ap_close_listeners(); for (i = 0; i < num_buckets; i++) { ap_mpm_podx_killpg(all_buckets[i].pod, ap_daemons_limit, AP_MPM_PODX_GRACEFUL); } ap_relieve_child_processes(worker_note_child_killed); if (!child_fatal) { /* cleanup pid file on normal shutdown */ ap_remove_pid(pconf, ap_pid_fname); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00296) "caught " AP_SIG_GRACEFUL_STOP_STRING ", shutting down gracefully"); } if (ap_graceful_shutdown_timeout) { cutoff = apr_time_now() + apr_time_from_sec(ap_graceful_shutdown_timeout); } /* Don't really exit until each child has finished */ retained->mpm->shutdown_pending = 0; do { /* Pause for a second */ apr_sleep(apr_time_from_sec(1)); /* Relieve any children which have now exited */ ap_relieve_child_processes(worker_note_child_killed); active_children = 0; for (index = 0; index < ap_daemons_limit; ++index) { if (ap_mpm_safe_kill(MPM_CHILD_PID(index), 0) == APR_SUCCESS) { active_children = 1; /* Having just one child is enough to stay around */ break; } } } while (!retained->mpm->shutdown_pending && active_children && (!ap_graceful_shutdown_timeout || apr_time_now() < cutoff)); /* We might be here because we received SIGTERM, either * way, try and make sure that all of our processes are * really dead. */ for (i = 0; i < num_buckets; i++) { ap_mpm_podx_killpg(all_buckets[i].pod, ap_daemons_limit, AP_MPM_PODX_RESTART); } ap_reclaim_child_processes(1, worker_note_child_killed); return DONE; } /* we've been told to restart */ if (one_process) { /* not worth thinking about */ return DONE; } /* advance to the next generation */ /* XXX: we really need to make sure this new generation number isn't in * use by any of the children. */ ++retained->mpm->my_generation; ap_scoreboard_image->global->running_generation = retained->mpm->my_generation; if (!retained->mpm->is_ungraceful) { ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00297) AP_SIG_GRACEFUL_STRING " received. Doing graceful restart"); /* wake up the children...time to die. But we'll have more soon */ for (i = 0; i < num_buckets; i++) { ap_mpm_podx_killpg(all_buckets[i].pod, ap_daemons_limit, AP_MPM_PODX_GRACEFUL); } /* This is mostly for debugging... so that we know what is still * gracefully dealing with existing request. */ } else { /* Kill 'em all. Since the child acts the same on the parents SIGTERM * and a SIGHUP, we may as well use the same signal, because some user * pthreads are stealing signals from us left and right. */ for (i = 0; i < num_buckets; i++) { ap_mpm_podx_killpg(all_buckets[i].pod, ap_daemons_limit, AP_MPM_PODX_RESTART); } ap_reclaim_child_processes(1, /* Start with SIGTERM */ worker_note_child_killed); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00298) "SIGHUP received. Attempting to restart"); } return OK; } /* This really should be a post_config hook, but the error log is already * redirected by that point, so we need to do this in the open_logs phase. */ static int worker_open_logs(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { int startup = 0; int level_flags = 0; int num_buckets = 0; ap_listen_rec **listen_buckets; apr_status_t rv; char id[16]; int i; pconf = p; /* the reverse of pre_config, we want this only the first time around */ if (retained->mpm->module_loads == 1) { startup = 1; level_flags |= APLOG_STARTUP; } if ((num_listensocks = ap_setup_listeners(ap_server_conf)) < 1) { ap_log_error(APLOG_MARK, APLOG_ALERT | level_flags, 0, (startup ? NULL : s), "no listening sockets available, shutting down"); return !OK; } if (one_process) { num_buckets = 1; } else if (retained->mpm->was_graceful) { /* Preserve the number of buckets on graceful restarts. */ num_buckets = retained->mpm->num_buckets; } if ((rv = ap_duplicate_listeners(pconf, ap_server_conf, &listen_buckets, &num_buckets))) { ap_log_error(APLOG_MARK, APLOG_CRIT | level_flags, rv, (startup ? NULL : s), "could not duplicate listeners"); return !OK; } all_buckets = apr_pcalloc(pconf, num_buckets * sizeof(*all_buckets)); for (i = 0; i < num_buckets; i++) { if (!one_process && /* no POD in one_process mode */ (rv = ap_mpm_podx_open(pconf, &all_buckets[i].pod))) { ap_log_error(APLOG_MARK, APLOG_CRIT | level_flags, rv, (startup ? NULL : s), "could not open pipe-of-death"); return !OK; } /* Initialize cross-process accept lock (safe accept needed only) */ if ((rv = SAFE_ACCEPT((apr_snprintf(id, sizeof id, "%i", i), ap_proc_mutex_create(&all_buckets[i].mutex, NULL, AP_ACCEPT_MUTEX_TYPE, id, s, pconf, 0))))) { ap_log_error(APLOG_MARK, APLOG_CRIT | level_flags, rv, (startup ? NULL : s), "could not create accept mutex"); return !OK; } all_buckets[i].listeners = listen_buckets[i]; } if (retained->mpm->max_buckets < num_buckets) { int new_max, *new_ptr; new_max = retained->mpm->max_buckets * 2; if (new_max < num_buckets) { new_max = num_buckets; } new_ptr = (int *)apr_palloc(ap_pglobal, new_max * sizeof(int)); memcpy(new_ptr, retained->idle_spawn_rate, retained->mpm->num_buckets * sizeof(int)); retained->idle_spawn_rate = new_ptr; retained->mpm->max_buckets = new_max; } if (retained->mpm->num_buckets < num_buckets) { int rate_max = 1; /* If new buckets are added, set their idle spawn rate to * the highest so far, so that they get filled as quickly * as the existing ones. */ for (i = 0; i < retained->mpm->num_buckets; i++) { if (rate_max < retained->idle_spawn_rate[i]) { rate_max = retained->idle_spawn_rate[i]; } } for (/* up to date i */; i < num_buckets; i++) { retained->idle_spawn_rate[i] = rate_max; } } retained->mpm->num_buckets = num_buckets; return OK; } static int worker_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { int no_detach, debug, foreground; apr_status_t rv; const char *userdata_key = "mpm_worker_module"; debug = ap_exists_config_define("DEBUG"); if (debug) { foreground = one_process = 1; no_detach = 0; } else { one_process = ap_exists_config_define("ONE_PROCESS"); no_detach = ap_exists_config_define("NO_DETACH"); foreground = ap_exists_config_define("FOREGROUND"); } ap_mutex_register(pconf, AP_ACCEPT_MUTEX_TYPE, NULL, APR_LOCK_DEFAULT, 0); retained = ap_retained_data_get(userdata_key); if (!retained) { retained = ap_retained_data_create(userdata_key, sizeof(*retained)); retained->mpm = ap_unixd_mpm_get_retained_data(); retained->max_daemons_limit = -1; } retained->mpm->mpm_state = AP_MPMQ_STARTING; if (retained->mpm->baton != retained) { retained->mpm->was_graceful = 0; retained->mpm->baton = retained; } ++retained->mpm->module_loads; /* sigh, want this only the second time around */ if (retained->mpm->module_loads == 2) { if (!one_process && !foreground) { /* before we detach, setup crash handlers to log to errorlog */ ap_fatal_signal_setup(ap_server_conf, pconf); rv = apr_proc_detach(no_detach ? APR_PROC_DETACH_FOREGROUND : APR_PROC_DETACH_DAEMONIZE); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, NULL, APLOGNO(00299) "apr_proc_detach failed"); return HTTP_INTERNAL_SERVER_ERROR; } } } parent_pid = ap_my_pid = getpid(); ap_listen_pre_config(); ap_daemons_to_start = DEFAULT_START_DAEMON; min_spare_threads = DEFAULT_MIN_FREE_DAEMON * DEFAULT_THREADS_PER_CHILD; max_spare_threads = DEFAULT_MAX_FREE_DAEMON * DEFAULT_THREADS_PER_CHILD; server_limit = DEFAULT_SERVER_LIMIT; thread_limit = DEFAULT_THREAD_LIMIT; ap_daemons_limit = server_limit; threads_per_child = DEFAULT_THREADS_PER_CHILD; max_workers = ap_daemons_limit * threads_per_child; had_healthy_child = 0; ap_extended_status = 0; return OK; } static int worker_check_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { int startup = 0; /* the reverse of pre_config, we want this only the first time around */ if (retained->mpm->module_loads == 1) { startup = 1; } if (server_limit > MAX_SERVER_LIMIT) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00300) "WARNING: ServerLimit of %d exceeds compile-time " "limit of %d servers, decreasing to %d.", server_limit, MAX_SERVER_LIMIT, MAX_SERVER_LIMIT); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00301) "ServerLimit of %d exceeds compile-time limit " "of %d, decreasing to match", server_limit, MAX_SERVER_LIMIT); } server_limit = MAX_SERVER_LIMIT; } else if (server_limit < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00302) "WARNING: ServerLimit of %d not allowed, " "increasing to 1.", server_limit); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00303) "ServerLimit of %d not allowed, increasing to 1", server_limit); } server_limit = 1; } /* you cannot change ServerLimit across a restart; ignore * any such attempts */ if (!retained->first_server_limit) { retained->first_server_limit = server_limit; } else if (server_limit != retained->first_server_limit) { /* don't need a startup console version here */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00304) "changing ServerLimit to %d from original value of %d " "not allowed during restart", server_limit, retained->first_server_limit); server_limit = retained->first_server_limit; } if (thread_limit > MAX_THREAD_LIMIT) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00305) "WARNING: ThreadLimit of %d exceeds compile-time " "limit of %d threads, decreasing to %d.", thread_limit, MAX_THREAD_LIMIT, MAX_THREAD_LIMIT); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00306) "ThreadLimit of %d exceeds compile-time limit " "of %d, decreasing to match", thread_limit, MAX_THREAD_LIMIT); } thread_limit = MAX_THREAD_LIMIT; } else if (thread_limit < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00307) "WARNING: ThreadLimit of %d not allowed, " "increasing to 1.", thread_limit); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00308) "ThreadLimit of %d not allowed, increasing to 1", thread_limit); } thread_limit = 1; } /* you cannot change ThreadLimit across a restart; ignore * any such attempts */ if (!retained->first_thread_limit) { retained->first_thread_limit = thread_limit; } else if (thread_limit != retained->first_thread_limit) { /* don't need a startup console version here */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00309) "changing ThreadLimit to %d from original value of %d " "not allowed during restart", thread_limit, retained->first_thread_limit); thread_limit = retained->first_thread_limit; } if (threads_per_child > thread_limit) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00310) "WARNING: ThreadsPerChild of %d exceeds ThreadLimit " "of %d threads, decreasing to %d. " "To increase, please see the ThreadLimit directive.", threads_per_child, thread_limit, thread_limit); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00311) "ThreadsPerChild of %d exceeds ThreadLimit " "of %d, decreasing to match", threads_per_child, thread_limit); } threads_per_child = thread_limit; } else if (threads_per_child < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00312) "WARNING: ThreadsPerChild of %d not allowed, " "increasing to 1.", threads_per_child); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00313) "ThreadsPerChild of %d not allowed, increasing to 1", threads_per_child); } threads_per_child = 1; } if (max_workers < threads_per_child) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00314) "WARNING: MaxRequestWorkers of %d is less than " "ThreadsPerChild of %d, increasing to %d. " "MaxRequestWorkers must be at least as large " "as the number of threads in a single server.", max_workers, threads_per_child, threads_per_child); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00315) "MaxRequestWorkers of %d is less than ThreadsPerChild " "of %d, increasing to match", max_workers, threads_per_child); } max_workers = threads_per_child; } ap_daemons_limit = max_workers / threads_per_child; if (max_workers % threads_per_child) { int tmp_max_workers = ap_daemons_limit * threads_per_child; if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00316) "WARNING: MaxRequestWorkers of %d is not an integer " "multiple of ThreadsPerChild of %d, decreasing to nearest " "multiple %d, for a maximum of %d servers.", max_workers, threads_per_child, tmp_max_workers, ap_daemons_limit); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00317) "MaxRequestWorkers of %d is not an integer multiple of " "ThreadsPerChild of %d, decreasing to nearest " "multiple %d", max_workers, threads_per_child, tmp_max_workers); } max_workers = tmp_max_workers; } if (ap_daemons_limit > server_limit) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00318) "WARNING: MaxRequestWorkers of %d would require %d " "servers and would exceed ServerLimit of %d, decreasing to %d. " "To increase, please see the ServerLimit directive.", max_workers, ap_daemons_limit, server_limit, server_limit * threads_per_child); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00319) "MaxRequestWorkers of %d would require %d servers and " "exceed ServerLimit of %d, decreasing to %d", max_workers, ap_daemons_limit, server_limit, server_limit * threads_per_child); } ap_daemons_limit = server_limit; } /* ap_daemons_to_start > ap_daemons_limit checked in worker_run() */ if (ap_daemons_to_start < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00320) "WARNING: StartServers of %d not allowed, " "increasing to 1.", ap_daemons_to_start); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00321) "StartServers of %d not allowed, increasing to 1", ap_daemons_to_start); } ap_daemons_to_start = 1; } if (min_spare_threads < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00322) "WARNING: MinSpareThreads of %d not allowed, " "increasing to 1 to avoid almost certain server failure. " "Please read the documentation.", min_spare_threads); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00323) "MinSpareThreads of %d not allowed, increasing to 1", min_spare_threads); } min_spare_threads = 1; } /* max_spare_threads < min_spare_threads + threads_per_child * checked in worker_run() */ return OK; } static void worker_hooks(apr_pool_t *p) { /* Our open_logs hook function must run before the core's, or stderr * will be redirected to a file, and the messages won't print to the * console. */ static const char *const aszSucc[] = {"core.c", NULL}; one_process = 0; ap_hook_open_logs(worker_open_logs, NULL, aszSucc, APR_HOOK_REALLY_FIRST); /* we need to set the MPM state before other pre-config hooks use MPM query * to retrieve it, so register as REALLY_FIRST */ ap_hook_pre_config(worker_pre_config, NULL, NULL, APR_HOOK_REALLY_FIRST); ap_hook_check_config(worker_check_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm(worker_run, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm_query(worker_query, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm_get_name(worker_get_name, NULL, NULL, APR_HOOK_MIDDLE); } static const char *set_daemons_to_start(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_daemons_to_start = atoi(arg); return NULL; } static const char *set_min_spare_threads(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } min_spare_threads = atoi(arg); return NULL; } static const char *set_max_spare_threads(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } max_spare_threads = atoi(arg); return NULL; } static const char *set_max_workers (cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (!strcasecmp(cmd->cmd->name, "MaxClients")) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, NULL, APLOGNO(00324) "MaxClients is deprecated, use MaxRequestWorkers " "instead."); } max_workers = atoi(arg); return NULL; } static const char *set_threads_per_child (cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } threads_per_child = atoi(arg); return NULL; } static const char *set_server_limit (cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } server_limit = atoi(arg); return NULL; } static const char *set_thread_limit (cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } thread_limit = atoi(arg); return NULL; } static const command_rec worker_cmds[] = { LISTEN_COMMANDS, AP_INIT_TAKE1("StartServers", set_daemons_to_start, NULL, RSRC_CONF, "Number of child processes launched at server startup"), AP_INIT_TAKE1("MinSpareThreads", set_min_spare_threads, NULL, RSRC_CONF, "Minimum number of idle threads, to handle request spikes"), AP_INIT_TAKE1("MaxSpareThreads", set_max_spare_threads, NULL, RSRC_CONF, "Maximum number of idle threads"), AP_INIT_TAKE1("MaxRequestWorkers", set_max_workers, NULL, RSRC_CONF, "Maximum number of threads alive at the same time"), AP_INIT_TAKE1("MaxClients", set_max_workers, NULL, RSRC_CONF, "Deprecated name of MaxRequestWorkers"), AP_INIT_TAKE1("ThreadsPerChild", set_threads_per_child, NULL, RSRC_CONF, "Number of threads each child creates"), AP_INIT_TAKE1("ServerLimit", set_server_limit, NULL, RSRC_CONF, "Maximum number of child processes for this run of Apache"), AP_INIT_TAKE1("ThreadLimit", set_thread_limit, NULL, RSRC_CONF, "Maximum number of worker threads per child process for this run of Apache - Upper limit for ThreadsPerChild"), AP_GRACEFUL_SHUTDOWN_TIMEOUT_COMMAND, { NULL } }; AP_DECLARE_MODULE(mpm_worker) = { MPM20_MODULE_STUFF, NULL, /* hook to run before apache parses args */ NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ worker_cmds, /* command apr_table_t */ worker_hooks /* register_hooks */ }; httpd-2.4.41/server/mpm/worker/Makefile.in0000644000000000000500000000005011274040000016670 0ustar rootsrc include $(top_srcdir)/build/special.mk httpd-2.4.41/server/mpm/event/0002755000000000000500000000000013523273341014461 5ustar rootsrchttpd-2.4.41/server/mpm/event/config3.m40000644000000000000500000000033713243014561016250 0ustar rootsrcdnl ## XXX - Need a more thorough check of the proper flags to use APACHE_SUBST(MOD_MPM_EVENT_LDADD) APACHE_MPM_MODULE(event, $enable_mpm_event, event.lo,[ AC_CHECK_FUNCS(pthread_kill) ], , [\$(MOD_MPM_EVENT_LDADD)]) httpd-2.4.41/server/mpm/event/mpm_default.h0000644000000000000500000000313711711754075017136 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file event/mpm_default.h * @brief Event MPM defaults * * @defgroup APACHE_MPM_EVENT Event MPM * @ingroup APACHE_INTERNAL * @{ */ #ifndef APACHE_MPM_DEFAULT_H #define APACHE_MPM_DEFAULT_H /* Number of servers to spawn off by default --- also, if fewer than * this free when the caretaker checks, it will spawn more. */ #ifndef DEFAULT_START_DAEMON #define DEFAULT_START_DAEMON 3 #endif /* Maximum number of *free* server processes --- more than this, and * they will die off. */ #ifndef DEFAULT_MAX_FREE_DAEMON #define DEFAULT_MAX_FREE_DAEMON 10 #endif /* Minimum --- fewer than this, and more will be created */ #ifndef DEFAULT_MIN_FREE_DAEMON #define DEFAULT_MIN_FREE_DAEMON 3 #endif #ifndef DEFAULT_THREADS_PER_CHILD #define DEFAULT_THREADS_PER_CHILD 25 #endif #endif /* AP_MPM_DEFAULT_H */ /** @} */ httpd-2.4.41/server/mpm/event/event.c0000644000000000000500000044165613520520073015756 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * This MPM tries to fix the 'keep alive problem' in HTTP. * * After a client completes the first request, the client can keep the * connection open to send more requests with the same socket. This can save * significant overhead in creating TCP connections. However, the major * disadvantage is that Apache traditionally keeps an entire child * process/thread waiting for data from the client. To solve this problem, * this MPM has a dedicated thread for handling both the Listening sockets, * and all sockets that are in a Keep Alive status. * * The MPM assumes the underlying apr_pollset implementation is somewhat * threadsafe. This currently is only compatible with KQueue and EPoll. This * enables the MPM to avoid extra high level locking or having to wake up the * listener thread when a keep-alive socket needs to be sent to it. * * This MPM does not perform well on older platforms that do not have very good * threading, like Linux with a 2.4 kernel, but this does not matter, since we * require EPoll or KQueue. * * For FreeBSD, use 5.3. It is possible to run this MPM on FreeBSD 5.2.1, if * you use libkse (see `man libmap.conf`). * * For NetBSD, use at least 2.0. * * For Linux, you should use a 2.6 kernel, and make sure your glibc has epoll * support compiled in. * */ #include "apr.h" #include "apr_portable.h" #include "apr_strings.h" #include "apr_file_io.h" #include "apr_thread_proc.h" #include "apr_signal.h" #include "apr_thread_mutex.h" #include "apr_poll.h" #include "apr_ring.h" #include "apr_queue.h" #include "apr_atomic.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "apr_version.h" #include #if APR_HAVE_UNISTD_H #include #endif #if APR_HAVE_SYS_SOCKET_H #include #endif #if APR_HAVE_SYS_WAIT_H #include #endif #ifdef HAVE_SYS_PROCESSOR_H #include /* for bindprocessor() */ #endif #if !APR_HAS_THREADS #error The Event MPM requires APR threads, but they are unavailable. #endif #include "ap_config.h" #include "httpd.h" #include "http_main.h" #include "http_log.h" #include "http_config.h" /* for read_config */ #include "http_core.h" /* for get_remote_host */ #include "http_connection.h" #include "http_protocol.h" #include "ap_mpm.h" #include "mpm_common.h" #include "ap_listen.h" #include "scoreboard.h" #include "mpm_fdqueue.h" #include "mpm_default.h" #include "http_vhost.h" #include "unixd.h" #include "apr_skiplist.h" #include #include /* for INT_MAX */ /* Limit on the total --- clients will be locked out if more servers than * this are needed. It is intended solely to keep the server from crashing * when things get out of hand. * * We keep a hard maximum number of servers, for two reasons --- first off, * in case something goes seriously wrong, we want to stop the fork bomb * short of actually crashing the machine we're running on by filling some * kernel table. Secondly, it keeps the size of the scoreboard file small * enough that we can read the whole thing without worrying too much about * the overhead. */ #ifndef DEFAULT_SERVER_LIMIT #define DEFAULT_SERVER_LIMIT 16 #endif /* Admin can't tune ServerLimit beyond MAX_SERVER_LIMIT. We want * some sort of compile-time limit to help catch typos. */ #ifndef MAX_SERVER_LIMIT #define MAX_SERVER_LIMIT 20000 #endif /* Limit on the threads per process. Clients will be locked out if more than * this are needed. * * We keep this for one reason it keeps the size of the scoreboard file small * enough that we can read the whole thing without worrying too much about * the overhead. */ #ifndef DEFAULT_THREAD_LIMIT #define DEFAULT_THREAD_LIMIT 64 #endif /* Admin can't tune ThreadLimit beyond MAX_THREAD_LIMIT. We want * some sort of compile-time limit to help catch typos. */ #ifndef MAX_THREAD_LIMIT #define MAX_THREAD_LIMIT 100000 #endif #define MPM_CHILD_PID(i) (ap_scoreboard_image->parent[i].pid) #if !APR_VERSION_AT_LEAST(1,4,0) #define apr_time_from_msec(x) (x * 1000) #endif #ifndef MAX_SECS_TO_LINGER #define MAX_SECS_TO_LINGER 30 #endif #define SECONDS_TO_LINGER 2 /* * Actual definitions of config globals */ #ifndef DEFAULT_WORKER_FACTOR #define DEFAULT_WORKER_FACTOR 2 #endif #define WORKER_FACTOR_SCALE 16 /* scale factor to allow fractional values */ static unsigned int worker_factor = DEFAULT_WORKER_FACTOR * WORKER_FACTOR_SCALE; /* AsyncRequestWorkerFactor * 16 */ static int threads_per_child = 0; /* ThreadsPerChild */ static int ap_daemons_to_start = 0; /* StartServers */ static int min_spare_threads = 0; /* MinSpareThreads */ static int max_spare_threads = 0; /* MaxSpareThreads */ static int active_daemons_limit = 0; /* MaxRequestWorkers / ThreadsPerChild */ static int active_daemons = 0; /* workers that still active, i.e. are not shutting down gracefully */ static int max_workers = 0; /* MaxRequestWorkers */ static int server_limit = 0; /* ServerLimit */ static int thread_limit = 0; /* ThreadLimit */ static int had_healthy_child = 0; static volatile int dying = 0; static volatile int workers_may_exit = 0; static volatile int start_thread_may_exit = 0; static volatile int listener_may_exit = 0; static int listener_is_wakeable = 0; /* Pollset supports APR_POLLSET_WAKEABLE */ static int num_listensocks = 0; static apr_int32_t conns_this_child; /* MaxConnectionsPerChild, only access in listener thread */ static apr_uint32_t connection_count = 0; /* Number of open connections */ static apr_uint32_t lingering_count = 0; /* Number of connections in lingering close */ static apr_uint32_t suspended_count = 0; /* Number of suspended connections */ static apr_uint32_t clogged_count = 0; /* Number of threads processing ssl conns */ static apr_uint32_t threads_shutdown = 0; /* Number of threads that have shutdown early during graceful termination */ static int resource_shortage = 0; static fd_queue_t *worker_queue; static fd_queue_info_t *worker_queue_info; static apr_thread_mutex_t *timeout_mutex; module AP_MODULE_DECLARE_DATA mpm_event_module; /* forward declare */ struct event_srv_cfg_s; typedef struct event_srv_cfg_s event_srv_cfg; static apr_pollfd_t *listener_pollfd; /* * The pollset for sockets that are in any of the timeout queues. Currently * we use the timeout_mutex to make sure that connections are added/removed * atomically to/from both event_pollset and a timeout queue. Otherwise * some confusion can happen under high load if timeout queues and pollset * get out of sync. * XXX: It should be possible to make the lock unnecessary in many or even all * XXX: cases. */ static apr_pollset_t *event_pollset; typedef struct event_conn_state_t event_conn_state_t; /* * The chain of connections to be shutdown by a worker thread (deferred), * linked list updated atomically. */ static event_conn_state_t *volatile defer_linger_chain; struct event_conn_state_t { /** APR_RING of expiration timeouts */ APR_RING_ENTRY(event_conn_state_t) timeout_list; /** the time when the entry was queued */ apr_time_t queue_timestamp; /** connection record this struct refers to */ conn_rec *c; /** request record (if any) this struct refers to */ request_rec *r; /** server config this struct refers to */ event_srv_cfg *sc; /** scoreboard handle for the conn_rec */ ap_sb_handle_t *sbh; /** is the current conn_rec suspended? (disassociated with * a particular MPM thread; for suspend_/resume_connection * hooks) */ int suspended; /** memory pool to allocate from */ apr_pool_t *p; /** bucket allocator */ apr_bucket_alloc_t *bucket_alloc; /** poll file descriptor information */ apr_pollfd_t pfd; /** public parts of the connection state */ conn_state_t pub; /** chaining in defer_linger_chain */ struct event_conn_state_t *chain; }; APR_RING_HEAD(timeout_head_t, event_conn_state_t); struct timeout_queue { struct timeout_head_t head; apr_interval_time_t timeout; apr_uint32_t count; /* for this queue */ apr_uint32_t *total; /* for all chained/related queues */ struct timeout_queue *next; /* chaining */ }; /* * Several timeout queues that use different timeouts, so that we always can * simply append to the end. * write_completion_q uses vhost's TimeOut * keepalive_q uses vhost's KeepAliveTimeOut * linger_q uses MAX_SECS_TO_LINGER * short_linger_q uses SECONDS_TO_LINGER */ static struct timeout_queue *write_completion_q, *keepalive_q, *linger_q, *short_linger_q; static volatile apr_time_t queues_next_expiry; /* Prevent extra poll/wakeup calls for timeouts close in the future (queues * have the granularity of a second anyway). * XXX: Wouldn't 0.5s (instead of 0.1s) be "enough"? */ #define TIMEOUT_FUDGE_FACTOR apr_time_from_msec(100) /* * Macros for accessing struct timeout_queue. * For TO_QUEUE_APPEND and TO_QUEUE_REMOVE, timeout_mutex must be held. */ static void TO_QUEUE_APPEND(struct timeout_queue *q, event_conn_state_t *el) { apr_time_t q_expiry; apr_time_t next_expiry; APR_RING_INSERT_TAIL(&q->head, el, event_conn_state_t, timeout_list); ++*q->total; ++q->count; /* Cheaply update the overall queues' next expiry according to the * first entry of this queue (oldest), if necessary. */ el = APR_RING_FIRST(&q->head); q_expiry = el->queue_timestamp + q->timeout; next_expiry = queues_next_expiry; if (!next_expiry || next_expiry > q_expiry + TIMEOUT_FUDGE_FACTOR) { queues_next_expiry = q_expiry; /* Unblock the poll()ing listener for it to update its timeout. */ if (listener_is_wakeable) { apr_pollset_wakeup(event_pollset); } } } static void TO_QUEUE_REMOVE(struct timeout_queue *q, event_conn_state_t *el) { APR_RING_REMOVE(el, timeout_list); APR_RING_ELEM_INIT(el, timeout_list); --*q->total; --q->count; } static struct timeout_queue *TO_QUEUE_MAKE(apr_pool_t *p, apr_time_t t, struct timeout_queue *ref) { struct timeout_queue *q; q = apr_pcalloc(p, sizeof *q); APR_RING_INIT(&q->head, event_conn_state_t, timeout_list); q->total = (ref) ? ref->total : apr_pcalloc(p, sizeof *q->total); q->timeout = t; return q; } #define TO_QUEUE_ELEM_INIT(el) \ APR_RING_ELEM_INIT((el), timeout_list) /* The structure used to pass unique initialization info to each thread */ typedef struct { int pslot; /* process slot */ int tslot; /* worker slot of the thread */ } proc_info; /* Structure used to pass information to the thread responsible for * creating the rest of the threads. */ typedef struct { apr_thread_t **threads; apr_thread_t *listener; int child_num_arg; apr_threadattr_t *threadattr; } thread_starter; typedef enum { PT_CSD, PT_ACCEPT } poll_type_e; typedef struct { poll_type_e type; void *baton; } listener_poll_type; /* data retained by event across load/unload of the module * allocated on first call to pre-config hook; located on * subsequent calls to pre-config hook */ typedef struct event_retained_data { ap_unixd_mpm_retained_data *mpm; int first_server_limit; int first_thread_limit; int sick_child_detected; int maxclients_reported; int near_maxclients_reported; /* * The max child slot ever assigned, preserved across restarts. Necessary * to deal with MaxRequestWorkers changes across AP_SIG_GRACEFUL restarts. * We use this value to optimize routines that have to scan the entire * scoreboard. */ int max_daemons_limit; /* * All running workers, active and shutting down, including those that * may be left from before a graceful restart. * Not kept up-to-date when shutdown is pending. */ int total_daemons; /* * idle_spawn_rate is the number of children that will be spawned on the * next maintenance cycle if there aren't enough idle servers. It is * maintained per listeners bucket, doubled up to MAX_SPAWN_RATE, and * reset only when a cycle goes by without the need to spawn. */ int *idle_spawn_rate; #ifndef MAX_SPAWN_RATE #define MAX_SPAWN_RATE (32) #endif int hold_off_on_exponential_spawning; } event_retained_data; static event_retained_data *retained; typedef struct event_child_bucket { ap_pod_t *pod; ap_listen_rec *listeners; } event_child_bucket; static event_child_bucket *all_buckets, /* All listeners buckets */ *my_bucket; /* Current child bucket */ struct event_srv_cfg_s { struct timeout_queue *wc_q, *ka_q; }; #define ID_FROM_CHILD_THREAD(c, t) ((c * thread_limit) + t) /* The event MPM respects a couple of runtime flags that can aid * in debugging. Setting the -DNO_DETACH flag will prevent the root process * from detaching from its controlling terminal. Additionally, setting * the -DONE_PROCESS flag (which implies -DNO_DETACH) will get you the * child_main loop running in the process which originally started up. * This gives you a pretty nice debugging environment. (You'll get a SIGHUP * early in standalone_main; just continue through. This is the server * trying to kill off any child processes which it might have lying * around --- Apache doesn't keep track of their pids, it just sends * SIGHUP to the process group, ignoring it in the root process. * Continue through and you'll be fine.). */ static int one_process = 0; #ifdef DEBUG_SIGSTOP int raise_sigstop_flags; #endif static apr_pool_t *pconf; /* Pool for config stuff */ static apr_pool_t *pchild; /* Pool for httpd child stuff */ static apr_pool_t *pruntime; /* Pool for MPM threads stuff */ static pid_t ap_my_pid; /* Linux getpid() doesn't work except in main thread. Use this instead */ static pid_t parent_pid; static apr_os_thread_t *listener_os_thread; static int ap_child_slot; /* Current child process slot in scoreboard */ /* The LISTENER_SIGNAL signal will be sent from the main thread to the * listener thread to wake it up for graceful termination (what a child * process from an old generation does when the admin does "apachectl * graceful"). This signal will be blocked in all threads of a child * process except for the listener thread. */ #define LISTENER_SIGNAL SIGHUP /* An array of socket descriptors in use by each thread used to * perform a non-graceful (forced) shutdown of the server. */ static apr_socket_t **worker_sockets; static volatile apr_uint32_t listensocks_disabled; static void disable_listensocks(void) { int i; if (apr_atomic_cas32(&listensocks_disabled, 1, 0) != 0) { return; } if (event_pollset) { for (i = 0; i < num_listensocks; i++) { apr_pollset_remove(event_pollset, &listener_pollfd[i]); } } ap_scoreboard_image->parent[ap_child_slot].not_accepting = 1; } static void enable_listensocks(void) { int i; if (listener_may_exit || apr_atomic_cas32(&listensocks_disabled, 0, 1) != 1) { return; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(00457) "Accepting new connections again: " "%u active conns (%u lingering/%u clogged/%u suspended), " "%u idle workers", apr_atomic_read32(&connection_count), apr_atomic_read32(&lingering_count), apr_atomic_read32(&clogged_count), apr_atomic_read32(&suspended_count), ap_queue_info_num_idlers(worker_queue_info)); for (i = 0; i < num_listensocks; i++) apr_pollset_add(event_pollset, &listener_pollfd[i]); /* * XXX: This is not yet optimal. If many workers suddenly become available, * XXX: the parent may kill some processes off too soon. */ ap_scoreboard_image->parent[ap_child_slot].not_accepting = 0; } static APR_INLINE apr_uint32_t listeners_disabled(void) { return apr_atomic_read32(&listensocks_disabled); } static APR_INLINE int connections_above_limit(void) { apr_uint32_t i_count = ap_queue_info_num_idlers(worker_queue_info); if (i_count > 0) { apr_uint32_t c_count = apr_atomic_read32(&connection_count); apr_uint32_t l_count = apr_atomic_read32(&lingering_count); if (c_count <= l_count /* Off by 'listeners_disabled()' to avoid flip flop */ || c_count - l_count < (apr_uint32_t)threads_per_child + (i_count - listeners_disabled()) * (worker_factor / WORKER_FACTOR_SCALE)) { return 0; } } return 1; } static void abort_socket_nonblocking(apr_socket_t *csd) { apr_status_t rv; apr_socket_timeout_set(csd, 0); #if defined(SOL_SOCKET) && defined(SO_LINGER) /* This socket is over now, and we don't want to block nor linger * anymore, so reset it. A normal close could still linger in the * system, while RST is fast, nonblocking, and what the peer will * get if it sends us further data anyway. */ { apr_os_sock_t osd = -1; struct linger opt; opt.l_onoff = 1; opt.l_linger = 0; /* zero timeout is RST */ apr_os_sock_get(&osd, csd); setsockopt(osd, SOL_SOCKET, SO_LINGER, (void *)&opt, sizeof opt); } #endif rv = apr_socket_close(csd); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_server_conf, APLOGNO(00468) "error closing socket"); AP_DEBUG_ASSERT(0); } } static void close_worker_sockets(void) { int i; for (i = 0; i < threads_per_child; i++) { apr_socket_t *csd = worker_sockets[i]; if (csd) { worker_sockets[i] = NULL; abort_socket_nonblocking(csd); } } for (;;) { event_conn_state_t *cs = defer_linger_chain; if (!cs) { break; } if (apr_atomic_casptr((void *)&defer_linger_chain, cs->chain, cs) != cs) { /* Race lost, try again */ continue; } cs->chain = NULL; abort_socket_nonblocking(cs->pfd.desc.s); } } static void wakeup_listener(void) { listener_may_exit = 1; disable_listensocks(); /* Unblock the listener if it's poll()ing */ if (event_pollset && listener_is_wakeable) { apr_pollset_wakeup(event_pollset); } /* unblock the listener if it's waiting for a worker */ if (worker_queue_info) { ap_queue_info_term(worker_queue_info); } if (!listener_os_thread) { /* XXX there is an obscure path that this doesn't handle perfectly: * right after listener thread is created but before * listener_os_thread is set, the first worker thread hits an * error and starts graceful termination */ return; } /* * we should just be able to "kill(ap_my_pid, LISTENER_SIGNAL)" on all * platforms and wake up the listener thread since it is the only thread * with SIGHUP unblocked, but that doesn't work on Linux */ #ifdef HAVE_PTHREAD_KILL pthread_kill(*listener_os_thread, LISTENER_SIGNAL); #else kill(ap_my_pid, LISTENER_SIGNAL); #endif } #define ST_INIT 0 #define ST_GRACEFUL 1 #define ST_UNGRACEFUL 2 static int terminate_mode = ST_INIT; static void signal_threads(int mode) { if (terminate_mode >= mode) { return; } terminate_mode = mode; retained->mpm->mpm_state = AP_MPMQ_STOPPING; /* in case we weren't called from the listener thread, wake up the * listener thread */ wakeup_listener(); /* for ungraceful termination, let the workers exit now; * for graceful termination, the listener thread will notify the * workers to exit once it has stopped accepting new connections */ if (mode == ST_UNGRACEFUL) { workers_may_exit = 1; ap_queue_interrupt_all(worker_queue); close_worker_sockets(); /* forcefully kill all current connections */ } } static int event_query(int query_code, int *result, apr_status_t *rv) { *rv = APR_SUCCESS; switch (query_code) { case AP_MPMQ_MAX_DAEMON_USED: *result = retained->max_daemons_limit; break; case AP_MPMQ_IS_THREADED: *result = AP_MPMQ_STATIC; break; case AP_MPMQ_IS_FORKED: *result = AP_MPMQ_DYNAMIC; break; case AP_MPMQ_IS_ASYNC: *result = 1; break; case AP_MPMQ_HARD_LIMIT_DAEMONS: *result = server_limit; break; case AP_MPMQ_HARD_LIMIT_THREADS: *result = thread_limit; break; case AP_MPMQ_MAX_THREADS: *result = threads_per_child; break; case AP_MPMQ_MIN_SPARE_DAEMONS: *result = 0; break; case AP_MPMQ_MIN_SPARE_THREADS: *result = min_spare_threads; break; case AP_MPMQ_MAX_SPARE_DAEMONS: *result = 0; break; case AP_MPMQ_MAX_SPARE_THREADS: *result = max_spare_threads; break; case AP_MPMQ_MAX_REQUESTS_DAEMON: *result = ap_max_requests_per_child; break; case AP_MPMQ_MAX_DAEMONS: *result = active_daemons_limit; break; case AP_MPMQ_MPM_STATE: *result = retained->mpm->mpm_state; break; case AP_MPMQ_GENERATION: *result = retained->mpm->my_generation; break; default: *rv = APR_ENOTIMPL; break; } return OK; } static void event_note_child_killed(int childnum, pid_t pid, ap_generation_t gen) { if (childnum != -1) { /* child had a scoreboard slot? */ ap_run_child_status(ap_server_conf, ap_scoreboard_image->parent[childnum].pid, ap_scoreboard_image->parent[childnum].generation, childnum, MPM_CHILD_EXITED); ap_scoreboard_image->parent[childnum].pid = 0; } else { ap_run_child_status(ap_server_conf, pid, gen, -1, MPM_CHILD_EXITED); } } static void event_note_child_started(int slot, pid_t pid) { ap_generation_t gen = retained->mpm->my_generation; ap_scoreboard_image->parent[slot].pid = pid; ap_scoreboard_image->parent[slot].generation = gen; ap_run_child_status(ap_server_conf, pid, gen, slot, MPM_CHILD_STARTED); } static const char *event_get_name(void) { return "event"; } /* a clean exit from a child with proper cleanup */ static void clean_child_exit(int code) __attribute__ ((noreturn)); static void clean_child_exit(int code) { retained->mpm->mpm_state = AP_MPMQ_STOPPING; if (pchild) { apr_pool_destroy(pchild); } if (one_process) { event_note_child_killed(/* slot */ 0, 0, 0); } exit(code); } static void just_die(int sig) { clean_child_exit(0); } /***************************************************************** * Connection structures and accounting... */ static int child_fatal; static apr_status_t decrement_connection_count(void *cs_) { int is_last_connection; event_conn_state_t *cs = cs_; switch (cs->pub.state) { case CONN_STATE_LINGER_NORMAL: case CONN_STATE_LINGER_SHORT: apr_atomic_dec32(&lingering_count); break; case CONN_STATE_SUSPENDED: apr_atomic_dec32(&suspended_count); break; default: break; } /* Unblock the listener if it's waiting for connection_count = 0, * or if the listening sockets were disabled due to limits and can * now accept new connections. */ is_last_connection = !apr_atomic_dec32(&connection_count); if (listener_is_wakeable && ((is_last_connection && listener_may_exit) || (listeners_disabled() && !connections_above_limit()))) { apr_pollset_wakeup(event_pollset); } return APR_SUCCESS; } static void notify_suspend(event_conn_state_t *cs) { ap_run_suspend_connection(cs->c, cs->r); cs->c->sbh = NULL; cs->suspended = 1; } static void notify_resume(event_conn_state_t *cs, int cleanup) { cs->suspended = 0; cs->c->sbh = cleanup ? NULL : cs->sbh; ap_run_resume_connection(cs->c, cs->r); } /* * Close our side of the connection, flushing data to the client first. * Pre-condition: cs is not in any timeout queue and not in the pollset, * timeout_mutex is not locked * return: 0 if connection is fully closed, * 1 if connection is lingering * May only be called by worker thread. */ static int start_lingering_close_blocking(event_conn_state_t *cs) { apr_socket_t *csd = cs->pfd.desc.s; if (ap_start_lingering_close(cs->c)) { notify_suspend(cs); apr_socket_close(csd); ap_queue_info_push_pool(worker_queue_info, cs->p); return DONE; } #ifdef AP_DEBUG { apr_status_t rv; rv = apr_socket_timeout_set(csd, 0); AP_DEBUG_ASSERT(rv == APR_SUCCESS); } #else apr_socket_timeout_set(csd, 0); #endif cs->queue_timestamp = apr_time_now(); /* * If some module requested a shortened waiting period, only wait for * 2s (SECONDS_TO_LINGER). This is useful for mitigating certain * DoS attacks. */ if (apr_table_get(cs->c->notes, "short-lingering-close")) { cs->pub.state = CONN_STATE_LINGER_SHORT; } else { cs->pub.state = CONN_STATE_LINGER_NORMAL; } apr_atomic_inc32(&lingering_count); notify_suspend(cs); return OK; } /* * Defer flush and close of the connection by adding it to defer_linger_chain, * for a worker to grab it and do the job (should that be blocking). * Pre-condition: cs is not in any timeout queue and not in the pollset, * timeout_mutex is not locked * return: 1 connection is alive (but aside and about to linger) * May be called by listener thread. */ static int start_lingering_close_nonblocking(event_conn_state_t *cs) { event_conn_state_t *chain; for (;;) { cs->chain = chain = defer_linger_chain; if (apr_atomic_casptr((void *)&defer_linger_chain, cs, chain) != chain) { /* Race lost, try again */ continue; } return 1; } } /* * forcibly close a lingering connection after the lingering period has * expired * Pre-condition: cs is not in any timeout queue and not in the pollset * return: irrelevant (need same prototype as start_lingering_close) */ static int stop_lingering_close(event_conn_state_t *cs) { apr_socket_t *csd = ap_get_conn_socket(cs->c); ap_log_error(APLOG_MARK, APLOG_TRACE4, 0, ap_server_conf, "socket abort in state %i", (int)cs->pub.state); abort_socket_nonblocking(csd); ap_queue_info_push_pool(worker_queue_info, cs->p); if (dying) ap_queue_interrupt_one(worker_queue); return 0; } /* * This runs before any non-MPM cleanup code on the connection; * if the connection is currently suspended as far as modules * know, provide notification of resumption. */ static apr_status_t ptrans_pre_cleanup(void *dummy) { event_conn_state_t *cs = dummy; if (cs->suspended) { notify_resume(cs, 1); } return APR_SUCCESS; } /* * event_pre_read_request() and event_request_cleanup() track the * current r for a given connection. */ static apr_status_t event_request_cleanup(void *dummy) { conn_rec *c = dummy; event_conn_state_t *cs = ap_get_module_config(c->conn_config, &mpm_event_module); cs->r = NULL; return APR_SUCCESS; } static void event_pre_read_request(request_rec *r, conn_rec *c) { event_conn_state_t *cs = ap_get_module_config(c->conn_config, &mpm_event_module); cs->r = r; cs->sc = ap_get_module_config(ap_server_conf->module_config, &mpm_event_module); apr_pool_cleanup_register(r->pool, c, event_request_cleanup, apr_pool_cleanup_null); } /* * event_post_read_request() tracks the current server config for a * given request. */ static int event_post_read_request(request_rec *r) { conn_rec *c = r->connection; event_conn_state_t *cs = ap_get_module_config(c->conn_config, &mpm_event_module); /* To preserve legacy behaviour (consistent with other MPMs), use * the keepalive timeout from the base server (first on this IP:port) * when none is explicitly configured on this server. */ if (r->server->keep_alive_timeout_set) { cs->sc = ap_get_module_config(r->server->module_config, &mpm_event_module); } else { cs->sc = ap_get_module_config(c->base_server->module_config, &mpm_event_module); } return OK; } /* Forward declare */ static void process_lingering_close(event_conn_state_t *cs); /* * process one connection in the worker */ static void process_socket(apr_thread_t *thd, apr_pool_t * p, apr_socket_t * sock, event_conn_state_t * cs, int my_child_num, int my_thread_num) { conn_rec *c; long conn_id = ID_FROM_CHILD_THREAD(my_child_num, my_thread_num); int clogging = 0; apr_status_t rv; int rc = OK; if (cs == NULL) { /* This is a new connection */ listener_poll_type *pt = apr_pcalloc(p, sizeof(*pt)); cs = apr_pcalloc(p, sizeof(event_conn_state_t)); cs->bucket_alloc = apr_bucket_alloc_create(p); ap_create_sb_handle(&cs->sbh, p, my_child_num, my_thread_num); c = ap_run_create_connection(p, ap_server_conf, sock, conn_id, cs->sbh, cs->bucket_alloc); if (!c) { ap_queue_info_push_pool(worker_queue_info, p); return; } apr_atomic_inc32(&connection_count); apr_pool_cleanup_register(c->pool, cs, decrement_connection_count, apr_pool_cleanup_null); ap_set_module_config(c->conn_config, &mpm_event_module, cs); c->current_thread = thd; cs->c = c; c->cs = &(cs->pub); cs->p = p; cs->sc = ap_get_module_config(ap_server_conf->module_config, &mpm_event_module); cs->pfd.desc_type = APR_POLL_SOCKET; cs->pfd.reqevents = APR_POLLIN; cs->pfd.desc.s = sock; pt->type = PT_CSD; pt->baton = cs; cs->pfd.client_data = pt; apr_pool_pre_cleanup_register(p, cs, ptrans_pre_cleanup); TO_QUEUE_ELEM_INIT(cs); ap_update_vhost_given_ip(c); rc = ap_run_pre_connection(c, sock); if (rc != OK && rc != DONE) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(00469) "process_socket: connection aborted"); c->aborted = 1; } /** * XXX If the platform does not have a usable way of bundling * accept() with a socket readability check, like Win32, * and there are measurable delays before the * socket is readable due to the first data packet arriving, * it might be better to create the cs on the listener thread * with the state set to CONN_STATE_CHECK_REQUEST_LINE_READABLE * * FreeBSD users will want to enable the HTTP accept filter * module in their kernel for the highest performance * When the accept filter is active, sockets are kept in the * kernel until a HTTP request is received. */ cs->pub.state = CONN_STATE_READ_REQUEST_LINE; cs->pub.sense = CONN_SENSE_DEFAULT; rc = OK; } else { c = cs->c; ap_update_sb_handle(cs->sbh, my_child_num, my_thread_num); notify_resume(cs, 0); c->current_thread = thd; /* Subsequent request on a conn, and thread number is part of ID */ c->id = conn_id; } if (c->aborted) { /* do lingering close below */ cs->pub.state = CONN_STATE_LINGER; } else if (cs->pub.state >= CONN_STATE_LINGER) { /* fall through */ } else { if (cs->pub.state == CONN_STATE_READ_REQUEST_LINE /* If we have an input filter which 'clogs' the input stream, * like mod_ssl used to, lets just do the normal read from input * filters, like the Worker MPM does. Filters that need to write * where they would otherwise read, or read where they would * otherwise write, should set the sense appropriately. */ || c->clogging_input_filters) { read_request: clogging = c->clogging_input_filters; if (clogging) { apr_atomic_inc32(&clogged_count); } rc = ap_run_process_connection(c); if (clogging) { apr_atomic_dec32(&clogged_count); } if (cs->pub.state > CONN_STATE_LINGER) { cs->pub.state = CONN_STATE_LINGER; } if (rc == DONE) { rc = OK; } } } /* * The process_connection hooks above should set the connection state * appropriately upon return, for event MPM to either: * - do lingering close (CONN_STATE_LINGER), * - wait for readability of the next request with respect to the keepalive * timeout (state CONN_STATE_CHECK_REQUEST_LINE_READABLE), * - wait for read/write-ability of the underlying socket with respect to * its timeout by setting c->clogging_input_filters to 1 and the sense * to CONN_SENSE_WANT_READ/WRITE (state CONN_STATE_WRITE_COMPLETION), * - keep flushing the output filters stack in nonblocking mode, and then * if required wait for read/write-ability of the underlying socket with * respect to its own timeout (state CONN_STATE_WRITE_COMPLETION); since * completion at some point may require reads (e.g. SSL_ERROR_WANT_READ), * an output filter can also set the sense to CONN_SENSE_WANT_READ at any * time for event MPM to do the right thing, * - suspend the connection (SUSPENDED) such that it now interracts with * the MPM through suspend/resume_connection() hooks, and/or registered * poll callbacks (PT_USER), and/or registered timed callbacks triggered * by timer events. * If a process_connection hook returns an error or no hook sets the state * to one of the above expected value, we forcibly close the connection w/ * CONN_STATE_LINGER. This covers the cases where no process_connection * hook executes (DECLINED), or one returns OK w/o touching the state (i.e. * CONN_STATE_READ_REQUEST_LINE remains after the call) which can happen * with third-party modules not updated to work specifically with event MPM * while this was expected to do lingering close unconditionally with * worker or prefork MPMs for instance. */ if (rc != OK || (cs->pub.state >= CONN_STATE_NUM) || (cs->pub.state < CONN_STATE_LINGER && cs->pub.state != CONN_STATE_WRITE_COMPLETION && cs->pub.state != CONN_STATE_CHECK_REQUEST_LINE_READABLE && cs->pub.state != CONN_STATE_SUSPENDED)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(10111) "process_socket: connection processing %s: closing", rc ? apr_psprintf(c->pool, "returned error %i", rc) : apr_psprintf(c->pool, "unexpected state %i", (int)cs->pub.state)); cs->pub.state = CONN_STATE_LINGER; } if (cs->pub.state == CONN_STATE_WRITE_COMPLETION) { ap_filter_t *output_filter = c->output_filters; apr_status_t rv; ap_update_child_status(cs->sbh, SERVER_BUSY_WRITE, NULL); while (output_filter->next != NULL) { output_filter = output_filter->next; } rv = output_filter->frec->filter_func.out_func(output_filter, NULL); if (rv != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, rv, c, APLOGNO(00470) "network write failure in core output filter"); cs->pub.state = CONN_STATE_LINGER; } else if (c->data_in_output_filters || cs->pub.sense == CONN_SENSE_WANT_READ) { /* Still in WRITE_COMPLETION_STATE: * Set a read/write timeout for this connection, and let the * event thread poll for read/writeability. */ cs->queue_timestamp = apr_time_now(); notify_suspend(cs); if (cs->pub.sense == CONN_SENSE_WANT_READ) { cs->pfd.reqevents = APR_POLLIN; } else { cs->pfd.reqevents = APR_POLLOUT; } /* POLLHUP/ERR are usually returned event only (ignored here), but * some pollset backends may require them in reqevents to do the * right thing, so it shouldn't hurt. */ cs->pfd.reqevents |= APR_POLLHUP | APR_POLLERR; cs->pub.sense = CONN_SENSE_DEFAULT; apr_thread_mutex_lock(timeout_mutex); TO_QUEUE_APPEND(cs->sc->wc_q, cs); rv = apr_pollset_add(event_pollset, &cs->pfd); if (rv != APR_SUCCESS && !APR_STATUS_IS_EEXIST(rv)) { AP_DEBUG_ASSERT(0); TO_QUEUE_REMOVE(cs->sc->wc_q, cs); apr_thread_mutex_unlock(timeout_mutex); ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_server_conf, APLOGNO(03465) "process_socket: apr_pollset_add failure for " "write completion"); apr_socket_close(cs->pfd.desc.s); ap_queue_info_push_pool(worker_queue_info, cs->p); } else { apr_thread_mutex_unlock(timeout_mutex); } return; } else if (c->keepalive != AP_CONN_KEEPALIVE || c->aborted || listener_may_exit) { cs->pub.state = CONN_STATE_LINGER; } else if (c->data_in_input_filters) { cs->pub.state = CONN_STATE_READ_REQUEST_LINE; goto read_request; } else { cs->pub.state = CONN_STATE_CHECK_REQUEST_LINE_READABLE; } } if (cs->pub.state == CONN_STATE_CHECK_REQUEST_LINE_READABLE) { ap_update_child_status(cs->sbh, SERVER_BUSY_KEEPALIVE, NULL); /* It greatly simplifies the logic to use a single timeout value per q * because the new element can just be added to the end of the list and * it will stay sorted in expiration time sequence. If brand new * sockets are sent to the event thread for a readability check, this * will be a slight behavior change - they use the non-keepalive * timeout today. With a normal client, the socket will be readable in * a few milliseconds anyway. */ cs->queue_timestamp = apr_time_now(); notify_suspend(cs); /* Add work to pollset. */ cs->pfd.reqevents = APR_POLLIN; apr_thread_mutex_lock(timeout_mutex); TO_QUEUE_APPEND(cs->sc->ka_q, cs); rv = apr_pollset_add(event_pollset, &cs->pfd); if (rv != APR_SUCCESS && !APR_STATUS_IS_EEXIST(rv)) { AP_DEBUG_ASSERT(0); TO_QUEUE_REMOVE(cs->sc->ka_q, cs); apr_thread_mutex_unlock(timeout_mutex); ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_server_conf, APLOGNO(03093) "process_socket: apr_pollset_add failure for " "keep alive"); apr_socket_close(cs->pfd.desc.s); ap_queue_info_push_pool(worker_queue_info, cs->p); } else { apr_thread_mutex_unlock(timeout_mutex); } return; } if (cs->pub.state == CONN_STATE_SUSPENDED) { apr_atomic_inc32(&suspended_count); notify_suspend(cs); return; } if (cs->pub.state == CONN_STATE_LINGER) { rc = start_lingering_close_blocking(cs); } if (rc == OK && (cs->pub.state == CONN_STATE_LINGER_NORMAL || cs->pub.state == CONN_STATE_LINGER_SHORT)) { process_lingering_close(cs); } } /* conns_this_child has gone to zero or below. See if the admin coded "MaxConnectionsPerChild 0", and keep going in that case. Doing it this way simplifies the hot path in worker_thread */ static void check_infinite_requests(void) { if (ap_max_requests_per_child) { ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, ap_server_conf, "Stopping process due to MaxConnectionsPerChild"); signal_threads(ST_GRACEFUL); } else { /* keep going */ conns_this_child = APR_INT32_MAX; } } static void close_listeners(int *closed) { if (!*closed) { int i; ap_close_listeners_ex(my_bucket->listeners); *closed = 1; dying = 1; ap_scoreboard_image->parent[ap_child_slot].quiescing = 1; for (i = 0; i < threads_per_child; ++i) { ap_update_child_status_from_indexes(ap_child_slot, i, SERVER_GRACEFUL, NULL); } /* wake up the main thread */ kill(ap_my_pid, SIGTERM); ap_queue_info_free_idle_pools(worker_queue_info); ap_queue_interrupt_all(worker_queue); } } static void unblock_signal(int sig) { sigset_t sig_mask; sigemptyset(&sig_mask); sigaddset(&sig_mask, sig); #if defined(SIGPROCMASK_SETS_THREAD_MASK) sigprocmask(SIG_UNBLOCK, &sig_mask, NULL); #else pthread_sigmask(SIG_UNBLOCK, &sig_mask, NULL); #endif } static void dummy_signal_handler(int sig) { /* XXX If specifying SIG_IGN is guaranteed to unblock a syscall, * then we don't need this goofy function. */ } static apr_status_t push_timer2worker(timer_event_t* te) { return ap_queue_push_timer(worker_queue, te); } /* * Pre-condition: cs is neither in event_pollset nor a timeout queue * this function may only be called by the listener */ static apr_status_t push2worker(event_conn_state_t *cs, apr_socket_t *csd, apr_pool_t *ptrans) { apr_status_t rc; if (cs) { csd = cs->pfd.desc.s; ptrans = cs->p; } rc = ap_queue_push_socket(worker_queue, csd, cs, ptrans); if (rc != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rc, ap_server_conf, APLOGNO(00471) "push2worker: ap_queue_push_socket failed"); /* trash the connection; we couldn't queue the connected * socket to a worker */ if (csd) { abort_socket_nonblocking(csd); } if (ptrans) { ap_queue_info_push_pool(worker_queue_info, ptrans); } signal_threads(ST_GRACEFUL); } return rc; } /* get_worker: * If *have_idle_worker_p == 0, reserve a worker thread, and set * *have_idle_worker_p = 1. * If *have_idle_worker_p is already 1, will do nothing. * If blocking == 1, block if all workers are currently busy. * If no worker was available immediately, will set *all_busy to 1. * XXX: If there are no workers, we should not block immediately but * XXX: close all keep-alive connections first. */ static void get_worker(int *have_idle_worker_p, int blocking, int *all_busy) { apr_status_t rc; if (*have_idle_worker_p) { /* already reserved a worker thread - must have hit a * transient error on a previous pass */ return; } if (blocking) rc = ap_queue_info_wait_for_idler(worker_queue_info, all_busy); else rc = ap_queue_info_try_get_idler(worker_queue_info); if (rc == APR_SUCCESS || APR_STATUS_IS_EOF(rc)) { *have_idle_worker_p = 1; } else if (!blocking && rc == APR_EAGAIN) { *all_busy = 1; } else { ap_log_error(APLOG_MARK, APLOG_ERR, rc, ap_server_conf, APLOGNO(00472) "ap_queue_info_wait_for_idler failed. " "Attempting to shutdown process gracefully"); signal_threads(ST_GRACEFUL); } } /* Structures to reuse */ static APR_RING_HEAD(timer_free_ring_t, timer_event_t) timer_free_ring; static apr_skiplist *timer_skiplist; static volatile apr_time_t timers_next_expiry; /* Same goal as for TIMEOUT_FUDGE_FACTOR (avoid extra poll calls), but applied * to timers. Since their timeouts are custom (user defined), we can't be too * approximative here (hence using 0.01s). */ #define EVENT_FUDGE_FACTOR apr_time_from_msec(10) /* The following compare function is used by apr_skiplist_insert() to keep the * elements (timers) sorted and provide O(log n) complexity (this is also true * for apr_skiplist_{find,remove}(), but those are not used in MPM event where * inserted timers are not searched nor removed, but with apr_skiplist_pop() * which does use any compare function). It is meant to return 0 when a == b, * <0 when a < b, and >0 when a > b. However apr_skiplist_insert() will not * add duplicates (i.e. a == b), and apr_skiplist_add() is only available in * APR 1.6, yet multiple timers could possibly be created in the same micro- * second (duplicates with regard to apr_time_t); therefore we implement the * compare function to return +1 instead of 0 when compared timers are equal, * thus duplicates are still added after each other (in order of insertion). */ static int timer_comp(void *a, void *b) { apr_time_t t1 = (apr_time_t) ((timer_event_t *)a)->when; apr_time_t t2 = (apr_time_t) ((timer_event_t *)b)->when; AP_DEBUG_ASSERT(t1); AP_DEBUG_ASSERT(t2); return ((t1 < t2) ? -1 : 1); } static apr_thread_mutex_t *g_timer_skiplist_mtx; static apr_status_t event_register_timed_callback(apr_time_t t, ap_mpm_callback_fn_t *cbfn, void *baton) { timer_event_t *te; /* oh yeah, and make locking smarter/fine grained. */ apr_thread_mutex_lock(g_timer_skiplist_mtx); if (!APR_RING_EMPTY(&timer_free_ring, timer_event_t, link)) { te = APR_RING_FIRST(&timer_free_ring); APR_RING_REMOVE(te, link); } else { te = apr_skiplist_alloc(timer_skiplist, sizeof(timer_event_t)); APR_RING_ELEM_INIT(te, link); } te->cbfunc = cbfn; te->baton = baton; /* XXXXX: optimize */ te->when = t + apr_time_now(); { apr_time_t next_expiry; /* Okay, add sorted by when.. */ apr_skiplist_insert(timer_skiplist, te); /* Cheaply update the overall timers' next expiry according to * this event, if necessary. */ next_expiry = timers_next_expiry; if (!next_expiry || next_expiry > te->when + EVENT_FUDGE_FACTOR) { timers_next_expiry = te->when; /* Unblock the poll()ing listener for it to update its timeout. */ if (listener_is_wakeable) { apr_pollset_wakeup(event_pollset); } } } apr_thread_mutex_unlock(g_timer_skiplist_mtx); return APR_SUCCESS; } /* * Close socket and clean up if remote closed its end while we were in * lingering close. Only to be called in the worker thread, and since it's * in immediate call stack, we can afford a comfortable buffer size to * consume data quickly. */ #define LINGERING_BUF_SIZE (32 * 1024) static void process_lingering_close(event_conn_state_t *cs) { apr_socket_t *csd = ap_get_conn_socket(cs->c); char dummybuf[LINGERING_BUF_SIZE]; apr_size_t nbytes; apr_status_t rv; struct timeout_queue *q; /* socket is already in non-blocking state */ do { nbytes = sizeof(dummybuf); rv = apr_socket_recv(csd, dummybuf, &nbytes); } while (rv == APR_SUCCESS); if (!APR_STATUS_IS_EAGAIN(rv)) { rv = apr_socket_close(csd); AP_DEBUG_ASSERT(rv == APR_SUCCESS); ap_queue_info_push_pool(worker_queue_info, cs->p); return; } /* Re-queue the connection to come back when readable */ cs->pfd.reqevents = APR_POLLIN; cs->pub.sense = CONN_SENSE_DEFAULT; q = (cs->pub.state == CONN_STATE_LINGER_SHORT) ? short_linger_q : linger_q; apr_thread_mutex_lock(timeout_mutex); TO_QUEUE_APPEND(q, cs); rv = apr_pollset_add(event_pollset, &cs->pfd); if (rv != APR_SUCCESS && !APR_STATUS_IS_EEXIST(rv)) { AP_DEBUG_ASSERT(0); TO_QUEUE_REMOVE(q, cs); apr_thread_mutex_unlock(timeout_mutex); ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_server_conf, APLOGNO(03092) "process_lingering_close: apr_pollset_add failure"); rv = apr_socket_close(cs->pfd.desc.s); AP_DEBUG_ASSERT(rv == APR_SUCCESS); ap_queue_info_push_pool(worker_queue_info, cs->p); return; } apr_thread_mutex_unlock(timeout_mutex); } /* call 'func' for all elements of 'q' with timeout less than 'timeout_time'. * Pre-condition: timeout_mutex must already be locked * Post-condition: timeout_mutex will be locked again */ static void process_timeout_queue(struct timeout_queue *q, apr_time_t timeout_time, int (*func)(event_conn_state_t *)) { apr_uint32_t total = 0, count; event_conn_state_t *first, *cs, *last; struct timeout_head_t trash; struct timeout_queue *qp; apr_status_t rv; if (!*q->total) { return; } APR_RING_INIT(&trash, event_conn_state_t, timeout_list); for (qp = q; qp; qp = qp->next) { count = 0; cs = first = last = APR_RING_FIRST(&qp->head); while (cs != APR_RING_SENTINEL(&qp->head, event_conn_state_t, timeout_list)) { /* Trash the entry if: * - no timeout_time was given (asked for all), or * - it expired (according to the queue timeout), or * - the system clock skewed in the past: no entry should be * registered above the given timeout_time (~now) + the queue * timeout, we won't keep any here (eg. for centuries). * * Otherwise stop, no following entry will match thanks to the * single timeout per queue (entries are added to the end!). * This allows maintenance in O(1). */ if (timeout_time && cs->queue_timestamp + qp->timeout > timeout_time && cs->queue_timestamp < timeout_time + qp->timeout) { /* Since this is the next expiring of this queue, update the * overall queues' next expiry if it's later than this one. */ apr_time_t q_expiry = cs->queue_timestamp + qp->timeout; apr_time_t next_expiry = queues_next_expiry; if (!next_expiry || next_expiry > q_expiry) { queues_next_expiry = q_expiry; } break; } last = cs; rv = apr_pollset_remove(event_pollset, &cs->pfd); if (rv != APR_SUCCESS && !APR_STATUS_IS_NOTFOUND(rv)) { AP_DEBUG_ASSERT(0); ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, cs->c, APLOGNO(00473) "apr_pollset_remove failed"); } cs = APR_RING_NEXT(cs, timeout_list); count++; } if (!count) continue; APR_RING_UNSPLICE(first, last, timeout_list); APR_RING_SPLICE_TAIL(&trash, first, last, event_conn_state_t, timeout_list); AP_DEBUG_ASSERT(*q->total >= count && qp->count >= count); *q->total -= count; qp->count -= count; total += count; } if (!total) return; apr_thread_mutex_unlock(timeout_mutex); first = APR_RING_FIRST(&trash); do { cs = APR_RING_NEXT(first, timeout_list); TO_QUEUE_ELEM_INIT(first); func(first); first = cs; } while (--total); apr_thread_mutex_lock(timeout_mutex); } static void process_keepalive_queue(apr_time_t timeout_time) { /* If all workers are busy, we kill older keep-alive connections so * that they may connect to another process. */ if (!timeout_time) { ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, ap_server_conf, "All workers are busy or dying, will close %u " "keep-alive connections", *keepalive_q->total); } process_timeout_queue(keepalive_q, timeout_time, start_lingering_close_nonblocking); } static void * APR_THREAD_FUNC listener_thread(apr_thread_t * thd, void *dummy) { apr_status_t rc; proc_info *ti = dummy; int process_slot = ti->pslot; struct process_score *ps = ap_get_scoreboard_process(process_slot); int closed = 0; int have_idle_worker = 0; apr_time_t last_log; last_log = apr_time_now(); free(ti); /* Unblock the signal used to wake this thread up, and set a handler for * it. */ unblock_signal(LISTENER_SIGNAL); apr_signal(LISTENER_SIGNAL, dummy_signal_handler); for (;;) { timer_event_t *te; const apr_pollfd_t *out_pfd; apr_int32_t num = 0; apr_interval_time_t timeout_interval; apr_time_t now, timeout_time; int workers_were_busy = 0; if (conns_this_child <= 0) check_infinite_requests(); if (listener_may_exit) { close_listeners(&closed); if (terminate_mode == ST_UNGRACEFUL || apr_atomic_read32(&connection_count) == 0) break; } now = apr_time_now(); if (APLOGtrace6(ap_server_conf)) { /* trace log status every second */ if (now - last_log > apr_time_from_sec(1)) { last_log = now; apr_thread_mutex_lock(timeout_mutex); ap_log_error(APLOG_MARK, APLOG_TRACE6, 0, ap_server_conf, "connections: %u (clogged: %u write-completion: %d " "keep-alive: %d lingering: %d suspended: %u)", apr_atomic_read32(&connection_count), apr_atomic_read32(&clogged_count), *(volatile apr_uint32_t*)write_completion_q->total, *(volatile apr_uint32_t*)keepalive_q->total, apr_atomic_read32(&lingering_count), apr_atomic_read32(&suspended_count)); if (dying) { ap_log_error(APLOG_MARK, APLOG_TRACE6, 0, ap_server_conf, "%u/%u workers shutdown", apr_atomic_read32(&threads_shutdown), threads_per_child); } apr_thread_mutex_unlock(timeout_mutex); } } /* Start with an infinite poll() timeout and update it according to * the next expiring timer or queue entry. If there are none, either * the listener is wakeable and it can poll() indefinitely until a wake * up occurs, otherwise periodic checks (maintenance, shutdown, ...) * must be performed. */ timeout_interval = -1; /* Push expired timers to a worker, the first remaining one determines * the maximum time to poll() below, if any. */ timeout_time = timers_next_expiry; if (timeout_time && timeout_time < now + EVENT_FUDGE_FACTOR) { apr_thread_mutex_lock(g_timer_skiplist_mtx); while ((te = apr_skiplist_peek(timer_skiplist))) { if (te->when > now + EVENT_FUDGE_FACTOR) { timers_next_expiry = te->when; timeout_interval = te->when - now; break; } apr_skiplist_pop(timer_skiplist, NULL); push_timer2worker(te); } if (!te) { timers_next_expiry = 0; } apr_thread_mutex_unlock(g_timer_skiplist_mtx); } /* Same for queues, use their next expiry, if any. */ timeout_time = queues_next_expiry; if (timeout_time && (timeout_interval < 0 || timeout_time <= now || timeout_interval > timeout_time - now)) { timeout_interval = timeout_time > now ? timeout_time - now : 1; } /* When non-wakeable, don't wait more than 100 ms, in any case. */ #define NON_WAKEABLE_POLL_TIMEOUT apr_time_from_msec(100) if (!listener_is_wakeable && (timeout_interval < 0 || timeout_interval > NON_WAKEABLE_POLL_TIMEOUT)) { timeout_interval = NON_WAKEABLE_POLL_TIMEOUT; } rc = apr_pollset_poll(event_pollset, timeout_interval, &num, &out_pfd); if (rc != APR_SUCCESS) { if (APR_STATUS_IS_EINTR(rc)) { /* Woken up, if we are exiting or listeners are disabled we * must fall through to kill kept-alive connections or test * whether listeners should be re-enabled. Otherwise we only * need to update timeouts (logic is above, so simply restart * the loop). */ if (!listener_may_exit && !listeners_disabled()) { continue; } timeout_time = 0; } else if (!APR_STATUS_IS_TIMEUP(rc)) { ap_log_error(APLOG_MARK, APLOG_CRIT, rc, ap_server_conf, "apr_pollset_poll failed. Attempting to " "shutdown process gracefully"); signal_threads(ST_GRACEFUL); } num = 0; } if (listener_may_exit) { close_listeners(&closed); if (terminate_mode == ST_UNGRACEFUL || apr_atomic_read32(&connection_count) == 0) break; } for (; num; --num, ++out_pfd) { listener_poll_type *pt = (listener_poll_type *) out_pfd->client_data; if (pt->type == PT_CSD) { /* one of the sockets is readable */ event_conn_state_t *cs = (event_conn_state_t *) pt->baton; struct timeout_queue *remove_from_q = NULL; /* don't wait for a worker for a keepalive request or * lingering close processing. */ int blocking = 0; switch (cs->pub.state) { case CONN_STATE_WRITE_COMPLETION: remove_from_q = cs->sc->wc_q; blocking = 1; break; case CONN_STATE_CHECK_REQUEST_LINE_READABLE: cs->pub.state = CONN_STATE_READ_REQUEST_LINE; remove_from_q = cs->sc->ka_q; break; case CONN_STATE_LINGER_NORMAL: remove_from_q = linger_q; break; case CONN_STATE_LINGER_SHORT: remove_from_q = short_linger_q; break; default: ap_log_error(APLOG_MARK, APLOG_CRIT, rc, ap_server_conf, APLOGNO(03096) "event_loop: unexpected state %d", cs->pub.state); ap_assert(0); } if (remove_from_q) { apr_thread_mutex_lock(timeout_mutex); TO_QUEUE_REMOVE(remove_from_q, cs); rc = apr_pollset_remove(event_pollset, &cs->pfd); apr_thread_mutex_unlock(timeout_mutex); /* * Some of the pollset backends, like KQueue or Epoll * automagically remove the FD if the socket is closed, * therefore, we can accept _SUCCESS or _NOTFOUND, * and we still want to keep going */ if (rc != APR_SUCCESS && !APR_STATUS_IS_NOTFOUND(rc)) { AP_DEBUG_ASSERT(0); ap_log_error(APLOG_MARK, APLOG_ERR, rc, ap_server_conf, APLOGNO(03094) "pollset remove failed"); start_lingering_close_nonblocking(cs); break; } /* If we don't get a worker immediately (nonblocking), we * close the connection; the client can re-connect to a * different process for keepalive, and for lingering close * the connection will be reset so the choice is to favor * incoming/alive connections. */ get_worker(&have_idle_worker, blocking, &workers_were_busy); if (!have_idle_worker) { if (remove_from_q == cs->sc->ka_q) { start_lingering_close_nonblocking(cs); } else { stop_lingering_close(cs); } } else if (push2worker(cs, NULL, NULL) == APR_SUCCESS) { have_idle_worker = 0; } } } else if (pt->type == PT_ACCEPT && !listeners_disabled()) { /* A Listener Socket is ready for an accept() */ if (workers_were_busy) { disable_listensocks(); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, "All workers busy, not accepting new conns " "in this process"); } else if (connections_above_limit()) { disable_listensocks(); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, "Too many open connections (%u), " "not accepting new conns in this process", apr_atomic_read32(&connection_count)); ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, ap_server_conf, "Idle workers: %u", ap_queue_info_num_idlers(worker_queue_info)); workers_were_busy = 1; } else if (!listener_may_exit) { void *csd = NULL; ap_listen_rec *lr = (ap_listen_rec *) pt->baton; apr_pool_t *ptrans; /* Pool for per-transaction stuff */ ap_queue_info_pop_pool(worker_queue_info, &ptrans); if (ptrans == NULL) { /* create a new transaction pool for each accepted socket */ apr_allocator_t *allocator = NULL; rc = apr_allocator_create(&allocator); if (rc == APR_SUCCESS) { apr_allocator_max_free_set(allocator, ap_max_mem_free); rc = apr_pool_create_ex(&ptrans, pconf, NULL, allocator); if (rc == APR_SUCCESS) { apr_pool_tag(ptrans, "transaction"); apr_allocator_owner_set(allocator, ptrans); } } if (rc != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rc, ap_server_conf, APLOGNO(03097) "Failed to create transaction pool"); if (allocator) { apr_allocator_destroy(allocator); } resource_shortage = 1; signal_threads(ST_GRACEFUL); continue; } } get_worker(&have_idle_worker, 1, &workers_were_busy); rc = lr->accept_func(&csd, lr, ptrans); /* later we trash rv and rely on csd to indicate * success/failure */ AP_DEBUG_ASSERT(rc == APR_SUCCESS || !csd); if (rc == APR_EGENERAL) { /* E[NM]FILE, ENOMEM, etc */ resource_shortage = 1; signal_threads(ST_GRACEFUL); } if (csd != NULL) { conns_this_child--; if (push2worker(NULL, csd, ptrans) == APR_SUCCESS) { have_idle_worker = 0; } } else { ap_queue_info_push_pool(worker_queue_info, ptrans); } } } /* if:else on pt->type */ } /* for processing poll */ /* XXX possible optimization: stash the current time for use as * r->request_time for new requests */ /* We process the timeout queues here only when their overall next * expiry (read once above) is over. This happens accurately since * adding to the queues (in workers) can only decrease this expiry, * while latest ones are only taken into account here (in listener) * during queues' processing, with the lock held. This works both * with and without wake-ability. */ if (timeout_time && timeout_time < (now = apr_time_now())) { timeout_time = now + TIMEOUT_FUDGE_FACTOR; /* handle timed out sockets */ apr_thread_mutex_lock(timeout_mutex); /* Processing all the queues below will recompute this. */ queues_next_expiry = 0; /* Step 1: keepalive timeouts */ if (workers_were_busy || dying) { process_keepalive_queue(0); /* kill'em all \m/ */ } else { process_keepalive_queue(timeout_time); } /* Step 2: write completion timeouts */ process_timeout_queue(write_completion_q, timeout_time, start_lingering_close_nonblocking); /* Step 3: (normal) lingering close completion timeouts */ process_timeout_queue(linger_q, timeout_time, stop_lingering_close); /* Step 4: (short) lingering close completion timeouts */ process_timeout_queue(short_linger_q, timeout_time, stop_lingering_close); apr_thread_mutex_unlock(timeout_mutex); ps->keep_alive = *(volatile apr_uint32_t*)keepalive_q->total; ps->write_completion = *(volatile apr_uint32_t*)write_completion_q->total; ps->connections = apr_atomic_read32(&connection_count); ps->suspended = apr_atomic_read32(&suspended_count); ps->lingering_close = apr_atomic_read32(&lingering_count); } else if ((workers_were_busy || dying) && *(volatile apr_uint32_t*)keepalive_q->total) { apr_thread_mutex_lock(timeout_mutex); process_keepalive_queue(0); /* kill'em all \m/ */ apr_thread_mutex_unlock(timeout_mutex); ps->keep_alive = 0; } /* If there are some lingering closes to defer (to a worker), schedule * them now. We might wakeup a worker spuriously if another one empties * defer_linger_chain in the meantime, but there also may be no active * or all busy workers for an undefined time. In any case a deferred * lingering close can't starve if we do that here since the chain is * filled only above in the listener and it's emptied only in the * worker(s); thus a NULL here means it will stay so while the listener * waits (possibly indefinitely) in poll(). */ if (defer_linger_chain) { get_worker(&have_idle_worker, 0, &workers_were_busy); if (have_idle_worker && defer_linger_chain /* re-test */ && push2worker(NULL, NULL, NULL) == APR_SUCCESS) { have_idle_worker = 0; } } if (listeners_disabled() && !workers_were_busy && !connections_above_limit()) { enable_listensocks(); } } /* listener main loop */ close_listeners(&closed); ap_queue_term(worker_queue); apr_thread_exit(thd, APR_SUCCESS); return NULL; } /* * During graceful shutdown, if there are more running worker threads than * open connections, exit one worker thread. * * return 1 if thread should exit, 0 if it should continue running. */ static int worker_thread_should_exit_early(void) { for (;;) { apr_uint32_t conns = apr_atomic_read32(&connection_count); apr_uint32_t dead = apr_atomic_read32(&threads_shutdown); apr_uint32_t newdead; AP_DEBUG_ASSERT(dead <= threads_per_child); if (conns >= threads_per_child - dead) return 0; newdead = dead + 1; if (apr_atomic_cas32(&threads_shutdown, newdead, dead) == dead) { /* * No other thread has exited in the mean time, safe to exit * this one. */ return 1; } } } /* XXX For ungraceful termination/restart, we definitely don't want to * wait for active connections to finish but we may want to wait * for idle workers to get out of the queue code and release mutexes, * since those mutexes are cleaned up pretty soon and some systems * may not react favorably (i.e., segfault) if operations are attempted * on cleaned-up mutexes. */ static void *APR_THREAD_FUNC worker_thread(apr_thread_t * thd, void *dummy) { proc_info *ti = dummy; int process_slot = ti->pslot; int thread_slot = ti->tslot; apr_status_t rv; int is_idle = 0; free(ti); ap_scoreboard_image->servers[process_slot][thread_slot].pid = ap_my_pid; ap_scoreboard_image->servers[process_slot][thread_slot].tid = apr_os_thread_current(); ap_scoreboard_image->servers[process_slot][thread_slot].generation = retained->mpm->my_generation; ap_update_child_status_from_indexes(process_slot, thread_slot, SERVER_STARTING, NULL); while (!workers_may_exit) { apr_socket_t *csd = NULL; event_conn_state_t *cs; timer_event_t *te = NULL; apr_pool_t *ptrans; /* Pool for per-transaction stuff */ if (!is_idle) { rv = ap_queue_info_set_idle(worker_queue_info, NULL); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, ap_server_conf, "ap_queue_info_set_idle failed. Attempting to " "shutdown process gracefully."); signal_threads(ST_GRACEFUL); break; } is_idle = 1; } ap_update_child_status_from_indexes(process_slot, thread_slot, dying ? SERVER_GRACEFUL : SERVER_READY, NULL); worker_pop: if (workers_may_exit) { break; } if (dying && worker_thread_should_exit_early()) { break; } rv = ap_queue_pop_something(worker_queue, &csd, (void **)&cs, &ptrans, &te); if (rv != APR_SUCCESS) { /* We get APR_EOF during a graceful shutdown once all the * connections accepted by this server process have been handled. */ if (APR_STATUS_IS_EOF(rv)) { break; } /* We get APR_EINTR whenever ap_queue_pop_*() has been interrupted * from an explicit call to ap_queue_interrupt_all(). This allows * us to unblock threads stuck in ap_queue_pop_*() when a shutdown * is pending. * * If workers_may_exit is set and this is ungraceful termination/ * restart, we are bound to get an error on some systems (e.g., * AIX, which sanity-checks mutex operations) since the queue * may have already been cleaned up. Don't log the "error" if * workers_may_exit is set. */ else if (APR_STATUS_IS_EINTR(rv)) { goto worker_pop; } /* We got some other error. */ else if (!workers_may_exit) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(03099) "ap_queue_pop_socket failed"); } continue; } if (te != NULL) { te->cbfunc(te->baton); { apr_thread_mutex_lock(g_timer_skiplist_mtx); APR_RING_INSERT_TAIL(&timer_free_ring, te, timer_event_t, link); apr_thread_mutex_unlock(g_timer_skiplist_mtx); } } else { is_idle = 0; if (csd != NULL) { worker_sockets[thread_slot] = csd; process_socket(thd, ptrans, csd, cs, process_slot, thread_slot); worker_sockets[thread_slot] = NULL; } } /* If there are deferred lingering closes, handle them now. */ while (!workers_may_exit) { cs = defer_linger_chain; if (!cs) { break; } if (apr_atomic_casptr((void *)&defer_linger_chain, cs->chain, cs) != cs) { /* Race lost, try again */ continue; } cs->chain = NULL; worker_sockets[thread_slot] = csd = cs->pfd.desc.s; #ifdef AP_DEBUG rv = apr_socket_timeout_set(csd, SECONDS_TO_LINGER); AP_DEBUG_ASSERT(rv == APR_SUCCESS); #else apr_socket_timeout_set(csd, SECONDS_TO_LINGER); #endif cs->pub.state = CONN_STATE_LINGER; process_socket(thd, cs->p, csd, cs, process_slot, thread_slot); worker_sockets[thread_slot] = NULL; } } ap_update_child_status_from_indexes(process_slot, thread_slot, dying ? SERVER_DEAD : SERVER_GRACEFUL, NULL); apr_thread_exit(thd, APR_SUCCESS); return NULL; } static int check_signal(int signum) { switch (signum) { case SIGTERM: case SIGINT: return 1; } return 0; } static void create_listener_thread(thread_starter * ts) { int my_child_num = ts->child_num_arg; apr_threadattr_t *thread_attr = ts->threadattr; proc_info *my_info; apr_status_t rv; my_info = (proc_info *) ap_malloc(sizeof(proc_info)); my_info->pslot = my_child_num; my_info->tslot = -1; /* listener thread doesn't have a thread slot */ rv = apr_thread_create(&ts->listener, thread_attr, listener_thread, my_info, pruntime); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ALERT, rv, ap_server_conf, APLOGNO(00474) "apr_thread_create: unable to create listener thread"); /* let the parent decide how bad this really is */ clean_child_exit(APEXIT_CHILDSICK); } apr_os_thread_get(&listener_os_thread, ts->listener); } static void setup_threads_runtime(void) { apr_status_t rv; ap_listen_rec *lr; apr_pool_t *pskip = NULL; int max_recycled_pools = -1, i; const int good_methods[] = { APR_POLLSET_KQUEUE, APR_POLLSET_PORT, APR_POLLSET_EPOLL }; /* XXX: K-A or lingering close connection included in the async factor */ const apr_uint32_t async_factor = worker_factor / WORKER_FACTOR_SCALE; const apr_uint32_t pollset_size = (apr_uint32_t)num_listensocks + (apr_uint32_t)threads_per_child * (async_factor > 2 ? async_factor : 2); int pollset_flags; /* Event's skiplist operations will happen concurrently with other modules' * runtime so they need their own pool for allocations, and its lifetime * should be at least the one of the connections (ptrans). Thus pskip is * created as a subpool of pconf like/before ptrans (before so that it's * destroyed after). In forked mode pconf is never destroyed so we are good * anyway, but in ONE_PROCESS mode this ensures that the skiplist works * from connection/ptrans cleanups (even after pchild is destroyed). */ apr_pool_create(&pskip, pconf); apr_pool_tag(pskip, "mpm_skiplist"); apr_thread_mutex_create(&g_timer_skiplist_mtx, APR_THREAD_MUTEX_DEFAULT, pskip); APR_RING_INIT(&timer_free_ring, timer_event_t, link); apr_skiplist_init(&timer_skiplist, pskip); apr_skiplist_set_compare(timer_skiplist, timer_comp, timer_comp); /* All threads (listener, workers) and synchronization objects (queues, * pollset, mutexes...) created here should have at least the lifetime of * the connections they handle (i.e. ptrans). We can't use this thread's * self pool because all these objects survive it, nor use pchild or pconf * directly because this starter thread races with other modules' runtime, * nor finally pchild (or subpool thereof) because it is killed explicitely * before pconf (thus connections/ptrans can live longer, which matters in * ONE_PROCESS mode). So this leaves us with a subpool of pconf, created * before any ptrans hence destroyed after. */ apr_pool_create(&pruntime, pconf); apr_pool_tag(pruntime, "mpm_runtime"); /* We must create the fd queues before we start up the listener * and worker threads. */ rv = ap_queue_create(&worker_queue, threads_per_child, pruntime); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ALERT, rv, ap_server_conf, APLOGNO(03100) "ap_queue_create() failed"); clean_child_exit(APEXIT_CHILDFATAL); } if (ap_max_mem_free != APR_ALLOCATOR_MAX_FREE_UNLIMITED) { /* If we want to conserve memory, let's not keep an unlimited number of * pools & allocators. * XXX: This should probably be a separate config directive */ max_recycled_pools = threads_per_child * 3 / 4 ; } rv = ap_queue_info_create(&worker_queue_info, pruntime, threads_per_child, max_recycled_pools); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ALERT, rv, ap_server_conf, APLOGNO(03101) "ap_queue_info_create() failed"); clean_child_exit(APEXIT_CHILDFATAL); } /* Create the timeout mutex and main pollset before the listener * thread starts. */ rv = apr_thread_mutex_create(&timeout_mutex, APR_THREAD_MUTEX_DEFAULT, pruntime); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_server_conf, APLOGNO(03102) "creation of the timeout mutex failed."); clean_child_exit(APEXIT_CHILDFATAL); } /* Create the main pollset */ pollset_flags = APR_POLLSET_THREADSAFE | APR_POLLSET_NOCOPY | APR_POLLSET_NODEFAULT | APR_POLLSET_WAKEABLE; for (i = 0; i < sizeof(good_methods) / sizeof(good_methods[0]); i++) { rv = apr_pollset_create_ex(&event_pollset, pollset_size, pruntime, pollset_flags, good_methods[i]); if (rv == APR_SUCCESS) { listener_is_wakeable = 1; break; } } if (rv != APR_SUCCESS) { pollset_flags &= ~APR_POLLSET_WAKEABLE; for (i = 0; i < sizeof(good_methods) / sizeof(good_methods[0]); i++) { rv = apr_pollset_create_ex(&event_pollset, pollset_size, pruntime, pollset_flags, good_methods[i]); if (rv == APR_SUCCESS) { break; } } } if (rv != APR_SUCCESS) { pollset_flags &= ~APR_POLLSET_NODEFAULT; rv = apr_pollset_create(&event_pollset, pollset_size, pruntime, pollset_flags); } if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_server_conf, APLOGNO(03103) "apr_pollset_create with Thread Safety failed."); clean_child_exit(APEXIT_CHILDFATAL); } /* Add listeners to the main pollset */ listener_pollfd = apr_pcalloc(pruntime, num_listensocks * sizeof(apr_pollfd_t)); for (i = 0, lr = my_bucket->listeners; lr; lr = lr->next, i++) { apr_pollfd_t *pfd; listener_poll_type *pt; AP_DEBUG_ASSERT(i < num_listensocks); pfd = &listener_pollfd[i]; pfd->reqevents = APR_POLLIN; pfd->desc_type = APR_POLL_SOCKET; pfd->desc.s = lr->sd; pt = apr_pcalloc(pruntime, sizeof(*pt)); pfd->client_data = pt; pt->type = PT_ACCEPT; pt->baton = lr; apr_socket_opt_set(pfd->desc.s, APR_SO_NONBLOCK, 1); apr_pollset_add(event_pollset, pfd); lr->accept_func = ap_unixd_accept; } worker_sockets = apr_pcalloc(pruntime, threads_per_child * sizeof(apr_socket_t *)); } /* XXX under some circumstances not understood, children can get stuck * in start_threads forever trying to take over slots which will * never be cleaned up; for now there is an APLOG_DEBUG message issued * every so often when this condition occurs */ static void *APR_THREAD_FUNC start_threads(apr_thread_t * thd, void *dummy) { thread_starter *ts = dummy; apr_thread_t **threads = ts->threads; apr_threadattr_t *thread_attr = ts->threadattr; int my_child_num = ts->child_num_arg; proc_info *my_info; apr_status_t rv; int threads_created = 0; int listener_started = 0; int prev_threads_created; int loops, i; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02471) "start_threads: Using %s (%swakeable)", apr_pollset_method_name(event_pollset), listener_is_wakeable ? "" : "not "); loops = prev_threads_created = 0; while (1) { /* threads_per_child does not include the listener thread */ for (i = 0; i < threads_per_child; i++) { int status = ap_scoreboard_image->servers[my_child_num][i].status; if (status != SERVER_DEAD) { continue; } my_info = (proc_info *) ap_malloc(sizeof(proc_info)); my_info->pslot = my_child_num; my_info->tslot = i; /* We are creating threads right now */ ap_update_child_status_from_indexes(my_child_num, i, SERVER_STARTING, NULL); /* We let each thread update its own scoreboard entry. This is * done because it lets us deal with tid better. */ rv = apr_thread_create(&threads[i], thread_attr, worker_thread, my_info, pruntime); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ALERT, rv, ap_server_conf, APLOGNO(03104) "apr_thread_create: unable to create worker thread"); /* let the parent decide how bad this really is */ clean_child_exit(APEXIT_CHILDSICK); } threads_created++; } /* Start the listener only when there are workers available */ if (!listener_started && threads_created) { create_listener_thread(ts); listener_started = 1; } if (start_thread_may_exit || threads_created == threads_per_child) { break; } /* wait for previous generation to clean up an entry */ apr_sleep(apr_time_from_sec(1)); ++loops; if (loops % 120 == 0) { /* every couple of minutes */ if (prev_threads_created == threads_created) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, "child %" APR_PID_T_FMT " isn't taking over " "slots very quickly (%d of %d)", ap_my_pid, threads_created, threads_per_child); } prev_threads_created = threads_created; } } /* What state should this child_main process be listed as in the * scoreboard...? * ap_update_child_status_from_indexes(my_child_num, i, SERVER_STARTING, * (request_rec *) NULL); * * This state should be listed separately in the scoreboard, in some kind * of process_status, not mixed in with the worker threads' status. * "life_status" is almost right, but it's in the worker's structure, and * the name could be clearer. gla */ apr_thread_exit(thd, APR_SUCCESS); return NULL; } static void join_workers(apr_thread_t * listener, apr_thread_t ** threads) { int i; apr_status_t rv, thread_rv; if (listener) { int iter; /* deal with a rare timing window which affects waking up the * listener thread... if the signal sent to the listener thread * is delivered between the time it verifies that the * listener_may_exit flag is clear and the time it enters a * blocking syscall, the signal didn't do any good... work around * that by sleeping briefly and sending it again */ iter = 0; while (iter < 10 && !dying) { /* listener has not stopped accepting yet */ apr_sleep(apr_time_make(0, 500000)); wakeup_listener(); ++iter; } if (iter >= 10) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(00475) "the listener thread didn't stop accepting"); } else { rv = apr_thread_join(&thread_rv, listener); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00476) "apr_thread_join: unable to join listener thread"); } } } for (i = 0; i < threads_per_child; i++) { if (threads[i]) { /* if we ever created this thread */ rv = apr_thread_join(&thread_rv, threads[i]); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00477) "apr_thread_join: unable to join worker " "thread %d", i); } } } } static void join_start_thread(apr_thread_t * start_thread_id) { apr_status_t rv, thread_rv; start_thread_may_exit = 1; /* tell it to give up in case it is still * trying to take over slots from a * previous generation */ rv = apr_thread_join(&thread_rv, start_thread_id); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00478) "apr_thread_join: unable to join the start " "thread"); } } static void child_main(int child_num_arg, int child_bucket) { apr_thread_t **threads; apr_status_t rv; thread_starter *ts; apr_threadattr_t *thread_attr; apr_thread_t *start_thread_id; int i; /* for benefit of any hooks that run as this child initializes */ retained->mpm->mpm_state = AP_MPMQ_STARTING; ap_my_pid = getpid(); ap_child_slot = child_num_arg; ap_fatal_signal_child_setup(ap_server_conf); /* Get a sub context for global allocations in this child, so that * we can have cleanups occur when the child exits. */ apr_pool_create(&pchild, pconf); apr_pool_tag(pchild, "pchild"); /* close unused listeners and pods */ for (i = 0; i < retained->mpm->num_buckets; i++) { if (i != child_bucket) { ap_close_listeners_ex(all_buckets[i].listeners); ap_mpm_podx_close(all_buckets[i].pod); } } /*stuff to do before we switch id's, so we have permissions. */ ap_reopen_scoreboard(pchild, NULL, 0); /* done with init critical section */ if (ap_run_drop_privileges(pchild, ap_server_conf)) { clean_child_exit(APEXIT_CHILDFATAL); } /* Just use the standard apr_setup_signal_thread to block all signals * from being received. The child processes no longer use signals for * any communication with the parent process. Let's also do this before * child_init() hooks are called and possibly create threads that * otherwise could "steal" (implicitely) MPM's signals. */ rv = apr_setup_signal_thread(); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, ap_server_conf, APLOGNO(00479) "Couldn't initialize signal thread"); clean_child_exit(APEXIT_CHILDFATAL); } ap_run_child_init(pchild, ap_server_conf); if (ap_max_requests_per_child) { conns_this_child = ap_max_requests_per_child; } else { /* coding a value of zero means infinity */ conns_this_child = APR_INT32_MAX; } /* Setup threads */ /* Globals used by signal_threads() so to be initialized before */ setup_threads_runtime(); /* clear the storage; we may not create all our threads immediately, * and we want a 0 entry to indicate a thread which was not created */ threads = ap_calloc(threads_per_child, sizeof(apr_thread_t *)); ts = apr_palloc(pchild, sizeof(*ts)); apr_threadattr_create(&thread_attr, pchild); /* 0 means PTHREAD_CREATE_JOINABLE */ apr_threadattr_detach_set(thread_attr, 0); if (ap_thread_stacksize != 0) { rv = apr_threadattr_stacksize_set(thread_attr, ap_thread_stacksize); if (rv != APR_SUCCESS && rv != APR_ENOTIMPL) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, ap_server_conf, APLOGNO(02436) "WARNING: ThreadStackSize of %" APR_SIZE_T_FMT " is " "inappropriate, using default", ap_thread_stacksize); } } ts->threads = threads; ts->listener = NULL; ts->child_num_arg = child_num_arg; ts->threadattr = thread_attr; rv = apr_thread_create(&start_thread_id, thread_attr, start_threads, ts, pchild); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ALERT, rv, ap_server_conf, APLOGNO(00480) "apr_thread_create: unable to create worker thread"); /* let the parent decide how bad this really is */ clean_child_exit(APEXIT_CHILDSICK); } retained->mpm->mpm_state = AP_MPMQ_RUNNING; /* If we are only running in one_process mode, we will want to * still handle signals. */ if (one_process) { /* Block until we get a terminating signal. */ apr_signal_thread(check_signal); /* make sure the start thread has finished; signal_threads() * and join_workers() depend on that */ /* XXX join_start_thread() won't be awakened if one of our * threads encounters a critical error and attempts to * shutdown this child */ join_start_thread(start_thread_id); /* helps us terminate a little more quickly than the dispatch of the * signal thread; beats the Pipe of Death and the browsers */ signal_threads(ST_UNGRACEFUL); /* A terminating signal was received. Now join each of the * workers to clean them up. * If the worker already exited, then the join frees * their resources and returns. * If the worker hasn't exited, then this blocks until * they have (then cleans up). */ join_workers(ts->listener, threads); } else { /* !one_process */ /* remove SIGTERM from the set of blocked signals... if one of * the other threads in the process needs to take us down * (e.g., for MaxConnectionsPerChild) it will send us SIGTERM */ unblock_signal(SIGTERM); apr_signal(SIGTERM, dummy_signal_handler); /* Watch for any messages from the parent over the POD */ while (1) { rv = ap_mpm_podx_check(my_bucket->pod); if (rv == AP_MPM_PODX_NORESTART) { /* see if termination was triggered while we slept */ switch (terminate_mode) { case ST_GRACEFUL: rv = AP_MPM_PODX_GRACEFUL; break; case ST_UNGRACEFUL: rv = AP_MPM_PODX_RESTART; break; } } if (rv == AP_MPM_PODX_GRACEFUL || rv == AP_MPM_PODX_RESTART) { /* make sure the start thread has finished; * signal_threads() and join_workers depend on that */ join_start_thread(start_thread_id); signal_threads(rv == AP_MPM_PODX_GRACEFUL ? ST_GRACEFUL : ST_UNGRACEFUL); break; } } /* A terminating signal was received. Now join each of the * workers to clean them up. * If the worker already exited, then the join frees * their resources and returns. * If the worker hasn't exited, then this blocks until * they have (then cleans up). */ join_workers(ts->listener, threads); } free(threads); clean_child_exit(resource_shortage ? APEXIT_CHILDSICK : 0); } static int make_child(server_rec * s, int slot, int bucket) { int pid; if (slot + 1 > retained->max_daemons_limit) { retained->max_daemons_limit = slot + 1; } if (ap_scoreboard_image->parent[slot].pid != 0) { /* XXX replace with assert or remove ? */ ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(03455) "BUG: Scoreboard slot %d should be empty but is " "in use by pid %" APR_PID_T_FMT, slot, ap_scoreboard_image->parent[slot].pid); return -1; } if (one_process) { my_bucket = &all_buckets[0]; event_note_child_started(slot, getpid()); child_main(slot, 0); /* NOTREACHED */ ap_assert(0); return -1; } if ((pid = fork()) == -1) { ap_log_error(APLOG_MARK, APLOG_ERR, errno, s, APLOGNO(00481) "fork: Unable to fork new process"); /* fork didn't succeed. There's no need to touch the scoreboard; * if we were trying to replace a failed child process, then * server_main_loop() marked its workers SERVER_DEAD, and if * we were trying to replace a child process that exited normally, * its worker_thread()s left SERVER_DEAD or SERVER_GRACEFUL behind. */ /* In case system resources are maxxed out, we don't want Apache running away with the CPU trying to fork over and over and over again. */ apr_sleep(apr_time_from_sec(10)); return -1; } if (!pid) { my_bucket = &all_buckets[bucket]; #ifdef HAVE_BINDPROCESSOR /* By default, AIX binds to a single processor. This bit unbinds * children which will then bind to another CPU. */ int status = bindprocessor(BINDPROCESS, (int) getpid(), PROCESSOR_CLASS_ANY); if (status != OK) ap_log_error(APLOG_MARK, APLOG_DEBUG, errno, ap_server_conf, APLOGNO(00482) "processor unbind failed"); #endif RAISE_SIGSTOP(MAKE_CHILD); apr_signal(SIGTERM, just_die); child_main(slot, bucket); /* NOTREACHED */ ap_assert(0); return -1; } ap_scoreboard_image->parent[slot].quiescing = 0; ap_scoreboard_image->parent[slot].not_accepting = 0; event_note_child_started(slot, pid); active_daemons++; retained->total_daemons++; return 0; } /* start up a bunch of children */ static void startup_children(int number_to_start) { int i; for (i = 0; number_to_start && i < server_limit; ++i) { if (ap_scoreboard_image->parent[i].pid != 0) { continue; } if (make_child(ap_server_conf, i, i % retained->mpm->num_buckets) < 0) { break; } --number_to_start; } } static void perform_idle_server_maintenance(int child_bucket, int num_buckets) { int i, j; int idle_thread_count = 0; worker_score *ws; process_score *ps; int free_length = 0; int free_slots[MAX_SPAWN_RATE]; int last_non_dead = -1; int active_thread_count = 0; for (i = 0; i < server_limit; ++i) { /* Initialization to satisfy the compiler. It doesn't know * that threads_per_child is always > 0 */ int status = SERVER_DEAD; int child_threads_active = 0; int bucket = i % num_buckets; if (i >= retained->max_daemons_limit && free_length == retained->idle_spawn_rate[child_bucket]) { /* short cut if all active processes have been examined and * enough empty scoreboard slots have been found */ break; } ps = &ap_scoreboard_image->parent[i]; if (ps->pid != 0) { for (j = 0; j < threads_per_child; j++) { ws = &ap_scoreboard_image->servers[i][j]; status = ws->status; /* We consider a starting server as idle because we started it * at least a cycle ago, and if it still hasn't finished starting * then we're just going to swamp things worse by forking more. * So we hopefully won't need to fork more if we count it. * This depends on the ordering of SERVER_READY and SERVER_STARTING. */ if (status <= SERVER_READY && !ps->quiescing && !ps->not_accepting && ps->generation == retained->mpm->my_generation && bucket == child_bucket) { ++idle_thread_count; } if (status >= SERVER_READY && status < SERVER_GRACEFUL) { ++child_threads_active; } } last_non_dead = i; } active_thread_count += child_threads_active; if (!ps->pid && bucket == child_bucket && free_length < retained->idle_spawn_rate[child_bucket]) free_slots[free_length++] = i; else if (child_threads_active == threads_per_child) had_healthy_child = 1; } if (retained->sick_child_detected) { if (had_healthy_child) { /* Assume this is a transient error, even though it may not be. Leave * the server up in case it is able to serve some requests or the * problem will be resolved. */ retained->sick_child_detected = 0; } else { /* looks like a basket case, as no child ever fully initialized; give up. */ retained->mpm->shutdown_pending = 1; child_fatal = 1; ap_log_error(APLOG_MARK, APLOG_ALERT, 0, ap_server_conf, APLOGNO(02324) "A resource shortage or other unrecoverable failure " "was encountered before any child process initialized " "successfully... httpd is exiting!"); /* the child already logged the failure details */ return; } } retained->max_daemons_limit = last_non_dead + 1; if (idle_thread_count > max_spare_threads / num_buckets) { /* * Child processes that we ask to shut down won't die immediately * but may stay around for a long time when they finish their * requests. If the server load changes many times, many such * gracefully finishing processes may accumulate, filling up the * scoreboard. To avoid running out of scoreboard entries, we * don't shut down more processes when the total number of processes * is high. * * XXX It would be nice if we could * XXX - kill processes without keepalive connections first * XXX - tell children to stop accepting new connections, and * XXX depending on server load, later be able to resurrect them * or kill them */ if (retained->total_daemons <= active_daemons_limit && retained->total_daemons < server_limit) { /* Kill off one child */ ap_mpm_podx_signal(all_buckets[child_bucket].pod, AP_MPM_PODX_GRACEFUL); retained->idle_spawn_rate[child_bucket] = 1; active_daemons--; } else { ap_log_error(APLOG_MARK, APLOG_TRACE5, 0, ap_server_conf, "Not shutting down child: total daemons %d / " "active limit %d / ServerLimit %d", retained->total_daemons, active_daemons_limit, server_limit); } } else if (idle_thread_count < min_spare_threads / num_buckets) { if (active_thread_count >= max_workers) { if (0 == idle_thread_count) { if (!retained->maxclients_reported) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(00484) "server reached MaxRequestWorkers setting, " "consider raising the MaxRequestWorkers " "setting"); retained->maxclients_reported = 1; } } else { if (!retained->near_maxclients_reported) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(10159) "server is within MinSpareThreads of " "MaxRequestWorkers, consider raising the " "MaxRequestWorkers setting"); retained->near_maxclients_reported = 1; } } retained->idle_spawn_rate[child_bucket] = 1; } else if (free_length == 0) { /* scoreboard is full, can't fork */ ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(03490) "scoreboard is full, not at MaxRequestWorkers." "Increase ServerLimit."); retained->idle_spawn_rate[child_bucket] = 1; } else { if (free_length > retained->idle_spawn_rate[child_bucket]) { free_length = retained->idle_spawn_rate[child_bucket]; } if (retained->idle_spawn_rate[child_bucket] >= 8) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, ap_server_conf, APLOGNO(00486) "server seems busy, (you may need " "to increase StartServers, ThreadsPerChild " "or Min/MaxSpareThreads), " "spawning %d children, there are around %d idle " "threads, %d active children, and %d children " "that are shutting down", free_length, idle_thread_count, active_daemons, retained->total_daemons); } for (i = 0; i < free_length; ++i) { ap_log_error(APLOG_MARK, APLOG_TRACE5, 0, ap_server_conf, "Spawning new child: slot %d active / " "total daemons: %d/%d", free_slots[i], active_daemons, retained->total_daemons); make_child(ap_server_conf, free_slots[i], child_bucket); } /* the next time around we want to spawn twice as many if this * wasn't good enough, but not if we've just done a graceful */ if (retained->hold_off_on_exponential_spawning) { --retained->hold_off_on_exponential_spawning; } else if (retained->idle_spawn_rate[child_bucket] < MAX_SPAWN_RATE / num_buckets) { retained->idle_spawn_rate[child_bucket] *= 2; } } } else { retained->idle_spawn_rate[child_bucket] = 1; } } static void server_main_loop(int remaining_children_to_start, int num_buckets) { int child_slot; apr_exit_why_e exitwhy; int status, processed_status; apr_proc_t pid; int i; while (!retained->mpm->restart_pending && !retained->mpm->shutdown_pending) { ap_wait_or_timeout(&exitwhy, &status, &pid, pconf, ap_server_conf); if (pid.pid != -1) { processed_status = ap_process_child_status(&pid, exitwhy, status); child_slot = ap_find_child_by_pid(&pid); if (processed_status == APEXIT_CHILDFATAL) { /* fix race condition found in PR 39311 * A child created at the same time as a graceful happens * can find the lock missing and create a fatal error. * It is not fatal for the last generation to be in this state. */ if (child_slot < 0 || ap_get_scoreboard_process(child_slot)->generation == retained->mpm->my_generation) { retained->mpm->shutdown_pending = 1; child_fatal = 1; /* * total_daemons counting will be off now, but as we * are shutting down, that is not an issue anymore. */ return; } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ap_server_conf, APLOGNO(00487) "Ignoring fatal error in child of previous " "generation (pid %ld).", (long)pid.pid); retained->sick_child_detected = 1; } } else if (processed_status == APEXIT_CHILDSICK) { /* tell perform_idle_server_maintenance to check into this * on the next timer pop */ retained->sick_child_detected = 1; } /* non-fatal death... note that it's gone in the scoreboard. */ if (child_slot >= 0) { process_score *ps; for (i = 0; i < threads_per_child; i++) ap_update_child_status_from_indexes(child_slot, i, SERVER_DEAD, NULL); event_note_child_killed(child_slot, 0, 0); ps = &ap_scoreboard_image->parent[child_slot]; if (!ps->quiescing) active_daemons--; ps->quiescing = 0; /* NOTE: We don't dec in the (child_slot < 0) case! */ retained->total_daemons--; if (processed_status == APEXIT_CHILDSICK) { /* resource shortage, minimize the fork rate */ retained->idle_spawn_rate[child_slot % num_buckets] = 1; } else if (remaining_children_to_start) { /* we're still doing a 1-for-1 replacement of dead * children with new children */ make_child(ap_server_conf, child_slot, child_slot % num_buckets); --remaining_children_to_start; } } #if APR_HAS_OTHER_CHILD else if (apr_proc_other_child_alert(&pid, APR_OC_REASON_DEATH, status) == 0) { /* handled */ } #endif else if (retained->mpm->was_graceful) { /* Great, we've probably just lost a slot in the * scoreboard. Somehow we don't know about this child. */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ap_server_conf, APLOGNO(00488) "long lost child came home! (pid %ld)", (long) pid.pid); } /* Don't perform idle maintenance when a child dies, * only do it when there's a timeout. Remember only a * finite number of children can die, and it's pretty * pathological for a lot to die suddenly. */ continue; } else if (remaining_children_to_start) { /* we hit a 1 second timeout in which none of the previous * generation of children needed to be reaped... so assume * they're all done, and pick up the slack if any is left. */ startup_children(remaining_children_to_start); remaining_children_to_start = 0; /* In any event we really shouldn't do the code below because * few of the servers we just started are in the IDLE state * yet, so we'd mistakenly create an extra server. */ continue; } for (i = 0; i < num_buckets; i++) { perform_idle_server_maintenance(i, num_buckets); } } } static int event_run(apr_pool_t * _pconf, apr_pool_t * plog, server_rec * s) { int num_buckets = retained->mpm->num_buckets; int remaining_children_to_start; int i; ap_log_pid(pconf, ap_pid_fname); if (!retained->mpm->was_graceful) { if (ap_run_pre_mpm(s->process->pool, SB_SHARED) != OK) { retained->mpm->mpm_state = AP_MPMQ_STOPPING; return !OK; } /* fix the generation number in the global score; we just got a new, * cleared scoreboard */ ap_scoreboard_image->global->running_generation = retained->mpm->my_generation; } ap_unixd_mpm_set_signals(pconf, one_process); /* Don't thrash since num_buckets depends on the * system and the number of online CPU cores... */ if (active_daemons_limit < num_buckets) active_daemons_limit = num_buckets; if (ap_daemons_to_start < num_buckets) ap_daemons_to_start = num_buckets; /* We want to create as much children at a time as the number of buckets, * so to optimally accept connections (evenly distributed across buckets). * Thus min_spare_threads should at least maintain num_buckets children, * and max_spare_threads allow num_buckets more children w/o triggering * immediately (e.g. num_buckets idle threads margin, one per bucket). */ if (min_spare_threads < threads_per_child * (num_buckets - 1) + num_buckets) min_spare_threads = threads_per_child * (num_buckets - 1) + num_buckets; if (max_spare_threads < min_spare_threads + (threads_per_child + 1) * num_buckets) max_spare_threads = min_spare_threads + (threads_per_child + 1) * num_buckets; /* If we're doing a graceful_restart then we're going to see a lot * of children exiting immediately when we get into the main loop * below (because we just sent them AP_SIG_GRACEFUL). This happens pretty * rapidly... and for each one that exits we may start a new one, until * there are at least min_spare_threads idle threads, counting across * all children. But we may be permitted to start more children than * that, so we'll just keep track of how many we're * supposed to start up without the 1 second penalty between each fork. */ remaining_children_to_start = ap_daemons_to_start; if (remaining_children_to_start > active_daemons_limit) { remaining_children_to_start = active_daemons_limit; } if (!retained->mpm->was_graceful) { startup_children(remaining_children_to_start); remaining_children_to_start = 0; } else { /* give the system some time to recover before kicking into * exponential mode */ retained->hold_off_on_exponential_spawning = 10; } ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00489) "%s configured -- resuming normal operations", ap_get_server_description()); ap_log_error(APLOG_MARK, APLOG_INFO, 0, ap_server_conf, APLOGNO(00490) "Server built: %s", ap_get_server_built()); ap_log_command_line(plog, s); ap_log_mpm_common(s); retained->mpm->mpm_state = AP_MPMQ_RUNNING; server_main_loop(remaining_children_to_start, num_buckets); retained->mpm->mpm_state = AP_MPMQ_STOPPING; if (retained->mpm->shutdown_pending && retained->mpm->is_ungraceful) { /* Time to shut down: * Kill child processes, tell them to call child_exit, etc... */ for (i = 0; i < num_buckets; i++) { ap_mpm_podx_killpg(all_buckets[i].pod, active_daemons_limit, AP_MPM_PODX_RESTART); } ap_reclaim_child_processes(1, /* Start with SIGTERM */ event_note_child_killed); if (!child_fatal) { /* cleanup pid file on normal shutdown */ ap_remove_pid(pconf, ap_pid_fname); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00491) "caught SIGTERM, shutting down"); } return DONE; } if (retained->mpm->shutdown_pending) { /* Time to gracefully shut down: * Kill child processes, tell them to call child_exit, etc... */ int active_children; int index; apr_time_t cutoff = 0; /* Close our listeners, and then ask our children to do same */ ap_close_listeners(); for (i = 0; i < num_buckets; i++) { ap_mpm_podx_killpg(all_buckets[i].pod, active_daemons_limit, AP_MPM_PODX_GRACEFUL); } ap_relieve_child_processes(event_note_child_killed); if (!child_fatal) { /* cleanup pid file on normal shutdown */ ap_remove_pid(pconf, ap_pid_fname); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00492) "caught " AP_SIG_GRACEFUL_STOP_STRING ", shutting down gracefully"); } if (ap_graceful_shutdown_timeout) { cutoff = apr_time_now() + apr_time_from_sec(ap_graceful_shutdown_timeout); } /* Don't really exit until each child has finished */ retained->mpm->shutdown_pending = 0; do { /* Pause for a second */ apr_sleep(apr_time_from_sec(1)); /* Relieve any children which have now exited */ ap_relieve_child_processes(event_note_child_killed); active_children = 0; for (index = 0; index < retained->max_daemons_limit; ++index) { if (ap_mpm_safe_kill(MPM_CHILD_PID(index), 0) == APR_SUCCESS) { active_children = 1; /* Having just one child is enough to stay around */ break; } } } while (!retained->mpm->shutdown_pending && active_children && (!ap_graceful_shutdown_timeout || apr_time_now() < cutoff)); /* We might be here because we received SIGTERM, either * way, try and make sure that all of our processes are * really dead. */ for (i = 0; i < num_buckets; i++) { ap_mpm_podx_killpg(all_buckets[i].pod, active_daemons_limit, AP_MPM_PODX_RESTART); } ap_reclaim_child_processes(1, event_note_child_killed); return DONE; } /* we've been told to restart */ if (one_process) { /* not worth thinking about */ return DONE; } /* advance to the next generation */ /* XXX: we really need to make sure this new generation number isn't in * use by any of the children. */ ++retained->mpm->my_generation; ap_scoreboard_image->global->running_generation = retained->mpm->my_generation; if (!retained->mpm->is_ungraceful) { ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00493) AP_SIG_GRACEFUL_STRING " received. Doing graceful restart"); /* wake up the children...time to die. But we'll have more soon */ for (i = 0; i < num_buckets; i++) { ap_mpm_podx_killpg(all_buckets[i].pod, active_daemons_limit, AP_MPM_PODX_GRACEFUL); } /* This is mostly for debugging... so that we know what is still * gracefully dealing with existing request. */ } else { /* Kill 'em all. Since the child acts the same on the parents SIGTERM * and a SIGHUP, we may as well use the same signal, because some user * pthreads are stealing signals from us left and right. */ for (i = 0; i < num_buckets; i++) { ap_mpm_podx_killpg(all_buckets[i].pod, active_daemons_limit, AP_MPM_PODX_RESTART); } ap_reclaim_child_processes(1, /* Start with SIGTERM */ event_note_child_killed); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00494) "SIGHUP received. Attempting to restart"); } active_daemons = 0; return OK; } static void setup_slave_conn(conn_rec *c, void *csd) { event_conn_state_t *mcs; event_conn_state_t *cs; mcs = ap_get_module_config(c->master->conn_config, &mpm_event_module); cs = apr_pcalloc(c->pool, sizeof(*cs)); cs->c = c; cs->r = NULL; cs->sc = mcs->sc; cs->suspended = 0; cs->p = c->pool; cs->bucket_alloc = c->bucket_alloc; cs->pfd = mcs->pfd; cs->pub = mcs->pub; cs->pub.state = CONN_STATE_READ_REQUEST_LINE; cs->pub.sense = CONN_SENSE_DEFAULT; c->cs = &(cs->pub); ap_set_module_config(c->conn_config, &mpm_event_module, cs); } static int event_pre_connection(conn_rec *c, void *csd) { if (c->master && (!c->cs || c->cs == c->master->cs)) { setup_slave_conn(c, csd); } return OK; } static int event_protocol_switch(conn_rec *c, request_rec *r, server_rec *s, const char *protocol) { if (!r && s) { /* connection based switching of protocol, set the correct server * configuration, so that timeouts, keepalives and such are used * for the server that the connection was switched on. * Normally, we set this on post_read_request, but on a protocol * other than http/1.1, this might never happen. */ event_conn_state_t *cs; cs = ap_get_module_config(c->conn_config, &mpm_event_module); cs->sc = ap_get_module_config(s->module_config, &mpm_event_module); } return DECLINED; } /* This really should be a post_config hook, but the error log is already * redirected by that point, so we need to do this in the open_logs phase. */ static int event_open_logs(apr_pool_t * p, apr_pool_t * plog, apr_pool_t * ptemp, server_rec * s) { int startup = 0; int level_flags = 0; int num_buckets = 0; ap_listen_rec **listen_buckets; apr_status_t rv; int i; pconf = p; /* the reverse of pre_config, we want this only the first time around */ if (retained->mpm->module_loads == 1) { startup = 1; level_flags |= APLOG_STARTUP; } if ((num_listensocks = ap_setup_listeners(ap_server_conf)) < 1) { ap_log_error(APLOG_MARK, APLOG_ALERT | level_flags, 0, (startup ? NULL : s), "no listening sockets available, shutting down"); return !OK; } if (one_process) { num_buckets = 1; } else if (retained->mpm->was_graceful) { /* Preserve the number of buckets on graceful restarts. */ num_buckets = retained->mpm->num_buckets; } if ((rv = ap_duplicate_listeners(pconf, ap_server_conf, &listen_buckets, &num_buckets))) { ap_log_error(APLOG_MARK, APLOG_CRIT | level_flags, rv, (startup ? NULL : s), "could not duplicate listeners"); return !OK; } all_buckets = apr_pcalloc(pconf, num_buckets * sizeof(*all_buckets)); for (i = 0; i < num_buckets; i++) { if (!one_process && /* no POD in one_process mode */ (rv = ap_mpm_podx_open(pconf, &all_buckets[i].pod))) { ap_log_error(APLOG_MARK, APLOG_CRIT | level_flags, rv, (startup ? NULL : s), "could not open pipe-of-death"); return !OK; } all_buckets[i].listeners = listen_buckets[i]; } if (retained->mpm->max_buckets < num_buckets) { int new_max, *new_ptr; new_max = retained->mpm->max_buckets * 2; if (new_max < num_buckets) { new_max = num_buckets; } new_ptr = (int *)apr_palloc(ap_pglobal, new_max * sizeof(int)); memcpy(new_ptr, retained->idle_spawn_rate, retained->mpm->num_buckets * sizeof(int)); retained->idle_spawn_rate = new_ptr; retained->mpm->max_buckets = new_max; } if (retained->mpm->num_buckets < num_buckets) { int rate_max = 1; /* If new buckets are added, set their idle spawn rate to * the highest so far, so that they get filled as quickly * as the existing ones. */ for (i = 0; i < retained->mpm->num_buckets; i++) { if (rate_max < retained->idle_spawn_rate[i]) { rate_max = retained->idle_spawn_rate[i]; } } for (/* up to date i */; i < num_buckets; i++) { retained->idle_spawn_rate[i] = rate_max; } } retained->mpm->num_buckets = num_buckets; /* for skiplist */ srand((unsigned int)apr_time_now()); return OK; } static int event_pre_config(apr_pool_t * pconf, apr_pool_t * plog, apr_pool_t * ptemp) { int no_detach, debug, foreground; apr_status_t rv; const char *userdata_key = "mpm_event_module"; int test_atomics = 0; debug = ap_exists_config_define("DEBUG"); if (debug) { foreground = one_process = 1; no_detach = 0; } else { one_process = ap_exists_config_define("ONE_PROCESS"); no_detach = ap_exists_config_define("NO_DETACH"); foreground = ap_exists_config_define("FOREGROUND"); } retained = ap_retained_data_get(userdata_key); if (!retained) { retained = ap_retained_data_create(userdata_key, sizeof(*retained)); retained->mpm = ap_unixd_mpm_get_retained_data(); retained->max_daemons_limit = -1; if (retained->mpm->module_loads) { test_atomics = 1; } } retained->mpm->mpm_state = AP_MPMQ_STARTING; if (retained->mpm->baton != retained) { retained->mpm->was_graceful = 0; retained->mpm->baton = retained; } ++retained->mpm->module_loads; /* test once for correct operation of fdqueue */ if (test_atomics || retained->mpm->module_loads == 2) { static apr_uint32_t foo1, foo2; apr_atomic_set32(&foo1, 100); foo2 = apr_atomic_add32(&foo1, -10); if (foo2 != 100 || foo1 != 90) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, NULL, APLOGNO(02405) "atomics not working as expected - add32 of negative number"); return HTTP_INTERNAL_SERVER_ERROR; } } /* sigh, want this only the second time around */ if (retained->mpm->module_loads == 2) { rv = apr_pollset_create(&event_pollset, 1, plog, APR_POLLSET_THREADSAFE | APR_POLLSET_NOCOPY); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, NULL, APLOGNO(00495) "Couldn't create a Thread Safe Pollset. " "Is it supported on your platform?" "Also check system or user limits!"); return HTTP_INTERNAL_SERVER_ERROR; } apr_pollset_destroy(event_pollset); if (!one_process && !foreground) { /* before we detach, setup crash handlers to log to errorlog */ ap_fatal_signal_setup(ap_server_conf, pconf); rv = apr_proc_detach(no_detach ? APR_PROC_DETACH_FOREGROUND : APR_PROC_DETACH_DAEMONIZE); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, NULL, APLOGNO(00496) "apr_proc_detach failed"); return HTTP_INTERNAL_SERVER_ERROR; } } } parent_pid = ap_my_pid = getpid(); ap_listen_pre_config(); ap_daemons_to_start = DEFAULT_START_DAEMON; min_spare_threads = DEFAULT_MIN_FREE_DAEMON * DEFAULT_THREADS_PER_CHILD; max_spare_threads = DEFAULT_MAX_FREE_DAEMON * DEFAULT_THREADS_PER_CHILD; server_limit = DEFAULT_SERVER_LIMIT; thread_limit = DEFAULT_THREAD_LIMIT; active_daemons_limit = server_limit; threads_per_child = DEFAULT_THREADS_PER_CHILD; max_workers = active_daemons_limit * threads_per_child; defer_linger_chain = NULL; had_healthy_child = 0; ap_extended_status = 0; event_pollset = NULL; worker_queue_info = NULL; listener_os_thread = NULL; listensocks_disabled = 0; return OK; } static int event_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { struct { struct timeout_queue *tail, *q; apr_hash_t *hash; } wc, ka; /* Not needed in pre_config stage */ if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) { return OK; } wc.tail = ka.tail = NULL; wc.hash = apr_hash_make(ptemp); ka.hash = apr_hash_make(ptemp); linger_q = TO_QUEUE_MAKE(pconf, apr_time_from_sec(MAX_SECS_TO_LINGER), NULL); short_linger_q = TO_QUEUE_MAKE(pconf, apr_time_from_sec(SECONDS_TO_LINGER), NULL); for (; s; s = s->next) { event_srv_cfg *sc = apr_pcalloc(pconf, sizeof *sc); ap_set_module_config(s->module_config, &mpm_event_module, sc); if (!wc.tail) { /* The main server uses the global queues */ wc.q = TO_QUEUE_MAKE(pconf, s->timeout, NULL); apr_hash_set(wc.hash, &s->timeout, sizeof s->timeout, wc.q); wc.tail = write_completion_q = wc.q; ka.q = TO_QUEUE_MAKE(pconf, s->keep_alive_timeout, NULL); apr_hash_set(ka.hash, &s->keep_alive_timeout, sizeof s->keep_alive_timeout, ka.q); ka.tail = keepalive_q = ka.q; } else { /* The vhosts use any existing queue with the same timeout, * or their own queue(s) if there isn't */ wc.q = apr_hash_get(wc.hash, &s->timeout, sizeof s->timeout); if (!wc.q) { wc.q = TO_QUEUE_MAKE(pconf, s->timeout, wc.tail); apr_hash_set(wc.hash, &s->timeout, sizeof s->timeout, wc.q); wc.tail = wc.tail->next = wc.q; } ka.q = apr_hash_get(ka.hash, &s->keep_alive_timeout, sizeof s->keep_alive_timeout); if (!ka.q) { ka.q = TO_QUEUE_MAKE(pconf, s->keep_alive_timeout, ka.tail); apr_hash_set(ka.hash, &s->keep_alive_timeout, sizeof s->keep_alive_timeout, ka.q); ka.tail = ka.tail->next = ka.q; } } sc->wc_q = wc.q; sc->ka_q = ka.q; } return OK; } static int event_check_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { int startup = 0; /* the reverse of pre_config, we want this only the first time around */ if (retained->mpm->module_loads == 1) { startup = 1; } if (server_limit > MAX_SERVER_LIMIT) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00497) "WARNING: ServerLimit of %d exceeds compile-time " "limit of %d servers, decreasing to %d.", server_limit, MAX_SERVER_LIMIT, MAX_SERVER_LIMIT); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00498) "ServerLimit of %d exceeds compile-time limit " "of %d, decreasing to match", server_limit, MAX_SERVER_LIMIT); } server_limit = MAX_SERVER_LIMIT; } else if (server_limit < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00499) "WARNING: ServerLimit of %d not allowed, " "increasing to 1.", server_limit); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00500) "ServerLimit of %d not allowed, increasing to 1", server_limit); } server_limit = 1; } /* you cannot change ServerLimit across a restart; ignore * any such attempts */ if (!retained->first_server_limit) { retained->first_server_limit = server_limit; } else if (server_limit != retained->first_server_limit) { /* don't need a startup console version here */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00501) "changing ServerLimit to %d from original value of %d " "not allowed during restart", server_limit, retained->first_server_limit); server_limit = retained->first_server_limit; } if (thread_limit > MAX_THREAD_LIMIT) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00502) "WARNING: ThreadLimit of %d exceeds compile-time " "limit of %d threads, decreasing to %d.", thread_limit, MAX_THREAD_LIMIT, MAX_THREAD_LIMIT); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00503) "ThreadLimit of %d exceeds compile-time limit " "of %d, decreasing to match", thread_limit, MAX_THREAD_LIMIT); } thread_limit = MAX_THREAD_LIMIT; } else if (thread_limit < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00504) "WARNING: ThreadLimit of %d not allowed, " "increasing to 1.", thread_limit); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00505) "ThreadLimit of %d not allowed, increasing to 1", thread_limit); } thread_limit = 1; } /* you cannot change ThreadLimit across a restart; ignore * any such attempts */ if (!retained->first_thread_limit) { retained->first_thread_limit = thread_limit; } else if (thread_limit != retained->first_thread_limit) { /* don't need a startup console version here */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00506) "changing ThreadLimit to %d from original value of %d " "not allowed during restart", thread_limit, retained->first_thread_limit); thread_limit = retained->first_thread_limit; } if (threads_per_child > thread_limit) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00507) "WARNING: ThreadsPerChild of %d exceeds ThreadLimit " "of %d threads, decreasing to %d. " "To increase, please see the ThreadLimit directive.", threads_per_child, thread_limit, thread_limit); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00508) "ThreadsPerChild of %d exceeds ThreadLimit " "of %d, decreasing to match", threads_per_child, thread_limit); } threads_per_child = thread_limit; } else if (threads_per_child < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00509) "WARNING: ThreadsPerChild of %d not allowed, " "increasing to 1.", threads_per_child); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00510) "ThreadsPerChild of %d not allowed, increasing to 1", threads_per_child); } threads_per_child = 1; } if (max_workers < threads_per_child) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00511) "WARNING: MaxRequestWorkers of %d is less than " "ThreadsPerChild of %d, increasing to %d. " "MaxRequestWorkers must be at least as large " "as the number of threads in a single server.", max_workers, threads_per_child, threads_per_child); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00512) "MaxRequestWorkers of %d is less than ThreadsPerChild " "of %d, increasing to match", max_workers, threads_per_child); } max_workers = threads_per_child; } active_daemons_limit = max_workers / threads_per_child; if (max_workers % threads_per_child) { int tmp_max_workers = active_daemons_limit * threads_per_child; if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00513) "WARNING: MaxRequestWorkers of %d is not an integer " "multiple of ThreadsPerChild of %d, decreasing to nearest " "multiple %d, for a maximum of %d servers.", max_workers, threads_per_child, tmp_max_workers, active_daemons_limit); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00514) "MaxRequestWorkers of %d is not an integer multiple " "of ThreadsPerChild of %d, decreasing to nearest " "multiple %d", max_workers, threads_per_child, tmp_max_workers); } max_workers = tmp_max_workers; } if (active_daemons_limit > server_limit) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00515) "WARNING: MaxRequestWorkers of %d would require %d servers " "and would exceed ServerLimit of %d, decreasing to %d. " "To increase, please see the ServerLimit directive.", max_workers, active_daemons_limit, server_limit, server_limit * threads_per_child); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00516) "MaxRequestWorkers of %d would require %d servers and " "exceed ServerLimit of %d, decreasing to %d", max_workers, active_daemons_limit, server_limit, server_limit * threads_per_child); } active_daemons_limit = server_limit; } /* ap_daemons_to_start > active_daemons_limit checked in ap_mpm_run() */ if (ap_daemons_to_start < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00517) "WARNING: StartServers of %d not allowed, " "increasing to 1.", ap_daemons_to_start); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00518) "StartServers of %d not allowed, increasing to 1", ap_daemons_to_start); } ap_daemons_to_start = 1; } if (min_spare_threads < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00519) "WARNING: MinSpareThreads of %d not allowed, " "increasing to 1 to avoid almost certain server " "failure. Please read the documentation.", min_spare_threads); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00520) "MinSpareThreads of %d not allowed, increasing to 1", min_spare_threads); } min_spare_threads = 1; } /* max_spare_threads < min_spare_threads + threads_per_child * checked in ap_mpm_run() */ return OK; } static void event_hooks(apr_pool_t * p) { /* Our open_logs hook function must run before the core's, or stderr * will be redirected to a file, and the messages won't print to the * console. */ static const char *const aszSucc[] = { "core.c", NULL }; one_process = 0; ap_hook_open_logs(event_open_logs, NULL, aszSucc, APR_HOOK_REALLY_FIRST); /* we need to set the MPM state before other pre-config hooks use MPM query * to retrieve it, so register as REALLY_FIRST */ ap_hook_pre_config(event_pre_config, NULL, NULL, APR_HOOK_REALLY_FIRST); ap_hook_post_config(event_post_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_check_config(event_check_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm(event_run, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm_query(event_query, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm_register_timed_callback(event_register_timed_callback, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_pre_read_request(event_pre_read_request, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_read_request(event_post_read_request, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm_get_name(event_get_name, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_pre_connection(event_pre_connection, NULL, NULL, APR_HOOK_REALLY_FIRST); ap_hook_protocol_switch(event_protocol_switch, NULL, NULL, APR_HOOK_REALLY_FIRST); } static const char *set_daemons_to_start(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_daemons_to_start = atoi(arg); return NULL; } static const char *set_min_spare_threads(cmd_parms * cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } min_spare_threads = atoi(arg); return NULL; } static const char *set_max_spare_threads(cmd_parms * cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } max_spare_threads = atoi(arg); return NULL; } static const char *set_max_workers(cmd_parms * cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (!strcasecmp(cmd->cmd->name, "MaxClients")) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, NULL, APLOGNO(00521) "MaxClients is deprecated, use MaxRequestWorkers " "instead."); } max_workers = atoi(arg); return NULL; } static const char *set_threads_per_child(cmd_parms * cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } threads_per_child = atoi(arg); return NULL; } static const char *set_server_limit (cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } server_limit = atoi(arg); return NULL; } static const char *set_thread_limit(cmd_parms * cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } thread_limit = atoi(arg); return NULL; } static const char *set_worker_factor(cmd_parms * cmd, void *dummy, const char *arg) { double val; char *endptr; const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } val = strtod(arg, &endptr); if (*endptr) return "error parsing value"; if (val <= 0) return "AsyncRequestWorkerFactor argument must be a positive number"; worker_factor = val * WORKER_FACTOR_SCALE; if (worker_factor < WORKER_FACTOR_SCALE) { worker_factor = WORKER_FACTOR_SCALE; } return NULL; } static const command_rec event_cmds[] = { LISTEN_COMMANDS, AP_INIT_TAKE1("StartServers", set_daemons_to_start, NULL, RSRC_CONF, "Number of child processes launched at server startup"), AP_INIT_TAKE1("ServerLimit", set_server_limit, NULL, RSRC_CONF, "Maximum number of child processes for this run of Apache"), AP_INIT_TAKE1("MinSpareThreads", set_min_spare_threads, NULL, RSRC_CONF, "Minimum number of idle threads, to handle request spikes"), AP_INIT_TAKE1("MaxSpareThreads", set_max_spare_threads, NULL, RSRC_CONF, "Maximum number of idle threads"), AP_INIT_TAKE1("MaxClients", set_max_workers, NULL, RSRC_CONF, "Deprecated name of MaxRequestWorkers"), AP_INIT_TAKE1("MaxRequestWorkers", set_max_workers, NULL, RSRC_CONF, "Maximum number of threads alive at the same time"), AP_INIT_TAKE1("ThreadsPerChild", set_threads_per_child, NULL, RSRC_CONF, "Number of threads each child creates"), AP_INIT_TAKE1("ThreadLimit", set_thread_limit, NULL, RSRC_CONF, "Maximum number of worker threads per child process for this " "run of Apache - Upper limit for ThreadsPerChild"), AP_INIT_TAKE1("AsyncRequestWorkerFactor", set_worker_factor, NULL, RSRC_CONF, "How many additional connects will be accepted per idle " "worker thread"), AP_GRACEFUL_SHUTDOWN_TIMEOUT_COMMAND, {NULL} }; AP_DECLARE_MODULE(mpm_event) = { MPM20_MODULE_STUFF, NULL, /* hook to run before apache parses args */ NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ event_cmds, /* command apr_table_t */ event_hooks /* register_hooks */ }; httpd-2.4.41/server/mpm/event/config.m40000644000000000000500000000126512241750026016166 0ustar rootsrcAC_MSG_CHECKING(if event MPM supports this platform) if test $forking_mpms_supported != yes; then AC_MSG_RESULT(no - This is not a forking platform) elif test $ac_cv_define_APR_HAS_THREADS != yes; then AC_MSG_RESULT(no - APR does not support threads) elif test $have_threaded_sig_graceful != yes; then AC_MSG_RESULT(no - SIG_GRACEFUL cannot be used with a threaded MPM) elif test $ac_cv_have_threadsafe_pollset != yes; then AC_MSG_RESULT(no - APR_POLLSET_THREADSAFE is not supported) elif test $apr_has_skiplist != yes; then AC_MSG_RESULT(no - APR skiplist is not available, need APR 1.5.x or later) else AC_MSG_RESULT(yes) APACHE_MPM_SUPPORTED(event, yes, yes) fi httpd-2.4.41/server/mpm/event/Makefile.in0000644000000000000500000000004711274040000016506 0ustar rootsrcinclude $(top_srcdir)/build/special.mk httpd-2.4.41/server/mpm/mpmt_os2/0002755000000000000500000000000013523273341015100 5ustar rootsrchttpd-2.4.41/server/mpm/mpmt_os2/mpmt_os2_child.c0000644000000000000500000003576113351171147020161 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #define INCL_NOPMAPI #define INCL_DOS #define INCL_DOSERRORS #include "ap_config.h" #include "httpd.h" #include "mpm_default.h" #include "http_main.h" #include "http_log.h" #include "http_config.h" #include "http_core.h" /* for get_remote_host */ #include "http_connection.h" #include "scoreboard.h" #include "ap_mpm.h" #include "ap_listen.h" #include "apr_portable.h" #include "apr_poll.h" #include "mpm_common.h" #include "apr_strings.h" #include #include APLOG_USE_MODULE(mpm_mpmt_os2); /* XXXXXX move these to header file private to this MPM */ /* We don't need many processes, * they're only for redundancy in the event of a crash */ #define HARD_SERVER_LIMIT 10 /* Limit on the total number of threads per process */ #ifndef HARD_THREAD_LIMIT #define HARD_THREAD_LIMIT 256 #endif #define ID_FROM_CHILD_THREAD(c, t) ((c * HARD_THREAD_LIMIT) + t) typedef struct { apr_pool_t *pconn; apr_socket_t *conn_sd; } worker_args_t; #define WORKTYPE_CONN 0 #define WORKTYPE_EXIT 1 static apr_pool_t *pchild = NULL; static int child_slot; static int shutdown_pending = 0; extern int ap_my_generation; static int volatile is_graceful = 1; HEV shutdown_event; /* signaled when this child is shutting down */ /* grab some MPM globals */ extern int ap_min_spare_threads; extern int ap_max_spare_threads; extern HMTX ap_mpm_accept_mutex; static void worker_main(void *vpArg); static void clean_child_exit(int code); static void set_signals(); static void server_maintenance(void *vpArg); static void clean_child_exit(int code) { if (pchild) { apr_pool_destroy(pchild); } exit(code); } void ap_mpm_child_main(apr_pool_t *pconf) { ap_listen_rec *lr = NULL; int requests_this_child = 0; int rv = 0; unsigned long ulTimes; int my_pid = getpid(); ULONG rc, c; HQUEUE workq; apr_pollset_t *pollset; int num_listeners; TID server_maint_tid; void *sb_mem; /* Stop Ctrl-C/Ctrl-Break signals going to child processes */ DosSetSignalExceptionFocus(0, &ulTimes); set_signals(); /* Create pool for child */ apr_pool_create(&pchild, pconf); apr_pool_tag(pchild, "pchild"); ap_run_child_init(pchild, ap_server_conf); /* Create an event semaphore used to trigger other threads to shutdown */ rc = DosCreateEventSem(NULL, &shutdown_event, 0, FALSE); if (rc) { ap_log_error(APLOG_MARK, APLOG_ERR, APR_FROM_OS_ERROR(rc), ap_server_conf, APLOGNO(00189) "unable to create shutdown semaphore, exiting"); clean_child_exit(APEXIT_CHILDFATAL); } /* Gain access to the scoreboard. */ rc = DosGetNamedSharedMem(&sb_mem, ap_scoreboard_fname, PAG_READ|PAG_WRITE); if (rc) { ap_log_error(APLOG_MARK, APLOG_ERR, APR_FROM_OS_ERROR(rc), ap_server_conf, APLOGNO(00190) "scoreboard not readable in child, exiting"); clean_child_exit(APEXIT_CHILDFATAL); } ap_calc_scoreboard_size(); ap_init_scoreboard(sb_mem); /* Gain access to the accpet mutex */ rc = DosOpenMutexSem(NULL, &ap_mpm_accept_mutex); if (rc) { ap_log_error(APLOG_MARK, APLOG_ERR, APR_FROM_OS_ERROR(rc), ap_server_conf, APLOGNO(00191) "accept mutex couldn't be accessed in child, exiting"); clean_child_exit(APEXIT_CHILDFATAL); } /* Find our pid in the scoreboard so we know what slot our parent allocated us */ for (child_slot = 0; ap_scoreboard_image->parent[child_slot].pid != my_pid && child_slot < HARD_SERVER_LIMIT; child_slot++); if (child_slot == HARD_SERVER_LIMIT) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(00192) "child pid not found in scoreboard, exiting"); clean_child_exit(APEXIT_CHILDFATAL); } ap_my_generation = ap_scoreboard_image->parent[child_slot].generation; memset(ap_scoreboard_image->servers[child_slot], 0, sizeof(worker_score) * HARD_THREAD_LIMIT); /* Set up an OS/2 queue for passing connections & termination requests * to worker threads */ rc = DosCreateQueue(&workq, QUE_FIFO, apr_psprintf(pchild, "/queues/httpd/work.%d", my_pid)); if (rc) { ap_log_error(APLOG_MARK, APLOG_ERR, APR_FROM_OS_ERROR(rc), ap_server_conf, APLOGNO(00193) "unable to create work queue, exiting"); clean_child_exit(APEXIT_CHILDFATAL); } /* Create initial pool of worker threads */ for (c = 0; c < ap_min_spare_threads; c++) { // ap_scoreboard_image->servers[child_slot][c].tid = _beginthread(worker_main, NULL, 128*1024, (void *)c); } /* Start maintenance thread */ server_maint_tid = _beginthread(server_maintenance, NULL, 32768, NULL); /* Set up poll */ for (num_listeners = 0, lr = ap_listeners; lr; lr = lr->next) { num_listeners++; } apr_pollset_create(&pollset, num_listeners, pchild, 0); for (lr = ap_listeners; lr != NULL; lr = lr->next) { apr_pollfd_t pfd = { 0 }; pfd.desc_type = APR_POLL_SOCKET; pfd.desc.s = lr->sd; pfd.reqevents = APR_POLLIN; pfd.client_data = lr; apr_pollset_add(pollset, &pfd); } /* Main connection accept loop */ do { apr_pool_t *pconn; worker_args_t *worker_args; int last_poll_idx = 0; apr_pool_create(&pconn, pchild); worker_args = apr_palloc(pconn, sizeof(worker_args_t)); worker_args->pconn = pconn; if (num_listeners == 1) { rv = apr_socket_accept(&worker_args->conn_sd, ap_listeners->sd, pconn); } else { const apr_pollfd_t *poll_results; apr_int32_t num_poll_results; rc = DosRequestMutexSem(ap_mpm_accept_mutex, SEM_INDEFINITE_WAIT); if (shutdown_pending) { DosReleaseMutexSem(ap_mpm_accept_mutex); break; } rv = APR_FROM_OS_ERROR(rc); if (rv == APR_SUCCESS) { rv = apr_pollset_poll(pollset, -1, &num_poll_results, &poll_results); DosReleaseMutexSem(ap_mpm_accept_mutex); } if (rv == APR_SUCCESS) { if (last_poll_idx >= num_listeners) { last_poll_idx = 0; } lr = poll_results[last_poll_idx++].client_data; rv = apr_socket_accept(&worker_args->conn_sd, lr->sd, pconn); last_poll_idx++; } } if (rv != APR_SUCCESS) { if (!APR_STATUS_IS_EINTR(rv)) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_server_conf, APLOGNO(00194) "apr_socket_accept"); clean_child_exit(APEXIT_CHILDFATAL); } } else { DosWriteQueue(workq, WORKTYPE_CONN, sizeof(worker_args_t), worker_args, 0); requests_this_child++; } if (ap_max_requests_per_child != 0 && requests_this_child >= ap_max_requests_per_child) break; } while (!shutdown_pending && ap_my_generation == ap_scoreboard_image->global->running_generation); ap_scoreboard_image->parent[child_slot].quiescing = 1; DosPostEventSem(shutdown_event); DosWaitThread(&server_maint_tid, DCWW_WAIT); if (is_graceful) { char someleft; /* tell our worker threads to exit */ for (c=0; cservers[child_slot][c].status != SERVER_DEAD) { DosWriteQueue(workq, WORKTYPE_EXIT, 0, NULL, 0); } } do { someleft = 0; for (c=0; cservers[child_slot][c].status != SERVER_DEAD) { someleft = 1; DosSleep(1000); break; } } } while (someleft); } else { DosPurgeQueue(workq); for (c=0; cservers[child_slot][c].status != SERVER_DEAD) { DosKillThread(ap_scoreboard_image->servers[child_slot][c].tid); } } } apr_pool_destroy(pchild); } void add_worker() { int thread_slot; int stacksize = ap_thread_stacksize == 0 ? 128*1024 : ap_thread_stacksize; /* Find a free thread slot */ for (thread_slot=0; thread_slot < HARD_THREAD_LIMIT; thread_slot++) { if (ap_scoreboard_image->servers[child_slot][thread_slot].status == SERVER_DEAD) { ap_scoreboard_image->servers[child_slot][thread_slot].status = SERVER_STARTING; ap_scoreboard_image->servers[child_slot][thread_slot].tid = _beginthread(worker_main, NULL, stacksize, (void *)thread_slot); break; } } } ULONG APIENTRY thread_exception_handler(EXCEPTIONREPORTRECORD *pReportRec, EXCEPTIONREGISTRATIONRECORD *pRegRec, CONTEXTRECORD *pContext, PVOID p) { int c; if (pReportRec->fHandlerFlags & EH_NESTED_CALL) { return XCPT_CONTINUE_SEARCH; } if (pReportRec->ExceptionNum == XCPT_ACCESS_VIOLATION || pReportRec->ExceptionNum == XCPT_INTEGER_DIVIDE_BY_ZERO) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(00195) "caught exception in worker thread, initiating child shutdown pid=%d", getpid()); for (c=0; cservers[child_slot][c].tid == _gettid()) { ap_scoreboard_image->servers[child_slot][c].status = SERVER_DEAD; break; } } /* Shut down process ASAP, it could be quite unhealthy & leaking resources */ shutdown_pending = 1; ap_scoreboard_image->parent[child_slot].quiescing = 1; kill(getpid(), SIGHUP); DosUnwindException(UNWIND_ALL, 0, 0); } return XCPT_CONTINUE_SEARCH; } static void worker_main(void *vpArg) { apr_thread_t *thd = NULL; apr_os_thread_t osthd; long conn_id; conn_rec *current_conn; apr_pool_t *pconn; apr_allocator_t *allocator; apr_bucket_alloc_t *bucket_alloc; worker_args_t *worker_args; HQUEUE workq; PID owner; int rc; REQUESTDATA rd; ULONG len; BYTE priority; int thread_slot = (int)vpArg; EXCEPTIONREGISTRATIONRECORD reg_rec = { NULL, thread_exception_handler }; ap_sb_handle_t *sbh; /* Trap exceptions in this thread so we don't take down the whole process */ DosSetExceptionHandler( ®_rec ); osthd = apr_os_thread_current(); apr_os_thread_put(&thd, &osthd, pchild); rc = DosOpenQueue(&owner, &workq, apr_psprintf(pchild, "/queues/httpd/work.%d", getpid())); if (rc) { ap_log_error(APLOG_MARK, APLOG_ERR, APR_FROM_OS_ERROR(rc), ap_server_conf, APLOGNO(00196) "unable to open work queue, exiting"); ap_scoreboard_image->servers[child_slot][thread_slot].tid = 0; } conn_id = ID_FROM_CHILD_THREAD(child_slot, thread_slot); ap_update_child_status_from_indexes(child_slot, thread_slot, SERVER_READY, NULL); apr_allocator_create(&allocator); apr_allocator_max_free_set(allocator, ap_max_mem_free); bucket_alloc = apr_bucket_alloc_create_ex(allocator); while (rc = DosReadQueue(workq, &rd, &len, (PPVOID)&worker_args, 0, DCWW_WAIT, &priority, NULLHANDLE), rc == 0 && rd.ulData != WORKTYPE_EXIT) { pconn = worker_args->pconn; ap_create_sb_handle(&sbh, pconn, child_slot, thread_slot); current_conn = ap_run_create_connection(pconn, ap_server_conf, worker_args->conn_sd, conn_id, sbh, bucket_alloc); if (current_conn) { current_conn->current_thread = thd; ap_process_connection(current_conn, worker_args->conn_sd); ap_lingering_close(current_conn); } apr_pool_destroy(pconn); ap_update_child_status_from_indexes(child_slot, thread_slot, SERVER_READY, NULL); } ap_update_child_status_from_indexes(child_slot, thread_slot, SERVER_DEAD, NULL); apr_bucket_alloc_destroy(bucket_alloc); apr_allocator_destroy(allocator); } static void server_maintenance(void *vpArg) { int num_idle, num_needed; ULONG num_pending = 0; int threadnum; HQUEUE workq; ULONG rc; PID owner; rc = DosOpenQueue(&owner, &workq, apr_psprintf(pchild, "/queues/httpd/work.%d", getpid())); if (rc) { ap_log_error(APLOG_MARK, APLOG_ERR, APR_FROM_OS_ERROR(rc), ap_server_conf, APLOGNO(00197) "unable to open work queue in maintenance thread"); return; } do { for (num_idle=0, threadnum=0; threadnum < HARD_THREAD_LIMIT; threadnum++) { num_idle += ap_scoreboard_image->servers[child_slot][threadnum].status == SERVER_READY; } DosQueryQueue(workq, &num_pending); num_needed = ap_min_spare_threads - num_idle + num_pending; if (num_needed > 0) { for (threadnum=0; threadnum < num_needed; threadnum++) { add_worker(); } } if (num_idle - num_pending > ap_max_spare_threads) { DosWriteQueue(workq, WORKTYPE_EXIT, 0, NULL, 0); } } while (DosWaitEventSem(shutdown_event, 500) == ERROR_TIMEOUT); } /* Signal handling routines */ static void sig_term(int sig) { shutdown_pending = 1; is_graceful = 0; signal(SIGTERM, SIG_DFL); } static void sig_hup(int sig) { shutdown_pending = 1; is_graceful = 1; } static void set_signals() { struct sigaction sa; sigemptyset(&sa.sa_mask); sa.sa_flags = 0; sa.sa_handler = sig_term; if (sigaction(SIGTERM, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00198) "sigaction(SIGTERM)"); sa.sa_handler = sig_hup; if (sigaction(SIGHUP, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00199) "sigaction(SIGHUP)"); } httpd-2.4.41/server/mpm/mpmt_os2/mpm_default.h0000644000000000000500000000315211711754075017552 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mpmt_os2/mpm_default.h * @brief os2 MPM defaults * * @defgroup APACHE_MPM_OS2 OS/2 MPM * @ingroup APACHE_INTERNAL * @{ */ #ifndef APACHE_MPM_DEFAULT_H #define APACHE_MPM_DEFAULT_H /* Number of servers processes to spawn off by default */ #ifndef DEFAULT_START_DAEMON #define DEFAULT_START_DAEMON 2 #endif /* Maximum number of *free* server threads --- more than this, and * they will die off. */ #ifndef DEFAULT_MAX_SPARE_THREAD #define DEFAULT_MAX_SPARE_THREAD 10 #endif /* Minimum --- fewer than this, and more will be created */ #ifndef DEFAULT_MIN_SPARE_THREAD #define DEFAULT_MIN_SPARE_THREAD 5 #endif /* * Interval, in microseconds, between scoreboard maintenance. */ #ifndef SCOREBOARD_MAINTENANCE_INTERVAL #define SCOREBOARD_MAINTENANCE_INTERVAL 1000000 #endif #endif /* AP_MPM_DEFAULT_H */ /** @} */ httpd-2.4.41/server/mpm/mpmt_os2/config5.m40000644000000000000500000000016011274040000016650 0ustar rootsrcAPACHE_MPM_MODULE(mpmt_os2, $enable_mpm_mpmt_os2, mpmt_os2.lo mpmt_os2_child.lo,[ APR_ADDTO(CFLAGS,-Zmt) ]) httpd-2.4.41/server/mpm/mpmt_os2/mpmt_os2.c0000644000000000000500000004426112677464335017027 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* Multi-process, multi-threaded MPM for OS/2 * * Server consists of * - a main, parent process * - a small, static number of child processes * * The parent process's job is to manage the child processes. This involves * spawning children as required to ensure there are always ap_daemons_to_start * processes accepting connections. * * Each child process consists of a pool of worker threads and a * main thread that accepts connections & passes them to the workers via * a work queue. The worker thread pool is dynamic, managed by a maintanence * thread so that the number of idle threads is kept between * min_spare_threads & max_spare_threads. * */ /* Todo list - Enforce MaxRequestWorkers somehow */ #define INCL_NOPMAPI #define INCL_DOS #define INCL_DOSERRORS #include "ap_config.h" #include "httpd.h" #include "mpm_default.h" #include "http_main.h" #include "http_log.h" #include "http_config.h" #include "http_core.h" /* for get_remote_host */ #include "http_connection.h" #include "ap_mpm.h" #include "ap_listen.h" #include "apr_portable.h" #include "mpm_common.h" #include "scoreboard.h" #include "apr_strings.h" #include #include /* We don't need many processes, * they're only for redundancy in the event of a crash */ #define HARD_SERVER_LIMIT 10 /* Limit on the total number of threads per process */ #ifndef HARD_THREAD_LIMIT #define HARD_THREAD_LIMIT 256 #endif server_rec *ap_server_conf; static apr_pool_t *pconf = NULL; /* Pool for config stuff */ /* Config globals */ static int one_process = 0; static int ap_daemons_to_start = 0; static int ap_thread_limit = 0; int ap_min_spare_threads = 0; int ap_max_spare_threads = 0; /* Keep track of a few interesting statistics */ int ap_max_daemons_limit = -1; /* volatile just in case */ static int volatile shutdown_pending; static int volatile restart_pending; static int volatile is_graceful = 0; ap_generation_t volatile ap_my_generation=0; /* Used by the scoreboard */ static int is_parent_process=TRUE; HMTX ap_mpm_accept_mutex = 0; /* An array of these is stored in a shared memory area for passing * sockets from the parent to child processes */ typedef struct { struct sockaddr_in name; apr_os_sock_t listen_fd; } listen_socket_t; typedef struct { HMTX accept_mutex; listen_socket_t listeners[1]; } parent_info_t; static int master_main(); static void spawn_child(int slot); void ap_mpm_child_main(apr_pool_t *pconf); static void set_signals(); static int mpmt_os2_run(apr_pool_t *_pconf, apr_pool_t *plog, server_rec *s ) { char *listener_shm_name; parent_info_t *parent_info; ULONG rc; pconf = _pconf; ap_server_conf = s; restart_pending = 0; DosSetMaxFH(ap_thread_limit * 2); listener_shm_name = apr_psprintf(pconf, "/sharemem/httpd/parent_info.%d", getppid()); rc = DosGetNamedSharedMem((PPVOID)&parent_info, listener_shm_name, PAG_READ); is_parent_process = rc != 0; ap_scoreboard_fname = apr_psprintf(pconf, "/sharemem/httpd/scoreboard.%d", is_parent_process ? getpid() : getppid()); if (rc == 0) { /* Child process */ ap_listen_rec *lr; int num_listeners = 0; ap_mpm_accept_mutex = parent_info->accept_mutex; /* Set up a default listener if necessary */ if (ap_listeners == NULL) { ap_listen_rec *lr = apr_pcalloc(s->process->pool, sizeof(ap_listen_rec)); ap_listeners = lr; apr_sockaddr_info_get(&lr->bind_addr, "0.0.0.0", APR_UNSPEC, DEFAULT_HTTP_PORT, 0, s->process->pool); apr_socket_create(&lr->sd, lr->bind_addr->family, SOCK_STREAM, 0, s->process->pool); } for (lr = ap_listeners; lr; lr = lr->next) { apr_sockaddr_t *sa; apr_os_sock_put(&lr->sd, &parent_info->listeners[num_listeners].listen_fd, pconf); apr_socket_addr_get(&sa, APR_LOCAL, lr->sd); num_listeners++; } DosFreeMem(parent_info); /* Do the work */ ap_mpm_child_main(pconf); /* Outta here */ return DONE; } else { /* Parent process */ int rc; is_parent_process = TRUE; if (ap_setup_listeners(ap_server_conf) < 1) { ap_log_error(APLOG_MARK, APLOG_ALERT, 0, s, APLOGNO(00200) "no listening sockets available, shutting down"); return !OK; } ap_log_pid(pconf, ap_pid_fname); rc = master_main(); ++ap_my_generation; ap_scoreboard_image->global->running_generation = ap_my_generation; if (rc != OK) { ap_remove_pid(pconf, ap_pid_fname); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00201) "caught %s, shutting down", (rc == DONE) ? "SIGTERM" : "error"); return rc; } } /* Parent process */ return OK; /* Restart */ } /* Main processing of the parent process * returns TRUE if restarting */ static int master_main() { server_rec *s = ap_server_conf; ap_listen_rec *lr; parent_info_t *parent_info; char *listener_shm_name; int listener_num, num_listeners, slot; ULONG rc; printf("%s \n", ap_get_server_description()); set_signals(); if (ap_setup_listeners(ap_server_conf) < 1) { ap_log_error(APLOG_MARK, APLOG_ALERT, 0, s, APLOGNO(00202) "no listening sockets available, shutting down"); return !OK; } /* Allocate a shared memory block for the array of listeners */ for (num_listeners = 0, lr = ap_listeners; lr; lr = lr->next) { num_listeners++; } listener_shm_name = apr_psprintf(pconf, "/sharemem/httpd/parent_info.%d", getpid()); rc = DosAllocSharedMem((PPVOID)&parent_info, listener_shm_name, sizeof(parent_info_t) + num_listeners * sizeof(listen_socket_t), PAG_READ|PAG_WRITE|PAG_COMMIT); if (rc) { ap_log_error(APLOG_MARK, APLOG_ALERT, APR_FROM_OS_ERROR(rc), s, APLOGNO(00203) "failure allocating shared memory, shutting down"); return !OK; } /* Store the listener sockets in the shared memory area for our children to see */ for (listener_num = 0, lr = ap_listeners; lr; lr = lr->next, listener_num++) { apr_os_sock_get(&parent_info->listeners[listener_num].listen_fd, lr->sd); } /* Create mutex to prevent multiple child processes from detecting * a connection with apr_poll() */ rc = DosCreateMutexSem(NULL, &ap_mpm_accept_mutex, DC_SEM_SHARED, FALSE); if (rc) { ap_log_error(APLOG_MARK, APLOG_ALERT, APR_FROM_OS_ERROR(rc), s, APLOGNO(00204) "failure creating accept mutex, shutting down"); return !OK; } parent_info->accept_mutex = ap_mpm_accept_mutex; /* Allocate shared memory for scoreboard */ if (ap_scoreboard_image == NULL) { void *sb_mem; rc = DosAllocSharedMem(&sb_mem, ap_scoreboard_fname, ap_calc_scoreboard_size(), PAG_COMMIT|PAG_READ|PAG_WRITE); if (rc) { ap_log_error(APLOG_MARK, APLOG_ERR, APR_FROM_OS_ERROR(rc), ap_server_conf, APLOGNO(00205) "unable to allocate shared memory for scoreboard , exiting"); return !OK; } ap_init_scoreboard(sb_mem); } ap_scoreboard_image->global->restart_time = apr_time_now(); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00206) "%s configured -- resuming normal operations", ap_get_server_description()); ap_log_error(APLOG_MARK, APLOG_INFO, 0, ap_server_conf, APLOGNO(00207) "Server built: %s", ap_get_server_built()); if (one_process) { ap_scoreboard_image->parent[0].pid = getpid(); ap_mpm_child_main(pconf); return DONE; } while (!restart_pending && !shutdown_pending) { RESULTCODES proc_rc; PID child_pid; int active_children = 0; /* Count number of active children */ for (slot=0; slot < HARD_SERVER_LIMIT; slot++) { active_children += ap_scoreboard_image->parent[slot].pid != 0 && !ap_scoreboard_image->parent[slot].quiescing; } /* Spawn children if needed */ for (slot=0; slot < HARD_SERVER_LIMIT && active_children < ap_daemons_to_start; slot++) { if (ap_scoreboard_image->parent[slot].pid == 0) { spawn_child(slot); active_children++; } } rc = DosWaitChild(DCWA_PROCESSTREE, DCWW_NOWAIT, &proc_rc, &child_pid, 0); if (rc == 0) { /* A child has terminated, remove its scoreboard entry & terminate if necessary */ for (slot=0; ap_scoreboard_image->parent[slot].pid != child_pid && slot < HARD_SERVER_LIMIT; slot++); if (slot < HARD_SERVER_LIMIT) { ap_scoreboard_image->parent[slot].pid = 0; ap_scoreboard_image->parent[slot].quiescing = 0; if (proc_rc.codeTerminate == TC_EXIT) { /* Child terminated normally, check its exit code and * terminate server if child indicates a fatal error */ if (proc_rc.codeResult == APEXIT_CHILDFATAL) break; } } } else if (rc == ERROR_CHILD_NOT_COMPLETE) { /* No child exited, lets sleep for a while.... */ apr_sleep(SCOREBOARD_MAINTENANCE_INTERVAL); } } /* Signal children to shut down, either gracefully or immediately */ for (slot=0; slotparent[slot].pid, is_graceful ? SIGHUP : SIGTERM); } DosFreeMem(parent_info); return restart_pending ? OK : DONE; } static void spawn_child(int slot) { PPIB ppib; PTIB ptib; char fail_module[100]; char progname[CCHMAXPATH]; RESULTCODES proc_rc; ULONG rc; ap_scoreboard_image->parent[slot].generation = ap_my_generation; DosGetInfoBlocks(&ptib, &ppib); DosQueryModuleName(ppib->pib_hmte, sizeof(progname), progname); rc = DosExecPgm(fail_module, sizeof(fail_module), EXEC_ASYNCRESULT, ppib->pib_pchcmd, NULL, &proc_rc, progname); if (rc) { ap_log_error(APLOG_MARK, APLOG_ERR, APR_FROM_OS_ERROR(rc), ap_server_conf, APLOGNO(00208) "error spawning child, slot %d", slot); } if (ap_max_daemons_limit < slot) { ap_max_daemons_limit = slot; } ap_scoreboard_image->parent[slot].pid = proc_rc.codeTerminate; } /* Signal handling routines */ static void sig_term(int sig) { shutdown_pending = 1; signal(SIGTERM, SIG_DFL); } static void sig_restart(int sig) { if (sig == SIGUSR1) { is_graceful = 1; } restart_pending = 1; } static void set_signals() { struct sigaction sa; sigemptyset(&sa.sa_mask); sa.sa_flags = 0; sa.sa_handler = sig_term; if (sigaction(SIGTERM, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00209) "sigaction(SIGTERM)"); if (sigaction(SIGINT, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00210) "sigaction(SIGINT)"); sa.sa_handler = sig_restart; if (sigaction(SIGHUP, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00211) "sigaction(SIGHUP)"); if (sigaction(SIGUSR1, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00212) "sigaction(SIGUSR1)"); } /* Enquiry functions used get MPM status info */ static apr_status_t mpmt_os2_query(int query_code, int *result, apr_status_t *rv) { *rv = APR_SUCCESS; switch (query_code) { case AP_MPMQ_MAX_DAEMON_USED: *result = ap_max_daemons_limit; break; case AP_MPMQ_IS_THREADED: *result = AP_MPMQ_DYNAMIC; break; case AP_MPMQ_IS_FORKED: *result = AP_MPMQ_NOT_SUPPORTED; break; case AP_MPMQ_HARD_LIMIT_DAEMONS: *result = HARD_SERVER_LIMIT; break; case AP_MPMQ_HARD_LIMIT_THREADS: *result = HARD_THREAD_LIMIT; break; case AP_MPMQ_MIN_SPARE_DAEMONS: *result = 0; break; case AP_MPMQ_MAX_SPARE_DAEMONS: *result = 0; break; case AP_MPMQ_MAX_REQUESTS_DAEMON: *result = ap_max_requests_per_child; break; case AP_MPMQ_GENERATION: *result = ap_my_generation; break; default: *rv = APR_ENOTIMPL; break; } return OK; } static const char *mpmt_os2_get_name(void) { return "mpmt_os2"; } /* Configuration handling stuff */ static int mpmt_os2_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { one_process = ap_exists_config_define("ONE_PROCESS") || ap_exists_config_define("DEBUG"); is_graceful = 0; ap_listen_pre_config(); ap_daemons_to_start = DEFAULT_START_DAEMON; ap_thread_limit = HARD_THREAD_LIMIT; ap_extended_status = 0; ap_min_spare_threads = DEFAULT_MIN_SPARE_THREAD; ap_max_spare_threads = DEFAULT_MAX_SPARE_THREAD; ap_sys_privileges_handlers(1); return OK; } static int mpmt_os2_check_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { static int restart_num = 0; int startup = 0; /* we want this only the first time around */ if (restart_num++ == 0) { startup = 1; } if (ap_daemons_to_start < 0) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00213) "WARNING: StartServers of %d not allowed, " "increasing to 1.", ap_daemons_to_start); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00214) "StartServers of %d not allowed, increasing to 1", ap_daemons_to_start); } ap_daemons_to_start = 1; } if (ap_min_spare_threads < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00215) "WARNING: MinSpareThreads of %d not allowed, " "increasing to 1 to avoid almost certain server failure. " "Please read the documentation.", ap_min_spare_threads); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00216) "MinSpareThreads of %d not allowed, increasing to 1", ap_min_spare_threads); } ap_min_spare_threads = 1; } return OK; } static void mpmt_os2_hooks(apr_pool_t *p) { ap_hook_pre_config(mpmt_os2_pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_check_config(mpmt_os2_check_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm(mpmt_os2_run, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm_query(mpmt_os2_query, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm_get_name(mpmt_os2_get_name, NULL, NULL, APR_HOOK_MIDDLE); } static const char *set_daemons_to_start(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_daemons_to_start = atoi(arg); return NULL; } static const char *set_min_spare_threads(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_min_spare_threads = atoi(arg); return NULL; } static const char *set_max_spare_threads(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_max_spare_threads = atoi(arg); return NULL; } static const char *ignore_cmd(cmd_parms *cmd, void *dummy, const char *arg) { return NULL; } static const command_rec mpmt_os2_cmds[] = { LISTEN_COMMANDS, AP_INIT_TAKE1( "StartServers", set_daemons_to_start, NULL, RSRC_CONF, "Number of child processes launched at server startup" ), AP_INIT_TAKE1("MinSpareThreads", set_min_spare_threads, NULL, RSRC_CONF, "Minimum number of idle children, to handle request spikes"), AP_INIT_TAKE1("MaxSpareThreads", set_max_spare_threads, NULL, RSRC_CONF, "Maximum number of idle children"), AP_INIT_TAKE1("User", ignore_cmd, NULL, RSRC_CONF, "Not applicable on this platform"), AP_INIT_TAKE1("Group", ignore_cmd, NULL, RSRC_CONF, "Not applicable on this platform"), AP_INIT_TAKE1("ScoreBoardFile", ignore_cmd, NULL, RSRC_CONF, \ "Not applicable on this platform"), { NULL } }; AP_DECLARE_MODULE(mpm_mpmt_os2) = { MPM20_MODULE_STUFF, NULL, /* hook to run before apache parses args */ NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ mpmt_os2_cmds, /* command apr_table_t */ mpmt_os2_hooks, /* register_hooks */ }; httpd-2.4.41/server/mpm/mpmt_os2/config.m40000644000000000000500000000033411274030073016577 0ustar rootsrcAC_MSG_CHECKING(if mpmt_os2 MPM supports this platform) case $host in *os2-emx*) AC_MSG_RESULT(yes) APACHE_MPM_SUPPORTED(mpmt_os2, no, yes) ;; *) AC_MSG_RESULT(no) ;; esac httpd-2.4.41/server/mpm/mpmt_os2/Makefile.in0000644000000000000500000000004711274040000017125 0ustar rootsrcinclude $(top_srcdir)/build/special.mk httpd-2.4.41/server/mpm/prefork/0002755000000000000500000000000013523273341015010 5ustar rootsrchttpd-2.4.41/server/mpm/prefork/config3.m40000644000000000000500000000006011274040000016555 0ustar rootsrcAPACHE_MPM_MODULE(prefork, $enable_mpm_prefork) httpd-2.4.41/server/mpm/prefork/mpm_default.h0000644000000000000500000000302711711754075017463 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file prefork/mpm_default.h * @brief Prefork MPM defaults * * @defgroup APACHE_MPM_PREFORK Prefork MPM * @ingroup APACHE_INTERNAL * @{ */ #ifndef APACHE_MPM_DEFAULT_H #define APACHE_MPM_DEFAULT_H /* Number of servers to spawn off by default --- also, if fewer than * this free when the caretaker checks, it will spawn more. */ #ifndef DEFAULT_START_DAEMON #define DEFAULT_START_DAEMON 5 #endif /* Maximum number of *free* server processes --- more than this, and * they will die off. */ #ifndef DEFAULT_MAX_FREE_DAEMON #define DEFAULT_MAX_FREE_DAEMON 10 #endif /* Minimum --- fewer than this, and more will be created */ #ifndef DEFAULT_MIN_FREE_DAEMON #define DEFAULT_MIN_FREE_DAEMON 5 #endif #endif /* AP_MPM_DEFAULT_H */ /** @} */ httpd-2.4.41/server/mpm/prefork/config.m40000644000000000000500000000034511172132604016511 0ustar rootsrcAC_MSG_CHECKING(if prefork MPM supports this platform) if test $forking_mpms_supported != yes; then AC_MSG_RESULT(no - This is not a forking platform) else AC_MSG_RESULT(yes) APACHE_MPM_SUPPORTED(prefork, yes, no) fi httpd-2.4.41/server/mpm/prefork/prefork.c0000644000000000000500000015374513442143212016632 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr.h" #include "apr_portable.h" #include "apr_strings.h" #include "apr_thread_proc.h" #include "apr_signal.h" #define APR_WANT_STDIO #define APR_WANT_STRFUNC #include "apr_want.h" #if APR_HAVE_UNISTD_H #include #endif #if APR_HAVE_SYS_TYPES_H #include #endif #include "ap_config.h" #include "httpd.h" #include "mpm_default.h" #include "http_main.h" #include "http_log.h" #include "http_config.h" #include "http_core.h" /* for get_remote_host */ #include "http_connection.h" #include "scoreboard.h" #include "ap_mpm.h" #include "util_mutex.h" #include "unixd.h" #include "mpm_common.h" #include "ap_listen.h" #include "ap_mmn.h" #include "apr_poll.h" #include #ifdef HAVE_TIME_H #include #endif #ifdef HAVE_SYS_PROCESSOR_H #include /* for bindprocessor() */ #endif #include #include /* Limit on the total --- clients will be locked out if more servers than * this are needed. It is intended solely to keep the server from crashing * when things get out of hand. * * We keep a hard maximum number of servers, for two reasons --- first off, * in case something goes seriously wrong, we want to stop the fork bomb * short of actually crashing the machine we're running on by filling some * kernel table. Secondly, it keeps the size of the scoreboard file small * enough that we can read the whole thing without worrying too much about * the overhead. */ #ifndef DEFAULT_SERVER_LIMIT #define DEFAULT_SERVER_LIMIT 256 #endif /* Admin can't tune ServerLimit beyond MAX_SERVER_LIMIT. We want * some sort of compile-time limit to help catch typos. */ #ifndef MAX_SERVER_LIMIT #define MAX_SERVER_LIMIT 200000 #endif #ifndef HARD_THREAD_LIMIT #define HARD_THREAD_LIMIT 1 #endif /* config globals */ static int ap_daemons_to_start=0; static int ap_daemons_min_free=0; static int ap_daemons_max_free=0; static int ap_daemons_limit=0; /* MaxRequestWorkers */ static int server_limit = 0; /* data retained by prefork across load/unload of the module * allocated on first call to pre-config hook; located on * subsequent calls to pre-config hook */ typedef struct prefork_retained_data { ap_unixd_mpm_retained_data *mpm; int first_server_limit; int maxclients_reported; /* * The max child slot ever assigned, preserved across restarts. Necessary * to deal with MaxRequestWorkers changes across AP_SIG_GRACEFUL restarts. We * use this value to optimize routines that have to scan the entire scoreboard. */ int max_daemons_limit; /* * idle_spawn_rate is the number of children that will be spawned on the * next maintenance cycle if there aren't enough idle servers. It is * doubled up to MAX_SPAWN_RATE, and reset only when a cycle goes by * without the need to spawn. */ int idle_spawn_rate; #ifndef MAX_SPAWN_RATE #define MAX_SPAWN_RATE (32) #endif int hold_off_on_exponential_spawning; } prefork_retained_data; static prefork_retained_data *retained; typedef struct prefork_child_bucket { ap_pod_t *pod; ap_listen_rec *listeners; apr_proc_mutex_t *mutex; } prefork_child_bucket; static prefork_child_bucket *all_buckets, /* All listeners buckets */ *my_bucket; /* Current child bucket */ #define MPM_CHILD_PID(i) (ap_scoreboard_image->parent[i].pid) /* one_process --- debugging mode variable; can be set from the command line * with the -X flag. If set, this gets you the child_main loop running * in the process which originally started up (no detach, no make_child), * which is a pretty nice debugging environment. (You'll get a SIGHUP * early in standalone_main; just continue through. This is the server * trying to kill off any child processes which it might have lying * around --- Apache doesn't keep track of their pids, it just sends * SIGHUP to the process group, ignoring it in the root process. * Continue through and you'll be fine.). */ static int one_process = 0; static apr_pool_t *pconf; /* Pool for config stuff */ static apr_pool_t *pchild; /* Pool for httpd child stuff */ static pid_t ap_my_pid; /* it seems silly to call getpid all the time */ static pid_t parent_pid; static int my_child_num; #ifdef GPROF /* * change directory for gprof to plop the gmon.out file * configure in httpd.conf: * GprofDir $RuntimeDir/ -> $ServerRoot/$RuntimeDir/gmon.out * GprofDir $RuntimeDir/% -> $ServerRoot/$RuntimeDir/gprof.$pid/gmon.out */ static void chdir_for_gprof(void) { core_server_config *sconf = ap_get_core_module_config(ap_server_conf->module_config); char *dir = sconf->gprof_dir; const char *use_dir; if(dir) { apr_status_t res; char *buf = NULL ; int len = strlen(sconf->gprof_dir) - 1; if(*(dir + len) == '%') { dir[len] = '\0'; buf = ap_append_pid(pconf, dir, "gprof."); } use_dir = ap_server_root_relative(pconf, buf ? buf : dir); res = apr_dir_make(use_dir, APR_UREAD | APR_UWRITE | APR_UEXECUTE | APR_GREAD | APR_GEXECUTE | APR_WREAD | APR_WEXECUTE, pconf); if(res != APR_SUCCESS && !APR_STATUS_IS_EEXIST(res)) { ap_log_error(APLOG_MARK, APLOG_ERR, res, ap_server_conf, APLOGNO(00142) "gprof: error creating directory %s", dir); } } else { use_dir = ap_runtime_dir_relative(pconf, ""); } chdir(use_dir); } #else #define chdir_for_gprof() #endif static void prefork_note_child_killed(int childnum, pid_t pid, ap_generation_t gen) { AP_DEBUG_ASSERT(childnum != -1); /* no scoreboard squatting with this MPM */ ap_run_child_status(ap_server_conf, ap_scoreboard_image->parent[childnum].pid, ap_scoreboard_image->parent[childnum].generation, childnum, MPM_CHILD_EXITED); ap_scoreboard_image->parent[childnum].pid = 0; } static void prefork_note_child_started(int slot, pid_t pid) { ap_generation_t gen = retained->mpm->my_generation; ap_scoreboard_image->parent[slot].pid = pid; ap_scoreboard_image->parent[slot].generation = gen; ap_run_child_status(ap_server_conf, pid, gen, slot, MPM_CHILD_STARTED); } /* a clean exit from a child with proper cleanup */ static void clean_child_exit(int code) __attribute__ ((noreturn)); static void clean_child_exit(int code) { retained->mpm->mpm_state = AP_MPMQ_STOPPING; apr_signal(SIGHUP, SIG_IGN); apr_signal(SIGTERM, SIG_IGN); if (pchild) { apr_pool_destroy(pchild); } if (one_process) { prefork_note_child_killed(/* slot */ 0, 0, 0); } ap_mpm_pod_close(my_bucket->pod); chdir_for_gprof(); exit(code); } static apr_status_t accept_mutex_on(void) { apr_status_t rv = apr_proc_mutex_lock(my_bucket->mutex); if (rv != APR_SUCCESS) { const char *msg = "couldn't grab the accept mutex"; if (retained->mpm->my_generation != ap_scoreboard_image->global->running_generation) { ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, ap_server_conf, APLOGNO(00143) "%s", msg); clean_child_exit(0); } else { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, ap_server_conf, APLOGNO(00144) "%s", msg); exit(APEXIT_CHILDFATAL); } } return APR_SUCCESS; } static apr_status_t accept_mutex_off(void) { apr_status_t rv = apr_proc_mutex_unlock(my_bucket->mutex); if (rv != APR_SUCCESS) { const char *msg = "couldn't release the accept mutex"; if (retained->mpm->my_generation != ap_scoreboard_image->global->running_generation) { ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, ap_server_conf, APLOGNO(00145) "%s", msg); /* don't exit here... we have a connection to * process, after which point we'll see that the * generation changed and we'll exit cleanly */ } else { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, ap_server_conf, APLOGNO(00146) "%s", msg); exit(APEXIT_CHILDFATAL); } } return APR_SUCCESS; } /* On some architectures it's safe to do unserialized accept()s in the single * Listen case. But it's never safe to do it in the case where there's * multiple Listen statements. Define SINGLE_LISTEN_UNSERIALIZED_ACCEPT * when it's safe in the single Listen case. */ #ifdef SINGLE_LISTEN_UNSERIALIZED_ACCEPT #define SAFE_ACCEPT(stmt) (ap_listeners->next ? (stmt) : APR_SUCCESS) #else #define SAFE_ACCEPT(stmt) (stmt) #endif static int prefork_query(int query_code, int *result, apr_status_t *rv) { *rv = APR_SUCCESS; switch(query_code){ case AP_MPMQ_MAX_DAEMON_USED: *result = ap_daemons_limit; break; case AP_MPMQ_IS_THREADED: *result = AP_MPMQ_NOT_SUPPORTED; break; case AP_MPMQ_IS_FORKED: *result = AP_MPMQ_DYNAMIC; break; case AP_MPMQ_HARD_LIMIT_DAEMONS: *result = server_limit; break; case AP_MPMQ_HARD_LIMIT_THREADS: *result = HARD_THREAD_LIMIT; break; case AP_MPMQ_MAX_THREADS: *result = 1; break; case AP_MPMQ_MIN_SPARE_DAEMONS: *result = ap_daemons_min_free; break; case AP_MPMQ_MIN_SPARE_THREADS: *result = 0; break; case AP_MPMQ_MAX_SPARE_DAEMONS: *result = ap_daemons_max_free; break; case AP_MPMQ_MAX_SPARE_THREADS: *result = 0; break; case AP_MPMQ_MAX_REQUESTS_DAEMON: *result = ap_max_requests_per_child; break; case AP_MPMQ_MAX_DAEMONS: *result = ap_daemons_limit; break; case AP_MPMQ_MPM_STATE: *result = retained->mpm->mpm_state; break; case AP_MPMQ_GENERATION: *result = retained->mpm->my_generation; break; default: *rv = APR_ENOTIMPL; break; } return OK; } static const char *prefork_get_name(void) { return "prefork"; } /***************************************************************** * Connection structures and accounting... */ static void just_die(int sig) { clean_child_exit(0); } /* volatile because it's updated from a signal handler */ static int volatile die_now = 0; static void stop_listening(int sig) { retained->mpm->mpm_state = AP_MPMQ_STOPPING; ap_close_listeners_ex(my_bucket->listeners); /* For a graceful stop, we want the child to exit when done */ die_now = 1; } /***************************************************************** * Child process main loop. * The following vars are static to avoid getting clobbered by longjmp(); * they are really private to child_main. */ static int requests_this_child; static int num_listensocks = 0; static void child_main(int child_num_arg, int child_bucket) { #if APR_HAS_THREADS apr_thread_t *thd = NULL; apr_os_thread_t osthd; #endif apr_pool_t *ptrans; apr_allocator_t *allocator; apr_status_t status; int i; ap_listen_rec *lr; apr_pollset_t *pollset; ap_sb_handle_t *sbh; apr_bucket_alloc_t *bucket_alloc; int last_poll_idx = 0; const char *lockfile; /* for benefit of any hooks that run as this child initializes */ retained->mpm->mpm_state = AP_MPMQ_STARTING; my_child_num = child_num_arg; ap_my_pid = getpid(); requests_this_child = 0; ap_fatal_signal_child_setup(ap_server_conf); /* Get a sub context for global allocations in this child, so that * we can have cleanups occur when the child exits. */ apr_allocator_create(&allocator); apr_allocator_max_free_set(allocator, ap_max_mem_free); apr_pool_create_ex(&pchild, pconf, NULL, allocator); apr_allocator_owner_set(allocator, pchild); apr_pool_tag(pchild, "pchild"); #if APR_HAS_THREADS osthd = apr_os_thread_current(); apr_os_thread_put(&thd, &osthd, pchild); #endif apr_pool_create(&ptrans, pchild); apr_pool_tag(ptrans, "transaction"); /* close unused listeners and pods */ for (i = 0; i < retained->mpm->num_buckets; i++) { if (i != child_bucket) { ap_close_listeners_ex(all_buckets[i].listeners); ap_mpm_pod_close(all_buckets[i].pod); } } /* needs to be done before we switch UIDs so we have permissions */ ap_reopen_scoreboard(pchild, NULL, 0); status = SAFE_ACCEPT(apr_proc_mutex_child_init(&my_bucket->mutex, apr_proc_mutex_lockfile(my_bucket->mutex), pchild)); if (status != APR_SUCCESS) { lockfile = apr_proc_mutex_lockfile(my_bucket->mutex); ap_log_error(APLOG_MARK, APLOG_EMERG, status, ap_server_conf, APLOGNO(00155) "Couldn't initialize cross-process lock in child " "(%s) (%s)", lockfile ? lockfile : "none", apr_proc_mutex_name(my_bucket->mutex)); clean_child_exit(APEXIT_CHILDFATAL); } if (ap_run_drop_privileges(pchild, ap_server_conf)) { clean_child_exit(APEXIT_CHILDFATAL); } ap_run_child_init(pchild, ap_server_conf); ap_create_sb_handle(&sbh, pchild, my_child_num, 0); (void) ap_update_child_status(sbh, SERVER_READY, (request_rec *) NULL); /* Set up the pollfd array */ status = apr_pollset_create(&pollset, num_listensocks, pchild, APR_POLLSET_NOCOPY); if (status != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, status, ap_server_conf, APLOGNO(00156) "Couldn't create pollset in child; check system or user limits"); clean_child_exit(APEXIT_CHILDSICK); /* assume temporary resource issue */ } for (lr = my_bucket->listeners, i = num_listensocks; i--; lr = lr->next) { apr_pollfd_t *pfd = apr_pcalloc(pchild, sizeof *pfd); pfd->desc_type = APR_POLL_SOCKET; pfd->desc.s = lr->sd; pfd->reqevents = APR_POLLIN; pfd->client_data = lr; status = apr_pollset_add(pollset, pfd); if (status != APR_SUCCESS) { /* If the child processed a SIGWINCH before setting up the * pollset, this error path is expected and harmless, * since the listener fd was already closed; so don't * pollute the logs in that case. */ if (!die_now) { ap_log_error(APLOG_MARK, APLOG_EMERG, status, ap_server_conf, APLOGNO(00157) "Couldn't add listener to pollset; check system or user limits"); clean_child_exit(APEXIT_CHILDSICK); } clean_child_exit(0); } lr->accept_func = ap_unixd_accept; } retained->mpm->mpm_state = AP_MPMQ_RUNNING; bucket_alloc = apr_bucket_alloc_create(pchild); /* die_now is set when AP_SIG_GRACEFUL is received in the child; * {shutdown,restart}_pending are set when a signal is received while * running in single process mode. */ while (!die_now && !retained->mpm->shutdown_pending && !retained->mpm->restart_pending) { conn_rec *current_conn; void *csd; /* * (Re)initialize this child to a pre-connection state. */ apr_pool_clear(ptrans); if ((ap_max_requests_per_child > 0 && requests_this_child++ >= ap_max_requests_per_child)) { clean_child_exit(0); } (void) ap_update_child_status(sbh, SERVER_READY, (request_rec *) NULL); /* * Wait for an acceptable connection to arrive. */ /* Lock around "accept", if necessary */ SAFE_ACCEPT(accept_mutex_on()); if (num_listensocks == 1) { /* There is only one listener record, so refer to that one. */ lr = my_bucket->listeners; } else { /* multiple listening sockets - need to poll */ for (;;) { apr_int32_t numdesc; const apr_pollfd_t *pdesc; /* check for termination first so we don't sleep for a while in * poll if already signalled */ if (die_now /* in graceful stop/restart */ || retained->mpm->shutdown_pending || retained->mpm->restart_pending) { SAFE_ACCEPT(accept_mutex_off()); clean_child_exit(0); } /* timeout == 10 seconds to avoid a hang at graceful restart/stop * caused by the closing of sockets by the signal handler */ status = apr_pollset_poll(pollset, apr_time_from_sec(10), &numdesc, &pdesc); if (status != APR_SUCCESS) { if (APR_STATUS_IS_TIMEUP(status) || APR_STATUS_IS_EINTR(status)) { continue; } /* Single Unix documents select as returning errnos * EBADF, EINTR, and EINVAL... and in none of those * cases does it make sense to continue. In fact * on Linux 2.0.x we seem to end up with EFAULT * occasionally, and we'd loop forever due to it. */ ap_log_error(APLOG_MARK, APLOG_ERR, status, ap_server_conf, APLOGNO(00158) "apr_pollset_poll: (listen)"); SAFE_ACCEPT(accept_mutex_off()); clean_child_exit(APEXIT_CHILDSICK); } /* We can always use pdesc[0], but sockets at position N * could end up completely starved of attention in a very * busy server. Therefore, we round-robin across the * returned set of descriptors. While it is possible that * the returned set of descriptors might flip around and * continue to starve some sockets, we happen to know the * internal pollset implementation retains ordering * stability of the sockets. Thus, the round-robin should * ensure that a socket will eventually be serviced. */ if (last_poll_idx >= numdesc) last_poll_idx = 0; /* Grab a listener record from the client_data of the poll * descriptor, and advance our saved index to round-robin * the next fetch. * * ### hmm... this descriptor might have POLLERR rather * ### than POLLIN */ lr = pdesc[last_poll_idx++].client_data; goto got_fd; } } got_fd: /* if we accept() something we don't want to die, so we have to * defer the exit */ status = lr->accept_func(&csd, lr, ptrans); SAFE_ACCEPT(accept_mutex_off()); /* unlock after "accept" */ if (status == APR_EGENERAL) { /* resource shortage or should-not-occur occurred */ clean_child_exit(APEXIT_CHILDSICK); } else if (status != APR_SUCCESS) { continue; } /* * We now have a connection, so set it up with the appropriate * socket options, file descriptors, and read/write buffers. */ current_conn = ap_run_create_connection(ptrans, ap_server_conf, csd, my_child_num, sbh, bucket_alloc); if (current_conn) { #if APR_HAS_THREADS current_conn->current_thread = thd; #endif ap_process_connection(current_conn, csd); ap_lingering_close(current_conn); } /* Check the pod and the generation number after processing a * connection so that we'll go away if a graceful restart occurred * while we were processing the connection or we are the lucky * idle server process that gets to die. */ if (ap_mpm_pod_check(my_bucket->pod) == APR_SUCCESS) { /* selected as idle? */ die_now = 1; } else if (retained->mpm->my_generation != ap_scoreboard_image->global->running_generation) { /* restart? */ /* yeah, this could be non-graceful restart, in which case the * parent will kill us soon enough, but why bother checking? */ die_now = 1; } } apr_pool_clear(ptrans); /* kludge to avoid crash in APR reslist cleanup code */ clean_child_exit(0); } static int make_child(server_rec *s, int slot) { int bucket = slot % retained->mpm->num_buckets; int pid; if (slot + 1 > retained->max_daemons_limit) { retained->max_daemons_limit = slot + 1; } if (one_process) { my_bucket = &all_buckets[0]; prefork_note_child_started(slot, getpid()); child_main(slot, 0); /* NOTREACHED */ ap_assert(0); return -1; } (void) ap_update_child_status_from_indexes(slot, 0, SERVER_STARTING, (request_rec *) NULL); #ifdef _OSD_POSIX /* BS2000 requires a "special" version of fork() before a setuid() call */ if ((pid = os_fork(ap_unixd_config.user_name)) == -1) { #else if ((pid = fork()) == -1) { #endif ap_log_error(APLOG_MARK, APLOG_ERR, errno, s, APLOGNO(00159) "fork: Unable to fork new process"); /* fork didn't succeed. Fix the scoreboard or else * it will say SERVER_STARTING forever and ever */ (void) ap_update_child_status_from_indexes(slot, 0, SERVER_DEAD, (request_rec *) NULL); /* In case system resources are maxxed out, we don't want * Apache running away with the CPU trying to fork over and * over and over again. */ sleep(10); return -1; } if (!pid) { my_bucket = &all_buckets[bucket]; #ifdef HAVE_BINDPROCESSOR /* by default AIX binds to a single processor * this bit unbinds children which will then bind to another cpu */ int status = bindprocessor(BINDPROCESS, (int)getpid(), PROCESSOR_CLASS_ANY); if (status != OK) { ap_log_error(APLOG_MARK, APLOG_DEBUG, errno, ap_server_conf, APLOGNO(00160) "processor unbind failed"); } #endif RAISE_SIGSTOP(MAKE_CHILD); AP_MONCONTROL(1); /* Disable the parent's signal handlers and set up proper handling in * the child. */ apr_signal(SIGHUP, just_die); apr_signal(SIGTERM, just_die); /* Ignore SIGINT in child. This fixes race-condition in signals * handling when httpd is runnning on foreground and user hits ctrl+c. * In this case, SIGINT is sent to all children followed by SIGTERM * from the main process, which interrupts the SIGINT handler and * leads to inconsistency. */ apr_signal(SIGINT, SIG_IGN); /* The child process just closes listeners on AP_SIG_GRACEFUL. * The pod is used for signalling the graceful restart. */ apr_signal(AP_SIG_GRACEFUL, stop_listening); child_main(slot, bucket); } prefork_note_child_started(slot, pid); return 0; } /* start up a bunch of children */ static void startup_children(int number_to_start) { int i; for (i = 0; number_to_start && i < ap_daemons_limit; ++i) { if (ap_scoreboard_image->servers[i][0].status != SERVER_DEAD) { continue; } if (make_child(ap_server_conf, i) < 0) { break; } --number_to_start; } } static void perform_idle_server_maintenance(apr_pool_t *p) { int i; int idle_count; worker_score *ws; int free_length; int free_slots[MAX_SPAWN_RATE]; int last_non_dead; int total_non_dead; /* initialize the free_list */ free_length = 0; idle_count = 0; last_non_dead = -1; total_non_dead = 0; for (i = 0; i < ap_daemons_limit; ++i) { int status; if (i >= retained->max_daemons_limit && free_length == retained->idle_spawn_rate) break; ws = &ap_scoreboard_image->servers[i][0]; status = ws->status; if (status == SERVER_DEAD) { /* try to keep children numbers as low as possible */ if (free_length < retained->idle_spawn_rate) { free_slots[free_length] = i; ++free_length; } } else { /* We consider a starting server as idle because we started it * at least a cycle ago, and if it still hasn't finished starting * then we're just going to swamp things worse by forking more. * So we hopefully won't need to fork more if we count it. * This depends on the ordering of SERVER_READY and SERVER_STARTING. */ if (status <= SERVER_READY) { ++ idle_count; } ++total_non_dead; last_non_dead = i; } } retained->max_daemons_limit = last_non_dead + 1; if (idle_count > ap_daemons_max_free) { static int bucket_kill_child_record = -1; /* kill off one child... we use the pod because that'll cause it to * shut down gracefully, in case it happened to pick up a request * while we were counting */ bucket_kill_child_record = (bucket_kill_child_record + 1) % retained->mpm->num_buckets; ap_mpm_pod_signal(all_buckets[bucket_kill_child_record].pod); retained->idle_spawn_rate = 1; } else if (idle_count < ap_daemons_min_free) { /* terminate the free list */ if (free_length == 0) { /* only report this condition once */ if (!retained->maxclients_reported) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(00161) "server reached MaxRequestWorkers setting, consider" " raising the MaxRequestWorkers setting"); retained->maxclients_reported = 1; } retained->idle_spawn_rate = 1; } else { if (retained->idle_spawn_rate >= 8) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, ap_server_conf, APLOGNO(00162) "server seems busy, (you may need " "to increase StartServers, or Min/MaxSpareServers), " "spawning %d children, there are %d idle, and " "%d total children", retained->idle_spawn_rate, idle_count, total_non_dead); } for (i = 0; i < free_length; ++i) { make_child(ap_server_conf, free_slots[i]); } /* the next time around we want to spawn twice as many if this * wasn't good enough, but not if we've just done a graceful */ if (retained->hold_off_on_exponential_spawning) { --retained->hold_off_on_exponential_spawning; } else if (retained->idle_spawn_rate < MAX_SPAWN_RATE) { retained->idle_spawn_rate *= 2; } } } else { retained->idle_spawn_rate = 1; } } /***************************************************************** * Executive routines. */ static int prefork_run(apr_pool_t *_pconf, apr_pool_t *plog, server_rec *s) { int index; int remaining_children_to_start; int i; ap_log_pid(pconf, ap_pid_fname); if (!retained->mpm->was_graceful) { if (ap_run_pre_mpm(s->process->pool, SB_SHARED) != OK) { retained->mpm->mpm_state = AP_MPMQ_STOPPING; return !OK; } /* fix the generation number in the global score; we just got a new, * cleared scoreboard */ ap_scoreboard_image->global->running_generation = retained->mpm->my_generation; } ap_unixd_mpm_set_signals(pconf, one_process); if (one_process) { AP_MONCONTROL(1); make_child(ap_server_conf, 0); /* NOTREACHED */ ap_assert(0); return !OK; } /* Don't thrash since num_buckets depends on the * system and the number of online CPU cores... */ if (ap_daemons_limit < retained->mpm->num_buckets) ap_daemons_limit = retained->mpm->num_buckets; if (ap_daemons_to_start < retained->mpm->num_buckets) ap_daemons_to_start = retained->mpm->num_buckets; if (ap_daemons_min_free < retained->mpm->num_buckets) ap_daemons_min_free = retained->mpm->num_buckets; if (ap_daemons_max_free < ap_daemons_min_free + retained->mpm->num_buckets) ap_daemons_max_free = ap_daemons_min_free + retained->mpm->num_buckets; /* If we're doing a graceful_restart then we're going to see a lot * of children exiting immediately when we get into the main loop * below (because we just sent them AP_SIG_GRACEFUL). This happens pretty * rapidly... and for each one that exits we'll start a new one until * we reach at least daemons_min_free. But we may be permitted to * start more than that, so we'll just keep track of how many we're * supposed to start up without the 1 second penalty between each fork. */ remaining_children_to_start = ap_daemons_to_start; if (remaining_children_to_start > ap_daemons_limit) { remaining_children_to_start = ap_daemons_limit; } if (!retained->mpm->was_graceful) { startup_children(remaining_children_to_start); remaining_children_to_start = 0; } else { /* give the system some time to recover before kicking into * exponential mode */ retained->hold_off_on_exponential_spawning = 10; } ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00163) "%s configured -- resuming normal operations", ap_get_server_description()); ap_log_error(APLOG_MARK, APLOG_INFO, 0, ap_server_conf, APLOGNO(00164) "Server built: %s", ap_get_server_built()); ap_log_command_line(plog, s); ap_log_mpm_common(s); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(00165) "Accept mutex: %s (default: %s)", (all_buckets[0].mutex) ? apr_proc_mutex_name(all_buckets[0].mutex) : "none", apr_proc_mutex_defname()); retained->mpm->mpm_state = AP_MPMQ_RUNNING; while (!retained->mpm->restart_pending && !retained->mpm->shutdown_pending) { int child_slot; apr_exit_why_e exitwhy; int status, processed_status; /* this is a memory leak, but I'll fix it later. */ apr_proc_t pid; ap_wait_or_timeout(&exitwhy, &status, &pid, pconf, ap_server_conf); /* XXX: if it takes longer than 1 second for all our children * to start up and get into IDLE state then we may spawn an * extra child */ if (pid.pid != -1) { processed_status = ap_process_child_status(&pid, exitwhy, status); child_slot = ap_find_child_by_pid(&pid); if (processed_status == APEXIT_CHILDFATAL) { /* fix race condition found in PR 39311 * A child created at the same time as a graceful happens * can find the lock missing and create a fatal error. * It is not fatal for the last generation to be in this state. */ if (child_slot < 0 || ap_get_scoreboard_process(child_slot)->generation == retained->mpm->my_generation) { retained->mpm->mpm_state = AP_MPMQ_STOPPING; return !OK; } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ap_server_conf, APLOGNO(00166) "Ignoring fatal error in child of previous " "generation (pid %ld).", (long)pid.pid); } } /* non-fatal death... note that it's gone in the scoreboard. */ if (child_slot >= 0) { (void) ap_update_child_status_from_indexes(child_slot, 0, SERVER_DEAD, (request_rec *) NULL); prefork_note_child_killed(child_slot, 0, 0); if (processed_status == APEXIT_CHILDSICK) { /* child detected a resource shortage (E[NM]FILE, ENOBUFS, etc) * cut the fork rate to the minimum */ retained->idle_spawn_rate = 1; } else if (remaining_children_to_start && child_slot < ap_daemons_limit) { /* we're still doing a 1-for-1 replacement of dead * children with new children */ make_child(ap_server_conf, child_slot); --remaining_children_to_start; } #if APR_HAS_OTHER_CHILD } else if (apr_proc_other_child_alert(&pid, APR_OC_REASON_DEATH, status) == APR_SUCCESS) { /* handled */ #endif } else if (retained->mpm->was_graceful) { /* Great, we've probably just lost a slot in the * scoreboard. Somehow we don't know about this * child. */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ap_server_conf, APLOGNO(00167) "long lost child came home! (pid %ld)", (long)pid.pid); } /* Don't perform idle maintenance when a child dies, * only do it when there's a timeout. Remember only a * finite number of children can die, and it's pretty * pathological for a lot to die suddenly. */ continue; } else if (remaining_children_to_start) { /* we hit a 1 second timeout in which none of the previous * generation of children needed to be reaped... so assume * they're all done, and pick up the slack if any is left. */ startup_children(remaining_children_to_start); remaining_children_to_start = 0; /* In any event we really shouldn't do the code below because * few of the servers we just started are in the IDLE state * yet, so we'd mistakenly create an extra server. */ continue; } perform_idle_server_maintenance(pconf); } retained->mpm->mpm_state = AP_MPMQ_STOPPING; if (retained->mpm->shutdown_pending && retained->mpm->is_ungraceful) { /* Time to shut down: * Kill child processes, tell them to call child_exit, etc... */ if (ap_unixd_killpg(getpgrp(), SIGTERM) < 0) { ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00168) "killpg SIGTERM"); } ap_reclaim_child_processes(1, /* Start with SIGTERM */ prefork_note_child_killed); /* cleanup pid file on normal shutdown */ ap_remove_pid(pconf, ap_pid_fname); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00169) "caught SIGTERM, shutting down"); return DONE; } if (retained->mpm->shutdown_pending) { /* Time to perform a graceful shut down: * Reap the inactive children, and ask the active ones * to close their listeners, then wait until they are * all done to exit. */ int active_children; apr_time_t cutoff = 0; /* Stop listening */ ap_close_listeners(); /* kill off the idle ones */ for (i = 0; i < retained->mpm->num_buckets; i++) { ap_mpm_pod_killpg(all_buckets[i].pod, retained->max_daemons_limit); } /* Send SIGUSR1 to the active children */ active_children = 0; for (index = 0; index < ap_daemons_limit; ++index) { if (ap_scoreboard_image->servers[index][0].status != SERVER_DEAD) { /* Ask each child to close its listeners. */ ap_mpm_safe_kill(MPM_CHILD_PID(index), AP_SIG_GRACEFUL); active_children++; } } /* Allow each child which actually finished to exit */ ap_relieve_child_processes(prefork_note_child_killed); /* cleanup pid file */ ap_remove_pid(pconf, ap_pid_fname); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00170) "caught " AP_SIG_GRACEFUL_STOP_STRING ", shutting down gracefully"); if (ap_graceful_shutdown_timeout) { cutoff = apr_time_now() + apr_time_from_sec(ap_graceful_shutdown_timeout); } /* Don't really exit until each child has finished */ retained->mpm->shutdown_pending = 0; do { /* Pause for a second */ sleep(1); /* Relieve any children which have now exited */ ap_relieve_child_processes(prefork_note_child_killed); active_children = 0; for (index = 0; index < ap_daemons_limit; ++index) { if (ap_mpm_safe_kill(MPM_CHILD_PID(index), 0) == APR_SUCCESS) { active_children = 1; /* Having just one child is enough to stay around */ break; } } } while (!retained->mpm->shutdown_pending && active_children && (!ap_graceful_shutdown_timeout || apr_time_now() < cutoff)); /* We might be here because we received SIGTERM, either * way, try and make sure that all of our processes are * really dead. */ ap_unixd_killpg(getpgrp(), SIGTERM); return DONE; } /* we've been told to restart */ if (one_process) { /* not worth thinking about */ return DONE; } /* advance to the next generation */ /* XXX: we really need to make sure this new generation number isn't in * use by any of the children. */ ++retained->mpm->my_generation; ap_scoreboard_image->global->running_generation = retained->mpm->my_generation; if (!retained->mpm->is_ungraceful) { ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00171) "Graceful restart requested, doing restart"); /* kill off the idle ones */ for (i = 0; i < retained->mpm->num_buckets; i++) { ap_mpm_pod_killpg(all_buckets[i].pod, retained->max_daemons_limit); } /* This is mostly for debugging... so that we know what is still * gracefully dealing with existing request. This will break * in a very nasty way if we ever have the scoreboard totally * file-based (no shared memory) */ for (index = 0; index < ap_daemons_limit; ++index) { if (ap_scoreboard_image->servers[index][0].status != SERVER_DEAD) { ap_scoreboard_image->servers[index][0].status = SERVER_GRACEFUL; /* Ask each child to close its listeners. * * NOTE: we use the scoreboard, because if we send SIGUSR1 * to every process in the group, this may include CGI's, * piped loggers, etc. They almost certainly won't handle * it gracefully. */ ap_mpm_safe_kill(ap_scoreboard_image->parent[index].pid, AP_SIG_GRACEFUL); } } } else { /* Kill 'em off */ if (ap_unixd_killpg(getpgrp(), SIGHUP) < 0) { ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00172) "killpg SIGHUP"); } ap_reclaim_child_processes(0, /* Not when just starting up */ prefork_note_child_killed); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00173) "SIGHUP received. Attempting to restart"); } return OK; } /* This really should be a post_config hook, but the error log is already * redirected by that point, so we need to do this in the open_logs phase. */ static int prefork_open_logs(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { int startup = 0; int level_flags = 0; ap_listen_rec **listen_buckets; apr_status_t rv; char id[16]; int i; pconf = p; /* the reverse of pre_config, we want this only the first time around */ if (retained->mpm->module_loads == 1) { startup = 1; level_flags |= APLOG_STARTUP; } if ((num_listensocks = ap_setup_listeners(ap_server_conf)) < 1) { ap_log_error(APLOG_MARK, APLOG_ALERT | level_flags, 0, (startup ? NULL : s), "no listening sockets available, shutting down"); return !OK; } if (one_process) { retained->mpm->num_buckets = 1; } else if (!retained->mpm->was_graceful) { /* Preserve the number of buckets on graceful restarts. */ retained->mpm->num_buckets = 0; } if ((rv = ap_duplicate_listeners(pconf, ap_server_conf, &listen_buckets, &retained->mpm->num_buckets))) { ap_log_error(APLOG_MARK, APLOG_CRIT | level_flags, rv, (startup ? NULL : s), "could not duplicate listeners"); return !OK; } all_buckets = apr_pcalloc(pconf, retained->mpm->num_buckets * sizeof(prefork_child_bucket)); for (i = 0; i < retained->mpm->num_buckets; i++) { if ((rv = ap_mpm_pod_open(pconf, &all_buckets[i].pod))) { ap_log_error(APLOG_MARK, APLOG_CRIT | level_flags, rv, (startup ? NULL : s), "could not open pipe-of-death"); return !OK; } /* Initialize cross-process accept lock (safe accept needed only) */ if ((rv = SAFE_ACCEPT((apr_snprintf(id, sizeof id, "%i", i), ap_proc_mutex_create(&all_buckets[i].mutex, NULL, AP_ACCEPT_MUTEX_TYPE, id, s, pconf, 0))))) { ap_log_error(APLOG_MARK, APLOG_CRIT | level_flags, rv, (startup ? NULL : s), "could not create accept mutex"); return !OK; } all_buckets[i].listeners = listen_buckets[i]; } return OK; } static int prefork_pre_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp) { int no_detach, debug, foreground; apr_status_t rv; const char *userdata_key = "mpm_prefork_module"; debug = ap_exists_config_define("DEBUG"); if (debug) { foreground = one_process = 1; no_detach = 0; } else { no_detach = ap_exists_config_define("NO_DETACH"); one_process = ap_exists_config_define("ONE_PROCESS"); foreground = ap_exists_config_define("FOREGROUND"); } ap_mutex_register(p, AP_ACCEPT_MUTEX_TYPE, NULL, APR_LOCK_DEFAULT, 0); retained = ap_retained_data_get(userdata_key); if (!retained) { retained = ap_retained_data_create(userdata_key, sizeof(*retained)); retained->mpm = ap_unixd_mpm_get_retained_data(); retained->max_daemons_limit = -1; retained->idle_spawn_rate = 1; } retained->mpm->mpm_state = AP_MPMQ_STARTING; if (retained->mpm->baton != retained) { retained->mpm->was_graceful = 0; retained->mpm->baton = retained; } ++retained->mpm->module_loads; /* sigh, want this only the second time around */ if (retained->mpm->module_loads == 2) { if (!one_process && !foreground) { /* before we detach, setup crash handlers to log to errorlog */ ap_fatal_signal_setup(ap_server_conf, pconf); rv = apr_proc_detach(no_detach ? APR_PROC_DETACH_FOREGROUND : APR_PROC_DETACH_DAEMONIZE); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, NULL, APLOGNO(00174) "apr_proc_detach failed"); return HTTP_INTERNAL_SERVER_ERROR; } } } parent_pid = ap_my_pid = getpid(); ap_listen_pre_config(); ap_daemons_to_start = DEFAULT_START_DAEMON; ap_daemons_min_free = DEFAULT_MIN_FREE_DAEMON; ap_daemons_max_free = DEFAULT_MAX_FREE_DAEMON; server_limit = DEFAULT_SERVER_LIMIT; ap_daemons_limit = server_limit; ap_extended_status = 0; return OK; } static int prefork_check_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { int startup = 0; /* the reverse of pre_config, we want this only the first time around */ if (retained->mpm->module_loads == 1) { startup = 1; } if (server_limit > MAX_SERVER_LIMIT) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00175) "WARNING: ServerLimit of %d exceeds compile-time " "limit of %d servers, decreasing to %d.", server_limit, MAX_SERVER_LIMIT, MAX_SERVER_LIMIT); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00176) "ServerLimit of %d exceeds compile-time limit " "of %d, decreasing to match", server_limit, MAX_SERVER_LIMIT); } server_limit = MAX_SERVER_LIMIT; } else if (server_limit < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00177) "WARNING: ServerLimit of %d not allowed, " "increasing to 1.", server_limit); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00178) "ServerLimit of %d not allowed, increasing to 1", server_limit); } server_limit = 1; } /* you cannot change ServerLimit across a restart; ignore * any such attempts */ if (!retained->first_server_limit) { retained->first_server_limit = server_limit; } else if (server_limit != retained->first_server_limit) { /* don't need a startup console version here */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00179) "changing ServerLimit to %d from original value of %d " "not allowed during restart", server_limit, retained->first_server_limit); server_limit = retained->first_server_limit; } if (ap_daemons_limit > server_limit) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00180) "WARNING: MaxRequestWorkers of %d exceeds ServerLimit " "value of %d servers, decreasing MaxRequestWorkers to %d. " "To increase, please see the ServerLimit directive.", ap_daemons_limit, server_limit, server_limit); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00181) "MaxRequestWorkers of %d exceeds ServerLimit value " "of %d, decreasing to match", ap_daemons_limit, server_limit); } ap_daemons_limit = server_limit; } else if (ap_daemons_limit < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00182) "WARNING: MaxRequestWorkers of %d not allowed, " "increasing to 1.", ap_daemons_limit); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00183) "MaxRequestWorkers of %d not allowed, increasing to 1", ap_daemons_limit); } ap_daemons_limit = 1; } /* ap_daemons_to_start > ap_daemons_limit checked in prefork_run() */ if (ap_daemons_to_start < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00184) "WARNING: StartServers of %d not allowed, " "increasing to 1.", ap_daemons_to_start); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00185) "StartServers of %d not allowed, increasing to 1", ap_daemons_to_start); } ap_daemons_to_start = 1; } if (ap_daemons_min_free < 1) { if (startup) { ap_log_error(APLOG_MARK, APLOG_WARNING | APLOG_STARTUP, 0, NULL, APLOGNO(00186) "WARNING: MinSpareServers of %d not allowed, " "increasing to 1 to avoid almost certain server failure. " "Please read the documentation.", ap_daemons_min_free); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(00187) "MinSpareServers of %d not allowed, increasing to 1", ap_daemons_min_free); } ap_daemons_min_free = 1; } /* ap_daemons_max_free < ap_daemons_min_free + 1 checked in prefork_run() */ return OK; } static void prefork_hooks(apr_pool_t *p) { /* Our open_logs hook function must run before the core's, or stderr * will be redirected to a file, and the messages won't print to the * console. */ static const char *const aszSucc[] = {"core.c", NULL}; ap_hook_open_logs(prefork_open_logs, NULL, aszSucc, APR_HOOK_REALLY_FIRST); /* we need to set the MPM state before other pre-config hooks use MPM query * to retrieve it, so register as REALLY_FIRST */ ap_hook_pre_config(prefork_pre_config, NULL, NULL, APR_HOOK_REALLY_FIRST); ap_hook_check_config(prefork_check_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm(prefork_run, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm_query(prefork_query, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_mpm_get_name(prefork_get_name, NULL, NULL, APR_HOOK_MIDDLE); } static const char *set_daemons_to_start(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_daemons_to_start = atoi(arg); return NULL; } static const char *set_min_free_servers(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_daemons_min_free = atoi(arg); return NULL; } static const char *set_max_free_servers(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_daemons_max_free = atoi(arg); return NULL; } static const char *set_max_clients (cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (!strcasecmp(cmd->cmd->name, "MaxClients")) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, NULL, APLOGNO(00188) "MaxClients is deprecated, use MaxRequestWorkers " "instead."); } ap_daemons_limit = atoi(arg); return NULL; } static const char *set_server_limit (cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } server_limit = atoi(arg); return NULL; } static const command_rec prefork_cmds[] = { LISTEN_COMMANDS, AP_INIT_TAKE1("StartServers", set_daemons_to_start, NULL, RSRC_CONF, "Number of child processes launched at server startup"), AP_INIT_TAKE1("MinSpareServers", set_min_free_servers, NULL, RSRC_CONF, "Minimum number of idle children, to handle request spikes"), AP_INIT_TAKE1("MaxSpareServers", set_max_free_servers, NULL, RSRC_CONF, "Maximum number of idle children"), AP_INIT_TAKE1("MaxClients", set_max_clients, NULL, RSRC_CONF, "Deprecated name of MaxRequestWorkers"), AP_INIT_TAKE1("MaxRequestWorkers", set_max_clients, NULL, RSRC_CONF, "Maximum number of children alive at the same time"), AP_INIT_TAKE1("ServerLimit", set_server_limit, NULL, RSRC_CONF, "Maximum value of MaxRequestWorkers for this run of Apache"), AP_GRACEFUL_SHUTDOWN_TIMEOUT_COMMAND, { NULL } }; AP_DECLARE_MODULE(mpm_prefork) = { MPM20_MODULE_STUFF, NULL, /* hook to run before apache parses args */ NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ prefork_cmds, /* command apr_table_t */ prefork_hooks, /* register hooks */ }; httpd-2.4.41/server/mpm/prefork/Makefile.in0000644000000000000500000000004711274040000017035 0ustar rootsrcinclude $(top_srcdir)/build/special.mk httpd-2.4.41/server/mpm/config.m40000644000000000000500000000607312604740165015055 0ustar rootsrcdnl common platform checks needed by MPMs, methods for MPMs to state dnl their support for the platform, functions to query MPM properties APR_CHECK_APR_DEFINE(APR_HAS_THREADS) have_threaded_sig_graceful=yes case $host in *-linux-*) case `uname -r` in 2.0* ) dnl Threaded MPM's are not supported on Linux 2.0 dnl as on 2.0 the linuxthreads library uses SIGUSR1 dnl and SIGUSR2 internally have_threaded_sig_graceful=no ;; esac ;; esac dnl See if APR supports APR_POLLSET_THREADSAFE. dnl XXX This hack tests for the underlying functions used by APR when it supports dnl XXX APR_POLLSET_THREADSAFE, and duplicates APR's Darwin version check. dnl A run-time check for dnl apr_pollset_create(,,APR_POLLSET_THREADSAFE) == APR_SUCCESS dnl would be great but an in-tree apr (srclib/apr) hasn't been built yet. AC_CACHE_CHECK([whether APR supports thread-safe pollsets], [ac_cv_have_threadsafe_pollset], [ case $host in *-apple-darwin[[1-9]].*) APR_SETIFNULL(ac_cv_func_kqueue, [no]) ;; esac AC_CHECK_FUNCS(kqueue port_create epoll_create) if test "$ac_cv_func_kqueue$ac_cv_func_port_create$ac_cv_func_epoll_create" != "nonono"; then ac_cv_have_threadsafe_pollset=yes else ac_cv_have_threadsafe_pollset=no fi ]) dnl See if APR has skiplist dnl The base httpd prereq is APR 1.4.x, so we don't have to consider dnl earlier versions. case $APR_VERSION in 1.4*) apr_has_skiplist=no ;; *) apr_has_skiplist=yes esac dnl See if this is a forking platform w.r.t. MPMs case $host in *mingw32* | *os2-emx*) forking_mpms_supported=no ;; *) forking_mpms_supported=yes ;; esac dnl APACHE_MPM_SUPPORTED(name, supports-shared, is_threaded) AC_DEFUN([APACHE_MPM_SUPPORTED],[ if test "$2" = "yes"; then eval "ap_supported_mpm_$1=shared" ap_supported_shared_mpms="$ap_supported_shared_mpms $1 " else eval "ap_supported_mpm_$1=static" fi if test "$3" = "yes"; then eval "ap_threaded_mpm_$1=yes" fi ])dnl dnl APACHE_MPM_ENABLED(name) AC_DEFUN([APACHE_MPM_ENABLED],[ if ap_mpm_is_enabled $1; then : else eval "ap_enabled_mpm_$1=yes" ap_enabled_mpms="$ap_enabled_mpms $1 " fi ])dnl ap_mpm_is_supported () { eval "tmp=\$ap_supported_mpm_$1" if test -z "$tmp"; then return 1 else return 0 fi } ap_mpm_supports_shared () { eval "tmp=\$ap_supported_mpm_$1" if test "$tmp" = "shared"; then return 0 else return 1 fi } ap_mpm_is_threaded () { if test "$mpm_build" = "shared" -a ac_cv_define_APR_HAS_THREADS = "yes"; then return 0 fi for mpm in $ap_enabled_mpms; do eval "tmp=\$ap_threaded_mpm_$mpm" if test "$tmp" = "yes"; then return 0 fi done return 1 } ap_mpm_is_enabled () { eval "tmp=\$ap_enabled_mpm_$1" if test "$tmp" = "yes"; then return 0 else return 1 fi } httpd-2.4.41/server/mpm/config2.m40000644000000000000500000000555011657416441015142 0ustar rootsrcAC_MSG_CHECKING(which MPM to use by default) AC_ARG_WITH(mpm, APACHE_HELP_STRING(--with-mpm=MPM,Choose the process model for Apache to use by default. MPM={event|worker|prefork|winnt} This will be statically linked as the only available MPM unless --enable-mpms-shared is also specified. ),[ default_mpm=$withval AC_MSG_RESULT($withval); ],[ dnl Order of preference for default MPM: dnl The Windows and OS/2 MPMs are used on those platforms. dnl Everywhere else: event, worker, prefork if ap_mpm_is_supported "winnt"; then default_mpm=winnt AC_MSG_RESULT(winnt) elif ap_mpm_is_supported "mpmt_os2"; then default_mpm=mpmt_os2 AC_MSG_RESULT(mpmt_os2) elif ap_mpm_is_supported "event"; then default_mpm=event AC_MSG_RESULT(event) elif ap_mpm_is_supported "worker"; then default_mpm=worker AC_MSG_RESULT(worker - event is not supported) else default_mpm=prefork AC_MSG_RESULT(prefork - event and worker are not supported) fi ]) APACHE_MPM_ENABLED($default_mpm) AC_ARG_ENABLE(mpms-shared, APACHE_HELP_STRING(--enable-mpms-shared=MPM-LIST,Space-separated list of MPM modules to enable for dynamic loading. MPM-LIST=list | "all"),[ if test "$enableval" = "no"; then mpm_build=static else mpm_build=shared dnl Build just the default MPM if --enable-mpms-shared has no argument. if test "$enableval" = "yes"; then enableval=$default_mpm fi for i in $enableval; do if test "$i" = "all"; then for j in $ap_supported_shared_mpms; do eval "enable_mpm_$j=shared" APACHE_MPM_ENABLED($j) done else i=`echo $i | sed 's/-/_/g'` if ap_mpm_supports_shared $i; then eval "enable_mpm_$i=shared" APACHE_MPM_ENABLED($i) else AC_MSG_ERROR([MPM $i does not support dynamic loading.]) fi fi done fi ], [mpm_build=static]) for i in $ap_enabled_mpms; do if ap_mpm_is_supported $i; then : else AC_MSG_ERROR([MPM $i is not supported on this platform.]) fi done if test $mpm_build = "shared"; then eval "tmp=\$enable_mpm_$default_mpm" if test "$tmp" != "shared"; then AC_MSG_ERROR([The default MPM ($default_mpm) must be included in --enable-mpms-shared. Use --with-mpm to change the default MPM.]) fi fi APACHE_FAST_OUTPUT(server/mpm/Makefile) if test $mpm_build = "shared"; then MPM_LIB="" else MPM_LIB=server/mpm/$default_mpm/lib${default_mpm}.la MODLIST="$MODLIST mpm_${default_mpm}" fi MPM_SUBDIRS=$ap_enabled_mpms APACHE_SUBST(MPM_SUBDIRS) APACHE_SUBST(MPM_LIB) httpd-2.4.41/server/mpm/MPM.NAMING0000644000000000000500000000140111657416441014664 0ustar rootsrc The following MPMs currently exist: prefork ....... Multi Process Model with Preforking (Apache 1.3) mpmt_os2 ...... Multi Process Model with Threading on OS/2 Constant number of processes, variable number of threads. One acceptor thread per process, multiple workers threads. winnt ......... Single Process Model with Threading on Windows NT event ......... Multi Process model with threads. One acceptor thread, multiple worker threads, separate poller threads for idle connections and asynchoneous write completion. worker ........ Multi Process model with threads. One acceptor thread, multiple worker threads. netware ....... Multi-threaded MPM for Netware httpd-2.4.41/server/mpm/Makefile.in0000644000000000000500000000010211273675556015412 0ustar rootsrc SUBDIRS = $(MPM_SUBDIRS) include $(top_builddir)/build/rules.mk httpd-2.4.41/server/mpm_unix.c0000644000000000000500000010026113225505024014540 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* The purpose of this file is to store the code that MOST mpm's will need * this does not mean a function only goes into this file if every MPM needs * it. It means that if a function is needed by more than one MPM, and * future maintenance would be served by making the code common, then the * function belongs here. * * This is going in src/main because it is not platform specific, it is * specific to multi-process servers, but NOT to Unix. Which is why it * does not belong in src/os/unix */ #ifndef WIN32 #include "apr.h" #include "apr_thread_proc.h" #include "apr_signal.h" #include "apr_strings.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "apr_getopt.h" #include "apr_optional.h" #include "apr_allocator.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_main.h" #include "mpm_common.h" #include "ap_mpm.h" #include "ap_listen.h" #include "scoreboard.h" #include "util_mutex.h" #ifdef HAVE_PWD_H #include #endif #ifdef HAVE_GRP_H #include #endif #if APR_HAVE_UNISTD_H #include #endif /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX typedef enum { DO_NOTHING, SEND_SIGTERM, SEND_SIGTERM_NOLOG, SEND_SIGKILL, GIVEUP } action_t; typedef struct extra_process_t { struct extra_process_t *next; pid_t pid; ap_generation_t gen; } extra_process_t; static extra_process_t *extras; AP_DECLARE(void) ap_register_extra_mpm_process(pid_t pid, ap_generation_t gen) { extra_process_t *p = (extra_process_t *)ap_malloc(sizeof(extra_process_t)); p->next = extras; p->pid = pid; p->gen = gen; extras = p; } AP_DECLARE(int) ap_unregister_extra_mpm_process(pid_t pid, ap_generation_t *old_gen) { extra_process_t *cur = extras; extra_process_t *prev = NULL; while (cur && cur->pid != pid) { prev = cur; cur = cur->next; } if (cur) { if (prev) { prev->next = cur->next; } else { extras = cur->next; } *old_gen = cur->gen; free(cur); return 1; /* found */ } else { /* we don't know about any such process */ return 0; } } static int reclaim_one_pid(pid_t pid, action_t action) { apr_proc_t proc; apr_status_t waitret; apr_exit_why_e why; int status; /* Ensure pid sanity. */ if (pid < 1) { return 1; } proc.pid = pid; waitret = apr_proc_wait(&proc, &status, &why, APR_NOWAIT); if (waitret != APR_CHILD_NOTDONE) { if (waitret == APR_CHILD_DONE) ap_process_child_status(&proc, why, status); return 1; } switch(action) { case DO_NOTHING: break; case SEND_SIGTERM: /* ok, now it's being annoying */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ap_server_conf, APLOGNO(00045) "child process %" APR_PID_T_FMT " still did not exit, " "sending a SIGTERM", pid); /* FALLTHROUGH */ case SEND_SIGTERM_NOLOG: kill(pid, SIGTERM); break; case SEND_SIGKILL: ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(00046) "child process %" APR_PID_T_FMT " still did not exit, " "sending a SIGKILL", pid); kill(pid, SIGKILL); break; case GIVEUP: /* gave it our best shot, but alas... If this really * is a child we are trying to kill and it really hasn't * exited, we will likely fail to bind to the port * after the restart. */ ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(00047) "could not make child process %" APR_PID_T_FMT " exit, " "attempting to continue anyway", pid); break; } return 0; } AP_DECLARE(void) ap_reclaim_child_processes(int terminate, ap_reclaim_callback_fn_t *mpm_callback) { apr_time_t waittime = 1024 * 16; int i; extra_process_t *cur_extra; int not_dead_yet; int max_daemons; apr_time_t starttime = apr_time_now(); /* this table of actions and elapsed times tells what action is taken * at which elapsed time from starting the reclaim */ struct { action_t action; apr_time_t action_time; } action_table[] = { {DO_NOTHING, 0}, /* dummy entry for iterations where we reap * children but take no action against * stragglers */ {SEND_SIGTERM_NOLOG, 0}, /* skipped if terminate == 0 */ {SEND_SIGTERM, apr_time_from_sec(3)}, {SEND_SIGTERM, apr_time_from_sec(5)}, {SEND_SIGTERM, apr_time_from_sec(7)}, {SEND_SIGKILL, apr_time_from_sec(9)}, {GIVEUP, apr_time_from_sec(10)} }; int cur_action; /* index of action we decided to take this * iteration */ int next_action = terminate ? 1 : 2; /* index of first real action */ ap_mpm_query(AP_MPMQ_MAX_DAEMON_USED, &max_daemons); do { if (action_table[next_action].action_time > 0) { apr_sleep(waittime); /* don't let waittime get longer than 1 second; otherwise, we don't * react quickly to the last child exiting, and taking action can * be delayed */ waittime = waittime * 4; if (waittime > apr_time_from_sec(1)) { waittime = apr_time_from_sec(1); } } /* see what action to take, if any */ if (action_table[next_action].action_time <= apr_time_now() - starttime) { cur_action = next_action; ++next_action; } else { cur_action = 0; /* nothing to do */ } /* now see who is done */ not_dead_yet = 0; for (i = 0; i < max_daemons; ++i) { process_score *ps = ap_get_scoreboard_process(i); pid_t pid = ps->pid; if (pid == 0) { continue; /* not every scoreboard entry is in use */ } if (reclaim_one_pid(pid, action_table[cur_action].action)) { mpm_callback(i, 0, 0); } else { ++not_dead_yet; } } cur_extra = extras; while (cur_extra) { ap_generation_t old_gen; extra_process_t *next = cur_extra->next; if (reclaim_one_pid(cur_extra->pid, action_table[cur_action].action)) { if (ap_unregister_extra_mpm_process(cur_extra->pid, &old_gen) == 1) { mpm_callback(-1, cur_extra->pid, old_gen); } else { AP_DEBUG_ASSERT(1 == 0); } } else { ++not_dead_yet; } cur_extra = next; } #if APR_HAS_OTHER_CHILD apr_proc_other_child_refresh_all(APR_OC_REASON_RESTART); #endif } while (not_dead_yet > 0 && action_table[cur_action].action != GIVEUP); } AP_DECLARE(void) ap_relieve_child_processes(ap_reclaim_callback_fn_t *mpm_callback) { int i; extra_process_t *cur_extra; int max_daemons; ap_mpm_query(AP_MPMQ_MAX_DAEMON_USED, &max_daemons); /* now see who is done */ for (i = 0; i < max_daemons; ++i) { process_score *ps = ap_get_scoreboard_process(i); pid_t pid = ps->pid; if (pid == 0) { continue; /* not every scoreboard entry is in use */ } if (reclaim_one_pid(pid, DO_NOTHING)) { mpm_callback(i, 0, 0); } } cur_extra = extras; while (cur_extra) { ap_generation_t old_gen; extra_process_t *next = cur_extra->next; if (reclaim_one_pid(cur_extra->pid, DO_NOTHING)) { if (ap_unregister_extra_mpm_process(cur_extra->pid, &old_gen) == 1) { mpm_callback(-1, cur_extra->pid, old_gen); } else { AP_DEBUG_ASSERT(1 == 0); } } cur_extra = next; } } /* Before sending the signal to the pid this function verifies that * the pid is a member of the current process group; either using * apr_proc_wait(), where waitpid() guarantees to fail for non-child * processes; or by using getpgid() directly, if available. */ AP_DECLARE(apr_status_t) ap_mpm_safe_kill(pid_t pid, int sig) { #ifndef HAVE_GETPGID apr_proc_t proc; apr_status_t rv; apr_exit_why_e why; int status; /* Ensure pid sanity */ if (pid < 1) { return APR_EINVAL; } proc.pid = pid; rv = apr_proc_wait(&proc, &status, &why, APR_NOWAIT); if (rv == APR_CHILD_DONE) { /* The child already died - log the termination status if * necessary: */ ap_process_child_status(&proc, why, status); return APR_EINVAL; } else if (rv != APR_CHILD_NOTDONE) { /* The child is already dead and reaped, or was a bogus pid - * log this either way. */ ap_log_error(APLOG_MARK, APLOG_NOTICE, rv, ap_server_conf, APLOGNO(00048) "cannot send signal %d to pid %ld (non-child or " "already dead)", sig, (long)pid); return APR_EINVAL; } #else pid_t pg; /* Ensure pid sanity. */ if (pid < 1) { return APR_EINVAL; } pg = getpgid(pid); if (pg == -1) { /* Process already dead... */ return errno; } if (pg != getpgrp()) { ap_log_error(APLOG_MARK, APLOG_ALERT, 0, ap_server_conf, APLOGNO(00049) "refusing to send signal %d to pid %ld outside " "process group", sig, (long)pid); return APR_EINVAL; } #endif return kill(pid, sig) ? errno : APR_SUCCESS; } AP_DECLARE(int) ap_process_child_status(apr_proc_t *pid, apr_exit_why_e why, int status) { int signum = status; const char *sigdesc; /* Child died... if it died due to a fatal error, * we should simply bail out. The caller needs to * check for bad rc from us and exit, running any * appropriate cleanups. * * If the child died due to a resource shortage, * the parent should limit the rate of forking */ if (APR_PROC_CHECK_EXIT(why)) { if (status == APEXIT_CHILDSICK) { return status; } if (status == APEXIT_CHILDFATAL) { ap_log_error(APLOG_MARK, APLOG_ALERT, 0, ap_server_conf, APLOGNO(00050) "Child %" APR_PID_T_FMT " returned a Fatal error... Apache is exiting!", pid->pid); return APEXIT_CHILDFATAL; } return 0; } if (APR_PROC_CHECK_SIGNALED(why)) { sigdesc = apr_signal_description_get(signum); switch (signum) { case SIGTERM: case SIGHUP: case AP_SIG_GRACEFUL: case SIGKILL: break; default: if (APR_PROC_CHECK_CORE_DUMP(why)) { ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00051) "child pid %ld exit signal %s (%d), " "possible coredump in %s", (long)pid->pid, sigdesc, signum, ap_coredump_dir); } else { ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00052) "child pid %ld exit signal %s (%d)", (long)pid->pid, sigdesc, signum); } } } return 0; } AP_DECLARE(apr_status_t) ap_mpm_pod_open(apr_pool_t *p, ap_pod_t **pod) { apr_status_t rv; *pod = apr_palloc(p, sizeof(**pod)); rv = apr_file_pipe_create_ex(&((*pod)->pod_in), &((*pod)->pod_out), APR_WRITE_BLOCK, p); if (rv != APR_SUCCESS) { return rv; } apr_file_pipe_timeout_set((*pod)->pod_in, 0); (*pod)->p = p; /* close these before exec. */ apr_file_inherit_unset((*pod)->pod_in); apr_file_inherit_unset((*pod)->pod_out); return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_mpm_pod_check(ap_pod_t *pod) { char c; apr_size_t len = 1; apr_status_t rv; rv = apr_file_read(pod->pod_in, &c, &len); if ((rv == APR_SUCCESS) && (len == 1)) { return APR_SUCCESS; } if (rv != APR_SUCCESS) { return rv; } return AP_NORESTART; } AP_DECLARE(apr_status_t) ap_mpm_pod_close(ap_pod_t *pod) { apr_status_t rv; rv = apr_file_close(pod->pod_out); if (rv != APR_SUCCESS) { return rv; } rv = apr_file_close(pod->pod_in); if (rv != APR_SUCCESS) { return rv; } return APR_SUCCESS; } static apr_status_t pod_signal_internal(ap_pod_t *pod) { apr_status_t rv; char char_of_death = '!'; apr_size_t one = 1; rv = apr_file_write(pod->pod_out, &char_of_death, &one); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, ap_server_conf, APLOGNO(00053) "write pipe_of_death"); } return rv; } AP_DECLARE(apr_status_t) ap_mpm_podx_open(apr_pool_t *p, ap_pod_t **pod) { apr_status_t rv; *pod = apr_palloc(p, sizeof(**pod)); rv = apr_file_pipe_create(&((*pod)->pod_in), &((*pod)->pod_out), p); if (rv != APR_SUCCESS) { return rv; } /* apr_file_pipe_timeout_set((*pod)->pod_in, 0); */ (*pod)->p = p; /* close these before exec. */ apr_file_inherit_unset((*pod)->pod_in); apr_file_inherit_unset((*pod)->pod_out); return APR_SUCCESS; } AP_DECLARE(int) ap_mpm_podx_check(ap_pod_t *pod) { char c; apr_os_file_t fd; int rc; /* we need to surface EINTR so we'll have to grab the * native file descriptor and do the OS read() ourselves */ apr_os_file_get(&fd, pod->pod_in); rc = read(fd, &c, 1); if (rc == 1) { switch (c) { case AP_MPM_PODX_RESTART_CHAR: return AP_MPM_PODX_RESTART; case AP_MPM_PODX_GRACEFUL_CHAR: return AP_MPM_PODX_GRACEFUL; } } return AP_MPM_PODX_NORESTART; } AP_DECLARE(apr_status_t) ap_mpm_podx_close(ap_pod_t *pod) { apr_status_t rv; rv = apr_file_close(pod->pod_out); if (rv != APR_SUCCESS) { return rv; } rv = apr_file_close(pod->pod_in); if (rv != APR_SUCCESS) { return rv; } return rv; } static apr_status_t podx_signal_internal(ap_pod_t *pod, ap_podx_restart_t graceful) { apr_status_t rv; apr_size_t one = 1; char char_of_death = ' '; switch (graceful) { case AP_MPM_PODX_RESTART: char_of_death = AP_MPM_PODX_RESTART_CHAR; break; case AP_MPM_PODX_GRACEFUL: char_of_death = AP_MPM_PODX_GRACEFUL_CHAR; break; case AP_MPM_PODX_NORESTART: break; } rv = apr_file_write(pod->pod_out, &char_of_death, &one); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, ap_server_conf, APLOGNO(02404) "write pipe_of_death"); } return rv; } AP_DECLARE(apr_status_t) ap_mpm_podx_signal(ap_pod_t * pod, ap_podx_restart_t graceful) { return podx_signal_internal(pod, graceful); } AP_DECLARE(void) ap_mpm_podx_killpg(ap_pod_t * pod, int num, ap_podx_restart_t graceful) { int i; apr_status_t rv = APR_SUCCESS; for (i = 0; i < num && rv == APR_SUCCESS; i++) { rv = podx_signal_internal(pod, graceful); } } /* This function connects to the server and sends enough data to * ensure the child wakes up and processes a new connection. This * permits the MPM to skip the poll when there is only one listening * socket, because it provides a alternate way to unblock an accept() * when the pod is used. */ static apr_status_t dummy_connection(ap_pod_t *pod) { const char *data; apr_status_t rv; apr_socket_t *sock; apr_pool_t *p; apr_size_t len; ap_listen_rec *lp; /* create a temporary pool for the socket. pconf stays around too long */ rv = apr_pool_create(&p, pod->p); if (rv != APR_SUCCESS) { return rv; } /* If possible, find a listener which is configured for * plain-HTTP, not SSL; using an SSL port would either be * expensive to do correctly (performing a complete SSL handshake) * or cause log spam by doing incorrectly (simply sending EOF). */ lp = ap_listeners; while (lp && lp->protocol && strcasecmp(lp->protocol, "http") != 0) { lp = lp->next; } if (!lp) { lp = ap_listeners; } rv = apr_socket_create(&sock, lp->bind_addr->family, SOCK_STREAM, 0, p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, ap_server_conf, APLOGNO(00054) "get socket to connect to listener"); apr_pool_destroy(p); return rv; } /* on some platforms (e.g., FreeBSD), the kernel won't accept many * queued connections before it starts blocking local connects... * we need to keep from blocking too long and instead return an error, * because the MPM won't want to hold up a graceful restart for a * long time */ rv = apr_socket_timeout_set(sock, apr_time_from_sec(3)); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, ap_server_conf, APLOGNO(00055) "set timeout on socket to connect to listener"); apr_socket_close(sock); apr_pool_destroy(p); return rv; } rv = apr_socket_connect(sock, lp->bind_addr); if (rv != APR_SUCCESS) { int log_level = APLOG_WARNING; if (APR_STATUS_IS_TIMEUP(rv)) { /* probably some server processes bailed out already and there * is nobody around to call accept and clear out the kernel * connection queue; usually this is not worth logging */ log_level = APLOG_DEBUG; } ap_log_error(APLOG_MARK, log_level, rv, ap_server_conf, APLOGNO(00056) "connect to listener on %pI", lp->bind_addr); apr_pool_destroy(p); return rv; } if (lp->protocol && strcasecmp(lp->protocol, "https") == 0) { /* Send a TLS 1.0 close_notify alert. This is perhaps the * "least wrong" way to open and cleanly terminate an SSL * connection. It should "work" without noisy error logs if * the server actually expects SSLv3/TLSv1. With * SSLv23_server_method() OpenSSL's SSL_accept() fails * ungracefully on receipt of this message, since it requires * an 11-byte ClientHello message and this is too short. */ static const unsigned char tls10_close_notify[7] = { '\x15', /* TLSPlainText.type = Alert (21) */ '\x03', '\x01', /* TLSPlainText.version = {3, 1} */ '\x00', '\x02', /* TLSPlainText.length = 2 */ '\x01', /* Alert.level = warning (1) */ '\x00' /* Alert.description = close_notify (0) */ }; data = (const char *)tls10_close_notify; len = sizeof(tls10_close_notify); } else /* ... XXX other request types here? */ { /* Create an HTTP request string. We include a User-Agent so * that adminstrators can track down the cause of the * odd-looking requests in their logs. A complete request is * used since kernel-level filtering may require that much * data before returning from accept(). */ data = apr_pstrcat(p, "OPTIONS * HTTP/1.0\r\nUser-Agent: ", ap_get_server_description(), " (internal dummy connection)\r\n\r\n", NULL); len = strlen(data); } apr_socket_send(sock, data, &len); apr_socket_close(sock); apr_pool_destroy(p); return rv; } AP_DECLARE(apr_status_t) ap_mpm_pod_signal(ap_pod_t *pod) { apr_status_t rv; rv = pod_signal_internal(pod); if (rv != APR_SUCCESS) { return rv; } return dummy_connection(pod); } void ap_mpm_pod_killpg(ap_pod_t *pod, int num) { int i; apr_status_t rv = APR_SUCCESS; /* we don't write anything to the pod here... we assume * that the would-be reader of the pod has another way to * see that it is time to die once we wake it up * * writing lots of things to the pod at once is very * problematic... we can fill the kernel pipe buffer and * be blocked until somebody consumes some bytes or * we hit a timeout... if we hit a timeout we can't just * keep trying because maybe we'll never successfully * write again... but then maybe we'll leave would-be * readers stranded (a number of them could be tied up for * a while serving time-consuming requests) */ /* Recall: we only worry about IDLE child processes here */ for (i = 0; i < num && rv == APR_SUCCESS; i++) { if (ap_scoreboard_image->servers[i][0].status != SERVER_READY || ap_scoreboard_image->servers[i][0].pid == 0) { continue; } rv = dummy_connection(pod); } } static const char *dash_k_arg = NULL; static const char *dash_k_arg_noarg = "noarg"; static int send_signal(pid_t pid, int sig) { if (kill(pid, sig) < 0) { ap_log_error(APLOG_MARK, APLOG_STARTUP, errno, NULL, APLOGNO(00057) "sending signal to server"); return 1; } return 0; } int ap_signal_server(int *exit_status, apr_pool_t *pconf) { apr_status_t rv; pid_t otherpid; int running = 0; const char *status; *exit_status = 0; rv = ap_read_pid(pconf, ap_pid_fname, &otherpid); if (rv != APR_SUCCESS) { if (!APR_STATUS_IS_ENOENT(rv)) { ap_log_error(APLOG_MARK, APLOG_STARTUP, rv, NULL, APLOGNO(00058) "Error retrieving pid file %s", ap_pid_fname); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00059) "Remove it before continuing if it is corrupted."); *exit_status = 1; return 1; } status = "httpd (no pid file) not running"; } else { /* With containerization, httpd may get the same PID at each startup, * handle it as if it were not running (it obviously can't). */ if (otherpid != getpid() && kill(otherpid, 0) == 0) { running = 1; status = apr_psprintf(pconf, "httpd (pid %" APR_PID_T_FMT ") already " "running", otherpid); } else { status = apr_psprintf(pconf, "httpd (pid %" APR_PID_T_FMT "?) not running", otherpid); } } if (!strcmp(dash_k_arg, "start") || dash_k_arg == dash_k_arg_noarg) { if (running) { printf("%s\n", status); return 1; } } if (!strcmp(dash_k_arg, "stop")) { if (!running) { printf("%s\n", status); } else { send_signal(otherpid, SIGTERM); } return 1; } if (!strcmp(dash_k_arg, "restart")) { if (!running) { printf("httpd not running, trying to start\n"); } else { *exit_status = send_signal(otherpid, SIGHUP); return 1; } } if (!strcmp(dash_k_arg, "graceful")) { if (!running) { printf("httpd not running, trying to start\n"); } else { *exit_status = send_signal(otherpid, AP_SIG_GRACEFUL); return 1; } } if (!strcmp(dash_k_arg, "graceful-stop")) { if (!running) { printf("%s\n", status); } else { *exit_status = send_signal(otherpid, AP_SIG_GRACEFUL_STOP); } return 1; } return 0; } void ap_mpm_rewrite_args(process_rec *process) { apr_array_header_t *mpm_new_argv; apr_status_t rv; apr_getopt_t *opt; char optbuf[3]; const char *optarg; mpm_new_argv = apr_array_make(process->pool, process->argc, sizeof(const char **)); *(const char **)apr_array_push(mpm_new_argv) = process->argv[0]; apr_getopt_init(&opt, process->pool, process->argc, process->argv); opt->errfn = NULL; optbuf[0] = '-'; /* option char returned by apr_getopt() will be stored in optbuf[1] */ optbuf[2] = '\0'; while ((rv = apr_getopt(opt, "k:" AP_SERVER_BASEARGS, optbuf + 1, &optarg)) == APR_SUCCESS) { switch(optbuf[1]) { case 'k': if (!dash_k_arg) { if (!strcmp(optarg, "start") || !strcmp(optarg, "stop") || !strcmp(optarg, "restart") || !strcmp(optarg, "graceful") || !strcmp(optarg, "graceful-stop")) { dash_k_arg = optarg; break; } } default: *(const char **)apr_array_push(mpm_new_argv) = apr_pstrdup(process->pool, optbuf); if (optarg) { *(const char **)apr_array_push(mpm_new_argv) = optarg; } } } /* back up to capture the bad argument */ if (rv == APR_BADCH || rv == APR_BADARG) { opt->ind--; } while (opt->ind < opt->argc) { *(const char **)apr_array_push(mpm_new_argv) = apr_pstrdup(process->pool, opt->argv[opt->ind++]); } process->argc = mpm_new_argv->nelts; process->argv = (const char * const *)mpm_new_argv->elts; if (NULL == dash_k_arg) { dash_k_arg = dash_k_arg_noarg; } APR_REGISTER_OPTIONAL_FN(ap_signal_server); } static pid_t parent_pid, my_pid; static apr_pool_t *pconf; #if AP_ENABLE_EXCEPTION_HOOK static int exception_hook_enabled; const char *ap_mpm_set_exception_hook(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (cmd->server->is_virtual) { return "EnableExceptionHook directive not allowed in "; } if (strcasecmp(arg, "on") == 0) { exception_hook_enabled = 1; } else if (strcasecmp(arg, "off") == 0) { exception_hook_enabled = 0; } else { return "parameter must be 'on' or 'off'"; } return NULL; } static void run_fatal_exception_hook(int sig) { ap_exception_info_t ei = {0}; if (exception_hook_enabled && geteuid() != 0 && my_pid != parent_pid) { ei.sig = sig; ei.pid = my_pid; ap_run_fatal_exception(&ei); } } #endif /* AP_ENABLE_EXCEPTION_HOOK */ /* handle all varieties of core dumping signals */ static void sig_coredump(int sig) { apr_filepath_set(ap_coredump_dir, pconf); apr_signal(sig, SIG_DFL); #if AP_ENABLE_EXCEPTION_HOOK run_fatal_exception_hook(sig); #endif /* linuxthreads issue calling getpid() here: * This comparison won't match if the crashing thread is * some module's thread that runs in the parent process. * The fallout, which is limited to linuxthreads: * The special log message won't be written when such a * thread in the parent causes the parent to crash. */ if (getpid() == parent_pid) { ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(00060) "seg fault or similar nasty error detected " "in the parent process"); /* XXX we can probably add some rudimentary cleanup code here, * like getting rid of the pid file. If any additional bad stuff * happens, we are protected from recursive errors taking down the * system since this function is no longer the signal handler GLA */ } kill(getpid(), sig); /* At this point we've got sig blocked, because we're still inside * the signal handler. When we leave the signal handler it will * be unblocked, and we'll take the signal... and coredump or whatever * is appropriate for this particular Unix. In addition the parent * will see the real signal we received -- whereas if we called * abort() here, the parent would only see SIGABRT. */ } AP_DECLARE(apr_status_t) ap_fatal_signal_child_setup(server_rec *s) { my_pid = getpid(); return APR_SUCCESS; } /* We can't call sig_coredump (ap_log_error) once pconf is destroyed, so * avoid double faults by restoring each default signal handler on cleanup. */ static apr_status_t fatal_signal_cleanup(void *unused) { (void)unused; apr_signal(SIGSEGV, SIG_DFL); #ifdef SIGBUS apr_signal(SIGBUS, SIG_DFL); #endif /* SIGBUS */ #ifdef SIGABORT apr_signal(SIGABORT, SIG_DFL); #endif /* SIGABORT */ #ifdef SIGABRT apr_signal(SIGABRT, SIG_DFL); #endif /* SIGABRT */ #ifdef SIGILL apr_signal(SIGILL, SIG_DFL); #endif /* SIGILL */ #ifdef SIGFPE apr_signal(SIGFPE, SIG_DFL); #endif /* SIGFPE */ return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_fatal_signal_setup(server_rec *s, apr_pool_t *in_pconf) { #ifndef NO_USE_SIGACTION struct sigaction sa; memset(&sa, 0, sizeof sa); sigemptyset(&sa.sa_mask); #if defined(SA_ONESHOT) sa.sa_flags = SA_ONESHOT; #elif defined(SA_RESETHAND) sa.sa_flags = SA_RESETHAND; #endif sa.sa_handler = sig_coredump; if (sigaction(SIGSEGV, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, s, APLOGNO(00061) "sigaction(SIGSEGV)"); #ifdef SIGBUS if (sigaction(SIGBUS, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, s, APLOGNO(00062) "sigaction(SIGBUS)"); #endif #ifdef SIGABORT if (sigaction(SIGABORT, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, s, APLOGNO(00063) "sigaction(SIGABORT)"); #endif #ifdef SIGABRT if (sigaction(SIGABRT, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, s, APLOGNO(00064) "sigaction(SIGABRT)"); #endif #ifdef SIGILL if (sigaction(SIGILL, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, s, APLOGNO(00065) "sigaction(SIGILL)"); #endif #ifdef SIGFPE if (sigaction(SIGFPE, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, s, APLOGNO(00066) "sigaction(SIGFPE)"); #endif #else /* NO_USE_SIGACTION */ apr_signal(SIGSEGV, sig_coredump); #ifdef SIGBUS apr_signal(SIGBUS, sig_coredump); #endif /* SIGBUS */ #ifdef SIGABORT apr_signal(SIGABORT, sig_coredump); #endif /* SIGABORT */ #ifdef SIGABRT apr_signal(SIGABRT, sig_coredump); #endif /* SIGABRT */ #ifdef SIGILL apr_signal(SIGILL, sig_coredump); #endif /* SIGILL */ #ifdef SIGFPE apr_signal(SIGFPE, sig_coredump); #endif /* SIGFPE */ #endif /* NO_USE_SIGACTION */ pconf = in_pconf; parent_pid = my_pid = getpid(); apr_pool_cleanup_register(pconf, NULL, fatal_signal_cleanup, fatal_signal_cleanup); return APR_SUCCESS; } #endif /* WIN32 */ httpd-2.4.41/server/protocol.c0000644000000000000500000025264013473070160014561 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * protocol.c --- routines which directly communicate with the client. * * Code originally by Rob McCool; much redone by Robert S. Thau * and the Apache Software Foundation. */ #include "apr.h" #include "apr_strings.h" #include "apr_buckets.h" #include "apr_lib.h" #include "apr_signal.h" #include "apr_strmatch.h" #define APR_WANT_STDIO /* for sscanf */ #define APR_WANT_STRFUNC #define APR_WANT_MEMFUNC #include "apr_want.h" #include "util_filter.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_protocol.h" #include "http_main.h" #include "http_request.h" #include "http_vhost.h" #include "http_log.h" /* For errors detected in basic auth common * support code... */ #include "mod_core.h" #include "util_charset.h" #include "util_ebcdic.h" #include "scoreboard.h" #if APR_HAVE_STDARG_H #include #endif #if APR_HAVE_UNISTD_H #include #endif /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX APR_HOOK_STRUCT( APR_HOOK_LINK(pre_read_request) APR_HOOK_LINK(post_read_request) APR_HOOK_LINK(log_transaction) APR_HOOK_LINK(http_scheme) APR_HOOK_LINK(default_port) APR_HOOK_LINK(note_auth_failure) APR_HOOK_LINK(protocol_propose) APR_HOOK_LINK(protocol_switch) APR_HOOK_LINK(protocol_get) ) AP_DECLARE_DATA ap_filter_rec_t *ap_old_write_func = NULL; /* Patterns to match in ap_make_content_type() */ static const char *needcset[] = { "text/plain", "text/html", NULL }; static const apr_strmatch_pattern **needcset_patterns; static const apr_strmatch_pattern *charset_pattern; AP_DECLARE(void) ap_setup_make_content_type(apr_pool_t *pool) { int i; for (i = 0; needcset[i]; i++) { continue; } needcset_patterns = (const apr_strmatch_pattern **) apr_palloc(pool, (i + 1) * sizeof(apr_strmatch_pattern *)); for (i = 0; needcset[i]; i++) { needcset_patterns[i] = apr_strmatch_precompile(pool, needcset[i], 0); } needcset_patterns[i] = NULL; charset_pattern = apr_strmatch_precompile(pool, "charset=", 0); } /* * Builds the content-type that should be sent to the client from the * content-type specified. The following rules are followed: * - if type is NULL or "", return NULL (do not set content-type). * - if charset adding is disabled, stop processing and return type. * - then, if there are no parameters on type, add the default charset * - return type */ AP_DECLARE(const char *)ap_make_content_type(request_rec *r, const char *type) { const apr_strmatch_pattern **pcset; core_dir_config *conf = (core_dir_config *)ap_get_core_module_config(r->per_dir_config); core_request_config *request_conf; apr_size_t type_len; if (!type || *type == '\0') { return NULL; } if (conf->add_default_charset != ADD_DEFAULT_CHARSET_ON) { return type; } request_conf = ap_get_core_module_config(r->request_config); if (request_conf->suppress_charset) { return type; } type_len = strlen(type); if (apr_strmatch(charset_pattern, type, type_len) != NULL) { /* already has parameter, do nothing */ /* XXX we don't check the validity */ ; } else { /* see if it makes sense to add the charset. At present, * we only add it if the Content-type is one of needcset[] */ for (pcset = needcset_patterns; *pcset ; pcset++) { if (apr_strmatch(*pcset, type, type_len) != NULL) { struct iovec concat[3]; concat[0].iov_base = (void *)type; concat[0].iov_len = type_len; concat[1].iov_base = (void *)"; charset="; concat[1].iov_len = sizeof("; charset=") - 1; concat[2].iov_base = (void *)(conf->add_default_charset_name); concat[2].iov_len = strlen(conf->add_default_charset_name); type = apr_pstrcatv(r->pool, concat, 3, NULL); break; } } } return type; } AP_DECLARE(void) ap_set_content_length(request_rec *r, apr_off_t clength) { r->clength = clength; apr_table_setn(r->headers_out, "Content-Length", apr_off_t_toa(r->pool, clength)); } /* * Return the latest rational time from a request/mtime (modification time) * pair. We return the mtime unless it's in the future, in which case we * return the current time. We use the request time as a reference in order * to limit the number of calls to time(). We don't check for futurosity * unless the mtime is at least as new as the reference. */ AP_DECLARE(apr_time_t) ap_rationalize_mtime(request_rec *r, apr_time_t mtime) { apr_time_t now; /* For all static responses, it's almost certain that the file was * last modified before the beginning of the request. So there's * no reason to call time(NULL) again. But if the response has been * created on demand, then it might be newer than the time the request * started. In this event we really have to call time(NULL) again * so that we can give the clients the most accurate Last-Modified. If we * were given a time in the future, we return the current time - the * Last-Modified can't be in the future. */ now = (mtime < r->request_time) ? r->request_time : apr_time_now(); return (mtime > now) ? now : mtime; } /* Get a line of protocol input, including any continuation lines * caused by MIME folding (or broken clients) if fold != 0, and place it * in the buffer s, of size n bytes, without the ending newline. * * Pulls from r->proto_input_filters instead of r->input_filters for * stricter protocol adherence and better input filter behavior during * chunked trailer processing (for http). * * If s is NULL, ap_rgetline_core will allocate necessary memory from r->pool. * * Returns APR_SUCCESS if there are no problems and sets *read to be * the full length of s. * * APR_ENOSPC is returned if there is not enough buffer space. * Other errors may be returned on other errors. * * The [CR]LF are *not* returned in the buffer. Therefore, a *read of 0 * indicates that an empty line was read. * * Notes: Because the buffer uses 1 char for NUL, the most we can return is * (n - 1) actual characters. * * If no LF is detected on the last line due to a dropped connection * or a full buffer, that's considered an error. */ AP_DECLARE(apr_status_t) ap_rgetline_core(char **s, apr_size_t n, apr_size_t *read, request_rec *r, int flags, apr_bucket_brigade *bb) { apr_status_t rv; apr_bucket *e; apr_size_t bytes_handled = 0, current_alloc = 0; char *pos, *last_char = *s; int do_alloc = (*s == NULL), saw_eos = 0; int fold = flags & AP_GETLINE_FOLD; int crlf = flags & AP_GETLINE_CRLF; int nospc_eol = flags & AP_GETLINE_NOSPC_EOL; int saw_eol = 0, saw_nospc = 0; if (!n) { /* Needs room for NUL byte at least */ *read = 0; return APR_BADARG; } /* * Initialize last_char as otherwise a random value will be compared * against APR_ASCII_LF at the end of the loop if bb only contains * zero-length buckets. */ if (last_char) *last_char = '\0'; do { apr_brigade_cleanup(bb); rv = ap_get_brigade(r->proto_input_filters, bb, AP_MODE_GETLINE, APR_BLOCK_READ, 0); if (rv != APR_SUCCESS) { goto cleanup; } /* Something horribly wrong happened. Someone didn't block! * (this also happens at the end of each keepalive connection) */ if (APR_BRIGADE_EMPTY(bb)) { rv = APR_EGENERAL; goto cleanup; } for (e = APR_BRIGADE_FIRST(bb); e != APR_BRIGADE_SENTINEL(bb); e = APR_BUCKET_NEXT(e)) { const char *str; apr_size_t len; /* If we see an EOS, don't bother doing anything more. */ if (APR_BUCKET_IS_EOS(e)) { saw_eos = 1; break; } rv = apr_bucket_read(e, &str, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS) { goto cleanup; } if (len == 0) { /* no use attempting a zero-byte alloc (hurts when * using --with-efence --enable-pool-debug) or * doing any of the other logic either */ continue; } /* Would this overrun our buffer? If so, we'll die. */ if (n < bytes_handled + len) { /* Before we die, let's fill the buffer up to its limit (i.e. * fall through with the remaining length, if any), setting * saw_eol on LF to stop the outer loop appropriately; we may * come back here once the buffer is filled (no LF seen), and * either be done at that time or continue to wait for LF here * if nospc_eol is set. * * But there is also a corner cases which we want to address, * namely if the buffer is overrun by the final LF only (i.e. * the CR fits in); this is not really an overrun since we'll * strip the CR finally (and use it for NUL byte), but anyway * we have to handle the case so that it's not returned to the * caller as part of the truncated line (it's not!). This is * easier to consider that LF is out of counting and thus fall * through with no error (saw_eol is set to 2 so that we later * ignore LF handling already done here), while folding and * nospc_eol logics continue to work (or fail) appropriately. */ saw_eol = (str[len - 1] == APR_ASCII_LF); if (/* First time around */ saw_eol && !saw_nospc /* Single LF completing the buffered CR, */ && ((len == 1 && ((*s)[bytes_handled - 1] == APR_ASCII_CR)) /* or trailing CRLF overuns by LF only */ || (len > 1 && str[len - 2] == APR_ASCII_CR && n - bytes_handled + 1 == len))) { /* In both cases *last_char is (to be) the CR stripped by * later 'bytes_handled = last_char - *s'. */ saw_eol = 2; } else { /* In any other case we'd lose data. */ rv = APR_ENOSPC; saw_nospc = 1; } len = n - bytes_handled; if (!len) { if (saw_eol) { break; } if (nospc_eol) { continue; } goto cleanup; } } /* Do we have to handle the allocation ourselves? */ if (do_alloc) { /* We'll assume the common case where one bucket is enough. */ if (!*s) { current_alloc = len; *s = apr_palloc(r->pool, current_alloc + 1); } else if (bytes_handled + len > current_alloc) { /* Increase the buffer size */ apr_size_t new_size = current_alloc * 2; char *new_buffer; if (bytes_handled + len > new_size) { new_size = (bytes_handled + len) * 2; } new_buffer = apr_palloc(r->pool, new_size + 1); /* Copy what we already had. */ memcpy(new_buffer, *s, bytes_handled); current_alloc = new_size; *s = new_buffer; } } /* Just copy the rest of the data to the end of the old buffer. */ pos = *s + bytes_handled; memcpy(pos, str, len); last_char = pos + len - 1; /* We've now processed that new data - update accordingly. */ bytes_handled += len; } /* If we got a full line of input, stop reading */ if (last_char && (*last_char == APR_ASCII_LF)) { saw_eol = 1; } } while (!saw_eol); if (rv != APR_SUCCESS) { /* End of line after APR_ENOSPC above */ goto cleanup; } /* Now terminate the string at the end of the line; * if the last-but-one character is a CR, terminate there. * LF is handled above (not accounted) when saw_eol == 2, * the last char is CR to terminate at still. */ if (saw_eol < 2) { if (last_char > *s && last_char[-1] == APR_ASCII_CR) { last_char--; } else if (crlf) { rv = APR_EINVAL; goto cleanup; } } bytes_handled = last_char - *s; /* If we're folding, we have more work to do. * * Note that if an EOS was seen, we know we can't have another line. */ if (fold && bytes_handled && !saw_eos) { for (;;) { const char *str; apr_size_t len; char c; /* Clear the temp brigade for this filter read. */ apr_brigade_cleanup(bb); /* We only care about the first byte. */ rv = ap_get_brigade(r->proto_input_filters, bb, AP_MODE_SPECULATIVE, APR_BLOCK_READ, 1); if (rv != APR_SUCCESS) { goto cleanup; } if (APR_BRIGADE_EMPTY(bb)) { break; } e = APR_BRIGADE_FIRST(bb); /* If we see an EOS, don't bother doing anything more. */ if (APR_BUCKET_IS_EOS(e)) { break; } rv = apr_bucket_read(e, &str, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS) { apr_brigade_cleanup(bb); goto cleanup; } /* Found one, so call ourselves again to get the next line. * * FIXME: If the folding line is completely blank, should we * stop folding? Does that require also looking at the next * char? */ /* When we call destroy, the buckets are deleted, so save that * one character we need. This simplifies our execution paths * at the cost of one character read. */ c = *str; if (c == APR_ASCII_BLANK || c == APR_ASCII_TAB) { /* Do we have enough space? We may be full now. */ if (bytes_handled >= n) { rv = APR_ENOSPC; goto cleanup; } else { apr_size_t next_size, next_len; char *tmp; /* If we're doing the allocations for them, we have to * give ourselves a NULL and copy it on return. */ if (do_alloc) { tmp = NULL; } else { tmp = last_char; } next_size = n - bytes_handled; rv = ap_rgetline_core(&tmp, next_size, &next_len, r, flags & ~AP_GETLINE_FOLD, bb); if (rv != APR_SUCCESS) { goto cleanup; } if (do_alloc && next_len > 0) { char *new_buffer; apr_size_t new_size = bytes_handled + next_len + 1; /* we need to alloc an extra byte for a null */ new_buffer = apr_palloc(r->pool, new_size); /* Copy what we already had. */ memcpy(new_buffer, *s, bytes_handled); /* copy the new line, including the trailing null */ memcpy(new_buffer + bytes_handled, tmp, next_len); *s = new_buffer; } last_char += next_len; bytes_handled += next_len; } } else { /* next character is not tab or space */ break; } } } cleanup: if (bytes_handled >= n) { bytes_handled = n - 1; } *read = bytes_handled; if (*s) { /* ensure the string is NUL terminated */ (*s)[*read] = '\0'; /* PR#43039: We shouldn't accept NULL bytes within the line */ bytes_handled = strlen(*s); if (bytes_handled < *read) { *read = bytes_handled; if (rv == APR_SUCCESS) { rv = APR_EINVAL; } } } return rv; } #if APR_CHARSET_EBCDIC AP_DECLARE(apr_status_t) ap_rgetline(char **s, apr_size_t n, apr_size_t *read, request_rec *r, int fold, apr_bucket_brigade *bb) { /* on ASCII boxes, ap_rgetline is a macro which simply invokes * ap_rgetline_core with the same parms * * on EBCDIC boxes, each complete http protocol input line needs to be * translated into the code page used by the compiler. Since * ap_rgetline_core uses recursion, we do the translation in a wrapper * function to ensure that each input character gets translated only once. */ apr_status_t rv; rv = ap_rgetline_core(s, n, read, r, fold, bb); if (rv == APR_SUCCESS || APR_STATUS_IS_ENOSPC(rv)) { ap_xlate_proto_from_ascii(*s, *read); } return rv; } #endif AP_DECLARE(int) ap_getline(char *s, int n, request_rec *r, int flags) { char *tmp_s = s; apr_status_t rv; apr_size_t len; apr_bucket_brigade *tmp_bb; if (n < 1) { /* Can't work since we always NUL terminate */ return -1; } tmp_bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); rv = ap_rgetline(&tmp_s, n, &len, r, flags, tmp_bb); apr_brigade_destroy(tmp_bb); /* Map the out-of-space condition to the old API. */ if (rv == APR_ENOSPC) { return n; } /* Anything else is just bad. */ if (rv != APR_SUCCESS) { return -1; } return (int)len; } /* parse_uri: break apart the uri * Side Effects: * - sets r->args to rest after '?' (or NULL if no '?') * - sets r->uri to request uri (without r->args part) * - sets r->hostname (if not set already) from request (scheme://host:port) */ AP_CORE_DECLARE(void) ap_parse_uri(request_rec *r, const char *uri) { int status = HTTP_OK; r->unparsed_uri = apr_pstrdup(r->pool, uri); /* http://issues.apache.org/bugzilla/show_bug.cgi?id=31875 * http://issues.apache.org/bugzilla/show_bug.cgi?id=28450 * * This is not in fact a URI, it's a path. That matters in the * case of a leading double-slash. We need to resolve the issue * by normalizing that out before treating it as a URI. */ while ((uri[0] == '/') && (uri[1] == '/')) { ++uri ; } if (r->method_number == M_CONNECT) { status = apr_uri_parse_hostinfo(r->pool, uri, &r->parsed_uri); } else { status = apr_uri_parse(r->pool, uri, &r->parsed_uri); } if (status == APR_SUCCESS) { /* if it has a scheme we may need to do absoluteURI vhost stuff */ if (r->parsed_uri.scheme && !strcasecmp(r->parsed_uri.scheme, ap_http_scheme(r))) { r->hostname = r->parsed_uri.hostname; } else if (r->method_number == M_CONNECT) { r->hostname = r->parsed_uri.hostname; } r->args = r->parsed_uri.query; r->uri = r->parsed_uri.path ? r->parsed_uri.path : apr_pstrdup(r->pool, "/"); #if defined(OS2) || defined(WIN32) /* Handle path translations for OS/2 and plug security hole. * This will prevent "http://www.wherever.com/..\..\/" from * returning a directory for the root drive. */ { char *x; for (x = r->uri; (x = strchr(x, '\\')) != NULL; ) *x = '/'; } #endif /* OS2 || WIN32 */ } else { r->args = NULL; r->hostname = NULL; r->status = HTTP_BAD_REQUEST; /* set error status */ r->uri = apr_pstrdup(r->pool, uri); } } /* get the length of the field name for logging, but no more than 80 bytes */ #define LOG_NAME_MAX_LEN 80 static int field_name_len(const char *field) { const char *end = ap_strchr_c(field, ':'); if (end == NULL || end - field > LOG_NAME_MAX_LEN) return LOG_NAME_MAX_LEN; return end - field; } static int read_request_line(request_rec *r, apr_bucket_brigade *bb) { enum { rrl_none, rrl_badmethod, rrl_badwhitespace, rrl_excesswhitespace, rrl_missinguri, rrl_baduri, rrl_badprotocol, rrl_trailingtext, rrl_badmethod09, rrl_reject09 } deferred_error = rrl_none; char *ll; char *uri; apr_size_t len; int num_blank_lines = DEFAULT_LIMIT_BLANK_LINES; core_server_config *conf = ap_get_core_module_config(r->server->module_config); int strict = (conf->http_conformance != AP_HTTP_CONFORMANCE_UNSAFE); /* Read past empty lines until we get a real request line, * a read error, the connection closes (EOF), or we timeout. * * We skip empty lines because browsers have to tack a CRLF on to the end * of POSTs to support old CERN webservers. But note that we may not * have flushed any previous response completely to the client yet. * We delay the flush as long as possible so that we can improve * performance for clients that are pipelining requests. If a request * is pipelined then we won't block during the (implicit) read() below. * If the requests aren't pipelined, then the client is still waiting * for the final buffer flush from us, and we will block in the implicit * read(). B_SAFEREAD ensures that the BUFF layer flushes if it will * have to block during a read. */ do { apr_status_t rv; /* ensure ap_rgetline allocates memory each time thru the loop * if there are empty lines */ r->the_request = NULL; rv = ap_rgetline(&(r->the_request), (apr_size_t)(r->server->limit_req_line + 2), &len, r, strict ? AP_GETLINE_CRLF : 0, bb); if (rv != APR_SUCCESS) { r->request_time = apr_time_now(); /* ap_rgetline returns APR_ENOSPC if it fills up the * buffer before finding the end-of-line. This is only going to * happen if it exceeds the configured limit for a request-line. */ if (APR_STATUS_IS_ENOSPC(rv)) { r->status = HTTP_REQUEST_URI_TOO_LARGE; } else if (APR_STATUS_IS_TIMEUP(rv)) { r->status = HTTP_REQUEST_TIME_OUT; } else if (APR_STATUS_IS_EINVAL(rv)) { r->status = HTTP_BAD_REQUEST; } r->proto_num = HTTP_VERSION(1,0); r->protocol = apr_pstrdup(r->pool, "HTTP/1.0"); return 0; } } while ((len <= 0) && (--num_blank_lines >= 0)); if (APLOGrtrace5(r)) { ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "Request received from client: %s", ap_escape_logitem(r->pool, r->the_request)); } r->request_time = apr_time_now(); r->method = r->the_request; /* If there is whitespace before a method, skip it and mark in error */ if (apr_isspace(*r->method)) { deferred_error = rrl_badwhitespace; for ( ; apr_isspace(*r->method); ++r->method) ; } /* Scan the method up to the next whitespace, ensure it contains only * valid http-token characters, otherwise mark in error */ if (strict) { ll = (char*) ap_scan_http_token(r->method); } else { ll = (char*) ap_scan_vchar_obstext(r->method); } if (((ll == r->method) || (*ll && !apr_isspace(*ll))) && deferred_error == rrl_none) { deferred_error = rrl_badmethod; ll = strpbrk(ll, "\t\n\v\f\r "); } /* Verify method terminated with a single SP, or mark as specific error */ if (!ll) { if (deferred_error == rrl_none) deferred_error = rrl_missinguri; r->protocol = uri = ""; len = 0; goto rrl_done; } else if (strict && ll[0] && apr_isspace(ll[1]) && deferred_error == rrl_none) { deferred_error = rrl_excesswhitespace; } /* Advance uri pointer over leading whitespace, NUL terminate the method * If non-SP whitespace is encountered, mark as specific error */ for (uri = ll; apr_isspace(*uri); ++uri) if (*uri != ' ' && deferred_error == rrl_none) deferred_error = rrl_badwhitespace; *ll = '\0'; if (!*uri && deferred_error == rrl_none) deferred_error = rrl_missinguri; /* Scan the URI up to the next whitespace, ensure it contains no raw * control characters, otherwise mark in error */ ll = (char*) ap_scan_vchar_obstext(uri); if (ll == uri || (*ll && !apr_isspace(*ll))) { deferred_error = rrl_baduri; ll = strpbrk(ll, "\t\n\v\f\r "); } /* Verify URI terminated with a single SP, or mark as specific error */ if (!ll) { r->protocol = ""; len = 0; goto rrl_done; } else if (strict && ll[0] && apr_isspace(ll[1]) && deferred_error == rrl_none) { deferred_error = rrl_excesswhitespace; } /* Advance protocol pointer over leading whitespace, NUL terminate the uri * If non-SP whitespace is encountered, mark as specific error */ for (r->protocol = ll; apr_isspace(*r->protocol); ++r->protocol) if (*r->protocol != ' ' && deferred_error == rrl_none) deferred_error = rrl_badwhitespace; *ll = '\0'; /* Scan the protocol up to the next whitespace, validation comes later */ if (!(ll = (char*) ap_scan_vchar_obstext(r->protocol))) { len = strlen(r->protocol); goto rrl_done; } len = ll - r->protocol; /* Advance over trailing whitespace, if found mark in error, * determine if trailing text is found, unconditionally mark in error, * finally NUL terminate the protocol string */ if (*ll && !apr_isspace(*ll)) { deferred_error = rrl_badprotocol; } else if (strict && *ll) { deferred_error = rrl_excesswhitespace; } else { for ( ; apr_isspace(*ll); ++ll) if (*ll != ' ' && deferred_error == rrl_none) deferred_error = rrl_badwhitespace; if (*ll && deferred_error == rrl_none) deferred_error = rrl_trailingtext; } *((char *)r->protocol + len) = '\0'; rrl_done: /* For internal integrity and palloc efficiency, reconstruct the_request * in one palloc, using only single SP characters, per spec. */ r->the_request = apr_pstrcat(r->pool, r->method, *uri ? " " : NULL, uri, *r->protocol ? " " : NULL, r->protocol, NULL); if (len == 8 && r->protocol[0] == 'H' && r->protocol[1] == 'T' && r->protocol[2] == 'T' && r->protocol[3] == 'P' && r->protocol[4] == '/' && apr_isdigit(r->protocol[5]) && r->protocol[6] == '.' && apr_isdigit(r->protocol[7]) && r->protocol[5] != '0') { r->assbackwards = 0; r->proto_num = HTTP_VERSION(r->protocol[5] - '0', r->protocol[7] - '0'); } else if (len == 8 && (r->protocol[0] == 'H' || r->protocol[0] == 'h') && (r->protocol[1] == 'T' || r->protocol[1] == 't') && (r->protocol[2] == 'T' || r->protocol[2] == 't') && (r->protocol[3] == 'P' || r->protocol[3] == 'p') && r->protocol[4] == '/' && apr_isdigit(r->protocol[5]) && r->protocol[6] == '.' && apr_isdigit(r->protocol[7]) && r->protocol[5] != '0') { r->assbackwards = 0; r->proto_num = HTTP_VERSION(r->protocol[5] - '0', r->protocol[7] - '0'); if (strict && deferred_error == rrl_none) deferred_error = rrl_badprotocol; else memcpy((char*)r->protocol, "HTTP", 4); } else if (r->protocol[0]) { r->proto_num = HTTP_VERSION(0, 9); /* Defer setting the r->protocol string till error msg is composed */ if (deferred_error == rrl_none) deferred_error = rrl_badprotocol; } else { r->assbackwards = 1; r->protocol = apr_pstrdup(r->pool, "HTTP/0.9"); r->proto_num = HTTP_VERSION(0, 9); } /* Determine the method_number and parse the uri prior to invoking error * handling, such that these fields are available for substitution */ r->method_number = ap_method_number_of(r->method); if (r->method_number == M_GET && r->method[0] == 'H') r->header_only = 1; ap_parse_uri(r, uri); /* With the request understood, we can consider HTTP/0.9 specific errors */ if (r->proto_num == HTTP_VERSION(0, 9) && deferred_error == rrl_none) { if (conf->http09_enable == AP_HTTP09_DISABLE) deferred_error = rrl_reject09; else if (strict && (r->method_number != M_GET || r->header_only)) deferred_error = rrl_badmethod09; } /* Now that the method, uri and protocol are all processed, * we can safely resume any deferred error reporting */ if (deferred_error != rrl_none) { if (deferred_error == rrl_badmethod) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03445) "HTTP Request Line; Invalid method token: '%.*s'", field_name_len(r->method), r->method); else if (deferred_error == rrl_badmethod09) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03444) "HTTP Request Line; Invalid method token: '%.*s'" " (only GET is allowed for HTTP/0.9 requests)", field_name_len(r->method), r->method); else if (deferred_error == rrl_missinguri) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03446) "HTTP Request Line; Missing URI"); else if (deferred_error == rrl_baduri) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03454) "HTTP Request Line; URI incorrectly encoded: '%.*s'", field_name_len(r->unparsed_uri), r->unparsed_uri); else if (deferred_error == rrl_badwhitespace) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03447) "HTTP Request Line; Invalid whitespace"); else if (deferred_error == rrl_excesswhitespace) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03448) "HTTP Request Line; Excess whitespace " "(disallowed by HttpProtocolOptions Strict"); else if (deferred_error == rrl_trailingtext) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03449) "HTTP Request Line; Extraneous text found '%.*s' " "(perhaps whitespace was injected?)", field_name_len(ll), ll); else if (deferred_error == rrl_reject09) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02401) "HTTP Request Line; Rejected HTTP/0.9 request"); else if (deferred_error == rrl_badprotocol) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02418) "HTTP Request Line; Unrecognized protocol '%.*s' " "(perhaps whitespace was injected?)", field_name_len(r->protocol), r->protocol); r->status = HTTP_BAD_REQUEST; goto rrl_failed; } if (conf->http_methods == AP_HTTP_METHODS_REGISTERED && r->method_number == M_INVALID) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02423) "HTTP Request Line; Unrecognized HTTP method: '%.*s' " "(disallowed by RegisteredMethods)", field_name_len(r->method), r->method); r->status = HTTP_NOT_IMPLEMENTED; /* This can't happen in an HTTP/0.9 request, we verified GET above */ return 0; } if (r->status != HTTP_OK) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03450) "HTTP Request Line; Unable to parse URI: '%.*s'", field_name_len(r->uri), r->uri); goto rrl_failed; } if (strict) { if (r->parsed_uri.fragment) { /* RFC3986 3.5: no fragment */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02421) "HTTP Request Line; URI must not contain a fragment"); r->status = HTTP_BAD_REQUEST; goto rrl_failed; } if (r->parsed_uri.user || r->parsed_uri.password) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02422) "HTTP Request Line; URI must not contain a " "username/password"); r->status = HTTP_BAD_REQUEST; goto rrl_failed; } } return 1; rrl_failed: if (r->proto_num == HTTP_VERSION(0, 9)) { /* Send all parsing and protocol error response with 1.x behavior, * and reserve 505 errors for actual HTTP protocols presented. * As called out in RFC7230 3.5, any errors parsing the protocol * from the request line are nearly always misencoded HTTP/1.x * requests. Only a valid 0.9 request with no parsing errors * at all may be treated as a simple request, if allowed. */ r->assbackwards = 0; r->connection->keepalive = AP_CONN_CLOSE; r->proto_num = HTTP_VERSION(1, 0); r->protocol = apr_pstrdup(r->pool, "HTTP/1.0"); } return 0; } static int table_do_fn_check_lengths(void *r_, const char *key, const char *value) { request_rec *r = r_; if (value == NULL || r->server->limit_req_fieldsize >= strlen(value) ) return 1; r->status = HTTP_BAD_REQUEST; apr_table_setn(r->notes, "error-notes", "Size of a request header field exceeds server limit."); ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00560) "Request " "header exceeds LimitRequestFieldSize after merging: %.*s", field_name_len(key), key); return 0; } AP_DECLARE(void) ap_get_mime_headers_core(request_rec *r, apr_bucket_brigade *bb) { char *last_field = NULL; apr_size_t last_len = 0; apr_size_t alloc_len = 0; char *field; char *value; apr_size_t len; int fields_read = 0; char *tmp_field; core_server_config *conf = ap_get_core_module_config(r->server->module_config); int strict = (conf->http_conformance != AP_HTTP_CONFORMANCE_UNSAFE); /* * Read header lines until we get the empty separator line, a read error, * the connection closes (EOF), reach the server limit, or we timeout. */ while(1) { apr_status_t rv; field = NULL; rv = ap_rgetline(&field, r->server->limit_req_fieldsize + 2, &len, r, strict ? AP_GETLINE_CRLF : 0, bb); if (rv != APR_SUCCESS) { if (APR_STATUS_IS_TIMEUP(rv)) { r->status = HTTP_REQUEST_TIME_OUT; } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, "Failed to read request header line %s", field); r->status = HTTP_BAD_REQUEST; } /* ap_rgetline returns APR_ENOSPC if it fills up the buffer before * finding the end-of-line. This is only going to happen if it * exceeds the configured limit for a field size. */ if (rv == APR_ENOSPC) { apr_table_setn(r->notes, "error-notes", "Size of a request header field " "exceeds server limit."); ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00561) "Request header exceeds LimitRequestFieldSize%s" "%.*s", (field && *field) ? ": " : "", (field) ? field_name_len(field) : 0, (field) ? field : ""); } return; } /* For all header values, and all obs-fold lines, the presence of * additional whitespace is a no-op, so collapse trailing whitespace * to save buffer allocation and optimize copy operations. * Do not remove the last single whitespace under any condition. */ while (len > 1 && (field[len-1] == '\t' || field[len-1] == ' ')) { field[--len] = '\0'; } if (*field == '\t' || *field == ' ') { /* Append any newly-read obs-fold line onto the preceding * last_field line we are processing */ apr_size_t fold_len; if (last_field == NULL) { r->status = HTTP_BAD_REQUEST; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03442) "Line folding encountered before first" " header line"); return; } if (field[1] == '\0') { r->status = HTTP_BAD_REQUEST; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03443) "Empty folded line encountered"); return; } /* Leading whitespace on an obs-fold line can be * similarly discarded */ while (field[1] == '\t' || field[1] == ' ') { ++field; --len; } /* This line is a continuation of the preceding line(s), * so append it to the line that we've set aside. * Note: this uses a power-of-two allocator to avoid * doing O(n) allocs and using O(n^2) space for * continuations that span many many lines. */ fold_len = last_len + len + 1; /* trailing null */ if (fold_len >= (apr_size_t)(r->server->limit_req_fieldsize)) { r->status = HTTP_BAD_REQUEST; /* report what we have accumulated so far before the * overflow (last_field) as the field with the problem */ apr_table_setn(r->notes, "error-notes", "Size of a request header field " "exceeds server limit."); ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00562) "Request header exceeds LimitRequestFieldSize " "after folding: %.*s", field_name_len(last_field), last_field); return; } if (fold_len > alloc_len) { char *fold_buf; alloc_len += alloc_len; if (fold_len > alloc_len) { alloc_len = fold_len; } fold_buf = (char *)apr_palloc(r->pool, alloc_len); memcpy(fold_buf, last_field, last_len); last_field = fold_buf; } memcpy(last_field + last_len, field, len +1); /* +1 for nul */ /* Replace obs-fold w/ SP per RFC 7230 3.2.4 */ last_field[last_len] = ' '; last_len += len; /* We've appended this obs-fold line to last_len, proceed to * read the next input line */ continue; } else if (last_field != NULL) { /* Process the previous last_field header line with all obs-folded * segments already concatenated (this is not operating on the * most recently read input line). */ if (r->server->limit_req_fields && (++fields_read > r->server->limit_req_fields)) { r->status = HTTP_BAD_REQUEST; apr_table_setn(r->notes, "error-notes", "The number of request header fields " "exceeds this server's limit."); ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00563) "Number of request headers exceeds " "LimitRequestFields"); return; } if (!strict) { /* Not Strict ('Unsafe' mode), using the legacy parser */ if (!(value = strchr(last_field, ':'))) { /* Find ':' or */ r->status = HTTP_BAD_REQUEST; /* abort bad request */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00564) "Request header field is missing ':' " "separator: %.*s", (int)LOG_NAME_MAX_LEN, last_field); return; } if (value == last_field) { r->status = HTTP_BAD_REQUEST; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03453) "Request header field name was empty"); return; } *value++ = '\0'; /* NUL-terminate at colon */ if (strpbrk(last_field, "\t\n\v\f\r ")) { r->status = HTTP_BAD_REQUEST; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03452) "Request header field name presented" " invalid whitespace"); return; } while (*value == ' ' || *value == '\t') { ++value; /* Skip to start of value */ } if (strpbrk(value, "\n\v\f\r")) { r->status = HTTP_BAD_REQUEST; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03451) "Request header field value presented" " bad whitespace"); return; } } else /* Using strict RFC7230 parsing */ { /* Ensure valid token chars before ':' per RFC 7230 3.2.4 */ value = (char *)ap_scan_http_token(last_field); if ((value == last_field) || *value != ':') { r->status = HTTP_BAD_REQUEST; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02426) "Request header field name is malformed: " "%.*s", (int)LOG_NAME_MAX_LEN, last_field); return; } *value++ = '\0'; /* NUL-terminate last_field name at ':' */ while (*value == ' ' || *value == '\t') { ++value; /* Skip LWS of value */ } /* Find invalid, non-HT ctrl char, or the trailing NULL */ tmp_field = (char *)ap_scan_http_field_content(value); /* Reject value for all garbage input (CTRLs excluding HT) * e.g. only VCHAR / SP / HT / obs-text are allowed per * RFC7230 3.2.6 - leave all more explicit rule enforcement * for specific header handler logic later in the cycle */ if (*tmp_field != '\0') { r->status = HTTP_BAD_REQUEST; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02427) "Request header value is malformed: " "%.*s", (int)LOG_NAME_MAX_LEN, value); return; } } apr_table_addn(r->headers_in, last_field, value); /* This last_field header is now stored in headers_in, * resume processing of the current input line. */ } /* Found the terminating empty end-of-headers line, stop. */ if (len == 0) { break; } /* Keep track of this new header line so that we can extend it across * any obs-fold or parse it on the next loop iteration. We referenced * our previously allocated buffer in r->headers_in, * so allocate a fresh buffer if required. */ alloc_len = 0; last_field = field; last_len = len; } /* Combine multiple message-header fields with the same * field-name, following RFC 2616, 4.2. */ apr_table_compress(r->headers_in, APR_OVERLAP_TABLES_MERGE); /* enforce LimitRequestFieldSize for merged headers */ apr_table_do(table_do_fn_check_lengths, r, r->headers_in, NULL); } AP_DECLARE(void) ap_get_mime_headers(request_rec *r) { apr_bucket_brigade *tmp_bb; tmp_bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); ap_get_mime_headers_core(r, tmp_bb); apr_brigade_destroy(tmp_bb); } request_rec *ap_read_request(conn_rec *conn) { request_rec *r; apr_pool_t *p; const char *expect; int access_status; apr_bucket_brigade *tmp_bb; apr_socket_t *csd; apr_interval_time_t cur_timeout; apr_pool_create(&p, conn->pool); apr_pool_tag(p, "request"); r = apr_pcalloc(p, sizeof(request_rec)); AP_READ_REQUEST_ENTRY((intptr_t)r, (uintptr_t)conn); r->pool = p; r->connection = conn; r->server = conn->base_server; r->user = NULL; r->ap_auth_type = NULL; r->allowed_methods = ap_make_method_list(p, 2); r->headers_in = apr_table_make(r->pool, 25); r->trailers_in = apr_table_make(r->pool, 5); r->subprocess_env = apr_table_make(r->pool, 25); r->headers_out = apr_table_make(r->pool, 12); r->err_headers_out = apr_table_make(r->pool, 5); r->trailers_out = apr_table_make(r->pool, 5); r->notes = apr_table_make(r->pool, 5); r->request_config = ap_create_request_config(r->pool); /* Must be set before we run create request hook */ r->proto_output_filters = conn->output_filters; r->output_filters = r->proto_output_filters; r->proto_input_filters = conn->input_filters; r->input_filters = r->proto_input_filters; ap_run_create_request(r); r->per_dir_config = r->server->lookup_defaults; r->sent_bodyct = 0; /* bytect isn't for body */ r->read_length = 0; r->read_body = REQUEST_NO_BODY; r->status = HTTP_OK; /* Until further notice */ r->the_request = NULL; /* Begin by presuming any module can make its own path_info assumptions, * until some module interjects and changes the value. */ r->used_path_info = AP_REQ_DEFAULT_PATH_INFO; r->useragent_addr = conn->client_addr; r->useragent_ip = conn->client_ip; tmp_bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); ap_run_pre_read_request(r, conn); /* Get the request... */ if (!read_request_line(r, tmp_bb)) { switch (r->status) { case HTTP_REQUEST_URI_TOO_LARGE: case HTTP_BAD_REQUEST: case HTTP_VERSION_NOT_SUPPORTED: case HTTP_NOT_IMPLEMENTED: if (r->status == HTTP_REQUEST_URI_TOO_LARGE) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00565) "request failed: client's request-line exceeds LimitRequestLine (longer than %d)", r->server->limit_req_line); } else if (r->method == NULL) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00566) "request failed: malformed request line"); } access_status = r->status; r->status = HTTP_OK; ap_die(access_status, r); ap_update_child_status(conn->sbh, SERVER_BUSY_LOG, r); ap_run_log_transaction(r); r = NULL; apr_brigade_destroy(tmp_bb); goto traceout; case HTTP_REQUEST_TIME_OUT: ap_update_child_status(conn->sbh, SERVER_BUSY_LOG, NULL); if (!r->connection->keepalives) ap_run_log_transaction(r); apr_brigade_destroy(tmp_bb); goto traceout; default: apr_brigade_destroy(tmp_bb); r = NULL; goto traceout; } } /* We may have been in keep_alive_timeout mode, so toggle back * to the normal timeout mode as we fetch the header lines, * as necessary. */ csd = ap_get_conn_socket(conn); apr_socket_timeout_get(csd, &cur_timeout); if (cur_timeout != conn->base_server->timeout) { apr_socket_timeout_set(csd, conn->base_server->timeout); cur_timeout = conn->base_server->timeout; } if (!r->assbackwards) { const char *tenc; ap_get_mime_headers_core(r, tmp_bb); if (r->status != HTTP_OK) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00567) "request failed: error reading the headers"); ap_send_error_response(r, 0); ap_update_child_status(conn->sbh, SERVER_BUSY_LOG, r); ap_run_log_transaction(r); apr_brigade_destroy(tmp_bb); goto traceout; } tenc = apr_table_get(r->headers_in, "Transfer-Encoding"); if (tenc) { /* http://tools.ietf.org/html/draft-ietf-httpbis-p1-messaging-23 * Section 3.3.3.3: "If a Transfer-Encoding header field is * present in a request and the chunked transfer coding is not * the final encoding ...; the server MUST respond with the 400 * (Bad Request) status code and then close the connection". */ if (!(strcasecmp(tenc, "chunked") == 0 /* fast path */ || ap_find_last_token(r->pool, tenc, "chunked"))) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02539) "client sent unknown Transfer-Encoding " "(%s): %s", tenc, r->uri); r->status = HTTP_BAD_REQUEST; conn->keepalive = AP_CONN_CLOSE; ap_send_error_response(r, 0); ap_update_child_status(conn->sbh, SERVER_BUSY_LOG, r); ap_run_log_transaction(r); apr_brigade_destroy(tmp_bb); goto traceout; } /* http://tools.ietf.org/html/draft-ietf-httpbis-p1-messaging-23 * Section 3.3.3.3: "If a message is received with both a * Transfer-Encoding and a Content-Length header field, the * Transfer-Encoding overrides the Content-Length. ... A sender * MUST remove the received Content-Length field". */ apr_table_unset(r->headers_in, "Content-Length"); } } apr_brigade_destroy(tmp_bb); /* update what we think the virtual host is based on the headers we've * now read. may update status. */ ap_update_vhost_from_headers(r); access_status = r->status; /* Toggle to the Host:-based vhost's timeout mode to fetch the * request body and send the response body, if needed. */ if (cur_timeout != r->server->timeout) { apr_socket_timeout_set(csd, r->server->timeout); cur_timeout = r->server->timeout; } /* we may have switched to another server */ r->per_dir_config = r->server->lookup_defaults; if ((!r->hostname && (r->proto_num >= HTTP_VERSION(1, 1))) || ((r->proto_num == HTTP_VERSION(1, 1)) && !apr_table_get(r->headers_in, "Host"))) { /* * Client sent us an HTTP/1.1 or later request without telling us the * hostname, either with a full URL or a Host: header. We therefore * need to (as per the 1.1 spec) send an error. As a special case, * HTTP/1.1 mentions twice (S9, S14.23) that a request MUST contain * a Host: header, and the server MUST respond with 400 if it doesn't. */ access_status = HTTP_BAD_REQUEST; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00569) "client sent HTTP/1.1 request without hostname " "(see RFC2616 section 14.23): %s", r->uri); } /* * Add the HTTP_IN filter here to ensure that ap_discard_request_body * called by ap_die and by ap_send_error_response works correctly on * status codes that do not cause the connection to be dropped and * in situations where the connection should be kept alive. */ ap_add_input_filter_handle(ap_http_input_filter_handle, NULL, r, r->connection); if (access_status != HTTP_OK || (access_status = ap_run_post_read_request(r))) { ap_die(access_status, r); ap_update_child_status(conn->sbh, SERVER_BUSY_LOG, r); ap_run_log_transaction(r); r = NULL; goto traceout; } if (((expect = apr_table_get(r->headers_in, "Expect")) != NULL) && (expect[0] != '\0')) { /* * The Expect header field was added to HTTP/1.1 after RFC 2068 * as a means to signal when a 100 response is desired and, * unfortunately, to signal a poor man's mandatory extension that * the server must understand or return 417 Expectation Failed. */ if (strcasecmp(expect, "100-continue") == 0) { r->expecting_100 = 1; } else { r->status = HTTP_EXPECTATION_FAILED; ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00570) "client sent an unrecognized expectation value of " "Expect: %s", expect); ap_send_error_response(r, 0); ap_update_child_status(conn->sbh, SERVER_BUSY_LOG, r); ap_run_log_transaction(r); goto traceout; } } AP_READ_REQUEST_SUCCESS((uintptr_t)r, (char *)r->method, (char *)r->uri, (char *)r->server->defn_name, r->status); return r; traceout: AP_READ_REQUEST_FAILURE((uintptr_t)r); return r; } /* if a request with a body creates a subrequest, remove original request's * input headers which pertain to the body which has already been read. * out-of-line helper function for ap_set_sub_req_protocol. */ static void strip_headers_request_body(request_rec *rnew) { apr_table_unset(rnew->headers_in, "Content-Encoding"); apr_table_unset(rnew->headers_in, "Content-Language"); apr_table_unset(rnew->headers_in, "Content-Length"); apr_table_unset(rnew->headers_in, "Content-Location"); apr_table_unset(rnew->headers_in, "Content-MD5"); apr_table_unset(rnew->headers_in, "Content-Range"); apr_table_unset(rnew->headers_in, "Content-Type"); apr_table_unset(rnew->headers_in, "Expires"); apr_table_unset(rnew->headers_in, "Last-Modified"); apr_table_unset(rnew->headers_in, "Transfer-Encoding"); } /* * A couple of other functions which initialize some of the fields of * a request structure, as appropriate for adjuncts of one kind or another * to a request in progress. Best here, rather than elsewhere, since * *someone* has to set the protocol-specific fields... */ AP_DECLARE(void) ap_set_sub_req_protocol(request_rec *rnew, const request_rec *r) { rnew->the_request = r->the_request; /* Keep original request-line */ rnew->assbackwards = 1; /* Don't send headers from this. */ rnew->no_local_copy = 1; /* Don't try to send HTTP_NOT_MODIFIED for a * fragment. */ rnew->method = "GET"; rnew->method_number = M_GET; rnew->protocol = "INCLUDED"; rnew->status = HTTP_OK; rnew->headers_in = apr_table_copy(rnew->pool, r->headers_in); rnew->trailers_in = apr_table_copy(rnew->pool, r->trailers_in); /* did the original request have a body? (e.g. POST w/SSI tags) * if so, make sure the subrequest doesn't inherit body headers */ if (!r->kept_body && (apr_table_get(r->headers_in, "Content-Length") || apr_table_get(r->headers_in, "Transfer-Encoding"))) { strip_headers_request_body(rnew); } rnew->subprocess_env = apr_table_copy(rnew->pool, r->subprocess_env); rnew->headers_out = apr_table_make(rnew->pool, 5); rnew->err_headers_out = apr_table_make(rnew->pool, 5); rnew->trailers_out = apr_table_make(rnew->pool, 5); rnew->notes = apr_table_make(rnew->pool, 5); rnew->expecting_100 = r->expecting_100; rnew->read_length = r->read_length; rnew->read_body = REQUEST_NO_BODY; rnew->main = (request_rec *) r; } static void end_output_stream(request_rec *r) { conn_rec *c = r->connection; apr_bucket_brigade *bb; apr_bucket *b; bb = apr_brigade_create(r->pool, c->bucket_alloc); b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); ap_pass_brigade(r->output_filters, bb); } AP_DECLARE(void) ap_finalize_sub_req_protocol(request_rec *sub) { /* tell the filter chain there is no more content coming */ if (!sub->eos_sent) { end_output_stream(sub); } } /* finalize_request_protocol is called at completion of sending the * response. Its sole purpose is to send the terminating protocol * information for any wrappers around the response message body * (i.e., transfer encodings). It should have been named finalize_response. */ AP_DECLARE(void) ap_finalize_request_protocol(request_rec *r) { (void) ap_discard_request_body(r); /* tell the filter chain there is no more content coming */ if (!r->eos_sent) { end_output_stream(r); } } /* * Support for the Basic authentication protocol, and a bit for Digest. */ AP_DECLARE(void) ap_note_auth_failure(request_rec *r) { const char *type = ap_auth_type(r); if (type) { ap_run_note_auth_failure(r, type); } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00571) "need AuthType to note auth failure: %s", r->uri); } } AP_DECLARE(void) ap_note_basic_auth_failure(request_rec *r) { ap_note_auth_failure(r); } AP_DECLARE(void) ap_note_digest_auth_failure(request_rec *r) { ap_note_auth_failure(r); } AP_DECLARE(int) ap_get_basic_auth_pw(request_rec *r, const char **pw) { const char *auth_line = apr_table_get(r->headers_in, (PROXYREQ_PROXY == r->proxyreq) ? "Proxy-Authorization" : "Authorization"); const char *t; if (!(t = ap_auth_type(r)) || strcasecmp(t, "Basic")) return DECLINED; if (!ap_auth_name(r)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00572) "need AuthName: %s", r->uri); return HTTP_INTERNAL_SERVER_ERROR; } if (!auth_line) { ap_note_auth_failure(r); return HTTP_UNAUTHORIZED; } if (strcasecmp(ap_getword(r->pool, &auth_line, ' '), "Basic")) { /* Client tried to authenticate using wrong auth scheme */ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00573) "client used wrong authentication scheme: %s", r->uri); ap_note_auth_failure(r); return HTTP_UNAUTHORIZED; } while (*auth_line == ' ' || *auth_line == '\t') { auth_line++; } t = ap_pbase64decode(r->pool, auth_line); r->user = ap_getword_nulls (r->pool, &t, ':'); apr_table_setn(r->notes, AP_GET_BASIC_AUTH_PW_NOTE, "1"); r->ap_auth_type = "Basic"; *pw = t; return OK; } AP_DECLARE(apr_status_t) ap_get_basic_auth_components(const request_rec *r, const char **username, const char **password) { const char *auth_header; const char *credentials; const char *decoded; const char *user; auth_header = (PROXYREQ_PROXY == r->proxyreq) ? "Proxy-Authorization" : "Authorization"; credentials = apr_table_get(r->headers_in, auth_header); if (!credentials) { /* No auth header. */ return APR_EINVAL; } if (ap_cstr_casecmp(ap_getword(r->pool, &credentials, ' '), "Basic")) { /* These aren't Basic credentials. */ return APR_EINVAL; } while (*credentials == ' ' || *credentials == '\t') { credentials++; } /* XXX Our base64 decoding functions don't actually error out if the string * we give it isn't base64; they'll just silently stop and hand us whatever * they've parsed up to that point. * * Since this function is supposed to be a drop-in replacement for the * deprecated ap_get_basic_auth_pw(), don't fix this for 2.4.x. */ decoded = ap_pbase64decode(r->pool, credentials); user = ap_getword_nulls(r->pool, &decoded, ':'); if (username) { *username = user; } if (password) { *password = decoded; } return APR_SUCCESS; } struct content_length_ctx { int data_sent; /* true if the C-L filter has already sent at * least one bucket on to the next output filter * for this request */ apr_bucket_brigade *tmpbb; }; /* This filter computes the content length, but it also computes the number * of bytes sent to the client. This means that this filter will always run * through all of the buckets in all brigades */ AP_CORE_DECLARE_NONSTD(apr_status_t) ap_content_length_filter( ap_filter_t *f, apr_bucket_brigade *b) { request_rec *r = f->r; struct content_length_ctx *ctx; apr_bucket *e; int eos = 0; apr_read_type_e eblock = APR_NONBLOCK_READ; ctx = f->ctx; if (!ctx) { f->ctx = ctx = apr_palloc(r->pool, sizeof(*ctx)); ctx->data_sent = 0; ctx->tmpbb = apr_brigade_create(r->pool, r->connection->bucket_alloc); } /* Loop through the brigade to count the length. To avoid * arbitrary memory consumption with morphing bucket types, this * loop will stop and pass on the brigade when necessary. */ e = APR_BRIGADE_FIRST(b); while (e != APR_BRIGADE_SENTINEL(b)) { apr_status_t rv; if (APR_BUCKET_IS_EOS(e)) { eos = 1; break; } /* For a flush bucket, fall through to pass the brigade and * flush now. */ else if (APR_BUCKET_IS_FLUSH(e)) { e = APR_BUCKET_NEXT(e); } /* For metadata bucket types other than FLUSH, loop. */ else if (APR_BUCKET_IS_METADATA(e)) { e = APR_BUCKET_NEXT(e); continue; } /* For determinate length data buckets, count the length and * continue. */ else if (e->length != (apr_size_t)-1) { r->bytes_sent += e->length; e = APR_BUCKET_NEXT(e); continue; } /* For indeterminate length data buckets, perform one read. */ else /* e->length == (apr_size_t)-1 */ { apr_size_t len; const char *ignored; rv = apr_bucket_read(e, &ignored, &len, eblock); if ((rv != APR_SUCCESS) && !APR_STATUS_IS_EAGAIN(rv)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00574) "ap_content_length_filter: " "apr_bucket_read() failed"); return rv; } if (rv == APR_SUCCESS) { eblock = APR_NONBLOCK_READ; e = APR_BUCKET_NEXT(e); r->bytes_sent += len; } else if (APR_STATUS_IS_EAGAIN(rv)) { apr_bucket *flush; /* Next read must block. */ eblock = APR_BLOCK_READ; /* Ensure the last bucket to pass down is a flush if * the next read will block. */ flush = apr_bucket_flush_create(f->c->bucket_alloc); APR_BUCKET_INSERT_BEFORE(e, flush); } } /* Optimization: if the next bucket is EOS (directly after a * bucket morphed to the heap, or a flush), short-cut to * handle EOS straight away - allowing C-L to be determined * for content which is already entirely in memory. */ if (e != APR_BRIGADE_SENTINEL(b) && APR_BUCKET_IS_EOS(e)) { continue; } /* On reaching here, pass on everything in the brigade up to * this point. */ apr_brigade_split_ex(b, e, ctx->tmpbb); rv = ap_pass_brigade(f->next, b); if (rv != APR_SUCCESS) { return rv; } else if (f->c->aborted) { return APR_ECONNABORTED; } apr_brigade_cleanup(b); APR_BRIGADE_CONCAT(b, ctx->tmpbb); e = APR_BRIGADE_FIRST(b); ctx->data_sent = 1; } /* If we've now seen the entire response and it's otherwise * okay to set the C-L in the response header, then do so now. * * We can only set a C-L in the response header if we haven't already * sent any buckets on to the next output filter for this request. */ if (ctx->data_sent == 0 && eos && /* don't whack the C-L if it has already been set for a HEAD * by something like proxy. the brigade only has an EOS bucket * in this case, making r->bytes_sent zero. * * if r->bytes_sent > 0 we have a (temporary) body whose length may * have been changed by a filter. the C-L header might not have been * updated so we do it here. long term it would be cleaner to have * such filters update or remove the C-L header, and just use it * if present. */ !((r->header_only || AP_STATUS_IS_HEADER_ONLY(r->status)) && r->bytes_sent == 0 && apr_table_get(r->headers_out, "Content-Length"))) { ap_set_content_length(r, r->bytes_sent); } ctx->data_sent = 1; return ap_pass_brigade(f->next, b); } /* * Send the body of a response to the client. */ AP_DECLARE(apr_status_t) ap_send_fd(apr_file_t *fd, request_rec *r, apr_off_t offset, apr_size_t len, apr_size_t *nbytes) { conn_rec *c = r->connection; apr_bucket_brigade *bb = NULL; apr_status_t rv; bb = apr_brigade_create(r->pool, c->bucket_alloc); apr_brigade_insert_file(bb, fd, offset, len, r->pool); rv = ap_pass_brigade(r->output_filters, bb); if (rv != APR_SUCCESS) { *nbytes = 0; /* no way to tell how many were actually sent */ } else { *nbytes = len; } return rv; } #if APR_HAS_MMAP /* send data from an in-memory buffer */ AP_DECLARE(apr_size_t) ap_send_mmap(apr_mmap_t *mm, request_rec *r, apr_size_t offset, apr_size_t length) { conn_rec *c = r->connection; apr_bucket_brigade *bb = NULL; apr_bucket *b; bb = apr_brigade_create(r->pool, c->bucket_alloc); b = apr_bucket_mmap_create(mm, offset, length, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); ap_pass_brigade(r->output_filters, bb); return mm->size; /* XXX - change API to report apr_status_t? */ } #endif /* APR_HAS_MMAP */ typedef struct { apr_bucket_brigade *bb; apr_bucket_brigade *tmpbb; } old_write_filter_ctx; AP_CORE_DECLARE_NONSTD(apr_status_t) ap_old_write_filter( ap_filter_t *f, apr_bucket_brigade *bb) { old_write_filter_ctx *ctx = f->ctx; AP_DEBUG_ASSERT(ctx); if (ctx->bb != NULL) { /* whatever is coming down the pipe (we don't care), we * can simply insert our buffered data at the front and * pass the whole bundle down the chain. */ APR_BRIGADE_PREPEND(bb, ctx->bb); } return ap_pass_brigade(f->next, bb); } static ap_filter_t *insert_old_write_filter(request_rec *r) { ap_filter_t *f; old_write_filter_ctx *ctx; /* future optimization: record some flags in the request_rec to * say whether we've added our filter, and whether it is first. */ /* this will typically exit on the first test */ for (f = r->output_filters; f != NULL; f = f->next) { if (ap_old_write_func == f->frec) break; } if (f == NULL) { /* our filter hasn't been added yet */ ctx = apr_pcalloc(r->pool, sizeof(*ctx)); ctx->tmpbb = apr_brigade_create(r->pool, r->connection->bucket_alloc); ap_add_output_filter("OLD_WRITE", ctx, r, r->connection); f = r->output_filters; } return f; } static apr_status_t buffer_output(request_rec *r, const char *str, apr_size_t len) { conn_rec *c = r->connection; ap_filter_t *f; old_write_filter_ctx *ctx; if (len == 0) return APR_SUCCESS; f = insert_old_write_filter(r); ctx = f->ctx; /* if the first filter is not our buffering filter, then we have to * deliver the content through the normal filter chain */ if (f != r->output_filters) { apr_status_t rv; apr_bucket *b = apr_bucket_transient_create(str, len, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->tmpbb, b); rv = ap_pass_brigade(r->output_filters, ctx->tmpbb); apr_brigade_cleanup(ctx->tmpbb); return rv; } if (ctx->bb == NULL) { ctx->bb = apr_brigade_create(r->pool, c->bucket_alloc); } return ap_fwrite(f->next, ctx->bb, str, len); } AP_DECLARE(int) ap_rputc(int c, request_rec *r) { char c2 = (char)c; if (r->connection->aborted) { return -1; } if (buffer_output(r, &c2, 1) != APR_SUCCESS) return -1; return c; } AP_DECLARE(int) ap_rwrite(const void *buf, int nbyte, request_rec *r) { if (r->connection->aborted) return -1; if (buffer_output(r, buf, nbyte) != APR_SUCCESS) return -1; return nbyte; } struct ap_vrprintf_data { apr_vformatter_buff_t vbuff; request_rec *r; char *buff; }; /* Flush callback for apr_vformatter; returns -1 on error. */ static int r_flush(apr_vformatter_buff_t *buff) { /* callback function passed to ap_vformatter to be called when * vformatter needs to write into buff and buff.curpos > buff.endpos */ /* ap_vrprintf_data passed as a apr_vformatter_buff_t, which is then * "downcast" to an ap_vrprintf_data */ struct ap_vrprintf_data *vd = (struct ap_vrprintf_data*)buff; if (vd->r->connection->aborted) return -1; /* r_flush is called when vbuff is completely full */ if (buffer_output(vd->r, vd->buff, AP_IOBUFSIZE)) { return -1; } /* reset the buffer position */ vd->vbuff.curpos = vd->buff; vd->vbuff.endpos = vd->buff + AP_IOBUFSIZE; return 0; } AP_DECLARE(int) ap_vrprintf(request_rec *r, const char *fmt, va_list va) { apr_size_t written; struct ap_vrprintf_data vd; char vrprintf_buf[AP_IOBUFSIZE]; vd.vbuff.curpos = vrprintf_buf; vd.vbuff.endpos = vrprintf_buf + AP_IOBUFSIZE; vd.r = r; vd.buff = vrprintf_buf; if (r->connection->aborted) return -1; written = apr_vformatter(r_flush, &vd.vbuff, fmt, va); if (written != -1) { int n = vd.vbuff.curpos - vrprintf_buf; /* last call to buffer_output, to finish clearing the buffer */ if (buffer_output(r, vrprintf_buf,n) != APR_SUCCESS) return -1; written += n; } return written; } AP_DECLARE_NONSTD(int) ap_rprintf(request_rec *r, const char *fmt, ...) { va_list va; int n; if (r->connection->aborted) return -1; va_start(va, fmt); n = ap_vrprintf(r, fmt, va); va_end(va); return n; } AP_DECLARE_NONSTD(int) ap_rvputs(request_rec *r, ...) { va_list va; const char *s; apr_size_t len; apr_size_t written = 0; if (r->connection->aborted) return -1; /* ### TODO: if the total output is large, put all the strings * ### into a single brigade, rather than flushing each time we * ### fill the buffer */ va_start(va, r); while (1) { s = va_arg(va, const char *); if (s == NULL) break; len = strlen(s); if (buffer_output(r, s, len) != APR_SUCCESS) { return -1; } written += len; } va_end(va); return written; } AP_DECLARE(int) ap_rflush(request_rec *r) { conn_rec *c = r->connection; apr_bucket *b; ap_filter_t *f; old_write_filter_ctx *ctx; apr_status_t rv; f = insert_old_write_filter(r); ctx = f->ctx; b = apr_bucket_flush_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->tmpbb, b); rv = ap_pass_brigade(r->output_filters, ctx->tmpbb); apr_brigade_cleanup(ctx->tmpbb); if (rv != APR_SUCCESS) return -1; return 0; } /* * This function sets the Last-Modified output header field to the value * of the mtime field in the request structure - rationalized to keep it from * being in the future. */ AP_DECLARE(void) ap_set_last_modified(request_rec *r) { if (!r->assbackwards) { apr_time_t mod_time = ap_rationalize_mtime(r, r->mtime); char *datestr = apr_palloc(r->pool, APR_RFC822_DATE_LEN); apr_rfc822_date(datestr, mod_time); apr_table_setn(r->headers_out, "Last-Modified", datestr); } } typedef struct hdr_ptr { ap_filter_t *f; apr_bucket_brigade *bb; } hdr_ptr; #if APR_CHARSET_EBCDIC static int send_header(void *data, const char *key, const char *val) { char *header_line = NULL; hdr_ptr *hdr = (hdr_ptr*)data; header_line = apr_pstrcat(hdr->bb->p, key, ": ", val, CRLF, NULL); ap_xlate_proto_to_ascii(header_line, strlen(header_line)); ap_fputs(hdr->f, hdr->bb, header_line); return 1; } #else static int send_header(void *data, const char *key, const char *val) { ap_fputstrs(((hdr_ptr*)data)->f, ((hdr_ptr*)data)->bb, key, ": ", val, CRLF, NULL); return 1; } #endif AP_DECLARE(void) ap_send_interim_response(request_rec *r, int send_headers) { hdr_ptr x; char *status_line = NULL; request_rec *rr; if (r->proto_num < HTTP_VERSION(1,1)) { /* don't send interim response to HTTP/1.0 Client */ return; } if (!ap_is_HTTP_INFO(r->status)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00575) "Status is %d - not sending interim response", r->status); return; } if (r->status == HTTP_CONTINUE) { if (!r->expecting_100) { /* * Don't send 100-Continue when there was no Expect: 100-continue * in the request headers. For origin servers this is a SHOULD NOT * for proxies it is a MUST NOT according to RFC 2616 8.2.3 */ return; } /* if we send an interim response, we're no longer in a state of * expecting one. Also, this could feasibly be in a subrequest, * so we need to propagate the fact that we responded. */ for (rr = r; rr != NULL; rr = rr->main) { rr->expecting_100 = 0; } } status_line = apr_pstrcat(r->pool, AP_SERVER_PROTOCOL, " ", r->status_line, CRLF, NULL); ap_xlate_proto_to_ascii(status_line, strlen(status_line)); x.f = r->connection->output_filters; x.bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); ap_fputs(x.f, x.bb, status_line); if (send_headers) { apr_table_do(send_header, &x, r->headers_out, NULL); apr_table_clear(r->headers_out); } ap_fputs(x.f, x.bb, CRLF_ASCII); ap_fflush(x.f, x.bb); apr_brigade_destroy(x.bb); } /* * Compare two protocol identifier. Result is similar to strcmp(): * 0 gives same precedence, >0 means proto1 is preferred. */ static int protocol_cmp(const apr_array_header_t *preferences, const char *proto1, const char *proto2) { if (preferences && preferences->nelts > 0) { int index1 = ap_array_str_index(preferences, proto1, 0); int index2 = ap_array_str_index(preferences, proto2, 0); if (index2 > index1) { return (index1 >= 0) ? 1 : -1; } else if (index1 > index2) { return (index2 >= 0) ? -1 : 1; } } /* both have the same index (mabye -1 or no pref configured) and we compare * the names so that spdy3 gets precedence over spdy2. That makes * the outcome at least deterministic. */ return strcmp(proto1, proto2); } AP_DECLARE(const char *) ap_get_protocol(conn_rec *c) { const char *protocol = ap_run_protocol_get(c); return protocol? protocol : AP_PROTOCOL_HTTP1; } AP_DECLARE(apr_status_t) ap_get_protocol_upgrades(conn_rec *c, request_rec *r, server_rec *s, int report_all, const apr_array_header_t **pupgrades) { apr_pool_t *pool = r? r->pool : c->pool; core_server_config *conf; const char *existing; apr_array_header_t *upgrades = NULL; if (!s) { s = (r? r->server : c->base_server); } conf = ap_get_core_module_config(s->module_config); if (conf->protocols->nelts > 0) { existing = ap_get_protocol(c); if (conf->protocols->nelts > 1 || !ap_array_str_contains(conf->protocols, existing)) { int i; /* possibly more than one choice or one, but not the * existing. (TODO: maybe 426 and Upgrade then?) */ upgrades = apr_array_make(pool, conf->protocols->nelts + 1, sizeof(char *)); for (i = 0; i < conf->protocols->nelts; i++) { const char *p = APR_ARRAY_IDX(conf->protocols, i, char *); if (strcmp(existing, p)) { /* not the one we have and possible, add in this order */ APR_ARRAY_PUSH(upgrades, const char*) = p; } else if (!report_all) { break; } } } } *pupgrades = upgrades; return APR_SUCCESS; } AP_DECLARE(const char *) ap_select_protocol(conn_rec *c, request_rec *r, server_rec *s, const apr_array_header_t *choices) { apr_pool_t *pool = r? r->pool : c->pool; core_server_config *conf; const char *protocol = NULL, *existing; apr_array_header_t *proposals; if (!s) { s = (r? r->server : c->base_server); } conf = ap_get_core_module_config(s->module_config); if (APLOGcdebug(c)) { const char *p = apr_array_pstrcat(pool, conf->protocols, ','); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(03155) "select protocol from %s, choices=%s for server %s", p, apr_array_pstrcat(pool, choices, ','), s->server_hostname); } if (conf->protocols->nelts <= 0) { /* nothing configured, by default, we only allow http/1.1 here. * For now... */ if (ap_array_str_contains(choices, AP_PROTOCOL_HTTP1)) { return AP_PROTOCOL_HTTP1; } else { return NULL; } } proposals = apr_array_make(pool, choices->nelts + 1, sizeof(char *)); ap_run_protocol_propose(c, r, s, choices, proposals); /* If the existing protocol has not been proposed, but is a choice, * add it to the proposals implicitly. */ existing = ap_get_protocol(c); if (!ap_array_str_contains(proposals, existing) && ap_array_str_contains(choices, existing)) { APR_ARRAY_PUSH(proposals, const char*) = existing; } if (proposals->nelts > 0) { int i; const apr_array_header_t *prefs = NULL; /* Default for protocols_honor_order is 'on' or != 0 */ if (conf->protocols_honor_order == 0 && choices->nelts > 0) { prefs = choices; } else { prefs = conf->protocols; } /* Select the most preferred protocol */ if (APLOGcdebug(c)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(03156) "select protocol, proposals=%s preferences=%s configured=%s", apr_array_pstrcat(pool, proposals, ','), apr_array_pstrcat(pool, prefs, ','), apr_array_pstrcat(pool, conf->protocols, ',')); } for (i = 0; i < proposals->nelts; ++i) { const char *p = APR_ARRAY_IDX(proposals, i, const char *); if (!ap_array_str_contains(conf->protocols, p)) { /* not a configured protocol here */ continue; } else if (!protocol || (protocol_cmp(prefs, protocol, p) < 0)) { /* none selected yet or this one has preference */ protocol = p; } } } if (APLOGcdebug(c)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(03157) "selected protocol=%s", protocol? protocol : "(none)"); } return protocol; } AP_DECLARE(apr_status_t) ap_switch_protocol(conn_rec *c, request_rec *r, server_rec *s, const char *protocol) { const char *current = ap_get_protocol(c); int rc; if (!strcmp(current, protocol)) { ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, c, APLOGNO(02906) "already at it, protocol_switch to %s", protocol); return APR_SUCCESS; } rc = ap_run_protocol_switch(c, r, s, protocol); switch (rc) { case DECLINED: ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(02907) "no implementation for protocol_switch to %s", protocol); return APR_ENOTIMPL; case OK: case DONE: return APR_SUCCESS; default: ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(02905) "unexpected return code %d from protocol_switch to %s" , rc, protocol); return APR_EOF; } } AP_DECLARE(int) ap_is_allowed_protocol(conn_rec *c, request_rec *r, server_rec *s, const char *protocol) { core_server_config *conf; if (!s) { s = (r? r->server : c->base_server); } conf = ap_get_core_module_config(s->module_config); if (conf->protocols->nelts > 0) { return ap_array_str_contains(conf->protocols, protocol); } return !strcmp(AP_PROTOCOL_HTTP1, protocol); } AP_IMPLEMENT_HOOK_VOID(pre_read_request, (request_rec *r, conn_rec *c), (r, c)) AP_IMPLEMENT_HOOK_RUN_ALL(int,post_read_request, (request_rec *r), (r), OK, DECLINED) AP_IMPLEMENT_HOOK_RUN_ALL(int,log_transaction, (request_rec *r), (r), OK, DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(const char *,http_scheme, (const request_rec *r), (r), NULL) AP_IMPLEMENT_HOOK_RUN_FIRST(unsigned short,default_port, (const request_rec *r), (r), 0) AP_IMPLEMENT_HOOK_RUN_FIRST(int, note_auth_failure, (request_rec *r, const char *auth_type), (r, auth_type), DECLINED) AP_IMPLEMENT_HOOK_RUN_ALL(int,protocol_propose, (conn_rec *c, request_rec *r, server_rec *s, const apr_array_header_t *offers, apr_array_header_t *proposals), (c, r, s, offers, proposals), OK, DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(int,protocol_switch, (conn_rec *c, request_rec *r, server_rec *s, const char *protocol), (c, r, s, protocol), DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(const char *,protocol_get, (const conn_rec *c), (c), NULL) httpd-2.4.41/server/config.m40000644000000000000500000000072111515016742014253 0ustar rootsrcdnl ## Check for libraries dnl ## Check for header files AC_CHECK_HEADERS(bstring.h unistd.h) dnl ## Check for typedefs, structures, and compiler characteristics. dnl ## Check for library functions AC_CHECK_FUNCS(syslog) dnl Obsolete scoreboard code uses this. AC_CHECK_HEADERS(sys/times.h) AC_CHECK_FUNCS(times) dnl Add expr header files to INCLUDES # util_expr needs header files in server source dir APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/server]) httpd-2.4.41/server/mpm_common.c0000644000000000000500000004255613341404134015060 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* The purpose of this file is to store the code that MOST mpm's will need * this does not mean a function only goes into this file if every MPM needs * it. It means that if a function is needed by more than one MPM, and * future maintenance would be served by making the code common, then the * function belongs here. * * This is going in src/main because it is not platform specific, it is * specific to multi-process servers, but NOT to Unix. Which is why it * does not belong in src/os/unix */ #include "apr.h" #include "apr_thread_proc.h" #include "apr_signal.h" #include "apr_strings.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "apr_getopt.h" #include "apr_optional.h" #include "apr_allocator.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_main.h" #include "mpm_common.h" #include "mod_core.h" #include "ap_mpm.h" #include "ap_listen.h" #include "util_mutex.h" #include "scoreboard.h" #ifdef HAVE_PWD_H #include #endif #ifdef HAVE_GRP_H #include #endif #if APR_HAVE_UNISTD_H #include #endif /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX #define DEFAULT_HOOK_LINKS \ APR_HOOK_LINK(monitor) \ APR_HOOK_LINK(drop_privileges) \ APR_HOOK_LINK(mpm) \ APR_HOOK_LINK(mpm_query) \ APR_HOOK_LINK(mpm_register_timed_callback) \ APR_HOOK_LINK(mpm_get_name) \ APR_HOOK_LINK(end_generation) \ APR_HOOK_LINK(child_status) \ APR_HOOK_LINK(suspend_connection) \ APR_HOOK_LINK(resume_connection) #if AP_ENABLE_EXCEPTION_HOOK APR_HOOK_STRUCT( APR_HOOK_LINK(fatal_exception) DEFAULT_HOOK_LINKS ) AP_IMPLEMENT_HOOK_RUN_ALL(int, fatal_exception, (ap_exception_info_t *ei), (ei), OK, DECLINED) #else APR_HOOK_STRUCT( DEFAULT_HOOK_LINKS ) #endif AP_IMPLEMENT_HOOK_RUN_ALL(int, monitor, (apr_pool_t *p, server_rec *s), (p, s), OK, DECLINED) AP_IMPLEMENT_HOOK_RUN_ALL(int, drop_privileges, (apr_pool_t * pchild, server_rec * s), (pchild, s), OK, DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(int, mpm, (apr_pool_t *pconf, apr_pool_t *plog, server_rec *s), (pconf, plog, s), DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(int, mpm_query, (int query_code, int *result, apr_status_t *_rv), (query_code, result, _rv), DECLINED) AP_IMPLEMENT_HOOK_RUN_FIRST(apr_status_t, mpm_register_timed_callback, (apr_time_t t, ap_mpm_callback_fn_t *cbfn, void *baton), (t, cbfn, baton), APR_ENOTIMPL) AP_IMPLEMENT_HOOK_VOID(end_generation, (server_rec *s, ap_generation_t gen), (s, gen)) AP_IMPLEMENT_HOOK_VOID(child_status, (server_rec *s, pid_t pid, ap_generation_t gen, int slot, mpm_child_status status), (s,pid,gen,slot,status)) AP_IMPLEMENT_HOOK_VOID(suspend_connection, (conn_rec *c, request_rec *r), (c, r)) AP_IMPLEMENT_HOOK_VOID(resume_connection, (conn_rec *c, request_rec *r), (c, r)) /* hooks with no args are implemented last, after disabling APR hook probes */ #if defined(APR_HOOK_PROBES_ENABLED) #undef APR_HOOK_PROBES_ENABLED #undef APR_HOOK_PROBE_ENTRY #define APR_HOOK_PROBE_ENTRY(ud,ns,name,args) #undef APR_HOOK_PROBE_RETURN #define APR_HOOK_PROBE_RETURN(ud,ns,name,rv,args) #undef APR_HOOK_PROBE_INVOKE #define APR_HOOK_PROBE_INVOKE(ud,ns,name,src,args) #undef APR_HOOK_PROBE_COMPLETE #define APR_HOOK_PROBE_COMPLETE(ud,ns,name,src,rv,args) #undef APR_HOOK_INT_DCL_UD #define APR_HOOK_INT_DCL_UD #endif AP_IMPLEMENT_HOOK_RUN_FIRST(const char *, mpm_get_name, (void), (), NULL) typedef struct mpm_gen_info_t { APR_RING_ENTRY(mpm_gen_info_t) link; int gen; /* which gen? */ int active; /* number of active processes */ int done; /* gen finished? (whether or not active processes) */ } mpm_gen_info_t; APR_RING_HEAD(mpm_gen_info_head_t, mpm_gen_info_t); static struct mpm_gen_info_head_t *geninfo, *unused_geninfo; static int gen_head_init; /* yuck */ /* variables representing config directives implemented here */ AP_DECLARE_DATA const char *ap_pid_fname; AP_DECLARE_DATA int ap_max_requests_per_child; AP_DECLARE_DATA char ap_coredump_dir[MAX_STRING_LEN]; AP_DECLARE_DATA int ap_coredumpdir_configured; AP_DECLARE_DATA int ap_graceful_shutdown_timeout; AP_DECLARE_DATA apr_uint32_t ap_max_mem_free; AP_DECLARE_DATA apr_size_t ap_thread_stacksize; #define ALLOCATOR_MAX_FREE_DEFAULT (2048*1024) /* Set defaults for config directives implemented here. This is * called from core's pre-config hook, so MPMs which need to override * one of these should run their pre-config hook after that of core. */ void mpm_common_pre_config(apr_pool_t *pconf) { ap_pid_fname = DEFAULT_PIDLOG; ap_max_requests_per_child = 0; /* unlimited */ apr_cpystrn(ap_coredump_dir, ap_server_root, sizeof(ap_coredump_dir)); ap_coredumpdir_configured = 0; ap_graceful_shutdown_timeout = 0; /* unlimited */ ap_max_mem_free = ALLOCATOR_MAX_FREE_DEFAULT; ap_thread_stacksize = 0; /* use system default */ } /* number of calls to wait_or_timeout between writable probes */ #ifndef INTERVAL_OF_WRITABLE_PROBES #define INTERVAL_OF_WRITABLE_PROBES 10 #endif static int wait_or_timeout_counter; AP_DECLARE(void) ap_wait_or_timeout(apr_exit_why_e *status, int *exitcode, apr_proc_t *ret, apr_pool_t *p, server_rec *s) { apr_status_t rv; ++wait_or_timeout_counter; if (wait_or_timeout_counter == INTERVAL_OF_WRITABLE_PROBES) { wait_or_timeout_counter = 0; ap_run_monitor(p, s); } rv = apr_proc_wait_all_procs(ret, exitcode, status, APR_NOWAIT, p); ap_update_global_status(); if (APR_STATUS_IS_EINTR(rv)) { ret->pid = -1; return; } if (APR_STATUS_IS_CHILD_DONE(rv)) { return; } apr_sleep(apr_time_from_sec(1)); ret->pid = -1; } #if defined(TCP_NODELAY) void ap_sock_disable_nagle(apr_socket_t *s) { /* The Nagle algorithm says that we should delay sending partial * packets in hopes of getting more data. We don't want to do * this; we are not telnet. There are bad interactions between * persistent connections and Nagle's algorithm that have very severe * performance penalties. (Failing to disable Nagle is not much of a * problem with simple HTTP.) * * In spite of these problems, failure here is not a shooting offense. */ apr_status_t status = apr_socket_opt_set(s, APR_TCP_NODELAY, 1); if (status != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_WARNING, status, ap_server_conf, APLOGNO(00542) "apr_socket_opt_set: (TCP_NODELAY)"); } } #endif #ifdef HAVE_GETPWNAM AP_DECLARE(uid_t) ap_uname2id(const char *name) { struct passwd *ent; if (name[0] == '#') return (atoi(&name[1])); if (!(ent = getpwnam(name))) { ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00543) "%s: bad user name %s", ap_server_argv0, name); exit(1); } return (ent->pw_uid); } #endif #ifdef HAVE_GETGRNAM AP_DECLARE(gid_t) ap_gname2id(const char *name) { struct group *ent; if (name[0] == '#') return (atoi(&name[1])); if (!(ent = getgrnam(name))) { ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00544) "%s: bad group name %s", ap_server_argv0, name); exit(1); } return (ent->gr_gid); } #endif #ifndef HAVE_INITGROUPS int initgroups(const char *name, gid_t basegid) { #if defined(_OSD_POSIX) || defined(OS2) || defined(WIN32) || defined(NETWARE) return 0; #else gid_t groups[NGROUPS_MAX]; struct group *g; int index = 0; setgrent(); groups[index++] = basegid; while (index < NGROUPS_MAX && ((g = getgrent()) != NULL)) { if (g->gr_gid != basegid) { char **names; for (names = g->gr_mem; *names != NULL; ++names) { if (!strcmp(*names, name)) groups[index++] = g->gr_gid; } } } endgrent(); return setgroups(index, groups); #endif } #endif /* def HAVE_INITGROUPS */ /* standard mpm configuration handling */ const char *ap_mpm_set_pidfile(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (cmd->server->is_virtual) { return "PidFile directive not allowed in "; } ap_pid_fname = arg; return NULL; } void ap_mpm_dump_pidfile(apr_pool_t *p, apr_file_t *out) { apr_file_printf(out, "PidFile: \"%s\"\n", ap_server_root_relative(p, ap_pid_fname)); } const char *ap_mpm_set_max_requests(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (!strcasecmp(cmd->cmd->name, "MaxRequestsPerChild")) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, NULL, APLOGNO(00545) "MaxRequestsPerChild is deprecated, use " "MaxConnectionsPerChild instead."); } ap_max_requests_per_child = atoi(arg); return NULL; } const char *ap_mpm_set_coredumpdir(cmd_parms *cmd, void *dummy, const char *arg) { apr_finfo_t finfo; const char *fname; const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } fname = ap_server_root_relative(cmd->temp_pool, arg); if (!fname) { return apr_pstrcat(cmd->pool, "Invalid CoreDumpDirectory path ", arg, NULL); } if (apr_stat(&finfo, fname, APR_FINFO_TYPE, cmd->pool) != APR_SUCCESS) { return apr_pstrcat(cmd->pool, "CoreDumpDirectory ", fname, " does not exist", NULL); } if (finfo.filetype != APR_DIR) { return apr_pstrcat(cmd->pool, "CoreDumpDirectory ", fname, " is not a directory", NULL); } apr_cpystrn(ap_coredump_dir, fname, sizeof(ap_coredump_dir)); ap_coredumpdir_configured = 1; return NULL; } AP_DECLARE(const char *)ap_mpm_set_graceful_shutdown(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_graceful_shutdown_timeout = atoi(arg); return NULL; } const char *ap_mpm_set_max_mem_free(cmd_parms *cmd, void *dummy, const char *arg) { long value; const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } errno = 0; value = strtol(arg, NULL, 10); if (value < 0 || errno == ERANGE) return apr_pstrcat(cmd->pool, "Invalid MaxMemFree value: ", arg, NULL); ap_max_mem_free = (apr_uint32_t)value * 1024; return NULL; } const char *ap_mpm_set_thread_stacksize(cmd_parms *cmd, void *dummy, const char *arg) { long value; const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } errno = 0; value = strtol(arg, NULL, 10); if (value < 0 || errno == ERANGE) return apr_pstrcat(cmd->pool, "Invalid ThreadStackSize value: ", arg, NULL); ap_thread_stacksize = (apr_size_t)value; return NULL; } AP_DECLARE(apr_status_t) ap_mpm_query(int query_code, int *result) { apr_status_t rv; if (ap_run_mpm_query(query_code, result, &rv) == DECLINED) { rv = APR_EGENERAL; } return rv; } static void end_gen(mpm_gen_info_t *gi) { ap_log_error(APLOG_MARK, APLOG_TRACE4, 0, ap_server_conf, "end of generation %d", gi->gen); ap_run_end_generation(ap_server_conf, gi->gen); APR_RING_REMOVE(gi, link); APR_RING_INSERT_HEAD(unused_geninfo, gi, mpm_gen_info_t, link); } apr_status_t ap_mpm_end_gen_helper(void *unused) /* cleanup on pconf */ { int gen = ap_config_generation - 1; /* differs from MPM generation */ mpm_gen_info_t *cur; if (geninfo == NULL) { /* initial pconf teardown, MPM hasn't run */ return APR_SUCCESS; } cur = APR_RING_FIRST(geninfo); while (cur != APR_RING_SENTINEL(geninfo, mpm_gen_info_t, link) && cur->gen != gen) { cur = APR_RING_NEXT(cur, link); } if (cur == APR_RING_SENTINEL(geninfo, mpm_gen_info_t, link)) { /* last child of generation already exited */ ap_log_error(APLOG_MARK, APLOG_TRACE4, 0, ap_server_conf, "no record of generation %d", gen); } else { cur->done = 1; if (cur->active == 0) { end_gen(cur); } } return APR_SUCCESS; } /* core's child-status hook * tracks number of remaining children per generation and * runs the end-generation hook when the last child of * a generation exits */ void ap_core_child_status(server_rec *s, pid_t pid, ap_generation_t gen, int slot, mpm_child_status status) { mpm_gen_info_t *cur; const char *status_msg = "unknown status"; if (!gen_head_init) { /* where to run this? */ gen_head_init = 1; geninfo = apr_pcalloc(s->process->pool, sizeof *geninfo); unused_geninfo = apr_pcalloc(s->process->pool, sizeof *unused_geninfo); APR_RING_INIT(geninfo, mpm_gen_info_t, link); APR_RING_INIT(unused_geninfo, mpm_gen_info_t, link); } cur = APR_RING_FIRST(geninfo); while (cur != APR_RING_SENTINEL(geninfo, mpm_gen_info_t, link) && cur->gen != gen) { cur = APR_RING_NEXT(cur, link); } switch(status) { case MPM_CHILD_STARTED: status_msg = "started"; if (cur == APR_RING_SENTINEL(geninfo, mpm_gen_info_t, link)) { /* first child for this generation */ if (!APR_RING_EMPTY(unused_geninfo, mpm_gen_info_t, link)) { cur = APR_RING_FIRST(unused_geninfo); APR_RING_REMOVE(cur, link); cur->active = cur->done = 0; } else { cur = apr_pcalloc(s->process->pool, sizeof *cur); } cur->gen = gen; APR_RING_ELEM_INIT(cur, link); APR_RING_INSERT_HEAD(geninfo, cur, mpm_gen_info_t, link); } ap_random_parent_after_fork(); ++cur->active; break; case MPM_CHILD_EXITED: ap_update_global_status(); status_msg = "exited"; if (cur == APR_RING_SENTINEL(geninfo, mpm_gen_info_t, link)) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00546) "no record of generation %d of exiting child %" APR_PID_T_FMT, gen, pid); } else { --cur->active; if (!cur->active && cur->done) { /* no children, server has stopped/restarted */ end_gen(cur); } } break; case MPM_CHILD_LOST_SLOT: status_msg = "lost slot"; /* we don't track by slot, so it doesn't matter */ break; } ap_log_error(APLOG_MARK, APLOG_TRACE4, 0, s, "mpm child %" APR_PID_T_FMT " (gen %d/slot %d) %s", pid, gen, slot, status_msg); } AP_DECLARE(apr_status_t) ap_mpm_register_timed_callback(apr_time_t t, ap_mpm_callback_fn_t *cbfn, void *baton) { return ap_run_mpm_register_timed_callback(t, cbfn, baton); } AP_DECLARE(const char *)ap_show_mpm(void) { const char *name = ap_run_mpm_get_name(); if (!name) { name = ""; } return name; } AP_DECLARE(const char *)ap_check_mpm(void) { static const char *last_mpm_name = NULL; if (!_hooks.link_mpm || _hooks.link_mpm->nelts == 0) return "No MPM loaded."; else if (_hooks.link_mpm->nelts > 1) return "More than one MPM loaded."; if (last_mpm_name) { if (strcmp(last_mpm_name, ap_show_mpm())) { return "The MPM cannot be changed during restart."; } } else { last_mpm_name = apr_pstrdup(ap_pglobal, ap_show_mpm()); } return NULL; } httpd-2.4.41/server/gen_test_char.c0000644000000000000500000001371613021275365015527 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifdef CROSS_COMPILE #include #define apr_isalnum(c) (isalnum(((unsigned char)(c)))) #define apr_isalpha(c) (isalpha(((unsigned char)(c)))) #define apr_iscntrl(c) (iscntrl(((unsigned char)(c)))) #define apr_isprint(c) (isprint(((unsigned char)(c)))) #define APR_HAVE_STDIO_H 1 #define APR_HAVE_STRING_H 1 #else #include "apr.h" #include "apr_lib.h" #endif #if defined(WIN32) || defined(OS2) #define NEED_ENHANCED_ESCAPES #endif #if APR_HAVE_STDIO_H #include #endif #if APR_HAVE_STRING_H #include #endif /* A bunch of functions in util.c scan strings looking for certain characters. * To make that more efficient we encode a lookup table. */ #define T_ESCAPE_SHELL_CMD (0x01) #define T_ESCAPE_PATH_SEGMENT (0x02) #define T_OS_ESCAPE_PATH (0x04) #define T_HTTP_TOKEN_STOP (0x08) #define T_ESCAPE_LOGITEM (0x10) #define T_ESCAPE_FORENSIC (0x20) #define T_ESCAPE_URLENCODED (0x40) #define T_HTTP_CTRLS (0x80) #define T_VCHAR_OBSTEXT (0x100) int main(int argc, char *argv[]) { unsigned c; unsigned short flags; printf("/* this file is automatically generated by gen_test_char, " "do not edit */\n" "#define T_ESCAPE_SHELL_CMD (%u)\n" "#define T_ESCAPE_PATH_SEGMENT (%u)\n" "#define T_OS_ESCAPE_PATH (%u)\n" "#define T_HTTP_TOKEN_STOP (%u)\n" "#define T_ESCAPE_LOGITEM (%u)\n" "#define T_ESCAPE_FORENSIC (%u)\n" "#define T_ESCAPE_URLENCODED (%u)\n" "#define T_HTTP_CTRLS (%u)\n" "#define T_VCHAR_OBSTEXT (%u)\n" "\n" "static const unsigned short test_char_table[256] = {", T_ESCAPE_SHELL_CMD, T_ESCAPE_PATH_SEGMENT, T_OS_ESCAPE_PATH, T_HTTP_TOKEN_STOP, T_ESCAPE_LOGITEM, T_ESCAPE_FORENSIC, T_ESCAPE_URLENCODED, T_HTTP_CTRLS, T_VCHAR_OBSTEXT); for (c = 0; c < 256; ++c) { flags = 0; if (c % 8 == 0) printf("\n "); /* escape_shell_cmd */ #ifdef NEED_ENHANCED_ESCAPES /* Win32/OS2 have many of the same vulnerable characters * as Unix sh, plus the carriage return and percent char. * The proper escaping of these characters varies from unix * since Win32/OS2 use carets or doubled-double quotes, * and neither lf nor cr can be escaped. We escape unix * specific as well, to assure that cross-compiled unix * applications behave similarly when invoked on win32/os2. * * Rem please keep in-sync with apr's list in win32/filesys.c */ if (c && strchr("&;`'\"|*?~<>^()[]{}$\\\n\r%", c)) { flags |= T_ESCAPE_SHELL_CMD; } #else if (c && strchr("&;`'\"|*?~<>^()[]{}$\\\n", c)) { flags |= T_ESCAPE_SHELL_CMD; } #endif if (!apr_isalnum(c) && !strchr("$-_.+!*'(),:@&=~", c)) { flags |= T_ESCAPE_PATH_SEGMENT; } if (!apr_isalnum(c) && !strchr("$-_.+!*'(),:;@&=/~", c)) { flags |= T_OS_ESCAPE_PATH; } if (!apr_isalnum(c) && !strchr(".-*_ ", c)) { flags |= T_ESCAPE_URLENCODED; } /* Stop for any non-'token' character, including ctrls, obs-text, * and "tspecials" (RFC2068) a.k.a. "separators" (RFC2616), which * is easer to express as characters remaining in the ASCII token set */ if (!c || !(apr_isalnum(c) || strchr("!#$%&'*+-.^_`|~", c))) { flags |= T_HTTP_TOKEN_STOP; } /* Catch CTRLs other than VCHAR, HT and SP, and obs-text (RFC7230 3.2) * This includes only the C0 plane, not C1 (which is obs-text itself.) * XXX: We should verify that all ASCII C0 ctrls/DEL corresponding to * the current EBCDIC translation are captured, and ASCII C1 ctrls * corresponding are all permitted (as they fall under obs-text rule) */ if (!c || (apr_iscntrl(c) && c != '\t')) { flags |= T_HTTP_CTRLS; } /* From RFC3986, the specific sets of gen-delims, sub-delims (2.2), * and unreserved (2.3) that are possible somewhere within a URI. * Spec requires all others to be %XX encoded, including obs-text. */ if (c && !apr_iscntrl(c) && c != ' ') { flags |= T_VCHAR_OBSTEXT; } /* For logging, escape all control characters, * double quotes (because they delimit the request in the log file) * backslashes (because we use backslash for escaping) * and 8-bit chars with the high bit set */ if (c && (!apr_isprint(c) || c == '"' || c == '\\' || apr_iscntrl(c))) { flags |= T_ESCAPE_LOGITEM; } /* For forensic logging, escape all control characters, top bit set, * :, | (used as delimiters) and % (used for escaping). */ if (!apr_isprint(c) || c == ':' || c == '|' || c == '%' || apr_iscntrl(c) || !c) { flags |= T_ESCAPE_FORENSIC; } printf("0x%03x%c", flags, (c < 255) ? ',' : ' '); } printf("\n};\n"); return 0; } httpd-2.4.41/server/vhost.c0000644000000000000500000011574413514075127014072 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file vhost.c * @brief functions pertaining to virtual host addresses * (configuration and run-time) */ #include "apr.h" #include "apr_strings.h" #include "apr_lib.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_vhost.h" #include "http_protocol.h" #include "http_core.h" #if APR_HAVE_ARPA_INET_H #include #endif /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX /* * After all the definitions there's an explanation of how it's all put * together. */ /* meta-list of name-vhosts. Each server_rec can be in possibly multiple * lists of name-vhosts. */ typedef struct name_chain name_chain; struct name_chain { name_chain *next; server_addr_rec *sar; /* the record causing it to be in * this chain (needed for port comparisons) */ server_rec *server; /* the server to use on a match */ }; /* meta-list of ip addresses. Each server_rec can be in possibly multiple * hash chains since it can have multiple ips. */ typedef struct ipaddr_chain ipaddr_chain; struct ipaddr_chain { ipaddr_chain *next; server_addr_rec *sar; /* the record causing it to be in * this chain (need for both ip addr and port * comparisons) */ server_rec *server; /* the server to use if this matches */ name_chain *names; /* if non-NULL then a list of name-vhosts * sharing this address */ name_chain *initialnames; /* no runtime use, temporary storage of first * NVH'es names */ }; /* This defines the size of the hash table used for hashing ip addresses * of virtual hosts. It must be a power of two. */ #ifndef IPHASH_TABLE_SIZE #define IPHASH_TABLE_SIZE 256 #endif /* A (n) bucket hash table, each entry has a pointer to a server rec and * a pointer to the other entries in that bucket. Each individual address, * even for virtualhosts with multiple addresses, has an entry in this hash * table. There are extra buckets for _default_, and name-vhost entries. * * Note that after config time this is constant, so it is thread-safe. */ static ipaddr_chain *iphash_table[IPHASH_TABLE_SIZE]; /* dump out statistics about the hash function */ /* #define IPHASH_STATISTICS */ /* list of the _default_ servers */ static ipaddr_chain *default_list; /* whether a config error was seen */ static int config_error = 0; /* config check function */ static int vhost_check_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s); /* * How it's used: * * The ip address determines which chain in iphash_table is interesting, then * a comparison is done down that chain to find the first ipaddr_chain whose * sar matches the address:port pair. * * If that ipaddr_chain has names == NULL then you're done, it's an ip-vhost. * * Otherwise it's a name-vhost list, and the default is the server in the * ipaddr_chain record. We tuck away the ipaddr_chain record in the * conn_rec field vhost_lookup_data. Later on after the headers we get a * second chance, and we use the name_chain to figure out what name-vhost * matches the headers. * * If there was no ip address match in the iphash_table then do a lookup * in the default_list. * * How it's put together ... well you should be able to figure that out * from how it's used. Or something like that. */ /* called at the beginning of the config */ AP_DECLARE(void) ap_init_vhost_config(apr_pool_t *p) { memset(iphash_table, 0, sizeof(iphash_table)); default_list = NULL; ap_hook_check_config(vhost_check_config, NULL, NULL, APR_HOOK_MIDDLE); } /* * Parses a host of the form
[:port] * paddr is used to create a list in the order of input * **paddr is the ->next pointer of the last entry (or s->addrs) * *paddr is the variable used to keep track of **paddr between calls * port is the default port to assume */ static const char *get_addresses(apr_pool_t *p, const char *w_, server_addr_rec ***paddr, apr_port_t default_port) { apr_sockaddr_t *my_addr; server_addr_rec *sar; char *w, *host, *scope_id; int wild_port; apr_size_t wlen; apr_port_t port; apr_status_t rv; if (*w_ == '\0') return NULL; wlen = strlen(w_); /* wlen must be > 0 at this point */ w = apr_pstrmemdup(p, w_, wlen); /* apr_parse_addr_port() doesn't understand ":*" so handle that first. */ wild_port = 0; if (w[wlen - 1] == '*') { if (wlen < 2) { wild_port = 1; } else if (w[wlen - 2] == ':') { w[wlen - 2] = '\0'; wild_port = 1; } } rv = apr_parse_addr_port(&host, &scope_id, &port, w, p); /* If the string is "80", apr_parse_addr_port() will be happy and set * host to NULL and port to 80, so watch out for that. */ if (rv != APR_SUCCESS) { return "The address or port is invalid"; } if (!host) { return "Missing address for VirtualHost"; } if (scope_id) { return "Scope ids are not supported"; } if (!port && !wild_port) { port = default_port; } if (strcmp(host, "*") == 0 || strcasecmp(host, "_default_") == 0) { rv = apr_sockaddr_info_get(&my_addr, NULL, APR_UNSPEC, port, 0, p); if (rv) { return "Could not determine a wildcard address ('0.0.0.0') -- " "check resolver configuration."; } } else { rv = apr_sockaddr_info_get(&my_addr, host, APR_UNSPEC, port, 0, p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, NULL, APLOGNO(00547) "Could not resolve host name %s -- ignoring!", host); return NULL; } } /* Remember all addresses for the host */ do { sar = apr_pcalloc(p, sizeof(server_addr_rec)); **paddr = sar; *paddr = &sar->next; sar->host_addr = my_addr; sar->host_port = port; sar->virthost = host; my_addr = my_addr->next; } while (my_addr); return NULL; } /* parse the addresses */ const char *ap_parse_vhost_addrs(apr_pool_t *p, const char *hostname, server_rec *s) { server_addr_rec **addrs; const char *err; /* start the list of addresses */ addrs = &s->addrs; while (hostname[0]) { err = get_addresses(p, ap_getword_conf(p, &hostname), &addrs, s->port); if (err) { *addrs = NULL; return err; } } /* terminate the list */ *addrs = NULL; if (s->addrs) { if (s->addrs->host_port) { /* override the default port which is inherited from main_server */ s->port = s->addrs->host_port; } } return NULL; } AP_DECLARE_NONSTD(const char *)ap_set_name_virtual_host(cmd_parms *cmd, void *dummy, const char *arg) { static int warnonce = 0; if (++warnonce == 1) { ap_log_error(APLOG_MARK, APLOG_NOTICE|APLOG_STARTUP, APR_SUCCESS, NULL, APLOGNO(00548) "NameVirtualHost has no effect and will be removed in the " "next release %s:%d", cmd->directive->filename, cmd->directive->line_num); } return NULL; } /* hash table statistics, keep this in here for the beta period so * we can find out if the hash function is ok */ #ifdef IPHASH_STATISTICS static int iphash_compare(const void *a, const void *b) { return (*(const int *) b - *(const int *) a); } static void dump_iphash_statistics(server_rec *main_s) { unsigned count[IPHASH_TABLE_SIZE]; int i; ipaddr_chain *src; unsigned total; char buf[HUGE_STRING_LEN]; char *p; total = 0; for (i = 0; i < IPHASH_TABLE_SIZE; ++i) { count[i] = 0; for (src = iphash_table[i]; src; src = src->next) { ++count[i]; if (i < IPHASH_TABLE_SIZE) { /* don't count the slop buckets in the total */ ++total; } } } qsort(count, IPHASH_TABLE_SIZE, sizeof(count[0]), iphash_compare); p = buf + apr_snprintf(buf, sizeof(buf), APLOGNO(03235) "iphash: total hashed = %u, avg chain = %u, " "chain lengths (count x len):", total, total / IPHASH_TABLE_SIZE); total = 1; for (i = 1; i < IPHASH_TABLE_SIZE; ++i) { if (count[i - 1] != count[i]) { p += apr_snprintf(p, sizeof(buf) - (p - buf), " %ux%u", total, count[i - 1]); total = 1; } else { ++total; } } p += apr_snprintf(p, sizeof(buf) - (p - buf), " %ux%u", total, count[IPHASH_TABLE_SIZE - 1]); /* Intentional no APLOGNO */ /* buf provides APLOGNO */ ap_log_error(APLOG_MARK, APLOG_DEBUG, main_s, buf); } #endif /* This hashing function is designed to get good distribution in the cases * where the server is handling entire "networks" of servers. i.e. a * whack of /24s. This is probably the most common configuration for * ISPs with large virtual servers. * * NOTE: This function is symmetric (i.e. collapses all 4 octets * into one), so machine byte order (big/little endianness) does not matter. * * Hash function provided by David Hankins. */ static APR_INLINE unsigned hash_inaddr(unsigned key) { key ^= (key >> 16); return ((key >> 8) ^ key) % IPHASH_TABLE_SIZE; } static APR_INLINE unsigned hash_addr(struct apr_sockaddr_t *sa) { unsigned key; /* The key is the last four bytes of the IP address. * For IPv4, this is the entire address, as always. * For IPv6, this is usually part of the MAC address. */ key = *(unsigned *)((char *)sa->ipaddr_ptr + sa->ipaddr_len - 4); return hash_inaddr(key); } static ipaddr_chain *new_ipaddr_chain(apr_pool_t *p, server_rec *s, server_addr_rec *sar) { ipaddr_chain *new; new = apr_palloc(p, sizeof(*new)); new->names = NULL; new->initialnames = NULL; new->server = s; new->sar = sar; new->next = NULL; return new; } static name_chain *new_name_chain(apr_pool_t *p, server_rec *s, server_addr_rec *sar) { name_chain *new; new = apr_palloc(p, sizeof(*new)); new->server = s; new->sar = sar; new->next = NULL; return new; } static APR_INLINE ipaddr_chain *find_ipaddr(apr_sockaddr_t *sa) { unsigned bucket; ipaddr_chain *trav = NULL; ipaddr_chain *wild_match = NULL; /* scan the hash table for an exact match first */ bucket = hash_addr(sa); for (trav = iphash_table[bucket]; trav; trav = trav->next) { server_addr_rec *sar = trav->sar; apr_sockaddr_t *cur = sar->host_addr; if (cur->port == sa->port) { if (apr_sockaddr_equal(cur, sa)) { return trav; } } if (wild_match == NULL && (cur->port == 0 || sa->port == 0)) { if (apr_sockaddr_equal(cur, sa)) { /* don't break, continue looking for an exact match */ wild_match = trav; } } } return wild_match; } static ipaddr_chain *find_default_server(apr_port_t port) { server_addr_rec *sar; ipaddr_chain *trav = NULL; ipaddr_chain *wild_match = NULL; for (trav = default_list; trav; trav = trav->next) { sar = trav->sar; if (sar->host_port == port) { /* match! */ return trav; } if (wild_match == NULL && sar->host_port == 0) { /* don't break, continue looking for an exact match */ wild_match = trav; } } return wild_match; } #if APR_HAVE_IPV6 #define IS_IN6_ANYADDR(ad) ((ad)->family == APR_INET6 \ && IN6_IS_ADDR_UNSPECIFIED(&(ad)->sa.sin6.sin6_addr)) #else #define IS_IN6_ANYADDR(ad) (0) #endif static void dump_a_vhost(apr_file_t *f, ipaddr_chain *ic) { name_chain *nc; int len; char buf[MAX_STRING_LEN]; apr_sockaddr_t *ha = ic->sar->host_addr; if ((ha->family == APR_INET && ha->sa.sin.sin_addr.s_addr == INADDR_ANY) || IS_IN6_ANYADDR(ha)) { len = apr_snprintf(buf, sizeof(buf), "*:%u", ic->sar->host_port); } else { len = apr_snprintf(buf, sizeof(buf), "%pI", ha); } if (ic->sar->host_port == 0) { buf[len-1] = '*'; } if (ic->names == NULL) { apr_file_printf(f, "%-22s %s (%s:%u)\n", buf, ic->server->server_hostname, ic->server->defn_name, ic->server->defn_line_number); return; } apr_file_printf(f, "%-22s is a NameVirtualHost\n" "%8s default server %s (%s:%u)\n", buf, "", ic->server->server_hostname, ic->server->defn_name, ic->server->defn_line_number); for (nc = ic->names; nc; nc = nc->next) { if (nc->sar->host_port) { apr_file_printf(f, "%8s port %u ", "", nc->sar->host_port); } else { apr_file_printf(f, "%8s port * ", ""); } apr_file_printf(f, "namevhost %s (%s:%u)\n", nc->server->server_hostname, nc->server->defn_name, nc->server->defn_line_number); if (nc->server->names) { apr_array_header_t *names = nc->server->names; char **name = (char **)names->elts; int i; for (i = 0; i < names->nelts; ++i) { if (name[i]) { apr_file_printf(f, "%16s alias %s\n", "", name[i]); } } } if (nc->server->wild_names) { apr_array_header_t *names = nc->server->wild_names; char **name = (char **)names->elts; int i; for (i = 0; i < names->nelts; ++i) { if (name[i]) { apr_file_printf(f, "%16s wild alias %s\n", "", name[i]); } } } } } static void dump_vhost_config(apr_file_t *f) { ipaddr_chain *ic; int i; apr_file_printf(f, "VirtualHost configuration:\n"); /* non-wildcard servers */ for (i = 0; i < IPHASH_TABLE_SIZE; ++i) { for (ic = iphash_table[i]; ic; ic = ic->next) { dump_a_vhost(f, ic); } } /* wildcard servers */ for (ic = default_list; ic; ic = ic->next) { dump_a_vhost(f, ic); } } /* * When a second or later virtual host maps to the same IP chain, * add the relevant server names to the chain. Special care is taken * to avoid adding ic->names until we're sure there are multiple VH'es. */ static void add_name_vhost_config(apr_pool_t *p, server_rec *main_s, server_rec *s, server_addr_rec *sar, ipaddr_chain *ic) { name_chain *nc = new_name_chain(p, s, sar); nc->next = ic->names; /* iterating backwards, so each one we see becomes the current default server */ ic->server = s; if (ic->names == NULL) { if (ic->initialnames == NULL) { /* first pass, set these names aside in case we see another VH. * Until then, this looks like an IP-based VH to runtime. */ ic->initialnames = nc; } else { /* second pass through this chain -- this really is an NVH, and we * have two sets of names to link in. */ nc->next = ic->initialnames; ic->names = nc; ic->initialnames = NULL; } } else { /* 3rd or more -- just keep stacking the names */ ic->names = nc; } } /* compile the tables and such we need to do the run-time vhost lookups */ AP_DECLARE(void) ap_fini_vhost_config(apr_pool_t *p, server_rec *main_s) { server_addr_rec *sar; int has_default_vhost_addr; server_rec *s; int i; ipaddr_chain **iphash_table_tail[IPHASH_TABLE_SIZE]; /* Main host first */ s = main_s; if (!s->server_hostname) { s->server_hostname = ap_get_local_host(p); } /* initialize the tails */ for (i = 0; i < IPHASH_TABLE_SIZE; ++i) { iphash_table_tail[i] = &iphash_table[i]; } /* The next things to go into the hash table are the virtual hosts * themselves. They're listed off of main_s->next in the reverse * order they occurred in the config file, so we insert them at * the iphash_table_tail but don't advance the tail. */ for (s = main_s->next; s; s = s->next) { server_addr_rec *sar_prev = NULL; has_default_vhost_addr = 0; for (sar = s->addrs; sar; sar = sar->next) { ipaddr_chain *ic; char inaddr_any[16] = {0}; /* big enough to handle IPv4 or IPv6 */ /* XXX: this treats 0.0.0.0 as a "default" server which matches no-exact-match for IPv6 */ if (!memcmp(sar->host_addr->ipaddr_ptr, inaddr_any, sar->host_addr->ipaddr_len)) { ic = find_default_server(sar->host_port); if (ic && sar->host_port == ic->sar->host_port) { /* we're a match for an existing "default server" */ if (!sar_prev || memcmp(sar_prev->host_addr->ipaddr_ptr, inaddr_any, sar_prev->host_addr->ipaddr_len) || sar_prev->host_port != sar->host_port) { add_name_vhost_config(p, main_s, s, sar, ic); } } else { /* No default server, or we found a default server but ** exactly one of us is a wildcard port, which means we want ** two ip-based vhosts not an NVH with two names */ ic = new_ipaddr_chain(p, s, sar); ic->next = default_list; default_list = ic; add_name_vhost_config(p, main_s, s, sar, ic); } has_default_vhost_addr = 1; } else { /* see if it matches something we've already got */ ic = find_ipaddr(sar->host_addr); if (!ic || sar->host_port != ic->sar->host_port) { /* No matching server, or we found a matching server but ** exactly one of us is a wildcard port, which means we want ** two ip-based vhosts not an NVH with two names */ unsigned bucket = hash_addr(sar->host_addr); ic = new_ipaddr_chain(p, s, sar); ic->next = *iphash_table_tail[bucket]; *iphash_table_tail[bucket] = ic; } add_name_vhost_config(p, main_s, s, sar, ic); } sar_prev = sar; } /* Ok now we want to set up a server_hostname if the user was * silly enough to forget one. * XXX: This is silly we should just crash and burn. */ if (!s->server_hostname) { if (has_default_vhost_addr) { s->server_hostname = main_s->server_hostname; } else if (!s->addrs) { /* what else can we do? at this point this vhost has no configured name, probably because they used DNS in the VirtualHost statement. It's disabled anyhow by the host matching code. -djg */ s->server_hostname = apr_pstrdup(p, "bogus_host_without_forward_dns"); } else { apr_status_t rv; char *hostname; rv = apr_getnameinfo(&hostname, s->addrs->host_addr, 0); if (rv == APR_SUCCESS) { s->server_hostname = apr_pstrdup(p, hostname); } else { /* again, what can we do? They didn't specify a ServerName, and their DNS isn't working. -djg */ char *ipaddr_str; apr_sockaddr_ip_get(&ipaddr_str, s->addrs->host_addr); ap_log_error(APLOG_MARK, APLOG_ERR, rv, main_s, APLOGNO(00549) "Failed to resolve server name " "for %s (check DNS) -- or specify an explicit " "ServerName", ipaddr_str); s->server_hostname = apr_pstrdup(p, "bogus_host_without_reverse_dns"); } } } } #ifdef IPHASH_STATISTICS dump_iphash_statistics(main_s); #endif if (ap_exists_config_define("DUMP_VHOSTS")) { apr_file_t *thefile = NULL; apr_file_open_stdout(&thefile, p); dump_vhost_config(thefile); } } static int vhost_check_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { return config_error ? !OK : OK; } /***************************************************************************** * run-time vhost matching functions */ static apr_status_t fix_hostname_v6_literal(request_rec *r, char *host) { char *dst; int double_colon = 0; for (dst = host; *dst; dst++) { if (apr_isxdigit(*dst)) { if (apr_isupper(*dst)) { *dst = apr_tolower(*dst); } } else if (*dst == ':') { if (*(dst + 1) == ':') { if (double_colon) return APR_EINVAL; double_colon = 1; } else if (*(dst + 1) == '.') { return APR_EINVAL; } } else if (*dst == '.') { /* For IPv4-mapped IPv6 addresses like ::FFFF:129.144.52.38 */ if (*(dst + 1) == ':' || *(dst + 1) == '.') return APR_EINVAL; } else { return APR_EINVAL; } } return APR_SUCCESS; } static apr_status_t fix_hostname_non_v6(request_rec *r, char *host) { char *dst; for (dst = host; *dst; dst++) { if (apr_islower(*dst)) { /* leave char unchanged */ } else if (*dst == '.') { if (*(dst + 1) == '.') { return APR_EINVAL; } } else if (apr_isupper(*dst)) { *dst = apr_tolower(*dst); } else if (*dst == '/' || *dst == '\\') { return APR_EINVAL; } } /* strip trailing gubbins */ if (dst > host && dst[-1] == '.') { dst[-1] = '\0'; } return APR_SUCCESS; } /* * If strict mode ever becomes the default, this should be folded into * fix_hostname_non_v6() */ static apr_status_t strict_hostname_check(request_rec *r, char *host) { char *ch; int is_dotted_decimal = 1, leading_zeroes = 0, dots = 0; for (ch = host; *ch; ch++) { if (apr_isalpha(*ch) || *ch == '-' || *ch == '_') { is_dotted_decimal = 0; } else if (ch[0] == '.') { dots++; if (ch[1] == '0' && apr_isdigit(ch[2])) leading_zeroes = 1; } else if (!apr_isdigit(*ch)) { /* also takes care of multiple Host headers by denying commas */ goto bad; } } if (is_dotted_decimal) { if (host[0] == '.' || (host[0] == '0' && apr_isdigit(host[1]))) leading_zeroes = 1; if (leading_zeroes || dots != 3) { /* RFC 3986 7.4 */ goto bad; } } else { /* The top-level domain must start with a letter (RFC 1123 2.1) */ while (ch > host && *ch != '.') ch--; if (ch[0] == '.' && ch[1] != '\0' && !apr_isalpha(ch[1])) goto bad; } return APR_SUCCESS; bad: ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02415) "[strict] Invalid host name '%s'%s%.6s", host, *ch ? ", problem near: " : "", ch); return APR_EINVAL; } /* Lowercase and remove any trailing dot and/or :port from the hostname, * and check that it is sane. * * In most configurations the exact syntax of the hostname isn't * important so strict sanity checking isn't necessary. However, in * mass hosting setups (using mod_vhost_alias or mod_rewrite) where * the hostname is interpolated into the filename, we need to be sure * that the interpolation doesn't expose parts of the filesystem. * We don't do strict RFC 952 / RFC 1123 syntax checking in order * to support iDNS and people who erroneously use underscores. * Instead we just check for filesystem metacharacters: directory * separators / and \ and sequences of more than one dot. */ static int fix_hostname(request_rec *r, const char *host_header, unsigned http_conformance) { const char *src; char *host, *scope_id; apr_port_t port; apr_status_t rv; const char *c; int is_v6literal = 0; int strict = (http_conformance != AP_HTTP_CONFORMANCE_UNSAFE); src = host_header ? host_header : r->hostname; /* According to RFC 2616, Host header field CAN be blank */ if (!*src) { return is_v6literal; } /* apr_parse_addr_port will interpret a bare integer as a port * which is incorrect in this context. So treat it separately. */ for (c = src; apr_isdigit(*c); ++c); if (!*c) { /* pure integer */ if (strict) { /* RFC 3986 7.4 */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02416) "[strict] purely numeric host names not allowed: %s", src); goto bad_nolog; } r->hostname = src; return is_v6literal; } if (host_header) { rv = apr_parse_addr_port(&host, &scope_id, &port, src, r->pool); if (rv != APR_SUCCESS || scope_id) goto bad; if (port) { /* Don't throw the Host: header's port number away: save it in parsed_uri -- ap_get_server_port() needs it! */ /* @@@ XXX there should be a better way to pass the port. * Like r->hostname, there should be a r->portno */ r->parsed_uri.port = port; r->parsed_uri.port_str = apr_itoa(r->pool, (int)port); } if (host_header[0] == '[') is_v6literal = 1; } else { /* * Already parsed, surrounding [ ] (if IPv6 literal) and :port have * already been removed. */ host = apr_pstrdup(r->pool, r->hostname); if (ap_strchr(host, ':') != NULL) is_v6literal = 1; } if (is_v6literal) { rv = fix_hostname_v6_literal(r, host); } else { rv = fix_hostname_non_v6(r, host); if (strict && rv == APR_SUCCESS) rv = strict_hostname_check(r, host); } if (rv != APR_SUCCESS) goto bad; r->hostname = host; return is_v6literal; bad: ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00550) "Client sent malformed Host header: %s", src); bad_nolog: r->status = HTTP_BAD_REQUEST; return is_v6literal; } /* return 1 if host matches ServerName or ServerAliases */ static int matches_aliases(server_rec *s, const char *host) { int i; apr_array_header_t *names; /* match ServerName */ if (!strcasecmp(host, s->server_hostname)) { return 1; } /* search all the aliases from ServerAlias directive */ names = s->names; if (names) { char **name = (char **) names->elts; for (i = 0; i < names->nelts; ++i) { if (!name[i]) continue; if (!strcasecmp(host, name[i])) return 1; } } names = s->wild_names; if (names) { char **name = (char **) names->elts; for (i = 0; i < names->nelts; ++i) { if (!name[i]) continue; if (!ap_strcasecmp_match(host, name[i])) return 1; } } return 0; } /* Suppose a request came in on the same socket as this r, and included * a header "Host: host:port", would it map to r->server? It's more * than just that though. When we do the normal matches for each request * we don't even bother considering Host: etc on non-namevirtualhosts, * we just call it a match. But here we require the host:port to match * the ServerName and/or ServerAliases. */ AP_DECLARE(int) ap_matches_request_vhost(request_rec *r, const char *host, apr_port_t port) { server_rec *s; server_addr_rec *sar; s = r->server; /* search all the values */ /* XXX: If this is a NameVirtualHost then we may not be doing the Right Thing * consider: * * NameVirtualHost 10.1.1.1 * * ServerName v1 * * * ServerName v2 * * * Suppose r->server is v2, and we're asked to match "10.1.1.1". We'll say * "yup it's v2", when really it isn't... if a request came in for 10.1.1.1 * it would really go to v1. */ for (sar = s->addrs; sar; sar = sar->next) { if ((sar->host_port == 0 || port == sar->host_port) && !strcasecmp(host, sar->virthost)) { return 1; } } /* the Port has to match now, because the rest don't have ports associated * with them. */ if (port != s->port) { return 0; } return matches_aliases(s, host); } static void check_hostalias(request_rec *r) { /* * Even if the request has a Host: header containing a port we ignore * that port. We always use the physical port of the socket. There * are a few reasons for this: * * - the default of 80 or 443 for SSL is easier to handle this way * - there is less of a possibility of a security problem * - it simplifies the data structure * - the client may have no idea that a proxy somewhere along the way * translated the request to another ip:port * - except for the addresses from the VirtualHost line, none of the other * names we'll match have ports associated with them */ const char *host = r->hostname; apr_port_t port; server_rec *s; server_rec *virthost_s; server_rec *last_s; name_chain *src; virthost_s = NULL; last_s = NULL; port = r->connection->local_addr->port; /* Recall that the name_chain is a list of server_addr_recs, some of * whose ports may not match. Also each server may appear more than * once in the chain -- specifically, it will appear once for each * address from its VirtualHost line which matched. We only want to * do the full ServerName/ServerAlias comparisons once for each * server, fortunately we know that all the VirtualHost addresses for * a single server are adjacent to each other. */ for (src = r->connection->vhost_lookup_data; src; src = src->next) { server_addr_rec *sar; /* We only consider addresses on the name_chain which have a matching * port */ sar = src->sar; if (sar->host_port != 0 && port != sar->host_port) { continue; } s = src->server; /* If we still need to do ServerName and ServerAlias checks for this * server, do them now. */ if (s != last_s) { /* does it match any ServerName or ServerAlias directive? */ if (matches_aliases(s, host)) { goto found; } } /* Fallback: does it match the virthost from the sar? */ if (!strcasecmp(host, sar->virthost)) { /* only the first match is used */ if (virthost_s == NULL) { virthost_s = s; } } last_s = s; } /* If ServerName and ServerAlias check failed, we end up here. If it * matches a VirtualHost, virthost_s is set. Use that as fallback */ if (virthost_s) { s = virthost_s; goto found; } return; found: /* s is the first matching server, we're done */ r->server = s; } static void check_serverpath(request_rec *r) { server_rec *s; server_rec *last_s; name_chain *src; apr_port_t port; port = r->connection->local_addr->port; /* * This is in conjunction with the ServerPath code in http_core, so we * get the right host attached to a non- Host-sending request. * * See the comment in check_hostalias about how each vhost can be * listed multiple times. */ last_s = NULL; for (src = r->connection->vhost_lookup_data; src; src = src->next) { /* We only consider addresses on the name_chain which have a matching * port */ if (src->sar->host_port != 0 && port != src->sar->host_port) { continue; } s = src->server; if (s == last_s) { continue; } last_s = s; if (s->path && !strncmp(r->uri, s->path, s->pathlen) && (s->path[s->pathlen - 1] == '/' || r->uri[s->pathlen] == '/' || r->uri[s->pathlen] == '\0')) { r->server = s; return; } } } static APR_INLINE const char *construct_host_header(request_rec *r, int is_v6literal) { struct iovec iov[5]; apr_size_t nvec = 0; /* * We cannot use ap_get_server_name/port here, because we must * ignore UseCanonicalName/Port. */ if (is_v6literal) { iov[nvec].iov_base = "["; iov[nvec].iov_len = 1; nvec++; } iov[nvec].iov_base = (void *)r->hostname; iov[nvec].iov_len = strlen(r->hostname); nvec++; if (is_v6literal) { iov[nvec].iov_base = "]"; iov[nvec].iov_len = 1; nvec++; } if (r->parsed_uri.port_str) { iov[nvec].iov_base = ":"; iov[nvec].iov_len = 1; nvec++; iov[nvec].iov_base = r->parsed_uri.port_str; iov[nvec].iov_len = strlen(r->parsed_uri.port_str); nvec++; } return apr_pstrcatv(r->pool, iov, nvec, NULL); } AP_DECLARE(void) ap_update_vhost_from_headers(request_rec *r) { core_server_config *conf = ap_get_core_module_config(r->server->module_config); const char *host_header = apr_table_get(r->headers_in, "Host"); int is_v6literal = 0; int have_hostname_from_url = 0; if (r->hostname) { /* * If there was a host part in the Request-URI, ignore the 'Host' * header. */ have_hostname_from_url = 1; is_v6literal = fix_hostname(r, NULL, conf->http_conformance); } else if (host_header != NULL) { is_v6literal = fix_hostname(r, host_header, conf->http_conformance); } if (r->status != HTTP_OK) return; if (conf->http_conformance != AP_HTTP_CONFORMANCE_UNSAFE) { /* * If we have both hostname from an absoluteURI and a Host header, * we must ignore the Host header (RFC 2616 5.2). * To enforce this, we reset the Host header to the value from the * request line. */ if (have_hostname_from_url && host_header != NULL) { const char *repl = construct_host_header(r, is_v6literal); apr_table_setn(r->headers_in, "Host", repl); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02417) "Replacing host header '%s' with host '%s' given " "in the request uri", host_header, repl); } } /* check if we tucked away a name_chain */ if (r->connection->vhost_lookup_data) { if (r->hostname) check_hostalias(r); else check_serverpath(r); } } /** * For every virtual host on this connection, call func_cb. */ AP_DECLARE(int) ap_vhost_iterate_given_conn(conn_rec *conn, ap_vhost_iterate_conn_cb func_cb, void* baton) { server_rec *s; server_rec *last_s; name_chain *src; apr_port_t port; int rv = 0; if (conn->vhost_lookup_data) { last_s = NULL; port = conn->local_addr->port; for (src = conn->vhost_lookup_data; src; src = src->next) { server_addr_rec *sar; /* We only consider addresses on the name_chain which have a * matching port. */ sar = src->sar; if (sar->host_port != 0 && port != sar->host_port) { continue; } s = src->server; if (s == last_s) { /* we've already done a callback for this vhost. */ continue; } last_s = s; rv = func_cb(baton, conn, s); if (rv != 0) { break; } } } else { rv = func_cb(baton, conn, conn->base_server); } return rv; } /* Called for a new connection which has a known local_addr. Note that the * new connection is assumed to have conn->server == main server. */ AP_DECLARE(void) ap_update_vhost_given_ip(conn_rec *conn) { ipaddr_chain *trav; apr_port_t port; /* scan the hash table for an exact match first */ trav = find_ipaddr(conn->local_addr); if (trav) { /* save the name_chain for later in case this is a name-vhost */ conn->vhost_lookup_data = trav->names; conn->base_server = trav->server; return; } /* maybe there's a default server or wildcard name-based vhost * matching this port */ port = conn->local_addr->port; trav = find_default_server(port); if (trav) { conn->vhost_lookup_data = trav->names; conn->base_server = trav->server; return; } /* otherwise we're stuck with just the main server * and no name-based vhosts */ conn->vhost_lookup_data = NULL; } httpd-2.4.41/server/buildmark.c0000644000000000000500000000207010455005461014657 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ap_config.h" #include "httpd.h" #if defined(__DATE__) && defined(__TIME__) static const char server_built[] = __DATE__ " " __TIME__; #else static const char server_built[] = "unknown"; #endif AP_DECLARE(const char *) ap_get_server_built() { return server_built; } httpd-2.4.41/server/eor_bucket.c0000644000000000000500000000701213500427330015025 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_request.h" #include "http_protocol.h" #include "scoreboard.h" typedef struct { apr_bucket_refcount refcount; request_rec *data; } ap_bucket_eor; static apr_status_t eor_bucket_cleanup(void *data) { request_rec **rp = data; if (*rp) { request_rec *r = *rp; /* * If eor_bucket_destroy is called after us, this prevents * eor_bucket_destroy from trying to destroy the pool again. */ *rp = NULL; /* Update child status and log the transaction */ ap_update_child_status(r->connection->sbh, SERVER_BUSY_LOG, r); ap_run_log_transaction(r); if (ap_extended_status) { ap_increment_counts(r->connection->sbh, r); } } return APR_SUCCESS; } static apr_status_t eor_bucket_read(apr_bucket *b, const char **str, apr_size_t *len, apr_read_type_e block) { *str = NULL; *len = 0; return APR_SUCCESS; } AP_DECLARE(apr_bucket *) ap_bucket_eor_make(apr_bucket *b, request_rec *r) { ap_bucket_eor *h; h = apr_bucket_alloc(sizeof(*h), b->list); h->data = r; b = apr_bucket_shared_make(b, h, 0, 0); b->type = &ap_bucket_type_eor; return b; } AP_DECLARE(apr_bucket *) ap_bucket_eor_create(apr_bucket_alloc_t *list, request_rec *r) { apr_bucket *b = apr_bucket_alloc(sizeof(*b), list); APR_BUCKET_INIT(b); b->free = apr_bucket_free; b->list = list; b = ap_bucket_eor_make(b, r); if (r) { ap_bucket_eor *h = b->data; /* * Register a cleanup for the request pool as the eor bucket could * have been allocated from a different pool then the request pool * e.g. the parent pool of the request pool. In this case * eor_bucket_destroy might be called at a point of time when the * request pool had been already destroyed. * We need to use a pre-cleanup here because a module may create a * sub-pool which is still needed during the log_transaction hook. */ apr_pool_pre_cleanup_register(r->pool, &h->data, eor_bucket_cleanup); } return b; } static void eor_bucket_destroy(void *data) { ap_bucket_eor *h = data; if (apr_bucket_shared_destroy(h)) { request_rec *r = h->data; if (r) { /* eor_bucket_cleanup will be called when the pool gets destroyed */ apr_pool_destroy(r->pool); } apr_bucket_free(h); } } AP_DECLARE_DATA const apr_bucket_type_t ap_bucket_type_eor = { "EOR", 5, APR_BUCKET_METADATA, eor_bucket_destroy, eor_bucket_read, apr_bucket_setaside_noop, apr_bucket_split_notimpl, apr_bucket_shared_copy }; httpd-2.4.41/server/log.c0000644000000000000500000017065613314166400013504 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * http_log.c: Dealing with the logs and errors * * Rob McCool * */ #include "apr.h" #include "apr_general.h" /* for signal stuff */ #include "apr_strings.h" #include "apr_errno.h" #include "apr_thread_proc.h" #include "apr_lib.h" #include "apr_signal.h" #include "apr_portable.h" #include "apr_base64.h" #define APR_WANT_STDIO #define APR_WANT_STRFUNC #include "apr_want.h" #if APR_HAVE_STDARG_H #include #endif #if APR_HAVE_UNISTD_H #include #endif #if APR_HAVE_PROCESS_H #include /* for getpid() on Win32 */ #endif #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_main.h" #include "util_time.h" #include "ap_mpm.h" #include "ap_listen.h" #if HAVE_GETTID #include #include #endif /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX typedef struct { const char *t_name; int t_val; } TRANS; APR_HOOK_STRUCT( APR_HOOK_LINK(error_log) APR_HOOK_LINK(generate_log_id) ) int AP_DECLARE_DATA ap_default_loglevel = DEFAULT_LOGLEVEL; #ifdef HAVE_SYSLOG static const TRANS facilities[] = { {"auth", LOG_AUTH}, #ifdef LOG_AUTHPRIV {"authpriv",LOG_AUTHPRIV}, #endif #ifdef LOG_CRON {"cron", LOG_CRON}, #endif #ifdef LOG_DAEMON {"daemon", LOG_DAEMON}, #endif #ifdef LOG_FTP {"ftp", LOG_FTP}, #endif #ifdef LOG_KERN {"kern", LOG_KERN}, #endif #ifdef LOG_LPR {"lpr", LOG_LPR}, #endif #ifdef LOG_MAIL {"mail", LOG_MAIL}, #endif #ifdef LOG_NEWS {"news", LOG_NEWS}, #endif #ifdef LOG_SYSLOG {"syslog", LOG_SYSLOG}, #endif #ifdef LOG_USER {"user", LOG_USER}, #endif #ifdef LOG_UUCP {"uucp", LOG_UUCP}, #endif #ifdef LOG_LOCAL0 {"local0", LOG_LOCAL0}, #endif #ifdef LOG_LOCAL1 {"local1", LOG_LOCAL1}, #endif #ifdef LOG_LOCAL2 {"local2", LOG_LOCAL2}, #endif #ifdef LOG_LOCAL3 {"local3", LOG_LOCAL3}, #endif #ifdef LOG_LOCAL4 {"local4", LOG_LOCAL4}, #endif #ifdef LOG_LOCAL5 {"local5", LOG_LOCAL5}, #endif #ifdef LOG_LOCAL6 {"local6", LOG_LOCAL6}, #endif #ifdef LOG_LOCAL7 {"local7", LOG_LOCAL7}, #endif {NULL, -1}, }; #endif static const TRANS priorities[] = { {"emerg", APLOG_EMERG}, {"alert", APLOG_ALERT}, {"crit", APLOG_CRIT}, {"error", APLOG_ERR}, {"warn", APLOG_WARNING}, {"notice", APLOG_NOTICE}, {"info", APLOG_INFO}, {"debug", APLOG_DEBUG}, {"trace1", APLOG_TRACE1}, {"trace2", APLOG_TRACE2}, {"trace3", APLOG_TRACE3}, {"trace4", APLOG_TRACE4}, {"trace5", APLOG_TRACE5}, {"trace6", APLOG_TRACE6}, {"trace7", APLOG_TRACE7}, {"trace8", APLOG_TRACE8}, {NULL, -1}, }; static apr_pool_t *stderr_pool = NULL; static apr_file_t *stderr_log = NULL; /* track pipe handles to close in child process */ typedef struct read_handle_t { struct read_handle_t *next; apr_file_t *handle; } read_handle_t; static read_handle_t *read_handles; /** * @brief The piped logging structure. * * Piped logs are used to move functionality out of the main server. * For example, log rotation is done with piped logs. */ struct piped_log { /** The pool to use for the piped log */ apr_pool_t *p; /** The pipe between the server and the logging process */ apr_file_t *read_fd, *write_fd; #ifdef AP_HAVE_RELIABLE_PIPED_LOGS /** The name of the program the logging process is running */ char *program; /** The pid of the logging process */ apr_proc_t *pid; /** How to reinvoke program when it must be replaced */ apr_cmdtype_e cmdtype; #endif }; AP_DECLARE(apr_file_t *) ap_piped_log_read_fd(piped_log *pl) { return pl->read_fd; } AP_DECLARE(apr_file_t *) ap_piped_log_write_fd(piped_log *pl) { return pl->write_fd; } /* remember to close this handle in the child process * * On Win32 this makes zero sense, because we don't * take the parent process's child procs. * If the win32 parent instead passed each and every * logger write handle from itself down to the child, * and the parent manages all aspects of keeping the * reliable pipe log children alive, this would still * make no sense :) Cripple it on Win32. */ static void close_handle_in_child(apr_pool_t *p, apr_file_t *f) { #ifndef WIN32 read_handle_t *new_handle; new_handle = apr_pcalloc(p, sizeof(read_handle_t)); new_handle->next = read_handles; new_handle->handle = f; read_handles = new_handle; #endif } void ap_logs_child_init(apr_pool_t *p, server_rec *s) { read_handle_t *cur = read_handles; while (cur) { apr_file_close(cur->handle); cur = cur->next; } } AP_DECLARE(void) ap_open_stderr_log(apr_pool_t *p) { apr_file_open_stderr(&stderr_log, p); } AP_DECLARE(apr_status_t) ap_replace_stderr_log(apr_pool_t *p, const char *fname) { apr_file_t *stderr_file; apr_status_t rc; char *filename = ap_server_root_relative(p, fname); if (!filename) { ap_log_error(APLOG_MARK, APLOG_STARTUP|APLOG_CRIT, APR_EBADPATH, ap_server_conf, APLOGNO(00085) "Invalid -E error log file %s", fname); return APR_EBADPATH; } if ((rc = apr_file_open(&stderr_file, filename, APR_APPEND | APR_WRITE | APR_CREATE | APR_LARGEFILE, APR_OS_DEFAULT, p)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_STARTUP, rc, ap_server_conf, APLOGNO(00086) "%s: could not open error log file %s.", ap_server_argv0, fname); return rc; } if (!stderr_pool) { /* This is safe provided we revert it when we are finished. * We don't manager the callers pool! */ stderr_pool = p; } if ((rc = apr_file_open_stderr(&stderr_log, stderr_pool)) == APR_SUCCESS) { apr_file_flush(stderr_log); if ((rc = apr_file_dup2(stderr_log, stderr_file, stderr_pool)) == APR_SUCCESS) { apr_file_close(stderr_file); /* * You might ponder why stderr_pool should survive? * The trouble is, stderr_pool may have s_main->error_log, * so we aren't in a position to destory stderr_pool until * the next recycle. There's also an apparent bug which * is not; if some folk decided to call this function before * the core open error logs hook, this pool won't survive. * Neither does the stderr logger, so this isn't a problem. */ } } /* Revert, see above */ if (stderr_pool == p) stderr_pool = NULL; if (rc != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rc, NULL, APLOGNO(00087) "unable to replace stderr with error log file"); } return rc; } static void log_child_errfn(apr_pool_t *pool, apr_status_t err, const char *description) { ap_log_error(APLOG_MARK, APLOG_ERR, err, NULL, APLOGNO(00088) "%s", description); } /* Create a child process running PROGNAME with a pipe connected to * the childs stdin. The write-end of the pipe will be placed in * *FPIN on successful return. If dummy_stderr is non-zero, the * stderr for the child will be the same as the stdout of the parent. * Otherwise the child will inherit the stderr from the parent. */ static int log_child(apr_pool_t *p, const char *progname, apr_file_t **fpin, apr_cmdtype_e cmdtype, int dummy_stderr) { /* Child process code for 'ErrorLog "|..."'; * may want a common framework for this, since I expect it will * be common for other foo-loggers to want this sort of thing... */ apr_status_t rc; apr_procattr_t *procattr; apr_proc_t *procnew; apr_file_t *errfile; if (((rc = apr_procattr_create(&procattr, p)) == APR_SUCCESS) && ((rc = apr_procattr_dir_set(procattr, ap_server_root)) == APR_SUCCESS) && ((rc = apr_procattr_cmdtype_set(procattr, cmdtype)) == APR_SUCCESS) && ((rc = apr_procattr_io_set(procattr, APR_FULL_BLOCK, APR_NO_PIPE, APR_NO_PIPE)) == APR_SUCCESS) && ((rc = apr_procattr_error_check_set(procattr, 1)) == APR_SUCCESS) && ((rc = apr_procattr_child_errfn_set(procattr, log_child_errfn)) == APR_SUCCESS)) { char **args; apr_tokenize_to_argv(progname, &args, p); procnew = (apr_proc_t *)apr_pcalloc(p, sizeof(*procnew)); if (dummy_stderr) { if ((rc = apr_file_open_stdout(&errfile, p)) == APR_SUCCESS) rc = apr_procattr_child_err_set(procattr, errfile, NULL); } rc = apr_proc_create(procnew, args[0], (const char * const *)args, NULL, procattr, p); if (rc == APR_SUCCESS) { apr_pool_note_subprocess(p, procnew, APR_KILL_AFTER_TIMEOUT); (*fpin) = procnew->in; /* read handle to pipe not kept open, so no need to call * close_handle_in_child() */ } } return rc; } /* Open the error log for the given server_rec. If IS_MAIN is * non-zero, s is the main server. */ static int open_error_log(server_rec *s, int is_main, apr_pool_t *p) { const char *fname; int rc; if (*s->error_fname == '|') { apr_file_t *dummy = NULL; apr_cmdtype_e cmdtype = APR_PROGRAM_ENV; fname = s->error_fname + 1; /* In 2.4 favor PROGRAM_ENV, accept "||prog" syntax for compatibility * and "|$cmd" to override the default. * Any 2.2 backport would continue to favor SHELLCMD_ENV so there * accept "||prog" to override, and "|$cmd" to ease conversion. */ if (*fname == '|') ++fname; if (*fname == '$') { cmdtype = APR_SHELLCMD_ENV; ++fname; } /* Spawn a new child logger. If this is the main server_rec, * the new child must use a dummy stderr since the current * stderr might be a pipe to the old logger. Otherwise, the * child inherits the parents stderr. */ rc = log_child(p, fname, &dummy, cmdtype, is_main); if (rc != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_STARTUP, rc, ap_server_conf, APLOGNO(00089) "Couldn't start ErrorLog process '%s'.", s->error_fname + 1); return DONE; } s->error_log = dummy; } #ifdef HAVE_SYSLOG else if (strcmp(s->error_fname, "syslog") == 0 || strncmp(s->error_fname, "syslog:", 7) == 0) { if ((fname = strchr(s->error_fname, ':'))) { /* s->error_fname could be [level]:[tag] (see #60525) */ const char *tag; apr_size_t flen; const TRANS *fac; fname++; tag = ap_strchr_c(fname, ':'); if (tag) { flen = tag - fname; tag++; if (*tag == '\0') { tag = ap_server_argv0; } } else { flen = strlen(fname); tag = ap_server_argv0; } if (flen == 0) { /* Was something like syslog::foobar */ openlog(tag, LOG_NDELAY|LOG_CONS|LOG_PID, LOG_LOCAL7); } else { for (fac = facilities; fac->t_name; fac++) { if (!strncasecmp(fname, fac->t_name, flen)) { openlog(tag, LOG_NDELAY|LOG_CONS|LOG_PID, fac->t_val); s->error_log = NULL; return OK; } } /* Huh? Invalid level name? */ ap_log_error(APLOG_MARK, APLOG_STARTUP, APR_EBADPATH, NULL, APLOGNO(10036) "%s: could not open syslog error log %s.", ap_server_argv0, fname); return DONE; } } else { openlog(ap_server_argv0, LOG_NDELAY|LOG_CONS|LOG_PID, LOG_LOCAL7); } s->error_log = NULL; } #endif else { fname = ap_server_root_relative(p, s->error_fname); if (!fname) { ap_log_error(APLOG_MARK, APLOG_STARTUP, APR_EBADPATH, ap_server_conf, APLOGNO(00090) "%s: Invalid error log path %s.", ap_server_argv0, s->error_fname); return DONE; } if ((rc = apr_file_open(&s->error_log, fname, APR_APPEND | APR_WRITE | APR_CREATE | APR_LARGEFILE, APR_OS_DEFAULT, p)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_STARTUP, rc, ap_server_conf, APLOGNO(00091) "%s: could not open error log file %s.", ap_server_argv0, fname); return DONE; } } return OK; } int ap_open_logs(apr_pool_t *pconf, apr_pool_t *p /* plog */, apr_pool_t *ptemp, server_rec *s_main) { apr_pool_t *stderr_p; server_rec *virt, *q; int replace_stderr; /* Register to throw away the read_handles list when we * cleanup plog. Upon fork() for the apache children, * this read_handles list is closed so only the parent * can relaunch a lost log child. These read handles * are always closed on exec. * We won't care what happens to our stderr log child * between log phases, so we don't mind losing stderr's * read_handle a little bit early. */ apr_pool_cleanup_register(p, &read_handles, ap_pool_cleanup_set_null, apr_pool_cleanup_null); /* HERE we need a stdout log that outlives plog. * We *presume* the parent of plog is a process * or global pool which spans server restarts. * Create our stderr_pool as a child of the plog's * parent pool. */ apr_pool_create(&stderr_p, apr_pool_parent_get(p)); apr_pool_tag(stderr_p, "stderr_pool"); if (open_error_log(s_main, 1, stderr_p) != OK) { return DONE; } replace_stderr = 1; if (s_main->error_log) { apr_status_t rv; /* Replace existing stderr with new log. */ apr_file_flush(s_main->error_log); rv = apr_file_dup2(stderr_log, s_main->error_log, stderr_p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s_main, APLOGNO(00092) "unable to replace stderr with error_log"); } else { /* We are done with stderr_pool, close it, killing * the previous generation's stderr logger */ if (stderr_pool) apr_pool_destroy(stderr_pool); stderr_pool = stderr_p; replace_stderr = 0; /* * Now that we have dup'ed s_main->error_log to stderr_log * close it and set s_main->error_log to stderr_log. This avoids * this fd being inherited by the next piped logger who would * keep open the writing end of the pipe that this one uses * as stdin. This in turn would prevent the piped logger from * exiting. */ apr_file_close(s_main->error_log); s_main->error_log = stderr_log; } } /* note that stderr may still need to be replaced with something * because it points to the old error log, or back to the tty * of the submitter. * XXX: This is BS - /dev/null is non-portable * errno-as-apr_status_t is also non-portable */ #ifdef WIN32 #define NULL_DEVICE "nul" #else #define NULL_DEVICE "/dev/null" #endif if (replace_stderr && freopen(NULL_DEVICE, "w", stderr) == NULL) { ap_log_error(APLOG_MARK, APLOG_CRIT, errno, s_main, APLOGNO(00093) "unable to replace stderr with %s", NULL_DEVICE); } for (virt = s_main->next; virt; virt = virt->next) { if (virt->error_fname) { for (q=s_main; q != virt; q = q->next) { if (q->error_fname != NULL && strcmp(q->error_fname, virt->error_fname) == 0) { break; } } if (q == virt) { if (open_error_log(virt, 0, p) != OK) { return DONE; } } else { virt->error_log = q->error_log; } } else { virt->error_log = s_main->error_log; } } return OK; } AP_DECLARE(void) ap_error_log2stderr(server_rec *s) { apr_file_t *errfile = NULL; apr_file_open_stderr(&errfile, s->process->pool); if (s->error_log != NULL) { apr_file_dup2(s->error_log, errfile, s->process->pool); } } static int cpystrn(char *buf, const char *arg, int buflen) { char *end; if (!arg) return 0; end = apr_cpystrn(buf, arg, buflen); return end - buf; } static int log_remote_address(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { if (info->r && !(arg && *arg == 'c')) return apr_snprintf(buf, buflen, "%s:%d", info->r->useragent_ip, info->r->useragent_addr ? info->r->useragent_addr->port : 0); else if (info->c) return apr_snprintf(buf, buflen, "%s:%d", info->c->client_ip, info->c->client_addr ? info->c->client_addr->port : 0); else return 0; } static int log_local_address(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { if (info->c) return apr_snprintf(buf, buflen, "%s:%d", info->c->local_ip, info->c->local_addr->port); else return 0; } static int log_pid(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { pid_t pid = getpid(); return apr_snprintf(buf, buflen, "%" APR_PID_T_FMT, pid); } static int log_tid(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { #if APR_HAS_THREADS int result; #endif #if HAVE_GETTID if (arg && *arg == 'g') { pid_t tid = syscall(SYS_gettid); if (tid == -1) return 0; return apr_snprintf(buf, buflen, "%"APR_PID_T_FMT, tid); } #endif #if APR_HAS_THREADS if (ap_mpm_query(AP_MPMQ_IS_THREADED, &result) == APR_SUCCESS && result != AP_MPMQ_NOT_SUPPORTED) { apr_os_thread_t tid = apr_os_thread_current(); return apr_snprintf(buf, buflen, "%pT", &tid); } #endif return 0; } static int log_ctime(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { int time_len = buflen; int option = AP_CTIME_OPTION_NONE; while (arg && *arg) { switch (*arg) { case 'u': option |= AP_CTIME_OPTION_USEC; break; case 'c': option |= AP_CTIME_OPTION_COMPACT; break; } arg++; } ap_recent_ctime_ex(buf, apr_time_now(), option, &time_len); /* ap_recent_ctime_ex includes the trailing \0 in time_len */ return time_len - 1; } static int log_loglevel(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { if (info->level < 0) return 0; else return cpystrn(buf, priorities[info->level].t_name, buflen); } static int log_log_id(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { /* * C: log conn log_id if available, * c: log conn log id if available and not a once-per-request log line * else: log request log id if available */ if (arg && !strcasecmp(arg, "c")) { if (info->c && (*arg != 'C' || !info->r)) { return cpystrn(buf, info->c->log_id, buflen); } } else if (info->rmain) { return cpystrn(buf, info->rmain->log_id, buflen); } return 0; } static int log_keepalives(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { if (!info->c) return 0; return apr_snprintf(buf, buflen, "%d", info->c->keepalives); } static int log_module_name(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { return cpystrn(buf, ap_find_module_short_name(info->module_index), buflen); } static int log_file_line(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { if (info->file == NULL) { return 0; } else { const char *file = info->file; #if defined(_OSD_POSIX) || defined(WIN32) || defined(__MVS__) char tmp[256]; char *e = strrchr(file, '/'); #ifdef WIN32 if (!e) { e = strrchr(file, '\\'); } #endif /* In OSD/POSIX, the compiler returns for __FILE__ * a string like: __FILE__="*POSIX(/usr/include/stdio.h)" * (it even returns an absolute path for sources in * the current directory). Here we try to strip this * down to the basename. */ if (e != NULL && e[1] != '\0') { apr_snprintf(tmp, sizeof(tmp), "%s", &e[1]); e = &tmp[strlen(tmp)-1]; if (*e == ')') { *e = '\0'; } file = tmp; } #else /* _OSD_POSIX || WIN32 */ const char *p; /* On Unix, __FILE__ may be an absolute path in a * VPATH build. */ if (file[0] == '/' && (p = ap_strrchr_c(file, '/')) != NULL) { file = p + 1; } #endif /*_OSD_POSIX || WIN32 */ return apr_snprintf(buf, buflen, "%s(%d)", file, info->line); } } static int log_apr_status(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { apr_status_t status = info->status; int len; if (!status) return 0; if (status < APR_OS_START_EAIERR) { len = apr_snprintf(buf, buflen, "(%d)", status); } else if (status < APR_OS_START_SYSERR) { len = apr_snprintf(buf, buflen, "(EAI %d)", status - APR_OS_START_EAIERR); } else if (status < 100000 + APR_OS_START_SYSERR) { len = apr_snprintf(buf, buflen, "(OS %d)", status - APR_OS_START_SYSERR); } else { len = apr_snprintf(buf, buflen, "(os 0x%08x)", status - APR_OS_START_SYSERR); } apr_strerror(status, buf + len, buflen - len); len += strlen(buf + len); return len; } static int log_server_name(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { if (info->r) return cpystrn(buf, ap_get_server_name((request_rec *)info->r), buflen); return 0; } static int log_virtual_host(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { if (info->s) return cpystrn(buf, info->s->server_hostname, buflen); return 0; } static int log_table_entry(const apr_table_t *table, const char *name, char *buf, int buflen) { #ifndef AP_UNSAFE_ERROR_LOG_UNESCAPED const char *value; char scratch[MAX_STRING_LEN]; if ((value = apr_table_get(table, name)) != NULL) { ap_escape_errorlog_item(scratch, value, MAX_STRING_LEN); return cpystrn(buf, scratch, buflen); } return 0; #else return cpystrn(buf, apr_table_get(table, name), buflen); #endif } static int log_header(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { if (info->r) return log_table_entry(info->r->headers_in, arg, buf, buflen); return 0; } static int log_note(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { /* XXX: maybe escaping the entry is not necessary for notes? */ if (info->r) return log_table_entry(info->r->notes, arg, buf, buflen); return 0; } static int log_env_var(const ap_errorlog_info *info, const char *arg, char *buf, int buflen) { if (info->r) return log_table_entry(info->r->subprocess_env, arg, buf, buflen); return 0; } static int core_generate_log_id(const conn_rec *c, const request_rec *r, const char **idstring) { apr_uint64_t id, tmp; pid_t pid; int len; char *encoded; if (r && r->request_time) { id = (apr_uint64_t)r->request_time; } else { id = (apr_uint64_t)apr_time_now(); } pid = getpid(); if (sizeof(pid_t) > 2) { tmp = pid; tmp = tmp << 40; id ^= tmp; pid = pid >> 24; tmp = pid; tmp = tmp << 56; id ^= tmp; } else { tmp = pid; tmp = tmp << 40; id ^= tmp; } #if APR_HAS_THREADS { apr_uintptr_t tmp2 = (apr_uintptr_t)c->current_thread; tmp = tmp2; tmp = tmp << 32; id ^= tmp; } #endif len = apr_base64_encode_len(sizeof(id)); /* includes trailing \0 */ encoded = apr_palloc(r ? r->pool : c->pool, len); apr_base64_encode(encoded, (char *)&id, sizeof(id)); /* Skip the last char, it is always '=' */ encoded[len - 2] = '\0'; *idstring = encoded; return OK; } static void add_log_id(const conn_rec *c, const request_rec *r) { const char **id; /* need to cast const away */ if (r) { id = &((request_rec *)r)->log_id; } else { id = &((conn_rec *)c)->log_id; } ap_run_generate_log_id(c, r, id); } AP_DECLARE(void) ap_register_log_hooks(apr_pool_t *p) { ap_hook_generate_log_id(core_generate_log_id, NULL, NULL, APR_HOOK_REALLY_LAST); ap_register_errorlog_handler(p, "a", log_remote_address, 0); ap_register_errorlog_handler(p, "A", log_local_address, 0); ap_register_errorlog_handler(p, "e", log_env_var, 0); ap_register_errorlog_handler(p, "E", log_apr_status, 0); ap_register_errorlog_handler(p, "F", log_file_line, 0); ap_register_errorlog_handler(p, "i", log_header, 0); ap_register_errorlog_handler(p, "k", log_keepalives, 0); ap_register_errorlog_handler(p, "l", log_loglevel, 0); ap_register_errorlog_handler(p, "L", log_log_id, 0); ap_register_errorlog_handler(p, "m", log_module_name, 0); ap_register_errorlog_handler(p, "n", log_note, 0); ap_register_errorlog_handler(p, "P", log_pid, 0); ap_register_errorlog_handler(p, "t", log_ctime, 0); ap_register_errorlog_handler(p, "T", log_tid, 0); ap_register_errorlog_handler(p, "v", log_virtual_host, 0); ap_register_errorlog_handler(p, "V", log_server_name, 0); } /* * This is used if no error log format is defined and during startup. * It automatically omits the timestamp if logging to syslog. */ static int do_errorlog_default(const ap_errorlog_info *info, char *buf, int buflen, int *errstr_start, int *errstr_end, const char *errstr_fmt, va_list args) { int len = 0; int field_start = 0; int item_len; #ifndef AP_UNSAFE_ERROR_LOG_UNESCAPED char scratch[MAX_STRING_LEN]; #endif if (!info->using_syslog && !info->startup) { buf[len++] = '['; len += log_ctime(info, "u", buf + len, buflen - len); buf[len++] = ']'; buf[len++] = ' '; } if (!info->startup) { buf[len++] = '['; len += log_module_name(info, NULL, buf + len, buflen - len); buf[len++] = ':'; len += log_loglevel(info, NULL, buf + len, buflen - len); len += cpystrn(buf + len, "] [pid ", buflen - len); len += log_pid(info, NULL, buf + len, buflen - len); #if APR_HAS_THREADS field_start = len; len += cpystrn(buf + len, ":tid ", buflen - len); item_len = log_tid(info, NULL, buf + len, buflen - len); if (!item_len) len = field_start; else len += item_len; #endif buf[len++] = ']'; buf[len++] = ' '; } if (info->level >= APLOG_DEBUG) { item_len = log_file_line(info, NULL, buf + len, buflen - len); if (item_len) { len += item_len; len += cpystrn(buf + len, ": ", buflen - len); } } if (info->status) { item_len = log_apr_status(info, NULL, buf + len, buflen - len); if (item_len) { len += item_len; len += cpystrn(buf + len, ": ", buflen - len); } } /* * useragent_ip/client_ip can be client or backend server. If we have * a scoreboard handle, it is likely a client. */ if (info->r) { len += apr_snprintf(buf + len, buflen - len, info->r->connection->sbh ? "[client %s:%d] " : "[remote %s:%d] ", info->r->useragent_ip, info->r->useragent_addr ? info->r->useragent_addr->port : 0); } else if (info->c) { len += apr_snprintf(buf + len, buflen - len, info->c->sbh ? "[client %s:%d] " : "[remote %s:%d] ", info->c->client_ip, info->c->client_addr ? info->c->client_addr->port : 0); } /* the actual error message */ *errstr_start = len; #ifndef AP_UNSAFE_ERROR_LOG_UNESCAPED if (apr_vsnprintf(scratch, MAX_STRING_LEN, errstr_fmt, args)) { len += ap_escape_errorlog_item(buf + len, scratch, buflen - len); } #else len += apr_vsnprintf(buf + len, buflen - len, errstr_fmt, args); #endif *errstr_end = len; field_start = len; len += cpystrn(buf + len, ", referer: ", buflen - len); item_len = log_header(info, "Referer", buf + len, buflen - len); if (item_len) len += item_len; else len = field_start; return len; } static int do_errorlog_format(apr_array_header_t *fmt, ap_errorlog_info *info, char *buf, int buflen, int *errstr_start, int *errstr_end, const char *err_fmt, va_list args) { #ifndef AP_UNSAFE_ERROR_LOG_UNESCAPED char scratch[MAX_STRING_LEN]; #endif int i; int len = 0; int field_start = 0; int skipping = 0; ap_errorlog_format_item *items = (ap_errorlog_format_item *)fmt->elts; AP_DEBUG_ASSERT(fmt->nelts > 0); for (i = 0; i < fmt->nelts; ++i) { ap_errorlog_format_item *item = &items[i]; if (item->flags & AP_ERRORLOG_FLAG_FIELD_SEP) { if (skipping) { skipping = 0; } else { field_start = len; } } if (item->flags & AP_ERRORLOG_FLAG_MESSAGE) { /* the actual error message */ *errstr_start = len; #ifndef AP_UNSAFE_ERROR_LOG_UNESCAPED if (apr_vsnprintf(scratch, MAX_STRING_LEN, err_fmt, args)) { len += ap_escape_errorlog_item(buf + len, scratch, buflen - len); } #else len += apr_vsnprintf(buf + len, buflen - len, err_fmt, args); #endif *errstr_end = len; } else if (skipping) { continue; } else if (info->level != -1 && (int)item->min_loglevel > info->level) { len = field_start; skipping = 1; } else { int item_len = (*item->func)(info, item->arg, buf + len, buflen - len); if (!item_len) { if (item->flags & AP_ERRORLOG_FLAG_REQUIRED) { /* required item is empty. skip whole line */ buf[0] = '\0'; return 0; } else if (item->flags & AP_ERRORLOG_FLAG_NULL_AS_HYPHEN) { buf[len++] = '-'; } else { len = field_start; skipping = 1; } } else { len += item_len; } } } return len; } static void write_logline(char *errstr, apr_size_t len, apr_file_t *logf, int level) { /* NULL if we are logging to syslog */ if (logf) { /* Truncate for the terminator (as apr_snprintf does) */ if (len > MAX_STRING_LEN - sizeof(APR_EOL_STR)) { len = MAX_STRING_LEN - sizeof(APR_EOL_STR); } strcpy(errstr + len, APR_EOL_STR); apr_file_puts(errstr, logf); apr_file_flush(logf); } #ifdef HAVE_SYSLOG else { syslog(level < LOG_PRIMASK ? level : APLOG_DEBUG, "%.*s", (int)len, errstr); } #endif } static void log_error_core(const char *file, int line, int module_index, int level, apr_status_t status, const server_rec *s, const conn_rec *c, const request_rec *r, apr_pool_t *pool, const char *fmt, va_list args) { char errstr[MAX_STRING_LEN]; apr_file_t *logf = NULL; int level_and_mask = level & APLOG_LEVELMASK; const request_rec *rmain = NULL; core_server_config *sconf = NULL; ap_errorlog_info info; /* do we need to log once-per-req or once-per-conn info? */ int log_conn_info = 0, log_req_info = 0; apr_array_header_t **lines = NULL; int done = 0; int line_number = 0; if (r) { AP_DEBUG_ASSERT(r->connection != NULL); c = r->connection; } if (s == NULL) { /* * If we are doing stderr logging (startup), don't log messages that are * above the default server log level unless it is a startup/shutdown * notice */ #ifndef DEBUG if ((level_and_mask != APLOG_NOTICE) && (level_and_mask > ap_default_loglevel)) { return; } #endif logf = stderr_log; } else { int configured_level = r ? ap_get_request_module_loglevel(r, module_index) : c ? ap_get_conn_server_module_loglevel(c, s, module_index) : ap_get_server_module_loglevel(s, module_index); if (s->error_log) { /* * If we are doing normal logging, don't log messages that are * above the module's log level unless it is a startup/shutdown notice */ if ((level_and_mask != APLOG_NOTICE) && (level_and_mask > configured_level)) { return; } logf = s->error_log; } else { /* * If we are doing syslog logging, don't log messages that are * above the module's log level (including a startup/shutdown notice) */ if (level_and_mask > configured_level) { return; } } /* the faked server_rec from mod_cgid does not have s->module_config */ if (s->module_config) { sconf = ap_get_core_module_config(s->module_config); if (c && !c->log_id) { add_log_id(c, NULL); if (sconf->error_log_conn && sconf->error_log_conn->nelts > 0) log_conn_info = 1; } if (r) { if (r->main) rmain = r->main; else rmain = r; if (!rmain->log_id) { /* XXX: do we need separate log ids for subrequests? */ if (sconf->error_log_req && sconf->error_log_req->nelts > 0) log_req_info = 1; /* * XXX: potential optimization: only create log id if %L is * XXX: actually used */ add_log_id(c, rmain); } } } } info.s = s; info.c = c; info.pool = pool; info.file = NULL; info.line = 0; info.status = 0; info.using_syslog = (logf == NULL); info.startup = ((level & APLOG_STARTUP) == APLOG_STARTUP); info.format = fmt; while (!done) { apr_array_header_t *log_format; int len = 0, errstr_start = 0, errstr_end = 0; /* XXX: potential optimization: format common prefixes only once */ if (log_conn_info) { /* once-per-connection info */ if (line_number == 0) { lines = (apr_array_header_t **)sconf->error_log_conn->elts; info.r = NULL; info.rmain = NULL; info.level = -1; info.module_index = APLOG_NO_MODULE; } log_format = lines[line_number++]; if (line_number == sconf->error_log_conn->nelts) { /* this is the last line of once-per-connection info */ line_number = 0; log_conn_info = 0; } } else if (log_req_info) { /* once-per-request info */ if (line_number == 0) { lines = (apr_array_header_t **)sconf->error_log_req->elts; info.r = rmain; info.rmain = rmain; info.level = -1; info.module_index = APLOG_NO_MODULE; } log_format = lines[line_number++]; if (line_number == sconf->error_log_req->nelts) { /* this is the last line of once-per-request info */ line_number = 0; log_req_info = 0; } } else { /* the actual error message */ info.r = r; info.rmain = rmain; info.level = level_and_mask; info.module_index = module_index; info.file = file; info.line = line; info.status = status; log_format = sconf ? sconf->error_log_format : NULL; done = 1; } /* * prepare and log one line */ if (log_format && !info.startup) { len += do_errorlog_format(log_format, &info, errstr + len, MAX_STRING_LEN - len, &errstr_start, &errstr_end, fmt, args); } else { len += do_errorlog_default(&info, errstr + len, MAX_STRING_LEN - len, &errstr_start, &errstr_end, fmt, args); } if (!*errstr) { /* * Don't log empty lines. This can happen with once-per-conn/req * info if an item with AP_ERRORLOG_FLAG_REQUIRED is NULL. */ continue; } write_logline(errstr, len, logf, level_and_mask); if (done) { /* * We don't call the error_log hook for per-request/per-conn * lines, and we only pass the actual log message, not the * prefix and suffix. */ errstr[errstr_end] = '\0'; ap_run_error_log(&info, errstr + errstr_start); } *errstr = '\0'; } } /* For internal calls to log_error_core with self-composed arg lists */ static void log_error_va_glue(const char *file, int line, int module_index, int level, apr_status_t status, const server_rec *s, const conn_rec *c, const request_rec *r, apr_pool_t *pool, const char *fmt, ...) { va_list args; va_start(args, fmt); log_error_core(file, line, module_index, level, status, s, c, r, pool, fmt, args); va_end(args); } AP_DECLARE(void) ap_log_error_(const char *file, int line, int module_index, int level, apr_status_t status, const server_rec *s, const char *fmt, ...) { va_list args; va_start(args, fmt); log_error_core(file, line, module_index, level, status, s, NULL, NULL, NULL, fmt, args); va_end(args); } AP_DECLARE(void) ap_log_perror_(const char *file, int line, int module_index, int level, apr_status_t status, apr_pool_t *p, const char *fmt, ...) { va_list args; va_start(args, fmt); log_error_core(file, line, module_index, level, status, NULL, NULL, NULL, p, fmt, args); va_end(args); } AP_DECLARE(void) ap_log_rerror_(const char *file, int line, int module_index, int level, apr_status_t status, const request_rec *r, const char *fmt, ...) { va_list args; va_start(args, fmt); log_error_core(file, line, module_index, level, status, r->server, NULL, r, NULL, fmt, args); /* * IF APLOG_TOCLIENT is set, * AND the error level is 'warning' or more severe, * AND there isn't already error text associated with this request, * THEN make the message text available to ErrorDocument and * other error processors. */ va_end(args); va_start(args,fmt); if ((level & APLOG_TOCLIENT) && ((level & APLOG_LEVELMASK) <= APLOG_WARNING) && (apr_table_get(r->notes, "error-notes") == NULL)) { apr_table_setn(r->notes, "error-notes", ap_escape_html(r->pool, apr_pvsprintf(r->pool, fmt, args))); } va_end(args); } AP_DECLARE(void) ap_log_cserror_(const char *file, int line, int module_index, int level, apr_status_t status, const conn_rec *c, const server_rec *s, const char *fmt, ...) { va_list args; va_start(args, fmt); log_error_core(file, line, module_index, level, status, s, c, NULL, NULL, fmt, args); va_end(args); } AP_DECLARE(void) ap_log_cerror_(const char *file, int line, int module_index, int level, apr_status_t status, const conn_rec *c, const char *fmt, ...) { va_list args; va_start(args, fmt); log_error_core(file, line, module_index, level, status, c->base_server, c, NULL, NULL, fmt, args); va_end(args); } #define BYTES_LOGGED_PER_LINE 16 #define LOG_BYTES_BUFFER_SIZE (BYTES_LOGGED_PER_LINE * 3 + 2) static void fmt_data(unsigned char *buf, const void *vdata, apr_size_t len, apr_size_t *off) { const unsigned char *data = (const unsigned char *)vdata; unsigned char *chars; unsigned char *hex; apr_size_t this_time = 0; memset(buf, ' ', LOG_BYTES_BUFFER_SIZE - 1); buf[LOG_BYTES_BUFFER_SIZE - 1] = '\0'; chars = buf; /* start character dump here */ hex = buf + BYTES_LOGGED_PER_LINE + 1; /* start hex dump here */ while (*off < len && this_time < BYTES_LOGGED_PER_LINE) { unsigned char c = data[*off]; if (apr_isprint(c) && c != '\\') { /* backslash will be escaped later, which throws * off the formatting */ *chars = c; } else { *chars = '.'; } if ((c >> 4) >= 10) { *hex = 'a' + ((c >> 4) - 10); } else { *hex = '0' + (c >> 4); } if ((c & 0x0F) >= 10) { *(hex + 1) = 'a' + ((c & 0x0F) - 10); } else { *(hex + 1) = '0' + (c & 0x0F); } chars += 1; hex += 2; *off += 1; ++this_time; } } static void log_data_core(const char *file, int line, int module_index, int level, const server_rec *s, const conn_rec *c, const request_rec *r, const char *label, const void *data, apr_size_t len, unsigned int flags) { unsigned char buf[LOG_BYTES_BUFFER_SIZE]; apr_size_t off; char prefix[20]; if (!(flags & AP_LOG_DATA_SHOW_OFFSET)) { prefix[0] = '\0'; } if (len > 0xffff) { /* bug in caller? */ len = 0xffff; } if (label) { log_error_va_glue(file, line, module_index, level, APR_SUCCESS, s, c, r, NULL, "%s (%" APR_SIZE_T_FMT " bytes)", label, len); } off = 0; while (off < len) { if (flags & AP_LOG_DATA_SHOW_OFFSET) { apr_snprintf(prefix, sizeof prefix, "%04x: ", (unsigned int)off); } fmt_data(buf, data, len, &off); log_error_va_glue(file, line, module_index, level, APR_SUCCESS, s, c, r, NULL, "%s%s", prefix, buf); } } AP_DECLARE(void) ap_log_data_(const char *file, int line, int module_index, int level, const server_rec *s, const char *label, const void *data, apr_size_t len, unsigned int flags) { log_data_core(file, line, module_index, level, s, NULL, NULL, label, data, len, flags); } AP_DECLARE(void) ap_log_rdata_(const char *file, int line, int module_index, int level, const request_rec *r, const char *label, const void *data, apr_size_t len, unsigned int flags) { log_data_core(file, line, module_index, level, r->server, NULL, r, label, data, len, flags); } AP_DECLARE(void) ap_log_cdata_(const char *file, int line, int module_index, int level, const conn_rec *c, const char *label, const void *data, apr_size_t len, unsigned int flags) { log_data_core(file, line, module_index, level, c->base_server, c, NULL, label, data, len, flags); } AP_DECLARE(void) ap_log_csdata_(const char *file, int line, int module_index, int level, const conn_rec *c, const server_rec *s, const char *label, const void *data, apr_size_t len, unsigned int flags) { log_data_core(file, line, module_index, level, s, c, NULL, label, data, len, flags); } AP_DECLARE(void) ap_log_command_line(apr_pool_t *plog, server_rec *s) { int i; process_rec *process = s->process; char *result; int len_needed = 0; /* Piece together the command line from the pieces * in process->argv, with spaces in between. */ for (i = 0; i < process->argc; i++) { len_needed += strlen(process->argv[i]) + 1; } result = (char *) apr_palloc(plog, len_needed); *result = '\0'; for (i = 0; i < process->argc; i++) { strcat(result, process->argv[i]); if ((i+1)< process->argc) { strcat(result, " "); } } ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, s, APLOGNO(00094) "Command line: '%s'", result); } /* grab bag function to log commonly logged and shared info */ AP_DECLARE(void) ap_log_mpm_common(server_rec *s) { ap_log_error(APLOG_MARK, APLOG_DEBUG , 0, s, APLOGNO(02639) "Using SO_REUSEPORT: %s (%d)", ap_have_so_reuseport ? "yes" : "no", ap_num_listen_buckets); } AP_DECLARE(void) ap_remove_pid(apr_pool_t *p, const char *rel_fname) { apr_status_t rv; const char *fname = ap_server_root_relative(p, rel_fname); if (fname != NULL) { rv = apr_file_remove(fname, p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_server_conf, APLOGNO(00095) "failed to remove PID file %s", fname); } else { ap_log_error(APLOG_MARK, APLOG_INFO, 0, ap_server_conf, APLOGNO(00096) "removed PID file %s (pid=%" APR_PID_T_FMT ")", fname, getpid()); } } } AP_DECLARE(void) ap_log_pid(apr_pool_t *p, const char *filename) { apr_file_t *pid_file = NULL; apr_finfo_t finfo; static pid_t saved_pid = -1; pid_t mypid; apr_status_t rv; const char *fname; if (!filename) { return; } fname = ap_server_root_relative(p, filename); if (!fname) { ap_log_error(APLOG_MARK, APLOG_STARTUP|APLOG_CRIT, APR_EBADPATH, ap_server_conf, APLOGNO(00097) "Invalid PID file path %s, ignoring.", filename); return; } mypid = getpid(); if (mypid != saved_pid && apr_stat(&finfo, fname, APR_FINFO_MTIME, p) == APR_SUCCESS) { /* AP_SIG_GRACEFUL and HUP call this on each restart. * Only warn on first time through for this pid. * * XXX: Could just write first time through too, although * that may screw up scripts written to do something * based on the last modification time of the pid file. */ ap_log_perror(APLOG_MARK, APLOG_WARNING, 0, p, APLOGNO(00098) "pid file %s overwritten -- Unclean " "shutdown of previous Apache run?", fname); } if ((rv = apr_file_open(&pid_file, fname, APR_WRITE | APR_CREATE | APR_TRUNCATE, APR_UREAD | APR_UWRITE | APR_GREAD | APR_WREAD, p)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, NULL, APLOGNO(00099) "could not create %s", fname); ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(00100) "%s: could not log pid to file %s", ap_server_argv0, fname); exit(1); } apr_file_printf(pid_file, "%" APR_PID_T_FMT APR_EOL_STR, mypid); apr_file_close(pid_file); saved_pid = mypid; } AP_DECLARE(apr_status_t) ap_read_pid(apr_pool_t *p, const char *filename, pid_t *mypid) { const apr_size_t BUFFER_SIZE = sizeof(long) * 3 + 2; /* see apr_ltoa */ apr_file_t *pid_file = NULL; apr_status_t rv; const char *fname; char *buf, *endptr; apr_size_t bytes_read; if (!filename) { return APR_EGENERAL; } fname = ap_server_root_relative(p, filename); if (!fname) { ap_log_error(APLOG_MARK, APLOG_STARTUP|APLOG_CRIT, APR_EBADPATH, ap_server_conf, APLOGNO(00101) "Invalid PID file path %s, ignoring.", filename); return APR_EGENERAL; } rv = apr_file_open(&pid_file, fname, APR_READ, APR_OS_DEFAULT, p); if (rv != APR_SUCCESS) { return rv; } buf = apr_palloc(p, BUFFER_SIZE); rv = apr_file_read_full(pid_file, buf, BUFFER_SIZE - 1, &bytes_read); if (rv != APR_SUCCESS && rv != APR_EOF) { return rv; } /* If we fill the buffer, we're probably reading a corrupt pid file. * To be nice, let's also ensure the first char is a digit. */ if (bytes_read == 0 || bytes_read == BUFFER_SIZE - 1 || !apr_isdigit(*buf)) { return APR_EGENERAL; } buf[bytes_read] = '\0'; *mypid = strtol(buf, &endptr, 10); apr_file_close(pid_file); return APR_SUCCESS; } AP_DECLARE(void) ap_log_assert(const char *szExp, const char *szFile, int nLine) { char time_str[APR_CTIME_LEN]; apr_ctime(time_str, apr_time_now()); ap_log_error(APLOG_MARK, APLOG_CRIT, 0, NULL, APLOGNO(00102) "[%s] file %s, line %d, assertion \"%s\" failed", time_str, szFile, nLine, szExp); #if defined(WIN32) DebugBreak(); #else /* unix assert does an abort leading to a core dump */ abort(); #endif } /* piped log support */ #ifdef AP_HAVE_RELIABLE_PIPED_LOGS /* forward declaration */ static void piped_log_maintenance(int reason, void *data, apr_wait_t status); /* Spawn the piped logger process pl->program. */ static apr_status_t piped_log_spawn(piped_log *pl) { apr_procattr_t *procattr; apr_proc_t *procnew = NULL; apr_status_t status; if (((status = apr_procattr_create(&procattr, pl->p)) != APR_SUCCESS) || ((status = apr_procattr_dir_set(procattr, ap_server_root)) != APR_SUCCESS) || ((status = apr_procattr_cmdtype_set(procattr, pl->cmdtype)) != APR_SUCCESS) || ((status = apr_procattr_child_in_set(procattr, pl->read_fd, pl->write_fd)) != APR_SUCCESS) || ((status = apr_procattr_child_errfn_set(procattr, log_child_errfn)) != APR_SUCCESS) || ((status = apr_procattr_error_check_set(procattr, 1)) != APR_SUCCESS)) { /* Something bad happened, give up and go away. */ ap_log_error(APLOG_MARK, APLOG_STARTUP, status, ap_server_conf, APLOGNO(00103) "piped_log_spawn: unable to setup child process '%s'", pl->program); } else { char **args; apr_tokenize_to_argv(pl->program, &args, pl->p); procnew = apr_pcalloc(pl->p, sizeof(apr_proc_t)); status = apr_proc_create(procnew, args[0], (const char * const *) args, NULL, procattr, pl->p); if (status == APR_SUCCESS) { pl->pid = procnew; /* procnew->in was dup2'd from pl->write_fd; * since the original fd is still valid, close the copy to * avoid a leak. */ apr_file_close(procnew->in); procnew->in = NULL; apr_proc_other_child_register(procnew, piped_log_maintenance, pl, pl->write_fd, pl->p); close_handle_in_child(pl->p, pl->read_fd); } else { /* Something bad happened, give up and go away. */ ap_log_error(APLOG_MARK, APLOG_STARTUP, status, ap_server_conf, APLOGNO(00104) "unable to start piped log program '%s'", pl->program); } } return status; } static void piped_log_maintenance(int reason, void *data, apr_wait_t status) { piped_log *pl = data; apr_status_t rv; int mpm_state; switch (reason) { case APR_OC_REASON_DEATH: case APR_OC_REASON_LOST: pl->pid = NULL; /* in case we don't get it going again, this * tells other logic not to try to kill it */ apr_proc_other_child_unregister(pl); rv = ap_mpm_query(AP_MPMQ_MPM_STATE, &mpm_state); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00105) "can't query MPM state; not restarting " "piped log program '%s'", pl->program); } else if (mpm_state != AP_MPMQ_STOPPING) { ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00106) "piped log program '%s' failed unexpectedly", pl->program); if ((rv = piped_log_spawn(pl)) != APR_SUCCESS) { /* what can we do? This could be the error log we're having * problems opening up... */ ap_log_error(APLOG_MARK, APLOG_STARTUP, rv, NULL, APLOGNO(00107) "piped_log_maintenance: unable to respawn '%s'", pl->program); } } break; case APR_OC_REASON_UNWRITABLE: /* We should not kill off the pipe here, since it may only be full. * If it really is locked, we should kill it off manually. */ break; case APR_OC_REASON_RESTART: if (pl->pid != NULL) { apr_proc_kill(pl->pid, SIGTERM); pl->pid = NULL; } break; case APR_OC_REASON_UNREGISTER: break; } } static apr_status_t piped_log_cleanup_for_exec(void *data) { piped_log *pl = data; apr_file_close(pl->read_fd); apr_file_close(pl->write_fd); return APR_SUCCESS; } static apr_status_t piped_log_cleanup(void *data) { piped_log *pl = data; if (pl->pid != NULL) { apr_proc_kill(pl->pid, SIGTERM); } return piped_log_cleanup_for_exec(data); } AP_DECLARE(piped_log *) ap_open_piped_log_ex(apr_pool_t *p, const char *program, apr_cmdtype_e cmdtype) { piped_log *pl; pl = apr_palloc(p, sizeof (*pl)); pl->p = p; pl->program = apr_pstrdup(p, program); pl->pid = NULL; pl->cmdtype = cmdtype; if (apr_file_pipe_create_ex(&pl->read_fd, &pl->write_fd, APR_FULL_BLOCK, p) != APR_SUCCESS) { return NULL; } apr_pool_cleanup_register(p, pl, piped_log_cleanup, piped_log_cleanup_for_exec); if (piped_log_spawn(pl) != APR_SUCCESS) { apr_pool_cleanup_kill(p, pl, piped_log_cleanup); apr_file_close(pl->read_fd); apr_file_close(pl->write_fd); return NULL; } return pl; } #else /* !AP_HAVE_RELIABLE_PIPED_LOGS */ static apr_status_t piped_log_cleanup(void *data) { piped_log *pl = data; apr_file_close(pl->write_fd); return APR_SUCCESS; } AP_DECLARE(piped_log *) ap_open_piped_log_ex(apr_pool_t *p, const char *program, apr_cmdtype_e cmdtype) { piped_log *pl; apr_file_t *dummy = NULL; int rc; rc = log_child(p, program, &dummy, cmdtype, 0); if (rc != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_STARTUP, rc, ap_server_conf, APLOGNO(00108) "Couldn't start piped log process '%s'.", (program == NULL) ? "NULL" : program); return NULL; } pl = apr_palloc(p, sizeof (*pl)); pl->p = p; pl->read_fd = NULL; pl->write_fd = dummy; apr_pool_cleanup_register(p, pl, piped_log_cleanup, piped_log_cleanup); return pl; } #endif AP_DECLARE(piped_log *) ap_open_piped_log(apr_pool_t *p, const char *program) { apr_cmdtype_e cmdtype = APR_PROGRAM_ENV; /* In 2.4 favor PROGRAM_ENV, accept "||prog" syntax for compatibility * and "|$cmd" to override the default. * Any 2.2 backport would continue to favor SHELLCMD_ENV so there * accept "||prog" to override, and "|$cmd" to ease conversion. */ if (*program == '|') ++program; if (*program == '$') { cmdtype = APR_SHELLCMD_ENV; ++program; } return ap_open_piped_log_ex(p, program, cmdtype); } AP_DECLARE(void) ap_close_piped_log(piped_log *pl) { apr_pool_cleanup_run(pl->p, pl, piped_log_cleanup); } AP_DECLARE(const char *) ap_parse_log_level(const char *str, int *val) { char *err = "Log level keyword must be one of emerg/alert/crit/error/warn/" "notice/info/debug/trace1/.../trace8"; int i = 0; if (str == NULL) return err; while (priorities[i].t_name != NULL) { if (!strcasecmp(str, priorities[i].t_name)) { *val = priorities[i].t_val; return NULL; } i++; } return err; } AP_IMPLEMENT_HOOK_VOID(error_log, (const ap_errorlog_info *info, const char *errstr), (info, errstr)) AP_IMPLEMENT_HOOK_RUN_FIRST(int, generate_log_id, (const conn_rec *c, const request_rec *r, const char **id), (c, r, id), DECLINED) httpd-2.4.41/server/util_regex.c0000644000000000000500000001556312647431153015075 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr.h" #include "apr_lib.h" #include "apr_pools.h" #include "apr_strings.h" #include "ap_config.h" #include "ap_regex.h" #include "httpd.h" static apr_status_t rxplus_cleanup(void *preg) { ap_regfree((ap_regex_t *) preg); return APR_SUCCESS; } AP_DECLARE(ap_rxplus_t*) ap_rxplus_compile(apr_pool_t *pool, const char *pattern) { /* perl style patterns * add support for more as and when wanted * substitute: s/rx/subs/ * match: m/rx/ or just /rx/ */ /* allow any nonalnum delimiter as first or second char. * If we ever use this with non-string pattern we'll need an extra check */ const char *endp = 0; const char *str = pattern; const char *rxstr; ap_rxplus_t *ret = apr_pcalloc(pool, sizeof(ap_rxplus_t)); char delim = 0; enum { SUBSTITUTE = 's', MATCH = 'm'} action = MATCH; if (!apr_isalnum(pattern[0])) { delim = *str++; } else if (pattern[0] == 's' && !apr_isalnum(pattern[1])) { action = SUBSTITUTE; delim = pattern[1]; str += 2; } else if (pattern[0] == 'm' && !apr_isalnum(pattern[1])) { delim = pattern[1]; str += 2; } /* TODO: support perl's after/before */ /* FIXME: fix these simplminded delims */ /* we think there's a delimiter. Allow for it not to be if unmatched */ if (delim) { endp = ap_strchr_c(str, delim); } if (!endp) { /* there's no delim or flags */ if (ap_regcomp(&ret->rx, pattern, 0) == 0) { apr_pool_cleanup_register(pool, &ret->rx, rxplus_cleanup, apr_pool_cleanup_null); return ret; } else { return NULL; } } /* We have a delimiter. Use it to extract the regexp */ rxstr = apr_pstrmemdup(pool, str, endp-str); /* If it's a substitution, we need the replacement string * TODO: possible future enhancement - support other parsing * in the replacement string. */ if (action == SUBSTITUTE) { str = endp+1; if (!*str || (endp = ap_strchr_c(str, delim), !endp)) { /* missing replacement string is an error */ return NULL; } ret->subs = apr_pstrmemdup(pool, str, endp-str); } /* anything after the current delimiter is flags */ while (*++endp) { switch (*endp) { case 'i': ret->flags |= AP_REG_ICASE; break; case 'm': ret->flags |= AP_REG_NEWLINE; break; case 'n': ret->flags |= AP_REG_NOMEM; break; case 'g': ret->flags |= AP_REG_MULTI; break; case 's': ret->flags |= AP_REG_DOTALL; break; case '^': ret->flags |= AP_REG_NOTBOL; break; case '$': ret->flags |= AP_REG_NOTEOL; break; default: break; /* we should probably be stricter here */ } } if (ap_regcomp(&ret->rx, rxstr, ret->flags) == 0) { apr_pool_cleanup_register(pool, &ret->rx, rxplus_cleanup, apr_pool_cleanup_null); } else { return NULL; } if (!(ret->flags & AP_REG_NOMEM)) { /* count size of memory required, starting at 1 for the whole-match * Simpleminded should be fine 'cos regcomp already checked syntax */ ret->nmatch = 1; while (*rxstr) { switch (*rxstr++) { case '\\': /* next char is escaped - skip it */ if (*rxstr != 0) { ++rxstr; } break; case '(': /* unescaped bracket implies memory */ ++ret->nmatch; break; default: break; } } ret->pmatch = apr_palloc(pool, ret->nmatch*sizeof(ap_regmatch_t)); } return ret; } AP_DECLARE(int) ap_rxplus_exec(apr_pool_t *pool, ap_rxplus_t *rx, const char *pattern, char **newpattern) { int ret = 1; int startl, oldl, newl, diffsz; const char *remainder; char *subs; /* snrf process_regexp from mod_headers */ if (ap_regexec(&rx->rx, pattern, rx->nmatch, rx->pmatch, rx->flags) != 0) { rx->match = NULL; return 0; /* no match, nothing to do */ } rx->match = pattern; if (rx->subs) { *newpattern = ap_pregsub(pool, rx->subs, pattern, rx->nmatch, rx->pmatch); if (!*newpattern) { return 0; /* FIXME - should we do more to handle error? */ } startl = rx->pmatch[0].rm_so; oldl = rx->pmatch[0].rm_eo - startl; newl = strlen(*newpattern); diffsz = newl - oldl; remainder = pattern + startl + oldl; if (rx->flags & AP_REG_MULTI) { /* recurse to do any further matches */ ret += ap_rxplus_exec(pool, rx, remainder, &subs); if (ret > 1) { /* a further substitution happened */ diffsz += strlen(subs) - strlen(remainder); remainder = subs; } } subs = apr_palloc(pool, strlen(pattern) + 1 + diffsz); memcpy(subs, pattern, startl); memcpy(subs+startl, *newpattern, newl); strcpy(subs+startl+newl, remainder); *newpattern = subs; } return ret; } #ifdef DOXYGEN AP_DECLARE(int) ap_rxplus_nmatch(ap_rxplus_t *rx) { return (rx->match != NULL) ? rx->nmatch : 0; } #endif /* If this blows up on you, see the notes in the header/apidoc * rx->match is a pointer and it's your responsibility to ensure * it hasn't gone out-of-scope since the last ap_rxplus_exec */ AP_DECLARE(void) ap_rxplus_match(ap_rxplus_t *rx, int n, int *len, const char **match) { if (n >= 0 && n < ap_rxplus_nmatch(rx)) { *match = rx->match + rx->pmatch[n].rm_so; *len = rx->pmatch[n].rm_eo - rx->pmatch[n].rm_so; } else { *len = -1; *match = NULL; } } AP_DECLARE(char*) ap_rxplus_pmatch(apr_pool_t *pool, ap_rxplus_t *rx, int n) { int len; const char *match; ap_rxplus_match(rx, n, &len, &match); return apr_pstrndup(pool, match, len); } httpd-2.4.41/server/util_cookies.c0000644000000000000500000002161313012316274015401 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "util_cookies.h" #include "apr_lib.h" #include "apr_strings.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #define LOG_PREFIX "ap_cookie: " /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX /** * Write an RFC2109 compliant cookie. * * @param r The request * @param name The name of the cookie. * @param val The value to place in the cookie. * @param attrs The string containing additional cookie attributes. If NULL, the * DEFAULT_ATTRS will be used. * @param maxage If non zero, a Max-Age header will be added to the cookie. */ AP_DECLARE(apr_status_t) ap_cookie_write(request_rec * r, const char *name, const char *val, const char *attrs, long maxage, ...) { const char *buffer; const char *rfc2109; apr_table_t *t; va_list vp; /* handle expiry */ buffer = ""; if (maxage) { buffer = apr_pstrcat(r->pool, "Max-Age=", apr_ltoa(r->pool, maxage), ";", NULL); } /* create RFC2109 compliant cookie */ rfc2109 = apr_pstrcat(r->pool, name, "=", val, ";", buffer, attrs && *attrs ? attrs : DEFAULT_ATTRS, NULL); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00007) LOG_PREFIX "user '%s' set cookie: '%s'", r->user, rfc2109); /* write the cookie to the header table(s) provided */ va_start(vp, maxage); while ((t = va_arg(vp, apr_table_t *))) { apr_table_addn(t, SET_COOKIE, rfc2109); } va_end(vp); return APR_SUCCESS; } /** * Write an RFC2965 compliant cookie. * * @param r The request * @param name2 The name of the cookie. * @param val The value to place in the cookie. * @param attrs2 The string containing additional cookie attributes. If NULL, the * DEFAULT_ATTRS will be used. * @param maxage If non zero, a Max-Age header will be added to the cookie. */ AP_DECLARE(apr_status_t) ap_cookie_write2(request_rec * r, const char *name2, const char *val, const char *attrs2, long maxage, ...) { const char *buffer; const char *rfc2965; apr_table_t *t; va_list vp; /* handle expiry */ buffer = ""; if (maxage) { buffer = apr_pstrcat(r->pool, "Max-Age=", apr_ltoa(r->pool, maxage), ";", NULL); } /* create RFC2965 compliant cookie */ rfc2965 = apr_pstrcat(r->pool, name2, "=", val, ";", buffer, attrs2 && *attrs2 ? attrs2 : DEFAULT_ATTRS, NULL); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00008) LOG_PREFIX "user '%s' set cookie2: '%s'", r->user, rfc2965); /* write the cookie to the header table(s) provided */ va_start(vp, maxage); while ((t = va_arg(vp, apr_table_t *))) { apr_table_addn(t, SET_COOKIE2, rfc2965); } va_end(vp); return APR_SUCCESS; } /** * Remove an RFC2109 compliant cookie. * * @param r The request * @param name The name of the cookie. */ AP_DECLARE(apr_status_t) ap_cookie_remove(request_rec * r, const char *name, const char *attrs, ...) { apr_table_t *t; va_list vp; /* create RFC2109 compliant cookie */ const char *rfc2109 = apr_pstrcat(r->pool, name, "=;Max-Age=0;", attrs ? attrs : CLEAR_ATTRS, NULL); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00009) LOG_PREFIX "user '%s' removed cookie: '%s'", r->user, rfc2109); /* write the cookie to the header table(s) provided */ va_start(vp, attrs); while ((t = va_arg(vp, apr_table_t *))) { apr_table_addn(t, SET_COOKIE, rfc2109); } va_end(vp); return APR_SUCCESS; } /** * Remove an RFC2965 compliant cookie. * * @param r The request * @param name2 The name of the cookie. */ AP_DECLARE(apr_status_t) ap_cookie_remove2(request_rec * r, const char *name2, const char *attrs2, ...) { apr_table_t *t; va_list vp; /* create RFC2965 compliant cookie */ const char *rfc2965 = apr_pstrcat(r->pool, name2, "=;Max-Age=0;", attrs2 ? attrs2 : CLEAR_ATTRS, NULL); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00010) LOG_PREFIX "user '%s' removed cookie2: '%s'", r->user, rfc2965); /* write the cookie to the header table(s) provided */ va_start(vp, attrs2); while ((t = va_arg(vp, apr_table_t *))) { apr_table_addn(t, SET_COOKIE2, rfc2965); } va_end(vp); return APR_SUCCESS; } /* Iterate through the cookies, isolate our cookie and then remove it. * * If our cookie appears two or more times, but with different values, * remove it twice and set the duplicated flag to true. Remove any * $path or other attributes following our cookie if present. If we end * up with an empty cookie, remove the whole header. */ static int extract_cookie_line(void *varg, const char *key, const char *val) { ap_cookie_do *v = varg; char *last1, *last2; char *cookie = apr_pstrdup(v->r->pool, val); const char *name = apr_pstrcat(v->r->pool, v->name ? v->name : "", "=", NULL); apr_size_t len = strlen(name); const char *new_cookie = ""; const char *comma = ","; char *next1; const char *semi = ";"; char *next2; const char *sep = ""; int cookies = 0; /* find the cookie called name */ int eat = 0; next1 = apr_strtok(cookie, comma, &last1); while (next1) { next2 = apr_strtok(next1, semi, &last2); while (next2) { char *trim = next2; while (apr_isspace(*trim)) { trim++; } if (!strncmp(trim, name, len)) { if (v->encoded) { if (strcmp(v->encoded, trim + len)) { v->duplicated = 1; } } v->encoded = apr_pstrdup(v->r->pool, trim + len); eat = 1; } else { if (*trim != '$') { cookies++; eat = 0; } if (!eat) { new_cookie = apr_pstrcat(v->r->pool, new_cookie, sep, next2, NULL); } } next2 = apr_strtok(NULL, semi, &last2); sep = semi; } next1 = apr_strtok(NULL, comma, &last1); sep = comma; } /* any cookies left over? */ if (cookies) { apr_table_addn(v->new_cookies, key, new_cookie); } return 1; } /** * Read a cookie called name, placing its value in val. * * Both the Cookie and Cookie2 headers are scanned for the cookie. * * If the cookie is duplicated, this function returns APR_EGENERAL. If found, * and if remove is non zero, the cookie will be removed from the headers, and * thus kept private from the backend. */ AP_DECLARE(apr_status_t) ap_cookie_read(request_rec * r, const char *name, const char **val, int remove) { ap_cookie_do v; v.r = r; v.encoded = NULL; v.new_cookies = apr_table_make(r->pool, 10); v.duplicated = 0; v.name = name; apr_table_do(extract_cookie_line, &v, r->headers_in, "Cookie", "Cookie2", NULL); if (v.duplicated) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00011) LOG_PREFIX "client submitted cookie '%s' more than once: %s", v.name, r->uri); return APR_EGENERAL; } /* remove our cookie(s), and replace them */ if (remove) { apr_table_unset(r->headers_in, "Cookie"); apr_table_unset(r->headers_in, "Cookie2"); r->headers_in = apr_table_overlay(r->pool, r->headers_in, v.new_cookies); } *val = v.encoded; return APR_SUCCESS; } /** * Sanity check a given string that it exists, is not empty, * and does not contain the special characters '=', ';' and '&'. * * It is used to sanity check the cookie names. */ AP_DECLARE(apr_status_t) ap_cookie_check_string(const char *string) { if (!string || !*string || ap_strchr_c(string, '=') || ap_strchr_c(string, '&') || ap_strchr_c(string, ';')) { return APR_EGENERAL; } return APR_SUCCESS; } httpd-2.4.41/server/util_debug.c0000644000000000000500000001504513226425175015045 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #define APR_WANT_STRFUNC #include "apr_want.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" /* Possibly get rid of the macros we defined in httpd.h */ #if defined(strchr) #undef strchr #endif #if defined (strrchr) #undef strrchr #endif #if defined (strstr) #undef strstr #endif #if defined(ap_strchr) #undef ap_strchr AP_DECLARE(char *) ap_strchr(char *s, int c); #endif AP_DECLARE(char *) ap_strchr(char *s, int c) { return strchr(s,c); } #if defined(ap_strchr_c) #undef ap_strchr_c AP_DECLARE(const char *) ap_strchr_c(const char *s, int c); #endif AP_DECLARE(const char *) ap_strchr_c(const char *s, int c) { return strchr(s,c); } #if defined(ap_strrchr) #undef ap_strrchr AP_DECLARE(char *) ap_strrchr(char *s, int c); #endif AP_DECLARE(char *) ap_strrchr(char *s, int c) { return strrchr(s,c); } #if defined(ap_strrchr_c) #undef ap_strrchr_c AP_DECLARE(const char *) ap_strrchr_c(const char *s, int c); #endif AP_DECLARE(const char *) ap_strrchr_c(const char *s, int c) { return strrchr(s,c); } #if defined(ap_strstr) #undef ap_strstr AP_DECLARE(char *) ap_strstr(char *s, const char *c); #endif AP_DECLARE(char *) ap_strstr(char *s, const char *c) { return strstr(s,c); } #if defined(ap_strstr_c) #undef ap_strstr_c AP_DECLARE(const char *) ap_strstr_c(const char *s, const char *c); #endif AP_DECLARE(const char *) ap_strstr_c(const char *s, const char *c) { return strstr(s,c); } #if defined(ap_get_module_config) #undef ap_get_module_config AP_DECLARE(void *) ap_get_module_config(const ap_conf_vector_t *cv, const module *m); #endif AP_DECLARE(void *) ap_get_module_config(const ap_conf_vector_t *cv, const module *m) { return ((void **)cv)[m->module_index]; } AP_DECLARE(int) ap_get_module_flags(const module *m) { if (m->version < AP_MODULE_FLAGS_MMN_MAJOR || (m->version == AP_MODULE_FLAGS_MMN_MAJOR && (m->minor_version < AP_MODULE_FLAGS_MMN_MINOR))) { return 0; } return m->flags; } #if defined(ap_get_core_module_config) #undef ap_get_core_module_config AP_DECLARE(void *) ap_get_core_module_config(const ap_conf_vector_t *cv); #endif AP_DECLARE(void *) ap_get_core_module_config(const ap_conf_vector_t *cv) { return ((void **)cv)[AP_CORE_MODULE_INDEX]; } #if defined(ap_get_server_module_loglevel) #undef ap_get_server_module_loglevel AP_DECLARE(int) ap_get_server_module_loglevel(const server_rec *s, int module_index); #endif AP_DECLARE(int) ap_get_server_module_loglevel(const server_rec *s, int module_index) { if (module_index < 0 || s->log.module_levels == NULL || s->log.module_levels[module_index] < 0) { return s->log.level; } return s->log.module_levels[module_index]; } #if defined(ap_get_conn_module_loglevel) #undef ap_get_conn_module_loglevel AP_DECLARE(int) ap_get_conn_module_loglevel(const conn_rec *c, int module_index); #endif AP_DECLARE(int) ap_get_conn_module_loglevel(const conn_rec *c, int module_index) { const struct ap_logconf *l = (c)->log ? (c)->log : &(c)->base_server->log; if (module_index < 0 || l->module_levels == NULL || l->module_levels[module_index] < 0) { return l->level; } return l->module_levels[module_index]; } #if defined(ap_get_conn_server_module_loglevel) #undef ap_get_conn_server_module_loglevel AP_DECLARE(int) ap_get_conn_server_module_loglevel(const conn_rec *c, const server_rec *s, int module_index); #endif AP_DECLARE(int) ap_get_conn_server_module_loglevel(const conn_rec *c, const server_rec *s, int module_index) { const struct ap_logconf *l = (c->log && c->log != &c->base_server->log) ? c->log : &s->log; if (module_index < 0 || l->module_levels == NULL || l->module_levels[module_index] < 0) { return l->level; } return l->module_levels[module_index]; } #if defined(ap_get_request_module_loglevel) #undef ap_get_request_module_loglevel AP_DECLARE(int) ap_get_request_module_loglevel(const request_rec *c, int module_index); #endif AP_DECLARE(int) ap_get_request_module_loglevel(const request_rec *r, int module_index) { const struct ap_logconf *l = r->log ? r->log : r->connection->log ? r->connection->log : &r->server->log; if (module_index < 0 || l->module_levels == NULL || l->module_levels[module_index] < 0) { return l->level; } return l->module_levels[module_index]; } /** * Generic accessors for other modules to set at their own module-specific * data * @param conf_vector The vector in which the modules configuration is stored. * usually r->per_dir_config or s->module_config * @param m The module to set the data for. * @param val The module-specific data to set * @fn void ap_set_module_config(ap_conf_vector_t *cv, const module *m, void *val) */ #if defined(ap_set_module_config) #undef ap_set_module_config AP_DECLARE(void) ap_set_module_config(ap_conf_vector_t *cv, const module *m, void *val); #endif AP_DECLARE(void) ap_set_module_config(ap_conf_vector_t *cv, const module *m, void *val) { ((void **)cv)[m->module_index] = val; } #if defined(ap_set_core_module_config) #undef ap_set_core_module_config AP_DECLARE(void) ap_set_core_module_config(ap_conf_vector_t *cv, void *val); #endif AP_DECLARE(void) ap_set_core_module_config(ap_conf_vector_t *cv, void *val) { ((void **)cv)[AP_CORE_MODULE_INDEX] = val; } httpd-2.4.41/server/.indent.pro0000644000000000000500000000127510150161574014630 0ustar rootsrc-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int httpd-2.4.41/server/connection.c0000644000000000000500000001604413303341742015052 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr.h" #include "apr_strings.h" #include "ap_config.h" #include "httpd.h" #include "http_connection.h" #include "http_request.h" #include "http_protocol.h" #include "ap_mpm.h" #include "http_config.h" #include "http_core.h" #include "http_vhost.h" #include "scoreboard.h" #include "http_log.h" #include "util_filter.h" APR_HOOK_STRUCT( APR_HOOK_LINK(create_connection) APR_HOOK_LINK(process_connection) APR_HOOK_LINK(pre_connection) APR_HOOK_LINK(pre_close_connection) ) AP_IMPLEMENT_HOOK_RUN_FIRST(conn_rec *,create_connection, (apr_pool_t *p, server_rec *server, apr_socket_t *csd, long conn_id, void *sbh, apr_bucket_alloc_t *alloc), (p, server, csd, conn_id, sbh, alloc), NULL) AP_IMPLEMENT_HOOK_RUN_FIRST(int,process_connection,(conn_rec *c),(c),DECLINED) AP_IMPLEMENT_HOOK_RUN_ALL(int,pre_connection,(conn_rec *c, void *csd),(c, csd),OK,DECLINED) AP_IMPLEMENT_HOOK_RUN_ALL(int,pre_close_connection,(conn_rec *c),(c),OK,DECLINED) /* * More machine-dependent networking gooo... on some systems, * you've got to be *really* sure that all the packets are acknowledged * before closing the connection, since the client will not be able * to see the last response if their TCP buffer is flushed by a RST * packet from us, which is what the server's TCP stack will send * if it receives any request data after closing the connection. * * In an ideal world, this function would be accomplished by simply * setting the socket option SO_LINGER and handling it within the * server's TCP stack while the process continues on to the next request. * Unfortunately, it seems that most (if not all) operating systems * block the server process on close() when SO_LINGER is used. * For those that don't, see USE_SO_LINGER below. For the rest, * we have created a home-brew lingering_close. * * Many operating systems tend to block, puke, or otherwise mishandle * calls to shutdown only half of the connection. You should define * NO_LINGCLOSE in ap_config.h if such is the case for your system. */ #ifndef MAX_SECS_TO_LINGER #define MAX_SECS_TO_LINGER 30 #endif AP_CORE_DECLARE(apr_status_t) ap_shutdown_conn(conn_rec *c, int flush) { apr_status_t rv; apr_bucket_brigade *bb; apr_bucket *b; bb = apr_brigade_create(c->pool, c->bucket_alloc); if (flush) { /* FLUSH bucket */ b = apr_bucket_flush_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); } /* End Of Connection bucket */ b = ap_bucket_eoc_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); rv = ap_pass_brigade(c->output_filters, bb); apr_brigade_destroy(bb); return rv; } AP_CORE_DECLARE(void) ap_flush_conn(conn_rec *c) { (void)ap_shutdown_conn(c, 1); } AP_DECLARE(int) ap_prep_lingering_close(conn_rec *c) { /* Give protocol handlers one last chance to raise their voice */ ap_run_pre_close_connection(c); if (c->sbh) { ap_update_child_status(c->sbh, SERVER_CLOSING, NULL); } return 0; } /* we now proceed to read from the client until we get EOF, or until * MAX_SECS_TO_LINGER has passed. The reasons for doing this are * documented in a draft: * * http://tools.ietf.org/html/draft-ietf-http-connection-00.txt * * in a nutshell -- if we don't make this effort we risk causing * TCP RST packets to be sent which can tear down a connection before * all the response data has been sent to the client. */ #define SECONDS_TO_LINGER 2 AP_DECLARE(int) ap_start_lingering_close(conn_rec *c) { apr_socket_t *csd = ap_get_conn_socket(c); if (!csd) { return 1; } if (ap_prep_lingering_close(c)) { return 1; } /* Close the connection, being careful to send out whatever is still * in our buffers. If possible, try to avoid a hard close until the * client has ACKed our FIN and/or has stopped sending us data. */ /* Send any leftover data to the client, but never try to again */ ap_flush_conn(c); #ifdef NO_LINGCLOSE apr_socket_close(csd); return 1; #else /* Shut down the socket for write, which will send a FIN * to the peer. */ if (c->aborted || apr_socket_shutdown(csd, APR_SHUTDOWN_WRITE) != APR_SUCCESS) { apr_socket_close(csd); return 1; } return 0; #endif } AP_DECLARE(void) ap_lingering_close(conn_rec *c) { char dummybuf[512]; apr_size_t nbytes; apr_time_t now, timeup = 0; apr_socket_t *csd = ap_get_conn_socket(c); if (ap_start_lingering_close(c)) { return; } /* Read available data from the client whilst it continues sending * it, for a maximum time of MAX_SECS_TO_LINGER. If the client * does not send any data within 2 seconds (a value pulled from * Apache 1.3 which seems to work well), give up. */ apr_socket_timeout_set(csd, apr_time_from_sec(SECONDS_TO_LINGER)); apr_socket_opt_set(csd, APR_INCOMPLETE_READ, 1); /* The common path here is that the initial apr_socket_recv() call * will return 0 bytes read; so that case must avoid the expensive * apr_time_now() call and time arithmetic. */ do { nbytes = sizeof(dummybuf); if (apr_socket_recv(csd, dummybuf, &nbytes) || nbytes == 0) break; now = apr_time_now(); if (timeup == 0) { /* * First time through; * calculate now + 30 seconds (MAX_SECS_TO_LINGER). * * If some module requested a shortened waiting period, only wait for * 2s (SECONDS_TO_LINGER). This is useful for mitigating certain * DoS attacks. */ if (apr_table_get(c->notes, "short-lingering-close")) { timeup = now + apr_time_from_sec(SECONDS_TO_LINGER); } else { timeup = now + apr_time_from_sec(MAX_SECS_TO_LINGER); } continue; } } while (now < timeup); apr_socket_close(csd); } AP_CORE_DECLARE(void) ap_process_connection(conn_rec *c, void *csd) { int rc; ap_update_vhost_given_ip(c); rc = ap_run_pre_connection(c, csd); if (rc != OK && rc != DONE) { c->aborted = 1; } if (!c->aborted) { ap_run_process_connection(c); } } httpd-2.4.41/server/util_cfgtree.c0000644000000000000500000000303310776375527015404 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "util_cfgtree.h" #include ap_directive_t *ap_add_node(ap_directive_t **parent, ap_directive_t *current, ap_directive_t *toadd, int child) { if (current == NULL) { /* we just started a new parent */ if (*parent != NULL) { (*parent)->first_child = toadd; toadd->parent = *parent; } if (child) { /* First item in config file or container is a container */ *parent = toadd; return NULL; } return toadd; } current->next = toadd; toadd->parent = *parent; if (child) { /* switch parents, navigate into child */ *parent = toadd; return NULL; } return toadd; } httpd-2.4.41/server/scoreboard.c0000644000000000000500000005321113472755016015045 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr.h" #include "apr_strings.h" #include "apr_portable.h" #include "apr_lib.h" #define APR_WANT_STRFUNC #include "apr_want.h" #if APR_HAVE_SYS_TYPES_H #include #endif #include "ap_config.h" #include "httpd.h" #include "http_log.h" #include "http_main.h" #include "http_core.h" #include "http_config.h" #include "http_protocol.h" #include "ap_mpm.h" #include "scoreboard.h" /* we know core's module_index is 0 */ #undef APLOG_MODULE_INDEX #define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX AP_DECLARE_DATA scoreboard *ap_scoreboard_image = NULL; AP_DECLARE_DATA const char *ap_scoreboard_fname = NULL; static ap_scoreboard_e scoreboard_type; const char * ap_set_scoreboard(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_scoreboard_fname = arg; return NULL; } /* Default to false when mod_status is not loaded */ AP_DECLARE_DATA int ap_extended_status = 0; const char *ap_set_extended_status(cmd_parms *cmd, void *dummy, int arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_extended_status = arg; return NULL; } AP_DECLARE_DATA int ap_mod_status_reqtail = 0; const char *ap_set_reqtail(cmd_parms *cmd, void *dummy, int arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_mod_status_reqtail = arg; return NULL; } #if APR_HAS_SHARED_MEMORY #include "apr_shm.h" #ifndef WIN32 static /* but must be exported to mpm_winnt */ #endif apr_shm_t *ap_scoreboard_shm = NULL; #endif APR_HOOK_STRUCT( APR_HOOK_LINK(pre_mpm) ) AP_IMPLEMENT_HOOK_RUN_ALL(int,pre_mpm, (apr_pool_t *p, ap_scoreboard_e sb_type), (p, sb_type),OK,DECLINED) static APR_OPTIONAL_FN_TYPE(ap_logio_get_last_bytes) *pfn_ap_logio_get_last_bytes; struct ap_sb_handle_t { int child_num; int thread_num; }; static int server_limit, thread_limit; static apr_size_t scoreboard_size; /* * ToDo: * This function should be renamed to cleanup_shared * and it should handle cleaning up a scoreboard shared * between processes using any form of IPC (file, shared memory * segment, etc.). Leave it as is now because it is being used * by various MPMs. */ static apr_status_t ap_cleanup_shared_mem(void *d) { #if APR_HAS_SHARED_MEMORY free(ap_scoreboard_image); ap_scoreboard_image = NULL; apr_shm_destroy(ap_scoreboard_shm); #endif return APR_SUCCESS; } #define SIZE_OF_scoreboard APR_ALIGN_DEFAULT(sizeof(scoreboard)) #define SIZE_OF_global_score APR_ALIGN_DEFAULT(sizeof(global_score)) #define SIZE_OF_process_score APR_ALIGN_DEFAULT(sizeof(process_score)) #define SIZE_OF_worker_score APR_ALIGN_DEFAULT(sizeof(worker_score)) AP_DECLARE(int) ap_calc_scoreboard_size(void) { ap_mpm_query(AP_MPMQ_HARD_LIMIT_THREADS, &thread_limit); ap_mpm_query(AP_MPMQ_HARD_LIMIT_DAEMONS, &server_limit); scoreboard_size = SIZE_OF_global_score; scoreboard_size += SIZE_OF_process_score * server_limit; scoreboard_size += SIZE_OF_worker_score * server_limit * thread_limit; return scoreboard_size; } AP_DECLARE(void) ap_init_scoreboard(void *shared_score) { char *more_storage; int i; pfn_ap_logio_get_last_bytes = APR_RETRIEVE_OPTIONAL_FN(ap_logio_get_last_bytes); if (!shared_score) { return; } ap_calc_scoreboard_size(); ap_scoreboard_image = ap_calloc(1, SIZE_OF_scoreboard + server_limit * sizeof(worker_score *)); more_storage = shared_score; ap_scoreboard_image->global = (global_score *)more_storage; more_storage += SIZE_OF_global_score; ap_scoreboard_image->parent = (process_score *)more_storage; more_storage += SIZE_OF_process_score * server_limit; ap_scoreboard_image->servers = (worker_score **)((char*)ap_scoreboard_image + SIZE_OF_scoreboard); for (i = 0; i < server_limit; i++) { ap_scoreboard_image->servers[i] = (worker_score *)more_storage; more_storage += thread_limit * SIZE_OF_worker_score; } ap_assert(more_storage == (char*)shared_score + scoreboard_size); ap_scoreboard_image->global->server_limit = server_limit; ap_scoreboard_image->global->thread_limit = thread_limit; } /** * Create a name-based scoreboard in the given pool using the * given filename. */ static apr_status_t create_namebased_scoreboard(apr_pool_t *pool, const char *fname) { #if APR_HAS_SHARED_MEMORY apr_status_t rv; /* The shared memory file must not exist before we create the * segment. */ apr_shm_remove(fname, pool); /* ignore errors */ rv = apr_shm_create(&ap_scoreboard_shm, scoreboard_size, fname, pool); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00001) "unable to create or access scoreboard \"%s\" " "(name-based shared memory failure)", fname); return rv; } #endif /* APR_HAS_SHARED_MEMORY */ return APR_SUCCESS; } /* ToDo: This function should be made to handle setting up * a scoreboard shared between processes using any IPC technique, * not just a shared memory segment */ static apr_status_t open_scoreboard(apr_pool_t *pconf) { #if APR_HAS_SHARED_MEMORY apr_status_t rv; char *fname = NULL; apr_pool_t *global_pool; /* We don't want to have to recreate the scoreboard after * restarts, so we'll create a global pool and never clean it. */ rv = apr_pool_create(&global_pool, NULL); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00002) "Fatal error: unable to create global pool " "for use by the scoreboard"); return rv; } /* The config says to create a name-based shmem */ if (ap_scoreboard_fname) { /* make sure it's an absolute pathname */ fname = ap_server_root_relative(pconf, ap_scoreboard_fname); if (!fname) { ap_log_error(APLOG_MARK, APLOG_CRIT, APR_EBADPATH, ap_server_conf, APLOGNO(00003) "Fatal error: Invalid Scoreboard path %s", ap_scoreboard_fname); return APR_EBADPATH; } return create_namebased_scoreboard(global_pool, fname); } else { /* config didn't specify, we get to choose shmem type */ rv = apr_shm_create(&ap_scoreboard_shm, scoreboard_size, NULL, global_pool); /* anonymous shared memory */ if ((rv != APR_SUCCESS) && (rv != APR_ENOTIMPL)) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ap_server_conf, APLOGNO(00004) "Unable to create or access scoreboard " "(anonymous shared memory failure)"); return rv; } /* Make up a filename and do name-based shmem */ else if (rv == APR_ENOTIMPL) { /* Make sure it's an absolute pathname */ ap_scoreboard_fname = DEFAULT_SCOREBOARD; fname = ap_server_root_relative(pconf, ap_scoreboard_fname); return create_namebased_scoreboard(global_pool, fname); } } #endif /* APR_HAS_SHARED_MEMORY */ return APR_SUCCESS; } /* If detach is non-zero, this is a separate child process, * if zero, it is a forked child. */ AP_DECLARE(apr_status_t) ap_reopen_scoreboard(apr_pool_t *p, apr_shm_t **shm, int detached) { #if APR_HAS_SHARED_MEMORY if (!detached) { return APR_SUCCESS; } if (apr_shm_size_get(ap_scoreboard_shm) < scoreboard_size) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, ap_server_conf, APLOGNO(00005) "Fatal error: shared scoreboard too small for child!"); apr_shm_detach(ap_scoreboard_shm); ap_scoreboard_shm = NULL; return APR_EINVAL; } /* everything will be cleared shortly */ if (*shm) { *shm = ap_scoreboard_shm; } #endif return APR_SUCCESS; } apr_status_t ap_cleanup_scoreboard(void *d) { if (ap_scoreboard_image == NULL) { return APR_SUCCESS; } if (scoreboard_type == SB_SHARED) { ap_cleanup_shared_mem(NULL); } else { free(ap_scoreboard_image->global); free(ap_scoreboard_image); ap_scoreboard_image = NULL; } return APR_SUCCESS; } /* Create or reinit an existing scoreboard. The MPM can control whether * the scoreboard is shared across multiple processes or not */ int ap_create_scoreboard(apr_pool_t *p, ap_scoreboard_e sb_type) { int i; #if APR_HAS_SHARED_MEMORY apr_status_t rv; #endif if (ap_scoreboard_image) { ap_scoreboard_image->global->restart_time = apr_time_now(); memset(ap_scoreboard_image->parent, 0, SIZE_OF_process_score * server_limit); for (i = 0; i < server_limit; i++) { memset(ap_scoreboard_image->servers[i], 0, SIZE_OF_worker_score * thread_limit); } ap_init_scoreboard(NULL); return OK; } ap_calc_scoreboard_size(); #if APR_HAS_SHARED_MEMORY if (sb_type == SB_SHARED) { void *sb_shared; rv = open_scoreboard(p); if (rv || !(sb_shared = apr_shm_baseaddr_get(ap_scoreboard_shm))) { return HTTP_INTERNAL_SERVER_ERROR; } memset(sb_shared, 0, scoreboard_size); ap_init_scoreboard(sb_shared); } else #endif { /* A simple malloc will suffice */ void *sb_mem = ap_calloc(1, scoreboard_size); ap_init_scoreboard(sb_mem); } scoreboard_type = sb_type; ap_scoreboard_image->global->running_generation = 0; ap_scoreboard_image->global->restart_time = apr_time_now(); apr_pool_cleanup_register(p, NULL, ap_cleanup_scoreboard, apr_pool_cleanup_null); return OK; } /* Routines called to deal with the scoreboard image * --- note that we do *not* need write locks, since update_child_status * only updates a *single* record in place, and only one process writes to * a given scoreboard slot at a time (either the child process owning that * slot, or the parent, noting that the child has died). * * As a final note --- setting the score entry to getpid() is always safe, * since when the parent is writing an entry, it's only noting SERVER_DEAD * anyway. */ AP_DECLARE(int) ap_exists_scoreboard_image(void) { return (ap_scoreboard_image ? 1 : 0); } AP_DECLARE(void) ap_set_conn_count(ap_sb_handle_t *sb, request_rec *r, unsigned short conn_count) { worker_score *ws; if (!sb) return; ws = &ap_scoreboard_image->servers[sb->child_num][sb->thread_num]; ws->conn_count = conn_count; } AP_DECLARE(void) ap_increment_counts(ap_sb_handle_t *sb, request_rec *r) { worker_score *ws; apr_off_t bytes; if (!sb) return; ws = &ap_scoreboard_image->servers[sb->child_num][sb->thread_num]; if (pfn_ap_logio_get_last_bytes != NULL) { bytes = pfn_ap_logio_get_last_bytes(r->connection); } else if (r->method_number == M_GET && r->method[0] == 'H') { bytes = 0; } else { bytes = r->bytes_sent; } #ifdef HAVE_TIMES times(&ws->times); #endif ws->access_count++; ws->my_access_count++; ws->conn_count++; ws->bytes_served += bytes; ws->my_bytes_served += bytes; ws->conn_bytes += bytes; } AP_DECLARE(int) ap_find_child_by_pid(apr_proc_t *pid) { int i; int max_daemons_limit = 0; ap_mpm_query(AP_MPMQ_MAX_DAEMON_USED, &max_daemons_limit); for (i = 0; i < max_daemons_limit; ++i) { if (ap_scoreboard_image->parent[i].pid == pid->pid) { return i; } } return -1; } AP_DECLARE(void) ap_update_sb_handle(ap_sb_handle_t *sbh, int child_num, int thread_num) { sbh->child_num = child_num; sbh->thread_num = thread_num; } AP_DECLARE(void) ap_create_sb_handle(ap_sb_handle_t **new_sbh, apr_pool_t *p, int child_num, int thread_num) { *new_sbh = (ap_sb_handle_t *)apr_palloc(p, sizeof(ap_sb_handle_t)); ap_update_sb_handle(*new_sbh, child_num, thread_num); } static void copy_request(char *rbuf, apr_size_t rbuflen, request_rec *r) { char *p; if (r->the_request == NULL) { apr_cpystrn(rbuf, "NULL", rbuflen); return; /* short circuit below */ } if (r->parsed_uri.password == NULL) { p = r->the_request; } else { /* Don't reveal the password in the server-status view */ p = apr_pstrcat(r->pool, r->method, " ", apr_uri_unparse(r->pool, &r->parsed_uri, APR_URI_UNP_OMITPASSWORD), r->assbackwards ? NULL : " ", r->protocol, NULL); } /* now figure out if we copy over the 1st rbuflen chars or the last */ if (!ap_mod_status_reqtail) { apr_cpystrn(rbuf, p, rbuflen); } else { apr_size_t slen = strlen(p); if (slen < rbuflen) { /* it all fits anyway */ apr_cpystrn(rbuf, p, rbuflen); } else { apr_cpystrn(rbuf, p+(slen-rbuflen+1), rbuflen); } } } static int update_child_status_internal(int child_num, int thread_num, int status, conn_rec *c, server_rec *s, request_rec *r, const char *descr) { int old_status; worker_score *ws; int mpm_generation; ws = &ap_scoreboard_image->servers[child_num][thread_num]; old_status = ws->status; ws->status = status; if (status == SERVER_READY && old_status == SERVER_STARTING) { process_score *ps = &ap_scoreboard_image->parent[child_num]; ws->thread_num = child_num * thread_limit + thread_num; ap_mpm_query(AP_MPMQ_GENERATION, &mpm_generation); ps->generation = mpm_generation; } if (ap_extended_status) { const char *val; if (status == SERVER_READY || status == SERVER_DEAD) { /* * Reset individual counters */ if (status == SERVER_DEAD) { ws->my_access_count = 0L; ws->my_bytes_served = 0L; #ifdef HAVE_TIMES ws->times.tms_utime = 0; ws->times.tms_stime = 0; ws->times.tms_cutime = 0; ws->times.tms_cstime = 0; #endif } ws->conn_count = 0; ws->conn_bytes = 0; ws->last_used = apr_time_now(); } if (descr) { apr_cpystrn(ws->request, descr, sizeof(ws->request)); } else if (r) { copy_request(ws->request, sizeof(ws->request), r); } else if (c) { ws->request[0]='\0'; } if (r && r->useragent_ip) { if (!(val = ap_get_useragent_host(r, REMOTE_NOLOOKUP, NULL))) { apr_cpystrn(ws->client, r->useragent_ip, sizeof(ws->client)); /* DEPRECATE */ apr_cpystrn(ws->client64, r->useragent_ip, sizeof(ws->client64)); } else { apr_cpystrn(ws->client, val, sizeof(ws->client)); /* DEPRECATE */ apr_cpystrn(ws->client64, val, sizeof(ws->client64)); } } else if (c) { if (!(val = ap_get_remote_host(c, c->base_server->lookup_defaults, REMOTE_NOLOOKUP, NULL))) { apr_cpystrn(ws->client, c->client_ip, sizeof(ws->client)); /* DEPRECATE */ apr_cpystrn(ws->client64, c->client_ip, sizeof(ws->client64)); } else { apr_cpystrn(ws->client, val, sizeof(ws->client)); /* DEPRECATE */ apr_cpystrn(ws->client64, val, sizeof(ws->client64)); } } if (s) { if (c) { apr_snprintf(ws->vhost, sizeof(ws->vhost), "%s:%d", s->server_hostname, c->local_addr->port); } else { apr_cpystrn(ws->vhost, s->server_hostname, sizeof(ws->vhost)); } } else if (c) { ws->vhost[0]='\0'; } if (c) { val = ap_get_protocol(c); apr_cpystrn(ws->protocol, val, sizeof(ws->protocol)); } } return old_status; } AP_DECLARE(int) ap_update_child_status_from_indexes(int child_num, int thread_num, int status, request_rec *r) { if (child_num < 0) { return -1; } return update_child_status_internal(child_num, thread_num, status, r ? r->connection : NULL, r ? r->server : NULL, r, NULL); } AP_DECLARE(int) ap_update_child_status(ap_sb_handle_t *sbh, int status, request_rec *r) { if (!sbh || (sbh->child_num < 0)) return -1; return update_child_status_internal(sbh->child_num, sbh->thread_num, status, r ? r->connection : NULL, r ? r->server : NULL, r, NULL); } AP_DECLARE(int) ap_update_child_status_from_conn(ap_sb_handle_t *sbh, int status, conn_rec *c) { if (!sbh || (sbh->child_num < 0)) return -1; return update_child_status_internal(sbh->child_num, sbh->thread_num, status, c, NULL, NULL, NULL); } AP_DECLARE(int) ap_update_child_status_from_server(ap_sb_handle_t *sbh, int status, conn_rec *c, server_rec *s) { if (!sbh || (sbh->child_num < 0)) return -1; return update_child_status_internal(sbh->child_num, sbh->thread_num, status, c, s, NULL, NULL); } AP_DECLARE(int) ap_update_child_status_descr(ap_sb_handle_t *sbh, int status, const char *descr) { if (!sbh || (sbh->child_num < 0)) return -1; return update_child_status_internal(sbh->child_num, sbh->thread_num, status, NULL, NULL, NULL, descr); } AP_DECLARE(void) ap_time_process_request(ap_sb_handle_t *sbh, int status) { worker_score *ws; if (!sbh) return; if (sbh->child_num < 0) { return; } ws = &ap_scoreboard_image->servers[sbh->child_num][sbh->thread_num]; if (status == START_PREQUEST) { ws->start_time = ws->last_used = apr_time_now(); } else if (status == STOP_PREQUEST) { ws->stop_time = ws->last_used = apr_time_now(); if (ap_extended_status) { ws->duration += ws->stop_time - ws->start_time; } } } AP_DECLARE(int) ap_update_global_status() { #ifdef HAVE_TIMES if (ap_scoreboard_image == NULL) { return APR_SUCCESS; } times(&ap_scoreboard_image->global->times); #endif return APR_SUCCESS; } AP_DECLARE(worker_score *) ap_get_scoreboard_worker_from_indexes(int x, int y) { if (((x < 0) || (x >= server_limit)) || ((y < 0) || (y >= thread_limit))) { return(NULL); /* Out of range */ } return &ap_scoreboard_image->servers[x][y]; } AP_DECLARE(worker_score *) ap_get_scoreboard_worker(ap_sb_handle_t *sbh) { if (!sbh) return NULL; return ap_get_scoreboard_worker_from_indexes(sbh->child_num, sbh->thread_num); } AP_DECLARE(void) ap_copy_scoreboard_worker(worker_score *dest, int child_num, int thread_num) { worker_score *ws = ap_get_scoreboard_worker_from_indexes(child_num, thread_num); memcpy(dest, ws, sizeof *ws); /* For extra safety, NUL-terminate the strings returned, though it * should be true those last bytes are always zero anyway. */ dest->client[sizeof(dest->client) - 1] = '\0'; dest->client64[sizeof(dest->client64) - 1] = '\0'; dest->request[sizeof(dest->request) - 1] = '\0'; dest->vhost[sizeof(dest->vhost) - 1] = '\0'; dest->protocol[sizeof(dest->protocol) - 1] = '\0'; } AP_DECLARE(process_score *) ap_get_scoreboard_process(int x) { if ((x < 0) || (x >= server_limit)) { return(NULL); /* Out of range */ } return &ap_scoreboard_image->parent[x]; } AP_DECLARE(global_score *) ap_get_scoreboard_global() { return ap_scoreboard_image->global; } httpd-2.4.41/server/util_md5.c0000644000000000000500000001366512101474223014437 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /************************************************************************ * NCSA HTTPd Server * Software Development Group * National Center for Supercomputing Applications * University of Illinois at Urbana-Champaign * 605 E. Springfield, Champaign, IL 61820 * httpd@ncsa.uiuc.edu * * Copyright (C) 1995, Board of Trustees of the University of Illinois * ************************************************************************ * * md5.c: NCSA HTTPd code which uses the md5c.c RSA Code * * Original Code Copyright (C) 1994, Jeff Hostetler, Spyglass, Inc. * Portions of Content-MD5 code Copyright (C) 1993, 1994 by Carnegie Mellon * University (see Copyright below). * Portions of Content-MD5 code Copyright (C) 1991 Bell Communications * Research, Inc. (Bellcore) (see Copyright below). * Portions extracted from mpack, John G. Myers - jgm+@cmu.edu * Content-MD5 Code contributed by Martin Hamilton (martin@net.lut.ac.uk) * */ /* md5.c --Module Interface to MD5. */ /* Jeff Hostetler, Spyglass, Inc., 1994. */ #include "ap_config.h" #include "apr_portable.h" #include "apr_strings.h" #include "httpd.h" #include "util_md5.h" #include "util_ebcdic.h" AP_DECLARE(char *) ap_md5_binary(apr_pool_t *p, const unsigned char *buf, int length) { apr_md5_ctx_t my_md5; unsigned char hash[APR_MD5_DIGESTSIZE]; char result[2 * APR_MD5_DIGESTSIZE + 1]; /* * Take the MD5 hash of the string argument. */ apr_md5_init(&my_md5); #if APR_CHARSET_EBCDIC apr_md5_set_xlate(&my_md5, ap_hdrs_to_ascii); #endif apr_md5_update(&my_md5, buf, (unsigned int)length); apr_md5_final(hash, &my_md5); ap_bin2hex(hash, APR_MD5_DIGESTSIZE, result); return apr_pstrndup(p, result, APR_MD5_DIGESTSIZE*2); } AP_DECLARE(char *) ap_md5(apr_pool_t *p, const unsigned char *string) { return ap_md5_binary(p, string, (int) strlen((char *)string)); } /* these portions extracted from mpack, John G. Myers - jgm+@cmu.edu */ /* (C) Copyright 1993,1994 by Carnegie Mellon University * All Rights Reserved. * * Permission to use, copy, modify, distribute, and sell this software * and its documentation for any purpose is hereby granted without * fee, provided that the above copyright notice appear in all copies * and that both that copyright notice and this permission notice * appear in supporting documentation, and that the name of Carnegie * Mellon University not be used in advertising or publicity * pertaining to distribution of the software without specific, * written prior permission. Carnegie Mellon University makes no * representations about the suitability of this software for any * purpose. It is provided "as is" without express or implied * warranty. * * CARNEGIE MELLON UNIVERSITY DISCLAIMS ALL WARRANTIES WITH REGARD TO * THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY * AND FITNESS, IN NO EVENT SHALL CARNEGIE MELLON UNIVERSITY BE LIABLE * FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN * AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING * OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS * SOFTWARE. */ /* * Copyright (c) 1991 Bell Communications Research, Inc. (Bellcore) * * Permission to use, copy, modify, and distribute this material * for any purpose and without fee is hereby granted, provided * that the above copyright notice and this permission notice * appear in all copies, and that the name of Bellcore not be * used in advertising or publicity pertaining to this * material without the specific, prior written permission * of an authorized representative of Bellcore. BELLCORE * MAKES NO REPRESENTATIONS ABOUT THE ACCURACY OR SUITABILITY * OF THIS MATERIAL FOR ANY PURPOSE. IT IS PROVIDED "AS IS", * WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES. */ static char basis_64[] = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; AP_DECLARE(char *) ap_md5contextTo64(apr_pool_t *a, apr_md5_ctx_t *context) { unsigned char digest[18]; char *encodedDigest; int i; char *p; encodedDigest = (char *) apr_pcalloc(a, 25 * sizeof(char)); apr_md5_final(digest, context); digest[sizeof(digest) - 1] = digest[sizeof(digest) - 2] = 0; p = encodedDigest; for (i = 0; i < sizeof(digest); i += 3) { *p++ = basis_64[digest[i] >> 2]; *p++ = basis_64[((digest[i] & 0x3) << 4) | ((int) (digest[i + 1] & 0xF0) >> 4)]; *p++ = basis_64[((digest[i + 1] & 0xF) << 2) | ((int) (digest[i + 2] & 0xC0) >> 6)]; *p++ = basis_64[digest[i + 2] & 0x3F]; } *p-- = '\0'; *p-- = '='; *p-- = '='; return encodedDigest; } AP_DECLARE(char *) ap_md5digest(apr_pool_t *p, apr_file_t *infile) { apr_md5_ctx_t context; unsigned char buf[4096]; /* keep this a multiple of 64 */ apr_size_t nbytes; apr_off_t offset = 0L; apr_md5_init(&context); nbytes = sizeof(buf); while (apr_file_read(infile, buf, &nbytes) == APR_SUCCESS) { apr_md5_update(&context, buf, nbytes); nbytes = sizeof(buf); } apr_file_seek(infile, APR_SET, &offset); return ap_md5contextTo64(p, &context); } httpd-2.4.41/server/Makefile.in0000644000000000000500000000764513243014561014622 0ustar rootsrc CLEAN_TARGETS = gen_test_char test_char.h \ ApacheCoreOS2.def httpd.exp export_files \ exports.c export_vars.h SUBDIRS = mpm LTLIBRARY_NAME = libmain.la LTLIBRARY_SOURCES = \ config.c log.c main.c vhost.c util.c util_fcgi.c \ util_script.c util_md5.c util_cfgtree.c util_ebcdic.c util_time.c \ connection.c listen.c util_mutex.c \ mpm_common.c mpm_unix.c mpm_fdqueue.c \ util_charset.c util_cookies.c util_debug.c util_xml.c \ util_filter.c util_pcre.c util_regex.c exports.c \ scoreboard.c error_bucket.c protocol.c core.c request.c provider.c \ eoc_bucket.c eor_bucket.c core_filters.c \ util_expr_parse.c util_expr_scan.c util_expr_eval.c LTLIBRARY_DEPENDENCIES = test_char.h TARGETS = delete-exports $(LTLIBRARY_NAME) $(CORE_IMPLIB_FILE) export_vars.h httpd.exp include $(top_builddir)/build/rules.mk include $(top_srcdir)/build/library.mk gen_test_char_OBJECTS = gen_test_char.lo gen_test_char: $(gen_test_char_OBJECTS) $(LINK) $(EXTRA_LDFLAGS) $(gen_test_char_OBJECTS) $(EXTRA_LIBS) test_char.h: gen_test_char ./gen_test_char > test_char.h util.lo: test_char.h EXPORT_DIRS = $(top_srcdir)/include $(top_srcdir)/os/$(OS_DIR) EXPORT_DIRS_APR = $(APR_INCLUDEDIR) $(APU_INCLUDEDIR) # If export_files is a dependency here, but we remove it during this stage, # when exports.c is generated, make will not detect that export_files is no # longer here and deadlock. So, export_files can't be a dependency of # delete-exports. delete-exports: @if test -f exports.c; then \ if test -f export_files; then \ files=`cat export_files`; \ headers="`find $$files -newer exports.c`"; \ if test -n "$$headers"; then \ echo Found newer headers. Will rebuild exports.c.; \ echo rm -f exports.c export_files; \ rm -f exports.c export_files; \ fi; \ else \ rm -f exports.c; \ fi; \ fi export_files: ( for dir in $(EXPORT_DIRS); do \ ls $$dir/*.h ; \ done; \ echo "$(top_srcdir)/server/mpm_fdqueue.h"; \ for dir in $(EXPORT_DIRS_APR); do \ ls $$dir/ap[ru].h $$dir/ap[ru]_*.h 2>/dev/null; \ done; \ ) | sed -e s,//,/,g | sort -u > $@ exports.c: export_files $(AWK) -f $(top_srcdir)/build/make_exports.awk `cat $?` > $@ export_vars.h: export_files $(AWK) -f $(top_srcdir)/build/make_var_export.awk `cat $?` > $@ # Rule to make def file for OS/2 core dll ApacheCoreOS2.def: exports.c export_vars.h $(top_srcdir)/os/$(OS_DIR)/core_header.def cat $(top_srcdir)/os/$(OS_DIR)/core_header.def > $@ $(CPP) $< $(ALL_CPPFLAGS) $(ALL_INCLUDES) | grep "ap_hack_" | sed -e 's/^.*[)]\(.*\);$$/ "\1"/' >> $@ $(CPP) $(ALL_CPPFLAGS) $(ALL_INCLUDES) export_vars.h | grep "^[a-z]" | sed -e 's/^\(.*\)$$/ "\1"/' >> $@ # Rule to make exp file for AIX DSOs httpd.exp: exports.c export_vars.h @echo "#! ." > $@ @echo "* This file was AUTOGENERATED at build time." >> $@ @echo "* Please do not edit by hand." >> $@ $(CPP) $(ALL_CPPFLAGS) $(ALL_INCLUDES) exports.c | grep "ap_hack_" | grep -v apr_ | sed -e 's/^.*[)]\(.*\);$$/\1/' >> $@ $(CPP) $(ALL_CPPFLAGS) $(ALL_INCLUDES) export_vars.h | grep -v apr_ | sed -e 's/^\#[^!]*//' | sed -e '/^$$/d' >> $@ # developer stuff # (we really don't expect end users to use these targets!) # util_expr_scan.c util_expr_parse.c util_expr_parse.h: util_expr_scan.l util_expr_parse.y bison -pap_expr_yy --defines=$(builddir)/util_expr_parse.h \ -o $(builddir)/util_expr_parse.c $(srcdir)/util_expr_parse.y flex -Pap_expr_yy -o $(builddir)/util_expr_scan.c $(srcdir)/util_expr_scan.l set -e ; \ for f in util_expr_scan.c util_expr_parse.c util_expr_parse.h ; do \ sed -e "s|\"$(builddir)/|\"|g" < $(builddir)/$$f > \ $(builddir)/$$f.$$$$ && \ mv $(builddir)/$$f.$$$$ $(builddir)/$$f ; \ done # work around flex bug # http://sourceforge.net/tracker/?func=detail&aid=3029024&group_id=97492&atid=618177 perl -0777 -p -i -e 's,\n(void|int) ap_expr_yy[gs]et_column[^\n]+\)\n.*?\n\},,gs' \ $(builddir)/util_expr_scan.c httpd-2.4.41/.gdbinit0000644000000000000500000003310713167063036012666 0ustar rootsrc# gdb macros which may be useful for folks using gdb to debug # apache. Delete it if it bothers you. define dump_table set $t = (apr_table_entry_t *)((apr_array_header_t *)$arg0)->elts set $n = ((apr_array_header_t *)$arg0)->nelts set $i = 0 while $i < $n if $t[$i].val == (void *)0L printf "[%u] '%s'=>NULL\n", $i, $t[$i].key else printf "[%u] '%s'='%s' [%p]\n", $i, $t[$i].key, $t[$i].val, $t[$i].val end set $i = $i + 1 end end document dump_table Print the key/value pairs in a table. end define dump_skiplist set $sl = (apr_skiplist *)$arg0 set $m = $sl->bottom printf "skiplist@%p: size=%lu: height=%d\n", $sl, $sl->size, $sl->height while ($m) printf "(%p,%.12lx)", $m, $m->data set $u = $m->up while ($u) printf " (%p,%.12lx)", $u, $u->data set $u = $u->up end printf "\n" set $m = $m->next end end document dump_skiplist Print the nodes/values in a skiplist end define dump_string_hash set $h = $arg0->array set $n = $arg0->max set $i = 0 while $i < $n set $ent = $h[$i] while $ent != (void *)0L printf "'%s' => '%p'\n", $ent->key, $ent->val set $ent = $ent->next end set $i = $i + 1 end end document dump_string_hash Print the entries in a hash table indexed by strings end define dump_string_shash set $h = $arg0->array set $n = $arg0->max set $i = 0 while $i < $n set $ent = $h[$i] while $ent != (void *)0L printf "'%s' => '%s'\n", $ent->key, $ent->val set $ent = $ent->next end set $i = $i + 1 end end document dump_string_shash Print the entries in a hash table indexed by strings with string values end define ro run -DONE_PROCESS end define dump_string_array set $a = (char **)((apr_array_header_t *)$arg0)->elts set $n = (int)((apr_array_header_t *)$arg0)->nelts set $i = 0 while $i < $n printf "[%u] '%s'\n", $i, $a[$i] set $i = $i + 1 end end document dump_string_array Print all of the elements in an array of strings. end define printmemn set $i = 0 while $i < $arg1 if $arg0[$i] < 0x20 || $arg0[$i] > 0x7e printf "~" else printf "%c", $arg0[$i] end set $i = $i + 1 end end define print_bkt_datacol # arg0 == column name # arg1 == format # arg2 == value # arg3 == suppress header? set $suppressheader = $arg3 if !$suppressheader printf " " printf $arg0 printf "=" else printf " | " end printf $arg1, $arg2 end define dump_bucket_ex # arg0 == bucket # arg1 == suppress header? set $bucket = (struct apr_bucket *)$arg0 set $sh = $arg1 set $refcount = -1 print_bkt_datacol "bucket" "%-9s" $bucket->type->name $sh printf "(0x%08lx)", (unsigned long)$bucket print_bkt_datacol "length" "%-6ld" (long)($bucket->length) $sh print_bkt_datacol "data" "0x%08lx" $bucket->data $sh if !$sh printf "\n " end if (($bucket->type == &apr_bucket_type_eos) || \ ($bucket->type == &apr_bucket_type_flush)) # metadata buckets, no content print_bkt_datacol "contents" "%c" ' ' $sh printf " " print_bkt_datacol "rc" "n/%c" 'a' $sh else if ($bucket->type == &ap_bucket_type_error) # metadata bucket, no content but it does have an error code in it print_bkt_datacol "contents" "%c" ' ' $sh set $status = ((ap_bucket_error *)$bucket->data)->status printf " (status=%3d) ", $status print_bkt_datacol "rc" "n/%c" 'a' $sh else if (($bucket->type == &apr_bucket_type_file) || \ ($bucket->type == &apr_bucket_type_pipe) || \ ($bucket->type == &apr_bucket_type_socket)) # buckets that contain data not in memory (ie not printable) print_bkt_datacol "contents" "[**unprintable**%c" ']' $sh printf " " if $bucket->type == &apr_bucket_type_file set $refcount = ((apr_bucket_refcount *)$bucket->data)->refcount print_bkt_datacol "rc" "%d" $refcount $sh end else if (($bucket->type == &apr_bucket_type_heap) || \ ($bucket->type == &apr_bucket_type_pool) || \ ($bucket->type == &apr_bucket_type_mmap) || \ ($bucket->type == &apr_bucket_type_transient) || \ ($bucket->type == &apr_bucket_type_immortal)) # in-memory buckets if $bucket->type == &apr_bucket_type_heap set $refcount = ((apr_bucket_refcount *)$bucket->data)->refcount set $p = (apr_bucket_heap *)$bucket->data set $data = $p->base+$bucket->start else if $bucket->type == &apr_bucket_type_pool set $refcount = ((apr_bucket_refcount *)$bucket->data)->refcount set $p = (apr_bucket_pool *)$bucket->data if !$p->pool set $p = (apr_bucket_heap *)$bucket->data end set $data = $p->base+$bucket->start else if $bucket->type == &apr_bucket_type_mmap # is this safe if not APR_HAS_MMAP? set $refcount = ((apr_bucket_refcount *)$bucket->data)->refcount set $p = (apr_bucket_mmap *)$bucket->data set $data = ((char *)$p->mmap->mm)+$bucket->start else if (($bucket->type == &apr_bucket_type_transient) || \ ($bucket->type == &apr_bucket_type_immortal)) set $data = ((char *)$bucket->data)+$bucket->start end end end end if $sh printf " | [" else printf " contents=[" end set $datalen = $bucket->length if $datalen > 17 printmem $data 17 printf "..." set $datalen = 20 else printmemn $data $datalen end printf "]" while $datalen < 20 printf " " set $datalen = $datalen + 1 end if $refcount != -1 print_bkt_datacol "rc" "%d" $refcount $sh else print_bkt_datacol "rc" "n/%c" 'a' $sh end else # 3rd-party bucket type print_bkt_datacol "contents" "[**unknown**%c" ']' $sh printf " " print_bkt_datacol "rc" "n/%c" 'a' $sh end end end end printf "\n" end define dump_bucket dump_bucket_ex $arg0 0 end document dump_bucket Print bucket info end define dump_brigade set $bb = (apr_bucket_brigade *)$arg0 set $bucket = $bb->list.next set $sentinel = ((char *)((&($bb->list)) \ - ((size_t) &((struct apr_bucket *)0)->link))) printf "dump of brigade 0x%lx\n", (unsigned long)$bb printf " | type (address) | length | " printf "data addr | contents | rc\n" printf "----------------------------------------" printf "----------------------------------------\n" if $bucket == $sentinel printf "brigade is empty\n" end set $j = 0 while $bucket != $sentinel printf "%2d", $j dump_bucket_ex $bucket 1 set $j = $j + 1 set $bucket = $bucket->link.next end printf "end of brigade\n" end document dump_brigade Print bucket brigade info end define dump_filters set $f = $arg0 while $f printf "%s(0x%lx): ctx=0x%lx, r=0x%lx, c=0x%lx\n", \ $f->frec->name, (unsigned long)$f, (unsigned long)$f->ctx, \ $f->r, $f->c set $f = $f->next end end document dump_filters Print filter chain info end define dump_filter_chain set $r = $arg0 set $f = $r->output_filters while $f if $f == $r->output_filters printf "r->output_filters =>\n" end if $f == $r->proto_output_filters printf "r->proto_output_filters =>\n" end if $f == $r->connection->output_filters printf "r->connection->output_filters =>\n" end printf " %s(0x%lx): type=%d, ctx=0x%lx, r=%s(0x%lx), c=0x%lx\n", \ $f->frec->name, (unsigned long)$f, $f->frec->ftype, (unsigned long)$f->ctx, \ $f->r == $r ? "r" : ($f->r == 0L ? "null" : \ ($f->r == $r->main ? "r->main" : \ ($r->main && $f->r == $r->main->main ? "r->main->main" : "????"))), \ $f->r, $f->c set $f = $f->next end end document dump_filter_chain Print filter chain info given a request_rec pointer end define dump_process_rec set $p = $arg0 printf "process_rec=0x%lx:\n", (unsigned long)$p printf " pool=0x%lx, pconf=0x%lx\n", \ (unsigned long)$p->pool, (unsigned long)$p->pconf end document dump_process_rec Print process_rec info end define dump_server_rec set $s = $arg0 printf "name=%s:%d\n", \ $s->server_hostname, $s->port dump_process_rec($s->process) end document dump_server_rec Print server_rec info end define dump_servers set $s = $arg0 while $s dump_server_rec($s) printf "\n" set $s = $s->next end end document dump_servers Print server_rec list info end define dump_request_tree set $r = $arg0 set $i while $r printf "r=(0x%lx): uri=%s, handler=%s, r->main=0x%lx\n", \ $r, $r->unparsed_uri, $r->handler ? $r->handler : "(none)", $r->main set $r = $r->main end end define dump_allocator printf "Allocator current_free_index = %d, max_free_index = %d\n", \ ($arg0)->current_free_index, ($arg0)->max_free_index printf "Allocator free list:\n" set $i = 0 set $max =(sizeof $arg0->free)/(sizeof $arg0->free[0]) set $kb = 0 while $i < $max set $node = $arg0->free[$i] if $node != 0 printf " #%2d: ", $i while $node != 0 printf "%d, ", ($node->index + 1) << 12 set $kb = $kb + (($node->index + 1) << 2) set $node = $node->next end printf "ends.\n" end set $i = $i + 1 end printf "Sum of free blocks: %dkiB\n", $kb end document dump_allocator Print status of an allocator and its freelists. end define dump_one_pool set $p = $arg0 set $size = 0 set $free = 0 set $nodes = 0 set $node = $arg0->active set $done = 0 while $done == 0 set $size = $size + (($node->index + 1) << 12) set $free = $free + ($node->endp - $node->first_avail) set $nodes = $nodes + 1 set $node = $node->next if $node == $arg0->active set $done = 1 end end printf "Pool '" if $p->tag printf "%s", $p->tag else printf "no tag" end printf "' [%p]: %d/%d free (%d blocks)\n", $p, $free, $size, $nodes end define dump_all_pools set $root = $arg0 while $root->parent set $root = $root->parent end dump_pool_and_children $root end document dump_all_pools Dump the whole pool hierarchy starting from apr_global_pool. Requires an arbitrary pool as starting parameter. end python from __future__ import print_function class DumpPoolAndChilds (gdb.Command): """Dump the whole pool hierarchy starting from the given pool.""" def __init__ (self): super (DumpPoolAndChilds, self).__init__ ("dump_pool_and_children", gdb.COMMAND_USER) def _allocator_free_blocks(self, alloc): salloc = "%s" % (alloc) if self.total_free_blocks.get(salloc) != None: return self.total_free_blocks[salloc] i = 0 dalloc = alloc.dereference() max =(dalloc['free'].type.sizeof)/(dalloc['free'][0].type.sizeof) kb = 0 while i < max: node = dalloc['free'][i] if node != 0: while node != 0: noded = node.dereference() kb = kb + ((int(noded['index']) + 1) << 2) node = noded['next'] i = i + 1 self.total_free_blocks[salloc] = kb return kb def _dump_one_pool(self, arg): size = 0 free = 0 nodes = 0 darg = arg.dereference() active = darg['active'] node = active done = 0 while done == 0: noded = node.dereference() size = size + ((int(noded['index']) + 1) << 12) free = free + (noded['endp'] - noded['first_avail']) nodes = nodes + 1 node = noded['next'] if node == active: done = 1 if darg['tag'] != 0: tag = darg['tag'].string() else: tag = "No tag" print("Pool '%s' [%s]: %d/%d free (%d blocks) allocator: %s free blocks in allocator: %i kiB" % (tag, arg, free, size, nodes, darg['allocator'], self._allocator_free_blocks(darg['allocator']))) self.free = self.free + free self.size = self.size + size self.nodes = self.nodes + nodes def _dump(self, arg, depth): pool = arg print("%*c" % (depth * 4 + 1, " "), end="") self._dump_one_pool(pool) if pool['child'] != 0: self._dump(pool['child'], depth + 1) s = pool['sibling'] if s != 0: self._dump(s, depth) def invoke (self, arg, from_tty): pool = gdb.parse_and_eval(arg) self.free = 0 self.size = 0 self.nodes = 0 self.total_free_blocks = {} self._dump(pool, 0) print("Total %d/%d free (%d blocks)" % (self.free, self.size, self.nodes)) sum = 0 for key in self.total_free_blocks: sum = sum + self.total_free_blocks[key] print("Total free allocator blocks: %i kiB" % (sum)) DumpPoolAndChilds () end document dump_pool_and_children Dump the whole pool hierarchy starting from the given pool. end # Set sane defaults for common signals: handle SIGPIPE noprint pass nostop handle SIGUSR1 print pass nostop httpd-2.4.41/README0000644000000000000500000001104212270242107012107 0ustar rootsrc Apache HTTP Server What is it? ----------- The Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Originally designed as a replacement for the NCSA HTTP Server, it has grown to be the most popular web server on the Internet. As a project of the Apache Software Foundation, the developers aim to collaboratively develop and maintain a robust, commercial-grade, standards-based server with freely available source code. The Latest Version ------------------ Details of the latest version can be found on the Apache HTTP server project page under http://httpd.apache.org/. Documentation ------------- The documentation available as of the date of this release is included in HTML format in the docs/manual/ directory. The most up-to-date documentation can be found at http://httpd.apache.org/docs/2.4/. Installation ------------ Please see the file called INSTALL. Platform specific notes can be found in README.platforms. Licensing --------- Please see the file called LICENSE. Cryptographic Software Notice ----------------------------- This distribution may include software that has been designed for use with cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. See for more information. The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this Apache Software Foundation distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code. The following provides more details on the included files that may be subject to export controls on cryptographic software: Apache httpd 2.0 and later versions include the mod_ssl module under modules/ssl/ for configuring and listening to connections over SSL encrypted network sockets by performing calls to a general-purpose encryption library, such as OpenSSL or the operating system's platform-specific SSL facilities. In addition, some versions of apr-util provide an abstract interface for symmetrical cryptographic functions that make use of a general-purpose encryption library, such as OpenSSL, NSS, or the operating system's platform-specific facilities. This interface is known as the apr_crypto interface, with implementation beneath the /crypto directory. The apr_crypto interface is used by the mod_session_crypto module available under modules/session for optional encryption of session information. Some object code distributions of Apache httpd, indicated with the word "crypto" in the package name, may include object code for the OpenSSL encryption library as distributed in open source form from . The above files are optional and may be removed if the cryptographic functionality is not desired or needs to be excluded from redistribution. Distribution packages of Apache httpd that include the word "nossl" in the package name have been created without the above files and are therefore not subject to this notice. Contacts -------- o If you want to be informed about new code releases, bug fixes, security fixes, general news and information about the Apache server subscribe to the apache-announce mailing list as described under o If you want freely available support for running Apache please see the resources at o If you have a concrete bug report for Apache please see the instructions for bug reporting at o If you want to participate in actively developing Apache please subscribe to the `dev@httpd.apache.org' mailing list as described at httpd-2.4.41/CHANGES0000644000000000000500000103671313523263020012236 0ustar rootsrc -*- coding: utf-8 -*- Changes with Apache 2.4.41 *) mod_proxy_balancer: Improve balancer-manager protection against XSS/XSRF attacks from trusted users. [Joe Orton, Niels Heinen ] *) mod_session: Introduce SessionExpiryUpdateInterval which allows to configure the session/cookie expiry's update interval. PR 57300. [Paul Spangler ] *) modules/filters: Fix broken compilation when using old GCC (<4.2.x). PR 63633. [Rainer Jung, Joe Orton] *) mod_ssl: Fix startup failure in 2.4.40 with SSLCertificateChainFile configured for a domain managed by mod_md. [Stefan Eissing] Changes with Apache 2.4.40 *) core, mod_rewrite: Set PCRE_DOTALL by default. Revert via RegexDefaultOptions -DOTALL [Yann Ylavic] *) core: Remove request details from built-in error documents [Eric Covener] *) mod_http2: core setting "LimitRequestFieldSize" is not additionally checked on merged header fields, just as HTTP/1.1 does. [Stefan Eissing, Michael Kaufmann] *) mod_http2: fixed a bug that prevented proper stream cleanup when connection throttling was in place. Stream resets by clients on streams initiated by them are counted as possible trigger for throttling. [Stefan Eissing] *) mod_http2/mpm_event: Fixes the behaviour when a HTTP/2 connection has nothing more to write with streams ongoing (flow control block). The timeout waiting for the client to send WINODW_UPDATE was incorrectly KeepAliveTimeout and not Timeout as it should be. Fixes PR 63534. [Yann Ylavic, Stefan Eissing] *) mod_proxy_balancer: Load balancer required byrequests when bytraffic chosen. PR 62372. [Jim Jagielski] *) mod_proxy_hcheck: Create the configuration for mod_proxy_hcheck when used in BalancerMember. PR 60757. [Jean-Frederic Clere] *) mod_proxy_hcheck: Mute extremely frequent debug message. [Yann Ylavic] *) mod_ssl/mod_md: reversing dependency by letting mod_ssl offer hooks for adding certificates and keys to a virtual host. An additional hook allows answering special TLS connections as used in ACME challenges. Adding 2 new hooks for init/get of OCSP stapling status information when other modules want to provide those. Falls back to own implementation with same behaviour as before. [Stefan Eissing] *) mod_md: new features - protocol - supports the ACMEv2 protocol. It is the default and will be used on the next certificate renewal, unless another "MDCertificateAuthority" is configured - ACMEv2 endpoints use the GET via empty POST way of accessing resources, see announcement by Let's Encrypt: https://community.letsencrypt.org/t/acme-v2-scheduled-deprecation-of-unauthenticated-resource-gets/74380 - challenges - new challenge method 'tls-alpn-01' implemented - challenge type 'tls-sni-01' has been removed as CAs do not offer this any longer - supports command configuration to setup/teardown 'dns-01' challenges - supports wildcard certificates when dns challenges are configured - status information and monitoring - a domain exposes its status at https:///.httpd/certificate-status - Managed Domains are now in Apache's 'server-status' page - A new handler 'md-status' exposes verbose status information in JSON format - new directives - "MDCertificateFile" and "MDCertificateKeyFile" to configure a Managed Domain that uses static files. Auto-renewal is turned off for those. - "MDMessageCmd" that is invoked on several events: 'renewed', 'expiring' and 'errored'. - "MDWarnWindow" directive to configure when expiration warnings shall be issued. [Stefan Eissing] *) mod_mime_magic: Fix possible corruption of returned strings. [Christophe Jaillet] *) Default "conf/magic": Fix pattern for "audio/x-wav" for WAV files, remove "audio/unknown" pattern for other RIFF files. [Àngel Ollé Blázquez ] *) mod_proxy_http2: fixing a potential NULL pointer use in logging. [Christophe Jaillet, Dr Silvio Cesare InfoSect] *) mod_dav: Reduce the amount of memory needed when doing PROPFIND's on large collections by improving the memory management. [Joe Orton, Ruediger Pluem] *) mod_proxy_http2: adding support for handling trailers in both directions. PR 63502. [Stefan Eissing] *) mod_proxy_http: forward 100-continue, and minimize race conditions when reusing backend connections. PR 60330. [Yann Ylavic, Jean-Frederic Clere] *) mod_proxy_balancer: Fix some HTML syntax issues. [Christophe Jaillet] *) When using mod_status with the Event MPM, report the number of requests associated with an active connection in the "ACC" field. Previously zero was always reported with this MPM. PR60647. [Eric Covener] *) mod_http2: remove the no longer existing h2_ngn_shed.c from Cmake. [Stefan Eissing] *) mod_proxy/ssl: Proxy SSL client certificate configuration and other proxy SSL configurations broken inside context. PR 63430. [Ruediger Pluem, Yann Ylavic] *) mod_proxy: allow SSLProxyCheckPeer* usage for all proxy modules. PR 61857. [Markus Gausling , Yann Ylavic] *) mod_reqtimeout: Fix default rates missing (not applied) in 2.4.39. PR 63325. [Yann Ylavic] *) mod_info: Fix output of server settings for PIPE_BUF in mod_info in the rare case that PIPE_BUF is defined. [Rainer Jung] *) mod_md: Store permissions are enforced on file creation, enforcing restrictions in spite of umask. Fixes . [Stefan Eissing] Changes with Apache 2.4.39 *) SECURITY: CVE-2019-0197 (cve.mitre.org) mod_http2: fixes a possible crash when HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host. An Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Servers that never enabled the h2 protocol or only enabled it for https: and did not set "H2Upgrade on" are unaffected by this issue. [Stefan Eissing] *) SECURITY: CVE-2019-0196 (cve.mitre.org) mod_http2: using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparision when determining the method of a request and thus process the request incorrectly. [Stefan Eissing] *) SECURITY: CVE-2019-0211 (cve.mitre.org) MPMs unix: Fix a local priviledge escalation vulnerability by not maintaining each child's listener bucket number in the scoreboard, preventing unprivileged code like scripts run by/on the server (e.g. via mod_php) from modifying it persistently to abuse the priviledged main process. [Charles Fol , Yann Ylavic] *) SECURITY: CVE-2019-0196 (cve.mitre.org) mod_http2: using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparision when determining the method of a request and thus process the request incorrectly. [Stefan Eissing] *) SECURITY: CVE-2019-0217 (cve.mitre.org) mod_auth_digest: Fix a race condition checking user credentials which could allow a user with valid credentials to impersonate another, under a threaded MPM. PR 63124. [Simon Kappel ] *) SECURITY: CVE-2019-0215 (cve.mitre.org) mod_ssl: Fix access control bypass for per-location/per-dir client certificate verification in TLSv1.3. *) SECURITY: CVE-2019-0220 (cve.mitre.org) Merge consecutive slashes in URL's. Opt-out with `MergeSlashes OFF`. [Eric Covener] *) mod_proxy/ssl: Cleanup per-request SSL configuration anytime a backend connection is recycled/reused to avoid a possible crash with some SSLProxy configurations in or context. PR 63256. [Yann Ylavic] *) mod_log_config: Support %{c}h for conn-hostname, %h for useragent_host PR 55348 *) mod_socache_redis: Support for Redis as socache storage provider. *) core: new configuration option 'MergeSlashes on|off' that controls handling of multiple, consecutive slash ('/') characters in the path component of the request URL. [Eric Covener] *) mod_http2: when SSL renegotiation is inhibited and a 403 ErrorDocument is in play, the proper HTTP/2 stream reset did not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael Kaufmann] *) mod_http2: new configuration directive: `H2Padding numbits` to control padding of HTTP/2 payload frames. 'numbits' is a number from 0-8, controlling the range of padding bytes added to a frame. The actual number added is chosen randomly per frame. This applies to HEADERS, DATA and PUSH_PROMISE frames equally. The default continues to be 0, e.g. no padding. [Stefan Eissing] *) mod_http2: ripping out all the h2_req_engine internal features now that mod_proxy_http2 has no more need for it. Optional functions are still declared but no longer implemented. While previous mod_proxy_http2 will work with this, it is recommeneded to run the matching versions of both modules. [Stefan Eissing] *) mod_proxy_http2: changed mod_proxy_http2 implementation and fixed several bugs which resolve PR63170. The proxy module does now a single h2 request on the (reused) connection and returns. [Stefan Eissing] *) mod_http2/mod_proxy_http2: proxy_http2 checks correct master connection aborted status to trigger immediate shutdown of backend connections. This is now always signalled by mod_http2 when the the session is being released. proxy_http2 now only sends a PING frame to the backend when there is not already one in flight. [Stefan Eissing] *) mod_proxy_http2: fixed an issue where a proxy_http2 handler entered an infinite loop when encountering certain errors on the backend connection. See . [Stefan Eissing] *) mod_http2: Configuration directives H2Push and H2Upgrade can now be specified per Location/Directory, e.g. disabling PUSH for a specific set of resources. [Stefan Eissing] *) mod_http2: HEAD requests to some module such as mod_cgid caused the stream to terminate improperly and cause a HTTP/2 PROTOCOL_ERROR. Fixes . [Michael Kaufmann] *) http: Fix possible empty response with mod_ratelimit for HEAD requests. PR 63192. [Yann Ylavic] *) mod_cache_socache: Avoid reallocations and be safe with outgoing data lifetime. [Yann Ylavic] *) mod_http2: enable re-use of slave connections again. Fixed slave connection keepalives counter. [Stefan Eissing] *) mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR 61310. [Yann Ylavic] *) core: Split out the ability to parse wildcard files and directories from the Include/IncludeOptional directives into a generic set of functions ap_dir_nofnmatch() and ap_dir_fnmatch(). [Graham Leggett] *) mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932 *) mod_ssl: Don't unset FIPS mode on restart unless it's forced by configuration (SSLFIPS on) and not active by default in OpenSSL. PR 63136. [Yann Ylavic] Changes with Apache 2.4.38 *) SECURITY: CVE-2018-17199 (cve.mitre.org) mod_session: mod_session_cookie does not respect expiry time allowing sessions to be reused. [Hank Ibell] *) SECURITY: CVE-2018-17189 (cve.mitre.org) mod_http2: fixes a DoS attack vector. By sending slow request bodies to resources not consuming them, httpd cleanup code occupies a server thread unnecessarily. This was changed to an immediate stream reset which discards all stream state and incoming data. [Stefan Eissing] *) SECURITY: CVE-2019-0190 (cve.mitre.org) mod_ssl: Fix infinite loop triggered by a client-initiated renegotiation in TLSv1.2 (or earlier) with OpenSSL 1.1.1 and later. PR 63052. [Joe Orton] *) mod_ssl: Clear retry flag before aborting client-initiated renegotiation. PR 63052 [Joe Orton] *) mod_negotiation: Treat LanguagePriority as case-insensitive to match AddLanguage behavior and HTTP specification. PR 39730 [Christophe Jaillet] *) mod_md: incorrect behaviour when synchronizing ongoing ACME challenges have been fixed. [Michael Kaufmann, Stefan Eissing] *) mod_setenvif: We can have expressions that become true if a regex pattern in the expression does NOT match. In this case val is NULL and we should just set the value for the environment variable like in the pattern case. [Ruediger Pluem] *) mod_session: Always decode session attributes early. [Hank Ibell] *) core: Incorrect values for environment variables are substituted when multiple environment variables are specified in a directive. [Hank Ibell] *) mod_rewrite: Only create the global mutex used by "RewriteMap prg:" when this type of map is present in the configuration. PR62311. [Hank Ibell ] *) mod_dav: Fix invalid Location header when a resource is created by passing an absolute URI on the request line [Jim Jagielski] *) mod_session_cookie: avoid duplicate Set-Cookie header in the response. [Emmanuel Dreyfus , Luca Toscano] *) mod_ssl: clear *SSL errors before loading certificates and checking afterwards. Otherwise errors are reported when other SSL using modules are in play. Fixes PR 62880. [Michael Kaufmann] *) mod_ssl: Fix the error code returned in an error path of 'ssl_io_filter_handshake()'. This messes-up error handling performed in 'ssl_io_filter_error()' [Yann Ylavic] *) mod_ssl: Fix $HTTPS definition for "SSLEngine optional" case, and fix authz provider so "Require ssl" works correctly in HTTP/2. PR 61519, 62654. [Joe Orton, Stefan Eissing] *) mod_proxy: If ProxyPassReverse is used for reverse mapping of relative redirects, subsequent ProxyPassReverse statements, whether they are relative or absolute, may fail. PR 60408. [Peter Haworth ] *) mod_lua: Now marked as a stable module [https://s.apache.org/Xnh1] Changes with Apache 2.4.37 *) mod_ssl: Fix HTTP/2 failures when using OpenSSL 1.1.1. [Rainer Jung] *) mod_ssl: Fix crash during SSL renegotiation with OptRenegotiate set, when client certificates are available from the original handshake but were originally not verified and should get verified now. This is a regression in 2.4.36 (unreleased). [Ruediger Pluem] *) mod_ssl: Correctly merge configurations that have client certificates set by SSLProxyMachineCertificate{File|Path}. [Ruediger Pluem] Changes with Apache 2.4.36 *) mod_brotli, mod_deflate: Restore the separate handling of 304 Not Modified responses. Regression introduced in 2.4.35. *) mod_proxy_scgi, mod_proxy_uwsgi: improve error handling when sending the body of the response. [Jim Jagielski] *) mpm_event: Stop issuing AH00484 "server reached MaxRequestWorkers..." when there are still idle threads available. When there are less idle threads than MinSpareThreads, issue new one-time message AH10159. Matches worker MPM. [Eric Covener] *) mod_http2: adding defensive code for stream EOS handling, in case the request handler missed to signal it the normal way (eos buckets). Addresses github issues https://github.com/icing/mod_h2/issues/164, https://github.com/icing/mod_h2/issues/167 and https://github.com/icing/mod_h2/issues/170. [Stefan Eissing] *) ab: Add client certificate support. PR 55774. [Graham Leggett] *) ab: Disable printing temp key for OpenSSL before version 1.0.2. SSL_get_server_tmp_key is not available there. [Rainer Jung] *) mod_ssl: Fix a regression that the configuration settings for verify mode and verify depth were taken from the frontend connection in case of connections by the proxy to the backend. PR 62769. [Ruediger Pluem] *) MPMs: Initialize all runtime/asynchronous objects on a dedicated pool and before signals handling to avoid lifetime issues on restart or shutdown. PR 62658. [Yann Ylavic] *) mod_ssl: Add support for OpenSSL 1.1.1 and TLSv1.3. TLSv1.3 has behavioural changes compared to v1.2 and earlier; client and configuration changes should be expected. SSLCipherSuite is enhanced for TLSv1.3 ciphers, but applies at vhost level only. [Stefan Eissing, Yann Ylavic, Ruediger Pluem, Joe Orton] *) mod_auth_basic: Be less tolerant when parsing the credencial. Only spaces should be accepted after the authorization scheme. \t are also tolerated. [Christophe Jaillet] *) mod_socache_redis: New socache submodule provider to allow use of Redis as storage backend. [Jim Jagielski] *) mod_proxy_hcheck: Fix issues with interval determination. PR 62318 [Jim Jagielski] *) mod_proxy_hcheck: Fix issues with TCP health checks. PR 61499 [Dominik Stillhard ] *) mod_proxy_hcheck: take balancer's SSLProxy* directives into account. [Jim Jagielski] *) mod_status, mod_echo: Fix the display of client addresses. They were truncated to 31 characters which is not enough for IPv6 addresses. This is done by deprecating the use of the 'client' field and using the new 'client64' field in worker_score. PR 54848 [Bernhard Schmidt , Jim Jagielski] Changes with Apache 2.4.35 *) http: Enforce consistently no response body with both 204 and 304 statuses. [Yann Ylavic] *) mod_status: Cumulate CPU time of exited child processes in the "cu" and "cs" values. Add CPU time of the parent process to the "c" and "s" values. [Rainer Jung] *) mod_proxy: Improve the balancer member data shown in mod_status when "ProxyStatus" is "On": add "busy" count and show byte counts in auto mode always in units of kilobytes. [Rainer Jung] *) mod_status: Add cumulated response duration time in milliseconds. [Rainer Jung] *) mod_status: Complete the data shown for async MPMs in "auto" mode. Added number of processes, number of stopping processes and number of busy and idle workers. [Rainer Jung] *) mod_ratelimit: Don't interfere with "chunked" encoding, fixing regression introduced in 2.4.34. PR 62568. [Yann Ylavic] *) mod_proxy: Remove load order and link dependency between mod_lbmethod_* modules and mod_proxy. PR 62557. [Ruediger Pluem, William Rowe] *) Allow the argument to , , , , and to be quoted. This is primarily for the benefit of . [Eric Covener] *) mod_watchdog: Correct some log messages. [Rainer Jung] *) mod_md: When the last domain name from an MD is moved to another one, that now empty MD gets moved to the store archive. PR 62572. [Stefan Eissing] *) mod_ssl: Fix merging of SSLOCSPOverrideResponder. [Jeff Trawick, [Frank Meier ] *) mod_proxy_balancer: Restore compatibility with APR 1.4. [Joe Orton] Changes with Apache 2.4.34 *) SECURITY: CVE-2018-8011 (cve.mitre.org) mod_md: DoS via Coredumps on specially crafted requests *) SECURITY: CVE-2018-1333 (cve.mitre.org) mod_http2: DoS for HTTP/2 connections by specially crafted requests *) Introduce zh-cn and zh-tw (simplified and traditional Chinese) error document translations. [CodeingBoy, popcorner] *) event: avoid possible race conditions with modules on the child pool. [Stefan Fritsch] *) mod_proxy: Fix a corner case where the ProxyPassReverseCookieDomain or ProxyPassReverseCookiePath directive could fail to update correctly 'domain=' or 'path=' in the 'Set-Cookie' header. PR 61560. [Christophe Jaillet] *) mod_ratelimit: fix behavior when proxing content. PR 62362. [Luca Toscano, Yann Ylavic] *) core: Re-allow '_' (underscore) in hostnames. [Eric Covener] *) mod_authz_core: If several parameters are used in a AuthzProviderAlias directive, if these parameters are not enclosed in quotation mark, only the first one is handled. The other ones are silently ignored. Add a message to warn about such a spurious configuration. PR 62469 [Hank Ibell , Christophe Jaillet] *) mod_md: improvements and bugfixes - MDNotifyCmd now takes additional parameter that are passed on to the called command. - ACME challenges have better checks for interference with other modules - ACME challenges are only handled for domains managed by the module, allowing other ACME clients to operate for other domains in the server. - better libressl integration *) mod_proxy_wstunnel: Add default schema ports for 'ws' and 'wss'. PR 62480. [Lubos Uhliarik } *) logging: Some early logging-related startup messages could be lost when using syslog for the global ErrorLog. [Eric Covener] *) mod_cache: Handle case of an invalid Expires header value RFC compliant like the case of an Expires time in the past: allow to overwrite the non-caching decision using CacheStoreExpired and respect Cache-Control "max-age" and "s-maxage". [Rainer Jung] *) mod_xml2enc: Fix forwarding of error metadata/responses. PR 62180. [Micha Lenk , Yann Ylavic] *) mod_proxy_http: Fix response header thrown away after the previous one was considered too large and truncated. PR 62196. [Yann Ylavic] *) core: Add and handle AP_GETLINE_NOSPC_EOL flag for ap_getline() family of functions to consume the end of line when the buffer is exhausted. PR 62198. [Yann Ylavic] *) mod_proxy_http: Add new worker parameter 'responsefieldsize' to allow maximum HTTP response header size to be increased past 8192 bytes. PR 62199. [Hank Ibell ] *) mod_ssl: Extend SSLOCSPEnable with mode 'leaf' that only checks the leaf of a certificate chain. PR62112. [Ricardo Martin Camarero ] *) http: Fix small memory leak per request when handling persistent connections. [Ruediger Pluem, Joe Orton] *) mod_proxy_html: Fix variable interpolation and memory allocation failure in ProxyHTMLURLMap. PR 62344. [Ewald Dieterich ] *) mod_remoteip: Fix RemoteIP{Trusted,Internal}ProxyList loading broken by 2.4.30. PR 62220. [Chritophe Jaillet, Yann Ylavic] *) mod_remoteip: When overriding the useragent address from X-Forwarded-For, zero out what had been initialized as the connection-level port. PR59931. [Hank Ibell ] *) core: In ONE_PROCESS/debug mode, cleanup everything when exiting. [Yann Ylavic] *) mod_proxy_balancer: Add hot spare member type and corresponding flag (R). Hot spare members are used as drop-in replacements for unusable workers in the same load balancer set. This differs from hot standbys which are only used when all workers in a set are unusable. PR 61140. [Jim Riggs] *) suexec: Add --enable-suexec-capabilites support on Linux, to use setuid/setgid capability bits rather than a setuid root binary. [Joe Orton] *) suexec: Add support for logging to syslog as an alternative to logging to a file; use --without-suexec-logfile --with-suexec-syslog. [Joe Orton] *) mod_ssl: Restore 2.4.29 behaviour in SSL vhost merging/enabling which broke some rare but previously-working configs. [Joe Orton] *) core, log: improve sanity checks for the ErrorLog's syslog config, and explicitly allow only lowercase 'syslog' settings. PR 62102 [Luca Toscano, Jim Riggs, Christophe Jaillet] *) mod_http2: accurate reporting of h2 data input/output per request via mod_logio. Fixes an issue where output sizes where counted n-times on reused slave connections. [Stefan Eissing] See github issue: https://github.com/icing/mod_h2/issues/158 *) mod_http2: Fix unnecessary timeout waits in case streams are aborted. [Stefan Eissing] *) mod_http2: restoring the v1.10.16 keepalive timeout behaviour of mod_http2. [Stefan Eissing] *) mod_proxy: Do not restrict the maximum pool size for backend connections any longer by the maximum number of threads per process and use a better default if mod_http2 is loaded. [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Gregg Smith] *) mod_slotmem_shm: Add generation number to shm filename to fix races with graceful restarts. PRs 62044 and 62308. [Jim Jagielski, Yann Ylavic] *) core: Preserve the original HTTP request method in the '%] *) mod_remoteip: make proxy-protocol work on slave connections, e.g. in HTTP/2 requests. [Stefan Eissing] See also https://github.com/roadrunner2/mod-proxy-protocol/issues/6 *) mod_ssl: Fix merging of proxy SSL context outside sections, regression introduced in 2.4.30. PR 62232. [Rainer Jung, Yann Ylavic] *) mod_md: Fix compilation with OpenSSL before version 1.0.2. [Rainer Jung] *) mod_dumpio: do nothing below log level TRACE7. [Yann Ylavic] *) mod_remoteip: Restore compatibility with APR 1.4 (apr_sockaddr_is_wildcard). [Eric Covener] *) core: On ECBDIC platforms, some errors related to oversized headers may be misreported or be logged as ASCII escapes. PR 62200 [Hank Ibell ] *) mod_ssl: Fix cmake-based build. PR 62266. [Rainer Jung] *) core: Add , and conditional section containers. [Eric Covener, Joe Orton] *) rotatelogs: Add -D option to create parent directories. PR 46669. [Philippe Lantin , Ben Reser, Rainer Jung] Changes with Apache 2.4.33 *) core: Fix request timeout logging and possible crash for error_log hooks. [Yann Ylavic] *) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM, where children processes need to attach them instead since they are owned by the parent process already. [Yann Ylavic] *) ab: try all destination socket addresses returned by apr_sockaddr_info_get instead of failing on first one when not available. Needed for instance if localhost resolves to both ::1 and 127.0.0.1 e.g. if both are in /etc/hosts. [Jan Kaluza] *) ab: Use only one connection to determine working destination socket address. [Jan Kaluza] *) ab: LibreSSL doesn't have or require Windows applink.c. [Gregg L. Smith] *) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms. apr-util's bcrypt implementation doesn't tolerate EBCDIC. [Eric Covener] *) htpasswd/htdbm: report the right limit when get_password() overflows. [Yann Ylavic] *) htpasswd: Don't fail in -v mode if password file is unwritable. PR 61631. [Joe Orton] *) htpasswd: don't point to (unused) stack memory on output to make static analysers happy. PR 60634. [Yann Ylavic, reported by shqking and Zhenwei Zou] Changes with Apache 2.4.32 *) mod_access_compat: Fail if a comment is found in an Allow or Deny directive. [Jan Kaluza] *) mod_authz_host: Ignore comments after "Require host", logging a warning, or logging an error if the line is otherwise empty. [Jan Kaluza, Joe Orton] *) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix Y2K38 bug. [Joe Orton] *) mod_ssl: Support SSL DN raw variable extraction without conversion to UTF-8, using _RAW suffix on variable names. [Joe Orton] *) ab: Fix https:// connection failures (regression in 2.4.30); fix crash generating CSV output for large -n. [Joe Orton, Jan Kaluza] Changes with Apache 2.4.31 (not released) *) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic] *) mod_ldap: Avoid possible crashes, hangs, and busy loops due to improper merging of the cache lock in vhost config. PR 43164 [Eric Covener] *) mpm_event: Do lingering close in worker(s). [Yann Ylavic] *) mpm_queue: Put fdqueue code in common for MPMs event and worker. [Yann Ylavic] Changes with Apache 2.4.30 (not released) *) SECURITY: CVE-2017-15710 (cve.mitre.org) Out of bound write in mod_authnz_ldap with AuthLDAPCharsetConfig enabled [Eric Covener, Luca Toscano, Yann Ylavic] *) SECURITY: CVE-2018-1283 (cve.mitre.org) mod_session: CGI-like applications that intend to read from mod_session's 'SessionEnv ON' could be fooled into reading user-supplied data instead. [Yann Ylavic] *) SECURITY: CVE-2018-1303 (cve.mitre.org) mod_cache_socache: Fix request headers parsing to avoid a possible crash with specially crafted input data. [Ruediger Pluem] *) SECURITY: CVE-2018-1301 (cve.mitre.org) core: Possible crash with excessively long HTTP request headers. Impractical to exploit with a production build and production LogLevel. [Yann Ylavic] *) SECURITY: CVE-2017-15715 (cve.mitre.org) core: Configure the regular expression engine to match '$' to the end of the input string only, excluding matching the end of any embedded newline characters. Behavior can be changed with new directive 'RegexDefaultOptions'. [Yann Ylavic] *) SECURITY: CVE-2018-1312 (cve.mitre.org) mod_auth_digest: Fix generation of nonce values to prevent replay attacks across servers using a common Digest domain. This change may cause problems if used with round robin load balancers. PR 54637 [Stefan Fritsch] *) SECURITY: CVE-2018-1302 (cve.mitre.org) mod_http2: Potential crash w/ mod_http2. [Stefan Eissing] *) mod_proxy: Worker schemes and hostnames which are too large are no longer fatal errors; it is logged and the truncated values are stored. [Jim Jagielski] *) mod_proxy: Allow setting options to globally defined balancer from ProxyPass used in VirtualHost. Balancers are now merged using the new merge_balancers method which merges the balancers options. [Jan Kaluza] *) logresolve: Fix incorrect behavior or segfault if -c flag is used Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259 [Stefan Fritsch] *) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla). Add ability for PROXY protocol processing to be optional to donated code. See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri] *) mod_proxy, mod_ssl: Handle SSLProxy* directives in sections, allowing per backend TLS configuration. [Yann Ylavic] *) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris, Jim Jagielski] *) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not depend on the number of restarts (non-Unix systems) and preserve shared names as much as possible on configuration changes for SHMs and persisted files. PR 62044. [Yann Ylavic, Jim Jagielski] *) mod_http2: obsolete code removed, no more events on beam pool destruction, discourage content encoders on http2-status response (where they do not work). [Stefan Eissing] *) mpm_event: Let the listener thread do its maintenance job on resources shortage. PR 61979. [Yann Ylavic] *) mpm_event: Wakeup the listener to re-enable listening sockets. [Yann Ylavic] *) mod_ssl: The SSLCompression directive will now give an error if used with an OpenSSL build which does not support any compression methods. [Joe Orton] *) mpm_event,worker: Mask signals for threads created by modules in child init, so that they don't receive (implicitely) the ones meant for the MPM. PR 62009. [Armin Abfalterer , Yann Ylavic] *) mod_md: new experimental, module for managing domains across virtual hosts, implementing the Let's Encrypt ACMEv1 protocol to signup and renew certificates. Please read the modules documentation for further instructions on how to use it. [Stefan Eissing] *) mod_proxy_html: skip documents shorter than 4 bytes PR 56286 [Micha Lenk ] *) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for the lifetime of the connection, each time it is processed by MPM event. [Yann Ylavic] *) mpm_event: Update scoreboard status for KeepAlive state. [Yann Ylavic] *) mod_ldap: Fix a case where a full LDAP cache would continually fail to purge old entries and log AH01323. PR61891. [Hendrik Harms ] *) mpm_event: close connections not reported as handled by any module to avoid losing track of them and leaking scoreboard entries. PR 61551. [Yann Ylavic] *) core: A signal received while stopping could have crashed the main process. PR 61558. [Yann Ylavic] *) mod_ssl: support for mod_md added. [Stefan Eissing] *) mod_proxy_html: process parsed comments immediately. Fixes bug (seen in the wild when used with IBM's HTTPD bundle) where parsed comments may be lost. [Nick Kew] *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew] *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional" HTML/XHTML. PR 56457 [Nick Kew] *) mpm_event: avoid a very unlikely race condition between the listener and the workers when the latter fails to add a connection to the pollset. [Yann Ylavic] *) core: silently ignore a not existent file path when IncludeOptional is used. PR 57585. [Alberto Murillo Silva , Luca Toscano] *) mod_macro: fix usability of globally defined macros in .htaccess files. PR 57525. [Jose Kahan , Yann Ylavic] *) mod_rewrite, core: add the Vary header when a condition evaluates to true and the related RewriteRule is used in a Directory context (triggering an internal redirect). [Luca Toscano] *) ab: Make the TLS layer aware that the underlying socket is nonblocking, and use/handle POLLOUT where needed to avoid busy IOs and recover write errors when appropriate. [Yann Ylavic] *) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous read was incomplete (the SSL case can cause the next poll() to timeout since data are buffered already). PR 61301 [Luca Toscano, Yann Ylavic] *) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain information retrievals on null bucket beams where it makes sense. [Stefan Eissing] Changes with Apache 2.4.29 *) mod_unique_id: Use output of the PRNG rather than IP address and pid, avoiding sleep() call and possible DNS issues at startup, plus improving randomness for IPv6-only hosts. [Jan Kaluza] *) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST is used in a condition that evaluates to true. PR 58231 [Luca Toscano, Yann Ylavic] *) mod_http2: v0.10.12, removed optimization for mutex handling in bucket beams that could lead to assertion failure in edge cases. [Stefan Eissing] *) mod_proxy: Fix regression for non decimal loadfactor parameter introduced in 2.4.28. [Jim Jagielski] *) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set. PR 61546. [Lubos Uhliarik ] *) mod_rewrite: Add support for starting External Rewriting Programs as non-root user on UNIX systems by specifying username and group name as third argument of RewriteMap directive. [Jan Kaluza] *) core: Rewrite the Content-Length filter to avoid excessive memory consumption. Chunked responses will be generated in more cases than in previous releases. PR 61222. [Joe Orton, Ruediger Pluem] *) mod_ssl: Fix SessionTicket callback return value, which does seem to matter with OpenSSL 1.1. [Yann Ylavic] Changes with Apache 2.4.28 *) SECURITY: CVE-2017-9798 (cve.mitre.org) Corrupted or freed memory access. must now be used in the main configuration file (httpd.conf) to register HTTP methods before the .htaccess files. [Yann Ylavic] *) event: Avoid possible blocking in the listener thread when shutting down connections. PR 60956. [Yann Ylavic] *) mod_speling: Don't embed referer data in a link in error page. PR 38923 [Nick Kew] *) htdigest: prevent a buffer overflow when a string exceeds the allowed max length in a password file. PR 61511. [Luca Toscano, Hanno Böck ] *) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25). [Jim Jagielski] *) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically. PR 61142. *) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond), 's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski] *) mod_http2: Fix for stalling when more than 32KB are written to a suspended stream. [Stefan Eissing] *) build: allow configuration without APR sources. [Jacob Champion] *) mod_ssl, ab: Fix compatibility with LibreSSL. PR 61184. [Bernard Spil , Michael Schlenker , Yann Ylavic] *) core/log: Support use of optional "tag" in syslog entries. PR 60525. [Ben Rubson , Jim Jagielski] *) mod_proxy: Fix ProxyAddHeaders merging. [Joe Orton] *) core: Disallow multiple Listen on the same IP:port when listener buckets are configured (ListenCoresBucketsRatio > 0), consistently with the single bucket case (default), thus avoiding the leak of the corresponding socket descriptors on graceful restart. [Yann Ylavic] *) event: Avoid listener periodic wake ups by using the pollset wake-ability when available. PR 57399. [Yann Ylavic, Luca Toscano] *) mod_proxy_wstunnel: Fix detection of unresponded request which could have led to spurious HTTP 502 error messages sent on upgrade connections. PR 61283. [Yann Ylavic] Changes with Apache 2.4.27 *) SECURITY: CVE-2017-9789 (cve.mitre.org) mod_http2: Read after free. When under stress, closing many connections, the HTTP/2 handling code would sometimes access memory after it has been freed, resulting in potentially erratic behaviour. [Stefan Eissing] *) SECURITY: CVE-2017-9788 (cve.mitre.org) mod_auth_digest: Uninitialized memory reflection. The value placeholder in [Proxy-]Authorization headers type 'Digest' was not initialized or reset before or between successive key=value assignments. [William Rowe] *) COMPATIBILITY: mod_lua: Remove the undocumented exported 'apr_table' global variable when using Lua 5.2 or later. This was exported as a side effect from luaL_register, which is no longer supported as of Lua 5.2 which deprecates pollution of the global namespace. [Rainer Jung] *) COMPATIBILITY: mod_http2: Disable and give warning when using Prefork. The server will continue to run, but HTTP/2 will no longer be negotiated. [Stefan Eissing] *) COMPATIBILITY: mod_proxy_fcgi: Revert to 2.4.20 FCGI behavior for the default ProxyFCGIBackendType, fixing a regression with PHP-FPM. PR 61202. [Jacob Champion, Jim Jagielski] *) mod_lua: Improve compatibility with Lua 5.1, 5.2 and 5.3. PR58188, PR60831, PR61245. [Rainer Jung] *) mod_http2: Simplify ready queue, less memory and better performance. Update mod_http2 version to 1.10.7. [Stefan Eissing] *) Allow single-char field names inadvertently disallowed in 2.4.25. PR 61220. [Yann Ylavic] *) htpasswd / htdigest: Do not apply the strict permissions of the temporary passwd file to a possibly existing passwd file. PR 61240. [Ruediger Pluem] *) core: Avoid duplicate HEAD in Allow header. This is a regression in 2.4.24 (unreleased), 2.4.25 and 2.4.26. PR 61207. [Christophe Jaillet] Changes with Apache 2.4.26 *) SECURITY: CVE-2017-7679 (cve.mitre.org) mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header. [Yann Ylavic] *) SECURITY: CVE-2017-7668 (cve.mitre.org) The HTTP strict parsing changes added in 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value. [Jacob Champion] *) SECURITY: CVE-2017-7659 (cve.mitre.org) A maliciously constructed HTTP/2 request could cause mod_http2 to dereference a NULL pointer and crash the server process. *) SECURITY: CVE-2017-3169 (cve.mitre.org) mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port. [Yann Ylavic] *) SECURITY: CVE-2017-3167 (cve.mitre.org) Use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed. [Emmanuel Dreyfus , Jacob Champion, Eric Covener] *) HTTP/2 support no longer tagged as "experimental" but is instead considered fully production ready. *) mod_http2: Fix for possible CPU busy loop introduced in v1.10.3 where a stream may keep the session in continuous check for state changes that never happen. [Stefan Eissing] *) mod_proxy_wstunnel: Add "upgrade" parameter to allow upgrade to other protocols. [Jean-Frederic Clere] *) MPMs unix: Place signals handlers and helpers out of DSOs to avoid a possible crash if a signal is caught during (graceful) restart. PR 60487. [Yann Ylavic] *) mod_rewrite: When a substitution is a fully qualified URL, and the scheme/host/port matches the current virtual host, stop interpreting the path component as a local path just because the first component of the path exists in the filesystem. Adds RewriteOption "LegacyPrefixDocRoot" to revert to previous behavior. PR60009. [Hank Ibell ] *) core: ap_parse_form_data() URL-decoding doesn't work on EBCDIC platforms. PR61124. [Hank Ibell ] *) ab: enable option processing for setting a custom HTTP method also for non-SSL builds. [Rainer Jung] *) core: EBCDIC fixes for interim responses with additional headers. [Eric Covener] *) mod_env: when processing a 'SetEnv' directive, warn if the environment variable name includes a '='. It is likely a configuration error. PR 60249 [Christophe Jaillet] *) Evaluate nested If/ElseIf/Else configuration blocks. [Luca Toscano, Jacob Champion] *) mod_rewrite: Add 'BNP' (backreferences-no-plus) flag to RewriteRule to allow spaces in backreferences to be encoded as %20 instead of '+'. [Eric Covener] *) mod_rewrite: Add the possibility to limit the escaping to specific characters in backreferences by listing them in the B flag. [Eric Covener] *) mod_substitute: Fix spurious AH01328 (Line too long) errors on EBCDIC systems. [Eric Covener] *) mod_http2: fail requests without ERROR log in case we need to read interim responses and see only garbage. This can happen if proxied servers send data where none should be, e.g. a body for a HEAD request. [Stefan Eissing] *) mod_proxy_http2: adding support for Reverse Proxy Request headers. [Stefan Eissing] *) mod_http2: fixed possible deadlock that could occur when connections were terminated early with ongoing streams. Fixed possible hanger with timeout on race when connection considers itself idle. [Stefan Eissing] *) mod_http2: MaxKeepAliveRequests now limits the number of times a slave connection gets reused. [Stefan Eissing] *) mod_brotli: Add a new module for dynamic Brotli (RFC 7932) compression. [Evgeny Kotkov] *) mod_proxy_http2: Fixed bug in re-attempting proxy requests after connection error. Reliability of reconnect handling improved. [Stefan Eissing] *) mod_http2: better performance, eliminated need for nested locks and thread privates. Moving request setups from the main connection to the worker threads. Increase number of spare connections kept. [Stefan Eissing] *) mod_http2: input buffering and dynamic flow windows for increased throughput. Requires nghttp2 >= v1.5.0 features. Announced at startup in mod_http2 INFO log as feature 'DWINS'. [Stefan Eissing] *) mod_http2: h2 workers with improved scalability for better scheduling performance. There are H2MaxWorkers threads created at start and the number is kept constant for now. [Stefan Eissing] *) mod_http2: obsoleted option H2SessionExtraFiles, will be ignored and just log a warning. [Stefan Eissing] *) mod_autoindex: Add IndexOptions UseOldDateFormat to allow the date format from 2.2 in the Last Modified column. PR60846. [Hank Ibell ] *) core: Add %{REMOTE_PORT} to the expression parser. PR59938 [Hank Ibell ] *) mod_cache: Fix a regression in 2.4.25 for the forward proxy case by computing and using the same entity key according to when the cache checks, loads and saves the request. PR 60577. [Yann Ylavic] *) mod_proxy_hcheck: Don't validate timed out responses. [Yann Ylavic] *) mod_proxy_hcheck: Ensure thread-safety when concurrent healthchecks are in use (ProxyHCTPsize > 0). PR 60071. [Yann Ylavic, Jim Jagielski] *) core: %{DOCUMENT_URI} used in nested SSI expressions should point to the URI originally requsted by the user, not the nested documents URI. This restores the behavior of this variable to match the "legacy" SSI parser. PR60624. [Hank Ibell ] *) mod_proxy_fcgi: Add ProxyFCGISetEnvIf to fixup CGI environment variables just before invoking the FastCGI. [Eric Covener, Jacob Champion] *) mod_proxy_fcgi: Return to 2.4.20-and-earlier behavior of leaving a "proxy:fcgi://" prefix in the SCRIPT_FILENAME environment variable by default. Add ProxyFCGIBackendType to allow the type of backend to be specified so these kinds of fixups can be restored without impacting FPM. PR60576 [Eric Covener, Jim Jagielski] *) mod_ssl: work around leaks on (graceful) restart. [Yann Ylavic] *) mod_ssl: Add support for OpenSSL 1.1.0. [Rainer Jung] *) Don't set SO_REUSEPORT unless ListenCoresBucketsRatio is greater than zero. [Eric Covener] *) mod_http2: moving session cleanup to pre_close hook to avoid races with modules already shut down and slave connections still operating. [Stefan Eissing] *) mod_lua: Support for Lua 5.3 *) mod_proxy_http2: support for ProxyPreserverHost directive. [Stefan Eissing] *) mod_http2: fix for crash when running out of memory. [Robert Swiecki , Stefan Eissing] *) mod_proxy_fcgi: Return HTTP 504 rather than 503 in case of proxy timeout. [Luca Toscano] *) mod_http2: not counting file buckets again stream max buffer limits. Effectively transfering static files in one step from slave to master connection. [Stefan Eissing] *) mod_http2: comforting ap_check_pipeline() on slave connections to facilitate reuse (see https://github.com/icing/mod_h2/issues/128). [Stefan Eissing, reported by Armin Abfalterer] *) mod_http2: http/2 streams now with state handling/transitions as defined in RFC7540. Stream cleanup/connection shutdown reworked to become easier to understand/maintain/debug. Added many asserts on state and cleanup transitions. [Stefan Eissing] *) mod_auth_digest: Use an anonymous shared memory segment by default, preventing startup failure after unclean shutdown. PR 54622. [Jan Kaluza] *) mod_filter: Fix AddOutputFilterByType with non-content-level filters. PR 58856. [Micha Lenk ] *) mod_watchdog: Fix semaphore leak over restarts. [Jim Jagielski] *) mod_http2: regression fix on PR 59348, on graceful restart, ongoing streams are finished normally before the final GOAWAY is sent. [Stefan Eissing, ] *) mod_proxy: Allow the per-request environment variable "no-proxy" to be used as an alternative to ProxyPass /path !. This is primarily to set exceptions for ProxyPass specified in context. Use SetEnvIf, not SetEnv. PR 60458. [Eric Covener] *) mod_http2: fixes PR60599, sending proper response for conditional requests answered by mod_cache. [Jeff Wheelhouse, Stefan Eissing] *) mod_http2: rework of stream resource cleanup to avoid a crash in a close of a lingering connection. Prohibit special file bucket beaming for shared buckets. Files sent in stream output now use the stream pool as read buffer, reducing memory footprint of connections. [Yann Ylavic, Stefan Eissing] *) mod_proxy_fcgi, mod_fcgid: Fix crashes in ap_fcgi_encoded_env_len() when modules add empty environment variables to the request. PR 60275. [] *) mod_http2: fix for possible page fault when stream is resumed during session shutdown. [sidney-j-r-m (github)] *) mod_http2: fix for h2 session ignoring new responses while already open streams continue to have data available. [Stefan Eissing] *) mod_http2: adding support for MergeTrailers directive. [Stefan Eissing] *) mod_http2: limiting DATA frame sizes by TLS record sizes in use on the connection. Flushing outgoing frames earlier. [Stefan Eissing] *) mod_http2: cleanup beamer registry on server reload. PR 60510. [Pavel Mateja , Stefan Eissing] *) mod_proxy_{ajp,fcgi}: Fix a possible crash when reusing an established backend connection, happening with LogLevel trace2 or higher configured, or at any log level with compilers not detected as C99 compliant (e.g. MSVC on Windows). [Yann Ylavic] *) mod_ext_filter: Don't interfere with "error buckets" issued by other modules. PR 60375. [Eric Covener, Lubos Uhliarik] *) mod_http2: fixes https://github.com/icing/mod_h2/issues/126 e.g. beam bucket lifetime handling when data is sent over temporary pools. [Stefan Eissing] Changes with Apache 2.4.25 *) Fix some build issues related to various modules. [Rainer Jung] Changes with Apache 2.4.24 (not released) *) SECURITY: CVE-2016-8740 (cve.mitre.org) mod_http2: Mitigate DoS memory exhaustion via endless CONTINUATION frames. [Naveen Tiwari and CDF/SEFCOM at Arizona State University, Stefan Eissing] *) SECURITY: CVE-2016-2161 (cve.mitre.org) mod_auth_digest: Prevent segfaults during client entry allocation when the shared memory space is exhausted. [Maksim Malyutin , Eric Covener, Jacob Champion] *) SECURITY: CVE-2016-0736 (cve.mitre.org) mod_session_crypto: Authenticate the session data/cookie with a MAC (SipHash) to prevent deciphering or tampering with a padding oracle attack. [Yann Ylavic, Colm MacCarthaigh] *) SECURITY: CVE-2016-8743 (cve.mitre.org) Enforce HTTP request grammar corresponding to RFC7230 for request lines and request headers, to prevent response splitting and cache pollution by malicious clients or downstream proxies. [William Rowe, Stefan Fritsch] *) Validate HTTP response header grammar defined by RFC7230, resulting in a 500 error in the event that invalid response header contents are detected when serving the response, to avoid response splitting and cache pollution by malicious clients, upstream servers or faulty modules. [Stefan Fritsch, Eric Covener, Yann Ylavic] *) core: Mitigate [f]cgi CVE-2016-5387 "httpoxy" issues. [Dominic Scheirlinck , Yann Ylavic] *) mod_rewrite: Limit runaway memory use by short circuiting some kinds of looping RewriteRules when the local path significantly exceeds LimitRequestLine. PR 60478. [Jeff Wheelhouse ] *) mod_ratelimit: Allow for initial "burst" amount at full speed before throttling: PR 60145 [Andy Valencia , Jim Jagielski] *) mod_socache_memcache: Provide memcache stats to mod_status. [Jim Jagielski] *) mod_file_cache: mod_file_cache should be able to serve files that haven't had a Content-Type set via e.g. mod_mime. [Eric Covener] *) http_filters: Fix potential looping in new check_headers() due to new pattern of ap_die() from http header filter. Explicitly clear the previous headers and body. *) core: Drop Content-Length header and message-body from HTTP 204 responses. PR 51350 [Luca Toscano] *) mod_proxy: Honor a server scoped ProxyPass exception when ProxyPass is configured in , like in 2.2. PR 60458. [Eric Covener] *) mod_lua: Fix default value of LuaInherit directive. It should be 'parent-first' instead of 'none', as per documentation. PR 60419 [Christophe Jaillet] *) core: New directive HttpProtocolOptions to control httpd enforcement of various RFC7230 requirements. [Stefan Fritsch, William Rowe] *) core: Permit unencoded ';' characters to appear in proxy requests and Location: response headers. Corresponds to modern browser behavior. [William Rowe] *) core: ap_rgetline_core now pulls from r->proto_input_filters. *) core: Correctly parse an IPv6 literal host specification in an absolute URL in the request line. [Stefan Fritsch] *) core: New directive RegisterHttpMethod for registering non-standard HTTP methods. [Stefan Fritsch] *) mod_socache_memcache: Pass expiration time through to memcached. PR 55445. [Faidon Liambotis , Joe Orton] *) mod_cache: Use the actual URI path and query-string for identifying the cached entity (key), such that rewrites are taken into account when running afterwards (CacheQuickHandler off). PR 21935. [Yann Ylavic] *) mod_http2: new directive 'H2EarlyHints' to enable sending of HTTP status 103 interim responses. Disabled by default. [Stefan Eissing] *) mod_ssl: Fix quick renegotiation (OptRenegotiaton) with no intermediate in the client certificate chain. PR 55786. [Yann Ylavic] *) event: Allow to use the whole allocated scoreboard (up to ServerLimit slots) to avoid scoreboard full errors when some processes are finishing gracefully. Also, make gracefully finishing processes close all keep-alive connections. PR 53555. [Stefan Fritsch] *) mpm_event: Don't take over scoreboard slots from gracefully finishing threads. [Stefan Fritsch] *) mpm_event: Free memory earlier when shutting down processes. [Stefan Fritsch] *) mod_status: Display the process slot number in the async connection overview. [Stefan Fritsch] *) mod_dir: Responses that go through "FallbackResource" might appear to hang due to unterminated chunked encoding. PR58292. [Eric Covener] *) mod_dav: Fix a potential cause of unbounded memory usage or incorrect behavior in a routine that sends 's to the output filters. [Evgeny Kotkov] *) mod_http2: new directive 'H2PushResource' to enable early pushes before processing of the main request starts. Resources are announced to the client in Link headers on a 103 early hint response. All responses with status code <400 are inspected for Link header and trigger pushes accordingly. 304 still does prevent pushes. 'H2PushResource' can mark resources as 'critical' which gives them higher priority than the main resource. This leads to preferred scheduling for processing and, when content is available, will send it first. 'critical' is also recognized on Link headers. [Stefan Eissing] *) mod_proxy_http2: uris in Link headers are now mapped back to a suitable local url when available. Relative uris with an absolute path are mapped as well. This makes reverse proxy mapping available for resources announced in this header. With 103 interim responses being forwarded to the main client connection, this effectively allows early pushing of resources by a reverse proxied backend server. [Stefan Eissing] *) mod_proxy_http2: adding support for newly proposed 103 status code. [Stefan Eissing] *) mpm_unix: Apache fails to start if previously crashed then restarted with the same PID (e.g. in container). PR 60261. [Val , Yann Ylavic] *) mod_http2: unannounced and multiple interim responses (status code < 200) are parsed and forwarded to client until a final response arrives. [Stefan Eissing] *) mod_proxy_http2: improved robustness when main connection is closed early by resetting all ongoing streams against the backend. [Stefan Eissing] *) mod_http2: allocators from slave connections are released earlier, resulting in less overall memory use on busy, long lived connections. [Stefan Eissing] *) mod_remoteip: Pick up where we left off during a subrequest rather than running with the modified XFF but original TCP address. PR 49839/PR 60251 *) http: Respond with "408 Request Timeout" when a timeout occurs while reading the request body. [Yann Ylavic] *) mod_http2: connection shutdown revisited: corrected edge cases on shutting down ongoing streams, changed log warnings to be less noisy when waiting on long running tasks. [Stefan Eissing] *) mod_http2: changed all AP_DEBUG_ASSERT to ap_assert to have them available also in normal deployments. [Stefan Eissing] *) mod_http2/mod_proxy_http2: 100-continue handling now properly implemented up to the backend. Reused HTTP/2 proxy connections with more than a second not used will block request bodies until a PING answer is received. Requests headers are not delayed by this, since they are repeatable in case of failure. This greatly increases robustness, especially with busy server and/or low keepalive connections. [Stefan Eissing] *) mod_proxy_http2: fixed duplicate symbols with mod_http2. [Stefan Eissing] *) mod_http2: rewrite of how responses and trailers are transferred between master and slave connection. Reduction of internal states for tasks and streams, stability. Heuristic id generation for slave connections to better keep promise of connection ids unique at given point int time. Fix for mod_cgid interop in high load situtations. Fix for handling of incoming trailers when no request body is sent. [Stefan Eissing] *) mod_http2: fix suspended handling for streams. Output could become blocked in rare cases. [Stefan Eissing] *) mpm_winnt: Prevent a denial of service when the 'data' AcceptFilter is in use by replacing it with the 'connect' filter. PR 59970. [Jacob Champion] *) mod_cgid: Resolve a case where a short CGI response causes a subsequent CGI to be killed prematurely, resulting in a truncated subsequent response. [Eric Covener] *) mod_proxy_hcheck: Set health check URI and expression correctly for health check worker. PR 60038 [zdeno ] *) mod_http2: if configured with nghttp2 1.14.0 and onward, invalid request headers will immediately reset the stream with a PROTOCOL error. Feature logged by module on startup as 'INVHD' in info message. [Stefan Eissing] *) mod_http2: fixed handling of stream buffers during shutdown. [Stefan Eissing] *) mod_reqtimeout: Fix body timeout disabling for CONNECT requests to avoid triggering mod_proxy_connect's AH01018 once the tunnel is established. [Yann Ylavic] *) ab: Set the Server Name Indication (SNI) extension on outgoing TLS connections (unless -I is specified), according to the Host header (if any) or the requested URL's hostname otherwise. [Yann Ylavic] *) mod_proxy_fcgi: avoid loops when ProxyErrorOverride is enabled and the error documents are proxied. PR 55415. [Luca Toscano] *) mod_proxy_fcgi: read the whole FCGI response even when the content has not been modified (HTTP 304) or in case of a precondition failure (HTTP 412) to avoid subsequent bogus reads and confusing error messages logged. [Luca Toscano] *) mod_http2: h2 status resource follows latest draft, see http://www.ietf.org/id/draft-benfield-http2-debug-state-01.txt [Stefan Eissing] *) mod_http2: handling graceful shutdown gracefully, e.g. handling existing streams to the end. [Stefan Eissing] *) mod_proxy_{http,ajp,fcgi}: don't reuse backend connections with data available before the request is sent. PR 57832. [Yann Ylavic] *) mod_proxy_balancer: Prevent redirect loops between workers within a balancer by limiting the number of redirects to the number balancer members. PR 59864 [Ruediger Pluem] *) mod_proxy: Correctly consider error response codes by the backend when processing failonstatus. PR 59869 [Ruediger Pluem] *) mod_dav: Add dav_get_provider_name() function to obtain the name of the provider from mod_dav. [Graham Leggett] *) mod_dav: Add support for childtags to dav_error. [Jari Urpalainen ] *) mod_proxy_fcgi: Fix 2.4.23 breakage for mod_rewrite per-dir and query string showing up in SCRIPT_FILENAME. PR59815 *) mod_include: Fix a potential memory misuse while evaluating expressions. PR59844. [Eric Covener] *) mod_http2: new H2CopyFiles directive that changes treatment of file handles in responses. Necessary in order to fix broken lifetime handling in modules such as mod_wsgi. *) mod_http2: removing timeouts on master connection while requests are being processed. Requests may timeout, but the master only times out when no more requests are active. [Stefan Eissing] *) mod_http2: fixes connection flush when answering SETTINGS without any stream open. [Moto Ishizawa <@summerwind>, Stefan Eissing] Changes with Apache 2.4.23 *) mod_ssl: reset client-verify state of ssl when aborting renegotiations. [Erki Aring , Stefan Eissing] *) mod_sed: Fix 'x' command processing. [Christophe Jaillet] *) configure: Fix ./configure edge-case failures around dependencies of mod_proxy_hcheck. [William Rowe, Ruediger Pluem, Jeff Trawick] Changes with Apache 2.4.22 *) mod_http2: fix for request abort when connections drops, introduced in 1.5.8 Changes with Apache 2.4.21 *) core: Added support for HTTP code 451. PR 58985. [Yehuda Katz , Jim Jagielski] *) ab: Use caseless matching for HTTP tokens (e.g. content-length). PR 59111. [Yann Ylavic] *) mod_http2: more rigid error handling in DATA frame assembly, leading to deterministic connection errors if assembly fails. [Stefan Eissing, Pal Nilsen ] *) abs: Include OPENSSL_Applink when compiling on Windows, to resolve failures under Visual Studio 2015 and other mismatched MSVCRT flavors. PR59630 [Jan Ehrhardt ] *) mod_ssl: Add "no_crl_for_cert_ok" flag to SSLCARevocationCheck directive to opt-in previous behaviour (2.2) with CRLs verification when checking certificate(s) with no corresponding CRL. [Yann Ylavic] *) mpm_event, mpm_worker: Fix computation of MinSpareThreads' lower bound according the number of listeners buckets. [Yann Ylavic] *) Add ap_cstr_casecmp[n]() - placeholder of apr_cstr_casecmp[n] functions for case-insensitive C/POSIX-locale token comparison. [Jim Jagielski, William Rowe, Yann Ylavic, Branko ÄŒibej] *) mod_userdir: Constify and save a few bytes in the conf pool when parsing the "UserDir" directive. [Christophe Jaillet] *) mod_cache: Fix (max-stale with no '=') and enforce (check integers after '=') Cache-Control header parsing. [Christophe Jaillet] *) core: Add -DDUMP_INCLUDES configtest option to show the tree of Included configuration files. [Jacob Champion ] *) mod_proxy_fcgi: Avoid passing a filename of proxy:fcgi:// as SCRIPT_FILENAME to a FastCGI server. PR59618. [Jacob Champion ] *) mod_dav: Add dav_get_provider_name() function to obtain the name of the provider from mod_dav. [Jari Urpalainen ] *) mod_proxy_http2: properly care for HTTP2 flow control of the frontend connection is HTTP/1.1. [Patch supplied by Evgeny Kotkov] *) mod_http2: improved cleanup of connection/streams/tasks to always have deterministic order regardless of event initiating it. Addresses reported crashes due to memory read after free issues. [Stefan Eissing] *) mod_ssl: Correct the interaction between SSLProxyCheckPeerCN and newer SSLProxyCheckPeerName directives since release 2.4.5, such that disabling either disables both, and that enabling either triggers the new, more comprehensive SSLProxyCheckPeerName behavior. Only a single configuration remains to enable the legacy behavior, which is to explicitly disable SSLProxyCheckPeerName, and enable SSLProxyCheckPeerCN. [William Rowe] *) mod_include: add the statements. [Christophe Jaillet] *) split-logfile: Fix perl error: 'Can't use string ("example.org:80") as a symbol ref while "strict refs"'. PR 56329. [Holger Mauermann ] *) mod_proxy: Prevent ProxyPassReverse from doing a substitution when the URL parameter interpolates to an empty string. PR 56603. [] *) core: Fix -D[efined] or [d] variables lifetime across restarts. PR 57328. [Armin Abfalterer , Yann Ylavic]. *) mod_proxy: Preserve original request headers even if they differ from the ones to be forwarded to the backend. PR 45387. [Yann Ylavic] *) mod_ssl: dump SSL IO/state for the write side of the connection(s), like reads (level TRACE4). [Yann Ylavic] *) mod_proxy_fcgi: Ignore body data from backend for 304 responses. PR 57198. [Jan Kaluza] *) mod_ssl: Do not crash when looking up SSL related variables during expression evaluation on non SSL connections. PR 57070 [Ruediger Pluem] *) mod_proxy_ajp: Fix handling of the default port (8009) in the ProxyPass and configurations. PR 57259. [Yann Ylavic] *) mpm_event: Avoid a possible use after free when notifying the end of connection during lingering close. PR 57268. [Eric Covener, Yann Ylavic] *) mod_ssl: Fix recognition of OCSP stapling responses that are encoded improperly or too large. [Jeff Trawick] *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers. [Jeff Trawick] *) mod_proxy_fcgi, mod_authnz_fcgi: stop reading the response and issue an error when parsing or forwarding the response fails. [Yann Ylavic] *) mod_ssl: Fix a memory leak in case of graceful restarts with OpenSSL >= 0.9.8e PR 53435 [tadanori , Sebastian Wiedenroth ] *) mod_proxy_connect: Don't issue AH02447 on sockets hangups, let the read determine whether it is a normal close or a real error. PR 57168. [Yann Ylavic] *) mod_proxy_wstunnel: abort backend connection on polling error to avoid further processing. [Yann Ylavic] *) core: Support custom ErrorDocuments for HTTP 501 and 414 status codes. PR 57167 [Edward Lu ] *) mod_proxy_connect: Fix ProxyRemote to https:// backends on EBCDIC systems. PR 57092 [Edward Lu ] *) mod_cache: Avoid a 304 response to an unconditional requst when an AH00752 CacheLock error occurs during cache revalidation. [Eric Covener] *) mod_ssl: Move OCSP stapling information from a per-certificate store to a per-server hash. PR 54357, PR 56919. [Alex Bligh , Yann Ylavic, Kaspar Brand] *) mod_cache_socache: Change average object size hint from 32 bytes to 2048 bytes. [Rainer Jung] *) mod_cache_socache: Add cache status to server-status. [Rainer Jung] *) event: Fix worker-listener deadlock in graceful restart. PR 56960. *) Concat strings at compile time when possible. PR 53741. *) mod_substitute: Restrict configuration in .htaccess to FileInfo as documented. [Rainer Jung] *) mod_substitute: Make maximum line length configurable. [Rainer Jung] *) mod_substitute: Fix line length limitation in case of regexp plus flatten. [Rainer Jung] *) mod_proxy: Truncated character worker names are no longer fatal errors. PR53218. [Jim Jagielski] *) mod_dav: Set r->status_line in dav_error_response. PR 55426. *) mod_proxy_http, mod_cache: Avoid (unlikely) accesses to freed memory. [Yann Ylavic, Christophe Jaillet] *) http_protocol: fix logic in ap_method_list_(add|remove) in order: - to correctly reset bits - not to modify the 'method_mask' bitfield unnecessarily [Christophe Jaillet] *) mod_slotmem_shm: Increase log level for some originally debug messages. [Jim Jagielski] *) mod_ldap: In 2.4.10, some LDAP searches or comparisons might be done with the wrong credentials when a backend connection is reused. [Eric Covener] *) mod_macro: Add missing APLOGNO for some Warning log messages. [Christophe Jaillet] *) mod_cache: Avoid sending 304 responses during failed revalidations PR56881. [Eric Covener] *) mod_status: Honor client IP address using mod_remoteip. PR 55886. [Jim Jagielski] *) cmake-based build for Windows: Fix incompatibility with cmake 2.8.12 and later. PR 56615. [Chuck Liu , Jeff Trawick] *) mod_ratelimit: Drop severity of AH01455 and AH01457 (ap_pass_brigade failed) messages from ERROR to TRACE1. Other filters do not bother re-reporting failures from lower level filters. PR56832. [Eric Covener] *) core: Avoid useless warning message when parsing a section guarded by if $(foo) is used within the section. PR 56503 [Christophe Jaillet] *) mod_proxy_fcgi: Fix faulty logging of large amounts of stderr from the application. PR 56858. [Manuel Mausz ] *) mod_proxy_http: Proxy responses with error status and "ProxyErrorOverride On" hang until proxy timeout. PR53420 [Rainer Jung] *) mod_log_config: Allow three character log formats to be registered. For backwards compatibility, the first character of a three-character format must be the '^' (caret) character. [Eric Covener] *) mod_lua: Don't quote Expires and Path values. PR 56734. [Keith Mashinter, ] *) mod_authz_core: Allow 'es to be seen from auth stanzas under virtual hosts. PR 56870. [Eric Covener] Changes with Apache 2.4.10 *) SECURITY: CVE-2014-0117 (cve.mitre.org) mod_proxy: Fix crash in Connection header handling which allowed a denial of service attack against a reverse proxy with a threaded MPM. [Ben Reser] *) SECURITY: CVE-2014-3523 (cve.mitre.org) Fix a memory consumption denial of service in the WinNT MPM, used in all Windows installations. Workaround: AcceptFilter {none|connect} [Jeff Trawick] *) SECURITY: CVE-2014-0226 (cve.mitre.org) Fix a race condition in scoreboard handling, which could lead to a heap buffer overflow. [Joe Orton, Eric Covener] *) SECURITY: CVE-2014-0118 (cve.mitre.org) mod_deflate: The DEFLATE input filter (inflates request bodies) now limits the length and compression ratio of inflated request bodies to avoid denial of service via highly compressed bodies. See directives DeflateInflateLimitRequestBody, DeflateInflateRatioLimit, and DeflateInflateRatioBurst. [Yann Ylavic, Eric Covener] *) SECURITY: CVE-2014-0231 (cve.mitre.org) mod_cgid: Fix a denial of service against CGI scripts that do not consume stdin that could lead to lingering HTTPD child processes filling up the scoreboard and eventually hanging the server. By default, the client I/O timeout (Timeout directive) now applies to communication with scripts. The CGIDScriptTimeout directive can be used to set a different timeout for communication with scripts. [Rainer Jung, Eric Covener, Yann Ylavic] *) mod_ssl: Extend the scope of SSLSessionCacheTimeout to sessions resumed by TLS session resumption (RFC 5077). [Rainer Jung] *) mod_deflate: Don't fail when flushing inflated data to the user-agent and that coincides with the end of stream ("Zlib error flushing inflate buffer"). PR 56196. [Christoph Fausak ] *) mod_proxy_ajp: Forward local IP address as a custom request attribute like we already do for the remote port. [Rainer Jung] *) core: Include any error notes set by modules in the canned error response for 403 errors. [Jeff Trawick] *) mod_ssl: Set an error note for requests rejected due to SSLStrictSNIVHostCheck. [Jeff Trawick] *) mod_ssl: Fix issue with redirects to error documents when handling SNI errors. [Jeff Trawick] *) mod_ssl: Fix tmp DH parameter leak, adjust selection to prefer larger keys and support up to 8192-bit keys. [Ruediger Pluem, Joe Orton] *) mod_dav: Fix improper encoding in PROPFIND responses. PR 56480. [Ben Reser] *) WinNT MPM: Improve error handling for termination events in child. [Jeff Trawick] *) mod_proxy: When ping/pong is configured for a worker, don't send or forward "100 Continue" (interim) response to the client if it does not expect one. [Yann Ylavic] *) mod_ldap: Be more conservative with the last-used time for LDAPConnectionPoolTTL. PR54587 [Eric Covener] *) mod_ldap: LDAP connections used for authn were not respecting LDAPConnectionPoolTTL. PR54587 [Eric Covener] *) mod_proxy_fcgi: Fix occasional high CPU when handling request bodies. [Jeff Trawick] *) event MPM: Fix possible crashes (third-party modules accessing c->sbh) or occasional missed mod_status updates under load. PR 56639. [Edward Lu ] *) mod_authnz_ldap: Support primitive LDAP servers do not accept filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special filter "none" to be specified in AuthLDAPURL. [Eric Covener] *) mod_deflate: Fix inflation of files larger than 4GB. PR 56062. [Lukas Bezdicka ] *) mod_deflate: Handle Zlib header and validation bytes received in multiple chunks. PR 46146. [Yann Ylavic] *) mod_proxy: Allow reverse-proxy to be set via explicit handler. [ryo takatsuki ] *) ab: support custom HTTP method with -m argument. PR 56604. [Roman Jurkov ] *) mod_proxy_balancer: Correctly encode user provided data in management interface. PR 56532 [Maksymilian, ] *) mod_proxy: Don't limit the size of the connectable Unix Domain Socket paths. [Graham Dumpleton, Christophe Jaillet, Yann Ylavic] *) mod_proxy_fcgi: Support iobuffersize parameter. [Jeff Trawick] *) event: Send the SSL close notify alert when the KeepAliveTimeout expires. PR54998. [Yann Ylavic] *) mod_ssl: Ensure that the SSL close notify alert is flushed to the client. PR54998. [Tim Kosse , Yann Ylavic] *) mod_proxy: Shutdown (eg. SSL close notify) the backend connection before closing. [Yann Ylavic] *) mod_auth_form: Add a debug message when the fields on a form are not recognised. [Graham Leggett] *) mod_cache: Preserve non-cacheable headers forwarded from an origin 304 response. PR 55547. [Yann Ylavic] *) mod_proxy_wstunnel: Fix the use of SSL connections with the "wss:" scheme. PR55320. [Alex Liu ] *) mod_socache_shmcb: Correct counting of expirations for status display. Expirations happening during retrieval were not counted. [Rainer Jung] *) mod_cache: Retry unconditional request with the full URL (including the query-string) when the origin server's 304 response does not match the conditions used to revalidate the stale entry. [Yann Ylavic]. *) mod_alias: Stop setting CONTEXT_PREFIX and CONTEXT_DOCUMENT environment variables as a result of AliasMatch. [Eric Covener] *) mod_cache: Don't add cached/revalidated entity headers to a 304 response. PR 55547. [Yann Ylavic] *) mod_proxy_scgi: Support Unix sockets. ap_proxy_port_of_scheme(): Support default SCGI port (4000). [Jeff Trawick] *) mod_cache: Fix AH00784 errors on Windows when the the CacheLock directive is enabled. [Eric Covener] *) mod_expires: don't add Expires header to error responses (4xx/5xx), be they generated or forwarded. PR 55669. [Yann Ylavic] *) mod_proxy_fcgi: Don't segfault when failing to connect to the backend. (regression in 2.4.9 release) [Jeff Trawick] *) mod_authn_socache: Fix crash at startup in certain configurations. PR 56371. (regression in 2.4.7) [Jan Kaluza] *) mod_ssl: restore argument structure for "exec"-type SSLPassPhraseDialog programs to the form used in releases up to 2.4.7, and emulate a backwards-compatible behavior for existing setups. [Kaspar Brand] *) mod_ssl: Add SSLOCSPUseRequestNonce directive to control whether or not OCSP requests should use a nonce to be checked against the responder's one. PR 56233. [Yann Ylavic, Kaspar Brand] *) mod_ssl: "SSLEngine off" will now override a Listen-based default and does disable mod_ssl for the vhost. [Joe Orton] *) mod_lua: Enforce the max post size allowed via r:parsebody() [Daniel Gruno] *) mod_lua: Use binary comparison to find boundaries for multipart objects, as to not terminate our search prematurely when hitting a NULL byte. [Daniel Gruno] *) mod_ssl: add workaround for SSLCertificateFile when using OpenSSL versions before 0.9.8h and not specifying an SSLCertificateChainFile (regression introduced with 2.4.8). PR 56410. [Kaspar Brand] *) mod_ssl: bring SNI behavior into better conformance with RFC 6066: no longer send warning-level unrecognized_name(112) alerts, and limit startup warnings to cases where an OpenSSL version without TLS extension support is used. PR 56241. [Kaspar Brand] *) mod_proxy_html: Avoid some possible memory access violation in case of specially crafted files, when the ProxyHTMLMeta directive is turned on. Follow up of PR 56287 [Christophe Jaillet] *) mod_auth_form: Make sure the optional functions are loaded even when the AuthFormProvider isn't specified. [Graham Leggett] *) mod_ssl: avoid processing bogus SSLCertificateKeyFile values (and logging garbled file names). PR 56306. [Kaspar Brand] *) mod_ssl: fix merging of global and vhost-level settings with the SSLCertificateFile, SSLCertificateKeyFile, and SSLOpenSSLConfCmd directives. PR 56353. [Kaspar Brand] *) mod_headers: Allow the "value" parameter of Header and RequestHeader to contain an ap_expr expression if prefixed with "expr=". [Eric Covener] *) rotatelogs: Avoid creation of zombie processes when -p is used on Unix platforms. [Joe Orton] *) mod_authnz_fcgi: New module to enable FastCGI authorizer applications to authenticate and/or authorize clients. [Jeff Trawick] *) mod_proxy: Do not try to parse the regular expressions passed by ProxyPassMatch as URL as they do not follow their syntax. PR 56074. [Ruediger Pluem] *) mod_reqtimeout: Resolve unexpected timeouts on keepalive requests under the Event MPM. PR56216. [Frank Meier ] *) mod_proxy_fcgi: Fix sending of response without some HTTP headers that might be set by filters. PR 55558. [Jim Riggs ] *) mod_proxy_html: Do not delete the wrong data from HTML code when a "http-equiv" meta tag specifies a Content-Type behind any other "http-equiv" meta tag. PR 56287 [Micha Lenk ] *) mod_proxy: Don't reuse a SSL backend connection whose requested SNI differs. PR 55782. [Yann Ylavic] *) Add suspend_connection and resume_connection hooks to notify modules when the thread/connection relationship changes. (Should be implemented for any third-party async MPMs.) [Jeff Trawick] *) mod_proxy_wstunnel: Don't issue AH02447 and log a 500 on routine hangups from websockets origin servers. PR 56299 [Yann Ylavic, Edward Lu , Eric Covener] *) mod_proxy_wstunnel: Don't pool backend websockets connections, because we need to handshake every time. PR 55890. [Eric Covener] *) mod_lua: Redesign how request record table access behaves, in order to utilize the request record from within these tables. [Daniel Gruno] *) mod_lua: Add r:wspeek for peeking at WebSocket frames. [Daniel Gruno] *) mod_lua: Log an error when the initial parsing of a Lua file fails. [Daniel Gruno, Felipe Daragon ] *) mod_lua: Reformat and escape script error output. [Daniel Gruno, Felipe Daragon ] *) mod_lua: URL-escape cookie keys/values to prevent tainted cookie data from causing response splitting. [Daniel Gruno, Felipe Daragon ] *) mod_lua: Disallow newlines in table values inside the request_rec, to prevent HTTP Response Splitting via tainted headers. [Daniel Gruno, Felipe Daragon ] *) mod_lua: Remove the non-working early/late arguments for LuaHookCheckUserID. [Daniel Gruno] *) mod_lua: Change IVM storage to use shm [Daniel Gruno] *) mod_lua: More verbose error logging when a handler function cannot be found. [Daniel Gruno] Changes with Apache 2.4.9 *) mod_ssl: Work around a bug in some older versions of OpenSSL that would cause a crash in SSL_get_certificate for servers where the certificate hadn't been sent. [Stephen Henson] *) mod_lua: Add a fixups hook that checks if the original request is intended for LuaMapHandler. This fixes a bug where FallbackResource invalidates the LuaMapHandler directive in certain cases by changing the URI before the map handler code executes [Daniel Gruno, Daniel Ferradal ]. Changes with Apache 2.4.8 (not released) *) SECURITY: CVE-2014-0098 (cve.mitre.org) Clean up cookie logging with fewer redundant string parsing passes. Log only cookies with a value assignment. Prevents segfaults when logging truncated cookies. [William Rowe, Ruediger Pluem, Jim Jagielski] *) SECURITY: CVE-2013-6438 (cve.mitre.org) mod_dav: Keep track of length of cdata properly when removing leading spaces. Eliminates a potential denial of service from specifically crafted DAV WRITE requests [Amin Tora ] *) core: Support named groups and backreferences within the LocationMatch, DirectoryMatch, FilesMatch and ProxyMatch directives. (Requires non-ancient PCRE library) [Graham Leggett] *) core: draft-ietf-httpbis-p1-messaging-23 corrections regarding TE/CL conflicts. [Yann Ylavic, Jim Jagielski] *) core: Detect incomplete request and response bodies, log an error and forward it to the underlying filters. PR 55475 [Yann Ylavic] *) mod_dir: Add DirectoryCheckHandler to allow a 2.2-like behavior, skipping execution when a handler is already set. PR53929. [Eric Covener] *) mod_ssl: Do not perform SNI / Host header comparison in case of a forward proxy request. [Ruediger Pluem] *) mod_ssl: Remove the hardcoded algorithm-type dependency for the SSLCertificateFile and SSLCertificateKeyFile directives, to enable future algorithm agility, and deprecate the SSLCertificateChainFile directive (obsoleted by SSLCertificateFile). [Kaspar Brand] *) mod_rewrite: Add RewriteOptions InheritDown, InheritDownBefore, and IgnoreInherit to allow RewriteRules to be pushed from parent scopes to child scopes without explicitly configuring each child scope. PR56153. [Edward Lu ] *) prefork: Fix long delays when doing a graceful restart. PR 54852 [Jim Jagielski, Arkadiusz Miskiewicz ] *) FreeBSD: Disable IPv4-mapped listening sockets by default for versions 5+ instead of just for FreeBSD 5. PR 53824. [Jeff Trawick] *) mod_proxy_wstunnel: Avoid busy loop on client errors, drop message IDs 02445, 02446, and 02448 to TRACE1 from DEBUG. PR 56145. [Joffroy Christen , Eric Covener] *) mod_remoteip: Correct the trusted proxy match test. PR 54651. [Yoshinori Ehara , Eugene L ] *) mod_proxy_fcgi: Fix error message when an unexpected protocol version number is received from the application. PR 56110. [Jeff Trawick] *) mod_remoteip: Use the correct IP addresses to populate the proxy_ips field. PR 55972. [Mike Rumph] *) mod_lua: Update r:setcookie() to accept a table of options and add domain, path and httponly to the list of options available to set. PR 56128 [Edward Lu , Daniel Gruno] *) mod_lua: Fix r:setcookie() to add, rather than replace, the Set-Cookie header. PR56105 [Kevin J Walters , Edward Lu ] *) mod_lua: Allow for database results to be returned as a hash with row-name/value pairs instead of just row-number/value. [Daniel Gruno] *) mod_rewrite: Add %{CONN_REMOTE_ADDR} as the non-useragent counterpart to %{REMOTE_ADDR}. PR 56094. [Edward Lu ] *) WinNT MPM: If ap_run_pre_connection() fails or sets c->aborted, don't save the socket for reuse by the next worker as if it were an APR_SO_DISCONNECTED socket. Restores 2.2 behavior. [Eric Covener] *) mod_dir: Don't search for a DirectoryIndex or DirectorySlash on a URL that was just rewritten by mod_rewrite. PR53929. [Eric Covener] *) mod_session: When we have a session we were unable to decode, behave as if there was no session at all. [Thomas Eckert ] *) mod_session: Fix problems interpreting the SessionInclude and SessionExclude configuration. PR 56038. [Erik Pearson ] *) mod_authn_core: Allow 'es to be seen from auth stanzas under virtual hosts. PR 55622. [Eric Covener] *) mod_proxy_fcgi: Use apr_socket_timeout_get instead of hard-coded 30 seconds timeout. [Jan Kaluza] *) build: only search for modules (config*.m4) in known subdirectories, see build/config-stubs. [Stefan Fritsch] *) mod_cache_disk: Fix potential hangs on Windows when using mod_cache_disk. PR 55833. [Eric Covener] *) mod_ssl: Add support for OpenSSL configuration commands by introducing the SSLOpenSSLConfCmd directive. [Stephen Henson, Kaspar Brand] *) mod_proxy: Remove (never documented) syntax which is equivalent to . [Christophe Jaillet] *) mod_authz_user, mod_authz_host, mod_authz_groupfile, mod_authz_dbm, mod_authz_dbd, mod_authnz_ldap: Support the expression parser within the require directives. [Graham Leggett] *) mod_proxy_http: Core dumped under high load. PR 50335. [Jan Kaluza ] *) mod_socache_shmcb.c: Remove arbitrary restriction on shared memory size previously limited to 64MB. [Jens Låås ] *) mod_lua: Use binary copy when dealing with uploads through r:parsebody() to prevent truncating files. [Daniel Gruno] Changes with Apache 2.4.7 *) SECURITY: CVE-2013-4352 (cve.mitre.org) mod_cache: Fix a NULL pointer deference which allowed untrusted origin servers to crash mod_cache in a forward proxy configuration. [Graham Leggett] *) APR 1.5.0 or later is now required for the event MPM. *) slotmem_shm: Error detection. [Jim Jagielski] *) event: Use skiplist data structure. [Jim Jagielski] *) event: Fail at startup with message AP02405 if the APR atomic implementation is not compatible with the MPM. [Jim Jagielski] *) mpm_unix: Add ap_mpm_podx_* implementation to avoid code duplication and align w/ trunk. [Jim Jagielski] *) Fix potential rejection of valid MaxMemFree and ThreadStackSize directives. [Mike Rumph ] *) mod_proxy_fcgi: Remove 64K limit on encoded length of all envvars. An individual envvar with an encoded length of more than 16K will be omitted. [Jeff Trawick] *) mod_proxy_fcgi: Handle reading protocol data that is split between packets. [Jeff Trawick] *) mod_ssl: Improve handling of ephemeral DH and ECDH keys by allowing custom parameters to be configured via SSLCertificateFile, and by adding standardized DH parameters for 1024/2048/3072/4096 bits. Unless custom parameters are configured, the standardized parameters are applied based on the certificate's RSA/DSA key size. [Kaspar Brand] *) mod_ssl, configure: Require OpenSSL 0.9.8a or later. [Kaspar Brand] *) mod_ssl: drop support for export-grade ciphers with ephemeral RSA keys, and unconditionally disable aNULL, eNULL and EXP ciphers (not overridable via SSLCipherSuite). [Kaspar Brand] *) mod_proxy: Added support for unix domain sockets as the backend server endpoint. This also introduces an unintended incompatibility for third party modules using the mod_proxy proxy_worker_shared structure, especially for balancer lbmethod modules. [Jim Jagielski, Blaise Tarr ] *) Add experimental cmake-based build system for Windows. [Jeff Trawick, Tom Donovan] *) event MPM: Fix possible crashes (third party modules accessing c->sbh) or occasional missed mod_status updates for some keepalive requests under load. [Eric Covener] *) mod_authn_socache: Support optional initialization arguments for socache providers. [Chris Darroch] *) mod_session: Reset the max-age on session save. PR 47476. [Alexey Varlamov ] *) mod_session: After parsing the value of the header specified by the SessionHeader directive, remove the value from the response. PR 55279. [Graham Leggett] *) mod_headers: Allow for format specifiers in the substitution string when using Header edit. [Daniel Ruggeri] *) mod_dav: dav_resource->uri is treated as unencoded. This was an unnecessary ABI changed introduced in 2.4.6. PR 55397. *) mod_dav: Don't require lock tokens for COPY source. PR 55306. *) core: Don't truncate output when sending is interrupted by a signal, such as from an exiting CGI process. PR 55643. [Jeff Trawick] *) WinNT MPM: Exit the child if the parent process crashes or is terminated. [Oracle Corporation] *) Windows: Correct failure to discard stderr in some error log configurations. (Error message AH00093) [Jeff Trawick] *) mod_session_crypto: Allow using exec: calls to obtain session encryption key. [Daniel Ruggeri] *) core: Add missing Reason-Phrase in HTTP response headers. PR 54946. [Rainer Jung] *) mod_rewrite: Make rewrite websocket-aware to allow proxying. PR 55598. [Chris Harris ] *) mod_ldap: When looking up sub-groups, use an implicit objectClass=* instead of an explicit cn=* filter. [David Hawes ] *) ab: Add wait time, fix processing time, and output write errors only if they occurred. [Christophe Jaillet] *) worker MPM: Don't forcibly kill worker threads if the child process is exiting gracefully. [Oracle Corporation] *) core: apachectl -S prints wildcard name-based virtual hosts twice. PR54948 [Eric Covener] *) mod_auth_basic: Add AuthBasicUseDigestAlgorithm directive to allow migration of passwords from digest to basic authentication. [Chris Darroch] *) ab: Add a new -l parameter in order not to check the length of the responses. This can be useful with dynamic pages. PR9945, PR27888, PR42040 [] *) Suppress formatting of startup messages written to the console when ErrorLogFormat is used. [Jeff Trawick] *) mod_auth_digest: Be more specific when the realm mismatches because the realm has not been specified. [Graham Leggett] *) mod_proxy: Add a note in the balancer manager stating whether changes will or will not be persisted and whether settings are inherited. [Daniel Ruggeri, Jim Jagielski] *) core: Add util_fcgi.h and associated definitions and support routines for FastCGI, based largely on mod_proxy_fcgi. [Jeff Trawick] *) mod_headers: Add 'Header note header-name note-name' for copying a response headers value into a note. [Eric Covener] *) mod_headers: Add 'setifempty' command to Header and RequestHeader. [Eric Covener] *) mod_logio: new format-specifier %S (sum) which is the sum of received and sent byte counts. PR54015 [Christophe Jaillet] *) mod_deflate: Improve error detection when decompressing request bodies with trailing garbage: handle case where trailing bytes are in the same bucket. [Rainer Jung] *) mod_authz_groupfile, mod_authz_user: Reduce severity of AH01671 and AH01663 from ERROR to DEBUG, since these modules do not know what mod_authz_core is doing with their AUTHZ_DENIED return value. [Eric Covener] *) mod_ldap: add TRACE5 for LDAP retries. [Eric Covener] *) mod_ldap: retry on an LDAP timeout during authn. [Eric Covener] *) mod_ldap: Change "LDAPReferrals off" to actually set the underlying LDAP SDK option to OFF, and introduce "LDAPReferrals default" to take the SDK default, sans rebind authentication callback. [Jan Kaluza ] *) core: Log a message at TRACE1 when the client aborts a connection. [Eric Covener] *) WinNT MPM: Don't crash during child process initialization if the Listen protocol is unrecognized. [Jeff Trawick] *) modules: Fix some compiler warnings. [Guenter Knauf] *) Sync 2.4 and trunk - Avoid some memory allocation and work when TRACE1 is not activated - fix typo in include guard - indent - No need to lower the string before removing the path, it is just a waste of time... - Save a few cycles [Christophe Jaillet ] *) mod_filter: Add "change=no" as a proto-flag to FilterProtocol to remove a providers initial flags set at registration time. [Eric Covener] *) core, mod_ssl: Enable the ability for a module to reverse the sense of a poll event from a read to a write or vice versa. This is a step on the way to allow mod_ssl taking full advantage of the event MPM. [Graham Leggett] *) Makefile.win: Install proper pcre DLL file during debug build install. PR 55235. [Ben Reser ] *) mod_ldap: Fix a potential memory leak or corruption. PR 54936. [Zhenbo Xu ] *) ab: Fix potential buffer overflows when processing the T and X command-line options. PR 55360. [Mike Rumph ] *) fcgistarter: Specify SO_REUSEADDR to allow starting a server with old connections in TIME_WAIT. [Jeff Trawick] *) core: Add open_htaccess hook which, in conjunction with dirwalk_stat and post_perdir_config (introduced in 2.4.5), allows mpm-itk to be used without patches to httpd core. [Stefan Fritsch] *) support/htdbm: fix processing of -t command line switch. Regression introduced in 2.4.4 PR 55264 [Jo Rhett ] *) mod_lua: add websocket support via r:wsupgrade, r:wswrite, r:wsread and r:wsping. [Daniel Gruno] *) mod_lua: add support for writing/reading cookies via r:getcookie and r:setcookie. [Daniel Gruno] *) mod_lua: If the first yield() of a LuaOutputFilter returns a string, it should be prefixed to the response as documented. [Eric Covener] Note: Not present in 2.4.7 CHANGES *) mod_lua: Remove ETAG, Content-Length, and Content-MD5 when a LuaOutputFilter is configured without mod_filter. [Eric Covener] Note: Not present in 2.4.7 CHANGES *) mod_lua: Register LuaOutputFilter scripts as changing the content and content-length by default, when run my mod_filter. Previously, growing or shrinking a response that started with Content-Length set would require mod_filter and FilterProtocol change=yes. [Eric Covener] Note: Not present in 2.4.7 CHANGES *) mod_lua: Return a 500 error if a LuaHook* script doesn't return a numeric return code. [Eric Covener] Note: Not present in 2.4.7 CHANGES Changes with Apache 2.4.6 *) Revert a broken fix for PR54948 that was applied to 2.4.5 (which was not released) and found post-2.4.5 tagging. Changes with Apache 2.4.5 *) SECURITY: CVE-2013-1896 (cve.mitre.org) mod_dav: Sending a MERGE request against a URI handled by mod_dav_svn with the source href (sent as part of the request body as XML) pointing to a URI that is not configured for DAV will trigger a segfault. [Ben Reser ] *) SECURITY: CVE-2013-2249 (cve.mitre.org) mod_session_dbd: Make sure that dirty flag is respected when saving sessions, and ensure the session ID is changed each time the session changes. This changes the format of the updatesession SQL statement. Existing configurations must be changed. [Takashi Sato, Graham Leggett] *) mod_auth_basic: Add a generic mechanism to fake basic authentication using the ap_expr parser. AuthBasicFake allows the administrator to construct their own username and password for basic authentication based on their needs. [Graham Leggett] *) mpm_event: Check that AsyncRequestWorkerFactor is not negative. PR 54254. [Jackie Zhang ] *) mod_proxy: Ensure we don't attempt to amend a table we are iterating through, ensuring that all headers listed by Connection are removed. [Graham Leggett, Co-Advisor ] *) mod_proxy_http: Make the proxy-interim-response environment variable effective by formally overriding origin server behaviour. [Graham Leggett, Co-Advisor ] *) mod_proxy: Fix seg-faults when using the global pool on threaded MPMs [Thomas Eckert , Graham Leggett, Jim Jagielski] *) mod_deflate: Remove assumptions as to when an EOS bucket might arrive. Gracefully step aside if the body size is zero. [Graham Leggett] *) mod_ssl: Fix possible truncation of OCSP responses when reading from the server. [Joe Orton] *) core: Support the SINGLE_LISTEN_UNSERIALIZED_ACCEPT optimization on Linux kernel versions 3.x and above. PR 55121. [Bradley Heilbrun ] *) mod_cache_socache: Make sure the CacheSocacheMaxSize directive is merged correctly. [Jens Låås ] *) rotatelogs: add -n number-of-files option to rotate through a number of fixed-name logfiles. [Eric Covener] *) mod_proxy: Support web-socket tunnels via mod_proxy_wstunnel. [Jim Jagielski] *) mod_cache_socache: Use the name of the socache implementation when performing a lookup rather than using the raw arguments. [Martin Ksellmann ] *) core: Add dirwalk_stat hook. [Jeff Trawick] *) core: Add post_perdir_config hook. [Steinar Gunderson ] *) proxy_util: NULL terminate the right buffer in 'send_http_connect'. [Christophe Jaillet] *) mod_remoteip: close file in error path. [Christophe Jaillet] *) core: make the "default" parameter of the "ErrorDocument" option case insensitive. PR 54419 [Tianyin Xu ] *) mod_proxy_html: make the "ProxyHTMLFixups" options case insensitive. PR 54420 [Tianyin Xu ] *) mod_cache: Make option "CacheDisable" in mod_cache case insensitive. PR 54462 [Tianyin Xu ] *) mod_cache: If a 304 response indicates an entity not currently cached, then the cache MUST disregard the response and repeat the request without the conditional. [Graham Leggett, Co-Advisor ] *) mod_cache: Ensure that we don't attempt to replace a cached response with an older response as per RFC2616 13.12. [Graham Leggett, Co-Advisor ] *) core, mod_cache: Ensure RFC2616 compliance in ap_meets_conditions() with weak validation combined with If-Range and Range headers. Break out explicit conditional header checks to be useable elsewhere in the server. Ensure weak validation RFC compliance in the byteranges filter. Ensure RFC validation compliance when serving cached entities. PR 16142 [Graham Leggett, Co-Advisor ] *) core: Add the ability to do explicit matching on weak and strong ETags as per RFC2616 Section 13.3.3. [Graham Leggett, Co-Advisor ] *) mod_cache: Ensure that updated responses to HEAD requests don't get mistakenly paired with a previously cached body. Ensure that any existing body is removed when a HEAD request is cached. [Graham Leggett, Co-Advisor ] *) mod_cache: Honour Cache-Control: no-store in a request. [Graham Leggett] *) mod_cache: Make sure that contradictory entity headers present in a 304 Not Modified response are caught and cause the entity to be removed. [Graham Leggett] *) mod_cache: Make sure Vary processing handles multivalued Vary headers and multivalued headers referred to via Vary. [Graham Leggett] *) mod_cache: When serving from cache, only the last header of a multivalued header was taken into account. Fixed. Ensure that Warning headers are correctly handled as per RFC2616. [Graham Leggett] *) mod_cache: Ignore response headers specified by no-cache=header and private=header as specified by RFC2616 14.9.1 What is Cacheable. Ensure that these headers are still processed when multiple Cache-Control headers are present in the response. PR 54706 [Graham Leggett, Yann Ylavic ] *) mod_cache: Invalidate cached entities in response to RFC2616 Section 13.10 Invalidation After Updates or Deletions. PR 15868 [Graham Leggett] *) mod_dav: Improve error handling in dav_method_put(), add new dav_join_error() function. PR 54145. [Ben Reser ] *) mod_dav: Do not fail PROPPATCH when prop namespace is not known. PR 52559 [Diego Santa Cruz ] *) mod_dav: When a PROPPATCH attempts to remove a non-existent dead property on a resource for which there is no dead property in the same namespace httpd segfaults. PR 52559 [Diego Santa Cruz ] *) mod_dav: Sending an If or If-Match header with an invalid ETag doesn't result in a 412 Precondition Failed for a COPY operation. PR54610 [Timothy Wood ] *) mod_dav: Make sure that when we prepare an If URL for Etag comparison, we compare unencoded paths. PR 53910 [Timothy Wood ] *) mod_deflate: Remove assumptions as to when an EOS bucket might arrive. Gracefully step aside if the body size is zero. [Graham Leggett] *) 'AuthGroupFile' and 'AuthUserFile' do not accept anymore the optional 'standard' keyword . It was unused and not documented. PR54463 [Tianyin Xu and Christophe Jaillet] *) core: Do not over allocate memory within 'ap_rgetline_core' for the common case. [Christophe Jaillet] *) core: speed up (for common cases) and reduce memory usage of ap_escape_logitem(). This should save 70-100 bytes in the request pool for a default config. [Christophe Jaillet] *) mod_dav: Ensure URI is correctly uriencoded on return. PR 54611 [Timothy Wood ] *) mod_proxy: Reject invalid values for Max-Forwards. [Graham Leggett, Co-Advisor ] *) mod_cache: RFC2616 14.9.3 The s-maxage directive also implies the semantics of the proxy-revalidate directive. [Graham Leggett] *) mod_ssl: add support for subjectAltName-based host name checking in proxy mode (SSLProxyCheckPeerName). PR 54030. [Kaspar Brand] *) core: Use the proper macro for HTTP/1.1. [Graham Leggett] *) event MPM: Provide error handling for ThreadStackSize. PR 54311 [Tianyin Xu , Christophe Jaillet] *) mod_dav: Do not segfault on PROPFIND with a zero length DBM. PR 52559 [Diego Santa Cruz ] *) core: Improve error message where client's request-line exceeds LimitRequestLine. PR 54384 [Christophe Jaillet] *) mod_macro: New module that provides macros within configuration files. [Fabien Coelho] *) mod_cache_socache: New cache implementation backed by mod_socache that replaces mod_mem_cache known from httpd 2.2. [Graham Leggett] *) htpasswd: Add -v option to verify a password. [Stefan Fritsch] *) mod_proxy: Add BalancerInherit and ProxyPassInherit to control whether Proxy Balancers and Workers are inherited by vhosts (default is On). [Jim Jagielski] *) mod_authnz_ldap: Allow using exec: calls to obtain LDAP bind password. [Daniel Ruggeri] *) Added balancer parameter failontimeout to allow server admin to configure an IO timeout as an error in the balancer. [Daniel Ruggeri] *) mod_auth_digest: Fix crashes if shm initialization failed. [Stefan Fritsch] *) htpasswd, htdbm: Fix password generation. PR 54735. [Stefan Fritsch] *) core: Add workaround for gcc bug on sparc/64bit. PR 52900. [Stefan Fritsch] *) mod_setenvif: Fix crash in case SetEnvif and SetEnvIfExpr are used together. PR 54881. [Ruediger Pluem] *) htdigest: Fix buffer overflow when reading digest password file with very long lines. PR 54893. [Rainer Jung] *) ap_expr: Add the ability to base64 encode and base64 decode strings and to generate their SHA1 and MD5 hash. [Graham Leggett, Stefan Fritsch] *) mod_log_config: Fix crash when logging request end time for a failed request. PR 54828 [Rainer Jung] *) mod_ssl: Catch missing, mismatched or encrypted client cert/key pairs with SSLProxyMachineCertificateFile/Path directives. PR 52212, PR 54698. [Keith Burdis , Joe Orton, Kaspar Brand] *) mod_ssl: Quiet FIPS mode weak keys disabled and FIPS not selected emits in the error log to debug level. [William Rowe] *) mod_cache_disk: CacheMinFileSize and CacheMaxFileSize were always using compiled in defaults of 1000000/1 respectively. [Eric Covener] *) mod_lbmethod_heartbeat, mod_heartmonitor: Respect DefaultRuntimeDir/ DEFAULT_REL_RUNTIMEDIR for the heartbeat storage file. [Jeff Trawick] *) mod_include: Use new ap_expr for 'elif', like 'if', if legacy parser is not specified. PR 54548 [Tom Donovan] *) mod_lua: Add some new functions: r:htpassword(), r:mkdir(), r:mkrdir(), r:rmdir(), r:touch(), r:get_direntries(), r.date_parse_rfc(). [Guenter Knauf] *) mod_lua: Add multipart form data handling. [Daniel Gruno] *) mod_lua: If a LuaMapHandler doesn't return any value, log a warning and treat it as apache2.OK. [Eric Covener] *) mod_lua: Add bindings for apr_dbd/mod_dbd database access [Daniel Gruno] *) mod_lua: Add LuaInputFilter/LuaOutputFilter for creating content filters in Lua [Daniel Gruno] *) mod_lua: Allow scripts handled by the lua-script handler to return a status code to the client (such as a 302 or a 500) [Daniel Gruno] *) mod_lua: Decline handling 'lua-script' if the file doesn't exist, rather than throwing an internal server error. [Daniel Gruno] *) mod_lua: Add functions r:flush and r:sendfile as well as additional request information to the request_rec structure. [Daniel Gruno] *) mod_lua: Add a server scope for Lua states, which creates a pool of states with manageable minimum and maximum size. [Daniel Gruno] *) mod_lua: Add new directive, LuaMapHandler, for dynamically mapping URIs to Lua scripts and functions using regular expressions. [Daniel Gruno] *) mod_lua: Add new directive LuaCodeCache for controlling in-memory caching of lua scripts. [Daniel Gruno] Changes with Apache 2.4.4 *) SECURITY: CVE-2012-3499 (cve.mitre.org) Various XSS flaws due to unescaped hostnames and URIs HTML output in mod_info, mod_status, mod_imagemap, mod_ldap, and mod_proxy_ftp. [Jim Jagielski, Stefan Fritsch, Niels Heinen ] *) SECURITY: CVE-2012-4558 (cve.mitre.org) XSS in mod_proxy_balancer manager interface. [Jim Jagielski, Niels Heinen ] *) mod_dir: Add support for the value 'disabled' in FallbackResource. [Vincent Deffontaines] *) mod_proxy_connect: Don't keepalive the connection to the client if the backend closes the connection. PR 54474. [Pavel Mateja ] *) mod_lua: Add bindings for mod_dbd/apr_dbd database access. [Daniel Gruno] *) mod_proxy: Allow for persistence of local changes made via the balancer-manager between graceful/normal restarts and power cycles. [Jim Jagielski] *) mod_proxy: Fix startup crash with mis-defined balancers. PR 52402. [Jim Jagielski] *) --with-module: Fix failure to integrate them into some existing module directories. PR 40097. [Jeff Trawick] *) htcacheclean: Fix potential segfault if "-p" is omitted. [Joe Orton] *) mod_proxy_http: Honour special value 0 (unlimited) of LimitRequestBody PR 54435. [Pavel Mateja ] *) mod_proxy_ajp: Support unknown HTTP methods. PR 54416. [Rainer Jung] *) htcacheclean: Fix list options "-a" and "-A". [Rainer Jung] *) mod_slotmem_shm: Fix mistaken reset of num_free for restored shm. [Jim Jagielski] *) mod_proxy: non-existence of byrequests is not an immediate error. [Jim Jagielski] *) mod_proxy_balancer: Improve output of balancer-manager (re: Drn, Dis, Ign, Stby). PR 52478 [Danijel ] *) configure: Fix processing of --disable-FEATURE for various features. [Jeff Trawick] *) mod_dialup/mod_http: Prevent a crash in mod_dialup in case of internal redirect. PR 52230. *) various modules, rotatelogs: Replace use of apr_file_write() with apr_file_write_full() to prevent incomplete writes. PR 53131. [Nicolas Viennot , Stefan Fritsch] *) ab: Support socket timeout (-s timeout). [Guido Serra ] *) httxt2dbm: Correct length computation for the 'value' stored in the DBM file. PR 47650 [jon buckybox com] *) core: Be more correct about rejecting directives that cannot work in sections. [Stefan Fritsch] *) core: Fix directives like LogLevel that need to know if they are invoked at virtual host context or in Directory/Files/Location/If sections to work properly in If sections that are not in a Directory/Files/Location. [Stefan Fritsch] *) mod_xml2enc: Fix problems with charset conversion altering the Content-Length. [Micha Lenk ] *) ap_expr: Add req_novary function that allows HTTP header lookups without adding the name to the Vary header. [Stefan Fritsch] *) mod_slotmem_*: Add in new fgrab() function which forces a grab and slot allocation on a specified slot. Allow for clearing of inuse array. [Jim Jagielski] *) mod_proxy_ftp: Fix segfaults on IPv4 requests to hosts with DNS AAAA records. PR 40841. [Andrew Rucker Jones , , Jim Jagielski] *) mod_auth_form: Make sure that get_notes_auth() sets the user as does get_form_auth() and get_session_auth(). Makes sure that REMOTE_USER does not vanish during mod_include driven subrequests. [Graham Leggett] *) mod_cache_disk: Resolve errors while revalidating disk-cached files on Windows ("...rename tempfile to datafile failed..."). PR 38827 [Eric Covener] *) mod_proxy_balancer: Bring XML output up to date. [Jim Jagielski] *) htpasswd, htdbm: Optionally read passwords from stdin, as more secure alternative to -b. PR 40243. [Adomas Paltanavicius , Stefan Fritsch] *) htpasswd, htdbm: Add support for bcrypt algorithm (requires apr-util 1.5 or higher). PR 49288. [Stefan Fritsch] *) htpasswd, htdbm: Put full 48bit of entropy into salt, improve error handling. Add some of htpasswd's improvements to htdbm, e.g. warn if password is truncated by crypt(). [Stefan Fritsch] *) mod_auth_form: Support the expr parser in the AuthFormLoginRequiredLocation, AuthFormLoginSuccessLocation and AuthFormLogoutLocation directives. [Graham Leggett] *) mod_ssl: Add support for TLS-SRP (Secure Remote Password key exchange for TLS, RFC 5054). PR 51075. [Quinn Slack , Christophe Renou, Peter Sylvester] *) mod_rewrite: Stop mergeing RewriteBase down to subdirectories unless new option 'RewriteOptions MergeBase' is configured. PR 53963. [Eric Covener] *) mod_header: Allow for exposure of loadavg and server load using new format specifiers %l, %i, %b [Jim Jagielski] *) core: Make ap_regcomp() return AP_REG_ESPACE if out of memory. Make ap_pregcomp() abort if out of memory. This raises the minimum PCRE requirement to version 6.0. [Stefan Fritsch] *) mod_proxy: Add ability to configure the sticky session separator. PR 53893. [, Jim Jagielski] *) mod_dumpio: Correctly log large messages PR 54179 [Marek Wianecki ] *) core: Don't fail at startup with AH00554 when Include points to a directory without any wildcard character. [Eric Covener] *) core: Fail startup if the argument to ServerTokens is unrecognized. [Jackie Zhang ] *) mod_log_forensic: Don't log a spurious "-" if a request has been rejected before mod_log_forensic could attach its id to it. [Stefan Fritsch] *) rotatelogs: Omit the second argument for the first invocation of a post-rotate program when -p is used, per the documentation. [Joe Orton] *) mod_session_dbd: fix a segmentation fault in the function dbd_remove. PR 53452. [, Reimo Rebane] *) core: Functions to provide server load values: ap_get_sload() and ap_get_loadavg(). [Jim Jagielski, Jan Kaluza , Jeff Trawick] *) mod_ldap: Fix regression in handling "server unavailable" errors on Windows. PR 54140. [Eric Covener] *) syslog logging: Remove stray ", referer" at the end of some messages. [Jeff Trawick] *) "Iterate" directives: Report an error if no arguments are provided. [Jeff Trawick] *) mod_ssl: Change default for SSLCompression to off, as compression causes security issues in most setups. (The so called "CRIME" attack). [Stefan Fritsch] *) ab: add TLS1.1/TLS1.2 options to -f switch, and adapt output to more accurately report the negotiated protocol. PR 53916. [Nicolás Pernas Maradei , Kaspar Brand] *) core: ErrorDocument now works for requests without a Host header. PR 48357. [Jeff Trawick] *) prefork: Avoid logging harmless errors during graceful stop. [Joe Orton, Jeff Trawick] *) mod_proxy: When concatting for PPR, avoid cases where we concat ".../" and "/..." to create "...//..." [Jim Jagielski] *) mod_cache: Wrong content type and character set when mod_cache serves stale content because of a proxy error. PR 53539. [Rainer Jung, Ruediger Pluem] *) mod_proxy_ajp: Fix crash in packet dump code when logging with LogLevel trace7 or trace8. PR 53730. [Rainer Jung] *) httpd.conf: Removed the configuration directives setting a bad_DNT environment introduced in 2.4.3. The actual directives are commented out in the default conf file. *) core: Apply length limit when logging Status header values. [Jeff Trawick, Chris Darroch] *) mod_proxy_balancer: The nonce is only derived from the UUID iff not set via the 'nonce' balancer param. [Jim Jagielski] *) mod_ssl: Match wildcard SSL certificate names in proxy mode. PR 53006. [Joe Orton] *) Windows: Fix output of -M, -L, and similar command-line options which display information about the server configuration. [Jeff Trawick] Changes with Apache 2.4.3 *) SECURITY: CVE-2012-3502 (cve.mitre.org) mod_proxy_ajp, mod_proxy_http: Fix an issue in back end connection closing which could lead to privacy issues due to a response mixup. PR 53727. [Rainer Jung] *) SECURITY: CVE-2012-2687 (cve.mitre.org) mod_negotiation: Escape filenames in variant list to prevent a possible XSS for a site where untrusted users can upload files to a location with MultiViews enabled. [Niels Heinen ] *) mod_authnz_ldap: Don't try a potentially expensive nested groups search before exhausting all AuthLDAPGroupAttribute checks on the current group. PR 52464 [Eric Covener] *) mod_lua: Add new directive LuaAuthzProvider to allow implementing an authorization provider in lua. [Stefan Fritsch] *) core: Be less strict when checking whether Content-Type is set to "application/x-www-form-urlencoded" when parsing POST data, or we risk losing data with an appended charset. PR 53698 [Petter Berntsen ] *) httpd.conf: Added configuration directives to set a bad_DNT environment variable based on User-Agent and to remove the DNT header field from incoming requests when a match occurs. This currently has the effect of removing DNT from requests by MSIE 10.0 because it deliberately violates the current specification of DNT semantics for HTTP. [Roy T. Fielding] *) mod_socache_shmcb: Fix bus error due to a misalignment in some 32 bit builds, especially on Solaris Sparc. PR 53040. [Rainer Jung] *) mod_cache: Set content type in case we return stale content. [Ruediger Pluem] *) Windows: Fix SSL failures on windows with AcceptFilter https none. PR 52476. [Jeff Trawick] *) ab: Fix read failure when targeting SSL server. [Jeff Trawick] *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR: - mod_auth_digest: shared memory file [Jeff Trawick] *) htpasswd: Use correct file mode for checking if file is writable. PR 45923. [Stefan Fritsch] *) mod_rewrite: Fix crash with dbd RewriteMaps. PR 53663. [Mikhail T. ] *) mod_ssl: Add new directive SSLCompression to disable TLS-level compression. PR 53219. [Björn Jacke , Stefan Fritsch] *) mod_lua: Add a few missing request_rec fields. Rename remote_ip to client_ip to match conn_rec. [Stefan Fritsch] *) mod_lua: Change prototype of vm_construct, to work around gcc bug which causes a segfault. PR 52779. [Dick Snippe ] *) mpm_event: Don't count connections in lingering close state when calculating how many additional connections may be accepted. [Stefan Fritsch] *) mod_ssl: If exiting during initialization because of a fatal error, log a message to the main error log pointing to the appropriate virtual host error log. [Stefan Fritsch] *) mod_proxy_ajp: Reduce memory usage in case of many keep-alive requests on one connection. PR 52275. [Naohiro Ooiwa ] *) mod_proxy_balancer: Restore balancing after a failed worker has recovered when using lbmethod_bybusyness. PR 48735. [Jeff Trawick] *) mod_setenvif: Compile some global regex only once during startup. This should save some memory, especially with .htaccess. [Stefan Fritsch] *) core: Add the port number to the vhost's name in the scoreboard. [Stefan Fritsch] *) mod_proxy: Fix ProxyPassReverse for balancer configurations. PR 45434. [Joe Orton] *) mod_lua: Add the parsebody function for parsing POST data. PR 53064. [Daniel Gruno] *) apxs: Use LDFLAGS from config_vars.mk in addition to CFLAGS and CPPFLAGS. [Stefan Fritsch] *) mod_proxy: Fix memory leak or possible corruption in ProxyBlock implementation. [Ruediger Pluem, Joe Orton] *) mod_proxy: Check hostname from request URI against ProxyBlock list, not forward proxy, if ProxyRemote* is configured. [Joe Orton] *) mod_proxy_connect: Avoid DNS lookup on hostname from request URI if ProxyRemote* is configured. PR 43697. [Joe Orton] *) mpm_event, mpm_worker: Remain active amidst prevalent child process resource shortages. [Jeff Trawick] *) Add "strict" and "warnings" pragmas to Perl scripts. [Rich Bowen] *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR: - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and mutexes (Mutex) [Jim Jagielski] *) ab: Fix bind() errors. [Joe Orton] *) mpm_event: Don't do a blocking write when starting a lingering close from the listener thread. PR 52229. [Stefan Fritsch] *) mod_so: If a filename without slashes is specified for LoadFile or LoadModule and the file cannot be found in the server root directory, try to use the standard dlopen() search path. [Stefan Fritsch] *) mpm_event, mpm_worker: Fix cases where the spawn rate wasn't reduced after child process resource shortages. [Jeff Trawick] *) mpm_prefork: Reduce spawn rate after a child process exits due to unexpected poll or accept failure. [Jeff Trawick] *) core: Log value of Status header line in script responses rather than the fixed header name. [Chris Darroch] *) mod_ssl: Fix handling of empty response from OCSP server. [Jim Meyering , Joe Orton] *) mpm_event: Fix handling of MaxConnectionsPerChild. [Stefan Fritsch] *) mod_authz_core: If an expression in "Require expr" returns denied and references %{REMOTE_USER}, trigger authentication and retry. PR 52892. [Stefan Fritsch] *) core: Always log if LimitRequestFieldSize triggers. [Stefan Fritsch] *) mod_deflate: Skip compression if compression is enabled at SSL level. [Stefan Fritsch] *) core: Add missing HTTP status codes registered with IANA. [Julian Reschke , Rainer Jung] *) mod_ldap: Treat the "server unavailable" condition as a transient error with all LDAP SDKs. [Filip Valder ] *) core: Fix spurious "not allowed here" error returned when the Options directive is used in .htaccess and "AllowOverride Options" (with no specific options restricted) is configured. PR 53444. [Eric Covener] *) mod_authz_core: Fix parsing of Require arguments in . PR 53048. [Stefan Fritsch] *) mod_log_config: Fix %{abc}C truncating cookie values at first "=". PR 53104. [Greg Ames] *) mod_ext_filter: Fix error_log spam when input filters are configured. [Joe Orton] *) mod_rewrite: Add "AllowAnyURI" option. PR 52774. [Joe Orton] *) htdbm, htpasswd: Don't crash if crypt() fails (e.g. with FIPS enabled). [Paul Wouters , Joe Orton] *) core: Use a TLS 1.0 close_notify alert for internal dummy connection if the chosen listener is configured for https. [Joe Orton] *) mod_proxy: Use the the same hostname for SNI as for the HTTP request when forwarding to SSL backends. PR 53134. [Michael Weiser , Ruediger Pluem] *) mod_info: Display all registered providers. [Stefan Fritsch] *) mod_ssl: Send the error message for speaking http to an https port using HTTP/1.0 instead of HTTP/0.9, and omit the link that may be wrong when using SNI. PR 50823. [Stefan Fritsch] *) core: Fix segfault in logging if r->useragent_addr or c->client_addr is unset. PR 53265. [Stefan Fritsch] *) log_server_status: Bring Perl style forward to the present, use standard modules, update for new format of server-status output. PR 45424. [Richard Bowen, Dave Brondsema, and others] *) mod_sed, mod_log_debug, mod_rewrite: Symbol namespace cleanups. [Joe Orton, André Malo] *) core: Prevent "httpd -k restart" from killing server in presence of config error. [Joe Orton] *) mod_proxy_fcgi: If there is an error reading the headers from the backend, send an error to the client. PR 52879. [Stefan Fritsch] Changes with Apache 2.4.2 *) SECURITY: CVE-2012-0883 (cve.mitre.org) envvars: Fix insecure handling of LD_LIBRARY_PATH that could lead to the current working directory to be searched for DSOs. [Stefan Fritsch] *) mod_slotmem_shm: Honor DefaultRuntimeDir [Jim Jagielski] *) mod_ssl: Fix crash with threaded MPMs due to race condition when initializing EC temporary keys. [Stefan Fritsch] *) mod_rewrite: Fix RewriteCond integer checks to be parsed correctly. PR 53023. [Axel Reinhold , André Malo] *) mod_proxy: Add the forcerecovery balancer parameter that determines if recovery for balancer workers is enforced. [Ruediger Pluem] *) Fix MPM DSO load failure on AIX. [Jeff Trawick] *) mod_proxy: Correctly set up reverse proxy worker. PR 52935. [Petter Berntsen ] *) mod_sed: Don't define PATH_MAX to a potentially undefined value, causing compile problems on GNU hurd. [Stefan Fritsch] *) core: Add ap_runtime_dir_relative() and DefaultRuntimeDir. [Jeff Trawick] *) core: Fix breakage of Listen directives with MPMs that use a per-directory config. PR 52904. [Stefan Fritsch] *) core: Disallow directives in AllowOverrideList which are only allowed in VirtualHost or server context. These are usually not prepared to be called in .htaccess files. [Stefan Fritsch] *) core: In AllowOverrideList, do not allow 'None' together with other directives. PR 52823. [Stefan Fritsch] *) mod_slotmem_shm: Support DEFAULT_REL_RUNTIMEDIR for file-based shm. [Jim Jagielski] *) core: Fix merging of AllowOverrideList and ContentDigest. [Stefan Fritsch] *) mod_request: Fix validation of the KeptBodySize argument so it doesn't always throw a configuration error. PR 52981 [Eric Covener] *) core: Add filesystem paths to access denied / access failed messages AH00035 and AH00036. [Eric Covener] *) mod_dumpio: Properly handle errors from subsequent input filters. PR 52914. [Stefan Fritsch] *) Unix MPMs: Fix small memory leak in parent process if connect() failed when waking up children. [Joe Orton] *) "DirectoryIndex disabled" now undoes DirectoryIndex settings in the current configuration section, not just previous config sections. PR 52845. [Eric Covener] *) mod_xml2enc: Fix broken handling of EOS buckets which could lead to response headers not being sent. PR 52766. [Stefan Fritsch] *) mod_ssl: Properly free the GENERAL_NAMEs. PR 32652. [Kaspar Brand] *) core: Check during config test that directories for the access logs actually exist. PR 29941. [Stefan Fritsch] *) mod_xml2enc, mod_proxy_html: Enable per-module loglevels. [Stefan Fritsch] *) mod_filter: Fix segfault with AddOutputFilterByType. PR 52755. [Stefan Fritsch] *) mod_session: Sessions are encoded as application/x-www-form-urlencoded strings, however we do not handle the encoding of spaces properly. Fixed. [Graham Leggett] *) Configuration: Example in comment should use a path consistent with the default configuration. PR 52715. [Rich Bowen, Jens Schleusener, Rainer Jung] *) Configuration: Switch documentation links from trunk to 2.4. [Rainer Jung] *) configure: Fix out of tree build using apr and apr-util in srclib. [Rainer Jung] Changes with Apache 2.4.1 *) SECURITY: CVE-2012-0053 (cve.mitre.org) Fix an issue in error responses that could expose "httpOnly" cookies when no custom ErrorDocument is specified for status code 400. [Eric Covener] *) mod_proxy_balancer: Fix crash on Windows. PR 52402 [Mladen Turk] *) core: Check during configtest that the directories for error logs exist. PR 29941 [Stefan Fritsch] *) Core configuration: add AllowOverride option to treat syntax errors in .htaccess as non-fatal. PR 52439 [Nick Kew, Jim Jagielski] *) core: Fix memory consumption in core output filter with streaming bucket types like CGI or PIPE. [Joe Orton, Stefan Fritsch] *) configure: Disable modules at configure time if a prerequisite module is not enabled. PR 52487. [Stefan Fritsch] *) Rewrite and proxy now decline what they don't support rather than fail the request. [Joe Orton] *) Fix building against external apr plus apr-util if apr is not installed in a system default path. [Rainer Jung] *) Doxygen fixes and improvements. [Joe Orton, Igor Galić] *) core: Fix building against PCRE 8.30 by switching from the obsolete pcre_info() to pcre_fullinfo(). PR 52623 [Ruediger Pluem, Rainer Jung] Changes with Apache 2.4.0 *) SECURITY: CVE-2012-0031 (cve.mitre.org) Fix scoreboard issue which could allow an unprivileged child process to cause the parent to crash at shutdown rather than terminate cleanly. [Joe Orton] *) mod_ssl: Fix compilation with xlc on AIX. PR 52394. [Stefan Fritsch] *) SECURITY: CVE-2012-0021 (cve.mitre.org) mod_log_config: Fix segfault (crash) when the '%{cookiename}C' log format string is in use and a client sends a nameless, valueless cookie, causing a denial of service. The issue existed since version 2.2.17 and 2.3.3. PR 52256. [Rainer Canavan ] *) mod_ssl: when compiled against OpenSSL 1.0.1 or later, allow explicit control of TLSv1.1 and TLSv1.2 through the SSLProtocol directive. [Kaspar Brand] *) mod_ssl: set OPENSSL_NO_SSL_INTERN when compiling against OpenSSL 1.0.1 or later, to improve binary compatibility with future OpenSSL releases. [Kaspar Brand] *) mod_mime: Don't arbitrarily bypass AddOutputFilter during a ProxyPass, but then allow AddOutputFilter during a RewriteRule [P]. Make mod_mime behave identically in both cases. PR52342. [Graham Leggett] *) Move ab, logresolve, httxt2dbm and apxs to bin from sbin, along with corresponding man pages. [Graham Leggett] *) Distinguish properly between the bindir and sbindir directories when installing binaries. Previously all binaries were silently installed to sbindir, whether they were system administration commands or not. [Graham Leggett] Changes with Apache 2.3.16 *) SECURITY: CVE-2011-4317 (cve.mitre.org) Resolve additional cases of URL rewriting with ProxyPassMatch or RewriteRule, where particular request-URIs could result in undesired backend network exposure in some configurations. [Joe Orton] *) core: Limit line length in .htaccess to 8K like in 2.2.x, to avoid additional DoS potential. [Stefan Fritsch] *) core, all modules: Add unique tag to most error log messages. [Stefan Fritsch] *) mod_socache_memcache: Change provider name from "mc" to "memcache" to match module name. [Stefan Fritsch] *) mod_slotmem_shm: Change provider name from "shared" to "shm" to match module name. [Stefan Fritsch] *) mod_ldap: Fix segfault with Solaris LDAP when enabling ldaps. This requires an apr-util fix in which is available in apr-util >= 1.4.0. PR 42682. [Stefan Fritsch] *) mod_rewrite: Add the AllowNoSlash RewriteOption, which makes it possible for RewriteRules to be placed in .htaccess files that match the directory with no trailing slash. PR 48304. [Matthew Byng-Maddick ] *) mod_session_crypto: Add a SessionCryptoPassphraseFile directive so that the administrator can hide the keys from the configuration. [Graham Leggett] *) Introduce a per request version of the remote IP address, which can be optionally modified by a module when the effective IP of the client is not the same as the real IP of the client (such as a load balancer). Introduce a per connection "peer_ip" and a per request "client_ip" to distinguish between the raw IP address of the connection and the effective IP address of the request. [Graham Leggett] *) ap_pass_brigade_fchk() function added. [Jim Jagielski] *) core: Pass ap_errorlog_info struct to error log hook. [Stefan Fritsch] *) mod_cache_disk: Make sure we check return codes on all writes and attempts to close, and clean up after ourselves in these cases. PR43589. [Graham Leggett] *) mod_cache_disk: Remove the unnecessary intermediate brigade while writing to disk. Fixes a problem where mod_disk_cache was leaving buckets in the intermediate brigade and not passing them to out on exit. [Florian S. , Graham Leggett] *) mod_ssl: use a shorter setting for SSLCipherSuite in the default default configuration file, and add some more information about configuring a speed-optimized alternative. [Kaspar Brand] *) mod_ssl: drop support for the SSLv2 protocol. [Kaspar Brand] *) mod_lua: Stop losing track of all but the most specific LuaHook* directives when multiple per-directory config sections are used. Adds LuaInherit directive to control how parent sections are merged. [Eric Covener] *) Server directive display (-L): Include directives of DSOs. [Jeff Trawick] *) mod_cache: Make sure we merge headers correctly when we handle a non cacheable conditional response. PR52120. [Graham Leggett] *) Pre GA removal of components that will not be included: - mod_noloris was superseded by mod_reqtimeout - mod_serf - mpm_simple [Rainer Jung] *) core: Set MaxMemFree 2048 by default. [Stefan Fritsch] *) mpm_event: Fix assertion failure during very high load. [Stefan Fritsch] *) configure: Additional modules loaded by default: mod_headers. Modules moved from module set "few" to "most" and no longer loaded by default: mod_actions, mod_allowmethods, mod_auth_form, mod_buffer, mod_cgi(d), mod_include, mod_negotiation, mod_ratelimit, mod_request, mod_userdir. [Rainer Jung] *) mod_lua: Use the right lua scope when used as a hook. [Rainer Jung] *) configure: Only load the really imporant modules (i.e. those enabled by the 'few' selection) by default. Don't handle modules enabled with --enable-foo specially. [Stefan Fritsch] *) end-generation hook: Fix false notification of end-of-generation for temporary intervals with no active MPM children. [Jeff Trawick] *) mod_ssl: Add support for configuring persistent TLS session ticket encryption/decryption keys (useful for clustered environments). [Paul Querna, Kaspar Brand] *) mod_usertrack: Use random value instead of remote IP address. [Stefan Fritsch] Changes with Apache 2.3.15 *) SECURITY: CVE-2011-3348 (cve.mitre.org) mod_proxy_ajp: Respond with HTTP_NOT_IMPLEMENTED when the method is not recognized. [Jean-Frederic Clere] *) SECURITY: CVE-2011-3192 (cve.mitre.org) core: Fix handling of byte-range requests to use less memory, to avoid denial of service. If the sum of all ranges in a request is larger than the original file, ignore the ranges and send the complete file. PR 51714. [Stefan Fritsch, Jim Jagielski, Ruediger Pluem, Eric Covener, ] *) SECURITY: CVE-2011-3607 (cve.mitre.org) core: Fix integer overflow in ap_pregsub. This can be triggered e.g. with mod_setenvif via a malicious .htaccess. [Stefan Fritsch] *) SECURITY: CVE-2011-3368 (cve.mitre.org) Reject requests where the request-URI does not match the HTTP specification, preventing unexpected expansion of target URLs in some reverse proxy configurations. [Joe Orton] *) configure: Load all modules in the generated default configuration when using --enable-load-all-modules. [Rainer Jung] *) mod_reqtimeout: Change the default to set some reasonable timeout values. [Stefan Fritsch] *) core, mod_dav_fs: Change default ETag to be "size mtime", i.e. remove the inode. PR 49623. [Stefan Fritsch] *) mod_lua: Expose SSL variables via r:ssl_var_lookup(). [Eric Covener] *) mod_lua: LuaHook{AccessChecker,AuthChecker,CheckUserID,TranslateName} can now additionally be run as "early" or "late" relative to other modules. [Eric Covener] *) configure: By default, only load those modules that are either required or explicitly selected by a configure --enable-foo argument. The LoadModule statements for modules enabled by --enable-mods-shared=most and friends will be commented out. [Stefan Fritsch] *) mod_lua: Prevent early Lua hooks (LuaHookTranslateName and LuaHookQuickHandler) from being configured in , , and htaccess where the configuration would have been ignored. [Eric Covener] *) mod_lua: Resolve "attempt to index local 'r' (a userdata value)" errors in LuaMapHandler scripts [Eric Covener] *) mod_log_debug: Rename optional argument from if= to expr=, to be more in line with other config directives. [Stefan Fritsch] *) mod_headers: Require an expression to be specified with expr=, to be more in line with other config directives. [Stefan Fritsch] *) mod_substitute: To prevent overboarding memory usage, limit line length to 1MB. [Stefan Fritsch] *) mod_lua: Make the query string (r.args) writable. [Eric Covener] *) mod_include: Add support for application/x-www-form-urlencoded encoding and decoding. [Graham Leggett] *) rotatelogs: Add -c option to force logfile creation in every rotation interval, even if empty. [Jan Kaluža ] *) core: Limit ap_pregsub() to 64K, add ap_pregsub_ex() for longer strings. [Stefan Fritsch] *) mod_session_crypto: Refactor to support the new apr_crypto API. [Graham Leggett] *) http: Add missing Location header if local URL-path is used as ErrorDocument for 30x. [Stefan Fritsch] *) mod_buffer: Make sure we step down for subrequests, but not for internal redirects triggered by mod_rewrite. [Graham Leggett] *) mod_lua: add r:construct_url as a wrapper for ap_construct_url. [Eric Covener] *) mod_remote_ip: Fix configuration of internal proxies. PR 49272. [Jim Riggs ] *) mpm_winnt: Handle AcceptFilter 'none' mode correctly; resolve specific server IP endpoint and remote client IP upon connection. [William Rowe] *) mod_setenvif: Remove OID match which is obsoleted by SetEnvIfExpr with PeerExtList(). [Stefan Fritsch] *) mpm_prefork, mpm_worker, mpm_event: If a child is created just before graceful restart and then exits because of a missing lock file, don't shutdown the whole server. PR 39311. [Shawn Michael ] *) mpm_event: Check the return value from ap_run_create_connection. PR 41194. [Davi Arnaut] *) mod_mime_magic: Add signatures for PNG and SWF to the example config. PR 48352. [Jeremy Wagner-Kaiser ] *) core, unixd: Add -D DUMP_RUN_CFG option to dump some configuration items from the parsed (or default) config. This is useful for init scripts that need to setup temporary directories and permissions. [Stefan Fritsch] *) core, mod_actions, mod_asis: Downgrade error log messages which accompany a 404 request status from loglevel error to info. PR 35768. [Stefan Fritsch] *) core: Fix hook sorting with Perl modules. PR 45076. [Torsten Foertsch ] *) core: Enforce LimitRequestFieldSize after multiple headers with the same name have been merged. [Stefan Fritsch] *) mod_ssl: If MaxMemFree is set, ask OpenSSL >= 1.0.0 to reduce memory usage. PR 51618. [Cristian Rodríguez , Stefan Fritsch] *) mod_ssl: At startup, when checking a server certificate whether it matches the configured ServerName, also take dNSName entries in the subjectAltName extension into account. PR 32652, PR 47051. [Kaspar Brand] *) mod_substitute: Reduce memory usage and copying of data. PR 50559. [Stefan Fritsch] *) mod_ssl/proxy: enable the SNI extension for backend TLS connections [Kaspar Brand] *) Add wrappers for malloc, calloc, realloc that check for out of memory situations and use them in many places. PR 51568, PR 51569, PR 51571. [Stefan Fritsch] *) Fix cross-compilation of mod_cgi/mod_cgid when APR_HAVE_STRUCT_RLIMIT is false but RLIMIT_* are defined. PR51371. [Eric Covener] *) core: Correctly obey ServerName / ServerAlias if the Host header from the request matches the VirtualHost address. PR 51709. [Micha Lenk ] *) mod_unique_id: Use random number generator to initialize counter. PR 45110. [Stefan Fritsch] *) core: Add convenience API for apr_random. [Stefan Fritsch] *) core: Add MaxRangeOverlaps and MaxRangeReversals directives to control the number of overlapping and reversing ranges (respectively) permitted before returning the entire resource, with a default limit of 20. [Jim Jagielski] *) mod_ldap: Optional function uldap_ssl_supported(r) always returned false if called from a virtual host with mod_ldap directives in it. Did not affect mod_authnz_ldap's usage of mod_ldap. [Eric Covener] *) mod_filter: Instead of dropping the Accept-Ranges header when a filter registered with AP_FILTER_PROTO_NO_BYTERANGE is present, set the header value to "none". [Eric Covener, Ruediger Pluem] *) core: Allow MaxRanges none|unlimited|default and set 'Accept-Ranges: none' in the case Ranges are being ignored with MaxRanges none. [Eric Covener] *) mod_ssl: revamp CRL-based revocation checking when validating certificates of clients or proxied servers. Completely delegate CRL processing to OpenSSL, and add a new [Proxy]CARevocationCheck directive for controlling the revocation checking mode. [Kaspar Brand] *) core: Add MaxRanges directive to control the number of ranges permitted before returning the entire resource, with a default limit of 200. [Eric Covener] *) mod_cache: Ensure that CacheDisable can correctly appear within a LocationMatch. [Graham Leggett] *) mod_cache: Fix the moving of the CACHE filter, which erroneously stood down if the original filter was not added by configuration. [Graham Leggett] *) mod_ssl: improve certificate error logging. PR 47408. [Kaspar Brand] *) mod_authz_groupfile: Increase length limit of lines in the group file to 16MB. PR 43084. [Stefan Fritsch] *) core: Increase length limit of lines in the configuration file to 16MB. PR 45888. PR 50824. [Stefan Fritsch] *) core: Add API for resizable buffers. [Stefan Fritsch] *) mod_ldap: Enable LDAPConnectionTimeout for LDAP toolkits that have LDAP_OPT_CONNECT_TIMEOUT instead of LDAP_OPT_NETWORK_TIMEOUT, such as Tivoli Directory Server 6.3 and later. [Eric Covener] *) mod_ldap: Change default number of retries from 10 to 3, and add an LDAPRetries and LDAPRetryDelay directives. [Eric Covener] *) mod_authnz_ldap: Don't retry during authentication, because this just multiplies the ample retries already being done by mod_ldap. [Eric Covener] *) configure: Allow to explicitly disable modules even with module selection 'reallyall'. [Stefan Fritsch] *) mod_rewrite: Check validity of each internal (int:) RewriteMap even if the RewriteEngine is disabled in server context, avoiding a crash while referencing the invalid int: map at runtime. PR 50994. [Ben Noordhuis ] *) mod_ssl, configure: require OpenSSL 0.9.7 or later. [Kaspar Brand] *) mod_ssl: remove ssl_toolkit_compat layer. [Kaspar Brand] *) mod_ssl, configure, ab: drop support for RSA BSAFE SSL-C toolkit. [Kaspar Brand] *) mod_usertrack: Run mod_usertrack earlier in the fixups hook to ensure the cookie is set when modules such as mod_rewrite trigger a redirect. Also use r->err_headers_out for the cookie, for the same reason. PR29755. [Sami J. Mäkinen , Eric Covener] *) mod_proxy_http, mod_proxy_connect: Add 'proxy-status' and 'proxy-source-port' request notes for logging. PR 30195. [Stefan Fritsch] *) configure: Enable ldap modules in 'all' and 'most' selections if ldap is compiled into apr-util. [Stefan Fritsch] *) core: Add ap_check_cmd_context()-check if a command is executed in .htaccess file. [Stefan Fritsch] *) mod_deflate: Fix endless loop if first bucket is metadata. PR 51590. [Torsten Foertsch ] *) mod_authn_socache: Fix to work in .htaccess if not configured anywhere in httpd.conf, and introduce an AuthnCacheEnable directive. PR 51991 [Nick Kew] *) mod_xml2enc: new (formerly third-party) module supporting internationalisation for filters via smart charset sniffing and conversion. [Nick Kew] *) mod_proxy_html: new (formerly third-party) module to fix up HTML links in a reverse proxy situation, where a backend generates URLs that are not resolvable by Clients. [Nick Kew] Changes with Apache 2.3.14 *) mod_proxy_ajp: Improve trace logging. [Rainer Jung] *) mod_proxy_ajp: Respect "reuse" flag in END_REPONSE packets. [Rainer Jung] *) mod_proxy: enable absolute URLs to be rewritten with ProxyPassReverse, e.g. to reverse proxy "Location: https://other-internal-server/login" [Nick Kew] *) prefork, worker, event: Make sure crashes are logged to the error log if httpd has already detached from the console. [Stefan Fritsch] *) prefork, worker, event: Reduce period during startup/restart where a successive signal may be lost. PR 43696. [Arun Bhalla ] *) mod_allowmethods: Correct Merging of "reset" and do not allow an empty parameter list for the AllowMethods directive. [Rainer Jung] *) configure: Update selection of modules for 'all' and 'most'. 'all' will now enable all modules except for example and test modules. Make the selection for 'most' more useful (including ssl and proxy). Both 'all' and 'most' will now disable modules if dependencies are missing instead of aborting. If a specific module is requested with --enable-XXX=yes, missing dependencies will still cause configure to exit with an error. [Stefan Fritsch] *) mod_ldap: Revert the integration of apr-ldap as ap_ldap which was done in 2.3.13. [Stefan Fritsch] *) core: For '*' or '_default_' vhosts, use a wildcard address of any address family, rather than IPv4 only. [Joe Orton] *) core, mod_rewrite, mod_ssl, mod_nw_ssl: Make the SERVER_NAME variable include [ ] for literal IPv6 addresses, as mandated by RFC 3875. PR 26005. [Stefan Fritsch] *) mod_negotiation: Fix parsing of Content-Length in type maps. PR 42203. [Nagae Hidetake ] *) core: Add more logging to ap_scan_script_header_err* functions. Add ap_scan_script_header_err*_ex functions that take a module index for logging. mod_cgi, mod_cgid, mod_proxy_fcgi, mod_proxy_scgi, mod_isapi: Use the new functions in order to make logging configurable per-module. [Stefan Fritsch] *) mod_dir: Add DirectoryIndexRedirect to send an external redirect to the proper index. [Eric Covener] *) mod_deflate: Don't try to compress requests with a zero sized body. PR 51350. [Stefan Fritsch] *) core: Fix startup on IPv6-only systems. PR 50592. [Joe Orton, ] *) suexec: Add environment variables CONTEXT_DOCUMENT_ROOT, CONTEXT_PREFIX, REDIRECT_ERROR_NOTES, REDIRECT_SCRIPT_FILENAME, REQUEST_SCHEME to the whitelist in suexec. PR 51499. [Graham Laverty , Stefan Fritsch] *) mod_rewrite: Fix regexp RewriteCond with NoCase. [Stefan Fritsch] *) mod_log_debug: New module that allows to log custom messages at various phases in the request processing. [Stefan Fritsch] *) mod_ssl: Add some debug logging when loading server certificates. PR 37912. [Nick Burch ] *) configure: Support reallyall option also for --enable-mods-static. [Rainer Jung] *) mod_socache_dc: add --with-distcache to configure for choosing the distcache installation directory. [Rainer Jung] *) mod_socache_dc: use correct build variable MOD_SOCACHE_DC_LDADD instead of MOD_SOCACHE_LDADD in build macro. [Rainer Jung] *) mod_lua, mod_deflate: respect platform specific runpath linker flag. [Rainer Jung] *) configure: Only link the httpd binary against PCRE. No other support binary needs PCRE. [Rainer Jung] *) configure: tolerate dependency checking failures for modules if they have been enabled implicitly. [Rainer Jung] *) configure: Allow to specify module specific custom linker flags via the MOD_XXX_LDADD variables. [Rainer Jung] Changes with Apache 2.3.13 *) ab: Support specifying the local address to use. PR 48930. [Peter Schuller ] *) core: Add support to ErrorLogFormat for logging the system unique thread id under Linux. [Stefan Fritsch] *) event: New AsyncRequestWorkerFactor directive to influence how many connections will be accepted per process. [Stefan Fritsch] *) prefork, worker, event: Rename MaxClients to MaxRequestWorkers which describes more accurately what it does. [Stefan Fritsch] *) rotatelogs: Add -p argument to specify custom program to invoke after a log rotation. PR 51285. [Sven Ulland , Joe Orton] *) mod_ssl: Don't do OCSP checks for valid self-issued certs. [Kaspar Brand] *) mod_ssl: Avoid unnecessary renegotiations with SSLVerifyDepth 0. PR 48215. [Kaspar Brand] *) mod_status: Display information about asynchronous connections in the server-status. PR 44377. [Stefan Fritsch] *) mpm_event: If the number of connections of a process is very high, or if all workers are busy, don't accept new connections in that process. [Stefan Fritsch] *) mpm_event: Process lingering close asynchronously instead of tying up worker threads. [Jeff Trawick, Stefan Fritsch] *) mpm_event: If MaxMemFree is set, limit the number of pools that is kept around. [Stefan Fritsch] *) mpm_event: Fix graceful restart aborting connections. PR 43359. [Takashi Sato ] *) mod_ssl: Disable AECDH ciphers in example config. PR 51363. [Rob Stradling ] *) core: Introduce new function ap_get_conn_socket() to access the socket of a connection. [Stefan Fritsch] *) mod_data: Introduce a filter to support RFC2397 data URLs. [Graham Leggett] *) mod_userdir/mod_alias/mod_vhost_alias: Correctly set DOCUMENT_ROOT, CONTEXT_DOCUMENT_ROOT, CONTEXT_PREFIX. PR 26052. PR 46198. [Stefan Fritsch] *) core: Allow to override document_root on a per-request basis. Introduce new context_document_root and context_prefix which provide information about non-global URI-to-directory mappings (from e.g. mod_userdir or mod_alias) to scripts. PR 49705. [Stefan Fritsch] *) core: Add and to complement sections. [Stefan Fritsch] *) mod_ext_filter: Remove DebugLevel option in favor of per-module loglevel. [Stefan Fritsch] *) mod_include: Make the "#if expr" element use the new "ap_expr" expression parser. The old parser can still be used by setting the new directive SSILegacyExprParser. [Stefan Fritsch] *) core: Add some features to ap_expr for use by mod_include: a restricted mode that does not allow to bypass request access restrictions; new variables DOCUMENT_URI (alias for REQUEST_URI), LAST_MODIFIED; -A as an alias for -U; an additional data entry in ap_expr_eval_ctx_t for use by the consumer; an extensible ap_expr_exec_ctx() API that allows to use that data entry. [Stefan Fritsch] *) mod_include: Merge directory configs instead of one SSI* config directive causing all other per-directory SSI* config directives to be reset. [Stefan Fritsch] *) mod_charset_lite: Remove DebugLevel option in favour of per-module loglevel. [Stefan Fritsch] *) core: Add ap_regexec_len() function that works with non-null-terminated strings. PR 51231. [Yehezkel Horowitz ] *) mod_authnz_ldap: If the LDAP server returns constraint violation, don't treat this as an error but as "auth denied". [Stefan Fritsch] *) mod_proxy_fcgi|scgi: Add support for "best guess" of PATH_INFO for SCGI/FCGI. PR 50880, 50851. [Mark Montague , Jim Jagielski] *) mod_cache: When content is served stale, and there is no means to revalidate the content using ETag or Last-Modified, and we have mandated no stale-on-error behaviour, stand down and don't cache. Saves a cache write that will never be read. [Graham Leggett] *) mod_reqtimeout: Fix a timed out connection going into the keep-alive state after a timeout when discarding a request body. PR 51103. [Stefan Fritsch] *) core: Add various file existence test operators to ap_expr. [Stefan Fritsch] *) mod_proxy_express: New mass reverse-proxy switch extension for mod_proxy. [Jim Jagielski] *) configure: Fix script error when configuring module set "reallyall". [Rainer Jung] Changes with Apache 2.3.12 *) configure, core: Provide easier support for APR's hook probe capability. [Jim Jagielski, Jeff Trawick] *) Silence autoconf 2.68 warnings. [Rainer Jung] *) mod_authnz_ldap: Resolve crash when LDAP is used for authorization only [Scott Hill ] *) support: Make sure check_forensic works with mod_unique_id loaded [Joe Schaefer] *) Add child_status hook for tracking creation/termination of MPM child processes. Add end_generation hook for notification when the last MPM child of a generation exits. [Jeff Trawick] *) mod_ldap: Make LDAPSharedCacheSize 0 create a non-shared-memory cache per process as opposed to disabling caching completely. This allows to use the non-shared-memory cache as a workaround for the shared memory cache not being available during graceful restarts. PR 48958. [Stefan Fritsch] *) Add new ap_reserve_module_slots/ap_reserve_module_slots_directive API, necessary if a module (like mod_perl) registers additional modules late in the startup phase. [Stefan Fritsch] *) core: Prevent segfault if DYNAMIC_MODULE_LIMIT is reached. PR 51072. [Torsten Förtsch ] *) WinNT MPM: Improve robustness under heavy load. [Jeff Trawick] *) MinGW build improvements. PR 49535. [John Vandenberg , Jeff Trawick] *) core: Support module names with colons in loglevel configuration. [Torsten Förtsch ] *) mod_ssl, ab: Support OpenSSL compiled without SSLv2 support. [Stefan Fritsch] *) core: Abort if the MPM is changed across restart. [Jeff Trawick] *) mod_proxy_ajp: Add support for 'ProxyErrorOverride on'. PR 50945. [Peter Pramberger , Jim Jagielski] *) mod_proxy_fcgi: Add support for 'ProxyErrorOverride on'. PR 50913. [Mark Montague , Jim Jagielski] *) core: Change the APIs of ap_cfg_getline() and ap_cfg_getc() to return an error code. Abort with a nice error message if a config line is too long. Partial fix for PR 50824. [Stefan Fritsch] *) mod_info: Dump config to stdout during startup if -DDUMP_CONFIG is specified. PR 31956. [Stefan Fritsch] *) Restore visibility of DEFAULT_PIDLOG to core and modules. MPM helper function ap_remove_pid() added. [Jeff Trawick] *) Enable DEFAULT_REL_RUNTIMEDIR on Windows and NetWare. [various] *) Correct C++ incompatibility with http_log.h. [Stefan Fritsch, Jeff Trawick] *) mod_log_config: Prevent segfault. PR 50861. [Torsten Förtsch ] *) core: AllowEncodedSlashes new option NoDecode to allow encoded slashes in request URL path info but not decode them. Change behavior of option "On" to decode the encoded slashes as 2.0 and 2.2 do. PR 35256, PR 46830. [Dan Poirier] *) mod_ssl: Check SNI hostname against Host header case-insensitively. PR 49491. [Mayank Agrawal ] *) mod_ldap: Add LDAPConnectionPoolTTL to give control over lifetime of bound backend LDAP connections. PR47634 [Eric Covener] *) mod_cache: Make CacheEnable and CacheDisable configurable per directory in addition to per server, making them work from within a LocationMatch. [Graham Leggett] *) worker, event, prefork: Correct several issues when built as DSOs; most notably, the scoreboard was reinitialized during graceful restart, such that processes of the previous generation were not observable. [Jeff Trawick] Changes with Apache 2.3.11 *) mod_win32: Added shebang check for '! so that .vbs scripts work as CGI. Win32's cscript interpreter can only use a single quote as comment char. [Guenter Knauf] *) mod_proxy: balancer-manager now uses POST instead of GET. [Jim Jagielski] *) core: new util function: ap_parse_form_data(). Previously, this capability was tucked away in mod_request. [Jim Jagielski] *) core: new hook: ap_run_pre_read_request. [Jim Jagielski] *) modules: Fix many modules that were not correctly initializing if they were not active during server startup but got enabled later during a graceful restart. [Stefan Fritsch] *) core: Create new ap_state_query function that allows modules to determine if the current configuration run is the initial one at server startup, and if the server is started for testing/config dumping only. [Stefan Fritsch] *) mod_proxy: Runtime configuration of many parameters for existing balancers via the balancer-manager. [Jim Jagielski] *) mod_proxy: Runtime addition of new workers (BalancerMember) for existing balancers via the balancer-manager. [Jim Jagielski] *) mod_cache: When a bad Expires date is present, we need to behave as if the Expires is in the past, not as if the Expires is missing. PR 16521. [Co-Advisor ] *) mod_cache: We must ignore quoted-string values that appear in a Cache-Control header. PR 50199. [Graham Leggett] *) mod_dav: Revert change to send 501 error if unknown Content-* header is received for a PUT request. PR 42978. [Stefan Fritsch] *) mod_cache: Respect s-maxage as described by RFC2616 14.9.3, which must take precedence if present. PR 35247. [Graham Leggett] *) mod_ssl: Fix a possible startup failure if multiple SSL vhosts are configured with the same ServerName and private key file. [Masahiro Matsuya , Joe Orton] *) mod_socache_dc: Make module compile by fixing some typos. PR 50735 [Mark Montague ] *) prefork: Update MPM state in children during a graceful stop or restart. PR 41743. [Andrew Punch ] *) mod_mime: Ignore leading dots when looking for mime extensions. PR 50434 [Stefan Fritsch] *) core: Add support to set variables with the 'Define' directive. The variables that can then be used in the config using the ${VAR} syntax known from envvar interpolation. [Stefan Fritsch] *) mod_proxy_http: make adding of X-Forwarded-* headers configurable. ProxyAddHeaders defaults to On. [Vincent Deffontaines] *) mod_slotmem_shm: Increase memory alignment for slotmem data. [Rainer Jung] *) mod_ssl: Add config options for OCSP: SSLOCSPResponderTimeout, SSLOCSPResponseMaxAge, SSLOCSPResponseTimeSkew. [Kaspar Brand ] *) mod_ssl: Revamp output buffering to reduce network overhead for output fragmented into many buckets, such as chunked HTTP responses. [Joe Orton] *) core: Apply sections to all requests, not only to file base requests. Allow to use inside , , and sections. The merging of sections now happens after the merging of sections, even if an section is embedded inside a or section. [Stefan Fritsch] *) mod_proxy: Refactor usage of shared data by dropping the scoreboard and using slotmem. Create foundation for dynamic growth/changes of members within a balancer. Remove BalancerNonce in favor of a per-balancer 'nonce' parameter. [Jim Jagielski] *) mod_status: Don't show slots which are disabled by MaxClients as open. PR 47022 [Jordi Prats , Stefan Fritsch] *) mpm_prefork: Fix ap_mpm_query results for AP_MPMQ_MAX_DAEMONS and AP_MPMQ_MAX_THREADS. *) mod_authz_core: Fix bug in merging logic if user-based and non-user-based authorization directives were mixed. [Stefan Fritsch] *) mod_authn_socache: change directive name from AuthnCacheProvider to AuthnCacheProvideFor. The term "provider" is overloaded in this module, and we should avoid confusion between the provider of a backend (AuthnCacheSOCache) and the authn provider(s) for which this module provides cacheing (AuthnCacheProvideFor). [Nick Kew] *) mod_proxy_http: Allocate the fake backend request from a child pool of the backend connection, instead of misusing the pool of the frontend request. Fixes a thread safety issue where buckets set aside in the backend connection leak into other threads, and then disappear when the frontend request is cleaned up, in turn causing corrupted buckets to make other threads spin. [Graham Leggett] *) mod_ssl: Change the format of the SSL_{CLIENT,SERVER}_{I,S}_DN variables to be RFC 2253 compatible, convert non-ASCII characters to UTF8, and escape other special characters with backslashes. The old format can still be used with the LegacyDNStringFormat argument to SSLOptions. *) core, mod_rewrite: Make the REQUEST_SCHEME variable available to scripts and mod_rewrite. [Stefan Fritsch] *) mod_rewrite: Allow to use arbitrary boolean expressions (ap_expr) in RewriteCond. [Stefan Fritsch] *) mod_rewrite: Allow to unset environment variables using E=!VAR. PR 49512. [Mark Drayton , Stefan Fritsch] *) mod_headers: Restore the 2.3.8 and earlier default for the first argument of the Header directive ("onsuccess"). [Eric Covener] *) core: Disallow the mixing of relative and absolute Options PR 33708. [Sönke Tesch ] *) core: When exporting request headers to HTTP_* environment variables, drop variables whose names contain invalid characters. Describe in the docs how to restore the old behaviour. [Malte S. Stretz ] *) core: When selecting an IP-based virtual host, favor an exact match for the port over a wildcard (or omitted) port instead of favoring the one that came first in the configuration file. [Eric Covener] *) core: Overlapping virtual host address/port combinations now implicitly enable name-based virtual hosting for that address. The NameVirtualHost directive has no effect, and _default_ is interpreted the same as "*". [Eric Covener] *) core: In the absence of any Options directives, the default is now "FollowSymlinks" instead of "All". [Igor Galić] *) rotatelogs: Add -e option to write logs through to stdout for optional further processing. [Graham Leggett] *) mod_ssl: Correctly read full lines in input filter when the line is incomplete during first read. PR 50481. [Ruediger Pluem] *) mod_authz_core: Add AuthzSendForbiddenOnFailure directive to allow sending '403 FORBIDDEN' instead of '401 UNAUTHORIZED' if authorization fails for an authenticated user. PR 40721. [Stefan Fritsch] Changes with Apache 2.3.10 *) mod_rewrite: Don't implicitly URL-escape the original query string when no substitution has changed it. PR 50447. [Eric Covener] *) core: Honor 'AcceptPathInfo OFF' during internal redirects, such as per-directory mod_rewrite substitutions. PR 50349. [Eric Covener] *) mod_rewrite: Add 'RewriteOptions InheritBefore' to put the base rules/conditions before the overridden rules/conditions. PR 39313. [Jérôme Grandjanny ] *) mod_autoindex: add IndexIgnoreReset to reset the list of IndexIgnored filenames in higher precedence configuration sections. PR 24243. [Eric Covener] *) mod_cgid: RLimit* directive support for mod_cgid. PR 42135 [Eric Covener] *) core: Fail startup when the argument to ServerName looks like a glob or a regular expression instead of a hostname (*?[]). PR 39863 [Rahul Nair ] *) mod_userdir: Add merging of enable, disable, and filename arguments to UserDir directive, leaving enable/disable of userlists unmerged. PR 44076 [Eric Covener] *) httpd: When no -k option is provided on the httpd command line, the server was starting without checking for an existing pidfile. PR 50350 [Eric Covener] *) mod_proxy: Put the worker in error state if the SSL handshake with the backend fails. PR 50332. [Daniel Ruggeri , Ruediger Pluem] *) mod_cache_disk: Fix Windows build which was broken after renaming the module. [Gregg L. Smith] Changes with Apache 2.3.9 *) SECURITY: CVE-2010-1623 (cve.mitre.org) Fix a denial of service attack against mod_reqtimeout. [Stefan Fritsch] *) mod_headers: Change default first argument of Header directive from "onsuccess" to "always". [Eric Covener] *) mod_include: Add the onerror attribute to the include element, allowing an URL to be specified to include on error. [Graham Leggett] *) mod_cache_disk: mod_disk_cache renamed to mod_cache_disk, to be consistent with the naming of other modules. [Graham Leggett] *) mod_setenvif: Add SetEnvIfExpr directive to set env var depending on expression. [Stefan Fritsch] *) mod_proxy: Fix ProxyPassInterpolateEnv directive. PR 50292. [Stefan Fritsch] *) suEXEC: Add Suexec directive to disable suEXEC without renaming the binary (Suexec Off), or force startup failure if suEXEC is required but not supported (Suexec On). Change SuexecUserGroup to fail startup instead of just printing a warning if suEXEC is disabled. [Jeff Trawick] *) core: Add Error directive for aborting startup or htaccess processing with a specified error message. [Jeff Trawick] *) mod_rewrite: Fix the RewriteEngine directive to work within a location. Previously, once RewriteEngine was switched on globally, it was impossible to switch off. [Graham Leggett] *) core, mod_include, mod_ssl: Move the expression parser derived from mod_include back into mod_include. Replace ap_expr with a parser derived from mod_ssl's parser. Make mod_ssl use the new parser. Rework ap_expr's public interface and provide hooks for modules to add variables and functions. [Stefan Fritsch] *) core: Do the hook sorting earlier so that the hooks are properly sorted for the pre_config hook and during parsing the config. [Stefan Fritsch] *) core: In the absence of any AllowOverride directives, the default is now "None" instead of "All". PR49823 [Eric Covener] *) mod_proxy: Don't allow ProxyPass or ProxyPassReverse in or . PR47765 [Eric Covener] *) prefork/worker/event MPMS: default value (when no directive is present) of MaxConnectionsPerChild/MaxRequestsPerChild is changed to 0 from 10000 to match default configuration and manual. PR47782 [Eric Covener] *) proxy_connect: Don't give up in the middle of a CONNECT tunnel when the child process is starting to exit. PR50220. [Eric Covener] *) mod_autoindex: Fix inheritance of mod_autoindex directives into contexts that don't have any mod_autoindex directives. PR47766. [Eric Covener] *) mod_rewrite: Add END flag for RewriteRule to prevent further rounds of rewrite processing when a per-directory substitution occurs. [Eric Covener] *) mod_ssl: Make sure to always log an error if loading of CA certificates fails. PR 40312. [Paul Tiemann ] *) mod_dav: Send 501 error if unknown Content-* header is received for a PUT request (RFC 2616 9.6). PR 42978. [Stefan Fritsch] *) mod_dav: Send 400 error if malformed Content-Range header is received for a put request (RFC 2616 14.16). PR 49825. [Stefan Fritsch] *) mod_proxy: Release the backend connection as soon as EOS is detected, so the backend isn't forced to wait for the client to eventually acknowledge the data. [Graham Leggett] *) mod_proxy: Optimise ProxyPass within a Location so that it is stored per-directory, and chosen during the location walk. Make ProxyPass work correctly from within a LocationMatch. [Graham Leggett] *) core: Fix segfault if per-module LogLevel is on virtual host scope. PR 50117. [Stefan Fritsch] *) mod_proxy: Move the ProxyErrorOverride directive to have per directory scope. [Graham Leggett] *) mod_allowmethods: New module to deny certain HTTP methods without interfering with authentication/authorization. [Paul Querna, Igor Galić, Stefan Fritsch] *) mod_ssl: Log certificate information and improve error message if client cert verification fails. PR 50093, PR 50094. [Lassi Tuura , Stefan Fritsch] *) htcacheclean: Teach htcacheclean to limit cache size by number of inodes in addition to size of files. Prevents a cache disk from running out of space when many small files are cached. [Graham Leggett] *) core: Rename MaxRequestsPerChild to MaxConnectionsPerChild, which describes more accurately what the directive does. The old name still works but logs a warning. [Stefan Fritsch] *) mod_cache: Optionally serve stale data when a revalidation returns a 5xx response, controlled by the CacheStaleOnError directive. [Graham Leggett] *) htcacheclean: Allow the listing of valid URLs within the cache, with the option to list entry metadata such as sizes and times. [Graham Leggett] *) mod_cache: correctly parse quoted strings in cache headers. PR 50199 [Nick Kew] *) mod_cache: Allow control over the base URL of reverse proxied requests using the CacheKeyBaseURL directive, so that the cache key can be calculated from the endpoint URL instead of the server URL. [Graham Leggett] *) mod_cache: CacheLastModifiedFactor, CacheStoreNoStore, CacheStorePrivate, CacheStoreExpired, CacheIgnoreNoLastMod, CacheDefaultExpire, CacheMinExpire and CacheMaxExpire can be set per directory/location. [Graham Leggett] *) mod_disk_cache: CacheMaxFileSize, CacheMinFileSize, CacheReadSize and CacheReadTime can be set per directory/location. [Graham Leggett] *) core: Speed up config parsing if using a very large number of config files. PR 50002 [andrew cloudaccess net] *) mod_cache: Support the caching of HEAD requests. [Graham Leggett] *) htcacheclean: Allow the option to round up file sizes to a given block size, improving the accuracy of disk usage. [Graham Leggett] *) mod_ssl: Add authz providers for use with mod_authz_core and its RequireAny/RequireAll containers: 'ssl' (equivalent to SSLRequireSSL), 'ssl-verify-client' (for use with 'SSLVerifyClient optional'), and 'ssl-require' (expressions with same syntax as SSLRequire). [Stefan Fritsch] *) mod_ssl: Make the ssl expression parser thread-safe. It now requires bison instead of yacc. [Stefan Fritsch] *) mod_disk_cache: Change on-disk header file format to support the link of the device/inode of the data file to the matching header file, and to support the option of not writing a data file when the data file is empty. [Graham Leggett] *) core/mod_unique_id: Add generate_log_id hook to allow to use the ID generated by mod_unique_id as error log ID for requests. [Stefan Fritsch] *) mod_cache: Make sure that we never allow a 304 Not Modified response that we asked for to leak to the client should the 304 response be uncacheable. PR45341 [Graham Leggett] *) mod_cache: Add the cache_status hook to register the final cache decision hit/miss/revalidate. Add optional support for an X-Cache and/or an X-Cache-Detail header to add the cache status to the response. PR48241 [Graham Leggett] *) mod_authz_host: Add 'local' provider that matches connections originating on the local host. PR 19938. [Stefan Fritsch] *) Event MPM: Fix crash accessing pollset on worker thread when child process is exiting. [Jeff Trawick] *) core: For process invocation (cgi, fcgid, piped loggers and so forth) pass the system library path (LD_LIBRARY_PATH or platform-specific variables) along with the system PATH, by default. Both should be overridden together as desired using PassEnv etc; see mod_env. [William Rowe] *) mod_cache: Introduce CacheStoreExpired, to allow administrators to capture a stale backend response, perform If-Modified-Since requests against the backend, and serving from the cache all 304 responses. This restores pre-2.2.4 cache behavior. [William Rowe] *) mod_rewrite: Introduce <=, >= string comparison operators, and integer comparators -lt, -le, -eq, -ge, and -gt. To help bash users and drop the ambiguity of the symlink test "-ltest", introduce -h or -L as symlink test operators. [William Rowe] *) mod_cache: Give the cache provider the opportunity to choose to cache or not cache based on the buckets present in the brigade, such as the presence of a FILE bucket. [Graham Leggett] *) mod_authz_core: Allow authz providers to check args while reading the config and allow to cache parsed args. Move 'all' and 'env' authz providers from mod_authz_host to mod_authz_core. Add 'method' authz provider depending on the HTTP method. [Stefan Fritsch] *) mod_include: Move the request_rec within mod_include to be exposed within include_ctx_t. [Graham Leggett] *) mod_include: Reinstate support for UTF-8 character sets by allowing a variable being echoed or set to be decoded and then encoded as separate steps. PR47686 [Graham Leggett] *) mod_cache: Add a discrete commit_entity() provider function within the mod_cache provider interface which is called to indicate to the provider that caching is complete, giving the provider the opportunity to commit temporary files permanently to the cache in an atomic fashion. Replace the inconsistent use of error cleanups with a formal set of pool cleanups attached to a subpool, which is destroyed on error. [Graham Leggett] *) mod_cache: Change the signature of the store_body() provider function within the mod_cache provider interface to support an "in" brigade and an "out" brigade instead of just a single input brigade. This gives a cache provider the option to consume only part of the brigade passed to it, rather than the whole brigade as was required before. This fixes an out of memory and a request timeout condition that would occur when the original document was a large file. Introduce CacheReadSize and CacheReadTime directives to mod_disk_cache to control the amount of data to attempt to cache at a time. [Graham Leggett] *) core: Add ErrorLogFormat to allow configuring error log format, including additional information that is logged once per connection or request. Add error log IDs for connections and request to allow correlating error log lines and the corresponding access log entry. [Stefan Fritsch] *) core: Disable sendfile by default. [Stefan Fritsch] *) mod_cache: Check the request to determine whether we are allowed to return cached content at all, and respect a "Cache-Control: no-cache" header from a client. Previously, "no-cache" would behave like "max-age=0". [Graham Leggett] *) mod_cache: Use a proper filter context to hold filter data instead of misusing the per-request configuration. Fixes a segfault on trunk when the normal handler is used. [Graham Leggett] *) mod_cgid: Log a warning if the ScriptSock path is truncated because it is too long. PR 49388. [Stefan Fritsch] *) vhosts: Do not allow _default_ in NameVirtualHost, or mixing * and non-* ports on NameVirtualHost, or multiple NameVirtualHost directives for the same address:port, or NameVirtualHost directives with no matching VirtualHosts, or multiple ip-based VirtualHost sections for the same address:port. These were previously accepted with a warning, but the behavior was undefined. [Dan Poirier] *) mod_remoteip: Fix a segfault when using mod_remoteip in conjunction with Allow/Deny. PR 49838. [Andrew Skalski ] *) core: DirectoryMatch can now match on the end of line character ($), and sub-directories of matched directories are no longer implicitly matched. PR49809 [Eric Covener] *) Regexps: introduce new higher-level regexp utility including parsing and executing perl-style regexp ops (e.g s/foo/bar/i) and regexp memory [Nick Kew] *) Proxy: support setting source address. PR 29404 [Multiple contributors iterating through bugzilla, Aron Ujvari , Aleksey Midenkov , ] *) mod_dav_fs: Fix broken "creationdate" property. Regression in version 2.3.7. [Rainer Jung] Changes with Apache 2.3.7 *) SECURITY: CVE-2010-1452 (cve.mitre.org) mod_dav, mod_cache, mod_session: Fix Handling of requests without a path segment. PR 49246 [Mark Drayton, Jeff Trawick] *) mod_ldap: Properly check the result returned by apr_ldap_init. PR 46076. [Stefan Fritsch] *) mod_rewrite: Log errors if rewrite map files cannot be opened. PR 49639. [Stefan Fritsch] *) mod_proxy_http: Support the 'ping' property for backend HTTP/1.1 servers via leveraging 100-Continue as the initial "request". [Jim Jagielski] *) core/mod_authz_core: Introduce new access_checker_ex hook that enables mod_authz_core to bypass authentication if access should be allowed by IP address/env var/... [Stefan Fritsch] *) core: Introduce note_auth_failure hook to allow modules to add support for additional auth types. This makes ap_note_auth_failure() work with mod_auth_digest again. PR 48807. [Stefan Fritsch] *) socache modules: return APR_NOTFOUND when a lookup is not found [Nick Kew] *) mod_authn_socache: new module [Nick Kew] *) configure: Add reallyall option for --enable-mods-shared. [Stefan Fritsch] *) Fix Windows build when using VC6. [Gregg L. Smith ] *) mod_rewrite: Allow to set environment variables without explicitly giving a value. [Rainer Jung] *) mod_rewrite: Remove superfluous EOL from rewrite logging. [Rainer Jung] *) mod_include: recognise "text/html; parameters" as text/html PR 49616 [Andrey Chernov ] *) CGI vars: allow PATH to be set by SetEnv, consistent with LD_LIBRARY_PATH PR 43906 [Nick Kew] *) Core: Extra robustness: don't try authz and segfault if authn fails to set r->user. Log bug and return 500 instead. PR 42995 [Nick Kew] *) HTTP protocol filter: fix handling of longer chunk extensions PR 49474 [] *) Update SSL cipher suite and add example for SSLHonorCipherOrder. [Lars Eilebrecht, Rainer Jung] *) move AddOutputFilterByType from core to mod_filter. This should fix nasty side-effects that happen when content_type is set more than once in processing a request, and make it fully compatible with dynamic and proxied contents. [Nick Kew] *) mod_log_config: Implement logging for sub second timestamps and request end time. [Rainer Jung] Changes with Apache 2.3.6 *) SECURITY: CVE-2009-3555 (cve.mitre.org) mod_ssl: Comprehensive fix of the TLS renegotiation prefix injection attack when compiled against OpenSSL version 0.9.8m or later. Introduces the 'SSLInsecureRenegotiation' directive to reopen this vulnerability and offer unsafe legacy renegotiation with clients which do not yet support the new secure renegotiation protocol, RFC 5746. [Joe Orton, and with thanks to the OpenSSL Team] *) SECURITY: CVE-2009-3555 (cve.mitre.org) mod_ssl: A partial fix for the TLS renegotiation prefix injection attack by rejecting any client-initiated renegotiations. Forcibly disable keepalive for the connection if there is any buffered data readable. Any configuration which requires renegotiation for per-directory/location access control is still vulnerable, unless using OpenSSL >= 0.9.8l. [Joe Orton, Ruediger Pluem, Hartmut Keil ] *) SECURITY: CVE-2010-0408 (cve.mitre.org) mod_proxy_ajp: Respond with HTTP_BAD_REQUEST when the body is not sent when request headers indicate a request body is incoming; not a case of HTTP_INTERNAL_SERVER_ERROR. [Niku Toivola ] *) SECURITY: CVE-2010-0425 (cve.mitre.org) mod_isapi: Do not unload an isapi .dll module until the request processing is completed, avoiding orphaned callback pointers. [Brett Gervasoni , Jeff Trawick] *) core: Filter init functions are now run strictly once per request before handler invocation. The init functions are no longer run for connection filters. PR 49328. [Joe Orton] *) core: Adjust the output filter chain correctly in an internal redirect from a subrequest, preserving filters from the main request as necessary. PR 17629. [Joe Orton] *) mod_cache: Explicitly allow cache implementations to cache a 206 Partial Response if they so choose to do so. Previously an attempt to cache a 206 was arbitrarily allowed if the response contained an Expires or Cache-Control header, and arbitrarily denied if both headers were missing. [Graham Leggett] *) core: Add microsecond timestamp fractions, process id and thread id to the error log. [Rainer Jung] *) configure: The "most" module set gets build by default. [Rainer Jung] *) configure: Building dynamic modules (DSO) by default. [Rainer Jung] *) configure: Fix broken VPATH build when using included APR. [Rainer Jung] *) mod_session_crypto: Fix configure problem when building with APR 2 and for VPATH builds with included APR. [Rainer Jung] *) mod_session_crypto: API compatibility with APR 2 crypto and APR Util 1.x crypto. [Rainer Jung] *) ab: Fix memory leak with -v2 and SSL. PR 49383. [Pavel Kankovsky ] *) core: Add per-module and per-directory loglevel configuration. Add some more trace logging. mod_rewrite: Replace RewriteLog/RewriteLogLevel with trace log levels. mod_ssl: Replace LogLevelDebugDump with trace log levels. mod_ssl/mod_proxy*: Adjust loglevels to be less verbose at levels info and debug. mod_dumpio: Replace DumpIOLogLevel with trace log levels. [Stefan Fritsch] *) mod_ldap: LDAP caching was suppressed (and ldap-status handler returns title page only) when any mod_ldap directives were used in VirtualHost context. [Eric Covener] *) mod_disk_cache: Decline the opportunity to cache if the response is a 206 Partial Content. This stops a reverse proxied partial response from becoming cached, and then being served in subsequent responses. [Graham Leggett] *) mod_deflate: avoid the risk of forwarding data before headers are set. PR 49369 [Matthew Steele ] *) mod_authnz_ldap: Ensure nested groups are checked when the top-level group doesn't have any direct non-group members of attributes in AuthLDAPGroupAttribute. [Eric Covener] *) mod_authnz_ldap: Search or Comparison during authorization phase can use the credentials from the authentication phase (AuthLDAPSearchAsUSer,AuthLDAPCompareAsUser). PR 48340 [Domenico Rotiroti, Eric Covener] *) mod_authnz_ldap: Allow the initial DN search during authentication to use the HTTP username/pass instead of an anonymous or hard-coded LDAP id (AuthLDAPInitialBindAsUser, AuthLDAPInitialBindPattern). [Eric Covener] *) mod_authnz_ldap: Publish requested LDAP data with an AUTHORIZE_ prefix when this module is used for authorization. See AuthLDAPAuthorizePrefix. PR 45584 [Eric Covener] *) apxs -q: Stop filtering out ':' characters from the reported values. PR 45343. [Bill Cole] *) prefork MPM: Work around possible crashes on child exit in APR reslist cleanup code. PR 43857. [Tom Donovan] *) ab: fix number of requests sent by ab when keepalive is enabled. PR 48497. [Bryn Dole ] *) Log an error for failures to read a chunk-size, and return 408 instead of 413 when this is due to a read timeout. This change also fixes some cases of two error documents being sent in the response for the same scenario. [Eric Covener] PR49167 *) mod_proxy_balancer: Add new directive BalancerNonce to allow admin to control/set the nonce used in the balancer-manager application. [Jim Jagielski] *) mod_proxy_connect: Support port ranges in AllowConnect. PR 23673. [Stefan Fritsch] *) Proxy balancer: support setting error status according to HTTP response code from a backend. PR 48939. [Daniel Ruggeri ] *) htcacheclean: Introduce the ability to clean specific URLs from the cache, if provided as an optional parameter on the command line. [Graham Leggett] *) core: Introduce the IncludeStrict directive, which explicitly fails server startup if no files or directories match a wildcard path. [Graham Leggett] *) htcacheclean: Report additional statistics about entries deleted. PR 48944. [Mark Drayton mark markdrayton.info] *) Introduce SSLFIPS directive to support OpenSSL FIPS_mode; permits all builds of mod_ssl to use 'SSLFIPS off' for portability, but the proper build of openssl is required for 'SSLFIPS on'. PR 46270. [Dr Stephen Henson , William Rowe] *) mod_proxy_http: Log the port of the remote server in various messages. PR 48812. [Igor Galić ] *) mod_reqtimeout: Do not wrongly enforce timeouts for mod_proxy's backend connections and other protocol handlers (like mod_ftp). [Stefan Fritsch] *) mod_proxy_ajp: Really regard the operation a success, when the client aborted the connection. In addition adjust the log message if the client aborted the connection. [Ruediger Pluem] *) mod_ssl: Add the 'SSLInsecureRenegotiation' directive, which allows insecure renegotiation with clients which do not yet support the secure renegotiation protocol. [Joe Orton] *) mod_ssl: Fix a potential I/O hang if a long list of trusted CAs is configured for client cert auth. PR 46952. [Joe Orton] *) core: Only log a 408 if it is no keepalive timeout. PR 39785 [Ruediger Pluem, Mark Montague ] *) support/rotatelogs: Add -L option to create a link to the current log file. PR 48761 [, Dan Poirier] *) mod_ldap: Update LDAPTrustedClientCert to consistently be a per-directory setting only, matching most of the documentation and examples. PR 46541 [Paul Reder, Eric Covener] *) mod_ldap: LDAPTrustedClientCert now accepts CA_DER/CA_BASE64 argument types previously allowed only in LDAPTrustedGlobalCert. [Eric Covener] *) mod_negotiation: Preserve query string over multiviews negotiation. This buglet was fixed for type maps in 2.2.6, but the same issue affected multiviews and was overlooked. PR 33112 [Joergen Thomsen ] *) mod_ldap: Eliminate a potential crash with multiple LDAPTrustedClientCert when some are not password-protected. [Eric Covener] *) Fix startup segfault when the Mutex directive is used but no loaded modules use httpd mutexes. PR 48787. [Jeff Trawick] *) Proxy: get the headers right in a HEAD request with ProxyErrorOverride, by checking for an overridden error before not after going into a catch-all code path. PR 41646. [Nick Kew, Stuart Children] *) support/rotatelogs: Support the simplest log rotation case, log truncation. Useful when the log is being processed in real time using a command like tail. [Graham Leggett] *) support/htcacheclean: Teach it how to write a pid file (modelled on httpd's writing of a pid file) so that it becomes possible to run more than one instance of htcacheclean on the same machine. [Graham Leggett] *) Log command line on startup, so there's a record of command line arguments like -f. PR 48752. [Dan Poirier] *) Introduce mod_reflector, a handler capable of reflecting POSTed request bodies back within the response through the output filter stack. Can be used to turn an output filter into a web service. [Graham Leggett] *) mod_proxy_http: Make sure that when an ErrorDocument is served from a reverse proxied URL, that the subrequest respects the status of the original request. This brings the behaviour of proxy_handler in line with default_handler. PR 47106. [Graham Leggett] *) Support wildcards in both the directory and file components of the path specified by the Include directive. [Graham Leggett] *) mod_proxy, mod_proxy_http: Support remote https proxies by using HTTP CONNECT. PR 19188. [Philippe Dutrueux , Rainer Jung] *) apxs: Fix -A and -a options to ignore whitespace in httpd.conf [Philip M. Gollucci] *) worker: Don't report server has reached MaxClients until it has. Add message when server gets within MinSpareThreads of MaxClients. PR 46996. [Dan Poirier] *) mod_session: Session expiry was being initialised, but not updated on each session save, resulting in timed out sessions when there should not have been. Fixed. [Graham Leggett] *) mod_log_config: Add the R option to log the handler used within the request. [Christian Folini ] *) mod_include: Allow fine control over the removal of Last-Modified and ETag headers within the INCLUDES filter, making it possible to cache responses if desired. Fix the default value of the SSIAccessEnable directive. [Graham Leggett] *) Add new UnDefine directive to undefine a variable. PR 35350. [Stefan Fritsch] *) Make ap_pregsub(), used by AliasMatch and friends, use the same syntax for regex backreferences as mod_rewrite and mod_include: Remove the use of '&' as an alias for '$0' and allow to escape any character with a backslash. PR 48351. [Stefan Fritsch] *) mod_authnz_ldap: If AuthLDAPCharsetConfig is set, also convert the password to UTF-8. PR 45318. [Johannes Müller , Stefan Fritsch] *) ab: Fix calculation of requests per second in HTML output. PR 48594. [Stefan Fritsch] *) mod_authnz_ldap: Failures to map a username to a DN, or to check a user password now result in an informational level log entry instead of warning level. [Eric Covener] Changes with Apache 2.3.5 *) SECURITY: CVE-2010-0434 (cve.mitre.org) Ensure each subrequest has a shallow copy of headers_in so that the parent request headers are not corrupted. Eliminates a problematic optimization in the case of no request body. PR 48359 [Jake Scott, William Rowe, Ruediger Pluem] *) Turn static function get_server_name_for_url() into public ap_get_server_name_for_url() and use it where appropriate. This fixes mod_rewrite generating invalid URLs for redirects to IPv6 literal addresses. [Stefan Fritsch] *) mod_ldap: Introduce new config option LDAPTimeout to set the timeout for LDAP operations like bind and search. [Stefan Fritsch] *) mod_proxy, mod_proxy_ftp: Move ProxyFtpDirCharset from mod_proxy to mod_proxy_ftp. [Takashi Sato] *) mod_proxy, mod_proxy_connect: Move AllowCONNECT from mod_proxy to mod_proxy_connect. [Takashi Sato] *) mod_cache: Do an exact match of the keys defined by CacheIgnoreURLSessionIdentifiers against the querystring instead of a partial match. PR 48401. [Dodou Wang , Ruediger Pluem] *) mod_proxy_balancer: Fix crash in balancer-manager. [Rainer Jung] *) Core HTTP: disable keepalive when the Client has sent Expect: 100-continue but we respond directly with a non-100 response. Keepalive here led to data from clients continuing being treated as a new request. PR 47087 [Nick Kew] *) Core: reject NULLs in request line or request headers. PR 43039 [Nick Kew] *) Core: (re)-introduce -T commandline option to suppress documentroot check at startup. PR 41887 [Jan van den Berg ] *) mod_autoindex: support XHTML as equivalent to HTML in IndexOptions, ScanHTMLTitles, ReadmeName, HeaderName PR 48416 [Dmitry Bakshaev , Nick Kew] *) Proxy: Fix ProxyPassReverse with relative URL Derived (slightly erroneously) from PR 38864 [Nick Kew] *) mod_headers: align Header Edit with Header Set when used on Content-Type PR 48422 [Cyril Bonté , Nick Kew>] *) mod_headers: Enable multi-match-and-replace edit option PR 46594 [Nick Kew] *) mod_filter: enable it to act on non-200 responses. PR 48377 [Nick Kew] Changes with Apache 2.3.4 *) Replace AcceptMutex, LockFile, RewriteLock, SSLMutex, SSLStaplingMutex, and WatchdogMutexPath with a single Mutex directive. Add APIs to simplify setup and user customization of APR proc and global mutexes. (See util_mutex.h.) Build-time setting DEFAULT_LOCKFILE is no longer respected; set DEFAULT_REL_RUNTIMEDIR instead. [Jeff Trawick] *) http_core: KeepAlive no longer accepts other than On|Off. [Takashi Sato] *) mod_dav: Remove errno from dav_error interface. Calls to dav_new_error() and dav_new_error_tag() must be adjusted to add an apr_status_t parameter. [Jeff Trawick] *) mod_authnz_ldap: Add AuthLDAPBindAuthoritative to allow Authentication to try other providers in the case of an LDAP bind failure. PR 46608 [Justin Erenkrantz, Joe Schaefer, Tony Stevenson] *) Build: fix --with-module to work as documented PR 43881 [Gez Saunders ] Changes with Apache 2.3.3 *) SECURITY: CVE-2009-3095 (cve.mitre.org) mod_proxy_ftp: sanity check authn credentials. [Stefan Fritsch , Joe Orton] *) SECURITY: CVE-2009-3094 (cve.mitre.org) mod_proxy_ftp: NULL pointer dereference on error paths. [Stefan Fritsch , Joe Orton] *) mod_ssl: enable support for ECC keys and ECDH ciphers. Tested against OpenSSL 1.0.0b3. [Vipul Gupta , Sander Temme] *) mod_dav: Include uri when logging a PUT error due to connection abort. PR 38149. [Stefan Fritsch] *) mod_dav: Return 409 instead of 500 for a LOCK request if the parent resource does not exist or is not a collection. PR 43465. [Stefan Fritsch] *) mod_dav_fs: Return 409 instead of 500 for Litmus test case copy_nodestcoll (a COPY request where the parent of the destination resource does not exist). PR 39299. [Stefan Fritsch] *) mod_dav_fs: Don't delete the whole file if a PUT with content-range failed. PR 42896. [Stefan Fritsch] *) mod_dav_fs: Make PUT create files atomically and no longer destroy the old file if the transfer aborted. PR 39815. [Paul Querna, Stefan Fritsch] *) mod_dav_fs: Remove inode keyed locking as this conflicts with atomically creating files. On systems with inode numbers, this is a format change of the DavLockDB. The old DavLockDB must be deleted on upgrade. [Stefan Fritsch] *) mod_log_config: Make ${cookie}C correctly match whole cookie names instead of substrings. PR 28037. [Dan Franklin , Stefan Fritsch] *) vhost: A purely-numeric Host: header should not be treated as a port. PR 44979 [Nick Kew] *) mod_ldap: Avoid 500 errors with "Unable to set LDAP_OPT_REFHOPLIMIT option to 5" when built against openldap by using SDK LDAP_OPT_REFHOPLIMIT defaults unless LDAPReferralHopLimit is explicitly configured. [Eric Covener] *) mod_charset_lite: Honor 'CharsetOptions NoImplicitAdd'. [Eric Covener] *) mod_ssl: Add support for OCSP Stapling. PR 43822. [Dr Stephen Henson ] *) mod_socache_shmcb: Allow parens in file name if cache size is given. Fixes SSLSessionCache directive mis-parsing parens in pathname. PR 47945. [Stefan Fritsch] *) htpasswd: Improve out of disk space handling. PR 30877. [Stefan Fritsch] *) htpasswd: Use MD5 hash by default on all platforms. [Stefan Fritsch] *) mod_sed: Reduce memory consumption when processing very long lines. PR 48024 [Basant Kumar Kukreja ] *) ab: Fix segfault in case the argument for -n is a very large number. PR 47178. [Philipp Hagemeister ] *) Allow ProxyPreserveHost to work in sections. PR 34901. [Stefan Fritsch] *) configure: Fix THREADED_MPMS so that mod_cgid is enabled again for worker MPM. [Takashi Sato] *) mod_dav: Provide a mechanism to obtain the request_rec and pathname from the dav_resource. [Jari Urpalainen , Brian France ] *) Build: Use install instead of cp if available on installing modules to avoid segmentation fault. PR 47951. [hirose31 gmail.com] *) mod_cache: correctly consider s-maxage in cacheability decisions. [Dan Poirier] *) mod_logio/core: Report more accurate byte counts in mod_status if mod_logio is loaded. PR 25656. [Stefan Fritsch] *) mod_ldap: If LDAPSharedCacheSize is too small, try harder to purge some cache entries and log a warning. Also increase the default LDAPSharedCacheSize to 500000. This is a more realistic size suitable for the default values of 1024 for LdapCacheEntries/LdapOpCacheEntries. PR 46749. [Stefan Fritsch] *) mod_rewrite: Make sure that a hostname:port isn't fully qualified if the request is a CONNECT request. [Bill Zajac ] *) mod_cache: Teach CacheEnable and CacheDisable to work from within a Location section, in line with how ProxyPass works. [Graham Leggett] *) mod_reqtimeout: New module to set timeouts and minimum data rates for receiving requests from the client. [Stefan Fritsch] *) core: Fix potential memory leaks by making sure to not destroy bucket brigades that have been created by earlier filters. [Stefan Fritsch] *) core, mod_deflate, mod_sed: Reduce memory usage by reusing bucket brigades in several places. [Stefan Fritsch] *) mod_cache: Fix uri_meets_conditions() so that CacheEnable will match by scheme, or by a wildcarded hostname. PR 40169 [Peter Grandi , Graham Leggett] *) suxec: Allow to log an error if exec fails by setting FD_CLOEXEC on the log file instead of closing it. PR 10744. [Nicolas Rachinsky] *) mod_mime: Make RemoveType override the info from TypesConfig. PR 38330. [Stefan Fritsch] *) mod_cache: Introduce the option to run the cache from within the normal request handler, and to allow fine grained control over where in the filter chain content is cached. Adds CacheQuickHandler directive. [Graham Leggett] *) core: Treat timeout reading request as 408 error, not 400. Log 408 errors in access log as was done in Apache 1.3.x. PR 39785 [Nobutaka Mantani , Stefan Fritsch , Dan Poirier] *) mod_ssl: Reintroduce SSL_CLIENT_S_DN, SSL_CLIENT_I_DN, SSL_SERVER_S_DN, SSL_SERVER_I_DN back to the environment variables to be set by mod_ssl. [Peter Sylvester ] *) mod_disk_cache: don't cache incomplete responses, per RFC 2616, 13.8. PR15866. [Dan Poirier] *) ab: ab segfaults in verbose mode on https sites PR46393. [Ryan Niebur] *) mod_dav: Allow other modules to become providers and add resource types to the DAV response. [Jari Urpalainen , Brian France ] *) mod_dav: Allow other modules to add things to the DAV or Allow headers of an OPTIONS request. [Jari Urpalainen , Brian France ] *) core: Lower memory usage of core output filter. [Stefan Fritsch ] *) mod_mime: Detect invalid use of MultiviewsMatch inside Location and LocationMatch sections. PR47754. [Dan Poirier] *) mod_request: Make sure the KeptBodySize directive rejects values that aren't valid numbers. [Graham Leggett] *) mod_session_crypto: Sanity check should the potentially encrypted session cookie be too short. [Graham Leggett] *) mod_session.c: Prevent a segfault when session is added but not configured. [Graham Leggett] *) htcacheclean: 19 ways to fail, 1 error message. Fixed. [Graham Leggett] *) mod_auth_digest: Fail server start when nonce count checking is configured without shared memory, or md5-sess algorithm is configured. [Dan Poirier] *) mod_proxy_connect: The connect method doesn't work if the client is connecting to the apache proxy through an ssl socket. Fixed. PR29744. [Brad Boyer, Mark Cave-Ayland, Julian Gilbey, Fabrice Durand, David Gence, Tim Dodge, Per Gunnar Hans, Emmanuel Elango, Kevin Croft, Rudolf Cardinal] *) mod_ssl: The error message when SSLCertificateFile is missing should at least give the name or position of the problematic virtual host definition. [Stefan Fritsch sf sfritsch.de] *) mod_auth_digest: Fix null pointer when qop=none. [Dan Poirier] *) Add support for HTTP PUT to ab. [Jeff Barnes ] *) mod_headers: generalise the envclause to support expression evaluation with ap_expr parser [Nick Kew] *) mod_cache: Introduce the thundering herd lock, a mechanism to keep the flood of requests at bay that strike a backend webserver as a cached entity goes stale. [Graham Leggett] *) mod_auth_digest: Fix usage of shared memory and re-enable it. PR 16057 [Dan Poirier] *) Preserve Port information over internal redirects PR 35999 [Jonas Ringh ] *) Proxy: unable to connect to a backend is SERVICE_UNAVAILABLE, rather than BAD_GATEWAY or (especially) NOT_FOUND. PR 46971 [evanc nortel.com] *) Various modules: Do better checking of pollset operations in order to avoid segmentation faults if they fail. PR 46467 [Stefan Fritsch ] *) mod_autoindex: Correctly create an empty cell if the description for a file is missing. PR 47682 [Peter Poeml ] *) ab: Fix broken error messages after resolver or connect() failures. [Jeff Trawick] *) SECURITY: CVE-2009-1890 (cve.mitre.org) Fix a potential Denial-of-Service attack against mod_proxy in a reverse proxy configuration, where a remote attacker can force a proxy process to consume CPU time indefinitely. [Nick Kew, Joe Orton] *) SECURITY: CVE-2009-1191 (cve.mitre.org) mod_proxy_ajp: Avoid delivering content from a previous request which failed to send a request body. PR 46949 [Ruediger Pluem] *) htdbm: Fix possible buffer overflow if dbm database has very long values. PR 30586 [Dan Poirier] *) core: Return APR_EOF if request body is shorter than the length announced by the client. PR 33098 [ Stefan Fritsch ] *) mod_suexec: correctly set suexec_enabled when httpd is run by a non-root user and may have insufficient permissions. PR 42175 [Jim Radford ] *) mod_ssl: Fix SSL_*_DN_UID variables to use the 'userID' attribute type. PR 45107. [Michael Ströder , Peter Sylvester ] *) mod_proxy_http: fix case sensitivity checking transfer encoding PR 47383 [Ryuzo Yamamoto ] *) mod_alias: ensure Redirect issues a valid URL. PR 44020 [HÃ¥kon Stordahl ] *) mod_dir: add FallbackResource directive, to enable admin to specify an action to happen when a URL maps to no file, without resorting to ErrorDocument or mod_rewrite. PR 47184 [Nick Kew] *) mod_cgid: Do not leak the listening Unix socket file descriptor to the CGI process. PR 47335 [Kornél Pál ] *) mod_rewrite: Remove locking for writing to the rewritelog. PR 46942 [Dan Poirier ] *) mod_alias: check sanity in Redirect arguments. PR 44729 [Sönke Tesch , Jim Jagielski] *) mod_proxy_http: fix Host: header for literal IPv6 addresses. PR 47177 [Carlos Garcia Braschi ] *) mod_cache: Add CacheIgnoreURLSessionIdentifiers directive to ignore defined session identifiers encoded in the URL when caching. [Ruediger Pluem] *) mod_rewrite: Fix the error string returned by RewriteRule. RewriteRule returned "RewriteCond: bad flag delimiters" when the 3rd argument of RewriteRule was not started with "[" or not ended with "]". PR 45082 [Vitaly Polonetsky ] *) Windows: Fix usage message. [Rainer Jung] *) apachectl: When passing through arguments to httpd in non-SysV mode, use the "$@" syntax to preserve arguments. [Eric Covener] *) mod_dbd: add DBDInitSQL directive to enable SQL statements to be run when a connection is opened. PR 46827 [Marko Kevac ] *) mod_cgid: Improve handling of long AF_UNIX socket names (ScriptSock). PR 47037. [Jeff Trawick] *) mod_proxy_ajp: Check more strictly that the backend follows the AJP protocol. [Mladen Turk] *) mod_proxy_ajp: Forward remote port information by default. [Rainer Jung] *) Allow MPMs to be loaded dynamically, as with most other modules. Use --enable-mpms-shared={list|"all"} to enable. This required changes to the MPM interfaces. Removed: mpm.h, mpm_default.h (as an installed header), APACHE_MPM_DIR, MPM_NAME, ap_threads_per_child, ap_max_daemons_limit, ap_my_generation, etc. ap_mpm_query() can't be called until after the register-hooks phase. [Jeff Trawick] *) mod_ssl: Add SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN directives to enable stricter checking of remote server certificates. [Ruediger Pluem] *) ab: Fix a 100% CPU loop on platforms where a failed non-blocking connect returns EINPROGRESS and a subsequent poll() returns only POLLERR. Observed on HP-UX. [Eric Covener] *) Remove broken support for BeOS, TPF, and even older platforms such as A/UX, Next, and Tandem. [Jeff Trawick] *) mod_proxy_ftp: Add ProxyFtpListOnWildcard directive to allow files with globbing characters to be retrieved instead of converted into a directory listing. PR 46789 [Dan Poirier ] *) Provide ap_retained_data_create()/ap_retained_data_get() for preservation of module state across unload/load. [Jeff Trawick] *) mod_substitute: Fix a memory leak. PR 44948 [Dan Poirier ] Changes with Apache 2.3.2 *) mod_mime_magic: Fix detection of compressed content. [Rainer Jung] *) mod_negotiation: Escape paths of filenames in 406 responses to avoid HTML injections and HTTP response splitting. PR 46837. [Geoff Keating ] *) mod_ssl: add support for type-safe STACK constructs in OpenSSL development HEAD. PR 45521. [Kaspar Brand, Sander Temme] *) ab: Fix maintenance of the pollset to resolve EALREADY errors with kqueue (BSD/OS X) and excessive CPU with event ports (Solaris). PR 44584. Use APR_POLLSET_NOCOPY for better performance with some pollset implementations. [Jeff Trawick] *) mod_disk_cache: The module now turns off sendfile support if 'EnableSendfile off' is defined globally. [Lars Eilebrecht] *) mod_deflate: Adjust content metadata before bailing out on 304 responses so that the metadata does not differ from 200 response. [Roy T. Fielding] *) mod_deflate: Fix creation of invalid Etag headers. We now make sure that the Etag value is properly quoted when adding the gzip marker. PR 39727, 45023. [Lars Eilebrecht, Roy T. Fielding] *) Added 20x22 icons for ODF, SVG, and XML documents. PR 37185. [Peter Harlow] *) Disabled DefaultType directive and removed ap_default_type() from core. We now exclude Content-Type from responses for which a media type has not been configured via mime.types, AddType, ForceType, or some other mechanism. PR 13986. [Roy T. Fielding] *) mod_rewrite: Add IPV6 variable to RewriteCond [Ryan Phillips ] *) core: Enhance KeepAliveTimeout to support a value in milliseconds. PR 46275. [Takashi Sato] *) rotatelogs: Allow size units B, K, M, G and combination of time and size based rotation. [Rainer Jung] *) rotatelogs: Add flag for verbose (debug) output. [Rainer Jung] *) mod_ssl: Fix merging of SSLRenegBufferSize directive. PR 46508 [] *) core: Translate the the status line to ASCII on EBCDIC platforms in ap_send_interim_response() and for locally generated "100 Continue" responses. [Eric Covener] *) prefork: Fix child process hang during graceful restart/stop in configurations with multiple listening sockets. PR 42829. [Joe Orton, Jeff Trawick] *) mod_session_crypto: Ensure that SessionCryptoDriver can only be set in the global scope. [Graham Leggett] *) mod_ext_filter: We need to detect failure to startup the filter program (a mangled response is not acceptable). Fix to detect failure, and offer configuration option either to abort or to remove the filter and continue. PR 41120 [Nick Kew] *) mod_session_crypto: Rewrite the session_crypto module against the apr_crypto API. [Graham Leggett] *) mod_auth_form: Fix a pool lifetime issue, don't remove the subrequest until the main request is cleaned up. [Graham Leggett] Changes with Apache 2.3.1 *) ap_slotmem: Add in new slot-based memory access API impl., including 2 providers (mod_sharedmem and mod_plainmem) [Jim Jagielski, Jean-Frederic Clere, Brian Akins ] *) mod_include: support generating non-ASCII characters as entities in SSI PR 25202 [Nick Kew] *) core/utils: Enhance ap_escape_html API to support escaping non-ASCII chars PR 25202 [Nick Kew] *) mod_rewrite: fix "B" flag breakage by reverting r5589343 PR 45529 [Bob Ionescu ] *) CGI: return 504 (Gateway timeout) rather than 500 when a script times out before returning status line/headers. PR 42190 [Nick Kew] *) mod_cgid: fix segfault problem on solaris. PR 39332 [Masaoki Kobayashi ] *) mod_proxy_scgi: Added. [André Malo] *) mod_cache: Introduce 'no-cache' per-request environment variable to prevent the saving of an otherwise cacheable response. [Eric Covener] *) mod_rewrite: Introduce DiscardPathInfo|DPI flag to stop the troublesome way that per-directory rewrites append the previous notion of PATH_INFO to each substitution before evaluating subsequent rules. PR 38642 [Eric Covener] *) mod_cgid: Do not add an empty argument when calling the CGI script. PR 46380 [Ruediger Pluem] *) scoreboard: Remove unused sb_type from process_score. [Torsten Foertsch , Chris Darroch] *) mod_ssl: Add SSLRenegBufferSize directive to allow changing the size of the buffer used for the request-body where necessary during a per-dir renegotiation. PR 39243. [Joe Orton] *) mod_proxy_fdpass: New module to pass a client connection over to a separate process that is reading from a unix daemon socket. *) mod_ssl: Improve environment variable extraction to be more efficient and to correctly handle DNs with duplicate tags. PR 45975. [Joe Orton] *) Remove the obsolete serial attribute from the RPM spec file. Compile against the external pcre. Add missing binaries fcgistarter, and mod_socache* and mod_session*. [Graham Leggett] Changes with Apache 2.3.0 *) mod_ratelimit: New module to do bandwidth rate limiting. [Paul Querna] *) Remove X-Pad header which was added as a work around to a bug in Netscape 2.x to 4.0b2. [Takashi Sato ] *) Add DTrace Statically Defined Tracing (SDT) probes. [Theo Schlossnagle , Paul Querna] *) mod_proxy_balancer: Move all load balancing implementations as individual, self-contained mod_proxy submodules under modules/proxy/balancers [Jim Jagielski] *) Rename APIs to include ap_ prefix: find_child_by_pid -> ap_find_child_by_pid suck_in_APR -> ap_suck_in_APR sys_privileges_handlers -> ap_sys_privileges_handlers unixd_accept -> ap_unixd_accept unixd_config -> ap_unixd_config unixd_killpg -> ap_unixd_killpg unixd_set_global_mutex_perms -> ap_unixd_set_global_mutex_perms unixd_set_proc_mutex_perms -> ap_unixd_set_proc_mutex_perms unixd_set_rlimit -> ap_unixd_set_rlimit [Paul Querna] *) mod_lbmethod_heartbeat: New module to load balance mod_proxy workers based on heartbeats. [Paul Querna] *) mod_heartmonitor: New module to collect heartbeats, and write out a file so that other modules can load balance traffic as needed. [Paul Querna] *) mod_heartbeat: New module to generate multicast heartbeats to know if a server is online. [Paul Querna] *) mod_buffer: Honour the flush bucket and flush the buffer in the input filter. Make sure that metadata buckets are written to the buffer, not to the final brigade. [Graham Leggett] *) mod_buffer: Optimise the buffering of heap buckets when the heap buckets stay exactly APR_BUCKET_BUFF_SIZE long. [Graham Leggett, Ruediger Pluem] *) mod_buffer: Optional support for buffering of the input and output filter stacks. Can collapse many small buckets into fewer larger buckets, and prevents excessively small chunks being sent over the wire. [Graham Leggett] *) mod_privileges: new module to make httpd on Solaris privileges-aware and to enable different virtualhosts to run with different privileges and Unix user/group IDs [Nick Kew] *) mod_mem_cache: this module has been removed. [William Rowe] *) authn/z: Remove mod_authn_default and mod_authz_default. [Chris Darroch] *) authz: Fix handling of authz configurations, make default authz logic replicate 2.2.x authz logic, and replace , Reject, and AuthzMergeRules directives with Match, , and AuthzMerge directives. [Chris Darroch] *) mod_authn_core: Prevent crash when provider alias created to provider which is not yet registered. [Chris Darroch] *) mod_authn_core: Add AuthType of None to support disabling authentication. [Chris Darroch] *) core: Allow and directives to nest, and constrain their use to conform with that of other access control and authorization directives. [Chris Darroch] *) unixd: turn existing code into a module, and turn the set user/group and chroot into a child_init function. [Nick Kew] *) mod_dir: Support "DirectoryIndex disabled" Suggested By André Warnier [Eric Covener] *) mod_ssl: Send Content-Type application/ocsp-request for POST requests to OSCP responders. PR 46014 [Dr Stephen Henson ] *) mod_authnz_ldap: don't return NULL-valued environment variables to other modules. PR 39045 [Francois Pesce ] *) Don't adjust case in pathname components that are not of interest to mod_mime. Fixes mod_negotiation's use of such components. PR 43250 [Basant Kumar Kukreja ] *) Be tolerant in what you accept - accept slightly broken status lines from a backend provided they include a valid status code. PR 44995 [Rainer Jung ] *) New module mod_sed: filter Request/Response bodies through sed [Basant Kumar Kukreja ] *) mod_auth_form: Make sure that basic authentication is correctly faked directly after login. [Graham Leggett] *) mod_session_cookie, mod_session_dbd: Make sure cookies are set both within the output headers and error output headers, so that the session is maintained across redirects. [Graham Leggett] *) mod_auth_form: Make sure the logged in user is populated correctly after a form login. Fixes a missing REMOTE_USER variable directly following a login. [Graham Leggett] *) mod_session_cookie: Make sure that cookie attributes are correctly included in the blank cookie when cookies are removed. This fixes an inability to log out when using mod_auth_form. [Graham Leggett] *) mod_session: Prevent a segfault when a CGI script sets a cookie with a null value. [David Shane Holden ] *) core, authn/z: Determine registered authn/z providers directly in ap_setup_auth_internal(), which allows optional functions that just wrapped ap_list_provider_names() to be removed from authn/z modules. [Chris Darroch] *) authn/z: Convert common provider version strings to macros. [Chris Darroch] *) core: When testing for slash-terminated configuration paths in ap_location_walk(), don't look past the start of an empty string such as that created by a directive. [Chris Darroch] *) core, mod_proxy: If a kept_body is present, it becomes safe for subrequests to support message bodies. Make sure that safety checks within the core and within the proxy are not triggered when kept_body is present. This makes it possible to embed proxied POST requests within mod_include. [Graham Leggett] *) mod_auth_form: Make sure the input filter stack is properly set up before reading the login form. Make sure the kept body filter is correctly inserted to ensure the body can be read a second time safely should the authn be successful. [Graham Leggett, Ruediger Pluem] *) mod_request: Insert the KEPT_BODY filter via the insert_filter hook instead of during fixups. Add a safety check to ensure the filters cannot be inserted more than once. [Graham Leggett, Ruediger Pluem] *) ap_cache_cacheable_headers_out() will (now) always merge an error headers _before_ clearing them and _before_ merging in the actual entity headers and doing normal hop-by-hop cleansing. [Dirk-Willem van Gulik]. *) cache: retire ap_cache_cacheable_hdrs_out() which was used for both in- and out-put headers; and replace it by a single ap_cache_cacheable_headers() wrapped in a in- and out-put specific ap_cache_cacheable_headers_in()/out(). The latter which will also merge error and ensure content-type. To keep cache modules consistent with ease. This API change bumps up the minor MM by one [Dirk-Willem van Gulik]. *) Move the KeptBodySize directive, kept_body filters and the ap_parse_request_body function out of the http module and into a new module called mod_request, reducing the size of the core. [Graham Leggett] *) mod_dbd: Handle integer configuration directive parameters with a dedicated function. *) Change the directives within the mod_session* modules to be valid both inside and outside the location/directory sections, as suggested by wrowe. [Graham Leggett] *) mod_auth_form: Add a module capable of allowing end users to log in using an HTML form, storing the credentials within mod_session. [Graham Leggett] *) Add a function to the http filters that is able to parse an HTML form request with the type of application/x-www-form-urlencoded. [Graham Leggett] *) mod_session_crypto: Initialise SSL in the post config hook. [Ruediger Pluem, Graham Leggett] *) mod_session_dbd: Add a session implementation capable of storing session information in a SQL database via the dbd interface. Useful for sites where session privacy is important. [Graham Leggett] *) mod_session_crypto: Add a session encoding implementation capable of encrypting and decrypting sessions wherever they may be stored. Introduces a level of privacy when sessions are stored on the browser. [Graham Leggett] *) mod_session_cookie: Add a session implementation capable of storing session information within cookies on the browser. Useful for high volume sites where server bound sessions are too resource intensive. [Graham Leggett] *) mod_session: Add a generic session interface to unify the different attempts at saving persistent sessions across requests. [Graham Leggett] *) core, authn/z: Avoid calling access control hooks for internal requests with configurations which match those of initial request. Revert to original behaviour (call access control hooks for internal requests with URIs different from initial request) if any access control hooks or providers are not registered as permitting this optimization. Introduce wrappers for access control hook and provider registration which can accept additional mode and flag data. [Chris Darroch] *) Introduced ap_expr API for expression evaluation. This is adapted from mod_include, which is the first module to use the new API. [Nick Kew] *) mod_authz_dbd: When redirecting after successful login/logout per AuthzDBDRedirectQuery, do not report authorization failure, and use first row returned by database query instead of last row. [Chris Darroch] *) mod_ldap: Correctly return all requested attribute values when some attributes have a null value. PR 44560 [Anders Kaseorg ] *) core: check symlink ownership if both FollowSymlinks and SymlinksIfOwnerMatch are set [Nick Kew] *) core: fix origin checking in SymlinksIfOwnerMatch PR 36783 [Robert L Mathews ] *) Activate mod_cache, mod_file_cache and mod_disk_cache as part of the 'most' set for '--enable-modules' and '--enable-shared-mods'. Include mod_mem_cache in 'all' as well. [Dirk-Willem van Gulik] *) Also install mod_so.h, mod_rewrite.h and mod_cache.h; as these contain public function declarations which are useful for third party module authors. PR 42431 [Dirk-Willem van Gulik]. *) mod_dir, mod_negotiation: pass the output filter information to newly created sub requests; as these are later on used as true requests with an internal redirect. This allows for mod_cache et.al. to trap the results of the redirect. [Dirk-Willem van Gulik, Ruediger Pluem] *) mod_ldap: Add support (taking advantage of the new APR capability) for ldap rebind callback while chasing referrals. This allows direct searches on LDAP servers (in particular MS Active Directory 2003+) using referrals without the use of the global catalog. PRs 26538, 40268, and 42557 [Paul J. Reder] *) ApacheMonitor.exe: Introduce --kill argument for use by the installer. This will permit the installation tool to remove all running instances before attempting to remove the .exe. [William Rowe] *) mod_ssl: Add support for OCSP validation of client certificates. PR 41123. [Marc Stern , Joe Orton] *) mod_serf: New module for Reverse Proxying. [Paul Querna] *) core: Add the option to keep aside a request body up to a certain size that would otherwise be discarded, to be consumed by filters such as mod_include. When enabled for a directory, POST requests to shtml files can be passed through to embedded scripts as POST requests, rather being downgraded to GET requests. [Graham Leggett] *) mod_ssl: Fix TLS upgrade (RFC 2817) support. PR 41231. [Joe Orton] *) scoreboard: Correctly declare ap_time_process_request. PR 43789 [Tom Donovan ] *) core; scoreboard: ap_get_scoreboard_worker(sbh) now takes the sbh member from the connection rec, ap_get_scoreboard_worker(proc, thread) will now provide the unusual legacy lookup. [William Rowe] *) mpm winnt: fix null pointer dereference PR 42572 [Davi Arnaut] *) mod_authnz_ldap, mod_authn_dbd: Tidy up the code to expose authn parameters to the environment. Improve portability to EBCDIC machines by using apr_toupper(). [Martin Kraemer] *) mod_ldap, mod_authnz_ldap: Add support for nested groups (i.e. the ability to authorize an authenticated user via a "require ldap-group X" directive where the user is not in group X, but is in a subgroup contained in X. PR 42891 [Paul J. Reder] *) mod_ssl: Add support for caching SSL Sessions in memcached. [Paul Querna] *) apxs: Enhance -q flag to print all known variables and their values when invoked without variable name(s). [William Rowe, Sander Temme] *) apxs: Eliminate run-time check for mod_so. PR 40653. [David M. Lee ] *) beos MPM: Create pmain pool and run modules' child_init hooks when entering ap_mpm_run(), then destroy pmain when exiting ap_mpm_run(). [Chris Darroch] *) netware MPM: Destroy pmain pool when exiting ap_mpm_run() so that cleanups registered in modules' child_init hooks are performed. [Chris Darroch] *) Fix issue which could cause error messages to be written to access logs on Win32. PR 40476. [Tom Donovan ] *) The LockFile directive, which specifies the location of the accept() mutex lockfile, is deprecated. Instead, the AcceptMutex directive now takes an optional lockfile location parameter, ala SSLMutex. [Jim Jagielski] *) mod_authn_dbd: Export any additional columns queried in the SQL select into the environment with the name AUTHENTICATE_. This brings mod_authn_dbd behaviour in line with mod_authnz_ldap. [Graham Leggett] *) mod_dbd: Key the storage of prepared statements on the hex string value of server_rec, rather than the server name, as the server name may change (eg when the server name is set) at any time, causing weird behaviour in modules dependent on mod_dbd. [Graham Leggett] *) mod_proxy_fcgi: Added win32 build. [Mladen Turk] *) sendfile_nonblocking() takes the _brigade_ as an argument, gets the first bucket from the brigade, finds it not to be a FILE bucket and barfs. The fix is to pass a bucket rather than a brigade. [Niklas Edmundsson ] *) mod_rewrite: support rewritemap by SQL query [Nick Kew] *) ap_get_server_version() has been removed. Third-party modules must now use ap_get_server_banner() or ap_get_server_description(). [Jeff Trawick] *) All MPMs: Introduce a check_config phase between pre_config and open_logs, to allow modules to review interdependent configuration directive values and adjust them while messages can still be logged to the console. Handle relevant MPM directives during this phase and format messages for both the console and the error log, as appropriate. [Chris Darroch] *) core: Do not allow internal redirects like the DirectoryIndex of mod_dir to circumvent the symbolic link checks imposed by FollowSymLinks and SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem, William Rowe] *) New SSLLogLevelDebugDump [ None (default) | IO (not bytes) | Bytes ] configures the I/O Dump of SSL traffic, when LogLevel is set to Debug. The default is none as this is far greater debugging resolution than the typical administrator is prepared to untangle. [William Rowe] *) mod_disk_cache: If possible, check if the size of an object to cache is within the configured boundaries before actually saving data. [Niklas Edmundsson ] *) Worker and event MPMs: Remove improper scoreboard updates which were performed in the event of a fork() failure. [Chris Darroch] *) Add support for fcgi:// proxies to mod_rewrite. [Markus Schiegl ] *) Remove incorrect comments from scoreboard.h regarding conditional loading of worker_score structure with mod_status, and remove unused definitions relating to old life_status field. [Chris Darroch ] *) Remove allocation of memory for unused array of lb_score pointers in ap_init_scoreboard(). [Chris Darroch ] *) Add mod_proxy_fcgi, a FastCGI back end for mod_proxy. [Garrett Rooney, Jim Jagielski, Paul Querna] *) Event MPM: Fill in the scoreboard's tid field. PR 38736. [Chris Darroch ] *) mod_charset_lite: Remove Content-Length when output filter can invalidate it. Warn when input filter can invalidate it. [Jeff Trawick] *) Authz: Add the new module mod_authn_core that will provide common authn directives such as 'AuthType', 'AuthName'. Move the directives 'AuthType' and 'AuthName' out of the core module and merge mod_authz_alias into mod_authn_core. [Brad Nicholes] *) Authz: Move the directives 'Order', 'Allow', 'Deny' and 'Satisfy' into the new module mod_access_compat which can be loaded to provide support for these directives. [Brad Nicholes] *) Authz: Move the 'Require' directive from the core module as well as add the directives '', '', '' and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR' logic into the authorization processing. [Brad Nicholes] *) Authz: Add the new module mod_authz_core which acts as the authorization provider vector and contains common authz directives. [Brad Nicholes] *) Authz: Renamed mod_authz_dbm authz providers from 'group' and 'file-group' to 'dbm-group' and 'dbm-file-group'. [Brad Nicholes] *) Authz: Added the new authz providers 'env', 'ip', 'host', 'all' to handle host-based access control provided by mod_authz_host and invoked through the 'Require' directive. [Brad Nicholes] *) Authz: Convert all of the authz modules from hook based to provider based. [Brad Nicholes] *) mod_cache: Add CacheMinExpire directive to set the minimum time in seconds to cache a document. [Brian Akins , Ruediger Pluem] *) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew] *) Fix typo in ProxyStatus syntax error message. [Christophe Jaillet ] *) Asynchronous write completion for the Event MPM. [Brian Pane] *) Added an End-Of-Request bucket type. The logging of a request and the freeing of its pool are now done when the EOR bucket is destroyed. This has the effect of delaying the logging until right after the last of the response is sent; ap_core_output_filter() calls the access logger indirectly when it destroys the EOR bucket. [Brian Pane] *) Rewrite of logresolve support utility: IPv6 addresses are now supported and the format of statistical output has changed. [Colm MacCarthaigh] *) Rewrite of ap_coreoutput_filter to do nonblocking writes [Brian Pane] *) Added new connection states for handler and write completion [Brian Pane] *) mod_cgid: Refuse to work on Solaris 10 due to OS bugs. PR 34264. [Justin Erenkrantz] *) Teach mod_ssl to use arbitrary OIDs in an SSLRequire directive, allowing string-valued client certificate attributes to be used for access control, as in: SSLRequire "value" in OID("1.3.6.1.4.1.18060.1") [Martin Kraemer, David Reid] [Apache 2.3.0-dev includes those bug fixes and changes with the Apache 2.2.xx tree as documented, and except as noted, below.] Changes with Apache 2.2.x and later: *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup Changes with Apache 2.0.x and later: *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup httpd-2.4.41/VERSIONING0000644000000000000500000001776710571333746012675 0ustar rootsrcAPACHE 2.x VERSIONING ===================== [$LastChangedDate: 2007-02-28 17:12:06 +0000 (Wed, 28 Feb 2007) $] INTRODUCTION ------------ The Apache HTTP Server project must balance two competing and disjoint objectives: maintain stable code for third party authors, distributors and most importantly users so that bug and security fixes can be quickly adopted without significant hardship due to user-visible changes; and continue the development process that requires ongoing redesign to correct earlier oversights and to add additional features. The Apache HTTP Server, through version 2.0, used the Module Magic Number (MMN) to reflect API changes. This had the shortcoming of often leaving users hunting to replace binary third party modules that were now incompatible. This also left module authors searching through the API change histories to determine the exact cause for the MMN change and whether their module was affected. With the simultaneous release of Apache 2.2-stable and Apache 2.3-development, the Apache HTTP Server project is moving towards a more predictable stable release cycle, while allowing forward progress to occur without concern for breaking the stable branch. This document explains the rationale between the two versions and their behavior. STABLE RELEASES, 2.{even}.{revision} ------------------------------------ All even numbered releases will be considered stable revisions. Stable revisions will retain forward compatiblity to the maximum possible extent. Features may be added during minor revisions, and features may be deprecated by making appropriate notations in the documentation, but no features may be removed. In essence, that implies that you can upgrade from one minor revision to the next with a minimum of trouble. In particular, this means: * The Module API will retain forward compatibility. It will not be necessary to update modules to work with new revisions of the stable tree. * The run-time configuration will be forward compatible. No configuration changes will be necessary to work with new revisions of the stable tree. * Compile-time configuration will be forward compatible. The configure command line options that work in one release of the stable tree will also work in the next release. As always, it will be necessary to test any new release to assure that it works correctly with a particular configuration and a particular set of modules, but every effort will be made to assure that upgrades are as smooth as possible. In addition, the following development restrictions will aid in keeping the stable tree as safe as possible: * No 'Experimental' modules; while it may be possible (based on API changes required to support a given module) to load a 2.3-development module into a 2.2-stable build of Apache, there are no guarantees. Experimental modules will be introduced to the 2.3-development versions and either added to 2.2-stable once they are proven and compatible, or deferred to the 2.4-stable release if they cannot be incorporated in the current stable release due to API change requirements. * The stable subversion tree should not remain unstable at any time. Atomic commits ought be used to introduce code from the development version to the stable tree. At any given time a security release may be in preparation, unbeknownst to other contributors. At any given time, testers may be checking out SVN trunk to confirm that a bug has been corrected. And as all code was well-tested in development prior to committing to the stable tree, there is really no reason for this tree to be broken for more than a few minutes during a lengthy commit. In order to avoid 'skipped' release numbers in the stable releases, the Release Manager will generally roll a release candidate (APACHE_#_#_#_RC#) tag. Release Candidate tarballs will be announced to the stable-testers@httpd.apache.org for the stable tree. Then, the participants will vote on the quality of the proposed release tarball. The final APACHE_#_#_# tag will not exist until the APACHE_#_#_#_RC# candidate has passed the usual votes to release that version. Only then is the final tarball packaged, removing all -rc# designations from the version number, and tagging the tree with the release number. DEVELOPMENT RELEASES, 2.{odd}.{revision} ----------------------------------------- All odd numbered releases designate the 'next' possible stable release, therefore the current development version will always be one greater than the current stable release. Work proceeds on development releases, permitting the modification of the MMN at any time in order to correct deficiencies or shortcomings in the API. This means that modules from one development release to another may not be binary compatible, or may not successfully compile without modification to accomodate the API changes. The only 'supported' development release at any time will be the most recently released version. Developers will not be answering bug reports of older development releases once a new release is available. It becomes the resposibility of the reporter to use the latest development version to confirm that any issue still exists. Any new code, new API features or new ('experimental') modules may be promoted at any time to the next stable release, by a vote of the project contributors. This vote is based on the technical stability of the new code and the stability of the interface. Once moved to stable, that feature cannot change for the remainder of that stable release cycle, so the vote must reflect that the final decisions on the behavior and naming of that new feature were reached. Vetos continue to apply to this choice of introducing the new work to the stable version. At any given time, when the quality of changes to the development branch is considered release quality, that version may become a candidate for the next stable release. This includes some or all of the API changes, promoting experimental modules to stable or deprecating and eliminating older modules from the last stable release. All of these choices are considered by the project as a group in the interests of promoting the stable release, so that any given change may be 'deferred' for a future release by the group, rather than introduce unacceptable risks to adopting the next stable release. Third party module authors are strongly encouraged to test with the latest development version. This assures that the module will be ready for the next stable release, but more importantly, the author can react to shortcomings in the API early enough to warn the dev@httpd.apache.org community of the shortcomings so that they can be addressed before the stable release. The entire burden is on the module author to anticipate the needs of their module before the stable release is created. Once a new stable release cycle has begun, that API will be present for the lifetime of the stable release. Any desired changes in the stable versions must wait for inclusion into the next release cycle. When deciding to promote a development tree to being stable, a determination should be made whether the changes since the last stable version warrant a major version bump. That is, if 2.2 is the current stable version and 2.3 is 'ready' to become stable, the group needs to decide if the next stable version is 2.4 or 3.0. One suggested rule of thumb is that if it requires too much effort to port a module from 2.2 to 2.4, then the stable version should be labeled 3.0. In order to ease the burden of creating development releases, the process for packaging a development releases is less formal than for the stable release. This strategy reflects the fact that while in development, versions are cheap. Development releases may be classified as alpha, beta, or GA to reflect the group's perceived stability of the tree. Development releases may be made at any time by any committer. Please read the following link for a more detailed description of the development release strategy: http://httpd.apache.org/dev/release.html httpd-2.4.41/httpd.spec0000644000000000000500000004164113523273356013252 0ustar rootsrc%define contentdir /var/www %define suexec_caller apache %define mmn 20120211 Summary: Apache HTTP Server Name: httpd Version: 2.4.41 Release: 1 URL: http://httpd.apache.org/ Vendor: Apache Software Foundation Source0: http://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2 License: Apache License, Version 2.0 Group: System Environment/Daemons BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root BuildRequires: autoconf, perl, pkgconfig, findutils BuildRequires: zlib-devel, libselinux-devel, libuuid-devel BuildRequires: apr-devel >= 1.4.0, apr-util-devel >= 1.4.0, pcre-devel >= 5.0 Requires: initscripts >= 8.36, /etc/mime.types Obsoletes: httpd-suexec Requires(pre): /usr/sbin/useradd Requires(post): chkconfig Provides: webserver Provides: mod_dav = %{version}-%{release}, httpd-suexec = %{version}-%{release} Provides: httpd-mmn = %{mmn} %description Apache is a powerful, full-featured, efficient, and freely-available Web server. Apache is also the most popular Web server on the Internet. %package devel Group: Development/Libraries Summary: Development tools for the Apache HTTP server. Obsoletes: secureweb-devel, apache-devel Requires: apr-devel, apr-util-devel, pkgconfig, libtool Requires: httpd = %{version}-%{release} %description devel The httpd-devel package contains the APXS binary and other files that you need to build Dynamic Shared Objects (DSOs) for the Apache HTTP Server. If you are installing the Apache HTTP server and you want to be able to compile or develop additional modules for Apache, you need to install this package. %package manual Group: Documentation Summary: Documentation for the Apache HTTP server. Requires: httpd = :%{version}-%{release} Obsoletes: secureweb-manual, apache-manual %description manual The httpd-manual package contains the complete manual and reference guide for the Apache HTTP server. The information can also be found at http://httpd.apache.org/docs/. %package tools Group: System Environment/Daemons Summary: Tools for use with the Apache HTTP Server %description tools The httpd-tools package contains tools which can be used with the Apache HTTP Server. %package -n mod_authnz_ldap Group: System Environment/Daemons Summary: LDAP modules for the Apache HTTP server BuildRequires: openldap-devel Requires: httpd = %{version}-%{release}, httpd-mmn = %{mmn}, apr-util-ldap %description -n mod_authnz_ldap The mod_authnz_ldap module for the Apache HTTP server provides authentication and authorization against an LDAP server, while mod_ldap provides an LDAP cache. %package -n mod_lua Group: System Environment/Daemons Summary: Lua language module for the Apache HTTP server BuildRequires: lua-devel Requires: httpd = %{version}-%{release}, httpd-mmn = %{mmn} %description -n mod_lua The mod_lua module for the Apache HTTP server allows the server to be extended with scripts written in the Lua programming language. %package -n mod_proxy_html Group: System Environment/Daemons Summary: Proxy HTML filter modules for the Apache HTTP server Epoch: 1 BuildRequires: libxml2-devel Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmn} %description -n mod_proxy_html The mod_proxy_html module for the Apache HTTP server provides a filter to rewrite HTML links within web content when used within a reverse proxy environment. The mod_xml2enc module provides enhanced charset/internationalisation support for mod_proxy_html. %package -n mod_ssl Group: System Environment/Daemons Summary: SSL/TLS module for the Apache HTTP server Epoch: 1 BuildRequires: openssl-devel Requires(post): openssl, /bin/cat Requires(pre): httpd Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmn} %description -n mod_ssl The mod_ssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. %prep %setup -q # Safety check: prevent build if defined MMN does not equal upstream MMN. vmmn=`echo MODULE_MAGIC_NUMBER_MAJOR | cpp -include include/ap_mmn.h | sed -n ' /^2/p'` if test "x${vmmn}" != "x%{mmn}"; then : Error: Upstream MMN is now ${vmmn}, packaged MMN is %{mmn}. : Update the mmn macro and rebuild. exit 1 fi %build # forcibly prevent use of bundled apr, apr-util, pcre rm -rf srclib/{apr,apr-util,pcre} %configure \ --enable-layout=RPM \ --libdir=%{_libdir} \ --sysconfdir=%{_sysconfdir}/httpd/conf \ --includedir=%{_includedir}/httpd \ --libexecdir=%{_libdir}/httpd/modules \ --datadir=%{contentdir} \ --with-installbuilddir=%{_libdir}/httpd/build \ --enable-mpms-shared=all \ --with-apr=%{_prefix} --with-apr-util=%{_prefix} \ --enable-suexec --with-suexec \ --with-suexec-caller=%{suexec_caller} \ --with-suexec-docroot=%{contentdir} \ --with-suexec-logfile=%{_localstatedir}/log/httpd/suexec.log \ --with-suexec-bin=%{_sbindir}/suexec \ --with-suexec-uidmin=500 --with-suexec-gidmin=100 \ --enable-pie \ --with-pcre \ --enable-mods-shared=all \ --enable-ssl --with-ssl --enable-bucketeer \ --enable-case-filter --enable-case-filter-in \ --disable-imagemap make %{?_smp_mflags} %install rm -rf $RPM_BUILD_ROOT make DESTDIR=$RPM_BUILD_ROOT install # for holding mod_dav lock database mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/lib/dav # create a prototype session cache mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/cache/mod_ssl touch $RPM_BUILD_ROOT%{_localstatedir}/cache/mod_ssl/scache.{dir,pag,sem} # Make the MMN accessible to module packages echo %{mmn} > $RPM_BUILD_ROOT%{_includedir}/httpd/.mmn # Set up /var directories mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/log/httpd mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/cache/httpd/cache-root # symlinks for /etc/httpd ln -s ../..%{_localstatedir}/log/httpd $RPM_BUILD_ROOT/etc/httpd/logs ln -s ../..%{_localstatedir}/run $RPM_BUILD_ROOT/etc/httpd/run ln -s ../..%{_libdir}/httpd/modules $RPM_BUILD_ROOT/etc/httpd/modules mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d # install SYSV init stuff mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d install -m755 ./build/rpm/httpd.init \ $RPM_BUILD_ROOT/etc/rc.d/init.d/httpd install -m755 ./build/rpm/htcacheclean.init \ $RPM_BUILD_ROOT/etc/rc.d/init.d/htcacheclean # install log rotation stuff mkdir -p $RPM_BUILD_ROOT/etc/logrotate.d install -m644 ./build/rpm/httpd.logrotate \ $RPM_BUILD_ROOT/etc/logrotate.d/httpd # Remove unpackaged files rm -rf $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.exp \ $RPM_BUILD_ROOT%{contentdir}/cgi-bin/* # Make suexec a+rw so it can be stripped. %%files lists real permissions chmod 755 $RPM_BUILD_ROOT%{_sbindir}/suexec %pre # Add the "apache" user /usr/sbin/useradd -c "Apache" -u 48 \ -s /sbin/nologin -r -d %{contentdir} apache 2> /dev/null || : %post # Register the httpd service /sbin/chkconfig --add httpd /sbin/chkconfig --add htcacheclean %preun if [ $1 = 0 ]; then /sbin/service httpd stop > /dev/null 2>&1 /sbin/service htcacheclean stop > /dev/null 2>&1 /sbin/chkconfig --del httpd /sbin/chkconfig --del htcacheclean fi %post -n mod_ssl umask 077 if [ ! -f %{_sysconfdir}/httpd/conf/server.key ] ; then %{_bindir}/openssl genrsa -rand /proc/apm:/proc/cpuinfo:/proc/dma:/proc/filesystems:/proc/interrupts:/proc/ioports:/proc/pci:/proc/rtc:/proc/uptime 1024 > %{_sysconfdir}/httpd/conf/server.key 2> /dev/null fi FQDN=`hostname` if [ "x${FQDN}" = "x" ]; then FQDN=localhost.localdomain fi if [ ! -f %{_sysconfdir}/httpd/conf/server.crt ] ; then cat << EOF | %{_bindir}/openssl req -new -key %{_sysconfdir}/httpd/conf/server.key -x509 -days 365 -out %{_sysconfdir}/httpd/conf/server.crt 2>/dev/null -- SomeState SomeCity SomeOrganization SomeOrganizationalUnit ${FQDN} root@${FQDN} EOF fi %check # Check the built modules are all PIC if readelf -d $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.so | grep TEXTREL; then : modules contain non-relocatable code exit 1 fi %clean rm -rf $RPM_BUILD_ROOT %files %defattr(-,root,root) %doc ABOUT_APACHE README CHANGES LICENSE NOTICE %dir %{_sysconfdir}/httpd %{_sysconfdir}/httpd/modules %{_sysconfdir}/httpd/logs %{_sysconfdir}/httpd/run %dir %{_sysconfdir}/httpd/conf %dir %{_sysconfdir}/httpd/conf.d %config(noreplace) %{_sysconfdir}/httpd/conf/httpd.conf %config(noreplace) %{_sysconfdir}/httpd/conf/magic %config(noreplace) %{_sysconfdir}/httpd/conf/mime.types %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-autoindex.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-dav.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-default.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-info.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-languages.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-manual.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-mpm.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-multilang-errordoc.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-userdir.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-vhosts.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/proxy-html.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-autoindex.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-dav.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-default.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-info.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-languages.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-manual.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-mpm.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-multilang-errordoc.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-userdir.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-vhosts.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/proxy-html.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/httpd.conf %config %{_sysconfdir}/logrotate.d/httpd %config %{_sysconfdir}/rc.d/init.d/httpd %config %{_sysconfdir}/rc.d/init.d/htcacheclean %{_sbindir}/fcgistarter %{_sbindir}/htcacheclean %{_sbindir}/httpd %{_sbindir}/apachectl %attr(4510,root,%{suexec_caller}) %{_sbindir}/suexec %dir %{_libdir}/httpd %dir %{_libdir}/httpd/modules %{_libdir}/httpd/modules/mod_access_compat.so %{_libdir}/httpd/modules/mod_actions.so %{_libdir}/httpd/modules/mod_alias.so %{_libdir}/httpd/modules/mod_allowmethods.so %{_libdir}/httpd/modules/mod_asis.so %{_libdir}/httpd/modules/mod_auth_basic.so %{_libdir}/httpd/modules/mod_auth_digest.so %{_libdir}/httpd/modules/mod_auth_form.so %{_libdir}/httpd/modules/mod_authn_anon.so %{_libdir}/httpd/modules/mod_authn_core.so %{_libdir}/httpd/modules/mod_authn_dbd.so %{_libdir}/httpd/modules/mod_authn_dbm.so %{_libdir}/httpd/modules/mod_authn_file.so %{_libdir}/httpd/modules/mod_authn_socache.so %{_libdir}/httpd/modules/mod_authz_core.so %{_libdir}/httpd/modules/mod_authz_dbd.so %{_libdir}/httpd/modules/mod_authz_dbm.so %{_libdir}/httpd/modules/mod_authz_groupfile.so %{_libdir}/httpd/modules/mod_authz_host.so %{_libdir}/httpd/modules/mod_authz_owner.so %{_libdir}/httpd/modules/mod_authz_user.so %{_libdir}/httpd/modules/mod_autoindex.so %{_libdir}/httpd/modules/mod_bucketeer.so %{_libdir}/httpd/modules/mod_buffer.so %{_libdir}/httpd/modules/mod_cache_disk.so %{_libdir}/httpd/modules/mod_cache_socache.so %{_libdir}/httpd/modules/mod_cache.so %{_libdir}/httpd/modules/mod_case_filter.so %{_libdir}/httpd/modules/mod_case_filter_in.so %{_libdir}/httpd/modules/mod_cgid.so %{_libdir}/httpd/modules/mod_charset_lite.so %{_libdir}/httpd/modules/mod_data.so %{_libdir}/httpd/modules/mod_dav_fs.so %{_libdir}/httpd/modules/mod_dav_lock.so %{_libdir}/httpd/modules/mod_dav.so %{_libdir}/httpd/modules/mod_dbd.so %{_libdir}/httpd/modules/mod_deflate.so %{_libdir}/httpd/modules/mod_dialup.so %{_libdir}/httpd/modules/mod_dir.so %{_libdir}/httpd/modules/mod_dumpio.so %{_libdir}/httpd/modules/mod_echo.so %{_libdir}/httpd/modules/mod_env.so %{_libdir}/httpd/modules/mod_expires.so %{_libdir}/httpd/modules/mod_ext_filter.so %{_libdir}/httpd/modules/mod_file_cache.so %{_libdir}/httpd/modules/mod_filter.so %{_libdir}/httpd/modules/mod_headers.so %{_libdir}/httpd/modules/mod_heartbeat.so %{_libdir}/httpd/modules/mod_heartmonitor.so %{_libdir}/httpd/modules/mod_include.so %{_libdir}/httpd/modules/mod_info.so %{_libdir}/httpd/modules/mod_lbmethod_bybusyness.so %{_libdir}/httpd/modules/mod_lbmethod_byrequests.so %{_libdir}/httpd/modules/mod_lbmethod_bytraffic.so %{_libdir}/httpd/modules/mod_lbmethod_heartbeat.so %{_libdir}/httpd/modules/mod_log_config.so %{_libdir}/httpd/modules/mod_log_debug.so %{_libdir}/httpd/modules/mod_log_forensic.so %{_libdir}/httpd/modules/mod_logio.so %{_libdir}/httpd/modules/mod_macro.so %{_libdir}/httpd/modules/mod_mime_magic.so %{_libdir}/httpd/modules/mod_mime.so %{_libdir}/httpd/modules/mod_mpm_event.so %{_libdir}/httpd/modules/mod_mpm_prefork.so %{_libdir}/httpd/modules/mod_mpm_worker.so %{_libdir}/httpd/modules/mod_negotiation.so %{_libdir}/httpd/modules/mod_proxy_ajp.so %{_libdir}/httpd/modules/mod_proxy_balancer.so %{_libdir}/httpd/modules/mod_proxy_connect.so %{_libdir}/httpd/modules/mod_proxy_express.so %{_libdir}/httpd/modules/mod_proxy_fcgi.so %{_libdir}/httpd/modules/mod_proxy_fdpass.so %{_libdir}/httpd/modules/mod_proxy_ftp.so %{_libdir}/httpd/modules/mod_proxy_http.so %{_libdir}/httpd/modules/mod_proxy_scgi.so %{_libdir}/httpd/modules/mod_proxy_uwsgi.so %{_libdir}/httpd/modules/mod_proxy_wstunnel.so %{_libdir}/httpd/modules/mod_proxy_hcheck.so %{_libdir}/httpd/modules/mod_proxy.so %{_libdir}/httpd/modules/mod_ratelimit.so %{_libdir}/httpd/modules/mod_reflector.so %{_libdir}/httpd/modules/mod_remoteip.so %{_libdir}/httpd/modules/mod_reqtimeout.so %{_libdir}/httpd/modules/mod_request.so %{_libdir}/httpd/modules/mod_rewrite.so %{_libdir}/httpd/modules/mod_sed.so %{_libdir}/httpd/modules/mod_session_cookie.so %{_libdir}/httpd/modules/mod_session_crypto.so %{_libdir}/httpd/modules/mod_session_dbd.so %{_libdir}/httpd/modules/mod_session.so %{_libdir}/httpd/modules/mod_setenvif.so %{_libdir}/httpd/modules/mod_slotmem_plain.so %{_libdir}/httpd/modules/mod_slotmem_shm.so %{_libdir}/httpd/modules/mod_socache_dbm.so %{_libdir}/httpd/modules/mod_socache_memcache.so %{_libdir}/httpd/modules/mod_socache_redis.so %{_libdir}/httpd/modules/mod_socache_shmcb.so %{_libdir}/httpd/modules/mod_speling.so %{_libdir}/httpd/modules/mod_status.so %{_libdir}/httpd/modules/mod_substitute.so %{_libdir}/httpd/modules/mod_suexec.so %{_libdir}/httpd/modules/mod_unique_id.so %{_libdir}/httpd/modules/mod_unixd.so %{_libdir}/httpd/modules/mod_userdir.so %{_libdir}/httpd/modules/mod_usertrack.so %{_libdir}/httpd/modules/mod_version.so %{_libdir}/httpd/modules/mod_vhost_alias.so %{_libdir}/httpd/modules/mod_watchdog.so %dir %{contentdir} %dir %{contentdir}/cgi-bin %dir %{contentdir}/html %dir %{contentdir}/icons %dir %{contentdir}/error %dir %{contentdir}/error/include %{contentdir}/icons/* %{contentdir}/error/README %{contentdir}/html/index.html %config(noreplace) %{contentdir}/error/*.var %config(noreplace) %{contentdir}/error/include/*.html %attr(0700,root,root) %dir %{_localstatedir}/log/httpd %attr(0700,apache,apache) %dir %{_localstatedir}/lib/dav %attr(0700,apache,apache) %dir %{_localstatedir}/cache/httpd/cache-root %{_mandir}/man1/* %{_mandir}/man8/suexec* %{_mandir}/man8/apachectl.8* %{_mandir}/man8/httpd.8* %{_mandir}/man8/htcacheclean.8* %{_mandir}/man8/fcgistarter.8* %files manual %defattr(-,root,root) %{contentdir}/manual %{contentdir}/error/README %files tools %defattr(-,root,root) %{_bindir}/ab %{_bindir}/htdbm %{_bindir}/htdigest %{_bindir}/htpasswd %{_bindir}/logresolve %{_bindir}/httxt2dbm %{_sbindir}/rotatelogs %{_mandir}/man1/htdbm.1* %{_mandir}/man1/htdigest.1* %{_mandir}/man1/htpasswd.1* %{_mandir}/man1/httxt2dbm.1* %{_mandir}/man1/ab.1* %{_mandir}/man1/logresolve.1* %{_mandir}/man8/rotatelogs.8* %doc LICENSE NOTICE %files -n mod_authnz_ldap %defattr(-,root,root) %{_libdir}/httpd/modules/mod_ldap.so %{_libdir}/httpd/modules/mod_authnz_ldap.so %files -n mod_lua %defattr(-,root,root) %{_libdir}/httpd/modules/mod_lua.so %files -n mod_proxy_html %defattr(-,root,root) %{_libdir}/httpd/modules/mod_proxy_html.so %{_libdir}/httpd/modules/mod_xml2enc.so %files -n mod_ssl %defattr(-,root,root) %{_libdir}/httpd/modules/mod_ssl.so %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-ssl.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-ssl.conf %attr(0700,apache,root) %dir %{_localstatedir}/cache/mod_ssl %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.dir %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.pag %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.sem %files devel %defattr(-,root,root) %{_includedir}/httpd %{_bindir}/apxs %{_sbindir}/checkgid %{_bindir}/dbmmanage %{_sbindir}/envvars* %{_mandir}/man1/dbmmanage.1* %{_mandir}/man1/apxs.1* %dir %{_libdir}/httpd/build %{_libdir}/httpd/build/*.mk %{_libdir}/httpd/build/instdso.sh %{_libdir}/httpd/build/config.nice %{_libdir}/httpd/build/mkdir.sh httpd-2.4.41/InstallBin.dsp0000644000000000000500000000553511660326534014021 0ustar rootsrc# Microsoft Developer Studio Project File - Name="InstallBin" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) External Target" 0x0106 CFG=InstallBin - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "InstallBin.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "InstallBin.mak" CFG="InstallBin - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "InstallBin - Win32 Release" (based on "Win32 (x86) External Target") !MESSAGE "InstallBin - Win32 Debug" (based on "Win32 (x86) External Target") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" !IF "$(CFG)" == "InstallBin - Win32 Release" # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Cmd_Line "NMAKE /f InstallBin.mak" # PROP BASE Rebuild_Opt "/a" # PROP BASE Target_File "\Apache24\bin\httpd.exe" # PROP BASE Bsc_Name "InstallBin.bsc" # PROP BASE Target_Dir "" # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Cmd_Line "NMAKE /f makefile.win INSTDIR="\Apache24" SHORT=R LONG=Release _install" # PROP Rebuild_Opt "" # PROP Target_File "\Apache24\bin\httpd.exe" # PROP Bsc_Name "Browse\httpd.bsc" # PROP Target_Dir "" !ELSEIF "$(CFG)" == "InstallBin - Win32 Debug" # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Cmd_Line "NMAKE /f InstallBin.mak" # PROP BASE Rebuild_Opt "/a" # PROP BASE Target_File "\Apache24\bin\httpd.exe" # PROP BASE Bsc_Name "InstallBin.bsc" # PROP BASE Target_Dir "" # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Cmd_Line "NMAKE /f makefile.win INSTDIR="\Apache24" SHORT=D LONG=Debug _install" # PROP Rebuild_Opt "" # PROP Target_File "\Apache24\bin\httpd.exe" # PROP Bsc_Name "" # PROP Target_Dir "" !ENDIF # Begin Target # Name "InstallBin - Win32 Release" # Name "InstallBin - Win32 Debug" !IF "$(CFG)" == "InstallBin - Win32 Release" !ELSEIF "$(CFG)" == "InstallBin - Win32 Debug" !ENDIF # Begin Source File SOURCE=..\logs\access.log # End Source File # Begin Source File SOURCE=.\os\win32\BaseAddr.ref # End Source File # Begin Source File SOURCE=.\CHANGES # End Source File # Begin Source File SOURCE=..\logs\error.log # End Source File # Begin Source File SOURCE=..\conf\httpd.conf # End Source File # Begin Source File SOURCE=.\Makefile.win # End Source File # Begin Source File SOURCE=..\STATUS # End Source File # End Target # End Project httpd-2.4.41/.deps0000644000000000000500000000000013523273352012163 0ustar rootsrchttpd-2.4.41/httpd.dsp0000644000000000000500000001003411023777214013071 0ustar rootsrc# Microsoft Developer Studio Project File - Name="httpd" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Console Application" 0x0103 CFG=httpd - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "httpd.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "httpd.mak" CFG="httpd - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "httpd - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "httpd - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe RSC=rc.exe !IF "$(CFG)" == "httpd - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "SHARED_MODULE" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /Fd"Release\httpd" /FD /c # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /i "./include" /i "./srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="httpd.exe" /d LONG_NAME="Apache HTTP Server" /d ICON_FILE="apache.ico" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib /nologo /subsystem:console # ADD LINK32 kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib /nologo /stack:0x40000 /subsystem:console /debug /opt:ref # Begin Special Build Tool TargetPath=.\Release\httpd.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ELSEIF "$(CFG)" == "httpd - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /Fd"Debug\httpd" /FD /c # SUBTRACT CPP /YX # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /i "./include" /i "./srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="httpd.exe" /d LONG_NAME="Apache HTTP Server" /d ICON_FILE="apache.ico" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib /nologo /subsystem:console /incremental:no /debug # ADD LINK32 kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib /nologo /stack:0x40000 /subsystem:console /incremental:no /debug # Begin Special Build Tool TargetPath=.\Debug\httpd.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ENDIF # Begin Target # Name "httpd - Win32 Release" # Name "httpd - Win32 Debug" # Begin Source File SOURCE=.\build\win32\Apache.ico # End Source File # Begin Source File SOURCE=.\build\win32\httpd.rc # End Source File # Begin Source File SOURCE=.\server\main.c # End Source File # End Target # End Project httpd-2.4.41/NWGNUmakefile0000644000000000000500000003307412673543425013575 0ustar rootsrc# # Define our required macro's if not already done. # ifndef AP_WORK export AP_WORK = $(CURDIR) endif ifndef APR_WORK ifeq "$(wildcard $(AP_WORK)/srclib/apr)" "$(AP_WORK)/srclib/apr" export APR_WORK = $(AP_WORK)/srclib/apr endif endif ifneq "$(wildcard $(APR_WORK)/include/apr_version.h)" "$(APR_WORK)/include/apr_version.h" $(error APR_WORK does not point to a valid APR source tree) endif ifndef APU_WORK ifeq "$(wildcard $(AP_WORK)/srclib/apr-util)" "$(AP_WORK)/srclib/apr-util" export APU_WORK = $(AP_WORK)/srclib/apr-util endif endif ifndef APU_WORK ifeq "$(wildcard $(APR_WORK)/include/apu_version.h)" "$(APR_WORK)/include/apu_version.h" export APU_WORK = $(APR_WORK) endif endif ifneq "$(wildcard $(APU_WORK)/include/apu_version.h)" "$(APU_WORK)/include/apu_version.h" $(error APU_WORK does not point to a valid APU source tree) endif # # Declare the sub-directories to be built here # SUBDIRS = \ $(APR_WORK) \ build \ support \ modules \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(SRC)/include \ $(STDMOD)/aaa \ $(STDMOD)/core \ $(STDMOD)/filters \ $(STDMOD)/generators \ $(STDMOD)/http \ $(STDMOD)/loggers \ $(STDMOD)/mappers \ $(STDMOD)/proxy \ $(STDMOD)/ssl \ $(SERVER) \ $(SERVER)/mpm/netware \ $(PCRE) \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ -DHAVE_CONFIG_H \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = Apache2 # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache Web Server $(VERSION_STR) $(VERSION_SKT) # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) # # This is used by the '-screenname' directive. If left blank, # 'Apache for NetWare' Thread will be used. # NLM_SCREEN_NAME = Apache $(VERSION_STR) for NetWare # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 65536 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = _LibCCheckUnload # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = PSEUDOPREEMPTION # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(PCRELIB) \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/buildmark.o \ $(OBJDIR)/config.o \ $(OBJDIR)/connection.o \ $(OBJDIR)/core.o \ $(OBJDIR)/core_filters.o \ $(OBJDIR)/eoc_bucket.o \ $(OBJDIR)/eor_bucket.o \ $(OBJDIR)/error_bucket.o \ $(OBJDIR)/http_core.o \ $(OBJDIR)/http_protocol.o \ $(OBJDIR)/http_request.o \ $(OBJDIR)/byterange_filter.o \ $(OBJDIR)/chunk_filter.o \ $(OBJDIR)/http_etag.o \ $(OBJDIR)/http_filters.o \ $(OBJDIR)/listen.o \ $(OBJDIR)/log.o \ $(OBJDIR)/main.o \ $(OBJDIR)/mod_authn_core.o \ $(OBJDIR)/mod_authz_core.o \ $(OBJDIR)/mod_authz_host.o \ $(OBJDIR)/mod_alias.o \ $(OBJDIR)/mod_dir.o \ $(OBJDIR)/mod_env.o \ $(OBJDIR)/mod_include.o \ $(OBJDIR)/mod_log_config.o \ $(OBJDIR)/mod_mime.o \ $(OBJDIR)/mod_negotiation.o \ $(OBJDIR)/mod_netware.o \ $(OBJDIR)/mod_setenvif.o \ $(OBJDIR)/mod_so.o \ $(OBJDIR)/mod_watchdog.o \ $(OBJDIR)/modules.o \ $(OBJDIR)/mpm_common.o \ $(OBJDIR)/mpm_netware.o \ $(OBJDIR)/protocol.o \ $(OBJDIR)/provider.o \ $(OBJDIR)/request.o \ $(OBJDIR)/scoreboard.o \ $(OBJDIR)/util.o \ $(OBJDIR)/util_cfgtree.o \ $(OBJDIR)/util_charset.o \ $(OBJDIR)/util_cookies.o \ $(OBJDIR)/util_debug.o \ $(OBJDIR)/util_expr_eval.o \ $(OBJDIR)/util_expr_parse.o \ $(OBJDIR)/util_expr_scan.o \ $(OBJDIR)/util_fcgi.o \ $(OBJDIR)/util_filter.o \ $(OBJDIR)/util_md5.o \ $(OBJDIR)/util_mutex.o \ $(OBJDIR)/util_nw.o \ $(OBJDIR)/util_pcre.o \ $(OBJDIR)/util_regex.o \ $(OBJDIR)/util_script.o \ $(OBJDIR)/util_time.o \ $(OBJDIR)/util_xml.o \ $(OBJDIR)/vhost.o \ $(EOLIST) # Build in mod_nw_ssl if Winsock is being used ifndef USE_STDSOCKETS FILES_nlm_objs += $(OBJDIR)/mod_nw_ssl.o \ $(EOLIST) endif # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PCRELIB) \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ Libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @libc.imp \ @netware.imp \ GetCurrentAddressSpace \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ @httpd.imp \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # ifeq "$(wildcard $(PCRE)/pcre.c)" "$(PCRE)/pcre.c" FILES_lib_objs = \ $(OBJDIR)/pcre.o \ $(EOLIST) else FILES_lib_objs = \ $(OBJDIR)/chartables.o \ $(OBJDIR)/pcre_compile.o \ $(OBJDIR)/pcre_exec.o \ $(OBJDIR)/pcre_fullinfo.o \ $(OBJDIR)/pcre_globals.o \ $(OBJDIR)/pcre_newline.o \ $(OBJDIR)/pcre_tables.o \ $(OBJDIR)/pcre_version.o \ $(EOLIST) ifeq "$(wildcard $(PCRE)/pcre_try_flipped.c)" "$(PCRE)/pcre_try_flipped.c" FILES_lib_objs += \ $(OBJDIR)/pcre_try_flipped.o \ $(EOLIST) endif endif # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # MKCNF = $(AWK) -v BDIR=$(BASEDIR) -v PORT=$(PORT) -v SSLPORT=$(SSLPORT) -v MODSSL=$(WITH_SSL) -v BSDSKT=$(USE_STDSOCKETS) -f build/mkconfNW.awk $1 > $2 install :: nlms instscripts FORCE $(call COPY,$(OBJDIR)/$(NLM_NAME).nlm, $(INSTALLBASE)/) $(call COPY,ABOUT_APACHE, $(INSTALLBASE)/) $(call COPY,CHANGES, $(INSTALLBASE)/) $(call COPY,LICENSE, $(INSTALLBASE)/) $(call COPY,README, $(INSTALLBASE)/) $(call COPY,VERSIONING, $(INSTALLBASE)/) $(call COPY,STATUS, $(INSTALLBASE)/) $(call COPY,support/dbmmanage.in, $(INSTALLBASE)/bin/dbmmanage.pl) $(call COPY,support/logresolve.pl.in, $(INSTALLBASE)/bin/logresolve.pl) $(call COPY,support/split-logfile.in, $(INSTALLBASE)/bin/split-logfile.pl) $(call COPY,support/check_forensic, $(INSTALLBASE)/bin/check_forensic.sh) $(call COPY,docs/conf/magic, $(INSTALLBASE)/conf/) $(call COPY,docs/conf/mime.types, $(INSTALLBASE)/conf/) $(call COPY,docs/conf/charset.conv, $(INSTALLBASE)/conf/) $(call COPY,docs/cgi-examples/printenv, $(INSTALLBASE)/cgi-bin/printenv.pl) $(call MKCNF,docs/conf/httpd.conf.in, $(INSTALLBASE)/conf/httpd.conf) $(call MKCNF,docs/conf/extra/httpd-autoindex.conf.in, $(INSTALLBASE)/conf/extra/httpd-autoindex.conf) $(call MKCNF,docs/conf/extra/httpd-dav.conf.in, $(INSTALLBASE)/conf/extra/httpd-dav.conf) $(call MKCNF,docs/conf/extra/httpd-default.conf.in, $(INSTALLBASE)/conf/extra/httpd-default.conf) $(call MKCNF,docs/conf/extra/httpd-info.conf.in, $(INSTALLBASE)/conf/extra/httpd-info.conf) $(call MKCNF,docs/conf/extra/httpd-languages.conf.in, $(INSTALLBASE)/conf/extra/httpd-languages.conf) $(call MKCNF,docs/conf/extra/httpd-manual.conf.in, $(INSTALLBASE)/conf/extra/httpd-manual.conf) $(call MKCNF,docs/conf/extra/httpd-mpm.conf.in, $(INSTALLBASE)/conf/extra/httpd-mpm.conf) $(call MKCNF,docs/conf/extra/httpd-multilang-errordoc.conf.in, $(INSTALLBASE)/conf/extra/httpd-multilang-errordoc.conf) $(call MKCNF,docs/conf/extra/httpd-userdir.conf.in, $(INSTALLBASE)/conf/extra/httpd-userdir.conf) $(call MKCNF,docs/conf/extra/httpd-vhosts.conf.in, $(INSTALLBASE)/conf/extra/httpd-vhosts.conf) $(call MKCNF,docs/conf/extra/httpd-ssl.conf.in, $(INSTALLBASE)/conf/extra/httpd-ssl.conf) $(call MKCNF,docs/conf/extra/proxy-html.conf.in, $(INSTALLBASE)/conf/extra/proxy-html.conf) $(call COPYR,docs/docroot, $(INSTALLBASE)/htdocs) $(call COPYR,docs/error, $(INSTALLBASE)/error) $(call COPYR,docs/icons, $(INSTALLBASE)/icons) $(call COPYR,docs/man, $(INSTALLBASE)/man) $(call COPYR,docs/manual, $(INSTALLBASE)/manual) installdev :: FORCE $(call COPY,$(SRC)/include/*.h, $(INSTALLBASE)/include/) $(call COPY,$(NWOS)/*.h, $(INSTALLBASE)/include/) $(call COPY,$(APR)/include/*.h, $(INSTALLBASE)/include/) $(call COPY,$(APRUTIL)/include/*.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/core/mod_so.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/core/mod_watchdog.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/cache/mod_cache.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/cache/cache_common.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/database/mod_dbd.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/dav/main/mod_dav.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/filters/mod_include.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/generators/mod_cgi.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/generators/mod_status.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/loggers/mod_log_config.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/mappers/mod_rewrite.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/proxy/mod_proxy.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/session/mod_session.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/ssl/mod_ssl.h, $(INSTALLBASE)/include/) $(call COPY,$(STDMOD)/ssl/mod_ssl_openssl.h, $(INSTALLBASE)/include/) $(call COPY,$(APR)/*.imp, $(INSTALLBASE)/lib/) $(call COPY,$(NWOS)/*.imp, $(INSTALLBASE)/lib/) $(call COPY,$(NWOS)/*.xdc, $(INSTALLBASE)/lib/) $(call COPY,$(APBUILD)/NWGNU*.inc, $(INSTALLBASE)/build/) prebuild :: FORCE $(MAKE) -C $(SERVER) -f NWGNUmakefile $(MAKE) -C $(PCRE) -f NWGNUmakefile $(call MKDIR,$(PREBUILD_INST)) $(call COPY,$(SERVER)/$(OBJDIR)/*.nlm, $(PREBUILD_INST)/) $(call COPY,$(PCRE)/$(OBJDIR)/*.nlm, $(PREBUILD_INST)/) # # Any specialized rules here # vpath %.c server:modules/arch/netware:modules/http:modules/aaa:modules/mappers vpath %.c modules/generators:modules/metadata:modules/filters:modules/loggers vpath %.c modules/core:os/netware:server/mpm/netware:$(PCRE) $(OBJDIR)/chartables.o: os/netware/chartables.c # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc include $(APBUILD)/NWGNUscripts.inc httpd-2.4.41/apache_probes.d0000644000000000000500000002326311312717763014212 0ustar rootsrcprovider ap { /* Explicit, core */ probe internal__redirect(char *, char *); probe process__request__entry(uintptr_t, char *); probe process__request__return(uintptr_t, char *, uint32_t); probe read__request__entry(uintptr_t, uintptr_t); probe read__request__success(uintptr_t, char *, char *, char *, uint32_t); probe read__request__failure(uintptr_t); /* Explicit, modules */ probe proxy__run(uintptr_t, uintptr_t, uintptr_t, char *, int); probe proxy__run__finished(uintptr_t, int, int); probe rewrite__log(uintptr_t, int, int, char *, char *); /* Implicit, APR hooks */ probe access_checker__entry(); probe access_checker__dispatch__invoke(char *); probe access_checker__dispatch__complete(char *, uint32_t); probe access_checker__return(uint32_t); probe auth_checker__entry(); probe auth_checker__dispatch__invoke(char *); probe auth_checker__dispatch__complete(char *, uint32_t); probe auth_checker__return(uint32_t); probe check_config__entry(); probe check_config__dispatch__invoke(char *); probe check_config__dispatch__complete(char *, uint32_t); probe check_config__return(uint32_t); probe check_user_id__entry(); probe check_user_id__dispatch__invoke(char *); probe check_user_id__dispatch__complete(char *, uint32_t); probe check_user_id__return(uint32_t); probe child_init__entry(); probe child_init__dispatch__invoke(char *); probe child_init__dispatch__complete(char *, uint32_t); probe child_init__return(uint32_t); probe create_connection__entry(); probe create_connection__dispatch__invoke(char *); probe create_connection__dispatch__complete(char *, uint32_t); probe create_connection__return(uint32_t); probe create_request__entry(); probe create_request__dispatch__invoke(char *); probe create_request__dispatch__complete(char *, uint32_t); probe create_request__return(uint32_t); probe default_port__entry(); probe default_port__dispatch__invoke(char *); probe default_port__dispatch__complete(char *, uint32_t); probe default_port__return(uint32_t); probe drop_privileges__entry(); probe drop_privileges__dispatch__invoke(char *); probe drop_privileges__dispatch__complete(char *, uint32_t); probe drop_privileges__return(uint32_t); probe error_log__entry(); probe error_log__dispatch__invoke(char *); probe error_log__dispatch__complete(char *, uint32_t); probe error_log__return(uint32_t); probe fatal_exception__entry(); probe fatal_exception__dispatch__invoke(char *); probe fatal_exception__dispatch__complete(char *, uint32_t); probe fatal_exception__return(uint32_t); probe fixups__entry(); probe fixups__dispatch__invoke(char *); probe fixups__dispatch__complete(char *, uint32_t); probe fixups__return(uint32_t); probe get_mgmt_items__entry(); probe get_mgmt_items__dispatch__invoke(char *); probe get_mgmt_items__dispatch__complete(char *, uint32_t); probe get_mgmt_items__return(uint32_t); probe get_suexec_identity__entry(); probe get_suexec_identity__dispatch__invoke(char *); probe get_suexec_identity__dispatch__complete(char *, uint32_t); probe get_suexec_identity__return(uint32_t); probe handler__entry(); probe handler__dispatch__invoke(char *); probe handler__dispatch__complete(char *, uint32_t); probe handler__return(uint32_t); probe header_parser__entry(); probe header_parser__dispatch__invoke(char *); probe header_parser__dispatch__complete(char *, uint32_t); probe header_parser__return(uint32_t); probe http_scheme__entry(); probe http_scheme__dispatch__invoke(char *); probe http_scheme__dispatch__complete(char *, uint32_t); probe http_scheme__return(uint32_t); probe insert_error_filter__entry(); probe insert_error_filter__dispatch__invoke(char *); probe insert_error_filter__dispatch__complete(char *, uint32_t); probe insert_error_filter__return(uint32_t); probe insert_filter__entry(); probe insert_filter__dispatch__invoke(char *); probe insert_filter__dispatch__complete(char *, uint32_t); probe insert_filter__return(uint32_t); probe log_transaction__entry(); probe log_transaction__dispatch__invoke(char *); probe log_transaction__dispatch__complete(char *, uint32_t); probe log_transaction__return(uint32_t); probe map_to_storage__entry(); probe map_to_storage__dispatch__invoke(char *); probe map_to_storage__dispatch__complete(char *, uint32_t); probe map_to_storage__return(uint32_t); probe monitor__entry(); probe monitor__dispatch__invoke(char *); probe monitor__dispatch__complete(char *, uint32_t); probe monitor__return(uint32_t); probe mpm__entry(); probe mpm__dispatch__invoke(char *); probe mpm__dispatch__complete(char *, uint32_t); probe mpm__return(uint32_t); probe mpm_get_name__entry(); probe mpm_get_name__dispatch__invoke(char *); probe mpm_get_name__dispatch__complete(char *, uint32_t); probe mpm_get_name__return(uint32_t); probe mpm_note_child_killed__entry(); probe mpm_note_child_killed__dispatch__invoke(char *); probe mpm_note_child_killed__dispatch__complete(char *, uint32_t); probe mpm_note_child_killed__return(uint32_t); probe mpm_register_timed_callback__entry(); probe mpm_register_timed_callback__dispatch__invoke(char *); probe mpm_register_timed_callback__dispatch__complete(char *, uint32_t); probe mpm_register_timed_callback__return(uint32_t); probe mpm_query__entry(); probe mpm_query__dispatch__invoke(char *); probe mpm_query__dispatch__complete(char *, uint32_t); probe mpm_query__return(uint32_t); probe open_logs__entry(); probe open_logs__dispatch__invoke(char *); probe open_logs__dispatch__complete(char *, uint32_t); probe open_logs__return(uint32_t); probe optional_fn_retrieve__entry(); probe optional_fn_retrieve__dispatch__invoke(char *); probe optional_fn_retrieve__dispatch__complete(char *, uint32_t); probe optional_fn_retrieve__return(uint32_t); probe post_config__entry(); probe post_config__dispatch__invoke(char *); probe post_config__dispatch__complete(char *, uint32_t); probe post_config__return(uint32_t); probe post_read_request__entry(); probe post_read_request__dispatch__invoke(char *); probe post_read_request__dispatch__complete(char *, uint32_t); probe post_read_request__return(uint32_t); probe pre_config__entry(); probe pre_config__dispatch__invoke(char *); probe pre_config__dispatch__complete(char *, uint32_t); probe pre_config__return(uint32_t); probe pre_connection__entry(); probe pre_connection__dispatch__invoke(char *); probe pre_connection__dispatch__complete(char *, uint32_t); probe pre_connection__return(uint32_t); probe pre_mpm__entry(); probe pre_mpm__dispatch__invoke(char *); probe pre_mpm__dispatch__complete(char *, uint32_t); probe pre_mpm__return(uint32_t); probe process_connection__entry(); probe process_connection__dispatch__invoke(char *); probe process_connection__dispatch__complete(char *, uint32_t); probe process_connection__return(uint32_t); probe quick_handler__entry(); probe quick_handler__dispatch__invoke(char *); probe quick_handler__dispatch__complete(char *, uint32_t); probe quick_handler__return(uint32_t); probe test_config__entry(); probe test_config__dispatch__invoke(char *); probe test_config__dispatch__complete(char *, uint32_t); probe test_config__return(uint32_t); probe translate_name__entry(); probe translate_name__dispatch__invoke(char *); probe translate_name__dispatch__complete(char *, uint32_t); probe translate_name__return(uint32_t); probe type_checker__entry(); probe type_checker__dispatch__invoke(char *); probe type_checker__dispatch__complete(char *, uint32_t); probe type_checker__return(uint32_t); /* Implicit, APR hooks for proxy */ probe canon_handler__entry(); probe canon_handler__dispatch__invoke(char *); probe canon_handler__dispatch__complete(char *, uint32_t); probe canon_handler__return(uint32_t); probe post_request__entry(); probe post_request__dispatch__invoke(char *); probe post_request__dispatch__complete(char *, uint32_t); probe post_request__return(uint32_t); probe pre_request__entry(); probe pre_request__dispatch__invoke(char *); probe pre_request__dispatch__complete(char *, uint32_t); probe pre_request__return(uint32_t); probe scheme_handler__entry(); probe scheme_handler__dispatch__invoke(char *); probe scheme_handler__dispatch__complete(char *, uint32_t); probe scheme_handler__return(uint32_t); /* Implicit, APR hooks for dav */ probe find_liveprop__entry(); probe find_liveprop__dispatch__invoke(char *); probe find_liveprop__dispatch__complete(char *, uint32_t); probe find_liveprop__return(uint32_t); probe gather_propsets__entry(); probe gather_propsets__dispatch__invoke(char *); probe gather_propsets__dispatch__complete(char *, uint32_t); probe gather_propsets__return(uint32_t); probe insert_all_liveprops__entry(); probe insert_all_liveprops__dispatch__invoke(char *); probe insert_all_liveprops__dispatch__complete(char *, uint32_t); probe insert_all_liveprops__return(uint32_t); /* Implicit, APR hooks for watchdog */ probe watchdog_exit__entry(); probe watchdog_exit__dispatch__invoke(char *); probe watchdog_exit__dispatch__complete(char *, uint32_t); probe watchdog_exit__return(uint32_t); probe watchdog_init__entry(); probe watchdog_init__dispatch__invoke(char *); probe watchdog_init__dispatch__complete(char *, uint32_t); probe watchdog_init__return(uint32_t); probe watchdog_need__entry(); probe watchdog_need__dispatch__invoke(char *); probe watchdog_need__dispatch__complete(char *, uint32_t); probe watchdog_need__return(uint32_t); probe watchdog_step__entry(); probe watchdog_step__dispatch__invoke(char *); probe watchdog_step__dispatch__complete(char *, uint32_t); probe watchdog_step__return(uint32_t); }; httpd-2.4.41/httpd.mak0000644000000000000500000002144212674411515013062 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on httpd.dsp !IF "$(CFG)" == "" CFG=httpd - Win32 Release !MESSAGE No configuration specified. Defaulting to httpd - Win32 Release. !ENDIF !IF "$(CFG)" != "httpd - Win32 Release" && "$(CFG)" != "httpd - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "httpd.mak" CFG="httpd - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "httpd - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "httpd - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "httpd - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\httpd.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\httpd.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\httpd.idb" -@erase "$(INTDIR)\httpd.res" -@erase "$(INTDIR)\main.obj" -@erase "$(OUTDIR)\httpd.exe" -@erase "$(OUTDIR)\httpd.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\httpd" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\httpd.res" /i "./include" /i "./srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="httpd.exe" /d LONG_NAME="Apache HTTP Server" /d ICON_FILE="apache.ico" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\httpd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib /nologo /stack:0x40000 /subsystem:console /incremental:no /pdb:"$(OUTDIR)\httpd.pdb" /debug /out:"$(OUTDIR)\httpd.exe" /opt:ref LINK32_OBJS= \ "$(INTDIR)\main.obj" \ "$(INTDIR)\httpd.res" \ ".\srclib\apr\Release\libapr-1.lib" \ ".\srclib\apr-util\Release\libaprutil-1.lib" \ "$(OUTDIR)\libhttpd.lib" "$(OUTDIR)\httpd.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\httpd.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\httpd.exe" if exist .\Release\httpd.exe.manifest mt.exe -manifest .\Release\httpd.exe.manifest -outputresource:.\Release\httpd.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "httpd - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\httpd.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\httpd.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\httpd.idb" -@erase "$(INTDIR)\httpd.res" -@erase "$(INTDIR)\main.obj" -@erase "$(OUTDIR)\httpd.exe" -@erase "$(OUTDIR)\httpd.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\httpd" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\httpd.res" /i "./include" /i "./srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="httpd.exe" /d LONG_NAME="Apache HTTP Server" /d ICON_FILE="apache.ico" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\httpd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib /nologo /stack:0x40000 /subsystem:console /incremental:no /pdb:"$(OUTDIR)\httpd.pdb" /debug /out:"$(OUTDIR)\httpd.exe" LINK32_OBJS= \ "$(INTDIR)\main.obj" \ "$(INTDIR)\httpd.res" \ ".\srclib\apr\Debug\libapr-1.lib" \ ".\srclib\apr-util\Debug\libaprutil-1.lib" \ "$(OUTDIR)\libhttpd.lib" "$(OUTDIR)\httpd.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\httpd.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\httpd.exe" if exist .\Debug\httpd.exe.manifest mt.exe -manifest .\Debug\httpd.exe.manifest -outputresource:.\Debug\httpd.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("httpd.dep") !INCLUDE "httpd.dep" !ELSE !MESSAGE Warning: cannot find "httpd.dep" !ENDIF !ENDIF !IF "$(CFG)" == "httpd - Win32 Release" || "$(CFG)" == "httpd - Win32 Debug" !IF "$(CFG)" == "httpd - Win32 Release" "libapr - Win32 Release" : cd ".\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\.." "libapr - Win32 ReleaseCLEAN" : cd ".\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\.." !ELSEIF "$(CFG)" == "httpd - Win32 Debug" "libapr - Win32 Debug" : cd ".\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\.." "libapr - Win32 DebugCLEAN" : cd ".\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\.." !ENDIF !IF "$(CFG)" == "httpd - Win32 Release" "libaprutil - Win32 Release" : cd ".\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\.." "libaprutil - Win32 ReleaseCLEAN" : cd ".\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\.." !ELSEIF "$(CFG)" == "httpd - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\.." "libaprutil - Win32 DebugCLEAN" : cd ".\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\.." !ENDIF !IF "$(CFG)" == "httpd - Win32 Release" "libhttpd - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd "." "libhttpd - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "httpd - Win32 Debug" "libhttpd - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd "." "libhttpd - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=.\build\win32\httpd.rc !IF "$(CFG)" == "httpd - Win32 Release" "$(INTDIR)\httpd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\httpd.res" /i "./include" /i "./srclib/apr/include" /i "build\win32" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="httpd.exe" /d LONG_NAME="Apache HTTP Server" /d ICON_FILE="apache.ico" $(SOURCE) !ELSEIF "$(CFG)" == "httpd - Win32 Debug" "$(INTDIR)\httpd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\httpd.res" /i "./include" /i "./srclib/apr/include" /i "build\win32" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="httpd.exe" /d LONG_NAME="Apache HTTP Server" /d ICON_FILE="apache.ico" $(SOURCE) !ENDIF SOURCE=.\server\main.c "$(INTDIR)\main.obj" : $(SOURCE) "$(INTDIR)" $(CPP) $(CPP_PROJ) $(SOURCE) !ENDIF httpd-2.4.41/NOTICE0000644000000000000500000000132013412654541012141 0ustar rootsrcApache HTTP Server Copyright 2019 The Apache Software Foundation. This product includes software developed at The Apache Software Foundation (http://www.apache.org/). Portions of this software were developed at the National Center for Supercomputing Applications (NCSA) at the University of Illinois at Urbana-Champaign. This software contains code derived from the RSA Data Security Inc. MD5 Message-Digest Algorithm, including various modifications by Spyglass Inc., Carnegie Mellon University, and Bell Communications Research, Inc (Bellcore). This software contains code derived from the PCRE library pcreposix.c source code, written by Philip Hazel, Copyright 1997-2004 by the University of Cambridge, England. httpd-2.4.41/ROADMAP0000644000000000000500000002371011463056075012254 0ustar rootsrcAPACHE 2.x ROADMAP ================== Last modified at [$Date: 2010-10-30 17:56:13 +0000 (Sat, 30 Oct 2010) $] WORKS IN PROGRESS ----------------- * Source code should follow style guidelines. OK, we all agree pretty code is good. Probably best to clean this up by hand immediately upon branching a 2.1 tree. Status: Justin volunteers to hand-edit the entire source tree ;) Justin says: Recall when the release plan for 2.0 was written: Absolute Enforcement of an "Apache Style" for code. Watch this slip into 3.0. David says: The style guide needs to be reviewed before this can be done. http://httpd.apache.org/dev/styleguide.html The current file is dated April 20th 1998! OtherBill offers: It's survived since '98 because it's welldone :-) Suggest we simply follow whatever is documented in styleguide.html as we branch the next tree. Really sort of straightforward, if you dislike a bit within that doc, bring it up on the dev@httpd list prior to the next branch. So Bill sums up ... let's get the code cleaned up in CVS head. Remember, it just takes cvs diff -b (that is, --ignore-space-change) to see the code changes and ignore that cruft. Get editing Justin :) * Replace stat [deferred open] with open/fstat in directory_walk. Justin, Ian, OtherBill all interested in this. Implies setting up the apr_file_t member in request_rec, and having all modules use that file, and allow the cleanup to close it [if it isn't a shared, cached file handle.] * The Async Apache Server implemented in terms of APR. [Bill Stoddard's pet project.] Message-ID: <008301c17d42$9b446970$01000100@sashimi> (dev@apr) OtherBill notes that this can proceed in two parts... Async accept, setup, and tear-down of the request e.g. dealing with the incoming request headers, prior to dispatching the request to a thread for processing. This doesn't need to wait for a 2.x/3.0 bump. Async delegation of the entire request processing chain Too many handlers use stack storage and presume it is available for the life of the request, so a complete async implementation would need to happen 3.0 release. Brian notes that async writes will provide a bigger scalability win than async reads for most servers. We may want to try a hybrid sync-read/async-write MPM as a next step. This should be relatively easy to build: start with the current worker or leader/followers model, but hand off each response brigade to a "completion thread" that multiplexes writes on many connections, so that the worker thread doesn't have to wait around for the sendfile to complete. MAKING APACHE REPOSITORY-AGNOSTIC (or: remove knowledge of the filesystem) [ 2002/10/01: discussion in progress on items below; this isn't planned yet ] * dav_resource concept for an HTTP resource ("ap_resource") * r->filename, r->canonical_filename, r->finfo need to disappear. All users need to use new APIs on the ap_resource object. (backwards compat: today, when this occurs with mod_dav and a custom backend, the above items refer to the topmost directory mapped by a location; e.g. docroot) Need to preserve a 'filename'-like string for mime-by-name sorts of operations. But this only needs to be the name itself and not a full path. Justin: Can we leverage the path info, or do we not trust the user? gstein: well, it isn't the "path info", but the actual URI of the resource. And of course we trust the user... that is the resource they requested. dav_resource->uri is the field you want. path_info might still exist, but that portion might be related to the CGI concept of "path translated" or some other further resolution. To continue, I would suggest that "path translated" and having *any* path info is Badness. It means that you did not fully resolve a resource for the given URI. The "abs_path" in a URI identifies a resource, and that should get fully resolved. None of this "resolve to and then we have a magical second resolution (inside the CGI script)" or somesuch. Justin: Well, let's consider mod_mbox for a second. It is sort of a virtual filesystem in its own right - as it introduces it's own notion of a URI space, but it is intrinsically tied to the filesystem to do the lookups. But, for the portion that isn't resolved on the file system, it has its own addressing scheme. Do we need the ability to layer resolution? * The translate_name hook goes away Wrowe altogether disagrees. translate_name today even operates on URIs ... this mechansim needs to be preserved. * The doc for map_to_storage is totally opaque to me. It has something to do with filesystems, but it also talks about security and per_dir_config and other stuff. I presume something needs to happen there -- at least better doc. Wrowe agrees and will write it up. * The directory_walk concept disappears. All configuration is tagged to Locations. The "mod_filesystem" module might have some internal concept of the same config appearing in multiple places, but that is handled internally rather than by Apache core. Wrowe suggests this is wrong, instead it's private to filesystem requests, and is already invoked from map_to_storage, not the core handler. and blocks are preserved as-is, but sections become specific to the filesystem handler alone. Because alternate filesystem schemes could be loaded, this should be exposed, from the core, for other file-based stores to share. Consider an archive store where the layers become -> -> Justin: How do we map Directory entries to Locations? * The "Location tree" is an in-memory representation of the URL namespace. Nodes of the tree have configuration specific to that location in the namespace. Something like: typedef struct { const char *name; /* name of this node relative to parent */ struct ap_conf_vector_t *locn_config; apr_hash_t *children; /* NULL if no child configs */ } ap_locn_node; The following config: SetHandler server-status Order deny,allow Deny from all Allow from 127.0.0.1 Creates a node with name=="server_status", and the node is a child of the "/" node. (hmm. node->name is redundant with the hash key; maybe drop node->name) In the config vector, mod_access has stored its Order, Deny, and Allow configs. mod_core has stored the SetHandler. During the Location walk, we merge the config vectors normally. Note that an Alias simply associates a filesystem path (in mod_filesystem) with that Location in the tree. Merging continues with child locations, but a merge is never done through filesystem locations. Config on a specific subdir needs to be mapped back into the corresponding point in the Location tree for proper merging. * Config is parsed into a tree, as we did for the 2.0 timeframe, but that tree is just a representation of the config (for multiple runs and for in-memory manipulation and usage). It is unrelated to the "Location tree". * Calls to apr_file_io functions generally need to be replaced with operations against the ap_resource. For example, rather than calling apr_dir_open/read/close(), a caller uses resource->repos->get_children() or somesuch. Note that things like mod_dir, mod_autoindex, and mod_negotiation need to be converted to use these mechanisms so that their functions will work on logical repositories rather than just filesystems. * How do we handle CGI scripts? Especially when the resource may not be backed by a file? Ideally, we should be able to come up with some mechanism to allow CGIs to work in a repository-independent manner. - Writing the virtual data as a file and then executing it? - Can a shell be executed in a streamy manner? (Portably?) - Have an 'execute_resource' hook/func that allows the repository to choose its manner - be it exec() or whatever. - Won't this approach lead to duplication of code? Helper fns? gstein: PHP, Perl, and Python scripts are nominally executed by a filter inserted by mod_php/perl/python. I'd suggest that shell/batch scripts are similar. But to ask further: what if it is an executable *program* rather than just a script? Do we yank that out of the repository, drop it onto the filesystem, and run it? eeewwwww... I'll vote -0.9 for CGIs as a filter. Keep 'em handlers. Justin: So, do we give up executing CGIs from virtual repositories? That seems like a sad tradeoff to make. I'd like to have my CGI scripts under DAV (SVN) control. * How do we handle overlaying of Location and Directory entries? Right now, we have a problem when /cgi-bin/ is ScriptAlias'd and mod_dav has control over /. Some people believe that /cgi-bin/ shouldn't be under DAV control, while others do believe it should be. What's the right strategy? httpd-2.4.41/ABOUT_APACHE0000644000000000000500000003227012513547746013054 0ustar rootsrc The Apache HTTP Server Project http://httpd.apache.org/ The Apache HTTP Server Project is a collaborative software development effort aimed at creating a robust, commercial-grade, featureful, and freely-available source code implementation of an HTTP (Web) server. The project is jointly managed by a group of volunteers located around the world, using the Internet and the Web to communicate, plan, and develop the server and its related documentation. In addition, hundreds of users have contributed ideas, code, and documentation to the project. This file is intended to briefly describe the history of the Apache Group (as it was called in the early days), recognize the many contributors, and explain how you can join the fun too. In February of 1995, the most popular server software on the Web was the public domain HTTP daemon developed by Rob McCool at the National Center for Supercomputing Applications, University of Illinois, Urbana-Champaign. However, development of that httpd had stalled after Rob left NCSA in mid-1994, and many webmasters had developed their own extensions and bug fixes that were in need of a common distribution. A small group of these webmasters, contacted via private e-mail, gathered together for the purpose of coordinating their changes (in the form of "patches"). Brian Behlendorf and Cliff Skolnick put together a mailing list, shared information space, and logins for the core developers on a machine in the California Bay Area, with bandwidth and diskspace donated by HotWired and Organic Online. By the end of February, eight core contributors formed the foundation of the original Apache Group: Brian Behlendorf Roy T. Fielding Rob Hartill David Robinson Cliff Skolnick Randy Terbush Robert S. Thau Andrew Wilson with additional contributions from Eric Hagberg Frank Peters Nicolas Pioch Using NCSA httpd 1.3 as a base, we added all of the published bug fixes and worthwhile enhancements we could find, tested the result on our own servers, and made the first official public release (0.6.2) of the Apache server in April 1995. By coincidence, NCSA restarted their own development during the same period, and Brandon Long and Beth Frank of the NCSA Server Development Team joined the list in March as honorary members so that the two projects could share ideas and fixes. The early Apache server was a big hit, but we all knew that the codebase needed a general overhaul and redesign. During May-June 1995, while Rob Hartill and the rest of the group focused on implementing new features for 0.7.x (like pre-forked child processes) and supporting the rapidly growing Apache user community, Robert Thau designed a new server architecture (code-named Shambhala) which included a modular structure and API for better extensibility, pool-based memory allocation, and an adaptive pre-forking process model. The group switched to this new server base in July and added the features from 0.7.x, resulting in Apache 0.8.8 (and its brethren) in August. After extensive beta testing, many ports to obscure platforms, a new set of documentation (by David Robinson), and the addition of many features in the form of our standard modules, Apache 1.0 was released on December 1, 1995. Less than a year after the group was formed, the Apache server passed NCSA's httpd as the #1 server on the Internet. The survey by Netcraft (http://www.netcraft.com/survey/) shows that Apache is today more widely used than all other web servers combined. ============================================================================ The current project management committe of the Apache HTTP Server project (as of March, 2011) is: Aaron Bannert André Malo Astrid Stolper Ben Laurie Bojan Smojver Brad Nicholes Brian Havard Brian McCallister Chris Darroch Chuck Murcko Colm MacCárthaigh Dan Poirier Dirk-Willem van Gulik Doug MacEachern Eric Covener Erik Abele Graham Dumpleton Graham Leggett Greg Ames Greg Stein Gregory Trubetskoy Guenter Knauf Issac Goldstand Jeff Trawick Jim Gallacher Jim Jagielski Joe Orton Joe Schaefer Joshua Slive Justin Erenkrantz Ken Coar Lars Eilebrecht Manoj Kasichainula Marc Slemko Mark J. Cox Martin Kraemer Maxime Petazzoni Nick Kew Nicolas Lehuen Noirin Shirley Paul Querna Philip M. Gollucci Ralf S. Engelschall Randy Kobes Rasmus Lerdorf Rich Bowen Roy T. Fielding Rüdiger Plüm Sander Striker Sander Temm Stefan Fritsch Tony Stevenson Victor J. Orlikowski Wilfredo Sanchez William A. Rowe Jr. Yoshiki Hayashi Other major contributors Howard Fear (mod_include), Florent Guillaume (language negotiation), Koen Holtman (rewrite of mod_negotiation), Kevin Hughes (creator of all those nifty icons), Brandon Long and Beth Frank (NCSA Server Development Team, post-1.3), Ambarish Malpani (Beginning of the NT port), Rob McCool (original author of the NCSA httpd 1.3), Paul Richards (convinced the group to use remote CVS after 1.0), Garey Smiley (OS/2 port), Henry Spencer (author of the regex library). Many 3rd-party modules, frequently used and recommended, are also freely-available and linked from the related projects page: , and their authors frequently contribute ideas, patches, and testing. Hundreds of people have made individual contributions to the Apache project. Patch contributors are listed in the CHANGES file. ============================================================================ How to become involved in the Apache project There are several levels of contributing. If you just want to send in an occasional suggestion/fix, then you can just use the bug reporting form at . You can also subscribe to the announcements mailing list (announce-subscribe@httpd.apache.org) which we use to broadcast information about new releases, bugfixes, and upcoming events. There's a lot of information about the development process (much of it in serious need of updating) to be found at . If you'd like to become an active contributor to the Apache project (the group of volunteers who vote on changes to the distributed server), then you need to start by subscribing to the dev@httpd.apache.org mailing list. One warning though: traffic is high, 1000 to 1500 messages/month. To subscribe to the list, send an email to dev-subscribe@httpd.apache.org. We recommend reading the list for a while before trying to jump in to development. NOTE: The developer mailing list (dev@httpd.apache.org) is not a user support forum; it is for people actively working on development of the server code and documentation, and for planning future directions. If you have user/configuration questions, send them to users list or to the USENET newsgroup "comp.infosystems.www.servers.unix".or for windows users, the newsgroup "comp.infosystems.www.servers.ms-windows". There is a core group of contributors (informally called the "core") which was formed from the project founders and is augmented from time to time when core members nominate outstanding contributors and the rest of the core members agree. The core group focus is more on "business" issues and limited-circulation things like security problems than on mainstream code development. The term "The Apache Group" technically refers to this core of project contributors. The Apache project is a meritocracy--the more work you have done, the more you are allowed to do. The group founders set the original rules, but they can be changed by vote of the active members. There is a group of people who have logins on our server (apache.org) and access to the svn repository. Everyone has access to the svn snapshots. Changes to the code are proposed on the mailing list and usually voted on by active members--three +1 (yes votes) and no -1 (no votes, or vetoes) are needed to commit a code change during a release cycle; docs are usually committed first and then changed as needed, with conflicts resolved by majority vote. Our primary method of communication is our mailing list. Approximately 40 messages a day flow over the list, and are typically very conversational in tone. We discuss new features to add, bug fixes, user problems, developments in the web server community, release dates, etc. The actual code development takes place on the developers' local machines, with proposed changes communicated using a patch (output of a unified "diff -u oldfile newfile" command), and committed to the source repository by one of the core developers using remote svn. Anyone on the mailing list can vote on a particular issue, but we only count those made by active members or people who are known to be experts on that part of the server. Vetoes must be accompanied by a convincing explanation. New members of the Apache Group are added when a frequent contributor is nominated by one member and unanimously approved by the voting members. In most cases, this "new" member has been actively contributing to the group's work for over six months, so it's usually an easy decision. The above describes our past and current (as of July 2000) guidelines, which will probably change over time as the membership of the group changes and our development/coordination tools improve. ============================================================================ The Apache Software Foundation (www.apache.org) The Apache Software Foundation exists to provide organizational, legal, and financial support for the Apache open-source software projects. Founded in June 1999 by the Apache Group, the Foundation has been incorporated as a membership-based, not-for-profit corporation in order to ensure that the Apache projects continue to exist beyond the participation of individual volunteers, to enable contributions of intellectual property and funds on a sound basis, and to provide a vehicle for limiting legal exposure while participating in open-source software projects. You are invited to participate in The Apache Software Foundation. We welcome contributions in many forms. Our membership consists of those individuals who have demonstrated a commitment to collaborative open-source software development through sustained participation and contributions within the Foundation's projects. Many people and companies have contributed towards the success of the Apache projects. ============================================================================ Why The Apache HTTP Server Is Free Apache HTTP Server exists to provide a robust and commercial-grade reference implementation of the HTTP protocol. It must remain a platform upon which individuals and institutions can build reliable systems, both for experimental purposes and for mission-critical purposes. We believe the tools of online publishing should be in the hands of everyone, and software companies should make their money providing value-added services such as specialized modules and support, amongst other things. We realize that it is often seen as an economic advantage for one company to "own" a market - in the software industry that means to control tightly a particular conduit such that all others must pay. This is typically done by "owning" the protocols through which companies conduct business, at the expense of all those other companies. To the extent that the protocols of the World Wide Web remain "unowned" by a single company, the Web will remain a level playing field for companies large and small. Thus, "ownership" of the protocol must be prevented, and the existence of a robust reference implementation of the protocol, available absolutely for free to all companies, is a tremendously good thing. Furthermore, Apache httpd is an organic entity; those who benefit from it by using it often contribute back to it by providing feature enhancements, bug fixes, and support for others in public newsgroups. The amount of effort expended by any particular individual is usually fairly light, but the resulting product is made very strong. This kind of community can only happen with freeware--when someone pays for software, they usually aren't willing to fix its bugs. One can argue, then, that Apache's strength comes from the fact that it's free, and if it were made "not free" it would suffer tremendously, even if that money were spent on a real development team. We want to see Apache httpd used very widely--by large companies, small companies, research institutions, schools, individuals, in the intranet environment, everywhere--even though this may mean that companies who could afford commercial software, and would pay for it without blinking, might get a "free ride" by using Apache httpd. We would even be happy if some commercial software companies completely dropped their own HTTP server development plans and used Apache httpd as a base, with the proper attributions as described in the LICENSE file. Thanks for using Apache HTTP Server! httpd-2.4.41/httpd.dep0000644000000000000500000000425212674411515013062 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by httpd.mak .\build\win32\httpd.rc : \ ".\include\ap_release.h"\ .\server\main.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\http_request.h"\ ".\include\http_vhost.h"\ ".\include\httpd.h"\ ".\include\mod_core.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_charset.h"\ ".\include\util_ebcdic.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_md5.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr-util\include\apu_version.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_getopt.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_version.h"\ ".\srclib\apr\include\apr_want.h"\ httpd-2.4.41/emacs-style0000644000000000000500000000062310150161574013406 0ustar rootsrc(add-hook 'c-mode-hook (function (lambda () (c-set-offset 'inclass' ++) (c-set-offset 'defun-block-intro' ++) (c-set-offset 'statement-block-intro' ++) (c-set-offset 'substatement' ++) (c-set-offset 'brace-list-intro' ++) (c-set-offset 'statement-case-intro' ++) (c-set-offset 'inextern-lang' 0) ))) (setq c++-mode-hook c-mode-hook) (setq-default indent-tabs-mode nil) httpd-2.4.41/support/0002755000000000000500000000000013523273343012757 5ustar rootsrchttpd-2.4.41/support/split-logfile.in0000644000000000000500000000455312454751535016074 0ustar rootsrc#!@perlbin@ # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # This script will take a combined Web server access # log file and break its contents into separate files. # It assumes that the first field of each line is the # virtual host identity (put there by "%v"), and that # the logfiles should be named that+".log" in the current # directory. # # The combined log file is read from stdin. Records read # will be appended to any existing log files. # use strict; use warnings; my %log_file = (); while (my $log_line = ) { # # Get the first token from the log record; it's the # identity of the virtual host to which the record # applies. # my ($vhost) = split (/\s/, $log_line); # # Normalize the virtual host name to all lowercase. # If it's blank, the request was handled by the default # server, so supply a default name. This shouldn't # happen, but caution rocks. # $vhost = lc ($vhost) || "access"; # # if the vhost contains a "/" or "\", it is illegal so just use # the default log to avoid any security issues due if it is interprted # as a directory separator. if ($vhost =~ m#[/\\]#) { $vhost = "access" } # # If the log file for this virtual host isn't opened # yet, do it now. # if (! $log_file{$vhost}) { open $log_file{$vhost}, ">>${vhost}.log" or die ("Can't open ${vhost}.log"); } # # Strip off the first token (which may be null in the # case of the default server), and write the edited # record to the current log file. # $log_line =~ s/^\S*\s+//; print {$log_file{$vhost}} $log_line; } exit 0; httpd-2.4.41/support/apxs.in0000644000000000000500000005574112257067421014275 0ustar rootsrc#!@perlbin@ -w # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. require 5.004; use strict; package apxs; ## ## Configuration ## my %config_vars = (); my $installbuilddir = "@exp_installbuilddir@"; get_config_vars("$installbuilddir/config_vars.mk",\%config_vars); # read the configuration variables once my $prefix = get_vars("prefix"); my $CFG_PREFIX = $prefix; my $exec_prefix = get_vars("exec_prefix"); my $datadir = get_vars("datadir"); my $localstatedir = get_vars("localstatedir"); my $CFG_TARGET = get_vars("progname"); my $CFG_SYSCONFDIR = get_vars("sysconfdir"); my $CFG_CFLAGS = join ' ', map { get_vars($_) } qw(SHLTCFLAGS CFLAGS NOTEST_CPPFLAGS EXTRA_CPPFLAGS EXTRA_CFLAGS); my $CFG_LDFLAGS = join ' ', map { get_vars($_) } qw(LDFLAGS NOTEST_LDFLAGS SH_LDFLAGS); my $includedir = get_vars("includedir"); my $CFG_INCLUDEDIR = eval qq("$includedir"); my $CFG_CC = get_vars("CC"); my $libexecdir = get_vars("libexecdir"); my $CFG_LIBEXECDIR = eval qq("$libexecdir"); my $sbindir = get_vars("sbindir"); my $CFG_SBINDIR = eval qq("$sbindir"); my $ltflags = $ENV{'LTFLAGS'}; $ltflags or $ltflags = "--silent"; my %internal_vars = map {$_ => 1} qw(TARGET CC CFLAGS CFLAGS_SHLIB LD_SHLIB LDFLAGS_SHLIB LIBS_SHLIB PREFIX SBINDIR INCLUDEDIR LIBEXECDIR SYSCONFDIR); ## ## parse argument line ## # defaults for parameters my $opt_n = ''; my $opt_g = ''; my $opt_c = 0; my $opt_o = ''; my @opt_D = (); my @opt_I = (); my @opt_L = (); my @opt_l = (); my @opt_W = (); my @opt_S = (); my $opt_e = 0; my $opt_i = 0; my $opt_a = 0; my $opt_A = 0; my $opt_q = 0; my $opt_h = 0; my $opt_p = 0; my $opt_v = 0; # this subroutine is derived from Perl's getopts.pl with the enhancement of # the "+" metacharacter at the format string to allow a list to be built by # subsequent occurrences of the same option. sub Getopts { my ($argumentative, @ARGV) = @_; my $errs = 0; local $_; my @args = split / */, $argumentative; while (@ARGV && ($_ = $ARGV[0]) =~ /^-(.)(.*)/) { my ($first, $rest) = ($1,$2); if ($_ =~ m|^--$|) { shift @ARGV; last; } my $pos = index($argumentative,$first); if ($pos >= 0) { if ($pos < $#args && $args[$pos+1] eq ':') { shift @ARGV; if ($rest eq '') { unless (@ARGV) { error("Incomplete option: $first (needs an argument)"); $errs++; } $rest = shift(@ARGV); } eval "\$opt_$first = \$rest;"; } elsif ($pos < $#args && $args[$pos+1] eq '+') { shift @ARGV; if ($rest eq '') { unless (@ARGV) { error("Incomplete option: $first (needs an argument)"); $errs++; } $rest = shift(@ARGV); } eval "push(\@opt_$first, \$rest);"; } else { eval "\$opt_$first = 1"; if ($rest eq '') { shift(@ARGV); } else { $ARGV[0] = "-$rest"; } } } else { error("Unknown option: $first"); $errs++; if ($rest ne '') { $ARGV[0] = "-$rest"; } else { shift(@ARGV); } } } return ($errs == 0, @ARGV); } sub usage { print STDERR "Usage: apxs -g [-S =] -n \n"; print STDERR " apxs -q [-v] [-S =] [ ...]\n"; print STDERR " apxs -c [-S =] [-o ] [-D [=]]\n"; print STDERR " [-I ] [-L ] [-l ] [-Wc,]\n"; print STDERR " [-Wl,] [-p] ...\n"; print STDERR " apxs -i [-S =] [-a] [-A] [-n ] ...\n"; print STDERR " apxs -e [-S =] [-a] [-A] [-n ] ...\n"; exit(1); } # option handling my $rc; ($rc, @ARGV) = &Getopts("qn:gco:I+D+L+l+W+S+eiaApv", @ARGV); &usage if ($rc == 0); &usage if ($#ARGV == -1 and not $opt_g and not $opt_q); &usage if (not $opt_q and not ($opt_g and $opt_n) and not $opt_i and not $opt_c and not $opt_e); # argument handling my @args = @ARGV; my $name = 'unknown'; $name = $opt_n if ($opt_n ne ''); if (@opt_S) { my ($opt_S); foreach $opt_S (@opt_S) { if ($opt_S =~ m/^([^=]+)=(.*)$/) { my ($var) = $1; my ($val) = $2; my $oldval = eval "\$CFG_$var"; unless ($var and $oldval) { print STDERR "apxs:Error: no config variable $var\n"; &usage; } eval "\$CFG_${var}=\"${val}\""; } else { print STDERR "apxs:Error: malformatted -S option\n"; &usage; } } } ## ## Initial shared object support check ## unless ("@MOD_SO_ENABLED@" eq "yes") { error("Sorry, no shared object support for Apache"); error("available under your platform. Make sure"); error("the Apache module mod_so is compiled into"); error("the server binary."); exit 1; } sub get_config_vars{ my ($file, $rh_config) = @_; open IN, $file or die "cannot open $file: $!"; while (){ if (/^\s*(.*?)\s*=\s*(.*)$/){ $rh_config->{$1} = $2; } } close IN; } sub get_vars { my $result = ''; my $ok = 0; my $arg; foreach $arg (@_) { if (exists $config_vars{$arg} or exists $config_vars{lc $arg}) { my $val = exists $config_vars{$arg} ? $config_vars{$arg} : $config_vars{lc $arg}; $val =~ s/[()]//g; $result .= eval "qq($val)" if defined $val; $result .= ";;"; $ok = 1; } if (not $ok) { if (exists $internal_vars{$arg} or exists $internal_vars{lc $arg}) { my $val = exists $internal_vars{$arg} ? $arg : lc $arg; $val = eval "\$CFG_$val"; $result .= eval "qq($val)" if defined $val; $result .= ";;"; $ok = 1; } if (not $ok) { error("Invalid query string `$arg'"); exit(1); } } } $result =~ s|;;$||; return $result; } ## ## Operation ## # helper function for executing a list of # system command with return code checks sub execute_cmds { my (@cmds) = @_; my ($cmd, $rc); foreach $cmd (@cmds) { notice($cmd); $rc = system $cmd; if ($rc) { error(sprintf "Command failed with rc=%d\n", $rc << 8); exit 1 ; } } } if ($opt_g) { ## ## SAMPLE MODULE SOURCE GENERATION ## if (-d $name) { error("Directory `$name' already exists. Remove first"); exit(1); } my $data = join('', ); $data =~ s|%NAME%|$name|sg; $data =~ s|%TARGET%|$CFG_TARGET|sg; $data =~ s|%PREFIX%|$prefix|sg; $data =~ s|%INSTALLBUILDDIR%|$installbuilddir|sg; my ($mkf, $mods, $src) = ($data =~ m|^(.+)-=#=-\n(.+)-=#=-\n(.+)|s); notice("Creating [DIR] $name"); system("mkdir $name"); notice("Creating [FILE] $name/Makefile"); open(FP, ">${name}/Makefile") || die; print FP $mkf; close(FP); notice("Creating [FILE] $name/modules.mk"); open(FP, ">${name}/modules.mk") || die; print FP $mods; close(FP); notice("Creating [FILE] $name/mod_$name.c"); open(FP, ">${name}/mod_${name}.c") || die; print FP $src; close(FP); notice("Creating [FILE] $name/.deps"); system("touch ${name}/.deps"); exit(0); } if ($opt_q) { ## ## QUERY INFORMATION ## my $result; if ($#args >= 0) { $result = get_vars(@args); print "$result\n"; } else { # -q without var name prints all variables and their values # Additional -v pretty-prints output if ($opt_v) { # Variable names in alphabetic order my @vars = sort {uc($a) cmp uc($b)} keys %config_vars; # Make the left column as wide as the longest variable name my $width = 0; foreach (@vars) { my $l = length $_; $width = $l unless ($l <= $width); } foreach (@vars) { printf "%-${width}s = %s\n", $_, $config_vars{$_}; } } else { # Unprettified name=value list foreach (keys %config_vars) { print "$_=$config_vars{$_}\n"; } } } } my $apr_config = get_vars("APR_CONFIG"); if (! -x "$apr_config") { error("$apr_config not found!"); exit(1); } my $apr_major_version = (split /\./, `$apr_config --version`)[0]; my $apu_config = ""; if ($apr_major_version < 2) { $apu_config = get_vars("APU_CONFIG"); if (! -x "$apu_config") { error("$apu_config not found!"); exit(1); } } my $libtool = `$apr_config --apr-libtool`; chomp($libtool); my $apr_includedir = `$apr_config --includes`; chomp($apr_includedir); my $apu_includedir = ""; if ($apr_major_version < 2) { $apu_includedir = `$apu_config --includes`; chomp($apu_includedir); } if ($opt_c) { ## ## SHARED OBJECT COMPILATION ## # split files into sources and objects my @srcs = (); my @objs = (); my $f; foreach $f (@args) { if ($f =~ m|\.c$|) { push(@srcs, $f); } else { push(@objs, $f); } } # determine output file my $dso_file; if ($opt_o eq '') { if ($#srcs > -1) { $dso_file = $srcs[0]; $dso_file =~ s|\.[^.]+$|.la|; } elsif ($#objs > -1) { $dso_file = $objs[0]; $dso_file =~ s|\.[^.]+$|.la|; } else { $dso_file = "mod_unknown.la"; } } else { $dso_file = $opt_o; $dso_file =~ s|\.[^.]+$|.la|; } # create compilation commands my @cmds = (); my $opt = ''; my ($opt_Wc, $opt_I, $opt_D); foreach $opt_Wc (@opt_W) { $opt .= "$1 " if ($opt_Wc =~ m|^\s*c,(.*)$|); } foreach $opt_I (@opt_I) { $opt .= "-I$opt_I "; } foreach $opt_D (@opt_D) { $opt .= "-D$opt_D "; } my $cflags = "$CFG_CFLAGS"; my $s; my $mod; foreach $s (@srcs) { my $slo = $s; $slo =~ s|\.c$|.slo|; my $lo = $s; $lo =~ s|\.c$|.lo|; my $la = $s; $la =~ s|\.c$|.la|; my $o = $s; $o =~ s|\.c$|.o|; push(@cmds, "$libtool $ltflags --mode=compile $CFG_CC $cflags -I$CFG_INCLUDEDIR $apr_includedir $apu_includedir $opt -c -o $lo $s && touch $slo"); unshift(@objs, $lo); } # create link command my $o; my $lo; foreach $o (@objs) { $lo .= " $o"; } my ($opt_Wl, $opt_L, $opt_l); $opt = ''; foreach $opt_Wl (@opt_W) { $opt .= "$1 " if ($opt_Wl =~ m|^\s*l,(.*)$|); } foreach $opt_L (@opt_L) { $opt .= " -L$opt_L"; } foreach $opt_l (@opt_l) { $opt .= " -l$opt_l"; } my $ldflags = "$CFG_LDFLAGS"; if ($opt_p == 1) { my $apr_libs=`$apr_config --cflags --ldflags --link-libtool --libs`; chomp($apr_libs); my $apu_libs=""; if ($apr_major_version < 2) { $apu_libs=`$apu_config --ldflags --link-libtool --libs`; chomp($apu_libs); } $opt .= " ".$apu_libs." ".$apr_libs; } else { my $apr_ldflags=`$apr_config --ldflags`; chomp($apr_ldflags); $opt .= " -rpath $CFG_LIBEXECDIR -module -avoid-version $apr_ldflags"; } push(@cmds, "$libtool $ltflags --mode=link $CFG_CC $ldflags -o $dso_file $opt $lo"); # execute the commands &execute_cmds(@cmds); # allow one-step compilation and installation if ($opt_i or $opt_e) { @args = ( $dso_file ); } } if ($opt_i or $opt_e) { ## ## SHARED OBJECT INSTALLATION ## # determine installation commands # and corresponding LoadModule directive my @lmd = (); my @cmds = (); my $f; foreach $f (@args) { # ack all potential gcc, hp/ux, win32+os2+aix and os/x extensions if ($f !~ m#(\.so$|\.la$|\.sl$|\.dll$|\.dylib$|)#) { error("file $f is not a shared object"); exit(1); } my $t = $f; $t =~ s|^.+/([^/]+)$|$1|; # use .so unambigiously for installed shared library modules $t =~ s|\.[^./\\]+$|\.so|; if ($opt_i) { push(@cmds, "$installbuilddir/instdso.sh SH_LIBTOOL='" . "$libtool' $f $CFG_LIBEXECDIR"); push(@cmds, "chmod 755 $CFG_LIBEXECDIR/$t"); } # determine module symbolname and filename my $filename = ''; if ($name eq 'unknown') { $name = ''; my $base = $f; $base =~ s|\.[^.]+$||; if (-f "$base.c") { open(FP, "<$base.c"); my $content = join('', ); close(FP); if ($content =~ m|.*AP_DECLARE_MODULE\s*\(\s*([a-zA-Z0-9_]+)\s*\)\s*=.*|s || $content =~ m|.*module\s+(?:AP_MODULE_DECLARE_DATA\s+)?([a-zA-Z0-9_]+)_module\s*=\s*.*|s) { $name = "$1"; $filename = "$base.c"; $filename =~ s|^[^/]+/||; } } if ($name eq '') { if ($base =~ m|.*mod_([a-zA-Z0-9_]+)\..+|) { $name = "$1"; $filename = $base; $filename =~ s|^[^/]+/||; } } if ($name eq '') { error("Sorry, cannot determine bootstrap symbol name"); error("Please specify one with option `-n'"); exit(1); } } if ($filename eq '') { $filename = "mod_${name}.c"; } my $dir = $CFG_LIBEXECDIR; $dir =~ s|^$CFG_PREFIX/?||; $dir =~ s|(.)$|$1/|; $t =~ s|\.la$|.so|; push(@lmd, sprintf("LoadModule %-18s %s", "${name}_module", "$dir$t")); } # execute the commands &execute_cmds(@cmds); # activate module via LoadModule/AddModule directive if ($opt_a or $opt_A) { if (not -f "$CFG_SYSCONFDIR/$CFG_TARGET.conf") { error("Config file $CFG_SYSCONFDIR/$CFG_TARGET.conf not found"); exit(1); } open(FP, "<$CFG_SYSCONFDIR/$CFG_TARGET.conf") || die; my $content = join('', ); close(FP); if ($content !~ m|\n#?\s*LoadModule\s+|) { error("Activation failed for custom $CFG_SYSCONFDIR/$CFG_TARGET.conf file."); error("At least one `LoadModule' directive already has to exist."); exit(1); } my $lmd; my $c = ''; $c = '#' if ($opt_A); foreach $lmd (@lmd) { my $what = $opt_A ? "preparing" : "activating"; my $lmd_re = $lmd; $lmd_re =~ s/\s+/\\s+/g; if ($content !~ m|\n#?\s*$lmd_re|) { # check for open , so that the new LoadModule # directive always appears *outside* of an . my $before = ($content =~ m|^(.*\n)#?\s*LoadModule\s+[^\n]+\n|s)[0]; # the '()=' trick forces list context and the scalar # assignment counts the number of list members (aka number # of matches) then my $cntopen = () = ($before =~ m|^\s*<[^/].*$|mg); my $cntclose = () = ($before =~ m|^\s*$CFG_SYSCONFDIR/$CFG_TARGET.conf.new")) { print FP $content; close(FP); system("cp $CFG_SYSCONFDIR/$CFG_TARGET.conf $CFG_SYSCONFDIR/$CFG_TARGET.conf.bak && " . "cp $CFG_SYSCONFDIR/$CFG_TARGET.conf.new $CFG_SYSCONFDIR/$CFG_TARGET.conf && " . "rm $CFG_SYSCONFDIR/$CFG_TARGET.conf.new"); } else { notice("unable to open configuration file"); } } } } sub error{ print STDERR "apxs:Error: $_[0].\n"; } sub notice{ print STDERR "$_[0]\n"; } ##EOF## __DATA__ ## ## Makefile -- Build procedure for sample %NAME% Apache module ## Autogenerated via ``apxs -n %NAME% -g''. ## builddir=. top_srcdir=%PREFIX% top_builddir=%PREFIX% include %INSTALLBUILDDIR%/special.mk # the used tools APACHECTL=apachectl # additional defines, includes and libraries #DEFS=-Dmy_define=my_value #INCLUDES=-Imy/include/dir #LIBS=-Lmy/lib/dir -lmylib # the default target all: local-shared-build # install the shared object file into Apache install: install-modules-yes # cleanup clean: -rm -f mod_%NAME%.o mod_%NAME%.lo mod_%NAME%.slo mod_%NAME%.la # simple test test: reload lynx -mime_header http://localhost/%NAME% # install and activate shared object by reloading Apache to # force a reload of the shared object file reload: install restart # the general Apache start/restart/stop # procedures start: $(APACHECTL) start restart: $(APACHECTL) restart stop: $(APACHECTL) stop -=#=- mod_%NAME%.la: mod_%NAME%.slo $(SH_LINK) -rpath $(libexecdir) -module -avoid-version mod_%NAME%.lo DISTCLEAN_TARGETS = modules.mk shared = mod_%NAME%.la -=#=- /* ** mod_%NAME%.c -- Apache sample %NAME% module ** [Autogenerated via ``apxs -n %NAME% -g''] ** ** To play with this sample module first compile it into a ** DSO file and install it into Apache's modules directory ** by running: ** ** $ apxs -c -i mod_%NAME%.c ** ** Then activate it in Apache's %TARGET%.conf file for instance ** for the URL /%NAME% in as follows: ** ** # %TARGET%.conf ** LoadModule %NAME%_module modules/mod_%NAME%.so ** ** SetHandler %NAME% ** ** ** Then after restarting Apache via ** ** $ apachectl restart ** ** you immediately can request the URL /%NAME% and watch for the ** output of this module. This can be achieved for instance via: ** ** $ lynx -mime_header http://localhost/%NAME% ** ** The output should be similar to the following one: ** ** HTTP/1.1 200 OK ** Date: Tue, 31 Mar 1998 14:42:22 GMT ** Server: Apache/1.3.4 (Unix) ** Connection: close ** Content-Type: text/html ** ** The sample page from mod_%NAME%.c */ #include "httpd.h" #include "http_config.h" #include "http_protocol.h" #include "ap_config.h" /* The sample content handler */ static int %NAME%_handler(request_rec *r) { if (strcmp(r->handler, "%NAME%")) { return DECLINED; } r->content_type = "text/html"; if (!r->header_only) ap_rputs("The sample page from mod_%NAME%.c\n", r); return OK; } static void %NAME%_register_hooks(apr_pool_t *p) { ap_hook_handler(%NAME%_handler, NULL, NULL, APR_HOOK_MIDDLE); } /* Dispatch list for API hooks */ module AP_MODULE_DECLARE_DATA %NAME%_module = { STANDARD20_MODULE_STUFF, NULL, /* create per-dir config structures */ NULL, /* merge per-dir config structures */ NULL, /* create per-server config structures */ NULL, /* merge per-server config structures */ NULL, /* table of config file commands */ %NAME%_register_hooks /* register hooks */ }; httpd-2.4.41/support/NWGNUhttxt2dbm0000644000000000000500000001045711540546347015452 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(NWOS) \ $(APR)/include \ $(APRUTIL)/include \ $(APR)/misc/netware \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = httxt2dbm # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) HT Text to DBM Conversion Utility for NetWare # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = httxt2dbm # # This is used by the '-screenname' directive. If left blank, # 'Apache for NetWare' Thread will be used. # NLM_SCREEN_NAME = httxt2dbm Conversion Utility # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = AUTOUNLOAD, PSEUDOPREEMPTION # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/httxt2dbm.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/httxt2dbm.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/support/htdbm.dep0000644000000000000500000000372412674411515014554 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by htdbm.mak .\htdbm.c : \ "..\srclib\apr-util\include\apr_dbm.h"\ "..\srclib\apr-util\include\apr_md5.h"\ "..\srclib\apr-util\include\apr_sha1.h"\ "..\srclib\apr-util\include\apr_xlate.h"\ "..\srclib\apr-util\include\apu.h"\ "..\srclib\apr-util\include\apu_version.h"\ "..\srclib\apr\include\apr.h"\ "..\srclib\apr\include\apr_allocator.h"\ "..\srclib\apr\include\apr_errno.h"\ "..\srclib\apr\include\apr_file_info.h"\ "..\srclib\apr\include\apr_file_io.h"\ "..\srclib\apr\include\apr_general.h"\ "..\srclib\apr\include\apr_getopt.h"\ "..\srclib\apr\include\apr_inherit.h"\ "..\srclib\apr\include\apr_lib.h"\ "..\srclib\apr\include\apr_pools.h"\ "..\srclib\apr\include\apr_signal.h"\ "..\srclib\apr\include\apr_strings.h"\ "..\srclib\apr\include\apr_tables.h"\ "..\srclib\apr\include\apr_thread_mutex.h"\ "..\srclib\apr\include\apr_time.h"\ "..\srclib\apr\include\apr_user.h"\ "..\srclib\apr\include\apr_version.h"\ "..\srclib\apr\include\apr_want.h"\ ".\passwd_common.h"\ ..\build\win32\httpd.rc : \ "..\include\ap_release.h"\ .\passwd_common.c : \ "..\srclib\apr-util\include\apr_md5.h"\ "..\srclib\apr-util\include\apr_sha1.h"\ "..\srclib\apr-util\include\apr_xlate.h"\ "..\srclib\apr-util\include\apu.h"\ "..\srclib\apr-util\include\apu_version.h"\ "..\srclib\apr\include\apr.h"\ "..\srclib\apr\include\apr_allocator.h"\ "..\srclib\apr\include\apr_errno.h"\ "..\srclib\apr\include\apr_file_info.h"\ "..\srclib\apr\include\apr_file_io.h"\ "..\srclib\apr\include\apr_general.h"\ "..\srclib\apr\include\apr_inherit.h"\ "..\srclib\apr\include\apr_lib.h"\ "..\srclib\apr\include\apr_pools.h"\ "..\srclib\apr\include\apr_strings.h"\ "..\srclib\apr\include\apr_tables.h"\ "..\srclib\apr\include\apr_thread_mutex.h"\ "..\srclib\apr\include\apr_time.h"\ "..\srclib\apr\include\apr_user.h"\ "..\srclib\apr\include\apr_version.h"\ "..\srclib\apr\include\apr_want.h"\ ".\passwd_common.h"\ httpd-2.4.41/support/htdbm.mak0000644000000000000500000002042512701473373014552 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on htdbm.dsp !IF "$(CFG)" == "" CFG=htdbm - Win32 Debug !MESSAGE No configuration specified. Defaulting to htdbm - Win32 Debug. !ENDIF !IF "$(CFG)" != "htdbm - Win32 Release" && "$(CFG)" != "htdbm - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "htdbm.mak" CFG="htdbm - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "htdbm - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "htdbm - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "htdbm - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\htdbm.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Release" "apr - Win32 Release" "$(OUTDIR)\htdbm.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 ReleaseCLEAN" "aprutil - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\htdbm.obj" -@erase "$(INTDIR)\htdbm.res" -@erase "$(INTDIR)\htdbm_src.idb" -@erase "$(INTDIR)\htdbm_src.pdb" -@erase "$(INTDIR)\passwd_common.obj" -@erase "$(OUTDIR)\htdbm.exe" -@erase "$(OUTDIR)\htdbm.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\htdbm_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\htdbm.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="htdbm.exe" /d LONG_NAME="Apache htdbm command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\htdbm.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\htdbm.pdb" /debug /out:"$(OUTDIR)\htdbm.exe" /opt:ref LINK32_OBJS= \ "$(INTDIR)\htdbm.obj" \ "$(INTDIR)\passwd_common.obj" \ "$(INTDIR)\htdbm.res" \ "..\srclib\apr\LibR\apr-1.lib" \ "..\srclib\apr-util\LibR\aprutil-1.lib" "$(OUTDIR)\htdbm.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\htdbm.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\htdbm.exe" if exist .\Release\htdbm.exe.manifest mt.exe -manifest .\Release\htdbm.exe.manifest -outputresource:.\Release\htdbm.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "htdbm - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\htdbm.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Debug" "apr - Win32 Debug" "$(OUTDIR)\htdbm.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 DebugCLEAN" "aprutil - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\htdbm.obj" -@erase "$(INTDIR)\htdbm.res" -@erase "$(INTDIR)\htdbm_src.idb" -@erase "$(INTDIR)\htdbm_src.pdb" -@erase "$(INTDIR)\passwd_common.obj" -@erase "$(OUTDIR)\htdbm.exe" -@erase "$(OUTDIR)\htdbm.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\htdbm_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\htdbm.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="htdbm.exe" /d LONG_NAME="Apache htdbm command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\htdbm.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\htdbm.pdb" /debug /out:"$(OUTDIR)\htdbm.exe" LINK32_OBJS= \ "$(INTDIR)\htdbm.obj" \ "$(INTDIR)\passwd_common.obj" \ "$(INTDIR)\htdbm.res" \ "..\srclib\apr\LibD\apr-1.lib" \ "..\srclib\apr-util\LibD\aprutil-1.lib" "$(OUTDIR)\htdbm.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\htdbm.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\htdbm.exe" if exist .\Debug\htdbm.exe.manifest mt.exe -manifest .\Debug\htdbm.exe.manifest -outputresource:.\Debug\htdbm.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("htdbm.dep") !INCLUDE "htdbm.dep" !ELSE !MESSAGE Warning: cannot find "htdbm.dep" !ENDIF !ENDIF !IF "$(CFG)" == "htdbm - Win32 Release" || "$(CFG)" == "htdbm - Win32 Debug" !IF "$(CFG)" == "htdbm - Win32 Release" "apr - Win32 Release" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" cd "..\..\support" "apr - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "htdbm - Win32 Debug" "apr - Win32 Debug" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" cd "..\..\support" "apr - Win32 DebugCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF !IF "$(CFG)" == "htdbm - Win32 Release" "aprutil - Win32 Release" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" cd "..\..\support" "aprutil - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "htdbm - Win32 Debug" "aprutil - Win32 Debug" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" cd "..\..\support" "aprutil - Win32 DebugCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF SOURCE=.\htdbm.c "$(INTDIR)\htdbm.obj" : $(SOURCE) "$(INTDIR)" SOURCE=..\build\win32\httpd.rc !IF "$(CFG)" == "htdbm - Win32 Release" "$(INTDIR)\htdbm.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\htdbm.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="htdbm.exe" /d LONG_NAME="Apache htdbm command line utility" $(SOURCE) !ELSEIF "$(CFG)" == "htdbm - Win32 Debug" "$(INTDIR)\htdbm.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\htdbm.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="htdbm.exe" /d LONG_NAME="Apache htdbm command line utility" $(SOURCE) !ENDIF SOURCE=.\passwd_common.c "$(INTDIR)\passwd_common.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/support/logresolve.dsp0000644000000000000500000001037612520036522015645 0ustar rootsrc# Microsoft Developer Studio Project File - Name="logresolve" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Console Application" 0x0103 CFG=logresolve - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "logresolve.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "logresolve.mak" CFG="logresolve - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "logresolve - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "logresolve - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe RSC=rc.exe !IF "$(CFG)" == "logresolve - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Release/logresolve_src" /FD /c # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/logresolve.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="logresolve.exe" /d LONG_NAME="Apache logresolve command line pipe" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /debug /opt:ref # Begin Special Build Tool TargetPath=.\Release\logresolve.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ELSEIF "$(CFG)" == "logresolve - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Debug/logresolve_src" /FD /c # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/logresolve.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="logresolve.exe" /d LONG_NAME="Apache logresolve command line pipe" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # Begin Special Build Tool TargetPath=.\Debug\logresolve.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ENDIF # Begin Target # Name "logresolve - Win32 Release" # Name "logresolve - Win32 Debug" # Begin Source File SOURCE=.\logresolve.c # End Source File # Begin Source File SOURCE=..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/support/ab.dsp0000644000000000000500000001016612520036522014043 0ustar rootsrc# Microsoft Developer Studio Project File - Name="ab" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Console Application" 0x0103 CFG=ab - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "ab.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "ab.mak" CFG="ab - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "ab - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "ab - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe RSC=rc.exe !IF "$(CFG)" == "ab - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../srclib/apr/include" /I "../srclib/apr-util/include" /I "../include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Release/ab_src" /FD /c # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/ab.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="ab.exe" /d LONG_NAME="ApacheBench command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib user32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /debug /opt:ref # Begin Special Build Tool TargetPath=.\Release\ab.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ELSEIF "$(CFG)" == "ab - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /I "../include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Debug/ab_src" /FD /c # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/ab.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="ab.exe" /d LONG_NAME="ApacheBench command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # Begin Special Build Tool TargetPath=.\Debug\ab.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ENDIF # Begin Target # Name "ab - Win32 Release" # Name "ab - Win32 Debug" # Begin Source File SOURCE=.\ab.c # End Source File # Begin Source File SOURCE=..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/support/httxt2dbm.dsp0000644000000000000500000001035612520036522015402 0ustar rootsrc# Microsoft Developer Studio Project File - Name="httxt2dbm" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Console Application" 0x0103 CFG=httxt2dbm - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "httxt2dbm.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "httxt2dbm.mak" CFG="httxt2dbm - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "httxt2dbm - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "httxt2dbm - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe RSC=rc.exe !IF "$(CFG)" == "httxt2dbm - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Release/httxt2dbm_src" /FD /c # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/httxt2dbm.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="httxt2dbm.exe" /d LONG_NAME="Apache httxt2dbm command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /debug /opt:ref # Begin Special Build Tool TargetPath=.\Release\httxt2dbm.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ELSEIF "$(CFG)" == "httxt2dbm - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Debug/httxt2dbm_src" /FD /c # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/httxt2dbm.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="httxt2dbm.exe" /d LONG_NAME="Apache httxt2dbm command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # Begin Special Build Tool TargetPath=.\Debug\httxt2dbm.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ENDIF # Begin Target # Name "httxt2dbm - Win32 Release" # Name "httxt2dbm - Win32 Debug" # Begin Source File SOURCE=.\httxt2dbm.c # End Source File # Begin Source File SOURCE=..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/support/NWGNUrotlogs0000644000000000000500000001041211540546347015212 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(NWOS) \ $(APR)/include \ $(APR)/misc/netware \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = rotlogs # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Log Rotation Utility for NetWare # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = rotlogs # # This is used by the '-screenname' directive. If left blank, # 'Apache for NetWare' Thread will be used. # NLM_SCREEN_NAME = DEFAULT # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 98304 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = AUTOUNLOAD, PSEUDOPREEMPTION, MULTIPLE # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/rotlogs.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/rotatelogs.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/support/win32/0002755000000000000500000000000013523273343013721 5ustar rootsrchttpd-2.4.41/support/win32/ApacheMonitor.ico0000644000000000000500000000206610150161574017143 0ustar rootsrc è&(( @€€€€€€€€€ÀÀÀ€€€ÿÿÿÿÿÿÿÿÿÿÿÿ™™™™™ÿÿ™ÿ÷ÿÿÿÿÿñ™óÿÿÿñ™ÿÿ?ÿÿÿðÿôD÷ÿô?ÿÿÿôóÿÿ‘™ÿôÿÿñ™ ÿÿÿÿñ™Ýÿðÿ ™ÝA™ÿÿ™™ÝDM™™ ™ÔDÝ‘™™‘ ÔMÙ™™ÝDÝ™ ÔDÝ ÝDÝ™™ÐM™™ÐM™ÐÕÙÐÕÙ;=™»X»X»ÿÿÿÿÿÿàÿÿ€ÿÿÿþÿüÿüÿøÿøÿøÿøÿøÿðÿàÿÀÿ€ÿþ?þ üÿÿøÿÿøÿÿðÿÿðÿÿà?ÿÿà?ÿÿÀÿÿÿƒÿÿÿƒÿÿÿÿÿÿÿÿÿÿÿÿÿÿ( À€€€€€€€€€ÀÀÀ€€€ÿÿÿÿÿÿÿÿÿÿÿÿ™™ø‘ÿÿ‘ ø‘™øÿ‘ ø‘™Ô™™DÙ ÐM™ ÙM™ÙU»Y»PÿÃÎÿÎÿÿþüøððà?àÀÿÃÿÿÿ‡ÿÿ ÿÎhttpd-2.4.41/support/win32/wintty.dsp0000644000000000000500000001011711023777214015764 0ustar rootsrc# Microsoft Developer Studio Project File - Name="wintty" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Console Application" 0x0103 CFG=wintty - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "wintty.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "wintty.mak" CFG="wintty - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "wintty - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "wintty - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe RSC=rc.exe !IF "$(CFG)" == "wintty - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Release/wintty_src" /FD /c # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/wintty.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="wintty.exe" /d LONG_NAME="Apache wintty console pipe" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib user32.lib advapi32.lib shell32.lib /nologo /subsystem:console # ADD LINK32 kernel32.lib user32.lib advapi32.lib shell32.lib /nologo /subsystem:console /debug /opt:ref # Begin Special Build Tool TargetPath=.\Release\wintty.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ELSEIF "$(CFG)" == "wintty - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Debug/wintty_src" /FD /c # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/wintty.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="wintty.exe" /d LONG_NAME="Apache wintty console pipe" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib user32.lib advapi32.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # ADD LINK32 kernel32.lib user32.lib advapi32.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # Begin Special Build Tool TargetPath=.\Debug\wintty.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ENDIF # Begin Target # Name "wintty - Win32 Release" # Name "wintty - Win32 Debug" # Begin Source File SOURCE=.\wintty.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/support/win32/wintty.c0000644000000000000500000003175710455005461015431 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* -------------------------------------------------------------------- * * wintty : a Apache/WinNT support utility for monitoring and * reflecting user feedback from the Apache process via * stdin/stdout, even as running within the service context. * * Originally contributed by William Rowe * * Note: this implementation is _very_ experimental, and error handling * is far from complete. Using it as a cgi or pipe process allows the * programmer to discover if facilities such as reliable piped logs * are working as expected, or answer operator prompts that would * otherwise be discarded by the service process. * * Also note the isservice detection semantics, which far exceed any * mechanism we have discovered thus far. * * -------------------------------------------------------------------- */ #define WIN32_LEAN_AND_MEAN #include #include #include #if defined(_MSC_VER) && _MSC_VER >= 1400 #define _CRT_SECURE_NO_DEPRECATE #pragma warning(disable: 4996) #endif const char *options = "\nwintty: a utility for echoing the stdin stream to a new console window,\n" "\teven when invoked from within a service (such as the Apache server.)\n" "\tAlso reflects the console input back to the stdout stream, allowing\n" "\tthe operator to respond to prompts from the context of a service.\n\n" "Syntax: %s [opts] [-t \"Window Title\"]\n\n" " opts: -c{haracter} or -l{ine} input\n" "\t-q{uiet} or -e{cho} input\n" "\t-u{nprocessed} or -p{rocessed} input\n" "\t-n{owrap} or -w{rap} output lines\n" "\t-f{ormatted} or -r{aw} output lines\n" "\t-O{output} [number of seconds]\n" "\t-v{erbose} error reporting (for debugging)\n" "\t-? for this message\n\n"; BOOL verbose = FALSE; void printerr(char *fmt, ...) { char str[1024]; va_list args; if (!verbose) return; va_start(args, fmt); wvsprintf(str, fmt, args); OutputDebugString(str); } DWORD WINAPI feedback(LPVOID args); typedef struct feedback_args_t { HANDLE in; HANDLE out; } feedback_args_t; int main(int argc, char** argv) { char str[1024], *contitle = NULL; HANDLE hproc, thread; HANDLE hwinsta = NULL, hsavewinsta; HANDLE hdesk = NULL, hsavedesk = NULL; HANDLE conin, conout; HANDLE hstdin, hstdout, hstderr, hdup; feedback_args_t feed; DWORD conmode; DWORD newinmode = 0, notinmode = 0; DWORD newoutmode = 0, notoutmode = 0; DWORD tid; DWORD len; DWORD timeout = INFINITE; BOOL isservice = FALSE; char *arg0 = argv[0]; while (--argc) { ++argv; if (**argv == '/' || **argv == '-') { switch (tolower((*argv)[1])) { case 'c': notinmode |= ENABLE_LINE_INPUT; break; case 'l': newinmode |= ENABLE_LINE_INPUT; break; case 'q': notinmode |= ENABLE_ECHO_INPUT; break; case 'e': newinmode |= ENABLE_ECHO_INPUT; break; case 'u': notinmode |= ENABLE_PROCESSED_INPUT; break; case 'p': newinmode |= ENABLE_PROCESSED_INPUT; break; case 'n': notoutmode |= ENABLE_WRAP_AT_EOL_OUTPUT; break; case 'w': newoutmode |= ENABLE_WRAP_AT_EOL_OUTPUT; break; case 'r': notoutmode |= ENABLE_PROCESSED_OUTPUT; break; case 'f': newoutmode |= ENABLE_PROCESSED_OUTPUT; break; case 'o': if (*(argv + 1) && *(argv + 1)[0] != '-') { *(++argv); timeout = atoi(*argv) / 1000; --argc; } else { timeout = 0; } break; case 'v': verbose = TRUE; break; case 't': contitle = *(++argv); --argc; break; case '?': printf(options, arg0); exit(1); default: printf("wintty option %s not recognized, use -? for help.\n\n", *argv); exit(1); } } else { printf("wintty argument %s not understood, use -? for help.\n\n", *argv); exit(1); } } hproc = GetCurrentProcess(); hsavewinsta = GetProcessWindowStation(); if (!hsavewinsta || hsavewinsta == INVALID_HANDLE_VALUE) { printerr("GetProcessWindowStation() failed (%d)\n", GetLastError()); } else if (!GetUserObjectInformation(hsavewinsta, UOI_NAME, str, sizeof(str), &len)) { printerr("GetUserObjectInfoformation(hWinSta) failed (%d)\n", GetLastError()); } else if (strnicmp(str, "Service-", 8) == 0) { printerr("WindowStation Name %s is a service\n", str); isservice = TRUE; } SetLastError(0); hstdin = GetStdHandle(STD_INPUT_HANDLE); if (!hstdin || hstdin == INVALID_HANDLE_VALUE) { printerr("GetStdHandle(STD_INPUT_HANDLE) failed (%d)\n", GetLastError()); } else if (DuplicateHandle(hproc, hstdin, hproc, &hdup, 0, isservice, DUPLICATE_SAME_ACCESS)) { CloseHandle(hstdin); hstdin = hdup; } else { printerr("DupHandle(stdin [%x]) failed (%d)\n", hstdin, GetLastError()); } hstdout = GetStdHandle(STD_OUTPUT_HANDLE); if (!hstdout || hstdout == INVALID_HANDLE_VALUE) { printerr("GetStdHandle(STD_OUTPUT_HANDLE) failed (%d)\n", GetLastError()); } else if (DuplicateHandle(hproc, hstdout, hproc, &hdup, 0, isservice, DUPLICATE_SAME_ACCESS)) { CloseHandle(hstdout); hstdout = hdup; } else { printerr("DupHandle(stdout [%x]) failed (%d)\n", hstdout, GetLastError()); } hstderr = GetStdHandle(STD_ERROR_HANDLE); if (!hstderr || hstderr == INVALID_HANDLE_VALUE) { printerr("GetStdHandle(STD_ERROR_HANDLE) failed (%d)\n", GetLastError()); } else if (DuplicateHandle(hproc, hstderr, hproc, &hdup, 0, isservice, DUPLICATE_SAME_ACCESS)) { CloseHandle(hstderr); hstderr = hdup; } else { printerr("DupHandle(stderr [%x]) failed (%d)\n", hstderr, GetLastError()); } /* You can't close the console till all the handles above were * rescued by DuplicateHandle() */ if (!FreeConsole()) printerr("FreeConsole() failed (%d)\n", GetLastError()); if (isservice) { #ifdef WE_EVER_FIGURE_OUT_WHY_THIS_DOESNT_WORK hsavedesk = GetThreadDesktop(GetCurrentThreadId()); if (!hsavedesk || hsavedesk == INVALID_HANDLE_VALUE) { printerr("GetThreadDesktop(GetTID()) failed (%d)\n", GetLastError()); } CloseWindowStation(hwinsta); hwinsta = OpenWindowStation("WinSta0", TRUE, MAXIMUM_ALLOWED); if (!hwinsta || hwinsta == INVALID_HANDLE_VALUE) { printerr("OpenWinSta(WinSta0) failed (%d)\n", GetLastError()); } else if (!SetProcessWindowStation(hwinsta)) { printerr("SetProcWinSta(WinSta0) failed (%d)\n", GetLastError()); } hdesk = OpenDesktop("Default", 0, TRUE, MAXIMUM_ALLOWED); if (!hdesk || hdesk == INVALID_HANDLE_VALUE) { printerr("OpenDesktop(Default) failed (%d)\n", GetLastError()); } else if (!SetThreadDesktop(hdesk)) { printerr("SetThreadDesktop(Default) failed (%d)\n", GetLastError()); } #else PROCESS_INFORMATION pi; STARTUPINFO si; DWORD exitcode = 1; char appbuff[MAX_PATH]; char *appname = NULL; char *cmdline = GetCommandLine(); if (!GetModuleFileName(NULL, appbuff, sizeof(appbuff))) { appname = appbuff; } memset(&si, 0, sizeof(si)); si.cb = sizeof(si); si.dwFlags = STARTF_USESHOWWINDOW | STARTF_USESTDHANDLES; si.lpDesktop = "WinSta0\\Default"; si.wShowWindow = 1; /* SW_SHOWNORMAL */ si.hStdInput = hstdin; si.hStdOutput = hstdout; si.hStdError = hstderr; /* Instantly, upon creating the new process, we will close our * copies of the handles so our parent isn't confused when the * child closes their copy of the handle. Without this action, * we would hold a copy of the handle, and the parent would not * receive their EOF notification. */ if (CreateProcess(appname, cmdline, NULL, NULL, TRUE, CREATE_SUSPENDED | CREATE_NEW_CONSOLE, NULL, NULL, &si, &pi)) { CloseHandle(si.hStdInput); CloseHandle(si.hStdOutput); CloseHandle(si.hStdError); ResumeThread(pi.hThread); CloseHandle(pi.hThread); WaitForSingleObject(pi.hProcess, INFINITE); GetExitCodeProcess(pi.hProcess, &exitcode); CloseHandle(pi.hProcess); return exitcode; } return 1; #endif } if (!AllocConsole()) { printerr("AllocConsole(Default) failed (%d)\n", GetLastError()); } if (contitle && !SetConsoleTitle(contitle)) { printerr("SetConsoleTitle() failed (%d)\n", GetLastError()); } conout = CreateFile("CONOUT$", GENERIC_READ | GENERIC_WRITE, FILE_SHARE_READ | FILE_SHARE_WRITE, FALSE, OPEN_EXISTING, 0, NULL); if (!conout || conout == INVALID_HANDLE_VALUE) { printerr("CreateFile(CONOUT$) failed (%d)\n", GetLastError()); } else if (!GetConsoleMode(conout, &conmode)) { printerr("GetConsoleMode(CONOUT) failed (%d)\n", GetLastError()); } else if (!SetConsoleMode(conout, conmode = ((conmode | newoutmode) & ~notoutmode))) { printerr("SetConsoleMode(CONOUT, 0x%x) failed (%d)\n", conmode, GetLastError()); } conin = CreateFile("CONIN$", GENERIC_READ | GENERIC_WRITE, FILE_SHARE_READ | FILE_SHARE_WRITE, FALSE, OPEN_EXISTING, 0, NULL); if (!conin || conin == INVALID_HANDLE_VALUE) { printerr("CreateFile(CONIN$) failed (%d)\n", GetLastError()); } else if (!GetConsoleMode(conin, &conmode)) { printerr("GetConsoleMode(CONIN) failed (%d)\n", GetLastError()); } else if (!SetConsoleMode(conin, conmode = ((conmode | newinmode) & ~notinmode))) { printerr("SetConsoleMode(CONIN, 0x%x) failed (%d)\n", conmode, GetLastError()); } feed.in = conin; feed.out = hstdout; thread = CreateThread(NULL, 0, feedback, (LPVOID)&feed, 0, &tid); while (ReadFile(hstdin, str, sizeof(str), &len, NULL)) if (!len || !WriteFile(conout, str, len, &len, NULL)) break; printerr("[EOF] from stdin (%d)\n", GetLastError()); CloseHandle(stdout); if (!GetConsoleTitle(str, sizeof(str))) { printerr("SetConsoleTitle() failed (%d)\n", GetLastError()); } else { strcat(str, " - [Finished]"); if (!SetConsoleTitle(str)) { printerr("SetConsoleTitle() failed (%d)\n", GetLastError()); } } WaitForSingleObject(thread, timeout); FreeConsole(); if (isservice) { if (!SetProcessWindowStation(hsavewinsta)) { len = GetLastError(); } if (!SetThreadDesktop(hsavedesk)) { len = GetLastError(); } CloseDesktop(hdesk); CloseWindowStation(hwinsta); } return 0; } DWORD WINAPI feedback(LPVOID arg) { feedback_args_t *feed = (feedback_args_t*)arg; char *str[1024]; DWORD len; while (ReadFile(feed->in, str, sizeof(str), &len, NULL)) if (!len || !WriteFile(feed->out, str, len, &len, NULL)) break; printerr("[EOF] from Console (%d)\n", GetLastError()); return 0; } httpd-2.4.41/support/win32/apstop.ico0000644000000000000500000000047610150161574015723 0ustar rootsrc(( €€€€€€€€€€€€€ÀÀÀÿÿÿÿÿÿÿÿÿÿÿÿÿÿðÿÿÿÿÿÿÿðÿù™ÿðÿù™ÿðÿù™ÿð—ÿÿÿÿðÿÿÿ ÐGÿÿð ÙwwpM™ÙU»Y»PÿÎþÎüudøFøøàøððÄààÀÿÜÃÿâ‡ÿÿÿ{httpd-2.4.41/support/win32/ApacheMonitor.mak0000644000000000000500000002013712674411515017146 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on ApacheMonitor.dsp !IF "$(CFG)" == "" CFG=ApacheMonitor - Win32 Debug !MESSAGE No configuration specified. Defaulting to ApacheMonitor - Win32 Debug. !ENDIF !IF "$(CFG)" != "ApacheMonitor - Win32 Release" && "$(CFG)" != "ApacheMonitor - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "ApacheMonitor.mak" CFG="ApacheMonitor - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "ApacheMonitor - Win32 Release" (based on "Win32 (x86) Application") !MESSAGE "ApacheMonitor - Win32 Debug" (based on "Win32 (x86) Application") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "ApacheMonitor - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\ApacheMonitor.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Release" "apr - Win32 Release" "$(OUTDIR)\ApacheMonitor.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 ReleaseCLEAN" "aprutil - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\ApacheMonitor.obj" -@erase "$(INTDIR)\ApacheMonitor.res" -@erase "$(INTDIR)\ApacheMonitor_src.idb" -@erase "$(INTDIR)\ApacheMonitor_src.pdb" -@erase "$(OUTDIR)\ApacheMonitor.exe" -@erase "$(OUTDIR)\ApacheMonitor.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "_MBCS" /D "STRICT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\ApacheMonitor_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\ApacheMonitor.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\ApacheMonitor.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib user32.lib gdi32.lib comctl32.lib comdlg32.lib advapi32.lib shell32.lib ole32.lib wtsapi32.lib /nologo /subsystem:windows /incremental:no /pdb:"$(OUTDIR)\ApacheMonitor.pdb" /debug /out:"$(OUTDIR)\ApacheMonitor.exe" /opt:ref LINK32_OBJS= \ "$(INTDIR)\ApacheMonitor.obj" \ "$(INTDIR)\ApacheMonitor.res" \ "..\..\srclib\apr\LibR\apr-1.lib" \ "..\..\srclib\apr-util\LibR\aprutil-1.lib" "$(OUTDIR)\ApacheMonitor.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\ApacheMonitor.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\ApacheMonitor.exe" if exist .\Release\ApacheMonitor.exe.manifest mt.exe -manifest .\Release\ApacheMonitor.exe.manifest -outputresource:.\Release\ApacheMonitor.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "ApacheMonitor - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\ApacheMonitor.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Debug" "apr - Win32 Debug" "$(OUTDIR)\ApacheMonitor.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 DebugCLEAN" "aprutil - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\ApacheMonitor.obj" -@erase "$(INTDIR)\ApacheMonitor.res" -@erase "$(INTDIR)\ApacheMonitor_src.idb" -@erase "$(INTDIR)\ApacheMonitor_src.pdb" -@erase "$(OUTDIR)\ApacheMonitor.exe" -@erase "$(OUTDIR)\ApacheMonitor.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Gm /Zi /Od /I "../../include" /I "../../srclib/apr/include" /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /D "_MBCS" /D "STRICT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\ApacheMonitor_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\ApacheMonitor.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\ApacheMonitor.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib user32.lib gdi32.lib comctl32.lib comdlg32.lib advapi32.lib shell32.lib ole32.lib wtsapi32.lib /nologo /subsystem:windows /incremental:no /pdb:"$(OUTDIR)\ApacheMonitor.pdb" /debug /out:"$(OUTDIR)\ApacheMonitor.exe" LINK32_OBJS= \ "$(INTDIR)\ApacheMonitor.obj" \ "$(INTDIR)\ApacheMonitor.res" \ "..\..\srclib\apr\LibD\apr-1.lib" \ "..\..\srclib\apr-util\LibD\aprutil-1.lib" "$(OUTDIR)\ApacheMonitor.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\ApacheMonitor.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\ApacheMonitor.exe" if exist .\Debug\ApacheMonitor.exe.manifest mt.exe -manifest .\Debug\ApacheMonitor.exe.manifest -outputresource:.\Debug\ApacheMonitor.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("ApacheMonitor.dep") !INCLUDE "ApacheMonitor.dep" !ELSE !MESSAGE Warning: cannot find "ApacheMonitor.dep" !ENDIF !ENDIF !IF "$(CFG)" == "ApacheMonitor - Win32 Release" || "$(CFG)" == "ApacheMonitor - Win32 Debug" !IF "$(CFG)" == "ApacheMonitor - Win32 Release" "apr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" cd "..\..\support\win32" "apr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" RECURSE=1 CLEAN cd "..\..\support\win32" !ELSEIF "$(CFG)" == "ApacheMonitor - Win32 Debug" "apr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" cd "..\..\support\win32" "apr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support\win32" !ENDIF !IF "$(CFG)" == "ApacheMonitor - Win32 Release" "aprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" cd "..\..\support\win32" "aprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\support\win32" !ELSEIF "$(CFG)" == "ApacheMonitor - Win32 Debug" "aprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" cd "..\..\support\win32" "aprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support\win32" !ENDIF SOURCE=.\ApacheMonitor.c "$(INTDIR)\ApacheMonitor.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ApacheMonitor.rc "$(INTDIR)\ApacheMonitor.res" : $(SOURCE) "$(INTDIR)" $(RSC) $(RSC_PROJ) $(SOURCE) !ENDIF httpd-2.4.41/support/win32/wintty.mak0000644000000000000500000002025012701473373015750 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on wintty.dsp !IF "$(CFG)" == "" CFG=wintty - Win32 Debug !MESSAGE No configuration specified. Defaulting to wintty - Win32 Debug. !ENDIF !IF "$(CFG)" != "wintty - Win32 Release" && "$(CFG)" != "wintty - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "wintty.mak" CFG="wintty - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "wintty - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "wintty - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "wintty - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\wintty.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Release" "apr - Win32 Release" "$(OUTDIR)\wintty.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 ReleaseCLEAN" "aprutil - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\wintty.obj" -@erase "$(INTDIR)\wintty.res" -@erase "$(INTDIR)\wintty_src.idb" -@erase "$(INTDIR)\wintty_src.pdb" -@erase "$(OUTDIR)\wintty.exe" -@erase "$(OUTDIR)\wintty.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\wintty_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\wintty.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="wintty.exe" /d LONG_NAME="Apache wintty console pipe" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\wintty.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib user32.lib advapi32.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\wintty.pdb" /debug /out:"$(OUTDIR)\wintty.exe" /opt:ref LINK32_OBJS= \ "$(INTDIR)\wintty.obj" \ "$(INTDIR)\wintty.res" \ "..\..\srclib\apr\LibR\apr-1.lib" \ "..\..\srclib\apr-util\LibR\aprutil-1.lib" "$(OUTDIR)\wintty.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\wintty.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\wintty.exe" if exist .\Release\wintty.exe.manifest mt.exe -manifest .\Release\wintty.exe.manifest -outputresource:.\Release\wintty.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "wintty - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\wintty.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Debug" "apr - Win32 Debug" "$(OUTDIR)\wintty.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 DebugCLEAN" "aprutil - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\wintty.obj" -@erase "$(INTDIR)\wintty.res" -@erase "$(INTDIR)\wintty_src.idb" -@erase "$(INTDIR)\wintty_src.pdb" -@erase "$(OUTDIR)\wintty.exe" -@erase "$(OUTDIR)\wintty.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\wintty_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\wintty.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="wintty.exe" /d LONG_NAME="Apache wintty console pipe" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\wintty.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib user32.lib advapi32.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\wintty.pdb" /debug /out:"$(OUTDIR)\wintty.exe" LINK32_OBJS= \ "$(INTDIR)\wintty.obj" \ "$(INTDIR)\wintty.res" \ "..\..\srclib\apr\LibD\apr-1.lib" \ "..\..\srclib\apr-util\LibD\aprutil-1.lib" "$(OUTDIR)\wintty.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\wintty.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\wintty.exe" if exist .\Debug\wintty.exe.manifest mt.exe -manifest .\Debug\wintty.exe.manifest -outputresource:.\Debug\wintty.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("wintty.dep") !INCLUDE "wintty.dep" !ELSE !MESSAGE Warning: cannot find "wintty.dep" !ENDIF !ENDIF !IF "$(CFG)" == "wintty - Win32 Release" || "$(CFG)" == "wintty - Win32 Debug" !IF "$(CFG)" == "wintty - Win32 Release" "apr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" cd "..\..\support\win32" "apr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" RECURSE=1 CLEAN cd "..\..\support\win32" !ELSEIF "$(CFG)" == "wintty - Win32 Debug" "apr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" cd "..\..\support\win32" "apr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support\win32" !ENDIF !IF "$(CFG)" == "wintty - Win32 Release" "aprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" cd "..\..\support\win32" "aprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\support\win32" !ELSEIF "$(CFG)" == "wintty - Win32 Debug" "aprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" cd "..\..\support\win32" "aprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support\win32" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "wintty - Win32 Release" "$(INTDIR)\wintty.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\wintty.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="wintty.exe" /d LONG_NAME="Apache wintty console pipe" $(SOURCE) !ELSEIF "$(CFG)" == "wintty - Win32 Debug" "$(INTDIR)\wintty.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\wintty.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="wintty.exe" /d LONG_NAME="Apache wintty console pipe" $(SOURCE) !ENDIF SOURCE=.\wintty.c "$(INTDIR)\wintty.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/support/win32/sstop.bmp0000644000000000000500000000036610150161574015567 0ustar rootsrcBMöv(€€€€€€€€€€€€€ÀÀÀÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿðÿÿÿÿÿÿùŸðÿÿÿÿ™™ðÿÿÿÿ™™ðÿÿÿÿùŸðÿÿÿÿðÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿhttpd-2.4.41/support/win32/srun.bmp0000644000000000000500000000036610150161574015406 0ustar rootsrcBMöv(€€€€€€€€€€€€€ÀÀÀÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿòÿÿÿÿÿ/ÿòÿÿòÿÿòÿÿÿÿ/ÿÿÿÿÿÿÿÿÿðÿÿÿÿÿÿú¯ðÿÿÿÿªªðÿÿò/ªªðò/ÿÿú¯ðÿÿÿÿðÿÿÿÿÿÿÿÿÿÿÿòÿÿÿÿ/ÿÿ/ÿòÿÿòÿÿÿÿòÿÿÿÿÿÿÿÿÿÿÿÿhttpd-2.4.41/support/win32/ApacheMonitor.h0000644000000000000500000000645711174007527016634 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ApacheMonitor.h * @brief Resource definitions for ApacheMonitor.rc and ApacheMonitor.c */ #define BIN_NAME ApacheMonitor.exe #define IDD_DLGSERVICES 101 #define IDS_APMONITORTITLE 102 #define IDS_APMONITORCLASS 103 #define IDM_RESTORE 104 #define IDM_EXIT 105 #define IDI_APSRVMON 106 #define IDI_ICOSTOP 107 #define IDI_ICORUN 108 #define IDC_STATBAR 109 #define IDC_SSTATUS 110 #define IDB_BMPSTOP 111 #define IDB_BMPRUN 112 #define IDB_BMPHEADER 114 #define IDL_SERVICES 115 #define IDL_STDOUT 116 #define IDC_SSTART 117 #define IDC_SSTOP 118 #define IDC_SRESTART 119 #define IDC_SMANAGER 121 #define IDD_DLGCONNECT 122 #define IDC_LREMOTE 123 #define IDC_LBROWSE 124 #define IDC_COMPUTER 125 #define IDC_SCONNECT 126 #define IDC_SDISCONN 127 #define IDS_MSG_FIRST 256 #define IDS_MSG_APPRUNNING 256 #define IDS_MSG_ERROR 257 #define IDS_MSG_RUNNINGALL 258 #define IDS_MSG_RUNNING 259 #define IDS_MSG_RUNNINGNONE 260 #define IDS_MSG_NOSERVICES 261 #define IDS_MSG_MNUSERVICES 262 #define IDS_MSG_MNUSHOW 263 #define IDS_MSG_MNUEXIT 264 #define IDS_MSG_SRVSTART 265 #define IDS_MSG_SRVSTARTED 266 #define IDS_MSG_SRVSTOP 267 #define IDS_MSG_SRVSTOPPED 268 #define IDS_MSG_SRVRESTART 269 #define IDS_MSG_SRVRESTARTED 270 #define IDS_MSG_SRVFAILED 271 #define IDS_MSG_SSTART 272 #define IDS_MSG_SSTOP 273 #define IDS_MSG_SRESTART 274 #define IDS_MSG_SERVICES 275 #define IDS_MSG_CONNECT 276 #define IDS_MSG_ECONNECT 277 #define IDS_MSG_OK 278 #define IDS_MSG_LAST 278 #define IDM_SM_SERVICE 0x1100 #define IDM_SM_START 0x1200 #define IDM_SM_STOP 0x1400 #define IDM_SM_RESTART 0x1800 #define IDC_STATIC -1 httpd-2.4.41/support/win32/ApacheMonitor.dep0000644000000000000500000000060012674411515017137 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by ApacheMonitor.mak .\ApacheMonitor.c : \ ".\ApacheMonitor.h"\ .\ApacheMonitor.rc : \ "..\..\build\win32\httpd.rc"\ "..\..\include\ap_release.h"\ ".\apache_header.bmp"\ ".\ApacheMonitor.h"\ ".\ApacheMonitor.ico"\ ".\ApacheMonitor.manifest"\ ".\aprun.ico"\ ".\apstop.ico"\ ".\srun.bmp"\ ".\sstop.bmp"\ httpd-2.4.41/support/win32/aprun.ico0000644000000000000500000000047610150161574015542 0ustar rootsrc(( €€€€€€€€€€ÀÀÀ€€€ÿÿÿÿÿÿÿÿÿÿÿÿÿÿðòÿÿÿò/ÿðÿò"ÿðÿò"/ðÿò"ÿð˜ÿò/ÿðòÿÿ ÐHÿÿð Ùˆˆ€M™ÙU»Y»PÿþüøøøøððààÀÿÃÿ‡ÿÿÿhttpd-2.4.41/support/win32/wintty.dep0000644000000000000500000000022012674411515015742 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by wintty.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/support/win32/ApacheMonitor.rc0000644000000000000500000001044511231026034016765 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include "ApacheMonitor.h" #define LONG_NAME Apache HTTP Server Monitor #include "../../build/win32/httpd.rc" IDI_APSRVMON ICON DISCARDABLE "ApacheMonitor.ico" IDI_ICOSTOP ICON DISCARDABLE "apstop.ico" IDI_ICORUN ICON DISCARDABLE "aprun.ico" CREATEPROCESS_MANIFEST_RESOURCE_ID RT_MANIFEST "ApacheMonitor.manifest" IDD_DLGSERVICES DIALOGEX 0, 0, 350, 192 STYLE DS_MODALFRAME | DS_SETFOREGROUND | WS_MINIMIZEBOX | WS_VISIBLE | WS_CLIPCHILDREN | WS_CAPTION | WS_SYSMENU EXSTYLE WS_EX_CONTROLPARENT CAPTION "Apache Service Monitor" FONT 8, "MS Sans Serif" BEGIN PUSHBUTTON "OK",IDCANCEL,298,161,50,14 CONTROL IDB_BMPHEADER,IDC_STATIC,"Static",SS_BITMAP,0,0,349,38 LTEXT "Service St&atus :",IDC_SSTATUS,3,40,272,8 LISTBOX IDL_SERVICES,2,49,285,73,LBS_OWNERDRAWFIXED | LBS_HASSTRINGS | LBS_USETABSTOPS | LBS_NOINTEGRALHEIGHT | LBS_DISABLENOSCROLL | WS_VSCROLL | WS_TABSTOP LISTBOX IDL_STDOUT,2,124,285,51,LBS_NOINTEGRALHEIGHT | LBS_DISABLENOSCROLL | LBS_NOSEL | WS_VSCROLL PUSHBUTTON "&Start",IDC_SSTART,298,49,50,14 PUSHBUTTON "S&top",IDC_SSTOP,298,65,50,14 PUSHBUTTON "&Restart",IDC_SRESTART,298,81,50,14 PUSHBUTTON "Ser&vices",IDC_SMANAGER,298,97,50,14 PUSHBUTTON "&Connect",IDC_SCONNECT,298,113,50,14 PUSHBUTTON "&Disconnect",IDC_SDISCONN,298,129,50,14 END IDD_DLGCONNECT DIALOGEX 0, 0, 240, 54 STYLE DS_MODALFRAME | DS_SETFOREGROUND | WS_VISIBLE | WS_CLIPCHILDREN | WS_CAPTION | WS_SYSMENU EXSTYLE WS_EX_CONTROLPARENT CAPTION "Connect To A Remote Computer" FONT 8, "MS Sans Serif" BEGIN LTEXT "Computer &Name:",IDC_LREMOTE,7,4,155,8 EDITTEXT IDC_COMPUTER,7,14,169,14,ES_AUTOHSCROLL DEFPUSHBUTTON "&OK",IDOK,183,14,50,14 PUSHBUTTON "&Cancel",IDCANCEL,183,34,50,14 PUSHBUTTON "&Browse",IDC_LBROWSE,7,34,50,14 END IDB_BMPSTOP BITMAP DISCARDABLE "sstop.bmp" IDB_BMPRUN BITMAP DISCARDABLE "srun.bmp" IDB_BMPHEADER BITMAP DISCARDABLE "apache_header.bmp" STRINGTABLE DISCARDABLE BEGIN IDS_APMONITORTITLE "Apache Service Monitor" IDS_APMONITORCLASS "ApacheServiceMonitorClass" END STRINGTABLE DISCARDABLE BEGIN IDS_MSG_APPRUNNING "Apache monitor is already started" IDS_MSG_ERROR "Error" IDS_MSG_RUNNINGALL "Running all Apache services" IDS_MSG_RUNNING "Running %d of %d Apache services" IDS_MSG_RUNNINGNONE "Running none of %d Apache services" IDS_MSG_NOSERVICES "No services installed" IDS_MSG_MNUSERVICES "Open &Services" IDS_MSG_MNUSHOW "&Open Apache Monitor" IDS_MSG_MNUEXIT "E&xit" IDS_MSG_OK "OK" IDS_MSG_SRVSTART "The %s service is starting." IDS_MSG_SRVSTARTED "The %s service has started." IDS_MSG_SRVSTOP "The %s service is stopping." IDS_MSG_SRVSTOPPED "The %s service has stopped." IDS_MSG_SRVRESTART "The %s service is restarting." IDS_MSG_SRVRESTARTED "The %s service has restarted." IDS_MSG_SRVFAILED "The requested operation has failed!" IDS_MSG_SSTART "&Start" IDS_MSG_SSTOP "S&top" IDS_MSG_SRESTART "&Restart" IDS_MSG_SERVICES "Ser&vices" IDS_MSG_CONNECT "&Connect" IDS_MSG_ECONNECT "Unable to connect to the remote registry on %s" END httpd-2.4.41/support/win32/ApacheMonitor.dsp0000644000000000000500000001146011023777214017161 0ustar rootsrc# Microsoft Developer Studio Project File - Name="ApacheMonitor" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Application" 0x0101 CFG=ApacheMonitor - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "ApacheMonitor.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "ApacheMonitor.mak" CFG="ApacheMonitor - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "ApacheMonitor - Win32 Release" (based on "Win32 (x86) Application") !MESSAGE "ApacheMonitor - Win32 Debug" (based on "Win32 (x86) Application") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "ApacheMonitor - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /EHsc /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "_MBCS" /FD /c # ADD CPP /nologo /MD /W3 /EHsc /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "_MBCS" /D "STRICT" /Fd"Release/ApacheMonitor_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /i "../../include" /I "../../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib user32.lib gdi32.lib comctl32.lib comdlg32.lib advapi32.lib shell32.lib ole32.lib wtsapi32.lib /nologo /subsystem:windows # ADD LINK32 kernel32.lib user32.lib gdi32.lib comctl32.lib comdlg32.lib advapi32.lib shell32.lib ole32.lib wtsapi32.lib /nologo /subsystem:windows /debug /opt:ref # Begin Special Build Tool TargetPath=.\Release\ApacheMonitor.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ELSEIF "$(CFG)" == "ApacheMonitor - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /W3 /Gm /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /D "_MBCS" /FD /c # ADD CPP /nologo /MDd /W3 /Gm /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /D "_MBCS" /D "STRICT" /Fd"Debug/ApacheMonitor_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /i "../../include" /I "../../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib user32.lib gdi32.lib comctl32.lib comdlg32.lib advapi32.lib shell32.lib ole32.lib wtsapi32.lib /nologo /subsystem:windows /debug # ADD LINK32 kernel32.lib user32.lib gdi32.lib comctl32.lib comdlg32.lib advapi32.lib shell32.lib ole32.lib wtsapi32.lib /nologo /subsystem:windows /incremental:no /debug # Begin Special Build Tool TargetPath=.\Debug\ApacheMonitor.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ENDIF # Begin Target # Name "ApacheMonitor - Win32 Release" # Name "ApacheMonitor - Win32 Debug" # Begin Group "Resource Files" # PROP Default_Filter "ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe" # Begin Source File SOURCE=.\apache_header.bmp # End Source File # Begin Source File SOURCE=.\ApacheMonitor.ico # End Source File # Begin Source File SOURCE=.\aprun.ico # End Source File # Begin Source File SOURCE=.\apstop.ico # End Source File # Begin Source File SOURCE=.\srun.bmp # End Source File # Begin Source File SOURCE=.\sstop.bmp # End Source File # End Group # Begin Source File SOURCE=.\ApacheMonitor.c # End Source File # Begin Source File SOURCE=.\ApacheMonitor.h # End Source File # Begin Source File SOURCE=.\ApacheMonitor.rc # End Source File # End Target # End Project httpd-2.4.41/support/win32/ApacheMonitor.manifest0000644000000000000500000000104111231026034020157 0ustar rootsrc Apache Service Monitor httpd-2.4.41/support/win32/apache_header.bmp0000644000000000000500000001454210150161574017151 0ustar rootsrcBMb6( >,# # 1191!))JR{1Z)R!{Rkck1BBRJJJ{kkRRRccc{{{¥1Œ1½çÿÿ)Æ!ÿ9ÿc„c­{½BÖcÿBœBÿkÖkÿŒœ„ÿµÿÎïÞÿ””Rÿ)ÿRÿ{œ„œœŒÿÆœÿ­ÎçÎÿÿÎïÿÿï”””¥¥¥ÿÿÿþþþþþþþþþþþþþþþ"     Mþ".00011227277::49;98 5' &( &% $$$"* +---Mþ#01112777:3;9;85%%( & $$$"*   Mþ$ 1 2377::399; 95%%(  & $$$"*\þ% 12/77:763499;;9'99555%(   $$$"*Sþ&1.2/77 :<8999 9955%( $$$"*+ Sþ(1.2 77::3 :<<<8;99 9995 %(  $$$"*!!!" Sþ)/111.2 777: 8<<< 8999 %999' %(  & $$$"*\þ*.111/2 77::3 4< '9994999' %( & $$$"* Mþ+.1112// 23333677:46<<<8 49' '( & $$$"* +-- Mþ (. %   '     %  % %%%%  !)) MþE 55'   %&(&&%'   '& &&  ²þ',))-) %55' '&%%5(('%&'%'& ((% %&&# ¨þf ),) ,, --+ 495'%((&%&&%55( %5' '&&& %&&&% (5'& (('   # šþ p "  ) ,-, -+)--)) 899' %55( '(&& 555%55 '5((& %5(( 55' %(&55('&&  ##’þ y+ +) ,--)-, --,))49993 555' '55('499499'555( %555''55%5(' 855'(&&&'   #‹þ   )q-- ,-- - 6;;8 %995 4995'8;98;8'9955 '995''99455(899%5(((''&&&% &    ƒþ ), %  66<49;96;;98 7;:7<89 8999'8;94%9954;945/'(5(% (& %(&&&'&&%   þ ,-,)-,") c33664776777:;;;8<<;;88;;3;99 4<;%9955' 555 '5( '5(% (&5( ((&&% }þ))  +---)+--"",++ 338867:<<<3<<3;;; 3:<3 93%995 555555555 '5'55'(&&&&% **{þ#),--,) ,-, ---* )-,/110..N366<:7:6<;;934;94994993%95' 9'955 '5(%%(&&&&&  $* xþ* ),-, ,--+ ,)67722122111/21/..E334:<<<<:<;8<;8999 8;899' 555 555 (((&&&& * tþ3)) ,--),)8;<<:68<<:7/777222.1000...<363<<::<<;;43<34<;;899'95'555 (((&%%&&& $sþ:),,) ), %555994 '999;8;;<<:72211211/21110/.. 366:::77:::43;944;98995 5( 55(% $$ nþ??4>) &&&(( &&(5' '5559986:772772/77722/21 0.000.53222777<<:<;;;99'9555 555( && =j?þ??6>>? &&((' 8;<<6<<:4<<<:777722/1./111../227::::<<<;89%4999(( &&  $i?þ??K>==?> # '999;6 899%999;;4<:::7/377227722010./110..,27777:::64<;;98;;93'5 ((%&&& =h?þ?*?G>  %'((555% (5' '(555''9;;;:6<::36<::6/2212221110000.(/337733:<<<::<<469 55%55(%&& f?þ?.?=*&& &&% &&% '5599'8;;<38;;;4677/4:7221//111000...%23/777::7::66;99'3955%%55   ?`?þ?0?!  %&((5(5599 5$ :<:8;<<<:6772772//1111110..%/377227367<;83;99895%&& ???>?>Z?þ?2?M>  **$$ &%((5%&((';;8%5599988<::8::7722/221/.00000. (/12//7::8:<;:;9%%55 ??????Z?þ?6?N>>?= %&&''554'&(5554'9;;39;;6:77677711/111..00. $113767776<<495(( ???>?==Z?þ?=?D>  &(( &&& '5593 559;<;3<<:3222211111.0. $/2222237736;;95 ??=>>V?þ?B?K>  "*$ &&((( &((999489;8:76772/2211110000.. /11/227:<;8??===V?þ?F?>=   **$   %555''55';<4<::6:77211110.. 011773:??=W?þ?L?J#   &&&%'(((8989;;::<<337773222/22111/.0.. 1263?>X?þ?R? '! (5559998999<<<:76777221110... 1??=Y?þ?\?@>=!$$  &(& (555 '559'9;;34<::6<::773221100.. Z?þ?a??= "*$ &&&((5599'9;;< 8;;;<<77722211100.. Y?þ?g?"=# && (555'99945944<:77/722211100 >_?þ?k?  &&&'5'59;;<<::377721110. ]?þ?n? > $$&&((&&((( '944;:<:::/72/11?? [?þ?s? & & %5'994;;<:7:723/7?> =X?þ?w?8  &&((( (5'59993<;::6:?>V?þ?{? # $$#'&( %555'99;34;9;?=??>>T?þ?~?/=*+*** #&&(('55'5'59?=?>>R?þ??>"$$$#  %((5 '( ((=?>>=?>P?þ?†?* $$## &&%'%??>>?>>N?þ??"= *$#  ??>>=> ?=M?þ?‘? $ *#? >>>> ?=K?þ?—? = ===? =?>=?=J?þ?¦? =?=?>I?þ?¥? >>??==??H?þ?©?>c?þ?©?d?httpd-2.4.41/support/win32/ApacheMonitor.c0000644000000000000500000015322213303773120016613 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* ==================================================================== * ApacheMonitor.c Simple program to manage and monitor Apache services. * * Contributed by Mladen Turk * * 05 Aug 2001 * ==================================================================== */ #define _WIN32_WINNT 0x0500 #ifndef STRICT #define STRICT #endif #ifndef OEMRESOURCE #define OEMRESOURCE #endif #if defined(_MSC_VER) && _MSC_VER >= 1400 #define _CRT_SECURE_NO_DEPRECATE #endif #include #include #include #include #include #include #include #include #include #include "ApacheMonitor.h" #ifndef AM_STRINGIFY /** Properly quote a value as a string in the C preprocessor */ #define AM_STRINGIFY(n) AM_STRINGIFY_HELPER(n) /** Helper macro for AM_STRINGIFY */ #define AM_STRINGIFY_HELPER(n) #n #endif #define OS_VERSION_WINNT 2 #define OS_VERSION_WIN2K 3 /* Should be enough */ #define MAX_APACHE_SERVICES 128 #define MAX_APACHE_COMPUTERS 32 #define WM_TRAYMESSAGE (WM_APP+1) #define WM_UPDATEMESSAGE (WM_USER+1) #define WM_MANAGEMESSAGE (WM_USER+2) #define WM_TIMER_REFRESH 10 #define WM_TIMER_RESCAN 11 #define SERVICE_APACHE_RESTART 128 #define XBITMAP 16 #define YBITMAP 16 #define MAX_LOADSTRING 100 #define REFRESH_TIME 2000 /* service refresh time (ms) */ #define RESCAN_TIME 20000 /* registry rescan time (ms) */ typedef struct _st_APACHE_SERVICE { LPTSTR szServiceName; LPTSTR szDisplayName; LPTSTR szDescription; LPTSTR szImagePath; LPTSTR szComputerName; DWORD dwPid; } ST_APACHE_SERVICE; typedef struct _st_MONITORED_COMPUTERS { LPTSTR szComputerName; HKEY hRegistry; } ST_MONITORED_COMP; /* Global variables */ HINSTANCE g_hInstance = NULL; TCHAR *g_szTitle; /* The title bar text */ TCHAR *g_szWindowClass; /* Window Class Name */ HICON g_icoStop; HICON g_icoRun; UINT g_bUiTaskbarCreated; DWORD g_dwOSVersion; BOOL g_bDlgServiceOn = FALSE; BOOL g_bConsoleRun = FALSE; ST_APACHE_SERVICE g_stServices[MAX_APACHE_SERVICES]; ST_MONITORED_COMP g_stComputers[MAX_APACHE_COMPUTERS]; HBITMAP g_hBmpStart, g_hBmpStop; HBITMAP g_hBmpPicture, g_hBmpOld; BOOL g_bRescanServices; HWND g_hwndServiceDlg; HWND g_hwndMain; HWND g_hwndStdoutList; HWND g_hwndConnectDlg; HCURSOR g_hCursorHourglass; HCURSOR g_hCursorArrow; LANGID g_LangID; CRITICAL_SECTION g_stcSection; LPTSTR g_szLocalHost; /* locale language support */ static TCHAR *g_lpMsg[IDS_MSG_LAST - IDS_MSG_FIRST + 1]; void am_ClearServicesSt() { int i; for (i = 0; i < MAX_APACHE_SERVICES; i++) { if (g_stServices[i].szServiceName) { free(g_stServices[i].szServiceName); } if (g_stServices[i].szDisplayName) { free(g_stServices[i].szDisplayName); } if (g_stServices[i].szDescription) { free(g_stServices[i].szDescription); } if (g_stServices[i].szImagePath) { free(g_stServices[i].szImagePath); } if (g_stServices[i].szComputerName) { free(g_stServices[i].szComputerName); } } memset(g_stServices, 0, sizeof(ST_APACHE_SERVICE) * MAX_APACHE_SERVICES); } void am_ClearComputersSt() { int i; for (i = 0; i < MAX_APACHE_COMPUTERS; i++) { if (g_stComputers[i].szComputerName) { free(g_stComputers[i].szComputerName); RegCloseKey(g_stComputers[i].hRegistry); } } memset(g_stComputers, 0, sizeof(ST_MONITORED_COMP) * MAX_APACHE_COMPUTERS); } BOOL am_IsComputerConnected(LPTSTR szComputerName) { int i = 0; while (g_stComputers[i].szComputerName != NULL) { if (_tcscmp(g_stComputers[i].szComputerName, szComputerName) == 0) { return TRUE; } ++i; } return FALSE; } void am_DisconnectComputer(LPTSTR szComputerName) { int i = 0, j; while (g_stComputers[i].szComputerName != NULL) { if (_tcscmp(g_stComputers[i].szComputerName, szComputerName) == 0) { break; } ++i; } if (g_stComputers[i].szComputerName != NULL) { free(g_stComputers[i].szComputerName); RegCloseKey(g_stComputers[i].hRegistry); for (j = i; j < MAX_APACHE_COMPUTERS - 1; j++) { g_stComputers[j].szComputerName= g_stComputers[j+1].szComputerName; g_stComputers[j].hRegistry = g_stComputers[j+1].hRegistry; } g_stComputers[j].szComputerName = NULL; g_stComputers[j].hRegistry = NULL; } } void ErrorMessage(LPCTSTR szError, BOOL bFatal) { LPVOID lpMsgBuf = NULL; if (szError) { MessageBox(NULL, szError, g_lpMsg[IDS_MSG_ERROR - IDS_MSG_FIRST], MB_OK | (bFatal ? MB_ICONERROR : MB_ICONEXCLAMATION)); } else { FormatMessage(FORMAT_MESSAGE_ALLOCATE_BUFFER | FORMAT_MESSAGE_FROM_SYSTEM | FORMAT_MESSAGE_IGNORE_INSERTS, NULL, GetLastError(), g_LangID, (LPTSTR) &lpMsgBuf, 0, NULL); MessageBox(NULL, (LPCTSTR)lpMsgBuf, g_lpMsg[IDS_MSG_ERROR - IDS_MSG_FIRST], MB_OK | (bFatal ? MB_ICONERROR : MB_ICONEXCLAMATION)); LocalFree(lpMsgBuf); } if (bFatal) { PostQuitMessage(0); } } int am_RespawnAsUserAdmin(HWND hwnd, DWORD op, LPCTSTR szService, LPCTSTR szComputerName) { TCHAR args[MAX_PATH + MAX_COMPUTERNAME_LENGTH + 12]; if (g_dwOSVersion < OS_VERSION_WIN2K) { ErrorMessage(g_lpMsg[IDS_MSG_SRVFAILED - IDS_MSG_FIRST], FALSE); return 0; } _sntprintf(args, sizeof(args) / sizeof(TCHAR), _T("%d \"%s\" \"%s\""), op, szService, szComputerName ? szComputerName : _T("")); if (!ShellExecute(hwnd, _T("runas"), __targv[0], args, NULL, SW_NORMAL)) { ErrorMessage(g_lpMsg[IDS_MSG_SRVFAILED - IDS_MSG_FIRST], FALSE); return 0; } return 1; } BOOL am_ConnectComputer(LPTSTR szComputerName) { int i = 0; HKEY hKeyRemote; TCHAR szTmp[MAX_PATH]; while (g_stComputers[i].szComputerName != NULL) { if (_tcscmp(g_stComputers[i].szComputerName, szComputerName) == 0) { return FALSE; } ++i; } if (i > MAX_APACHE_COMPUTERS - 1) { return FALSE; } if (RegConnectRegistry(szComputerName, HKEY_LOCAL_MACHINE, &hKeyRemote) != ERROR_SUCCESS) { _sntprintf(szTmp, sizeof(szTmp) / sizeof(TCHAR), g_lpMsg[IDS_MSG_ECONNECT - IDS_MSG_FIRST], szComputerName); ErrorMessage(szTmp, FALSE); return FALSE; } else { g_stComputers[i].szComputerName = _tcsdup(szComputerName); g_stComputers[i].hRegistry = hKeyRemote; return TRUE; } } LPTSTR GetStringRes(int id) { static TCHAR buffer[MAX_PATH]; buffer[0] = 0; LoadString(GetModuleHandle(NULL), id, buffer, MAX_PATH); return buffer; } BOOL GetSystemOSVersion(LPDWORD dwVersion) { OSVERSIONINFO osvi; /* Try calling GetVersionEx using the OSVERSIONINFOEX structure. If that fails, try using the OSVERSIONINFO structure. */ memset(&osvi, 0, sizeof(OSVERSIONINFO)); osvi.dwOSVersionInfoSize = sizeof(OSVERSIONINFO); if (!GetVersionEx(&osvi)) { return FALSE; } switch (osvi.dwPlatformId) { case VER_PLATFORM_WIN32_NT: if (osvi.dwMajorVersion >= 5) *dwVersion = OS_VERSION_WIN2K; else *dwVersion = OS_VERSION_WINNT; break; case VER_PLATFORM_WIN32_WINDOWS: case VER_PLATFORM_WIN32s: default: *dwVersion = 0; return FALSE; } return TRUE; } static VOID ShowNotifyIcon(HWND hWnd, DWORD dwMessage) { NOTIFYICONDATA nid; int i = 0, n = 0; memset(&nid, 0, sizeof(nid)); nid.cbSize = sizeof(NOTIFYICONDATA); nid.hWnd = hWnd; nid.uID = 0xFF; nid.uFlags = NIF_ICON | NIF_MESSAGE | NIF_TIP; nid.uCallbackMessage = WM_TRAYMESSAGE; while (g_stServices[i].szServiceName != NULL) { if (g_stServices[i].dwPid != 0) { ++n; } ++i; } if (dwMessage != NIM_DELETE) { if (n) { nid.hIcon = g_icoRun; } else { nid.hIcon = g_icoStop; } } else { nid.hIcon = NULL; } if (n == i && n > 0) { _tcscpy(nid.szTip, g_lpMsg[IDS_MSG_RUNNINGALL - IDS_MSG_FIRST]); } else if (n) { _sntprintf(nid.szTip, sizeof(nid.szTip) / sizeof(TCHAR), g_lpMsg[IDS_MSG_RUNNING - IDS_MSG_FIRST], n, i); } else if (i) { _sntprintf(nid.szTip, sizeof(nid.szTip) / sizeof(TCHAR), g_lpMsg[IDS_MSG_RUNNINGNONE - IDS_MSG_FIRST], i); } else { _tcscpy(nid.szTip, g_lpMsg[IDS_MSG_NOSERVICES - IDS_MSG_FIRST]); } Shell_NotifyIcon(dwMessage, &nid); } void appendMenuItem(HMENU hMenu, UINT uMenuId, LPTSTR szName, BOOL fDefault, BOOL fEnabled) { MENUITEMINFO mii; memset(&mii, 0, sizeof(MENUITEMINFO)); mii.cbSize = sizeof(MENUITEMINFO); mii.fMask = MIIM_ID | MIIM_TYPE | MIIM_STATE; if (_tcslen(szName)) { mii.fType = MFT_STRING; mii.wID = uMenuId; if (fDefault) { mii.fState = MFS_DEFAULT; } if (!fEnabled) { mii.fState |= MFS_DISABLED; } mii.dwTypeData = szName; } else { mii.fType = MFT_SEPARATOR; } InsertMenuItem(hMenu, uMenuId, FALSE, &mii); } void appendServiceMenu(HMENU hMenu, UINT uMenuId, LPTSTR szServiceName, BOOL fRunning) { MENUITEMINFO mii; HMENU smh; smh = CreatePopupMenu(); appendMenuItem(smh, IDM_SM_START + uMenuId, g_lpMsg[IDS_MSG_SSTART - IDS_MSG_FIRST], FALSE, !fRunning); appendMenuItem(smh, IDM_SM_STOP + uMenuId, g_lpMsg[IDS_MSG_SSTOP - IDS_MSG_FIRST], FALSE, fRunning); appendMenuItem(smh, IDM_SM_RESTART + uMenuId, g_lpMsg[IDS_MSG_SRESTART - IDS_MSG_FIRST], FALSE, fRunning); memset(&mii, 0, sizeof(MENUITEMINFO)); mii.cbSize = sizeof(MENUITEMINFO); mii.fMask = MIIM_ID | MIIM_TYPE | MIIM_STATE | MIIM_SUBMENU | MIIM_CHECKMARKS; mii.fType = MFT_STRING; mii.wID = uMenuId; mii.hbmpChecked = g_hBmpStart; mii.hbmpUnchecked = g_hBmpStop; mii.dwTypeData = szServiceName; mii.hSubMenu = smh; mii.fState = fRunning ? MFS_CHECKED : MFS_UNCHECKED; InsertMenuItem(hMenu, IDM_SM_SERVICE + uMenuId, FALSE, &mii); } void ShowTryPopupMenu(HWND hWnd) { /* create popup menu */ HMENU hMenu = CreatePopupMenu(); POINT pt; if (hMenu) { appendMenuItem(hMenu, IDM_RESTORE, g_lpMsg[IDS_MSG_MNUSHOW - IDS_MSG_FIRST], TRUE, TRUE); appendMenuItem(hMenu, IDC_SMANAGER, g_lpMsg[IDS_MSG_MNUSERVICES - IDS_MSG_FIRST], FALSE, TRUE); appendMenuItem(hMenu, 0, _T(""), FALSE, TRUE); appendMenuItem(hMenu, IDM_EXIT, g_lpMsg[IDS_MSG_MNUEXIT - IDS_MSG_FIRST], FALSE, TRUE); if (!SetForegroundWindow(hWnd)) { SetForegroundWindow(NULL); } GetCursorPos(&pt); TrackPopupMenu(hMenu, TPM_LEFTALIGN|TPM_RIGHTBUTTON, pt.x, pt.y, 0, hWnd, NULL); DestroyMenu(hMenu); } } void ShowTryServicesMenu(HWND hWnd) { /* create services list popup menu and submenus */ HMENU hMenu = CreatePopupMenu(); POINT pt; int i = 0; if (hMenu) { while (g_stServices[i].szServiceName != NULL) { appendServiceMenu(hMenu, i, g_stServices[i].szDisplayName, g_stServices[i].dwPid != 0); ++i; } if (i) { if (!SetForegroundWindow(hWnd)) { SetForegroundWindow(NULL); } GetCursorPos(&pt); TrackPopupMenu(hMenu, TPM_LEFTALIGN|TPM_RIGHTBUTTON, pt.x, pt.y, 0, hWnd, NULL); DestroyMenu(hMenu); } } } BOOL CenterWindow(HWND hwndChild) { RECT rChild, rWorkArea; int wChild, hChild; int xNew, yNew; BOOL bResult; /* Get the Height and Width of the child window */ GetWindowRect(hwndChild, &rChild); wChild = rChild.right - rChild.left; hChild = rChild.bottom - rChild.top; /* Get the limits of the 'workarea' */ bResult = SystemParametersInfo(SPI_GETWORKAREA, sizeof(RECT), &rWorkArea, 0); if (!bResult) { rWorkArea.left = rWorkArea.top = 0; rWorkArea.right = GetSystemMetrics(SM_CXSCREEN); rWorkArea.bottom = GetSystemMetrics(SM_CYSCREEN); } /* Calculate new X and Y position*/ xNew = (rWorkArea.right - wChild) / 2; yNew = (rWorkArea.bottom - hChild) / 2; return SetWindowPos(hwndChild, HWND_TOP, xNew, yNew, 0, 0, SWP_NOSIZE | SWP_SHOWWINDOW); } static void addListBoxItem(HWND hDlg, LPTSTR lpStr, HBITMAP hBmp) { LRESULT nItem; nItem = SendMessage(hDlg, LB_ADDSTRING, 0, (LPARAM)lpStr); SendMessage(hDlg, LB_SETITEMDATA, nItem, (LPARAM)hBmp); } static void addListBoxString(HWND hListBox, LPTSTR lpStr) { static int nItems = 0; if (!g_bDlgServiceOn) { return; } ++nItems; if (nItems > MAX_LOADSTRING) { SendMessage(hListBox, LB_RESETCONTENT, 0, 0); nItems = 1; } ListBox_SetCurSel(hListBox, ListBox_AddString(hListBox, lpStr)); } BOOL ApacheManageService(LPCTSTR szServiceName, LPCTSTR szImagePath, LPTSTR szComputerName, DWORD dwCommand) { TCHAR szMsg[MAX_PATH]; BOOL retValue; SC_HANDLE schService; SC_HANDLE schSCManager; SERVICE_STATUS schSStatus; int ticks; schSCManager = OpenSCManager(szComputerName, NULL, SC_MANAGER_CONNECT); if (!schSCManager) { ErrorMessage(g_lpMsg[IDS_MSG_SRVFAILED - IDS_MSG_FIRST], FALSE); return FALSE; } schService = OpenService(schSCManager, szServiceName, SERVICE_QUERY_STATUS | SERVICE_START | SERVICE_STOP | SERVICE_USER_DEFINED_CONTROL); if (schService == NULL) { /* Avoid recursion of ImagePath NULL (from this Respawn) */ if (szImagePath) { am_RespawnAsUserAdmin(g_hwndMain, dwCommand, szServiceName, szComputerName); } else { ErrorMessage(g_lpMsg[IDS_MSG_SRVFAILED - IDS_MSG_FIRST], FALSE); } CloseServiceHandle(schSCManager); return FALSE; } else { retValue = FALSE; g_bConsoleRun = TRUE; SetCursor(g_hCursorHourglass); switch (dwCommand) { case SERVICE_CONTROL_STOP: _sntprintf(szMsg, sizeof(szMsg) / sizeof(TCHAR), g_lpMsg[IDS_MSG_SRVSTOP - IDS_MSG_FIRST], szServiceName); addListBoxString(g_hwndStdoutList, szMsg); if (ControlService(schService, SERVICE_CONTROL_STOP, &schSStatus)) { Sleep(1000); while (QueryServiceStatus(schService, &schSStatus)) { if (schSStatus.dwCurrentState == SERVICE_STOP_PENDING) { Sleep(1000); } else { break; } } } if (QueryServiceStatus(schService, &schSStatus)) { if (schSStatus.dwCurrentState == SERVICE_STOPPED) { retValue = TRUE; _sntprintf(szMsg, sizeof(szMsg) / sizeof(TCHAR), g_lpMsg[IDS_MSG_SRVSTOPPED - IDS_MSG_FIRST], szServiceName); addListBoxString(g_hwndStdoutList, szMsg); } } break; case SERVICE_CONTROL_CONTINUE: _sntprintf(szMsg, sizeof(szMsg) / sizeof(TCHAR), g_lpMsg[IDS_MSG_SRVSTART - IDS_MSG_FIRST], szServiceName); addListBoxString(g_hwndStdoutList, szMsg); if (StartService(schService, 0, NULL)) { Sleep(1000); while (QueryServiceStatus(schService, &schSStatus)) { if (schSStatus.dwCurrentState == SERVICE_START_PENDING) { Sleep(1000); } else { break; } } } if (QueryServiceStatus(schService, &schSStatus)) { if (schSStatus.dwCurrentState == SERVICE_RUNNING) { retValue = TRUE; _sntprintf(szMsg, sizeof(szMsg) / sizeof(TCHAR), g_lpMsg[IDS_MSG_SRVSTARTED - IDS_MSG_FIRST], szServiceName); addListBoxString(g_hwndStdoutList, szMsg); } } break; case SERVICE_APACHE_RESTART: _sntprintf(szMsg, sizeof(szMsg) / sizeof(TCHAR), g_lpMsg[IDS_MSG_SRVRESTART - IDS_MSG_FIRST], szServiceName); addListBoxString(g_hwndStdoutList, szMsg); if (ControlService(schService, SERVICE_APACHE_RESTART, &schSStatus)) { ticks = 60; while (schSStatus.dwCurrentState == SERVICE_START_PENDING) { Sleep(1000); if (!QueryServiceStatus(schService, &schSStatus)) { CloseServiceHandle(schService); CloseServiceHandle(schSCManager); g_bConsoleRun = FALSE; SetCursor(g_hCursorArrow); return FALSE; } if (!--ticks) { break; } } } if (schSStatus.dwCurrentState == SERVICE_RUNNING) { retValue = TRUE; _sntprintf(szMsg, sizeof(szMsg) / sizeof(TCHAR), g_lpMsg[IDS_MSG_SRVRESTARTED - IDS_MSG_FIRST], szServiceName); addListBoxString(g_hwndStdoutList, szMsg); } break; } CloseServiceHandle(schService); CloseServiceHandle(schSCManager); if (!retValue) { ErrorMessage(g_lpMsg[IDS_MSG_SRVFAILED - IDS_MSG_FIRST], FALSE); } g_bConsoleRun = FALSE; SetCursor(g_hCursorArrow); return retValue; } return FALSE; } BOOL IsServiceRunning(LPCTSTR szServiceName, LPCTSTR szComputerName, LPDWORD lpdwPid) { DWORD dwPid; SC_HANDLE schService; SC_HANDLE schSCManager; SERVICE_STATUS schSStatus; dwPid = 0; schSCManager = OpenSCManager(szComputerName, NULL, SC_MANAGER_CONNECT); if (!schSCManager) { return FALSE; } schService = OpenService(schSCManager, szServiceName, SERVICE_QUERY_STATUS); if (schService != NULL) { if (QueryServiceStatus(schService, &schSStatus)) { dwPid = schSStatus.dwCurrentState; if (lpdwPid) { *lpdwPid = 1; } } CloseServiceHandle(schService); CloseServiceHandle(schSCManager); return dwPid == SERVICE_RUNNING ? TRUE : FALSE; } else { g_bRescanServices = TRUE; } CloseServiceHandle(schSCManager); return FALSE; } BOOL FindRunningServices(void) { int i = 0; DWORD dwPid; BOOL rv = FALSE; while (g_stServices[i].szServiceName != NULL) { if (!IsServiceRunning(g_stServices[i].szServiceName, g_stServices[i].szComputerName, &dwPid)) { dwPid = 0; } if (g_stServices[i].dwPid != dwPid) { rv = TRUE; } g_stServices[i].dwPid = dwPid; ++i; } return rv; } BOOL GetApacheServicesStatus() { TCHAR szKey[MAX_PATH]; TCHAR achKey[MAX_PATH]; TCHAR szImagePath[MAX_PATH]; TCHAR szBuf[MAX_PATH]; TCHAR szTmp[MAX_PATH]; HKEY hKey, hSubKey, hKeyRemote; DWORD retCode, rv, dwKeyType; DWORD dwBufLen = MAX_PATH; int i, stPos = 0; int computers = 0; g_bRescanServices = FALSE; am_ClearServicesSt(); while (g_stComputers[computers].szComputerName != NULL) { hKeyRemote = g_stComputers[computers].hRegistry; retCode = RegOpenKeyEx(hKeyRemote, _T("System\\CurrentControlSet\\Services\\"), 0, KEY_READ, &hKey); if (retCode != ERROR_SUCCESS) { ErrorMessage(NULL, FALSE); return FALSE; } for (i = 0, retCode = ERROR_SUCCESS; retCode == ERROR_SUCCESS; i++) { retCode = RegEnumKey(hKey, i, achKey, MAX_PATH); if (retCode == ERROR_SUCCESS) { _tcscpy(szKey, _T("System\\CurrentControlSet\\Services\\")); _tcscat(szKey, achKey); if (RegOpenKeyEx(hKeyRemote, szKey, 0, KEY_QUERY_VALUE, &hSubKey) == ERROR_SUCCESS) { dwBufLen = MAX_PATH; rv = RegQueryValueEx(hSubKey, _T("ImagePath"), NULL, &dwKeyType, (LPBYTE)szImagePath, &dwBufLen); if (rv == ERROR_SUCCESS && (dwKeyType == REG_SZ || dwKeyType == REG_EXPAND_SZ) && dwBufLen) { _tcscpy(szBuf, szImagePath); CharLower(szBuf); /* the service name could be httpd*.exe or Apache*.exe */ if (((_tcsstr(szBuf, _T("\\apache")) != NULL) || (_tcsstr(szBuf, _T("\\httpd")) != NULL)) && _tcsstr(szBuf, _T(".exe")) && (_tcsstr(szBuf, _T("--ntservice")) != NULL || _tcsstr(szBuf, _T("-k ")) != NULL)) { g_stServices[stPos].szServiceName = _tcsdup(achKey); g_stServices[stPos].szImagePath = _tcsdup(szImagePath); g_stServices[stPos].szComputerName = _tcsdup(g_stComputers[computers].szComputerName); dwBufLen = MAX_PATH; if (RegQueryValueEx(hSubKey, _T("Description"), NULL, &dwKeyType, (LPBYTE)szBuf, &dwBufLen) == ERROR_SUCCESS) { g_stServices[stPos].szDescription = _tcsdup(szBuf); } dwBufLen = MAX_PATH; if (RegQueryValueEx(hSubKey, _T("DisplayName"), NULL, &dwKeyType, (LPBYTE)szBuf, &dwBufLen) == ERROR_SUCCESS) { if (_tcscmp(g_stComputers[computers] .szComputerName, g_szLocalHost) != 0) { _tcscpy(szTmp, g_stComputers[computers] .szComputerName + 2); _tcscat(szTmp, _T("@")); _tcscat(szTmp, szBuf); } else { _tcscpy(szTmp, szBuf); } g_stServices[stPos].szDisplayName = _tcsdup(szTmp); } ++stPos; if (stPos >= MAX_APACHE_SERVICES) { retCode = !ERROR_SUCCESS; } } } RegCloseKey(hSubKey); } } } ++computers; RegCloseKey(hKey); } FindRunningServices(); return TRUE; } LRESULT CALLBACK ConnectDlgProc(HWND hDlg, UINT message, WPARAM wParam, LPARAM lParam) { TCHAR szCmp[MAX_COMPUTERNAME_LENGTH+4]; switch (message) { case WM_INITDIALOG: ShowWindow(hDlg, SW_HIDE); g_hwndConnectDlg = hDlg; CenterWindow(hDlg); ShowWindow(hDlg, SW_SHOW); SetFocus(GetDlgItem(hDlg, IDC_COMPUTER)); return TRUE; case WM_COMMAND: switch (LOWORD(wParam)) { case IDOK: memset(szCmp, 0, sizeof(szCmp)); _tcscpy(szCmp, _T("\\\\")); SendMessage(GetDlgItem(hDlg, IDC_COMPUTER), WM_GETTEXT, (WPARAM) MAX_COMPUTERNAME_LENGTH, (LPARAM) szCmp+2); _tcsupr(szCmp); if (_tcslen(szCmp) < 3) { EndDialog(hDlg, TRUE); return TRUE; } am_ConnectComputer(szCmp); SendMessage(g_hwndMain, WM_TIMER, WM_TIMER_RESCAN, 0); case IDCANCEL: EndDialog(hDlg, TRUE); return TRUE; case IDC_LBROWSE: { BROWSEINFO bi; ITEMIDLIST *il; LPMALLOC pMalloc; memset(&bi, 0, sizeof(BROWSEINFO)); SHGetSpecialFolderLocation(hDlg, CSIDL_NETWORK, &il); bi.lpszTitle = _T("ApacheMonitor :\nSelect Network Computer!"); bi.pszDisplayName = szCmp; bi.hwndOwner = hDlg; bi.ulFlags = BIF_BROWSEFORCOMPUTER; bi.lpfn = NULL; bi.lParam = 0; bi.iImage = 0; bi.pidlRoot = il; if (SHBrowseForFolder(&bi) != NULL) { SendMessage(GetDlgItem(hDlg, IDC_COMPUTER), WM_SETTEXT, (WPARAM) NULL, (LPARAM) szCmp); } if (SUCCEEDED(SHGetMalloc(&pMalloc))) { pMalloc->lpVtbl->Free(pMalloc, il); pMalloc->lpVtbl->Release(pMalloc); } return TRUE; } } break; case WM_QUIT: case WM_CLOSE: EndDialog(hDlg, TRUE); return TRUE; default: return FALSE; } return FALSE; } LRESULT CALLBACK ServiceDlgProc(HWND hDlg, UINT message, WPARAM wParam, LPARAM lParam) { TCHAR szBuf[MAX_PATH]; HWND hListBox; static HWND hStatusBar; TEXTMETRIC tm; int i, y; HDC hdcMem; RECT rcBitmap; LRESULT nItem; LPMEASUREITEMSTRUCT lpmis; LPDRAWITEMSTRUCT lpdis; memset(szBuf, 0, sizeof(szBuf)); switch (message) { case WM_INITDIALOG: ShowWindow(hDlg, SW_HIDE); g_hwndServiceDlg = hDlg; SetWindowText(hDlg, g_szTitle); Button_Enable(GetDlgItem(hDlg, IDC_SSTART), FALSE); Button_Enable(GetDlgItem(hDlg, IDC_SSTOP), FALSE); Button_Enable(GetDlgItem(hDlg, IDC_SRESTART), FALSE); Button_Enable(GetDlgItem(hDlg, IDC_SDISCONN), FALSE); SetWindowText(GetDlgItem(hDlg, IDC_SSTART), g_lpMsg[IDS_MSG_SSTART - IDS_MSG_FIRST]); SetWindowText(GetDlgItem(hDlg, IDC_SSTOP), g_lpMsg[IDS_MSG_SSTOP - IDS_MSG_FIRST]); SetWindowText(GetDlgItem(hDlg, IDC_SRESTART), g_lpMsg[IDS_MSG_SRESTART - IDS_MSG_FIRST]); SetWindowText(GetDlgItem(hDlg, IDC_SMANAGER), g_lpMsg[IDS_MSG_SERVICES - IDS_MSG_FIRST]); SetWindowText(GetDlgItem(hDlg, IDC_SCONNECT), g_lpMsg[IDS_MSG_CONNECT - IDS_MSG_FIRST]); SetWindowText(GetDlgItem(hDlg, IDCANCEL), g_lpMsg[IDS_MSG_OK - IDS_MSG_FIRST]); hListBox = GetDlgItem(hDlg, IDL_SERVICES); g_hwndStdoutList = GetDlgItem(hDlg, IDL_STDOUT); hStatusBar = CreateStatusWindow(0x0800 /* SBT_TOOLTIPS */ | WS_CHILD | WS_VISIBLE, _T(""), hDlg, IDC_STATBAR); if (GetApacheServicesStatus()) { i = 0; while (g_stServices[i].szServiceName != NULL) { addListBoxItem(hListBox, g_stServices[i].szDisplayName, g_stServices[i].dwPid == 0 ? g_hBmpStop : g_hBmpStart); ++i; } } CenterWindow(hDlg); ShowWindow(hDlg, SW_SHOW); SetFocus(hListBox); SendMessage(hListBox, LB_SETCURSEL, 0, 0); return TRUE; break; case WM_MANAGEMESSAGE: ApacheManageService(g_stServices[LOWORD(wParam)].szServiceName, g_stServices[LOWORD(wParam)].szImagePath, g_stServices[LOWORD(wParam)].szComputerName, LOWORD(lParam)); return TRUE; break; case WM_UPDATEMESSAGE: hListBox = GetDlgItem(hDlg, IDL_SERVICES); SendMessage(hListBox, LB_RESETCONTENT, 0, 0); SendMessage(hStatusBar, SB_SETTEXT, 0, (LPARAM)_T("")); Button_Enable(GetDlgItem(hDlg, IDC_SSTART), FALSE); Button_Enable(GetDlgItem(hDlg, IDC_SSTOP), FALSE); Button_Enable(GetDlgItem(hDlg, IDC_SRESTART), FALSE); Button_Enable(GetDlgItem(hDlg, IDC_SDISCONN), FALSE); i = 0; while (g_stServices[i].szServiceName != NULL) { addListBoxItem(hListBox, g_stServices[i].szDisplayName, g_stServices[i].dwPid == 0 ? g_hBmpStop : g_hBmpStart); ++i; } SendMessage(hListBox, LB_SETCURSEL, 0, 0); /* Dirty hack to bring the window to the foreground */ SetWindowPos(hDlg, HWND_TOPMOST, 0, 0, 0, 0, SWP_NOSIZE | SWP_NOMOVE | SWP_SHOWWINDOW); SetWindowPos(hDlg, HWND_NOTOPMOST, 0, 0, 0, 0, SWP_NOSIZE | SWP_NOMOVE | SWP_SHOWWINDOW); SetFocus(hListBox); return TRUE; break; case WM_MEASUREITEM: lpmis = (LPMEASUREITEMSTRUCT) lParam; lpmis->itemHeight = YBITMAP; return TRUE; case WM_SETCURSOR: if (g_bConsoleRun) { SetCursor(g_hCursorHourglass); } else { SetCursor(g_hCursorArrow); } return TRUE; case WM_DRAWITEM: lpdis = (LPDRAWITEMSTRUCT) lParam; if (lpdis->itemID == -1) { break; } switch (lpdis->itemAction) { case ODA_FOCUS: case ODA_SELECT: case ODA_DRAWENTIRE: g_hBmpPicture = (HBITMAP)SendMessage(lpdis->hwndItem, LB_GETITEMDATA, lpdis->itemID, (LPARAM) 0); hdcMem = CreateCompatibleDC(lpdis->hDC); g_hBmpOld = SelectObject(hdcMem, g_hBmpPicture); BitBlt(lpdis->hDC, lpdis->rcItem.left, lpdis->rcItem.top, lpdis->rcItem.right - lpdis->rcItem.left, lpdis->rcItem.bottom - lpdis->rcItem.top, hdcMem, 0, 0, SRCCOPY); SendMessage(lpdis->hwndItem, LB_GETTEXT, lpdis->itemID, (LPARAM) szBuf); GetTextMetrics(lpdis->hDC, &tm); y = (lpdis->rcItem.bottom + lpdis->rcItem.top - tm.tmHeight) / 2; SelectObject(hdcMem, g_hBmpOld); DeleteDC(hdcMem); rcBitmap.left = lpdis->rcItem.left + XBITMAP + 2; rcBitmap.top = lpdis->rcItem.top; rcBitmap.right = lpdis->rcItem.right; rcBitmap.bottom = lpdis->rcItem.top + YBITMAP; if (lpdis->itemState & ODS_SELECTED) { if (g_hBmpPicture == g_hBmpStop) { Button_Enable(GetDlgItem(hDlg, IDC_SSTART), TRUE); Button_SetStyle(GetDlgItem(hDlg, IDC_SSTART), BS_DEFPUSHBUTTON, TRUE); Button_Enable(GetDlgItem(hDlg, IDC_SSTOP), FALSE); Button_Enable(GetDlgItem(hDlg, IDC_SRESTART), FALSE); } else if (g_hBmpPicture == g_hBmpStart) { Button_Enable(GetDlgItem(hDlg, IDC_SSTART), FALSE); Button_Enable(GetDlgItem(hDlg, IDC_SSTOP), TRUE); Button_SetStyle(GetDlgItem(hDlg, IDC_SSTOP), BS_DEFPUSHBUTTON, TRUE); Button_Enable(GetDlgItem(hDlg, IDC_SRESTART), TRUE); } else { Button_Enable(GetDlgItem(hDlg, IDC_SSTART), FALSE); Button_Enable(GetDlgItem(hDlg, IDC_SSTOP), FALSE); Button_Enable(GetDlgItem(hDlg, IDC_SRESTART), FALSE); } if (_tcscmp(g_stServices[lpdis->itemID].szComputerName, g_szLocalHost) == 0) { Button_Enable(GetDlgItem(hDlg, IDC_SDISCONN), FALSE); } else { Button_Enable(GetDlgItem(hDlg, IDC_SDISCONN), TRUE); } if (g_stServices[lpdis->itemID].szDescription) { SendMessage(hStatusBar, SB_SETTEXT, 0, (LPARAM)g_stServices[lpdis->itemID].szDescription); } else { SendMessage(hStatusBar, SB_SETTEXT, 0, (LPARAM)_T("")); } if (lpdis->itemState & ODS_FOCUS) { SetTextColor(lpdis->hDC, GetSysColor(COLOR_HIGHLIGHTTEXT)); SetBkColor(lpdis->hDC, GetSysColor(COLOR_HIGHLIGHT)); FillRect(lpdis->hDC, &rcBitmap, (HBRUSH)(COLOR_HIGHLIGHT+1)); } else { SetTextColor(lpdis->hDC, GetSysColor(COLOR_INACTIVECAPTIONTEXT)); SetBkColor(lpdis->hDC, GetSysColor(COLOR_INACTIVECAPTION)); FillRect(lpdis->hDC, &rcBitmap, (HBRUSH)(COLOR_INACTIVECAPTION+1)); } } else { SetTextColor(lpdis->hDC, GetSysColor(COLOR_MENUTEXT)); SetBkColor(lpdis->hDC, GetSysColor(COLOR_WINDOW)); FillRect(lpdis->hDC, &rcBitmap, (HBRUSH)(COLOR_WINDOW+1)); } TextOut(lpdis->hDC, XBITMAP + 6, y, szBuf, (int)_tcslen(szBuf)); break; } return TRUE; case WM_COMMAND: switch (LOWORD(wParam)) { case IDL_SERVICES: switch (HIWORD(wParam)) { case LBN_DBLCLK: /* if started then stop, if stopped then start */ hListBox = GetDlgItem(hDlg, IDL_SERVICES); nItem = SendMessage(hListBox, LB_GETCURSEL, 0, 0); if (nItem != LB_ERR) { g_hBmpPicture = (HBITMAP)SendMessage(hListBox, LB_GETITEMDATA, nItem, (LPARAM) 0); if (g_hBmpPicture == g_hBmpStop) { SendMessage(hDlg, WM_MANAGEMESSAGE, nItem, SERVICE_CONTROL_CONTINUE); } else { SendMessage(hDlg, WM_MANAGEMESSAGE, nItem, SERVICE_CONTROL_STOP); } } return TRUE; } break; case IDCANCEL: EndDialog(hDlg, TRUE); return TRUE; case IDC_SSTART: Button_Enable(GetDlgItem(hDlg, IDC_SSTART), FALSE); hListBox = GetDlgItem(hDlg, IDL_SERVICES); nItem = SendMessage(hListBox, LB_GETCURSEL, 0, 0); if (nItem != LB_ERR) { SendMessage(hDlg, WM_MANAGEMESSAGE, nItem, SERVICE_CONTROL_CONTINUE); } Button_Enable(GetDlgItem(hDlg, IDC_SSTART), TRUE); return TRUE; case IDC_SSTOP: Button_Enable(GetDlgItem(hDlg, IDC_SSTOP), FALSE); hListBox = GetDlgItem(hDlg, IDL_SERVICES); nItem = SendMessage(hListBox, LB_GETCURSEL, 0, 0); if (nItem != LB_ERR) { SendMessage(hDlg, WM_MANAGEMESSAGE, nItem, SERVICE_CONTROL_STOP); } Button_Enable(GetDlgItem(hDlg, IDC_SSTOP), TRUE); return TRUE; case IDC_SRESTART: Button_Enable(GetDlgItem(hDlg, IDC_SRESTART), FALSE); hListBox = GetDlgItem(hDlg, IDL_SERVICES); nItem = SendMessage(hListBox, LB_GETCURSEL, 0, 0); if (nItem != LB_ERR) { SendMessage(hDlg, WM_MANAGEMESSAGE, nItem, SERVICE_APACHE_RESTART); } Button_Enable(GetDlgItem(hDlg, IDC_SRESTART), TRUE); return TRUE; case IDC_SMANAGER: if (g_dwOSVersion >= OS_VERSION_WIN2K) { ShellExecute(hDlg, _T("open"), _T("services.msc"), _T("/s"), NULL, SW_NORMAL); } else { WinExec("Control.exe SrvMgr.cpl Services", SW_NORMAL); } return TRUE; case IDC_SCONNECT: DialogBox(g_hInstance, MAKEINTRESOURCE(IDD_DLGCONNECT), hDlg, (DLGPROC)ConnectDlgProc); return TRUE; case IDC_SDISCONN: hListBox = GetDlgItem(hDlg, IDL_SERVICES); nItem = SendMessage(hListBox, LB_GETCURSEL, 0, 0); if (nItem != LB_ERR) { am_DisconnectComputer(g_stServices[nItem].szComputerName); SendMessage(g_hwndMain, WM_TIMER, WM_TIMER_RESCAN, 0); } return TRUE; } break; case WM_SIZE: switch (LOWORD(wParam)) { case SIZE_MINIMIZED: EndDialog(hDlg, TRUE); return TRUE; break; } break; case WM_QUIT: case WM_CLOSE: EndDialog(hDlg, TRUE); return TRUE; default: return FALSE; } return FALSE; } LRESULT CALLBACK WndProc(HWND hWnd, UINT message, WPARAM wParam, LPARAM lParam) { if (message == g_bUiTaskbarCreated) { /* restore the tray icon on shell restart */ ShowNotifyIcon(hWnd, NIM_ADD); return DefWindowProc(hWnd, message, wParam, lParam); } switch (message) { case WM_CREATE: GetApacheServicesStatus(); ShowNotifyIcon(hWnd, NIM_ADD); SetTimer(hWnd, WM_TIMER_REFRESH, REFRESH_TIME, NULL); SetTimer(hWnd, WM_TIMER_RESCAN, RESCAN_TIME, NULL); break; case WM_TIMER: switch (wParam) { case WM_TIMER_RESCAN: { int nPrev = 0, nNew = 0; EnterCriticalSection(&g_stcSection); if (FindRunningServices() || g_bRescanServices) { ShowNotifyIcon(hWnd, NIM_MODIFY); if (g_hwndServiceDlg) PostMessage(g_hwndServiceDlg, WM_UPDATEMESSAGE, 0, 0); } /* check if services list changed */ while (g_stServices[nPrev].szServiceName != NULL) ++nPrev; GetApacheServicesStatus(); while (g_stServices[nNew].szServiceName != NULL) ++nNew; if (nPrev != nNew) { ShowNotifyIcon(hWnd, NIM_MODIFY); if (g_hwndServiceDlg) { PostMessage(g_hwndServiceDlg, WM_UPDATEMESSAGE, 0, 0); } } LeaveCriticalSection(&g_stcSection); break; } case WM_TIMER_REFRESH: { EnterCriticalSection(&g_stcSection); if (g_bRescanServices) { GetApacheServicesStatus(); ShowNotifyIcon(hWnd, NIM_MODIFY); if (g_hwndServiceDlg) { PostMessage(g_hwndServiceDlg, WM_UPDATEMESSAGE, 0, 0); } } else if (FindRunningServices()) { ShowNotifyIcon(hWnd, NIM_MODIFY); if (g_hwndServiceDlg) { PostMessage(g_hwndServiceDlg, WM_UPDATEMESSAGE, 0, 0); } } LeaveCriticalSection(&g_stcSection); break; } } break; case WM_QUIT: ShowNotifyIcon(hWnd, NIM_DELETE); break; case WM_TRAYMESSAGE: switch (lParam) { case WM_LBUTTONDBLCLK: if (!g_bDlgServiceOn) { g_bDlgServiceOn = TRUE; DialogBox(g_hInstance, MAKEINTRESOURCE(IDD_DLGSERVICES), hWnd, (DLGPROC)ServiceDlgProc); g_bDlgServiceOn = FALSE; g_hwndServiceDlg = NULL; } else if (IsWindow(g_hwndServiceDlg)) { /* Dirty hack to bring the window to the foreground */ SetWindowPos(g_hwndServiceDlg, HWND_TOPMOST, 0, 0, 0, 0, SWP_NOSIZE | SWP_NOMOVE | SWP_SHOWWINDOW); SetWindowPos(g_hwndServiceDlg, HWND_NOTOPMOST, 0, 0, 0, 0, SWP_NOSIZE | SWP_NOMOVE | SWP_SHOWWINDOW); SetFocus(g_hwndServiceDlg); } break; case WM_LBUTTONUP: ShowTryServicesMenu(hWnd); break; case WM_RBUTTONUP: ShowTryPopupMenu(hWnd); break; } break; case WM_COMMAND: if ((LOWORD(wParam) & IDM_SM_START) == IDM_SM_START) { ApacheManageService(g_stServices[LOWORD(wParam) - IDM_SM_START].szServiceName, g_stServices[LOWORD(wParam) - IDM_SM_START].szImagePath, g_stServices[LOWORD(wParam) - IDM_SM_START].szComputerName, SERVICE_CONTROL_CONTINUE); return TRUE; } else if ((LOWORD(wParam) & IDM_SM_STOP) == IDM_SM_STOP) { ApacheManageService(g_stServices[LOWORD(wParam) - IDM_SM_STOP].szServiceName, g_stServices[LOWORD(wParam) - IDM_SM_STOP].szImagePath, g_stServices[LOWORD(wParam) - IDM_SM_STOP].szComputerName, SERVICE_CONTROL_STOP); return TRUE; } else if ((LOWORD(wParam) & IDM_SM_RESTART) == IDM_SM_RESTART) { ApacheManageService(g_stServices[LOWORD(wParam) - IDM_SM_RESTART].szServiceName, g_stServices[LOWORD(wParam) - IDM_SM_RESTART].szImagePath, g_stServices[LOWORD(wParam) - IDM_SM_RESTART].szComputerName, SERVICE_APACHE_RESTART); return TRUE; } switch (LOWORD(wParam)) { case IDM_RESTORE: if (!g_bDlgServiceOn) { g_bDlgServiceOn = TRUE; DialogBox(g_hInstance, MAKEINTRESOURCE(IDD_DLGSERVICES), hWnd, (DLGPROC)ServiceDlgProc); g_bDlgServiceOn = FALSE; g_hwndServiceDlg = NULL; } else if (IsWindow(g_hwndServiceDlg)) { SetFocus(g_hwndServiceDlg); } break; case IDC_SMANAGER: if (g_dwOSVersion >= OS_VERSION_WIN2K) { ShellExecute(NULL, _T("open"), _T("services.msc"), _T("/s"), NULL, SW_NORMAL); } else { WinExec("Control.exe SrvMgr.cpl Services", SW_NORMAL); } return TRUE; case IDM_EXIT: ShowNotifyIcon(hWnd, NIM_DELETE); PostQuitMessage(0); return TRUE; } default: return DefWindowProc(hWnd, message, wParam, lParam); } return FALSE; } static int KillAWindow(HWND appwindow) { HANDLE appproc; DWORD procid; BOOL postres; SetLastError(0); GetWindowThreadProcessId(appwindow, &procid); if (GetLastError()) return(2); appproc = OpenProcess(SYNCHRONIZE, 0, procid); postres = PostMessage(appwindow, WM_COMMAND, IDM_EXIT, 0); if (appproc && postres) { if (WaitForSingleObject(appproc, 10 /* seconds */ * 1000) == WAIT_OBJECT_0) { CloseHandle(appproc); return (0); } } if (appproc) CloseHandle(appproc); if ((appproc = OpenProcess(PROCESS_TERMINATE, 0, procid)) != NULL) { if (TerminateProcess(appproc, 0)) { CloseHandle(appproc); return (0); } CloseHandle(appproc); } /* Perhaps we were short of permissions? */ return (2); } static int KillAllMonitors(void) { HWND appwindow; int exitcode = 0; PWTS_PROCESS_INFO tsProcs; DWORD tsProcCount, i; DWORD thisProcId; /* This is graceful, close our own Window, clearing the icon */ if ((appwindow = FindWindow(g_szWindowClass, g_szTitle)) != NULL) exitcode = KillAWindow(appwindow); if (g_dwOSVersion < OS_VERSION_WIN2K) return exitcode; thisProcId = GetCurrentProcessId(); if (!WTSEnumerateProcesses(WTS_CURRENT_SERVER_HANDLE, 0, 1, &tsProcs, &tsProcCount)) return exitcode; /* This is ungraceful; close other Windows, with a lingering icon. * Since on terminal server it's not possible to post the message * to exit across sessions, we have to suffer this side effect * of a taskbar 'icon' which will evaporate the next time that * the user hovers over it or when the taskbar area is updated. */ for (i = 0; i < tsProcCount; ++i) { if (_tcscmp(tsProcs[i].pProcessName, _T(AM_STRINGIFY(BIN_NAME))) == 0 && tsProcs[i].ProcessId != thisProcId) WTSTerminateProcess(WTS_CURRENT_SERVER_HANDLE, tsProcs[i].ProcessId, 1); } WTSFreeMemory(tsProcs); return exitcode; } /* Create main invisible window */ HWND CreateMainWindow(HINSTANCE hInstance) { HWND hWnd = NULL; WNDCLASSEX wcex; wcex.cbSize = sizeof(WNDCLASSEX); wcex.style = CS_HREDRAW | CS_VREDRAW; wcex.lpfnWndProc = (WNDPROC)WndProc; wcex.cbClsExtra = 0; wcex.cbWndExtra = 0; wcex.hInstance = hInstance; wcex.hIcon = (HICON)LoadImage(hInstance, MAKEINTRESOURCE(IDI_APSRVMON), IMAGE_ICON, 32, 32, LR_DEFAULTCOLOR); wcex.hCursor = g_hCursorArrow; wcex.hbrBackground = (HBRUSH)(COLOR_WINDOW+1); wcex.lpszMenuName = 0; wcex.lpszClassName = g_szWindowClass; wcex.hIconSm = (HICON)LoadImage(hInstance, MAKEINTRESOURCE(IDI_APSRVMON), IMAGE_ICON, 16, 16, LR_DEFAULTCOLOR); if (RegisterClassEx(&wcex)) { hWnd = CreateWindow(g_szWindowClass, g_szTitle, 0, 0, 0, 0, 0, NULL, NULL, hInstance, NULL); } return hWnd; } #ifndef UNICODE /* Borrowed from CRT internal.h for _MBCS argc/argv parsing in this GUI app */ int __cdecl _setargv(void); #endif int WINAPI WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine, int nCmdShow) { TCHAR szTmp[MAX_LOADSTRING]; TCHAR szCmp[MAX_COMPUTERNAME_LENGTH+4]; MSG msg; /* existing window */ HWND appwindow; DWORD dwControl; int i; DWORD d; if (!GetSystemOSVersion(&g_dwOSVersion)) { ErrorMessage(NULL, TRUE); return 1; } g_LangID = GetUserDefaultLangID(); if ((g_LangID & 0xFF) != LANG_ENGLISH) { g_LangID = MAKELANGID(LANG_NEUTRAL, SUBLANG_NEUTRAL); } for (i = IDS_MSG_FIRST; i <= IDS_MSG_LAST; ++i) { LoadString(hInstance, i, szTmp, MAX_LOADSTRING); g_lpMsg[i - IDS_MSG_FIRST] = _tcsdup(szTmp); } LoadString(hInstance, IDS_APMONITORTITLE, szTmp, MAX_LOADSTRING); d = MAX_COMPUTERNAME_LENGTH+1; _tcscpy(szCmp, _T("\\\\")); GetComputerName(szCmp + 2, &d); _tcsupr(szCmp); g_szLocalHost = _tcsdup(szCmp); memset(g_stComputers, 0, sizeof(ST_MONITORED_COMP) * MAX_APACHE_COMPUTERS); g_stComputers[0].szComputerName = _tcsdup(szCmp); g_stComputers[0].hRegistry = HKEY_LOCAL_MACHINE; g_szTitle = _tcsdup(szTmp); LoadString(hInstance, IDS_APMONITORCLASS, szTmp, MAX_LOADSTRING); g_szWindowClass = _tcsdup(szTmp); appwindow = FindWindow(g_szWindowClass, g_szTitle); #ifdef UNICODE __wargv = CommandLineToArgvW(GetCommandLineW(), &__argc); #else #if defined(_MSC_VER) && _MSC_VER < 1800 _setargv(); #endif #endif if ((__argc == 2) && (_tcscmp(__targv[1], _T("--kill")) == 0)) { /* Off to chase and close up every ApacheMonitor taskbar window */ return KillAllMonitors(); } else if ((__argc == 4) && (g_dwOSVersion >= OS_VERSION_WIN2K)) { dwControl = _ttoi(__targv[1]); if ((dwControl != SERVICE_CONTROL_CONTINUE) && (dwControl != SERVICE_APACHE_RESTART) && (dwControl != SERVICE_CONTROL_STOP)) { return 1; } /* Chase down and close up our session's previous window */ if ((appwindow) != NULL) KillAWindow(appwindow); } else if (__argc != 1) { return 1; } else if (appwindow) { ErrorMessage(g_lpMsg[IDS_MSG_APPRUNNING - IDS_MSG_FIRST], FALSE); return 0; } g_icoStop = LoadImage(hInstance, MAKEINTRESOURCE(IDI_ICOSTOP), IMAGE_ICON, 16, 16, LR_DEFAULTCOLOR); g_icoRun = LoadImage(hInstance, MAKEINTRESOURCE(IDI_ICORUN), IMAGE_ICON, 16, 16, LR_DEFAULTCOLOR); g_hCursorHourglass = LoadImage(NULL, MAKEINTRESOURCE(OCR_WAIT), IMAGE_CURSOR, LR_DEFAULTSIZE, LR_DEFAULTSIZE, LR_SHARED); g_hCursorArrow = LoadImage(NULL, MAKEINTRESOURCE(OCR_NORMAL), IMAGE_CURSOR, LR_DEFAULTSIZE, LR_DEFAULTSIZE, LR_SHARED); g_hBmpStart = LoadImage(hInstance, MAKEINTRESOURCE(IDB_BMPRUN), IMAGE_BITMAP, XBITMAP, YBITMAP, LR_DEFAULTCOLOR); g_hBmpStop = LoadImage(hInstance, MAKEINTRESOURCE(IDB_BMPSTOP), IMAGE_BITMAP, XBITMAP, YBITMAP, LR_DEFAULTCOLOR); memset(g_stServices, 0, sizeof(ST_APACHE_SERVICE) * MAX_APACHE_SERVICES); CoInitialize(NULL); InitCommonControls(); g_hInstance = hInstance; g_hwndMain = CreateMainWindow(hInstance); g_bUiTaskbarCreated = RegisterWindowMessage(_T("TaskbarCreated")); InitializeCriticalSection(&g_stcSection); g_hwndServiceDlg = NULL; if (g_hwndMain != NULL) { /* To avoid recursion, pass ImagePath NULL (a noop on NT and later) */ if ((__argc == 4) && (g_dwOSVersion >= OS_VERSION_WIN2K)) ApacheManageService(__targv[2], NULL, __targv[3], dwControl); while (GetMessage(&msg, NULL, 0, 0) == TRUE) { TranslateMessage(&msg); DispatchMessage(&msg); } am_ClearServicesSt(); } am_ClearComputersSt(); DeleteCriticalSection(&g_stcSection); DestroyIcon(g_icoStop); DestroyIcon(g_icoRun); DestroyCursor(g_hCursorHourglass); DestroyCursor(g_hCursorArrow); DeleteObject(g_hBmpStart); DeleteObject(g_hBmpStop); CoUninitialize(); return 0; } httpd-2.4.41/support/rotatelogs.dep0000644000000000000500000000166512674411515015643 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by rotatelogs.mak ..\build\win32\httpd.rc : \ "..\include\ap_release.h"\ .\rotatelogs.c : \ "..\srclib\apr\include\apr.h"\ "..\srclib\apr\include\apr_allocator.h"\ "..\srclib\apr\include\apr_errno.h"\ "..\srclib\apr\include\apr_file_info.h"\ "..\srclib\apr\include\apr_file_io.h"\ "..\srclib\apr\include\apr_general.h"\ "..\srclib\apr\include\apr_getopt.h"\ "..\srclib\apr\include\apr_inherit.h"\ "..\srclib\apr\include\apr_lib.h"\ "..\srclib\apr\include\apr_network_io.h"\ "..\srclib\apr\include\apr_poll.h"\ "..\srclib\apr\include\apr_pools.h"\ "..\srclib\apr\include\apr_signal.h"\ "..\srclib\apr\include\apr_strings.h"\ "..\srclib\apr\include\apr_tables.h"\ "..\srclib\apr\include\apr_thread_mutex.h"\ "..\srclib\apr\include\apr_thread_proc.h"\ "..\srclib\apr\include\apr_time.h"\ "..\srclib\apr\include\apr_user.h"\ "..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/support/htcacheclean.dep0000644000000000000500000000244012674411515016052 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by htcacheclean.mak .\htcacheclean.c : \ "..\modules\cache\cache_common.h"\ "..\modules\cache\cache_disk_common.h"\ "..\srclib\apr-util\include\apr_buckets.h"\ "..\srclib\apr-util\include\apr_date.h"\ "..\srclib\apr-util\include\apr_md5.h"\ "..\srclib\apr-util\include\apr_xlate.h"\ "..\srclib\apr-util\include\apu.h"\ "..\srclib\apr\include\apr.h"\ "..\srclib\apr\include\apr_allocator.h"\ "..\srclib\apr\include\apr_errno.h"\ "..\srclib\apr\include\apr_file_info.h"\ "..\srclib\apr\include\apr_file_io.h"\ "..\srclib\apr\include\apr_general.h"\ "..\srclib\apr\include\apr_getopt.h"\ "..\srclib\apr\include\apr_hash.h"\ "..\srclib\apr\include\apr_inherit.h"\ "..\srclib\apr\include\apr_lib.h"\ "..\srclib\apr\include\apr_mmap.h"\ "..\srclib\apr\include\apr_network_io.h"\ "..\srclib\apr\include\apr_pools.h"\ "..\srclib\apr\include\apr_ring.h"\ "..\srclib\apr\include\apr_signal.h"\ "..\srclib\apr\include\apr_strings.h"\ "..\srclib\apr\include\apr_tables.h"\ "..\srclib\apr\include\apr_thread_mutex.h"\ "..\srclib\apr\include\apr_thread_proc.h"\ "..\srclib\apr\include\apr_time.h"\ "..\srclib\apr\include\apr_user.h"\ "..\srclib\apr\include\apr_want.h"\ ..\build\win32\httpd.rc : \ "..\include\ap_release.h"\ httpd-2.4.41/support/htpasswd.mak0000644000000000000500000002077712701473373015323 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on htpasswd.dsp !IF "$(CFG)" == "" CFG=htpasswd - Win32 Debug !MESSAGE No configuration specified. Defaulting to htpasswd - Win32 Debug. !ENDIF !IF "$(CFG)" != "htpasswd - Win32 Release" && "$(CFG)" != "htpasswd - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "htpasswd.mak" CFG="htpasswd - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "htpasswd - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "htpasswd - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "htpasswd - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\htpasswd.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Release" "apr - Win32 Release" "$(OUTDIR)\htpasswd.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 ReleaseCLEAN" "aprutil - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\htpasswd.obj" -@erase "$(INTDIR)\htpasswd.res" -@erase "$(INTDIR)\htpasswd_src.idb" -@erase "$(INTDIR)\htpasswd_src.pdb" -@erase "$(INTDIR)\passwd_common.obj" -@erase "$(OUTDIR)\htpasswd.exe" -@erase "$(OUTDIR)\htpasswd.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\htpasswd_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\htpasswd.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="htpasswd.exe" /d LONG_NAME="Apache htpasswd command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\htpasswd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib shell32.lib rpcrt4.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\htpasswd.pdb" /debug /out:"$(OUTDIR)\htpasswd.exe" /opt:ref LINK32_OBJS= \ "$(INTDIR)\htpasswd.obj" \ "$(INTDIR)\passwd_common.obj" \ "$(INTDIR)\htpasswd.res" \ "..\srclib\apr\LibR\apr-1.lib" \ "..\srclib\apr-util\LibR\aprutil-1.lib" "$(OUTDIR)\htpasswd.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\htpasswd.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\htpasswd.exe" if exist .\Release\htpasswd.exe.manifest mt.exe -manifest .\Release\htpasswd.exe.manifest -outputresource:.\Release\htpasswd.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "htpasswd - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\htpasswd.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Debug" "apr - Win32 Debug" "$(OUTDIR)\htpasswd.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 DebugCLEAN" "aprutil - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\htpasswd.obj" -@erase "$(INTDIR)\htpasswd.res" -@erase "$(INTDIR)\htpasswd_src.idb" -@erase "$(INTDIR)\htpasswd_src.pdb" -@erase "$(INTDIR)\passwd_common.obj" -@erase "$(OUTDIR)\htpasswd.exe" -@erase "$(OUTDIR)\htpasswd.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\htpasswd_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\htpasswd.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="htpasswd.exe" /d LONG_NAME="Apache htpasswd command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\htpasswd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib shell32.lib rpcrt4.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\htpasswd.pdb" /debug /out:"$(OUTDIR)\htpasswd.exe" LINK32_OBJS= \ "$(INTDIR)\htpasswd.obj" \ "$(INTDIR)\passwd_common.obj" \ "$(INTDIR)\htpasswd.res" \ "..\srclib\apr\LibD\apr-1.lib" \ "..\srclib\apr-util\LibD\aprutil-1.lib" "$(OUTDIR)\htpasswd.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\htpasswd.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\htpasswd.exe" if exist .\Debug\htpasswd.exe.manifest mt.exe -manifest .\Debug\htpasswd.exe.manifest -outputresource:.\Debug\htpasswd.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("htpasswd.dep") !INCLUDE "htpasswd.dep" !ELSE !MESSAGE Warning: cannot find "htpasswd.dep" !ENDIF !ENDIF !IF "$(CFG)" == "htpasswd - Win32 Release" || "$(CFG)" == "htpasswd - Win32 Debug" !IF "$(CFG)" == "htpasswd - Win32 Release" "apr - Win32 Release" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" cd "..\..\support" "apr - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "htpasswd - Win32 Debug" "apr - Win32 Debug" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" cd "..\..\support" "apr - Win32 DebugCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF !IF "$(CFG)" == "htpasswd - Win32 Release" "aprutil - Win32 Release" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" cd "..\..\support" "aprutil - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "htpasswd - Win32 Debug" "aprutil - Win32 Debug" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" cd "..\..\support" "aprutil - Win32 DebugCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF SOURCE=.\htpasswd.c "$(INTDIR)\htpasswd.obj" : $(SOURCE) "$(INTDIR)" SOURCE=..\build\win32\httpd.rc !IF "$(CFG)" == "htpasswd - Win32 Release" "$(INTDIR)\htpasswd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\htpasswd.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="htpasswd.exe" /d LONG_NAME="Apache htpasswd command line utility" $(SOURCE) !ELSEIF "$(CFG)" == "htpasswd - Win32 Debug" "$(INTDIR)\htpasswd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\htpasswd.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="htpasswd.exe" /d LONG_NAME="Apache htpasswd command line utility" $(SOURCE) !ENDIF SOURCE=.\passwd_common.c "$(INTDIR)\passwd_common.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/support/httxt2dbm.dep0000644000000000000500000000153612674411515015375 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by httxt2dbm.mak ..\build\win32\httpd.rc : \ "..\include\ap_release.h"\ .\httxt2dbm.c : \ "..\srclib\apr-util\include\apr_dbm.h"\ "..\srclib\apr-util\include\apu.h"\ "..\srclib\apr\include\apr.h"\ "..\srclib\apr\include\apr_allocator.h"\ "..\srclib\apr\include\apr_errno.h"\ "..\srclib\apr\include\apr_file_info.h"\ "..\srclib\apr\include\apr_file_io.h"\ "..\srclib\apr\include\apr_general.h"\ "..\srclib\apr\include\apr_getopt.h"\ "..\srclib\apr\include\apr_inherit.h"\ "..\srclib\apr\include\apr_lib.h"\ "..\srclib\apr\include\apr_pools.h"\ "..\srclib\apr\include\apr_strings.h"\ "..\srclib\apr\include\apr_tables.h"\ "..\srclib\apr\include\apr_thread_mutex.h"\ "..\srclib\apr\include\apr_time.h"\ "..\srclib\apr\include\apr_user.h"\ "..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/support/htpasswd.dep0000644000000000000500000000366112674411515015313 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by htpasswd.mak .\htpasswd.c : \ "..\srclib\apr-util\include\apr_md5.h"\ "..\srclib\apr-util\include\apr_sha1.h"\ "..\srclib\apr-util\include\apr_xlate.h"\ "..\srclib\apr-util\include\apu.h"\ "..\srclib\apr-util\include\apu_version.h"\ "..\srclib\apr\include\apr.h"\ "..\srclib\apr\include\apr_allocator.h"\ "..\srclib\apr\include\apr_errno.h"\ "..\srclib\apr\include\apr_file_info.h"\ "..\srclib\apr\include\apr_file_io.h"\ "..\srclib\apr\include\apr_general.h"\ "..\srclib\apr\include\apr_getopt.h"\ "..\srclib\apr\include\apr_inherit.h"\ "..\srclib\apr\include\apr_lib.h"\ "..\srclib\apr\include\apr_pools.h"\ "..\srclib\apr\include\apr_signal.h"\ "..\srclib\apr\include\apr_strings.h"\ "..\srclib\apr\include\apr_tables.h"\ "..\srclib\apr\include\apr_thread_mutex.h"\ "..\srclib\apr\include\apr_time.h"\ "..\srclib\apr\include\apr_user.h"\ "..\srclib\apr\include\apr_version.h"\ "..\srclib\apr\include\apr_want.h"\ ".\passwd_common.h"\ ..\build\win32\httpd.rc : \ "..\include\ap_release.h"\ .\passwd_common.c : \ "..\srclib\apr-util\include\apr_md5.h"\ "..\srclib\apr-util\include\apr_sha1.h"\ "..\srclib\apr-util\include\apr_xlate.h"\ "..\srclib\apr-util\include\apu.h"\ "..\srclib\apr-util\include\apu_version.h"\ "..\srclib\apr\include\apr.h"\ "..\srclib\apr\include\apr_allocator.h"\ "..\srclib\apr\include\apr_errno.h"\ "..\srclib\apr\include\apr_file_info.h"\ "..\srclib\apr\include\apr_file_io.h"\ "..\srclib\apr\include\apr_general.h"\ "..\srclib\apr\include\apr_inherit.h"\ "..\srclib\apr\include\apr_lib.h"\ "..\srclib\apr\include\apr_pools.h"\ "..\srclib\apr\include\apr_strings.h"\ "..\srclib\apr\include\apr_tables.h"\ "..\srclib\apr\include\apr_thread_mutex.h"\ "..\srclib\apr\include\apr_time.h"\ "..\srclib\apr\include\apr_user.h"\ "..\srclib\apr\include\apr_version.h"\ "..\srclib\apr\include\apr_want.h"\ ".\passwd_common.h"\ httpd-2.4.41/support/passwd_common.c0000644000000000000500000002351513252575050015777 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "passwd_common.h" #include "apr_strings.h" #include "apr_errno.h" #if APR_HAVE_STDIO_H #include #endif #include "apr_md5.h" #include "apr_sha1.h" #if APR_HAVE_TIME_H #include #endif #if APR_HAVE_CRYPT_H #include #endif #if APR_HAVE_STDLIB_H #include #endif #if APR_HAVE_STRING_H #include #endif #if APR_HAVE_UNISTD_H #include #endif #if APR_HAVE_IO_H #include #endif #ifdef _MSC_VER #define write _write #endif apr_file_t *errfile; int abort_on_oom(int rc) { const char *buf = "Error: out of memory\n"; int written, count = strlen(buf); do { written = write(STDERR_FILENO, buf, count); if (written == count) break; if (written > 0) { buf += written; count -= written; } } while (written >= 0 || errno == EINTR); abort(); /* NOTREACHED */ return 0; } static int generate_salt(char *s, size_t size, const char **errstr, apr_pool_t *pool) { unsigned char rnd[32]; static const char itoa64[] = "./0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"; apr_size_t n; unsigned int val = 0, bits = 0; apr_status_t rv; n = (size * 6 + 7)/8; if (n > sizeof(rnd)) { apr_file_printf(errfile, "generate_salt(): BUG: Buffer too small"); abort(); } rv = apr_generate_random_bytes(rnd, n); if (rv) { *errstr = apr_psprintf(pool, "Unable to generate random bytes: %pm", &rv); return ERR_RANDOM; } n = 0; while (size > 0) { if (bits < 6) { val |= (rnd[n++] << bits); bits += 8; } *s++ = itoa64[val & 0x3f]; size--; val >>= 6; bits -= 6; } *s = '\0'; return 0; } void putline(apr_file_t *f, const char *l) { apr_status_t rv; if (f == NULL) return; rv = apr_file_puts(l, f); if (rv != APR_SUCCESS) { apr_file_printf(errfile, "Error writing temp file: %pm", &rv); apr_file_close(f); exit(ERR_FILEPERM); } } int get_password(struct passwd_ctx *ctx) { char buf[MAX_STRING_LEN + 1]; if (ctx->passwd_src == PW_STDIN) { apr_file_t *file_stdin; apr_size_t nread; if (apr_file_open_stdin(&file_stdin, ctx->pool) != APR_SUCCESS) { ctx->errstr = "Unable to read from stdin."; return ERR_GENERAL; } if (apr_file_read_full(file_stdin, buf, sizeof(buf) - 1, &nread) != APR_EOF || nread == sizeof(buf) - 1) { goto err_too_long; } buf[nread] = '\0'; if (nread >= 1 && buf[nread-1] == '\n') { buf[nread-1] = '\0'; if (nread >= 2 && buf[nread-2] == '\r') buf[nread-2] = '\0'; } apr_file_close(file_stdin); ctx->passwd = apr_pstrdup(ctx->pool, buf); } else if (ctx->passwd_src == PW_PROMPT_VERIFY) { apr_size_t bufsize = sizeof(buf); if (apr_password_get("Enter password: ", buf, &bufsize) != 0) goto err_too_long; ctx->passwd = apr_pstrdup(ctx->pool, buf); } else { apr_size_t bufsize = sizeof(buf); if (apr_password_get("New password: ", buf, &bufsize) != 0) goto err_too_long; ctx->passwd = apr_pstrdup(ctx->pool, buf); bufsize = sizeof(buf); buf[0] = '\0'; apr_password_get("Re-type new password: ", buf, &bufsize); if (strcmp(ctx->passwd, buf) != 0) { ctx->errstr = "password verification error"; memset(ctx->passwd, '\0', strlen(ctx->passwd)); memset(buf, '\0', sizeof(buf)); return ERR_PWMISMATCH; } } memset(buf, '\0', sizeof(buf)); return 0; err_too_long: ctx->errstr = apr_psprintf(ctx->pool, "password too long (>%" APR_SIZE_T_FMT ")", sizeof(buf) - 1); return ERR_OVERFLOW; } /* * Make a password record from the given information. A zero return * indicates success; on failure, ctx->errstr points to the error message. */ int mkhash(struct passwd_ctx *ctx) { char *pw; char salt[16]; apr_status_t rv; int ret = 0; #if CRYPT_ALGO_SUPPORTED char *cbuf; #endif if (ctx->cost != 0 && ctx->alg != ALG_BCRYPT) { apr_file_printf(errfile, "Warning: Ignoring -C argument for this algorithm." NL); } if (ctx->passwd == NULL) { if ((ret = get_password(ctx)) != 0) return ret; } pw = ctx->passwd; switch (ctx->alg) { case ALG_APSHA: /* XXX out >= 28 + strlen(sha1) chars - fixed len SHA */ apr_sha1_base64(pw, strlen(pw), ctx->out); break; case ALG_APMD5: ret = generate_salt(salt, 8, &ctx->errstr, ctx->pool); if (ret != 0) break; rv = apr_md5_encode(pw, salt, ctx->out, ctx->out_len); if (rv != APR_SUCCESS) { ctx->errstr = apr_psprintf(ctx->pool, "could not encode password: %pm", &rv); ret = ERR_GENERAL; } break; case ALG_PLAIN: /* XXX this len limitation is not in sync with any HTTPd len. */ apr_cpystrn(ctx->out, pw, ctx->out_len); break; #if CRYPT_ALGO_SUPPORTED case ALG_CRYPT: ret = generate_salt(salt, 8, &ctx->errstr, ctx->pool); if (ret != 0) break; cbuf = crypt(pw, salt); if (cbuf == NULL) { rv = APR_FROM_OS_ERROR(errno); ctx->errstr = apr_psprintf(ctx->pool, "crypt() failed: %pm", &rv); ret = ERR_PWMISMATCH; break; } apr_cpystrn(ctx->out, cbuf, ctx->out_len - 1); if (strlen(pw) > 8) { char *truncpw = apr_pstrdup(ctx->pool, pw); truncpw[8] = '\0'; if (!strcmp(ctx->out, crypt(truncpw, salt))) { apr_file_printf(errfile, "Warning: Password truncated to 8 " "characters by CRYPT algorithm." NL); } memset(truncpw, '\0', strlen(pw)); } break; #endif /* CRYPT_ALGO_SUPPORTED */ #if BCRYPT_ALGO_SUPPORTED case ALG_BCRYPT: rv = apr_generate_random_bytes((unsigned char*)salt, 16); if (rv != APR_SUCCESS) { ctx->errstr = apr_psprintf(ctx->pool, "Unable to generate random " "bytes: %pm", &rv); ret = ERR_RANDOM; break; } if (ctx->cost == 0) ctx->cost = BCRYPT_DEFAULT_COST; rv = apr_bcrypt_encode(pw, ctx->cost, (unsigned char*)salt, 16, ctx->out, ctx->out_len); if (rv != APR_SUCCESS) { ctx->errstr = apr_psprintf(ctx->pool, "Unable to encode with " "bcrypt: %pm", &rv); ret = ERR_PWMISMATCH; break; } break; #endif /* BCRYPT_ALGO_SUPPORTED */ default: apr_file_printf(errfile, "mkhash(): BUG: invalid algorithm %d", ctx->alg); abort(); } memset(pw, '\0', strlen(pw)); return ret; } int parse_common_options(struct passwd_ctx *ctx, char opt, const char *opt_arg) { switch (opt) { case 'b': ctx->passwd_src = PW_ARG; break; case 'i': ctx->passwd_src = PW_STDIN; break; case 'm': ctx->alg = ALG_APMD5; break; case 's': ctx->alg = ALG_APSHA; break; case 'p': ctx->alg = ALG_PLAIN; #if !PLAIN_ALGO_SUPPORTED /* Backward compatible behavior: Just print a warning */ apr_file_printf(errfile, "Warning: storing passwords as plain text might just " "not work on this platform." NL); #endif break; case 'd': #if CRYPT_ALGO_SUPPORTED ctx->alg = ALG_CRYPT; #else /* Backward compatible behavior: Use MD5. OK since MD5 is more secure */ apr_file_printf(errfile, "Warning: CRYPT algorithm not supported on this " "platform." NL "Automatically using MD5 format." NL); ctx->alg = ALG_APMD5; #endif break; case 'B': #if BCRYPT_ALGO_SUPPORTED ctx->alg = ALG_BCRYPT; #else /* Don't fall back to something less secure */ ctx->errstr = "BCRYPT algorithm not supported on this platform"; return ERR_ALG_NOT_SUPP; #endif break; case 'C': { char *endptr; long num = strtol(opt_arg, &endptr, 10); if (*endptr != '\0' || num <= 0) { ctx->errstr = "argument to -C must be a positive integer"; return ERR_SYNTAX; } ctx->cost = num; break; } default: apr_file_printf(errfile, "parse_common_options(): BUG: invalid option %c", opt); abort(); } return 0; } httpd-2.4.41/support/htcacheclean.c0000644000000000000500000017275312757564422015553 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * htcacheclean.c: simple program for cleaning of * the disk cache of the Apache HTTP server * * Contributed by Andreas Steinmetz * 8 Oct 2004 */ #include "apr.h" #include "apr_lib.h" #include "apr_strings.h" #include "apr_file_io.h" #include "apr_file_info.h" #include "apr_pools.h" #include "apr_hash.h" #include "apr_thread_proc.h" #include "apr_signal.h" #include "apr_getopt.h" #include "apr_md5.h" #include "apr_ring.h" #include "apr_date.h" #include "apr_buckets.h" #include "../modules/cache/cache_common.h" #include "../modules/cache/cache_disk_common.h" #if APR_HAVE_UNISTD_H #include #endif #if APR_HAVE_STDLIB_H #include #endif /* define the following for debugging */ #undef DEBUG /* * Note: on Linux delays <= 2ms are busy waits without * scheduling, so never use a delay <= 2ms below */ #define NICE_DELAY 10000 /* usecs */ #define DELETE_NICE 10 /* be nice after this amount of delete ops */ #define STAT_ATTEMPTS 10 /* maximum stat attempts for a file */ #define STAT_DELAY 5000 /* usecs */ #define HEADER 1 /* headers file */ #define DATA 2 /* body file */ #define TEMP 4 /* temporary file */ #define HEADERDATA (HEADER|DATA) #define MAXDEVIATION 3600 /* secs */ #define SECS_PER_MIN 60 #define KBYTE 1024 #define MBYTE 1048576 #define GBYTE 1073741824 #define DIRINFO (APR_FINFO_MTIME|APR_FINFO_SIZE|APR_FINFO_TYPE|APR_FINFO_LINK) typedef struct _direntry { APR_RING_ENTRY(_direntry) link; int type; /* type of file/fileset: TEMP, HEADER, DATA, HEADERDATA */ apr_time_t htime; /* headers file modification time */ apr_time_t dtime; /* body file modification time */ apr_off_t hsize; /* headers file size */ apr_off_t dsize; /* body or temporary file size */ char *basename; /* file/fileset base name */ } DIRENTRY; typedef struct _entry { APR_RING_ENTRY(_entry) link; apr_time_t expire; /* cache entry exiration time */ apr_time_t response_time; /* cache entry time of last response to client */ apr_time_t htime; /* headers file modification time */ apr_time_t dtime; /* body file modification time */ apr_off_t hsize; /* headers file size */ apr_off_t dsize; /* body or temporary file size */ char *basename; /* fileset base name */ } ENTRY; static int delcount; /* file deletion count for nice mode */ static int interrupted; /* flag: true if SIGINT or SIGTERM occurred */ static int realclean; /* flag: true means user said apache is not running */ static int verbose; /* flag: true means print statistics */ static int benice; /* flag: true means nice mode is activated */ static int dryrun; /* flag: true means dry run, don't actually delete anything */ static int deldirs; /* flag: true means directories should be deleted */ static int listurls; /* flag: true means list cached urls */ static int listextended;/* flag: true means list cached urls */ static int baselen; /* string length of the path to the proxy directory */ static apr_time_t now; /* start time of this processing run */ static apr_file_t *errfile; /* stderr file handle */ static apr_file_t *outfile; /* stdout file handle */ static apr_off_t unsolicited; /* file size summary for deleted unsolicited files */ static APR_RING_ENTRY(_entry) root; /* ENTRY ring anchor */ /* short program name as called */ static const char *shortname = "htcacheclean"; /* what did we clean? */ struct stats { apr_off_t total; apr_off_t sum; apr_off_t max; apr_off_t ntotal; apr_off_t nodes; apr_off_t inodes; apr_off_t etotal; apr_off_t entries; apr_off_t dfuture; apr_off_t dexpired; apr_off_t dfresh; }; #ifdef DEBUG /* * fake delete for debug purposes */ #define apr_file_remove fake_file_remove static void fake_file_remove(char *pathname, apr_pool_t *p) { apr_finfo_t info; /* stat and printing to simulate some deletion system load and to display what would actually have happened */ apr_stat(&info, pathname, DIRINFO, p); apr_file_printf(errfile, "would delete %s" APR_EOL_STR, pathname); } #endif /* * called on SIGINT or SIGTERM */ static void setterm(int unused) { #ifdef DEBUG apr_file_printf(errfile, "interrupt" APR_EOL_STR); #endif interrupted = 1; } /* * called in out of memory condition */ static int oom(int unused) { static int called = 0; /* be careful to call exit() only once */ if (!called) { called = 1; exit(1); } return APR_ENOMEM; } /* * print purge statistics */ static void printstats(char *path, struct stats *s) { char ttype, stype, mtype, utype; apr_off_t tfrag, sfrag, ufrag; if (!verbose) { return; } ttype = 'K'; tfrag = ((s->total * 10) / KBYTE) % 10; s->total /= KBYTE; if (s->total >= KBYTE) { ttype = 'M'; tfrag = ((s->total * 10) / KBYTE) % 10; s->total /= KBYTE; } stype = 'K'; sfrag = ((s->sum * 10) / KBYTE) % 10; s->sum /= KBYTE; if (s->sum >= KBYTE) { stype = 'M'; sfrag = ((s->sum * 10) / KBYTE) % 10; s->sum /= KBYTE; } mtype = 'K'; s->max /= KBYTE; if (s->max >= KBYTE) { mtype = 'M'; s->max /= KBYTE; } apr_file_printf(errfile, "Cleaned %s. Statistics:" APR_EOL_STR, path); if (unsolicited) { utype = 'K'; ufrag = ((unsolicited * 10) / KBYTE) % 10; unsolicited /= KBYTE; if (unsolicited >= KBYTE) { utype = 'M'; ufrag = ((unsolicited * 10) / KBYTE) % 10; unsolicited /= KBYTE; } if (!unsolicited && !ufrag) { ufrag = 1; } apr_file_printf(errfile, "unsolicited size %d.%d%c" APR_EOL_STR, (int)(unsolicited), (int)(ufrag), utype); } apr_file_printf(errfile, "size limit %" APR_OFF_T_FMT ".0%c" APR_EOL_STR, s->max, mtype); apr_file_printf(errfile, "inodes limit %" APR_OFF_T_FMT APR_EOL_STR, s->inodes); apr_file_printf( errfile, "total size was %" APR_OFF_T_FMT ".%" APR_OFF_T_FMT "%c, total size now " "%" APR_OFF_T_FMT ".%" APR_OFF_T_FMT "%c" APR_EOL_STR, s->total, tfrag, ttype, s->sum, sfrag, stype); apr_file_printf(errfile, "total inodes was %" APR_OFF_T_FMT ", total %sinodes now " "%" APR_OFF_T_FMT APR_EOL_STR, s->ntotal, dryrun && deldirs ? "estimated " : "", s->nodes); apr_file_printf( errfile, "total entries was %" APR_OFF_T_FMT ", total entries now %" APR_OFF_T_FMT APR_EOL_STR, s->etotal, s->entries); apr_file_printf( errfile, "%" APR_OFF_T_FMT " entries deleted (%" APR_OFF_T_FMT " from future, %" APR_OFF_T_FMT " expired, %" APR_OFF_T_FMT " fresh)" APR_EOL_STR, (s->etotal - s->entries), s->dfuture, s->dexpired, s->dfresh); } /** * Round the value up to the given threshold. */ static apr_size_t round_up(apr_size_t val, apr_off_t round) { if (round > 1) { return (apr_size_t)(((val + round - 1) / round) * round); } return val; } /* * delete parent directories */ static void delete_parent(const char *path, const char *basename, apr_off_t *nodes, apr_pool_t *pool) { char *nextpath, *name; apr_pool_t *p; /* temp pool, otherwise lots of memory could be allocated */ apr_pool_create(&p, pool); name = apr_pstrdup(p, basename); /* If asked to delete dirs, do so now. We don't care if it fails. * If it fails, it likely means there was something else there. */ if (deldirs && !dryrun) { const char *vary; char *end = strrchr(name, '/'); while (end) { *end = 0; /* remove the directory */ nextpath = apr_pstrcat(p, path, "/", name, NULL); if (!apr_dir_remove(nextpath, p)) { (*nodes)--; /* vary directory found? */ vary = strstr(name, CACHE_VDIR_SUFFIX); if (vary && !vary[sizeof(CACHE_VDIR_SUFFIX) - 1]) { nextpath = apr_pstrcat(p, path, "/", apr_pstrndup(p, name, vary - name), NULL); if (!apr_file_remove(nextpath, p)) { (*nodes)--; } } } else { break; } end = strrchr(name, '/'); } } apr_pool_destroy(p); if (benice) { if (++delcount >= DELETE_NICE) { apr_sleep(NICE_DELAY); delcount = 0; } } } /* * delete a single file */ static void delete_file(char *path, char *basename, apr_off_t *nodes, apr_pool_t *pool) { char *nextpath; apr_pool_t *p; /* temp pool, otherwise lots of memory could be allocated */ apr_pool_create(&p, pool); nextpath = apr_pstrcat(p, path, "/", basename, NULL); if (dryrun) { apr_finfo_t finfo; if (!apr_stat(&finfo, nextpath, APR_FINFO_NLINK, p)) { (*nodes)--; } } else if (!apr_file_remove(nextpath, p)) { (*nodes)--; } apr_pool_destroy(p); if (benice) { if (++delcount >= DELETE_NICE) { apr_sleep(NICE_DELAY); delcount = 0; } } delete_parent(path, basename, nodes, pool); } /* * delete cache file set */ static void delete_entry(char *path, char *basename, apr_off_t *nodes, apr_pool_t *pool) { char *nextpath; apr_pool_t *p; /* temp pool, otherwise lots of memory could be allocated */ apr_pool_create(&p, pool); nextpath = apr_pstrcat(p, path, "/", basename, CACHE_HEADER_SUFFIX, NULL); if (dryrun) { apr_finfo_t finfo; if (!apr_stat(&finfo, nextpath, APR_FINFO_NLINK, p)) { (*nodes)--; } } else if (!apr_file_remove(nextpath, p)) { (*nodes)--; } nextpath = apr_pstrcat(p, path, "/", basename, CACHE_DATA_SUFFIX, NULL); if (dryrun) { apr_finfo_t finfo; if (!apr_stat(&finfo, nextpath, APR_FINFO_NLINK, p)) { (*nodes)--; } } else if (!apr_file_remove(nextpath, p)) { (*nodes)--; } apr_pool_destroy(p); if (benice) { delcount += 2; if (delcount >= DELETE_NICE) { apr_sleep(NICE_DELAY); delcount = 0; } } delete_parent(path, basename, nodes, pool); } /* * list the cache directory tree */ static int list_urls(char *path, apr_pool_t *pool, apr_off_t round) { apr_dir_t *dir; apr_finfo_t info; apr_size_t len; apr_pool_t *p; apr_file_t *fd; const char *ext, *nextpath; char *url; apr_uint32_t format; disk_cache_info_t disk_info; apr_pool_create(&p, pool); if (apr_dir_open(&dir, path, p) != APR_SUCCESS) { return 1; } while (apr_dir_read(&info, APR_FINFO_TYPE, dir) == APR_SUCCESS && !interrupted) { if (info.filetype == APR_DIR) { if (!strcmp(info.name, ".") || !strcmp(info.name, "..")) { continue; } if (list_urls(apr_pstrcat(p, path, "/", info.name, NULL), pool, round)) { return 1; } } else if (info.filetype == APR_REG) { ext = strchr(info.name, '.'); if (ext && !strcasecmp(ext, CACHE_HEADER_SUFFIX)) { nextpath = apr_pstrcat(p, path, "/", info.name, NULL); if (apr_file_open(&fd, nextpath, APR_FOPEN_READ | APR_FOPEN_BINARY, APR_OS_DEFAULT, p) == APR_SUCCESS) { len = sizeof(format); if (apr_file_read_full(fd, &format, len, &len) == APR_SUCCESS) { if (format == DISK_FORMAT_VERSION) { apr_off_t offset = 0; apr_file_seek(fd, APR_SET, &offset); len = sizeof(disk_cache_info_t); if (apr_file_read_full(fd, &disk_info, len, &len) == APR_SUCCESS) { len = disk_info.name_len; url = apr_palloc(p, len + 1); url[len] = 0; if (apr_file_read_full(fd, url, len, &len) == APR_SUCCESS) { if (listextended) { apr_finfo_t hinfo, dinfo; /* stat the header file */ if (APR_SUCCESS != apr_file_info_get( &hinfo, APR_FINFO_SIZE, fd)) { /* ignore the file */ } else if (disk_info.has_body && APR_SUCCESS != apr_stat( &dinfo, apr_pstrcat( p, path, "/", apr_pstrndup( p, info.name, ext - info.name), CACHE_DATA_SUFFIX, NULL), APR_FINFO_SIZE | APR_FINFO_IDENT, p)) { /* ignore the file */ } else if (disk_info.has_body && (dinfo.device != disk_info.device || dinfo.inode != disk_info.inode)) { /* ignore the file */ } else { apr_file_printf( outfile, "%s %" APR_SIZE_T_FMT " %" APR_SIZE_T_FMT " %d %" APR_SIZE_T_FMT " %" APR_TIME_T_FMT " %" APR_TIME_T_FMT " %" APR_TIME_T_FMT " %" APR_TIME_T_FMT " %d %d\n", url, round_up((apr_size_t)hinfo.size, round), round_up( disk_info.has_body ? (apr_size_t)dinfo.size : 0, round), disk_info.status, disk_info.entity_version, disk_info.date, disk_info.expire, disk_info.request_time, disk_info.response_time, disk_info.has_body, disk_info.header_only); } } else { apr_finfo_t dinfo; /* stat the data file */ if (disk_info.has_body && APR_SUCCESS != apr_stat( &dinfo, apr_pstrcat( p, path, "/", apr_pstrndup( p, info.name, ext - info.name), CACHE_DATA_SUFFIX, NULL), APR_FINFO_SIZE | APR_FINFO_IDENT, p)) { /* ignore the file */ } else if (disk_info.has_body && (dinfo.device != disk_info.device || dinfo.inode != disk_info.inode)) { /* ignore the file */ } else { apr_file_printf(outfile, "%s\n", url); } } } break; } } } apr_file_close(fd); } } } } apr_dir_close(dir); if (interrupted) { return 1; } apr_pool_destroy(p); if (benice) { apr_sleep(NICE_DELAY); } if (interrupted) { return 1; } return 0; } /* * walk the cache directory tree */ static int process_dir(char *path, apr_pool_t *pool, apr_off_t *nodes) { apr_dir_t *dir; apr_pool_t *p; apr_hash_t *h; apr_hash_index_t *i; apr_file_t *fd; apr_status_t status; apr_finfo_t info; apr_size_t len; apr_time_t current, deviation; char *nextpath, *base, *ext; APR_RING_ENTRY(_direntry) anchor; DIRENTRY *d, *t, *n; ENTRY *e; int skip, retries; disk_cache_info_t disk_info; APR_RING_INIT(&anchor, _direntry, link); apr_pool_create(&p, pool); h = apr_hash_make(p); fd = NULL; deviation = MAXDEVIATION * APR_USEC_PER_SEC; if (apr_dir_open(&dir, path, p) != APR_SUCCESS) { return 1; } while (apr_dir_read(&info, 0, dir) == APR_SUCCESS && !interrupted) { if (!strcmp(info.name, ".") || !strcmp(info.name, "..")) { continue; } d = apr_pcalloc(p, sizeof(DIRENTRY)); d->basename = apr_pstrcat(p, path, "/", info.name, NULL); APR_RING_INSERT_TAIL(&anchor, d, _direntry, link); (*nodes)++; } apr_dir_close(dir); if (interrupted) { return 1; } skip = baselen + 1; for (d = APR_RING_FIRST(&anchor); !interrupted && d != APR_RING_SENTINEL(&anchor, _direntry, link); d=n) { n = APR_RING_NEXT(d, link); base = strrchr(d->basename, '/'); if (!base++) { base = d->basename; } ext = strchr(base, '.'); /* there may be temporary files which may be gone before * processing, always skip these if not in realclean mode */ if (!ext && !realclean) { if (!strncasecmp(base, AP_TEMPFILE_BASE, AP_TEMPFILE_BASELEN) && strlen(base) == AP_TEMPFILE_NAMELEN) { continue; } } /* this may look strange but apr_stat() may return an error which * is system dependent and there may be transient failures, * so just blindly retry for a short while */ retries = STAT_ATTEMPTS; status = APR_SUCCESS; do { if (status != APR_SUCCESS) { apr_sleep(STAT_DELAY); } status = apr_stat(&info, d->basename, DIRINFO, p); } while (status != APR_SUCCESS && !interrupted && --retries); /* what may happen here is that apache did create a file which * we did detect but then does delete the file before we can * get file information, so if we don't get any file information * we will ignore the file in this case */ if (status != APR_SUCCESS) { if (!realclean && !interrupted) { continue; } return 1; } if (info.filetype == APR_DIR) { if (process_dir(d->basename, pool, nodes)) { return 1; } continue; } if (info.filetype != APR_REG) { continue; } if (!ext) { if (!strncasecmp(base, AP_TEMPFILE_BASE, AP_TEMPFILE_BASELEN) && strlen(base) == AP_TEMPFILE_NAMELEN) { d->basename += skip; d->type = TEMP; d->dsize = info.size; apr_hash_set(h, d->basename, APR_HASH_KEY_STRING, d); } continue; } if (!strcasecmp(ext, CACHE_HEADER_SUFFIX)) { *ext = '\0'; d->basename += skip; /* if a user manually creates a '.header' file */ if (d->basename[0] == '\0') { continue; } t = apr_hash_get(h, d->basename, APR_HASH_KEY_STRING); if (t) { d = t; } d->type |= HEADER; d->htime = info.mtime; d->hsize = info.size; apr_hash_set(h, d->basename, APR_HASH_KEY_STRING, d); continue; } if (!strcasecmp(ext, CACHE_DATA_SUFFIX)) { *ext = '\0'; d->basename += skip; /* if a user manually creates a '.data' file */ if (d->basename[0] == '\0') { continue; } t = apr_hash_get(h, d->basename, APR_HASH_KEY_STRING); if (t) { d = t; } d->type |= DATA; d->dtime = info.mtime; d->dsize = info.size; apr_hash_set(h, d->basename, APR_HASH_KEY_STRING, d); } } if (interrupted) { return 1; } path[baselen] = '\0'; for (i = apr_hash_first(p, h); i && !interrupted; i = apr_hash_next(i)) { void *hvalue; apr_uint32_t format; apr_hash_this(i, NULL, NULL, &hvalue); d = hvalue; switch(d->type) { case HEADERDATA: nextpath = apr_pstrcat(p, path, "/", d->basename, CACHE_HEADER_SUFFIX, NULL); if (apr_file_open(&fd, nextpath, APR_FOPEN_READ | APR_FOPEN_BINARY, APR_OS_DEFAULT, p) == APR_SUCCESS) { len = sizeof(format); if (apr_file_read_full(fd, &format, len, &len) == APR_SUCCESS) { if (format == DISK_FORMAT_VERSION) { apr_off_t offset = 0; apr_file_seek(fd, APR_SET, &offset); len = sizeof(disk_cache_info_t); if (apr_file_read_full(fd, &disk_info, len, &len) == APR_SUCCESS) { apr_file_close(fd); e = apr_palloc(pool, sizeof(ENTRY)); APR_RING_INSERT_TAIL(&root, e, _entry, link); e->expire = disk_info.expire; e->response_time = disk_info.response_time; e->htime = d->htime; e->dtime = d->dtime; e->hsize = d->hsize; e->dsize = d->dsize; e->basename = apr_pstrdup(pool, d->basename); if (!disk_info.has_body) { delete_file(path, apr_pstrcat(p, path, "/", d->basename, CACHE_DATA_SUFFIX, NULL), nodes, p); } break; } else { apr_file_close(fd); } } else if (format == VARY_FORMAT_VERSION) { apr_finfo_t finfo; /* This must be a URL that added Vary headers later, * so kill the orphaned .data file */ apr_file_close(fd); if (apr_stat(&finfo, apr_pstrcat(p, nextpath, CACHE_VDIR_SUFFIX, NULL), APR_FINFO_TYPE, p) || finfo.filetype != APR_DIR) { delete_entry(path, d->basename, nodes, p); } else { delete_file(path, apr_pstrcat(p, path, "/", d->basename, CACHE_DATA_SUFFIX, NULL), nodes, p); } break; } else { /* We didn't recognise the format, kill the files */ apr_file_close(fd); delete_entry(path, d->basename, nodes, p); break; } } else { apr_file_close(fd); } } /* we have a somehow unreadable headers file which is associated * with a data file. this may be caused by apache currently * rewriting the headers file. thus we may delete the file set * either in realclean mode or if the headers file modification * timestamp is not within a specified positive or negative offset * to the current time. */ current = apr_time_now(); if (realclean || d->htime < current - deviation || d->htime > current + deviation) { delete_entry(path, d->basename, nodes, p); unsolicited += d->hsize; unsolicited += d->dsize; } break; /* single data and header files may be deleted either in realclean * mode or if their modification timestamp is not within a * specified positive or negative offset to the current time. * this handling is necessary due to possible race conditions * between apache and this process */ case HEADER: current = apr_time_now(); nextpath = apr_pstrcat(p, path, "/", d->basename, CACHE_HEADER_SUFFIX, NULL); if (apr_file_open(&fd, nextpath, APR_FOPEN_READ | APR_FOPEN_BINARY, APR_OS_DEFAULT, p) == APR_SUCCESS) { len = sizeof(format); if (apr_file_read_full(fd, &format, len, &len) == APR_SUCCESS) { if (format == VARY_FORMAT_VERSION) { apr_time_t expires; len = sizeof(expires); if (apr_file_read_full(fd, &expires, len, &len) == APR_SUCCESS) { apr_finfo_t finfo; apr_file_close(fd); if (apr_stat(&finfo, apr_pstrcat(p, nextpath, CACHE_VDIR_SUFFIX, NULL), APR_FINFO_TYPE, p) || finfo.filetype != APR_DIR) { delete_entry(path, d->basename, nodes, p); } else if (expires < current) { delete_entry(path, d->basename, nodes, p); } break; } } else if (format == DISK_FORMAT_VERSION) { apr_off_t offset = 0; apr_file_seek(fd, APR_SET, &offset); len = sizeof(disk_cache_info_t); if (apr_file_read_full(fd, &disk_info, len, &len) == APR_SUCCESS) { apr_file_close(fd); e = apr_palloc(pool, sizeof(ENTRY)); APR_RING_INSERT_TAIL(&root, e, _entry, link); e->expire = disk_info.expire; e->response_time = disk_info.response_time; e->htime = d->htime; e->dtime = d->dtime; e->hsize = d->hsize; e->dsize = d->dsize; e->basename = apr_pstrdup(pool, d->basename); break; } else { apr_file_close(fd); } } else { apr_file_close(fd); delete_entry(path, d->basename, nodes, p); break; } } else { apr_file_close(fd); } } if (realclean || d->htime < current - deviation || d->htime > current + deviation) { delete_entry(path, d->basename, nodes, p); unsolicited += d->hsize; } break; case DATA: current = apr_time_now(); if (realclean || d->dtime < current - deviation || d->dtime > current + deviation) { delete_entry(path, d->basename, nodes, p); unsolicited += d->dsize; } break; /* temp files may only be deleted in realclean mode which * is asserted above if a tempfile is in the hash array */ case TEMP: delete_file(path, d->basename, nodes, p); unsolicited += d->dsize; break; } } if (interrupted) { return 1; } apr_pool_destroy(p); if (benice) { apr_sleep(NICE_DELAY); } if (interrupted) { return 1; } return 0; } /* * purge cache entries */ static void purge(char *path, apr_pool_t *pool, apr_off_t max, apr_off_t inodes, apr_off_t nodes, apr_off_t round) { ENTRY *e, *n, *oldest; struct stats s; s.sum = 0; s.entries = 0; s.dfuture = 0; s.dexpired = 0; s.dfresh = 0; s.max = max; s.nodes = nodes; s.inodes = inodes; s.ntotal = nodes; for (e = APR_RING_FIRST(&root); e != APR_RING_SENTINEL(&root, _entry, link); e = APR_RING_NEXT(e, link)) { s.sum += round_up((apr_size_t)e->hsize, round); s.sum += round_up((apr_size_t)e->dsize, round); s.entries++; } s.total = s.sum; s.etotal = s.entries; if ((!s.max || s.sum <= s.max) && (!s.inodes || s.nodes <= s.inodes)) { printstats(path, &s); return; } /* process all entries with a timestamp in the future, this may * happen if a wrong system time is corrected */ for (e = APR_RING_FIRST(&root); e != APR_RING_SENTINEL(&root, _entry, link) && !interrupted;) { n = APR_RING_NEXT(e, link); if (e->response_time > now || e->htime > now || e->dtime > now) { delete_entry(path, e->basename, &s.nodes, pool); s.sum -= round_up((apr_size_t)e->hsize, round); s.sum -= round_up((apr_size_t)e->dsize, round); s.entries--; s.dfuture++; APR_RING_REMOVE(e, link); if ((!s.max || s.sum <= s.max) && (!s.inodes || s.nodes <= s.inodes)) { if (!interrupted) { printstats(path, &s); } return; } } e = n; } if (interrupted) { return; } /* process all entries with are expired */ for (e = APR_RING_FIRST(&root); e != APR_RING_SENTINEL(&root, _entry, link) && !interrupted;) { n = APR_RING_NEXT(e, link); if (e->expire != APR_DATE_BAD && e->expire < now) { delete_entry(path, e->basename, &s.nodes, pool); s.sum -= round_up((apr_size_t)e->hsize, round); s.sum -= round_up((apr_size_t)e->dsize, round); s.entries--; s.dexpired++; APR_RING_REMOVE(e, link); if ((!s.max || s.sum <= s.max) && (!s.inodes || s.nodes <= s.inodes)) { if (!interrupted) { printstats(path, &s); } return; } } e = n; } if (interrupted) { return; } /* process remaining entries oldest to newest, the check for an empty * ring actually isn't necessary except when the compiler does * corrupt 64bit arithmetics which happened to me once, so better safe * than sorry */ while (!((!s.max || s.sum <= s.max) && (!s.inodes || s.nodes <= s.inodes)) && !interrupted && !APR_RING_EMPTY(&root, _entry, link)) { oldest = APR_RING_FIRST(&root); for (e = APR_RING_NEXT(oldest, link); e != APR_RING_SENTINEL(&root, _entry, link); e = APR_RING_NEXT(e, link)) { if (e->dtime < oldest->dtime) { oldest = e; } } delete_entry(path, oldest->basename, &s.nodes, pool); s.sum -= round_up((apr_size_t)oldest->hsize, round); s.sum -= round_up((apr_size_t)oldest->dsize, round); s.entries--; s.dfresh++; APR_RING_REMOVE(oldest, link); } if (!interrupted) { printstats(path, &s); } } static apr_status_t remove_directory(apr_pool_t *pool, const char *dir) { apr_status_t rv; apr_dir_t *dirp; apr_finfo_t dirent; rv = apr_dir_open(&dirp, dir, pool); if (APR_STATUS_IS_ENOENT(rv)) { return rv; } if (rv != APR_SUCCESS) { apr_file_printf(errfile, "Could not open directory %s: %pm" APR_EOL_STR, dir, &rv); return rv; } while (apr_dir_read(&dirent, APR_FINFO_DIRENT | APR_FINFO_TYPE, dirp) == APR_SUCCESS) { if (dirent.filetype == APR_DIR) { if (strcmp(dirent.name, ".") && strcmp(dirent.name, "..")) { rv = remove_directory(pool, apr_pstrcat(pool, dir, "/", dirent.name, NULL)); /* tolerate the directory not being empty, the cache may have * attempted to recreate the directory in the mean time. */ if (APR_SUCCESS != rv && APR_ENOTEMPTY != rv) { break; } } } else { const char *file = apr_pstrcat(pool, dir, "/", dirent.name, NULL); rv = apr_file_remove(file, pool); if (APR_SUCCESS != rv) { apr_file_printf(errfile, "Could not remove file '%s': %pm" APR_EOL_STR, file, &rv); break; } } } apr_dir_close(dirp); if (rv == APR_SUCCESS) { rv = apr_dir_remove(dir, pool); if (APR_ENOTEMPTY == rv) { rv = APR_SUCCESS; } if (rv != APR_SUCCESS) { apr_file_printf(errfile, "Could not remove directory %s: %pm" APR_EOL_STR, dir, &rv); } } return rv; } static apr_status_t find_directory(apr_pool_t *pool, const char *base, const char *rest) { apr_status_t rv; apr_dir_t *dirp; apr_finfo_t dirent; int found = 0, files = 0; const char *header = apr_pstrcat(pool, rest, CACHE_HEADER_SUFFIX, NULL); const char *data = apr_pstrcat(pool, rest, CACHE_DATA_SUFFIX, NULL); const char *vdir = apr_pstrcat(pool, rest, CACHE_HEADER_SUFFIX, CACHE_VDIR_SUFFIX, NULL); const char *dirname = NULL; rv = apr_dir_open(&dirp, base, pool); if (rv != APR_SUCCESS) { apr_file_printf(errfile, "Could not open directory %s: %pm" APR_EOL_STR, base, &rv); return rv; } rv = APR_ENOENT; while (apr_dir_read(&dirent, APR_FINFO_DIRENT | APR_FINFO_TYPE, dirp) == APR_SUCCESS) { int len = strlen(dirent.name); int restlen = strlen(rest); if (dirent.filetype == APR_DIR && !strncmp(rest, dirent.name, len)) { dirname = apr_pstrcat(pool, base, "/", dirent.name, NULL); rv = find_directory(pool, dirname, rest + (len < restlen ? len : restlen)); if (APR_SUCCESS == rv) { found = 1; } } if (dirent.filetype == APR_DIR) { if (!strcmp(dirent.name, vdir)) { files = 1; } } if (dirent.filetype == APR_REG) { if (!strcmp(dirent.name, header) || !strcmp(dirent.name, data)) { files = 1; } } } apr_dir_close(dirp); if (files) { rv = APR_SUCCESS; if (!dryrun) { const char *remove; apr_status_t status; remove = apr_pstrcat(pool, base, "/", header, NULL); status = apr_file_remove(remove, pool); if (status != APR_SUCCESS && !APR_STATUS_IS_ENOENT(status)) { apr_file_printf(errfile, "Could not remove file %s: %pm" APR_EOL_STR, remove, &status); rv = status; } remove = apr_pstrcat(pool, base, "/", data, NULL); status = apr_file_remove(remove, pool); if (status != APR_SUCCESS && !APR_STATUS_IS_ENOENT(status)) { apr_file_printf(errfile, "Could not remove file %s: %pm" APR_EOL_STR, remove, &status); rv = status; } status = remove_directory(pool, apr_pstrcat(pool, base, "/", vdir, NULL)); if (status != APR_SUCCESS && !APR_STATUS_IS_ENOENT(status)) { rv = status; } } } /* If asked to delete dirs, do so now. We don't care if it fails. * If it fails, it likely means there was something else there. */ if (dirname && deldirs && !dryrun) { apr_dir_remove(dirname, pool); } if (found) { return APR_SUCCESS; } return rv; } /** * Delete a specific URL from the cache. */ static apr_status_t delete_url(apr_pool_t *pool, const char *proxypath, const char *url) { apr_md5_ctx_t context; unsigned char digest[16]; char tmp[23]; int i, k; unsigned int x; static const char enc_table[64] = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_@"; apr_md5_init(&context); apr_md5_update(&context, (const unsigned char *) url, strlen(url)); apr_md5_final(digest, &context); /* encode 128 bits as 22 characters, using a modified uuencoding * the encoding is 3 bytes -> 4 characters* i.e. 128 bits is * 5 x 3 bytes + 1 byte -> 5 * 4 characters + 2 characters */ for (i = 0, k = 0; i < 15; i += 3) { x = (digest[i] << 16) | (digest[i + 1] << 8) | digest[i + 2]; tmp[k++] = enc_table[x >> 18]; tmp[k++] = enc_table[(x >> 12) & 0x3f]; tmp[k++] = enc_table[(x >> 6) & 0x3f]; tmp[k++] = enc_table[x & 0x3f]; } /* one byte left */ x = digest[15]; tmp[k++] = enc_table[x >> 2]; /* use up 6 bits */ tmp[k++] = enc_table[(x << 4) & 0x3f]; tmp[k] = 0; /* automatically find the directory levels */ return find_directory(pool, proxypath, tmp); } /* * usage info */ #define NL APR_EOL_STR static void usage(const char *error) { if (error) { apr_file_printf(errfile, "%s error: %s\n", shortname, error); } apr_file_printf(errfile, "%s -- program for cleaning the disk cache." NL "Usage: %s [-Dvtrn] -pPATH [-lLIMIT|-LLIMIT] [-PPIDFILE]" NL " %s [-nti] -dINTERVAL -pPATH [-lLIMIT|-LLIMIT] [-PPIDFILE]" NL " %s [-Dvt] -pPATH URL ..." NL NL "Options:" NL " -d Daemonize and repeat cache cleaning every INTERVAL minutes." NL " This option is mutually exclusive with the -D, -v and -r" NL " options." NL NL " -D Do a dry run and don't delete anything. This option is mutually" NL " exclusive with the -d option. When doing a dry run and deleting" NL " directories with -t, the inodes reported deleted in the stats" NL " cannot take into account the directories deleted, and will be" NL " marked as an estimate." NL NL " -v Be verbose and print statistics. This option is mutually" NL " exclusive with the -d option." NL NL " -r Clean thoroughly. This assumes that the Apache web server is " NL " not running. This option is mutually exclusive with the -d" NL " option and implies -t." NL NL " -n Be nice. This causes slower processing in favour of other" NL " processes." NL NL " -t Delete all empty directories. By default only cache files are" NL " removed, however with some configurations the large number of" NL " directories created may require attention." NL NL " -p Specify PATH as the root directory of the disk cache." NL NL " -P Specify PIDFILE as the file to write the pid to." NL NL " -R Specify amount to round sizes up to." NL NL " -l Specify LIMIT as the total disk cache size limit. Attach 'K'" NL " or 'M' to the number for specifying KBytes or MBytes." NL NL " -L Specify LIMIT as the total disk cache inode limit." NL NL " -i Be intelligent and run only when there was a modification of" NL " the disk cache. This option is only possible together with the" NL " -d option." NL NL " -a List the URLs currently stored in the cache. Variants of the" NL " same URL will be listed once for each variant." NL NL " -A List the URLs currently stored in the cache, along with their" NL " attributes in the following order: url, header size, body size," NL " status, entity version, date, expiry, request time," NL " response time, body present, head request." NL NL "Should an URL be provided on the command line, the URL will be" NL "deleted from the cache. A reverse proxied URL is made up as follows:" NL "http://:?[query]. So, for the path \"/\" on the" NL "host \"localhost\" and port 80, the URL to delete becomes" NL "\"http://localhost:80/?\". Note the '?' in the URL must always be" NL "specified explicitly, whether a query string is present or not." NL, shortname, shortname, shortname, shortname ); exit(1); } #undef NL static void usage_repeated_arg(apr_pool_t *pool, char option) { usage(apr_psprintf(pool, "The option '%c' cannot be specified more than once", option)); } static void log_pid(apr_pool_t *pool, const char *pidfilename, apr_file_t **pidfile) { apr_status_t status; pid_t mypid = getpid(); if (APR_SUCCESS == (status = apr_file_open(pidfile, pidfilename, APR_FOPEN_WRITE | APR_FOPEN_CREATE | APR_FOPEN_TRUNCATE | APR_FOPEN_DELONCLOSE, APR_FPROT_UREAD | APR_FPROT_UWRITE | APR_FPROT_GREAD | APR_FPROT_WREAD, pool))) { apr_file_printf(*pidfile, "%" APR_PID_T_FMT APR_EOL_STR, mypid); } else { if (errfile) { apr_file_printf(errfile, "Could not write the pid file '%s': %pm" APR_EOL_STR, pidfilename, &status); } exit(1); } } /* * main */ int main(int argc, const char * const argv[]) { apr_off_t max, inodes, round; apr_time_t current, repeat, delay, previous; apr_status_t status; apr_pool_t *pool, *instance; apr_getopt_t *o; apr_finfo_t info; apr_file_t *pidfile; int retries, isdaemon, limit_found, inodes_found, intelligent, dowork; char opt; const char *arg; char *proxypath, *path, *pidfilename; interrupted = 0; repeat = 0; isdaemon = 0; dryrun = 0; limit_found = 0; inodes_found = 0; max = 0; inodes = 0; round = 0; verbose = 0; realclean = 0; benice = 0; deldirs = 0; intelligent = 0; previous = 0; /* avoid compiler warning */ proxypath = NULL; pidfilename = NULL; if (apr_app_initialize(&argc, &argv, NULL) != APR_SUCCESS) { return 1; } atexit(apr_terminate); if (argc) { shortname = apr_filepath_name_get(argv[0]); } if (apr_pool_create(&pool, NULL) != APR_SUCCESS) { return 1; } apr_pool_abort_set(oom, pool); apr_file_open_stderr(&errfile, pool); apr_file_open_stdout(&outfile, pool); apr_signal(SIGINT, setterm); apr_signal(SIGTERM, setterm); apr_getopt_init(&o, pool, argc, argv); while (1) { status = apr_getopt(o, "iDnvrtd:l:L:p:P:R:aA", &opt, &arg); if (status == APR_EOF) { break; } else if (status != APR_SUCCESS) { usage(NULL); } else { char *end; apr_status_t rv; switch (opt) { case 'i': if (intelligent) { usage_repeated_arg(pool, opt); } intelligent = 1; break; case 'D': if (dryrun) { usage_repeated_arg(pool, opt); } dryrun = 1; break; case 'n': if (benice) { usage_repeated_arg(pool, opt); } benice = 1; break; case 't': if (deldirs) { usage_repeated_arg(pool, opt); } deldirs = 1; break; case 'v': if (verbose) { usage_repeated_arg(pool, opt); } verbose = 1; break; case 'r': if (realclean) { usage_repeated_arg(pool, opt); } realclean = 1; deldirs = 1; break; case 'd': if (isdaemon) { usage_repeated_arg(pool, opt); } isdaemon = 1; repeat = apr_atoi64(arg); repeat *= SECS_PER_MIN; repeat *= APR_USEC_PER_SEC; break; case 'l': if (limit_found) { usage_repeated_arg(pool, opt); } limit_found = 1; do { rv = apr_strtoff(&max, arg, &end, 10); if (rv == APR_SUCCESS) { if ((*end == 'K' || *end == 'k') && !end[1]) { max *= KBYTE; } else if ((*end == 'M' || *end == 'm') && !end[1]) { max *= MBYTE; } else if ((*end == 'G' || *end == 'g') && !end[1]) { max *= GBYTE; } else if (*end && /* neither empty nor [Bb] */ ((*end != 'B' && *end != 'b') || end[1])) { rv = APR_EGENERAL; } } if (rv != APR_SUCCESS) { usage(apr_psprintf(pool, "Invalid limit: %s" APR_EOL_STR APR_EOL_STR, arg)); } } while(0); break; case 'L': if (inodes_found) { usage_repeated_arg(pool, opt); } inodes_found = 1; do { rv = apr_strtoff(&inodes, arg, &end, 10); if (rv == APR_SUCCESS) { if ((*end == 'K' || *end == 'k') && !end[1]) { inodes *= KBYTE; } else if ((*end == 'M' || *end == 'm') && !end[1]) { inodes *= MBYTE; } else if ((*end == 'G' || *end == 'g') && !end[1]) { inodes *= GBYTE; } else if (*end && /* neither empty nor [Bb] */ ((*end != 'B' && *end != 'b') || end[1])) { rv = APR_EGENERAL; } } if (rv != APR_SUCCESS) { usage(apr_psprintf(pool, "Invalid limit: %s" APR_EOL_STR APR_EOL_STR, arg)); } } while(0); break; case 'a': if (listurls) { usage_repeated_arg(pool, opt); } listurls = 1; break; case 'A': if (listurls) { usage_repeated_arg(pool, opt); } listurls = 1; listextended = 1; break; case 'p': if (proxypath) { usage_repeated_arg(pool, opt); } proxypath = apr_pstrdup(pool, arg); if ((status = apr_filepath_set(proxypath, pool)) != APR_SUCCESS) { usage(apr_psprintf(pool, "Could not set filepath to '%s': %pm", proxypath, &status)); } break; case 'P': if (pidfilename) { usage_repeated_arg(pool, opt); } pidfilename = apr_pstrdup(pool, arg); break; case 'R': if (round) { usage_repeated_arg(pool, opt); } rv = apr_strtoff(&round, arg, &end, 10); if (rv == APR_SUCCESS) { if (*end) { usage(apr_psprintf(pool, "Invalid round value: %s" APR_EOL_STR APR_EOL_STR, arg)); } else if (round < 0) { usage(apr_psprintf(pool, "Round value must be positive: %s" APR_EOL_STR APR_EOL_STR, arg)); } } if (rv != APR_SUCCESS) { usage(apr_psprintf(pool, "Invalid round value: %s" APR_EOL_STR APR_EOL_STR, arg)); } break; } /* switch */ } /* else */ } /* while */ if (argc <= 1) { usage(NULL); } if (!proxypath) { usage("Option -p must be specified"); } if (o->ind < argc) { int deleted = 0; int error = 0; if (isdaemon) { usage("Option -d cannot be used with URL arguments, aborting"); } if (intelligent) { usage("Option -i cannot be used with URL arguments, aborting"); } if (limit_found) { usage("Option -l cannot be used with URL arguments, aborting"); } while (o->ind < argc) { status = delete_url(pool, proxypath, argv[o->ind]); if (APR_SUCCESS == status) { if (verbose) { apr_file_printf(errfile, "Removed: %s" APR_EOL_STR, argv[o->ind]); } deleted = 1; } else if (APR_ENOENT == status) { if (verbose) { apr_file_printf(errfile, "Not cached: %s" APR_EOL_STR, argv[o->ind]); } } else { if (verbose) { apr_file_printf(errfile, "Error while removed: %s" APR_EOL_STR, argv[o->ind]); } error = 1; } o->ind++; } return error ? 1 : deleted ? 0 : 2; } if (isdaemon && repeat <= 0) { usage("Option -d must be greater than zero"); } if (isdaemon && (verbose || realclean || dryrun || listurls)) { usage("Option -d cannot be used with -v, -r, -L or -D"); } if (!isdaemon && intelligent) { usage("Option -i cannot be used without -d"); } if (!listurls && max <= 0 && inodes <= 0) { usage("At least one of option -l or -L must be greater than zero"); } if (apr_filepath_get(&path, 0, pool) != APR_SUCCESS) { usage(apr_psprintf(pool, "Could not get the filepath: %pm", &status)); } baselen = strlen(path); if (pidfilename) { log_pid(pool, pidfilename, &pidfile); /* before daemonizing, so we * can report errors */ } if (listurls) { list_urls(path, pool, round); return (interrupted != 0); } #ifndef DEBUG if (isdaemon) { apr_file_close(errfile); errfile = NULL; if (pidfilename) { apr_file_close(pidfile); /* delete original pidfile only in parent */ } apr_proc_detach(APR_PROC_DETACH_DAEMONIZE); if (pidfilename) { log_pid(pool, pidfilename, &pidfile); } } #endif do { apr_pool_create(&instance, pool); now = apr_time_now(); APR_RING_INIT(&root, _entry, link); delcount = 0; unsolicited = 0; dowork = 0; switch (intelligent) { case 0: dowork = 1; break; case 1: retries = STAT_ATTEMPTS; status = APR_SUCCESS; do { if (status != APR_SUCCESS) { apr_sleep(STAT_DELAY); } status = apr_stat(&info, path, APR_FINFO_MTIME, instance); } while (status != APR_SUCCESS && !interrupted && --retries); if (status == APR_SUCCESS) { previous = info.mtime; intelligent = 2; } dowork = 1; break; case 2: retries = STAT_ATTEMPTS; status = APR_SUCCESS; do { if (status != APR_SUCCESS) { apr_sleep(STAT_DELAY); } status = apr_stat(&info, path, APR_FINFO_MTIME, instance); } while (status != APR_SUCCESS && !interrupted && --retries); if (status == APR_SUCCESS) { if (previous != info.mtime) { dowork = 1; } previous = info.mtime; break; } intelligent = 1; dowork = 1; break; } if (dowork && !interrupted) { apr_off_t nodes = 0; if (!process_dir(path, instance, &nodes) && !interrupted) { purge(path, instance, max, inodes, nodes, round); } else if (!isdaemon && !interrupted) { apr_file_printf(errfile, "An error occurred, cache cleaning " "aborted." APR_EOL_STR); return 1; } if (intelligent && !interrupted) { retries = STAT_ATTEMPTS; status = APR_SUCCESS; do { if (status != APR_SUCCESS) { apr_sleep(STAT_DELAY); } status = apr_stat(&info, path, APR_FINFO_MTIME, instance); } while (status != APR_SUCCESS && !interrupted && --retries); if (status == APR_SUCCESS) { previous = info.mtime; intelligent = 2; } else { intelligent = 1; } } } apr_pool_destroy(instance); current = apr_time_now(); if (current < now) { delay = repeat; } else if (current - now >= repeat) { delay = repeat; } else { delay = now + repeat - current; } /* we can't sleep the whole delay time here apiece as this is racy * with respect to interrupt delivery - think about what happens * if we have tested for an interrupt, then get scheduled * before the apr_sleep() call and while waiting for the cpu * we do get an interrupt */ if (isdaemon) { while (delay && !interrupted) { if (delay > APR_USEC_PER_SEC) { apr_sleep(APR_USEC_PER_SEC); delay -= APR_USEC_PER_SEC; } else { apr_sleep(delay); delay = 0; } } } } while (isdaemon && !interrupted); if (!isdaemon && interrupted) { apr_file_printf(errfile, "Cache cleaning aborted due to user " "request." APR_EOL_STR); return 1; } return 0; } httpd-2.4.41/support/checkgid.c0000644000000000000500000000557312757564422014705 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * Given one or more group identifiers on the command line (e.g., * "httpd" or "#-1"), figure out whether they'll be valid for * the server to use at run-time. * * If a groupname isn't found, or we can't setgid() to it, return * -1. If all groups are valid, return 0. * * This may need to be run as the superuser for the setgid() to * succeed; running it as any other user may result in a false * negative. */ #include "ap_config.h" #if APR_HAVE_STDIO_H #include #endif #if APR_HAVE_STDLIB_H #include #endif #if APR_HAVE_SYS_TYPES_H #include #endif #if HAVE_GRP_H #include #endif #if APR_HAVE_UNISTD_H #include #endif int main(int argc, char *argv[]) { int i; int result; gid_t gid; struct group *grent; struct group fake_grent; /* * Assume success. :-) */ result = 0; for (i = 1; i < argc; ++i) { char *arg; arg = argv[i]; /* * If it's from a 'Group #-1' statement, get the numeric value * and skip the group lookup stuff. */ if (*arg == '#') { gid = atoi(&arg[1]); fake_grent.gr_gid = gid; grent = &fake_grent; } else { grent = getgrnam(arg); } /* * A NULL return means no such group was found, so we're done * with this one. */ if (grent == NULL) { fprintf(stderr, "%s: group '%s' not found\n", argv[0], arg); result = -1; } else { int check; /* * See if we can switch to the numeric GID we have. If so, * all well and good; if not, well.. */ gid = grent->gr_gid; check = setgid(gid); if (check != 0) { fprintf(stderr, "%s: invalid group '%s'\n", argv[0], arg); perror(argv[0]); result = -1; } } } /* * Worst-case return value. */ return result; } /* * Local Variables: * mode: C * c-file-style: "bsd" * End: */ httpd-2.4.41/support/README0000644000000000000500000000345311473704740013644 0ustar rootsrcSupport files: ab ABuse your server with this benchmarker. Rudimentary command line testing tool. apachectl Apache run-time Control script. To facilitate the administrator and/or your rc.d scripts to control the functioning of the Apache httpd daemon. apxs APache eXtenSion tool. Eases building and installing DSO style modules. dbmmanage Create and update user authentication files in the faster DBM format used by mod_auth_db. htcacheclean Keep the size of mod_cache_disk store within a certain limit. htdigest Create and update user authentication files used in DIGEST authentification. See mod_auth_digest. htpasswd Create and update user authentication files used in BASIC authentification. I.e. the htpasswd files. See mod_auth. httpd.8 General apache man page. log_server_status This script is designed to be run at a frequent interval by something like cron. It connects to the server and downloads the status information. It reformats the information to a single line and logs it to a file. logresolve resolve hostnames for IP-adresses in Apache logfiles phf_abuse_log.cgi This script can be used to detect people trying to abuse an ancient and long plugged security hole which existed in a CGI script distributed with Apache 1.0.3 and earlier versions. rotatelogs rotate Apache logs without having to kill the server. split-logfile This script will take a combined virtual hosts access log file and break its contents into separate files. suexec Switch User For Exec. Used internally by apache, see the document `Apache suEXEC Support' under http://www.apache.org/docs/suexec.html . SHA1 This directory includes some utilities to allow Apache 1.3.6 to recognize passwords in SHA1 format, as used by Netscape web servers. It is not installed by default. httpd-2.4.41/support/logresolve.pl.in0000644000000000000500000001533712757564422016122 0ustar rootsrc#!@perlbin@ # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # logresolve.pl # # v 1.2 by robh imdb.com # # usage: logresolve.pl outfile # # input = Apache/NCSA/.. logfile with IP numbers at start of lines # output = same logfile with IP addresses resolved to hostnames where # name lookups succeeded. # # this differs from the C based 'logresolve' in that this script # spawns a number ($CHILDREN) of subprocesses to resolve addresses # concurrently and sets a short timeout ($TIMEOUT) for each lookup in # order to keep things moving quickly. # # the parent process handles caching of IP->hostnames using a Perl hash # it also avoids sending the same IP to multiple child processes to be # resolved multiple times concurrently. # # Depending on the settings of $CHILDREN and $TIMEOUT you should see # significant reductions in the overall time taken to resolve your # logfiles. With $CHILDREN=40 and $TIMEOUT=5 I've seen 200,000 - 300,000 # logfile lines processed per hour compared to ~45,000 per hour # with 'logresolve'. # # I haven't yet seen any noticeable reduction in the percentage of IPs # that fail to get resolved. Your mileage will no doubt vary. 5s is long # enough to wait IMO. # # Known to work with FreeBSD 2.2 # Known to have problems with Solaris # # 980417 - use 'sockaddr_un' for bind/connect to make the script work # with linux. Fix from Luuk de Boer require 5.004; $|=1; use FileHandle; use Socket; use strict; no strict 'refs'; use vars qw($PROTOCOL); $PROTOCOL = 0; my $CHILDREN = 40; my $TIMEOUT = 5; my $filename; my %hash = (); my $parent = $$; my @children = (); for (my $child = 1; $child <=$CHILDREN; $child++) { my $f = fork(); if (!$f) { $filename = "./.socket.$parent.$child"; if (-e $filename) { unlink($filename) || warn "$filename .. $!\n";} &child($child); exit(0); } push(@children, $f); } &parent; &cleanup; ## remove all temporary files before shutting down sub cleanup { # die kiddies, die kill(15, @children); for (my $child = 1; $child <=$CHILDREN; $child++) { if (-e "./.socket.$parent.$child") { unlink("./.socket.$parent.$child") || warn ".socket.$parent.$child $!"; } } } sub parent { # Trap some possible signals to trigger temp file cleanup $SIG{'KILL'} = $SIG{'INT'} = $SIG{'PIPE'} = \&cleanup; my %CHILDSOCK; my $filename; ## fork child processes. Each child will create a socket connection ## to this parent and use an unique temp filename to do so. for (my $child = 1; $child <=$CHILDREN; $child++) { $CHILDSOCK{$child}= FileHandle->new; if (!socket($CHILDSOCK{$child}, AF_UNIX, SOCK_STREAM, $PROTOCOL)) { warn "parent socket to child failed $!"; } $filename = "./.socket.$parent.$child"; my $response; do { $response = connect($CHILDSOCK{$child}, sockaddr_un($filename)); if ($response != 1) { sleep(1); } } while ($response != 1); $CHILDSOCK{$child}->autoflush; } ## All child processes should now be ready or at worst warming up my (@buffer, $child, $ip, $rest, $hostname, $response); ## read the logfile lines from STDIN while() { @buffer = (); # empty the logfile line buffer array. $child = 1; # children are numbered 1..N, start with #1 # while we have a child to talk to and data to give it.. do { push(@buffer, $_); # buffer the line ($ip, $rest) = split(/ /, $_, 2); # separate IP form rest unless ($hash{$ip}) { # resolve if unseen IP $CHILDSOCK{$child}->print("$ip\n"); # pass IP to next child $hash{$ip} = $ip; # don't look it up again. $child++; } } while (($child < ($CHILDREN-1)) and ($_ = )); ## now poll each child for a response while (--$child > 0) { $response = $CHILDSOCK{$child}->getline; chomp($response); # child sends us back both the IP and HOSTNAME, no need for us # to remember what child received any given IP, and no worries # what order we talk to the children ($ip, $hostname) = split(/\|/, $response, 2); $hash{$ip} = $hostname; } # resolve all the logfiles lines held in the log buffer array.. for (my $line = 0; $line <=$#buffer; $line++) { # get next buffered line ($ip, $rest) = split(/ /, $buffer[$line], 2); # separate IP from rest and replace with cached hostname printf STDOUT ("%s %s", $hash{$ip}, $rest); } } } ######################################## sub child { # arg = numeric ID - how the parent refers to me my $me = shift; # add trap for alarm signals. $SIG{'ALRM'} = sub { die "alarmed"; }; # create a socket to communicate with parent socket(INBOUND, AF_UNIX, SOCK_STREAM, $PROTOCOL) || die "Error with Socket: !$\n"; $filename = "./.socket.$parent.$me"; bind(INBOUND, sockaddr_un($filename)) || die "Error Binding $filename: $!\n"; listen(INBOUND, 5) || die "Error Listening: $!\n"; my ($ip, $send_back); my $talk = FileHandle->new; # accept a connection from the parent process. We only ever have # have one connection where we exchange 1 line of info with the # parent.. 1 line in (IP address), 1 line out (IP + hostname). accept($talk, INBOUND) || die "Error Accepting: $!\n"; # disable I/O buffering just in case $talk->autoflush; # while the parent keeps sending data, we keep responding.. while(($ip = $talk->getline)) { chomp($ip); # resolve the IP if time permits and send back what we found.. $send_back = sprintf("%s|%s", $ip, &nslookup($ip)); $talk->print($send_back."\n"); } } # perform a time restricted hostname lookup. sub nslookup { # get the IP as an arg my $ip = shift; my $hostname = undef; # do the hostname lookup inside an eval. The eval will use the # already configured SIGnal handler and drop out of the {} block # regardless of whether the alarm occurred or not. eval { alarm($TIMEOUT); $hostname = gethostbyaddr(gethostbyname($ip), AF_INET); alarm(0); }; if ($@ =~ /alarm/) { # useful for debugging perhaps.. # print "alarming, isn't it? ($ip)"; } # return the hostname or the IP address itself if there is no hostname $hostname ne "" ? $hostname : $ip; } httpd-2.4.41/support/NWGNUab0000644000000000000500000001337411540546347014115 0ustar rootsrc# # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # build this level's files # # Make sure all needed macro's are defined # ifeq "$(WITH_ABS)" "1" ifeq "$(USE_NTLS)" "1" SSL_INC = $(NTLSSDK)/inc SSL_LIB = $(NTLSSDK)/imp SSL_BIN = $(NTLSSDK)/bin SSL_APP = $(NTLSSDK)/apps ifneq "$(wildcard $(SSL_INC)/openssl/opensslv.h)" "$(SSL_INC)/openssl/opensslv.h" $(warning '$(NTLSSDK)' does NOT point to a valid NTLS SDK!) endif else SSL_INC = $(OSSLSDK)/outinc_nw_libc SSL_LIB = $(OSSLSDK)/out_nw_libc SSL_BIN = $(OSSLSDK)/out_nw_libc SSL_APP = $(OSSLSDK)/apps ifneq "$(wildcard $(SSL_INC)/openssl/opensslv.h)" "$(SSL_INC)/openssl/opensslv.h" $(warning '$(OSSLSDK)' does NOT point to a valid OpenSSL SDK!) endif endif ifeq "$(wildcard $(SSL_INC)/openssl/opensslv.h)" "$(SSL_INC)/openssl/opensslv.h" HAVE_OPENSSL = 1 endif endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # ifdef HAVE_OPENSSL XINCDIRS += \ $(SSL_INC) \ $(SSL_INC)/openssl \ $(EOLIST) endif XINCDIRS += \ $(NWOS) \ $(AP_WORK)/include \ $(APR)/include \ $(APRUTIL)/include \ $(APR)/misc/netware \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # ifdef HAVE_OPENSSL XDEFINES += \ -DHAVE_OPENSSL \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ -l $(SSL_LIB) \ $(EOLIST) endif # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # ifdef HAVE_OPENSSL NLM_NAME = abs else NLM_NAME = ab endif # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Benchmark Utility for NetWare # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) # # This is used by the '-screenname' directive. If left blank, # 'Apache for NetWare' Thread will be used. # #NLM_SCREEN_NAME = Apache Bench NLM_SCREEN_NAME = DEFAULT # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 65536 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/ab.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) ifdef HAVE_OPENSSL ifneq "$(USE_NTLS)" "1" FILES_nlm_libs += \ $(SSL_LIB)/crypto.lib \ $(SSL_LIB)/ssl.lib \ $(EOLIST) endif endif # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) ifdef HAVE_OPENSSL ifeq "$(USE_NTLS)" "1" FILES_nlm_modules += ntls \ $(EOLIST) endif endif # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @libc.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifneq "$(USE_STDSOCKETS)" "1" FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif ifdef HAVE_OPENSSL ifeq "$(USE_NTLS)" "1" FILES_nlm_Ximports += @ntls.imp \ $(EOLIST) else FILES_nlm_Ximports += \ GetProcessSwitchCount \ RunningProcess \ GetSuperHighResolutionTimer \ $(EOLIST) endif endif # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(AP_WORK)/build/NWGNUtail.inc httpd-2.4.41/support/fcgistarter.dep0000644000000000000500000000175012674411515015770 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by fcgistarter.mak .\fcgistarter.c : \ "..\srclib\apr\include\apr.h"\ "..\srclib\apr\include\apr_allocator.h"\ "..\srclib\apr\include\apr_dso.h"\ "..\srclib\apr\include\apr_errno.h"\ "..\srclib\apr\include\apr_file_info.h"\ "..\srclib\apr\include\apr_file_io.h"\ "..\srclib\apr\include\apr_general.h"\ "..\srclib\apr\include\apr_getopt.h"\ "..\srclib\apr\include\apr_global_mutex.h"\ "..\srclib\apr\include\apr_inherit.h"\ "..\srclib\apr\include\apr_network_io.h"\ "..\srclib\apr\include\apr_pools.h"\ "..\srclib\apr\include\apr_portable.h"\ "..\srclib\apr\include\apr_proc_mutex.h"\ "..\srclib\apr\include\apr_shm.h"\ "..\srclib\apr\include\apr_tables.h"\ "..\srclib\apr\include\apr_thread_mutex.h"\ "..\srclib\apr\include\apr_thread_proc.h"\ "..\srclib\apr\include\apr_time.h"\ "..\srclib\apr\include\apr_user.h"\ "..\srclib\apr\include\apr_want.h"\ ..\build\win32\httpd.rc : \ "..\include\ap_release.h"\ httpd-2.4.41/support/log_server_status.in0000644000000000000500000000461011747074131017060 0ustar rootsrc#!@perlbin@ # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # Log Server Status # Mark J Cox, UK Web Ltd 1996, mark ukweb.com # # This script is designed to be run at a frequent interval by something # like cron. It connects to the server and downloads the status # information. It reformats the information to a single line and logs # it to a file. Make sure the directory $wherelog is writable by the # user who runs this script. # use IO::Socket; use strict; use warnings; my $wherelog = "@exp_logfiledir@/"; # Logs will be like "@exp_logfiledir@/19960312" my $server = "localhost"; # Name of server, could be "www.foo.com" my $port = "@PORT@"; # Port on server my $request = "/server-status/?auto"; # Request to send my @ltime = localtime(time); my $day = $ltime[5] + 1900 . sprintf( "%02d", $ltime[4] + 1 ) . sprintf( "%02d", $ltime[3] ); my $time = sprintf( "%02d", $ltime[2] ) . sprintf( "%02d", $ltime[1] ) . sprintf( "%02d", $ltime[0] ); open(OUT,">>$wherelog$day"); my $socket = new IO::Socket::INET( PeerAddr => $server, PeerPort => $port, Proto => "tcp", Type => SOCK_STREAM ) or do { print OUT "$time:-1:-1:-1:-1:$@\n"; close OUT; die "Couldn't connect to $server:$port : $@\n"; }; $| = 1; print $socket "GET $request HTTP/1.1\r\nHost: $server\r\nConnection: close\r\n\r\n\r\n"; my ( $requests, $idle, $number, $cpu ); while (<$socket>) { $requests = $1 if (m|^BusyWorkers:\ (\S+)|); $idle = $1 if (m|^IdleWorkers:\ (\S+)|); $number = $1 if (m|sses:\ (\S+)|); $cpu = $1 if (m|^CPULoad:\ (\S+)|); } print OUT "$time:$requests:$idle:$number:$cpu\n"; close OUT; httpd-2.4.41/support/fcgistarter.dsp0000644000000000000500000001037610732104610015776 0ustar rootsrc# Microsoft Developer Studio Project File - Name="fcgistarter" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Console Application" 0x0103 CFG=fcgistarter - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "fcgistarter.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "fcgistarter.mak" CFG="fcgistarter - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "fcgistarter - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "fcgistarter - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe RSC=rc.exe !IF "$(CFG)" == "fcgistarter - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../srclib/apr/include" /I "../srclib/apr-util/include" /I "../include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Release/fcgistarter_src" /FD /c # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/fcgistarter.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="fcgistarter.exe" /d LONG_NAME="Apache fcgi command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib user32.lib wsock32.lib ws2_32.lib shell32.lib /nologo /subsystem:console # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib shell32.lib /nologo /subsystem:console /debug /opt:ref # Begin Special Build Tool TargetPath=.\Release\fcgistarter.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "fcgistarter - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /I "../include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Debug/fcgistarter_src" /FD /c # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/fcgistarter.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="fcgistarter.exe" /d LONG_NAME="Apache fcgi command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # Begin Special Build Tool TargetPath=.\Debug\fcgistarter.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "fcgistarter - Win32 Release" # Name "fcgistarter - Win32 Debug" # Begin Source File SOURCE=.\fcgistarter.c # End Source File # Begin Source File SOURCE=..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/support/abs.mak0000644000000000000500000002465313076222603014222 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on abs.dsp !IF "$(CFG)" == "" CFG=abs - Win32 Debug !MESSAGE No configuration specified. Defaulting to abs - Win32 Debug. !ENDIF !IF "$(CFG)" != "abs - Win32 Release" && "$(CFG)" != "abs - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "abs.mak" CFG="abs - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "abs - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "abs - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(_HAVE_OSSL110)" == "1" SSLCRP=libcrypto SSLLIB=libssl SSLINC=/I ../srclib/openssl/include SSLBIN=/libpath:../srclib/openssl !ELSE SSLCRP=libeay32 SSLLIB=ssleay32 SSLINC=/I ../srclib/openssl/inc32 SSLBIN=/libpath:../srclib/openssl/out32dll !ENDIF !IF "$(CFG)" == "abs - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "..\srclib\openssl\include\openssl\applink.c" "$(OUTDIR)\abs.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Release" "apr - Win32 Release" "..\srclib\openssl\include\openssl\applink.c" "$(OUTDIR)\abs.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 ReleaseCLEAN" "aprutil - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\ab.res" -@erase "$(INTDIR)\abs.obj" -@erase "$(INTDIR)\abs_src.idb" -@erase "$(INTDIR)\abs_src.pdb" -@erase "$(OUTDIR)\abs.exe" -@erase "$(OUTDIR)\abs.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../srclib/apr/include" /I "../srclib/apr-util/include" /I "../include" $(SSLINC) /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /D "HAVE_OPENSSL" /D "WIN32_LEAN_AND_MEAN" /D "NO_IDEA" /D "NO_RC5" /D "NO_MDC2" /D "OPENSSL_NO_IDEA" /D "OPENSSL_NO_RC5" /D "OPENSSL_NO_MDC2" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\abs_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\ab.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="ab.exe" /d LONG_NAME="ApacheBench/SSL command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\abs.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib $(SSLCRP).lib $(SSLLIB).lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\abs.pdb" /debug /out:"$(OUTDIR)\abs.exe" $(SSLBIN) /opt:ref LINK32_OBJS= \ "$(INTDIR)\abs.obj" \ "$(INTDIR)\ab.res" \ "..\srclib\apr\LibR\apr-1.lib" \ "..\srclib\apr-util\LibR\aprutil-1.lib" "$(OUTDIR)\abs.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\abs.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\abs.exe" if exist .\Release\abs.exe.manifest mt.exe -manifest .\Release\abs.exe.manifest -outputresource:.\Release\abs.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "abs - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "..\srclib\openssl\include\openssl\applink.c" "$(OUTDIR)\abs.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Debug" "apr - Win32 Debug" "..\srclib\openssl\include\openssl\applink.c" "$(OUTDIR)\abs.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 DebugCLEAN" "aprutil - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\ab.res" -@erase "$(INTDIR)\abs.obj" -@erase "$(INTDIR)\abs_src.idb" -@erase "$(INTDIR)\abs_src.pdb" -@erase "$(OUTDIR)\abs.exe" -@erase "$(OUTDIR)\abs.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /I "../include" $(SSLINC) /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /D "HAVE_OPENSSL" /D "WIN32_LEAN_AND_MEAN" /D "NO_IDEA" /D "NO_RC5" /D "NO_MDC2" /D "OPENSSL_NO_IDEA" /D "OPENSSL_NO_RC5" /D "OPENSSL_NO_MDC2" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\abs_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\ab.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="ab.exe" /d LONG_NAME="ApacheBench/SSL command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\abs.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib $(SSLCRP).lib $(SSLLIB).lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\abs.pdb" /debug /out:"$(OUTDIR)\abs.exe" $(SSLBIN) LINK32_OBJS= \ "$(INTDIR)\abs.obj" \ "$(INTDIR)\ab.res" \ "..\srclib\apr\LibD\apr-1.lib" \ "..\srclib\apr-util\LibD\aprutil-1.lib" "$(OUTDIR)\abs.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\abs.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\abs.exe" if exist .\Debug\abs.exe.manifest mt.exe -manifest .\Debug\abs.exe.manifest -outputresource:.\Debug\abs.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("abs.dep") !INCLUDE "abs.dep" !ELSE !MESSAGE Warning: cannot find "abs.dep" !ENDIF !ENDIF !IF "$(CFG)" == "abs - Win32 Release" || "$(CFG)" == "abs - Win32 Debug" !IF "$(CFG)" == "abs - Win32 Release" "apr - Win32 Release" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" cd "..\..\support" "apr - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "abs - Win32 Debug" "apr - Win32 Debug" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" cd "..\..\support" "apr - Win32 DebugCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF !IF "$(CFG)" == "abs - Win32 Release" "aprutil - Win32 Release" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" cd "..\..\support" "aprutil - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "abs - Win32 Debug" "aprutil - Win32 Debug" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" cd "..\..\support" "aprutil - Win32 DebugCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF SOURCE=.\ab.c !IF "$(CFG)" == "abs - Win32 Release" CPP_SWITCHES=/nologo /MD /W3 /Zi /O2 /Oy- /I "../srclib/apr/include" /I "../srclib/apr-util/include" /I "../include" $(SSLINC) /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /D "HAVE_OPENSSL" /D "WIN32_LEAN_AND_MEAN" /D "NO_IDEA" /D "NO_RC5" /D "NO_MDC2" /D "OPENSSL_NO_IDEA" /D "OPENSSL_NO_RC5" /D "OPENSSL_NO_MDC2" /Fo"$(INTDIR)\abs.obj" /Fd"$(INTDIR)\abs_src" /FD /c "$(INTDIR)\abs.obj" : $(SOURCE) "$(INTDIR)" $(CPP) @<< $(CPP_SWITCHES) $(SOURCE) << !ELSEIF "$(CFG)" == "abs - Win32 Debug" CPP_SWITCHES=/nologo /MDd /W3 /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /I "../include" $(SSLINC) /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /D "HAVE_OPENSSL" /D "WIN32_LEAN_AND_MEAN" /D "NO_IDEA" /D "NO_RC5" /D "NO_MDC2" /D "OPENSSL_NO_IDEA" /D "OPENSSL_NO_RC5" /D "OPENSSL_NO_MDC2" /Fo"$(INTDIR)\abs.obj" /Fd"$(INTDIR)\abs_src" /FD /EHsc /c "$(INTDIR)\abs.obj" : $(SOURCE) "$(INTDIR)" $(CPP) @<< $(CPP_SWITCHES) $(SOURCE) << !ENDIF SOURCE=../include\ap_release.h !IF "$(CFG)" == "abs - Win32 Release" InputPath=../include\ap_release.h "..\srclib\openssl\include\openssl\applink.c" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < ..\srclib\openssl\include\openssl\applink.c << !ELSEIF "$(CFG)" == "abs - Win32 Debug" InputPath=../include\ap_release.h "..\srclib\openssl\include\openssl\applink.c" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < ..\srclib\openssl\include\openssl\applink.c << !ENDIF SOURCE=..\build\win32\httpd.rc !IF "$(CFG)" == "abs - Win32 Release" "$(INTDIR)\ab.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\ab.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="ab.exe" /d LONG_NAME="ApacheBench/SSL command line utility" $(SOURCE) !ELSEIF "$(CFG)" == "abs - Win32 Debug" "$(INTDIR)\ab.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\ab.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="ab.exe" /d LONG_NAME="ApacheBench/SSL command line utility" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/support/phf_abuse_log.cgi.in0000644000000000000500000000303210455010104016622 0ustar rootsrc#!@perlbin@ # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # This script is used to detect people trying to abuse the security hole which # existed in A CGI script direstributed with Apache 1.0.3 and earlier versions. # You can redirect them to here using the "" suggestion # in httpd.conf. # # The format logged to is # "[date] remote_addr remote_host [date] referrer user_agent". $LOG = "/var/log/phf_log"; require "ctime.pl"; $when = &ctime(time); $when =~ s/\n//go; $ENV{HTTP_USER_AGENT} .= " via $ENV{HTTP_VIA}" if($ENV{HTTP_VIA}); open(LOG, ">>$LOG") || die "boo hoo, phf_log $!"; print LOG "[$when] $ENV{REMOTE_ADDR} $ENV{REMOTE_HOST} $ENV{$HTTP_REFERER} $ENV{HTTP_USER_AGENT}\n"; close(LOG); print "Content-type: text/html\r\n\r\nSmile, you're on Candid Camera.\n"; httpd-2.4.41/support/logresolve.c0000644000000000000500000002437013241033601015274 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * logresolve 2.0 * * Tom Rathborne - tomr uunet.ca - http://www.uunet.ca/~tomr/ * UUNET Canada, April 16, 1995 * * Rewritten by David Robinson. (drtr ast.cam.ac.uk) * Rewritten again, and ported to APR by Colm MacCarthaigh * * Usage: logresolve [-s filename] [-c] < access_log > new_log * * Arguments: * -s filename name of a file to record statistics * -c check the DNS for a matching A record for the host. * * Notes: (For historical interest) * * To generate meaningful statistics from an HTTPD log file, it's good * to have the domain name of each machine that accessed your site, but * doing this on the fly can slow HTTPD down. * * Compiling NCSA HTTPD with the -DMINIMAL_DNS flag turns IP#->hostname * resolution off. Before running your stats program, just run your log * file through this program (logresolve) and all of your IP numbers will * be resolved into hostnames (where possible). * * logresolve takes an HTTPD access log (in the COMMON log file format, * or any other format that has the IP number/domain name as the first * field for that matter), and outputs the same file with all of the * domain names looked up. Where no domain name can be found, the IP * number is left in. * * To minimize impact on your nameserver, logresolve has its very own * internal hash-table cache. This means that each IP number will only * be looked up the first time it is found in the log file. * * The -c option causes logresolve to apply the same check as httpd * compiled with -DMAXIMUM_DNS; after finding the hostname from the IP * address, it looks up the IP addresses for the hostname and checks * that one of these matches the original address. */ #include "apr.h" #include "apr_lib.h" #include "apr_hash.h" #include "apr_getopt.h" #include "apr_strings.h" #include "apr_file_io.h" #include "apr_network_io.h" #if APR_HAVE_STDLIB_H #include #endif #define READ_BUF_SIZE 128*1024 #define WRITE_BUF_SIZE 128*1024 #define LINE_BUF_SIZE 128*1024 static apr_file_t *errfile; static const char *shortname = "logresolve"; static apr_hash_t *cache; /* Statistics */ static int cachehits = 0; static int cachesize = 0; static int entries = 0; static int resolves = 0; static int withname = 0; static int doublefailed = 0; static int noreverse = 0; /* * prints various statistics to output */ #define NL APR_EOL_STR static void print_statistics (apr_file_t *output) { apr_file_printf(output, "logresolve Statistics:" NL); apr_file_printf(output, "Entries: %d" NL, entries); apr_file_printf(output, " With name : %d" NL, withname); apr_file_printf(output, " Resolves : %d" NL, resolves); if (noreverse) { apr_file_printf(output, " - No reverse : %d" NL, noreverse); } if (doublefailed) { apr_file_printf(output, " - Double lookup failed : %d" NL, doublefailed); } apr_file_printf(output, "Cache hits : %d" NL, cachehits); apr_file_printf(output, "Cache size : %d" NL, cachesize); } /* * usage info */ static void usage(void) { apr_file_printf(errfile, "%s -- Resolve IP-addresses to hostnames in Apache log files." NL "Usage: %s [-s STATFILE] [-c]" NL NL "Options:" NL " -s Record statistics to STATFILE when finished." NL NL " -c Perform double lookups when resolving IP addresses." NL, shortname, shortname); exit(1); } #undef NL int main(int argc, const char * const argv[]) { apr_file_t * outfile; apr_file_t * infile; apr_getopt_t * o; apr_pool_t * pool; apr_pool_t *pline; apr_status_t status; const char * arg; char * stats = NULL; char * inbuffer; char * outbuffer; char * line; int doublelookups = 0; if (apr_app_initialize(&argc, &argv, NULL) != APR_SUCCESS) { return 1; } atexit(apr_terminate); if (argc) { shortname = apr_filepath_name_get(argv[0]); } if (apr_pool_create(&pool, NULL) != APR_SUCCESS) { return 1; } apr_file_open_stderr(&errfile, pool); apr_getopt_init(&o, pool, argc, argv); while (1) { char opt; status = apr_getopt(o, "s:c", &opt, &arg); if (status == APR_EOF) { break; } else if (status != APR_SUCCESS) { usage(); } else { switch (opt) { case 'c': if (doublelookups) { usage(); } doublelookups = 1; break; case 's': if (stats) { usage(); } stats = apr_pstrdup(pool, arg); break; } /* switch */ } /* else */ } /* while */ apr_file_open_stdout(&outfile, pool); apr_file_open_stdin(&infile, pool); /* Allocate two new 10k file buffers */ if ( (outbuffer = apr_palloc(pool, WRITE_BUF_SIZE)) == NULL || (inbuffer = apr_palloc(pool, READ_BUF_SIZE)) == NULL || (line = apr_palloc(pool, LINE_BUF_SIZE)) == NULL) { return 1; } /* Set the buffers */ apr_file_buffer_set(infile, inbuffer, READ_BUF_SIZE); apr_file_buffer_set(outfile, outbuffer, WRITE_BUF_SIZE); cache = apr_hash_make(pool); if (apr_pool_create(&pline, pool) != APR_SUCCESS) { return 1; } while (apr_file_gets(line, LINE_BUF_SIZE, infile) == APR_SUCCESS) { char *hostname; char *space; apr_sockaddr_t *ip; apr_sockaddr_t *ipdouble; char dummy[] = " " APR_EOL_STR; if (line[0] == '\0') { continue; } /* Count our log entries */ entries++; /* Check if this could even be an IP address */ if (!apr_isxdigit(line[0]) && line[0] != ':') { withname++; apr_file_puts(line, outfile); continue; } /* Terminate the line at the next space */ if ((space = strchr(line, ' ')) != NULL) { *space = '\0'; } else { space = dummy; } /* See if we have it in our cache */ hostname = (char *) apr_hash_get(cache, line, APR_HASH_KEY_STRING); if (hostname) { apr_file_printf(outfile, "%s %s", hostname, space + 1); cachehits++; continue; } /* Parse the IP address */ status = apr_sockaddr_info_get(&ip, line, APR_UNSPEC, 0, 0, pline); if (status != APR_SUCCESS) { /* Not an IP address */ withname++; *space = ' '; apr_file_puts(line, outfile); continue; } /* This does not make much sense, but historically "resolves" means * "parsed as an IP address". It does not mean we actually resolved * the IP address into a hostname. */ resolves++; /* From here on our we cache each result, even if it was not * successful */ cachesize++; /* Try and perform a reverse lookup */ status = apr_getnameinfo(&hostname, ip, 0) != APR_SUCCESS; if (status || hostname == NULL) { /* Could not perform a reverse lookup */ *space = ' '; apr_file_puts(line, outfile); noreverse++; /* Add to cache */ *space = '\0'; apr_hash_set(cache, line, APR_HASH_KEY_STRING, apr_pstrdup(apr_hash_pool_get(cache), line)); continue; } /* Perform a double lookup */ if (doublelookups) { /* Do a forward lookup on our hostname, and see if that matches our * original IP address. */ status = apr_sockaddr_info_get(&ipdouble, hostname, ip->family, 0, 0, pline); if (status != APR_SUCCESS || memcmp(ipdouble->ipaddr_ptr, ip->ipaddr_ptr, ip->ipaddr_len)) { /* Double-lookup failed */ *space = ' '; apr_file_puts(line, outfile); doublefailed++; /* Add to cache */ *space = '\0'; apr_hash_set(cache, line, APR_HASH_KEY_STRING, apr_pstrdup(apr_hash_pool_get(cache), line)); continue; } } /* Output the resolved name */ apr_file_printf(outfile, "%s %s", hostname, space + 1); /* Store it in the cache */ apr_hash_set(cache, line, APR_HASH_KEY_STRING, apr_pstrdup(apr_hash_pool_get(cache), hostname)); apr_pool_clear(pline); } /* Flush any remaining output */ apr_file_flush(outfile); if (stats) { apr_file_t *statsfile; if (apr_file_open(&statsfile, stats, APR_FOPEN_WRITE | APR_FOPEN_CREATE | APR_FOPEN_TRUNCATE, APR_OS_DEFAULT, pool) != APR_SUCCESS) { apr_file_printf(errfile, "%s: Could not open %s for writing.", shortname, stats); return 1; } print_statistics(statsfile); apr_file_close(statsfile); } return 0; } httpd-2.4.41/support/httxt2dbm.c0000644000000000000500000001765612132772630015056 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * httxt2dbm.c: simple program for converting RewriteMap text files to DBM * Rewrite databases for the Apache HTTP server * */ #include "apr.h" #include "apr_lib.h" #include "apr_strings.h" #include "apr_file_io.h" #include "apr_file_info.h" #include "apr_pools.h" #include "apr_getopt.h" #include "apu.h" #include "apr_dbm.h" #if APR_HAVE_STDLIB_H #include /* for atexit() */ #endif static const char *input; static const char *output; static const char *format; static const char *shortname; static apr_file_t *errfile; static int verbose; /* From mod_rewrite.c */ #ifndef REWRITE_MAX_TXT_MAP_LINE #define REWRITE_MAX_TXT_MAP_LINE 1024 #endif #define NL APR_EOL_STR #define AVAIL "available" #define UNAVAIL "unavailable" static void usage(void) { const char *have_sdbm; const char *have_gdbm; const char *have_ndbm; const char *have_db; #if APU_HAVE_SDBM have_sdbm = AVAIL; #else have_sdbm = UNAVAIL; #endif #if APU_HAVE_GDBM have_gdbm = AVAIL; #else have_gdbm = UNAVAIL; #endif #if APU_HAVE_NDBM have_ndbm = AVAIL; #else have_ndbm = UNAVAIL; #endif #if APU_HAVE_DB have_db = AVAIL; #else have_db = UNAVAIL; #endif apr_file_printf(errfile, "%s -- Program to Create DBM Files for use by RewriteMap" NL "Usage: %s [-v] [-f format] -i SOURCE_TXT -o OUTPUT_DBM" NL NL "Options: " NL " -v More verbose output" NL NL " -i Source Text File. If '-', use stdin." NL NL " -o Output DBM." NL NL " -f DBM Format. If not specified, will use the APR Default." NL " GDBM for GDBM files (%s)" NL " SDBM for SDBM files (%s)" NL " DB for berkeley DB files (%s)" NL " NDBM for NDBM files (%s)" NL " default for the default DBM type" NL NL, shortname, shortname, have_gdbm, have_sdbm, have_db, have_ndbm); } static apr_status_t to_dbm(apr_dbm_t *dbm, apr_file_t *fp, apr_pool_t *pool) { apr_status_t rv = APR_SUCCESS; char line[REWRITE_MAX_TXT_MAP_LINE + 1]; /* +1 for \0 */ apr_datum_t dbmkey; apr_datum_t dbmval; apr_pool_t* p; apr_pool_create(&p, pool); while (apr_file_gets(line, sizeof(line), fp) == APR_SUCCESS) { char *c, *value; if (*line == '#' || apr_isspace(*line)) { continue; } c = line; while (*c && !apr_isspace(*c)) { ++c; } if (!*c) { /* no value. solid line of data. */ continue; } dbmkey.dptr = apr_pstrmemdup(p, line, c - line); dbmkey.dsize = (c - line); while (apr_isspace(*c)) { ++c; } if (!*c) { apr_pool_clear(p); continue; } value = c; while (*c && !apr_isspace(*c)) { ++c; } dbmval.dptr = apr_pstrmemdup(p, value, c - value); dbmval.dsize = (c - value); if (verbose) { apr_file_printf(errfile, " '%s' -> '%s'" NL, dbmkey.dptr, dbmval.dptr); } rv = apr_dbm_store(dbm, dbmkey, dbmval); apr_pool_clear(p); if (rv != APR_SUCCESS) { break; } } return rv; } int main(int argc, const char *const argv[]) { apr_pool_t *pool; apr_status_t rv = APR_SUCCESS; apr_getopt_t *opt; const char *opt_arg; char ch; apr_file_t *infile; apr_dbm_t *outdbm; apr_app_initialize(&argc, &argv, NULL); atexit(apr_terminate); verbose = 0; format = NULL; input = NULL; output = NULL; apr_pool_create(&pool, NULL); if (argc) { shortname = apr_filepath_name_get(argv[0]); } else { shortname = "httxt2dbm"; } apr_file_open_stderr(&errfile, pool); rv = apr_getopt_init(&opt, pool, argc, argv); if (rv != APR_SUCCESS) { apr_file_printf(errfile, "Error: apr_getopt_init failed." NL NL); return 1; } if (argc <= 1) { usage(); return 1; } while ((rv = apr_getopt(opt, "vf::i::o::", &ch, &opt_arg)) == APR_SUCCESS) { switch (ch) { case 'v': if (verbose) { apr_file_printf(errfile, "Error: -v can only be passed once" NL NL); usage(); return 1; } verbose = 1; break; case 'f': if (format) { apr_file_printf(errfile, "Error: -f can only be passed once" NL NL); usage(); return 1; } format = apr_pstrdup(pool, opt_arg); break; case 'i': if (input) { apr_file_printf(errfile, "Error: -i can only be passed once" NL NL); usage(); return 1; } input = apr_pstrdup(pool, opt_arg); break; case 'o': if (output) { apr_file_printf(errfile, "Error: -o can only be passed once" NL NL); usage(); return 1; } output = apr_pstrdup(pool, opt_arg); break; } } if (rv != APR_EOF) { apr_file_printf(errfile, "Error: Parsing Arguments Failed" NL NL); usage(); return 1; } if (!input) { apr_file_printf(errfile, "Error: No input file specified." NL NL); usage(); return 1; } if (!output) { apr_file_printf(errfile, "Error: No output DBM specified." NL NL); usage(); return 1; } if (!format) { format = "default"; } if (verbose) { apr_file_printf(errfile, "DBM Format: %s" NL, format); } if (!strcmp(input, "-")) { rv = apr_file_open_stdin(&infile, pool); } else { rv = apr_file_open(&infile, input, APR_READ|APR_BUFFERED, APR_OS_DEFAULT, pool); } if (rv != APR_SUCCESS) { apr_file_printf(errfile, "Error: Cannot open input file '%s': (%d) %pm" NL NL, input, rv, &rv); return 1; } if (verbose) { apr_file_printf(errfile, "Input File: %s" NL, input); } rv = apr_dbm_open_ex(&outdbm, format, output, APR_DBM_RWCREATE, APR_OS_DEFAULT, pool); if (APR_STATUS_IS_ENOTIMPL(rv)) { apr_file_printf(errfile, "Error: The requested DBM Format '%s' is not available." NL NL, format); return 1; } if (rv != APR_SUCCESS) { apr_file_printf(errfile, "Error: Cannot open output DBM '%s': (%d) %pm" NL NL, output, rv, &rv); return 1; } if (verbose) { apr_file_printf(errfile, "DBM File: %s" NL, output); } rv = to_dbm(outdbm, infile, pool); if (rv != APR_SUCCESS) { apr_file_printf(errfile, "Error: Converting to DBM: (%d) %pm" NL NL, rv, &rv); return 1; } apr_dbm_close(outdbm); if (verbose) { apr_file_printf(errfile, "Conversion Complete." NL); } return 0; } httpd-2.4.41/support/httxt2dbm.mak0000644000000000000500000002055312701473373015376 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on httxt2dbm.dsp !IF "$(CFG)" == "" CFG=httxt2dbm - Win32 Debug !MESSAGE No configuration specified. Defaulting to httxt2dbm - Win32 Debug. !ENDIF !IF "$(CFG)" != "httxt2dbm - Win32 Release" && "$(CFG)" != "httxt2dbm - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "httxt2dbm.mak" CFG="httxt2dbm - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "httxt2dbm - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "httxt2dbm - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "httxt2dbm - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\httxt2dbm.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Release" "apr - Win32 Release" "$(OUTDIR)\httxt2dbm.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 ReleaseCLEAN" "aprutil - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\httxt2dbm.obj" -@erase "$(INTDIR)\httxt2dbm.res" -@erase "$(INTDIR)\httxt2dbm_src.idb" -@erase "$(INTDIR)\httxt2dbm_src.pdb" -@erase "$(OUTDIR)\httxt2dbm.exe" -@erase "$(OUTDIR)\httxt2dbm.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\httxt2dbm_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\httxt2dbm.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="httxt2dbm.exe" /d LONG_NAME="Apache httxt2dbm command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\httxt2dbm.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\httxt2dbm.pdb" /debug /out:"$(OUTDIR)\httxt2dbm.exe" /opt:ref LINK32_OBJS= \ "$(INTDIR)\httxt2dbm.obj" \ "$(INTDIR)\httxt2dbm.res" \ "..\srclib\apr\LibR\apr-1.lib" \ "..\srclib\apr-util\LibR\aprutil-1.lib" "$(OUTDIR)\httxt2dbm.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\httxt2dbm.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\httxt2dbm.exe" if exist .\Release\httxt2dbm.exe.manifest mt.exe -manifest .\Release\httxt2dbm.exe.manifest -outputresource:.\Release\httxt2dbm.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "httxt2dbm - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\httxt2dbm.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Debug" "apr - Win32 Debug" "$(OUTDIR)\httxt2dbm.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 DebugCLEAN" "aprutil - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\httxt2dbm.obj" -@erase "$(INTDIR)\httxt2dbm.res" -@erase "$(INTDIR)\httxt2dbm_src.idb" -@erase "$(INTDIR)\httxt2dbm_src.pdb" -@erase "$(OUTDIR)\httxt2dbm.exe" -@erase "$(OUTDIR)\httxt2dbm.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\httxt2dbm_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\httxt2dbm.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="httxt2dbm.exe" /d LONG_NAME="Apache httxt2dbm command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\httxt2dbm.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\httxt2dbm.pdb" /debug /out:"$(OUTDIR)\httxt2dbm.exe" LINK32_OBJS= \ "$(INTDIR)\httxt2dbm.obj" \ "$(INTDIR)\httxt2dbm.res" \ "..\srclib\apr\LibD\apr-1.lib" \ "..\srclib\apr-util\LibD\aprutil-1.lib" "$(OUTDIR)\httxt2dbm.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\httxt2dbm.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\httxt2dbm.exe" if exist .\Debug\httxt2dbm.exe.manifest mt.exe -manifest .\Debug\httxt2dbm.exe.manifest -outputresource:.\Debug\httxt2dbm.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("httxt2dbm.dep") !INCLUDE "httxt2dbm.dep" !ELSE !MESSAGE Warning: cannot find "httxt2dbm.dep" !ENDIF !ENDIF !IF "$(CFG)" == "httxt2dbm - Win32 Release" || "$(CFG)" == "httxt2dbm - Win32 Debug" !IF "$(CFG)" == "httxt2dbm - Win32 Release" "apr - Win32 Release" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" cd "..\..\support" "apr - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "httxt2dbm - Win32 Debug" "apr - Win32 Debug" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" cd "..\..\support" "apr - Win32 DebugCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF !IF "$(CFG)" == "httxt2dbm - Win32 Release" "aprutil - Win32 Release" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" cd "..\..\support" "aprutil - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "httxt2dbm - Win32 Debug" "aprutil - Win32 Debug" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" cd "..\..\support" "aprutil - Win32 DebugCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF SOURCE=..\build\win32\httpd.rc !IF "$(CFG)" == "httxt2dbm - Win32 Release" "$(INTDIR)\httxt2dbm.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\httxt2dbm.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="httxt2dbm.exe" /d LONG_NAME="Apache httxt2dbm command line utility" $(SOURCE) !ELSEIF "$(CFG)" == "httxt2dbm - Win32 Debug" "$(INTDIR)\httxt2dbm.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\httxt2dbm.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="httxt2dbm.exe" /d LONG_NAME="Apache httxt2dbm command line utility" $(SOURCE) !ENDIF SOURCE=.\httxt2dbm.c "$(INTDIR)\httxt2dbm.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/support/htdbm.c0000644000000000000500000003376112573541030014224 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * htdbm.c: simple program for manipulating DBM * password databases for the Apache HTTP server * * Contributed by Mladen Turk * 12 Oct 2001 */ #include "passwd_common.h" #include "apr_file_io.h" #include "apr_file_info.h" #include "apr_pools.h" #include "apr_signal.h" #include "apr_md5.h" #include "apr_sha1.h" #include "apr_dbm.h" #include "apr_getopt.h" #if APR_HAVE_STDLIB_H #include #endif #if APR_HAVE_STRING_H #include #endif #if APR_HAVE_STRINGS_H #include #endif #include #if APR_CHARSET_EBCDIC #include "apr_xlate.h" #endif /*APR_CHARSET_EBCDIC*/ #if APR_HAVE_UNISTD_H #include #endif #if APR_HAVE_CRYPT_H #include #endif typedef struct htdbm_t htdbm_t; struct htdbm_t { apr_dbm_t *dbm; struct passwd_ctx ctx; #if APR_CHARSET_EBCDIC apr_xlate_t *to_ascii; #endif char *filename; char *username; char *comment; char *type; int create; int rdonly; }; #define HTDBM_MAKE 0 #define HTDBM_DELETE 1 #define HTDBM_VERIFY 2 #define HTDBM_LIST 3 #define HTDBM_NOFILE 4 static void terminate(void) { apr_terminate(); #ifdef NETWARE pressanykey(); #endif } static void htdbm_terminate(htdbm_t *htdbm) { if (htdbm->dbm) apr_dbm_close(htdbm->dbm); htdbm->dbm = NULL; } static htdbm_t *h; static void htdbm_interrupted(void) { htdbm_terminate(h); fprintf(stderr, "htdbm Interrupted !\n"); exit(ERR_INTERRUPTED); } static apr_status_t htdbm_init(apr_pool_t **pool, htdbm_t **hdbm) { #if APR_CHARSET_EBCDIC apr_status_t rv; #endif apr_pool_create( pool, NULL); apr_pool_abort_set(abort_on_oom, *pool); apr_file_open_stderr(&errfile, *pool); apr_signal(SIGINT, (void (*)(int)) htdbm_interrupted); (*hdbm) = (htdbm_t *)apr_pcalloc(*pool, sizeof(htdbm_t)); (*hdbm)->ctx.pool = *pool; #if APR_CHARSET_EBCDIC rv = apr_xlate_open(&((*hdbm)->to_ascii), "ISO-8859-1", APR_DEFAULT_CHARSET, (*hdbm)->ctx.pool); if (rv) { fprintf(stderr, "apr_xlate_open(to ASCII)->%d\n", rv); return APR_EGENERAL; } rv = apr_SHA1InitEBCDIC((*hdbm)->to_ascii); if (rv) { fprintf(stderr, "apr_SHA1InitEBCDIC()->%d\n", rv); return APR_EGENERAL; } rv = apr_MD5InitEBCDIC((*hdbm)->to_ascii); if (rv) { fprintf(stderr, "apr_MD5InitEBCDIC()->%d\n", rv); return APR_EGENERAL; } #endif /*APR_CHARSET_EBCDIC*/ /* Set MD5 as default */ (*hdbm)->ctx.alg = ALG_APMD5; (*hdbm)->type = "default"; return APR_SUCCESS; } static apr_status_t htdbm_open(htdbm_t *htdbm) { if (htdbm->create) return apr_dbm_open_ex(&htdbm->dbm, htdbm->type, htdbm->filename, APR_DBM_RWCREATE, APR_OS_DEFAULT, htdbm->ctx.pool); else return apr_dbm_open_ex(&htdbm->dbm, htdbm->type, htdbm->filename, htdbm->rdonly ? APR_DBM_READONLY : APR_DBM_READWRITE, APR_OS_DEFAULT, htdbm->ctx.pool); } static apr_status_t htdbm_save(htdbm_t *htdbm, int *changed) { apr_datum_t key, val; if (!htdbm->username) return APR_SUCCESS; key.dptr = htdbm->username; key.dsize = strlen(htdbm->username); if (apr_dbm_exists(htdbm->dbm, key)) *changed = 1; val.dsize = strlen(htdbm->ctx.passwd); if (!htdbm->comment) val.dptr = htdbm->ctx.passwd; else { val.dptr = apr_pstrcat(htdbm->ctx.pool, htdbm->ctx.passwd, ":", htdbm->comment, NULL); val.dsize += (strlen(htdbm->comment) + 1); } return apr_dbm_store(htdbm->dbm, key, val); } static apr_status_t htdbm_del(htdbm_t *htdbm) { apr_datum_t key; key.dptr = htdbm->username; key.dsize = strlen(htdbm->username); if (!apr_dbm_exists(htdbm->dbm, key)) return APR_ENOENT; return apr_dbm_delete(htdbm->dbm, key); } static apr_status_t htdbm_verify(htdbm_t *htdbm) { apr_datum_t key, val; char *pwd; char *rec, *cmnt; key.dptr = htdbm->username; key.dsize = strlen(htdbm->username); if (!apr_dbm_exists(htdbm->dbm, key)) return APR_ENOENT; if (apr_dbm_fetch(htdbm->dbm, key, &val) != APR_SUCCESS) return APR_ENOENT; rec = apr_pstrndup(htdbm->ctx.pool, val.dptr, val.dsize); cmnt = strchr(rec, ':'); if (cmnt) pwd = apr_pstrndup(htdbm->ctx.pool, rec, cmnt - rec); else pwd = apr_pstrdup(htdbm->ctx.pool, rec); return apr_password_validate(htdbm->ctx.passwd, pwd); } static apr_status_t htdbm_list(htdbm_t *htdbm) { apr_status_t rv; apr_datum_t key, val; char *cmnt; int i = 0; rv = apr_dbm_firstkey(htdbm->dbm, &key); if (rv != APR_SUCCESS) { fprintf(stderr, "Empty database -- %s\n", htdbm->filename); return APR_ENOENT; } fprintf(stderr, "Dumping records from database -- %s\n", htdbm->filename); fprintf(stderr, " %-32s Comment\n", "Username"); while (key.dptr != NULL) { rv = apr_dbm_fetch(htdbm->dbm, key, &val); if (rv != APR_SUCCESS) { fprintf(stderr, "Failed getting data from %s\n", htdbm->filename); return APR_EGENERAL; } /* Note: we don't store \0-terminators on our dbm data */ fprintf(stderr, " %-32.*s", (int)key.dsize, key.dptr); cmnt = memchr(val.dptr, ':', val.dsize); if (cmnt) fprintf(stderr, " %.*s", (int)(val.dptr+val.dsize - (cmnt+1)), cmnt + 1); fprintf(stderr, "\n"); rv = apr_dbm_nextkey(htdbm->dbm, &key); if (rv != APR_SUCCESS) fprintf(stderr, "Failed getting NextKey\n"); ++i; } fprintf(stderr, "Total #records : %d\n", i); return APR_SUCCESS; } static int htdbm_make(htdbm_t *htdbm) { char cpw[MAX_STRING_LEN]; int ret; htdbm->ctx.out = cpw; htdbm->ctx.out_len = sizeof(cpw); ret = mkhash(&htdbm->ctx); if (ret != 0) { fprintf(stderr, "Error: %s\n", htdbm->ctx.errstr); return ret; } htdbm->ctx.passwd = apr_pstrdup(htdbm->ctx.pool, cpw); return 0; } static apr_status_t htdbm_valid_username(htdbm_t *htdbm) { if (!htdbm->username || (strlen(htdbm->username) > 64) || (strlen(htdbm->username) < 1)) { fprintf(stderr, "Invalid username length\n"); return APR_EINVAL; } if (strchr(htdbm->username, ':')) { fprintf(stderr, "Username contains invalid characters\n"); return APR_EINVAL; } return APR_SUCCESS; } static void htdbm_usage(void) { fprintf(stderr, "htdbm -- program for manipulating DBM password databases.\n\n" "Usage: htdbm [-cimBdpstvx] [-C cost] [-TDBTYPE] database username\n" " -b[cmBdptsv] [-C cost] [-TDBTYPE] database username password\n" " -n[imBdpst] [-C cost] username\n" " -nb[mBdpst] [-C cost] username password\n" " -v[imBdps] [-C cost] [-TDBTYPE] database username\n" " -vb[mBdps] [-C cost] [-TDBTYPE] database username password\n" " -x [-TDBTYPE] database username\n" " -l [-TDBTYPE] database\n" "Options:\n" " -c Create a new database.\n" " -n Don't update database; display results on stdout.\n" " -b Use the password from the command line rather than prompting for it.\n" " -i Read password from stdin without verification (for script usage).\n" " -m Force MD5 encryption of the password (default).\n" " -B Force BCRYPT encryption of the password (very secure).\n" " -C Set the computing time used for the bcrypt algorithm\n" " (higher is more secure but slower, default: %d, valid: 4 to 31).\n" " -d Force CRYPT encryption of the password (8 chars max, insecure).\n" " -s Force SHA encryption of the password (insecure).\n" " -p Do not encrypt the password (plaintext, insecure).\n" " -T DBM Type (SDBM|GDBM|DB|default).\n" " -l Display usernames from database on stdout.\n" " -v Verify the username/password.\n" " -x Remove the username record from database.\n" " -t The last param is username comment.\n" "The SHA algorithm does not use a salt and is less secure than the " "MD5 algorithm.\n", BCRYPT_DEFAULT_COST); exit(ERR_SYNTAX); } int main(int argc, const char * const argv[]) { apr_pool_t *pool; apr_status_t rv; char errbuf[MAX_STRING_LEN]; int need_file = 1; int need_user = 1; int need_pwd = 1; int need_cmnt = 0; int changed = 0; int cmd = HTDBM_MAKE; int i, ret, args_left = 2; apr_getopt_t *state; char opt; const char *opt_arg; apr_app_initialize(&argc, &argv, NULL); atexit(terminate); if ((rv = htdbm_init(&pool, &h)) != APR_SUCCESS) { fprintf(stderr, "Unable to initialize htdbm terminating!\n"); apr_strerror(rv, errbuf, sizeof(errbuf)); exit(1); } rv = apr_getopt_init(&state, pool, argc, argv); if (rv != APR_SUCCESS) exit(ERR_SYNTAX); while ((rv = apr_getopt(state, "cnmspdBbtivxlC:T:", &opt, &opt_arg)) == APR_SUCCESS) { switch (opt) { case 'c': h->create = 1; break; case 'n': need_file = 0; cmd = HTDBM_NOFILE; args_left--; break; case 'l': need_pwd = 0; need_user = 0; cmd = HTDBM_LIST; h->rdonly = 1; args_left--; break; case 't': need_cmnt = 1; args_left++; break; case 'T': h->type = apr_pstrdup(h->ctx.pool, opt_arg); break; case 'v': h->rdonly = 1; cmd = HTDBM_VERIFY; break; case 'x': need_pwd = 0; cmd = HTDBM_DELETE; break; default: ret = parse_common_options(&h->ctx, opt, opt_arg); if (ret) { fprintf(stderr, "Error: %s\n", h->ctx.errstr); exit(ret); } } } if (h->ctx.passwd_src == PW_ARG) { need_pwd = 0; args_left++; } /* * Make sure we still have exactly the right number of arguments left * (the filename, the username, and possibly the password if -b was * specified). */ i = state->ind; if (rv != APR_EOF || argc - i != args_left) htdbm_usage(); if (need_file) { h->filename = apr_pstrdup(h->ctx.pool, argv[i++]); if ((rv = htdbm_open(h)) != APR_SUCCESS) { fprintf(stderr, "Error opening database %s\n", h->filename); apr_strerror(rv, errbuf, sizeof(errbuf)); fprintf(stderr,"%s\n",errbuf); exit(ERR_FILEPERM); } } if (need_user) { h->username = apr_pstrdup(pool, argv[i++]); if (htdbm_valid_username(h) != APR_SUCCESS) exit(ERR_BADUSER); } if (h->ctx.passwd_src == PW_ARG) h->ctx.passwd = apr_pstrdup(pool, argv[i++]); if (need_pwd) { ret = get_password(&h->ctx); if (ret) { fprintf(stderr, "Error: %s\n", h->ctx.errstr); exit(ret); } } if (need_cmnt) h->comment = apr_pstrdup(pool, argv[i++]); switch (cmd) { case HTDBM_VERIFY: if ((rv = htdbm_verify(h)) != APR_SUCCESS) { if (APR_STATUS_IS_ENOENT(rv)) { fprintf(stderr, "The user '%s' could not be found in database\n", h->username); exit(ERR_BADUSER); } else { fprintf(stderr, "Password mismatch for user '%s'\n", h->username); exit(ERR_PWMISMATCH); } } else fprintf(stderr, "Password validated for user '%s'\n", h->username); break; case HTDBM_DELETE: if (htdbm_del(h) != APR_SUCCESS) { fprintf(stderr, "Cannot find user '%s' in database\n", h->username); exit(ERR_BADUSER); } h->username = NULL; changed = 1; break; case HTDBM_LIST: htdbm_list(h); break; default: ret = htdbm_make(h); if (ret) exit(ret); break; } if (need_file && !h->rdonly) { if ((rv = htdbm_save(h, &changed)) != APR_SUCCESS) { apr_strerror(rv, errbuf, sizeof(errbuf)); exit(ERR_FILEPERM); } fprintf(stdout, "Database %s %s.\n", h->filename, h->create ? "created" : (changed ? "modified" : "updated")); } if (cmd == HTDBM_NOFILE) { if (!need_cmnt) { fprintf(stderr, "%s:%s\n", h->username, h->ctx.passwd); } else { fprintf(stderr, "%s:%s:%s\n", h->username, h->ctx.passwd, h->comment); } } htdbm_terminate(h); return 0; /* Suppress compiler warning. */ } httpd-2.4.41/support/NWGNUlogres0000644000000000000500000001066111540546347015022 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(NWOS) \ $(AP_WORK)/include \ $(APR)/include \ $(APRUTIL)/include \ $(APR)/misc/netware \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = logres # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Logresolve Utility for NetWare # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = logres # # This is used by the '-screenname' directive. If left blank, # 'Apache for NetWare' Thread will be used. # NLM_SCREEN_NAME = Log Resolve # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 65536 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = AUTOUNLOAD, PSEUDOPREEMPTION # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/logres.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/logresolve.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @libc.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/support/NWGNUhtcacheclean0000644000000000000500000001045311540546347016130 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(STDMOD)/cache \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(APR)/misc/netware \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = htcacheclean # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) HT Disk Cache Cleanup Utility for NetWare # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = htcacheclean # # This is used by the '-screenname' directive. If left blank, # 'Apache for NetWare' Thread will be used. # NLM_SCREEN_NAME = DEFAULT # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/htcacheclean.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/htcacheclean.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/support/abs.dsp0000644000000000000500000001326313076222603014233 0ustar rootsrc# Microsoft Developer Studio Project File - Name="abs" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Console Application" 0x0103 CFG=abs - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "abs.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "abs.mak" CFG="abs - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "abs - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "abs - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe RSC=rc.exe !IF "$(CFG)" == "abs - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /D "SSL" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../srclib/apr/include" /I "../srclib/apr-util/include" /I "../include" /I "../srclib/openssl/inc32" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /D "HAVE_OPENSSL" /D "WIN32_LEAN_AND_MEAN" /D "NO_IDEA" /D "NO_RC5" /D "NO_MDC2" /D "OPENSSL_NO_IDEA" /D "OPENSSL_NO_RC5" /D "OPENSSL_NO_MDC2" /Fd"Release/abs_src" /FD /c # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/ab.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="ab.exe" /d LONG_NAME="ApacheBench/SSL command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib ssleay32.lib libeay32.lib /nologo /subsystem:console /libpath:"../srclib/openssl/out32dll" # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib ssleay32.lib libeay32.lib /nologo /subsystem:console /debug /libpath:"../srclib/openssl/out32dll" /opt:ref # Begin Special Build Tool TargetPath=.\Release\abs.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ELSEIF "$(CFG)" == "abs - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /D "SSL" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /I "../include" /I "../srclib/openssl/inc32" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /D "HAVE_OPENSSL" /D "WIN32_LEAN_AND_MEAN" /D "NO_IDEA" /D "NO_RC5" /D "NO_MDC2" /D "OPENSSL_NO_IDEA" /D "OPENSSL_NO_RC5" /D "OPENSSL_NO_MDC2" /Fd"Debug/abs_src" /FD /c # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/ab.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="ab.exe" /d LONG_NAME="ApacheBench/SSL command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib ssleay32.lib libeay32.lib /nologo /subsystem:console /incremental:no /debug /libpath:"../srclib/openssl/out32dll" # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib ssleay32.lib libeay32.lib /nologo /subsystem:console /incremental:no /debug /libpath:"../srclib/openssl/out32dll" # Begin Special Build Tool TargetPath=.\Debug\abs.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ENDIF # Begin Target # Name "abs - Win32 Release" # Name "abs - Win32 Debug" # Begin Source File SOURCE=.\ab.c !IF "$(CFG)" == "abs - Win32 Release" # ADD CPP /Fo"Release/abs.obj" !ELSEIF "$(CFG)" == "abs - Win32 Debug" # ADD CPP /Fo"Debug/abs.obj" !ENDIF # End Source File # Begin Source File SOURCE=../include\ap_release.h !IF "$(CFG)" == "abs - Win32 Release" # Begin Custom Build - Create applink.c from ms/applink.c InputPath=../include\ap_release.h "..\srclib\openssl\include\openssl\applink.c" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" IF EXIST ..\srclib\openssl\ms\applink.c type ..\srclib\openssl\ms\applink.c > ..\srclib\openssl\include\openssl\applink.c # End Custom Build !ELSEIF "$(CFG)" == "abs - Win32 Debug" # Begin Custom Build - Create applink.c from ms/applink.c InputPath=../include\ap_release.h "..\srclib\openssl\include\openssl\applink.c" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" IF EXIST ..\srclib\openssl\ms\applink.c type ..\srclib\openssl\ms\applink.c > ..\srclib\openssl\include\openssl\applink.c # End Custom Build !ENDIF # End Source File # Begin Source File SOURCE=..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/support/envvars-std.in0000644000000000000500000000205711726155013015561 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # envvars-std - default environment variables for apachectl # # This file is generated from envvars-std.in # if test "x$@SHLIBPATH_VAR@" != "x" ; then @SHLIBPATH_VAR@="@exp_libdir@:$@SHLIBPATH_VAR@" else @SHLIBPATH_VAR@="@exp_libdir@" fi export @SHLIBPATH_VAR@ # @OS_SPECIFIC_VARS@ httpd-2.4.41/support/htdigest.dep0000644000000000000500000000160712674411515015267 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by htdigest.mak .\htdigest.c : \ "..\srclib\apr-util\include\apr_md5.h"\ "..\srclib\apr-util\include\apr_xlate.h"\ "..\srclib\apr-util\include\apu.h"\ "..\srclib\apr\include\apr.h"\ "..\srclib\apr\include\apr_allocator.h"\ "..\srclib\apr\include\apr_errno.h"\ "..\srclib\apr\include\apr_file_info.h"\ "..\srclib\apr\include\apr_file_io.h"\ "..\srclib\apr\include\apr_general.h"\ "..\srclib\apr\include\apr_inherit.h"\ "..\srclib\apr\include\apr_lib.h"\ "..\srclib\apr\include\apr_pools.h"\ "..\srclib\apr\include\apr_signal.h"\ "..\srclib\apr\include\apr_strings.h"\ "..\srclib\apr\include\apr_tables.h"\ "..\srclib\apr\include\apr_thread_mutex.h"\ "..\srclib\apr\include\apr_time.h"\ "..\srclib\apr\include\apr_user.h"\ "..\srclib\apr\include\apr_want.h"\ ..\build\win32\httpd.rc : \ "..\include\ap_release.h"\ httpd-2.4.41/support/ab.mak0000644000000000000500000001756112701473373014045 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on ab.dsp !IF "$(CFG)" == "" CFG=ab - Win32 Debug !MESSAGE No configuration specified. Defaulting to ab - Win32 Debug. !ENDIF !IF "$(CFG)" != "ab - Win32 Release" && "$(CFG)" != "ab - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "ab.mak" CFG="ab - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "ab - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "ab - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "ab - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\ab.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Release" "apr - Win32 Release" "$(OUTDIR)\ab.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 ReleaseCLEAN" "aprutil - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\ab.obj" -@erase "$(INTDIR)\ab.res" -@erase "$(INTDIR)\ab_src.idb" -@erase "$(INTDIR)\ab_src.pdb" -@erase "$(OUTDIR)\ab.exe" -@erase "$(OUTDIR)\ab.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../srclib/apr/include" /I "../srclib/apr-util/include" /I "../include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\ab_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\ab.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="ab.exe" /d LONG_NAME="ApacheBench command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\ab.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\ab.pdb" /debug /out:"$(OUTDIR)\ab.exe" /opt:ref LINK32_OBJS= \ "$(INTDIR)\ab.obj" \ "$(INTDIR)\ab.res" \ "..\srclib\apr\LibR\apr-1.lib" \ "..\srclib\apr-util\LibR\aprutil-1.lib" "$(OUTDIR)\ab.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\ab.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\ab.exe" if exist .\Release\ab.exe.manifest mt.exe -manifest .\Release\ab.exe.manifest -outputresource:.\Release\ab.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "ab - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\ab.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Debug" "apr - Win32 Debug" "$(OUTDIR)\ab.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 DebugCLEAN" "aprutil - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\ab.obj" -@erase "$(INTDIR)\ab.res" -@erase "$(INTDIR)\ab_src.idb" -@erase "$(INTDIR)\ab_src.pdb" -@erase "$(OUTDIR)\ab.exe" -@erase "$(OUTDIR)\ab.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /I "../include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\ab_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\ab.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="ab.exe" /d LONG_NAME="ApacheBench command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\ab.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\ab.pdb" /debug /out:"$(OUTDIR)\ab.exe" LINK32_OBJS= \ "$(INTDIR)\ab.obj" \ "$(INTDIR)\ab.res" \ "..\srclib\apr\LibD\apr-1.lib" \ "..\srclib\apr-util\LibD\aprutil-1.lib" "$(OUTDIR)\ab.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\ab.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\ab.exe" if exist .\Debug\ab.exe.manifest mt.exe -manifest .\Debug\ab.exe.manifest -outputresource:.\Debug\ab.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("ab.dep") !INCLUDE "ab.dep" !ELSE !MESSAGE Warning: cannot find "ab.dep" !ENDIF !ENDIF !IF "$(CFG)" == "ab - Win32 Release" || "$(CFG)" == "ab - Win32 Debug" !IF "$(CFG)" == "ab - Win32 Release" "apr - Win32 Release" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" cd "..\..\support" "apr - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "ab - Win32 Debug" "apr - Win32 Debug" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" cd "..\..\support" "apr - Win32 DebugCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF !IF "$(CFG)" == "ab - Win32 Release" "aprutil - Win32 Release" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" cd "..\..\support" "aprutil - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "ab - Win32 Debug" "aprutil - Win32 Debug" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" cd "..\..\support" "aprutil - Win32 DebugCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF SOURCE=.\ab.c "$(INTDIR)\ab.obj" : $(SOURCE) "$(INTDIR)" SOURCE=..\build\win32\httpd.rc !IF "$(CFG)" == "ab - Win32 Release" "$(INTDIR)\ab.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\ab.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="ab.exe" /d LONG_NAME="ApacheBench command line utility" $(SOURCE) !ELSEIF "$(CFG)" == "ab - Win32 Debug" "$(INTDIR)\ab.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\ab.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="ab.exe" /d LONG_NAME="ApacheBench command line utility" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/support/rotatelogs.mak0000644000000000000500000002065512701473373015644 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on rotatelogs.dsp !IF "$(CFG)" == "" CFG=rotatelogs - Win32 Debug !MESSAGE No configuration specified. Defaulting to rotatelogs - Win32 Debug. !ENDIF !IF "$(CFG)" != "rotatelogs - Win32 Release" && "$(CFG)" != "rotatelogs - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "rotatelogs.mak" CFG="rotatelogs - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "rotatelogs - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "rotatelogs - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "rotatelogs - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\rotatelogs.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Release" "apr - Win32 Release" "$(OUTDIR)\rotatelogs.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 ReleaseCLEAN" "aprutil - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\rotatelogs.obj" -@erase "$(INTDIR)\rotatelogs.res" -@erase "$(INTDIR)\rotatelogs_src.idb" -@erase "$(INTDIR)\rotatelogs_src.pdb" -@erase "$(OUTDIR)\rotatelogs.exe" -@erase "$(OUTDIR)\rotatelogs.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\rotatelogs_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\rotatelogs.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="rotatelogs.exe" /d LONG_NAME="Apache rotatelogs command line pipe" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\rotatelogs.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\rotatelogs.pdb" /debug /out:"$(OUTDIR)\rotatelogs.exe" /opt:ref LINK32_OBJS= \ "$(INTDIR)\rotatelogs.obj" \ "$(INTDIR)\rotatelogs.res" \ "..\srclib\apr\LibR\apr-1.lib" \ "..\srclib\apr-util\LibR\aprutil-1.lib" "$(OUTDIR)\rotatelogs.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\rotatelogs.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\rotatelogs.exe" if exist .\Release\rotatelogs.exe.manifest mt.exe -manifest .\Release\rotatelogs.exe.manifest -outputresource:.\Release\rotatelogs.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "rotatelogs - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\rotatelogs.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Debug" "apr - Win32 Debug" "$(OUTDIR)\rotatelogs.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 DebugCLEAN" "aprutil - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\rotatelogs.obj" -@erase "$(INTDIR)\rotatelogs.res" -@erase "$(INTDIR)\rotatelogs_src.idb" -@erase "$(INTDIR)\rotatelogs_src.pdb" -@erase "$(OUTDIR)\rotatelogs.exe" -@erase "$(OUTDIR)\rotatelogs.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\rotatelogs_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\rotatelogs.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="rotatelogs.exe" /d LONG_NAME="Apache rotatelogs command line pipe" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\rotatelogs.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\rotatelogs.pdb" /debug /out:"$(OUTDIR)\rotatelogs.exe" LINK32_OBJS= \ "$(INTDIR)\rotatelogs.obj" \ "$(INTDIR)\rotatelogs.res" \ "..\srclib\apr\LibD\apr-1.lib" \ "..\srclib\apr-util\LibD\aprutil-1.lib" "$(OUTDIR)\rotatelogs.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\rotatelogs.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\rotatelogs.exe" if exist .\Debug\rotatelogs.exe.manifest mt.exe -manifest .\Debug\rotatelogs.exe.manifest -outputresource:.\Debug\rotatelogs.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("rotatelogs.dep") !INCLUDE "rotatelogs.dep" !ELSE !MESSAGE Warning: cannot find "rotatelogs.dep" !ENDIF !ENDIF !IF "$(CFG)" == "rotatelogs - Win32 Release" || "$(CFG)" == "rotatelogs - Win32 Debug" !IF "$(CFG)" == "rotatelogs - Win32 Release" "apr - Win32 Release" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" cd "..\..\support" "apr - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "rotatelogs - Win32 Debug" "apr - Win32 Debug" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" cd "..\..\support" "apr - Win32 DebugCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF !IF "$(CFG)" == "rotatelogs - Win32 Release" "aprutil - Win32 Release" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" cd "..\..\support" "aprutil - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "rotatelogs - Win32 Debug" "aprutil - Win32 Debug" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" cd "..\..\support" "aprutil - Win32 DebugCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF SOURCE=..\build\win32\httpd.rc !IF "$(CFG)" == "rotatelogs - Win32 Release" "$(INTDIR)\rotatelogs.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\rotatelogs.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="rotatelogs.exe" /d LONG_NAME="Apache rotatelogs command line pipe" $(SOURCE) !ELSEIF "$(CFG)" == "rotatelogs - Win32 Debug" "$(INTDIR)\rotatelogs.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\rotatelogs.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="rotatelogs.exe" /d LONG_NAME="Apache rotatelogs command line pipe" $(SOURCE) !ENDIF SOURCE=.\rotatelogs.c "$(INTDIR)\rotatelogs.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/support/htdbm.dsp0000644000000000000500000001032612061606345014563 0ustar rootsrc# Microsoft Developer Studio Project File - Name="htdbm" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Console Application" 0x0103 CFG=htdbm - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "htdbm.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "htdbm.mak" CFG="htdbm - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "htdbm - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "htdbm - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe RSC=rc.exe !IF "$(CFG)" == "htdbm - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Release/htdbm_src" /FD /c # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/htdbm.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="htdbm.exe" /d LONG_NAME="Apache htdbm command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib rpcrt4.lib ws2_32.lib shell32.lib /nologo /subsystem:console # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /debug /opt:ref # Begin Special Build Tool TargetPath=.\Release\htdbm.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ELSEIF "$(CFG)" == "htdbm - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Debug/htdbm_src" /FD /c # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/htdbm.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="htdbm.exe" /d LONG_NAME="Apache htdbm command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # Begin Special Build Tool TargetPath=.\Debug\htdbm.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ENDIF # Begin Target # Name "htdbm - Win32 Release" # Name "htdbm - Win32 Debug" # Begin Source File SOURCE=.\htdbm.c # End Source File # Begin Source File SOURCE=.\passwd_common.c # End Source File # Begin Source File SOURCE=..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/support/dbmmanage.in0000644000000000000500000002133111273225662015221 0ustar rootsrc#!@perlbin@ # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. #for more functionality see the HTTPD::UserAdmin module: # http://www.perl.com/CPAN/modules/by-module/HTTPD/HTTPD-Tools-x.xx.tar.gz # # usage: dbmmanage package dbmmanage; # -ldb -lndbm -lgdbm -lsdbm BEGIN { @AnyDBM_File::ISA = qw(DB_File NDBM_File GDBM_File SDBM_File) } use strict; use Fcntl; use AnyDBM_File (); sub usage { my $cmds = join "|", sort keys %dbmc::; die <$command(); untie %DB; my $x; sub genseed { my $psf; if ($not_unix) { srand (time ^ $$ or time ^ ($$ + ($$ << 15))); } else { for (qw(-xlwwa -le)) { `ps $_ 2>/dev/null`; $psf = $_, last unless $?; } srand (time ^ $$ ^ unpack("%L*", `ps $psf | gzip -f`)); } @range = (qw(. /), '0'..'9','a'..'z','A'..'Z'); $x = int scalar @range; } sub randchar { join '', map $range[rand $x], 1..shift||1; } sub saltpw_crypt { genseed() unless @range; return $newstyle_salt ? join '', "_", randchar, "a..", randchar(4) : randchar(2); } sub cryptpw_crypt { my ($pw, $salt) = @_; $salt = saltpw_crypt unless $salt; crypt $pw, $salt; } sub saltpw_md5 { genseed() unless @range; randchar(8); } sub cryptpw_md5 { my($pw, $salt) = @_; $salt = saltpw_md5 unless $salt; Crypt::PasswdMD5::apache_md5_crypt($pw, $salt); } sub cryptpw_sha1 { my($pw, $salt) = @_; '{SHA}' . Digest::SHA1::sha1_base64($pw) . "="; } sub cryptpw { if ($crypt_method eq "md5") { return cryptpw_md5(@_); } elsif ($crypt_method eq "sha1") { return cryptpw_sha1(@_); } elsif ($crypt_method eq "crypt") { return cryptpw_crypt(@_); } @_[0]; # otherwise return plaintext } sub getpass { my $prompt = shift || "Enter password:"; unless($not_unix) { open STDIN, "/dev/tty" or warn "couldn't open /dev/tty $!\n"; system "stty -echo;"; } my($c,$pwd); print STDERR $prompt; while (($c = getc(STDIN)) ne '' and $c ne "\n" and $c ne "\r") { $pwd .= $c; } system "stty echo" unless $not_unix; print STDERR "\n"; die "Can't use empty password!\n" unless length $pwd; return $pwd; } sub dbmc::update { die "Sorry, user `$key' doesn't exist!\n" unless $DB{$key}; $crypted_pwd = (split /:/, $DB{$key}, 3)[0] if $crypted_pwd eq '.'; $groups = (split /:/, $DB{$key}, 3)[1] if !$groups || $groups eq '.'; $comment = (split /:/, $DB{$key}, 3)[2] if !$comment || $comment eq '.'; if (!$crypted_pwd || $crypted_pwd eq '-') { dbmc->adduser; } else { dbmc->add; } } sub dbmc::add { die "Can't use empty password!\n" unless $crypted_pwd; unless($is_update) { die "Sorry, user `$key' already exists!\n" if $DB{$key}; } $groups = '' if $groups eq '-'; $comment = '' if $comment eq '-'; $groups .= ":" . $comment if $comment; $crypted_pwd .= ":" . $groups if $groups; $DB{$key} = $crypted_pwd; my $action = $is_update ? "updated" : "added"; print "User $key $action with password encrypted to $DB{$key} using $crypt_method\n"; } sub dbmc::adduser { my $value = getpass "New password:"; die "They don't match, sorry.\n" unless getpass("Re-type new password:") eq $value; $crypted_pwd = cryptpw $value; dbmc->add; } sub dbmc::delete { die "Sorry, user `$key' doesn't exist!\n" unless $DB{$key}; delete $DB{$key}, print "`$key' deleted\n"; } sub dbmc::view { print $key ? "$key:$DB{$key}\n" : map { "$_:$DB{$_}\n" if $DB{$_} } keys %DB; } sub dbmc::check { die "Sorry, user `$key' doesn't exist!\n" unless $DB{$key}; my $chkpass = (split /:/, $DB{$key}, 3)[0]; my $testpass = getpass(); if (substr($chkpass, 0, 6) eq '$apr1$') { need_md5_crypt; $crypt_method = "md5"; } elsif (substr($chkpass, 0, 5) eq '{SHA}') { need_sha1_crypt; $crypt_method = "sha1"; } elsif (length($chkpass) == 13 && $chkpass ne $testpass) { $crypt_method = "crypt"; } else { $crypt_method = "plain"; } print $crypt_method . (cryptpw($testpass, $chkpass) eq $chkpass ? " password ok\n" : " password mismatch\n"); } sub dbmc::import { while(defined($_ = ) and chomp) { ($key,$crypted_pwd,$groups,$comment) = split /:/, $_, 4; dbmc->add; } } httpd-2.4.41/support/NWGNUmakefile0000644000000000000500000000171111540562746015301 0ustar rootsrc# # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/ab.nlm \ $(OBJDIR)/htpasswd.nlm \ $(OBJDIR)/htdigest.nlm \ $(OBJDIR)/htdbm.nlm \ $(OBJDIR)/htcacheclean.nlm \ $(OBJDIR)/httxt2dbm.nlm \ $(OBJDIR)/logres.nlm \ $(OBJDIR)/rotlogs.nlm \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/bin/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/support/suexec.c0000644000000000000500000004572013472755016014432 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * suexec.c -- "Wrapper" support program for suEXEC behaviour for Apache * *********************************************************************** * * NOTE! : DO NOT edit this code!!! Unless you know what you are doing, * editing this code might open up your system in unexpected * ways to would-be crackers. Every precaution has been taken * to make this code as safe as possible; alter it at your own * risk. * *********************************************************************** * * */ #include "apr.h" #include "ap_config.h" #include "suexec.h" #include #include #include #include #include #if APR_HAVE_UNISTD_H #include #endif #include #include #include #if APR_HAVE_FCNTL_H #include #endif #ifdef HAVE_PWD_H #include #endif #ifdef HAVE_GRP_H #include #endif #ifdef AP_LOG_SYSLOG #include #endif #if defined(PATH_MAX) #define AP_MAXPATH PATH_MAX #elif defined(MAXPATHLEN) #define AP_MAXPATH MAXPATHLEN #else #define AP_MAXPATH 8192 #endif #define AP_ENVBUF 256 extern char **environ; #ifdef AP_LOG_SYSLOG /* Syslog support. */ #if !defined(AP_LOG_FACILITY) && defined(LOG_AUTHPRIV) #define AP_LOG_FACILITY LOG_AUTHPRIV #elif !defined(AP_LOG_FACILITY) #define AP_LOG_FACILITY LOG_AUTH #endif static int log_open; #else /* Non-syslog support. */ static FILE *log = NULL; #endif static const char *const safe_env_lst[] = { /* variable name starts with */ "HTTP_", "SSL_", /* variable name is */ "AUTH_TYPE=", "CONTENT_LENGTH=", "CONTENT_TYPE=", "CONTEXT_DOCUMENT_ROOT=", "CONTEXT_PREFIX=", "DATE_GMT=", "DATE_LOCAL=", "DOCUMENT_ARGS=", "DOCUMENT_NAME=", "DOCUMENT_PATH_INFO=", "DOCUMENT_ROOT=", "DOCUMENT_URI=", "GATEWAY_INTERFACE=", "HTTPS=", "LAST_MODIFIED=", "PATH_INFO=", "PATH_TRANSLATED=", "QUERY_STRING=", "QUERY_STRING_UNESCAPED=", "REMOTE_ADDR=", "REMOTE_HOST=", "REMOTE_IDENT=", "REMOTE_PORT=", "REMOTE_USER=", "REDIRECT_ERROR_NOTES=", "REDIRECT_HANDLER=", "REDIRECT_QUERY_STRING=", "REDIRECT_REMOTE_USER=", "REDIRECT_SCRIPT_FILENAME=", "REDIRECT_STATUS=", "REDIRECT_URL=", "REQUEST_METHOD=", "REQUEST_URI=", "REQUEST_SCHEME=", "SCRIPT_FILENAME=", "SCRIPT_NAME=", "SCRIPT_URI=", "SCRIPT_URL=", "SERVER_ADMIN=", "SERVER_NAME=", "SERVER_ADDR=", "SERVER_PORT=", "SERVER_PROTOCOL=", "SERVER_SIGNATURE=", "SERVER_SOFTWARE=", "UNIQUE_ID=", "USER_NAME=", "TZ=", NULL }; static void log_err(const char *fmt,...) __attribute__((format(printf,1,2))); static void log_no_err(const char *fmt,...) __attribute__((format(printf,1,2))); static void err_output(int is_error, const char *fmt, va_list ap) __attribute__((format(printf,2,0))); static void err_output(int is_error, const char *fmt, va_list ap) { #if defined(AP_LOG_SYSLOG) if (!log_open) { openlog("suexec", LOG_PID, AP_LOG_FACILITY); log_open = 1; } vsyslog(is_error ? LOG_ERR : LOG_INFO, fmt, ap); #elif defined(AP_LOG_EXEC) time_t timevar; struct tm *lt; if (!log) { #if defined(_LARGEFILE64_SOURCE) && HAVE_FOPEN64 if ((log = fopen64(AP_LOG_EXEC, "a")) == NULL) { #else if ((log = fopen(AP_LOG_EXEC, "a")) == NULL) { #endif fprintf(stderr, "suexec failure: could not open log file\n"); perror("fopen"); exit(1); } } if (is_error) { fprintf(stderr, "suexec policy violation: see suexec log for more " "details\n"); } time(&timevar); lt = localtime(&timevar); fprintf(log, "[%d-%.2d-%.2d %.2d:%.2d:%.2d]: ", lt->tm_year + 1900, lt->tm_mon + 1, lt->tm_mday, lt->tm_hour, lt->tm_min, lt->tm_sec); vfprintf(log, fmt, ap); fflush(log); #endif /* AP_LOG_EXEC */ return; } static void log_err(const char *fmt,...) { #ifdef AP_LOG_EXEC va_list ap; va_start(ap, fmt); err_output(1, fmt, ap); /* 1 == is_error */ va_end(ap); #endif /* AP_LOG_EXEC */ return; } static void log_no_err(const char *fmt,...) { #ifdef AP_LOG_EXEC va_list ap; va_start(ap, fmt); err_output(0, fmt, ap); /* 0 == !is_error */ va_end(ap); #endif /* AP_LOG_EXEC */ return; } static void clean_env(void) { char **cleanenv; char **ep; int cidx = 0; int idx; /* While cleaning the environment, the environment should be clean. * (e.g. malloc() may get the name of a file for writing debugging info. * Bad news if MALLOC_DEBUG_FILE is set to /etc/passwd. Sprintf() may be * susceptible to bad locale settings....) * (from PR 2790) */ char **envp = environ; char *empty_ptr = NULL; environ = &empty_ptr; /* VERY safe environment */ if ((cleanenv = (char **) calloc(AP_ENVBUF, sizeof(char *))) == NULL) { log_err("failed to malloc memory for environment\n"); exit(123); } cleanenv[cidx] = strdup("PATH=" AP_SAFE_PATH); if (cleanenv[cidx] == NULL) { log_err("failed to malloc memory for environment\n"); exit(124); } cidx++; for (ep = envp; *ep && cidx < AP_ENVBUF-1; ep++) { for (idx = 0; safe_env_lst[idx]; idx++) { if (!strncmp(*ep, safe_env_lst[idx], strlen(safe_env_lst[idx]))) { cleanenv[cidx] = *ep; cidx++; break; } } } cleanenv[cidx] = NULL; environ = cleanenv; } int main(int argc, char *argv[]) { int userdir = 0; /* ~userdir flag */ uid_t uid; /* user information */ gid_t gid; /* target group placeholder */ char *target_uname; /* target user name */ char *target_gname; /* target group name */ char *target_homedir; /* target home directory */ char *actual_uname; /* actual user name */ char *actual_gname; /* actual group name */ char *cmd; /* command to be executed */ char cwd[AP_MAXPATH]; /* current working directory */ char dwd[AP_MAXPATH]; /* docroot working directory */ struct passwd *pw; /* password entry holder */ struct group *gr; /* group entry holder */ struct stat dir_info; /* directory info holder */ struct stat prg_info; /* program info holder */ /* * Start with a "clean" environment */ clean_env(); /* * Check existence/validity of the UID of the user * running this program. Error out if invalid. */ uid = getuid(); if ((pw = getpwuid(uid)) == NULL) { log_err("crit: invalid uid: (%lu)\n", (unsigned long)uid); exit(102); } /* * See if this is a 'how were you compiled' request, and * comply if so. */ if ((argc > 1) && (! strcmp(argv[1], "-V")) && ((uid == 0) #ifdef _OSD_POSIX /* User name comparisons are case insensitive on BS2000/OSD */ || (! strcasecmp(AP_HTTPD_USER, pw->pw_name))) #else /* _OSD_POSIX */ || (! strcmp(AP_HTTPD_USER, pw->pw_name))) #endif /* _OSD_POSIX */ ) { #ifdef AP_DOC_ROOT fprintf(stderr, " -D AP_DOC_ROOT=\"%s\"\n", AP_DOC_ROOT); #endif #ifdef AP_GID_MIN fprintf(stderr, " -D AP_GID_MIN=%d\n", AP_GID_MIN); #endif #ifdef AP_HTTPD_USER fprintf(stderr, " -D AP_HTTPD_USER=\"%s\"\n", AP_HTTPD_USER); #endif #if defined(AP_LOG_SYSLOG) fprintf(stderr, " -D AP_LOG_SYSLOG\n"); #elif defined(AP_LOG_EXEC) fprintf(stderr, " -D AP_LOG_EXEC=\"%s\"\n", AP_LOG_EXEC); #endif #ifdef AP_SAFE_PATH fprintf(stderr, " -D AP_SAFE_PATH=\"%s\"\n", AP_SAFE_PATH); #endif #ifdef AP_SUEXEC_UMASK fprintf(stderr, " -D AP_SUEXEC_UMASK=%03o\n", AP_SUEXEC_UMASK); #endif #ifdef AP_UID_MIN fprintf(stderr, " -D AP_UID_MIN=%d\n", AP_UID_MIN); #endif #ifdef AP_USERDIR_SUFFIX fprintf(stderr, " -D AP_USERDIR_SUFFIX=\"%s\"\n", AP_USERDIR_SUFFIX); #endif exit(0); } /* * If there are a proper number of arguments, set * all of them to variables. Otherwise, error out. */ if (argc < 4) { log_err("too few arguments\n"); exit(101); } target_uname = argv[1]; target_gname = argv[2]; cmd = argv[3]; /* * Check to see if the user running this program * is the user allowed to do so as defined in * suexec.h. If not the allowed user, error out. */ #ifdef _OSD_POSIX /* User name comparisons are case insensitive on BS2000/OSD */ if (strcasecmp(AP_HTTPD_USER, pw->pw_name)) { log_err("user mismatch (%s instead of %s)\n", pw->pw_name, AP_HTTPD_USER); exit(103); } #else /*_OSD_POSIX*/ if (strcmp(AP_HTTPD_USER, pw->pw_name)) { log_err("user mismatch (%s instead of %s)\n", pw->pw_name, AP_HTTPD_USER); exit(103); } #endif /*_OSD_POSIX*/ /* * Check for a leading '/' (absolute path) in the command to be executed, * or attempts to back up out of the current directory, * to protect against attacks. If any are * found, error out. Naughty naughty crackers. */ if ((cmd[0] == '/') || (!strncmp(cmd, "../", 3)) || (strstr(cmd, "/../") != NULL)) { log_err("invalid command (%s)\n", cmd); exit(104); } /* * Check to see if this is a ~userdir request. If * so, set the flag, and remove the '~' from the * target username. */ if (!strncmp("~", target_uname, 1)) { target_uname++; userdir = 1; } /* * Error out if the target username is invalid. */ if (strspn(target_uname, "1234567890") != strlen(target_uname)) { if ((pw = getpwnam(target_uname)) == NULL) { log_err("invalid target user name: (%s)\n", target_uname); exit(105); } } else { if ((pw = getpwuid(atoi(target_uname))) == NULL) { log_err("invalid target user id: (%s)\n", target_uname); exit(121); } } /* * Error out if the target group name is invalid. */ if (strspn(target_gname, "1234567890") != strlen(target_gname)) { if ((gr = getgrnam(target_gname)) == NULL) { log_err("invalid target group name: (%s)\n", target_gname); exit(106); } } else { if ((gr = getgrgid(atoi(target_gname))) == NULL) { log_err("invalid target group id: (%s)\n", target_gname); exit(106); } } gid = gr->gr_gid; if ((actual_gname = strdup(gr->gr_name)) == NULL) { log_err("failed to alloc memory\n"); exit(125); } #ifdef _OSD_POSIX /* * Initialize BS2000 user environment */ { pid_t pid; int status; switch (pid = ufork(target_uname)) { case -1: /* Error */ log_err("failed to setup bs2000 environment for user %s: %s\n", target_uname, strerror(errno)); exit(150); case 0: /* Child */ break; default: /* Father */ while (pid != waitpid(pid, &status, 0)) ; /* @@@ FIXME: should we deal with STOP signals as well? */ if (WIFSIGNALED(status)) { kill (getpid(), WTERMSIG(status)); } exit(WEXITSTATUS(status)); } } #endif /*_OSD_POSIX*/ /* * Save these for later since initgroups will hose the struct */ uid = pw->pw_uid; actual_uname = strdup(pw->pw_name); target_homedir = strdup(pw->pw_dir); if (actual_uname == NULL || target_homedir == NULL) { log_err("failed to alloc memory\n"); exit(126); } /* * Log the transaction here to be sure we have an open log * before we setuid(). */ log_no_err("uid: (%s/%s) gid: (%s/%s) cmd: %s\n", target_uname, actual_uname, target_gname, actual_gname, cmd); /* * Error out if attempt is made to execute as root or as * a UID less than AP_UID_MIN. Tsk tsk. */ if ((uid == 0) || (uid < AP_UID_MIN)) { log_err("cannot run as forbidden uid (%lu/%s)\n", (unsigned long)uid, cmd); exit(107); } /* * Error out if attempt is made to execute as root group * or as a GID less than AP_GID_MIN. Tsk tsk. */ if ((gid == 0) || (gid < AP_GID_MIN)) { log_err("cannot run as forbidden gid (%lu/%s)\n", (unsigned long)gid, cmd); exit(108); } /* * Change UID/GID here so that the following tests work over NFS. * * Initialize the group access list for the target user, * and setgid() to the target group. If unsuccessful, error out. */ if (((setgid(gid)) != 0) || (initgroups(actual_uname, gid) != 0)) { log_err("failed to setgid (%lu: %s)\n", (unsigned long)gid, cmd); exit(109); } /* * setuid() to the target user. Error out on fail. */ if ((setuid(uid)) != 0) { log_err("failed to setuid (%lu: %s)\n", (unsigned long)uid, cmd); exit(110); } /* * Get the current working directory, as well as the proper * document root (dependant upon whether or not it is a * ~userdir request). Error out if we cannot get either one, * or if the current working directory is not in the docroot. * Use chdir()s and getcwd()s to avoid problems with symlinked * directories. Yuck. */ if (getcwd(cwd, AP_MAXPATH) == NULL) { log_err("cannot get current working directory\n"); exit(111); } if (userdir) { if (((chdir(target_homedir)) != 0) || ((chdir(AP_USERDIR_SUFFIX)) != 0) || ((getcwd(dwd, AP_MAXPATH)) == NULL) || ((chdir(cwd)) != 0)) { log_err("cannot get docroot information (%s)\n", target_homedir); exit(112); } } else { if (((chdir(AP_DOC_ROOT)) != 0) || ((getcwd(dwd, AP_MAXPATH)) == NULL) || ((chdir(cwd)) != 0)) { log_err("cannot get docroot information (%s)\n", AP_DOC_ROOT); exit(113); } } if ((strncmp(cwd, dwd, strlen(dwd))) != 0) { log_err("command not in docroot (%s/%s)\n", cwd, cmd); exit(114); } /* * Stat the cwd and verify it is a directory, or error out. */ if (((lstat(cwd, &dir_info)) != 0) || !(S_ISDIR(dir_info.st_mode))) { log_err("cannot stat directory: (%s)\n", cwd); exit(115); } /* * Error out if cwd is writable by others. */ if ((dir_info.st_mode & S_IWOTH) || (dir_info.st_mode & S_IWGRP)) { log_err("directory is writable by others: (%s)\n", cwd); exit(116); } /* * Error out if we cannot stat the program. */ if (((lstat(cmd, &prg_info)) != 0) || (S_ISLNK(prg_info.st_mode))) { log_err("cannot stat program: (%s)\n", cmd); exit(117); } /* * Error out if the program is writable by others. */ if ((prg_info.st_mode & S_IWOTH) || (prg_info.st_mode & S_IWGRP)) { log_err("file is writable by others: (%s/%s)\n", cwd, cmd); exit(118); } /* * Error out if the file is setuid or setgid. */ if ((prg_info.st_mode & S_ISUID) || (prg_info.st_mode & S_ISGID)) { log_err("file is either setuid or setgid: (%s/%s)\n", cwd, cmd); exit(119); } /* * Error out if the target name/group is different from * the name/group of the cwd or the program. */ if ((uid != dir_info.st_uid) || (gid != dir_info.st_gid) || (uid != prg_info.st_uid) || (gid != prg_info.st_gid)) { log_err("target uid/gid (%lu/%lu) mismatch " "with directory (%lu/%lu) or program (%lu/%lu)\n", (unsigned long)uid, (unsigned long)gid, (unsigned long)dir_info.st_uid, (unsigned long)dir_info.st_gid, (unsigned long)prg_info.st_uid, (unsigned long)prg_info.st_gid); exit(120); } /* * Error out if the program is not executable for the user. * Otherwise, she won't find any error in the logs except for * "[error] Premature end of script headers: ..." */ if (!(prg_info.st_mode & S_IXUSR)) { log_err("file has no execute permission: (%s/%s)\n", cwd, cmd); exit(121); } #ifdef AP_SUEXEC_UMASK /* * umask() uses inverse logic; bits are CLEAR for allowed access. */ if ((~AP_SUEXEC_UMASK) & 0022) { log_err("notice: AP_SUEXEC_UMASK of %03o allows " "write permission to group and/or other\n", AP_SUEXEC_UMASK); } umask(AP_SUEXEC_UMASK); #endif /* AP_SUEXEC_UMASK */ /* Be sure to close the log file so the CGI can't mess with it. */ #ifdef AP_LOG_SYSLOG if (log_open) { closelog(); log_open = 0; } #else if (log != NULL) { #if APR_HAVE_FCNTL_H /* * ask fcntl(2) to set the FD_CLOEXEC flag on the log file, * so it'll be automagically closed if the exec() call succeeds. */ fflush(log); setbuf(log, NULL); if ((fcntl(fileno(log), F_SETFD, FD_CLOEXEC) == -1)) { log_err("error: can't set close-on-exec flag"); exit(122); } #else /* * In this case, exec() errors won't be logged because we have already * dropped privileges and won't be able to reopen the log file. */ fclose(log); log = NULL; #endif } #endif /* * Execute the command, replacing our image with its own. */ #ifdef NEED_HASHBANG_EMUL /* We need the #! emulation when we want to execute scripts */ { extern char **environ; ap_execve(cmd, &argv[3], environ); } #else /*NEED_HASHBANG_EMUL*/ execv(cmd, &argv[3]); #endif /*NEED_HASHBANG_EMUL*/ /* * (I can't help myself...sorry.) * * Uh oh. Still here. Where's the kaboom? There was supposed to be an * EARTH-shattering kaboom! * * Oh well, log the failure and error out. */ log_err("(%d)%s: exec failed (%s)\n", errno, strerror(errno), cmd); exit(255); } httpd-2.4.41/support/htpasswd.dsp0000644000000000000500000001043012061606345015316 0ustar rootsrc# Microsoft Developer Studio Project File - Name="htpasswd" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Console Application" 0x0103 CFG=htpasswd - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "htpasswd.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "htpasswd.mak" CFG="htpasswd - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "htpasswd - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "htpasswd - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe RSC=rc.exe !IF "$(CFG)" == "htpasswd - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Release/htpasswd_src" /FD /c # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/htpasswd.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="htpasswd.exe" /d LONG_NAME="Apache htpasswd command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib shell32.lib rpcrt4.lib /nologo /subsystem:console # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib shell32.lib rpcrt4.lib /nologo /subsystem:console /debug /opt:ref # Begin Special Build Tool TargetPath=.\Release\htpasswd.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ELSEIF "$(CFG)" == "htpasswd - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Debug/htpasswd_src" /FD /c # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/htpasswd.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="htpasswd.exe" /d LONG_NAME="Apache htpasswd command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib shell32.lib rpcrt4.lib /nologo /subsystem:console /incremental:no /debug # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib shell32.lib rpcrt4.lib /nologo /subsystem:console /incremental:no /debug # Begin Special Build Tool TargetPath=.\Debug\htpasswd.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ENDIF # Begin Target # Name "htpasswd - Win32 Release" # Name "htpasswd - Win32 Debug" # Begin Source File SOURCE=.\htpasswd.c # End Source File # Begin Source File SOURCE=.\passwd_common.c # End Source File # Begin Source File SOURCE=..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/support/ab.c0000644000000000000500000026537513357341260013524 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* ** This program is based on ZeusBench V1.0 written by Adam Twiss ** which is Copyright (c) 1996 by Zeus Technology Ltd. http://www.zeustech.net/ ** ** This software is provided "as is" and any express or implied waranties, ** including but not limited to, the implied warranties of merchantability and ** fitness for a particular purpose are disclaimed. In no event shall ** Zeus Technology Ltd. be liable for any direct, indirect, incidental, special, ** exemplary, or consequential damaged (including, but not limited to, ** procurement of substitute good or services; loss of use, data, or profits; ** or business interruption) however caused and on theory of liability. Whether ** in contract, strict liability or tort (including negligence or otherwise) ** arising in any way out of the use of this software, even if advised of the ** possibility of such damage. ** */ /* ** HISTORY: ** - Originally written by Adam Twiss , March 1996 ** with input from Mike Belshe and ** Michael Campanella ** - Enhanced by Dean Gaudet , November 1997 ** - Cleaned up by Ralf S. Engelschall , March 1998 ** - POST and verbosity by Kurt Sussman , August 1998 ** - HTML table output added by David N. Welton , January 1999 ** - Added Cookie, Arbitrary header and auth support. , April 1999 ** Version 1.3d ** - Increased version number - as some of the socket/error handling has ** fundamentally changed - and will give fundamentally different results ** in situations where a server is dropping requests. Therefore you can ** no longer compare results of AB as easily. Hence the inc of the version. ** They should be closer to the truth though. Sander & , End 2000. ** - Fixed proxy functionality, added median/mean statistics, added gnuplot ** output option, added _experimental/rudimentary_ SSL support. Added ** confidence guestimators and warnings. Sander & , End 2000 ** - Fixed serious int overflow issues which would cause realistic (longer ** than a few minutes) run's to have wrong (but believable) results. Added ** trapping of connection errors which influenced measurements. ** Contributed by Sander Temme, Early 2001 ** Version 1.3e ** - Changed timeout behavour during write to work whilst the sockets ** are filling up and apr_write() does writes a few - but not all. ** This will potentially change results. , April 2001 ** Version 2.0.36-dev ** Improvements to concurrent processing: ** - Enabled non-blocking connect()s. ** - Prevent blocking calls to apr_socket_recv() (thereby allowing AB to ** manage its entire set of socket descriptors). ** - Any error returned from apr_socket_recv() that is not EAGAIN or EOF ** is now treated as fatal. ** Contributed by Aaron Bannert, April 24, 2002 ** ** Version 2.0.36-2 ** Internalized the version string - this string is part ** of the Agent: header and the result output. ** ** Version 2.0.37-dev ** Adopted SSL code by Madhu Mathihalli ** [PATCH] ab with SSL support Posted Wed, 15 Aug 2001 20:55:06 GMT ** Introduces four 'if (int == value)' tests per non-ssl request. ** ** Version 2.0.40-dev ** Switched to the new abstract pollset API, allowing ab to ** take advantage of future apr_pollset_t scalability improvements. ** Contributed by Brian Pane, August 31, 2002 ** ** Version 2.3 ** SIGINT now triggers output_results(). ** Contributed by colm, March 30, 2006 **/ /* Note: this version string should start with \d+[\d\.]* and be a valid * string for an HTTP Agent: header when prefixed with 'ApacheBench/'. * It should reflect the version of AB - and not that of the apache server * it happens to accompany. And it should be updated or changed whenever * the results are no longer fundamentally comparable to the results of * a previous version of ab. Either due to a change in the logic of * ab - or to due to a change in the distribution it is compiled with * (such as an APR change in for example blocking). */ #define AP_AB_BASEREVISION "2.3" /* * BUGS: * * - uses strcpy/etc. * - has various other poor buffer attacks related to the lazy parsing of * response headers from the server * - doesn't implement much of HTTP/1.x, only accepts certain forms of * responses * - (performance problem) heavy use of strstr shows up top in profile * only an issue for loopback usage */ /* -------------------------------------------------------------------- */ #if 'A' != 0x41 /* Hmmm... This source code isn't being compiled in ASCII. * In order for data that flows over the network to make * sense, we need to translate to/from ASCII. */ #define NOT_ASCII #endif /* affects include files on Solaris */ #define BSD_COMP #include "apr.h" #include "apr_signal.h" #include "apr_strings.h" #include "apr_network_io.h" #include "apr_file_io.h" #include "apr_time.h" #include "apr_getopt.h" #include "apr_general.h" #include "apr_lib.h" #include "apr_portable.h" #include "ap_release.h" #include "apr_poll.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "apr_base64.h" #ifdef NOT_ASCII #include "apr_xlate.h" #endif #if APR_HAVE_STDIO_H #include #endif #if APR_HAVE_STDLIB_H #include #endif #if APR_HAVE_UNISTD_H #include /* for getpid() */ #endif #if !defined(WIN32) && !defined(NETWARE) #include "ap_config_auto.h" #endif #if defined(HAVE_OPENSSL) #include #include #include #include #include #include #include #define USE_SSL #define SK_NUM(x) sk_X509_num(x) #define SK_VALUE(x,y) sk_X509_value(x,y) typedef STACK_OF(X509) X509_STACK_TYPE; #if defined(_MSC_VER) && !defined(LIBRESSL_VERSION_NUMBER) /* The following logic ensures we correctly glue FILE* within one CRT used * by the OpenSSL library build to another CRT used by the ab.exe build. * This became especially problematic with Visual Studio 2015. */ #include #endif #endif #if defined(USE_SSL) #if (OPENSSL_VERSION_NUMBER >= 0x00909000) #define AB_SSL_METHOD_CONST const #else #define AB_SSL_METHOD_CONST #endif #if (OPENSSL_VERSION_NUMBER >= 0x0090707f) #define AB_SSL_CIPHER_CONST const #else #define AB_SSL_CIPHER_CONST #endif #ifdef SSL_OP_NO_TLSv1_2 #define HAVE_TLSV1_X #endif #if !defined(OPENSSL_NO_TLSEXT) && defined(SSL_set_tlsext_host_name) #define HAVE_TLSEXT #endif #if defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 0x2060000f #define SSL_CTRL_SET_MIN_PROTO_VERSION 123 #define SSL_CTRL_SET_MAX_PROTO_VERSION 124 #define SSL_CTX_set_min_proto_version(ctx, version) \ SSL_CTX_ctrl(ctx, SSL_CTRL_SET_MIN_PROTO_VERSION, version, NULL) #define SSL_CTX_set_max_proto_version(ctx, version) \ SSL_CTX_ctrl(ctx, SSL_CTRL_SET_MAX_PROTO_VERSION, version, NULL) #endif #endif #include #if APR_HAVE_CTYPE_H #include #endif #if APR_HAVE_LIMITS_H #include #endif /* ------------------- DEFINITIONS -------------------------- */ #ifndef LLONG_MAX #define AB_MAX APR_INT64_C(0x7fffffffffffffff) #else #define AB_MAX LLONG_MAX #endif /* maximum number of requests on a time limited test */ #define MAX_REQUESTS (INT_MAX > 50000 ? 50000 : INT_MAX) /* connection state * don't add enums or rearrange or otherwise change values without * visiting set_conn_state() */ typedef enum { STATE_UNCONNECTED = 0, STATE_CONNECTING, /* TCP connect initiated, but we don't * know if it worked yet */ STATE_CONNECTED, /* we know TCP connect completed */ STATE_READ } connect_state_e; #define CBUFFSIZE (8192) struct connection { apr_pool_t *ctx; apr_socket_t *aprsock; apr_pollfd_t pollfd; int state; apr_size_t read; /* amount of bytes read */ apr_size_t bread; /* amount of body read */ apr_size_t rwrite, rwrote; /* keep pointers in what we write - across * EAGAINs */ apr_size_t length; /* Content-Length value used for keep-alive */ char cbuff[CBUFFSIZE]; /* a buffer to store server response header */ int cbx; /* offset in cbuffer */ int keepalive; /* non-zero if a keep-alive request */ int gotheader; /* non-zero if we have the entire header in * cbuff */ apr_time_t start, /* Start of connection */ connect, /* Connected, start writing */ endwrite, /* Request written */ beginread, /* First byte of input */ done; /* Connection closed */ int socknum; #ifdef USE_SSL SSL *ssl; #endif }; struct data { apr_time_t starttime; /* start time of connection */ apr_interval_time_t waittime; /* between request and reading response */ apr_interval_time_t ctime; /* time to connect */ apr_interval_time_t time; /* time for connection */ }; #define ap_min(a,b) (((a)<(b))?(a):(b)) #define ap_max(a,b) (((a)>(b))?(a):(b)) #define ap_round_ms(a) ((apr_time_t)((a) + 500)/1000) #define ap_double_ms(a) ((double)(a)/1000.0) #define MAX_CONCURRENCY 20000 /* --------------------- GLOBALS ---------------------------- */ int verbosity = 0; /* no verbosity by default */ int recverrok = 0; /* ok to proceed after socket receive errors */ enum {NO_METH = 0, GET, HEAD, PUT, POST, CUSTOM_METHOD} method = NO_METH; const char *method_str[] = {"bug", "GET", "HEAD", "PUT", "POST", ""}; int send_body = 0; /* non-zero if sending body with request */ int requests = 1; /* Number of requests to make */ int heartbeatres = 100; /* How often do we say we're alive */ int concurrency = 1; /* Number of multiple requests to make */ int percentile = 1; /* Show percentile served */ int nolength = 0; /* Accept variable document length */ int confidence = 1; /* Show confidence estimator and warnings */ int tlimit = 0; /* time limit in secs */ int keepalive = 0; /* try and do keepalive connections */ int windowsize = 0; /* we use the OS default window size */ char servername[1024]; /* name that server reports */ char *hostname; /* host name from URL */ const char *host_field; /* value of "Host:" header field */ const char *path; /* path name */ char *postdata; /* *buffer containing data from postfile */ apr_size_t postlen = 0; /* length of data to be POSTed */ char *content_type = NULL; /* content type to put in POST header */ const char *cookie, /* optional cookie line */ *auth, /* optional (basic/uuencoded) auhentication */ *hdrs; /* optional arbitrary headers */ apr_port_t port; /* port number */ char *proxyhost = NULL; /* proxy host name */ int proxyport = 0; /* proxy port */ const char *connecthost; const char *myhost; apr_port_t connectport; const char *gnuplot; /* GNUplot file */ const char *csvperc; /* CSV Percentile file */ const char *fullurl; const char *colonhost; int isproxy = 0; apr_interval_time_t aprtimeout = apr_time_from_sec(30); /* timeout value */ /* overrides for ab-generated common headers */ const char *opt_host; /* which optional "Host:" header specified, if any */ int opt_useragent = 0; /* was an optional "User-Agent:" header specified? */ int opt_accept = 0; /* was an optional "Accept:" header specified? */ /* * XXX - this is now a per read/write transact type of value */ int use_html = 0; /* use html in the report */ const char *tablestring; const char *trstring; const char *tdstring; apr_size_t doclen = 0; /* the length the document should be */ apr_int64_t totalread = 0; /* total number of bytes read */ apr_int64_t totalbread = 0; /* totoal amount of entity body read */ apr_int64_t totalposted = 0; /* total number of bytes posted, inc. headers */ int started = 0; /* number of requests started, so no excess */ int done = 0; /* number of requests we have done */ int doneka = 0; /* number of keep alive connections done */ int good = 0, bad = 0; /* number of good and bad requests */ int epipe = 0; /* number of broken pipe writes */ int err_length = 0; /* requests failed due to response length */ int err_conn = 0; /* requests failed due to connection drop */ int err_recv = 0; /* requests failed due to broken read */ int err_except = 0; /* requests failed due to exception */ int err_response = 0; /* requests with invalid or non-200 response */ #ifdef USE_SSL int is_ssl; SSL_CTX *ssl_ctx; char *ssl_cipher = NULL; char *ssl_info = NULL; char *ssl_cert = NULL; #if OPENSSL_VERSION_NUMBER >= 0x10002000L char *ssl_tmp_key = NULL; #endif BIO *bio_out,*bio_err; #ifdef HAVE_TLSEXT int tls_use_sni = 1; /* used by default, -I disables it */ const char *tls_sni = NULL; /* 'opt_host' if any, 'hostname' otherwise */ #endif #endif apr_time_t start, lasttime, stoptime; /* global request (and its length) */ char _request[8192]; char *request = _request; apr_size_t reqlen; int requests_initialized = 0; /* one global throw-away buffer to read stuff into */ char buffer[8192]; /* interesting percentiles */ int percs[] = {50, 66, 75, 80, 90, 95, 98, 99, 100}; struct connection *con; /* connection array */ struct data *stats; /* data for each request */ apr_pool_t *cntxt; apr_pollset_t *readbits; apr_sockaddr_t *mysa; apr_sockaddr_t *destsa; #ifdef NOT_ASCII apr_xlate_t *from_ascii, *to_ascii; #endif static void write_request(struct connection * c); static void close_connection(struct connection * c); /* --------------------------------------------------------- */ /* simple little function to write an error string and exit */ static void err(const char *s) { fprintf(stderr, "%s\n", s); if (done) printf("Total of %d requests completed\n" , done); exit(1); } /* simple little function to write an APR error string and exit */ static void apr_err(const char *s, apr_status_t rv) { char buf[120]; fprintf(stderr, "%s: %s (%d)\n", s, apr_strerror(rv, buf, sizeof buf), rv); if (done) printf("Total of %d requests completed\n" , done); exit(rv); } static void *xmalloc(size_t size) { void *ret = malloc(size); if (ret == NULL) { fprintf(stderr, "Could not allocate memory (%" APR_SIZE_T_FMT" bytes)\n", size); exit(1); } return ret; } static void *xcalloc(size_t num, size_t size) { void *ret = calloc(num, size); if (ret == NULL) { fprintf(stderr, "Could not allocate memory (%" APR_SIZE_T_FMT" bytes)\n", size*num); exit(1); } return ret; } static char *xstrdup(const char *s) { char *ret = strdup(s); if (ret == NULL) { fprintf(stderr, "Could not allocate memory (%" APR_SIZE_T_FMT " bytes)\n", strlen(s)); exit(1); } return ret; } /* * Similar to standard strstr() but we ignore case in this version. * Copied from ap_strcasestr(). */ static char *xstrcasestr(const char *s1, const char *s2) { char *p1, *p2; if (*s2 == '\0') { /* an empty s2 */ return((char *)s1); } while(1) { for ( ; (*s1 != '\0') && (apr_tolower(*s1) != apr_tolower(*s2)); s1++); if (*s1 == '\0') { return(NULL); } /* found first character of s2, see if the rest matches */ p1 = (char *)s1; p2 = (char *)s2; for (++p1, ++p2; apr_tolower(*p1) == apr_tolower(*p2); ++p1, ++p2) { if (*p1 == '\0') { /* both strings ended together */ return((char *)s1); } } if (*p2 == '\0') { /* second string ended, a match */ break; } /* didn't find a match here, try starting at next character in s1 */ s1++; } return((char *)s1); } /* pool abort function */ static int abort_on_oom(int retcode) { fprintf(stderr, "Could not allocate memory\n"); exit(1); /* not reached */ return retcode; } static void set_polled_events(struct connection *c, apr_int16_t new_reqevents) { apr_status_t rv; if (c->pollfd.reqevents != new_reqevents) { if (c->pollfd.reqevents != 0) { rv = apr_pollset_remove(readbits, &c->pollfd); if (rv != APR_SUCCESS) { apr_err("apr_pollset_remove()", rv); } } if (new_reqevents != 0) { c->pollfd.reqevents = new_reqevents; rv = apr_pollset_add(readbits, &c->pollfd); if (rv != APR_SUCCESS) { apr_err("apr_pollset_add()", rv); } } } } static void set_conn_state(struct connection *c, connect_state_e new_state) { apr_int16_t events_by_state[] = { 0, /* for STATE_UNCONNECTED */ APR_POLLOUT, /* for STATE_CONNECTING */ APR_POLLIN, /* for STATE_CONNECTED; we don't poll in this state, * so prepare for polling in the following state -- * STATE_READ */ APR_POLLIN /* for STATE_READ */ }; c->state = new_state; set_polled_events(c, events_by_state[new_state]); } /* --------------------------------------------------------- */ /* write out request to a connection - assumes we can write * (small) request out in one go into our new socket buffer * */ #ifdef USE_SSL static long ssl_print_cb(BIO *bio,int cmd,const char *argp,int argi,long argl,long ret) { BIO *out; out=(BIO *)BIO_get_callback_arg(bio); if (out == NULL) return(ret); if (cmd == (BIO_CB_READ|BIO_CB_RETURN)) { BIO_printf(out,"read from %p [%p] (%d bytes => %ld (0x%lX))\n", bio, argp, argi, ret, ret); BIO_dump(out,(char *)argp,(int)ret); return(ret); } else if (cmd == (BIO_CB_WRITE|BIO_CB_RETURN)) { BIO_printf(out,"write to %p [%p] (%d bytes => %ld (0x%lX))\n", bio, argp, argi, ret, ret); BIO_dump(out,(char *)argp,(int)ret); } return ret; } static void ssl_state_cb(const SSL *s, int w, int r) { if (w & SSL_CB_ALERT) { BIO_printf(bio_err, "SSL/TLS Alert [%s] %s:%s\n", (w & SSL_CB_READ ? "read" : "write"), SSL_alert_type_string_long(r), SSL_alert_desc_string_long(r)); } else if (w & SSL_CB_LOOP) { BIO_printf(bio_err, "SSL/TLS State [%s] %s\n", (SSL_in_connect_init((SSL*)s) ? "connect" : "-"), SSL_state_string_long(s)); } else if (w & (SSL_CB_HANDSHAKE_START|SSL_CB_HANDSHAKE_DONE)) { BIO_printf(bio_err, "SSL/TLS Handshake [%s] %s\n", (w & SSL_CB_HANDSHAKE_START ? "Start" : "Done"), SSL_state_string_long(s)); } } #ifndef RAND_MAX #define RAND_MAX INT_MAX #endif static int ssl_rand_choosenum(int l, int h) { int i; char buf[50]; srand((unsigned int)time(NULL)); apr_snprintf(buf, sizeof(buf), "%.0f", (((double)(rand()%RAND_MAX)/RAND_MAX)*(h-l))); i = atoi(buf)+1; if (i < l) i = l; if (i > h) i = h; return i; } static void ssl_rand_seed(void) { int n, l; time_t t; pid_t pid; unsigned char stackdata[256]; /* * seed in the current time (usually just 4 bytes) */ t = time(NULL); l = sizeof(time_t); RAND_seed((unsigned char *)&t, l); /* * seed in the current process id (usually just 4 bytes) */ pid = getpid(); l = sizeof(pid_t); RAND_seed((unsigned char *)&pid, l); /* * seed in some current state of the run-time stack (128 bytes) */ n = ssl_rand_choosenum(0, sizeof(stackdata)-128-1); RAND_seed(stackdata+n, 128); } static int ssl_print_connection_info(BIO *bio, SSL *ssl) { AB_SSL_CIPHER_CONST SSL_CIPHER *c; int alg_bits,bits; BIO_printf(bio,"Transport Protocol :%s\n", SSL_get_version(ssl)); c = SSL_get_current_cipher(ssl); BIO_printf(bio,"Cipher Suite Protocol :%s\n", SSL_CIPHER_get_version(c)); BIO_printf(bio,"Cipher Suite Name :%s\n",SSL_CIPHER_get_name(c)); bits = SSL_CIPHER_get_bits(c,&alg_bits); BIO_printf(bio,"Cipher Suite Cipher Bits:%d (%d)\n",bits,alg_bits); return(1); } static void ssl_print_cert_info(BIO *bio, X509 *cert) { X509_NAME *dn; EVP_PKEY *pk; char buf[1024]; BIO_printf(bio, "Certificate version: %ld\n", X509_get_version(cert)+1); BIO_printf(bio,"Valid from: "); ASN1_UTCTIME_print(bio, X509_get_notBefore(cert)); BIO_printf(bio,"\n"); BIO_printf(bio,"Valid to : "); ASN1_UTCTIME_print(bio, X509_get_notAfter(cert)); BIO_printf(bio,"\n"); pk = X509_get_pubkey(cert); BIO_printf(bio,"Public key is %d bits\n", EVP_PKEY_bits(pk)); EVP_PKEY_free(pk); dn = X509_get_issuer_name(cert); X509_NAME_oneline(dn, buf, sizeof(buf)); BIO_printf(bio,"The issuer name is %s\n", buf); dn=X509_get_subject_name(cert); X509_NAME_oneline(dn, buf, sizeof(buf)); BIO_printf(bio,"The subject name is %s\n", buf); /* dump the extension list too */ BIO_printf(bio, "Extension Count: %d\n", X509_get_ext_count(cert)); } static void ssl_print_info(struct connection *c) { X509_STACK_TYPE *sk; X509 *cert; int count; BIO_printf(bio_err, "\n"); sk = SSL_get_peer_cert_chain(c->ssl); if ((count = SK_NUM(sk)) > 0) { int i; for (i=1; issl); if (cert == NULL) { BIO_printf(bio_out, "Anon DH\n"); } else { BIO_printf(bio_out, "Peer certificate\n"); ssl_print_cert_info(bio_out, cert); X509_free(cert); } ssl_print_connection_info(bio_err,c->ssl); SSL_SESSION_print(bio_err, SSL_get_session(c->ssl)); } static void ssl_proceed_handshake(struct connection *c) { int do_next = 1; while (do_next) { int ret, ecode; ret = SSL_do_handshake(c->ssl); ecode = SSL_get_error(c->ssl, ret); switch (ecode) { case SSL_ERROR_NONE: if (verbosity >= 2) ssl_print_info(c); if (ssl_info == NULL) { AB_SSL_CIPHER_CONST SSL_CIPHER *ci; X509 *cert; int sk_bits, pk_bits, swork; ci = SSL_get_current_cipher(c->ssl); sk_bits = SSL_CIPHER_get_bits(ci, &swork); cert = SSL_get_peer_certificate(c->ssl); if (cert) pk_bits = EVP_PKEY_bits(X509_get_pubkey(cert)); else pk_bits = 0; /* Anon DH */ ssl_info = xmalloc(128); apr_snprintf(ssl_info, 128, "%s,%s,%d,%d", SSL_get_version(c->ssl), SSL_CIPHER_get_name(ci), pk_bits, sk_bits); } #if OPENSSL_VERSION_NUMBER >= 0x10002000L if (ssl_tmp_key == NULL) { EVP_PKEY *key; if (SSL_get_server_tmp_key(c->ssl, &key)) { ssl_tmp_key = xmalloc(128); switch (EVP_PKEY_id(key)) { case EVP_PKEY_RSA: apr_snprintf(ssl_tmp_key, 128, "RSA %d bits", EVP_PKEY_bits(key)); break; case EVP_PKEY_DH: apr_snprintf(ssl_tmp_key, 128, "DH %d bits", EVP_PKEY_bits(key)); break; #ifndef OPENSSL_NO_EC case EVP_PKEY_EC: { const char *cname = NULL; EC_KEY *ec = EVP_PKEY_get1_EC_KEY(key); int nid = EC_GROUP_get_curve_name(EC_KEY_get0_group(ec)); EC_KEY_free(ec); cname = EC_curve_nid2nist(nid); if (!cname) cname = OBJ_nid2sn(nid); apr_snprintf(ssl_tmp_key, 128, "ECDH %s %d bits", cname, EVP_PKEY_bits(key)); break; } #endif default: apr_snprintf(ssl_tmp_key, 128, "%s %d bits", OBJ_nid2sn(EVP_PKEY_id(key)), EVP_PKEY_bits(key)); break; } EVP_PKEY_free(key); } } #endif write_request(c); do_next = 0; break; case SSL_ERROR_WANT_READ: set_polled_events(c, APR_POLLIN); do_next = 0; break; case SSL_ERROR_WANT_WRITE: set_polled_events(c, APR_POLLOUT); do_next = 0; break; case SSL_ERROR_WANT_CONNECT: case SSL_ERROR_SSL: case SSL_ERROR_SYSCALL: /* Unexpected result */ BIO_printf(bio_err, "SSL handshake failed (%d).\n", ecode); ERR_print_errors(bio_err); close_connection(c); do_next = 0; break; } } } #endif /* USE_SSL */ static void write_request(struct connection * c) { if (started >= requests) { return; } do { apr_time_t tnow; apr_size_t l = c->rwrite; apr_status_t e = APR_SUCCESS; /* prevent gcc warning */ tnow = lasttime = apr_time_now(); /* * First time round ? */ if (c->rwrite == 0) { apr_socket_timeout_set(c->aprsock, 0); c->connect = tnow; c->rwrote = 0; c->rwrite = reqlen; if (send_body) c->rwrite += postlen; l = c->rwrite; } else if (tnow > c->connect + aprtimeout) { printf("Send request timed out!\n"); close_connection(c); return; } #ifdef USE_SSL if (c->ssl) { e = SSL_write(c->ssl, request + c->rwrote, l); if (e <= 0) { switch (SSL_get_error(c->ssl, e)) { case SSL_ERROR_WANT_READ: set_polled_events(c, APR_POLLIN); break; case SSL_ERROR_WANT_WRITE: set_polled_events(c, APR_POLLOUT); break; default: BIO_printf(bio_err, "SSL write failed - closing connection\n"); ERR_print_errors(bio_err); close_connection (c); break; } return; } l = e; } else #endif { e = apr_socket_send(c->aprsock, request + c->rwrote, &l); if (e != APR_SUCCESS && !l) { if (!APR_STATUS_IS_EAGAIN(e)) { epipe++; printf("Send request failed!\n"); close_connection(c); } else { set_polled_events(c, APR_POLLOUT); } return; } } totalposted += l; c->rwrote += l; c->rwrite -= l; } while (c->rwrite); c->endwrite = lasttime = apr_time_now(); started++; set_conn_state(c, STATE_READ); } /* --------------------------------------------------------- */ /* calculate and output results */ static int compradre(struct data * a, struct data * b) { if ((a->ctime) < (b->ctime)) return -1; if ((a->ctime) > (b->ctime)) return +1; return 0; } static int comprando(struct data * a, struct data * b) { if ((a->time) < (b->time)) return -1; if ((a->time) > (b->time)) return +1; return 0; } static int compri(struct data * a, struct data * b) { apr_interval_time_t p = a->time - a->ctime; apr_interval_time_t q = b->time - b->ctime; if (p < q) return -1; if (p > q) return +1; return 0; } static int compwait(struct data * a, struct data * b) { if ((a->waittime) < (b->waittime)) return -1; if ((a->waittime) > (b->waittime)) return 1; return 0; } static void output_results(int sig) { double timetaken; if (sig) { lasttime = apr_time_now(); /* record final time if interrupted */ } timetaken = (double) (lasttime - start) / APR_USEC_PER_SEC; printf("\n\n"); printf("Server Software: %s\n", servername); printf("Server Hostname: %s\n", hostname); printf("Server Port: %hu\n", port); #ifdef USE_SSL if (is_ssl && ssl_info) { printf("SSL/TLS Protocol: %s\n", ssl_info); } #if OPENSSL_VERSION_NUMBER >= 0x10002000L if (is_ssl && ssl_tmp_key) { printf("Server Temp Key: %s\n", ssl_tmp_key); } #endif #ifdef HAVE_TLSEXT if (is_ssl && tls_sni) { printf("TLS Server Name: %s\n", tls_sni); } #endif #endif printf("\n"); printf("Document Path: %s\n", path); if (nolength) printf("Document Length: Variable\n"); else printf("Document Length: %" APR_SIZE_T_FMT " bytes\n", doclen); printf("\n"); printf("Concurrency Level: %d\n", concurrency); printf("Time taken for tests: %.3f seconds\n", timetaken); printf("Complete requests: %d\n", done); printf("Failed requests: %d\n", bad); if (bad) printf(" (Connect: %d, Receive: %d, Length: %d, Exceptions: %d)\n", err_conn, err_recv, err_length, err_except); if (epipe) printf("Write errors: %d\n", epipe); if (err_response) printf("Non-2xx responses: %d\n", err_response); if (keepalive) printf("Keep-Alive requests: %d\n", doneka); printf("Total transferred: %" APR_INT64_T_FMT " bytes\n", totalread); if (send_body) printf("Total body sent: %" APR_INT64_T_FMT "\n", totalposted); printf("HTML transferred: %" APR_INT64_T_FMT " bytes\n", totalbread); /* avoid divide by zero */ if (timetaken && done) { printf("Requests per second: %.2f [#/sec] (mean)\n", (double) done / timetaken); printf("Time per request: %.3f [ms] (mean)\n", (double) concurrency * timetaken * 1000 / done); printf("Time per request: %.3f [ms] (mean, across all concurrent requests)\n", (double) timetaken * 1000 / done); printf("Transfer rate: %.2f [Kbytes/sec] received\n", (double) totalread / 1024 / timetaken); if (send_body) { printf(" %.2f kb/s sent\n", (double) totalposted / 1024 / timetaken); printf(" %.2f kb/s total\n", (double) (totalread + totalposted) / 1024 / timetaken); } } if (done > 0) { /* work out connection times */ int i; apr_time_t totalcon = 0, total = 0, totald = 0, totalwait = 0; apr_time_t meancon, meantot, meand, meanwait; apr_interval_time_t mincon = AB_MAX, mintot = AB_MAX, mind = AB_MAX, minwait = AB_MAX; apr_interval_time_t maxcon = 0, maxtot = 0, maxd = 0, maxwait = 0; apr_interval_time_t mediancon = 0, mediantot = 0, mediand = 0, medianwait = 0; double sdtot = 0, sdcon = 0, sdd = 0, sdwait = 0; for (i = 0; i < done; i++) { struct data *s = &stats[i]; mincon = ap_min(mincon, s->ctime); mintot = ap_min(mintot, s->time); mind = ap_min(mind, s->time - s->ctime); minwait = ap_min(minwait, s->waittime); maxcon = ap_max(maxcon, s->ctime); maxtot = ap_max(maxtot, s->time); maxd = ap_max(maxd, s->time - s->ctime); maxwait = ap_max(maxwait, s->waittime); totalcon += s->ctime; total += s->time; totald += s->time - s->ctime; totalwait += s->waittime; } meancon = totalcon / done; meantot = total / done; meand = totald / done; meanwait = totalwait / done; /* calculating the sample variance: the sum of the squared deviations, divided by n-1 */ for (i = 0; i < done; i++) { struct data *s = &stats[i]; double a; a = ((double)s->time - meantot); sdtot += a * a; a = ((double)s->ctime - meancon); sdcon += a * a; a = ((double)s->time - (double)s->ctime - meand); sdd += a * a; a = ((double)s->waittime - meanwait); sdwait += a * a; } sdtot = (done > 1) ? sqrt(sdtot / (done - 1)) : 0; sdcon = (done > 1) ? sqrt(sdcon / (done - 1)) : 0; sdd = (done > 1) ? sqrt(sdd / (done - 1)) : 0; sdwait = (done > 1) ? sqrt(sdwait / (done - 1)) : 0; /* * XXX: what is better; this hideous cast of the compradre function; or * the four warnings during compile ? dirkx just does not know and * hates both/ */ qsort(stats, done, sizeof(struct data), (int (*) (const void *, const void *)) compradre); if ((done > 1) && (done % 2)) mediancon = (stats[done / 2].ctime + stats[done / 2 + 1].ctime) / 2; else mediancon = stats[done / 2].ctime; qsort(stats, done, sizeof(struct data), (int (*) (const void *, const void *)) compri); if ((done > 1) && (done % 2)) mediand = (stats[done / 2].time + stats[done / 2 + 1].time \ -stats[done / 2].ctime - stats[done / 2 + 1].ctime) / 2; else mediand = stats[done / 2].time - stats[done / 2].ctime; qsort(stats, done, sizeof(struct data), (int (*) (const void *, const void *)) compwait); if ((done > 1) && (done % 2)) medianwait = (stats[done / 2].waittime + stats[done / 2 + 1].waittime) / 2; else medianwait = stats[done / 2].waittime; qsort(stats, done, sizeof(struct data), (int (*) (const void *, const void *)) comprando); if ((done > 1) && (done % 2)) mediantot = (stats[done / 2].time + stats[done / 2 + 1].time) / 2; else mediantot = stats[done / 2].time; printf("\nConnection Times (ms)\n"); /* * Reduce stats from apr time to milliseconds */ mincon = ap_round_ms(mincon); mind = ap_round_ms(mind); minwait = ap_round_ms(minwait); mintot = ap_round_ms(mintot); meancon = ap_round_ms(meancon); meand = ap_round_ms(meand); meanwait = ap_round_ms(meanwait); meantot = ap_round_ms(meantot); mediancon = ap_round_ms(mediancon); mediand = ap_round_ms(mediand); medianwait = ap_round_ms(medianwait); mediantot = ap_round_ms(mediantot); maxcon = ap_round_ms(maxcon); maxd = ap_round_ms(maxd); maxwait = ap_round_ms(maxwait); maxtot = ap_round_ms(maxtot); sdcon = ap_double_ms(sdcon); sdd = ap_double_ms(sdd); sdwait = ap_double_ms(sdwait); sdtot = ap_double_ms(sdtot); if (confidence) { #define CONF_FMT_STRING "%5" APR_TIME_T_FMT " %4" APR_TIME_T_FMT " %5.1f %6" APR_TIME_T_FMT " %7" APR_TIME_T_FMT "\n" printf(" min mean[+/-sd] median max\n"); printf("Connect: " CONF_FMT_STRING, mincon, meancon, sdcon, mediancon, maxcon); printf("Processing: " CONF_FMT_STRING, mind, meand, sdd, mediand, maxd); printf("Waiting: " CONF_FMT_STRING, minwait, meanwait, sdwait, medianwait, maxwait); printf("Total: " CONF_FMT_STRING, mintot, meantot, sdtot, mediantot, maxtot); #undef CONF_FMT_STRING #define SANE(what,mean,median,sd) \ { \ double d = (double)mean - median; \ if (d < 0) d = -d; \ if (d > 2 * sd ) \ printf("ERROR: The median and mean for " what " are more than twice the standard\n" \ " deviation apart. These results are NOT reliable.\n"); \ else if (d > sd ) \ printf("WARNING: The median and mean for " what " are not within a normal deviation\n" \ " These results are probably not that reliable.\n"); \ } SANE("the initial connection time", meancon, mediancon, sdcon); SANE("the processing time", meand, mediand, sdd); SANE("the waiting time", meanwait, medianwait, sdwait); SANE("the total time", meantot, mediantot, sdtot); } else { printf(" min avg max\n"); #define CONF_FMT_STRING "%5" APR_TIME_T_FMT " %5" APR_TIME_T_FMT "%5" APR_TIME_T_FMT "\n" printf("Connect: " CONF_FMT_STRING, mincon, meancon, maxcon); printf("Processing: " CONF_FMT_STRING, mind, meand, maxd); printf("Waiting: " CONF_FMT_STRING, minwait, meanwait, maxwait); printf("Total: " CONF_FMT_STRING, mintot, meantot, maxtot); #undef CONF_FMT_STRING } /* Sorted on total connect times */ if (percentile && (done > 1)) { printf("\nPercentage of the requests served within a certain time (ms)\n"); for (i = 0; i < sizeof(percs) / sizeof(int); i++) { if (percs[i] <= 0) printf(" 0%% <0> (never)\n"); else if (percs[i] >= 100) printf(" 100%% %5" APR_TIME_T_FMT " (longest request)\n", ap_round_ms(stats[done - 1].time)); else printf(" %d%% %5" APR_TIME_T_FMT "\n", percs[i], ap_round_ms(stats[(unsigned long)done * percs[i] / 100].time)); } } if (csvperc) { FILE *out = fopen(csvperc, "w"); if (!out) { perror("Cannot open CSV output file"); exit(1); } fprintf(out, "" "Percentage served" "," "Time in ms" "\n"); for (i = 0; i <= 100; i++) { double t; if (i == 0) t = ap_double_ms(stats[0].time); else if (i == 100) t = ap_double_ms(stats[done - 1].time); else t = ap_double_ms(stats[(unsigned long) (0.5 + (double)done * i / 100.0)].time); fprintf(out, "%d,%.3f\n", i, t); } fclose(out); } if (gnuplot) { FILE *out = fopen(gnuplot, "w"); char tmstring[APR_CTIME_LEN]; if (!out) { perror("Cannot open gnuplot output file"); exit(1); } fprintf(out, "starttime\tseconds\tctime\tdtime\tttime\twait\n"); for (i = 0; i < done; i++) { (void) apr_ctime(tmstring, stats[i].starttime); fprintf(out, "%s\t%" APR_TIME_T_FMT "\t%" APR_TIME_T_FMT "\t%" APR_TIME_T_FMT "\t%" APR_TIME_T_FMT "\t%" APR_TIME_T_FMT "\n", tmstring, apr_time_sec(stats[i].starttime), ap_round_ms(stats[i].ctime), ap_round_ms(stats[i].time - stats[i].ctime), ap_round_ms(stats[i].time), ap_round_ms(stats[i].waittime)); } fclose(out); } } if (sig) { exit(1); } } /* --------------------------------------------------------- */ /* calculate and output results in HTML */ static void output_html_results(void) { double timetaken = (double) (lasttime - start) / APR_USEC_PER_SEC; printf("\n\n\n", tablestring); printf("" "\n", trstring, tdstring, tdstring, servername); printf("" "\n", trstring, tdstring, tdstring, hostname); printf("" "\n", trstring, tdstring, tdstring, port); printf("" "\n", trstring, tdstring, tdstring, path); if (nolength) printf("" "\n", trstring, tdstring, tdstring); else printf("" "\n", trstring, tdstring, tdstring, doclen); printf("" "\n", trstring, tdstring, tdstring, concurrency); printf("" "\n", trstring, tdstring, tdstring, timetaken); printf("" "\n", trstring, tdstring, tdstring, done); printf("" "\n", trstring, tdstring, tdstring, bad); if (bad) printf("\n", trstring, tdstring, err_conn, err_length, err_except); if (err_response) printf("" "\n", trstring, tdstring, tdstring, err_response); if (keepalive) printf("" "\n", trstring, tdstring, tdstring, doneka); printf("" "\n", trstring, tdstring, tdstring, totalread); if (send_body) printf("" "\n", trstring, tdstring, tdstring, totalposted); printf("" "\n", trstring, tdstring, tdstring, totalbread); /* avoid divide by zero */ if (timetaken) { printf("" "\n", trstring, tdstring, tdstring, (double) done / timetaken); printf("" "\n", trstring, tdstring, tdstring, (double) totalread / 1024 / timetaken); if (send_body) { printf("" "\n", trstring, tdstring, tdstring, (double) totalposted / 1024 / timetaken); printf("" "\n", trstring, tdstring, tdstring, (double) (totalread + totalposted) / 1024 / timetaken); } } { /* work out connection times */ int i; apr_interval_time_t totalcon = 0, total = 0; apr_interval_time_t mincon = AB_MAX, mintot = AB_MAX; apr_interval_time_t maxcon = 0, maxtot = 0; for (i = 0; i < done; i++) { struct data *s = &stats[i]; mincon = ap_min(mincon, s->ctime); mintot = ap_min(mintot, s->time); maxcon = ap_max(maxcon, s->ctime); maxtot = ap_max(maxtot, s->time); totalcon += s->ctime; total += s->time; } /* * Reduce stats from apr time to milliseconds */ mincon = ap_round_ms(mincon); mintot = ap_round_ms(mintot); maxcon = ap_round_ms(maxcon); maxtot = ap_round_ms(maxtot); totalcon = ap_round_ms(totalcon); total = ap_round_ms(total); if (done > 0) { /* avoid division by zero (if 0 done) */ printf("\n", trstring, tdstring); printf("\n", trstring, tdstring, tdstring, tdstring, tdstring); printf("" "" "" "\n", trstring, tdstring, tdstring, mincon, tdstring, totalcon / done, tdstring, maxcon); printf("" "" "" "\n", trstring, tdstring, tdstring, mintot - mincon, tdstring, (total / done) - (totalcon / done), tdstring, maxtot - maxcon); printf("" "" "" "\n", trstring, tdstring, tdstring, mintot, tdstring, total / done, tdstring, maxtot); } printf("
Server Software:%s
Server Hostname:%s
Server Port:%hu
Document Path:%s
Document Length:Variable
Document Length:%" APR_SIZE_T_FMT " bytes
Concurrency Level:%d
Time taken for tests:%.3f seconds
Complete requests:%d
Failed requests:%d
(Connect: %d, Length: %d, Exceptions: %d)
Non-2xx responses:%d
Keep-Alive requests:%d
Total transferred:%" APR_INT64_T_FMT " bytes
Total body sent:%" APR_INT64_T_FMT "
HTML transferred:%" APR_INT64_T_FMT " bytes
Requests per second:%.2f
Transfer rate:%.2f kb/s received
 %.2f kb/s sent
 %.2f kb/s total
Connnection Times (ms)
  min avg max
Connect:%5" APR_TIME_T_FMT "%5" APR_TIME_T_FMT "%5" APR_TIME_T_FMT "
Processing:%5" APR_TIME_T_FMT "%5" APR_TIME_T_FMT "%5" APR_TIME_T_FMT "
Total:%5" APR_TIME_T_FMT "%5" APR_TIME_T_FMT "%5" APR_TIME_T_FMT "
\n"); } } /* --------------------------------------------------------- */ /* start asnchronous non-blocking connection */ static void start_connect(struct connection * c) { apr_status_t rv; if (!(started < requests)) return; c->read = 0; c->bread = 0; c->keepalive = 0; c->cbx = 0; c->gotheader = 0; c->rwrite = 0; if (c->ctx) apr_pool_clear(c->ctx); else apr_pool_create(&c->ctx, cntxt); if ((rv = apr_socket_create(&c->aprsock, destsa->family, SOCK_STREAM, 0, c->ctx)) != APR_SUCCESS) { apr_err("socket", rv); } if (myhost) { if ((rv = apr_socket_bind(c->aprsock, mysa)) != APR_SUCCESS) { apr_err("bind", rv); } } c->pollfd.desc_type = APR_POLL_SOCKET; c->pollfd.desc.s = c->aprsock; c->pollfd.reqevents = 0; c->pollfd.client_data = c; if ((rv = apr_socket_opt_set(c->aprsock, APR_SO_NONBLOCK, 1)) != APR_SUCCESS) { apr_err("socket nonblock", rv); } if (windowsize != 0) { rv = apr_socket_opt_set(c->aprsock, APR_SO_SNDBUF, windowsize); if (rv != APR_SUCCESS && rv != APR_ENOTIMPL) { apr_err("socket send buffer", rv); } rv = apr_socket_opt_set(c->aprsock, APR_SO_RCVBUF, windowsize); if (rv != APR_SUCCESS && rv != APR_ENOTIMPL) { apr_err("socket receive buffer", rv); } } c->start = lasttime = apr_time_now(); #ifdef USE_SSL if (is_ssl) { BIO *bio; apr_os_sock_t fd; if ((c->ssl = SSL_new(ssl_ctx)) == NULL) { BIO_printf(bio_err, "SSL_new failed.\n"); ERR_print_errors(bio_err); exit(1); } ssl_rand_seed(); apr_os_sock_get(&fd, c->aprsock); bio = BIO_new_socket(fd, BIO_NOCLOSE); BIO_set_nbio(bio, 1); SSL_set_bio(c->ssl, bio, bio); SSL_set_connect_state(c->ssl); if (verbosity >= 4) { BIO_set_callback(bio, ssl_print_cb); BIO_set_callback_arg(bio, (void *)bio_err); } #ifdef HAVE_TLSEXT if (tls_sni) { SSL_set_tlsext_host_name(c->ssl, tls_sni); } #endif } else { c->ssl = NULL; } #endif if ((rv = apr_socket_connect(c->aprsock, destsa)) != APR_SUCCESS) { if (APR_STATUS_IS_EINPROGRESS(rv)) { set_conn_state(c, STATE_CONNECTING); c->rwrite = 0; return; } else { set_conn_state(c, STATE_UNCONNECTED); apr_socket_close(c->aprsock); if (good == 0 && destsa->next) { destsa = destsa->next; err_conn = 0; } else if (bad++ > 10) { fprintf(stderr, "\nTest aborted after 10 failures\n\n"); apr_err("apr_socket_connect()", rv); } else { err_conn++; } start_connect(c); return; } } /* connected first time */ set_conn_state(c, STATE_CONNECTED); #ifdef USE_SSL if (c->ssl) { ssl_proceed_handshake(c); } else #endif { write_request(c); } } /* --------------------------------------------------------- */ /* close down connection and save stats */ static void close_connection(struct connection * c) { if (c->read == 0 && c->keepalive) { /* * server has legitimately shut down an idle keep alive request */ if (good) good--; /* connection never happened */ } else { if (good == 1) { /* first time here */ doclen = c->bread; } else if ((c->bread != doclen) && !nolength) { bad++; err_length++; } /* save out time */ if (done < requests) { struct data *s = &stats[done++]; c->done = lasttime = apr_time_now(); s->starttime = c->start; s->ctime = ap_max(0, c->connect - c->start); s->time = ap_max(0, c->done - c->start); s->waittime = ap_max(0, c->beginread - c->endwrite); if (heartbeatres && !(done % heartbeatres)) { fprintf(stderr, "Completed %d requests\n", done); fflush(stderr); } } } set_conn_state(c, STATE_UNCONNECTED); #ifdef USE_SSL if (c->ssl) { SSL_shutdown(c->ssl); SSL_free(c->ssl); c->ssl = NULL; } #endif apr_socket_close(c->aprsock); /* connect again */ start_connect(c); return; } /* --------------------------------------------------------- */ /* read data from connection */ static void read_connection(struct connection * c) { apr_size_t r; apr_status_t status; char *part; char respcode[4]; /* 3 digits and null */ int i; r = sizeof(buffer); read_more: #ifdef USE_SSL if (c->ssl) { status = SSL_read(c->ssl, buffer, r); if (status <= 0) { int scode = SSL_get_error(c->ssl, status); if (scode == SSL_ERROR_ZERO_RETURN) { /* connection closed cleanly: */ good++; close_connection(c); } else if (scode == SSL_ERROR_SYSCALL && status == 0 && c->read != 0) { /* connection closed, but in violation of the protocol, after * some data has already been read; this commonly happens, so * let the length check catch any response errors */ good++; close_connection(c); } else if (scode == SSL_ERROR_SYSCALL && c->read == 0 && destsa->next && c->state == STATE_CONNECTING && good == 0) { return; } else if (scode == SSL_ERROR_WANT_READ) { set_polled_events(c, APR_POLLIN); } else if (scode == SSL_ERROR_WANT_WRITE) { set_polled_events(c, APR_POLLOUT); } else { /* some fatal error: */ c->read = 0; BIO_printf(bio_err, "SSL read failed (%d) - closing connection\n", scode); ERR_print_errors(bio_err); close_connection(c); } return; } r = status; } else #endif { status = apr_socket_recv(c->aprsock, buffer, &r); if (APR_STATUS_IS_EAGAIN(status)) return; else if (r == 0 && APR_STATUS_IS_EOF(status)) { good++; close_connection(c); return; } /* catch legitimate fatal apr_socket_recv errors */ else if (status != APR_SUCCESS) { if (recverrok) { err_recv++; bad++; close_connection(c); if (verbosity >= 1) { char buf[120]; fprintf(stderr,"%s: %s (%d)\n", "apr_socket_recv", apr_strerror(status, buf, sizeof buf), status); } return; } else if (destsa->next && c->state == STATE_CONNECTING && c->read == 0 && good == 0) { return; } else { err_recv++; apr_err("apr_socket_recv", status); } } } totalread += r; if (c->read == 0) { c->beginread = apr_time_now(); } c->read += r; if (!c->gotheader) { char *s; int l = 4; apr_size_t space = CBUFFSIZE - c->cbx - 1; /* -1 allows for \0 term */ int tocopy = (space < r) ? space : r; #ifdef NOT_ASCII apr_size_t inbytes_left = space, outbytes_left = space; status = apr_xlate_conv_buffer(from_ascii, buffer, &inbytes_left, c->cbuff + c->cbx, &outbytes_left); if (status || inbytes_left || outbytes_left) { fprintf(stderr, "only simple translation is supported (%d/%" APR_SIZE_T_FMT "/%" APR_SIZE_T_FMT ")\n", status, inbytes_left, outbytes_left); exit(1); } #else memcpy(c->cbuff + c->cbx, buffer, space); #endif /* NOT_ASCII */ c->cbx += tocopy; space -= tocopy; c->cbuff[c->cbx] = 0; /* terminate for benefit of strstr */ if (verbosity >= 2) { printf("LOG: header received:\n%s\n", c->cbuff); } s = strstr(c->cbuff, "\r\n\r\n"); /* * this next line is so that we talk to NCSA 1.5 which blatantly * breaks the http specifaction */ if (!s) { s = strstr(c->cbuff, "\n\n"); l = 2; } if (!s) { /* read rest next time */ if (space) { return; } else { /* header is in invalid or too big - close connection */ set_conn_state(c, STATE_UNCONNECTED); apr_socket_close(c->aprsock); err_response++; if (bad++ > 10) { err("\nTest aborted after 10 failures\n\n"); } start_connect(c); } } else { /* have full header */ if (!good) { /* * this is first time, extract some interesting info */ char *p, *q; size_t len = 0; p = xstrcasestr(c->cbuff, "Server:"); q = servername; if (p) { p += 8; /* -1 to not overwrite last '\0' byte */ while (*p > 32 && len++ < sizeof(servername) - 1) *q++ = *p++; } *q = 0; } /* * XXX: this parsing isn't even remotely HTTP compliant... but in * the interest of speed it doesn't totally have to be, it just * needs to be extended to handle whatever servers folks want to * test against. -djg */ /* check response code */ part = strstr(c->cbuff, "HTTP"); /* really HTTP/1.x_ */ if (part && strlen(part) > strlen("HTTP/1.x_")) { strncpy(respcode, (part + strlen("HTTP/1.x_")), 3); respcode[3] = '\0'; } else { strcpy(respcode, "500"); } if (respcode[0] != '2') { err_response++; if (verbosity >= 2) printf("WARNING: Response code not 2xx (%s)\n", respcode); } else if (verbosity >= 3) { printf("LOG: Response code = %s\n", respcode); } c->gotheader = 1; *s = 0; /* terminate at end of header */ if (keepalive && xstrcasestr(c->cbuff, "Keep-Alive")) { char *cl; c->keepalive = 1; cl = xstrcasestr(c->cbuff, "Content-Length:"); if (cl && method != HEAD) { /* response to HEAD doesn't have entity body */ c->length = atoi(cl + 16); } else { c->length = 0; } } c->bread += c->cbx - (s + l - c->cbuff) + r - tocopy; totalbread += c->bread; /* We have received the header, so we know this destination socket * address is working, so initialize all remaining requests. */ if (!requests_initialized) { for (i = 1; i < concurrency; i++) { con[i].socknum = i; start_connect(&con[i]); } requests_initialized = 1; } } } else { /* outside header, everything we have read is entity body */ c->bread += r; totalbread += r; } if (r == sizeof(buffer) && c->bread < c->length) { /* read was full, try more immediately (nonblocking already) */ goto read_more; } if (c->keepalive && (c->bread >= c->length)) { /* finished a keep-alive connection */ good++; /* save out time */ if (good == 1) { /* first time here */ doclen = c->bread; } else if ((c->bread != doclen) && !nolength) { bad++; err_length++; } if (done < requests) { struct data *s = &stats[done++]; doneka++; c->done = apr_time_now(); s->starttime = c->start; s->ctime = ap_max(0, c->connect - c->start); s->time = ap_max(0, c->done - c->start); s->waittime = ap_max(0, c->beginread - c->endwrite); if (heartbeatres && !(done % heartbeatres)) { fprintf(stderr, "Completed %d requests\n", done); fflush(stderr); } } c->keepalive = 0; c->length = 0; c->gotheader = 0; c->cbx = 0; c->read = c->bread = 0; /* zero connect time with keep-alive */ c->start = c->connect = lasttime = apr_time_now(); set_conn_state(c, STATE_CONNECTED); write_request(c); } } /* --------------------------------------------------------- */ /* run the tests */ static void test(void) { apr_time_t stoptime; apr_int16_t rtnev; apr_status_t rv; int i; apr_status_t status; int snprintf_res = 0; #ifdef NOT_ASCII apr_size_t inbytes_left, outbytes_left; #endif if (isproxy) { connecthost = apr_pstrdup(cntxt, proxyhost); connectport = proxyport; } else { connecthost = apr_pstrdup(cntxt, hostname); connectport = port; } if (!use_html) { printf("Benchmarking %s ", hostname); if (isproxy) printf("[through %s:%d] ", proxyhost, proxyport); printf("(be patient)%s", (heartbeatres ? "\n" : "...")); fflush(stdout); } con = xcalloc(concurrency, sizeof(struct connection)); /* * XXX: a way to calculate the stats without requiring O(requests) memory * XXX: would be nice. */ stats = xcalloc(requests, sizeof(struct data)); if ((status = apr_pollset_create(&readbits, concurrency, cntxt, APR_POLLSET_NOCOPY)) != APR_SUCCESS) { apr_err("apr_pollset_create failed", status); } /* add default headers if necessary */ if (!opt_host) { /* Host: header not overridden, add default value to hdrs */ hdrs = apr_pstrcat(cntxt, hdrs, "Host: ", host_field, colonhost, "\r\n", NULL); } else { /* Header overridden, no need to add, as it is already in hdrs */ } #ifdef HAVE_TLSEXT if (is_ssl && tls_use_sni) { apr_ipsubnet_t *ip; if (((tls_sni = opt_host) || (tls_sni = hostname)) && (!*tls_sni || apr_ipsubnet_create(&ip, tls_sni, NULL, cntxt) == APR_SUCCESS)) { /* IP not allowed in TLS SNI extension */ tls_sni = NULL; } } #endif if (!opt_useragent) { /* User-Agent: header not overridden, add default value to hdrs */ hdrs = apr_pstrcat(cntxt, hdrs, "User-Agent: ApacheBench/", AP_AB_BASEREVISION, "\r\n", NULL); } else { /* Header overridden, no need to add, as it is already in hdrs */ } if (!opt_accept) { /* Accept: header not overridden, add default value to hdrs */ hdrs = apr_pstrcat(cntxt, hdrs, "Accept: */*\r\n", NULL); } else { /* Header overridden, no need to add, as it is already in hdrs */ } /* setup request */ if (!send_body) { snprintf_res = apr_snprintf(request, sizeof(_request), "%s %s HTTP/1.0\r\n" "%s" "%s" "%s" "%s" "\r\n", method_str[method], (isproxy) ? fullurl : path, keepalive ? "Connection: Keep-Alive\r\n" : "", cookie, auth, hdrs); } else { snprintf_res = apr_snprintf(request, sizeof(_request), "%s %s HTTP/1.0\r\n" "%s" "%s" "%s" "Content-length: %" APR_SIZE_T_FMT "\r\n" "Content-type: %s\r\n" "%s" "\r\n", method_str[method], (isproxy) ? fullurl : path, keepalive ? "Connection: Keep-Alive\r\n" : "", cookie, auth, postlen, (content_type != NULL) ? content_type : "text/plain", hdrs); } if (snprintf_res >= sizeof(_request)) { err("Request too long\n"); } if (verbosity >= 2) printf("INFO: %s header == \n---\n%s\n---\n", method_str[method], request); reqlen = strlen(request); /* * Combine headers and (optional) post file into one continuous buffer */ if (send_body) { char *buff = xmalloc(postlen + reqlen + 1); strcpy(buff, request); memcpy(buff + reqlen, postdata, postlen); request = buff; } #ifdef NOT_ASCII inbytes_left = outbytes_left = reqlen; status = apr_xlate_conv_buffer(to_ascii, request, &inbytes_left, request, &outbytes_left); if (status || inbytes_left || outbytes_left) { fprintf(stderr, "only simple translation is supported (%d/%" APR_SIZE_T_FMT "/%" APR_SIZE_T_FMT ")\n", status, inbytes_left, outbytes_left); exit(1); } #endif /* NOT_ASCII */ if (myhost) { /* This only needs to be done once */ if ((rv = apr_sockaddr_info_get(&mysa, myhost, APR_UNSPEC, 0, 0, cntxt)) != APR_SUCCESS) { char buf[120]; apr_snprintf(buf, sizeof(buf), "apr_sockaddr_info_get() for %s", myhost); apr_err(buf, rv); } } /* This too */ if ((rv = apr_sockaddr_info_get(&destsa, connecthost, myhost ? mysa->family : APR_UNSPEC, connectport, 0, cntxt)) != APR_SUCCESS) { char buf[120]; apr_snprintf(buf, sizeof(buf), "apr_sockaddr_info_get() for %s", connecthost); apr_err(buf, rv); } /* ok - lets start */ start = lasttime = apr_time_now(); stoptime = tlimit ? (start + apr_time_from_sec(tlimit)) : AB_MAX; #ifdef SIGINT /* Output the results if the user terminates the run early. */ apr_signal(SIGINT, output_results); #endif /* initialise first connection to determine destination socket address * which should be used for next connections. */ con[0].socknum = 0; start_connect(&con[0]); do { apr_int32_t n; const apr_pollfd_t *pollresults, *pollfd; n = concurrency; do { status = apr_pollset_poll(readbits, aprtimeout, &n, &pollresults); } while (APR_STATUS_IS_EINTR(status)); if (status != APR_SUCCESS) apr_err("apr_pollset_poll", status); for (i = 0, pollfd = pollresults; i < n; i++, pollfd++) { struct connection *c; c = pollfd->client_data; /* * If the connection isn't connected how can we check it? */ if (c->state == STATE_UNCONNECTED) continue; rtnev = pollfd->rtnevents; #ifdef USE_SSL if (c->state == STATE_CONNECTED && c->ssl && SSL_in_init(c->ssl)) { ssl_proceed_handshake(c); continue; } #endif /* * Notes: APR_POLLHUP is set after FIN is received on some * systems, so treat that like APR_POLLIN so that we try to read * again. * * Some systems return APR_POLLERR with APR_POLLHUP. We need to * call read_connection() for APR_POLLHUP, so check for * APR_POLLHUP first so that a closed connection isn't treated * like an I/O error. If it is, we never figure out that the * connection is done and we loop here endlessly calling * apr_poll(). */ if ((rtnev & APR_POLLIN) || (rtnev & APR_POLLPRI) || (rtnev & APR_POLLHUP)) read_connection(c); if ((rtnev & APR_POLLERR) || (rtnev & APR_POLLNVAL)) { if (destsa->next && c->state == STATE_CONNECTING && good == 0) { destsa = destsa->next; start_connect(c); } else { bad++; err_except++; /* avoid apr_poll/EINPROGRESS loop on HP-UX, let recv discover ECONNREFUSED */ if (c->state == STATE_CONNECTING) { read_connection(c); } else { start_connect(c); } } continue; } if (rtnev & APR_POLLOUT) { if (c->state == STATE_CONNECTING) { /* call connect() again to detect errors */ rv = apr_socket_connect(c->aprsock, destsa); if (rv != APR_SUCCESS) { set_conn_state(c, STATE_UNCONNECTED); apr_socket_close(c->aprsock); err_conn++; if (bad++ > 10) { fprintf(stderr, "\nTest aborted after 10 failures\n\n"); apr_err("apr_socket_connect()", rv); } start_connect(c); continue; } else { set_conn_state(c, STATE_CONNECTED); #ifdef USE_SSL if (c->ssl) ssl_proceed_handshake(c); else #endif write_request(c); } } else { /* POLLOUT is one shot */ set_polled_events(c, APR_POLLIN); if (c->state == STATE_READ) { read_connection(c); } else { write_request(c); } } } } } while (lasttime < stoptime && done < requests); if (heartbeatres) fprintf(stderr, "Finished %d requests\n", done); else printf("..done\n"); if (use_html) output_html_results(); else output_results(0); } /* ------------------------------------------------------- */ /* display copyright information */ static void copyright(void) { if (!use_html) { printf("This is ApacheBench, Version %s\n", AP_AB_BASEREVISION " <$Revision: 1843412 $>"); printf("Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/\n"); printf("Licensed to The Apache Software Foundation, http://www.apache.org/\n"); printf("\n"); } else { printf("

\n"); printf(" This is ApacheBench, Version %s <%s>
\n", AP_AB_BASEREVISION, "$Revision: 1843412 $"); printf(" Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
\n"); printf(" Licensed to The Apache Software Foundation, http://www.apache.org/
\n"); printf("

\n

\n"); } } /* display usage information */ static void usage(const char *progname) { fprintf(stderr, "Usage: %s [options] [http" #ifdef USE_SSL "[s]" #endif "://]hostname[:port]/path\n", progname); /* 80 column ruler: ******************************************************************************** */ fprintf(stderr, "Options are:\n"); fprintf(stderr, " -n requests Number of requests to perform\n"); fprintf(stderr, " -c concurrency Number of multiple requests to make at a time\n"); fprintf(stderr, " -t timelimit Seconds to max. to spend on benchmarking\n"); fprintf(stderr, " This implies -n 50000\n"); fprintf(stderr, " -s timeout Seconds to max. wait for each response\n"); fprintf(stderr, " Default is 30 seconds\n"); fprintf(stderr, " -b windowsize Size of TCP send/receive buffer, in bytes\n"); fprintf(stderr, " -B address Address to bind to when making outgoing connections\n"); fprintf(stderr, " -p postfile File containing data to POST. Remember also to set -T\n"); fprintf(stderr, " -u putfile File containing data to PUT. Remember also to set -T\n"); fprintf(stderr, " -T content-type Content-type header to use for POST/PUT data, eg.\n"); fprintf(stderr, " 'application/x-www-form-urlencoded'\n"); fprintf(stderr, " Default is 'text/plain'\n"); fprintf(stderr, " -v verbosity How much troubleshooting info to print\n"); fprintf(stderr, " -w Print out results in HTML tables\n"); fprintf(stderr, " -i Use HEAD instead of GET\n"); fprintf(stderr, " -x attributes String to insert as table attributes\n"); fprintf(stderr, " -y attributes String to insert as tr attributes\n"); fprintf(stderr, " -z attributes String to insert as td or th attributes\n"); fprintf(stderr, " -C attribute Add cookie, eg. 'Apache=1234'. (repeatable)\n"); fprintf(stderr, " -H attribute Add Arbitrary header line, eg. 'Accept-Encoding: gzip'\n"); fprintf(stderr, " Inserted after all normal header lines. (repeatable)\n"); fprintf(stderr, " -A attribute Add Basic WWW Authentication, the attributes\n"); fprintf(stderr, " are a colon separated username and password.\n"); fprintf(stderr, " -P attribute Add Basic Proxy Authentication, the attributes\n"); fprintf(stderr, " are a colon separated username and password.\n"); fprintf(stderr, " -X proxy:port Proxyserver and port number to use\n"); fprintf(stderr, " -V Print version number and exit\n"); fprintf(stderr, " -k Use HTTP KeepAlive feature\n"); fprintf(stderr, " -d Do not show percentiles served table.\n"); fprintf(stderr, " -S Do not show confidence estimators and warnings.\n"); fprintf(stderr, " -q Do not show progress when doing more than 150 requests\n"); fprintf(stderr, " -l Accept variable document length (use this for dynamic pages)\n"); fprintf(stderr, " -g filename Output collected data to gnuplot format file.\n"); fprintf(stderr, " -e filename Output CSV file with percentages served\n"); fprintf(stderr, " -r Don't exit on socket receive errors.\n"); fprintf(stderr, " -m method Method name\n"); fprintf(stderr, " -h Display usage information (this message)\n"); #ifdef USE_SSL #ifndef OPENSSL_NO_SSL2 #define SSL2_HELP_MSG "SSL2, " #else #define SSL2_HELP_MSG "" #endif #ifndef OPENSSL_NO_SSL3 #define SSL3_HELP_MSG "SSL3, " #else #define SSL3_HELP_MSG "" #endif #ifdef HAVE_TLSV1_X #define TLS1_X_HELP_MSG ", TLS1.1, TLS1.2" #else #define TLS1_X_HELP_MSG "" #endif #ifdef HAVE_TLSEXT fprintf(stderr, " -I Disable TLS Server Name Indication (SNI) extension\n"); #endif fprintf(stderr, " -Z ciphersuite Specify SSL/TLS cipher suite (See openssl ciphers)\n"); fprintf(stderr, " -f protocol Specify SSL/TLS protocol\n"); fprintf(stderr, " (" SSL2_HELP_MSG SSL3_HELP_MSG "TLS1" TLS1_X_HELP_MSG " or ALL)\n"); fprintf(stderr, " -E certfile Specify optional client certificate chain and private key\n"); #endif exit(EINVAL); } /* ------------------------------------------------------- */ /* split URL into parts */ static int parse_url(const char *url) { char *cp; char *h; char *scope_id; apr_status_t rv; /* Save a copy for the proxy */ fullurl = apr_pstrdup(cntxt, url); if (strlen(url) > 7 && strncmp(url, "http://", 7) == 0) { url += 7; #ifdef USE_SSL is_ssl = 0; #endif } else #ifdef USE_SSL if (strlen(url) > 8 && strncmp(url, "https://", 8) == 0) { url += 8; is_ssl = 1; } #else if (strlen(url) > 8 && strncmp(url, "https://", 8) == 0) { fprintf(stderr, "SSL not compiled in; no https support\n"); exit(1); } #endif if ((cp = strchr(url, '/')) == NULL) return 1; h = apr_pstrmemdup(cntxt, url, cp - url); rv = apr_parse_addr_port(&hostname, &scope_id, &port, h, cntxt); if (rv != APR_SUCCESS || !hostname || scope_id) { return 1; } path = apr_pstrdup(cntxt, cp); *cp = '\0'; if (*url == '[') { /* IPv6 numeric address string */ host_field = apr_psprintf(cntxt, "[%s]", hostname); } else { host_field = hostname; } if (port == 0) { /* no port specified */ #ifdef USE_SSL if (is_ssl) port = 443; else #endif port = 80; } if (( #ifdef USE_SSL is_ssl && (port != 443)) || (!is_ssl && #endif (port != 80))) { colonhost = apr_psprintf(cntxt,":%d",port); } else colonhost = ""; return 0; } /* ------------------------------------------------------- */ /* read data to POST/PUT from file, save contents and length */ static apr_status_t open_postfile(const char *pfile) { apr_file_t *postfd; apr_finfo_t finfo; apr_status_t rv; char errmsg[120]; rv = apr_file_open(&postfd, pfile, APR_READ, APR_OS_DEFAULT, cntxt); if (rv != APR_SUCCESS) { fprintf(stderr, "ab: Could not open POST data file (%s): %s\n", pfile, apr_strerror(rv, errmsg, sizeof errmsg)); return rv; } rv = apr_file_info_get(&finfo, APR_FINFO_NORM, postfd); if (rv != APR_SUCCESS) { fprintf(stderr, "ab: Could not stat POST data file (%s): %s\n", pfile, apr_strerror(rv, errmsg, sizeof errmsg)); return rv; } postlen = (apr_size_t)finfo.size; postdata = xmalloc(postlen); rv = apr_file_read_full(postfd, postdata, postlen, NULL); if (rv != APR_SUCCESS) { fprintf(stderr, "ab: Could not read POST data file: %s\n", apr_strerror(rv, errmsg, sizeof errmsg)); return rv; } apr_file_close(postfd); return APR_SUCCESS; } /* ------------------------------------------------------- */ /* sort out command-line args and call test */ int main(int argc, const char * const argv[]) { int l; char tmp[1024]; apr_status_t status; apr_getopt_t *opt; const char *opt_arg; char c; #if OPENSSL_VERSION_NUMBER >= 0x10100000L int max_prot = TLS1_2_VERSION; #ifndef OPENSSL_NO_SSL3 int min_prot = SSL3_VERSION; #else int min_prot = TLS1_VERSION; #endif #endif /* #if OPENSSL_VERSION_NUMBER >= 0x10100000L */ #ifdef USE_SSL AB_SSL_METHOD_CONST SSL_METHOD *meth = SSLv23_client_method(); #endif /* table defaults */ tablestring = ""; trstring = ""; tdstring = "bgcolor=white"; cookie = ""; auth = ""; proxyhost = ""; hdrs = ""; apr_app_initialize(&argc, &argv, NULL); atexit(apr_terminate); apr_pool_create(&cntxt, NULL); apr_pool_abort_set(abort_on_oom, cntxt); #ifdef NOT_ASCII status = apr_xlate_open(&to_ascii, "ISO-8859-1", APR_DEFAULT_CHARSET, cntxt); if (status) { fprintf(stderr, "apr_xlate_open(to ASCII)->%d\n", status); exit(1); } status = apr_xlate_open(&from_ascii, APR_DEFAULT_CHARSET, "ISO-8859-1", cntxt); if (status) { fprintf(stderr, "apr_xlate_open(from ASCII)->%d\n", status); exit(1); } status = apr_base64init_ebcdic(to_ascii, from_ascii); if (status) { fprintf(stderr, "apr_base64init_ebcdic()->%d\n", status); exit(1); } #endif myhost = NULL; /* 0.0.0.0 or :: */ apr_getopt_init(&opt, cntxt, argc, argv); while ((status = apr_getopt(opt, "n:c:t:s:b:T:p:u:v:lrkVhwiIx:y:z:C:H:P:A:g:X:de:SqB:m:" #ifdef USE_SSL "Z:f:E:" #endif ,&c, &opt_arg)) == APR_SUCCESS) { switch (c) { case 'n': requests = atoi(opt_arg); if (requests <= 0) { err("Invalid number of requests\n"); } break; case 'k': keepalive = 1; break; case 'q': heartbeatres = 0; break; case 'c': concurrency = atoi(opt_arg); break; case 'b': windowsize = atoi(opt_arg); break; case 'i': if (method != NO_METH) err("Cannot mix HEAD with other methods\n"); method = HEAD; break; case 'g': gnuplot = xstrdup(opt_arg); break; case 'd': percentile = 0; break; case 'e': csvperc = xstrdup(opt_arg); break; case 'S': confidence = 0; break; case 's': aprtimeout = apr_time_from_sec(atoi(opt_arg)); /* timeout value */ break; case 'p': if (method != NO_METH) err("Cannot mix POST with other methods\n"); if (open_postfile(opt_arg) != APR_SUCCESS) { exit(1); } method = POST; send_body = 1; break; case 'u': if (method != NO_METH) err("Cannot mix PUT with other methods\n"); if (open_postfile(opt_arg) != APR_SUCCESS) { exit(1); } method = PUT; send_body = 1; break; case 'l': nolength = 1; break; case 'r': recverrok = 1; break; case 'v': verbosity = atoi(opt_arg); break; case 't': tlimit = atoi(opt_arg); requests = MAX_REQUESTS; /* need to size data array on * something */ break; case 'T': content_type = apr_pstrdup(cntxt, opt_arg); break; case 'C': cookie = apr_pstrcat(cntxt, "Cookie: ", opt_arg, "\r\n", NULL); break; case 'A': /* * assume username passwd already to be in colon separated form. * Ready to be uu-encoded. */ while (apr_isspace(*opt_arg)) opt_arg++; if (apr_base64_encode_len(strlen(opt_arg)) > sizeof(tmp)) { err("Authentication credentials too long\n"); } l = apr_base64_encode(tmp, opt_arg, strlen(opt_arg)); tmp[l] = '\0'; auth = apr_pstrcat(cntxt, auth, "Authorization: Basic ", tmp, "\r\n", NULL); break; case 'P': /* * assume username passwd already to be in colon separated form. */ while (apr_isspace(*opt_arg)) opt_arg++; if (apr_base64_encode_len(strlen(opt_arg)) > sizeof(tmp)) { err("Proxy credentials too long\n"); } l = apr_base64_encode(tmp, opt_arg, strlen(opt_arg)); tmp[l] = '\0'; auth = apr_pstrcat(cntxt, auth, "Proxy-Authorization: Basic ", tmp, "\r\n", NULL); break; case 'H': hdrs = apr_pstrcat(cntxt, hdrs, opt_arg, "\r\n", NULL); /* * allow override of some of the common headers that ab adds */ if (strncasecmp(opt_arg, "Host:", 5) == 0) { char *host; apr_size_t len; opt_arg += 5; while (apr_isspace(*opt_arg)) opt_arg++; len = strlen(opt_arg); host = strdup(opt_arg); while (len && apr_isspace(host[len-1])) host[--len] = '\0'; opt_host = host; } else if (strncasecmp(opt_arg, "Accept:", 7) == 0) { opt_accept = 1; } else if (strncasecmp(opt_arg, "User-Agent:", 11) == 0) { opt_useragent = 1; } break; case 'w': use_html = 1; break; /* * if any of the following three are used, turn on html output * automatically */ case 'x': use_html = 1; tablestring = opt_arg; break; case 'X': { char *p; /* * assume proxy-name[:port] */ if ((p = strchr(opt_arg, ':'))) { *p = '\0'; p++; proxyport = atoi(p); } proxyhost = apr_pstrdup(cntxt, opt_arg); isproxy = 1; } break; case 'y': use_html = 1; trstring = opt_arg; break; case 'z': use_html = 1; tdstring = opt_arg; break; case 'h': usage(argv[0]); break; case 'V': copyright(); return 0; case 'B': myhost = apr_pstrdup(cntxt, opt_arg); break; case 'm': method = CUSTOM_METHOD; method_str[CUSTOM_METHOD] = strdup(opt_arg); break; #ifdef USE_SSL case 'Z': ssl_cipher = strdup(opt_arg); break; case 'E': ssl_cert = strdup(opt_arg); break; case 'f': #if OPENSSL_VERSION_NUMBER < 0x10100000L if (strncasecmp(opt_arg, "ALL", 3) == 0) { meth = SSLv23_client_method(); #ifndef OPENSSL_NO_SSL2 } else if (strncasecmp(opt_arg, "SSL2", 4) == 0) { meth = SSLv2_client_method(); #ifdef HAVE_TLSEXT tls_use_sni = 0; #endif #endif #ifndef OPENSSL_NO_SSL3 } else if (strncasecmp(opt_arg, "SSL3", 4) == 0) { meth = SSLv3_client_method(); #ifdef HAVE_TLSEXT tls_use_sni = 0; #endif #endif #ifdef HAVE_TLSV1_X } else if (strncasecmp(opt_arg, "TLS1.1", 6) == 0) { meth = TLSv1_1_client_method(); } else if (strncasecmp(opt_arg, "TLS1.2", 6) == 0) { meth = TLSv1_2_client_method(); #endif } else if (strncasecmp(opt_arg, "TLS1", 4) == 0) { meth = TLSv1_client_method(); } #else /* #if OPENSSL_VERSION_NUMBER < 0x10100000L */ meth = TLS_client_method(); if (strncasecmp(opt_arg, "ALL", 3) == 0) { max_prot = TLS1_2_VERSION; #ifndef OPENSSL_NO_SSL3 min_prot = SSL3_VERSION; #else min_prot = TLS1_VERSION; #endif #ifndef OPENSSL_NO_SSL3 } else if (strncasecmp(opt_arg, "SSL3", 4) == 0) { max_prot = SSL3_VERSION; min_prot = SSL3_VERSION; #endif } else if (strncasecmp(opt_arg, "TLS1.1", 6) == 0) { max_prot = TLS1_1_VERSION; min_prot = TLS1_1_VERSION; } else if (strncasecmp(opt_arg, "TLS1.2", 6) == 0) { max_prot = TLS1_2_VERSION; min_prot = TLS1_2_VERSION; } else if (strncasecmp(opt_arg, "TLS1", 4) == 0) { max_prot = TLS1_VERSION; min_prot = TLS1_VERSION; } #endif /* #if OPENSSL_VERSION_NUMBER < 0x10100000L */ break; #ifdef HAVE_TLSEXT case 'I': tls_use_sni = 0; break; #endif #endif } } if (opt->ind != argc - 1) { fprintf(stderr, "%s: wrong number of arguments\n", argv[0]); usage(argv[0]); } if (method == NO_METH) { method = GET; } if (parse_url(apr_pstrdup(cntxt, opt->argv[opt->ind++]))) { fprintf(stderr, "%s: invalid URL\n", argv[0]); usage(argv[0]); } if ((concurrency < 0) || (concurrency > MAX_CONCURRENCY)) { fprintf(stderr, "%s: Invalid Concurrency [Range 0..%d]\n", argv[0], MAX_CONCURRENCY); usage(argv[0]); } if (concurrency > requests) { fprintf(stderr, "%s: Cannot use concurrency level greater than " "total number of requests\n", argv[0]); usage(argv[0]); } if ((heartbeatres) && (requests > 150)) { heartbeatres = requests / 10; /* Print line every 10% of requests */ if (heartbeatres < 100) heartbeatres = 100; /* but never more often than once every 100 * connections. */ } else heartbeatres = 0; #ifdef USE_SSL #ifdef RSAREF R_malloc_init(); #else #if OPENSSL_VERSION_NUMBER < 0x10100000L CRYPTO_malloc_init(); #endif #endif SSL_load_error_strings(); SSL_library_init(); bio_out=BIO_new_fp(stdout,BIO_NOCLOSE); bio_err=BIO_new_fp(stderr,BIO_NOCLOSE); if (!(ssl_ctx = SSL_CTX_new(meth))) { BIO_printf(bio_err, "Could not initialize SSL Context.\n"); ERR_print_errors(bio_err); exit(1); } SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL); #if OPENSSL_VERSION_NUMBER >= 0x10100000L SSL_CTX_set_max_proto_version(ssl_ctx, max_prot); SSL_CTX_set_min_proto_version(ssl_ctx, min_prot); #endif #ifdef SSL_MODE_RELEASE_BUFFERS /* Keep memory usage as low as possible */ SSL_CTX_set_mode (ssl_ctx, SSL_MODE_RELEASE_BUFFERS); #endif if (ssl_cipher != NULL) { if (!SSL_CTX_set_cipher_list(ssl_ctx, ssl_cipher)) { fprintf(stderr, "error setting cipher list [%s]\n", ssl_cipher); ERR_print_errors_fp(stderr); exit(1); } } if (verbosity >= 3) { SSL_CTX_set_info_callback(ssl_ctx, ssl_state_cb); } if (ssl_cert != NULL) { if (SSL_CTX_use_certificate_chain_file(ssl_ctx, ssl_cert) <= 0) { BIO_printf(bio_err, "unable to get certificate from '%s'\n", ssl_cert); ERR_print_errors(bio_err); exit(1); } if (SSL_CTX_use_PrivateKey_file(ssl_ctx, ssl_cert, SSL_FILETYPE_PEM) <= 0) { BIO_printf(bio_err, "unable to get private key from '%s'\n", ssl_cert); ERR_print_errors(bio_err); exit(1); } if (!SSL_CTX_check_private_key(ssl_ctx)) { BIO_printf(bio_err, "private key does not match the certificate public key in %s\n", ssl_cert); exit(1); } } #endif #ifdef SIGPIPE apr_signal(SIGPIPE, SIG_IGN); /* Ignore writes to connections that * have been closed at the other end. */ #endif copyright(); test(); apr_pool_destroy(cntxt); return 0; } httpd-2.4.41/support/htdigest.mak0000644000000000000500000002043512701473373015270 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on htdigest.dsp !IF "$(CFG)" == "" CFG=htdigest - Win32 Debug !MESSAGE No configuration specified. Defaulting to htdigest - Win32 Debug. !ENDIF !IF "$(CFG)" != "htdigest - Win32 Release" && "$(CFG)" != "htdigest - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "htdigest.mak" CFG="htdigest - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "htdigest - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "htdigest - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "htdigest - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\htdigest.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Release" "apr - Win32 Release" "$(OUTDIR)\htdigest.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 ReleaseCLEAN" "aprutil - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\htdigest.obj" -@erase "$(INTDIR)\htdigest.res" -@erase "$(INTDIR)\htdigest_src.idb" -@erase "$(INTDIR)\htdigest_src.pdb" -@erase "$(OUTDIR)\htdigest.exe" -@erase "$(OUTDIR)\htdigest.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\htdigest_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\htdigest.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="htdigest.exe" /d LONG_NAME="Apache htdigest command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\htdigest.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\htdigest.pdb" /debug /out:"$(OUTDIR)\htdigest.exe" /opt:ref LINK32_OBJS= \ "$(INTDIR)\htdigest.obj" \ "$(INTDIR)\htdigest.res" \ "..\srclib\apr\LibR\apr-1.lib" \ "..\srclib\apr-util\LibR\aprutil-1.lib" "$(OUTDIR)\htdigest.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\htdigest.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\htdigest.exe" if exist .\Release\htdigest.exe.manifest mt.exe -manifest .\Release\htdigest.exe.manifest -outputresource:.\Release\htdigest.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "htdigest - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\htdigest.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Debug" "apr - Win32 Debug" "$(OUTDIR)\htdigest.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 DebugCLEAN" "aprutil - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\htdigest.obj" -@erase "$(INTDIR)\htdigest.res" -@erase "$(INTDIR)\htdigest_src.idb" -@erase "$(INTDIR)\htdigest_src.pdb" -@erase "$(OUTDIR)\htdigest.exe" -@erase "$(OUTDIR)\htdigest.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\htdigest_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\htdigest.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="htdigest.exe" /d LONG_NAME="Apache htdigest command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\htdigest.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\htdigest.pdb" /debug /out:"$(OUTDIR)\htdigest.exe" LINK32_OBJS= \ "$(INTDIR)\htdigest.obj" \ "$(INTDIR)\htdigest.res" \ "..\srclib\apr\LibD\apr-1.lib" \ "..\srclib\apr-util\LibD\aprutil-1.lib" "$(OUTDIR)\htdigest.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\htdigest.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\htdigest.exe" if exist .\Debug\htdigest.exe.manifest mt.exe -manifest .\Debug\htdigest.exe.manifest -outputresource:.\Debug\htdigest.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("htdigest.dep") !INCLUDE "htdigest.dep" !ELSE !MESSAGE Warning: cannot find "htdigest.dep" !ENDIF !ENDIF !IF "$(CFG)" == "htdigest - Win32 Release" || "$(CFG)" == "htdigest - Win32 Debug" !IF "$(CFG)" == "htdigest - Win32 Release" "apr - Win32 Release" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" cd "..\..\support" "apr - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "htdigest - Win32 Debug" "apr - Win32 Debug" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" cd "..\..\support" "apr - Win32 DebugCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF !IF "$(CFG)" == "htdigest - Win32 Release" "aprutil - Win32 Release" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" cd "..\..\support" "aprutil - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "htdigest - Win32 Debug" "aprutil - Win32 Debug" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" cd "..\..\support" "aprutil - Win32 DebugCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF SOURCE=.\htdigest.c "$(INTDIR)\htdigest.obj" : $(SOURCE) "$(INTDIR)" SOURCE=..\build\win32\httpd.rc !IF "$(CFG)" == "htdigest - Win32 Release" "$(INTDIR)\htdigest.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\htdigest.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="htdigest.exe" /d LONG_NAME="Apache htdigest command line utility" $(SOURCE) !ELSEIF "$(CFG)" == "htdigest - Win32 Debug" "$(INTDIR)\htdigest.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\htdigest.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="htdigest.exe" /d LONG_NAME="Apache htdigest command line utility" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/support/rotatelogs.c0000644000000000000500000006163513262704310015310 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr.h" #include "apr_lib.h" #include "apr_strings.h" #include "apr_errno.h" #include "apr_file_io.h" #include "apr_file_info.h" #include "apr_general.h" #include "apr_time.h" #include "apr_getopt.h" #include "apr_thread_proc.h" #include "apr_signal.h" #if APR_FILES_AS_SOCKETS #include "apr_poll.h" #endif #if APR_HAVE_STDLIB_H #include #endif #define APR_WANT_STRFUNC #include "apr_want.h" #define BUFSIZE 65536 #define ROTATE_NONE 0 #define ROTATE_NEW 1 #define ROTATE_TIME 2 #define ROTATE_SIZE 3 #define ROTATE_FORCE 4 static const char *const ROTATE_REASONS[] = { "None", "Open a new file", "Time interval expired", "Maximum size reached", "Forced rotation", NULL }; typedef struct rotate_config rotate_config_t; struct rotate_config { unsigned int sRotation; int tRotation; int utc_offset; int use_localtime; int use_strftime; int force_open; int verbose; int echo; char *szLogRoot; int truncate; const char *linkfile; const char *postrotate_prog; #if APR_FILES_AS_SOCKETS int create_empty; #endif int num_files; int create_path; }; typedef struct rotate_status rotate_status_t; /* "adjusted_time_t" is used to store Unix time (seconds since epoch) * which has been adjusted for some timezone fudge factor. It should * be used for storing the return values from get_now(). A typedef is * used since this type is similar to time_t, but different. */ typedef long adjusted_time_t; /* Structure to contain relevant logfile state: fd, pool and * filename. */ struct logfile { apr_pool_t *pool; apr_file_t *fd; char name[APR_PATH_MAX]; }; struct rotate_status { struct logfile current; /* current logfile. */ apr_pool_t *pool; /* top-level pool */ int rotateReason; adjusted_time_t tLogEnd; int nMessCount; int fileNum; }; static rotate_config_t config; static rotate_status_t status; static void usage(const char *argv0, const char *reason) { if (reason) { fprintf(stderr, "%s\n", reason); } fprintf(stderr, #if APR_FILES_AS_SOCKETS "Usage: %s [-v] [-l] [-L linkname] [-p prog] [-f] [-D] [-t] [-e] [-c] [-n number] " #else "Usage: %s [-v] [-l] [-L linkname] [-p prog] [-f] [-D] [-t] [-e] [-n number] " #endif "{|(B|K|M|G)} " "[offset minutes from UTC]\n\n", argv0); #ifdef OS2 fprintf(stderr, "Add this:\n\nTransferLog \"|%s.exe /some/where 86400\"\n\n", argv0); #else fprintf(stderr, "Add this:\n\nTransferLog \"|%s /some/where 86400\"\n\n", argv0); fprintf(stderr, "or \n\nTransferLog \"|%s /some/where 5M\"\n\n", argv0); #endif fprintf(stderr, "to httpd.conf. By default, the generated name will be\n" ".nnnn where nnnn is the system time at which the log\n" "nominally starts (N.B. if using a rotation time, the time will\n" "always be a multiple of the rotation time, so you can synchronize\n" "cron scripts with it). If contains strftime conversion\n" "specifications, those will be used instead. At the end of each\n" "rotation time or when the file size is reached a new log is\n" "started.\n" "\n" "Options:\n" " -v Verbose operation. Messages are written to stderr.\n" " -l Base rotation on local time instead of UTC.\n" " -L path Create hard link from current log to specified path.\n" " -p prog Run specified program after opening a new log file. See below.\n" " -f Force opening of log on program start.\n" " -D Create parent directories of log file.\n" " -t Truncate logfile instead of rotating, tail friendly.\n" " -e Echo log to stdout for further processing.\n" #if APR_FILES_AS_SOCKETS " -c Create log even if it is empty.\n" #endif " -n num Rotate file by adding suffixes '.1', '.2', ..., '.num'.\n" "\n" "The program for '-p' is invoked as \"[prog] []\"\n" "where is the filename of the newly opened logfile, and\n" ", if given, is the filename of the previously used logfile.\n" "\n"); exit(1); } /* This function returns the current Unix time (time_t) adjusted for * any configured or derived local time offset. The offset applied is * returned via *offset. */ static adjusted_time_t get_now(rotate_config_t *config, apr_int32_t *offset) { apr_time_t tNow = apr_time_now(); apr_int32_t utc_offset; if (config->use_localtime) { /* Check for our UTC offset before using it, since it might * change if there's a switch between standard and daylight * savings time. */ apr_time_exp_t lt; apr_time_exp_lt(<, tNow); utc_offset = lt.tm_gmtoff; } else { utc_offset = config->utc_offset; } if (offset) *offset = utc_offset; return apr_time_sec(tNow) + utc_offset; } /* * Close a file and destroy the associated pool. */ static void close_logfile(rotate_config_t *config, struct logfile *logfile) { if (config->verbose) { fprintf(stderr, "Closing file %s\n", logfile->name); } apr_file_close(logfile->fd); apr_pool_destroy(logfile->pool); } /* * Dump the configuration parsing result to STDERR. */ static void dumpConfig (rotate_config_t *config) { fprintf(stderr, "Rotation time interval: %12d\n", config->tRotation); fprintf(stderr, "Rotation size interval: %12d\n", config->sRotation); fprintf(stderr, "Rotation time UTC offset: %12d\n", config->utc_offset); fprintf(stderr, "Rotation based on localtime: %12s\n", config->use_localtime ? "yes" : "no"); fprintf(stderr, "Rotation file date pattern: %12s\n", config->use_strftime ? "yes" : "no"); fprintf(stderr, "Rotation file forced open: %12s\n", config->force_open ? "yes" : "no"); fprintf(stderr, "Create parent directories: %12s\n", config->create_path ? "yes" : "no"); fprintf(stderr, "Rotation verbose: %12s\n", config->verbose ? "yes" : "no"); #if APR_FILES_AS_SOCKETS fprintf(stderr, "Rotation create empty logs: %12s\n", config->create_empty ? "yes" : "no"); #endif fprintf(stderr, "Rotation file name: %21s\n", config->szLogRoot); fprintf(stderr, "Post-rotation prog: %21s\n", config->postrotate_prog ? config->postrotate_prog : "not used"); } /* * Check whether we need to rotate. * Possible reasons are: * - No log file open (ROTATE_NEW) * - User forces us to rotate (ROTATE_FORCE) * - Our log file size is already bigger than the * allowed maximum (ROTATE_SIZE) * - The next log time interval expired (ROTATE_TIME) * * When size and time constraints are both given, * it suffices that one of them is fulfilled. */ static void checkRotate(rotate_config_t *config, rotate_status_t *status) { if (status->current.fd == NULL) { status->rotateReason = ROTATE_NEW; } else if (config->sRotation) { apr_finfo_t finfo; apr_off_t current_size = -1; if (apr_file_info_get(&finfo, APR_FINFO_SIZE, status->current.fd) == APR_SUCCESS) { current_size = finfo.size; } if (current_size > config->sRotation) { status->rotateReason = ROTATE_SIZE; } else if (config->tRotation) { if (get_now(config, NULL) >= status->tLogEnd) { status->rotateReason = ROTATE_TIME; } } } else if (config->tRotation) { if (get_now(config, NULL) >= status->tLogEnd) { status->rotateReason = ROTATE_TIME; } } else { fprintf(stderr, "No rotation time or size specified\n"); exit(2); } if (status->rotateReason != ROTATE_NONE && config->verbose) { fprintf(stderr, "File rotation needed, reason: %s\n", ROTATE_REASONS[status->rotateReason]); } } /* * Handle post-rotate processing. */ static void post_rotate(apr_pool_t *pool, struct logfile *newlog, rotate_config_t *config, rotate_status_t *status) { apr_status_t rv; char error[120]; apr_procattr_t *pattr; const char *argv[4]; apr_proc_t proc; /* Handle link file, if configured. */ if (config->linkfile) { apr_file_remove(config->linkfile, newlog->pool); if (config->verbose) { fprintf(stderr, "Linking %s to %s\n", newlog->name, config->linkfile); } rv = apr_file_link(newlog->name, config->linkfile); if (rv != APR_SUCCESS) { apr_strerror(rv, error, sizeof error); fprintf(stderr, "Error linking file %s to %s (%s)\n", newlog->name, config->linkfile, error); exit(2); } } if (!config->postrotate_prog) { /* Nothing more to do. */ return; } /* Collect any zombies from a previous run, but don't wait. */ while (apr_proc_wait_all_procs(&proc, NULL, NULL, APR_NOWAIT, pool) == APR_CHILD_DONE) /* noop */; if ((rv = apr_procattr_create(&pattr, pool)) != APR_SUCCESS) { fprintf(stderr, "post_rotate: apr_procattr_create failed for '%s': %s\n", config->postrotate_prog, apr_strerror(rv, error, sizeof(error))); return; } rv = apr_procattr_error_check_set(pattr, 1); if (rv == APR_SUCCESS) rv = apr_procattr_cmdtype_set(pattr, APR_PROGRAM_ENV); if (rv != APR_SUCCESS) { fprintf(stderr, "post_rotate: could not set up process attributes for '%s': %s\n", config->postrotate_prog, apr_strerror(rv, error, sizeof(error))); return; } argv[0] = config->postrotate_prog; argv[1] = newlog->name; if (status->current.fd) { argv[2] = status->current.name; argv[3] = NULL; } else { argv[2] = NULL; } if (config->verbose) fprintf(stderr, "Calling post-rotate program: %s\n", argv[0]); rv = apr_proc_create(&proc, argv[0], argv, NULL, pattr, pool); if (rv != APR_SUCCESS) { fprintf(stderr, "Could not spawn post-rotate process '%s': %s\n", config->postrotate_prog, apr_strerror(rv, error, sizeof(error))); return; } } /* After a error, truncate the current file and write out an error * message, which must be contained in message. The process is * terminated on failure. */ static void truncate_and_write_error(rotate_status_t *status, const char *message) { apr_size_t buflen = strlen(message); if (apr_file_trunc(status->current.fd, 0) != APR_SUCCESS) { fprintf(stderr, "Error truncating the file %s\n", status->current.name); exit(2); } if (apr_file_write_full(status->current.fd, message, buflen, NULL) != APR_SUCCESS) { fprintf(stderr, "Error writing error (%s) to the file %s\n", message, status->current.name); exit(2); } } /* * Open a new log file, and if successful * also close the old one. * * The timestamp for the calculation of the file * name of the new log file will be the actual millisecond * timestamp, except when a regular rotation based on a time * interval is configured and the previous interval * is over. Then the timestamp is the starting time * of the actual interval. */ static void doRotate(rotate_config_t *config, rotate_status_t *status) { apr_int32_t offset; adjusted_time_t now, tLogStart; apr_status_t rv; struct logfile newlog; int thisLogNum = -1; /* Retrieve local-time-adjusted-Unix-time. */ now = get_now(config, &offset); status->rotateReason = ROTATE_NONE; if (config->tRotation) { adjusted_time_t tLogEnd; tLogStart = (now / config->tRotation) * config->tRotation; tLogEnd = tLogStart + config->tRotation; /* * Check if rotation was forced and the last rotation * interval is not yet over. Use the value of now instead * of the time interval boundary for the file name then. */ if (tLogStart < status->tLogEnd) { tLogStart = now; } status->tLogEnd = tLogEnd; } else { tLogStart = now; } if (config->use_strftime) { apr_time_t tNow = apr_time_from_sec(tLogStart); apr_time_exp_t e; apr_size_t rs; /* Explode the local-time-adjusted-Unix-time into a struct tm, * first *reversing* local-time-adjustment applied by * get_now() if we are using localtime. */ if (config->use_localtime) apr_time_exp_lt(&e, tNow - apr_time_from_sec(offset)); else apr_time_exp_gmt(&e, tNow); apr_strftime(newlog.name, &rs, sizeof(newlog.name), config->szLogRoot, &e); } else { if (config->truncate) { apr_snprintf(newlog.name, sizeof(newlog.name), "%s", config->szLogRoot); } else if (config->num_files > 0) { if (status->fileNum == -1 || status->fileNum == (config->num_files - 1)) { thisLogNum = 0; apr_snprintf(newlog.name, sizeof(newlog.name), "%s", config->szLogRoot); } else { thisLogNum = status->fileNum + 1; apr_snprintf(newlog.name, sizeof(newlog.name), "%s.%d", config->szLogRoot, thisLogNum); } } else { apr_snprintf(newlog.name, sizeof(newlog.name), "%s.%010ld", config->szLogRoot, tLogStart); } } apr_pool_create(&newlog.pool, status->pool); if (config->create_path) { char *ptr = strrchr(newlog.name, '/'); if (ptr && ptr > newlog.name) { char *path = apr_pstrmemdup(newlog.pool, newlog.name, ptr - newlog.name); if (config->verbose) { fprintf(stderr, "Creating directory tree %s\n", path); } rv = apr_dir_make_recursive(path, APR_FPROT_OS_DEFAULT, newlog.pool); if (rv != APR_SUCCESS) { char error[120]; apr_strerror(rv, error, sizeof error); fprintf(stderr, "Could not create directory '%s' (%s)\n", path, error); exit(2); } } } if (config->verbose) { fprintf(stderr, "Opening file %s\n", newlog.name); } rv = apr_file_open(&newlog.fd, newlog.name, APR_WRITE | APR_CREATE | APR_APPEND | (config->truncate || (config->num_files > 0 && status->current.fd) ? APR_TRUNCATE : 0), APR_OS_DEFAULT, newlog.pool); if (rv == APR_SUCCESS) { /* Handle post-rotate processing. */ post_rotate(newlog.pool, &newlog, config, status); status->fileNum = thisLogNum; /* Close out old (previously 'current') logfile, if any. */ if (status->current.fd) { close_logfile(config, &status->current); } /* New log file is now 'current'. */ status->current = newlog; } else { char *error = apr_psprintf(newlog.pool, "%pm", &rv); char *message; /* Uh-oh. Failed to open the new log file. Try to clear * the previous log file, note the lost log entries, * and keep on truckin'. */ if (status->current.fd == NULL) { fprintf(stderr, "Could not open log file '%s' (%s)\n", newlog.name, error); exit(2); } /* Try to keep this error message constant length * in case it occurs several times. */ message = apr_psprintf(newlog.pool, "Resetting log file due to error opening " "new log file, %10d messages lost: %-25.25s\n", status->nMessCount, error); truncate_and_write_error(status, message); /* Throw away new state; it isn't going to be used. */ apr_pool_destroy(newlog.pool); } status->nMessCount = 0; } /* * Get a size or time param from a string. * Parameter 'last' indicates, whether the * argument is the last commadnline argument. * UTC offset is only allowed as a last argument * in order to make is distinguishable from the * rotation interval time. */ static const char *get_time_or_size(rotate_config_t *config, const char *arg, int last) { char *ptr = NULL; /* Byte multiplier */ unsigned int mult = 1; if ((ptr = strchr(arg, 'B')) != NULL) { /* Found KB size */ mult = 1; } else if ((ptr = strchr(arg, 'K')) != NULL) { /* Found KB size */ mult = 1024; } else if ((ptr = strchr(arg, 'M')) != NULL) { /* Found MB size */ mult = 1024 * 1024; } else if ((ptr = strchr(arg, 'G')) != NULL) { /* Found GB size */ mult = 1024 * 1024 * 1024; } if (ptr) { /* rotation based on file size */ if (config->sRotation > 0) { return "Rotation size parameter allowed only once"; } if (*(ptr+1) == '\0') { config->sRotation = atoi(arg) * mult; } if (config->sRotation == 0) { return "Invalid rotation size parameter"; } } else if ((config->sRotation > 0 || config->tRotation > 0) && last) { /* rotation based on elapsed time */ if (config->use_localtime) { return "UTC offset parameter is not valid with -l"; } config->utc_offset = atoi(arg) * 60; } else { /* rotation based on elapsed time */ if (config->tRotation > 0) { return "Rotation time parameter allowed only once"; } config->tRotation = atoi(arg); if (config->tRotation <= 0) { return "Invalid rotation time parameter"; } } return NULL; } int main (int argc, const char * const argv[]) { char buf[BUFSIZE]; apr_size_t nRead, nWrite; apr_file_t *f_stdin; apr_file_t *f_stdout; apr_getopt_t *opt; apr_status_t rv; char c; const char *opt_arg; const char *err = NULL; #if APR_FILES_AS_SOCKETS apr_pollfd_t pollfd = { 0 }; apr_status_t pollret = APR_SUCCESS; long polltimeout; #endif apr_app_initialize(&argc, &argv, NULL); atexit(apr_terminate); memset(&config, 0, sizeof config); memset(&status, 0, sizeof status); status.rotateReason = ROTATE_NONE; apr_pool_create(&status.pool, NULL); apr_getopt_init(&opt, status.pool, argc, argv); #if APR_FILES_AS_SOCKETS while ((rv = apr_getopt(opt, "lL:p:fDtvecn:", &c, &opt_arg)) == APR_SUCCESS) { #else while ((rv = apr_getopt(opt, "lL:p:fDtven:", &c, &opt_arg)) == APR_SUCCESS) { #endif switch (c) { case 'l': config.use_localtime = 1; break; case 'L': config.linkfile = opt_arg; break; case 'p': config.postrotate_prog = opt_arg; #ifdef SIGCHLD /* Prevent creation of zombies (on modern Unix systems). */ apr_signal(SIGCHLD, SIG_IGN); #endif break; case 'f': config.force_open = 1; break; case 'D': config.create_path = 1; break; case 't': config.truncate = 1; break; case 'v': config.verbose = 1; break; case 'e': config.echo = 1; break; #if APR_FILES_AS_SOCKETS case 'c': config.create_empty = 1; break; #endif case 'n': config.num_files = atoi(opt_arg); status.fileNum = -1; break; } } if (rv != APR_EOF) { usage(argv[0], NULL /* specific error message already issued */ ); } /* * After the initial flags we need 2 to 4 arguments, * the file name, either the rotation interval time or size * or both of them, and optionally the UTC offset. */ if ((argc - opt->ind < 2) || (argc - opt->ind > 4) ) { usage(argv[0], "Incorrect number of arguments"); } rv = apr_filepath_merge(&config.szLogRoot, "", argv[opt->ind++], APR_FILEPATH_TRUENAME, status.pool); if (rv != APR_SUCCESS && rv != APR_EPATHWILD) { usage(argv[0], "Invalid filename given"); } /* Read in the remaining flags, namely time, size and UTC offset. */ for(; opt->ind < argc; opt->ind++) { if ((err = get_time_or_size(&config, argv[opt->ind], opt->ind < argc - 1 ? 0 : 1)) != NULL) { usage(argv[0], err); } } config.use_strftime = (strchr(config.szLogRoot, '%') != NULL); if (config.use_strftime && config.num_files > 0) { fprintf(stderr, "Cannot use -n with %% in filename\n"); exit(1); } if (status.fileNum == -1 && config.num_files < 1) { fprintf(stderr, "Invalid -n argument\n"); exit(1); } if (apr_file_open_stdin(&f_stdin, status.pool) != APR_SUCCESS) { fprintf(stderr, "Unable to open stdin\n"); exit(1); } if (apr_file_open_stdout(&f_stdout, status.pool) != APR_SUCCESS) { fprintf(stderr, "Unable to open stdout\n"); exit(1); } /* * Write out result of config parsing if verbose is set. */ if (config.verbose) { dumpConfig(&config); } #if APR_FILES_AS_SOCKETS if (config.create_empty && config.tRotation) { pollfd.p = status.pool; pollfd.desc_type = APR_POLL_FILE; pollfd.reqevents = APR_POLLIN; pollfd.desc.f = f_stdin; } #endif /* * Immediately open the logfile as we start, if we were forced * to do so via '-f'. */ if (config.force_open) { doRotate(&config, &status); } for (;;) { nRead = sizeof(buf); #if APR_FILES_AS_SOCKETS if (config.create_empty && config.tRotation) { polltimeout = status.tLogEnd ? status.tLogEnd - get_now(&config, NULL) : config.tRotation; if (polltimeout <= 0) { pollret = APR_TIMEUP; } else { pollret = apr_poll(&pollfd, 1, &pollret, apr_time_from_sec(polltimeout)); } } if (pollret == APR_SUCCESS) { rv = apr_file_read(f_stdin, buf, &nRead); if (APR_STATUS_IS_EOF(rv)) { break; } else if (rv != APR_SUCCESS) { exit(3); } } else if (pollret == APR_TIMEUP) { *buf = 0; nRead = 0; } else { fprintf(stderr, "Unable to poll stdin\n"); exit(5); } #else /* APR_FILES_AS_SOCKETS */ rv = apr_file_read(f_stdin, buf, &nRead); if (APR_STATUS_IS_EOF(rv)) { break; } else if (rv != APR_SUCCESS) { exit(3); } #endif /* APR_FILES_AS_SOCKETS */ checkRotate(&config, &status); if (status.rotateReason != ROTATE_NONE) { doRotate(&config, &status); } nWrite = nRead; rv = apr_file_write_full(status.current.fd, buf, nWrite, &nWrite); if (nWrite != nRead) { apr_off_t cur_offset; apr_pool_t *pool; char *error; cur_offset = 0; if (apr_file_seek(status.current.fd, APR_CUR, &cur_offset) != APR_SUCCESS) { cur_offset = -1; } status.nMessCount++; apr_pool_create(&pool, status.pool); error = apr_psprintf(pool, "Error %d writing to log file at offset %" APR_OFF_T_FMT ". %10d messages lost (%pm)\n", rv, cur_offset, status.nMessCount, &rv); truncate_and_write_error(&status, error); apr_pool_destroy(pool); } else { status.nMessCount++; } if (config.echo) { if (apr_file_write_full(f_stdout, buf, nRead, &nWrite)) { fprintf(stderr, "Unable to write to stdout\n"); exit(4); } } } return 0; /* reached only at stdin EOF. */ } httpd-2.4.41/support/NWGNUhtpasswd0000644000000000000500000001051112061606345015350 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(NWOS) \ $(APR)/include \ $(APRUTIL)/include \ $(APR)/misc/netware \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = htpasswd # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) HT Password Utility for NetWare # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = htpasswd # # This is used by the '-screenname' directive. If left blank, # 'Apache for NetWare' Thread will be used. # NLM_SCREEN_NAME = htpasswd Password Management # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = AUTOUNLOAD, PSEUDOPREEMPTION # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/htpasswd.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/htpasswd.o \ $(OBJDIR)/passwd_common.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/support/logresolve.mak0000644000000000000500000002065512701473373015642 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on logresolve.dsp !IF "$(CFG)" == "" CFG=logresolve - Win32 Debug !MESSAGE No configuration specified. Defaulting to logresolve - Win32 Debug. !ENDIF !IF "$(CFG)" != "logresolve - Win32 Release" && "$(CFG)" != "logresolve - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "logresolve.mak" CFG="logresolve - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "logresolve - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "logresolve - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "logresolve - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\logresolve.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Release" "apr - Win32 Release" "$(OUTDIR)\logresolve.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 ReleaseCLEAN" "aprutil - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\logresolve.obj" -@erase "$(INTDIR)\logresolve.res" -@erase "$(INTDIR)\logresolve_src.idb" -@erase "$(INTDIR)\logresolve_src.pdb" -@erase "$(OUTDIR)\logresolve.exe" -@erase "$(OUTDIR)\logresolve.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\logresolve_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\logresolve.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="logresolve.exe" /d LONG_NAME="Apache logresolve command line pipe" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\logresolve.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\logresolve.pdb" /debug /out:"$(OUTDIR)\logresolve.exe" /opt:ref LINK32_OBJS= \ "$(INTDIR)\logresolve.obj" \ "$(INTDIR)\logresolve.res" \ "..\srclib\apr\LibR\apr-1.lib" \ "..\srclib\apr-util\LibR\aprutil-1.lib" "$(OUTDIR)\logresolve.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\logresolve.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\logresolve.exe" if exist .\Release\logresolve.exe.manifest mt.exe -manifest .\Release\logresolve.exe.manifest -outputresource:.\Release\logresolve.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "logresolve - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\logresolve.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Debug" "apr - Win32 Debug" "$(OUTDIR)\logresolve.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 DebugCLEAN" "aprutil - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\logresolve.obj" -@erase "$(INTDIR)\logresolve.res" -@erase "$(INTDIR)\logresolve_src.idb" -@erase "$(INTDIR)\logresolve_src.pdb" -@erase "$(OUTDIR)\logresolve.exe" -@erase "$(OUTDIR)\logresolve.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\logresolve_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\logresolve.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="logresolve.exe" /d LONG_NAME="Apache logresolve command line pipe" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\logresolve.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\logresolve.pdb" /debug /out:"$(OUTDIR)\logresolve.exe" LINK32_OBJS= \ "$(INTDIR)\logresolve.obj" \ "$(INTDIR)\logresolve.res" \ "..\srclib\apr\LibD\apr-1.lib" \ "..\srclib\apr-util\LibD\aprutil-1.lib" "$(OUTDIR)\logresolve.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\logresolve.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\logresolve.exe" if exist .\Debug\logresolve.exe.manifest mt.exe -manifest .\Debug\logresolve.exe.manifest -outputresource:.\Debug\logresolve.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("logresolve.dep") !INCLUDE "logresolve.dep" !ELSE !MESSAGE Warning: cannot find "logresolve.dep" !ENDIF !ENDIF !IF "$(CFG)" == "logresolve - Win32 Release" || "$(CFG)" == "logresolve - Win32 Debug" !IF "$(CFG)" == "logresolve - Win32 Release" "apr - Win32 Release" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" cd "..\..\support" "apr - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "logresolve - Win32 Debug" "apr - Win32 Debug" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" cd "..\..\support" "apr - Win32 DebugCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF !IF "$(CFG)" == "logresolve - Win32 Release" "aprutil - Win32 Release" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" cd "..\..\support" "aprutil - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "logresolve - Win32 Debug" "aprutil - Win32 Debug" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" cd "..\..\support" "aprutil - Win32 DebugCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF SOURCE=..\build\win32\httpd.rc !IF "$(CFG)" == "logresolve - Win32 Release" "$(INTDIR)\logresolve.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\logresolve.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="logresolve.exe" /d LONG_NAME="Apache logresolve command line pipe" $(SOURCE) !ELSEIF "$(CFG)" == "logresolve - Win32 Debug" "$(INTDIR)\logresolve.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\logresolve.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="logresolve.exe" /d LONG_NAME="Apache logresolve command line pipe" $(SOURCE) !ENDIF SOURCE=.\logresolve.c "$(INTDIR)\logresolve.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/support/config.m40000644000000000000500000001122211547410541014457 0ustar rootsrchtpasswd_LTFLAGS="" htdigest_LTFLAGS="" rotatelogs_LTFLAGS="" logresolve_LTFLAGS="" htdbm_LTFLAGS="" ab_LTFLAGS="" checkgid_LTFLAGS="" htcacheclean_LTFLAGS="" httxt2dbm_LTFLAGS="" fcgistarter_LTFLAGS="" AC_ARG_ENABLE(static-support,APACHE_HELP_STRING(--enable-static-support,Build a statically linked version of the support binaries),[ if test "$enableval" = "yes" ; then APR_ADDTO(htpasswd_LTFLAGS, [-static]) APR_ADDTO(htdigest_LTFLAGS, [-static]) APR_ADDTO(rotatelogs_LTFLAGS, [-static]) APR_ADDTO(logresolve_LTFLAGS, [-static]) APR_ADDTO(htdbm_LTFLAGS, [-static]) APR_ADDTO(ab_LTFLAGS, [-static]) APR_ADDTO(checkgid_LTFLAGS, [-static]) APR_ADDTO(htcacheclean_LTFLAGS, [-static]) APR_ADDTO(httxt2dbm_LTFLAGS, [-static]) APR_ADDTO(fcgistarter_LTFLAGS, [-static]) fi ]) AC_ARG_ENABLE(static-htpasswd,APACHE_HELP_STRING(--enable-static-htpasswd,Build a statically linked version of htpasswd),[ if test "$enableval" = "yes" ; then APR_ADDTO(htpasswd_LTFLAGS, [-static]) else APR_REMOVEFROM(htpasswd_LTFLAGS, [-static]) fi ]) APACHE_SUBST(htpasswd_LTFLAGS) AC_ARG_ENABLE(static-htdigest,APACHE_HELP_STRING(--enable-static-htdigest,Build a statically linked version of htdigest),[ if test "$enableval" = "yes" ; then APR_ADDTO(htdigest_LTFLAGS, [-static]) else APR_REMOVEFROM(htdigest_LTFLAGS, [-static]) fi ]) APACHE_SUBST(htdigest_LTFLAGS) AC_ARG_ENABLE(static-rotatelogs,APACHE_HELP_STRING(--enable-static-rotatelogs,Build a statically linked version of rotatelogs),[ if test "$enableval" = "yes" ; then APR_ADDTO(rotatelogs_LTFLAGS, [-static]) else APR_REMOVEFROM(rotatelogs_LTFLAGS, [-static]) fi ]) APACHE_SUBST(rotatelogs_LTFLAGS) AC_ARG_ENABLE(static-logresolve,APACHE_HELP_STRING(--enable-static-logresolve,Build a statically linked version of logresolve),[ if test "$enableval" = "yes" ; then APR_ADDTO(logresolve_LTFLAGS, [-static]) else APR_REMOVEFROM(logresolve_LTFLAGS, [-static]) fi ]) APACHE_SUBST(logresolve_LTFLAGS) AC_ARG_ENABLE(static-htdbm,APACHE_HELP_STRING(--enable-static-htdbm,Build a statically linked version of htdbm),[ if test "$enableval" = "yes" ; then APR_ADDTO(htdbm_LTFLAGS, [-static]) else APR_REMOVEFROM(htdbm_LTFLAGS, [-static]) fi ]) APACHE_SUBST(htdbm_LTFLAGS) AC_ARG_ENABLE(static-ab,APACHE_HELP_STRING(--enable-static-ab,Build a statically linked version of ab),[ if test "$enableval" = "yes" ; then APR_ADDTO(ab_LTFLAGS, [-static]) else APR_REMOVEFROM(ab_LTFLAGS, [-static]) fi ]) APACHE_SUBST(ab_LTFLAGS) AC_ARG_ENABLE(static-checkgid,APACHE_HELP_STRING(--enable-static-checkgid,Build a statically linked version of checkgid),[ if test "$enableval" = "yes" ; then APR_ADDTO(checkgid_LTFLAGS, [-static]) else APR_REMOVEFROM(checkgid_LTFLAGS, [-static]) fi ]) APACHE_SUBST(checkgid_LTFLAGS) AC_ARG_ENABLE(static-htcacheclean,APACHE_HELP_STRING(--enable-static-htcacheclean,Build a statically linked version of htcacheclean),[ if test "$enableval" = "yes" ; then APR_ADDTO(htcacheclean_LTFLAGS, [-static]) else APR_REMOVEFROM(htcacheclean_LTFLAGS, [-static]) fi ]) APACHE_SUBST(htcacheclean_LTFLAGS) AC_ARG_ENABLE(static-httxt2dbm,APACHE_HELP_STRING(--enable-static-httxt2dbm,Build a statically linked version of httxt2dbm),[ if test "$enableval" = "yes" ; then APR_ADDTO(httxt2dbm_LTFLAGS, [-static]) else APR_REMOVEFROM(httxt2dbm, [-static]) fi ]) APACHE_SUBST(httxt2dbm_LTFLAGS) AC_ARG_ENABLE(static-fcgistarter,APACHE_HELP_STRING(--enable-static-fcgistarter,Build a statically linked version of fcgistarter),[ if test "$enableval" = "yes" ; then APR_ADDTO(fcgistarter_LTFLAGS, [-static]) else APR_REMOVEFROM(fcgistarter, [-static]) fi ]) APACHE_SUBST(fcgistarter_LTFLAGS) # Configure or check which of the non-portable support programs can be enabled. NONPORTABLE_SUPPORT="" case $host in *mingw*) ;; *) NONPORTABLE_SUPPORT="checkgid fcgistarter" ;; esac APACHE_SUBST(NONPORTABLE_SUPPORT) # Configure the ulimit -n command used by apachectl. case $host in *aix*) # this works in any locale, unlike the default command below, which # fails in a non-English locale if the hard limit is unlimited # since the display of the limit will translate "unlimited", but # ulimit only accepts English "unlimited" on input APACHECTL_ULIMIT="ulimit -S -n unlimited" ;; *alpha*-dec-osf*) # Tru64: -H is for setting, not retrieving APACHECTL_ULIMIT="ulimit -S -n \`ulimit -h -n\`" ;; *) if TMP_ULIMIT=`ulimit -H -n` && ulimit -S -n $TMP_ULIMIT >/dev/null 2>&1; then APACHECTL_ULIMIT="ulimit -S -n \`ulimit -H -n\`" else APACHECTL_ULIMIT="" fi ;; esac APACHE_SUBST(APACHECTL_ULIMIT) httpd-2.4.41/support/NWGNUhtdigest0000644000000000000500000001044711540546347015344 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(NWOS) \ $(APR)/include \ $(APRUTIL)/include \ $(APR)/misc/netware \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = htdigest # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) HT Digest Utility for NetWare # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = htdigest # # This is used by the '-screenname' directive. If left blank, # 'Apache for NetWare' Thread will be used. # NLM_SCREEN_NAME = Digest Password Management # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = AUTOUNLOAD, PSEUDOPREEMPTION # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/htdigest.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/htdigest.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/support/fcgistarter.c0000644000000000000500000001344112204401564015432 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #if APR_HAVE_STDLIB_H #include /* For EXIT_SUCCESS, EXIT_FAILURE */ #endif #if APR_HAVE_UNISTD_H #include /* For execl */ #endif static const char *usage_message = "usage: fcgistarter -c -p [-i -N ]\n" "\n" "If an interface is not specified, any available will be used.\n"; static void usage(void) { fprintf(stderr, "%s", usage_message); exit(EXIT_FAILURE); } static void exit_error(apr_status_t rv, const char *func) { char buffer[1024]; fprintf(stderr, "%s: %s\n", func, apr_strerror(rv, buffer, sizeof(buffer))); exit(EXIT_FAILURE); } int main(int argc, const char * const argv[]) { apr_file_t *infd, *skwrapper; apr_sockaddr_t *skaddr; apr_getopt_t *gopt; apr_socket_t *skt; apr_pool_t *pool; apr_status_t rv; apr_proc_t proc; /* Command line arguments */ int num_to_start = 1, port = 0; const char *interface = NULL; const char *command = NULL; apr_app_initialize(&argc, &argv, NULL); atexit(apr_terminate); apr_pool_create(&pool, NULL); rv = apr_getopt_init(&gopt, pool, argc, argv); if (rv) { return EXIT_FAILURE; } for (;;) { const char *arg; char opt; rv = apr_getopt(gopt, "c:p:i:N:", &opt, &arg); if (APR_STATUS_IS_EOF(rv)) { break; } else if (rv) { usage(); } else { switch (opt) { case 'c': command = arg; break; case 'p': port = atoi(arg); if (! port) { usage(); } break; case 'i': interface = arg; break; case 'N': num_to_start = atoi(arg); if (! num_to_start) { usage(); } break; default: break; } } } if (! command || ! port) { usage(); } rv = apr_sockaddr_info_get(&skaddr, interface, APR_UNSPEC, port, 0, pool); if (rv) { exit_error(rv, "apr_sockaddr_info_get"); } rv = apr_socket_create(&skt, skaddr->family, SOCK_STREAM, APR_PROTO_TCP, pool); if (rv) { exit_error(rv, "apr_socket_create"); } rv = apr_socket_opt_set(skt, APR_SO_REUSEADDR, 1); if (rv) { exit_error(rv, "apr_socket_opt_set(APR_SO_REUSEADDR)"); } rv = apr_socket_bind(skt, skaddr); if (rv) { exit_error(rv, "apr_socket_bind"); } rv = apr_socket_listen(skt, 1024); if (rv) { exit_error(rv, "apr_socket_listen"); } rv = apr_proc_detach(APR_PROC_DETACH_DAEMONIZE); if (rv) { exit_error(rv, "apr_proc_detach"); } #if defined(WIN32) || defined(OS2) || defined(NETWARE) #error "Please implement me." #else while (--num_to_start >= 0) { rv = apr_proc_fork(&proc, pool); if (rv == APR_INCHILD) { apr_os_file_t oft = 0; apr_os_sock_t oskt; /* Ok, so we need a file that has file descriptor 0 (which * FastCGI wants), but points to our socket. This isn't really * possible in APR, so we cheat a bit. I have no idea how to * do this on a non-unix platform, so for now this is platform * specific. Ick. * * Note that this has to happen post-detach, otherwise fd 0 * gets closed during apr_proc_detach and it's all for nothing. * * Unfortunately, doing this post detach means we have no way * to let anyone know if there's a problem at this point :( */ rv = apr_os_file_put(&infd, &oft, APR_READ | APR_WRITE, pool); if (rv) { exit(EXIT_FAILURE); } rv = apr_os_sock_get(&oskt, skt); if (rv) { exit(EXIT_FAILURE); } rv = apr_os_file_put(&skwrapper, &oskt, APR_READ | APR_WRITE, pool); if (rv) { exit(EXIT_FAILURE); } rv = apr_file_dup2(infd, skwrapper, pool); if (rv) { exit(EXIT_FAILURE); } /* XXX Can't use apr_proc_create because there's no way to get * infd into the procattr without going through another dup2, * which means by the time it gets to the fastcgi process it * is no longer fd 0, so it doesn't work. Sigh. */ execl(command, command, NULL); } else if (rv == APR_INPARENT) { if (num_to_start == 0) { apr_socket_close(skt); } } else { exit_error(rv, "apr_proc_fork"); } } #endif return EXIT_SUCCESS; } httpd-2.4.41/support/abs.dep0000644000000000000500000000240712674411515014220 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by abs.mak .\ab.c : \ "..\include\ap_release.h"\ "..\srclib\apr-util\include\apr_base64.h"\ "..\srclib\apr-util\include\apr_xlate.h"\ "..\srclib\apr-util\include\apu.h"\ "..\srclib\apr\include\apr.h"\ "..\srclib\apr\include\apr_allocator.h"\ "..\srclib\apr\include\apr_dso.h"\ "..\srclib\apr\include\apr_errno.h"\ "..\srclib\apr\include\apr_file_info.h"\ "..\srclib\apr\include\apr_file_io.h"\ "..\srclib\apr\include\apr_general.h"\ "..\srclib\apr\include\apr_getopt.h"\ "..\srclib\apr\include\apr_global_mutex.h"\ "..\srclib\apr\include\apr_inherit.h"\ "..\srclib\apr\include\apr_lib.h"\ "..\srclib\apr\include\apr_network_io.h"\ "..\srclib\apr\include\apr_poll.h"\ "..\srclib\apr\include\apr_pools.h"\ "..\srclib\apr\include\apr_portable.h"\ "..\srclib\apr\include\apr_proc_mutex.h"\ "..\srclib\apr\include\apr_shm.h"\ "..\srclib\apr\include\apr_signal.h"\ "..\srclib\apr\include\apr_strings.h"\ "..\srclib\apr\include\apr_tables.h"\ "..\srclib\apr\include\apr_thread_mutex.h"\ "..\srclib\apr\include\apr_thread_proc.h"\ "..\srclib\apr\include\apr_time.h"\ "..\srclib\apr\include\apr_user.h"\ "..\srclib\apr\include\apr_want.h"\ ..\build\win32\httpd.rc : \ "..\include\ap_release.h"\ httpd-2.4.41/support/htdigest.c0000644000000000000500000002043513160166751014741 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /****************************************************************************** ****************************************************************************** * NOTE! This program is not safe as a setuid executable! Do not make it * setuid! ****************************************************************************** *****************************************************************************/ /* * htdigest.c: simple program for manipulating digest passwd file for Apache * * by Alexei Kosut, based on htpasswd.c, by Rob McCool */ #include "apr.h" #include "apr_file_io.h" #include "apr_md5.h" #include "apr_lib.h" /* for apr_getpass() */ #include "apr_general.h" #include "apr_signal.h" #include "apr_strings.h" /* for apr_pstrdup() */ #define APR_WANT_STDIO #define APR_WANT_STRFUNC #include "apr_want.h" #if APR_HAVE_SYS_TYPES_H #include #endif #if APR_HAVE_STDLIB_H #include #endif #ifdef WIN32 #include #endif #if APR_CHARSET_EBCDIC #define LF '\n' #define CR '\r' #else #define LF 10 #define CR 13 #endif /* APR_CHARSET_EBCDIC */ #define MAX_STRING_LEN 256 #define MAX_LINE_LEN 768 apr_file_t *tfp = NULL; apr_file_t *errfile; apr_pool_t *cntxt; #if APR_CHARSET_EBCDIC apr_xlate_t *to_ascii; #endif static void cleanup_tempfile_and_exit(int rc) { if (tfp) { apr_file_close(tfp); } exit(rc); } static int getword(char *word, char *line, char stop) { int x = 0, y; for (x = 0; ((line[x]) && (line[x] != stop)); x++) { if (x == (MAX_STRING_LEN - 1)) { return 1; } word[x] = line[x]; } word[x] = '\0'; if (line[x]) ++x; y = 0; while ((line[y++] = line[x++])); return 0; } static int get_line(char *s, int n, apr_file_t *f) { int i = 0; char ch; apr_status_t rv = APR_EINVAL; /* we need 2 remaining bytes in buffer */ while (i < (n - 2) && ((rv = apr_file_getc(&ch, f)) == APR_SUCCESS) && (ch != '\n')) { s[i++] = ch; } /* First remaining byte potentially used here */ if (ch == '\n') s[i++] = ch; /* Second remaining byte used here */ s[i] = '\0'; if (rv != APR_SUCCESS) return 1; return 0; } static void putline(apr_file_t *f, char *l) { int x; for (x = 0; l[x]; x++) apr_file_putc(l[x], f); } static void add_password(const char *user, const char *realm, apr_file_t *f) { char *pw; apr_md5_ctx_t context; unsigned char digest[16]; char string[MAX_LINE_LEN]; /* this includes room for 2 * ':' + '\0' */ char pwin[MAX_STRING_LEN]; char pwv[MAX_STRING_LEN]; unsigned int i; apr_size_t len = sizeof(pwin); if (apr_password_get("New password: ", pwin, &len) != APR_SUCCESS) { apr_file_printf(errfile, "password too long"); cleanup_tempfile_and_exit(5); } len = sizeof(pwin); apr_password_get("Re-type new password: ", pwv, &len); if (strcmp(pwin, pwv) != 0) { apr_file_printf(errfile, "They don't match, sorry.\n"); cleanup_tempfile_and_exit(1); } pw = pwin; apr_file_printf(f, "%s:%s:", user, realm); /* Do MD5 stuff */ apr_snprintf(string, sizeof(string), "%s:%s:%s", user, realm, pw); apr_md5_init(&context); #if APR_CHARSET_EBCDIC apr_md5_set_xlate(&context, to_ascii); #endif apr_md5_update(&context, (unsigned char *) string, strlen(string)); apr_md5_final(digest, &context); for (i = 0; i < 16; i++) apr_file_printf(f, "%02x", digest[i]); apr_file_printf(f, "\n"); } static void usage(void) { apr_file_printf(errfile, "Usage: htdigest [-c] passwordfile realm username\n"); apr_file_printf(errfile, "The -c flag creates a new file.\n"); exit(1); } static void interrupted(void) { apr_file_printf(errfile, "Interrupted.\n"); cleanup_tempfile_and_exit(1); } static void terminate(void) { apr_terminate(); #ifdef NETWARE pressanykey(); #endif } int main(int argc, const char * const argv[]) { apr_file_t *f; apr_status_t rv; char tn[] = "htdigest.tmp.XXXXXX"; char *dirname; char user[MAX_STRING_LEN]; char realm[MAX_STRING_LEN]; char line[MAX_LINE_LEN]; char l[MAX_LINE_LEN]; char w[MAX_STRING_LEN]; char x[MAX_STRING_LEN]; int found; apr_app_initialize(&argc, &argv, NULL); atexit(terminate); apr_pool_create(&cntxt, NULL); apr_file_open_stderr(&errfile, cntxt); #if APR_CHARSET_EBCDIC rv = apr_xlate_open(&to_ascii, "ISO-8859-1", APR_DEFAULT_CHARSET, cntxt); if (rv) { apr_file_printf(errfile, "apr_xlate_open(): %pm (%d)\n", &rv, rv); exit(1); } #endif apr_signal(SIGINT, (void (*)(int)) interrupted); if (argc == 5) { if (strcmp(argv[1], "-c")) usage(); rv = apr_file_open(&f, argv[2], APR_WRITE | APR_CREATE, APR_OS_DEFAULT, cntxt); if (rv != APR_SUCCESS) { apr_file_printf(errfile, "Could not open passwd file %s for writing: %pm\n", argv[2], &rv); exit(1); } apr_cpystrn(user, argv[4], sizeof(user)); apr_cpystrn(realm, argv[3], sizeof(realm)); apr_file_printf(errfile, "Adding password for %s in realm %s.\n", user, realm); add_password(user, realm, f); apr_file_close(f); exit(0); } else if (argc != 4) usage(); if (apr_temp_dir_get((const char**)&dirname, cntxt) != APR_SUCCESS) { apr_file_printf(errfile, "%s: could not determine temp dir\n", argv[0]); exit(1); } dirname = apr_psprintf(cntxt, "%s/%s", dirname, tn); if (apr_file_mktemp(&tfp, dirname, 0, cntxt) != APR_SUCCESS) { apr_file_printf(errfile, "Could not open temp file %s.\n", dirname); exit(1); } if (apr_file_open(&f, argv[1], APR_READ, APR_OS_DEFAULT, cntxt) != APR_SUCCESS) { apr_file_printf(errfile, "Could not open passwd file %s for reading.\n", argv[1]); apr_file_printf(errfile, "Use -c option to create new one.\n"); cleanup_tempfile_and_exit(1); } apr_cpystrn(user, argv[3], sizeof(user)); apr_cpystrn(realm, argv[2], sizeof(realm)); found = 0; while (!(get_line(line, sizeof(line), f))) { if (found || (line[0] == '#') || (!line[0])) { putline(tfp, line); continue; } strcpy(l, line); if (getword(w, l, ':') || getword(x, l, ':')) { apr_file_printf(errfile, "The following line contains a string longer than the " "allowed maximum size (%i): %s\n", MAX_STRING_LEN - 1, line); cleanup_tempfile_and_exit(1); } if (strcmp(user, w) || strcmp(realm, x)) { putline(tfp, line); continue; } else { apr_file_printf(errfile, "Changing password for user %s in realm %s\n", user, realm); add_password(user, realm, tfp); found = 1; } } if (!found) { apr_file_printf(errfile, "Adding user %s in realm %s\n", user, realm); add_password(user, realm, tfp); } apr_file_close(f); /* The temporary file has all the data, just copy it to the new location. */ if (apr_file_copy(dirname, argv[1], APR_OS_DEFAULT, cntxt) != APR_SUCCESS) { apr_file_printf(errfile, "%s: unable to update file %s\n", argv[0], argv[1]); } apr_file_close(tfp); return 0; } httpd-2.4.41/support/fcgistarter.mak0000644000000000000500000002076512701473373016000 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on fcgistarter.dsp !IF "$(CFG)" == "" CFG=fcgistarter - Win32 Debug !MESSAGE No configuration specified. Defaulting to fcgistarter - Win32 Debug. !ENDIF !IF "$(CFG)" != "fcgistarter - Win32 Release" && "$(CFG)" != "fcgistarter - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "fcgistarter.mak" CFG="fcgistarter - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "fcgistarter - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "fcgistarter - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "fcgistarter - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\fcgistarter.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Release" "apr - Win32 Release" "$(OUTDIR)\fcgistarter.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 ReleaseCLEAN" "aprutil - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\fcgistarter.obj" -@erase "$(INTDIR)\fcgistarter.res" -@erase "$(INTDIR)\fcgistarter_src.idb" -@erase "$(INTDIR)\fcgistarter_src.pdb" -@erase "$(OUTDIR)\fcgistarter.exe" -@erase "$(OUTDIR)\fcgistarter.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../srclib/apr/include" /I "../srclib/apr-util/include" /I "../include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\fcgistarter_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\fcgistarter.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="fcgistarter.exe" /d LONG_NAME="Apache fcgi command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\fcgistarter.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\fcgistarter.pdb" /debug /out:"$(OUTDIR)\fcgistarter.exe" /opt:ref LINK32_OBJS= \ "$(INTDIR)\fcgistarter.obj" \ "$(INTDIR)\fcgistarter.res" \ "..\srclib\apr\LibR\apr-1.lib" \ "..\srclib\apr-util\LibR\aprutil-1.lib" "$(OUTDIR)\fcgistarter.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\fcgistarter.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\fcgistarter.exe" if exist .\Release\fcgistarter.exe.manifest mt.exe -manifest .\Release\fcgistarter.exe.manifest -outputresource:.\Release\fcgistarter.exe;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "fcgistarter - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\fcgistarter.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Debug" "apr - Win32 Debug" "$(OUTDIR)\fcgistarter.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 DebugCLEAN" "aprutil - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\fcgistarter.obj" -@erase "$(INTDIR)\fcgistarter.res" -@erase "$(INTDIR)\fcgistarter_src.idb" -@erase "$(INTDIR)\fcgistarter_src.pdb" -@erase "$(OUTDIR)\fcgistarter.exe" -@erase "$(OUTDIR)\fcgistarter.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /I "../include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\fcgistarter_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\fcgistarter.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="fcgistarter.exe" /d LONG_NAME="Apache fcgi command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\fcgistarter.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\fcgistarter.pdb" /debug /out:"$(OUTDIR)\fcgistarter.exe" LINK32_OBJS= \ "$(INTDIR)\fcgistarter.obj" \ "$(INTDIR)\fcgistarter.res" \ "..\srclib\apr\LibD\apr-1.lib" \ "..\srclib\apr-util\LibD\aprutil-1.lib" "$(OUTDIR)\fcgistarter.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\fcgistarter.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\fcgistarter.exe" if exist .\Debug\fcgistarter.exe.manifest mt.exe -manifest .\Debug\fcgistarter.exe.manifest -outputresource:.\Debug\fcgistarter.exe;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("fcgistarter.dep") !INCLUDE "fcgistarter.dep" !ELSE !MESSAGE Warning: cannot find "fcgistarter.dep" !ENDIF !ENDIF !IF "$(CFG)" == "fcgistarter - Win32 Release" || "$(CFG)" == "fcgistarter - Win32 Debug" !IF "$(CFG)" == "fcgistarter - Win32 Release" "apr - Win32 Release" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" cd "..\..\support" "apr - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "fcgistarter - Win32 Debug" "apr - Win32 Debug" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" cd "..\..\support" "apr - Win32 DebugCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF !IF "$(CFG)" == "fcgistarter - Win32 Release" "aprutil - Win32 Release" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" cd "..\..\support" "aprutil - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "fcgistarter - Win32 Debug" "aprutil - Win32 Debug" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" cd "..\..\support" "aprutil - Win32 DebugCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF SOURCE=.\fcgistarter.c "$(INTDIR)\fcgistarter.obj" : $(SOURCE) "$(INTDIR)" SOURCE=..\build\win32\httpd.rc !IF "$(CFG)" == "fcgistarter - Win32 Release" "$(INTDIR)\fcgistarter.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\fcgistarter.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="fcgistarter.exe" /d LONG_NAME="Apache fcgi command line utility" $(SOURCE) !ELSEIF "$(CFG)" == "fcgistarter - Win32 Debug" "$(INTDIR)\fcgistarter.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\fcgistarter.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="fcgistarter.exe" /d LONG_NAME="Apache fcgi command line utility" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/support/.indent.pro0000644000000000000500000000127510150161574015036 0ustar rootsrc-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int httpd-2.4.41/support/htdigest.dsp0000644000000000000500000001033012520036522015265 0ustar rootsrc# Microsoft Developer Studio Project File - Name="htdigest" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Console Application" 0x0103 CFG=htdigest - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "htdigest.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "htdigest.mak" CFG="htdigest - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "htdigest - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "htdigest - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe RSC=rc.exe !IF "$(CFG)" == "htdigest - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Release/htdigest_src" /FD /c # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/htdigest.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="htdigest.exe" /d LONG_NAME="Apache htdigest command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /debug /opt:ref # Begin Special Build Tool TargetPath=.\Release\htdigest.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ELSEIF "$(CFG)" == "htdigest - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Debug/htdigest_src" /FD /c # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/htdigest.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="htdigest.exe" /d LONG_NAME="Apache htdigest command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # Begin Special Build Tool TargetPath=.\Debug\htdigest.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ENDIF # Begin Target # Name "htdigest - Win32 Release" # Name "htdigest - Win32 Debug" # Begin Source File SOURCE=.\htdigest.c # End Source File # Begin Source File SOURCE=..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/support/passwd_common.h0000644000000000000500000000601313252576126016003 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef _PASSWD_COMMON_H #define _PASSWD_COMMON_H #include "apr.h" #include "apr_lib.h" #include "apr_strings.h" #include "apr_errno.h" #include "apr_file_io.h" #include "apr_general.h" #include "apr_version.h" #if !APR_VERSION_AT_LEAST(2,0,0) #include "apu_version.h" #endif #define MAX_STRING_LEN 256 #define ALG_PLAIN 0 #define ALG_CRYPT 1 #define ALG_APMD5 2 #define ALG_APSHA 3 #define ALG_BCRYPT 4 #define BCRYPT_DEFAULT_COST 5 #define ERR_FILEPERM 1 #define ERR_SYNTAX 2 #define ERR_PWMISMATCH 3 #define ERR_INTERRUPTED 4 #define ERR_OVERFLOW 5 #define ERR_BADUSER 6 #define ERR_INVALID 7 #define ERR_RANDOM 8 #define ERR_GENERAL 9 #define ERR_ALG_NOT_SUPP 10 #define NL APR_EOL_STR #if defined(WIN32) || defined(NETWARE) #define CRYPT_ALGO_SUPPORTED 0 #define PLAIN_ALGO_SUPPORTED 1 #else #define CRYPT_ALGO_SUPPORTED 1 #define PLAIN_ALGO_SUPPORTED 0 #endif #if APR_VERSION_AT_LEAST(2,0,0) || \ (APU_MAJOR_VERSION == 1 && APU_MINOR_VERSION >= 5) #define BCRYPT_ALGO_SUPPORTED 1 #else #define BCRYPT_ALGO_SUPPORTED 0 #endif #if APR_CHARSET_EBCDIC #undef BCRYPT_ALGO_SUPPORTED #define BCRYPT_ALGO_SUPPORTED 0 #endif /* * Must be initialized with apr_file_open_stderr() before using any of the * below functions. */ extern apr_file_t *errfile; struct passwd_ctx { apr_pool_t *pool; const char *errstr; char *out; apr_size_t out_len; char *passwd; int alg; int cost; enum { PW_PROMPT = 0, PW_ARG, PW_STDIN, PW_PROMPT_VERIFY, } passwd_src; }; /* * To be used as apr_pool_abort_fn */ int abort_on_oom(int rc); /* * Write a line to the file. On error, print a message and exit */ void putline(apr_file_t *f, const char *l); /* * The following functions return zero on success; otherwise, one of * the ERR_* codes is returned and an error message is stored in ctx->errstr. */ /* * Parse the algorithm specific options. */ int parse_common_options(struct passwd_ctx *ctx, char opt, const char *opt_arg); /* * Ask for password with verification. */ int get_password(struct passwd_ctx *ctx); /* * Make a password record from the given information. */ int mkhash(struct passwd_ctx *ctx); #endif /* _PASSWD_COMMON_H */ httpd-2.4.41/support/rotatelogs.dsp0000644000000000000500000001037612520036522015647 0ustar rootsrc# Microsoft Developer Studio Project File - Name="rotatelogs" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Console Application" 0x0103 CFG=rotatelogs - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "rotatelogs.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "rotatelogs.mak" CFG="rotatelogs - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "rotatelogs - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "rotatelogs - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe RSC=rc.exe !IF "$(CFG)" == "rotatelogs - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Release/rotatelogs_src" /FD /c # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/rotatelogs.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="rotatelogs.exe" /d LONG_NAME="Apache rotatelogs command line pipe" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /debug /opt:ref # Begin Special Build Tool TargetPath=.\Release\rotatelogs.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ELSEIF "$(CFG)" == "rotatelogs - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Debug/rotatelogs_src" /FD /c # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/rotatelogs.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="rotatelogs.exe" /d LONG_NAME="Apache rotatelogs command line pipe" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # Begin Special Build Tool TargetPath=.\Debug\rotatelogs.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ENDIF # Begin Target # Name "rotatelogs - Win32 Release" # Name "rotatelogs - Win32 Debug" # Begin Source File SOURCE=.\rotatelogs.c # End Source File # Begin Source File SOURCE=..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/support/logresolve.dep0000644000000000000500000000154212674411515015633 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by logresolve.mak ..\build\win32\httpd.rc : \ "..\include\ap_release.h"\ .\logresolve.c : \ "..\srclib\apr\include\apr.h"\ "..\srclib\apr\include\apr_allocator.h"\ "..\srclib\apr\include\apr_errno.h"\ "..\srclib\apr\include\apr_file_info.h"\ "..\srclib\apr\include\apr_file_io.h"\ "..\srclib\apr\include\apr_general.h"\ "..\srclib\apr\include\apr_getopt.h"\ "..\srclib\apr\include\apr_hash.h"\ "..\srclib\apr\include\apr_inherit.h"\ "..\srclib\apr\include\apr_lib.h"\ "..\srclib\apr\include\apr_network_io.h"\ "..\srclib\apr\include\apr_pools.h"\ "..\srclib\apr\include\apr_strings.h"\ "..\srclib\apr\include\apr_tables.h"\ "..\srclib\apr\include\apr_thread_mutex.h"\ "..\srclib\apr\include\apr_time.h"\ "..\srclib\apr\include\apr_user.h"\ "..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/support/NWGNUhtdbm0000644000000000000500000001046612061606345014622 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(NWOS) \ $(APR)/include \ $(APRUTIL)/include \ $(APR)/misc/netware \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = htdbm # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) HT Database Management Utility for NetWare # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = htdbm # # This is used by the '-screenname' directive. If left blank, # 'Apache for NetWare' Thread will be used. # NLM_SCREEN_NAME = htdbm Password Management # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = AUTOUNLOAD, PSEUDOPREEMPTION # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/htdbm.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/htdbm.o \ $(OBJDIR)/passwd_common.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/support/htcacheclean.dsp0000644000000000000500000001046012520036522016060 0ustar rootsrc# Microsoft Developer Studio Project File - Name="htcacheclean" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Console Application" 0x0103 CFG=htcacheclean - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "htcacheclean.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "htcacheclean.mak" CFG="htcacheclean - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "htcacheclean - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "htcacheclean - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe RSC=rc.exe !IF "$(CFG)" == "htcacheclean - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Release/htcacheclean_src" /FD /c # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/htcacheclean.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="htcacheclean.exe" /d LONG_NAME="Apache htcacheclean command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /debug /opt:ref # Begin Special Build Tool TargetPath=.\Release\htcacheclean.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ELSEIF "$(CFG)" == "htcacheclean - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fd"Debug/htcacheclean_src" /FD /c # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/htcacheclean.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="htcacheclean.exe" /d LONG_NAME="Apache htcacheclean command line utility" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /debug # Begin Special Build Tool TargetPath=.\Debug\htcacheclean.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);1 # End Special Build Tool !ENDIF # Begin Target # Name "htcacheclean - Win32 Release" # Name "htcacheclean - Win32 Debug" # Begin Source File SOURCE=.\htcacheclean.c # End Source File # Begin Source File SOURCE=..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/support/htcacheclean.mak0000644000000000000500000002112512701473373016054 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on htcacheclean.dsp !IF "$(CFG)" == "" CFG=htcacheclean - Win32 Debug !MESSAGE No configuration specified. Defaulting to htcacheclean - Win32 Debug. !ENDIF !IF "$(CFG)" != "htcacheclean - Win32 Release" && "$(CFG)" != "htcacheclean - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "htcacheclean.mak" CFG="htcacheclean - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "htcacheclean - Win32 Release" (based on "Win32 (x86) Console Application") !MESSAGE "htcacheclean - Win32 Debug" (based on "Win32 (x86) Console Application") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "htcacheclean - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\htcacheclean.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Release" "apr - Win32 Release" "$(OUTDIR)\htcacheclean.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 ReleaseCLEAN" "aprutil - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\htcacheclean.obj" -@erase "$(INTDIR)\htcacheclean.res" -@erase "$(INTDIR)\htcacheclean_src.idb" -@erase "$(INTDIR)\htcacheclean_src.pdb" -@erase "$(OUTDIR)\htcacheclean.exe" -@erase "$(OUTDIR)\htcacheclean.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\htcacheclean_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\htcacheclean.res" /i "../include" /i "../srclib/apr/include" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="htcacheclean.exe" /d LONG_NAME="Apache htcacheclean command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\htcacheclean.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\htcacheclean.pdb" /debug /out:"$(OUTDIR)\htcacheclean.exe" /opt:ref LINK32_OBJS= \ "$(INTDIR)\htcacheclean.obj" \ "$(INTDIR)\htcacheclean.res" \ "..\srclib\apr\LibR\apr-1.lib" \ "..\srclib\apr-util\LibR\aprutil-1.lib" "$(OUTDIR)\htcacheclean.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\htcacheclean.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\htcacheclean.exe" if exist .\Release\htcacheclean.exe.manifest mt.exe -manifest .\Release\htcacheclean.exe.manifest -outputresource:.\Release\htcacheclean.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "htcacheclean - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\htcacheclean.exe" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "aprutil - Win32 Debug" "apr - Win32 Debug" "$(OUTDIR)\htcacheclean.exe" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"apr - Win32 DebugCLEAN" "aprutil - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\htcacheclean.obj" -@erase "$(INTDIR)\htcacheclean.res" -@erase "$(INTDIR)\htcacheclean_src.idb" -@erase "$(INTDIR)\htcacheclean_src.pdb" -@erase "$(OUTDIR)\htcacheclean.exe" -@erase "$(OUTDIR)\htcacheclean.pdb" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\htcacheclean_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\htcacheclean.res" /i "../include" /i "../srclib/apr/include" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="htcacheclean.exe" /d LONG_NAME="Apache htcacheclean command line utility" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\htcacheclean.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib advapi32.lib wsock32.lib ws2_32.lib rpcrt4.lib shell32.lib /nologo /subsystem:console /incremental:no /pdb:"$(OUTDIR)\htcacheclean.pdb" /debug /out:"$(OUTDIR)\htcacheclean.exe" LINK32_OBJS= \ "$(INTDIR)\htcacheclean.obj" \ "$(INTDIR)\htcacheclean.res" \ "..\srclib\apr\LibD\apr-1.lib" \ "..\srclib\apr-util\LibD\aprutil-1.lib" "$(OUTDIR)\htcacheclean.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\htcacheclean.exe SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\htcacheclean.exe" if exist .\Debug\htcacheclean.exe.manifest mt.exe -manifest .\Debug\htcacheclean.exe.manifest -outputresource:.\Debug\htcacheclean.exe;1 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("htcacheclean.dep") !INCLUDE "htcacheclean.dep" !ELSE !MESSAGE Warning: cannot find "htcacheclean.dep" !ENDIF !ENDIF !IF "$(CFG)" == "htcacheclean - Win32 Release" || "$(CFG)" == "htcacheclean - Win32 Debug" !IF "$(CFG)" == "htcacheclean - Win32 Release" "apr - Win32 Release" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" cd "..\..\support" "apr - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "htcacheclean - Win32 Debug" "apr - Win32 Debug" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" cd "..\..\support" "apr - Win32 DebugCLEAN" : cd ".\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\apr.mak" CFG="apr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF !IF "$(CFG)" == "htcacheclean - Win32 Release" "aprutil - Win32 Release" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" cd "..\..\support" "aprutil - Win32 ReleaseCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\support" !ELSEIF "$(CFG)" == "htcacheclean - Win32 Debug" "aprutil - Win32 Debug" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" cd "..\..\support" "aprutil - Win32 DebugCLEAN" : cd ".\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\aprutil.mak" CFG="aprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\support" !ENDIF SOURCE=.\htcacheclean.c "$(INTDIR)\htcacheclean.obj" : $(SOURCE) "$(INTDIR)" SOURCE=..\build\win32\httpd.rc !IF "$(CFG)" == "htcacheclean - Win32 Release" "$(INTDIR)\htcacheclean.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\htcacheclean.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "NDEBUG" /d "APP_FILE" /d BIN_NAME="htcacheclean.exe" /d LONG_NAME="Apache htcacheclean command line utility" $(SOURCE) !ELSEIF "$(CFG)" == "htcacheclean - Win32 Debug" "$(INTDIR)\htcacheclean.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\htcacheclean.res" /i "../include" /i "../srclib/apr/include" /i "../build\win32" /d "_DEBUG" /d "APP_FILE" /d BIN_NAME="htcacheclean.exe" /d LONG_NAME="Apache htcacheclean command line utility" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/support/list_hooks.pl0000755000000000000500000000553111046106416015471 0ustar rootsrc#!/usr/bin/perl -w # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. use strict; use Carp; my $path=shift || '.'; findInDir($path); foreach my $hook (sort keys %::Hooks) { my $h=$::Hooks{$hook}; for my $x (qw(declared implemented type args)) { print "$hook datum '$x' missing\n" if !exists $h->{$x}; } print "$hook\n"; print " declared in $h->{declared}\n" if defined $h->{declared}; print " implemented in $h->{implemented}\n" if defined $h->{implemented}; print " type is $h->{type}\n" if defined $h->{type}; print " $h->{ret} $hook($h->{args})\n" if defined $h->{args}; print "\n"; } sub findInDir { my $path=shift; local(*D); opendir(D,$path) || croak "Can't open $path: $!"; while(my $f=readdir D) { next if $f=~/^\./; my $file="$path/$f"; if(-d $file) { findInDir($file); next; } next if $file !~ /\.[ch]$/; scanFile($file); } closedir D; } sub scanFile { my $file=shift; # print "scanning $file\n"; open(F,$file) || croak "Can't open $file: $!"; while() { next if /\#define/; next if /\@deffunc/; if(/AP_DECLARE_HOOK\s*\(/) { my($ret,$name,$args); while(!(($ret,$name,$args)= /AP_DECLARE_HOOK\s*\(\s*([^,]+)\s*,\s*([^,\s]+)\s*,\s*\((.*?)\)\)/s)) { chomp; # swallow subsequent lines if needed to get all the required info my $l=; return unless defined $l; $l=~s/^\s*/ /; $_.=$l; } $ret=~s/\s*$//; $args=~s/^\s*//; $args=~s/\s*$//; # print "found $ret $name($args) in $file\n"; croak "$name declared twice! ($_)" if exists $::Hooks{$name}->{declared}; $::Hooks{$name}->{declared}=$file; $::Hooks{$name}->{ret}=$ret; $::Hooks{$name}->{args}=$args; } if(/AP_IMPLEMENT_HOOK_()(VOID)\(([^,\s]+)/ || /AP_IMPLEMENT(_OPTIONAL|)_HOOK_(.*?)\([^,]+?\s*,\s*([^,\s]+)/) { my($type,$name)=($1 ? "OPTIONAL $2" : $2,$3); # print "found $name $type in $file\n"; croak "$name implemented twice ($::Hooks{$name}->{implemented} and $file) ($_)" if exists $::Hooks{$name}->{implemented}; $::Hooks{$name}->{implemented}=$file; $::Hooks{$name}->{type}=$type; } } } httpd-2.4.41/support/suexec.h0000644000000000000500000000721411637105701014422 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file suexec.h * @brief user-definable variables for the suexec wrapper code. * (See README.configure on how to customize these variables.) */ #ifndef _SUEXEC_H #define _SUEXEC_H /* * Include ap_config_layout so we can work out where the default htdocsdir * and logsdir are. */ #include "ap_config_layout.h" /* * HTTPD_USER -- Define as the username under which Apache normally * runs. This is the only user allowed to execute * this program. */ #ifndef AP_HTTPD_USER #define AP_HTTPD_USER "www" #endif /* * UID_MIN -- Define this as the lowest UID allowed to be a target user * for suEXEC. For most systems, 500 or 100 is common. */ #ifndef AP_UID_MIN #define AP_UID_MIN 100 #endif /* * GID_MIN -- Define this as the lowest GID allowed to be a target group * for suEXEC. For most systems, 100 is common. */ #ifndef AP_GID_MIN #define AP_GID_MIN 100 #endif /* * USERDIR_SUFFIX -- Define to be the subdirectory under users' * home directories where suEXEC access should * be allowed. All executables under this directory * will be executable by suEXEC as the user so * they should be "safe" programs. If you are * using a "simple" UserDir directive (ie. one * without a "*" in it) this should be set to * the same value. suEXEC will not work properly * in cases where the UserDir directive points to * a location that is not the same as the user's * home directory as referenced in the passwd file. * * If you have VirtualHosts with a different * UserDir for each, you will need to define them to * all reside in one parent directory; then name that * parent directory here. IF THIS IS NOT DEFINED * PROPERLY, ~USERDIR CGI REQUESTS WILL NOT WORK! * See the suEXEC documentation for more detailed * information. */ #ifndef AP_USERDIR_SUFFIX #define AP_USERDIR_SUFFIX "public_html" #endif /* * LOG_EXEC -- Define this as a filename if you want all suEXEC * transactions and errors logged for auditing and * debugging purposes. */ #ifndef AP_LOG_EXEC #define AP_LOG_EXEC DEFAULT_EXP_LOGFILEDIR "/suexec_log" /* Need me? */ #endif /* * DOC_ROOT -- Define as the DocumentRoot set for Apache. This * will be the only hierarchy (aside from UserDirs) * that can be used for suEXEC behavior. */ #ifndef AP_DOC_ROOT #define AP_DOC_ROOT DEFAULT_EXP_HTDOCSDIR #endif /* * SAFE_PATH -- Define a safe PATH environment to pass to CGI executables. * */ #ifndef AP_SAFE_PATH #define AP_SAFE_PATH "/usr/local/bin:/usr/bin:/bin" #endif #endif /* _SUEXEC_H */ httpd-2.4.41/support/ab.dep0000644000000000000500000000240612674411515014034 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by ab.mak .\ab.c : \ "..\include\ap_release.h"\ "..\srclib\apr-util\include\apr_base64.h"\ "..\srclib\apr-util\include\apr_xlate.h"\ "..\srclib\apr-util\include\apu.h"\ "..\srclib\apr\include\apr.h"\ "..\srclib\apr\include\apr_allocator.h"\ "..\srclib\apr\include\apr_dso.h"\ "..\srclib\apr\include\apr_errno.h"\ "..\srclib\apr\include\apr_file_info.h"\ "..\srclib\apr\include\apr_file_io.h"\ "..\srclib\apr\include\apr_general.h"\ "..\srclib\apr\include\apr_getopt.h"\ "..\srclib\apr\include\apr_global_mutex.h"\ "..\srclib\apr\include\apr_inherit.h"\ "..\srclib\apr\include\apr_lib.h"\ "..\srclib\apr\include\apr_network_io.h"\ "..\srclib\apr\include\apr_poll.h"\ "..\srclib\apr\include\apr_pools.h"\ "..\srclib\apr\include\apr_portable.h"\ "..\srclib\apr\include\apr_proc_mutex.h"\ "..\srclib\apr\include\apr_shm.h"\ "..\srclib\apr\include\apr_signal.h"\ "..\srclib\apr\include\apr_strings.h"\ "..\srclib\apr\include\apr_tables.h"\ "..\srclib\apr\include\apr_thread_mutex.h"\ "..\srclib\apr\include\apr_thread_proc.h"\ "..\srclib\apr\include\apr_time.h"\ "..\srclib\apr\include\apr_user.h"\ "..\srclib\apr\include\apr_want.h"\ ..\build\win32\httpd.rc : \ "..\include\ap_release.h"\ httpd-2.4.41/support/htpasswd.c0000644000000000000500000004121113523272100014743 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /****************************************************************************** ****************************************************************************** * NOTE! This program is not safe as a setuid executable! Do not make it * setuid! ****************************************************************************** *****************************************************************************/ /* * htpasswd.c: simple program for manipulating password file for * the Apache HTTP server * * Originally by Rob McCool * * Exit values: * 0: Success * 1: Failure; file access/permission problem * 2: Failure; command line syntax problem (usage message issued) * 3: Failure; password verification failure * 4: Failure; operation interrupted (such as with CTRL/C) * 5: Failure; buffer would overflow (username, filename, or computed * record too long) * 6: Failure; username contains illegal or reserved characters * 7: Failure; file is not a valid htpasswd file */ #include "passwd_common.h" #include "apr_signal.h" #include "apr_getopt.h" #if APR_HAVE_STDIO_H #include #endif #include "apr_md5.h" #include "apr_sha1.h" #if APR_HAVE_STDLIB_H #include #endif #if APR_HAVE_STRING_H #include #endif #if APR_HAVE_UNISTD_H #include #endif #ifdef WIN32 #include #define unlink _unlink #endif #define APHTP_NEWFILE 1 #define APHTP_NOFILE 2 #define APHTP_DELUSER 4 #define APHTP_VERIFY 8 apr_file_t *ftemp = NULL; static int mkrecord(struct passwd_ctx *ctx, char *user) { char hash_str[MAX_STRING_LEN]; int ret; ctx->out = hash_str; ctx->out_len = sizeof(hash_str); ret = mkhash(ctx); if (ret) { ctx->out = NULL; ctx->out_len = 0; return ret; } ctx->out = apr_pstrcat(ctx->pool, user, ":", hash_str, NL, NULL); ctx->out_len = strlen(ctx->out); if (ctx->out_len >= MAX_STRING_LEN) { ctx->errstr = "resultant record too long"; return ERR_OVERFLOW; } return 0; } static void usage(void) { apr_file_printf(errfile, "Usage:" NL "\thtpasswd [-cimBdpsDv] [-C cost] passwordfile username" NL "\thtpasswd -b[cmBdpsDv] [-C cost] passwordfile username password" NL NL "\thtpasswd -n[imBdps] [-C cost] username" NL "\thtpasswd -nb[mBdps] [-C cost] username password" NL " -c Create a new file." NL " -n Don't update file; display results on stdout." NL " -b Use the password from the command line rather than prompting " "for it." NL " -i Read password from stdin without verification (for script usage)." NL " -m Force MD5 encryption of the password (default)." NL " -B Force bcrypt encryption of the password (very secure)." NL " -C Set the computing time used for the bcrypt algorithm" NL " (higher is more secure but slower, default: %d, valid: 4 to 17)." NL " -d Force CRYPT encryption of the password (8 chars max, insecure)." NL " -s Force SHA encryption of the password (insecure)." NL " -p Do not encrypt the password (plaintext, insecure)." NL " -D Delete the specified user." NL " -v Verify password for the specified user." NL "On other systems than Windows and NetWare the '-p' flag will " "probably not work." NL "The SHA algorithm does not use a salt and is less secure than the " "MD5 algorithm." NL, BCRYPT_DEFAULT_COST ); exit(ERR_SYNTAX); } /* * Check to see if the specified file can be opened for the given * access. */ static int accessible(apr_pool_t *pool, char *fname, int mode) { apr_file_t *f = NULL; if (apr_file_open(&f, fname, mode, APR_OS_DEFAULT, pool) != APR_SUCCESS) { return 0; } apr_file_close(f); return 1; } /* * Return true if the named file exists, regardless of permissions. */ static int exists(char *fname, apr_pool_t *pool) { apr_finfo_t sbuf; apr_status_t check; check = apr_stat(&sbuf, fname, APR_FINFO_TYPE, pool); return ((check || sbuf.filetype != APR_REG) ? 0 : 1); } static void terminate(void) { apr_terminate(); #ifdef NETWARE pressanykey(); #endif } static void check_args(int argc, const char *const argv[], struct passwd_ctx *ctx, unsigned *mask, char **user, char **pwfilename) { const char *arg; int args_left = 2; int i, ret; apr_getopt_t *state; apr_status_t rv; char opt; const char *opt_arg; apr_pool_t *pool = ctx->pool; rv = apr_getopt_init(&state, pool, argc, argv); if (rv != APR_SUCCESS) exit(ERR_SYNTAX); while ((rv = apr_getopt(state, "cnmspdBbDiC:v", &opt, &opt_arg)) == APR_SUCCESS) { switch (opt) { case 'c': *mask |= APHTP_NEWFILE; break; case 'n': args_left--; *mask |= APHTP_NOFILE; break; case 'D': *mask |= APHTP_DELUSER; break; case 'v': *mask |= APHTP_VERIFY; break; default: ret = parse_common_options(ctx, opt, opt_arg); if (ret) { apr_file_printf(errfile, "%s: %s" NL, argv[0], ctx->errstr); exit(ret); } } } if (ctx->passwd_src == PW_ARG) args_left++; if (rv != APR_EOF) usage(); if ((*mask) & (*mask - 1)) { /* not a power of two, i.e. more than one flag specified */ apr_file_printf(errfile, "%s: only one of -c -n -v -D may be specified" NL, argv[0]); exit(ERR_SYNTAX); } if ((*mask & APHTP_VERIFY) && ctx->passwd_src == PW_PROMPT) ctx->passwd_src = PW_PROMPT_VERIFY; /* * Make sure we still have exactly the right number of arguments left * (the filename, the username, and possibly the password if -b was * specified). */ i = state->ind; if ((argc - i) != args_left) { usage(); } if (!(*mask & APHTP_NOFILE)) { if (strlen(argv[i]) > (APR_PATH_MAX - 1)) { apr_file_printf(errfile, "%s: filename too long" NL, argv[0]); exit(ERR_OVERFLOW); } *pwfilename = apr_pstrdup(pool, argv[i++]); } if (strlen(argv[i]) > (MAX_STRING_LEN - 1)) { apr_file_printf(errfile, "%s: username too long (> %d)" NL, argv[0], MAX_STRING_LEN - 1); exit(ERR_OVERFLOW); } *user = apr_pstrdup(pool, argv[i++]); if ((arg = strchr(*user, ':')) != NULL) { apr_file_printf(errfile, "%s: username contains illegal " "character '%c'" NL, argv[0], *arg); exit(ERR_BADUSER); } if (ctx->passwd_src == PW_ARG) { if (strlen(argv[i]) > (MAX_STRING_LEN - 1)) { apr_file_printf(errfile, "%s: password too long (> %d)" NL, argv[0], MAX_STRING_LEN); exit(ERR_OVERFLOW); } ctx->passwd = apr_pstrdup(pool, argv[i]); } } static int verify(struct passwd_ctx *ctx, const char *hash) { apr_status_t rv; int ret; if (ctx->passwd == NULL && (ret = get_password(ctx)) != 0) return ret; rv = apr_password_validate(ctx->passwd, hash); if (rv == APR_SUCCESS) return 0; if (APR_STATUS_IS_EMISMATCH(rv)) { ctx->errstr = "password verification failed"; return ERR_PWMISMATCH; } ctx->errstr = apr_psprintf(ctx->pool, "Could not verify password: %pm", &rv); return ERR_GENERAL; } /* * Let's do it. We end up doing a lot of file opening and closing, * but what do we care? This application isn't run constantly. */ int main(int argc, const char * const argv[]) { apr_file_t *fpw = NULL; char line[MAX_STRING_LEN]; char *pwfilename = NULL; char *user = NULL; char tn[] = "htpasswd.tmp.XXXXXX"; char *dirname; char *scratch, cp[MAX_STRING_LEN]; int found = 0; int i; unsigned mask = 0; apr_pool_t *pool; int existing_file = 0; struct passwd_ctx ctx = { 0 }; #if APR_CHARSET_EBCDIC apr_status_t rv; apr_xlate_t *to_ascii; #endif apr_app_initialize(&argc, &argv, NULL); atexit(terminate); apr_pool_create(&pool, NULL); apr_pool_abort_set(abort_on_oom, pool); apr_file_open_stderr(&errfile, pool); ctx.pool = pool; ctx.alg = ALG_APMD5; #if APR_CHARSET_EBCDIC rv = apr_xlate_open(&to_ascii, "ISO-8859-1", APR_DEFAULT_CHARSET, pool); if (rv) { apr_file_printf(errfile, "apr_xlate_open(to ASCII)->%d" NL, rv); exit(1); } rv = apr_SHA1InitEBCDIC(to_ascii); if (rv) { apr_file_printf(errfile, "apr_SHA1InitEBCDIC()->%d" NL, rv); exit(1); } rv = apr_MD5InitEBCDIC(to_ascii); if (rv) { apr_file_printf(errfile, "apr_MD5InitEBCDIC()->%d" NL, rv); exit(1); } #endif /*APR_CHARSET_EBCDIC*/ check_args(argc, argv, &ctx, &mask, &user, &pwfilename); /* * Only do the file checks if we're supposed to frob it. */ if (!(mask & APHTP_NOFILE)) { existing_file = exists(pwfilename, pool); if (existing_file && (mask & APHTP_VERIFY) == 0) { /* * Check that this existing file is readable and writable. */ if (!accessible(pool, pwfilename, APR_FOPEN_READ|APR_FOPEN_WRITE)) { apr_file_printf(errfile, "%s: cannot open file %s for " "read/write access" NL, argv[0], pwfilename); exit(ERR_FILEPERM); } } else if (existing_file && (mask & APHTP_VERIFY) != 0) { /* * Check that this existing file is readable. */ if (!accessible(pool, pwfilename, APR_FOPEN_READ)) { apr_file_printf(errfile, "%s: cannot open file %s for " "read access" NL, argv[0], pwfilename); exit(ERR_FILEPERM); } } else { /* * Error out if -c was omitted for this non-existant file. */ if (!(mask & APHTP_NEWFILE)) { apr_file_printf(errfile, "%s: cannot modify file %s; use '-c' to create it" NL, argv[0], pwfilename); exit(ERR_FILEPERM); } /* * As it doesn't exist yet, verify that we can create it. */ if (!accessible(pool, pwfilename, APR_FOPEN_WRITE|APR_FOPEN_CREATE)) { apr_file_printf(errfile, "%s: cannot create file %s" NL, argv[0], pwfilename); exit(ERR_FILEPERM); } } } /* * All the file access checks (if any) have been made. Time to go to work; * try to create the record for the username in question. If that * fails, there's no need to waste any time on file manipulations. * Any error message text is returned in the record buffer, since * the mkrecord() routine doesn't have access to argv[]. */ if ((mask & (APHTP_DELUSER|APHTP_VERIFY)) == 0) { i = mkrecord(&ctx, user); if (i != 0) { apr_file_printf(errfile, "%s: %s" NL, argv[0], ctx.errstr); exit(i); } if (mask & APHTP_NOFILE) { printf("%s" NL, ctx.out); exit(0); } } if ((mask & APHTP_VERIFY) == 0) { /* * We can access the files the right way, and we have a record * to add or update. Let's do it.. */ if (apr_temp_dir_get((const char**)&dirname, pool) != APR_SUCCESS) { apr_file_printf(errfile, "%s: could not determine temp dir" NL, argv[0]); exit(ERR_FILEPERM); } dirname = apr_psprintf(pool, "%s/%s", dirname, tn); if (apr_file_mktemp(&ftemp, dirname, 0, pool) != APR_SUCCESS) { apr_file_printf(errfile, "%s: unable to create temporary file %s" NL, argv[0], dirname); exit(ERR_FILEPERM); } } /* * If we're not creating a new file, copy records from the existing * one to the temporary file until we find the specified user. */ if (existing_file && !(mask & APHTP_NEWFILE)) { if (apr_file_open(&fpw, pwfilename, APR_READ | APR_BUFFERED, APR_OS_DEFAULT, pool) != APR_SUCCESS) { apr_file_printf(errfile, "%s: unable to read file %s" NL, argv[0], pwfilename); exit(ERR_FILEPERM); } while (apr_file_gets(line, sizeof(line), fpw) == APR_SUCCESS) { char *colon; strcpy(cp, line); scratch = cp; while (apr_isspace(*scratch)) { ++scratch; } if (!*scratch || (*scratch == '#')) { putline(ftemp, line); continue; } /* * See if this is our user. */ colon = strchr(scratch, ':'); if (colon != NULL) { *colon = '\0'; } else { /* * If we've not got a colon on the line, this could well * not be a valid htpasswd file. * We should bail at this point. */ apr_file_printf(errfile, "%s: The file %s does not appear " "to be a valid htpasswd file." NL, argv[0], pwfilename); apr_file_close(fpw); exit(ERR_INVALID); } if (strcmp(user, scratch) != 0) { putline(ftemp, line); continue; } else { /* We found the user we were looking for */ found++; if ((mask & APHTP_DELUSER)) { /* Delete entry from the file */ apr_file_printf(errfile, "Deleting "); } else if ((mask & APHTP_VERIFY)) { /* Verify */ char *hash = colon + 1; size_t len; len = strcspn(hash, "\r\n"); if (len == 0) { apr_file_printf(errfile, "Empty hash for user %s" NL, user); exit(ERR_INVALID); } hash[len] = '\0'; i = verify(&ctx, hash); if (i != 0) { apr_file_printf(errfile, "%s" NL, ctx.errstr); exit(i); } } else { /* Update entry */ apr_file_printf(errfile, "Updating "); putline(ftemp, ctx.out); } } } apr_file_close(fpw); } if (!found) { if (mask & APHTP_DELUSER) { apr_file_printf(errfile, "User %s not found" NL, user); exit(0); } else if (mask & APHTP_VERIFY) { apr_file_printf(errfile, "User %s not found" NL, user); exit(ERR_BADUSER); } else { apr_file_printf(errfile, "Adding "); putline(ftemp, ctx.out); } } if (mask & APHTP_VERIFY) { apr_file_printf(errfile, "Password for user %s correct." NL, user); exit(0); } apr_file_printf(errfile, "password for user %s" NL, user); /* The temporary file has all the data, just copy it to the new location. */ if (apr_file_copy(dirname, pwfilename, APR_OS_DEFAULT, pool) != APR_SUCCESS) { apr_file_printf(errfile, "%s: unable to update file %s" NL, argv[0], pwfilename); exit(ERR_FILEPERM); } apr_file_close(ftemp); return 0; } httpd-2.4.41/support/Makefile.in0000644000000000000500000000614113237272472015030 0ustar rootsrcDISTCLEAN_TARGETS = apxs apachectl dbmmanage log_server_status \ logresolve.pl phf_abuse_log.cgi split-logfile envvars-std CLEAN_TARGETS = suexec bin_PROGRAMS = htpasswd htdigest htdbm ab logresolve httxt2dbm sbin_PROGRAMS = htcacheclean rotatelogs $(NONPORTABLE_SUPPORT) TARGETS = $(bin_PROGRAMS) $(sbin_PROGRAMS) PROGRAM_LDADD = $(UTIL_LDFLAGS) $(PROGRAM_DEPENDENCIES) $(EXTRA_LIBS) $(AP_LIBS) PROGRAM_DEPENDENCIES = include $(top_builddir)/build/rules.mk install: @test -d $(DESTDIR)$(bindir) || $(MKINSTALLDIRS) $(DESTDIR)$(bindir) @test -d $(DESTDIR)$(sbindir) || $(MKINSTALLDIRS) $(DESTDIR)$(sbindir) @test -d $(DESTDIR)$(libexecdir) || $(MKINSTALLDIRS) $(DESTDIR)$(libexecdir) @cp -p $(top_builddir)/server/httpd.exp $(DESTDIR)$(libexecdir) @for i in apxs dbmmanage; do \ if test -f "$(builddir)/$$i"; then \ cp -p $$i $(DESTDIR)$(bindir); \ chmod 755 $(DESTDIR)$(bindir)/$$i; \ fi ; \ done @for i in apachectl; do \ if test -f "$(builddir)/$$i"; then \ cp -p $$i $(DESTDIR)$(sbindir); \ chmod 755 $(DESTDIR)$(sbindir)/$$i; \ fi ; \ done @if test -f "$(builddir)/envvars-std"; then \ cp -p envvars-std $(DESTDIR)$(sbindir); \ if test ! -f $(DESTDIR)$(sbindir)/envvars; then \ cp -p envvars-std $(DESTDIR)$(sbindir)/envvars ; \ fi ; \ fi htpasswd.lo: passwd_common.h passwd_common.lo: passwd_common.h htpasswd_OBJECTS = htpasswd.lo passwd_common.lo htpasswd: $(htpasswd_OBJECTS) $(LINK) $(htpasswd_LTFLAGS) $(htpasswd_OBJECTS) $(PROGRAM_LDADD) $(CRYPT_LIBS) htdigest_OBJECTS = htdigest.lo htdigest: $(htdigest_OBJECTS) $(LINK) $(htdigest_LTFLAGS) $(htdigest_OBJECTS) $(PROGRAM_LDADD) rotatelogs_OBJECTS = rotatelogs.lo rotatelogs: $(rotatelogs_OBJECTS) $(LINK) $(rotatelogs_LTFLAGS) $(rotatelogs_OBJECTS) $(PROGRAM_LDADD) logresolve_OBJECTS = logresolve.lo logresolve: $(logresolve_OBJECTS) $(LINK) $(logresolve_LTFLAGS) $(logresolve_OBJECTS) $(PROGRAM_LDADD) htdbm.lo: passwd_common.h htdbm_OBJECTS = htdbm.lo passwd_common.lo htdbm: $(htdbm_OBJECTS) $(LINK) $(htdbm_LTFLAGS) $(htdbm_OBJECTS) $(PROGRAM_LDADD) $(CRYPT_LIBS) ab_OBJECTS = ab.lo ab_LDADD = $(PROGRAM_LDADD) $(MATH_LIBS) $(ab_LIBS) ab.lo: ab.c $(LIBTOOL) --mode=compile $(CC) $(ab_CFLAGS) $(ALL_CFLAGS) $(ALL_CPPFLAGS) \ $(ALL_INCLUDES) $(PICFLAGS) $(LTCFLAGS) -c $< && touch $@ ab: $(ab_OBJECTS) $(LIBTOOL) --mode=link $(CC) $(ALL_CFLAGS) $(PILDFLAGS) \ $(LT_LDFLAGS) $(ALL_LDFLAGS) -o $@ $(ab_LTFLAGS) $(ab_OBJECTS) $(ab_LDADD) checkgid_OBJECTS = checkgid.lo checkgid: $(checkgid_OBJECTS) $(LINK) $(checkgid_LTFLAGS) $(checkgid_OBJECTS) $(PROGRAM_LDADD) suexec_OBJECTS = suexec.lo suexec: $(suexec_OBJECTS) $(LINK) $(suexec_OBJECTS) htcacheclean_OBJECTS = htcacheclean.lo htcacheclean: $(htcacheclean_OBJECTS) $(LINK) $(htcacheclean_LTFLAGS) $(htcacheclean_OBJECTS) $(PROGRAM_LDADD) httxt2dbm_OBJECTS = httxt2dbm.lo httxt2dbm: $(httxt2dbm_OBJECTS) $(LINK) $(httxt2dbm_LTFLAGS) $(httxt2dbm_OBJECTS) $(PROGRAM_LDADD) fcgistarter_OBJECTS = fcgistarter.lo fcgistarter: $(fcgistarter_OBJECTS) $(LINK) $(fcgistarter_LTFLAGS) $(fcgistarter_OBJECTS) $(PROGRAM_LDADD) httpd-2.4.41/support/apachectl.in0000644000000000000500000000653111712132720015225 0ustar rootsrc#!/bin/sh # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # Apache control script designed to allow an easy command line interface # to controlling Apache. Written by Marc Slemko, 1997/08/23 # # The exit codes returned are: # XXX this doc is no longer correct now that the interesting # XXX functions are handled by httpd # 0 - operation completed successfully # 1 - # 2 - usage error # 3 - httpd could not be started # 4 - httpd could not be stopped # 5 - httpd could not be started during a restart # 6 - httpd could not be restarted during a restart # 7 - httpd could not be restarted during a graceful restart # 8 - configuration syntax error # # When multiple arguments are given, only the error from the _last_ # one is reported. Run "apachectl help" for usage info # ACMD="$1" ARGV="$@" # # |||||||||||||||||||| START CONFIGURATION SECTION |||||||||||||||||||| # -------------------- -------------------- # # the path to your httpd binary, including options if necessary HTTPD='@exp_sbindir@/@progname@' # # pick up any necessary environment variables if test -f @exp_sbindir@/envvars; then . @exp_sbindir@/envvars fi # # a command that outputs a formatted text version of the HTML at the # url given on the command line. Designed for lynx, however other # programs may work. LYNX="@LYNX_PATH@ -dump" # # the URL to your server's mod_status status page. If you do not # have one, then status and fullstatus will not work. STATUSURL="http://localhost:@PORT@/server-status" # # Set this variable to a command that increases the maximum # number of file descriptors allowed per child process. This is # critical for configurations that use many file descriptors, # such as mass vhosting, or a multithreaded server. ULIMIT_MAX_FILES="@APACHECTL_ULIMIT@" # -------------------- -------------------- # |||||||||||||||||||| END CONFIGURATION SECTION |||||||||||||||||||| # Set the maximum number of file descriptors allowed per child process. if [ "x$ULIMIT_MAX_FILES" != "x" ] ; then $ULIMIT_MAX_FILES fi ERROR=0 if [ "x$ARGV" = "x" ] ; then ARGV="-h" fi case $ACMD in start|stop|restart|graceful|graceful-stop) $HTTPD -k $ARGV ERROR=$? ;; startssl|sslstart|start-SSL) echo The startssl option is no longer supported. echo Please edit httpd.conf to include the SSL configuration settings echo and then use "apachectl start". ERROR=2 ;; configtest) $HTTPD -t ERROR=$? ;; status) $LYNX $STATUSURL | awk ' /process$/ { print; exit } { print } ' ;; fullstatus) $LYNX $STATUSURL ;; *) $HTTPD "$@" ERROR=$? esac exit $ERROR httpd-2.4.41/support/SHA1/0002755000000000000500000000000013523273343013453 5ustar rootsrchttpd-2.4.41/support/SHA1/convert-sha1.pl0000644000000000000500000000164610150161574016322 0ustar rootsrc#!/usr/bin/perl -w use strict; # This is public domain code. Do whatever you want with it. # It was originally included in Clinton Wong's Apache 1.3.6 SHA1/ldif # patch distribution as sample code for converting accounts from # ldif format (as used by Netscape web servers) to Apache password format. my $uid=''; my $passwd=''; while (my $line = <>) { chomp $line; if ( $line =~ /uid:\s*(.+)/) { $uid = $1 } if ( $line =~ /userpassword:\s*(\{\w+\}.+)/) { $passwd = $1; $passwd =~ s/^\{crypt\}//i; # Apache stores crypt without a magic string } if (length($line)==0) { if (length $uid and length $passwd) { print $uid, ':', $passwd, "\n"; } # output if we have something to print $uid = ''; $passwd = ''; } # if newline } # while something to read # handle last entry if there isn't a newline before EOF if (length $uid and length $passwd) { print $uid, ':', $passwd, "\n"; } httpd-2.4.41/support/SHA1/htpasswd-sha1.pl0000644000000000000500000000133110150161574016466 0ustar rootsrc#!/usr/bin/perl -w use strict; # # Utility which takes a username and password # on the command line and generates a username # sha1-encrytped password on the stdout. # # Typical useage: # ./htpasswd-sha1.pl dirkx MySecret >> sha1-passwd # # This is public domain code. Do whatever you want with it. # It was originally included in Clinton Wong's Apache 1.3.6 SHA1/ldif # patch distribution as sample code for generating entries for # Apache password files using SHA1. use MIME::Base64; # http://www.cpan.org/modules/by-module/MIME/ use Digest::SHA1; # http://www.cpan.org/modules/by-module/MD5/ if ($#ARGV!=1) { die "Usage $0: user password\n" } print $ARGV[0], ':{SHA}', encode_base64( Digest::SHA1::sha1($ARGV[1]) ); httpd-2.4.41/support/SHA1/ldif-sha1.example0000644000000000000500000000062410150161574016573 0ustar rootsrcdn: cn=someuser cn: someuser sn: someuser objectclass: top objectclass: person objectclass: organizationalPerson objectclass: inetOrgPerson uid: someuser userpassword: {SHA}GvF+c3IdvgxAARuC7Uuxp9vjzik= dn: cn=anotheruser cn: anotheruser sn: anotheruser objectclass: top objectclass: person objectclass: organizationalPerson objectclass: inetOrgPerson uid: anotheruser userpassword: {crypt}eFnp.4sz5XnH6 httpd-2.4.41/support/SHA1/README.sha10000644000000000000500000000232110150161574015155 0ustar rootsrcThis directory includes some utilities to allow Apache 1.3.6 to recognize passwords in SHA1 format, as used by Netscape web servers. From Netscape's admin interface, export the password database to an ldif file and then use convert.pl in this distribution to generate apache style password files. Note: SHA1 support is useful for migration purposes, but is less secure than Apache's password format, since Apache's (MD5) password format uses a random eight character salt to generate one of many possible hashes for the same password. Netscape uses plain SHA1 without a salt, so the same password will always generate the same hash, making it easier to break since the search space is smaller. This code was contributed by Clinton Wong . README.sha1 this file convert-sha1.pl takes an ldif dump from Netscape's web server on standard in, outputs apache htpasswd format on standard out. Usage: convert.pl < ldif > passwords htpasswd-sha1.pl perl script to generate entries in apache htpasswd format. Usage: htpasswd-sha1.pl some_user some_password ldif-sha1.example sample ldif dump with one sha1 password and one crypt password. httpd-2.4.41/support/check_forensic0000755000000000000500000000167011555560110015646 0ustar rootsrc#!/bin/sh # check_forensic # check the forensic log for requests that did not complete # output the request log for each one F=$1 temp_create_method=file if test -f `which mktemp`; then temp_create_method=mktemp elif test -f `which tempfile`; then temp_create_method=tempfile fi create_temp() { prefix=$1 case "$temp_create_method" in file) name="/tmp/$1.$$" ;; mktemp) name=`mktemp -t $1.XXXXXX` ;; tempfile) name=`tempfile --prefix=$1` ;; *) echo "$0: Cannot create temporary file" exit 1 ;; esac } create_temp fcall all=$name create_temp fcin in=$name create_temp fcout out=$name trap "rm -f -- \"$all\" \"$in\" \"$out\";" 0 1 2 3 13 15 cut -f 1 -d '|' $F > $all grep ^+ < $all | cut -c2- | sort > $in grep -- ^- < $all | cut -c2- | sort > $out # use -i instead of -I for GNU xargs join -v 1 $in $out | xargs -I xx egrep "^\\+xx" $F exit 0 httpd-2.4.41/INSTALL0000644000000000000500000000730612716655767012321 0ustar rootsrc APACHE INSTALLATION OVERVIEW Quick Start - Unix ------------------ For complete installation documentation, see [ht]docs/manual/install.html or http://httpd.apache.org/docs/2.4/install.html $ ./configure --prefix=PREFIX $ make $ make install $ PREFIX/bin/apachectl start NOTES: * Replace PREFIX with the filesystem path under which Apache should be installed. A typical installation might use "/usr/local/apache2" for PREFIX (without the quotes). * Consider if you want to use a previously installed APR and APR-Util (such as those provided with many OSes) or if you need to use the APR and APR-Util from the apr.apache.org project. If the latter, download the latest versions and unpack them to ./srclib/apr and ./srclib/apr-util (no version numbers in the directory names) and use ./configure's --with-included-apr option. This is required if you don't have the compiler which the system APR was built with. It can also be advantageous if you are a developer who will be linking your code with Apache or using a debugger to step through server code, as it removes the possibility of version or compile-option mismatches with APR and APR-Util code. As a convenience, prepackaged source-code bundles of APR and APR-Util are occasionally also provided as a httpd-2.X.X-deps.tar.gz download. * If you are a developer building Apache directly from Subversion, you will need to run ./buildconf before running configure. This script bootstraps the build environment and requires Python as well as GNU autoconf and libtool. If you build Apache from a release tarball, you don't have to run buildconf. * If you want to build a threaded MPM (for instance worker) on FreeBSD, be aware that threads do not work well with Apache on FreeBSD versions before 5.4-RELEASE. If you wish to try a threaded Apache on an earlier version of FreeBSD, use the --enable-threads parameter to ./configure in addition to the --with-mpm parameter. * If you are building directly from Subversion on Mac OS X (Darwin), make sure to use GNU Libtool 1.4.2 or newer. All recent versions of the developer tools on this platform include a sufficiently recent version of GNU Libtool (named glibtool, but buildconf knows where to find it). For a short impression of what possibilities you have, here is a typical example which configures Apache for the installation tree /sw/pkg/apache with a particular compiler and flags plus the two additional modules mod_rewrite and mod_speling for later loading through the DSO mechanism: $ CC="pgcc" CFLAGS="-O2" \ ./configure --prefix=/sw/pkg/apache \ --enable-rewrite=shared \ --enable-speling=shared The easiest way to find all of the configuration flags for Apache 2.4 is to run ./configure --help. Quick Start - Windows --------------------- For complete documentation, see manual/platform/windows.html.en or Postscript ---------- To obtain help with installation problems, please see the resources at Thanks for using the Apache HTTP Server, version 2.4. The Apache Software Foundation http://www.apache.org/ httpd-2.4.41/libhttpd.dsp0000644000000000000500000005203013227201035013551 0ustar rootsrc# Microsoft Developer Studio Project File - Name="libhttpd" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=libhttpd - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "libhttpd.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "libhttpd.mak" CFG="libhttpd - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "libhttpd - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "libhttpd - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "libhttpd - Win32 Lexical" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "libhttpd - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /I "./srclib/pcre" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /Fd"Release\libhttpd_cl" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/libhttpd.res" /i "./include" /i "./srclib/apr/include" /d "NDEBUG" /d BIN_NAME="libhttpd.dll" /d LONG_NAME="Apache HTTP Server Core" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll # ADD LINK32 pcre.lib kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib "Release\buildmark.obj" /nologo /subsystem:windows /dll /debug /libpath:"./srclib/pcre" /base:@"os\win32\BaseAddr.ref",libhttpd.dll /opt:ref # Begin Special Build Tool TargetPath=.\Release\libhttpd.dll SOURCE="$(InputPath)" PreLink_Desc=Compiling buildmark PreLink_Cmds=cl.exe /nologo /MD /W3 /O2 /Oy- /Zi /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /I "./srclib/pcre" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /Fd"Release\libhttpd" /FD /c server\buildmark.c /Fo"Release\buildmark.obj" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /I "./srclib/pcre" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /Fd"Debug\libhttpd_cl" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/libhttpd.res" /i "./include" /i "./srclib/apr/include" /d "_DEBUG" /d BIN_NAME="libhttpd.dll" /d LONG_NAME="Apache HTTP Server Core" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug # ADD LINK32 pcred.lib kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib "Debug\buildmark.obj" /nologo /subsystem:windows /dll /incremental:no /debug /libpath:"./srclib/pcre" /base:@"os\win32\BaseAddr.ref",libhttpd.dll # Begin Special Build Tool TargetPath=.\Debug\libhttpd.dll SOURCE="$(InputPath)" PreLink_Desc=Compiling buildmark PreLink_Cmds=cl.exe /nologo /MDd /W3 /EHsc /Zi /Od /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /I "./srclib/pcre" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /Fd"Debug\libhttpd" /FD /c server\buildmark.c /Fo"Debug\buildmark.obj" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /I "./srclib/pcre" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /Fd"Release\libhttpd_cl" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/libhttpd.res" /i "./include" /i "./srclib/apr/include" /d "NDEBUG" /d BIN_NAME="libhttpd.dll" /d LONG_NAME="Apache HTTP Server Core" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll # ADD LINK32 pcre.lib kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib "Release\buildmark.obj" /nologo /subsystem:windows /dll /debug /libpath:"./srclib/pcre" /base:@"os\win32\BaseAddr.ref",libhttpd.dll /opt:ref # Begin Special Build Tool TargetPath=.\Release\libhttpd.dll SOURCE="$(InputPath)" PreLink_Desc=Compiling buildmark PreLink_Cmds=cl.exe /nologo /MD /W3 /O2 /Oy- /Zi /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /I "./srclib/pcre" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /Fd"Release\libhttpd" /FD /c server\buildmark.c /Fo"Release\buildmark.obj" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "libhttpd - Win32 Release" # Name "libhttpd - Win32 Debug" # Name "libhttpd - Win32 Lexical" # Begin Group "headers" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\include\ap_compat.h # End Source File # Begin Source File SOURCE=.\include\ap_config.h # End Source File # Begin Source File SOURCE=.\include\ap_expr.h # End Source File # Begin Source File SOURCE=.\include\ap_mmn.h # End Source File # Begin Source File SOURCE=.\include\ap_release.h # End Source File # Begin Source File SOURCE=.\include\http_config.h # End Source File # Begin Source File SOURCE=.\include\http_connection.h # End Source File # Begin Source File SOURCE=.\include\http_core.h # End Source File # Begin Source File SOURCE=.\include\http_log.h # End Source File # Begin Source File SOURCE=.\include\http_main.h # End Source File # Begin Source File SOURCE=.\include\http_protocol.h # End Source File # Begin Source File SOURCE=.\include\http_request.h # End Source File # Begin Source File SOURCE=.\include\http_vhost.h # End Source File # Begin Source File SOURCE=.\include\httpd.h # End Source File # Begin Source File SOURCE=.\os\win32\win32_config_layout.h !IF "$(CFG)" == "libhttpd - Win32 Release" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/ap_config_layout.h InputPath=.\os\win32\win32_config_layout.h ".\include\ap_config_layout.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\os\win32\win32_config_layout.h > .\include\ap_config_layout.h # End Custom Build !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/ap_config_layout.h InputPath=.\os\win32\win32_config_layout.h ".\include\ap_config_layout.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\os\win32\win32_config_layout.h > .\include\ap_config_layout.h # End Custom Build !ENDIF # End Source File # Begin Source File SOURCE=.\modules\generators\mod_cgi.h !IF "$(CFG)" == "libhttpd - Win32 Release" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/mod_cgi.h InputPath=.\modules\generators\mod_cgi.h ".\include\mod_cgi.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\modules\generators\mod_cgi.h > .\include\mod_cgi.h # End Custom Build !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/mod_cgi.h InputPath=.\modules\generators\mod_cgi.h ".\include\mod_cgi.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\modules\generators\mod_cgi.h > .\include\mod_cgi.h # End Custom Build !ENDIF # End Source File # Begin Source File SOURCE=.\include\mod_core.h # End Source File # Begin Source File SOURCE=.\modules\dav\main\mod_dav.h !IF "$(CFG)" == "libhttpd - Win32 Release" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/mod_dav.h InputPath=.\modules\dav\main\mod_dav.h ".\include\mod_dav.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\modules\dav\main\mod_dav.h > .\include\mod_dav.h # End Custom Build !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/mod_dav.h InputPath=.\modules\dav\main\mod_dav.h ".\include\mod_dav.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\modules\dav\main\mod_dav.h > .\include\mod_dav.h # End Custom Build !ENDIF # End Source File # Begin Source File SOURCE=.\modules\filters\mod_include.h !IF "$(CFG)" == "libhttpd - Win32 Release" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/mod_include.h InputPath=.\modules\filters\mod_include.h ".\include\mod_include.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\modules\filters\mod_include.h > .\include\mod_include.h # End Custom Build !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/mod_include.h InputPath=.\modules\filters\mod_include.h ".\include\mod_include.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\modules\filters\mod_include.h > .\include\mod_include.h # End Custom Build !ENDIF # End Source File # Begin Source File SOURCE=.\modules\proxy\mod_proxy.h !IF "$(CFG)" == "libhttpd - Win32 Release" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/mod_proxy.h InputPath=.\modules\proxy\mod_proxy.h ".\include\mod_proxy.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\modules\proxy\mod_proxy.h > .\include\mod_proxy.h # End Custom Build !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/mod_proxy.h InputPath=.\modules\proxy\mod_proxy.h ".\include\mod_proxy.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\modules\proxy\mod_proxy.h > .\include\mod_proxy.h # End Custom Build !ENDIF # End Source File # Begin Source File SOURCE=.\modules\core\mod_so.h !IF "$(CFG)" == "libhttpd - Win32 Release" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/mod_so.h InputPath=.\modules\core\mod_so.h ".\include\mod_so.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\modules\core\mod_so.h > .\include\mod_so.h # End Custom Build !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/mod_so.h InputPath=.\modules\core\mod_so.h ".\include\mod_so.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\modules\core\mod_so.h > .\include\mod_so.h # End Custom Build !ENDIF # End Source File # Begin Source File SOURCE=.\modules\core\mod_watchdog.h !IF "$(CFG)" == "libhttpd - Win32 Release" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/mod_watchdog.h InputPath=.\modules\core\mod_watchdog.h ".\include\mod_watchdog.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\modules\core\mod_watchdog.h > .\include\mod_watchdog.h # End Custom Build !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/mod_watchdog.h InputPath=.\modules\core\mod_watchdog.h ".\include\mod_watchdog.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\modules\core\mod_watchdog.h > .\include\mod_watchdog.h # End Custom Build !ENDIF # End Source File # Begin Source File SOURCE=.\os\win32\os.h !IF "$(CFG)" == "libhttpd - Win32 Release" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/os.h InputPath=.\os\win32\os.h ".\include\os.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\os\win32\os.h > .\include\os.h # End Custom Build !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Creating include/os.h InputPath=.\os\win32\os.h ".\include\os.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" type .\os\win32\os.h > .\include\os.h # End Custom Build !ENDIF # End Source File # Begin Source File SOURCE=.\server\test_char.h # End Source File # Begin Source File SOURCE=.\include\util_cookies.h # End Source File # End Group # Begin Group "httpd" # PROP Default_Filter "" # Begin Source File SOURCE=.\server\buildmark.c # PROP Exclude_From_Build 1 # End Source File # Begin Source File SOURCE=.\modules\http\byterange_filter.c # End Source File # Begin Source File SOURCE=.\modules\http\chunk_filter.c # End Source File # Begin Source File SOURCE=.\server\config.c # End Source File # Begin Source File SOURCE=.\server\connection.c # End Source File # Begin Source File SOURCE=.\server\core.c # End Source File # Begin Source File SOURCE=.\server\core_filters.c # End Source File # Begin Source File SOURCE=.\modules\http\http_core.c # End Source File # Begin Source File SOURCE=.\modules\http\http_etag.c # End Source File # Begin Source File SOURCE=.\modules\http\http_filters.c # End Source File # Begin Source File SOURCE=.\modules\http\http_protocol.c # End Source File # Begin Source File SOURCE=.\modules\http\http_request.c # End Source File # Begin Source File SOURCE=.\server\log.c # End Source File # Begin Source File SOURCE=.\server\protocol.c # End Source File # Begin Source File SOURCE=.\server\request.c # End Source File # Begin Source File SOURCE=.\server\vhost.c # End Source File # End Group # Begin Group "modules" # PROP Default_Filter "" # Begin Source File SOURCE=.\modules\core\mod_so.c # End Source File # Begin Source File SOURCE=.\modules\arch\win32\mod_win32.c # End Source File # Begin Source File SOURCE=.\os\win32\modules.c # End Source File # End Group # Begin Group "util" # PROP Default_Filter "" # Begin Source File SOURCE=.\include\ap_regex.h # End Source File # Begin Source File SOURCE=.\server\eoc_bucket.c # End Source File # Begin Source File SOURCE=.\server\eor_bucket.c # End Source File # Begin Source File SOURCE=.\server\error_bucket.c # End Source File # Begin Source File SOURCE=.\server\util.c # End Source File # Begin Source File SOURCE=.\server\util_cfgtree.c # End Source File # Begin Source File SOURCE=.\include\util_cfgtree.h # End Source File # Begin Source File SOURCE=.\include\util_charset.h # End Source File # Begin Source File SOURCE=.\server\util_cookies.c # End Source File # Begin Source File SOURCE=.\server\util_debug.c # End Source File # Begin Source File SOURCE=.\include\util_ebcdic.h # End Source File # Begin Source File SOURCE=.\server\util_expr_private.h # End Source File # Begin Source File SOURCE=.\server\util_expr_eval.c # End Source File # Begin Source File SOURCE=.\server\util_expr_scan.h # End Source File # Begin Source File SOURCE=.\server\util_expr_scan.c # End Source File # Begin Source File SOURCE=.\server\util_expr_parse.h # End Source File # Begin Source File SOURCE=.\server\util_expr_parse.c # End Source File # Begin Source File SOURCE=.\server\util_fcgi.c # End Source File # Begin Source File SOURCE=.\include\util_fcgi.h # End Source File # Begin Source File SOURCE=.\server\util_filter.c # End Source File # Begin Source File SOURCE=.\include\util_filter.h # End Source File # Begin Source File SOURCE=.\server\util_md5.c # End Source File # Begin Source File SOURCE=.\include\util_md5.h # End Source File # Begin Source File SOURCE=.\server\util_mutex.c # End Source File # Begin Source File SOURCE=.\include\util_mutex.h # End Source File # Begin Source File SOURCE=.\server\util_pcre.c # End Source File # Begin Source File SOURCE=.\server\util_regex.c # End Source File # Begin Source File SOURCE=.\server\util_script.c # End Source File # Begin Source File SOURCE=.\include\util_script.h # End Source File # Begin Source File SOURCE=.\server\util_time.c # End Source File # Begin Source File SOURCE=.\include\util_varbuf.h # End Source File # Begin Source File SOURCE=.\os\win32\util_win32.c # End Source File # Begin Source File SOURCE=.\server\util_xml.c # End Source File # Begin Source File SOURCE=.\include\util_xml.h # End Source File # End Group # Begin Group "mpm_winnt" # PROP Default_Filter "" # Begin Source File SOURCE=.\include\ap_listen.h # End Source File # Begin Source File SOURCE=.\os\win32\ap_regkey.c # End Source File # Begin Source File SOURCE=.\include\ap_regkey.h # End Source File # Begin Source File SOURCE=.\server\mpm\winnt\child.c # End Source File # Begin Source File SOURCE=.\server\listen.c # End Source File # Begin Source File SOURCE=.\server\mpm_common.c # End Source File # Begin Source File SOURCE=.\include\mpm_common.h # End Source File # Begin Source File SOURCE=.\server\mpm\winnt\mpm_default.h # End Source File # Begin Source File SOURCE=.\server\mpm\winnt\mpm_winnt.c # End Source File # Begin Source File SOURCE=.\server\mpm\winnt\mpm_winnt.h # End Source File # Begin Source File SOURCE=.\server\mpm\winnt\nt_eventlog.c # End Source File # Begin Source File SOURCE=.\server\provider.c # End Source File # Begin Source File SOURCE=.\server\scoreboard.c # End Source File # Begin Source File SOURCE=.\include\scoreboard.h # End Source File # Begin Source File SOURCE=.\server\mpm\winnt\service.c # End Source File # End Group # Begin Source File SOURCE=.\server\gen_test_char.exe !IF "$(CFG)" == "libhttpd - Win32 Release" # PROP Ignore_Default_Tool 1 USERDEP__GEN_T=".\include\os.h" # Begin Custom Build - Generating test_char.h from gen_test_char.exe InputPath=.\server\gen_test_char.exe ".\server\test_char.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" .\server\gen_test_char.exe >.\server\test_char.h # End Custom Build !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" # PROP Ignore_Default_Tool 1 USERDEP__GEN_T=".\include\os.h" # Begin Custom Build - Generating test_char.h from gen_test_char.exe InputPath=.\server\gen_test_char.exe ".\server\test_char.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" .\server\gen_test_char.exe >.\server\test_char.h # End Custom Build !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" # PROP Ignore_Default_Tool 1 USERDEP__GEN_T=".\include\os.h" # Begin Custom Build - Generating test_char.h from gen_test_char.exe InputPath=.\server\gen_test_char.exe ".\server\test_char.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" .\server\gen_test_char.exe >.\server\test_char.h # End Custom Build !ENDIF # End Source File # Begin Group "Generated Files" # PROP Default_Filter "" # Begin Source File SOURCE=.\server\util_expr_parse.y !IF "$(CFG)" == "libhttpd - Win32 Release" # PROP Exclude_From_Build 1 !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" # PROP Exclude_From_Build 1 !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Generating util_expr_parse.c/.h from util_expr_parse.y InputPath=.\server\util_expr_parse.y BuildCmds= \ bison -pap_expr_yy --defines=.\server\util_expr_parse.h -o .\server\util_expr_parse.c .\server\util_expr_parse.y ".\server\util_expr_parse.c" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" $(BuildCmds) ".\server\util_expr_parse.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" $(BuildCmds) # End Custom Build !ENDIF # End Source File # Begin Source File SOURCE=.\server\util_expr_scan.l !IF "$(CFG)" == "libhttpd - Win32 Release" # PROP Exclude_From_Build 1 !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" # PROP Exclude_From_Build 1 !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" # PROP Ignore_Default_Tool 1 # Begin Custom Build - Generating util_expr_scan.c from util_expr_scan.l InputPath=.\server\util_expr_scan.l ".\server\util_expr_scan.c" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" flex -Pap_expr_yy -o .\server\util_expr_scan.c .\server\util_expr_scan.l # End Custom Build !ENDIF # End Source File # End Group # Begin Source File SOURCE=.\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/Apache.dsw0000644000000000000500000023777713446306656013200 0ustar rootsrcMicrosoft Developer Studio Workspace File, Format Version 6.00 # WARNING: DO NOT EDIT OR DELETE THIS WORKSPACE FILE! ############################################################################### Project: "httpd"=".\httpd.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "ApacheMonitor"=.\support\win32\ApacheMonitor.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency Begin Project Dependency Project_Dep_Name aprutil End Project Dependency }}} ############################################################################### Project: "BuildAll"=.\BuildAll.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name BuildBin End Project Dependency Begin Project Dependency Project_Dep_Name mod_bucketeer End Project Dependency Begin Project Dependency Project_Dep_Name mod_case_filter End Project Dependency Begin Project Dependency Project_Dep_Name mod_case_filter_in End Project Dependency Begin Project Dependency Project_Dep_Name mod_echo End Project Dependency Begin Project Dependency Project_Dep_Name mod_example_hooks End Project Dependency Begin Project Dependency Project_Dep_Name mod_example_ipc End Project Dependency }}} ############################################################################### Project: "BuildBin"=.\BuildBin.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name httpd End Project Dependency Begin Project Dependency Project_Dep_Name ApacheMonitor End Project Dependency Begin Project Dependency Project_Dep_Name apr_ldap End Project Dependency Begin Project Dependency Project_Dep_Name libapriconv_ces_modules End Project Dependency Begin Project Dependency Project_Dep_Name libapriconv_ccs_modules End Project Dependency Begin Project Dependency Project_Dep_Name mod_access_compat End Project Dependency Begin Project Dependency Project_Dep_Name mod_actions End Project Dependency Begin Project Dependency Project_Dep_Name mod_alias End Project Dependency Begin Project Dependency Project_Dep_Name mod_allowmethods End Project Dependency Begin Project Dependency Project_Dep_Name mod_asis End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_digest End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_form End Project Dependency Begin Project Dependency Project_Dep_Name mod_authn_anon End Project Dependency Begin Project Dependency Project_Dep_Name mod_authn_core End Project Dependency Begin Project Dependency Project_Dep_Name mod_authn_dbd End Project Dependency Begin Project Dependency Project_Dep_Name mod_authn_dbm End Project Dependency Begin Project Dependency Project_Dep_Name mod_authn_file End Project Dependency Begin Project Dependency Project_Dep_Name mod_authn_socache End Project Dependency Begin Project Dependency Project_Dep_Name mod_authnz_fcgi End Project Dependency Begin Project Dependency Project_Dep_Name mod_authnz_ldap End Project Dependency Begin Project Dependency Project_Dep_Name mod_authz_core End Project Dependency Begin Project Dependency Project_Dep_Name mod_authz_dbd End Project Dependency Begin Project Dependency Project_Dep_Name mod_authz_dbm End Project Dependency Begin Project Dependency Project_Dep_Name mod_authz_groupfile End Project Dependency Begin Project Dependency Project_Dep_Name mod_authz_host End Project Dependency Begin Project Dependency Project_Dep_Name mod_authz_owner End Project Dependency Begin Project Dependency Project_Dep_Name mod_authz_user End Project Dependency Begin Project Dependency Project_Dep_Name mod_autoindex End Project Dependency Begin Project Dependency Project_Dep_Name mod_buffer End Project Dependency Begin Project Dependency Project_Dep_Name mod_cache_disk End Project Dependency Begin Project Dependency Project_Dep_Name mod_cache_socache End Project Dependency Begin Project Dependency Project_Dep_Name mod_cern_meta End Project Dependency Begin Project Dependency Project_Dep_Name mod_cgi End Project Dependency Begin Project Dependency Project_Dep_Name mod_charset_lite End Project Dependency Begin Project Dependency Project_Dep_Name mod_data End Project Dependency Begin Project Dependency Project_Dep_Name mod_dav_fs End Project Dependency Begin Project Dependency Project_Dep_Name mod_dav_lock End Project Dependency Begin Project Dependency Project_Dep_Name mod_dir End Project Dependency Begin Project Dependency Project_Dep_Name mod_dumpio End Project Dependency Begin Project Dependency Project_Dep_Name mod_env End Project Dependency Begin Project Dependency Project_Dep_Name mod_expires End Project Dependency Begin Project Dependency Project_Dep_Name mod_ext_filter End Project Dependency Begin Project Dependency Project_Dep_Name mod_file_cache End Project Dependency Begin Project Dependency Project_Dep_Name mod_filter End Project Dependency Begin Project Dependency Project_Dep_Name mod_headers End Project Dependency Begin Project Dependency Project_Dep_Name mod_heartbeat End Project Dependency Begin Project Dependency Project_Dep_Name mod_heartmonitor End Project Dependency Begin Project Dependency Project_Dep_Name mod_ident End Project Dependency Begin Project Dependency Project_Dep_Name mod_imagemap End Project Dependency Begin Project Dependency Project_Dep_Name mod_include End Project Dependency Begin Project Dependency Project_Dep_Name mod_info End Project Dependency Begin Project Dependency Project_Dep_Name mod_isapi End Project Dependency Begin Project Dependency Project_Dep_Name mod_lbmethod_bybusyness End Project Dependency Begin Project Dependency Project_Dep_Name mod_lbmethod_byrequests End Project Dependency Begin Project Dependency Project_Dep_Name mod_lbmethod_bytraffic End Project Dependency Begin Project Dependency Project_Dep_Name mod_lbmethod_heartbeat End Project Dependency Begin Project Dependency Project_Dep_Name mod_log_config End Project Dependency Begin Project Dependency Project_Dep_Name mod_log_debug End Project Dependency Begin Project Dependency Project_Dep_Name mod_log_forensic End Project Dependency Begin Project Dependency Project_Dep_Name mod_logio End Project Dependency Begin Project Dependency Project_Dep_Name mod_macro End Project Dependency Begin Project Dependency Project_Dep_Name mod_mime End Project Dependency Begin Project Dependency Project_Dep_Name mod_mime_magic End Project Dependency Begin Project Dependency Project_Dep_Name mod_negotiation End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_ajp End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_balancer End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_connect End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_express End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_fcgi End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_ftp End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_hcheck End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_http End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_scgi End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_uwsgi End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_wstunnel End Project Dependency Begin Project Dependency Project_Dep_Name mod_ratelimit End Project Dependency Begin Project Dependency Project_Dep_Name mod_reflector End Project Dependency Begin Project Dependency Project_Dep_Name mod_remoteip End Project Dependency Begin Project Dependency Project_Dep_Name mod_reqtimeout End Project Dependency Begin Project Dependency Project_Dep_Name mod_request End Project Dependency Begin Project Dependency Project_Dep_Name mod_rewrite End Project Dependency Begin Project Dependency Project_Dep_Name mod_sed End Project Dependency Begin Project Dependency Project_Dep_Name mod_session_cookie End Project Dependency Begin Project Dependency Project_Dep_Name mod_session_dbd End Project Dependency Begin Project Dependency Project_Dep_Name mod_setenvif End Project Dependency Begin Project Dependency Project_Dep_Name mod_slotmem_plain End Project Dependency Begin Project Dependency Project_Dep_Name mod_slotmem_shm End Project Dependency Begin Project Dependency Project_Dep_Name mod_socache_dbm End Project Dependency Begin Project Dependency Project_Dep_Name mod_socache_memcache End Project Dependency Begin Project Dependency Project_Dep_Name mod_socache_shmcb End Project Dependency Begin Project Dependency Project_Dep_Name mod_socache_redis End Project Dependency Begin Project Dependency Project_Dep_Name mod_speling End Project Dependency Begin Project Dependency Project_Dep_Name mod_status End Project Dependency Begin Project Dependency Project_Dep_Name mod_substitute End Project Dependency Begin Project Dependency Project_Dep_Name mod_unique_id End Project Dependency Begin Project Dependency Project_Dep_Name mod_userdir End Project Dependency Begin Project Dependency Project_Dep_Name mod_usertrack End Project Dependency Begin Project Dependency Project_Dep_Name mod_version End Project Dependency Begin Project Dependency Project_Dep_Name mod_vhost_alias End Project Dependency Begin Project Dependency Project_Dep_Name ab End Project Dependency Begin Project Dependency Project_Dep_Name htcacheclean End Project Dependency Begin Project Dependency Project_Dep_Name htdbm End Project Dependency Begin Project Dependency Project_Dep_Name htdigest End Project Dependency Begin Project Dependency Project_Dep_Name htpasswd End Project Dependency Begin Project Dependency Project_Dep_Name httxt2dbm End Project Dependency Begin Project Dependency Project_Dep_Name logresolve End Project Dependency Begin Project Dependency Project_Dep_Name rotatelogs End Project Dependency Begin Project Dependency Project_Dep_Name wintty End Project Dependency }}} ############################################################################### Project: "InstallBin"=.\InstallBin.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name BuildBin End Project Dependency }}} ############################################################################### Project: "ab"=.\support\ab.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency Begin Project Dependency Project_Dep_Name aprutil End Project Dependency }}} ############################################################################### Project: "abs"=.\support\abs.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency Begin Project Dependency Project_Dep_Name aprutil End Project Dependency }}} ############################################################################### Project: "apr"=.\srclib\apr\apr.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ }}} ############################################################################### Project: "apriconv"=".\srclib\apr-iconv\apriconv.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ }}} ############################################################################### Project: "aprutil"=".\srclib\apr-util\aprutil.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apriconv End Project Dependency }}} ############################################################################### Project: "apr_dbd_odbc"=".\srclib\apr-util\dbd\apr_dbd_odbc.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency }}} ############################################################################### Project: "apr_dbd_mysql"=".\srclib\apr-util\dbd\apr_dbd_mysql.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency }}} ############################################################################### Project: "apr_dbd_oracle"=".\srclib\apr-util\dbd\apr_dbd_oracle.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency }}} ############################################################################### Project: "apr_dbd_pgsql"=".\srclib\apr-util\dbd\apr_dbd_pgsql.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency }}} ############################################################################### Project: "apr_dbd_sqlite2"=".\srclib\apr-util\dbd\apr_dbd_sqlite2.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency }}} ############################################################################### Project: "apr_dbd_sqlite3"=".\srclib\apr-util\dbd\apr_dbd_sqlite3.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency }}} ############################################################################### Project: "apr_dbm_db"=".\srclib\apr-util\dbm\apr_dbm_db.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency }}} ############################################################################### Project: "apr_dbm_gdbm"=".\srclib\apr-util\dbm\apr_dbm_gdbm.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency }}} ############################################################################### Project: "apr_ldap"=".\srclib\apr-util\ldap\apr_ldap.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency }}} ############################################################################### Project: "fcgistarter"=.\support\fcgistarter.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency Begin Project Dependency Project_Dep_Name aprutil End Project Dependency }}} ############################################################################### Project: "gen_test_char"=.\server\gen_test_char.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency }}} ############################################################################### Project: "htcacheclean"=.\support\htcacheclean.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency Begin Project Dependency Project_Dep_Name aprutil End Project Dependency }}} ############################################################################### Project: "htdbm"=.\support\htdbm.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency Begin Project Dependency Project_Dep_Name aprutil End Project Dependency }}} ############################################################################### Project: "htdigest"=.\support\htdigest.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency Begin Project Dependency Project_Dep_Name aprutil End Project Dependency }}} ############################################################################### Project: "htpasswd"=.\support\htpasswd.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency Begin Project Dependency Project_Dep_Name aprutil End Project Dependency }}} ############################################################################### Project: "httxt2dbm"=.\support\httxt2dbm.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency Begin Project Dependency Project_Dep_Name aprutil End Project Dependency }}} ############################################################################### Project: "libapr"=.\srclib\apr\libapr.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ }}} ############################################################################### Project: "libapriconv"=".\srclib\apr-iconv\libapriconv.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency }}} ############################################################################### Project: "libapriconv_ccs_modules"=".\srclib\apr-iconv\ccs\libapriconv_ccs_modules.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libapriconv End Project Dependency Begin Project Dependency Project_Dep_Name libapriconv_ces_modules End Project Dependency }}} ############################################################################### Project: "libapriconv_ces_modules"=".\srclib\apr-iconv\ces\libapriconv_ces_modules.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libapriconv End Project Dependency }}} ############################################################################### Project: "libaprutil"=".\srclib\apr-util\libaprutil.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libapriconv End Project Dependency }}} ############################################################################### Project: "libhttpd"=.\libhttpd.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libapriconv End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name gen_test_char End Project Dependency }}} ############################################################################### Project: "logresolve"=.\support\logresolve.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency Begin Project Dependency Project_Dep_Name aprutil End Project Dependency }}} ############################################################################### Project: "mod_actions"=.\modules\mappers\mod_actions.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_alias"=.\modules\mappers\mod_alias.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_allowmethods"=.\modules\aaa\mod_allowmethods.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_asis"=.\modules\generators\mod_asis.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_access_compat"=.\modules\aaa\mod_access_compat.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_auth_basic"=.\modules\aaa\mod_auth_basic.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_auth_digest"=.\modules\aaa\mod_auth_digest.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_auth_form"=.\modules\aaa\mod_auth_form.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_authn_anon"=.\modules\aaa\mod_authn_anon.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authn_core"=.\modules\aaa\mod_authn_core.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authn_dbd"=.\modules\aaa\mod_authn_dbd.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency Begin Project Dependency Project_Dep_Name mod_dbd End Project Dependency }}} ############################################################################### Project: "mod_authn_dbm"=.\modules\aaa\mod_authn_dbm.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authn_file"=.\modules\aaa\mod_authn_file.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authn_socache"=.\modules\aaa\mod_authn_socache.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_authnz_fcgi"=.\modules\aaa\mod_authnz_fcgi.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_authnz_ldap"=.\modules\aaa\mod_authnz_ldap.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_ldap End Project Dependency }}} ############################################################################### Project: "mod_authz_core"=.\modules\aaa\mod_authz_core.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authz_dbd"=.\modules\aaa\mod_authz_dbd.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency Begin Project Dependency Project_Dep_Name mod_dbd End Project Dependency }}} ############################################################################### Project: "mod_authz_dbm"=.\modules\aaa\mod_authz_dbm.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authz_groupfile"=.\modules\aaa\mod_authz_groupfile.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authz_host"=.\modules\aaa\mod_authz_host.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authz_owner"=.\modules\aaa\mod_authz_owner.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authz_user"=.\modules\aaa\mod_authz_user.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_autoindex"=.\modules\generators\mod_autoindex.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_brotli"=.\modules\filters\mod_brotli.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_bucketeer"=.\modules\debugging\mod_bucketeer.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_buffer"=.\modules\filters\mod_buffer.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_cache"=.\modules\cache\mod_cache.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_case_filter"=.\modules\examples\mod_case_filter.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_case_filter_in"=.\modules\examples\mod_case_filter_in.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_cern_meta"=.\modules\metadata\mod_cern_meta.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_cgi"=.\modules\generators\mod_cgi.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_charset_lite"=.\modules\filters\mod_charset_lite.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_data"=.\modules\filters\mod_data.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_dav"=.\modules\dav\main\mod_dav.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_dav_fs"=.\modules\dav\fs\mod_dav_fs.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_dav End Project Dependency }}} ############################################################################### Project: "mod_dav_lock"=.\modules\dav\lock\mod_dav_lock.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_dav End Project Dependency }}} ############################################################################### Project: "mod_dbd"=.\modules\database\mod_dbd.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_deflate"=.\modules\filters\mod_deflate.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_dir"=.\modules\mappers\mod_dir.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_cache_disk"=.\modules\cache\mod_cache_disk.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_cache End Project Dependency }}} ############################################################################### Project: "mod_cache_socache"=.\modules\cache\mod_cache_socache.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_cache End Project Dependency }}} ############################################################################### Project: "mod_dumpio"=.\modules\debugging\mod_dumpio.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_echo"=.\modules\echo\mod_echo.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_env"=.\modules\metadata\mod_env.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_example_hooks"=.\modules\examples\mod_example_hooks.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_example_ipc"=.\modules\examples\mod_example_ipc.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_expires"=.\modules\metadata\mod_expires.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_ext_filter"=.\modules\filters\mod_ext_filter.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_file_cache"=.\modules\cache\mod_file_cache.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_filter"=.\modules\filters\mod_filter.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_http2"=.\modules\http2\mod_http2.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_headers"=.\modules\metadata\mod_headers.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_heartbeat"=.\modules\cluster\mod_heartbeat.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_watchdog End Project Dependency }}} ############################################################################### Project: "mod_heartmonitor"=.\modules\cluster\mod_heartmonitor.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_watchdog End Project Dependency }}} ############################################################################### Project: "mod_ident"=.\modules\metadata\mod_ident.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_imagemap"=.\modules\mappers\mod_imagemap.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_include"=.\modules\filters\mod_include.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_info"=.\modules\generators\mod_info.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_isapi"=.\modules\arch\win32\mod_isapi.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_lbmethod_bybusyness"=.\modules\proxy\balancers\mod_lbmethod_bybusyness.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_balancer End Project Dependency }}} ############################################################################### Project: "mod_lbmethod_byrequests"=.\modules\proxy\balancers\mod_lbmethod_byrequests.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_balancer End Project Dependency }}} ############################################################################### Project: "mod_lbmethod_bytraffic"=.\modules\proxy\balancers\mod_lbmethod_bytraffic.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_balancer End Project Dependency }}} ############################################################################### Project: "mod_lbmethod_heartbeat"=.\modules\proxy\balancers\mod_lbmethod_heartbeat.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_balancer End Project Dependency }}} ############################################################################### Project: "mod_ldap"=.\modules\ldap\mod_ldap.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_log_config"=.\modules\loggers\mod_log_config.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_log_debug"=.\modules\loggers\mod_log_debug.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_log_forensic"=.\modules\loggers\mod_log_forensic.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_logio"=.\modules\loggers\mod_logio.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_lua"=.\modules\lua\mod_lua.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_macro"=.\modules\core\mod_macro.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_md"=.\modules\md\mod_md.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_mime"=.\modules\http\mod_mime.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_mime_magic"=.\modules\metadata\mod_mime_magic.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_negotiation"=.\modules\mappers\mod_negotiation.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_proxy"=.\modules\proxy\mod_proxy.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_proxy_ajp"=.\modules\proxy\mod_proxy_ajp.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_balancer"=.\modules\proxy\mod_proxy_balancer.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_connect"=.\modules\proxy\mod_proxy_connect.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_express"=.\modules\proxy\mod_proxy_express.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_fcgi"=.\modules\proxy\mod_proxy_fcgi.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_ftp"=.\modules\proxy\mod_proxy_ftp.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_hcheck"=.\modules\proxy\mod_proxy_hcheck.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_html"=.\modules\filters\mod_proxy_html.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_proxy_http"=.\modules\proxy\mod_proxy_http.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_http2"=.\modules\http2\mod_proxy_http2.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_http2 End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_scgi"=.\modules\proxy\mod_proxy_scgi.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_uwsgi"=.\modules\proxy\mod_proxy_uwsgi.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_wstunnel"=.\modules\proxy\mod_proxy_wstunnel.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_ratelimit"=.\modules\filters\mod_ratelimit.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_reflector"=.\modules\filters\mod_reflector.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_remoteip"=.\modules\metadata\mod_remoteip.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_reqtimeout"=.\modules\filters\mod_reqtimeout.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_request"=.\modules\filters\mod_request.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_rewrite"=.\modules\mappers\mod_rewrite.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_sed"=.\modules\filters\mod_sed.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_session"=.\modules\session\mod_session.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_session_crypto"=.\modules\session\mod_session_crypto.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_session End Project Dependency }}} ############################################################################### Project: "mod_session_cookie"=.\modules\session\mod_session_cookie.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_session End Project Dependency }}} ############################################################################### Project: "mod_session_dbd"=.\modules\session\mod_session_dbd.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_dbd End Project Dependency Begin Project Dependency Project_Dep_Name mod_session End Project Dependency }}} ############################################################################### Project: "mod_setenvif"=.\modules\metadata\mod_setenvif.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_slotmem_plain"=.\modules\slotmem\mod_slotmem_plain.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_slotmem_shm"=.\modules\slotmem\mod_slotmem_shm.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_socache_dbm"=.\modules\cache\mod_socache_dbm.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_socache_dc"=.\modules\cache\mod_socache_dc.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_socache_memcache"=.\modules\cache\mod_socache_memcache.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_socache_shmcb"=.\modules\cache\mod_socache_shmcb.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_socache_redis"=.\modules\cache\mod_socache_redis.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_speling"=.\modules\mappers\mod_speling.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_ssl"=.\modules\ssl\mod_ssl.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_status"=.\modules\generators\mod_status.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_substitute"=.\modules\filters\mod_substitute.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_unique_id"=.\modules\metadata\mod_unique_id.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_userdir"=.\modules\mappers\mod_userdir.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_usertrack"=.\modules\metadata\mod_usertrack.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_version"=.\modules\metadata\mod_version.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_vhost_alias"=.\modules\mappers\mod_vhost_alias.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_watchdog"=.\modules\core\mod_watchdog.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_xml2enc"=.\modules\filters\mod_xml2enc.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libaprutil End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "rotatelogs"=.\support\rotatelogs.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency Begin Project Dependency Project_Dep_Name aprutil End Project Dependency }}} ############################################################################### Project: "wintty"=.\support\win32\wintty.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency Begin Project Dependency Project_Dep_Name aprutil End Project Dependency }}} ############################################################################### Global: Package=<5> {{{ }}} Package=<3> {{{ }}} ############################################################################### httpd-2.4.41/LAYOUT0000644000000000000500000001000112241452212012157 0ustar rootsrcThe httpd-2.1 Source Tree LAYOUT -------------------------------- ./ .................... Top-Level httpd-2.1 Root Directory ABOUT_APACHE .......... Overview of the Apache HTTP Server LAYOUT ................ This file describing the source tree README ................ Overview of this distribution STATUS ................ Current project activity and commentary build/ ................ Supporting tools for buildconf/configure win32/ ................ Supporting tools for Win32 MSVC builds docs/ ................. Documentation and Examples cgi-examples/ ......... conf/ ................. docroot/ .............. error/ ................ include/ .............. icons/ ................ small/ ................ man/ .................. manual/ ............... developer/ ............ faq/ .................. howto/ ................ images/ ............... misc/ ................. mod/ .................. platform/ ............. programs/ ............. search/ ............... ssl/ .................. style/ ................ vhosts/ ............... include/ ................ modules/ ................ Manditory and Add-In Apache stock modules aaa/ .................... arch/ ................... netware/ ................ win32/ .................. cache/ .................. dav/ .................... fs/ ..................... main/ ................... echo/ ................... experimental/ ........... filters/ ................ generators/ ............. http/ ................... HTTP: protocol module loggers/ ................ mappers/ ................ metadata/ ............... pop3/ ................... private/ ................ proxy/ .................. ssl/ .................... HTTPS: SSL v2/v3 and TLS v1 protocol module README .................. Overview of mod_ssl README.dsov.fig ......... Overview diagram of mod_ssl design README.dsov.ps .......... Overview diagram of mod_ssl design Makefile.in ............. Makefile template for Unix platform config.m4 ............... Autoconf stub for the Apache config mechanism mod_ssl.c ............... main source file containing API structures mod_ssl.h ............... common header file of mod_ssl ssl_engine_config.c ..... module configuration handling ssl_engine_init.c ....... module initialization ssl_engine_io.c ......... I/O support ssl_engine_kernel.c ..... SSL engine kernel ssl_engine_log.c ........ logfile support ssl_engine_mutex.c ...... mutual exclusion support ssl_engine_pphrase.c .... pass-phrase handling ssl_engine_rand.c ....... PRNG support ssl_engine_vars.c ....... Variable Expansion support ssl_scache.c ............ session cache abstraction layer ssl_util.c .............. utility functions ssl_util_ssl.c .......... the OpenSSL companion source ssl_util_ssl.h .......... the OpenSSL companion header test/ ................... not distributed with released source tarballs os/ ..................... bs2000/ ................. netware/ ................ os2/ .................... unix/ ................... win32/ .................. server/ ................. mpm/ .................... event/ .................. mpmt_os2/ ............... netware/ ................ prefork/ ................ winnt/ .................. worker/ ................. srclib/ ................... Additional Libraries apr/ ...................... SEE srclib/apr/LAYOUT apr-util/ ................. SEE srclib/apr/LAYOUT pcre/ ..................... doc/ ...................... testdata/ ................. support/ ................ Sources for Support Binaries SHA1/ .................. Ancient SHA1 password conversion utilities win32/ ................. Win32-only Support Applications test/ ................... not distributed with released source tarballs httpd-2.4.41/Apache-apr2.dsw0000644000000000000500000020235013446306656014015 0ustar rootsrcMicrosoft Developer Studio Workspace File, Format Version 6.00 # WARNING: DO NOT EDIT OR DELETE THIS WORKSPACE FILE! ############################################################################### Project: "httpd"=".\httpd.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "ApacheMonitor"=.\support\win32\ApacheMonitor.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency }}} ############################################################################### Project: "BuildAll"=.\BuildAll.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name BuildBin End Project Dependency Begin Project Dependency Project_Dep_Name mod_authnz_ldap End Project Dependency Begin Project Dependency Project_Dep_Name mod_bucketeer End Project Dependency Begin Project Dependency Project_Dep_Name mod_case_filter End Project Dependency Begin Project Dependency Project_Dep_Name mod_case_filter_in End Project Dependency Begin Project Dependency Project_Dep_Name mod_echo End Project Dependency Begin Project Dependency Project_Dep_Name mod_example_hooks End Project Dependency Begin Project Dependency Project_Dep_Name mod_example_ipc End Project Dependency }}} ############################################################################### Project: "BuildBin"=.\BuildBin.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name httpd End Project Dependency Begin Project Dependency Project_Dep_Name ApacheMonitor End Project Dependency Begin Project Dependency Project_Dep_Name mod_access_compat End Project Dependency Begin Project Dependency Project_Dep_Name mod_actions End Project Dependency Begin Project Dependency Project_Dep_Name mod_alias End Project Dependency Begin Project Dependency Project_Dep_Name mod_allowmethods End Project Dependency Begin Project Dependency Project_Dep_Name mod_asis End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_digest End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_form End Project Dependency Begin Project Dependency Project_Dep_Name mod_authn_anon End Project Dependency Begin Project Dependency Project_Dep_Name mod_authn_core End Project Dependency Begin Project Dependency Project_Dep_Name mod_authn_dbd End Project Dependency Begin Project Dependency Project_Dep_Name mod_authn_dbm End Project Dependency Begin Project Dependency Project_Dep_Name mod_authn_file End Project Dependency Begin Project Dependency Project_Dep_Name mod_authn_socache End Project Dependency Begin Project Dependency Project_Dep_Name mod_authnz_fcgi End Project Dependency Begin Project Dependency Project_Dep_Name mod_authz_core End Project Dependency Begin Project Dependency Project_Dep_Name mod_authz_dbd End Project Dependency Begin Project Dependency Project_Dep_Name mod_authz_dbm End Project Dependency Begin Project Dependency Project_Dep_Name mod_authz_groupfile End Project Dependency Begin Project Dependency Project_Dep_Name mod_authz_host End Project Dependency Begin Project Dependency Project_Dep_Name mod_authz_owner End Project Dependency Begin Project Dependency Project_Dep_Name mod_authz_user End Project Dependency Begin Project Dependency Project_Dep_Name mod_autoindex End Project Dependency Begin Project Dependency Project_Dep_Name mod_buffer End Project Dependency Begin Project Dependency Project_Dep_Name mod_cache_disk End Project Dependency Begin Project Dependency Project_Dep_Name mod_cache_socache End Project Dependency Begin Project Dependency Project_Dep_Name mod_cern_meta End Project Dependency Begin Project Dependency Project_Dep_Name mod_cgi End Project Dependency Begin Project Dependency Project_Dep_Name mod_charset_lite End Project Dependency Begin Project Dependency Project_Dep_Name mod_data End Project Dependency Begin Project Dependency Project_Dep_Name mod_dav_fs End Project Dependency Begin Project Dependency Project_Dep_Name mod_dav_lock End Project Dependency Begin Project Dependency Project_Dep_Name mod_dir End Project Dependency Begin Project Dependency Project_Dep_Name mod_dumpio End Project Dependency Begin Project Dependency Project_Dep_Name mod_env End Project Dependency Begin Project Dependency Project_Dep_Name mod_expires End Project Dependency Begin Project Dependency Project_Dep_Name mod_ext_filter End Project Dependency Begin Project Dependency Project_Dep_Name mod_file_cache End Project Dependency Begin Project Dependency Project_Dep_Name mod_filter End Project Dependency Begin Project Dependency Project_Dep_Name mod_headers End Project Dependency Begin Project Dependency Project_Dep_Name mod_heartbeat End Project Dependency Begin Project Dependency Project_Dep_Name mod_heartmonitor End Project Dependency Begin Project Dependency Project_Dep_Name mod_ident End Project Dependency Begin Project Dependency Project_Dep_Name mod_imagemap End Project Dependency Begin Project Dependency Project_Dep_Name mod_include End Project Dependency Begin Project Dependency Project_Dep_Name mod_info End Project Dependency Begin Project Dependency Project_Dep_Name mod_isapi End Project Dependency Begin Project Dependency Project_Dep_Name mod_lbmethod_bybusyness End Project Dependency Begin Project Dependency Project_Dep_Name mod_lbmethod_byrequests End Project Dependency Begin Project Dependency Project_Dep_Name mod_lbmethod_bytraffic End Project Dependency Begin Project Dependency Project_Dep_Name mod_lbmethod_heartbeat End Project Dependency Begin Project Dependency Project_Dep_Name mod_log_config End Project Dependency Begin Project Dependency Project_Dep_Name mod_log_debug End Project Dependency Begin Project Dependency Project_Dep_Name mod_log_forensic End Project Dependency Begin Project Dependency Project_Dep_Name mod_logio End Project Dependency Begin Project Dependency Project_Dep_Name mod_macro End Project Dependency Begin Project Dependency Project_Dep_Name mod_mime End Project Dependency Begin Project Dependency Project_Dep_Name mod_mime_magic End Project Dependency Begin Project Dependency Project_Dep_Name mod_negotiation End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_ajp End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_balancer End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_connect End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_express End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_fcgi End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_ftp End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_hcheck End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_http End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_scgi End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_uwsgi End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_wstunnel End Project Dependency Begin Project Dependency Project_Dep_Name mod_ratelimit End Project Dependency Begin Project Dependency Project_Dep_Name mod_reflector End Project Dependency Begin Project Dependency Project_Dep_Name mod_remoteip End Project Dependency Begin Project Dependency Project_Dep_Name mod_reqtimeout End Project Dependency Begin Project Dependency Project_Dep_Name mod_request End Project Dependency Begin Project Dependency Project_Dep_Name mod_rewrite End Project Dependency Begin Project Dependency Project_Dep_Name mod_sed End Project Dependency Begin Project Dependency Project_Dep_Name mod_session_cookie End Project Dependency Begin Project Dependency Project_Dep_Name mod_session_dbd End Project Dependency Begin Project Dependency Project_Dep_Name mod_setenvif End Project Dependency Begin Project Dependency Project_Dep_Name mod_slotmem_plain End Project Dependency Begin Project Dependency Project_Dep_Name mod_slotmem_shm End Project Dependency Begin Project Dependency Project_Dep_Name mod_socache_dbm End Project Dependency Begin Project Dependency Project_Dep_Name mod_socache_memcache End Project Dependency Begin Project Dependency Project_Dep_Name mod_socache_shmcb End Project Dependency Begin Project Dependency Project_Dep_Name mod_socache_redis End Project Dependency Begin Project Dependency Project_Dep_Name mod_speling End Project Dependency Begin Project Dependency Project_Dep_Name mod_status End Project Dependency Begin Project Dependency Project_Dep_Name mod_substitute End Project Dependency Begin Project Dependency Project_Dep_Name mod_unique_id End Project Dependency Begin Project Dependency Project_Dep_Name mod_userdir End Project Dependency Begin Project Dependency Project_Dep_Name mod_usertrack End Project Dependency Begin Project Dependency Project_Dep_Name mod_version End Project Dependency Begin Project Dependency Project_Dep_Name mod_vhost_alias End Project Dependency Begin Project Dependency Project_Dep_Name ab End Project Dependency Begin Project Dependency Project_Dep_Name htcacheclean End Project Dependency Begin Project Dependency Project_Dep_Name htdbm End Project Dependency Begin Project Dependency Project_Dep_Name htdigest End Project Dependency Begin Project Dependency Project_Dep_Name htpasswd End Project Dependency Begin Project Dependency Project_Dep_Name httxt2dbm End Project Dependency Begin Project Dependency Project_Dep_Name logresolve End Project Dependency Begin Project Dependency Project_Dep_Name rotatelogs End Project Dependency Begin Project Dependency Project_Dep_Name wintty End Project Dependency }}} ############################################################################### Project: "InstallBin"=.\InstallBin.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name BuildBin End Project Dependency }}} ############################################################################### Project: "ab"=.\support\ab.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency }}} ############################################################################### Project: "abs"=.\support\abs.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency }}} ############################################################################### Project: "apr"=.\srclib\apr\apr.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ }}} ############################################################################### Project: "apr_dbd_odbc"=".\srclib\apr\dbd\apr_dbd_odbc.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency }}} ############################################################################### Project: "apr_dbd_mysql"=".\srclib\apr\dbd\apr_dbd_mysql.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency }}} ############################################################################### Project: "apr_dbd_oracle"=".\srclib\apr\dbd\apr_dbd_oracle.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency }}} ############################################################################### Project: "apr_dbd_pgsql"=".\srclib\apr\dbd\apr_dbd_pgsql.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency }}} ############################################################################### Project: "apr_dbd_sqlite2"=".\srclib\apr\dbd\apr_dbd_sqlite2.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency }}} ############################################################################### Project: "apr_dbd_sqlite3"=".\srclib\apr\dbd\apr_dbd_sqlite3.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency }}} ############################################################################### Project: "apr_dbm_db"=".\srclib\apr\dbm\apr_dbm_db.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency }}} ############################################################################### Project: "apr_dbm_gdbm"=".\srclib\apr\dbm\apr_dbm_gdbm.dsp" - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency }}} ############################################################################### Project: "fcgistarter"=.\support\fcgistarter.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency }}} ############################################################################### Project: "gen_test_char"=.\server\gen_test_char.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency }}} ############################################################################### Project: "htcacheclean"=.\support\htcacheclean.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency }}} ############################################################################### Project: "htdbm"=.\support\htdbm.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency }}} ############################################################################### Project: "htdigest"=.\support\htdigest.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency }}} ############################################################################### Project: "htpasswd"=.\support\htpasswd.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency }}} ############################################################################### Project: "httxt2dbm"=.\support\httxt2dbm.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency }}} ############################################################################### Project: "libapr"=.\srclib\apr\libapr.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ }}} ############################################################################### Project: "libhttpd"=.\libhttpd.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name gen_test_char End Project Dependency }}} ############################################################################### Project: "logresolve"=.\support\logresolve.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency }}} ############################################################################### Project: "mod_actions"=.\modules\mappers\mod_actions.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_alias"=.\modules\mappers\mod_alias.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_allowmethods"=.\modules\aaa\mod_allowmethods.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_asis"=.\modules\generators\mod_asis.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_access_compat"=.\modules\aaa\mod_access_compat.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_auth_basic"=.\modules\aaa\mod_auth_basic.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_auth_digest"=.\modules\aaa\mod_auth_digest.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_auth_form"=.\modules\aaa\mod_auth_form.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_authn_anon"=.\modules\aaa\mod_authn_anon.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authn_core"=.\modules\aaa\mod_authn_core.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authn_dbd"=.\modules\aaa\mod_authn_dbd.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency Begin Project Dependency Project_Dep_Name mod_dbd End Project Dependency }}} ############################################################################### Project: "mod_authn_dbm"=.\modules\aaa\mod_authn_dbm.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authn_file"=.\modules\aaa\mod_authn_file.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authn_socache"=.\modules\aaa\mod_authn_socache.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_authnz_fcgi"=.\modules\aaa\mod_authnz_fcgi.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_authnz_ldap"=.\modules\aaa\mod_authnz_ldap.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_ldap End Project Dependency }}} ############################################################################### Project: "mod_authz_core"=.\modules\aaa\mod_authz_core.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authz_dbd"=.\modules\aaa\mod_authz_dbd.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency Begin Project Dependency Project_Dep_Name mod_dbd End Project Dependency }}} ############################################################################### Project: "mod_authz_dbm"=.\modules\aaa\mod_authz_dbm.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authz_groupfile"=.\modules\aaa\mod_authz_groupfile.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authz_host"=.\modules\aaa\mod_authz_host.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authz_owner"=.\modules\aaa\mod_authz_owner.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_authz_user"=.\modules\aaa\mod_authz_user.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_auth_basic End Project Dependency }}} ############################################################################### Project: "mod_autoindex"=.\modules\generators\mod_autoindex.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_brotli"=.\modules\filters\mod_brotli.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_bucketeer"=.\modules\debugging\mod_bucketeer.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_buffer"=.\modules\filters\mod_buffer.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_cache"=.\modules\cache\mod_cache.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_case_filter"=.\modules\examples\mod_case_filter.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_case_filter_in"=.\modules\examples\mod_case_filter_in.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_cern_meta"=.\modules\metadata\mod_cern_meta.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_cgi"=.\modules\generators\mod_cgi.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_charset_lite"=.\modules\filters\mod_charset_lite.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_data"=.\modules\filters\mod_data.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_dav"=.\modules\dav\main\mod_dav.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_dav_fs"=.\modules\dav\fs\mod_dav_fs.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_dav End Project Dependency }}} ############################################################################### Project: "mod_dav_lock"=.\modules\dav\lock\mod_dav_lock.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_dav End Project Dependency }}} ############################################################################### Project: "mod_dbd"=.\modules\database\mod_dbd.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_deflate"=.\modules\filters\mod_deflate.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_dir"=.\modules\mappers\mod_dir.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_cache_disk"=.\modules\cache\mod_cache_disk.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_cache End Project Dependency }}} ############################################################################### Project: "mod_cache_socache"=.\modules\cache\mod_cache_socache.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_cache End Project Dependency }}} ############################################################################### Project: "mod_dumpio"=.\modules\debugging\mod_dumpio.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_echo"=.\modules\echo\mod_echo.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_env"=.\modules\metadata\mod_env.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_example_hooks"=.\modules\examples\mod_example_hooks.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_example_ipc"=.\modules\examples\mod_example_ipc.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_expires"=.\modules\metadata\mod_expires.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_ext_filter"=.\modules\filters\mod_ext_filter.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_file_cache"=.\modules\cache\mod_file_cache.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_filter"=.\modules\filters\mod_filter.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_http2"=.\modules\http2\mod_http2.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_headers"=.\modules\metadata\mod_headers.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_heartbeat"=.\modules\cluster\mod_heartbeat.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_watchdog End Project Dependency }}} ############################################################################### Project: "mod_heartmonitor"=.\modules\cluster\mod_heartmonitor.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_watchdog End Project Dependency }}} ############################################################################### Project: "mod_ident"=.\modules\metadata\mod_ident.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_imagemap"=.\modules\mappers\mod_imagemap.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_include"=.\modules\filters\mod_include.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_info"=.\modules\generators\mod_info.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_isapi"=.\modules\arch\win32\mod_isapi.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_lbmethod_bybusyness"=.\modules\proxy\balancers\mod_lbmethod_bybusyness.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_balancer End Project Dependency }}} ############################################################################### Project: "mod_lbmethod_byrequests"=.\modules\proxy\balancers\mod_lbmethod_byrequests.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_balancer End Project Dependency }}} ############################################################################### Project: "mod_lbmethod_bytraffic"=.\modules\proxy\balancers\mod_lbmethod_bytraffic.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_balancer End Project Dependency }}} ############################################################################### Project: "mod_lbmethod_heartbeat"=.\modules\proxy\balancers\mod_lbmethod_heartbeat.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy_balancer End Project Dependency }}} ############################################################################### Project: "mod_ldap"=.\modules\ldap\mod_ldap.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_log_config"=.\modules\loggers\mod_log_config.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_log_debug"=.\modules\loggers\mod_log_debug.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_log_forensic"=.\modules\loggers\mod_log_forensic.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_logio"=.\modules\loggers\mod_logio.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_lua"=.\modules\lua\mod_lua.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_macro"=.\modules\core\mod_macro.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_md"=.\modules\md\mod_md.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_mime"=.\modules\http\mod_mime.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_mime_magic"=.\modules\metadata\mod_mime_magic.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_negotiation"=.\modules\mappers\mod_negotiation.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_proxy"=.\modules\proxy\mod_proxy.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_proxy_ajp"=.\modules\proxy\mod_proxy_ajp.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_balancer"=.\modules\proxy\mod_proxy_balancer.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_connect"=.\modules\proxy\mod_proxy_connect.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_express"=.\modules\proxy\mod_proxy_express.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_fcgi"=.\modules\proxy\mod_proxy_fcgi.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_ftp"=.\modules\proxy\mod_proxy_ftp.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_hcheck"=.\modules\proxy\mod_proxy_hcheck.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_html"=.\modules\filters\mod_proxy_html.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_proxy_http"=.\modules\proxy\mod_proxy_http.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_http2"=.\modules\http2\mod_proxy_http2.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_http2 End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_scgi"=.\modules\proxy\mod_proxy_scgi.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_uwsgi"=.\modules\proxy\mod_proxy_uwsgi.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_proxy_wstunnel"=.\modules\proxy\mod_proxy_wstunnel.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_proxy End Project Dependency }}} ############################################################################### Project: "mod_ratelimit"=.\modules\filters\mod_ratelimit.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_reflector"=.\modules\filters\mod_reflector.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_remoteip"=.\modules\metadata\mod_remoteip.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_reqtimeout"=.\modules\filters\mod_reqtimeout.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_request"=.\modules\filters\mod_request.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_rewrite"=.\modules\mappers\mod_rewrite.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_sed"=.\modules\filters\mod_sed.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_session"=.\modules\session\mod_session.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_session_crypto"=.\modules\session\mod_session_crypto.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_session End Project Dependency }}} ############################################################################### Project: "mod_session_cookie"=.\modules\session\mod_session_cookie.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_session End Project Dependency }}} ############################################################################### Project: "mod_session_dbd"=.\modules\session\mod_session_dbd.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency Begin Project Dependency Project_Dep_Name mod_dbd End Project Dependency Begin Project Dependency Project_Dep_Name mod_session End Project Dependency }}} ############################################################################### Project: "mod_setenvif"=.\modules\metadata\mod_setenvif.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_slotmem_plain"=.\modules\slotmem\mod_slotmem_plain.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_slotmem_shm"=.\modules\slotmem\mod_slotmem_shm.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_socache_dbm"=.\modules\cache\mod_socache_dbm.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_socache_dc"=.\modules\cache\mod_socache_dc.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_socache_memcache"=.\modules\cache\mod_socache_memcache.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_socache_shmcb"=.\modules\cache\mod_socache_shmcb.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_socache_redis"=.\modules\cache\mod_socache_redis.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_speling"=.\modules\mappers\mod_speling.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_ssl"=.\modules\ssl\mod_ssl.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_status"=.\modules\generators\mod_status.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_substitute"=.\modules\filters\mod_substitute.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_unique_id"=.\modules\metadata\mod_unique_id.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_userdir"=.\modules\mappers\mod_userdir.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_usertrack"=.\modules\metadata\mod_usertrack.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_version"=.\modules\metadata\mod_version.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_vhost_alias"=.\modules\mappers\mod_vhost_alias.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_watchdog"=.\modules\core\mod_watchdog.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "mod_xml2enc"=.\modules\filters\mod_xml2enc.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name libapr End Project Dependency Begin Project Dependency Project_Dep_Name libhttpd End Project Dependency }}} ############################################################################### Project: "rotatelogs"=.\support\rotatelogs.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency }}} ############################################################################### Project: "wintty"=.\support\win32\wintty.dsp - Package Owner=<4> Package=<5> {{{ }}} Package=<4> {{{ Begin Project Dependency Project_Dep_Name apr End Project Dependency }}} ############################################################################### Global: Package=<5> {{{ }}} Package=<3> {{{ }}} ############################################################################### httpd-2.4.41/build/0002755000000000000500000000000013523273355012345 5ustar rootsrchttpd-2.4.41/build/aix/0002755000000000000500000000000013523273343013123 5ustar rootsrchttpd-2.4.41/build/aix/buildaix.ksh0000755000000000000500000000706211737125415015442 0ustar rootsrc#!/usr/bin/ksh # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # buildaix.ksh: This script builds an AIX fileset of Apache httpd # if arguments - try to run fast cmd=$0 export CFLAGS='-O2 -qlanglvl=extc99' lslpp -L bos.adt.insttools >/dev/null [[ $? -ne 0 ]] && echo "must have bos.adt.insttools installed" && exit -1 apr_config=`which apr-1-config` apu_config=`which apu-1-config` if [[ -z ${apr_config} && -z ${apu_config} ]] then export PATH=/opt/bin:${PATH} apr_config=`which apr-1-config` apu_config=`which apu-1-config` fi while test $# -gt 0 do # Normalize case "$1" in -*=*) optarg=`echo "$1" | sed 's/[-_a-zA-Z0-9]*=//'` ;; *) optarg= ;; esac case "$1" in --with-apr=*) apr_config=$optarg ;; esac case "$1" in --with-apr-util=*) apu_config=$optarg ;; esac shift argc-- done if [ ! -f "$apr_config" -a ! -f "$apr_config/configure.in" ]; then echo "The apr source directory / apr-1-config could not be found" echo "If available, install the ASF.apu.rte and ASF.apr.rte filesets" echo "Usage: $cmd [--with-apr=[dir|file]] [--with-apr-util=[dir|file]]" exit 1 fi if [ ! -f "$apu_config" -a ! -f "$apu_config/configure.in" ]; then echo "The apu source directory / apu-1-config could not be found" echo "If available, install the ASF.apu.rte and ASF.apr.rte filesets" echo "Usage: $cmd [--with-apr=[dir|file]] [--with-apr-util=[dir|file]]" exit 1 fi . build/aix/aixinfo LAYOUT=AIX TEMPDIR=/var/tmp/$USER/${NAME}.${VERSION} rm -rf $TEMPDIR if [[ ! -e ./Makefile ]] # if Makefile exists go faster then # --with-mpm=worker \n\ echo "+ ./configure \n\ --enable-layout=$LAYOUT \n\ --with-apr=$apr_config \n\ --with-apr-util=$apu_config \n\ --enable-mpms-shared=all \n\ --enable-mods-shared=all \n\ --disable-lua > build/aix/configure.out" # --with-mpm=worker \ ./configure \ --enable-layout=$LAYOUT \ --with-apr=$apr_config \ --with-apr-util=$apu_config \ --enable-mpms-shared=all \ --enable-mods-shared=all \ --disable-lua > build/aix/configure.out [[ $? -ne 0 ]] && echo './configure' returned an error && exit -1 else echo $0: using existing Makefile echo $0: run make distclean to get a standard AIX configure echo ls -l ./Makefile config.* echo fi echo "+ make > build/aix/make.out" make > build/aix/make.out [[ $? -ne 0 ]] && echo 'make' returned an error && exit -1 echo "+ make install DESTDIR=$TEMPDIR > build/aix/install.out" make install DESTDIR=$TEMPDIR > build/aix/install.out [[ $? -ne 0 ]] && echo 'make install' returned an error && exit -1 echo "+ build/aix/mkinstallp.ksh $TEMPDIR > build/aix/mkinstallp.out" build/aix/mkinstallp.ksh $TEMPDIR > build/aix/mkinstallp.out [[ $? -ne 0 ]] && echo mkinstallp.ksh returned an error && exit -1 rm -rf $TEMPDIR # list installable fileset(s) echo ======================== installp -d build/aix -L echo ======================== httpd-2.4.41/build/aix/README0000644000000000000500000000523411737125415014006 0ustar rootsrcThe script buildaix.ksh will attempt to build a AIX installp fileset out of a source tree for ASF project REQUIREMENTS: Fileset Level State Type Description (Uninstaller) ---------------------------------------------------------------------------- bos.adt.insttools 5.3.7.2 C F Tool to Create installp Packages Fileset Level State Type Description (Uninstaller) ---------------------------------------------------------------------------- rpm.rte 3.0.5.41 C F RPM Package Manager Additional: Preferred: download zlib sources and copy zlib.h and zconf.h to /opt/include and, if configure cannot find them directly, add symbolic links from /usr/include to /opt/include To build a package, make sure you are in the root of the source tree, and run: build/aix/buildaix.ksh An AIX fileset named $PKG.$NAME.$ARCH.$VERSION.I will be created in the build/aix directory. the .template file created is also there. KNOWN issues: on AIX libtool is known to have issues with the install command. Some of these issues have been resolved by extracting the apr/apu utilities from the projects (i.e. NOT using the embedded version) In case of problems I recommend that you install the GNU 'install' program (part of coreutils) If make DESTDIR=$TEMPDIR install command continues to fail, try 'make install' and then run the buildaix.ksh command again TODO Add Copyright display/banner Add Apache LICENSE to fileset and require acceptance Add special instructions for TCB - to ignore /etc/* /var/httpd/htdocs/* Add _config_i scripts to setup autostart Add _pre_i scripts to verify pre-requisites, required users/groups, etc. # This layout is intended to put customizeable data in /etc and /var # the file listing will be used to create an exceptions file to modify # the behavior of syschk checksum generation. # AIX layout prefix: /opt/httpd exec_prefix: /opt/httpd bindir: ${exec_prefix}/bin sbindir: ${exec_prefix}/sbin libdir: ${exec_prefix}/lib libexecdir: ${exec_prefix}/libexec mandir: /usr/share/man sysconfdir: /etc/httpd datadir: /var/httpd installbuilddir: ${datadir}/build errordir: ${datadir}/error htdocsdir: ${datadir}/htdocs cgidir: ${datadir}/cgi-bin iconsdir: ${prefix}/icons manualdir: ${prefix}/manual includedir: ${prefix}/include localstatedir: /var/httpd runtimedir: ${localstatedir}/run logfiledir: ${localstatedir}/logs proxycachedir: ${localstatedir}/proxy httpd-2.4.41/build/aix/aixinfo0000644000000000000500000000066611737125415014512 0ustar rootsrc PKG="ASF" NAME="httpd" ARCH="powerpc" VERSION="2.2.22" CATEGORY="application" VENDOR="Apache Software Foundation" EMAIL="dev@httpd.apache.org" VMMN=`build/get-version.sh mmn include/ap_mmn.h MODULE_MAGIC_NUMBER` REVISION=`build/get-version.sh all include/ap_release.h AP_SERVER` VERSION=`echo $REVISION | cut -d- -s -f1` RELEASE=`echo $REVISION | cut -d- -s -f2` if [ "x$VERSION" = "x" ]; then VERSION=$REVISION RELEASE=0 fi httpd-2.4.41/build/aix/mkinstallp.ksh0000755000000000000500000001352312206332076016011 0ustar rootsrc#!/usr/bin/ksh # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # minstallp.ksh # create an installp image of ${NAME} (defined in aixinfo) # from TEMPDIR using mkinstallp (part of bos.adt.insttools) [[ $# == 0 ]] && echo $0: Syntax error && echo "Syntax: $0 " && exit -1 umask 022 TEMPDIR=$1 BASE=`pwd` cd ${TEMPDIR} [[ $? != 0 ]] && echo $0: ${TEMPDIR} -- bad directory && exit -1 # clean up side-effects from DEBUG passes - usr/local might be there as # a circular link i.e. usr/local points at /usr/local # as we are not using /usr/local for ASF packaging, remove it! # mkinstallp seems to make usr/local -> /usr/local [[ -f usr/local ]] && rm -f usr/local && echo removed unexpected usr/local !! [[ -L usr/local ]] && rm -f usr/local && echo removed unexpected usr/local !! [[ -d usr/local ]] && rm -rf usr/local && echo removed unexpected usr/local !! # use the aixinfo for PKG NAME VERSION etc labels cd ${BASE} . build/aix/aixinfo # INFO=${BASE}/build/aix/.info # mkdir -p $INFO INFO=${BASE}/build/aix template=${INFO}/${PKG}.${NAME}.${VERSION}.template >$template # mkinstallp template definitions # TODO: add AIX oslevel/uname information for package filename package=$PKG name=$NAME vrmf=$VERSION release=$RELEASE descr="$NAME version ${VERSION} for $ARCH ${VENDOR}" # copy LICENSE information # TODO: setup template so that license acceptance is required # TODO: add Copyright Information for display during install mkdir -p ${TEMPDIR}/usr/swlag/en_US cp ${BASE}/LICENSE ${TEMPDIR}/usr/swlag/en_US/${PKG}.${NAME}.la cd ${TEMPDIR} # remove files we do not want as "part" possibly # left-over from a previous packaging rm -rf .info lpp_name tmp usr/lpp [[ $? -ne 0 ]] && echo $cmd: cleanup error && pwd && ls -ltr && exit -1 #if we are going to add extra symbolic links - do it now [[ -r build/aix/aixlinks ]] && ksh build/aix/aixlinks # get the directory sizes in blocks for d in etc opt var do if [[ -d $d/${NAME} ]] then set `du -s $d/${NAME}` else [[ -d $d ]] && set `du -s $d` fi # make sure the argument exists before using setting values if [[ -d $d ]] then eval nm$d=/"$2" let sz$d=$1 fi done files=./${NAME}.${VERSION} cd ${TEMPDIR}/.. find ${files} -type d -exec chmod og+rx {} \; chmod -R go+r ${files} chown -R 0.0 ${files} cat - <>$template Package Name: ${PKG}.${NAME} Package VRMF: ${VERSION}.${RELEASE} Update: N Fileset Fileset Name: ${PKG}.${NAME}.rte Fileset VRMF: ${VERSION}.${RELEASE} Fileset Description: ${descr} USRLIBLPPFiles EOUSRLIBLPPFiles Bosboot required: N License agreement acceptance required: N Name of license agreement: Include license files in this package: N Requisites: EOF [[ $szetc -ne 0 ]] && echo " Upsize: ${nmetc} $szetc;" >> $template [[ $szopt -ne 0 ]] && echo " Upsize: ${nmopt} $szopt;" >> $template [[ $szvar -ne 0 ]] && echo " Upsize: ${nmvar} $szvar;" >> $template echo " USRFiles" >> $template # USR part -- i.e. files in /usr and /opt cd ${TEMPDIR}/.. find ${files}/usr/swlag ${files}/opt \ | sed -e s#^${files}## | sed -e "/^$/d" >>$template echo " EOUSRFiles" >> $template if [[ $szetc -gt 0 || $szvar -gt 0 ]] then INSTROOT=${TEMPDIR}/usr/lpp/${PKG}.${NAME}/inst_root mkdir -p ${INSTROOT} cd ${TEMPDIR} [[ $szetc -gt 0 ]] && find ./etc -type d | backup -if - | (cd ${INSTROOT}; restore -xqf -) >/dev/null [[ $szvar -gt 0 ]] && find ./var -type d | backup -if - | (cd ${INSTROOT}; restore -xqf -) >/dev/null cat - <>$template ROOT Part: Y ROOTFiles EOF # ROOT part cd ${TEMPDIR}/.. find ${files}/etc ${files}/var \ | sed -e s#^${files}## | sed -e "/^$/d" >>$template else # no ROOT parts to include cat - <>$template ROOT Part: N ROOTFiles EOF fi cat - <>$template EOROOTFiles Relocatable: N EOFileset EOF # man pages as separate fileset cd ${TEMPDIR} if [[ -d usr/share/man ]] then # manual pages, space required calculation set `du -s usr/share/man` szman=$1 descr="$NAME ${VERSION} man pages ${VENDOR}" cat - <>$template Fileset Fileset Name: ${PKG}.${NAME}.man.en_US Fileset VRMF: ${VERSION}.${RELEASE} Fileset Description: ${descr} USRLIBLPPFiles EOUSRLIBLPPFiles Bosboot required: N License agreement acceptance required: N Name of license agreement: Include license files in this package: N Requisites: EOF echo " Upsize: /usr/share/man ${szman};" >> $template echo " USRFiles" >> $template cd ${TEMPDIR}/.. find ${files}/usr/share | sed -e s#^${files}## | sed -e "/^$/d" >>$template cat - <>$template EOUSRFiles ROOT Part: N ROOTFiles EOROOTFiles Relocatable: N EOFileset EOF fi # use mkinstallp to create the fileset. result is in ${TEMPDIR}/tmp # must actually sit in TEMPDIR for ROOT part processing to succeed # also - need "empty" directories to exist, as they do not get copied # in the inst_root part cd ${TEMPDIR} mkinstallp -d ${TEMPDIR} -T ${template} [[ $? -ne 0 ]] && echo mkinstallp returned error status && exit -1 # copy package to build/aix # create TOC cp ${TEMPDIR}/tmp/$PKG.$NAME.$VERSION.0.bff ${BASE}/build/aix cd ${BASE}/build/aix rm -f $PKG.$NAME.$VERSION.$ARCH.I mv $PKG.$NAME.$VERSION.0.bff $PKG.$NAME.$ARCH.$VERSION.I rm -f .toc inutoc . httpd-2.4.41/build/aix/aixproto.ksh0000755000000000000500000000316411737125415015505 0ustar rootsrc#!/usr/bin/ksh TEMPDIR=$1 BUILD=`pwd` . build/aix/pkginfo package=$PKG name=$NAME vrmf=$VERSION descr="$VENDOR $NAME for $ARCH" umask 022 INFO=$BUILD/build/aix/.info mkdir -p $INFO template=${INFO}/${PKG}.${NAME}.${vrmf}.template >$template cd ${TEMPDIR} rm -rf .info lpp_name tmp # get the directory sizes in blocks for d in etc opt var do set `du -s $d/${NAME}` let sz$d=$1+1 done set `du -s usr/share/man` szman=$1+1 files=./httpd-root cd ${TEMPDIR}/.. find ${files} -type d -exec chmod og+rx {} \; chmod -R go+r ${files} chown -R 0:0 ${files} cat - <>$template Package Name: ${package}.${NAME} Package VRMF: ${vrmf}.0 Update: N Fileset Fileset Name: ${package}.${NAME}.rte Fileset VRMF: ${vrmf}.0 Fileset Description: ${descr} USRLIBLPPFiles EOUSRLIBLPPFiles Bosboot required: N License agreement acceptance required: N Include license files in this package: N Requisites: Upsize: /usr/share/man ${szman}; Upsize: /etc/${NAME} $szetc; Upsize: /opt/${NAME} $szopt; Upsize: /var/${NAME} $szvar; USRFiles EOF find ${files} | sed -e s#^${files}## | sed -e "/^$/d" >>$template cat - <>$template EOUSRFiles ROOT Part: N ROOTFiles EOROOTFiles Relocatable: N EOFileset EOF cp ${template} ${BUILD}/build/aix # use mkinstallp to create the fileset. result is in ${TEMPDIR}/tmp mkinstallp -d ${TEMPDIR} -T ${template} cp ${TEMPDIR}/tmp/$PKG.$NAME.$VERSION.0.bff ${BUILD}/build/aix cd $BUILD/build/aix rm -f $PKG.$NAME.$VERSION.$ARCH.I mv $PKG.$NAME.$VERSION.0.bff $PKG.$NAME.$VERSION.$ARCH.I rm .toc inutoc . installp -d . -ap ${PKG}.${NAME} installp -d . -L httpd-2.4.41/build/ltmain.sh0000644000000000000500000117147413523273355014202 0ustar rootsrc#! /bin/sh ## DO NOT EDIT - This file generated from ./build-aux/ltmain.in ## by inline-source v2014-01-03.01 # libtool (GNU libtool) 2.4.6 # Provide generalized library-building support services. # Written by Gordon Matzigkeit , 1996 # Copyright (C) 1996-2015 Free Software Foundation, Inc. # This is free software; see the source for copying conditions. There is NO # warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. # GNU Libtool is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # As a special exception to the GNU General Public License, # if you distribute this file as part of a program or library that # is built using GNU Libtool, you may include this file under the # same distribution terms that you use for the rest of that program. # # GNU Libtool is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . PROGRAM=libtool PACKAGE=libtool VERSION="2.4.6 Debian-2.4.6-2" package_revision=2.4.6 ## ------ ## ## Usage. ## ## ------ ## # Run './libtool --help' for help with using this script from the # command line. ## ------------------------------- ## ## User overridable command paths. ## ## ------------------------------- ## # After configure completes, it has a better idea of some of the # shell tools we need than the defaults used by the functions shared # with bootstrap, so set those here where they can still be over- # ridden by the user, but otherwise take precedence. : ${AUTOCONF="autoconf"} : ${AUTOMAKE="automake"} ## -------------------------- ## ## Source external libraries. ## ## -------------------------- ## # Much of our low-level functionality needs to be sourced from external # libraries, which are installed to $pkgauxdir. # Set a version string for this script. scriptversion=2015-01-20.17; # UTC # General shell script boiler plate, and helper functions. # Written by Gary V. Vaughan, 2004 # Copyright (C) 2004-2015 Free Software Foundation, Inc. # This is free software; see the source for copying conditions. There is NO # warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or # (at your option) any later version. # As a special exception to the GNU General Public License, if you distribute # this file as part of a program or library that is built using GNU Libtool, # you may include this file under the same distribution terms that you use # for the rest of that program. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNES FOR A PARTICULAR PURPOSE. See the GNU # General Public License for more details. # You should have received a copy of the GNU General Public License # along with this program. If not, see . # Please report bugs or propose patches to gary@gnu.org. ## ------ ## ## Usage. ## ## ------ ## # Evaluate this file near the top of your script to gain access to # the functions and variables defined here: # # . `echo "$0" | ${SED-sed} 's|[^/]*$||'`/build-aux/funclib.sh # # If you need to override any of the default environment variable # settings, do that before evaluating this file. ## -------------------- ## ## Shell normalisation. ## ## -------------------- ## # Some shells need a little help to be as Bourne compatible as possible. # Before doing anything else, make sure all that help has been provided! DUALCASE=1; export DUALCASE # for MKS sh if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then : emulate sh NULLCMD=: # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which # is contrary to our usage. Disable this feature. alias -g '${1+"$@"}'='"$@"' setopt NO_GLOB_SUBST else case `(set -o) 2>/dev/null` in *posix*) set -o posix ;; esac fi # NLS nuisances: We save the old values in case they are required later. _G_user_locale= _G_safe_locale= for _G_var in LANG LANGUAGE LC_ALL LC_CTYPE LC_COLLATE LC_MESSAGES do eval "if test set = \"\${$_G_var+set}\"; then save_$_G_var=\$$_G_var $_G_var=C export $_G_var _G_user_locale=\"$_G_var=\\\$save_\$_G_var; \$_G_user_locale\" _G_safe_locale=\"$_G_var=C; \$_G_safe_locale\" fi" done # CDPATH. (unset CDPATH) >/dev/null 2>&1 && unset CDPATH # Make sure IFS has a sensible default sp=' ' nl=' ' IFS="$sp $nl" # There are apparently some retarded systems that use ';' as a PATH separator! if test "${PATH_SEPARATOR+set}" != set; then PATH_SEPARATOR=: (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && { (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 || PATH_SEPARATOR=';' } fi ## ------------------------- ## ## Locate command utilities. ## ## ------------------------- ## # func_executable_p FILE # ---------------------- # Check that FILE is an executable regular file. func_executable_p () { test -f "$1" && test -x "$1" } # func_path_progs PROGS_LIST CHECK_FUNC [PATH] # -------------------------------------------- # Search for either a program that responds to --version with output # containing "GNU", or else returned by CHECK_FUNC otherwise, by # trying all the directories in PATH with each of the elements of # PROGS_LIST. # # CHECK_FUNC should accept the path to a candidate program, and # set $func_check_prog_result if it truncates its output less than # $_G_path_prog_max characters. func_path_progs () { _G_progs_list=$1 _G_check_func=$2 _G_PATH=${3-"$PATH"} _G_path_prog_max=0 _G_path_prog_found=false _G_save_IFS=$IFS; IFS=${PATH_SEPARATOR-:} for _G_dir in $_G_PATH; do IFS=$_G_save_IFS test -z "$_G_dir" && _G_dir=. for _G_prog_name in $_G_progs_list; do for _exeext in '' .EXE; do _G_path_prog=$_G_dir/$_G_prog_name$_exeext func_executable_p "$_G_path_prog" || continue case `"$_G_path_prog" --version 2>&1` in *GNU*) func_path_progs_result=$_G_path_prog _G_path_prog_found=: ;; *) $_G_check_func $_G_path_prog func_path_progs_result=$func_check_prog_result ;; esac $_G_path_prog_found && break 3 done done done IFS=$_G_save_IFS test -z "$func_path_progs_result" && { echo "no acceptable sed could be found in \$PATH" >&2 exit 1 } } # We want to be able to use the functions in this file before configure # has figured out where the best binaries are kept, which means we have # to search for them ourselves - except when the results are already set # where we skip the searches. # Unless the user overrides by setting SED, search the path for either GNU # sed, or the sed that truncates its output the least. test -z "$SED" && { _G_sed_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/ for _G_i in 1 2 3 4 5 6 7; do _G_sed_script=$_G_sed_script$nl$_G_sed_script done echo "$_G_sed_script" 2>/dev/null | sed 99q >conftest.sed _G_sed_script= func_check_prog_sed () { _G_path_prog=$1 _G_count=0 printf 0123456789 >conftest.in while : do cat conftest.in conftest.in >conftest.tmp mv conftest.tmp conftest.in cp conftest.in conftest.nl echo '' >> conftest.nl "$_G_path_prog" -f conftest.sed conftest.out 2>/dev/null || break diff conftest.out conftest.nl >/dev/null 2>&1 || break _G_count=`expr $_G_count + 1` if test "$_G_count" -gt "$_G_path_prog_max"; then # Best one so far, save it but keep looking for a better one func_check_prog_result=$_G_path_prog _G_path_prog_max=$_G_count fi # 10*(2^10) chars as input seems more than enough test 10 -lt "$_G_count" && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out } func_path_progs "sed gsed" func_check_prog_sed $PATH:/usr/xpg4/bin rm -f conftest.sed SED=$func_path_progs_result } # Unless the user overrides by setting GREP, search the path for either GNU # grep, or the grep that truncates its output the least. test -z "$GREP" && { func_check_prog_grep () { _G_path_prog=$1 _G_count=0 _G_path_prog_max=0 printf 0123456789 >conftest.in while : do cat conftest.in conftest.in >conftest.tmp mv conftest.tmp conftest.in cp conftest.in conftest.nl echo 'GREP' >> conftest.nl "$_G_path_prog" -e 'GREP$' -e '-(cannot match)-' conftest.out 2>/dev/null || break diff conftest.out conftest.nl >/dev/null 2>&1 || break _G_count=`expr $_G_count + 1` if test "$_G_count" -gt "$_G_path_prog_max"; then # Best one so far, save it but keep looking for a better one func_check_prog_result=$_G_path_prog _G_path_prog_max=$_G_count fi # 10*(2^10) chars as input seems more than enough test 10 -lt "$_G_count" && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out } func_path_progs "grep ggrep" func_check_prog_grep $PATH:/usr/xpg4/bin GREP=$func_path_progs_result } ## ------------------------------- ## ## User overridable command paths. ## ## ------------------------------- ## # All uppercase variable names are used for environment variables. These # variables can be overridden by the user before calling a script that # uses them if a suitable command of that name is not already available # in the command search PATH. : ${CP="cp -f"} : ${ECHO="printf %s\n"} : ${EGREP="$GREP -E"} : ${FGREP="$GREP -F"} : ${LN_S="ln -s"} : ${MAKE="make"} : ${MKDIR="mkdir"} : ${MV="mv -f"} : ${RM="rm -f"} : ${SHELL="${CONFIG_SHELL-/bin/sh}"} ## -------------------- ## ## Useful sed snippets. ## ## -------------------- ## sed_dirname='s|/[^/]*$||' sed_basename='s|^.*/||' # Sed substitution that helps us do robust quoting. It backslashifies # metacharacters that are still active within double-quoted strings. sed_quote_subst='s|\([`"$\\]\)|\\\1|g' # Same as above, but do not quote variable references. sed_double_quote_subst='s/\(["`\\]\)/\\\1/g' # Sed substitution that turns a string into a regex matching for the # string literally. sed_make_literal_regex='s|[].[^$\\*\/]|\\&|g' # Sed substitution that converts a w32 file name or path # that contains forward slashes, into one that contains # (escaped) backslashes. A very naive implementation. sed_naive_backslashify='s|\\\\*|\\|g;s|/|\\|g;s|\\|\\\\|g' # Re-'\' parameter expansions in output of sed_double_quote_subst that # were '\'-ed in input to the same. If an odd number of '\' preceded a # '$' in input to sed_double_quote_subst, that '$' was protected from # expansion. Since each input '\' is now two '\'s, look for any number # of runs of four '\'s followed by two '\'s and then a '$'. '\' that '$'. _G_bs='\\' _G_bs2='\\\\' _G_bs4='\\\\\\\\' _G_dollar='\$' sed_double_backslash="\ s/$_G_bs4/&\\ /g s/^$_G_bs2$_G_dollar/$_G_bs&/ s/\\([^$_G_bs]\\)$_G_bs2$_G_dollar/\\1$_G_bs2$_G_bs$_G_dollar/g s/\n//g" ## ----------------- ## ## Global variables. ## ## ----------------- ## # Except for the global variables explicitly listed below, the following # functions in the '^func_' namespace, and the '^require_' namespace # variables initialised in the 'Resource management' section, sourcing # this file will not pollute your global namespace with anything # else. There's no portable way to scope variables in Bourne shell # though, so actually running these functions will sometimes place # results into a variable named after the function, and often use # temporary variables in the '^_G_' namespace. If you are careful to # avoid using those namespaces casually in your sourcing script, things # should continue to work as you expect. And, of course, you can freely # overwrite any of the functions or variables defined here before # calling anything to customize them. EXIT_SUCCESS=0 EXIT_FAILURE=1 EXIT_MISMATCH=63 # $? = 63 is used to indicate version mismatch to missing. EXIT_SKIP=77 # $? = 77 is used to indicate a skipped test to automake. # Allow overriding, eg assuming that you follow the convention of # putting '$debug_cmd' at the start of all your functions, you can get # bash to show function call trace with: # # debug_cmd='eval echo "${FUNCNAME[0]} $*" >&2' bash your-script-name debug_cmd=${debug_cmd-":"} exit_cmd=: # By convention, finish your script with: # # exit $exit_status # # so that you can set exit_status to non-zero if you want to indicate # something went wrong during execution without actually bailing out at # the point of failure. exit_status=$EXIT_SUCCESS # Work around backward compatibility issue on IRIX 6.5. On IRIX 6.4+, sh # is ksh but when the shell is invoked as "sh" and the current value of # the _XPG environment variable is not equal to 1 (one), the special # positional parameter $0, within a function call, is the name of the # function. progpath=$0 # The name of this program. progname=`$ECHO "$progpath" |$SED "$sed_basename"` # Make sure we have an absolute progpath for reexecution: case $progpath in [\\/]*|[A-Za-z]:\\*) ;; *[\\/]*) progdir=`$ECHO "$progpath" |$SED "$sed_dirname"` progdir=`cd "$progdir" && pwd` progpath=$progdir/$progname ;; *) _G_IFS=$IFS IFS=${PATH_SEPARATOR-:} for progdir in $PATH; do IFS=$_G_IFS test -x "$progdir/$progname" && break done IFS=$_G_IFS test -n "$progdir" || progdir=`pwd` progpath=$progdir/$progname ;; esac ## ----------------- ## ## Standard options. ## ## ----------------- ## # The following options affect the operation of the functions defined # below, and should be set appropriately depending on run-time para- # meters passed on the command line. opt_dry_run=false opt_quiet=false opt_verbose=false # Categories 'all' and 'none' are always available. Append any others # you will pass as the first argument to func_warning from your own # code. warning_categories= # By default, display warnings according to 'opt_warning_types'. Set # 'warning_func' to ':' to elide all warnings, or func_fatal_error to # treat the next displayed warning as a fatal error. warning_func=func_warn_and_continue # Set to 'all' to display all warnings, 'none' to suppress all # warnings, or a space delimited list of some subset of # 'warning_categories' to display only the listed warnings. opt_warning_types=all ## -------------------- ## ## Resource management. ## ## -------------------- ## # This section contains definitions for functions that each ensure a # particular resource (a file, or a non-empty configuration variable for # example) is available, and if appropriate to extract default values # from pertinent package files. Call them using their associated # 'require_*' variable to ensure that they are executed, at most, once. # # It's entirely deliberate that calling these functions can set # variables that don't obey the namespace limitations obeyed by the rest # of this file, in order that that they be as useful as possible to # callers. # require_term_colors # ------------------- # Allow display of bold text on terminals that support it. require_term_colors=func_require_term_colors func_require_term_colors () { $debug_cmd test -t 1 && { # COLORTERM and USE_ANSI_COLORS environment variables take # precedence, because most terminfo databases neglect to describe # whether color sequences are supported. test -n "${COLORTERM+set}" && : ${USE_ANSI_COLORS="1"} if test 1 = "$USE_ANSI_COLORS"; then # Standard ANSI escape sequences tc_reset='' tc_bold=''; tc_standout='' tc_red=''; tc_green='' tc_blue=''; tc_cyan='' else # Otherwise trust the terminfo database after all. test -n "`tput sgr0 2>/dev/null`" && { tc_reset=`tput sgr0` test -n "`tput bold 2>/dev/null`" && tc_bold=`tput bold` tc_standout=$tc_bold test -n "`tput smso 2>/dev/null`" && tc_standout=`tput smso` test -n "`tput setaf 1 2>/dev/null`" && tc_red=`tput setaf 1` test -n "`tput setaf 2 2>/dev/null`" && tc_green=`tput setaf 2` test -n "`tput setaf 4 2>/dev/null`" && tc_blue=`tput setaf 4` test -n "`tput setaf 5 2>/dev/null`" && tc_cyan=`tput setaf 5` } fi } require_term_colors=: } ## ----------------- ## ## Function library. ## ## ----------------- ## # This section contains a variety of useful functions to call in your # scripts. Take note of the portable wrappers for features provided by # some modern shells, which will fall back to slower equivalents on # less featureful shells. # func_append VAR VALUE # --------------------- # Append VALUE onto the existing contents of VAR. # We should try to minimise forks, especially on Windows where they are # unreasonably slow, so skip the feature probes when bash or zsh are # being used: if test set = "${BASH_VERSION+set}${ZSH_VERSION+set}"; then : ${_G_HAVE_ARITH_OP="yes"} : ${_G_HAVE_XSI_OPS="yes"} # The += operator was introduced in bash 3.1 case $BASH_VERSION in [12].* | 3.0 | 3.0*) ;; *) : ${_G_HAVE_PLUSEQ_OP="yes"} ;; esac fi # _G_HAVE_PLUSEQ_OP # Can be empty, in which case the shell is probed, "yes" if += is # useable or anything else if it does not work. test -z "$_G_HAVE_PLUSEQ_OP" \ && (eval 'x=a; x+=" b"; test "a b" = "$x"') 2>/dev/null \ && _G_HAVE_PLUSEQ_OP=yes if test yes = "$_G_HAVE_PLUSEQ_OP" then # This is an XSI compatible shell, allowing a faster implementation... eval 'func_append () { $debug_cmd eval "$1+=\$2" }' else # ...otherwise fall back to using expr, which is often a shell builtin. func_append () { $debug_cmd eval "$1=\$$1\$2" } fi # func_append_quoted VAR VALUE # ---------------------------- # Quote VALUE and append to the end of shell variable VAR, separated # by a space. if test yes = "$_G_HAVE_PLUSEQ_OP"; then eval 'func_append_quoted () { $debug_cmd func_quote_for_eval "$2" eval "$1+=\\ \$func_quote_for_eval_result" }' else func_append_quoted () { $debug_cmd func_quote_for_eval "$2" eval "$1=\$$1\\ \$func_quote_for_eval_result" } fi # func_append_uniq VAR VALUE # -------------------------- # Append unique VALUE onto the existing contents of VAR, assuming # entries are delimited by the first character of VALUE. For example: # # func_append_uniq options " --another-option option-argument" # # will only append to $options if " --another-option option-argument " # is not already present somewhere in $options already (note spaces at # each end implied by leading space in second argument). func_append_uniq () { $debug_cmd eval _G_current_value='`$ECHO $'$1'`' _G_delim=`expr "$2" : '\(.\)'` case $_G_delim$_G_current_value$_G_delim in *"$2$_G_delim"*) ;; *) func_append "$@" ;; esac } # func_arith TERM... # ------------------ # Set func_arith_result to the result of evaluating TERMs. test -z "$_G_HAVE_ARITH_OP" \ && (eval 'test 2 = $(( 1 + 1 ))') 2>/dev/null \ && _G_HAVE_ARITH_OP=yes if test yes = "$_G_HAVE_ARITH_OP"; then eval 'func_arith () { $debug_cmd func_arith_result=$(( $* )) }' else func_arith () { $debug_cmd func_arith_result=`expr "$@"` } fi # func_basename FILE # ------------------ # Set func_basename_result to FILE with everything up to and including # the last / stripped. if test yes = "$_G_HAVE_XSI_OPS"; then # If this shell supports suffix pattern removal, then use it to avoid # forking. Hide the definitions single quotes in case the shell chokes # on unsupported syntax... _b='func_basename_result=${1##*/}' _d='case $1 in */*) func_dirname_result=${1%/*}$2 ;; * ) func_dirname_result=$3 ;; esac' else # ...otherwise fall back to using sed. _b='func_basename_result=`$ECHO "$1" |$SED "$sed_basename"`' _d='func_dirname_result=`$ECHO "$1" |$SED "$sed_dirname"` if test "X$func_dirname_result" = "X$1"; then func_dirname_result=$3 else func_append func_dirname_result "$2" fi' fi eval 'func_basename () { $debug_cmd '"$_b"' }' # func_dirname FILE APPEND NONDIR_REPLACEMENT # ------------------------------------------- # Compute the dirname of FILE. If nonempty, add APPEND to the result, # otherwise set result to NONDIR_REPLACEMENT. eval 'func_dirname () { $debug_cmd '"$_d"' }' # func_dirname_and_basename FILE APPEND NONDIR_REPLACEMENT # -------------------------------------------------------- # Perform func_basename and func_dirname in a single function # call: # dirname: Compute the dirname of FILE. If nonempty, # add APPEND to the result, otherwise set result # to NONDIR_REPLACEMENT. # value returned in "$func_dirname_result" # basename: Compute filename of FILE. # value retuned in "$func_basename_result" # For efficiency, we do not delegate to the functions above but instead # duplicate the functionality here. eval 'func_dirname_and_basename () { $debug_cmd '"$_b"' '"$_d"' }' # func_echo ARG... # ---------------- # Echo program name prefixed message. func_echo () { $debug_cmd _G_message=$* func_echo_IFS=$IFS IFS=$nl for _G_line in $_G_message; do IFS=$func_echo_IFS $ECHO "$progname: $_G_line" done IFS=$func_echo_IFS } # func_echo_all ARG... # -------------------- # Invoke $ECHO with all args, space-separated. func_echo_all () { $ECHO "$*" } # func_echo_infix_1 INFIX ARG... # ------------------------------ # Echo program name, followed by INFIX on the first line, with any # additional lines not showing INFIX. func_echo_infix_1 () { $debug_cmd $require_term_colors _G_infix=$1; shift _G_indent=$_G_infix _G_prefix="$progname: $_G_infix: " _G_message=$* # Strip color escape sequences before counting printable length for _G_tc in "$tc_reset" "$tc_bold" "$tc_standout" "$tc_red" "$tc_green" "$tc_blue" "$tc_cyan" do test -n "$_G_tc" && { _G_esc_tc=`$ECHO "$_G_tc" | $SED "$sed_make_literal_regex"` _G_indent=`$ECHO "$_G_indent" | $SED "s|$_G_esc_tc||g"` } done _G_indent="$progname: "`echo "$_G_indent" | $SED 's|.| |g'`" " ## exclude from sc_prohibit_nested_quotes func_echo_infix_1_IFS=$IFS IFS=$nl for _G_line in $_G_message; do IFS=$func_echo_infix_1_IFS $ECHO "$_G_prefix$tc_bold$_G_line$tc_reset" >&2 _G_prefix=$_G_indent done IFS=$func_echo_infix_1_IFS } # func_error ARG... # ----------------- # Echo program name prefixed message to standard error. func_error () { $debug_cmd $require_term_colors func_echo_infix_1 " $tc_standout${tc_red}error$tc_reset" "$*" >&2 } # func_fatal_error ARG... # ----------------------- # Echo program name prefixed message to standard error, and exit. func_fatal_error () { $debug_cmd func_error "$*" exit $EXIT_FAILURE } # func_grep EXPRESSION FILENAME # ----------------------------- # Check whether EXPRESSION matches any line of FILENAME, without output. func_grep () { $debug_cmd $GREP "$1" "$2" >/dev/null 2>&1 } # func_len STRING # --------------- # Set func_len_result to the length of STRING. STRING may not # start with a hyphen. test -z "$_G_HAVE_XSI_OPS" \ && (eval 'x=a/b/c; test 5aa/bb/cc = "${#x}${x%%/*}${x%/*}${x#*/}${x##*/}"') 2>/dev/null \ && _G_HAVE_XSI_OPS=yes if test yes = "$_G_HAVE_XSI_OPS"; then eval 'func_len () { $debug_cmd func_len_result=${#1} }' else func_len () { $debug_cmd func_len_result=`expr "$1" : ".*" 2>/dev/null || echo $max_cmd_len` } fi # func_mkdir_p DIRECTORY-PATH # --------------------------- # Make sure the entire path to DIRECTORY-PATH is available. func_mkdir_p () { $debug_cmd _G_directory_path=$1 _G_dir_list= if test -n "$_G_directory_path" && test : != "$opt_dry_run"; then # Protect directory names starting with '-' case $_G_directory_path in -*) _G_directory_path=./$_G_directory_path ;; esac # While some portion of DIR does not yet exist... while test ! -d "$_G_directory_path"; do # ...make a list in topmost first order. Use a colon delimited # list incase some portion of path contains whitespace. _G_dir_list=$_G_directory_path:$_G_dir_list # If the last portion added has no slash in it, the list is done case $_G_directory_path in */*) ;; *) break ;; esac # ...otherwise throw away the child directory and loop _G_directory_path=`$ECHO "$_G_directory_path" | $SED -e "$sed_dirname"` done _G_dir_list=`$ECHO "$_G_dir_list" | $SED 's|:*$||'` func_mkdir_p_IFS=$IFS; IFS=: for _G_dir in $_G_dir_list; do IFS=$func_mkdir_p_IFS # mkdir can fail with a 'File exist' error if two processes # try to create one of the directories concurrently. Don't # stop in that case! $MKDIR "$_G_dir" 2>/dev/null || : done IFS=$func_mkdir_p_IFS # Bail out if we (or some other process) failed to create a directory. test -d "$_G_directory_path" || \ func_fatal_error "Failed to create '$1'" fi } # func_mktempdir [BASENAME] # ------------------------- # Make a temporary directory that won't clash with other running # libtool processes, and avoids race conditions if possible. If # given, BASENAME is the basename for that directory. func_mktempdir () { $debug_cmd _G_template=${TMPDIR-/tmp}/${1-$progname} if test : = "$opt_dry_run"; then # Return a directory name, but don't create it in dry-run mode _G_tmpdir=$_G_template-$$ else # If mktemp works, use that first and foremost _G_tmpdir=`mktemp -d "$_G_template-XXXXXXXX" 2>/dev/null` if test ! -d "$_G_tmpdir"; then # Failing that, at least try and use $RANDOM to avoid a race _G_tmpdir=$_G_template-${RANDOM-0}$$ func_mktempdir_umask=`umask` umask 0077 $MKDIR "$_G_tmpdir" umask $func_mktempdir_umask fi # If we're not in dry-run mode, bomb out on failure test -d "$_G_tmpdir" || \ func_fatal_error "cannot create temporary directory '$_G_tmpdir'" fi $ECHO "$_G_tmpdir" } # func_normal_abspath PATH # ------------------------ # Remove doubled-up and trailing slashes, "." path components, # and cancel out any ".." path components in PATH after making # it an absolute path. func_normal_abspath () { $debug_cmd # These SED scripts presuppose an absolute path with a trailing slash. _G_pathcar='s|^/\([^/]*\).*$|\1|' _G_pathcdr='s|^/[^/]*||' _G_removedotparts=':dotsl s|/\./|/|g t dotsl s|/\.$|/|' _G_collapseslashes='s|/\{1,\}|/|g' _G_finalslash='s|/*$|/|' # Start from root dir and reassemble the path. func_normal_abspath_result= func_normal_abspath_tpath=$1 func_normal_abspath_altnamespace= case $func_normal_abspath_tpath in "") # Empty path, that just means $cwd. func_stripname '' '/' "`pwd`" func_normal_abspath_result=$func_stripname_result return ;; # The next three entries are used to spot a run of precisely # two leading slashes without using negated character classes; # we take advantage of case's first-match behaviour. ///*) # Unusual form of absolute path, do nothing. ;; //*) # Not necessarily an ordinary path; POSIX reserves leading '//' # and for example Cygwin uses it to access remote file shares # over CIFS/SMB, so we conserve a leading double slash if found. func_normal_abspath_altnamespace=/ ;; /*) # Absolute path, do nothing. ;; *) # Relative path, prepend $cwd. func_normal_abspath_tpath=`pwd`/$func_normal_abspath_tpath ;; esac # Cancel out all the simple stuff to save iterations. We also want # the path to end with a slash for ease of parsing, so make sure # there is one (and only one) here. func_normal_abspath_tpath=`$ECHO "$func_normal_abspath_tpath" | $SED \ -e "$_G_removedotparts" -e "$_G_collapseslashes" -e "$_G_finalslash"` while :; do # Processed it all yet? if test / = "$func_normal_abspath_tpath"; then # If we ascended to the root using ".." the result may be empty now. if test -z "$func_normal_abspath_result"; then func_normal_abspath_result=/ fi break fi func_normal_abspath_tcomponent=`$ECHO "$func_normal_abspath_tpath" | $SED \ -e "$_G_pathcar"` func_normal_abspath_tpath=`$ECHO "$func_normal_abspath_tpath" | $SED \ -e "$_G_pathcdr"` # Figure out what to do with it case $func_normal_abspath_tcomponent in "") # Trailing empty path component, ignore it. ;; ..) # Parent dir; strip last assembled component from result. func_dirname "$func_normal_abspath_result" func_normal_abspath_result=$func_dirname_result ;; *) # Actual path component, append it. func_append func_normal_abspath_result "/$func_normal_abspath_tcomponent" ;; esac done # Restore leading double-slash if one was found on entry. func_normal_abspath_result=$func_normal_abspath_altnamespace$func_normal_abspath_result } # func_notquiet ARG... # -------------------- # Echo program name prefixed message only when not in quiet mode. func_notquiet () { $debug_cmd $opt_quiet || func_echo ${1+"$@"} # A bug in bash halts the script if the last line of a function # fails when set -e is in force, so we need another command to # work around that: : } # func_relative_path SRCDIR DSTDIR # -------------------------------- # Set func_relative_path_result to the relative path from SRCDIR to DSTDIR. func_relative_path () { $debug_cmd func_relative_path_result= func_normal_abspath "$1" func_relative_path_tlibdir=$func_normal_abspath_result func_normal_abspath "$2" func_relative_path_tbindir=$func_normal_abspath_result # Ascend the tree starting from libdir while :; do # check if we have found a prefix of bindir case $func_relative_path_tbindir in $func_relative_path_tlibdir) # found an exact match func_relative_path_tcancelled= break ;; $func_relative_path_tlibdir*) # found a matching prefix func_stripname "$func_relative_path_tlibdir" '' "$func_relative_path_tbindir" func_relative_path_tcancelled=$func_stripname_result if test -z "$func_relative_path_result"; then func_relative_path_result=. fi break ;; *) func_dirname $func_relative_path_tlibdir func_relative_path_tlibdir=$func_dirname_result if test -z "$func_relative_path_tlibdir"; then # Have to descend all the way to the root! func_relative_path_result=../$func_relative_path_result func_relative_path_tcancelled=$func_relative_path_tbindir break fi func_relative_path_result=../$func_relative_path_result ;; esac done # Now calculate path; take care to avoid doubling-up slashes. func_stripname '' '/' "$func_relative_path_result" func_relative_path_result=$func_stripname_result func_stripname '/' '/' "$func_relative_path_tcancelled" if test -n "$func_stripname_result"; then func_append func_relative_path_result "/$func_stripname_result" fi # Normalisation. If bindir is libdir, return '.' else relative path. if test -n "$func_relative_path_result"; then func_stripname './' '' "$func_relative_path_result" func_relative_path_result=$func_stripname_result fi test -n "$func_relative_path_result" || func_relative_path_result=. : } # func_quote_for_eval ARG... # -------------------------- # Aesthetically quote ARGs to be evaled later. # This function returns two values: # i) func_quote_for_eval_result # double-quoted, suitable for a subsequent eval # ii) func_quote_for_eval_unquoted_result # has all characters that are still active within double # quotes backslashified. func_quote_for_eval () { $debug_cmd func_quote_for_eval_unquoted_result= func_quote_for_eval_result= while test 0 -lt $#; do case $1 in *[\\\`\"\$]*) _G_unquoted_arg=`printf '%s\n' "$1" |$SED "$sed_quote_subst"` ;; *) _G_unquoted_arg=$1 ;; esac if test -n "$func_quote_for_eval_unquoted_result"; then func_append func_quote_for_eval_unquoted_result " $_G_unquoted_arg" else func_append func_quote_for_eval_unquoted_result "$_G_unquoted_arg" fi case $_G_unquoted_arg in # Double-quote args containing shell metacharacters to delay # word splitting, command substitution and variable expansion # for a subsequent eval. # Many Bourne shells cannot handle close brackets correctly # in scan sets, so we specify it separately. *[\[\~\#\^\&\*\(\)\{\}\|\;\<\>\?\'\ \ ]*|*]*|"") _G_quoted_arg=\"$_G_unquoted_arg\" ;; *) _G_quoted_arg=$_G_unquoted_arg ;; esac if test -n "$func_quote_for_eval_result"; then func_append func_quote_for_eval_result " $_G_quoted_arg" else func_append func_quote_for_eval_result "$_G_quoted_arg" fi shift done } # func_quote_for_expand ARG # ------------------------- # Aesthetically quote ARG to be evaled later; same as above, # but do not quote variable references. func_quote_for_expand () { $debug_cmd case $1 in *[\\\`\"]*) _G_arg=`$ECHO "$1" | $SED \ -e "$sed_double_quote_subst" -e "$sed_double_backslash"` ;; *) _G_arg=$1 ;; esac case $_G_arg in # Double-quote args containing shell metacharacters to delay # word splitting and command substitution for a subsequent eval. # Many Bourne shells cannot handle close brackets correctly # in scan sets, so we specify it separately. *[\[\~\#\^\&\*\(\)\{\}\|\;\<\>\?\'\ \ ]*|*]*|"") _G_arg=\"$_G_arg\" ;; esac func_quote_for_expand_result=$_G_arg } # func_stripname PREFIX SUFFIX NAME # --------------------------------- # strip PREFIX and SUFFIX from NAME, and store in func_stripname_result. # PREFIX and SUFFIX must not contain globbing or regex special # characters, hashes, percent signs, but SUFFIX may contain a leading # dot (in which case that matches only a dot). if test yes = "$_G_HAVE_XSI_OPS"; then eval 'func_stripname () { $debug_cmd # pdksh 5.2.14 does not do ${X%$Y} correctly if both X and Y are # positional parameters, so assign one to ordinary variable first. func_stripname_result=$3 func_stripname_result=${func_stripname_result#"$1"} func_stripname_result=${func_stripname_result%"$2"} }' else func_stripname () { $debug_cmd case $2 in .*) func_stripname_result=`$ECHO "$3" | $SED -e "s%^$1%%" -e "s%\\\\$2\$%%"`;; *) func_stripname_result=`$ECHO "$3" | $SED -e "s%^$1%%" -e "s%$2\$%%"`;; esac } fi # func_show_eval CMD [FAIL_EXP] # ----------------------------- # Unless opt_quiet is true, then output CMD. Then, if opt_dryrun is # not true, evaluate CMD. If the evaluation of CMD fails, and FAIL_EXP # is given, then evaluate it. func_show_eval () { $debug_cmd _G_cmd=$1 _G_fail_exp=${2-':'} func_quote_for_expand "$_G_cmd" eval "func_notquiet $func_quote_for_expand_result" $opt_dry_run || { eval "$_G_cmd" _G_status=$? if test 0 -ne "$_G_status"; then eval "(exit $_G_status); $_G_fail_exp" fi } } # func_show_eval_locale CMD [FAIL_EXP] # ------------------------------------ # Unless opt_quiet is true, then output CMD. Then, if opt_dryrun is # not true, evaluate CMD. If the evaluation of CMD fails, and FAIL_EXP # is given, then evaluate it. Use the saved locale for evaluation. func_show_eval_locale () { $debug_cmd _G_cmd=$1 _G_fail_exp=${2-':'} $opt_quiet || { func_quote_for_expand "$_G_cmd" eval "func_echo $func_quote_for_expand_result" } $opt_dry_run || { eval "$_G_user_locale $_G_cmd" _G_status=$? eval "$_G_safe_locale" if test 0 -ne "$_G_status"; then eval "(exit $_G_status); $_G_fail_exp" fi } } # func_tr_sh # ---------- # Turn $1 into a string suitable for a shell variable name. # Result is stored in $func_tr_sh_result. All characters # not in the set a-zA-Z0-9_ are replaced with '_'. Further, # if $1 begins with a digit, a '_' is prepended as well. func_tr_sh () { $debug_cmd case $1 in [0-9]* | *[!a-zA-Z0-9_]*) func_tr_sh_result=`$ECHO "$1" | $SED -e 's/^\([0-9]\)/_\1/' -e 's/[^a-zA-Z0-9_]/_/g'` ;; * ) func_tr_sh_result=$1 ;; esac } # func_verbose ARG... # ------------------- # Echo program name prefixed message in verbose mode only. func_verbose () { $debug_cmd $opt_verbose && func_echo "$*" : } # func_warn_and_continue ARG... # ----------------------------- # Echo program name prefixed warning message to standard error. func_warn_and_continue () { $debug_cmd $require_term_colors func_echo_infix_1 "${tc_red}warning$tc_reset" "$*" >&2 } # func_warning CATEGORY ARG... # ---------------------------- # Echo program name prefixed warning message to standard error. Warning # messages can be filtered according to CATEGORY, where this function # elides messages where CATEGORY is not listed in the global variable # 'opt_warning_types'. func_warning () { $debug_cmd # CATEGORY must be in the warning_categories list! case " $warning_categories " in *" $1 "*) ;; *) func_internal_error "invalid warning category '$1'" ;; esac _G_category=$1 shift case " $opt_warning_types " in *" $_G_category "*) $warning_func ${1+"$@"} ;; esac } # func_sort_ver VER1 VER2 # ----------------------- # 'sort -V' is not generally available. # Note this deviates from the version comparison in automake # in that it treats 1.5 < 1.5.0, and treats 1.4.4a < 1.4-p3a # but this should suffice as we won't be specifying old # version formats or redundant trailing .0 in bootstrap.conf. # If we did want full compatibility then we should probably # use m4_version_compare from autoconf. func_sort_ver () { $debug_cmd printf '%s\n%s\n' "$1" "$2" \ | sort -t. -k 1,1n -k 2,2n -k 3,3n -k 4,4n -k 5,5n -k 6,6n -k 7,7n -k 8,8n -k 9,9n } # func_lt_ver PREV CURR # --------------------- # Return true if PREV and CURR are in the correct order according to # func_sort_ver, otherwise false. Use it like this: # # func_lt_ver "$prev_ver" "$proposed_ver" || func_fatal_error "..." func_lt_ver () { $debug_cmd test "x$1" = x`func_sort_ver "$1" "$2" | $SED 1q` } # Local variables: # mode: shell-script # sh-indentation: 2 # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-pattern: "10/scriptversion=%:y-%02m-%02d.%02H; # UTC" # time-stamp-time-zone: "UTC" # End: #! /bin/sh # Set a version string for this script. scriptversion=2014-01-07.03; # UTC # A portable, pluggable option parser for Bourne shell. # Written by Gary V. Vaughan, 2010 # Copyright (C) 2010-2015 Free Software Foundation, Inc. # This is free software; see the source for copying conditions. There is NO # warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # You should have received a copy of the GNU General Public License # along with this program. If not, see . # Please report bugs or propose patches to gary@gnu.org. ## ------ ## ## Usage. ## ## ------ ## # This file is a library for parsing options in your shell scripts along # with assorted other useful supporting features that you can make use # of too. # # For the simplest scripts you might need only: # # #!/bin/sh # . relative/path/to/funclib.sh # . relative/path/to/options-parser # scriptversion=1.0 # func_options ${1+"$@"} # eval set dummy "$func_options_result"; shift # ...rest of your script... # # In order for the '--version' option to work, you will need to have a # suitably formatted comment like the one at the top of this file # starting with '# Written by ' and ending with '# warranty; '. # # For '-h' and '--help' to work, you will also need a one line # description of your script's purpose in a comment directly above the # '# Written by ' line, like the one at the top of this file. # # The default options also support '--debug', which will turn on shell # execution tracing (see the comment above debug_cmd below for another # use), and '--verbose' and the func_verbose function to allow your script # to display verbose messages only when your user has specified # '--verbose'. # # After sourcing this file, you can plug processing for additional # options by amending the variables from the 'Configuration' section # below, and following the instructions in the 'Option parsing' # section further down. ## -------------- ## ## Configuration. ## ## -------------- ## # You should override these variables in your script after sourcing this # file so that they reflect the customisations you have added to the # option parser. # The usage line for option parsing errors and the start of '-h' and # '--help' output messages. You can embed shell variables for delayed # expansion at the time the message is displayed, but you will need to # quote other shell meta-characters carefully to prevent them being # expanded when the contents are evaled. usage='$progpath [OPTION]...' # Short help message in response to '-h' and '--help'. Add to this or # override it after sourcing this library to reflect the full set of # options your script accepts. usage_message="\ --debug enable verbose shell tracing -W, --warnings=CATEGORY report the warnings falling in CATEGORY [all] -v, --verbose verbosely report processing --version print version information and exit -h, --help print short or long help message and exit " # Additional text appended to 'usage_message' in response to '--help'. long_help_message=" Warning categories include: 'all' show all warnings 'none' turn off all the warnings 'error' warnings are treated as fatal errors" # Help message printed before fatal option parsing errors. fatal_help="Try '\$progname --help' for more information." ## ------------------------- ## ## Hook function management. ## ## ------------------------- ## # This section contains functions for adding, removing, and running hooks # to the main code. A hook is just a named list of of function, that can # be run in order later on. # func_hookable FUNC_NAME # ----------------------- # Declare that FUNC_NAME will run hooks added with # 'func_add_hook FUNC_NAME ...'. func_hookable () { $debug_cmd func_append hookable_fns " $1" } # func_add_hook FUNC_NAME HOOK_FUNC # --------------------------------- # Request that FUNC_NAME call HOOK_FUNC before it returns. FUNC_NAME must # first have been declared "hookable" by a call to 'func_hookable'. func_add_hook () { $debug_cmd case " $hookable_fns " in *" $1 "*) ;; *) func_fatal_error "'$1' does not accept hook functions." ;; esac eval func_append ${1}_hooks '" $2"' } # func_remove_hook FUNC_NAME HOOK_FUNC # ------------------------------------ # Remove HOOK_FUNC from the list of functions called by FUNC_NAME. func_remove_hook () { $debug_cmd eval ${1}_hooks='`$ECHO "\$'$1'_hooks" |$SED "s| '$2'||"`' } # func_run_hooks FUNC_NAME [ARG]... # --------------------------------- # Run all hook functions registered to FUNC_NAME. # It is assumed that the list of hook functions contains nothing more # than a whitespace-delimited list of legal shell function names, and # no effort is wasted trying to catch shell meta-characters or preserve # whitespace. func_run_hooks () { $debug_cmd case " $hookable_fns " in *" $1 "*) ;; *) func_fatal_error "'$1' does not support hook funcions.n" ;; esac eval _G_hook_fns=\$$1_hooks; shift for _G_hook in $_G_hook_fns; do eval $_G_hook '"$@"' # store returned options list back into positional # parameters for next 'cmd' execution. eval _G_hook_result=\$${_G_hook}_result eval set dummy "$_G_hook_result"; shift done func_quote_for_eval ${1+"$@"} func_run_hooks_result=$func_quote_for_eval_result } ## --------------- ## ## Option parsing. ## ## --------------- ## # In order to add your own option parsing hooks, you must accept the # full positional parameter list in your hook function, remove any # options that you action, and then pass back the remaining unprocessed # options in '_result', escaped suitably for # 'eval'. Like this: # # my_options_prep () # { # $debug_cmd # # # Extend the existing usage message. # usage_message=$usage_message' # -s, --silent don'\''t print informational messages # ' # # func_quote_for_eval ${1+"$@"} # my_options_prep_result=$func_quote_for_eval_result # } # func_add_hook func_options_prep my_options_prep # # # my_silent_option () # { # $debug_cmd # # # Note that for efficiency, we parse as many options as we can # # recognise in a loop before passing the remainder back to the # # caller on the first unrecognised argument we encounter. # while test $# -gt 0; do # opt=$1; shift # case $opt in # --silent|-s) opt_silent=: ;; # # Separate non-argument short options: # -s*) func_split_short_opt "$_G_opt" # set dummy "$func_split_short_opt_name" \ # "-$func_split_short_opt_arg" ${1+"$@"} # shift # ;; # *) set dummy "$_G_opt" "$*"; shift; break ;; # esac # done # # func_quote_for_eval ${1+"$@"} # my_silent_option_result=$func_quote_for_eval_result # } # func_add_hook func_parse_options my_silent_option # # # my_option_validation () # { # $debug_cmd # # $opt_silent && $opt_verbose && func_fatal_help "\ # '--silent' and '--verbose' options are mutually exclusive." # # func_quote_for_eval ${1+"$@"} # my_option_validation_result=$func_quote_for_eval_result # } # func_add_hook func_validate_options my_option_validation # # You'll alse need to manually amend $usage_message to reflect the extra # options you parse. It's preferable to append if you can, so that # multiple option parsing hooks can be added safely. # func_options [ARG]... # --------------------- # All the functions called inside func_options are hookable. See the # individual implementations for details. func_hookable func_options func_options () { $debug_cmd func_options_prep ${1+"$@"} eval func_parse_options \ ${func_options_prep_result+"$func_options_prep_result"} eval func_validate_options \ ${func_parse_options_result+"$func_parse_options_result"} eval func_run_hooks func_options \ ${func_validate_options_result+"$func_validate_options_result"} # save modified positional parameters for caller func_options_result=$func_run_hooks_result } # func_options_prep [ARG]... # -------------------------- # All initialisations required before starting the option parse loop. # Note that when calling hook functions, we pass through the list of # positional parameters. If a hook function modifies that list, and # needs to propogate that back to rest of this script, then the complete # modified list must be put in 'func_run_hooks_result' before # returning. func_hookable func_options_prep func_options_prep () { $debug_cmd # Option defaults: opt_verbose=false opt_warning_types= func_run_hooks func_options_prep ${1+"$@"} # save modified positional parameters for caller func_options_prep_result=$func_run_hooks_result } # func_parse_options [ARG]... # --------------------------- # The main option parsing loop. func_hookable func_parse_options func_parse_options () { $debug_cmd func_parse_options_result= # this just eases exit handling while test $# -gt 0; do # Defer to hook functions for initial option parsing, so they # get priority in the event of reusing an option name. func_run_hooks func_parse_options ${1+"$@"} # Adjust func_parse_options positional parameters to match eval set dummy "$func_run_hooks_result"; shift # Break out of the loop if we already parsed every option. test $# -gt 0 || break _G_opt=$1 shift case $_G_opt in --debug|-x) debug_cmd='set -x' func_echo "enabling shell trace mode" $debug_cmd ;; --no-warnings|--no-warning|--no-warn) set dummy --warnings none ${1+"$@"} shift ;; --warnings|--warning|-W) test $# = 0 && func_missing_arg $_G_opt && break case " $warning_categories $1" in *" $1 "*) # trailing space prevents matching last $1 above func_append_uniq opt_warning_types " $1" ;; *all) opt_warning_types=$warning_categories ;; *none) opt_warning_types=none warning_func=: ;; *error) opt_warning_types=$warning_categories warning_func=func_fatal_error ;; *) func_fatal_error \ "unsupported warning category: '$1'" ;; esac shift ;; --verbose|-v) opt_verbose=: ;; --version) func_version ;; -\?|-h) func_usage ;; --help) func_help ;; # Separate optargs to long options (plugins may need this): --*=*) func_split_equals "$_G_opt" set dummy "$func_split_equals_lhs" \ "$func_split_equals_rhs" ${1+"$@"} shift ;; # Separate optargs to short options: -W*) func_split_short_opt "$_G_opt" set dummy "$func_split_short_opt_name" \ "$func_split_short_opt_arg" ${1+"$@"} shift ;; # Separate non-argument short options: -\?*|-h*|-v*|-x*) func_split_short_opt "$_G_opt" set dummy "$func_split_short_opt_name" \ "-$func_split_short_opt_arg" ${1+"$@"} shift ;; --) break ;; -*) func_fatal_help "unrecognised option: '$_G_opt'" ;; *) set dummy "$_G_opt" ${1+"$@"}; shift; break ;; esac done # save modified positional parameters for caller func_quote_for_eval ${1+"$@"} func_parse_options_result=$func_quote_for_eval_result } # func_validate_options [ARG]... # ------------------------------ # Perform any sanity checks on option settings and/or unconsumed # arguments. func_hookable func_validate_options func_validate_options () { $debug_cmd # Display all warnings if -W was not given. test -n "$opt_warning_types" || opt_warning_types=" $warning_categories" func_run_hooks func_validate_options ${1+"$@"} # Bail if the options were screwed! $exit_cmd $EXIT_FAILURE # save modified positional parameters for caller func_validate_options_result=$func_run_hooks_result } ## ----------------- ## ## Helper functions. ## ## ----------------- ## # This section contains the helper functions used by the rest of the # hookable option parser framework in ascii-betical order. # func_fatal_help ARG... # ---------------------- # Echo program name prefixed message to standard error, followed by # a help hint, and exit. func_fatal_help () { $debug_cmd eval \$ECHO \""Usage: $usage"\" eval \$ECHO \""$fatal_help"\" func_error ${1+"$@"} exit $EXIT_FAILURE } # func_help # --------- # Echo long help message to standard output and exit. func_help () { $debug_cmd func_usage_message $ECHO "$long_help_message" exit 0 } # func_missing_arg ARGNAME # ------------------------ # Echo program name prefixed message to standard error and set global # exit_cmd. func_missing_arg () { $debug_cmd func_error "Missing argument for '$1'." exit_cmd=exit } # func_split_equals STRING # ------------------------ # Set func_split_equals_lhs and func_split_equals_rhs shell variables after # splitting STRING at the '=' sign. test -z "$_G_HAVE_XSI_OPS" \ && (eval 'x=a/b/c; test 5aa/bb/cc = "${#x}${x%%/*}${x%/*}${x#*/}${x##*/}"') 2>/dev/null \ && _G_HAVE_XSI_OPS=yes if test yes = "$_G_HAVE_XSI_OPS" then # This is an XSI compatible shell, allowing a faster implementation... eval 'func_split_equals () { $debug_cmd func_split_equals_lhs=${1%%=*} func_split_equals_rhs=${1#*=} test "x$func_split_equals_lhs" = "x$1" \ && func_split_equals_rhs= }' else # ...otherwise fall back to using expr, which is often a shell builtin. func_split_equals () { $debug_cmd func_split_equals_lhs=`expr "x$1" : 'x\([^=]*\)'` func_split_equals_rhs= test "x$func_split_equals_lhs" = "x$1" \ || func_split_equals_rhs=`expr "x$1" : 'x[^=]*=\(.*\)$'` } fi #func_split_equals # func_split_short_opt SHORTOPT # ----------------------------- # Set func_split_short_opt_name and func_split_short_opt_arg shell # variables after splitting SHORTOPT after the 2nd character. if test yes = "$_G_HAVE_XSI_OPS" then # This is an XSI compatible shell, allowing a faster implementation... eval 'func_split_short_opt () { $debug_cmd func_split_short_opt_arg=${1#??} func_split_short_opt_name=${1%"$func_split_short_opt_arg"} }' else # ...otherwise fall back to using expr, which is often a shell builtin. func_split_short_opt () { $debug_cmd func_split_short_opt_name=`expr "x$1" : 'x-\(.\)'` func_split_short_opt_arg=`expr "x$1" : 'x-.\(.*\)$'` } fi #func_split_short_opt # func_usage # ---------- # Echo short help message to standard output and exit. func_usage () { $debug_cmd func_usage_message $ECHO "Run '$progname --help |${PAGER-more}' for full usage" exit 0 } # func_usage_message # ------------------ # Echo short help message to standard output. func_usage_message () { $debug_cmd eval \$ECHO \""Usage: $usage"\" echo $SED -n 's|^# || /^Written by/{ x;p;x } h /^Written by/q' < "$progpath" echo eval \$ECHO \""$usage_message"\" } # func_version # ------------ # Echo version message to standard output and exit. func_version () { $debug_cmd printf '%s\n' "$progname $scriptversion" $SED -n ' /(C)/!b go :more /\./!{ N s|\n# | | b more } :go /^# Written by /,/# warranty; / { s|^# || s|^# *$|| s|\((C)\)[ 0-9,-]*[ ,-]\([1-9][0-9]* \)|\1 \2| p } /^# Written by / { s|^# || p } /^warranty; /q' < "$progpath" exit $? } # Local variables: # mode: shell-script # sh-indentation: 2 # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-pattern: "10/scriptversion=%:y-%02m-%02d.%02H; # UTC" # time-stamp-time-zone: "UTC" # End: # Set a version string. scriptversion='(GNU libtool) 2.4.6' # func_echo ARG... # ---------------- # Libtool also displays the current mode in messages, so override # funclib.sh func_echo with this custom definition. func_echo () { $debug_cmd _G_message=$* func_echo_IFS=$IFS IFS=$nl for _G_line in $_G_message; do IFS=$func_echo_IFS $ECHO "$progname${opt_mode+: $opt_mode}: $_G_line" done IFS=$func_echo_IFS } # func_warning ARG... # ------------------- # Libtool warnings are not categorized, so override funclib.sh # func_warning with this simpler definition. func_warning () { $debug_cmd $warning_func ${1+"$@"} } ## ---------------- ## ## Options parsing. ## ## ---------------- ## # Hook in the functions to make sure our own options are parsed during # the option parsing loop. usage='$progpath [OPTION]... [MODE-ARG]...' # Short help message in response to '-h'. usage_message="Options: --config show all configuration variables --debug enable verbose shell tracing -n, --dry-run display commands without modifying any files --features display basic configuration information and exit --mode=MODE use operation mode MODE --no-warnings equivalent to '-Wnone' --preserve-dup-deps don't remove duplicate dependency libraries --quiet, --silent don't print informational messages --tag=TAG use configuration variables from tag TAG -v, --verbose print more informational messages than default --version print version information -W, --warnings=CATEGORY report the warnings falling in CATEGORY [all] -h, --help, --help-all print short, long, or detailed help message " # Additional text appended to 'usage_message' in response to '--help'. func_help () { $debug_cmd func_usage_message $ECHO "$long_help_message MODE must be one of the following: clean remove files from the build directory compile compile a source file into a libtool object execute automatically set library path, then run a program finish complete the installation of libtool libraries install install libraries or executables link create a library or an executable uninstall remove libraries from an installed directory MODE-ARGS vary depending on the MODE. When passed as first option, '--mode=MODE' may be abbreviated as 'MODE' or a unique abbreviation of that. Try '$progname --help --mode=MODE' for a more detailed description of MODE. When reporting a bug, please describe a test case to reproduce it and include the following information: host-triplet: $host shell: $SHELL compiler: $LTCC compiler flags: $LTCFLAGS linker: $LD (gnu? $with_gnu_ld) version: $progname $scriptversion Debian-2.4.6-2 automake: `($AUTOMAKE --version) 2>/dev/null |$SED 1q` autoconf: `($AUTOCONF --version) 2>/dev/null |$SED 1q` Report bugs to . GNU libtool home page: . General help using GNU software: ." exit 0 } # func_lo2o OBJECT-NAME # --------------------- # Transform OBJECT-NAME from a '.lo' suffix to the platform specific # object suffix. lo2o=s/\\.lo\$/.$objext/ o2lo=s/\\.$objext\$/.lo/ if test yes = "$_G_HAVE_XSI_OPS"; then eval 'func_lo2o () { case $1 in *.lo) func_lo2o_result=${1%.lo}.$objext ;; * ) func_lo2o_result=$1 ;; esac }' # func_xform LIBOBJ-OR-SOURCE # --------------------------- # Transform LIBOBJ-OR-SOURCE from a '.o' or '.c' (or otherwise) # suffix to a '.lo' libtool-object suffix. eval 'func_xform () { func_xform_result=${1%.*}.lo }' else # ...otherwise fall back to using sed. func_lo2o () { func_lo2o_result=`$ECHO "$1" | $SED "$lo2o"` } func_xform () { func_xform_result=`$ECHO "$1" | $SED 's|\.[^.]*$|.lo|'` } fi # func_fatal_configuration ARG... # ------------------------------- # Echo program name prefixed message to standard error, followed by # a configuration failure hint, and exit. func_fatal_configuration () { func__fatal_error ${1+"$@"} \ "See the $PACKAGE documentation for more information." \ "Fatal configuration error." } # func_config # ----------- # Display the configuration for all the tags in this script. func_config () { re_begincf='^# ### BEGIN LIBTOOL' re_endcf='^# ### END LIBTOOL' # Default configuration. $SED "1,/$re_begincf CONFIG/d;/$re_endcf CONFIG/,\$d" < "$progpath" # Now print the configurations for the tags. for tagname in $taglist; do $SED -n "/$re_begincf TAG CONFIG: $tagname\$/,/$re_endcf TAG CONFIG: $tagname\$/p" < "$progpath" done exit $? } # func_features # ------------- # Display the features supported by this script. func_features () { echo "host: $host" if test yes = "$build_libtool_libs"; then echo "enable shared libraries" else echo "disable shared libraries" fi if test yes = "$build_old_libs"; then echo "enable static libraries" else echo "disable static libraries" fi exit $? } # func_enable_tag TAGNAME # ----------------------- # Verify that TAGNAME is valid, and either flag an error and exit, or # enable the TAGNAME tag. We also add TAGNAME to the global $taglist # variable here. func_enable_tag () { # Global variable: tagname=$1 re_begincf="^# ### BEGIN LIBTOOL TAG CONFIG: $tagname\$" re_endcf="^# ### END LIBTOOL TAG CONFIG: $tagname\$" sed_extractcf=/$re_begincf/,/$re_endcf/p # Validate tagname. case $tagname in *[!-_A-Za-z0-9,/]*) func_fatal_error "invalid tag name: $tagname" ;; esac # Don't test for the "default" C tag, as we know it's # there but not specially marked. case $tagname in CC) ;; *) if $GREP "$re_begincf" "$progpath" >/dev/null 2>&1; then taglist="$taglist $tagname" # Evaluate the configuration. Be careful to quote the path # and the sed script, to avoid splitting on whitespace, but # also don't use non-portable quotes within backquotes within # quotes we have to do it in 2 steps: extractedcf=`$SED -n -e "$sed_extractcf" < "$progpath"` eval "$extractedcf" else func_error "ignoring unknown tag $tagname" fi ;; esac } # func_check_version_match # ------------------------ # Ensure that we are using m4 macros, and libtool script from the same # release of libtool. func_check_version_match () { if test "$package_revision" != "$macro_revision"; then if test "$VERSION" != "$macro_version"; then if test -z "$macro_version"; then cat >&2 <<_LT_EOF $progname: Version mismatch error. This is $PACKAGE $VERSION, but the $progname: definition of this LT_INIT comes from an older release. $progname: You should recreate aclocal.m4 with macros from $PACKAGE $VERSION $progname: and run autoconf again. _LT_EOF else cat >&2 <<_LT_EOF $progname: Version mismatch error. This is $PACKAGE $VERSION, but the $progname: definition of this LT_INIT comes from $PACKAGE $macro_version. $progname: You should recreate aclocal.m4 with macros from $PACKAGE $VERSION $progname: and run autoconf again. _LT_EOF fi else cat >&2 <<_LT_EOF $progname: Version mismatch error. This is $PACKAGE $VERSION, revision $package_revision, $progname: but the definition of this LT_INIT comes from revision $macro_revision. $progname: You should recreate aclocal.m4 with macros from revision $package_revision $progname: of $PACKAGE $VERSION and run autoconf again. _LT_EOF fi exit $EXIT_MISMATCH fi } # libtool_options_prep [ARG]... # ----------------------------- # Preparation for options parsed by libtool. libtool_options_prep () { $debug_mode # Option defaults: opt_config=false opt_dlopen= opt_dry_run=false opt_help=false opt_mode= opt_preserve_dup_deps=false opt_quiet=false nonopt= preserve_args= # Shorthand for --mode=foo, only valid as the first argument case $1 in clean|clea|cle|cl) shift; set dummy --mode clean ${1+"$@"}; shift ;; compile|compil|compi|comp|com|co|c) shift; set dummy --mode compile ${1+"$@"}; shift ;; execute|execut|execu|exec|exe|ex|e) shift; set dummy --mode execute ${1+"$@"}; shift ;; finish|finis|fini|fin|fi|f) shift; set dummy --mode finish ${1+"$@"}; shift ;; install|instal|insta|inst|ins|in|i) shift; set dummy --mode install ${1+"$@"}; shift ;; link|lin|li|l) shift; set dummy --mode link ${1+"$@"}; shift ;; uninstall|uninstal|uninsta|uninst|unins|unin|uni|un|u) shift; set dummy --mode uninstall ${1+"$@"}; shift ;; esac # Pass back the list of options. func_quote_for_eval ${1+"$@"} libtool_options_prep_result=$func_quote_for_eval_result } func_add_hook func_options_prep libtool_options_prep # libtool_parse_options [ARG]... # --------------------------------- # Provide handling for libtool specific options. libtool_parse_options () { $debug_cmd # Perform our own loop to consume as many options as possible in # each iteration. while test $# -gt 0; do _G_opt=$1 shift case $_G_opt in --dry-run|--dryrun|-n) opt_dry_run=: ;; --config) func_config ;; --dlopen|-dlopen) opt_dlopen="${opt_dlopen+$opt_dlopen }$1" shift ;; --preserve-dup-deps) opt_preserve_dup_deps=: ;; --features) func_features ;; --finish) set dummy --mode finish ${1+"$@"}; shift ;; --help) opt_help=: ;; --help-all) opt_help=': help-all' ;; --mode) test $# = 0 && func_missing_arg $_G_opt && break opt_mode=$1 case $1 in # Valid mode arguments: clean|compile|execute|finish|install|link|relink|uninstall) ;; # Catch anything else as an error *) func_error "invalid argument for $_G_opt" exit_cmd=exit break ;; esac shift ;; --no-silent|--no-quiet) opt_quiet=false func_append preserve_args " $_G_opt" ;; --no-warnings|--no-warning|--no-warn) opt_warning=false func_append preserve_args " $_G_opt" ;; --no-verbose) opt_verbose=false func_append preserve_args " $_G_opt" ;; --silent|--quiet) opt_quiet=: opt_verbose=false func_append preserve_args " $_G_opt" ;; --tag) test $# = 0 && func_missing_arg $_G_opt && break opt_tag=$1 func_append preserve_args " $_G_opt $1" func_enable_tag "$1" shift ;; --verbose|-v) opt_quiet=false opt_verbose=: func_append preserve_args " $_G_opt" ;; # An option not handled by this hook function: *) set dummy "$_G_opt" ${1+"$@"}; shift; break ;; esac done # save modified positional parameters for caller func_quote_for_eval ${1+"$@"} libtool_parse_options_result=$func_quote_for_eval_result } func_add_hook func_parse_options libtool_parse_options # libtool_validate_options [ARG]... # --------------------------------- # Perform any sanity checks on option settings and/or unconsumed # arguments. libtool_validate_options () { # save first non-option argument if test 0 -lt $#; then nonopt=$1 shift fi # preserve --debug test : = "$debug_cmd" || func_append preserve_args " --debug" case $host in # Solaris2 added to fix http://debbugs.gnu.org/cgi/bugreport.cgi?bug=16452 # see also: http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59788 *cygwin* | *mingw* | *pw32* | *cegcc* | *solaris2* | *os2*) # don't eliminate duplications in $postdeps and $predeps opt_duplicate_compiler_generated_deps=: ;; *) opt_duplicate_compiler_generated_deps=$opt_preserve_dup_deps ;; esac $opt_help || { # Sanity checks first: func_check_version_match test yes != "$build_libtool_libs" \ && test yes != "$build_old_libs" \ && func_fatal_configuration "not configured to build any kind of library" # Darwin sucks eval std_shrext=\"$shrext_cmds\" # Only execute mode is allowed to have -dlopen flags. if test -n "$opt_dlopen" && test execute != "$opt_mode"; then func_error "unrecognized option '-dlopen'" $ECHO "$help" 1>&2 exit $EXIT_FAILURE fi # Change the help message to a mode-specific one. generic_help=$help help="Try '$progname --help --mode=$opt_mode' for more information." } # Pass back the unparsed argument list func_quote_for_eval ${1+"$@"} libtool_validate_options_result=$func_quote_for_eval_result } func_add_hook func_validate_options libtool_validate_options # Process options as early as possible so that --help and --version # can return quickly. func_options ${1+"$@"} eval set dummy "$func_options_result"; shift ## ----------- ## ## Main. ## ## ----------- ## magic='%%%MAGIC variable%%%' magic_exe='%%%MAGIC EXE variable%%%' # Global variables. extracted_archives= extracted_serial=0 # If this variable is set in any of the actions, the command in it # will be execed at the end. This prevents here-documents from being # left over by shells. exec_cmd= # A function that is used when there is no print builtin or printf. func_fallback_echo () { eval 'cat <<_LTECHO_EOF $1 _LTECHO_EOF' } # func_generated_by_libtool # True iff stdin has been generated by Libtool. This function is only # a basic sanity check; it will hardly flush out determined imposters. func_generated_by_libtool_p () { $GREP "^# Generated by .*$PACKAGE" > /dev/null 2>&1 } # func_lalib_p file # True iff FILE is a libtool '.la' library or '.lo' object file. # This function is only a basic sanity check; it will hardly flush out # determined imposters. func_lalib_p () { test -f "$1" && $SED -e 4q "$1" 2>/dev/null | func_generated_by_libtool_p } # func_lalib_unsafe_p file # True iff FILE is a libtool '.la' library or '.lo' object file. # This function implements the same check as func_lalib_p without # resorting to external programs. To this end, it redirects stdin and # closes it afterwards, without saving the original file descriptor. # As a safety measure, use it only where a negative result would be # fatal anyway. Works if 'file' does not exist. func_lalib_unsafe_p () { lalib_p=no if test -f "$1" && test -r "$1" && exec 5<&0 <"$1"; then for lalib_p_l in 1 2 3 4 do read lalib_p_line case $lalib_p_line in \#\ Generated\ by\ *$PACKAGE* ) lalib_p=yes; break;; esac done exec 0<&5 5<&- fi test yes = "$lalib_p" } # func_ltwrapper_script_p file # True iff FILE is a libtool wrapper script # This function is only a basic sanity check; it will hardly flush out # determined imposters. func_ltwrapper_script_p () { test -f "$1" && $lt_truncate_bin < "$1" 2>/dev/null | func_generated_by_libtool_p } # func_ltwrapper_executable_p file # True iff FILE is a libtool wrapper executable # This function is only a basic sanity check; it will hardly flush out # determined imposters. func_ltwrapper_executable_p () { func_ltwrapper_exec_suffix= case $1 in *.exe) ;; *) func_ltwrapper_exec_suffix=.exe ;; esac $GREP "$magic_exe" "$1$func_ltwrapper_exec_suffix" >/dev/null 2>&1 } # func_ltwrapper_scriptname file # Assumes file is an ltwrapper_executable # uses $file to determine the appropriate filename for a # temporary ltwrapper_script. func_ltwrapper_scriptname () { func_dirname_and_basename "$1" "" "." func_stripname '' '.exe' "$func_basename_result" func_ltwrapper_scriptname_result=$func_dirname_result/$objdir/${func_stripname_result}_ltshwrapper } # func_ltwrapper_p file # True iff FILE is a libtool wrapper script or wrapper executable # This function is only a basic sanity check; it will hardly flush out # determined imposters. func_ltwrapper_p () { func_ltwrapper_script_p "$1" || func_ltwrapper_executable_p "$1" } # func_execute_cmds commands fail_cmd # Execute tilde-delimited COMMANDS. # If FAIL_CMD is given, eval that upon failure. # FAIL_CMD may read-access the current command in variable CMD! func_execute_cmds () { $debug_cmd save_ifs=$IFS; IFS='~' for cmd in $1; do IFS=$sp$nl eval cmd=\"$cmd\" IFS=$save_ifs func_show_eval "$cmd" "${2-:}" done IFS=$save_ifs } # func_source file # Source FILE, adding directory component if necessary. # Note that it is not necessary on cygwin/mingw to append a dot to # FILE even if both FILE and FILE.exe exist: automatic-append-.exe # behavior happens only for exec(3), not for open(2)! Also, sourcing # 'FILE.' does not work on cygwin managed mounts. func_source () { $debug_cmd case $1 in */* | *\\*) . "$1" ;; *) . "./$1" ;; esac } # func_resolve_sysroot PATH # Replace a leading = in PATH with a sysroot. Store the result into # func_resolve_sysroot_result func_resolve_sysroot () { func_resolve_sysroot_result=$1 case $func_resolve_sysroot_result in =*) func_stripname '=' '' "$func_resolve_sysroot_result" func_resolve_sysroot_result=$lt_sysroot$func_stripname_result ;; esac } # func_replace_sysroot PATH # If PATH begins with the sysroot, replace it with = and # store the result into func_replace_sysroot_result. func_replace_sysroot () { case $lt_sysroot:$1 in ?*:"$lt_sysroot"*) func_stripname "$lt_sysroot" '' "$1" func_replace_sysroot_result='='$func_stripname_result ;; *) # Including no sysroot. func_replace_sysroot_result=$1 ;; esac } # func_infer_tag arg # Infer tagged configuration to use if any are available and # if one wasn't chosen via the "--tag" command line option. # Only attempt this if the compiler in the base compile # command doesn't match the default compiler. # arg is usually of the form 'gcc ...' func_infer_tag () { $debug_cmd if test -n "$available_tags" && test -z "$tagname"; then CC_quoted= for arg in $CC; do func_append_quoted CC_quoted "$arg" done CC_expanded=`func_echo_all $CC` CC_quoted_expanded=`func_echo_all $CC_quoted` case $@ in # Blanks in the command may have been stripped by the calling shell, # but not from the CC environment variable when configure was run. " $CC "* | "$CC "* | " $CC_expanded "* | "$CC_expanded "* | \ " $CC_quoted"* | "$CC_quoted "* | " $CC_quoted_expanded "* | "$CC_quoted_expanded "*) ;; # Blanks at the start of $base_compile will cause this to fail # if we don't check for them as well. *) for z in $available_tags; do if $GREP "^# ### BEGIN LIBTOOL TAG CONFIG: $z$" < "$progpath" > /dev/null; then # Evaluate the configuration. eval "`$SED -n -e '/^# ### BEGIN LIBTOOL TAG CONFIG: '$z'$/,/^# ### END LIBTOOL TAG CONFIG: '$z'$/p' < $progpath`" CC_quoted= for arg in $CC; do # Double-quote args containing other shell metacharacters. func_append_quoted CC_quoted "$arg" done CC_expanded=`func_echo_all $CC` CC_quoted_expanded=`func_echo_all $CC_quoted` case "$@ " in " $CC "* | "$CC "* | " $CC_expanded "* | "$CC_expanded "* | \ " $CC_quoted"* | "$CC_quoted "* | " $CC_quoted_expanded "* | "$CC_quoted_expanded "*) # The compiler in the base compile command matches # the one in the tagged configuration. # Assume this is the tagged configuration we want. tagname=$z break ;; esac fi done # If $tagname still isn't set, then no tagged configuration # was found and let the user know that the "--tag" command # line option must be used. if test -z "$tagname"; then func_echo "unable to infer tagged configuration" func_fatal_error "specify a tag with '--tag'" # else # func_verbose "using $tagname tagged configuration" fi ;; esac fi } # func_write_libtool_object output_name pic_name nonpic_name # Create a libtool object file (analogous to a ".la" file), # but don't create it if we're doing a dry run. func_write_libtool_object () { write_libobj=$1 if test yes = "$build_libtool_libs"; then write_lobj=\'$2\' else write_lobj=none fi if test yes = "$build_old_libs"; then write_oldobj=\'$3\' else write_oldobj=none fi $opt_dry_run || { cat >${write_libobj}T </dev/null` if test "$?" -eq 0 && test -n "$func_convert_core_file_wine_to_w32_tmp"; then func_convert_core_file_wine_to_w32_result=`$ECHO "$func_convert_core_file_wine_to_w32_tmp" | $SED -e "$sed_naive_backslashify"` else func_convert_core_file_wine_to_w32_result= fi fi } # end: func_convert_core_file_wine_to_w32 # func_convert_core_path_wine_to_w32 ARG # Helper function used by path conversion functions when $build is *nix, and # $host is mingw, cygwin, or some other w32 environment. Relies on a correctly # configured wine environment available, with the winepath program in $build's # $PATH. Assumes ARG has no leading or trailing path separator characters. # # ARG is path to be converted from $build format to win32. # Result is available in $func_convert_core_path_wine_to_w32_result. # Unconvertible file (directory) names in ARG are skipped; if no directory names # are convertible, then the result may be empty. func_convert_core_path_wine_to_w32 () { $debug_cmd # unfortunately, winepath doesn't convert paths, only file names func_convert_core_path_wine_to_w32_result= if test -n "$1"; then oldIFS=$IFS IFS=: for func_convert_core_path_wine_to_w32_f in $1; do IFS=$oldIFS func_convert_core_file_wine_to_w32 "$func_convert_core_path_wine_to_w32_f" if test -n "$func_convert_core_file_wine_to_w32_result"; then if test -z "$func_convert_core_path_wine_to_w32_result"; then func_convert_core_path_wine_to_w32_result=$func_convert_core_file_wine_to_w32_result else func_append func_convert_core_path_wine_to_w32_result ";$func_convert_core_file_wine_to_w32_result" fi fi done IFS=$oldIFS fi } # end: func_convert_core_path_wine_to_w32 # func_cygpath ARGS... # Wrapper around calling the cygpath program via LT_CYGPATH. This is used when # when (1) $build is *nix and Cygwin is hosted via a wine environment; or (2) # $build is MSYS and $host is Cygwin, or (3) $build is Cygwin. In case (1) or # (2), returns the Cygwin file name or path in func_cygpath_result (input # file name or path is assumed to be in w32 format, as previously converted # from $build's *nix or MSYS format). In case (3), returns the w32 file name # or path in func_cygpath_result (input file name or path is assumed to be in # Cygwin format). Returns an empty string on error. # # ARGS are passed to cygpath, with the last one being the file name or path to # be converted. # # Specify the absolute *nix (or w32) name to cygpath in the LT_CYGPATH # environment variable; do not put it in $PATH. func_cygpath () { $debug_cmd if test -n "$LT_CYGPATH" && test -f "$LT_CYGPATH"; then func_cygpath_result=`$LT_CYGPATH "$@" 2>/dev/null` if test "$?" -ne 0; then # on failure, ensure result is empty func_cygpath_result= fi else func_cygpath_result= func_error "LT_CYGPATH is empty or specifies non-existent file: '$LT_CYGPATH'" fi } #end: func_cygpath # func_convert_core_msys_to_w32 ARG # Convert file name or path ARG from MSYS format to w32 format. Return # result in func_convert_core_msys_to_w32_result. func_convert_core_msys_to_w32 () { $debug_cmd # awkward: cmd appends spaces to result func_convert_core_msys_to_w32_result=`( cmd //c echo "$1" ) 2>/dev/null | $SED -e 's/[ ]*$//' -e "$sed_naive_backslashify"` } #end: func_convert_core_msys_to_w32 # func_convert_file_check ARG1 ARG2 # Verify that ARG1 (a file name in $build format) was converted to $host # format in ARG2. Otherwise, emit an error message, but continue (resetting # func_to_host_file_result to ARG1). func_convert_file_check () { $debug_cmd if test -z "$2" && test -n "$1"; then func_error "Could not determine host file name corresponding to" func_error " '$1'" func_error "Continuing, but uninstalled executables may not work." # Fallback: func_to_host_file_result=$1 fi } # end func_convert_file_check # func_convert_path_check FROM_PATHSEP TO_PATHSEP FROM_PATH TO_PATH # Verify that FROM_PATH (a path in $build format) was converted to $host # format in TO_PATH. Otherwise, emit an error message, but continue, resetting # func_to_host_file_result to a simplistic fallback value (see below). func_convert_path_check () { $debug_cmd if test -z "$4" && test -n "$3"; then func_error "Could not determine the host path corresponding to" func_error " '$3'" func_error "Continuing, but uninstalled executables may not work." # Fallback. This is a deliberately simplistic "conversion" and # should not be "improved". See libtool.info. if test "x$1" != "x$2"; then lt_replace_pathsep_chars="s|$1|$2|g" func_to_host_path_result=`echo "$3" | $SED -e "$lt_replace_pathsep_chars"` else func_to_host_path_result=$3 fi fi } # end func_convert_path_check # func_convert_path_front_back_pathsep FRONTPAT BACKPAT REPL ORIG # Modifies func_to_host_path_result by prepending REPL if ORIG matches FRONTPAT # and appending REPL if ORIG matches BACKPAT. func_convert_path_front_back_pathsep () { $debug_cmd case $4 in $1 ) func_to_host_path_result=$3$func_to_host_path_result ;; esac case $4 in $2 ) func_append func_to_host_path_result "$3" ;; esac } # end func_convert_path_front_back_pathsep ################################################## # $build to $host FILE NAME CONVERSION FUNCTIONS # ################################################## # invoked via '$to_host_file_cmd ARG' # # In each case, ARG is the path to be converted from $build to $host format. # Result will be available in $func_to_host_file_result. # func_to_host_file ARG # Converts the file name ARG from $build format to $host format. Return result # in func_to_host_file_result. func_to_host_file () { $debug_cmd $to_host_file_cmd "$1" } # end func_to_host_file # func_to_tool_file ARG LAZY # converts the file name ARG from $build format to toolchain format. Return # result in func_to_tool_file_result. If the conversion in use is listed # in (the comma separated) LAZY, no conversion takes place. func_to_tool_file () { $debug_cmd case ,$2, in *,"$to_tool_file_cmd",*) func_to_tool_file_result=$1 ;; *) $to_tool_file_cmd "$1" func_to_tool_file_result=$func_to_host_file_result ;; esac } # end func_to_tool_file # func_convert_file_noop ARG # Copy ARG to func_to_host_file_result. func_convert_file_noop () { func_to_host_file_result=$1 } # end func_convert_file_noop # func_convert_file_msys_to_w32 ARG # Convert file name ARG from (mingw) MSYS to (mingw) w32 format; automatic # conversion to w32 is not available inside the cwrapper. Returns result in # func_to_host_file_result. func_convert_file_msys_to_w32 () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then func_convert_core_msys_to_w32 "$1" func_to_host_file_result=$func_convert_core_msys_to_w32_result fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_msys_to_w32 # func_convert_file_cygwin_to_w32 ARG # Convert file name ARG from Cygwin to w32 format. Returns result in # func_to_host_file_result. func_convert_file_cygwin_to_w32 () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then # because $build is cygwin, we call "the" cygpath in $PATH; no need to use # LT_CYGPATH in this case. func_to_host_file_result=`cygpath -m "$1"` fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_cygwin_to_w32 # func_convert_file_nix_to_w32 ARG # Convert file name ARG from *nix to w32 format. Requires a wine environment # and a working winepath. Returns result in func_to_host_file_result. func_convert_file_nix_to_w32 () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then func_convert_core_file_wine_to_w32 "$1" func_to_host_file_result=$func_convert_core_file_wine_to_w32_result fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_nix_to_w32 # func_convert_file_msys_to_cygwin ARG # Convert file name ARG from MSYS to Cygwin format. Requires LT_CYGPATH set. # Returns result in func_to_host_file_result. func_convert_file_msys_to_cygwin () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then func_convert_core_msys_to_w32 "$1" func_cygpath -u "$func_convert_core_msys_to_w32_result" func_to_host_file_result=$func_cygpath_result fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_msys_to_cygwin # func_convert_file_nix_to_cygwin ARG # Convert file name ARG from *nix to Cygwin format. Requires Cygwin installed # in a wine environment, working winepath, and LT_CYGPATH set. Returns result # in func_to_host_file_result. func_convert_file_nix_to_cygwin () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then # convert from *nix to w32, then use cygpath to convert from w32 to cygwin. func_convert_core_file_wine_to_w32 "$1" func_cygpath -u "$func_convert_core_file_wine_to_w32_result" func_to_host_file_result=$func_cygpath_result fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_nix_to_cygwin ############################################# # $build to $host PATH CONVERSION FUNCTIONS # ############################################# # invoked via '$to_host_path_cmd ARG' # # In each case, ARG is the path to be converted from $build to $host format. # The result will be available in $func_to_host_path_result. # # Path separators are also converted from $build format to $host format. If # ARG begins or ends with a path separator character, it is preserved (but # converted to $host format) on output. # # All path conversion functions are named using the following convention: # file name conversion function : func_convert_file_X_to_Y () # path conversion function : func_convert_path_X_to_Y () # where, for any given $build/$host combination the 'X_to_Y' value is the # same. If conversion functions are added for new $build/$host combinations, # the two new functions must follow this pattern, or func_init_to_host_path_cmd # will break. # func_init_to_host_path_cmd # Ensures that function "pointer" variable $to_host_path_cmd is set to the # appropriate value, based on the value of $to_host_file_cmd. to_host_path_cmd= func_init_to_host_path_cmd () { $debug_cmd if test -z "$to_host_path_cmd"; then func_stripname 'func_convert_file_' '' "$to_host_file_cmd" to_host_path_cmd=func_convert_path_$func_stripname_result fi } # func_to_host_path ARG # Converts the path ARG from $build format to $host format. Return result # in func_to_host_path_result. func_to_host_path () { $debug_cmd func_init_to_host_path_cmd $to_host_path_cmd "$1" } # end func_to_host_path # func_convert_path_noop ARG # Copy ARG to func_to_host_path_result. func_convert_path_noop () { func_to_host_path_result=$1 } # end func_convert_path_noop # func_convert_path_msys_to_w32 ARG # Convert path ARG from (mingw) MSYS to (mingw) w32 format; automatic # conversion to w32 is not available inside the cwrapper. Returns result in # func_to_host_path_result. func_convert_path_msys_to_w32 () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # Remove leading and trailing path separator characters from ARG. MSYS # behavior is inconsistent here; cygpath turns them into '.;' and ';.'; # and winepath ignores them completely. func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_convert_core_msys_to_w32 "$func_to_host_path_tmp1" func_to_host_path_result=$func_convert_core_msys_to_w32_result func_convert_path_check : ";" \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" ";" "$1" fi } # end func_convert_path_msys_to_w32 # func_convert_path_cygwin_to_w32 ARG # Convert path ARG from Cygwin to w32 format. Returns result in # func_to_host_file_result. func_convert_path_cygwin_to_w32 () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # See func_convert_path_msys_to_w32: func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_to_host_path_result=`cygpath -m -p "$func_to_host_path_tmp1"` func_convert_path_check : ";" \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" ";" "$1" fi } # end func_convert_path_cygwin_to_w32 # func_convert_path_nix_to_w32 ARG # Convert path ARG from *nix to w32 format. Requires a wine environment and # a working winepath. Returns result in func_to_host_file_result. func_convert_path_nix_to_w32 () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # See func_convert_path_msys_to_w32: func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_convert_core_path_wine_to_w32 "$func_to_host_path_tmp1" func_to_host_path_result=$func_convert_core_path_wine_to_w32_result func_convert_path_check : ";" \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" ";" "$1" fi } # end func_convert_path_nix_to_w32 # func_convert_path_msys_to_cygwin ARG # Convert path ARG from MSYS to Cygwin format. Requires LT_CYGPATH set. # Returns result in func_to_host_file_result. func_convert_path_msys_to_cygwin () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # See func_convert_path_msys_to_w32: func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_convert_core_msys_to_w32 "$func_to_host_path_tmp1" func_cygpath -u -p "$func_convert_core_msys_to_w32_result" func_to_host_path_result=$func_cygpath_result func_convert_path_check : : \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" : "$1" fi } # end func_convert_path_msys_to_cygwin # func_convert_path_nix_to_cygwin ARG # Convert path ARG from *nix to Cygwin format. Requires Cygwin installed in a # a wine environment, working winepath, and LT_CYGPATH set. Returns result in # func_to_host_file_result. func_convert_path_nix_to_cygwin () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # Remove leading and trailing path separator characters from # ARG. msys behavior is inconsistent here, cygpath turns them # into '.;' and ';.', and winepath ignores them completely. func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_convert_core_path_wine_to_w32 "$func_to_host_path_tmp1" func_cygpath -u -p "$func_convert_core_path_wine_to_w32_result" func_to_host_path_result=$func_cygpath_result func_convert_path_check : : \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" : "$1" fi } # end func_convert_path_nix_to_cygwin # func_dll_def_p FILE # True iff FILE is a Windows DLL '.def' file. # Keep in sync with _LT_DLL_DEF_P in libtool.m4 func_dll_def_p () { $debug_cmd func_dll_def_p_tmp=`$SED -n \ -e 's/^[ ]*//' \ -e '/^\(;.*\)*$/d' \ -e 's/^\(EXPORTS\|LIBRARY\)\([ ].*\)*$/DEF/p' \ -e q \ "$1"` test DEF = "$func_dll_def_p_tmp" } # func_mode_compile arg... func_mode_compile () { $debug_cmd # Get the compilation command and the source file. base_compile= srcfile=$nonopt # always keep a non-empty value in "srcfile" suppress_opt=yes suppress_output= arg_mode=normal libobj= later= pie_flag= for arg do case $arg_mode in arg ) # do not "continue". Instead, add this to base_compile lastarg=$arg arg_mode=normal ;; target ) libobj=$arg arg_mode=normal continue ;; normal ) # Accept any command-line options. case $arg in -o) test -n "$libobj" && \ func_fatal_error "you cannot specify '-o' more than once" arg_mode=target continue ;; -pie | -fpie | -fPIE) func_append pie_flag " $arg" continue ;; -shared | -static | -prefer-pic | -prefer-non-pic) func_append later " $arg" continue ;; -no-suppress) suppress_opt=no continue ;; -Xcompiler) arg_mode=arg # the next one goes into the "base_compile" arg list continue # The current "srcfile" will either be retained or ;; # replaced later. I would guess that would be a bug. -Wc,*) func_stripname '-Wc,' '' "$arg" args=$func_stripname_result lastarg= save_ifs=$IFS; IFS=, for arg in $args; do IFS=$save_ifs func_append_quoted lastarg "$arg" done IFS=$save_ifs func_stripname ' ' '' "$lastarg" lastarg=$func_stripname_result # Add the arguments to base_compile. func_append base_compile " $lastarg" continue ;; *) # Accept the current argument as the source file. # The previous "srcfile" becomes the current argument. # lastarg=$srcfile srcfile=$arg ;; esac # case $arg ;; esac # case $arg_mode # Aesthetically quote the previous argument. func_append_quoted base_compile "$lastarg" done # for arg case $arg_mode in arg) func_fatal_error "you must specify an argument for -Xcompile" ;; target) func_fatal_error "you must specify a target with '-o'" ;; *) # Get the name of the library object. test -z "$libobj" && { func_basename "$srcfile" libobj=$func_basename_result } ;; esac # Recognize several different file suffixes. # If the user specifies -o file.o, it is replaced with file.lo case $libobj in *.[cCFSifmso] | \ *.ada | *.adb | *.ads | *.asm | \ *.c++ | *.cc | *.ii | *.class | *.cpp | *.cxx | \ *.[fF][09]? | *.for | *.java | *.go | *.obj | *.sx | *.cu | *.cup) func_xform "$libobj" libobj=$func_xform_result ;; esac case $libobj in *.lo) func_lo2o "$libobj"; obj=$func_lo2o_result ;; *) func_fatal_error "cannot determine name of library object from '$libobj'" ;; esac func_infer_tag $base_compile for arg in $later; do case $arg in -shared) test yes = "$build_libtool_libs" \ || func_fatal_configuration "cannot build a shared library" build_old_libs=no continue ;; -static) build_libtool_libs=no build_old_libs=yes continue ;; -prefer-pic) pic_mode=yes continue ;; -prefer-non-pic) pic_mode=no continue ;; esac done func_quote_for_eval "$libobj" test "X$libobj" != "X$func_quote_for_eval_result" \ && $ECHO "X$libobj" | $GREP '[]~#^*{};<>?"'"'"' &()|`$[]' \ && func_warning "libobj name '$libobj' may not contain shell special characters." func_dirname_and_basename "$obj" "/" "" objname=$func_basename_result xdir=$func_dirname_result lobj=$xdir$objdir/$objname test -z "$base_compile" && \ func_fatal_help "you must specify a compilation command" # Delete any leftover library objects. if test yes = "$build_old_libs"; then removelist="$obj $lobj $libobj ${libobj}T" else removelist="$lobj $libobj ${libobj}T" fi # On Cygwin there's no "real" PIC flag so we must build both object types case $host_os in cygwin* | mingw* | pw32* | os2* | cegcc*) pic_mode=default ;; esac if test no = "$pic_mode" && test pass_all != "$deplibs_check_method"; then # non-PIC code in shared libraries is not supported pic_mode=default fi # Calculate the filename of the output object if compiler does # not support -o with -c if test no = "$compiler_c_o"; then output_obj=`$ECHO "$srcfile" | $SED 's%^.*/%%; s%\.[^.]*$%%'`.$objext lockfile=$output_obj.lock else output_obj= need_locks=no lockfile= fi # Lock this critical section if it is needed # We use this script file to make the link, it avoids creating a new file if test yes = "$need_locks"; then until $opt_dry_run || ln "$progpath" "$lockfile" 2>/dev/null; do func_echo "Waiting for $lockfile to be removed" sleep 2 done elif test warn = "$need_locks"; then if test -f "$lockfile"; then $ECHO "\ *** ERROR, $lockfile exists and contains: `cat $lockfile 2>/dev/null` This indicates that another process is trying to use the same temporary object file, and libtool could not work around it because your compiler does not support '-c' and '-o' together. If you repeat this compilation, it may succeed, by chance, but you had better avoid parallel builds (make -j) in this platform, or get a better compiler." $opt_dry_run || $RM $removelist exit $EXIT_FAILURE fi func_append removelist " $output_obj" $ECHO "$srcfile" > "$lockfile" fi $opt_dry_run || $RM $removelist func_append removelist " $lockfile" trap '$opt_dry_run || $RM $removelist; exit $EXIT_FAILURE' 1 2 15 func_to_tool_file "$srcfile" func_convert_file_msys_to_w32 srcfile=$func_to_tool_file_result func_quote_for_eval "$srcfile" qsrcfile=$func_quote_for_eval_result # Only build a PIC object if we are building libtool libraries. if test yes = "$build_libtool_libs"; then # Without this assignment, base_compile gets emptied. fbsd_hideous_sh_bug=$base_compile if test no != "$pic_mode"; then command="$base_compile $qsrcfile $pic_flag" else # Don't build PIC code command="$base_compile $qsrcfile" fi func_mkdir_p "$xdir$objdir" if test -z "$output_obj"; then # Place PIC objects in $objdir func_append command " -o $lobj" fi func_show_eval_locale "$command" \ 'test -n "$output_obj" && $RM $removelist; exit $EXIT_FAILURE' if test warn = "$need_locks" && test "X`cat $lockfile 2>/dev/null`" != "X$srcfile"; then $ECHO "\ *** ERROR, $lockfile contains: `cat $lockfile 2>/dev/null` but it should contain: $srcfile This indicates that another process is trying to use the same temporary object file, and libtool could not work around it because your compiler does not support '-c' and '-o' together. If you repeat this compilation, it may succeed, by chance, but you had better avoid parallel builds (make -j) in this platform, or get a better compiler." $opt_dry_run || $RM $removelist exit $EXIT_FAILURE fi # Just move the object if needed, then go on to compile the next one if test -n "$output_obj" && test "X$output_obj" != "X$lobj"; then func_show_eval '$MV "$output_obj" "$lobj"' \ 'error=$?; $opt_dry_run || $RM $removelist; exit $error' fi # Allow error messages only from the first compilation. if test yes = "$suppress_opt"; then suppress_output=' >/dev/null 2>&1' fi fi # Only build a position-dependent object if we build old libraries. if test yes = "$build_old_libs"; then if test yes != "$pic_mode"; then # Don't build PIC code command="$base_compile $qsrcfile$pie_flag" else command="$base_compile $qsrcfile $pic_flag" fi if test yes = "$compiler_c_o"; then func_append command " -o $obj" fi # Suppress compiler output if we already did a PIC compilation. func_append command "$suppress_output" func_show_eval_locale "$command" \ '$opt_dry_run || $RM $removelist; exit $EXIT_FAILURE' if test warn = "$need_locks" && test "X`cat $lockfile 2>/dev/null`" != "X$srcfile"; then $ECHO "\ *** ERROR, $lockfile contains: `cat $lockfile 2>/dev/null` but it should contain: $srcfile This indicates that another process is trying to use the same temporary object file, and libtool could not work around it because your compiler does not support '-c' and '-o' together. If you repeat this compilation, it may succeed, by chance, but you had better avoid parallel builds (make -j) in this platform, or get a better compiler." $opt_dry_run || $RM $removelist exit $EXIT_FAILURE fi # Just move the object if needed if test -n "$output_obj" && test "X$output_obj" != "X$obj"; then func_show_eval '$MV "$output_obj" "$obj"' \ 'error=$?; $opt_dry_run || $RM $removelist; exit $error' fi fi $opt_dry_run || { func_write_libtool_object "$libobj" "$objdir/$objname" "$objname" # Unlock the critical section if it was locked if test no != "$need_locks"; then removelist=$lockfile $RM "$lockfile" fi } exit $EXIT_SUCCESS } $opt_help || { test compile = "$opt_mode" && func_mode_compile ${1+"$@"} } func_mode_help () { # We need to display help for each of the modes. case $opt_mode in "") # Generic help is extracted from the usage comments # at the start of this file. func_help ;; clean) $ECHO \ "Usage: $progname [OPTION]... --mode=clean RM [RM-OPTION]... FILE... Remove files from the build directory. RM is the name of the program to use to delete files associated with each FILE (typically '/bin/rm'). RM-OPTIONS are options (such as '-f') to be passed to RM. If FILE is a libtool library, object or program, all the files associated with it are deleted. Otherwise, only FILE itself is deleted using RM." ;; compile) $ECHO \ "Usage: $progname [OPTION]... --mode=compile COMPILE-COMMAND... SOURCEFILE Compile a source file into a libtool library object. This mode accepts the following additional options: -o OUTPUT-FILE set the output file name to OUTPUT-FILE -no-suppress do not suppress compiler output for multiple passes -prefer-pic try to build PIC objects only -prefer-non-pic try to build non-PIC objects only -shared do not build a '.o' file suitable for static linking -static only build a '.o' file suitable for static linking -Wc,FLAG pass FLAG directly to the compiler COMPILE-COMMAND is a command to be used in creating a 'standard' object file from the given SOURCEFILE. The output file name is determined by removing the directory component from SOURCEFILE, then substituting the C source code suffix '.c' with the library object suffix, '.lo'." ;; execute) $ECHO \ "Usage: $progname [OPTION]... --mode=execute COMMAND [ARGS]... Automatically set library path, then run a program. This mode accepts the following additional options: -dlopen FILE add the directory containing FILE to the library path This mode sets the library path environment variable according to '-dlopen' flags. If any of the ARGS are libtool executable wrappers, then they are translated into their corresponding uninstalled binary, and any of their required library directories are added to the library path. Then, COMMAND is executed, with ARGS as arguments." ;; finish) $ECHO \ "Usage: $progname [OPTION]... --mode=finish [LIBDIR]... Complete the installation of libtool libraries. Each LIBDIR is a directory that contains libtool libraries. The commands that this mode executes may require superuser privileges. Use the '--dry-run' option if you just want to see what would be executed." ;; install) $ECHO \ "Usage: $progname [OPTION]... --mode=install INSTALL-COMMAND... Install executables or libraries. INSTALL-COMMAND is the installation command. The first component should be either the 'install' or 'cp' program. The following components of INSTALL-COMMAND are treated specially: -inst-prefix-dir PREFIX-DIR Use PREFIX-DIR as a staging area for installation The rest of the components are interpreted as arguments to that command (only BSD-compatible install options are recognized)." ;; link) $ECHO \ "Usage: $progname [OPTION]... --mode=link LINK-COMMAND... Link object files or libraries together to form another library, or to create an executable program. LINK-COMMAND is a command using the C compiler that you would use to create a program from several object files. The following components of LINK-COMMAND are treated specially: -all-static do not do any dynamic linking at all -avoid-version do not add a version suffix if possible -bindir BINDIR specify path to binaries directory (for systems where libraries must be found in the PATH setting at runtime) -dlopen FILE '-dlpreopen' FILE if it cannot be dlopened at runtime -dlpreopen FILE link in FILE and add its symbols to lt_preloaded_symbols -export-dynamic allow symbols from OUTPUT-FILE to be resolved with dlsym(3) -export-symbols SYMFILE try to export only the symbols listed in SYMFILE -export-symbols-regex REGEX try to export only the symbols matching REGEX -LLIBDIR search LIBDIR for required installed libraries -lNAME OUTPUT-FILE requires the installed library libNAME -module build a library that can dlopened -no-fast-install disable the fast-install mode -no-install link a not-installable executable -no-undefined declare that a library does not refer to external symbols -o OUTPUT-FILE create OUTPUT-FILE from the specified objects -objectlist FILE use a list of object files found in FILE to specify objects -os2dllname NAME force a short DLL name on OS/2 (no effect on other OSes) -precious-files-regex REGEX don't remove output files matching REGEX -release RELEASE specify package release information -rpath LIBDIR the created library will eventually be installed in LIBDIR -R[ ]LIBDIR add LIBDIR to the runtime path of programs and libraries -shared only do dynamic linking of libtool libraries -shrext SUFFIX override the standard shared library file extension -static do not do any dynamic linking of uninstalled libtool libraries -static-libtool-libs do not do any dynamic linking of libtool libraries -version-info CURRENT[:REVISION[:AGE]] specify library version info [each variable defaults to 0] -weak LIBNAME declare that the target provides the LIBNAME interface -Wc,FLAG -Xcompiler FLAG pass linker-specific FLAG directly to the compiler -Wl,FLAG -Xlinker FLAG pass linker-specific FLAG directly to the linker -XCClinker FLAG pass link-specific FLAG to the compiler driver (CC) All other options (arguments beginning with '-') are ignored. Every other argument is treated as a filename. Files ending in '.la' are treated as uninstalled libtool libraries, other files are standard or library object files. If the OUTPUT-FILE ends in '.la', then a libtool library is created, only library objects ('.lo' files) may be specified, and '-rpath' is required, except when creating a convenience library. If OUTPUT-FILE ends in '.a' or '.lib', then a standard library is created using 'ar' and 'ranlib', or on Windows using 'lib'. If OUTPUT-FILE ends in '.lo' or '.$objext', then a reloadable object file is created, otherwise an executable program is created." ;; uninstall) $ECHO \ "Usage: $progname [OPTION]... --mode=uninstall RM [RM-OPTION]... FILE... Remove libraries from an installation directory. RM is the name of the program to use to delete files associated with each FILE (typically '/bin/rm'). RM-OPTIONS are options (such as '-f') to be passed to RM. If FILE is a libtool library, all the files associated with it are deleted. Otherwise, only FILE itself is deleted using RM." ;; *) func_fatal_help "invalid operation mode '$opt_mode'" ;; esac echo $ECHO "Try '$progname --help' for more information about other modes." } # Now that we've collected a possible --mode arg, show help if necessary if $opt_help; then if test : = "$opt_help"; then func_mode_help else { func_help noexit for opt_mode in compile link execute install finish uninstall clean; do func_mode_help done } | $SED -n '1p; 2,$s/^Usage:/ or: /p' { func_help noexit for opt_mode in compile link execute install finish uninstall clean; do echo func_mode_help done } | $SED '1d /^When reporting/,/^Report/{ H d } $x /information about other modes/d /more detailed .*MODE/d s/^Usage:.*--mode=\([^ ]*\) .*/Description of \1 mode:/' fi exit $? fi # func_mode_execute arg... func_mode_execute () { $debug_cmd # The first argument is the command name. cmd=$nonopt test -z "$cmd" && \ func_fatal_help "you must specify a COMMAND" # Handle -dlopen flags immediately. for file in $opt_dlopen; do test -f "$file" \ || func_fatal_help "'$file' is not a file" dir= case $file in *.la) func_resolve_sysroot "$file" file=$func_resolve_sysroot_result # Check to see that this really is a libtool archive. func_lalib_unsafe_p "$file" \ || func_fatal_help "'$lib' is not a valid libtool archive" # Read the libtool library. dlname= library_names= func_source "$file" # Skip this library if it cannot be dlopened. if test -z "$dlname"; then # Warn if it was a shared library. test -n "$library_names" && \ func_warning "'$file' was not linked with '-export-dynamic'" continue fi func_dirname "$file" "" "." dir=$func_dirname_result if test -f "$dir/$objdir/$dlname"; then func_append dir "/$objdir" else if test ! -f "$dir/$dlname"; then func_fatal_error "cannot find '$dlname' in '$dir' or '$dir/$objdir'" fi fi ;; *.lo) # Just add the directory containing the .lo file. func_dirname "$file" "" "." dir=$func_dirname_result ;; *) func_warning "'-dlopen' is ignored for non-libtool libraries and objects" continue ;; esac # Get the absolute pathname. absdir=`cd "$dir" && pwd` test -n "$absdir" && dir=$absdir # Now add the directory to shlibpath_var. if eval "test -z \"\$$shlibpath_var\""; then eval "$shlibpath_var=\"\$dir\"" else eval "$shlibpath_var=\"\$dir:\$$shlibpath_var\"" fi done # This variable tells wrapper scripts just to set shlibpath_var # rather than running their programs. libtool_execute_magic=$magic # Check if any of the arguments is a wrapper script. args= for file do case $file in -* | *.la | *.lo ) ;; *) # Do a test to see if this is really a libtool program. if func_ltwrapper_script_p "$file"; then func_source "$file" # Transform arg to wrapped name. file=$progdir/$program elif func_ltwrapper_executable_p "$file"; then func_ltwrapper_scriptname "$file" func_source "$func_ltwrapper_scriptname_result" # Transform arg to wrapped name. file=$progdir/$program fi ;; esac # Quote arguments (to preserve shell metacharacters). func_append_quoted args "$file" done if $opt_dry_run; then # Display what would be done. if test -n "$shlibpath_var"; then eval "\$ECHO \"\$shlibpath_var=\$$shlibpath_var\"" echo "export $shlibpath_var" fi $ECHO "$cmd$args" exit $EXIT_SUCCESS else if test -n "$shlibpath_var"; then # Export the shlibpath_var. eval "export $shlibpath_var" fi # Restore saved environment variables for lt_var in LANG LANGUAGE LC_ALL LC_CTYPE LC_COLLATE LC_MESSAGES do eval "if test \"\${save_$lt_var+set}\" = set; then $lt_var=\$save_$lt_var; export $lt_var else $lt_unset $lt_var fi" done # Now prepare to actually exec the command. exec_cmd=\$cmd$args fi } test execute = "$opt_mode" && func_mode_execute ${1+"$@"} # func_mode_finish arg... func_mode_finish () { $debug_cmd libs= libdirs= admincmds= for opt in "$nonopt" ${1+"$@"} do if test -d "$opt"; then func_append libdirs " $opt" elif test -f "$opt"; then if func_lalib_unsafe_p "$opt"; then func_append libs " $opt" else func_warning "'$opt' is not a valid libtool archive" fi else func_fatal_error "invalid argument '$opt'" fi done if test -n "$libs"; then if test -n "$lt_sysroot"; then sysroot_regex=`$ECHO "$lt_sysroot" | $SED "$sed_make_literal_regex"` sysroot_cmd="s/\([ ']\)$sysroot_regex/\1/g;" else sysroot_cmd= fi # Remove sysroot references if $opt_dry_run; then for lib in $libs; do echo "removing references to $lt_sysroot and '=' prefixes from $lib" done else tmpdir=`func_mktempdir` for lib in $libs; do $SED -e "$sysroot_cmd s/\([ ']-[LR]\)=/\1/g; s/\([ ']\)=/\1/g" $lib \ > $tmpdir/tmp-la mv -f $tmpdir/tmp-la $lib done ${RM}r "$tmpdir" fi fi if test -n "$finish_cmds$finish_eval" && test -n "$libdirs"; then for libdir in $libdirs; do if test -n "$finish_cmds"; then # Do each command in the finish commands. func_execute_cmds "$finish_cmds" 'admincmds="$admincmds '"$cmd"'"' fi if test -n "$finish_eval"; then # Do the single finish_eval. eval cmds=\"$finish_eval\" $opt_dry_run || eval "$cmds" || func_append admincmds " $cmds" fi done fi # Exit here if they wanted silent mode. $opt_quiet && exit $EXIT_SUCCESS if test -n "$finish_cmds$finish_eval" && test -n "$libdirs"; then echo "----------------------------------------------------------------------" echo "Libraries have been installed in:" for libdir in $libdirs; do $ECHO " $libdir" done echo echo "If you ever happen to want to link against installed libraries" echo "in a given directory, LIBDIR, you must either use libtool, and" echo "specify the full pathname of the library, or use the '-LLIBDIR'" echo "flag during linking and do at least one of the following:" if test -n "$shlibpath_var"; then echo " - add LIBDIR to the '$shlibpath_var' environment variable" echo " during execution" fi if test -n "$runpath_var"; then echo " - add LIBDIR to the '$runpath_var' environment variable" echo " during linking" fi if test -n "$hardcode_libdir_flag_spec"; then libdir=LIBDIR eval flag=\"$hardcode_libdir_flag_spec\" $ECHO " - use the '$flag' linker flag" fi if test -n "$admincmds"; then $ECHO " - have your system administrator run these commands:$admincmds" fi if test -f /etc/ld.so.conf; then echo " - have your system administrator add LIBDIR to '/etc/ld.so.conf'" fi echo echo "See any operating system documentation about shared libraries for" case $host in solaris2.[6789]|solaris2.1[0-9]) echo "more information, such as the ld(1), crle(1) and ld.so(8) manual" echo "pages." ;; *) echo "more information, such as the ld(1) and ld.so(8) manual pages." ;; esac echo "----------------------------------------------------------------------" fi exit $EXIT_SUCCESS } test finish = "$opt_mode" && func_mode_finish ${1+"$@"} # func_mode_install arg... func_mode_install () { $debug_cmd # There may be an optional sh(1) argument at the beginning of # install_prog (especially on Windows NT). if test "$SHELL" = "$nonopt" || test /bin/sh = "$nonopt" || # Allow the use of GNU shtool's install command. case $nonopt in *shtool*) :;; *) false;; esac then # Aesthetically quote it. func_quote_for_eval "$nonopt" install_prog="$func_quote_for_eval_result " arg=$1 shift else install_prog= arg=$nonopt fi # The real first argument should be the name of the installation program. # Aesthetically quote it. func_quote_for_eval "$arg" func_append install_prog "$func_quote_for_eval_result" install_shared_prog=$install_prog case " $install_prog " in *[\\\ /]cp\ *) install_cp=: ;; *) install_cp=false ;; esac # We need to accept at least all the BSD install flags. dest= files= opts= prev= install_type= isdir=false stripme= no_mode=: for arg do arg2= if test -n "$dest"; then func_append files " $dest" dest=$arg continue fi case $arg in -d) isdir=: ;; -f) if $install_cp; then :; else prev=$arg fi ;; -g | -m | -o) prev=$arg ;; -s) stripme=" -s" continue ;; -*) ;; *) # If the previous option needed an argument, then skip it. if test -n "$prev"; then if test X-m = "X$prev" && test -n "$install_override_mode"; then arg2=$install_override_mode no_mode=false fi prev= else dest=$arg continue fi ;; esac # Aesthetically quote the argument. func_quote_for_eval "$arg" func_append install_prog " $func_quote_for_eval_result" if test -n "$arg2"; then func_quote_for_eval "$arg2" fi func_append install_shared_prog " $func_quote_for_eval_result" done test -z "$install_prog" && \ func_fatal_help "you must specify an install program" test -n "$prev" && \ func_fatal_help "the '$prev' option requires an argument" if test -n "$install_override_mode" && $no_mode; then if $install_cp; then :; else func_quote_for_eval "$install_override_mode" func_append install_shared_prog " -m $func_quote_for_eval_result" fi fi if test -z "$files"; then if test -z "$dest"; then func_fatal_help "no file or destination specified" else func_fatal_help "you must specify a destination" fi fi # Strip any trailing slash from the destination. func_stripname '' '/' "$dest" dest=$func_stripname_result # Check to see that the destination is a directory. test -d "$dest" && isdir=: if $isdir; then destdir=$dest destname= else func_dirname_and_basename "$dest" "" "." destdir=$func_dirname_result destname=$func_basename_result # Not a directory, so check to see that there is only one file specified. set dummy $files; shift test "$#" -gt 1 && \ func_fatal_help "'$dest' is not a directory" fi case $destdir in [\\/]* | [A-Za-z]:[\\/]*) ;; *) for file in $files; do case $file in *.lo) ;; *) func_fatal_help "'$destdir' must be an absolute directory name" ;; esac done ;; esac # This variable tells wrapper scripts just to set variables rather # than running their programs. libtool_install_magic=$magic staticlibs= future_libdirs= current_libdirs= for file in $files; do # Do each installation. case $file in *.$libext) # Do the static libraries later. func_append staticlibs " $file" ;; *.la) func_resolve_sysroot "$file" file=$func_resolve_sysroot_result # Check to see that this really is a libtool archive. func_lalib_unsafe_p "$file" \ || func_fatal_help "'$file' is not a valid libtool archive" library_names= old_library= relink_command= func_source "$file" # Add the libdir to current_libdirs if it is the destination. if test "X$destdir" = "X$libdir"; then case "$current_libdirs " in *" $libdir "*) ;; *) func_append current_libdirs " $libdir" ;; esac else # Note the libdir as a future libdir. case "$future_libdirs " in *" $libdir "*) ;; *) func_append future_libdirs " $libdir" ;; esac fi func_dirname "$file" "/" "" dir=$func_dirname_result func_append dir "$objdir" if test -n "$relink_command"; then # Determine the prefix the user has applied to our future dir. inst_prefix_dir=`$ECHO "$destdir" | $SED -e "s%$libdir\$%%"` # Don't allow the user to place us outside of our expected # location b/c this prevents finding dependent libraries that # are installed to the same prefix. # At present, this check doesn't affect windows .dll's that # are installed into $libdir/../bin (currently, that works fine) # but it's something to keep an eye on. test "$inst_prefix_dir" = "$destdir" && \ func_fatal_error "error: cannot install '$file' to a directory not ending in $libdir" if test -n "$inst_prefix_dir"; then # Stick the inst_prefix_dir data into the link command. relink_command=`$ECHO "$relink_command" | $SED "s%@inst_prefix_dir@%-inst-prefix-dir $inst_prefix_dir%"` else relink_command=`$ECHO "$relink_command" | $SED "s%@inst_prefix_dir@%%"` fi func_warning "relinking '$file'" func_show_eval "$relink_command" \ 'func_fatal_error "error: relink '\''$file'\'' with the above command before installing it"' fi # See the names of the shared library. set dummy $library_names; shift if test -n "$1"; then realname=$1 shift srcname=$realname test -n "$relink_command" && srcname=${realname}T # Install the shared library and build the symlinks. func_show_eval "$install_shared_prog $dir/$srcname $destdir/$realname" \ 'exit $?' tstripme=$stripme case $host_os in cygwin* | mingw* | pw32* | cegcc*) case $realname in *.dll.a) tstripme= ;; esac ;; os2*) case $realname in *_dll.a) tstripme= ;; esac ;; esac if test -n "$tstripme" && test -n "$striplib"; then func_show_eval "$striplib $destdir/$realname" 'exit $?' fi if test "$#" -gt 0; then # Delete the old symlinks, and create new ones. # Try 'ln -sf' first, because the 'ln' binary might depend on # the symlink we replace! Solaris /bin/ln does not understand -f, # so we also need to try rm && ln -s. for linkname do test "$linkname" != "$realname" \ && func_show_eval "(cd $destdir && { $LN_S -f $realname $linkname || { $RM $linkname && $LN_S $realname $linkname; }; })" done fi # Do each command in the postinstall commands. lib=$destdir/$realname func_execute_cmds "$postinstall_cmds" 'exit $?' fi # Install the pseudo-library for information purposes. func_basename "$file" name=$func_basename_result instname=$dir/${name}i func_show_eval "$install_prog $instname $destdir/$name" 'exit $?' # Maybe install the static library, too. test -n "$old_library" && func_append staticlibs " $dir/$old_library" ;; *.lo) # Install (i.e. copy) a libtool object. # Figure out destination file name, if it wasn't already specified. if test -n "$destname"; then destfile=$destdir/$destname else func_basename "$file" destfile=$func_basename_result destfile=$destdir/$destfile fi # Deduce the name of the destination old-style object file. case $destfile in *.lo) func_lo2o "$destfile" staticdest=$func_lo2o_result ;; *.$objext) staticdest=$destfile destfile= ;; *) func_fatal_help "cannot copy a libtool object to '$destfile'" ;; esac # Install the libtool object if requested. test -n "$destfile" && \ func_show_eval "$install_prog $file $destfile" 'exit $?' # Install the old object if enabled. if test yes = "$build_old_libs"; then # Deduce the name of the old-style object file. func_lo2o "$file" staticobj=$func_lo2o_result func_show_eval "$install_prog \$staticobj \$staticdest" 'exit $?' fi exit $EXIT_SUCCESS ;; *) # Figure out destination file name, if it wasn't already specified. if test -n "$destname"; then destfile=$destdir/$destname else func_basename "$file" destfile=$func_basename_result destfile=$destdir/$destfile fi # If the file is missing, and there is a .exe on the end, strip it # because it is most likely a libtool script we actually want to # install stripped_ext= case $file in *.exe) if test ! -f "$file"; then func_stripname '' '.exe' "$file" file=$func_stripname_result stripped_ext=.exe fi ;; esac # Do a test to see if this is really a libtool program. case $host in *cygwin* | *mingw*) if func_ltwrapper_executable_p "$file"; then func_ltwrapper_scriptname "$file" wrapper=$func_ltwrapper_scriptname_result else func_stripname '' '.exe' "$file" wrapper=$func_stripname_result fi ;; *) wrapper=$file ;; esac if func_ltwrapper_script_p "$wrapper"; then notinst_deplibs= relink_command= func_source "$wrapper" # Check the variables that should have been set. test -z "$generated_by_libtool_version" && \ func_fatal_error "invalid libtool wrapper script '$wrapper'" finalize=: for lib in $notinst_deplibs; do # Check to see that each library is installed. libdir= if test -f "$lib"; then func_source "$lib" fi libfile=$libdir/`$ECHO "$lib" | $SED 's%^.*/%%g'` if test -n "$libdir" && test ! -f "$libfile"; then func_warning "'$lib' has not been installed in '$libdir'" finalize=false fi done relink_command= func_source "$wrapper" outputname= if test no = "$fast_install" && test -n "$relink_command"; then $opt_dry_run || { if $finalize; then tmpdir=`func_mktempdir` func_basename "$file$stripped_ext" file=$func_basename_result outputname=$tmpdir/$file # Replace the output file specification. relink_command=`$ECHO "$relink_command" | $SED 's%@OUTPUT@%'"$outputname"'%g'` $opt_quiet || { func_quote_for_expand "$relink_command" eval "func_echo $func_quote_for_expand_result" } if eval "$relink_command"; then : else func_error "error: relink '$file' with the above command before installing it" $opt_dry_run || ${RM}r "$tmpdir" continue fi file=$outputname else func_warning "cannot relink '$file'" fi } else # Install the binary that we compiled earlier. file=`$ECHO "$file$stripped_ext" | $SED "s%\([^/]*\)$%$objdir/\1%"` fi fi # remove .exe since cygwin /usr/bin/install will append another # one anyway case $install_prog,$host in */usr/bin/install*,*cygwin*) case $file:$destfile in *.exe:*.exe) # this is ok ;; *.exe:*) destfile=$destfile.exe ;; *:*.exe) func_stripname '' '.exe' "$destfile" destfile=$func_stripname_result ;; esac ;; esac func_show_eval "$install_prog\$stripme \$file \$destfile" 'exit $?' $opt_dry_run || if test -n "$outputname"; then ${RM}r "$tmpdir" fi ;; esac done for file in $staticlibs; do func_basename "$file" name=$func_basename_result # Set up the ranlib parameters. oldlib=$destdir/$name func_to_tool_file "$oldlib" func_convert_file_msys_to_w32 tool_oldlib=$func_to_tool_file_result func_show_eval "$install_prog \$file \$oldlib" 'exit $?' if test -n "$stripme" && test -n "$old_striplib"; then func_show_eval "$old_striplib $tool_oldlib" 'exit $?' fi # Do each command in the postinstall commands. func_execute_cmds "$old_postinstall_cmds" 'exit $?' done test -n "$future_libdirs" && \ func_warning "remember to run '$progname --finish$future_libdirs'" if test -n "$current_libdirs"; then # Maybe just do a dry run. $opt_dry_run && current_libdirs=" -n$current_libdirs" exec_cmd='$SHELL "$progpath" $preserve_args --finish$current_libdirs' else exit $EXIT_SUCCESS fi } test install = "$opt_mode" && func_mode_install ${1+"$@"} # func_generate_dlsyms outputname originator pic_p # Extract symbols from dlprefiles and create ${outputname}S.o with # a dlpreopen symbol table. func_generate_dlsyms () { $debug_cmd my_outputname=$1 my_originator=$2 my_pic_p=${3-false} my_prefix=`$ECHO "$my_originator" | $SED 's%[^a-zA-Z0-9]%_%g'` my_dlsyms= if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then if test -n "$NM" && test -n "$global_symbol_pipe"; then my_dlsyms=${my_outputname}S.c else func_error "not configured to extract global symbols from dlpreopened files" fi fi if test -n "$my_dlsyms"; then case $my_dlsyms in "") ;; *.c) # Discover the nlist of each of the dlfiles. nlist=$output_objdir/$my_outputname.nm func_show_eval "$RM $nlist ${nlist}S ${nlist}T" # Parse the name list into a source file. func_verbose "creating $output_objdir/$my_dlsyms" $opt_dry_run || $ECHO > "$output_objdir/$my_dlsyms" "\ /* $my_dlsyms - symbol resolution table for '$my_outputname' dlsym emulation. */ /* Generated by $PROGRAM (GNU $PACKAGE) $VERSION */ #ifdef __cplusplus extern \"C\" { #endif #if defined __GNUC__ && (((__GNUC__ == 4) && (__GNUC_MINOR__ >= 4)) || (__GNUC__ > 4)) #pragma GCC diagnostic ignored \"-Wstrict-prototypes\" #endif /* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests. */ #if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE /* DATA imports from DLLs on WIN32 can't be const, because runtime relocations are performed -- see ld's documentation on pseudo-relocs. */ # define LT_DLSYM_CONST #elif defined __osf__ /* This system does not cope well with relocations in const data. */ # define LT_DLSYM_CONST #else # define LT_DLSYM_CONST const #endif #define STREQ(s1, s2) (strcmp ((s1), (s2)) == 0) /* External symbol declarations for the compiler. */\ " if test yes = "$dlself"; then func_verbose "generating symbol list for '$output'" $opt_dry_run || echo ': @PROGRAM@ ' > "$nlist" # Add our own program objects to the symbol list. progfiles=`$ECHO "$objs$old_deplibs" | $SP2NL | $SED "$lo2o" | $NL2SP` for progfile in $progfiles; do func_to_tool_file "$progfile" func_convert_file_msys_to_w32 func_verbose "extracting global C symbols from '$func_to_tool_file_result'" $opt_dry_run || eval "$NM $func_to_tool_file_result | $global_symbol_pipe >> '$nlist'" done if test -n "$exclude_expsyms"; then $opt_dry_run || { eval '$EGREP -v " ($exclude_expsyms)$" "$nlist" > "$nlist"T' eval '$MV "$nlist"T "$nlist"' } fi if test -n "$export_symbols_regex"; then $opt_dry_run || { eval '$EGREP -e "$export_symbols_regex" "$nlist" > "$nlist"T' eval '$MV "$nlist"T "$nlist"' } fi # Prepare the list of exported symbols if test -z "$export_symbols"; then export_symbols=$output_objdir/$outputname.exp $opt_dry_run || { $RM $export_symbols eval "$SED -n -e '/^: @PROGRAM@ $/d' -e 's/^.* \(.*\)$/\1/p' "'< "$nlist" > "$export_symbols"' case $host in *cygwin* | *mingw* | *cegcc* ) eval "echo EXPORTS "'> "$output_objdir/$outputname.def"' eval 'cat "$export_symbols" >> "$output_objdir/$outputname.def"' ;; esac } else $opt_dry_run || { eval "$SED -e 's/\([].[*^$]\)/\\\\\1/g' -e 's/^/ /' -e 's/$/$/'"' < "$export_symbols" > "$output_objdir/$outputname.exp"' eval '$GREP -f "$output_objdir/$outputname.exp" < "$nlist" > "$nlist"T' eval '$MV "$nlist"T "$nlist"' case $host in *cygwin* | *mingw* | *cegcc* ) eval "echo EXPORTS "'> "$output_objdir/$outputname.def"' eval 'cat "$nlist" >> "$output_objdir/$outputname.def"' ;; esac } fi fi for dlprefile in $dlprefiles; do func_verbose "extracting global C symbols from '$dlprefile'" func_basename "$dlprefile" name=$func_basename_result case $host in *cygwin* | *mingw* | *cegcc* ) # if an import library, we need to obtain dlname if func_win32_import_lib_p "$dlprefile"; then func_tr_sh "$dlprefile" eval "curr_lafile=\$libfile_$func_tr_sh_result" dlprefile_dlbasename= if test -n "$curr_lafile" && func_lalib_p "$curr_lafile"; then # Use subshell, to avoid clobbering current variable values dlprefile_dlname=`source "$curr_lafile" && echo "$dlname"` if test -n "$dlprefile_dlname"; then func_basename "$dlprefile_dlname" dlprefile_dlbasename=$func_basename_result else # no lafile. user explicitly requested -dlpreopen . $sharedlib_from_linklib_cmd "$dlprefile" dlprefile_dlbasename=$sharedlib_from_linklib_result fi fi $opt_dry_run || { if test -n "$dlprefile_dlbasename"; then eval '$ECHO ": $dlprefile_dlbasename" >> "$nlist"' else func_warning "Could not compute DLL name from $name" eval '$ECHO ": $name " >> "$nlist"' fi func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32 eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe | $SED -e '/I __imp/d' -e 's/I __nm_/D /;s/_nm__//' >> '$nlist'" } else # not an import lib $opt_dry_run || { eval '$ECHO ": $name " >> "$nlist"' func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32 eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe >> '$nlist'" } fi ;; *) $opt_dry_run || { eval '$ECHO ": $name " >> "$nlist"' func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32 eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe >> '$nlist'" } ;; esac done $opt_dry_run || { # Make sure we have at least an empty file. test -f "$nlist" || : > "$nlist" if test -n "$exclude_expsyms"; then $EGREP -v " ($exclude_expsyms)$" "$nlist" > "$nlist"T $MV "$nlist"T "$nlist" fi # Try sorting and uniquifying the output. if $GREP -v "^: " < "$nlist" | if sort -k 3 /dev/null 2>&1; then sort -k 3 else sort +2 fi | uniq > "$nlist"S; then : else $GREP -v "^: " < "$nlist" > "$nlist"S fi if test -f "$nlist"S; then eval "$global_symbol_to_cdecl"' < "$nlist"S >> "$output_objdir/$my_dlsyms"' else echo '/* NONE */' >> "$output_objdir/$my_dlsyms" fi func_show_eval '$RM "${nlist}I"' if test -n "$global_symbol_to_import"; then eval "$global_symbol_to_import"' < "$nlist"S > "$nlist"I' fi echo >> "$output_objdir/$my_dlsyms" "\ /* The mapping between symbol names and symbols. */ typedef struct { const char *name; void *address; } lt_dlsymlist; extern LT_DLSYM_CONST lt_dlsymlist lt_${my_prefix}_LTX_preloaded_symbols[];\ " if test -s "$nlist"I; then echo >> "$output_objdir/$my_dlsyms" "\ static void lt_syminit(void) { LT_DLSYM_CONST lt_dlsymlist *symbol = lt_${my_prefix}_LTX_preloaded_symbols; for (; symbol->name; ++symbol) {" $SED 's/.*/ if (STREQ (symbol->name, \"&\")) symbol->address = (void *) \&&;/' < "$nlist"I >> "$output_objdir/$my_dlsyms" echo >> "$output_objdir/$my_dlsyms" "\ } }" fi echo >> "$output_objdir/$my_dlsyms" "\ LT_DLSYM_CONST lt_dlsymlist lt_${my_prefix}_LTX_preloaded_symbols[] = { {\"$my_originator\", (void *) 0}," if test -s "$nlist"I; then echo >> "$output_objdir/$my_dlsyms" "\ {\"@INIT@\", (void *) <_syminit}," fi case $need_lib_prefix in no) eval "$global_symbol_to_c_name_address" < "$nlist" >> "$output_objdir/$my_dlsyms" ;; *) eval "$global_symbol_to_c_name_address_lib_prefix" < "$nlist" >> "$output_objdir/$my_dlsyms" ;; esac echo >> "$output_objdir/$my_dlsyms" "\ {0, (void *) 0} }; /* This works around a problem in FreeBSD linker */ #ifdef FREEBSD_WORKAROUND static const void *lt_preloaded_setup() { return lt_${my_prefix}_LTX_preloaded_symbols; } #endif #ifdef __cplusplus } #endif\ " } # !$opt_dry_run pic_flag_for_symtable= case "$compile_command " in *" -static "*) ;; *) case $host in # compiling the symbol table file with pic_flag works around # a FreeBSD bug that causes programs to crash when -lm is # linked before any other PIC object. But we must not use # pic_flag when linking with -static. The problem exists in # FreeBSD 2.2.6 and is fixed in FreeBSD 3.1. *-*-freebsd2.*|*-*-freebsd3.0*|*-*-freebsdelf3.0*) pic_flag_for_symtable=" $pic_flag -DFREEBSD_WORKAROUND" ;; *-*-hpux*) pic_flag_for_symtable=" $pic_flag" ;; *) $my_pic_p && pic_flag_for_symtable=" $pic_flag" ;; esac ;; esac symtab_cflags= for arg in $LTCFLAGS; do case $arg in -pie | -fpie | -fPIE) ;; *) func_append symtab_cflags " $arg" ;; esac done # Now compile the dynamic symbol file. func_show_eval '(cd $output_objdir && $LTCC$symtab_cflags -c$no_builtin_flag$pic_flag_for_symtable "$my_dlsyms")' 'exit $?' # Clean up the generated files. func_show_eval '$RM "$output_objdir/$my_dlsyms" "$nlist" "${nlist}S" "${nlist}T" "${nlist}I"' # Transform the symbol file into the correct name. symfileobj=$output_objdir/${my_outputname}S.$objext case $host in *cygwin* | *mingw* | *cegcc* ) if test -f "$output_objdir/$my_outputname.def"; then compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$output_objdir/$my_outputname.def $symfileobj%"` finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$output_objdir/$my_outputname.def $symfileobj%"` else compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$symfileobj%"` finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$symfileobj%"` fi ;; *) compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$symfileobj%"` finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$symfileobj%"` ;; esac ;; *) func_fatal_error "unknown suffix for '$my_dlsyms'" ;; esac else # We keep going just in case the user didn't refer to # lt_preloaded_symbols. The linker will fail if global_symbol_pipe # really was required. # Nullify the symbol file. compile_command=`$ECHO "$compile_command" | $SED "s% @SYMFILE@%%"` finalize_command=`$ECHO "$finalize_command" | $SED "s% @SYMFILE@%%"` fi } # func_cygming_gnu_implib_p ARG # This predicate returns with zero status (TRUE) if # ARG is a GNU/binutils-style import library. Returns # with nonzero status (FALSE) otherwise. func_cygming_gnu_implib_p () { $debug_cmd func_to_tool_file "$1" func_convert_file_msys_to_w32 func_cygming_gnu_implib_tmp=`$NM "$func_to_tool_file_result" | eval "$global_symbol_pipe" | $EGREP ' (_head_[A-Za-z0-9_]+_[ad]l*|[A-Za-z0-9_]+_[ad]l*_iname)$'` test -n "$func_cygming_gnu_implib_tmp" } # func_cygming_ms_implib_p ARG # This predicate returns with zero status (TRUE) if # ARG is an MS-style import library. Returns # with nonzero status (FALSE) otherwise. func_cygming_ms_implib_p () { $debug_cmd func_to_tool_file "$1" func_convert_file_msys_to_w32 func_cygming_ms_implib_tmp=`$NM "$func_to_tool_file_result" | eval "$global_symbol_pipe" | $GREP '_NULL_IMPORT_DESCRIPTOR'` test -n "$func_cygming_ms_implib_tmp" } # func_win32_libid arg # return the library type of file 'arg' # # Need a lot of goo to handle *both* DLLs and import libs # Has to be a shell function in order to 'eat' the argument # that is supplied when $file_magic_command is called. # Despite the name, also deal with 64 bit binaries. func_win32_libid () { $debug_cmd win32_libid_type=unknown win32_fileres=`file -L $1 2>/dev/null` case $win32_fileres in *ar\ archive\ import\ library*) # definitely import win32_libid_type="x86 archive import" ;; *ar\ archive*) # could be an import, or static # Keep the egrep pattern in sync with the one in _LT_CHECK_MAGIC_METHOD. if eval $OBJDUMP -f $1 | $SED -e '10q' 2>/dev/null | $EGREP 'file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64)' >/dev/null; then case $nm_interface in "MS dumpbin") if func_cygming_ms_implib_p "$1" || func_cygming_gnu_implib_p "$1" then win32_nmres=import else win32_nmres= fi ;; *) func_to_tool_file "$1" func_convert_file_msys_to_w32 win32_nmres=`eval $NM -f posix -A \"$func_to_tool_file_result\" | $SED -n -e ' 1,100{ / I /{ s|.*|import| p q } }'` ;; esac case $win32_nmres in import*) win32_libid_type="x86 archive import";; *) win32_libid_type="x86 archive static";; esac fi ;; *DLL*) win32_libid_type="x86 DLL" ;; *executable*) # but shell scripts are "executable" too... case $win32_fileres in *MS\ Windows\ PE\ Intel*) win32_libid_type="x86 DLL" ;; esac ;; esac $ECHO "$win32_libid_type" } # func_cygming_dll_for_implib ARG # # Platform-specific function to extract the # name of the DLL associated with the specified # import library ARG. # Invoked by eval'ing the libtool variable # $sharedlib_from_linklib_cmd # Result is available in the variable # $sharedlib_from_linklib_result func_cygming_dll_for_implib () { $debug_cmd sharedlib_from_linklib_result=`$DLLTOOL --identify-strict --identify "$1"` } # func_cygming_dll_for_implib_fallback_core SECTION_NAME LIBNAMEs # # The is the core of a fallback implementation of a # platform-specific function to extract the name of the # DLL associated with the specified import library LIBNAME. # # SECTION_NAME is either .idata$6 or .idata$7, depending # on the platform and compiler that created the implib. # # Echos the name of the DLL associated with the # specified import library. func_cygming_dll_for_implib_fallback_core () { $debug_cmd match_literal=`$ECHO "$1" | $SED "$sed_make_literal_regex"` $OBJDUMP -s --section "$1" "$2" 2>/dev/null | $SED '/^Contents of section '"$match_literal"':/{ # Place marker at beginning of archive member dllname section s/.*/====MARK====/ p d } # These lines can sometimes be longer than 43 characters, but # are always uninteresting /:[ ]*file format pe[i]\{,1\}-/d /^In archive [^:]*:/d # Ensure marker is printed /^====MARK====/p # Remove all lines with less than 43 characters /^.\{43\}/!d # From remaining lines, remove first 43 characters s/^.\{43\}//' | $SED -n ' # Join marker and all lines until next marker into a single line /^====MARK====/ b para H $ b para b :para x s/\n//g # Remove the marker s/^====MARK====// # Remove trailing dots and whitespace s/[\. \t]*$// # Print /./p' | # we now have a list, one entry per line, of the stringified # contents of the appropriate section of all members of the # archive that possess that section. Heuristic: eliminate # all those that have a first or second character that is # a '.' (that is, objdump's representation of an unprintable # character.) This should work for all archives with less than # 0x302f exports -- but will fail for DLLs whose name actually # begins with a literal '.' or a single character followed by # a '.'. # # Of those that remain, print the first one. $SED -e '/^\./d;/^.\./d;q' } # func_cygming_dll_for_implib_fallback ARG # Platform-specific function to extract the # name of the DLL associated with the specified # import library ARG. # # This fallback implementation is for use when $DLLTOOL # does not support the --identify-strict option. # Invoked by eval'ing the libtool variable # $sharedlib_from_linklib_cmd # Result is available in the variable # $sharedlib_from_linklib_result func_cygming_dll_for_implib_fallback () { $debug_cmd if func_cygming_gnu_implib_p "$1"; then # binutils import library sharedlib_from_linklib_result=`func_cygming_dll_for_implib_fallback_core '.idata$7' "$1"` elif func_cygming_ms_implib_p "$1"; then # ms-generated import library sharedlib_from_linklib_result=`func_cygming_dll_for_implib_fallback_core '.idata$6' "$1"` else # unknown sharedlib_from_linklib_result= fi } # func_extract_an_archive dir oldlib func_extract_an_archive () { $debug_cmd f_ex_an_ar_dir=$1; shift f_ex_an_ar_oldlib=$1 if test yes = "$lock_old_archive_extraction"; then lockfile=$f_ex_an_ar_oldlib.lock until $opt_dry_run || ln "$progpath" "$lockfile" 2>/dev/null; do func_echo "Waiting for $lockfile to be removed" sleep 2 done fi func_show_eval "(cd \$f_ex_an_ar_dir && $AR x \"\$f_ex_an_ar_oldlib\")" \ 'stat=$?; rm -f "$lockfile"; exit $stat' if test yes = "$lock_old_archive_extraction"; then $opt_dry_run || rm -f "$lockfile" fi if ($AR t "$f_ex_an_ar_oldlib" | sort | sort -uc >/dev/null 2>&1); then : else func_fatal_error "object name conflicts in archive: $f_ex_an_ar_dir/$f_ex_an_ar_oldlib" fi } # func_extract_archives gentop oldlib ... func_extract_archives () { $debug_cmd my_gentop=$1; shift my_oldlibs=${1+"$@"} my_oldobjs= my_xlib= my_xabs= my_xdir= for my_xlib in $my_oldlibs; do # Extract the objects. case $my_xlib in [\\/]* | [A-Za-z]:[\\/]*) my_xabs=$my_xlib ;; *) my_xabs=`pwd`"/$my_xlib" ;; esac func_basename "$my_xlib" my_xlib=$func_basename_result my_xlib_u=$my_xlib while :; do case " $extracted_archives " in *" $my_xlib_u "*) func_arith $extracted_serial + 1 extracted_serial=$func_arith_result my_xlib_u=lt$extracted_serial-$my_xlib ;; *) break ;; esac done extracted_archives="$extracted_archives $my_xlib_u" my_xdir=$my_gentop/$my_xlib_u func_mkdir_p "$my_xdir" case $host in *-darwin*) func_verbose "Extracting $my_xabs" # Do not bother doing anything if just a dry run $opt_dry_run || { darwin_orig_dir=`pwd` cd $my_xdir || exit $? darwin_archive=$my_xabs darwin_curdir=`pwd` func_basename "$darwin_archive" darwin_base_archive=$func_basename_result darwin_arches=`$LIPO -info "$darwin_archive" 2>/dev/null | $GREP Architectures 2>/dev/null || true` if test -n "$darwin_arches"; then darwin_arches=`$ECHO "$darwin_arches" | $SED -e 's/.*are://'` darwin_arch= func_verbose "$darwin_base_archive has multiple architectures $darwin_arches" for darwin_arch in $darwin_arches; do func_mkdir_p "unfat-$$/$darwin_base_archive-$darwin_arch" $LIPO -thin $darwin_arch -output "unfat-$$/$darwin_base_archive-$darwin_arch/$darwin_base_archive" "$darwin_archive" cd "unfat-$$/$darwin_base_archive-$darwin_arch" func_extract_an_archive "`pwd`" "$darwin_base_archive" cd "$darwin_curdir" $RM "unfat-$$/$darwin_base_archive-$darwin_arch/$darwin_base_archive" done # $darwin_arches ## Okay now we've a bunch of thin objects, gotta fatten them up :) darwin_filelist=`find unfat-$$ -type f -name \*.o -print -o -name \*.lo -print | $SED -e "$sed_basename" | sort -u` darwin_file= darwin_files= for darwin_file in $darwin_filelist; do darwin_files=`find unfat-$$ -name $darwin_file -print | sort | $NL2SP` $LIPO -create -output "$darwin_file" $darwin_files done # $darwin_filelist $RM -rf unfat-$$ cd "$darwin_orig_dir" else cd $darwin_orig_dir func_extract_an_archive "$my_xdir" "$my_xabs" fi # $darwin_arches } # !$opt_dry_run ;; *) func_extract_an_archive "$my_xdir" "$my_xabs" ;; esac my_oldobjs="$my_oldobjs "`find $my_xdir -name \*.$objext -print -o -name \*.lo -print | sort | $NL2SP` done func_extract_archives_result=$my_oldobjs } # func_emit_wrapper [arg=no] # # Emit a libtool wrapper script on stdout. # Don't directly open a file because we may want to # incorporate the script contents within a cygwin/mingw # wrapper executable. Must ONLY be called from within # func_mode_link because it depends on a number of variables # set therein. # # ARG is the value that the WRAPPER_SCRIPT_BELONGS_IN_OBJDIR # variable will take. If 'yes', then the emitted script # will assume that the directory where it is stored is # the $objdir directory. This is a cygwin/mingw-specific # behavior. func_emit_wrapper () { func_emit_wrapper_arg1=${1-no} $ECHO "\ #! $SHELL # $output - temporary wrapper script for $objdir/$outputname # Generated by $PROGRAM (GNU $PACKAGE) $VERSION # # The $output program cannot be directly executed until all the libtool # libraries that it depends on are installed. # # This wrapper script should never be moved out of the build directory. # If it is, it will not operate correctly. # Sed substitution that helps us do robust quoting. It backslashifies # metacharacters that are still active within double-quoted strings. sed_quote_subst='$sed_quote_subst' # Be Bourne compatible if test -n \"\${ZSH_VERSION+set}\" && (emulate sh) >/dev/null 2>&1; then emulate sh NULLCMD=: # Zsh 3.x and 4.x performs word splitting on \${1+\"\$@\"}, which # is contrary to our usage. Disable this feature. alias -g '\${1+\"\$@\"}'='\"\$@\"' setopt NO_GLOB_SUBST else case \`(set -o) 2>/dev/null\` in *posix*) set -o posix;; esac fi BIN_SH=xpg4; export BIN_SH # for Tru64 DUALCASE=1; export DUALCASE # for MKS sh # The HP-UX ksh and POSIX shell print the target directory to stdout # if CDPATH is set. (unset CDPATH) >/dev/null 2>&1 && unset CDPATH relink_command=\"$relink_command\" # This environment variable determines our operation mode. if test \"\$libtool_install_magic\" = \"$magic\"; then # install mode needs the following variables: generated_by_libtool_version='$macro_version' notinst_deplibs='$notinst_deplibs' else # When we are sourced in execute mode, \$file and \$ECHO are already set. if test \"\$libtool_execute_magic\" != \"$magic\"; then file=\"\$0\"" qECHO=`$ECHO "$ECHO" | $SED "$sed_quote_subst"` $ECHO "\ # A function that is used when there is no print builtin or printf. func_fallback_echo () { eval 'cat <<_LTECHO_EOF \$1 _LTECHO_EOF' } ECHO=\"$qECHO\" fi # Very basic option parsing. These options are (a) specific to # the libtool wrapper, (b) are identical between the wrapper # /script/ and the wrapper /executable/ that is used only on # windows platforms, and (c) all begin with the string "--lt-" # (application programs are unlikely to have options that match # this pattern). # # There are only two supported options: --lt-debug and # --lt-dump-script. There is, deliberately, no --lt-help. # # The first argument to this parsing function should be the # script's $0 value, followed by "$@". lt_option_debug= func_parse_lt_options () { lt_script_arg0=\$0 shift for lt_opt do case \"\$lt_opt\" in --lt-debug) lt_option_debug=1 ;; --lt-dump-script) lt_dump_D=\`\$ECHO \"X\$lt_script_arg0\" | $SED -e 's/^X//' -e 's%/[^/]*$%%'\` test \"X\$lt_dump_D\" = \"X\$lt_script_arg0\" && lt_dump_D=. lt_dump_F=\`\$ECHO \"X\$lt_script_arg0\" | $SED -e 's/^X//' -e 's%^.*/%%'\` cat \"\$lt_dump_D/\$lt_dump_F\" exit 0 ;; --lt-*) \$ECHO \"Unrecognized --lt- option: '\$lt_opt'\" 1>&2 exit 1 ;; esac done # Print the debug banner immediately: if test -n \"\$lt_option_debug\"; then echo \"$outputname:$output:\$LINENO: libtool wrapper (GNU $PACKAGE) $VERSION\" 1>&2 fi } # Used when --lt-debug. Prints its arguments to stdout # (redirection is the responsibility of the caller) func_lt_dump_args () { lt_dump_args_N=1; for lt_arg do \$ECHO \"$outputname:$output:\$LINENO: newargv[\$lt_dump_args_N]: \$lt_arg\" lt_dump_args_N=\`expr \$lt_dump_args_N + 1\` done } # Core function for launching the target application func_exec_program_core () { " case $host in # Backslashes separate directories on plain windows *-*-mingw | *-*-os2* | *-cegcc*) $ECHO "\ if test -n \"\$lt_option_debug\"; then \$ECHO \"$outputname:$output:\$LINENO: newargv[0]: \$progdir\\\\\$program\" 1>&2 func_lt_dump_args \${1+\"\$@\"} 1>&2 fi exec \"\$progdir\\\\\$program\" \${1+\"\$@\"} " ;; *) $ECHO "\ if test -n \"\$lt_option_debug\"; then \$ECHO \"$outputname:$output:\$LINENO: newargv[0]: \$progdir/\$program\" 1>&2 func_lt_dump_args \${1+\"\$@\"} 1>&2 fi exec \"\$progdir/\$program\" \${1+\"\$@\"} " ;; esac $ECHO "\ \$ECHO \"\$0: cannot exec \$program \$*\" 1>&2 exit 1 } # A function to encapsulate launching the target application # Strips options in the --lt-* namespace from \$@ and # launches target application with the remaining arguments. func_exec_program () { case \" \$* \" in *\\ --lt-*) for lt_wr_arg do case \$lt_wr_arg in --lt-*) ;; *) set x \"\$@\" \"\$lt_wr_arg\"; shift;; esac shift done ;; esac func_exec_program_core \${1+\"\$@\"} } # Parse options func_parse_lt_options \"\$0\" \${1+\"\$@\"} # Find the directory that this script lives in. thisdir=\`\$ECHO \"\$file\" | $SED 's%/[^/]*$%%'\` test \"x\$thisdir\" = \"x\$file\" && thisdir=. # Follow symbolic links until we get to the real thisdir. file=\`ls -ld \"\$file\" | $SED -n 's/.*-> //p'\` while test -n \"\$file\"; do destdir=\`\$ECHO \"\$file\" | $SED 's%/[^/]*\$%%'\` # If there was a directory component, then change thisdir. if test \"x\$destdir\" != \"x\$file\"; then case \"\$destdir\" in [\\\\/]* | [A-Za-z]:[\\\\/]*) thisdir=\"\$destdir\" ;; *) thisdir=\"\$thisdir/\$destdir\" ;; esac fi file=\`\$ECHO \"\$file\" | $SED 's%^.*/%%'\` file=\`ls -ld \"\$thisdir/\$file\" | $SED -n 's/.*-> //p'\` done # Usually 'no', except on cygwin/mingw when embedded into # the cwrapper. WRAPPER_SCRIPT_BELONGS_IN_OBJDIR=$func_emit_wrapper_arg1 if test \"\$WRAPPER_SCRIPT_BELONGS_IN_OBJDIR\" = \"yes\"; then # special case for '.' if test \"\$thisdir\" = \".\"; then thisdir=\`pwd\` fi # remove .libs from thisdir case \"\$thisdir\" in *[\\\\/]$objdir ) thisdir=\`\$ECHO \"\$thisdir\" | $SED 's%[\\\\/][^\\\\/]*$%%'\` ;; $objdir ) thisdir=. ;; esac fi # Try to get the absolute directory name. absdir=\`cd \"\$thisdir\" && pwd\` test -n \"\$absdir\" && thisdir=\"\$absdir\" " if test yes = "$fast_install"; then $ECHO "\ program=lt-'$outputname'$exeext progdir=\"\$thisdir/$objdir\" if test ! -f \"\$progdir/\$program\" || { file=\`ls -1dt \"\$progdir/\$program\" \"\$progdir/../\$program\" 2>/dev/null | $SED 1q\`; \\ test \"X\$file\" != \"X\$progdir/\$program\"; }; then file=\"\$\$-\$program\" if test ! -d \"\$progdir\"; then $MKDIR \"\$progdir\" else $RM \"\$progdir/\$file\" fi" $ECHO "\ # relink executable if necessary if test -n \"\$relink_command\"; then if relink_command_output=\`eval \$relink_command 2>&1\`; then : else \$ECHO \"\$relink_command_output\" >&2 $RM \"\$progdir/\$file\" exit 1 fi fi $MV \"\$progdir/\$file\" \"\$progdir/\$program\" 2>/dev/null || { $RM \"\$progdir/\$program\"; $MV \"\$progdir/\$file\" \"\$progdir/\$program\"; } $RM \"\$progdir/\$file\" fi" else $ECHO "\ program='$outputname' progdir=\"\$thisdir/$objdir\" " fi $ECHO "\ if test -f \"\$progdir/\$program\"; then" # fixup the dll searchpath if we need to. # # Fix the DLL searchpath if we need to. Do this before prepending # to shlibpath, because on Windows, both are PATH and uninstalled # libraries must come first. if test -n "$dllsearchpath"; then $ECHO "\ # Add the dll search path components to the executable PATH PATH=$dllsearchpath:\$PATH " fi # Export our shlibpath_var if we have one. if test yes = "$shlibpath_overrides_runpath" && test -n "$shlibpath_var" && test -n "$temp_rpath"; then $ECHO "\ # Add our own library path to $shlibpath_var $shlibpath_var=\"$temp_rpath\$$shlibpath_var\" # Some systems cannot cope with colon-terminated $shlibpath_var # The second colon is a workaround for a bug in BeOS R4 sed $shlibpath_var=\`\$ECHO \"\$$shlibpath_var\" | $SED 's/::*\$//'\` export $shlibpath_var " fi $ECHO "\ if test \"\$libtool_execute_magic\" != \"$magic\"; then # Run the actual program with our arguments. func_exec_program \${1+\"\$@\"} fi else # The program doesn't exist. \$ECHO \"\$0: error: '\$progdir/\$program' does not exist\" 1>&2 \$ECHO \"This script is just a wrapper for \$program.\" 1>&2 \$ECHO \"See the $PACKAGE documentation for more information.\" 1>&2 exit 1 fi fi\ " } # func_emit_cwrapperexe_src # emit the source code for a wrapper executable on stdout # Must ONLY be called from within func_mode_link because # it depends on a number of variable set therein. func_emit_cwrapperexe_src () { cat < #include #ifdef _MSC_VER # include # include # include #else # include # include # ifdef __CYGWIN__ # include # endif #endif #include #include #include #include #include #include #include #include #define STREQ(s1, s2) (strcmp ((s1), (s2)) == 0) /* declarations of non-ANSI functions */ #if defined __MINGW32__ # ifdef __STRICT_ANSI__ int _putenv (const char *); # endif #elif defined __CYGWIN__ # ifdef __STRICT_ANSI__ char *realpath (const char *, char *); int putenv (char *); int setenv (const char *, const char *, int); # endif /* #elif defined other_platform || defined ... */ #endif /* portability defines, excluding path handling macros */ #if defined _MSC_VER # define setmode _setmode # define stat _stat # define chmod _chmod # define getcwd _getcwd # define putenv _putenv # define S_IXUSR _S_IEXEC #elif defined __MINGW32__ # define setmode _setmode # define stat _stat # define chmod _chmod # define getcwd _getcwd # define putenv _putenv #elif defined __CYGWIN__ # define HAVE_SETENV # define FOPEN_WB "wb" /* #elif defined other platforms ... */ #endif #if defined PATH_MAX # define LT_PATHMAX PATH_MAX #elif defined MAXPATHLEN # define LT_PATHMAX MAXPATHLEN #else # define LT_PATHMAX 1024 #endif #ifndef S_IXOTH # define S_IXOTH 0 #endif #ifndef S_IXGRP # define S_IXGRP 0 #endif /* path handling portability macros */ #ifndef DIR_SEPARATOR # define DIR_SEPARATOR '/' # define PATH_SEPARATOR ':' #endif #if defined _WIN32 || defined __MSDOS__ || defined __DJGPP__ || \ defined __OS2__ # define HAVE_DOS_BASED_FILE_SYSTEM # define FOPEN_WB "wb" # ifndef DIR_SEPARATOR_2 # define DIR_SEPARATOR_2 '\\' # endif # ifndef PATH_SEPARATOR_2 # define PATH_SEPARATOR_2 ';' # endif #endif #ifndef DIR_SEPARATOR_2 # define IS_DIR_SEPARATOR(ch) ((ch) == DIR_SEPARATOR) #else /* DIR_SEPARATOR_2 */ # define IS_DIR_SEPARATOR(ch) \ (((ch) == DIR_SEPARATOR) || ((ch) == DIR_SEPARATOR_2)) #endif /* DIR_SEPARATOR_2 */ #ifndef PATH_SEPARATOR_2 # define IS_PATH_SEPARATOR(ch) ((ch) == PATH_SEPARATOR) #else /* PATH_SEPARATOR_2 */ # define IS_PATH_SEPARATOR(ch) ((ch) == PATH_SEPARATOR_2) #endif /* PATH_SEPARATOR_2 */ #ifndef FOPEN_WB # define FOPEN_WB "w" #endif #ifndef _O_BINARY # define _O_BINARY 0 #endif #define XMALLOC(type, num) ((type *) xmalloc ((num) * sizeof(type))) #define XFREE(stale) do { \ if (stale) { free (stale); stale = 0; } \ } while (0) #if defined LT_DEBUGWRAPPER static int lt_debug = 1; #else static int lt_debug = 0; #endif const char *program_name = "libtool-wrapper"; /* in case xstrdup fails */ void *xmalloc (size_t num); char *xstrdup (const char *string); const char *base_name (const char *name); char *find_executable (const char *wrapper); char *chase_symlinks (const char *pathspec); int make_executable (const char *path); int check_executable (const char *path); char *strendzap (char *str, const char *pat); void lt_debugprintf (const char *file, int line, const char *fmt, ...); void lt_fatal (const char *file, int line, const char *message, ...); static const char *nonnull (const char *s); static const char *nonempty (const char *s); void lt_setenv (const char *name, const char *value); char *lt_extend_str (const char *orig_value, const char *add, int to_end); void lt_update_exe_path (const char *name, const char *value); void lt_update_lib_path (const char *name, const char *value); char **prepare_spawn (char **argv); void lt_dump_script (FILE *f); EOF cat <= 0) && (st.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH))) return 1; else return 0; } int make_executable (const char *path) { int rval = 0; struct stat st; lt_debugprintf (__FILE__, __LINE__, "(make_executable): %s\n", nonempty (path)); if ((!path) || (!*path)) return 0; if (stat (path, &st) >= 0) { rval = chmod (path, st.st_mode | S_IXOTH | S_IXGRP | S_IXUSR); } return rval; } /* Searches for the full path of the wrapper. Returns newly allocated full path name if found, NULL otherwise Does not chase symlinks, even on platforms that support them. */ char * find_executable (const char *wrapper) { int has_slash = 0; const char *p; const char *p_next; /* static buffer for getcwd */ char tmp[LT_PATHMAX + 1]; size_t tmp_len; char *concat_name; lt_debugprintf (__FILE__, __LINE__, "(find_executable): %s\n", nonempty (wrapper)); if ((wrapper == NULL) || (*wrapper == '\0')) return NULL; /* Absolute path? */ #if defined HAVE_DOS_BASED_FILE_SYSTEM if (isalpha ((unsigned char) wrapper[0]) && wrapper[1] == ':') { concat_name = xstrdup (wrapper); if (check_executable (concat_name)) return concat_name; XFREE (concat_name); } else { #endif if (IS_DIR_SEPARATOR (wrapper[0])) { concat_name = xstrdup (wrapper); if (check_executable (concat_name)) return concat_name; XFREE (concat_name); } #if defined HAVE_DOS_BASED_FILE_SYSTEM } #endif for (p = wrapper; *p; p++) if (*p == '/') { has_slash = 1; break; } if (!has_slash) { /* no slashes; search PATH */ const char *path = getenv ("PATH"); if (path != NULL) { for (p = path; *p; p = p_next) { const char *q; size_t p_len; for (q = p; *q; q++) if (IS_PATH_SEPARATOR (*q)) break; p_len = (size_t) (q - p); p_next = (*q == '\0' ? q : q + 1); if (p_len == 0) { /* empty path: current directory */ if (getcwd (tmp, LT_PATHMAX) == NULL) lt_fatal (__FILE__, __LINE__, "getcwd failed: %s", nonnull (strerror (errno))); tmp_len = strlen (tmp); concat_name = XMALLOC (char, tmp_len + 1 + strlen (wrapper) + 1); memcpy (concat_name, tmp, tmp_len); concat_name[tmp_len] = '/'; strcpy (concat_name + tmp_len + 1, wrapper); } else { concat_name = XMALLOC (char, p_len + 1 + strlen (wrapper) + 1); memcpy (concat_name, p, p_len); concat_name[p_len] = '/'; strcpy (concat_name + p_len + 1, wrapper); } if (check_executable (concat_name)) return concat_name; XFREE (concat_name); } } /* not found in PATH; assume curdir */ } /* Relative path | not found in path: prepend cwd */ if (getcwd (tmp, LT_PATHMAX) == NULL) lt_fatal (__FILE__, __LINE__, "getcwd failed: %s", nonnull (strerror (errno))); tmp_len = strlen (tmp); concat_name = XMALLOC (char, tmp_len + 1 + strlen (wrapper) + 1); memcpy (concat_name, tmp, tmp_len); concat_name[tmp_len] = '/'; strcpy (concat_name + tmp_len + 1, wrapper); if (check_executable (concat_name)) return concat_name; XFREE (concat_name); return NULL; } char * chase_symlinks (const char *pathspec) { #ifndef S_ISLNK return xstrdup (pathspec); #else char buf[LT_PATHMAX]; struct stat s; char *tmp_pathspec = xstrdup (pathspec); char *p; int has_symlinks = 0; while (strlen (tmp_pathspec) && !has_symlinks) { lt_debugprintf (__FILE__, __LINE__, "checking path component for symlinks: %s\n", tmp_pathspec); if (lstat (tmp_pathspec, &s) == 0) { if (S_ISLNK (s.st_mode) != 0) { has_symlinks = 1; break; } /* search backwards for last DIR_SEPARATOR */ p = tmp_pathspec + strlen (tmp_pathspec) - 1; while ((p > tmp_pathspec) && (!IS_DIR_SEPARATOR (*p))) p--; if ((p == tmp_pathspec) && (!IS_DIR_SEPARATOR (*p))) { /* no more DIR_SEPARATORS left */ break; } *p = '\0'; } else { lt_fatal (__FILE__, __LINE__, "error accessing file \"%s\": %s", tmp_pathspec, nonnull (strerror (errno))); } } XFREE (tmp_pathspec); if (!has_symlinks) { return xstrdup (pathspec); } tmp_pathspec = realpath (pathspec, buf); if (tmp_pathspec == 0) { lt_fatal (__FILE__, __LINE__, "could not follow symlinks for %s", pathspec); } return xstrdup (tmp_pathspec); #endif } char * strendzap (char *str, const char *pat) { size_t len, patlen; assert (str != NULL); assert (pat != NULL); len = strlen (str); patlen = strlen (pat); if (patlen <= len) { str += len - patlen; if (STREQ (str, pat)) *str = '\0'; } return str; } void lt_debugprintf (const char *file, int line, const char *fmt, ...) { va_list args; if (lt_debug) { (void) fprintf (stderr, "%s:%s:%d: ", program_name, file, line); va_start (args, fmt); (void) vfprintf (stderr, fmt, args); va_end (args); } } static void lt_error_core (int exit_status, const char *file, int line, const char *mode, const char *message, va_list ap) { fprintf (stderr, "%s:%s:%d: %s: ", program_name, file, line, mode); vfprintf (stderr, message, ap); fprintf (stderr, ".\n"); if (exit_status >= 0) exit (exit_status); } void lt_fatal (const char *file, int line, const char *message, ...) { va_list ap; va_start (ap, message); lt_error_core (EXIT_FAILURE, file, line, "FATAL", message, ap); va_end (ap); } static const char * nonnull (const char *s) { return s ? s : "(null)"; } static const char * nonempty (const char *s) { return (s && !*s) ? "(empty)" : nonnull (s); } void lt_setenv (const char *name, const char *value) { lt_debugprintf (__FILE__, __LINE__, "(lt_setenv) setting '%s' to '%s'\n", nonnull (name), nonnull (value)); { #ifdef HAVE_SETENV /* always make a copy, for consistency with !HAVE_SETENV */ char *str = xstrdup (value); setenv (name, str, 1); #else size_t len = strlen (name) + 1 + strlen (value) + 1; char *str = XMALLOC (char, len); sprintf (str, "%s=%s", name, value); if (putenv (str) != EXIT_SUCCESS) { XFREE (str); } #endif } } char * lt_extend_str (const char *orig_value, const char *add, int to_end) { char *new_value; if (orig_value && *orig_value) { size_t orig_value_len = strlen (orig_value); size_t add_len = strlen (add); new_value = XMALLOC (char, add_len + orig_value_len + 1); if (to_end) { strcpy (new_value, orig_value); strcpy (new_value + orig_value_len, add); } else { strcpy (new_value, add); strcpy (new_value + add_len, orig_value); } } else { new_value = xstrdup (add); } return new_value; } void lt_update_exe_path (const char *name, const char *value) { lt_debugprintf (__FILE__, __LINE__, "(lt_update_exe_path) modifying '%s' by prepending '%s'\n", nonnull (name), nonnull (value)); if (name && *name && value && *value) { char *new_value = lt_extend_str (getenv (name), value, 0); /* some systems can't cope with a ':'-terminated path #' */ size_t len = strlen (new_value); while ((len > 0) && IS_PATH_SEPARATOR (new_value[len-1])) { new_value[--len] = '\0'; } lt_setenv (name, new_value); XFREE (new_value); } } void lt_update_lib_path (const char *name, const char *value) { lt_debugprintf (__FILE__, __LINE__, "(lt_update_lib_path) modifying '%s' by prepending '%s'\n", nonnull (name), nonnull (value)); if (name && *name && value && *value) { char *new_value = lt_extend_str (getenv (name), value, 0); lt_setenv (name, new_value); XFREE (new_value); } } EOF case $host_os in mingw*) cat <<"EOF" /* Prepares an argument vector before calling spawn(). Note that spawn() does not by itself call the command interpreter (getenv ("COMSPEC") != NULL ? getenv ("COMSPEC") : ({ OSVERSIONINFO v; v.dwOSVersionInfoSize = sizeof(OSVERSIONINFO); GetVersionEx(&v); v.dwPlatformId == VER_PLATFORM_WIN32_NT; }) ? "cmd.exe" : "command.com"). Instead it simply concatenates the arguments, separated by ' ', and calls CreateProcess(). We must quote the arguments since Win32 CreateProcess() interprets characters like ' ', '\t', '\\', '"' (but not '<' and '>') in a special way: - Space and tab are interpreted as delimiters. They are not treated as delimiters if they are surrounded by double quotes: "...". - Unescaped double quotes are removed from the input. Their only effect is that within double quotes, space and tab are treated like normal characters. - Backslashes not followed by double quotes are not special. - But 2*n+1 backslashes followed by a double quote become n backslashes followed by a double quote (n >= 0): \" -> " \\\" -> \" \\\\\" -> \\" */ #define SHELL_SPECIAL_CHARS "\"\\ \001\002\003\004\005\006\007\010\011\012\013\014\015\016\017\020\021\022\023\024\025\026\027\030\031\032\033\034\035\036\037" #define SHELL_SPACE_CHARS " \001\002\003\004\005\006\007\010\011\012\013\014\015\016\017\020\021\022\023\024\025\026\027\030\031\032\033\034\035\036\037" char ** prepare_spawn (char **argv) { size_t argc; char **new_argv; size_t i; /* Count number of arguments. */ for (argc = 0; argv[argc] != NULL; argc++) ; /* Allocate new argument vector. */ new_argv = XMALLOC (char *, argc + 1); /* Put quoted arguments into the new argument vector. */ for (i = 0; i < argc; i++) { const char *string = argv[i]; if (string[0] == '\0') new_argv[i] = xstrdup ("\"\""); else if (strpbrk (string, SHELL_SPECIAL_CHARS) != NULL) { int quote_around = (strpbrk (string, SHELL_SPACE_CHARS) != NULL); size_t length; unsigned int backslashes; const char *s; char *quoted_string; char *p; length = 0; backslashes = 0; if (quote_around) length++; for (s = string; *s != '\0'; s++) { char c = *s; if (c == '"') length += backslashes + 1; length++; if (c == '\\') backslashes++; else backslashes = 0; } if (quote_around) length += backslashes + 1; quoted_string = XMALLOC (char, length + 1); p = quoted_string; backslashes = 0; if (quote_around) *p++ = '"'; for (s = string; *s != '\0'; s++) { char c = *s; if (c == '"') { unsigned int j; for (j = backslashes + 1; j > 0; j--) *p++ = '\\'; } *p++ = c; if (c == '\\') backslashes++; else backslashes = 0; } if (quote_around) { unsigned int j; for (j = backslashes; j > 0; j--) *p++ = '\\'; *p++ = '"'; } *p = '\0'; new_argv[i] = quoted_string; } else new_argv[i] = (char *) string; } new_argv[argc] = NULL; return new_argv; } EOF ;; esac cat <<"EOF" void lt_dump_script (FILE* f) { EOF func_emit_wrapper yes | $SED -n -e ' s/^\(.\{79\}\)\(..*\)/\1\ \2/ h s/\([\\"]\)/\\\1/g s/$/\\n/ s/\([^\n]*\).*/ fputs ("\1", f);/p g D' cat <<"EOF" } EOF } # end: func_emit_cwrapperexe_src # func_win32_import_lib_p ARG # True if ARG is an import lib, as indicated by $file_magic_cmd func_win32_import_lib_p () { $debug_cmd case `eval $file_magic_cmd \"\$1\" 2>/dev/null | $SED -e 10q` in *import*) : ;; *) false ;; esac } # func_suncc_cstd_abi # !!ONLY CALL THIS FOR SUN CC AFTER $compile_command IS FULLY EXPANDED!! # Several compiler flags select an ABI that is incompatible with the # Cstd library. Avoid specifying it if any are in CXXFLAGS. func_suncc_cstd_abi () { $debug_cmd case " $compile_command " in *" -compat=g "*|*\ -std=c++[0-9][0-9]\ *|*" -library=stdcxx4 "*|*" -library=stlport4 "*) suncc_use_cstd_abi=no ;; *) suncc_use_cstd_abi=yes ;; esac } # func_mode_link arg... func_mode_link () { $debug_cmd case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-cegcc*) # It is impossible to link a dll without this setting, and # we shouldn't force the makefile maintainer to figure out # what system we are compiling for in order to pass an extra # flag for every libtool invocation. # allow_undefined=no # FIXME: Unfortunately, there are problems with the above when trying # to make a dll that has undefined symbols, in which case not # even a static library is built. For now, we need to specify # -no-undefined on the libtool link line when we can be certain # that all symbols are satisfied, otherwise we get a static library. allow_undefined=yes ;; *) allow_undefined=yes ;; esac libtool_args=$nonopt base_compile="$nonopt $@" compile_command=$nonopt finalize_command=$nonopt compile_rpath= finalize_rpath= compile_shlibpath= finalize_shlibpath= convenience= old_convenience= deplibs= old_deplibs= compiler_flags= linker_flags= dllsearchpath= lib_search_path=`pwd` inst_prefix_dir= new_inherited_linker_flags= avoid_version=no bindir= dlfiles= dlprefiles= dlself=no export_dynamic=no export_symbols= export_symbols_regex= generated= libobjs= ltlibs= module=no no_install=no objs= os2dllname= non_pic_objects= precious_files_regex= prefer_static_libs=no preload=false prev= prevarg= release= rpath= xrpath= perm_rpath= temp_rpath= thread_safe=no vinfo= vinfo_number=no weak_libs= single_module=$wl-single_module func_infer_tag $base_compile # We need to know -static, to get the right output filenames. for arg do case $arg in -shared) test yes != "$build_libtool_libs" \ && func_fatal_configuration "cannot build a shared library" build_old_libs=no break ;; -all-static | -static | -static-libtool-libs) case $arg in -all-static) if test yes = "$build_libtool_libs" && test -z "$link_static_flag"; then func_warning "complete static linking is impossible in this configuration" fi if test -n "$link_static_flag"; then dlopen_self=$dlopen_self_static fi prefer_static_libs=yes ;; -static) if test -z "$pic_flag" && test -n "$link_static_flag"; then dlopen_self=$dlopen_self_static fi prefer_static_libs=built ;; -static-libtool-libs) if test -z "$pic_flag" && test -n "$link_static_flag"; then dlopen_self=$dlopen_self_static fi prefer_static_libs=yes ;; esac build_libtool_libs=no build_old_libs=yes break ;; esac done # See if our shared archives depend on static archives. test -n "$old_archive_from_new_cmds" && build_old_libs=yes # Go through the arguments, transforming them on the way. while test "$#" -gt 0; do arg=$1 shift func_quote_for_eval "$arg" qarg=$func_quote_for_eval_unquoted_result func_append libtool_args " $func_quote_for_eval_result" # If the previous option needs an argument, assign it. if test -n "$prev"; then case $prev in output) func_append compile_command " @OUTPUT@" func_append finalize_command " @OUTPUT@" ;; esac case $prev in bindir) bindir=$arg prev= continue ;; dlfiles|dlprefiles) $preload || { # Add the symbol object into the linking commands. func_append compile_command " @SYMFILE@" func_append finalize_command " @SYMFILE@" preload=: } case $arg in *.la | *.lo) ;; # We handle these cases below. force) if test no = "$dlself"; then dlself=needless export_dynamic=yes fi prev= continue ;; self) if test dlprefiles = "$prev"; then dlself=yes elif test dlfiles = "$prev" && test yes != "$dlopen_self"; then dlself=yes else dlself=needless export_dynamic=yes fi prev= continue ;; *) if test dlfiles = "$prev"; then func_append dlfiles " $arg" else func_append dlprefiles " $arg" fi prev= continue ;; esac ;; expsyms) export_symbols=$arg test -f "$arg" \ || func_fatal_error "symbol file '$arg' does not exist" prev= continue ;; expsyms_regex) export_symbols_regex=$arg prev= continue ;; framework) case $host in *-*-darwin*) case "$deplibs " in *" $qarg.ltframework "*) ;; *) func_append deplibs " $qarg.ltframework" # this is fixed later ;; esac ;; esac prev= continue ;; inst_prefix) inst_prefix_dir=$arg prev= continue ;; mllvm) # Clang does not use LLVM to link, so we can simply discard any # '-mllvm $arg' options when doing the link step. prev= continue ;; objectlist) if test -f "$arg"; then save_arg=$arg moreargs= for fil in `cat "$save_arg"` do # func_append moreargs " $fil" arg=$fil # A libtool-controlled object. # Check to see that this really is a libtool object. if func_lalib_unsafe_p "$arg"; then pic_object= non_pic_object= # Read the .lo file func_source "$arg" if test -z "$pic_object" || test -z "$non_pic_object" || test none = "$pic_object" && test none = "$non_pic_object"; then func_fatal_error "cannot find name of object for '$arg'" fi # Extract subdirectory from the argument. func_dirname "$arg" "/" "" xdir=$func_dirname_result if test none != "$pic_object"; then # Prepend the subdirectory the object is found in. pic_object=$xdir$pic_object if test dlfiles = "$prev"; then if test yes = "$build_libtool_libs" && test yes = "$dlopen_support"; then func_append dlfiles " $pic_object" prev= continue else # If libtool objects are unsupported, then we need to preload. prev=dlprefiles fi fi # CHECK ME: I think I busted this. -Ossama if test dlprefiles = "$prev"; then # Preload the old-style object. func_append dlprefiles " $pic_object" prev= fi # A PIC object. func_append libobjs " $pic_object" arg=$pic_object fi # Non-PIC object. if test none != "$non_pic_object"; then # Prepend the subdirectory the object is found in. non_pic_object=$xdir$non_pic_object # A standard non-PIC object func_append non_pic_objects " $non_pic_object" if test -z "$pic_object" || test none = "$pic_object"; then arg=$non_pic_object fi else # If the PIC object exists, use it instead. # $xdir was prepended to $pic_object above. non_pic_object=$pic_object func_append non_pic_objects " $non_pic_object" fi else # Only an error if not doing a dry-run. if $opt_dry_run; then # Extract subdirectory from the argument. func_dirname "$arg" "/" "" xdir=$func_dirname_result func_lo2o "$arg" pic_object=$xdir$objdir/$func_lo2o_result non_pic_object=$xdir$func_lo2o_result func_append libobjs " $pic_object" func_append non_pic_objects " $non_pic_object" else func_fatal_error "'$arg' is not a valid libtool object" fi fi done else func_fatal_error "link input file '$arg' does not exist" fi arg=$save_arg prev= continue ;; os2dllname) os2dllname=$arg prev= continue ;; precious_regex) precious_files_regex=$arg prev= continue ;; release) release=-$arg prev= continue ;; rpath | xrpath) # We need an absolute path. case $arg in [\\/]* | [A-Za-z]:[\\/]*) ;; *) func_fatal_error "only absolute run-paths are allowed" ;; esac if test rpath = "$prev"; then case "$rpath " in *" $arg "*) ;; *) func_append rpath " $arg" ;; esac else case "$xrpath " in *" $arg "*) ;; *) func_append xrpath " $arg" ;; esac fi prev= continue ;; shrext) shrext_cmds=$arg prev= continue ;; weak) func_append weak_libs " $arg" prev= continue ;; xcclinker) func_append linker_flags " $qarg" func_append compiler_flags " $qarg" prev= func_append compile_command " $qarg" func_append finalize_command " $qarg" continue ;; xcompiler) func_append compiler_flags " $qarg" prev= func_append compile_command " $qarg" func_append finalize_command " $qarg" continue ;; xlinker) func_append linker_flags " $qarg" func_append compiler_flags " $wl$qarg" prev= func_append compile_command " $wl$qarg" func_append finalize_command " $wl$qarg" continue ;; *) eval "$prev=\"\$arg\"" prev= continue ;; esac fi # test -n "$prev" prevarg=$arg case $arg in -all-static) if test -n "$link_static_flag"; then # See comment for -static flag below, for more details. func_append compile_command " $link_static_flag" func_append finalize_command " $link_static_flag" fi continue ;; -allow-undefined) # FIXME: remove this flag sometime in the future. func_fatal_error "'-allow-undefined' must not be used because it is the default" ;; -avoid-version) avoid_version=yes continue ;; -bindir) prev=bindir continue ;; -dlopen) prev=dlfiles continue ;; -dlpreopen) prev=dlprefiles continue ;; -export-dynamic) export_dynamic=yes continue ;; -export-symbols | -export-symbols-regex) if test -n "$export_symbols" || test -n "$export_symbols_regex"; then func_fatal_error "more than one -exported-symbols argument is not allowed" fi if test X-export-symbols = "X$arg"; then prev=expsyms else prev=expsyms_regex fi continue ;; -framework) prev=framework continue ;; -inst-prefix-dir) prev=inst_prefix continue ;; # The native IRIX linker understands -LANG:*, -LIST:* and -LNO:* # so, if we see these flags be careful not to treat them like -L -L[A-Z][A-Z]*:*) case $with_gcc/$host in no/*-*-irix* | /*-*-irix*) func_append compile_command " $arg" func_append finalize_command " $arg" ;; esac continue ;; -L*) func_stripname "-L" '' "$arg" if test -z "$func_stripname_result"; then if test "$#" -gt 0; then func_fatal_error "require no space between '-L' and '$1'" else func_fatal_error "need path for '-L' option" fi fi func_resolve_sysroot "$func_stripname_result" dir=$func_resolve_sysroot_result # We need an absolute path. case $dir in [\\/]* | [A-Za-z]:[\\/]*) ;; *) absdir=`cd "$dir" && pwd` test -z "$absdir" && \ func_fatal_error "cannot determine absolute directory name of '$dir'" dir=$absdir ;; esac case "$deplibs " in *" -L$dir "* | *" $arg "*) # Will only happen for absolute or sysroot arguments ;; *) # Preserve sysroot, but never include relative directories case $dir in [\\/]* | [A-Za-z]:[\\/]* | =*) func_append deplibs " $arg" ;; *) func_append deplibs " -L$dir" ;; esac func_append lib_search_path " $dir" ;; esac case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-cegcc*) testbindir=`$ECHO "$dir" | $SED 's*/lib$*/bin*'` case :$dllsearchpath: in *":$dir:"*) ;; ::) dllsearchpath=$dir;; *) func_append dllsearchpath ":$dir";; esac case :$dllsearchpath: in *":$testbindir:"*) ;; ::) dllsearchpath=$testbindir;; *) func_append dllsearchpath ":$testbindir";; esac ;; esac continue ;; -l*) if test X-lc = "X$arg" || test X-lm = "X$arg"; then case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-beos* | *-cegcc* | *-*-haiku*) # These systems don't actually have a C or math library (as such) continue ;; *-*-os2*) # These systems don't actually have a C library (as such) test X-lc = "X$arg" && continue ;; *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-bitrig*) # Do not include libc due to us having libc/libc_r. test X-lc = "X$arg" && continue ;; *-*-rhapsody* | *-*-darwin1.[012]) # Rhapsody C and math libraries are in the System framework func_append deplibs " System.ltframework" continue ;; *-*-sco3.2v5* | *-*-sco5v6*) # Causes problems with __ctype test X-lc = "X$arg" && continue ;; *-*-sysv4.2uw2* | *-*-sysv5* | *-*-unixware* | *-*-OpenUNIX*) # Compiler inserts libc in the correct place for threads to work test X-lc = "X$arg" && continue ;; esac elif test X-lc_r = "X$arg"; then case $host in *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-bitrig*) # Do not include libc_r directly, use -pthread flag. continue ;; esac fi func_append deplibs " $arg" continue ;; -mllvm) prev=mllvm continue ;; -module) module=yes continue ;; # Tru64 UNIX uses -model [arg] to determine the layout of C++ # classes, name mangling, and exception handling. # Darwin uses the -arch flag to determine output architecture. -model|-arch|-isysroot|--sysroot) func_append compiler_flags " $arg" func_append compile_command " $arg" func_append finalize_command " $arg" prev=xcompiler continue ;; -mt|-mthreads|-kthread|-Kthread|-pthread|-pthreads|--thread-safe \ |-threads|-fopenmp|-openmp|-mp|-xopenmp|-omp|-qsmp=*) func_append compiler_flags " $arg" func_append compile_command " $arg" func_append finalize_command " $arg" case "$new_inherited_linker_flags " in *" $arg "*) ;; * ) func_append new_inherited_linker_flags " $arg" ;; esac continue ;; -multi_module) single_module=$wl-multi_module continue ;; -no-fast-install) fast_install=no continue ;; -no-install) case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-*-darwin* | *-cegcc*) # The PATH hackery in wrapper scripts is required on Windows # and Darwin in order for the loader to find any dlls it needs. func_warning "'-no-install' is ignored for $host" func_warning "assuming '-no-fast-install' instead" fast_install=no ;; *) no_install=yes ;; esac continue ;; -no-undefined) allow_undefined=no continue ;; -objectlist) prev=objectlist continue ;; -os2dllname) prev=os2dllname continue ;; -o) prev=output ;; -precious-files-regex) prev=precious_regex continue ;; -release) prev=release continue ;; -rpath) prev=rpath continue ;; -R) prev=xrpath continue ;; -R*) func_stripname '-R' '' "$arg" dir=$func_stripname_result # We need an absolute path. case $dir in [\\/]* | [A-Za-z]:[\\/]*) ;; =*) func_stripname '=' '' "$dir" dir=$lt_sysroot$func_stripname_result ;; *) func_fatal_error "only absolute run-paths are allowed" ;; esac case "$xrpath " in *" $dir "*) ;; *) func_append xrpath " $dir" ;; esac continue ;; -shared) # The effects of -shared are defined in a previous loop. continue ;; -shrext) prev=shrext continue ;; -static | -static-libtool-libs) # The effects of -static are defined in a previous loop. # We used to do the same as -all-static on platforms that # didn't have a PIC flag, but the assumption that the effects # would be equivalent was wrong. It would break on at least # Digital Unix and AIX. continue ;; -thread-safe) thread_safe=yes continue ;; -version-info) prev=vinfo continue ;; -version-number) prev=vinfo vinfo_number=yes continue ;; -weak) prev=weak continue ;; -Wc,*) func_stripname '-Wc,' '' "$arg" args=$func_stripname_result arg= save_ifs=$IFS; IFS=, for flag in $args; do IFS=$save_ifs func_quote_for_eval "$flag" func_append arg " $func_quote_for_eval_result" func_append compiler_flags " $func_quote_for_eval_result" done IFS=$save_ifs func_stripname ' ' '' "$arg" arg=$func_stripname_result ;; -Wl,*) func_stripname '-Wl,' '' "$arg" args=$func_stripname_result arg= save_ifs=$IFS; IFS=, for flag in $args; do IFS=$save_ifs func_quote_for_eval "$flag" func_append arg " $wl$func_quote_for_eval_result" func_append compiler_flags " $wl$func_quote_for_eval_result" func_append linker_flags " $func_quote_for_eval_result" done IFS=$save_ifs func_stripname ' ' '' "$arg" arg=$func_stripname_result ;; -Xcompiler) prev=xcompiler continue ;; -Xlinker) prev=xlinker continue ;; -XCClinker) prev=xcclinker continue ;; # -msg_* for osf cc -msg_*) func_quote_for_eval "$arg" arg=$func_quote_for_eval_result ;; # Flags to be passed through unchanged, with rationale: # -64, -mips[0-9] enable 64-bit mode for the SGI compiler # -r[0-9][0-9]* specify processor for the SGI compiler # -xarch=*, -xtarget=* enable 64-bit mode for the Sun compiler # +DA*, +DD* enable 64-bit mode for the HP compiler # -q* compiler args for the IBM compiler # -m*, -t[45]*, -txscale* architecture-specific flags for GCC # -F/path path to uninstalled frameworks, gcc on darwin # -p, -pg, --coverage, -fprofile-* profiling flags for GCC # -fstack-protector* stack protector flags for GCC # @file GCC response files # -tp=* Portland pgcc target processor selection # --sysroot=* for sysroot support # -O*, -g*, -flto*, -fwhopr*, -fuse-linker-plugin GCC link-time optimization # -specs=* GCC specs files # -stdlib=* select c++ std lib with clang # -fsanitize=* Clang/GCC memory and address sanitizer -64|-mips[0-9]|-r[0-9][0-9]*|-xarch=*|-xtarget=*|+DA*|+DD*|-q*|-m*| \ -t[45]*|-txscale*|-p|-pg|--coverage|-fprofile-*|-F*|@*|-tp=*|--sysroot=*| \ -O*|-g*|-flto*|-fwhopr*|-fuse-linker-plugin|-fstack-protector*|-stdlib=*| \ -specs=*|-fsanitize=*) func_quote_for_eval "$arg" arg=$func_quote_for_eval_result func_append compile_command " $arg" func_append finalize_command " $arg" func_append compiler_flags " $arg" continue ;; -Z*) if test os2 = "`expr $host : '.*\(os2\)'`"; then # OS/2 uses -Zxxx to specify OS/2-specific options compiler_flags="$compiler_flags $arg" func_append compile_command " $arg" func_append finalize_command " $arg" case $arg in -Zlinker | -Zstack) prev=xcompiler ;; esac continue else # Otherwise treat like 'Some other compiler flag' below func_quote_for_eval "$arg" arg=$func_quote_for_eval_result fi ;; # Some other compiler flag. -* | +*) func_quote_for_eval "$arg" arg=$func_quote_for_eval_result ;; *.$objext) # A standard object. func_append objs " $arg" ;; *.lo) # A libtool-controlled object. # Check to see that this really is a libtool object. if func_lalib_unsafe_p "$arg"; then pic_object= non_pic_object= # Read the .lo file func_source "$arg" if test -z "$pic_object" || test -z "$non_pic_object" || test none = "$pic_object" && test none = "$non_pic_object"; then func_fatal_error "cannot find name of object for '$arg'" fi # Extract subdirectory from the argument. func_dirname "$arg" "/" "" xdir=$func_dirname_result test none = "$pic_object" || { # Prepend the subdirectory the object is found in. pic_object=$xdir$pic_object if test dlfiles = "$prev"; then if test yes = "$build_libtool_libs" && test yes = "$dlopen_support"; then func_append dlfiles " $pic_object" prev= continue else # If libtool objects are unsupported, then we need to preload. prev=dlprefiles fi fi # CHECK ME: I think I busted this. -Ossama if test dlprefiles = "$prev"; then # Preload the old-style object. func_append dlprefiles " $pic_object" prev= fi # A PIC object. func_append libobjs " $pic_object" arg=$pic_object } # Non-PIC object. if test none != "$non_pic_object"; then # Prepend the subdirectory the object is found in. non_pic_object=$xdir$non_pic_object # A standard non-PIC object func_append non_pic_objects " $non_pic_object" if test -z "$pic_object" || test none = "$pic_object"; then arg=$non_pic_object fi else # If the PIC object exists, use it instead. # $xdir was prepended to $pic_object above. non_pic_object=$pic_object func_append non_pic_objects " $non_pic_object" fi else # Only an error if not doing a dry-run. if $opt_dry_run; then # Extract subdirectory from the argument. func_dirname "$arg" "/" "" xdir=$func_dirname_result func_lo2o "$arg" pic_object=$xdir$objdir/$func_lo2o_result non_pic_object=$xdir$func_lo2o_result func_append libobjs " $pic_object" func_append non_pic_objects " $non_pic_object" else func_fatal_error "'$arg' is not a valid libtool object" fi fi ;; *.$libext) # An archive. func_append deplibs " $arg" func_append old_deplibs " $arg" continue ;; *.la) # A libtool-controlled library. func_resolve_sysroot "$arg" if test dlfiles = "$prev"; then # This library was specified with -dlopen. func_append dlfiles " $func_resolve_sysroot_result" prev= elif test dlprefiles = "$prev"; then # The library was specified with -dlpreopen. func_append dlprefiles " $func_resolve_sysroot_result" prev= else func_append deplibs " $func_resolve_sysroot_result" fi continue ;; # Some other compiler argument. *) # Unknown arguments in both finalize_command and compile_command need # to be aesthetically quoted because they are evaled later. func_quote_for_eval "$arg" arg=$func_quote_for_eval_result ;; esac # arg # Now actually substitute the argument into the commands. if test -n "$arg"; then func_append compile_command " $arg" func_append finalize_command " $arg" fi done # argument parsing loop test -n "$prev" && \ func_fatal_help "the '$prevarg' option requires an argument" if test yes = "$export_dynamic" && test -n "$export_dynamic_flag_spec"; then eval arg=\"$export_dynamic_flag_spec\" func_append compile_command " $arg" func_append finalize_command " $arg" fi oldlibs= # calculate the name of the file, without its directory func_basename "$output" outputname=$func_basename_result libobjs_save=$libobjs if test -n "$shlibpath_var"; then # get the directories listed in $shlibpath_var eval shlib_search_path=\`\$ECHO \"\$$shlibpath_var\" \| \$SED \'s/:/ /g\'\` else shlib_search_path= fi eval sys_lib_search_path=\"$sys_lib_search_path_spec\" eval sys_lib_dlsearch_path=\"$sys_lib_dlsearch_path_spec\" # Definition is injected by LT_CONFIG during libtool generation. func_munge_path_list sys_lib_dlsearch_path "$LT_SYS_LIBRARY_PATH" func_dirname "$output" "/" "" output_objdir=$func_dirname_result$objdir func_to_tool_file "$output_objdir/" tool_output_objdir=$func_to_tool_file_result # Create the object directory. func_mkdir_p "$output_objdir" # Determine the type of output case $output in "") func_fatal_help "you must specify an output file" ;; *.$libext) linkmode=oldlib ;; *.lo | *.$objext) linkmode=obj ;; *.la) linkmode=lib ;; *) linkmode=prog ;; # Anything else should be a program. esac specialdeplibs= libs= # Find all interdependent deplibs by searching for libraries # that are linked more than once (e.g. -la -lb -la) for deplib in $deplibs; do if $opt_preserve_dup_deps; then case "$libs " in *" $deplib "*) func_append specialdeplibs " $deplib" ;; esac fi func_append libs " $deplib" done if test lib = "$linkmode"; then libs="$predeps $libs $compiler_lib_search_path $postdeps" # Compute libraries that are listed more than once in $predeps # $postdeps and mark them as special (i.e., whose duplicates are # not to be eliminated). pre_post_deps= if $opt_duplicate_compiler_generated_deps; then for pre_post_dep in $predeps $postdeps; do case "$pre_post_deps " in *" $pre_post_dep "*) func_append specialdeplibs " $pre_post_deps" ;; esac func_append pre_post_deps " $pre_post_dep" done fi pre_post_deps= fi deplibs= newdependency_libs= newlib_search_path= need_relink=no # whether we're linking any uninstalled libtool libraries notinst_deplibs= # not-installed libtool libraries notinst_path= # paths that contain not-installed libtool libraries case $linkmode in lib) passes="conv dlpreopen link" for file in $dlfiles $dlprefiles; do case $file in *.la) ;; *) func_fatal_help "libraries can '-dlopen' only libtool libraries: $file" ;; esac done ;; prog) compile_deplibs= finalize_deplibs= alldeplibs=false newdlfiles= newdlprefiles= passes="conv scan dlopen dlpreopen link" ;; *) passes="conv" ;; esac for pass in $passes; do # The preopen pass in lib mode reverses $deplibs; put it back here # so that -L comes before libs that need it for instance... if test lib,link = "$linkmode,$pass"; then ## FIXME: Find the place where the list is rebuilt in the wrong ## order, and fix it there properly tmp_deplibs= for deplib in $deplibs; do tmp_deplibs="$deplib $tmp_deplibs" done deplibs=$tmp_deplibs fi if test lib,link = "$linkmode,$pass" || test prog,scan = "$linkmode,$pass"; then libs=$deplibs deplibs= fi if test prog = "$linkmode"; then case $pass in dlopen) libs=$dlfiles ;; dlpreopen) libs=$dlprefiles ;; link) libs="$deplibs %DEPLIBS%" test "X$link_all_deplibs" != Xno && libs="$libs $dependency_libs" ;; esac fi if test lib,dlpreopen = "$linkmode,$pass"; then # Collect and forward deplibs of preopened libtool libs for lib in $dlprefiles; do # Ignore non-libtool-libs dependency_libs= func_resolve_sysroot "$lib" case $lib in *.la) func_source "$func_resolve_sysroot_result" ;; esac # Collect preopened libtool deplibs, except any this library # has declared as weak libs for deplib in $dependency_libs; do func_basename "$deplib" deplib_base=$func_basename_result case " $weak_libs " in *" $deplib_base "*) ;; *) func_append deplibs " $deplib" ;; esac done done libs=$dlprefiles fi if test dlopen = "$pass"; then # Collect dlpreopened libraries save_deplibs=$deplibs deplibs= fi for deplib in $libs; do lib= found=false case $deplib in -mt|-mthreads|-kthread|-Kthread|-pthread|-pthreads|--thread-safe \ |-threads|-fopenmp|-openmp|-mp|-xopenmp|-omp|-qsmp=*) if test prog,link = "$linkmode,$pass"; then compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else func_append compiler_flags " $deplib" if test lib = "$linkmode"; then case "$new_inherited_linker_flags " in *" $deplib "*) ;; * ) func_append new_inherited_linker_flags " $deplib" ;; esac fi fi continue ;; -l*) if test lib != "$linkmode" && test prog != "$linkmode"; then func_warning "'-l' is ignored for archives/objects" continue fi func_stripname '-l' '' "$deplib" name=$func_stripname_result if test lib = "$linkmode"; then searchdirs="$newlib_search_path $lib_search_path $compiler_lib_search_dirs $sys_lib_search_path $shlib_search_path" else searchdirs="$newlib_search_path $lib_search_path $sys_lib_search_path $shlib_search_path" fi for searchdir in $searchdirs; do for search_ext in .la $std_shrext .so .a; do # Search the libtool library lib=$searchdir/lib$name$search_ext if test -f "$lib"; then if test .la = "$search_ext"; then found=: else found=false fi break 2 fi done done if $found; then # deplib is a libtool library # If $allow_libtool_libs_with_static_runtimes && $deplib is a stdlib, # We need to do some special things here, and not later. if test yes = "$allow_libtool_libs_with_static_runtimes"; then case " $predeps $postdeps " in *" $deplib "*) if func_lalib_p "$lib"; then library_names= old_library= func_source "$lib" for l in $old_library $library_names; do ll=$l done if test "X$ll" = "X$old_library"; then # only static version available found=false func_dirname "$lib" "" "." ladir=$func_dirname_result lib=$ladir/$old_library if test prog,link = "$linkmode,$pass"; then compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else deplibs="$deplib $deplibs" test lib = "$linkmode" && newdependency_libs="$deplib $newdependency_libs" fi continue fi fi ;; *) ;; esac fi else # deplib doesn't seem to be a libtool library if test prog,link = "$linkmode,$pass"; then compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else deplibs="$deplib $deplibs" test lib = "$linkmode" && newdependency_libs="$deplib $newdependency_libs" fi continue fi ;; # -l *.ltframework) if test prog,link = "$linkmode,$pass"; then compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else deplibs="$deplib $deplibs" if test lib = "$linkmode"; then case "$new_inherited_linker_flags " in *" $deplib "*) ;; * ) func_append new_inherited_linker_flags " $deplib" ;; esac fi fi continue ;; -L*) case $linkmode in lib) deplibs="$deplib $deplibs" test conv = "$pass" && continue newdependency_libs="$deplib $newdependency_libs" func_stripname '-L' '' "$deplib" func_resolve_sysroot "$func_stripname_result" func_append newlib_search_path " $func_resolve_sysroot_result" ;; prog) if test conv = "$pass"; then deplibs="$deplib $deplibs" continue fi if test scan = "$pass"; then deplibs="$deplib $deplibs" else compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" fi func_stripname '-L' '' "$deplib" func_resolve_sysroot "$func_stripname_result" func_append newlib_search_path " $func_resolve_sysroot_result" ;; *) func_warning "'-L' is ignored for archives/objects" ;; esac # linkmode continue ;; # -L -R*) if test link = "$pass"; then func_stripname '-R' '' "$deplib" func_resolve_sysroot "$func_stripname_result" dir=$func_resolve_sysroot_result # Make sure the xrpath contains only unique directories. case "$xrpath " in *" $dir "*) ;; *) func_append xrpath " $dir" ;; esac fi deplibs="$deplib $deplibs" continue ;; *.la) func_resolve_sysroot "$deplib" lib=$func_resolve_sysroot_result ;; *.$libext) if test conv = "$pass"; then deplibs="$deplib $deplibs" continue fi case $linkmode in lib) # Linking convenience modules into shared libraries is allowed, # but linking other static libraries is non-portable. case " $dlpreconveniencelibs " in *" $deplib "*) ;; *) valid_a_lib=false case $deplibs_check_method in match_pattern*) set dummy $deplibs_check_method; shift match_pattern_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"` if eval "\$ECHO \"$deplib\"" 2>/dev/null | $SED 10q \ | $EGREP "$match_pattern_regex" > /dev/null; then valid_a_lib=: fi ;; pass_all) valid_a_lib=: ;; esac if $valid_a_lib; then echo $ECHO "*** Warning: Linking the shared library $output against the" $ECHO "*** static library $deplib is not portable!" deplibs="$deplib $deplibs" else echo $ECHO "*** Warning: Trying to link with static lib archive $deplib." echo "*** I have the capability to make that library automatically link in when" echo "*** you link to this library. But I can only do this if you have a" echo "*** shared version of the library, which you do not appear to have" echo "*** because the file extensions .$libext of this argument makes me believe" echo "*** that it is just a static archive that I should not use here." fi ;; esac continue ;; prog) if test link != "$pass"; then deplibs="$deplib $deplibs" else compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" fi continue ;; esac # linkmode ;; # *.$libext *.lo | *.$objext) if test conv = "$pass"; then deplibs="$deplib $deplibs" elif test prog = "$linkmode"; then if test dlpreopen = "$pass" || test yes != "$dlopen_support" || test no = "$build_libtool_libs"; then # If there is no dlopen support or we're linking statically, # we need to preload. func_append newdlprefiles " $deplib" compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else func_append newdlfiles " $deplib" fi fi continue ;; %DEPLIBS%) alldeplibs=: continue ;; esac # case $deplib $found || test -f "$lib" \ || func_fatal_error "cannot find the library '$lib' or unhandled argument '$deplib'" # Check to see that this really is a libtool archive. func_lalib_unsafe_p "$lib" \ || func_fatal_error "'$lib' is not a valid libtool archive" func_dirname "$lib" "" "." ladir=$func_dirname_result dlname= dlopen= dlpreopen= libdir= library_names= old_library= inherited_linker_flags= # If the library was installed with an old release of libtool, # it will not redefine variables installed, or shouldnotlink installed=yes shouldnotlink=no avoidtemprpath= # Read the .la file func_source "$lib" # Convert "-framework foo" to "foo.ltframework" if test -n "$inherited_linker_flags"; then tmp_inherited_linker_flags=`$ECHO "$inherited_linker_flags" | $SED 's/-framework \([^ $]*\)/\1.ltframework/g'` for tmp_inherited_linker_flag in $tmp_inherited_linker_flags; do case " $new_inherited_linker_flags " in *" $tmp_inherited_linker_flag "*) ;; *) func_append new_inherited_linker_flags " $tmp_inherited_linker_flag";; esac done fi dependency_libs=`$ECHO " $dependency_libs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` if test lib,link = "$linkmode,$pass" || test prog,scan = "$linkmode,$pass" || { test prog != "$linkmode" && test lib != "$linkmode"; }; then test -n "$dlopen" && func_append dlfiles " $dlopen" test -n "$dlpreopen" && func_append dlprefiles " $dlpreopen" fi if test conv = "$pass"; then # Only check for convenience libraries deplibs="$lib $deplibs" if test -z "$libdir"; then if test -z "$old_library"; then func_fatal_error "cannot find name of link library for '$lib'" fi # It is a libtool convenience library, so add in its objects. func_append convenience " $ladir/$objdir/$old_library" func_append old_convenience " $ladir/$objdir/$old_library" tmp_libs= for deplib in $dependency_libs; do deplibs="$deplib $deplibs" if $opt_preserve_dup_deps; then case "$tmp_libs " in *" $deplib "*) func_append specialdeplibs " $deplib" ;; esac fi func_append tmp_libs " $deplib" done elif test prog != "$linkmode" && test lib != "$linkmode"; then func_fatal_error "'$lib' is not a convenience library" fi continue fi # $pass = conv # Get the name of the library we link against. linklib= if test -n "$old_library" && { test yes = "$prefer_static_libs" || test built,no = "$prefer_static_libs,$installed"; }; then linklib=$old_library else for l in $old_library $library_names; do linklib=$l done fi if test -z "$linklib"; then func_fatal_error "cannot find name of link library for '$lib'" fi # This library was specified with -dlopen. if test dlopen = "$pass"; then test -z "$libdir" \ && func_fatal_error "cannot -dlopen a convenience library: '$lib'" if test -z "$dlname" || test yes != "$dlopen_support" || test no = "$build_libtool_libs" then # If there is no dlname, no dlopen support or we're linking # statically, we need to preload. We also need to preload any # dependent libraries so libltdl's deplib preloader doesn't # bomb out in the load deplibs phase. func_append dlprefiles " $lib $dependency_libs" else func_append newdlfiles " $lib" fi continue fi # $pass = dlopen # We need an absolute path. case $ladir in [\\/]* | [A-Za-z]:[\\/]*) abs_ladir=$ladir ;; *) abs_ladir=`cd "$ladir" && pwd` if test -z "$abs_ladir"; then func_warning "cannot determine absolute directory name of '$ladir'" func_warning "passing it literally to the linker, although it might fail" abs_ladir=$ladir fi ;; esac func_basename "$lib" laname=$func_basename_result # Find the relevant object directory and library name. if test yes = "$installed"; then if test ! -f "$lt_sysroot$libdir/$linklib" && test -f "$abs_ladir/$linklib"; then func_warning "library '$lib' was moved." dir=$ladir absdir=$abs_ladir libdir=$abs_ladir else dir=$lt_sysroot$libdir absdir=$lt_sysroot$libdir fi test yes = "$hardcode_automatic" && avoidtemprpath=yes else if test ! -f "$ladir/$objdir/$linklib" && test -f "$abs_ladir/$linklib"; then dir=$ladir absdir=$abs_ladir # Remove this search path later func_append notinst_path " $abs_ladir" else dir=$ladir/$objdir absdir=$abs_ladir/$objdir # Remove this search path later func_append notinst_path " $abs_ladir" fi fi # $installed = yes func_stripname 'lib' '.la' "$laname" name=$func_stripname_result # This library was specified with -dlpreopen. if test dlpreopen = "$pass"; then if test -z "$libdir" && test prog = "$linkmode"; then func_fatal_error "only libraries may -dlpreopen a convenience library: '$lib'" fi case $host in # special handling for platforms with PE-DLLs. *cygwin* | *mingw* | *cegcc* ) # Linker will automatically link against shared library if both # static and shared are present. Therefore, ensure we extract # symbols from the import library if a shared library is present # (otherwise, the dlopen module name will be incorrect). We do # this by putting the import library name into $newdlprefiles. # We recover the dlopen module name by 'saving' the la file # name in a special purpose variable, and (later) extracting the # dlname from the la file. if test -n "$dlname"; then func_tr_sh "$dir/$linklib" eval "libfile_$func_tr_sh_result=\$abs_ladir/\$laname" func_append newdlprefiles " $dir/$linklib" else func_append newdlprefiles " $dir/$old_library" # Keep a list of preopened convenience libraries to check # that they are being used correctly in the link pass. test -z "$libdir" && \ func_append dlpreconveniencelibs " $dir/$old_library" fi ;; * ) # Prefer using a static library (so that no silly _DYNAMIC symbols # are required to link). if test -n "$old_library"; then func_append newdlprefiles " $dir/$old_library" # Keep a list of preopened convenience libraries to check # that they are being used correctly in the link pass. test -z "$libdir" && \ func_append dlpreconveniencelibs " $dir/$old_library" # Otherwise, use the dlname, so that lt_dlopen finds it. elif test -n "$dlname"; then func_append newdlprefiles " $dir/$dlname" else func_append newdlprefiles " $dir/$linklib" fi ;; esac fi # $pass = dlpreopen if test -z "$libdir"; then # Link the convenience library if test lib = "$linkmode"; then deplibs="$dir/$old_library $deplibs" elif test prog,link = "$linkmode,$pass"; then compile_deplibs="$dir/$old_library $compile_deplibs" finalize_deplibs="$dir/$old_library $finalize_deplibs" else deplibs="$lib $deplibs" # used for prog,scan pass fi continue fi if test prog = "$linkmode" && test link != "$pass"; then func_append newlib_search_path " $ladir" deplibs="$lib $deplibs" linkalldeplibs=false if test no != "$link_all_deplibs" || test -z "$library_names" || test no = "$build_libtool_libs"; then linkalldeplibs=: fi tmp_libs= for deplib in $dependency_libs; do case $deplib in -L*) func_stripname '-L' '' "$deplib" func_resolve_sysroot "$func_stripname_result" func_append newlib_search_path " $func_resolve_sysroot_result" ;; esac # Need to link against all dependency_libs? if $linkalldeplibs; then deplibs="$deplib $deplibs" else # Need to hardcode shared library paths # or/and link against static libraries newdependency_libs="$deplib $newdependency_libs" fi if $opt_preserve_dup_deps; then case "$tmp_libs " in *" $deplib "*) func_append specialdeplibs " $deplib" ;; esac fi func_append tmp_libs " $deplib" done # for deplib continue fi # $linkmode = prog... if test prog,link = "$linkmode,$pass"; then if test -n "$library_names" && { { test no = "$prefer_static_libs" || test built,yes = "$prefer_static_libs,$installed"; } || test -z "$old_library"; }; then # We need to hardcode the library path if test -n "$shlibpath_var" && test -z "$avoidtemprpath"; then # Make sure the rpath contains only unique directories. case $temp_rpath: in *"$absdir:"*) ;; *) func_append temp_rpath "$absdir:" ;; esac fi # Hardcode the library path. # Skip directories that are in the system default run-time # search path. case " $sys_lib_dlsearch_path " in *" $absdir "*) ;; *) case "$compile_rpath " in *" $absdir "*) ;; *) func_append compile_rpath " $absdir" ;; esac ;; esac case " $sys_lib_dlsearch_path " in *" $libdir "*) ;; *) case "$finalize_rpath " in *" $libdir "*) ;; *) func_append finalize_rpath " $libdir" ;; esac ;; esac fi # $linkmode,$pass = prog,link... if $alldeplibs && { test pass_all = "$deplibs_check_method" || { test yes = "$build_libtool_libs" && test -n "$library_names"; }; }; then # We only need to search for static libraries continue fi fi link_static=no # Whether the deplib will be linked statically use_static_libs=$prefer_static_libs if test built = "$use_static_libs" && test yes = "$installed"; then use_static_libs=no fi if test -n "$library_names" && { test no = "$use_static_libs" || test -z "$old_library"; }; then case $host in *cygwin* | *mingw* | *cegcc* | *os2*) # No point in relinking DLLs because paths are not encoded func_append notinst_deplibs " $lib" need_relink=no ;; *) if test no = "$installed"; then func_append notinst_deplibs " $lib" need_relink=yes fi ;; esac # This is a shared library # Warn about portability, can't link against -module's on some # systems (darwin). Don't bleat about dlopened modules though! dlopenmodule= for dlpremoduletest in $dlprefiles; do if test "X$dlpremoduletest" = "X$lib"; then dlopenmodule=$dlpremoduletest break fi done if test -z "$dlopenmodule" && test yes = "$shouldnotlink" && test link = "$pass"; then echo if test prog = "$linkmode"; then $ECHO "*** Warning: Linking the executable $output against the loadable module" else $ECHO "*** Warning: Linking the shared library $output against the loadable module" fi $ECHO "*** $linklib is not portable!" fi if test lib = "$linkmode" && test yes = "$hardcode_into_libs"; then # Hardcode the library path. # Skip directories that are in the system default run-time # search path. case " $sys_lib_dlsearch_path " in *" $absdir "*) ;; *) case "$compile_rpath " in *" $absdir "*) ;; *) func_append compile_rpath " $absdir" ;; esac ;; esac case " $sys_lib_dlsearch_path " in *" $libdir "*) ;; *) case "$finalize_rpath " in *" $libdir "*) ;; *) func_append finalize_rpath " $libdir" ;; esac ;; esac fi if test -n "$old_archive_from_expsyms_cmds"; then # figure out the soname set dummy $library_names shift realname=$1 shift libname=`eval "\\$ECHO \"$libname_spec\""` # use dlname if we got it. it's perfectly good, no? if test -n "$dlname"; then soname=$dlname elif test -n "$soname_spec"; then # bleh windows case $host in *cygwin* | mingw* | *cegcc* | *os2*) func_arith $current - $age major=$func_arith_result versuffix=-$major ;; esac eval soname=\"$soname_spec\" else soname=$realname fi # Make a new name for the extract_expsyms_cmds to use soroot=$soname func_basename "$soroot" soname=$func_basename_result func_stripname 'lib' '.dll' "$soname" newlib=libimp-$func_stripname_result.a # If the library has no export list, then create one now if test -f "$output_objdir/$soname-def"; then : else func_verbose "extracting exported symbol list from '$soname'" func_execute_cmds "$extract_expsyms_cmds" 'exit $?' fi # Create $newlib if test -f "$output_objdir/$newlib"; then :; else func_verbose "generating import library for '$soname'" func_execute_cmds "$old_archive_from_expsyms_cmds" 'exit $?' fi # make sure the library variables are pointing to the new library dir=$output_objdir linklib=$newlib fi # test -n "$old_archive_from_expsyms_cmds" if test prog = "$linkmode" || test relink != "$opt_mode"; then add_shlibpath= add_dir= add= lib_linked=yes case $hardcode_action in immediate | unsupported) if test no = "$hardcode_direct"; then add=$dir/$linklib case $host in *-*-sco3.2v5.0.[024]*) add_dir=-L$dir ;; *-*-sysv4*uw2*) add_dir=-L$dir ;; *-*-sysv5OpenUNIX* | *-*-sysv5UnixWare7.[01].[10]* | \ *-*-unixware7*) add_dir=-L$dir ;; *-*-darwin* ) # if the lib is a (non-dlopened) module then we cannot # link against it, someone is ignoring the earlier warnings if /usr/bin/file -L $add 2> /dev/null | $GREP ": [^:]* bundle" >/dev/null; then if test "X$dlopenmodule" != "X$lib"; then $ECHO "*** Warning: lib $linklib is a module, not a shared library" if test -z "$old_library"; then echo echo "*** And there doesn't seem to be a static archive available" echo "*** The link will probably fail, sorry" else add=$dir/$old_library fi elif test -n "$old_library"; then add=$dir/$old_library fi fi esac elif test no = "$hardcode_minus_L"; then case $host in *-*-sunos*) add_shlibpath=$dir ;; esac add_dir=-L$dir add=-l$name elif test no = "$hardcode_shlibpath_var"; then add_shlibpath=$dir add=-l$name else lib_linked=no fi ;; relink) if test yes = "$hardcode_direct" && test no = "$hardcode_direct_absolute"; then add=$dir/$linklib elif test yes = "$hardcode_minus_L"; then add_dir=-L$absdir # Try looking first in the location we're being installed to. if test -n "$inst_prefix_dir"; then case $libdir in [\\/]*) func_append add_dir " -L$inst_prefix_dir$libdir" ;; esac fi add=-l$name elif test yes = "$hardcode_shlibpath_var"; then add_shlibpath=$dir add=-l$name else lib_linked=no fi ;; *) lib_linked=no ;; esac if test yes != "$lib_linked"; then func_fatal_configuration "unsupported hardcode properties" fi if test -n "$add_shlibpath"; then case :$compile_shlibpath: in *":$add_shlibpath:"*) ;; *) func_append compile_shlibpath "$add_shlibpath:" ;; esac fi if test prog = "$linkmode"; then test -n "$add_dir" && compile_deplibs="$add_dir $compile_deplibs" test -n "$add" && compile_deplibs="$add $compile_deplibs" else test -n "$add_dir" && deplibs="$add_dir $deplibs" test -n "$add" && deplibs="$add $deplibs" if test yes != "$hardcode_direct" && test yes != "$hardcode_minus_L" && test yes = "$hardcode_shlibpath_var"; then case :$finalize_shlibpath: in *":$libdir:"*) ;; *) func_append finalize_shlibpath "$libdir:" ;; esac fi fi fi if test prog = "$linkmode" || test relink = "$opt_mode"; then add_shlibpath= add_dir= add= # Finalize command for both is simple: just hardcode it. if test yes = "$hardcode_direct" && test no = "$hardcode_direct_absolute"; then add=$libdir/$linklib elif test yes = "$hardcode_minus_L"; then add_dir=-L$libdir add=-l$name elif test yes = "$hardcode_shlibpath_var"; then case :$finalize_shlibpath: in *":$libdir:"*) ;; *) func_append finalize_shlibpath "$libdir:" ;; esac add=-l$name elif test yes = "$hardcode_automatic"; then if test -n "$inst_prefix_dir" && test -f "$inst_prefix_dir$libdir/$linklib"; then add=$inst_prefix_dir$libdir/$linklib else add=$libdir/$linklib fi else # We cannot seem to hardcode it, guess we'll fake it. add_dir=-L$libdir # Try looking first in the location we're being installed to. if test -n "$inst_prefix_dir"; then case $libdir in [\\/]*) func_append add_dir " -L$inst_prefix_dir$libdir" ;; esac fi add=-l$name fi if test prog = "$linkmode"; then test -n "$add_dir" && finalize_deplibs="$add_dir $finalize_deplibs" test -n "$add" && finalize_deplibs="$add $finalize_deplibs" else test -n "$add_dir" && deplibs="$add_dir $deplibs" test -n "$add" && deplibs="$add $deplibs" fi fi elif test prog = "$linkmode"; then # Here we assume that one of hardcode_direct or hardcode_minus_L # is not unsupported. This is valid on all known static and # shared platforms. if test unsupported != "$hardcode_direct"; then test -n "$old_library" && linklib=$old_library compile_deplibs="$dir/$linklib $compile_deplibs" finalize_deplibs="$dir/$linklib $finalize_deplibs" else compile_deplibs="-l$name -L$dir $compile_deplibs" finalize_deplibs="-l$name -L$dir $finalize_deplibs" fi elif test yes = "$build_libtool_libs"; then # Not a shared library if test pass_all != "$deplibs_check_method"; then # We're trying link a shared library against a static one # but the system doesn't support it. # Just print a warning and add the library to dependency_libs so # that the program can be linked against the static library. echo $ECHO "*** Warning: This system cannot link to static lib archive $lib." echo "*** I have the capability to make that library automatically link in when" echo "*** you link to this library. But I can only do this if you have a" echo "*** shared version of the library, which you do not appear to have." if test yes = "$module"; then echo "*** But as you try to build a module library, libtool will still create " echo "*** a static module, that should work as long as the dlopening application" echo "*** is linked with the -dlopen flag to resolve symbols at runtime." if test -z "$global_symbol_pipe"; then echo echo "*** However, this would only work if libtool was able to extract symbol" echo "*** lists from a program, using 'nm' or equivalent, but libtool could" echo "*** not find such a program. So, this module is probably useless." echo "*** 'nm' from GNU binutils and a full rebuild may help." fi if test no = "$build_old_libs"; then build_libtool_libs=module build_old_libs=yes else build_libtool_libs=no fi fi else deplibs="$dir/$old_library $deplibs" link_static=yes fi fi # link shared/static library? if test lib = "$linkmode"; then if test -n "$dependency_libs" && { test yes != "$hardcode_into_libs" || test yes = "$build_old_libs" || test yes = "$link_static"; }; then # Extract -R from dependency_libs temp_deplibs= for libdir in $dependency_libs; do case $libdir in -R*) func_stripname '-R' '' "$libdir" temp_xrpath=$func_stripname_result case " $xrpath " in *" $temp_xrpath "*) ;; *) func_append xrpath " $temp_xrpath";; esac;; *) func_append temp_deplibs " $libdir";; esac done dependency_libs=$temp_deplibs fi func_append newlib_search_path " $absdir" # Link against this library test no = "$link_static" && newdependency_libs="$abs_ladir/$laname $newdependency_libs" # ... and its dependency_libs tmp_libs= for deplib in $dependency_libs; do newdependency_libs="$deplib $newdependency_libs" case $deplib in -L*) func_stripname '-L' '' "$deplib" func_resolve_sysroot "$func_stripname_result";; *) func_resolve_sysroot "$deplib" ;; esac if $opt_preserve_dup_deps; then case "$tmp_libs " in *" $func_resolve_sysroot_result "*) func_append specialdeplibs " $func_resolve_sysroot_result" ;; esac fi func_append tmp_libs " $func_resolve_sysroot_result" done if test no != "$link_all_deplibs"; then # Add the search paths of all dependency libraries for deplib in $dependency_libs; do path= case $deplib in -L*) path=$deplib ;; *.la) func_resolve_sysroot "$deplib" deplib=$func_resolve_sysroot_result func_dirname "$deplib" "" "." dir=$func_dirname_result # We need an absolute path. case $dir in [\\/]* | [A-Za-z]:[\\/]*) absdir=$dir ;; *) absdir=`cd "$dir" && pwd` if test -z "$absdir"; then func_warning "cannot determine absolute directory name of '$dir'" absdir=$dir fi ;; esac if $GREP "^installed=no" $deplib > /dev/null; then case $host in *-*-darwin*) depdepl= eval deplibrary_names=`$SED -n -e 's/^library_names=\(.*\)$/\1/p' $deplib` if test -n "$deplibrary_names"; then for tmp in $deplibrary_names; do depdepl=$tmp done if test -f "$absdir/$objdir/$depdepl"; then depdepl=$absdir/$objdir/$depdepl darwin_install_name=`$OTOOL -L $depdepl | awk '{if (NR == 2) {print $1;exit}}'` if test -z "$darwin_install_name"; then darwin_install_name=`$OTOOL64 -L $depdepl | awk '{if (NR == 2) {print $1;exit}}'` fi func_append compiler_flags " $wl-dylib_file $wl$darwin_install_name:$depdepl" func_append linker_flags " -dylib_file $darwin_install_name:$depdepl" path= fi fi ;; *) path=-L$absdir/$objdir ;; esac else eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $deplib` test -z "$libdir" && \ func_fatal_error "'$deplib' is not a valid libtool archive" test "$absdir" != "$libdir" && \ func_warning "'$deplib' seems to be moved" path=-L$absdir fi ;; esac case " $deplibs " in *" $path "*) ;; *) deplibs="$path $deplibs" ;; esac done fi # link_all_deplibs != no fi # linkmode = lib done # for deplib in $libs if test link = "$pass"; then if test prog = "$linkmode"; then compile_deplibs="$new_inherited_linker_flags $compile_deplibs" finalize_deplibs="$new_inherited_linker_flags $finalize_deplibs" else compiler_flags="$compiler_flags "`$ECHO " $new_inherited_linker_flags" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` fi fi dependency_libs=$newdependency_libs if test dlpreopen = "$pass"; then # Link the dlpreopened libraries before other libraries for deplib in $save_deplibs; do deplibs="$deplib $deplibs" done fi if test dlopen != "$pass"; then test conv = "$pass" || { # Make sure lib_search_path contains only unique directories. lib_search_path= for dir in $newlib_search_path; do case "$lib_search_path " in *" $dir "*) ;; *) func_append lib_search_path " $dir" ;; esac done newlib_search_path= } if test prog,link = "$linkmode,$pass"; then vars="compile_deplibs finalize_deplibs" else vars=deplibs fi for var in $vars dependency_libs; do # Add libraries to $var in reverse order eval tmp_libs=\"\$$var\" new_libs= for deplib in $tmp_libs; do # FIXME: Pedantically, this is the right thing to do, so # that some nasty dependency loop isn't accidentally # broken: #new_libs="$deplib $new_libs" # Pragmatically, this seems to cause very few problems in # practice: case $deplib in -L*) new_libs="$deplib $new_libs" ;; -R*) ;; *) # And here is the reason: when a library appears more # than once as an explicit dependence of a library, or # is implicitly linked in more than once by the # compiler, it is considered special, and multiple # occurrences thereof are not removed. Compare this # with having the same library being listed as a # dependency of multiple other libraries: in this case, # we know (pedantically, we assume) the library does not # need to be listed more than once, so we keep only the # last copy. This is not always right, but it is rare # enough that we require users that really mean to play # such unportable linking tricks to link the library # using -Wl,-lname, so that libtool does not consider it # for duplicate removal. case " $specialdeplibs " in *" $deplib "*) new_libs="$deplib $new_libs" ;; *) case " $new_libs " in *" $deplib "*) ;; *) new_libs="$deplib $new_libs" ;; esac ;; esac ;; esac done tmp_libs= for deplib in $new_libs; do case $deplib in -L*) case " $tmp_libs " in *" $deplib "*) ;; *) func_append tmp_libs " $deplib" ;; esac ;; *) func_append tmp_libs " $deplib" ;; esac done eval $var=\"$tmp_libs\" done # for var fi # Add Sun CC postdeps if required: test CXX = "$tagname" && { case $host_os in linux*) case `$CC -V 2>&1 | sed 5q` in *Sun\ C*) # Sun C++ 5.9 func_suncc_cstd_abi if test no != "$suncc_use_cstd_abi"; then func_append postdeps ' -library=Cstd -library=Crun' fi ;; esac ;; solaris*) func_cc_basename "$CC" case $func_cc_basename_result in CC* | sunCC*) func_suncc_cstd_abi if test no != "$suncc_use_cstd_abi"; then func_append postdeps ' -library=Cstd -library=Crun' fi ;; esac ;; esac } # Last step: remove runtime libs from dependency_libs # (they stay in deplibs) tmp_libs= for i in $dependency_libs; do case " $predeps $postdeps $compiler_lib_search_path " in *" $i "*) i= ;; esac if test -n "$i"; then func_append tmp_libs " $i" fi done dependency_libs=$tmp_libs done # for pass if test prog = "$linkmode"; then dlfiles=$newdlfiles fi if test prog = "$linkmode" || test lib = "$linkmode"; then dlprefiles=$newdlprefiles fi case $linkmode in oldlib) if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then func_warning "'-dlopen' is ignored for archives" fi case " $deplibs" in *\ -l* | *\ -L*) func_warning "'-l' and '-L' are ignored for archives" ;; esac test -n "$rpath" && \ func_warning "'-rpath' is ignored for archives" test -n "$xrpath" && \ func_warning "'-R' is ignored for archives" test -n "$vinfo" && \ func_warning "'-version-info/-version-number' is ignored for archives" test -n "$release" && \ func_warning "'-release' is ignored for archives" test -n "$export_symbols$export_symbols_regex" && \ func_warning "'-export-symbols' is ignored for archives" # Now set the variables for building old libraries. build_libtool_libs=no oldlibs=$output func_append objs "$old_deplibs" ;; lib) # Make sure we only generate libraries of the form 'libNAME.la'. case $outputname in lib*) func_stripname 'lib' '.la' "$outputname" name=$func_stripname_result eval shared_ext=\"$shrext_cmds\" eval libname=\"$libname_spec\" ;; *) test no = "$module" \ && func_fatal_help "libtool library '$output' must begin with 'lib'" if test no != "$need_lib_prefix"; then # Add the "lib" prefix for modules if required func_stripname '' '.la' "$outputname" name=$func_stripname_result eval shared_ext=\"$shrext_cmds\" eval libname=\"$libname_spec\" else func_stripname '' '.la' "$outputname" libname=$func_stripname_result fi ;; esac if test -n "$objs"; then if test pass_all != "$deplibs_check_method"; then func_fatal_error "cannot build libtool library '$output' from non-libtool objects on this host:$objs" else echo $ECHO "*** Warning: Linking the shared library $output against the non-libtool" $ECHO "*** objects $objs is not portable!" func_append libobjs " $objs" fi fi test no = "$dlself" \ || func_warning "'-dlopen self' is ignored for libtool libraries" set dummy $rpath shift test 1 -lt "$#" \ && func_warning "ignoring multiple '-rpath's for a libtool library" install_libdir=$1 oldlibs= if test -z "$rpath"; then if test yes = "$build_libtool_libs"; then # Building a libtool convenience library. # Some compilers have problems with a '.al' extension so # convenience libraries should have the same extension an # archive normally would. oldlibs="$output_objdir/$libname.$libext $oldlibs" build_libtool_libs=convenience build_old_libs=yes fi test -n "$vinfo" && \ func_warning "'-version-info/-version-number' is ignored for convenience libraries" test -n "$release" && \ func_warning "'-release' is ignored for convenience libraries" else # Parse the version information argument. save_ifs=$IFS; IFS=: set dummy $vinfo 0 0 0 shift IFS=$save_ifs test -n "$7" && \ func_fatal_help "too many parameters to '-version-info'" # convert absolute version numbers to libtool ages # this retains compatibility with .la files and attempts # to make the code below a bit more comprehensible case $vinfo_number in yes) number_major=$1 number_minor=$2 number_revision=$3 # # There are really only two kinds -- those that # use the current revision as the major version # and those that subtract age and use age as # a minor version. But, then there is irix # that has an extra 1 added just for fun # case $version_type in # correct linux to gnu/linux during the next big refactor darwin|freebsd-elf|linux|osf|windows|none) func_arith $number_major + $number_minor current=$func_arith_result age=$number_minor revision=$number_revision ;; freebsd-aout|qnx|sunos) current=$number_major revision=$number_minor age=0 ;; irix|nonstopux) func_arith $number_major + $number_minor current=$func_arith_result age=$number_minor revision=$number_minor lt_irix_increment=no ;; *) func_fatal_configuration "$modename: unknown library version type '$version_type'" ;; esac ;; no) current=$1 revision=$2 age=$3 ;; esac # Check that each of the things are valid numbers. case $current in 0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;; *) func_error "CURRENT '$current' must be a nonnegative integer" func_fatal_error "'$vinfo' is not valid version information" ;; esac case $revision in 0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;; *) func_error "REVISION '$revision' must be a nonnegative integer" func_fatal_error "'$vinfo' is not valid version information" ;; esac case $age in 0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;; *) func_error "AGE '$age' must be a nonnegative integer" func_fatal_error "'$vinfo' is not valid version information" ;; esac if test "$age" -gt "$current"; then func_error "AGE '$age' is greater than the current interface number '$current'" func_fatal_error "'$vinfo' is not valid version information" fi # Calculate the version variables. major= versuffix= verstring= case $version_type in none) ;; darwin) # Like Linux, but with the current version available in # verstring for coding it into the library header func_arith $current - $age major=.$func_arith_result versuffix=$major.$age.$revision # Darwin ld doesn't like 0 for these options... func_arith $current + 1 minor_current=$func_arith_result xlcverstring="$wl-compatibility_version $wl$minor_current $wl-current_version $wl$minor_current.$revision" verstring="-compatibility_version $minor_current -current_version $minor_current.$revision" # On Darwin other compilers case $CC in nagfor*) verstring="$wl-compatibility_version $wl$minor_current $wl-current_version $wl$minor_current.$revision" ;; *) verstring="-compatibility_version $minor_current -current_version $minor_current.$revision" ;; esac ;; freebsd-aout) major=.$current versuffix=.$current.$revision ;; freebsd-elf) func_arith $current - $age major=.$func_arith_result versuffix=$major.$age.$revision ;; irix | nonstopux) if test no = "$lt_irix_increment"; then func_arith $current - $age else func_arith $current - $age + 1 fi major=$func_arith_result case $version_type in nonstopux) verstring_prefix=nonstopux ;; *) verstring_prefix=sgi ;; esac verstring=$verstring_prefix$major.$revision # Add in all the interfaces that we are compatible with. loop=$revision while test 0 -ne "$loop"; do func_arith $revision - $loop iface=$func_arith_result func_arith $loop - 1 loop=$func_arith_result verstring=$verstring_prefix$major.$iface:$verstring done # Before this point, $major must not contain '.'. major=.$major versuffix=$major.$revision ;; linux) # correct to gnu/linux during the next big refactor func_arith $current - $age major=.$func_arith_result versuffix=$major.$age.$revision ;; osf) func_arith $current - $age major=.$func_arith_result versuffix=.$current.$age.$revision verstring=$current.$age.$revision # Add in all the interfaces that we are compatible with. loop=$age while test 0 -ne "$loop"; do func_arith $current - $loop iface=$func_arith_result func_arith $loop - 1 loop=$func_arith_result verstring=$verstring:$iface.0 done # Make executables depend on our current version. func_append verstring ":$current.0" ;; qnx) major=.$current versuffix=.$current ;; sco) major=.$current versuffix=.$current ;; sunos) major=.$current versuffix=.$current.$revision ;; windows) # Use '-' rather than '.', since we only want one # extension on DOS 8.3 file systems. func_arith $current - $age major=$func_arith_result versuffix=-$major ;; *) func_fatal_configuration "unknown library version type '$version_type'" ;; esac # Clear the version info if we defaulted, and they specified a release. if test -z "$vinfo" && test -n "$release"; then major= case $version_type in darwin) # we can't check for "0.0" in archive_cmds due to quoting # problems, so we reset it completely verstring= ;; *) verstring=0.0 ;; esac if test no = "$need_version"; then versuffix= else versuffix=.0.0 fi fi # Remove version info from name if versioning should be avoided if test yes,no = "$avoid_version,$need_version"; then major= versuffix= verstring= fi # Check to see if the archive will have undefined symbols. if test yes = "$allow_undefined"; then if test unsupported = "$allow_undefined_flag"; then if test yes = "$build_old_libs"; then func_warning "undefined symbols not allowed in $host shared libraries; building static only" build_libtool_libs=no else func_fatal_error "can't build $host shared library unless -no-undefined is specified" fi fi else # Don't allow undefined symbols. allow_undefined_flag=$no_undefined_flag fi fi func_generate_dlsyms "$libname" "$libname" : func_append libobjs " $symfileobj" test " " = "$libobjs" && libobjs= if test relink != "$opt_mode"; then # Remove our outputs, but don't remove object files since they # may have been created when compiling PIC objects. removelist= tempremovelist=`$ECHO "$output_objdir/*"` for p in $tempremovelist; do case $p in *.$objext | *.gcno) ;; $output_objdir/$outputname | $output_objdir/$libname.* | $output_objdir/$libname$release.*) if test -n "$precious_files_regex"; then if $ECHO "$p" | $EGREP -e "$precious_files_regex" >/dev/null 2>&1 then continue fi fi func_append removelist " $p" ;; *) ;; esac done test -n "$removelist" && \ func_show_eval "${RM}r \$removelist" fi # Now set the variables for building old libraries. if test yes = "$build_old_libs" && test convenience != "$build_libtool_libs"; then func_append oldlibs " $output_objdir/$libname.$libext" # Transform .lo files to .o files. oldobjs="$objs "`$ECHO "$libobjs" | $SP2NL | $SED "/\.$libext$/d; $lo2o" | $NL2SP` fi # Eliminate all temporary directories. #for path in $notinst_path; do # lib_search_path=`$ECHO "$lib_search_path " | $SED "s% $path % %g"` # deplibs=`$ECHO "$deplibs " | $SED "s% -L$path % %g"` # dependency_libs=`$ECHO "$dependency_libs " | $SED "s% -L$path % %g"` #done if test -n "$xrpath"; then # If the user specified any rpath flags, then add them. temp_xrpath= for libdir in $xrpath; do func_replace_sysroot "$libdir" func_append temp_xrpath " -R$func_replace_sysroot_result" case "$finalize_rpath " in *" $libdir "*) ;; *) func_append finalize_rpath " $libdir" ;; esac done if test yes != "$hardcode_into_libs" || test yes = "$build_old_libs"; then dependency_libs="$temp_xrpath $dependency_libs" fi fi # Make sure dlfiles contains only unique files that won't be dlpreopened old_dlfiles=$dlfiles dlfiles= for lib in $old_dlfiles; do case " $dlprefiles $dlfiles " in *" $lib "*) ;; *) func_append dlfiles " $lib" ;; esac done # Make sure dlprefiles contains only unique files old_dlprefiles=$dlprefiles dlprefiles= for lib in $old_dlprefiles; do case "$dlprefiles " in *" $lib "*) ;; *) func_append dlprefiles " $lib" ;; esac done if test yes = "$build_libtool_libs"; then if test -n "$rpath"; then case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-*-beos* | *-cegcc* | *-*-haiku*) # these systems don't actually have a c library (as such)! ;; *-*-rhapsody* | *-*-darwin1.[012]) # Rhapsody C library is in the System framework func_append deplibs " System.ltframework" ;; *-*-netbsd*) # Don't link with libc until the a.out ld.so is fixed. ;; *-*-openbsd* | *-*-freebsd* | *-*-dragonfly*) # Do not include libc due to us having libc/libc_r. ;; *-*-sco3.2v5* | *-*-sco5v6*) # Causes problems with __ctype ;; *-*-sysv4.2uw2* | *-*-sysv5* | *-*-unixware* | *-*-OpenUNIX*) # Compiler inserts libc in the correct place for threads to work ;; *) # Add libc to deplibs on all other systems if necessary. if test yes = "$build_libtool_need_lc"; then func_append deplibs " -lc" fi ;; esac fi # Transform deplibs into only deplibs that can be linked in shared. name_save=$name libname_save=$libname release_save=$release versuffix_save=$versuffix major_save=$major # I'm not sure if I'm treating the release correctly. I think # release should show up in the -l (ie -lgmp5) so we don't want to # add it in twice. Is that correct? release= versuffix= major= newdeplibs= droppeddeps=no case $deplibs_check_method in pass_all) # Don't check for shared/static. Everything works. # This might be a little naive. We might want to check # whether the library exists or not. But this is on # osf3 & osf4 and I'm not really sure... Just # implementing what was already the behavior. newdeplibs=$deplibs ;; test_compile) # This code stresses the "libraries are programs" paradigm to its # limits. Maybe even breaks it. We compile a program, linking it # against the deplibs as a proxy for the library. Then we can check # whether they linked in statically or dynamically with ldd. $opt_dry_run || $RM conftest.c cat > conftest.c </dev/null` $nocaseglob else potential_libs=`ls $i/$libnameglob[.-]* 2>/dev/null` fi for potent_lib in $potential_libs; do # Follow soft links. if ls -lLd "$potent_lib" 2>/dev/null | $GREP " -> " >/dev/null; then continue fi # The statement above tries to avoid entering an # endless loop below, in case of cyclic links. # We might still enter an endless loop, since a link # loop can be closed while we follow links, # but so what? potlib=$potent_lib while test -h "$potlib" 2>/dev/null; do potliblink=`ls -ld $potlib | $SED 's/.* -> //'` case $potliblink in [\\/]* | [A-Za-z]:[\\/]*) potlib=$potliblink;; *) potlib=`$ECHO "$potlib" | $SED 's|[^/]*$||'`"$potliblink";; esac done if eval $file_magic_cmd \"\$potlib\" 2>/dev/null | $SED -e 10q | $EGREP "$file_magic_regex" > /dev/null; then func_append newdeplibs " $a_deplib" a_deplib= break 2 fi done done fi if test -n "$a_deplib"; then droppeddeps=yes echo $ECHO "*** Warning: linker path does not have real file for library $a_deplib." echo "*** I have the capability to make that library automatically link in when" echo "*** you link to this library. But I can only do this if you have a" echo "*** shared version of the library, which you do not appear to have" echo "*** because I did check the linker path looking for a file starting" if test -z "$potlib"; then $ECHO "*** with $libname but no candidates were found. (...for file magic test)" else $ECHO "*** with $libname and none of the candidates passed a file format test" $ECHO "*** using a file magic. Last file checked: $potlib" fi fi ;; *) # Add a -L argument. func_append newdeplibs " $a_deplib" ;; esac done # Gone through all deplibs. ;; match_pattern*) set dummy $deplibs_check_method; shift match_pattern_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"` for a_deplib in $deplibs; do case $a_deplib in -l*) func_stripname -l '' "$a_deplib" name=$func_stripname_result if test yes = "$allow_libtool_libs_with_static_runtimes"; then case " $predeps $postdeps " in *" $a_deplib "*) func_append newdeplibs " $a_deplib" a_deplib= ;; esac fi if test -n "$a_deplib"; then libname=`eval "\\$ECHO \"$libname_spec\""` for i in $lib_search_path $sys_lib_search_path $shlib_search_path; do potential_libs=`ls $i/$libname[.-]* 2>/dev/null` for potent_lib in $potential_libs; do potlib=$potent_lib # see symlink-check above in file_magic test if eval "\$ECHO \"$potent_lib\"" 2>/dev/null | $SED 10q | \ $EGREP "$match_pattern_regex" > /dev/null; then func_append newdeplibs " $a_deplib" a_deplib= break 2 fi done done fi if test -n "$a_deplib"; then droppeddeps=yes echo $ECHO "*** Warning: linker path does not have real file for library $a_deplib." echo "*** I have the capability to make that library automatically link in when" echo "*** you link to this library. But I can only do this if you have a" echo "*** shared version of the library, which you do not appear to have" echo "*** because I did check the linker path looking for a file starting" if test -z "$potlib"; then $ECHO "*** with $libname but no candidates were found. (...for regex pattern test)" else $ECHO "*** with $libname and none of the candidates passed a file format test" $ECHO "*** using a regex pattern. Last file checked: $potlib" fi fi ;; *) # Add a -L argument. func_append newdeplibs " $a_deplib" ;; esac done # Gone through all deplibs. ;; none | unknown | *) newdeplibs= tmp_deplibs=`$ECHO " $deplibs" | $SED 's/ -lc$//; s/ -[LR][^ ]*//g'` if test yes = "$allow_libtool_libs_with_static_runtimes"; then for i in $predeps $postdeps; do # can't use Xsed below, because $i might contain '/' tmp_deplibs=`$ECHO " $tmp_deplibs" | $SED "s|$i||"` done fi case $tmp_deplibs in *[!\ \ ]*) echo if test none = "$deplibs_check_method"; then echo "*** Warning: inter-library dependencies are not supported in this platform." else echo "*** Warning: inter-library dependencies are not known to be supported." fi echo "*** All declared inter-library dependencies are being dropped." droppeddeps=yes ;; esac ;; esac versuffix=$versuffix_save major=$major_save release=$release_save libname=$libname_save name=$name_save case $host in *-*-rhapsody* | *-*-darwin1.[012]) # On Rhapsody replace the C library with the System framework newdeplibs=`$ECHO " $newdeplibs" | $SED 's/ -lc / System.ltframework /'` ;; esac if test yes = "$droppeddeps"; then if test yes = "$module"; then echo echo "*** Warning: libtool could not satisfy all declared inter-library" $ECHO "*** dependencies of module $libname. Therefore, libtool will create" echo "*** a static module, that should work as long as the dlopening" echo "*** application is linked with the -dlopen flag." if test -z "$global_symbol_pipe"; then echo echo "*** However, this would only work if libtool was able to extract symbol" echo "*** lists from a program, using 'nm' or equivalent, but libtool could" echo "*** not find such a program. So, this module is probably useless." echo "*** 'nm' from GNU binutils and a full rebuild may help." fi if test no = "$build_old_libs"; then oldlibs=$output_objdir/$libname.$libext build_libtool_libs=module build_old_libs=yes else build_libtool_libs=no fi else echo "*** The inter-library dependencies that have been dropped here will be" echo "*** automatically added whenever a program is linked with this library" echo "*** or is declared to -dlopen it." if test no = "$allow_undefined"; then echo echo "*** Since this library must not contain undefined symbols," echo "*** because either the platform does not support them or" echo "*** it was explicitly requested with -no-undefined," echo "*** libtool will only create a static version of it." if test no = "$build_old_libs"; then oldlibs=$output_objdir/$libname.$libext build_libtool_libs=module build_old_libs=yes else build_libtool_libs=no fi fi fi fi # Done checking deplibs! deplibs=$newdeplibs fi # Time to change all our "foo.ltframework" stuff back to "-framework foo" case $host in *-*-darwin*) newdeplibs=`$ECHO " $newdeplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` new_inherited_linker_flags=`$ECHO " $new_inherited_linker_flags" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` deplibs=`$ECHO " $deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` ;; esac # move library search paths that coincide with paths to not yet # installed libraries to the beginning of the library search list new_libs= for path in $notinst_path; do case " $new_libs " in *" -L$path/$objdir "*) ;; *) case " $deplibs " in *" -L$path/$objdir "*) func_append new_libs " -L$path/$objdir" ;; esac ;; esac done for deplib in $deplibs; do case $deplib in -L*) case " $new_libs " in *" $deplib "*) ;; *) func_append new_libs " $deplib" ;; esac ;; *) func_append new_libs " $deplib" ;; esac done deplibs=$new_libs # All the library-specific variables (install_libdir is set above). library_names= old_library= dlname= # Test again, we may have decided not to build it any more if test yes = "$build_libtool_libs"; then # Remove $wl instances when linking with ld. # FIXME: should test the right _cmds variable. case $archive_cmds in *\$LD\ *) wl= ;; esac if test yes = "$hardcode_into_libs"; then # Hardcode the library paths hardcode_libdirs= dep_rpath= rpath=$finalize_rpath test relink = "$opt_mode" || rpath=$compile_rpath$rpath for libdir in $rpath; do if test -n "$hardcode_libdir_flag_spec"; then if test -n "$hardcode_libdir_separator"; then func_replace_sysroot "$libdir" libdir=$func_replace_sysroot_result if test -z "$hardcode_libdirs"; then hardcode_libdirs=$libdir else # Just accumulate the unique libdirs. case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*) ;; *) func_append hardcode_libdirs "$hardcode_libdir_separator$libdir" ;; esac fi else eval flag=\"$hardcode_libdir_flag_spec\" func_append dep_rpath " $flag" fi elif test -n "$runpath_var"; then case "$perm_rpath " in *" $libdir "*) ;; *) func_append perm_rpath " $libdir" ;; esac fi done # Substitute the hardcoded libdirs into the rpath. if test -n "$hardcode_libdir_separator" && test -n "$hardcode_libdirs"; then libdir=$hardcode_libdirs eval "dep_rpath=\"$hardcode_libdir_flag_spec\"" fi if test -n "$runpath_var" && test -n "$perm_rpath"; then # We should set the runpath_var. rpath= for dir in $perm_rpath; do func_append rpath "$dir:" done eval "$runpath_var='$rpath\$$runpath_var'; export $runpath_var" fi test -n "$dep_rpath" && deplibs="$dep_rpath $deplibs" fi shlibpath=$finalize_shlibpath test relink = "$opt_mode" || shlibpath=$compile_shlibpath$shlibpath if test -n "$shlibpath"; then eval "$shlibpath_var='$shlibpath\$$shlibpath_var'; export $shlibpath_var" fi # Get the real and link names of the library. eval shared_ext=\"$shrext_cmds\" eval library_names=\"$library_names_spec\" set dummy $library_names shift realname=$1 shift if test -n "$soname_spec"; then eval soname=\"$soname_spec\" else soname=$realname fi if test -z "$dlname"; then dlname=$soname fi lib=$output_objdir/$realname linknames= for link do func_append linknames " $link" done # Use standard objects if they are pic test -z "$pic_flag" && libobjs=`$ECHO "$libobjs" | $SP2NL | $SED "$lo2o" | $NL2SP` test "X$libobjs" = "X " && libobjs= delfiles= if test -n "$export_symbols" && test -n "$include_expsyms"; then $opt_dry_run || cp "$export_symbols" "$output_objdir/$libname.uexp" export_symbols=$output_objdir/$libname.uexp func_append delfiles " $export_symbols" fi orig_export_symbols= case $host_os in cygwin* | mingw* | cegcc*) if test -n "$export_symbols" && test -z "$export_symbols_regex"; then # exporting using user supplied symfile func_dll_def_p "$export_symbols" || { # and it's NOT already a .def file. Must figure out # which of the given symbols are data symbols and tag # them as such. So, trigger use of export_symbols_cmds. # export_symbols gets reassigned inside the "prepare # the list of exported symbols" if statement, so the # include_expsyms logic still works. orig_export_symbols=$export_symbols export_symbols= always_export_symbols=yes } fi ;; esac # Prepare the list of exported symbols if test -z "$export_symbols"; then if test yes = "$always_export_symbols" || test -n "$export_symbols_regex"; then func_verbose "generating symbol list for '$libname.la'" export_symbols=$output_objdir/$libname.exp $opt_dry_run || $RM $export_symbols cmds=$export_symbols_cmds save_ifs=$IFS; IFS='~' for cmd1 in $cmds; do IFS=$save_ifs # Take the normal branch if the nm_file_list_spec branch # doesn't work or if tool conversion is not needed. case $nm_file_list_spec~$to_tool_file_cmd in *~func_convert_file_noop | *~func_convert_file_msys_to_w32 | ~*) try_normal_branch=yes eval cmd=\"$cmd1\" func_len " $cmd" len=$func_len_result ;; *) try_normal_branch=no ;; esac if test yes = "$try_normal_branch" \ && { test "$len" -lt "$max_cmd_len" \ || test "$max_cmd_len" -le -1; } then func_show_eval "$cmd" 'exit $?' skipped_export=false elif test -n "$nm_file_list_spec"; then func_basename "$output" output_la=$func_basename_result save_libobjs=$libobjs save_output=$output output=$output_objdir/$output_la.nm func_to_tool_file "$output" libobjs=$nm_file_list_spec$func_to_tool_file_result func_append delfiles " $output" func_verbose "creating $NM input file list: $output" for obj in $save_libobjs; do func_to_tool_file "$obj" $ECHO "$func_to_tool_file_result" done > "$output" eval cmd=\"$cmd1\" func_show_eval "$cmd" 'exit $?' output=$save_output libobjs=$save_libobjs skipped_export=false else # The command line is too long to execute in one step. func_verbose "using reloadable object file for export list..." skipped_export=: # Break out early, otherwise skipped_export may be # set to false by a later but shorter cmd. break fi done IFS=$save_ifs if test -n "$export_symbols_regex" && test : != "$skipped_export"; then func_show_eval '$EGREP -e "$export_symbols_regex" "$export_symbols" > "${export_symbols}T"' func_show_eval '$MV "${export_symbols}T" "$export_symbols"' fi fi fi if test -n "$export_symbols" && test -n "$include_expsyms"; then tmp_export_symbols=$export_symbols test -n "$orig_export_symbols" && tmp_export_symbols=$orig_export_symbols $opt_dry_run || eval '$ECHO "$include_expsyms" | $SP2NL >> "$tmp_export_symbols"' fi if test : != "$skipped_export" && test -n "$orig_export_symbols"; then # The given exports_symbols file has to be filtered, so filter it. func_verbose "filter symbol list for '$libname.la' to tag DATA exports" # FIXME: $output_objdir/$libname.filter potentially contains lots of # 's' commands, which not all seds can handle. GNU sed should be fine # though. Also, the filter scales superlinearly with the number of # global variables. join(1) would be nice here, but unfortunately # isn't a blessed tool. $opt_dry_run || $SED -e '/[ ,]DATA/!d;s,\(.*\)\([ \,].*\),s|^\1$|\1\2|,' < $export_symbols > $output_objdir/$libname.filter func_append delfiles " $export_symbols $output_objdir/$libname.filter" export_symbols=$output_objdir/$libname.def $opt_dry_run || $SED -f $output_objdir/$libname.filter < $orig_export_symbols > $export_symbols fi tmp_deplibs= for test_deplib in $deplibs; do case " $convenience " in *" $test_deplib "*) ;; *) func_append tmp_deplibs " $test_deplib" ;; esac done deplibs=$tmp_deplibs if test -n "$convenience"; then if test -n "$whole_archive_flag_spec" && test yes = "$compiler_needs_object" && test -z "$libobjs"; then # extract the archives, so we have objects to list. # TODO: could optimize this to just extract one archive. whole_archive_flag_spec= fi if test -n "$whole_archive_flag_spec"; then save_libobjs=$libobjs eval libobjs=\"\$libobjs $whole_archive_flag_spec\" test "X$libobjs" = "X " && libobjs= else gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_extract_archives $gentop $convenience func_append libobjs " $func_extract_archives_result" test "X$libobjs" = "X " && libobjs= fi fi if test yes = "$thread_safe" && test -n "$thread_safe_flag_spec"; then eval flag=\"$thread_safe_flag_spec\" func_append linker_flags " $flag" fi # Make a backup of the uninstalled library when relinking if test relink = "$opt_mode"; then $opt_dry_run || eval '(cd $output_objdir && $RM ${realname}U && $MV $realname ${realname}U)' || exit $? fi # Do each of the archive commands. if test yes = "$module" && test -n "$module_cmds"; then if test -n "$export_symbols" && test -n "$module_expsym_cmds"; then eval test_cmds=\"$module_expsym_cmds\" cmds=$module_expsym_cmds else eval test_cmds=\"$module_cmds\" cmds=$module_cmds fi else if test -n "$export_symbols" && test -n "$archive_expsym_cmds"; then eval test_cmds=\"$archive_expsym_cmds\" cmds=$archive_expsym_cmds else eval test_cmds=\"$archive_cmds\" cmds=$archive_cmds fi fi if test : != "$skipped_export" && func_len " $test_cmds" && len=$func_len_result && test "$len" -lt "$max_cmd_len" || test "$max_cmd_len" -le -1; then : else # The command line is too long to link in one step, link piecewise # or, if using GNU ld and skipped_export is not :, use a linker # script. # Save the value of $output and $libobjs because we want to # use them later. If we have whole_archive_flag_spec, we # want to use save_libobjs as it was before # whole_archive_flag_spec was expanded, because we can't # assume the linker understands whole_archive_flag_spec. # This may have to be revisited, in case too many # convenience libraries get linked in and end up exceeding # the spec. if test -z "$convenience" || test -z "$whole_archive_flag_spec"; then save_libobjs=$libobjs fi save_output=$output func_basename "$output" output_la=$func_basename_result # Clear the reloadable object creation command queue and # initialize k to one. test_cmds= concat_cmds= objlist= last_robj= k=1 if test -n "$save_libobjs" && test : != "$skipped_export" && test yes = "$with_gnu_ld"; then output=$output_objdir/$output_la.lnkscript func_verbose "creating GNU ld script: $output" echo 'INPUT (' > $output for obj in $save_libobjs do func_to_tool_file "$obj" $ECHO "$func_to_tool_file_result" >> $output done echo ')' >> $output func_append delfiles " $output" func_to_tool_file "$output" output=$func_to_tool_file_result elif test -n "$save_libobjs" && test : != "$skipped_export" && test -n "$file_list_spec"; then output=$output_objdir/$output_la.lnk func_verbose "creating linker input file list: $output" : > $output set x $save_libobjs shift firstobj= if test yes = "$compiler_needs_object"; then firstobj="$1 " shift fi for obj do func_to_tool_file "$obj" $ECHO "$func_to_tool_file_result" >> $output done func_append delfiles " $output" func_to_tool_file "$output" output=$firstobj\"$file_list_spec$func_to_tool_file_result\" else if test -n "$save_libobjs"; then func_verbose "creating reloadable object files..." output=$output_objdir/$output_la-$k.$objext eval test_cmds=\"$reload_cmds\" func_len " $test_cmds" len0=$func_len_result len=$len0 # Loop over the list of objects to be linked. for obj in $save_libobjs do func_len " $obj" func_arith $len + $func_len_result len=$func_arith_result if test -z "$objlist" || test "$len" -lt "$max_cmd_len"; then func_append objlist " $obj" else # The command $test_cmds is almost too long, add a # command to the queue. if test 1 -eq "$k"; then # The first file doesn't have a previous command to add. reload_objs=$objlist eval concat_cmds=\"$reload_cmds\" else # All subsequent reloadable object files will link in # the last one created. reload_objs="$objlist $last_robj" eval concat_cmds=\"\$concat_cmds~$reload_cmds~\$RM $last_robj\" fi last_robj=$output_objdir/$output_la-$k.$objext func_arith $k + 1 k=$func_arith_result output=$output_objdir/$output_la-$k.$objext objlist=" $obj" func_len " $last_robj" func_arith $len0 + $func_len_result len=$func_arith_result fi done # Handle the remaining objects by creating one last # reloadable object file. All subsequent reloadable object # files will link in the last one created. test -z "$concat_cmds" || concat_cmds=$concat_cmds~ reload_objs="$objlist $last_robj" eval concat_cmds=\"\$concat_cmds$reload_cmds\" if test -n "$last_robj"; then eval concat_cmds=\"\$concat_cmds~\$RM $last_robj\" fi func_append delfiles " $output" else output= fi ${skipped_export-false} && { func_verbose "generating symbol list for '$libname.la'" export_symbols=$output_objdir/$libname.exp $opt_dry_run || $RM $export_symbols libobjs=$output # Append the command to create the export file. test -z "$concat_cmds" || concat_cmds=$concat_cmds~ eval concat_cmds=\"\$concat_cmds$export_symbols_cmds\" if test -n "$last_robj"; then eval concat_cmds=\"\$concat_cmds~\$RM $last_robj\" fi } test -n "$save_libobjs" && func_verbose "creating a temporary reloadable object file: $output" # Loop through the commands generated above and execute them. save_ifs=$IFS; IFS='~' for cmd in $concat_cmds; do IFS=$save_ifs $opt_quiet || { func_quote_for_expand "$cmd" eval "func_echo $func_quote_for_expand_result" } $opt_dry_run || eval "$cmd" || { lt_exit=$? # Restore the uninstalled library and exit if test relink = "$opt_mode"; then ( cd "$output_objdir" && \ $RM "${realname}T" && \ $MV "${realname}U" "$realname" ) fi exit $lt_exit } done IFS=$save_ifs if test -n "$export_symbols_regex" && ${skipped_export-false}; then func_show_eval '$EGREP -e "$export_symbols_regex" "$export_symbols" > "${export_symbols}T"' func_show_eval '$MV "${export_symbols}T" "$export_symbols"' fi fi ${skipped_export-false} && { if test -n "$export_symbols" && test -n "$include_expsyms"; then tmp_export_symbols=$export_symbols test -n "$orig_export_symbols" && tmp_export_symbols=$orig_export_symbols $opt_dry_run || eval '$ECHO "$include_expsyms" | $SP2NL >> "$tmp_export_symbols"' fi if test -n "$orig_export_symbols"; then # The given exports_symbols file has to be filtered, so filter it. func_verbose "filter symbol list for '$libname.la' to tag DATA exports" # FIXME: $output_objdir/$libname.filter potentially contains lots of # 's' commands, which not all seds can handle. GNU sed should be fine # though. Also, the filter scales superlinearly with the number of # global variables. join(1) would be nice here, but unfortunately # isn't a blessed tool. $opt_dry_run || $SED -e '/[ ,]DATA/!d;s,\(.*\)\([ \,].*\),s|^\1$|\1\2|,' < $export_symbols > $output_objdir/$libname.filter func_append delfiles " $export_symbols $output_objdir/$libname.filter" export_symbols=$output_objdir/$libname.def $opt_dry_run || $SED -f $output_objdir/$libname.filter < $orig_export_symbols > $export_symbols fi } libobjs=$output # Restore the value of output. output=$save_output if test -n "$convenience" && test -n "$whole_archive_flag_spec"; then eval libobjs=\"\$libobjs $whole_archive_flag_spec\" test "X$libobjs" = "X " && libobjs= fi # Expand the library linking commands again to reset the # value of $libobjs for piecewise linking. # Do each of the archive commands. if test yes = "$module" && test -n "$module_cmds"; then if test -n "$export_symbols" && test -n "$module_expsym_cmds"; then cmds=$module_expsym_cmds else cmds=$module_cmds fi else if test -n "$export_symbols" && test -n "$archive_expsym_cmds"; then cmds=$archive_expsym_cmds else cmds=$archive_cmds fi fi fi if test -n "$delfiles"; then # Append the command to remove temporary files to $cmds. eval cmds=\"\$cmds~\$RM $delfiles\" fi # Add any objects from preloaded convenience libraries if test -n "$dlprefiles"; then gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_extract_archives $gentop $dlprefiles func_append libobjs " $func_extract_archives_result" test "X$libobjs" = "X " && libobjs= fi save_ifs=$IFS; IFS='~' for cmd in $cmds; do IFS=$sp$nl eval cmd=\"$cmd\" IFS=$save_ifs $opt_quiet || { func_quote_for_expand "$cmd" eval "func_echo $func_quote_for_expand_result" } $opt_dry_run || eval "$cmd" || { lt_exit=$? # Restore the uninstalled library and exit if test relink = "$opt_mode"; then ( cd "$output_objdir" && \ $RM "${realname}T" && \ $MV "${realname}U" "$realname" ) fi exit $lt_exit } done IFS=$save_ifs # Restore the uninstalled library and exit if test relink = "$opt_mode"; then $opt_dry_run || eval '(cd $output_objdir && $RM ${realname}T && $MV $realname ${realname}T && $MV ${realname}U $realname)' || exit $? if test -n "$convenience"; then if test -z "$whole_archive_flag_spec"; then func_show_eval '${RM}r "$gentop"' fi fi exit $EXIT_SUCCESS fi # Create links to the real library. for linkname in $linknames; do if test "$realname" != "$linkname"; then func_show_eval '(cd "$output_objdir" && $RM "$linkname" && $LN_S "$realname" "$linkname")' 'exit $?' fi done # If -module or -export-dynamic was specified, set the dlname. if test yes = "$module" || test yes = "$export_dynamic"; then # On all known operating systems, these are identical. dlname=$soname fi fi ;; obj) if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then func_warning "'-dlopen' is ignored for objects" fi case " $deplibs" in *\ -l* | *\ -L*) func_warning "'-l' and '-L' are ignored for objects" ;; esac test -n "$rpath" && \ func_warning "'-rpath' is ignored for objects" test -n "$xrpath" && \ func_warning "'-R' is ignored for objects" test -n "$vinfo" && \ func_warning "'-version-info' is ignored for objects" test -n "$release" && \ func_warning "'-release' is ignored for objects" case $output in *.lo) test -n "$objs$old_deplibs" && \ func_fatal_error "cannot build library object '$output' from non-libtool objects" libobj=$output func_lo2o "$libobj" obj=$func_lo2o_result ;; *) libobj= obj=$output ;; esac # Delete the old objects. $opt_dry_run || $RM $obj $libobj # Objects from convenience libraries. This assumes # single-version convenience libraries. Whenever we create # different ones for PIC/non-PIC, this we'll have to duplicate # the extraction. reload_conv_objs= gentop= # if reload_cmds runs $LD directly, get rid of -Wl from # whole_archive_flag_spec and hope we can get by with turning comma # into space. case $reload_cmds in *\$LD[\ \$]*) wl= ;; esac if test -n "$convenience"; then if test -n "$whole_archive_flag_spec"; then eval tmp_whole_archive_flags=\"$whole_archive_flag_spec\" test -n "$wl" || tmp_whole_archive_flags=`$ECHO "$tmp_whole_archive_flags" | $SED 's|,| |g'` reload_conv_objs=$reload_objs\ $tmp_whole_archive_flags else gentop=$output_objdir/${obj}x func_append generated " $gentop" func_extract_archives $gentop $convenience reload_conv_objs="$reload_objs $func_extract_archives_result" fi fi # If we're not building shared, we need to use non_pic_objs test yes = "$build_libtool_libs" || libobjs=$non_pic_objects # Create the old-style object. reload_objs=$objs$old_deplibs' '`$ECHO "$libobjs" | $SP2NL | $SED "/\.$libext$/d; /\.lib$/d; $lo2o" | $NL2SP`' '$reload_conv_objs output=$obj func_execute_cmds "$reload_cmds" 'exit $?' # Exit if we aren't doing a library object file. if test -z "$libobj"; then if test -n "$gentop"; then func_show_eval '${RM}r "$gentop"' fi exit $EXIT_SUCCESS fi test yes = "$build_libtool_libs" || { if test -n "$gentop"; then func_show_eval '${RM}r "$gentop"' fi # Create an invalid libtool object if no PIC, so that we don't # accidentally link it into a program. # $show "echo timestamp > $libobj" # $opt_dry_run || eval "echo timestamp > $libobj" || exit $? exit $EXIT_SUCCESS } if test -n "$pic_flag" || test default != "$pic_mode"; then # Only do commands if we really have different PIC objects. reload_objs="$libobjs $reload_conv_objs" output=$libobj func_execute_cmds "$reload_cmds" 'exit $?' fi if test -n "$gentop"; then func_show_eval '${RM}r "$gentop"' fi exit $EXIT_SUCCESS ;; prog) case $host in *cygwin*) func_stripname '' '.exe' "$output" output=$func_stripname_result.exe;; esac test -n "$vinfo" && \ func_warning "'-version-info' is ignored for programs" test -n "$release" && \ func_warning "'-release' is ignored for programs" $preload \ && test unknown,unknown,unknown = "$dlopen_support,$dlopen_self,$dlopen_self_static" \ && func_warning "'LT_INIT([dlopen])' not used. Assuming no dlopen support." case $host in *-*-rhapsody* | *-*-darwin1.[012]) # On Rhapsody replace the C library is the System framework compile_deplibs=`$ECHO " $compile_deplibs" | $SED 's/ -lc / System.ltframework /'` finalize_deplibs=`$ECHO " $finalize_deplibs" | $SED 's/ -lc / System.ltframework /'` ;; esac case $host in *-*-darwin*) # Don't allow lazy linking, it breaks C++ global constructors # But is supposedly fixed on 10.4 or later (yay!). if test CXX = "$tagname"; then case ${MACOSX_DEPLOYMENT_TARGET-10.0} in 10.[0123]) func_append compile_command " $wl-bind_at_load" func_append finalize_command " $wl-bind_at_load" ;; esac fi # Time to change all our "foo.ltframework" stuff back to "-framework foo" compile_deplibs=`$ECHO " $compile_deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` finalize_deplibs=`$ECHO " $finalize_deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` ;; esac # move library search paths that coincide with paths to not yet # installed libraries to the beginning of the library search list new_libs= for path in $notinst_path; do case " $new_libs " in *" -L$path/$objdir "*) ;; *) case " $compile_deplibs " in *" -L$path/$objdir "*) func_append new_libs " -L$path/$objdir" ;; esac ;; esac done for deplib in $compile_deplibs; do case $deplib in -L*) case " $new_libs " in *" $deplib "*) ;; *) func_append new_libs " $deplib" ;; esac ;; *) func_append new_libs " $deplib" ;; esac done compile_deplibs=$new_libs func_append compile_command " $compile_deplibs" func_append finalize_command " $finalize_deplibs" if test -n "$rpath$xrpath"; then # If the user specified any rpath flags, then add them. for libdir in $rpath $xrpath; do # This is the magic to use -rpath. case "$finalize_rpath " in *" $libdir "*) ;; *) func_append finalize_rpath " $libdir" ;; esac done fi # Now hardcode the library paths rpath= hardcode_libdirs= for libdir in $compile_rpath $finalize_rpath; do if test -n "$hardcode_libdir_flag_spec"; then if test -n "$hardcode_libdir_separator"; then if test -z "$hardcode_libdirs"; then hardcode_libdirs=$libdir else # Just accumulate the unique libdirs. case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*) ;; *) func_append hardcode_libdirs "$hardcode_libdir_separator$libdir" ;; esac fi else eval flag=\"$hardcode_libdir_flag_spec\" func_append rpath " $flag" fi elif test -n "$runpath_var"; then case "$perm_rpath " in *" $libdir "*) ;; *) func_append perm_rpath " $libdir" ;; esac fi case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-cegcc*) testbindir=`$ECHO "$libdir" | $SED -e 's*/lib$*/bin*'` case :$dllsearchpath: in *":$libdir:"*) ;; ::) dllsearchpath=$libdir;; *) func_append dllsearchpath ":$libdir";; esac case :$dllsearchpath: in *":$testbindir:"*) ;; ::) dllsearchpath=$testbindir;; *) func_append dllsearchpath ":$testbindir";; esac ;; esac done # Substitute the hardcoded libdirs into the rpath. if test -n "$hardcode_libdir_separator" && test -n "$hardcode_libdirs"; then libdir=$hardcode_libdirs eval rpath=\" $hardcode_libdir_flag_spec\" fi compile_rpath=$rpath rpath= hardcode_libdirs= for libdir in $finalize_rpath; do if test -n "$hardcode_libdir_flag_spec"; then if test -n "$hardcode_libdir_separator"; then if test -z "$hardcode_libdirs"; then hardcode_libdirs=$libdir else # Just accumulate the unique libdirs. case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*) ;; *) func_append hardcode_libdirs "$hardcode_libdir_separator$libdir" ;; esac fi else eval flag=\"$hardcode_libdir_flag_spec\" func_append rpath " $flag" fi elif test -n "$runpath_var"; then case "$finalize_perm_rpath " in *" $libdir "*) ;; *) func_append finalize_perm_rpath " $libdir" ;; esac fi done # Substitute the hardcoded libdirs into the rpath. if test -n "$hardcode_libdir_separator" && test -n "$hardcode_libdirs"; then libdir=$hardcode_libdirs eval rpath=\" $hardcode_libdir_flag_spec\" fi finalize_rpath=$rpath if test -n "$libobjs" && test yes = "$build_old_libs"; then # Transform all the library objects into standard objects. compile_command=`$ECHO "$compile_command" | $SP2NL | $SED "$lo2o" | $NL2SP` finalize_command=`$ECHO "$finalize_command" | $SP2NL | $SED "$lo2o" | $NL2SP` fi func_generate_dlsyms "$outputname" "@PROGRAM@" false # template prelinking step if test -n "$prelink_cmds"; then func_execute_cmds "$prelink_cmds" 'exit $?' fi wrappers_required=: case $host in *cegcc* | *mingw32ce*) # Disable wrappers for cegcc and mingw32ce hosts, we are cross compiling anyway. wrappers_required=false ;; *cygwin* | *mingw* ) test yes = "$build_libtool_libs" || wrappers_required=false ;; *) if test no = "$need_relink" || test yes != "$build_libtool_libs"; then wrappers_required=false fi ;; esac $wrappers_required || { # Replace the output file specification. compile_command=`$ECHO "$compile_command" | $SED 's%@OUTPUT@%'"$output"'%g'` link_command=$compile_command$compile_rpath # We have no uninstalled library dependencies, so finalize right now. exit_status=0 func_show_eval "$link_command" 'exit_status=$?' if test -n "$postlink_cmds"; then func_to_tool_file "$output" postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'` func_execute_cmds "$postlink_cmds" 'exit $?' fi # Delete the generated files. if test -f "$output_objdir/${outputname}S.$objext"; then func_show_eval '$RM "$output_objdir/${outputname}S.$objext"' fi exit $exit_status } if test -n "$compile_shlibpath$finalize_shlibpath"; then compile_command="$shlibpath_var=\"$compile_shlibpath$finalize_shlibpath\$$shlibpath_var\" $compile_command" fi if test -n "$finalize_shlibpath"; then finalize_command="$shlibpath_var=\"$finalize_shlibpath\$$shlibpath_var\" $finalize_command" fi compile_var= finalize_var= if test -n "$runpath_var"; then if test -n "$perm_rpath"; then # We should set the runpath_var. rpath= for dir in $perm_rpath; do func_append rpath "$dir:" done compile_var="$runpath_var=\"$rpath\$$runpath_var\" " fi if test -n "$finalize_perm_rpath"; then # We should set the runpath_var. rpath= for dir in $finalize_perm_rpath; do func_append rpath "$dir:" done finalize_var="$runpath_var=\"$rpath\$$runpath_var\" " fi fi if test yes = "$no_install"; then # We don't need to create a wrapper script. link_command=$compile_var$compile_command$compile_rpath # Replace the output file specification. link_command=`$ECHO "$link_command" | $SED 's%@OUTPUT@%'"$output"'%g'` # Delete the old output file. $opt_dry_run || $RM $output # Link the executable and exit func_show_eval "$link_command" 'exit $?' if test -n "$postlink_cmds"; then func_to_tool_file "$output" postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'` func_execute_cmds "$postlink_cmds" 'exit $?' fi exit $EXIT_SUCCESS fi case $hardcode_action,$fast_install in relink,*) # Fast installation is not supported link_command=$compile_var$compile_command$compile_rpath relink_command=$finalize_var$finalize_command$finalize_rpath func_warning "this platform does not like uninstalled shared libraries" func_warning "'$output' will be relinked during installation" ;; *,yes) link_command=$finalize_var$compile_command$finalize_rpath relink_command=`$ECHO "$compile_var$compile_command$compile_rpath" | $SED 's%@OUTPUT@%\$progdir/\$file%g'` ;; *,no) link_command=$compile_var$compile_command$compile_rpath relink_command=$finalize_var$finalize_command$finalize_rpath ;; *,needless) link_command=$finalize_var$compile_command$finalize_rpath relink_command= ;; esac # Replace the output file specification. link_command=`$ECHO "$link_command" | $SED 's%@OUTPUT@%'"$output_objdir/$outputname"'%g'` # Delete the old output files. $opt_dry_run || $RM $output $output_objdir/$outputname $output_objdir/lt-$outputname func_show_eval "$link_command" 'exit $?' if test -n "$postlink_cmds"; then func_to_tool_file "$output_objdir/$outputname" postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output_objdir/$outputname"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'` func_execute_cmds "$postlink_cmds" 'exit $?' fi # Now create the wrapper script. func_verbose "creating $output" # Quote the relink command for shipping. if test -n "$relink_command"; then # Preserve any variables that may affect compiler behavior for var in $variables_saved_for_relink; do if eval test -z \"\${$var+set}\"; then relink_command="{ test -z \"\${$var+set}\" || $lt_unset $var || { $var=; export $var; }; }; $relink_command" elif eval var_value=\$$var; test -z "$var_value"; then relink_command="$var=; export $var; $relink_command" else func_quote_for_eval "$var_value" relink_command="$var=$func_quote_for_eval_result; export $var; $relink_command" fi done relink_command="(cd `pwd`; $relink_command)" relink_command=`$ECHO "$relink_command" | $SED "$sed_quote_subst"` fi # Only actually do things if not in dry run mode. $opt_dry_run || { # win32 will think the script is a binary if it has # a .exe suffix, so we strip it off here. case $output in *.exe) func_stripname '' '.exe' "$output" output=$func_stripname_result ;; esac # test for cygwin because mv fails w/o .exe extensions case $host in *cygwin*) exeext=.exe func_stripname '' '.exe' "$outputname" outputname=$func_stripname_result ;; *) exeext= ;; esac case $host in *cygwin* | *mingw* ) func_dirname_and_basename "$output" "" "." output_name=$func_basename_result output_path=$func_dirname_result cwrappersource=$output_path/$objdir/lt-$output_name.c cwrapper=$output_path/$output_name.exe $RM $cwrappersource $cwrapper trap "$RM $cwrappersource $cwrapper; exit $EXIT_FAILURE" 1 2 15 func_emit_cwrapperexe_src > $cwrappersource # The wrapper executable is built using the $host compiler, # because it contains $host paths and files. If cross- # compiling, it, like the target executable, must be # executed on the $host or under an emulation environment. $opt_dry_run || { $LTCC $LTCFLAGS -o $cwrapper $cwrappersource $STRIP $cwrapper } # Now, create the wrapper script for func_source use: func_ltwrapper_scriptname $cwrapper $RM $func_ltwrapper_scriptname_result trap "$RM $func_ltwrapper_scriptname_result; exit $EXIT_FAILURE" 1 2 15 $opt_dry_run || { # note: this script will not be executed, so do not chmod. if test "x$build" = "x$host"; then $cwrapper --lt-dump-script > $func_ltwrapper_scriptname_result else func_emit_wrapper no > $func_ltwrapper_scriptname_result fi } ;; * ) $RM $output trap "$RM $output; exit $EXIT_FAILURE" 1 2 15 func_emit_wrapper no > $output chmod +x $output ;; esac } exit $EXIT_SUCCESS ;; esac # See if we need to build an old-fashioned archive. for oldlib in $oldlibs; do case $build_libtool_libs in convenience) oldobjs="$libobjs_save $symfileobj" addlibs=$convenience build_libtool_libs=no ;; module) oldobjs=$libobjs_save addlibs=$old_convenience build_libtool_libs=no ;; *) oldobjs="$old_deplibs $non_pic_objects" $preload && test -f "$symfileobj" \ && func_append oldobjs " $symfileobj" addlibs=$old_convenience ;; esac if test -n "$addlibs"; then gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_extract_archives $gentop $addlibs func_append oldobjs " $func_extract_archives_result" fi # Do each command in the archive commands. if test -n "$old_archive_from_new_cmds" && test yes = "$build_libtool_libs"; then cmds=$old_archive_from_new_cmds else # Add any objects from preloaded convenience libraries if test -n "$dlprefiles"; then gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_extract_archives $gentop $dlprefiles func_append oldobjs " $func_extract_archives_result" fi # POSIX demands no paths to be encoded in archives. We have # to avoid creating archives with duplicate basenames if we # might have to extract them afterwards, e.g., when creating a # static archive out of a convenience library, or when linking # the entirety of a libtool archive into another (currently # not supported by libtool). if (for obj in $oldobjs do func_basename "$obj" $ECHO "$func_basename_result" done | sort | sort -uc >/dev/null 2>&1); then : else echo "copying selected object files to avoid basename conflicts..." gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_mkdir_p "$gentop" save_oldobjs=$oldobjs oldobjs= counter=1 for obj in $save_oldobjs do func_basename "$obj" objbase=$func_basename_result case " $oldobjs " in " ") oldobjs=$obj ;; *[\ /]"$objbase "*) while :; do # Make sure we don't pick an alternate name that also # overlaps. newobj=lt$counter-$objbase func_arith $counter + 1 counter=$func_arith_result case " $oldobjs " in *[\ /]"$newobj "*) ;; *) if test ! -f "$gentop/$newobj"; then break; fi ;; esac done func_show_eval "ln $obj $gentop/$newobj || cp $obj $gentop/$newobj" func_append oldobjs " $gentop/$newobj" ;; *) func_append oldobjs " $obj" ;; esac done fi func_to_tool_file "$oldlib" func_convert_file_msys_to_w32 tool_oldlib=$func_to_tool_file_result eval cmds=\"$old_archive_cmds\" func_len " $cmds" len=$func_len_result if test "$len" -lt "$max_cmd_len" || test "$max_cmd_len" -le -1; then cmds=$old_archive_cmds elif test -n "$archiver_list_spec"; then func_verbose "using command file archive linking..." for obj in $oldobjs do func_to_tool_file "$obj" $ECHO "$func_to_tool_file_result" done > $output_objdir/$libname.libcmd func_to_tool_file "$output_objdir/$libname.libcmd" oldobjs=" $archiver_list_spec$func_to_tool_file_result" cmds=$old_archive_cmds else # the command line is too long to link in one step, link in parts func_verbose "using piecewise archive linking..." save_RANLIB=$RANLIB RANLIB=: objlist= concat_cmds= save_oldobjs=$oldobjs oldobjs= # Is there a better way of finding the last object in the list? for obj in $save_oldobjs do last_oldobj=$obj done eval test_cmds=\"$old_archive_cmds\" func_len " $test_cmds" len0=$func_len_result len=$len0 for obj in $save_oldobjs do func_len " $obj" func_arith $len + $func_len_result len=$func_arith_result func_append objlist " $obj" if test "$len" -lt "$max_cmd_len"; then : else # the above command should be used before it gets too long oldobjs=$objlist if test "$obj" = "$last_oldobj"; then RANLIB=$save_RANLIB fi test -z "$concat_cmds" || concat_cmds=$concat_cmds~ eval concat_cmds=\"\$concat_cmds$old_archive_cmds\" objlist= len=$len0 fi done RANLIB=$save_RANLIB oldobjs=$objlist if test -z "$oldobjs"; then eval cmds=\"\$concat_cmds\" else eval cmds=\"\$concat_cmds~\$old_archive_cmds\" fi fi fi func_execute_cmds "$cmds" 'exit $?' done test -n "$generated" && \ func_show_eval "${RM}r$generated" # Now create the libtool archive. case $output in *.la) old_library= test yes = "$build_old_libs" && old_library=$libname.$libext func_verbose "creating $output" # Preserve any variables that may affect compiler behavior for var in $variables_saved_for_relink; do if eval test -z \"\${$var+set}\"; then relink_command="{ test -z \"\${$var+set}\" || $lt_unset $var || { $var=; export $var; }; }; $relink_command" elif eval var_value=\$$var; test -z "$var_value"; then relink_command="$var=; export $var; $relink_command" else func_quote_for_eval "$var_value" relink_command="$var=$func_quote_for_eval_result; export $var; $relink_command" fi done # Quote the link command for shipping. relink_command="(cd `pwd`; $SHELL \"$progpath\" $preserve_args --mode=relink $libtool_args @inst_prefix_dir@)" relink_command=`$ECHO "$relink_command" | $SED "$sed_quote_subst"` if test yes = "$hardcode_automatic"; then relink_command= fi # Only create the output if not a dry run. $opt_dry_run || { for installed in no yes; do if test yes = "$installed"; then if test -z "$install_libdir"; then break fi output=$output_objdir/${outputname}i # Replace all uninstalled libtool libraries with the installed ones newdependency_libs= for deplib in $dependency_libs; do case $deplib in *.la) func_basename "$deplib" name=$func_basename_result func_resolve_sysroot "$deplib" eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $func_resolve_sysroot_result` test -z "$libdir" && \ func_fatal_error "'$deplib' is not a valid libtool archive" func_append newdependency_libs " ${lt_sysroot:+=}$libdir/$name" ;; -L*) func_stripname -L '' "$deplib" func_replace_sysroot "$func_stripname_result" func_append newdependency_libs " -L$func_replace_sysroot_result" ;; -R*) func_stripname -R '' "$deplib" func_replace_sysroot "$func_stripname_result" func_append newdependency_libs " -R$func_replace_sysroot_result" ;; *) func_append newdependency_libs " $deplib" ;; esac done dependency_libs=$newdependency_libs newdlfiles= for lib in $dlfiles; do case $lib in *.la) func_basename "$lib" name=$func_basename_result eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $lib` test -z "$libdir" && \ func_fatal_error "'$lib' is not a valid libtool archive" func_append newdlfiles " ${lt_sysroot:+=}$libdir/$name" ;; *) func_append newdlfiles " $lib" ;; esac done dlfiles=$newdlfiles newdlprefiles= for lib in $dlprefiles; do case $lib in *.la) # Only pass preopened files to the pseudo-archive (for # eventual linking with the app. that links it) if we # didn't already link the preopened objects directly into # the library: func_basename "$lib" name=$func_basename_result eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $lib` test -z "$libdir" && \ func_fatal_error "'$lib' is not a valid libtool archive" func_append newdlprefiles " ${lt_sysroot:+=}$libdir/$name" ;; esac done dlprefiles=$newdlprefiles else newdlfiles= for lib in $dlfiles; do case $lib in [\\/]* | [A-Za-z]:[\\/]*) abs=$lib ;; *) abs=`pwd`"/$lib" ;; esac func_append newdlfiles " $abs" done dlfiles=$newdlfiles newdlprefiles= for lib in $dlprefiles; do case $lib in [\\/]* | [A-Za-z]:[\\/]*) abs=$lib ;; *) abs=`pwd`"/$lib" ;; esac func_append newdlprefiles " $abs" done dlprefiles=$newdlprefiles fi $RM $output # place dlname in correct position for cygwin # In fact, it would be nice if we could use this code for all target # systems that can't hard-code library paths into their executables # and that have no shared library path variable independent of PATH, # but it turns out we can't easily determine that from inspecting # libtool variables, so we have to hard-code the OSs to which it # applies here; at the moment, that means platforms that use the PE # object format with DLL files. See the long comment at the top of # tests/bindir.at for full details. tdlname=$dlname case $host,$output,$installed,$module,$dlname in *cygwin*,*lai,yes,no,*.dll | *mingw*,*lai,yes,no,*.dll | *cegcc*,*lai,yes,no,*.dll) # If a -bindir argument was supplied, place the dll there. if test -n "$bindir"; then func_relative_path "$install_libdir" "$bindir" tdlname=$func_relative_path_result/$dlname else # Otherwise fall back on heuristic. tdlname=../bin/$dlname fi ;; esac $ECHO > $output "\ # $outputname - a libtool library file # Generated by $PROGRAM (GNU $PACKAGE) $VERSION # # Please DO NOT delete this file! # It is necessary for linking the library. # The name that we can dlopen(3). dlname='$tdlname' # Names of this library. library_names='$library_names' # The name of the static archive. old_library='$old_library' # Linker flags that cannot go in dependency_libs. inherited_linker_flags='$new_inherited_linker_flags' # Libraries that this one depends upon. dependency_libs='$dependency_libs' # Names of additional weak libraries provided by this library weak_library_names='$weak_libs' # Version information for $libname. current=$current age=$age revision=$revision # Is this an already installed library? installed=$installed # Should we warn about portability when linking against -modules? shouldnotlink=$module # Files to dlopen/dlpreopen dlopen='$dlfiles' dlpreopen='$dlprefiles' # Directory that this library needs to be installed in: libdir='$install_libdir'" if test no,yes = "$installed,$need_relink"; then $ECHO >> $output "\ relink_command=\"$relink_command\"" fi done } # Do a symbolic link so that the libtool archive can be found in # LD_LIBRARY_PATH before the program is installed. func_show_eval '( cd "$output_objdir" && $RM "$outputname" && $LN_S "../$outputname" "$outputname" )' 'exit $?' ;; esac exit $EXIT_SUCCESS } if test link = "$opt_mode" || test relink = "$opt_mode"; then func_mode_link ${1+"$@"} fi # func_mode_uninstall arg... func_mode_uninstall () { $debug_cmd RM=$nonopt files= rmforce=false exit_status=0 # This variable tells wrapper scripts just to set variables rather # than running their programs. libtool_install_magic=$magic for arg do case $arg in -f) func_append RM " $arg"; rmforce=: ;; -*) func_append RM " $arg" ;; *) func_append files " $arg" ;; esac done test -z "$RM" && \ func_fatal_help "you must specify an RM program" rmdirs= for file in $files; do func_dirname "$file" "" "." dir=$func_dirname_result if test . = "$dir"; then odir=$objdir else odir=$dir/$objdir fi func_basename "$file" name=$func_basename_result test uninstall = "$opt_mode" && odir=$dir # Remember odir for removal later, being careful to avoid duplicates if test clean = "$opt_mode"; then case " $rmdirs " in *" $odir "*) ;; *) func_append rmdirs " $odir" ;; esac fi # Don't error if the file doesn't exist and rm -f was used. if { test -L "$file"; } >/dev/null 2>&1 || { test -h "$file"; } >/dev/null 2>&1 || test -f "$file"; then : elif test -d "$file"; then exit_status=1 continue elif $rmforce; then continue fi rmfiles=$file case $name in *.la) # Possibly a libtool archive, so verify it. if func_lalib_p "$file"; then func_source $dir/$name # Delete the libtool libraries and symlinks. for n in $library_names; do func_append rmfiles " $odir/$n" done test -n "$old_library" && func_append rmfiles " $odir/$old_library" case $opt_mode in clean) case " $library_names " in *" $dlname "*) ;; *) test -n "$dlname" && func_append rmfiles " $odir/$dlname" ;; esac test -n "$libdir" && func_append rmfiles " $odir/$name $odir/${name}i" ;; uninstall) if test -n "$library_names"; then # Do each command in the postuninstall commands. func_execute_cmds "$postuninstall_cmds" '$rmforce || exit_status=1' fi if test -n "$old_library"; then # Do each command in the old_postuninstall commands. func_execute_cmds "$old_postuninstall_cmds" '$rmforce || exit_status=1' fi # FIXME: should reinstall the best remaining shared library. ;; esac fi ;; *.lo) # Possibly a libtool object, so verify it. if func_lalib_p "$file"; then # Read the .lo file func_source $dir/$name # Add PIC object to the list of files to remove. if test -n "$pic_object" && test none != "$pic_object"; then func_append rmfiles " $dir/$pic_object" fi # Add non-PIC object to the list of files to remove. if test -n "$non_pic_object" && test none != "$non_pic_object"; then func_append rmfiles " $dir/$non_pic_object" fi fi ;; *) if test clean = "$opt_mode"; then noexename=$name case $file in *.exe) func_stripname '' '.exe' "$file" file=$func_stripname_result func_stripname '' '.exe' "$name" noexename=$func_stripname_result # $file with .exe has already been added to rmfiles, # add $file without .exe func_append rmfiles " $file" ;; esac # Do a test to see if this is a libtool program. if func_ltwrapper_p "$file"; then if func_ltwrapper_executable_p "$file"; then func_ltwrapper_scriptname "$file" relink_command= func_source $func_ltwrapper_scriptname_result func_append rmfiles " $func_ltwrapper_scriptname_result" else relink_command= func_source $dir/$noexename fi # note $name still contains .exe if it was in $file originally # as does the version of $file that was added into $rmfiles func_append rmfiles " $odir/$name $odir/${name}S.$objext" if test yes = "$fast_install" && test -n "$relink_command"; then func_append rmfiles " $odir/lt-$name" fi if test "X$noexename" != "X$name"; then func_append rmfiles " $odir/lt-$noexename.c" fi fi fi ;; esac func_show_eval "$RM $rmfiles" 'exit_status=1' done # Try to remove the $objdir's in the directories where we deleted files for dir in $rmdirs; do if test -d "$dir"; then func_show_eval "rmdir $dir >/dev/null 2>&1" fi done exit $exit_status } if test uninstall = "$opt_mode" || test clean = "$opt_mode"; then func_mode_uninstall ${1+"$@"} fi test -z "$opt_mode" && { help=$generic_help func_fatal_help "you must specify a MODE" } test -z "$exec_cmd" && \ func_fatal_help "invalid operation mode '$opt_mode'" if test -n "$exec_cmd"; then eval exec "$exec_cmd" exit $EXIT_FAILURE fi exit $exit_status # The TAGs below are defined such that we never get into a situation # where we disable both kinds of libraries. Given conflicting # choices, we go for a static library, that is the most portable, # since we can't tell whether shared libraries were disabled because # the user asked for that or because the platform doesn't support # them. This is particularly important on AIX, because we don't # support having both static and shared libraries enabled at the same # time on that platform, so we default to a shared-only configuration. # If a disable-shared tag is given, we'll fallback to a static-only # configuration. But we'll never go from static-only to shared-only. # ### BEGIN LIBTOOL TAG CONFIG: disable-shared build_libtool_libs=no build_old_libs=yes # ### END LIBTOOL TAG CONFIG: disable-shared # ### BEGIN LIBTOOL TAG CONFIG: disable-static build_old_libs=`case $build_libtool_libs in yes) echo no;; *) echo yes;; esac` # ### END LIBTOOL TAG CONFIG: disable-static # Local Variables: # mode:shell-script # sh-indentation:2 # End: httpd-2.4.41/build/find_apu.m40000644000000000000500000001776513523273355014412 0ustar rootsrcdnl -------------------------------------------------------- -*- autoconf -*- dnl Licensed to the Apache Software Foundation (ASF) under one or more dnl contributor license agreements. See the NOTICE file distributed with dnl this work for additional information regarding copyright ownership. dnl The ASF licenses this file to You under the Apache License, Version 2.0 dnl (the "License"); you may not use this file except in compliance with dnl the License. You may obtain a copy of the License at dnl dnl http://www.apache.org/licenses/LICENSE-2.0 dnl dnl Unless required by applicable law or agreed to in writing, software dnl distributed under the License is distributed on an "AS IS" BASIS, dnl WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. dnl See the License for the specific language governing permissions and dnl limitations under the License. dnl dnl find_apu.m4 : locate the APR-util (APU) include files and libraries dnl dnl This macro file can be used by applications to find and use the APU dnl library. It provides a standardized mechanism for using APU. It supports dnl embedding APU into the application source, or locating an installed dnl copy of APU. dnl dnl APR_FIND_APU(srcdir, builddir, implicit-install-check, acceptable-majors, dnl detailed-check) dnl dnl where srcdir is the location of the bundled APU source directory, or dnl empty if source is not bundled. dnl dnl where builddir is the location where the bundled APU will be built, dnl or empty if the build will occur in the srcdir. dnl dnl where implicit-install-check set to 1 indicates if there is no dnl --with-apr-util option specified, we will look for installed copies. dnl dnl where acceptable-majors is a space separated list of acceptable major dnl version numbers. Often only a single major version will be acceptable. dnl If multiple versions are specified, and --with-apr-util=PREFIX or the dnl implicit installed search are used, then the first (leftmost) version dnl in the list that is found will be used. Currently defaults to [0 1]. dnl dnl where detailed-check is an M4 macro which sets the apu_acceptable to dnl either "yes" or "no". The macro will be invoked for each installed dnl copy of APU found, with the apu_config variable set appropriately. dnl Only installed copies of APU which are considered acceptable by dnl this macro will be considered found. If no installed copies are dnl considered acceptable by this macro, apu_found will be set to either dnl either "no" or "reconfig". dnl dnl Sets the following variables on exit: dnl dnl apu_found : "yes", "no", "reconfig" dnl dnl apu_config : If the apu-config tool exists, this refers to it. If dnl apu_found is "reconfig", then the bundled directory dnl should be reconfigured *before* using apu_config. dnl dnl Note: this macro file assumes that apr-config has been installed; it dnl is normally considered a required part of an APR installation. dnl dnl Note: At this time, we cannot find *both* a source dir and a build dir. dnl If both are available, the build directory should be passed to dnl the --with-apr-util switch. dnl dnl Note: the installation layout is presumed to follow the standard dnl PREFIX/lib and PREFIX/include pattern. If the APU config file dnl is available (and can be found), then non-standard layouts are dnl possible, since it will be described in the config file. dnl dnl If a bundled source directory is available and needs to be (re)configured, dnl then apu_found is set to "reconfig". The caller should reconfigure the dnl (passed-in) source directory, placing the result in the build directory, dnl as appropriate. dnl dnl If apu_found is "yes" or "reconfig", then the caller should use the dnl value of apu_config to fetch any necessary build/link information. dnl AC_DEFUN([APR_FIND_APU], [ apu_found="no" if test "$target_os" = "os2-emx"; then # Scripts don't pass test -x on OS/2 TEST_X="test -f" else TEST_X="test -x" fi ifelse([$4], [], [ ifdef(AC_WARNING,([$0: missing argument 4 (acceptable-majors): Defaulting to APU 0.x then APU 1.x])) acceptable_majors="0 1" ], [acceptable_majors="$4"]) apu_temp_acceptable_apu_config="" for apu_temp_major in $acceptable_majors do case $apu_temp_major in 0) apu_temp_acceptable_apu_config="$apu_temp_acceptable_apu_config apu-config" ;; *) apu_temp_acceptable_apu_config="$apu_temp_acceptable_apu_config apu-$apu_temp_major-config" ;; esac done AC_MSG_CHECKING(for APR-util) AC_ARG_WITH(apr-util, [ --with-apr-util=PATH prefix for installed APU or the full path to apu-config], [ if test "$withval" = "no" || test "$withval" = "yes"; then AC_MSG_ERROR([--with-apr-util requires a directory or file to be provided]) fi for apu_temp_apu_config_file in $apu_temp_acceptable_apu_config do for lookdir in "$withval/bin" "$withval" do if $TEST_X "$lookdir/$apu_temp_apu_config_file"; then apu_config="$lookdir/$apu_temp_apu_config_file" ifelse([$5], [], [], [ apu_acceptable="yes" $5 if test "$apu_acceptable" != "yes"; then AC_MSG_WARN([Found APU in $apu_config, but it is considered unacceptable]) continue fi]) apu_found="yes" break 2 fi done done if test "$apu_found" != "yes" && $TEST_X "$withval" && $withval --help > /dev/null 2>&1 ; then apu_config="$withval" ifelse([$5], [], [apu_found="yes"], [ apu_acceptable="yes" $5 if test "$apu_acceptable" = "yes"; then apu_found="yes" fi]) fi dnl if --with-apr-util is used, it is a fatal error for its argument dnl to be invalid if test "$apu_found" != "yes"; then AC_MSG_ERROR([the --with-apr-util parameter is incorrect. It must specify an install prefix, a build directory, or an apu-config file.]) fi ],[ if test -n "$3" && test "$3" = "1"; then for apu_temp_apu_config_file in $apu_temp_acceptable_apu_config do if $apu_temp_apu_config_file --help > /dev/null 2>&1 ; then apu_config="$apu_temp_apu_config_file" ifelse([$5], [], [], [ apu_acceptable="yes" $5 if test "$apu_acceptable" != "yes"; then AC_MSG_WARN([skipped APR-util at $apu_config, version not acceptable]) continue fi]) apu_found="yes" break else dnl look in some standard places (apparently not in builtin/default) for lookdir in /usr /usr/local /usr/local/apr /opt/apr; do if $TEST_X "$lookdir/bin/$apu_temp_apu_config_file"; then apu_config="$lookdir/bin/$apu_temp_apu_config_file" ifelse([$5], [], [], [ apu_acceptable="yes" $5 if test "$apu_acceptable" != "yes"; then AC_MSG_WARN([skipped APR-util at $apu_config, version not acceptable]) continue fi]) apu_found="yes" break 2 fi done fi done fi dnl if we have not found anything yet and have bundled source, use that if test "$apu_found" = "no" && test -d "$1"; then apu_temp_abs_srcdir="`cd \"$1\" && pwd`" apu_found="reconfig" apu_bundled_major="`sed -n '/#define.*APU_MAJOR_VERSION/s/^[^0-9]*\([0-9]*\).*$/\1/p' \"$1/include/apu_version.h\"`" case $apu_bundled_major in "") AC_MSG_ERROR([failed to find major version of bundled APU]) ;; 0) apu_temp_apu_config_file="apu-config" ;; *) apu_temp_apu_config_file="apu-$apu_bundled_major-config" ;; esac if test -n "$2"; then apu_config="$2/$apu_temp_apu_config_file" else apu_config="$1/$apu_temp_apu_config_file" fi fi ]) AC_MSG_RESULT($apu_found) ]) httpd-2.4.41/build/find_apr.m40000644000000000000500000001705613523273355014400 0ustar rootsrcdnl -------------------------------------------------------- -*- autoconf -*- dnl Licensed to the Apache Software Foundation (ASF) under one or more dnl contributor license agreements. See the NOTICE file distributed with dnl this work for additional information regarding copyright ownership. dnl The ASF licenses this file to You under the Apache License, Version 2.0 dnl (the "License"); you may not use this file except in compliance with dnl the License. You may obtain a copy of the License at dnl dnl http://www.apache.org/licenses/LICENSE-2.0 dnl dnl Unless required by applicable law or agreed to in writing, software dnl distributed under the License is distributed on an "AS IS" BASIS, dnl WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. dnl See the License for the specific language governing permissions and dnl limitations under the License. dnl dnl find_apr.m4 : locate the APR include files and libraries dnl dnl This macro file can be used by applications to find and use the APR dnl library. It provides a standardized mechanism for using APR. It supports dnl embedding APR into the application source, or locating an installed dnl copy of APR. dnl dnl APR_FIND_APR(srcdir, builddir, implicit-install-check, acceptable-majors, dnl detailed-check) dnl dnl where srcdir is the location of the bundled APR source directory, or dnl empty if source is not bundled. dnl dnl where builddir is the location where the bundled APR will will be built, dnl or empty if the build will occur in the srcdir. dnl dnl where implicit-install-check set to 1 indicates if there is no dnl --with-apr option specified, we will look for installed copies. dnl dnl where acceptable-majors is a space separated list of acceptable major dnl version numbers. Often only a single major version will be acceptable. dnl If multiple versions are specified, and --with-apr=PREFIX or the dnl implicit installed search are used, then the first (leftmost) version dnl in the list that is found will be used. Currently defaults to [0 1]. dnl dnl where detailed-check is an M4 macro which sets the apr_acceptable to dnl either "yes" or "no". The macro will be invoked for each installed dnl copy of APR found, with the apr_config variable set appropriately. dnl Only installed copies of APR which are considered acceptable by dnl this macro will be considered found. If no installed copies are dnl considered acceptable by this macro, apr_found will be set to either dnl either "no" or "reconfig". dnl dnl Sets the following variables on exit: dnl dnl apr_found : "yes", "no", "reconfig" dnl dnl apr_config : If the apr-config tool exists, this refers to it. If dnl apr_found is "reconfig", then the bundled directory dnl should be reconfigured *before* using apr_config. dnl dnl Note: this macro file assumes that apr-config has been installed; it dnl is normally considered a required part of an APR installation. dnl dnl If a bundled source directory is available and needs to be (re)configured, dnl then apr_found is set to "reconfig". The caller should reconfigure the dnl (passed-in) source directory, placing the result in the build directory, dnl as appropriate. dnl dnl If apr_found is "yes" or "reconfig", then the caller should use the dnl value of apr_config to fetch any necessary build/link information. dnl AC_DEFUN([APR_FIND_APR], [ apr_found="no" if test "$target_os" = "os2-emx"; then # Scripts don't pass test -x on OS/2 TEST_X="test -f" else TEST_X="test -x" fi ifelse([$4], [], [ ifdef(AC_WARNING,AC_WARNING([$0: missing argument 4 (acceptable-majors): Defaulting to APR 0.x then APR 1.x])) acceptable_majors="0 1"], [acceptable_majors="$4"]) apr_temp_acceptable_apr_config="" for apr_temp_major in $acceptable_majors do case $apr_temp_major in 0) apr_temp_acceptable_apr_config="$apr_temp_acceptable_apr_config apr-config" ;; *) apr_temp_acceptable_apr_config="$apr_temp_acceptable_apr_config apr-$apr_temp_major-config" ;; esac done AC_MSG_CHECKING(for APR) AC_ARG_WITH(apr, [ --with-apr=PATH prefix for installed APR or the full path to apr-config], [ if test "$withval" = "no" || test "$withval" = "yes"; then AC_MSG_ERROR([--with-apr requires a directory or file to be provided]) fi for apr_temp_apr_config_file in $apr_temp_acceptable_apr_config do for lookdir in "$withval/bin" "$withval" do if $TEST_X "$lookdir/$apr_temp_apr_config_file"; then apr_config="$lookdir/$apr_temp_apr_config_file" ifelse([$5], [], [], [ apr_acceptable="yes" $5 if test "$apr_acceptable" != "yes"; then AC_MSG_WARN([Found APR in $apr_config, but we think it is considered unacceptable]) continue fi]) apr_found="yes" break 2 fi done done if test "$apr_found" != "yes" && $TEST_X "$withval" && $withval --help > /dev/null 2>&1 ; then apr_config="$withval" ifelse([$5], [], [apr_found="yes"], [ apr_acceptable="yes" $5 if test "$apr_acceptable" = "yes"; then apr_found="yes" fi]) fi dnl if --with-apr is used, it is a fatal error for its argument dnl to be invalid if test "$apr_found" != "yes"; then AC_MSG_ERROR([the --with-apr parameter is incorrect. It must specify an install prefix, a build directory, or an apr-config file.]) fi ],[ dnl If we allow installed copies, check those before using bundled copy. if test -n "$3" && test "$3" = "1"; then for apr_temp_apr_config_file in $apr_temp_acceptable_apr_config do if $apr_temp_apr_config_file --help > /dev/null 2>&1 ; then apr_config="$apr_temp_apr_config_file" ifelse([$5], [], [], [ apr_acceptable="yes" $5 if test "$apr_acceptable" != "yes"; then AC_MSG_WARN([skipped APR at $apr_config, version not acceptable]) continue fi]) apr_found="yes" break else dnl look in some standard places for lookdir in /usr /usr/local /usr/local/apr /opt/apr; do if $TEST_X "$lookdir/bin/$apr_temp_apr_config_file"; then apr_config="$lookdir/bin/$apr_temp_apr_config_file" ifelse([$5], [], [], [ apr_acceptable="yes" $5 if test "$apr_acceptable" != "yes"; then AC_MSG_WARN([skipped APR at $apr_config, version not acceptable]) continue fi]) apr_found="yes" break 2 fi done fi done fi dnl if we have not found anything yet and have bundled source, use that if test "$apr_found" = "no" && test -d "$1"; then apr_temp_abs_srcdir="`cd \"$1\" && pwd`" apr_found="reconfig" apr_bundled_major="`sed -n '/#define.*APR_MAJOR_VERSION/s/^[^0-9]*\([0-9]*\).*$/\1/p' \"$1/include/apr_version.h\"`" case $apr_bundled_major in "") AC_MSG_ERROR([failed to find major version of bundled APR]) ;; 0) apr_temp_apr_config_file="apr-config" ;; *) apr_temp_apr_config_file="apr-$apr_bundled_major-config" ;; esac if test -n "$2"; then apr_config="$2/$apr_temp_apr_config_file" else apr_config="$1/$apr_temp_apr_config_file" fi fi ]) AC_MSG_RESULT($apr_found) ]) httpd-2.4.41/build/program.mk0000644000000000000500000000201010455012627014326 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # The build environment was provided by Sascha Schumann. PROGRAM_OBJECTS = $(PROGRAM_SOURCES:.c=.lo) $(PROGRAM_NAME): $(PROGRAM_DEPENDENCIES) $(PROGRAM_OBJECTS) $(PROGRAM_PRELINK) $(LINK) $(PROGRAM_LDFLAGS) $(PROGRAM_OBJECTS) $(PROGRAM_LDADD) httpd-2.4.41/build/rpm/0002755000000000000500000000000013523273343013140 5ustar rootsrchttpd-2.4.41/build/rpm/httpd.spec.in0000644000000000000500000004167013451102213015535 0ustar rootsrc%define contentdir /var/www %define suexec_caller apache %define mmn APACHE_MMN Summary: Apache HTTP Server Name: httpd Version: APACHE_VERSION Release: APACHE_RELEASE URL: http://httpd.apache.org/ Vendor: Apache Software Foundation Source0: http://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2 License: Apache License, Version 2.0 Group: System Environment/Daemons BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root BuildRequires: autoconf, perl, pkgconfig, findutils BuildRequires: zlib-devel, libselinux-devel, libuuid-devel BuildRequires: apr-devel >= 1.4.0, apr-util-devel >= 1.4.0, pcre-devel >= 5.0 Requires: initscripts >= 8.36, /etc/mime.types Obsoletes: httpd-suexec Requires(pre): /usr/sbin/useradd Requires(post): chkconfig Provides: webserver Provides: mod_dav = %{version}-%{release}, httpd-suexec = %{version}-%{release} Provides: httpd-mmn = %{mmn} %description Apache is a powerful, full-featured, efficient, and freely-available Web server. Apache is also the most popular Web server on the Internet. %package devel Group: Development/Libraries Summary: Development tools for the Apache HTTP server. Obsoletes: secureweb-devel, apache-devel Requires: apr-devel, apr-util-devel, pkgconfig, libtool Requires: httpd = %{version}-%{release} %description devel The httpd-devel package contains the APXS binary and other files that you need to build Dynamic Shared Objects (DSOs) for the Apache HTTP Server. If you are installing the Apache HTTP server and you want to be able to compile or develop additional modules for Apache, you need to install this package. %package manual Group: Documentation Summary: Documentation for the Apache HTTP server. Requires: httpd = :%{version}-%{release} Obsoletes: secureweb-manual, apache-manual %description manual The httpd-manual package contains the complete manual and reference guide for the Apache HTTP server. The information can also be found at http://httpd.apache.org/docs/. %package tools Group: System Environment/Daemons Summary: Tools for use with the Apache HTTP Server %description tools The httpd-tools package contains tools which can be used with the Apache HTTP Server. %package -n mod_authnz_ldap Group: System Environment/Daemons Summary: LDAP modules for the Apache HTTP server BuildRequires: openldap-devel Requires: httpd = %{version}-%{release}, httpd-mmn = %{mmn}, apr-util-ldap %description -n mod_authnz_ldap The mod_authnz_ldap module for the Apache HTTP server provides authentication and authorization against an LDAP server, while mod_ldap provides an LDAP cache. %package -n mod_lua Group: System Environment/Daemons Summary: Lua language module for the Apache HTTP server BuildRequires: lua-devel Requires: httpd = %{version}-%{release}, httpd-mmn = %{mmn} %description -n mod_lua The mod_lua module for the Apache HTTP server allows the server to be extended with scripts written in the Lua programming language. %package -n mod_proxy_html Group: System Environment/Daemons Summary: Proxy HTML filter modules for the Apache HTTP server Epoch: 1 BuildRequires: libxml2-devel Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmn} %description -n mod_proxy_html The mod_proxy_html module for the Apache HTTP server provides a filter to rewrite HTML links within web content when used within a reverse proxy environment. The mod_xml2enc module provides enhanced charset/internationalisation support for mod_proxy_html. %package -n mod_ssl Group: System Environment/Daemons Summary: SSL/TLS module for the Apache HTTP server Epoch: 1 BuildRequires: openssl-devel Requires(post): openssl, /bin/cat Requires(pre): httpd Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmn} %description -n mod_ssl The mod_ssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. %prep %setup -q # Safety check: prevent build if defined MMN does not equal upstream MMN. vmmn=`echo MODULE_MAGIC_NUMBER_MAJOR | cpp -include include/ap_mmn.h | sed -n ' /^2/p'` if test "x${vmmn}" != "x%{mmn}"; then : Error: Upstream MMN is now ${vmmn}, packaged MMN is %{mmn}. : Update the mmn macro and rebuild. exit 1 fi %build # forcibly prevent use of bundled apr, apr-util, pcre rm -rf srclib/{apr,apr-util,pcre} %configure \ --enable-layout=RPM \ --libdir=%{_libdir} \ --sysconfdir=%{_sysconfdir}/httpd/conf \ --includedir=%{_includedir}/httpd \ --libexecdir=%{_libdir}/httpd/modules \ --datadir=%{contentdir} \ --with-installbuilddir=%{_libdir}/httpd/build \ --enable-mpms-shared=all \ --with-apr=%{_prefix} --with-apr-util=%{_prefix} \ --enable-suexec --with-suexec \ --with-suexec-caller=%{suexec_caller} \ --with-suexec-docroot=%{contentdir} \ --with-suexec-logfile=%{_localstatedir}/log/httpd/suexec.log \ --with-suexec-bin=%{_sbindir}/suexec \ --with-suexec-uidmin=500 --with-suexec-gidmin=100 \ --enable-pie \ --with-pcre \ --enable-mods-shared=all \ --enable-ssl --with-ssl --enable-bucketeer \ --enable-case-filter --enable-case-filter-in \ --disable-imagemap make %{?_smp_mflags} %install rm -rf $RPM_BUILD_ROOT make DESTDIR=$RPM_BUILD_ROOT install # for holding mod_dav lock database mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/lib/dav # create a prototype session cache mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/cache/mod_ssl touch $RPM_BUILD_ROOT%{_localstatedir}/cache/mod_ssl/scache.{dir,pag,sem} # Make the MMN accessible to module packages echo %{mmn} > $RPM_BUILD_ROOT%{_includedir}/httpd/.mmn # Set up /var directories mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/log/httpd mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/cache/httpd/cache-root # symlinks for /etc/httpd ln -s ../..%{_localstatedir}/log/httpd $RPM_BUILD_ROOT/etc/httpd/logs ln -s ../..%{_localstatedir}/run $RPM_BUILD_ROOT/etc/httpd/run ln -s ../..%{_libdir}/httpd/modules $RPM_BUILD_ROOT/etc/httpd/modules mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d # install SYSV init stuff mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d install -m755 ./build/rpm/httpd.init \ $RPM_BUILD_ROOT/etc/rc.d/init.d/httpd install -m755 ./build/rpm/htcacheclean.init \ $RPM_BUILD_ROOT/etc/rc.d/init.d/htcacheclean # install log rotation stuff mkdir -p $RPM_BUILD_ROOT/etc/logrotate.d install -m644 ./build/rpm/httpd.logrotate \ $RPM_BUILD_ROOT/etc/logrotate.d/httpd # Remove unpackaged files rm -rf $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.exp \ $RPM_BUILD_ROOT%{contentdir}/cgi-bin/* # Make suexec a+rw so it can be stripped. %%files lists real permissions chmod 755 $RPM_BUILD_ROOT%{_sbindir}/suexec %pre # Add the "apache" user /usr/sbin/useradd -c "Apache" -u 48 \ -s /sbin/nologin -r -d %{contentdir} apache 2> /dev/null || : %post # Register the httpd service /sbin/chkconfig --add httpd /sbin/chkconfig --add htcacheclean %preun if [ $1 = 0 ]; then /sbin/service httpd stop > /dev/null 2>&1 /sbin/service htcacheclean stop > /dev/null 2>&1 /sbin/chkconfig --del httpd /sbin/chkconfig --del htcacheclean fi %post -n mod_ssl umask 077 if [ ! -f %{_sysconfdir}/httpd/conf/server.key ] ; then %{_bindir}/openssl genrsa -rand /proc/apm:/proc/cpuinfo:/proc/dma:/proc/filesystems:/proc/interrupts:/proc/ioports:/proc/pci:/proc/rtc:/proc/uptime 1024 > %{_sysconfdir}/httpd/conf/server.key 2> /dev/null fi FQDN=`hostname` if [ "x${FQDN}" = "x" ]; then FQDN=localhost.localdomain fi if [ ! -f %{_sysconfdir}/httpd/conf/server.crt ] ; then cat << EOF | %{_bindir}/openssl req -new -key %{_sysconfdir}/httpd/conf/server.key -x509 -days 365 -out %{_sysconfdir}/httpd/conf/server.crt 2>/dev/null -- SomeState SomeCity SomeOrganization SomeOrganizationalUnit ${FQDN} root@${FQDN} EOF fi %check # Check the built modules are all PIC if readelf -d $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.so | grep TEXTREL; then : modules contain non-relocatable code exit 1 fi %clean rm -rf $RPM_BUILD_ROOT %files %defattr(-,root,root) %doc ABOUT_APACHE README CHANGES LICENSE NOTICE %dir %{_sysconfdir}/httpd %{_sysconfdir}/httpd/modules %{_sysconfdir}/httpd/logs %{_sysconfdir}/httpd/run %dir %{_sysconfdir}/httpd/conf %dir %{_sysconfdir}/httpd/conf.d %config(noreplace) %{_sysconfdir}/httpd/conf/httpd.conf %config(noreplace) %{_sysconfdir}/httpd/conf/magic %config(noreplace) %{_sysconfdir}/httpd/conf/mime.types %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-autoindex.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-dav.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-default.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-info.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-languages.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-manual.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-mpm.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-multilang-errordoc.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-userdir.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-vhosts.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/proxy-html.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-autoindex.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-dav.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-default.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-info.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-languages.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-manual.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-mpm.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-multilang-errordoc.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-userdir.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-vhosts.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/proxy-html.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/httpd.conf %config %{_sysconfdir}/logrotate.d/httpd %config %{_sysconfdir}/rc.d/init.d/httpd %config %{_sysconfdir}/rc.d/init.d/htcacheclean %{_sbindir}/fcgistarter %{_sbindir}/htcacheclean %{_sbindir}/httpd %{_sbindir}/apachectl %attr(4510,root,%{suexec_caller}) %{_sbindir}/suexec %dir %{_libdir}/httpd %dir %{_libdir}/httpd/modules %{_libdir}/httpd/modules/mod_access_compat.so %{_libdir}/httpd/modules/mod_actions.so %{_libdir}/httpd/modules/mod_alias.so %{_libdir}/httpd/modules/mod_allowmethods.so %{_libdir}/httpd/modules/mod_asis.so %{_libdir}/httpd/modules/mod_auth_basic.so %{_libdir}/httpd/modules/mod_auth_digest.so %{_libdir}/httpd/modules/mod_auth_form.so %{_libdir}/httpd/modules/mod_authn_anon.so %{_libdir}/httpd/modules/mod_authn_core.so %{_libdir}/httpd/modules/mod_authn_dbd.so %{_libdir}/httpd/modules/mod_authn_dbm.so %{_libdir}/httpd/modules/mod_authn_file.so %{_libdir}/httpd/modules/mod_authn_socache.so %{_libdir}/httpd/modules/mod_authz_core.so %{_libdir}/httpd/modules/mod_authz_dbd.so %{_libdir}/httpd/modules/mod_authz_dbm.so %{_libdir}/httpd/modules/mod_authz_groupfile.so %{_libdir}/httpd/modules/mod_authz_host.so %{_libdir}/httpd/modules/mod_authz_owner.so %{_libdir}/httpd/modules/mod_authz_user.so %{_libdir}/httpd/modules/mod_autoindex.so %{_libdir}/httpd/modules/mod_bucketeer.so %{_libdir}/httpd/modules/mod_buffer.so %{_libdir}/httpd/modules/mod_cache_disk.so %{_libdir}/httpd/modules/mod_cache_socache.so %{_libdir}/httpd/modules/mod_cache.so %{_libdir}/httpd/modules/mod_case_filter.so %{_libdir}/httpd/modules/mod_case_filter_in.so %{_libdir}/httpd/modules/mod_cgid.so %{_libdir}/httpd/modules/mod_charset_lite.so %{_libdir}/httpd/modules/mod_data.so %{_libdir}/httpd/modules/mod_dav_fs.so %{_libdir}/httpd/modules/mod_dav_lock.so %{_libdir}/httpd/modules/mod_dav.so %{_libdir}/httpd/modules/mod_dbd.so %{_libdir}/httpd/modules/mod_deflate.so %{_libdir}/httpd/modules/mod_dialup.so %{_libdir}/httpd/modules/mod_dir.so %{_libdir}/httpd/modules/mod_dumpio.so %{_libdir}/httpd/modules/mod_echo.so %{_libdir}/httpd/modules/mod_env.so %{_libdir}/httpd/modules/mod_expires.so %{_libdir}/httpd/modules/mod_ext_filter.so %{_libdir}/httpd/modules/mod_file_cache.so %{_libdir}/httpd/modules/mod_filter.so %{_libdir}/httpd/modules/mod_headers.so %{_libdir}/httpd/modules/mod_heartbeat.so %{_libdir}/httpd/modules/mod_heartmonitor.so %{_libdir}/httpd/modules/mod_include.so %{_libdir}/httpd/modules/mod_info.so %{_libdir}/httpd/modules/mod_lbmethod_bybusyness.so %{_libdir}/httpd/modules/mod_lbmethod_byrequests.so %{_libdir}/httpd/modules/mod_lbmethod_bytraffic.so %{_libdir}/httpd/modules/mod_lbmethod_heartbeat.so %{_libdir}/httpd/modules/mod_log_config.so %{_libdir}/httpd/modules/mod_log_debug.so %{_libdir}/httpd/modules/mod_log_forensic.so %{_libdir}/httpd/modules/mod_logio.so %{_libdir}/httpd/modules/mod_macro.so %{_libdir}/httpd/modules/mod_mime_magic.so %{_libdir}/httpd/modules/mod_mime.so %{_libdir}/httpd/modules/mod_mpm_event.so %{_libdir}/httpd/modules/mod_mpm_prefork.so %{_libdir}/httpd/modules/mod_mpm_worker.so %{_libdir}/httpd/modules/mod_negotiation.so %{_libdir}/httpd/modules/mod_proxy_ajp.so %{_libdir}/httpd/modules/mod_proxy_balancer.so %{_libdir}/httpd/modules/mod_proxy_connect.so %{_libdir}/httpd/modules/mod_proxy_express.so %{_libdir}/httpd/modules/mod_proxy_fcgi.so %{_libdir}/httpd/modules/mod_proxy_fdpass.so %{_libdir}/httpd/modules/mod_proxy_ftp.so %{_libdir}/httpd/modules/mod_proxy_http.so %{_libdir}/httpd/modules/mod_proxy_scgi.so %{_libdir}/httpd/modules/mod_proxy_uwsgi.so %{_libdir}/httpd/modules/mod_proxy_wstunnel.so %{_libdir}/httpd/modules/mod_proxy_hcheck.so %{_libdir}/httpd/modules/mod_proxy.so %{_libdir}/httpd/modules/mod_ratelimit.so %{_libdir}/httpd/modules/mod_reflector.so %{_libdir}/httpd/modules/mod_remoteip.so %{_libdir}/httpd/modules/mod_reqtimeout.so %{_libdir}/httpd/modules/mod_request.so %{_libdir}/httpd/modules/mod_rewrite.so %{_libdir}/httpd/modules/mod_sed.so %{_libdir}/httpd/modules/mod_session_cookie.so %{_libdir}/httpd/modules/mod_session_crypto.so %{_libdir}/httpd/modules/mod_session_dbd.so %{_libdir}/httpd/modules/mod_session.so %{_libdir}/httpd/modules/mod_setenvif.so %{_libdir}/httpd/modules/mod_slotmem_plain.so %{_libdir}/httpd/modules/mod_slotmem_shm.so %{_libdir}/httpd/modules/mod_socache_dbm.so %{_libdir}/httpd/modules/mod_socache_memcache.so %{_libdir}/httpd/modules/mod_socache_redis.so %{_libdir}/httpd/modules/mod_socache_shmcb.so %{_libdir}/httpd/modules/mod_speling.so %{_libdir}/httpd/modules/mod_status.so %{_libdir}/httpd/modules/mod_substitute.so %{_libdir}/httpd/modules/mod_suexec.so %{_libdir}/httpd/modules/mod_unique_id.so %{_libdir}/httpd/modules/mod_unixd.so %{_libdir}/httpd/modules/mod_userdir.so %{_libdir}/httpd/modules/mod_usertrack.so %{_libdir}/httpd/modules/mod_version.so %{_libdir}/httpd/modules/mod_vhost_alias.so %{_libdir}/httpd/modules/mod_watchdog.so %dir %{contentdir} %dir %{contentdir}/cgi-bin %dir %{contentdir}/html %dir %{contentdir}/icons %dir %{contentdir}/error %dir %{contentdir}/error/include %{contentdir}/icons/* %{contentdir}/error/README %{contentdir}/html/index.html %config(noreplace) %{contentdir}/error/*.var %config(noreplace) %{contentdir}/error/include/*.html %attr(0700,root,root) %dir %{_localstatedir}/log/httpd %attr(0700,apache,apache) %dir %{_localstatedir}/lib/dav %attr(0700,apache,apache) %dir %{_localstatedir}/cache/httpd/cache-root %{_mandir}/man1/* %{_mandir}/man8/suexec* %{_mandir}/man8/apachectl.8* %{_mandir}/man8/httpd.8* %{_mandir}/man8/htcacheclean.8* %{_mandir}/man8/fcgistarter.8* %files manual %defattr(-,root,root) %{contentdir}/manual %{contentdir}/error/README %files tools %defattr(-,root,root) %{_bindir}/ab %{_bindir}/htdbm %{_bindir}/htdigest %{_bindir}/htpasswd %{_bindir}/logresolve %{_bindir}/httxt2dbm %{_sbindir}/rotatelogs %{_mandir}/man1/htdbm.1* %{_mandir}/man1/htdigest.1* %{_mandir}/man1/htpasswd.1* %{_mandir}/man1/httxt2dbm.1* %{_mandir}/man1/ab.1* %{_mandir}/man1/logresolve.1* %{_mandir}/man8/rotatelogs.8* %doc LICENSE NOTICE %files -n mod_authnz_ldap %defattr(-,root,root) %{_libdir}/httpd/modules/mod_ldap.so %{_libdir}/httpd/modules/mod_authnz_ldap.so %files -n mod_lua %defattr(-,root,root) %{_libdir}/httpd/modules/mod_lua.so %files -n mod_proxy_html %defattr(-,root,root) %{_libdir}/httpd/modules/mod_proxy_html.so %{_libdir}/httpd/modules/mod_xml2enc.so %files -n mod_ssl %defattr(-,root,root) %{_libdir}/httpd/modules/mod_ssl.so %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-ssl.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-ssl.conf %attr(0700,apache,root) %dir %{_localstatedir}/cache/mod_ssl %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.dir %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.pag %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.sem %files devel %defattr(-,root,root) %{_includedir}/httpd %{_bindir}/apxs %{_sbindir}/checkgid %{_bindir}/dbmmanage %{_sbindir}/envvars* %{_mandir}/man1/dbmmanage.1* %{_mandir}/man1/apxs.1* %dir %{_libdir}/httpd/build %{_libdir}/httpd/build/*.mk %{_libdir}/httpd/build/instdso.sh %{_libdir}/httpd/build/config.nice %{_libdir}/httpd/build/mkdir.sh httpd-2.4.41/build/rpm/httpd.init0000755000000000000500000001043212002527420015136 0ustar rootsrc#!/bin/bash # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # httpd Startup script for the Apache Web Server # # chkconfig: - 85 15 # description: The Apache HTTP Server is an efficient and extensible \ # server implementing the current HTTP standards. # processname: httpd # pidfile: /var/run/httpd.pid # config: /etc/sysconfig/httpd # ### BEGIN INIT INFO # Provides: httpd # Required-Start: $local_fs $remote_fs $network $named # Required-Stop: $local_fs $remote_fs $network # Should-Start: distcache # Short-Description: start and stop Apache HTTP Server # Description: The Apache HTTP Server is an extensible server # implementing the current HTTP standards. ### END INIT INFO # Source function library. . /etc/rc.d/init.d/functions # What were we called? Multiple instances of the same daemon can be # created by creating suitably named symlinks to this startup script prog=$(basename $0 | sed -e 's/^[SK][0-9][0-9]//') if [ -f /etc/sysconfig/${prog} ]; then . /etc/sysconfig/${prog} fi # Start httpd in the C locale by default. HTTPD_LANG=${HTTPD_LANG-"C"} # This will prevent initlog from swallowing up a pass-phrase prompt if # mod_ssl needs a pass-phrase from the user. INITLOG_ARGS="" # Set HTTPD=/usr/sbin/httpd.worker in /etc/sysconfig/httpd to use a server # with the thread-based "worker" MPM; BE WARNED that some modules may not # work correctly with a thread-based MPM; notably PHP will refuse to start. httpd=${HTTPD-/usr/sbin/httpd} pidfile=${PIDFILE-/var/run/${prog}.pid} lockfile=${LOCKFILE-/var/lock/subsys/${prog}} RETVAL=0 # check for 1.3 configuration check13 () { CONFFILE=/etc/httpd/conf/httpd.conf GONE="(ServerType|BindAddress|Port|AddModule|ClearModuleList|" GONE="${GONE}AgentLog|RefererLog|RefererIgnore|FancyIndexing|" GONE="${GONE}AccessConfig|ResourceConfig)" if grep -Eiq "^[[:space:]]*($GONE)" $CONFFILE; then echo echo 1>&2 " Apache 1.3 configuration directives found" echo 1>&2 " please read @docdir@/migration.html" failure "Apache 1.3 config directives test" echo exit 1 fi } # The semantics of these two functions differ from the way apachectl does # things -- attempting to start while running is a failure, and shutdown # when not running is also a failure. So we just do it the way init scripts # are expected to behave here. start() { echo -n $"Starting $prog: " check13 || exit 1 LANG=$HTTPD_LANG daemon --pidfile=${pidfile} $httpd $OPTIONS RETVAL=$? echo [ $RETVAL = 0 ] && touch ${lockfile} return $RETVAL } stop() { echo -n $"Stopping $prog: " killproc -p ${pidfile} -d 10 $httpd RETVAL=$? echo [ $RETVAL = 0 ] && rm -f ${lockfile} ${pidfile} } reload() { echo -n $"Reloading $prog: " check13 || exit 1 killproc -p ${pidfile} $httpd -HUP RETVAL=$? echo } # See how we were called. case "$1" in start) start ;; stop) stop ;; status) if ! test -f ${pidfile}; then echo $prog is stopped RETVAL=3 else status -p ${pidfile} $httpd RETVAL=$? fi ;; restart) stop start ;; condrestart) if test -f ${pidfile} && status -p ${pidfile} $httpd >&/dev/null; then stop start fi ;; reload) reload ;; configtest) LANG=$HTTPD_LANG $httpd $OPTIONS -t RETVAL=$? ;; graceful) echo -n $"Gracefully restarting $prog: " LANG=$HTTPD_LANG $httpd $OPTIONS -k $@ RETVAL=$? echo ;; *) echo $"Usage: $prog {start|stop|restart|condrestart|reload|status|graceful|help|configtest}" exit 1 esac exit $RETVAL httpd-2.4.41/build/rpm/httpd.logrotate0000644000000000000500000000022711546730664016213 0ustar rootsrc/var/log/httpd/*log { missingok notifempty sharedscripts postrotate /sbin/service httpd graceful 2> /dev/null || true endscript } httpd-2.4.41/build/rpm/htcacheclean.init0000755000000000000500000000537612002527672016441 0ustar rootsrc#!/bin/bash # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # htcacheclean Startup script for the Apache cache cleaner # # chkconfig: - 85 15 # description: The Apache htcacheclean daemon maintains and prunes the # size of the mod_cache_disk cache directory. # processname: htcacheclean # pidfile: /var/log/httpd/htcacheclean.pid # config: /etc/sysconfig/htcacheclean # ### BEGIN INIT INFO # Provides: htcacheclean # Required-Start: $local_fs $remote_fs $network # Required-Stop: $local_fs $remote_fs $network # Should-Start: httpd # Short-Description: start and stop Apache htcacheclean # Description: The Apache htcacheclean daemon maintains a mod_cache_disk ### END INIT INFO # Source function library. . /etc/rc.d/init.d/functions # What were we called? Multiple instances of the same daemon can be # created by creating suitably named symlinks to this startup script prog=$(basename $0 | sed -e 's/^[SK][0-9][0-9]//') if [ -f /etc/sysconfig/${prog} ]; then . /etc/sysconfig/${prog} fi # Path to htcacheclean, server binary, and short-form for messages. htcacheclean=${HTTPD-/usr/sbin/htcacheclean} lockfile=${LOCKFILE-/var/lock/subsys/${prog}} pidfile=/var/run/${prog}.pid interval=${INTERVAL-10} cachepath=${CACHEPATH-/var/cache/httpd/cache-root} limit=${LIMIT-100M} RETVAL=0 start() { echo -n $"Starting $prog: " daemon --pidfile=${pidfile} $htcacheclean -d "$interval" -p "$cachepath" -l "$limit" -P "$pidfile" $OPTIONS RETVAL=$? echo [ $RETVAL = 0 ] && touch ${lockfile} return $RETVAL } stop() { echo -n $"Stopping $prog: " killproc -p ${pidfile} $htcacheclean RETVAL=$? echo [ $RETVAL = 0 ] && rm -f ${lockfile} } # See how we were called. case "$1" in start) start ;; stop) stop ;; status) status -p ${pidfile} $htcacheclean RETVAL=$? ;; restart) stop start ;; condrestart) if status -p ${pidfile} $htcacheclean >&/dev/null; then stop start fi ;; *) echo $"Usage: $prog {start|stop|restart|condrestart|status|help}" exit 1 esac exit $RETVAL httpd-2.4.41/build/mkdep.perl0000644000000000000500000000434511737125415014333 0ustar rootsrc#!/usr/bin/perl # # Created: Thu Aug 15 11:57:33 1996 too # Last modified: Mon Dec 27 09:23:56 1999 too # # Copyright (c) 1996-1999 Tomi Ollila. All rights reserved. # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions # are met: # 1. Redistributions of source code must retain the above copyright # notice, this list of conditions and the following disclaimer. # 2. Redistributions in binary form must reproduce the above copyright # notice, this list of conditions and the following disclaimer in the # documentation and/or other materials provided with the distribution. # # THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR # IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF # MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO # EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, # SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, # PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; # OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR # OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF # ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. die "Usage: mkdep CPP-command [CPP options] file1 [file2...]\n" if ($#ARGV < 1); $cmdl = shift(@ARGV); $cmdl = "$cmdl " . shift (@ARGV) while ($ARGV[0] =~ /^-[A-Z]/); while ($file = shift(@ARGV)) { $file =~ s/\.o$/.c/; open(F, "$cmdl $file|"); &parseout; close(F); } sub initinit { %used = (); $of = $file; $of =~ s/\.c$/.lo/; $str = "$of:\t$file"; $len = length $str; } sub initstr { $str = "\t"; $len = length $str; } sub parseout { &initinit; while () { s/\\\\/\//g; next unless (/^# [0-9]* "(.*\.h)"/); next if ($1 =~ /^\//); next if $used{$1}; $used{$1} = 1; $nlen = length($1) + 1; if ($len + $nlen > 72) { print $str, "\\\n"; &initstr; $str = $str . $1; } else { $str = $str . " " . $1; } $len += $nlen; } print $str, "\n"; } httpd-2.4.41/build/get-version.sh0000755000000000000500000000414311402455347015143 0ustar rootsrc#!/bin/sh # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # extract version numbers from a header file # # USAGE: get-version.sh CMD VERSION_HEADER PREFIX # where CMD is one of: all, major, libtool # where PREFIX is the prefix to {MAJOR|MINOR|PATCH}_VERSION defines # # get-version.sh all returns a dotted version number # get-version.sh major returns just the major version number # get-version.sh libtool returns a version "libtool -version-info" format # if test $# != 3; then echo "USAGE: $0 CMD INCLUDEDIR PREFIX" echo " where CMD is one of: all, major" exit 1 fi major_sed="/#define.*$3_MAJORVERSION/s/^.*\([0-9][0-9]*\).*$/\1/p" minor_sed="/#define.*$3_MINORVERSION/s/^.*\([0-9][0-9]*\).*$/\1/p" patch_sed="/#define.*$3_PATCHLEVEL/s/^[^0-9]*\([0-9][0-9a-z-]*\).*$/\1/p" mmn_sed="/#define.*$3_MAJOR/s/^[^0-9]*\([0-9][0-9]*\).*$/\1/p" major="`sed -n $major_sed $2`" minor="`sed -n $minor_sed $2`" patch="`sed -n $patch_sed $2`" mmn="`sed -n $mmn_sed $2`" if test "$1" = "all"; then echo ${major}.${minor}.${patch} elif test "$1" = "major"; then echo ${major} elif test "$1" = "mmn"; then echo ${mmn} elif test "$1" = "epoch"; then printf "%02d%02d%03d" ${major} ${minor} ${patch} elif test "$1" = "libtool"; then # Yes, ${minor}:${patch}:${minor} is correct due to libtool idiocy. echo ${minor}:${patch}:${minor} else echo "ERROR: unknown version CMD ($1)" exit 1 fi httpd-2.4.41/build/build-modules-c.awk0000644000000000000500000000527011573243040016027 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. BEGIN { RS = " " # the core module must come first modules[n++] = "core" pmodules[pn++] = "core" } { modules[n] = $1; pmodules[pn] = $1; gsub("\n","",modules[n]); gsub("\n","",pmodules[pn]); ++n; ++pn; } END { print "/*" print " * modules.c --- automatically generated by Apache" print " * configuration script. DO NOT HAND EDIT!!!!!" print " */" print "" print "#include \"ap_config.h\"" print "#include \"httpd.h\"" print "#include \"http_config.h\"" print "" for (i = 0; i < pn; ++i) { printf ("extern module %s_module;\n", pmodules[i]) } print "" print "/*" print " * Modules which implicitly form the" print " * list of activated modules on startup," print " * i.e. these are the modules which are" print " * initially linked into the Apache processing" print " * [extendable under run-time via AddModule]" print " */" print "module *ap_prelinked_modules[] = {" for (i = 0 ; i < n; ++i) { printf " &%s_module,\n", modules[i] } print " NULL" print "};" print "" print "/*" print " * We need the symbols as strings for containers" print " */" print "" print "ap_module_symbol_t ap_prelinked_module_symbols[] = {" for (i = 0; i < n; ++i) { printf (" {\"%s_module\", &%s_module},\n", modules[i], modules[i]) } print " {NULL, NULL}" print "};" print "" print "/*" print " * Modules which initially form the" print " * list of available modules on startup," print " * i.e. these are the modules which are" print " * initially loaded into the Apache process" print " * [extendable under run-time via LoadModule]" print " */" print "module *ap_preloaded_modules[] = {" for (i = 0; i < pn; ++i) { printf " &%s_module,\n", pmodules[i] } print " NULL" print "};" print "" } httpd-2.4.41/build/win32/0002755000000000000500000000000013523273343013304 5ustar rootsrchttpd-2.4.41/build/win32/httpd.rc0000644000000000000500000000524312242535256014760 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ap_release.h" #define AP_SERVER_LICENSE_RCSTR \ "Licensed under the Apache License, Version 2.0 (the ""License""); " \ "you may not use this file except in compliance with the License. " \ "You may obtain a copy of the License at\r\n" \ "\r\n" \ "http://www.apache.org/licenses/LICENSE-2.0\r\n" \ "\r\n" \ "Unless required by applicable law or agreed to in writing, software " \ "distributed under the License is distributed on an ""AS IS"" BASIS, " \ "WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. " \ "See the License for the specific language governing permissions and " \ "limitations under the License." #ifdef ICON_FILE 1 ICON DISCARDABLE APR_STRINGIFY(ICON_FILE) #endif #define LONG_NAME_STR APR_STRINGIFY(LONG_NAME) #define BIN_NAME_STR APR_STRINGIFY(BIN_NAME) 1 VERSIONINFO FILEVERSION AP_SERVER_PATCHLEVEL_CSV,0 PRODUCTVERSION AP_SERVER_PATCHLEVEL_CSV,0 FILEFLAGSMASK 0x3fL #if AP_SERVER_DEVBUILD_BOOLEAN #if defined(_DEBUG) FILEFLAGS 0x03L #else FILEFLAGS 0x02L #endif #else #if defined(_DEBUG) FILEFLAGS 0x01L #else FILEFLAGS 0x00L #endif #endif #if defined(WINNT) || defined(WIN64) FILEOS 0x40004L #else FILEOS 0x4L #endif #if defined(APP_FILE) FILETYPE 0x1L #else FILETYPE 0x2L #endif FILESUBTYPE 0x0L BEGIN BLOCK "StringFileInfo" BEGIN BLOCK "040904b0" BEGIN VALUE "Comments", AP_SERVER_LICENSE_RCSTR "\0" VALUE "CompanyName", AP_SERVER_BASEVENDOR "\0" VALUE "FileDescription", LONG_NAME_STR "\0" VALUE "FileVersion", AP_SERVER_BASEREVISION "\0" VALUE "InternalName", BIN_NAME_STR "\0" VALUE "LegalCopyright", AP_SERVER_COPYRIGHT "\0" VALUE "OriginalFilename", BIN_NAME_STR "\0" VALUE "ProductName", "Apache HTTP Server\0" VALUE "ProductVersion", AP_SERVER_BASEREVISION "\0" END END BLOCK "VarFileInfo" BEGIN VALUE "Translation", 0x409, 1200 END END httpd-2.4.41/build/win32/apache.ico0000644000000000000500000000206610151220336015207 0ustar rootsrc è&(( @€€€€€€€€€€ÀÀÀ€€€ÿÿÿÿÿÿÿÿÿÿÿÿ™™Ý ™ÝP™ÝD@ ™ÔDÙ™ÝÔDMÙ ÝDMÙ™ÔDÝÙ ÔDÝÙ™ÝDMÙ™ ™ÝDÝÙ™ÝDMÙ™ ™ÔDÝ™ ÔMÙ™™ÝDÝ™ ÔDÝ ÝDÝ™™ÐM™™ÐM™ÐÕÙÐÕÙ;=™»X»X»ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿóÇÿÿÁÿÿ€ÿÿÿþ?ÿü?ÿøÿðÿàÿÿÀÿÿ€ÿÿÿþÿþ?ÿüÿÿøÿÿøÿÿðÿÿðÿÿà?ÿÿà?ÿÿÀÿÿÿƒÿÿÿƒÿÿÿÿÿÿÿÿÿÿÿÿÿÿ( À€€€€€€€€€ÀÀÀ€€€ÿÿÿÿÿÿÿÿÿÿÿÿ P™ÐD ÝM™ÐMÙ DÙ™Ô ™DÙ ÐM™ ÙM™ÙU»Y»Pÿÿÿäÿÿþüøððà?àÀÿÃÿ‡ÿÿÿhttpd-2.4.41/build/install.sh0000755000000000000500000000635710455010104014341 0ustar rootsrc#!/bin/sh # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # install.sh -- install a program, script or datafile # # Based on `install-sh' from the X Consortium's X11R5 distribution # as of 89/12/18 which is freely available. # Cleaned up for Apache's Autoconf-style Interface (APACI) # by Ralf S. Engelschall # # put in absolute paths if you don't have them in your path; # or use env. vars. # mvprog="${MVPROG-mv}" cpprog="${CPPROG-cp}" chmodprog="${CHMODPROG-chmod}" chownprog="${CHOWNPROG-chown}" chgrpprog="${CHGRPPROG-chgrp}" stripprog="${STRIPPROG-strip}" rmprog="${RMPROG-rm}" # # parse argument line # instcmd="$mvprog" chmodcmd="" chowncmd="" chgrpcmd="" stripcmd="" rmcmd="$rmprog -f" mvcmd="$mvprog" ext="" src="" dst="" while [ "x$1" != "x" ]; do case $1 in -c) instcmd="$cpprog" shift; continue ;; -m) chmodcmd="$chmodprog $2" shift; shift; continue ;; -o) chowncmd="$chownprog $2" shift; shift; continue ;; -g) chgrpcmd="$chgrpprog $2" shift; shift; continue ;; -s) stripcmd="$stripprog" shift; continue ;; -S) stripcmd="$stripprog $2" shift; shift; continue ;; -e) ext="$2" shift; shift; continue ;; *) if [ "x$src" = "x" ]; then src=$1 else dst=$1 fi shift; continue ;; esac done if [ "x$src" = "x" ]; then echo "install.sh: no input file specified" exit 1 fi if [ "x$dst" = "x" ]; then echo "install.sh: no destination specified" exit 1 fi # # If destination is a directory, append the input filename; if # your system does not like double slashes in filenames, you may # need to add some logic # if [ -d $dst ]; then dst="$dst/`basename $src`" fi # Add a possible extension (such as ".exe") to src and dst src="$src$ext" dst="$dst$ext" # Make a temp file name in the proper directory. dstdir=`dirname $dst` dsttmp=$dstdir/#inst.$$# # Move or copy the file name to the temp name $instcmd $src $dsttmp # And set any options; do chmod last to preserve setuid bits if [ "x$chowncmd" != "x" ]; then $chowncmd $dsttmp; fi if [ "x$chgrpcmd" != "x" ]; then $chgrpcmd $dsttmp; fi if [ "x$stripcmd" != "x" ]; then $stripcmd $dsttmp; fi if [ "x$chmodcmd" != "x" ]; then $chmodcmd $dsttmp; fi # Now rename the file to the real destination. $rmcmd $dst $mvcmd $dsttmp $dst exit 0 httpd-2.4.41/build/make_exports.awk0000644000000000000500000000720410776375527015566 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. BEGIN { printf("/*\n") printf(" * THIS FILE WAS AUTOGENERATED BY make_exports.awk\n") printf(" *\n") printf(" * This is an ugly hack that needs to be here, so\n") printf(" * that libtool will link all of the APR functions\n") printf(" * into server regardless of whether the base server\n") printf(" * uses them.\n") printf(" */\n") printf("\n") for (i = 1; i < ARGC; i++) { file = ARGV[i] sub("([^/]*[/])*", "", file) printf("#include \"%s\"\n", file) } printf("\n") printf("const void *ap_ugly_hack = NULL;\n") printf("\n") TYPE_NORMAL = 0 TYPE_HEADER = 1 stackptr = 0 } function push(line) { stack[stackptr] = line stackptr++ } function do_output() { printf("/*\n") printf(" * %s\n", FILENAME) printf(" */\n") for (i = 0; i < stackptr; i++) { printf("%s\n", stack[i]) } stackptr = 0 printf("\n"); } function enter_scope(type) { scope++ scope_type[scope] = type scope_stack[scope] = stackptr delete scope_used[scope] } function leave_scope() { used = scope_used[scope] if (!used) stackptr = scope_stack[scope] scope-- if (used) { scope_used[scope] = 1 if (!scope) do_output() } } function add_symbol(symbol) { if (!index(symbol, "#")) { push("const void *ap_hack_" symbol " = (const void *)" symbol ";") scope_used[scope] = 1 } } /^[ \t]*AP[RU]?_(CORE_)?DECLARE[^(]*[(][^)]*[)]([^ ]* )*[^(]+[(]/ { sub("[ \t]*AP[RU]?_(CORE_)?DECLARE[^(]*[(][^)]*[)][ \t]*", "") sub("[(].*", "") sub("([^ ]* (^([ \t]*[(])))+", "") add_symbol($0) next } /^[ \t]*AP_DECLARE_HOOK[^(]*[(][^)]*/ { split($0, args, ",") symbol = args[2] sub("^[ \t]+", "", symbol) sub("[ \t]+$", "", symbol) add_symbol("ap_hook_" symbol) add_symbol("ap_hook_get_" symbol) add_symbol("ap_run_" symbol) next } /^[ \t]*APR_POOL_DECLARE_ACCESSOR[^(]*[(][^)]*[)]/ { sub("[ \t]*APR_POOL_DECLARE_ACCESSOR[^(]*[(]", "", $0) sub("[)].*$", "", $0) add_symbol("apr_" $0 "_pool_get") next } /^[ \t]*APR_DECLARE_INHERIT_SET[^(]*[(][^)]*[)]/ { sub("[ \t]*APR_DECLARE_INHERIT_SET[^(]*[(]", "", $0) sub("[)].*$", "", $0) add_symbol("apr_" $0 "_inherit_set") next } /^[ \t]*APR_DECLARE_INHERIT_UNSET[^(]*[(][^)]*[)]/ { sub("[ \t]*APR_DECLARE_INHERIT_UNSET[^(]*[(]", "", $0) sub("[)].*$", "", $0) add_symbol("apr_" $0 "_inherit_unset") next } /^#[ \t]*if(ndef| !defined[(])([^_]*_)*H/ { enter_scope(TYPE_HEADER) next } /^#[ \t]*if([n]?def)? / { enter_scope(TYPE_NORMAL) push($0) next } /^#[ \t]*endif/ { if (scope_type[scope] == TYPE_NORMAL) push($0) leave_scope() next } /^#[ \t]*else/ { push($0) next } /^#[ \t]*elif/ { push($0) next } httpd-2.4.41/build/cpR_noreplace.pl0000644000000000000500000000417112241162036015444 0ustar rootsrc#!/usr/bin/perl -w # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. use strict; use File::Basename; use File::Copy; use File::Find; use File::Path qw(mkpath); require 5.010; my $srcdir; my $destdir; sub process_file { return if $_ =~ /^\./; my $rel_to_srcdir = substr($File::Find::name, length($srcdir)); my $destfile = "$destdir$rel_to_srcdir"; if (-d $File::Find::name) { # If the directory is empty, it won't get created. # Otherwise it will get created when copying a file. } else { if (-f $destfile) { # Preserve it. } else { # Create it. my $dir = dirname($destfile); if (! -e $dir) { mkpath($dir) or die "Failed to create directory $dir: $!"; } copy($File::Find::name, $destfile) or die "Copy $File::Find::name->$destfile failed: $!"; } } } $srcdir = shift; $destdir = shift; if (scalar(@ARGV) > 0) { my $mode = shift; if ($mode eq "ifdestmissing") { # Normally the check for possible overwrite is performed on a # file-by-file basis. If "ifdestmissing" is specified and the # destination directory exists, bail out. if (-d $destdir) { print "[PRESERVING EXISTING SUBDIR $destdir]\n"; exit(0); } } else { die "bad mode $mode"; } } find(\&process_file, ($srcdir)); httpd-2.4.41/build/config-stubs0000755000000000000500000000126512262534731014675 0ustar rootsrc#!/bin/sh # # Find all config files (config*.m4) and map them into lines with the # form: NUM? '0' ' ' PATH # # For example: # # 50 ./modules/generators/config5.m4 # 0 ./modules/aaa/config.m4 # 10 ./example/config1.m4 # # These lines are sorted, then the first field is removed. Thus, we # have a set of paths sorted on the config-number (if present). All # config files without a number are sorted before those with a number. # configfiles=`find os server modules support -name "config*.m4" | \ sed 's#\(.*/config\)\(.*\).m4#\20 \1\2.m4#' | \ sort | \ sed 's#.* ##'` for configfile in $configfiles; do if [ -r $configfile ]; then echo "sinclude($configfile)" fi done httpd-2.4.41/build/ltlib.mk0000644000000000000500000000166710455012627014006 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # The build environment was provided by Sascha Schumann. TARGETS = $(LTLIBRARY_NAME) include $(top_builddir)/build/rules.mk include $(top_srcdir)/build/library.mk httpd-2.4.41/build/NWGNUenvironment.inc0000644000000000000500000002047712602235527016227 0ustar rootsrc# # Setup needed Tools and Libraries # ifeq "$(wildcard $(AP_WORK)/NWGNUcustom.ini)" "$(AP_WORK)/NWGNUcustom.ini" include $(AP_WORK)/NWGNUcustom.ini CUSTOM_INI = $(AP_WORK)/NWGNUcustom.ini endif ifndef VERBOSE .SILENT: endif # # Treat like an include # ifndef EnvironmentDefined # # simple macros for parsing makefiles # EOLIST:= EMPTY := COMMA := , SPACE := $(EMPTY) $(EMPTY) # # Base environment # # Try and handle case issues ifndef NOVELLLIBC ifdef NovellLibC NOVELLLIBC = $(NovellLibC) endif endif ifndef NOVELLLIBC NOVELLLIBC = C:/novell/ndk/libc endif ifneq "$(wildcard $(NOVELLLIBC)/include/ndkvers.h)" "$(NOVELLLIBC)/include/ndkvers.h" $(error NOVELLLIBC does not point to a valid Novell LIBC SDK) endif ifndef LDAPSDK LDAPSDK = C:/novell/ndk/cldapsdk/NetWare/libc endif ifneq "$(wildcard $(LDAPSDK)/inc/ldap.h)" "$(LDAPSDK)/inc/ldap.h" $(error LDAPSDK does not point to a valid Novell CLDAP SDK) endif ifdef WITH_HTTP2 ifneq "$(wildcard $(NGH2SRC)/lib/nghttp2_hd.h)" "$(NGH2SRC)/lib/nghttp2_hd.h" $(error NGH2SRC does not point to a valid NGHTTP2 source tree) endif endif ifndef PCRESRC PCRESRC = $(AP_WORK)/srclib/pcre endif ifneq "$(wildcard $(PCRESRC)/pcre-config.in)" "$(PCRESRC)/pcre-config.in" $(error PCRESRC does not point to a valid PCRE source tree) endif # This is a placeholder # ifndef ZLIBSDK # ZLIBSDK = C:/novell/ndk/zlibsdk # endif ifndef METROWERKS METROWERKS = $(ProgramFiles)\Metrowerks\CodeWarrior endif # If LM_LICENSE_FILE isn't defined, define a variable that can be used to # restart make with it defined ifndef LM_LICENSE_FILE NO_LICENSE_FILE = NO_LICENSE_FILE endif # # Set the Release type that you want to build, possible values are: # # debug - full debug switches are set # noopt - normal switches are set # release - optimization switches are set (default) ifdef reltype RELEASE = $(reltype) endif ifdef RELTYPE RELEASE = $(RELTYPE) endif ifdef debug RELEASE = debug endif ifdef DEBUG RELEASE = debug endif ifdef noopt RELEASE = noopt endif ifdef NOOPT RELEASE = noopt endif ifdef optimized RELEASE = release endif ifdef OPTIMIZED RELEASE = release endif ifndef RELEASE RELEASE = release endif OBJDIR = obj_$(RELEASE) # Define minimum APR version to check for APR_WANTED = 1004000 # # Setup compiler information # # MetroWerks NLM tools CC = mwccnlm CPP = mwccnlm LINK = mwldnlm LIB = mwldnlm -type library -w nocmdline WIN_CC = mwcc # Setup build tools AWK = awk # Setup distribution tools ZIP = zip -qr9 7ZA = 7za >NUL a # # Declare Command and tool macros here # ifeq ($(findstring /sh,$(SHELL)),/sh) DEL = rm -f $1 RMDIR = rm -fr $1 MKDIR = mkdir -p $1 COPY = -cp -afv $1 $2 #COPYR = -cp -afr $1/* $2 COPYR = -rsync -aC $1/* $2 TOUCH = -touch $1 ECHONL = echo "" DL = ' CAT = cat else ifeq "$(OS)" "Windows_NT" DEL = $(shell if exist $(subst /,\,$1) del /q /f 2>NUL $(subst /,\,$1)) RMDIR = $(shell if exist $(subst /,\,$1)\NUL rd /q /s 2>NUL $(subst /,\,$1)) else DEL = $(shell if exist $(subst /,\,$1) del 2>NUL $(subst /,\,$1)) RMDIR = $(shell if exist $(subst /,\,$1)\NUL deltree /y 2>NUL $(subst /,\,$1)) endif ECHONL = $(ComSpec) /c echo. MKDIR = $(shell if not exist $(subst /,\,$1)\NUL md 2>NUL $(subst /,\,$1)) COPY = -copy /y 2>NUL $(subst /,\,$1) $(subst /,\,$2) COPYR = -xcopy /q /y /e 2>NUL $(subst /,\,$1) $(subst /,\,$2) TOUCH = -copy /b 2>&1>NUL $(subst /,\,$1) +,, CAT = type endif ifdef IPV6 ifndef USE_STDSOCKETS USE_STDSOCKETS=1 endif endif NOVI = $(NOVELLLIBC)/imports PRELUDE = $(NOVI)/libcpre.o INCDIRS = $(NOVELLLIBC)/include; ifndef USE_STDSOCKETS INCDIRS += $(NOVELLLIBC)/include/winsock; endif ifneq "$(LDAPSDK)" "" INCDIRS += $(LDAPSDK)/inc; endif ifneq "$(ZLIBSDK)" "" INCDIRS += $(ZLIBSDK); endif ifneq "$(PCRESRC)" "" INCDIRS += $(PCRESRC); endif DEFINES = -DNETWARE ifndef USE_STDSOCKETS DEFINES += -DUSE_WINSOCK endif ifndef DEBUG DEFINES += -DNDEBUG endif ifdef USE_STDSOCKETS VERSION_SKT = (BSDSOCK) else VERSION_SKT = (WINSOCK) endif # MetroWerks static Libraries CLIB3S = $(METROWERKS)/Novell Support/Metrowerks Support/Libraries/Runtime/mwcrtl.lib MATH3S = PLIB3S = $(METROWERKS)/Novell Support/Metrowerks Support/Libraries/MSL C++/MWCPP.lib ifeq "$(OS)" "Windows_NT" # MetroWerks Win32 build flags to create build tools MWCW_MSL = "$(METROWERKS)/MSL" MWCW_W32 = "$(METROWERKS)/Win32-x86 Support" CC_FOR_BUILD = $(WIN_CC) CFLAGS_FOR_BUILD = -O2 -gccinc -nodefaults -proc 586 -w off CFLAGS_FOR_BUILD += -ir $(MWCW_MSL) -ir $(MWCW_W32) -lr $(MWCW_MSL) -lr $(MWCW_W32) CFLAGS_FOR_BUILD += -lMSL_All_x86.lib -lkernel32.lib -luser32.lib else # GNUC build flags to create build tools CC_FOR_BUILD = gcc CFLAGS_FOR_BUILD = -Wall -O2 endif # Base compile flags # and prefix or precompiled header added here. # The default flags are as follows: # # -c compile only, no link # -gccinc search directory of referencing file first for #includes # -Cpp_exceptions off disable C++ exceptions # -RTTI off disable C++ run-time typing information # -align 4 align on 4 byte bounderies # -w nocmdline disable command-line driver/parser warnings # -proc PII generate code base on Pentium II instruction set # -inst mmx use MMX extensions (Not used) CFLAGS += -c -w nocmdline -gccinc -Cpp_exceptions off -RTTI off -align 4 -proc PII ifdef CC_MAX_ERRORS CFLAGS += -maxerrors $(CC_MAX_ERRORS) else CFLAGS += -maxerrors 1 endif ifeq "$(REQUIRE_PROTOTYPES)" "1" CFLAGS += -r endif # -g generate debugging information # -O0 level 0 optimizations ifeq "$(RELEASE)" "debug" CFLAGS += -g -O0 endif # -O4,p level 4 optimizations, optimize for speed ifeq "$(RELEASE)" "release" CFLAGS += -O4,p endif # -prefix pre_nw.h #include pre_nw.h for all files CFLAGS += -prefix pre_nw.h ifneq ($(findstring /sh,$(SHELL)),/sh) PATH:=$(PATH);$(METROWERKS)\bin;$(METROWERKS)\Other Metrowerks Tools\Command Line Tools endif # # Declare major project deliverables output directories here # ifndef PORT PORT = 80 endif ifndef SSLPORT SSLPORT = 443 endif ifdef DEST INSTALL = $(subst \,/,$(DEST)) ifeq (/, $(findstring /,$(INSTALL))) INSTDIRS = $(INSTALL) endif endif ifdef dest INSTALL = $(subst \,/,$(dest)) ifeq (/, $(findstring /,$(INSTALL))) INSTDIRS = $(INSTALL) endif endif ifndef INSTALL INSTALL = $(AP_WORK)/Dist INSTDIRS = $(INSTALL) endif ifeq ($(MAKECMDGOALS),installdev) ifndef BASEDIR export BASEDIR = apache_$(VERSION_STR)-sdk endif else ifndef BASEDIR export BASEDIR = Apache$(VERSION_MAJMIN) endif endif # Add support for building IPV6 alongside ifneq "$(IPV6)" "" DEFINES += -DNW_BUILD_IPV6 # INCDIRS := $(NOVELLLIBC)/include/winsock/IPV6;$(INCDIRS) ifneq "$(findstring IPV6,$(OBJDIR))" "IPV6" OBJDIR := $(OBJDIR)_IPV6 endif ifneq "$(findstring IPV6,$(INSTALL))" "IPV6" INSTALL := $(INSTALL)_IPV6 endif ifneq "$(findstring IPV6,$(INSTDIRS))" "IPV6" INSTDIRS := $(INSTDIRS)_IPV6 endif endif INSTALLBASE = $(INSTALL)/$(BASEDIR) INSTDEVDIRS = \ $(INSTALL) \ $(INSTALLBASE) \ $(INSTALLBASE)/build \ $(INSTALLBASE)/include \ $(INSTALLBASE)/lib \ $(EOLIST) INSTDIRS += \ $(INSTALLBASE) \ $(INSTALLBASE)/bin \ $(INSTALLBASE)/cgi-bin \ $(INSTALLBASE)/conf \ $(INSTALLBASE)/conf/extra \ $(INSTALLBASE)/error \ $(INSTALLBASE)/htdocs \ $(INSTALLBASE)/icons \ $(INSTALLBASE)/logs \ $(INSTALLBASE)/man \ $(INSTALLBASE)/manual \ $(INSTALLBASE)/modules \ $(EOLIST) # # Common directories # SRC = $(subst \,/,$(AP_WORK)) APR = $(subst \,/,$(APR_WORK)) APRUTIL = $(subst \,/,$(APU_WORK)) APBUILD = $(SRC)/build STDMOD = $(SRC)/modules HTTPD = $(SRC)/modules/http DAV = $(SRC)/modules/dav NWOS = $(SRC)/os/netware SERVER = $(SRC)/server SUPMOD = $(SRC)/support APULDAP = $(APRUTIL)/ldap XML = $(APRUTIL)/xml APRTEST = $(APR)/test PCRE = $(PCRESRC) PREBUILD_INST = $(SRC)/nwprebuild # # Internal Libraries # APRLIB = $(APR)/$(OBJDIR)/aprlib.lib APRUTLIB = $(APRUTIL)/$(OBJDIR)/aprutil.lib APULDAPLIB = $(APULDAP)/$(OBJDIR)/apuldap.lib STMODLIB = $(STDMOD)/$(OBJDIR)/stdmod.lib PCRELIB = $(SRC)/$(OBJDIR)/pcre.lib NWOSLIB = $(NWOS)/$(OBJDIR)/netware.lib SERVLIB = $(SERVER)/$(OBJDIR)/server.lib HTTPDLIB = $(HTTPD)/$(OBJDIR)/httpd.lib XMLLIB = $(XML)/$(OBJDIR)/xmllib.lib # # Additional general defines # EnvironmentDefined = 1 endif # ifndef EnvironmentDefined # This is always set so that it will show up in lower directories ifdef Path Path = $(PATH) endif httpd-2.4.41/build/mkdir.sh0000755000000000000500000000317410455010104013773 0ustar rootsrc#!/bin/sh # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # mkdir.sh -- make directory hierarchy # # Based on `mkinstalldirs' from Noah Friedman # as of 1994-03-25, which was placed in the Public Domain. # Cleaned up for Apache's Autoconf-style Interface (APACI) # by Ralf S. Engelschall umask 022 errstatus=0 for file in ${1+"$@"} ; do set fnord `echo ":$file" |\ sed -e 's/^:\//%/' -e 's/^://' -e 's/\// /g' -e 's/^%/\//'` shift pathcomp= for d in ${1+"$@"}; do pathcomp="$pathcomp$d" case "$pathcomp" in -* ) pathcomp=./$pathcomp ;; ?: ) pathcomp="$pathcomp/" continue ;; esac if test ! -d "$pathcomp"; then echo "mkdir $pathcomp" 1>&2 mkdir "$pathcomp" || errstatus=$? fi pathcomp="$pathcomp/" done done exit $errstatus httpd-2.4.41/build/binbuild.sh0000755000000000000500000001732010455010104014453 0ustar rootsrc#!/bin/sh # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # binbuild.sh - Builds an Apache binary distribution. # Initially written by Lars Eilebrecht . OS=`./build/config.guess` PRINTPATH="build/PrintPath" APFULLDIR=`pwd` BUILD_DIR="$APFULLDIR/bindist" DEFAULT_DIR="/usr/local/apache2" APDIR="$APFULLDIR" APDIR=`basename $APDIR` CONFIGPARAM="--enable-layout=Apache --prefix=$BUILD_DIR --enable-mods-shared=most --with-expat=$APFULLDIR/srclib/apr-util/xml/expat --enable-static-support" VER=`echo $APDIR | sed s/httpd-//` TAR="`$PRINTPATH tar`" GZIP="`$PRINTPATH gzip`" COMPRESS="`$PRINTPATH compress`" MD5="`$PRINTPATH md5`" if [ x$MD5 = x ]; then OPENSSL="`$PRINTPATH openssl`" if [ x$OPENSSL != x ]; then MD5="$OPENSSL md5" fi fi if [ x$1 != x ]; then USER=$1 else USER="`build/buildinfo.sh -n %u@%h%d`" fi if [ ! -f ./ABOUT_APACHE ]; then echo "ERROR: The current directory contains no valid Apache distribution." echo "Please change the directory to the top level directory of a freshly" echo "unpacked Apache 2.0 source distribution and re-execute the script" echo "'./build/binbuild.sh'." exit 1; fi if [ -d ./CVS ]; then echo "ERROR: The current directory is a CVS checkout of Apache." echo "Only a standard Apache 2.0 source distribution should be used to" echo "create a binary distribution." exit 1; fi echo "Building Apache $VER binary distribution..." echo "Platform is \"$OS\"..." ( echo "Build log for Apache binary distribution" && \ echo "----------------------------------------------------------------------" && \ ./configure $CONFIGPARAM && \ echo "----------------------------------------------------------------------" && \ make clean && \ rm -rf bindist install-bindist.sh *.bindist echo "----------------------------------------------------------------------" && \ make && \ echo "----------------------------------------------------------------------" && \ make install root="bindist/" && \ echo "----------------------------------------------------------------------" && \ make clean && \ echo "----------------------------------------------------------------------" && \ echo "[EOF]" \ ) 2>&1 | tee build.log if [ ! -f ./bindist/bin/httpd ]; then echo "ERROR: Failed to build Apache. See \"build.log\" for details." exit 1; fi echo "Binary image successfully created..." ./bindist/bin/httpd -v echo "Creating supplementary files..." ( echo " " && \ echo "Apache $VER binary distribution" && \ echo "================================" && \ echo " " && \ echo "This binary distribution is usable on a \"$OS\"" && \ echo "system and was built by \"$USER\"." && \ echo "" && \ echo "The distribution contains all standard Apache modules as shared" && \ echo "objects. This allows you to enable or disable particular modules" && \ echo "with the LoadModule/AddModule directives in the configuration file" && \ echo "without the need to re-compile Apache." && \ echo "" && \ echo "See \"INSTALL.bindist\" on how to install the distribution." && \ echo " " && \ echo "NOTE: Please do not send support-related mails to the address mentioned" && \ echo " above or to any member of the Apache Group! Support questions" && \ echo " should be directed to the forums mentioned at" && \ echo " http://httpd.apache.org/lists.html#http-users" && \ echo " where some of the Apache team lurk, in the company of many other" && \ echo " Apache gurus who should be able to help." && \ echo " If you think you found a bug in Apache or have a suggestion please" && \ echo " visit the bug report page at http://httpd.apache.org/bug_report.html" && \ echo " " && \ echo "----------------------------------------------------------------------" && \ ./bindist/bin/httpd -V && \ echo "----------------------------------------------------------------------" \ ) > README.bindist cp README.bindist ../httpd-$VER-$OS.README ( echo " " && \ echo "Apache $VER binary installation" && \ echo "================================" && \ echo " " && \ echo "To install this binary distribution you have to execute the installation" && \ echo "script \"install-bindist.sh\" in the top-level directory of the distribution." && \ echo " " && \ echo "The script takes the ServerRoot directory into which you want to install" && \ echo "Apache as an option. If you omit the option the default path" && \ echo "\"$DEFAULT_DIR\" is used." && \ echo "Make sure you have write permissions in the target directory, e.g. switch" && \ echo "to user \"root\" before you execute the script." && \ echo " " && \ echo "See \"README.bindist\" for further details about this distribution." && \ echo " " && \ echo "Please note that this distribution includes the complete Apache source code." && \ echo "Therefore you may compile Apache yourself at any time if you have a compiler" && \ echo "installation on your system." && \ echo "See \"INSTALL\" for details on how to accomplish this." && \ echo " " \ ) > INSTALL.bindist sed -e "s%\@default_dir\@%$DEFAULT_DIR%" \ -e "s%\@ver\@%$VER%" \ -e "s%\@os\@%$OS%" \ build/install-bindist.sh.in > install-bindist.sh chmod 755 install-bindist.sh sed -e "s%$BUILD_DIR%$DEFAULT_DIR%" \ -e "s%^ServerAdmin.*%ServerAdmin you@your.address%" \ -e "s%#ServerName.*%#ServerName localhost%" \ bindist/conf/httpd-std.conf > bindist/conf/httpd.conf cp bindist/conf/httpd.conf bindist/conf/httpd-std.conf for one_file in apachectl envvars envvars-std; do sed -e "s%$BUILD_DIR%$DEFAULT_DIR%" \ bindist/bin/$one_file > bindist/bin/$one_file.tmp mv bindist/bin/$one_file.tmp bindist/bin/$one_file done echo "Creating distribution archive and readme file..." if [ ".`grep -i error build.log > /dev/null`" != . ]; then echo "ERROR: Failed to build Apache. See \"build.log\" for details." exit 1; else if [ "x$TAR" != "x" ]; then case "x$OS" in x*os390*) $TAR -cfU ../httpd-$VER-$OS.tar -C .. httpd-$VER;; *) (cd .. && $TAR -cf httpd-$VER-$OS.tar httpd-$VER);; esac if [ "x$GZIP" != "x" ]; then $GZIP -9 ../httpd-$VER-$OS.tar ARCHIVE=../httpd-$VER-$OS.tar.gz elif [ "x$COMPRESS" != "x" ]; then $COMPRESS ../httpd-$VER-$OS.tar ARCHIVE=../httpd-$VER-$OS.tar.Z else echo "WARNING: Could not find a 'gzip' program!" echo " tar archive is not compressed." ARCHIVE=../httpd-$VER-$OS.tar fi else echo "ERROR: Could not find a 'tar' program!" echo " Please execute the following commands manually:" echo " tar -cf ../httpd-$VER-$OS.tar ." echo " gzip -9 ../httpd-$VER-$OS.tar" fi if [ "x$MD5" != "x" ]; then $MD5 $ARCHIVE > $ARCHIVE.md5 fi if [ -f $ARCHIVE ] && [ -f ../httpd-$VER-$OS.README ]; then echo "Ready." echo "You can find the binary archive ($ARCHIVE)" echo "and the readme file (httpd-$VER-$OS.README) in the" echo "parent directory." exit 0; else echo "ERROR: Archive or README is missing." exit 1; fi fi httpd-2.4.41/build/default.pl0000644000000000000500000002555310151220336014317 0ustar rootsrc<< # Scandoc template file. # # This is an example set of templates that is designed to create several # different kinds of index files. It generates a "master index" which intended # for use with a frames browser; A "package index" which is the root page of # the index, and then "package files" containing documentation for all of the # classes within a single package. ###################################################################### ## For quick and superficial customization, ## simply change these variables $project_name = '[Apache]'; $company_logo = ''; # change this to an image tag. $copyright = '© 2000 [Apache Software Foundation]'; $image_directory = "../images/"; $bullet1_image = $image_directory . "ball1.gif"; $bullet2_image = $image_directory . "ball2.gif"; $bgcolor1 = "#FFFFFF"; $bgcolor2 = "#FFFFFF"; ###################################################################### ## Begin generating frame index file. file "index.html"; >> $project_name <body bgcolor="$bgcolor2" stylesrc="index.html"> <p>Some Documentation</p> </body> << ###################################################################### ## Begin generating master index file (left-hand frame). file "master.html"; >> Master Index

Master Index

<< ## For each package, generate an index entry. foreach $p (packages()) { $_ = $p->url; s/\s/%20/g; >>$(p.name)

<< foreach $e ($p->classes()) { $_ = $e->url; s/\s/%20/g; >>
  • $(e.fullname) << } foreach $e ($p->globals()) { $_ = $e->url; s/\s/%20/g; >>
  • $(e.fullname) << } >>
  • << } >> To-Do List

    << ###################################################################### ## Begin generating package index file file "packages.html"; >> $project_name -- Packages
    $company_logo

    Documentation for $project_name

    Package List

    << ## For each package, generate an index entry. foreach $p (packages()) { $_ = $p->url; s/\s/%20/g; >>$(p.name)
    << } >>


    $copyright
    Generated by ScanDoc $majorVersion.$minorVersion
    Last Updated: $date
    << ###################################################################### ## Generate "To-do list" file "to-do.html"; >> $project_name -- To-Do list $company_logo

    To-do list for $project_name

    << if (&todolistFiles()) { >>

    << foreach $f (&todolistFiles()) { my @m = &todolistEntries( $f ); if ($f =~ /([^\/]+)$/) { $f = $1; } >>$f:

      << foreach $text (@m) { if ($text) { print "
    • ", &processDescription( $text ), "\n"; } } >>
    << } } >>
    $copyright
    Generated by ScanDoc $majorVersion.$minorVersion
    Last Updated: $date
    << ###################################################################### ## Generate individual files for each package. my $p; foreach $p (packages()) { file $p->name() . ".html"; >> $project_name -- $(p.name)
    $project_name

    Package Name: $(p.name)

    << ## Generate class and member index at the top of the file. foreach $c ($p->classes()) { >>

    $(c.fullname)

    << } >>
    << ## Generate detailed class documentation foreach $c ($p->classes()) { ## Output searchable keyword list if ($c->keywords()) { print "\n"; } >>

    $(c.fullname)

    << # Output author tag if ($c->author()) { >><< >><< } # Output package version if ($c->version()) { >><< >><< } # Output Source file if ($c->sourcefile()) { >><< >><< } # Output base class list if ($c->baseclasses()) { >> << } # Output subclasses list if ($c->subclasses()) { >><< } # Output main class description >>
    Author:$(c.author)
    Version:$(c.version)
    Source:$(c.sourcefile)
    Base classes: << my @t = (); foreach $b ($c->baseclasses()) { my $name = $b->name(); if ($url = $b->url()) { push @t, "$name"; } else { push @t, $name; } } print join( ', ', @t ); >>
    Subclasses: << my @t = (); foreach $s ($c->subclasses()) { my $name = $s->name(); if ($url = $s->url()) { push @t, "$name"; } else { push @t, $name; } } print join( ', ', @t ); >>

    << print &processDescription( $c->description() ); # Output "see also" information if ($c->seealso()) { >>

    See Also
    << my @r = (); foreach $a ($c->seealso()) { my $name = $a->name(); if ($url = $a->url()) { push @r, "$name"; } else { push @r, $name; } } print join( ',', @r ); >>

    << } # Output class member index if ($c->members()) { print "

    Member Index

    \n"; print "<< } # Output class member variable documentation if ($c->membervars()) { print "

    Class Variables

    \n"; print "
    \n"; foreach $m ($c->membervars()) { &variable( $m ); } print "
    \n"; } # Output class member function documentation if ($c->memberfuncs()) { print "

    Class Methods

    \n"; print "
    \n"; foreach $m ($c->memberfuncs()) { &function( $m ); } print "
    \n"; } } # Output global variables if ($p->globalvars()) { >>

    Global Variables

    << foreach $m ($p->globalvars()) { &variable( $m ); } print "
    \n"; } # Output global functions if ($p->globalfuncs()) { >>

    Global Functions

    << foreach $m ($p->globalfuncs()) { &function( $m ); } print "
    \n"; } >>
    $copyright
    Generated by ScanDoc $majorVersion.$minorVersion
    Last Updated: $date
    << } # end of foreach (packages) loop ###################################################################### ## Subroutine to generate documentation for a member function or global function sub function { local ($f) = @_; if ($f->keywords()) { >> << } >>
    $(f.fullname);
    << print &processDescription( $f->description() ); >>

    << if ($f->params()) { >>
    Parameters
    << foreach $a ($f->params()) { >> << } >>
    $(a.name)<< print &processDescription( $a->description() ); >>
    << } if ($f->returnValue()) { >>
    Return Value
    << print &processDescription( $f->returnValue() ); >>

    << } if ($f->exceptions()) { >>

    Exceptions
    << foreach $a ($f->exceptions()) { >> << } >>

    $(a.name)<< print &processDescription( $a->description() ); >>

    << } if ($f->seealso()) { >>
    See Also
    << my @r = (); foreach $a ($f->seealso()) { my $name = $a->name(); if ($url = $a->url()) { push @r, "$name"; } else { push @r, $name; } } print join( ',', @r ); >>

    << } >>

    << } ###################################################################### ## Subroutine to generate documentation for a member variable or global variable. sub variable { local ($v) = @_; if ($v->keywords()) { print ""; } >>
    $(v.fullname);
    <description() );>>

    << if ($v->seealso()) { >>
    See Also
    << $comma = 0; foreach $a ($v->seealso()) { if ($comma) { print ","; } $comma = 1; >>$(a.name) << } >>

    << } >>

    << } ###################################################################### sub processDescription { local ($_) = @_; s/^\s+//; # Remove whitespace from beginning s/\s+$/\n/; # Remove whitespace from end s/\n\n/

    \n/g; # Replace multiple CR's with paragraph markers s:\@heading(.*)\n:

    $1

    :; # Handle heading text # Handle embedded image tags s:\@caution:

    :; s:\@warning:

    :; s:\@bug:

    :; s:\@tip:

    :; return $_; } httpd-2.4.41/build/library.mk0000644000000000000500000000204410455012627014332 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # The build environment was provided by Sascha Schumann. LTLIBRARY_OBJECTS = $(LTLIBRARY_SOURCES:.c=.lo) $(LTLIBRARY_OBJECTS_X) $(LTLIBRARY_NAME): $(LTLIBRARY_OBJECTS) $(LTLIBRARY_DEPENDENCIES) $(LINK) -static $(LTLIBRARY_LDFLAGS) $(LTLIBRARY_OBJECTS) $(LTLIBRARY_LIBADD) httpd-2.4.41/build/rules.mk.in0000644000000000000500000001701712030610607014424 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # The build environment was originally provided by Sascha Schumann. @ap_make_include@ @ap_make_delimiter@$(top_builddir)/build/config_vars.mk@ap_make_delimiter@ # Combine all of the flags together in the proper order so that # the user-defined flags can always override the configure ones, if needed. # Note that includes are listed after the flags because -I options have # left-to-right precedence and CPPFLAGS may include user-defined overrides. # The "MOD_" prefixed variable are provided to allow modules to insert their # (per-subdirectory) settings through definitions in modules.mk, with highest # precedence. # ALL_CFLAGS = $(MOD_CFLAGS) $(EXTRA_CFLAGS) $(NOTEST_CFLAGS) $(CFLAGS) ALL_CPPFLAGS = $(DEFS) $(INTERNAL_CPPFLAGS) $(MOD_CPPFLAGS) $(EXTRA_CPPFLAGS) $(NOTEST_CPPFLAGS) $(CPPFLAGS) ALL_CXXFLAGS = $(MOD_CXXFLAGS) $(EXTRA_CXXFLAGS) $(NOTEST_CXXFLAGS) $(CXXFLAGS) ALL_LDFLAGS = $(MOD_LDFLAGS) $(EXTRA_LDFLAGS) $(NOTEST_LDFLAGS) $(LDFLAGS) ALL_LIBS = $(MOD_LIBS) $(EXTRA_LIBS) $(NOTEST_LIBS) $(LIBS) ALL_INCLUDES = $(MOD_INCLUDES) $(INCLUDES) $(EXTRA_INCLUDES) # Compile commands BASE_CC = $(CC) $(ALL_CFLAGS) $(ALL_CPPFLAGS) $(ALL_INCLUDES) BASE_CXX = $(CXX) $(ALL_CXXFLAGS) $(ALL_CPPFLAGS) $(ALL_INCLUDES) COMPILE = $(BASE_CC) $(PICFLAGS) CXX_COMPILE = $(BASE_CXX) $(PICFLAGS) SH_COMPILE = $(LIBTOOL) --mode=compile $(BASE_CC) $(SHLTCFLAGS) -c $< && touch $@ SH_CXX_COMPILE = $(LIBTOOL) --mode=compile $(BASE_CXX) $(SHLTCFLAGS) -c $< && touch $@ LT_COMPILE = $(LIBTOOL) --mode=compile $(COMPILE) $(LTCFLAGS) -c $< && touch $@ LT_CXX_COMPILE = $(LIBTOOL) --mode=compile $(CXX_COMPILE) $(LTCFLAGS) -c $< && touch $@ # Link-related commands LINK = $(LIBTOOL) --mode=link $(CC) $(ALL_CFLAGS) $(PILDFLAGS) $(LT_LDFLAGS) $(ALL_LDFLAGS) -o $@ SH_LINK = $(SH_LIBTOOL) --mode=link $(CC) $(ALL_CFLAGS) $(LT_LDFLAGS) $(ALL_LDFLAGS) $(SH_LDFLAGS) $(CORE_IMPLIB) $(SH_LIBS) -o $@ MOD_LINK = $(LIBTOOL) --mode=link $(CC) $(ALL_CFLAGS) -static $(LT_LDFLAGS) $(ALL_LDFLAGS) -o $@ # Cross compile commands # Helper programs INSTALL_DATA = $(INSTALL) -m 644 INSTALL_PROGRAM = $(INSTALL) -m 755 $(INSTALL_PROG_FLAGS) # # Standard build rules # all: all-recursive depend: depend-recursive clean: clean-recursive distclean: distclean-recursive extraclean: extraclean-recursive install: install-recursive shared-build: shared-build-recursive all-recursive install-recursive depend-recursive: @otarget=`echo $@|sed s/-recursive//`; \ list=' $(BUILD_SUBDIRS) $(SUBDIRS)'; \ for i in $$list; do \ if test -d "$$i"; then \ target="$$otarget"; \ echo "Making $$target in $$i"; \ if test "$$i" = "."; then \ made_local=yes; \ target="local-$$target"; \ fi; \ (cd $$i && $(MAKE) $$target) || exit 1; \ fi; \ done; \ if test "$$otarget" = "all" && test -z '$(TARGETS)'; then \ made_local=yes; \ fi; \ if test "$$made_local" != "yes"; then \ $(MAKE) "local-$$otarget" || exit 1; \ fi clean-recursive distclean-recursive extraclean-recursive: @otarget=`echo $@|sed s/-recursive//`; \ list='$(CLEAN_SUBDIRS) $(SUBDIRS)'; \ for i in $$list; do \ if test -d "$$i"; then \ target="$$otarget"; \ echo "Making $$target in $$i"; \ if test "$$i" = "."; then \ made_local=yes; \ target="local-$$target"; \ fi; \ (cd $$i && $(MAKE) $$target); \ fi; \ done; \ if test "$$otarget" = "all" && test -z '$(TARGETS)'; then \ made_local=yes; \ fi; \ if test "$$made_local" != "yes"; then \ $(MAKE) "local-$$otarget"; \ fi shared-build-recursive: @if test `pwd` = "$(top_builddir)"; then \ $(PRE_SHARED_CMDS) ; \ fi; \ list='$(SUBDIRS)'; for i in $$list; do \ target="shared-build"; \ if test "$$i" = "."; then \ made_local=yes; \ target="local-shared-build"; \ fi; \ if test "$$i" != "srclib"; then \ (cd $$i && $(MAKE) $$target) || exit 1; \ fi; \ done; \ if test -f 'modules.mk'; then \ if test -n '$(SHARED_TARGETS)'; then \ echo "Building shared: $(SHARED_TARGETS)"; \ if test "$$made_local" != "yes"; then \ $(MAKE) "local-shared-build" || exit 1; \ fi; \ fi; \ fi; \ if test `pwd` = "$(top_builddir)"; then \ $(POST_SHARED_CMDS) ; \ fi local-all: $(TARGETS) local-shared-build: $(SHARED_TARGETS) local-depend: x-local-depend @if test -n "`ls $(srcdir)/*.c 2> /dev/null`"; then \ rm -f .deps; \ list='$(srcdir)/*.c'; \ for i in $$list; do \ $(MKDEP) $(ALL_CPPFLAGS) $(ALL_INCLUDES) $$i | sed 's/\.o:/.lo:/' >> .deps; \ done; \ sed 's/\.lo:/.slo:/' < .deps > .deps.$$; \ cat .deps.$$ >> .deps; \ rm -f .deps.$$; \ fi local-clean: x-local-clean rm -f *.o *.lo *.slo *.obj *.a *.la $(CLEAN_TARGETS) $(TARGETS) rm -rf .libs local-distclean: local-clean x-local-distclean rm -f .deps Makefile $(DISTCLEAN_TARGETS) local-extraclean: local-distclean x-local-extraclean @if test -n "$(EXTRACLEAN_TARGETS)"; then \ echo "rm -f $(EXTRACLEAN_TARGETS)"; \ rm -f $(EXTRACLEAN_TARGETS) ; \ fi program-install: $(TARGETS) $(SHARED_TARGETS) @if test -n '$(bin_PROGRAMS)'; then \ test -d $(DESTDIR)$(bindir) || $(MKINSTALLDIRS) $(DESTDIR)$(bindir); \ list='$(bin_PROGRAMS)'; for i in $$list; do \ $(INSTALL_PROGRAM) $$i $(DESTDIR)$(bindir); \ done; \ fi @if test -n '$(sbin_PROGRAMS)'; then \ test -d $(DESTDIR)$(sbindir) || $(MKINSTALLDIRS) $(DESTDIR)$(sbindir); \ list='$(sbin_PROGRAMS)'; for i in $$list; do \ $(INSTALL_PROGRAM) $$i $(DESTDIR)$(sbindir); \ done; \ fi local-install: program-install $(INSTALL_TARGETS) # to be filled in by the actual Makefile if extra commands are needed x-local-depend x-local-clean x-local-distclean x-local-extraclean: # # Implicit rules for creating outputs from input files # CXX_SUFFIX = cpp SHLIB_SUFFIX = so .SUFFIXES: .SUFFIXES: .S .c .$(CXX_SUFFIX) .lo .o .s .y .l .slo .def .la .c.o: $(COMPILE) -c $< .s.o: $(COMPILE) -c $< .c.lo: $(LT_COMPILE) .s.lo: $(LT_COMPILE) .c.slo: $(SH_COMPILE) .$(CXX_SUFFIX).lo: $(LT_CXX_COMPILE) .$(CXX_SUFFIX).slo: $(SH_CXX_COMPILE) .y.c: $(YACC) $(YFLAGS) $< && mv y.tab.c $*.c if test -f y.tab.h; then \ if cmp -s y.tab.h $*.h; then rm -f y.tab.h; else mv y.tab.h $*.h; fi; \ else :; fi .l.c: $(LEX) $(LFLAGS) $< && mv $(LEX_OUTPUT_ROOT).c $@ # Makes an import library from a def file .def.la: $(LIBTOOL) --mode=compile $(MK_IMPLIB) -o $@ $< # # Dependencies # @ap_make_include@ @ap_make_delimiter@$(builddir)/.deps@ap_make_delimiter@ .PHONY: all all-recursive install-recursive local-all $(PHONY_TARGETS) \ shared-build shared-build-recursive local-shared-build \ depend depend-recursive local-depend x-local-depend \ clean clean-recursive local-clean x-local-clean \ distclean distclean-recursive local-distclean x-local-distclean \ extraclean extraclean-recursive local-extraclean x-local-extraclean \ install local-install docs $(INSTALL_TARGETS) httpd-2.4.41/build/mkconfNW.awk0000644000000000000500000001422112114453434014562 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. BEGIN { A["ServerRoot"] = "\${SRVROOT}" A["Port"] = PORT A["SSLPort"] = SSLPORT A["cgidir"] = "cgi-bin" A["logfiledir"] = "logs" A["htdocsdir"] = "htdocs" A["sysconfdir"] = "conf" A["iconsdir"] = "icons" A["manualdir"] = "manual" A["runtimedir"] = "logs" A["errordir"] = "error" A["proxycachedir"] = "proxy" B["htdocsdir"] = A["ServerRoot"]"/"A["htdocsdir"] B["iconsdir"] = A["ServerRoot"]"/"A["iconsdir"] B["manualdir"] = A["ServerRoot"]"/"A["manualdir"] B["errordir"] = A["ServerRoot"]"/"A["errordir"] B["proxycachedir"] = A["ServerRoot"]"/"A["proxycachedir"] B["cgidir"] = A["ServerRoot"]"/"A["cgidir"] B["logfiledir"] = A["logfiledir"] B["sysconfdir"] = A["sysconfdir"] B["runtimedir"] = A["runtimedir"] } /^ServerRoot / { print "Define SRVROOT \"SYS:/" BDIR "\"" print "" } /@@LoadModule@@/ { print "#LoadModule access_compat_module modules/accesscompat.nlm" print "#LoadModule actions_module modules/actions.nlm" print "#LoadModule allowmethods_module modules/allowmethods.nlm" print "#LoadModule auth_basic_module modules/authbasc.nlm" print "#LoadModule auth_digest_module modules/authdigt.nlm" print "#LoadModule authn_anon_module modules/authnano.nlm" print "#LoadModule authn_dbd_module modules/authndbd.nlm" print "#LoadModule authn_dbm_module modules/authndbm.nlm" print "#LoadModule authn_file_module modules/authnfil.nlm" print "#LoadModule authz_dbd_module modules/authzdbd.nlm" print "#LoadModule authz_dbm_module modules/authzdbm.nlm" print "#LoadModule authz_groupfile_module modules/authzgrp.nlm" print "#LoadModule authz_user_module modules/authzusr.nlm" print "#LoadModule authnz_ldap_module modules/authnzldap.nlm" print "#LoadModule ldap_module modules/utilldap.nlm" print "#LoadModule asis_module modules/mod_asis.nlm" print "LoadModule autoindex_module modules/autoindex.nlm" print "#LoadModule buffer_module modules/modbuffer.nlm" print "#LoadModule cern_meta_module modules/cernmeta.nlm" print "LoadModule cgi_module modules/mod_cgi.nlm" print "#LoadModule data_module modules/mod_data.nlm" print "#LoadModule dav_module modules/mod_dav.nlm" print "#LoadModule dav_fs_module modules/moddavfs.nlm" print "#LoadModule dav_lock_module modules/moddavlk.nlm" print "#LoadModule expires_module modules/expires.nlm" print "#LoadModule filter_module modules/mod_filter.nlm" print "#LoadModule ext_filter_module modules/extfiltr.nlm" print "#LoadModule file_cache_module modules/filecach.nlm" print "#LoadModule headers_module modules/headers.nlm" print "#LoadModule ident_module modules/modident.nlm" print "#LoadModule imagemap_module modules/imagemap.nlm" print "#LoadModule info_module modules/info.nlm" print "#LoadModule log_forensic_module modules/forensic.nlm" print "#LoadModule logio_module modules/modlogio.nlm" print "#LoadModule mime_magic_module modules/mimemagi.nlm" print "#LoadModule proxy_module modules/proxy.nlm" print "#LoadModule proxy_connect_module modules/proxycon.nlm" print "#LoadModule proxy_http_module modules/proxyhtp.nlm" print "#LoadModule proxy_ftp_module modules/proxyftp.nlm" print "#LoadModule rewrite_module modules/rewrite.nlm" print "#LoadModule speling_module modules/speling.nlm" print "#LoadModule status_module modules/status.nlm" print "#LoadModule unique_id_module modules/uniqueid.nlm" print "#LoadModule usertrack_module modules/usertrk.nlm" print "#LoadModule version_module modules/modversion.nlm" print "#LoadModule userdir_module modules/userdir.nlm" print "#LoadModule vhost_alias_module modules/vhost.nlm" if (MODSSL) { print "#LoadModule socache_dbm_module modules/socachedbm.nlm" print "#LoadModule socache_shmcb_module modules/socacheshmcb.nlm" print "#LoadModule ssl_module modules/mod_ssl.nlm" } print "" next } match ($0,/^#SSLSessionCache +"dbm:/) { sub(/^#/, "") } match ($0,/^SSLSessionCache +"shmcb:/) { sub(/^SSLSessionCache/, "#SSLSessionCache") } match ($0,/^# Mutex +default +file:@rel_runtimedir@/) { sub(/file:@rel_runtimedir@/, "default") } match ($0,/@@.*@@/) { s=substr($0,RSTART+2,RLENGTH-4) sub(/@@.*@@/,A[s],$0) } match ($0,/@rel_.*@/) { s=substr($0,RSTART+5,RLENGTH-6) sub(/@rel_.*@/,A[s],$0) } match ($0,/@exp_.*@/) { s=substr($0,RSTART+5,RLENGTH-6) sub(/@exp_.*@/,B[s],$0) } match ($0,/@nonssl_.*@/) { s=substr($0,RSTART+8,RLENGTH-9) sub(/@nonssl_.*@/,B[s],$0) } match ($0,/^$/) { print "#" print "# CGIMapExtension: Technique for locating the interpreter for CGI scripts." print "# The special interpreter path \"OS\" can be used for NLM CGIs." print "#" print "#CGIMapExtension OS .cgi" print "CGIMapExtension SYS:/perl/Perlcgi/perlcgi.nlm .pl" print "" } { print } END { if ((ARGV[1] ~ /httpd.conf.in/) && !BSDSKT) { print "" print "#" print "# SecureListen: Allows you to securely bind Apache to specific IP addresses " print "# and/or ports (mod_nwssl)." print "#" print "# Change this to SecureListen on specific IP addresses as shown below to " print "# prevent Apache from glomming onto all bound IP addresses (0.0.0.0)" print "#" print "#SecureListen "SSLPORT" \"SSL CertificateDNS\"" } print "" } httpd-2.4.41/build/make_var_export.awk0000644000000000000500000000341610455010104016217 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # Based on apr's make_export.awk, which is # based on Ryan Bloom's make_export.pl /^#[ \t]*if(def)? (AP[RU]?_|!?defined).*/ { if (old_filename != FILENAME) { if (old_filename != "") printf("%s", line) macro_no = 0 found = 0 count = 0 old_filename = FILENAME line = "" } macro_stack[macro_no++] = macro macro = substr($0, length($1)+2) count++ line = line "#ifdef " macro "\n" next } /^#[ \t]*endif/ { if (count > 0) { count-- line = line "#endif /* " macro " */\n" macro = macro_stack[--macro_no] } if (count == 0) { if (found != 0) { printf("%s", line) } line = "" } next } function add_symbol (sym_name) { if (count) { found++ } for (i = 0; i < count; i++) { line = line "\t" } line = line sym_name "\n" if (count == 0) { printf("%s", line) line = "" } } /^[ \t]*(extern[ \t]+)?AP[RU]?_DECLARE_DATA .*;$/ { varname = $NF; gsub( /[*;]/, "", varname); gsub( /\[.*\]/, "", varname); add_symbol(varname); } END { printf("%s", line) } httpd-2.4.41/build/NWGNUmakefile0000644000000000000500000000705111750052732014657 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(APR_WORK)/build \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files FILES_prebuild_headers = \ $(SRC)/include/ap_config_layout.h \ $(NWOS)/test_char.h \ $(PCRE)/config.h \ $(PCRE)/pcre.h \ $(EOLIST) nlms :: libs $(NWOS)/httpd.imp $(DAV)/main/dav.imp $(STDMOD)/cache/mod_cache.imp libs :: chkapr $(NWOS)/chartables.c $(DAV)/main/dav.imp : make_nw_export.awk $(DAV)/main/mod_dav.h @echo $(DL)GEN $@$(DL) $(AWK) -v EXPPREFIX=AP$(VERSION_MAJMIN) -f $^ >$@ $(STDMOD)/cache/mod_cache.imp: make_nw_export.awk $(STDMOD)/cache/mod_cache.h $(STDMOD)/cache/cache_util.h @echo $(DL)GEN $@$(DL) $(AWK) -v EXPPREFIX=AP$(VERSION_MAJMIN) -f $^ >$@ $(NWOS)/httpd.imp : make_nw_export.awk nw_export.i @echo $(DL)GEN $@$(DL) $(AWK) -v EXPPREFIX=AP$(VERSION_MAJMIN) -f $^ >$@ nw_export.i : nw_export.inc $(FILES_prebuild_headers) cc.opt @echo $(DL)GEN $@$(DL) $(CC) $< @cc.opt cc.opt : NWGNUmakefile $(APBUILD)/NWGNUenvironment.inc $(APBUILD)/NWGNUtail.inc $(APBUILD)/NWGNUhead.inc @echo $(DL)-P$(DL)> $@ @echo $(DL)-EP$(DL)>> $@ @echo $(DL)-nosyspath$(DL)>> $@ @echo $(DL)-w nocmdline$(DL)>> $@ @echo $(DL)$(DEFINES)$(DL)>> $@ @echo $(DL)-I$(SRC)/include$(DL)>> $@ @echo $(DL)-I$(HTTPD)$(DL)>> $@ @echo $(DL)-I$(STDMOD)/aaa$(DL)>> $@ @echo $(DL)-I$(STDMOD)/core$(DL)>> $@ @echo $(DL)-I$(NWOS)$(DL)>> $@ @echo $(DL)-I$(SERVER)/mpm/netware$(DL)>> $@ @echo $(DL)-I$(APR)/include$(DL)>> $@ @echo $(DL)-I$(APRUTIL)/include$(DL)>> $@ @echo $(DL)-ir $(NOVELLLIBC)$(DL)>> $@ $(SRC)/include/ap_config_layout.h: $(NWOS)/netware_config_layout.h @echo Creating $@ $(call COPY,$<,$@) $(PCRE)/%.h: $(PCRE)/%.h.generic @echo Creating $@ $(call COPY,$<,$@) $(PCRE)/%.h: $(PCRE)/%.hw @echo Creating $@ $(call COPY,$<,$@) ifneq "$(BUILDTOOL_AS_NLM)" "1" $(NWOS)/chartables.c: dftables.exe $(PCRE)/dftables.c @echo $(DL)GEN $@$(DL) $< $@ %.exe: $(PCRE)/%.c $(PCRE)/config.h $(PCRE)/pcre.h @echo $(DL)Creating Build Helper $@$(DL) $(CC_FOR_BUILD) $(CFLAGS_FOR_BUILD) -DHAVE_CONFIG_H $< -o $@ $(NWOS)/test_char.h: gen_test_char.exe $(SERVER)/gen_test_char.c @echo $(DL)GEN $@$(DL) $< > $@ %.exe: $(SERVER)/%.c @echo $(DL)Creating Build Helper $@$(DL) $(CC_FOR_BUILD) $(CFLAGS_FOR_BUILD) -DCROSS_COMPILE $< -o $@ else ifneq "$(wildcard $(NWOS)/chartables.c)" "$(NWOS)/chartables.c" $(error Error: required source $(NWOS)/chartables.c not found!) endif ifneq "$(wildcard $(NWOS)/test_char.h)" "$(NWOS)/test_char.h" $(error Error: required header $(NWOS)/test_char.h not found!) endif endif # # Check for minimum APR version # chkapr: $(APR)/build/nw_ver.awk $(APR)/include/apr_version.h @echo $(DL)Checking for APR version...$(DL) $(AWK) -v WANTED=$(APR_WANTED) -f $^ # # You can use this target if all that is needed is to copy files to the # installation area # install :: nlms FORCE clean :: $(call DEL,$(SRC)/include/ap_config_layout.h) $(call DEL,$(PCRE)/config.h) $(call DEL,$(PCRE)/pcre.h) $(call DEL,$(STDMOD)/cache/mod_cache.imp) $(call DEL,$(DAV)/main/dav.imp) $(call DEL,$(NWOS)/httpd.imp) $(call DEL,nw_export.i) $(call DEL,cc.opt) $(call DEL,NWGNUversion.inc) ifneq "$(BUILDTOOL_AS_NLM)" "1" $(call DEL,$(NWOS)/chartables.c) $(call DEL,$(NWOS)/test_char.h) $(call DEL,dftables.exe) $(call DEL,gen_test_char.exe) endif # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/build/sysv_makefile0000755000000000000500000000223610455012627015127 0ustar rootsrc#! /bin/sh # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # The build environment was provided by Sascha Schumann. # cwd must be top_srcdir test -f build/sysv_makefile || exit 2 test -f bsd_converted || exit 1 tmpfile=`mktemp /tmp/sysv_makefile.XXXXXX 2>/dev/null` || tmpfile="tmp.$$" for i in build/*.mk; do sed 's/^\.include "\(.*\)"/include \1/' $i >$tmpfile \ && cp $tmpfile $i done rm -f $tmpfile rm bsd_converted exit 0 httpd-2.4.41/build/nw_ver.awk0000644000000000000500000000417112144305165014343 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. BEGIN { # fetch Apache version numbers from input file and write them to STDOUT while ((getline < ARGV[1]) > 0) { if (match ($0, /^#define AP_SERVER_COPYRIGHT \\/)) { if (((getline < ARGV[1]) > 0) && (split($0, c, "\"") == 3)) { copyright_str = c[2]; } } else if (match ($0, /^#define AP_SERVER_MAJORVERSION_NUMBER /)) { ver_major = $3; } else if (match ($0, /^#define AP_SERVER_MINORVERSION_NUMBER /)) { ver_minor = $3; } else if (match ($0, /^#define AP_SERVER_PATCHLEVEL_NUMBER/)) { ver_patch = $3; } else if (match ($0, /^#define AP_SERVER_DEVBUILD_BOOLEAN/)) { ver_devbuild = $3; } } if (ver_devbuild) { ver_dev = "-dev" if (ARGV[2]) { while ((getline < ARGV[2]) > 0) { if (match ($0, /^\/repos\/asf\/!svn\/ver\/[0-9]+\/httpd\/httpd\/(trunk|branches\/[0-9]\.[0-9]\.x)$/)) { gsub(/^\/repos\/asf\/!svn\/ver\/|\/httpd\/httpd\/(trunk|branches\/[0-9]\.[0-9]\.x)$/, "", $0) ver_dev = svn_rev = "-r" $0 } } } } ver_nlm = ver_major "," ver_minor "," ver_patch; ver_str = ver_major "." ver_minor "." ver_patch ver_dev; print "VERSION = " ver_nlm ""; print "VERSION_STR = " ver_str ""; print "VERSION_MAJMIN = " ver_major ver_minor ""; print "COPYRIGHT_STR = " copyright_str ""; print "SVN_REVISION = " svn_rev ""; } httpd-2.4.41/build/config.sub0000755000000000000500000007536313523273355014344 0ustar rootsrc#! /bin/sh # Configuration validation subroutine script. # Copyright 1992-2019 Free Software Foundation, Inc. timestamp='2019-01-01' # This file is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, see . # # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that # program. This Exception is an additional permission under section 7 # of the GNU General Public License, version 3 ("GPLv3"). # Please send patches to . # # Configuration subroutine to validate and canonicalize a configuration type. # Supply the specified configuration type as an argument. # If it is invalid, we print an error message on stderr and exit with code 1. # Otherwise, we print the canonical config type on stdout and succeed. # You can get the latest version of this script from: # https://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.sub # This file is supposed to be the same for all GNU packages # and recognize all the CPU types, system types and aliases # that are meaningful with *any* GNU software. # Each package is responsible for reporting which valid configurations # it does not support. The user should be able to distinguish # a failure to support a valid configuration from a meaningless # configuration. # The goal of this file is to map all the various variations of a given # machine specification into a single specification in the form: # CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM # or in some cases, the newer four-part form: # CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM # It is wrong to echo any other type of specification. me=`echo "$0" | sed -e 's,.*/,,'` usage="\ Usage: $0 [OPTION] CPU-MFR-OPSYS or ALIAS Canonicalize a configuration name. Options: -h, --help print this help, then exit -t, --time-stamp print date of last modification, then exit -v, --version print version number, then exit Report bugs and patches to ." version="\ GNU config.sub ($timestamp) Copyright 1992-2019 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE." help=" Try \`$me --help' for more information." # Parse command line while test $# -gt 0 ; do case $1 in --time-stamp | --time* | -t ) echo "$timestamp" ; exit ;; --version | -v ) echo "$version" ; exit ;; --help | --h* | -h ) echo "$usage"; exit ;; -- ) # Stop option processing shift; break ;; - ) # Use stdin as input. break ;; -* ) echo "$me: invalid option $1$help" >&2 exit 1 ;; *local*) # First pass through any local machine types. echo "$1" exit ;; * ) break ;; esac done case $# in 0) echo "$me: missing argument$help" >&2 exit 1;; 1) ;; *) echo "$me: too many arguments$help" >&2 exit 1;; esac # Split fields of configuration type IFS="-" read field1 field2 field3 field4 <&2 exit 1 ;; *-*-*-*) basic_machine=$field1-$field2 os=$field3-$field4 ;; *-*-*) # Ambiguous whether COMPANY is present, or skipped and KERNEL-OS is two # parts maybe_os=$field2-$field3 case $maybe_os in nto-qnx* | linux-gnu* | linux-android* | linux-dietlibc \ | linux-newlib* | linux-musl* | linux-uclibc* | uclinux-uclibc* \ | uclinux-gnu* | kfreebsd*-gnu* | knetbsd*-gnu* | netbsd*-gnu* \ | netbsd*-eabi* | kopensolaris*-gnu* | cloudabi*-eabi* \ | storm-chaos* | os2-emx* | rtmk-nova*) basic_machine=$field1 os=$maybe_os ;; android-linux) basic_machine=$field1-unknown os=linux-android ;; *) basic_machine=$field1-$field2 os=$field3 ;; esac ;; *-*) # A lone config we happen to match not fitting any pattern case $field1-$field2 in decstation-3100) basic_machine=mips-dec os= ;; *-*) # Second component is usually, but not always the OS case $field2 in # Prevent following clause from handling this valid os sun*os*) basic_machine=$field1 os=$field2 ;; # Manufacturers dec* | mips* | sequent* | encore* | pc533* | sgi* | sony* \ | att* | 7300* | 3300* | delta* | motorola* | sun[234]* \ | unicom* | ibm* | next | hp | isi* | apollo | altos* \ | convergent* | ncr* | news | 32* | 3600* | 3100* \ | hitachi* | c[123]* | convex* | sun | crds | omron* | dg \ | ultra | tti* | harris | dolphin | highlevel | gould \ | cbm | ns | masscomp | apple | axis | knuth | cray \ | microblaze* | sim | cisco \ | oki | wec | wrs | winbond) basic_machine=$field1-$field2 os= ;; *) basic_machine=$field1 os=$field2 ;; esac ;; esac ;; *) # Convert single-component short-hands not valid as part of # multi-component configurations. case $field1 in 386bsd) basic_machine=i386-pc os=bsd ;; a29khif) basic_machine=a29k-amd os=udi ;; adobe68k) basic_machine=m68010-adobe os=scout ;; alliant) basic_machine=fx80-alliant os= ;; altos | altos3068) basic_machine=m68k-altos os= ;; am29k) basic_machine=a29k-none os=bsd ;; amdahl) basic_machine=580-amdahl os=sysv ;; amiga) basic_machine=m68k-unknown os= ;; amigaos | amigados) basic_machine=m68k-unknown os=amigaos ;; amigaunix | amix) basic_machine=m68k-unknown os=sysv4 ;; apollo68) basic_machine=m68k-apollo os=sysv ;; apollo68bsd) basic_machine=m68k-apollo os=bsd ;; aros) basic_machine=i386-pc os=aros ;; aux) basic_machine=m68k-apple os=aux ;; balance) basic_machine=ns32k-sequent os=dynix ;; blackfin) basic_machine=bfin-unknown os=linux ;; cegcc) basic_machine=arm-unknown os=cegcc ;; convex-c1) basic_machine=c1-convex os=bsd ;; convex-c2) basic_machine=c2-convex os=bsd ;; convex-c32) basic_machine=c32-convex os=bsd ;; convex-c34) basic_machine=c34-convex os=bsd ;; convex-c38) basic_machine=c38-convex os=bsd ;; cray) basic_machine=j90-cray os=unicos ;; crds | unos) basic_machine=m68k-crds os= ;; da30) basic_machine=m68k-da30 os= ;; decstation | pmax | pmin | dec3100 | decstatn) basic_machine=mips-dec os= ;; delta88) basic_machine=m88k-motorola os=sysv3 ;; dicos) basic_machine=i686-pc os=dicos ;; djgpp) basic_machine=i586-pc os=msdosdjgpp ;; ebmon29k) basic_machine=a29k-amd os=ebmon ;; es1800 | OSE68k | ose68k | ose | OSE) basic_machine=m68k-ericsson os=ose ;; gmicro) basic_machine=tron-gmicro os=sysv ;; go32) basic_machine=i386-pc os=go32 ;; h8300hms) basic_machine=h8300-hitachi os=hms ;; h8300xray) basic_machine=h8300-hitachi os=xray ;; h8500hms) basic_machine=h8500-hitachi os=hms ;; harris) basic_machine=m88k-harris os=sysv3 ;; hp300) basic_machine=m68k-hp ;; hp300bsd) basic_machine=m68k-hp os=bsd ;; hp300hpux) basic_machine=m68k-hp os=hpux ;; hppaosf) basic_machine=hppa1.1-hp os=osf ;; hppro) basic_machine=hppa1.1-hp os=proelf ;; i386mach) basic_machine=i386-mach os=mach ;; vsta) basic_machine=i386-pc os=vsta ;; isi68 | isi) basic_machine=m68k-isi os=sysv ;; m68knommu) basic_machine=m68k-unknown os=linux ;; magnum | m3230) basic_machine=mips-mips os=sysv ;; merlin) basic_machine=ns32k-utek os=sysv ;; mingw64) basic_machine=x86_64-pc os=mingw64 ;; mingw32) basic_machine=i686-pc os=mingw32 ;; mingw32ce) basic_machine=arm-unknown os=mingw32ce ;; monitor) basic_machine=m68k-rom68k os=coff ;; morphos) basic_machine=powerpc-unknown os=morphos ;; moxiebox) basic_machine=moxie-unknown os=moxiebox ;; msdos) basic_machine=i386-pc os=msdos ;; msys) basic_machine=i686-pc os=msys ;; mvs) basic_machine=i370-ibm os=mvs ;; nacl) basic_machine=le32-unknown os=nacl ;; ncr3000) basic_machine=i486-ncr os=sysv4 ;; netbsd386) basic_machine=i386-pc os=netbsd ;; netwinder) basic_machine=armv4l-rebel os=linux ;; news | news700 | news800 | news900) basic_machine=m68k-sony os=newsos ;; news1000) basic_machine=m68030-sony os=newsos ;; necv70) basic_machine=v70-nec os=sysv ;; nh3000) basic_machine=m68k-harris os=cxux ;; nh[45]000) basic_machine=m88k-harris os=cxux ;; nindy960) basic_machine=i960-intel os=nindy ;; mon960) basic_machine=i960-intel os=mon960 ;; nonstopux) basic_machine=mips-compaq os=nonstopux ;; os400) basic_machine=powerpc-ibm os=os400 ;; OSE68000 | ose68000) basic_machine=m68000-ericsson os=ose ;; os68k) basic_machine=m68k-none os=os68k ;; paragon) basic_machine=i860-intel os=osf ;; parisc) basic_machine=hppa-unknown os=linux ;; pw32) basic_machine=i586-unknown os=pw32 ;; rdos | rdos64) basic_machine=x86_64-pc os=rdos ;; rdos32) basic_machine=i386-pc os=rdos ;; rom68k) basic_machine=m68k-rom68k os=coff ;; sa29200) basic_machine=a29k-amd os=udi ;; sei) basic_machine=mips-sei os=seiux ;; sequent) basic_machine=i386-sequent os= ;; sps7) basic_machine=m68k-bull os=sysv2 ;; st2000) basic_machine=m68k-tandem os= ;; stratus) basic_machine=i860-stratus os=sysv4 ;; sun2) basic_machine=m68000-sun os= ;; sun2os3) basic_machine=m68000-sun os=sunos3 ;; sun2os4) basic_machine=m68000-sun os=sunos4 ;; sun3) basic_machine=m68k-sun os= ;; sun3os3) basic_machine=m68k-sun os=sunos3 ;; sun3os4) basic_machine=m68k-sun os=sunos4 ;; sun4) basic_machine=sparc-sun os= ;; sun4os3) basic_machine=sparc-sun os=sunos3 ;; sun4os4) basic_machine=sparc-sun os=sunos4 ;; sun4sol2) basic_machine=sparc-sun os=solaris2 ;; sun386 | sun386i | roadrunner) basic_machine=i386-sun os= ;; sv1) basic_machine=sv1-cray os=unicos ;; symmetry) basic_machine=i386-sequent os=dynix ;; t3e) basic_machine=alphaev5-cray os=unicos ;; t90) basic_machine=t90-cray os=unicos ;; toad1) basic_machine=pdp10-xkl os=tops20 ;; tpf) basic_machine=s390x-ibm os=tpf ;; udi29k) basic_machine=a29k-amd os=udi ;; ultra3) basic_machine=a29k-nyu os=sym1 ;; v810 | necv810) basic_machine=v810-nec os=none ;; vaxv) basic_machine=vax-dec os=sysv ;; vms) basic_machine=vax-dec os=vms ;; vxworks960) basic_machine=i960-wrs os=vxworks ;; vxworks68) basic_machine=m68k-wrs os=vxworks ;; vxworks29k) basic_machine=a29k-wrs os=vxworks ;; xbox) basic_machine=i686-pc os=mingw32 ;; ymp) basic_machine=ymp-cray os=unicos ;; *) basic_machine=$1 os= ;; esac ;; esac # Decode 1-component or ad-hoc basic machines case $basic_machine in # Here we handle the default manufacturer of certain CPU types. It is in # some cases the only manufacturer, in others, it is the most popular. w89k) cpu=hppa1.1 vendor=winbond ;; op50n) cpu=hppa1.1 vendor=oki ;; op60c) cpu=hppa1.1 vendor=oki ;; ibm*) cpu=i370 vendor=ibm ;; orion105) cpu=clipper vendor=highlevel ;; mac | mpw | mac-mpw) cpu=m68k vendor=apple ;; pmac | pmac-mpw) cpu=powerpc vendor=apple ;; # Recognize the various machine names and aliases which stand # for a CPU type and a company and sometimes even an OS. 3b1 | 7300 | 7300-att | att-7300 | pc7300 | safari | unixpc) cpu=m68000 vendor=att ;; 3b*) cpu=we32k vendor=att ;; bluegene*) cpu=powerpc vendor=ibm os=cnk ;; decsystem10* | dec10*) cpu=pdp10 vendor=dec os=tops10 ;; decsystem20* | dec20*) cpu=pdp10 vendor=dec os=tops20 ;; delta | 3300 | motorola-3300 | motorola-delta \ | 3300-motorola | delta-motorola) cpu=m68k vendor=motorola ;; dpx2*) cpu=m68k vendor=bull os=sysv3 ;; encore | umax | mmax) cpu=ns32k vendor=encore ;; elxsi) cpu=elxsi vendor=elxsi os=${os:-bsd} ;; fx2800) cpu=i860 vendor=alliant ;; genix) cpu=ns32k vendor=ns ;; h3050r* | hiux*) cpu=hppa1.1 vendor=hitachi os=hiuxwe2 ;; hp3k9[0-9][0-9] | hp9[0-9][0-9]) cpu=hppa1.0 vendor=hp ;; hp9k2[0-9][0-9] | hp9k31[0-9]) cpu=m68000 vendor=hp ;; hp9k3[2-9][0-9]) cpu=m68k vendor=hp ;; hp9k6[0-9][0-9] | hp6[0-9][0-9]) cpu=hppa1.0 vendor=hp ;; hp9k7[0-79][0-9] | hp7[0-79][0-9]) cpu=hppa1.1 vendor=hp ;; hp9k78[0-9] | hp78[0-9]) # FIXME: really hppa2.0-hp cpu=hppa1.1 vendor=hp ;; hp9k8[67]1 | hp8[67]1 | hp9k80[24] | hp80[24] | hp9k8[78]9 | hp8[78]9 | hp9k893 | hp893) # FIXME: really hppa2.0-hp cpu=hppa1.1 vendor=hp ;; hp9k8[0-9][13679] | hp8[0-9][13679]) cpu=hppa1.1 vendor=hp ;; hp9k8[0-9][0-9] | hp8[0-9][0-9]) cpu=hppa1.0 vendor=hp ;; i*86v32) cpu=`echo "$1" | sed -e 's/86.*/86/'` vendor=pc os=sysv32 ;; i*86v4*) cpu=`echo "$1" | sed -e 's/86.*/86/'` vendor=pc os=sysv4 ;; i*86v) cpu=`echo "$1" | sed -e 's/86.*/86/'` vendor=pc os=sysv ;; i*86sol2) cpu=`echo "$1" | sed -e 's/86.*/86/'` vendor=pc os=solaris2 ;; j90 | j90-cray) cpu=j90 vendor=cray os=${os:-unicos} ;; iris | iris4d) cpu=mips vendor=sgi case $os in irix*) ;; *) os=irix4 ;; esac ;; miniframe) cpu=m68000 vendor=convergent ;; *mint | mint[0-9]* | *MiNT | *MiNT[0-9]*) cpu=m68k vendor=atari os=mint ;; news-3600 | risc-news) cpu=mips vendor=sony os=newsos ;; next | m*-next) cpu=m68k vendor=next case $os in nextstep* ) ;; ns2*) os=nextstep2 ;; *) os=nextstep3 ;; esac ;; np1) cpu=np1 vendor=gould ;; op50n-* | op60c-*) cpu=hppa1.1 vendor=oki os=proelf ;; pa-hitachi) cpu=hppa1.1 vendor=hitachi os=hiuxwe2 ;; pbd) cpu=sparc vendor=tti ;; pbb) cpu=m68k vendor=tti ;; pc532) cpu=ns32k vendor=pc532 ;; pn) cpu=pn vendor=gould ;; power) cpu=power vendor=ibm ;; ps2) cpu=i386 vendor=ibm ;; rm[46]00) cpu=mips vendor=siemens ;; rtpc | rtpc-*) cpu=romp vendor=ibm ;; sde) cpu=mipsisa32 vendor=sde os=${os:-elf} ;; simso-wrs) cpu=sparclite vendor=wrs os=vxworks ;; tower | tower-32) cpu=m68k vendor=ncr ;; vpp*|vx|vx-*) cpu=f301 vendor=fujitsu ;; w65) cpu=w65 vendor=wdc ;; w89k-*) cpu=hppa1.1 vendor=winbond os=proelf ;; none) cpu=none vendor=none ;; leon|leon[3-9]) cpu=sparc vendor=$basic_machine ;; leon-*|leon[3-9]-*) cpu=sparc vendor=`echo "$basic_machine" | sed 's/-.*//'` ;; *-*) IFS="-" read cpu vendor <&2 exit 1 ;; esac ;; esac # Here we canonicalize certain aliases for manufacturers. case $vendor in digital*) vendor=dec ;; commodore*) vendor=cbm ;; *) ;; esac # Decode manufacturer-specific aliases for certain operating systems. if [ x$os != x ] then case $os in # First match some system type aliases that might get confused # with valid system types. # solaris* is a basic system type, with this one exception. auroraux) os=auroraux ;; bluegene*) os=cnk ;; solaris1 | solaris1.*) os=`echo $os | sed -e 's|solaris1|sunos4|'` ;; solaris) os=solaris2 ;; unixware*) os=sysv4.2uw ;; gnu/linux*) os=`echo $os | sed -e 's|gnu/linux|linux-gnu|'` ;; # es1800 is here to avoid being matched by es* (a different OS) es1800*) os=ose ;; # Some version numbers need modification chorusos*) os=chorusos ;; isc) os=isc2.2 ;; sco6) os=sco5v6 ;; sco5) os=sco3.2v5 ;; sco4) os=sco3.2v4 ;; sco3.2.[4-9]*) os=`echo $os | sed -e 's/sco3.2./sco3.2v/'` ;; sco3.2v[4-9]* | sco5v6*) # Don't forget version if it is 3.2v4 or newer. ;; scout) # Don't match below ;; sco*) os=sco3.2v2 ;; psos*) os=psos ;; # Now accept the basic system types. # The portable systems comes first. # Each alternative MUST end in a * to match a version number. # sysv* is not here because it comes later, after sysvr4. gnu* | bsd* | mach* | minix* | genix* | ultrix* | irix* \ | *vms* | esix* | aix* | cnk* | sunos | sunos[34]*\ | hpux* | unos* | osf* | luna* | dgux* | auroraux* | solaris* \ | sym* | kopensolaris* | plan9* \ | amigaos* | amigados* | msdos* | newsos* | unicos* | aof* \ | aos* | aros* | cloudabi* | sortix* \ | nindy* | vxsim* | vxworks* | ebmon* | hms* | mvs* \ | clix* | riscos* | uniplus* | iris* | isc* | rtu* | xenix* \ | knetbsd* | mirbsd* | netbsd* \ | bitrig* | openbsd* | solidbsd* | libertybsd* \ | ekkobsd* | kfreebsd* | freebsd* | riscix* | lynxos* \ | bosx* | nextstep* | cxux* | aout* | elf* | oabi* \ | ptx* | coff* | ecoff* | winnt* | domain* | vsta* \ | udi* | eabi* | lites* | ieee* | go32* | aux* | hcos* \ | chorusrdb* | cegcc* | glidix* \ | cygwin* | msys* | pe* | moss* | proelf* | rtems* \ | midipix* | mingw32* | mingw64* | linux-gnu* | linux-android* \ | linux-newlib* | linux-musl* | linux-uclibc* \ | uxpv* | beos* | mpeix* | udk* | moxiebox* \ | interix* | uwin* | mks* | rhapsody* | darwin* \ | openstep* | oskit* | conix* | pw32* | nonstopux* \ | storm-chaos* | tops10* | tenex* | tops20* | its* \ | os2* | vos* | palmos* | uclinux* | nucleus* \ | morphos* | superux* | rtmk* | windiss* \ | powermax* | dnix* | nx6 | nx7 | sei* | dragonfly* \ | skyos* | haiku* | rdos* | toppers* | drops* | es* \ | onefs* | tirtos* | phoenix* | fuchsia* | redox* | bme* \ | midnightbsd* | amdhsa* | unleashed* | emscripten*) # Remember, each alternative MUST END IN *, to match a version number. ;; qnx*) case $cpu in x86 | i*86) ;; *) os=nto-$os ;; esac ;; hiux*) os=hiuxwe2 ;; nto-qnx*) ;; nto*) os=`echo $os | sed -e 's|nto|nto-qnx|'` ;; sim | xray | os68k* | v88r* \ | windows* | osx | abug | netware* | os9* \ | macos* | mpw* | magic* | mmixware* | mon960* | lnews*) ;; linux-dietlibc) os=linux-dietlibc ;; linux*) os=`echo $os | sed -e 's|linux|linux-gnu|'` ;; lynx*178) os=lynxos178 ;; lynx*5) os=lynxos5 ;; lynx*) os=lynxos ;; mac*) os=`echo "$os" | sed -e 's|mac|macos|'` ;; opened*) os=openedition ;; os400*) os=os400 ;; sunos5*) os=`echo "$os" | sed -e 's|sunos5|solaris2|'` ;; sunos6*) os=`echo "$os" | sed -e 's|sunos6|solaris3|'` ;; wince*) os=wince ;; utek*) os=bsd ;; dynix*) os=bsd ;; acis*) os=aos ;; atheos*) os=atheos ;; syllable*) os=syllable ;; 386bsd) os=bsd ;; ctix* | uts*) os=sysv ;; nova*) os=rtmk-nova ;; ns2) os=nextstep2 ;; nsk*) os=nsk ;; # Preserve the version number of sinix5. sinix5.*) os=`echo $os | sed -e 's|sinix|sysv|'` ;; sinix*) os=sysv4 ;; tpf*) os=tpf ;; triton*) os=sysv3 ;; oss*) os=sysv3 ;; svr4*) os=sysv4 ;; svr3) os=sysv3 ;; sysvr4) os=sysv4 ;; # This must come after sysvr4. sysv*) ;; ose*) os=ose ;; *mint | mint[0-9]* | *MiNT | MiNT[0-9]*) os=mint ;; zvmoe) os=zvmoe ;; dicos*) os=dicos ;; pikeos*) # Until real need of OS specific support for # particular features comes up, bare metal # configurations are quite functional. case $cpu in arm*) os=eabi ;; *) os=elf ;; esac ;; nacl*) ;; ios) ;; none) ;; *-eabi) ;; *) echo Invalid configuration \`"$1"\': system \`"$os"\' not recognized 1>&2 exit 1 ;; esac else # Here we handle the default operating systems that come with various machines. # The value should be what the vendor currently ships out the door with their # machine or put another way, the most popular os provided with the machine. # Note that if you're going to try to match "-MANUFACTURER" here (say, # "-sun"), then you have to tell the case statement up towards the top # that MANUFACTURER isn't an operating system. Otherwise, code above # will signal an error saying that MANUFACTURER isn't an operating # system, and we'll never get to this point. case $cpu-$vendor in score-*) os=elf ;; spu-*) os=elf ;; *-acorn) os=riscix1.2 ;; arm*-rebel) os=linux ;; arm*-semi) os=aout ;; c4x-* | tic4x-*) os=coff ;; c8051-*) os=elf ;; clipper-intergraph) os=clix ;; hexagon-*) os=elf ;; tic54x-*) os=coff ;; tic55x-*) os=coff ;; tic6x-*) os=coff ;; # This must come before the *-dec entry. pdp10-*) os=tops20 ;; pdp11-*) os=none ;; *-dec | vax-*) os=ultrix4.2 ;; m68*-apollo) os=domain ;; i386-sun) os=sunos4.0.2 ;; m68000-sun) os=sunos3 ;; m68*-cisco) os=aout ;; mep-*) os=elf ;; mips*-cisco) os=elf ;; mips*-*) os=elf ;; or32-*) os=coff ;; *-tti) # must be before sparc entry or we get the wrong os. os=sysv3 ;; sparc-* | *-sun) os=sunos4.1.1 ;; pru-*) os=elf ;; *-be) os=beos ;; *-ibm) os=aix ;; *-knuth) os=mmixware ;; *-wec) os=proelf ;; *-winbond) os=proelf ;; *-oki) os=proelf ;; *-hp) os=hpux ;; *-hitachi) os=hiux ;; i860-* | *-att | *-ncr | *-altos | *-motorola | *-convergent) os=sysv ;; *-cbm) os=amigaos ;; *-dg) os=dgux ;; *-dolphin) os=sysv3 ;; m68k-ccur) os=rtu ;; m88k-omron*) os=luna ;; *-next) os=nextstep ;; *-sequent) os=ptx ;; *-crds) os=unos ;; *-ns) os=genix ;; i370-*) os=mvs ;; *-gould) os=sysv ;; *-highlevel) os=bsd ;; *-encore) os=bsd ;; *-sgi) os=irix ;; *-siemens) os=sysv4 ;; *-masscomp) os=rtu ;; f30[01]-fujitsu | f700-fujitsu) os=uxpv ;; *-rom68k) os=coff ;; *-*bug) os=coff ;; *-apple) os=macos ;; *-atari*) os=mint ;; *-wrs) os=vxworks ;; *) os=none ;; esac fi # Here we handle the case where we know the os, and the CPU type, but not the # manufacturer. We pick the logical manufacturer. case $vendor in unknown) case $os in riscix*) vendor=acorn ;; sunos*) vendor=sun ;; cnk*|-aix*) vendor=ibm ;; beos*) vendor=be ;; hpux*) vendor=hp ;; mpeix*) vendor=hp ;; hiux*) vendor=hitachi ;; unos*) vendor=crds ;; dgux*) vendor=dg ;; luna*) vendor=omron ;; genix*) vendor=ns ;; clix*) vendor=intergraph ;; mvs* | opened*) vendor=ibm ;; os400*) vendor=ibm ;; ptx*) vendor=sequent ;; tpf*) vendor=ibm ;; vxsim* | vxworks* | windiss*) vendor=wrs ;; aux*) vendor=apple ;; hms*) vendor=hitachi ;; mpw* | macos*) vendor=apple ;; *mint | mint[0-9]* | *MiNT | MiNT[0-9]*) vendor=atari ;; vos*) vendor=stratus ;; esac ;; esac echo "$cpu-$vendor-$os" exit # Local variables: # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-start: "timestamp='" # time-stamp-format: "%:y-%02m-%02d" # time-stamp-end: "'" # End: httpd-2.4.41/build/installwinconf.awk0000644000000000000500000003626413446445467016125 0ustar rootsrc# # InstallConf.awk Apache HTTP 2.x script to rewrite the @@ServerRoot@@ # tags in httpd.conf.in to original\httpd.conf - then duplicate the # conf files to the 'live' configuration if they don't already exist. # # Note that we -don't- want the ARGV file list, so no additional {} blocks # are coded. Use explicit args (more reliable on Win32) and use the fact # that ARGV[] params are -not- '\' escaped to process the C:\Foo\Bar Win32 # path format. Note that awk var=path would not succeed, since it -does- # escape backslashes in the assignment. Note also, a trailing space is # required for paths, or the trailing quote following the backslash is # escaped, rather than parsed. # BEGIN { domainname = ARGV[1]; servername = ARGV[2]; serveradmin = ARGV[3]; serverport = ARGV[4]; serversslport = ARGV[5]; serverroot = ARGV[6]; sourceroot = ARGV[7]; delete ARGV[7]; delete ARGV[6]; delete ARGV[5]; delete ARGV[4]; delete ARGV[3]; delete ARGV[2]; delete ARGV[1]; gsub( /\\/, "/", serverroot ); gsub( /[ \/]+$/, "", serverroot ); tstfl = serverroot "/logs/install.log" confroot = serverroot "/conf/"; confdefault = confroot "original/"; if ( sourceroot != "docs/conf/" ) { sourceroot = serverroot "/" sourceroot; } usertree = ENVIRON["USERPROFILE"] if ( usertree > "" ) { gsub( /\\/, "/", usertree ); gsub( /\/[^\/]+$/, "", usertree ); } else { usertree = "C:/Documents and Settings"; } print "Installing Apache HTTP Server 2.x with" >tstfl; print " DomainName = " domainname >tstfl; print " ServerName = " servername >tstfl; print " ServerAdmin = " serveradmin >tstfl; print " ServerPort = " serverport >tstfl; print " ServerSslPort = " serversslport >tstfl; print " ServerRoot = " serverroot >tstfl; filelist["httpd.conf"] = "httpd.conf.in"; filelist["httpd-autoindex.conf"] = "httpd-autoindex.conf.in"; filelist["httpd-dav.conf"] = "httpd-dav.conf.in"; filelist["httpd-default.conf"] = "httpd-default.conf.in"; filelist["httpd-info.conf"] = "httpd-info.conf.in"; filelist["httpd-languages.conf"] = "httpd-languages.conf.in"; filelist["httpd-manual.conf"] = "httpd-manual.conf.in"; filelist["httpd-mpm.conf"] = "httpd-mpm.conf.in"; filelist["httpd-multilang-errordoc.conf"] = "httpd-multilang-errordoc.conf.in"; filelist["httpd-ssl.conf"] = "httpd-ssl.conf.in"; filelist["httpd-userdir.conf"] = "httpd-userdir.conf.in"; filelist["httpd-vhosts.conf"] = "httpd-vhosts.conf.in"; filelist["proxy-html.conf"] = "proxy-html.conf.in"; for ( conffile in filelist ) { if ( conffile == "httpd.conf" ) { srcfl = sourceroot filelist[conffile]; dstfl = confdefault conffile; bswarning = 1; } else { srcfl = sourceroot "extra/" filelist[conffile]; dstfl = confdefault "extra/" conffile; bswarning = 0; } while ( ( getline < srcfl ) > 0 ) { if ( bswarning && /^$/ ) { print "#" > dstfl; print "# NOTE: Where filenames are specified, you must use forward slashes" > dstfl; print "# instead of backslashes (e.g., \"c:/apache\" instead of \"c:\\apache\")." > dstfl; print "# If a drive letter is omitted, the drive on which httpd.exe is located" > dstfl; print "# will be used by default. It is recommended that you always supply" > dstfl; print "# an explicit drive letter in absolute paths to avoid confusion." > dstfl; bswarning = 0; } if ( /@@LoadModule@@/ ) { print "LoadModule access_compat_module modules/mod_access_compat.so" > dstfl; print "LoadModule actions_module modules/mod_actions.so" > dstfl; print "LoadModule alias_module modules/mod_alias.so" > dstfl; print "LoadModule allowmethods_module modules/mod_allowmethods.so" > dstfl; print "LoadModule asis_module modules/mod_asis.so" > dstfl; print "LoadModule auth_basic_module modules/mod_auth_basic.so" > dstfl; print "#LoadModule auth_digest_module modules/mod_auth_digest.so" > dstfl; print "#LoadModule auth_form_module modules/mod_auth_form.so" > dstfl; print "#LoadModule authn_anon_module modules/mod_authn_anon.so" > dstfl; print "LoadModule authn_core_module modules/mod_authn_core.so" > dstfl; print "#LoadModule authn_dbd_module modules/mod_authn_dbd.so" > dstfl; print "#LoadModule authn_dbm_module modules/mod_authn_dbm.so" > dstfl; print "LoadModule authn_file_module modules/mod_authn_file.so" > dstfl; print "#LoadModule authn_socache_module modules/mod_authn_socache.so" > dstfl; print "#LoadModule authnz_fcgi_module modules/mod_authnz_fcgi.so" > dstfl; print "#LoadModule authnz_ldap_module modules/mod_authnz_ldap.so" > dstfl; print "LoadModule authz_core_module modules/mod_authz_core.so" > dstfl; print "#LoadModule authz_dbd_module modules/mod_authz_dbd.so" > dstfl; print "#LoadModule authz_dbm_module modules/mod_authz_dbm.so" > dstfl; print "LoadModule authz_groupfile_module modules/mod_authz_groupfile.so" > dstfl; print "LoadModule authz_host_module modules/mod_authz_host.so" > dstfl; print "#LoadModule authz_owner_module modules/mod_authz_owner.so" > dstfl; print "LoadModule authz_user_module modules/mod_authz_user.so" > dstfl; print "LoadModule autoindex_module modules/mod_autoindex.so" > dstfl; print "#LoadModule brotli_module modules/mod_brotli.so" > dstfl; print "#LoadModule buffer_module modules/mod_buffer.so" > dstfl; print "#LoadModule cache_module modules/mod_cache.so" > dstfl; print "#LoadModule cache_disk_module modules/mod_cache_disk.so" > dstfl; print "#LoadModule cache_socache_module modules/mod_cache_socache.so" > dstfl; print "#LoadModule cern_meta_module modules/mod_cern_meta.so" > dstfl; print "LoadModule cgi_module modules/mod_cgi.so" > dstfl; print "#LoadModule charset_lite_module modules/mod_charset_lite.so" > dstfl; print "#LoadModule data_module modules/mod_data.so" > dstfl; print "#LoadModule dav_module modules/mod_dav.so" > dstfl; print "#LoadModule dav_fs_module modules/mod_dav_fs.so" > dstfl; print "#LoadModule dav_lock_module modules/mod_dav_lock.so" > dstfl; print "#LoadModule dbd_module modules/mod_dbd.so" > dstfl; print "#LoadModule deflate_module modules/mod_deflate.so" > dstfl; print "LoadModule dir_module modules/mod_dir.so" > dstfl; print "#LoadModule dumpio_module modules/mod_dumpio.so" > dstfl; print "LoadModule env_module modules/mod_env.so" > dstfl; print "#LoadModule expires_module modules/mod_expires.so" > dstfl; print "#LoadModule ext_filter_module modules/mod_ext_filter.so" > dstfl; print "#LoadModule file_cache_module modules/mod_file_cache.so" > dstfl; print "#LoadModule filter_module modules/mod_filter.so" > dstfl; print "#LoadModule http2_module modules/mod_http2.so" > dstfl; print "#LoadModule headers_module modules/mod_headers.so" > dstfl; print "#LoadModule heartbeat_module modules/mod_heartbeat.so" > dstfl; print "#LoadModule heartmonitor_module modules/mod_heartmonitor.so" > dstfl; print "#LoadModule ident_module modules/mod_ident.so" > dstfl; print "#LoadModule imagemap_module modules/mod_imagemap.so" > dstfl; print "LoadModule include_module modules/mod_include.so" > dstfl; print "#LoadModule info_module modules/mod_info.so" > dstfl; print "LoadModule isapi_module modules/mod_isapi.so" > dstfl; print "#LoadModule lbmethod_bybusyness_module modules/mod_lbmethod_bybusyness.so" > dstfl; print "#LoadModule lbmethod_byrequests_module modules/mod_lbmethod_byrequests.so" > dstfl; print "#LoadModule lbmethod_bytraffic_module modules/mod_lbmethod_bytraffic.so" > dstfl; print "#LoadModule lbmethod_heartbeat_module modules/mod_lbmethod_heartbeat.so" > dstfl; print "#LoadModule ldap_module modules/mod_ldap.so" > dstfl; print "#LoadModule logio_module modules/mod_logio.so" > dstfl; print "LoadModule log_config_module modules/mod_log_config.so" > dstfl; print "#LoadModule log_debug_module modules/mod_log_debug.so" > dstfl; print "#LoadModule log_forensic_module modules/mod_log_forensic.so" > dstfl; print "#LoadModule lua_module modules/mod_lua.so" > dstfl; print "#LoadModule macro_module modules/mod_macro.so" > dstfl; print "#LoadModule md_module modules/mod_md.so" > dstfl; print "LoadModule mime_module modules/mod_mime.so" > dstfl; print "#LoadModule mime_magic_module modules/mod_mime_magic.so" > dstfl; print "LoadModule negotiation_module modules/mod_negotiation.so" > dstfl; print "#LoadModule proxy_module modules/mod_proxy.so" > dstfl; print "#LoadModule proxy_ajp_module modules/mod_proxy_ajp.so" > dstfl; print "#LoadModule proxy_balancer_module modules/mod_proxy_balancer.so" > dstfl; print "#LoadModule proxy_connect_module modules/mod_proxy_connect.so" > dstfl; print "#LoadModule proxy_express_module modules/mod_proxy_express.so" > dstfl; print "#LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so" > dstfl; print "#LoadModule proxy_ftp_module modules/mod_proxy_ftp.so" > dstfl; print "#LoadModule proxy_hcheck_module modules/mod_proxy_hcheck.so" > dstfl; print "#LoadModule proxy_html_module modules/mod_proxy_html.so" > dstfl; print "#LoadModule proxy_http_module modules/mod_proxy_http.so" > dstfl; print "#LoadModule proxy_http2_module modules/mod_proxy_http2.so" > dstfl; print "#LoadModule proxy_scgi_module modules/mod_proxy_scgi.so" > dstfl; print "#LoadModule proxy_uwsgi_module modules/mod_proxy_uwsgi.so" > dstfl; print "#LoadModule proxy_wstunnel_module modules/mod_proxy_wstunnel.so" > dstfl; print "#LoadModule ratelimit_module modules/mod_ratelimit.so" > dstfl; print "#LoadModule reflector_module modules/mod_reflector.so" > dstfl; print "#LoadModule remoteip_module modules/mod_remoteip.so" > dstfl; print "#LoadModule request_module modules/mod_request.so" > dstfl; print "#LoadModule reqtimeout_module modules/mod_reqtimeout.so" > dstfl; print "#LoadModule rewrite_module modules/mod_rewrite.so" > dstfl; print "#LoadModule sed_module modules/mod_sed.so" > dstfl; print "#LoadModule session_module modules/mod_session.so" > dstfl; print "#LoadModule session_cookie_module modules/mod_session_cookie.so" > dstfl; print "#LoadModule session_crypto_module modules/mod_session_crypto.so" > dstfl; print "#LoadModule session_dbd_module modules/mod_session_dbd.so" > dstfl; print "LoadModule setenvif_module modules/mod_setenvif.so" > dstfl; print "#LoadModule slotmem_plain_module modules/mod_slotmem_plain.so" > dstfl; print "#LoadModule slotmem_shm_module modules/mod_slotmem_shm.so" > dstfl; print "#LoadModule socache_dbm_module modules/mod_socache_dbm.so" > dstfl; print "#LoadModule socache_memcache_module modules/mod_socache_memcache.so" > dstfl; print "#LoadModule socache_redis_module modules/mod_socache_redis.so" > dstfl; print "#LoadModule socache_shmcb_module modules/mod_socache_shmcb.so" > dstfl; print "#LoadModule speling_module modules/mod_speling.so" > dstfl; print "#LoadModule ssl_module modules/mod_ssl.so" > dstfl; print "#LoadModule status_module modules/mod_status.so" > dstfl; print "#LoadModule substitute_module modules/mod_substitute.so" > dstfl; print "#LoadModule unique_id_module modules/mod_unique_id.so" > dstfl; print "#LoadModule userdir_module modules/mod_userdir.so" > dstfl; print "#LoadModule usertrack_module modules/mod_usertrack.so" > dstfl; print "#LoadModule version_module modules/mod_version.so" > dstfl; print "#LoadModule vhost_alias_module modules/mod_vhost_alias.so" > dstfl; print "#LoadModule watchdog_module modules/mod_watchdog.so" > dstfl; print "#LoadModule xml2enc_module modules/mod_xml2enc.so" > dstfl; continue; } if ( /^ServerRoot / ) { print "Define SRVROOT \"" serverroot "\"" > dstfl; print "" > dstfl; } gsub( /@@ServerRoot@@/, "\${SRVROOT}" ); gsub( /@exp_cgidir@/, "\${SRVROOT}" "/cgi-bin" ); gsub( /@exp_sysconfdir@/, "\${SRVROOT}" "/conf" ); gsub( /@exp_errordir@/, "\${SRVROOT}" "/error" ); gsub( /@exp_htdocsdir@/, "\${SRVROOT}" "/htdocs" ); gsub( /@exp_iconsdir@/, "\${SRVROOT}" "/icons" ); gsub( /@exp_manualdir@/, "\${SRVROOT}" "/manual" ); gsub( /@exp_runtimedir@/, "\${SRVROOT}" "/logs" ); if ( gsub( /@exp_logfiledir@/, "\${SRVROOT}" "/logs" ) || gsub( /@rel_logfiledir@/, "logs" ) ) { gsub( /_log"/, ".log\"" ) } gsub( /@rel_runtimedir@/, "logs" ); gsub( /@rel_sysconfdir@/, "conf" ); gsub( /\/home\/\*\/public_html/, \ usertree "/*/My Documents/My Website" ); gsub( /UserDir public_html/, "UserDir \"My Documents/My Website\"" ); gsub( /@@ServerName@@|www.example.com/, servername ); gsub( /@@ServerAdmin@@|you@example.com/, serveradmin ); gsub( /@@DomainName@@|example.com/, domainname ); gsub( /@@Port@@/, serverport ); gsub( /@@SSLPort@@|443/, serversslport ); print $0 > dstfl; } close(srcfl); if ( close(dstfl) >= 0 ) { print "Rewrote " srcfl "\n to " dstfl > tstfl; if ( sourceroot != "docs/conf/" ) { gsub(/\//, "\\", srcfl); if (system("del 2>NUL \"" srcfl "\"")) { print "Failed to remove " srcfl > tstfl; } else { print "Successfully removed " srcfl > tstfl; } } } else { print "Failed to rewrite " srcfl "\n to " dstfl > tstfl; } filelist[conffile] = "extra/"; } filelist["httpd.conf"] = ""; filelist["charset.conv"] = ""; filelist["magic"] = ""; filelist["mime.types"] = ""; for ( conffile in filelist ) { srcfl = confdefault filelist[conffile] conffile; dstfl = confroot filelist[conffile] conffile; if ( ( getline < dstfl ) < 0 ) { while ( ( getline < srcfl ) > 0 ) { print $0 > dstfl; } print "Duplicated " srcfl "\n to " dstfl > tstfl; } else { print "Existing file " dstfl " preserved" > tstfl; } close(srcfl); close(dstfl); } if ( sourceroot != "docs/conf/" ) { srcfl = confdefault "installwinconf.awk"; gsub(/\//, "\\", srcfl); if (system("del 2>NUL \"" srcfl "\"")) { print "Failed to remove " srcfl > tstfl; } else { print "Successfully removed " srcfl > tstfl; } } close(tstfl); } httpd-2.4.41/build/NWGNUhead.inc0000644000000000000500000000525012143211133014537 0ustar rootsrc# # Obtain the global build environment # include $(AP_WORK)/build/NWGNUenvironment.inc # # Define base targets and rules # TARGETS = libs nlms install clobber_libs clobber_nlms clean installdev .PHONY : $(TARGETS) default all help $(NO_LICENSE_FILE) # Here is where we will use the NO_LICENSE_FILE variable to see if we need to # restart the make with it defined ifdef NO_LICENSE_FILE default: NO_LICENSE_FILE all: NO_LICENSE_FILE install :: NO_LICENSE_FILE installdev :: NO_LICENSE_FILE NO_LICENSE_FILE : $(MAKE) $(MAKECMDGOALS) -f NWGNUmakefile RELEASE=$(RELEASE) DEST="$(INSTALL)" LM_LICENSE_FILE="$(METROWERKS)/license.dat" else # LM_LICENSE_FILE must be defined so use the real targets default: $(SUBDIRS) libs nlms all: $(SUBDIRS) libs nlms install $(TARGETS) :: $(SUBDIRS) install :: nlms $(INSTDIRS) installdev :: $(INSTDEVDIRS) $(INSTDIRS) :: $(call MKDIR,$@) $(INSTDEVDIRS) :: $(call MKDIR,$@) endif #NO_LICENSE_FILE check help : @echo $(DL)targets for RELEASE=$(RELEASE):$(DL) @echo $(DL)(default) . . . . libs nlms$(DL) @echo $(DL)all . . . . . . . does everything (libs nlms install)$(DL) @echo $(DL)libs. . . . . . . builds all libs$(DL) @echo $(DL)nlms. . . . . . . builds all nlms$(DL) @echo $(DL)install . . . . . builds libs and nlms and copies install files to$(DL) @echo $(DL) "$(INSTALL)"$(DL) @echo $(DL)installdev. . . . copies headers and files needed for development to$(DL) @echo $(DL) "$(INSTALL)"$(DL) @echo $(DL)clean . . . . . . deletes $(OBJDIR) dirs, *.err, and *.map$(DL) @echo $(DL)clobber_all . . . deletes all possible output from the make$(DL) @echo $(DL)clobber_install . deletes all files in $(INSTALL)$(DL) @$(ECHONL) @echo $(DL)Multiple targets can be used on a single nmake command line -$(DL) @echo $(DL)(i.e. $(MAKE) clean all)$(DL) @$(ECHONL) @echo $(DL)You can also specify RELEASE=debug, RELEASE=noopt, or RELEASE=optimized$(DL) @echo $(DL)The default is RELEASE=optimized$(DL) clobber_all :: clean clobber_install clobber_prebuild clobber_install :: $(call RMDIR,$(INSTALL)) clobber_prebuild :: $(call RMDIR,$(PREBUILD_INST)) # # build recursive targets # $(SUBDIRS) : FORCE ifneq "$(MAKECMDGOALS)" "clean" ifneq "$(findstring clobber_,$(MAKECMDGOALS))" "clobber_" @$(ECHONL) @echo $(DL)Building $(CURDIR)/$@$(DL) endif endif $(MAKE) -C $@ $(MAKECMDGOALS) -f NWGNUmakefile RELEASE=$(RELEASE) DEST="$(INSTALL)" LM_LICENSE_FILE="$(LM_LICENSE_FILE)" @$(ECHONL) FORCE: # # Standard targets # clean :: $(SUBDIRS) @echo $(DL)Cleaning up $(CURDIR)$(DL) $(call RMDIR,$(OBJDIR)) $(call DEL,*.err) $(call DEL,*.map) $(call DEL,*.tmp) # $(call DEL,*.d) $(OBJDIR) :: $(call MKDIR,$@) httpd-2.4.41/build/install-bindist.sh.in0000755000000000000500000001175210455010104016373 0ustar rootsrc#!/bin/sh # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # Usage: install-bindist.sh [ServerRoot] # This script installs the Apache binary distribution and # was automatically created by binbuild.sh. lmkdir() { path="" dirs=`echo $1 | sed -e 's%/% %g'` mode=$2 set -- ${dirs} for d in ${dirs} do path="${path}/$d" if test ! -d "${path}" ; then mkdir ${path} if test $? -ne 0 ; then echo "Failed to create directory: ${path}" exit 1 fi chmod ${mode} ${path} fi done } lcopy() { from=$1 to=$2 dmode=$3 fmode=$4 test -d ${to} || lmkdir ${to} ${dmode} (cd ${from} && tar -cf - *) | (cd ${to} && tar -xf -) if test "X${fmode}" != X ; then find ${to} -type f -print | xargs chmod ${fmode} fi if test "X${dmode}" != X ; then find ${to} -type d -print | xargs chmod ${dmode} fi } ## ## determine path to (optional) Perl interpreter ## PERL=no-perl5-on-this-system perls='perl5 perl' path=`echo $PATH | sed -e 's/:/ /g'` found_perl=0 for dir in ${path} ; do for pperl in ${perls} ; do if test -f "${dir}/${pperl}" ; then if `${dir}/${pperl} -v >/dev/null 2>&1` ; then PERL="${dir}/${pperl}" found_perl=1 break fi fi done if test $found_perl = 1 ; then break fi done if [ .$1 = . ] then SR=@default_dir@ else SR=$1 fi echo "Installing binary distribution for platform @os@" echo "into directory $SR ..." lmkdir $SR 755 lmkdir $SR/proxy 750 lmkdir $SR/logs 755 lmkdir $SR/build 755 lcopy bindist/build $SR/build 750 750 lcopy bindist/man $SR/man 755 644 if [ -d bindist/modules ] then lcopy bindist/modules $SR/modules 750 750 fi lcopy bindist/include $SR/include 755 644 lcopy bindist/icons $SR/icons 755 644 lcopy bindist/manual $SR/manual 755 644 lcopy bindist/cgi-bin $SR/cgi-bin 750 750 if [ -f $SR/bin/envvars ] then echo "[Preserving existing envvars settings.]" cp -p $SR/bin/envvars ./envvars.orig HAD_ENVVARS=yes else HAD_ENVVARS=no fi lcopy bindist/bin $SR/bin 750 750 if [ $HAD_ENVVARS = yes ] then cp -p ./envvars.orig $SR/bin/envvars rm ./envvars.orig fi lcopy bindist/lib $SR/lib 750 750 if [ -d $SR/conf ] then echo "[Preserving existing configuration files.]" cp bindist/conf/*-std.conf $SR/conf/ else lcopy bindist/conf $SR/conf 750 640 sed -e "s%@default_dir@%$SR%" $SR/conf/httpd-std.conf > $SR/conf/httpd.conf fi if [ -d $SR/htdocs ] then echo "[Preserving existing htdocs directory.]" else lcopy bindist/htdocs $SR/htdocs 755 644 fi if [ -d $SR/error ] then echo "[Preserving existing error documents directory.]" else lcopy bindist/error $SR/error 755 644 fi sed -e "s;^#!\@perlbin\@.*;#!$PERL;" -e "s;\@exp_installbuilddir\@;$SR/build;" \ support/apxs.in > $SR/bin/apxs PRE=`grep "^prefix = " bindist/build/config_vars.mk` PRE=`echo $PRE | sed -e "s;prefix = ;;"` sed -e "s;$PRE;$SR;" bindist/build/config_vars.mk > $SR/build/config_vars.mk sed -e "s;^#!/.*;#!$PERL;" bindist/bin/dbmmanage > $SR/bin/dbmmanage sed -e "s%@default_dir@%$SR%" \ -e "s%^HTTPD=.*$%HTTPD=\"$SR/bin/httpd -d $SR\"%" bindist/bin/apachectl > $SR/bin/apachectl sed -e "s%@default_dir@%$SR%" \ bindist/bin/envvars-std > $SR/bin/envvars-std if [ $HAD_ENVVARS = no ] then cp -p $SR/bin/envvars-std $SR/bin/envvars fi echo "Ready." echo " +--------------------------------------------------------+" echo " | You now have successfully installed the Apache @ver@ |" echo " | HTTP server. To verify that Apache actually works |" echo " | correctly you should first check the (initially |" echo " | created or preserved) configuration files: |" echo " | |" echo " | $SR/conf/httpd.conf" echo " | |" echo " | You should then be able to immediately fire up |" echo " | Apache the first time by running: |" echo " | |" echo " | $SR/bin/apachectl start " echo " | |" echo " | Thanks for using Apache. The Apache Group |" echo " | http://www.apache.org/ |" echo " +--------------------------------------------------------+" echo " " httpd-2.4.41/build/make_nw_export.awk0000644000000000000500000000644611733744063016103 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # Based on apr's make_export.awk, which is # based on Ryan Bloom's make_export.pl # BEGIN { } function add_symbol(sym_name) { sub(" ", "", sym_name) exports[++idx] = sym_name } # List of functions that we don't support, yet?? #/ap_some_name/{next} /ap_mpm_pod_/{next} /^[ \t]*(AP|DAV|CACHE)([RU]|_CORE)?_DECLARE[^(]*[(][^)]*[)]([^ ]* )*[^(]+[(]/ { sub("[ \t]*(AP|DAV|CACHE)([RU]|_CORE)?_DECLARE[^(]*[(][^)]*[)][ \t]*", "") sub("[(].*", "") sub("([^ ]* (^([ \t]*[(])))+", "") add_symbol($0) next } /^[ \t]*AP_DECLARE_HOOK[^(]*[(][^)]*/ { split($0, args, ",") symbol = args[2] sub("^[ \t]+", "", symbol) sub("[ \t]+$", "", symbol) add_symbol("ap_hook_" symbol) add_symbol("ap_hook_get_" symbol) add_symbol("ap_run_" symbol) next } /^[ \t]*AP[RU]?_DECLARE_EXTERNAL_HOOK[^(]*[(][^)]*/ { split($0, args, ",") prefix = args[1] sub("^.*[(]", "", prefix) symbol = args[4] sub("^[ \t]+", "", symbol) sub("[ \t]+$", "", symbol) add_symbol(prefix "_hook_" symbol) add_symbol(prefix "_hook_get_" symbol) add_symbol(prefix "_run_" symbol) next } /^[ \t]*APR_POOL_DECLARE_ACCESSOR[^(]*[(][^)]*[)]/ { sub("[ \t]*APR_POOL_DECLARE_ACCESSOR[^(]*[(]", "", $0) sub("[)].*$", "", $0) add_symbol("apr_" $0 "_pool_get") next } /^[ \t]*APR_DECLARE_INHERIT_SET[^(]*[(][^)]*[)]/ { sub("[ \t]*APR_DECLARE_INHERIT_SET[^(]*[(]", "", $0) sub("[)].*$", "", $0) add_symbol("apr_" $0 "_inherit_set") next } /^[ \t]*APR_DECLARE_INHERIT_UNSET[^(]*[(][^)]*[)]/ { sub("[ \t]*APR_DECLARE_INHERIT_UNSET[^(]*[(]", "", $0) sub("[)].*$", "", $0) add_symbol("apr_" $0 "_inherit_unset") next } /^[ \t]*(extern[ \t]+)?AP[RU]?_DECLARE_DATA .*;/ { gsub(/[*;\n\r]/, "") gsub(/\[.*\]/, "") add_symbol($NF) } END { printf("Added %d symbols to export list.\n", idx) > "/dev/stderr" # sort symbols with shell sort increment = int(idx / 2) while (increment > 0) { for (i = increment+1; i <= idx; i++) { j = i temp = exports[i] while ((j >= increment+1) && (exports[j-increment] > temp)) { exports[j] = exports[j-increment] j -= increment } exports[j] = temp } if (increment == 2) increment = 1 else increment = int(increment*5/11) } # print the array printf(" (%s)\n", EXPPREFIX) while (x < idx - 1) { printf(" %s,\n", exports[++x]) } printf(" %s\n", exports[++x]) } httpd-2.4.41/build/config.guess0000755000000000000500000012673613523273355014702 0ustar rootsrc#! /bin/sh # Attempt to guess a canonical system name. # Copyright 1992-2019 Free Software Foundation, Inc. timestamp='2019-01-01' # This file is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, see . # # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that # program. This Exception is an additional permission under section 7 # of the GNU General Public License, version 3 ("GPLv3"). # # Originally written by Per Bothner; maintained since 2000 by Ben Elliston. # # You can get the latest version of this script from: # https://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.guess # # Please send patches to . me=`echo "$0" | sed -e 's,.*/,,'` usage="\ Usage: $0 [OPTION] Output the configuration name of the system \`$me' is run on. Options: -h, --help print this help, then exit -t, --time-stamp print date of last modification, then exit -v, --version print version number, then exit Report bugs and patches to ." version="\ GNU config.guess ($timestamp) Originally written by Per Bothner. Copyright 1992-2019 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE." help=" Try \`$me --help' for more information." # Parse command line while test $# -gt 0 ; do case $1 in --time-stamp | --time* | -t ) echo "$timestamp" ; exit ;; --version | -v ) echo "$version" ; exit ;; --help | --h* | -h ) echo "$usage"; exit ;; -- ) # Stop option processing shift; break ;; - ) # Use stdin as input. break ;; -* ) echo "$me: invalid option $1$help" >&2 exit 1 ;; * ) break ;; esac done if test $# != 0; then echo "$me: too many arguments$help" >&2 exit 1 fi # CC_FOR_BUILD -- compiler used by this script. Note that the use of a # compiler to aid in system detection is discouraged as it requires # temporary files to be created and, as you can see below, it is a # headache to deal with in a portable fashion. # Historically, `CC_FOR_BUILD' used to be named `HOST_CC'. We still # use `HOST_CC' if defined, but it is deprecated. # Portable tmp directory creation inspired by the Autoconf team. tmp= # shellcheck disable=SC2172 trap 'test -z "$tmp" || rm -fr "$tmp"' 0 1 2 13 15 set_cc_for_build() { : "${TMPDIR=/tmp}" # shellcheck disable=SC2039 { tmp=`(umask 077 && mktemp -d "$TMPDIR/cgXXXXXX") 2>/dev/null` && test -n "$tmp" && test -d "$tmp" ; } || { test -n "$RANDOM" && tmp=$TMPDIR/cg$$-$RANDOM && (umask 077 && mkdir "$tmp" 2>/dev/null) ; } || { tmp=$TMPDIR/cg-$$ && (umask 077 && mkdir "$tmp" 2>/dev/null) && echo "Warning: creating insecure temp directory" >&2 ; } || { echo "$me: cannot create a temporary directory in $TMPDIR" >&2 ; exit 1 ; } dummy=$tmp/dummy case ${CC_FOR_BUILD-},${HOST_CC-},${CC-} in ,,) echo "int x;" > "$dummy.c" for driver in cc gcc c89 c99 ; do if ($driver -c -o "$dummy.o" "$dummy.c") >/dev/null 2>&1 ; then CC_FOR_BUILD="$driver" break fi done if test x"$CC_FOR_BUILD" = x ; then CC_FOR_BUILD=no_compiler_found fi ;; ,,*) CC_FOR_BUILD=$CC ;; ,*,*) CC_FOR_BUILD=$HOST_CC ;; esac } # This is needed to find uname on a Pyramid OSx when run in the BSD universe. # (ghazi@noc.rutgers.edu 1994-08-24) if test -f /.attbin/uname ; then PATH=$PATH:/.attbin ; export PATH fi UNAME_MACHINE=`(uname -m) 2>/dev/null` || UNAME_MACHINE=unknown UNAME_RELEASE=`(uname -r) 2>/dev/null` || UNAME_RELEASE=unknown UNAME_SYSTEM=`(uname -s) 2>/dev/null` || UNAME_SYSTEM=unknown UNAME_VERSION=`(uname -v) 2>/dev/null` || UNAME_VERSION=unknown case "$UNAME_SYSTEM" in Linux|GNU|GNU/*) # If the system lacks a compiler, then just pick glibc. # We could probably try harder. LIBC=gnu set_cc_for_build cat <<-EOF > "$dummy.c" #include #if defined(__UCLIBC__) LIBC=uclibc #elif defined(__dietlibc__) LIBC=dietlibc #else LIBC=gnu #endif EOF eval "`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^LIBC' | sed 's, ,,g'`" # If ldd exists, use it to detect musl libc. if command -v ldd >/dev/null && \ ldd --version 2>&1 | grep -q ^musl then LIBC=musl fi ;; esac # Note: order is significant - the case branches are not exclusive. case "$UNAME_MACHINE:$UNAME_SYSTEM:$UNAME_RELEASE:$UNAME_VERSION" in *:NetBSD:*:*) # NetBSD (nbsd) targets should (where applicable) match one or # more of the tuples: *-*-netbsdelf*, *-*-netbsdaout*, # *-*-netbsdecoff* and *-*-netbsd*. For targets that recently # switched to ELF, *-*-netbsd* would select the old # object file format. This provides both forward # compatibility and a consistent mechanism for selecting the # object file format. # # Note: NetBSD doesn't particularly care about the vendor # portion of the name. We always set it to "unknown". sysctl="sysctl -n hw.machine_arch" UNAME_MACHINE_ARCH=`(uname -p 2>/dev/null || \ "/sbin/$sysctl" 2>/dev/null || \ "/usr/sbin/$sysctl" 2>/dev/null || \ echo unknown)` case "$UNAME_MACHINE_ARCH" in armeb) machine=armeb-unknown ;; arm*) machine=arm-unknown ;; sh3el) machine=shl-unknown ;; sh3eb) machine=sh-unknown ;; sh5el) machine=sh5le-unknown ;; earmv*) arch=`echo "$UNAME_MACHINE_ARCH" | sed -e 's,^e\(armv[0-9]\).*$,\1,'` endian=`echo "$UNAME_MACHINE_ARCH" | sed -ne 's,^.*\(eb\)$,\1,p'` machine="${arch}${endian}"-unknown ;; *) machine="$UNAME_MACHINE_ARCH"-unknown ;; esac # The Operating System including object format, if it has switched # to ELF recently (or will in the future) and ABI. case "$UNAME_MACHINE_ARCH" in earm*) os=netbsdelf ;; arm*|i386|m68k|ns32k|sh3*|sparc|vax) set_cc_for_build if echo __ELF__ | $CC_FOR_BUILD -E - 2>/dev/null \ | grep -q __ELF__ then # Once all utilities can be ECOFF (netbsdecoff) or a.out (netbsdaout). # Return netbsd for either. FIX? os=netbsd else os=netbsdelf fi ;; *) os=netbsd ;; esac # Determine ABI tags. case "$UNAME_MACHINE_ARCH" in earm*) expr='s/^earmv[0-9]/-eabi/;s/eb$//' abi=`echo "$UNAME_MACHINE_ARCH" | sed -e "$expr"` ;; esac # The OS release # Debian GNU/NetBSD machines have a different userland, and # thus, need a distinct triplet. However, they do not need # kernel version information, so it can be replaced with a # suitable tag, in the style of linux-gnu. case "$UNAME_VERSION" in Debian*) release='-gnu' ;; *) release=`echo "$UNAME_RELEASE" | sed -e 's/[-_].*//' | cut -d. -f1,2` ;; esac # Since CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM: # contains redundant information, the shorter form: # CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM is used. echo "$machine-${os}${release}${abi-}" exit ;; *:Bitrig:*:*) UNAME_MACHINE_ARCH=`arch | sed 's/Bitrig.//'` echo "$UNAME_MACHINE_ARCH"-unknown-bitrig"$UNAME_RELEASE" exit ;; *:OpenBSD:*:*) UNAME_MACHINE_ARCH=`arch | sed 's/OpenBSD.//'` echo "$UNAME_MACHINE_ARCH"-unknown-openbsd"$UNAME_RELEASE" exit ;; *:LibertyBSD:*:*) UNAME_MACHINE_ARCH=`arch | sed 's/^.*BSD\.//'` echo "$UNAME_MACHINE_ARCH"-unknown-libertybsd"$UNAME_RELEASE" exit ;; *:MidnightBSD:*:*) echo "$UNAME_MACHINE"-unknown-midnightbsd"$UNAME_RELEASE" exit ;; *:ekkoBSD:*:*) echo "$UNAME_MACHINE"-unknown-ekkobsd"$UNAME_RELEASE" exit ;; *:SolidBSD:*:*) echo "$UNAME_MACHINE"-unknown-solidbsd"$UNAME_RELEASE" exit ;; macppc:MirBSD:*:*) echo powerpc-unknown-mirbsd"$UNAME_RELEASE" exit ;; *:MirBSD:*:*) echo "$UNAME_MACHINE"-unknown-mirbsd"$UNAME_RELEASE" exit ;; *:Sortix:*:*) echo "$UNAME_MACHINE"-unknown-sortix exit ;; *:Redox:*:*) echo "$UNAME_MACHINE"-unknown-redox exit ;; mips:OSF1:*.*) echo mips-dec-osf1 exit ;; alpha:OSF1:*:*) case $UNAME_RELEASE in *4.0) UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $3}'` ;; *5.*) UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $4}'` ;; esac # According to Compaq, /usr/sbin/psrinfo has been available on # OSF/1 and Tru64 systems produced since 1995. I hope that # covers most systems running today. This code pipes the CPU # types through head -n 1, so we only detect the type of CPU 0. ALPHA_CPU_TYPE=`/usr/sbin/psrinfo -v | sed -n -e 's/^ The alpha \(.*\) processor.*$/\1/p' | head -n 1` case "$ALPHA_CPU_TYPE" in "EV4 (21064)") UNAME_MACHINE=alpha ;; "EV4.5 (21064)") UNAME_MACHINE=alpha ;; "LCA4 (21066/21068)") UNAME_MACHINE=alpha ;; "EV5 (21164)") UNAME_MACHINE=alphaev5 ;; "EV5.6 (21164A)") UNAME_MACHINE=alphaev56 ;; "EV5.6 (21164PC)") UNAME_MACHINE=alphapca56 ;; "EV5.7 (21164PC)") UNAME_MACHINE=alphapca57 ;; "EV6 (21264)") UNAME_MACHINE=alphaev6 ;; "EV6.7 (21264A)") UNAME_MACHINE=alphaev67 ;; "EV6.8CB (21264C)") UNAME_MACHINE=alphaev68 ;; "EV6.8AL (21264B)") UNAME_MACHINE=alphaev68 ;; "EV6.8CX (21264D)") UNAME_MACHINE=alphaev68 ;; "EV6.9A (21264/EV69A)") UNAME_MACHINE=alphaev69 ;; "EV7 (21364)") UNAME_MACHINE=alphaev7 ;; "EV7.9 (21364A)") UNAME_MACHINE=alphaev79 ;; esac # A Pn.n version is a patched version. # A Vn.n version is a released version. # A Tn.n version is a released field test version. # A Xn.n version is an unreleased experimental baselevel. # 1.2 uses "1.2" for uname -r. echo "$UNAME_MACHINE"-dec-osf"`echo "$UNAME_RELEASE" | sed -e 's/^[PVTX]//' | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz`" # Reset EXIT trap before exiting to avoid spurious non-zero exit code. exitcode=$? trap '' 0 exit $exitcode ;; Amiga*:UNIX_System_V:4.0:*) echo m68k-unknown-sysv4 exit ;; *:[Aa]miga[Oo][Ss]:*:*) echo "$UNAME_MACHINE"-unknown-amigaos exit ;; *:[Mm]orph[Oo][Ss]:*:*) echo "$UNAME_MACHINE"-unknown-morphos exit ;; *:OS/390:*:*) echo i370-ibm-openedition exit ;; *:z/VM:*:*) echo s390-ibm-zvmoe exit ;; *:OS400:*:*) echo powerpc-ibm-os400 exit ;; arm:RISC*:1.[012]*:*|arm:riscix:1.[012]*:*) echo arm-acorn-riscix"$UNAME_RELEASE" exit ;; arm*:riscos:*:*|arm*:RISCOS:*:*) echo arm-unknown-riscos exit ;; SR2?01:HI-UX/MPP:*:* | SR8000:HI-UX/MPP:*:*) echo hppa1.1-hitachi-hiuxmpp exit ;; Pyramid*:OSx*:*:* | MIS*:OSx*:*:* | MIS*:SMP_DC-OSx*:*:*) # akee@wpdis03.wpafb.af.mil (Earle F. Ake) contributed MIS and NILE. if test "`(/bin/universe) 2>/dev/null`" = att ; then echo pyramid-pyramid-sysv3 else echo pyramid-pyramid-bsd fi exit ;; NILE*:*:*:dcosx) echo pyramid-pyramid-svr4 exit ;; DRS?6000:unix:4.0:6*) echo sparc-icl-nx6 exit ;; DRS?6000:UNIX_SV:4.2*:7* | DRS?6000:isis:4.2*:7*) case `/usr/bin/uname -p` in sparc) echo sparc-icl-nx7; exit ;; esac ;; s390x:SunOS:*:*) echo "$UNAME_MACHINE"-ibm-solaris2"`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`" exit ;; sun4H:SunOS:5.*:*) echo sparc-hal-solaris2"`echo "$UNAME_RELEASE"|sed -e 's/[^.]*//'`" exit ;; sun4*:SunOS:5.*:* | tadpole*:SunOS:5.*:*) echo sparc-sun-solaris2"`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`" exit ;; i86pc:AuroraUX:5.*:* | i86xen:AuroraUX:5.*:*) echo i386-pc-auroraux"$UNAME_RELEASE" exit ;; i86pc:SunOS:5.*:* | i86xen:SunOS:5.*:*) set_cc_for_build SUN_ARCH=i386 # If there is a compiler, see if it is configured for 64-bit objects. # Note that the Sun cc does not turn __LP64__ into 1 like gcc does. # This test works for both compilers. if [ "$CC_FOR_BUILD" != no_compiler_found ]; then if (echo '#ifdef __amd64'; echo IS_64BIT_ARCH; echo '#endif') | \ (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \ grep IS_64BIT_ARCH >/dev/null then SUN_ARCH=x86_64 fi fi echo "$SUN_ARCH"-pc-solaris2"`echo "$UNAME_RELEASE"|sed -e 's/[^.]*//'`" exit ;; sun4*:SunOS:6*:*) # According to config.sub, this is the proper way to canonicalize # SunOS6. Hard to guess exactly what SunOS6 will be like, but # it's likely to be more like Solaris than SunOS4. echo sparc-sun-solaris3"`echo "$UNAME_RELEASE"|sed -e 's/[^.]*//'`" exit ;; sun4*:SunOS:*:*) case "`/usr/bin/arch -k`" in Series*|S4*) UNAME_RELEASE=`uname -v` ;; esac # Japanese Language versions have a version number like `4.1.3-JL'. echo sparc-sun-sunos"`echo "$UNAME_RELEASE"|sed -e 's/-/_/'`" exit ;; sun3*:SunOS:*:*) echo m68k-sun-sunos"$UNAME_RELEASE" exit ;; sun*:*:4.2BSD:*) UNAME_RELEASE=`(sed 1q /etc/motd | awk '{print substr($5,1,3)}') 2>/dev/null` test "x$UNAME_RELEASE" = x && UNAME_RELEASE=3 case "`/bin/arch`" in sun3) echo m68k-sun-sunos"$UNAME_RELEASE" ;; sun4) echo sparc-sun-sunos"$UNAME_RELEASE" ;; esac exit ;; aushp:SunOS:*:*) echo sparc-auspex-sunos"$UNAME_RELEASE" exit ;; # The situation for MiNT is a little confusing. The machine name # can be virtually everything (everything which is not # "atarist" or "atariste" at least should have a processor # > m68000). The system name ranges from "MiNT" over "FreeMiNT" # to the lowercase version "mint" (or "freemint"). Finally # the system name "TOS" denotes a system which is actually not # MiNT. But MiNT is downward compatible to TOS, so this should # be no problem. atarist[e]:*MiNT:*:* | atarist[e]:*mint:*:* | atarist[e]:*TOS:*:*) echo m68k-atari-mint"$UNAME_RELEASE" exit ;; atari*:*MiNT:*:* | atari*:*mint:*:* | atarist[e]:*TOS:*:*) echo m68k-atari-mint"$UNAME_RELEASE" exit ;; *falcon*:*MiNT:*:* | *falcon*:*mint:*:* | *falcon*:*TOS:*:*) echo m68k-atari-mint"$UNAME_RELEASE" exit ;; milan*:*MiNT:*:* | milan*:*mint:*:* | *milan*:*TOS:*:*) echo m68k-milan-mint"$UNAME_RELEASE" exit ;; hades*:*MiNT:*:* | hades*:*mint:*:* | *hades*:*TOS:*:*) echo m68k-hades-mint"$UNAME_RELEASE" exit ;; *:*MiNT:*:* | *:*mint:*:* | *:*TOS:*:*) echo m68k-unknown-mint"$UNAME_RELEASE" exit ;; m68k:machten:*:*) echo m68k-apple-machten"$UNAME_RELEASE" exit ;; powerpc:machten:*:*) echo powerpc-apple-machten"$UNAME_RELEASE" exit ;; RISC*:Mach:*:*) echo mips-dec-mach_bsd4.3 exit ;; RISC*:ULTRIX:*:*) echo mips-dec-ultrix"$UNAME_RELEASE" exit ;; VAX*:ULTRIX*:*:*) echo vax-dec-ultrix"$UNAME_RELEASE" exit ;; 2020:CLIX:*:* | 2430:CLIX:*:*) echo clipper-intergraph-clix"$UNAME_RELEASE" exit ;; mips:*:*:UMIPS | mips:*:*:RISCos) set_cc_for_build sed 's/^ //' << EOF > "$dummy.c" #ifdef __cplusplus #include /* for printf() prototype */ int main (int argc, char *argv[]) { #else int main (argc, argv) int argc; char *argv[]; { #endif #if defined (host_mips) && defined (MIPSEB) #if defined (SYSTYPE_SYSV) printf ("mips-mips-riscos%ssysv\\n", argv[1]); exit (0); #endif #if defined (SYSTYPE_SVR4) printf ("mips-mips-riscos%ssvr4\\n", argv[1]); exit (0); #endif #if defined (SYSTYPE_BSD43) || defined(SYSTYPE_BSD) printf ("mips-mips-riscos%sbsd\\n", argv[1]); exit (0); #endif #endif exit (-1); } EOF $CC_FOR_BUILD -o "$dummy" "$dummy.c" && dummyarg=`echo "$UNAME_RELEASE" | sed -n 's/\([0-9]*\).*/\1/p'` && SYSTEM_NAME=`"$dummy" "$dummyarg"` && { echo "$SYSTEM_NAME"; exit; } echo mips-mips-riscos"$UNAME_RELEASE" exit ;; Motorola:PowerMAX_OS:*:*) echo powerpc-motorola-powermax exit ;; Motorola:*:4.3:PL8-*) echo powerpc-harris-powermax exit ;; Night_Hawk:*:*:PowerMAX_OS | Synergy:PowerMAX_OS:*:*) echo powerpc-harris-powermax exit ;; Night_Hawk:Power_UNIX:*:*) echo powerpc-harris-powerunix exit ;; m88k:CX/UX:7*:*) echo m88k-harris-cxux7 exit ;; m88k:*:4*:R4*) echo m88k-motorola-sysv4 exit ;; m88k:*:3*:R3*) echo m88k-motorola-sysv3 exit ;; AViiON:dgux:*:*) # DG/UX returns AViiON for all architectures UNAME_PROCESSOR=`/usr/bin/uname -p` if [ "$UNAME_PROCESSOR" = mc88100 ] || [ "$UNAME_PROCESSOR" = mc88110 ] then if [ "$TARGET_BINARY_INTERFACE"x = m88kdguxelfx ] || \ [ "$TARGET_BINARY_INTERFACE"x = x ] then echo m88k-dg-dgux"$UNAME_RELEASE" else echo m88k-dg-dguxbcs"$UNAME_RELEASE" fi else echo i586-dg-dgux"$UNAME_RELEASE" fi exit ;; M88*:DolphinOS:*:*) # DolphinOS (SVR3) echo m88k-dolphin-sysv3 exit ;; M88*:*:R3*:*) # Delta 88k system running SVR3 echo m88k-motorola-sysv3 exit ;; XD88*:*:*:*) # Tektronix XD88 system running UTekV (SVR3) echo m88k-tektronix-sysv3 exit ;; Tek43[0-9][0-9]:UTek:*:*) # Tektronix 4300 system running UTek (BSD) echo m68k-tektronix-bsd exit ;; *:IRIX*:*:*) echo mips-sgi-irix"`echo "$UNAME_RELEASE"|sed -e 's/-/_/g'`" exit ;; ????????:AIX?:[12].1:2) # AIX 2.2.1 or AIX 2.1.1 is RT/PC AIX. echo romp-ibm-aix # uname -m gives an 8 hex-code CPU id exit ;; # Note that: echo "'`uname -s`'" gives 'AIX ' i*86:AIX:*:*) echo i386-ibm-aix exit ;; ia64:AIX:*:*) if [ -x /usr/bin/oslevel ] ; then IBM_REV=`/usr/bin/oslevel` else IBM_REV="$UNAME_VERSION.$UNAME_RELEASE" fi echo "$UNAME_MACHINE"-ibm-aix"$IBM_REV" exit ;; *:AIX:2:3) if grep bos325 /usr/include/stdio.h >/dev/null 2>&1; then set_cc_for_build sed 's/^ //' << EOF > "$dummy.c" #include main() { if (!__power_pc()) exit(1); puts("powerpc-ibm-aix3.2.5"); exit(0); } EOF if $CC_FOR_BUILD -o "$dummy" "$dummy.c" && SYSTEM_NAME=`"$dummy"` then echo "$SYSTEM_NAME" else echo rs6000-ibm-aix3.2.5 fi elif grep bos324 /usr/include/stdio.h >/dev/null 2>&1; then echo rs6000-ibm-aix3.2.4 else echo rs6000-ibm-aix3.2 fi exit ;; *:AIX:*:[4567]) IBM_CPU_ID=`/usr/sbin/lsdev -C -c processor -S available | sed 1q | awk '{ print $1 }'` if /usr/sbin/lsattr -El "$IBM_CPU_ID" | grep ' POWER' >/dev/null 2>&1; then IBM_ARCH=rs6000 else IBM_ARCH=powerpc fi if [ -x /usr/bin/lslpp ] ; then IBM_REV=`/usr/bin/lslpp -Lqc bos.rte.libc | awk -F: '{ print $3 }' | sed s/[0-9]*$/0/` else IBM_REV="$UNAME_VERSION.$UNAME_RELEASE" fi echo "$IBM_ARCH"-ibm-aix"$IBM_REV" exit ;; *:AIX:*:*) echo rs6000-ibm-aix exit ;; ibmrt:4.4BSD:*|romp-ibm:4.4BSD:*) echo romp-ibm-bsd4.4 exit ;; ibmrt:*BSD:*|romp-ibm:BSD:*) # covers RT/PC BSD and echo romp-ibm-bsd"$UNAME_RELEASE" # 4.3 with uname added to exit ;; # report: romp-ibm BSD 4.3 *:BOSX:*:*) echo rs6000-bull-bosx exit ;; DPX/2?00:B.O.S.:*:*) echo m68k-bull-sysv3 exit ;; 9000/[34]??:4.3bsd:1.*:*) echo m68k-hp-bsd exit ;; hp300:4.4BSD:*:* | 9000/[34]??:4.3bsd:2.*:*) echo m68k-hp-bsd4.4 exit ;; 9000/[34678]??:HP-UX:*:*) HPUX_REV=`echo "$UNAME_RELEASE"|sed -e 's/[^.]*.[0B]*//'` case "$UNAME_MACHINE" in 9000/31?) HP_ARCH=m68000 ;; 9000/[34]??) HP_ARCH=m68k ;; 9000/[678][0-9][0-9]) if [ -x /usr/bin/getconf ]; then sc_cpu_version=`/usr/bin/getconf SC_CPU_VERSION 2>/dev/null` sc_kernel_bits=`/usr/bin/getconf SC_KERNEL_BITS 2>/dev/null` case "$sc_cpu_version" in 523) HP_ARCH=hppa1.0 ;; # CPU_PA_RISC1_0 528) HP_ARCH=hppa1.1 ;; # CPU_PA_RISC1_1 532) # CPU_PA_RISC2_0 case "$sc_kernel_bits" in 32) HP_ARCH=hppa2.0n ;; 64) HP_ARCH=hppa2.0w ;; '') HP_ARCH=hppa2.0 ;; # HP-UX 10.20 esac ;; esac fi if [ "$HP_ARCH" = "" ]; then set_cc_for_build sed 's/^ //' << EOF > "$dummy.c" #define _HPUX_SOURCE #include #include int main () { #if defined(_SC_KERNEL_BITS) long bits = sysconf(_SC_KERNEL_BITS); #endif long cpu = sysconf (_SC_CPU_VERSION); switch (cpu) { case CPU_PA_RISC1_0: puts ("hppa1.0"); break; case CPU_PA_RISC1_1: puts ("hppa1.1"); break; case CPU_PA_RISC2_0: #if defined(_SC_KERNEL_BITS) switch (bits) { case 64: puts ("hppa2.0w"); break; case 32: puts ("hppa2.0n"); break; default: puts ("hppa2.0"); break; } break; #else /* !defined(_SC_KERNEL_BITS) */ puts ("hppa2.0"); break; #endif default: puts ("hppa1.0"); break; } exit (0); } EOF (CCOPTS="" $CC_FOR_BUILD -o "$dummy" "$dummy.c" 2>/dev/null) && HP_ARCH=`"$dummy"` test -z "$HP_ARCH" && HP_ARCH=hppa fi ;; esac if [ "$HP_ARCH" = hppa2.0w ] then set_cc_for_build # hppa2.0w-hp-hpux* has a 64-bit kernel and a compiler generating # 32-bit code. hppa64-hp-hpux* has the same kernel and a compiler # generating 64-bit code. GNU and HP use different nomenclature: # # $ CC_FOR_BUILD=cc ./config.guess # => hppa2.0w-hp-hpux11.23 # $ CC_FOR_BUILD="cc +DA2.0w" ./config.guess # => hppa64-hp-hpux11.23 if echo __LP64__ | (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | grep -q __LP64__ then HP_ARCH=hppa2.0w else HP_ARCH=hppa64 fi fi echo "$HP_ARCH"-hp-hpux"$HPUX_REV" exit ;; ia64:HP-UX:*:*) HPUX_REV=`echo "$UNAME_RELEASE"|sed -e 's/[^.]*.[0B]*//'` echo ia64-hp-hpux"$HPUX_REV" exit ;; 3050*:HI-UX:*:*) set_cc_for_build sed 's/^ //' << EOF > "$dummy.c" #include int main () { long cpu = sysconf (_SC_CPU_VERSION); /* The order matters, because CPU_IS_HP_MC68K erroneously returns true for CPU_PA_RISC1_0. CPU_IS_PA_RISC returns correct results, however. */ if (CPU_IS_PA_RISC (cpu)) { switch (cpu) { case CPU_PA_RISC1_0: puts ("hppa1.0-hitachi-hiuxwe2"); break; case CPU_PA_RISC1_1: puts ("hppa1.1-hitachi-hiuxwe2"); break; case CPU_PA_RISC2_0: puts ("hppa2.0-hitachi-hiuxwe2"); break; default: puts ("hppa-hitachi-hiuxwe2"); break; } } else if (CPU_IS_HP_MC68K (cpu)) puts ("m68k-hitachi-hiuxwe2"); else puts ("unknown-hitachi-hiuxwe2"); exit (0); } EOF $CC_FOR_BUILD -o "$dummy" "$dummy.c" && SYSTEM_NAME=`"$dummy"` && { echo "$SYSTEM_NAME"; exit; } echo unknown-hitachi-hiuxwe2 exit ;; 9000/7??:4.3bsd:*:* | 9000/8?[79]:4.3bsd:*:*) echo hppa1.1-hp-bsd exit ;; 9000/8??:4.3bsd:*:*) echo hppa1.0-hp-bsd exit ;; *9??*:MPE/iX:*:* | *3000*:MPE/iX:*:*) echo hppa1.0-hp-mpeix exit ;; hp7??:OSF1:*:* | hp8?[79]:OSF1:*:*) echo hppa1.1-hp-osf exit ;; hp8??:OSF1:*:*) echo hppa1.0-hp-osf exit ;; i*86:OSF1:*:*) if [ -x /usr/sbin/sysversion ] ; then echo "$UNAME_MACHINE"-unknown-osf1mk else echo "$UNAME_MACHINE"-unknown-osf1 fi exit ;; parisc*:Lites*:*:*) echo hppa1.1-hp-lites exit ;; C1*:ConvexOS:*:* | convex:ConvexOS:C1*:*) echo c1-convex-bsd exit ;; C2*:ConvexOS:*:* | convex:ConvexOS:C2*:*) if getsysinfo -f scalar_acc then echo c32-convex-bsd else echo c2-convex-bsd fi exit ;; C34*:ConvexOS:*:* | convex:ConvexOS:C34*:*) echo c34-convex-bsd exit ;; C38*:ConvexOS:*:* | convex:ConvexOS:C38*:*) echo c38-convex-bsd exit ;; C4*:ConvexOS:*:* | convex:ConvexOS:C4*:*) echo c4-convex-bsd exit ;; CRAY*Y-MP:*:*:*) echo ymp-cray-unicos"$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/' exit ;; CRAY*[A-Z]90:*:*:*) echo "$UNAME_MACHINE"-cray-unicos"$UNAME_RELEASE" \ | sed -e 's/CRAY.*\([A-Z]90\)/\1/' \ -e y/ABCDEFGHIJKLMNOPQRSTUVWXYZ/abcdefghijklmnopqrstuvwxyz/ \ -e 's/\.[^.]*$/.X/' exit ;; CRAY*TS:*:*:*) echo t90-cray-unicos"$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/' exit ;; CRAY*T3E:*:*:*) echo alphaev5-cray-unicosmk"$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/' exit ;; CRAY*SV1:*:*:*) echo sv1-cray-unicos"$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/' exit ;; *:UNICOS/mp:*:*) echo craynv-cray-unicosmp"$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/' exit ;; F30[01]:UNIX_System_V:*:* | F700:UNIX_System_V:*:*) FUJITSU_PROC=`uname -m | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz` FUJITSU_SYS=`uname -p | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/\///'` FUJITSU_REL=`echo "$UNAME_RELEASE" | sed -e 's/ /_/'` echo "${FUJITSU_PROC}-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}" exit ;; 5000:UNIX_System_V:4.*:*) FUJITSU_SYS=`uname -p | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/\///'` FUJITSU_REL=`echo "$UNAME_RELEASE" | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/ /_/'` echo "sparc-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}" exit ;; i*86:BSD/386:*:* | i*86:BSD/OS:*:* | *:Ascend\ Embedded/OS:*:*) echo "$UNAME_MACHINE"-pc-bsdi"$UNAME_RELEASE" exit ;; sparc*:BSD/OS:*:*) echo sparc-unknown-bsdi"$UNAME_RELEASE" exit ;; *:BSD/OS:*:*) echo "$UNAME_MACHINE"-unknown-bsdi"$UNAME_RELEASE" exit ;; arm:FreeBSD:*:*) UNAME_PROCESSOR=`uname -p` set_cc_for_build if echo __ARM_PCS_VFP | $CC_FOR_BUILD -E - 2>/dev/null \ | grep -q __ARM_PCS_VFP then echo "${UNAME_PROCESSOR}"-unknown-freebsd"`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'`"-gnueabi else echo "${UNAME_PROCESSOR}"-unknown-freebsd"`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'`"-gnueabihf fi exit ;; *:FreeBSD:*:*) UNAME_PROCESSOR=`/usr/bin/uname -p` case "$UNAME_PROCESSOR" in amd64) UNAME_PROCESSOR=x86_64 ;; i386) UNAME_PROCESSOR=i586 ;; esac echo "$UNAME_PROCESSOR"-unknown-freebsd"`echo "$UNAME_RELEASE"|sed -e 's/[-(].*//'`" exit ;; i*:CYGWIN*:*) echo "$UNAME_MACHINE"-pc-cygwin exit ;; *:MINGW64*:*) echo "$UNAME_MACHINE"-pc-mingw64 exit ;; *:MINGW*:*) echo "$UNAME_MACHINE"-pc-mingw32 exit ;; *:MSYS*:*) echo "$UNAME_MACHINE"-pc-msys exit ;; i*:PW*:*) echo "$UNAME_MACHINE"-pc-pw32 exit ;; *:Interix*:*) case "$UNAME_MACHINE" in x86) echo i586-pc-interix"$UNAME_RELEASE" exit ;; authenticamd | genuineintel | EM64T) echo x86_64-unknown-interix"$UNAME_RELEASE" exit ;; IA64) echo ia64-unknown-interix"$UNAME_RELEASE" exit ;; esac ;; i*:UWIN*:*) echo "$UNAME_MACHINE"-pc-uwin exit ;; amd64:CYGWIN*:*:* | x86_64:CYGWIN*:*:*) echo x86_64-pc-cygwin exit ;; prep*:SunOS:5.*:*) echo powerpcle-unknown-solaris2"`echo "$UNAME_RELEASE"|sed -e 's/[^.]*//'`" exit ;; *:GNU:*:*) # the GNU system echo "`echo "$UNAME_MACHINE"|sed -e 's,[-/].*$,,'`-unknown-$LIBC`echo "$UNAME_RELEASE"|sed -e 's,/.*$,,'`" exit ;; *:GNU/*:*:*) # other systems with GNU libc and userland echo "$UNAME_MACHINE-unknown-`echo "$UNAME_SYSTEM" | sed 's,^[^/]*/,,' | tr "[:upper:]" "[:lower:]"``echo "$UNAME_RELEASE"|sed -e 's/[-(].*//'`-$LIBC" exit ;; *:Minix:*:*) echo "$UNAME_MACHINE"-unknown-minix exit ;; aarch64:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; aarch64_be:Linux:*:*) UNAME_MACHINE=aarch64_be echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; alpha:Linux:*:*) case `sed -n '/^cpu model/s/^.*: \(.*\)/\1/p' < /proc/cpuinfo` in EV5) UNAME_MACHINE=alphaev5 ;; EV56) UNAME_MACHINE=alphaev56 ;; PCA56) UNAME_MACHINE=alphapca56 ;; PCA57) UNAME_MACHINE=alphapca56 ;; EV6) UNAME_MACHINE=alphaev6 ;; EV67) UNAME_MACHINE=alphaev67 ;; EV68*) UNAME_MACHINE=alphaev68 ;; esac objdump --private-headers /bin/sh | grep -q ld.so.1 if test "$?" = 0 ; then LIBC=gnulibc1 ; fi echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; arc:Linux:*:* | arceb:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; arm*:Linux:*:*) set_cc_for_build if echo __ARM_EABI__ | $CC_FOR_BUILD -E - 2>/dev/null \ | grep -q __ARM_EABI__ then echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" else if echo __ARM_PCS_VFP | $CC_FOR_BUILD -E - 2>/dev/null \ | grep -q __ARM_PCS_VFP then echo "$UNAME_MACHINE"-unknown-linux-"$LIBC"eabi else echo "$UNAME_MACHINE"-unknown-linux-"$LIBC"eabihf fi fi exit ;; avr32*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; cris:Linux:*:*) echo "$UNAME_MACHINE"-axis-linux-"$LIBC" exit ;; crisv32:Linux:*:*) echo "$UNAME_MACHINE"-axis-linux-"$LIBC" exit ;; e2k:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; frv:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; hexagon:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; i*86:Linux:*:*) echo "$UNAME_MACHINE"-pc-linux-"$LIBC" exit ;; ia64:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; k1om:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; m32r*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; m68*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; mips:Linux:*:* | mips64:Linux:*:*) set_cc_for_build sed 's/^ //' << EOF > "$dummy.c" #undef CPU #undef ${UNAME_MACHINE} #undef ${UNAME_MACHINE}el #if defined(__MIPSEL__) || defined(__MIPSEL) || defined(_MIPSEL) || defined(MIPSEL) CPU=${UNAME_MACHINE}el #else #if defined(__MIPSEB__) || defined(__MIPSEB) || defined(_MIPSEB) || defined(MIPSEB) CPU=${UNAME_MACHINE} #else CPU= #endif #endif EOF eval "`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^CPU'`" test "x$CPU" != x && { echo "$CPU-unknown-linux-$LIBC"; exit; } ;; mips64el:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; openrisc*:Linux:*:*) echo or1k-unknown-linux-"$LIBC" exit ;; or32:Linux:*:* | or1k*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; padre:Linux:*:*) echo sparc-unknown-linux-"$LIBC" exit ;; parisc64:Linux:*:* | hppa64:Linux:*:*) echo hppa64-unknown-linux-"$LIBC" exit ;; parisc:Linux:*:* | hppa:Linux:*:*) # Look for CPU level case `grep '^cpu[^a-z]*:' /proc/cpuinfo 2>/dev/null | cut -d' ' -f2` in PA7*) echo hppa1.1-unknown-linux-"$LIBC" ;; PA8*) echo hppa2.0-unknown-linux-"$LIBC" ;; *) echo hppa-unknown-linux-"$LIBC" ;; esac exit ;; ppc64:Linux:*:*) echo powerpc64-unknown-linux-"$LIBC" exit ;; ppc:Linux:*:*) echo powerpc-unknown-linux-"$LIBC" exit ;; ppc64le:Linux:*:*) echo powerpc64le-unknown-linux-"$LIBC" exit ;; ppcle:Linux:*:*) echo powerpcle-unknown-linux-"$LIBC" exit ;; riscv32:Linux:*:* | riscv64:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; s390:Linux:*:* | s390x:Linux:*:*) echo "$UNAME_MACHINE"-ibm-linux-"$LIBC" exit ;; sh64*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; sh*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; sparc:Linux:*:* | sparc64:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; tile*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; vax:Linux:*:*) echo "$UNAME_MACHINE"-dec-linux-"$LIBC" exit ;; x86_64:Linux:*:*) echo "$UNAME_MACHINE"-pc-linux-"$LIBC" exit ;; xtensa*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; i*86:DYNIX/ptx:4*:*) # ptx 4.0 does uname -s correctly, with DYNIX/ptx in there. # earlier versions are messed up and put the nodename in both # sysname and nodename. echo i386-sequent-sysv4 exit ;; i*86:UNIX_SV:4.2MP:2.*) # Unixware is an offshoot of SVR4, but it has its own version # number series starting with 2... # I am not positive that other SVR4 systems won't match this, # I just have to hope. -- rms. # Use sysv4.2uw... so that sysv4* matches it. echo "$UNAME_MACHINE"-pc-sysv4.2uw"$UNAME_VERSION" exit ;; i*86:OS/2:*:*) # If we were able to find `uname', then EMX Unix compatibility # is probably installed. echo "$UNAME_MACHINE"-pc-os2-emx exit ;; i*86:XTS-300:*:STOP) echo "$UNAME_MACHINE"-unknown-stop exit ;; i*86:atheos:*:*) echo "$UNAME_MACHINE"-unknown-atheos exit ;; i*86:syllable:*:*) echo "$UNAME_MACHINE"-pc-syllable exit ;; i*86:LynxOS:2.*:* | i*86:LynxOS:3.[01]*:* | i*86:LynxOS:4.[02]*:*) echo i386-unknown-lynxos"$UNAME_RELEASE" exit ;; i*86:*DOS:*:*) echo "$UNAME_MACHINE"-pc-msdosdjgpp exit ;; i*86:*:4.*:*) UNAME_REL=`echo "$UNAME_RELEASE" | sed 's/\/MP$//'` if grep Novell /usr/include/link.h >/dev/null 2>/dev/null; then echo "$UNAME_MACHINE"-univel-sysv"$UNAME_REL" else echo "$UNAME_MACHINE"-pc-sysv"$UNAME_REL" fi exit ;; i*86:*:5:[678]*) # UnixWare 7.x, OpenUNIX and OpenServer 6. case `/bin/uname -X | grep "^Machine"` in *486*) UNAME_MACHINE=i486 ;; *Pentium) UNAME_MACHINE=i586 ;; *Pent*|*Celeron) UNAME_MACHINE=i686 ;; esac echo "$UNAME_MACHINE-unknown-sysv${UNAME_RELEASE}${UNAME_SYSTEM}{$UNAME_VERSION}" exit ;; i*86:*:3.2:*) if test -f /usr/options/cb.name; then UNAME_REL=`sed -n 's/.*Version //p' /dev/null >/dev/null ; then UNAME_REL=`(/bin/uname -X|grep Release|sed -e 's/.*= //')` (/bin/uname -X|grep i80486 >/dev/null) && UNAME_MACHINE=i486 (/bin/uname -X|grep '^Machine.*Pentium' >/dev/null) \ && UNAME_MACHINE=i586 (/bin/uname -X|grep '^Machine.*Pent *II' >/dev/null) \ && UNAME_MACHINE=i686 (/bin/uname -X|grep '^Machine.*Pentium Pro' >/dev/null) \ && UNAME_MACHINE=i686 echo "$UNAME_MACHINE"-pc-sco"$UNAME_REL" else echo "$UNAME_MACHINE"-pc-sysv32 fi exit ;; pc:*:*:*) # Left here for compatibility: # uname -m prints for DJGPP always 'pc', but it prints nothing about # the processor, so we play safe by assuming i586. # Note: whatever this is, it MUST be the same as what config.sub # prints for the "djgpp" host, or else GDB configure will decide that # this is a cross-build. echo i586-pc-msdosdjgpp exit ;; Intel:Mach:3*:*) echo i386-pc-mach3 exit ;; paragon:*:*:*) echo i860-intel-osf1 exit ;; i860:*:4.*:*) # i860-SVR4 if grep Stardent /usr/include/sys/uadmin.h >/dev/null 2>&1 ; then echo i860-stardent-sysv"$UNAME_RELEASE" # Stardent Vistra i860-SVR4 else # Add other i860-SVR4 vendors below as they are discovered. echo i860-unknown-sysv"$UNAME_RELEASE" # Unknown i860-SVR4 fi exit ;; mini*:CTIX:SYS*5:*) # "miniframe" echo m68010-convergent-sysv exit ;; mc68k:UNIX:SYSTEM5:3.51m) echo m68k-convergent-sysv exit ;; M680?0:D-NIX:5.3:*) echo m68k-diab-dnix exit ;; M68*:*:R3V[5678]*:*) test -r /sysV68 && { echo 'm68k-motorola-sysv'; exit; } ;; 3[345]??:*:4.0:3.0 | 3[34]??A:*:4.0:3.0 | 3[34]??,*:*:4.0:3.0 | 3[34]??/*:*:4.0:3.0 | 4400:*:4.0:3.0 | 4850:*:4.0:3.0 | SKA40:*:4.0:3.0 | SDS2:*:4.0:3.0 | SHG2:*:4.0:3.0 | S7501*:*:4.0:3.0) OS_REL='' test -r /etc/.relid \ && OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid` /bin/uname -p 2>/dev/null | grep 86 >/dev/null \ && { echo i486-ncr-sysv4.3"$OS_REL"; exit; } /bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \ && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } ;; 3[34]??:*:4.0:* | 3[34]??,*:*:4.0:*) /bin/uname -p 2>/dev/null | grep 86 >/dev/null \ && { echo i486-ncr-sysv4; exit; } ;; NCR*:*:4.2:* | MPRAS*:*:4.2:*) OS_REL='.3' test -r /etc/.relid \ && OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid` /bin/uname -p 2>/dev/null | grep 86 >/dev/null \ && { echo i486-ncr-sysv4.3"$OS_REL"; exit; } /bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \ && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } /bin/uname -p 2>/dev/null | /bin/grep pteron >/dev/null \ && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } ;; m68*:LynxOS:2.*:* | m68*:LynxOS:3.0*:*) echo m68k-unknown-lynxos"$UNAME_RELEASE" exit ;; mc68030:UNIX_System_V:4.*:*) echo m68k-atari-sysv4 exit ;; TSUNAMI:LynxOS:2.*:*) echo sparc-unknown-lynxos"$UNAME_RELEASE" exit ;; rs6000:LynxOS:2.*:*) echo rs6000-unknown-lynxos"$UNAME_RELEASE" exit ;; PowerPC:LynxOS:2.*:* | PowerPC:LynxOS:3.[01]*:* | PowerPC:LynxOS:4.[02]*:*) echo powerpc-unknown-lynxos"$UNAME_RELEASE" exit ;; SM[BE]S:UNIX_SV:*:*) echo mips-dde-sysv"$UNAME_RELEASE" exit ;; RM*:ReliantUNIX-*:*:*) echo mips-sni-sysv4 exit ;; RM*:SINIX-*:*:*) echo mips-sni-sysv4 exit ;; *:SINIX-*:*:*) if uname -p 2>/dev/null >/dev/null ; then UNAME_MACHINE=`(uname -p) 2>/dev/null` echo "$UNAME_MACHINE"-sni-sysv4 else echo ns32k-sni-sysv fi exit ;; PENTIUM:*:4.0*:*) # Unisys `ClearPath HMP IX 4000' SVR4/MP effort # says echo i586-unisys-sysv4 exit ;; *:UNIX_System_V:4*:FTX*) # From Gerald Hewes . # How about differentiating between stratus architectures? -djm echo hppa1.1-stratus-sysv4 exit ;; *:*:*:FTX*) # From seanf@swdc.stratus.com. echo i860-stratus-sysv4 exit ;; i*86:VOS:*:*) # From Paul.Green@stratus.com. echo "$UNAME_MACHINE"-stratus-vos exit ;; *:VOS:*:*) # From Paul.Green@stratus.com. echo hppa1.1-stratus-vos exit ;; mc68*:A/UX:*:*) echo m68k-apple-aux"$UNAME_RELEASE" exit ;; news*:NEWS-OS:6*:*) echo mips-sony-newsos6 exit ;; R[34]000:*System_V*:*:* | R4000:UNIX_SYSV:*:* | R*000:UNIX_SV:*:*) if [ -d /usr/nec ]; then echo mips-nec-sysv"$UNAME_RELEASE" else echo mips-unknown-sysv"$UNAME_RELEASE" fi exit ;; BeBox:BeOS:*:*) # BeOS running on hardware made by Be, PPC only. echo powerpc-be-beos exit ;; BeMac:BeOS:*:*) # BeOS running on Mac or Mac clone, PPC only. echo powerpc-apple-beos exit ;; BePC:BeOS:*:*) # BeOS running on Intel PC compatible. echo i586-pc-beos exit ;; BePC:Haiku:*:*) # Haiku running on Intel PC compatible. echo i586-pc-haiku exit ;; x86_64:Haiku:*:*) echo x86_64-unknown-haiku exit ;; SX-4:SUPER-UX:*:*) echo sx4-nec-superux"$UNAME_RELEASE" exit ;; SX-5:SUPER-UX:*:*) echo sx5-nec-superux"$UNAME_RELEASE" exit ;; SX-6:SUPER-UX:*:*) echo sx6-nec-superux"$UNAME_RELEASE" exit ;; SX-7:SUPER-UX:*:*) echo sx7-nec-superux"$UNAME_RELEASE" exit ;; SX-8:SUPER-UX:*:*) echo sx8-nec-superux"$UNAME_RELEASE" exit ;; SX-8R:SUPER-UX:*:*) echo sx8r-nec-superux"$UNAME_RELEASE" exit ;; SX-ACE:SUPER-UX:*:*) echo sxace-nec-superux"$UNAME_RELEASE" exit ;; Power*:Rhapsody:*:*) echo powerpc-apple-rhapsody"$UNAME_RELEASE" exit ;; *:Rhapsody:*:*) echo "$UNAME_MACHINE"-apple-rhapsody"$UNAME_RELEASE" exit ;; *:Darwin:*:*) UNAME_PROCESSOR=`uname -p` || UNAME_PROCESSOR=unknown set_cc_for_build if test "$UNAME_PROCESSOR" = unknown ; then UNAME_PROCESSOR=powerpc fi if test "`echo "$UNAME_RELEASE" | sed -e 's/\..*//'`" -le 10 ; then if [ "$CC_FOR_BUILD" != no_compiler_found ]; then if (echo '#ifdef __LP64__'; echo IS_64BIT_ARCH; echo '#endif') | \ (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \ grep IS_64BIT_ARCH >/dev/null then case $UNAME_PROCESSOR in i386) UNAME_PROCESSOR=x86_64 ;; powerpc) UNAME_PROCESSOR=powerpc64 ;; esac fi # On 10.4-10.6 one might compile for PowerPC via gcc -arch ppc if (echo '#ifdef __POWERPC__'; echo IS_PPC; echo '#endif') | \ (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \ grep IS_PPC >/dev/null then UNAME_PROCESSOR=powerpc fi fi elif test "$UNAME_PROCESSOR" = i386 ; then # Avoid executing cc on OS X 10.9, as it ships with a stub # that puts up a graphical alert prompting to install # developer tools. Any system running Mac OS X 10.7 or # later (Darwin 11 and later) is required to have a 64-bit # processor. This is not true of the ARM version of Darwin # that Apple uses in portable devices. UNAME_PROCESSOR=x86_64 fi echo "$UNAME_PROCESSOR"-apple-darwin"$UNAME_RELEASE" exit ;; *:procnto*:*:* | *:QNX:[0123456789]*:*) UNAME_PROCESSOR=`uname -p` if test "$UNAME_PROCESSOR" = x86; then UNAME_PROCESSOR=i386 UNAME_MACHINE=pc fi echo "$UNAME_PROCESSOR"-"$UNAME_MACHINE"-nto-qnx"$UNAME_RELEASE" exit ;; *:QNX:*:4*) echo i386-pc-qnx exit ;; NEO-*:NONSTOP_KERNEL:*:*) echo neo-tandem-nsk"$UNAME_RELEASE" exit ;; NSE-*:NONSTOP_KERNEL:*:*) echo nse-tandem-nsk"$UNAME_RELEASE" exit ;; NSR-*:NONSTOP_KERNEL:*:*) echo nsr-tandem-nsk"$UNAME_RELEASE" exit ;; NSV-*:NONSTOP_KERNEL:*:*) echo nsv-tandem-nsk"$UNAME_RELEASE" exit ;; NSX-*:NONSTOP_KERNEL:*:*) echo nsx-tandem-nsk"$UNAME_RELEASE" exit ;; *:NonStop-UX:*:*) echo mips-compaq-nonstopux exit ;; BS2000:POSIX*:*:*) echo bs2000-siemens-sysv exit ;; DS/*:UNIX_System_V:*:*) echo "$UNAME_MACHINE"-"$UNAME_SYSTEM"-"$UNAME_RELEASE" exit ;; *:Plan9:*:*) # "uname -m" is not consistent, so use $cputype instead. 386 # is converted to i386 for consistency with other x86 # operating systems. # shellcheck disable=SC2154 if test "$cputype" = 386; then UNAME_MACHINE=i386 else UNAME_MACHINE="$cputype" fi echo "$UNAME_MACHINE"-unknown-plan9 exit ;; *:TOPS-10:*:*) echo pdp10-unknown-tops10 exit ;; *:TENEX:*:*) echo pdp10-unknown-tenex exit ;; KS10:TOPS-20:*:* | KL10:TOPS-20:*:* | TYPE4:TOPS-20:*:*) echo pdp10-dec-tops20 exit ;; XKL-1:TOPS-20:*:* | TYPE5:TOPS-20:*:*) echo pdp10-xkl-tops20 exit ;; *:TOPS-20:*:*) echo pdp10-unknown-tops20 exit ;; *:ITS:*:*) echo pdp10-unknown-its exit ;; SEI:*:*:SEIUX) echo mips-sei-seiux"$UNAME_RELEASE" exit ;; *:DragonFly:*:*) echo "$UNAME_MACHINE"-unknown-dragonfly"`echo "$UNAME_RELEASE"|sed -e 's/[-(].*//'`" exit ;; *:*VMS:*:*) UNAME_MACHINE=`(uname -p) 2>/dev/null` case "$UNAME_MACHINE" in A*) echo alpha-dec-vms ; exit ;; I*) echo ia64-dec-vms ; exit ;; V*) echo vax-dec-vms ; exit ;; esac ;; *:XENIX:*:SysV) echo i386-pc-xenix exit ;; i*86:skyos:*:*) echo "$UNAME_MACHINE"-pc-skyos"`echo "$UNAME_RELEASE" | sed -e 's/ .*$//'`" exit ;; i*86:rdos:*:*) echo "$UNAME_MACHINE"-pc-rdos exit ;; i*86:AROS:*:*) echo "$UNAME_MACHINE"-pc-aros exit ;; x86_64:VMkernel:*:*) echo "$UNAME_MACHINE"-unknown-esx exit ;; amd64:Isilon\ OneFS:*:*) echo x86_64-unknown-onefs exit ;; *:Unleashed:*:*) echo "$UNAME_MACHINE"-unknown-unleashed"$UNAME_RELEASE" exit ;; esac echo "$0: unable to guess system type" >&2 case "$UNAME_MACHINE:$UNAME_SYSTEM" in mips:Linux | mips64:Linux) # If we got here on MIPS GNU/Linux, output extra information. cat >&2 <&2 </dev/null || echo unknown` uname -r = `(uname -r) 2>/dev/null || echo unknown` uname -s = `(uname -s) 2>/dev/null || echo unknown` uname -v = `(uname -v) 2>/dev/null || echo unknown` /usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null` /bin/uname -X = `(/bin/uname -X) 2>/dev/null` hostinfo = `(hostinfo) 2>/dev/null` /bin/universe = `(/bin/universe) 2>/dev/null` /usr/bin/arch -k = `(/usr/bin/arch -k) 2>/dev/null` /bin/arch = `(/bin/arch) 2>/dev/null` /usr/bin/oslevel = `(/usr/bin/oslevel) 2>/dev/null` /usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null` UNAME_MACHINE = "$UNAME_MACHINE" UNAME_RELEASE = "$UNAME_RELEASE" UNAME_SYSTEM = "$UNAME_SYSTEM" UNAME_VERSION = "$UNAME_VERSION" EOF exit 1 # Local variables: # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-start: "timestamp='" # time-stamp-format: "%:y-%02m-%02d" # time-stamp-end: "'" # End: httpd-2.4.41/build/instdso.sh0000755000000000000500000000602711534233136014363 0ustar rootsrc#!/bin/sh # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # instdso.sh - install Apache DSO modules # # we use this instead of libtool --install because: # 1) on a few platforms libtool doesn't install DSOs exactly like we'd # want (weird names, doesn't remove DSO first) # 2) we never want the .la files copied, so we might as well copy # the .so files ourselves if test "$#" != "3"; then echo "wrong number of arguments to instdso.sh" echo "Usage: instdso.sh SH_LIBTOOL-value dso-name path-to-modules" exit 1 fi SH_LIBTOOL=`echo $1 | sed -e 's/^SH_LIBTOOL=//'` DSOARCHIVE=$2 DSOARCHIVE_BASENAME=`basename $2` TARGETDIR=$3 DSOBASE=`echo $DSOARCHIVE_BASENAME | sed -e 's/\.la$//'` TARGET_NAME="$DSOBASE.so" SYS=`uname -s` if test "$SYS" = "AIX" then # on AIX, shared libraries remain in storage even when # all processes using them have exited; standard practice # prior to installing a shared library is to rm -f first CMD="rm -f $TARGETDIR/$TARGET_NAME" echo $CMD $CMD || exit $? fi case $SYS in SunOS|HP-UX) INSTALL_CMD=cp ;; *) type install >/dev/null 2>&1 && INSTALL_CMD=install || INSTALL_CMD=cp ;; esac CMD="$SH_LIBTOOL --mode=install $INSTALL_CMD $DSOARCHIVE $TARGETDIR/" echo $CMD $CMD || exit $? if test "$SYS" = "OS/2" then # on OS/2, aplibtool --install doesn't copy the .la files & we can't # rename DLLs to have a .so extension or they won't load so none of the # steps below make sense. exit 0 fi if test -s "$TARGETDIR/$DSOARCHIVE_BASENAME" then DLNAME=`sed -n "/^dlname=/{s/.*='\([^']*\)'/\1/;p;}" $TARGETDIR/$DSOARCHIVE_BASENAME` LIBRARY_NAMES=`sed -n "/^library_names/{s/library_names='\([^']*\)'/\1/;p;}" $TARGETDIR/$DSOARCHIVE_BASENAME` LIBRARY_NAMES=`echo $LIBRARY_NAMES | sed -e "s/ *$DLNAME//g"` fi if test -z "$DLNAME" then echo "Warning! dlname not found in $TARGETDIR/$DSOARCHIVE_BASENAME." echo "Assuming installing a .so rather than a libtool archive." exit 0 fi if test -n "$LIBRARY_NAMES" then for f in $LIBRARY_NAMES do rm -f $TARGETDIR/$f done fi if test "$DLNAME" != "$TARGET_NAME" then mv $TARGETDIR/$DLNAME $TARGETDIR/$TARGET_NAME fi rm -f $TARGETDIR/$DSOARCHIVE_BASENAME rm -f $TARGETDIR/$DSOBASE.a rm -f $TARGETDIR/lib$DSOBASE.a rm -f $TARGETDIR/lib$TARGET_NAME exit 0 httpd-2.4.41/build/buildinfo.sh0000755000000000000500000001215510455010104014637 0ustar rootsrc#!/bin/sh # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # buildinfo.sh -- Determine Build Information # Initially written by Ralf S. Engelschall # for the Apache's Autoconf-style Interface (APACI) # # argument line handling # error=no if [ $# -ne 1 -a $# -ne 2 ]; then error=yes fi if [ $# -eq 2 -a "x$1" != "x-n" ]; then error=yes fi if [ "x$error" = "xyes" ]; then echo "$0:Error: invalid argument line" echo "$0:Usage: $0 [-n] " echo "Where can contain:" echo " %u ...... substituted by determined username (foo)" echo " %h ...... substituted by determined hostname (bar)" echo " %d ...... substituted by determined domainname (.com)" echo " %D ...... substituted by determined day (DD)" echo " %M ...... substituted by determined month (MM)" echo " %Y ...... substituted by determined year (YYYYY)" echo " %m ...... substituted by determined monthname (Jan)" exit 1 fi if [ $# -eq 2 ]; then newline=no format_string="$2" else newline=yes format_string="$1" fi # # initialization # username='' hostname='' domainname='' time_day='' time_month='' time_year='' time_monthname='' # # determine username # username="$LOGNAME" if [ "x$username" = "x" ]; then username="$USER" if [ "x$username" = "x" ]; then username="`(whoami) 2>/dev/null |\ awk '{ printf("%s", $1); }'`" if [ "x$username" = "x" ]; then username="`(who am i) 2>/dev/null |\ awk '{ printf("%s", $1); }'`" if [ "x$username" = "x" ]; then username='unknown' fi fi fi fi # # determine hostname and domainname # hostname="`(uname -n) 2>/dev/null |\ awk '{ printf("%s", $1); }'`" if [ "x$hostname" = "x" ]; then hostname="`(hostname) 2>/dev/null |\ awk '{ printf("%s", $1); }'`" if [ "x$hostname" = "x" ]; then hostname='unknown' fi fi case $hostname in *.* ) domainname=".`echo $hostname | cut -d. -f2-`" hostname="`echo $hostname | cut -d. -f1`" ;; esac if [ "x$domainname" = "x" ]; then if [ -f /etc/resolv.conf ]; then domainname="`egrep '^[ ]*domain' /etc/resolv.conf | head -1 |\ sed -e 's/.*domain//' \ -e 's/^[ ]*//' -e 's/^ *//' -e 's/^ *//' \ -e 's/^\.//' -e 's/^/./' |\ awk '{ printf("%s", $1); }'`" if [ "x$domainname" = "x" ]; then domainname="`egrep '^[ ]*search' /etc/resolv.conf | head -1 |\ sed -e 's/.*search//' \ -e 's/^[ ]*//' -e 's/^ *//' -e 's/^ *//' \ -e 's/ .*//' -e 's/ .*//' \ -e 's/^\.//' -e 's/^/./' |\ awk '{ printf("%s", $1); }'`" fi fi fi # # determine current time # time_day="`date '+%d' | awk '{ printf("%s", $1); }'`" time_month="`date '+%m' | awk '{ printf("%s", $1); }'`" time_year="`date '+%Y' 2>/dev/null | awk '{ printf("%s", $1); }'`" if [ "x$time_year" = "x" ]; then time_year="`date '+%y' | awk '{ printf("%s", $1); }'`" case $time_year in [5-9][0-9]) time_year="19$time_year" ;; [0-4][0-9]) time_year="20$time_year" ;; esac fi case $time_month in 1|01) time_monthname='Jan' ;; 2|02) time_monthname='Feb' ;; 3|03) time_monthname='Mar' ;; 4|04) time_monthname='Apr' ;; 5|05) time_monthname='May' ;; 6|06) time_monthname='Jun' ;; 7|07) time_monthname='Jul' ;; 8|08) time_monthname='Aug' ;; 9|09) time_monthname='Sep' ;; 10) time_monthname='Oct' ;; 11) time_monthname='Nov' ;; 12) time_monthname='Dec' ;; esac # # create result string # if [ "x$newline" = "xyes" ]; then echo $format_string |\ sed -e "s;%u;$username;g" \ -e "s;%h;$hostname;g" \ -e "s;%d;$domainname;g" \ -e "s;%D;$time_day;g" \ -e "s;%M;$time_month;g" \ -e "s;%Y;$time_year;g" \ -e "s;%m;$time_monthname;g" else echo "${format_string}&" |\ sed -e "s;%u;$username;g" \ -e "s;%h;$hostname;g" \ -e "s;%d;$domainname;g" \ -e "s;%D;$time_day;g" \ -e "s;%M;$time_month;g" \ -e "s;%Y;$time_year;g" \ -e "s;%m;$time_monthname;g" |\ awk '-F&' '{ printf("%s", $1); }' fi httpd-2.4.41/build/nw_export.inc0000644000000000000500000000361412221062344015053 0ustar rootsrc/* Must include ap_config.h first so that we can redefine the standard prototypes macros after it messes with them. */ #include "ap_config.h" /* Define all of the standard prototype macros as themselves so that httpd.h will not mess with them. This allows them to pass untouched so that the AWK script can pick them out of the preprocessed result file. */ #undef AP_DECLARE #define AP_DECLARE AP_DECLARE #undef AP_CORE_DECLARE #define AP_CORE_DECLARE AP_CORE_DECLARE #undef AP_DECLARE_NONSTD #define AP_DECLARE_NONSTD AP_DECLARE_NONSTD #undef AP_CORE_DECLARE_NONSTD #define AP_CORE_DECLARE_NONSTD AP_CORE_DECLARE_NONSTD #undef AP_DECLARE_HOOK #define AP_DECLARE_HOOK AP_DECLARE_HOOK #undef AP_DECLARE_DATA #define AP_DECLARE_DATA AP_DECLARE_DATA #undef APR_DECLARE_OPTIONAL_FN #define APR_DECLARE_OPTIONAL_FN APR_DECLARE_OPTIONAL_FN #undef APR_DECLARE_EXTERNAL_HOOK #define APR_DECLARE_EXTERNAL_HOOK APR_DECLARE_EXTERNAL_HOOK #undef APACHE_OS_H #include "httpd.h" /* Preprocess all of the standard HTTPD headers. */ #include "ap_compat.h" #include "ap_listen.h" #include "ap_mmn.h" #include "ap_mpm.h" #include "ap_provider.h" #include "ap_release.h" #include "ap_expr.h" #include "http_config.h" #include "http_connection.h" #include "http_core.h" #include "http_log.h" #include "http_main.h" #include "http_protocol.h" #include "http_request.h" #include "http_vhost.h" #include "mpm_common.h" #include "ap_regex.h" #include "scoreboard.h" #include "util_cfgtree.h" #include "util_charset.h" #include "util_cookies.h" #include "util_ebcdic.h" #include "util_fcgi.h" #include "util_filter.h" /*#include "util_ldap.h"*/ #include "util_md5.h" #include "util_mutex.h" #include "util_script.h" #include "util_time.h" #include "util_varbuf.h" #include "util_xml.h" #include "mod_core.h" #include "mod_auth.h" #include "mod_watchdog.h" httpd-2.4.41/build/apr_common.m40000644000000000000500000006762213523273355014754 0ustar rootsrcdnl -------------------------------------------------------- -*- autoconf -*- dnl Licensed to the Apache Software Foundation (ASF) under one or more dnl contributor license agreements. See the NOTICE file distributed with dnl this work for additional information regarding copyright ownership. dnl The ASF licenses this file to You under the Apache License, Version 2.0 dnl (the "License"); you may not use this file except in compliance with dnl the License. You may obtain a copy of the License at dnl dnl http://www.apache.org/licenses/LICENSE-2.0 dnl dnl Unless required by applicable law or agreed to in writing, software dnl distributed under the License is distributed on an "AS IS" BASIS, dnl WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. dnl See the License for the specific language governing permissions and dnl limitations under the License. dnl dnl apr_common.m4: APR's general-purpose autoconf macros dnl dnl dnl APR_CONFIG_NICE(filename) dnl dnl Saves a snapshot of the configure command-line for later reuse dnl AC_DEFUN([APR_CONFIG_NICE], [ rm -f $1 cat >$1<> $1 fi if test -n "$CFLAGS"; then echo "CFLAGS=\"$CFLAGS\"; export CFLAGS" >> $1 fi if test -n "$CPPFLAGS"; then echo "CPPFLAGS=\"$CPPFLAGS\"; export CPPFLAGS" >> $1 fi if test -n "$LDFLAGS"; then echo "LDFLAGS=\"$LDFLAGS\"; export LDFLAGS" >> $1 fi if test -n "$LTFLAGS"; then echo "LTFLAGS=\"$LTFLAGS\"; export LTFLAGS" >> $1 fi if test -n "$LIBS"; then echo "LIBS=\"$LIBS\"; export LIBS" >> $1 fi if test -n "$INCLUDES"; then echo "INCLUDES=\"$INCLUDES\"; export INCLUDES" >> $1 fi if test -n "$NOTEST_CFLAGS"; then echo "NOTEST_CFLAGS=\"$NOTEST_CFLAGS\"; export NOTEST_CFLAGS" >> $1 fi if test -n "$NOTEST_CPPFLAGS"; then echo "NOTEST_CPPFLAGS=\"$NOTEST_CPPFLAGS\"; export NOTEST_CPPFLAGS" >> $1 fi if test -n "$NOTEST_LDFLAGS"; then echo "NOTEST_LDFLAGS=\"$NOTEST_LDFLAGS\"; export NOTEST_LDFLAGS" >> $1 fi if test -n "$NOTEST_LIBS"; then echo "NOTEST_LIBS=\"$NOTEST_LIBS\"; export NOTEST_LIBS" >> $1 fi # Retrieve command-line arguments. eval "set x $[0] $ac_configure_args" shift for arg do APR_EXPAND_VAR(arg, $arg) echo "\"[$]arg\" \\" >> $1 done echo '"[$]@"' >> $1 chmod +x $1 ])dnl dnl APR_MKDIR_P_CHECK(fallback-mkdir-p) dnl checks whether mkdir -p works AC_DEFUN([APR_MKDIR_P_CHECK], [ AC_CACHE_CHECK(for working mkdir -p, ac_cv_mkdir_p,[ test -d conftestdir && rm -rf conftestdir mkdir -p conftestdir/somedir >/dev/null 2>&1 if test -d conftestdir/somedir; then ac_cv_mkdir_p=yes else ac_cv_mkdir_p=no fi rm -rf conftestdir ]) if test "$ac_cv_mkdir_p" = "yes"; then mkdir_p="mkdir -p" else mkdir_p="$1" fi ]) dnl dnl APR_SUBDIR_CONFIG(dir [, sub-package-cmdline-args, args-to-drop]) dnl dnl dir: directory to find configure in dnl sub-package-cmdline-args: arguments to add to the invocation (optional) dnl args-to-drop: arguments to drop from the invocation (optional) dnl dnl Note: This macro relies on ac_configure_args being set properly. dnl dnl The args-to-drop argument is shoved into a case statement, so dnl multiple arguments can be separated with a |. dnl dnl Note: Older versions of autoconf do not single-quote args, while 2.54+ dnl places quotes around every argument. So, if you want to drop the dnl argument called --enable-layout, you must pass the third argument as: dnl [--enable-layout=*|\'--enable-layout=*] dnl dnl Trying to optimize this is left as an exercise to the reader who wants dnl to put up with more autoconf craziness. I give up. dnl AC_DEFUN([APR_SUBDIR_CONFIG], [ # save our work to this point; this allows the sub-package to use it AC_CACHE_SAVE echo "configuring package in $1 now" ac_popdir=`pwd` apr_config_subdirs="$1" test -d $1 || $mkdir_p $1 ac_abs_srcdir=`(cd $srcdir/$1 && pwd)` cd $1 changequote(, )dnl # A "../" for each directory in /$config_subdirs. ac_dots=`echo $apr_config_subdirs|sed -e 's%^\./%%' -e 's%[^/]$%&/%' -e 's%[^/]*/%../%g'` changequote([, ])dnl # Make the cache file pathname absolute for the subdirs # required to correctly handle subdirs that might actually # be symlinks case "$cache_file" in /*) # already absolute ac_sub_cache_file=$cache_file ;; *) # Was relative path. ac_sub_cache_file="$ac_popdir/$cache_file" ;; esac ifelse($3, [], [apr_configure_args=$ac_configure_args],[ apr_configure_args= apr_sep= for apr_configure_arg in $ac_configure_args do case "$apr_configure_arg" in $3) continue ;; esac apr_configure_args="$apr_configure_args$apr_sep'$apr_configure_arg'" apr_sep=" " done ]) dnl autoconf doesn't add --silent to ac_configure_args; explicitly pass it test "x$silent" = "xyes" && apr_configure_args="$apr_configure_args --silent" dnl AC_CONFIG_SUBDIRS silences option warnings, emulate this for 2.62 apr_configure_args="--disable-option-checking $apr_configure_args" dnl The eval makes quoting arguments work - specifically the second argument dnl where the quoting mechanisms used is "" rather than []. dnl dnl We need to execute another shell because some autoconf/shell combinations dnl will choke after doing repeated APR_SUBDIR_CONFIG()s. (Namely Solaris dnl and autoconf-2.54+) if eval $SHELL $ac_abs_srcdir/configure $apr_configure_args --cache-file=$ac_sub_cache_file --srcdir=$ac_abs_srcdir $2 then : echo "$1 configured properly" else echo "configure failed for $1" exit 1 fi cd $ac_popdir # grab any updates from the sub-package AC_CACHE_LOAD ])dnl dnl dnl APR_SAVE_THE_ENVIRONMENT(variable_name) dnl dnl Stores the variable (usually a Makefile macro) for later restoration dnl AC_DEFUN([APR_SAVE_THE_ENVIRONMENT], [ apr_ste_save_$1="$$1" ])dnl dnl dnl APR_RESTORE_THE_ENVIRONMENT(variable_name, prefix_) dnl dnl Uses the previously saved variable content to figure out what configure dnl has added to the variable, moving the new bits to prefix_variable_name dnl and restoring the original variable contents. This makes it possible dnl for a user to override configure when it does something stupid. dnl AC_DEFUN([APR_RESTORE_THE_ENVIRONMENT], [ dnl Check whether $apr_ste_save_$1 is empty or dnl only whitespace. The verbatim "X" is token number 1, dnl the following whitespace will be ignored. set X $apr_ste_save_$1 if test ${#} -eq 1; then $2$1="$$1" $1= else if test "x$apr_ste_save_$1" = "x$$1"; then $2$1= else $2$1=`echo "$$1" | sed -e "s%${apr_ste_save_$1}%%"` $1="$apr_ste_save_$1" fi fi if test "x$silent" != "xyes"; then echo " restoring $1 to \"$$1\"" echo " setting $2$1 to \"$$2$1\"" fi AC_SUBST($2$1) ])dnl dnl dnl APR_SETIFNULL(variable, value) dnl dnl Set variable iff it's currently null dnl AC_DEFUN([APR_SETIFNULL], [ if test -z "$$1"; then test "x$silent" != "xyes" && echo " setting $1 to \"$2\"" $1="$2" fi ])dnl dnl dnl APR_SETVAR(variable, value) dnl dnl Set variable no matter what dnl AC_DEFUN([APR_SETVAR], [ test "x$silent" != "xyes" && echo " forcing $1 to \"$2\"" $1="$2" ])dnl dnl dnl APR_ADDTO(variable, value) dnl dnl Add value to variable dnl AC_DEFUN([APR_ADDTO], [ if test "x$$1" = "x"; then test "x$silent" != "xyes" && echo " setting $1 to \"$2\"" $1="$2" else apr_addto_bugger="$2" for i in $apr_addto_bugger; do apr_addto_duplicate="0" for j in $$1; do if test "x$i" = "x$j"; then apr_addto_duplicate="1" break fi done if test $apr_addto_duplicate = "0"; then test "x$silent" != "xyes" && echo " adding \"$i\" to $1" $1="$$1 $i" fi done fi ])dnl dnl dnl APR_REMOVEFROM(variable, value) dnl dnl Remove a value from a variable dnl AC_DEFUN([APR_REMOVEFROM], [ if test "x$$1" = "x$2"; then test "x$silent" != "xyes" && echo " nulling $1" $1="" else apr_new_bugger="" apr_removed=0 for i in $$1; do if test "x$i" != "x$2"; then apr_new_bugger="$apr_new_bugger $i" else apr_removed=1 fi done if test $apr_removed = "1"; then test "x$silent" != "xyes" && echo " removed \"$2\" from $1" $1=$apr_new_bugger fi fi ]) dnl dnl dnl APR_CHECK_DEFINE_FILES( symbol, header_file [header_file ...] ) dnl AC_DEFUN([APR_CHECK_DEFINE_FILES], [ AC_CACHE_CHECK([for $1 in $2],ac_cv_define_$1,[ ac_cv_define_$1=no for curhdr in $2 do AC_EGREP_CPP(YES_IS_DEFINED, [ #include <$curhdr> #ifdef $1 YES_IS_DEFINED #endif ], ac_cv_define_$1=yes) done ]) if test "$ac_cv_define_$1" = "yes"; then AC_DEFINE(HAVE_$1, 1, [Define if $1 is defined]) fi ]) dnl dnl APR_CHECK_DEFINE(symbol, header_file) dnl AC_DEFUN([APR_CHECK_DEFINE], [ AC_CACHE_CHECK([for $1 in $2],ac_cv_define_$1,[ AC_EGREP_CPP(YES_IS_DEFINED, [ #include <$2> #ifdef $1 YES_IS_DEFINED #endif ], ac_cv_define_$1=yes, ac_cv_define_$1=no) ]) if test "$ac_cv_define_$1" = "yes"; then AC_DEFINE(HAVE_$1, 1, [Define if $1 is defined in $2]) fi ]) dnl dnl APR_CHECK_APR_DEFINE( symbol ) dnl AC_DEFUN([APR_CHECK_APR_DEFINE], [ apr_old_cppflags=$CPPFLAGS CPPFLAGS="$CPPFLAGS $INCLUDES" AC_EGREP_CPP(YES_IS_DEFINED, [ #include #if $1 YES_IS_DEFINED #endif ], ac_cv_define_$1=yes, ac_cv_define_$1=no) CPPFLAGS=$apr_old_cppflags ]) dnl APR_CHECK_FILE(filename); set ac_cv_file_filename to dnl "yes" if 'filename' is readable, else "no". dnl @deprecated! - use AC_CHECK_FILE instead AC_DEFUN([APR_CHECK_FILE], [ dnl Pick a safe variable name define([apr_cvname], ac_cv_file_[]translit([$1], [./+-], [__p_])) AC_CACHE_CHECK([for $1], [apr_cvname], [if test -r $1; then apr_cvname=yes else apr_cvname=no fi]) ]) define(APR_IFALLYES,[dnl ac_rc=yes for ac_spec in $1; do ac_type=`echo "$ac_spec" | sed -e 's/:.*$//'` ac_item=`echo "$ac_spec" | sed -e 's/^.*://'` case $ac_type in header ) ac_item=`echo "$ac_item" | sed 'y%./+-%__p_%'` ac_var="ac_cv_header_$ac_item" ;; file ) ac_item=`echo "$ac_item" | sed 'y%./+-%__p_%'` ac_var="ac_cv_file_$ac_item" ;; func ) ac_var="ac_cv_func_$ac_item" ;; struct ) ac_var="ac_cv_struct_$ac_item" ;; define ) ac_var="ac_cv_define_$ac_item" ;; custom ) ac_var="$ac_item" ;; esac eval "ac_val=\$$ac_var" if test ".$ac_val" != .yes; then ac_rc=no break fi done if test ".$ac_rc" = .yes; then : $2 else : $3 fi ]) define(APR_BEGIN_DECISION,[dnl ac_decision_item='$1' ac_decision_msg='FAILED' ac_decision='' ]) AC_DEFUN([APR_DECIDE],[dnl dnl Define the flag (or not) in apr_private.h via autoheader AH_TEMPLATE($1, [Define if $2 will be used]) ac_decision='$1' ac_decision_msg='$2' ac_decision_$1=yes ac_decision_$1_msg='$2' ]) define(APR_DECISION_OVERRIDE,[dnl ac_decision='' for ac_item in $1; do eval "ac_decision_this=\$ac_decision_${ac_item}" if test ".$ac_decision_this" = .yes; then ac_decision=$ac_item eval "ac_decision_msg=\$ac_decision_${ac_item}_msg" fi done ]) define(APR_DECISION_FORCE,[dnl ac_decision="$1" eval "ac_decision_msg=\"\$ac_decision_${ac_decision}_msg\"" ]) define(APR_END_DECISION,[dnl if test ".$ac_decision" = .; then echo "[$]0:Error: decision on $ac_decision_item failed" 1>&2 exit 1 else if test ".$ac_decision_msg" = .; then ac_decision_msg="$ac_decision" fi AC_DEFINE_UNQUOTED(${ac_decision_item}) AC_MSG_RESULT([decision on $ac_decision_item... $ac_decision_msg]) fi ]) dnl dnl APR_CHECK_SIZEOF_EXTENDED(INCLUDES, TYPE [, CROSS_SIZE]) dnl dnl A variant of AC_CHECK_SIZEOF which allows the checking of dnl sizes of non-builtin types dnl AC_DEFUN([APR_CHECK_SIZEOF_EXTENDED], [changequote(<<, >>)dnl dnl The name to #define. define(<>, translit(sizeof_$2, [a-z *], [A-Z_P]))dnl dnl The cache variable name. define(<>, translit(ac_cv_sizeof_$2, [ *], [_p]))dnl changequote([, ])dnl AC_MSG_CHECKING(size of $2) AC_CACHE_VAL(AC_CV_NAME, [AC_TRY_RUN([#include $1 #ifdef WIN32 #define binmode "b" #else #define binmode #endif main() { FILE *f=fopen("conftestval", "w" binmode); if (!f) exit(1); fprintf(f, "%d\n", sizeof($2)); exit(0); }], AC_CV_NAME=`cat conftestval`, AC_CV_NAME=0, ifelse([$3],,, AC_CV_NAME=$3))])dnl AC_MSG_RESULT($AC_CV_NAME) AC_DEFINE_UNQUOTED(AC_TYPE_NAME, $AC_CV_NAME, [The size of ]$2) undefine([AC_TYPE_NAME])dnl undefine([AC_CV_NAME])dnl ]) dnl dnl APR_TRY_COMPILE_NO_WARNING(INCLUDES, FUNCTION-BODY, dnl [ACTIONS-IF-NO-WARNINGS], [ACTIONS-IF-WARNINGS]) dnl dnl Tries a compile test with warnings activated so that the result dnl is false if the code doesn't compile cleanly. For compilers dnl where it is not known how to activate a "fail-on-error" mode, dnl it is undefined which of the sets of actions will be run. dnl AC_DEFUN([APR_TRY_COMPILE_NO_WARNING], [apr_save_CFLAGS=$CFLAGS CFLAGS="$CFLAGS $CFLAGS_WARN" if test "$ac_cv_prog_gcc" = "yes"; then CFLAGS="$CFLAGS -Werror" fi AC_COMPILE_IFELSE( [AC_LANG_SOURCE( [#include "confdefs.h" ] [[$1]] [int main(int argc, const char *const *argv) {] [[$2]] [ return 0; }] )], [CFLAGS=$apr_save_CFLAGS $3], [CFLAGS=$apr_save_CFLAGS $4]) ]) dnl dnl APR_CHECK_STRERROR_R_RC dnl dnl Decide which style of retcode is used by this system's dnl strerror_r(). It either returns int (0 for success, -1 dnl for failure), or it returns a pointer to the error dnl string. dnl dnl AC_DEFUN([APR_CHECK_STRERROR_R_RC], [ AC_MSG_CHECKING(for type of return code from strerror_r) AC_TRY_RUN([ #include #include #include main() { char buf[1024]; if (strerror_r(ERANGE, buf, sizeof buf) < 1) { exit(0); } else { exit(1); } }], [ ac_cv_strerror_r_rc_int=yes ], [ ac_cv_strerror_r_rc_int=no ], [ ac_cv_strerror_r_rc_int=no ] ) if test "x$ac_cv_strerror_r_rc_int" = xyes; then AC_DEFINE(STRERROR_R_RC_INT, 1, [Define if strerror returns int]) msg="int" else msg="pointer" fi AC_MSG_RESULT([$msg]) ] ) dnl dnl APR_CHECK_DIRENT_INODE dnl dnl Decide if d_fileno or d_ino are available in the dirent dnl structure on this platform. Single UNIX Spec says d_ino, dnl BSD uses d_fileno. Undef to find the real beast. dnl AC_DEFUN([APR_CHECK_DIRENT_INODE], [ AC_CACHE_CHECK([for inode member of struct dirent], apr_cv_dirent_inode, [ apr_cv_dirent_inode=no AC_TRY_COMPILE([ #include #include ],[ #ifdef d_ino #undef d_ino #endif struct dirent de; de.d_fileno; ], apr_cv_dirent_inode=d_fileno) if test "$apr_cv_dirent_inode" = "no"; then AC_TRY_COMPILE([ #include #include ],[ #ifdef d_fileno #undef d_fileno #endif struct dirent de; de.d_ino; ], apr_cv_dirent_inode=d_ino) fi ]) if test "$apr_cv_dirent_inode" != "no"; then AC_DEFINE_UNQUOTED(DIRENT_INODE, $apr_cv_dirent_inode, [Define if struct dirent has an inode member]) fi ]) dnl dnl APR_CHECK_DIRENT_TYPE dnl dnl Decide if d_type is available in the dirent structure dnl on this platform. Not part of the Single UNIX Spec. dnl Note that this is worthless without DT_xxx macros, so dnl look for one while we are at it. dnl AC_DEFUN([APR_CHECK_DIRENT_TYPE], [ AC_CACHE_CHECK([for file type member of struct dirent], apr_cv_dirent_type,[ apr_cv_dirent_type=no AC_TRY_COMPILE([ #include #include ],[ struct dirent de; de.d_type = DT_REG; ], apr_cv_dirent_type=d_type) ]) if test "$apr_cv_dirent_type" != "no"; then AC_DEFINE_UNQUOTED(DIRENT_TYPE, $apr_cv_dirent_type, [Define if struct dirent has a d_type member]) fi ]) dnl the following is a newline, a space, a tab, and a backslash (the dnl backslash is used by the shell to skip newlines, but m4 sees it; dnl treat it like whitespace). dnl WARNING: don't reindent these lines, or the space/tab will be lost! define([apr_whitespace],[ \]) dnl dnl APR_COMMA_ARGS(ARG1 ...) dnl convert the whitespace-separated arguments into comman-separated dnl arguments. dnl dnl APR_FOREACH(CODE-BLOCK, ARG1, ARG2, ...) dnl subsitute CODE-BLOCK for each ARG[i]. "eachval" will be set to ARG[i] dnl within each iteration. dnl changequote({,}) define({APR_COMMA_ARGS},{patsubst([$}{1],[[}apr_whitespace{]+],[,])}) define({APR_FOREACH}, {ifelse($}{2,,, [define([eachval], $}{2)$}{1[]APR_FOREACH([$}{1], builtin([shift], builtin([shift], $}{@)))])}) changequote([,]) dnl APR_FLAG_HEADERS(HEADER-FILE ... [, FLAG-TO-SET ] [, "yes" ]) dnl we set FLAG-TO-SET to 1 if we find HEADER-FILE, otherwise we set to 0 dnl if FLAG-TO-SET is null, we automagically determine it's name dnl by changing all "/" to "_" in the HEADER-FILE and dropping dnl all "." and "-" chars. If the 3rd parameter is "yes" then instead of dnl setting to 1 or 0, we set FLAG-TO-SET to yes or no. dnl AC_DEFUN([APR_FLAG_HEADERS], [ AC_CHECK_HEADERS($1) for aprt_i in $1 do ac_safe=`echo "$aprt_i" | sed 'y%./+-%__p_%'` aprt_2=`echo "$aprt_i" | sed -e 's%/%_%g' -e 's/\.//g' -e 's/-//g'` if eval "test \"`echo '$ac_cv_header_'$ac_safe`\" = yes"; then eval "ifelse($2,,$aprt_2,$2)=ifelse($3,yes,yes,1)" else eval "ifelse($2,,$aprt_2,$2)=ifelse($3,yes,no,0)" fi done ]) dnl APR_FLAG_FUNCS(FUNC ... [, FLAG-TO-SET] [, "yes" ]) dnl if FLAG-TO-SET is null, we automagically determine it's name dnl prepending "have_" to the function name in FUNC, otherwise dnl we use what's provided as FLAG-TO-SET. If the 3rd parameter dnl is "yes" then instead of setting to 1 or 0, we set FLAG-TO-SET dnl to yes or no. dnl AC_DEFUN([APR_FLAG_FUNCS], [ AC_CHECK_FUNCS($1) for aprt_j in $1 do aprt_3="have_$aprt_j" if eval "test \"`echo '$ac_cv_func_'$aprt_j`\" = yes"; then eval "ifelse($2,,$aprt_3,$2)=ifelse($3,yes,yes,1)" else eval "ifelse($2,,$aprt_3,$2)=ifelse($3,yes,no,0)" fi done ]) dnl Iteratively interpolate the contents of the second argument dnl until interpolation offers no new result. Then assign the dnl final result to $1. dnl dnl Example: dnl dnl foo=1 dnl bar='${foo}/2' dnl baz='${bar}/3' dnl APR_EXPAND_VAR(fraz, $baz) dnl $fraz is now "1/2/3" dnl AC_DEFUN([APR_EXPAND_VAR], [ ap_last= ap_cur="$2" while test "x${ap_cur}" != "x${ap_last}"; do ap_last="${ap_cur}" ap_cur=`eval "echo ${ap_cur}"` done $1="${ap_cur}" ]) dnl dnl Removes the value of $3 from the string in $2, strips of any leading dnl slashes, and returns the value in $1. dnl dnl Example: dnl orig_path="${prefix}/bar" dnl APR_PATH_RELATIVE(final_path, $orig_path, $prefix) dnl $final_path now contains "bar" AC_DEFUN([APR_PATH_RELATIVE], [ ap_stripped=`echo $2 | sed -e "s#^$3##"` # check if the stripping was successful if test "x$2" != "x${ap_stripped}"; then # it was, so strip of any leading slashes $1="`echo ${ap_stripped} | sed -e 's#^/*##'`" else # it wasn't so return the original $1="$2" fi ]) dnl APR_HELP_STRING(LHS, RHS) dnl Autoconf 2.50 can not handle substr correctly. It does have dnl AC_HELP_STRING, so let's try to call it if we can. dnl Note: this define must be on one line so that it can be properly returned dnl as the help string. When using this macro with a multi-line RHS, ensure dnl that you surround the macro invocation with []s AC_DEFUN([APR_HELP_STRING], [ifelse(regexp(AC_ACVERSION, 2\.1), -1, AC_HELP_STRING([$1],[$2]),[ ][$1] substr([ ],len($1))[$2])]) dnl dnl APR_LAYOUT(configlayout, layoutname [, extravars]) dnl AC_DEFUN([APR_LAYOUT], [ if test ! -f $srcdir/config.layout; then echo "** Error: Layout file $srcdir/config.layout not found" echo "** Error: Cannot use undefined layout '$LAYOUT'" exit 1 fi # Catch layout names including a slash which will otherwise # confuse the heck out of the sed script. case $2 in */*) echo "** Error: $2 is not a valid layout name" exit 1 ;; esac pldconf=./config.pld changequote({,}) sed -e "1s/[ ]*<[lL]ayout[ ]*$2[ ]*>[ ]*//;1t" \ -e "1,/[ ]*<[lL]ayout[ ]*$2[ ]*>[ ]*/d" \ -e '/[ ]*<\/Layout>[ ]*/,$d' \ -e "s/^[ ]*//g" \ -e "s/:[ ]*/=\'/g" \ -e "s/[ ]*$/'/g" \ $1 > $pldconf layout_name=$2 if test ! -s $pldconf; then echo "** Error: unable to find layout $layout_name" exit 1 fi . $pldconf rm $pldconf for var in prefix exec_prefix bindir sbindir libexecdir mandir \ sysconfdir datadir includedir localstatedir runtimedir \ logfiledir libdir installbuilddir libsuffix $3; do eval "val=\"\$$var\"" case $val in *+) val=`echo $val | sed -e 's;\+$;;'` eval "$var=\"\$val\"" autosuffix=yes ;; *) autosuffix=no ;; esac val=`echo $val | sed -e 's:\(.\)/*$:\1:'` val=`echo $val | sed -e 's:[\$]\([a-z_]*\):${\1}:g'` if test "$autosuffix" = "yes"; then if echo $val | grep apache >/dev/null; then addtarget=no else addtarget=yes fi if test "$addtarget" = "yes"; then val="$val/apache2" fi fi eval "$var='$val'" done changequote([,]) ])dnl dnl dnl APR_ENABLE_LAYOUT(default layout name [, extra vars]) dnl AC_DEFUN([APR_ENABLE_LAYOUT], [ AC_ARG_ENABLE(layout, [ --enable-layout=LAYOUT],[ LAYOUT=$enableval ]) if test -z "$LAYOUT"; then LAYOUT="$1" fi APR_LAYOUT($srcdir/config.layout, $LAYOUT, $2) AC_MSG_CHECKING(for chosen layout) AC_MSG_RESULT($layout_name) ]) dnl dnl APR_PARSE_ARGUMENTS dnl a reimplementation of autoconf's argument parser, dnl used here to allow us to co-exist layouts and argument based dnl set ups. AC_DEFUN([APR_PARSE_ARGUMENTS], [ ac_prev= # Retrieve the command-line arguments. The eval is needed because # the arguments are quoted to preserve accuracy. eval "set x $ac_configure_args" shift for ac_option do # If the previous option needs an argument, assign it. if test -n "$ac_prev"; then eval "$ac_prev=\$ac_option" ac_prev= continue fi ac_optarg=`expr "x$ac_option" : 'x[[^=]]*=\(.*\)'` case $ac_option in -bindir | --bindir | --bindi | --bind | --bin | --bi) ac_prev=bindir ;; -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*) bindir="$ac_optarg" ;; -datadir | --datadir | --datadi | --datad | --data | --dat | --da) ac_prev=datadir ;; -datadir=* | --datadir=* | --datadi=* | --datad=* | --data=* | --dat=* \ | --da=*) datadir="$ac_optarg" ;; -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \ | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \ | --exec | --exe | --ex) ac_prev=exec_prefix ;; -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \ | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \ | --exec=* | --exe=* | --ex=*) exec_prefix="$ac_optarg" ;; -includedir | --includedir | --includedi | --included | --include \ | --includ | --inclu | --incl | --inc) ac_prev=includedir ;; -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \ | --includ=* | --inclu=* | --incl=* | --inc=*) includedir="$ac_optarg" ;; -infodir | --infodir | --infodi | --infod | --info | --inf) ac_prev=infodir ;; -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*) infodir="$ac_optarg" ;; -libdir | --libdir | --libdi | --libd) ac_prev=libdir ;; -libdir=* | --libdir=* | --libdi=* | --libd=*) libdir="$ac_optarg" ;; -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \ | --libexe | --libex | --libe) ac_prev=libexecdir ;; -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \ | --libexe=* | --libex=* | --libe=*) libexecdir="$ac_optarg" ;; -localstatedir | --localstatedir | --localstatedi | --localstated \ | --localstate | --localstat | --localsta | --localst \ | --locals | --local | --loca | --loc | --lo) ac_prev=localstatedir ;; -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \ | --localstate=* | --localstat=* | --localsta=* | --localst=* \ | --locals=* | --local=* | --loca=* | --loc=* | --lo=*) localstatedir="$ac_optarg" ;; -mandir | --mandir | --mandi | --mand | --man | --ma | --m) ac_prev=mandir ;; -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*) mandir="$ac_optarg" ;; -prefix | --prefix | --prefi | --pref | --pre | --pr | --p) ac_prev=prefix ;; -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*) prefix="$ac_optarg" ;; -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb) ac_prev=sbindir ;; -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \ | --sbi=* | --sb=*) sbindir="$ac_optarg" ;; -sharedstatedir | --sharedstatedir | --sharedstatedi \ | --sharedstated | --sharedstate | --sharedstat | --sharedsta \ | --sharedst | --shareds | --shared | --share | --shar \ | --sha | --sh) ac_prev=sharedstatedir ;; -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \ | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \ | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \ | --sha=* | --sh=*) sharedstatedir="$ac_optarg" ;; -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \ | --syscon | --sysco | --sysc | --sys | --sy) ac_prev=sysconfdir ;; -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \ | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*) sysconfdir="$ac_optarg" ;; esac done # Be sure to have absolute paths. for ac_var in exec_prefix prefix do eval ac_val=$`echo $ac_var` case $ac_val in [[\\/$]]* | ?:[[\\/]]* | NONE | '' ) ;; *) AC_MSG_ERROR([expected an absolute path for --$ac_var: $ac_val]);; esac done ])dnl dnl dnl APR_CHECK_DEPEND dnl dnl Determine what program we can use to generate .deps-style dependencies dnl AC_DEFUN([APR_CHECK_DEPEND], [ dnl Try to determine what depend program we can use dnl All GCC-variants should have -MM. dnl If not, then we can check on those, too. if test "$GCC" = "yes"; then MKDEP='$(CC) -MM' else rm -f conftest.c dnl should be available everywhere! cat > conftest.c < int main() { return 0; } EOF MKDEP="true" for i in "$CC -MM" "$CC -M" "$CPP -MM" "$CPP -M" "cpp -M"; do AC_MSG_CHECKING([if $i can create proper make dependencies]) if $i conftest.c 2>/dev/null | grep 'conftest.o: conftest.c' >/dev/null; then MKDEP=$i AC_MSG_RESULT(yes) break; fi AC_MSG_RESULT(no) done rm -f conftest.c fi AC_SUBST(MKDEP) ]) dnl dnl APR_CHECK_TYPES_FMT_COMPATIBLE(TYPE-1, TYPE-2, FMT-TAG, dnl [ACTION-IF-TRUE], [ACTION-IF-FALSE]) dnl dnl Try to determine whether two types are the same and accept the given dnl printf formatter (bare token, e.g. literal d, ld, etc). dnl AC_DEFUN([APR_CHECK_TYPES_FMT_COMPATIBLE], [ define([apr_cvname], apr_cv_typematch_[]translit([$1], [ ], [_])_[]translit([$2], [ ], [_])_[][$3]) AC_CACHE_CHECK([whether $1 and $2 use fmt %$3], apr_cvname, [ APR_TRY_COMPILE_NO_WARNING([#include #include #ifdef HAVE_STDINT_H #include #endif ], [ $1 chk1, *ptr1; $2 chk2, *ptr2 = &chk1; ptr1 = &chk2; *ptr1 = *ptr2 = 0; printf("%$3 %$3", chk1, chk2); ], [apr_cvname=yes], [apr_cvname=no])]) if test "$apr_cvname" = "yes"; then : $4 else : $5 fi ]) dnl dnl APR_CHECK_TYPES_COMPATIBLE(TYPE-1, TYPE-2, [ACTION-IF-TRUE]) dnl dnl Try to determine whether two types are the same. Only works dnl for gcc and icc. dnl dnl @deprecated @see APR_CHECK_TYPES_FMT_COMPATIBLE dnl AC_DEFUN([APR_CHECK_TYPES_COMPATIBLE], [ define([apr_cvname], apr_cv_typematch_[]translit([$1], [ ], [_])_[]translit([$2], [ ], [_])) AC_CACHE_CHECK([whether $1 and $2 are the same], apr_cvname, [ AC_TRY_COMPILE(AC_INCLUDES_DEFAULT, [ int foo[0 - !__builtin_types_compatible_p($1, $2)]; ], [apr_cvname=yes $3], [apr_cvname=no])]) ]) httpd-2.4.41/build/NWGNUtail.inc0000644000000000000500000002157112400620033014572 0ustar rootsrc# # This contains final targets and should be included at the end of any # NWGNUmakefile file # # # If we are going to create an nlm, make sure we have assigned variables to # use during the link. # ifndef NLM_NAME NLM_NAME = $(TARGET_nlm) endif ifndef NLM_DESCRIPTION NLM_DESCRIPTION = $(NLM_NAME) endif ifndef NLM_THREAD_NAME NLM_THREAD_NAME = $(NLM_NAME) Thread endif ifndef NLM_SCREEN_NAME NLM_SCREEN_NAME = DEFAULT endif ifndef NLM_COPYRIGHT NLM_COPYRIGHT = Licensed under the Apache License, Version 2.0 endif ifeq "$(NLM_FLAGS)" "" NLM_FLAGS = AUTOUNLOAD, PSEUDOPREEMPTION endif ifeq "$(NLM_STACK_SIZE)" "" NLM_STACK_SIZE = 65536 endif ifeq "$(NLM_ENTRY_SYM)" "" NLM_ENTRY_SYM = _LibCPrelude endif ifeq "$(NLM_EXIT_SYM)" "" NLM_EXIT_SYM = _LibCPostlude endif ifeq "$(NLM_VERSION)" "" NLM_VERSION = $(VERSION) endif # # Create dependency lists based on the files available # STANDARD_DEPENDS = \ $(APBUILD)/NWGNUhead.inc \ $(APBUILD)/NWGNUenvironment.inc \ $(APBUILD)/NWGNUtail.inc \ $(CUSTOM_INI) \ $(EOLIST) CCOPT_DEPENDS = $(STANDARD_DEPENDS) $(NLM_NAME)_LINKOPT_DEPENDS = \ $(TARGET_lib) \ $(STANDARD_DEPENDS) \ $(VERSION_INC) \ $(EOLIST) ifeq "$(words $(strip $(TARGET_lib)))" "1" LIB_NAME = $(basename $(notdir $(TARGET_lib))) $(LIB_NAME)_LIBLST_DEPENDS = \ $(FILES_lib_objs) \ $(STANDARD_DEPENDS) \ $(CUSTOM_INI) \ $(EOLIST) endif ifeq "$(wildcard NWGNU$(LIB_NAME))" "NWGNU$(LIB_NAME)" $(LIB_NAME)_LIBLST_DEPENDS += NWGNU$(LIB_NAME) CCOPT_DEPENDS += NWGNU$(LIB_NAME) else CCOPT_DEPENDS += NWGNUmakefile endif ifeq "$(wildcard NWGNU$(NLM_NAME))" "NWGNU$(NLM_NAME)" $(NLM_NAME)_LINKOPT_DEPENDS += NWGNU$(NLM_NAME) CCOPT_DEPENDS += NWGNU$(NLM_NAME) else CCOPT_DEPENDS += NWGNUmakefile endif CPPOPT_DEPENDS = $(CCOPT_DEPENDS) # # Generic compiler rules # ifneq "$(MAKECMDGOALS)" "clean" ifneq "$(findstring clobber_,$(MAKECMDGOALS))" "clobber_" $(APBUILD)/NWGNUversion.inc: $(APBUILD)/nw_ver.awk $(SRC)/include/ap_release.h @echo $(DL)GEN $@$(DL) $(AWK) -f $^ $(SRC)/.svn/all-wcprops > $@ -include $(APBUILD)/NWGNUversion.inc ifneq "$(strip $(VERSION_STR))" "" VERSION_INC = $(APBUILD)/NWGNUversion.inc else VERSION = 2,4,0 VERSION_STR = 2.4.0 VERSION_MAJMIN = 24 endif endif endif ifeq "$(USE_SVNREV)" "1" ifneq "$(strip $(SVN_REVISION))" "" CFLAGS += -DAP_SERVER_ADD_STRING=\"$(SVN_REVISION)\" endif endif ifeq "$(words $(strip $(TARGET_nlm)))" "1" $(OBJDIR)/%.o: %.c $(OBJDIR)/$(NLM_NAME)_cc.opt @echo $(DL)CC $<$(DL) $(CC) -o $@ $< @$(word 2, $^) $(OBJDIR)/$(NLM_NAME)_cc.opt: $(CCOPT_DEPENDS) $(call DEL,$@) @echo $(DL)GEN $@$(DL) ifneq "$(strip $(CFLAGS))" "" @echo $(DL)$(CFLAGS)$(DL)>> $@ endif ifneq "$(strip $(XCFLAGS))" "" @echo $(DL)$(XCFLAGS)$(DL)>> $@ endif ifneq "$(strip $(XINCDIRS))" "" @echo $(DL)$(foreach xincdir,$(strip $(subst ;,$(SPACE),$(XINCDIRS))),-I$(xincdir))$(DL)>> $@ endif ifneq "$(strip $(INCDIRS))" "" @echo $(DL)$(foreach incdir,$(strip $(subst ;,$(SPACE),$(INCDIRS))),-I$(incdir))$(DL)>> $@ endif ifneq "$(strip $(DEFINES))" "" @echo $(DL)$(DEFINES)$(DL)>> $@ endif ifneq "$(strip $(XDEFINES))" "" @echo $(DL)$(XDEFINES)$(DL)>> $@ endif $(OBJDIR)/%.o: %.cpp $(OBJDIR)/$(NLM_NAME)_cpp.opt @echo $(DL)CC $<$(DL) $(CC) -o $@ $< @$(word 2, $^) $(OBJDIR)/$(NLM_NAME)_cpp.opt: $(CPPOPT_DEPENDS) $(call DEL,$@) @echo $(DL)GEN $@$(DL) ifneq "$(strip $(CFLAGS))" "" @echo $(DL)$(CFLAGS)$(DL)>> $@ endif ifneq "$(strip $(XCFLAGS))" "" @echo $(DL)$(XCFLAGS)$(DL)>> $@ endif ifneq "$(strip $(XINCDIRS))" "" @echo $(DL)$(foreach xincdir,$(strip $(subst ;,$(SPACE),$(XINCDIRS))),-I$(xincdir))$(DL)>> $@ endif ifneq "$(strip $(INCDIRS))" "" @echo $(DL)$(foreach incdir,$(strip $(subst ;,$(SPACE),$(INCDIRS))),-I$(incdir))$(DL)>> $@ endif ifneq "$(strip $(DEFINES))" "" @echo $(DL)$(DEFINES)$(DL)>> $@ endif ifneq "$(strip $(XDEFINES))" "" @echo $(DL)$(XDEFINES)$(DL)>> $@ endif endif # one target nlm # # Rules to build libraries # # If we only have one target library then build it ifeq "$(words $(strip $(TARGET_lib)))" "1" $(TARGET_lib) : $(OBJDIR)/$(LIB_NAME)_lib.lst $(call DEL,$@) @echo $(DL)AR $@$(DL) $(LIB) -o $@ @$< $(OBJDIR)/$(LIB_NAME)_lib.lst: $($(LIB_NAME)_LIBLST_DEPENDS) $(call DEL,$@) ifneq "$(strip $(FILES_lib_objs))" "" @echo $(DL)GEN $@$(DL) @echo $(DL)$(FILES_lib_objs)$(DL)>> $@ endif else # We must have more than one target library so load the individual makefiles $(OBJDIR)/%.lib: NWGNU% $(STANDARD_DEPENDS) FORCE @echo $(DL)Calling $<$(DL) $(MAKE) -f $< $(MAKECMDGOALS) RELEASE=$(RELEASE) endif # # Rules to build nlms. # # If we only have one target NLM then build it ifeq "$(words $(strip $(TARGET_nlm)))" "1" $(TARGET_nlm) : $(FILES_nlm_objs) $(FILES_nlm_libs) $(OBJDIR)/$(NLM_NAME)_link.opt @echo $(DL)LINK $@$(DL) $(LINK) @$(OBJDIR)/$(NLM_NAME)_link.opt # This will force the link option file to be rebuilt if we change the # corresponding makefile $(OBJDIR)/$(NLM_NAME)_link.opt : $($(NLM_NAME)_LINKOPT_DEPENDS) $(call DEL,$@) $(call DEL,$(@:.opt=.def)) @echo $(DL)GEN $@$(DL) @echo $(DL)-nlmversion=$(NLM_VERSION)$(DL)>> $@ @echo $(DL)-warnings off$(DL)>> $@ @echo $(DL)-zerobss$(DL)>> $@ @echo $(DL)-o $(TARGET_nlm)$(DL)>> $@ ifneq "$(FILE_nlm_copyright)" "" @$(CAT) $(FILE_nlm_copyright)>> $@ endif ifeq "$(RELEASE)" "debug" @echo $(DL)-g$(DL)>> $@ @echo $(DL)-sym internal$(DL)>> $@ @echo $(DL)-sym codeview4$(DL)>> $@ @echo $(DL)-osym $(OBJDIR)/$(NLM_NAME).sym$(DL)>> $@ else @echo $(DL)-sym internal$(DL)>> $@ endif @echo $(DL)-l $(SRC)/$(OBJDIR)$(DL)>> $@ @echo $(DL)-l $(HTTPD)/$(OBJDIR)$(DL)>> $@ @echo $(DL)-l $(SERVER)/$(OBJDIR)$(DL)>> $@ @echo $(DL)-l $(STDMOD)/$(OBJDIR)$(DL)>> $@ @echo $(DL)-l $(NWOS)/$(OBJDIR)$(DL)>> $@ @echo $(DL)-l $(NWOS)$(DL)>> $@ @echo $(DL)-l $(APR)/$(OBJDIR)$(DL)>> $@ @echo $(DL)-l $(APR)$(DL)>> $@ @echo $(DL)-l $(APRUTIL)/$(OBJDIR)$(DL)>> $@ @echo $(DL)-l $(PCRE)/$(OBJDIR)$(DL)>> $@ @echo $(DL)-l "$(METROWERKS)/Novell Support/Metrowerks Support/Libraries/Runtime"$(DL)>> $@ @echo $(DL)-l "$(METROWERKS)/Novell Support/Metrowerks Support/Libraries/MSL C++"$(DL)>> $@ ifneq "$(IPV6)" "" @echo $(DL)-l $(NOVELLLIBC)/include/winsock/IPV6$(DL)>> $@ endif @echo $(DL)-l $(NOVELLLIBC)/imports$(DL)>> $@ ifneq "$(LDAPSDK)" "" @echo $(DL)-l $(LDAPSDK)/imports$(DL)>> $@ endif @echo $(DL)-l $(APULDAP)/$(OBJDIR)$(DL)>> $@ @echo $(DL)-l $(XML)/$(OBJDIR)$(DL)>> $@ @echo $(DL)-l $(SRC)/$(OBJDIR)$(DL)>> $@ @echo $(DL)-nodefaults$(DL)>> $@ @echo $(DL)-map $(OBJDIR)/$(NLM_NAME).map$(DL)>> $@ ifneq "$(strip $(XLFLAGS))" "" @echo $(DL)$(XLFLAGS)$(DL)>> $@ endif ifneq "$(strip $(FILES_nlm_objs))" "" @echo $(DL)$(foreach objfile,$(strip $(FILES_nlm_objs)),$(objfile))$(DL)>> $@ endif ifneq "$(FILES_nlm_libs)" "" @echo $(DL)$(foreach libfile, $(notdir $(strip $(FILES_nlm_libs))),-l$(libfile))$(DL)>> $@ endif @echo $(DL)-commandfile $(@:.opt=.def)$(DL)>> $@ @echo $(DL)# Do not edit this file - it is created by make!$(DL)> $(@:.opt=.def) @echo $(DL)# All your changes will be lost!!$(DL)>> $(@:.opt=.def) ifneq "$(FILE_nlm_msg)" "" @echo $(DL)Messages $(FILE_nlm_msg)$(DL)>> $(@:.opt=.def) endif ifneq "$(FILE_nlm_hlp)" "" @echo $(DL)Help $(FILE_nlm_hlp)$(DL)>> $(@:.opt=.def) endif ifeq "$(FILE_nlm_copyright)" "" @echo $(DL)copyright "$(NLM_COPYRIGHT)"$(DL)>> $(@:.opt=.def) endif @echo $(DL)description "$(NLM_DESCRIPTION)"$(DL)>> $(@:.opt=.def) @echo $(DL)threadname "$(NLM_THREAD_NAME)"$(DL)>> $(@:.opt=.def) @echo $(DL)screenname "$(NLM_SCREEN_NAME)"$(DL)>> $(@:.opt=.def) @echo $(DL)stacksize $(subst K,000,$(subst k,K,$(strip $(NLM_STACK_SIZE))))$(DL)>> $(@:.opt=.def) # @echo $(DL)version $(NLM_VERSION) $(DL)>> $(@:.opt=.def) @echo $(DL)start $(NLM_ENTRY_SYM)$(DL)>> $(@:.opt=.def) @echo $(DL)exit $(NLM_EXIT_SYM)$(DL)>> $(@:.opt=.def) ifneq "$(NLM_CHECK_SYM)" "" @echo $(DL)check $(NLM_CHECK_SYM)$(DL)>> $(@:.opt=.def) endif @echo $(DL)$(strip $(NLM_FLAGS))$(DL)>> $(@:.opt=.def) ifneq "$(FILES_nlm_modules)" "" @echo $(DL)module $(foreach module,$(subst $(SPACE),$(COMMA),$(strip $(FILES_nlm_modules))),$(module))$(DL)>> $(@:.opt=.def) endif ifneq "$(FILES_nlm_Ximports)" "" @echo $(DL)import $(foreach import,$(subst $(SPACE),$(COMMA),$(strip $(FILES_nlm_Ximports))),$(import))$(DL)>> $(@:.opt=.def) endif ifneq "$(FILES_nlm_exports)" "" @echo $(DL)export $(foreach export,$(subst $(SPACE),$(COMMA),$(strip $(FILES_nlm_exports))),$(export))$(DL)>> $(@:.opt=.def) endif # if APACHE_UNIPROC is defined, don't include XDCData ifndef APACHE_UNIPROC ifneq "$(string $(XDCDATA))" "" @echo $(DL)xdcdata $(XDCDATA)$(DL)>> $(@:.opt=.def) else @echo $(DL)xdcdata apache.xdc$(DL)>> $(@:.opt=.def) endif endif else # more than one target so look for individual makefiles. # Only include these if NO_LICENSE_FILE isn't set to prevent excessive # recursion ifndef NO_LICENSE_FILE $(OBJDIR)/%.nlm: NWGNU% $($(NLM_NAME)_LINKOPT_DEPENDS) FORCE @echo $(DL)Calling $<$(DL) $(MAKE) -f $< $(MAKECMDGOALS) RELEASE=$(RELEASE) @$(ECHONL) else $(TARGET_nlm): endif # NO_LICENSE_FILE endif httpd-2.4.41/build/fastgen.sh0000755000000000000500000000443010455010104014310 0ustar rootsrc#! /bin/sh # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # The build environment was provided by Sascha Schumann. srcdir=$1 shift mkdir_p=$1 shift bsd_makefile=$1 shift top_srcdir=`(cd $srcdir; pwd)` top_builddir=`pwd` if test "$mkdir_p" = "yes"; then mkdir_p="mkdir -p" else mkdir_p="$top_srcdir/build/mkdir.sh" fi if test "$bsd_makefile" = "yes"; then (cd $top_srcdir; ./build/bsd_makefile) for makefile in $@; do echo "creating $makefile" dir=`echo $makefile|sed 's%/*[^/][^/]*$%%'` if test -z "$dir"; then real_srcdir=$top_srcdir real_builddir=$top_builddir dir="." else $mkdir_p "$dir/" real_srcdir=$top_srcdir/$dir real_builddir=$top_builddir/$dir fi cat - $top_srcdir/$makefile.in <$makefile top_srcdir = $top_srcdir top_builddir = $top_builddir srcdir = $real_srcdir builddir = $real_builddir VPATH = $real_srcdir EOF touch $dir/.deps done else for makefile in $@; do echo "creating $makefile" dir=`echo $makefile|sed 's%/*[^/][^/]*$%%'` if test -z "$dir"; then real_srcdir=$top_srcdir real_builddir=$top_builddir dir="." else $mkdir_p "$dir/" real_srcdir=$top_srcdir/$dir real_builddir=$top_builddir/$dir fi cat - $top_srcdir/$makefile.in <$makefile top_srcdir = $top_srcdir top_builddir = $top_builddir srcdir = $real_srcdir builddir = $real_builddir VPATH = $real_srcdir EOF touch $dir/.deps done fi httpd-2.4.41/build/pkg/0002755000000000000500000000000013523273343013123 5ustar rootsrchttpd-2.4.41/build/pkg/README0000644000000000000500000000105310166516103013772 0ustar rootsrcThe script in this directory will attempt to build a Solaris package out of a source tree for httpd. To build a package, make sure you are in the root of the source tree, and run: build/pkg/buildpkg.sh A Solaris package called httpd---local.gz will be created in the root of the source tree. By default, the script will attempt to find a system installed version of APR and APR-util v1. You may override the location of apr or apr-util like so: build/pkg/buildpkg.sh --with-apr=some/other/path --with-apr-util=some/other/path httpd-2.4.41/build/pkg/pkginfo.in0000644000000000000500000000034310200230015015060 0ustar rootsrcPKG="ASFhttpd" NAME="httpd" ARCH="@target_cpu@" VERSION="@HTTPD_VERSION@" CATEGORY="application" VENDOR="Apache Software Foundation" EMAIL="dev@httpd.apache.org" PSTAMP="dev@httpd.apache.org" BASEDIR="@prefix@" CLASSES="none" httpd-2.4.41/build/pkg/buildpkg.sh0000755000000000000500000000532110455010104015243 0ustar rootsrc#!/bin/sh # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # buildpkg.sh: This script builds a Solaris PKG from the source tree # provided. LAYOUT=Apache PREFIX=/usr/local/apache2 TEMPDIR=/var/tmp/$USER/httpd-root rm -rf $TEMPDIR apr_config=`which apr-1-config` apu_config=`which apu-1-config` while test $# -gt 0 do # Normalize case "$1" in -*=*) optarg=`echo "$1" | sed 's/[-_a-zA-Z0-9]*=//'` ;; *) optarg= ;; esac case "$1" in --with-apr=*) apr_config=$optarg ;; esac case "$1" in --with-apr-util=*) apu_config=$optarg ;; esac shift done if [ ! -f "$apr_config" -a ! -f "$apr_config/configure.in" ]; then echo "The apr source directory / apr-1-config could not be found" echo "Usage: buildpkg [--with-apr=[dir|file]] [--with-apr-util=[dir|file]]" exit 1 fi if [ ! -f "$apu_config" -a ! -f "$apu_config/configure.in" ]; then echo "The apu source directory / apu-1-config could not be found" echo "Usage: buildpkg [--with-apr=[dir|file]] [--with-apr-util=[dir|file]]" exit 1 fi ./configure --enable-layout=$LAYOUT \ --with-apr=$apr_config \ --with-apr-util=$apu_config \ --enable-mods-shared=all \ --with-devrandom \ --with-ldap --enable-ldap --enable-authnz-ldap \ --enable-cache --enable-disk-cache --enable-mem-cache \ --enable-ssl --with-ssl \ --enable-deflate --enable-cgid \ --enable-proxy --enable-proxy-connect \ --enable-proxy-http --enable-proxy-ftp make make install DESTDIR=$TEMPDIR . build/pkg/pkginfo cp build/pkg/pkginfo $TEMPDIR$PREFIX current=`pwd` cd $TEMPDIR$PREFIX echo "i pkginfo=./pkginfo" > prototype find . -print | grep -v ./prototype | grep -v ./pkginfo | pkgproto | awk '{print $1" "$2" "$3" "$4" root bin"}' >> prototype mkdir $TEMPDIR/pkg pkgmk -r $TEMPDIR$PREFIX -d $TEMPDIR/pkg cd $current pkgtrans -s $TEMPDIR/pkg $current/$NAME-$VERSION-$ARCH-local gzip $current/$NAME-$VERSION-$ARCH-local rm -rf $TEMPDIR httpd-2.4.41/build/NWGNUscripts.inc0000644000000000000500000000376411737125415015354 0ustar rootsrc# Include for creating start/stop/restart NCF scripts. instscripts:: FORCE $(INSTALLBASE)/ap2start.ncf $(INSTALLBASE)/ap2auto.ncf $(INSTALLBASE)/ap2rest.ncf $(INSTALLBASE)/ap2stop.ncf $(INSTALLBASE)/ap2start.ncf: @echo $(DL)# NCF to start Apache 2.x in own address space$(DL)> $@ @echo $(DL)# Make sure that httpstk is not listening on 80$(DL)>> $@ @echo $(DL)# httpcloseport 80 /silent$(DL)>> $@ @echo $(DL)# search add SYS:/$(BASEDIR)$(DL)>> $@ @echo $(DL)load address space = $(BASEDIR) SYS:/$(BASEDIR)/apache2$(DL)>> $@ @echo $(DL)# If you have problems with 3rd-party modules try to load in OS space.$(DL)>> $@ @echo $(DL)# load SYS:/$(BASEDIR)/apache2$(DL)>> $@ @$(ECHONL)>> $@ $(INSTALLBASE)/ap2auto.ncf: @echo $(DL)# NCF to start Apache 2.x in own address space$(DL)> $@ @echo $(DL)# and let automatically restart in case it crashes$(DL)>> $@ @echo $(DL)# Make sure that httpstk is not listening on 80$(DL)>> $@ @echo $(DL)# httpcloseport 80 /silent$(DL)>> $@ @echo $(DL)# search add SYS:/$(BASEDIR)$(DL)>> $@ @echo $(DL)restart address space = $(BASEDIR) SYS:/$(BASEDIR)/apache2$(DL)>> $@ @$(ECHONL)>> $@ $(INSTALLBASE)/ap2rest.ncf: @echo $(DL)# NCF to restart Apache 2.x in own address space$(DL)> $@ @echo $(DL)apache2 restart -p $(BASEDIR)$(DL)>> $@ @echo $(DL)# If you have loaded Apache2.x in OS space use the line below.$(DL)>> $@ @echo $(DL)# apache2 restart$(DL)>> $@ @$(ECHONL)>> $@ $(INSTALLBASE)/ap2stop.ncf: @echo $(DL)# NCF to stop Apache 2.x in own address space$(DL)> $@ @echo $(DL)apache2 shutdown -p $(BASEDIR)$(DL)>> $@ @echo $(DL)# If you have loaded Apache2.x in OS space use the line below.$(DL)>> $@ @echo $(DL)# apache2 shutdown$(DL)>> $@ @$(ECHONL)>> $@ $(INSTALLBASE)/ap2prod.ncf: @echo $(DL)# NCF to create a product record for Apache 2.x in product database$(DL)> $@ @echo $(DL)PRODSYNC DEL APACHE$(VERSION_MAJMIN)$(DL)>> $@ @echo $(DL)PRODSYNC ADD APACHE$(VERSION_MAJMIN) ProductRecord "$(VERSION_STR)" "Apache $(VERSION_STR) Webserver"$(DL)>> $@ @$(ECHONL)>> $@ httpd-2.4.41/build/PrintPath0000755000000000000500000000614513523273355014210 0ustar rootsrc#!/bin/sh # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # Look for program[s] somewhere in $PATH. # # Options: # -s # Do not print out full pathname. (silent) # -pPATHNAME # Look in PATHNAME instead of $PATH # # Usage: # PrintPath [-s] [-pPATHNAME] program [program ...] # # Initially written by Jim Jagielski for the Apache configuration mechanism # (with kudos to Kernighan/Pike) ## # Some "constants" ## pathname=$PATH echo="yes" ## # Find out what OS we are running for later on ## os=`(uname) 2>/dev/null` ## # Parse command line ## for args in $* do case $args in -s ) echo="no" ;; -p* ) pathname="`echo $args | sed 's/^..//'`" ;; * ) programs="$programs $args" ;; esac done ## # Now we make the adjustments required for OS/2 and everyone # else :) # # First of all, all OS/2 programs have the '.exe' extension. # Next, we adjust PATH (or what was given to us as PATH) to # be whitespace separated directories. # Finally, we try to determine the best flag to use for # test/[] to look for an executable file. OS/2 just has '-r' # but with other OSs, we do some funny stuff to check to see # if test/[] knows about -x, which is the prefered flag. ## if [ "x$os" = "xOS/2" ] then ext=".exe" pathname=`echo -E $pathname | sed 's/^;/.;/ s/;;/;.;/g s/;$/;./ s/;/ /g s/\\\\/\\//g' ` test_exec_flag="-r" else ext="" # No default extensions pathname=`echo $pathname | sed 's/^:/.:/ s/::/:.:/g s/:$/:./ s/:/ /g' ` # Here is how we test to see if test/[] can handle -x testfile="pp.t.$$" cat > $testfile </dev/null`; then test_exec_flag="-x" else test_exec_flag="-r" fi rm -f $testfile fi for program in $programs do for path in $pathname do if [ $test_exec_flag $path/${program}${ext} ] && \ [ ! -d $path/${program}${ext} ]; then if [ "x$echo" = "xyes" ]; then echo $path/${program}${ext} fi exit 0 fi # Next try without extension (if one was used above) if [ "x$ext" != "x" ]; then if [ $test_exec_flag $path/${program} ] && \ [ ! -d $path/${program} ]; then if [ "x$echo" = "xyes" ]; then echo $path/${program} fi exit 0 fi fi done done exit 1 httpd-2.4.41/build/special.mk0000644000000000000500000000237410455062414014313 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # The build environment was provided by Sascha Schumann. all: all-recursive include $(builddir)/modules.mk TARGETS = $(static) SHARED_TARGETS = $(shared) INSTALL_TARGETS = install-modules-$(INSTALL_DSO) include $(top_builddir)/build/rules.mk install-modules-yes: $(SHARED_TARGETS) @$(MKINSTALLDIRS) $(DESTDIR)$(libexecdir) @list='$(shared)'; for i in $$list; do \ $(top_srcdir)/build/instdso.sh SH_LIBTOOL='$(SH_LIBTOOL)' $$i $(DESTDIR)$(libexecdir); \ done install-modules-no: httpd-2.4.41/build/bsd_makefile0000755000000000000500000000223610455012627014673 0ustar rootsrc#! /bin/sh # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # # The build environment was provided by Sascha Schumann. # cwd must be top_srcdir test -f build/bsd_makefile || exit 2 test -f bsd_converted && exit 0 tmpfile=`mktemp /tmp/bsd_makefile.XXXXXX 2>/dev/null` || tmpfile="tmp.$$" for i in build/*.mk; do sed 's/^include \(.*\)/.include "\1"/' $i >$tmpfile \ && cp $tmpfile $i done rm -f $tmpfile touch bsd_converted exit 0 httpd-2.4.41/build/config_vars.sh.in0000644000000000000500000000500713160167044015600 0ustar rootsrc#! @SHELL@ # -*- sh -*- # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # config_vars.sh is generated by configure, and is run by the "install-build" # target to generate a version of config_vars.mk which is suitable to be # installed. Such a file cannot be generated at configure-time, since it # requires the output of the *installed* ap*-config scripts. # For a DESTDIR=... installation using the bundled copies of # apr/apr-util, the installed ap?-config scripts must be found # in the DESTDIR-relocated install tree. For a DESTDIR=... # installation when using *external* copies of apr/apr-util, # the absolute path must be used, not DESTDIR-relocated. if test -f ${DESTDIR}@APR_CONFIG@; then APR_CONFIG=${DESTDIR}@APR_CONFIG@ APU_CONFIG=${DESTDIR}@APU_CONFIG@ else APR_CONFIG=@APR_CONFIG@ APU_CONFIG=@APU_CONFIG@ fi APR_LIBTOOL="`${APR_CONFIG} --apr-libtool`" APR_INCLUDEDIR="`${APR_CONFIG} --includedir`" test -n "@APU_CONFIG@" && APU_INCLUDEDIR="`${APU_CONFIG} --includedir`" installbuilddir="@exp_installbuilddir@" exec sed " /^[A-Z0-9_]*_LDADD/d /MPM_LIB/d /APACHECTL_ULIMIT/d /[a-z]*_LTFLAGS/d /^MPM_MODULES/d /^ENABLED_MPM_MODULE/d /^DSO_MODULES/d /^MODULE_/d /^PORT/d /^SSLPORT/d /^nonssl_/d /^CORE_IMPLIB/d /^rel_/d /^abs_srcdir/d /^BUILTIN_LIBS/d /^[A-Z]*_SHARED_CMDS/d /^shared_build/d /^OS_DIR/d /^AP_LIBS/d /^OS_SPECIFIC_VARS/d /^MPM_SUBDIRS/d /^EXTRA_INCLUDES/{ s, = , = -I\$(includedir) , s, -I\$(top_srcdir)/[^ ]*,,g s, -I\$(top_builddir)/[^ ]*,,g } /^MKINSTALLDIRS/s,\$(abs_srcdir)/build,$installbuilddir, /^INSTALL /s,\$(abs_srcdir)/build,$installbuilddir, /^HTTPD_LDFLAGS/d /^UTIL_LDFLAGS/d /^APR_INCLUDEDIR.*$/s,.*,APR_INCLUDEDIR = ${APR_INCLUDEDIR}, /^APU_INCLUDEDIR.*$/s,.*,APU_INCLUDEDIR = ${APU_INCLUDEDIR}, /^LIBTOOL.*$/s,/[^ ]*/libtool \(.*\),${APR_LIBTOOL} @LTFLAGS@, " httpd-2.4.41/os/0002755000000000000500000000000013523273343011664 5ustar rootsrchttpd-2.4.41/os/unix/0002755000000000000500000000000013523273343012647 5ustar rootsrchttpd-2.4.41/os/unix/unixd.h0000644000000000000500000001021413114242336014135 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file unixd.h * @brief common stuff that unix MPMs will want * * @addtogroup APACHE_OS_UNIX * @{ */ #ifndef UNIXD_H #define UNIXD_H #include "httpd.h" #include "http_config.h" #include "scoreboard.h" #include "ap_listen.h" #ifdef HAVE_SYS_TIME_H #include #endif #ifdef HAVE_SYS_RESOURCE_H #include #endif #include "apr_hooks.h" #include "apr_thread_proc.h" #include "apr_proc_mutex.h" #include "apr_global_mutex.h" #include #include #if APR_HAVE_SYS_TYPES_H #include #endif #ifdef HAVE_SYS_IPC_H #include #endif #ifdef __cplusplus extern "C" { #endif typedef struct { uid_t uid; gid_t gid; int userdir; } ap_unix_identity_t; AP_DECLARE_HOOK(ap_unix_identity_t *, get_suexec_identity,(const request_rec *r)) /* Default user name and group name. These may be specified as numbers by * placing a # before a number */ #ifndef DEFAULT_USER #define DEFAULT_USER "#-1" #endif #ifndef DEFAULT_GROUP #define DEFAULT_GROUP "#-1" #endif typedef struct { const char *user_name; const char *group_name; uid_t user_id; gid_t group_id; int suexec_enabled; const char *chroot_dir; const char *suexec_disabled_reason; /* suitable msg if !suexec_enabled */ } unixd_config_rec; AP_DECLARE_DATA extern unixd_config_rec ap_unixd_config; #if defined(RLIMIT_CPU) || defined(RLIMIT_DATA) || defined(RLIMIT_VMEM) || defined(RLIMIT_NPROC) || defined(RLIMIT_AS) AP_DECLARE(void) ap_unixd_set_rlimit(cmd_parms *cmd, struct rlimit **plimit, const char *arg, const char * arg2, int type); #endif /** * One of the functions to set mutex permissions should be called in * the parent process on platforms that switch identity when the * server is started as root. * If the child init logic is performed before switching identity * (e.g., MPM setup for an accept mutex), it should only be called * for SysV semaphores. Otherwise, it is safe to call it for all * mutex types. */ AP_DECLARE(apr_status_t) ap_unixd_set_proc_mutex_perms(apr_proc_mutex_t *pmutex); AP_DECLARE(apr_status_t) ap_unixd_set_global_mutex_perms(apr_global_mutex_t *gmutex); AP_DECLARE(apr_status_t) ap_unixd_accept(void **accepted, ap_listen_rec *lr, apr_pool_t *ptrans); #ifdef HAVE_KILLPG #define ap_unixd_killpg(x, y) (killpg ((x), (y))) #define ap_os_killpg(x, y) (killpg ((x), (y))) #else /* HAVE_KILLPG */ #define ap_unixd_killpg(x, y) (kill (-(x), (y))) #define ap_os_killpg(x, y) (kill (-(x), (y))) #endif /* HAVE_KILLPG */ typedef struct { void *baton; /* MPM's */ /* volatile because they're updated from signals' handlers */ int volatile mpm_state; int volatile shutdown_pending; int volatile restart_pending; int volatile is_ungraceful; ap_generation_t my_generation; int module_loads; int was_graceful; /* * Current number of listeners buckets and maximum reached across * restarts (to size retained data according to dynamic num_buckets, * eg. idle_spawn_rate). */ int num_buckets, max_buckets; } ap_unixd_mpm_retained_data; AP_DECLARE(ap_unixd_mpm_retained_data *) ap_unixd_mpm_get_retained_data(void); AP_DECLARE(void) ap_unixd_mpm_set_signals(apr_pool_t *pconf, int once_process); #ifdef __cplusplus } #endif #endif /** @} */ httpd-2.4.41/os/unix/config.m40000644000000000000500000000024010150161574014343 0ustar rootsrcif test "$OS" = "unix" ; then APACHE_TYPE_RLIM_T AC_CHECK_HEADERS(sys/time.h sys/resource.h sys/sem.h sys/ipc.h) AC_CHECK_FUNCS(setsid killpg) fi httpd-2.4.41/os/unix/unixd.c0000644000000000000500000005367513305736434014163 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_main.h" #include "http_core.h" #include "http_log.h" #include "unixd.h" #include "mpm_common.h" #include "os.h" #include "ap_mpm.h" #include "apr_thread_proc.h" #include "apr_signal.h" #include "apr_strings.h" #include "apr_portable.h" #ifdef HAVE_PWD_H #include #endif #ifdef HAVE_SYS_RESOURCE_H #include #endif /* XXX */ #include #ifdef HAVE_UNISTD_H #include #endif #ifdef HAVE_GRP_H #include #endif #ifdef HAVE_STRINGS_H #include #endif #ifdef HAVE_SYS_SEM_H #include #endif #ifdef HAVE_SYS_PRCTL_H #include #endif unixd_config_rec ap_unixd_config; APLOG_USE_MODULE(core); AP_DECLARE(void) ap_unixd_set_rlimit(cmd_parms *cmd, struct rlimit **plimit, const char *arg, const char * arg2, int type) { #if (defined(RLIMIT_CPU) || defined(RLIMIT_DATA) || defined(RLIMIT_VMEM) || defined(RLIMIT_NPROC) || defined(RLIMIT_AS)) && APR_HAVE_STRUCT_RLIMIT && APR_HAVE_GETRLIMIT char *str; struct rlimit *limit; /* If your platform doesn't define rlim_t then typedef it in ap_config.h */ rlim_t cur = 0; rlim_t max = 0; *plimit = (struct rlimit *)apr_pcalloc(cmd->pool, sizeof(**plimit)); limit = *plimit; if ((getrlimit(type, limit)) != 0) { *plimit = NULL; ap_log_error(APLOG_MARK, APLOG_ERR, errno, cmd->server, APLOGNO(02172) "%s: getrlimit failed", cmd->cmd->name); return; } if (*(str = ap_getword_conf(cmd->temp_pool, &arg)) != '\0') { if (!strcasecmp(str, "max")) { cur = limit->rlim_max; } else { cur = atol(str); } } else { ap_log_error(APLOG_MARK, APLOG_ERR, 0, cmd->server, APLOGNO(02173) "Invalid parameters for %s", cmd->cmd->name); return; } if (arg2 && (*(str = ap_getword_conf(cmd->temp_pool, &arg2)) != '\0')) { max = atol(str); } /* if we aren't running as root, cannot increase max */ if (geteuid()) { limit->rlim_cur = cur; if (max && (max > limit->rlim_max)) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, cmd->server, APLOGNO(02174) "Must be uid 0 to raise maximum %s", cmd->cmd->name); } else if (max) { limit->rlim_max = max; } } else { if (cur) { limit->rlim_cur = cur; } if (max) { limit->rlim_max = max; } } #else ap_log_error(APLOG_MARK, APLOG_ERR, 0, cmd->server, APLOGNO(02175) "Platform does not support rlimit for %s", cmd->cmd->name); #endif } APR_HOOK_STRUCT( APR_HOOK_LINK(get_suexec_identity) ) AP_IMPLEMENT_HOOK_RUN_FIRST(ap_unix_identity_t *, get_suexec_identity, (const request_rec *r), (r), NULL) static apr_status_t ap_unix_create_privileged_process( apr_proc_t *newproc, const char *progname, const char * const *args, const char * const *env, apr_procattr_t *attr, ap_unix_identity_t *ugid, apr_pool_t *p) { int i = 0; const char **newargs; char *newprogname; char *execuser, *execgroup; const char *argv0; if (!ap_unixd_config.suexec_enabled) { return apr_proc_create(newproc, progname, args, env, attr, p); } argv0 = ap_strrchr_c(progname, '/'); /* Allow suexec's "/" check to succeed */ if (argv0 != NULL) { argv0++; } else { argv0 = progname; } if (ugid->userdir) { execuser = apr_psprintf(p, "~%ld", (long) ugid->uid); } else { execuser = apr_psprintf(p, "%ld", (long) ugid->uid); } execgroup = apr_psprintf(p, "%ld", (long) ugid->gid); if (!execuser || !execgroup) { return APR_ENOMEM; } i = 0; while (args[i]) i++; /* allocate space for 4 new args, the input args, and a null terminator */ newargs = apr_palloc(p, sizeof(char *) * (i + 4)); newprogname = SUEXEC_BIN; newargs[0] = SUEXEC_BIN; newargs[1] = execuser; newargs[2] = execgroup; newargs[3] = apr_pstrdup(p, argv0); /* ** using a shell to execute suexec makes no sense thus ** we force everything to be APR_PROGRAM, and never ** APR_SHELLCMD */ if (apr_procattr_cmdtype_set(attr, APR_PROGRAM) != APR_SUCCESS) { return APR_EGENERAL; } i = 1; do { newargs[i + 3] = args[i]; } while (args[i++]); return apr_proc_create(newproc, newprogname, newargs, env, attr, p); } AP_DECLARE(apr_status_t) ap_os_create_privileged_process( const request_rec *r, apr_proc_t *newproc, const char *progname, const char * const *args, const char * const *env, apr_procattr_t *attr, apr_pool_t *p) { ap_unix_identity_t *ugid = ap_run_get_suexec_identity(r); if (ugid == NULL) { return apr_proc_create(newproc, progname, args, env, attr, p); } return ap_unix_create_privileged_process(newproc, progname, args, env, attr, ugid, p); } /* XXX move to APR and externalize (but implement differently :) ) */ static apr_lockmech_e proc_mutex_mech(apr_proc_mutex_t *pmutex) { const char *mechname = apr_proc_mutex_name(pmutex); if (!strcmp(mechname, "sysvsem")) { return APR_LOCK_SYSVSEM; } else if (!strcmp(mechname, "flock")) { return APR_LOCK_FLOCK; } return APR_LOCK_DEFAULT; } AP_DECLARE(apr_status_t) ap_unixd_set_proc_mutex_perms(apr_proc_mutex_t *pmutex) { if (!geteuid()) { apr_lockmech_e mech = proc_mutex_mech(pmutex); switch(mech) { #if APR_HAS_SYSVSEM_SERIALIZE case APR_LOCK_SYSVSEM: { apr_os_proc_mutex_t ospmutex; #if !APR_HAVE_UNION_SEMUN union semun { long val; struct semid_ds *buf; unsigned short *array; }; #endif union semun ick; struct semid_ds buf = { { 0 } }; apr_os_proc_mutex_get(&ospmutex, pmutex); buf.sem_perm.uid = ap_unixd_config.user_id; buf.sem_perm.gid = ap_unixd_config.group_id; buf.sem_perm.mode = 0600; ick.buf = &buf; if (semctl(ospmutex.crossproc, 0, IPC_SET, ick) < 0) { return errno; } } break; #endif #if APR_HAS_FLOCK_SERIALIZE case APR_LOCK_FLOCK: { const char *lockfile = apr_proc_mutex_lockfile(pmutex); if (lockfile) { if (chown(lockfile, ap_unixd_config.user_id, -1 /* no gid change */) < 0) { return errno; } } } break; #endif default: /* do nothing */ break; } } return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_unixd_set_global_mutex_perms(apr_global_mutex_t *gmutex) { #if !APR_PROC_MUTEX_IS_GLOBAL apr_os_global_mutex_t osgmutex; apr_os_global_mutex_get(&osgmutex, gmutex); return ap_unixd_set_proc_mutex_perms(osgmutex.proc_mutex); #else /* APR_PROC_MUTEX_IS_GLOBAL */ /* In this case, apr_proc_mutex_t and apr_global_mutex_t are the same. */ return ap_unixd_set_proc_mutex_perms(gmutex); #endif /* APR_PROC_MUTEX_IS_GLOBAL */ } AP_DECLARE(apr_status_t) ap_unixd_accept(void **accepted, ap_listen_rec *lr, apr_pool_t *ptrans) { apr_socket_t *csd; apr_status_t status; #ifdef _OSD_POSIX int sockdes; #endif *accepted = NULL; status = apr_socket_accept(&csd, lr->sd, ptrans); if (status == APR_SUCCESS) { *accepted = csd; #ifdef _OSD_POSIX apr_os_sock_get(&sockdes, csd); if (sockdes >= FD_SETSIZE) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ap_server_conf, APLOGNO(02176) "new file descriptor %d is too large; you probably need " "to rebuild Apache with a larger FD_SETSIZE " "(currently %d)", sockdes, FD_SETSIZE); apr_socket_close(csd); return APR_EINTR; } #endif return APR_SUCCESS; } if (APR_STATUS_IS_EINTR(status)) { return status; } /* Our old behaviour here was to continue after accept() * errors. But this leads us into lots of troubles * because most of the errors are quite fatal. For * example, EMFILE can be caused by slow descriptor * leaks (say in a 3rd party module, or libc). It's * foolish for us to continue after an EMFILE. We also * seem to tickle kernel bugs on some platforms which * lead to never-ending loops here. So it seems best * to just exit in most cases. */ switch (status) { #if defined(HPUX11) && defined(ENOBUFS) /* On HPUX 11.x, the 'ENOBUFS, No buffer space available' * error occurs because the accept() cannot complete. * You will not see ENOBUFS with 10.20 because the kernel * hides any occurrence from being returned to user space. * ENOBUFS with 11.x's TCP/IP stack is possible, and could * occur intermittently. As a work-around, we are going to * ignore ENOBUFS. */ case ENOBUFS: #endif #ifdef EPROTO /* EPROTO on certain older kernels really means * ECONNABORTED, so we need to ignore it for them. * See discussion in new-httpd archives nh.9701 * search for EPROTO. * * Also see nh.9603, search for EPROTO: * There is potentially a bug in Solaris 2.x x<6, * and other boxes that implement tcp sockets in * userland (i.e. on top of STREAMS). On these * systems, EPROTO can actually result in a fatal * loop. See PR#981 for example. It's hard to * handle both uses of EPROTO. */ case EPROTO: #endif #ifdef ECONNABORTED case ECONNABORTED: #endif /* Linux generates the rest of these, other tcp * stacks (i.e. bsd) tend to hide them behind * getsockopt() interfaces. They occur when * the net goes sour or the client disconnects * after the three-way handshake has been done * in the kernel but before userland has picked * up the socket. */ #ifdef ECONNRESET case ECONNRESET: #endif #ifdef ETIMEDOUT case ETIMEDOUT: #endif #ifdef EHOSTUNREACH case EHOSTUNREACH: #endif #ifdef ENETUNREACH case ENETUNREACH: #endif /* EAGAIN/EWOULDBLOCK can be returned on BSD-derived * TCP stacks when the connection is aborted before * we call connect, but only because our listener * sockets are non-blocking (AP_NONBLOCK_WHEN_MULTI_LISTEN) */ #ifdef EAGAIN case EAGAIN: #endif #ifdef EWOULDBLOCK #if !defined(EAGAIN) || EAGAIN != EWOULDBLOCK case EWOULDBLOCK: #endif #endif break; #ifdef ENETDOWN case ENETDOWN: /* * When the network layer has been shut down, there * is not much use in simply exiting: the parent * would simply re-create us (and we'd fail again). * Use the CHILDFATAL code to tear the server down. * @@@ Martin's idea for possible improvement: * A different approach would be to define * a new APEXIT_NETDOWN exit code, the reception * of which would make the parent shutdown all * children, then idle-loop until it detected that * the network is up again, and restart the children. * Ben Hyde noted that temporary ENETDOWN situations * occur in mobile IP. */ ap_log_error(APLOG_MARK, APLOG_EMERG, status, ap_server_conf, APLOGNO(02177) "apr_socket_accept: giving up."); return APR_EGENERAL; #endif /*ENETDOWN*/ default: /* If the socket has been closed in ap_close_listeners() * by the restart/stop action, we may get EBADF. * Do not print an error in this case. */ if (!lr->active) { ap_log_error(APLOG_MARK, APLOG_DEBUG, status, ap_server_conf, APLOGNO(02178) "apr_socket_accept failed for inactive listener"); return status; } ap_log_error(APLOG_MARK, APLOG_ERR, status, ap_server_conf, APLOGNO(02179) "apr_socket_accept: (client socket)"); return APR_EGENERAL; } return status; } /* Unixes MPMs' */ static ap_unixd_mpm_retained_data *retained_data = NULL; static apr_status_t retained_data_cleanup(void *unused) { (void)unused; retained_data = NULL; return APR_SUCCESS; } AP_DECLARE(ap_unixd_mpm_retained_data *) ap_unixd_mpm_get_retained_data() { if (!retained_data) { retained_data = ap_retained_data_create("ap_unixd_mpm_retained_data", sizeof(*retained_data)); apr_pool_pre_cleanup_register(ap_pglobal, NULL, retained_data_cleanup); retained_data->mpm_state = AP_MPMQ_STARTING; } return retained_data; } static void sig_term(int sig) { if (!retained_data) { /* Main process (ap_pglobal) is dying */ return; } retained_data->mpm_state = AP_MPMQ_STOPPING; if (retained_data->shutdown_pending && (retained_data->is_ungraceful || sig == AP_SIG_GRACEFUL_STOP)) { /* Already handled */ return; } retained_data->shutdown_pending = 1; if (sig != AP_SIG_GRACEFUL_STOP) { retained_data->is_ungraceful = 1; } } static void sig_restart(int sig) { if (!retained_data) { /* Main process (ap_pglobal) is dying */ return; } retained_data->mpm_state = AP_MPMQ_STOPPING; if (retained_data->restart_pending && (retained_data->is_ungraceful || sig == AP_SIG_GRACEFUL)) { /* Already handled */ return; } retained_data->restart_pending = 1; if (sig != AP_SIG_GRACEFUL) { retained_data->is_ungraceful = 1; } } static apr_status_t unset_signals(void *unused) { if (!retained_data) { /* Main process (ap_pglobal) is dying */ return APR_SUCCESS; } retained_data->shutdown_pending = retained_data->restart_pending = 0; retained_data->was_graceful = !retained_data->is_ungraceful; retained_data->is_ungraceful = 0; return APR_SUCCESS; } static void ap_terminate(void) { ap_main_state = AP_SQ_MS_EXITING; apr_pool_destroy(ap_pglobal); apr_terminate(); } AP_DECLARE(void) ap_unixd_mpm_set_signals(apr_pool_t *pconf, int one_process) { #ifndef NO_USE_SIGACTION struct sigaction sa; #endif if (!one_process) { ap_fatal_signal_setup(ap_server_conf, pconf); } else if (!ap_retained_data_get("ap_unixd_mpm_one_process_cleanup")) { /* In one process mode (debug), httpd will exit immediately when asked * to (SIGTERM/SIGINT) and never restart. We still want the cleanups to * run though (such that e.g. temporary files/IPCs don't leak on the * system), so the first time around we use atexit() to cleanup after * ourselves. */ ap_retained_data_create("ap_unixd_mpm_one_process_cleanup", 1); atexit(ap_terminate); } /* Signals' handlers depend on retained data */ (void)ap_unixd_mpm_get_retained_data(); #ifndef NO_USE_SIGACTION memset(&sa, 0, sizeof sa); sigemptyset(&sa.sa_mask); #ifdef SIGPIPE sa.sa_handler = SIG_IGN; if (sigaction(SIGPIPE, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00269) "sigaction(SIGPIPE)"); #endif #ifdef SIGXCPU sa.sa_handler = SIG_DFL; if (sigaction(SIGXCPU, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00267) "sigaction(SIGXCPU)"); #endif #ifdef SIGXFSZ /* For systems following the LFS standard, ignoring SIGXFSZ allows * a write() beyond the 2GB limit to fail gracefully with E2BIG * rather than terminate the process. */ sa.sa_handler = SIG_IGN; if (sigaction(SIGXFSZ, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00268) "sigaction(SIGXFSZ)"); #endif sa.sa_handler = sig_term; if (sigaction(SIGTERM, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00264) "sigaction(SIGTERM)"); #ifdef SIGINT if (sigaction(SIGINT, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00266) "sigaction(SIGINT)"); #endif #ifdef AP_SIG_GRACEFUL_STOP if (sigaction(AP_SIG_GRACEFUL_STOP, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00265) "sigaction(" AP_SIG_GRACEFUL_STOP_STRING ")"); #endif /* Don't catch restart signals in ONE_PROCESS mode :) */ if (!one_process) { sa.sa_handler = sig_restart; if (sigaction(SIGHUP, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00270) "sigaction(SIGHUP)"); if (sigaction(AP_SIG_GRACEFUL, &sa, NULL) < 0) ap_log_error(APLOG_MARK, APLOG_WARNING, errno, ap_server_conf, APLOGNO(00271) "sigaction(" AP_SIG_GRACEFUL_STRING ")"); } #else /* NO_USE_SIGACTION */ #ifdef SIGPIPE apr_signal(SIGPIPE, SIG_IGN); #endif /* SIGPIPE */ #ifdef SIGXCPU apr_signal(SIGXCPU, SIG_DFL); #endif /* SIGXCPU */ #ifdef SIGXFSZ apr_signal(SIGXFSZ, SIG_IGN); #endif /* SIGXFSZ */ apr_signal(SIGTERM, sig_term); #ifdef AP_SIG_GRACEFUL_STOP apr_signal(AP_SIG_GRACEFUL_STOP, sig_term); #endif /* AP_SIG_GRACEFUL_STOP */ if (!one_process) { /* Don't restart in ONE_PROCESS mode :) */ #ifdef SIGHUP apr_signal(SIGHUP, sig_restart); #endif /* SIGHUP */ #ifdef AP_SIG_GRACEFUL apr_signal(AP_SIG_GRACEFUL, sig_restart); #endif /* AP_SIG_GRACEFUL */ } #endif /* NO_USE_SIGACTION */ apr_pool_cleanup_register(pconf, NULL, unset_signals, apr_pool_cleanup_null); } #ifdef _OSD_POSIX #include "apr_lib.h" #define USER_LEN 8 typedef enum { bs2_unknown, /* not initialized yet. */ bs2_noFORK, /* no fork() because -X flag was specified */ bs2_FORK, /* only fork() because uid != 0 */ bs2_UFORK /* Normally, ufork() is used to switch identities. */ } bs2_ForkType; static bs2_ForkType forktype = bs2_unknown; /* Determine the method for forking off a child in such a way as to * set both the POSIX and BS2000 user id's to the unprivileged user. */ static bs2_ForkType os_forktype(int one_process) { /* have we checked the OS version before? If yes return the previous * result - the OS release isn't going to change suddenly! */ if (forktype == bs2_unknown) { /* not initialized yet */ /* No fork if the one_process option was set */ if (one_process) { forktype = bs2_noFORK; } /* If the user is unprivileged, use the normal fork() only. */ else if (getuid() != 0) { forktype = bs2_FORK; } else forktype = bs2_UFORK; } return forktype; } /* This routine complements the setuid() call: it causes the BS2000 job * environment to be switched to the target user's user id. * That is important if CGI scripts try to execute native BS2000 commands. */ int os_init_job_environment(server_rec *server, const char *user_name, int one_process) { bs2_ForkType type = os_forktype(one_process); /* We can be sure that no change to uid==0 is possible because of * the checks in http_core.c:set_user() */ if (one_process) { type = forktype = bs2_noFORK; ap_log_error(APLOG_MARK, APLOG_ERR, 0, server, APLOGNO(02180) "The debug mode of Apache should only " "be started by an unprivileged user!"); return 0; } return 0; } /* BS2000 requires a "special" version of fork() before a setuid() call */ pid_t os_fork(const char *user) { pid_t pid; char username[USER_LEN+1]; switch (os_forktype(0)) { case bs2_FORK: pid = fork(); break; case bs2_UFORK: apr_cpystrn(username, user, sizeof username); /* Make user name all upper case - for some versions of ufork() */ ap_str_toupper(username); pid = ufork(username); if (pid == -1 && errno == EPERM) { ap_log_error(APLOG_MARK, APLOG_EMERG, errno, ap_server_conf, APLOGNO(02181) "ufork: Possible mis-configuration " "for user %s - Aborting.", user); exit(1); } break; default: pid = 0; break; } return pid; } #endif /* _OSD_POSIX */ httpd-2.4.41/os/unix/os.h0000644000000000000500000000320411637145452013441 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file unix/os.h * @brief This file in included in all Apache source code. It contains definitions * of facilities available on _this_ operating system (HAVE_* macros), * and prototypes of OS specific functions defined in os.c or os-inline.c * * @defgroup APACHE_OS_UNIX unix * @ingroup APACHE_OS * @{ */ #ifndef APACHE_OS_H #define APACHE_OS_H #include "apr.h" #include "ap_config.h" #ifndef PLATFORM #define PLATFORM "Unix" #endif /* On platforms where AP_NEED_SET_MUTEX_PERMS is defined, modules * should call unixd_set_*_mutex_perms on mutexes created in the * parent process. */ #define AP_NEED_SET_MUTEX_PERMS 1 /* Define command-line rewriting for this platform, handled by core. */ #define AP_PLATFORM_REWRITE_ARGS_HOOK ap_mpm_rewrite_args #ifdef _OSD_POSIX pid_t os_fork(const char *user); #endif #endif /* !APACHE_OS_H */ /** @} */ httpd-2.4.41/os/unix/Makefile.in0000644000000000000500000000014010150161574014700 0ustar rootsrc LTLIBRARY_NAME = libos.la LTLIBRARY_SOURCES = unixd.c include $(top_srcdir)/build/ltlib.mk httpd-2.4.41/os/netware/0002755000000000000500000000000013523273343013331 5ustar rootsrchttpd-2.4.41/os/netware/apache.xdc0000644000000000000500000000020010150161574015233 0ustar rootsrcBAGFMPK_Bag MT Safe NLMhttpd-2.4.41/os/netware/modules.c0000644000000000000500000000620111573243040015134 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* modules.c --- major modules compiled into Apache for NetWare. * Only insert an entry for a module if it must be compiled into * the core server */ #include "httpd.h" #include "http_config.h" extern module core_module; extern module mpm_netware_module; extern module http_module; extern module so_module; extern module mime_module; extern module authn_core_module; extern module authz_core_module; extern module authz_host_module; extern module negotiation_module; extern module include_module; extern module dir_module; extern module alias_module; extern module env_module; extern module log_config_module; extern module setenvif_module; extern module watchdog_module; #ifdef USE_WINSOCK extern module nwssl_module; #endif extern module netware_module; module *ap_prelinked_modules[] = { &core_module, /* core must come first */ &mpm_netware_module, &http_module, &so_module, &mime_module, &authn_core_module, &authz_core_module, &authz_host_module, &negotiation_module, &include_module, &dir_module, &alias_module, &env_module, &log_config_module, &setenvif_module, &watchdog_module, #ifdef USE_WINSOCK &nwssl_module, #endif &netware_module, NULL }; ap_module_symbol_t ap_prelinked_module_symbols[] = { {"core_module", &core_module}, {"mpm_netware_module", &mpm_netware_module}, {"http_module", &http_module}, {"so_module", &so_module}, {"mime_module", &mime_module}, {"authn_core_module", &authn_core_module}, {"authz_core_module", &authz_core_module}, {"authz_host_module", &authz_host_module}, {"negotiation_module", &negotiation_module}, {"include_module", &include_module}, {"dir_module", &dir_module}, {"alias_module", &alias_module}, {"env_module", &env_module}, {"log_config_module", &log_config_module}, {"setenvif_module", &setenvif_module}, {"watchdog module", &watchdog_module}, #ifdef USE_WINSOCK {"nwssl_module", &nwssl_module}, #endif {"netware_module", &netware_module}, {NULL, NULL} }; module *ap_preloaded_modules[] = { &core_module, &mpm_netware_module, &http_module, &so_module, &mime_module, &authn_core_module, &authz_core_module, &authz_host_module, &negotiation_module, &include_module, &dir_module, &alias_module, &env_module, &log_config_module, &setenvif_module, &watchdog_module, #ifdef USE_WINSOCK &nwssl_module, #endif &netware_module, NULL }; httpd-2.4.41/os/netware/pre_nw.h0000644000000000000500000000351312757564422015005 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file pre_nw.h * @brief Definitions for Netware systems * * @addtogroup APACHE_OS_NETWARE * @{ */ #ifndef __pre_nw__ #define __pre_nw__ #include #ifndef __GNUC__ #pragma precompile_target "precomp.mch" #endif #define NETWARE #define N_PLAT_NLM /* hint for MSL C++ that we're on NetWare platform */ #define __NETWARE__ /* the FAR keyword has no meaning in a 32-bit environment but is used in the SDK headers so we take it out */ #define FAR #define far /* no-op for Codewarrior C compiler; a functions are cdecl by default */ #define cdecl /* if we have wchar_t enabled in C++, predefine this type to avoid a conflict in Novell's header files */ #ifndef __GNUC__ #if (__option(cplusplus) && __option(wchar_type)) #define _WCHAR_T #endif #endif /* C9X definition used by MSL C++ library */ #define DECIMAL_DIG 17 /* some code may want to use the MS convention for long long */ #ifndef __int64 #define __int64 long long #endif /* Restrict the number of nested includes */ #define AP_MAX_INCLUDE_DEPTH 48 #endif /** @} */ httpd-2.4.41/os/netware/netware_config_layout.h0000644000000000000500000000227611544014604020070 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file netware/netware_config_layout.h * @brief This provides layout definitions for non-autoconf-based NetWare * builds, and is copied to include/ap_config_layout.h during the build. */ #ifndef AP_CONFIG_LAYOUT_H #define AP_CONFIG_LAYOUT_H /* Check for definition of DEFAULT_REL_RUNTIMEDIR */ #ifndef DEFAULT_REL_RUNTIMEDIR #define DEFAULT_REL_RUNTIMEDIR "logs" #endif #endif /* AP_CONFIG_LAYOUT_H */ httpd-2.4.41/os/netware/util_nw.c0000644000000000000500000000622511452373610015156 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_log.h" #include "ap_mpm.h" #include #include #include void ap_down_server_cb(void *, void *); void ap_dummy_cb(void *, void *); void ap_cb_destroy(void *); int nlmUnloadSignaled(int wait); event_handle_t eh; Warn_t ref; Report_t dum; AP_DECLARE(apr_status_t) ap_os_create_privileged_process( const request_rec *r, apr_proc_t *newproc, const char *progname, const char * const *args, const char * const *env, apr_procattr_t *attr, apr_pool_t *p) { return apr_proc_create(newproc, progname, args, env, attr, p); } int _NonAppCheckUnload(void) { return nlmUnloadSignaled(1); } /* down server event callback */ void ap_down_server_cb(void *a, void *b) { nlmUnloadSignaled(0); return; } /* Required place holder event callback */ void ap_dummy_cb(void *a, void *b) { return; } /* destroy callback resources */ void ap_cb_destroy(void *a) { /* cleanup down event notification */ UnRegisterEventNotification(eh); NX_UNWRAP_INTERFACE(ref); NX_UNWRAP_INTERFACE(dum); } int _NonAppStart ( void *NLMHandle, void *errorScreen, const char *cmdLine, const char *loadDirPath, size_t uninitializedDataLength, void *NLMFileHandle, int (*readRoutineP)( int conn, void *fileHandle, size_t offset, size_t nbytes, size_t *bytesRead, void *buffer ), size_t customDataOffset, size_t customDataSize, int messageCount, const char **messages ) { #pragma unused(cmdLine) #pragma unused(loadDirPath) #pragma unused(uninitializedDataLength) #pragma unused(NLMFileHandle) #pragma unused(readRoutineP) #pragma unused(customDataOffset) #pragma unused(customDataSize) #pragma unused(messageCount) #pragma unused(messages) /* register for down server event */ rtag_t rt = AllocateResourceTag(NLMHandle, "Apache2 Down Server Callback", EventSignature); NX_WRAP_INTERFACE((void *)ap_down_server_cb, 2, (void **)&ref); NX_WRAP_INTERFACE((void *)ap_dummy_cb, 2, (void **)&dum); eh = RegisterForEventNotification(rt, EVENT_DOWN_SERVER, EVENT_PRIORITY_APPLICATION, ref, dum, NULL); /* clean-up */ NXVmRegisterExitHandler(ap_cb_destroy, NULL); return 0; } httpd-2.4.41/os/netware/os.h0000644000000000000500000000406111637105701014116 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file netware/os.h * @brief This file in included in all Apache source code. It contains definitions * of facilities available on _this_ operating system (HAVE_* macros), * and prototypes of OS specific functions defined in os.c or os-inline.c * * @defgroup APACHE_OS_NETWARE netware * @ingroup APACHE_OS * @{ */ #ifndef APACHE_OS_H #define APACHE_OS_H #ifndef PLATFORM #define PLATFORM "NETWARE" #endif /* Define command-line rewriting for this platform, handled by core. * For Netware, this is currently handled inside the Netware MPM. * XXX To support a choice of MPMs, extract common platform behavior * into a function specified here. */ #define AP_PLATFORM_REWRITE_ARGS_HOOK NULL #include AP_DECLARE_DATA extern int hold_screen_on_exit; /* Indicates whether the screen should be held open on exit*/ #define CASE_BLIND_FILESYSTEM #define NO_WRITEV #define getpid NXThreadGetId /* Hold the screen open if there is an exit code and the hold_screen_on_exit flag >= 0 or the hold_screen_on_exit > 0. If the hold_screen_on_exit flag is < 0 then close the screen no matter what the exit code is. */ #define exit(s) {if((s||hold_screen_on_exit)&&(hold_screen_on_exit>=0)){pressanykey();}apr_terminate();exit(s);} #endif /* ! APACHE_OS_H */ /** @} */ httpd-2.4.41/os/win32/0002755000000000000500000000000013523273343012626 5ustar rootsrchttpd-2.4.41/os/win32/ap_regkey.c0000644000000000000500000005016512757564422014756 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifdef WIN32 #include "apr.h" #include "arch/win32/apr_arch_file_io.h" #include "arch/win32/apr_arch_misc.h" #include "ap_regkey.h" struct ap_regkey_t { apr_pool_t *pool; HKEY hkey; }; AP_DECLARE(const ap_regkey_t *) ap_regkey_const(int i) { static struct ap_regkey_t ap_regkey_consts[7] = { {NULL, HKEY_CLASSES_ROOT}, {NULL, HKEY_CURRENT_CONFIG}, {NULL, HKEY_CURRENT_USER}, {NULL, HKEY_LOCAL_MACHINE}, {NULL, HKEY_USERS}, {NULL, HKEY_PERFORMANCE_DATA}, {NULL, HKEY_DYN_DATA} }; return ap_regkey_consts + i; } static apr_status_t regkey_cleanup(void *key) { ap_regkey_t *regkey = key; if (regkey->hkey && regkey->hkey != INVALID_HANDLE_VALUE) { RegCloseKey(regkey->hkey); regkey->hkey = INVALID_HANDLE_VALUE; } return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_regkey_open(ap_regkey_t **newkey, const ap_regkey_t *parentkey, const char *keyname, apr_int32_t flags, apr_pool_t *pool) { DWORD access = KEY_QUERY_VALUE; DWORD exists; HKEY hkey; LONG rc; if (flags & APR_READ) access |= KEY_READ; if (flags & APR_WRITE) access |= KEY_WRITE; #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { apr_size_t keylen = strlen(keyname) + 1; apr_size_t wkeylen = 256; apr_wchar_t wkeyname[256]; apr_status_t rv = apr_conv_utf8_to_ucs2(keyname, &keylen, wkeyname, &wkeylen); if (rv != APR_SUCCESS) return rv; else if (keylen) return APR_ENAMETOOLONG; if (flags & APR_CREATE) rc = RegCreateKeyExW(parentkey->hkey, wkeyname, 0, NULL, 0, access, NULL, &hkey, &exists); else rc = RegOpenKeyExW(parentkey->hkey, wkeyname, 0, access, &hkey); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { if (flags & APR_CREATE) rc = RegCreateKeyEx(parentkey->hkey, keyname, 0, NULL, 0, access, NULL, &hkey, &exists); else rc = RegOpenKeyEx(parentkey->hkey, keyname, 0, access, &hkey); } #endif if (rc != ERROR_SUCCESS) { return APR_FROM_OS_ERROR(rc); } if ((flags & APR_EXCL) && (exists == REG_OPENED_EXISTING_KEY)) { RegCloseKey(hkey); return APR_EEXIST; } *newkey = apr_palloc(pool, sizeof(**newkey)); (*newkey)->pool = pool; (*newkey)->hkey = hkey; apr_pool_cleanup_register((*newkey)->pool, (void *)(*newkey), regkey_cleanup, apr_pool_cleanup_null); return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_regkey_close(ap_regkey_t *regkey) { apr_status_t stat; if ((stat = regkey_cleanup(regkey)) == APR_SUCCESS) { apr_pool_cleanup_kill(regkey->pool, regkey, regkey_cleanup); } return stat; } AP_DECLARE(apr_status_t) ap_regkey_remove(const ap_regkey_t *parent, const char *keyname, apr_pool_t *pool) { LONG rc; #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { apr_size_t keylen = strlen(keyname) + 1; apr_size_t wkeylen = 256; apr_wchar_t wkeyname[256]; apr_status_t rv = apr_conv_utf8_to_ucs2(keyname, &keylen, wkeyname, &wkeylen); if (rv != APR_SUCCESS) return rv; else if (keylen) return APR_ENAMETOOLONG; rc = RegDeleteKeyW(parent->hkey, wkeyname); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { /* We need to determine if subkeys exist on Win9x, to provide * consistent behavior with NT, which returns access denied * if subkeys exist when attempting to delete a key. */ DWORD subkeys; HKEY hkey; rc = RegOpenKeyEx(parent->hkey, keyname, 0, KEY_READ, &hkey); if (rc != ERROR_SUCCESS) return APR_FROM_OS_ERROR(rc); rc = RegQueryInfoKey(hkey, NULL, NULL, NULL, &subkeys, NULL, NULL, NULL, NULL, NULL, NULL, NULL); RegCloseKey(hkey); if (rc != ERROR_SUCCESS) return APR_FROM_OS_ERROR(rc); else if (subkeys) return APR_FROM_OS_ERROR(ERROR_ACCESS_DENIED); rc = RegDeleteKey(parent->hkey, keyname); } #endif if (rc != ERROR_SUCCESS) { return APR_FROM_OS_ERROR(rc); } return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_regkey_value_get(char **result, ap_regkey_t *key, const char *valuename, apr_pool_t *pool) { /* Retrieve a registry string value, and explode any envvars * that the system has configured (e.g. %SystemRoot%/someapp.exe) */ LONG rc; DWORD type; apr_size_t size = 0; #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { apr_size_t valuelen = strlen(valuename) + 1; apr_size_t wvallen = 256; apr_wchar_t wvalname[256]; apr_wchar_t *wvalue; apr_status_t rv; rv = apr_conv_utf8_to_ucs2(valuename, &valuelen, wvalname, &wvallen); if (rv != APR_SUCCESS) return rv; else if (valuelen) return APR_ENAMETOOLONG; /* Read to NULL buffer to determine value size */ rc = RegQueryValueExW(key->hkey, wvalname, 0, &type, NULL, (DWORD *)&size); if (rc != ERROR_SUCCESS) { return APR_FROM_OS_ERROR(rc); } if ((size < 2) || (type != REG_SZ && type != REG_EXPAND_SZ)) { return APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER); } wvalue = apr_palloc(pool, size); /* Read value based on size query above */ rc = RegQueryValueExW(key->hkey, wvalname, 0, &type, (LPBYTE)wvalue, (DWORD *)&size); if (rc != ERROR_SUCCESS) { return APR_FROM_OS_ERROR(rc); } if (type == REG_EXPAND_SZ) { apr_wchar_t zbuf[1]; size = ExpandEnvironmentStringsW(wvalue, zbuf, 0); if (size) { apr_wchar_t *tmp = wvalue; /* The size returned by ExpandEnvironmentStringsW is wchars */ wvalue = apr_palloc(pool, size * 2); size = ExpandEnvironmentStringsW(tmp, wvalue, (DWORD)size); } } else { /* count wchars from RegQueryValueExW, rather than bytes */ size /= 2; } /* ###: deliberately overallocate all but the trailing null. * We could precalculate the exact buffer here instead, the question * is a matter of storage v.s. cpu cycles. */ valuelen = (size - 1) * 3 + 1; *result = apr_palloc(pool, valuelen); rv = apr_conv_ucs2_to_utf8(wvalue, &size, *result, &valuelen); if (rv != APR_SUCCESS) return rv; else if (size) return APR_ENAMETOOLONG; } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { /* Read to NULL buffer to determine value size */ rc = RegQueryValueEx(key->hkey, valuename, 0, &type, NULL, (DWORD *)&size); if (rc != ERROR_SUCCESS) return APR_FROM_OS_ERROR(rc); if ((size < 1) || (type != REG_SZ && type != REG_EXPAND_SZ)) { return APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER); } *result = apr_palloc(pool, size); /* Read value based on size query above */ rc = RegQueryValueEx(key->hkey, valuename, 0, &type, *result, (DWORD *)&size); if (rc != ERROR_SUCCESS) return APR_FROM_OS_ERROR(rc); if (type == REG_EXPAND_SZ) { /* Advise ExpandEnvironmentStrings that we have a zero char * buffer to force computation of the required length. */ char zbuf[1]; size = ExpandEnvironmentStrings(*result, zbuf, 0); if (size) { char *tmp = *result; *result = apr_palloc(pool, size); size = ExpandEnvironmentStrings(tmp, *result, (DWORD)size); } } } #endif return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_regkey_value_set(ap_regkey_t *key, const char *valuename, const char *value, apr_int32_t flags, apr_pool_t *pool) { /* Retrieve a registry string value, and explode any envvars * that the system has configured (e.g. %SystemRoot%/someapp.exe) */ LONG rc; apr_size_t size = strlen(value) + 1; DWORD type = (flags & AP_REGKEY_EXPAND) ? REG_EXPAND_SZ : REG_SZ; #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { apr_size_t alloclen; apr_size_t valuelen = strlen(valuename) + 1; apr_size_t wvallen = 256; apr_wchar_t wvalname[256]; apr_wchar_t *wvalue; apr_status_t rv; rv = apr_conv_utf8_to_ucs2(valuename, &valuelen, wvalname, &wvallen); if (rv != APR_SUCCESS) return rv; else if (valuelen) return APR_ENAMETOOLONG; wvallen = alloclen = size; wvalue = apr_palloc(pool, alloclen * 2); rv = apr_conv_utf8_to_ucs2(value, &size, wvalue, &wvallen); if (rv != APR_SUCCESS) return rv; else if (size) return APR_ENAMETOOLONG; /* The size is the number of wchars consumed by apr_conv_utf8_to_ucs2 * converted to bytes; the trailing L'\0' continues to be counted. */ size = (alloclen - wvallen) * 2; rc = RegSetValueExW(key->hkey, wvalname, 0, type, (LPBYTE)wvalue, (DWORD)size); if (rc != ERROR_SUCCESS) return APR_FROM_OS_ERROR(rc); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { rc = RegSetValueEx(key->hkey, valuename, 0, type, value, (DWORD)size); if (rc != ERROR_SUCCESS) return APR_FROM_OS_ERROR(rc); } #endif return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_regkey_value_raw_get(void **result, apr_size_t *resultsize, apr_int32_t *resulttype, ap_regkey_t *key, const char *valuename, apr_pool_t *pool) { /* Retrieve a registry string value, and explode any envvars * that the system has configured (e.g. %SystemRoot%/someapp.exe) */ LONG rc; #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { apr_size_t valuelen = strlen(valuename) + 1; apr_size_t wvallen = 256; apr_wchar_t wvalname[256]; apr_status_t rv; rv = apr_conv_utf8_to_ucs2(valuename, &valuelen, wvalname, &wvallen); if (rv != APR_SUCCESS) return rv; else if (valuelen) return APR_ENAMETOOLONG; /* Read to NULL buffer to determine value size */ rc = RegQueryValueExW(key->hkey, wvalname, 0, (LPDWORD)resulttype, NULL, (LPDWORD)resultsize); if (rc != ERROR_SUCCESS) { return APR_FROM_OS_ERROR(rc); } /* Read value based on size query above */ *result = apr_palloc(pool, *resultsize); rc = RegQueryValueExW(key->hkey, wvalname, 0, (LPDWORD)resulttype, (LPBYTE)*result, (LPDWORD)resultsize); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { /* Read to NULL buffer to determine value size */ rc = RegQueryValueEx(key->hkey, valuename, 0, (LPDWORD)resulttype, NULL, (LPDWORD)resultsize); if (rc != ERROR_SUCCESS) return APR_FROM_OS_ERROR(rc); /* Read value based on size query above */ *result = apr_palloc(pool, *resultsize); rc = RegQueryValueEx(key->hkey, valuename, 0, (LPDWORD)resulttype, (LPBYTE)*result, (LPDWORD)resultsize); if (rc != ERROR_SUCCESS) return APR_FROM_OS_ERROR(rc); } #endif if (rc != ERROR_SUCCESS) { return APR_FROM_OS_ERROR(rc); } return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_regkey_value_raw_set(ap_regkey_t *key, const char *valuename, const void *value, apr_size_t valuesize, apr_int32_t valuetype, apr_pool_t *pool) { LONG rc; #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { apr_size_t valuelen = strlen(valuename) + 1; apr_size_t wvallen = 256; apr_wchar_t wvalname[256]; apr_status_t rv; rv = apr_conv_utf8_to_ucs2(valuename, &valuelen, wvalname, &wvallen); if (rv != APR_SUCCESS) return rv; else if (valuelen) return APR_ENAMETOOLONG; rc = RegSetValueExW(key->hkey, wvalname, 0, valuetype, (LPBYTE)value, (DWORD)valuesize); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { rc = RegSetValueEx(key->hkey, valuename, 0, valuetype, (LPBYTE)value, (DWORD)valuesize); } #endif if (rc != ERROR_SUCCESS) { return APR_FROM_OS_ERROR(rc); } return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_regkey_value_array_get(apr_array_header_t **result, ap_regkey_t *key, const char *valuename, apr_pool_t *pool) { /* Retrieve a registry string value, and explode any envvars * that the system has configured (e.g. %SystemRoot%/someapp.exe) */ apr_status_t rv; void *value; char *buf; char *tmp; apr_int32_t type; apr_size_t size = 0; rv = ap_regkey_value_raw_get(&value, &size, &type, key, valuename, pool); if (rv != APR_SUCCESS) { return rv; } else if (type != REG_MULTI_SZ) { return APR_EINVAL; } #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { apr_size_t alloclen; apr_size_t valuelen = strlen(valuename) + 1; /* ###: deliberately overallocate plus two extra nulls. * We could precalculate the exact buffer here instead, the question * is a matter of storage v.s. cpu cycles. */ size /= 2; alloclen = valuelen = size * 3 + 2; buf = apr_palloc(pool, valuelen); rv = apr_conv_ucs2_to_utf8(value, &size, buf, &valuelen); if (rv != APR_SUCCESS) return rv; else if (size) return APR_ENAMETOOLONG; buf[(alloclen - valuelen)] = '\0'; buf[(alloclen - valuelen) + 1] = '\0'; } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { /* Small possibility the array is either unterminated * or single NULL terminated. Avert. */ buf = (char *)value; if (size < 2 || buf[size - 1] != '\0' || buf[size - 2] != '\0') { buf = apr_palloc(pool, size + 2); memcpy(buf, value, size); buf[size + 1] = '\0'; buf[size] = '\0'; } } #endif size = 0; /* Element Count */ for (tmp = buf; *tmp; ++tmp) { ++size; while (*tmp) { ++tmp; } } *result = apr_array_make(pool, (int)size, sizeof(char *)); for (tmp = buf; *tmp; ++tmp) { char **newelem = (char **) apr_array_push(*result); *newelem = tmp; while (*tmp) { ++tmp; } } return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_regkey_value_array_set(ap_regkey_t *key, const char *valuename, int nelts, const char * const * elts, apr_pool_t *pool) { /* Retrieve a registry string value, and explode any envvars * that the system has configured (e.g. %SystemRoot%/someapp.exe) */ int i; const void *value; apr_size_t bufsize; #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { apr_status_t rv; apr_wchar_t *buf; apr_wchar_t *tmp; apr_size_t bufrem; bufsize = 1; /* For trailing second null */ for (i = 0; i < nelts; ++i) { bufsize += strlen(elts[i]) + 1; } if (!nelts) { ++bufsize; } bufrem = bufsize; buf = apr_palloc(pool, bufsize * 2); tmp = buf; for (i = 0; i < nelts; ++i) { apr_size_t eltsize = strlen(elts[i]) + 1; apr_size_t size = eltsize; rv = apr_conv_utf8_to_ucs2(elts[i], &size, tmp, &bufrem); if (rv != APR_SUCCESS) return rv; else if (size) return APR_ENAMETOOLONG; tmp += eltsize; } if (!nelts) { --bufrem; (*tmp++) = L'\0'; } --bufrem; *tmp = L'\0'; /* Trailing second null */ bufsize = (bufsize - bufrem) * 2; value = (void*)buf; } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { char *buf; char *tmp; bufsize = 1; /* For trailing second null */ for (i = 0; i < nelts; ++i) { bufsize += strlen(elts[i]) + 1; } if (!nelts) { ++bufsize; } buf = apr_palloc(pool, bufsize); tmp = buf; for (i = 0; i < nelts; ++i) { apr_size_t len = strlen(elts[i]) + 1; memcpy(tmp, elts[i], len); tmp += len; } if (!nelts) { (*tmp++) = '\0'; } *tmp = '\0'; /* Trailing second null */ value = buf; } #endif return ap_regkey_value_raw_set(key, valuename, value, bufsize, REG_MULTI_SZ, pool); } AP_DECLARE(apr_status_t) ap_regkey_value_remove(const ap_regkey_t *key, const char *valuename, apr_pool_t *pool) { LONG rc; #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { apr_size_t valuelen = strlen(valuename) + 1; apr_size_t wvallen = 256; apr_wchar_t wvalname[256]; apr_status_t rv = apr_conv_utf8_to_ucs2(valuename, &valuelen, wvalname, &wvallen); if (rv != APR_SUCCESS) return rv; else if (valuelen) return APR_ENAMETOOLONG; rc = RegDeleteValueW(key->hkey, wvalname); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { rc = RegDeleteValue(key->hkey, valuename); } #endif if (rc != ERROR_SUCCESS) { return APR_FROM_OS_ERROR(rc); } return APR_SUCCESS; } #endif /* defined WIN32 */ httpd-2.4.41/os/win32/modules.c0000644000000000000500000000324411573243040014435 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* modules.c --- major modules compiled into Apache for Win32. * Only insert an entry for a module if it must be compiled into * the core server */ #include "httpd.h" #include "http_config.h" extern module core_module; extern module win32_module; extern module mpm_winnt_module; extern module http_module; extern module so_module; AP_DECLARE_DATA module *ap_prelinked_modules[] = { &core_module, /* core must come first */ &win32_module, &mpm_winnt_module, &http_module, &so_module, NULL }; ap_module_symbol_t ap_prelinked_module_symbols[] = { {"core_module", &core_module}, {"win32_module", &win32_module}, {"mpm_winnt_module", &mpm_winnt_module}, {"http_module", &http_module}, {"so_module", &so_module}, {NULL, NULL} }; AP_DECLARE_DATA module *ap_preloaded_modules[] = { &core_module, &win32_module, &mpm_winnt_module, &http_module, &so_module, NULL }; httpd-2.4.41/os/win32/util_win32.c0000644000000000000500000001050411635702077014772 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_strings.h" #include "arch/win32/apr_arch_file_io.h" #include "arch/win32/apr_arch_misc.h" #include "httpd.h" #include "http_log.h" #include "ap_mpm.h" #include #include #include AP_DECLARE(apr_status_t) ap_os_proc_filepath(char **binpath, apr_pool_t *p) { apr_wchar_t wbinpath[APR_PATH_MAX]; #if APR_HAS_UNICODE_FS IF_WIN_OS_IS_UNICODE { apr_size_t binlen; apr_size_t wbinlen; apr_status_t rv; if (!GetModuleFileNameW(NULL, wbinpath, sizeof(wbinpath) / sizeof(apr_wchar_t))) { return apr_get_os_error(); } wbinlen = wcslen(wbinpath) + 1; binlen = (wbinlen - 1) * 3 + 1; *binpath = apr_palloc(p, binlen); rv = apr_conv_ucs2_to_utf8(wbinpath, &wbinlen, *binpath, &binlen); if (rv != APR_SUCCESS) return rv; else if (wbinlen) return APR_ENAMETOOLONG; } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS ELSE_WIN_OS_IS_ANSI { /* share the same scratch buffer */ char *pathbuf = (char*) wbinpath; if (!GetModuleFileName(NULL, pathbuf, sizeof(wbinpath))) { return apr_get_os_error(); } *binpath = apr_pstrdup(p, pathbuf); } #endif return APR_SUCCESS; } AP_DECLARE(apr_status_t) ap_os_create_privileged_process( const request_rec *r, apr_proc_t *newproc, const char *progname, const char * const *args, const char * const *env, apr_procattr_t *attr, apr_pool_t *p) { return apr_proc_create(newproc, progname, args, env, attr, p); } /* This code is stolen from misc/win32/misc.c and apr_private.h * This helper code resolves late bound entry points * missing from one or more releases of the Win32 API... * but it sure would be nice if we didn't duplicate this code * from the APR ;-) */ static const char* const lateDllName[DLL_defined] = { "kernel32", "advapi32", "mswsock", "ws2_32" }; static HMODULE lateDllHandle[DLL_defined] = { NULL, NULL, NULL, NULL }; FARPROC ap_load_dll_func(ap_dlltoken_e fnLib, char* fnName, int ordinal) { if (!lateDllHandle[fnLib]) { lateDllHandle[fnLib] = LoadLibrary(lateDllName[fnLib]); if (!lateDllHandle[fnLib]) return NULL; } if (ordinal) return GetProcAddress(lateDllHandle[fnLib], (char *) ordinal); else return GetProcAddress(lateDllHandle[fnLib], fnName); } /* To share the semaphores with other processes, we need a NULL ACL * Code from MS KB Q106387 */ PSECURITY_ATTRIBUTES GetNullACL(void) { PSECURITY_DESCRIPTOR pSD; PSECURITY_ATTRIBUTES sa; sa = (PSECURITY_ATTRIBUTES) LocalAlloc(LPTR, sizeof(SECURITY_ATTRIBUTES)); sa->nLength = sizeof(SECURITY_ATTRIBUTES); pSD = (PSECURITY_DESCRIPTOR) LocalAlloc(LPTR, SECURITY_DESCRIPTOR_MIN_LENGTH); sa->lpSecurityDescriptor = pSD; if (pSD == NULL || sa == NULL) { return NULL; } apr_set_os_error(0); if (!InitializeSecurityDescriptor(pSD, SECURITY_DESCRIPTOR_REVISION) || apr_get_os_error()) { LocalFree( pSD ); LocalFree( sa ); return NULL; } if (!SetSecurityDescriptorDacl(pSD, TRUE, (PACL) NULL, FALSE) || apr_get_os_error()) { LocalFree( pSD ); LocalFree( sa ); return NULL; } sa->bInheritHandle = FALSE; return sa; } void CleanNullACL(void *sa) { if (sa) { LocalFree(((PSECURITY_ATTRIBUTES)sa)->lpSecurityDescriptor); LocalFree(sa); } } httpd-2.4.41/os/win32/win32_config_layout.h0000644000000000000500000000227211544014604016656 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file win32/win32_config_layout.h * @brief This provides layout definitions for non-autoconf-based Windows * builds, and is copied to include/ap_config_layout.h during the build. */ #ifndef AP_CONFIG_LAYOUT_H #define AP_CONFIG_LAYOUT_H /* Check for definition of DEFAULT_REL_RUNTIMEDIR */ #ifndef DEFAULT_REL_RUNTIMEDIR #define DEFAULT_REL_RUNTIMEDIR "logs" #endif #endif /* AP_CONFIG_LAYOUT_H */ httpd-2.4.41/os/win32/BaseAddr.ref0000644000000000000500000001553413446306656015007 0ustar rootsrc; os/win32/BaseAddr.ref contains the central repository ; of all module base addresses ; to avoid relocation ; WARNING: Update this file by reviewing the image size ; of the debug-generated dll files; release images ; should fit in the larger debug-sized space. ; module name base-address max-size libhttpd.dll 0x6FF00000 0x000E0000 mod_auth_basic.so 0x6FFE0000 0x00020000 mod_auth_digest.so 0x70000000 0x00020000 mod_cern_meta.so 0x70020000 0x00010000 mod_expires.so 0x70030000 0x00010000 mod_headers.so 0x70040000 0x00020000 mod_info.so 0x70060000 0x00020000 mod_rewrite.so 0x70080000 0x00030000 mod_speling.so 0x700B0000 0x00010000 mod_status.so 0x700C0000 0x00020000 mod_usertrack.so 0x700E0000 0x00010000 mod_file_cache.so 0x700F0000 0x00020000 mod_unique_id.so 0x70110000 0x00010000 mod_vhost_alias.so 0x70120000 0x00010000 mod_mime_magic.so 0x70130000 0x00020000 mod_dav.so 0x70150000 0x00040000 mod_dav_fs.so 0x70190000 0x00030000 mod_proxy_connect.so 0x701C0000 0x00020000 mod_proxy_ftp.so 0x701E0000 0x00020000 mod_proxy_http.so 0x70200000 0x00020000 mod_ssl.so 0x70220000 0x00070000 mod_actions.so 0x70290000 0x00010000 mod_alias.so 0x702A0000 0x00020000 mod_asis.so 0x702C0000 0x00010000 mod_autoindex.so 0x702D0000 0x00020000 mod_cgi.so 0x702F0000 0x00020000 mod_dir.so 0x70310000 0x00010000 mod_env.so 0x70320000 0x00010000 mod_imagemap.so 0x70330000 0x00020000 mod_include.so 0x70350000 0x00030000 mod_isapi.so 0x70380000 0x00020000 mod_log_config.so 0x703A0000 0x00020000 mod_mime.so 0x703C0000 0x00020000 mod_negotiation.so 0x703E0000 0x00020000 mod_setenvif.so 0x70400000 0x00020000 mod_userdir.so 0x70420000 0x00010000 mod_cache.so 0x70430000 0x00030000 mod_cache_disk.so 0x70460000 0x00020000 mod_buffer.so 0x70480000 0x00010000 mod_deflate.so 0x70490000 0x00020000 mod_ext_filter.so 0x704B0000 0x00020000 mod_charset_lite.so 0x704D0000 0x00010000 mod_authn_anon.so 0x704E0000 0x00010000 mod_authn_dbm.so 0x704F0000 0x00010000 mod_authn_file.so 0x70500000 0x00010000 mod_authz_dbm.so 0x70510000 0x00010000 mod_authz_groupfile.so 0x70520000 0x00010000 mod_authz_host.so 0x70530000 0x00010000 mod_authz_user.so 0x70540000 0x00010000 mod_logio.so 0x70550000 0x00010000 mod_ldap.so 0x70560000 0x00030000 mod_authnz_ldap.so 0x70590000 0x00020000 mod_ident.so 0x705B0000 0x00010000 mod_proxy_ajp.so 0x705C0000 0x00020000 mod_proxy_balancer.so 0x705E0000 0x00020000 mod_log_forensic.so 0x70600000 0x00010000 mod_version.so 0x70610000 0x00010000 mod_bucketeer.so 0x70620000 0x00010000 mod_dumpio.so 0x70630000 0x00010000 mod_echo.so 0x70640000 0x00010000 mod_authn_dbd.so 0x70650000 0x00010000 mod_dbd.so 0x70660000 0x00020000 mod_proxy.so 0x70680000 0x00040000 mod_access_compat.so 0x706C0000 0x00010000 mod_authz_core.so 0x706D0000 0x00020000 mod_proxy_fcgi.so 0x706F0000 0x00020000 mod_authn_core.so 0x70710000 0x00010000 mod_authz_dbd.so 0x70720000 0x00010000 mod_authz_owner.so 0x70730000 0x00010000 mod_example_hooks.so 0x70740000 0x00020000 mod_case_filter.so 0x70760000 0x00010000 mod_case_filter_in.so 0x70770000 0x00010000 mod_substitute.so 0x70780000 0x00020000 mod_filter.so 0x707A0000 0x00020000 mod_dav_lock.so 0x707C0000 0x00020000 mod_auth_form.so 0x707E0000 0x00020000 mod_example_ipc.so 0x70800000 0x00010000 mod_request.so 0x70810000 0x00010000 mod_session.so 0x70830000 0x00020000 mod_session_cookie.so 0x70850000 0x00010000 mod_session_crypto.so 0x70860000 0x00020000 mod_session_dbd.so 0x70880000 0x00020000 mod_socache_dbm.so 0x708A0000 0x00020000 mod_socache_dc.so 0x708C0000 0x00010000 mod_socache_memcache.so 0x708D0000 0x00010000 mod_socache_shmcb.so 0x708E0000 0x00020000 mod_sed.so 0x70900000 0x00020000 mod_lua.so 0x70920000 0x00040000 mod_ratelimit.so 0x70960000 0x00010000 mod_remoteip.so 0x70970000 0x00010000 mod_lbmethod_bybusyness.so 0x70980000 0x00010000 mod_lbmethod_byrequests.so 0x70990000 0x00010000 mod_lbmethod_bytraffic.so 0x709A0000 0x00010000 mod_lbmethod_heartbeat.so 0x709B0000 0x00020000 mod_heartbeat.so 0x709D0000 0x00010000 mod_heartmonitor.so 0x709E0000 0x00020000 mod_watchdog.so 0x70A00000 0x00020000 mod_proxy_scgi.so 0x70A20000 0x00020000 mod_reqtimeout.so 0x70A40000 0x00020000 mod_reflector.so 0x70A60000 0x00010000 mod_slotmem_plain.so 0x70A70000 0x00010000 mod_slotmem_shm.so 0x70A80000 0x00020000 mod_authn_socache.so 0x70AA0000 0x00020000 mod_proxy_express.so 0x70AC0000 0x00010000 mod_log_debug.so 0x70AD0000 0x00010000 mod_proxy_html.so 0x70AE0000 0x00020000 mod_xml2enc.so 0x70B00000 0x00020000 mod_data.so 0x70B20000 0x00010000 mod_allowmethods.so 0x70B30000 0x00010000 mod_macro.so 0x70B40000 0x00020000 mod_cache_socache.so 0x70B60000 0x00020000 mod_proxy_wstunnel.so 0x70B80000 0x00020000 mod_dialup.so 0x70BA0000 0x00010000 mod_optional_fn_export.so 0x70BB0000 0x00010000 mod_optional_fn_import.so 0x70BC0000 0x00010000 mod_optional_hook_export.so 0x70BD0000 0x00010000 mod_optional_hook_import.so 0x70BE0000 0x00010000 mod_authnz_fcgi.so 0x70BF0000 0x00020000 mod_proxy_hcheck.so 0x70C10000 0x00020000 mod_proxy_http2.so 0x70C30000 0x00020000 mod_http2.so 0x70C50000 0x00040000 mod_brotli.so 0x70C90000 0x000C0000 mod_md.so 0x70D50000 0x00030000 mod_proxy_uwsgi.so 0x70D80000 0x00020000 mod_socache_redis.so 0x70DA0000 0x00010000httpd-2.4.41/os/win32/os.h0000644000000000000500000001067111637105701013417 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file win32/os.h * @brief This file in included in all Apache source code. It contains definitions * of facilities available on _this_ operating system (HAVE_* macros), * and prototypes of OS specific functions defined in os.c or os-inline.c * * @defgroup APACHE_OS_WIN32 win32 * @ingroup APACHE_OS * @{ */ #ifdef WIN32 #ifndef AP_OS_H #define AP_OS_H /* Delegate windows include to the apr.h header, if USER or GDI declarations * are required (for a window rather than console application), include * windows.h prior to any other Apache header files. */ #include "apr_pools.h" #include #include #ifdef _WIN64 #define PLATFORM "Win64" #else #define PLATFORM "Win32" #endif /* Define command-line rewriting for this platform, handled by core. * For Windows, this is currently handled inside the WinNT MPM. * XXX To support a choice of MPMs, extract common platform behavior * into a function specified here. */ #define AP_PLATFORM_REWRITE_ARGS_HOOK NULL /* going away shortly... */ #define HAVE_DRIVE_LETTERS #define HAVE_UNC_PATHS #define CASE_BLIND_FILESYSTEM #include #include /* for exit() */ #ifdef __cplusplus extern "C" { #endif /* BIG RED WARNING: exit() is mapped to allow us to capture the exit * status. This header must only be included from modules linked into * the ApacheCore.dll - since it's a horrible behavior to exit() from * any module outside the main() block, and we -will- assume it's a * fatal error. */ AP_DECLARE_DATA extern int ap_real_exit_code; #define exit(status) ((exit)((ap_real_exit_code==2) \ ? (ap_real_exit_code = (status)) \ : ((ap_real_exit_code = 0), (status)))) #ifdef AP_DECLARE_EXPORT /* Defined in util_win32.c and available only to the core module for * win32 MPM design. */ AP_DECLARE(apr_status_t) ap_os_proc_filepath(char **binpath, apr_pool_t *p); typedef enum { AP_DLL_WINBASEAPI = 0, /* kernel32 From WinBase.h */ AP_DLL_WINADVAPI = 1, /* advapi32 From WinBase.h */ AP_DLL_WINSOCKAPI = 2, /* mswsock From WinSock.h */ AP_DLL_WINSOCK2API = 3, /* ws2_32 From WinSock2.h */ AP_DLL_defined = 4 /* must define as last idx_ + 1 */ } ap_dlltoken_e; FARPROC ap_load_dll_func(ap_dlltoken_e fnLib, char* fnName, int ordinal); PSECURITY_ATTRIBUTES GetNullACL(void); void CleanNullACL(void *sa); #define AP_DECLARE_LATE_DLL_FUNC(lib, rettype, calltype, fn, ord, args, names) \ typedef rettype (calltype *ap_winapi_fpt_##fn) args; \ static ap_winapi_fpt_##fn ap_winapi_pfn_##fn = NULL; \ static APR_INLINE rettype ap_winapi_##fn args \ { if (!ap_winapi_pfn_##fn) \ ap_winapi_pfn_##fn = (ap_winapi_fpt_##fn) ap_load_dll_func(lib, #fn, ord); \ return (*(ap_winapi_pfn_##fn)) names; }; \ /* Win2K kernel only */ AP_DECLARE_LATE_DLL_FUNC(AP_DLL_WINADVAPI, BOOL, WINAPI, ChangeServiceConfig2A, 0, ( SC_HANDLE hService, DWORD dwInfoLevel, LPVOID lpInfo), (hService, dwInfoLevel, lpInfo)); #undef ChangeServiceConfig2 #define ChangeServiceConfig2 ap_winapi_ChangeServiceConfig2A /* WinNT kernel only */ AP_DECLARE_LATE_DLL_FUNC(AP_DLL_WINBASEAPI, BOOL, WINAPI, CancelIo, 0, ( IN HANDLE hFile), (hFile)); #undef CancelIo #define CancelIo ap_winapi_CancelIo /* Win9x kernel only */ AP_DECLARE_LATE_DLL_FUNC(AP_DLL_WINBASEAPI, DWORD, WINAPI, RegisterServiceProcess, 0, ( DWORD dwProcessId, DWORD dwType), (dwProcessId, dwType)); #define RegisterServiceProcess ap_winapi_RegisterServiceProcess #endif /* def AP_DECLARE_EXPORT */ #ifdef __cplusplus } #endif #endif /* ndef AP_OS_H */ #endif /* def WIN32 */ /** @} */ httpd-2.4.41/os/win32/Makefile.in0000644000000000000500000000017310471411046014663 0ustar rootsrc LTLIBRARY_NAME = libos.la LTLIBRARY_SOURCES = util_win32.c ap_regkey.c modules.c include $(top_srcdir)/build/ltlib.mk httpd-2.4.41/os/os2/0002755000000000000500000000000013523273343012367 5ustar rootsrchttpd-2.4.41/os/os2/core_header.def0000644000000000000500000000044311245174255015307 0ustar rootsrcLIBRARY httpd INITINSTANCE DESCRIPTION "Apache Server Core" DATA NONSHARED EXPORTS "main" ; One for mod_dav from socket library "_swaps" ; And some more for mod_unique_id "gethostname" "gethostbyname" "_swapl" "h_errno" "inet_ntoa" ; mod_proxy needs this one "inet_addr" httpd-2.4.41/os/os2/core.mk0000644000000000000500000000054611245174255013654 0ustar rootsrc# Some rules for making a shared core dll on OS/2 os2core: httpd.dll $(CORE_IMPLIB) $(LIBTOOL) --mode=link gcc -Zstack 512 $(LDFLAGS) $(EXTRA_LDFLAGS) -o httpd $(CORE_IMPLIB) httpd.dll: $(PROGRAM_DEPENDENCIES) $(CORE_IMPLIB) $(LINK) -Zdll $(EXTRA_LDFLAGS) -s -o $@ server/exports.lo modules.lo $(PROGRAM_DEPENDENCIES) $(AP_LIBS) server/ApacheCoreOS2.def httpd-2.4.41/os/os2/config.m40000644000000000000500000000010111245174255014065 0ustar rootsrcif test "$OS" = "os2" ; then APR_ADDTO(CFLAGS, [-DOS2 -O2]) fi httpd-2.4.41/os/os2/util_os2.c0000644000000000000500000000250711245174255014276 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #define INCL_DOS #define INCL_DOSERRORS #include #include "ap_config.h" #include "httpd.h" #include "http_log.h" #include "os.h" #include #include #include #include #include "apr_strings.h" AP_DECLARE(apr_status_t) ap_os_create_privileged_process( const request_rec *r, apr_proc_t *newproc, const char *progname, const char * const *args, const char * const *env, apr_procattr_t *attr, apr_pool_t *p) { return apr_proc_create(newproc, progname, args, env, attr, p); } httpd-2.4.41/os/os2/os.h0000644000000000000500000000253711410123263013152 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file os2/os.h * @brief This file in included in all Apache source code. It contains definitions * of facilities available on _this_ operating system (HAVE_* macros), * and prototypes of OS specific functions defined in os.c or os-inline.c * * @defgroup APACHE_OS_OS2 os2 * @ingroup APACHE_OS * @{ */ #ifndef APACHE_OS_H #define APACHE_OS_H #define PLATFORM "OS/2" /* going away shortly... */ #define HAVE_DRIVE_LETTERS #define HAVE_UNC_PATHS #define CASE_BLIND_FILESYSTEM #define AP_PLATFORM_REWRITE_ARGS_HOOK NULL #endif /* ! APACHE_OS_H */ /** @} */ httpd-2.4.41/os/os2/Makefile.in0000644000000000000500000000014311245174255014431 0ustar rootsrc LTLIBRARY_NAME = libos.la LTLIBRARY_SOURCES = util_os2.c include $(top_srcdir)/build/ltlib.mk httpd-2.4.41/os/config.m40000644000000000000500000000047611245174255013401 0ustar rootsrcAC_MSG_CHECKING(for target platform) case $host in *pc-os2-emx*) OS="os2" OS_DIR=$OS ;; bs2000*) OS="unix" OS_DIR=$OS ;; *cygwin*) OS="cygwin" OS_DIR="unix" ;; *mingw32*) OS="win32" OS_DIR=$OS ;; *) OS="unix" OS_DIR=$OS;; esac AC_MSG_RESULT($OS) APACHE_FAST_OUTPUT(os/${OS_DIR}/Makefile) httpd-2.4.41/os/.indent.pro0000644000000000000500000000127510150161574013743 0ustar rootsrc-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int httpd-2.4.41/os/bs2000/0002755000000000000500000000000013523273343012572 5ustar rootsrchttpd-2.4.41/os/bs2000/ebcdic.h0000644000000000000500000000243310455005461014147 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file bs2000/ebcdic.h * @brief EBCDIC/ASCII converson function declarations * * @addtogroup APACHE_OS_BS2000 * @{ */ #include extern const unsigned char os_toascii[256]; extern const unsigned char os_toebcdic[256]; void ebcdic2ascii(unsigned char *dest, const unsigned char *srce, size_t count); void ebcdic2ascii_strictly(unsigned char *dest, const unsigned char *srce, size_t count); void ascii2ebcdic(unsigned char *dest, const unsigned char *srce, size_t count); /** @} */ httpd-2.4.41/os/bs2000/ebcdic.c0000644000000000000500000002673612757564422014174 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ap_config.h" #if APR_CHARSET_EBCDIC #include "ebcdic.h" /* Initial Port for Apache-1.3 by "BS2000 OSD" is a POSIX on a main frame. It is made by Siemens AG, Germany. Within the POSIX subsystem, the same character set was chosen as in "native BS2000", namely EBCDIC. EBCDIC Table. (Yes, in EBCDIC, the letters 'a'..'z' are not contiguous!) This apr_table_t is bijective, i.e. there are no ambiguous or duplicate characters 00 00 01 02 03 85 09 86 7f 87 8d 8e 0b 0c 0d 0e 0f *................* 10 10 11 12 13 8f 0a 08 97 18 19 9c 9d 1c 1d 1e 1f *................* 20 80 81 82 83 84 92 17 1b 88 89 8a 8b 8c 05 06 07 *................* 30 90 91 16 93 94 95 96 04 98 99 9a 9b 14 15 9e 1a *................* 40 20 a0 e2 e4 e0 e1 e3 e5 e7 f1 60 2e 3c 28 2b 7c * .........`.<(+|* 50 26 e9 ea eb e8 ed ee ef ec df 21 24 2a 29 3b 9f *&.........!$*);.* 60 2d 2f c2 c4 c0 c1 c3 c5 c7 d1 5e 2c 25 5f 3e 3f *-/........^,%_>?* 70 f8 c9 ca cb c8 cd ce cf cc a8 3a 23 40 27 3d 22 *..........:#@'="* 80 d8 61 62 63 64 65 66 67 68 69 ab bb f0 fd fe b1 *.abcdefghi......* 90 b0 6a 6b 6c 6d 6e 6f 70 71 72 aa ba e6 b8 c6 a4 *.jklmnopqr......* a0 b5 af 73 74 75 76 77 78 79 7a a1 bf d0 dd de ae *..stuvwxyz......* b0 a2 a3 a5 b7 a9 a7 b6 bc bd be ac 5b 5c 5d b4 d7 *...........[\]..* c0 f9 41 42 43 44 45 46 47 48 49 ad f4 f6 f2 f3 f5 *.ABCDEFGHI......* d0 a6 4a 4b 4c 4d 4e 4f 50 51 52 b9 fb fc db fa ff *.JKLMNOPQR......* e0 d9 f7 53 54 55 56 57 58 59 5a b2 d4 d6 d2 d3 d5 *..STUVWXYZ......* f0 30 31 32 33 34 35 36 37 38 39 b3 7b dc 7d da 7e *0123456789.{.}.~* */ /* The bijective ebcdic-to-ascii table: */ const unsigned char os_toascii_strictly[256] = { /*00*/ 0x00, 0x01, 0x02, 0x03, 0x85, 0x09, 0x86, 0x7f, 0x87, 0x8d, 0x8e, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, /*................*/ /*10*/ 0x10, 0x11, 0x12, 0x13, 0x8f, 0x0a, 0x08, 0x97, 0x18, 0x19, 0x9c, 0x9d, 0x1c, 0x1d, 0x1e, 0x1f, /*................*/ /*20*/ 0x80, 0x81, 0x82, 0x83, 0x84, 0x92, 0x17, 0x1b, 0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x05, 0x06, 0x07, /*................*/ /*30*/ 0x90, 0x91, 0x16, 0x93, 0x94, 0x95, 0x96, 0x04, 0x98, 0x99, 0x9a, 0x9b, 0x14, 0x15, 0x9e, 0x1a, /*................*/ /*40*/ 0x20, 0xa0, 0xe2, 0xe4, 0xe0, 0xe1, 0xe3, 0xe5, 0xe7, 0xf1, 0x60, 0x2e, 0x3c, 0x28, 0x2b, 0x7c, /* .........`.<(+|*/ /*50*/ 0x26, 0xe9, 0xea, 0xeb, 0xe8, 0xed, 0xee, 0xef, 0xec, 0xdf, 0x21, 0x24, 0x2a, 0x29, 0x3b, 0x9f, /*&.........!$*);.*/ /*60*/ 0x2d, 0x2f, 0xc2, 0xc4, 0xc0, 0xc1, 0xc3, 0xc5, 0xc7, 0xd1, 0x5e, 0x2c, 0x25, 0x5f, 0x3e, 0x3f, /*-/........^,%_>?*/ /*70*/ 0xf8, 0xc9, 0xca, 0xcb, 0xc8, 0xcd, 0xce, 0xcf, 0xcc, 0xa8, 0x3a, 0x23, 0x40, 0x27, 0x3d, 0x22, /*..........:#@'="*/ /*80*/ 0xd8, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68, 0x69, 0xab, 0xbb, 0xf0, 0xfd, 0xfe, 0xb1, /*.abcdefghi......*/ /*90*/ 0xb0, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f, 0x70, 0x71, 0x72, 0xaa, 0xba, 0xe6, 0xb8, 0xc6, 0xa4, /*.jklmnopqr......*/ /*a0*/ 0xb5, 0xaf, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78, 0x79, 0x7a, 0xa1, 0xbf, 0xd0, 0xdd, 0xde, 0xae, /*..stuvwxyz......*/ /*b0*/ 0xa2, 0xa3, 0xa5, 0xb7, 0xa9, 0xa7, 0xb6, 0xbc, 0xbd, 0xbe, 0xac, 0x5b, 0x5c, 0x5d, 0xb4, 0xd7, /*...........[\]..*/ /*c0*/ 0xf9, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x49, 0xad, 0xf4, 0xf6, 0xf2, 0xf3, 0xf5, /*.ABCDEFGHI......*/ /*d0*/ 0xa6, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50, 0x51, 0x52, 0xb9, 0xfb, 0xfc, 0xdb, 0xfa, 0xff, /*.JKLMNOPQR......*/ /*e0*/ 0xd9, 0xf7, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58, 0x59, 0x5a, 0xb2, 0xd4, 0xd6, 0xd2, 0xd3, 0xd5, /*..STUVWXYZ......*/ /*f0*/ 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38, 0x39, 0xb3, 0x7b, 0xdc, 0x7d, 0xda, 0x7e /*0123456789.{.}.~*/ }; /* This apr_table_t is (almost) identical to the previous one. The only difference * is the fact that it maps every EBCDIC *except 0x0A* to its ASCII * equivalent. The reason for this apr_table_t is simple: Throughout the * server, protocol strings are used in the form * "Content-Type: text/plain\015\012". Now all the characters in the string * are stored as EBCDIC, only the semantics of \012 is completely * different from LF (look it up in the apr_table_t above). \015 happens to be * mapped to \015 anyway, so there's no special case for it. * * In THIS table, EBCDIC-\012 is mapped to ASCII-\012. * This apr_table_t is therefore used wherever an EBCDIC to ASCII conversion is * needed in the server. */ /* ebcdic-to-ascii with \012 mapped to ASCII-\n */ const unsigned char os_toascii[256] = { /*00*/ 0x00, 0x01, 0x02, 0x03, 0x85, 0x09, 0x86, 0x7f, 0x87, 0x8d, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, /*................*/ /*10*/ 0x10, 0x11, 0x12, 0x13, 0x8f, 0x0a, 0x08, 0x97, 0x18, 0x19, 0x9c, 0x9d, 0x1c, 0x1d, 0x1e, 0x1f, /*................*/ /*20*/ 0x80, 0x81, 0x82, 0x83, 0x84, 0x92, 0x17, 0x1b, 0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x05, 0x06, 0x07, /*................*/ /*30*/ 0x90, 0x91, 0x16, 0x93, 0x94, 0x95, 0x96, 0x04, 0x98, 0x99, 0x9a, 0x9b, 0x14, 0x15, 0x9e, 0x1a, /*................*/ /*40*/ 0x20, 0xa0, 0xe2, 0xe4, 0xe0, 0xe1, 0xe3, 0xe5, 0xe7, 0xf1, 0x60, 0x2e, 0x3c, 0x28, 0x2b, 0x7c, /* .........`.<(+|*/ /*50*/ 0x26, 0xe9, 0xea, 0xeb, 0xe8, 0xed, 0xee, 0xef, 0xec, 0xdf, 0x21, 0x24, 0x2a, 0x29, 0x3b, 0x9f, /*&.........!$*);.*/ /*60*/ 0x2d, 0x2f, 0xc2, 0xc4, 0xc0, 0xc1, 0xc3, 0xc5, 0xc7, 0xd1, 0x5e, 0x2c, 0x25, 0x5f, 0x3e, 0x3f, /*-/........^,%_>?*/ /*70*/ 0xf8, 0xc9, 0xca, 0xcb, 0xc8, 0xcd, 0xce, 0xcf, 0xcc, 0xa8, 0x3a, 0x23, 0x40, 0x27, 0x3d, 0x22, /*..........:#@'="*/ /*80*/ 0xd8, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68, 0x69, 0xab, 0xbb, 0xf0, 0xfd, 0xfe, 0xb1, /*.abcdefghi......*/ /*90*/ 0xb0, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f, 0x70, 0x71, 0x72, 0xaa, 0xba, 0xe6, 0xb8, 0xc6, 0xa4, /*.jklmnopqr......*/ /*a0*/ 0xb5, 0xaf, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78, 0x79, 0x7a, 0xa1, 0xbf, 0xd0, 0xdd, 0xde, 0xae, /*..stuvwxyz......*/ /*b0*/ 0xa2, 0xa3, 0xa5, 0xb7, 0xa9, 0xa7, 0xb6, 0xbc, 0xbd, 0xbe, 0xac, 0x5b, 0x5c, 0x5d, 0xb4, 0xd7, /*...........[\]..*/ /*c0*/ 0xf9, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x49, 0xad, 0xf4, 0xf6, 0xf2, 0xf3, 0xf5, /*.ABCDEFGHI......*/ /*d0*/ 0xa6, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50, 0x51, 0x52, 0xb9, 0xfb, 0xfc, 0xdb, 0xfa, 0xff, /*.JKLMNOPQR......*/ /*e0*/ 0xd9, 0xf7, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58, 0x59, 0x5a, 0xb2, 0xd4, 0xd6, 0xd2, 0xd3, 0xd5, /*..STUVWXYZ......*/ /*f0*/ 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38, 0x39, 0xb3, 0x7b, 0xdc, 0x7d, 0xda, 0x7e /*0123456789.{.}.~*/ }; /* The ascii-to-ebcdic table: 00 00 01 02 03 37 2d 2e 2f 16 05 15 0b 0c 0d 0e 0f *................* 10 10 11 12 13 3c 3d 32 26 18 19 3f 27 1c 1d 1e 1f *................* 20 40 5a 7f 7b 5b 6c 50 7d 4d 5d 5c 4e 6b 60 4b 61 * !"#$%&'()*+,-./ 30 f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 7a 5e 4c 7e 6e 6f *0123456789:;<=>?* 40 7c c1 c2 c3 c4 c5 c6 c7 c8 c9 d1 d2 d3 d4 d5 d6 *@ABCDEFGHIJKLMNO* 50 d7 d8 d9 e2 e3 e4 e5 e6 e7 e8 e9 bb bc bd 6a 6d *PQRSTUVWXYZ[\]^_* 60 4a 81 82 83 84 85 86 87 88 89 91 92 93 94 95 96 *`abcdefghijklmno* 70 97 98 99 a2 a3 a4 a5 a6 a7 a8 a9 fb 4f fd ff 07 *pqrstuvwxyz{|}~.* 80 20 21 22 23 24 04 06 08 28 29 2a 2b 2c 09 0a 14 *................* 90 30 31 25 33 34 35 36 17 38 39 3a 3b 1a 1b 3e 5f *................* a0 41 aa b0 b1 9f b2 d0 b5 79 b4 9a 8a ba ca af a1 *................* b0 90 8f ea fa be a0 b6 b3 9d da 9b 8b b7 b8 b9 ab *................* c0 64 65 62 66 63 67 9e 68 74 71 72 73 78 75 76 77 *................* d0 ac 69 ed ee eb ef ec bf 80 e0 fe dd fc ad ae 59 *................* e0 44 45 42 46 43 47 9c 48 54 51 52 53 58 55 56 57 *................* f0 8c 49 cd ce cb cf cc e1 70 c0 de db dc 8d 8e df *................* */ const unsigned char os_toebcdic[256] = { /*00*/ 0x00, 0x01, 0x02, 0x03, 0x37, 0x2d, 0x2e, 0x2f, 0x16, 0x05, 0x15, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, /*................*/ /*10*/ 0x10, 0x11, 0x12, 0x13, 0x3c, 0x3d, 0x32, 0x26, 0x18, 0x19, 0x3f, 0x27, 0x1c, 0x1d, 0x1e, 0x1f, /*................*/ /*20*/ 0x40, 0x5a, 0x7f, 0x7b, 0x5b, 0x6c, 0x50, 0x7d, 0x4d, 0x5d, 0x5c, 0x4e, 0x6b, 0x60, 0x4b, 0x61, /* !"#$%&'()*+,-./ */ /*30*/ 0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7, 0xf8, 0xf9, 0x7a, 0x5e, 0x4c, 0x7e, 0x6e, 0x6f, /*0123456789:;<=>?*/ /*40*/ 0x7c, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7, 0xc8, 0xc9, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, /*@ABCDEFGHIJKLMNO*/ /*50*/ 0xd7, 0xd8, 0xd9, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7, 0xe8, 0xe9, 0xbb, 0xbc, 0xbd, 0x6a, 0x6d, /*PQRSTUVWXYZ[\]^_*/ /*60*/ 0x4a, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87, 0x88, 0x89, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, /*`abcdefghijklmno*/ /*70*/ 0x97, 0x98, 0x99, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7, 0xa8, 0xa9, 0xfb, 0x4f, 0xfd, 0xff, 0x07, /*pqrstuvwxyz{|}~.*/ /*80*/ 0x20, 0x21, 0x22, 0x23, 0x24, 0x04, 0x06, 0x08, 0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x09, 0x0a, 0x14, /*................*/ /*90*/ 0x30, 0x31, 0x25, 0x33, 0x34, 0x35, 0x36, 0x17, 0x38, 0x39, 0x3a, 0x3b, 0x1a, 0x1b, 0x3e, 0x5f, /*................*/ /*a0*/ 0x41, 0xaa, 0xb0, 0xb1, 0x9f, 0xb2, 0xd0, 0xb5, 0x79, 0xb4, 0x9a, 0x8a, 0xba, 0xca, 0xaf, 0xa1, /*................*/ /*b0*/ 0x90, 0x8f, 0xea, 0xfa, 0xbe, 0xa0, 0xb6, 0xb3, 0x9d, 0xda, 0x9b, 0x8b, 0xb7, 0xb8, 0xb9, 0xab, /*................*/ /*c0*/ 0x64, 0x65, 0x62, 0x66, 0x63, 0x67, 0x9e, 0x68, 0x74, 0x71, 0x72, 0x73, 0x78, 0x75, 0x76, 0x77, /*................*/ /*d0*/ 0xac, 0x69, 0xed, 0xee, 0xeb, 0xef, 0xec, 0xbf, 0x80, 0xe0, 0xfe, 0xdd, 0xfc, 0xad, 0xae, 0x59, /*................*/ /*e0*/ 0x44, 0x45, 0x42, 0x46, 0x43, 0x47, 0x9c, 0x48, 0x54, 0x51, 0x52, 0x53, 0x58, 0x55, 0x56, 0x57, /*................*/ /*f0*/ 0x8c, 0x49, 0xcd, 0xce, 0xcb, 0xcf, 0xcc, 0xe1, 0x70, 0xc0, 0xde, 0xdb, 0xdc, 0x8d, 0x8e, 0xdf /*................*/ }; /* Translate a memory block from EBCDIC (host charset) to ASCII (net charset) * dest and srce may be identical, or separate memory blocks, but * should not overlap. */ void ebcdic2ascii(unsigned char *dest, const unsigned char *srce, size_t count) { while (count-- != 0) { *dest++ = os_toascii[*srce++]; } } void ebcdic2ascii_strictly(unsigned char *dest, const unsigned char *srce, size_t count) { while (count-- != 0) { *dest++ = os_toascii_strictly[*srce++]; } } void ascii2ebcdic(unsigned char *dest, const unsigned char *srce, size_t count) { while (count-- != 0) { *dest++ = os_toebcdic[*srce++]; } } #endif /*APR_CHARSET_EBCDIC*/ httpd-2.4.41/os/bs2000/os.c0000644000000000000500000000750112402343253013351 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * This file will include OS specific functions which are not inlineable. * Any inlineable functions should be defined in os-inline.c instead. */ #ifdef _OSD_POSIX #include "os.h" #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "apr_lib.h" #define USER_LEN 8 APLOG_USE_MODULE(core); typedef enum { bs2_unknown, /* not initialized yet. */ bs2_noFORK, /* no fork() because -X flag was specified */ bs2_FORK, /* only fork() because uid != 0 */ bs2_UFORK /* Normally, ufork() is used to switch identities. */ } bs2_ForkType; static bs2_ForkType forktype = bs2_unknown; /* Determine the method for forking off a child in such a way as to * set both the POSIX and BS2000 user id's to the unprivileged user. */ static bs2_ForkType os_forktype(int one_process) { /* have we checked the OS version before? If yes return the previous * result - the OS release isn't going to change suddenly! */ if (forktype == bs2_unknown) { /* not initialized yet */ /* No fork if the one_process option was set */ if (one_process) { forktype = bs2_noFORK; } /* If the user is unprivileged, use the normal fork() only. */ else if (getuid() != 0) { forktype = bs2_FORK; } else forktype = bs2_UFORK; } return forktype; } /* This routine complements the setuid() call: it causes the BS2000 job * environment to be switched to the target user's user id. * That is important if CGI scripts try to execute native BS2000 commands. */ int os_init_job_environment(server_rec *server, const char *user_name, int one_process) { bs2_ForkType type = os_forktype(one_process); /* We can be sure that no change to uid==0 is possible because of * the checks in http_core.c:set_user() */ if (one_process) { type = forktype = bs2_noFORK; ap_log_error(APLOG_MARK, APLOG_ERR, 0, server, APLOGNO(02170) "The debug mode of Apache should only " "be started by an unprivileged user!"); return 0; } return 0; } /* BS2000 requires a "special" version of fork() before a setuid() call */ pid_t os_fork(const char *user) { pid_t pid; char username[USER_LEN+1]; switch (os_forktype(0)) { case bs2_FORK: pid = fork(); break; case bs2_UFORK: apr_cpystrn(username, user, sizeof username); /* Make user name all upper case - for some versions of ufork() */ ap_str_toupper(username); pid = ufork(username); if (pid == -1 && errno == EPERM) { ap_log_error(APLOG_MARK, APLOG_EMERG, errno, ap_server_conf, APLOGNO(02171) "ufork: Possible mis-configuration " "for user %s - Aborting.", user); exit(1); } break; default: pid = 0; break; } return pid; } #else /* _OSD_POSIX */ void bs2000_os_is_not_here() { } #endif /* _OSD_POSIX */ httpd-2.4.41/os/bs2000/os.h0000644000000000000500000000253410455005461013361 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file bs2000/os.h * @brief This file in included in all Apache source code. It contains definitions * of facilities available on _this_ operating system (HAVE_* macros), * and prototypes of OS specific functions defined in os.c or os-inline.c * * @defgroup APACHE_OS_BS2000 bs2000 * @ingroup APACHE_OS * @{ */ #ifndef APACHE_OS_BS2000_H #define APACHE_OS_BS2000_H #define PLATFORM "BS2000" #include "../unix/os.h" /* Other ap_os_ routines not used by this platform */ extern pid_t os_fork(const char *user); #endif /* APACHE_OS_BS2000_H */ /** @} */ httpd-2.4.41/os/Makefile.in0000644000000000000500000000007510150161574013724 0ustar rootsrc SUBDIRS = $(OS_DIR) include $(top_builddir)/build/rules.mk httpd-2.4.41/libhttpd.dep0000644000000000000500000023233612674411515013557 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by libhttpd.mak !IF "$(CFG)" == "libhttpd - Win32 Release" !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF !IF "$(CFG)" == "libhttpd - Win32 Release" !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF !IF "$(CFG)" == "libhttpd - Win32 Release" !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF !IF "$(CFG)" == "libhttpd - Win32 Release" !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF !IF "$(CFG)" == "libhttpd - Win32 Release" !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF !IF "$(CFG)" == "libhttpd - Win32 Release" !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF !IF "$(CFG)" == "libhttpd - Win32 Release" !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF .\modules\http\byterange_filter.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\http_vhost.h"\ ".\include\httpd.h"\ ".\include\mod_core.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\include\util_charset.h"\ ".\include\util_ebcdic.h"\ ".\include\util_filter.h"\ ".\include\util_time.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_date.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_signal.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\modules\http\chunk_filter.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_connection.h"\ ".\include\http_core.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\httpd.h"\ ".\include\mod_core.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_charset.h"\ ".\include\util_ebcdic.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\config.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\http_vhost.h"\ ".\include\httpd.h"\ ".\include\mpm_common.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\include\util_varbuf.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_fnmatch.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\connection.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_connection.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\http_vhost.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\core.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_listen.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_provider.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\ap_slotmem.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_connection.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\http_vhost.h"\ ".\include\httpd.h"\ ".\include\mod_core.h"\ ".\include\mod_proxy.h"\ ".\include\mod_so.h"\ ".\include\mpm_common.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_charset.h"\ ".\include\util_ebcdic.h"\ ".\include\util_filter.h"\ ".\include\util_md5.h"\ ".\include\util_mutex.h"\ ".\include\util_time.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_date.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_md5.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_reslist.h"\ ".\srclib\apr-util\include\apr_strmatch.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_uuid.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_fnmatch.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_random.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\core_filters.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_listen.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_connection.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\http_vhost.h"\ ".\include\httpd.h"\ ".\include\mod_core.h"\ ".\include\mod_so.h"\ ".\include\mpm_common.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_charset.h"\ ".\include\util_ebcdic.h"\ ".\include\util_filter.h"\ ".\include\util_md5.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_md5.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_fnmatch.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\modules\http\http_core.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_connection.h"\ ".\include\http_core.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\httpd.h"\ ".\include\mod_core.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_charset.h"\ ".\include\util_ebcdic.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\modules\http\http_etag.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_connection.h"\ ".\include\http_core.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\modules\http\http_filters.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_connection.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\http_vhost.h"\ ".\include\httpd.h"\ ".\include\mod_core.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\include\util_charset.h"\ ".\include\util_ebcdic.h"\ ".\include\util_filter.h"\ ".\include\util_time.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_date.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_signal.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\modules\http\http_protocol.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\http_vhost.h"\ ".\include\httpd.h"\ ".\include\mod_core.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_charset.h"\ ".\include\util_ebcdic.h"\ ".\include\util_filter.h"\ ".\include\util_time.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_date.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_signal.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\modules\http\http_request.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\httpd.h"\ ".\include\mod_core.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_charset.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_fnmatch.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\log.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_listen.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\include\util_time.h"\ ".\srclib\apr-util\include\apr_base64.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_signal.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\protocol.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\http_vhost.h"\ ".\include\httpd.h"\ ".\include\mod_core.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_charset.h"\ ".\include\util_ebcdic.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_strmatch.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_signal.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\request.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_provider.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\httpd.h"\ ".\include\mod_auth.h"\ ".\include\mod_core.h"\ ".\include\mod_request.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\include\util_charset.h"\ ".\include\util_filter.h"\ ".\include\util_script.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_fnmatch.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\vhost.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_protocol.h"\ ".\include\http_vhost.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\modules\core\mod_so.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\modules\core\mod_so.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\modules\arch\win32\mod_win32.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_regkey.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\httpd.h"\ ".\include\mod_cgi.h"\ ".\include\mod_core.h"\ ".\include\mod_include.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\include\util_script.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\os\win32\modules.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\eoc_bucket.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_connection.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\eor_bucket.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\error_bucket.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_protocol.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\util.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\http_protocol.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_charset.h"\ ".\include\util_ebcdic.h"\ ".\include\util_filter.h"\ ".\include\util_varbuf.h"\ ".\server\test_char.h"\ ".\srclib\apr-util\include\apr_base64.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\util_cfgtree.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_hooks.h"\ ".\include\apache_noprobes.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\util_cookies.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\include\util_cookies.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\util_expr_eval.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_provider.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\include\util_md5.h"\ ".\server\util_expr_private.h"\ ".\srclib\apr-util\include\apr_base64.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_md5.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_sha1.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_fnmatch.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\util_expr_parse.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\server\util_expr_private.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\util_expr_scan.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\server\util_expr_parse.h"\ ".\server\util_expr_private.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\util_fcgi.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\include\util_fcgi.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\util_filter.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\util_md5.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_charset.h"\ ".\include\util_ebcdic.h"\ ".\include\util_md5.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_md5.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\util_mutex.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\include\util_mutex.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\util_pcre.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\util_regex.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\util_script.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\http_protocol.h"\ ".\include\http_request.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\include\util_charset.h"\ ".\include\util_ebcdic.h"\ ".\include\util_filter.h"\ ".\include\util_script.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_date.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\util_time.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_time.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\os\win32\util_win32.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_log.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_getopt.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ ".\srclib\apr\include\arch\apr_private_common.h"\ ".\srclib\apr\include\arch\win32\apr_arch_file_io.h"\ ".\srclib\apr\include\arch\win32\apr_arch_misc.h"\ ".\srclib\apr\include\arch\win32\apr_arch_utf8.h"\ ".\srclib\apr\include\arch\win32\apr_private.h"\ .\server\util_xml.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_protocol.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\include\util_charset.h"\ ".\include\util_filter.h"\ ".\include\util_xml.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apr_xlate.h"\ ".\srclib\apr-util\include\apr_xml.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\os\win32\ap_regkey.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_hooks.h"\ ".\include\ap_regkey.h"\ ".\include\apache_noprobes.h"\ ".\include\os.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_getopt.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ ".\srclib\apr\include\arch\apr_private_common.h"\ ".\srclib\apr\include\arch\win32\apr_arch_file_io.h"\ ".\srclib\apr\include\arch\win32\apr_arch_misc.h"\ ".\srclib\apr\include\arch\win32\apr_arch_utf8.h"\ ".\srclib\apr\include\arch\win32\apr_private.h"\ .\server\mpm\winnt\child.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_listen.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_connection.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\http_vhost.h"\ ".\include\httpd.h"\ ".\include\mpm_common.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\server\mpm\winnt\mpm_default.h"\ ".\server\mpm\winnt\mpm_winnt.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_atomic.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_getopt.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\listen.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_listen.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\httpd.h"\ ".\include\mpm_common.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\mpm_common.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_listen.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\httpd.h"\ ".\include\mod_core.h"\ ".\include\mpm_common.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\include\util_mutex.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_getopt.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_signal.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\mpm\winnt\mpm_winnt.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_listen.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_connection.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\httpd.h"\ ".\include\mpm_common.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\server\mpm\winnt\mpm_default.h"\ ".\server\mpm\winnt\mpm_winnt.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_atomic.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_getopt.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\mpm\winnt\nt_eventlog.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_hooks.h"\ ".\include\ap_listen.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_regkey.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_log.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\server\mpm\winnt\mpm_winnt.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\provider.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_hooks.h"\ ".\include\ap_provider.h"\ ".\include\apache_noprobes.h"\ ".\include\os.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\scoreboard.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_expr.h"\ ".\include\ap_hooks.h"\ ".\include\ap_mmn.h"\ ".\include\ap_mpm.h"\ ".\include\ap_regex.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_core.h"\ ".\include\http_log.h"\ ".\include\http_main.h"\ ".\include\http_protocol.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\scoreboard.h"\ ".\include\util_cfgtree.h"\ ".\include\util_filter.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_hash.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ .\server\mpm\winnt\service.c : \ ".\include\ap_config.h"\ ".\include\ap_config_layout.h"\ ".\include\ap_hooks.h"\ ".\include\ap_listen.h"\ ".\include\ap_mmn.h"\ ".\include\ap_regex.h"\ ".\include\ap_regkey.h"\ ".\include\ap_release.h"\ ".\include\apache_noprobes.h"\ ".\include\http_config.h"\ ".\include\http_log.h"\ ".\include\httpd.h"\ ".\include\os.h"\ ".\include\util_cfgtree.h"\ ".\server\mpm\winnt\mpm_winnt.h"\ ".\srclib\apr-util\include\apr_buckets.h"\ ".\srclib\apr-util\include\apr_hooks.h"\ ".\srclib\apr-util\include\apr_optional_hooks.h"\ ".\srclib\apr-util\include\apr_uri.h"\ ".\srclib\apr-util\include\apu.h"\ ".\srclib\apr\include\apr.h"\ ".\srclib\apr\include\apr_allocator.h"\ ".\srclib\apr\include\apr_dso.h"\ ".\srclib\apr\include\apr_errno.h"\ ".\srclib\apr\include\apr_file_info.h"\ ".\srclib\apr\include\apr_file_io.h"\ ".\srclib\apr\include\apr_general.h"\ ".\srclib\apr\include\apr_getopt.h"\ ".\srclib\apr\include\apr_global_mutex.h"\ ".\srclib\apr\include\apr_inherit.h"\ ".\srclib\apr\include\apr_lib.h"\ ".\srclib\apr\include\apr_mmap.h"\ ".\srclib\apr\include\apr_network_io.h"\ ".\srclib\apr\include\apr_poll.h"\ ".\srclib\apr\include\apr_pools.h"\ ".\srclib\apr\include\apr_portable.h"\ ".\srclib\apr\include\apr_proc_mutex.h"\ ".\srclib\apr\include\apr_ring.h"\ ".\srclib\apr\include\apr_shm.h"\ ".\srclib\apr\include\apr_strings.h"\ ".\srclib\apr\include\apr_tables.h"\ ".\srclib\apr\include\apr_thread_mutex.h"\ ".\srclib\apr\include\apr_thread_proc.h"\ ".\srclib\apr\include\apr_time.h"\ ".\srclib\apr\include\apr_user.h"\ ".\srclib\apr\include\apr_want.h"\ ".\srclib\apr\include\arch\apr_private_common.h"\ ".\srclib\apr\include\arch\win32\apr_arch_misc.h"\ ".\srclib\apr\include\arch\win32\apr_arch_utf8.h"\ ".\srclib\apr\include\arch\win32\apr_private.h"\ !IF "$(CFG)" == "libhttpd - Win32 Release" !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF !IF "$(CFG)" == "libhttpd - Win32 Release" !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF !IF "$(CFG)" == "libhttpd - Win32 Release" !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF .\build\win32\httpd.rc : \ ".\include\ap_release.h"\ httpd-2.4.41/CMakeLists.txt0000644000000000000500000013476313511051361014006 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # Read README.cmake before using this. PROJECT(HTTPD C) CMAKE_MINIMUM_REQUIRED(VERSION 2.8) INCLUDE(CheckSymbolExists) INCLUDE(CheckCSourceCompiles) FIND_PACKAGE(LibXml2) FIND_PACKAGE(Lua51) FIND_PACKAGE(OpenSSL) FIND_PACKAGE(ZLIB) # Options for support libraries not supported by cmake-bundled FindFOO # Default to using APR trunk (libapr-2.lib) if it exists in PREFIX/lib; # otherwise, default to APR 1.x + APR-util 1.x IF(EXISTS "${CMAKE_INSTALL_PREFIX}/lib/libapr-2.lib") SET(default_apr_libraries "${CMAKE_INSTALL_PREFIX}/lib/libapr-2.lib") ELSEIF(EXISTS "${CMAKE_INSTALL_PREFIX}/lib/libapr-1.lib") SET(ldaplib "${CMAKE_INSTALL_PREFIX}/lib/apr_ldap-1.lib") IF(NOT EXISTS ${ldaplib}) SET(ldaplib) ENDIF() SET(default_apr_libraries ${CMAKE_INSTALL_PREFIX}/lib/libapr-1.lib ${CMAKE_INSTALL_PREFIX}/lib/libaprutil-1.lib ${ldaplib}) ELSE() SET(default_apr_libraries) ENDIF() # PCRE names its libraries differently for debug vs. release builds. # We can't query our own CMAKE_BUILD_TYPE at configure time. # If the debug version exists in PREFIX/lib, default to that one. IF(EXISTS "${CMAKE_INSTALL_PREFIX}/lib/pcred.lib") SET(default_pcre_libraries ${CMAKE_INSTALL_PREFIX}/lib/pcred.lib) ELSE() SET(default_pcre_libraries ${CMAKE_INSTALL_PREFIX}/lib/pcre.lib) ENDIF() IF(EXISTS "${CMAKE_INSTALL_PREFIX}/lib/nghttp2d.lib") SET(default_nghttp2_libraries "${CMAKE_INSTALL_PREFIX}/lib/nghttp2d.lib") ELSE() SET(default_nghttp2_libraries "${CMAKE_INSTALL_PREFIX}/lib/nghttp2.lib") ENDIF() IF(EXISTS "${CMAKE_INSTALL_PREFIX}/lib/brotlienc.lib") SET(default_brotli_libraries "${CMAKE_INSTALL_PREFIX}/lib/brotlienc.lib" "${CMAKE_INSTALL_PREFIX}/lib/brotlicommon.lib") ELSE() SET(default_brotli_libraries) ENDIF() IF(EXISTS "${CMAKE_INSTALL_PREFIX}/lib/curl.lib") SET(default_curl_libraries "${CMAKE_INSTALL_PREFIX}/lib/curl.lib") ELSE() SET(default_curl_libraries) ENDIF() IF(EXISTS "${CMAKE_INSTALL_PREFIX}/lib/jansson.lib") SET(default_jansson_libraries "${CMAKE_INSTALL_PREFIX}/lib/jansson.lib") ELSE() SET(default_jansson_libraries) ENDIF() SET(APR_INCLUDE_DIR "${CMAKE_INSTALL_PREFIX}/include" CACHE STRING "Directory with APR[-Util] include files") SET(APR_LIBRARIES ${default_apr_libraries} CACHE STRING "APR libraries to link with") SET(NGHTTP2_INCLUDE_DIR "${CMAKE_INSTALL_PREFIX}/include" CACHE STRING "Directory with NGHTTP2 include files within nghttp2 subdirectory") SET(NGHTTP2_LIBRARIES ${default_nghttp2_libraries} CACHE STRING "NGHTTP2 libraries to link with") SET(PCRE_INCLUDE_DIR "${CMAKE_INSTALL_PREFIX}/include" CACHE STRING "Directory with PCRE include files") SET(PCRE_LIBRARIES ${default_pcre_libraries} CACHE STRING "PCRE libraries to link with") SET(LIBXML2_ICONV_INCLUDE_DIR "" CACHE STRING "Directory with iconv include files for libxml2") SET(LIBXML2_ICONV_LIBRARIES "" CACHE STRING "iconv libraries to link with for libxml2") SET(BROTLI_INCLUDE_DIR "${CMAKE_INSTALL_PREFIX}/include" CACHE STRING "Directory with include files for Brotli") SET(BROTLI_LIBRARIES ${default_brotli_libraries} CACHE STRING "Brotli libraries to link with") SET(CURL_LIBRARIES "${default_curl_libraries}" CACHE STRING "Curl libraries to link with") SET(JANSSON_LIBRARIES "${default_jansson_libraries}" CACHE STRING "Jansson libraries to link with") # end support library configuration # Misc. options OPTION(INSTALL_PDB "Install .pdb files (if generated)" ON) OPTION(INSTALL_MANUAL "Install manual" ON) SET(ENABLE_MODULES "O" CACHE STRING "Minimum module enablement (e.g., \"i\" to build all but those without prerequisites)") SET(WITH_MODULES "" CACHE STRING "comma-separated paths to single-file modules to statically link into the server") SET(EXTRA_INCLUDES "" CACHE STRING "Extra include directories") SET(EXTRA_LIBS "" CACHE STRING "Extra libraries") SET(EXTRA_COMPILE_FLAGS "" CACHE STRING "Extra compile flags") IF(NOT EXISTS "${APR_INCLUDE_DIR}/apr.h") MESSAGE(FATAL_ERROR "APR include directory ${APR_INCLUDE_DIR} is not correct.") ENDIF() FOREACH(onelib ${APR_LIBRARIES}) IF(NOT EXISTS ${onelib}) MESSAGE(FATAL_ERROR "APR library ${onelib} was not found.") ENDIF() ENDFOREACH() MACRO(DEFINE_WITH_BLANKS output_definition input_symbol input_value) IF(MSVC_IDE OR ${CMAKE_MAJOR_VERSION}.${CMAKE_MINOR_VERSION}.${CMAKE_PATCH_VERSION} VERSION_GREATER 2.8.11) SET(${output_definition} "-D${input_symbol}=\"${input_value}\"") ELSE() # command-line tool + older cmake, where extra quotes must be added and # escaped to survive SET(${output_definition} "-D${input_symbol}=\"\\\"${input_value}\\\"\"") ENDIF() ENDMACRO() MACRO(GET_MOD_ENABLE_RANK macro_modname macro_mod_enable_val macro_output_rank) IF(${macro_mod_enable_val} STREQUAL "O") SET(${macro_output_rank} 0) ELSEIF(${macro_mod_enable_val} STREQUAL "i") SET(${macro_output_rank} 1) ELSEIF(${macro_mod_enable_val} STREQUAL "I") SET(${macro_output_rank} 2) ELSEIF(${macro_mod_enable_val} STREQUAL "a") SET(${macro_output_rank} 3) ELSEIF(${macro_mod_enable_val} STREQUAL "A") SET(${macro_output_rank} 4) ELSE() MESSAGE(FATAL_ERROR "Unexpected enablement value \"${macro_mod_enable_val}\" for ${macro_modname}") ENDIF() ENDMACRO() GET_MOD_ENABLE_RANK("ENABLE_MODULES setting" ${ENABLE_MODULES} enable_modules_rank) # Figure out what APR/APU features are available # # CHECK_APR_FEATURE checks for features defined to 1 or 0 in apr.h or apu.h # The symbol representing the feature will be set to TRUE or FALSE for # compatibility with the feature tests set by FindFooPackage. # # (unclear why CHECK_SYMBOL_EXISTS is needed, but I was getting "found" for anything # not defined to either 1 or 0) MACRO(CHECK_APR_FEATURE which_define) SET(CMAKE_REQUIRED_INCLUDES "${APR_INCLUDE_DIR}") CHECK_SYMBOL_EXISTS(${which_define} "apr.h;apu.h" tmp_${which_define}) IF(${tmp_${which_define}}) CHECK_C_SOURCE_COMPILES("#include \"${APR_INCLUDE_DIR}/apr.h\" #include \"${APR_INCLUDE_DIR}/apu.h\" int main() { #ifndef ${which_define} #error gobble #endif #if !${which_define} #error gobble #endif return 1;}" ${which_define}) ELSE() SET(${which_define}) ENDIF() IF(${${which_define}}) SET(${which_define} TRUE) ELSE() SET(${which_define} FALSE) ENDIF() ENDMACRO() CHECK_APR_FEATURE(APR_HAS_XLATE) CHECK_APR_FEATURE(APU_HAVE_CRYPTO) # APR_HAS_LDAP is defined in apr_ldap.h, which exists only in apr 1.x, so use # special code instead of CHECK_APR_FEATURE() # As with CHECK_APR_FEATURE(), convert to a TRUE/FALSE result. CHECK_C_SOURCE_COMPILES("#include \"${APR_INCLUDE_DIR}/apr.h\" #include \"${APR_INCLUDE_DIR}/apr_ldap.h\" int main() { #if !APR_HAS_LDAP #error gobble #endif return 1;}" APR_HAS_LDAP) IF(${APR_HAS_LDAP}) SET(APR_HAS_LDAP TRUE) ELSE() SET(APR_HAS_LDAP FALSE) ENDIF() # See if nghttp2 exists in a configured or defaulted location SET(NGHTTP2_FOUND TRUE) IF(EXISTS "${NGHTTP2_INCLUDE_DIR}/nghttp2/nghttp2.h") FOREACH(onelib ${NGHTTP2_LIBRARIES}) IF(NOT EXISTS ${onelib}) SET(NGHTTP2_FOUND FALSE) ENDIF() ENDFOREACH() ELSE() SET(NGHTTP2_FOUND FALSE) ENDIF() # See if we have Brotli SET(BROTLI_FOUND TRUE) IF(EXISTS "${BROTLI_INCLUDE_DIR}/brotli/encode.h") FOREACH(onelib ${BROTLI_LIBRARIES}) IF(NOT EXISTS ${onelib}) SET(BROTLI_FOUND FALSE) ENDIF() ENDFOREACH() ELSE() SET(BROTLI_FOUND FALSE) ENDIF() # See if we have curl SET(CURL_FOUND TRUE) IF(EXISTS "${CURL_INCLUDE_DIR}/curl/curl.h") FOREACH(onelib ${CURL_LIBRARIES}) IF(NOT EXISTS ${onelib}) SET(CURL_FOUND FALSE) ENDIF() ENDFOREACH() ELSE() SET(CURL_FOUND FALSE) ENDIF() MESSAGE(STATUS "") MESSAGE(STATUS "Summary of feature detection:") MESSAGE(STATUS "") MESSAGE(STATUS "LIBXML2_FOUND ............ : ${LIBXML2_FOUND}") MESSAGE(STATUS "LUA51_FOUND .............. : ${LUA51_FOUND}") MESSAGE(STATUS "NGHTTP2_FOUND ............ : ${NGHTTP2_FOUND}") MESSAGE(STATUS "OPENSSL_FOUND ............ : ${OPENSSL_FOUND}") MESSAGE(STATUS "ZLIB_FOUND ............... : ${ZLIB_FOUND}") MESSAGE(STATUS "BROTLI_FOUND ............. : ${BROTLI_FOUND}") MESSAGE(STATUS "CURL_FOUND ............... : ${CURL_FOUND}") MESSAGE(STATUS "JANSSON_FOUND ............ : ${JANSSON_FOUND}") MESSAGE(STATUS "APR_HAS_LDAP ............. : ${APR_HAS_LDAP}") MESSAGE(STATUS "APR_HAS_XLATE ............ : ${APR_HAS_XLATE}") MESSAGE(STATUS "APU_HAVE_CRYPTO .......... : ${APU_HAVE_CRYPTO}") MESSAGE(STATUS "") # Options for each available module # "A" ("A"ctive) means installed and active in default .conf, fail if can't be built # "I" ("I"nactive) means installed and inactive (LoadModule commented out) in default .conf, fail if can't be built # "O" ("O"mit) means not installed, no LoadModule # "a" - like "A", but ignore with a warning if any prereqs aren't available # "i" - like "I", but ignore with a warning if any prereqs aren't available # Current heuristic for default enablement: # # Module requires a prereq and -> O # finding/usingprereq isn't implemented # yet # # Module is included by default in -> a if it has prereqs, A otherwise # autoconf-based build # # Module is included in -> i if it has prereqs, I otherwise # --enable-modules=most # # Otherwise -> O # SET(MODULE_LIST "modules/aaa/mod_access_compat+A+mod_access compatibility" "modules/aaa/mod_allowmethods+I+restrict allowed HTTP methods" "modules/aaa/mod_auth_basic+A+basic authentication" "modules/aaa/mod_auth_digest+I+RFC2617 Digest authentication" "modules/aaa/mod_auth_form+I+form authentication" "modules/aaa/mod_authn_anon+I+anonymous user authentication control" "modules/aaa/mod_authn_core+A+core authentication module" "modules/aaa/mod_authn_dbd+I+SQL-based authentication control" "modules/aaa/mod_authn_dbm+I+DBM-based authentication control" "modules/aaa/mod_authn_file+A+file-based authentication control" "modules/aaa/mod_authn_socache+I+Cached authentication control" "modules/aaa/mod_authnz_fcgi+I+FastCGI authorizer-based authentication and authorization" "modules/aaa/mod_authnz_ldap+i+LDAP based authentication" "modules/aaa/mod_authz_core+A+core authorization provider vector module" "modules/aaa/mod_authz_dbd+I+SQL based authorization and Login/Session support" "modules/aaa/mod_authz_dbm+I+DBM-based authorization control" "modules/aaa/mod_authz_groupfile+A+'require group' authorization control" "modules/aaa/mod_authz_host+A+host-based authorization control" "modules/aaa/mod_authz_owner+I+'require file-owner' authorization control" "modules/aaa/mod_authz_user+A+'require user' authorization control" "modules/arch/win32/mod_isapi+I+isapi extension support" "modules/cache/mod_cache+I+dynamic file caching. At least one storage management module (e.g. mod_cache_disk) is also necessary." "modules/cache/mod_cache_disk+I+disk caching module" "modules/cache/mod_cache_socache+I+shared object caching module" "modules/cache/mod_file_cache+I+File cache" "modules/cache/mod_socache_dbm+I+dbm small object cache provider" "modules/cache/mod_socache_dc+O+distcache small object cache provider" "modules/cache/mod_socache_memcache+I+memcache small object cache provider" "modules/cache/mod_socache_shmcb+I+ shmcb small object cache provider" "modules/cache/mod_socache_redis+I+redis small object cache provider" "modules/cluster/mod_heartbeat+I+Generates Heartbeats" "modules/cluster/mod_heartmonitor+I+Collects Heartbeats" "modules/core/mod_macro+I+Define and use macros in configuration files" "modules/core/mod_watchdog+I+Watchdog module" "modules/database/mod_dbd+I+Apache DBD Framework" "modules/dav/fs/mod_dav_fs+I+DAV provider for the filesystem." "modules/dav/lock/mod_dav_lock+I+DAV provider for generic locking" "modules/dav/main/mod_dav+I+WebDAV protocol handling." "modules/debugging/mod_bucketeer+O+buckets manipulation filter. Useful only for developers and testing purposes." "modules/debugging/mod_dumpio+I+I/O dump filter" "modules/echo/mod_echo+O+ECHO server" "modules/examples/mod_case_filter+O+Example uppercase conversion filter" "modules/examples/mod_case_filter_in+O+Example uppercase conversion input filter" "modules/examples/mod_example_hooks+O+Example hook callback handler module" "modules/examples/mod_example_ipc+O+Example of shared memory and mutex usage" "modules/filters/mod_brotli+i+Brotli compression support" "modules/filters/mod_buffer+I+Filter Buffering" "modules/filters/mod_charset_lite+i+character set translation" "modules/filters/mod_data+O+RFC2397 data encoder" "modules/filters/mod_deflate+i+Deflate transfer encoding support" "modules/filters/mod_ext_filter+I+external filter module" "modules/filters/mod_filter+A+Smart Filtering" "modules/filters/mod_include+I+Server Side Includes" "modules/filters/mod_proxy_html+i+Fix HTML Links in a Reverse Proxy" "modules/filters/mod_ratelimit+I+Output Bandwidth Limiting" "modules/filters/mod_reflector+O+Reflect request through the output filter stack" "modules/filters/mod_reqtimeout+A+Limit time waiting for request from client" "modules/filters/mod_request+I+Request Body Filtering" "modules/filters/mod_sed+I+filter request and/or response bodies through sed" "modules/filters/mod_substitute+I+response content rewrite-like filtering" "modules/filters/mod_xml2enc+i+i18n support for markup filters" "modules/generators/mod_asis+I+as-is filetypes" "modules/generators/mod_autoindex+A+directory listing" "modules/generators/mod_cgi+I+CGI scripts" "modules/generators/mod_info+I+server information" "modules/generators/mod_status+I+process/thread monitoring" "modules/http/mod_mime+A+mapping of file-extension to MIME. Disabling this module is normally not recommended." "modules/http2/mod_http2+i+HTTP/2 protocol support" "modules/ldap/mod_ldap+i+LDAP caching and connection pooling services" "modules/loggers/mod_log_config+A+logging configuration. You won't be able to log requests to the server without this module." "modules/loggers/mod_log_debug+I+configurable debug logging" "modules/loggers/mod_log_forensic+I+forensic logging" "modules/loggers/mod_logio+I+input and output logging" "modules/lua/mod_lua+i+Apache Lua Framework" "modules/md/mod_md+i+Apache Managed Domains (Certificates)" "modules/mappers/mod_actions+I+Action triggering on requests" "modules/mappers/mod_alias+A+mapping of requests to different filesystem parts" "modules/mappers/mod_dir+A+directory request handling" "modules/mappers/mod_imagemap+I+server-side imagemaps" "modules/mappers/mod_negotiation+I+content negotiation" "modules/mappers/mod_rewrite+I+rule based URL manipulation" "modules/mappers/mod_speling+I+correct common URL misspellings" "modules/mappers/mod_userdir+I+mapping of requests to user-specific directories" "modules/mappers/mod_vhost_alias+I+mass virtual hosting module" "modules/metadata/mod_cern_meta+O+CERN-type meta files" "modules/metadata/mod_env+A+clearing/setting of ENV vars" "modules/metadata/mod_expires+I+Expires header control" "modules/metadata/mod_headers+A+HTTP header control" "modules/metadata/mod_ident+O+RFC 1413 identity check" "modules/metadata/mod_mime_magic+O+automagically determining MIME type" "modules/metadata/mod_remoteip+I+translate header contents to an apparent client remote_ip" "modules/metadata/mod_setenvif+A+basing ENV vars on headers" "modules/metadata/mod_unique_id+I+per-request unique ids" "modules/metadata/mod_usertrack+I+user-session tracking" "modules/metadata/mod_version+A+determining httpd version in config files" "modules/proxy/balancers/mod_lbmethod_bybusyness+I+Apache proxy Load balancing by busyness" "modules/proxy/balancers/mod_lbmethod_byrequests+I+Apache proxy Load balancing by request counting" "modules/proxy/balancers/mod_lbmethod_bytraffic+I+Apache proxy Load balancing by traffic counting" "modules/proxy/balancers/mod_lbmethod_heartbeat+I+Apache proxy Load balancing from Heartbeats" "modules/proxy/mod_proxy_ajp+I+Apache proxy AJP module. Requires and is enabled by --enable-proxy." "modules/proxy/mod_proxy_balancer+I+Apache proxy BALANCER module. Requires and is enabled by --enable-proxy." "modules/proxy/mod_proxy+I+Apache proxy module" "modules/proxy/mod_proxy_connect+I+Apache proxy CONNECT module. Requires and is enabled by --enable-proxy." "modules/proxy/mod_proxy_express+I+mass reverse-proxy module. Requires --enable-proxy." "modules/proxy/mod_proxy_fcgi+I+Apache proxy FastCGI module. Requires and is enabled by --enable-proxy." "modules/proxy/mod_proxy_ftp+I+Apache proxy FTP module. Requires and is enabled by --enable-proxy." "modules/proxy/mod_proxy_http+I+Apache proxy HTTP module. Requires and is enabled by --enable-proxy." "modules/proxy/mod_proxy_hcheck+I+Apache proxy health check module. Requires and is enabled by --enable-proxy." "modules/proxy/mod_proxy_scgi+I+Apache proxy SCGI module. Requires and is enabled by --enable-proxy." "modules/proxy/mod_proxy_wstunnel+I+Apache proxy Websocket Tunnel module. Requires and is enabled by --enable-proxy." "modules/http2/mod_proxy_http2+i+Apache proxy HTTP/2 module. Requires --enable-proxy." "modules/session/mod_session+I+session module" "modules/session/mod_session_cookie+I+session cookie module" "modules/session/mod_session_crypto+i+session crypto module" "modules/session/mod_session_dbd+I+session dbd module" "modules/slotmem/mod_slotmem_plain+I+slotmem provider that uses plain memory" "modules/slotmem/mod_slotmem_shm+I+slotmem provider that uses shared memory" "modules/ssl/mod_ssl+i+SSL/TLS support" "modules/test/mod_dialup+O+rate limits static files to dialup modem speeds" "modules/test/mod_optional_fn_export+O+example optional function exporter" "modules/test/mod_optional_fn_import+O+example optional function importer" "modules/test/mod_optional_hook_export+O+example optional hook exporter" "modules/test/mod_optional_hook_import+O+example optional hook importer" ) # Track which modules actually built have APIs to link against. SET(installed_mod_libs_exps) # Define extra definitions, sources, headers, etc. required by some modules. # This could be included in the master list of modules above, though it # certainly would get a lot more unreadable. SET(mod_apreq_extra_defines APREQ_DECLARE_EXPORT) SET(mod_apreq_extra_sources modules/apreq/handle.c) SET(mod_apreq_main_source modules/apreq/filter.c) SET(mod_authz_dbd_extra_defines AUTHZ_DBD_DECLARE_EXPORT) SET(mod_authnz_ldap_requires APR_HAS_LDAP) SET(mod_authnz_ldap_extra_libs mod_ldap) SET(mod_cache_extra_defines CACHE_DECLARE_EXPORT) SET(mod_cache_extra_sources modules/cache/cache_storage.c modules/cache/cache_util.c ) SET(mod_cache_install_lib 1) SET(mod_cache_disk_extra_libs mod_cache) SET(mod_cache_socache_extra_libs mod_cache) SET(mod_charset_lite_requires APR_HAS_XLATE) SET(mod_dav_extra_defines DAV_DECLARE_EXPORT) SET(mod_dav_extra_sources modules/dav/main/liveprop.c modules/dav/main/props.c modules/dav/main/std_liveprop.c modules/dav/main/providers.c modules/dav/main/util.c modules/dav/main/util_lock.c ) SET(mod_dav_install_lib 1) SET(mod_dav_fs_extra_sources modules/dav/fs/dbm.c modules/dav/fs/lock.c modules/dav/fs/repos.c ) SET(mod_dav_fs_extra_libs mod_dav) SET(mod_dav_lock_extra_sources modules/dav/lock/locks.c) SET(mod_dav_lock_extra_libs mod_dav) SET(mod_dbd_extra_defines DBD_DECLARE_EXPORT) SET(mod_deflate_requires ZLIB_FOUND) IF(ZLIB_FOUND) SET(mod_deflate_extra_includes ${ZLIB_INCLUDE_DIR}) SET(mod_deflate_extra_libs ${ZLIB_LIBRARIES}) ENDIF() SET(mod_brotli_requires BROTLI_FOUND) IF(BROTLI_FOUND) SET(mod_brotli_extra_includes ${BROTLI_INCLUDE_DIR}) SET(mod_brotli_extra_libs ${BROTLI_LIBRARIES}) ENDIF() SET(mod_firehose_requires SOMEONE_TO_MAKE_IT_COMPILE_ON_WINDOWS) SET(mod_heartbeat_extra_libs mod_watchdog) SET(mod_http2_requires NGHTTP2_FOUND) SET(mod_http2_extra_defines ssize_t=long) SET(mod_http2_extra_includes ${NGHTTP2_INCLUDE_DIR}) SET(mod_http2_extra_libs ${NGHTTP2_LIBRARIES}) SET(mod_http2_extra_sources modules/http2/h2_alt_svc.c modules/http2/h2_bucket_eos.c modules/http2/h2_config.c modules/http2/h2_conn.c modules/http2/h2_conn_io.c modules/http2/h2_ctx.c modules/http2/h2_filter.c modules/http2/h2_from_h1.c modules/http2/h2_h2.c modules/http2/h2_bucket_beam.c modules/http2/h2_mplx.c modules/http2/h2_push.c modules/http2/h2_request.c modules/http2/h2_headers.c modules/http2/h2_session.c modules/http2/h2_stream.c modules/http2/h2_switch.c modules/http2/h2_task.c modules/http2/h2_util.c modules/http2/h2_workers.c ) SET(mod_ldap_extra_defines LDAP_DECLARE_EXPORT) SET(mod_ldap_extra_libs wldap32) SET(mod_ldap_extra_sources modules/ldap/util_ldap_cache.c modules/ldap/util_ldap_cache_mgr.c ) SET(mod_ldap_main_source modules/ldap/util_ldap.c) SET(mod_ldap_requires APR_HAS_LDAP) SET(mod_lua_extra_defines AP_LUA_DECLARE_EXPORT) SET(mod_lua_extra_includes ${LUA_INCLUDE_DIR}) SET(mod_lua_extra_libs ${LUA_LIBRARIES}) SET(mod_lua_extra_sources modules/lua/lua_apr.c modules/lua/lua_config.c modules/lua/lua_passwd.c modules/lua/lua_request.c modules/lua/lua_vmprep.c modules/lua/lua_dbd.c ) SET(mod_lua_requires LUA51_FOUND) SET(mod_md_requires OPENSSL_FOUND CURL_FOUND JANSSON_FOUND HAVE_OPENSSL_102) SET(mod_md_extra_includes ${OPENSSL_INCLUDE_DIR} ${CURL_INCLUDE_DIR} ${JANSSON_INCLUDE_DIR}) SET(mod_md_extra_libs ${OPENSSL_LIBRARIES} ${CURL_LIBRARIES} ${JANSSON_LIBRARIES} mod_watchdog) SET(mod_md_extra_sources modules/md/md_acme.c modules/md/md_acme_acct.c modules/md/md_acme_authz.c modules/md/md_acme_drive.c modules/md/md_acmev1_drive.c modules/md/md_acmev2_drive.c modules/md/md_acme_order.c modules/md/md_core.c modules/md/md_curl.c modules/md/md_crypt.c modules/md/md_http.c modules/md/md_json.c modules/md/md_jws.c modules/md/md_log.c modules/md/md_result.c modules/md/md_reg.c modules/md/md_status.c modules/md/md_store.c modules/md/md_store_fs.c modules/md/md_time.c modules/md/md_util.c modules/md/mod_md_config.c modules/md/mod_md_drive.c modules/md/mod_md_os.c modules/md/mod_md_status.c ) SET(mod_optional_hook_export_extra_defines AP_DECLARE_EXPORT) # bogus reuse of core API prefix SET(mod_proxy_extra_defines PROXY_DECLARE_EXPORT) SET(mod_proxy_extra_sources modules/proxy/proxy_util.c) SET(mod_proxy_install_lib 1) SET(mod_proxy_ajp_extra_sources modules/proxy/ajp_header.c modules/proxy/ajp_link.c modules/proxy/ajp_msg.c modules/proxy/ajp_utils.c ) SET(mod_proxy_ajp_extra_libs mod_proxy) SET(mod_proxy_balancer_extra_libs mod_proxy) SET(mod_proxy_connect_extra_libs mod_proxy) SET(mod_proxy_express_extra_libs mod_proxy) SET(mod_proxy_fcgi_extra_libs mod_proxy) SET(mod_proxy_ftp_extra_libs mod_proxy) SET(mod_proxy_hcheck_extra_libs mod_proxy) SET(mod_proxy_http_extra_libs mod_proxy) SET(mod_proxy_html_requires LIBXML2_FOUND) IF(LIBXML2_FOUND) SET(mod_proxy_html_extra_includes "${LIBXML2_INCLUDE_DIR};${LIBXML2_ICONV_INCLUDE_DIR}") SET(mod_proxy_html_extra_libs "${LIBXML2_LIBRARIES};${LIBXML2_ICONV_LIBRARIES}") ENDIF() SET(mod_proxy_scgi_extra_libs mod_proxy) SET(mod_proxy_wstunnel_extra_libs mod_proxy) SET(mod_proxy_http2_requires NGHTTP2_FOUND) SET(mod_proxy_http2_extra_defines ssize_t=long) SET(mod_proxy_http2_extra_includes ${NGHTTP2_INCLUDE_DIR}) SET(mod_proxy_http2_extra_libs ${NGHTTP2_LIBRARIES} mod_proxy) SET(mod_proxy_http2_extra_sources modules/http2/h2_proxy_session.c modules/http2/h2_proxy_util.c ) SET(mod_ratelimit_extra_defines AP_RL_DECLARE_EXPORT) SET(mod_sed_extra_sources modules/filters/regexp.c modules/filters/sed0.c modules/filters/sed1.c ) SET(mod_serf_requires AN_UNIMPLEMENTED_SUPPORT_LIBRARY_REQUIREMENT) SET(mod_session_extra_defines SESSION_DECLARE_EXPORT) SET(mod_session_install_lib 1) SET(mod_session_cookie_extra_libs mod_session) SET(mod_session_crypto_requires APU_HAVE_CRYPTO) SET(mod_session_crypto_extra_libs mod_session) SET(mod_session_dbd_extra_libs mod_session) SET(mod_socache_dc_requires AN_UNIMPLEMENTED_SUPPORT_LIBRARY_REQUIREMENT) SET(mod_ssl_extra_defines SSL_DECLARE_EXPORT) SET(mod_ssl_requires OPENSSL_FOUND) IF(OPENSSL_FOUND) SET(mod_ssl_extra_includes ${OPENSSL_INCLUDE_DIR}) SET(mod_ssl_extra_libs ${OPENSSL_LIBRARIES}) ENDIF() SET(mod_ssl_extra_sources modules/ssl/ssl_engine_config.c modules/ssl/ssl_engine_init.c modules/ssl/ssl_engine_io.c modules/ssl/ssl_engine_kernel.c modules/ssl/ssl_engine_log.c modules/ssl/ssl_engine_mutex.c modules/ssl/ssl_engine_ocsp.c modules/ssl/ssl_engine_pphrase.c modules/ssl/ssl_engine_rand.c modules/ssl/ssl_engine_vars.c modules/ssl/ssl_scache.c modules/ssl/ssl_util.c modules/ssl/ssl_util_ocsp.c modules/ssl/ssl_util_ssl.c modules/ssl/ssl_util_stapling.c ) SET(mod_status_extra_defines STATUS_DECLARE_EXPORT) SET(mod_watchdog_install_lib 1) SET(mod_xml2enc_requires LIBXML2_FOUND) IF(LIBXML2_FOUND) SET(mod_xml2enc_extra_includes "${LIBXML2_INCLUDE_DIR};${LIBXML2_ICONV_INCLUDE_DIR}") SET(mod_xml2enc_extra_libs "${LIBXML2_LIBRARIES};${LIBXML2_ICONV_LIBRARIES}") ENDIF() SET(mod_watchdog_extra_defines AP_WD_DECLARE_EXPORT) SET(MODULE_PATHS) FOREACH (modinfo ${MODULE_LIST}) STRING(REGEX REPLACE "([^+]*)\\+([^+]*)\\+([^+]*)" "\\1;\\2;\\3" modinfolist ${modinfo}) SET(path_to_module) SET(defaultenable) SET(helptext) FOREACH(i ${modinfolist}) IF("${path_to_module}" STREQUAL "") SET(path_to_module ${i}) ELSEIF("${defaultenable}" STREQUAL "") SET(defaultenable ${i}) ELSEIF("${helptext}" STREQUAL "") SET(helptext ${i}) ELSE() MESSAGE(FATAL_ERROR "Unexpected field or plus sign in >${modinfo}<") ENDIF() ENDFOREACH() # MESSAGE(" path to module: ${path_to_module}") # MESSAGE("enablement by default: ${defaultenable}") # MESSAGE(" help text: ${helptext}") STRING(REGEX REPLACE ".*/(mod_[^\\+]+)" "\\1" mod_name ${path_to_module}) STRING(REGEX REPLACE "mod_(.*)" "\\1" mod_shortname ${mod_name}) STRING(TOUPPER "ENABLE_${mod_shortname}" mod_option_name) SET(${mod_option_name} ${defaultenable} CACHE STRING ${helptext}) SET(MODULE_PATHS "${MODULE_PATHS};${path_to_module}") ENDFOREACH() SET(install_targets) SET(install_bin_pdb) SET(install_modules) # special handling vs. other installed targets SET(install_modules_pdb) SET(builtin_module_shortnames "win32 mpm_winnt http so") # core added automatically SET(extra_builtin_modules) # the ones specified with -DWITH_MODULES= IF(WITH_MODULES) # modules statically linked with the server STRING(REPLACE "," ";" WITH_MODULE_LIST ${WITH_MODULES}) FOREACH(static_mod ${WITH_MODULE_LIST}) STRING(REGEX MATCH "[^/]+\\.c" mod_basename ${static_mod}) STRING(REGEX REPLACE "^mod_(.*)\\.c" "\\1" mod_module_name ${mod_basename}) SET(builtin_module_shortnames "${builtin_module_shortnames} ${mod_module_name}") CONFIGURE_FILE(${static_mod} ${PROJECT_BINARY_DIR}/ COPYONLY) SET(extra_builtin_modules ${extra_builtin_modules} ${PROJECT_BINARY_DIR}/${mod_basename}) ENDFOREACH() EXECUTE_PROCESS(COMMAND cmd /c "echo ${builtin_module_shortnames}| awk -f ${CMAKE_CURRENT_SOURCE_DIR}/build/build-modules-c.awk > ${PROJECT_BINARY_DIR}/modules.c" RESULT_VARIABLE rv) IF(rv) MESSAGE(FATAL_ERROR "build-modules-c.awk failed (${rv})") ENDIF() ELSE() # no extra built-in modules; use the default modules.c to avoid the awk prereq CONFIGURE_FILE(${CMAKE_CURRENT_SOURCE_DIR}/os/win32/modules.c ${PROJECT_BINARY_DIR}/ COPYONLY) ENDIF() # for easy reference from .dll/.so builds CONFIGURE_FILE(os/win32/BaseAddr.ref ${PROJECT_BINARY_DIR}/ COPYONLY) ADD_EXECUTABLE(gen_test_char server/gen_test_char.c) GET_TARGET_PROPERTY(GEN_TEST_CHAR_EXE gen_test_char LOCATION) ADD_CUSTOM_COMMAND( COMMENT "Generating character tables, test_char.h, for current locale" DEPENDS gen_test_char COMMAND ${GEN_TEST_CHAR_EXE} > ${PROJECT_BINARY_DIR}/test_char.h OUTPUT ${PROJECT_BINARY_DIR}/test_char.h ) ADD_CUSTOM_TARGET( test_char_header ALL DEPENDS ${PROJECT_BINARY_DIR}/test_char.h ) SET(HTTPD_MAIN_SOURCES server/main.c ) SET(LIBHTTPD_SOURCES ${extra_builtin_modules} ${PROJECT_BINARY_DIR}/modules.c modules/arch/win32/mod_win32.c modules/core/mod_so.c modules/http/byterange_filter.c modules/http/chunk_filter.c modules/http/http_core.c modules/http/http_etag.c modules/http/http_filters.c modules/http/http_protocol.c modules/http/http_request.c os/win32/ap_regkey.c os/win32/util_win32.c server/buildmark.c server/config.c server/connection.c server/core.c server/core_filters.c server/eoc_bucket.c server/eor_bucket.c server/error_bucket.c server/listen.c server/log.c server/mpm/winnt/child.c server/mpm/winnt/mpm_winnt.c server/mpm/winnt/nt_eventlog.c server/mpm/winnt/service.c server/mpm_common.c server/protocol.c server/provider.c server/request.c server/scoreboard.c server/util.c server/util_cfgtree.c server/util_cookies.c server/util_debug.c server/util_expr_eval.c server/util_expr_parse.c server/util_fcgi.c server/util_expr_scan.c server/util_filter.c server/util_md5.c server/util_mutex.c server/util_pcre.c server/util_regex.c server/util_script.c server/util_time.c server/util_xml.c server/vhost.c ) CONFIGURE_FILE(os/win32/win32_config_layout.h ${PROJECT_BINARY_DIR}/ap_config_layout.h) SET(HTTPD_INCLUDE_DIRECTORIES ${PROJECT_BINARY_DIR} ${EXTRA_INCLUDES} # see discussion in cmake bug 13188 regarding oddities with relative paths ${CMAKE_CURRENT_SOURCE_DIR}/include ${CMAKE_CURRENT_SOURCE_DIR}/os/win32 ${CMAKE_CURRENT_SOURCE_DIR}/modules/core ${CMAKE_CURRENT_SOURCE_DIR}/modules/database ${CMAKE_CURRENT_SOURCE_DIR}/modules/dav/main ${CMAKE_CURRENT_SOURCE_DIR}/modules/filters ${CMAKE_CURRENT_SOURCE_DIR}/modules/generators ${CMAKE_CURRENT_SOURCE_DIR}/modules/http2 ${CMAKE_CURRENT_SOURCE_DIR}/modules/md ${CMAKE_CURRENT_SOURCE_DIR}/modules/proxy ${CMAKE_CURRENT_SOURCE_DIR}/modules/session ${CMAKE_CURRENT_SOURCE_DIR}/modules/ssl ${CMAKE_CURRENT_SOURCE_DIR}/server ${APR_INCLUDE_DIR} ${PCRE_INCLUDE_DIR} ) # The .h files we install from outside the main include directory # largely parallel the include directories above. SET(other_installed_h ${PROJECT_BINARY_DIR}/ap_config_layout.h ${CMAKE_CURRENT_SOURCE_DIR}/os/win32/os.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/cache/mod_cache.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/cache/cache_common.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/core/mod_so.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/core/mod_watchdog.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/database/mod_dbd.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/dav/main/mod_dav.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/filters/mod_include.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/filters/mod_xml2enc.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/generators/mod_cgi.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/generators/mod_status.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/http2/mod_http2.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/loggers/mod_log_config.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/mappers/mod_rewrite.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/proxy/mod_proxy.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/session/mod_session.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/ssl/mod_ssl.h ${CMAKE_CURRENT_SOURCE_DIR}/modules/ssl/mod_ssl_openssl.h ) # When mod_serf is buildable, don't forget to copy modules/proxy/mod_serf.h INCLUDE_DIRECTORIES(${HTTPD_INCLUDE_DIRECTORIES}) SET(HTTPD_SYSTEM_LIBS ws2_32 mswsock ) ########### HTTPD MODULES ############ SET(LoadModules) SET(mods_built_and_loaded) SET(mods_built_but_not_loaded) SET(mods_omitted) FOREACH (mod ${MODULE_PATHS}) # Build different forms of the module name; e.g., # mod_name->mod_cgi, mod_module_name->cgi_module, mod_shortname->cgi STRING(REGEX REPLACE ".*/(mod_[^\\+]+)" "\\1" mod_name ${mod}) STRING(REGEX REPLACE "mod_(.*)" "\\1_module" mod_module_name ${mod_name}) STRING(REGEX REPLACE "mod_(.*)" "\\1" mod_shortname ${mod_name}) # Is it enabled? STRING(TOUPPER "ENABLE_${mod_shortname}" enable_mod) SET(enable_mod_val ${${enable_mod}}) # Is ENABLE_MODULES set to a higher value? GET_MOD_ENABLE_RANK(${mod_name} ${enable_mod_val} this_mod_rank) IF(this_mod_rank LESS enable_modules_rank) # Use the value from ENABLE_MODULES SET(enable_mod_val ${ENABLE_MODULES}) ENDIF() IF(NOT ${enable_mod_val} STREQUAL "O") # build of module is desired SET(mod_requires "${mod_name}_requires") STRING(TOUPPER ${enable_mod_val} enable_mod_val_upper) IF(NOT ${${mod_requires}} STREQUAL "") # module has some prerequisite IF(NOT ${${mod_requires}}) # prerequisite doesn't exist IF(NOT ${enable_mod_val} STREQUAL ${enable_mod_val_upper}) # lower case, so optional based on prereq MESSAGE(STATUS "${mod_name} was requested but couldn't be built due to a missing prerequisite (${${mod_requires}})") SET(enable_mod_val_upper "O") # skip due to missing prerequisite ELSE() # must be upper case "A" or "I" (or coding error above) MESSAGE(FATAL_ERROR "${mod_name} was requested but couldn't be built due to a missing prerequisite (${${mod_requires}})") ENDIF() ENDIF() ENDIF() # map a->A, i->I, O->O for remaining logic since prereq checking is over SET(enable_mod_val ${enable_mod_val_upper}) ENDIF() IF(${enable_mod_val} STREQUAL "O") # ignore SET(mods_omitted ${mods_omitted} ${mod_name}) ELSE() # Handle whether or not the LoadModule is commented out. IF(${enable_mod_val} STREQUAL "A") SET(LoadModules "${LoadModules}LoadModule ${mod_module_name} modules/${mod_name}.so\n") SET(mods_built_and_loaded ${mods_built_and_loaded} ${mod_name}) ELSEIF(${enable_mod_val} STREQUAL "I") SET(LoadModules "${LoadModules}# LoadModule ${mod_module_name} modules/${mod_name}.so\n") SET(mods_built_but_not_loaded ${mods_built_but_not_loaded} ${mod_name}) ELSE() MESSAGE(FATAL_ERROR "${enable_mod} must be set to \"A\", \"I\", or \"O\" instead of \"${enable_mod_val}\"") ENDIF() # Handle building it. SET(mod_main_source "${mod_name}_main_source") SET(mod_extra_sources "${mod_name}_extra_sources") IF("${${mod_main_source}}" STREQUAL "") SET(tmp_mod_main_source "${mod}.c") ELSE() SET(tmp_mod_main_source ${${mod_main_source}}) ENDIF() SET(all_mod_sources ${tmp_mod_main_source} ${${mod_extra_sources}}) ADD_LIBRARY(${mod_name} SHARED ${all_mod_sources} build/win32/httpd.rc) SET(install_modules ${install_modules} ${mod_name}) SET(install_modules_pdb ${install_modules_pdb} "$") IF("${${mod_name}_install_lib}") SET(installed_mod_libs_exps ${installed_mod_libs_exps} "$" "$/${mod_name}.exp" ) ENDIF() SET(mod_extra_libs "${mod_name}_extra_libs") SET_TARGET_PROPERTIES(${mod_name} PROPERTIES SUFFIX .so LINK_FLAGS /base:@${PROJECT_BINARY_DIR}/BaseAddr.ref,${mod_name}.so ) TARGET_LINK_LIBRARIES(${mod_name} ${${mod_extra_libs}} libhttpd ${EXTRA_LIBS} ${APR_LIBRARIES} ${HTTPD_SYSTEM_LIBS}) DEFINE_WITH_BLANKS(define_long_name "LONG_NAME" "${mod_name} for Apache HTTP Server") SET_TARGET_PROPERTIES(${mod_name} PROPERTIES COMPILE_FLAGS "${define_long_name} -DBIN_NAME=${mod_name}.so ${EXTRA_COMPILE_FLAGS}") # Extra defines? SET(mod_extra_defines "${mod_name}_extra_defines") IF(NOT ${${mod_extra_defines}} STREQUAL "") SET_TARGET_PROPERTIES(${mod_name} PROPERTIES COMPILE_DEFINITIONS ${${mod_extra_defines}}) ENDIF() # Extra includes? SET(mod_extra_includes "${mod_name}_extra_includes") IF(NOT "${${mod_extra_includes}}" STREQUAL "") SET(tmp_includes ${HTTPD_INCLUDE_DIRECTORIES} ${${mod_extra_includes}}) SET_TARGET_PROPERTIES(${mod_name} PROPERTIES INCLUDE_DIRECTORIES "${tmp_includes}") GET_PROPERTY(tmp_includes TARGET ${mod_name} PROPERTY INCLUDE_DIRECTORIES) ENDIF() ENDIF() ENDFOREACH() ########### HTTPD LIBRARIES ############ ADD_LIBRARY(libhttpd SHARED ${LIBHTTPD_SOURCES} build/win32/httpd.rc) SET_TARGET_PROPERTIES(libhttpd PROPERTIES LINK_FLAGS /base:@${PROJECT_BINARY_DIR}/BaseAddr.ref,libhttpd.dll ) SET(install_targets ${install_targets} libhttpd) SET(install_bin_pdb ${install_bin_pdb} $) TARGET_LINK_LIBRARIES(libhttpd ${EXTRA_LIBS} ${APR_LIBRARIES} ${PCRE_LIBRARIES} ${HTTPD_SYSTEM_LIBS}) DEFINE_WITH_BLANKS(define_long_name "LONG_NAME" "Apache HTTP Server Core") SET_TARGET_PROPERTIES(libhttpd PROPERTIES COMPILE_FLAGS "-DAP_DECLARE_EXPORT ${define_long_name} -DBIN_NAME=libhttpd.dll ${EXTRA_COMPILE_FLAGS}") ADD_DEPENDENCIES(libhttpd test_char_header) ########### HTTPD EXECUTABLES ########## ADD_EXECUTABLE(httpd server/main.c build/win32/httpd.rc) SET(install_targets ${install_targets} httpd) SET(install_bin_pdb ${install_bin_pdb} $) DEFINE_WITH_BLANKS(define_long_name "LONG_NAME" "Apache HTTP Server") SET_TARGET_PROPERTIES(httpd PROPERTIES COMPILE_FLAGS "-DAPP_FILE ${define_long_name} -DBIN_NAME=httpd.exe -DICON_FILE=${CMAKE_SOURCE_DIR}/build/win32/apache.ico ${EXTRA_COMPILE_FLAGS}") TARGET_LINK_LIBRARIES(httpd libhttpd ${EXTRA_LIBS}) SET(standard_support ab htcacheclean htdbm htdigest htpasswd httxt2dbm logresolve rotatelogs ) SET(htdbm_extra_sources support/passwd_common.c) SET(htpasswd_extra_sources support/passwd_common.c) FOREACH(pgm ${standard_support}) SET(extra_sources ${pgm}_extra_sources) ADD_EXECUTABLE(${pgm} support/${pgm}.c ${${extra_sources}} build/win32/httpd.rc) SET(install_targets ${install_targets} ${pgm}) SET(install_bin_pdb ${install_bin_pdb} $) DEFINE_WITH_BLANKS(define_long_name "LONG_NAME" "Apache HTTP Server ${pgm} program") SET_TARGET_PROPERTIES(${pgm} PROPERTIES COMPILE_FLAGS "-DAPP_FILE ${define_long_name} -DBIN_NAME=${pgm}.exe ${EXTRA_COMPILE_FLAGS}") TARGET_LINK_LIBRARIES(${pgm} ${EXTRA_LIBS} ${APR_LIBRARIES}) ENDFOREACH() IF(OPENSSL_FOUND) ADD_EXECUTABLE(abs support/ab.c build/win32/httpd.rc) SET(install_targets ${install_targets} abs) SET(install_bin_pdb ${install_bin_pdb} $) SET_TARGET_PROPERTIES(abs PROPERTIES COMPILE_DEFINITIONS HAVE_OPENSSL) SET(tmp_includes ${HTTPD_INCLUDE_DIRECTORIES} ${OPENSSL_INCLUDE_DIR}) SET_TARGET_PROPERTIES(abs PROPERTIES INCLUDE_DIRECTORIES "${tmp_includes}") DEFINE_WITH_BLANKS(define_long_name "LONG_NAME" "Apache HTTP Server ab/SSL program") SET_TARGET_PROPERTIES(abs PROPERTIES COMPILE_FLAGS "-DAPP_FILE ${define_long_name} -DBIN_NAME=abs.exe ${EXTRA_COMPILE_FLAGS}") TARGET_LINK_LIBRARIES(abs ${EXTRA_LIBS} ${APR_LIBRARIES} ${OPENSSL_LIBRARIES}) ENDIF() GET_PROPERTY(tmp_includes TARGET ab PROPERTY INCLUDE_DIRECTORIES) # getting duplicate manifest error with ApacheMonitor # ADD_EXECUTABLE(ApacheMonitor support/win32/ApacheMonitor.c support/win32/ApacheMonitor.rc) # SET(install_targets ${install_targets} ApacheMonitor) # SET(install_bin_pdb ${install_bin_pdb} $) # SET_TARGET_PROPERTIES(ApacheMonitor PROPERTIES WIN32_EXECUTABLE TRUE) # SET_TARGET_PROPERTIES(ApacheMonitor PROPERTIES COMPILE_FLAGS "-DAPP_FILE -DLONG_NAME=ApacheMonitor -DBIN_NAME=ApacheMonitor.exe ${EXTRA_COMPILE_FLAGS}") # TARGET_LINK_LIBRARIES(ApacheMonitor ${EXTRA_LIBS} ${HTTPD_SYSTEM_LIBS} comctl32 wtsapi32) ########### CONFIGURATION FILES ########### # Set up variables used in the .conf file templates SET(LoadModule "${LoadModules}") SET(Port "80" CACHE STRING "http port to listen on") SET(SSLPort "443" CACHE STRING "https port to listen on") SET(ServerRoot "${CMAKE_INSTALL_PREFIX}") SET(exp_cgidir "${CMAKE_INSTALL_PREFIX}/cgi-bin") SET(exp_htdocsdir "${CMAKE_INSTALL_PREFIX}/htdocs") SET(exp_iconsdir "${CMAKE_INSTALL_PREFIX}/icons") SET(exp_errordir "${CMAKE_INSTALL_PREFIX}/error") SET(exp_manualdir "${CMAKE_INSTALL_PREFIX}/manual") SET(rel_logfiledir "logs") SET(rel_runtimedir "logs") SET(rel_sysconfdir "conf") FILE(GLOB_RECURSE conffiles RELATIVE ${CMAKE_SOURCE_DIR}/docs/conf "docs/conf/*") FOREACH(template ${conffiles}) STRING(REPLACE ".conf.in" ".conf" conf ${template}) FILE(READ "docs/conf/${template}" template_text) IF(template MATCHES ".conf.in$") # substitute @var@/@@var@@ in .conf.in STRING(REPLACE "@@" "@" template_text ${template_text}) STRING(CONFIGURE "${template_text}" template_text @ONLY) ENDIF() FILE(WRITE ${CMAKE_BINARY_DIR}/conf/original/${conf} "${template_text}") FILE(WRITE ${CMAKE_BINARY_DIR}/conf/${conf} "${template_text}") ENDFOREACH() ########### INSTALLATION ########### INSTALL(TARGETS ${install_targets} RUNTIME DESTINATION bin LIBRARY DESTINATION lib ARCHIVE DESTINATION lib ) INSTALL(TARGETS ${install_modules} RUNTIME DESTINATION modules ) IF(INSTALL_PDB) INSTALL(FILES ${install_bin_pdb} DESTINATION bin CONFIGURATIONS RelWithDebInfo Debug) INSTALL(FILES ${install_modules_pdb} DESTINATION modules CONFIGURATIONS RelWithDebInfo Debug) ENDIF() INSTALL(DIRECTORY include/ DESTINATION include FILES_MATCHING PATTERN "*.h" ) INSTALL(FILES ${other_installed_h} DESTINATION include) INSTALL(FILES ${installed_mod_libs_exps} DESTINATION lib) INSTALL(FILES "$/libhttpd.exp" DESTINATION LIB) IF(INSTALL_MANUAL) # Silly? This takes a while, and a dev doesn't need it. INSTALL(DIRECTORY docs/manual/ DESTINATION manual) ENDIF() INSTALL(DIRECTORY DESTINATION logs) INSTALL(DIRECTORY DESTINATION cgi-bin) INSTALL(CODE "EXECUTE_PROCESS(COMMAND perl \"${CMAKE_CURRENT_SOURCE_DIR}/build/cpR_noreplace.pl\" \"${CMAKE_CURRENT_SOURCE_DIR}/docs/error\" \"${CMAKE_INSTALL_PREFIX}/error\" ifdestmissing)") INSTALL(CODE "EXECUTE_PROCESS(COMMAND perl \"${CMAKE_CURRENT_SOURCE_DIR}/build/cpR_noreplace.pl\" \"${CMAKE_CURRENT_SOURCE_DIR}/docs/docroot\" \"${CMAKE_INSTALL_PREFIX}/htdocs\" ifdestmissing)") INSTALL(CODE "EXECUTE_PROCESS(COMMAND perl \"${CMAKE_CURRENT_SOURCE_DIR}/build/cpR_noreplace.pl\" \"${CMAKE_CURRENT_SOURCE_DIR}/docs/icons\" \"${CMAKE_INSTALL_PREFIX}/icons\" ifdestmissing)") # Copy generated .conf files from the build directory to the install, # without overwriting stuff already there. INSTALL(CODE "EXECUTE_PROCESS(COMMAND perl \"${CMAKE_CURRENT_SOURCE_DIR}/build/cpR_noreplace.pl\" \"${CMAKE_BINARY_DIR}/conf\" \"${CMAKE_INSTALL_PREFIX}/conf\")") # But conf/original is supposed to be overwritten. # Note: FILE(TO_NATIVE_PATH ...) leaves the backslashes unescaped, which # generates warnings. Just do it manually since this build only supports # Windows anyway. STRING(REPLACE "/" "\\\\" native_src ${CMAKE_BINARY_DIR}/conf/original) STRING(REPLACE "/" "\\\\" native_dest ${CMAKE_INSTALL_PREFIX}/conf/original) INSTALL(CODE "EXECUTE_PROCESS(COMMAND xcopy \"${native_src}\" \"${native_dest}\" /Q /S /Y)") STRING(TOUPPER "${CMAKE_BUILD_TYPE}" buildtype) MESSAGE(STATUS "") MESSAGE(STATUS "") MESSAGE(STATUS "Apache httpd configuration summary:") MESSAGE(STATUS "") MESSAGE(STATUS " Build type ...................... : ${CMAKE_BUILD_TYPE}") MESSAGE(STATUS " Install .pdb (if available)...... : ${INSTALL_PDB}") MESSAGE(STATUS " Install manual .................. : ${INSTALL_MANUAL}") MESSAGE(STATUS " Install prefix .................. : ${CMAKE_INSTALL_PREFIX}") MESSAGE(STATUS " C compiler ...................... : ${CMAKE_C_COMPILER}") MESSAGE(STATUS " APR include directory ........... : ${APR_INCLUDE_DIR}") MESSAGE(STATUS " APR libraries ................... : ${APR_LIBRARIES}") MESSAGE(STATUS " OpenSSL include directory ....... : ${OPENSSL_INCLUDE_DIR}") MESSAGE(STATUS " OpenSSL libraries ............... : ${OPENSSL_LIBRARIES}") MESSAGE(STATUS " PCRE include directory .......... : ${PCRE_INCLUDE_DIR}") MESSAGE(STATUS " PCRE libraries .................. : ${PCRE_LIBRARIES}") MESSAGE(STATUS " libxml2 iconv prereq include dir. : ${LIBXML2_ICONV_INCLUDE_DIR}") MESSAGE(STATUS " libxml2 iconv prereq libraries .. : ${LIBXML2_ICONV_LIBRARIES}") MESSAGE(STATUS " Brotli include directory......... : ${BROTLI_INCLUDE_DIR}") MESSAGE(STATUS " Brotli libraries ................ : ${BROTLI_LIBRARIES}") MESSAGE(STATUS " Curl include directory........... : ${CURL_INCLUDE_DIR}") MESSAGE(STATUS " Jansson libraries ............... : ${JANSSON_LIBRARIES}") MESSAGE(STATUS " Extra include directories ....... : ${EXTRA_INCLUDES}") MESSAGE(STATUS " Extra compile flags ............. : ${EXTRA_COMPILE_FLAGS}") MESSAGE(STATUS " Extra libraries ................. : ${EXTRA_LIBS}") MESSAGE(STATUS " Modules built and loaded:") FOREACH(mod ${mods_built_and_loaded}) MESSAGE(STATUS " ${mod}") ENDFOREACH() MESSAGE(STATUS " Modules built but not loaded:") FOREACH(mod ${mods_built_but_not_loaded}) MESSAGE(STATUS " ${mod}") ENDFOREACH() MESSAGE(STATUS " Modules not built:") FOREACH(mod ${mods_omitted}) MESSAGE(STATUS " ${mod}") ENDFOREACH() httpd-2.4.41/libhttpd.mak0000644000000000000500000011400113227201035013530 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on libhttpd.dsp !IF "$(CFG)" == "" CFG=libhttpd - Win32 Release !MESSAGE No configuration specified. Defaulting to libhttpd - Win32 Release. !ENDIF !IF "$(CFG)" != "libhttpd - Win32 Release" && "$(CFG)" != "libhttpd - Win32 Debug" && "$(CFG)" != "libhttpd - Win32 Lexical" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "libhttpd.mak" CFG="libhttpd - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "libhttpd - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "libhttpd - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "libhttpd - Win32 Lexical" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "libhttpd - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : ".\include\mod_dav.h" ".\include\mod_watchdog.h" "$(OUTDIR)\libhttpd.dll" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "gen_test_char - Win32 Release" "libaprutil - Win32 Release" "libapriconv - Win32 Release" "libapr - Win32 Release" ".\include\mod_dav.h" ".\include\mod_watchdog.h" "$(OUTDIR)\libhttpd.dll" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libapriconv - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "gen_test_char - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\ap_regkey.obj" -@erase "$(INTDIR)\byterange_filter.obj" -@erase "$(INTDIR)\child.obj" -@erase "$(INTDIR)\chunk_filter.obj" -@erase "$(INTDIR)\config.obj" -@erase "$(INTDIR)\connection.obj" -@erase "$(INTDIR)\core.obj" -@erase "$(INTDIR)\core_filters.obj" -@erase "$(INTDIR)\eoc_bucket.obj" -@erase "$(INTDIR)\eor_bucket.obj" -@erase "$(INTDIR)\error_bucket.obj" -@erase "$(INTDIR)\http_core.obj" -@erase "$(INTDIR)\http_etag.obj" -@erase "$(INTDIR)\http_filters.obj" -@erase "$(INTDIR)\http_protocol.obj" -@erase "$(INTDIR)\http_request.obj" -@erase "$(INTDIR)\libhttpd.res" -@erase "$(INTDIR)\libhttpd_cl.idb" -@erase "$(INTDIR)\libhttpd_cl.pdb" -@erase "$(INTDIR)\listen.obj" -@erase "$(INTDIR)\log.obj" -@erase "$(INTDIR)\mod_so.obj" -@erase "$(INTDIR)\mod_win32.obj" -@erase "$(INTDIR)\modules.obj" -@erase "$(INTDIR)\mpm_common.obj" -@erase "$(INTDIR)\mpm_winnt.obj" -@erase "$(INTDIR)\nt_eventlog.obj" -@erase "$(INTDIR)\protocol.obj" -@erase "$(INTDIR)\provider.obj" -@erase "$(INTDIR)\request.obj" -@erase "$(INTDIR)\scoreboard.obj" -@erase "$(INTDIR)\service.obj" -@erase "$(INTDIR)\util.obj" -@erase "$(INTDIR)\util_cfgtree.obj" -@erase "$(INTDIR)\util_cookies.obj" -@erase "$(INTDIR)\util_debug.obj" -@erase "$(INTDIR)\util_expr_eval.obj" -@erase "$(INTDIR)\util_expr_parse.obj" -@erase "$(INTDIR)\util_expr_scan.obj" -@erase "$(INTDIR)\util_fcgi.obj" -@erase "$(INTDIR)\util_filter.obj" -@erase "$(INTDIR)\util_md5.obj" -@erase "$(INTDIR)\util_mutex.obj" -@erase "$(INTDIR)\util_pcre.obj" -@erase "$(INTDIR)\util_regex.obj" -@erase "$(INTDIR)\util_script.obj" -@erase "$(INTDIR)\util_time.obj" -@erase "$(INTDIR)\util_win32.obj" -@erase "$(INTDIR)\util_xml.obj" -@erase "$(INTDIR)\vhost.obj" -@erase "$(OUTDIR)\libhttpd.dll" -@erase "$(OUTDIR)\libhttpd.exp" -@erase "$(OUTDIR)\libhttpd.lib" -@erase "$(OUTDIR)\libhttpd.pdb" -@erase ".\include\mod_dav.h" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /I "./srclib/pcre" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\libhttpd_cl" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\libhttpd.res" /i "./include" /i "./srclib/apr/include" /d "NDEBUG" /d BIN_NAME="libhttpd.dll" /d LONG_NAME="Apache HTTP Server Core" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\libhttpd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=pcre.lib kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib "Release\buildmark.obj" /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\libhttpd.pdb" /debug /out:"$(OUTDIR)\libhttpd.dll" /implib:"$(OUTDIR)\libhttpd.lib" /libpath:"./srclib/pcre" /base:@"os\win32\BaseAddr.ref",libhttpd.dll /opt:ref LINK32_OBJS= \ "$(INTDIR)\byterange_filter.obj" \ "$(INTDIR)\chunk_filter.obj" \ "$(INTDIR)\config.obj" \ "$(INTDIR)\connection.obj" \ "$(INTDIR)\core.obj" \ "$(INTDIR)\core_filters.obj" \ "$(INTDIR)\http_core.obj" \ "$(INTDIR)\http_etag.obj" \ "$(INTDIR)\http_filters.obj" \ "$(INTDIR)\http_protocol.obj" \ "$(INTDIR)\http_request.obj" \ "$(INTDIR)\log.obj" \ "$(INTDIR)\protocol.obj" \ "$(INTDIR)\request.obj" \ "$(INTDIR)\vhost.obj" \ "$(INTDIR)\mod_so.obj" \ "$(INTDIR)\mod_win32.obj" \ "$(INTDIR)\modules.obj" \ "$(INTDIR)\eoc_bucket.obj" \ "$(INTDIR)\eor_bucket.obj" \ "$(INTDIR)\error_bucket.obj" \ "$(INTDIR)\util.obj" \ "$(INTDIR)\util_cfgtree.obj" \ "$(INTDIR)\util_cookies.obj" \ "$(INTDIR)\util_debug.obj" \ "$(INTDIR)\util_expr_eval.obj" \ "$(INTDIR)\util_expr_scan.obj" \ "$(INTDIR)\util_expr_parse.obj" \ "$(INTDIR)\util_fcgi.obj" \ "$(INTDIR)\util_filter.obj" \ "$(INTDIR)\util_md5.obj" \ "$(INTDIR)\util_mutex.obj" \ "$(INTDIR)\util_pcre.obj" \ "$(INTDIR)\util_regex.obj" \ "$(INTDIR)\util_script.obj" \ "$(INTDIR)\util_time.obj" \ "$(INTDIR)\util_win32.obj" \ "$(INTDIR)\util_xml.obj" \ "$(INTDIR)\ap_regkey.obj" \ "$(INTDIR)\child.obj" \ "$(INTDIR)\listen.obj" \ "$(INTDIR)\mpm_common.obj" \ "$(INTDIR)\mpm_winnt.obj" \ "$(INTDIR)\nt_eventlog.obj" \ "$(INTDIR)\provider.obj" \ "$(INTDIR)\scoreboard.obj" \ "$(INTDIR)\service.obj" \ "$(INTDIR)\libhttpd.res" \ ".\srclib\apr\Release\libapr-1.lib" \ ".\srclib\apr-iconv\Release\libapriconv-1.lib" \ ".\srclib\apr-util\Release\libaprutil-1.lib" "$(OUTDIR)\libhttpd.dll" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) cl.exe /nologo /MD /W3 /O2 /Oy- /Zi /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /I "./srclib/pcre" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /Fd"Release\libhttpd" /FD /c server\buildmark.c /Fo"Release\buildmark.obj" $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\libhttpd.dll SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\libhttpd.dll" if exist .\Release\libhttpd.dll.manifest mt.exe -manifest .\Release\libhttpd.dll.manifest -outputresource:.\Release\libhttpd.dll;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : ".\server\test_char.h" ".\include\mod_watchdog.h" ".\include\mod_so.h" ".\include\mod_proxy.h" ".\include\mod_include.h" ".\include\mod_dav.h" ".\include\mod_cgi.h" ".\include\ap_config_layout.h" "$(OUTDIR)\libhttpd.dll" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "gen_test_char - Win32 Debug" "libaprutil - Win32 Debug" "libapriconv - Win32 Debug" "libapr - Win32 Debug" ".\server\test_char.h" ".\include\mod_watchdog.h" ".\include\mod_so.h" ".\include\mod_proxy.h" ".\include\mod_include.h" ".\include\mod_dav.h" ".\include\mod_cgi.h" ".\include\ap_config_layout.h" "$(OUTDIR)\libhttpd.dll" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libapriconv - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "gen_test_char - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\ap_regkey.obj" -@erase "$(INTDIR)\byterange_filter.obj" -@erase "$(INTDIR)\child.obj" -@erase "$(INTDIR)\chunk_filter.obj" -@erase "$(INTDIR)\config.obj" -@erase "$(INTDIR)\connection.obj" -@erase "$(INTDIR)\core.obj" -@erase "$(INTDIR)\core_filters.obj" -@erase "$(INTDIR)\eoc_bucket.obj" -@erase "$(INTDIR)\eor_bucket.obj" -@erase "$(INTDIR)\error_bucket.obj" -@erase "$(INTDIR)\http_core.obj" -@erase "$(INTDIR)\http_etag.obj" -@erase "$(INTDIR)\http_filters.obj" -@erase "$(INTDIR)\http_protocol.obj" -@erase "$(INTDIR)\http_request.obj" -@erase "$(INTDIR)\libhttpd.res" -@erase "$(INTDIR)\libhttpd_cl.idb" -@erase "$(INTDIR)\libhttpd_cl.pdb" -@erase "$(INTDIR)\listen.obj" -@erase "$(INTDIR)\log.obj" -@erase "$(INTDIR)\mod_so.obj" -@erase "$(INTDIR)\mod_win32.obj" -@erase "$(INTDIR)\modules.obj" -@erase "$(INTDIR)\mpm_common.obj" -@erase "$(INTDIR)\mpm_winnt.obj" -@erase "$(INTDIR)\nt_eventlog.obj" -@erase "$(INTDIR)\protocol.obj" -@erase "$(INTDIR)\provider.obj" -@erase "$(INTDIR)\request.obj" -@erase "$(INTDIR)\scoreboard.obj" -@erase "$(INTDIR)\service.obj" -@erase "$(INTDIR)\util.obj" -@erase "$(INTDIR)\util_cfgtree.obj" -@erase "$(INTDIR)\util_cookies.obj" -@erase "$(INTDIR)\util_debug.obj" -@erase "$(INTDIR)\util_expr_eval.obj" -@erase "$(INTDIR)\util_expr_parse.obj" -@erase "$(INTDIR)\util_expr_scan.obj" -@erase "$(INTDIR)\util_fcgi.obj" -@erase "$(INTDIR)\util_filter.obj" -@erase "$(INTDIR)\util_md5.obj" -@erase "$(INTDIR)\util_mutex.obj" -@erase "$(INTDIR)\util_pcre.obj" -@erase "$(INTDIR)\util_regex.obj" -@erase "$(INTDIR)\util_script.obj" -@erase "$(INTDIR)\util_time.obj" -@erase "$(INTDIR)\util_win32.obj" -@erase "$(INTDIR)\util_xml.obj" -@erase "$(INTDIR)\vhost.obj" -@erase "$(OUTDIR)\libhttpd.dll" -@erase "$(OUTDIR)\libhttpd.exp" -@erase "$(OUTDIR)\libhttpd.lib" -@erase "$(OUTDIR)\libhttpd.pdb" -@erase ".\include\ap_config_layout.h" -@erase ".\include\mod_cgi.h" -@erase ".\include\mod_dav.h" -@erase ".\include\mod_include.h" -@erase ".\include\mod_proxy.h" -@erase ".\include\mod_so.h" -@erase ".\include\mod_watchdog.h" -@erase ".\server\test_char.h" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /I "./srclib/pcre" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\libhttpd_cl" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\libhttpd.res" /i "./include" /i "./srclib/apr/include" /d "_DEBUG" /d BIN_NAME="libhttpd.dll" /d LONG_NAME="Apache HTTP Server Core" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\libhttpd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=pcred.lib kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib "Debug\buildmark.obj" /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\libhttpd.pdb" /debug /out:"$(OUTDIR)\libhttpd.dll" /implib:"$(OUTDIR)\libhttpd.lib" /libpath:"./srclib/pcre" /base:@"os\win32\BaseAddr.ref",libhttpd.dll LINK32_OBJS= \ "$(INTDIR)\byterange_filter.obj" \ "$(INTDIR)\chunk_filter.obj" \ "$(INTDIR)\config.obj" \ "$(INTDIR)\connection.obj" \ "$(INTDIR)\core.obj" \ "$(INTDIR)\core_filters.obj" \ "$(INTDIR)\http_core.obj" \ "$(INTDIR)\http_etag.obj" \ "$(INTDIR)\http_filters.obj" \ "$(INTDIR)\http_protocol.obj" \ "$(INTDIR)\http_request.obj" \ "$(INTDIR)\log.obj" \ "$(INTDIR)\protocol.obj" \ "$(INTDIR)\request.obj" \ "$(INTDIR)\vhost.obj" \ "$(INTDIR)\mod_so.obj" \ "$(INTDIR)\mod_win32.obj" \ "$(INTDIR)\modules.obj" \ "$(INTDIR)\eoc_bucket.obj" \ "$(INTDIR)\eor_bucket.obj" \ "$(INTDIR)\error_bucket.obj" \ "$(INTDIR)\util.obj" \ "$(INTDIR)\util_cfgtree.obj" \ "$(INTDIR)\util_cookies.obj" \ "$(INTDIR)\util_debug.obj" \ "$(INTDIR)\util_expr_eval.obj" \ "$(INTDIR)\util_expr_scan.obj" \ "$(INTDIR)\util_expr_parse.obj" \ "$(INTDIR)\util_fcgi.obj" \ "$(INTDIR)\util_filter.obj" \ "$(INTDIR)\util_md5.obj" \ "$(INTDIR)\util_mutex.obj" \ "$(INTDIR)\util_pcre.obj" \ "$(INTDIR)\util_regex.obj" \ "$(INTDIR)\util_script.obj" \ "$(INTDIR)\util_time.obj" \ "$(INTDIR)\util_win32.obj" \ "$(INTDIR)\util_xml.obj" \ "$(INTDIR)\ap_regkey.obj" \ "$(INTDIR)\child.obj" \ "$(INTDIR)\listen.obj" \ "$(INTDIR)\mpm_common.obj" \ "$(INTDIR)\mpm_winnt.obj" \ "$(INTDIR)\nt_eventlog.obj" \ "$(INTDIR)\provider.obj" \ "$(INTDIR)\scoreboard.obj" \ "$(INTDIR)\service.obj" \ "$(INTDIR)\libhttpd.res" \ ".\srclib\apr\Debug\libapr-1.lib" \ ".\srclib\apr-iconv\Debug\libapriconv-1.lib" \ ".\srclib\apr-util\Debug\libaprutil-1.lib" "$(OUTDIR)\libhttpd.dll" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) cl.exe /nologo /MDd /W3 /EHsc /Zi /Od /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /I "./srclib/pcre" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /Fd"Debug\libhttpd" /FD /c server\buildmark.c /Fo"Debug\buildmark.obj" $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\libhttpd.dll SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\libhttpd.dll" if exist .\Debug\libhttpd.dll.manifest mt.exe -manifest .\Debug\libhttpd.dll.manifest -outputresource:.\Debug\libhttpd.dll;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : ".\server\util_expr_parse.h" ".\server\util_expr_parse.c" ".\server\test_char.h" "$(OUTDIR)\libhttpd.dll" "$(DS_POSTBUILD_DEP)" !ELSE ALL : ".\server\util_expr_parse.h" ".\server\util_expr_parse.c" ".\server\test_char.h" "$(OUTDIR)\libhttpd.dll" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN : !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\ap_regkey.obj" -@erase "$(INTDIR)\byterange_filter.obj" -@erase "$(INTDIR)\child.obj" -@erase "$(INTDIR)\chunk_filter.obj" -@erase "$(INTDIR)\config.obj" -@erase "$(INTDIR)\connection.obj" -@erase "$(INTDIR)\core.obj" -@erase "$(INTDIR)\core_filters.obj" -@erase "$(INTDIR)\eoc_bucket.obj" -@erase "$(INTDIR)\eor_bucket.obj" -@erase "$(INTDIR)\error_bucket.obj" -@erase "$(INTDIR)\http_core.obj" -@erase "$(INTDIR)\http_etag.obj" -@erase "$(INTDIR)\http_filters.obj" -@erase "$(INTDIR)\http_protocol.obj" -@erase "$(INTDIR)\http_request.obj" -@erase "$(INTDIR)\libhttpd.res" -@erase "$(INTDIR)\libhttpd_cl.idb" -@erase "$(INTDIR)\libhttpd_cl.pdb" -@erase "$(INTDIR)\listen.obj" -@erase "$(INTDIR)\log.obj" -@erase "$(INTDIR)\mod_so.obj" -@erase "$(INTDIR)\mod_win32.obj" -@erase "$(INTDIR)\modules.obj" -@erase "$(INTDIR)\mpm_common.obj" -@erase "$(INTDIR)\mpm_winnt.obj" -@erase "$(INTDIR)\nt_eventlog.obj" -@erase "$(INTDIR)\protocol.obj" -@erase "$(INTDIR)\provider.obj" -@erase "$(INTDIR)\request.obj" -@erase "$(INTDIR)\scoreboard.obj" -@erase "$(INTDIR)\service.obj" -@erase "$(INTDIR)\util.obj" -@erase "$(INTDIR)\util_cfgtree.obj" -@erase "$(INTDIR)\util_cookies.obj" -@erase "$(INTDIR)\util_debug.obj" -@erase "$(INTDIR)\util_expr_eval.obj" -@erase "$(INTDIR)\util_expr_parse.obj" -@erase "$(INTDIR)\util_expr_scan.obj" -@erase "$(INTDIR)\util_fcgi.obj" -@erase "$(INTDIR)\util_filter.obj" -@erase "$(INTDIR)\util_md5.obj" -@erase "$(INTDIR)\util_mutex.obj" -@erase "$(INTDIR)\util_pcre.obj" -@erase "$(INTDIR)\util_regex.obj" -@erase "$(INTDIR)\util_script.obj" -@erase "$(INTDIR)\util_time.obj" -@erase "$(INTDIR)\util_win32.obj" -@erase "$(INTDIR)\util_xml.obj" -@erase "$(INTDIR)\vhost.obj" -@erase "$(OUTDIR)\libhttpd.dll" -@erase "$(OUTDIR)\libhttpd.exp" -@erase "$(OUTDIR)\libhttpd.lib" -@erase "$(OUTDIR)\libhttpd.pdb" -@erase ".\server\test_char.h" -@erase ".\server\util_expr_parse.c" -@erase ".\server\util_expr_parse.h" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /I "./srclib/pcre" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\libhttpd_cl" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\libhttpd.res" /i "./include" /i "./srclib/apr/include" /d "NDEBUG" /d BIN_NAME="libhttpd.dll" /d LONG_NAME="Apache HTTP Server Core" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\libhttpd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=pcre.lib kernel32.lib user32.lib advapi32.lib ws2_32.lib mswsock.lib "Release\buildmark.obj" /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\libhttpd.pdb" /debug /out:"$(OUTDIR)\libhttpd.dll" /implib:"$(OUTDIR)\libhttpd.lib" /libpath:"./srclib/pcre" /base:@"os\win32\BaseAddr.ref",libhttpd.dll /opt:ref LINK32_OBJS= \ "$(INTDIR)\byterange_filter.obj" \ "$(INTDIR)\chunk_filter.obj" \ "$(INTDIR)\config.obj" \ "$(INTDIR)\connection.obj" \ "$(INTDIR)\core.obj" \ "$(INTDIR)\core_filters.obj" \ "$(INTDIR)\http_core.obj" \ "$(INTDIR)\http_etag.obj" \ "$(INTDIR)\http_filters.obj" \ "$(INTDIR)\http_protocol.obj" \ "$(INTDIR)\http_request.obj" \ "$(INTDIR)\log.obj" \ "$(INTDIR)\protocol.obj" \ "$(INTDIR)\request.obj" \ "$(INTDIR)\vhost.obj" \ "$(INTDIR)\mod_so.obj" \ "$(INTDIR)\mod_win32.obj" \ "$(INTDIR)\modules.obj" \ "$(INTDIR)\eoc_bucket.obj" \ "$(INTDIR)\eor_bucket.obj" \ "$(INTDIR)\error_bucket.obj" \ "$(INTDIR)\util.obj" \ "$(INTDIR)\util_cfgtree.obj" \ "$(INTDIR)\util_cookies.obj" \ "$(INTDIR)\util_debug.obj" \ "$(INTDIR)\util_expr_eval.obj" \ "$(INTDIR)\util_expr_scan.obj" \ "$(INTDIR)\util_expr_parse.obj" \ "$(INTDIR)\util_fcgi.obj" \ "$(INTDIR)\util_filter.obj" \ "$(INTDIR)\util_md5.obj" \ "$(INTDIR)\util_mutex.obj" \ "$(INTDIR)\util_pcre.obj" \ "$(INTDIR)\util_regex.obj" \ "$(INTDIR)\util_script.obj" \ "$(INTDIR)\util_time.obj" \ "$(INTDIR)\util_win32.obj" \ "$(INTDIR)\util_xml.obj" \ "$(INTDIR)\ap_regkey.obj" \ "$(INTDIR)\child.obj" \ "$(INTDIR)\listen.obj" \ "$(INTDIR)\mpm_common.obj" \ "$(INTDIR)\mpm_winnt.obj" \ "$(INTDIR)\nt_eventlog.obj" \ "$(INTDIR)\provider.obj" \ "$(INTDIR)\scoreboard.obj" \ "$(INTDIR)\service.obj" \ "$(INTDIR)\libhttpd.res" "$(OUTDIR)\libhttpd.dll" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) cl.exe /nologo /MD /W3 /O2 /Oy- /Zi /I "./include" /I "./srclib/apr/include" /I "./srclib/apr-util/include" /I "./srclib/pcre" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_DECLARE_EXPORT" /Fd"Release\libhttpd" /FD /c server\buildmark.c /Fo"Release\buildmark.obj" $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\libhttpd.dll SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\libhttpd.dll" if exist .\Release\libhttpd.dll.manifest mt.exe -manifest .\Release\libhttpd.dll.manifest -outputresource:.\Release\libhttpd.dll;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("libhttpd.dep") !INCLUDE "libhttpd.dep" !ELSE !MESSAGE Warning: cannot find "libhttpd.dep" !ENDIF !ENDIF !IF "$(CFG)" == "libhttpd - Win32 Release" || "$(CFG)" == "libhttpd - Win32 Debug" || "$(CFG)" == "libhttpd - Win32 Lexical" SOURCE=.\modules\generators\mod_cgi.h !IF "$(CFG)" == "libhttpd - Win32 Release" InputPath=.\modules\generators\mod_cgi.h ".\include\mod_cgi.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\mod_cgi.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" InputPath=.\modules\generators\mod_cgi.h ".\include\mod_cgi.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\mod_cgi.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF SOURCE=.\modules\dav\main\mod_dav.h !IF "$(CFG)" == "libhttpd - Win32 Release" InputPath=.\modules\dav\main\mod_dav.h ".\include\mod_dav.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\mod_dav.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" InputPath=.\modules\dav\main\mod_dav.h ".\include\mod_dav.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\mod_dav.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF SOURCE=.\modules\filters\mod_include.h !IF "$(CFG)" == "libhttpd - Win32 Release" InputPath=.\modules\filters\mod_include.h ".\include\mod_include.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\mod_include.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" InputPath=.\modules\filters\mod_include.h ".\include\mod_include.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\mod_include.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF SOURCE=.\modules\proxy\mod_proxy.h !IF "$(CFG)" == "libhttpd - Win32 Release" InputPath=.\modules\proxy\mod_proxy.h ".\include\mod_proxy.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\mod_proxy.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" InputPath=.\modules\proxy\mod_proxy.h ".\include\mod_proxy.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\mod_proxy.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF SOURCE=.\modules\core\mod_so.h !IF "$(CFG)" == "libhttpd - Win32 Release" InputPath=.\modules\core\mod_so.h ".\include\mod_so.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\mod_so.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" InputPath=.\modules\core\mod_so.h ".\include\mod_so.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\mod_so.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF SOURCE=.\modules\core\mod_watchdog.h !IF "$(CFG)" == "libhttpd - Win32 Release" InputPath=.\modules\core\mod_watchdog.h ".\include\mod_watchdog.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\mod_watchdog.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" InputPath=.\modules\core\mod_watchdog.h ".\include\mod_watchdog.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\mod_watchdog.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF SOURCE=.\os\win32\os.h !IF "$(CFG)" == "libhttpd - Win32 Release" InputPath=.\os\win32\os.h ".\include\os.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\os.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" InputPath=.\os\win32\os.h ".\include\os.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\os.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF SOURCE=.\os\win32\win32_config_layout.h !IF "$(CFG)" == "libhttpd - Win32 Release" InputPath=.\os\win32\win32_config_layout.h ".\include\ap_config_layout.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\ap_config_layout.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" InputPath=.\os\win32\win32_config_layout.h ".\include\ap_config_layout.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" < .\include\ap_config_layout.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" !ENDIF SOURCE=.\server\buildmark.c SOURCE=.\modules\http\byterange_filter.c "$(INTDIR)\byterange_filter.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\modules\http\chunk_filter.c "$(INTDIR)\chunk_filter.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\config.c "$(INTDIR)\config.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\connection.c "$(INTDIR)\connection.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\core.c "$(INTDIR)\core.obj" : $(SOURCE) "$(INTDIR)" ".\include\mod_proxy.h" ".\include\mod_so.h" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\core_filters.c "$(INTDIR)\core_filters.obj" : $(SOURCE) "$(INTDIR)" ".\include\mod_so.h" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\modules\http\http_core.c "$(INTDIR)\http_core.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\modules\http\http_etag.c "$(INTDIR)\http_etag.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\modules\http\http_filters.c "$(INTDIR)\http_filters.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\modules\http\http_protocol.c "$(INTDIR)\http_protocol.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\modules\http\http_request.c "$(INTDIR)\http_request.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\log.c "$(INTDIR)\log.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\protocol.c "$(INTDIR)\protocol.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\request.c "$(INTDIR)\request.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\vhost.c "$(INTDIR)\vhost.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\modules\core\mod_so.c "$(INTDIR)\mod_so.obj" : $(SOURCE) "$(INTDIR)" ".\modules\core\mod_so.h" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\modules\arch\win32\mod_win32.c "$(INTDIR)\mod_win32.obj" : $(SOURCE) "$(INTDIR)" ".\include\mod_cgi.h" ".\include\os.h" ".\include\ap_config_layout.h" ".\include\mod_include.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\os\win32\modules.c "$(INTDIR)\modules.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\eoc_bucket.c "$(INTDIR)\eoc_bucket.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\eor_bucket.c "$(INTDIR)\eor_bucket.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\error_bucket.c "$(INTDIR)\error_bucket.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util.c "$(INTDIR)\util.obj" : $(SOURCE) "$(INTDIR)" ".\server\test_char.h" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_cfgtree.c "$(INTDIR)\util_cfgtree.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_cookies.c "$(INTDIR)\util_cookies.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_debug.c "$(INTDIR)\util_debug.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_expr_eval.c "$(INTDIR)\util_expr_eval.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_expr_parse.c "$(INTDIR)\util_expr_parse.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_expr_scan.c "$(INTDIR)\util_expr_scan.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_fcgi.c "$(INTDIR)\util_fcgi.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_filter.c "$(INTDIR)\util_filter.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_md5.c "$(INTDIR)\util_md5.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_mutex.c "$(INTDIR)\util_mutex.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_pcre.c "$(INTDIR)\util_pcre.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_regex.c "$(INTDIR)\util_regex.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_script.c "$(INTDIR)\util_script.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_time.c "$(INTDIR)\util_time.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\os\win32\util_win32.c "$(INTDIR)\util_win32.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_xml.c "$(INTDIR)\util_xml.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\os\win32\ap_regkey.c "$(INTDIR)\ap_regkey.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\mpm\winnt\child.c "$(INTDIR)\child.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\listen.c "$(INTDIR)\listen.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\mpm_common.c "$(INTDIR)\mpm_common.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\mpm\winnt\mpm_winnt.c "$(INTDIR)\mpm_winnt.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\mpm\winnt\nt_eventlog.c "$(INTDIR)\nt_eventlog.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\provider.c "$(INTDIR)\provider.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\scoreboard.c "$(INTDIR)\scoreboard.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\mpm\winnt\service.c "$(INTDIR)\service.obj" : $(SOURCE) "$(INTDIR)" ".\include\os.h" ".\include\ap_config_layout.h" $(CPP) $(CPP_PROJ) $(SOURCE) SOURCE=.\server\util_expr_parse.y !IF "$(CFG)" == "libhttpd - Win32 Release" !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" InputPath=.\server\util_expr_parse.y ".\server\util_expr_parse.c" ".\server\util_expr_parse.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" <.\server\test_char.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" InputPath=.\server\gen_test_char.exe USERDEP__GEN_T=".\include\os.h" ".\server\test_char.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" $(USERDEP__GEN_T) <.\server\test_char.h << !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" InputPath=.\server\gen_test_char.exe USERDEP__GEN_T=".\include\os.h" ".\server\test_char.h" : $(SOURCE) "$(INTDIR)" "$(OUTDIR)" $(USERDEP__GEN_T) <.\server\test_char.h << !ENDIF SOURCE=.\build\win32\httpd.rc !IF "$(CFG)" == "libhttpd - Win32 Release" "$(INTDIR)\libhttpd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\libhttpd.res" /i "./include" /i "./srclib/apr/include" /i "build\win32" /d "NDEBUG" /d BIN_NAME="libhttpd.dll" /d LONG_NAME="Apache HTTP Server Core" $(SOURCE) !ELSEIF "$(CFG)" == "libhttpd - Win32 Debug" "$(INTDIR)\libhttpd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\libhttpd.res" /i "./include" /i "./srclib/apr/include" /i "build\win32" /d "_DEBUG" /d BIN_NAME="libhttpd.dll" /d LONG_NAME="Apache HTTP Server Core" $(SOURCE) !ELSEIF "$(CFG)" == "libhttpd - Win32 Lexical" "$(INTDIR)\libhttpd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\libhttpd.res" /i "./include" /i "./srclib/apr/include" /i "build\win32" /d "NDEBUG" /d BIN_NAME="libhttpd.dll" /d LONG_NAME="Apache HTTP Server Core" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/0002755000000000000500000000000013523273343012713 5ustar rootsrchttpd-2.4.41/modules/experimental/0002755000000000000500000000000013523273342015407 5ustar rootsrchttpd-2.4.41/modules/experimental/NWGNUmakefile0000644000000000000500000001104311657403725017731 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # # If there is only one element to build it needs to be included twice # in the below target list. # Normally if there is only one element to be built within a # directory, the makefile for the single element would be called NWGNUmakefile. # But if there are multiples, the parent NWGNUmakefile must reference more # than one submakefile. Because the experimental directory might vary in the # number of submakefiles, but for the moment only contains one, we reference # it twice to allow it parent NWGNUmakefile to work properly. If another # submakefile is added, the extra reference to the first NLM should be removed. TARGET_nlm = \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/experimental/config.m40000644000000000000500000000007210723032512017102 0ustar rootsrc APACHE_MODPATH_INIT(experimental) APACHE_MODPATH_FINISH httpd-2.4.41/modules/experimental/.indent.pro0000644000000000000500000000127510150161574017467 0ustar rootsrc-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int httpd-2.4.41/modules/experimental/Makefile.in0000644000000000000500000000026710150161574017453 0ustar rootsrc# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/test/0002755000000000000500000000000013523273341013670 5ustar rootsrchttpd-2.4.41/modules/test/NWGNUopthookexport0000644000000000000500000001032411540546347017363 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = opthookexport # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) OptionalHook Export Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_optional_hook_export.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ optional_hook_export_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/test/mod_optional_hook_import.c0000644000000000000500000000261311667005541021134 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "mod_optional_hook_export.h" static int ImportOptionalHookTestHook(const char *szStr) { ap_log_error(APLOG_MARK,APLOG_ERR,OK,NULL, APLOGNO(01866)"Optional hook test said: %s", szStr); return OK; } static void ImportRegisterHooks(apr_pool_t *p) { AP_OPTIONAL_HOOK(optional_hook_test,ImportOptionalHookTestHook,NULL, NULL,APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(optional_hook_import) = { STANDARD20_MODULE_STUFF, NULL, NULL, NULL, NULL, NULL, ImportRegisterHooks }; httpd-2.4.41/modules/test/mod_optional_fn_export.h0000644000000000000500000000156710455005461020615 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_optional.h" APR_DECLARE_OPTIONAL_FN(int,TestOptionalFn,(const char *)); httpd-2.4.41/modules/test/README0000644000000000000500000000007710150161574014547 0ustar rootsrctest modules have moved to httpd-test/perl-framework/c-modules httpd-2.4.41/modules/test/NWGNUopthookimport0000644000000000000500000001032411540546347017354 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = opthookimport # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) OptionalHook Import Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_optional_hook_import.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ optional_hook_import_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/test/mod_optional_fn_import.c0000644000000000000500000000321212604740124020566 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "mod_optional_fn_export.h" #include "http_protocol.h" /* The alert will note a strange mirror-image style resemblance to * mod_optional_hook_export.c. Yes, I _did_ mean export. Think about it. */ static APR_OPTIONAL_FN_TYPE(TestOptionalFn) *pfn; static int ImportLogTransaction(request_rec *r) { if (pfn) return pfn(r->the_request); return DECLINED; } static void ImportFnRetrieve(void) { pfn = APR_RETRIEVE_OPTIONAL_FN(TestOptionalFn); } static void ImportRegisterHooks(apr_pool_t *p) { ap_hook_log_transaction(ImportLogTransaction,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_optional_fn_retrieve(ImportFnRetrieve,NULL,NULL,APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(optional_fn_import) = { STANDARD20_MODULE_STUFF, NULL, NULL, NULL, NULL, NULL, ImportRegisterHooks }; httpd-2.4.41/modules/test/mod_optional_hook_export.h0000644000000000000500000000174312215067346021154 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef MOD_OPTIONAL_HOOK_EXPORT_H #define MOD_OPTIONAL_HOOK_EXPORT_H #include "ap_config.h" AP_DECLARE_HOOK(int,optional_hook_test,(const char *)) #endif /* def MOD_OPTIONAL_HOOK_EXPORT_H */ httpd-2.4.41/modules/test/NWGNUoptfnimport0000644000000000000500000001032211540546347017015 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = optfnimport # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) OptionalFunction Import Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_optional_fn_import.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ optional_fn_import_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/test/NWGNUmakefile0000644000000000000500000001123311660227471016210 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # # If there is only one element to build it needs to be included twice # in the below target list. # Normally if there is only one element to be built within a # directory, the makefile for the single element would be called NWGNUmakefile. # But if there are multiples, the parent NWGNUmakefile must reference more # than one submakefile. Because the experimental directory might vary in the # number of submakefiles, but for the moment only contains one, we reference # it twice to allow it parent NWGNUmakefile to work properly. If another # submakefile is added, the extra reference to the first NLM should be removed. TARGET_nlm = \ $(OBJDIR)/optfnexport.nlm \ $(OBJDIR)/optfnimport.nlm \ $(OBJDIR)/opthookexport.nlm \ $(OBJDIR)/opthookimport.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/test/mod_optional_hook_export.c0000644000000000000500000000263111402752006021133 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "mod_optional_hook_export.h" #include "http_protocol.h" AP_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(int,optional_hook_test,(const char *szStr), (szStr),OK,DECLINED) static int ExportLogTransaction(request_rec *r) { return ap_run_optional_hook_test(r->the_request); } static void ExportRegisterHooks(apr_pool_t *p) { ap_hook_log_transaction(ExportLogTransaction,NULL,NULL,APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(optional_hook_export) = { STANDARD20_MODULE_STUFF, NULL, NULL, NULL, NULL, NULL, ExportRegisterHooks }; httpd-2.4.41/modules/test/config.m40000644000000000000500000000075711607365420015407 0ustar rootsrc APACHE_MODPATH_INIT(test) APACHE_MODULE(optional_hook_export, example optional hook exporter, , , no) APACHE_MODULE(optional_hook_import, example optional hook importer, , , no) APACHE_MODULE(optional_fn_import, example optional function importer, , , no) APACHE_MODULE(optional_fn_export, example optional function exporter, , , no) APACHE_MODULE(dialup, rate limits static files to dialup modem speeds, , , ) APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) APACHE_MODPATH_FINISH httpd-2.4.41/modules/test/.indent.pro0000644000000000000500000000127510150161574015751 0ustar rootsrc-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int httpd-2.4.41/modules/test/mod_dialup.c0000644000000000000500000001735112532143363016155 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_core.h" #include "util_filter.h" #include "http_log.h" #include "http_config.h" #include "http_request.h" #include "http_protocol.h" #include "ap_mpm.h" module AP_MODULE_DECLARE_DATA dialup_module; typedef struct dialup_dcfg_t { apr_size_t bytes_per_second; } dialup_dcfg_t; typedef struct dialup_baton_t { apr_size_t bytes_per_second; request_rec *r; apr_file_t *fd; apr_bucket_brigade *bb; apr_bucket_brigade *tmpbb; } dialup_baton_t; static int dialup_send_pulse(dialup_baton_t *db) { int status; apr_off_t len = 0; apr_size_t bytes_sent = 0; while (!APR_BRIGADE_EMPTY(db->bb) && bytes_sent < db->bytes_per_second) { apr_bucket *e; if (db->r->connection->aborted) { return HTTP_INTERNAL_SERVER_ERROR; } status = apr_brigade_partition(db->bb, db->bytes_per_second, &e); if (status != APR_SUCCESS && status != APR_INCOMPLETE) { /* XXXXXX: Log me. */ return HTTP_INTERNAL_SERVER_ERROR; } if (e != APR_BRIGADE_SENTINEL(db->bb)) { apr_bucket *f; apr_bucket *b = APR_BUCKET_PREV(e); f = APR_RING_FIRST(&db->bb->list); APR_RING_UNSPLICE(f, b, link); APR_RING_SPLICE_HEAD(&db->tmpbb->list, f, b, apr_bucket, link); } else { APR_BRIGADE_CONCAT(db->tmpbb, db->bb); } e = apr_bucket_flush_create(db->r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(db->tmpbb, e); apr_brigade_length(db->tmpbb, 1, &len); bytes_sent += len; status = ap_pass_brigade(db->r->output_filters, db->tmpbb); apr_brigade_cleanup(db->tmpbb); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, db->r, APLOGNO(01867) "dialup: pulse: ap_pass_brigade failed:"); return AP_FILTER_ERROR; } } if (APR_BRIGADE_EMPTY(db->bb)) { return DONE; } else { return SUSPENDED; } } static void dialup_callback(void *baton) { int status; dialup_baton_t *db = (dialup_baton_t *)baton; apr_thread_mutex_lock(db->r->invoke_mtx); status = dialup_send_pulse(db); if (status == SUSPENDED) { ap_mpm_register_timed_callback(apr_time_from_sec(1), dialup_callback, baton); } else if (status == DONE) { apr_thread_mutex_unlock(db->r->invoke_mtx); ap_finalize_request_protocol(db->r); ap_process_request_after_handler(db->r); return; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, db->r, APLOGNO(01868) "dialup: pulse returned: %d", status); db->r->status = HTTP_OK; ap_die(status, db->r); } apr_thread_mutex_unlock(db->r->invoke_mtx); } static int dialup_handler(request_rec *r) { int status; apr_status_t rv; dialup_dcfg_t *dcfg; core_dir_config *ccfg; apr_file_t *fd; dialup_baton_t *db; apr_bucket *e; /* See core.c, default handler for all of the cases we just decline. */ if (r->method_number != M_GET || r->finfo.filetype == APR_NOFILE || r->finfo.filetype == APR_DIR) { return DECLINED; } dcfg = ap_get_module_config(r->per_dir_config, &dialup_module); if (dcfg->bytes_per_second == 0) { return DECLINED; } ccfg = ap_get_core_module_config(r->per_dir_config); rv = apr_file_open(&fd, r->filename, APR_READ | APR_BINARY #if APR_HAS_SENDFILE | AP_SENDFILE_ENABLED(ccfg->enable_sendfile) #endif , 0, r->pool); if (rv) { return DECLINED; } /* copied from default handler: */ ap_update_mtime(r, r->finfo.mtime); ap_set_last_modified(r); ap_set_etag(r); ap_set_accept_ranges(r); ap_set_content_length(r, r->finfo.size); status = ap_meets_conditions(r); if (status != OK) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01869) "dialup: declined, meets conditions, good luck core handler"); return DECLINED; } db = apr_palloc(r->pool, sizeof(dialup_baton_t)); db->bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); db->tmpbb = apr_brigade_create(r->pool, r->connection->bucket_alloc); e = apr_brigade_insert_file(db->bb, fd, 0, r->finfo.size, r->pool); #if APR_HAS_MMAP if (ccfg->enable_mmap == ENABLE_MMAP_OFF) { apr_bucket_file_enable_mmap(e, 0); } #endif db->bytes_per_second = dcfg->bytes_per_second; db->r = r; db->fd = fd; e = apr_bucket_eos_create(r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(db->bb, e); status = dialup_send_pulse(db); if (status != SUSPENDED && status != DONE) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01870) "dialup: failed, send pulse"); return status; } ap_mpm_register_timed_callback(apr_time_from_sec(1), dialup_callback, db); return SUSPENDED; } #ifndef APR_HOOK_ALMOST_LAST #define APR_HOOK_ALMOST_LAST (APR_HOOK_REALLY_LAST - 1) #endif static void dialup_register_hooks(apr_pool_t *p) { ap_hook_handler(dialup_handler, NULL, NULL, APR_HOOK_ALMOST_LAST); } typedef struct modem_speed_t { const char *name; apr_size_t bytes_per_second; } modem_speed_t; #ifndef BITRATE_TO_BYTES #define BITRATE_TO_BYTES(x) ((1000 * x)/8) #endif static const modem_speed_t modem_bitrates[] = { {"V.21", BITRATE_TO_BYTES(0.1)}, {"V.26bis", BITRATE_TO_BYTES(2.4)}, {"V.32", BITRATE_TO_BYTES(9.6)}, {"V.34", BITRATE_TO_BYTES(28.8)}, {"V.92", BITRATE_TO_BYTES(56.0)}, {"i-was-rich-and-got-a-leased-line", BITRATE_TO_BYTES(1500)}, {NULL, 0} }; static const char * cmd_modem_standard(cmd_parms *cmd, void *dconf, const char *input) { const modem_speed_t *standard; int i = 0; dialup_dcfg_t *dcfg = (dialup_dcfg_t*)dconf; dcfg->bytes_per_second = 0; while (modem_bitrates[i].name != NULL) { standard = &modem_bitrates[i]; if (strcasecmp(standard->name, input) == 0) { dcfg->bytes_per_second = standard->bytes_per_second; break; } i++; } if (dcfg->bytes_per_second == 0) { return "mod_diaulup: Unkonwn Modem Standard specified."; } return NULL; } static void * dialup_dcfg_create(apr_pool_t *p, char *dummy) { dialup_dcfg_t *cfg = apr_palloc(p, sizeof(dialup_dcfg_t)); cfg->bytes_per_second = 0; return cfg; } static const command_rec dialup_cmds[] = { AP_INIT_TAKE1("ModemStandard", cmd_modem_standard, NULL, ACCESS_CONF, "Modem Standard to.. simulate. " "Must be one of: 'V.21', 'V.26bis', 'V.32', 'V.34', or 'V.92'"), {NULL} }; AP_DECLARE_MODULE(dialup) = { STANDARD20_MODULE_STUFF, dialup_dcfg_create, NULL, NULL, NULL, dialup_cmds, dialup_register_hooks }; httpd-2.4.41/modules/test/NWGNUoptfnexport0000644000000000000500000001032211540546347017024 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = optfnexport # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) OptionalFunction Export Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_optional_fn_export.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ optional_fn_export_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/test/Makefile.in0000644000000000000500000000026710150161574015735 0ustar rootsrc# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/test/mod_optional_fn_export.c0000644000000000000500000000271111667005541020605 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "mod_optional_fn_export.h" /* The alert will note a strange mirror-image style resemblance to * mod_optional_hook_import.c. Yes, I _did_ mean import. Think about it. */ static int TestOptionalFn(const char *szStr) { ap_log_error(APLOG_MARK,APLOG_ERR,OK,NULL, APLOGNO(01871) "Optional function test said: %s",szStr); return OK; } static void ExportRegisterHooks(apr_pool_t *p) { APR_REGISTER_OPTIONAL_FN(TestOptionalFn); } AP_DECLARE_MODULE(optional_fn_export) = { STANDARD20_MODULE_STUFF, NULL, NULL, NULL, NULL, NULL, ExportRegisterHooks }; httpd-2.4.41/modules/echo/0002755000000000000500000000000013523273343013631 5ustar rootsrchttpd-2.4.41/modules/echo/mod_echo.dep0000644000000000000500000000375112674411515016105 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_echo.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_echo.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/echo/mod_echo.c0000644000000000000500000001560213350264472015555 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ap_config.h" #include "ap_mmn.h" #include "httpd.h" #include "http_config.h" #include "http_connection.h" #include "http_core.h" #include "http_log.h" #include "apr_buckets.h" #include "apr_strings.h" #include "util_filter.h" #include "scoreboard.h" module AP_MODULE_DECLARE_DATA echo_module; typedef struct { int bEnabled; } EchoConfig; static void *create_echo_server_config(apr_pool_t *p, server_rec *s) { EchoConfig *pConfig = apr_pcalloc(p, sizeof *pConfig); pConfig->bEnabled = 0; return pConfig; } static const char *echo_on(cmd_parms *cmd, void *dummy, int arg) { EchoConfig *pConfig = ap_get_module_config(cmd->server->module_config, &echo_module); pConfig->bEnabled = arg; return NULL; } static apr_status_t brigade_peek(apr_bucket_brigade *bbIn, char *buff, apr_size_t bufflen) { apr_bucket *b; apr_size_t readbytes = 0; if (bufflen--) /* compensate for NULL */ *buff = '\0'; else return APR_EGENERAL; if (APR_BRIGADE_EMPTY(bbIn)) return APR_EGENERAL; b = APR_BRIGADE_FIRST(bbIn); while ((b != APR_BRIGADE_SENTINEL(bbIn)) && (readbytes < bufflen)) { const char *pos; const char *str; apr_size_t len; apr_status_t rv; if ((rv = apr_bucket_read(b, &str, &len, APR_NONBLOCK_READ)) != APR_SUCCESS) return rv; if ((pos = memchr(str, APR_ASCII_LF, len)) != NULL) len = pos - str; if (len > bufflen - readbytes) len = bufflen - readbytes; memcpy (buff + readbytes, str, len); readbytes += len; buff[readbytes] = '\0'; b = APR_BUCKET_NEXT(b); } return APR_SUCCESS; } static int update_echo_child_status(ap_sb_handle_t *sbh, int status, conn_rec *c, apr_bucket_brigade *last_echoed) { worker_score *ws = ap_get_scoreboard_worker(sbh); int old_status = ws->status; ws->status = status; if (!ap_extended_status) return old_status; ws->last_used = apr_time_now(); /* initial pass only, please - in the name of efficiency */ if (c) { apr_cpystrn(ws->client64, ap_get_remote_host(c, c->base_server->lookup_defaults, REMOTE_NOLOOKUP, NULL), sizeof(ws->client64)); apr_cpystrn(ws->vhost, c->base_server->server_hostname, sizeof(ws->vhost)); /* Deliberate trailing space - filling in string on WRITE passes */ apr_cpystrn(ws->request, "ECHO ", sizeof(ws->request)); } /* each subsequent WRITE pass, let's update what we echoed */ if (last_echoed) { brigade_peek(last_echoed, ws->request + sizeof("ECHO ") - 1, sizeof(ws->request) - sizeof("ECHO ") + 1); } return old_status; } static int process_echo_connection(conn_rec *c) { apr_bucket_brigade *bb; apr_bucket *b; apr_socket_t *csd = NULL; EchoConfig *pConfig = ap_get_module_config(c->base_server->module_config, &echo_module); if (!pConfig->bEnabled) { return DECLINED; } ap_time_process_request(c->sbh, START_PREQUEST); update_echo_child_status(c->sbh, SERVER_BUSY_READ, c, NULL); bb = apr_brigade_create(c->pool, c->bucket_alloc); for ( ; ; ) { apr_status_t rv; /* Get a single line of input from the client */ if (((rv = ap_get_brigade(c->input_filters, bb, AP_MODE_GETLINE, APR_BLOCK_READ, 0)) != APR_SUCCESS)) { apr_brigade_cleanup(bb); if (!APR_STATUS_IS_EOF(rv) && ! APR_STATUS_IS_TIMEUP(rv)) ap_log_error(APLOG_MARK, APLOG_INFO, rv, c->base_server, APLOGNO(01611) "ProtocolEcho: Failure reading from %s", c->client_ip); break; } /* Something horribly wrong happened. Someone didn't block! */ if (APR_BRIGADE_EMPTY(bb)) { ap_log_error(APLOG_MARK, APLOG_INFO, rv, c->base_server, APLOGNO(01612) "ProtocolEcho: Error - read empty brigade from %s!", c->client_ip); break; } if (!csd) { csd = ap_get_conn_socket(c); apr_socket_timeout_set(csd, c->base_server->keep_alive_timeout); } update_echo_child_status(c->sbh, SERVER_BUSY_WRITE, NULL, bb); /* Make sure the data is flushed to the client */ b = apr_bucket_flush_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); rv = ap_pass_brigade(c->output_filters, bb); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_INFO, rv, c->base_server, APLOGNO(01613) "ProtocolEcho: Failure writing to %s", c->client_ip); break; } apr_brigade_cleanup(bb); /* Announce our intent to loop */ update_echo_child_status(c->sbh, SERVER_BUSY_KEEPALIVE, NULL, NULL); } apr_brigade_destroy(bb); ap_time_process_request(c->sbh, STOP_PREQUEST); update_echo_child_status(c->sbh, SERVER_CLOSING, c, NULL); return OK; } static const command_rec echo_cmds[] = { AP_INIT_FLAG("ProtocolEcho", echo_on, NULL, RSRC_CONF, "Run an echo server on this host"), { NULL } }; static void register_hooks(apr_pool_t *p) { ap_hook_process_connection(process_echo_connection, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(echo) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ create_echo_server_config, /* create per-server config structure */ NULL, /* merge per-server config structures */ echo_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/echo/mod_echo.mak0000644000000000000500000002301512701473373016101 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_echo.dsp !IF "$(CFG)" == "" CFG=mod_echo - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_echo - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_echo - Win32 Release" && "$(CFG)" != "mod_echo - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_echo.mak" CFG="mod_echo - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_echo - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_echo - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_echo - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_echo.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_echo.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_echo.obj" -@erase "$(INTDIR)\mod_echo.res" -@erase "$(INTDIR)\mod_echo_src.idb" -@erase "$(INTDIR)\mod_echo_src.pdb" -@erase "$(OUTDIR)\mod_echo.exp" -@erase "$(OUTDIR)\mod_echo.lib" -@erase "$(OUTDIR)\mod_echo.pdb" -@erase "$(OUTDIR)\mod_echo.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_echo_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_echo.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_echo.so" /d LONG_NAME="echo_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_echo.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_echo.pdb" /debug /out:"$(OUTDIR)\mod_echo.so" /implib:"$(OUTDIR)\mod_echo.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_echo.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_echo.obj" \ "$(INTDIR)\mod_echo.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_echo.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_echo.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_echo.so" if exist .\Release\mod_echo.so.manifest mt.exe -manifest .\Release\mod_echo.so.manifest -outputresource:.\Release\mod_echo.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_echo - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_echo.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_echo.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_echo.obj" -@erase "$(INTDIR)\mod_echo.res" -@erase "$(INTDIR)\mod_echo_src.idb" -@erase "$(INTDIR)\mod_echo_src.pdb" -@erase "$(OUTDIR)\mod_echo.exp" -@erase "$(OUTDIR)\mod_echo.lib" -@erase "$(OUTDIR)\mod_echo.pdb" -@erase "$(OUTDIR)\mod_echo.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_echo_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_echo.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_echo.so" /d LONG_NAME="echo_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_echo.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_echo.pdb" /debug /out:"$(OUTDIR)\mod_echo.so" /implib:"$(OUTDIR)\mod_echo.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_echo.so LINK32_OBJS= \ "$(INTDIR)\mod_echo.obj" \ "$(INTDIR)\mod_echo.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_echo.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_echo.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_echo.so" if exist .\Debug\mod_echo.so.manifest mt.exe -manifest .\Debug\mod_echo.so.manifest -outputresource:.\Debug\mod_echo.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_echo.dep") !INCLUDE "mod_echo.dep" !ELSE !MESSAGE Warning: cannot find "mod_echo.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_echo - Win32 Release" || "$(CFG)" == "mod_echo - Win32 Debug" !IF "$(CFG)" == "mod_echo - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\echo" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\echo" !ELSEIF "$(CFG)" == "mod_echo - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\echo" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\echo" !ENDIF !IF "$(CFG)" == "mod_echo - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\echo" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\echo" !ELSEIF "$(CFG)" == "mod_echo - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\echo" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\echo" !ENDIF !IF "$(CFG)" == "mod_echo - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\echo" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\echo" !ELSEIF "$(CFG)" == "mod_echo - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\echo" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\echo" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_echo - Win32 Release" "$(INTDIR)\mod_echo.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_echo.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_echo.so" /d LONG_NAME="echo_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_echo - Win32 Debug" "$(INTDIR)\mod_echo.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_echo.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_echo.so" /d LONG_NAME="echo_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_echo.c "$(INTDIR)\mod_echo.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/echo/NWGNUmakefile0000644000000000000500000001030511540562746016152 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = echo # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Echo Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Echo Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/echo.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_echo.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ echo_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/echo/config.m40000644000000000000500000000033411607365420015335 0ustar rootsrcdnl modules enabled in this directory by default dnl APACHE_MODULE(name, helptext[, objects[, structname[, default[, config]]]]) APACHE_MODPATH_INIT(echo) APACHE_MODULE(echo, ECHO server, , , ) APACHE_MODPATH_FINISH httpd-2.4.41/modules/echo/mod_echo.dsp0000644000000000000500000001046710551346420016117 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_echo" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_echo - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_echo.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_echo.mak" CFG="mod_echo - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_echo - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_echo - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_echo - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_echo_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_echo.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_echo.so" /d LONG_NAME="echo_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_echo.so" /base:@..\..\os\win32\BaseAddr.ref,mod_echo.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_echo.so" /base:@..\..\os\win32\BaseAddr.ref,mod_echo.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_echo.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_echo - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_echo_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_echo.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_echo.so" /d LONG_NAME="echo_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_echo.so" /base:@..\..\os\win32\BaseAddr.ref,mod_echo.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_echo.so" /base:@..\..\os\win32\BaseAddr.ref,mod_echo.so # Begin Special Build Tool TargetPath=.\Debug\mod_echo.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_echo - Win32 Release" # Name "mod_echo - Win32 Debug" # Begin Source File SOURCE=.\mod_echo.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/echo/.indent.pro0000644000000000000500000000127510150161574015710 0ustar rootsrc-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int httpd-2.4.41/modules/echo/Makefile.in0000644000000000000500000000005110150161574015663 0ustar rootsrc include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/dav/0002755000000000000500000000000013523273343013465 5ustar rootsrchttpd-2.4.41/modules/dav/fs/0002755000000000000500000000000013523273343014075 5ustar rootsrchttpd-2.4.41/modules/dav/fs/mod_dav_fs.mak0000644000000000000500000002632212701473373016675 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_dav_fs.dsp !IF "$(CFG)" == "" CFG=mod_dav_fs - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_dav_fs - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_dav_fs - Win32 Release" && "$(CFG)" != "mod_dav_fs - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_dav_fs.mak" CFG="mod_dav_fs - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_dav_fs - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_dav_fs - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_dav_fs - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_dav_fs.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_dav - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_dav_fs.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_dav - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\dbm.obj" -@erase "$(INTDIR)\lock.obj" -@erase "$(INTDIR)\mod_dav_fs.obj" -@erase "$(INTDIR)\mod_dav_fs.res" -@erase "$(INTDIR)\mod_dav_fs_src.idb" -@erase "$(INTDIR)\mod_dav_fs_src.pdb" -@erase "$(INTDIR)\repos.obj" -@erase "$(OUTDIR)\mod_dav_fs.exp" -@erase "$(OUTDIR)\mod_dav_fs.lib" -@erase "$(OUTDIR)\mod_dav_fs.pdb" -@erase "$(OUTDIR)\mod_dav_fs.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_dav_fs_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_dav_fs.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_dav_fs.so" /d LONG_NAME="dav_fs_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_dav_fs.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_dav_fs.pdb" /debug /out:"$(OUTDIR)\mod_dav_fs.so" /implib:"$(OUTDIR)\mod_dav_fs.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav_fs.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\dbm.obj" \ "$(INTDIR)\lock.obj" \ "$(INTDIR)\mod_dav_fs.obj" \ "$(INTDIR)\repos.obj" \ "$(INTDIR)\mod_dav_fs.res" \ "..\..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\..\Release\libhttpd.lib" \ "..\main\Release\mod_dav.lib" "$(OUTDIR)\mod_dav_fs.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_dav_fs.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_dav_fs.so" if exist .\Release\mod_dav_fs.so.manifest mt.exe -manifest .\Release\mod_dav_fs.so.manifest -outputresource:.\Release\mod_dav_fs.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_dav_fs - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_dav_fs.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_dav - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_dav_fs.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_dav - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\dbm.obj" -@erase "$(INTDIR)\lock.obj" -@erase "$(INTDIR)\mod_dav_fs.obj" -@erase "$(INTDIR)\mod_dav_fs.res" -@erase "$(INTDIR)\mod_dav_fs_src.idb" -@erase "$(INTDIR)\mod_dav_fs_src.pdb" -@erase "$(INTDIR)\repos.obj" -@erase "$(OUTDIR)\mod_dav_fs.exp" -@erase "$(OUTDIR)\mod_dav_fs.lib" -@erase "$(OUTDIR)\mod_dav_fs.pdb" -@erase "$(OUTDIR)\mod_dav_fs.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_dav_fs_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_dav_fs.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_dav_fs.so" /d LONG_NAME="dav_fs_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_dav_fs.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_dav_fs.pdb" /debug /out:"$(OUTDIR)\mod_dav_fs.so" /implib:"$(OUTDIR)\mod_dav_fs.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav_fs.so LINK32_OBJS= \ "$(INTDIR)\dbm.obj" \ "$(INTDIR)\lock.obj" \ "$(INTDIR)\mod_dav_fs.obj" \ "$(INTDIR)\repos.obj" \ "$(INTDIR)\mod_dav_fs.res" \ "..\..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\..\Debug\libhttpd.lib" \ "..\main\Debug\mod_dav.lib" "$(OUTDIR)\mod_dav_fs.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_dav_fs.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_dav_fs.so" if exist .\Debug\mod_dav_fs.so.manifest mt.exe -manifest .\Debug\mod_dav_fs.so.manifest -outputresource:.\Debug\mod_dav_fs.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_dav_fs.dep") !INCLUDE "mod_dav_fs.dep" !ELSE !MESSAGE Warning: cannot find "mod_dav_fs.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_dav_fs - Win32 Release" || "$(CFG)" == "mod_dav_fs - Win32 Debug" SOURCE=.\dbm.c "$(INTDIR)\dbm.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\lock.c "$(INTDIR)\lock.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\mod_dav_fs.c "$(INTDIR)\mod_dav_fs.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\repos.c "$(INTDIR)\repos.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_dav_fs - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\dav\fs" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\dav\fs" !ELSEIF "$(CFG)" == "mod_dav_fs - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\dav\fs" "libapr - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\dav\fs" !ENDIF !IF "$(CFG)" == "mod_dav_fs - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\dav\fs" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\dav\fs" !ELSEIF "$(CFG)" == "mod_dav_fs - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\dav\fs" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\dav\fs" !ENDIF !IF "$(CFG)" == "mod_dav_fs - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\dav\fs" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\dav\fs" !ELSEIF "$(CFG)" == "mod_dav_fs - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\dav\fs" "libhttpd - Win32 DebugCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\dav\fs" !ENDIF !IF "$(CFG)" == "mod_dav_fs - Win32 Release" "mod_dav - Win32 Release" : cd ".\..\main" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dav.mak" CFG="mod_dav - Win32 Release" cd "..\fs" "mod_dav - Win32 ReleaseCLEAN" : cd ".\..\main" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dav.mak" CFG="mod_dav - Win32 Release" RECURSE=1 CLEAN cd "..\fs" !ELSEIF "$(CFG)" == "mod_dav_fs - Win32 Debug" "mod_dav - Win32 Debug" : cd ".\..\main" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dav.mak" CFG="mod_dav - Win32 Debug" cd "..\fs" "mod_dav - Win32 DebugCLEAN" : cd ".\..\main" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dav.mak" CFG="mod_dav - Win32 Debug" RECURSE=1 CLEAN cd "..\fs" !ENDIF SOURCE=..\..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_dav_fs - Win32 Release" "$(INTDIR)\mod_dav_fs.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_dav_fs.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_dav_fs.so" /d LONG_NAME="dav_fs_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_dav_fs - Win32 Debug" "$(INTDIR)\mod_dav_fs.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_dav_fs.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_dav_fs.so" /d LONG_NAME="dav_fs_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/dav/fs/mod_dav_fs.dep0000644000000000000500000001732512674411515016677 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_dav_fs.mak .\dbm.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\http_log.h"\ "..\..\..\include\http_main.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\mod_dav.h"\ "..\..\..\include\os.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_xml.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apr_xml.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ ".\repos.h"\ .\lock.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\http_log.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\mod_dav.h"\ "..\..\..\include\os.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_xml.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apr_xml.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ ".\repos.h"\ .\mod_dav_fs.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\mod_dav.h"\ "..\..\..\include\os.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_xml.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apr_xml.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ ".\repos.h"\ .\repos.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\http_log.h"\ "..\..\..\include\http_protocol.h"\ "..\..\..\include\http_request.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\mod_dav.h"\ "..\..\..\include\os.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_xml.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apr_xml.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_dso.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_portable.h"\ "..\..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_shm.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ ".\repos.h"\ ..\..\..\build\win32\httpd.rc : \ "..\..\..\include\ap_release.h"\ httpd-2.4.41/modules/dav/fs/mod_dav_fs.c0000644000000000000500000000646011402752006016336 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "apr_strings.h" #include "mod_dav.h" #include "repos.h" /* per-server configuration */ typedef struct { const char *lockdb_path; } dav_fs_server_conf; extern module AP_MODULE_DECLARE_DATA dav_fs_module; const char *dav_get_lockdb_path(const request_rec *r) { dav_fs_server_conf *conf; conf = ap_get_module_config(r->server->module_config, &dav_fs_module); return conf->lockdb_path; } static void *dav_fs_create_server_config(apr_pool_t *p, server_rec *s) { return apr_pcalloc(p, sizeof(dav_fs_server_conf)); } static void *dav_fs_merge_server_config(apr_pool_t *p, void *base, void *overrides) { dav_fs_server_conf *parent = base; dav_fs_server_conf *child = overrides; dav_fs_server_conf *newconf; newconf = apr_pcalloc(p, sizeof(*newconf)); newconf->lockdb_path = child->lockdb_path ? child->lockdb_path : parent->lockdb_path; return newconf; } /* * Command handler for the DAVLockDB directive, which is TAKE1 */ static const char *dav_fs_cmd_davlockdb(cmd_parms *cmd, void *config, const char *arg1) { dav_fs_server_conf *conf; conf = ap_get_module_config(cmd->server->module_config, &dav_fs_module); conf->lockdb_path = ap_server_root_relative(cmd->pool, arg1); if (!conf->lockdb_path) { return apr_pstrcat(cmd->pool, "Invalid DAVLockDB path ", arg1, NULL); } return NULL; } static const command_rec dav_fs_cmds[] = { /* per server */ AP_INIT_TAKE1("DAVLockDB", dav_fs_cmd_davlockdb, NULL, RSRC_CONF, "specify a lock database"), { NULL } }; static void register_hooks(apr_pool_t *p) { dav_hook_gather_propsets(dav_fs_gather_propsets, NULL, NULL, APR_HOOK_MIDDLE); dav_hook_find_liveprop(dav_fs_find_liveprop, NULL, NULL, APR_HOOK_MIDDLE); dav_hook_insert_all_liveprops(dav_fs_insert_all_liveprops, NULL, NULL, APR_HOOK_MIDDLE); dav_fs_register(p); } AP_DECLARE_MODULE(dav_fs) = { STANDARD20_MODULE_STUFF, NULL, /* dir config creater */ NULL, /* dir merger --- default is to override */ dav_fs_create_server_config, /* server config */ dav_fs_merge_server_config, /* merge server config */ dav_fs_cmds, /* command table */ register_hooks, /* register hooks */ }; httpd-2.4.41/modules/dav/fs/NWGNUmakefile0000644000000000000500000001065011541421667016416 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/server/mpm/netware \ $(AP_WORK)/modules/dav/main \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = moddavfs # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) DAV FileSystem Sub-Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. NLM_THREAD_NAME = $(NLM_NAME) Thread # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 65536 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If this is specified it will be used by the link '-flags' directive # NLM_FLAGS = # # Declare all target files (you must add your files here) # # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_dav_fs.o \ $(OBJDIR)/dbm.o \ $(OBJDIR)/lock.o \ $(OBJDIR)/repos.o \ $(OBJDIR)/libprews.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ Apache2 \ Libc \ mod_dav \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ @../main/dav.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ dav_fs_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # vpath %.c ../../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/dav/fs/repos.h0000644000000000000500000000647410455005461015402 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file repos.h * @brief Declarations for the filesystem repository implementation * * @addtogroup MOD_DAV * @{ */ #ifndef _DAV_FS_REPOS_H_ #define _DAV_FS_REPOS_H_ /* the subdirectory to hold all DAV-related information for a directory */ #define DAV_FS_STATE_DIR ".DAV" #define DAV_FS_STATE_FILE_FOR_DIR ".state_for_dir" #define DAV_FS_LOCK_NULL_FILE ".locknull" /* ensure that our state subdirectory is present */ void dav_fs_ensure_state_dir(apr_pool_t *p, const char *dirname); /* return the storage pool associated with a resource */ apr_pool_t *dav_fs_pool(const dav_resource *resource); /* return the full pathname for a resource */ const char *dav_fs_pathname(const dav_resource *resource); /* return the directory and filename for a resource */ dav_error * dav_fs_dir_file_name(const dav_resource *resource, const char **dirpath, const char **fname); /* return the list of locknull members in this resource's directory */ dav_error * dav_fs_get_locknull_members(const dav_resource *resource, dav_buffer *pbuf); /* DBM functions used by the repository and locking providers */ extern const dav_hooks_db dav_hooks_db_dbm; dav_error * dav_dbm_open_direct(apr_pool_t *p, const char *pathname, int ro, dav_db **pdb); void dav_dbm_get_statefiles(apr_pool_t *p, const char *fname, const char **state1, const char **state2); dav_error * dav_dbm_delete(dav_db *db, apr_datum_t key); dav_error * dav_dbm_store(dav_db *db, apr_datum_t key, apr_datum_t value); dav_error * dav_dbm_fetch(dav_db *db, apr_datum_t key, apr_datum_t *pvalue); void dav_dbm_freedatum(dav_db *db, apr_datum_t data); int dav_dbm_exists(dav_db *db, apr_datum_t key); void dav_dbm_close(dav_db *db); /* where is the lock database located? */ const char *dav_get_lockdb_path(const request_rec *r); const dav_hooks_locks *dav_fs_get_lock_hooks(request_rec *r); const dav_hooks_propdb *dav_fs_get_propdb_hooks(request_rec *r); void dav_fs_gather_propsets(apr_array_header_t *uris); int dav_fs_find_liveprop(const dav_resource *resource, const char *ns_uri, const char *name, const dav_hooks_liveprop **hooks); void dav_fs_insert_all_liveprops(request_rec *r, const dav_resource *resource, dav_prop_insert what, apr_text_header *phdr); void dav_fs_register(apr_pool_t *p); #endif /* _DAV_FS_REPOS_H_ */ /** @} */ httpd-2.4.41/modules/dav/fs/repos.c0000644000000000000500000022563212532143363015376 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* ** DAV filesystem-based repository provider */ #include "apr.h" #include "apr_file_io.h" #include "apr_strings.h" #include "apr_buckets.h" #if APR_HAVE_UNISTD_H #include /* for getpid() */ #endif #include "httpd.h" #include "http_log.h" #include "http_protocol.h" /* for ap_set_* (in dav_fs_set_headers) */ #include "http_request.h" /* for ap_update_mtime() */ #include "mod_dav.h" #include "repos.h" /* to assist in debugging mod_dav's GET handling */ #define DEBUG_GET_HANDLER 0 #define DAV_FS_COPY_BLOCKSIZE 16384 /* copy 16k at a time */ /* context needed to identify a resource */ struct dav_resource_private { apr_pool_t *pool; /* memory storage pool associated with request */ const char *pathname; /* full pathname to resource */ apr_finfo_t finfo; /* filesystem info */ request_rec *r; }; /* private context for doing a filesystem walk */ typedef struct { /* the input walk parameters */ const dav_walk_params *params; /* reused as we walk */ dav_walk_resource wres; dav_resource res1; dav_resource_private info1; dav_buffer path1; dav_buffer uri_buf; /* MOVE/COPY need a secondary path */ dav_resource res2; dav_resource_private info2; dav_buffer path2; dav_buffer locknull_buf; } dav_fs_walker_context; typedef struct { int is_move; /* is this a MOVE? */ dav_buffer work_buf; /* handy buffer for copymove_file() */ /* CALLBACK: this is a secondary resource managed specially for us */ const dav_resource *res_dst; /* copied from dav_walk_params (they are invariant across the walk) */ const dav_resource *root; apr_pool_t *pool; } dav_fs_copymove_walk_ctx; /* an internal WALKTYPE to walk hidden files (the .DAV directory) */ #define DAV_WALKTYPE_HIDDEN 0x4000 /* an internal WALKTYPE to call collections (again) after their contents */ #define DAV_WALKTYPE_POSTFIX 0x8000 #define DAV_CALLTYPE_POSTFIX 1000 /* a private call type */ /* pull this in from the other source file */ extern const dav_hooks_locks dav_hooks_locks_fs; /* forward-declare the hook structures */ static const dav_hooks_repository dav_hooks_repository_fs; static const dav_hooks_liveprop dav_hooks_liveprop_fs; /* ** The namespace URIs that we use. This list and the enumeration must ** stay in sync. */ static const char * const dav_fs_namespace_uris[] = { "DAV:", "http://apache.org/dav/props/", NULL /* sentinel */ }; enum { DAV_FS_URI_DAV, /* the DAV: namespace URI */ DAV_FS_URI_MYPROPS /* the namespace URI for our custom props */ }; /* ** Does this platform support an executable flag? ** ** ### need a way to portably abstract this query ** ** DAV_FINFO_MASK gives the appropriate mask to use for the stat call ** used to get file attributes. */ #ifndef WIN32 #define DAV_FS_HAS_EXECUTABLE #define DAV_FINFO_MASK (APR_FINFO_LINK | APR_FINFO_TYPE | APR_FINFO_INODE | \ APR_FINFO_SIZE | APR_FINFO_CTIME | APR_FINFO_MTIME | \ APR_FINFO_PROT) #else /* as above, but without APR_FINFO_PROT */ #define DAV_FINFO_MASK (APR_FINFO_LINK | APR_FINFO_TYPE | APR_FINFO_INODE | \ APR_FINFO_SIZE | APR_FINFO_CTIME | APR_FINFO_MTIME) #endif /* ** The single property that we define (in the DAV_FS_URI_MYPROPS namespace) */ #define DAV_PROPID_FS_executable 1 /* * prefix for temporary files */ #define DAV_FS_TMP_PREFIX ".davfs.tmp" static const dav_liveprop_spec dav_fs_props[] = { /* standard DAV properties */ { DAV_FS_URI_DAV, "creationdate", DAV_PROPID_creationdate, 0 }, { DAV_FS_URI_DAV, "getcontentlength", DAV_PROPID_getcontentlength, 0 }, { DAV_FS_URI_DAV, "getetag", DAV_PROPID_getetag, 0 }, { DAV_FS_URI_DAV, "getlastmodified", DAV_PROPID_getlastmodified, 0 }, /* our custom properties */ { DAV_FS_URI_MYPROPS, "executable", DAV_PROPID_FS_executable, 0 /* handled special in dav_fs_is_writable */ }, { 0 } /* sentinel */ }; static const dav_liveprop_group dav_fs_liveprop_group = { dav_fs_props, dav_fs_namespace_uris, &dav_hooks_liveprop_fs }; /* define the dav_stream structure for our use */ struct dav_stream { apr_pool_t *p; apr_file_t *f; const char *pathname; /* we may need to remove it at close time */ char *temppath; int unlink_on_error; }; /* returns an appropriate HTTP status code given an APR status code for a * failed I/O operation. ### use something besides 500? */ #define MAP_IO2HTTP(e) (APR_STATUS_IS_ENOSPC(e) ? HTTP_INSUFFICIENT_STORAGE : \ APR_STATUS_IS_ENOENT(e) ? HTTP_CONFLICT : \ HTTP_INTERNAL_SERVER_ERROR) /* forward declaration for internal treewalkers */ static dav_error * dav_fs_walk(const dav_walk_params *params, int depth, dav_response **response); static dav_error * dav_fs_internal_walk(const dav_walk_params *params, int depth, int is_move, const dav_resource *root_dst, dav_response **response); /* -------------------------------------------------------------------- ** ** PRIVATE REPOSITORY FUNCTIONS */ static request_rec *dav_fs_get_request_rec(const dav_resource *resource) { return resource->info->r; } apr_pool_t *dav_fs_pool(const dav_resource *resource) { return resource->info->pool; } const char *dav_fs_pathname(const dav_resource *resource) { return resource->info->pathname; } dav_error * dav_fs_dir_file_name( const dav_resource *resource, const char **dirpath_p, const char **fname_p) { dav_resource_private *ctx = resource->info; if (resource->collection) { *dirpath_p = ctx->pathname; if (fname_p != NULL) *fname_p = NULL; } else { const char *testpath, *rootpath; char *dirpath = ap_make_dirstr_parent(ctx->pool, ctx->pathname); apr_size_t dirlen = strlen(dirpath); apr_status_t rv = APR_SUCCESS; testpath = dirpath; if (dirlen > 0) { rv = apr_filepath_root(&rootpath, &testpath, 0, ctx->pool); } /* remove trailing slash from dirpath, unless it's a root path */ if ((rv == APR_SUCCESS && testpath && *testpath) || rv == APR_ERELATIVE) { if (dirpath[dirlen - 1] == '/') { dirpath[dirlen - 1] = '\0'; } } /* ###: Looks like a response could be appropriate * * APR_SUCCESS here tells us the dir is a root * APR_ERELATIVE told us we had no root (ok) * APR_EINCOMPLETE an incomplete testpath told us * there was no -file- name here! * APR_EBADPATH or other errors tell us this file * path is undecipherable */ if (rv == APR_SUCCESS || rv == APR_ERELATIVE) { *dirpath_p = dirpath; if (fname_p != NULL) *fname_p = ctx->pathname + dirlen; } else { return dav_new_error(ctx->pool, HTTP_INTERNAL_SERVER_ERROR, 0, rv, "An incomplete/bad path was found in " "dav_fs_dir_file_name."); } } return NULL; } /* Note: picked up from ap_gm_timestr_822() */ /* NOTE: buf must be at least DAV_TIMEBUF_SIZE chars in size */ static void dav_format_time(int style, apr_time_t sec, char *buf, apr_size_t buflen) { apr_time_exp_t tms; /* ### what to do if fails? */ (void) apr_time_exp_gmt(&tms, sec); if (style == DAV_STYLE_ISO8601) { /* ### should we use "-00:00" instead of "Z" ?? */ /* 20 chars plus null term */ apr_snprintf(buf, buflen, "%.4d-%.2d-%.2dT%.2d:%.2d:%.2dZ", tms.tm_year + 1900, tms.tm_mon + 1, tms.tm_mday, tms.tm_hour, tms.tm_min, tms.tm_sec); return; } /* RFC 822 date format; as strftime '%a, %d %b %Y %T GMT' */ /* 29 chars plus null term */ apr_snprintf(buf, buflen, "%s, %.2d %s %d %.2d:%.2d:%.2d GMT", apr_day_snames[tms.tm_wday], tms.tm_mday, apr_month_snames[tms.tm_mon], tms.tm_year + 1900, tms.tm_hour, tms.tm_min, tms.tm_sec); } /* Copy or move src to dst; src_finfo is used to propagate permissions * bits across if non-NULL; dst_finfo must be non-NULL iff dst already * exists. */ static dav_error * dav_fs_copymove_file( int is_move, apr_pool_t * p, const char *src, const char *dst, const apr_finfo_t *src_finfo, const apr_finfo_t *dst_finfo, dav_buffer *pbuf) { dav_buffer work_buf = { 0 }; apr_file_t *inf = NULL; apr_file_t *outf = NULL; apr_status_t status; apr_fileperms_t perms; if (pbuf == NULL) pbuf = &work_buf; /* Determine permissions to use for destination */ if (src_finfo && src_finfo->valid & APR_FINFO_PROT && src_finfo->protection & APR_UEXECUTE) { perms = src_finfo->protection; if (dst_finfo != NULL) { /* chmod it if it already exist */ if ((status = apr_file_perms_set(dst, perms)) != APR_SUCCESS) { return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, status, "Could not set permissions on destination"); } } } else { perms = APR_OS_DEFAULT; } dav_set_bufsize(p, pbuf, DAV_FS_COPY_BLOCKSIZE); if ((status = apr_file_open(&inf, src, APR_READ | APR_BINARY, APR_OS_DEFAULT, p)) != APR_SUCCESS) { /* ### use something besides 500? */ return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, status, "Could not open file for reading"); } /* ### do we need to deal with the umask? */ status = apr_file_open(&outf, dst, APR_WRITE | APR_CREATE | APR_TRUNCATE | APR_BINARY, perms, p); if (status != APR_SUCCESS) { apr_file_close(inf); return dav_new_error(p, MAP_IO2HTTP(status), 0, status, "Could not open file for writing"); } while (1) { apr_size_t len = DAV_FS_COPY_BLOCKSIZE; status = apr_file_read(inf, pbuf->buf, &len); if (status != APR_SUCCESS && status != APR_EOF) { apr_status_t lcl_status; apr_file_close(inf); apr_file_close(outf); if ((lcl_status = apr_file_remove(dst, p)) != APR_SUCCESS) { /* ### ACK! Inconsistent state... */ /* ### use something besides 500? */ return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, lcl_status, "Could not delete output after read " "failure. Server is now in an " "inconsistent state."); } /* ### use something besides 500? */ return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, status, "Could not read input file"); } if (status == APR_EOF) break; /* write any bytes that were read */ status = apr_file_write_full(outf, pbuf->buf, len, NULL); if (status != APR_SUCCESS) { apr_status_t lcl_status; apr_file_close(inf); apr_file_close(outf); if ((lcl_status = apr_file_remove(dst, p)) != APR_SUCCESS) { /* ### ACK! Inconsistent state... */ /* ### use something besides 500? */ return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, lcl_status, "Could not delete output after write " "failure. Server is now in an " "inconsistent state."); } return dav_new_error(p, MAP_IO2HTTP(status), 0, status, "Could not write output file"); } } apr_file_close(inf); apr_file_close(outf); if (is_move && (status = apr_file_remove(src, p)) != APR_SUCCESS) { dav_error *err; apr_status_t lcl_status; if (APR_STATUS_IS_ENOENT(status)) { /* * Something is wrong here but the result is what we wanted. * We definitely should not remove the destination file. */ err = dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, status, apr_psprintf(p, "Could not remove source " "file %s after move to %s. The " "server may be in an " "inconsistent state.", src, dst)); return err; } else if ((lcl_status = apr_file_remove(dst, p)) != APR_SUCCESS) { /* ### ACK. this creates an inconsistency. do more!? */ /* ### use something besides 500? */ return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, lcl_status, "Could not remove source or destination " "file. Server is now in an inconsistent " "state."); } /* ### use something besides 500? */ err = dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, status, "Could not remove source file after move. " "Destination was removed to ensure consistency."); return err; } return NULL; } /* copy/move a file from within a state dir to another state dir */ /* ### need more buffers to replace the pool argument */ static dav_error * dav_fs_copymove_state( int is_move, apr_pool_t * p, const char *src_dir, const char *src_file, const char *dst_dir, const char *dst_file, dav_buffer *pbuf) { apr_finfo_t src_finfo; /* finfo for source file */ apr_finfo_t dst_state_finfo; /* finfo for STATE directory */ apr_status_t rv; const char *src; const char *dst; /* build the propset pathname for the source file */ src = apr_pstrcat(p, src_dir, "/" DAV_FS_STATE_DIR "/", src_file, NULL); /* the source file doesn't exist */ rv = apr_stat(&src_finfo, src, APR_FINFO_NORM, p); if (rv != APR_SUCCESS && rv != APR_INCOMPLETE) { return NULL; } /* build the pathname for the destination state dir */ dst = apr_pstrcat(p, dst_dir, "/" DAV_FS_STATE_DIR, NULL); /* ### do we need to deal with the umask? */ /* ensure that it exists */ rv = apr_dir_make(dst, APR_OS_DEFAULT, p); if (rv != APR_SUCCESS) { if (!APR_STATUS_IS_EEXIST(rv)) { /* ### use something besides 500? */ return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, rv, "Could not create internal state directory"); } } /* get info about the state directory */ rv = apr_stat(&dst_state_finfo, dst, APR_FINFO_NORM, p); if (rv != APR_SUCCESS && rv != APR_INCOMPLETE) { /* Ack! Where'd it go? */ /* ### use something besides 500? */ return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, rv, "State directory disappeared"); } /* The mkdir() may have failed because a *file* exists there already */ if (dst_state_finfo.filetype != APR_DIR) { /* ### try to recover by deleting this file? (and mkdir again) */ /* ### use something besides 500? */ return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "State directory is actually a file"); } /* append the target file to the state directory pathname */ dst = apr_pstrcat(p, dst, "/", dst_file, NULL); /* copy/move the file now */ if (is_move) { /* try simple rename first */ rv = apr_file_rename(src, dst, p); if (APR_STATUS_IS_EXDEV(rv)) { return dav_fs_copymove_file(is_move, p, src, dst, NULL, NULL, pbuf); } if (rv != APR_SUCCESS) { /* ### use something besides 500? */ return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, rv, "Could not move state file."); } } else { /* gotta copy (and delete) */ return dav_fs_copymove_file(is_move, p, src, dst, NULL, NULL, pbuf); } return NULL; } static dav_error *dav_fs_copymoveset(int is_move, apr_pool_t *p, const dav_resource *src, const dav_resource *dst, dav_buffer *pbuf) { const char *src_dir; const char *src_file; const char *src_state1; const char *src_state2; const char *dst_dir; const char *dst_file; const char *dst_state1; const char *dst_state2; dav_error *err; /* Get directory and filename for resources */ /* ### should test these result values... */ (void) dav_fs_dir_file_name(src, &src_dir, &src_file); (void) dav_fs_dir_file_name(dst, &dst_dir, &dst_file); /* Get the corresponding state files for each resource */ dav_dbm_get_statefiles(p, src_file, &src_state1, &src_state2); dav_dbm_get_statefiles(p, dst_file, &dst_state1, &dst_state2); #if DAV_DEBUG if ((src_state2 != NULL && dst_state2 == NULL) || (src_state2 == NULL && dst_state2 != NULL)) { return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "DESIGN ERROR: dav_dbm_get_statefiles() " "returned inconsistent results."); } #endif err = dav_fs_copymove_state(is_move, p, src_dir, src_state1, dst_dir, dst_state1, pbuf); if (err == NULL && src_state2 != NULL) { err = dav_fs_copymove_state(is_move, p, src_dir, src_state2, dst_dir, dst_state2, pbuf); if (err != NULL) { /* ### CRAP. inconsistency. */ /* ### should perform some cleanup at the target if we still ### have the original files */ /* Change the error to reflect the bad server state. */ err->status = HTTP_INTERNAL_SERVER_ERROR; err->desc = "Could not fully copy/move the properties. " "The server is now in an inconsistent state."; } } return err; } static dav_error *dav_fs_deleteset(apr_pool_t *p, const dav_resource *resource) { const char *dirpath; const char *fname; const char *state1; const char *state2; const char *pathname; apr_status_t status; /* Get directory, filename, and state-file names for the resource */ /* ### should test this result value... */ (void) dav_fs_dir_file_name(resource, &dirpath, &fname); dav_dbm_get_statefiles(p, fname, &state1, &state2); /* build the propset pathname for the file */ pathname = apr_pstrcat(p, dirpath, "/" DAV_FS_STATE_DIR "/", state1, NULL); /* note: we may get ENOENT if the state dir is not present */ if ((status = apr_file_remove(pathname, p)) != APR_SUCCESS && !APR_STATUS_IS_ENOENT(status)) { return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, status, "Could not remove properties."); } if (state2 != NULL) { /* build the propset pathname for the file */ pathname = apr_pstrcat(p, dirpath, "/" DAV_FS_STATE_DIR "/", state2, NULL); if ((status = apr_file_remove(pathname, p)) != APR_SUCCESS && !APR_STATUS_IS_ENOENT(status)) { /* ### CRAP. only removed half. */ return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, status, "Could not fully remove properties. " "The server is now in an inconsistent " "state."); } } return NULL; } /* -------------------------------------------------------------------- ** ** REPOSITORY HOOK FUNCTIONS */ static dav_error * dav_fs_get_resource( request_rec *r, const char *root_dir, const char *label, int use_checked_in, dav_resource **result_resource) { dav_resource_private *ctx; dav_resource *resource; char *s; char *filename; apr_size_t len; /* ### optimize this into a single allocation! */ /* Create private resource context descriptor */ ctx = apr_pcalloc(r->pool, sizeof(*ctx)); ctx->finfo = r->finfo; ctx->r = r; /* ### this should go away */ ctx->pool = r->pool; /* Preserve case on OSes which fold canonical filenames */ #if 0 /* ### not available in Apache 2.0 yet */ filename = r->case_preserved_filename; #else filename = r->filename; #endif /* ** If there is anything in the path_info, then this indicates that the ** entire path was not used to specify the file/dir. We want to append ** it onto the filename so that we get a "valid" pathname for null ** resources. */ s = apr_pstrcat(r->pool, filename, r->path_info, NULL); /* make sure the pathname does not have a trailing "/" */ len = strlen(s); if (len > 1 && s[len - 1] == '/') { s[len - 1] = '\0'; } ctx->pathname = s; /* Create resource descriptor */ resource = apr_pcalloc(r->pool, sizeof(*resource)); resource->type = DAV_RESOURCE_TYPE_REGULAR; resource->info = ctx; resource->hooks = &dav_hooks_repository_fs; resource->pool = r->pool; /* make sure the URI does not have a trailing "/" */ len = strlen(r->uri); if (len > 1 && r->uri[len - 1] == '/') { s = apr_pstrmemdup(r->pool, r->uri, len-1); resource->uri = s; } else { resource->uri = r->uri; } if (r->finfo.filetype != APR_NOFILE) { resource->exists = 1; resource->collection = r->finfo.filetype == APR_DIR; /* unused info in the URL will indicate a null resource */ if (r->path_info != NULL && *r->path_info != '\0') { if (resource->collection) { /* only a trailing "/" is allowed */ if (*r->path_info != '/' || r->path_info[1] != '\0') { /* ** This URL/filename represents a locknull resource or ** possibly a destination of a MOVE/COPY */ resource->exists = 0; resource->collection = 0; } } else { /* ** The base of the path refers to a file -- nothing should ** be in path_info. The resource is simply an error: it ** can't be a null or a locknull resource. */ return dav_new_error(r->pool, HTTP_BAD_REQUEST, 0, 0, "The URL contains extraneous path " "components. The resource could not " "be identified."); } /* retain proper integrity across the structures */ if (!resource->exists) { ctx->finfo.filetype = APR_NOFILE; } } } *result_resource = resource; return NULL; } static dav_error * dav_fs_get_parent_resource(const dav_resource *resource, dav_resource **result_parent) { dav_resource_private *ctx = resource->info; dav_resource_private *parent_ctx; dav_resource *parent_resource; apr_status_t rv; char *dirpath; const char *testroot; const char *testpath; /* If we're at the root of the URL space, then there is no parent. */ if (strcmp(resource->uri, "/") == 0) { *result_parent = NULL; return NULL; } /* If given resource is root, then there is no parent. * Unless we can retrieve the filepath root, this is * intendend to fail. If we split the root and * no path info remains, then we also fail. */ testpath = ctx->pathname; rv = apr_filepath_root(&testroot, &testpath, 0, ctx->pool); if ((rv != APR_SUCCESS && rv != APR_ERELATIVE) || !testpath || !*testpath) { *result_parent = NULL; return NULL; } /* ### optimize this into a single allocation! */ /* Create private resource context descriptor */ parent_ctx = apr_pcalloc(ctx->pool, sizeof(*parent_ctx)); /* ### this should go away */ parent_ctx->pool = ctx->pool; dirpath = ap_make_dirstr_parent(ctx->pool, ctx->pathname); if (strlen(dirpath) > 1 && dirpath[strlen(dirpath) - 1] == '/') dirpath[strlen(dirpath) - 1] = '\0'; parent_ctx->pathname = dirpath; parent_resource = apr_pcalloc(ctx->pool, sizeof(*parent_resource)); parent_resource->info = parent_ctx; parent_resource->collection = 1; parent_resource->hooks = &dav_hooks_repository_fs; parent_resource->pool = resource->pool; if (resource->uri != NULL) { char *uri = ap_make_dirstr_parent(ctx->pool, resource->uri); if (strlen(uri) > 1 && uri[strlen(uri) - 1] == '/') uri[strlen(uri) - 1] = '\0'; parent_resource->uri = uri; } rv = apr_stat(&parent_ctx->finfo, parent_ctx->pathname, APR_FINFO_NORM, ctx->pool); if (rv == APR_SUCCESS || rv == APR_INCOMPLETE) { parent_resource->exists = 1; } *result_parent = parent_resource; return NULL; } static int dav_fs_is_same_resource( const dav_resource *res1, const dav_resource *res2) { dav_resource_private *ctx1 = res1->info; dav_resource_private *ctx2 = res2->info; if (res1->hooks != res2->hooks) return 0; if ((ctx1->finfo.filetype != APR_NOFILE) && (ctx2->finfo.filetype != APR_NOFILE) && (ctx1->finfo.valid & ctx2->finfo.valid & APR_FINFO_INODE)) { return ctx1->finfo.inode == ctx2->finfo.inode; } else { return strcmp(ctx1->pathname, ctx2->pathname) == 0; } } static int dav_fs_is_parent_resource( const dav_resource *res1, const dav_resource *res2) { dav_resource_private *ctx1 = res1->info; dav_resource_private *ctx2 = res2->info; apr_size_t len1 = strlen(ctx1->pathname); apr_size_t len2; if (res1->hooks != res2->hooks) return 0; /* it is safe to use ctx2 now */ len2 = strlen(ctx2->pathname); return (len2 > len1 && memcmp(ctx1->pathname, ctx2->pathname, len1) == 0 && ctx2->pathname[len1] == '/'); } static apr_status_t tmpfile_cleanup(void *data) { dav_stream *ds = data; if (ds->temppath) { apr_file_remove(ds->temppath, ds->p); } return APR_SUCCESS; } /* custom mktemp that creates the file with APR_OS_DEFAULT permissions */ static apr_status_t dav_fs_mktemp(apr_file_t **fp, char *templ, apr_pool_t *p) { apr_status_t rv; int num = ((getpid() << 7) + (apr_uintptr_t)templ % (1 << 16) ) % ( 1 << 23 ) ; char *numstr = templ + strlen(templ) - 6; ap_assert(numstr >= templ); do { num = (num + 1) % ( 1 << 23 ); apr_snprintf(numstr, 7, "%06x", num); rv = apr_file_open(fp, templ, APR_WRITE | APR_CREATE | APR_BINARY | APR_EXCL, APR_OS_DEFAULT, p); } while (APR_STATUS_IS_EEXIST(rv)); return rv; } static dav_error * dav_fs_open_stream(const dav_resource *resource, dav_stream_mode mode, dav_stream **stream) { apr_pool_t *p = resource->info->pool; dav_stream *ds = apr_pcalloc(p, sizeof(*ds)); apr_int32_t flags; apr_status_t rv; switch (mode) { default: flags = APR_READ | APR_BINARY; break; case DAV_MODE_WRITE_TRUNC: flags = APR_WRITE | APR_CREATE | APR_TRUNCATE | APR_BINARY; break; case DAV_MODE_WRITE_SEEKABLE: flags = APR_WRITE | APR_CREATE | APR_BINARY; break; } ds->p = p; ds->pathname = resource->info->pathname; ds->temppath = NULL; ds->unlink_on_error = 0; if (mode == DAV_MODE_WRITE_TRUNC) { ds->temppath = apr_pstrcat(p, ap_make_dirstr_parent(p, ds->pathname), DAV_FS_TMP_PREFIX "XXXXXX", NULL); rv = dav_fs_mktemp(&ds->f, ds->temppath, ds->p); apr_pool_cleanup_register(p, ds, tmpfile_cleanup, apr_pool_cleanup_null); } else if (mode == DAV_MODE_WRITE_SEEKABLE) { rv = apr_file_open(&ds->f, ds->pathname, flags | APR_FOPEN_EXCL, APR_OS_DEFAULT, ds->p); if (rv == APR_SUCCESS) { /* we have created a new file */ ds->unlink_on_error = 1; } else if (APR_STATUS_IS_EEXIST(rv)) { rv = apr_file_open(&ds->f, ds->pathname, flags, APR_OS_DEFAULT, ds->p); } } else { rv = apr_file_open(&ds->f, ds->pathname, flags, APR_OS_DEFAULT, ds->p); } if (rv != APR_SUCCESS) { return dav_new_error(p, MAP_IO2HTTP(rv), 0, rv, "An error occurred while opening a resource."); } /* (APR registers cleanups for the fd with the pool) */ *stream = ds; return NULL; } static dav_error * dav_fs_close_stream(dav_stream *stream, int commit) { apr_status_t rv; apr_file_close(stream->f); if (!commit) { if (stream->temppath) { apr_pool_cleanup_run(stream->p, stream, tmpfile_cleanup); } else if (stream->unlink_on_error) { if ((rv = apr_file_remove(stream->pathname, stream->p)) != APR_SUCCESS) { /* ### use a better description? */ return dav_new_error(stream->p, HTTP_INTERNAL_SERVER_ERROR, 0, rv, "There was a problem removing (rolling " "back) the resource " "when it was being closed."); } } } else if (stream->temppath) { rv = apr_file_rename(stream->temppath, stream->pathname, stream->p); if (rv) { return dav_new_error(stream->p, HTTP_INTERNAL_SERVER_ERROR, 0, rv, "There was a problem writing the file " "atomically after writes."); } apr_pool_cleanup_kill(stream->p, stream, tmpfile_cleanup); } return NULL; } static dav_error * dav_fs_write_stream(dav_stream *stream, const void *buf, apr_size_t bufsize) { apr_status_t status; status = apr_file_write_full(stream->f, buf, bufsize, NULL); if (APR_STATUS_IS_ENOSPC(status)) { return dav_new_error(stream->p, HTTP_INSUFFICIENT_STORAGE, 0, status, "There is not enough storage to write to " "this resource."); } else if (status != APR_SUCCESS) { /* ### use something besides 500? */ return dav_new_error(stream->p, HTTP_INTERNAL_SERVER_ERROR, 0, status, "An error occurred while writing to a " "resource."); } return NULL; } static dav_error * dav_fs_seek_stream(dav_stream *stream, apr_off_t abs_pos) { apr_status_t status; if ((status = apr_file_seek(stream->f, APR_SET, &abs_pos)) != APR_SUCCESS) { /* ### should check whether apr_file_seek set abs_pos was set to the * correct position? */ /* ### use something besides 500? */ return dav_new_error(stream->p, HTTP_INTERNAL_SERVER_ERROR, 0, status, "Could not seek to specified position in the " "resource."); } return NULL; } #if DEBUG_GET_HANDLER /* only define set_headers() and deliver() for debug purposes */ static dav_error * dav_fs_set_headers(request_rec *r, const dav_resource *resource) { /* ### this function isn't really used since we have a get_pathname */ if (!resource->exists) return NULL; /* make sure the proper mtime is in the request record */ ap_update_mtime(r, resource->info->finfo.mtime); /* ### note that these use r->filename rather than */ ap_set_last_modified(r); ap_set_etag(r); /* we accept byte-ranges */ ap_set_accept_ranges(r); /* set up the Content-Length header */ ap_set_content_length(r, resource->info->finfo.size); /* ### how to set the content type? */ /* ### until this is resolved, the Content-Type header is busted */ return NULL; } static dav_error * dav_fs_deliver(const dav_resource *resource, ap_filter_t *output) { apr_pool_t *pool = resource->pool; apr_bucket_brigade *bb; apr_file_t *fd; apr_status_t status; apr_bucket *bkt; /* Check resource type */ if (resource->type != DAV_RESOURCE_TYPE_REGULAR && resource->type != DAV_RESOURCE_TYPE_VERSION && resource->type != DAV_RESOURCE_TYPE_WORKING) { return dav_new_error(pool, HTTP_CONFLICT, 0, 0, "Cannot GET this type of resource."); } if (resource->collection) { return dav_new_error(pool, HTTP_CONFLICT, 0, 0, "There is no default response to GET for a " "collection."); } if ((status = apr_file_open(&fd, resource->info->pathname, APR_READ | APR_BINARY, 0, pool)) != APR_SUCCESS) { return dav_new_error(pool, HTTP_FORBIDDEN, 0, status, "File permissions deny server access."); } bb = apr_brigade_create(pool, output->c->bucket_alloc); apr_brigade_insert_file(bb, fd, 0, resource->info->finfo.size, pool); bkt = apr_bucket_eos_create(output->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, bkt); if ((status = ap_pass_brigade(output, bb)) != APR_SUCCESS) { return dav_new_error(pool, AP_FILTER_ERROR, 0, status, "Could not write contents to filter."); } return NULL; } #endif /* DEBUG_GET_HANDLER */ static dav_error * dav_fs_create_collection(dav_resource *resource) { dav_resource_private *ctx = resource->info; apr_status_t status; status = apr_dir_make(ctx->pathname, APR_OS_DEFAULT, ctx->pool); if (APR_STATUS_IS_ENOSPC(status)) { return dav_new_error(ctx->pool, HTTP_INSUFFICIENT_STORAGE, 0, status, "There is not enough storage to create " "this collection."); } else if (APR_STATUS_IS_ENOENT(status)) { return dav_new_error(ctx->pool, HTTP_CONFLICT, 0, status, "Cannot create collection; intermediate " "collection does not exist."); } else if (status != APR_SUCCESS) { /* ### refine this error message? */ return dav_new_error(ctx->pool, HTTP_FORBIDDEN, 0, status, "Unable to create collection."); } /* update resource state to show it exists as a collection */ resource->exists = 1; resource->collection = 1; return NULL; } static dav_error * dav_fs_copymove_walker(dav_walk_resource *wres, int calltype) { apr_status_t status; dav_fs_copymove_walk_ctx *ctx = wres->walk_ctx; dav_resource_private *srcinfo = wres->resource->info; dav_resource_private *dstinfo = ctx->res_dst->info; dav_error *err = NULL; if (wres->resource->collection) { if (calltype == DAV_CALLTYPE_POSTFIX) { /* Postfix call for MOVE. delete the source dir. * Note: when copying, we do not enable the postfix-traversal. */ /* ### we are ignoring any error here; what should we do? */ (void) apr_dir_remove(srcinfo->pathname, ctx->pool); } else { /* copy/move of a collection. Create the new, target collection */ if ((status = apr_dir_make(dstinfo->pathname, APR_OS_DEFAULT, ctx->pool)) != APR_SUCCESS) { /* ### assume it was a permissions problem */ /* ### need a description here */ err = dav_new_error(ctx->pool, HTTP_FORBIDDEN, 0, status, NULL); } } } else { err = dav_fs_copymove_file(ctx->is_move, ctx->pool, srcinfo->pathname, dstinfo->pathname, &srcinfo->finfo, ctx->res_dst->exists ? &dstinfo->finfo : NULL, &ctx->work_buf); /* ### push a higher-level description? */ } /* ** If we have a "not so bad" error, then it might need to go into a ** multistatus response. ** ** For a MOVE, it will always go into the multistatus. It could be ** that everything has been moved *except* for the root. Using a ** multistatus (with no errors for the other resources) will signify ** this condition. ** ** For a COPY, we are traversing in a prefix fashion. If the root fails, ** then we can just bail out now. */ if (err != NULL && !ap_is_HTTP_SERVER_ERROR(err->status) && (ctx->is_move || !dav_fs_is_same_resource(wres->resource, ctx->root))) { /* ### use errno to generate DAV:responsedescription? */ dav_add_response(wres, err->status, NULL); /* the error is in the multistatus now. do not stop the traversal. */ return NULL; } return err; } static dav_error *dav_fs_copymove_resource( int is_move, const dav_resource *src, const dav_resource *dst, int depth, dav_response **response) { dav_error *err = NULL; dav_buffer work_buf = { 0 }; *response = NULL; /* if a collection, recursively copy/move it and its children, * including the state dirs */ if (src->collection) { dav_walk_params params = { 0 }; dav_response *multi_status; params.walk_type = DAV_WALKTYPE_NORMAL | DAV_WALKTYPE_HIDDEN; params.func = dav_fs_copymove_walker; params.pool = src->info->pool; params.root = src; /* params.walk_ctx is managed by dav_fs_internal_walk() */ /* postfix is needed for MOVE to delete source dirs */ if (is_move) params.walk_type |= DAV_WALKTYPE_POSTFIX; /* note that we return the error OR the multistatus. never both */ if ((err = dav_fs_internal_walk(¶ms, depth, is_move, dst, &multi_status)) != NULL) { /* on a "real" error, then just punt. nothing else to do. */ return err; } if ((*response = multi_status) != NULL) { /* some multistatus responses exist. wrap them in a 207 */ return dav_new_error(src->info->pool, HTTP_MULTI_STATUS, 0, 0, "Error(s) occurred on some resources during " "the COPY/MOVE process."); } return NULL; } /* not a collection */ if ((err = dav_fs_copymove_file(is_move, src->info->pool, src->info->pathname, dst->info->pathname, &src->info->finfo, dst->exists ? &dst->info->finfo : NULL, &work_buf)) != NULL) { /* ### push a higher-level description? */ return err; } /* copy/move properties as well */ return dav_fs_copymoveset(is_move, src->info->pool, src, dst, &work_buf); } static dav_error * dav_fs_copy_resource( const dav_resource *src, dav_resource *dst, int depth, dav_response **response) { dav_error *err; #if DAV_DEBUG if (src->hooks != dst->hooks) { /* ** ### strictly speaking, this is a design error; we should not ** ### have reached this point. */ return dav_new_error(src->info->pool, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "DESIGN ERROR: a mix of repositories " "was passed to copy_resource."); } #endif if ((err = dav_fs_copymove_resource(0, src, dst, depth, response)) == NULL) { /* update state of destination resource to show it exists */ dst->exists = 1; dst->collection = src->collection; } return err; } static dav_error * dav_fs_move_resource( dav_resource *src, dav_resource *dst, dav_response **response) { dav_resource_private *srcinfo = src->info; dav_resource_private *dstinfo = dst->info; dav_error *err; apr_status_t rv; #if DAV_DEBUG if (src->hooks != dst->hooks) { /* ** ### strictly speaking, this is a design error; we should not ** ### have reached this point. */ return dav_new_error(src->info->pool, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "DESIGN ERROR: a mix of repositories " "was passed to move_resource."); } #endif /* try rename first */ rv = apr_file_rename(srcinfo->pathname, dstinfo->pathname, srcinfo->pool); /* if we can't simply rename, then do it the hard way... */ if (APR_STATUS_IS_EXDEV(rv)) { if ((err = dav_fs_copymove_resource(1, src, dst, DAV_INFINITY, response)) == NULL) { /* update resource states */ dst->exists = 1; dst->collection = src->collection; src->exists = 0; src->collection = 0; } return err; } /* no multistatus response */ *response = NULL; if (rv != APR_SUCCESS) { /* ### should have a better error than this. */ return dav_new_error(srcinfo->pool, HTTP_INTERNAL_SERVER_ERROR, 0, rv, "Could not rename resource."); } /* Rename did work. Update resource states and move properties as well */ dst->exists = 1; dst->collection = src->collection; src->exists = 0; src->collection = 0; if ((err = dav_fs_copymoveset(1, src->info->pool, src, dst, NULL)) == NULL) { /* no error. we're done. go ahead and return now. */ return NULL; } /* error occurred during properties move; try to put resource back */ if (apr_file_rename(dstinfo->pathname, srcinfo->pathname, srcinfo->pool) != APR_SUCCESS) { /* couldn't put it back! */ return dav_push_error(srcinfo->pool, HTTP_INTERNAL_SERVER_ERROR, 0, "The resource was moved, but a failure " "occurred during the move of its " "properties. The resource could not be " "restored to its original location. The " "server is now in an inconsistent state.", err); } /* update resource states again */ src->exists = 1; src->collection = dst->collection; dst->exists = 0; dst->collection = 0; /* resource moved back, but properties may be inconsistent */ return dav_push_error(srcinfo->pool, HTTP_INTERNAL_SERVER_ERROR, 0, "The resource was moved, but a failure " "occurred during the move of its properties. " "The resource was moved back to its original " "location, but its properties may have been " "partially moved. The server may be in an " "inconsistent state.", err); } static dav_error * dav_fs_delete_walker(dav_walk_resource *wres, int calltype) { dav_resource_private *info = wres->resource->info; /* do not attempt to remove a null resource, * or a collection with children */ if (wres->resource->exists && (!wres->resource->collection || calltype == DAV_CALLTYPE_POSTFIX)) { /* try to remove the resource */ apr_status_t result; result = wres->resource->collection ? apr_dir_remove(info->pathname, wres->pool) : apr_file_remove(info->pathname, wres->pool); /* ** If an error occurred, then add it to multistatus response. ** Note that we add it for the root resource, too. It is quite ** possible to delete the whole darn tree, yet fail on the root. ** ** (also: remember we are deleting via a postfix traversal) */ if (result != APR_SUCCESS) { /* ### assume there is a permissions problem */ /* ### use errno to generate DAV:responsedescription? */ dav_add_response(wres, HTTP_FORBIDDEN, NULL); } } return NULL; } static dav_error * dav_fs_remove_resource(dav_resource *resource, dav_response **response) { apr_status_t status; dav_resource_private *info = resource->info; *response = NULL; /* if a collection, recursively remove it and its children, * including the state dirs */ if (resource->collection) { dav_walk_params params = { 0 }; dav_error *err = NULL; dav_response *multi_status; params.walk_type = (DAV_WALKTYPE_NORMAL | DAV_WALKTYPE_HIDDEN | DAV_WALKTYPE_POSTFIX); params.func = dav_fs_delete_walker; params.pool = info->pool; params.root = resource; if ((err = dav_fs_walk(¶ms, DAV_INFINITY, &multi_status)) != NULL) { /* on a "real" error, then just punt. nothing else to do. */ return err; } if ((*response = multi_status) != NULL) { /* some multistatus responses exist. wrap them in a 207 */ return dav_new_error(info->pool, HTTP_MULTI_STATUS, 0, 0, "Error(s) occurred on some resources during " "the deletion process."); } /* no errors... update resource state */ resource->exists = 0; resource->collection = 0; return NULL; } /* not a collection; remove the file and its properties */ if ((status = apr_file_remove(info->pathname, info->pool)) != APR_SUCCESS) { /* ### put a description in here */ return dav_new_error(info->pool, HTTP_FORBIDDEN, 0, status, NULL); } /* update resource state */ resource->exists = 0; resource->collection = 0; /* remove properties and return its result */ return dav_fs_deleteset(info->pool, resource); } /* ### move this to dav_util? */ /* Walk recursively down through directories, * * including lock-null resources as we go. */ static dav_error * dav_fs_walker(dav_fs_walker_context *fsctx, int depth) { const dav_walk_params *params = fsctx->params; apr_pool_t *pool = params->pool; apr_status_t status; dav_error *err = NULL; int isdir = fsctx->res1.collection; apr_finfo_t dirent; apr_dir_t *dirp; /* ensure the context is prepared properly, then call the func */ err = (*params->func)(&fsctx->wres, isdir ? DAV_CALLTYPE_COLLECTION : DAV_CALLTYPE_MEMBER); if (err != NULL) { return err; } if (depth == 0 || !isdir) { return NULL; } /* put a trailing slash onto the directory, in preparation for appending * files to it as we discovery them within the directory */ dav_check_bufsize(pool, &fsctx->path1, DAV_BUFFER_PAD); fsctx->path1.buf[fsctx->path1.cur_len++] = '/'; fsctx->path1.buf[fsctx->path1.cur_len] = '\0'; /* in pad area */ /* if a secondary path is present, then do that, too */ if (fsctx->path2.buf != NULL) { dav_check_bufsize(pool, &fsctx->path2, DAV_BUFFER_PAD); fsctx->path2.buf[fsctx->path2.cur_len++] = '/'; fsctx->path2.buf[fsctx->path2.cur_len] = '\0'; /* in pad area */ } /* Note: the URI should ALREADY have a trailing "/" */ /* for this first pass of files, all resources exist */ fsctx->res1.exists = 1; /* a file is the default; we'll adjust if we hit a directory */ fsctx->res1.collection = 0; fsctx->res2.collection = 0; /* open and scan the directory */ if ((status = apr_dir_open(&dirp, fsctx->path1.buf, pool)) != APR_SUCCESS) { /* ### need a better error */ return dav_new_error(pool, HTTP_NOT_FOUND, 0, status, NULL); } while ((apr_dir_read(&dirent, APR_FINFO_DIRENT, dirp)) == APR_SUCCESS) { apr_size_t len; len = strlen(dirent.name); /* avoid recursing into our current, parent, or state directories */ if (dirent.name[0] == '.' && (len == 1 || (dirent.name[1] == '.' && len == 2))) { continue; } if (params->walk_type & DAV_WALKTYPE_AUTH) { /* ### need to authorize each file */ /* ### example: .htaccess is normally configured to fail auth */ /* stuff in the state directory and temp files are never authorized! */ if (!strcmp(dirent.name, DAV_FS_STATE_DIR) || !strncmp(dirent.name, DAV_FS_TMP_PREFIX, strlen(DAV_FS_TMP_PREFIX))) { continue; } } /* skip the state dir and temp files unless a HIDDEN is performed */ if (!(params->walk_type & DAV_WALKTYPE_HIDDEN) && (!strcmp(dirent.name, DAV_FS_STATE_DIR) || !strncmp(dirent.name, DAV_FS_TMP_PREFIX, strlen(DAV_FS_TMP_PREFIX)))) { continue; } /* append this file onto the path buffer (copy null term) */ dav_buffer_place_mem(pool, &fsctx->path1, dirent.name, len + 1, 0); status = apr_stat(&fsctx->info1.finfo, fsctx->path1.buf, DAV_FINFO_MASK, pool); if (status != APR_SUCCESS && status != APR_INCOMPLETE) { /* woah! where'd it go? */ /* ### should have a better error here */ err = dav_new_error(pool, HTTP_NOT_FOUND, 0, status, NULL); break; } /* copy the file to the URI, too. NOTE: we will pad an extra byte for the trailing slash later. */ dav_buffer_place_mem(pool, &fsctx->uri_buf, dirent.name, len + 1, 1); /* if there is a secondary path, then do that, too */ if (fsctx->path2.buf != NULL) { dav_buffer_place_mem(pool, &fsctx->path2, dirent.name, len + 1, 0); } /* set up the (internal) pathnames for the two resources */ fsctx->info1.pathname = fsctx->path1.buf; fsctx->info2.pathname = fsctx->path2.buf; /* set up the URI for the current resource */ fsctx->res1.uri = fsctx->uri_buf.buf; /* ### for now, only process regular files (e.g. skip symlinks) */ if (fsctx->info1.finfo.filetype == APR_REG) { /* call the function for the specified dir + file */ if ((err = (*params->func)(&fsctx->wres, DAV_CALLTYPE_MEMBER)) != NULL) { /* ### maybe add a higher-level description? */ break; } } else if (fsctx->info1.finfo.filetype == APR_DIR) { apr_size_t save_path_len = fsctx->path1.cur_len; apr_size_t save_uri_len = fsctx->uri_buf.cur_len; apr_size_t save_path2_len = fsctx->path2.cur_len; /* adjust length to incorporate the subdir name */ fsctx->path1.cur_len += len; fsctx->path2.cur_len += len; /* adjust URI length to incorporate subdir and a slash */ fsctx->uri_buf.cur_len += len + 1; fsctx->uri_buf.buf[fsctx->uri_buf.cur_len - 1] = '/'; fsctx->uri_buf.buf[fsctx->uri_buf.cur_len] = '\0'; /* switch over to a collection */ fsctx->res1.collection = 1; fsctx->res2.collection = 1; /* recurse on the subdir */ /* ### don't always want to quit on error from single child */ if ((err = dav_fs_walker(fsctx, depth - 1)) != NULL) { /* ### maybe add a higher-level description? */ break; } /* put the various information back */ fsctx->path1.cur_len = save_path_len; fsctx->path2.cur_len = save_path2_len; fsctx->uri_buf.cur_len = save_uri_len; fsctx->res1.collection = 0; fsctx->res2.collection = 0; /* assert: res1.exists == 1 */ } } /* ### check the return value of this? */ apr_dir_close(dirp); if (err != NULL) return err; if (params->walk_type & DAV_WALKTYPE_LOCKNULL) { apr_size_t offset = 0; /* null terminate the directory name */ fsctx->path1.buf[fsctx->path1.cur_len - 1] = '\0'; /* Include any lock null resources found in this collection */ fsctx->res1.collection = 1; if ((err = dav_fs_get_locknull_members(&fsctx->res1, &fsctx->locknull_buf)) != NULL) { /* ### maybe add a higher-level description? */ return err; } /* put a slash back on the end of the directory */ fsctx->path1.buf[fsctx->path1.cur_len - 1] = '/'; /* these are all non-existant (files) */ fsctx->res1.exists = 0; fsctx->res1.collection = 0; memset(&fsctx->info1.finfo, 0, sizeof(fsctx->info1.finfo)); while (offset < fsctx->locknull_buf.cur_len) { apr_size_t len = strlen(fsctx->locknull_buf.buf + offset); dav_lock *locks = NULL; /* ** Append the locknull file to the paths and the URI. Note that ** we don't have to pad the URI for a slash since a locknull ** resource is not a collection. */ dav_buffer_place_mem(pool, &fsctx->path1, fsctx->locknull_buf.buf + offset, len + 1, 0); dav_buffer_place_mem(pool, &fsctx->uri_buf, fsctx->locknull_buf.buf + offset, len + 1, 0); if (fsctx->path2.buf != NULL) { dav_buffer_place_mem(pool, &fsctx->path2, fsctx->locknull_buf.buf + offset, len + 1, 0); } /* set up the (internal) pathnames for the two resources */ fsctx->info1.pathname = fsctx->path1.buf; fsctx->info2.pathname = fsctx->path2.buf; /* set up the URI for the current resource */ fsctx->res1.uri = fsctx->uri_buf.buf; /* ** To prevent a PROPFIND showing an expired locknull ** resource, query the lock database to force removal ** of both the lock entry and .locknull, if necessary.. ** Sure, the query in PROPFIND would do this.. after ** the locknull resource was already included in the ** return. ** ** NOTE: we assume the caller has opened the lock database ** if they have provided DAV_WALKTYPE_LOCKNULL. */ /* ### we should also look into opening it read-only and ### eliding timed-out items from the walk, yet leaving ### them in the locknull database until somebody opens ### the thing writable. */ /* ### probably ought to use has_locks. note the problem ### mentioned above, though... we would traverse this as ### a locknull, but then a PROPFIND would load the lock ### info, causing a timeout and the locks would not be ### reported. Therefore, a null resource would be returned ### in the PROPFIND. ### ### alternative: just load unresolved locks. any direct ### locks will be timed out (correct). any indirect will ### not (correct; consider if a parent timed out -- the ### timeout routines do not walk and remove indirects; ### even the resolve func would probably fail when it ### tried to find a timed-out direct lock). */ if ((err = dav_lock_query(params->lockdb, &fsctx->res1, &locks)) != NULL) { /* ### maybe add a higher-level description? */ return err; } /* call the function for the specified dir + file */ if (locks != NULL && (err = (*params->func)(&fsctx->wres, DAV_CALLTYPE_LOCKNULL)) != NULL) { /* ### maybe add a higher-level description? */ return err; } offset += len + 1; } /* reset the exists flag */ fsctx->res1.exists = 1; } if (params->walk_type & DAV_WALKTYPE_POSTFIX) { /* replace the dirs' trailing slashes with null terms */ fsctx->path1.buf[--fsctx->path1.cur_len] = '\0'; fsctx->uri_buf.buf[--fsctx->uri_buf.cur_len] = '\0'; if (fsctx->path2.buf != NULL) { fsctx->path2.buf[--fsctx->path2.cur_len] = '\0'; } /* this is a collection which exists */ fsctx->res1.collection = 1; return (*params->func)(&fsctx->wres, DAV_CALLTYPE_POSTFIX); } return NULL; } static dav_error * dav_fs_internal_walk(const dav_walk_params *params, int depth, int is_move, const dav_resource *root_dst, dav_response **response) { dav_fs_walker_context fsctx = { 0 }; dav_error *err; dav_fs_copymove_walk_ctx cm_ctx = { 0 }; #if DAV_DEBUG if ((params->walk_type & DAV_WALKTYPE_LOCKNULL) != 0 && params->lockdb == NULL) { return dav_new_error(params->pool, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "DESIGN ERROR: walker called to walk locknull " "resources, but a lockdb was not provided."); } #endif fsctx.params = params; fsctx.wres.walk_ctx = params->walk_ctx; fsctx.wres.pool = params->pool; /* ### zero out versioned, working, baselined? */ fsctx.res1 = *params->root; fsctx.res1.pool = params->pool; fsctx.res1.info = &fsctx.info1; fsctx.info1 = *params->root->info; /* the pathname is stored in the path1 buffer */ dav_buffer_init(params->pool, &fsctx.path1, fsctx.info1.pathname); fsctx.info1.pathname = fsctx.path1.buf; if (root_dst != NULL) { /* internal call from the COPY/MOVE code. set it up. */ fsctx.wres.walk_ctx = &cm_ctx; cm_ctx.is_move = is_move; cm_ctx.res_dst = &fsctx.res2; cm_ctx.root = params->root; cm_ctx.pool = params->pool; fsctx.res2 = *root_dst; fsctx.res2.exists = 0; fsctx.res2.collection = 0; fsctx.res2.uri = NULL; /* we don't track this */ fsctx.res2.pool = params->pool; fsctx.res2.info = &fsctx.info2; fsctx.info2 = *root_dst->info; /* res2 does not exist -- clear its finfo structure */ memset(&fsctx.info2.finfo, 0, sizeof(fsctx.info2.finfo)); /* the pathname is stored in the path2 buffer */ dav_buffer_init(params->pool, &fsctx.path2, fsctx.info2.pathname); fsctx.info2.pathname = fsctx.path2.buf; } /* prep the URI buffer */ dav_buffer_init(params->pool, &fsctx.uri_buf, params->root->uri); /* if we have a directory, then ensure the URI has a trailing "/" */ if (fsctx.res1.collection && fsctx.uri_buf.buf[fsctx.uri_buf.cur_len - 1] != '/') { /* this will fall into the pad area */ fsctx.uri_buf.buf[fsctx.uri_buf.cur_len++] = '/'; fsctx.uri_buf.buf[fsctx.uri_buf.cur_len] = '\0'; } /* the current resource's URI is stored in the uri_buf buffer */ fsctx.res1.uri = fsctx.uri_buf.buf; /* point the callback's resource at our structure */ fsctx.wres.resource = &fsctx.res1; /* always return the error, and any/all multistatus responses */ err = dav_fs_walker(&fsctx, depth); *response = fsctx.wres.response; return err; } static dav_error * dav_fs_walk(const dav_walk_params *params, int depth, dav_response **response) { /* always return the error, and any/all multistatus responses */ return dav_fs_internal_walk(params, depth, 0, NULL, response); } /* dav_fs_etag: Stolen from ap_make_etag. Creates a strong etag * for file path. * ### do we need to return weak tags sometimes? */ static const char *dav_fs_getetag(const dav_resource *resource) { dav_resource_private *ctx = resource->info; /* XXX: This should really honor the FileETag setting */ if (!resource->exists) return apr_pstrdup(ctx->pool, ""); if (ctx->finfo.filetype != APR_NOFILE) { return apr_psprintf(ctx->pool, "\"%" APR_UINT64_T_HEX_FMT "-%" APR_UINT64_T_HEX_FMT "\"", (apr_uint64_t) ctx->finfo.size, (apr_uint64_t) ctx->finfo.mtime); } return apr_psprintf(ctx->pool, "\"%" APR_UINT64_T_HEX_FMT "\"", (apr_uint64_t) ctx->finfo.mtime); } static const dav_hooks_repository dav_hooks_repository_fs = { DEBUG_GET_HANDLER, /* normally: special GET handling not required */ dav_fs_get_resource, dav_fs_get_parent_resource, dav_fs_is_same_resource, dav_fs_is_parent_resource, dav_fs_open_stream, dav_fs_close_stream, dav_fs_write_stream, dav_fs_seek_stream, #if DEBUG_GET_HANDLER dav_fs_set_headers, dav_fs_deliver, #else NULL, NULL, #endif dav_fs_create_collection, dav_fs_copy_resource, dav_fs_move_resource, dav_fs_remove_resource, dav_fs_walk, dav_fs_getetag, NULL, dav_fs_get_request_rec, dav_fs_pathname }; static dav_prop_insert dav_fs_insert_prop(const dav_resource *resource, int propid, dav_prop_insert what, apr_text_header *phdr) { const char *value; const char *s; apr_pool_t *p = resource->info->pool; const dav_liveprop_spec *info; int global_ns; /* an HTTP-date can be 29 chars plus a null term */ /* a 64-bit size can be 20 chars plus a null term */ char buf[DAV_TIMEBUF_SIZE]; /* ** None of FS provider properties are defined if the resource does not ** exist. Just bail for this case. ** ** Even though we state that the FS properties are not defined, the ** client cannot store dead values -- we deny that thru the is_writable ** hook function. */ if (!resource->exists) return DAV_PROP_INSERT_NOTDEF; switch (propid) { case DAV_PROPID_creationdate: /* ** Closest thing to a creation date. since we don't actually ** perform the operations that would modify ctime (after we ** create the file), then we should be pretty safe here. */ dav_format_time(DAV_STYLE_ISO8601, resource->info->finfo.ctime, buf, sizeof(buf)); value = buf; break; case DAV_PROPID_getcontentlength: /* our property, but not defined on collection resources */ if (resource->collection) return DAV_PROP_INSERT_NOTDEF; apr_snprintf(buf, sizeof(buf), "%" APR_OFF_T_FMT, resource->info->finfo.size); value = buf; break; case DAV_PROPID_getetag: value = dav_fs_getetag(resource); break; case DAV_PROPID_getlastmodified: dav_format_time(DAV_STYLE_RFC822, resource->info->finfo.mtime, buf, sizeof(buf)); value = buf; break; case DAV_PROPID_FS_executable: /* our property, but not defined on collection resources */ if (resource->collection) return DAV_PROP_INSERT_NOTDEF; /* our property, but not defined on this platform */ if (!(resource->info->finfo.valid & APR_FINFO_UPROT)) return DAV_PROP_INSERT_NOTDEF; /* the files are "ours" so we only need to check owner exec privs */ if (resource->info->finfo.protection & APR_UEXECUTE) value = "T"; else value = "F"; break; default: /* ### what the heck was this property? */ return DAV_PROP_INSERT_NOTDEF; } /* assert: value != NULL */ /* get the information and global NS index for the property */ global_ns = dav_get_liveprop_info(propid, &dav_fs_liveprop_group, &info); /* assert: info != NULL && info->name != NULL */ /* DBG3("FS: inserting lp%d:%s (local %d)", ns, scan->name, scan->ns); */ if (what == DAV_PROP_INSERT_VALUE) { s = apr_psprintf(p, "%s" DEBUG_CR, global_ns, info->name, value, global_ns, info->name); } else if (what == DAV_PROP_INSERT_NAME) { s = apr_psprintf(p, "" DEBUG_CR, global_ns, info->name); } else { /* assert: what == DAV_PROP_INSERT_SUPPORTED */ s = apr_psprintf(p, "" DEBUG_CR, info->name, dav_fs_namespace_uris[info->ns]); } apr_text_append(p, phdr, s); /* we inserted what was asked for */ return what; } static int dav_fs_is_writable(const dav_resource *resource, int propid) { const dav_liveprop_spec *info; #ifdef DAV_FS_HAS_EXECUTABLE /* if we have the executable property, and this isn't a collection, then the property is writable. */ if (propid == DAV_PROPID_FS_executable && !resource->collection) return 1; #endif (void) dav_get_liveprop_info(propid, &dav_fs_liveprop_group, &info); return info->is_writable; } static dav_error *dav_fs_patch_validate(const dav_resource *resource, const apr_xml_elem *elem, int operation, void **context, int *defer_to_dead) { const apr_text *cdata; const apr_text *f_cdata; char value; dav_elem_private *priv = elem->priv; if (priv->propid != DAV_PROPID_FS_executable) { *defer_to_dead = 1; return NULL; } if (operation == DAV_PROP_OP_DELETE) { return dav_new_error(resource->info->pool, HTTP_CONFLICT, 0, 0, "The 'executable' property cannot be removed."); } cdata = elem->first_cdata.first; /* ### hmm. this isn't actually looking at all the possible text items */ f_cdata = elem->first_child == NULL ? NULL : elem->first_child->following_cdata.first; /* DBG3("name=%s cdata=%s f_cdata=%s",elem->name,cdata ? cdata->text : "[null]",f_cdata ? f_cdata->text : "[null]"); */ if (cdata == NULL) { if (f_cdata == NULL) { return dav_new_error(resource->info->pool, HTTP_CONFLICT, 0, 0, "The 'executable' property expects a single " "character, valued 'T' or 'F'. There was no " "value submitted."); } cdata = f_cdata; } else if (f_cdata != NULL) goto too_long; if (cdata->next != NULL || strlen(cdata->text) != 1) goto too_long; value = cdata->text[0]; if (value != 'T' && value != 'F') { return dav_new_error(resource->info->pool, HTTP_CONFLICT, 0, 0, "The 'executable' property expects a single " "character, valued 'T' or 'F'. The value " "submitted is invalid."); } *context = (void *)((long)(value == 'T')); return NULL; too_long: return dav_new_error(resource->info->pool, HTTP_CONFLICT, 0, 0, "The 'executable' property expects a single " "character, valued 'T' or 'F'. The value submitted " "has too many characters."); } static dav_error *dav_fs_patch_exec(const dav_resource *resource, const apr_xml_elem *elem, int operation, void *context, dav_liveprop_rollback **rollback_ctx) { long value = context != NULL; apr_fileperms_t perms = resource->info->finfo.protection; apr_status_t status; long old_value = (perms & APR_UEXECUTE) != 0; /* assert: prop == executable. operation == SET. */ /* don't do anything if there is no change. no rollback info either. */ /* DBG2("new value=%d (old=%d)", value, old_value); */ if (value == old_value) return NULL; perms &= ~APR_UEXECUTE; if (value) perms |= APR_UEXECUTE; if ((status = apr_file_perms_set(resource->info->pathname, perms)) != APR_SUCCESS) { return dav_new_error(resource->info->pool, HTTP_INTERNAL_SERVER_ERROR, 0, status, "Could not set the executable flag of the " "target resource."); } /* update the resource and set up the rollback context */ resource->info->finfo.protection = perms; *rollback_ctx = (dav_liveprop_rollback *)old_value; return NULL; } static void dav_fs_patch_commit(const dav_resource *resource, int operation, void *context, dav_liveprop_rollback *rollback_ctx) { /* nothing to do */ } static dav_error *dav_fs_patch_rollback(const dav_resource *resource, int operation, void *context, dav_liveprop_rollback *rollback_ctx) { apr_fileperms_t perms = resource->info->finfo.protection & ~APR_UEXECUTE; apr_status_t status; int value = rollback_ctx != NULL; /* assert: prop == executable. operation == SET. */ /* restore the executable bit */ if (value) perms |= APR_UEXECUTE; if ((status = apr_file_perms_set(resource->info->pathname, perms)) != APR_SUCCESS) { return dav_new_error(resource->info->pool, HTTP_INTERNAL_SERVER_ERROR, 0, status, "After a failure occurred, the resource's " "executable flag could not be restored."); } /* restore the resource's state */ resource->info->finfo.protection = perms; return NULL; } static const dav_hooks_liveprop dav_hooks_liveprop_fs = { dav_fs_insert_prop, dav_fs_is_writable, dav_fs_namespace_uris, dav_fs_patch_validate, dav_fs_patch_exec, dav_fs_patch_commit, dav_fs_patch_rollback }; static const dav_provider dav_fs_provider = { &dav_hooks_repository_fs, &dav_hooks_db_dbm, &dav_hooks_locks_fs, NULL, /* vsn */ NULL, /* binding */ NULL, /* search */ NULL /* ctx */ }; void dav_fs_gather_propsets(apr_array_header_t *uris) { #ifdef DAV_FS_HAS_EXECUTABLE *(const char **)apr_array_push(uris) = ""; #endif } int dav_fs_find_liveprop(const dav_resource *resource, const char *ns_uri, const char *name, const dav_hooks_liveprop **hooks) { /* don't try to find any liveprops if this isn't "our" resource */ if (resource->hooks != &dav_hooks_repository_fs) return 0; return dav_do_find_liveprop(ns_uri, name, &dav_fs_liveprop_group, hooks); } void dav_fs_insert_all_liveprops(request_rec *r, const dav_resource *resource, dav_prop_insert what, apr_text_header *phdr) { /* don't insert any liveprops if this isn't "our" resource */ if (resource->hooks != &dav_hooks_repository_fs) return; if (!resource->exists) { /* a lock-null resource */ /* ** ### technically, we should insert empty properties. dunno offhand ** ### what part of the spec said this, but it was essentially thus: ** ### "the properties should be defined, but may have no value". */ return; } (void) dav_fs_insert_prop(resource, DAV_PROPID_creationdate, what, phdr); (void) dav_fs_insert_prop(resource, DAV_PROPID_getcontentlength, what, phdr); (void) dav_fs_insert_prop(resource, DAV_PROPID_getlastmodified, what, phdr); (void) dav_fs_insert_prop(resource, DAV_PROPID_getetag, what, phdr); #ifdef DAV_FS_HAS_EXECUTABLE /* Only insert this property if it is defined for this platform. */ (void) dav_fs_insert_prop(resource, DAV_PROPID_FS_executable, what, phdr); #endif /* ### we know the others aren't defined as liveprops */ } void dav_fs_register(apr_pool_t *p) { /* register the namespace URIs */ dav_register_liveprop_group(p, &dav_fs_liveprop_group); /* register the repository provider */ dav_register_provider(p, "filesystem", &dav_fs_provider); } httpd-2.4.41/modules/dav/fs/config6.m40000644000000000000500000000111311707053320015655 0ustar rootsrcdnl modules enabled in this directory by default APACHE_MODPATH_INIT(dav/fs) dav_fs_objects="mod_dav_fs.lo dbm.lo lock.lo repos.lo" if test "x$enable_dav" != "x"; then dav_fs_enable=$enable_dav else dav_fs_enable=$dav_enable fi case "$host" in *os2*) # OS/2 DLLs must resolve all symbols at build time # and we need some from main DAV module dav_fs_objects="$dav_fs_objects ../main/mod_dav.la" ;; esac APACHE_MODULE(dav_fs, DAV provider for the filesystem. --enable-dav also enables mod_dav_fs., $dav_fs_objects, , $dav_fs_enable,,dav) APACHE_MODPATH_FINISH httpd-2.4.41/modules/dav/fs/dbm.c0000644000000000000500000005442612150464534015013 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* ** DAV extension module for Apache 2.0.* ** - Database support using DBM-style databases, ** part of the filesystem repository implementation */ /* ** This implementation uses a SDBM database per file and directory to ** record the properties. These databases are kept in a subdirectory (of ** the directory in question or the directory that holds the file in ** question) named by the macro DAV_FS_STATE_DIR (.DAV). The filename of the ** database is equivalent to the target filename, and is ** DAV_FS_STATE_FILE_FOR_DIR (.state_for_dir) for the directory itself. */ #include "apr_strings.h" #include "apr_file_io.h" #include "apr_dbm.h" #define APR_WANT_BYTEFUNC #include "apr_want.h" /* for ntohs and htons */ #include "mod_dav.h" #include "repos.h" #include "http_log.h" #include "http_main.h" /* for ap_server_conf */ APLOG_USE_MODULE(dav_fs); struct dav_db { apr_pool_t *pool; apr_dbm_t *file; /* when used as a property database: */ int version; /* *minor* version of this db */ dav_buffer ns_table; /* table of namespace URIs */ short ns_count; /* number of entries in table */ int ns_table_dirty; /* ns_table was modified */ apr_hash_t *uri_index; /* map URIs to (1-based) table indices */ dav_buffer wb_key; /* work buffer for dav_gdbm_key */ apr_datum_t iter; /* iteration key */ }; /* ------------------------------------------------------------------------- * * GENERIC DBM ACCESS * * For the most part, this just uses the APR DBM functions. They are wrapped * a bit with some error handling (using the mod_dav error functions). */ void dav_dbm_get_statefiles(apr_pool_t *p, const char *fname, const char **state1, const char **state2) { if (fname == NULL) fname = DAV_FS_STATE_FILE_FOR_DIR; apr_dbm_get_usednames(p, fname, state1, state2); } static dav_error * dav_fs_dbm_error(dav_db *db, apr_pool_t *p, apr_status_t status) { int errcode; const char *errstr; dav_error *err; char errbuf[200]; if (status == APR_SUCCESS) return NULL; p = db ? db->pool : p; /* There might not be a if we had problems creating it. */ if (db == NULL) { errcode = 1; errstr = "Could not open property database."; if (APR_STATUS_IS_EDSOOPEN(status)) ap_log_error(APLOG_MARK, APLOG_CRIT, status, ap_server_conf, APLOGNO(00576) "The DBM driver could not be loaded"); } else { (void) apr_dbm_geterror(db->file, &errcode, errbuf, sizeof(errbuf)); errstr = apr_pstrdup(p, errbuf); } err = dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, errcode, status, errstr); return err; } /* ensure that our state subdirectory is present */ /* ### does this belong here or in dav_fs_repos.c ?? */ void dav_fs_ensure_state_dir(apr_pool_t * p, const char *dirname) { const char *pathname = apr_pstrcat(p, dirname, "/" DAV_FS_STATE_DIR, NULL); /* ### do we need to deal with the umask? */ /* just try to make it, ignoring any resulting errors */ (void) apr_dir_make(pathname, APR_OS_DEFAULT, p); } /* dav_dbm_open_direct: Opens a *dbm database specified by path. * ro = boolean read-only flag. */ dav_error * dav_dbm_open_direct(apr_pool_t *p, const char *pathname, int ro, dav_db **pdb) { apr_status_t status; apr_dbm_t *file = NULL; *pdb = NULL; if ((status = apr_dbm_open(&file, pathname, ro ? APR_DBM_READONLY : APR_DBM_RWCREATE, APR_OS_DEFAULT, p)) != APR_SUCCESS && !ro) { /* ### do something with 'status' */ /* we can't continue if we couldn't open the file and we need to write */ return dav_fs_dbm_error(NULL, p, status); } /* may be NULL if we tried to open a non-existent db as read-only */ if (file != NULL) { /* we have an open database... return it */ *pdb = apr_pcalloc(p, sizeof(**pdb)); (*pdb)->pool = p; (*pdb)->file = file; } return NULL; } static dav_error * dav_dbm_open(apr_pool_t * p, const dav_resource *resource, int ro, dav_db **pdb) { const char *dirpath; const char *fname; const char *pathname; /* Get directory and filename for resource */ /* ### should test this result value... */ (void) dav_fs_dir_file_name(resource, &dirpath, &fname); /* If not opening read-only, ensure the state dir exists */ if (!ro) { /* ### what are the perf implications of always checking this? */ dav_fs_ensure_state_dir(p, dirpath); } pathname = apr_pstrcat(p, dirpath, "/" DAV_FS_STATE_DIR "/", fname ? fname : DAV_FS_STATE_FILE_FOR_DIR, NULL); /* ### readers cannot open while a writer has this open; we should ### perform a few retries with random pauses. */ /* ### do we need to deal with the umask? */ return dav_dbm_open_direct(p, pathname, ro, pdb); } void dav_dbm_close(dav_db *db) { apr_dbm_close(db->file); } dav_error * dav_dbm_fetch(dav_db *db, apr_datum_t key, apr_datum_t *pvalue) { apr_status_t status; if (!key.dptr) { /* no key could be created (namespace not known) => no value */ memset(pvalue, 0, sizeof(*pvalue)); status = APR_SUCCESS; } else { status = apr_dbm_fetch(db->file, key, pvalue); } return dav_fs_dbm_error(db, NULL, status); } dav_error * dav_dbm_store(dav_db *db, apr_datum_t key, apr_datum_t value) { apr_status_t status = apr_dbm_store(db->file, key, value); return dav_fs_dbm_error(db, NULL, status); } dav_error * dav_dbm_delete(dav_db *db, apr_datum_t key) { apr_status_t status = apr_dbm_delete(db->file, key); return dav_fs_dbm_error(db, NULL, status); } int dav_dbm_exists(dav_db *db, apr_datum_t key) { return apr_dbm_exists(db->file, key); } static dav_error * dav_dbm_firstkey(dav_db *db, apr_datum_t *pkey) { apr_status_t status = apr_dbm_firstkey(db->file, pkey); return dav_fs_dbm_error(db, NULL, status); } static dav_error * dav_dbm_nextkey(dav_db *db, apr_datum_t *pkey) { apr_status_t status = apr_dbm_nextkey(db->file, pkey); return dav_fs_dbm_error(db, NULL, status); } void dav_dbm_freedatum(dav_db *db, apr_datum_t data) { apr_dbm_freedatum(db->file, data); } /* ------------------------------------------------------------------------- * * PROPERTY DATABASE FUNCTIONS */ #define DAV_GDBM_NS_KEY "METADATA" #define DAV_GDBM_NS_KEY_LEN 8 typedef struct { unsigned char major; #define DAV_DBVSN_MAJOR 4 /* ** V4 -- 0.9.9 .. ** Prior versions could have keys or values with invalid ** namespace prefixes as a result of the xmlns="" form not ** resetting the default namespace to be "no namespace". The ** namespace would be set to "" which is invalid; it should ** be set to "no namespace". ** ** V3 -- 0.9.8 ** Prior versions could have values with invalid namespace ** prefixes due to an incorrect mapping of input to propdb ** namespace indices. Version bumped to obsolete the old ** values. ** ** V2 -- 0.9.7 ** This introduced the xml:lang value into the property value's ** record in the propdb. ** ** V1 -- .. 0.9.6 ** Initial version. */ unsigned char minor; #define DAV_DBVSN_MINOR 0 short ns_count; } dav_propdb_metadata; struct dav_deadprop_rollback { apr_datum_t key; apr_datum_t value; }; struct dav_namespace_map { int *ns_map; }; /* ** Internal function to build a key ** ** WARNING: returns a pointer to a "static" buffer holding the key. The ** value must be copied or no longer used if this function is ** called again. */ static apr_datum_t dav_build_key(dav_db *db, const dav_prop_name *name) { char nsbuf[20]; apr_size_t l_ns, l_name = strlen(name->name); apr_datum_t key = { 0 }; /* * Convert namespace ID to a string. "no namespace" is an empty string, * so the keys will have the form ":name". Otherwise, the keys will * have the form "#:name". */ if (*name->ns == '\0') { nsbuf[0] = '\0'; l_ns = 0; } else { long ns_id = (long)apr_hash_get(db->uri_index, name->ns, APR_HASH_KEY_STRING); if (ns_id == 0) { /* the namespace was not found(!) */ return key; /* zeroed */ } l_ns = apr_snprintf(nsbuf, sizeof(nsbuf), "%ld", ns_id - 1); } /* assemble: #:name */ dav_set_bufsize(db->pool, &db->wb_key, l_ns + 1 + l_name + 1); memcpy(db->wb_key.buf, nsbuf, l_ns); db->wb_key.buf[l_ns] = ':'; memcpy(&db->wb_key.buf[l_ns + 1], name->name, l_name + 1); /* build the database key */ key.dsize = l_ns + 1 + l_name + 1; key.dptr = db->wb_key.buf; return key; } static void dav_append_prop(apr_pool_t *pool, const char *name, const char *value, apr_text_header *phdr) { const char *s; const char *lang = value; /* skip past the xml:lang value */ value += strlen(lang) + 1; if (*value == '\0') { /* the property is an empty value */ if (*name == ':') { /* "no namespace" case */ s = apr_psprintf(pool, "<%s/>" DEBUG_CR, name+1); } else { s = apr_psprintf(pool, "" DEBUG_CR, name); } } else if (*lang != '\0') { if (*name == ':') { /* "no namespace" case */ s = apr_psprintf(pool, "<%s xml:lang=\"%s\">%s" DEBUG_CR, name+1, lang, value, name+1); } else { s = apr_psprintf(pool, "%s" DEBUG_CR, name, lang, value, name); } } else if (*name == ':') { /* "no namespace" case */ s = apr_psprintf(pool, "<%s>%s" DEBUG_CR, name+1, value, name+1); } else { s = apr_psprintf(pool, "%s" DEBUG_CR, name, value, name); } apr_text_append(pool, phdr, s); } static dav_error * dav_propdb_open(apr_pool_t *pool, const dav_resource *resource, int ro, dav_db **pdb) { dav_db *db; dav_error *err; apr_datum_t key; apr_datum_t value = { 0 }; *pdb = NULL; /* ** Return if an error occurred, or there is no database. ** ** NOTE: db could be NULL if we attempted to open a readonly ** database that doesn't exist. If we require read/write ** access, then a database was created and opened. */ if ((err = dav_dbm_open(pool, resource, ro, &db)) != NULL || db == NULL) return err; db->uri_index = apr_hash_make(pool); key.dptr = DAV_GDBM_NS_KEY; key.dsize = DAV_GDBM_NS_KEY_LEN; if ((err = dav_dbm_fetch(db, key, &value)) != NULL) { /* ### push a higher-level description? */ return err; } if (value.dptr == NULL) { dav_propdb_metadata m = { DAV_DBVSN_MAJOR, DAV_DBVSN_MINOR, 0 }; /* ** If there is no METADATA key, then the database may be ** from versions 0.9.0 .. 0.9.4 (which would be incompatible). ** These can be identified by the presence of an NS_TABLE entry. */ key.dptr = "NS_TABLE"; key.dsize = 8; if (dav_dbm_exists(db, key)) { dav_dbm_close(db); /* call it a major version error */ return dav_new_error(pool, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_PROP_BAD_MAJOR, 0, "Prop database has the wrong major " "version number and cannot be used."); } /* initialize a new metadata structure */ dav_set_bufsize(pool, &db->ns_table, sizeof(m)); memcpy(db->ns_table.buf, &m, sizeof(m)); } else { dav_propdb_metadata m; long ns; const char *uri; dav_set_bufsize(pool, &db->ns_table, value.dsize); memcpy(db->ns_table.buf, value.dptr, value.dsize); memcpy(&m, value.dptr, sizeof(m)); if (m.major != DAV_DBVSN_MAJOR) { dav_dbm_close(db); return dav_new_error(pool, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_PROP_BAD_MAJOR, 0, "Prop database has the wrong major " "version number and cannot be used."); } db->version = m.minor; db->ns_count = ntohs(m.ns_count); dav_dbm_freedatum(db, value); /* create db->uri_index */ for (ns = 0, uri = db->ns_table.buf + sizeof(dav_propdb_metadata); ns++ < db->ns_count; uri += strlen(uri) + 1) { /* we must copy the key, in case ns_table.buf moves */ apr_hash_set(db->uri_index, apr_pstrdup(pool, uri), APR_HASH_KEY_STRING, (void *)ns); } } *pdb = db; return NULL; } static void dav_propdb_close(dav_db *db) { if (db->ns_table_dirty) { dav_propdb_metadata m; apr_datum_t key; apr_datum_t value; dav_error *err; key.dptr = DAV_GDBM_NS_KEY; key.dsize = DAV_GDBM_NS_KEY_LEN; value.dptr = db->ns_table.buf; value.dsize = db->ns_table.cur_len; /* fill in the metadata that we store into the prop db. */ m.major = DAV_DBVSN_MAJOR; m.minor = db->version; /* ### keep current minor version? */ m.ns_count = htons(db->ns_count); memcpy(db->ns_table.buf, &m, sizeof(m)); err = dav_dbm_store(db, key, value); if (err != NULL) ap_log_error(APLOG_MARK, APLOG_WARNING, err->aprerr, ap_server_conf, APLOGNO(00577) "Error writing propdb: %s", err->desc); } dav_dbm_close(db); } static dav_error * dav_propdb_define_namespaces(dav_db *db, dav_xmlns_info *xi) { int ns; const char *uri = db->ns_table.buf + sizeof(dav_propdb_metadata); /* within the prop values, we use "ns%d" for prefixes... register them */ for (ns = 0; ns < db->ns_count; ++ns, uri += strlen(uri) + 1) { /* Empty URIs signify the empty namespace. These do not get a namespace prefix. when we generate the value, we will simply leave off the prefix, which is defined by mod_dav to be the empty namespace. */ if (*uri == '\0') continue; /* ns_table.buf can move, so copy its value (we want the values to last as long as the provided dav_xmlns_info). */ dav_xmlns_add(xi, apr_psprintf(xi->pool, "ns%d", ns), apr_pstrdup(xi->pool, uri)); } return NULL; } static dav_error * dav_propdb_output_value(dav_db *db, const dav_prop_name *name, dav_xmlns_info *xi, apr_text_header *phdr, int *found) { apr_datum_t key = dav_build_key(db, name); apr_datum_t value; dav_error *err; if ((err = dav_dbm_fetch(db, key, &value)) != NULL) return err; if (value.dptr == NULL) { *found = 0; return NULL; } *found = 1; dav_append_prop(db->pool, key.dptr, value.dptr, phdr); dav_dbm_freedatum(db, value); return NULL; } static dav_error * dav_propdb_map_namespaces( dav_db *db, const apr_array_header_t *namespaces, dav_namespace_map **mapping) { dav_namespace_map *m = apr_palloc(db->pool, sizeof(*m)); int i; int *pmap; const char **puri; /* ** Iterate over the provided namespaces. If a namespace already appears ** in our internal map of URI -> ns_id, then store that in the map. If ** we don't know the namespace yet, then add it to the map and to our ** table of known namespaces. */ m->ns_map = pmap = apr_palloc(db->pool, namespaces->nelts * sizeof(*pmap)); for (i = namespaces->nelts, puri = (const char **)namespaces->elts; i-- > 0; ++puri, ++pmap) { const char *uri = *puri; apr_size_t uri_len = strlen(uri); long ns_id = (long)apr_hash_get(db->uri_index, uri, uri_len); if (ns_id == 0) { dav_check_bufsize(db->pool, &db->ns_table, uri_len + 1); memcpy(db->ns_table.buf + db->ns_table.cur_len, uri, uri_len + 1); db->ns_table.cur_len += uri_len + 1; /* copy the uri in case the passed-in namespaces changes in some way. */ apr_hash_set(db->uri_index, apr_pstrdup(db->pool, uri), uri_len, (void *)((long)(db->ns_count + 1))); db->ns_table_dirty = 1; *pmap = db->ns_count++; } else { *pmap = ns_id - 1; } } *mapping = m; return NULL; } static dav_error * dav_propdb_store(dav_db *db, const dav_prop_name *name, const apr_xml_elem *elem, dav_namespace_map *mapping) { apr_datum_t key = dav_build_key(db, name); apr_datum_t value; /* Note: mapping->ns_map was set up in dav_propdb_map_namespaces() */ /* ### use a db- subpool for these values? clear on exit? */ /* quote all the values in the element */ /* ### be nice to do this without affecting the element itself */ /* ### of course, the cast indicates Badness is occurring here */ apr_xml_quote_elem(db->pool, (apr_xml_elem *)elem); /* generate a text blob for the xml:lang plus the contents */ apr_xml_to_text(db->pool, elem, APR_XML_X2T_LANG_INNER, NULL, mapping->ns_map, (const char **)&value.dptr, &value.dsize); return dav_dbm_store(db, key, value); } static dav_error * dav_propdb_remove(dav_db *db, const dav_prop_name *name) { apr_datum_t key = dav_build_key(db, name); return dav_dbm_delete(db, key); } static int dav_propdb_exists(dav_db *db, const dav_prop_name *name) { apr_datum_t key = dav_build_key(db, name); return dav_dbm_exists(db, key); } static const char *dav_get_ns_table_uri(dav_db *db, int ns_id) { const char *p = db->ns_table.buf + sizeof(dav_propdb_metadata); while (ns_id--) p += strlen(p) + 1; return p; } static void dav_set_name(dav_db *db, dav_prop_name *pname) { const char *s = db->iter.dptr; if (s == NULL) { pname->ns = pname->name = NULL; } else if (*s == ':') { pname->ns = ""; pname->name = s + 1; } else { int id = atoi(s); pname->ns = dav_get_ns_table_uri(db, id); if (s[1] == ':') { pname->name = s + 2; } else { pname->name = ap_strchr_c(s + 2, ':') + 1; } } } static dav_error * dav_propdb_next_name(dav_db *db, dav_prop_name *pname) { dav_error *err; /* free the previous key. note: if the loop is aborted, then the DBM will toss the key (via pool cleanup) */ if (db->iter.dptr != NULL) dav_dbm_freedatum(db, db->iter); if ((err = dav_dbm_nextkey(db, &db->iter)) != NULL) return err; /* skip past the METADATA key */ if (db->iter.dptr != NULL && *db->iter.dptr == 'M') return dav_propdb_next_name(db, pname); dav_set_name(db, pname); return NULL; } static dav_error * dav_propdb_first_name(dav_db *db, dav_prop_name *pname) { dav_error *err; if ((err = dav_dbm_firstkey(db, &db->iter)) != NULL) return err; /* skip past the METADATA key */ if (db->iter.dptr != NULL && *db->iter.dptr == 'M') return dav_propdb_next_name(db, pname); dav_set_name(db, pname); return NULL; } static dav_error * dav_propdb_get_rollback(dav_db *db, const dav_prop_name *name, dav_deadprop_rollback **prollback) { dav_deadprop_rollback *rb = apr_pcalloc(db->pool, sizeof(*rb)); apr_datum_t key; apr_datum_t value; dav_error *err; key = dav_build_key(db, name); rb->key.dptr = apr_pstrdup(db->pool, key.dptr); rb->key.dsize = key.dsize; if ((err = dav_dbm_fetch(db, key, &value)) != NULL) return err; if (value.dptr != NULL) { rb->value.dptr = apr_pmemdup(db->pool, value.dptr, value.dsize); rb->value.dsize = value.dsize; } *prollback = rb; return NULL; } static dav_error * dav_propdb_apply_rollback(dav_db *db, dav_deadprop_rollback *rollback) { if (!rollback) { return NULL; /* no rollback, nothing to do */ } if (rollback->value.dptr == NULL) { /* don't fail if the thing isn't really there. */ (void) dav_dbm_delete(db, rollback->key); return NULL; } return dav_dbm_store(db, rollback->key, rollback->value); } const dav_hooks_db dav_hooks_db_dbm = { dav_propdb_open, dav_propdb_close, dav_propdb_define_namespaces, dav_propdb_output_value, dav_propdb_map_namespaces, dav_propdb_store, dav_propdb_remove, dav_propdb_exists, dav_propdb_first_name, dav_propdb_next_name, dav_propdb_get_rollback, dav_propdb_apply_rollback, NULL /* ctx */ }; httpd-2.4.41/modules/dav/fs/lock.c0000644000000000000500000013173712271771357015212 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* ** DAV filesystem lock implementation */ #include "apr.h" #include "apr_strings.h" #include "apr_file_io.h" #include "apr_uuid.h" #define APR_WANT_MEMFUNC #include "apr_want.h" #include "httpd.h" #include "http_log.h" #include "mod_dav.h" #include "repos.h" /* --------------------------------------------------------------- ** ** Lock database primitives ** */ /* ** LOCK DATABASES ** ** Lockdiscovery information is stored in the single lock database specified ** by the DAVLockDB directive. Information about this db is stored in the ** global server configuration. ** ** KEY ** ** The database is keyed by a key_type unsigned char (DAV_TYPE_FNAME) ** followed by the full path. The key_type DAV_TYPE_INODE is not used anymore. ** ** VALUE ** ** The value consists of a list of elements. ** DIRECT LOCK: [char (DAV_LOCK_DIRECT), ** char (dav_lock_scope), ** char (dav_lock_type), ** int depth, ** time_t expires, ** apr_uuid_t locktoken, ** char[] owner, ** char[] auth_user] ** ** INDIRECT LOCK: [char (DAV_LOCK_INDIRECT), ** apr_uuid_t locktoken, ** time_t expires, ** apr_size_t key_size, ** char[] key] ** The key is to the collection lock that resulted in this indirect lock */ #define DAV_TRUE 1 #define DAV_FALSE 0 #define DAV_CREATE_LIST 23 #define DAV_APPEND_LIST 24 /* Stored lock_discovery prefix */ #define DAV_LOCK_DIRECT 1 #define DAV_LOCK_INDIRECT 2 /* * not used anymore * #define DAV_TYPE_INODE 10 */ #define DAV_TYPE_FNAME 11 /* ack. forward declare. */ static dav_error * dav_fs_remove_locknull_member(apr_pool_t *p, const char *filename, dav_buffer *pbuf); /* ** Use the opaquelock scheme for locktokens */ struct dav_locktoken { apr_uuid_t uuid; }; #define dav_compare_locktoken(plt1, plt2) \ memcmp(&(plt1)->uuid, &(plt2)->uuid, sizeof((plt1)->uuid)) /* ################################################################# ** ### keep these structures (internal) or move fully to dav_lock? */ /* ** We need to reliably size the fixed-length portion of ** dav_lock_discovery; best to separate it into another ** struct for a convenient sizeof, unless we pack lock_discovery. */ typedef struct dav_lock_discovery_fixed { char scope; char type; int depth; time_t timeout; } dav_lock_discovery_fixed; typedef struct dav_lock_discovery { struct dav_lock_discovery_fixed f; dav_locktoken *locktoken; const char *owner; /* owner field from activelock */ const char *auth_user; /* authenticated user who created the lock */ struct dav_lock_discovery *next; } dav_lock_discovery; /* Indirect locks represent locks inherited from containing collections. * They reference the lock token for the collection the lock is * inherited from. A lock provider may also define a key to the * inherited lock, for fast datbase lookup. The key is opaque outside * the lock provider. */ typedef struct dav_lock_indirect { dav_locktoken *locktoken; apr_datum_t key; struct dav_lock_indirect *next; time_t timeout; } dav_lock_indirect; /* ################################################################# */ /* ** Stored direct lock info - full lock_discovery length: ** prefix + Fixed length + lock token + 2 strings + 2 nulls (one for each string) */ #define dav_size_direct(a) ( 1 + sizeof(dav_lock_discovery_fixed) \ + sizeof(apr_uuid_t) \ + ((a)->owner ? strlen((a)->owner) : 0) \ + ((a)->auth_user ? strlen((a)->auth_user) : 0) \ + 2) /* Stored indirect lock info - lock token and apr_datum_t */ #define dav_size_indirect(a) (1 + sizeof(apr_uuid_t) \ + sizeof(time_t) \ + sizeof((a)->key.dsize) + (a)->key.dsize) /* ** The lockdb structure. ** ** The field may be NULL, meaning one of two things: ** 1) That we have not actually opened the underlying database (yet). The ** field should be false. ** 2) We opened it readonly and it wasn't present. ** ** The delayed opening (determined by ) makes creating a lockdb ** quick, while deferring the underlying I/O until it is actually required. ** ** We export the notion of a lockdb, but hide the details of it. Most ** implementations will use a database of some kind, but it is certainly ** possible that alternatives could be used. */ struct dav_lockdb_private { request_rec *r; /* for accessing the uuid state */ apr_pool_t *pool; /* a pool to use */ const char *lockdb_path; /* where is the lock database? */ int opened; /* we opened the database */ dav_db *db; /* if non-NULL, the lock database */ }; typedef struct { dav_lockdb pub; dav_lockdb_private priv; } dav_lockdb_combined; /* ** The private part of the lock structure. */ struct dav_lock_private { apr_datum_t key; /* key into the lock database */ }; typedef struct { dav_lock pub; dav_lock_private priv; dav_locktoken token; } dav_lock_combined; /* ** This must be forward-declared so the open_lockdb function can use it. */ extern const dav_hooks_locks dav_hooks_locks_fs; /* internal function for creating locks */ static dav_lock *dav_fs_alloc_lock(dav_lockdb *lockdb, apr_datum_t key, const dav_locktoken *locktoken) { dav_lock_combined *comb; comb = apr_pcalloc(lockdb->info->pool, sizeof(*comb)); comb->pub.rectype = DAV_LOCKREC_DIRECT; comb->pub.info = &comb->priv; comb->priv.key = key; if (locktoken == NULL) { comb->pub.locktoken = &comb->token; apr_uuid_get(&comb->token.uuid); } else { comb->pub.locktoken = locktoken; } return &comb->pub; } /* ** dav_fs_parse_locktoken ** ** Parse an opaquelocktoken URI into a locktoken. */ static dav_error * dav_fs_parse_locktoken( apr_pool_t *p, const char *char_token, dav_locktoken **locktoken_p) { dav_locktoken *locktoken; if (ap_strstr_c(char_token, "opaquelocktoken:") != char_token) { return dav_new_error(p, HTTP_BAD_REQUEST, DAV_ERR_LOCK_UNK_STATE_TOKEN, 0, "The lock token uses an unknown State-token " "format and could not be parsed."); } char_token += 16; locktoken = apr_pcalloc(p, sizeof(*locktoken)); if (apr_uuid_parse(&locktoken->uuid, char_token)) { return dav_new_error(p, HTTP_BAD_REQUEST, DAV_ERR_LOCK_PARSE_TOKEN, 0, "The opaquelocktoken has an incorrect format " "and could not be parsed."); } *locktoken_p = locktoken; return NULL; } /* ** dav_fs_format_locktoken ** ** Generate the URI for a locktoken */ static const char *dav_fs_format_locktoken( apr_pool_t *p, const dav_locktoken *locktoken) { char buf[APR_UUID_FORMATTED_LENGTH + 1]; apr_uuid_format(buf, &locktoken->uuid); return apr_pstrcat(p, "opaquelocktoken:", buf, NULL); } /* ** dav_fs_compare_locktoken ** ** Determine whether two locktokens are the same */ static int dav_fs_compare_locktoken( const dav_locktoken *lt1, const dav_locktoken *lt2) { return dav_compare_locktoken(lt1, lt2); } /* ** dav_fs_really_open_lockdb: ** ** If the database hasn't been opened yet, then open the thing. */ static dav_error * dav_fs_really_open_lockdb(dav_lockdb *lockdb) { dav_error *err; if (lockdb->info->opened) return NULL; err = dav_dbm_open_direct(lockdb->info->pool, lockdb->info->lockdb_path, lockdb->ro, &lockdb->info->db); if (err != NULL) { return dav_push_error(lockdb->info->pool, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_LOCK_OPENDB, "Could not open the lock database.", err); } /* all right. it is opened now. */ lockdb->info->opened = 1; return NULL; } /* ** dav_fs_open_lockdb: ** ** "open" the lock database, as specified in the global server configuration. ** If force is TRUE, then the database is opened now, rather than lazily. ** ** Note that only one can be open read/write. */ static dav_error * dav_fs_open_lockdb(request_rec *r, int ro, int force, dav_lockdb **lockdb) { dav_lockdb_combined *comb; comb = apr_pcalloc(r->pool, sizeof(*comb)); comb->pub.hooks = &dav_hooks_locks_fs; comb->pub.ro = ro; comb->pub.info = &comb->priv; comb->priv.r = r; comb->priv.pool = r->pool; comb->priv.lockdb_path = dav_get_lockdb_path(r); if (comb->priv.lockdb_path == NULL) { return dav_new_error(r->pool, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_LOCK_NO_DB, 0, "A lock database was not specified with the " "DAVLockDB directive. One must be specified " "to use the locking functionality."); } /* done initializing. return it. */ *lockdb = &comb->pub; if (force) { /* ### add a higher-level comment? */ return dav_fs_really_open_lockdb(*lockdb); } return NULL; } /* ** dav_fs_close_lockdb: ** ** Close it. Duh. */ static void dav_fs_close_lockdb(dav_lockdb *lockdb) { if (lockdb->info->db != NULL) dav_dbm_close(lockdb->info->db); } /* ** dav_fs_build_key: Given a resource, return a apr_datum_t key ** to look up lock information for this file. */ static apr_datum_t dav_fs_build_key(apr_pool_t *p, const dav_resource *resource) { const char *pathname = dav_fs_pathname(resource); apr_datum_t key; /* ### does this allocation have a proper lifetime? need to check */ /* ### can we use a buffer for this? */ /* size is TYPE + pathname + null */ key.dsize = strlen(pathname) + 2; key.dptr = apr_palloc(p, key.dsize); *key.dptr = DAV_TYPE_FNAME; memcpy(key.dptr + 1, pathname, key.dsize - 1); if (key.dptr[key.dsize - 2] == '/') key.dptr[--key.dsize - 1] = '\0'; return key; } /* ** dav_fs_lock_expired: return 1 (true) if the given timeout is in the past ** or present (the lock has expired), or 0 (false) if in the future ** (the lock has not yet expired). */ static int dav_fs_lock_expired(time_t expires) { return expires != DAV_TIMEOUT_INFINITE && time(NULL) >= expires; } /* ** dav_fs_save_lock_record: Saves the lock information specified in the ** direct and indirect lock lists about path into the lock database. ** If direct and indirect == NULL, the key is removed. */ static dav_error * dav_fs_save_lock_record(dav_lockdb *lockdb, apr_datum_t key, dav_lock_discovery *direct, dav_lock_indirect *indirect) { dav_error *err; apr_datum_t val = { 0 }; char *ptr; dav_lock_discovery *dp = direct; dav_lock_indirect *ip = indirect; #if DAV_DEBUG if (lockdb->ro) { return dav_new_error(lockdb->info->pool, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "INTERNAL DESIGN ERROR: the lockdb was opened " "readonly, but an attempt to save locks was " "performed."); } #endif if ((err = dav_fs_really_open_lockdb(lockdb)) != NULL) { /* ### add a higher-level error? */ return err; } /* If nothing to save, delete key */ if (dp == NULL && ip == NULL) { /* don't fail if the key is not present */ /* ### but what about other errors? */ (void) dav_dbm_delete(lockdb->info->db, key); return NULL; } while(dp) { val.dsize += dav_size_direct(dp); dp = dp->next; } while(ip) { val.dsize += dav_size_indirect(ip); ip = ip->next; } /* ### can this be apr_palloc() ? */ /* ### hmmm.... investigate the use of a buffer here */ ptr = val.dptr = apr_pcalloc(lockdb->info->pool, val.dsize); dp = direct; ip = indirect; while(dp) { *ptr++ = DAV_LOCK_DIRECT; /* Direct lock - lock_discovery struct follows */ memcpy(ptr, dp, sizeof(dp->f)); /* Fixed portion of struct */ ptr += sizeof(dp->f); memcpy(ptr, dp->locktoken, sizeof(*dp->locktoken)); ptr += sizeof(*dp->locktoken); if (dp->owner == NULL) { *ptr++ = '\0'; } else { memcpy(ptr, dp->owner, strlen(dp->owner) + 1); ptr += strlen(dp->owner) + 1; } if (dp->auth_user == NULL) { *ptr++ = '\0'; } else { memcpy(ptr, dp->auth_user, strlen(dp->auth_user) + 1); ptr += strlen(dp->auth_user) + 1; } dp = dp->next; } while(ip) { *ptr++ = DAV_LOCK_INDIRECT; /* Indirect lock prefix */ memcpy(ptr, ip->locktoken, sizeof(*ip->locktoken)); /* Locktoken */ ptr += sizeof(*ip->locktoken); memcpy(ptr, &ip->timeout, sizeof(ip->timeout)); /* Expire time */ ptr += sizeof(ip->timeout); memcpy(ptr, &ip->key.dsize, sizeof(ip->key.dsize)); /* Size of key */ ptr += sizeof(ip->key.dsize); memcpy(ptr, ip->key.dptr, ip->key.dsize); /* Key data */ ptr += ip->key.dsize; ip = ip->next; } if ((err = dav_dbm_store(lockdb->info->db, key, val)) != NULL) { /* ### more details? add an error_id? */ return dav_push_error(lockdb->info->pool, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_LOCK_SAVE_LOCK, "Could not save lock information.", err); } return NULL; } /* ** dav_load_lock_record: Reads lock information about key from lock db; ** creates linked lists of the direct and indirect locks. ** ** If add_method = DAV_APPEND_LIST, the result will be appended to the ** head of the direct and indirect lists supplied. ** ** Passive lock removal: If lock has timed out, it will not be returned. ** ### How much "logging" does RFC 2518 require? */ static dav_error * dav_fs_load_lock_record(dav_lockdb *lockdb, apr_datum_t key, int add_method, dav_lock_discovery **direct, dav_lock_indirect **indirect) { apr_pool_t *p = lockdb->info->pool; dav_error *err; apr_size_t offset = 0; int need_save = DAV_FALSE; apr_datum_t val = { 0 }; dav_lock_discovery *dp; dav_lock_indirect *ip; dav_buffer buf = { 0 }; if (add_method != DAV_APPEND_LIST) { *direct = NULL; *indirect = NULL; } if ((err = dav_fs_really_open_lockdb(lockdb)) != NULL) { /* ### add a higher-level error? */ return err; } /* ** If we opened readonly and the db wasn't there, then there are no ** locks for this resource. Just exit. */ if (lockdb->info->db == NULL) return NULL; if ((err = dav_dbm_fetch(lockdb->info->db, key, &val)) != NULL) return err; if (!val.dsize) return NULL; while (offset < val.dsize) { switch (*(val.dptr + offset++)) { case DAV_LOCK_DIRECT: /* Create and fill a dav_lock_discovery structure */ dp = apr_pcalloc(p, sizeof(*dp)); memcpy(dp, val.dptr + offset, sizeof(dp->f)); offset += sizeof(dp->f); dp->locktoken = apr_pmemdup(p, val.dptr + offset, sizeof(*dp->locktoken)); offset += sizeof(*dp->locktoken); if (*(val.dptr + offset) == '\0') { ++offset; } else { dp->owner = apr_pstrdup(p, val.dptr + offset); offset += strlen(dp->owner) + 1; } if (*(val.dptr + offset) == '\0') { ++offset; } else { dp->auth_user = apr_pstrdup(p, val.dptr + offset); offset += strlen(dp->auth_user) + 1; } if (!dav_fs_lock_expired(dp->f.timeout)) { dp->next = *direct; *direct = dp; } else { need_save = DAV_TRUE; /* Remove timed-out locknull fm .locknull list */ if (*key.dptr == DAV_TYPE_FNAME) { const char *fname = key.dptr + 1; apr_finfo_t finfo; apr_status_t rv; /* if we don't see the file, then it's a locknull */ rv = apr_stat(&finfo, fname, APR_FINFO_MIN | APR_FINFO_LINK, p); if (rv != APR_SUCCESS && rv != APR_INCOMPLETE) { if ((err = dav_fs_remove_locknull_member(p, fname, &buf)) != NULL) { /* ### push a higher-level description? */ return err; } } } } break; case DAV_LOCK_INDIRECT: /* Create and fill a dav_lock_indirect structure */ ip = apr_pcalloc(p, sizeof(*ip)); ip->locktoken = apr_pmemdup(p, val.dptr + offset, sizeof(*ip->locktoken)); offset += sizeof(*ip->locktoken); memcpy(&ip->timeout, val.dptr + offset, sizeof(ip->timeout)); offset += sizeof(ip->timeout); memcpy(&ip->key.dsize, val.dptr + offset, sizeof(ip->key.dsize)); /* length of datum */ offset += sizeof(ip->key.dsize); ip->key.dptr = apr_pmemdup(p, val.dptr + offset, ip->key.dsize); offset += ip->key.dsize; if (!dav_fs_lock_expired(ip->timeout)) { ip->next = *indirect; *indirect = ip; } else { need_save = DAV_TRUE; /* A locknull resource will never be locked indirectly */ } break; default: dav_dbm_freedatum(lockdb->info->db, val); /* ### should use a computed_desc and insert corrupt token data */ --offset; return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_LOCK_CORRUPT_DB, 0, apr_psprintf(p, "The lock database was found to " "be corrupt. offset %" APR_SIZE_T_FMT ", c=%02x", offset, val.dptr[offset])); } } dav_dbm_freedatum(lockdb->info->db, val); /* Clean up this record if we found expired locks */ /* ** ### shouldn't do this if we've been opened READONLY. elide the ** ### timed-out locks from the response, but don't save that info back */ if (need_save == DAV_TRUE) { return dav_fs_save_lock_record(lockdb, key, *direct, *indirect); } return NULL; } /* resolve , returning <*direct> */ static dav_error * dav_fs_resolve(dav_lockdb *lockdb, dav_lock_indirect *indirect, dav_lock_discovery **direct, dav_lock_discovery **ref_dp, dav_lock_indirect **ref_ip) { dav_error *err; dav_lock_discovery *dir; dav_lock_indirect *ind; if ((err = dav_fs_load_lock_record(lockdb, indirect->key, DAV_CREATE_LIST, &dir, &ind)) != NULL) { /* ### insert a higher-level description? */ return err; } if (ref_dp != NULL) { *ref_dp = dir; *ref_ip = ind; } for (; dir != NULL; dir = dir->next) { if (!dav_compare_locktoken(indirect->locktoken, dir->locktoken)) { *direct = dir; return NULL; } } /* No match found (but we should have found one!) */ /* ### use a different description and/or error ID? */ return dav_new_error(lockdb->info->pool, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_LOCK_CORRUPT_DB, 0, "The lock database was found to be corrupt. " "An indirect lock's direct lock could not " "be found."); } /* --------------------------------------------------------------- ** ** Property-related lock functions ** */ /* ** dav_fs_get_supportedlock: Returns a static string for all supportedlock ** properties. I think we save more returning a static string than ** constructing it every time, though it might look cleaner. */ static const char *dav_fs_get_supportedlock(const dav_resource *resource) { static const char supported[] = DEBUG_CR "" DEBUG_CR "" DEBUG_CR "" DEBUG_CR "" DEBUG_CR "" DEBUG_CR "" DEBUG_CR "" DEBUG_CR "" DEBUG_CR; return supported; } /* --------------------------------------------------------------- ** ** General lock functions ** */ /* --------------------------------------------------------------- ** ** Functions dealing with lock-null resources ** */ /* ** dav_fs_load_locknull_list: Returns a dav_buffer dump of the locknull file ** for the given directory. */ static dav_error * dav_fs_load_locknull_list(apr_pool_t *p, const char *dirpath, dav_buffer *pbuf) { apr_finfo_t finfo; apr_file_t *file = NULL; dav_error *err = NULL; apr_size_t amt; apr_status_t rv; dav_buffer_init(p, pbuf, dirpath); if (pbuf->buf[pbuf->cur_len - 1] == '/') pbuf->buf[--pbuf->cur_len] = '\0'; dav_buffer_place(p, pbuf, "/" DAV_FS_STATE_DIR "/" DAV_FS_LOCK_NULL_FILE); /* reset this in case we leave w/o reading into the buffer */ pbuf->cur_len = 0; if (apr_file_open(&file, pbuf->buf, APR_READ | APR_BINARY, APR_OS_DEFAULT, p) != APR_SUCCESS) { return NULL; } rv = apr_file_info_get(&finfo, APR_FINFO_SIZE, file); if (rv != APR_SUCCESS) { err = dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, rv, apr_psprintf(p, "Opened but could not stat file %s", pbuf->buf)); goto loaderror; } if (finfo.size != (apr_size_t)finfo.size) { err = dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, 0, apr_psprintf(p, "Opened but rejected huge file %s", pbuf->buf)); goto loaderror; } amt = (apr_size_t)finfo.size; dav_set_bufsize(p, pbuf, amt); if ((rv = apr_file_read(file, pbuf->buf, &amt)) != APR_SUCCESS || amt != finfo.size) { err = dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, rv, apr_psprintf(p, "Failure reading locknull file " "for %s", dirpath)); /* just in case the caller disregards the returned error */ pbuf->cur_len = 0; goto loaderror; } loaderror: apr_file_close(file); return err; } /* ** dav_fs_save_locknull_list: Saves contents of pbuf into the ** locknull file for dirpath. */ static dav_error * dav_fs_save_locknull_list(apr_pool_t *p, const char *dirpath, dav_buffer *pbuf) { const char *pathname; apr_file_t *file = NULL; dav_error *err = NULL; apr_size_t amt; apr_status_t rv; if (pbuf->buf == NULL) return NULL; dav_fs_ensure_state_dir(p, dirpath); pathname = apr_pstrcat(p, dirpath, dirpath[strlen(dirpath) - 1] == '/' ? "" : "/", DAV_FS_STATE_DIR "/" DAV_FS_LOCK_NULL_FILE, NULL); if (pbuf->cur_len == 0) { /* delete the file if cur_len == 0 */ if ((rv = apr_file_remove(pathname, p)) != APR_SUCCESS) { return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, rv, apr_psprintf(p, "Error removing %s", pathname)); } return NULL; } if ((rv = apr_file_open(&file, pathname, APR_WRITE | APR_CREATE | APR_TRUNCATE | APR_BINARY, APR_OS_DEFAULT, p)) != APR_SUCCESS) { return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, rv, apr_psprintf(p, "Error opening %s for writing", pathname)); } amt = pbuf->cur_len; if ((rv = apr_file_write_full(file, pbuf->buf, amt, &amt)) != APR_SUCCESS || amt != pbuf->cur_len) { err = dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, rv, apr_psprintf(p, "Error writing %" APR_SIZE_T_FMT " bytes to %s", pbuf->cur_len, pathname)); } apr_file_close(file); return err; } /* ** dav_fs_remove_locknull_member: Removes filename from the locknull list ** for directory path. */ static dav_error * dav_fs_remove_locknull_member(apr_pool_t *p, const char *filename, dav_buffer *pbuf) { dav_error *err; apr_size_t len; apr_size_t scanlen; char *scan; const char *scanend; char *dirpath = apr_pstrdup(p, filename); char *fname = strrchr(dirpath, '/'); int dirty = 0; if (fname != NULL) *fname++ = '\0'; else fname = dirpath; len = strlen(fname) + 1; if ((err = dav_fs_load_locknull_list(p, dirpath, pbuf)) != NULL) { /* ### add a higher level description? */ return err; } for (scan = pbuf->buf, scanend = scan + pbuf->cur_len; scan < scanend; scan += scanlen) { scanlen = strlen(scan) + 1; if (len == scanlen && memcmp(fname, scan, scanlen) == 0) { pbuf->cur_len -= scanlen; memmove(scan, scan + scanlen, scanend - (scan + scanlen)); dirty = 1; break; } } if (dirty) { if ((err = dav_fs_save_locknull_list(p, dirpath, pbuf)) != NULL) { /* ### add a higher level description? */ return err; } } return NULL; } /* Note: used by dav_fs_repos.c */ dav_error * dav_fs_get_locknull_members( const dav_resource *resource, dav_buffer *pbuf) { const char *dirpath; /* ### should test this result value... */ (void) dav_fs_dir_file_name(resource, &dirpath, NULL); return dav_fs_load_locknull_list(dav_fs_pool(resource), dirpath, pbuf); } /* ### fold into append_lock? */ /* ### take an optional buf parameter? */ static dav_error * dav_fs_add_locknull_state( dav_lockdb *lockdb, const dav_resource *resource) { dav_buffer buf = { 0 }; apr_pool_t *p = lockdb->info->pool; const char *dirpath; const char *fname; dav_error *err; /* ### should test this result value... */ (void) dav_fs_dir_file_name(resource, &dirpath, &fname); if ((err = dav_fs_load_locknull_list(p, dirpath, &buf)) != NULL) { return dav_push_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, "Could not load .locknull file.", err); } dav_buffer_append(p, &buf, fname); buf.cur_len++; /* we want the null-term here */ if ((err = dav_fs_save_locknull_list(p, dirpath, &buf)) != NULL) { return dav_push_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, "Could not save .locknull file.", err); } return NULL; } /* ** dav_fs_remove_locknull_state: Given a request, check to see if r->filename ** is/was a lock-null resource. If so, return it to an existant state, i.e. ** remove it from the list in the appropriate .DAV/locknull file. */ static dav_error * dav_fs_remove_locknull_state( dav_lockdb *lockdb, const dav_resource *resource) { dav_buffer buf = { 0 }; dav_error *err; apr_pool_t *p = lockdb->info->pool; const char *pathname = dav_fs_pathname(resource); if ((err = dav_fs_remove_locknull_member(p, pathname, &buf)) != NULL) { /* ### add a higher-level description? */ return err; } return NULL; } static dav_error * dav_fs_create_lock(dav_lockdb *lockdb, const dav_resource *resource, dav_lock **lock) { apr_datum_t key; key = dav_fs_build_key(lockdb->info->pool, resource); *lock = dav_fs_alloc_lock(lockdb, key, NULL); (*lock)->is_locknull = !resource->exists; return NULL; } static dav_error * dav_fs_get_locks(dav_lockdb *lockdb, const dav_resource *resource, int calltype, dav_lock **locks) { apr_pool_t *p = lockdb->info->pool; apr_datum_t key; dav_error *err; dav_lock *lock = NULL; dav_lock *newlock; dav_lock_discovery *dp; dav_lock_indirect *ip; #if DAV_DEBUG if (calltype == DAV_GETLOCKS_COMPLETE) { return dav_new_error(lockdb->info->pool, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "INTERNAL DESIGN ERROR: DAV_GETLOCKS_COMPLETE " "is not yet supported"); } #endif key = dav_fs_build_key(p, resource); if ((err = dav_fs_load_lock_record(lockdb, key, DAV_CREATE_LIST, &dp, &ip)) != NULL) { /* ### push a higher-level desc? */ return err; } /* copy all direct locks to the result list */ for (; dp != NULL; dp = dp->next) { newlock = dav_fs_alloc_lock(lockdb, key, dp->locktoken); newlock->is_locknull = !resource->exists; newlock->scope = dp->f.scope; newlock->type = dp->f.type; newlock->depth = dp->f.depth; newlock->timeout = dp->f.timeout; newlock->owner = dp->owner; newlock->auth_user = dp->auth_user; /* hook into the result list */ newlock->next = lock; lock = newlock; } /* copy all the indirect locks to the result list. resolve as needed. */ for (; ip != NULL; ip = ip->next) { newlock = dav_fs_alloc_lock(lockdb, ip->key, ip->locktoken); newlock->is_locknull = !resource->exists; if (calltype == DAV_GETLOCKS_RESOLVED) { if ((err = dav_fs_resolve(lockdb, ip, &dp, NULL, NULL)) != NULL) { /* ### push a higher-level desc? */ return err; } newlock->scope = dp->f.scope; newlock->type = dp->f.type; newlock->depth = dp->f.depth; newlock->timeout = dp->f.timeout; newlock->owner = dp->owner; newlock->auth_user = dp->auth_user; } else { /* DAV_GETLOCKS_PARTIAL */ newlock->rectype = DAV_LOCKREC_INDIRECT_PARTIAL; } /* hook into the result list */ newlock->next = lock; lock = newlock; } *locks = lock; return NULL; } static dav_error * dav_fs_find_lock(dav_lockdb *lockdb, const dav_resource *resource, const dav_locktoken *locktoken, int partial_ok, dav_lock **lock) { dav_error *err; apr_datum_t key; dav_lock_discovery *dp; dav_lock_indirect *ip; *lock = NULL; key = dav_fs_build_key(lockdb->info->pool, resource); if ((err = dav_fs_load_lock_record(lockdb, key, DAV_CREATE_LIST, &dp, &ip)) != NULL) { /* ### push a higher-level desc? */ return err; } for (; dp != NULL; dp = dp->next) { if (!dav_compare_locktoken(locktoken, dp->locktoken)) { *lock = dav_fs_alloc_lock(lockdb, key, locktoken); (*lock)->is_locknull = !resource->exists; (*lock)->scope = dp->f.scope; (*lock)->type = dp->f.type; (*lock)->depth = dp->f.depth; (*lock)->timeout = dp->f.timeout; (*lock)->owner = dp->owner; (*lock)->auth_user = dp->auth_user; return NULL; } } for (; ip != NULL; ip = ip->next) { if (!dav_compare_locktoken(locktoken, ip->locktoken)) { *lock = dav_fs_alloc_lock(lockdb, ip->key, locktoken); (*lock)->is_locknull = !resource->exists; /* ### nobody uses the resolving right now! */ if (partial_ok) { (*lock)->rectype = DAV_LOCKREC_INDIRECT_PARTIAL; } else { (*lock)->rectype = DAV_LOCKREC_INDIRECT; if ((err = dav_fs_resolve(lockdb, ip, &dp, NULL, NULL)) != NULL) { /* ### push a higher-level desc? */ return err; } (*lock)->scope = dp->f.scope; (*lock)->type = dp->f.type; (*lock)->depth = dp->f.depth; (*lock)->timeout = dp->f.timeout; (*lock)->owner = dp->owner; (*lock)->auth_user = dp->auth_user; } return NULL; } } return NULL; } static dav_error * dav_fs_has_locks(dav_lockdb *lockdb, const dav_resource *resource, int *locks_present) { dav_error *err; apr_datum_t key; *locks_present = 0; if ((err = dav_fs_really_open_lockdb(lockdb)) != NULL) { /* ### insert a higher-level error description */ return err; } /* ** If we opened readonly and the db wasn't there, then there are no ** locks for this resource. Just exit. */ if (lockdb->info->db == NULL) return NULL; key = dav_fs_build_key(lockdb->info->pool, resource); *locks_present = dav_dbm_exists(lockdb->info->db, key); return NULL; } static dav_error * dav_fs_append_locks(dav_lockdb *lockdb, const dav_resource *resource, int make_indirect, const dav_lock *lock) { apr_pool_t *p = lockdb->info->pool; dav_error *err; dav_lock_indirect *ip; dav_lock_discovery *dp; apr_datum_t key; key = dav_fs_build_key(lockdb->info->pool, resource); if ((err = dav_fs_load_lock_record(lockdb, key, 0, &dp, &ip)) != NULL) { /* ### maybe add in a higher-level description */ return err; } /* ** ### when we store the lock more directly, we need to update ** ### lock->rectype and lock->is_locknull */ if (make_indirect) { for (; lock != NULL; lock = lock->next) { /* ### this works for any rectype */ dav_lock_indirect *newi = apr_pcalloc(p, sizeof(*newi)); /* ### shut off the const warning for now */ newi->locktoken = (dav_locktoken *)lock->locktoken; newi->timeout = lock->timeout; newi->key = lock->info->key; newi->next = ip; ip = newi; } } else { for (; lock != NULL; lock = lock->next) { /* create and link in the right kind of lock */ if (lock->rectype == DAV_LOCKREC_DIRECT) { dav_lock_discovery *newd = apr_pcalloc(p, sizeof(*newd)); newd->f.scope = lock->scope; newd->f.type = lock->type; newd->f.depth = lock->depth; newd->f.timeout = lock->timeout; /* ### shut off the const warning for now */ newd->locktoken = (dav_locktoken *)lock->locktoken; newd->owner = lock->owner; newd->auth_user = lock->auth_user; newd->next = dp; dp = newd; } else { /* DAV_LOCKREC_INDIRECT(_PARTIAL) */ dav_lock_indirect *newi = apr_pcalloc(p, sizeof(*newi)); /* ### shut off the const warning for now */ newi->locktoken = (dav_locktoken *)lock->locktoken; newi->key = lock->info->key; newi->next = ip; ip = newi; } } } if ((err = dav_fs_save_lock_record(lockdb, key, dp, ip)) != NULL) { /* ### maybe add a higher-level description */ return err; } /* we have a special list for recording locknull resources */ /* ### ack! this can add two copies to the locknull list */ if (!resource->exists && (err = dav_fs_add_locknull_state(lockdb, resource)) != NULL) { /* ### maybe add a higher-level description */ return err; } return NULL; } static dav_error * dav_fs_remove_lock(dav_lockdb *lockdb, const dav_resource *resource, const dav_locktoken *locktoken) { dav_error *err; dav_buffer buf = { 0 }; dav_lock_discovery *dh = NULL; dav_lock_indirect *ih = NULL; apr_datum_t key; key = dav_fs_build_key(lockdb->info->pool, resource); if (locktoken != NULL) { dav_lock_discovery *dp; dav_lock_discovery *dprev = NULL; dav_lock_indirect *ip; dav_lock_indirect *iprev = NULL; if ((err = dav_fs_load_lock_record(lockdb, key, DAV_CREATE_LIST, &dh, &ih)) != NULL) { /* ### maybe add a higher-level description */ return err; } for (dp = dh; dp != NULL; dp = dp->next) { if (dav_compare_locktoken(locktoken, dp->locktoken) == 0) { if (dprev) dprev->next = dp->next; else dh = dh->next; } dprev = dp; } for (ip = ih; ip != NULL; ip = ip->next) { if (dav_compare_locktoken(locktoken, ip->locktoken) == 0) { if (iprev) iprev->next = ip->next; else ih = ih->next; } iprev = ip; } } /* save the modified locks, or remove all locks (dh=ih=NULL). */ if ((err = dav_fs_save_lock_record(lockdb, key, dh, ih)) != NULL) { /* ### maybe add a higher-level description */ return err; } /* ** If this resource is a locknull resource AND no more locks exist, ** then remove the locknull member. ** ** Note: remove_locknull_state() attempts to convert a locknull member ** to a real member. In this case, all locks are gone, so the ** locknull resource returns to the null state (ie. doesn't exist), ** so there is no need to update the lockdb (and it won't find ** any because a precondition is that none exist). */ if (!resource->exists && dh == NULL && ih == NULL && (err = dav_fs_remove_locknull_member(lockdb->info->pool, dav_fs_pathname(resource), &buf)) != NULL) { /* ### maybe add a higher-level description */ return err; } return NULL; } static int dav_fs_do_refresh(dav_lock_discovery *dp, const dav_locktoken_list *ltl, time_t new_time) { int dirty = 0; for (; ltl != NULL; ltl = ltl->next) { if (dav_compare_locktoken(dp->locktoken, ltl->locktoken) == 0) { dp->f.timeout = new_time; dirty = 1; break; } } return dirty; } static dav_error * dav_fs_refresh_locks(dav_lockdb *lockdb, const dav_resource *resource, const dav_locktoken_list *ltl, time_t new_time, dav_lock **locks) { dav_error *err; apr_datum_t key; dav_lock_discovery *dp; dav_lock_discovery *dp_scan; dav_lock_indirect *ip; int dirty = 0; dav_lock *newlock; *locks = NULL; key = dav_fs_build_key(lockdb->info->pool, resource); if ((err = dav_fs_load_lock_record(lockdb, key, DAV_CREATE_LIST, &dp, &ip)) != NULL) { /* ### maybe add in a higher-level description */ return err; } /* ### we should be refreshing direct AND (resolved) indirect locks! */ /* refresh all of the direct locks on this resource */ for (dp_scan = dp; dp_scan != NULL; dp_scan = dp_scan->next) { if (dav_fs_do_refresh(dp_scan, ltl, new_time)) { /* the lock was refreshed. return the lock. */ newlock = dav_fs_alloc_lock(lockdb, key, dp_scan->locktoken); newlock->is_locknull = !resource->exists; newlock->scope = dp_scan->f.scope; newlock->type = dp_scan->f.type; newlock->depth = dp_scan->f.depth; newlock->timeout = dp_scan->f.timeout; newlock->owner = dp_scan->owner; newlock->auth_user = dp_scan->auth_user; newlock->next = *locks; *locks = newlock; dirty = 1; } } /* if we refreshed any locks, then save them back. */ if (dirty && (err = dav_fs_save_lock_record(lockdb, key, dp, ip)) != NULL) { /* ### maybe add in a higher-level description */ return err; } /* for each indirect lock, find its direct lock and refresh it. */ for (; ip != NULL; ip = ip->next) { dav_lock_discovery *ref_dp; dav_lock_indirect *ref_ip; if ((err = dav_fs_resolve(lockdb, ip, &dp_scan, &ref_dp, &ref_ip)) != NULL) { /* ### push a higher-level desc? */ return err; } if (dav_fs_do_refresh(dp_scan, ltl, new_time)) { /* the lock was refreshed. return the lock. */ newlock = dav_fs_alloc_lock(lockdb, ip->key, dp_scan->locktoken); newlock->is_locknull = !resource->exists; newlock->scope = dp_scan->f.scope; newlock->type = dp_scan->f.type; newlock->depth = dp_scan->f.depth; newlock->timeout = dp_scan->f.timeout; newlock->owner = dp_scan->owner; newlock->auth_user = dp_scan->auth_user; newlock->next = *locks; *locks = newlock; /* save the (resolved) direct lock back */ if ((err = dav_fs_save_lock_record(lockdb, ip->key, ref_dp, ref_ip)) != NULL) { /* ### push a higher-level desc? */ return err; } } } return NULL; } const dav_hooks_locks dav_hooks_locks_fs = { dav_fs_get_supportedlock, dav_fs_parse_locktoken, dav_fs_format_locktoken, dav_fs_compare_locktoken, dav_fs_open_lockdb, dav_fs_close_lockdb, dav_fs_remove_locknull_state, dav_fs_create_lock, dav_fs_get_locks, dav_fs_find_lock, dav_fs_has_locks, dav_fs_append_locks, dav_fs_remove_lock, dav_fs_refresh_locks, NULL, /* lookup_resource */ NULL /* ctx */ }; httpd-2.4.41/modules/dav/fs/Makefile.in0000644000000000000500000000026710150161574016140 0ustar rootsrc# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/dav/fs/mod_dav_fs.dsp0000644000000000000500000001163310551346420016703 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_dav_fs" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_dav_fs - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_dav_fs.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_dav_fs.mak" CFG="mod_dav_fs - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_dav_fs - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_dav_fs - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_dav_fs - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_dav_fs_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_dav_fs.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_dav_fs.so" /d LONG_NAME="dav_fs_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_dav_fs.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav_fs.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_dav_fs.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav_fs.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_dav_fs.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_dav_fs - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_dav_fs_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_dav_fs.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_dav_fs.so" /d LONG_NAME="dav_fs_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_dav_fs.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav_fs.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_dav_fs.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav_fs.so # Begin Special Build Tool TargetPath=.\Debug\mod_dav_fs.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_dav_fs - Win32 Release" # Name "mod_dav_fs - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\dbm.c # End Source File # Begin Source File SOURCE=.\lock.c # End Source File # Begin Source File SOURCE=.\mod_dav_fs.c # End Source File # Begin Source File SOURCE=.\repos.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter "h;hpp;hxx;hm;inl;fi;fd" # Begin Source File SOURCE=.\repos.h # End Source File # End Group # Begin Source File SOURCE=..\..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/dav/main/0002755000000000000500000000000013523273343014411 5ustar rootsrchttpd-2.4.41/modules/dav/main/util_lock.c0000644000000000000500000006716112506513633016552 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* ** DAV repository-independent lock functions */ #include "apr.h" #include "apr_strings.h" #include "mod_dav.h" #include "http_log.h" #include "http_config.h" #include "http_protocol.h" #include "http_core.h" APLOG_USE_MODULE(dav); /* --------------------------------------------------------------- ** ** Property-related lock functions ** */ /* ** dav_lock_get_activelock: Returns a containing ** an activelock element for every item in the lock_discovery tree */ DAV_DECLARE(const char *) dav_lock_get_activelock(request_rec *r, dav_lock *lock, dav_buffer *pbuf) { dav_lock *lock_scan; const dav_hooks_locks *hooks = DAV_GET_HOOKS_LOCKS(r); int count = 0; dav_buffer work_buf = { 0 }; apr_pool_t *p = r->pool; /* If no locks or no lock provider, there are no locks */ if (lock == NULL || hooks == NULL) { /* ** Since resourcediscovery is defined with (activelock)*, ** shouldn't be necessary for an empty lock. */ return ""; } /* ** Note: it could be interesting to sum the lengths of the owners ** and locktokens during this loop. However, the buffer ** mechanism provides some rough padding so that we don't ** really need to have an exact size. Further, constructing ** locktoken strings could be relatively expensive. */ for (lock_scan = lock; lock_scan != NULL; lock_scan = lock_scan->next) count++; /* if a buffer was not provided, then use an internal buffer */ if (pbuf == NULL) pbuf = &work_buf; /* reset the length before we start appending stuff */ pbuf->cur_len = 0; /* prep the buffer with a "good" size */ dav_check_bufsize(p, pbuf, count * 300); for (; lock != NULL; lock = lock->next) { char tmp[100]; #if DAV_DEBUG if (lock->rectype == DAV_LOCKREC_INDIRECT_PARTIAL) { /* ### crap. design error */ dav_buffer_append(p, pbuf, "DESIGN ERROR: attempted to product an " "activelock element from a partial, indirect " "lock record. Creating an XML parsing error " "to ease detection of this situation: <"); } #endif dav_buffer_append(p, pbuf, "" DEBUG_CR ""); switch (lock->type) { case DAV_LOCKTYPE_WRITE: dav_buffer_append(p, pbuf, ""); break; default: /* ### internal error. log something? */ break; } dav_buffer_append(p, pbuf, "" DEBUG_CR ""); switch (lock->scope) { case DAV_LOCKSCOPE_EXCLUSIVE: dav_buffer_append(p, pbuf, ""); break; case DAV_LOCKSCOPE_SHARED: dav_buffer_append(p, pbuf, ""); break; default: /* ### internal error. log something? */ break; } dav_buffer_append(p, pbuf, "" DEBUG_CR); apr_snprintf(tmp, sizeof(tmp), "%s" DEBUG_CR, lock->depth == DAV_INFINITY ? "infinity" : "0"); dav_buffer_append(p, pbuf, tmp); if (lock->owner) { /* ** This contains a complete, self-contained element, ** with namespace declarations and xml:lang handling. Just drop ** it in. */ dav_buffer_append(p, pbuf, lock->owner); } dav_buffer_append(p, pbuf, ""); if (lock->timeout == DAV_TIMEOUT_INFINITE) { dav_buffer_append(p, pbuf, "Infinite"); } else { time_t now = time(NULL); /* ** Check if the timeout is not, for any reason, already elapsed. ** (e.g., because of a large collection, or disk under heavy load...) */ if (now >= lock->timeout) { dav_buffer_append(p, pbuf, "Second-0"); } else { apr_snprintf(tmp, sizeof(tmp), "Second-%lu", (long unsigned int)(lock->timeout - now)); dav_buffer_append(p, pbuf, tmp); } } dav_buffer_append(p, pbuf, "" DEBUG_CR "" DEBUG_CR ""); dav_buffer_append(p, pbuf, (*hooks->format_locktoken)(p, lock->locktoken)); dav_buffer_append(p, pbuf, "" DEBUG_CR "" DEBUG_CR "" DEBUG_CR); } return pbuf->buf; } /* ** dav_lock_parse_lockinfo: Validates the given xml_doc to contain a ** lockinfo XML element, then populates a dav_lock structure ** with its contents. */ DAV_DECLARE(dav_error *) dav_lock_parse_lockinfo(request_rec *r, const dav_resource *resource, dav_lockdb *lockdb, const apr_xml_doc *doc, dav_lock **lock_request) { apr_pool_t *p = r->pool; dav_error *err; apr_xml_elem *child; dav_lock *lock; if (!dav_validate_root(doc, "lockinfo")) { return dav_new_error(p, HTTP_BAD_REQUEST, 0, 0, "The request body contains an unexpected " "XML root element."); } if ((err = (*lockdb->hooks->create_lock)(lockdb, resource, &lock)) != NULL) { return dav_push_error(p, err->status, 0, "Could not parse the lockinfo due to an " "internal problem creating a lock structure.", err); } lock->depth = dav_get_depth(r, DAV_INFINITY); if (lock->depth == -1) { return dav_new_error(p, HTTP_BAD_REQUEST, 0, 0, "An invalid Depth header was specified."); } lock->timeout = dav_get_timeout(r); /* Parse elements in the XML body */ for (child = doc->root->first_child; child; child = child->next) { if (strcmp(child->name, "locktype") == 0 && child->first_child && lock->type == DAV_LOCKTYPE_UNKNOWN) { if (strcmp(child->first_child->name, "write") == 0) { lock->type = DAV_LOCKTYPE_WRITE; continue; } } if (strcmp(child->name, "lockscope") == 0 && child->first_child && lock->scope == DAV_LOCKSCOPE_UNKNOWN) { if (strcmp(child->first_child->name, "exclusive") == 0) lock->scope = DAV_LOCKSCOPE_EXCLUSIVE; else if (strcmp(child->first_child->name, "shared") == 0) lock->scope = DAV_LOCKSCOPE_SHARED; if (lock->scope != DAV_LOCKSCOPE_UNKNOWN) continue; } if (strcmp(child->name, "owner") == 0 && lock->owner == NULL) { const char *text; /* quote all the values in the element */ apr_xml_quote_elem(p, child); /* ** Store a full element with namespace definitions ** and an xml:lang definition, if applicable. */ apr_xml_to_text(p, child, APR_XML_X2T_FULL_NS_LANG, doc->namespaces, NULL, &text, NULL); lock->owner = text; continue; } return dav_new_error(p, HTTP_PRECONDITION_FAILED, 0, 0, apr_psprintf(p, "The server cannot satisfy the " "LOCK request due to an unknown XML " "element (\"%s\") within the " "DAV:lockinfo element.", child->name)); } *lock_request = lock; return NULL; } /* --------------------------------------------------------------- ** ** General lock functions ** */ /* dav_lock_walker: Walker callback function to record indirect locks */ static dav_error * dav_lock_walker(dav_walk_resource *wres, int calltype) { dav_walker_ctx *ctx = wres->walk_ctx; dav_error *err; /* We don't want to set indirects on the target */ if ((*wres->resource->hooks->is_same_resource)(wres->resource, ctx->w.root)) return NULL; if ((err = (*ctx->w.lockdb->hooks->append_locks)(ctx->w.lockdb, wres->resource, 1, ctx->lock)) != NULL) { if (ap_is_HTTP_SERVER_ERROR(err->status)) { /* ### add a higher-level description? */ return err; } /* add to the multistatus response */ dav_add_response(wres, err->status, NULL); /* ** ### actually, this is probably wrong: we want to fail the whole ** ### LOCK process if something goes bad. maybe the caller should ** ### do a dav_unlock() (e.g. a rollback) if any errors occurred. */ } return NULL; } /* ** dav_add_lock: Add a direct lock for resource, and indirect locks for ** all children, bounded by depth. ** ### assume request only contains one lock */ DAV_DECLARE(dav_error *) dav_add_lock(request_rec *r, const dav_resource *resource, dav_lockdb *lockdb, dav_lock *lock, dav_response **response) { dav_error *err; int depth = lock->depth; *response = NULL; /* Requested lock can be: * Depth: 0 for null resource, existing resource, or existing collection * Depth: Inf for existing collection */ /* ** 2518 9.2 says to ignore depth if target is not a collection (it has ** no internal children); pretend the client gave the correct depth. */ if (!resource->collection) { depth = 0; } /* In all cases, first add direct entry in lockdb */ /* ** Append the new (direct) lock to the resource's existing locks. ** ** Note: this also handles locknull resources */ if ((err = (*lockdb->hooks->append_locks)(lockdb, resource, 0, lock)) != NULL) { /* ### maybe add a higher-level description */ return err; } if (depth > 0) { /* Walk existing collection and set indirect locks */ dav_walker_ctx ctx = { { 0 } }; dav_response *multi_status; ctx.w.walk_type = DAV_WALKTYPE_NORMAL | DAV_WALKTYPE_AUTH; ctx.w.func = dav_lock_walker; ctx.w.walk_ctx = &ctx; ctx.w.pool = r->pool; ctx.w.root = resource; ctx.w.lockdb = lockdb; ctx.r = r; ctx.lock = lock; err = (*resource->hooks->walk)(&ctx.w, DAV_INFINITY, &multi_status); if (err != NULL) { /* implies a 5xx status code occurred. screw the multistatus */ return err; } if (multi_status != NULL) { /* manufacture a 207 error for the multistatus response */ *response = multi_status; return dav_new_error(r->pool, HTTP_MULTI_STATUS, 0, 0, "Error(s) occurred on resources during the " "addition of a depth lock."); } } return NULL; } /* ** dav_lock_query: Opens the lock database. Returns a linked list of ** dav_lock structures for all direct locks on path. */ DAV_DECLARE(dav_error*) dav_lock_query(dav_lockdb *lockdb, const dav_resource *resource, dav_lock **locks) { /* If no lock database, return empty result */ if (lockdb == NULL) { *locks = NULL; return NULL; } /* ### insert a higher-level description? */ return (*lockdb->hooks->get_locks)(lockdb, resource, DAV_GETLOCKS_RESOLVED, locks); } /* dav_unlock_walker: Walker callback function to remove indirect locks */ static dav_error * dav_unlock_walker(dav_walk_resource *wres, int calltype) { dav_walker_ctx *ctx = wres->walk_ctx; dav_error *err; /* Before removing the lock, do any auto-checkin required */ if (wres->resource->working) { /* ### get rid of this typecast */ if ((err = dav_auto_checkin(ctx->r, (dav_resource *) wres->resource, 0 /*undo*/, 1 /*unlock*/, NULL)) != NULL) { return err; } } if ((err = (*ctx->w.lockdb->hooks->remove_lock)(ctx->w.lockdb, wres->resource, ctx->locktoken)) != NULL) { /* ### should we stop or return a multistatus? looks like STOP */ /* ### add a higher-level description? */ return err; } return NULL; } /* ** dav_get_direct_resource: ** ** Find a lock on the specified resource, then return the resource the ** lock was applied to (in other words, given a (possibly) indirect lock, ** return the direct lock's corresponding resource). ** ** If the lock is an indirect lock, this usually means traversing up the ** namespace [repository] hierarchy. Note that some lock providers may be ** able to return this information with a traversal. */ static dav_error * dav_get_direct_resource(apr_pool_t *p, dav_lockdb *lockdb, const dav_locktoken *locktoken, const dav_resource *resource, const dav_resource **direct_resource) { if (lockdb->hooks->lookup_resource != NULL) { return (*lockdb->hooks->lookup_resource)(lockdb, locktoken, resource, direct_resource); } *direct_resource = NULL; /* Find the top of this lock- * If r->filename's direct locks include locktoken, use r->filename. * If r->filename's indirect locks include locktoken, retry r->filename/.. * Else fail. */ while (resource != NULL) { dav_error *err; dav_lock *lock; dav_resource *parent; /* ** Find the lock specified by on . If it is ** an indirect lock, then partial results are okay. We're just ** trying to find the thing and know whether it is a direct or ** an indirect lock. */ if ((err = (*lockdb->hooks->find_lock)(lockdb, resource, locktoken, 1, &lock)) != NULL) { /* ### add a higher-level desc? */ return err; } /* not found! that's an error. */ if (lock == NULL) { return dav_new_error(p, HTTP_BAD_REQUEST, 0, 0, "The specified locktoken does not correspond " "to an existing lock on this resource."); } if (lock->rectype == DAV_LOCKREC_DIRECT) { /* we found the direct lock. return this resource. */ *direct_resource = resource; return NULL; } /* the lock was indirect. move up a level in the URL namespace */ if ((err = (*resource->hooks->get_parent_resource)(resource, &parent)) != NULL) { /* ### add a higher-level desc? */ return err; } resource = parent; } return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "The lock database is corrupt. A direct lock could " "not be found for the corresponding indirect lock " "on this resource."); } /* ** dav_unlock: Removes all direct and indirect locks for r->filename, ** with given locktoken. If locktoken == null_locktoken, all locks ** are removed. If r->filename represents an indirect lock, ** we must unlock the appropriate direct lock. ** Returns OK or appropriate HTTP_* response and logs any errors. ** ** ### We've already crawled the tree to ensure everything was locked ** by us; there should be no need to incorporate a rollback. */ DAV_DECLARE(int) dav_unlock(request_rec *r, const dav_resource *resource, const dav_locktoken *locktoken) { int result; dav_lockdb *lockdb; const dav_resource *lock_resource = resource; const dav_hooks_locks *hooks = DAV_GET_HOOKS_LOCKS(r); const dav_hooks_repository *repos_hooks = resource->hooks; dav_walker_ctx ctx = { { 0 } }; dav_response *multi_status; dav_error *err; /* If no locks provider, then there is nothing to unlock. */ if (hooks == NULL) { return OK; } /* 2518 requires the entire lock to be removed if resource/locktoken * point to an indirect lock. We need resource of the _direct_ * lock in order to walk down the tree and remove the locks. So, * If locktoken != null_locktoken, * Walk up the resource hierarchy until we see a direct lock. * Or, we could get the direct lock's db/key, pick out the URL * and do a subrequest. I think walking up is faster and will work * all the time. * Else * Just start removing all locks at and below resource. */ if ((err = (*hooks->open_lockdb)(r, 0, 1, &lockdb)) != NULL) { /* ### return err! maybe add a higher-level desc */ /* ### map result to something nice; log an error */ return HTTP_INTERNAL_SERVER_ERROR; } if (locktoken != NULL && (err = dav_get_direct_resource(r->pool, lockdb, locktoken, resource, &lock_resource)) != NULL) { /* ### add a higher-level desc? */ /* ### should return err! */ return err->status; } /* At this point, lock_resource/locktoken refers to a direct lock (key), ie * the root of a depth > 0 lock, or locktoken is null. */ ctx.w.walk_type = DAV_WALKTYPE_NORMAL | DAV_WALKTYPE_LOCKNULL; ctx.w.func = dav_unlock_walker; ctx.w.walk_ctx = &ctx; ctx.w.pool = r->pool; ctx.w.root = lock_resource; ctx.w.lockdb = lockdb; ctx.r = r; ctx.locktoken = locktoken; err = (*repos_hooks->walk)(&ctx.w, DAV_INFINITY, &multi_status); /* ### fix this! */ /* ### do something with multi_status */ result = err == NULL ? OK : err->status; (*hooks->close_lockdb)(lockdb); return result; } /* dav_inherit_walker: Walker callback function to inherit locks */ static dav_error * dav_inherit_walker(dav_walk_resource *wres, int calltype) { dav_walker_ctx *ctx = wres->walk_ctx; if (ctx->skip_root && (*wres->resource->hooks->is_same_resource)(wres->resource, ctx->w.root)) { return NULL; } /* ### maybe add a higher-level desc */ return (*ctx->w.lockdb->hooks->append_locks)(ctx->w.lockdb, wres->resource, 1, ctx->lock); } /* ** dav_inherit_locks: When a resource or collection is added to a collection, ** locks on the collection should be inherited to the resource/collection. ** (MOVE, MKCOL, etc) Here we propagate any direct or indirect locks from ** parent of resource to resource and below. */ static dav_error * dav_inherit_locks(request_rec *r, dav_lockdb *lockdb, const dav_resource *resource, int use_parent) { dav_error *err; const dav_resource *which_resource; dav_lock *locks; dav_lock *scan; dav_lock *prev; dav_walker_ctx ctx = { { 0 } }; const dav_hooks_repository *repos_hooks = resource->hooks; dav_response *multi_status; if (use_parent) { dav_resource *parent; if ((err = (*repos_hooks->get_parent_resource)(resource, &parent)) != NULL) { /* ### add a higher-level desc? */ return err; } if (parent == NULL) { /* ### map result to something nice; log an error */ return dav_new_error(r->pool, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "Could not fetch parent resource. Unable to " "inherit locks from the parent and apply " "them to this resource."); } which_resource = parent; } else { which_resource = resource; } if ((err = (*lockdb->hooks->get_locks)(lockdb, which_resource, DAV_GETLOCKS_PARTIAL, &locks)) != NULL) { /* ### maybe add a higher-level desc */ return err; } if (locks == NULL) { /* No locks to propagate, just return */ return NULL; } /* ** (1) Copy all indirect locks from our parent; ** (2) Create indirect locks for the depth infinity, direct locks ** in our parent. ** ** The append_locks call in the walker callback will do the indirect ** conversion, but we need to remove any direct locks that are NOT ** depth "infinity". */ for (scan = locks, prev = NULL; scan != NULL; prev = scan, scan = scan->next) { if (scan->rectype == DAV_LOCKREC_DIRECT && scan->depth != DAV_INFINITY) { if (prev == NULL) locks = scan->next; else prev->next = scan->next; } } /* has all our new locks. Walk down and propagate them. */ ctx.w.walk_type = DAV_WALKTYPE_NORMAL | DAV_WALKTYPE_LOCKNULL; ctx.w.func = dav_inherit_walker; ctx.w.walk_ctx = &ctx; ctx.w.pool = r->pool; ctx.w.root = resource; ctx.w.lockdb = lockdb; ctx.r = r; ctx.lock = locks; ctx.skip_root = !use_parent; /* ### do something with multi_status */ return (*repos_hooks->walk)(&ctx.w, DAV_INFINITY, &multi_status); } /* --------------------------------------------------------------- ** ** Functions dealing with lock-null resources ** */ /* ** dav_get_resource_state: Returns the state of the resource ** r->filename: DAV_RESOURCE_NULL, DAV_RESOURCE_LOCK_NULL, ** or DAV_RESOURCE_EXIST. ** ** Returns DAV_RESOURCE_ERROR if an error occurs. */ DAV_DECLARE(int) dav_get_resource_state(request_rec *r, const dav_resource *resource) { const dav_hooks_locks *hooks = DAV_GET_HOOKS_LOCKS(r); if (resource->exists) return DAV_RESOURCE_EXISTS; if (hooks != NULL) { dav_error *err; dav_lockdb *lockdb; int locks_present; /* ** A locknull resource has the form: ** ** known-dir "/" locknull-file ** ** It would be nice to look into to verify this form, ** but it does not have enough information for us. Instead, we ** can look at the path_info. If the form does not match, then ** there is no way we could have a locknull resource -- it must ** be a plain, null resource. ** ** Apache sets r->filename to known-dir/unknown-file and r->path_info ** to "" for the "proper" case. If anything is in path_info, then ** it can't be a locknull resource. ** ** ### I bet this path_info hack doesn't work for repositories. ** ### Need input from repository implementors! What kind of ** ### restructure do we need? New provider APIs? */ if (r->path_info != NULL && *r->path_info != '\0') { return DAV_RESOURCE_NULL; } if ((err = (*hooks->open_lockdb)(r, 1, 1, &lockdb)) == NULL) { /* note that we might see some expired locks... *shrug* */ err = (*hooks->has_locks)(lockdb, resource, &locks_present); (*hooks->close_lockdb)(lockdb); } if (err != NULL) { /* ### don't log an error. return err. add higher-level desc. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00623) "Failed to query lock-null status for %s", r->filename); return DAV_RESOURCE_ERROR; } if (locks_present) return DAV_RESOURCE_LOCK_NULL; } return DAV_RESOURCE_NULL; } DAV_DECLARE(dav_error *) dav_notify_created(request_rec *r, dav_lockdb *lockdb, const dav_resource *resource, int resource_state, int depth) { dav_error *err; if (resource_state == DAV_RESOURCE_LOCK_NULL) { /* ** The resource is no longer a locknull resource. This will remove ** the special marker. ** ** Note that a locknull resource has already inherited all of the ** locks from the parent. We do not need to call dav_inherit_locks. ** ** NOTE: some lock providers record locks for locknull resources using ** a different key than for regular resources. this will shift ** the lock information between the two key types. */ (void)(*lockdb->hooks->remove_locknull_state)(lockdb, resource); /* ** There are resources under this one, which are new. We must ** propagate the locks down to the new resources. */ if (depth > 0 && (err = dav_inherit_locks(r, lockdb, resource, 0)) != NULL) { /* ### add a higher level desc? */ return err; } } else if (resource_state == DAV_RESOURCE_NULL) { /* ### should pass depth to dav_inherit_locks so that it can ** ### optimize for the depth==0 case. */ /* this resource should inherit locks from its parent */ if ((err = dav_inherit_locks(r, lockdb, resource, 1)) != NULL) { err = dav_push_error(r->pool, err->status, 0, "The resource was created successfully, but " "there was a problem inheriting locks from " "the parent resource.", err); return err; } } /* else the resource already exists and its locks are correct. */ return NULL; } httpd-2.4.41/modules/dav/main/props.c0000644000000000000500000011542613506617416015733 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* ** DAV extension module for Apache 2.0.* ** - Property database handling (repository-independent) ** ** NOTES: ** ** PROPERTY DATABASE ** ** This version assumes that there is a per-resource database provider ** to record properties. The database provider decides how and where to ** store these databases. ** ** The DBM keys for the properties have the following form: ** ** namespace ":" propname ** ** For example: 5:author ** ** The namespace provides an integer index into the namespace table ** (see below). propname is simply the property name, without a namespace ** prefix. ** ** A special case exists for properties that had a prefix starting with ** "xml". The XML Specification reserves these for future use. mod_dav ** stores and retrieves them unchanged. The keys for these properties ** have the form: ** ** ":" propname ** ** The propname will contain the prefix and the property name. For ** example, a key might be ":xmlfoo:name" ** ** The ":name" style will also be used for properties that do not ** exist within a namespace. ** ** The DBM values consist of two null-terminated strings, appended ** together (the null-terms are retained and stored in the database). ** The first string is the xml:lang value for the property. An empty ** string signifies that a lang value was not in context for the value. ** The second string is the property value itself. ** ** ** NAMESPACE TABLE ** ** The namespace table is an array that lists each of the namespaces ** that are in use by the properties in the given propdb. Each entry ** in the array is a simple URI. ** ** For example: http://www.foo.bar/standards/props/ ** ** The prefix used for the property is stripped and the URI for it ** is entered into the namespace table. Also, any namespaces used ** within the property value will be entered into the table (and ** stripped from the child elements). ** ** The namespaces are stored in the DBM database under the "METADATA" key. ** ** ** STRIPPING NAMESPACES ** ** Within the property values, the namespace declarations (xmlns...) ** are stripped. Each element and attribute will have its prefix removed ** and a new prefix inserted. ** ** This must be done so that we can return multiple properties in a ** PROPFIND which may have (originally) used conflicting prefixes. For ** that case, we must bind all property value elements to new namespace ** values. ** ** This implies that clients must NOT be sensitive to the namespace ** prefix used for their properties. It WILL change when the properties ** are returned (we return them as "ns", e.g. "ns5"). Also, the ** property value can contain ONLY XML elements and CDATA. PI and comment ** elements will be stripped. CDATA whitespace will be preserved, but ** whitespace within element tags will be altered. Attribute ordering ** may be altered. Element and CDATA ordering will be preserved. ** ** ** ATTRIBUTES ON PROPERTY NAME ELEMENTS ** ** When getting/setting properties, the XML used looks like: ** ** ** value ** value ** ** ** This implementation (mod_dav) DOES NOT save any attributes that are ** associated with the element. The property value is deemed ** to be only the contents ("value" in the above example). ** ** We do store the xml:lang value (if any) that applies to the context ** of the element. Whether the xml:lang attribute is on ** itself, or from a higher level element, we will store it ** with the property value. ** ** ** VERSIONING ** ** The DBM db contains a key named "METADATA" that holds database-level ** information, such as the namespace table. The record also contains the ** db's version number as the very first 16-bit value. This first number ** is actually stored as two single bytes: the first byte is a "major" ** version number. The second byte is a "minor" number. ** ** If the major number is not what mod_dav expects, then the db is closed ** immediately and an error is returned. A minor number change is ** acceptable -- it is presumed that old/new dav_props.c can deal with ** the database format. For example, a newer dav_props might update the ** minor value and append information to the end of the metadata record ** (which would be ignored by previous versions). ** ** ** ISSUES: ** ** At the moment, for the dav_get_allprops() and dav_get_props() functions, ** we must return a set of xmlns: declarations for ALL known namespaces ** in the file. There isn't a way to filter this because we don't know ** which are going to be used or not. Examining property names is not ** sufficient because the property values could use entirely different ** namespaces. ** ** ==> we must devise a scheme where we can "garbage collect" the namespace ** entries from the property database. */ #include "apr.h" #include "apr_strings.h" #define APR_WANT_STDIO #define APR_WANT_BYTEFUNC #include "apr_want.h" #include "mod_dav.h" #include "http_log.h" #include "http_request.h" /* ** There is some rough support for writable DAV:getcontenttype and ** DAV:getcontentlanguage properties. If this #define is (1), then ** this support is disabled. ** ** We are disabling it because of a lack of support in GET and PUT ** operations. For GET, it would be "expensive" to look for a propdb, ** open it, and attempt to extract the Content-Type and Content-Language ** values for the response. ** (Handling the PUT would not be difficult, though) */ #define DAV_DISABLE_WRITABLE_PROPS 1 #define DAV_EMPTY_VALUE "\0" /* TWO null terms */ struct dav_propdb { apr_pool_t *p; /* the pool we should use */ request_rec *r; /* the request record */ const dav_resource *resource; /* the target resource */ int deferred; /* open of db has been deferred */ dav_db *db; /* underlying database containing props */ apr_array_header_t *ns_xlate; /* translation of an elem->ns to URI */ dav_namespace_map *mapping; /* namespace mapping */ dav_lockdb *lockdb; /* the lock database */ dav_buffer wb_lock; /* work buffer for lockdiscovery property */ /* if we ever run a GET subreq, it will be stored here */ request_rec *subreq; /* hooks we should use for processing (based on the target resource) */ const dav_hooks_db *db_hooks; }; /* NOTE: dav_core_props[] and the following enum must stay in sync. */ /* ### move these into a "core" liveprop provider? */ static const char * const dav_core_props[] = { "getcontenttype", "getcontentlanguage", "lockdiscovery", "supportedlock", NULL /* sentinel */ }; enum { DAV_PROPID_CORE_getcontenttype = DAV_PROPID_CORE, DAV_PROPID_CORE_getcontentlanguage, DAV_PROPID_CORE_lockdiscovery, DAV_PROPID_CORE_supportedlock, DAV_PROPID_CORE_UNKNOWN }; /* ** This structure is used to track information needed for a rollback. */ typedef struct dav_rollback_item { /* select one of the two rollback context structures based on the value of dav_prop_ctx.is_liveprop */ dav_deadprop_rollback *deadprop; dav_liveprop_rollback *liveprop; } dav_rollback_item; static int dav_find_liveprop_provider(dav_propdb *propdb, const char *ns_uri, const char *propname, const dav_hooks_liveprop **provider) { int propid; *provider = NULL; if (ns_uri == NULL) { /* policy: liveprop providers cannot define no-namespace properties */ return DAV_PROPID_CORE_UNKNOWN; } /* check liveprop providers first, so they can define core properties */ propid = dav_run_find_liveprop(propdb->resource, ns_uri, propname, provider); if (propid != 0) { return propid; } /* check for core property */ if (strcmp(ns_uri, "DAV:") == 0) { const char * const *p = dav_core_props; for (propid = DAV_PROPID_CORE; *p != NULL; ++p, ++propid) if (strcmp(propname, *p) == 0) { return propid; } } /* no provider for this property */ return DAV_PROPID_CORE_UNKNOWN; } static void dav_find_liveprop(dav_propdb *propdb, apr_xml_elem *elem) { const char *ns_uri; dav_elem_private *priv = elem->priv; const dav_hooks_liveprop *hooks; if (elem->ns == APR_XML_NS_NONE) ns_uri = NULL; else if (elem->ns == APR_XML_NS_DAV_ID) ns_uri = "DAV:"; else ns_uri = APR_XML_GET_URI_ITEM(propdb->ns_xlate, elem->ns); priv->propid = dav_find_liveprop_provider(propdb, ns_uri, elem->name, &hooks); /* ### this test seems redundant... */ if (priv->propid != DAV_PROPID_CORE_UNKNOWN) { priv->provider = hooks; } } /* is the live property read/write? */ static int dav_rw_liveprop(dav_propdb *propdb, dav_elem_private *priv) { int propid = priv->propid; /* ** Check the liveprop provider (if this is a provider-defined prop) */ if (priv->provider != NULL) { return (*priv->provider->is_writable)(propdb->resource, propid); } /* these are defined as read-only */ if (propid == DAV_PROPID_CORE_lockdiscovery #if DAV_DISABLE_WRITABLE_PROPS || propid == DAV_PROPID_CORE_getcontenttype || propid == DAV_PROPID_CORE_getcontentlanguage #endif || propid == DAV_PROPID_CORE_supportedlock ) { return 0; } /* these are defined as read/write */ if (propid == DAV_PROPID_CORE_getcontenttype || propid == DAV_PROPID_CORE_getcontentlanguage || propid == DAV_PROPID_CORE_UNKNOWN) { return 1; } /* ** We don't recognize the property, so it must be dead (and writable) */ return 1; } /* do a sub-request to fetch properties for the target resource's URI. */ static void dav_do_prop_subreq(dav_propdb *propdb) { /* need to escape the uri that's in the resource struct because during * the property walker it's not encoded. */ const char *e_uri = ap_escape_uri(propdb->p, propdb->resource->uri); /* perform a "GET" on the resource's URI (note that the resource may not correspond to the current request!). */ propdb->subreq = ap_sub_req_lookup_uri(e_uri, propdb->r, NULL); } static dav_error * dav_insert_coreprop(dav_propdb *propdb, int propid, const char *name, dav_prop_insert what, apr_text_header *phdr, dav_prop_insert *inserted) { const char *value = NULL; dav_error *err; *inserted = DAV_PROP_INSERT_NOTDEF; /* fast-path the common case */ if (propid == DAV_PROPID_CORE_UNKNOWN) return NULL; switch (propid) { case DAV_PROPID_CORE_lockdiscovery: if (propdb->lockdb != NULL) { dav_lock *locks; if ((err = dav_lock_query(propdb->lockdb, propdb->resource, &locks)) != NULL) { return dav_push_error(propdb->p, err->status, 0, "DAV:lockdiscovery could not be " "determined due to a problem fetching " "the locks for this resource.", err); } /* fast-path the no-locks case */ if (locks == NULL) { value = ""; } else { /* ** This may modify the buffer. value may point to ** wb_lock.pbuf or a string constant. */ value = dav_lock_get_activelock(propdb->r, locks, &propdb->wb_lock); /* make a copy to isolate it from changes to wb_lock */ value = apr_pstrdup(propdb->p, propdb->wb_lock.buf); } } break; case DAV_PROPID_CORE_supportedlock: if (propdb->lockdb != NULL) { value = (*propdb->lockdb->hooks->get_supportedlock)(propdb->resource); } break; case DAV_PROPID_CORE_getcontenttype: if (propdb->subreq == NULL) { dav_do_prop_subreq(propdb); } if (propdb->subreq->content_type != NULL) { value = propdb->subreq->content_type; } break; case DAV_PROPID_CORE_getcontentlanguage: { const char *lang; if (propdb->subreq == NULL) { dav_do_prop_subreq(propdb); } if ((lang = apr_table_get(propdb->subreq->headers_out, "Content-Language")) != NULL) { value = lang; } break; } default: /* fall through to interpret as a dead property */ break; } /* if something was supplied, then insert it */ if (value != NULL) { const char *s; if (what == DAV_PROP_INSERT_SUPPORTED) { /* use D: prefix to refer to the DAV: namespace URI, * and let the namespace attribute default to "DAV:" */ s = apr_psprintf(propdb->p, "" DEBUG_CR, name); } else if (what == DAV_PROP_INSERT_VALUE && *value != '\0') { /* use D: prefix to refer to the DAV: namespace URI */ s = apr_psprintf(propdb->p, "%s" DEBUG_CR, name, value, name); } else { /* use D: prefix to refer to the DAV: namespace URI */ s = apr_psprintf(propdb->p, "" DEBUG_CR, name); } apr_text_append(propdb->p, phdr, s); *inserted = what; } return NULL; } static dav_error * dav_insert_liveprop(dav_propdb *propdb, const apr_xml_elem *elem, dav_prop_insert what, apr_text_header *phdr, dav_prop_insert *inserted) { dav_elem_private *priv = elem->priv; *inserted = DAV_PROP_INSERT_NOTDEF; if (priv->provider == NULL) { /* this is a "core" property that we define */ return dav_insert_coreprop(propdb, priv->propid, elem->name, what, phdr, inserted); } /* ask the provider (that defined this prop) to insert the prop */ *inserted = (*priv->provider->insert_prop)(propdb->resource, priv->propid, what, phdr); return NULL; } static void dav_output_prop_name(apr_pool_t *pool, const dav_prop_name *name, dav_xmlns_info *xi, apr_text_header *phdr) { const char *s; if (*name->ns == '\0') s = apr_psprintf(pool, "<%s/>" DEBUG_CR, name->name); else { const char *prefix = dav_xmlns_add_uri(xi, name->ns); s = apr_psprintf(pool, "<%s:%s/>" DEBUG_CR, prefix, name->name); } apr_text_append(pool, phdr, s); } static void dav_insert_xmlns(apr_pool_t *p, const char *pre_prefix, long ns, const char *ns_uri, apr_text_header *phdr) { const char *s; s = apr_psprintf(p, " xmlns:%s%ld=\"%s\"", pre_prefix, ns, ns_uri); apr_text_append(p, phdr, s); } static dav_error *dav_really_open_db(dav_propdb *propdb, int ro) { dav_error *err; /* we're trying to open the db; turn off the 'deferred' flag */ propdb->deferred = 0; /* ask the DB provider to open the thing */ err = (*propdb->db_hooks->open)(propdb->p, propdb->resource, ro, &propdb->db); if (err != NULL) { return dav_push_error(propdb->p, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_PROP_OPENING, "Could not open the property database.", err); } /* ** NOTE: propdb->db could be NULL if we attempted to open a readonly ** database that doesn't exist. If we require read/write ** access, then a database was created and opened. */ return NULL; } DAV_DECLARE(dav_error *)dav_open_propdb(request_rec *r, dav_lockdb *lockdb, const dav_resource *resource, int ro, apr_array_header_t * ns_xlate, dav_propdb **p_propdb) { return dav_popen_propdb(r->pool, r, lockdb, resource, ro, ns_xlate, p_propdb); } DAV_DECLARE(dav_error *)dav_popen_propdb(apr_pool_t *p, request_rec *r, dav_lockdb *lockdb, const dav_resource *resource, int ro, apr_array_header_t * ns_xlate, dav_propdb **p_propdb) { dav_propdb *propdb = NULL; propdb = apr_pcalloc(p, sizeof(*propdb)); propdb->p = p; *p_propdb = NULL; #if DAV_DEBUG if (resource->uri == NULL) { return dav_new_error(r->pool, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "INTERNAL DESIGN ERROR: resource must define " "its URI."); } #endif propdb->r = r; propdb->resource = resource; propdb->ns_xlate = ns_xlate; propdb->db_hooks = DAV_GET_HOOKS_PROPDB(r); propdb->lockdb = lockdb; /* always defer actual open, to avoid expense of accessing db * when only live properties are involved */ propdb->deferred = 1; /* ### what to do about closing the propdb on server failure? */ *p_propdb = propdb; return NULL; } DAV_DECLARE(void) dav_close_propdb(dav_propdb *propdb) { if (propdb->db != NULL) { (*propdb->db_hooks->close)(propdb->db); } if (propdb->subreq) { ap_destroy_sub_req(propdb->subreq); propdb->subreq = NULL; } } DAV_DECLARE(dav_get_props_result) dav_get_allprops(dav_propdb *propdb, dav_prop_insert what) { const dav_hooks_db *db_hooks = propdb->db_hooks; apr_text_header hdr = { 0 }; apr_text_header hdr_ns = { 0 }; dav_get_props_result result = { 0 }; int found_contenttype = 0; int found_contentlang = 0; dav_prop_insert unused_inserted; /* if not just getting supported live properties, * scan all properties in the dead prop database */ if (what != DAV_PROP_INSERT_SUPPORTED) { if (propdb->deferred) { /* ### what to do with db open error? */ (void) dav_really_open_db(propdb, 1 /*ro*/); } /* initialize the result with some start tags... */ apr_text_append(propdb->p, &hdr, "" DEBUG_CR "" DEBUG_CR); /* if there ARE properties, then scan them */ if (propdb->db != NULL) { dav_xmlns_info *xi = dav_xmlns_create(propdb->p); dav_prop_name name; dav_error *err; /* define (up front) any namespaces the db might need */ (void) (*db_hooks->define_namespaces)(propdb->db, xi); /* get the first property name, beginning the scan */ err = (*db_hooks->first_name)(propdb->db, &name); while (!err && name.ns) { /* ** We also look for and ** . If they are not stored as dead ** properties, then we need to perform a subrequest to get ** their values (if any). */ if (*name.ns == 'D' && strcmp(name.ns, "DAV:") == 0 && *name.name == 'g') { if (strcmp(name.name, "getcontenttype") == 0) { found_contenttype = 1; } else if (strcmp(name.name, "getcontentlanguage") == 0) { found_contentlang = 1; } } if (what == DAV_PROP_INSERT_VALUE) { int found; if ((err = (*db_hooks->output_value)(propdb->db, &name, xi, &hdr, &found)) != NULL) { /* ### anything better to do? */ /* ### probably should enter a 500 error */ goto next_key; } /* assert: found == 1 */ } else { /* the value was not requested, so just add an empty tag specifying the property name. */ dav_output_prop_name(propdb->p, &name, xi, &hdr); } next_key: err = (*db_hooks->next_name)(propdb->db, &name); } /* all namespaces have been entered into xi. generate them into the output now. */ dav_xmlns_generate(xi, &hdr_ns); } /* propdb->db != NULL */ /* add namespaces for all the liveprop providers */ dav_add_all_liveprop_xmlns(propdb->p, &hdr_ns); } /* ask the liveprop providers to insert their properties */ dav_run_insert_all_liveprops(propdb->r, propdb->resource, what, &hdr); /* insert the standard properties */ /* ### should be handling the return errors here */ (void)dav_insert_coreprop(propdb, DAV_PROPID_CORE_supportedlock, "supportedlock", what, &hdr, &unused_inserted); (void)dav_insert_coreprop(propdb, DAV_PROPID_CORE_lockdiscovery, "lockdiscovery", what, &hdr, &unused_inserted); /* if we didn't find these, then do the whole subreq thing. */ if (!found_contenttype) { /* ### should be handling the return error here */ (void)dav_insert_coreprop(propdb, DAV_PROPID_CORE_getcontenttype, "getcontenttype", what, &hdr, &unused_inserted); } if (!found_contentlang) { /* ### should be handling the return error here */ (void)dav_insert_coreprop(propdb, DAV_PROPID_CORE_getcontentlanguage, "getcontentlanguage", what, &hdr, &unused_inserted); } /* if not just reporting on supported live props, * terminate the result */ if (what != DAV_PROP_INSERT_SUPPORTED) { apr_text_append(propdb->p, &hdr, "" DEBUG_CR "HTTP/1.1 200 OK" DEBUG_CR "" DEBUG_CR); } result.propstats = hdr.first; result.xmlns = hdr_ns.first; return result; } DAV_DECLARE(dav_get_props_result) dav_get_props(dav_propdb *propdb, apr_xml_doc *doc) { const dav_hooks_db *db_hooks = propdb->db_hooks; apr_xml_elem *elem = dav_find_child(doc->root, "prop"); apr_text_header hdr_good = { 0 }; apr_text_header hdr_bad = { 0 }; apr_text_header hdr_ns = { 0 }; int have_good = 0; dav_get_props_result result = { 0 }; char *marks_liveprop; dav_xmlns_info *xi; int xi_filled = 0; /* ### NOTE: we should pass in TWO buffers -- one for keys, one for the marks */ /* we will ALWAYS provide a "good" result, even if it is EMPTY */ apr_text_append(propdb->p, &hdr_good, "" DEBUG_CR "" DEBUG_CR); /* ### the marks should be in a buffer! */ /* allocate zeroed-memory for the marks. These marks indicate which liveprop namespaces we've generated into the output xmlns buffer */ /* same for the liveprops */ marks_liveprop = apr_pcalloc(propdb->p, dav_get_liveprop_ns_count() + 1); xi = dav_xmlns_create(propdb->p); for (elem = elem->first_child; elem; elem = elem->next) { dav_elem_private *priv; dav_error *err; dav_prop_insert inserted; dav_prop_name name; /* ** First try live property providers; if they don't handle ** the property, then try looking it up in the propdb. */ if (elem->priv == NULL) { /* elem->priv outlives propdb->p. Hence use the request pool */ elem->priv = apr_pcalloc(propdb->r->pool, sizeof(*priv)); } priv = elem->priv; /* cache the propid; dav_get_props() could be called many times */ if (priv->propid == 0) dav_find_liveprop(propdb, elem); if (priv->propid != DAV_PROPID_CORE_UNKNOWN) { /* insert the property. returns 1 if an insertion was done. */ if ((err = dav_insert_liveprop(propdb, elem, DAV_PROP_INSERT_VALUE, &hdr_good, &inserted)) != NULL) { /* ### need to propagate the error to the caller... */ /* ### skip it for now, as if nothing was inserted */ } if (inserted == DAV_PROP_INSERT_VALUE) { have_good = 1; /* ** Add the liveprop's namespace URIs. Note that provider==NULL ** for core properties. */ if (priv->provider != NULL) { const char * const * scan_ns_uri; for (scan_ns_uri = priv->provider->namespace_uris; *scan_ns_uri != NULL; ++scan_ns_uri) { long ns; ns = dav_get_liveprop_ns_index(*scan_ns_uri); if (marks_liveprop[ns]) continue; marks_liveprop[ns] = 1; dav_insert_xmlns(propdb->p, "lp", ns, *scan_ns_uri, &hdr_ns); } } /* property added. move on to the next property. */ continue; } else if (inserted == DAV_PROP_INSERT_NOTDEF) { /* nothing to do. fall thru to allow property to be handled as a dead property */ } #if DAV_DEBUG else { #if 0 /* ### need to change signature to return an error */ return dav_new_error(propdb->p, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "INTERNAL DESIGN ERROR: insert_liveprop " "did not insert what was asked for."); #endif } #endif } /* The property wasn't a live property, so look in the dead property database. */ /* make sure propdb is really open */ if (propdb->deferred) { /* ### what to do with db open error? */ (void) dav_really_open_db(propdb, 1 /*ro*/); } if (elem->ns == APR_XML_NS_NONE) name.ns = ""; else name.ns = APR_XML_GET_URI_ITEM(propdb->ns_xlate, elem->ns); name.name = elem->name; /* only bother to look if a database exists */ if (propdb->db != NULL) { int found; if ((err = (*db_hooks->output_value)(propdb->db, &name, xi, &hdr_good, &found)) != NULL) { /* ### what to do? continue doesn't seem right... */ continue; } if (found) { have_good = 1; /* if we haven't added the db's namespaces, then do so... */ if (!xi_filled) { (void) (*db_hooks->define_namespaces)(propdb->db, xi); xi_filled = 1; } continue; } } /* not found as a live OR dead property. add a record to the "bad" propstats */ /* make sure we've started our "bad" propstat */ if (hdr_bad.first == NULL) { apr_text_append(propdb->p, &hdr_bad, "" DEBUG_CR "" DEBUG_CR); } /* output this property's name (into the bad propstats) */ dav_output_prop_name(propdb->p, &name, xi, &hdr_bad); } apr_text_append(propdb->p, &hdr_good, "" DEBUG_CR "HTTP/1.1 200 OK" DEBUG_CR "" DEBUG_CR); /* default to start with the good */ result.propstats = hdr_good.first; /* we may not have any "bad" results */ if (hdr_bad.first != NULL) { /* "close" the bad propstat */ apr_text_append(propdb->p, &hdr_bad, "" DEBUG_CR "HTTP/1.1 404 Not Found" DEBUG_CR "" DEBUG_CR); /* if there are no good props, then just return the bad */ if (!have_good) { result.propstats = hdr_bad.first; } else { /* hook the bad propstat to the end of the good one */ hdr_good.last->next = hdr_bad.first; } } /* add in all the various namespaces, and return them */ dav_xmlns_generate(xi, &hdr_ns); result.xmlns = hdr_ns.first; return result; } DAV_DECLARE(void) dav_get_liveprop_supported(dav_propdb *propdb, const char *ns_uri, const char *propname, apr_text_header *body) { int propid; const dav_hooks_liveprop *hooks; propid = dav_find_liveprop_provider(propdb, ns_uri, propname, &hooks); if (propid != DAV_PROPID_CORE_UNKNOWN) { if (hooks == NULL) { /* this is a "core" property that we define */ dav_prop_insert unused_inserted; dav_insert_coreprop(propdb, propid, propname, DAV_PROP_INSERT_SUPPORTED, body, &unused_inserted); } else { (*hooks->insert_prop)(propdb->resource, propid, DAV_PROP_INSERT_SUPPORTED, body); } } } DAV_DECLARE_NONSTD(void) dav_prop_validate(dav_prop_ctx *ctx) { dav_propdb *propdb = ctx->propdb; apr_xml_elem *prop = ctx->prop; dav_elem_private *priv; priv = ctx->prop->priv = apr_pcalloc(propdb->p, sizeof(*priv)); /* ** Check to see if this is a live property, and fill the fields ** in the XML elem, as appropriate. ** ** Verify that the property is read/write. If not, then it cannot ** be SET or DELETEd. */ if (priv->propid == 0) { dav_find_liveprop(propdb, prop); /* it's a liveprop if a provider was found */ /* ### actually the "core" props should really be liveprops, but ### there is no "provider" for those and the r/w props are ### treated as dead props anyhow */ ctx->is_liveprop = priv->provider != NULL; } if (!dav_rw_liveprop(propdb, priv)) { ctx->err = dav_new_error(propdb->p, HTTP_CONFLICT, DAV_ERR_PROP_READONLY, 0, "Property is read-only."); return; } if (ctx->is_liveprop) { int defer_to_dead = 0; ctx->err = (*priv->provider->patch_validate)(propdb->resource, prop, ctx->operation, &ctx->liveprop_ctx, &defer_to_dead); if (ctx->err != NULL || !defer_to_dead) return; /* clear is_liveprop -- act as a dead prop now */ ctx->is_liveprop = 0; } /* ** The property is supposed to be stored into the dead-property ** database. Make sure the thing is truly open (and writable). */ if (propdb->deferred && (ctx->err = dav_really_open_db(propdb, 0 /* ro */)) != NULL) { return; } /* ** There should be an open, writable database in here! ** ** Note: the database would be NULL if it was opened readonly and it ** did not exist. */ if (propdb->db == NULL) { ctx->err = dav_new_error(propdb->p, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_PROP_NO_DATABASE, 0, "Attempted to set/remove a property " "without a valid, open, read/write " "property database."); return; } if (ctx->operation == DAV_PROP_OP_SET) { /* ** Prep the element => propdb namespace index mapping, inserting ** namespace URIs into the propdb that don't exist. */ (void) (*propdb->db_hooks->map_namespaces)(propdb->db, propdb->ns_xlate, &propdb->mapping); } else if (ctx->operation == DAV_PROP_OP_DELETE) { /* ** There are no checks to perform here. If a property exists, then ** we will delete it. If it does not exist, then it does not matter ** (see S12.13.1). ** ** Note that if a property does not exist, that does not rule out ** that a SET will occur during this PROPPATCH (thusly creating it). */ } } DAV_DECLARE_NONSTD(void) dav_prop_exec(dav_prop_ctx *ctx) { dav_propdb *propdb = ctx->propdb; dav_error *err = NULL; dav_elem_private *priv = ctx->prop->priv; ctx->rollback = apr_pcalloc(propdb->p, sizeof(*ctx->rollback)); if (ctx->is_liveprop) { err = (*priv->provider->patch_exec)(propdb->resource, ctx->prop, ctx->operation, ctx->liveprop_ctx, &ctx->rollback->liveprop); } else { dav_prop_name name; if (ctx->prop->ns == APR_XML_NS_NONE) name.ns = ""; else name.ns = APR_XML_GET_URI_ITEM(propdb->ns_xlate, ctx->prop->ns); name.name = ctx->prop->name; /* save the old value so that we can do a rollback. */ if ((err = (*propdb->db_hooks ->get_rollback)(propdb->db, &name, &ctx->rollback->deadprop)) != NULL) goto error; if (ctx->operation == DAV_PROP_OP_SET) { /* Note: propdb->mapping was set in dav_prop_validate() */ err = (*propdb->db_hooks->store)(propdb->db, &name, ctx->prop, propdb->mapping); /* ** If an error occurred, then assume that we didn't change the ** value. Remove the rollback item so that we don't try to set ** its value during the rollback. */ /* ### euh... where is the removal? */ } else if (ctx->operation == DAV_PROP_OP_DELETE) { /* ** Delete the property. Ignore errors -- the property is there, or ** we are deleting it for a second time. ** ** http://tools.ietf.org/html/rfc4918#section-14.23 says ** "Specifying the removal of a property that does not exist is ** not an error" */ /* ### but what about other errors? */ (void) (*propdb->db_hooks->remove)(propdb->db, &name); } } error: /* push a more specific error here */ if (err != NULL) { /* ** Use HTTP_INTERNAL_SERVER_ERROR because we shouldn't have seen ** any errors at this point. */ ctx->err = dav_push_error(propdb->p, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_PROP_EXEC, "Could not execute PROPPATCH.", err); } } DAV_DECLARE_NONSTD(void) dav_prop_commit(dav_prop_ctx *ctx) { dav_elem_private *priv = ctx->prop->priv; /* ** Note that a commit implies ctx->err is NULL. The caller should assume ** a status of HTTP_OK for this case. */ if (ctx->is_liveprop) { (*priv->provider->patch_commit)(ctx->propdb->resource, ctx->operation, ctx->liveprop_ctx, ctx->rollback->liveprop); } } DAV_DECLARE_NONSTD(void) dav_prop_rollback(dav_prop_ctx *ctx) { dav_error *err = NULL; dav_elem_private *priv = ctx->prop->priv; /* do nothing if there is no rollback information. */ if (ctx->rollback == NULL) return; /* ** ### if we have an error, and a rollback occurs, then the namespace ** ### mods should not happen at all. Basically, the namespace management ** ### is simply a bitch. */ if (ctx->is_liveprop) { err = (*priv->provider->patch_rollback)(ctx->propdb->resource, ctx->operation, ctx->liveprop_ctx, ctx->rollback->liveprop); } else { err = (*ctx->propdb->db_hooks ->apply_rollback)(ctx->propdb->db, ctx->rollback->deadprop); } if (err != NULL) { if (ctx->err == NULL) ctx->err = err; else { dav_error *scan = err; /* hook previous errors at the end of the rollback error */ while (scan->prev != NULL) scan = scan->prev; scan->prev = ctx->err; ctx->err = err; } } } httpd-2.4.41/modules/dav/main/liveprop.c0000644000000000000500000001043510455005461016411 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_pools.h" #include "apr_hash.h" #include "apr_errno.h" #include "apr_strings.h" #include "util_xml.h" /* for apr_text_header */ #include "mod_dav.h" static apr_hash_t *dav_liveprop_uris = NULL; static long dav_liveprop_count = 0; static apr_status_t dav_cleanup_liveprops(void *ctx) { dav_liveprop_uris = NULL; dav_liveprop_count = 0; return APR_SUCCESS; } static void dav_register_liveprop_namespace(apr_pool_t *p, const char *uri) { long value; if (dav_liveprop_uris == NULL) { dav_liveprop_uris = apr_hash_make(p); apr_pool_cleanup_register(p, NULL, dav_cleanup_liveprops, apr_pool_cleanup_null); } value = (long)apr_hash_get(dav_liveprop_uris, uri, APR_HASH_KEY_STRING); if (value != 0) { /* already registered */ return; } /* start at 1, and count up */ apr_hash_set(dav_liveprop_uris, uri, APR_HASH_KEY_STRING, (void *)++dav_liveprop_count); } DAV_DECLARE(long) dav_get_liveprop_ns_index(const char *uri) { return (long)apr_hash_get(dav_liveprop_uris, uri, APR_HASH_KEY_STRING); } DAV_DECLARE(long) dav_get_liveprop_ns_count(void) { return dav_liveprop_count; } DAV_DECLARE(void) dav_add_all_liveprop_xmlns(apr_pool_t *p, apr_text_header *phdr) { apr_hash_index_t *idx = apr_hash_first(p, dav_liveprop_uris); for ( ; idx != NULL; idx = apr_hash_next(idx) ) { const void *key; void *val; const char *s; apr_hash_this(idx, &key, NULL, &val); s = apr_psprintf(p, " xmlns:lp%ld=\"%s\"", (long)val, (const char *)key); apr_text_append(p, phdr, s); } } DAV_DECLARE(int) dav_do_find_liveprop(const char *ns_uri, const char *name, const dav_liveprop_group *group, const dav_hooks_liveprop **hooks) { const char * const *uris = group->namespace_uris; const dav_liveprop_spec *scan; int ns; /* first: locate the namespace in the namespace table */ for (ns = 0; uris[ns] != NULL; ++ns) if (strcmp(ns_uri, uris[ns]) == 0) break; if (uris[ns] == NULL) { /* not our property (the namespace matched none of ours) */ return 0; } /* second: look for the property in the liveprop specs */ for (scan = group->specs; scan->name != NULL; ++scan) if (ns == scan->ns && strcmp(name, scan->name) == 0) { *hooks = group->hooks; return scan->propid; } /* not our property (same namespace, but no matching prop name) */ return 0; } DAV_DECLARE(long) dav_get_liveprop_info(int propid, const dav_liveprop_group *group, const dav_liveprop_spec **info) { const dav_liveprop_spec *scan; for (scan = group->specs; scan->name != NULL; ++scan) { if (scan->propid == propid) { *info = scan; /* map the provider-local NS into a global NS index */ return dav_get_liveprop_ns_index(group->namespace_uris[scan->ns]); } } /* assert: should not reach this point */ *info = NULL; return 0; } DAV_DECLARE(void) dav_register_liveprop_group(apr_pool_t *p, const dav_liveprop_group *group) { /* register the namespace URIs */ const char * const * uris = group->namespace_uris; for ( ; *uris != NULL; ++uris) { dav_register_liveprop_namespace(p, *uris); } } httpd-2.4.41/modules/dav/main/mod_dav.mak0000644000000000000500000002550312701473373016521 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_dav.dsp !IF "$(CFG)" == "" CFG=mod_dav - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_dav - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_dav - Win32 Release" && "$(CFG)" != "mod_dav - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_dav.mak" CFG="mod_dav - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_dav - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_dav - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_dav - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_dav.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_dav.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\liveprop.obj" -@erase "$(INTDIR)\mod_dav.obj" -@erase "$(INTDIR)\mod_dav.res" -@erase "$(INTDIR)\mod_dav_src.idb" -@erase "$(INTDIR)\mod_dav_src.pdb" -@erase "$(INTDIR)\props.obj" -@erase "$(INTDIR)\providers.obj" -@erase "$(INTDIR)\std_liveprop.obj" -@erase "$(INTDIR)\util.obj" -@erase "$(INTDIR)\util_lock.obj" -@erase "$(OUTDIR)\mod_dav.exp" -@erase "$(OUTDIR)\mod_dav.lib" -@erase "$(OUTDIR)\mod_dav.pdb" -@erase "$(OUTDIR)\mod_dav.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "DAV_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_dav_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_dav.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_dav.so" /d LONG_NAME="dav_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_dav.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_dav.pdb" /debug /out:"$(OUTDIR)\mod_dav.so" /implib:"$(OUTDIR)\mod_dav.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\liveprop.obj" \ "$(INTDIR)\mod_dav.obj" \ "$(INTDIR)\props.obj" \ "$(INTDIR)\providers.obj" \ "$(INTDIR)\std_liveprop.obj" \ "$(INTDIR)\util.obj" \ "$(INTDIR)\util_lock.obj" \ "$(INTDIR)\mod_dav.res" \ "..\..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_dav.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_dav.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_dav.so" if exist .\Release\mod_dav.so.manifest mt.exe -manifest .\Release\mod_dav.so.manifest -outputresource:.\Release\mod_dav.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_dav - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_dav.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_dav.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\liveprop.obj" -@erase "$(INTDIR)\mod_dav.obj" -@erase "$(INTDIR)\mod_dav.res" -@erase "$(INTDIR)\mod_dav_src.idb" -@erase "$(INTDIR)\mod_dav_src.pdb" -@erase "$(INTDIR)\props.obj" -@erase "$(INTDIR)\providers.obj" -@erase "$(INTDIR)\std_liveprop.obj" -@erase "$(INTDIR)\util.obj" -@erase "$(INTDIR)\util_lock.obj" -@erase "$(OUTDIR)\mod_dav.exp" -@erase "$(OUTDIR)\mod_dav.lib" -@erase "$(OUTDIR)\mod_dav.pdb" -@erase "$(OUTDIR)\mod_dav.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "DAV_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_dav_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_dav.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_dav.so" /d LONG_NAME="dav_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_dav.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_dav.pdb" /debug /out:"$(OUTDIR)\mod_dav.so" /implib:"$(OUTDIR)\mod_dav.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav.so LINK32_OBJS= \ "$(INTDIR)\liveprop.obj" \ "$(INTDIR)\mod_dav.obj" \ "$(INTDIR)\props.obj" \ "$(INTDIR)\providers.obj" \ "$(INTDIR)\std_liveprop.obj" \ "$(INTDIR)\util.obj" \ "$(INTDIR)\util_lock.obj" \ "$(INTDIR)\mod_dav.res" \ "..\..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_dav.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_dav.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_dav.so" if exist .\Debug\mod_dav.so.manifest mt.exe -manifest .\Debug\mod_dav.so.manifest -outputresource:.\Debug\mod_dav.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_dav.dep") !INCLUDE "mod_dav.dep" !ELSE !MESSAGE Warning: cannot find "mod_dav.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_dav - Win32 Release" || "$(CFG)" == "mod_dav - Win32 Debug" SOURCE=.\liveprop.c "$(INTDIR)\liveprop.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\mod_dav.c "$(INTDIR)\mod_dav.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\props.c "$(INTDIR)\props.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\providers.c "$(INTDIR)\providers.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\std_liveprop.c "$(INTDIR)\std_liveprop.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\util.c "$(INTDIR)\util.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\util_lock.c "$(INTDIR)\util_lock.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_dav - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\dav\main" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\dav\main" !ELSEIF "$(CFG)" == "mod_dav - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\dav\main" "libapr - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\dav\main" !ENDIF !IF "$(CFG)" == "mod_dav - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\dav\main" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\dav\main" !ELSEIF "$(CFG)" == "mod_dav - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\dav\main" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\dav\main" !ENDIF !IF "$(CFG)" == "mod_dav - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\dav\main" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\dav\main" !ELSEIF "$(CFG)" == "mod_dav - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\dav\main" "libhttpd - Win32 DebugCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\dav\main" !ENDIF SOURCE=..\..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_dav - Win32 Release" "$(INTDIR)\mod_dav.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_dav.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_dav.so" /d LONG_NAME="dav_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_dav - Win32 Debug" "$(INTDIR)\mod_dav.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_dav.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_dav.so" /d LONG_NAME="dav_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/dav/main/config5.m40000644000000000000500000000103411463663047016206 0ustar rootsrcdnl modules enabled in this directory by default APACHE_MODPATH_INIT(dav/main) dav_objects="mod_dav.lo props.lo util.lo util_lock.lo liveprop.lo providers.lo std_liveprop.lo" if test "$enable_http" = "no"; then dav_enable=no else dav_enable=most fi APACHE_MODULE(dav, WebDAV protocol handling. --enable-dav also enables mod_dav_fs, $dav_objects, , $dav_enable) if test "$dav_enable" != "no" -o "$enable_dav" != "no"; then apache_need_expat=yes fi APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) APACHE_MODPATH_FINISH httpd-2.4.41/modules/dav/main/util.c0000644000000000000500000023173012757564422015547 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* ** DAV extension module for Apache 2.0.* ** - various utilities, repository-independent */ #include "apr_strings.h" #include "apr_lib.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "mod_dav.h" #include "http_request.h" #include "http_config.h" #include "http_vhost.h" #include "http_log.h" #include "http_protocol.h" DAV_DECLARE(dav_error*) dav_new_error(apr_pool_t *p, int status, int error_id, apr_status_t aprerr, const char *desc) { dav_error *err = apr_pcalloc(p, sizeof(*err)); /* DBG3("dav_new_error: %d %d %s", status, error_id, desc ? desc : "(no desc)"); */ err->status = status; err->error_id = error_id; err->desc = desc; err->aprerr = aprerr; return err; } DAV_DECLARE(dav_error*) dav_new_error_tag(apr_pool_t *p, int status, int error_id, apr_status_t aprerr, const char *desc, const char *namespace, const char *tagname) { dav_error *err = dav_new_error(p, status, error_id, aprerr, desc); err->tagname = tagname; err->namespace = namespace; return err; } DAV_DECLARE(dav_error*) dav_push_error(apr_pool_t *p, int status, int error_id, const char *desc, dav_error *prev) { dav_error *err = apr_pcalloc(p, sizeof(*err)); err->status = status; err->error_id = error_id; err->desc = desc; err->prev = prev; return err; } DAV_DECLARE(dav_error*) dav_join_error(dav_error *dest, dav_error *src) { dav_error *curr = dest; /* src error doesn't exist so nothing to join just return dest */ if (src == NULL) { return dest; } /* dest error doesn't exist so nothing to join just return src */ if (curr == NULL) { return src; } /* find last error in dest stack */ while (curr->prev != NULL) { curr = curr->prev; } /* add the src error onto end of dest stack and return it */ curr->prev = src; return dest; } DAV_DECLARE(void) dav_check_bufsize(apr_pool_t * p, dav_buffer *pbuf, apr_size_t extra_needed) { /* grow the buffer if necessary */ if (pbuf->cur_len + extra_needed > pbuf->alloc_len) { char *newbuf; pbuf->alloc_len += extra_needed + DAV_BUFFER_PAD; newbuf = apr_palloc(p, pbuf->alloc_len); memcpy(newbuf, pbuf->buf, pbuf->cur_len); pbuf->buf = newbuf; } } DAV_DECLARE(void) dav_set_bufsize(apr_pool_t * p, dav_buffer *pbuf, apr_size_t size) { /* NOTE: this does not retain prior contents */ /* NOTE: this function is used to init the first pointer, too, since the PAD will be larger than alloc_len (0) for zeroed structures */ /* grow if we don't have enough for the requested size plus padding */ if (size + DAV_BUFFER_PAD > pbuf->alloc_len) { /* set the new length; min of MINSIZE */ pbuf->alloc_len = size + DAV_BUFFER_PAD; if (pbuf->alloc_len < DAV_BUFFER_MINSIZE) pbuf->alloc_len = DAV_BUFFER_MINSIZE; pbuf->buf = apr_palloc(p, pbuf->alloc_len); } pbuf->cur_len = size; } /* initialize a buffer and copy the specified (null-term'd) string into it */ DAV_DECLARE(void) dav_buffer_init(apr_pool_t *p, dav_buffer *pbuf, const char *str) { dav_set_bufsize(p, pbuf, strlen(str)); memcpy(pbuf->buf, str, pbuf->cur_len + 1); } /* append a string to the end of the buffer, adjust length */ DAV_DECLARE(void) dav_buffer_append(apr_pool_t *p, dav_buffer *pbuf, const char *str) { apr_size_t len = strlen(str); dav_check_bufsize(p, pbuf, len + 1); memcpy(pbuf->buf + pbuf->cur_len, str, len + 1); pbuf->cur_len += len; } /* place a string on the end of the buffer, do NOT adjust length */ DAV_DECLARE(void) dav_buffer_place(apr_pool_t *p, dav_buffer *pbuf, const char *str) { apr_size_t len = strlen(str); dav_check_bufsize(p, pbuf, len + 1); memcpy(pbuf->buf + pbuf->cur_len, str, len + 1); } /* place some memory on the end of a buffer; do NOT adjust length */ DAV_DECLARE(void) dav_buffer_place_mem(apr_pool_t *p, dav_buffer *pbuf, const void *mem, apr_size_t amt, apr_size_t pad) { dav_check_bufsize(p, pbuf, amt + pad); memcpy(pbuf->buf + pbuf->cur_len, mem, amt); } /* ** dav_lookup_uri() ** ** Extension for ap_sub_req_lookup_uri() which can't handle absolute ** URIs properly. ** ** If NULL is returned, then an error occurred with parsing the URI or ** the URI does not match the current server. */ DAV_DECLARE(dav_lookup_result) dav_lookup_uri(const char *uri, request_rec * r, int must_be_absolute) { dav_lookup_result result = { 0 }; const char *scheme; apr_port_t port; apr_uri_t comp; char *new_file; const char *domain; /* first thing to do is parse the URI into various components */ if (apr_uri_parse(r->pool, uri, &comp) != APR_SUCCESS) { result.err.status = HTTP_BAD_REQUEST; result.err.desc = "Invalid syntax in Destination URI."; return result; } /* the URI must be an absoluteURI (WEBDAV S9.3) */ if (comp.scheme == NULL && must_be_absolute) { result.err.status = HTTP_BAD_REQUEST; result.err.desc = "Destination URI must be an absolute URI."; return result; } /* the URI must not have a query (args) or a fragment */ if (comp.query != NULL || comp.fragment != NULL) { result.err.status = HTTP_BAD_REQUEST; result.err.desc = "Destination URI contains invalid components " "(a query or a fragment)."; return result; } /* If the scheme or port was provided, then make sure that it matches the scheme/port of this request. If the request must be absolute, then require the (explicit/implicit) scheme/port be matching. ### hmm. if a port wasn't provided (does the parse return port==0?), ### but we're on a non-standard port, then we won't detect that the ### URI's port implies the wrong one. */ if (comp.scheme != NULL || comp.port != 0 || must_be_absolute) { /* ### not sure this works if the current request came in via https: */ scheme = r->parsed_uri.scheme; if (scheme == NULL) scheme = ap_http_scheme(r); /* insert a port if the URI did not contain one */ if (comp.port == 0) comp.port = apr_uri_port_of_scheme(comp.scheme); /* now, verify that the URI uses the same scheme as the current. request. the port must match our port. */ port = r->connection->local_addr->port; if (strcasecmp(comp.scheme, scheme) != 0 #ifdef APACHE_PORT_HANDLING_IS_BUSTED || comp.port != port #endif ) { result.err.status = HTTP_BAD_GATEWAY; result.err.desc = apr_psprintf(r->pool, "Destination URI refers to " "different scheme or port " "(%s://hostname:%d)" APR_EOL_STR "(want: %s://hostname:%d)", comp.scheme ? comp.scheme : scheme, comp.port ? comp.port : port, scheme, port); return result; } } /* we have verified the scheme, port, and general structure */ /* ** Hrm. IE5 will pass unqualified hostnames for both the ** Host: and Destination: headers. This breaks the ** http_vhost.c::matches_aliases function. ** ** For now, qualify unqualified comp.hostnames with ** r->server->server_hostname. ** ** ### this is a big hack. Apache should provide a better way. ** ### maybe the admin should list the unqualified hosts in a ** ### block? */ if (comp.hostname != NULL && strrchr(comp.hostname, '.') == NULL && (domain = strchr(r->server->server_hostname, '.')) != NULL) { comp.hostname = apr_pstrcat(r->pool, comp.hostname, domain, NULL); } /* now, if a hostname was provided, then verify that it represents the same server as the current connection. note that we just use our port, since we've verified the URI matches ours */ #ifdef APACHE_PORT_HANDLING_IS_BUSTED if (comp.hostname != NULL && !ap_matches_request_vhost(r, comp.hostname, port)) { result.err.status = HTTP_BAD_GATEWAY; result.err.desc = "Destination URI refers to a different server."; return result; } #endif /* we have verified that the requested URI denotes the same server as the current request. Therefore, we can use ap_sub_req_lookup_uri() */ /* reconstruct a URI as just the path */ new_file = apr_uri_unparse(r->pool, &comp, APR_URI_UNP_OMITSITEPART); /* * Lookup the URI and return the sub-request. Note that we use the * same HTTP method on the destination. This allows the destination * to apply appropriate restrictions (e.g. readonly). */ result.rnew = ap_sub_req_method_uri(r->method, new_file, r, NULL); return result; } /* --------------------------------------------------------------- ** ** XML UTILITY FUNCTIONS */ /* validate that the root element uses a given DAV: tagname (TRUE==valid) */ DAV_DECLARE(int) dav_validate_root(const apr_xml_doc *doc, const char *tagname) { return doc->root && doc->root->ns == APR_XML_NS_DAV_ID && strcmp(doc->root->name, tagname) == 0; } /* find and return the (unique) child with a given DAV: tagname */ DAV_DECLARE(apr_xml_elem *) dav_find_child(const apr_xml_elem *elem, const char *tagname) { apr_xml_elem *child = elem->first_child; for (; child; child = child->next) if (child->ns == APR_XML_NS_DAV_ID && !strcmp(child->name, tagname)) return child; return NULL; } /* gather up all the CDATA into a single string */ DAV_DECLARE(const char *) dav_xml_get_cdata(const apr_xml_elem *elem, apr_pool_t *pool, int strip_white) { apr_size_t len = 0; apr_text *scan; const apr_xml_elem *child; char *cdata; char *s; apr_size_t tlen; const char *found_text = NULL; /* initialize to avoid gcc warning */ int found_count = 0; for (scan = elem->first_cdata.first; scan != NULL; scan = scan->next) { found_text = scan->text; ++found_count; len += strlen(found_text); } for (child = elem->first_child; child != NULL; child = child->next) { for (scan = child->following_cdata.first; scan != NULL; scan = scan->next) { found_text = scan->text; ++found_count; len += strlen(found_text); } } /* some fast-path cases: * 1) zero-length cdata * 2) a single piece of cdata with no whitespace to strip */ if (len == 0) return ""; if (found_count == 1) { if (!strip_white || (!apr_isspace(*found_text) && !apr_isspace(found_text[len - 1]))) return found_text; } cdata = s = apr_palloc(pool, len + 1); for (scan = elem->first_cdata.first; scan != NULL; scan = scan->next) { tlen = strlen(scan->text); memcpy(s, scan->text, tlen); s += tlen; } for (child = elem->first_child; child != NULL; child = child->next) { for (scan = child->following_cdata.first; scan != NULL; scan = scan->next) { tlen = strlen(scan->text); memcpy(s, scan->text, tlen); s += tlen; } } *s = '\0'; if (strip_white) { /* trim leading whitespace */ while (apr_isspace(*cdata)) { /* assume: return false for '\0' */ ++cdata; --len; } /* trim trailing whitespace */ while (len-- > 0 && apr_isspace(cdata[len])) continue; cdata[len + 1] = '\0'; } return cdata; } DAV_DECLARE(dav_xmlns_info *) dav_xmlns_create(apr_pool_t *pool) { dav_xmlns_info *xi = apr_pcalloc(pool, sizeof(*xi)); xi->pool = pool; xi->uri_prefix = apr_hash_make(pool); xi->prefix_uri = apr_hash_make(pool); return xi; } DAV_DECLARE(void) dav_xmlns_add(dav_xmlns_info *xi, const char *prefix, const char *uri) { /* this "should" not overwrite a prefix mapping */ apr_hash_set(xi->prefix_uri, prefix, APR_HASH_KEY_STRING, uri); /* note: this may overwrite an existing URI->prefix mapping, but it doesn't matter -- any prefix is usable to specify the URI. */ apr_hash_set(xi->uri_prefix, uri, APR_HASH_KEY_STRING, prefix); } DAV_DECLARE(const char *) dav_xmlns_add_uri(dav_xmlns_info *xi, const char *uri) { const char *prefix; if ((prefix = apr_hash_get(xi->uri_prefix, uri, APR_HASH_KEY_STRING)) != NULL) return prefix; prefix = apr_psprintf(xi->pool, "g%d", xi->count++); dav_xmlns_add(xi, prefix, uri); return prefix; } DAV_DECLARE(const char *) dav_xmlns_get_uri(dav_xmlns_info *xi, const char *prefix) { return apr_hash_get(xi->prefix_uri, prefix, APR_HASH_KEY_STRING); } DAV_DECLARE(const char *) dav_xmlns_get_prefix(dav_xmlns_info *xi, const char *uri) { return apr_hash_get(xi->uri_prefix, uri, APR_HASH_KEY_STRING); } DAV_DECLARE(void) dav_xmlns_generate(dav_xmlns_info *xi, apr_text_header *phdr) { apr_hash_index_t *hi = apr_hash_first(xi->pool, xi->prefix_uri); for (; hi != NULL; hi = apr_hash_next(hi)) { const void *prefix; void *uri; const char *s; apr_hash_this(hi, &prefix, NULL, &uri); s = apr_psprintf(xi->pool, " xmlns:%s=\"%s\"", (const char *)prefix, (const char *)uri); apr_text_append(xi->pool, phdr, s); } } /* --------------------------------------------------------------- ** ** Timeout header processing ** */ /* dav_get_timeout: If the Timeout: header exists, return a time_t * when this lock is expected to expire. Otherwise, return * a time_t of DAV_TIMEOUT_INFINITE. * * It's unclear if DAV clients are required to understand * Seconds-xxx and Infinity time values. We assume that they do. * In addition, for now, that's all we understand, too. */ DAV_DECLARE(time_t) dav_get_timeout(request_rec *r) { time_t now, expires = DAV_TIMEOUT_INFINITE; const char *timeout_const = apr_table_get(r->headers_in, "Timeout"); const char *timeout = apr_pstrdup(r->pool, timeout_const), *val; if (timeout == NULL) return DAV_TIMEOUT_INFINITE; /* Use the first thing we understand, or infinity if * we don't understand anything. */ while ((val = ap_getword_white(r->pool, &timeout)) && strlen(val)) { if (!strncmp(val, "Infinite", 8)) { return DAV_TIMEOUT_INFINITE; } if (!strncmp(val, "Second-", 7)) { val += 7; /* ### We need to handle overflow better: * ### timeout will be <= 2^32 - 1 */ expires = atol(val); now = time(NULL); return now + expires; } } return DAV_TIMEOUT_INFINITE; } /* --------------------------------------------------------------- ** ** If Header processing ** */ /* add_if_resource returns a new if_header, linking it to next_ih. */ static dav_if_header *dav_add_if_resource(apr_pool_t *p, dav_if_header *next_ih, const char *uri, apr_size_t uri_len) { dav_if_header *ih; if ((ih = apr_pcalloc(p, sizeof(*ih))) == NULL) return NULL; ih->uri = uri; ih->uri_len = uri_len; ih->next = next_ih; return ih; } /* add_if_state adds a condition to an if_header. */ static dav_error * dav_add_if_state(apr_pool_t *p, dav_if_header *ih, const char *state_token, dav_if_state_type t, int condition, const dav_hooks_locks *locks_hooks) { dav_if_state_list *new_sl; new_sl = apr_pcalloc(p, sizeof(*new_sl)); new_sl->condition = condition; new_sl->type = t; if (t == dav_if_opaquelock) { dav_error *err; if ((err = (*locks_hooks->parse_locktoken)(p, state_token, &new_sl->locktoken)) != NULL) { /* If the state token cannot be parsed, treat it as an * unknown state; this will evaluate to "false" later * during If header validation. */ if (err->error_id == DAV_ERR_LOCK_UNK_STATE_TOKEN) { new_sl->type = dav_if_unknown; } else { /* ### maybe add a higher-level description */ return err; } } } else new_sl->etag = state_token; new_sl->next = ih->state; ih->state = new_sl; return NULL; } /* fetch_next_token returns the substring from str+1 * to the next occurrence of char term, or \0, whichever * occurs first. Leading whitespace is ignored. */ static char *dav_fetch_next_token(char **str, char term) { char *sp; char *token; token = *str + 1; while (*token && (*token == ' ' || *token == '\t')) token++; if ((sp = strchr(token, term)) == NULL) return NULL; *sp = '\0'; *str = sp; return token; } /* dav_process_if_header: * * If NULL (no error) is returned, then **if_header points to the * "If" productions structure (or NULL if "If" is not present). * * ### this part is bogus: * If an error is encountered, the error is logged. Parent should * return err->status. */ static dav_error * dav_process_if_header(request_rec *r, dav_if_header **p_ih) { dav_error *err; char *str; char *list; const char *state_token; const char *uri = NULL; /* scope of current production; NULL=no-tag */ apr_size_t uri_len = 0; apr_status_t rv; dav_if_header *ih = NULL; apr_uri_t parsed_uri; const dav_hooks_locks *locks_hooks = DAV_GET_HOOKS_LOCKS(r); enum {no_tagged, tagged, unknown} list_type = unknown; int condition; *p_ih = NULL; if ((str = apr_pstrdup(r->pool, apr_table_get(r->headers_in, "If"))) == NULL) return NULL; while (*str) { switch(*str) { case '<': /* Tagged-list production - following states apply to this uri */ if (list_type == no_tagged || ((uri = dav_fetch_next_token(&str, '>')) == NULL)) { return dav_new_error(r->pool, HTTP_BAD_REQUEST, DAV_ERR_IF_TAGGED, 0, "Invalid If-header: unclosed \"<\" or " "unexpected tagged-list production."); } /* 2518 specifies this must be an absolute URI; just take the * relative part for later comparison against r->uri */ if ((rv = apr_uri_parse(r->pool, uri, &parsed_uri)) != APR_SUCCESS || !parsed_uri.path) { return dav_new_error(r->pool, HTTP_BAD_REQUEST, DAV_ERR_IF_TAGGED, rv, "Invalid URI in tagged If-header."); } /* note that parsed_uri.path is allocated; we can trash it */ /* clean up the URI a bit */ ap_getparents(parsed_uri.path); /* the resources we will compare to have unencoded paths */ if (ap_unescape_url(parsed_uri.path) != OK) { return dav_new_error(r->pool, HTTP_BAD_REQUEST, DAV_ERR_IF_TAGGED, rv, "Invalid percent encoded URI in " "tagged If-header."); } uri_len = strlen(parsed_uri.path); if (uri_len > 1 && parsed_uri.path[uri_len - 1] == '/') { parsed_uri.path[--uri_len] = '\0'; } uri = parsed_uri.path; list_type = tagged; break; case '(': /* List production */ /* If a uri has not been encountered, this is a No-Tagged-List */ if (list_type == unknown) list_type = no_tagged; if ((list = dav_fetch_next_token(&str, ')')) == NULL) { return dav_new_error(r->pool, HTTP_BAD_REQUEST, DAV_ERR_IF_UNCLOSED_PAREN, 0, "Invalid If-header: unclosed \"(\"."); } if ((ih = dav_add_if_resource(r->pool, ih, uri, uri_len)) == NULL) { /* ### dav_add_if_resource() should return an error for us! */ return dav_new_error(r->pool, HTTP_BAD_REQUEST, DAV_ERR_IF_PARSE, 0, "Internal server error parsing \"If:\" " "header."); } condition = DAV_IF_COND_NORMAL; while (*list) { /* List is the entire production (in a uri scope) */ switch (*list) { case '<': if ((state_token = dav_fetch_next_token(&list, '>')) == NULL) { /* ### add a description to this error */ return dav_new_error(r->pool, HTTP_BAD_REQUEST, DAV_ERR_IF_PARSE, 0, NULL); } if ((err = dav_add_if_state(r->pool, ih, state_token, dav_if_opaquelock, condition, locks_hooks)) != NULL) { /* ### maybe add a higher level description */ return err; } condition = DAV_IF_COND_NORMAL; break; case '[': if ((state_token = dav_fetch_next_token(&list, ']')) == NULL) { /* ### add a description to this error */ return dav_new_error(r->pool, HTTP_BAD_REQUEST, DAV_ERR_IF_PARSE, 0, NULL); } if ((err = dav_add_if_state(r->pool, ih, state_token, dav_if_etag, condition, locks_hooks)) != NULL) { /* ### maybe add a higher level description */ return err; } condition = DAV_IF_COND_NORMAL; break; case 'N': if (list[1] == 'o' && list[2] == 't') { if (condition != DAV_IF_COND_NORMAL) { return dav_new_error(r->pool, HTTP_BAD_REQUEST, DAV_ERR_IF_MULTIPLE_NOT, 0, "Invalid \"If:\" header: " "Multiple \"not\" entries " "for the same state."); } condition = DAV_IF_COND_NOT; } list += 2; break; case ' ': case '\t': break; default: return dav_new_error(r->pool, HTTP_BAD_REQUEST, DAV_ERR_IF_UNK_CHAR, 0, apr_psprintf(r->pool, "Invalid \"If:\" " "header: Unexpected " "character encountered " "(0x%02x, '%c').", *list, *list)); } list++; } break; case ' ': case '\t': break; default: return dav_new_error(r->pool, HTTP_BAD_REQUEST, DAV_ERR_IF_UNK_CHAR, 0, apr_psprintf(r->pool, "Invalid \"If:\" header: " "Unexpected character " "encountered (0x%02x, '%c').", *str, *str)); } str++; } *p_ih = ih; return NULL; } static int dav_find_submitted_locktoken(const dav_if_header *if_header, const dav_lock *lock_list, const dav_hooks_locks *locks_hooks) { for (; if_header != NULL; if_header = if_header->next) { const dav_if_state_list *state_list; for (state_list = if_header->state; state_list != NULL; state_list = state_list->next) { if (state_list->type == dav_if_opaquelock) { const dav_lock *lock; /* given state_list->locktoken, match it */ /* ** The resource will have one or more lock tokens. We only ** need to match one of them against any token in the ** If: header. ** ** One token case: It is an exclusive or shared lock. Either ** way, we must find it. ** ** N token case: They are shared locks. By policy, we need ** to match only one. The resource's other ** tokens may belong to somebody else (so we ** shouldn't see them in the If: header anyway) */ for (lock = lock_list; lock != NULL; lock = lock->next) { if (!(*locks_hooks->compare_locktoken)(state_list->locktoken, lock->locktoken)) { return 1; } } } } } return 0; } /* dav_validate_resource_state: * Returns NULL if path/uri meets if-header and lock requirements */ static dav_error * dav_validate_resource_state(apr_pool_t *p, const dav_resource *resource, dav_lockdb *lockdb, const dav_if_header *if_header, int flags, dav_buffer *pbuf, request_rec *r) { dav_error *err; const char *uri; const char *etag; const dav_hooks_locks *locks_hooks = (lockdb ? lockdb->hooks : NULL); const dav_if_header *ifhdr_scan; dav_if_state_list *state_list; dav_lock *lock_list; dav_lock *lock; int num_matched; int num_that_apply; int seen_locktoken; apr_size_t uri_len; const char *reason = NULL; /* DBG1("validate: <%s>", resource->uri); */ /* ** The resource will have one of three states: ** ** 1) No locks. We have no special requirements that the user supply ** specific locktokens. One of the state lists must match, and ** we're done. ** ** 2) One exclusive lock. The locktoken must appear *anywhere* in the ** If: header. Of course, asserting the token in a "Not" term will ** quickly fail that state list :-). If the locktoken appears in ** one of the state lists *and* one state list matches, then we're ** done. ** ** 3) One or more shared locks. One of the locktokens must appear ** *anywhere* in the If: header. If one of the locktokens appears, ** and we match one state list, then we are done. ** ** The variable determines whether we have seen one ** of this resource's locktokens in the If: header. */ /* ** If this is a new lock request, will contain the requested ** lock scope. Three rules apply: ** ** 1) Do not require a (shared) locktoken to be seen (when we are ** applying another shared lock) ** 2) If the scope is exclusive and we see any locks, fail. ** 3) If the scope is shared and we see an exclusive lock, fail. */ if (lockdb == NULL) { /* we're in State 1. no locks. */ lock_list = NULL; } else { /* ** ### hrm... we don't need to have these fully ** ### resolved since we're only looking at the ** ### locktokens... ** ** ### use get_locks w/ calltype=PARTIAL */ if ((err = dav_lock_query(lockdb, resource, &lock_list)) != NULL) { return dav_push_error(p, HTTP_INTERNAL_SERVER_ERROR, 0, "The locks could not be queried for " "verification against a possible \"If:\" " "header.", err); } /* lock_list now determines whether we're in State 1, 2, or 3. */ } /* ** For a new, exclusive lock: if any locks exist, fail. ** For a new, shared lock: if an exclusive lock exists, fail. ** else, do not require a token to be seen. */ if (flags & DAV_LOCKSCOPE_EXCLUSIVE) { if (lock_list != NULL) { return dav_new_error(p, HTTP_LOCKED, 0, 0, "Existing lock(s) on the requested resource " "prevent an exclusive lock."); } /* ** There are no locks, so we can pretend that we've already met ** any requirement to find the resource's locks in an If: header. */ seen_locktoken = 1; } else if (flags & DAV_LOCKSCOPE_SHARED) { /* ** Strictly speaking, we don't need this loop. Either the first ** (and only) lock will be EXCLUSIVE, or none of them will be. */ for (lock = lock_list; lock != NULL; lock = lock->next) { if (lock->scope == DAV_LOCKSCOPE_EXCLUSIVE) { return dav_new_error(p, HTTP_LOCKED, 0, 0, "The requested resource is already " "locked exclusively."); } } /* ** The locks on the resource (if any) are all shared. Set the ** flag to indicate that we do not need to find ** the locks in an If: header. */ seen_locktoken = 1; } else { /* ** For methods other than LOCK: ** ** If we have no locks or if the resource is not being modified ** (per RFC 4918 the lock token is not required on resources ** we are not changing), then can be set to true -- ** pretending that we've already met the requirement of seeing one ** of the resource's locks in the If: header. ** ** Otherwise, it must be cleared and we'll look for one. */ seen_locktoken = (lock_list == NULL || flags & DAV_VALIDATE_NO_MODIFY); } /* ** If there is no If: header, then we can shortcut some logic: ** ** 1) if we do not need to find a locktoken in the (non-existent) If: ** header, then we are successful. ** ** 2) if we must find a locktoken in the (non-existent) If: header, then ** we fail. */ if (if_header == NULL) { if (seen_locktoken) return NULL; return dav_new_error(p, HTTP_LOCKED, 0, 0, "This resource is locked and an \"If:\" header " "was not supplied to allow access to the " "resource."); } /* the If: header is present */ /* ** If a dummy header is present (because of a Lock-Token: header), then ** we are required to find that token in this resource's set of locks. ** If we have no locks, then we immediately fail. ** ** This is a 400 (Bad Request) since they should only submit a locktoken ** that actually exists. ** ** Don't issue this response if we're talking about the parent resource. ** It is okay for that resource to NOT have this locktoken. ** (in fact, it certainly will not: a dummy_header only occurs for the ** UNLOCK method, the parent is checked only for locknull resources, ** and the parent certainly does not have the (locknull's) locktoken) */ if (lock_list == NULL && if_header->dummy_header) { if (flags & DAV_VALIDATE_IS_PARENT) return NULL; return dav_new_error(p, HTTP_BAD_REQUEST, 0, 0, "The locktoken specified in the \"Lock-Token:\" " "header is invalid because this resource has no " "outstanding locks."); } /* ** Prepare the input URI. We want the URI to never have a trailing slash. ** ** When URIs are placed into the dav_if_header structure, they are ** guaranteed to never have a trailing slash. If the URIs are equivalent, ** then it doesn't matter if they both lack a trailing slash -- they're ** still equivalent. ** ** Note: we could also ensure that a trailing slash is present on both ** URIs, but the majority of URIs provided to us via a resource walk ** will not contain that trailing slash. */ uri = resource->uri; uri_len = strlen(uri); if (uri[uri_len - 1] == '/') { dav_set_bufsize(p, pbuf, uri_len); memcpy(pbuf->buf, uri, uri_len); pbuf->buf[--uri_len] = '\0'; uri = pbuf->buf; } /* get the resource's etag; we may need it during the checks */ etag = (*resource->hooks->getetag)(resource); /* how many state_lists apply to this URI? */ num_that_apply = 0; /* If there are if-headers, fail if this resource * does not match at least one state_list. */ for (ifhdr_scan = if_header; ifhdr_scan != NULL; ifhdr_scan = ifhdr_scan->next) { /* DBG2("uri=<%s> if_uri=<%s>", uri, ifhdr_scan->uri ? ifhdr_scan->uri : "(no uri)"); */ if (ifhdr_scan->uri != NULL && (uri_len != ifhdr_scan->uri_len || memcmp(uri, ifhdr_scan->uri, uri_len) != 0)) { /* ** A tagged-list's URI doesn't match this resource's URI. ** Skip to the next state_list to see if it will match. */ continue; } /* this state_list applies to this resource */ /* ** ### only one state_list should ever apply! a no-tag, or a tagged ** ### where S9.4.2 states only one can match. ** ** ### revamp this code to loop thru ifhdr_scan until we find the ** ### matching state_list. process it. stop. */ ++num_that_apply; /* To succeed, resource must match *all* of the states * specified in the state_list. */ for (state_list = ifhdr_scan->state; state_list != NULL; state_list = state_list->next) { switch(state_list->type) { case dav_if_etag: { const char *given_etag, *current_etag; int mismatch; /* Do a weak entity comparison function as defined in * RFC 2616 13.3.3. */ if (state_list->etag[0] == 'W' && state_list->etag[1] == '/') { given_etag = state_list->etag + 2; } else { given_etag = state_list->etag; } if (etag[0] == 'W' && etag[1] == '/') { current_etag = etag + 2; } else { current_etag = etag; } mismatch = strcmp(given_etag, current_etag); if (state_list->condition == DAV_IF_COND_NORMAL && mismatch) { /* ** The specified entity-tag does not match the ** entity-tag on the resource. This state_list is ** not going to match. Bust outta here. */ reason = "an entity-tag was specified, but the resource's " "actual ETag does not match."; goto state_list_failed; } else if (state_list->condition == DAV_IF_COND_NOT && !mismatch) { /* ** The specified entity-tag DOES match the ** entity-tag on the resource. This state_list is ** not going to match. Bust outta here. */ reason = "an entity-tag was specified using the \"Not\" form, " "but the resource's actual ETag matches the provided " "entity-tag."; goto state_list_failed; } break; } case dav_if_opaquelock: if (lockdb == NULL) { if (state_list->condition == DAV_IF_COND_NOT) { /* the locktoken is definitely not there! (success) */ continue; } /* condition == DAV_IF_COND_NORMAL */ /* ** If no lockdb is provided, then validation fails for ** this state_list (NORMAL means we were supposed to ** find the token, which we obviously cannot do without ** a lock database). ** ** Go and try the next state list. */ reason = "a State-token was supplied, but a lock database " "is not available for to provide the required lock."; goto state_list_failed; } /* Resource validation 'fails' if: * ANY of the lock->locktokens match * a NOT state_list->locktoken, * OR * NONE of the lock->locktokens match * a NORMAL state_list->locktoken. */ num_matched = 0; for (lock = lock_list; lock != NULL; lock = lock->next) { /* DBG2("compare: rsrc=%s ifhdr=%s", (*locks_hooks->format_locktoken)(p, lock->locktoken), (*locks_hooks->format_locktoken)(p, state_list->locktoken)); */ /* nothing to do if the locktokens do not match. */ if ((*locks_hooks->compare_locktoken)(state_list->locktoken, lock->locktoken)) { continue; } /* ** We have now matched up one of the resource's locktokens ** to a locktoken in a State-token in the If: header. ** Note this fact, so that we can pass the overall ** requirement of seeing at least one of the resource's ** locktokens. */ seen_locktoken = 1; if (state_list->condition == DAV_IF_COND_NOT) { /* ** This state requires that the specified locktoken ** is NOT present on the resource. But we just found ** it. There is no way this state-list can now ** succeed, so go try another one. */ reason = "a State-token was supplied, which used a " "\"Not\" condition. The State-token was found " "in the locks on this resource"; goto state_list_failed; } /* condition == DAV_IF_COND_NORMAL */ /* Validate auth_user: If an authenticated user created ** the lock, only the same user may submit that locktoken ** to manipulate a resource. */ if (lock->auth_user && (!r->user || strcmp(lock->auth_user, r->user))) { const char *errmsg; errmsg = apr_pstrcat(p, "User \"", r->user, "\" submitted a locktoken created " "by user \"", lock->auth_user, "\".", NULL); return dav_new_error(p, HTTP_FORBIDDEN, 0, 0, errmsg); } /* ** We just matched a specified State-Token to one of the ** resource's locktokens. ** ** Break out of the lock scan -- we only needed to find ** one match (actually, there shouldn't be any other ** matches in the lock list). */ num_matched = 1; break; } if (num_matched == 0 && state_list->condition == DAV_IF_COND_NORMAL) { /* ** We had a NORMAL state, meaning that we should have ** found the State-Token within the locks on this ** resource. We didn't, so this state_list must fail. */ reason = "a State-token was supplied, but it was not found " "in the locks on this resource."; goto state_list_failed; } break; case dav_if_unknown: /* Request is predicated on some unknown state token, * which must be presumed to *not* match, so fail * unless this is a Not condition. */ if (state_list->condition == DAV_IF_COND_NORMAL) { reason = "an unknown state token was supplied"; goto state_list_failed; } break; } /* switch */ } /* foreach ( state_list ) */ /* ** We've checked every state in this state_list and none of them ** have failed. Since all of them succeeded, then we have a matching ** state list and we may be done. ** ** The next requirement is that we have seen one of the resource's ** locktokens (if any). If we have, then we can just exit. If we ** haven't, then we need to keep looking. */ if (seen_locktoken) { /* woo hoo! */ return NULL; } /* ** Haven't seen one. Let's break out of the search and just look ** for a matching locktoken. */ break; /* ** This label is used when we detect that a state_list is not ** going to match this resource. We bust out and try the next ** state_list. */ state_list_failed: ; } /* foreach ( ifhdr_scan ) */ /* ** The above loop exits for one of two reasons: ** 1) a state_list matched and seen_locktoken is false. ** 2) all if_header structures were scanned, without (1) occurring */ if (ifhdr_scan == NULL) { /* ** We finished the loop without finding any matching state lists. */ /* ** If none of the state_lists apply to this resource, then we ** may have succeeded. Note that this scenario implies a ** tagged-list with no matching state_lists. If the If: header ** was a no-tag-list, then it would have applied to this resource. ** ** S9.4.2 states that when no state_lists apply, then the header ** should be ignored. ** ** If we saw one of the resource's locktokens, then we're done. ** If we did not see a locktoken, then we fail. */ if (num_that_apply == 0) { if (seen_locktoken) return NULL; /* ** We may have aborted the scan before seeing the locktoken. ** Rescan the If: header to see if we can find the locktoken ** somewhere. ** ** Note that seen_locktoken == 0 implies lock_list != NULL ** which implies locks_hooks != NULL. */ if (dav_find_submitted_locktoken(if_header, lock_list, locks_hooks)) { /* ** We found a match! We're set... none of the If: header ** assertions apply (implicit success), and the If: header ** specified the locktoken somewhere. We're done. */ return NULL; } return dav_new_error(p, HTTP_LOCKED, 0 /* error_id */, 0, "This resource is locked and the \"If:\" " "header did not specify one of the " "locktokens for this resource's lock(s)."); } /* else: one or more state_lists were applicable, but failed. */ /* ** If the dummy_header did not match, then they specified an ** incorrect token in the Lock-Token header. Forget whether the ** If: statement matched or not... we'll tell them about the ** bad Lock-Token first. That is considered a 400 (Bad Request). */ if (if_header->dummy_header) { return dav_new_error(p, HTTP_BAD_REQUEST, 0, 0, "The locktoken specified in the " "\"Lock-Token:\" header did not specify one " "of this resource's locktoken(s)."); } if (reason == NULL) { return dav_new_error(p, HTTP_PRECONDITION_FAILED, 0, 0, "The preconditions specified by the \"If:\" " "header did not match this resource."); } return dav_new_error(p, HTTP_PRECONDITION_FAILED, 0, 0, apr_psprintf(p, "The precondition(s) specified by " "the \"If:\" header did not match " "this resource. At least one " "failure is because: %s", reason)); } /* assert seen_locktoken == 0 */ /* ** ifhdr_scan != NULL implies we found a matching state_list. ** ** Since we're still here, it also means that we have not yet found ** one the resource's locktokens in the If: header. ** ** Scan all the if_headers and states looking for one of this ** resource's locktokens. Note that we need to go back and scan them ** all -- we may have aborted a scan with a failure before we saw a ** matching token. ** ** Note that seen_locktoken == 0 implies lock_list != NULL which implies ** locks_hooks != NULL. */ if (dav_find_submitted_locktoken(if_header, lock_list, locks_hooks)) { /* ** We found a match! We're set... we have a matching state list, ** and the If: header specified the locktoken somewhere. We're done. */ return NULL; } /* ** We had a matching state list, but the user agent did not specify one ** of this resource's locktokens. Tell them so. ** ** Note that we need to special-case the message on whether a "dummy" ** header exists. If it exists, yet we didn't see a needed locktoken, ** then that implies the dummy header (Lock-Token header) did NOT ** specify one of this resource's locktokens. (this implies something ** in the real If: header matched) ** ** We want to note the 400 (Bad Request) in favor of a 423 (Locked). */ if (if_header->dummy_header) { return dav_new_error(p, HTTP_BAD_REQUEST, 0, 0, "The locktoken specified in the " "\"Lock-Token:\" header did not specify one " "of this resource's locktoken(s)."); } return dav_new_error(p, HTTP_LOCKED, 1 /* error_id */, 0, "This resource is locked and the \"If:\" header " "did not specify one of the " "locktokens for this resource's lock(s)."); } /* dav_validate_walker: Walker callback function to validate resource state */ static dav_error * dav_validate_walker(dav_walk_resource *wres, int calltype) { dav_walker_ctx *ctx = wres->walk_ctx; dav_error *err; if ((err = dav_validate_resource_state(ctx->w.pool, wres->resource, ctx->w.lockdb, ctx->if_header, ctx->flags, &ctx->work_buf, ctx->r)) == NULL) { /* There was no error, so just bug out. */ return NULL; } /* ** If we have a serious server error, or if the request itself failed, ** then just return error (not a multistatus). */ if (ap_is_HTTP_SERVER_ERROR(err->status) || (*wres->resource->hooks->is_same_resource)(wres->resource, ctx->w.root)) { /* ### maybe push a higher-level description? */ return err; } /* associate the error with the current URI */ dav_add_response(wres, err->status, NULL); return NULL; } /* If-* header checking */ static int dav_meets_conditions(request_rec *r, int resource_state) { const char *if_match, *if_none_match; int retVal; /* If-Match '*' fix. Resource existence not checked by ap_meets_conditions. * If-Match '*' request should succeed only if the resource exists. */ if ((if_match = apr_table_get(r->headers_in, "If-Match")) != NULL) { if (if_match[0] == '*' && resource_state != DAV_RESOURCE_EXISTS) return HTTP_PRECONDITION_FAILED; } retVal = ap_meets_conditions(r); /* If-None-Match '*' fix. If-None-Match '*' request should succeed * if the resource does not exist. */ if (retVal == HTTP_PRECONDITION_FAILED) { /* Note. If if_none_match != NULL, if_none_match is the culprit. * Since, in presence of If-None-Match, * other If-* headers are undefined. */ if ((if_none_match = apr_table_get(r->headers_in, "If-None-Match")) != NULL) { if (if_none_match[0] == '*' && resource_state != DAV_RESOURCE_EXISTS) { return OK; } } } return retVal; } /* ** dav_validate_request: Validate if-headers (and check for locks) on: ** (1) r->filename @ depth; ** (2) Parent of r->filename if check_parent == 1 ** ** The check of parent should be done when it is necessary to verify that ** the parent collection will accept a new member (ie current resource ** state is null). ** ** Return OK on successful validation. ** On error, return appropriate HTTP_* code, and log error. If a multi-stat ** error is necessary, response will point to it, else NULL. */ DAV_DECLARE(dav_error *) dav_validate_request(request_rec *r, dav_resource *resource, int depth, dav_locktoken *locktoken, dav_response **response, int flags, dav_lockdb *lockdb) { dav_error *err; int result; dav_if_header *if_header; int lock_db_opened_locally = 0; const dav_hooks_locks *locks_hooks = DAV_GET_HOOKS_LOCKS(r); const dav_hooks_repository *repos_hooks = resource->hooks; dav_buffer work_buf = { 0 }; dav_response *new_response; int resource_state; const char *etag; int set_etag = 0; #if DAV_DEBUG if (depth && response == NULL) { /* ** ### bleck. we can't return errors for other URIs unless we have ** ### a "response" ptr. */ return dav_new_error(r->pool, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "DESIGN ERROR: dav_validate_request called " "with depth>0, but no response ptr."); } #endif if (response != NULL) *response = NULL; /* Set the ETag header required by dav_meets_conditions() */ etag = apr_table_get(r->headers_out, "ETag"); if (!etag) { etag = (*resource->hooks->getetag)(resource); if (etag && *etag) { apr_table_set(r->headers_out, "ETag", etag); set_etag = 1; } } /* Do the standard checks for conditional requests using * If-..-Since, If-Match etc */ resource_state = dav_get_resource_state(r, resource); result = dav_meets_conditions(r, resource_state); if (set_etag) { /* * If we have set an ETag to headers out above for * dav_meets_conditions() revert this here as we do not want to set * the ETag in responses to requests with methods where this might not * be desired. */ apr_table_unset(r->headers_out, "ETag"); } if (result != OK) { return dav_new_error(r->pool, result, 0, 0, NULL); } /* always parse (and later process) the If: header */ if ((err = dav_process_if_header(r, &if_header)) != NULL) { /* ### maybe add higher-level description */ return err; } /* If a locktoken was specified, create a dummy if_header with which * to validate resources. In the interim, figure out why DAV uses * locktokens in an if-header without a Lock-Token header to refresh * locks, but a Lock-Token header without an if-header to remove them. */ if (locktoken != NULL) { dav_if_header *ifhdr_new; ifhdr_new = apr_pcalloc(r->pool, sizeof(*ifhdr_new)); ifhdr_new->uri = resource->uri; ifhdr_new->uri_len = strlen(resource->uri); ifhdr_new->dummy_header = 1; ifhdr_new->state = apr_pcalloc(r->pool, sizeof(*ifhdr_new->state)); ifhdr_new->state->type = dav_if_opaquelock; ifhdr_new->state->condition = DAV_IF_COND_NORMAL; ifhdr_new->state->locktoken = locktoken; ifhdr_new->next = if_header; if_header = ifhdr_new; } /* ** If necessary, open the lock database (read-only, lazily); ** the validation process may need to retrieve or update lock info. ** Otherwise, assume provided lockdb is valid and opened rw. */ if (lockdb == NULL) { if (locks_hooks != NULL) { if ((err = (*locks_hooks->open_lockdb)(r, 0, 0, &lockdb)) != NULL) { /* ### maybe insert higher-level comment */ return err; } lock_db_opened_locally = 1; } } /* (1) Validate the specified resource, at the specified depth. * Avoid the walk there is no if_header and we aren't planning * to modify this resource. */ if (resource->exists && depth > 0 && !(!if_header && flags & DAV_VALIDATE_NO_MODIFY)) { dav_walker_ctx ctx = { { 0 } }; dav_response *multi_status; ctx.w.walk_type = DAV_WALKTYPE_NORMAL; ctx.w.func = dav_validate_walker; ctx.w.walk_ctx = &ctx; ctx.w.pool = r->pool; ctx.w.root = resource; ctx.if_header = if_header; ctx.r = r; ctx.flags = flags; if (lockdb != NULL) { ctx.w.lockdb = lockdb; ctx.w.walk_type |= DAV_WALKTYPE_LOCKNULL; } err = (*repos_hooks->walk)(&ctx.w, DAV_INFINITY, &multi_status); if (err == NULL) { *response = multi_status; } /* else: implies a 5xx status code occurred. */ } else { err = dav_validate_resource_state(r->pool, resource, lockdb, if_header, flags, &work_buf, r); } /* (2) Validate the parent resource if requested */ if (err == NULL && (flags & DAV_VALIDATE_PARENT)) { dav_resource *parent_resource; err = (*repos_hooks->get_parent_resource)(resource, &parent_resource); if (err == NULL && parent_resource == NULL) { err = dav_new_error(r->pool, HTTP_FORBIDDEN, 0, 0, "Cannot access parent of repository root."); } else if (err == NULL) { err = dav_validate_resource_state(r->pool, parent_resource, lockdb, if_header, flags | DAV_VALIDATE_IS_PARENT, &work_buf, r); /* ** This error occurred on the parent resource. This implies that ** we have to create a multistatus response (to report the error ** against a URI other than the Request-URI). "Convert" this error ** into a multistatus response. */ if (err != NULL) { new_response = apr_pcalloc(r->pool, sizeof(*new_response)); new_response->href = parent_resource->uri; new_response->status = err->status; new_response->desc = "A validation error has occurred on the parent resource, " "preventing the operation on the resource specified by " "the Request-URI."; if (err->desc != NULL) { new_response->desc = apr_pstrcat(r->pool, new_response->desc, " The error was: ", err->desc, NULL); } /* assert: DAV_VALIDATE_PARENT implies response != NULL */ new_response->next = *response; *response = new_response; err = NULL; } } } if (lock_db_opened_locally) (*locks_hooks->close_lockdb)(lockdb); /* ** If we don't have a (serious) error, and we have multistatus responses, ** then we need to construct an "error". This error will be the overall ** status returned, and the multistatus responses will go into its body. ** ** For certain methods, the overall error will be a 424. The default is ** to construct a standard 207 response. */ if (err == NULL && response != NULL && *response != NULL) { apr_text *propstat = NULL; if ((flags & DAV_VALIDATE_USE_424) != 0) { /* manufacture a 424 error to hold the multistatus response(s) */ return dav_new_error(r->pool, HTTP_FAILED_DEPENDENCY, 0, 0, "An error occurred on another resource, " "preventing the requested operation on " "this resource."); } /* ** Whatever caused the error, the Request-URI should have a 424 ** associated with it since we cannot complete the method. ** ** For a LOCK operation, insert an empty DAV:lockdiscovery property. ** For other methods, return a simple 424. */ if ((flags & DAV_VALIDATE_ADD_LD) != 0) { propstat = apr_pcalloc(r->pool, sizeof(*propstat)); propstat->text = "" DEBUG_CR "" DEBUG_CR "HTTP/1.1 424 Failed Dependency" DEBUG_CR "" DEBUG_CR; } /* create the 424 response */ new_response = apr_pcalloc(r->pool, sizeof(*new_response)); new_response->href = resource->uri; new_response->status = HTTP_FAILED_DEPENDENCY; new_response->propresult.propstats = propstat; new_response->desc = "An error occurred on another resource, preventing the " "requested operation on this resource."; new_response->next = *response; *response = new_response; /* manufacture a 207 error for the multistatus response(s) */ return dav_new_error(r->pool, HTTP_MULTI_STATUS, 0, 0, "Error(s) occurred on resources during the " "validation process."); } return err; } /* dav_get_locktoken_list: * * Sets ltl to a locktoken_list of all positive locktokens in header, * else NULL if no If-header, or no positive locktokens. */ DAV_DECLARE(dav_error *) dav_get_locktoken_list(request_rec *r, dav_locktoken_list **ltl) { dav_error *err; dav_if_header *if_header; dav_if_state_list *if_state; dav_locktoken_list *lock_token = NULL; *ltl = NULL; if ((err = dav_process_if_header(r, &if_header)) != NULL) { /* ### add a higher-level description? */ return err; } while (if_header != NULL) { if_state = if_header->state; /* Beginning of the if_state linked list */ while (if_state != NULL) { if (if_state->condition == DAV_IF_COND_NORMAL && if_state->type == dav_if_opaquelock) { lock_token = apr_pcalloc(r->pool, sizeof(dav_locktoken_list)); lock_token->locktoken = if_state->locktoken; lock_token->next = *ltl; *ltl = lock_token; } if_state = if_state->next; } if_header = if_header->next; } if (*ltl == NULL) { /* No nodes added */ return dav_new_error(r->pool, HTTP_BAD_REQUEST, DAV_ERR_IF_ABSENT, 0, "No locktokens were specified in the \"If:\" " "header, so the refresh could not be performed."); } return NULL; } #if 0 /* not needed right now... */ static const char *strip_white(const char *s, apr_pool_t *pool) { apr_size_t idx; /* trim leading whitespace */ while (apr_isspace(*s)) /* assume: return false for '\0' */ ++s; /* trim trailing whitespace */ idx = strlen(s) - 1; if (apr_isspace(s[idx])) { char *s2 = apr_pstrdup(pool, s); while (apr_isspace(s2[idx]) && idx > 0) --idx; s2[idx + 1] = '\0'; return s2; } return s; } #endif #define DAV_LABEL_HDR "Label" /* dav_add_vary_header * * If there were any headers in the request which require a Vary header * in the response, add it. */ DAV_DECLARE(void) dav_add_vary_header(request_rec *in_req, request_rec *out_req, const dav_resource *resource) { const dav_hooks_vsn *vsn_hooks = DAV_GET_HOOKS_VSN(in_req); /* ### this is probably all wrong... I think there is a function in ### the Apache API to add things to the Vary header. need to check */ /* Only versioning headers require a Vary response header, * so only do this check if there is a versioning provider */ if (vsn_hooks != NULL) { const char *target = apr_table_get(in_req->headers_in, DAV_LABEL_HDR); /* If Target-Selector specified, add it to the Vary header */ if (target != NULL) { const char *vary = apr_table_get(out_req->headers_out, "Vary"); if (vary == NULL) vary = DAV_LABEL_HDR; else vary = apr_pstrcat(out_req->pool, vary, "," DAV_LABEL_HDR, NULL); apr_table_setn(out_req->headers_out, "Vary", vary); } } } /* dav_can_auto_checkout * * Determine whether auto-checkout is enabled for a resource. * r - the request_rec * resource - the resource * auto_version - the value of the auto_versionable hook for the resource * lockdb - pointer to lock database (opened if necessary) * auto_checkout - set to 1 if auto-checkout enabled */ static dav_error * dav_can_auto_checkout( request_rec *r, dav_resource *resource, dav_auto_version auto_version, dav_lockdb **lockdb, int *auto_checkout) { dav_error *err; dav_lock *lock_list; *auto_checkout = 0; if (auto_version == DAV_AUTO_VERSION_ALWAYS) { *auto_checkout = 1; } else if (auto_version == DAV_AUTO_VERSION_LOCKED) { if (*lockdb == NULL) { const dav_hooks_locks *locks_hooks = DAV_GET_HOOKS_LOCKS(r); if (locks_hooks == NULL) { return dav_new_error(r->pool, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "Auto-checkout is only enabled for locked resources, " "but there is no lock provider."); } if ((err = (*locks_hooks->open_lockdb)(r, 0, 0, lockdb)) != NULL) { return dav_push_error(r->pool, HTTP_INTERNAL_SERVER_ERROR, 0, "Cannot open lock database to determine " "auto-versioning behavior.", err); } } if ((err = dav_lock_query(*lockdb, resource, &lock_list)) != NULL) { return dav_push_error(r->pool, HTTP_INTERNAL_SERVER_ERROR, 0, "The locks could not be queried for " "determining auto-versioning behavior.", err); } if (lock_list != NULL) *auto_checkout = 1; } return NULL; } /* see mod_dav.h for docco */ DAV_DECLARE(dav_error *) dav_auto_checkout( request_rec *r, dav_resource *resource, int parent_only, dav_auto_version_info *av_info) { const dav_hooks_vsn *vsn_hooks = DAV_GET_HOOKS_VSN(r); dav_lockdb *lockdb = NULL; dav_error *err = NULL; /* Initialize results */ memset(av_info, 0, sizeof(*av_info)); /* if no versioning provider, just return */ if (vsn_hooks == NULL) return NULL; /* check parent resource if requested or if resource must be created */ if (!resource->exists || parent_only) { dav_resource *parent; if ((err = (*resource->hooks->get_parent_resource)(resource, &parent)) != NULL) goto done; if (parent == NULL || !parent->exists) { err = dav_new_error(r->pool, HTTP_CONFLICT, 0, 0, apr_psprintf(r->pool, "Missing one or more intermediate " "collections. Cannot create resource %s.", ap_escape_html(r->pool, resource->uri))); goto done; } av_info->parent_resource = parent; /* if parent versioned and not checked out, see if it can be */ if (parent->versioned && !parent->working) { int checkout_parent; if ((err = dav_can_auto_checkout(r, parent, (*vsn_hooks->auto_versionable)(parent), &lockdb, &checkout_parent)) != NULL) { goto done; } if (!checkout_parent) { err = dav_new_error(r->pool, HTTP_CONFLICT, 0, 0, ""); goto done; } /* Try to checkout the parent collection. * Note that auto-versioning can only be applied to a version selector, * so no separate working resource will be created. */ if ((err = (*vsn_hooks->checkout)(parent, 1 /*auto_checkout*/, 0, 0, 0, NULL, NULL)) != NULL) { err = dav_push_error(r->pool, HTTP_CONFLICT, 0, apr_psprintf(r->pool, "Unable to auto-checkout parent collection. " "Cannot create resource %s.", ap_escape_html(r->pool, resource->uri)), err); goto done; } /* remember that parent was checked out */ av_info->parent_checkedout = 1; } } /* if only checking parent, we're done */ if (parent_only) goto done; /* if creating a new resource, see if it should be version-controlled */ if (!resource->exists && (*vsn_hooks->auto_versionable)(resource) == DAV_AUTO_VERSION_ALWAYS) { if ((err = (*vsn_hooks->vsn_control)(resource, NULL)) != NULL) { err = dav_push_error(r->pool, HTTP_CONFLICT, 0, apr_psprintf(r->pool, "Unable to create versioned resource %s.", ap_escape_html(r->pool, resource->uri)), err); goto done; } /* remember that resource was created */ av_info->resource_versioned = 1; } /* if resource is versioned, make sure it is checked out */ if (resource->versioned && !resource->working) { int checkout_resource; if ((err = dav_can_auto_checkout(r, resource, (*vsn_hooks->auto_versionable)(resource), &lockdb, &checkout_resource)) != NULL) { goto done; } if (!checkout_resource) { err = dav_new_error(r->pool, HTTP_CONFLICT, 0, 0, ""); goto done; } /* Auto-versioning can only be applied to version selectors, so * no separate working resource will be created. */ if ((err = (*vsn_hooks->checkout)(resource, 1 /*auto_checkout*/, 0, 0, 0, NULL, NULL)) != NULL) { err = dav_push_error(r->pool, HTTP_CONFLICT, 0, apr_psprintf(r->pool, "Unable to checkout resource %s.", ap_escape_html(r->pool, resource->uri)), err); goto done; } /* remember that resource was checked out */ av_info->resource_checkedout = 1; } done: /* make sure lock database is closed */ if (lockdb != NULL) (*lockdb->hooks->close_lockdb)(lockdb); /* if an error occurred, undo any auto-versioning operations already done */ if (err != NULL) { dav_auto_checkin(r, resource, 1 /*undo*/, 0 /*unlock*/, av_info); return err; } return NULL; } /* see mod_dav.h for docco */ DAV_DECLARE(dav_error *) dav_auto_checkin( request_rec *r, dav_resource *resource, int undo, int unlock, dav_auto_version_info *av_info) { const dav_hooks_vsn *vsn_hooks = DAV_GET_HOOKS_VSN(r); dav_error *err = NULL; dav_auto_version auto_version; /* If no versioning provider, this is a no-op */ if (vsn_hooks == NULL) return NULL; /* If undoing auto-checkouts, then do uncheckouts */ if (undo) { if (resource != NULL) { if (av_info->resource_checkedout) { if ((err = (*vsn_hooks->uncheckout)(resource)) != NULL) { return dav_push_error(r->pool, HTTP_INTERNAL_SERVER_ERROR, 0, apr_psprintf(r->pool, "Unable to undo auto-checkout " "of resource %s.", ap_escape_html(r->pool, resource->uri)), err); } } if (av_info->resource_versioned) { dav_response *response; /* ### should we do anything with the response? */ if ((err = (*resource->hooks->remove_resource)(resource, &response)) != NULL) { return dav_push_error(r->pool, HTTP_INTERNAL_SERVER_ERROR, 0, apr_psprintf(r->pool, "Unable to undo auto-version-control " "of resource %s.", ap_escape_html(r->pool, resource->uri)), err); } } } if (av_info->parent_resource != NULL && av_info->parent_checkedout) { if ((err = (*vsn_hooks->uncheckout)(av_info->parent_resource)) != NULL) { return dav_push_error(r->pool, HTTP_INTERNAL_SERVER_ERROR, 0, apr_psprintf(r->pool, "Unable to undo auto-checkout " "of parent collection %s.", ap_escape_html(r->pool, av_info->parent_resource->uri)), err); } } return NULL; } /* If the resource was checked out, and auto-checkin is enabled, * then check it in. */ if (resource != NULL && resource->working && (unlock || av_info->resource_checkedout)) { auto_version = (*vsn_hooks->auto_versionable)(resource); if (auto_version == DAV_AUTO_VERSION_ALWAYS || (unlock && (auto_version == DAV_AUTO_VERSION_LOCKED))) { if ((err = (*vsn_hooks->checkin)(resource, 0 /*keep_checked_out*/, NULL)) != NULL) { return dav_push_error(r->pool, HTTP_INTERNAL_SERVER_ERROR, 0, apr_psprintf(r->pool, "Unable to auto-checkin resource %s.", ap_escape_html(r->pool, resource->uri)), err); } } } /* If parent resource was checked out, and auto-checkin is enabled, * then check it in. */ if (!unlock && av_info->parent_checkedout && av_info->parent_resource != NULL && av_info->parent_resource->working) { auto_version = (*vsn_hooks->auto_versionable)(av_info->parent_resource); if (auto_version == DAV_AUTO_VERSION_ALWAYS) { if ((err = (*vsn_hooks->checkin)(av_info->parent_resource, 0 /*keep_checked_out*/, NULL)) != NULL) { return dav_push_error(r->pool, HTTP_INTERNAL_SERVER_ERROR, 0, apr_psprintf(r->pool, "Unable to auto-checkin parent collection %s.", ap_escape_html(r->pool, av_info->parent_resource->uri)), err); } } } return NULL; } httpd-2.4.41/modules/dav/main/mod_dav.c0000644000000000000500000053062213506617416016200 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * DAV extension module for Apache 2.0.* * * This module is repository-independent. It depends on hooks provided by a * repository implementation. * * APACHE ISSUES: * - within a DAV hierarchy, if an unknown method is used and we default * to Apache's implementation, it sends back an OPTIONS with the wrong * set of methods -- there is NO HOOK for us. * therefore: we need to manually handle the HTTP_METHOD_NOT_ALLOWED * and HTTP_NOT_IMPLEMENTED responses (not ap_send_error_response). * - process_mkcol_body() had to dup code from ap_setup_client_block(). * - it would be nice to get status lines from Apache for arbitrary * status codes * - it would be nice to be able to extend Apache's set of response * codes so that it doesn't return 500 when an unknown code is placed * into r->status. * - http_vhost functions should apply "const" to their params * * DESIGN NOTES: * - For PROPFIND, we batch up the entire response in memory before * sending it. We may want to reorganize around sending the information * as we suck it in from the propdb. Alternatively, we should at least * generate a total Content-Length if we're going to buffer in memory * so that we can keep the connection open. */ #include "apr_strings.h" #include "apr_lib.h" /* for apr_is* */ #define APR_WANT_STRFUNC #include "apr_want.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_main.h" #include "http_protocol.h" #include "http_request.h" #include "util_script.h" #include "mod_dav.h" #include "ap_provider.h" /* ### what is the best way to set this? */ #define DAV_DEFAULT_PROVIDER "filesystem" /* used to denote that mod_dav will be handling this request */ #define DAV_HANDLER_NAME "dav-handler" APLOG_USE_MODULE(dav); enum { DAV_ENABLED_UNSET = 0, DAV_ENABLED_OFF, DAV_ENABLED_ON }; /* per-dir configuration */ typedef struct { const char *provider_name; const dav_provider *provider; const char *dir; int locktimeout; int allow_depthinfinity; } dav_dir_conf; /* per-server configuration */ typedef struct { int unused; } dav_server_conf; #define DAV_INHERIT_VALUE(parent, child, field) \ ((child)->field ? (child)->field : (parent)->field) /* forward-declare for use in configuration lookup */ extern module DAV_DECLARE_DATA dav_module; /* DAV methods */ enum { DAV_M_BIND = 0, DAV_M_SEARCH, DAV_M_LAST }; static int dav_methods[DAV_M_LAST]; static int dav_init_handler(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { /* DBG0("dav_init_handler"); */ /* Register DAV methods */ dav_methods[DAV_M_BIND] = ap_method_register(p, "BIND"); dav_methods[DAV_M_SEARCH] = ap_method_register(p, "SEARCH"); return OK; } static void *dav_create_server_config(apr_pool_t *p, server_rec *s) { dav_server_conf *newconf; newconf = (dav_server_conf *)apr_pcalloc(p, sizeof(*newconf)); /* ### this isn't used at the moment... */ return newconf; } static void *dav_merge_server_config(apr_pool_t *p, void *base, void *overrides) { #if 0 dav_server_conf *child = overrides; #endif dav_server_conf *newconf; newconf = (dav_server_conf *)apr_pcalloc(p, sizeof(*newconf)); /* ### nothing to merge right now... */ return newconf; } static void *dav_create_dir_config(apr_pool_t *p, char *dir) { /* NOTE: dir==NULL creates the default per-dir config */ dav_dir_conf *conf; conf = (dav_dir_conf *)apr_pcalloc(p, sizeof(*conf)); /* clean up the directory to remove any trailing slash */ if (dir != NULL) { char *d; apr_size_t l; l = strlen(dir); d = apr_pstrmemdup(p, dir, l); if (l > 1 && d[l - 1] == '/') d[l - 1] = '\0'; conf->dir = d; } return conf; } static void *dav_merge_dir_config(apr_pool_t *p, void *base, void *overrides) { dav_dir_conf *parent = base; dav_dir_conf *child = overrides; dav_dir_conf *newconf = (dav_dir_conf *)apr_pcalloc(p, sizeof(*newconf)); /* DBG3("dav_merge_dir_config: new=%08lx base=%08lx overrides=%08lx", (long)newconf, (long)base, (long)overrides); */ newconf->provider_name = DAV_INHERIT_VALUE(parent, child, provider_name); newconf->provider = DAV_INHERIT_VALUE(parent, child, provider); if (parent->provider_name != NULL) { if (child->provider_name == NULL) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(00578) "\"DAV Off\" cannot be used to turn off a subtree " "of a DAV-enabled location."); } else if (strcasecmp(child->provider_name, parent->provider_name) != 0) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(00579) "A subtree cannot specify a different DAV provider " "than its parent."); } } newconf->locktimeout = DAV_INHERIT_VALUE(parent, child, locktimeout); newconf->dir = DAV_INHERIT_VALUE(parent, child, dir); newconf->allow_depthinfinity = DAV_INHERIT_VALUE(parent, child, allow_depthinfinity); return newconf; } DAV_DECLARE(const char *) dav_get_provider_name(request_rec *r) { dav_dir_conf *conf = ap_get_module_config(r->per_dir_config, &dav_module); return conf ? conf->provider_name : NULL; } static const dav_provider *dav_get_provider(request_rec *r) { dav_dir_conf *conf; conf = ap_get_module_config(r->per_dir_config, &dav_module); /* assert: conf->provider_name != NULL (otherwise, DAV is disabled, and we wouldn't be here) */ /* assert: conf->provider != NULL (checked when conf->provider_name is set) */ return conf->provider; } DAV_DECLARE(const dav_hooks_locks *) dav_get_lock_hooks(request_rec *r) { return dav_get_provider(r)->locks; } DAV_DECLARE(const dav_hooks_propdb *) dav_get_propdb_hooks(request_rec *r) { return dav_get_provider(r)->propdb; } DAV_DECLARE(const dav_hooks_vsn *) dav_get_vsn_hooks(request_rec *r) { return dav_get_provider(r)->vsn; } DAV_DECLARE(const dav_hooks_binding *) dav_get_binding_hooks(request_rec *r) { return dav_get_provider(r)->binding; } DAV_DECLARE(const dav_hooks_search *) dav_get_search_hooks(request_rec *r) { return dav_get_provider(r)->search; } /* * Command handler for the DAV directive, which is TAKE1. */ static const char *dav_cmd_dav(cmd_parms *cmd, void *config, const char *arg1) { dav_dir_conf *conf = (dav_dir_conf *)config; if (strcasecmp(arg1, "on") == 0) { conf->provider_name = DAV_DEFAULT_PROVIDER; } else if (strcasecmp(arg1, "off") == 0) { conf->provider_name = NULL; conf->provider = NULL; } else { conf->provider_name = arg1; } if (conf->provider_name != NULL) { /* lookup and cache the actual provider now */ conf->provider = dav_lookup_provider(conf->provider_name); if (conf->provider == NULL) { /* by the time they use it, the provider should be loaded and registered with us. */ return apr_psprintf(cmd->pool, "Unknown DAV provider: %s", conf->provider_name); } } return NULL; } /* * Command handler for the DAVDepthInfinity directive, which is FLAG. */ static const char *dav_cmd_davdepthinfinity(cmd_parms *cmd, void *config, int arg) { dav_dir_conf *conf = (dav_dir_conf *)config; if (arg) conf->allow_depthinfinity = DAV_ENABLED_ON; else conf->allow_depthinfinity = DAV_ENABLED_OFF; return NULL; } /* * Command handler for DAVMinTimeout directive, which is TAKE1 */ static const char *dav_cmd_davmintimeout(cmd_parms *cmd, void *config, const char *arg1) { dav_dir_conf *conf = (dav_dir_conf *)config; conf->locktimeout = atoi(arg1); if (conf->locktimeout < 0) return "DAVMinTimeout requires a non-negative integer."; return NULL; } /* ** dav_error_response() ** ** Send a nice response back to the user. In most cases, Apache doesn't ** allow us to provide details in the body about what happened. This ** function allows us to completely specify the response body. ** ** ### this function is not logging any errors! (e.g. the body) */ static int dav_error_response(request_rec *r, int status, const char *body) { r->status = status; r->status_line = ap_get_status_line(status); ap_set_content_type(r, "text/html; charset=ISO-8859-1"); /* begin the response now... */ ap_rvputs(r, DAV_RESPONSE_BODY_1, r->status_line, DAV_RESPONSE_BODY_2, &r->status_line[4], DAV_RESPONSE_BODY_3, body, DAV_RESPONSE_BODY_4, ap_psignature("


    \n", r), DAV_RESPONSE_BODY_5, NULL); /* the response has been sent. */ /* * ### Use of DONE obviates logging..! */ return DONE; } /* * Send a "standardized" error response based on the error's namespace & tag */ static int dav_error_response_tag(request_rec *r, dav_error *err) { r->status = err->status; ap_set_content_type(r, DAV_XML_CONTENT_TYPE); ap_rputs(DAV_XML_HEADER DEBUG_CR "desc != NULL) { /* ### should move this namespace somewhere (with the others!) */ ap_rputs(" xmlns:m=\"http://apache.org/dav/xmlns\"", r); } if (err->childtags) { if (err->namespace != NULL) { ap_rprintf(r, " xmlns:C=\"%s\">" DEBUG_CR "%s" DEBUG_CR, err->namespace, err->tagname, err->childtags, err->tagname); } else { ap_rprintf(r, ">" DEBUG_CR "%s" DEBUG_CR, err->tagname, err->childtags, err->tagname); } } else { if (err->namespace != NULL) { ap_rprintf(r, " xmlns:C=\"%s\">" DEBUG_CR "" DEBUG_CR, err->namespace, err->tagname); } else { ap_rprintf(r, ">" DEBUG_CR "" DEBUG_CR, err->tagname); } } /* here's our mod_dav specific tag: */ if (err->desc != NULL) { ap_rprintf(r, "" DEBUG_CR "%s" DEBUG_CR "" DEBUG_CR, err->error_id, apr_xml_quote_string(r->pool, err->desc, 0)); } ap_rputs("" DEBUG_CR, r); /* the response has been sent. */ /* * ### Use of DONE obviates logging..! */ return DONE; } /* * Apache's URI escaping does not replace '&' since that is a valid character * in a URI (to form a query section). We must explicitly handle it so that * we can embed the URI into an XML document. */ static const char *dav_xml_escape_uri(apr_pool_t *p, const char *uri) { const char *e_uri = ap_escape_uri(p, uri); /* check the easy case... */ if (ap_strchr_c(e_uri, '&') == NULL) return e_uri; /* there was a '&', so more work is needed... sigh. */ /* * Note: this is a teeny bit of overkill since we know there are no * '<' or '>' characters, but who cares. */ return apr_xml_quote_string(p, e_uri, 0); } /* Write a complete RESPONSE object out as a xml element. Data is sent into brigade BB, which is auto-flushed into the output filter stack for request R. Use POOL for any temporary allocations. [Presumably the tag has already been written; this routine is shared by dav_send_multistatus and dav_stream_response.] */ DAV_DECLARE(void) dav_send_one_response(dav_response *response, apr_bucket_brigade *bb, request_rec *r, apr_pool_t *pool) { apr_text *t = NULL; if (response->propresult.xmlns == NULL) { ap_fputs(r->output_filters, bb, ""); } else { ap_fputs(r->output_filters, bb, "propresult.xmlns; t; t = t->next) { ap_fputs(r->output_filters, bb, t->text); } ap_fputc(r->output_filters, bb, '>'); } ap_fputstrs(r->output_filters, bb, DEBUG_CR "", dav_xml_escape_uri(pool, response->href), "" DEBUG_CR, NULL); if (response->propresult.propstats == NULL) { /* use the Status-Line text from Apache. Note, this will * default to 500 Internal Server Error if first->status * is not a known (or valid) status code. */ ap_fputstrs(r->output_filters, bb, "HTTP/1.1 ", ap_get_status_line(response->status), "" DEBUG_CR, NULL); } else { /* assume this includes and is quoted properly */ for (t = response->propresult.propstats; t; t = t->next) { ap_fputs(r->output_filters, bb, t->text); } } if (response->desc != NULL) { /* * We supply the description, so we know it doesn't have to * have any escaping/encoding applied to it. */ ap_fputstrs(r->output_filters, bb, "", response->desc, "" DEBUG_CR, NULL); } ap_fputs(r->output_filters, bb, "" DEBUG_CR); } /* Factorized helper function: prep request_rec R for a multistatus response and write tag into BB, destined for R->output_filters. Use xml NAMESPACES in initial tag, if non-NULL. */ DAV_DECLARE(void) dav_begin_multistatus(apr_bucket_brigade *bb, request_rec *r, int status, apr_array_header_t *namespaces) { /* Set the correct status and Content-Type */ r->status = status; ap_set_content_type(r, DAV_XML_CONTENT_TYPE); /* Send the headers and actual multistatus response now... */ ap_fputs(r->output_filters, bb, DAV_XML_HEADER DEBUG_CR "nelts; i--; ) { ap_fprintf(r->output_filters, bb, " xmlns:ns%d=\"%s\"", i, APR_XML_GET_URI_ITEM(namespaces, i)); } } ap_fputs(r->output_filters, bb, ">" DEBUG_CR); } /* Finish a multistatus response started by dav_begin_multistatus: */ DAV_DECLARE(apr_status_t) dav_finish_multistatus(request_rec *r, apr_bucket_brigade *bb) { apr_bucket *b; ap_fputs(r->output_filters, bb, "" DEBUG_CR); /* indicate the end of the response body */ b = apr_bucket_eos_create(r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); /* deliver whatever might be remaining in the brigade */ return ap_pass_brigade(r->output_filters, bb); } DAV_DECLARE(void) dav_send_multistatus(request_rec *r, int status, dav_response *first, apr_array_header_t *namespaces) { apr_pool_t *subpool; apr_bucket_brigade *bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); dav_begin_multistatus(bb, r, status, namespaces); apr_pool_create(&subpool, r->pool); apr_pool_tag(subpool, "mod_dav-multistatus"); for (; first != NULL; first = first->next) { apr_pool_clear(subpool); dav_send_one_response(first, bb, r, subpool); } apr_pool_destroy(subpool); dav_finish_multistatus(r, bb); } /* * dav_log_err() * * Write error information to the log. */ static void dav_log_err(request_rec *r, dav_error *err, int level) { dav_error *errscan; /* Log the errors */ /* ### should have a directive to log the first or all */ for (errscan = err; errscan != NULL; errscan = errscan->prev) { if (errscan->desc == NULL) continue; /* Intentional no APLOGNO */ ap_log_rerror(APLOG_MARK, level, errscan->aprerr, r, "%s [%d, #%d]", errscan->desc, errscan->status, errscan->error_id); } } /* * dav_handle_err() * * Handle the standard error processing. must be non-NULL. * * is set by the following: * - dav_validate_request() * - dav_add_lock() * - repos_hooks->remove_resource * - repos_hooks->move_resource * - repos_hooks->copy_resource * - vsn_hooks->update */ DAV_DECLARE(int) dav_handle_err(request_rec *r, dav_error *err, dav_response *response) { /* log the errors */ dav_log_err(r, err, APLOG_ERR); if (!ap_is_HTTP_VALID_RESPONSE(err->status)) { /* we have responded already */ return AP_FILTER_ERROR; } if (response == NULL) { dav_error *stackerr = err; /* our error messages are safe; tell Apache this */ apr_table_setn(r->notes, "verbose-error-to", "*"); /* Didn't get a multistatus response passed in, but we still might be able to generate a standard response. Search the error stack for an errortag. */ while (stackerr != NULL && stackerr->tagname == NULL) stackerr = stackerr->prev; if (stackerr != NULL && stackerr->tagname != NULL) return dav_error_response_tag(r, stackerr); return err->status; } /* send the multistatus and tell Apache the request/response is DONE. */ dav_send_multistatus(r, err->status, response, NULL); return DONE; } /* handy function for return values of methods that (may) create things. * locn if provided is assumed to be escaped. */ static int dav_created(request_rec *r, const char *locn, const char *what, int replaced) { const char *body; if (locn == NULL) { locn = ap_escape_uri(r->pool, r->uri); } /* did the target resource already exist? */ if (replaced) { /* Apache will supply a default message */ return HTTP_NO_CONTENT; } /* Per HTTP/1.1, S10.2.2: add a Location header to contain the * URI that was created. */ /* Convert locn to an absolute URI, and return in Location header */ apr_table_setn(r->headers_out, "Location", ap_construct_url(r->pool, locn, r)); /* ### insert an ETag header? see HTTP/1.1 S10.2.2 */ /* Apache doesn't allow us to set a variable body for HTTP_CREATED, so * we must manufacture the entire response. */ body = apr_psprintf(r->pool, "%s %s has been created.", what, ap_escape_html(r->pool, locn)); return dav_error_response(r, HTTP_CREATED, body); } /* ### move to dav_util? */ DAV_DECLARE(int) dav_get_depth(request_rec *r, int def_depth) { const char *depth = apr_table_get(r->headers_in, "Depth"); if (depth == NULL) { return def_depth; } if (strcasecmp(depth, "infinity") == 0) { return DAV_INFINITY; } else if (strcmp(depth, "0") == 0) { return 0; } else if (strcmp(depth, "1") == 0) { return 1; } /* The caller will return an HTTP_BAD_REQUEST. This will augment the * default message that Apache provides. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00580) "An invalid Depth header was specified."); return -1; } static int dav_get_overwrite(request_rec *r) { const char *overwrite = apr_table_get(r->headers_in, "Overwrite"); if (overwrite == NULL) { return 1; /* default is "T" */ } if ((*overwrite == 'F' || *overwrite == 'f') && overwrite[1] == '\0') { return 0; } if ((*overwrite == 'T' || *overwrite == 't') && overwrite[1] == '\0') { return 1; } /* The caller will return an HTTP_BAD_REQUEST. This will augment the * default message that Apache provides. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00581) "An invalid Overwrite header was specified."); return -1; } /* resolve a request URI to a resource descriptor. * * If label_allowed != 0, then allow the request target to be altered by * a Label: header. * * If use_checked_in is true, then the repository provider should return * the resource identified by the DAV:checked-in property of the resource * identified by the Request-URI. */ static dav_error *dav_get_resource(request_rec *r, int label_allowed, int use_checked_in, dav_resource **res_p) { dav_dir_conf *conf; const char *label = NULL; dav_error *err; /* if the request target can be overridden, get any target selector */ if (label_allowed) { label = apr_table_get(r->headers_in, "label"); } conf = ap_get_module_config(r->per_dir_config, &dav_module); /* assert: conf->provider != NULL */ if (conf->provider == NULL) { return dav_new_error(r->pool, HTTP_METHOD_NOT_ALLOWED, 0, 0, apr_psprintf(r->pool, "DAV not enabled for %s", ap_escape_html(r->pool, r->uri))); } /* resolve the resource */ err = (*conf->provider->repos->get_resource)(r, conf->dir, label, use_checked_in, res_p); if (err != NULL) { err = dav_push_error(r->pool, err->status, 0, "Could not fetch resource information.", err); return err; } /* Note: this shouldn't happen, but just be sure... */ if (*res_p == NULL) { /* ### maybe use HTTP_INTERNAL_SERVER_ERROR */ return dav_new_error(r->pool, HTTP_NOT_FOUND, 0, 0, apr_psprintf(r->pool, "The provider did not define a " "resource for %s.", ap_escape_html(r->pool, r->uri))); } /* ### hmm. this doesn't feel like the right place or thing to do */ /* if there were any input headers requiring a Vary header in the response, * add it now */ dav_add_vary_header(r, r, *res_p); return NULL; } static dav_error * dav_open_lockdb(request_rec *r, int ro, dav_lockdb **lockdb) { const dav_hooks_locks *hooks = DAV_GET_HOOKS_LOCKS(r); if (hooks == NULL) { *lockdb = NULL; return NULL; } /* open the thing lazily */ return (*hooks->open_lockdb)(r, ro, 0, lockdb); } /** * @return 1 if valid content-range, * 0 if no content-range, * -1 if malformed content-range */ static int dav_parse_range(request_rec *r, apr_off_t *range_start, apr_off_t *range_end) { const char *range_c; char *range; char *dash; char *slash; char *errp; range_c = apr_table_get(r->headers_in, "content-range"); if (range_c == NULL) return 0; range = apr_pstrdup(r->pool, range_c); if (strncasecmp(range, "bytes ", 6) != 0 || (dash = ap_strchr(range, '-')) == NULL || (slash = ap_strchr(range, '/')) == NULL) { /* malformed header */ return -1; } *dash++ = *slash++ = '\0'; /* detect invalid ranges */ if (apr_strtoff(range_start, range + 6, &errp, 10) || *errp || *range_start < 0) { return -1; } if (apr_strtoff(range_end, dash, &errp, 10) || *errp || *range_end < 0 || *range_end < *range_start) { return -1; } if (*slash != '*') { apr_off_t dummy; if (apr_strtoff(&dummy, slash, &errp, 10) || *errp || dummy <= *range_end) { return -1; } } /* we now have a valid range */ return 1; } /* handle the GET method */ static int dav_method_get(request_rec *r) { dav_resource *resource; dav_error *err; int status; /* This method should only be called when the resource is not * visible to Apache. We will fetch the resource from the repository, * then create a subrequest for Apache to handle. */ err = dav_get_resource(r, 1 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (!resource->exists) { /* Apache will supply a default error for this. */ return HTTP_NOT_FOUND; } /* set up the HTTP headers for the response */ if ((err = (*resource->hooks->set_headers)(r, resource)) != NULL) { err = dav_push_error(r->pool, err->status, 0, "Unable to set up HTTP headers.", err); return dav_handle_err(r, err, NULL); } /* Handle conditional requests */ status = ap_meets_conditions(r); if (status) { return status; } if (r->header_only) { return DONE; } /* okay... time to deliver the content */ if ((err = (*resource->hooks->deliver)(resource, r->output_filters)) != NULL) { err = dav_push_error(r->pool, err->status, 0, "Unable to deliver content.", err); return dav_handle_err(r, err, NULL); } return DONE; } /* validate resource/locks on POST, then pass to the default handler */ static int dav_method_post(request_rec *r) { dav_resource *resource; dav_error *err; /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); /* Note: depth == 0. Implies no need for a multistatus response. */ if ((err = dav_validate_request(r, resource, 0, NULL, NULL, DAV_VALIDATE_RESOURCE, NULL)) != NULL) { /* ### add a higher-level description? */ return dav_handle_err(r, err, NULL); } return DECLINED; } /* handle the PUT method */ static int dav_method_put(request_rec *r) { dav_resource *resource; int resource_state; dav_auto_version_info av_info; const dav_hooks_locks *locks_hooks = DAV_GET_HOOKS_LOCKS(r); const char *body; dav_error *err; dav_error *err2; dav_stream_mode mode; dav_stream *stream; dav_response *multi_response; int has_range; apr_off_t range_start; apr_off_t range_end; /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); /* If not a file or collection resource, PUT not allowed */ if (resource->type != DAV_RESOURCE_TYPE_REGULAR && resource->type != DAV_RESOURCE_TYPE_WORKING) { body = apr_psprintf(r->pool, "Cannot create resource %s with PUT.", ap_escape_html(r->pool, r->uri)); return dav_error_response(r, HTTP_CONFLICT, body); } /* Cannot PUT a collection */ if (resource->collection) { return dav_error_response(r, HTTP_CONFLICT, "Cannot PUT to a collection."); } resource_state = dav_get_resource_state(r, resource); /* * Note: depth == 0 normally requires no multistatus response. However, * if we pass DAV_VALIDATE_PARENT, then we could get an error on a URI * other than the Request-URI, thereby requiring a multistatus. * * If the resource does not exist (DAV_RESOURCE_NULL), then we must * check the resource *and* its parent. If the resource exists or is * a locknull resource, then we check only the resource. */ if ((err = dav_validate_request(r, resource, 0, NULL, &multi_response, resource_state == DAV_RESOURCE_NULL ? DAV_VALIDATE_PARENT : DAV_VALIDATE_RESOURCE, NULL)) != NULL) { /* ### add a higher-level description? */ return dav_handle_err(r, err, multi_response); } has_range = dav_parse_range(r, &range_start, &range_end); if (has_range < 0) { /* RFC 2616 14.16: If we receive an invalid Content-Range we must * not use the content. */ body = apr_psprintf(r->pool, "Malformed Content-Range header for PUT %s.", ap_escape_html(r->pool, r->uri)); return dav_error_response(r, HTTP_BAD_REQUEST, body); } else if (has_range) { mode = DAV_MODE_WRITE_SEEKABLE; } else { mode = DAV_MODE_WRITE_TRUNC; } /* make sure the resource can be modified (if versioning repository) */ if ((err = dav_auto_checkout(r, resource, 0 /* not parent_only */, &av_info)) != NULL) { /* ### add a higher-level description? */ return dav_handle_err(r, err, NULL); } /* Create the new file in the repository */ if ((err = (*resource->hooks->open_stream)(resource, mode, &stream)) != NULL) { /* ### assuming FORBIDDEN is probably not quite right... */ err = dav_push_error(r->pool, HTTP_FORBIDDEN, 0, apr_psprintf(r->pool, "Unable to PUT new contents for %s.", ap_escape_html(r->pool, r->uri)), err); } if (err == NULL && has_range) { /* a range was provided. seek to the start */ err = (*resource->hooks->seek_stream)(stream, range_start); } if (err == NULL) { apr_bucket_brigade *bb; apr_bucket *b; int seen_eos = 0; bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); do { apr_status_t rc; rc = ap_get_brigade(r->input_filters, bb, AP_MODE_READBYTES, APR_BLOCK_READ, DAV_READ_BLOCKSIZE); if (rc != APR_SUCCESS) { int http_err; char *msg = ap_escape_html(r->pool, r->uri); http_err = ap_map_http_request_error(rc, HTTP_BAD_REQUEST); msg = apr_psprintf(r->pool, "An error occurred while reading " "the request body (URI: %s)", msg); err = dav_new_error(r->pool, http_err, 0, rc, msg); break; } for (b = APR_BRIGADE_FIRST(bb); b != APR_BRIGADE_SENTINEL(bb); b = APR_BUCKET_NEXT(b)) { const char *data; apr_size_t len; if (APR_BUCKET_IS_EOS(b)) { seen_eos = 1; break; } if (APR_BUCKET_IS_METADATA(b)) { continue; } if (err == NULL) { /* write whatever we read, until we see an error */ rc = apr_bucket_read(b, &data, &len, APR_BLOCK_READ); if (rc != APR_SUCCESS) { err = dav_new_error(r->pool, HTTP_BAD_REQUEST, 0, rc, apr_psprintf(r->pool, "An error occurred while" " reading the request body" " from the bucket (URI: %s)", ap_escape_html(r->pool, r->uri))); break; } err = (*resource->hooks->write_stream)(stream, data, len); } } apr_brigade_cleanup(bb); } while (!seen_eos); apr_brigade_destroy(bb); err2 = (*resource->hooks->close_stream)(stream, err == NULL /* commit */); err = dav_join_error(err, err2); } /* * Ensure that we think the resource exists now. * ### eek. if an error occurred during the write and we did not commit, * ### then the resource might NOT exist (e.g. dav_fs_repos.c) */ if (err == NULL) { resource->exists = 1; } /* restore modifiability of resources back to what they were */ err2 = dav_auto_checkin(r, resource, err != NULL /* undo if error */, 0 /*unlock*/, &av_info); /* check for errors now */ if (err != NULL) { err = dav_join_error(err, err2); /* don't forget err2 */ return dav_handle_err(r, err, NULL); } if (err2 != NULL) { /* just log a warning */ err2 = dav_push_error(r->pool, err2->status, 0, "The PUT was successful, but there " "was a problem automatically checking in " "the resource or its parent collection.", err2); dav_log_err(r, err2, APLOG_WARNING); } /* ### place the Content-Type and Content-Language into the propdb */ if (locks_hooks != NULL) { dav_lockdb *lockdb; if ((err = (*locks_hooks->open_lockdb)(r, 0, 0, &lockdb)) != NULL) { /* The file creation was successful, but the locking failed. */ err = dav_push_error(r->pool, err->status, 0, "The file was PUT successfully, but there " "was a problem opening the lock database " "which prevents inheriting locks from the " "parent resources.", err); return dav_handle_err(r, err, NULL); } /* notify lock system that we have created/replaced a resource */ err = dav_notify_created(r, lockdb, resource, resource_state, 0); (*locks_hooks->close_lockdb)(lockdb); if (err != NULL) { /* The file creation was successful, but the locking failed. */ err = dav_push_error(r->pool, err->status, 0, "The file was PUT successfully, but there " "was a problem updating its lock " "information.", err); return dav_handle_err(r, err, NULL); } } /* NOTE: WebDAV spec, S8.7.1 states properties should be unaffected */ /* return an appropriate response (HTTP_CREATED or HTTP_NO_CONTENT) */ return dav_created(r, NULL, "Resource", resource_state == DAV_RESOURCE_EXISTS); } /* Use POOL to temporarily construct a dav_response object (from WRES STATUS, and PROPSTATS) and stream it via WRES's ctx->brigade. */ static void dav_stream_response(dav_walk_resource *wres, int status, dav_get_props_result *propstats, apr_pool_t *pool) { dav_response resp = { 0 }; dav_walker_ctx *ctx = wres->walk_ctx; resp.href = wres->resource->uri; resp.status = status; if (propstats) { resp.propresult = *propstats; } dav_send_one_response(&resp, ctx->bb, ctx->r, pool); } /* ### move this to dav_util? */ DAV_DECLARE(void) dav_add_response(dav_walk_resource *wres, int status, dav_get_props_result *propstats) { dav_response *resp; /* just drop some data into an dav_response */ resp = apr_pcalloc(wres->pool, sizeof(*resp)); resp->href = apr_pstrdup(wres->pool, wres->resource->uri); resp->status = status; if (propstats) { resp->propresult = *propstats; } resp->next = wres->response; wres->response = resp; } /* handle the DELETE method */ static int dav_method_delete(request_rec *r) { dav_resource *resource; dav_auto_version_info av_info; dav_error *err; dav_error *err2; dav_response *multi_response; int result; int depth; /* We don't use the request body right now, so torch it. */ if ((result = ap_discard_request_body(r)) != OK) { return result; } /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (!resource->exists) { /* Apache will supply a default error for this. */ return HTTP_NOT_FOUND; } /* 2518 says that depth must be infinity only for collections. * For non-collections, depth is ignored, unless it is an illegal value (1). */ depth = dav_get_depth(r, DAV_INFINITY); if (resource->collection && depth != DAV_INFINITY) { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00582) "Depth must be \"infinity\" for DELETE of a collection."); return HTTP_BAD_REQUEST; } if (!resource->collection && depth == 1) { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00583) "Depth of \"1\" is not allowed for DELETE."); return HTTP_BAD_REQUEST; } /* ** If any resources fail the lock/If: conditions, then we must fail ** the delete. Each of the failing resources will be listed within ** a DAV:multistatus body, wrapped into a 424 response. ** ** Note that a failure on the resource itself does not generate a ** multistatus response -- only internal members/collections. */ if ((err = dav_validate_request(r, resource, depth, NULL, &multi_response, DAV_VALIDATE_PARENT | DAV_VALIDATE_USE_424, NULL)) != NULL) { err = dav_push_error(r->pool, err->status, 0, apr_psprintf(r->pool, "Could not DELETE %s due to a failed " "precondition (e.g. locks).", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, multi_response); } /* ### RFC 2518 s. 8.10.5 says to remove _all_ locks, not just those * locked by the token(s) in the if_header. */ if ((result = dav_unlock(r, resource, NULL)) != OK) { return result; } /* if versioned resource, make sure parent is checked out */ if ((err = dav_auto_checkout(r, resource, 1 /* parent_only */, &av_info)) != NULL) { /* ### add a higher-level description? */ return dav_handle_err(r, err, NULL); } /* try to remove the resource */ err = (*resource->hooks->remove_resource)(resource, &multi_response); /* restore writability of parent back to what it was */ err2 = dav_auto_checkin(r, NULL, err != NULL /* undo if error */, 0 /*unlock*/, &av_info); /* check for errors now */ if (err != NULL) { err = dav_push_error(r->pool, err->status, 0, apr_psprintf(r->pool, "Could not DELETE %s.", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, multi_response); } if (err2 != NULL) { /* just log a warning */ err = dav_push_error(r->pool, err2->status, 0, "The DELETE was successful, but there " "was a problem automatically checking in " "the parent collection.", err2); dav_log_err(r, err, APLOG_WARNING); } /* ### HTTP_NO_CONTENT if no body, HTTP_OK if there is a body (some day) */ /* Apache will supply a default error for this. */ return HTTP_NO_CONTENT; } /* generate DAV:supported-method-set OPTIONS response */ static dav_error *dav_gen_supported_methods(request_rec *r, const apr_xml_elem *elem, const apr_table_t *methods, apr_text_header *body) { const apr_array_header_t *arr; const apr_table_entry_t *elts; apr_xml_elem *child; apr_xml_attr *attr; char *s; int i; apr_text_append(r->pool, body, "" DEBUG_CR); if (elem->first_child == NULL) { /* show all supported methods */ arr = apr_table_elts(methods); elts = (const apr_table_entry_t *)arr->elts; for (i = 0; i < arr->nelts; ++i) { if (elts[i].key == NULL) continue; s = apr_psprintf(r->pool, "" DEBUG_CR, elts[i].key); apr_text_append(r->pool, body, s); } } else { /* check for support of specific methods */ for (child = elem->first_child; child != NULL; child = child->next) { if (child->ns == APR_XML_NS_DAV_ID && strcmp(child->name, "supported-method") == 0) { const char *name = NULL; /* go through attributes to find method name */ for (attr = child->attr; attr != NULL; attr = attr->next) { if (attr->ns == APR_XML_NS_DAV_ID && strcmp(attr->name, "name") == 0) name = attr->value; } if (name == NULL) { return dav_new_error(r->pool, HTTP_BAD_REQUEST, 0, 0, "A DAV:supported-method element " "does not have a \"name\" attribute"); } /* see if method is supported */ if (apr_table_get(methods, name) != NULL) { s = apr_psprintf(r->pool, "" DEBUG_CR, name); apr_text_append(r->pool, body, s); } } } } apr_text_append(r->pool, body, "" DEBUG_CR); return NULL; } /* generate DAV:supported-live-property-set OPTIONS response */ static dav_error *dav_gen_supported_live_props(request_rec *r, const dav_resource *resource, const apr_xml_elem *elem, apr_text_header *body) { dav_lockdb *lockdb; dav_propdb *propdb; apr_xml_elem *child; apr_xml_attr *attr; dav_error *err; /* open lock database, to report on supported lock properties */ /* ### should open read-only */ if ((err = dav_open_lockdb(r, 0, &lockdb)) != NULL) { return dav_push_error(r->pool, err->status, 0, "The lock database could not be opened, " "preventing the reporting of supported lock " "properties.", err); } /* open the property database (readonly) for the resource */ if ((err = dav_open_propdb(r, lockdb, resource, 1, NULL, &propdb)) != NULL) { if (lockdb != NULL) (*lockdb->hooks->close_lockdb)(lockdb); return dav_push_error(r->pool, err->status, 0, "The property database could not be opened, " "preventing report of supported properties.", err); } apr_text_append(r->pool, body, "" DEBUG_CR); if (elem->first_child == NULL) { /* show all supported live properties */ dav_get_props_result props = dav_get_allprops(propdb, DAV_PROP_INSERT_SUPPORTED); body->last->next = props.propstats; while (body->last->next != NULL) body->last = body->last->next; } else { /* check for support of specific live property */ for (child = elem->first_child; child != NULL; child = child->next) { if (child->ns == APR_XML_NS_DAV_ID && strcmp(child->name, "supported-live-property") == 0) { const char *name = NULL; const char *nmspace = NULL; /* go through attributes to find name and namespace */ for (attr = child->attr; attr != NULL; attr = attr->next) { if (attr->ns == APR_XML_NS_DAV_ID) { if (strcmp(attr->name, "name") == 0) name = attr->value; else if (strcmp(attr->name, "namespace") == 0) nmspace = attr->value; } } if (name == NULL) { err = dav_new_error(r->pool, HTTP_BAD_REQUEST, 0, 0, "A DAV:supported-live-property " "element does not have a \"name\" " "attribute"); break; } /* default namespace to DAV: */ if (nmspace == NULL) nmspace = "DAV:"; /* check for support of property */ dav_get_liveprop_supported(propdb, nmspace, name, body); } } } apr_text_append(r->pool, body, "" DEBUG_CR); dav_close_propdb(propdb); if (lockdb != NULL) (*lockdb->hooks->close_lockdb)(lockdb); return err; } /* generate DAV:supported-report-set OPTIONS response */ static dav_error *dav_gen_supported_reports(request_rec *r, const dav_resource *resource, const apr_xml_elem *elem, const dav_hooks_vsn *vsn_hooks, apr_text_header *body) { apr_xml_elem *child; apr_xml_attr *attr; dav_error *err; char *s; apr_text_append(r->pool, body, "" DEBUG_CR); if (vsn_hooks != NULL) { const dav_report_elem *reports; const dav_report_elem *rp; if ((err = (*vsn_hooks->avail_reports)(resource, &reports)) != NULL) { return dav_push_error(r->pool, err->status, 0, "DAV:supported-report-set could not be " "determined due to a problem fetching the " "available reports for this resource.", err); } if (reports != NULL) { if (elem->first_child == NULL) { /* show all supported reports */ for (rp = reports; rp->nmspace != NULL; ++rp) { /* Note: we presume reports->namespace is * properly XML/URL quoted */ s = apr_psprintf(r->pool, "" DEBUG_CR, rp->name, rp->nmspace); apr_text_append(r->pool, body, s); } } else { /* check for support of specific report */ for (child = elem->first_child; child != NULL; child = child->next) { if (child->ns == APR_XML_NS_DAV_ID && strcmp(child->name, "supported-report") == 0) { const char *name = NULL; const char *nmspace = NULL; /* go through attributes to find name and namespace */ for (attr = child->attr; attr != NULL; attr = attr->next) { if (attr->ns == APR_XML_NS_DAV_ID) { if (strcmp(attr->name, "name") == 0) name = attr->value; else if (strcmp(attr->name, "namespace") == 0) nmspace = attr->value; } } if (name == NULL) { return dav_new_error(r->pool, HTTP_BAD_REQUEST, 0, 0, "A DAV:supported-report element " "does not have a \"name\" attribute"); } /* default namespace to DAV: */ if (nmspace == NULL) nmspace = "DAV:"; for (rp = reports; rp->nmspace != NULL; ++rp) { if (strcmp(name, rp->name) == 0 && strcmp(nmspace, rp->nmspace) == 0) { /* Note: we presume reports->nmspace is * properly XML/URL quoted */ s = apr_psprintf(r->pool, "" DEBUG_CR, rp->name, rp->nmspace); apr_text_append(r->pool, body, s); break; } } } } } } } apr_text_append(r->pool, body, "" DEBUG_CR); return NULL; } /* handle the SEARCH method */ static int dav_method_search(request_rec *r) { const dav_hooks_search *search_hooks = DAV_GET_HOOKS_SEARCH(r); dav_resource *resource; dav_error *err; dav_response *multi_status; /* If no search provider, decline the request */ if (search_hooks == NULL) return DECLINED; /* This method should only be called when the resource is not * visible to Apache. We will fetch the resource from the repository, * then create a subrequest for Apache to handle. */ err = dav_get_resource(r, 1 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (!resource->exists) { /* Apache will supply a default error for this. */ return HTTP_NOT_FOUND; } /* set up the HTTP headers for the response */ if ((err = (*resource->hooks->set_headers)(r, resource)) != NULL) { err = dav_push_error(r->pool, err->status, 0, "Unable to set up HTTP headers.", err); return dav_handle_err(r, err, NULL); } if (r->header_only) { return DONE; } /* okay... time to search the content */ /* Let's validate XML and process walk function * in the hook function */ if ((err = (*search_hooks->search_resource)(r, &multi_status)) != NULL) { /* ### add a higher-level description? */ return dav_handle_err(r, err, NULL); } /* We have results in multi_status */ /* Should I pass namespace?? */ dav_send_multistatus(r, HTTP_MULTI_STATUS, multi_status, NULL); return DONE; } /* handle the OPTIONS method */ static int dav_method_options(request_rec *r) { const dav_hooks_locks *locks_hooks = DAV_GET_HOOKS_LOCKS(r); const dav_hooks_vsn *vsn_hooks = DAV_GET_HOOKS_VSN(r); const dav_hooks_binding *binding_hooks = DAV_GET_HOOKS_BINDING(r); const dav_hooks_search *search_hooks = DAV_GET_HOOKS_SEARCH(r); dav_resource *resource; const char *dav_level; char *allow; char *s; const apr_array_header_t *arr; const apr_table_entry_t *elts; apr_table_t *methods = apr_table_make(r->pool, 12); apr_text_header vsn_options = { 0 }; apr_text_header body = { 0 }; apr_text *t; int text_size; int result; int i; apr_array_header_t *uri_ary; apr_xml_doc *doc; const apr_xml_elem *elem; dav_error *err; apr_array_header_t *extensions; ap_list_provider_names_t *entry; /* resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); /* parse any request body */ if ((result = ap_xml_parse_input(r, &doc)) != OK) { return result; } /* note: doc == NULL if no request body */ if (doc && !dav_validate_root(doc, "options")) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00584) "The \"options\" element was not found."); return HTTP_BAD_REQUEST; } /* determine which providers are available */ dav_level = "1"; if (locks_hooks != NULL) { dav_level = "1,2"; } if (binding_hooks != NULL) dav_level = apr_pstrcat(r->pool, dav_level, ",bindings", NULL); /* DAV header additions registered by external modules */ extensions = ap_list_provider_names(r->pool, DAV_OPTIONS_EXTENSION_GROUP, "0"); entry = (ap_list_provider_names_t *)extensions->elts; for (i = 0; i < extensions->nelts; i++, entry++) { const dav_options_provider *options = dav_get_options_providers(entry->provider_name); if (options && options->dav_header) { apr_text_header hoptions = { 0 }; options->dav_header(r, resource, &hoptions); for (t = hoptions.first; t && t->text; t = t->next) dav_level = apr_pstrcat(r->pool, dav_level, ",", t->text, NULL); } } /* ### * MSFT Web Folders chokes if length of DAV header value > 63 characters! * To workaround that, we use separate DAV headers for versioning and * live prop provider namespace URIs. * ### */ apr_table_setn(r->headers_out, "DAV", dav_level); /* * If there is a versioning provider, generate DAV headers * for versioning options. */ if (vsn_hooks != NULL) { (*vsn_hooks->get_vsn_options)(r->pool, &vsn_options); for (t = vsn_options.first; t != NULL; t = t->next) apr_table_addn(r->headers_out, "DAV", t->text); } /* * Gather property set URIs from all the liveprop providers, * and generate a separate DAV header for each URI, to avoid * problems with long header lengths. */ uri_ary = apr_array_make(r->pool, 5, sizeof(const char *)); dav_run_gather_propsets(uri_ary); for (i = 0; i < uri_ary->nelts; ++i) { if (((char **)uri_ary->elts)[i] != NULL) apr_table_addn(r->headers_out, "DAV", ((char **)uri_ary->elts)[i]); } /* this tells MSFT products to skip looking for FrontPage extensions */ apr_table_setn(r->headers_out, "MS-Author-Via", "DAV"); /* * Determine which methods are allowed on the resource. * Three cases: resource is null (3), is lock-null (7.4), or exists. * * All cases support OPTIONS, and if there is a lock provider, LOCK. * (Lock-) null resources also support MKCOL and PUT. * Lock-null supports PROPFIND and UNLOCK. * Existing resources support lots of stuff. */ apr_table_addn(methods, "OPTIONS", ""); /* ### take into account resource type */ switch (dav_get_resource_state(r, resource)) { case DAV_RESOURCE_EXISTS: /* resource exists */ apr_table_addn(methods, "GET", ""); apr_table_addn(methods, "HEAD", ""); apr_table_addn(methods, "POST", ""); apr_table_addn(methods, "DELETE", ""); apr_table_addn(methods, "TRACE", ""); apr_table_addn(methods, "PROPFIND", ""); apr_table_addn(methods, "PROPPATCH", ""); apr_table_addn(methods, "COPY", ""); apr_table_addn(methods, "MOVE", ""); if (!resource->collection) apr_table_addn(methods, "PUT", ""); if (locks_hooks != NULL) { apr_table_addn(methods, "LOCK", ""); apr_table_addn(methods, "UNLOCK", ""); } break; case DAV_RESOURCE_LOCK_NULL: /* resource is lock-null. */ apr_table_addn(methods, "MKCOL", ""); apr_table_addn(methods, "PROPFIND", ""); apr_table_addn(methods, "PUT", ""); if (locks_hooks != NULL) { apr_table_addn(methods, "LOCK", ""); apr_table_addn(methods, "UNLOCK", ""); } break; case DAV_RESOURCE_NULL: /* resource is null. */ apr_table_addn(methods, "MKCOL", ""); apr_table_addn(methods, "PUT", ""); if (locks_hooks != NULL) apr_table_addn(methods, "LOCK", ""); break; default: /* ### internal error! */ break; } /* If there is a versioning provider, add versioning methods */ if (vsn_hooks != NULL) { if (!resource->exists) { if ((*vsn_hooks->versionable)(resource)) apr_table_addn(methods, "VERSION-CONTROL", ""); if (vsn_hooks->can_be_workspace != NULL && (*vsn_hooks->can_be_workspace)(resource)) apr_table_addn(methods, "MKWORKSPACE", ""); if (vsn_hooks->can_be_activity != NULL && (*vsn_hooks->can_be_activity)(resource)) apr_table_addn(methods, "MKACTIVITY", ""); } else if (!resource->versioned) { if ((*vsn_hooks->versionable)(resource)) apr_table_addn(methods, "VERSION-CONTROL", ""); } else if (resource->working) { apr_table_addn(methods, "CHECKIN", ""); /* ### we might not support this DeltaV option */ apr_table_addn(methods, "UNCHECKOUT", ""); } else if (vsn_hooks->add_label != NULL) { apr_table_addn(methods, "CHECKOUT", ""); apr_table_addn(methods, "LABEL", ""); } else { apr_table_addn(methods, "CHECKOUT", ""); } } /* If there is a bindings provider, see if resource is bindable */ if (binding_hooks != NULL && (*binding_hooks->is_bindable)(resource)) { apr_table_addn(methods, "BIND", ""); } /* If there is a search provider, set SEARCH in option */ if (search_hooks != NULL) { apr_table_addn(methods, "SEARCH", ""); } /* additional methods registered by external modules */ extensions = ap_list_provider_names(r->pool, DAV_OPTIONS_EXTENSION_GROUP, "0"); entry = (ap_list_provider_names_t *)extensions->elts; for (i = 0; i < extensions->nelts; i++, entry++) { const dav_options_provider *options = dav_get_options_providers(entry->provider_name); if (options && options->dav_method) { apr_text_header hoptions = { 0 }; options->dav_method(r, resource, &hoptions); for (t = hoptions.first; t && t->text; t = t->next) apr_table_addn(methods, t->text, ""); } } /* Generate the Allow header */ arr = apr_table_elts(methods); elts = (const apr_table_entry_t *)arr->elts; text_size = 0; /* first, compute total length */ for (i = 0; i < arr->nelts; ++i) { if (elts[i].key == NULL) continue; /* add 1 for comma or null */ text_size += strlen(elts[i].key) + 1; } s = allow = apr_palloc(r->pool, text_size); for (i = 0; i < arr->nelts; ++i) { if (elts[i].key == NULL) continue; if (s != allow) *s++ = ','; strcpy(s, elts[i].key); s += strlen(s); } apr_table_setn(r->headers_out, "Allow", allow); /* If there is search set_option_head function, set head */ /* DASL: * DASL: * DASL: */ if (search_hooks != NULL && *search_hooks->set_option_head != NULL) { if ((err = (*search_hooks->set_option_head)(r)) != NULL) { return dav_handle_err(r, err, NULL); } } /* if there was no request body, then there is no response body */ if (doc == NULL) { ap_set_content_length(r, 0); /* ### this sends a Content-Type. the default OPTIONS does not. */ /* ### the default (ap_send_http_options) returns OK, but I believe * ### that is because it is the default handler and nothing else * ### will run after the thing. */ return DONE; } /* handle each options request */ for (elem = doc->root->first_child; elem != NULL; elem = elem->next) { /* check for something we recognize first */ int core_option = 0; dav_error *err = NULL; if (elem->ns == APR_XML_NS_DAV_ID) { if (strcmp(elem->name, "supported-method-set") == 0) { err = dav_gen_supported_methods(r, elem, methods, &body); core_option = 1; } else if (strcmp(elem->name, "supported-live-property-set") == 0) { err = dav_gen_supported_live_props(r, resource, elem, &body); core_option = 1; } else if (strcmp(elem->name, "supported-report-set") == 0) { err = dav_gen_supported_reports(r, resource, elem, vsn_hooks, &body); core_option = 1; } } if (err != NULL) return dav_handle_err(r, err, NULL); /* if unrecognized option, pass to versioning provider */ if (!core_option && vsn_hooks != NULL) { if ((err = (*vsn_hooks->get_option)(resource, elem, &body)) != NULL) { return dav_handle_err(r, err, NULL); } } } /* send the options response */ r->status = HTTP_OK; ap_set_content_type(r, DAV_XML_CONTENT_TYPE); /* send the headers and response body */ ap_rputs(DAV_XML_HEADER DEBUG_CR "" DEBUG_CR, r); for (t = body.first; t != NULL; t = t->next) ap_rputs(t->text, r); ap_rputs("" DEBUG_CR, r); /* we've sent everything necessary to the client. */ return DONE; } static void dav_cache_badprops(dav_walker_ctx *ctx) { const apr_xml_elem *elem; apr_text_header hdr = { 0 }; /* just return if we built the thing already */ if (ctx->propstat_404 != NULL) { return; } apr_text_append(ctx->w.pool, &hdr, "" DEBUG_CR "" DEBUG_CR); elem = dav_find_child(ctx->doc->root, "prop"); for (elem = elem->first_child; elem; elem = elem->next) { apr_text_append(ctx->w.pool, &hdr, apr_xml_empty_elem(ctx->w.pool, elem)); } apr_text_append(ctx->w.pool, &hdr, "" DEBUG_CR "HTTP/1.1 404 Not Found" DEBUG_CR "" DEBUG_CR); ctx->propstat_404 = hdr.first; } static dav_error * dav_propfind_walker(dav_walk_resource *wres, int calltype) { dav_walker_ctx *ctx = wres->walk_ctx; dav_error *err; dav_propdb *propdb; dav_get_props_result propstats = { 0 }; /* ** Note: ctx->doc can only be NULL for DAV_PROPFIND_IS_ALLPROP. Since ** dav_get_allprops() does not need to do namespace translation, ** we're okay. ** ** Note: we cast to lose the "const". The propdb won't try to change ** the resource, however, since we are opening readonly. */ err = dav_popen_propdb(ctx->scratchpool, ctx->r, ctx->w.lockdb, wres->resource, 1, ctx->doc ? ctx->doc->namespaces : NULL, &propdb); if (err != NULL) { /* ### do something with err! */ if (ctx->propfind_type == DAV_PROPFIND_IS_PROP) { dav_get_props_result badprops = { 0 }; /* some props were expected on this collection/resource */ dav_cache_badprops(ctx); badprops.propstats = ctx->propstat_404; dav_stream_response(wres, 0, &badprops, ctx->scratchpool); } else { /* no props on this collection/resource */ dav_stream_response(wres, HTTP_OK, NULL, ctx->scratchpool); } apr_pool_clear(ctx->scratchpool); return NULL; } /* ### what to do about closing the propdb on server failure? */ if (ctx->propfind_type == DAV_PROPFIND_IS_PROP) { propstats = dav_get_props(propdb, ctx->doc); } else { dav_prop_insert what = ctx->propfind_type == DAV_PROPFIND_IS_ALLPROP ? DAV_PROP_INSERT_VALUE : DAV_PROP_INSERT_NAME; propstats = dav_get_allprops(propdb, what); } dav_stream_response(wres, 0, &propstats, ctx->scratchpool); dav_close_propdb(propdb); /* at this point, ctx->scratchpool has been used to stream a single response. this function fully controls the pool, and thus has the right to clear it for the next iteration of this callback. */ apr_pool_clear(ctx->scratchpool); return NULL; } /* handle the PROPFIND method */ static int dav_method_propfind(request_rec *r) { dav_resource *resource; int depth; dav_error *err; int result; apr_xml_doc *doc; dav_walker_ctx ctx = { { 0 } }; dav_response *multi_status; /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 1 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (dav_get_resource_state(r, resource) == DAV_RESOURCE_NULL) { /* Apache will supply a default error for this. */ return HTTP_NOT_FOUND; } if ((depth = dav_get_depth(r, DAV_INFINITY)) < 0) { /* dav_get_depth() supplies additional information for the * default message. */ return HTTP_BAD_REQUEST; } if (depth == DAV_INFINITY && resource->collection) { dav_dir_conf *conf; conf = (dav_dir_conf *)ap_get_module_config(r->per_dir_config, &dav_module); /* default is to DISALLOW these requests */ if (conf->allow_depthinfinity != DAV_ENABLED_ON) { return dav_error_response(r, HTTP_FORBIDDEN, apr_psprintf(r->pool, "PROPFIND requests with a " "Depth of \"infinity\" are " "not allowed for %s.", ap_escape_html(r->pool, r->uri))); } } if ((result = ap_xml_parse_input(r, &doc)) != OK) { return result; } /* note: doc == NULL if no request body */ if (doc && !dav_validate_root(doc, "propfind")) { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00585) "The \"propfind\" element was not found."); return HTTP_BAD_REQUEST; } /* ### validate that only one of these three elements is present */ if (doc == NULL || dav_find_child(doc->root, "allprop") != NULL) { /* note: no request body implies allprop */ ctx.propfind_type = DAV_PROPFIND_IS_ALLPROP; } else if (dav_find_child(doc->root, "propname") != NULL) { ctx.propfind_type = DAV_PROPFIND_IS_PROPNAME; } else if (dav_find_child(doc->root, "prop") != NULL) { ctx.propfind_type = DAV_PROPFIND_IS_PROP; } else { /* "propfind" element must have one of the above three children */ /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00586) "The \"propfind\" element does not contain one of " "the required child elements (the specific command)."); return HTTP_BAD_REQUEST; } ctx.w.walk_type = DAV_WALKTYPE_NORMAL | DAV_WALKTYPE_AUTH; ctx.w.func = dav_propfind_walker; ctx.w.walk_ctx = &ctx; ctx.w.pool = r->pool; ctx.w.root = resource; ctx.doc = doc; ctx.r = r; ctx.bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); apr_pool_create(&ctx.scratchpool, r->pool); apr_pool_tag(ctx.scratchpool, "mod_dav-scratch"); /* ### should open read-only */ if ((err = dav_open_lockdb(r, 0, &ctx.w.lockdb)) != NULL) { err = dav_push_error(r->pool, err->status, 0, "The lock database could not be opened, " "preventing access to the various lock " "properties for the PROPFIND.", err); return dav_handle_err(r, err, NULL); } if (ctx.w.lockdb != NULL) { /* if we have a lock database, then we can walk locknull resources */ ctx.w.walk_type |= DAV_WALKTYPE_LOCKNULL; } /* send tag, with all doc->namespaces attached. */ /* NOTE: we *cannot* leave out the doc's namespaces from the initial tag. if a 404 was generated for an HREF, then we need to spit out the doc's namespaces for use by the 404. Note that elements will override these ns0, ns1, etc, but NOT within the scope for the badprops. */ dav_begin_multistatus(ctx.bb, r, HTTP_MULTI_STATUS, doc ? doc->namespaces : NULL); /* Have the provider walk the resource. */ err = (*resource->hooks->walk)(&ctx.w, depth, &multi_status); if (ctx.w.lockdb != NULL) { (*ctx.w.lockdb->hooks->close_lockdb)(ctx.w.lockdb); } if (err != NULL) { /* If an error occurred during the resource walk, there's basically nothing we can do but abort the connection and log an error. This is one of the limitations of HTTP; it needs to "know" the entire status of the response before generating it, which is just impossible in these streamy response situations. */ err = dav_push_error(r->pool, err->status, 0, "Provider encountered an error while streaming" " a multistatus PROPFIND response.", err); dav_log_err(r, err, APLOG_ERR); r->connection->aborted = 1; return DONE; } dav_finish_multistatus(r, ctx.bb); /* the response has been sent. */ return DONE; } DAV_DECLARE(apr_text *) dav_failed_proppatch(apr_pool_t *p, apr_array_header_t *prop_ctx) { apr_text_header hdr = { 0 }; int i = prop_ctx->nelts; dav_prop_ctx *ctx = (dav_prop_ctx *)prop_ctx->elts; dav_error *err424_set = NULL; dav_error *err424_delete = NULL; const char *s; /* ### might be nice to sort by status code and description */ for ( ; i-- > 0; ++ctx ) { apr_text_append(p, &hdr, "" DEBUG_CR ""); apr_text_append(p, &hdr, apr_xml_empty_elem(p, ctx->prop)); apr_text_append(p, &hdr, "" DEBUG_CR); if (ctx->err == NULL) { /* nothing was assigned here yet, so make it a 424 */ if (ctx->operation == DAV_PROP_OP_SET) { if (err424_set == NULL) err424_set = dav_new_error(p, HTTP_FAILED_DEPENDENCY, 0, 0, "Attempted DAV:set operation " "could not be completed due " "to other errors."); ctx->err = err424_set; } else if (ctx->operation == DAV_PROP_OP_DELETE) { if (err424_delete == NULL) err424_delete = dav_new_error(p, HTTP_FAILED_DEPENDENCY, 0, 0, "Attempted DAV:remove " "operation could not be " "completed due to other " "errors."); ctx->err = err424_delete; } } s = apr_psprintf(p, "" "HTTP/1.1 %d (status)" "" DEBUG_CR, ctx->err->status); apr_text_append(p, &hdr, s); /* ### we should use compute_desc if necessary... */ if (ctx->err->desc != NULL) { apr_text_append(p, &hdr, "" DEBUG_CR); apr_text_append(p, &hdr, ctx->err->desc); apr_text_append(p, &hdr, "" DEBUG_CR); } apr_text_append(p, &hdr, "" DEBUG_CR); } return hdr.first; } DAV_DECLARE(apr_text *) dav_success_proppatch(apr_pool_t *p, apr_array_header_t *prop_ctx) { apr_text_header hdr = { 0 }; int i = prop_ctx->nelts; dav_prop_ctx *ctx = (dav_prop_ctx *)prop_ctx->elts; /* * ### we probably need to revise the way we assemble the response... * ### this code assumes everything will return status==200. */ apr_text_append(p, &hdr, "" DEBUG_CR "" DEBUG_CR); for ( ; i-- > 0; ++ctx ) { apr_text_append(p, &hdr, apr_xml_empty_elem(p, ctx->prop)); } apr_text_append(p, &hdr, "" DEBUG_CR "HTTP/1.1 200 OK" DEBUG_CR "" DEBUG_CR); return hdr.first; } static void dav_prop_log_errors(dav_prop_ctx *ctx) { dav_log_err(ctx->r, ctx->err, APLOG_ERR); } /* * Call for each context. This can stop when an error occurs, or * simply iterate through the whole list. * * Returns 1 if an error occurs (and the iteration is aborted). Returns 0 * if all elements are processed. * * If is true (non-zero), then the list is traversed in * reverse order. */ static int dav_process_ctx_list(void (*func)(dav_prop_ctx *ctx), apr_array_header_t *ctx_list, int stop_on_error, int reverse) { int i = ctx_list->nelts; dav_prop_ctx *ctx = (dav_prop_ctx *)ctx_list->elts; if (reverse) ctx += i; while (i--) { if (reverse) --ctx; (*func)(ctx); if (stop_on_error && DAV_PROP_CTX_HAS_ERR(*ctx)) { return 1; } if (!reverse) ++ctx; } return 0; } /* handle the PROPPATCH method */ static int dav_method_proppatch(request_rec *r) { dav_error *err; dav_resource *resource; int result; apr_xml_doc *doc; apr_xml_elem *child; dav_propdb *propdb; int failure = 0; dav_response resp = { 0 }; apr_text *propstat_text; apr_array_header_t *ctx_list; dav_prop_ctx *ctx; dav_auto_version_info av_info; /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (!resource->exists) { /* Apache will supply a default error for this. */ return HTTP_NOT_FOUND; } if ((result = ap_xml_parse_input(r, &doc)) != OK) { return result; } /* note: doc == NULL if no request body */ if (doc == NULL || !dav_validate_root(doc, "propertyupdate")) { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00587) "The request body does not contain " "a \"propertyupdate\" element."); return HTTP_BAD_REQUEST; } /* Check If-Headers and existing locks */ /* Note: depth == 0. Implies no need for a multistatus response. */ if ((err = dav_validate_request(r, resource, 0, NULL, NULL, DAV_VALIDATE_RESOURCE, NULL)) != NULL) { /* ### add a higher-level description? */ return dav_handle_err(r, err, NULL); } /* make sure the resource can be modified (if versioning repository) */ if ((err = dav_auto_checkout(r, resource, 0 /* not parent_only */, &av_info)) != NULL) { /* ### add a higher-level description? */ return dav_handle_err(r, err, NULL); } if ((err = dav_open_propdb(r, NULL, resource, 0, doc->namespaces, &propdb)) != NULL) { /* undo any auto-checkout */ dav_auto_checkin(r, resource, 1 /*undo*/, 0 /*unlock*/, &av_info); err = dav_push_error(r->pool, HTTP_INTERNAL_SERVER_ERROR, 0, apr_psprintf(r->pool, "Could not open the property " "database for %s.", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, NULL); } /* ### what to do about closing the propdb on server failure? */ /* ### validate "live" properties */ /* set up an array to hold property operation contexts */ ctx_list = apr_array_make(r->pool, 10, sizeof(dav_prop_ctx)); /* do a first pass to ensure that all "remove" properties exist */ for (child = doc->root->first_child; child; child = child->next) { int is_remove; apr_xml_elem *prop_group; apr_xml_elem *one_prop; /* Ignore children that are not set/remove */ if (child->ns != APR_XML_NS_DAV_ID || (!(is_remove = (strcmp(child->name, "remove") == 0)) && strcmp(child->name, "set") != 0)) { continue; } /* make sure that a "prop" child exists for set/remove */ if ((prop_group = dav_find_child(child, "prop")) == NULL) { dav_close_propdb(propdb); /* undo any auto-checkout */ dav_auto_checkin(r, resource, 1 /*undo*/, 0 /*unlock*/, &av_info); /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00588) "A \"prop\" element is missing inside " "the propertyupdate command."); return HTTP_BAD_REQUEST; } for (one_prop = prop_group->first_child; one_prop; one_prop = one_prop->next) { ctx = (dav_prop_ctx *)apr_array_push(ctx_list); ctx->propdb = propdb; ctx->operation = is_remove ? DAV_PROP_OP_DELETE : DAV_PROP_OP_SET; ctx->prop = one_prop; ctx->r = r; /* for later use by dav_prop_log_errors() */ dav_prop_validate(ctx); if ( DAV_PROP_CTX_HAS_ERR(*ctx) ) { failure = 1; } } } /* ### should test that we found at least one set/remove */ /* execute all of the operations */ if (!failure && dav_process_ctx_list(dav_prop_exec, ctx_list, 1, 0)) { failure = 1; } /* generate a failure/success response */ if (failure) { (void)dav_process_ctx_list(dav_prop_rollback, ctx_list, 0, 1); propstat_text = dav_failed_proppatch(r->pool, ctx_list); } else { (void)dav_process_ctx_list(dav_prop_commit, ctx_list, 0, 0); propstat_text = dav_success_proppatch(r->pool, ctx_list); } /* make sure this gets closed! */ dav_close_propdb(propdb); /* complete any auto-versioning */ dav_auto_checkin(r, resource, failure, 0 /*unlock*/, &av_info); /* log any errors that occurred */ (void)dav_process_ctx_list(dav_prop_log_errors, ctx_list, 0, 0); resp.href = resource->uri; /* ### should probably use something new to pass along this text... */ resp.propresult.propstats = propstat_text; dav_send_multistatus(r, HTTP_MULTI_STATUS, &resp, doc->namespaces); /* the response has been sent. */ return DONE; } static int process_mkcol_body(request_rec *r) { /* This is snarfed from ap_setup_client_block(). We could get pretty * close to this behavior by passing REQUEST_NO_BODY, but we need to * return HTTP_UNSUPPORTED_MEDIA_TYPE (while ap_setup_client_block * returns HTTP_REQUEST_ENTITY_TOO_LARGE). */ const char *tenc = apr_table_get(r->headers_in, "Transfer-Encoding"); const char *lenp = apr_table_get(r->headers_in, "Content-Length"); /* make sure to set the Apache request fields properly. */ r->read_body = REQUEST_NO_BODY; r->read_chunked = 0; r->remaining = 0; if (tenc) { if (strcasecmp(tenc, "chunked")) { /* Use this instead of Apache's default error string */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00589) "Unknown Transfer-Encoding %s", tenc); return HTTP_NOT_IMPLEMENTED; } r->read_chunked = 1; } else if (lenp) { const char *pos = lenp; while (apr_isdigit(*pos) || apr_isspace(*pos)) { ++pos; } if (*pos != '\0') { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00590) "Invalid Content-Length %s", lenp); return HTTP_BAD_REQUEST; } r->remaining = apr_atoi64(lenp); } if (r->read_chunked || r->remaining > 0) { /* ### log something? */ /* Apache will supply a default error for this. */ return HTTP_UNSUPPORTED_MEDIA_TYPE; } /* * Get rid of the body. this will call ap_setup_client_block(), but * our copy above has already verified its work. */ return ap_discard_request_body(r); } /* handle the MKCOL method */ static int dav_method_mkcol(request_rec *r) { dav_resource *resource; int resource_state; dav_auto_version_info av_info; const dav_hooks_locks *locks_hooks = DAV_GET_HOOKS_LOCKS(r); dav_error *err; dav_error *err2; int result; dav_response *multi_status; /* handle the request body */ /* ### this may move lower once we start processing bodies */ if ((result = process_mkcol_body(r)) != OK) { return result; } /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (resource->exists) { /* oops. something was already there! */ /* Apache will supply a default error for this. */ /* ### we should provide a specific error message! */ return HTTP_METHOD_NOT_ALLOWED; } resource_state = dav_get_resource_state(r, resource); /* * Check If-Headers and existing locks. * * Note: depth == 0 normally requires no multistatus response. However, * if we pass DAV_VALIDATE_PARENT, then we could get an error on a URI * other than the Request-URI, thereby requiring a multistatus. * * If the resource does not exist (DAV_RESOURCE_NULL), then we must * check the resource *and* its parent. If the resource exists or is * a locknull resource, then we check only the resource. */ if ((err = dav_validate_request(r, resource, 0, NULL, &multi_status, resource_state == DAV_RESOURCE_NULL ? DAV_VALIDATE_PARENT : DAV_VALIDATE_RESOURCE, NULL)) != NULL) { /* ### add a higher-level description? */ return dav_handle_err(r, err, multi_status); } /* if versioned resource, make sure parent is checked out */ if ((err = dav_auto_checkout(r, resource, 1 /* parent_only */, &av_info)) != NULL) { /* ### add a higher-level description? */ return dav_handle_err(r, err, NULL); } /* try to create the collection */ resource->collection = 1; err = (*resource->hooks->create_collection)(resource); /* restore modifiability of parent back to what it was */ err2 = dav_auto_checkin(r, NULL, err != NULL /* undo if error */, 0 /*unlock*/, &av_info); /* check for errors now */ if (err != NULL) { return dav_handle_err(r, err, NULL); } if (err2 != NULL) { /* just log a warning */ err = dav_push_error(r->pool, err2->status, 0, "The MKCOL was successful, but there " "was a problem automatically checking in " "the parent collection.", err2); dav_log_err(r, err, APLOG_WARNING); } if (locks_hooks != NULL) { dav_lockdb *lockdb; if ((err = (*locks_hooks->open_lockdb)(r, 0, 0, &lockdb)) != NULL) { /* The directory creation was successful, but the locking failed. */ err = dav_push_error(r->pool, err->status, 0, "The MKCOL was successful, but there " "was a problem opening the lock database " "which prevents inheriting locks from the " "parent resources.", err); return dav_handle_err(r, err, NULL); } /* notify lock system that we have created/replaced a resource */ err = dav_notify_created(r, lockdb, resource, resource_state, 0); (*locks_hooks->close_lockdb)(lockdb); if (err != NULL) { /* The dir creation was successful, but the locking failed. */ err = dav_push_error(r->pool, err->status, 0, "The MKCOL was successful, but there " "was a problem updating its lock " "information.", err); return dav_handle_err(r, err, NULL); } } /* return an appropriate response (HTTP_CREATED) */ return dav_created(r, NULL, "Collection", 0); } /* handle the COPY and MOVE methods */ static int dav_method_copymove(request_rec *r, int is_move) { dav_resource *resource; dav_resource *resnew; dav_auto_version_info src_av_info = { 0 }; dav_auto_version_info dst_av_info = { 0 }; const char *body; const char *dest; dav_error *err; dav_error *err2; dav_error *err3; dav_response *multi_response; dav_lookup_result lookup; int is_dir; int overwrite; int depth; int result; dav_lockdb *lockdb; int replace_dest; int resnew_state; /* Ask repository module to resolve the resource */ err = dav_get_resource(r, !is_move /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (!resource->exists) { /* Apache will supply a default error for this. */ return HTTP_NOT_FOUND; } /* If not a file or collection resource, COPY/MOVE not allowed */ /* ### allow COPY/MOVE of DeltaV resource types */ if (resource->type != DAV_RESOURCE_TYPE_REGULAR) { body = apr_psprintf(r->pool, "Cannot COPY/MOVE resource %s.", ap_escape_html(r->pool, r->uri)); return dav_error_response(r, HTTP_METHOD_NOT_ALLOWED, body); } /* get the destination URI */ dest = apr_table_get(r->headers_in, "Destination"); if (dest == NULL) { /* Look in headers provided by Netscape's Roaming Profiles */ const char *nscp_host = apr_table_get(r->headers_in, "Host"); const char *nscp_path = apr_table_get(r->headers_in, "New-uri"); if (nscp_host != NULL && nscp_path != NULL) dest = apr_psprintf(r->pool, "http://%s%s", nscp_host, nscp_path); } if (dest == NULL) { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00591) "The request is missing a Destination header."); return HTTP_BAD_REQUEST; } lookup = dav_lookup_uri(dest, r, 1 /* must_be_absolute */); if (lookup.rnew == NULL) { if (lookup.err.status == HTTP_BAD_REQUEST) { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00592) "%s", lookup.err.desc); return HTTP_BAD_REQUEST; } /* ### this assumes that dav_lookup_uri() only generates a status * ### that Apache can provide a status line for!! */ return dav_error_response(r, lookup.err.status, lookup.err.desc); } if (lookup.rnew->status != HTTP_OK) { const char *auth = apr_table_get(lookup.rnew->err_headers_out, "WWW-Authenticate"); if (lookup.rnew->status == HTTP_UNAUTHORIZED && auth != NULL) { /* propagate the WWW-Authorization header up from the * subreq so the client sees it. */ apr_table_setn(r->err_headers_out, "WWW-Authenticate", apr_pstrdup(r->pool, auth)); } /* ### how best to report this... */ return dav_error_response(r, lookup.rnew->status, "Destination URI had an error."); } /* Resolve destination resource */ err = dav_get_resource(lookup.rnew, 0 /* label_allowed */, 0 /* use_checked_in */, &resnew); if (err != NULL) return dav_handle_err(r, err, NULL); /* are the two resources handled by the same repository? */ if (resource->hooks != resnew->hooks) { /* ### this message exposes some backend config, but screw it... */ return dav_error_response(r, HTTP_BAD_GATEWAY, "Destination URI is handled by a " "different repository than the source URI. " "MOVE or COPY between repositories is " "not possible."); } /* get and parse the overwrite header value */ if ((overwrite = dav_get_overwrite(r)) < 0) { /* dav_get_overwrite() supplies additional information for the * default message. */ return HTTP_BAD_REQUEST; } /* quick failure test: if dest exists and overwrite is false. */ if (resnew->exists && !overwrite) { /* Supply some text for the error response body. */ return dav_error_response(r, HTTP_PRECONDITION_FAILED, "Destination is not empty and " "Overwrite is not \"T\""); } /* are the source and destination the same? */ if ((*resource->hooks->is_same_resource)(resource, resnew)) { /* Supply some text for the error response body. */ return dav_error_response(r, HTTP_FORBIDDEN, "Source and Destination URIs are the same."); } is_dir = resource->collection; /* get and parse the Depth header value. "0" and "infinity" are legal. */ if ((depth = dav_get_depth(r, DAV_INFINITY)) < 0) { /* dav_get_depth() supplies additional information for the * default message. */ return HTTP_BAD_REQUEST; } if (depth == 1) { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00593) "Depth must be \"0\" or \"infinity\" for COPY or MOVE."); return HTTP_BAD_REQUEST; } if (is_move && is_dir && depth != DAV_INFINITY) { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00594) "Depth must be \"infinity\" when moving a collection."); return HTTP_BAD_REQUEST; } /* * Check If-Headers and existing locks for each resource in the source. * We will return a 424 response with a DAV:multistatus body. * The multistatus responses will contain the information about any * resource that fails the validation. * * We check the parent resource, too, if this is a MOVE. Moving the * resource effectively removes it from the parent collection, so we * must ensure that we have met the appropriate conditions. * * If a problem occurs with the Request-URI itself, then a plain error * (rather than a multistatus) will be returned. */ if ((err = dav_validate_request(r, resource, depth, NULL, &multi_response, (is_move ? DAV_VALIDATE_PARENT : DAV_VALIDATE_RESOURCE | DAV_VALIDATE_NO_MODIFY) | DAV_VALIDATE_USE_424, NULL)) != NULL) { err = dav_push_error(r->pool, err->status, 0, apr_psprintf(r->pool, "Could not %s %s due to a failed " "precondition on the source " "(e.g. locks).", is_move ? "MOVE" : "COPY", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, multi_response); } /* * Check If-Headers and existing locks for destination. Note that we * use depth==infinity since the target (hierarchy) will be deleted * before the move/copy is completed. * * Note that we are overwriting the target, which implies a DELETE, so * we are subject to the error/response rules as a DELETE. Namely, we * will return a 424 error if any of the validations fail. * (see dav_method_delete() for more information) */ if ((err = dav_validate_request(lookup.rnew, resnew, DAV_INFINITY, NULL, &multi_response, DAV_VALIDATE_PARENT | DAV_VALIDATE_USE_424, NULL)) != NULL) { err = dav_push_error(r->pool, err->status, 0, apr_psprintf(r->pool, "Could not MOVE/COPY %s due to a " "failed precondition on the " "destination (e.g. locks).", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, multi_response); } if (is_dir && depth == DAV_INFINITY && (*resource->hooks->is_parent_resource)(resource, resnew)) { /* Supply some text for the error response body. */ return dav_error_response(r, HTTP_FORBIDDEN, "Source collection contains the " "Destination."); } if (is_dir && (*resnew->hooks->is_parent_resource)(resnew, resource)) { /* The destination must exist (since it contains the source), and * a condition above implies Overwrite==T. Obviously, we cannot * delete the Destination before the MOVE/COPY, as that would * delete the Source. */ /* Supply some text for the error response body. */ return dav_error_response(r, HTTP_FORBIDDEN, "Destination collection contains the Source " "and Overwrite has been specified."); } /* ### for now, we don't need anything in the body */ if ((result = ap_discard_request_body(r)) != OK) { return result; } if ((err = dav_open_lockdb(r, 0, &lockdb)) != NULL) { /* ### add a higher-level description? */ return dav_handle_err(r, err, NULL); } /* remove any locks from the old resources */ /* * ### this is Yet Another Traversal. if we do a rename(), then we * ### really don't have to do this in some cases since the inode * ### values will remain constant across the move. but we can't * ### know that fact from outside the provider :-( * * ### note that we now have a problem atomicity in the move/copy * ### since a failure after this would have removed locks (technically, * ### this is okay to do, but really...) */ if (is_move && lockdb != NULL) { /* ### this is wrong! it blasts direct locks on parent resources */ /* ### pass lockdb! */ (void)dav_unlock(r, resource, NULL); } /* if this is a move, then the source parent collection will be modified */ if (is_move) { if ((err = dav_auto_checkout(r, resource, 1 /* parent_only */, &src_av_info)) != NULL) { if (lockdb != NULL) (*lockdb->hooks->close_lockdb)(lockdb); /* ### add a higher-level description? */ return dav_handle_err(r, err, NULL); } } /* * Remember the initial state of the destination, so the lock system * can be notified as to how it changed. */ resnew_state = dav_get_resource_state(lookup.rnew, resnew); /* In a MOVE operation, the destination is replaced by the source. * In a COPY operation, if the destination exists, is under version * control, and is the same resource type as the source, * then it should not be replaced, but modified to be a copy of * the source. */ if (!resnew->exists) replace_dest = 0; else if (is_move || !resource->versioned) replace_dest = 1; else if (resource->type != resnew->type) replace_dest = 1; else if ((resource->collection == 0) != (resnew->collection == 0)) replace_dest = 1; else replace_dest = 0; /* If the destination must be created or replaced, * make sure the parent collection is writable */ if (!resnew->exists || replace_dest) { if ((err = dav_auto_checkout(r, resnew, 1 /*parent_only*/, &dst_av_info)) != NULL) { /* could not make destination writable: * if move, restore state of source parent */ if (is_move) { (void)dav_auto_checkin(r, NULL, 1 /* undo */, 0 /*unlock*/, &src_av_info); } if (lockdb != NULL) (*lockdb->hooks->close_lockdb)(lockdb); /* ### add a higher-level description? */ return dav_handle_err(r, err, NULL); } } /* If source and destination parents are the same, then * use the same resource object, so status updates to one are reflected * in the other, when doing auto-versioning. Otherwise, * we may try to checkin the parent twice. */ if (src_av_info.parent_resource != NULL && dst_av_info.parent_resource != NULL && (*src_av_info.parent_resource->hooks->is_same_resource) (src_av_info.parent_resource, dst_av_info.parent_resource)) { dst_av_info.parent_resource = src_av_info.parent_resource; } /* If destination is being replaced, remove it first * (we know Ovewrite must be TRUE). Then try to copy/move the resource. */ if (replace_dest) err = (*resnew->hooks->remove_resource)(resnew, &multi_response); if (err == NULL) { if (is_move) err = (*resource->hooks->move_resource)(resource, resnew, &multi_response); else err = (*resource->hooks->copy_resource)(resource, resnew, depth, &multi_response); } /* perform any auto-versioning cleanup */ err2 = dav_auto_checkin(r, NULL, err != NULL /* undo if error */, 0 /*unlock*/, &dst_av_info); if (is_move) { err3 = dav_auto_checkin(r, NULL, err != NULL /* undo if error */, 0 /*unlock*/, &src_av_info); } else err3 = NULL; /* check for error from remove/copy/move operations */ if (err != NULL) { if (lockdb != NULL) (*lockdb->hooks->close_lockdb)(lockdb); err = dav_push_error(r->pool, err->status, 0, apr_psprintf(r->pool, "Could not MOVE/COPY %s.", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, multi_response); } /* check for errors from auto-versioning */ if (err2 != NULL) { /* just log a warning */ err = dav_push_error(r->pool, err2->status, 0, "The MOVE/COPY was successful, but there was a " "problem automatically checking in the " "source parent collection.", err2); dav_log_err(r, err, APLOG_WARNING); } if (err3 != NULL) { /* just log a warning */ err = dav_push_error(r->pool, err3->status, 0, "The MOVE/COPY was successful, but there was a " "problem automatically checking in the " "destination or its parent collection.", err3); dav_log_err(r, err, APLOG_WARNING); } /* propagate any indirect locks at the target */ if (lockdb != NULL) { /* notify lock system that we have created/replaced a resource */ err = dav_notify_created(r, lockdb, resnew, resnew_state, depth); (*lockdb->hooks->close_lockdb)(lockdb); if (err != NULL) { /* The move/copy was successful, but the locking failed. */ err = dav_push_error(r->pool, err->status, 0, "The MOVE/COPY was successful, but there " "was a problem updating the lock " "information.", err); return dav_handle_err(r, err, NULL); } } /* return an appropriate response (HTTP_CREATED or HTTP_NO_CONTENT) */ return dav_created(r, lookup.rnew->unparsed_uri, "Destination", resnew_state == DAV_RESOURCE_EXISTS); } /* dav_method_lock: Handler to implement the DAV LOCK method * Returns appropriate HTTP_* response. */ static int dav_method_lock(request_rec *r) { dav_error *err; dav_resource *resource; dav_resource *parent; const dav_hooks_locks *locks_hooks; int result; int depth; int new_lock_request = 0; apr_xml_doc *doc; dav_lock *lock; dav_response *multi_response = NULL; dav_lockdb *lockdb; int resource_state; /* If no locks provider, decline the request */ locks_hooks = DAV_GET_HOOKS_LOCKS(r); if (locks_hooks == NULL) return DECLINED; if ((result = ap_xml_parse_input(r, &doc)) != OK) return result; depth = dav_get_depth(r, DAV_INFINITY); if (depth != 0 && depth != DAV_INFINITY) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00595) "Depth must be 0 or \"infinity\" for LOCK."); return HTTP_BAD_REQUEST; } /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); /* Check if parent collection exists */ if ((err = resource->hooks->get_parent_resource(resource, &parent)) != NULL) { /* ### add a higher-level description? */ return dav_handle_err(r, err, NULL); } if (parent && (!parent->exists || parent->collection != 1)) { err = dav_new_error(r->pool, HTTP_CONFLICT, 0, 0, apr_psprintf(r->pool, "The parent resource of %s does not " "exist or is not a collection.", ap_escape_html(r->pool, r->uri))); return dav_handle_err(r, err, NULL); } /* * Open writable. Unless an error occurs, we'll be * writing into the database. */ if ((err = (*locks_hooks->open_lockdb)(r, 0, 0, &lockdb)) != NULL) { /* ### add a higher-level description? */ return dav_handle_err(r, err, NULL); } if (doc != NULL) { if ((err = dav_lock_parse_lockinfo(r, resource, lockdb, doc, &lock)) != NULL) { /* ### add a higher-level description to err? */ goto error; } new_lock_request = 1; lock->auth_user = apr_pstrdup(r->pool, r->user); } resource_state = dav_get_resource_state(r, resource); /* * Check If-Headers and existing locks. * * If this will create a locknull resource, then the LOCK will affect * the parent collection (much like a PUT/MKCOL). For that case, we must * validate the parent resource's conditions. */ if ((err = dav_validate_request(r, resource, depth, NULL, &multi_response, (resource_state == DAV_RESOURCE_NULL ? DAV_VALIDATE_PARENT : DAV_VALIDATE_RESOURCE) | (new_lock_request ? lock->scope : 0) | DAV_VALIDATE_ADD_LD, lockdb)) != OK) { err = dav_push_error(r->pool, err->status, 0, apr_psprintf(r->pool, "Could not LOCK %s due to a failed " "precondition (e.g. other locks).", ap_escape_html(r->pool, r->uri)), err); goto error; } if (new_lock_request == 0) { dav_locktoken_list *ltl; /* * Refresh request * ### Assumption: We can renew multiple locks on the same resource * ### at once. First harvest all the positive lock-tokens given in * ### the If header. Then modify the lock entries for this resource * ### with the new Timeout val. */ if ((err = dav_get_locktoken_list(r, <l)) != NULL) { err = dav_push_error(r->pool, err->status, 0, apr_psprintf(r->pool, "The lock refresh for %s failed " "because no lock tokens were " "specified in an \"If:\" " "header.", ap_escape_html(r->pool, r->uri)), err); goto error; } if ((err = (*locks_hooks->refresh_locks)(lockdb, resource, ltl, dav_get_timeout(r), &lock)) != NULL) { /* ### add a higher-level description to err? */ goto error; } } else { /* New lock request */ char *locktoken_txt; dav_dir_conf *conf; conf = (dav_dir_conf *)ap_get_module_config(r->per_dir_config, &dav_module); /* apply lower bound (if any) from DAVMinTimeout directive */ if (lock->timeout != DAV_TIMEOUT_INFINITE && lock->timeout < time(NULL) + conf->locktimeout) lock->timeout = time(NULL) + conf->locktimeout; err = dav_add_lock(r, resource, lockdb, lock, &multi_response); if (err != NULL) { /* ### add a higher-level description to err? */ goto error; } locktoken_txt = apr_pstrcat(r->pool, "<", (*locks_hooks->format_locktoken)(r->pool, lock->locktoken), ">", NULL); apr_table_setn(r->headers_out, "Lock-Token", locktoken_txt); } (*locks_hooks->close_lockdb)(lockdb); r->status = HTTP_OK; ap_set_content_type(r, DAV_XML_CONTENT_TYPE); ap_rputs(DAV_XML_HEADER DEBUG_CR "" DEBUG_CR, r); if (lock == NULL) ap_rputs("" DEBUG_CR, r); else { ap_rprintf(r, "" DEBUG_CR "%s" DEBUG_CR "" DEBUG_CR, dav_lock_get_activelock(r, lock, NULL)); } ap_rputs("", r); /* the response has been sent. */ return DONE; error: (*locks_hooks->close_lockdb)(lockdb); return dav_handle_err(r, err, multi_response); } /* dav_method_unlock: Handler to implement the DAV UNLOCK method * Returns appropriate HTTP_* response. */ static int dav_method_unlock(request_rec *r) { dav_error *err; dav_resource *resource; const dav_hooks_locks *locks_hooks; int result; const char *const_locktoken_txt; char *locktoken_txt; dav_locktoken *locktoken = NULL; int resource_state; dav_response *multi_response; /* If no locks provider, decline the request */ locks_hooks = DAV_GET_HOOKS_LOCKS(r); if (locks_hooks == NULL) return DECLINED; if ((const_locktoken_txt = apr_table_get(r->headers_in, "Lock-Token")) == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00596) "Unlock failed (%s): " "No Lock-Token specified in header", r->filename); return HTTP_BAD_REQUEST; } locktoken_txt = apr_pstrdup(r->pool, const_locktoken_txt); if (locktoken_txt[0] != '<') { /* ### should provide more specifics... */ return HTTP_BAD_REQUEST; } locktoken_txt++; if (locktoken_txt[strlen(locktoken_txt) - 1] != '>') { /* ### should provide more specifics... */ return HTTP_BAD_REQUEST; } locktoken_txt[strlen(locktoken_txt) - 1] = '\0'; if ((err = (*locks_hooks->parse_locktoken)(r->pool, locktoken_txt, &locktoken)) != NULL) { err = dav_push_error(r->pool, HTTP_BAD_REQUEST, 0, apr_psprintf(r->pool, "The UNLOCK on %s failed -- an " "invalid lock token was specified " "in the \"If:\" header.", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, NULL); } /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); resource_state = dav_get_resource_state(r, resource); /* * Check If-Headers and existing locks. * * Note: depth == 0 normally requires no multistatus response. However, * if we pass DAV_VALIDATE_PARENT, then we could get an error on a URI * other than the Request-URI, thereby requiring a multistatus. * * If the resource is a locknull resource, then the UNLOCK will affect * the parent collection (much like a delete). For that case, we must * validate the parent resource's conditions. */ if ((err = dav_validate_request(r, resource, 0, locktoken, &multi_response, resource_state == DAV_RESOURCE_LOCK_NULL ? DAV_VALIDATE_PARENT : DAV_VALIDATE_RESOURCE, NULL)) != NULL) { /* ### add a higher-level description? */ return dav_handle_err(r, err, multi_response); } /* ### RFC 2518 s. 8.11: If this resource is locked by locktoken, * _all_ resources locked by locktoken are released. It does not say * resource has to be the root of an infinte lock. Thus, an UNLOCK * on any part of an infinte lock will remove the lock on all resources. * * For us, if r->filename represents an indirect lock (part of an infinity lock), * we must actually perform an UNLOCK on the direct lock for this resource. */ if ((result = dav_unlock(r, resource, locktoken)) != OK) { return result; } return HTTP_NO_CONTENT; } static int dav_method_vsn_control(request_rec *r) { dav_resource *resource; int resource_state; dav_auto_version_info av_info; const dav_hooks_locks *locks_hooks = DAV_GET_HOOKS_LOCKS(r); const dav_hooks_vsn *vsn_hooks = DAV_GET_HOOKS_VSN(r); dav_error *err; apr_xml_doc *doc; const char *target = NULL; int result; /* if no versioning provider, decline the request */ if (vsn_hooks == NULL) return DECLINED; /* ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); /* remember the pre-creation resource state */ resource_state = dav_get_resource_state(r, resource); /* parse the request body (may be a version-control element) */ if ((result = ap_xml_parse_input(r, &doc)) != OK) { return result; } /* note: doc == NULL if no request body */ if (doc != NULL) { const apr_xml_elem *child; apr_size_t tsize; if (!dav_validate_root(doc, "version-control")) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00597) "The request body does not contain " "a \"version-control\" element."); return HTTP_BAD_REQUEST; } /* get the version URI */ if ((child = dav_find_child(doc->root, "version")) == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00598) "The \"version-control\" element does not contain " "a \"version\" element."); return HTTP_BAD_REQUEST; } if ((child = dav_find_child(child, "href")) == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00599) "The \"version\" element does not contain " "an \"href\" element."); return HTTP_BAD_REQUEST; } /* get version URI */ apr_xml_to_text(r->pool, child, APR_XML_X2T_INNER, NULL, NULL, &target, &tsize); if (tsize == 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00600) "An \"href\" element does not contain a URI."); return HTTP_BAD_REQUEST; } } /* Check request preconditions */ /* ### need a general mechanism for reporting precondition violations * ### (should be returning XML document for 403/409 responses) */ /* if not versioning existing resource, must specify version to select */ if (!resource->exists && target == NULL) { err = dav_new_error(r->pool, HTTP_CONFLICT, 0, 0, ""); return dav_handle_err(r, err, NULL); } else if (resource->exists) { /* cannot add resource to existing version history */ if (target != NULL) { err = dav_new_error(r->pool, HTTP_CONFLICT, 0, 0, ""); return dav_handle_err(r, err, NULL); } /* resource must be unversioned and versionable, or version selector */ if (resource->type != DAV_RESOURCE_TYPE_REGULAR || (!resource->versioned && !(vsn_hooks->versionable)(resource))) { err = dav_new_error(r->pool, HTTP_CONFLICT, 0, 0, ""); return dav_handle_err(r, err, NULL); } /* the DeltaV spec says if resource is a version selector, * then VERSION-CONTROL is a no-op */ if (resource->versioned) { /* set the Cache-Control header, per the spec */ apr_table_setn(r->headers_out, "Cache-Control", "no-cache"); /* no body */ ap_set_content_length(r, 0); return DONE; } } /* Check If-Headers and existing locks */ /* Note: depth == 0. Implies no need for a multistatus response. */ if ((err = dav_validate_request(r, resource, 0, NULL, NULL, resource_state == DAV_RESOURCE_NULL ? DAV_VALIDATE_PARENT : DAV_VALIDATE_RESOURCE, NULL)) != NULL) { return dav_handle_err(r, err, NULL); } /* if in versioned collection, make sure parent is checked out */ if ((err = dav_auto_checkout(r, resource, 1 /* parent_only */, &av_info)) != NULL) { return dav_handle_err(r, err, NULL); } /* attempt to version-control the resource */ if ((err = (*vsn_hooks->vsn_control)(resource, target)) != NULL) { dav_auto_checkin(r, resource, 1 /*undo*/, 0 /*unlock*/, &av_info); err = dav_push_error(r->pool, HTTP_CONFLICT, 0, apr_psprintf(r->pool, "Could not VERSION-CONTROL resource %s.", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, NULL); } /* revert writability of parent directory */ err = dav_auto_checkin(r, resource, 0 /*undo*/, 0 /*unlock*/, &av_info); if (err != NULL) { /* just log a warning */ err = dav_push_error(r->pool, err->status, 0, "The VERSION-CONTROL was successful, but there " "was a problem automatically checking in " "the parent collection.", err); dav_log_err(r, err, APLOG_WARNING); } /* if the resource is lockable, let lock system know of new resource */ if (locks_hooks != NULL && (*locks_hooks->get_supportedlock)(resource) != NULL) { dav_lockdb *lockdb; if ((err = (*locks_hooks->open_lockdb)(r, 0, 0, &lockdb)) != NULL) { /* The resource creation was successful, but the locking failed. */ err = dav_push_error(r->pool, err->status, 0, "The VERSION-CONTROL was successful, but there " "was a problem opening the lock database " "which prevents inheriting locks from the " "parent resources.", err); return dav_handle_err(r, err, NULL); } /* notify lock system that we have created/replaced a resource */ err = dav_notify_created(r, lockdb, resource, resource_state, 0); (*locks_hooks->close_lockdb)(lockdb); if (err != NULL) { /* The dir creation was successful, but the locking failed. */ err = dav_push_error(r->pool, err->status, 0, "The VERSION-CONTROL was successful, but there " "was a problem updating its lock " "information.", err); return dav_handle_err(r, err, NULL); } } /* set the Cache-Control header, per the spec */ apr_table_setn(r->headers_out, "Cache-Control", "no-cache"); /* return an appropriate response (HTTP_CREATED) */ return dav_created(r, resource->uri, "Version selector", 0 /*replaced*/); } /* handle the CHECKOUT method */ static int dav_method_checkout(request_rec *r) { dav_resource *resource; dav_resource *working_resource; const dav_hooks_vsn *vsn_hooks = DAV_GET_HOOKS_VSN(r); dav_error *err; int result; apr_xml_doc *doc; int apply_to_vsn = 0; int is_unreserved = 0; int is_fork_ok = 0; int create_activity = 0; apr_array_header_t *activities = NULL; /* If no versioning provider, decline the request */ if (vsn_hooks == NULL) return DECLINED; if ((result = ap_xml_parse_input(r, &doc)) != OK) return result; if (doc != NULL) { const apr_xml_elem *aset; if (!dav_validate_root(doc, "checkout")) { /* This supplies additional information for the default msg. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00601) "The request body, if present, must be a " "DAV:checkout element."); return HTTP_BAD_REQUEST; } if (dav_find_child(doc->root, "apply-to-version") != NULL) { if (apr_table_get(r->headers_in, "label") != NULL) { /* ### we want generic 403/409 XML reporting here */ /* ### DAV:must-not-have-label-and-apply-to-version */ return dav_error_response(r, HTTP_CONFLICT, "DAV:apply-to-version cannot be " "used in conjunction with a " "Label header."); } apply_to_vsn = 1; } is_unreserved = dav_find_child(doc->root, "unreserved") != NULL; is_fork_ok = dav_find_child(doc->root, "fork-ok") != NULL; if ((aset = dav_find_child(doc->root, "activity-set")) != NULL) { if (dav_find_child(aset, "new") != NULL) { create_activity = 1; } else { const apr_xml_elem *child = aset->first_child; activities = apr_array_make(r->pool, 1, sizeof(const char *)); for (; child != NULL; child = child->next) { if (child->ns == APR_XML_NS_DAV_ID && strcmp(child->name, "href") == 0) { const char *href; href = dav_xml_get_cdata(child, r->pool, 1 /* strip_white */); *(const char **)apr_array_push(activities) = href; } } if (activities->nelts == 0) { /* no href's is a DTD violation: */ /* This supplies additional info for the default msg. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00602) "Within the DAV:activity-set element, the " "DAV:new element must be used, or at least " "one DAV:href must be specified."); return HTTP_BAD_REQUEST; } } } } /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 1 /*label_allowed*/, apply_to_vsn, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (!resource->exists) { /* Apache will supply a default error for this. */ return HTTP_NOT_FOUND; } /* Check the state of the resource: must be a file or collection, * must be versioned, and must not already be checked out. */ if (resource->type != DAV_RESOURCE_TYPE_REGULAR && resource->type != DAV_RESOURCE_TYPE_VERSION) { return dav_error_response(r, HTTP_CONFLICT, "Cannot checkout this type of resource."); } if (!resource->versioned) { return dav_error_response(r, HTTP_CONFLICT, "Cannot checkout unversioned resource."); } if (resource->working) { return dav_error_response(r, HTTP_CONFLICT, "The resource is already checked out to the workspace."); } /* ### do lock checks, once behavior is defined */ /* Do the checkout */ if ((err = (*vsn_hooks->checkout)(resource, 0 /*auto_checkout*/, is_unreserved, is_fork_ok, create_activity, activities, &working_resource)) != NULL) { err = dav_push_error(r->pool, HTTP_CONFLICT, 0, apr_psprintf(r->pool, "Could not CHECKOUT resource %s.", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, NULL); } /* set the Cache-Control header, per the spec */ apr_table_setn(r->headers_out, "Cache-Control", "no-cache"); /* if no working resource created, return OK, * else return CREATED with working resource URL in Location header */ if (working_resource == NULL) { /* no body */ ap_set_content_length(r, 0); return DONE; } return dav_created(r, working_resource->uri, "Checked-out resource", 0); } /* handle the UNCHECKOUT method */ static int dav_method_uncheckout(request_rec *r) { dav_resource *resource; const dav_hooks_vsn *vsn_hooks = DAV_GET_HOOKS_VSN(r); dav_error *err; int result; /* If no versioning provider, decline the request */ if (vsn_hooks == NULL) return DECLINED; if ((result = ap_discard_request_body(r)) != OK) { return result; } /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (!resource->exists) { /* Apache will supply a default error for this. */ return HTTP_NOT_FOUND; } /* Check the state of the resource: must be a file or collection, * must be versioned, and must be checked out. */ if (resource->type != DAV_RESOURCE_TYPE_REGULAR) { return dav_error_response(r, HTTP_CONFLICT, "Cannot uncheckout this type of resource."); } if (!resource->versioned) { return dav_error_response(r, HTTP_CONFLICT, "Cannot uncheckout unversioned resource."); } if (!resource->working) { return dav_error_response(r, HTTP_CONFLICT, "The resource is not checked out to the workspace."); } /* ### do lock checks, once behavior is defined */ /* Do the uncheckout */ if ((err = (*vsn_hooks->uncheckout)(resource)) != NULL) { err = dav_push_error(r->pool, HTTP_CONFLICT, 0, apr_psprintf(r->pool, "Could not UNCHECKOUT resource %s.", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, NULL); } /* no body */ ap_set_content_length(r, 0); return DONE; } /* handle the CHECKIN method */ static int dav_method_checkin(request_rec *r) { dav_resource *resource; dav_resource *new_version; const dav_hooks_vsn *vsn_hooks = DAV_GET_HOOKS_VSN(r); dav_error *err; int result; apr_xml_doc *doc; int keep_checked_out = 0; /* If no versioning provider, decline the request */ if (vsn_hooks == NULL) return DECLINED; if ((result = ap_xml_parse_input(r, &doc)) != OK) return result; if (doc != NULL) { if (!dav_validate_root(doc, "checkin")) { /* This supplies additional information for the default msg. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00603) "The request body, if present, must be a " "DAV:checkin element."); return HTTP_BAD_REQUEST; } keep_checked_out = dav_find_child(doc->root, "keep-checked-out") != NULL; } /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (!resource->exists) { /* Apache will supply a default error for this. */ return HTTP_NOT_FOUND; } /* Check the state of the resource: must be a file or collection, * must be versioned, and must be checked out. */ if (resource->type != DAV_RESOURCE_TYPE_REGULAR) { return dav_error_response(r, HTTP_CONFLICT, "Cannot checkin this type of resource."); } if (!resource->versioned) { return dav_error_response(r, HTTP_CONFLICT, "Cannot checkin unversioned resource."); } if (!resource->working) { return dav_error_response(r, HTTP_CONFLICT, "The resource is not checked out."); } /* ### do lock checks, once behavior is defined */ /* Do the checkin */ if ((err = (*vsn_hooks->checkin)(resource, keep_checked_out, &new_version)) != NULL) { err = dav_push_error(r->pool, HTTP_CONFLICT, 0, apr_psprintf(r->pool, "Could not CHECKIN resource %s.", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, NULL); } return dav_created(r, new_version->uri, "Version", 0); } static int dav_method_update(request_rec *r) { dav_resource *resource; dav_resource *version = NULL; const dav_hooks_vsn *vsn_hooks = DAV_GET_HOOKS_VSN(r); apr_xml_doc *doc; apr_xml_elem *child; int is_label = 0; int depth; int result; apr_size_t tsize; const char *target; dav_response *multi_response; dav_error *err; dav_lookup_result lookup; /* If no versioning provider, or UPDATE not supported, * decline the request */ if (vsn_hooks == NULL || vsn_hooks->update == NULL) return DECLINED; if ((depth = dav_get_depth(r, 0)) < 0) { /* dav_get_depth() supplies additional information for the * default message. */ return HTTP_BAD_REQUEST; } /* parse the request body */ if ((result = ap_xml_parse_input(r, &doc)) != OK) { return result; } if (doc == NULL || !dav_validate_root(doc, "update")) { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00604) "The request body does not contain " "an \"update\" element."); return HTTP_BAD_REQUEST; } /* check for label-name or version element, but not both */ if ((child = dav_find_child(doc->root, "label-name")) != NULL) is_label = 1; else if ((child = dav_find_child(doc->root, "version")) != NULL) { /* get the href element */ if ((child = dav_find_child(child, "href")) == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00605) "The version element does not contain " "an \"href\" element."); return HTTP_BAD_REQUEST; } } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00606) "The \"update\" element does not contain " "a \"label-name\" or \"version\" element."); return HTTP_BAD_REQUEST; } /* a depth greater than zero is only allowed for a label */ if (!is_label && depth != 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00607) "Depth must be zero for UPDATE with a version"); return HTTP_BAD_REQUEST; } /* get the target value (a label or a version URI) */ apr_xml_to_text(r->pool, child, APR_XML_X2T_INNER, NULL, NULL, &target, &tsize); if (tsize == 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00608) "A \"label-name\" or \"href\" element does not contain " "any content."); return HTTP_BAD_REQUEST; } /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (!resource->exists) { /* Apache will supply a default error for this. */ return HTTP_NOT_FOUND; } /* ### need a general mechanism for reporting precondition violations * ### (should be returning XML document for 403/409 responses) */ if (resource->type != DAV_RESOURCE_TYPE_REGULAR || !resource->versioned || resource->working) { return dav_error_response(r, HTTP_CONFLICT, ""); } /* if target is a version, resolve the version resource */ /* ### dav_lookup_uri only allows absolute URIs; is that OK? */ if (!is_label) { lookup = dav_lookup_uri(target, r, 0 /* must_be_absolute */); if (lookup.rnew == NULL) { if (lookup.err.status == HTTP_BAD_REQUEST) { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00609) "%s", lookup.err.desc); return HTTP_BAD_REQUEST; } /* ### this assumes that dav_lookup_uri() only generates a status * ### that Apache can provide a status line for!! */ return dav_error_response(r, lookup.err.status, lookup.err.desc); } if (lookup.rnew->status != HTTP_OK) { /* ### how best to report this... */ return dav_error_response(r, lookup.rnew->status, "Version URI had an error."); } /* resolve version resource */ err = dav_get_resource(lookup.rnew, 0 /* label_allowed */, 0 /* use_checked_in */, &version); if (err != NULL) return dav_handle_err(r, err, NULL); /* NULL out target, since we're using a version resource */ target = NULL; } /* do the UPDATE operation */ err = (*vsn_hooks->update)(resource, version, target, depth, &multi_response); if (err != NULL) { err = dav_push_error(r->pool, err->status, 0, apr_psprintf(r->pool, "Could not UPDATE %s.", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, multi_response); } /* set the Cache-Control header, per the spec */ apr_table_setn(r->headers_out, "Cache-Control", "no-cache"); /* no body */ ap_set_content_length(r, 0); return DONE; } /* context maintained during LABEL treewalk */ typedef struct dav_label_walker_ctx { /* input: */ dav_walk_params w; /* label being manipulated */ const char *label; /* label operation */ int label_op; #define DAV_LABEL_ADD 1 #define DAV_LABEL_SET 2 #define DAV_LABEL_REMOVE 3 /* version provider hooks */ const dav_hooks_vsn *vsn_hooks; } dav_label_walker_ctx; static dav_error * dav_label_walker(dav_walk_resource *wres, int calltype) { dav_label_walker_ctx *ctx = wres->walk_ctx; dav_error *err = NULL; /* Check the state of the resource: must be a version or * non-checkedout version selector */ /* ### need a general mechanism for reporting precondition violations * ### (should be returning XML document for 403/409 responses) */ if (wres->resource->type != DAV_RESOURCE_TYPE_VERSION && (wres->resource->type != DAV_RESOURCE_TYPE_REGULAR || !wres->resource->versioned)) { err = dav_new_error(ctx->w.pool, HTTP_CONFLICT, 0, 0, ""); } else if (wres->resource->working) { err = dav_new_error(ctx->w.pool, HTTP_CONFLICT, 0, 0, ""); } else { /* do the label operation */ if (ctx->label_op == DAV_LABEL_REMOVE) err = (*ctx->vsn_hooks->remove_label)(wres->resource, ctx->label); else err = (*ctx->vsn_hooks->add_label)(wres->resource, ctx->label, ctx->label_op == DAV_LABEL_SET); } if (err != NULL) { /* ### need utility routine to add response with description? */ dav_add_response(wres, err->status, NULL); wres->response->desc = err->desc; } return NULL; } static int dav_method_label(request_rec *r) { dav_resource *resource; const dav_hooks_vsn *vsn_hooks = DAV_GET_HOOKS_VSN(r); apr_xml_doc *doc; apr_xml_elem *child; int depth; int result; apr_size_t tsize; dav_error *err; dav_label_walker_ctx ctx = { { 0 } }; dav_response *multi_status; /* If no versioning provider, or the provider doesn't support * labels, decline the request */ if (vsn_hooks == NULL || vsn_hooks->add_label == NULL) return DECLINED; /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 1 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (!resource->exists) { /* Apache will supply a default error for this. */ return HTTP_NOT_FOUND; } if ((depth = dav_get_depth(r, 0)) < 0) { /* dav_get_depth() supplies additional information for the * default message. */ return HTTP_BAD_REQUEST; } /* parse the request body */ if ((result = ap_xml_parse_input(r, &doc)) != OK) { return result; } if (doc == NULL || !dav_validate_root(doc, "label")) { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00610) "The request body does not contain " "a \"label\" element."); return HTTP_BAD_REQUEST; } /* check for add, set, or remove element */ if ((child = dav_find_child(doc->root, "add")) != NULL) { ctx.label_op = DAV_LABEL_ADD; } else if ((child = dav_find_child(doc->root, "set")) != NULL) { ctx.label_op = DAV_LABEL_SET; } else if ((child = dav_find_child(doc->root, "remove")) != NULL) { ctx.label_op = DAV_LABEL_REMOVE; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00611) "The \"label\" element does not contain " "an \"add\", \"set\", or \"remove\" element."); return HTTP_BAD_REQUEST; } /* get the label string */ if ((child = dav_find_child(child, "label-name")) == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00612) "The label command element does not contain " "a \"label-name\" element."); return HTTP_BAD_REQUEST; } apr_xml_to_text(r->pool, child, APR_XML_X2T_INNER, NULL, NULL, &ctx.label, &tsize); if (tsize == 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00613) "A \"label-name\" element does not contain " "a label name."); return HTTP_BAD_REQUEST; } /* do the label operation walk */ ctx.w.walk_type = DAV_WALKTYPE_NORMAL; ctx.w.func = dav_label_walker; ctx.w.walk_ctx = &ctx; ctx.w.pool = r->pool; ctx.w.root = resource; ctx.vsn_hooks = vsn_hooks; err = (*resource->hooks->walk)(&ctx.w, depth, &multi_status); if (err != NULL) { /* some sort of error occurred which terminated the walk */ err = dav_push_error(r->pool, err->status, 0, "The LABEL operation was terminated prematurely.", err); return dav_handle_err(r, err, multi_status); } if (multi_status != NULL) { /* One or more resources had errors. If depth was zero, convert * response to simple error, else make sure there is an * overall error to pass to dav_handle_err() */ if (depth == 0) { err = dav_new_error(r->pool, multi_status->status, 0, 0, multi_status->desc); multi_status = NULL; } else { err = dav_new_error(r->pool, HTTP_MULTI_STATUS, 0, 0, "Errors occurred during the LABEL operation."); } return dav_handle_err(r, err, multi_status); } /* set the Cache-Control header, per the spec */ apr_table_setn(r->headers_out, "Cache-Control", "no-cache"); /* no body */ ap_set_content_length(r, 0); return DONE; } static int dav_method_report(request_rec *r) { dav_resource *resource; const dav_hooks_vsn *vsn_hooks = DAV_GET_HOOKS_VSN(r); int result; int label_allowed; apr_xml_doc *doc; dav_error *err; /* If no versioning provider, decline the request */ if (vsn_hooks == NULL) return DECLINED; if ((result = ap_xml_parse_input(r, &doc)) != OK) return result; if (doc == NULL) { /* This supplies additional information for the default msg. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00614) "The request body must specify a report."); return HTTP_BAD_REQUEST; } /* Ask repository module to resolve the resource. * First determine whether a Target-Selector header is allowed * for this report. */ label_allowed = (*vsn_hooks->report_label_header_allowed)(doc); err = dav_get_resource(r, label_allowed, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (!resource->exists) { /* Apache will supply a default error for this. */ return HTTP_NOT_FOUND; } /* set up defaults for the report response */ r->status = HTTP_OK; ap_set_content_type(r, DAV_XML_CONTENT_TYPE); /* run report hook */ if ((err = (*vsn_hooks->deliver_report)(r, resource, doc, r->output_filters)) != NULL) { if (! r->sent_bodyct) /* No data has been sent to client yet; throw normal error. */ return dav_handle_err(r, err, NULL); /* If an error occurred during the report delivery, there's basically nothing we can do but abort the connection and log an error. This is one of the limitations of HTTP; it needs to "know" the entire status of the response before generating it, which is just impossible in these streamy response situations. */ err = dav_push_error(r->pool, err->status, 0, "Provider encountered an error while streaming" " a REPORT response.", err); dav_log_err(r, err, APLOG_ERR); r->connection->aborted = 1; return DONE; } return DONE; } static int dav_method_make_workspace(request_rec *r) { dav_resource *resource; const dav_hooks_vsn *vsn_hooks = DAV_GET_HOOKS_VSN(r); dav_error *err; apr_xml_doc *doc; int result; /* if no versioning provider, or the provider does not support workspaces, * decline the request */ if (vsn_hooks == NULL || vsn_hooks->make_workspace == NULL) return DECLINED; /* ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); /* parse the request body (must be a mkworkspace element) */ if ((result = ap_xml_parse_input(r, &doc)) != OK) { return result; } if (doc == NULL || !dav_validate_root(doc, "mkworkspace")) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00615) "The request body does not contain " "a \"mkworkspace\" element."); return HTTP_BAD_REQUEST; } /* Check request preconditions */ /* ### need a general mechanism for reporting precondition violations * ### (should be returning XML document for 403/409 responses) */ /* resource must not already exist */ if (resource->exists) { err = dav_new_error(r->pool, HTTP_CONFLICT, 0, 0, ""); return dav_handle_err(r, err, NULL); } /* ### what about locking? */ /* attempt to create the workspace */ if ((err = (*vsn_hooks->make_workspace)(resource, doc)) != NULL) { err = dav_push_error(r->pool, err->status, 0, apr_psprintf(r->pool, "Could not create workspace %s.", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, NULL); } /* set the Cache-Control header, per the spec */ apr_table_setn(r->headers_out, "Cache-Control", "no-cache"); /* return an appropriate response (HTTP_CREATED) */ return dav_created(r, resource->uri, "Workspace", 0 /*replaced*/); } static int dav_method_make_activity(request_rec *r) { dav_resource *resource; const dav_hooks_vsn *vsn_hooks = DAV_GET_HOOKS_VSN(r); dav_error *err; int result; /* if no versioning provider, or the provider does not support activities, * decline the request */ if (vsn_hooks == NULL || vsn_hooks->make_activity == NULL) return DECLINED; /* ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); /* MKACTIVITY does not have a defined request body. */ if ((result = ap_discard_request_body(r)) != OK) { return result; } /* Check request preconditions */ /* ### need a general mechanism for reporting precondition violations * ### (should be returning XML document for 403/409 responses) */ /* resource must not already exist */ if (resource->exists) { err = dav_new_error(r->pool, HTTP_CONFLICT, 0, 0, ""); return dav_handle_err(r, err, NULL); } /* the provider must say whether the resource can be created as an activity, i.e. whether the location is ok. */ if (vsn_hooks->can_be_activity != NULL && !(*vsn_hooks->can_be_activity)(resource)) { err = dav_new_error(r->pool, HTTP_FORBIDDEN, 0, 0, ""); return dav_handle_err(r, err, NULL); } /* ### what about locking? */ /* attempt to create the activity */ if ((err = (*vsn_hooks->make_activity)(resource)) != NULL) { err = dav_push_error(r->pool, err->status, 0, apr_psprintf(r->pool, "Could not create activity %s.", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, NULL); } /* set the Cache-Control header, per the spec */ apr_table_setn(r->headers_out, "Cache-Control", "no-cache"); /* return an appropriate response (HTTP_CREATED) */ return dav_created(r, resource->uri, "Activity", 0 /*replaced*/); } static int dav_method_baseline_control(request_rec *r) { /* ### */ return HTTP_METHOD_NOT_ALLOWED; } static int dav_method_merge(request_rec *r) { dav_resource *resource; dav_resource *source_resource; const dav_hooks_vsn *vsn_hooks = DAV_GET_HOOKS_VSN(r); dav_error *err; int result; apr_xml_doc *doc; apr_xml_elem *source_elem; apr_xml_elem *href_elem; apr_xml_elem *prop_elem; const char *source; int no_auto_merge; int no_checkout; dav_lookup_result lookup; /* If no versioning provider, decline the request */ if (vsn_hooks == NULL) return DECLINED; if ((result = ap_xml_parse_input(r, &doc)) != OK) return result; if (doc == NULL || !dav_validate_root(doc, "merge")) { /* This supplies additional information for the default msg. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00616) "The request body must be present and must be a " "DAV:merge element."); return HTTP_BAD_REQUEST; } if ((source_elem = dav_find_child(doc->root, "source")) == NULL) { /* This supplies additional information for the default msg. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00617) "The DAV:merge element must contain a DAV:source " "element."); return HTTP_BAD_REQUEST; } if ((href_elem = dav_find_child(source_elem, "href")) == NULL) { /* This supplies additional information for the default msg. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00618) "The DAV:source element must contain a DAV:href " "element."); return HTTP_BAD_REQUEST; } source = dav_xml_get_cdata(href_elem, r->pool, 1 /* strip_white */); /* get a subrequest for the source, so that we can get a dav_resource for that source. */ lookup = dav_lookup_uri(source, r, 0 /* must_be_absolute */); if (lookup.rnew == NULL) { if (lookup.err.status == HTTP_BAD_REQUEST) { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00619) "%s", lookup.err.desc); return HTTP_BAD_REQUEST; } /* ### this assumes that dav_lookup_uri() only generates a status * ### that Apache can provide a status line for!! */ return dav_error_response(r, lookup.err.status, lookup.err.desc); } if (lookup.rnew->status != HTTP_OK) { /* ### how best to report this... */ return dav_error_response(r, lookup.rnew->status, "Merge source URI had an error."); } err = dav_get_resource(lookup.rnew, 0 /* label_allowed */, 0 /* use_checked_in */, &source_resource); if (err != NULL) return dav_handle_err(r, err, NULL); no_auto_merge = dav_find_child(doc->root, "no-auto-merge") != NULL; no_checkout = dav_find_child(doc->root, "no-checkout") != NULL; prop_elem = dav_find_child(doc->root, "prop"); /* ### check RFC. I believe the DAV:merge element may contain any ### element also allowed within DAV:checkout. need to extract them ### here, and pass them along. ### if so, then refactor the CHECKOUT method handling so we can reuse ### the code. maybe create a structure to hold CHECKOUT parameters ### which can be passed to the checkout() and merge() hooks. */ /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (!resource->exists) { /* Apache will supply a default error for this. */ return HTTP_NOT_FOUND; } /* ### check the source and target resources flags/types */ /* ### do lock checks, once behavior is defined */ /* set the Cache-Control header, per the spec */ /* ### correct? */ apr_table_setn(r->headers_out, "Cache-Control", "no-cache"); /* Initialize these values for a standard MERGE response. If the MERGE is going to do something different (i.e. an error), then it must return a dav_error, and we'll reset these values properly. */ r->status = HTTP_OK; ap_set_content_type(r, "text/xml"); /* ### should we do any preliminary response generation? probably not, ### because we may have an error, thus demanding something else in ### the response body. */ /* Do the merge, including any response generation. */ if ((err = (*vsn_hooks->merge)(resource, source_resource, no_auto_merge, no_checkout, prop_elem, r->output_filters)) != NULL) { /* ### is err->status the right error here? */ err = dav_push_error(r->pool, err->status, 0, apr_psprintf(r->pool, "Could not MERGE resource \"%s\" " "into \"%s\".", ap_escape_html(r->pool, source), ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, NULL); } /* the response was fully generated by the merge() hook. */ /* ### urk. does this prevent logging? need to check... */ return DONE; } static int dav_method_bind(request_rec *r) { dav_resource *resource; dav_resource *binding; dav_auto_version_info av_info; const dav_hooks_binding *binding_hooks = DAV_GET_HOOKS_BINDING(r); const char *dest; dav_error *err; dav_error *err2; dav_response *multi_response = NULL; dav_lookup_result lookup; int overwrite; /* If no bindings provider, decline the request */ if (binding_hooks == NULL) return DECLINED; /* Ask repository module to resolve the resource */ err = dav_get_resource(r, 0 /* label_allowed */, 0 /* use_checked_in */, &resource); if (err != NULL) return dav_handle_err(r, err, NULL); if (!resource->exists) { /* Apache will supply a default error for this. */ return HTTP_NOT_FOUND; } /* get the destination URI */ dest = apr_table_get(r->headers_in, "Destination"); if (dest == NULL) { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00620) "The request is missing a Destination header."); return HTTP_BAD_REQUEST; } lookup = dav_lookup_uri(dest, r, 0 /* must_be_absolute */); if (lookup.rnew == NULL) { if (lookup.err.status == HTTP_BAD_REQUEST) { /* This supplies additional information for the default message. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00621) "%s", lookup.err.desc); return HTTP_BAD_REQUEST; } else if (lookup.err.status == HTTP_BAD_GATEWAY) { /* ### Bindings protocol draft 02 says to return 507 * ### (Cross Server Binding Forbidden); Apache already defines 507 * ### as HTTP_INSUFFICIENT_STORAGE. So, for now, we'll return * ### HTTP_FORBIDDEN */ return dav_error_response(r, HTTP_FORBIDDEN, "Cross server bindings are not " "allowed by this server."); } /* ### this assumes that dav_lookup_uri() only generates a status * ### that Apache can provide a status line for!! */ return dav_error_response(r, lookup.err.status, lookup.err.desc); } if (lookup.rnew->status != HTTP_OK) { /* ### how best to report this... */ return dav_error_response(r, lookup.rnew->status, "Destination URI had an error."); } /* resolve binding resource */ err = dav_get_resource(lookup.rnew, 0 /* label_allowed */, 0 /* use_checked_in */, &binding); if (err != NULL) return dav_handle_err(r, err, NULL); /* are the two resources handled by the same repository? */ if (resource->hooks != binding->hooks) { /* ### this message exposes some backend config, but screw it... */ return dav_error_response(r, HTTP_BAD_GATEWAY, "Destination URI is handled by a " "different repository than the source URI. " "BIND between repositories is not possible."); } /* get and parse the overwrite header value */ if ((overwrite = dav_get_overwrite(r)) < 0) { /* dav_get_overwrite() supplies additional information for the * default message. */ return HTTP_BAD_REQUEST; } /* quick failure test: if dest exists and overwrite is false. */ if (binding->exists && !overwrite) { return dav_error_response(r, HTTP_PRECONDITION_FAILED, "Destination is not empty and " "Overwrite is not \"T\""); } /* are the source and destination the same? */ if ((*resource->hooks->is_same_resource)(resource, binding)) { return dav_error_response(r, HTTP_FORBIDDEN, "Source and Destination URIs are the same."); } /* * Check If-Headers and existing locks for destination. Note that we * use depth==infinity since the target (hierarchy) will be deleted * before the move/copy is completed. * * Note that we are overwriting the target, which implies a DELETE, so * we are subject to the error/response rules as a DELETE. Namely, we * will return a 424 error if any of the validations fail. * (see dav_method_delete() for more information) */ if ((err = dav_validate_request(lookup.rnew, binding, DAV_INFINITY, NULL, &multi_response, DAV_VALIDATE_PARENT | DAV_VALIDATE_USE_424, NULL)) != NULL) { err = dav_push_error(r->pool, err->status, 0, apr_psprintf(r->pool, "Could not BIND %s due to a " "failed precondition on the " "destination (e.g. locks).", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, multi_response); } /* guard against creating circular bindings */ if (resource->collection && (*resource->hooks->is_parent_resource)(resource, binding)) { return dav_error_response(r, HTTP_FORBIDDEN, "Source collection contains the Destination."); } if (resource->collection && (*resource->hooks->is_parent_resource)(binding, resource)) { /* The destination must exist (since it contains the source), and * a condition above implies Overwrite==T. Obviously, we cannot * delete the Destination before the BIND, as that would * delete the Source. */ return dav_error_response(r, HTTP_FORBIDDEN, "Destination collection contains the Source and " "Overwrite has been specified."); } /* prepare the destination collection for modification */ if ((err = dav_auto_checkout(r, binding, 1 /* parent_only */, &av_info)) != NULL) { /* could not make destination writable */ return dav_handle_err(r, err, NULL); } /* If target exists, remove it first (we know Ovewrite must be TRUE). * Then try to bind to the resource. */ if (binding->exists) err = (*resource->hooks->remove_resource)(binding, &multi_response); if (err == NULL) { err = (*binding_hooks->bind_resource)(resource, binding); } /* restore parent collection states */ err2 = dav_auto_checkin(r, NULL, err != NULL /* undo if error */, 0 /* unlock */, &av_info); /* check for error from remove/bind operations */ if (err != NULL) { err = dav_push_error(r->pool, err->status, 0, apr_psprintf(r->pool, "Could not BIND %s.", ap_escape_html(r->pool, r->uri)), err); return dav_handle_err(r, err, multi_response); } /* check for errors from reverting writability */ if (err2 != NULL) { /* just log a warning */ err = dav_push_error(r->pool, err2->status, 0, "The BIND was successful, but there was a " "problem automatically checking in the " "source parent collection.", err2); dav_log_err(r, err, APLOG_WARNING); } /* return an appropriate response (HTTP_CREATED) */ /* ### spec doesn't say what happens when destination was replaced */ return dav_created(r, lookup.rnew->unparsed_uri, "Binding", 0); } /* * Response handler for DAV resources */ static int dav_handler(request_rec *r) { if (strcmp(r->handler, DAV_HANDLER_NAME) != 0) return DECLINED; /* Reject requests with an unescaped hash character, as these may * be more destructive than the user intended. */ if (r->parsed_uri.fragment != NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00622) "buggy client used un-escaped hash in Request-URI"); return dav_error_response(r, HTTP_BAD_REQUEST, "The request was invalid: the URI included " "an un-escaped hash character"); } /* ### do we need to do anything with r->proxyreq ?? */ /* * ### anything else to do here? could another module and/or * ### config option "take over" the handler here? i.e. how do * ### we lock down this hierarchy so that we are the ultimate * ### arbiter? (or do we simply depend on the administrator * ### to avoid conflicting configurations?) */ /* * Set up the methods mask, since that's one of the reasons this handler * gets called, and lower-level things may need the info. * * First, set the mask to the methods we handle directly. Since by * definition we own our managed space, we unconditionally set * the r->allowed field rather than ORing our values with anything * any other module may have put in there. * * These are the HTTP-defined methods that we handle directly. */ r->allowed = 0 | (AP_METHOD_BIT << M_GET) | (AP_METHOD_BIT << M_PUT) | (AP_METHOD_BIT << M_DELETE) | (AP_METHOD_BIT << M_OPTIONS) | (AP_METHOD_BIT << M_INVALID); /* * These are the DAV methods we handle. */ r->allowed |= 0 | (AP_METHOD_BIT << M_COPY) | (AP_METHOD_BIT << M_LOCK) | (AP_METHOD_BIT << M_UNLOCK) | (AP_METHOD_BIT << M_MKCOL) | (AP_METHOD_BIT << M_MOVE) | (AP_METHOD_BIT << M_PROPFIND) | (AP_METHOD_BIT << M_PROPPATCH); /* * These are methods that we don't handle directly, but let the * server's default handler do for us as our agent. */ r->allowed |= 0 | (AP_METHOD_BIT << M_POST); /* ### hrm. if we return HTTP_METHOD_NOT_ALLOWED, then an Allow header * ### is sent; it will need the other allowed states; since the default * ### handler is not called on error, then it doesn't add the other * ### allowed states, so we must */ /* ### we might need to refine this for just where we return the error. * ### also, there is the issue with other methods (see ISSUES) */ /* dispatch the appropriate method handler */ if (r->method_number == M_GET) { return dav_method_get(r); } if (r->method_number == M_PUT) { return dav_method_put(r); } if (r->method_number == M_POST) { return dav_method_post(r); } if (r->method_number == M_DELETE) { return dav_method_delete(r); } if (r->method_number == M_OPTIONS) { return dav_method_options(r); } if (r->method_number == M_PROPFIND) { return dav_method_propfind(r); } if (r->method_number == M_PROPPATCH) { return dav_method_proppatch(r); } if (r->method_number == M_MKCOL) { return dav_method_mkcol(r); } if (r->method_number == M_COPY) { return dav_method_copymove(r, DAV_DO_COPY); } if (r->method_number == M_MOVE) { return dav_method_copymove(r, DAV_DO_MOVE); } if (r->method_number == M_LOCK) { return dav_method_lock(r); } if (r->method_number == M_UNLOCK) { return dav_method_unlock(r); } if (r->method_number == M_VERSION_CONTROL) { return dav_method_vsn_control(r); } if (r->method_number == M_CHECKOUT) { return dav_method_checkout(r); } if (r->method_number == M_UNCHECKOUT) { return dav_method_uncheckout(r); } if (r->method_number == M_CHECKIN) { return dav_method_checkin(r); } if (r->method_number == M_UPDATE) { return dav_method_update(r); } if (r->method_number == M_LABEL) { return dav_method_label(r); } if (r->method_number == M_REPORT) { return dav_method_report(r); } if (r->method_number == M_MKWORKSPACE) { return dav_method_make_workspace(r); } if (r->method_number == M_MKACTIVITY) { return dav_method_make_activity(r); } if (r->method_number == M_BASELINE_CONTROL) { return dav_method_baseline_control(r); } if (r->method_number == M_MERGE) { return dav_method_merge(r); } /* BIND method */ if (r->method_number == dav_methods[DAV_M_BIND]) { return dav_method_bind(r); } /* DASL method */ if (r->method_number == dav_methods[DAV_M_SEARCH]) { return dav_method_search(r); } /* ### add'l methods for Advanced Collections, ACLs */ return DECLINED; } static int dav_fixups(request_rec *r) { dav_dir_conf *conf; /* quickly ignore any HTTP/0.9 requests which aren't subreqs. */ if (r->assbackwards && !r->main) { return DECLINED; } conf = (dav_dir_conf *)ap_get_module_config(r->per_dir_config, &dav_module); /* if DAV is not enabled, then we've got nothing to do */ if (conf->provider == NULL) { return DECLINED; } /* We are going to handle almost every request. In certain cases, the provider maps to the filesystem (thus, handle_get is FALSE), and core Apache will handle it. a For that case, we just return right away. */ if (r->method_number == M_GET) { /* * ### need some work to pull Content-Type and Content-Language * ### from the property database. */ /* * If the repository hasn't indicated that it will handle the * GET method, then just punt. * * ### this isn't quite right... taking over the response can break * ### things like mod_negotiation. need to look into this some more. */ if (!conf->provider->repos->handle_get) { return DECLINED; } } /* ### this is wrong. We should only be setting the r->handler for the * requests that mod_dav knows about. If we set the handler for M_POST * requests, then CGI scripts that use POST will return the source for the * script. However, mod_dav DOES handle POST, so something else needs * to be fixed. */ if (r->method_number != M_POST) { /* We are going to be handling the response for this resource. */ r->handler = DAV_HANDLER_NAME; return OK; } return DECLINED; } static void register_hooks(apr_pool_t *p) { ap_hook_handler(dav_handler, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(dav_init_handler, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_fixups(dav_fixups, NULL, NULL, APR_HOOK_MIDDLE); dav_hook_find_liveprop(dav_core_find_liveprop, NULL, NULL, APR_HOOK_LAST); dav_hook_insert_all_liveprops(dav_core_insert_all_liveprops, NULL, NULL, APR_HOOK_MIDDLE); dav_core_register_uris(p); } /*--------------------------------------------------------------------------- * * Configuration info for the module */ static const command_rec dav_cmds[] = { /* per directory/location */ AP_INIT_TAKE1("DAV", dav_cmd_dav, NULL, ACCESS_CONF, "specify the DAV provider for a directory or location"), /* per directory/location, or per server */ AP_INIT_TAKE1("DAVMinTimeout", dav_cmd_davmintimeout, NULL, ACCESS_CONF|RSRC_CONF, "specify minimum allowed timeout"), /* per directory/location, or per server */ AP_INIT_FLAG("DAVDepthInfinity", dav_cmd_davdepthinfinity, NULL, ACCESS_CONF|RSRC_CONF, "allow Depth infinity PROPFIND requests"), { NULL } }; module DAV_DECLARE_DATA dav_module = { STANDARD20_MODULE_STUFF, dav_create_dir_config, /* dir config creater */ dav_merge_dir_config, /* dir merger --- default is to override */ dav_create_server_config, /* server config */ dav_merge_server_config, /* merge server config */ dav_cmds, /* command table */ register_hooks, /* register hooks */ }; APR_HOOK_STRUCT( APR_HOOK_LINK(gather_propsets) APR_HOOK_LINK(find_liveprop) APR_HOOK_LINK(insert_all_liveprops) ) APR_IMPLEMENT_EXTERNAL_HOOK_VOID(dav, DAV, gather_propsets, (apr_array_header_t *uris), (uris)) APR_IMPLEMENT_EXTERNAL_HOOK_RUN_FIRST(dav, DAV, int, find_liveprop, (const dav_resource *resource, const char *ns_uri, const char *name, const dav_hooks_liveprop **hooks), (resource, ns_uri, name, hooks), 0) APR_IMPLEMENT_EXTERNAL_HOOK_VOID(dav, DAV, insert_all_liveprops, (request_rec *r, const dav_resource *resource, dav_prop_insert what, apr_text_header *phdr), (r, resource, what, phdr)) httpd-2.4.41/modules/dav/main/std_liveprop.c0000644000000000000500000001705212271771357017301 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "util_xml.h" #include "apr_strings.h" #include "ap_provider.h" #include "mod_dav.h" /* forward-declare */ static const dav_hooks_liveprop dav_core_hooks_liveprop; /* ** The namespace URIs that we use. There will only ever be "DAV:". */ static const char * const dav_core_namespace_uris[] = { "DAV:", NULL /* sentinel */ }; /* ** Define each of the core properties that this provider will handle. ** Note that all of them are in the DAV: namespace, which has a ** provider-local index of 0. */ static const dav_liveprop_spec dav_core_props[] = { { 0, "comment", DAV_PROPID_comment, 1 }, { 0, "creator-displayname", DAV_PROPID_creator_displayname, 1 }, { 0, "displayname", DAV_PROPID_displayname, 1 }, { 0, "resourcetype", DAV_PROPID_resourcetype, 0 }, { 0, "source", DAV_PROPID_source, 1 }, { 0 } /* sentinel */ }; static const dav_liveprop_group dav_core_liveprop_group = { dav_core_props, dav_core_namespace_uris, &dav_core_hooks_liveprop }; static dav_prop_insert dav_core_insert_prop(const dav_resource *resource, int propid, dav_prop_insert what, apr_text_header *phdr) { const char *value = NULL; const char *s; apr_pool_t *p = resource->pool; const dav_liveprop_spec *info; long global_ns; switch (propid) { case DAV_PROPID_resourcetype: { /* additional type info provided by external modules ? */ int i; apr_array_header_t *extensions = ap_list_provider_names(p, DAV_RESOURCE_TYPE_GROUP, "0"); ap_list_provider_names_t *entry = (ap_list_provider_names_t *)extensions->elts; for (i = 0; i < extensions->nelts; i++, entry++) { const dav_resource_type_provider *res_hooks = dav_get_resource_type_providers(entry->provider_name); const char *name = NULL, *uri = NULL; if (!res_hooks || !res_hooks->get_resource_type) continue; if (!res_hooks->get_resource_type(resource, &name, &uri) && name) { if (!uri || !strcasecmp(uri, "DAV:")) value = apr_pstrcat(p, value ? value : "", "", NULL); else value = apr_pstrcat(p, value ? value : "", "", NULL); } } } switch (resource->type) { case DAV_RESOURCE_TYPE_VERSION: if (resource->baselined) { value = apr_pstrcat(p, value ? value : "", "", NULL); break; } /* fall through */ case DAV_RESOURCE_TYPE_REGULAR: case DAV_RESOURCE_TYPE_WORKING: if (resource->collection) { value = apr_pstrcat(p, value ? value : "", "", NULL); } else { /* ### should we denote lock-null resources? */ if (value == NULL) { value = ""; /* becomes: */ } } break; case DAV_RESOURCE_TYPE_HISTORY: value = apr_pstrcat(p, value ? value : "", "", NULL); break; case DAV_RESOURCE_TYPE_WORKSPACE: value = apr_pstrcat(p, value ? value : "", "", NULL); break; case DAV_RESOURCE_TYPE_ACTIVITY: value = apr_pstrcat(p, value ? value : "", "", NULL); break; default: /* ### bad juju */ return DAV_PROP_INSERT_NOTDEF; } break; case DAV_PROPID_comment: case DAV_PROPID_creator_displayname: case DAV_PROPID_displayname: case DAV_PROPID_source: default: /* ** This property is known, but not defined as a liveprop. However, ** it may be a dead property. */ return DAV_PROP_INSERT_NOTDEF; } /* assert: value != NULL */ /* get the information and global NS index for the property */ global_ns = dav_get_liveprop_info(propid, &dav_core_liveprop_group, &info); /* assert: info != NULL && info->name != NULL */ if (what == DAV_PROP_INSERT_SUPPORTED) { s = apr_psprintf(p, "" DEBUG_CR, info->name, dav_core_namespace_uris[info->ns]); } else if (what == DAV_PROP_INSERT_VALUE && *value != '\0') { s = apr_psprintf(p, "%s" DEBUG_CR, global_ns, info->name, value, global_ns, info->name); } else { s = apr_psprintf(p, "" DEBUG_CR, global_ns, info->name); } apr_text_append(p, phdr, s); /* we inserted what was asked for */ return what; } static int dav_core_is_writable(const dav_resource *resource, int propid) { const dav_liveprop_spec *info; (void) dav_get_liveprop_info(propid, &dav_core_liveprop_group, &info); return info->is_writable; } static dav_error * dav_core_patch_validate(const dav_resource *resource, const apr_xml_elem *elem, int operation, void **context, int *defer_to_dead) { /* all of our writable props go in the dead prop database */ *defer_to_dead = 1; return NULL; } static const dav_hooks_liveprop dav_core_hooks_liveprop = { dav_core_insert_prop, dav_core_is_writable, dav_core_namespace_uris, dav_core_patch_validate, NULL, /* patch_exec */ NULL, /* patch_commit */ NULL, /* patch_rollback */ }; DAV_DECLARE_NONSTD(int) dav_core_find_liveprop( const dav_resource *resource, const char *ns_uri, const char *name, const dav_hooks_liveprop **hooks) { return dav_do_find_liveprop(ns_uri, name, &dav_core_liveprop_group, hooks); } DAV_DECLARE_NONSTD(void) dav_core_insert_all_liveprops( request_rec *r, const dav_resource *resource, dav_prop_insert what, apr_text_header *phdr) { (void) dav_core_insert_prop(resource, DAV_PROPID_resourcetype, what, phdr); } DAV_DECLARE_NONSTD(void) dav_core_register_uris(apr_pool_t *p) { /* register the namespace URIs */ dav_register_liveprop_group(p, &dav_core_liveprop_group); } httpd-2.4.41/modules/dav/main/mod_dav.dsp0000644000000000000500000001205710551346420016530 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_dav" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_dav - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_dav.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_dav.mak" CFG="mod_dav - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_dav - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_dav - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_dav - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "DAV_DECLARE_EXPORT" /Fd"Release\mod_dav_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_dav.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_dav.so" /d LONG_NAME="dav_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_dav.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_dav.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_dav.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_dav - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "DAV_DECLARE_EXPORT" /Fd"Debug\mod_dav_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_dav.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_dav.so" /d LONG_NAME="dav_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_dav.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_dav.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav.so # Begin Special Build Tool TargetPath=.\Debug\mod_dav.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_dav - Win32 Release" # Name "mod_dav - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\liveprop.c # End Source File # Begin Source File SOURCE=.\mod_dav.c # End Source File # Begin Source File SOURCE=.\props.c # End Source File # Begin Source File SOURCE=.\providers.c # End Source File # Begin Source File SOURCE=.\std_liveprop.c # End Source File # Begin Source File SOURCE=.\util.c # End Source File # Begin Source File SOURCE=.\util_lock.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter "h;hpp;hxx;hm;inl;fi;fd" # Begin Source File SOURCE=.\mod_dav.h # End Source File # End Group # Begin Source File SOURCE=..\..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/dav/main/mod_dav.h0000644000000000000500000027145013506617416016206 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_dav.h * @brief DAV extension module for Apache 2.0.* * * @defgroup MOD_DAV mod_dav * @ingroup APACHE_MODS * @{ */ #ifndef _MOD_DAV_H_ #define _MOD_DAV_H_ #include "apr_hooks.h" #include "apr_hash.h" #include "apr_dbm.h" #include "apr_tables.h" #include "httpd.h" #include "util_filter.h" #include "util_xml.h" #include /* for INT_MAX */ #include /* for time_t */ #ifdef __cplusplus extern "C" { #endif #define DAV_VERSION AP_SERVER_BASEREVISION #define DAV_XML_HEADER "" #define DAV_XML_CONTENT_TYPE "text/xml; charset=\"utf-8\"" #define DAV_READ_BLOCKSIZE 2048 /* used for reading input blocks */ #define DAV_RESPONSE_BODY_1 "\n\n" #define DAV_RESPONSE_BODY_2 "\n\n

    " #define DAV_RESPONSE_BODY_3 "

    \n

    " #define DAV_RESPONSE_BODY_4 "

    \n" #define DAV_RESPONSE_BODY_5 "\n" #define DAV_DO_COPY 0 #define DAV_DO_MOVE 1 #if 1 #define DAV_DEBUG 1 #define DEBUG_CR "\n" #define DBG0(f) ap_log_error(APLOG_MARK, \ APLOG_ERR, 0, NULL, (f)) #define DBG1(f,a1) ap_log_error(APLOG_MARK, \ APLOG_ERR, 0, NULL, f, a1) #define DBG2(f,a1,a2) ap_log_error(APLOG_MARK, \ APLOG_ERR, 0, NULL, f, a1, a2) #define DBG3(f,a1,a2,a3) ap_log_error(APLOG_MARK, \ APLOG_ERR, 0, NULL, f, a1, a2, a3) #else #undef DAV_DEBUG #define DEBUG_CR "" #endif #define DAV_INFINITY INT_MAX /* for the Depth: header */ /* Create a set of DAV_DECLARE(type), DAV_DECLARE_NONSTD(type) and * DAV_DECLARE_DATA with appropriate export and import tags for the platform */ #if !defined(WIN32) #define DAV_DECLARE(type) type #define DAV_DECLARE_NONSTD(type) type #define DAV_DECLARE_DATA #elif defined(DAV_DECLARE_STATIC) #define DAV_DECLARE(type) type __stdcall #define DAV_DECLARE_NONSTD(type) type #define DAV_DECLARE_DATA #elif defined(DAV_DECLARE_EXPORT) #define DAV_DECLARE(type) __declspec(dllexport) type __stdcall #define DAV_DECLARE_NONSTD(type) __declspec(dllexport) type #define DAV_DECLARE_DATA __declspec(dllexport) #else #define DAV_DECLARE(type) __declspec(dllimport) type __stdcall #define DAV_DECLARE_NONSTD(type) __declspec(dllimport) type #define DAV_DECLARE_DATA __declspec(dllimport) #endif /* -------------------------------------------------------------------- ** ** ERROR MANAGEMENT */ /* ** dav_error structure. ** ** In most cases, mod_dav uses a pointer to a dav_error structure. If the ** pointer is NULL, then no error has occurred. ** ** In certain cases, a dav_error structure is directly used. In these cases, ** a status value of 0 means that an error has not occurred. ** ** Note: this implies that status != 0 whenever an error occurs. ** ** The desc field is optional (it may be NULL). When NULL, it typically ** implies that Apache has a proper description for the specified status. */ typedef struct dav_error { int status; /* suggested HTTP status (0 for no error) */ int error_id; /* DAV-specific error ID */ const char *desc; /* DAV:responsedescription and error log */ apr_status_t aprerr; /* APR error if any, or 0/APR_SUCCESS */ const char *namespace; /* [optional] namespace of error */ const char *tagname; /* name of error-tag */ struct dav_error *prev; /* previous error (in stack) */ const char *childtags; /* error-tag may have children */ } dav_error; /* ** Create a new error structure. save_errno will be filled with the current ** errno value. */ DAV_DECLARE(dav_error*) dav_new_error(apr_pool_t *p, int status, int error_id, apr_status_t aprerr, const char *desc); /* ** Create a new error structure with tagname and (optional) namespace; ** namespace may be NULL, which means "DAV:". */ DAV_DECLARE(dav_error*) dav_new_error_tag(apr_pool_t *p, int status, int error_id, apr_status_t aprerr, const char *desc, const char *namespace, const char *tagname); /* ** Push a new error description onto the stack of errors. ** ** This function is used to provide an additional description to an existing ** error. ** ** should contain the caller's view of what the current status is, ** given the underlying error. If it doesn't have a better idea, then the ** caller should pass prev->status. ** ** can specify a new error_id since the topmost description has ** changed. */ DAV_DECLARE(dav_error*) dav_push_error(apr_pool_t *p, int status, int error_id, const char *desc, dav_error *prev); /* ** Join two errors together. ** ** This function is used to add a new error stack onto an existing error so ** that subsequent errors can be reported after the first error. It returns ** the correct error stack to use so that the caller can blindly call it ** without checking that both dest and src are not NULL. ** ** is the error stack that the error will be added to. ** ** is the error stack that will be appended. */ DAV_DECLARE(dav_error*) dav_join_error(dav_error* dest, dav_error* src); typedef struct dav_response dav_response; /* ** dav_handle_err() ** ** Handle the standard error processing. must be non-NULL. ** ** is set by the following: ** - dav_validate_request() ** - dav_add_lock() ** - repos_hooks->remove_resource ** - repos_hooks->move_resource ** - repos_hooks->copy_resource ** - vsn_hooks->update */ DAV_DECLARE(int) dav_handle_err(request_rec *r, dav_error *err, dav_response *response); /* error ID values... */ /* IF: header errors */ #define DAV_ERR_IF_PARSE 100 /* general parsing error */ #define DAV_ERR_IF_MULTIPLE_NOT 101 /* multiple "Not" found */ #define DAV_ERR_IF_UNK_CHAR 102 /* unknown char in header */ #define DAV_ERR_IF_ABSENT 103 /* no locktokens given */ #define DAV_ERR_IF_TAGGED 104 /* in parsing tagged-list */ #define DAV_ERR_IF_UNCLOSED_PAREN 105 /* in no-tagged-list */ /* Prop DB errors */ #define DAV_ERR_PROP_BAD_MAJOR 200 /* major version was wrong */ #define DAV_ERR_PROP_READONLY 201 /* prop is read-only */ #define DAV_ERR_PROP_NO_DATABASE 202 /* writable db not avail */ #define DAV_ERR_PROP_NOT_FOUND 203 /* prop not found */ #define DAV_ERR_PROP_BAD_LOCKDB 204 /* could not open lockdb */ #define DAV_ERR_PROP_OPENING 205 /* problem opening propdb */ #define DAV_ERR_PROP_EXEC 206 /* problem exec'ing patch */ /* Predefined DB errors */ /* ### any to define?? */ /* Predefined locking system errors */ #define DAV_ERR_LOCK_OPENDB 400 /* could not open lockdb */ #define DAV_ERR_LOCK_NO_DB 401 /* no database defined */ #define DAV_ERR_LOCK_CORRUPT_DB 402 /* DB is corrupt */ #define DAV_ERR_LOCK_UNK_STATE_TOKEN 403 /* unknown State-token */ #define DAV_ERR_LOCK_PARSE_TOKEN 404 /* bad opaquelocktoken */ #define DAV_ERR_LOCK_SAVE_LOCK 405 /* err saving locks */ /* ** Some comments on Error ID values: ** ** The numbers do not necessarily need to be unique. Uniqueness simply means ** that two errors that have not been predefined above can be distinguished ** from each other. At the moment, mod_dav does not use this distinguishing ** feature, but it could be used in the future to collapse elements ** into groups based on the error ID (and associated responsedescription). ** ** If a compute_desc is provided, then the error ID should be unique within ** the context of the compute_desc function (so the function can figure out ** what to filled into the desc). ** ** Basically, subsystems can ignore defining new error ID values if they want ** to. The subsystems *do* need to return the predefined errors when ** appropriate, so that mod_dav can figure out what to do. Subsystems can ** simply leave the error ID field unfilled (zero) if there isn't an error ** that must be placed there. */ /* -------------------------------------------------------------------- ** ** HOOK STRUCTURES ** ** These are here for forward-declaration purposes. For more info, see ** the section title "HOOK HANDLING" for more information, plus each ** structure definition. */ /* forward-declare this structure */ typedef struct dav_hooks_propdb dav_hooks_propdb; typedef struct dav_hooks_locks dav_hooks_locks; typedef struct dav_hooks_vsn dav_hooks_vsn; typedef struct dav_hooks_repository dav_hooks_repository; typedef struct dav_hooks_liveprop dav_hooks_liveprop; typedef struct dav_hooks_binding dav_hooks_binding; typedef struct dav_hooks_search dav_hooks_search; /* ### deprecated name */ typedef dav_hooks_propdb dav_hooks_db; /* -------------------------------------------------------------------- ** ** RESOURCE HANDLING */ /* ** Resource Types: ** The base protocol defines only file and collection resources. ** The versioning protocol defines several additional resource types ** to represent artifacts of a version control system. ** ** This enumeration identifies the type of URL used to identify the ** resource. Since the same resource may have more than one type of ** URL which can identify it, dav_resource_type cannot be used ** alone to determine the type of the resource; attributes of the ** dav_resource object must also be consulted. */ typedef enum { DAV_RESOURCE_TYPE_UNKNOWN, DAV_RESOURCE_TYPE_REGULAR, /* file or collection; could be * unversioned, or version selector, * or baseline selector */ DAV_RESOURCE_TYPE_VERSION, /* version or baseline URL */ DAV_RESOURCE_TYPE_HISTORY, /* version or baseline history URL */ DAV_RESOURCE_TYPE_WORKING, /* working resource URL */ DAV_RESOURCE_TYPE_WORKSPACE, /* workspace URL */ DAV_RESOURCE_TYPE_ACTIVITY, /* activity URL */ DAV_RESOURCE_TYPE_PRIVATE /* repository-private type */ } dav_resource_type; /* ** Opaque, repository-specific information for a resource. */ typedef struct dav_resource_private dav_resource_private; /* ** Resource descriptor, generated by a repository provider. ** ** Note: the lock-null state is not explicitly represented here, ** since it may be expensive to compute. Use dav_get_resource_state() ** to determine whether a non-existent resource is a lock-null resource. ** ** A quick explanation of how the flags can apply to different resources: ** ** unversioned file or collection: ** type = DAV_RESOURCE_TYPE_REGULAR ** exists = ? (1 if exists) ** collection = ? (1 if collection) ** versioned = 0 ** baselined = 0 ** working = 0 ** ** version-controlled resource or configuration: ** type = DAV_RESOURCE_TYPE_REGULAR ** exists = 1 ** collection = ? (1 if collection) ** versioned = 1 ** baselined = ? (1 if configuration) ** working = ? (1 if checked out) ** ** version/baseline history: ** type = DAV_RESOURCE_TYPE_HISTORY ** exists = 1 ** collection = 0 ** versioned = 0 ** baselined = 0 ** working = 0 ** ** version/baseline: ** type = DAV_RESOURCE_TYPE_VERSION ** exists = 1 ** collection = ? (1 if collection) ** versioned = 1 ** baselined = ? (1 if baseline) ** working = 0 ** ** working resource: ** type = DAV_RESOURCE_TYPE_WORKING ** exists = 1 ** collection = ? (1 if collection) ** versioned = 1 ** baselined = 0 ** working = 1 ** ** workspace: ** type = DAV_RESOURCE_TYPE_WORKSPACE ** exists = ? (1 if exists) ** collection = 1 ** versioned = ? (1 if version-controlled) ** baselined = ? (1 if baseline-controlled) ** working = ? (1 if checked out) ** ** activity: ** type = DAV_RESOURCE_TYPE_ACTIVITY ** exists = ? (1 if exists) ** collection = 0 ** versioned = 0 ** baselined = 0 ** working = 0 */ typedef struct dav_resource { dav_resource_type type; int exists; /* 0 => null resource */ int collection; /* 0 => file; can be 1 for * REGULAR, VERSION, and WORKING resources, * and is always 1 for WORKSPACE */ int versioned; /* 0 => unversioned; can be 1 for * REGULAR and WORKSPACE resources, * and is always 1 for VERSION and WORKING */ int baselined; /* 0 => not baselined; can be 1 for * REGULAR, VERSION, and WORKSPACE resources; * versioned == 1 when baselined == 1 */ int working; /* 0 => not checked out; can be 1 for * REGULAR and WORKSPACE resources, * and is always 1 for WORKING */ const char *uri; /* the URI for this resource; * currently has an ABI flaw where sometimes it is * assumed to be encoded and sometimes not */ dav_resource_private *info; /* the provider's private info */ const dav_hooks_repository *hooks; /* hooks used for this resource */ /* When allocating items related specifically to this resource, the following pool should be used. Its lifetime will be at least as long as the dav_resource structure. */ apr_pool_t *pool; } dav_resource; /* ** Lock token type. Lock providers define the details of a lock token. ** However, all providers are expected to at least be able to parse ** the "opaquelocktoken" scheme, which is represented by a uuid_t. */ typedef struct dav_locktoken dav_locktoken; /* -------------------------------------------------------------------- ** ** BUFFER HANDLING ** ** These buffers are used as a lightweight buffer reuse mechanism. Apache ** provides sub-pool creation and destruction to much the same effect, but ** the sub-pools are a bit more general and heavyweight than these buffers. */ /* buffer for reuse; can grow to accommodate needed size */ typedef struct { apr_size_t alloc_len; /* how much has been allocated */ apr_size_t cur_len; /* how much is currently being used */ char *buf; /* buffer contents */ } dav_buffer; #define DAV_BUFFER_MINSIZE 256 /* minimum size for buffer */ #define DAV_BUFFER_PAD 64 /* amount of pad when growing */ /* set the cur_len to the given size and ensure space is available */ DAV_DECLARE(void) dav_set_bufsize(apr_pool_t *p, dav_buffer *pbuf, apr_size_t size); /* initialize a buffer and copy the specified (null-term'd) string into it */ DAV_DECLARE(void) dav_buffer_init(apr_pool_t *p, dav_buffer *pbuf, const char *str); /* check that the buffer can accommodate more bytes */ DAV_DECLARE(void) dav_check_bufsize(apr_pool_t *p, dav_buffer *pbuf, apr_size_t extra_needed); /* append a string to the end of the buffer, adjust length */ DAV_DECLARE(void) dav_buffer_append(apr_pool_t *p, dav_buffer *pbuf, const char *str); /* place a string on the end of the buffer, do NOT adjust length */ DAV_DECLARE(void) dav_buffer_place(apr_pool_t *p, dav_buffer *pbuf, const char *str); /* place some memory on the end of a buffer; do NOT adjust length */ DAV_DECLARE(void) dav_buffer_place_mem(apr_pool_t *p, dav_buffer *pbuf, const void *mem, apr_size_t amt, apr_size_t pad); /* -------------------------------------------------------------------- ** ** HANDY UTILITIES */ /* contains results from one of the getprop functions */ typedef struct { apr_text * propstats; /* element text */ apr_text * xmlns; /* namespace decls for elem */ } dav_get_props_result; /* holds the contents of a element */ struct dav_response { const char *href; /* always */ const char *desc; /* optional description at level */ /* use status if propresult.propstats is NULL. */ dav_get_props_result propresult; int status; struct dav_response *next; }; typedef struct { request_rec *rnew; /* new subrequest */ dav_error err; /* potential error response */ } dav_lookup_result; DAV_DECLARE(dav_lookup_result) dav_lookup_uri(const char *uri, request_rec *r, int must_be_absolute); /* defines type of property info a provider is to return */ typedef enum { DAV_PROP_INSERT_NOTDEF, /* property is defined by this provider, but nothing was inserted because the (live) property is not defined for this resource (it may be present as a dead property). */ DAV_PROP_INSERT_NOTSUPP, /* property is recognized by this provider, but it is not supported, and cannot be treated as a dead property */ DAV_PROP_INSERT_NAME, /* a property name (empty elem) was inserted into the text block */ DAV_PROP_INSERT_VALUE, /* a property name/value pair was inserted into the text block */ DAV_PROP_INSERT_SUPPORTED /* a supported live property was added to the text block as a element */ } dav_prop_insert; /* ### this stuff is private to dav/fs/repos.c; move it... */ /* format a time string (buf must be at least DAV_TIMEBUF_SIZE chars) */ #define DAV_STYLE_ISO8601 1 #define DAV_STYLE_RFC822 2 #define DAV_TIMEBUF_SIZE 30 /* Write a complete RESPONSE object out as a xml * element. Data is sent into brigade BB, which is auto-flushed into * the output filter stack for request R. Use POOL for any temporary * allocations. * * [Presumably the tag has already been written; this * routine is shared by dav_send_multistatus and dav_stream_response.] */ DAV_DECLARE(void) dav_send_one_response(dav_response *response, apr_bucket_brigade *bb, request_rec *r, apr_pool_t *pool); /* Factorized helper function: prep request_rec R for a multistatus * response and write tag into BB, destined for * R->output_filters. Use xml NAMESPACES in initial tag, if * non-NULL. */ DAV_DECLARE(void) dav_begin_multistatus(apr_bucket_brigade *bb, request_rec *r, int status, apr_array_header_t *namespaces); /* Finish a multistatus response started by dav_begin_multistatus: */ DAV_DECLARE(apr_status_t) dav_finish_multistatus(request_rec *r, apr_bucket_brigade *bb); /* Send a multistatus response */ DAV_DECLARE(void) dav_send_multistatus(request_rec *r, int status, dav_response *first, apr_array_header_t *namespaces); DAV_DECLARE(apr_text *) dav_failed_proppatch(apr_pool_t *p, apr_array_header_t *prop_ctx); DAV_DECLARE(apr_text *) dav_success_proppatch(apr_pool_t *p, apr_array_header_t *prop_ctx); DAV_DECLARE(int) dav_get_depth(request_rec *r, int def_depth); DAV_DECLARE(int) dav_validate_root(const apr_xml_doc *doc, const char *tagname); DAV_DECLARE(apr_xml_elem *) dav_find_child(const apr_xml_elem *elem, const char *tagname); /* gather up all the CDATA into a single string */ DAV_DECLARE(const char *) dav_xml_get_cdata(const apr_xml_elem *elem, apr_pool_t *pool, int strip_white); /* ** XML namespace handling ** ** This structure tracks namespace declarations (xmlns:prefix="URI"). ** It maintains a one-to-many relationship of URIs-to-prefixes. In other ** words, one URI may be defined by many prefixes, but any specific ** prefix will specify only one URI. ** ** Prefixes using the "g###" pattern can be generated automatically if ** the caller does not have specific prefix requirements. */ typedef struct { apr_pool_t *pool; apr_hash_t *uri_prefix; /* map URIs to an available prefix */ apr_hash_t *prefix_uri; /* map all prefixes to their URIs */ int count; /* counter for "g###" prefixes */ } dav_xmlns_info; /* create an empty dav_xmlns_info structure */ DAV_DECLARE(dav_xmlns_info *) dav_xmlns_create(apr_pool_t *pool); /* add a specific prefix/URI pair. the prefix/uri should have a lifetime at least that of xmlns->pool */ DAV_DECLARE(void) dav_xmlns_add(dav_xmlns_info *xi, const char *prefix, const char *uri); /* add a URI (if not present); any prefix is acceptable and is returned. the uri should have a lifetime at least that xmlns->pool */ DAV_DECLARE(const char *) dav_xmlns_add_uri(dav_xmlns_info *xi, const char *uri); /* return the URI for a specified prefix (or NULL if the prefix is unknown) */ DAV_DECLARE(const char *) dav_xmlns_get_uri(dav_xmlns_info *xi, const char *prefix); /* return an available prefix for a specified URI (or NULL if the URI is unknown) */ DAV_DECLARE(const char *) dav_xmlns_get_prefix(dav_xmlns_info *xi, const char *uri); /* generate xmlns declarations (appending into the given text) */ DAV_DECLARE(void) dav_xmlns_generate(dav_xmlns_info *xi, apr_text_header *phdr); /* -------------------------------------------------------------------- ** ** DAV PLUGINS */ /* ### docco ... */ /* ** dav_provider ** ** This structure wraps up all of the hooks that a mod_dav provider can ** supply. The provider MUST supply and . The rest are ** optional and should contain NULL if that feature is not supplied. ** ** Note that a provider cannot pick and choose portions from various ** underlying implementations (which was theoretically possible in ** mod_dav 1.0). There are too many dependencies between a dav_resource ** (defined by ) and the other functionality. ** ** Live properties are not part of the dav_provider structure because they ** are handled through the APR_HOOK interface (to allow for multiple liveprop ** providers). The core always provides some properties, and then a given ** provider will add more properties. ** ** Some providers may need to associate a context with the dav_provider ** structure -- the ctx field is available for storing this context. Just ** leave it NULL if it isn't required. */ typedef struct { const dav_hooks_repository *repos; const dav_hooks_propdb *propdb; const dav_hooks_locks *locks; const dav_hooks_vsn *vsn; const dav_hooks_binding *binding; const dav_hooks_search *search; void *ctx; } dav_provider; /* ** gather_propsets: gather all live property propset-URIs ** ** The hook implementor should push one or more URIs into the specified ** array. These URIs are returned in the DAV: header to let clients know ** what sets of live properties are supported by the installation. mod_dav ** will place open/close angle brackets around each value (much like ** a Coded-URL); quotes and brackets should not be in the value. ** ** Example: http://apache.org/dav/props/ ** ** (of course, use your own domain to ensure a unique value) */ APR_DECLARE_EXTERNAL_HOOK(dav, DAV, void, gather_propsets, (apr_array_header_t *uris)) /* ** find_liveprop: find a live property, returning a non-zero, unique, ** opaque identifier. ** ** If the hook implementor determines the specified URI/name refers to ** one of its properties, then it should fill in HOOKS and return a ** non-zero value. The returned value is the "property ID" and will ** be passed to the various liveprop hook functions. ** ** Return 0 if the property is not defined by the hook implementor. */ APR_DECLARE_EXTERNAL_HOOK(dav, DAV, int, find_liveprop, (const dav_resource *resource, const char *ns_uri, const char *name, const dav_hooks_liveprop **hooks)) /* ** insert_all_liveprops: insert all (known) live property names/values. ** ** The hook implementor should append XML text to PHDR, containing liveprop ** names. If INSVALUE is true, then the property values should also be ** inserted into the output XML stream. ** ** The liveprop provider should insert *all* known and *defined* live ** properties on the specified resource. If a particular liveprop is ** not defined for this resource, then it should not be inserted. */ APR_DECLARE_EXTERNAL_HOOK(dav, DAV, void, insert_all_liveprops, (request_rec *r, const dav_resource *resource, dav_prop_insert what, apr_text_header *phdr)) DAV_DECLARE(const dav_hooks_locks *) dav_get_lock_hooks(request_rec *r); DAV_DECLARE(const dav_hooks_propdb *) dav_get_propdb_hooks(request_rec *r); DAV_DECLARE(const dav_hooks_vsn *) dav_get_vsn_hooks(request_rec *r); DAV_DECLARE(const dav_hooks_binding *) dav_get_binding_hooks(request_rec *r); DAV_DECLARE(const dav_hooks_search *) dav_get_search_hooks(request_rec *r); DAV_DECLARE(void) dav_register_provider(apr_pool_t *p, const char *name, const dav_provider *hooks); DAV_DECLARE(const dav_provider *) dav_lookup_provider(const char *name); DAV_DECLARE(const char *) dav_get_provider_name(request_rec *r); /* ### deprecated */ #define DAV_GET_HOOKS_PROPDB(r) dav_get_propdb_hooks(r) #define DAV_GET_HOOKS_LOCKS(r) dav_get_lock_hooks(r) #define DAV_GET_HOOKS_VSN(r) dav_get_vsn_hooks(r) #define DAV_GET_HOOKS_BINDING(r) dav_get_binding_hooks(r) #define DAV_GET_HOOKS_SEARCH(r) dav_get_search_hooks(r) /* -------------------------------------------------------------------- ** ** IF HEADER PROCESSING ** ** Here is the definition of the If: header from RFC 2518, S9.4: ** ** If = "If" ":" (1*No-tag-list | 1*Tagged-list) ** No-tag-list = List ** Tagged-list = Resource 1*List ** Resource = Coded-URL ** List = "(" 1*(["Not"](State-token | "[" entity-tag "]")) ")" ** State-token = Coded-URL ** Coded-URL = "<" absoluteURI ">" ; absoluteURI from RFC 2616 ** ** List corresponds to dav_if_state_list. No-tag-list corresponds to ** dav_if_header with uri==NULL. Tagged-list corresponds to a sequence of ** dav_if_header structures with (duplicate) uri==Resource -- one ** dav_if_header per state_list. A second Tagged-list will start a new ** sequence of dav_if_header structures with the new URI. ** ** A summary of the semantics, mapped into our structures: ** - Chained dav_if_headers: OR ** - Chained dav_if_state_lists: AND ** - NULL uri matches all resources */ typedef enum { dav_if_etag, dav_if_opaquelock, dav_if_unknown /* the "unknown" state type; always matches false. */ } dav_if_state_type; typedef struct dav_if_state_list { dav_if_state_type type; int condition; #define DAV_IF_COND_NORMAL 0 #define DAV_IF_COND_NOT 1 /* "Not" was applied */ const char *etag; dav_locktoken *locktoken; struct dav_if_state_list *next; } dav_if_state_list; typedef struct dav_if_header { const char *uri; apr_size_t uri_len; struct dav_if_state_list *state; struct dav_if_header *next; int dummy_header; /* used internally by the lock/etag validation */ } dav_if_header; typedef struct dav_locktoken_list { dav_locktoken *locktoken; struct dav_locktoken_list *next; } dav_locktoken_list; DAV_DECLARE(dav_error *) dav_get_locktoken_list(request_rec *r, dav_locktoken_list **ltl); /* -------------------------------------------------------------------- ** ** LIVE PROPERTY HANDLING */ /* opaque type for PROPPATCH rollback information */ typedef struct dav_liveprop_rollback dav_liveprop_rollback; struct dav_hooks_liveprop { /* ** Insert property information into a text block. The property to ** insert is identified by the propid value. The information to insert ** is identified by the "what" argument, as follows: ** DAV_PROP_INSERT_NAME ** property name, as an empty XML element ** DAV_PROP_INSERT_VALUE ** property name/value, as an XML element ** DAV_PROP_INSERT_SUPPORTED ** if the property is defined on the resource, then ** a DAV:supported-live-property element, as defined ** by the DeltaV extensions to RFC2518. ** ** Providers should return DAV_PROP_INSERT_NOTDEF if the property is ** known and not defined for this resource, so should be handled as a ** dead property. If a provider recognizes, but does not support, a ** property, and does not want it handled as a dead property, it should ** return DAV_PROP_INSERT_NOTSUPP. ** ** Returns one of DAV_PROP_INSERT_* based on what happened. ** ** ### we may need more context... ie. the lock database */ dav_prop_insert (*insert_prop)(const dav_resource *resource, int propid, dav_prop_insert what, apr_text_header *phdr); /* ** Determine whether a given property is writable. ** ** ### we may want a different semantic. i.e. maybe it should be ** ### "can we write into this property?" ** ** Returns 1 if the live property can be written, 0 if read-only. */ int (*is_writable)(const dav_resource *resource, int propid); /* ** This member defines the set of namespace URIs that the provider ** uses for its properties. When insert_all is called, it will be ** passed a list of integers that map from indices into this list ** to namespace IDs for output generation. ** ** The last entry in this list should be a NULL value (sentinel). */ const char * const * namespace_uris; /* ** ### this is not the final design. we want an open-ended way for ** ### liveprop providers to attach *new* properties. To this end, ** ### we'll have a "give me a list of the props you define", a way ** ### to check for a prop's existence, a way to validate a set/remove ** ### of a prop, and a way to execute/commit/rollback that change. */ /* ** Validate that the live property can be assigned a value, and that ** the provided value is valid. ** ** elem will point to the XML element that names the property. For ** example: ** T ** ** The provider can access the cdata fields and the child elements ** to extract the relevant pieces. ** ** operation is one of DAV_PROP_OP_SET or _DELETE. ** ** The provider may return a value in *context which will be passed ** to each of the exec/commit/rollback functions. For example, this ** may contain an internal value which has been processed from the ** input element. ** ** The provider must set defer_to_dead to true (non-zero) or false. ** If true, then the set/remove is deferred to the dead property ** database. Note: it will be set to zero on entry. */ dav_error * (*patch_validate)(const dav_resource *resource, const apr_xml_elem *elem, int operation, void **context, int *defer_to_dead); /* ### doc... */ dav_error * (*patch_exec)(const dav_resource *resource, const apr_xml_elem *elem, int operation, void *context, dav_liveprop_rollback **rollback_ctx); /* ### doc... */ void (*patch_commit)(const dav_resource *resource, int operation, void *context, dav_liveprop_rollback *rollback_ctx); /* ### doc... */ dav_error * (*patch_rollback)(const dav_resource *resource, int operation, void *context, dav_liveprop_rollback *rollback_ctx); /* ** If a provider needs a context to associate with this hooks structure, ** then this field may be used. In most cases, it will just be NULL. */ void *ctx; }; /* ** dav_liveprop_spec: specify a live property ** ** This structure is used as a standard way to determine if a particular ** property is a live property. Its use is not part of the mandated liveprop ** interface, but can be used by liveprop providers in conjunction with the ** utility routines below. ** ** spec->name == NULL is the defined end-sentinel for a list of specs. */ typedef struct { int ns; /* provider-local namespace index */ const char *name; /* name of the property */ int propid; /* provider-local property ID */ int is_writable; /* is the property writable? */ } dav_liveprop_spec; /* ** dav_liveprop_group: specify a group of liveprops ** ** This structure specifies a group of live properties, their namespaces, ** and how to handle them. */ typedef struct { const dav_liveprop_spec *specs; const char * const *namespace_uris; const dav_hooks_liveprop *hooks; } dav_liveprop_group; /* ### docco */ DAV_DECLARE(int) dav_do_find_liveprop(const char *ns_uri, const char *name, const dav_liveprop_group *group, const dav_hooks_liveprop **hooks); /* ### docco */ DAV_DECLARE(long) dav_get_liveprop_info(int propid, const dav_liveprop_group *group, const dav_liveprop_spec **info); /* ### docco */ DAV_DECLARE(void) dav_register_liveprop_group(apr_pool_t *pool, const dav_liveprop_group *group); /* ### docco */ DAV_DECLARE(long) dav_get_liveprop_ns_index(const char *uri); /* ### docco */ DAV_DECLARE(long) dav_get_liveprop_ns_count(void); /* ### docco */ DAV_DECLARE(void) dav_add_all_liveprop_xmlns(apr_pool_t *p, apr_text_header *phdr); /* ** The following three functions are part of mod_dav's internal handling ** for the core WebDAV properties. They are not part of mod_dav's API. */ DAV_DECLARE_NONSTD(int) dav_core_find_liveprop( const dav_resource *resource, const char *ns_uri, const char *name, const dav_hooks_liveprop **hooks); DAV_DECLARE_NONSTD(void) dav_core_insert_all_liveprops( request_rec *r, const dav_resource *resource, dav_prop_insert what, apr_text_header *phdr); DAV_DECLARE_NONSTD(void) dav_core_register_uris(apr_pool_t *p); /* ** Standard WebDAV Property Identifiers ** ** A live property provider does not need to use these; they are simply ** provided for convenience. ** ** Property identifiers need to be unique within a given provider, but not ** *across* providers (note: this uniqueness constraint was different in ** older versions of mod_dav). ** ** The identifiers start at 20000 to make it easier for providers to avoid ** conflicts with the standard properties. The properties are arranged ** alphabetically, and may be reordered from time to time (as properties ** are introduced). ** ** NOTE: there is no problem with reordering (e.g. binary compat) since the ** identifiers are only used within a given provider, which would pick up ** the entire set of changes upon a recompile. */ enum { DAV_PROPID_BEGIN = 20000, /* Standard WebDAV properties (RFC 2518) */ DAV_PROPID_creationdate, DAV_PROPID_displayname, DAV_PROPID_getcontentlanguage, DAV_PROPID_getcontentlength, DAV_PROPID_getcontenttype, DAV_PROPID_getetag, DAV_PROPID_getlastmodified, DAV_PROPID_lockdiscovery, DAV_PROPID_resourcetype, DAV_PROPID_source, DAV_PROPID_supportedlock, /* DeltaV properties (from the I-D (#14)) */ DAV_PROPID_activity_checkout_set, DAV_PROPID_activity_set, DAV_PROPID_activity_version_set, DAV_PROPID_auto_merge_set, DAV_PROPID_auto_version, DAV_PROPID_baseline_collection, DAV_PROPID_baseline_controlled_collection, DAV_PROPID_baseline_controlled_collection_set, DAV_PROPID_checked_in, DAV_PROPID_checked_out, DAV_PROPID_checkin_fork, DAV_PROPID_checkout_fork, DAV_PROPID_checkout_set, DAV_PROPID_comment, DAV_PROPID_creator_displayname, DAV_PROPID_current_activity_set, DAV_PROPID_current_workspace_set, DAV_PROPID_default_variant, DAV_PROPID_eclipsed_set, DAV_PROPID_label_name_set, DAV_PROPID_merge_set, DAV_PROPID_precursor_set, DAV_PROPID_predecessor_set, DAV_PROPID_root_version, DAV_PROPID_subactivity_set, DAV_PROPID_subbaseline_set, DAV_PROPID_successor_set, DAV_PROPID_supported_method_set, DAV_PROPID_supported_live_property_set, DAV_PROPID_supported_report_set, DAV_PROPID_unreserved, DAV_PROPID_variant_set, DAV_PROPID_version_controlled_binding_set, DAV_PROPID_version_controlled_configuration, DAV_PROPID_version_history, DAV_PROPID_version_name, DAV_PROPID_workspace, DAV_PROPID_workspace_checkout_set, DAV_PROPID_END }; /* ** Property Identifier Registration ** ** At the moment, mod_dav requires live property providers to ensure that ** each property returned has a unique value. For now, this is done through ** central registration (there are no known providers other than the default, ** so this remains manageable). ** ** WARNING: the TEST ranges should never be "shipped". */ #define DAV_PROPID_CORE 10000 /* ..10099. defined by mod_dav */ #define DAV_PROPID_FS 10100 /* ..10299. mod_dav filesystem provider. */ #define DAV_PROPID_TEST1 10300 /* ..10399 */ #define DAV_PROPID_TEST2 10400 /* ..10499 */ #define DAV_PROPID_TEST3 10500 /* ..10599 */ /* Next: 10600 */ /* -------------------------------------------------------------------- ** ** DATABASE FUNCTIONS */ typedef struct dav_db dav_db; typedef struct dav_namespace_map dav_namespace_map; typedef struct dav_deadprop_rollback dav_deadprop_rollback; typedef struct { const char *ns; /* "" signals "no namespace" */ const char *name; } dav_prop_name; /* hook functions to enable pluggable databases */ struct dav_hooks_propdb { dav_error * (*open)(apr_pool_t *p, const dav_resource *resource, int ro, dav_db **pdb); void (*close)(dav_db *db); /* ** In bulk, define any namespaces that the values and their name ** elements may need. ** ** Note: sometimes mod_dav will defer calling this until output_value ** returns found==1. If the output process needs the dav_xmlns_info ** filled for its work, then it will need to fill it on demand rather ** than depending upon this hook to fill in the structure. ** ** Note: this will *always* be called during an output sequence. Thus, ** the provider may rely solely on using this to fill the xmlns info. */ dav_error * (*define_namespaces)(dav_db *db, dav_xmlns_info *xi); /* ** Output the value from the database (i.e. add an element name and ** the value into *phdr). Set *found based on whether the name/value ** was found in the propdb. ** ** Note: it is NOT an error for the key/value pair to not exist. ** ** The dav_xmlns_info passed to define_namespaces() is also passed to ** each output_value() call so that namespaces can be added on-demand. ** It can also be used to look up prefixes or URIs during the output ** process. */ dav_error * (*output_value)(dav_db *db, const dav_prop_name *name, dav_xmlns_info *xi, apr_text_header *phdr, int *found); /* ** Build a mapping from "global" namespaces (stored in apr_xml_*) ** into provider-local namespace identifiers. ** ** This mapping should be done once per set of namespaces, and the ** resulting mapping should be passed into the store() hook function. ** ** Note: usually, there is just a single document/namespaces for all ** elements passed. However, the generality of creating multiple ** mappings and passing them to store() is provided here. ** ** Note: this is only in preparation for a series of store() calls. ** As a result, the propdb must be open for read/write access when ** this function is called. */ dav_error * (*map_namespaces)(dav_db *db, const apr_array_header_t *namespaces, dav_namespace_map **mapping); /* ** Store a property value for a given name. The value->combined field ** MUST be set for this call. ** ** ### WARNING: current providers will quote the text within ELEM. ** ### this implies you can call this function only once with a given ** ### element structure (a second time will quote it again). */ dav_error * (*store)(dav_db *db, const dav_prop_name *name, const apr_xml_elem *elem, dav_namespace_map *mapping); /* remove a given property */ dav_error * (*remove)(dav_db *db, const dav_prop_name *name); /* returns 1 if the record specified by "key" exists; 0 otherwise */ int (*exists)(dav_db *db, const dav_prop_name *name); /* ** Iterate over the property names in the database. ** ** iter->name.ns == iter->name.name == NULL when there are no more names. ** ** Note: only one iteration may occur over the propdb at a time. */ dav_error * (*first_name)(dav_db *db, dav_prop_name *pname); dav_error * (*next_name)(dav_db *db, dav_prop_name *pname); /* ** Rollback support: get rollback context, and apply it. ** ** struct dav_deadprop_rollback is a provider-private structure; it ** should remember the name, and the name's old value (or the fact that ** the value was not present, and should be deleted if a rollback occurs). */ dav_error * (*get_rollback)(dav_db *db, const dav_prop_name *name, dav_deadprop_rollback **prollback); dav_error * (*apply_rollback)(dav_db *db, dav_deadprop_rollback *rollback); /* ** If a provider needs a context to associate with this hooks structure, ** then this field may be used. In most cases, it will just be NULL. */ void *ctx; }; /* -------------------------------------------------------------------- ** ** LOCK FUNCTIONS */ /* Used to represent a Timeout header of "Infinity" */ #define DAV_TIMEOUT_INFINITE 0 DAV_DECLARE(time_t) dav_get_timeout(request_rec *r); /* ** Opaque, provider-specific information for a lock database. */ typedef struct dav_lockdb_private dav_lockdb_private; /* ** Opaque, provider-specific information for a lock record. */ typedef struct dav_lock_private dav_lock_private; /* ** Lock database type. Lock providers are urged to implement a "lazy" open, so ** doing an "open" is cheap until something is actually needed from the DB. */ typedef struct { const dav_hooks_locks *hooks; /* the hooks used for this lockdb */ int ro; /* was it opened readonly? */ dav_lockdb_private *info; } dav_lockdb; typedef enum { DAV_LOCKSCOPE_UNKNOWN, DAV_LOCKSCOPE_EXCLUSIVE, DAV_LOCKSCOPE_SHARED } dav_lock_scope; typedef enum { DAV_LOCKTYPE_UNKNOWN, DAV_LOCKTYPE_WRITE } dav_lock_type; typedef enum { DAV_LOCKREC_DIRECT, /* lock asserted on this resource */ DAV_LOCKREC_INDIRECT, /* lock inherited from a parent */ DAV_LOCKREC_INDIRECT_PARTIAL /* most info is not filled in */ } dav_lock_rectype; /* ** dav_lock: hold information about a lock on a resource. ** ** This structure is used for both direct and indirect locks. A direct lock ** is a lock applied to a specific resource by the client. An indirect lock ** is one that is inherited from a parent resource by virtue of a non-zero ** Depth: header when the lock was applied. ** ** mod_dav records both types of locks in the lock database, managing their ** addition/removal as resources are moved about the namespace. ** ** Note that the lockdb is free to marshal this structure in any form that ** it likes. ** ** For a "partial" lock, the and fields must be filled ** in. All other (user) fields should be zeroed. The lock provider will ** usually fill in the field, and the field may be used to ** construct a list of partial locks. ** ** The lock provider MUST use the info field to store a value such that a ** dav_lock structure can locate itself in the underlying lock database. ** This requirement is needed for refreshing: when an indirect dav_lock is ** refreshed, its reference to the direct lock does not specify the direct's ** resource, so the only way to locate the (refreshed, direct) lock in the ** database is to use the info field. ** ** Note that only refers to the resource where this lock was ** found. ** ### hrm. that says the abstraction is wrong. is_locknull may disappear. */ typedef struct dav_lock { dav_lock_rectype rectype; /* type of lock record */ int is_locknull; /* lock establishes a locknull resource */ /* ### put the resource in here? */ dav_lock_scope scope; /* scope of the lock */ dav_lock_type type; /* type of lock */ int depth; /* depth of the lock */ time_t timeout; /* when the lock will timeout */ const dav_locktoken *locktoken; /* the token that was issued */ const char *owner; /* (XML) owner of the lock */ const char *auth_user; /* auth'd username owning lock */ dav_lock_private *info; /* private to the lockdb */ struct dav_lock *next; /* for managing a list of locks */ } dav_lock; /* Property-related public lock functions */ DAV_DECLARE(const char *)dav_lock_get_activelock(request_rec *r, dav_lock *locks, dav_buffer *pbuf); /* LockDB-related public lock functions */ DAV_DECLARE(dav_error *) dav_lock_parse_lockinfo(request_rec *r, const dav_resource *resrouce, dav_lockdb *lockdb, const apr_xml_doc *doc, dav_lock **lock_request); DAV_DECLARE(int) dav_unlock(request_rec *r, const dav_resource *resource, const dav_locktoken *locktoken); DAV_DECLARE(dav_error *) dav_add_lock(request_rec *r, const dav_resource *resource, dav_lockdb *lockdb, dav_lock *request, dav_response **response); DAV_DECLARE(dav_error *) dav_notify_created(request_rec *r, dav_lockdb *lockdb, const dav_resource *resource, int resource_state, int depth); DAV_DECLARE(dav_error*) dav_lock_query(dav_lockdb *lockdb, const dav_resource *resource, dav_lock **locks); DAV_DECLARE(dav_error *) dav_validate_request(request_rec *r, dav_resource *resource, int depth, dav_locktoken *locktoken, dav_response **response, int flags, dav_lockdb *lockdb); /* ** flags: ** 0x0F -- reserved for values ** ** other flags, detailed below */ #define DAV_VALIDATE_RESOURCE 0x0010 /* validate just the resource */ #define DAV_VALIDATE_PARENT 0x0020 /* validate resource AND its parent */ #define DAV_VALIDATE_ADD_LD 0x0040 /* add DAV:lockdiscovery into the 424 DAV:response */ #define DAV_VALIDATE_USE_424 0x0080 /* return 424 status, not 207 */ #define DAV_VALIDATE_IS_PARENT 0x0100 /* for internal use */ #define DAV_VALIDATE_NO_MODIFY 0x0200 /* resource is not being modified so allow even if lock token is not provided */ /* Lock-null related public lock functions */ DAV_DECLARE(int) dav_get_resource_state(request_rec *r, const dav_resource *resource); /* Lock provider hooks. Locking is optional, so there may be no * lock provider for a given repository. */ struct dav_hooks_locks { /* Return the supportedlock property for a resource */ const char * (*get_supportedlock)( const dav_resource *resource ); /* Parse a lock token URI, returning a lock token object allocated * in the given pool. */ dav_error * (*parse_locktoken)( apr_pool_t *p, const char *char_token, dav_locktoken **locktoken_p ); /* Format a lock token object into a URI string, allocated in * the given pool. * * Always returns non-NULL. */ const char * (*format_locktoken)( apr_pool_t *p, const dav_locktoken *locktoken ); /* Compare two lock tokens. * * Result < 0 => lt1 < lt2 * Result == 0 => lt1 == lt2 * Result > 0 => lt1 > lt2 */ int (*compare_locktoken)( const dav_locktoken *lt1, const dav_locktoken *lt2 ); /* Open the provider's lock database. * * The provider may or may not use a "real" database for locks * (a lock could be an attribute on a resource, for example). * * The provider may choose to use the value of the DAVLockDB directive * (as returned by dav_get_lockdb_path()) to decide where to place * any storage it may need. * * The request storage pool should be associated with the lockdb, * so it can be used in subsequent operations. * * If ro != 0, only readonly operations will be performed. * If force == 0, the open can be "lazy"; no subsequent locking operations * may occur. * If force != 0, locking operations will definitely occur. */ dav_error * (*open_lockdb)( request_rec *r, int ro, int force, dav_lockdb **lockdb ); /* Indicates completion of locking operations */ void (*close_lockdb)( dav_lockdb *lockdb ); /* Take a resource out of the lock-null state. */ dav_error * (*remove_locknull_state)( dav_lockdb *lockdb, const dav_resource *resource ); /* ** Create a (direct) lock structure for the given resource. A locktoken ** will be created. ** ** The lock provider may store private information into lock->info. */ dav_error * (*create_lock)(dav_lockdb *lockdb, const dav_resource *resource, dav_lock **lock); /* ** Get the locks associated with the specified resource. ** ** If resolve_locks is true (non-zero), then any indirect locks are ** resolved to their actual, direct lock (i.e. the reference to followed ** to the original lock). ** ** The locks, if any, are returned as a linked list in no particular ** order. If no locks are present, then *locks will be NULL. */ dav_error * (*get_locks)(dav_lockdb *lockdb, const dav_resource *resource, int calltype, dav_lock **locks); #define DAV_GETLOCKS_RESOLVED 0 /* resolve indirects to directs */ #define DAV_GETLOCKS_PARTIAL 1 /* leave indirects partially filled */ #define DAV_GETLOCKS_COMPLETE 2 /* fill out indirect locks */ /* ** Find a particular lock on a resource (specified by its locktoken). ** ** *lock will be set to NULL if the lock is not found. ** ** Note that the provider can optimize the unmarshalling -- only one ** lock (or none) must be constructed and returned. ** ** If partial_ok is true (non-zero), then an indirect lock can be ** partially filled in. Otherwise, another lookup is done and the ** lock structure will be filled out as a DAV_LOCKREC_INDIRECT. */ dav_error * (*find_lock)(dav_lockdb *lockdb, const dav_resource *resource, const dav_locktoken *locktoken, int partial_ok, dav_lock **lock); /* ** Quick test to see if the resource has *any* locks on it. ** ** This is typically used to determine if a non-existent resource ** has a lock and is (therefore) a locknull resource. ** ** WARNING: this function may return TRUE even when timed-out locks ** exist (i.e. it may not perform timeout checks). */ dav_error * (*has_locks)(dav_lockdb *lockdb, const dav_resource *resource, int *locks_present); /* ** Append the specified lock(s) to the set of locks on this resource. ** ** If "make_indirect" is true (non-zero), then the specified lock(s) ** should be converted to an indirect lock (if it is a direct lock) ** before appending. Note that the conversion to an indirect lock does ** not alter the passed-in lock -- the change is internal the ** append_locks function. ** ** Multiple locks are specified using the lock->next links. */ dav_error * (*append_locks)(dav_lockdb *lockdb, const dav_resource *resource, int make_indirect, const dav_lock *lock); /* ** Remove any lock that has the specified locktoken. ** ** If locktoken == NULL, then ALL locks are removed. */ dav_error * (*remove_lock)(dav_lockdb *lockdb, const dav_resource *resource, const dav_locktoken *locktoken); /* ** Refresh all locks, found on the specified resource, which has a ** locktoken in the provided list. ** ** If the lock is indirect, then the direct lock is referenced and ** refreshed. ** ** Each lock that is updated is returned in the argument. ** Note that the locks will be fully resolved. */ dav_error * (*refresh_locks)(dav_lockdb *lockdb, const dav_resource *resource, const dav_locktoken_list *ltl, time_t new_time, dav_lock **locks); /* ** Look up the resource associated with a particular locktoken. ** ** The search begins at the specified and the lock ** specified by . ** ** If the resource/token specifies an indirect lock, then the direct ** lock will be looked up, and THAT resource will be returned. In other ** words, this function always returns the resource where a particular ** lock (token) was asserted. ** ** NOTE: this function pointer is allowed to be NULL, indicating that ** the provider does not support this type of functionality. The ** caller should then traverse up the repository hierarchy looking ** for the resource defining a lock with this locktoken. */ dav_error * (*lookup_resource)(dav_lockdb *lockdb, const dav_locktoken *locktoken, const dav_resource *start_resource, const dav_resource **resource); /* ** If a provider needs a context to associate with this hooks structure, ** then this field may be used. In most cases, it will just be NULL. */ void *ctx; }; /* what types of resources can be discovered by dav_get_resource_state() */ #define DAV_RESOURCE_LOCK_NULL 10 /* resource lock-null */ #define DAV_RESOURCE_NULL 11 /* resource null */ #define DAV_RESOURCE_EXISTS 12 /* resource exists */ #define DAV_RESOURCE_ERROR 13 /* an error occurred */ /* -------------------------------------------------------------------- ** ** PROPERTY HANDLING */ typedef struct dav_propdb dav_propdb; DAV_DECLARE(dav_error *) dav_open_propdb( request_rec *r, dav_lockdb *lockdb, const dav_resource *resource, int ro, apr_array_header_t *ns_xlate, dav_propdb **propdb); DAV_DECLARE(dav_error *) dav_popen_propdb( apr_pool_t *p, request_rec *r, dav_lockdb *lockdb, const dav_resource *resource, int ro, apr_array_header_t *ns_xlate, dav_propdb **propdb); DAV_DECLARE(void) dav_close_propdb(dav_propdb *db); DAV_DECLARE(dav_get_props_result) dav_get_props( dav_propdb *db, apr_xml_doc *doc); DAV_DECLARE(dav_get_props_result) dav_get_allprops( dav_propdb *db, dav_prop_insert what); DAV_DECLARE(void) dav_get_liveprop_supported( dav_propdb *propdb, const char *ns_uri, const char *propname, apr_text_header *body); /* ** 3-phase property modification. ** ** 1) validate props. readable? unlocked? ACLs allow access? ** 2) execute operation (set/delete) ** 3) commit or rollback ** ** ### eventually, auth must be available. a ref to the request_rec (which ** ### contains the auth info) should be in the shared context struct. ** ** Each function may alter the error values and information contained within ** the context record. This should be done as an "increasing" level of ** error, rather than overwriting any previous error. ** ** Note that commit() cannot generate errors. It should simply free the ** rollback information. ** ** rollback() may generate additional errors because the rollback operation ** can sometimes fail(!). ** ** The caller should allocate an array of these, one per operation. It should ** be zero-initialized, then the db, operation, and prop fields should be ** filled in before calling dav_prop_validate. Note that the set/delete ** operations are order-dependent. For a given (logical) context, the same ** pointer must be passed to each phase. ** ** error_type is an internal value, but will have the same numeric value ** for each possible "desc" value. This allows the caller to group the ** descriptions via the error_type variable, rather than through string ** comparisons. Note that "status" does not provide enough granularity to ** differentiate/group the "desc" values. ** ** Note that the propdb will maintain some (global) context across all ** of the property change contexts. This implies that you can have only ** one open transaction per propdb. */ typedef struct dav_prop_ctx { dav_propdb *propdb; apr_xml_elem *prop; /* property to affect */ int operation; #define DAV_PROP_OP_SET 1 /* set a property value */ #define DAV_PROP_OP_DELETE 2 /* delete a prop value */ /* ### add a GET? */ /* private items to the propdb */ int is_liveprop; void *liveprop_ctx; struct dav_rollback_item *rollback; /* optional rollback info */ dav_error *err; /* error (if any) */ /* private to mod_dav.c */ request_rec *r; } dav_prop_ctx; DAV_DECLARE_NONSTD(void) dav_prop_validate(dav_prop_ctx *ctx); DAV_DECLARE_NONSTD(void) dav_prop_exec(dav_prop_ctx *ctx); DAV_DECLARE_NONSTD(void) dav_prop_commit(dav_prop_ctx *ctx); DAV_DECLARE_NONSTD(void) dav_prop_rollback(dav_prop_ctx *ctx); #define DAV_PROP_CTX_HAS_ERR(dpc) ((dpc).err && (dpc).err->status >= 300) /* -------------------------------------------------------------------- ** ** WALKER STRUCTURE */ enum { DAV_CALLTYPE_MEMBER = 1, /* called for a member resource */ DAV_CALLTYPE_COLLECTION, /* called for a collection */ DAV_CALLTYPE_LOCKNULL /* called for a locknull resource */ }; typedef struct { /* the client-provided context */ void *walk_ctx; /* pool to use for allocations in the callback */ apr_pool_t *pool; /* the current resource */ const dav_resource *resource; /* OUTPUT: add responses to this */ dav_response *response; } dav_walk_resource; typedef struct { int walk_type; #define DAV_WALKTYPE_AUTH 0x0001 /* limit to authorized files */ #define DAV_WALKTYPE_NORMAL 0x0002 /* walk normal files */ #define DAV_WALKTYPE_LOCKNULL 0x0004 /* walk locknull resources */ /* callback function and a client context for the walk */ dav_error * (*func)(dav_walk_resource *wres, int calltype); void *walk_ctx; /* what pool to use for allocations needed by walk logic */ apr_pool_t *pool; /* beginning root of the walk */ const dav_resource *root; /* lock database to enable walking LOCKNULL resources */ dav_lockdb *lockdb; } dav_walk_params; /* directory tree walking context */ typedef struct dav_walker_ctx { /* input: */ dav_walk_params w; /* ### client data... phasing out this big glom */ /* this brigade buffers data being sent to r->output_filters */ apr_bucket_brigade *bb; /* a scratch pool, used to stream responses and iteratively cleared. */ apr_pool_t *scratchpool; request_rec *r; /* original request */ /* for PROPFIND operations */ apr_xml_doc *doc; int propfind_type; #define DAV_PROPFIND_IS_ALLPROP 1 #define DAV_PROPFIND_IS_PROPNAME 2 #define DAV_PROPFIND_IS_PROP 3 apr_text *propstat_404; /* (cached) propstat giving a 404 error */ const dav_if_header *if_header; /* for validation */ const dav_locktoken *locktoken; /* for UNLOCK */ const dav_lock *lock; /* for LOCK */ int skip_root; /* for dav_inherit_locks() */ int flags; dav_buffer work_buf; /* for dav_validate_request() */ } dav_walker_ctx; DAV_DECLARE(void) dav_add_response(dav_walk_resource *wres, int status, dav_get_props_result *propstats); /* -------------------------------------------------------------------- ** ** "STREAM" STRUCTURE ** ** mod_dav uses this abstraction for interacting with the repository ** while fetching/storing resources. mod_dav views resources as a stream ** of bytes. ** ** Note that the structure is opaque -- it is private to the repository ** that created the stream in the repository's "open" function. ** ** ### THIS STUFF IS GOING AWAY ... GET/read requests are handled by ** ### having the provider jam stuff straight into the filter stack. ** ### this is only left for handling PUT/write requests. */ typedef struct dav_stream dav_stream; typedef enum { DAV_MODE_WRITE_TRUNC, /* truncate and open for writing */ DAV_MODE_WRITE_SEEKABLE /* open for writing; random access */ } dav_stream_mode; /* -------------------------------------------------------------------- ** ** REPOSITORY FUNCTIONS */ /* Repository provider hooks */ struct dav_hooks_repository { /* Flag for whether repository requires special GET handling. * If resources in the repository are not visible in the * filesystem location which URLs map to, then special handling * is required to first fetch a resource from the repository, * respond to the GET request, then free the resource copy. */ int handle_get; /* Get a resource descriptor for the URI in a request. A descriptor * should always be returned even if the resource does not exist. This * repository has been identified as handling the resource given by * the URI, so an answer must be given. If there is a problem with the * URI or accessing the resource or whatever, then an error should be * returned. * * root_dir: * the root of the directory for which this repository is configured. * * label: * if a Label: header is present (and allowed), this is the label * to use to identify a version resource from the resource's * corresponding version history. Otherwise, it will be NULL. * * use_checked_in: * use the DAV:checked-in property of the resource identified by the * Request-URI to identify and return a version resource * * The provider may associate the request storage pool with the resource * (in the resource->pool field), to use in other operations on that * resource. */ dav_error * (*get_resource)( request_rec *r, const char *root_dir, const char *label, int use_checked_in, dav_resource **resource ); /* Get a resource descriptor for the parent of the given resource. * The resources need not exist. NULL is returned if the resource * is the root collection. * * An error should be returned only if there is a fatal error in * fetching information about the parent resource. */ dav_error * (*get_parent_resource)( const dav_resource *resource, dav_resource **parent_resource ); /* Determine whether two resource descriptors refer to the same resource. * * Result != 0 => the resources are the same. */ int (*is_same_resource)( const dav_resource *res1, const dav_resource *res2 ); /* Determine whether one resource is a parent (immediate or otherwise) * of another. * * Result != 0 => res1 is a parent of res2. */ int (*is_parent_resource)( const dav_resource *res1, const dav_resource *res2 ); /* ** Open a stream for this resource, using the specified mode. The ** stream will be returned in *stream. */ dav_error * (*open_stream)(const dav_resource *resource, dav_stream_mode mode, dav_stream **stream); /* ** Close the specified stream. ** ** mod_dav will (ideally) make sure to call this. For safety purposes, ** a provider should (ideally) register a cleanup function with the ** request pool to get this closed and cleaned up. ** ** Note the possibility of an error from the close -- it is entirely ** feasible that the close does a "commit" of some kind, which can ** produce an error. ** ** commit should be TRUE (non-zero) or FALSE (0) if the stream was ** opened for writing. This flag states whether to retain the file ** or not. ** Note: the commit flag is ignored for streams opened for reading. */ dav_error * (*close_stream)(dav_stream *stream, int commit); /* ** Write data to the stream. ** ** All of the bytes must be written, or an error should be returned. */ dav_error * (*write_stream)(dav_stream *stream, const void *buf, apr_size_t bufsize); /* ** Seek to an absolute position in the stream. This is used to support ** Content-Range in a GET/PUT. ** ** NOTE: if this function is NULL (which is allowed), then any ** operations using Content-Range will be refused. */ dav_error * (*seek_stream)(dav_stream *stream, apr_off_t abs_position); /* ** If a GET is processed using a stream (open_stream, read_stream) ** rather than via a sub-request (on get_pathname), then this function ** is used to provide the repository with a way to set the headers ** in the response. ** ** This function may be called without a following deliver(), to ** handle a HEAD request. ** ** This may be NULL if handle_get is FALSE. */ dav_error * (*set_headers)(request_rec *r, const dav_resource *resource); /* ** The provider should deliver the resource into the specified filter. ** Basically, this is the response to the GET method. ** ** Note that this is called for all resources, including collections. ** The provider should determine what has content to deliver or not. ** ** set_headers will be called prior to this function, allowing the ** provider to set the appropriate response headers. ** ** This may be NULL if handle_get is FALSE. ** ### maybe toss handle_get and just use this function as the marker */ dav_error * (*deliver)(const dav_resource *resource, ap_filter_t *output); /* Create a collection resource. The resource must not already exist. * * Result == NULL if the collection was created successfully. Also, the * resource object is updated to reflect that the resource exists, and * is a collection. */ dav_error * (*create_collection)( dav_resource *resource ); /* Copy one resource to another. The destination may exist, if it is * versioned. * Handles both files and collections. Properties are copied as well. * If the destination exists and is versioned, the provider must update * the destination to have identical content to the source, * recursively for collections. * The depth argument is ignored for a file, and can be either 0 or * DAV_INFINITY for a collection. * If an error occurs in a child resource, then the return value is * non-NULL, and *response is set to a multistatus response. * If the copy is successful, the dst resource object is * updated to reflect that the resource exists. */ dav_error * (*copy_resource)( const dav_resource *src, dav_resource *dst, int depth, dav_response **response ); /* Move one resource to another. The destination must not exist. * Handles both files and collections. Properties are moved as well. * If an error occurs in a child resource, then the return value is * non-NULL, and *response is set to a multistatus response. * If the move is successful, the src and dst resource objects are * updated to reflect that the source no longer exists, and the * destination does. */ dav_error * (*move_resource)( dav_resource *src, dav_resource *dst, dav_response **response ); /* Remove a resource. Handles both files and collections. * Removes any associated properties as well. * If an error occurs in a child resource, then the return value is * non-NULL, and *response is set to a multistatus response. * If the delete is successful, the resource object is updated to * reflect that the resource no longer exists. */ dav_error * (*remove_resource)( dav_resource *resource, dav_response **response ); /* Walk a resource hierarchy. * * Iterates over the resource hierarchy specified by params->root. * Control of the walk and the callback are specified by 'params'. * * An error may be returned. *response will contain multistatus * responses (if any) suitable for the body of the error. It is also * possible to return NULL, yet still have multistatus responses. * In this case, typically the caller should return a 207 (Multistatus) * and the responses (in the body) as the HTTP response. */ dav_error * (*walk)(const dav_walk_params *params, int depth, dav_response **response); /* Get the entity tag for a resource */ const char * (*getetag)(const dav_resource *resource); /* ** If a provider needs a context to associate with this hooks structure, ** then this field may be used. In most cases, it will just be NULL. */ void *ctx; /* Get the request rec for a resource */ request_rec * (*get_request_rec)(const dav_resource *resource); /* Get the pathname for a resource */ const char * (*get_pathname)(const dav_resource *resource); }; /* -------------------------------------------------------------------- ** ** VERSIONING FUNCTIONS */ /* dav_add_vary_header * * If there were any headers in the request which require a Vary header * in the response, add it. */ DAV_DECLARE(void) dav_add_vary_header(request_rec *in_req, request_rec *out_req, const dav_resource *resource); /* ** Flags specifying auto-versioning behavior, returned by ** the auto_versionable hook. The value returned depends ** on both the state of the resource and the value of the ** DAV:auto-versioning property for the resource. ** ** If the resource does not exist (null or lock-null), ** DAV_AUTO_VERSION_ALWAYS causes creation of a new version-controlled resource ** ** If the resource is checked in, ** DAV_AUTO_VERSION_ALWAYS causes it to be checked out always, ** DAV_AUTO_VERSION_LOCKED causes it to be checked out only when locked ** ** If the resource is checked out, ** DAV_AUTO_VERSION_ALWAYS causes it to be checked in always, ** DAV_AUTO_VERSION_LOCKED causes it to be checked in when unlocked ** (note: a provider should allow auto-checkin only for resources which ** were automatically checked out) ** ** In all cases, DAV_AUTO_VERSION_NEVER results in no auto-versioning behavior. */ typedef enum { DAV_AUTO_VERSION_NEVER, DAV_AUTO_VERSION_ALWAYS, DAV_AUTO_VERSION_LOCKED } dav_auto_version; /* ** This structure is used to record what auto-versioning operations ** were done to make a resource writable, so that they can be undone ** at the end of a request. */ typedef struct { int resource_versioned; /* 1 => resource was auto-version-controlled */ int resource_checkedout; /* 1 => resource was auto-checked-out */ int parent_checkedout; /* 1 => parent was auto-checked-out */ dav_resource *parent_resource; /* parent resource, if it was needed */ } dav_auto_version_info; /* Ensure that a resource is writable. If there is no versioning * provider, then this is essentially a no-op. Versioning repositories * require explicit resource creation and checkout before they can * be written to. If a new resource is to be created, or an existing * resource deleted, the parent collection must be checked out as well. * * Set the parent_only flag to only make the parent collection writable. * Otherwise, both parent and child are made writable as needed. If the * child does not exist, then a new versioned resource is created and * checked out. * * If auto-versioning is not enabled for a versioned resource, then an error is * returned, since the resource cannot be modified. * * The dav_auto_version_info structure is filled in with enough information * to restore both parent and child resources to the state they were in * before the auto-versioning operations occurred. */ DAV_DECLARE(dav_error *) dav_auto_checkout( request_rec *r, dav_resource *resource, int parent_only, dav_auto_version_info *av_info); /* Revert the writability of resources back to what they were * before they were modified. If undo == 0, then the resource * modifications are maintained (i.e. they are checked in). * If undo != 0, then resource modifications are discarded * (i.e. they are unchecked out). * * Set the unlock flag to indicate that the resource is about * to be unlocked; it will be checked in if the resource * auto-versioning property indicates it should be. In this case, * av_info is ignored, so it can be NULL. * * The resource argument may be NULL if only the parent resource * was checked out (i.e. the parent_only was != 0 in the * dav_auto_checkout call). */ DAV_DECLARE(dav_error *) dav_auto_checkin( request_rec *r, dav_resource *resource, int undo, int unlock, dav_auto_version_info *av_info); /* ** This structure is used to describe available reports ** ** "nmspace" should be valid XML and URL-quoted. mod_dav will place ** double-quotes around it and use it in an xmlns declaration. */ typedef struct { const char *nmspace; /* namespace of the XML report element */ const char *name; /* element name for the XML report */ } dav_report_elem; /* Versioning provider hooks */ struct dav_hooks_vsn { /* ** MANDATORY HOOKS ** The following hooks are mandatory for all versioning providers; ** they define the functionality needed to implement "core" versioning. */ /* Return supported versioning options. * Each dav_text item in the list will be returned as a separate * DAV header. Providers are advised to limit the length of an * individual text item to 63 characters, to conform to the limit * used by MS Web Folders. */ void (*get_vsn_options)(apr_pool_t *p, apr_text_header *phdr); /* Get the value of a specific option for an OPTIONS request. * The option being requested is given by the parsed XML * element object "elem". The value of the option should be * appended to the "option" text object. */ dav_error * (*get_option)(const dav_resource *resource, const apr_xml_elem *elem, apr_text_header *option); /* Determine whether a non-versioned (or non-existent) resource * is versionable. Returns != 0 if resource can be versioned. */ int (*versionable)(const dav_resource *resource); /* Determine whether auto-versioning is enabled for a resource * (which may not exist, or may not be versioned). If the resource * is a checked-out resource, the provider must only enable * auto-checkin if the resource was automatically checked out. * * The value returned depends on both the state of the resource * and the value of its DAV:auto-version property. See the description * of the dav_auto_version enumeration above for the details. */ dav_auto_version (*auto_versionable)(const dav_resource *resource); /* Put a resource under version control. If the resource already * exists unversioned, then it becomes the initial version of the * new version history, and it is replaced by a version selector * which targets the new version. * * If the resource does not exist, then a new version-controlled * resource is created which either targets an existing version (if the * "target" argument is not NULL), or the initial, empty version * in a new history resource (if the "target" argument is NULL). * * If successful, the resource object state is updated appropriately * (that is, changed to refer to the new version-controlled resource). */ dav_error * (*vsn_control)(dav_resource *resource, const char *target); /* Checkout a resource. If successful, the resource * object state is updated appropriately. * * The auto_checkout flag will be set if this checkout is being * done automatically, as part of some method which modifies * the resource. The provider must remember that the resource * was automatically checked out, so it can determine whether it * can be automatically checked in. (Auto-checkin should only be * enabled for resources which were automatically checked out.) * * If the working resource has a different URL from the * target resource, a dav_resource descriptor is returned * for the new working resource. Otherwise, the original * resource descriptor will refer to the working resource. * The working_resource argument can be NULL if the caller * is not interested in the working resource. * * If the client has specified DAV:unreserved or DAV:fork-ok in the * checkout request, then the corresponding flags are set. If * DAV:activity-set has been specified, then create_activity is set * if DAV:new was specified; otherwise, the DAV:href elements' CDATA * (the actual href text) is passed in the "activities" array (each * element of the array is a const char *). activities will be NULL * no DAV:activity-set was provided or when create_activity is set. */ dav_error * (*checkout)(dav_resource *resource, int auto_checkout, int is_unreserved, int is_fork_ok, int create_activity, apr_array_header_t *activities, dav_resource **working_resource); /* Uncheckout a checked-out resource. If successful, the resource * object state is updated appropriately. */ dav_error * (*uncheckout)(dav_resource *resource); /* Checkin a checked-out resource. If successful, the resource * object state is updated appropriately, and the * version_resource descriptor will refer to the new version. * The version_resource argument can be NULL if the caller * is not interested in the new version resource. * * If the client has specified DAV:keep-checked-out in the checkin * request, then the keep_checked_out flag is set. The provider * should create a new version, but keep the resource in the * checked-out state. */ dav_error * (*checkin)(dav_resource *resource, int keep_checked_out, dav_resource **version_resource); /* ** Return the set of reports available at this resource. ** ** An array of report elements should be returned, with an end-marker ** element containing namespace==NULL. The value of the ** DAV:supported-report-set property will be constructed and ** returned. */ dav_error * (*avail_reports)(const dav_resource *resource, const dav_report_elem **reports); /* ** Determine whether a Label header can be used ** with a particular report. The dav_xml_doc structure ** contains the parsed report request body. ** Returns 0 if the Label header is not allowed. */ int (*report_label_header_allowed)(const apr_xml_doc *doc); /* ** Generate a report on a resource. Since a provider is free ** to define its own reports, and the value of request headers ** may affect the interpretation of a report, the request record ** must be passed to this routine. ** ** The dav_xml_doc structure contains the parsed report request ** body. The report response should be generated into the specified ** output filter. ** ** If an error occurs, and a response has not yet been generated, ** then an error can be returned from this function. mod_dav will ** construct an appropriate error response. Once some output has ** been placed into the filter, however, the provider should not ** return an error -- there is no way that mod_dav can deliver it ** properly. ** ** ### maybe we need a way to signal an error anyways, and then ** ### apache can abort the connection? */ dav_error * (*deliver_report)(request_rec *r, const dav_resource *resource, const apr_xml_doc *doc, ap_filter_t *output); /* ** OPTIONAL HOOKS ** The following hooks are optional; if not defined, then the ** corresponding protocol methods will be unsupported. */ /* ** Set the state of a checked-in version-controlled resource. ** ** If the request specified a version, the version resource ** represents that version. If the request specified a label, ** then "version" is NULL, and "label" is the label. ** ** The depth argument is ignored for a file, and can be 0, 1, or ** DAV_INFINITY for a collection. The depth argument only applies ** with a label, not a version. ** ** If an error occurs in a child resource, then the return value is ** non-NULL, and *response is set to a multistatus response. ** ** This hook is optional; if not defined, then the UPDATE method ** will not be supported. */ dav_error * (*update)(const dav_resource *resource, const dav_resource *version, const char *label, int depth, dav_response **response); /* ** Add a label to a version. The resource is either a specific ** version, or a version selector, in which case the label should ** be added to the current target of the version selector. The ** version selector cannot be checked out. ** ** If replace != 0, any existing label by the same name is ** effectively deleted first. Otherwise, it is an error to ** attempt to add a label which already exists on some version ** of the same history resource. ** ** This hook is optional; if not defined, then the LABEL method ** will not be supported. If it is defined, then the remove_label ** hook must be defined also. */ dav_error * (*add_label)(const dav_resource *resource, const char *label, int replace); /* ** Remove a label from a version. The resource is either a specific ** version, or a version selector, in which case the label should ** be added to the current target of the version selector. The ** version selector cannot be checked out. ** ** It is an error if no such label exists on the specified version. ** ** This hook is optional, but if defined, the add_label hook ** must be defined also. */ dav_error * (*remove_label)(const dav_resource *resource, const char *label); /* ** Determine whether a null resource can be created as a workspace. ** The provider may restrict workspaces to certain locations. ** Returns 0 if the resource cannot be a workspace. ** ** This hook is optional; if the provider does not support workspaces, ** it should be set to NULL. */ int (*can_be_workspace)(const dav_resource *resource); /* ** Create a workspace resource. The resource must not already ** exist. Any element is passed to the provider ** in the "doc" structure; it may be empty. ** ** If workspace creation is successful, the state of the resource ** object is updated appropriately. ** ** This hook is optional; if the provider does not support workspaces, ** it should be set to NULL. */ dav_error * (*make_workspace)(dav_resource *resource, apr_xml_doc *doc); /* ** Determine whether a null resource can be created as an activity. ** The provider may restrict activities to certain locations. ** Returns 0 if the resource cannot be an activity. ** ** This hook is optional; if the provider does not support activities, ** it should be set to NULL. */ int (*can_be_activity)(const dav_resource *resource); /* ** Create an activity resource. The resource must not already ** exist. ** ** If activity creation is successful, the state of the resource ** object is updated appropriately. ** ** This hook is optional; if the provider does not support activities, ** it should be set to NULL. */ dav_error * (*make_activity)(dav_resource *resource); /* ** Merge a resource (tree) into target resource (tree). ** ** ### more doc... ** ** This hook is optional; if the provider does not support merging, ** then this should be set to NULL. */ dav_error * (*merge)(dav_resource *target, dav_resource *source, int no_auto_merge, int no_checkout, apr_xml_elem *prop_elem, ap_filter_t *output); /* ** If a provider needs a context to associate with this hooks structure, ** then this field may be used. In most cases, it will just be NULL. */ void *ctx; }; /* -------------------------------------------------------------------- ** ** BINDING FUNCTIONS */ /* binding provider hooks */ struct dav_hooks_binding { /* Determine whether a resource can be the target of a binding. * Returns 0 if the resource cannot be a binding target. */ int (*is_bindable)(const dav_resource *resource); /* Create a binding to a resource. * The resource argument is the target of the binding; * the binding argument must be a resource which does not already * exist. */ dav_error * (*bind_resource)(const dav_resource *resource, dav_resource *binding); /* ** If a provider needs a context to associate with this hooks structure, ** then this field may be used. In most cases, it will just be NULL. */ void *ctx; }; /* -------------------------------------------------------------------- ** ** SEARCH(DASL) FUNCTIONS */ /* search provider hooks */ struct dav_hooks_search { /* Set header for a OPTION method * An error may be returned. * To set a hadder, this function might call * apr_table_setn(r->headers_out, "DASL", dasl_optin1); * * Examples: * DASL: * DASL: * DASL: */ dav_error * (*set_option_head)(request_rec *r); /* Search resources * An error may be returned. *response will contain multistatus * responses (if any) suitable for the body of the error. It is also * possible to return NULL, yet still have multistatus responses. * In this case, typically the caller should return a 207 (Multistatus) * and the responses (in the body) as the HTTP response. */ dav_error * (*search_resource)(request_rec *r, dav_response **response); /* ** If a provider needs a context to associate with this hooks structure, ** then this field may be used. In most cases, it will just be NULL. */ void *ctx; }; /* -------------------------------------------------------------------- ** ** MISCELLANEOUS STUFF */ typedef struct { int propid; /* live property ID */ const dav_hooks_liveprop *provider; /* the provider defining this prop */ } dav_elem_private; /* -------------------------------------------------------------------- ** ** DAV OPTIONS */ #define DAV_OPTIONS_EXTENSION_GROUP "dav_options" typedef struct dav_options_provider { dav_error* (*dav_header)(request_rec *r, const dav_resource *resource, apr_text_header *phdr); dav_error* (*dav_method)(request_rec *r, const dav_resource *resource, apr_text_header *phdr); void *ctx; } dav_options_provider; extern DAV_DECLARE(const dav_options_provider *) dav_get_options_providers(const char *name); extern DAV_DECLARE(void) dav_options_provider_register(apr_pool_t *p, const char *name, const dav_options_provider *provider); /* -------------------------------------------------------------------- ** ** DAV RESOURCE TYPE HOOKS */ typedef struct dav_resource_type_provider { int (*get_resource_type)(const dav_resource *resource, const char **name, const char **uri); } dav_resource_type_provider; #define DAV_RESOURCE_TYPE_GROUP "dav_resource_type" DAV_DECLARE(void) dav_resource_type_provider_register(apr_pool_t *p, const char *name, const dav_resource_type_provider *provider); DAV_DECLARE(const dav_resource_type_provider *) dav_get_resource_type_providers(const char *name); #ifdef __cplusplus } #endif #endif /* _MOD_DAV_H_ */ /** @} */ httpd-2.4.41/modules/dav/main/mod_dav.dep0000644000000000000500000003310312674411515016513 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_dav.mak .\liveprop.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\os.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_xml.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apr_xml.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ ".\mod_dav.h"\ .\mod_dav.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_expr.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_provider.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\http_core.h"\ "..\..\..\include\http_log.h"\ "..\..\..\include\http_main.h"\ "..\..\..\include\http_protocol.h"\ "..\..\..\include\http_request.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\os.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_script.h"\ "..\..\..\include\util_xml.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apr_xml.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_dso.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_lib.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_portable.h"\ "..\..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_shm.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ ".\mod_dav.h"\ .\props.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\http_log.h"\ "..\..\..\include\http_request.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\os.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_xml.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apr_xml.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ ".\mod_dav.h"\ .\providers.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_provider.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\os.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_xml.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apr_xml.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ ".\mod_dav.h"\ .\std_liveprop.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_provider.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\os.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_xml.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apr_xml.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ ".\mod_dav.h"\ .\util.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\http_log.h"\ "..\..\..\include\http_protocol.h"\ "..\..\..\include\http_request.h"\ "..\..\..\include\http_vhost.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\os.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_xml.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apr_xml.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_dso.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_lib.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_portable.h"\ "..\..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_shm.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ ".\mod_dav.h"\ .\util_lock.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_expr.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\http_core.h"\ "..\..\..\include\http_log.h"\ "..\..\..\include\http_protocol.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\os.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_xml.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apr_xml.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_dso.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_portable.h"\ "..\..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_shm.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ ".\mod_dav.h"\ ..\..\..\build\win32\httpd.rc : \ "..\..\..\include\ap_release.h"\ httpd-2.4.41/modules/dav/main/NWGNUmakefile0000644000000000000500000001071711541421667016736 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/server/mpm/netware \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = mod_dav # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) DAV module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) Thread # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 65536 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If this is specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # Declare all target files (you must add your files here) # # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_dav.o \ $(OBJDIR)/liveprop.o \ $(OBJDIR)/props.o \ $(OBJDIR)/providers.o \ $(OBJDIR)/std_liveprop.o \ $(OBJDIR)/util.o \ $(OBJDIR)/util_lock.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ Apache2 \ Libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ dav_module \ @dav.imp \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/dav/main/providers.c0000644000000000000500000000412111255137170016563 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_pools.h" #include "apr_hash.h" #include "ap_provider.h" #include "mod_dav.h" #define DAV_PROVIDER_GROUP "dav" DAV_DECLARE(void) dav_register_provider(apr_pool_t *p, const char *name, const dav_provider *provider) { ap_register_provider(p, DAV_PROVIDER_GROUP, name, "0", provider); } DAV_DECLARE(const dav_provider *) dav_lookup_provider(const char *name) { return ap_lookup_provider(DAV_PROVIDER_GROUP, name, "0"); } DAV_DECLARE(void) dav_options_provider_register(apr_pool_t *p, const char *name, const dav_options_provider *provider) { ap_register_provider(p, DAV_OPTIONS_EXTENSION_GROUP, name, "0", provider); } DAV_DECLARE(const dav_options_provider *) dav_get_options_providers(const char *name) { return ap_lookup_provider(DAV_OPTIONS_EXTENSION_GROUP, name, "0"); } DAV_DECLARE(void) dav_resource_type_provider_register(apr_pool_t *p, const char *name, const dav_resource_type_provider *provider) { ap_register_provider(p, DAV_RESOURCE_TYPE_GROUP, name, "0", provider); } DAV_DECLARE(const dav_resource_type_provider *) dav_get_resource_type_providers(const char *name) { return ap_lookup_provider(DAV_RESOURCE_TYPE_GROUP, name, "0"); } httpd-2.4.41/modules/dav/main/Makefile.in0000644000000000000500000000026710150161574016454 0ustar rootsrc# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/dav/lock/0002755000000000000500000000000013523273343014415 5ustar rootsrchttpd-2.4.41/modules/dav/lock/mod_dav_lock.dep0000644000000000000500000000741612674411515017537 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_dav_lock.mak .\locks.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\http_log.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\mod_dav.h"\ "..\..\..\include\os.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_xml.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apr_xml.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ ".\locks.h"\ .\mod_dav_lock.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_provider.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\mod_dav.h"\ "..\..\..\include\os.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_xml.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apr_xml.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ ".\locks.h"\ ..\..\..\build\win32\httpd.rc : \ "..\..\..\include\ap_release.h"\ httpd-2.4.41/modules/dav/lock/mod_dav_lock.c0000644000000000000500000000612611402752006017175 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "apr_strings.h" #include "ap_provider.h" #include "mod_dav.h" #include "locks.h" /* per-dir configuration */ typedef struct { const char *lockdb_path; } dav_lock_dir_conf; extern const dav_hooks_locks dav_hooks_locks_generic; extern module AP_MODULE_DECLARE_DATA dav_lock_module; const char *dav_generic_get_lockdb_path(const request_rec *r) { dav_lock_dir_conf *conf; conf = ap_get_module_config(r->per_dir_config, &dav_lock_module); return conf->lockdb_path; } static void *dav_lock_create_dir_config(apr_pool_t *p, char *dir) { return apr_pcalloc(p, sizeof(dav_lock_dir_conf)); } static void *dav_lock_merge_dir_config(apr_pool_t *p, void *base, void *overrides) { dav_lock_dir_conf *parent = base; dav_lock_dir_conf *child = overrides; dav_lock_dir_conf *newconf; newconf = apr_pcalloc(p, sizeof(*newconf)); newconf->lockdb_path = child->lockdb_path ? child->lockdb_path : parent->lockdb_path; return newconf; } /* * Command handler for the DAVGenericLockDB directive, which is TAKE1 */ static const char *dav_lock_cmd_davlockdb(cmd_parms *cmd, void *config, const char *arg1) { dav_lock_dir_conf *conf = config; conf->lockdb_path = ap_server_root_relative(cmd->pool, arg1); if (!conf->lockdb_path) { return apr_pstrcat(cmd->pool, "Invalid DAVGenericLockDB path ", arg1, NULL); } return NULL; } static const command_rec dav_lock_cmds[] = { /* per server */ AP_INIT_TAKE1("DAVGenericLockDB", dav_lock_cmd_davlockdb, NULL, ACCESS_CONF, "specify a lock database"), { NULL } }; static void register_hooks(apr_pool_t *p) { ap_register_provider(p, "dav-lock", "generic", "0", &dav_hooks_locks_generic); } AP_DECLARE_MODULE(dav_lock) = { STANDARD20_MODULE_STUFF, dav_lock_create_dir_config, /* dir config creater */ dav_lock_merge_dir_config, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ dav_lock_cmds, /* command table */ register_hooks, /* register hooks */ }; httpd-2.4.41/modules/dav/lock/NWGNUmakefile0000644000000000000500000001031311541421667016732 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/server/mpm/netware \ $(AP_WORK)/modules/dav/main \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = moddavlk # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) DAV Database Lock Sub-Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) Thread # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 65536 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If this is specified it will be used by the link '-flags' directive # NLM_FLAGS = # # Declare all target files (you must add your files here) # # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_dav_lock.o \ $(OBJDIR)/locks.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ Apache2 \ Libc \ mod_dav \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ @../main/dav.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ dav_lock_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/dav/lock/mod_dav_lock.dsp0000644000000000000500000001155210663444730017552 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_dav_lock" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_dav_lock - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_dav_lock.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_dav_lock.mak" CFG="mod_dav_lock - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_dav_lock - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_dav_lock - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_dav_lock - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_dav_lock_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_dav_lock.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_dav_lock.so" /d LONG_NAME="dav_lock_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_dav_lock.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav_lock.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_dav_lock.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav_lock.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_dav_lock.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_dav_lock - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_dav_lock_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_dav_lock.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_dav_lock.so" /d LONG_NAME="dav_lock_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_dav_lock.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav_lock.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_dav_lock.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav_lock.so # Begin Special Build Tool TargetPath=.\Debug\mod_dav_lock.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_dav_lock - Win32 Release" # Name "mod_dav_lock - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\locks.c # End Source File # Begin Source File SOURCE=.\mod_dav_lock.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter "h;hpp;hxx;hm;inl;fi;fd" # Begin Source File SOURCE=.\locks.h # End Source File # End Group # Begin Source File SOURCE=..\..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/dav/lock/config6.m40000644000000000000500000000065711707053320016211 0ustar rootsrcdnl modules enabled in this directory by default APACHE_MODPATH_INIT(dav/lock) dav_lock_objects="mod_dav_lock.lo locks.lo" case "$host" in *os2*) # OS/2 DLLs must resolve all symbols at build time # and we need some from main DAV module dav_lock_objects="$dav_lock_objects ../main/mod_dav.la" ;; esac APACHE_MODULE(dav_lock, DAV provider for generic locking, $dav_lock_objects, ,,,dav) APACHE_MODPATH_FINISH httpd-2.4.41/modules/dav/lock/mod_dav_lock.mak0000644000000000000500000002612412701473373017535 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_dav_lock.dsp !IF "$(CFG)" == "" CFG=mod_dav_lock - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_dav_lock - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_dav_lock - Win32 Release" && "$(CFG)" != "mod_dav_lock - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_dav_lock.mak" CFG="mod_dav_lock - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_dav_lock - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_dav_lock - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_dav_lock - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_dav_lock.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_dav - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_dav_lock.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_dav - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\locks.obj" -@erase "$(INTDIR)\mod_dav_lock.obj" -@erase "$(INTDIR)\mod_dav_lock.res" -@erase "$(INTDIR)\mod_dav_lock_src.idb" -@erase "$(INTDIR)\mod_dav_lock_src.pdb" -@erase "$(OUTDIR)\mod_dav_lock.exp" -@erase "$(OUTDIR)\mod_dav_lock.lib" -@erase "$(OUTDIR)\mod_dav_lock.pdb" -@erase "$(OUTDIR)\mod_dav_lock.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_dav_lock_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_dav_lock.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_dav_lock.so" /d LONG_NAME="dav_lock_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_dav_lock.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_dav_lock.pdb" /debug /out:"$(OUTDIR)\mod_dav_lock.so" /implib:"$(OUTDIR)\mod_dav_lock.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav_lock.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\locks.obj" \ "$(INTDIR)\mod_dav_lock.obj" \ "$(INTDIR)\mod_dav_lock.res" \ "..\..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\..\Release\libhttpd.lib" \ "..\main\Release\mod_dav.lib" "$(OUTDIR)\mod_dav_lock.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_dav_lock.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_dav_lock.so" if exist .\Release\mod_dav_lock.so.manifest mt.exe -manifest .\Release\mod_dav_lock.so.manifest -outputresource:.\Release\mod_dav_lock.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_dav_lock - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_dav_lock.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_dav - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_dav_lock.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_dav - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\locks.obj" -@erase "$(INTDIR)\mod_dav_lock.obj" -@erase "$(INTDIR)\mod_dav_lock.res" -@erase "$(INTDIR)\mod_dav_lock_src.idb" -@erase "$(INTDIR)\mod_dav_lock_src.pdb" -@erase "$(OUTDIR)\mod_dav_lock.exp" -@erase "$(OUTDIR)\mod_dav_lock.lib" -@erase "$(OUTDIR)\mod_dav_lock.pdb" -@erase "$(OUTDIR)\mod_dav_lock.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_dav_lock_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_dav_lock.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_dav_lock.so" /d LONG_NAME="dav_lock_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_dav_lock.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_dav_lock.pdb" /debug /out:"$(OUTDIR)\mod_dav_lock.so" /implib:"$(OUTDIR)\mod_dav_lock.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_dav_lock.so LINK32_OBJS= \ "$(INTDIR)\locks.obj" \ "$(INTDIR)\mod_dav_lock.obj" \ "$(INTDIR)\mod_dav_lock.res" \ "..\..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\..\Debug\libhttpd.lib" \ "..\main\Debug\mod_dav.lib" "$(OUTDIR)\mod_dav_lock.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_dav_lock.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_dav_lock.so" if exist .\Debug\mod_dav_lock.so.manifest mt.exe -manifest .\Debug\mod_dav_lock.so.manifest -outputresource:.\Debug\mod_dav_lock.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_dav_lock.dep") !INCLUDE "mod_dav_lock.dep" !ELSE !MESSAGE Warning: cannot find "mod_dav_lock.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_dav_lock - Win32 Release" || "$(CFG)" == "mod_dav_lock - Win32 Debug" SOURCE=.\locks.c "$(INTDIR)\locks.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\mod_dav_lock.c "$(INTDIR)\mod_dav_lock.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_dav_lock - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\dav\lock" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\dav\lock" !ELSEIF "$(CFG)" == "mod_dav_lock - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\dav\lock" "libapr - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\dav\lock" !ENDIF !IF "$(CFG)" == "mod_dav_lock - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\dav\lock" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\dav\lock" !ELSEIF "$(CFG)" == "mod_dav_lock - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\dav\lock" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\dav\lock" !ENDIF !IF "$(CFG)" == "mod_dav_lock - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\dav\lock" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\dav\lock" !ELSEIF "$(CFG)" == "mod_dav_lock - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\dav\lock" "libhttpd - Win32 DebugCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\dav\lock" !ENDIF !IF "$(CFG)" == "mod_dav_lock - Win32 Release" "mod_dav - Win32 Release" : cd ".\..\main" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dav.mak" CFG="mod_dav - Win32 Release" cd "..\lock" "mod_dav - Win32 ReleaseCLEAN" : cd ".\..\main" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dav.mak" CFG="mod_dav - Win32 Release" RECURSE=1 CLEAN cd "..\lock" !ELSEIF "$(CFG)" == "mod_dav_lock - Win32 Debug" "mod_dav - Win32 Debug" : cd ".\..\main" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dav.mak" CFG="mod_dav - Win32 Debug" cd "..\lock" "mod_dav - Win32 DebugCLEAN" : cd ".\..\main" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dav.mak" CFG="mod_dav - Win32 Debug" RECURSE=1 CLEAN cd "..\lock" !ENDIF SOURCE=..\..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_dav_lock - Win32 Release" "$(INTDIR)\mod_dav_lock.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_dav_lock.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_dav_lock.so" /d LONG_NAME="dav_lock_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_dav_lock - Win32 Debug" "$(INTDIR)\mod_dav_lock.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_dav_lock.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_dav_lock.so" /d LONG_NAME="dav_lock_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/dav/lock/locks.h0000644000000000000500000000214210455005461015671 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file locks.h * @brief Declarations for the generic lock implementation * * @addtogroup MOD_DAV * @{ */ #ifndef _DAV_LOCK_LOCKS_H_ #define _DAV_LOCK_LOCKS_H_ /* where is the lock database located? */ const char *dav_generic_get_lockdb_path(const request_rec *r); #endif /* _DAV_LOCK_LOCKS_H_ */ /** @} */ httpd-2.4.41/modules/dav/lock/locks.c0000644000000000000500000011277012604740124015675 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * Generic DAV lock implementation that a DAV provider can use. */ #include "apr.h" #include "apr_strings.h" #include "apr_file_io.h" #include "apr_uuid.h" #define APR_WANT_MEMFUNC #include "apr_want.h" #include "httpd.h" #include "http_log.h" #include "mod_dav.h" #include "locks.h" /* --------------------------------------------------------------- * * Lock database primitives * */ /* * LOCK DATABASES * * Lockdiscovery information is stored in the single lock database specified * by the DAVGenericLockDB directive. Information about this db is stored in * the per-dir configuration. * * KEY * * The database is keyed by a key_type unsigned char (DAV_TYPE_FNAME) * followed by full path. * * VALUE * * The value consists of a list of elements. * DIRECT LOCK: [char (DAV_LOCK_DIRECT), * char (dav_lock_scope), * char (dav_lock_type), * int depth, * time_t expires, * apr_uuid_t locktoken, * char[] owner, * char[] auth_user] * * INDIRECT LOCK: [char (DAV_LOCK_INDIRECT), * apr_uuid_t locktoken, * time_t expires, * int key_size, * char[] key] * The key is to the collection lock that resulted in this indirect lock */ #define DAV_TRUE 1 #define DAV_FALSE 0 #define DAV_CREATE_LIST 23 #define DAV_APPEND_LIST 24 /* Stored lock_discovery prefix */ #define DAV_LOCK_DIRECT 1 #define DAV_LOCK_INDIRECT 2 #define DAV_TYPE_FNAME 11 /* Use the opaquelock scheme for locktokens */ struct dav_locktoken { apr_uuid_t uuid; }; #define dav_compare_locktoken(plt1, plt2) \ memcmp(&(plt1)->uuid, &(plt2)->uuid, sizeof((plt1)->uuid)) /* ################################################################# * ### keep these structures (internal) or move fully to dav_lock? */ /* * We need to reliably size the fixed-length portion of * dav_lock_discovery; best to separate it into another * struct for a convenient sizeof, unless we pack lock_discovery. */ typedef struct dav_lock_discovery_fixed { char scope; char type; int depth; time_t timeout; } dav_lock_discovery_fixed; typedef struct dav_lock_discovery { struct dav_lock_discovery_fixed f; dav_locktoken *locktoken; const char *owner; /* owner field from activelock */ const char *auth_user; /* authenticated user who created the lock */ struct dav_lock_discovery *next; } dav_lock_discovery; /* Indirect locks represent locks inherited from containing collections. * They reference the lock token for the collection the lock is * inherited from. A lock provider may also define a key to the * inherited lock, for fast datbase lookup. The key is opaque outside * the lock provider. */ typedef struct dav_lock_indirect { dav_locktoken *locktoken; apr_datum_t key; struct dav_lock_indirect *next; time_t timeout; } dav_lock_indirect; /* ################################################################# */ /* * Stored direct lock info - full lock_discovery length: * prefix + Fixed length + lock token + 2 strings + 2 nulls (one for each * string) */ #define dav_size_direct(a) (1 + sizeof(dav_lock_discovery_fixed) \ + sizeof(apr_uuid_t) \ + ((a)->owner ? strlen((a)->owner) : 0) \ + ((a)->auth_user ? strlen((a)->auth_user) : 0) \ + 2) /* Stored indirect lock info - lock token and apr_datum_t */ #define dav_size_indirect(a) (1 + sizeof(apr_uuid_t) \ + sizeof(time_t) \ + sizeof(int) + (a)->key.dsize) /* * The lockdb structure. * * The field may be NULL, meaning one of two things: * 1) That we have not actually opened the underlying database (yet). The * field should be false. * 2) We opened it readonly and it wasn't present. * * The delayed opening (determined by ) makes creating a lockdb * quick, while deferring the underlying I/O until it is actually required. * * We export the notion of a lockdb, but hide the details of it. Most * implementations will use a database of some kind, but it is certainly * possible that alternatives could be used. */ struct dav_lockdb_private { request_rec *r; /* for accessing the uuid state */ apr_pool_t *pool; /* a pool to use */ const char *lockdb_path; /* where is the lock database? */ int opened; /* we opened the database */ apr_dbm_t *db; /* if non-NULL, the lock database */ }; typedef struct { dav_lockdb pub; dav_lockdb_private priv; } dav_lockdb_combined; /* * The private part of the lock structure. */ struct dav_lock_private { apr_datum_t key; /* key into the lock database */ }; typedef struct { dav_lock pub; dav_lock_private priv; dav_locktoken token; } dav_lock_combined; /* * This must be forward-declared so the open_lockdb function can use it. */ extern const dav_hooks_locks dav_hooks_locks_generic; static dav_error * dav_generic_dbm_new_error(apr_dbm_t *db, apr_pool_t *p, apr_status_t status) { int errcode; const char *errstr; dav_error *err; char errbuf[200]; if (status == APR_SUCCESS) { return NULL; } /* There might not be a if we had problems creating it. */ if (db == NULL) { errcode = 1; errstr = "Could not open property database."; } else { (void) apr_dbm_geterror(db, &errcode, errbuf, sizeof(errbuf)); errstr = apr_pstrdup(p, errbuf); } err = dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, errcode, status, errstr); return err; } /* internal function for creating locks */ static dav_lock *dav_generic_alloc_lock(dav_lockdb *lockdb, apr_datum_t key, const dav_locktoken *locktoken) { dav_lock_combined *comb; comb = apr_pcalloc(lockdb->info->pool, sizeof(*comb)); comb->pub.rectype = DAV_LOCKREC_DIRECT; comb->pub.info = &comb->priv; comb->priv.key = key; if (locktoken == NULL) { comb->pub.locktoken = &comb->token; apr_uuid_get(&comb->token.uuid); } else { comb->pub.locktoken = locktoken; } return &comb->pub; } /* * dav_generic_parse_locktoken * * Parse an opaquelocktoken URI into a locktoken. */ static dav_error * dav_generic_parse_locktoken(apr_pool_t *p, const char *char_token, dav_locktoken **locktoken_p) { dav_locktoken *locktoken; if (ap_strstr_c(char_token, "opaquelocktoken:") != char_token) { return dav_new_error(p, HTTP_BAD_REQUEST, DAV_ERR_LOCK_UNK_STATE_TOKEN, 0, "The lock token uses an unknown State-token " "format and could not be parsed."); } char_token += 16; locktoken = apr_pcalloc(p, sizeof(*locktoken)); if (apr_uuid_parse(&locktoken->uuid, char_token)) { return dav_new_error(p, HTTP_BAD_REQUEST, DAV_ERR_LOCK_PARSE_TOKEN, 0, "The opaquelocktoken has an incorrect format " "and could not be parsed."); } *locktoken_p = locktoken; return NULL; } /* * dav_generic_format_locktoken * * Generate the URI for a locktoken */ static const char *dav_generic_format_locktoken(apr_pool_t *p, const dav_locktoken *locktoken) { char buf[APR_UUID_FORMATTED_LENGTH + 1]; apr_uuid_format(buf, &locktoken->uuid); return apr_pstrcat(p, "opaquelocktoken:", buf, NULL); } /* * dav_generic_compare_locktoken * * Determine whether two locktokens are the same */ static int dav_generic_compare_locktoken(const dav_locktoken *lt1, const dav_locktoken *lt2) { return dav_compare_locktoken(lt1, lt2); } /* * dav_generic_really_open_lockdb: * * If the database hasn't been opened yet, then open the thing. */ static dav_error * dav_generic_really_open_lockdb(dav_lockdb *lockdb) { dav_error *err; apr_status_t status; if (lockdb->info->opened) { return NULL; } status = apr_dbm_open(&lockdb->info->db, lockdb->info->lockdb_path, lockdb->ro ? APR_DBM_READONLY : APR_DBM_RWCREATE, APR_OS_DEFAULT, lockdb->info->pool); if (status) { err = dav_generic_dbm_new_error(lockdb->info->db, lockdb->info->pool, status); return dav_push_error(lockdb->info->pool, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_LOCK_OPENDB, "Could not open the lock database.", err); } /* all right. it is opened now. */ lockdb->info->opened = 1; return NULL; } /* * dav_generic_open_lockdb: * * "open" the lock database, as specified in the global server configuration. * If force is TRUE, then the database is opened now, rather than lazily. * * Note that only one can be open read/write. */ static dav_error * dav_generic_open_lockdb(request_rec *r, int ro, int force, dav_lockdb **lockdb) { dav_lockdb_combined *comb; comb = apr_pcalloc(r->pool, sizeof(*comb)); comb->pub.hooks = &dav_hooks_locks_generic; comb->pub.ro = ro; comb->pub.info = &comb->priv; comb->priv.r = r; comb->priv.pool = r->pool; comb->priv.lockdb_path = dav_generic_get_lockdb_path(r); if (comb->priv.lockdb_path == NULL) { return dav_new_error(r->pool, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_LOCK_NO_DB, 0, "A lock database was not specified with the " "DAVGenericLockDB directive. One must be " "specified to use the locking functionality."); } /* done initializing. return it. */ *lockdb = &comb->pub; if (force) { /* ### add a higher-level comment? */ return dav_generic_really_open_lockdb(*lockdb); } return NULL; } /* * dav_generic_close_lockdb: * * Close it. Duh. */ static void dav_generic_close_lockdb(dav_lockdb *lockdb) { if (lockdb->info->db != NULL) { apr_dbm_close(lockdb->info->db); } lockdb->info->opened = 0; } /* * dav_generic_build_key * * Given a pathname, build a DAV_TYPE_FNAME lock database key. */ static apr_datum_t dav_generic_build_key(apr_pool_t *p, const dav_resource *resource) { apr_datum_t key; const char *pathname = resource->uri; /* ### does this allocation have a proper lifetime? need to check */ /* ### can we use a buffer for this? */ /* size is TYPE + pathname + null */ key.dsize = strlen(pathname) + 2; key.dptr = apr_palloc(p, key.dsize); *key.dptr = DAV_TYPE_FNAME; memcpy(key.dptr + 1, pathname, key.dsize - 1); if (key.dptr[key.dsize - 2] == '/') key.dptr[--key.dsize - 1] = '\0'; return key; } /* * dav_generic_lock_expired: return 1 (true) if the given timeout is in the * past or present (the lock has expired), or 0 (false) if in the future * (the lock has not yet expired). */ static int dav_generic_lock_expired(time_t expires) { return expires != DAV_TIMEOUT_INFINITE && time(NULL) >= expires; } /* * dav_generic_save_lock_record: Saves the lock information specified in the * direct and indirect lock lists about path into the lock database. * If direct and indirect == NULL, the key is removed. */ static dav_error * dav_generic_save_lock_record(dav_lockdb *lockdb, apr_datum_t key, dav_lock_discovery *direct, dav_lock_indirect *indirect) { dav_error *err; apr_status_t status; apr_datum_t val = { 0 }; char *ptr; dav_lock_discovery *dp = direct; dav_lock_indirect *ip = indirect; #if DAV_DEBUG if (lockdb->ro) { return dav_new_error(lockdb->info->pool, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "INTERNAL DESIGN ERROR: the lockdb was opened " "readonly, but an attempt to save locks was " "performed."); } #endif if ((err = dav_generic_really_open_lockdb(lockdb)) != NULL) { /* ### add a higher-level error? */ return err; } /* If nothing to save, delete key */ if (dp == NULL && ip == NULL) { /* don't fail if the key is not present */ /* ### but what about other errors? */ apr_dbm_delete(lockdb->info->db, key); return NULL; } while (dp) { val.dsize += dav_size_direct(dp); dp = dp->next; } while (ip) { val.dsize += dav_size_indirect(ip); ip = ip->next; } /* ### can this be apr_palloc() ? */ /* ### hmmm.... investigate the use of a buffer here */ ptr = val.dptr = apr_pcalloc(lockdb->info->pool, val.dsize); dp = direct; ip = indirect; while (dp) { /* Direct lock - lock_discovery struct follows */ *ptr++ = DAV_LOCK_DIRECT; memcpy(ptr, dp, sizeof(dp->f)); /* Fixed portion of struct */ ptr += sizeof(dp->f); memcpy(ptr, dp->locktoken, sizeof(*dp->locktoken)); ptr += sizeof(*dp->locktoken); if (dp->owner == NULL) { *ptr++ = '\0'; } else { memcpy(ptr, dp->owner, strlen(dp->owner) + 1); ptr += strlen(dp->owner) + 1; } if (dp->auth_user == NULL) { *ptr++ = '\0'; } else { memcpy(ptr, dp->auth_user, strlen(dp->auth_user) + 1); ptr += strlen(dp->auth_user) + 1; } dp = dp->next; } while (ip) { /* Indirect lock prefix */ *ptr++ = DAV_LOCK_INDIRECT; memcpy(ptr, ip->locktoken, sizeof(*ip->locktoken)); ptr += sizeof(*ip->locktoken); memcpy(ptr, &ip->timeout, sizeof(ip->timeout)); ptr += sizeof(ip->timeout); memcpy(ptr, &ip->key.dsize, sizeof(ip->key.dsize)); ptr += sizeof(ip->key.dsize); memcpy(ptr, ip->key.dptr, ip->key.dsize); ptr += ip->key.dsize; ip = ip->next; } if ((status = apr_dbm_store(lockdb->info->db, key, val)) != APR_SUCCESS) { /* ### more details? add an error_id? */ err = dav_generic_dbm_new_error(lockdb->info->db, lockdb->info->pool, status); return dav_push_error(lockdb->info->pool, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_LOCK_SAVE_LOCK, "Could not save lock information.", err); } return NULL; } /* * dav_load_lock_record: Reads lock information about key from lock db; * creates linked lists of the direct and indirect locks. * * If add_method = DAV_APPEND_LIST, the result will be appended to the * head of the direct and indirect lists supplied. * * Passive lock removal: If lock has timed out, it will not be returned. * ### How much "logging" does RFC 2518 require? */ static dav_error * dav_generic_load_lock_record(dav_lockdb *lockdb, apr_datum_t key, int add_method, dav_lock_discovery **direct, dav_lock_indirect **indirect) { apr_pool_t *p = lockdb->info->pool; dav_error *err; apr_status_t status; apr_size_t offset = 0; int need_save = DAV_FALSE; apr_datum_t val = { 0 }; dav_lock_discovery *dp; dav_lock_indirect *ip; if (add_method != DAV_APPEND_LIST) { *direct = NULL; *indirect = NULL; } if ((err = dav_generic_really_open_lockdb(lockdb)) != NULL) { /* ### add a higher-level error? */ return err; } /* * If we opened readonly and the db wasn't there, then there are no * locks for this resource. Just exit. */ if (lockdb->info->db == NULL) { return NULL; } if ((status = apr_dbm_fetch(lockdb->info->db, key, &val)) != APR_SUCCESS) { return dav_generic_dbm_new_error(lockdb->info->db, p, status); } if (!val.dsize) { return NULL; } while (offset < val.dsize) { switch (*(val.dptr + offset++)) { case DAV_LOCK_DIRECT: /* Create and fill a dav_lock_discovery structure */ dp = apr_pcalloc(p, sizeof(*dp)); /* Copy the dav_lock_discovery_fixed portion */ memcpy(dp, val.dptr + offset, sizeof(dp->f)); offset += sizeof(dp->f); /* Copy the lock token. */ dp->locktoken = apr_pmemdup(p, val.dptr + offset, sizeof(*dp->locktoken)); offset += sizeof(*dp->locktoken); /* Do we have an owner field? */ if (*(val.dptr + offset) == '\0') { ++offset; } else { apr_size_t len = strlen(val.dptr + offset); dp->owner = apr_pstrmemdup(p, val.dptr + offset, len); offset += len + 1; } if (*(val.dptr + offset) == '\0') { ++offset; } else { apr_size_t len = strlen(val.dptr + offset); dp->auth_user = apr_pstrmemdup(p, val.dptr + offset, len); offset += len + 1; } if (!dav_generic_lock_expired(dp->f.timeout)) { dp->next = *direct; *direct = dp; } else { need_save = DAV_TRUE; } break; case DAV_LOCK_INDIRECT: /* Create and fill a dav_lock_indirect structure */ ip = apr_pcalloc(p, sizeof(*ip)); ip->locktoken = apr_pmemdup(p, val.dptr + offset, sizeof(*ip->locktoken)); offset += sizeof(*ip->locktoken); memcpy(&ip->timeout, val.dptr + offset, sizeof(ip->timeout)); offset += sizeof(ip->timeout); /* length of datum */ ip->key.dsize = *((int *) (val.dptr + offset)); offset += sizeof(ip->key.dsize); ip->key.dptr = apr_pmemdup(p, val.dptr + offset, ip->key.dsize); offset += ip->key.dsize; if (!dav_generic_lock_expired(ip->timeout)) { ip->next = *indirect; *indirect = ip; } else { need_save = DAV_TRUE; } break; default: apr_dbm_freedatum(lockdb->info->db, val); /* ### should use a computed_desc and insert corrupt token data */ --offset; return dav_new_error(p, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_LOCK_CORRUPT_DB, 0, apr_psprintf(p, "The lock database was found to " "be corrupt. offset %" APR_SIZE_T_FMT ", c=%02x", offset, val.dptr[offset])); } } apr_dbm_freedatum(lockdb->info->db, val); /* Clean up this record if we found expired locks */ /* * ### shouldn't do this if we've been opened READONLY. elide the * ### timed-out locks from the response, but don't save that info back */ if (need_save == DAV_TRUE) { return dav_generic_save_lock_record(lockdb, key, *direct, *indirect); } return NULL; } /* resolve , returning <*direct> */ static dav_error * dav_generic_resolve(dav_lockdb *lockdb, dav_lock_indirect *indirect, dav_lock_discovery **direct, dav_lock_discovery **ref_dp, dav_lock_indirect **ref_ip) { dav_error *err; dav_lock_discovery *dir; dav_lock_indirect *ind; if ((err = dav_generic_load_lock_record(lockdb, indirect->key, DAV_CREATE_LIST, &dir, &ind)) != NULL) { /* ### insert a higher-level description? */ return err; } if (ref_dp != NULL) { *ref_dp = dir; *ref_ip = ind; } for (; dir != NULL; dir = dir->next) { if (!dav_compare_locktoken(indirect->locktoken, dir->locktoken)) { *direct = dir; return NULL; } } /* No match found (but we should have found one!) */ /* ### use a different description and/or error ID? */ return dav_new_error(lockdb->info->pool, HTTP_INTERNAL_SERVER_ERROR, DAV_ERR_LOCK_CORRUPT_DB, 0, "The lock database was found to be corrupt. " "An indirect lock's direct lock could not " "be found."); } /* --------------------------------------------------------------- * * Property-related lock functions * */ /* * dav_generic_get_supportedlock: Returns a static string for all * supportedlock properties. I think we save more returning a static string * than constructing it every time, though it might look cleaner. */ static const char *dav_generic_get_supportedlock(const dav_resource *resource) { static const char supported[] = DEBUG_CR "" DEBUG_CR "" DEBUG_CR "" DEBUG_CR "" DEBUG_CR "" DEBUG_CR "" DEBUG_CR "" DEBUG_CR "" DEBUG_CR; return supported; } /* --------------------------------------------------------------- * * General lock functions * */ static dav_error * dav_generic_remove_locknull_state(dav_lockdb *lockdb, const dav_resource *resource) { /* We don't need to do anything. */ return NULL; } static dav_error * dav_generic_create_lock(dav_lockdb *lockdb, const dav_resource *resource, dav_lock **lock) { apr_datum_t key; key = dav_generic_build_key(lockdb->info->pool, resource); *lock = dav_generic_alloc_lock(lockdb, key, NULL); (*lock)->is_locknull = !resource->exists; return NULL; } static dav_error * dav_generic_get_locks(dav_lockdb *lockdb, const dav_resource *resource, int calltype, dav_lock **locks) { apr_pool_t *p = lockdb->info->pool; apr_datum_t key; dav_error *err; dav_lock *lock = NULL; dav_lock *newlock; dav_lock_discovery *dp; dav_lock_indirect *ip; #if DAV_DEBUG if (calltype == DAV_GETLOCKS_COMPLETE) { return dav_new_error(lockdb->info->pool, HTTP_INTERNAL_SERVER_ERROR, 0, 0, "INTERNAL DESIGN ERROR: DAV_GETLOCKS_COMPLETE " "is not yet supported"); } #endif key = dav_generic_build_key(p, resource); if ((err = dav_generic_load_lock_record(lockdb, key, DAV_CREATE_LIST, &dp, &ip)) != NULL) { /* ### push a higher-level desc? */ return err; } /* copy all direct locks to the result list */ for (; dp != NULL; dp = dp->next) { newlock = dav_generic_alloc_lock(lockdb, key, dp->locktoken); newlock->is_locknull = !resource->exists; newlock->scope = dp->f.scope; newlock->type = dp->f.type; newlock->depth = dp->f.depth; newlock->timeout = dp->f.timeout; newlock->owner = dp->owner; newlock->auth_user = dp->auth_user; /* hook into the result list */ newlock->next = lock; lock = newlock; } /* copy all the indirect locks to the result list. resolve as needed. */ for (; ip != NULL; ip = ip->next) { newlock = dav_generic_alloc_lock(lockdb, ip->key, ip->locktoken); newlock->is_locknull = !resource->exists; if (calltype == DAV_GETLOCKS_RESOLVED) { err = dav_generic_resolve(lockdb, ip, &dp, NULL, NULL); if (err != NULL) { /* ### push a higher-level desc? */ return err; } newlock->scope = dp->f.scope; newlock->type = dp->f.type; newlock->depth = dp->f.depth; newlock->timeout = dp->f.timeout; newlock->owner = dp->owner; newlock->auth_user = dp->auth_user; } else { /* DAV_GETLOCKS_PARTIAL */ newlock->rectype = DAV_LOCKREC_INDIRECT_PARTIAL; } /* hook into the result list */ newlock->next = lock; lock = newlock; } *locks = lock; return NULL; } static dav_error * dav_generic_find_lock(dav_lockdb *lockdb, const dav_resource *resource, const dav_locktoken *locktoken, int partial_ok, dav_lock **lock) { dav_error *err; apr_datum_t key; dav_lock_discovery *dp; dav_lock_indirect *ip; *lock = NULL; key = dav_generic_build_key(lockdb->info->pool, resource); if ((err = dav_generic_load_lock_record(lockdb, key, DAV_CREATE_LIST, &dp, &ip)) != NULL) { /* ### push a higher-level desc? */ return err; } for (; dp != NULL; dp = dp->next) { if (!dav_compare_locktoken(locktoken, dp->locktoken)) { *lock = dav_generic_alloc_lock(lockdb, key, locktoken); (*lock)->is_locknull = !resource->exists; (*lock)->scope = dp->f.scope; (*lock)->type = dp->f.type; (*lock)->depth = dp->f.depth; (*lock)->timeout = dp->f.timeout; (*lock)->owner = dp->owner; (*lock)->auth_user = dp->auth_user; return NULL; } } for (; ip != NULL; ip = ip->next) { if (!dav_compare_locktoken(locktoken, ip->locktoken)) { *lock = dav_generic_alloc_lock(lockdb, ip->key, locktoken); (*lock)->is_locknull = !resource->exists; /* ### nobody uses the resolving right now! */ if (partial_ok) { (*lock)->rectype = DAV_LOCKREC_INDIRECT_PARTIAL; } else { (*lock)->rectype = DAV_LOCKREC_INDIRECT; if ((err = dav_generic_resolve(lockdb, ip, &dp, NULL, NULL)) != NULL) { /* ### push a higher-level desc? */ return err; } (*lock)->scope = dp->f.scope; (*lock)->type = dp->f.type; (*lock)->depth = dp->f.depth; (*lock)->timeout = dp->f.timeout; (*lock)->owner = dp->owner; (*lock)->auth_user = dp->auth_user; } return NULL; } } return NULL; } static dav_error * dav_generic_has_locks(dav_lockdb *lockdb, const dav_resource *resource, int *locks_present) { dav_error *err; apr_datum_t key; *locks_present = 0; if ((err = dav_generic_really_open_lockdb(lockdb)) != NULL) { /* ### insert a higher-level error description */ return err; } /* * If we opened readonly and the db wasn't there, then there are no * locks for this resource. Just exit. */ if (lockdb->info->db == NULL) return NULL; key = dav_generic_build_key(lockdb->info->pool, resource); *locks_present = apr_dbm_exists(lockdb->info->db, key); return NULL; } static dav_error * dav_generic_append_locks(dav_lockdb *lockdb, const dav_resource *resource, int make_indirect, const dav_lock *lock) { apr_pool_t *p = lockdb->info->pool; dav_error *err; dav_lock_indirect *ip; dav_lock_discovery *dp; apr_datum_t key; key = dav_generic_build_key(lockdb->info->pool, resource); err = dav_generic_load_lock_record(lockdb, key, 0, &dp, &ip); if (err != NULL) { /* ### maybe add in a higher-level description */ return err; } /* * ### when we store the lock more directly, we need to update * ### lock->rectype and lock->is_locknull */ if (make_indirect) { for (; lock != NULL; lock = lock->next) { /* ### this works for any rectype */ dav_lock_indirect *newi = apr_pcalloc(p, sizeof(*newi)); /* ### shut off the const warning for now */ newi->locktoken = (dav_locktoken *)lock->locktoken; newi->timeout = lock->timeout; newi->key = lock->info->key; newi->next = ip; ip = newi; } } else { for (; lock != NULL; lock = lock->next) { /* create and link in the right kind of lock */ if (lock->rectype == DAV_LOCKREC_DIRECT) { dav_lock_discovery *newd = apr_pcalloc(p, sizeof(*newd)); newd->f.scope = lock->scope; newd->f.type = lock->type; newd->f.depth = lock->depth; newd->f.timeout = lock->timeout; /* ### shut off the const warning for now */ newd->locktoken = (dav_locktoken *)lock->locktoken; newd->owner = lock->owner; newd->auth_user = lock->auth_user; newd->next = dp; dp = newd; } else { /* DAV_LOCKREC_INDIRECT(_PARTIAL) */ dav_lock_indirect *newi = apr_pcalloc(p, sizeof(*newi)); /* ### shut off the const warning for now */ newi->locktoken = (dav_locktoken *)lock->locktoken; newi->key = lock->info->key; newi->next = ip; ip = newi; } } } if ((err = dav_generic_save_lock_record(lockdb, key, dp, ip)) != NULL) { /* ### maybe add a higher-level description */ return err; } return NULL; } static dav_error * dav_generic_remove_lock(dav_lockdb *lockdb, const dav_resource *resource, const dav_locktoken *locktoken) { dav_error *err; dav_lock_discovery *dh = NULL; dav_lock_indirect *ih = NULL; apr_datum_t key; key = dav_generic_build_key(lockdb->info->pool, resource); if (locktoken != NULL) { dav_lock_discovery *dp; dav_lock_discovery *dprev = NULL; dav_lock_indirect *ip; dav_lock_indirect *iprev = NULL; if ((err = dav_generic_load_lock_record(lockdb, key, DAV_CREATE_LIST, &dh, &ih)) != NULL) { /* ### maybe add a higher-level description */ return err; } for (dp = dh; dp != NULL; dp = dp->next) { if (dav_compare_locktoken(locktoken, dp->locktoken) == 0) { if (dprev) dprev->next = dp->next; else dh = dh->next; } dprev = dp; } for (ip = ih; ip != NULL; ip = ip->next) { if (dav_compare_locktoken(locktoken, ip->locktoken) == 0) { if (iprev) iprev->next = ip->next; else ih = ih->next; } iprev = ip; } } /* save the modified locks, or remove all locks (dh=ih=NULL). */ if ((err = dav_generic_save_lock_record(lockdb, key, dh, ih)) != NULL) { /* ### maybe add a higher-level description */ return err; } return NULL; } static int dav_generic_do_refresh(dav_lock_discovery *dp, const dav_locktoken_list *ltl, time_t new_time) { int dirty = 0; for (; ltl != NULL; ltl = ltl->next) { if (dav_compare_locktoken(dp->locktoken, ltl->locktoken) == 0) { dp->f.timeout = new_time; dirty = 1; break; } } return dirty; } static dav_error * dav_generic_refresh_locks(dav_lockdb *lockdb, const dav_resource *resource, const dav_locktoken_list *ltl, time_t new_time, dav_lock **locks) { dav_error *err; apr_datum_t key; dav_lock_discovery *dp; dav_lock_discovery *dp_scan; dav_lock_indirect *ip; int dirty = 0; dav_lock *newlock; *locks = NULL; key = dav_generic_build_key(lockdb->info->pool, resource); if ((err = dav_generic_load_lock_record(lockdb, key, DAV_CREATE_LIST, &dp, &ip)) != NULL) { /* ### maybe add in a higher-level description */ return err; } /* ### we should be refreshing direct AND (resolved) indirect locks! */ /* refresh all of the direct locks on this resource */ for (dp_scan = dp; dp_scan != NULL; dp_scan = dp_scan->next) { if (dav_generic_do_refresh(dp_scan, ltl, new_time)) { /* the lock was refreshed. return the lock. */ newlock = dav_generic_alloc_lock(lockdb, key, dp_scan->locktoken); newlock->is_locknull = !resource->exists; newlock->scope = dp_scan->f.scope; newlock->type = dp_scan->f.type; newlock->depth = dp_scan->f.depth; newlock->timeout = dp_scan->f.timeout; newlock->owner = dp_scan->owner; newlock->auth_user = dp_scan->auth_user; newlock->next = *locks; *locks = newlock; dirty = 1; } } /* if we refreshed any locks, then save them back. */ if (dirty && (err = dav_generic_save_lock_record(lockdb, key, dp, ip)) != NULL) { /* ### maybe add in a higher-level description */ return err; } /* for each indirect lock, find its direct lock and refresh it. */ for (; ip != NULL; ip = ip->next) { dav_lock_discovery *ref_dp; dav_lock_indirect *ref_ip; if ((err = dav_generic_resolve(lockdb, ip, &dp_scan, &ref_dp, &ref_ip)) != NULL) { /* ### push a higher-level desc? */ return err; } if (dav_generic_do_refresh(dp_scan, ltl, new_time)) { /* the lock was refreshed. return the lock. */ newlock = dav_generic_alloc_lock(lockdb, ip->key, dp->locktoken); newlock->is_locknull = !resource->exists; newlock->scope = dp->f.scope; newlock->type = dp->f.type; newlock->depth = dp->f.depth; newlock->timeout = dp->f.timeout; newlock->owner = dp->owner; newlock->auth_user = dp_scan->auth_user; newlock->next = *locks; *locks = newlock; /* save the (resolved) direct lock back */ if ((err = dav_generic_save_lock_record(lockdb, ip->key, ref_dp, ref_ip)) != NULL) { /* ### push a higher-level desc? */ return err; } } } return NULL; } const dav_hooks_locks dav_hooks_locks_generic = { dav_generic_get_supportedlock, dav_generic_parse_locktoken, dav_generic_format_locktoken, dav_generic_compare_locktoken, dav_generic_open_lockdb, dav_generic_close_lockdb, dav_generic_remove_locknull_state, dav_generic_create_lock, dav_generic_get_locks, dav_generic_find_lock, dav_generic_has_locks, dav_generic_append_locks, dav_generic_remove_lock, dav_generic_refresh_locks, NULL, /* lookup_resource */ NULL /* ctx */ }; httpd-2.4.41/modules/dav/lock/Makefile.in0000644000000000000500000000026710150161574016460 0ustar rootsrc# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/README0000644000000000000500000000324012602235527013567 0ustar rootsrcThe directory structure for this level is as follows: aaa/ This directory contains modules dealing with authorization and authentication. arch/ cache/ This directory houses modules that implement file and data caching capability. database/ The apache DBD framework manages connections to SQL backends efficiently. cluster/ Modules for working with multiple servers. dav/ This directory houses modules that implement WebDAV functionality. echo/ examples/ This directory contains some sample code that should help you on your way to develop your own Apache modules. experimental/ In this directory we've placed some modules which we think provide some pretty interesting functionality, but which are still in the early stages of development and could evolve radically in the future. This code isn't supported officially. filters/ This directory houses modules that perform general inline data filtering. generators/ This directory houses modules that perform data generation functions. http/ This directory houses modules that basic HTTP protocol implementation. http2/ This directory houses modules that provide HTTP/2 protocol implementation. loggers/ This directory houses modules that handle logging functions. mappers/ This directory houses modules that handle URL mapping and rewriting. metadata/ This directory houses modules that deal with Header metadata. proxy/ This houses the code for the proxy module for Apache. ssl/ This directory houses code for OpenSSL functionality. test/ This directory houses modules which test various components of Apache. You should not compile these into a production server. httpd-2.4.41/modules/session/0002755000000000000500000000000013523273342014375 5ustar rootsrchttpd-2.4.41/modules/session/mod_session_cookie.dsp0000644000000000000500000001114311022367030020744 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_session_cookie" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_session_cookie - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_session_cookie.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_session_cookie.mak" CFG="mod_session_cookie - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_session_cookie - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_session_cookie - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_session_cookie - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_session_cookie_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_session_cookie.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_session_cookie.so" /d LONG_NAME="session_cookie_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_session_cookie.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session_cookie.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_session_cookie.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session_cookie.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_session_cookie.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_session_cookie - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_session_cookie_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_session_cookie.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_session_cookie.so" /d LONG_NAME="session_cookie_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_session_cookie.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session_cookie.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_session_cookie.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session_cookie.so # Begin Special Build Tool TargetPath=.\Debug\mod_session_cookie.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_session_cookie - Win32 Release" # Name "mod_session_cookie - Win32 Debug" # Begin Source File SOURCE=.\mod_session_cookie.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/session/NWGNUsession_dbd0000644000000000000500000001033211653006502017422 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(SRC)/include \ $(STDMOD)/database \ $(NWOS) \ # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = session_dbd # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Session Cookie Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = SessionDbd Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_session_dbd.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ session \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ ap_hook_session_load \ ap_hook_session_save \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ session_dbd_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/session/mod_session_cookie.c0000644000000000000500000002202713523247020020407 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_session.h" #include "apr_lib.h" #include "apr_strings.h" #include "http_log.h" #include "util_cookies.h" #define MOD_SESSION_COOKIE "mod_session_cookie" module AP_MODULE_DECLARE_DATA session_cookie_module; /** * Structure to carry the per-dir session config. */ typedef struct { const char *name; int name_set; const char *name_attrs; const char *name2; int name2_set; const char *name2_attrs; int remove; int remove_set; } session_cookie_dir_conf; /** * Set the cookie and embed the session within it. * * This function adds an RFC2109 compliant Set-Cookie header for * the cookie specified in SessionCookieName, and an RFC2965 compliant * Set-Cookie2 header for the cookie specified in SessionCookieName2. * * If specified, the optional cookie attributes will be added to * each cookie. If defaults are not specified, DEFAULT_ATTRS * will be used. * * On success, this method will return APR_SUCCESS. * * @param r The request pointer. * @param z A pointer to where the session will be written. */ static apr_status_t session_cookie_save(request_rec * r, session_rec * z) { session_cookie_dir_conf *conf = ap_get_module_config(r->per_dir_config, &session_cookie_module); /* create RFC2109 compliant cookie */ if (conf->name_set) { if (z->encoded && z->encoded[0]) { ap_cookie_write(r, conf->name, z->encoded, conf->name_attrs, z->maxage, r->err_headers_out, NULL); } else { ap_cookie_remove(r, conf->name, conf->name_attrs, r->headers_out, r->err_headers_out, NULL); } } /* create RFC2965 compliant cookie */ if (conf->name2_set) { if (z->encoded && z->encoded[0]) { ap_cookie_write2(r, conf->name2, z->encoded, conf->name2_attrs, z->maxage, r->err_headers_out, NULL); } else { ap_cookie_remove2(r, conf->name2, conf->name2_attrs, r->headers_out, r->err_headers_out, NULL); } } if (conf->name_set || conf->name2_set) { return OK; } return DECLINED; } /** * Isolate the cookie with the name "name", and if present, extract * the payload from the cookie. * * If the cookie is found, the cookie and any other cookies with the * same name are removed from the cookies passed in the request, so * that credentials are not leaked to a backend server or process. * * A missing or malformed cookie will cause this function to return * APR_EGENERAL. * * On success, this returns APR_SUCCESS. */ static apr_status_t session_cookie_load(request_rec * r, session_rec ** z) { session_cookie_dir_conf *conf = ap_get_module_config(r->per_dir_config, &session_cookie_module); session_rec *zz = NULL; const char *val = NULL; const char *note = NULL; const char *name = NULL; request_rec *m = r; /* find the first redirect */ while (m->prev) { m = m->prev; } /* find the main request */ while (m->main) { m = m->main; } /* is our session in a cookie? */ if (conf->name2_set) { name = conf->name2; } else if (conf->name_set) { name = conf->name; } else { return DECLINED; } /* first look in the notes */ note = apr_pstrcat(m->pool, MOD_SESSION_COOKIE, name, NULL); zz = (session_rec *)apr_table_get(m->notes, note); if (zz) { *z = zz; return OK; } /* otherwise, try parse the cookie */ ap_cookie_read(r, name, &val, conf->remove); /* create a new session and return it */ zz = (session_rec *) apr_pcalloc(m->pool, sizeof(session_rec)); zz->pool = m->pool; zz->entries = apr_table_make(m->pool, 10); zz->encoded = val; *z = zz; /* put the session in the notes so we don't have to parse it again */ apr_table_setn(m->notes, note, (char *)zz); /* don't cache auth protected pages */ apr_table_addn(r->headers_out, "Cache-Control", "no-cache, private"); return OK; } static void *create_session_cookie_dir_config(apr_pool_t * p, char *dummy) { session_cookie_dir_conf *new = (session_cookie_dir_conf *) apr_pcalloc(p, sizeof(session_cookie_dir_conf)); return (void *) new; } static void *merge_session_cookie_dir_config(apr_pool_t * p, void *basev, void *addv) { session_cookie_dir_conf *new = (session_cookie_dir_conf *) apr_pcalloc(p, sizeof(session_cookie_dir_conf)); session_cookie_dir_conf *add = (session_cookie_dir_conf *) addv; session_cookie_dir_conf *base = (session_cookie_dir_conf *) basev; new->name = (add->name_set == 0) ? base->name : add->name; new->name_attrs = (add->name_set == 0) ? base->name_attrs : add->name_attrs; new->name_set = add->name_set || base->name_set; new->name2 = (add->name2_set == 0) ? base->name2 : add->name2; new->name2_attrs = (add->name2_set == 0) ? base->name2_attrs : add->name2_attrs; new->name2_set = add->name2_set || base->name2_set; new->remove = (add->remove_set == 0) ? base->remove : add->remove; new->remove_set = add->remove_set || base->remove_set; return new; } /** * Sanity check a given string that it exists, is not empty, * and does not contain special characters. */ static const char *check_string(cmd_parms * cmd, const char *string) { if (!string || !*string || ap_strchr_c(string, '=') || ap_strchr_c(string, '&')) { return apr_pstrcat(cmd->pool, cmd->directive->directive, " cannot be empty, or contain '=' or '&'.", NULL); } return NULL; } static const char *set_cookie_name(cmd_parms * cmd, void *config, const char *args) { char *last; char *line = apr_pstrdup(cmd->pool, args); session_cookie_dir_conf *conf = (session_cookie_dir_conf *) config; char *cookie = apr_strtok(line, " \t", &last); conf->name = cookie; conf->name_set = 1; while (apr_isspace(*last)) { last++; } conf->name_attrs = last; return check_string(cmd, cookie); } static const char *set_cookie_name2(cmd_parms * cmd, void *config, const char *args) { char *last; char *line = apr_pstrdup(cmd->pool, args); session_cookie_dir_conf *conf = (session_cookie_dir_conf *) config; char *cookie = apr_strtok(line, " \t", &last); conf->name2 = cookie; conf->name2_set = 1; while (apr_isspace(*last)) { last++; } conf->name2_attrs = last; return check_string(cmd, cookie); } static const char * set_remove(cmd_parms * parms, void *dconf, int flag) { session_cookie_dir_conf *conf = dconf; conf->remove = flag; conf->remove_set = 1; return NULL; } static const command_rec session_cookie_cmds[] = { AP_INIT_RAW_ARGS("SessionCookieName", set_cookie_name, NULL, RSRC_CONF|OR_AUTHCFG, "The name of the RFC2109 cookie carrying the session"), AP_INIT_RAW_ARGS("SessionCookieName2", set_cookie_name2, NULL, RSRC_CONF|OR_AUTHCFG, "The name of the RFC2965 cookie carrying the session"), AP_INIT_FLAG("SessionCookieRemove", set_remove, NULL, RSRC_CONF|OR_AUTHCFG, "Set to 'On' to remove the session cookie from the headers " "and hide the cookie from a backend server or process"), {NULL} }; static void register_hooks(apr_pool_t * p) { ap_hook_session_load(session_cookie_load, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_session_save(session_cookie_save, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(session_cookie) = { STANDARD20_MODULE_STUFF, create_session_cookie_dir_config, /* dir config creater */ merge_session_cookie_dir_config, /* dir merger --- default is to * override */ NULL, /* server config */ NULL, /* merge server config */ session_cookie_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/session/mod_session_dbd.c0000644000000000000500000005062413523247020017673 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_session.h" #include "apr_lib.h" #include "apr_strings.h" #include "http_log.h" #include "util_cookies.h" #include "apr_dbd.h" #include "mod_dbd.h" #include "mpm_common.h" #define MOD_SESSION_DBD "mod_session_dbd" module AP_MODULE_DECLARE_DATA session_dbd_module; /** * Structure to carry the per-dir session config. */ typedef struct { const char *name; int name_set; const char *name_attrs; const char *name2; int name2_set; const char *name2_attrs; int peruser; int peruser_set; int remove; int remove_set; const char *selectlabel; const char *insertlabel; const char *updatelabel; const char *deletelabel; } session_dbd_dir_conf; /* optional function - look it up once in post_config */ static ap_dbd_t *(*session_dbd_acquire_fn) (request_rec *) = NULL; static void (*session_dbd_prepare_fn) (server_rec *, const char *, const char *) = NULL; /** * Initialise the database. * * If the mod_dbd module is missing, this method will return APR_EGENERAL. */ static apr_status_t dbd_init(request_rec *r, const char *query, ap_dbd_t **dbdp, apr_dbd_prepared_t **statementp) { ap_dbd_t *dbd; apr_dbd_prepared_t *statement; if (!session_dbd_prepare_fn || !session_dbd_acquire_fn) { session_dbd_prepare_fn = APR_RETRIEVE_OPTIONAL_FN(ap_dbd_prepare); session_dbd_acquire_fn = APR_RETRIEVE_OPTIONAL_FN(ap_dbd_acquire); if (!session_dbd_prepare_fn || !session_dbd_acquire_fn) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01850) "You must load mod_dbd to enable AuthDBD functions"); return APR_EGENERAL; } } dbd = session_dbd_acquire_fn(r); if (!dbd) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01851) "failed to acquire database connection"); return APR_EGENERAL; } statement = apr_hash_get(dbd->prepared, query, APR_HASH_KEY_STRING); if (!statement) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01852) "failed to find the prepared statement called '%s'", query); return APR_EGENERAL; } *dbdp = dbd; *statementp = statement; return APR_SUCCESS; } /** * Load the session by the key specified. * * The session value is allocated using the passed apr_pool_t. */ static apr_status_t dbd_load(apr_pool_t *p, request_rec * r, const char *key, const char **val) { apr_status_t rv; ap_dbd_t *dbd = NULL; apr_dbd_prepared_t *statement = NULL; apr_dbd_results_t *res = NULL; apr_dbd_row_t *row = NULL; apr_int64_t expiry = (apr_int64_t) apr_time_now(); session_dbd_dir_conf *conf = ap_get_module_config(r->per_dir_config, &session_dbd_module); if (conf->selectlabel == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01853) "no SessionDBDselectlabel has been specified"); return APR_EGENERAL; } rv = dbd_init(r, conf->selectlabel, &dbd, &statement); if (rv) { return rv; } rv = apr_dbd_pvbselect(dbd->driver, r->pool, dbd->handle, &res, statement, 0, key, &expiry, NULL); if (rv) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01854) "query execution error saving session '%s' " "in database using query '%s': %s", key, conf->selectlabel, apr_dbd_error(dbd->driver, dbd->handle, rv)); return APR_EGENERAL; } for (rv = apr_dbd_get_row(dbd->driver, r->pool, res, &row, -1); rv != -1; rv = apr_dbd_get_row(dbd->driver, r->pool, res, &row, -1)) { if (rv != 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01855) "error retrieving results while saving '%s' " "in database using query '%s': %s", key, conf->selectlabel, apr_dbd_error(dbd->driver, dbd->handle, rv)); return APR_EGENERAL; } if (*val == NULL) { *val = apr_pstrdup(p, apr_dbd_get_entry(dbd->driver, row, 0)); } /* we can't break out here or row won't get cleaned up */ } return APR_SUCCESS; } /** * Load the session by firing off a dbd query. * * If the session is anonymous, the session key will be extracted from * the cookie specified. Failing that, the session key will be extracted * from the GET parameters. * * If the session is keyed by the username, the session will be extracted * by that. * * If no session is found, an empty session will be created. * * On success, this returns OK. */ static apr_status_t session_dbd_load(request_rec * r, session_rec ** z) { session_dbd_dir_conf *conf = ap_get_module_config(r->per_dir_config, &session_dbd_module); apr_status_t ret = APR_SUCCESS; session_rec *zz = NULL; const char *name = NULL; const char *note = NULL; const char *val = NULL; const char *key = NULL; request_rec *m = r->main ? r->main : r; /* is our session in a cookie? */ if (conf->name2_set) { name = conf->name2; } else if (conf->name_set) { name = conf->name; } else if (conf->peruser_set && r->user) { name = r->user; } else { return DECLINED; } /* first look in the notes */ note = apr_pstrcat(m->pool, MOD_SESSION_DBD, name, NULL); zz = (session_rec *)apr_table_get(m->notes, note); if (zz) { *z = zz; return OK; } /* load anonymous sessions */ if (conf->name_set || conf->name2_set) { /* load an RFC2109 or RFC2965 compliant cookie */ ap_cookie_read(r, name, &key, conf->remove); if (key) { ret = dbd_load(m->pool, r, key, &val); if (ret != APR_SUCCESS) { return ret; } } } /* load named session */ else if (conf->peruser) { if (r->user) { ret = dbd_load(m->pool, r, r->user, &val); if (ret != APR_SUCCESS) { return ret; } } } /* otherwise not for us */ else { return DECLINED; } /* create a new session and return it */ zz = (session_rec *) apr_pcalloc(m->pool, sizeof(session_rec)); zz->pool = m->pool; zz->entries = apr_table_make(zz->pool, 10); if (key && val) { apr_uuid_t *uuid = apr_pcalloc(zz->pool, sizeof(apr_uuid_t)); if (APR_SUCCESS == apr_uuid_parse(uuid, key)) { zz->uuid = uuid; } } zz->encoded = val; *z = zz; /* put the session in the notes so we don't have to parse it again */ apr_table_setn(m->notes, note, (char *)zz); /* don't cache pages with a session */ apr_table_addn(r->headers_out, "Cache-Control", "no-cache, private"); return OK; } /** * Save the session by the key specified. */ static apr_status_t dbd_save(request_rec * r, const char *oldkey, const char *newkey, const char *val, apr_int64_t expiry) { apr_status_t rv; ap_dbd_t *dbd = NULL; apr_dbd_prepared_t *statement; int rows = 0; session_dbd_dir_conf *conf = ap_get_module_config(r->per_dir_config, &session_dbd_module); if (conf->updatelabel == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01856) "no SessionDBDupdatelabel has been specified"); return APR_EGENERAL; } rv = dbd_init(r, conf->updatelabel, &dbd, &statement); if (rv) { return rv; } if (oldkey) { rv = apr_dbd_pvbquery(dbd->driver, r->pool, dbd->handle, &rows, statement, val, &expiry, newkey, oldkey, NULL); if (rv) { ap_log_rerror( APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01857) "query execution error updating session '%s' " "using database query '%s': %s/%s", oldkey, newkey, conf->updatelabel, apr_dbd_error(dbd->driver, dbd->handle, rv)); return APR_EGENERAL; } /* * if some rows were updated it means a session existed and was updated, * so we are done. */ if (rows != 0) { return APR_SUCCESS; } } if (conf->insertlabel == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01858) "no SessionDBDinsertlabel has been specified"); return APR_EGENERAL; } rv = dbd_init(r, conf->insertlabel, &dbd, &statement); if (rv) { return rv; } rv = apr_dbd_pvbquery(dbd->driver, r->pool, dbd->handle, &rows, statement, val, &expiry, newkey, NULL); if (rv) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01859) "query execution error inserting session '%s' " "in database with '%s': %s", newkey, conf->insertlabel, apr_dbd_error(dbd->driver, dbd->handle, rv)); return APR_EGENERAL; } /* * if some rows were inserted it means a session was inserted, so we are * done. */ if (rows != 0) { return APR_SUCCESS; } ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01860) "the session insert query did not cause any rows to be added " "to the database for session '%s', session not inserted", newkey); return APR_EGENERAL; } /** * Remove the session by the key specified. */ static apr_status_t dbd_remove(request_rec * r, const char *key) { apr_status_t rv; ap_dbd_t *dbd; apr_dbd_prepared_t *statement; int rows = 0; session_dbd_dir_conf *conf = ap_get_module_config(r->per_dir_config, &session_dbd_module); if (conf->deletelabel == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01862) "no SessionDBDdeletelabel has been specified"); return APR_EGENERAL; } rv = dbd_init(r, conf->deletelabel, &dbd, &statement); if (rv != APR_SUCCESS) { /* No need to do additional error logging here, it has already been done in dbd_init if needed */ return rv; } rv = apr_dbd_pvbquery(dbd->driver, r->pool, dbd->handle, &rows, statement, key, NULL); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01864) "query execution error removing session '%s' " "from database", key); return rv; } return APR_SUCCESS; } /** * Clean out expired sessions. * * TODO: We need to figure out a way to clean out expired sessions from the database. * The monitor hook doesn't help us that much, as we have no handle into the * server, and so we need to come up with a way to do this safely. */ static apr_status_t dbd_clean(apr_pool_t *p, server_rec *s) { return APR_ENOTIMPL; } /** * Save the session by firing off a dbd query. * * If the session is anonymous, save the session and write a cookie * containing the uuid. * * If the session is keyed to the username, save the session using * the username as a key. * * On success, this method will return APR_SUCCESS. * * @param r The request pointer. * @param z A pointer to where the session will be written. */ static apr_status_t session_dbd_save(request_rec * r, session_rec * z) { apr_status_t ret = APR_SUCCESS; session_dbd_dir_conf *conf = ap_get_module_config(r->per_dir_config, &session_dbd_module); /* support anonymous sessions */ if (conf->name_set || conf->name2_set) { char *oldkey = NULL, *newkey = NULL; /* if the session is new or changed, make a new session ID */ if (z->uuid) { oldkey = apr_pcalloc(r->pool, APR_UUID_FORMATTED_LENGTH + 1); apr_uuid_format(oldkey, z->uuid); } if (z->dirty || !oldkey) { z->uuid = apr_pcalloc(z->pool, sizeof(apr_uuid_t)); apr_uuid_get(z->uuid); newkey = apr_pcalloc(r->pool, APR_UUID_FORMATTED_LENGTH + 1); apr_uuid_format(newkey, z->uuid); } else { newkey = oldkey; } /* save the session with the uuid as key */ if (z->encoded && z->encoded[0]) { ret = dbd_save(r, oldkey, newkey, z->encoded, z->expiry); } else { ret = dbd_remove(r, oldkey); } if (ret != APR_SUCCESS) { return ret; } /* create RFC2109 compliant cookie */ if (conf->name_set) { ap_cookie_write(r, conf->name, newkey, conf->name_attrs, z->maxage, r->headers_out, r->err_headers_out, NULL); } /* create RFC2965 compliant cookie */ if (conf->name2_set) { ap_cookie_write2(r, conf->name2, newkey, conf->name2_attrs, z->maxage, r->headers_out, r->err_headers_out, NULL); } return OK; } /* save named session */ else if (conf->peruser) { /* don't cache pages with a session */ apr_table_addn(r->headers_out, "Cache-Control", "no-cache, private"); if (r->user) { ret = dbd_save(r, r->user, r->user, z->encoded, z->expiry); if (ret != APR_SUCCESS) { return ret; } return OK; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01865) "peruser sessions can only be saved if a user is logged in, " "session not saved: %s", r->uri); } } return DECLINED; } /** * This function performs housekeeping on the database, deleting expired * sessions. */ static int session_dbd_monitor(apr_pool_t *p, server_rec *s) { /* TODO handle housekeeping */ dbd_clean(p, s); return OK; } static void *create_session_dbd_dir_config(apr_pool_t * p, char *dummy) { session_dbd_dir_conf *new = (session_dbd_dir_conf *) apr_pcalloc(p, sizeof(session_dbd_dir_conf)); new->remove = 1; new->selectlabel = "selectsession"; new->insertlabel = "insertsession"; new->updatelabel = "updatesession"; new->deletelabel = "deletesession"; return (void *) new; } static void *merge_session_dbd_dir_config(apr_pool_t * p, void *basev, void *addv) { session_dbd_dir_conf *new = (session_dbd_dir_conf *) apr_pcalloc(p, sizeof(session_dbd_dir_conf)); session_dbd_dir_conf *add = (session_dbd_dir_conf *) addv; session_dbd_dir_conf *base = (session_dbd_dir_conf *) basev; new->name = (add->name_set == 0) ? base->name : add->name; new->name_attrs = (add->name_set == 0) ? base->name_attrs : add->name_attrs; new->name_set = add->name_set || base->name_set; new->name2 = (add->name2_set == 0) ? base->name2 : add->name2; new->name2_attrs = (add->name2_set == 0) ? base->name2_attrs : add->name2_attrs; new->name2_set = add->name2_set || base->name2_set; new->peruser = (add->peruser_set == 0) ? base->peruser : add->peruser; new->peruser_set = add->peruser_set || base->peruser_set; new->remove = (add->remove_set == 0) ? base->remove : add->remove; new->remove_set = add->remove_set || base->remove_set; new->selectlabel = (!add->selectlabel) ? base->selectlabel : add->selectlabel; new->updatelabel = (!add->updatelabel) ? base->updatelabel : add->updatelabel; new->insertlabel = (!add->insertlabel) ? base->insertlabel : add->insertlabel; new->deletelabel = (!add->deletelabel) ? base->deletelabel : add->deletelabel; return new; } /** * Sanity check a given string that it exists, is not empty, * and does not contain special characters. */ static const char *check_string(cmd_parms * cmd, const char *string) { if (APR_SUCCESS != ap_cookie_check_string(string)) { return apr_pstrcat(cmd->pool, cmd->directive->directive, " cannot be empty, or contain '=', ';' or '&'.", NULL); } return NULL; } static const char * set_dbd_peruser(cmd_parms * parms, void *dconf, int flag) { session_dbd_dir_conf *conf = dconf; conf->peruser = flag; conf->peruser_set = 1; return NULL; } static const char * set_dbd_cookie_remove(cmd_parms * parms, void *dconf, int flag) { session_dbd_dir_conf *conf = dconf; conf->remove = flag; conf->remove_set = 1; return NULL; } static const char *set_cookie_name(cmd_parms * cmd, void *config, const char *args) { char *last; char *line = apr_pstrdup(cmd->pool, args); session_dbd_dir_conf *conf = (session_dbd_dir_conf *) config; char *cookie = apr_strtok(line, " \t", &last); conf->name = cookie; conf->name_set = 1; while (apr_isspace(*last)) { last++; } conf->name_attrs = last; return check_string(cmd, cookie); } static const char *set_cookie_name2(cmd_parms * cmd, void *config, const char *args) { char *last; char *line = apr_pstrdup(cmd->pool, args); session_dbd_dir_conf *conf = (session_dbd_dir_conf *) config; char *cookie = apr_strtok(line, " \t", &last); conf->name2 = cookie; conf->name2_set = 1; while (apr_isspace(*last)) { last++; } conf->name2_attrs = last; return check_string(cmd, cookie); } static const command_rec session_dbd_cmds[] = { AP_INIT_TAKE1("SessionDBDSelectLabel", ap_set_string_slot, (void *) APR_OFFSETOF(session_dbd_dir_conf, selectlabel), RSRC_CONF|OR_AUTHCFG, "Query label used to select a new session"), AP_INIT_TAKE1("SessionDBDInsertLabel", ap_set_string_slot, (void *) APR_OFFSETOF(session_dbd_dir_conf, insertlabel), RSRC_CONF|OR_AUTHCFG, "Query label used to insert a new session"), AP_INIT_TAKE1("SessionDBDUpdateLabel", ap_set_string_slot, (void *) APR_OFFSETOF(session_dbd_dir_conf, updatelabel), RSRC_CONF|OR_AUTHCFG, "Query label used to update an existing session"), AP_INIT_TAKE1("SessionDBDDeleteLabel", ap_set_string_slot, (void *) APR_OFFSETOF(session_dbd_dir_conf, deletelabel), RSRC_CONF|OR_AUTHCFG, "Query label used to delete an existing session"), AP_INIT_FLAG("SessionDBDPerUser", set_dbd_peruser, NULL, RSRC_CONF|OR_AUTHCFG, "Save the session per user"), AP_INIT_FLAG("SessionDBDCookieRemove", set_dbd_cookie_remove, NULL, RSRC_CONF|OR_AUTHCFG, "Remove the session cookie after session load. On by default."), AP_INIT_RAW_ARGS("SessionDBDCookieName", set_cookie_name, NULL, RSRC_CONF|OR_AUTHCFG, "The name of the RFC2109 cookie carrying the session key"), AP_INIT_RAW_ARGS("SessionDBDCookieName2", set_cookie_name2, NULL, RSRC_CONF|OR_AUTHCFG, "The name of the RFC2965 cookie carrying the session key"), {NULL} }; static void register_hooks(apr_pool_t * p) { ap_hook_session_load(session_dbd_load, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_session_save(session_dbd_save, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_monitor(session_dbd_monitor, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(session_dbd) = { STANDARD20_MODULE_STUFF, create_session_dbd_dir_config, /* dir config creater */ merge_session_dbd_dir_config, /* dir merger --- default is to * override */ NULL, /* server config */ NULL, /* merge server config */ session_dbd_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/session/mod_session_crypto.dep0000644000000000000500000000406112674411515021012 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_session_crypto.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_session_crypto.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_base64.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_crypto.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr-util\include\apu_errno.h"\ "..\..\srclib\apr-util\include\apu_version.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_session.h"\ httpd-2.4.41/modules/session/mod_session.dsp0000644000000000000500000001100711022367030017412 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_session" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_session - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_session.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_session.mak" CFG="mod_session - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_session - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_session - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_session - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "SESSION_DECLARE_EXPORT" /Fd"Release\mod_session_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_session.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_session.so" /d LONG_NAME="session_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_session.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_session.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_session.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_session - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "SESSION_DECLARE_EXPORT" /Fd"Debug\mod_session_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_session.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_session.so" /d LONG_NAME="session_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_session.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_session.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session.so # Begin Special Build Tool TargetPath=.\Debug\mod_session.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_session - Win32 Release" # Name "mod_session - Win32 Debug" # Begin Source File SOURCE=.\mod_session.c # End Source File # Begin Source File SOURCE=.\mod_session.h # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/session/mod_session_dbd.mak0000644000000000000500000002770312701473373020234 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_session_dbd.dsp !IF "$(CFG)" == "" CFG=mod_session_dbd - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_session_dbd - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_session_dbd - Win32 Release" && "$(CFG)" != "mod_session_dbd - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_session_dbd.mak" CFG="mod_session_dbd - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_session_dbd - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_session_dbd - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_session_dbd - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_session_dbd.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_session - Win32 Release" "mod_dbd - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_session_dbd.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_dbd - Win32 ReleaseCLEAN" "mod_session - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_session_dbd.obj" -@erase "$(INTDIR)\mod_session_dbd.res" -@erase "$(INTDIR)\mod_session_dbd_src.idb" -@erase "$(INTDIR)\mod_session_dbd_src.pdb" -@erase "$(OUTDIR)\mod_session_dbd.exp" -@erase "$(OUTDIR)\mod_session_dbd.lib" -@erase "$(OUTDIR)\mod_session_dbd.pdb" -@erase "$(OUTDIR)\mod_session_dbd.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../database" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_session_dbd_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_session_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_session_dbd.so" /d LONG_NAME="session_dbd_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_session_dbd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_session_dbd.pdb" /debug /out:"$(OUTDIR)\mod_session_dbd.so" /implib:"$(OUTDIR)\mod_session_dbd.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_session_dbd.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_session_dbd.obj" \ "$(INTDIR)\mod_session_dbd.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "..\database\Release\mod_dbd.lib" \ "$(OUTDIR)\mod_session.lib" "$(OUTDIR)\mod_session_dbd.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_session_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_session_dbd.so" if exist .\Release\mod_session_dbd.so.manifest mt.exe -manifest .\Release\mod_session_dbd.so.manifest -outputresource:.\Release\mod_session_dbd.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_session_dbd - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_session_dbd.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_session - Win32 Debug" "mod_dbd - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_session_dbd.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_dbd - Win32 DebugCLEAN" "mod_session - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_session_dbd.obj" -@erase "$(INTDIR)\mod_session_dbd.res" -@erase "$(INTDIR)\mod_session_dbd_src.idb" -@erase "$(INTDIR)\mod_session_dbd_src.pdb" -@erase "$(OUTDIR)\mod_session_dbd.exp" -@erase "$(OUTDIR)\mod_session_dbd.lib" -@erase "$(OUTDIR)\mod_session_dbd.pdb" -@erase "$(OUTDIR)\mod_session_dbd.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../database" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_session_dbd_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_session_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_session_dbd.so" /d LONG_NAME="session_dbd_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_session_dbd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_session_dbd.pdb" /debug /out:"$(OUTDIR)\mod_session_dbd.so" /implib:"$(OUTDIR)\mod_session_dbd.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_session_dbd.so LINK32_OBJS= \ "$(INTDIR)\mod_session_dbd.obj" \ "$(INTDIR)\mod_session_dbd.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "..\database\Debug\mod_dbd.lib" \ "$(OUTDIR)\mod_session.lib" "$(OUTDIR)\mod_session_dbd.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_session_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_session_dbd.so" if exist .\Debug\mod_session_dbd.so.manifest mt.exe -manifest .\Debug\mod_session_dbd.so.manifest -outputresource:.\Debug\mod_session_dbd.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_session_dbd.dep") !INCLUDE "mod_session_dbd.dep" !ELSE !MESSAGE Warning: cannot find "mod_session_dbd.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_session_dbd - Win32 Release" || "$(CFG)" == "mod_session_dbd - Win32 Debug" !IF "$(CFG)" == "mod_session_dbd - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\session" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\session" !ELSEIF "$(CFG)" == "mod_session_dbd - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\session" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\session" !ENDIF !IF "$(CFG)" == "mod_session_dbd - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\session" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\session" !ELSEIF "$(CFG)" == "mod_session_dbd - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\session" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\session" !ENDIF !IF "$(CFG)" == "mod_session_dbd - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\session" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\session" !ELSEIF "$(CFG)" == "mod_session_dbd - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\session" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\session" !ENDIF !IF "$(CFG)" == "mod_session_dbd - Win32 Release" "mod_dbd - Win32 Release" : cd ".\..\database" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dbd.mak" CFG="mod_dbd - Win32 Release" cd "..\session" "mod_dbd - Win32 ReleaseCLEAN" : cd ".\..\database" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dbd.mak" CFG="mod_dbd - Win32 Release" RECURSE=1 CLEAN cd "..\session" !ELSEIF "$(CFG)" == "mod_session_dbd - Win32 Debug" "mod_dbd - Win32 Debug" : cd ".\..\database" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dbd.mak" CFG="mod_dbd - Win32 Debug" cd "..\session" "mod_dbd - Win32 DebugCLEAN" : cd ".\..\database" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dbd.mak" CFG="mod_dbd - Win32 Debug" RECURSE=1 CLEAN cd "..\session" !ENDIF !IF "$(CFG)" == "mod_session_dbd - Win32 Release" "mod_session - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_session.mak" CFG="mod_session - Win32 Release" cd "." "mod_session - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_session.mak" CFG="mod_session - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_session_dbd - Win32 Debug" "mod_session - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_session.mak" CFG="mod_session - Win32 Debug" cd "." "mod_session - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_session.mak" CFG="mod_session - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_session_dbd - Win32 Release" "$(INTDIR)\mod_session_dbd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_session_dbd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_session_dbd.so" /d LONG_NAME="session_dbd_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_session_dbd - Win32 Debug" "$(INTDIR)\mod_session_dbd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_session_dbd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_session_dbd.so" /d LONG_NAME="session_dbd_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_session_dbd.c "$(INTDIR)\mod_session_dbd.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/session/mod_session.mak0000644000000000000500000002356112701473373017421 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_session.dsp !IF "$(CFG)" == "" CFG=mod_session - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_session - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_session - Win32 Release" && "$(CFG)" != "mod_session - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_session.mak" CFG="mod_session - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_session - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_session - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_session - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_session.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_session.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_session.obj" -@erase "$(INTDIR)\mod_session.res" -@erase "$(INTDIR)\mod_session_src.idb" -@erase "$(INTDIR)\mod_session_src.pdb" -@erase "$(OUTDIR)\mod_session.exp" -@erase "$(OUTDIR)\mod_session.lib" -@erase "$(OUTDIR)\mod_session.pdb" -@erase "$(OUTDIR)\mod_session.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "SESSION_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_session_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_session.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_session.so" /d LONG_NAME="session_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_session.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_session.pdb" /debug /out:"$(OUTDIR)\mod_session.so" /implib:"$(OUTDIR)\mod_session.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_session.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_session.obj" \ "$(INTDIR)\mod_session.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_session.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_session.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_session.so" if exist .\Release\mod_session.so.manifest mt.exe -manifest .\Release\mod_session.so.manifest -outputresource:.\Release\mod_session.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_session - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_session.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_session.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_session.obj" -@erase "$(INTDIR)\mod_session.res" -@erase "$(INTDIR)\mod_session_src.idb" -@erase "$(INTDIR)\mod_session_src.pdb" -@erase "$(OUTDIR)\mod_session.exp" -@erase "$(OUTDIR)\mod_session.lib" -@erase "$(OUTDIR)\mod_session.pdb" -@erase "$(OUTDIR)\mod_session.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "SESSION_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_session_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_session.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_session.so" /d LONG_NAME="session_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_session.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_session.pdb" /debug /out:"$(OUTDIR)\mod_session.so" /implib:"$(OUTDIR)\mod_session.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_session.so LINK32_OBJS= \ "$(INTDIR)\mod_session.obj" \ "$(INTDIR)\mod_session.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_session.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_session.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_session.so" if exist .\Debug\mod_session.so.manifest mt.exe -manifest .\Debug\mod_session.so.manifest -outputresource:.\Debug\mod_session.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_session.dep") !INCLUDE "mod_session.dep" !ELSE !MESSAGE Warning: cannot find "mod_session.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_session - Win32 Release" || "$(CFG)" == "mod_session - Win32 Debug" !IF "$(CFG)" == "mod_session - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\session" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\session" !ELSEIF "$(CFG)" == "mod_session - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\session" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\session" !ENDIF !IF "$(CFG)" == "mod_session - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\session" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\session" !ELSEIF "$(CFG)" == "mod_session - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\session" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\session" !ENDIF !IF "$(CFG)" == "mod_session - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\session" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\session" !ELSEIF "$(CFG)" == "mod_session - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\session" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\session" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_session - Win32 Release" "$(INTDIR)\mod_session.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_session.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_session.so" /d LONG_NAME="session_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_session - Win32 Debug" "$(INTDIR)\mod_session.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_session.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_session.so" /d LONG_NAME="session_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_session.c "$(INTDIR)\mod_session.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/session/mod_session_crypto.dsp0000644000000000000500000001114311022367030021013 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_session_crypto" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_session_crypto - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_session_crypto.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_session_crypto.mak" CFG="mod_session_crypto - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_session_crypto - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_session_crypto - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_session_crypto - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_session_crypto_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_session_crypto.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_session_crypto.so" /d LONG_NAME="session_crypto_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_session_crypto.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session_crypto.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_session_crypto.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session_crypto.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_session_crypto.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_session_crypto - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_session_crypto_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_session_crypto.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_session_crypto.so" /d LONG_NAME="session_crypto_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_session_crypto.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session_crypto.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_session_crypto.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session_crypto.so # Begin Special Build Tool TargetPath=.\Debug\mod_session_crypto.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_session_crypto - Win32 Release" # Name "mod_session_crypto - Win32 Debug" # Begin Source File SOURCE=.\mod_session_crypto.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/session/mod_session_cookie.dep0000644000000000000500000000335112674411515020744 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_session_cookie.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_session_cookie.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_cookies.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_session.h"\ httpd-2.4.41/modules/session/NWGNUsession_cookie0000644000000000000500000001033311653006502020143 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(SRC)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = session_cookie # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Session Cookie Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = SessionCookie Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_session_cookie.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ session \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ ap_hook_session_load \ ap_hook_session_save \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ session_cookie_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/session/mod_session_crypto.c0000644000000000000500000006401413102063375020462 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_session.h" #include "apu_version.h" #include "apr_base64.h" /* for apr_base64_decode et al */ #include "apr_lib.h" #include "apr_md5.h" #include "apr_strings.h" #include "http_log.h" #include "http_core.h" #if APU_MAJOR_VERSION == 1 && APU_MINOR_VERSION < 4 #error session_crypto_module requires APU v1.4.0 or later #elif APU_HAVE_CRYPTO == 0 #error Crypto support must be enabled in APR #else #include "apr_crypto.h" /* for apr_*_crypt et al */ #define CRYPTO_KEY "session_crypto_context" module AP_MODULE_DECLARE_DATA session_crypto_module; /** * Structure to carry the per-dir session config. */ typedef struct { apr_array_header_t *passphrases; int passphrases_set; const char *cipher; int cipher_set; } session_crypto_dir_conf; /** * Structure to carry the server wide session config. */ typedef struct { const char *library; const char *params; int library_set; } session_crypto_conf; /* Wrappers around apr_siphash24() and apr_crypto_equals(), * available in APU-1.6/APR-2.0 only. */ #if APU_MAJOR_VERSION > 1 || (APU_MAJOR_VERSION == 1 && APU_MINOR_VERSION >= 6) #include "apr_siphash.h" #define AP_SIPHASH_DSIZE APR_SIPHASH_DSIZE #define AP_SIPHASH_KSIZE APR_SIPHASH_KSIZE #define ap_siphash24_auth apr_siphash24_auth #define ap_crypto_equals apr_crypto_equals #else #define AP_SIPHASH_DSIZE 8 #define AP_SIPHASH_KSIZE 16 #define ROTL64(x, n) (((x) << (n)) | ((x) >> (64 - (n)))) #define U8TO64_LE(p) \ (((apr_uint64_t)((p)[0]) ) | \ ((apr_uint64_t)((p)[1]) << 8) | \ ((apr_uint64_t)((p)[2]) << 16) | \ ((apr_uint64_t)((p)[3]) << 24) | \ ((apr_uint64_t)((p)[4]) << 32) | \ ((apr_uint64_t)((p)[5]) << 40) | \ ((apr_uint64_t)((p)[6]) << 48) | \ ((apr_uint64_t)((p)[7]) << 56)) #define U64TO8_LE(p, v) \ do { \ (p)[0] = (unsigned char)((v) ); \ (p)[1] = (unsigned char)((v) >> 8); \ (p)[2] = (unsigned char)((v) >> 16); \ (p)[3] = (unsigned char)((v) >> 24); \ (p)[4] = (unsigned char)((v) >> 32); \ (p)[5] = (unsigned char)((v) >> 40); \ (p)[6] = (unsigned char)((v) >> 48); \ (p)[7] = (unsigned char)((v) >> 56); \ } while (0) #define SIPROUND() \ do { \ v0 += v1; v1=ROTL64(v1,13); v1 ^= v0; v0=ROTL64(v0,32); \ v2 += v3; v3=ROTL64(v3,16); v3 ^= v2; \ v0 += v3; v3=ROTL64(v3,21); v3 ^= v0; \ v2 += v1; v1=ROTL64(v1,17); v1 ^= v2; v2=ROTL64(v2,32); \ } while(0) static apr_uint64_t ap_siphash24(const void *src, apr_size_t len, const unsigned char key[AP_SIPHASH_KSIZE]) { const unsigned char *ptr, *end; apr_uint64_t v0, v1, v2, v3, m; apr_uint64_t k0, k1; unsigned int rem; k0 = U8TO64_LE(key + 0); k1 = U8TO64_LE(key + 8); v3 = k1 ^ (apr_uint64_t)0x7465646279746573ULL; v2 = k0 ^ (apr_uint64_t)0x6c7967656e657261ULL; v1 = k1 ^ (apr_uint64_t)0x646f72616e646f6dULL; v0 = k0 ^ (apr_uint64_t)0x736f6d6570736575ULL; rem = (unsigned int)(len & 0x7); for (ptr = src, end = ptr + len - rem; ptr < end; ptr += 8) { m = U8TO64_LE(ptr); v3 ^= m; SIPROUND(); SIPROUND(); v0 ^= m; } m = (apr_uint64_t)(len & 0xff) << 56; switch (rem) { case 7: m |= (apr_uint64_t)ptr[6] << 48; case 6: m |= (apr_uint64_t)ptr[5] << 40; case 5: m |= (apr_uint64_t)ptr[4] << 32; case 4: m |= (apr_uint64_t)ptr[3] << 24; case 3: m |= (apr_uint64_t)ptr[2] << 16; case 2: m |= (apr_uint64_t)ptr[1] << 8; case 1: m |= (apr_uint64_t)ptr[0]; case 0: break; } v3 ^= m; SIPROUND(); SIPROUND(); v0 ^= m; v2 ^= 0xff; SIPROUND(); SIPROUND(); SIPROUND(); SIPROUND(); return v0 ^ v1 ^ v2 ^ v3; } static void ap_siphash24_auth(unsigned char out[AP_SIPHASH_DSIZE], const void *src, apr_size_t len, const unsigned char key[AP_SIPHASH_KSIZE]) { apr_uint64_t h; h = ap_siphash24(src, len, key); U64TO8_LE(out, h); } static int ap_crypto_equals(const void *buf1, const void *buf2, apr_size_t size) { const unsigned char *p1 = buf1; const unsigned char *p2 = buf2; unsigned char diff = 0; apr_size_t i; for (i = 0; i < size; ++i) { diff |= p1[i] ^ p2[i]; } return 1 & ((diff - 1) >> 8); } #endif static void compute_auth(const void *src, apr_size_t len, const char *passphrase, apr_size_t passlen, unsigned char auth[AP_SIPHASH_DSIZE]) { unsigned char key[APR_MD5_DIGESTSIZE]; /* XXX: if we had a way to get the raw bytes from an apr_crypto_key_t * we could use them directly (not available in APR-1.5.x). * MD5 is 128bit too, so use it to get a suitable siphash key * from the passphrase. */ apr_md5(key, passphrase, passlen); ap_siphash24_auth(auth, src, len, key); } /** * Initialise the encryption as per the current config. * * Returns APR_SUCCESS if successful. */ static apr_status_t crypt_init(request_rec *r, const apr_crypto_t *f, apr_crypto_block_key_type_e **cipher, session_crypto_dir_conf * dconf) { apr_status_t res; apr_hash_t *ciphers; res = apr_crypto_get_block_key_types(&ciphers, f); if (APR_SUCCESS != res) { ap_log_rerror(APLOG_MARK, APLOG_ERR, res, r, APLOGNO(01823) "no ciphers returned by APR. " "session encryption not possible"); return res; } *cipher = apr_hash_get(ciphers, dconf->cipher, APR_HASH_KEY_STRING); if (!(*cipher)) { apr_hash_index_t *hi; const void *key; apr_ssize_t klen; int sum = 0; int offset = 0; char *options = NULL; for (hi = apr_hash_first(r->pool, ciphers); hi; hi = apr_hash_next(hi)) { apr_hash_this(hi, NULL, &klen, NULL); sum += klen + 2; } for (hi = apr_hash_first(r->pool, ciphers); hi; hi = apr_hash_next(hi)) { apr_hash_this(hi, &key, &klen, NULL); if (!options) { options = apr_palloc(r->pool, sum + 1); } else { options[offset++] = ','; options[offset++] = ' '; } strncpy(options + offset, key, klen); offset += klen; } options[offset] = 0; ap_log_rerror(APLOG_MARK, APLOG_ERR, res, r, APLOGNO(01824) "cipher '%s' not recognised by crypto driver. " "session encryption not possible, options: %s", dconf->cipher, options); return APR_EGENERAL; } return APR_SUCCESS; } /** * Encrypt the string given as per the current config. * * Returns APR_SUCCESS if successful. */ static apr_status_t encrypt_string(request_rec * r, const apr_crypto_t *f, session_crypto_dir_conf *dconf, const char *in, char **out) { apr_status_t res; apr_crypto_key_t *key = NULL; apr_size_t ivSize = 0; apr_crypto_block_t *block = NULL; unsigned char *encrypt = NULL; unsigned char *combined = NULL; apr_size_t encryptlen, tlen, combinedlen; char *base64; apr_size_t blockSize = 0; const unsigned char *iv = NULL; apr_uuid_t salt; apr_crypto_block_key_type_e *cipher; const char *passphrase; apr_size_t passlen; /* use a uuid as a salt value, and prepend it to our result */ apr_uuid_get(&salt); res = crypt_init(r, f, &cipher, dconf); if (res != APR_SUCCESS) { return res; } /* encrypt using the first passphrase in the list */ passphrase = APR_ARRAY_IDX(dconf->passphrases, 0, const char *); passlen = strlen(passphrase); res = apr_crypto_passphrase(&key, &ivSize, passphrase, passlen, (unsigned char *) (&salt), sizeof(apr_uuid_t), *cipher, APR_MODE_CBC, 1, 4096, f, r->pool); if (APR_STATUS_IS_ENOKEY(res)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, res, r, APLOGNO(01825) "the passphrase '%s' was empty", passphrase); } if (APR_STATUS_IS_EPADDING(res)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, res, r, APLOGNO(01826) "padding is not supported for cipher"); } if (APR_STATUS_IS_EKEYTYPE(res)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, res, r, APLOGNO(01827) "the key type is not known"); } if (APR_SUCCESS != res) { ap_log_rerror(APLOG_MARK, APLOG_ERR, res, r, APLOGNO(01828) "encryption could not be configured."); return res; } res = apr_crypto_block_encrypt_init(&block, &iv, key, &blockSize, r->pool); if (APR_SUCCESS != res) { ap_log_rerror(APLOG_MARK, APLOG_ERR, res, r, APLOGNO(01829) "apr_crypto_block_encrypt_init failed"); return res; } /* encrypt the given string */ res = apr_crypto_block_encrypt(&encrypt, &encryptlen, (const unsigned char *)in, strlen(in), block); if (APR_SUCCESS != res) { ap_log_rerror(APLOG_MARK, APLOG_ERR, res, r, APLOGNO(01830) "apr_crypto_block_encrypt failed"); return res; } res = apr_crypto_block_encrypt_finish(encrypt + encryptlen, &tlen, block); if (APR_SUCCESS != res) { ap_log_rerror(APLOG_MARK, APLOG_ERR, res, r, APLOGNO(01831) "apr_crypto_block_encrypt_finish failed"); return res; } encryptlen += tlen; /* prepend the salt and the iv to the result (keep room for the MAC) */ combinedlen = AP_SIPHASH_DSIZE + sizeof(apr_uuid_t) + ivSize + encryptlen; combined = apr_palloc(r->pool, combinedlen); memcpy(combined + AP_SIPHASH_DSIZE, &salt, sizeof(apr_uuid_t)); memcpy(combined + AP_SIPHASH_DSIZE + sizeof(apr_uuid_t), iv, ivSize); memcpy(combined + AP_SIPHASH_DSIZE + sizeof(apr_uuid_t) + ivSize, encrypt, encryptlen); /* authenticate the whole salt+IV+ciphertext with a leading MAC */ compute_auth(combined + AP_SIPHASH_DSIZE, combinedlen - AP_SIPHASH_DSIZE, passphrase, passlen, combined); /* base64 encode the result (APR handles the trailing '\0') */ base64 = apr_palloc(r->pool, apr_base64_encode_len(combinedlen)); apr_base64_encode(base64, (const char *) combined, combinedlen); *out = base64; return res; } /** * Decrypt the string given as per the current config. * * Returns APR_SUCCESS if successful. */ static apr_status_t decrypt_string(request_rec * r, const apr_crypto_t *f, session_crypto_dir_conf *dconf, const char *in, char **out) { apr_status_t res; apr_crypto_key_t *key = NULL; apr_size_t ivSize = 0; apr_crypto_block_t *block = NULL; unsigned char *decrypted = NULL; apr_size_t decryptedlen, tlen; apr_size_t decodedlen; char *decoded; apr_size_t blockSize = 0; apr_crypto_block_key_type_e *cipher; unsigned char auth[AP_SIPHASH_DSIZE]; int i = 0; /* strip base64 from the string */ decoded = apr_palloc(r->pool, apr_base64_decode_len(in)); decodedlen = apr_base64_decode(decoded, in); decoded[decodedlen] = '\0'; /* sanity check - decoded too short? */ if (decodedlen < (AP_SIPHASH_DSIZE + sizeof(apr_uuid_t))) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(10005) "too short to decrypt, aborting"); return APR_ECRYPT; } res = crypt_init(r, f, &cipher, dconf); if (res != APR_SUCCESS) { return res; } /* try each passphrase in turn */ for (; i < dconf->passphrases->nelts; i++) { const char *passphrase = APR_ARRAY_IDX(dconf->passphrases, i, char *); apr_size_t passlen = strlen(passphrase); apr_size_t len = decodedlen - AP_SIPHASH_DSIZE; unsigned char *slider = (unsigned char *)decoded + AP_SIPHASH_DSIZE; /* Verify authentication of the whole salt+IV+ciphertext by computing * the MAC and comparing it (timing safe) with the one in the payload. */ compute_auth(slider, len, passphrase, passlen, auth); if (!ap_crypto_equals(auth, decoded, AP_SIPHASH_DSIZE)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, res, r, APLOGNO(10006) "auth does not match, skipping"); continue; } /* encrypt using the first passphrase in the list */ res = apr_crypto_passphrase(&key, &ivSize, passphrase, passlen, slider, sizeof(apr_uuid_t), *cipher, APR_MODE_CBC, 1, 4096, f, r->pool); if (APR_STATUS_IS_ENOKEY(res)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, res, r, APLOGNO(01832) "the passphrase '%s' was empty", passphrase); continue; } else if (APR_STATUS_IS_EPADDING(res)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, res, r, APLOGNO(01833) "padding is not supported for cipher"); continue; } else if (APR_STATUS_IS_EKEYTYPE(res)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, res, r, APLOGNO(01834) "the key type is not known"); continue; } else if (APR_SUCCESS != res) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, res, r, APLOGNO(01835) "encryption could not be configured."); continue; } /* sanity check - decoded too short? */ if (len < (sizeof(apr_uuid_t) + ivSize)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(01836) "too short to decrypt, skipping"); res = APR_ECRYPT; continue; } /* bypass the salt at the start of the decoded block */ slider += sizeof(apr_uuid_t); len -= sizeof(apr_uuid_t); res = apr_crypto_block_decrypt_init(&block, &blockSize, slider, key, r->pool); if (APR_SUCCESS != res) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, res, r, APLOGNO(01837) "apr_crypto_block_decrypt_init failed"); continue; } /* bypass the iv at the start of the decoded block */ slider += ivSize; len -= ivSize; /* decrypt the given string */ res = apr_crypto_block_decrypt(&decrypted, &decryptedlen, slider, len, block); if (res) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, res, r, APLOGNO(01838) "apr_crypto_block_decrypt failed"); continue; } *out = (char *) decrypted; res = apr_crypto_block_decrypt_finish(decrypted + decryptedlen, &tlen, block); if (APR_SUCCESS != res) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, res, r, APLOGNO(01839) "apr_crypto_block_decrypt_finish failed"); continue; } decryptedlen += tlen; decrypted[decryptedlen] = 0; break; } if (APR_SUCCESS != res) { ap_log_rerror(APLOG_MARK, APLOG_INFO, res, r, APLOGNO(01840) "decryption failed"); } return res; } /** * Crypto encoding for the session. * * @param r The request pointer. * @param z A pointer to where the session will be written. */ static apr_status_t session_crypto_encode(request_rec * r, session_rec * z) { char *encoded = NULL; apr_status_t res; const apr_crypto_t *f = NULL; session_crypto_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &session_crypto_module); if (dconf->passphrases_set && z->encoded && *z->encoded) { apr_pool_userdata_get((void **)&f, CRYPTO_KEY, r->server->process->pconf); res = encrypt_string(r, f, dconf, z->encoded, &encoded); if (res != OK) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, res, r, APLOGNO(01841) "encrypt session failed"); return res; } z->encoded = encoded; } return OK; } /** * Crypto decoding for the session. * * @param r The request pointer. * @param z A pointer to where the session will be written. */ static apr_status_t session_crypto_decode(request_rec * r, session_rec * z) { char *encoded = NULL; apr_status_t res; const apr_crypto_t *f = NULL; session_crypto_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &session_crypto_module); if ((dconf->passphrases_set) && z->encoded && *z->encoded) { apr_pool_userdata_get((void **)&f, CRYPTO_KEY, r->server->process->pconf); res = decrypt_string(r, f, dconf, z->encoded, &encoded); if (res != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, res, r, APLOGNO(01842) "decrypt session failed, wrong passphrase?"); return res; } z->encoded = encoded; } return OK; } /** * Initialise the SSL in the post_config hook. */ static int session_crypto_init(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { const apr_crypto_driver_t *driver = NULL; apr_crypto_t *f = NULL; session_crypto_conf *conf = ap_get_module_config(s->module_config, &session_crypto_module); /* session_crypto_init() will be called twice. Don't bother * going through all of the initialization on the first call * because it will just be thrown away.*/ if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) { return OK; } if (conf->library) { const apu_err_t *err = NULL; apr_status_t rv; rv = apr_crypto_init(p); if (APR_SUCCESS != rv) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(01843) "APR crypto could not be initialised"); return rv; } rv = apr_crypto_get_driver(&driver, conf->library, conf->params, &err, p); if (APR_EREINIT == rv) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, s, APLOGNO(01844) "warning: crypto for '%s' was already initialised, " "using existing configuration", conf->library); rv = APR_SUCCESS; } if (APR_SUCCESS != rv && err) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(01845) "The crypto library '%s' could not be loaded: %s (%s: %d)", conf->library, err->msg, err->reason, err->rc); return rv; } if (APR_ENOTIMPL == rv) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(01846) "The crypto library '%s' could not be found", conf->library); return rv; } if (APR_SUCCESS != rv || !driver) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(01847) "The crypto library '%s' could not be loaded", conf->library); return rv; } rv = apr_crypto_make(&f, driver, conf->params, p); if (APR_SUCCESS != rv) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(01848) "The crypto library '%s' could not be initialised", conf->library); return rv; } ap_log_error(APLOG_MARK, APLOG_INFO, rv, s, APLOGNO(01849) "The crypto library '%s' was loaded successfully", conf->library); apr_pool_userdata_set((const void *)f, CRYPTO_KEY, apr_pool_cleanup_null, s->process->pconf); } return OK; } static void *create_session_crypto_config(apr_pool_t * p, server_rec *s) { session_crypto_conf *new = (session_crypto_conf *) apr_pcalloc(p, sizeof(session_crypto_conf)); /* if no library has been configured, set the recommended library * as a sensible default. */ #ifdef APU_CRYPTO_RECOMMENDED_DRIVER new->library = APU_CRYPTO_RECOMMENDED_DRIVER; #endif return (void *) new; } static void *create_session_crypto_dir_config(apr_pool_t * p, char *dummy) { session_crypto_dir_conf *new = (session_crypto_dir_conf *) apr_pcalloc(p, sizeof(session_crypto_dir_conf)); new->passphrases = apr_array_make(p, 10, sizeof(char *)); /* default cipher AES256-SHA */ new->cipher = "aes256"; return (void *) new; } static void *merge_session_crypto_dir_config(apr_pool_t * p, void *basev, void *addv) { session_crypto_dir_conf *new = (session_crypto_dir_conf *) apr_pcalloc(p, sizeof(session_crypto_dir_conf)); session_crypto_dir_conf *add = (session_crypto_dir_conf *) addv; session_crypto_dir_conf *base = (session_crypto_dir_conf *) basev; new->passphrases = (add->passphrases_set == 0) ? base->passphrases : add->passphrases; new->passphrases_set = add->passphrases_set || base->passphrases_set; new->cipher = (add->cipher_set == 0) ? base->cipher : add->cipher; new->cipher_set = add->cipher_set || base->cipher_set; return new; } static const char *set_crypto_driver(cmd_parms * cmd, void *config, const char *arg) { session_crypto_conf *conf = (session_crypto_conf *)ap_get_module_config(cmd->server->module_config, &session_crypto_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } conf->library = ap_getword_conf(cmd->pool, &arg); conf->params = arg; conf->library_set = 1; return NULL; } static const char *set_crypto_passphrase(cmd_parms * cmd, void *config, const char *arg) { int arglen = strlen(arg); char **argv; char *result; const char **passphrase; session_crypto_dir_conf *dconf = (session_crypto_dir_conf *) config; passphrase = apr_array_push(dconf->passphrases); if ((arglen > 5) && strncmp(arg, "exec:", 5) == 0) { if (apr_tokenize_to_argv(arg+5, &argv, cmd->temp_pool) != APR_SUCCESS) { return apr_pstrcat(cmd->pool, "Unable to parse exec arguments from ", arg+5, NULL); } argv[0] = ap_server_root_relative(cmd->temp_pool, argv[0]); if (!argv[0]) { return apr_pstrcat(cmd->pool, "Invalid SessionCryptoPassphrase exec location:", arg+5, NULL); } result = ap_get_exec_line(cmd->pool, (const char*)argv[0], (const char * const *)argv); if(!result) { return apr_pstrcat(cmd->pool, "Unable to get bind password from exec of ", arg+5, NULL); } *passphrase = result; } else { *passphrase = arg; } dconf->passphrases_set = 1; return NULL; } static const char *set_crypto_passphrase_file(cmd_parms *cmd, void *config, const char *filename) { char buffer[MAX_STRING_LEN]; char *arg; const char *args; ap_configfile_t *file; apr_status_t rv; filename = ap_server_root_relative(cmd->temp_pool, filename); rv = ap_pcfg_openfile(&file, cmd->temp_pool, filename); if (rv != APR_SUCCESS) { return apr_psprintf(cmd->pool, "%s: Could not open file %s: %pm", cmd->cmd->name, filename, &rv); } while (!(ap_cfg_getline(buffer, sizeof(buffer), file))) { args = buffer; while (*(arg = ap_getword_conf(cmd->pool, &args)) != '\0') { if (*arg == '#') { break; } set_crypto_passphrase(cmd, config, arg); } } ap_cfg_closefile(file); return NULL; } static const char *set_crypto_cipher(cmd_parms * cmd, void *config, const char *cipher) { session_crypto_dir_conf *dconf = (session_crypto_dir_conf *) config; dconf->cipher = cipher; dconf->cipher_set = 1; return NULL; } static const command_rec session_crypto_cmds[] = { AP_INIT_ITERATE("SessionCryptoPassphrase", set_crypto_passphrase, NULL, RSRC_CONF|OR_AUTHCFG, "The passphrase(s) used to encrypt the session. First will be used for encryption, all phrases will be accepted for decryption"), AP_INIT_TAKE1("SessionCryptoPassphraseFile", set_crypto_passphrase_file, NULL, RSRC_CONF|ACCESS_CONF, "File containing passphrase(s) used to encrypt the session, one per line. First will be used for encryption, all phrases will be accepted for decryption"), AP_INIT_TAKE1("SessionCryptoCipher", set_crypto_cipher, NULL, RSRC_CONF|OR_AUTHCFG, "The underlying crypto cipher to use"), AP_INIT_RAW_ARGS("SessionCryptoDriver", set_crypto_driver, NULL, RSRC_CONF, "The underlying crypto library driver to use"), { NULL } }; static void register_hooks(apr_pool_t * p) { ap_hook_session_encode(session_crypto_encode, NULL, NULL, APR_HOOK_LAST); ap_hook_session_decode(session_crypto_decode, NULL, NULL, APR_HOOK_FIRST); ap_hook_post_config(session_crypto_init, NULL, NULL, APR_HOOK_LAST); } AP_DECLARE_MODULE(session_crypto) = { STANDARD20_MODULE_STUFF, create_session_crypto_dir_config, /* dir config creater */ merge_session_crypto_dir_config, /* dir merger --- default is to override */ create_session_crypto_config, /* server config */ NULL, /* merge server config */ session_crypto_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; #endif httpd-2.4.41/modules/session/mod_session.c0000644000000000000500000005447113523247020017066 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_session.h" #include "apr_lib.h" #include "apr_strings.h" #include "util_filter.h" #include "http_log.h" #include "http_request.h" #include "http_protocol.h" #define SESSION_EXPIRY "expiry" #define HTTP_SESSION "HTTP_SESSION" APR_HOOK_STRUCT( APR_HOOK_LINK(session_load) APR_HOOK_LINK(session_save) APR_HOOK_LINK(session_encode) APR_HOOK_LINK(session_decode) ) APR_IMPLEMENT_EXTERNAL_HOOK_RUN_FIRST(ap, SESSION, int, session_load, (request_rec * r, session_rec ** z), (r, z), DECLINED) APR_IMPLEMENT_EXTERNAL_HOOK_RUN_FIRST(ap, SESSION, int, session_save, (request_rec * r, session_rec * z), (r, z), DECLINED) APR_IMPLEMENT_EXTERNAL_HOOK_RUN_ALL(ap, SESSION, int, session_encode, (request_rec * r, session_rec * z), (r, z), OK, DECLINED) APR_IMPLEMENT_EXTERNAL_HOOK_RUN_ALL(ap, SESSION, int, session_decode, (request_rec * r, session_rec * z), (r, z), OK, DECLINED) static int session_identity_encode(request_rec * r, session_rec * z); static int session_identity_decode(request_rec * r, session_rec * z); static int session_fixups(request_rec * r); /** * Should the session be included within this URL. * * This function tests whether a session is valid for this URL. It uses the * include and exclude arrays to determine whether they should be included. */ static int session_included(request_rec * r, session_dir_conf * conf) { const char **includes = (const char **) conf->includes->elts; const char **excludes = (const char **) conf->excludes->elts; int included = 1; /* defaults to included */ int i; if (conf->includes->nelts) { included = 0; for (i = 0; !included && i < conf->includes->nelts; i++) { const char *include = includes[i]; if (strncmp(r->uri, include, strlen(include)) == 0) { included = 1; } } } if (conf->excludes->nelts) { for (i = 0; included && i < conf->excludes->nelts; i++) { const char *exclude = excludes[i]; if (strncmp(r->uri, exclude, strlen(exclude)) == 0) { included = 0; } } } return included; } /** * Load the session. * * If the session doesn't exist, a blank one will be created. * * @param r The request * @param z A pointer to where the session will be written. */ static apr_status_t ap_session_load(request_rec * r, session_rec ** z) { session_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &session_module); apr_time_t now; session_rec *zz = NULL; int rv = 0; /* is the session enabled? */ if (!dconf || !dconf->enabled) { return APR_SUCCESS; } /* should the session be loaded at all? */ if (!session_included(r, dconf)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01814) "excluded by configuration for: %s", r->uri); return APR_SUCCESS; } /* load the session from the session hook */ rv = ap_run_session_load(r, &zz); if (DECLINED == rv) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01815) "session is enabled but no session modules have been configured, " "session not loaded: %s", r->uri); return APR_EGENERAL; } else if (OK != rv) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01816) "error while loading the session, " "session not loaded: %s", r->uri); return rv; } /* found a session that hasn't expired? */ now = apr_time_now(); if (zz) { /* load the session attibutes */ rv = ap_run_session_decode(r, zz); /* having a session we cannot decode is just as good as having none at all */ if (OK != rv) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01817) "error while decoding the session, " "session not loaded: %s", r->uri); zz = NULL; } /* invalidate session if session is expired */ if (zz && zz->expiry && zz->expiry < now) { zz = NULL; } } /* no luck, create a blank session */ if (!zz) { zz = (session_rec *) apr_pcalloc(r->pool, sizeof(session_rec)); zz->pool = r->pool; zz->entries = apr_table_make(zz->pool, 10); } /* make sure the expiry and maxage are set, if present */ if (dconf->maxage) { if (!zz->expiry) { zz->expiry = now + dconf->maxage * APR_USEC_PER_SEC; } zz->maxage = dconf->maxage; } *z = zz; return APR_SUCCESS; } /** * Save the session. * * In most implementations the session is only saved if the dirty flag is * true. This prevents the session being saved unnecessarily. * * @param r The request * @param z A pointer to where the session will be written. */ static apr_status_t ap_session_save(request_rec * r, session_rec * z) { if (z) { apr_time_t now = apr_time_now(); apr_time_t initialExpiry = z->expiry; int rv = 0; session_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &session_module); /* sanity checks, should we try save at all? */ if (z->written) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01818) "attempt made to save the session twice, " "session not saved: %s", r->uri); return APR_EGENERAL; } if (z->expiry && z->expiry < now) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01819) "attempt made to save a session when the session had already expired, " "session not saved: %s", r->uri); return APR_EGENERAL; } /* reset the expiry back to maxage, if the expiry is present */ if (dconf->maxage) { z->expiry = now + dconf->maxage * APR_USEC_PER_SEC; z->maxage = dconf->maxage; } /* reset the expiry before saving if present */ if (z->dirty && z->maxage) { z->expiry = now + z->maxage * APR_USEC_PER_SEC; } /* don't save if the only change is the expiry by a small amount */ if (!z->dirty && dconf->expiry_update_time && (z->expiry - initialExpiry < dconf->expiry_update_time)) { return APR_SUCCESS; } /* also don't save sessions that didn't change at all */ if (!z->dirty && !z->maxage) { return APR_SUCCESS; } /* encode the session */ rv = ap_run_session_encode(r, z); if (OK != rv) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01820) "error while encoding the session, " "session not saved: %s", r->uri); return rv; } /* try the save */ rv = ap_run_session_save(r, z); if (DECLINED == rv) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01821) "session is enabled but no session modules have been configured, " "session not saved: %s", r->uri); return APR_EGENERAL; } else if (OK != rv) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01822) "error while saving the session, " "session not saved: %s", r->uri); return rv; } else { z->written = 1; } } return APR_SUCCESS; } /** * Get a particular value from the session. * @param r The current request. * @param z The current session. If this value is NULL, the session will be * looked up in the request, created if necessary, and saved to the request * notes. * @param key The key to get. * @param value The buffer to write the value to. */ static apr_status_t ap_session_get(request_rec * r, session_rec * z, const char *key, const char **value) { if (!z) { apr_status_t rv; rv = ap_session_load(r, &z); if (APR_SUCCESS != rv) { return rv; } } if (z && z->entries) { *value = apr_table_get(z->entries, key); } return OK; } /** * Set a particular value to the session. * * Using this method ensures that the dirty flag is set correctly, so that * the session can be saved efficiently. * @param r The current request. * @param z The current session. If this value is NULL, the session will be * looked up in the request, created if necessary, and saved to the request * notes. * @param key The key to set. The existing key value will be replaced. * @param value The value to set. */ static apr_status_t ap_session_set(request_rec * r, session_rec * z, const char *key, const char *value) { if (!z) { apr_status_t rv; rv = ap_session_load(r, &z); if (APR_SUCCESS != rv) { return rv; } } if (z) { if (value) { apr_table_set(z->entries, key, value); } else { apr_table_unset(z->entries, key); } z->dirty = 1; } return APR_SUCCESS; } static int identity_count(void *v, const char *key, const char *val) { int *count = v; *count += strlen(key) * 3 + strlen(val) * 3 + 1; return 1; } static int identity_concat(void *v, const char *key, const char *val) { char *slider = v; int length = strlen(slider); slider += length; if (length) { *slider = '&'; slider++; } ap_escape_urlencoded_buffer(slider, key); slider += strlen(slider); *slider = '='; slider++; ap_escape_urlencoded_buffer(slider, val); return 1; } /** * Default identity encoding for the session. * * By default, the name value pairs in the session are URLEncoded, separated * by equals, and then in turn separated by ampersand, in the format of an * html form. * * This was chosen to make it easy for external code to unpack a session, * should there be a need to do so. * * @param r The request pointer. * @param z A pointer to where the session will be written. */ static apr_status_t session_identity_encode(request_rec * r, session_rec * z) { char *buffer = NULL; int length = 0; if (z->expiry) { char *expiry = apr_psprintf(z->pool, "%" APR_INT64_T_FMT, z->expiry); apr_table_setn(z->entries, SESSION_EXPIRY, expiry); } apr_table_do(identity_count, &length, z->entries, NULL); buffer = apr_pcalloc(r->pool, length + 1); apr_table_do(identity_concat, buffer, z->entries, NULL); z->encoded = buffer; return OK; } /** * Default identity decoding for the session. * * By default, the name value pairs in the session are URLEncoded, separated * by equals, and then in turn separated by ampersand, in the format of an * html form. * * This was chosen to make it easy for external code to unpack a session, * should there be a need to do so. * * This function reverses that process, and populates the session table. * * Name / value pairs that are not encoded properly are ignored. * * @param r The request pointer. * @param z A pointer to where the session will be written. */ static apr_status_t session_identity_decode(request_rec * r, session_rec * z) { char *last = NULL; char *encoded, *pair; const char *sep = "&"; /* sanity check - anything to decode? */ if (!z->encoded) { return OK; } /* decode what we have */ encoded = apr_pstrdup(r->pool, z->encoded); pair = apr_strtok(encoded, sep, &last); while (pair && pair[0]) { char *plast = NULL; const char *psep = "="; char *key = apr_strtok(pair, psep, &plast); char *val = apr_strtok(NULL, psep, &plast); if (key && *key) { if (!val || !*val) { apr_table_unset(z->entries, key); } else if (!ap_unescape_urlencoded(key) && !ap_unescape_urlencoded(val)) { if (!strcmp(SESSION_EXPIRY, key)) { z->expiry = (apr_time_t) apr_atoi64(val); } else { apr_table_set(z->entries, key, val); } } } pair = apr_strtok(NULL, sep, &last); } z->encoded = NULL; return OK; } /** * Ensure any changes to the session are committed. * * This is done in an output filter so that our options for where to * store the session can include storing the session within a cookie: * As an HTTP header, the cookie must be set before the output is * written, but after the handler is run. * * NOTE: It is possible for internal redirects to cause more than one * request to be present, and each request might have a session * defined. We need to go through each session in turn, and save each * one. * * The same session might appear in more than one request. The first * attempt to save the session will be called */ static apr_status_t session_output_filter(ap_filter_t * f, apr_bucket_brigade * in) { /* save all the sessions in all the requests */ request_rec *r = f->r->main; if (!r) { r = f->r; } while (r) { session_rec *z = NULL; session_dir_conf *conf = ap_get_module_config(r->per_dir_config, &session_module); /* load the session, or create one if necessary */ /* when unset or on error, z will be NULL */ ap_session_load(r, &z); if (!z || z->written) { r = r->next; continue; } /* if a header was specified, insert the new values from the header */ if (conf->header_set) { const char *override = apr_table_get(r->err_headers_out, conf->header); if (!override) { override = apr_table_get(r->headers_out, conf->header); } if (override) { apr_table_unset(r->err_headers_out, conf->header); apr_table_unset(r->headers_out, conf->header); z->encoded = override; z->dirty = 1; session_identity_decode(r, z); } } /* save away the session, and we're done */ /* when unset or on error, we've complained to the log */ ap_session_save(r, z); r = r->next; } /* remove ourselves from the filter chain */ ap_remove_output_filter(f); /* send the data up the stack */ return ap_pass_brigade(f->next, in); } /** * Insert the output filter. */ static void session_insert_output_filter(request_rec * r) { ap_add_output_filter("MOD_SESSION_OUT", NULL, r, r->connection); } /** * Fixups hook. * * Load the session within a fixup - this ensures that the session is * properly loaded prior to the handler being called. * * The fixup is also responsible for injecting the session into the CGI * environment, should the admin have configured it so. * * @param r The request */ static int session_fixups(request_rec * r) { session_dir_conf *conf = ap_get_module_config(r->per_dir_config, &session_module); session_rec *z = NULL; /* if an error occurs or no session has been configured, we ignore * the broken session and allow it to be recreated from scratch on save * if necessary. */ ap_session_load(r, &z); if (conf->env) { if (z) { session_identity_encode(r, z); if (z->encoded) { apr_table_set(r->subprocess_env, HTTP_SESSION, z->encoded); z->encoded = NULL; } } apr_table_unset(r->headers_in, "Session"); } return OK; } static void *create_session_dir_config(apr_pool_t * p, char *dummy) { session_dir_conf *new = (session_dir_conf *) apr_pcalloc(p, sizeof(session_dir_conf)); new->includes = apr_array_make(p, 10, sizeof(const char **)); new->excludes = apr_array_make(p, 10, sizeof(const char **)); return (void *) new; } static void *merge_session_dir_config(apr_pool_t * p, void *basev, void *addv) { session_dir_conf *new = (session_dir_conf *) apr_pcalloc(p, sizeof(session_dir_conf)); session_dir_conf *add = (session_dir_conf *) addv; session_dir_conf *base = (session_dir_conf *) basev; new->enabled = (add->enabled_set == 0) ? base->enabled : add->enabled; new->enabled_set = add->enabled_set || base->enabled_set; new->maxage = (add->maxage_set == 0) ? base->maxage : add->maxage; new->maxage_set = add->maxage_set || base->maxage_set; new->header = (add->header_set == 0) ? base->header : add->header; new->header_set = add->header_set || base->header_set; new->env = (add->env_set == 0) ? base->env : add->env; new->env_set = add->env_set || base->env_set; new->includes = apr_array_append(p, base->includes, add->includes); new->excludes = apr_array_append(p, base->excludes, add->excludes); new->expiry_update_time = (add->expiry_update_set == 0) ? base->expiry_update_time : add->expiry_update_time; new->expiry_update_set = add->expiry_update_set || base->expiry_update_set; return new; } static const char * set_session_enable(cmd_parms * parms, void *dconf, int flag) { session_dir_conf *conf = dconf; conf->enabled = flag; conf->enabled_set = 1; return NULL; } static const char * set_session_maxage(cmd_parms * parms, void *dconf, const char *arg) { session_dir_conf *conf = dconf; conf->maxage = atol(arg); conf->maxage_set = 1; return NULL; } static const char * set_session_header(cmd_parms * parms, void *dconf, const char *arg) { session_dir_conf *conf = dconf; conf->header = arg; conf->header_set = 1; return NULL; } static const char * set_session_env(cmd_parms * parms, void *dconf, int flag) { session_dir_conf *conf = dconf; conf->env = flag; conf->env_set = 1; return NULL; } static const char *add_session_include(cmd_parms * cmd, void *dconf, const char *f) { session_dir_conf *conf = dconf; const char **new = apr_array_push(conf->includes); *new = f; return NULL; } static const char *add_session_exclude(cmd_parms * cmd, void *dconf, const char *f) { session_dir_conf *conf = dconf; const char **new = apr_array_push(conf->excludes); *new = f; return NULL; } static const char * set_session_expiry_update(cmd_parms * parms, void *dconf, const char *arg) { session_dir_conf *conf = dconf; conf->expiry_update_time = atoi(arg); if (conf->expiry_update_time < 0) { return "SessionExpiryUpdateInterval must be positive or nul"; } conf->expiry_update_time = apr_time_from_sec(conf->expiry_update_time); conf->expiry_update_set = 1; return NULL; } static const command_rec session_cmds[] = { AP_INIT_FLAG("Session", set_session_enable, NULL, RSRC_CONF|OR_AUTHCFG, "on if a session should be maintained for these URLs"), AP_INIT_TAKE1("SessionMaxAge", set_session_maxage, NULL, RSRC_CONF|OR_AUTHCFG, "length of time for which a session should be valid. Zero to disable"), AP_INIT_TAKE1("SessionHeader", set_session_header, NULL, RSRC_CONF|OR_AUTHCFG, "output header, if present, whose contents will be injected into the session."), AP_INIT_FLAG("SessionEnv", set_session_env, NULL, RSRC_CONF|OR_AUTHCFG, "on if a session should be written to the CGI environment. Defaults to off"), AP_INIT_TAKE1("SessionInclude", add_session_include, NULL, RSRC_CONF|OR_AUTHCFG, "URL prefixes to include in the session. Defaults to all URLs"), AP_INIT_TAKE1("SessionExclude", add_session_exclude, NULL, RSRC_CONF|OR_AUTHCFG, "URL prefixes to exclude from the session. Defaults to no URLs"), AP_INIT_TAKE1("SessionExpiryUpdateInterval", set_session_expiry_update, NULL, RSRC_CONF|OR_AUTHCFG, "time interval for which a session's expiry time may change " "without having to be rewritten. Zero to disable"), {NULL} }; static void register_hooks(apr_pool_t * p) { ap_register_output_filter("MOD_SESSION_OUT", session_output_filter, NULL, AP_FTYPE_CONTENT_SET); ap_hook_insert_filter(session_insert_output_filter, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_insert_error_filter(session_insert_output_filter, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_fixups(session_fixups, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_session_encode(session_identity_encode, NULL, NULL, APR_HOOK_REALLY_FIRST); ap_hook_session_decode(session_identity_decode, NULL, NULL, APR_HOOK_REALLY_LAST); APR_REGISTER_OPTIONAL_FN(ap_session_get); APR_REGISTER_OPTIONAL_FN(ap_session_set); APR_REGISTER_OPTIONAL_FN(ap_session_load); APR_REGISTER_OPTIONAL_FN(ap_session_save); } AP_DECLARE_MODULE(session) = { STANDARD20_MODULE_STUFF, create_session_dir_config, /* dir config creater */ merge_session_dir_config, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ session_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/session/NWGNUmakefile0000644000000000000500000001056212143211133016701 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # ifneq "$(MAKECMDGOALS)" "clean" ifneq "$(findstring clobber_,$(MAKECMDGOALS))" "clobber_" APU_HAVE_CRYPTO = $(shell $(AWK) '/^\#define APU_HAVE_CRYPTO/{print $$3}' $(APRUTIL)/include/apu.h) endif endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/session.nlm \ $(OBJDIR)/session_cookie.nlm \ $(OBJDIR)/session_dbd.nlm \ $(EOLIST) # If the APU library has cryptp API then build the mod_session_crypto module ifeq "$(APU_HAVE_CRYPTO)" "1" TARGET_nlm += $(OBJDIR)/session_crypto.nlm endif # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/session/mod_session_dbd.dsp0000644000000000000500000001105311022367030020224 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_session_dbd" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_session_dbd - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_session_dbd.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_session_dbd.mak" CFG="mod_session_dbd - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_session_dbd - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_session_dbd - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_session_dbd - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../database" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_session_dbd_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_session_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_session_dbd.so" /d LONG_NAME="session_dbd_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_session_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session_dbd.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_session_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session_dbd.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_session_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_session_dbd - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../database" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_session_dbd_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_session_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_session_dbd.so" /d LONG_NAME="session_dbd_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_session_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session_dbd.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_session_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_session_dbd.so # Begin Special Build Tool TargetPath=.\Debug\mod_session_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_session_dbd - Win32 Release" # Name "mod_session_dbd - Win32 Debug" # Begin Source File SOURCE=.\mod_session_dbd.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/session/mod_session.h0000644000000000000500000001516013523247020017063 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef MOD_SESSION_H #define MOD_SESSION_H /* Create a set of SESSION_DECLARE(type), SESSION_DECLARE_NONSTD(type) and * SESSION_DECLARE_DATA with appropriate export and import tags for the platform */ #if !defined(WIN32) #define SESSION_DECLARE(type) type #define SESSION_DECLARE_NONSTD(type) type #define SESSION_DECLARE_DATA #elif defined(SESSION_DECLARE_STATIC) #define SESSION_DECLARE(type) type __stdcall #define SESSION_DECLARE_NONSTD(type) type #define SESSION_DECLARE_DATA #elif defined(SESSION_DECLARE_EXPORT) #define SESSION_DECLARE(type) __declspec(dllexport) type __stdcall #define SESSION_DECLARE_NONSTD(type) __declspec(dllexport) type #define SESSION_DECLARE_DATA __declspec(dllexport) #else #define SESSION_DECLARE(type) __declspec(dllimport) type __stdcall #define SESSION_DECLARE_NONSTD(type) __declspec(dllimport) type #define SESSION_DECLARE_DATA __declspec(dllimport) #endif /** * @file mod_session.h * @brief Session Module for Apache * * @defgroup MOD_SESSION mod_session * @ingroup APACHE_MODS * @{ */ #include "apr_hooks.h" #include "apr_optional.h" #include "apr_tables.h" #include "apr_uuid.h" #include "apr_pools.h" #include "apr_time.h" #include "httpd.h" #include "http_config.h" #include "ap_config.h" #define MOD_SESSION_NOTES_KEY "mod_session_key" /** * Define the name of a username stored in the session, so that modules interested * in the username can find it in a standard place. */ #define MOD_SESSION_USER "user" /** * Define the name of a password stored in the session, so that modules interested * in the password can find it in a standard place. */ #define MOD_SESSION_PW "pw" /** * A session structure. * * At the core of the session is a set of name value pairs making up the * session. * * The session might be uniquely identified by an anonymous uuid, or * a remote_user value, or both. */ typedef struct { apr_pool_t *pool; /* pool to be used for this session */ apr_uuid_t *uuid; /* anonymous uuid of this particular session */ const char *remote_user; /* user who owns this particular session */ apr_table_t *entries; /* key value pairs */ const char *encoded; /* the encoded version of the key value pairs */ apr_time_t expiry; /* if > 0, the time of expiry of this session */ long maxage; /* if > 0, the maxage of the session, from * which expiry is calculated */ int dirty; /* dirty flag */ int cached; /* true if this session was loaded from a * cache of some kind */ int written; /* true if this session has already been * written */ } session_rec; /** * Structure to carry the per-dir session config. */ typedef struct { int enabled; /* whether the session has been enabled for * this directory */ int enabled_set; long maxage; /* seconds until session expiry */ int maxage_set; const char *header; /* header to inject session */ int header_set; int env; /* whether the session has been enabled for * this directory */ int env_set; apr_array_header_t *includes; /* URL prefixes to be included. All * URLs included if empty */ apr_array_header_t *excludes; /* URL prefixes to be excluded. No * URLs excluded if empty */ apr_time_t expiry_update_time; /* seconds the session expiry may change and * not have to be rewritten */ int expiry_update_set; } session_dir_conf; /** * Hook to load the session. * * If the session doesn't exist, a blank one will be created. * * @param r The request * @param z A pointer to where the session will be written. */ APR_DECLARE_EXTERNAL_HOOK(ap, SESSION, apr_status_t, session_load, (request_rec * r, session_rec ** z)) /** * Hook to save the session. * * In most implementations the session is only saved if the dirty flag is * true. This prevents the session being saved unnecessarily. * * @param r The request * @param z A pointer to where the session will be written. */ APR_DECLARE_EXTERNAL_HOOK(ap, SESSION, apr_status_t, session_save, (request_rec * r, session_rec * z)) /** * Hook to encode the session. * * In the default implementation, the key value pairs are encoded using * key value pairs separated by equals, in turn separated by ampersand, * like a web form. * * @param r The request * @param z A pointer to where the session will be written. */ APR_DECLARE_EXTERNAL_HOOK(ap, SESSION, apr_status_t, session_encode, (request_rec * r, session_rec * z)) /** * Hook to decode the session. * * In the default implementation, the key value pairs are encoded using * key value pairs separated by equals, in turn separated by ampersand, * like a web form. * * @param r The request * @param z A pointer to where the session will be written. */ APR_DECLARE_EXTERNAL_HOOK(ap, SESSION, apr_status_t, session_decode, (request_rec * r, session_rec * z)) APR_DECLARE_OPTIONAL_FN( apr_status_t, ap_session_get, (request_rec * r, session_rec * z, const char *key, const char **value)); APR_DECLARE_OPTIONAL_FN(apr_status_t, ap_session_set, (request_rec * r, session_rec * z, const char *key, const char *value)); APR_DECLARE_OPTIONAL_FN(apr_status_t, ap_session_load, (request_rec *, session_rec **)); APR_DECLARE_OPTIONAL_FN(apr_status_t, ap_session_save, (request_rec *, session_rec *)); /** * The name of the module. */ extern module AP_MODULE_DECLARE_DATA session_module; #endif /* MOD_SESSION_H */ /** @} */ httpd-2.4.41/modules/session/NWGNUsession0000644000000000000500000001034211653006502016612 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(SRC)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = session # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Session Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Session Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_session.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ session_module \ ap_hook_session_decode \ ap_hook_session_encode \ ap_hook_session_load \ ap_hook_session_save \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/session/config.m40000644000000000000500000000433012006475430016077 0ustar rootsrcdnl modules enabled in this directory by default if test -z "$enable_session" ; then session_mods_enable=most else session_mods_enable=$enable_session fi dnl Session dnl APACHE_MODULE(name, helptext[, objects[, structname[, default[, config]]]]) APACHE_MODPATH_INIT(session) dnl Session modules; modules that are capable of storing key value pairs in dnl various places, such as databases, LDAP, or cookies. dnl session_cookie_objects='mod_session_cookie.lo' session_crypto_objects='mod_session_crypto.lo' session_dbd_objects='mod_session_dbd.lo' case "$host" in *os2*) # OS/2 DLLs must resolve all symbols at build time # and we need some from main session module session_cookie_objects="$session_cookie_objects mod_session.la" session_crypto_objects="$session_crypto_objects mod_session.la" session_dbd_objects="$session_dbd_objects mod_session.la" ;; esac APACHE_MODULE(session, session module, , , most) APACHE_MODULE(session_cookie, session cookie module, $session_cookie_objects, , $session_mods_enable,,session) if test "$enable_session_crypto" != ""; then session_mods_enable_crypto=$enable_session_crypto else session_mods_enable_crypto=$session_mods_enable fi if test "$session_mods_enable_crypto" != "no"; then saved_CPPFLAGS="$CPPFLAGS" CPPFLAGS="$CPPFLAGS $APR_INCLUDES $APU_INCLUDES" AC_TRY_COMPILE([#include ],[ #if APU_HAVE_CRYPTO == 0 #error no crypto support #endif ], [ap_HAVE_APR_CRYPTO="yes"], [ap_HAVE_APR_CRYPTO="no"]) CPPFLAGS="$saved_CPPFLAGS" if test $ap_HAVE_APR_CRYPTO = "no"; then AC_MSG_WARN([Your APR does not include SSL/EVP support. To enable it: configure --with-crypto]) if test "$enable_session_crypto" != "" -a "$enable_session_crypto" != "no"; then AC_MSG_ERROR([mod_session_crypto cannot be enabled]) fi session_mods_enable_crypto="no" fi fi APACHE_MODULE(session_crypto, session crypto module, $session_crypto_objects, , $session_mods_enable_crypto, [ if test "$session_mods_enable_crypto" = "no" ; then enable_session_crypto=no fi ],session) APACHE_MODULE(session_dbd, session dbd module, $session_dbd_objects, , $session_mods_enable,,session) APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) APACHE_MODPATH_FINISH httpd-2.4.41/modules/session/mod_session_crypto.mak0000644000000000000500000002643412701473373021023 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_session_crypto.dsp !IF "$(CFG)" == "" CFG=mod_session_crypto - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_session_crypto - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_session_crypto - Win32 Release" && "$(CFG)" != "mod_session_crypto - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_session_crypto.mak" CFG="mod_session_crypto - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_session_crypto - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_session_crypto - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_session_crypto - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_session_crypto.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_session - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_session_crypto.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_session - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_session_crypto.obj" -@erase "$(INTDIR)\mod_session_crypto.res" -@erase "$(INTDIR)\mod_session_crypto_src.idb" -@erase "$(INTDIR)\mod_session_crypto_src.pdb" -@erase "$(OUTDIR)\mod_session_crypto.exp" -@erase "$(OUTDIR)\mod_session_crypto.lib" -@erase "$(OUTDIR)\mod_session_crypto.pdb" -@erase "$(OUTDIR)\mod_session_crypto.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_session_crypto_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_session_crypto.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_session_crypto.so" /d LONG_NAME="session_crypto_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_session_crypto.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_session_crypto.pdb" /debug /out:"$(OUTDIR)\mod_session_crypto.so" /implib:"$(OUTDIR)\mod_session_crypto.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_session_crypto.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_session_crypto.obj" \ "$(INTDIR)\mod_session_crypto.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_session.lib" "$(OUTDIR)\mod_session_crypto.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_session_crypto.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_session_crypto.so" if exist .\Release\mod_session_crypto.so.manifest mt.exe -manifest .\Release\mod_session_crypto.so.manifest -outputresource:.\Release\mod_session_crypto.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_session_crypto - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_session_crypto.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_session - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_session_crypto.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_session - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_session_crypto.obj" -@erase "$(INTDIR)\mod_session_crypto.res" -@erase "$(INTDIR)\mod_session_crypto_src.idb" -@erase "$(INTDIR)\mod_session_crypto_src.pdb" -@erase "$(OUTDIR)\mod_session_crypto.exp" -@erase "$(OUTDIR)\mod_session_crypto.lib" -@erase "$(OUTDIR)\mod_session_crypto.pdb" -@erase "$(OUTDIR)\mod_session_crypto.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_session_crypto_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_session_crypto.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_session_crypto.so" /d LONG_NAME="session_crypto_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_session_crypto.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_session_crypto.pdb" /debug /out:"$(OUTDIR)\mod_session_crypto.so" /implib:"$(OUTDIR)\mod_session_crypto.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_session_crypto.so LINK32_OBJS= \ "$(INTDIR)\mod_session_crypto.obj" \ "$(INTDIR)\mod_session_crypto.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_session.lib" "$(OUTDIR)\mod_session_crypto.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_session_crypto.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_session_crypto.so" if exist .\Debug\mod_session_crypto.so.manifest mt.exe -manifest .\Debug\mod_session_crypto.so.manifest -outputresource:.\Debug\mod_session_crypto.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_session_crypto.dep") !INCLUDE "mod_session_crypto.dep" !ELSE !MESSAGE Warning: cannot find "mod_session_crypto.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_session_crypto - Win32 Release" || "$(CFG)" == "mod_session_crypto - Win32 Debug" !IF "$(CFG)" == "mod_session_crypto - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\session" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\session" !ELSEIF "$(CFG)" == "mod_session_crypto - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\session" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\session" !ENDIF !IF "$(CFG)" == "mod_session_crypto - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\session" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\session" !ELSEIF "$(CFG)" == "mod_session_crypto - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\session" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\session" !ENDIF !IF "$(CFG)" == "mod_session_crypto - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\session" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\session" !ELSEIF "$(CFG)" == "mod_session_crypto - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\session" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\session" !ENDIF !IF "$(CFG)" == "mod_session_crypto - Win32 Release" "mod_session - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_session.mak" CFG="mod_session - Win32 Release" cd "." "mod_session - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_session.mak" CFG="mod_session - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_session_crypto - Win32 Debug" "mod_session - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_session.mak" CFG="mod_session - Win32 Debug" cd "." "mod_session - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_session.mak" CFG="mod_session - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_session_crypto - Win32 Release" "$(INTDIR)\mod_session_crypto.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_session_crypto.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_session_crypto.so" /d LONG_NAME="session_crypto_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_session_crypto - Win32 Debug" "$(INTDIR)\mod_session_crypto.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_session_crypto.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_session_crypto.so" /d LONG_NAME="session_crypto_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_session_crypto.c "$(INTDIR)\mod_session_crypto.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/session/mod_session.dep0000644000000000000500000000376512674411515017424 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_session.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_session.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_session.h"\ httpd-2.4.41/modules/session/mod_session_dbd.dep0000644000000000000500000000420212674411515020220 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_session_dbd.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_session_dbd.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\mpm_common.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_cookies.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_dbd.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\database\mod_dbd.h"\ ".\mod_session.h"\ httpd-2.4.41/modules/session/NWGNUsession_crypto0000644000000000000500000001041711653006502020215 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(SRC)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = session_crypto # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Session Crypto Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = SessionCrypto Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_session_crypto.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ session \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ ap_hook_session_decode \ ap_hook_session_encode \ ap_hook_session_load \ ap_hook_session_save \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ session_crypto_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/session/mod_session_cookie.mak0000644000000000000500000002643412701473373020754 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_session_cookie.dsp !IF "$(CFG)" == "" CFG=mod_session_cookie - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_session_cookie - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_session_cookie - Win32 Release" && "$(CFG)" != "mod_session_cookie - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_session_cookie.mak" CFG="mod_session_cookie - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_session_cookie - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_session_cookie - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_session_cookie - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_session_cookie.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_session - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_session_cookie.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_session - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_session_cookie.obj" -@erase "$(INTDIR)\mod_session_cookie.res" -@erase "$(INTDIR)\mod_session_cookie_src.idb" -@erase "$(INTDIR)\mod_session_cookie_src.pdb" -@erase "$(OUTDIR)\mod_session_cookie.exp" -@erase "$(OUTDIR)\mod_session_cookie.lib" -@erase "$(OUTDIR)\mod_session_cookie.pdb" -@erase "$(OUTDIR)\mod_session_cookie.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_session_cookie_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_session_cookie.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_session_cookie.so" /d LONG_NAME="session_cookie_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_session_cookie.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_session_cookie.pdb" /debug /out:"$(OUTDIR)\mod_session_cookie.so" /implib:"$(OUTDIR)\mod_session_cookie.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_session_cookie.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_session_cookie.obj" \ "$(INTDIR)\mod_session_cookie.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_session.lib" "$(OUTDIR)\mod_session_cookie.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_session_cookie.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_session_cookie.so" if exist .\Release\mod_session_cookie.so.manifest mt.exe -manifest .\Release\mod_session_cookie.so.manifest -outputresource:.\Release\mod_session_cookie.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_session_cookie - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_session_cookie.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_session - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_session_cookie.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_session - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_session_cookie.obj" -@erase "$(INTDIR)\mod_session_cookie.res" -@erase "$(INTDIR)\mod_session_cookie_src.idb" -@erase "$(INTDIR)\mod_session_cookie_src.pdb" -@erase "$(OUTDIR)\mod_session_cookie.exp" -@erase "$(OUTDIR)\mod_session_cookie.lib" -@erase "$(OUTDIR)\mod_session_cookie.pdb" -@erase "$(OUTDIR)\mod_session_cookie.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_session_cookie_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_session_cookie.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_session_cookie.so" /d LONG_NAME="session_cookie_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_session_cookie.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_session_cookie.pdb" /debug /out:"$(OUTDIR)\mod_session_cookie.so" /implib:"$(OUTDIR)\mod_session_cookie.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_session_cookie.so LINK32_OBJS= \ "$(INTDIR)\mod_session_cookie.obj" \ "$(INTDIR)\mod_session_cookie.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_session.lib" "$(OUTDIR)\mod_session_cookie.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_session_cookie.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_session_cookie.so" if exist .\Debug\mod_session_cookie.so.manifest mt.exe -manifest .\Debug\mod_session_cookie.so.manifest -outputresource:.\Debug\mod_session_cookie.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_session_cookie.dep") !INCLUDE "mod_session_cookie.dep" !ELSE !MESSAGE Warning: cannot find "mod_session_cookie.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_session_cookie - Win32 Release" || "$(CFG)" == "mod_session_cookie - Win32 Debug" !IF "$(CFG)" == "mod_session_cookie - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\session" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\session" !ELSEIF "$(CFG)" == "mod_session_cookie - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\session" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\session" !ENDIF !IF "$(CFG)" == "mod_session_cookie - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\session" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\session" !ELSEIF "$(CFG)" == "mod_session_cookie - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\session" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\session" !ENDIF !IF "$(CFG)" == "mod_session_cookie - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\session" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\session" !ELSEIF "$(CFG)" == "mod_session_cookie - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\session" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\session" !ENDIF !IF "$(CFG)" == "mod_session_cookie - Win32 Release" "mod_session - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_session.mak" CFG="mod_session - Win32 Release" cd "." "mod_session - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_session.mak" CFG="mod_session - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_session_cookie - Win32 Debug" "mod_session - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_session.mak" CFG="mod_session - Win32 Debug" cd "." "mod_session - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_session.mak" CFG="mod_session - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_session_cookie - Win32 Release" "$(INTDIR)\mod_session_cookie.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_session_cookie.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_session_cookie.so" /d LONG_NAME="session_cookie_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_session_cookie - Win32 Debug" "$(INTDIR)\mod_session_cookie.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_session_cookie.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_session_cookie.so" /d LONG_NAME="session_cookie_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_session_cookie.c "$(INTDIR)\mod_session_cookie.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/session/Makefile.in0000644000000000000500000000027010776673775016464 0ustar rootsrc# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/filters/0002755000000000000500000000000013523273342014362 5ustar rootsrchttpd-2.4.41/modules/filters/mod_include.dsp0000644000000000000500000001071710551346420017354 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_include" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_include - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_include.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_include.mak" CFG="mod_include - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_include - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_include - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_include - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_include_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_include.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_include.so" /d LONG_NAME="include_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_include.so" /base:@..\..\os\win32\BaseAddr.ref,mod_include.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_include.so" /base:@..\..\os\win32\BaseAddr.ref,mod_include.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_include.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_include - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_include_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_include.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_include.so" /d LONG_NAME="include_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_include.so" /base:@..\..\os\win32\BaseAddr.ref,mod_include.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_include.so" /base:@..\..\os\win32\BaseAddr.ref,mod_include.so # Begin Special Build Tool TargetPath=.\Debug\mod_include.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_include - Win32 Release" # Name "mod_include - Win32 Debug" # Begin Source File SOURCE=.\mod_include.c # End Source File # Begin Source File SOURCE=.\mod_include.h # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/filters/mod_charset_lite.dsp0000644000000000000500000001060710551346420020375 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_charset_lite" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_charset_lite - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_charset_lite.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_charset_lite.mak" CFG="mod_charset_lite - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_charset_lite - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_charset_lite - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_charset_lite - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_charset_lite_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_charset_lite.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_charset_lite.so" /d LONG_NAME="charset_lite_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_charset_lite.so" /base:@..\..\os\win32\BaseAddr.ref,mod_charset_lite.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_charset_lite.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_charset_lite - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_charset_lite_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_charset_lite.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_charset_lite.so" /d LONG_NAME="charset_lite_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_charset_lite.so" /base:@..\..\os\win32\BaseAddr.ref,mod_charset_lite.so # Begin Special Build Tool TargetPath=.\Debug\mod_charset_lite.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_charset_lite - Win32 Release" # Name "mod_charset_lite - Win32 Debug" # Begin Source File SOURCE=.\mod_charset_lite.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/filters/mod_xml2enc.h0000644000000000000500000000440311737125415016743 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef MOD_XML2ENC #define MOD_XML2ENC #define ENCIO_INPUT 0x01 #define ENCIO_OUTPUT 0x02 #define ENCIO_INPUT_CHECKS 0x04 #define ENCIO (ENCIO_INPUT|ENCIO_OUTPUT|ENCIO_INPUT_CHECKS) #define ENCIO_SKIPTO 0x10 /* declarations to deal with WIN32 compile-flag-in-source-code crap */ #if !defined(WIN32) #define XML2ENC_DECLARE(type) type #define XML2ENC_DECLARE_NONSTD(type) type #define XML2ENC_DECLARE_DATA #elif defined(XML2ENC_DECLARE_STATIC) #define XML2ENC_DECLARE(type) type __stdcall #define XML2ENC_DECLARE_NONSTD(type) type #define XML2ENC_DECLARE_DATA #elif defined(XML2ENC_DECLARE_EXPORT) #define XML2ENC_DECLARE(type) __declspec(dllexport) type __stdcall #define XML2ENC_DECLARE_NONSTD(type) __declspec(dllexport) type #define XML2ENC_DECLARE_DATA __declspec(dllexport) #else #define XML2ENC_DECLARE(type) __declspec(dllimport) type __stdcall #define XML2ENC_DECLARE_NONSTD(type) __declspec(dllimport) type #define XML2ENC_DECLARE_DATA __declspec(dllimport) #endif APR_DECLARE_OPTIONAL_FN(apr_status_t, xml2enc_charset, (request_rec* r, xmlCharEncoding* enc, const char** cenc)); APR_DECLARE_OPTIONAL_FN(apr_status_t, xml2enc_filter, (request_rec* r, const char* enc, unsigned int mode)); APR_DECLARE_EXTERNAL_HOOK(xml2enc, XML2ENC, int, preprocess, (ap_filter_t *f, char** bufp, apr_size_t* bytesp)) #endif httpd-2.4.41/modules/filters/mod_buffer.mak0000644000000000000500000002336312701473373017174 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_buffer.dsp !IF "$(CFG)" == "" CFG=mod_buffer - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_buffer - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_buffer - Win32 Release" && "$(CFG)" != "mod_buffer - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_buffer.mak" CFG="mod_buffer - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_buffer - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_buffer - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_buffer - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_buffer.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_buffer.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_buffer.obj" -@erase "$(INTDIR)\mod_buffer.res" -@erase "$(INTDIR)\mod_buffer_src.idb" -@erase "$(INTDIR)\mod_buffer_src.pdb" -@erase "$(OUTDIR)\mod_buffer.exp" -@erase "$(OUTDIR)\mod_buffer.lib" -@erase "$(OUTDIR)\mod_buffer.pdb" -@erase "$(OUTDIR)\mod_buffer.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_buffer_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_buffer.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_buffer.so" /d LONG_NAME="buffer_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_buffer.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_buffer.pdb" /debug /out:"$(OUTDIR)\mod_buffer.so" /implib:"$(OUTDIR)\mod_buffer.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_buffer.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_buffer.obj" \ "$(INTDIR)\mod_buffer.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_buffer.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_buffer.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_buffer.so" if exist .\Release\mod_buffer.so.manifest mt.exe -manifest .\Release\mod_buffer.so.manifest -outputresource:.\Release\mod_buffer.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_buffer - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_buffer.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_buffer.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_buffer.obj" -@erase "$(INTDIR)\mod_buffer.res" -@erase "$(INTDIR)\mod_buffer_src.idb" -@erase "$(INTDIR)\mod_buffer_src.pdb" -@erase "$(OUTDIR)\mod_buffer.exp" -@erase "$(OUTDIR)\mod_buffer.lib" -@erase "$(OUTDIR)\mod_buffer.pdb" -@erase "$(OUTDIR)\mod_buffer.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "HAVE_ZUTIL_H" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_buffer_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_buffer.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_buffer.so" /d LONG_NAME="buffer_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_buffer.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_buffer.pdb" /debug /out:"$(OUTDIR)\mod_buffer.so" /implib:"$(OUTDIR)\mod_buffer.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_buffer.so LINK32_OBJS= \ "$(INTDIR)\mod_buffer.obj" \ "$(INTDIR)\mod_buffer.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_buffer.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_buffer.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_buffer.so" if exist .\Debug\mod_buffer.so.manifest mt.exe -manifest .\Debug\mod_buffer.so.manifest -outputresource:.\Debug\mod_buffer.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_buffer.dep") !INCLUDE "mod_buffer.dep" !ELSE !MESSAGE Warning: cannot find "mod_buffer.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_buffer - Win32 Release" || "$(CFG)" == "mod_buffer - Win32 Debug" !IF "$(CFG)" == "mod_buffer - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_buffer - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_buffer - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_buffer - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_buffer - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_buffer - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_buffer - Win32 Release" "$(INTDIR)\mod_buffer.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_buffer.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_buffer.so" /d LONG_NAME="buffer_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_buffer - Win32 Debug" "$(INTDIR)\mod_buffer.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_buffer.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_buffer.so" /d LONG_NAME="buffer_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_buffer.c "$(INTDIR)\mod_buffer.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/filters/mod_substitute.c0000644000000000000500000007534513303773120017607 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_substitute.c: Perform content rewriting on the fly */ #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "apr_general.h" #include "apr_strings.h" #include "apr_strmatch.h" #include "apr_lib.h" #include "util_filter.h" #include "util_varbuf.h" #include "apr_buckets.h" #include "http_request.h" #define APR_WANT_STRFUNC #include "apr_want.h" /* * We want to limit the memory usage in a way that is predictable. * Therefore we limit the resulting length of the line. * This is the default value. */ #define AP_SUBST_MAX_LINE_LENGTH (1024*1024) static const char substitute_filter_name[] = "SUBSTITUTE"; module AP_MODULE_DECLARE_DATA substitute_module; typedef struct subst_pattern_t { const apr_strmatch_pattern *pattern; const ap_regex_t *regexp; const char *replacement; apr_size_t replen; apr_size_t patlen; int flatten; const char *from; } subst_pattern_t; typedef struct { apr_array_header_t *patterns; apr_size_t max_line_length; int max_line_length_set; int inherit_before; } subst_dir_conf; typedef struct { apr_bucket_brigade *linebb; apr_bucket_brigade *linesbb; apr_bucket_brigade *passbb; apr_bucket_brigade *pattbb; apr_pool_t *tpool; } substitute_module_ctx; static void *create_substitute_dcfg(apr_pool_t *p, char *d) { subst_dir_conf *dcfg = (subst_dir_conf *) apr_palloc(p, sizeof(subst_dir_conf)); dcfg->patterns = apr_array_make(p, 10, sizeof(subst_pattern_t)); dcfg->max_line_length = AP_SUBST_MAX_LINE_LENGTH; dcfg->max_line_length_set = 0; dcfg->inherit_before = -1; return dcfg; } static void *merge_substitute_dcfg(apr_pool_t *p, void *basev, void *overv) { subst_dir_conf *a = (subst_dir_conf *) apr_palloc(p, sizeof(subst_dir_conf)); subst_dir_conf *base = (subst_dir_conf *) basev; subst_dir_conf *over = (subst_dir_conf *) overv; a->inherit_before = (over->inherit_before != -1) ? over->inherit_before : base->inherit_before; /* SubstituteInheritBefore wasn't the default behavior until 2.5.x, * and may be re-disabled as desired; the original default behavior * was to apply inherited subst patterns after locally scoped patterns. * In later 2.2 and 2.4 versions, SubstituteInheritBefore may be toggled * 'on' to follow the corrected/expected behavior, without violating POLS. */ if (a->inherit_before == 1) { a->patterns = apr_array_append(p, base->patterns, over->patterns); } else { a->patterns = apr_array_append(p, over->patterns, base->patterns); } a->max_line_length = over->max_line_length_set ? over->max_line_length : base->max_line_length; a->max_line_length_set = over->max_line_length_set | base->max_line_length_set; return a; } #define AP_MAX_BUCKETS 1000 #define SEDRMPATBCKT(b, offset, tmp_b, patlen) do { \ apr_bucket_split(b, offset); \ tmp_b = APR_BUCKET_NEXT(b); \ apr_bucket_split(tmp_b, patlen); \ b = APR_BUCKET_NEXT(tmp_b); \ apr_bucket_delete(tmp_b); \ } while (0) #define CAP2LINEMAX(n) ((n) < (apr_size_t)200 ? (int)(n) : 200) static apr_status_t do_pattmatch(ap_filter_t *f, apr_bucket *inb, apr_bucket_brigade *mybb, apr_pool_t *pool) { int i; int force_quick = 0; ap_regmatch_t regm[AP_MAX_REG_MATCH]; apr_size_t bytes; apr_size_t len; const char *buff; struct ap_varbuf vb; apr_bucket *b; apr_bucket *tmp_b; subst_dir_conf *cfg = (subst_dir_conf *) ap_get_module_config(f->r->per_dir_config, &substitute_module); subst_pattern_t *script; APR_BRIGADE_INSERT_TAIL(mybb, inb); ap_varbuf_init(pool, &vb, 0); script = (subst_pattern_t *) cfg->patterns->elts; /* * Simple optimization. If we only have one pattern, then * we can safely avoid the overhead of flattening */ if (cfg->patterns->nelts == 1) { force_quick = 1; } for (i = 0; i < cfg->patterns->nelts; i++) { for (b = APR_BRIGADE_FIRST(mybb); b != APR_BRIGADE_SENTINEL(mybb); b = APR_BUCKET_NEXT(b)) { if (APR_BUCKET_IS_METADATA(b)) { /* * we should NEVER see this, because we should never * be passed any, but "handle" it just in case. */ continue; } if (apr_bucket_read(b, &buff, &bytes, APR_BLOCK_READ) == APR_SUCCESS) { int have_match = 0; ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, f->r, "Line read (%" APR_SIZE_T_FMT " bytes): %.*s", bytes, CAP2LINEMAX(bytes), buff); ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, f->r, "Replacing %s:'%s' by '%s'", script->pattern ? "string" : script->regexp ? "regex" : "unknown", script->from, script->replacement); vb.strlen = 0; if (script->pattern) { const char *repl; /* * space_left counts how many bytes we have left until the * line length reaches max_line_length. */ apr_size_t space_left = cfg->max_line_length; apr_size_t repl_len = strlen(script->replacement); while ((repl = apr_strmatch(script->pattern, buff, bytes))) { ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, f->r, "Matching found, result: '%s'", script->replacement); have_match = 1; /* get offset into buff for pattern */ len = (apr_size_t) (repl - buff); if (script->flatten && !force_quick) { /* * We are flattening the buckets here, meaning * that we don't do the fast bucket splits. * Instead we copy over what the buckets would * contain and use them. This is slow, since we * are constanting allocing space and copying * strings. */ if (vb.strlen + len + repl_len > cfg->max_line_length) return APR_ENOMEM; ap_varbuf_strmemcat(&vb, buff, len); ap_varbuf_strmemcat(&vb, script->replacement, repl_len); } else { /* * The string before the match but after the * previous match (if any) has length 'len'. * Check if we still have space for this string and * the replacement string. */ if (space_left < len + repl_len) return APR_ENOMEM; space_left -= len + repl_len; /* * We now split off the string before the match * as its own bucket, then isolate the matched * string and delete it. */ SEDRMPATBCKT(b, len, tmp_b, script->patlen); /* * Finally, we create a bucket that contains the * replacement... */ tmp_b = apr_bucket_transient_create(script->replacement, script->replen, f->r->connection->bucket_alloc); /* ... and insert it */ APR_BUCKET_INSERT_BEFORE(b, tmp_b); } /* now we need to adjust buff for all these changes */ len += script->patlen; bytes -= len; buff += len; } if (have_match) { if (script->flatten && !force_quick) { /* XXX: we should check for AP_MAX_BUCKETS here and * XXX: call ap_pass_brigade accordingly */ char *copy = ap_varbuf_pdup(pool, &vb, NULL, 0, buff, bytes, &len); ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, f->r, "New line (%" APR_SIZE_T_FMT " bytes): %.*s", len, CAP2LINEMAX(len), copy); tmp_b = apr_bucket_pool_create(copy, len, pool, f->r->connection->bucket_alloc); APR_BUCKET_INSERT_BEFORE(b, tmp_b); apr_bucket_delete(b); b = tmp_b; } else { /* * We want the behaviour to be predictable. * Therefore we try to always error out if the * line length is larger than the limit, * regardless of the content of the line. So, * let's check if the remaining non-matching * string does not exceed the limit. */ if (space_left < b->length) return APR_ENOMEM; ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, f->r, "New line (%" APR_SIZE_T_FMT " bytes): %.*s", bytes, CAP2LINEMAX(bytes), buff); } } } else if (script->regexp) { int left = bytes; const char *pos = buff; char *repl; apr_size_t space_left = cfg->max_line_length; while (!ap_regexec_len(script->regexp, pos, left, AP_MAX_REG_MATCH, regm, 0)) { apr_status_t rv; ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, f->r, "Matching found"); have_match = 1; if (script->flatten && !force_quick) { /* check remaining buffer size */ /* Note that the last param in ap_varbuf_regsub below * must stay positive. If it gets 0, it would mean * unlimited space available. */ if (vb.strlen + regm[0].rm_so >= cfg->max_line_length) return APR_ENOMEM; /* copy bytes before the match */ if (regm[0].rm_so > 0) ap_varbuf_strmemcat(&vb, pos, regm[0].rm_so); /* add replacement string, last argument is unsigned! */ rv = ap_varbuf_regsub(&vb, script->replacement, pos, AP_MAX_REG_MATCH, regm, cfg->max_line_length - vb.strlen); if (rv != APR_SUCCESS) return rv; ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, f->r, "Result: '%s'", vb.buf); } else { apr_size_t repl_len; /* acount for string before the match */ if (space_left <= regm[0].rm_so) return APR_ENOMEM; space_left -= regm[0].rm_so; rv = ap_pregsub_ex(pool, &repl, script->replacement, pos, AP_MAX_REG_MATCH, regm, space_left); if (rv != APR_SUCCESS) return rv; repl_len = strlen(repl); space_left -= repl_len; len = (apr_size_t) (regm[0].rm_eo - regm[0].rm_so); SEDRMPATBCKT(b, regm[0].rm_so, tmp_b, len); tmp_b = apr_bucket_transient_create(repl, repl_len, f->r->connection->bucket_alloc); APR_BUCKET_INSERT_BEFORE(b, tmp_b); ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, f->r, "Result: '%s'", repl); } /* * reset to past what we just did. pos now maps to b * again */ pos += regm[0].rm_eo; left -= regm[0].rm_eo; } if (have_match && script->flatten && !force_quick) { char *copy; /* Copy result plus the part after the last match into * a bucket. */ copy = ap_varbuf_pdup(pool, &vb, NULL, 0, pos, left, &len); ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, f->r, "New line (%" APR_SIZE_T_FMT " bytes): %.*s", len, CAP2LINEMAX(len), copy); tmp_b = apr_bucket_pool_create(copy, len, pool, f->r->connection->bucket_alloc); APR_BUCKET_INSERT_BEFORE(b, tmp_b); apr_bucket_delete(b); b = tmp_b; } } else { ap_assert(0); continue; } } } script++; } ap_varbuf_free(&vb); return APR_SUCCESS; } static apr_status_t substitute_filter(ap_filter_t *f, apr_bucket_brigade *bb) { apr_size_t bytes; apr_size_t len; apr_size_t fbytes; const char *buff; const char *nl = NULL; char *bflat; apr_bucket *b; apr_bucket *tmp_b; apr_bucket_brigade *tmp_bb = NULL; apr_status_t rv; subst_dir_conf *cfg = (subst_dir_conf *) ap_get_module_config(f->r->per_dir_config, &substitute_module); substitute_module_ctx *ctx = f->ctx; /* * First time around? Create the saved bb that we used for each pass * through. Note that we can also get here when we explicitly clear ctx, * for error handling */ if (!ctx) { f->ctx = ctx = apr_pcalloc(f->r->pool, sizeof(*ctx)); /* * Create all the temporary brigades we need and reuse them to avoid * creating them over and over again from r->pool which would cost a * lot of memory in some cases. */ ctx->linebb = apr_brigade_create(f->r->pool, f->c->bucket_alloc); ctx->linesbb = apr_brigade_create(f->r->pool, f->c->bucket_alloc); ctx->pattbb = apr_brigade_create(f->r->pool, f->c->bucket_alloc); /* * Everything to be passed to the next filter goes in * here, our pass brigade. */ ctx->passbb = apr_brigade_create(f->r->pool, f->c->bucket_alloc); /* Create our temporary pool only once */ apr_pool_create(&(ctx->tpool), f->r->pool); apr_table_unset(f->r->headers_out, "Content-Length"); } /* * Shortcircuit processing */ if (APR_BRIGADE_EMPTY(bb)) return APR_SUCCESS; /* * Here's the concept: * Read in the data and look for newlines. Once we * find a full "line", add it to our working brigade. * If we've finished reading the brigade and we have * any left over data (not a "full" line), store that * for the next pass. * * Note: anything stored in ctx->linebb for sure does not have * a newline char, so we don't concat that bb with the * new bb, since we would spending time searching for the newline * in data we know it doesn't exist. So instead, we simply scan * our current bb and, if we see a newline, prepend ctx->linebb * to the front of it. This makes the code much less straight- * forward (otherwise we could APR_BRIGADE_CONCAT(ctx->linebb, bb) * and just scan for newlines and not bother with needing to know * when ctx->linebb needs to be reset) but also faster. We'll take * the speed. * * Note: apr_brigade_split_line would be nice here, but we * really can't use it since we need more control and we want * to re-use already read bucket data. * * See mod_include if still confused :) */ while ((b = APR_BRIGADE_FIRST(bb)) && (b != APR_BRIGADE_SENTINEL(bb))) { if (APR_BUCKET_IS_EOS(b)) { /* * if we see the EOS, then we need to pass along everything we * have. But if the ctx->linebb isn't empty, then we need to add * that to the end of what we'll be passing. */ if (!APR_BRIGADE_EMPTY(ctx->linebb)) { rv = apr_brigade_pflatten(ctx->linebb, &bflat, &fbytes, ctx->tpool); if (rv != APR_SUCCESS) goto err; if (fbytes > cfg->max_line_length) { rv = APR_ENOMEM; goto err; } tmp_b = apr_bucket_transient_create(bflat, fbytes, f->r->connection->bucket_alloc); rv = do_pattmatch(f, tmp_b, ctx->pattbb, ctx->tpool); if (rv != APR_SUCCESS) goto err; APR_BRIGADE_CONCAT(ctx->passbb, ctx->pattbb); apr_brigade_cleanup(ctx->linebb); } APR_BUCKET_REMOVE(b); APR_BRIGADE_INSERT_TAIL(ctx->passbb, b); } /* * No need to handle FLUSH buckets separately as we call * ap_pass_brigade anyway at the end of the loop. */ else if (APR_BUCKET_IS_METADATA(b)) { APR_BUCKET_REMOVE(b); APR_BRIGADE_INSERT_TAIL(ctx->passbb, b); } else { /* * We have actual "data" so read in as much as we can and start * scanning and splitting from our read buffer */ rv = apr_bucket_read(b, &buff, &bytes, APR_BLOCK_READ); if (rv != APR_SUCCESS || bytes == 0) { apr_bucket_delete(b); } else { int num = 0; while (bytes > 0) { nl = memchr(buff, '\n', bytes); if (nl) { len = (apr_size_t) (nl - buff) + 1; /* split *after* the newline */ apr_bucket_split(b, len); /* * We've likely read more data, so bypass rereading * bucket data and continue scanning through this * buffer */ bytes -= len; buff += len; /* * we need b to be updated for future potential * splitting */ tmp_b = APR_BUCKET_NEXT(b); APR_BUCKET_REMOVE(b); /* * Hey, we found a newline! Don't forget the old * stuff that needs to be added to the front. So we * add the split bucket to the end, flatten the whole * bb, morph the whole shebang into a bucket which is * then added to the tail of the newline bb. */ if (!APR_BRIGADE_EMPTY(ctx->linebb)) { APR_BRIGADE_INSERT_TAIL(ctx->linebb, b); rv = apr_brigade_pflatten(ctx->linebb, &bflat, &fbytes, ctx->tpool); if (rv != APR_SUCCESS) goto err; if (fbytes > cfg->max_line_length) { /* Avoid pflattening further lines, we will * abort later on anyway. */ rv = APR_ENOMEM; goto err; } b = apr_bucket_transient_create(bflat, fbytes, f->r->connection->bucket_alloc); apr_brigade_cleanup(ctx->linebb); } rv = do_pattmatch(f, b, ctx->pattbb, ctx->tpool); if (rv != APR_SUCCESS) goto err; /* * Count how many buckets we have in ctx->passbb * so far. Yes, this is correct we count ctx->passbb * and not ctx->pattbb as we do not reset num on every * iteration. */ for (b = APR_BRIGADE_FIRST(ctx->pattbb); b != APR_BRIGADE_SENTINEL(ctx->pattbb); b = APR_BUCKET_NEXT(b)) { num++; } APR_BRIGADE_CONCAT(ctx->passbb, ctx->pattbb); /* * If the number of buckets in ctx->passbb reaches an * "insane" level, we consume much memory for all the * buckets as such. So lets flush them down the chain * in this case and thus clear ctx->passbb. This frees * the buckets memory for further processing. * Usually this condition should not become true, but * it is a safety measure for edge cases. */ if (num > AP_MAX_BUCKETS) { b = apr_bucket_flush_create( f->r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->passbb, b); rv = ap_pass_brigade(f->next, ctx->passbb); apr_brigade_cleanup(ctx->passbb); num = 0; apr_pool_clear(ctx->tpool); if (rv != APR_SUCCESS) goto err; } b = tmp_b; } else { /* * no newline in whatever is left of this buffer so * tuck data away and get next bucket */ APR_BUCKET_REMOVE(b); APR_BRIGADE_INSERT_TAIL(ctx->linebb, b); bytes = 0; } } } } if (!APR_BRIGADE_EMPTY(ctx->passbb)) { rv = ap_pass_brigade(f->next, ctx->passbb); apr_brigade_cleanup(ctx->passbb); if (rv != APR_SUCCESS) goto err; } apr_pool_clear(ctx->tpool); } /* Anything left we want to save/setaside for the next go-around */ if (!APR_BRIGADE_EMPTY(ctx->linebb)) { /* * Provide ap_save_brigade with an existing empty brigade * (ctx->linesbb) to avoid creating a new one. */ ap_save_brigade(f, &(ctx->linesbb), &(ctx->linebb), f->r->pool); tmp_bb = ctx->linebb; ctx->linebb = ctx->linesbb; ctx->linesbb = tmp_bb; } return APR_SUCCESS; err: if (rv == APR_ENOMEM) ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, f->r, APLOGNO(01328) "Line too long, URI %s", f->r->uri); apr_pool_clear(ctx->tpool); return rv; } static const char *set_pattern(cmd_parms *cmd, void *cfg, const char *line) { char *from = NULL; char *to = NULL; char *flags = NULL; char *ourline; char delim; subst_pattern_t *nscript; int is_pattern = 0; int ignore_case = 0; int flatten = 1; ap_regex_t *r = NULL; if (apr_tolower(*line) != 's') { return "Bad Substitute format, must be an s/// pattern"; } ourline = apr_pstrdup(cmd->pool, line); delim = *++ourline; if (delim) from = ++ourline; if (from) { if (*ourline != delim) { while (*++ourline && *ourline != delim); } if (*ourline) { *ourline = '\0'; to = ++ourline; } } if (to) { if (*ourline != delim) { while (*++ourline && *ourline != delim); } if (*ourline) { *ourline = '\0'; flags = ++ourline; } } if (!delim || !from || !*from || !to) { return "Bad Substitute format, must be a complete s/// pattern"; } if (flags) { while (*flags) { delim = apr_tolower(*flags); /* re-use */ if (delim == 'i') ignore_case = 1; else if (delim == 'n') is_pattern = 1; else if (delim == 'f') flatten = 1; else if (delim == 'q') flatten = 0; else return "Bad Substitute flag, only s///[infq] are supported"; flags++; } } /* first see if we can compile the regex */ if (!is_pattern) { r = ap_pregcomp(cmd->pool, from, AP_REG_EXTENDED | (ignore_case ? AP_REG_ICASE : 0)); if (!r) return "Substitute could not compile regex"; } nscript = apr_array_push(((subst_dir_conf *) cfg)->patterns); /* init the new entries */ nscript->pattern = NULL; nscript->regexp = NULL; nscript->replacement = NULL; nscript->patlen = 0; nscript->from = from; if (is_pattern) { nscript->patlen = strlen(from); nscript->pattern = apr_strmatch_precompile(cmd->pool, from, !ignore_case); } else { nscript->regexp = r; } nscript->replacement = to; nscript->replen = strlen(to); nscript->flatten = flatten; return NULL; } #define KBYTE 1024 #define MBYTE 1048576 #define GBYTE 1073741824 static const char *set_max_line_length(cmd_parms *cmd, void *cfg, const char *arg) { subst_dir_conf *dcfg = (subst_dir_conf *)cfg; apr_off_t max; char *end; apr_status_t rv; rv = apr_strtoff(&max, arg, &end, 10); if (rv == APR_SUCCESS) { if ((*end == 'K' || *end == 'k') && !end[1]) { max *= KBYTE; } else if ((*end == 'M' || *end == 'm') && !end[1]) { max *= MBYTE; } else if ((*end == 'G' || *end == 'g') && !end[1]) { max *= GBYTE; } else if (*end && /* neither empty nor [Bb] */ ((*end != 'B' && *end != 'b') || end[1])) { rv = APR_EGENERAL; } } if (rv != APR_SUCCESS || max < 0) { return "SubstituteMaxLineLength must be a non-negative integer optionally " "suffixed with 'b', 'k', 'm' or 'g'."; } dcfg->max_line_length = (apr_size_t)max; dcfg->max_line_length_set = 1; return NULL; } #define PROTO_FLAGS AP_FILTER_PROTO_CHANGE|AP_FILTER_PROTO_CHANGE_LENGTH static void register_hooks(apr_pool_t *pool) { ap_register_output_filter(substitute_filter_name, substitute_filter, NULL, AP_FTYPE_RESOURCE); } static const command_rec substitute_cmds[] = { AP_INIT_TAKE1("Substitute", set_pattern, NULL, OR_FILEINFO, "Pattern to filter the response content (s/foo/bar/[inf])"), AP_INIT_TAKE1("SubstituteMaxLineLength", set_max_line_length, NULL, OR_FILEINFO, "Maximum line length"), AP_INIT_FLAG("SubstituteInheritBefore", ap_set_flag_slot, (void *)APR_OFFSETOF(subst_dir_conf, inherit_before), OR_FILEINFO, "Apply inherited patterns before those of the current context"), {NULL} }; AP_DECLARE_MODULE(substitute) = { STANDARD20_MODULE_STUFF, create_substitute_dcfg, /* dir config creater */ merge_substitute_dcfg, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ substitute_cmds, /* command table */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/filters/mod_reqtimeout.dsp0000644000000000000500000001103711342055347020127 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_reqtimeout" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_reqtimeout - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_reqtimeout.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_reqtimeout.mak" CFG="mod_reqtimeout - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_reqtimeout - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_reqtimeout - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_reqtimeout - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_RL_DECLARE_EXPORT" /Fd"Release\mod_reqtimeout_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_reqtimeout.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_reqtimeout.so" /d LONG_NAME="reqtimeout_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_reqtimeout.so" /base:@..\..\os\win32\BaseAddr.ref,mod_reqtimeout.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_reqtimeout.so" /base:@..\..\os\win32\BaseAddr.ref,mod_reqtimeout.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_reqtimeout.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_reqtimeout - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_RL_DECLARE_EXPORT" /Fd"Debug\mod_reqtimeout_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_reqtimeout.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_reqtimeout.so" /d LONG_NAME="reqtimeout_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_reqtimeout.so" /base:@..\..\os\win32\BaseAddr.ref,mod_reqtimeout.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_reqtimeout.so" /base:@..\..\os\win32\BaseAddr.ref,mod_reqtimeout.so # Begin Special Build Tool TargetPath=.\Debug\mod_reqtimeout.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_reqtimeout - Win32 Release" # Name "mod_reqtimeout - Win32 Debug" # Begin Source File SOURCE=.\mod_reqtimeout.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/filters/mod_include.dep0000644000000000000500000000432712674411515017344 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_include.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_include.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_include.h"\ httpd-2.4.41/modules/filters/mod_buffer.c0000644000000000000500000002666412604740124016646 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_buffer.c --- Buffer the input and output filter stacks, collapse * many small buckets into fewer large buckets. */ #include "apr.h" #include "apr_strings.h" #include "apr_buckets.h" #include "apr_lib.h" #include "ap_config.h" #include "util_filter.h" #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_request.h" static const char bufferFilterName[] = "BUFFER"; module AP_MODULE_DECLARE_DATA buffer_module; #define DEFAULT_BUFFER_SIZE 128*1024 typedef struct buffer_conf { apr_off_t size; /* size of the buffer */ int size_set; /* has the size been set */ } buffer_conf; typedef struct buffer_ctx { apr_bucket_brigade *bb; apr_bucket_brigade *tmp; buffer_conf *conf; apr_off_t remaining; int seen_eos; } buffer_ctx; /** * Buffer buckets being written to the output filter stack. */ static apr_status_t buffer_out_filter(ap_filter_t *f, apr_bucket_brigade *bb) { apr_bucket *e; request_rec *r = f->r; buffer_ctx *ctx = f->ctx; apr_status_t rv = APR_SUCCESS; int move = 0; /* first time in? create a context */ if (!ctx) { /* buffering won't work on subrequests, it would be nice if * it did. Within subrequests, we have no EOS to check for, * so we don't know when to flush the buffer to the network */ if (f->r->main) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } ctx = f->ctx = apr_pcalloc(r->pool, sizeof(*ctx)); ctx->bb = apr_brigade_create(r->pool, f->c->bucket_alloc); ctx->conf = ap_get_module_config(f->r->per_dir_config, &buffer_module); } /* Do nothing if asked to filter nothing. */ if (APR_BRIGADE_EMPTY(bb)) { return ap_pass_brigade(f->next, bb); } /* Empty buffer means we can potentially optimise below */ if (APR_BRIGADE_EMPTY(ctx->bb)) { move = 1; } while (APR_SUCCESS == rv && !APR_BRIGADE_EMPTY(bb)) { const char *data; apr_off_t len; apr_size_t size; e = APR_BRIGADE_FIRST(bb); /* EOS means we are done. */ if (APR_BUCKET_IS_EOS(e)) { /* should we add an etag? */ /* pass the EOS across */ APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); /* pass what we have down the chain */ rv = ap_pass_brigade(f->next, ctx->bb); continue; } /* A flush takes precedence over buffering */ if (APR_BUCKET_IS_FLUSH(e)) { /* pass the flush bucket across */ APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); /* pass what we have down the chain */ rv = ap_pass_brigade(f->next, ctx->bb); continue; } /* metadata buckets are preserved as is */ if (APR_BUCKET_IS_METADATA(e)) { /* * Remove meta data bucket from old brigade and insert into the * new. */ APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); continue; } /* is our buffer full? * If so, send what we have down the filter chain. If the buffer * gets full, we can no longer compute a content length. */ apr_brigade_length(ctx->bb, 1, &len); if (len > ctx->conf->size) { /* pass what we have down the chain */ rv = ap_pass_brigade(f->next, ctx->bb); if (rv) { /* should break out of the loop, since our write to the client * failed in some way. */ continue; } } /* at this point we are ready to buffer. * Buffering takes advantage of an optimisation in the handling of * bucket brigades. Heap buckets are always created at a fixed * size, regardless of the size of the data placed into them. * The apr_brigade_write() call will first try and pack the data * into any free space in the most recent heap bucket, before * allocating a new bucket if necessary. */ if (APR_SUCCESS == (rv = apr_bucket_read(e, &data, &size, APR_BLOCK_READ))) { /* further optimisation: if the buckets are already heap * buckets, and the buckets stay exactly APR_BUCKET_BUFF_SIZE * long (as they would be if we were reading bits of a * large bucket), then move the buckets instead of copying * them. */ if (move && APR_BUCKET_IS_HEAP(e)) { APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); if (APR_BUCKET_BUFF_SIZE != size) { move = 0; } } else { apr_brigade_write(ctx->bb, NULL, NULL, data, size); apr_bucket_delete(e); } } } return rv; } /** * Buffer buckets being read from the input filter stack. */ static apr_status_t buffer_in_filter(ap_filter_t *f, apr_bucket_brigade *bb, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { apr_bucket *e, *after; apr_status_t rv; buffer_ctx *ctx = f->ctx; /* buffer on main requests only */ if (!ap_is_initial_req(f->r)) { ap_remove_input_filter(f); return ap_get_brigade(f->next, bb, mode, block, readbytes); } /* first time in? create a context */ if (!ctx) { ctx = f->ctx = apr_pcalloc(f->r->pool, sizeof(*ctx)); ctx->bb = apr_brigade_create(f->r->pool, f->c->bucket_alloc); ctx->tmp = apr_brigade_create(f->r->pool, f->c->bucket_alloc); ctx->conf = ap_get_module_config(f->r->per_dir_config, &buffer_module); } /* just get out of the way of things we don't want. */ if (mode != AP_MODE_READBYTES) { return ap_get_brigade(f->next, bb, mode, block, readbytes); } /* if our buffer is empty, read off the network until the buffer is full */ if (APR_BRIGADE_EMPTY(ctx->bb)) { int seen_flush = 0; ctx->remaining = ctx->conf->size; while (!ctx->seen_eos && !seen_flush && ctx->remaining > 0) { const char *data; apr_size_t size = 0; if (APR_BRIGADE_EMPTY(ctx->tmp)) { rv = ap_get_brigade(f->next, ctx->tmp, mode, block, ctx->remaining); /* if an error was received, bail out now. If the error is * EAGAIN and we have not yet seen an EOS, we will definitely * be called again, at which point we will send our buffered * data. Instead of sending EAGAIN, some filters return an * empty brigade instead when data is not yet available. In * this case, pass through the APR_SUCCESS and emulate the * underlying filter. */ if (rv != APR_SUCCESS || APR_BRIGADE_EMPTY(ctx->tmp)) { return rv; } } do { e = APR_BRIGADE_FIRST(ctx->tmp); /* if we see an EOS, we are done */ if (APR_BUCKET_IS_EOS(e)) { APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); ctx->seen_eos = 1; break; } /* flush buckets clear the buffer */ if (APR_BUCKET_IS_FLUSH(e)) { APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); seen_flush = 1; break; } /* pass metadata buckets through */ if (APR_BUCKET_IS_METADATA(e)) { APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); continue; } /* read the bucket in, pack it into the buffer */ if (APR_SUCCESS == (rv = apr_bucket_read(e, &data, &size, APR_BLOCK_READ))) { apr_brigade_write(ctx->bb, NULL, NULL, data, size); ctx->remaining -= size; apr_bucket_delete(e); } else { return rv; } } while (!APR_BRIGADE_EMPTY(ctx->tmp)); } } /* give the caller the data they asked for from the buffer */ apr_brigade_partition(ctx->bb, readbytes, &after); e = APR_BRIGADE_FIRST(ctx->bb); while (e != after) { if (APR_BUCKET_IS_EOS(e)) { /* last bucket read, step out of the way */ ap_remove_input_filter(f); } APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(bb, e); e = APR_BRIGADE_FIRST(ctx->bb); } return APR_SUCCESS; } static void *create_buffer_config(apr_pool_t *p, char *dummy) { buffer_conf *new = (buffer_conf *) apr_pcalloc(p, sizeof(buffer_conf)); new->size_set = 0; /* unset */ new->size = DEFAULT_BUFFER_SIZE; /* default size */ return (void *) new; } static void *merge_buffer_config(apr_pool_t *p, void *basev, void *addv) { buffer_conf *new = (buffer_conf *) apr_pcalloc(p, sizeof(buffer_conf)); buffer_conf *add = (buffer_conf *) addv; buffer_conf *base = (buffer_conf *) basev; new->size = (add->size_set == 0) ? base->size : add->size; new->size_set = add->size_set || base->size_set; return new; } static const char *set_buffer_size(cmd_parms *cmd, void *dconf, const char *arg) { buffer_conf *conf = dconf; if (APR_SUCCESS != apr_strtoff(&(conf->size), arg, NULL, 10) || conf->size <= 0) { return "BufferSize must be a size in bytes, and greater than zero"; } conf->size_set = 1; return NULL; } static const command_rec buffer_cmds[] = { AP_INIT_TAKE1("BufferSize", set_buffer_size, NULL, ACCESS_CONF, "Maximum size of the buffer used by the buffer filter"), { NULL } }; static void register_hooks(apr_pool_t *p) { ap_register_output_filter(bufferFilterName, buffer_out_filter, NULL, AP_FTYPE_CONTENT_SET); ap_register_input_filter(bufferFilterName, buffer_in_filter, NULL, AP_FTYPE_CONTENT_SET); } AP_DECLARE_MODULE(buffer) = { STANDARD20_MODULE_STUFF, create_buffer_config, /* create per-directory config structure */ merge_buffer_config, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ buffer_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/filters/mod_reqtimeout.c0000644000000000000500000005243613467260417017601 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_connection.h" #include "http_protocol.h" #include "http_log.h" #include "http_core.h" #include "util_filter.h" #define APR_WANT_STRFUNC #include "apr_strings.h" #include "apr_version.h" module AP_MODULE_DECLARE_DATA reqtimeout_module; #define UNSET -1 #define MRT_DEFAULT_handshake_TIMEOUT 0 /* disabled */ #define MRT_DEFAULT_handshake_MAX_TIMEOUT 0 #define MRT_DEFAULT_handshake_MIN_RATE 0 #define MRT_DEFAULT_header_TIMEOUT 20 #define MRT_DEFAULT_header_MAX_TIMEOUT 40 #define MRT_DEFAULT_header_MIN_RATE 500 #define MRT_DEFAULT_body_TIMEOUT 20 #define MRT_DEFAULT_body_MAX_TIMEOUT 0 #define MRT_DEFAULT_body_MIN_RATE 500 typedef struct { int timeout; /* timeout in secs */ int max_timeout; /* max timeout in secs */ int min_rate; /* min rate in bytes/s */ apr_time_t rate_factor; /* scale factor (#usecs per min_rate) */ } reqtimeout_stage_t; typedef struct { reqtimeout_stage_t handshake; /* Handshaking (TLS) */ reqtimeout_stage_t header; /* Reading the HTTP header */ reqtimeout_stage_t body; /* Reading the HTTP body */ } reqtimeout_srv_cfg; /* this struct is used both as conn_config and as filter context */ typedef struct { apr_time_t timeout_at; apr_time_t max_timeout_at; reqtimeout_stage_t cur_stage; int in_keep_alive; char *type; apr_socket_t *socket; apr_bucket_brigade *tmpbb; } reqtimeout_con_cfg; static const char *const reqtimeout_filter_name = "reqtimeout"; static int default_handshake_rate_factor; static int default_header_rate_factor; static int default_body_rate_factor; static void extend_timeout(reqtimeout_con_cfg *ccfg, apr_bucket_brigade *bb) { apr_off_t len; apr_time_t new_timeout_at; if (apr_brigade_length(bb, 0, &len) != APR_SUCCESS || len <= 0) return; new_timeout_at = ccfg->timeout_at + len * ccfg->cur_stage.rate_factor; if (ccfg->max_timeout_at > 0 && new_timeout_at > ccfg->max_timeout_at) { ccfg->timeout_at = ccfg->max_timeout_at; } else { ccfg->timeout_at = new_timeout_at; } } static apr_status_t check_time_left(reqtimeout_con_cfg *ccfg, apr_time_t *time_left_p, apr_time_t now) { if (!now) now = apr_time_now(); *time_left_p = ccfg->timeout_at - now; if (*time_left_p <= 0) return APR_TIMEUP; if (*time_left_p < apr_time_from_sec(1)) { *time_left_p = apr_time_from_sec(1); } return APR_SUCCESS; } static apr_status_t have_lf_or_eos(apr_bucket_brigade *bb) { apr_bucket *b = APR_BRIGADE_LAST(bb); for ( ; b != APR_BRIGADE_SENTINEL(bb) ; b = APR_BUCKET_PREV(b) ) { const char *str; apr_size_t len; apr_status_t rv; if (APR_BUCKET_IS_EOS(b)) return APR_SUCCESS; if (APR_BUCKET_IS_METADATA(b)) continue; rv = apr_bucket_read(b, &str, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS) return rv; if (len == 0) continue; if (str[len-1] == APR_ASCII_LF) return APR_SUCCESS; } return APR_INCOMPLETE; } /* * Append bbIn to bbOut and merge small buckets, to avoid DoS by high memory * usage */ static apr_status_t brigade_append(apr_bucket_brigade *bbOut, apr_bucket_brigade *bbIn) { while (!APR_BRIGADE_EMPTY(bbIn)) { apr_bucket *e = APR_BRIGADE_FIRST(bbIn); const char *str; apr_size_t len; apr_status_t rv; rv = apr_bucket_read(e, &str, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS) { return rv; } APR_BUCKET_REMOVE(e); if (APR_BUCKET_IS_METADATA(e) || len > APR_BUCKET_BUFF_SIZE/4) { APR_BRIGADE_INSERT_TAIL(bbOut, e); } else { if (len > 0) { rv = apr_brigade_write(bbOut, NULL, NULL, str, len); if (rv != APR_SUCCESS) { apr_bucket_destroy(e); return rv; } } apr_bucket_destroy(e); } } return APR_SUCCESS; } #define MIN(x,y) ((x) < (y) ? (x) : (y)) static apr_status_t reqtimeout_filter(ap_filter_t *f, apr_bucket_brigade *bb, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { apr_time_t time_left; apr_time_t now = 0; apr_status_t rv; apr_interval_time_t saved_sock_timeout = UNSET; reqtimeout_con_cfg *ccfg = f->ctx; if (ccfg->in_keep_alive) { /* For this read[_request line()], wait for the first byte using the * normal keep-alive timeout (hence don't take this expected idle time * into account to setup the connection expiry below). */ ccfg->in_keep_alive = 0; rv = ap_get_brigade(f->next, bb, AP_MODE_SPECULATIVE, block, 1); if (rv != APR_SUCCESS || APR_BRIGADE_EMPTY(bb)) { return rv; } apr_brigade_cleanup(bb); } if (ccfg->cur_stage.timeout > 0) { /* set new timeout */ now = apr_time_now(); ccfg->timeout_at = now + apr_time_from_sec(ccfg->cur_stage.timeout); ccfg->cur_stage.timeout = 0; if (ccfg->cur_stage.max_timeout > 0) { ccfg->max_timeout_at = now + apr_time_from_sec(ccfg->cur_stage.max_timeout); ccfg->cur_stage.max_timeout = 0; } } else if (ccfg->timeout_at == 0) { /* no timeout set, or in between requests */ return ap_get_brigade(f->next, bb, mode, block, readbytes); } if (!ccfg->socket) { ccfg->socket = ap_get_conn_socket(f->c); } rv = check_time_left(ccfg, &time_left, now); if (rv != APR_SUCCESS) goto out; if (block == APR_NONBLOCK_READ || mode == AP_MODE_INIT || mode == AP_MODE_EATCRLF) { rv = ap_get_brigade(f->next, bb, mode, block, readbytes); if (ccfg->cur_stage.rate_factor && rv == APR_SUCCESS) { extend_timeout(ccfg, bb); } return rv; } rv = apr_socket_timeout_get(ccfg->socket, &saved_sock_timeout); AP_DEBUG_ASSERT(rv == APR_SUCCESS); rv = apr_socket_timeout_set(ccfg->socket, MIN(time_left, saved_sock_timeout)); AP_DEBUG_ASSERT(rv == APR_SUCCESS); if (mode == AP_MODE_GETLINE) { /* * For a blocking AP_MODE_GETLINE read, apr_brigade_split_line() * would loop until a whole line has been read. As this would make it * impossible to enforce a total timeout, we only do non-blocking * reads. */ apr_off_t remaining = HUGE_STRING_LEN; do { apr_off_t bblen; #if APR_MAJOR_VERSION < 2 apr_int32_t nsds; apr_interval_time_t poll_timeout; apr_pollfd_t pollset; #endif rv = ap_get_brigade(f->next, bb, AP_MODE_GETLINE, APR_NONBLOCK_READ, remaining); if (rv != APR_SUCCESS && !APR_STATUS_IS_EAGAIN(rv)) { break; } if (!APR_BRIGADE_EMPTY(bb)) { if (ccfg->cur_stage.rate_factor) { extend_timeout(ccfg, bb); } rv = have_lf_or_eos(bb); if (rv != APR_INCOMPLETE) { break; } rv = apr_brigade_length(bb, 1, &bblen); if (rv != APR_SUCCESS) { break; } remaining -= bblen; if (remaining <= 0) { break; } /* Haven't got a whole line yet, save what we have ... */ if (!ccfg->tmpbb) { ccfg->tmpbb = apr_brigade_create(f->c->pool, f->c->bucket_alloc); } rv = brigade_append(ccfg->tmpbb, bb); if (rv != APR_SUCCESS) break; } /* ... and wait for more */ #if APR_MAJOR_VERSION < 2 pollset.p = f->c->pool; pollset.desc_type = APR_POLL_SOCKET; pollset.reqevents = APR_POLLIN|APR_POLLHUP; pollset.desc.s = ccfg->socket; apr_socket_timeout_get(ccfg->socket, &poll_timeout); rv = apr_poll(&pollset, 1, &nsds, poll_timeout); #else rv = apr_socket_wait(ccfg->socket, APR_WAIT_READ); #endif if (rv != APR_SUCCESS) break; rv = check_time_left(ccfg, &time_left, 0); if (rv != APR_SUCCESS) break; rv = apr_socket_timeout_set(ccfg->socket, MIN(time_left, saved_sock_timeout)); AP_DEBUG_ASSERT(rv == APR_SUCCESS); } while (1); if (ccfg->tmpbb) APR_BRIGADE_PREPEND(bb, ccfg->tmpbb); } else { /* mode != AP_MODE_GETLINE */ rv = ap_get_brigade(f->next, bb, mode, block, readbytes); /* Don't extend the timeout in speculative mode, wait for * the real (relevant) bytes to be asked later, within the * currently alloted time. */ if (ccfg->cur_stage.rate_factor && rv == APR_SUCCESS && mode != AP_MODE_SPECULATIVE) { extend_timeout(ccfg, bb); } } apr_socket_timeout_set(ccfg->socket, saved_sock_timeout); out: if (APR_STATUS_IS_TIMEUP(rv)) { ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, f->c, APLOGNO(01382) "Request %s read timeout", ccfg->type); /* * If we allow a normal lingering close, the client may keep this * process/thread busy for another 30s (MAX_SECS_TO_LINGER). * Therefore we tell ap_lingering_close() to shorten this period to * 2s (SECONDS_TO_LINGER). */ apr_table_setn(f->c->notes, "short-lingering-close", "1"); /* * Also, we must not allow keep-alive requests, as * ap_finalize_protocol() may ignore our error status (if the timeout * happened on a request body that is discarded). */ f->c->keepalive = AP_CONN_CLOSE; } return rv; } static apr_status_t reqtimeout_eor(ap_filter_t *f, apr_bucket_brigade *bb) { if (!APR_BRIGADE_EMPTY(bb) && AP_BUCKET_IS_EOR(APR_BRIGADE_LAST(bb))) { reqtimeout_con_cfg *ccfg = f->ctx; ccfg->timeout_at = 0; } return ap_pass_brigade(f->next, bb); } #define INIT_STAGE(cfg, ccfg, stage) do { \ if (cfg->stage.timeout != UNSET) { \ ccfg->cur_stage.timeout = cfg->stage.timeout; \ ccfg->cur_stage.max_timeout = cfg->stage.max_timeout; \ ccfg->cur_stage.rate_factor = cfg->stage.rate_factor; \ } \ else { \ ccfg->cur_stage.timeout = MRT_DEFAULT_##stage##_TIMEOUT; \ ccfg->cur_stage.max_timeout = MRT_DEFAULT_##stage##_MAX_TIMEOUT; \ ccfg->cur_stage.rate_factor = default_##stage##_rate_factor; \ } \ } while (0) static int reqtimeout_init(conn_rec *c) { reqtimeout_con_cfg *ccfg; reqtimeout_srv_cfg *cfg; cfg = ap_get_module_config(c->base_server->module_config, &reqtimeout_module); AP_DEBUG_ASSERT(cfg != NULL); /* For compatibility, handshake timeout is disabled when UNSET (< 0) */ if (cfg->handshake.timeout <= 0 && cfg->header.timeout == 0 && cfg->body.timeout == 0) { /* disabled for this vhost */ return DECLINED; } ccfg = ap_get_module_config(c->conn_config, &reqtimeout_module); if (ccfg == NULL) { ccfg = apr_pcalloc(c->pool, sizeof(reqtimeout_con_cfg)); ap_set_module_config(c->conn_config, &reqtimeout_module, ccfg); ap_add_output_filter(reqtimeout_filter_name, ccfg, NULL, c); ap_add_input_filter(reqtimeout_filter_name, ccfg, NULL, c); ccfg->type = "handshake"; if (cfg->handshake.timeout > 0) { INIT_STAGE(cfg, ccfg, handshake); } } /* we are not handling the connection, we just do initialization */ return DECLINED; } static void reqtimeout_before_header(request_rec *r, conn_rec *c) { reqtimeout_srv_cfg *cfg; reqtimeout_con_cfg *ccfg = ap_get_module_config(c->conn_config, &reqtimeout_module); if (ccfg == NULL) { /* not configured for this connection */ return; } cfg = ap_get_module_config(c->base_server->module_config, &reqtimeout_module); AP_DEBUG_ASSERT(cfg != NULL); /* (Re)set the state for this new request, but ccfg->socket and * ccfg->tmpbb which have the lifetime of the connection. */ ccfg->type = "header"; ccfg->timeout_at = 0; ccfg->max_timeout_at = 0; ccfg->in_keep_alive = (c->keepalives > 0); INIT_STAGE(cfg, ccfg, header); } static int reqtimeout_before_body(request_rec *r) { reqtimeout_srv_cfg *cfg; reqtimeout_con_cfg *ccfg = ap_get_module_config(r->connection->conn_config, &reqtimeout_module); if (ccfg == NULL) { /* not configured for this connection */ return OK; } cfg = ap_get_module_config(r->connection->base_server->module_config, &reqtimeout_module); AP_DEBUG_ASSERT(cfg != NULL); ccfg->type = "body"; ccfg->timeout_at = 0; ccfg->max_timeout_at = 0; if (r->method_number == M_CONNECT) { /* disabled for a CONNECT request */ ccfg->cur_stage.timeout = 0; } else { INIT_STAGE(cfg, ccfg, body); } return OK; } #define UNSET_STAGE(cfg, stage) do { \ cfg->stage.timeout = UNSET; \ cfg->stage.max_timeout = UNSET; \ cfg->stage.min_rate = UNSET; \ } while (0) static void *reqtimeout_create_srv_config(apr_pool_t *p, server_rec *s) { reqtimeout_srv_cfg *cfg = apr_pcalloc(p, sizeof(reqtimeout_srv_cfg)); UNSET_STAGE(cfg, handshake); UNSET_STAGE(cfg, header); UNSET_STAGE(cfg, body); return cfg; } #define MERGE_INT(cfg, base, add, val) \ cfg->val = (add->val == UNSET) ? base->val : add->val #define MERGE_STAGE(cfg, base, add, stage) do { \ MERGE_INT(cfg, base, add, stage.timeout); \ MERGE_INT(cfg, base, add, stage.max_timeout); \ MERGE_INT(cfg, base, add, stage.min_rate); \ cfg->stage.rate_factor = (cfg->stage.min_rate == UNSET) \ ? base->stage.rate_factor \ : add->stage.rate_factor; \ } while (0) static void *reqtimeout_merge_srv_config(apr_pool_t *p, void *base_, void *add_) { reqtimeout_srv_cfg *base = base_; reqtimeout_srv_cfg *add = add_; reqtimeout_srv_cfg *cfg = apr_pcalloc(p, sizeof(reqtimeout_srv_cfg)); MERGE_STAGE(cfg, base, add, handshake); MERGE_STAGE(cfg, base, add, header); MERGE_STAGE(cfg, base, add, body); return cfg; } static const char *parse_int(apr_pool_t *p, const char *arg, int *val) { char *endptr; *val = strtol(arg, &endptr, 10); if (arg == endptr) { return apr_psprintf(p, "Value '%s' not numerical", endptr); } if (*endptr != '\0') { return apr_psprintf(p, "Cannot parse '%s'", endptr); } if (*val < 0) { return "Value must be non-negative"; } return NULL; } static const char *set_reqtimeout_param(reqtimeout_srv_cfg *conf, apr_pool_t *p, const char *key, const char *val) { const char *ret = NULL; char *rate_str = NULL, *initial_str, *max_str = NULL; reqtimeout_stage_t *stage; if (!strcasecmp(key, "handshake")) { stage = &conf->handshake; } else if (!strcasecmp(key, "header")) { stage = &conf->header; } else if (!strcasecmp(key, "body")) { stage = &conf->body; } else { return "Unknown RequestReadTimeout parameter"; } memset(stage, 0, sizeof(*stage)); if ((rate_str = ap_strcasestr(val, ",minrate="))) { initial_str = apr_pstrndup(p, val, rate_str - val); rate_str += strlen(",minrate="); ret = parse_int(p, rate_str, &stage->min_rate); if (ret) return ret; if (stage->min_rate == 0) return "Minimum data rate must be larger than 0"; if ((max_str = strchr(initial_str, '-'))) { *max_str++ = '\0'; ret = parse_int(p, max_str, &stage->max_timeout); if (ret) return ret; } ret = parse_int(p, initial_str, &stage->timeout); } else { if (ap_strchr_c(val, '-')) return "Must set MinRate option if using timeout range"; ret = parse_int(p, val, &stage->timeout); } if (ret) return ret; if (stage->max_timeout && stage->timeout >= stage->max_timeout) { return "Maximum timeout must be larger than initial timeout"; } if (stage->min_rate) { stage->rate_factor = apr_time_from_sec(1) / stage->min_rate; } return NULL; } static const char *set_reqtimeouts(cmd_parms *cmd, void *mconfig, const char *arg) { reqtimeout_srv_cfg *conf = ap_get_module_config(cmd->server->module_config, &reqtimeout_module); while (*arg) { char *word, *val; const char *err; word = ap_getword_conf(cmd->temp_pool, &arg); val = strchr(word, '='); if (!val) { return "Invalid RequestReadTimeout parameter. Parameter must be " "in the form 'key=value'"; } else *val++ = '\0'; err = set_reqtimeout_param(conf, cmd->pool, word, val); if (err) return apr_psprintf(cmd->temp_pool, "RequestReadTimeout: %s=%s: %s", word, val, err); } return NULL; } static void reqtimeout_hooks(apr_pool_t *pool) { /* * mod_ssl is AP_FTYPE_CONNECTION + 5 and mod_reqtimeout needs to * be called before mod_ssl for the handshake stage to catch SSL traffic. */ ap_register_input_filter(reqtimeout_filter_name, reqtimeout_filter, NULL, AP_FTYPE_CONNECTION + 8); /* * We need to pause timeout detection in between requests, for * speculative and non-blocking reads, so between each outgoing EOR * and the next pre_read_request call. */ ap_register_output_filter(reqtimeout_filter_name, reqtimeout_eor, NULL, AP_FTYPE_CONNECTION); /* * mod_reqtimeout needs to be called before ap_process_http_request (which * is run at APR_HOOK_REALLY_LAST) but after all other protocol modules. * This ensures that it only influences normal http connections and not * e.g. mod_ftp. We still process it first though, for the handshake stage * to work with/before mod_ssl, but since it's disabled by default it won't * influence non-HTTP modules unless configured explicitely. Also, if * mod_reqtimeout used the pre_connection hook, it would be inserted on * mod_proxy's backend connections, and we don't want this. */ ap_hook_process_connection(reqtimeout_init, NULL, NULL, APR_HOOK_FIRST); ap_hook_pre_read_request(reqtimeout_before_header, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_read_request(reqtimeout_before_body, NULL, NULL, APR_HOOK_MIDDLE); #if MRT_DEFAULT_handshake_MIN_RATE default_handshake_rate_factor = apr_time_from_sec(1) / MRT_DEFAULT_handshake_MIN_RATE; #endif #if MRT_DEFAULT_header_MIN_RATE default_header_rate_factor = apr_time_from_sec(1) / MRT_DEFAULT_header_MIN_RATE; #endif #if MRT_DEFAULT_body_MIN_RATE default_body_rate_factor = apr_time_from_sec(1) / MRT_DEFAULT_body_MIN_RATE; #endif } static const command_rec reqtimeout_cmds[] = { AP_INIT_RAW_ARGS("RequestReadTimeout", set_reqtimeouts, NULL, RSRC_CONF, "Set various timeout parameters for TLS handshake and/or " "reading request headers and body"), {NULL} }; AP_DECLARE_MODULE(reqtimeout) = { STANDARD20_MODULE_STUFF, NULL, /* create per-dir config structures */ NULL, /* merge per-dir config structures */ reqtimeout_create_srv_config, /* create per-server config structures */ reqtimeout_merge_srv_config, /* merge per-server config structures */ reqtimeout_cmds, /* table of config file commands */ reqtimeout_hooks }; httpd-2.4.41/modules/filters/NWGNUreflector0000644000000000000500000001024511737125415017113 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = reflector # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Reflector Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = reflector # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/reflector.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_reflector.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ reflector_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/filters/mod_ratelimit.c0000644000000000000500000002513013341325553017356 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "util_filter.h" #include "mod_ratelimit.h" #define RATE_LIMIT_FILTER_NAME "RATE_LIMIT" #define RATE_INTERVAL_MS (200) typedef enum rl_state_e { RATE_LIMIT, RATE_FULLSPEED } rl_state_e; typedef struct rl_ctx_t { int speed; int chunk_size; int burst; int do_sleep; rl_state_e state; apr_bucket_brigade *tmpbb; apr_bucket_brigade *holdingbb; } rl_ctx_t; #if defined(RLFDEBUG) static void brigade_dump(request_rec *r, apr_bucket_brigade *bb) { apr_bucket *e; int i = 0; for (e = APR_BRIGADE_FIRST(bb); e != APR_BRIGADE_SENTINEL(bb); e = APR_BUCKET_NEXT(e), i++) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(03193) "brigade: [%d] %s", i, e->type->name); } } #endif /* RLFDEBUG */ static apr_status_t rate_limit_filter(ap_filter_t *f, apr_bucket_brigade *bb) { apr_status_t rv = APR_SUCCESS; rl_ctx_t *ctx = f->ctx; apr_bucket_alloc_t *ba = f->r->connection->bucket_alloc; /* Set up our rl_ctx_t on first use */ if (ctx == NULL) { const char *rl = NULL; int ratelimit; int burst = 0; /* no subrequests. */ if (f->r->main != NULL) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* Configuration: rate limit */ rl = apr_table_get(f->r->subprocess_env, "rate-limit"); if (rl == NULL) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* rl is in kilo bytes / second */ ratelimit = atoi(rl) * 1024; if (ratelimit <= 0) { /* remove ourselves */ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, f->r, APLOGNO(03488) "rl: disabling: rate-limit = %s (too high?)", rl); ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* Configuration: optional initial burst */ rl = apr_table_get(f->r->subprocess_env, "rate-initial-burst"); if (rl != NULL) { burst = atoi(rl) * 1024; if (burst <= 0) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, f->r, APLOGNO(03489) "rl: disabling burst: rate-initial-burst = %s (too high?)", rl); burst = 0; } } /* Set up our context */ ctx = apr_palloc(f->r->pool, sizeof(rl_ctx_t)); f->ctx = ctx; ctx->state = RATE_LIMIT; ctx->speed = ratelimit; ctx->burst = burst; ctx->do_sleep = 0; /* calculate how many bytes / interval we want to send */ /* speed is bytes / second, so, how many (speed / 1000 % interval) */ ctx->chunk_size = (ctx->speed / (1000 / RATE_INTERVAL_MS)); ctx->tmpbb = apr_brigade_create(f->r->pool, ba); ctx->holdingbb = apr_brigade_create(f->r->pool, ba); } else { APR_BRIGADE_PREPEND(bb, ctx->holdingbb); } while (!APR_BRIGADE_EMPTY(bb)) { apr_bucket *e; if (ctx->state == RATE_FULLSPEED) { /* Find where we 'stop' going full speed. */ for (e = APR_BRIGADE_FIRST(bb); e != APR_BRIGADE_SENTINEL(bb); e = APR_BUCKET_NEXT(e)) { if (AP_RL_BUCKET_IS_END(e)) { apr_brigade_split_ex(bb, e, ctx->holdingbb); ctx->state = RATE_LIMIT; break; } } e = apr_bucket_flush_create(ba); APR_BRIGADE_INSERT_TAIL(bb, e); rv = ap_pass_brigade(f->next, bb); apr_brigade_cleanup(bb); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, rv, f->r, APLOGNO(01455) "rl: full speed brigade pass failed."); return rv; } } else { for (e = APR_BRIGADE_FIRST(bb); e != APR_BRIGADE_SENTINEL(bb); e = APR_BUCKET_NEXT(e)) { if (AP_RL_BUCKET_IS_START(e)) { apr_brigade_split_ex(bb, e, ctx->holdingbb); ctx->state = RATE_FULLSPEED; break; } } while (!APR_BRIGADE_EMPTY(bb)) { apr_off_t len = ctx->chunk_size + ctx->burst; APR_BRIGADE_CONCAT(ctx->tmpbb, bb); /* * Pull next chunk of data; the initial amount is our * burst allotment (if any) plus a chunk. All subsequent * iterations are just chunks with whatever remaining * burst amounts we have left (in case not done in the * first bucket). */ rv = apr_brigade_partition(ctx->tmpbb, len, &e); if (rv != APR_SUCCESS && rv != APR_INCOMPLETE) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, f->r, APLOGNO(01456) "rl: partition failed."); return rv; } /* Send next metadata now if any */ while (e != APR_BRIGADE_SENTINEL(ctx->tmpbb) && APR_BUCKET_IS_METADATA(e)) { e = APR_BUCKET_NEXT(e); } if (e != APR_BRIGADE_SENTINEL(ctx->tmpbb)) { apr_brigade_split_ex(ctx->tmpbb, e, bb); } else { apr_brigade_length(ctx->tmpbb, 1, &len); } /* * Adjust the burst amount depending on how much * we've done up to now. */ if (ctx->burst) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, f->r, APLOGNO(03485) "rl: burst %d; len %"APR_OFF_T_FMT, ctx->burst, len); if (len < ctx->burst) { ctx->burst -= len; } else { ctx->burst = 0; } } e = APR_BRIGADE_LAST(ctx->tmpbb); if (APR_BUCKET_IS_EOS(e)) { ap_remove_output_filter(f); } else if (!APR_BUCKET_IS_FLUSH(e)) { if (APR_BRIGADE_EMPTY(bb)) { /* Wait for more (or next call) */ break; } e = apr_bucket_flush_create(ba); APR_BRIGADE_INSERT_TAIL(ctx->tmpbb, e); } #if defined(RLFDEBUG) brigade_dump(f->r, ctx->tmpbb); brigade_dump(f->r, bb); #endif /* RLFDEBUG */ if (ctx->do_sleep) { apr_sleep(RATE_INTERVAL_MS * 1000); } else { ctx->do_sleep = 1; } rv = ap_pass_brigade(f->next, ctx->tmpbb); apr_brigade_cleanup(ctx->tmpbb); if (rv != APR_SUCCESS) { /* Most often, user disconnects from stream */ ap_log_rerror(APLOG_MARK, APLOG_TRACE1, rv, f->r, APLOGNO(01457) "rl: brigade pass failed."); return rv; } } } if (!APR_BRIGADE_EMPTY(ctx->holdingbb)) { /* Any rate-limited data in tmpbb is sent unlimited along * with the rest. */ APR_BRIGADE_CONCAT(bb, ctx->tmpbb); APR_BRIGADE_CONCAT(bb, ctx->holdingbb); } } #if defined(RLFDEBUG) brigade_dump(f->r, ctx->tmpbb); #endif /* RLFDEBUG */ /* Save remaining tmpbb with the correct lifetime for the next call */ return ap_save_brigade(f, &ctx->holdingbb, &ctx->tmpbb, f->r->pool); } static apr_status_t rl_bucket_read(apr_bucket *b, const char **str, apr_size_t *len, apr_read_type_e block) { *str = NULL; *len = 0; return APR_SUCCESS; } AP_RL_DECLARE(apr_bucket *) ap_rl_end_create(apr_bucket_alloc_t *list) { apr_bucket *b = apr_bucket_alloc(sizeof(*b), list); APR_BUCKET_INIT(b); b->free = apr_bucket_free; b->list = list; b->length = 0; b->start = 0; b->data = NULL; b->type = &ap_rl_bucket_type_end; return b; } AP_RL_DECLARE(apr_bucket *) ap_rl_start_create(apr_bucket_alloc_t *list) { apr_bucket *b = apr_bucket_alloc(sizeof(*b), list); APR_BUCKET_INIT(b); b->free = apr_bucket_free; b->list = list; b->length = 0; b->start = 0; b->data = NULL; b->type = &ap_rl_bucket_type_start; return b; } AP_RL_DECLARE_DATA const apr_bucket_type_t ap_rl_bucket_type_end = { "RL_END", 5, APR_BUCKET_METADATA, apr_bucket_destroy_noop, rl_bucket_read, apr_bucket_setaside_noop, apr_bucket_split_notimpl, apr_bucket_simple_copy }; AP_RL_DECLARE_DATA const apr_bucket_type_t ap_rl_bucket_type_start = { "RL_START", 5, APR_BUCKET_METADATA, apr_bucket_destroy_noop, rl_bucket_read, apr_bucket_setaside_noop, apr_bucket_split_notimpl, apr_bucket_simple_copy }; static void register_hooks(apr_pool_t *p) { /* run after mod_deflate etc etc, but not at connection level, ie, mod_ssl. */ ap_register_output_filter(RATE_LIMIT_FILTER_NAME, rate_limit_filter, NULL, AP_FTYPE_CONNECTION - 1); } AP_DECLARE_MODULE(ratelimit) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ NULL, /* command apr_table_t */ register_hooks }; httpd-2.4.41/modules/filters/mod_substitute.dep0000644000000000000500000000356312674411515020135 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_substitute.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_substitute.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_varbuf.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/filters/NWGNUdeflate0000644000000000000500000001131612002760021016512 0ustar rootsrc# # The MOD_DEFLATE module requires the ZLib source which # can be downloaded from http://www.gzip.org/zlib/ # # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(STDMOD)/ssl \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = deflate # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Deflate Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Deflate Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/deflate.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_deflate.o \ $(OBJDIR)/adler32.o \ $(OBJDIR)/crc32.o \ $(OBJDIR)/deflate.o \ $(OBJDIR)/inflate.o \ $(OBJDIR)/inffast.o \ $(OBJDIR)/inftrees.o \ $(OBJDIR)/trees.o \ $(OBJDIR)/zutil.o \ $(EOLIST) ifeq "$(wildcard $(ZLIBSDK)/infblock.c)" "$(ZLIBSDK)/infblock.c" FILES_nlm_objs += \ $(OBJDIR)/infblock.o \ $(OBJDIR)/infcodes.o \ $(OBJDIR)/infutil.o \ $(EOLIST) endif # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ deflate_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # vpath %.c $(ZLIBSDK) # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/filters/mod_charset_lite.mak0000644000000000000500000002435312701473373020371 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_charset_lite.dsp !IF "$(CFG)" == "" CFG=mod_charset_lite - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_charset_lite - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_charset_lite - Win32 Release" && "$(CFG)" != "mod_charset_lite - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_charset_lite.mak" CFG="mod_charset_lite - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_charset_lite - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_charset_lite - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_charset_lite - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_charset_lite.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_charset_lite.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_charset_lite.obj" -@erase "$(INTDIR)\mod_charset_lite.res" -@erase "$(INTDIR)\mod_charset_lite_src.idb" -@erase "$(INTDIR)\mod_charset_lite_src.pdb" -@erase "$(OUTDIR)\mod_charset_lite.exp" -@erase "$(OUTDIR)\mod_charset_lite.lib" -@erase "$(OUTDIR)\mod_charset_lite.pdb" -@erase "$(OUTDIR)\mod_charset_lite.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_charset_lite_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_charset_lite.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_charset_lite.so" /d LONG_NAME="charset_lite_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_charset_lite.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_charset_lite.pdb" /debug /out:"$(OUTDIR)\mod_charset_lite.so" /implib:"$(OUTDIR)\mod_charset_lite.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_charset_lite.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_charset_lite.obj" \ "$(INTDIR)\mod_charset_lite.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_charset_lite.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_charset_lite.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_charset_lite.so" if exist .\Release\mod_charset_lite.so.manifest mt.exe -manifest .\Release\mod_charset_lite.so.manifest -outputresource:.\Release\mod_charset_lite.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_charset_lite - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_charset_lite.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_charset_lite.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_charset_lite.obj" -@erase "$(INTDIR)\mod_charset_lite.res" -@erase "$(INTDIR)\mod_charset_lite_src.idb" -@erase "$(INTDIR)\mod_charset_lite_src.pdb" -@erase "$(OUTDIR)\mod_charset_lite.exp" -@erase "$(OUTDIR)\mod_charset_lite.lib" -@erase "$(OUTDIR)\mod_charset_lite.pdb" -@erase "$(OUTDIR)\mod_charset_lite.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_charset_lite_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_charset_lite.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_charset_lite.so" /d LONG_NAME="charset_lite_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_charset_lite.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_charset_lite.pdb" /debug /out:"$(OUTDIR)\mod_charset_lite.so" /implib:"$(OUTDIR)\mod_charset_lite.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_charset_lite.so LINK32_OBJS= \ "$(INTDIR)\mod_charset_lite.obj" \ "$(INTDIR)\mod_charset_lite.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_charset_lite.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_charset_lite.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_charset_lite.so" if exist .\Debug\mod_charset_lite.so.manifest mt.exe -manifest .\Debug\mod_charset_lite.so.manifest -outputresource:.\Debug\mod_charset_lite.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_charset_lite.dep") !INCLUDE "mod_charset_lite.dep" !ELSE !MESSAGE Warning: cannot find "mod_charset_lite.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_charset_lite - Win32 Release" || "$(CFG)" == "mod_charset_lite - Win32 Debug" !IF "$(CFG)" == "mod_charset_lite - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_charset_lite - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_charset_lite - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_charset_lite - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_charset_lite - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_charset_lite - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_charset_lite - Win32 Release" "$(INTDIR)\mod_charset_lite.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_charset_lite.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_charset_lite.so" /d LONG_NAME="charset_lite_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_charset_lite - Win32 Debug" "$(INTDIR)\mod_charset_lite.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_charset_lite.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_charset_lite.so" /d LONG_NAME="charset_lite_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_charset_lite.c "$(INTDIR)\mod_charset_lite.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/filters/mod_data.dep0000644000000000000500000000373512674411515016634 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_data.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_data.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_base64.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/filters/mod_deflate.mak0000644000000000000500000002401312701473373017320 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_deflate.dsp !IF "$(CFG)" == "" CFG=mod_deflate - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_deflate - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_deflate - Win32 Release" && "$(CFG)" != "mod_deflate - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_deflate.mak" CFG="mod_deflate - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_deflate - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_deflate - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_deflate - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_deflate.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_deflate.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_deflate.obj" -@erase "$(INTDIR)\mod_deflate.res" -@erase "$(INTDIR)\mod_deflate_src.idb" -@erase "$(INTDIR)\mod_deflate_src.pdb" -@erase "$(OUTDIR)\mod_deflate.exp" -@erase "$(OUTDIR)\mod_deflate.lib" -@erase "$(OUTDIR)\mod_deflate.pdb" -@erase "$(OUTDIR)\mod_deflate.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../ssl" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/zlib" /D "NDEBUG" /D "ZLIB_DLL" /D "HAVE_ZUTIL_H" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_deflate_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_deflate.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_deflate.so" /d LONG_NAME="deflate_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_deflate.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib zdll.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_deflate.pdb" /debug /out:"$(OUTDIR)\mod_deflate.so" /implib:"$(OUTDIR)\mod_deflate.lib" /libpath:"../../srclib/zlib" /base:@..\..\os\win32\BaseAddr.ref,mod_deflate.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_deflate.obj" \ "$(INTDIR)\mod_deflate.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_deflate.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_deflate.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_deflate.so" if exist .\Release\mod_deflate.so.manifest mt.exe -manifest .\Release\mod_deflate.so.manifest -outputresource:.\Release\mod_deflate.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_deflate - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_deflate.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_deflate.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_deflate.obj" -@erase "$(INTDIR)\mod_deflate.res" -@erase "$(INTDIR)\mod_deflate_src.idb" -@erase "$(INTDIR)\mod_deflate_src.pdb" -@erase "$(OUTDIR)\mod_deflate.exp" -@erase "$(OUTDIR)\mod_deflate.lib" -@erase "$(OUTDIR)\mod_deflate.pdb" -@erase "$(OUTDIR)\mod_deflate.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../ssl" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/zlib" /D "_DEBUG" /D "ZLIB_DLL" /D "HAVE_ZUTIL_H" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_deflate_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_deflate.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_deflate.so" /d LONG_NAME="deflate_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_deflate.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib zdll.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_deflate.pdb" /debug /out:"$(OUTDIR)\mod_deflate.so" /implib:"$(OUTDIR)\mod_deflate.lib" /libpath:"../../srclib/zlib" /base:@..\..\os\win32\BaseAddr.ref,mod_deflate.so LINK32_OBJS= \ "$(INTDIR)\mod_deflate.obj" \ "$(INTDIR)\mod_deflate.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_deflate.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_deflate.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_deflate.so" if exist .\Debug\mod_deflate.so.manifest mt.exe -manifest .\Debug\mod_deflate.so.manifest -outputresource:.\Debug\mod_deflate.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_deflate.dep") !INCLUDE "mod_deflate.dep" !ELSE !MESSAGE Warning: cannot find "mod_deflate.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_deflate - Win32 Release" || "$(CFG)" == "mod_deflate - Win32 Debug" !IF "$(CFG)" == "mod_deflate - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_deflate - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_deflate - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_deflate - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_deflate - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_deflate - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_deflate - Win32 Release" "$(INTDIR)\mod_deflate.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_deflate.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_deflate.so" /d LONG_NAME="deflate_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_deflate - Win32 Debug" "$(INTDIR)\mod_deflate.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_deflate.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_deflate.so" /d LONG_NAME="deflate_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_deflate.c "$(INTDIR)\mod_deflate.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/filters/mod_reflector.dep0000644000000000000500000000402012674411515017674 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_reflector.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_reflector.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_core.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/filters/mod_buffer.dsp0000644000000000000500000001062711141403164017175 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_buffer" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_buffer - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_buffer.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_buffer.mak" CFG="mod_buffer - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_buffer - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_buffer - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_buffer - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "HAVE_ZUTIL_H" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_buffer_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_buffer.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_buffer.so" /d LONG_NAME="buffer_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_buffer.so" /base:@..\..\os\win32\BaseAddr.ref,mod_buffer.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_buffer.so" /base:@..\..\os\win32\BaseAddr.ref,mod_buffer.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_buffer.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_buffer - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "HAVE_ZUTIL_H" /Fd"Debug\mod_buffer_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_buffer.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_buffer.so" /d LONG_NAME="buffer_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_buffer.so" /base:@..\..\os\win32\BaseAddr.ref,mod_buffer.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_buffer.so" /base:@..\..\os\win32\BaseAddr.ref,mod_buffer.so # Begin Special Build Tool TargetPath=.\Debug\mod_buffer.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_buffer - Win32 Release" # Name "mod_buffer - Win32 Debug" # Begin Source File SOURCE=.\mod_buffer.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/filters/mod_brotli.dep0000644000000000000500000000311313100131425017164 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_brotli.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_brotli.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/filters/mod_charset_lite.c0000644000000000000500000012367612656470644020062 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * simple hokey charset recoding configuration module * * See mod_ebcdic and mod_charset for more thought-out examples. This * one is just so Jeff can learn how a module works and experiment with * basic character set recoding configuration. * * !!!This is an extremely cheap ripoff of mod_charset.c from Russian Apache!!! */ #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_main.h" #include "http_protocol.h" #include "http_request.h" #include "util_charset.h" #include "apr_buckets.h" #include "util_filter.h" #include "apr_strings.h" #include "apr_lib.h" #include "apr_xlate.h" #define APR_WANT_STRFUNC #include "apr_want.h" #define OUTPUT_XLATE_BUF_SIZE (16*1024) /* size of translation buffer used on output */ #define INPUT_XLATE_BUF_SIZE (8*1024) /* size of translation buffer used on input */ #define XLATE_MIN_BUFF_LEFT 128 /* flush once there is no more than this much * space left in the translation buffer */ #define FATTEST_CHAR 8 /* we don't handle chars wider than this that straddle * two buckets */ /* extended error status codes; this is used in addition to an apr_status_t to * track errors in the translation filter */ typedef enum { EES_INIT = 0, /* no error info yet; value must be 0 for easy init */ EES_LIMIT, /* built-in restriction encountered */ EES_INCOMPLETE_CHAR, /* incomplete multi-byte char at end of content */ EES_BUCKET_READ, EES_DOWNSTREAM, /* something bad happened in a filter below xlate */ EES_BAD_INPUT /* input data invalid */ } ees_t; /* registered name of the output translation filter */ #define XLATEOUT_FILTER_NAME "XLATEOUT" /* registered name of input translation filter */ #define XLATEIN_FILTER_NAME "XLATEIN" typedef struct charset_dir_t { const char *charset_source; /* source encoding */ const char *charset_default; /* how to ship on wire */ /** module does ap_add_*_filter()? */ enum {IA_INIT, IA_IMPADD, IA_NOIMPADD} implicit_add; /** treat all mimetypes as text? */ enum {FX_INIT, FX_FORCE, FX_NOFORCE} force_xlate; } charset_dir_t; /* charset_filter_ctx_t is created for each filter instance; because the same * filter code is used for translating in both directions, we need this context * data to tell the filter which translation handle to use; it also can hold a * character which was split between buckets */ typedef struct charset_filter_ctx_t { apr_xlate_t *xlate; int is_sb; /* single-byte translation? */ charset_dir_t *dc; ees_t ees; /* extended error status */ apr_size_t saved; char buf[FATTEST_CHAR]; /* we want to be able to build a complete char here */ int ran; /* has filter instance run before? */ int noop; /* should we pass brigades through unchanged? */ char *tmp; /* buffer for input filtering */ apr_bucket_brigade *bb; /* input buckets we couldn't finish translating */ apr_bucket_brigade *tmpbb; /* used for passing downstream */ } charset_filter_ctx_t; /* charset_req_t is available via r->request_config if any translation is * being performed */ typedef struct charset_req_t { charset_dir_t *dc; charset_filter_ctx_t *output_ctx, *input_ctx; } charset_req_t; module AP_MODULE_DECLARE_DATA charset_lite_module; static void *create_charset_dir_conf(apr_pool_t *p,char *dummy) { charset_dir_t *dc = (charset_dir_t *)apr_pcalloc(p,sizeof(charset_dir_t)); return dc; } static void *merge_charset_dir_conf(apr_pool_t *p, void *basev, void *overridesv) { charset_dir_t *a = (charset_dir_t *)apr_pcalloc (p, sizeof(charset_dir_t)); charset_dir_t *base = (charset_dir_t *)basev, *over = (charset_dir_t *)overridesv; /* If it is defined in the current container, use it. Otherwise, use the one * from the enclosing container. */ a->charset_default = over->charset_default ? over->charset_default : base->charset_default; a->charset_source = over->charset_source ? over->charset_source : base->charset_source; a->implicit_add = over->implicit_add != IA_INIT ? over->implicit_add : base->implicit_add; a->force_xlate= over->force_xlate != FX_INIT ? over->force_xlate : base->force_xlate; return a; } /* CharsetSourceEnc charset */ static const char *add_charset_source(cmd_parms *cmd, void *in_dc, const char *name) { charset_dir_t *dc = in_dc; dc->charset_source = name; return NULL; } /* CharsetDefault charset */ static const char *add_charset_default(cmd_parms *cmd, void *in_dc, const char *name) { charset_dir_t *dc = in_dc; dc->charset_default = name; return NULL; } /* CharsetOptions optionflag... */ static const char *add_charset_options(cmd_parms *cmd, void *in_dc, const char *flag) { charset_dir_t *dc = in_dc; if (!strcasecmp(flag, "ImplicitAdd")) { dc->implicit_add = IA_IMPADD; } else if (!strcasecmp(flag, "NoImplicitAdd")) { dc->implicit_add = IA_NOIMPADD; } else if (!strcasecmp(flag, "TranslateAllMimeTypes")) { dc->force_xlate = FX_FORCE; } else if (!strcasecmp(flag, "NoTranslateAllMimeTypes")) { dc->force_xlate = FX_NOFORCE; } else { return apr_pstrcat(cmd->temp_pool, "Invalid CharsetOptions option: ", flag, NULL); } return NULL; } /* find_code_page() is a fixup hook that checks if the module is * configured and the input or output potentially need to be translated. * If so, context is initialized for the filters. */ static int find_code_page(request_rec *r) { charset_dir_t *dc = ap_get_module_config(r->per_dir_config, &charset_lite_module); charset_req_t *reqinfo; charset_filter_ctx_t *input_ctx, *output_ctx; apr_status_t rv; ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "uri: %s file: %s method: %d " "imt: %s flags: %s%s%s %s->%s", r->uri, r->filename ? r->filename : "(none)", r->method_number, r->content_type ? r->content_type : "(unknown)", r->main ? "S" : "", /* S if subrequest */ r->prev ? "R" : "", /* R if redirect */ r->proxyreq ? "P" : "", /* P if proxy */ dc->charset_source, dc->charset_default); /* If we don't have a full directory configuration, bail out. */ if (!dc->charset_source || !dc->charset_default) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01448) "incomplete configuration: src %s, dst %s", dc->charset_source ? dc->charset_source : "unspecified", dc->charset_default ? dc->charset_default : "unspecified"); return DECLINED; } /* catch proxy requests */ if (r->proxyreq) { return DECLINED; } /* mod_rewrite indicators */ if (r->filename && (!strncmp(r->filename, "redirect:", 9) || !strncmp(r->filename, "gone:", 5) || !strncmp(r->filename, "passthrough:", 12) || !strncmp(r->filename, "forbidden:", 10))) { return DECLINED; } /* no translation when server and network charsets are set to the same value */ if (!strcasecmp(dc->charset_source, dc->charset_default)) { return DECLINED; } /* Get storage for the request data and the output filter context. * We rarely need the input filter context, so allocate that separately. */ reqinfo = (charset_req_t *)apr_pcalloc(r->pool, sizeof(charset_req_t) + sizeof(charset_filter_ctx_t)); output_ctx = (charset_filter_ctx_t *)(reqinfo + 1); reqinfo->dc = dc; output_ctx->dc = dc; output_ctx->tmpbb = apr_brigade_create(r->pool, r->connection->bucket_alloc); ap_set_module_config(r->request_config, &charset_lite_module, reqinfo); reqinfo->output_ctx = output_ctx; switch (r->method_number) { case M_PUT: case M_POST: /* Set up input translation. Note: A request body can be included * with the OPTIONS method, but for now we don't set up translation * of it. */ input_ctx = apr_pcalloc(r->pool, sizeof(charset_filter_ctx_t)); input_ctx->bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); input_ctx->tmp = apr_palloc(r->pool, INPUT_XLATE_BUF_SIZE); input_ctx->dc = dc; reqinfo->input_ctx = input_ctx; rv = apr_xlate_open(&input_ctx->xlate, dc->charset_source, dc->charset_default, r->pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01449) "can't open translation %s->%s", dc->charset_default, dc->charset_source); return HTTP_INTERNAL_SERVER_ERROR; } if (apr_xlate_sb_get(input_ctx->xlate, &input_ctx->is_sb) != APR_SUCCESS) { input_ctx->is_sb = 0; } } return DECLINED; } static int configured_in_list(request_rec *r, const char *filter_name, struct ap_filter_t *filter_list) { struct ap_filter_t *filter = filter_list; while (filter) { if (!strcasecmp(filter_name, filter->frec->name)) { return 1; } filter = filter->next; } return 0; } static int configured_on_input(request_rec *r, const char *filter_name) { return configured_in_list(r, filter_name, r->input_filters); } static int configured_on_output(request_rec *r, const char *filter_name) { return configured_in_list(r, filter_name, r->output_filters); } /* xlate_insert_filter() is a filter hook which decides whether or not * to insert a translation filter for the current request. */ static void xlate_insert_filter(request_rec *r) { /* Hey... don't be so quick to use reqinfo->dc here; reqinfo may be NULL */ charset_req_t *reqinfo = ap_get_module_config(r->request_config, &charset_lite_module); charset_dir_t *dc = ap_get_module_config(r->per_dir_config, &charset_lite_module); if (dc && (dc->implicit_add == IA_NOIMPADD)) { ap_log_rerror(APLOG_MARK, APLOG_TRACE6, 0, r, "xlate output filter not added implicitly because " "CharsetOptions included 'NoImplicitAdd'"); return; } if (reqinfo) { if (reqinfo->output_ctx && !configured_on_output(r, XLATEOUT_FILTER_NAME)) { ap_add_output_filter(XLATEOUT_FILTER_NAME, reqinfo->output_ctx, r, r->connection); } ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "xlate output filter not added implicitly because %s", !reqinfo->output_ctx ? "no output configuration available" : "another module added the filter"); if (reqinfo->input_ctx && !configured_on_input(r, XLATEIN_FILTER_NAME)) { ap_add_input_filter(XLATEIN_FILTER_NAME, reqinfo->input_ctx, r, r->connection); } ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "xlate input filter not added implicitly because %s", !reqinfo->input_ctx ? "no input configuration available" : "another module added the filter"); } } /* stuff that sucks that I know of: * * bucket handling: * why create an eos bucket when we see it come down the stream? just send the one * passed as input... news flash: this will be fixed when xlate_out_filter() starts * using the more generic xlate_brigade() * * translation mechanics: * we don't handle characters that straddle more than two buckets; an error * will be generated */ static apr_status_t send_bucket_downstream(ap_filter_t *f, apr_bucket *b) { charset_filter_ctx_t *ctx = f->ctx; apr_status_t rv; APR_BRIGADE_INSERT_TAIL(ctx->tmpbb, b); rv = ap_pass_brigade(f->next, ctx->tmpbb); if (rv != APR_SUCCESS) { ctx->ees = EES_DOWNSTREAM; } apr_brigade_cleanup(ctx->tmpbb); return rv; } /* send_downstream() is passed the translated data; it puts it in a single- * bucket brigade and passes the brigade to the next filter */ static apr_status_t send_downstream(ap_filter_t *f, const char *tmp, apr_size_t len) { request_rec *r = f->r; conn_rec *c = r->connection; apr_bucket *b; b = apr_bucket_transient_create(tmp, len, c->bucket_alloc); return send_bucket_downstream(f, b); } static apr_status_t send_eos(ap_filter_t *f) { request_rec *r = f->r; conn_rec *c = r->connection; apr_bucket_brigade *bb; apr_bucket *b; charset_filter_ctx_t *ctx = f->ctx; apr_status_t rv; bb = apr_brigade_create(r->pool, c->bucket_alloc); b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); rv = ap_pass_brigade(f->next, bb); if (rv != APR_SUCCESS) { ctx->ees = EES_DOWNSTREAM; } return rv; } static apr_status_t set_aside_partial_char(charset_filter_ctx_t *ctx, const char *partial, apr_size_t partial_len) { apr_status_t rv; if (sizeof(ctx->buf) > partial_len) { ctx->saved = partial_len; memcpy(ctx->buf, partial, partial_len); rv = APR_SUCCESS; } else { rv = APR_INCOMPLETE; ctx->ees = EES_LIMIT; /* we don't handle chars this wide which straddle * buckets */ } return rv; } static apr_status_t finish_partial_char(charset_filter_ctx_t *ctx, /* input buffer: */ const char **cur_str, apr_size_t *cur_len, /* output buffer: */ char **out_str, apr_size_t *out_len) { apr_status_t rv; apr_size_t tmp_input_len; /* Keep adding bytes from the input string to the saved string until we * 1) finish the input char * 2) get an error * or 3) run out of bytes to add */ do { ctx->buf[ctx->saved] = **cur_str; ++ctx->saved; ++*cur_str; --*cur_len; tmp_input_len = ctx->saved; rv = apr_xlate_conv_buffer(ctx->xlate, ctx->buf, &tmp_input_len, *out_str, out_len); } while (rv == APR_INCOMPLETE && *cur_len); if (rv == APR_SUCCESS) { ctx->saved = 0; } else { ctx->ees = EES_LIMIT; /* code isn't smart enough to handle chars * straddling more than two buckets */ } return rv; } static void log_xlate_error(ap_filter_t *f, apr_status_t rv) { charset_filter_ctx_t *ctx = f->ctx; const char *msg; char msgbuf[100]; apr_size_t len; switch(ctx->ees) { case EES_LIMIT: rv = 0; msg = APLOGNO(02193) "xlate filter - a built-in restriction was encountered"; break; case EES_BAD_INPUT: rv = 0; msg = APLOGNO(02194) "xlate filter - an input character was invalid"; break; case EES_BUCKET_READ: rv = 0; msg = APLOGNO(02195) "xlate filter - bucket read routine failed"; break; case EES_INCOMPLETE_CHAR: rv = 0; strcpy(msgbuf, APLOGNO(02196) "xlate filter - incomplete char at end of input - "); len = ctx->saved; /* We must ensure not to process more than what would fit in the * remaining of the destination buffer, including terminating NULL */ if (len > (sizeof(msgbuf) - strlen(msgbuf) - 1) / 2) len = (sizeof(msgbuf) - strlen(msgbuf) - 1) / 2; ap_bin2hex(ctx->buf, len, msgbuf + strlen(msgbuf)); msg = msgbuf; break; case EES_DOWNSTREAM: msg = APLOGNO(02197) "xlate filter - an error occurred in a lower filter"; break; default: msg = APLOGNO(02198) "xlate filter - returning error"; } ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, f->r, APLOGNO(02997) "%s", msg); } /* chk_filter_chain() is called once per filter instance; it tries to * determine if the current filter instance should be disabled because * its translation is incompatible with the translation of an existing * instance of the translate filter * * Example bad scenario: * * configured filter chain for the request: * INCLUDES XLATEOUT(8859-1->UTS-16) * configured filter chain for the subrequest: * XLATEOUT(8859-1->UTS-16) * * When the subrequest is processed, the filter chain will be * XLATEOUT(8859-1->UTS-16) XLATEOUT(8859-1->UTS-16) * This makes no sense, so the instance of XLATEOUT added for the * subrequest will be noop-ed. * * Example good scenario: * * configured filter chain for the request: * INCLUDES XLATEOUT(8859-1->UTS-16) * configured filter chain for the subrequest: * XLATEOUT(IBM-1047->8859-1) * * When the subrequest is processed, the filter chain will be * XLATEOUT(IBM-1047->8859-1) XLATEOUT(8859-1->UTS-16) * This makes sense, so the instance of XLATEOUT added for the * subrequest will be left alone and it will translate from * IBM-1047->8859-1. */ static void chk_filter_chain(ap_filter_t *f) { ap_filter_t *curf; charset_filter_ctx_t *curctx, *last_xlate_ctx = NULL, *ctx = f->ctx; int output = !strcasecmp(f->frec->name, XLATEOUT_FILTER_NAME); if (ctx->noop) { return; } /* walk the filter chain; see if it makes sense for our filter to * do any translation */ curf = output ? f->r->output_filters : f->r->input_filters; while (curf) { if (!strcasecmp(curf->frec->name, f->frec->name) && curf->ctx) { curctx = (charset_filter_ctx_t *)curf->ctx; if (!last_xlate_ctx) { last_xlate_ctx = curctx; } else { if (strcmp(last_xlate_ctx->dc->charset_default, curctx->dc->charset_source)) { /* incompatible translation * if our filter instance is incompatible with an instance * already in place, noop our instance * Notes: * . We are only willing to noop our own instance. * . It is possible to noop another instance which has not * yet run, but this is not currently implemented. * Hopefully it will not be needed. * . It is not possible to noop an instance which has * already run. */ if (last_xlate_ctx == f->ctx) { last_xlate_ctx->noop = 1; if (APLOGrtrace1(f->r)) { const char *symbol = output ? "->" : "<-"; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, f->r, APLOGNO(01451) "%s %s - disabling " "translation %s%s%s; existing " "translation %s%s%s", f->r->uri ? "uri" : "file", f->r->uri ? f->r->uri : f->r->filename, last_xlate_ctx->dc->charset_source, symbol, last_xlate_ctx->dc->charset_default, curctx->dc->charset_source, symbol, curctx->dc->charset_default); } } else { const char *symbol = output ? "->" : "<-"; ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, f->r, APLOGNO(01452) "chk_filter_chain() - can't disable " "translation %s%s%s; existing " "translation %s%s%s", last_xlate_ctx->dc->charset_source, symbol, last_xlate_ctx->dc->charset_default, curctx->dc->charset_source, symbol, curctx->dc->charset_default); } break; } } } curf = curf->next; } } /* xlate_brigade() is used to filter request and response bodies * * we'll stop when one of the following occurs: * . we run out of buckets * . we run out of space in the output buffer * . we hit an error or metadata * * inputs: * bb: brigade to process * buffer: storage to hold the translated characters * buffer_avail: size of buffer * (and a few more uninteresting parms) * * outputs: * return value: APR_SUCCESS or some error code * bb: we've removed any buckets representing the * translated characters; the eos bucket, if * present, will be left in the brigade * buffer: filled in with translated characters * buffer_avail: updated with the bytes remaining * hit_eos: did we hit an EOS bucket? */ static apr_status_t xlate_brigade(charset_filter_ctx_t *ctx, apr_bucket_brigade *bb, char *buffer, apr_size_t *buffer_avail, int *hit_eos) { apr_bucket *b = NULL; /* set to NULL only to quiet some gcc */ apr_bucket *consumed_bucket; const char *bucket; apr_size_t bytes_in_bucket; /* total bytes read from current bucket */ apr_size_t bucket_avail; /* bytes left in current bucket */ apr_status_t rv = APR_SUCCESS; *hit_eos = 0; bucket_avail = 0; consumed_bucket = NULL; while (1) { if (!bucket_avail) { /* no bytes left to process in the current bucket... */ if (consumed_bucket) { apr_bucket_delete(consumed_bucket); consumed_bucket = NULL; } b = APR_BRIGADE_FIRST(bb); if (b == APR_BRIGADE_SENTINEL(bb) || APR_BUCKET_IS_METADATA(b)) { break; } rv = apr_bucket_read(b, &bucket, &bytes_in_bucket, APR_BLOCK_READ); if (rv != APR_SUCCESS) { ctx->ees = EES_BUCKET_READ; break; } bucket_avail = bytes_in_bucket; consumed_bucket = b; /* for axing when we're done reading it */ } if (bucket_avail) { /* We've got data, so translate it. */ if (ctx->saved) { /* Rats... we need to finish a partial character from the previous * bucket. * * Strangely, finish_partial_char() increments the input buffer * pointer but does not increment the output buffer pointer. */ apr_size_t old_buffer_avail = *buffer_avail; rv = finish_partial_char(ctx, &bucket, &bucket_avail, &buffer, buffer_avail); buffer += old_buffer_avail - *buffer_avail; } else { apr_size_t old_buffer_avail = *buffer_avail; apr_size_t old_bucket_avail = bucket_avail; rv = apr_xlate_conv_buffer(ctx->xlate, bucket, &bucket_avail, buffer, buffer_avail); buffer += old_buffer_avail - *buffer_avail; bucket += old_bucket_avail - bucket_avail; if (rv == APR_INCOMPLETE) { /* partial character at end of input */ /* We need to save the final byte(s) for next time; we can't * convert it until we look at the next bucket. */ rv = set_aside_partial_char(ctx, bucket, bucket_avail); bucket_avail = 0; } } if (rv != APR_SUCCESS) { /* bad input byte or partial char too big to store */ break; } if (*buffer_avail < XLATE_MIN_BUFF_LEFT) { /* if any data remains in the current bucket, split there */ if (bucket_avail) { apr_bucket_split(b, bytes_in_bucket - bucket_avail); } apr_bucket_delete(b); break; } } } if (!APR_BRIGADE_EMPTY(bb)) { b = APR_BRIGADE_FIRST(bb); if (APR_BUCKET_IS_EOS(b)) { /* Leave the eos bucket in the brigade for reporting to * subsequent filters. */ *hit_eos = 1; if (ctx->saved) { /* Oops... we have a partial char from the previous bucket * that won't be completed because there's no more data. */ rv = APR_INCOMPLETE; ctx->ees = EES_INCOMPLETE_CHAR; } } } return rv; } /* xlate_out_filter() handles (almost) arbitrary conversions from one charset * to another... * translation is determined in the fixup hook (find_code_page), which is * where the filter's context data is set up... the context data gives us * the translation handle */ static apr_status_t xlate_out_filter(ap_filter_t *f, apr_bucket_brigade *bb) { charset_req_t *reqinfo = ap_get_module_config(f->r->request_config, &charset_lite_module); charset_dir_t *dc = ap_get_module_config(f->r->per_dir_config, &charset_lite_module); charset_filter_ctx_t *ctx = f->ctx; apr_bucket *dptr, *consumed_bucket; const char *cur_str; apr_size_t cur_len, cur_avail; char tmp[OUTPUT_XLATE_BUF_SIZE]; apr_size_t space_avail; int done; apr_status_t rv = APR_SUCCESS; if (!ctx) { /* this is SetOutputFilter path; grab the preallocated context, * if any; note that if we decided not to do anything in an earlier * handler, we won't even have a reqinfo */ if (reqinfo) { ctx = f->ctx = reqinfo->output_ctx; reqinfo->output_ctx = NULL; /* prevent SNAFU if user coded us twice * in the filter chain; we can't have two * instances using the same context */ } if (!ctx) { /* no idea how to translate; don't do anything */ ctx = f->ctx = apr_pcalloc(f->r->pool, sizeof(charset_filter_ctx_t)); ctx->dc = dc; ctx->noop = 1; } } /* Check the mime type to see if translation should be performed. */ if (!ctx->noop && ctx->xlate == NULL) { const char *mime_type = f->r->content_type; if (mime_type && (strncasecmp(mime_type, "text/", 5) == 0 || #if APR_CHARSET_EBCDIC /* On an EBCDIC machine, be willing to translate mod_autoindex- * generated output. Otherwise, it doesn't look too cool. * * XXX This isn't a perfect fix because this doesn't trigger us * to convert from the charset of the source code to ASCII. The * general solution seems to be to allow a generator to set an * indicator in the r specifying that the body is coded in the * implementation character set (i.e., the charset of the source * code). This would get several different types of documents * translated properly: mod_autoindex output, mod_status output, * mod_info output, hard-coded error documents, etc. */ strcmp(mime_type, DIR_MAGIC_TYPE) == 0 || #endif strncasecmp(mime_type, "message/", 8) == 0 || dc->force_xlate == FX_FORCE)) { rv = apr_xlate_open(&ctx->xlate, dc->charset_default, dc->charset_source, f->r->pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, f->r, APLOGNO(01453) "can't open translation %s->%s", dc->charset_source, dc->charset_default); ctx->noop = 1; } else { if (apr_xlate_sb_get(ctx->xlate, &ctx->is_sb) != APR_SUCCESS) { ctx->is_sb = 0; } } } else { ctx->noop = 1; if (mime_type) { ap_log_rerror(APLOG_MARK, APLOG_TRACE6, 0, f->r, "mime type is %s; no translation selected", mime_type); } } } ap_log_rerror(APLOG_MARK, APLOG_TRACE6, 0, f->r, "xlate_out_filter() - " "charset_source: %s charset_default: %s", dc && dc->charset_source ? dc->charset_source : "(none)", dc && dc->charset_default ? dc->charset_default : "(none)"); if (!ctx->ran) { /* filter never ran before */ chk_filter_chain(f); ctx->ran = 1; if (!ctx->noop && !ctx->is_sb) { /* We're not converting between two single-byte charsets, so unset * Content-Length since it is unlikely to remain the same. */ apr_table_unset(f->r->headers_out, "Content-Length"); } } if (ctx->noop) { return ap_pass_brigade(f->next, bb); } dptr = APR_BRIGADE_FIRST(bb); done = 0; cur_len = 0; space_avail = sizeof(tmp); consumed_bucket = NULL; while (!done) { if (!cur_len) { /* no bytes left to process in the current bucket... */ if (consumed_bucket) { apr_bucket_delete(consumed_bucket); consumed_bucket = NULL; } if (dptr == APR_BRIGADE_SENTINEL(bb)) { break; } if (APR_BUCKET_IS_EOS(dptr)) { cur_len = -1; /* XXX yuck, but that tells us to send * eos down; when we minimize our bb construction * we'll fix this crap */ if (ctx->saved) { /* Oops... we have a partial char from the previous bucket * that won't be completed because there's no more data. */ rv = APR_INCOMPLETE; ctx->ees = EES_INCOMPLETE_CHAR; } break; } if (APR_BUCKET_IS_METADATA(dptr)) { apr_bucket *metadata_bucket; metadata_bucket = dptr; dptr = APR_BUCKET_NEXT(dptr); APR_BUCKET_REMOVE(metadata_bucket); rv = send_bucket_downstream(f, metadata_bucket); if (rv != APR_SUCCESS) { done = 1; } continue; } rv = apr_bucket_read(dptr, &cur_str, &cur_len, APR_BLOCK_READ); if (rv != APR_SUCCESS) { ctx->ees = EES_BUCKET_READ; break; } consumed_bucket = dptr; /* for axing when we're done reading it */ dptr = APR_BUCKET_NEXT(dptr); /* get ready for when we access the * next bucket */ } /* Try to fill up our tmp buffer with translated data. */ cur_avail = cur_len; if (cur_len) { /* maybe we just hit the end of a pipe (len = 0) ? */ if (ctx->saved) { /* Rats... we need to finish a partial character from the previous * bucket. */ char *tmp_tmp; tmp_tmp = tmp + sizeof(tmp) - space_avail; rv = finish_partial_char(ctx, &cur_str, &cur_len, &tmp_tmp, &space_avail); } else { rv = apr_xlate_conv_buffer(ctx->xlate, cur_str, &cur_avail, tmp + sizeof(tmp) - space_avail, &space_avail); /* Update input ptr and len after consuming some bytes */ cur_str += cur_len - cur_avail; cur_len = cur_avail; if (rv == APR_INCOMPLETE) { /* partial character at end of input */ /* We need to save the final byte(s) for next time; we can't * convert it until we look at the next bucket. */ rv = set_aside_partial_char(ctx, cur_str, cur_len); cur_len = 0; } } } if (rv != APR_SUCCESS) { /* bad input byte or partial char too big to store */ done = 1; } if (space_avail < XLATE_MIN_BUFF_LEFT) { /* It is time to flush, as there is not enough space left in the * current output buffer to bother with converting more data. */ rv = send_downstream(f, tmp, sizeof(tmp) - space_avail); if (rv != APR_SUCCESS) { done = 1; } /* tmp is now empty */ space_avail = sizeof(tmp); } } if (rv == APR_SUCCESS) { if (space_avail < sizeof(tmp)) { /* gotta write out what we converted */ rv = send_downstream(f, tmp, sizeof(tmp) - space_avail); } } if (rv == APR_SUCCESS) { if (cur_len == -1) { rv = send_eos(f); } } else { log_xlate_error(f, rv); } return rv; } static apr_status_t xlate_in_filter(ap_filter_t *f, apr_bucket_brigade *bb, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { apr_status_t rv; charset_req_t *reqinfo = ap_get_module_config(f->r->request_config, &charset_lite_module); charset_dir_t *dc = ap_get_module_config(f->r->per_dir_config, &charset_lite_module); charset_filter_ctx_t *ctx = f->ctx; apr_size_t buffer_size; int hit_eos; /* just get out of the way of things we don't want. */ if (mode != AP_MODE_READBYTES) { return ap_get_brigade(f->next, bb, mode, block, readbytes); } if (!ctx) { /* this is SetInputFilter path; grab the preallocated context, * if any; note that if we decided not to do anything in an earlier * handler, we won't even have a reqinfo */ if (reqinfo) { ctx = f->ctx = reqinfo->input_ctx; reqinfo->input_ctx = NULL; /* prevent SNAFU if user coded us twice * in the filter chain; we can't have two * instances using the same context */ } if (!ctx) { /* no idea how to translate; don't do anything */ ctx = f->ctx = apr_pcalloc(f->r->pool, sizeof(charset_filter_ctx_t)); ctx->dc = dc; ctx->noop = 1; } } ap_log_rerror(APLOG_MARK, APLOG_TRACE6, 0, f->r, "xlate_in_filter() - " "charset_source: %s charset_default: %s", dc && dc->charset_source ? dc->charset_source : "(none)", dc && dc->charset_default ? dc->charset_default : "(none)"); if (!ctx->ran) { /* filter never ran before */ chk_filter_chain(f); ctx->ran = 1; if (!ctx->noop && !ctx->is_sb && apr_table_get(f->r->headers_in, "Content-Length")) { /* A Content-Length header is present, but it won't be valid after * conversion because we're not converting between two single-byte * charsets. This will affect most CGI scripts and may affect * some modules. * Content-Length can't be unset here because that would break * being able to read the request body. * Processing of chunked request bodies is not impacted by this * filter since the length was not declared anyway. */ ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, f->r, "Request body length may change, resulting in " "misprocessing by some modules or scripts"); } } if (ctx->noop) { return ap_get_brigade(f->next, bb, mode, block, readbytes); } if (APR_BRIGADE_EMPTY(ctx->bb)) { if ((rv = ap_get_brigade(f->next, bb, mode, block, readbytes)) != APR_SUCCESS) { return rv; } } else { APR_BRIGADE_PREPEND(bb, ctx->bb); /* first use the leftovers */ } buffer_size = INPUT_XLATE_BUF_SIZE; rv = xlate_brigade(ctx, bb, ctx->tmp, &buffer_size, &hit_eos); if (rv == APR_SUCCESS) { if (!hit_eos) { /* move anything leftover into our context for next time; * we don't currently "set aside" since the data came from * down below, but I suspect that for long-term we need to * do that */ APR_BRIGADE_CONCAT(ctx->bb, bb); } if (buffer_size < INPUT_XLATE_BUF_SIZE) { /* do we have output? */ apr_bucket *e; e = apr_bucket_heap_create(ctx->tmp, INPUT_XLATE_BUF_SIZE - buffer_size, NULL, f->r->connection->bucket_alloc); /* make sure we insert at the head, because there may be * an eos bucket already there, and the eos bucket should * come after the data */ APR_BRIGADE_INSERT_HEAD(bb, e); } else { /* XXX need to get some more data... what if the last brigade * we got had only the first byte of a multibyte char? we need * to grab more data from the network instead of returning an * empty brigade */ } /* If we have any metadata at the head of ctx->bb, go ahead and move it * onto the end of bb to be returned to our caller. */ if (!APR_BRIGADE_EMPTY(ctx->bb)) { apr_bucket *b = APR_BRIGADE_FIRST(ctx->bb); while (b != APR_BRIGADE_SENTINEL(ctx->bb) && APR_BUCKET_IS_METADATA(b)) { APR_BUCKET_REMOVE(b); APR_BRIGADE_INSERT_TAIL(bb, b); b = APR_BRIGADE_FIRST(ctx->bb); } } } else { log_xlate_error(f, rv); } return rv; } static const command_rec cmds[] = { AP_INIT_TAKE1("CharsetSourceEnc", add_charset_source, NULL, OR_FILEINFO, "source (html,cgi,ssi) file charset"), AP_INIT_TAKE1("CharsetDefault", add_charset_default, NULL, OR_FILEINFO, "name of default charset"), AP_INIT_ITERATE("CharsetOptions", add_charset_options, NULL, OR_FILEINFO, "valid options: ImplicitAdd, NoImplicitAdd, TranslateAllMimeTypes, " "NoTranslateAllMimeTypes"), {NULL} }; static void charset_register_hooks(apr_pool_t *p) { ap_hook_fixups(find_code_page, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_insert_filter(xlate_insert_filter, NULL, NULL, APR_HOOK_REALLY_LAST); ap_register_output_filter(XLATEOUT_FILTER_NAME, xlate_out_filter, NULL, AP_FTYPE_RESOURCE); ap_register_input_filter(XLATEIN_FILTER_NAME, xlate_in_filter, NULL, AP_FTYPE_RESOURCE); } AP_DECLARE_MODULE(charset_lite) = { STANDARD20_MODULE_STUFF, create_charset_dir_conf, merge_charset_dir_conf, NULL, NULL, cmds, charset_register_hooks }; httpd-2.4.41/modules/filters/mod_substitute.mak0000644000000000000500000002411512701473373020132 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_substitute.dsp !IF "$(CFG)" == "" CFG=mod_substitute - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_substitute - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_substitute - Win32 Release" && "$(CFG)" != "mod_substitute - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_substitute.mak" CFG="mod_substitute - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_substitute - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_substitute - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_substitute - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_substitute.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_substitute.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_substitute.obj" -@erase "$(INTDIR)\mod_substitute.res" -@erase "$(INTDIR)\mod_substitute_src.idb" -@erase "$(INTDIR)\mod_substitute_src.pdb" -@erase "$(OUTDIR)\mod_substitute.exp" -@erase "$(OUTDIR)\mod_substitute.lib" -@erase "$(OUTDIR)\mod_substitute.pdb" -@erase "$(OUTDIR)\mod_substitute.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_substitute_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_substitute.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_substitute.so" /d LONG_NAME="substitute_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_substitute.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_substitute.pdb" /debug /out:"$(OUTDIR)\mod_substitute.so" /implib:"$(OUTDIR)\mod_substitute.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_substitute.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_substitute.obj" \ "$(INTDIR)\mod_substitute.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_substitute.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_substitute.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_substitute.so" if exist .\Release\mod_substitute.so.manifest mt.exe -manifest .\Release\mod_substitute.so.manifest -outputresource:.\Release\mod_substitute.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_substitute - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_substitute.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_substitute.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_substitute.obj" -@erase "$(INTDIR)\mod_substitute.res" -@erase "$(INTDIR)\mod_substitute_src.idb" -@erase "$(INTDIR)\mod_substitute_src.pdb" -@erase "$(OUTDIR)\mod_substitute.exp" -@erase "$(OUTDIR)\mod_substitute.lib" -@erase "$(OUTDIR)\mod_substitute.pdb" -@erase "$(OUTDIR)\mod_substitute.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_substitute_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_substitute.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_substitute.so" /d LONG_NAME="substitute_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_substitute.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_substitute.pdb" /debug /out:"$(OUTDIR)\mod_substitute.so" /implib:"$(OUTDIR)\mod_substitute.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_substitute.so LINK32_OBJS= \ "$(INTDIR)\mod_substitute.obj" \ "$(INTDIR)\mod_substitute.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_substitute.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_substitute.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_substitute.so" if exist .\Debug\mod_substitute.so.manifest mt.exe -manifest .\Debug\mod_substitute.so.manifest -outputresource:.\Debug\mod_substitute.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_substitute.dep") !INCLUDE "mod_substitute.dep" !ELSE !MESSAGE Warning: cannot find "mod_substitute.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_substitute - Win32 Release" || "$(CFG)" == "mod_substitute - Win32 Debug" !IF "$(CFG)" == "mod_substitute - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_substitute - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_substitute - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_substitute - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_substitute - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_substitute - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_substitute - Win32 Release" "$(INTDIR)\mod_substitute.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_substitute.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_substitute.so" /d LONG_NAME="substitute_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_substitute - Win32 Debug" "$(INTDIR)\mod_substitute.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_substitute.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_substitute.so" /d LONG_NAME="substitute_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_substitute.c "$(INTDIR)\mod_substitute.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/filters/mod_xml2enc.c0000644000000000000500000006323513522234304016736 0ustar rootsrc/* Copyright (c) 2007-11, WebThing Ltd * Copyright (c) 2011-, The Apache Software Foundation * * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #if defined(WIN32) #define XML2ENC_DECLARE_EXPORT #endif #include /* libxml2 includes unicode/[...].h files which uses C++ comments */ #if defined(__GNUC__) #if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6) #pragma GCC diagnostic push #pragma GCC diagnostic warning "-Wcomment" #endif #elif defined(__clang__) #pragma clang diagnostic push #pragma clang diagnostic warning "-Wcomment" #endif /* libxml2 */ #include #if defined(__GNUC__) #if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6) #pragma GCC diagnostic pop #endif #elif defined(__clang__) #pragma clang diagnostic pop #endif #include "http_protocol.h" #include "http_config.h" #include "http_log.h" #include "apr_strings.h" #include "apr_xlate.h" #include "apr_optional.h" #include "mod_xml2enc.h" module AP_MODULE_DECLARE_DATA xml2enc_module; #define BUFLEN 8192 #define BUF_MIN 4096 #define APR_BRIGADE_DO(b,bb) for (b = APR_BRIGADE_FIRST(bb); \ b != APR_BRIGADE_SENTINEL(bb); \ b = APR_BUCKET_NEXT(b)) #define ENC_INITIALISED 0x100 #define ENC_SEEN_EOS 0x200 #define ENC_SKIPTO ENCIO_SKIPTO #define HAVE_ENCODING(enc) \ (((enc)!=XML_CHAR_ENCODING_NONE)&&((enc)!=XML_CHAR_ENCODING_ERROR)) /* * XXX: Check all those ap_assert()s ans replace those that should not happen * XXX: with AP_DEBUG_ASSERT and those that may happen with proper error * XXX: handling. */ typedef struct { xmlCharEncoding xml2enc; char* buf; apr_size_t bytes; apr_xlate_t* convset; unsigned int flags; apr_off_t bblen; apr_bucket_brigade* bbnext; apr_bucket_brigade* bbsave; const char* encoding; } xml2ctx; typedef struct { const char* default_charset; xmlCharEncoding default_encoding; apr_array_header_t* skipto; } xml2cfg; typedef struct { const char* val; } tattr; static ap_regex_t* seek_meta_ctype; static ap_regex_t* seek_charset; static apr_status_t xml2enc_filter(request_rec* r, const char* enc, unsigned int mode) { /* set up a ready-initialised ctx to convert to enc, and insert filter */ apr_xlate_t* convset; apr_status_t rv; unsigned int flags = (mode ^ ENCIO); if ((mode & ENCIO) == ENCIO_OUTPUT) { rv = apr_xlate_open(&convset, enc, "UTF-8", r->pool); flags |= ENC_INITIALISED; } else if ((mode & ENCIO) == ENCIO_INPUT) { rv = apr_xlate_open(&convset, "UTF-8", enc, r->pool); flags |= ENC_INITIALISED; } else if ((mode & ENCIO) == ENCIO_INPUT_CHECKS) { convset = NULL; rv = APR_SUCCESS; /* we'll initialise later by sniffing */ } else { rv = APR_EGENERAL; ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01426) "xml2enc: bad mode %x", mode); } if (rv == APR_SUCCESS) { xml2ctx* ctx = apr_pcalloc(r->pool, sizeof(xml2ctx)); ctx->flags = flags; if (flags & ENC_INITIALISED) { ctx->convset = convset; ctx->bblen = BUFLEN; ctx->buf = apr_palloc(r->pool, (apr_size_t)ctx->bblen); } ap_add_output_filter("xml2enc", ctx, r, r->connection); } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01427) "xml2enc: Charset %s not supported.", enc) ; } return rv; } /* This needs to operate only when we're using htmlParser */ /* Different modules may apply different rules here. Ho, hum. */ static void fix_skipto(request_rec* r, xml2ctx* ctx) { apr_status_t rv; xml2cfg* cfg = ap_get_module_config(r->per_dir_config, &xml2enc_module); if ((cfg->skipto != NULL) && (ctx->flags & ENC_SKIPTO)) { int found = 0; char* p = ap_strchr(ctx->buf, '<'); tattr* starts = (tattr*) cfg->skipto->elts; while (!found && p && *p) { int i; for (i = 0; i < cfg->skipto->nelts; ++i) { if (!strncasecmp(p+1, starts[i].val, strlen(starts[i].val))) { /* found a starting element. Strip all that comes before. */ apr_bucket* b; apr_bucket* bstart; rv = apr_brigade_partition(ctx->bbsave, (p-ctx->buf), &bstart); ap_assert(rv == APR_SUCCESS); while (b = APR_BRIGADE_FIRST(ctx->bbsave), b != bstart) { apr_bucket_delete(b); } ctx->bytes -= (p-ctx->buf); ctx->buf = p ; found = 1; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01428) "Skipped to first <%s> element", starts[i].val) ; break; } } p = ap_strchr(p+1, '<'); } if (p == NULL) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01429) "Failed to find start of recognised HTML!"); } } } static void sniff_encoding(request_rec* r, xml2ctx* ctx) { xml2cfg* cfg = NULL; /* initialise to shut compiler warnings up */ char* p ; apr_bucket* cutb; apr_bucket* cute; apr_bucket* b; ap_regmatch_t match[2] ; apr_status_t rv; const char* ctype = r->content_type; if (ctype) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01430) "Content-Type is %s", ctype) ; /* If we've got it in the HTTP headers, there's nothing to do */ if (ctype && (p = ap_strcasestr(ctype, "charset=") , p != NULL)) { p += 8 ; if (ctx->encoding = apr_pstrndup(r->pool, p, strcspn(p, " ;") ), ctx->encoding) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01431) "Got charset %s from HTTP headers", ctx->encoding) ; ctx->xml2enc = xmlParseCharEncoding(ctx->encoding); } } } /* to sniff, first we look for BOM */ if (ctx->xml2enc == XML_CHAR_ENCODING_NONE) { ctx->xml2enc = xmlDetectCharEncoding((const xmlChar*)ctx->buf, ctx->bytes); if (HAVE_ENCODING(ctx->xml2enc)) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01432) "Got charset from XML rules.") ; ctx->encoding = xmlGetCharEncodingName(ctx->xml2enc); } } /* If none of the above, look for a META-thingey */ /* also we're probably about to invalidate it, so we remove it. */ if (ap_regexec(seek_meta_ctype, ctx->buf, 1, match, 0) == 0 ) { /* get markers on the start and end of the match */ rv = apr_brigade_partition(ctx->bbsave, match[0].rm_eo, &cute); ap_assert(rv == APR_SUCCESS); rv = apr_brigade_partition(ctx->bbsave, match[0].rm_so, &cutb); ap_assert(rv == APR_SUCCESS); /* now set length of useful buf for start-of-data hooks */ ctx->bytes = match[0].rm_so; if (ctx->encoding == NULL) { p = apr_pstrndup(r->pool, ctx->buf + match[0].rm_so, match[0].rm_eo - match[0].rm_so) ; if (ap_regexec(seek_charset, p, 2, match, 0) == 0) { if (ctx->encoding = apr_pstrndup(r->pool, p+match[1].rm_so, match[1].rm_eo - match[1].rm_so), ctx->encoding) { ctx->xml2enc = xmlParseCharEncoding(ctx->encoding); if (HAVE_ENCODING(ctx->xml2enc)) ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01433) "Got charset %s from HTML META", ctx->encoding) ; } } } /* cut out the we're invalidating */ while (cutb != cute) { b = APR_BUCKET_NEXT(cutb); apr_bucket_delete(cutb); cutb = b; } /* and leave a string */ ctx->buf[ctx->bytes] = 0; } /* either it's set to something we found or it's still the default */ /* Aaargh! libxml2 has undocumented support. So this fails * if metafix is not active. Have to make it conditional. * * No, that means no-metafix breaks things. Deal immediately with * this particular instance of metafix. */ if (!HAVE_ENCODING(ctx->xml2enc)) { cfg = ap_get_module_config(r->per_dir_config, &xml2enc_module); if (!ctx->encoding) { ctx->encoding = cfg->default_charset?cfg->default_charset:"ISO-8859-1"; } /* Unsupported charset. Can we get (iconv) support through apr_xlate? */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01434) "Charset %s not supported by libxml2; trying apr_xlate", ctx->encoding); if (apr_xlate_open(&ctx->convset, "UTF-8", ctx->encoding, r->pool) == APR_SUCCESS) { ctx->xml2enc = XML_CHAR_ENCODING_UTF8 ; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01435) "Charset %s not supported. Consider aliasing it?", ctx->encoding) ; } } if (!HAVE_ENCODING(ctx->xml2enc)) { /* Use configuration default as a last resort */ ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01436) "No usable charset information; using configuration default"); ctx->xml2enc = (cfg->default_encoding == XML_CHAR_ENCODING_NONE) ? XML_CHAR_ENCODING_8859_1 : cfg->default_encoding ; } if (ctype && ctx->encoding) { if (ap_regexec(seek_charset, ctype, 2, match, 0)) { r->content_type = apr_pstrcat(r->pool, ctype, ";charset=utf-8", NULL); } else { char* str = apr_palloc(r->pool, strlen(r->content_type) + 13 - (match[0].rm_eo - match[0].rm_so) + 1); memcpy(str, r->content_type, match[1].rm_so); memcpy(str + match[1].rm_so, "utf-8", 5); strcpy(str + match[1].rm_so + 5, r->content_type+match[1].rm_eo); r->content_type = str; } } } static apr_status_t xml2enc_filter_init(ap_filter_t* f) { xml2ctx* ctx; if (!f->ctx) { xml2cfg* cfg = ap_get_module_config(f->r->per_dir_config, &xml2enc_module); f->ctx = ctx = apr_pcalloc(f->r->pool, sizeof(xml2ctx)); ctx->xml2enc = XML_CHAR_ENCODING_NONE; if (cfg->skipto != NULL) { ctx->flags |= ENC_SKIPTO; } } return APR_SUCCESS; } static apr_status_t xml2enc_ffunc(ap_filter_t* f, apr_bucket_brigade* bb) { xml2ctx* ctx = f->ctx; apr_status_t rv; apr_bucket* b; apr_bucket* bstart; apr_size_t insz = 0; int pending_meta = 0; char *ctype; char *p; if (!ctx || !f->r->content_type) { /* log error about configuring this */ ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb) ; } ctype = apr_pstrdup(f->r->pool, f->r->content_type); for (p = ctype; *p; ++p) if (isupper(*p)) *p = tolower(*p); /* only act if starts-with "text/" or contains "xml" */ if (strncmp(ctype, "text/", 5) && !strstr(ctype, "xml")) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb) ; } if (ctx->bbsave == NULL) { ctx->bbsave = apr_brigade_create(f->r->pool, f->r->connection->bucket_alloc); } /* append to any data left over from last time */ APR_BRIGADE_CONCAT(ctx->bbsave, bb); if (!(ctx->flags & ENC_INITIALISED)) { /* some kind of initialisation required */ /* Turn all this off when post-processing */ /* if we don't have enough data to sniff but more's to come, wait */ apr_brigade_length(ctx->bbsave, 0, &ctx->bblen); if ((ctx->bblen < BUF_MIN) && (ctx->bblen != -1)) { APR_BRIGADE_DO(b, ctx->bbsave) { if (APR_BUCKET_IS_EOS(b)) { ctx->flags |= ENC_SEEN_EOS; break; } } if (!(ctx->flags & ENC_SEEN_EOS)) { /* not enough data to sniff. Wait for more */ APR_BRIGADE_DO(b, ctx->bbsave) { rv = apr_bucket_setaside(b, f->r->pool); ap_assert(rv == APR_SUCCESS); } return APR_SUCCESS; } } if (ctx->bblen == -1) { ctx->bblen = BUFLEN-1; } /* flatten it into a NULL-terminated string */ ctx->buf = apr_palloc(f->r->pool, (apr_size_t)(ctx->bblen+1)); ctx->bytes = (apr_size_t)ctx->bblen; rv = apr_brigade_flatten(ctx->bbsave, ctx->buf, &ctx->bytes); ap_assert(rv == APR_SUCCESS); ctx->buf[ctx->bytes] = 0; sniff_encoding(f->r, ctx); /* FIXME: hook here for rewriting start-of-data? */ /* nah, we only have one action here - call it inline */ fix_skipto(f->r, ctx); /* we might change the Content-Length, so let's force its re-calculation */ apr_table_unset(f->r->headers_out, "Content-Length"); /* consume the data we just sniffed */ /* we need to omit any we just invalidated */ ctx->flags |= ENC_INITIALISED; ap_set_module_config(f->r->request_config, &xml2enc_module, ctx); } if (ctx->bbnext == NULL) { ctx->bbnext = apr_brigade_create(f->r->pool, f->r->connection->bucket_alloc); } if (!ctx->convset) { rv = ap_pass_brigade(f->next, ctx->bbsave); apr_brigade_cleanup(ctx->bbsave); ap_remove_output_filter(f); return rv; } /* move the data back to bb */ APR_BRIGADE_CONCAT(bb, ctx->bbsave); while (!APR_BRIGADE_EMPTY(bb)) { b = APR_BRIGADE_FIRST(bb); ctx->bytes = 0; if (APR_BUCKET_IS_METADATA(b)) { APR_BUCKET_REMOVE(b); APR_BRIGADE_INSERT_TAIL(ctx->bbnext, b); /* Besides FLUSH, aggregate meta buckets to send them at * once below. This resource filter is over on EOS. */ pending_meta = 1; if (APR_BUCKET_IS_EOS(b)) { ap_remove_output_filter(f); APR_BRIGADE_CONCAT(ctx->bbnext, bb); } else if (!APR_BUCKET_IS_FLUSH(b)) { continue; } } if (pending_meta) { pending_meta = 0; /* passing meta bucket down the chain */ rv = ap_pass_brigade(f->next, ctx->bbnext); apr_brigade_cleanup(ctx->bbnext); if (rv != APR_SUCCESS) { return rv; } continue; } /* data bucket */ { char* buf; apr_size_t bytes = 0; char fixbuf[BUFLEN]; apr_bucket* bdestroy = NULL; if (insz > 0) { /* we have dangling data. Flatten it. */ buf = fixbuf; bytes = BUFLEN; rv = apr_brigade_flatten(bb, buf, &bytes); ap_assert(rv == APR_SUCCESS); if (bytes == insz) { /* this is only what we've already tried to convert. * The brigade is exhausted. * Save remaining data for next time round */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, f->r, APLOGNO(01437) "xml2enc: Setting aside %" APR_SIZE_T_FMT " unconverted bytes", bytes); rv = ap_fflush(f->next, ctx->bbnext); APR_BRIGADE_CONCAT(ctx->bbsave, bb); APR_BRIGADE_DO(b, ctx->bbsave) { ap_assert(apr_bucket_setaside(b, f->r->pool) == APR_SUCCESS); } return rv; } /* remove the data we've just read */ rv = apr_brigade_partition(bb, bytes, &bstart); while (b = APR_BRIGADE_FIRST(bb), b != bstart) { apr_bucket_delete(b); } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, f->r, APLOGNO(01438) "xml2enc: consuming %" APR_SIZE_T_FMT " bytes flattened", bytes); } else { rv = apr_bucket_read(b, (const char**)&buf, &bytes, APR_BLOCK_READ); APR_BUCKET_REMOVE(b); bdestroy = b; /* can't destroy until finished with the data */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, f->r, APLOGNO(01439) "xml2enc: consuming %" APR_SIZE_T_FMT " bytes from bucket", bytes); } /* OK, we've got some input we can use in [buf,bytes] */ if (rv == APR_SUCCESS) { apr_size_t consumed; xml2enc_run_preprocess(f, &buf, &bytes); consumed = insz = bytes; while (insz > 0) { apr_status_t rv2; if (ctx->bytes == ctx->bblen) { /* nothing was converted last time! * break out of this loop! */ b = apr_bucket_transient_create(buf+(bytes - insz), insz, bb->bucket_alloc); APR_BRIGADE_INSERT_HEAD(bb, b); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, f->r, APLOGNO(01440) "xml2enc: reinserting %" APR_SIZE_T_FMT " unconsumed bytes from bucket", insz); break; } ctx->bytes = (apr_size_t)ctx->bblen; rv = apr_xlate_conv_buffer(ctx->convset, buf+(bytes - insz), &insz, ctx->buf, &ctx->bytes); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, f->r, APLOGNO(01441) "xml2enc: converted %" APR_SIZE_T_FMT "/%" APR_OFF_T_FMT " bytes", consumed - insz, ctx->bblen - ctx->bytes); consumed = insz; rv2 = ap_fwrite(f->next, ctx->bbnext, ctx->buf, (apr_size_t)ctx->bblen - ctx->bytes); if (rv2 != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv2, f->r, APLOGNO(01442) "ap_fwrite failed"); return rv2; } switch (rv) { case APR_SUCCESS: continue; case APR_EINCOMPLETE: ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, f->r, APLOGNO(01443) "INCOMPLETE"); continue; /* If outbuf too small, go round again. * If it was inbuf, we'll break out when * we test ctx->bytes == ctx->bblen */ case APR_EINVAL: /* try skipping one bad byte */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, f->r, APLOGNO(01444) "Skipping invalid byte(s) in input stream!"); --insz; continue; default: /* Erk! What's this? * Bail out, flush, and hope to eat the buf raw */ ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, f->r, APLOGNO(01445) "Failed to convert input; trying it raw") ; ctx->convset = NULL; rv = ap_fflush(f->next, ctx->bbnext); if (rv != APR_SUCCESS) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, f->r, APLOGNO(01446) "ap_fflush failed"); apr_brigade_cleanup(ctx->bbnext); } } } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, f->r, APLOGNO(01447) "xml2enc: error reading data") ; } if (bdestroy) apr_bucket_destroy(bdestroy); if (rv != APR_SUCCESS) return rv; } } if (pending_meta) { /* passing pending meta bucket down the chain before leaving */ rv = ap_pass_brigade(f->next, ctx->bbnext); apr_brigade_cleanup(ctx->bbnext); if (rv != APR_SUCCESS) { return rv; } } return APR_SUCCESS; } static apr_status_t xml2enc_charset(request_rec* r, xmlCharEncoding* encp, const char** encoding) { xml2ctx* ctx = ap_get_module_config(r->request_config, &xml2enc_module); if (!ctx || !(ctx->flags & ENC_INITIALISED)) { return APR_EAGAIN; } *encp = ctx->xml2enc; *encoding = ctx->encoding; return HAVE_ENCODING(ctx->xml2enc) ? APR_SUCCESS : APR_EGENERAL; } #define PROTO_FLAGS AP_FILTER_PROTO_CHANGE|AP_FILTER_PROTO_CHANGE_LENGTH static void xml2enc_hooks(apr_pool_t* pool) { ap_register_output_filter_protocol("xml2enc", xml2enc_ffunc, xml2enc_filter_init, AP_FTYPE_RESOURCE, PROTO_FLAGS); APR_REGISTER_OPTIONAL_FN(xml2enc_filter); APR_REGISTER_OPTIONAL_FN(xml2enc_charset); seek_meta_ctype = ap_pregcomp(pool, "(]*http-equiv[ \t\r\n='\"]*content-type[^>]*>)", AP_REG_EXTENDED|AP_REG_ICASE) ; seek_charset = ap_pregcomp(pool, "charset=([A-Za-z0-9_-]+)", AP_REG_EXTENDED|AP_REG_ICASE) ; } static const char* set_alias(cmd_parms* cmd, void* CFG, const char* charset, const char* alias) { const char* errmsg = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (errmsg != NULL) return errmsg ; else if (xmlAddEncodingAlias(charset, alias) == 0) return NULL; else return "Error setting charset alias"; } static const char* set_default(cmd_parms* cmd, void* CFG, const char* charset) { xml2cfg* cfg = CFG; cfg->default_charset = charset; cfg->default_encoding = xmlParseCharEncoding(charset); switch(cfg->default_encoding) { case XML_CHAR_ENCODING_NONE: return "Default charset not found"; case XML_CHAR_ENCODING_ERROR: return "Invalid or unsupported default charset"; default: return NULL; } } static const char* set_skipto(cmd_parms* cmd, void* CFG, const char* arg) { tattr* attr; xml2cfg* cfg = CFG; if (cfg->skipto == NULL) cfg->skipto = apr_array_make(cmd->pool, 4, sizeof(tattr)); attr = apr_array_push(cfg->skipto) ; attr->val = arg; return NULL; } static const command_rec xml2enc_cmds[] = { AP_INIT_TAKE1("xml2EncDefault", set_default, NULL, OR_ALL, "Usage: xml2EncDefault charset"), AP_INIT_ITERATE2("xml2EncAlias", set_alias, NULL, RSRC_CONF, "EncodingAlias charset alias [more aliases]"), AP_INIT_ITERATE("xml2StartParse", set_skipto, NULL, OR_ALL, "Ignore anything in front of the first of these elements"), { NULL } }; static void* xml2enc_config(apr_pool_t* pool, char* x) { xml2cfg* ret = apr_pcalloc(pool, sizeof(xml2cfg)); ret->default_encoding = XML_CHAR_ENCODING_NONE ; return ret; } static void* xml2enc_merge(apr_pool_t* pool, void* BASE, void* ADD) { xml2cfg* base = BASE; xml2cfg* add = ADD; xml2cfg* ret = apr_pcalloc(pool, sizeof(xml2cfg)); ret->default_encoding = (add->default_encoding == XML_CHAR_ENCODING_NONE) ? base->default_encoding : add->default_encoding ; ret->default_charset = add->default_charset ? add->default_charset : base->default_charset; ret->skipto = add->skipto ? add->skipto : base->skipto; return ret; } AP_DECLARE_MODULE(xml2enc) = { STANDARD20_MODULE_STUFF, xml2enc_config, xml2enc_merge, NULL, NULL, xml2enc_cmds, xml2enc_hooks }; APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(xml2enc, XML2ENC, int, preprocess, (ap_filter_t *f, char** bufp, apr_size_t* bytesp), (f, bufp, bytesp), OK, DECLINED) httpd-2.4.41/modules/filters/mod_charset_lite.exp0000644000000000000500000000002410314225744020375 0ustar rootsrccharset_lite_module httpd-2.4.41/modules/filters/mod_xml2enc.dsp0000644000000000000500000001161012234633661017300 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_xml2enc" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_xml2enc - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_xml2enc.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_xml2enc.mak" CFG="mod_xml2enc - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_xml2enc - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_xml2enc - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_xml2enc - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/libxml2/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_xml2enc_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /d "NDEBUG" /i "../../include" /i "../../srclib/apr/include" /i "../../srclib/apr-util/include" /i "../../srclib/libxml2/include" /d BIN_NAME="mod_xml2enc.so" /d LONG_NAME="xml2enc_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_xml2enc.so" /base:@..\..\os\win32\BaseAddr.ref,mod_xml2enc.so # ADD LINK32 kernel32.lib libxml2.lib /nologo /subsystem:windows /dll /incremental:no /debug /libpath:"../../srclib/libxml2/win32/bin.msvc" /out:".\Release\mod_xml2enc.so" /base:@..\..\os\win32\BaseAddr.ref,mod_xml2enc.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_xml2enc.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_xml2enc - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/libxml2/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_xml2enc_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /d "_DEBUG" /i "../../include" /i "../../srclib/apr/include" /i "../../srclib/apr-util/include" /i "../../srclib/libxml2/include" /d BIN_NAME="mod_xml2enc.so" /d LONG_NAME="xml2enc_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_xml2enc.so" /base:@..\..\os\win32\BaseAddr.ref,mod_xml2enc.so # ADD LINK32 kernel32.lib libxml2.lib /nologo /subsystem:windows /dll /incremental:no /debug /libpath:"../../srclib/libxml2/win32/bin.msvc" /out:".\Debug\mod_xml2enc.so" /base:@..\..\os\win32\BaseAddr.ref,mod_xml2enc.so # Begin Special Build Tool TargetPath=.\Debug\mod_xml2enc.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_xml2enc - Win32 Release" # Name "mod_xml2enc - Win32 Debug" # Begin Group "Header Files" # PROP Default_Filter "h" # Begin Source File SOURCE=.\mod_xml2enc.h # End Source File # End Group # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_xml2enc.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Group # End Target # End Project httpd-2.4.41/modules/filters/mod_request.dsp0000644000000000000500000001073311022367030017411 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_request" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_request - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_request.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_request.mak" CFG="mod_request - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_request - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_request - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_request - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_request_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_request.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_request.so" /d LONG_NAME="request_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_request.so" /base:@..\..\os\win32\BaseAddr.ref,mod_request.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_request.so" /base:@..\..\os\win32\BaseAddr.ref,mod_request.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_request.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_request - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_request_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_request.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_request.so" /d LONG_NAME="request_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_request.so" /base:@..\..\os\win32\BaseAddr.ref,mod_request.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_request.so" /base:@..\..\os\win32\BaseAddr.ref,mod_request.so # Begin Special Build Tool TargetPath=.\Debug\mod_request.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_request - Win32 Release" # Name "mod_request - Win32 Debug" # Begin Source File SOURCE=..\..\include\mod_request.h # End Source File # Begin Source File SOURCE=.\mod_request.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/filters/mod_ext_filter.dep0000644000000000000500000000407112674411515020062 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_ext_filter.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_ext_filter.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\include\util_time.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/filters/mod_data.dsp0000644000000000000500000001053312062614564016644 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_data" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_data - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_data.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_data.mak" CFG="mod_data - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_data - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_data - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_data - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "HAVE_ZUTIL_H" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_data_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_data.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_data.so" /d LONG_NAME="data_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_data.so" /base:@..\..\os\win32\BaseAddr.ref,mod_data.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_data.so" /base:@..\..\os\win32\BaseAddr.ref,mod_data.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_data.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_data - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "HAVE_ZUTIL_H" /Fd"Debug\mod_data_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_data.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_data.so" /d LONG_NAME="data_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_data.so" /base:@..\..\os\win32\BaseAddr.ref,mod_data.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_data.so" /base:@..\..\os\win32\BaseAddr.ref,mod_data.so # Begin Special Build Tool TargetPath=.\Debug\mod_data.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_data - Win32 Release" # Name "mod_data - Win32 Debug" # Begin Source File SOURCE=.\mod_data.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/filters/mod_brotli.mak0000644000000000000500000002407613100405645017207 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_brotli.dsp !IF "$(CFG)" == "" CFG=mod_brotli - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_brotli - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_brotli - Win32 Release" && "$(CFG)" != "mod_brotli - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_brotli.mak" CFG="mod_brotli - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_brotli - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_brotli - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_brotli - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_brotli.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_brotli.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_brotli.obj" -@erase "$(INTDIR)\mod_brotli.res" -@erase "$(INTDIR)\mod_brotli_src.idb" -@erase "$(INTDIR)\mod_brotli_src.pdb" -@erase "$(OUTDIR)\mod_brotli.exp" -@erase "$(OUTDIR)\mod_brotli.lib" -@erase "$(OUTDIR)\mod_brotli.pdb" -@erase "$(OUTDIR)\mod_brotli.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/brotli/include" /I "../../srclib/brotli/c/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_brotli_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_brotli.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_brotli.so" /d LONG_NAME="brotli_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_brotli.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib brotlicommon.lib brotlienc.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_brotli.pdb" /libpath:"../../srclib/brotli" /debug /out:"$(OUTDIR)\mod_brotli.so" /implib:"$(OUTDIR)\mod_brotli.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_brotli.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_brotli.obj" \ "$(INTDIR)\mod_brotli.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_brotli.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_brotli.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_brotli.so" if exist .\Release\mod_brotli.so.manifest mt.exe -manifest .\Release\mod_brotli.so.manifest -outputresource:.\Release\mod_brotli.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_brotli - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_brotli.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_brotli.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_brotli.obj" -@erase "$(INTDIR)\mod_brotli.res" -@erase "$(INTDIR)\mod_brotli_src.idb" -@erase "$(INTDIR)\mod_brotli_src.pdb" -@erase "$(OUTDIR)\mod_brotli.exp" -@erase "$(OUTDIR)\mod_brotli.lib" -@erase "$(OUTDIR)\mod_brotli.pdb" -@erase "$(OUTDIR)\mod_brotli.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/brotli/include" /I "../../srclib/brotli/c/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "HAVE_ZUTIL_H" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_brotli_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_brotli.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_brotli.so" /d LONG_NAME="brotli_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_brotli.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib brotlicommon.lib brotlienc.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_brotli.pdb" /debug /libpath:"../../srclib/brotli" /out:"$(OUTDIR)\mod_brotli.so" /implib:"$(OUTDIR)\mod_brotli.lib" /libpath:"..\..\srclib\brotli\Debug\bin" /base:@..\..\os\win32\BaseAddr.ref,mod_brotli.so LINK32_OBJS= \ "$(INTDIR)\mod_brotli.obj" \ "$(INTDIR)\mod_brotli.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_brotli.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_brotli.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_brotli.so" if exist .\Debug\mod_brotli.so.manifest mt.exe -manifest .\Debug\mod_brotli.so.manifest -outputresource:.\Debug\mod_brotli.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_brotli.dep") !INCLUDE "mod_brotli.dep" !ELSE !MESSAGE Warning: cannot find "mod_brotli.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_brotli - Win32 Release" || "$(CFG)" == "mod_brotli - Win32 Debug" !IF "$(CFG)" == "mod_brotli - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_brotli - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_brotli - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_brotli - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_brotli - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_brotli - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_brotli - Win32 Release" "$(INTDIR)\mod_brotli.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_brotli.res" /i "../../include" /i "../../srclib/apr/include" /i "\build4\httpd-2.4.23\build\win32" /d "NDEBUG" /d BIN_NAME="mod_brotli.so" /d LONG_NAME="brotli_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_brotli - Win32 Debug" "$(INTDIR)\mod_brotli.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_brotli.res" /i "../../include" /i "../../srclib/apr/include" /i "\build4\httpd-2.4.23\build\win32" /d "_DEBUG" /d BIN_NAME="mod_brotli.so" /d LONG_NAME="brotli_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_brotli.c "$(INTDIR)\mod_brotli.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/filters/mod_data.mak0000644000000000000500000002310312701473373016624 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_data.dsp !IF "$(CFG)" == "" CFG=mod_data - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_data - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_data - Win32 Release" && "$(CFG)" != "mod_data - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_data.mak" CFG="mod_data - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_data - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_data - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_data - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_data.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_data.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_data.obj" -@erase "$(INTDIR)\mod_data.res" -@erase "$(INTDIR)\mod_data_src.idb" -@erase "$(INTDIR)\mod_data_src.pdb" -@erase "$(OUTDIR)\mod_data.exp" -@erase "$(OUTDIR)\mod_data.lib" -@erase "$(OUTDIR)\mod_data.pdb" -@erase "$(OUTDIR)\mod_data.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_data_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_data.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_data.so" /d LONG_NAME="data_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_data.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_data.pdb" /debug /out:"$(OUTDIR)\mod_data.so" /implib:"$(OUTDIR)\mod_data.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_data.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_data.obj" \ "$(INTDIR)\mod_data.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_data.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_data.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_data.so" if exist .\Release\mod_data.so.manifest mt.exe -manifest .\Release\mod_data.so.manifest -outputresource:.\Release\mod_data.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_data - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_data.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_data.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_data.obj" -@erase "$(INTDIR)\mod_data.res" -@erase "$(INTDIR)\mod_data_src.idb" -@erase "$(INTDIR)\mod_data_src.pdb" -@erase "$(OUTDIR)\mod_data.exp" -@erase "$(OUTDIR)\mod_data.lib" -@erase "$(OUTDIR)\mod_data.pdb" -@erase "$(OUTDIR)\mod_data.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "HAVE_ZUTIL_H" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_data_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_data.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_data.so" /d LONG_NAME="data_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_data.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_data.pdb" /debug /out:"$(OUTDIR)\mod_data.so" /implib:"$(OUTDIR)\mod_data.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_data.so LINK32_OBJS= \ "$(INTDIR)\mod_data.obj" \ "$(INTDIR)\mod_data.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_data.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_data.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_data.so" if exist .\Debug\mod_data.so.manifest mt.exe -manifest .\Debug\mod_data.so.manifest -outputresource:.\Debug\mod_data.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_data.dep") !INCLUDE "mod_data.dep" !ELSE !MESSAGE Warning: cannot find "mod_data.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_data - Win32 Release" || "$(CFG)" == "mod_data - Win32 Debug" !IF "$(CFG)" == "mod_data - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_data - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_data - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_data - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_data - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_data - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_data - Win32 Release" "$(INTDIR)\mod_data.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_data.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_data.so" /d LONG_NAME="data_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_data - Win32 Debug" "$(INTDIR)\mod_data.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_data.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_data.so" /d LONG_NAME="data_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_data.c "$(INTDIR)\mod_data.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/filters/mod_ext_filter.c0000644000000000000500000007412513027215112017527 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_ext_filter allows Unix-style filters to filter http content. */ #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_protocol.h" #include "http_core.h" #include "apr_buckets.h" #include "util_filter.h" #include "util_script.h" #include "util_time.h" #include "apr_strings.h" #include "apr_hash.h" #include "apr_lib.h" #include "apr_poll.h" #define APR_WANT_STRFUNC #include "apr_want.h" typedef struct ef_server_t { apr_pool_t *p; apr_hash_t *h; } ef_server_t; typedef struct ef_filter_t { const char *name; enum {INPUT_FILTER=1, OUTPUT_FILTER} mode; ap_filter_type ftype; const char *command; const char *enable_env; const char *disable_env; char **args; const char *intype; /* list of IMTs we process (well, just one for now) */ #define INTYPE_ALL (char *)1 const char *outtype; /* IMT of filtered output */ #define OUTTYPE_UNCHANGED (char *)1 int preserves_content_length; } ef_filter_t; typedef struct ef_dir_t { int log_stderr; int onfail; } ef_dir_t; typedef struct ef_ctx_t { apr_pool_t *p; apr_proc_t *proc; apr_procattr_t *procattr; ef_dir_t *dc; ef_filter_t *filter; int noop, hit_eos; #if APR_FILES_AS_SOCKETS apr_pollset_t *pollset; #endif } ef_ctx_t; module AP_MODULE_DECLARE_DATA ext_filter_module; static const server_rec *main_server; static apr_status_t ef_output_filter(ap_filter_t *, apr_bucket_brigade *); static apr_status_t ef_input_filter(ap_filter_t *, apr_bucket_brigade *, ap_input_mode_t, apr_read_type_e, apr_off_t); #define ERRFN_USERDATA_KEY "EXTFILTCHILDERRFN" static void *create_ef_dir_conf(apr_pool_t *p, char *dummy) { ef_dir_t *dc = (ef_dir_t *)apr_pcalloc(p, sizeof(ef_dir_t)); dc->log_stderr = -1; dc->onfail = -1; return dc; } static void *create_ef_server_conf(apr_pool_t *p, server_rec *s) { ef_server_t *conf; conf = (ef_server_t *)apr_pcalloc(p, sizeof(ef_server_t)); conf->p = p; conf->h = apr_hash_make(conf->p); return conf; } static void *merge_ef_dir_conf(apr_pool_t *p, void *basev, void *overridesv) { ef_dir_t *a = (ef_dir_t *)apr_pcalloc (p, sizeof(ef_dir_t)); ef_dir_t *base = (ef_dir_t *)basev, *over = (ef_dir_t *)overridesv; if (over->log_stderr != -1) { /* if admin coded something... */ a->log_stderr = over->log_stderr; } else { a->log_stderr = base->log_stderr; } if (over->onfail != -1) { /* if admin coded something... */ a->onfail = over->onfail; } else { a->onfail = base->onfail; } return a; } static const char *add_options(cmd_parms *cmd, void *in_dc, const char *arg) { ef_dir_t *dc = in_dc; if (!strcasecmp(arg, "LogStderr")) { dc->log_stderr = 1; } else if (!strcasecmp(arg, "NoLogStderr")) { dc->log_stderr = 0; } else if (!strcasecmp(arg, "Onfail=remove")) { dc->onfail = 1; } else if (!strcasecmp(arg, "Onfail=abort")) { dc->onfail = 0; } else { return apr_pstrcat(cmd->temp_pool, "Invalid ExtFilterOptions option: ", arg, NULL); } return NULL; } static const char *parse_cmd(apr_pool_t *p, const char **args, ef_filter_t *filter) { if (**args == '"') { const char *start = *args + 1; char *parms; int escaping = 0; apr_status_t rv; ++*args; /* move past leading " */ /* find true end of args string (accounting for escaped quotes) */ while (**args && (**args != '"' || (**args == '"' && escaping))) { if (escaping) { escaping = 0; } else if (**args == '\\') { escaping = 1; } ++*args; } if (**args != '"') { return "Expected cmd= delimiter"; } /* copy *just* the arg string for parsing, */ parms = apr_pstrndup(p, start, *args - start); ++*args; /* move past trailing " */ /* parse and tokenize the args. */ rv = apr_tokenize_to_argv(parms, &(filter->args), p); if (rv != APR_SUCCESS) { return "cmd= parse error"; } } else { /* simple path */ /* Allocate space for two argv pointers and parse the args. */ filter->args = (char **)apr_palloc(p, 2 * sizeof(char *)); filter->args[0] = ap_getword_white(p, args); filter->args[1] = NULL; /* end of args */ } if (!filter->args[0]) { return "Invalid cmd= parameter"; } filter->command = filter->args[0]; return NULL; } static const char *define_filter(cmd_parms *cmd, void *dummy, const char *args) { ef_server_t *conf = ap_get_module_config(cmd->server->module_config, &ext_filter_module); const char *token; const char *name; char *normalized_name; ef_filter_t *filter; name = ap_getword_white(cmd->pool, &args); if (!name) { return "Filter name not found"; } /* During request processing, we find information about the filter * by looking up the filter name provided by core server in our * hash table. But the core server has normalized the filter * name by converting it to lower case. Thus, when adding the * filter to our hash table we have to use lower case as well. */ normalized_name = apr_pstrdup(cmd->pool, name); ap_str_tolower(normalized_name); if (apr_hash_get(conf->h, normalized_name, APR_HASH_KEY_STRING)) { return apr_psprintf(cmd->pool, "ExtFilter %s is already defined", name); } filter = (ef_filter_t *)apr_pcalloc(conf->p, sizeof(ef_filter_t)); filter->name = name; filter->mode = OUTPUT_FILTER; filter->ftype = AP_FTYPE_RESOURCE; apr_hash_set(conf->h, normalized_name, APR_HASH_KEY_STRING, filter); while (*args) { while (apr_isspace(*args)) { ++args; } /* Nasty parsing... I wish I could simply use ap_getword_white() * here and then look at the token, but ap_getword_white() doesn't * do the right thing when we have cmd="word word word" */ if (!strncasecmp(args, "preservescontentlength", 22)) { token = ap_getword_white(cmd->pool, &args); if (!strcasecmp(token, "preservescontentlength")) { filter->preserves_content_length = 1; } else { return apr_psprintf(cmd->pool, "mangled argument `%s'", token); } continue; } if (!strncasecmp(args, "mode=", 5)) { args += 5; token = ap_getword_white(cmd->pool, &args); if (!strcasecmp(token, "output")) { filter->mode = OUTPUT_FILTER; } else if (!strcasecmp(token, "input")) { filter->mode = INPUT_FILTER; } else { return apr_psprintf(cmd->pool, "Invalid mode: `%s'", token); } continue; } if (!strncasecmp(args, "ftype=", 6)) { args += 6; token = ap_getword_white(cmd->pool, &args); filter->ftype = atoi(token); continue; } if (!strncasecmp(args, "enableenv=", 10)) { args += 10; token = ap_getword_white(cmd->pool, &args); filter->enable_env = token; continue; } if (!strncasecmp(args, "disableenv=", 11)) { args += 11; token = ap_getword_white(cmd->pool, &args); filter->disable_env = token; continue; } if (!strncasecmp(args, "intype=", 7)) { args += 7; filter->intype = ap_getword_white(cmd->pool, &args); continue; } if (!strncasecmp(args, "outtype=", 8)) { args += 8; filter->outtype = ap_getword_white(cmd->pool, &args); continue; } if (!strncasecmp(args, "cmd=", 4)) { args += 4; if ((token = parse_cmd(cmd->pool, &args, filter))) { return token; } continue; } return apr_psprintf(cmd->pool, "Unexpected parameter: `%s'", args); } /* parsing is done... register the filter */ if (filter->mode == OUTPUT_FILTER) { /* XXX need a way to ensure uniqueness among all filters */ ap_register_output_filter(filter->name, ef_output_filter, NULL, filter->ftype); } else if (filter->mode == INPUT_FILTER) { /* XXX need a way to ensure uniqueness among all filters */ ap_register_input_filter(filter->name, ef_input_filter, NULL, filter->ftype); } else { ap_assert(1 != 1); /* we set the field wrong somehow */ } return NULL; } static const command_rec cmds[] = { AP_INIT_ITERATE("ExtFilterOptions", add_options, NULL, ACCESS_CONF, /* same as SetInputFilter/SetOutputFilter */ "valid options: LogStderr, NoLogStderr"), AP_INIT_RAW_ARGS("ExtFilterDefine", define_filter, NULL, RSRC_CONF, "Define an external filter"), {NULL} }; static int ef_init(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *main_s) { main_server = main_s; return OK; } static void register_hooks(apr_pool_t *p) { ap_hook_post_config(ef_init, NULL, NULL, APR_HOOK_MIDDLE); } static apr_status_t set_resource_limits(request_rec *r, apr_procattr_t *procattr) { #if defined(RLIMIT_CPU) || defined(RLIMIT_NPROC) || \ defined(RLIMIT_DATA) || defined(RLIMIT_VMEM) || defined (RLIMIT_AS) core_dir_config *conf = (core_dir_config *)ap_get_core_module_config(r->per_dir_config); apr_status_t rv; #ifdef RLIMIT_CPU rv = apr_procattr_limit_set(procattr, APR_LIMIT_CPU, conf->limit_cpu); ap_assert(rv == APR_SUCCESS); /* otherwise, we're out of sync with APR */ #endif #if defined(RLIMIT_DATA) || defined(RLIMIT_VMEM) || defined(RLIMIT_AS) rv = apr_procattr_limit_set(procattr, APR_LIMIT_MEM, conf->limit_mem); ap_assert(rv == APR_SUCCESS); /* otherwise, we're out of sync with APR */ #endif #ifdef RLIMIT_NPROC rv = apr_procattr_limit_set(procattr, APR_LIMIT_NPROC, conf->limit_nproc); ap_assert(rv == APR_SUCCESS); /* otherwise, we're out of sync with APR */ #endif #endif /* if at least one limit defined */ return APR_SUCCESS; } static apr_status_t ef_close_file(void *vfile) { return apr_file_close(vfile); } static void child_errfn(apr_pool_t *pool, apr_status_t err, const char *description) { request_rec *r; void *vr; apr_file_t *stderr_log; char time_str[APR_CTIME_LEN]; apr_pool_userdata_get(&vr, ERRFN_USERDATA_KEY, pool); r = vr; apr_file_open_stderr(&stderr_log, pool); ap_recent_ctime(time_str, apr_time_now()); apr_file_printf(stderr_log, "[%s] [client %s] mod_ext_filter (%d)%pm: %s\n", time_str, r->useragent_ip, err, &err, description); } /* init_ext_filter_process: get the external filter process going * This is per-filter-instance (i.e., per-request) initialization. */ static apr_status_t init_ext_filter_process(ap_filter_t *f) { ef_ctx_t *ctx = f->ctx; apr_status_t rc; ef_dir_t *dc = ctx->dc; const char * const *env; ctx->proc = apr_pcalloc(ctx->p, sizeof(*ctx->proc)); rc = apr_procattr_create(&ctx->procattr, ctx->p); ap_assert(rc == APR_SUCCESS); rc = apr_procattr_io_set(ctx->procattr, APR_CHILD_BLOCK, APR_CHILD_BLOCK, APR_CHILD_BLOCK); ap_assert(rc == APR_SUCCESS); rc = set_resource_limits(f->r, ctx->procattr); ap_assert(rc == APR_SUCCESS); if (dc->log_stderr > 0) { rc = apr_procattr_child_err_set(ctx->procattr, f->r->server->error_log, /* stderr in child */ NULL); ap_assert(rc == APR_SUCCESS); } rc = apr_procattr_child_errfn_set(ctx->procattr, child_errfn); ap_assert(rc == APR_SUCCESS); apr_pool_userdata_set(f->r, ERRFN_USERDATA_KEY, apr_pool_cleanup_null, ctx->p); rc = apr_procattr_error_check_set(ctx->procattr, 1); if (rc != APR_SUCCESS) { return rc; } /* add standard CGI variables as well as DOCUMENT_URI, DOCUMENT_PATH_INFO, * and QUERY_STRING_UNESCAPED */ ap_add_cgi_vars(f->r); ap_add_common_vars(f->r); apr_table_setn(f->r->subprocess_env, "DOCUMENT_URI", f->r->uri); apr_table_setn(f->r->subprocess_env, "DOCUMENT_PATH_INFO", f->r->path_info); if (f->r->args) { /* QUERY_STRING is added by ap_add_cgi_vars */ char *arg_copy = apr_pstrdup(f->r->pool, f->r->args); ap_unescape_url(arg_copy); apr_table_setn(f->r->subprocess_env, "QUERY_STRING_UNESCAPED", ap_escape_shell_cmd(f->r->pool, arg_copy)); } env = (const char * const *) ap_create_environment(ctx->p, f->r->subprocess_env); rc = apr_proc_create(ctx->proc, ctx->filter->command, (const char * const *)ctx->filter->args, env, /* environment */ ctx->procattr, ctx->p); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, f->r, APLOGNO(01458) "couldn't create child process to run `%s'", ctx->filter->command); return rc; } apr_pool_note_subprocess(ctx->p, ctx->proc, APR_KILL_AFTER_TIMEOUT); /* We don't want the handle to the child's stdin inherited by any * other processes created by httpd. Otherwise, when we close our * handle, the child won't see EOF because another handle will still * be open. */ apr_pool_cleanup_register(ctx->p, ctx->proc->in, apr_pool_cleanup_null, /* other mechanism */ ef_close_file); #if APR_FILES_AS_SOCKETS { apr_pollfd_t pfd = { 0 }; rc = apr_pollset_create(&ctx->pollset, 2, ctx->p, 0); ap_assert(rc == APR_SUCCESS); pfd.p = ctx->p; pfd.desc_type = APR_POLL_FILE; pfd.reqevents = APR_POLLOUT; pfd.desc.f = ctx->proc->in; rc = apr_pollset_add(ctx->pollset, &pfd); ap_assert(rc == APR_SUCCESS); pfd.reqevents = APR_POLLIN; pfd.desc.f = ctx->proc->out; rc = apr_pollset_add(ctx->pollset, &pfd); ap_assert(rc == APR_SUCCESS); } #endif return APR_SUCCESS; } static const char *get_cfg_string(ef_dir_t *dc, ef_filter_t *filter, apr_pool_t *p) { const char *log_stderr_str = dc->log_stderr < 1 ? "NoLogStderr" : "LogStderr"; const char *preserve_content_length_str = filter->preserves_content_length ? "PreservesContentLength" : "!PreserveContentLength"; const char *intype_str = !filter->intype ? "*/*" : filter->intype; const char *outtype_str = !filter->outtype ? "(unchanged)" : filter->outtype; return apr_psprintf(p, "ExtFilterOptions %s %s ExtFilterInType %s " "ExtFilterOuttype %s", log_stderr_str, preserve_content_length_str, intype_str, outtype_str); } static ef_filter_t *find_filter_def(const server_rec *s, const char *fname) { ef_server_t *sc; ef_filter_t *f; sc = ap_get_module_config(s->module_config, &ext_filter_module); f = apr_hash_get(sc->h, fname, APR_HASH_KEY_STRING); if (!f && s != main_server) { s = main_server; sc = ap_get_module_config(s->module_config, &ext_filter_module); f = apr_hash_get(sc->h, fname, APR_HASH_KEY_STRING); } return f; } static apr_status_t init_filter_instance(ap_filter_t *f) { ef_ctx_t *ctx; ef_dir_t *dc; apr_status_t rv; f->ctx = ctx = apr_pcalloc(f->r->pool, sizeof(ef_ctx_t)); dc = ap_get_module_config(f->r->per_dir_config, &ext_filter_module); ctx->dc = dc; /* look for the user-defined filter */ ctx->filter = find_filter_def(f->r->server, f->frec->name); if (!ctx->filter) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, f->r, APLOGNO(01459) "couldn't find definition of filter '%s'", f->frec->name); return APR_EINVAL; } ctx->p = f->r->pool; if (ctx->filter->intype && ctx->filter->intype != INTYPE_ALL) { const char *ctypes; if (ctx->filter->mode == INPUT_FILTER) { ctypes = apr_table_get(f->r->headers_in, "Content-Type"); } else { ctypes = f->r->content_type; } if (ctypes) { const char *ctype = ap_getword(f->r->pool, &ctypes, ';'); if (strcasecmp(ctx->filter->intype, ctype)) { /* wrong IMT for us; don't mess with the output */ ctx->noop = 1; } } else { ctx->noop = 1; } } if (ctx->filter->enable_env && !apr_table_get(f->r->subprocess_env, ctx->filter->enable_env)) { /* an environment variable that enables the filter isn't set; bail */ ctx->noop = 1; } if (ctx->filter->disable_env && apr_table_get(f->r->subprocess_env, ctx->filter->disable_env)) { /* an environment variable that disables the filter is set; bail */ ctx->noop = 1; } if (!ctx->noop) { rv = init_ext_filter_process(f); if (rv != APR_SUCCESS) { return rv; } if (ctx->filter->outtype && ctx->filter->outtype != OUTTYPE_UNCHANGED) { ap_set_content_type(f->r, ctx->filter->outtype); } if (ctx->filter->preserves_content_length != 1) { /* nasty, but needed to avoid confusing the browser */ apr_table_unset(f->r->headers_out, "Content-Length"); } } if (APLOGrtrace1(f->r)) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, f->r, "%sfiltering `%s' of type `%s' through `%s', cfg %s", ctx->noop ? "NOT " : "", f->r->uri ? f->r->uri : f->r->filename, f->r->content_type ? f->r->content_type : "(unspecified)", ctx->filter->command, get_cfg_string(dc, ctx->filter, f->r->pool)); } return APR_SUCCESS; } /* drain_available_output(): * * if any data is available from the filter, read it and append it * to the bucket brigade */ static apr_status_t drain_available_output(ap_filter_t *f, apr_bucket_brigade *bb) { request_rec *r = f->r; conn_rec *c = r->connection; ef_ctx_t *ctx = f->ctx; apr_size_t len; char buf[4096]; apr_status_t rv; apr_bucket *b; while (1) { int lvl = APLOG_TRACE5; len = sizeof(buf); rv = apr_file_read(ctx->proc->out, buf, &len); if (rv && !APR_STATUS_IS_EAGAIN(rv)) lvl = APLOG_DEBUG; ap_log_rerror(APLOG_MARK, lvl, rv, r, APLOGNO(01460) "apr_file_read(child output), len %" APR_SIZE_T_FMT, !rv ? len : -1); if (rv != APR_SUCCESS) { return rv; } b = apr_bucket_heap_create(buf, len, NULL, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); return APR_SUCCESS; } /* we should never get here; if we do, a bogus error message would be * the least of our problems */ return APR_ANONYMOUS; } static apr_status_t pass_data_to_filter(ap_filter_t *f, const char *data, apr_size_t len, apr_bucket_brigade *bb) { ef_ctx_t *ctx = f->ctx; apr_status_t rv; apr_size_t bytes_written = 0; apr_size_t tmplen; do { tmplen = len - bytes_written; rv = apr_file_write_full(ctx->proc->in, (const char *)data + bytes_written, tmplen, &tmplen); bytes_written += tmplen; if (rv != APR_SUCCESS && !APR_STATUS_IS_EAGAIN(rv)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, f->r, APLOGNO(01461) "apr_file_write(child input), len %" APR_SIZE_T_FMT, tmplen); return rv; } if (APR_STATUS_IS_EAGAIN(rv)) { /* XXX handle blocking conditions here... if we block, we need * to read data from the child process and pass it down to the * next filter! */ rv = drain_available_output(f, bb); if (APR_STATUS_IS_EAGAIN(rv)) { #if APR_FILES_AS_SOCKETS int num_events; const apr_pollfd_t *pdesc; rv = apr_pollset_poll(ctx->pollset, f->r->server->timeout, &num_events, &pdesc); if (rv != APR_SUCCESS && !APR_STATUS_IS_EINTR(rv)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, rv, f->r, APLOGNO(01462) "apr_pollset_poll()"); /* some error such as APR_TIMEUP */ return rv; } ap_log_rerror(APLOG_MARK, APLOG_TRACE6, rv, f->r, "apr_pollset_poll()"); #else /* APR_FILES_AS_SOCKETS */ /* Yuck... I'd really like to wait until I can read * or write, but instead I have to sleep and try again */ apr_sleep(apr_time_from_msec(100)); ap_log_rerror(APLOG_MARK, APLOG_TRACE6, 0, f->r, "apr_sleep()"); #endif /* APR_FILES_AS_SOCKETS */ } else if (rv != APR_SUCCESS) { return rv; } } } while (bytes_written < len); return rv; } /* ef_unified_filter: * * runs the bucket brigade bb through the filter and puts the result into * bb, dropping the previous content of bb (the input) */ static int ef_unified_filter(ap_filter_t *f, apr_bucket_brigade *bb) { request_rec *r = f->r; conn_rec *c = r->connection; ef_ctx_t *ctx = f->ctx; apr_bucket *b; apr_size_t len; const char *data; apr_status_t rv; char buf[4096]; apr_bucket *eos = NULL; apr_bucket_brigade *bb_tmp; bb_tmp = apr_brigade_create(r->pool, c->bucket_alloc); for (b = APR_BRIGADE_FIRST(bb); b != APR_BRIGADE_SENTINEL(bb); b = APR_BUCKET_NEXT(b)) { if (APR_BUCKET_IS_EOS(b)) { eos = b; break; } if (AP_BUCKET_IS_ERROR(b)) { apr_bucket *cpy; apr_bucket_copy(b, &cpy); APR_BRIGADE_INSERT_TAIL(bb_tmp, cpy); break; } rv = apr_bucket_read(b, &data, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01463) "apr_bucket_read()"); return rv; } /* Good cast, we just tested len isn't negative */ if (len > 0 && (rv = pass_data_to_filter(f, data, (apr_size_t)len, bb_tmp)) != APR_SUCCESS) { return rv; } } apr_brigade_cleanup(bb); APR_BRIGADE_CONCAT(bb, bb_tmp); apr_brigade_destroy(bb_tmp); if (eos) { /* close the child's stdin to signal that no more data is coming; * that will cause the child to finish generating output */ if ((rv = apr_file_close(ctx->proc->in)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01464) "apr_file_close(child input)"); return rv; } /* since we've seen eos and closed the child's stdin, set the proper pipe * timeout; we don't care if we don't return from apr_file_read() for a while... */ rv = apr_file_pipe_timeout_set(ctx->proc->out, r->server->timeout); if (rv) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01465) "apr_file_pipe_timeout_set(child output)"); return rv; } } do { int lvl = APLOG_TRACE6; len = sizeof(buf); rv = apr_file_read(ctx->proc->out, buf, &len); if (rv && !APR_STATUS_IS_EOF(rv) && !APR_STATUS_IS_EAGAIN(rv)) lvl = APLOG_ERR; ap_log_rerror(APLOG_MARK, lvl, rv, r, APLOGNO(01466) "apr_file_read(child output), len %" APR_SIZE_T_FMT, !rv ? len : -1); if (APR_STATUS_IS_EAGAIN(rv)) { if (eos) { /* should not occur, because we have an APR timeout in place */ AP_DEBUG_ASSERT(1 != 1); } return APR_SUCCESS; } if (rv == APR_SUCCESS) { b = apr_bucket_heap_create(buf, len, NULL, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); } } while (rv == APR_SUCCESS); if (!APR_STATUS_IS_EOF(rv)) { return rv; } if (eos) { b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); ctx->hit_eos = 1; } return APR_SUCCESS; } static apr_status_t ef_output_filter(ap_filter_t *f, apr_bucket_brigade *bb) { request_rec *r = f->r; ef_ctx_t *ctx = f->ctx; apr_status_t rv; if (!ctx) { if ((rv = init_filter_instance(f)) != APR_SUCCESS) { ctx = f->ctx; ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01467) "can't initialise output filter %s: %s", f->frec->name, (ctx->dc->onfail == 1) ? "removing" : "aborting"); ap_remove_output_filter(f); if (ctx->dc->onfail == 1) { return ap_pass_brigade(f->next, bb); } else { apr_bucket *e; f->r->status_line = "500 Internal Server Error"; apr_brigade_cleanup(bb); e = ap_bucket_error_create(HTTP_INTERNAL_SERVER_ERROR, NULL, r->pool, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); e = apr_bucket_eos_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); ap_pass_brigade(f->next, bb); return AP_FILTER_ERROR; } } ctx = f->ctx; } if (ctx->noop) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } rv = ef_unified_filter(f, bb); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01468) "ef_unified_filter() failed"); } if ((rv = ap_pass_brigade(f->next, bb)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(01469) "ap_pass_brigade() failed"); } return rv; } static apr_status_t ef_input_filter(ap_filter_t *f, apr_bucket_brigade *bb, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { ef_ctx_t *ctx = f->ctx; apr_status_t rv; /* just get out of the way of things we don't want. */ if (mode != AP_MODE_READBYTES) { return ap_get_brigade(f->next, bb, mode, block, readbytes); } if (!ctx) { if ((rv = init_filter_instance(f)) != APR_SUCCESS) { ctx = f->ctx; ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, f->r, APLOGNO(01470) "can't initialise input filter %s: %s", f->frec->name, (ctx->dc->onfail == 1) ? "removing" : "aborting"); ap_remove_input_filter(f); if (ctx->dc->onfail == 1) { return ap_get_brigade(f->next, bb, mode, block, readbytes); } else { f->r->status = HTTP_INTERNAL_SERVER_ERROR; return HTTP_INTERNAL_SERVER_ERROR; } } ctx = f->ctx; } if (ctx->hit_eos) { /* Match behaviour of HTTP_IN if filter is re-invoked after * hitting EOS: give back another EOS. */ apr_bucket *e = apr_bucket_eos_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); return APR_SUCCESS; } if (ctx->noop) { ap_remove_input_filter(f); return ap_get_brigade(f->next, bb, mode, block, readbytes); } rv = ap_get_brigade(f->next, bb, mode, block, readbytes); if (rv != APR_SUCCESS) { return rv; } rv = ef_unified_filter(f, bb); return rv; } AP_DECLARE_MODULE(ext_filter) = { STANDARD20_MODULE_STUFF, create_ef_dir_conf, merge_ef_dir_conf, create_ef_server_conf, NULL, cmds, register_hooks }; httpd-2.4.41/modules/filters/mod_deflate.exp0000644000000000000500000000001710150161574017333 0ustar rootsrcdeflate_module httpd-2.4.41/modules/filters/sed1.c0000644000000000000500000006636513350443433015376 0ustar rootsrc/* * Copyright (c) 2005, 2008 Sun Microsystems, Inc. All Rights Reserved. * Use is subject to license terms. * * Copyright (c) 1984 AT&T * All Rights Reserved * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * http://www.apache.org/licenses/LICENSE-2.0. * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express * or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr.h" #include "apr_lib.h" #include "libsed.h" #include "sed.h" #include "apr_strings.h" #include "regexp.h" static const char *const trans[040] = { "\\01", "\\02", "\\03", "\\04", "\\05", "\\06", "\\07", "\\10", "\\11", "\n", "\\13", "\\14", "\\15", "\\16", "\\17", "\\20", "\\21", "\\22", "\\23", "\\24", "\\25", "\\26", "\\27", "\\30", "\\31", "\\32", "\\33", "\\34", "\\35", "\\36", "\\37" }; static const char rub[] = {"\\177"}; extern int sed_step(char *p1, char *p2, int circf, step_vars_storage *vars); static int substitute(sed_eval_t *eval, sed_reptr_t *ipc, step_vars_storage *step_vars); static apr_status_t execute(sed_eval_t *eval); static int match(sed_eval_t *eval, char *expbuf, int gf, step_vars_storage *step_vars); static apr_status_t dosub(sed_eval_t *eval, char *rhsbuf, int n, step_vars_storage *step_vars); static char *place(sed_eval_t *eval, char *asp, char *al1, char *al2); static apr_status_t command(sed_eval_t *eval, sed_reptr_t *ipc, step_vars_storage *step_vars); static apr_status_t wline(sed_eval_t *eval, char *buf, int sz); static apr_status_t arout(sed_eval_t *eval); static void eval_errf(sed_eval_t *eval, const char *fmt, ...) { if (eval->errfn && eval->pool) { va_list args; const char* error; va_start(args, fmt); error = apr_pvsprintf(eval->pool, fmt, args); eval->errfn(eval->data, error); va_end(args); } } #define INIT_BUF_SIZE 1024 /* * grow_buffer */ static void grow_buffer(apr_pool_t *pool, char **buffer, char **spend, unsigned int *cursize, unsigned int newsize) { char* newbuffer = NULL; int spendsize = 0; if (*cursize >= newsize) return; /* Avoid number of times realloc is called. It could cause huge memory * requirement if line size is huge e.g 2 MB */ if (newsize < *cursize * 2) { newsize = *cursize * 2; } /* Align it to 4 KB boundary */ newsize = (newsize + ((1 << 12) - 1)) & ~((1 << 12) - 1); newbuffer = apr_pcalloc(pool, newsize); if (*spend && *buffer && (*cursize > 0)) { spendsize = *spend - *buffer; } if ((*cursize > 0) && *buffer) { memcpy(newbuffer, *buffer, *cursize); } *buffer = newbuffer; *cursize = newsize; if (spend != buffer) { *spend = *buffer + spendsize; } } /* * grow_line_buffer */ static void grow_line_buffer(sed_eval_t *eval, int newsize) { grow_buffer(eval->pool, &eval->linebuf, &eval->lspend, &eval->lsize, newsize); } /* * grow_hold_buffer */ static void grow_hold_buffer(sed_eval_t *eval, int newsize) { grow_buffer(eval->pool, &eval->holdbuf, &eval->hspend, &eval->hsize, newsize); } /* * grow_gen_buffer */ static void grow_gen_buffer(sed_eval_t *eval, int newsize, char **gspend) { if (gspend == NULL) { gspend = &eval->genbuf; } grow_buffer(eval->pool, &eval->genbuf, gspend, &eval->gsize, newsize); eval->lcomend = &eval->genbuf[71]; } /* * appendmem_to_linebuf */ static void appendmem_to_linebuf(sed_eval_t *eval, const char* sz, int len) { unsigned int reqsize = (eval->lspend - eval->linebuf) + len; if (eval->lsize < reqsize) { grow_line_buffer(eval, reqsize); } memcpy(eval->lspend, sz, len); eval->lspend += len; } /* * append_to_linebuf */ static void append_to_linebuf(sed_eval_t *eval, const char* sz) { int len = strlen(sz); /* Copy string including null character */ appendmem_to_linebuf(eval, sz, len + 1); --eval->lspend; /* lspend will now point to NULL character */ } /* * copy_to_linebuf */ static void copy_to_linebuf(sed_eval_t *eval, const char* sz) { eval->lspend = eval->linebuf; append_to_linebuf(eval, sz); } /* * append_to_holdbuf */ static void append_to_holdbuf(sed_eval_t *eval, const char* sz) { int len = strlen(sz); unsigned int reqsize = (eval->hspend - eval->holdbuf) + len + 1; if (eval->hsize <= reqsize) { grow_hold_buffer(eval, reqsize); } memcpy(eval->hspend, sz, len + 1); /* hspend will now point to NULL character */ eval->hspend += len; } /* * copy_to_holdbuf */ static void copy_to_holdbuf(sed_eval_t *eval, const char* sz) { eval->hspend = eval->holdbuf; append_to_holdbuf(eval, sz); } /* * append_to_genbuf */ static void append_to_genbuf(sed_eval_t *eval, const char* sz, char **gspend) { int len = strlen(sz); unsigned int reqsize = (*gspend - eval->genbuf) + len + 1; if (eval->gsize < reqsize) { grow_gen_buffer(eval, reqsize, gspend); } memcpy(*gspend, sz, len + 1); /* *gspend will now point to NULL character */ *gspend += len; } /* * copy_to_genbuf */ static void copy_to_genbuf(sed_eval_t *eval, const char* sz) { int len = strlen(sz); unsigned int reqsize = len + 1; if (eval->gsize < reqsize) { grow_gen_buffer(eval, reqsize, NULL); } memcpy(eval->genbuf, sz, len + 1); } /* * sed_init_eval */ apr_status_t sed_init_eval(sed_eval_t *eval, sed_commands_t *commands, sed_err_fn_t *errfn, void *data, sed_write_fn_t *writefn, apr_pool_t* p) { memset(eval, 0, sizeof(*eval)); eval->pool = p; eval->writefn = writefn; return sed_reset_eval(eval, commands, errfn, data); } /* * sed_reset_eval */ apr_status_t sed_reset_eval(sed_eval_t *eval, sed_commands_t *commands, sed_err_fn_t *errfn, void *data) { int i; eval->errfn = errfn; eval->data = data; eval->commands = commands; eval->lnum = 0; eval->fout = NULL; if (eval->linebuf == NULL) { eval->lsize = INIT_BUF_SIZE; eval->linebuf = apr_pcalloc(eval->pool, eval->lsize); } if (eval->holdbuf == NULL) { eval->hsize = INIT_BUF_SIZE; eval->holdbuf = apr_pcalloc(eval->pool, eval->hsize); } if (eval->genbuf == NULL) { eval->gsize = INIT_BUF_SIZE; eval->genbuf = apr_pcalloc(eval->pool, eval->gsize); } eval->lspend = eval->linebuf; eval->hspend = eval->holdbuf; eval->lcomend = &eval->genbuf[71]; for (i = 0; i < sizeof(eval->abuf) / sizeof(eval->abuf[0]); i++) eval->abuf[i] = NULL; eval->aptr = eval->abuf; eval->pending = NULL; eval->inar = apr_pcalloc(eval->pool, commands->nrep * sizeof(unsigned char)); eval->nrep = commands->nrep; eval->dolflag = 0; eval->sflag = 0; eval->jflag = 0; eval->delflag = 0; eval->lreadyflag = 0; eval->quitflag = 0; eval->finalflag = 1; /* assume we're evaluating only one file/stream */ eval->numpass = 0; eval->nullmatch = 0; eval->col = 0; for (i = 0; i < commands->nfiles; i++) { const char* filename = commands->fname[i]; if (apr_file_open(&eval->fcode[i], filename, APR_WRITE | APR_CREATE, APR_OS_DEFAULT, eval->pool) != APR_SUCCESS) { eval_errf(eval, SEDERR_COMES, filename); return APR_EGENERAL; } } return APR_SUCCESS; } /* * sed_destroy_eval */ void sed_destroy_eval(sed_eval_t *eval) { int i; /* eval->linebuf, eval->holdbuf, eval->genbuf and eval->inar are allocated * on pool. It will be freed when pool will be freed */ for (i = 0; i < eval->commands->nfiles; i++) { if (eval->fcode[i] != NULL) { apr_file_close(eval->fcode[i]); eval->fcode[i] = NULL; } } } /* * sed_eval_file */ apr_status_t sed_eval_file(sed_eval_t *eval, apr_file_t *fin, void *fout) { for (;;) { char buf[1024]; apr_size_t read_bytes = 0; read_bytes = sizeof(buf); if (apr_file_read(fin, buf, &read_bytes) != APR_SUCCESS) break; if (sed_eval_buffer(eval, buf, read_bytes, fout) != APR_SUCCESS) return APR_EGENERAL; if (eval->quitflag) return APR_SUCCESS; } return sed_finalize_eval(eval, fout); } /* * sed_eval_buffer */ apr_status_t sed_eval_buffer(sed_eval_t *eval, const char *buf, int bufsz, void *fout) { apr_status_t rv; if (eval->quitflag) return APR_SUCCESS; if (!sed_canbe_finalized(eval->commands)) { /* Commands were not finalized properly. */ const char* error = sed_get_finalize_error(eval->commands, eval->pool); if (error) { eval_errf(eval, error); return APR_EGENERAL; } } eval->fout = fout; /* Process leftovers */ if (bufsz && eval->lreadyflag) { eval->lreadyflag = 0; eval->lspend--; *eval->lspend = '\0'; rv = execute(eval); if (rv != APR_SUCCESS) return rv; } while (bufsz) { char *n; int llen; n = memchr(buf, '\n', bufsz); if (n == NULL) break; llen = n - buf; if (llen == bufsz - 1) { /* This might be the last line; delay its processing */ eval->lreadyflag = 1; break; } appendmem_to_linebuf(eval, buf, llen + 1); --eval->lspend; /* replace new line character with NULL */ *eval->lspend = '\0'; buf += (llen + 1); bufsz -= (llen + 1); rv = execute(eval); if (rv != APR_SUCCESS) return rv; if (eval->quitflag) break; } /* Save the leftovers for later */ if (bufsz) { appendmem_to_linebuf(eval, buf, bufsz); } return APR_SUCCESS; } /* * sed_finalize_eval */ apr_status_t sed_finalize_eval(sed_eval_t *eval, void *fout) { if (eval->quitflag) return APR_SUCCESS; if (eval->finalflag) eval->dolflag = 1; eval->fout = fout; /* Process leftovers */ if (eval->lspend > eval->linebuf) { apr_status_t rv; if (eval->lreadyflag) { eval->lreadyflag = 0; eval->lspend--; } else { /* Code can probably reach here when last character in output * buffer is not a newline. */ /* Assure space for NULL */ append_to_linebuf(eval, ""); } *eval->lspend = '\0'; rv = execute(eval); if (rv != APR_SUCCESS) return rv; } eval->quitflag = 1; return APR_SUCCESS; } /* * execute */ static apr_status_t execute(sed_eval_t *eval) { sed_reptr_t *ipc = eval->commands->ptrspace; step_vars_storage step_vars; apr_status_t rv = APR_SUCCESS; eval->lnum++; eval->sflag = 0; if (eval->pending) { ipc = eval->pending; eval->pending = NULL; } memset(&step_vars, 0, sizeof(step_vars)); while (ipc->command) { char *p1; char *p2; int c; p1 = ipc->ad1; p2 = ipc->ad2; if (p1) { if (eval->inar[ipc->nrep]) { if (*p2 == CEND) { p1 = 0; } else if (*p2 == CLNUM) { c = (unsigned char)p2[1]; if (eval->lnum > eval->commands->tlno[c]) { eval->inar[ipc->nrep] = 0; if (ipc->negfl) goto yes; ipc = ipc->next; continue; } if (eval->lnum == eval->commands->tlno[c]) { eval->inar[ipc->nrep] = 0; } } else if (match(eval, p2, 0, &step_vars)) { eval->inar[ipc->nrep] = 0; } } else if (*p1 == CEND) { if (!eval->dolflag) { if (ipc->negfl) goto yes; ipc = ipc->next; continue; } } else if (*p1 == CLNUM) { c = (unsigned char)p1[1]; if (eval->lnum != eval->commands->tlno[c]) { if (ipc->negfl) goto yes; ipc = ipc->next; continue; } if (p2) eval->inar[ipc->nrep] = 1; } else if (match(eval, p1, 0, &step_vars)) { if (p2) eval->inar[ipc->nrep] = 1; } else { if (ipc->negfl) goto yes; ipc = ipc->next; continue; } } if (ipc->negfl) { ipc = ipc->next; continue; } yes: rv = command(eval, ipc, &step_vars); if (rv != APR_SUCCESS) return rv; if (eval->quitflag) return APR_SUCCESS; if (eval->pending) return APR_SUCCESS; if (eval->delflag) break; if (eval->jflag) { eval->jflag = 0; if ((ipc = ipc->lb1) == 0) { ipc = eval->commands->ptrspace; break; } } else ipc = ipc->next; } if (!eval->commands->nflag && !eval->delflag) { rv = wline(eval, eval->linebuf, eval->lspend - eval->linebuf); if (rv != APR_SUCCESS) return rv; } if (eval->aptr > eval->abuf) rv = arout(eval); eval->delflag = 0; eval->lspend = eval->linebuf; return rv; } /* * match */ static int match(sed_eval_t *eval, char *expbuf, int gf, step_vars_storage *step_vars) { char *p1; int circf; if (gf) { if (*expbuf) return(0); step_vars->locs = p1 = step_vars->loc2; } else { p1 = eval->linebuf; step_vars->locs = 0; } circf = *expbuf++; return(sed_step(p1, expbuf, circf, step_vars)); } /* * substitute */ static int substitute(sed_eval_t *eval, sed_reptr_t *ipc, step_vars_storage *step_vars) { if (match(eval, ipc->re1, 0, step_vars) == 0) return(0); eval->numpass = 0; eval->sflag = 0; /* Flags if any substitution was made */ if (dosub(eval, ipc->rhs, ipc->gfl, step_vars) != APR_SUCCESS) return -1; if (ipc->gfl) { while (*step_vars->loc2) { if (match(eval, ipc->re1, 1, step_vars) == 0) break; if (dosub(eval, ipc->rhs, ipc->gfl, step_vars) != APR_SUCCESS) return -1; } } return(eval->sflag); } /* * dosub */ static apr_status_t dosub(sed_eval_t *eval, char *rhsbuf, int n, step_vars_storage *step_vars) { char *lp, *sp, *rp; int c; apr_status_t rv = APR_SUCCESS; if (n > 0 && n < 999) { eval->numpass++; if (n != eval->numpass) return APR_SUCCESS; } eval->sflag = 1; lp = eval->linebuf; sp = eval->genbuf; rp = rhsbuf; sp = place(eval, sp, lp, step_vars->loc1); while ((c = *rp++) != 0) { if (c == '&') { sp = place(eval, sp, step_vars->loc1, step_vars->loc2); if (sp == NULL) return APR_EGENERAL; } else if (c == '\\') { c = *rp++; if (c >= '1' && c < NBRA+'1') { sp = place(eval, sp, step_vars->braslist[c-'1'], step_vars->braelist[c-'1']); if (sp == NULL) return APR_EGENERAL; } else *sp++ = c; } else *sp++ = c; if (sp >= eval->genbuf + eval->gsize) { /* expand genbuf and set the sp appropriately */ grow_gen_buffer(eval, eval->gsize + 1024, &sp); } } lp = step_vars->loc2; step_vars->loc2 = sp - eval->genbuf + eval->linebuf; append_to_genbuf(eval, lp, &sp); copy_to_linebuf(eval, eval->genbuf); return rv; } /* * place */ static char *place(sed_eval_t *eval, char *asp, char *al1, char *al2) { char *sp = asp; int n = al2 - al1; unsigned int reqsize = (sp - eval->genbuf) + n + 1; if (eval->gsize < reqsize) { grow_gen_buffer(eval, reqsize, &sp); } memcpy(sp, al1, n); return sp + n; } /* * command */ static apr_status_t command(sed_eval_t *eval, sed_reptr_t *ipc, step_vars_storage *step_vars) { int i; char *p1, *p2; const char *p3; int length; char sz[32]; /* 32 bytes enough to store 64 bit integer in decimal */ apr_status_t rv = APR_SUCCESS; switch(ipc->command) { case ACOM: if (eval->aptr >= &eval->abuf[SED_ABUFSIZE]) { eval_errf(eval, SEDERR_TMAMES, eval->lnum); } else { *eval->aptr++ = ipc; *eval->aptr = NULL; } break; case CCOM: eval->delflag = 1; if (!eval->inar[ipc->nrep] || eval->dolflag) { for (p1 = ipc->re1; *p1; p1++) ; rv = wline(eval, ipc->re1, p1 - ipc->re1); } break; case DCOM: eval->delflag++; break; case CDCOM: p1 = eval->linebuf; while (*p1 != '\n') { if (*p1++ == 0) { eval->delflag++; return APR_SUCCESS; } } p1++; copy_to_linebuf(eval, p1); eval->jflag++; break; case EQCOM: length = apr_snprintf(sz, sizeof(sz), "%d", (int) eval->lnum); rv = wline(eval, sz, length); break; case GCOM: copy_to_linebuf(eval, eval->holdbuf); break; case CGCOM: append_to_linebuf(eval, "\n"); append_to_linebuf(eval, eval->holdbuf); break; case HCOM: copy_to_holdbuf(eval, eval->linebuf); break; case CHCOM: append_to_holdbuf(eval, "\n"); append_to_holdbuf(eval, eval->linebuf); break; case ICOM: for (p1 = ipc->re1; *p1; p1++); rv = wline(eval, ipc->re1, p1 - ipc->re1); break; case BCOM: eval->jflag = 1; break; case LCOM: p1 = eval->linebuf; p2 = eval->genbuf; eval->genbuf[72] = 0; while (*p1) { if ((unsigned char)*p1 >= 040) { if (*p1 == 0177) { p3 = rub; while ((*p2++ = *p3++) != 0) if (p2 >= eval->lcomend) { *p2 = '\\'; rv = wline(eval, eval->genbuf, strlen(eval->genbuf)); if (rv != APR_SUCCESS) return rv; p2 = eval->genbuf; } p2--; p1++; continue; } if (!isprint(*p1 & 0377)) { *p2++ = '\\'; if (p2 >= eval->lcomend) { *p2 = '\\'; rv = wline(eval, eval->genbuf, strlen(eval->genbuf)); if (rv != APR_SUCCESS) return rv; p2 = eval->genbuf; } *p2++ = (*p1 >> 6) + '0'; if (p2 >= eval->lcomend) { *p2 = '\\'; rv = wline(eval, eval->genbuf, strlen(eval->genbuf)); if (rv != APR_SUCCESS) return rv; p2 = eval->genbuf; } *p2++ = ((*p1 >> 3) & 07) + '0'; if (p2 >= eval->lcomend) { *p2 = '\\'; rv = wline(eval, eval->genbuf, strlen(eval->genbuf)); if (rv != APR_SUCCESS) return rv; p2 = eval->genbuf; } *p2++ = (*p1++ & 07) + '0'; if (p2 >= eval->lcomend) { *p2 = '\\'; rv = wline(eval, eval->genbuf, strlen(eval->genbuf)); if (rv != APR_SUCCESS) return rv; p2 = eval->genbuf; } } else { *p2++ = *p1++; if (p2 >= eval->lcomend) { *p2 = '\\'; rv = wline(eval, eval->genbuf, strlen(eval->genbuf)); if (rv != APR_SUCCESS) return rv; p2 = eval->genbuf; } } } else { p3 = trans[(unsigned char)*p1-1]; while ((*p2++ = *p3++) != 0) if (p2 >= eval->lcomend) { *p2 = '\\'; rv = wline(eval, eval->genbuf, strlen(eval->genbuf)); if (rv != APR_SUCCESS) return rv; p2 = eval->genbuf; } p2--; p1++; } } *p2 = 0; rv = wline(eval, eval->genbuf, strlen(eval->genbuf)); break; case NCOM: if (!eval->commands->nflag) { rv = wline(eval, eval->linebuf, eval->lspend - eval->linebuf); if (rv != APR_SUCCESS) return rv; } if (eval->aptr > eval->abuf) { rv = arout(eval); if (rv != APR_SUCCESS) return rv; } eval->lspend = eval->linebuf; eval->pending = ipc->next; break; case CNCOM: if (eval->aptr > eval->abuf) { rv = arout(eval); if (rv != APR_SUCCESS) return rv; } append_to_linebuf(eval, "\n"); eval->pending = ipc->next; break; case PCOM: rv = wline(eval, eval->linebuf, eval->lspend - eval->linebuf); break; case CPCOM: for (p1 = eval->linebuf; *p1 != '\n' && *p1 != '\0'; p1++); rv = wline(eval, eval->linebuf, p1 - eval->linebuf); break; case QCOM: if (!eval->commands->nflag) { rv = wline(eval, eval->linebuf, eval->lspend - eval->linebuf); if (rv != APR_SUCCESS) break; } if (eval->aptr > eval->abuf) { rv = arout(eval); if (rv != APR_SUCCESS) return rv; } eval->quitflag = 1; break; case RCOM: if (eval->aptr >= &eval->abuf[SED_ABUFSIZE]) { eval_errf(eval, SEDERR_TMRMES, eval->lnum); } else { *eval->aptr++ = ipc; *eval->aptr = NULL; } break; case SCOM: i = substitute(eval, ipc, step_vars); if (i == -1) { return APR_EGENERAL; } if (ipc->pfl && eval->commands->nflag && i) { if (ipc->pfl == 1) { rv = wline(eval, eval->linebuf, eval->lspend - eval->linebuf); if (rv != APR_SUCCESS) return rv; } else { for (p1 = eval->linebuf; *p1 != '\n' && *p1 != '\0'; p1++); rv = wline(eval, eval->linebuf, p1 - eval->linebuf); if (rv != APR_SUCCESS) return rv; } } if (i && (ipc->findex >= 0) && eval->fcode[ipc->findex]) apr_file_printf(eval->fcode[ipc->findex], "%s\n", eval->linebuf); break; case TCOM: if (eval->sflag == 0) break; eval->sflag = 0; eval->jflag = 1; break; case WCOM: if (ipc->findex >= 0) apr_file_printf(eval->fcode[ipc->findex], "%s\n", eval->linebuf); break; case XCOM: copy_to_genbuf(eval, eval->linebuf); copy_to_linebuf(eval, eval->holdbuf); copy_to_holdbuf(eval, eval->genbuf); break; case YCOM: p1 = eval->linebuf; p2 = ipc->re1; while ((*p1 = p2[(unsigned char)*p1]) != 0) p1++; break; } return rv; } /* * arout */ static apr_status_t arout(sed_eval_t *eval) { apr_status_t rv = APR_SUCCESS; eval->aptr = eval->abuf - 1; while (*++eval->aptr) { if ((*eval->aptr)->command == ACOM) { char *p1; for (p1 = (*eval->aptr)->re1; *p1; p1++); rv = wline(eval, (*eval->aptr)->re1, p1 - (*eval->aptr)->re1); if (rv != APR_SUCCESS) return rv; } else { apr_file_t *fi = NULL; char buf[512]; apr_size_t n = sizeof(buf); if (apr_file_open(&fi, (*eval->aptr)->re1, APR_READ, 0, eval->pool) != APR_SUCCESS) continue; while ((apr_file_read(fi, buf, &n)) == APR_SUCCESS) { if (n == 0) break; rv = eval->writefn(eval->fout, buf, n); if (rv != APR_SUCCESS) { apr_file_close(fi); return rv; } n = sizeof(buf); } apr_file_close(fi); } } eval->aptr = eval->abuf; *eval->aptr = NULL; return rv; } /* * wline */ static apr_status_t wline(sed_eval_t *eval, char *buf, int sz) { apr_status_t rv = APR_SUCCESS; rv = eval->writefn(eval->fout, buf, sz); if (rv != APR_SUCCESS) return rv; rv = eval->writefn(eval->fout, "\n", 1); return rv; } httpd-2.4.41/modules/filters/libsed.h0000644000000000000500000001074411734331514015777 0ustar rootsrc/* * Copyright (c) 2005, 2008 Sun Microsystems, Inc. All Rights Reserved. * Use is subject to license terms. * * Copyright (c) 1984 AT&T * All Rights Reserved * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * http://www.apache.org/licenses/LICENSE-2.0. * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express * or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef LIBSED_H #define LIBSED_H #ifdef __cplusplus extern "C" { #endif #include #include "apr_file_io.h" #define SED_NLINES 256 #define SED_DEPTH 20 #define SED_LABSIZE 50 #define SED_ABUFSIZE 20 typedef struct sed_reptr_s sed_reptr_t; struct sed_reptr_s { sed_reptr_t *next; char *ad1; char *ad2; char *re1; sed_reptr_t *lb1; char *rhs; int findex; char command; int gfl; char pfl; char negfl; int nrep; }; typedef struct sed_label_s sed_label_t; struct sed_label_s { char asc[9]; sed_reptr_t *chain; sed_reptr_t *address; }; typedef apr_status_t (sed_err_fn_t)(void *data, const char *error); typedef apr_status_t (sed_write_fn_t)(void *ctx, char *buf, int sz); typedef struct sed_commands_s sed_commands_t; #define NWFILES 11 /* 10 plus one for standard output */ struct sed_commands_s { sed_err_fn_t *errfn; void *data; unsigned lsize; char *linebuf; char *lbend; const char *saveq; char *cp; char *lastre; char *respace; char sseof; char *reend; const char *earg; int eflag; int gflag; int nflag; apr_int64_t tlno[SED_NLINES]; int nlno; int depth; char *fname[NWFILES]; int nfiles; sed_label_t ltab[SED_LABSIZE]; sed_label_t *labtab; sed_label_t *lab; sed_label_t *labend; sed_reptr_t **cmpend[SED_DEPTH]; sed_reptr_t *ptrspace; sed_reptr_t *ptrend; sed_reptr_t *rep; int nrep; apr_pool_t *pool; int canbefinal; }; typedef struct sed_eval_s sed_eval_t; struct sed_eval_s { sed_err_fn_t *errfn; sed_write_fn_t *writefn; void *data; sed_commands_t *commands; apr_int64_t lnum; void *fout; unsigned lsize; char *linebuf; char *lspend; unsigned hsize; char *holdbuf; char *hspend; unsigned gsize; char *genbuf; char *lcomend; apr_file_t *fcode[NWFILES]; sed_reptr_t *abuf[SED_ABUFSIZE]; sed_reptr_t **aptr; sed_reptr_t *pending; unsigned char *inar; int nrep; int dolflag; int sflag; int jflag; int delflag; int lreadyflag; int quitflag; int finalflag; int numpass; int nullmatch; int col; apr_pool_t *pool; }; apr_status_t sed_init_commands(sed_commands_t *commands, sed_err_fn_t *errfn, void *data, apr_pool_t *p); apr_status_t sed_compile_string(sed_commands_t *commands, const char *s); apr_status_t sed_compile_file(sed_commands_t *commands, apr_file_t *fin); char* sed_get_finalize_error(const sed_commands_t *commands, apr_pool_t* pool); int sed_canbe_finalized(const sed_commands_t *commands); void sed_destroy_commands(sed_commands_t *commands); apr_status_t sed_init_eval(sed_eval_t *eval, sed_commands_t *commands, sed_err_fn_t *errfn, void *data, sed_write_fn_t *writefn, apr_pool_t *p); apr_status_t sed_reset_eval(sed_eval_t *eval, sed_commands_t *commands, sed_err_fn_t *errfn, void *data); apr_status_t sed_eval_buffer(sed_eval_t *eval, const char *buf, int bufsz, void *fout); apr_status_t sed_eval_file(sed_eval_t *eval, apr_file_t *fin, void *fout); apr_status_t sed_finalize_eval(sed_eval_t *eval, void *f); void sed_destroy_eval(sed_eval_t *eval); #ifdef __cplusplus } #endif #endif /* LIBSED_H */ httpd-2.4.41/modules/filters/mod_sed.c0000644000000000000500000004326712656470644016164 0ustar rootsrc/* * Copyright (c) 2005, 2008 Sun Microsystems, Inc. All Rights Reserved. * Use is subject to license terms. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * http://www.apache.org/licenses/LICENSE-2.0. * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express * or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "apr_strings.h" #include "apr_general.h" #include "util_filter.h" #include "apr_buckets.h" #include "http_request.h" #include "libsed.h" static const char *sed_filter_name = "Sed"; #define MODSED_OUTBUF_SIZE 8000 #define MAX_TRANSIENT_BUCKETS 50 typedef struct sed_expr_config { sed_commands_t *sed_cmds; const char *last_error; } sed_expr_config; typedef struct sed_config { sed_expr_config output; sed_expr_config input; } sed_config; /* Context for filter invocation for single HTTP request */ typedef struct sed_filter_ctxt { sed_eval_t eval; ap_filter_t *f; request_rec *r; apr_bucket_brigade *bb; apr_bucket_brigade *bbinp; char *outbuf; char *curoutbuf; int bufsize; apr_pool_t *tpool; int numbuckets; } sed_filter_ctxt; module AP_MODULE_DECLARE_DATA sed_module; /* This function will be call back from libsed functions if there is any error * happend during execution of sed scripts */ static apr_status_t log_sed_errf(void *data, const char *error) { request_rec *r = (request_rec *) data; ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02998) "%s", error); return APR_SUCCESS; } /* This function will be call back from libsed functions if there is any * compilation error. */ static apr_status_t sed_compile_errf(void *data, const char *error) { sed_expr_config *sed_cfg = (sed_expr_config *) data; sed_cfg->last_error = error; return APR_SUCCESS; } /* clear the temporary pool (used for transient buckets) */ static void clear_ctxpool(sed_filter_ctxt* ctx) { apr_pool_clear(ctx->tpool); ctx->outbuf = NULL; ctx->curoutbuf = NULL; ctx->numbuckets = 0; } /* alloc_outbuf * allocate output buffer */ static void alloc_outbuf(sed_filter_ctxt* ctx) { ctx->outbuf = apr_palloc(ctx->tpool, ctx->bufsize + 1); ctx->curoutbuf = ctx->outbuf; } /* append_bucket * Allocate a new bucket from buf and sz and append to ctx->bb */ static apr_status_t append_bucket(sed_filter_ctxt* ctx, char* buf, int sz) { apr_status_t status = APR_SUCCESS; apr_bucket *b; if (ctx->tpool == ctx->r->pool) { /* We are not using transient bucket */ b = apr_bucket_pool_create(buf, sz, ctx->r->pool, ctx->r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->bb, b); } else { /* We are using transient bucket */ b = apr_bucket_transient_create(buf, sz, ctx->r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->bb, b); ctx->numbuckets++; if (ctx->numbuckets >= MAX_TRANSIENT_BUCKETS) { b = apr_bucket_flush_create(ctx->r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->bb, b); status = ap_pass_brigade(ctx->f->next, ctx->bb); apr_brigade_cleanup(ctx->bb); clear_ctxpool(ctx); } } return status; } /* * flush_output_buffer * Flush the output data (stored in ctx->outbuf) */ static apr_status_t flush_output_buffer(sed_filter_ctxt *ctx) { int size = ctx->curoutbuf - ctx->outbuf; char *out; apr_status_t status = APR_SUCCESS; if ((ctx->outbuf == NULL) || (size <=0)) return status; out = apr_pmemdup(ctx->tpool, ctx->outbuf, size); status = append_bucket(ctx, out, size); ctx->curoutbuf = ctx->outbuf; return status; } /* This is a call back function. When libsed wants to generate the output, * this function will be invoked. */ static apr_status_t sed_write_output(void *dummy, char *buf, int sz) { /* dummy is basically filter context. Context is passed during invocation * of sed_eval_buffer */ int remainbytes = 0; apr_status_t status = APR_SUCCESS; sed_filter_ctxt *ctx = (sed_filter_ctxt *) dummy; if (ctx->outbuf == NULL) { alloc_outbuf(ctx); } remainbytes = ctx->bufsize - (ctx->curoutbuf - ctx->outbuf); if (sz >= remainbytes) { if (remainbytes > 0) { memcpy(ctx->curoutbuf, buf, remainbytes); buf += remainbytes; sz -= remainbytes; ctx->curoutbuf += remainbytes; } /* buffer is now full */ status = append_bucket(ctx, ctx->outbuf, ctx->bufsize); /* old buffer is now used so allocate new buffer */ alloc_outbuf(ctx); /* if size is bigger than the allocated buffer directly add to output * brigade */ if ((status == APR_SUCCESS) && (sz >= ctx->bufsize)) { char* newbuf = apr_pmemdup(ctx->tpool, buf, sz); status = append_bucket(ctx, newbuf, sz); /* pool might get clear after append_bucket */ if (ctx->outbuf == NULL) { alloc_outbuf(ctx); } } else { memcpy(ctx->curoutbuf, buf, sz); ctx->curoutbuf += sz; } } else { memcpy(ctx->curoutbuf, buf, sz); ctx->curoutbuf += sz; } return status; } /* Compile a sed expression. Compiled context is saved in sed_cfg->sed_cmds. * Memory required for compilation context is allocated from cmd->pool. */ static apr_status_t compile_sed_expr(sed_expr_config *sed_cfg, cmd_parms *cmd, const char *expr) { apr_status_t status = APR_SUCCESS; if (!sed_cfg->sed_cmds) { sed_commands_t *sed_cmds; sed_cmds = apr_pcalloc(cmd->pool, sizeof(sed_commands_t)); status = sed_init_commands(sed_cmds, sed_compile_errf, sed_cfg, cmd->pool); if (status != APR_SUCCESS) { sed_destroy_commands(sed_cmds); return status; } sed_cfg->sed_cmds = sed_cmds; } status = sed_compile_string(sed_cfg->sed_cmds, expr); if (status != APR_SUCCESS) { sed_destroy_commands(sed_cfg->sed_cmds); sed_cfg->sed_cmds = NULL; } return status; } /* sed eval cleanup function */ static apr_status_t sed_eval_cleanup(void *data) { sed_eval_t *eval = (sed_eval_t *) data; sed_destroy_eval(eval); return APR_SUCCESS; } /* Initialize sed filter context. If successful then context is set in f->ctx */ static apr_status_t init_context(ap_filter_t *f, sed_expr_config *sed_cfg, int usetpool) { apr_status_t status; sed_filter_ctxt* ctx; request_rec *r = f->r; /* Create the context. Call sed_init_eval. libsed will generated * output by calling sed_write_output and generates any error by * invoking log_sed_errf. */ ctx = apr_pcalloc(r->pool, sizeof(sed_filter_ctxt)); ctx->r = r; ctx->bb = NULL; ctx->numbuckets = 0; ctx->f = f; status = sed_init_eval(&ctx->eval, sed_cfg->sed_cmds, log_sed_errf, r, &sed_write_output, r->pool); if (status != APR_SUCCESS) { return status; } apr_pool_cleanup_register(r->pool, &ctx->eval, sed_eval_cleanup, apr_pool_cleanup_null); ctx->bufsize = MODSED_OUTBUF_SIZE; if (usetpool) { apr_pool_create(&(ctx->tpool), r->pool); } else { ctx->tpool = r->pool; } alloc_outbuf(ctx); f->ctx = ctx; return APR_SUCCESS; } /* Entry function for Sed output filter */ static apr_status_t sed_response_filter(ap_filter_t *f, apr_bucket_brigade *bb) { apr_bucket *b; apr_status_t status; sed_config *cfg = ap_get_module_config(f->r->per_dir_config, &sed_module); sed_filter_ctxt *ctx = f->ctx; sed_expr_config *sed_cfg = &cfg->output; if ((sed_cfg == NULL) || (sed_cfg->sed_cmds == NULL)) { /* No sed expressions */ ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } if (ctx == NULL) { if (APR_BUCKET_IS_EOS(APR_BRIGADE_FIRST(bb))) { /* no need to run sed filter for Head requests */ ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } status = init_context(f, sed_cfg, 1); if (status != APR_SUCCESS) return status; ctx = f->ctx; apr_table_unset(f->r->headers_out, "Content-Length"); } ctx->bb = apr_brigade_create(f->r->pool, f->c->bucket_alloc); /* Here is the main logic. Iterate through all the buckets, read the * content of the bucket, call sed_eval_buffer on the data. * sed_eval_buffer will read the data line by line, run filters on each * line. sed_eval_buffer will generates the output by calling * sed_write_output which will add the output to ctx->bb. At the end of * the loop, ctx->bb is passed to the next filter in chain. At the end of * the data, if new line is not found then sed_eval_buffer will store the * data in its own buffer. * * Once eos bucket is found then sed_finalize_eval will flush the rest of * the data. If there is no new line in last line of data, new line is * appended (that is a solaris sed behavior). libsed's internal memory for * evaluation is allocated on request's pool so it will be cleared once * request is over. * * If flush bucket is found then append the flush bucket to ctx->bb * and pass it to next filter. There may be some data which will still be * in sed's internal buffer which can't be flushed until new line * character is arrived. */ for (b = APR_BRIGADE_FIRST(bb); b != APR_BRIGADE_SENTINEL(bb);) { const char *buf = NULL; apr_size_t bytes = 0; if (APR_BUCKET_IS_EOS(b)) { apr_bucket *b1 = APR_BUCKET_NEXT(b); /* Now clean up the internal sed buffer */ sed_finalize_eval(&ctx->eval, ctx); status = flush_output_buffer(ctx); if (status != APR_SUCCESS) { clear_ctxpool(ctx); return status; } APR_BUCKET_REMOVE(b); /* Insert the eos bucket to ctx->bb brigade */ APR_BRIGADE_INSERT_TAIL(ctx->bb, b); b = b1; } else if (APR_BUCKET_IS_FLUSH(b)) { apr_bucket *b1 = APR_BUCKET_NEXT(b); APR_BUCKET_REMOVE(b); status = flush_output_buffer(ctx); if (status != APR_SUCCESS) { clear_ctxpool(ctx); return status; } APR_BRIGADE_INSERT_TAIL(ctx->bb, b); b = b1; } else if (APR_BUCKET_IS_METADATA(b)) { b = APR_BUCKET_NEXT(b); } else if (apr_bucket_read(b, &buf, &bytes, APR_BLOCK_READ) == APR_SUCCESS) { apr_bucket *b1 = APR_BUCKET_NEXT(b); status = sed_eval_buffer(&ctx->eval, buf, bytes, ctx); if (status != APR_SUCCESS) { clear_ctxpool(ctx); return status; } APR_BUCKET_REMOVE(b); apr_bucket_delete(b); b = b1; } else { apr_bucket *b1 = APR_BUCKET_NEXT(b); APR_BUCKET_REMOVE(b); b = b1; } } apr_brigade_cleanup(bb); status = flush_output_buffer(ctx); if (status != APR_SUCCESS) { clear_ctxpool(ctx); return status; } if (!APR_BRIGADE_EMPTY(ctx->bb)) { status = ap_pass_brigade(f->next, ctx->bb); apr_brigade_cleanup(ctx->bb); } clear_ctxpool(ctx); return status; } /* Entry function for Sed input filter */ static apr_status_t sed_request_filter(ap_filter_t *f, apr_bucket_brigade *bb, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { sed_config *cfg = ap_get_module_config(f->r->per_dir_config, &sed_module); sed_filter_ctxt *ctx = f->ctx; apr_status_t status; apr_bucket_brigade *bbinp; sed_expr_config *sed_cfg = &cfg->input; if (mode != AP_MODE_READBYTES) { return ap_get_brigade(f->next, bb, mode, block, readbytes); } if ((sed_cfg == NULL) || (sed_cfg->sed_cmds == NULL)) { /* No sed expression */ return ap_get_brigade(f->next, bb, mode, block, readbytes); } if (!ctx) { if (!ap_is_initial_req(f->r)) { ap_remove_input_filter(f); /* XXX : Should we filter the sub requests too */ return ap_get_brigade(f->next, bb, mode, block, readbytes); } status = init_context(f, sed_cfg, 0); if (status != APR_SUCCESS) return status; ctx = f->ctx; ctx->bb = apr_brigade_create(f->r->pool, f->c->bucket_alloc); ctx->bbinp = apr_brigade_create(f->r->pool, f->c->bucket_alloc); } bbinp = ctx->bbinp; /* Here is the logic : * Read the readbytes data from next level fiter into bbinp. Loop through * the buckets in bbinp and read the data from buckets and invoke * sed_eval_buffer on the data. libsed will generate its output using * sed_write_output which will add data in ctx->bb. Do it until it have * atleast one bucket in ctx->bb. At the end of data eos bucket * should be there. * * Once eos bucket is seen, then invoke sed_finalize_eval to clear the * output. If the last byte of data is not a new line character then sed * will add a new line to the data that is default sed behaviour. Note * that using this filter with POST data, caller may not expect this * behaviour. * * If next level fiter generate the flush bucket, we can't do much about * it. If we want to return the flush bucket in brigade bb (to the caller) * the question is where to add it? */ while (APR_BRIGADE_EMPTY(ctx->bb)) { apr_bucket *b; /* read the bytes from next level filter */ apr_brigade_cleanup(bbinp); status = ap_get_brigade(f->next, bbinp, mode, block, readbytes); if (status != APR_SUCCESS) { return status; } for (b = APR_BRIGADE_FIRST(bbinp); b != APR_BRIGADE_SENTINEL(bbinp); b = APR_BUCKET_NEXT(b)) { const char *buf = NULL; apr_size_t bytes; if (APR_BUCKET_IS_EOS(b)) { /* eos bucket. Clear the internal sed buffers */ sed_finalize_eval(&ctx->eval, ctx); flush_output_buffer(ctx); APR_BUCKET_REMOVE(b); APR_BRIGADE_INSERT_TAIL(ctx->bb, b); break; } else if (APR_BUCKET_IS_FLUSH(b)) { /* What should we do with flush bucket */ continue; } if (apr_bucket_read(b, &buf, &bytes, APR_BLOCK_READ) == APR_SUCCESS) { status = sed_eval_buffer(&ctx->eval, buf, bytes, ctx); if (status != APR_SUCCESS) return status; flush_output_buffer(ctx); } } } if (!APR_BRIGADE_EMPTY(ctx->bb)) { apr_bucket *b = NULL; if (apr_brigade_partition(ctx->bb, readbytes, &b) == APR_INCOMPLETE) { APR_BRIGADE_CONCAT(bb, ctx->bb); } else { APR_BRIGADE_CONCAT(bb, ctx->bb); apr_brigade_split_ex(bb, b, ctx->bb); } } return APR_SUCCESS; } static const char *sed_add_expr(cmd_parms *cmd, void *cfg, const char *arg) { int offset = (int) (long) cmd->info; sed_expr_config *sed_cfg = (sed_expr_config *) (((char *) cfg) + offset); if (compile_sed_expr(sed_cfg, cmd, arg) != APR_SUCCESS) { return apr_psprintf(cmd->temp_pool, "Failed to compile sed expression. %s", sed_cfg->last_error); } return NULL; } static void *create_sed_dir_config(apr_pool_t *p, char *s) { sed_config *cfg = apr_pcalloc(p, sizeof(sed_config)); return cfg; } static const command_rec sed_filter_cmds[] = { AP_INIT_TAKE1("OutputSed", sed_add_expr, (void *) APR_OFFSETOF(sed_config, output), ACCESS_CONF, "Sed regular expression for Response"), AP_INIT_TAKE1("InputSed", sed_add_expr, (void *) APR_OFFSETOF(sed_config, input), ACCESS_CONF, "Sed regular expression for Request"), {NULL} }; static void register_hooks(apr_pool_t *p) { ap_register_output_filter(sed_filter_name, sed_response_filter, NULL, AP_FTYPE_RESOURCE); ap_register_input_filter(sed_filter_name, sed_request_filter, NULL, AP_FTYPE_RESOURCE); } AP_DECLARE_MODULE(sed) = { STANDARD20_MODULE_STUFF, create_sed_dir_config, /* dir config creater */ NULL, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ sed_filter_cmds, /* command table */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/filters/NWGNUmod_request0000644000000000000500000001015311540546347017456 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = mod_request # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Request Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Request Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/mod_request.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_request.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ request_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/filters/mod_include.h0000644000000000000500000000762011637105701017015 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_include.h * @brief Server Side Include Filter Extension Module for Apache * * @defgroup MOD_INCLUDE mod_include * @ingroup APACHE_MODS * @{ */ #ifndef _MOD_INCLUDE_H #define _MOD_INCLUDE_H 1 #include "apr_pools.h" #include "apr_optional.h" /* * Constants used for ap_ssi_get_tag_and_value's decode parameter */ #define SSI_VALUE_DECODED 1 #define SSI_VALUE_RAW 0 /* * Constants used for ap_ssi_parse_string's leave_name parameter */ #define SSI_EXPAND_LEAVE_NAME 1 #define SSI_EXPAND_DROP_NAME 0 /* * This macro creates a bucket which contains an error message and appends it * to the current pass brigade */ #define SSI_CREATE_ERROR_BUCKET(ctx, f, bb) APR_BRIGADE_INSERT_TAIL((bb), \ apr_bucket_pool_create(apr_pstrdup((ctx)->pool, (ctx)->error_str), \ strlen((ctx)->error_str), (ctx)->pool, \ (f)->c->bucket_alloc)) /* * These constants are used to set or clear flag bits. */ #define SSI_FLAG_PRINTING (1<<0) /* Printing conditional lines. */ #define SSI_FLAG_COND_TRUE (1<<1) /* Conditional eval'd to true. */ #define SSI_FLAG_SIZE_IN_BYTES (1<<2) /* Sizes displayed in bytes. */ #define SSI_FLAG_NO_EXEC (1<<3) /* No Exec in current context. */ #define SSI_FLAG_SIZE_ABBREV (~(SSI_FLAG_SIZE_IN_BYTES)) #define SSI_FLAG_CLEAR_PRINT_COND (~((SSI_FLAG_PRINTING) | \ (SSI_FLAG_COND_TRUE))) #define SSI_FLAG_CLEAR_PRINTING (~(SSI_FLAG_PRINTING)) /* * The public SSI context structure */ typedef struct { /* permanent pool, use this for creating bucket data */ apr_pool_t *pool; /* temp pool; will be cleared after the execution of every directive */ apr_pool_t *dpool; /* See the SSI_FLAG_XXXXX definitions. */ int flags; /* nesting of *invisible* ifs */ int if_nesting_level; /* if true, the current buffer will be passed down the filter chain before * continuing with next input bucket and the variable will be reset to * false. */ int flush_now; /* argument counter (of the current directive) */ unsigned argc; /* currently configured error string */ const char *error_str; /* currently configured time format */ const char *time_str; /* the current request */ request_rec *r; /* pointer to internal (non-public) data, don't touch */ struct ssi_internal_ctx *intern; } include_ctx_t; typedef apr_status_t (include_handler_fn_t)(include_ctx_t *, ap_filter_t *, apr_bucket_brigade *); APR_DECLARE_OPTIONAL_FN(void, ap_ssi_get_tag_and_value, (include_ctx_t *ctx, char **tag, char **tag_val, int dodecode)); APR_DECLARE_OPTIONAL_FN(char*, ap_ssi_parse_string, (include_ctx_t *ctx, const char *in, char *out, apr_size_t length, int leave_name)); APR_DECLARE_OPTIONAL_FN(void, ap_register_include_handler, (char *tag, include_handler_fn_t *func)); #endif /* MOD_INCLUDE */ /** @} */ httpd-2.4.41/modules/filters/mod_reqtimeout.mak0000644000000000000500000002416512701473373020122 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_reqtimeout.dsp !IF "$(CFG)" == "" CFG=mod_reqtimeout - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_reqtimeout - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_reqtimeout - Win32 Release" && "$(CFG)" != "mod_reqtimeout - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_reqtimeout.mak" CFG="mod_reqtimeout - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_reqtimeout - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_reqtimeout - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_reqtimeout - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_reqtimeout.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_reqtimeout.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_reqtimeout.obj" -@erase "$(INTDIR)\mod_reqtimeout.res" -@erase "$(INTDIR)\mod_reqtimeout_src.idb" -@erase "$(INTDIR)\mod_reqtimeout_src.pdb" -@erase "$(OUTDIR)\mod_reqtimeout.exp" -@erase "$(OUTDIR)\mod_reqtimeout.lib" -@erase "$(OUTDIR)\mod_reqtimeout.pdb" -@erase "$(OUTDIR)\mod_reqtimeout.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_RL_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_reqtimeout_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_reqtimeout.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_reqtimeout.so" /d LONG_NAME="reqtimeout_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_reqtimeout.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_reqtimeout.pdb" /debug /out:"$(OUTDIR)\mod_reqtimeout.so" /implib:"$(OUTDIR)\mod_reqtimeout.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_reqtimeout.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_reqtimeout.obj" \ "$(INTDIR)\mod_reqtimeout.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_reqtimeout.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_reqtimeout.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_reqtimeout.so" if exist .\Release\mod_reqtimeout.so.manifest mt.exe -manifest .\Release\mod_reqtimeout.so.manifest -outputresource:.\Release\mod_reqtimeout.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_reqtimeout - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_reqtimeout.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_reqtimeout.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_reqtimeout.obj" -@erase "$(INTDIR)\mod_reqtimeout.res" -@erase "$(INTDIR)\mod_reqtimeout_src.idb" -@erase "$(INTDIR)\mod_reqtimeout_src.pdb" -@erase "$(OUTDIR)\mod_reqtimeout.exp" -@erase "$(OUTDIR)\mod_reqtimeout.lib" -@erase "$(OUTDIR)\mod_reqtimeout.pdb" -@erase "$(OUTDIR)\mod_reqtimeout.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_RL_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_reqtimeout_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_reqtimeout.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_reqtimeout.so" /d LONG_NAME="reqtimeout_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_reqtimeout.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_reqtimeout.pdb" /debug /out:"$(OUTDIR)\mod_reqtimeout.so" /implib:"$(OUTDIR)\mod_reqtimeout.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_reqtimeout.so LINK32_OBJS= \ "$(INTDIR)\mod_reqtimeout.obj" \ "$(INTDIR)\mod_reqtimeout.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_reqtimeout.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_reqtimeout.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_reqtimeout.so" if exist .\Debug\mod_reqtimeout.so.manifest mt.exe -manifest .\Debug\mod_reqtimeout.so.manifest -outputresource:.\Debug\mod_reqtimeout.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_reqtimeout.dep") !INCLUDE "mod_reqtimeout.dep" !ELSE !MESSAGE Warning: cannot find "mod_reqtimeout.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_reqtimeout - Win32 Release" || "$(CFG)" == "mod_reqtimeout - Win32 Debug" !IF "$(CFG)" == "mod_reqtimeout - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_reqtimeout - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_reqtimeout - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_reqtimeout - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_reqtimeout - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_reqtimeout - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_reqtimeout - Win32 Release" "$(INTDIR)\mod_reqtimeout.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_reqtimeout.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_reqtimeout.so" /d LONG_NAME="reqtimeout_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_reqtimeout - Win32 Debug" "$(INTDIR)\mod_reqtimeout.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_reqtimeout.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_reqtimeout.so" /d LONG_NAME="reqtimeout_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_reqtimeout.c "$(INTDIR)\mod_reqtimeout.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/filters/mod_include.exp0000644000000000000500000000001710150161574017352 0ustar rootsrcinclude_module httpd-2.4.41/modules/filters/mod_proxy_html.dsp0000644000000000000500000001173512234633661020145 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_proxy_html" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_proxy_html - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_proxy_html.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_html.mak" CFG="mod_proxy_html - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_html - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_html - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_proxy_html - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/libxml2/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_proxy_html_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /d "NDEBUG" /i "../../include" /i "../../srclib/apr/include" /I "../../srclib/apr-util/include" /i "../../srclib/libxml2/include" /d BIN_NAME="mod_proxy_html.so" /d LONG_NAME="proxy_html_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_proxy_html.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_html.so # ADD LINK32 kernel32.lib libxml2.lib /nologo /subsystem:windows /dll /incremental:no /libpath:"../../srclib/libxml2/win32/bin.msvc" /debug /out:".\Release\mod_proxy_html.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_html.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_proxy_html.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_proxy_html - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/libxml2/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_proxy_html_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /d "_DEBUG" /i "../../include" /i "../../srclib/apr/include" /I "../../srclib/apr-util/include" /i "../../srclib/libxml2/include" /d BIN_NAME="mod_proxy_html.so" /d LONG_NAME="proxy_html_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_html.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_html.so # ADD LINK32 kernel32.lib libxml2.lib /nologo /subsystem:windows /dll /incremental:no /libpath:"../../srclib/libxml2/win32/bin.msvc" /debug /out:".\Debug\mod_proxy_html.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_html.so # Begin Special Build Tool TargetPath=.\Debug\mod_proxy_html.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_proxy_html - Win32 Release" # Name "mod_proxy_html - Win32 Debug" # Begin Group "Header Files" # PROP Default_Filter "h" # Begin Source File SOURCE=.\mod_xml2enc.h # End Source File # End Group # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_proxy_html.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Group # End Target # End Project httpd-2.4.41/modules/filters/mod_buffer.dep0000644000000000000500000000327012674411515017166 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_buffer.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_buffer.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/filters/mod_ratelimit.mak0000644000000000000500000002403512701473373017712 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_ratelimit.dsp !IF "$(CFG)" == "" CFG=mod_ratelimit - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_ratelimit - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_ratelimit - Win32 Release" && "$(CFG)" != "mod_ratelimit - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_ratelimit.mak" CFG="mod_ratelimit - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_ratelimit - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_ratelimit - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_ratelimit - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_ratelimit.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_ratelimit.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_ratelimit.obj" -@erase "$(INTDIR)\mod_ratelimit.res" -@erase "$(INTDIR)\mod_ratelimit_src.idb" -@erase "$(INTDIR)\mod_ratelimit_src.pdb" -@erase "$(OUTDIR)\mod_ratelimit.exp" -@erase "$(OUTDIR)\mod_ratelimit.lib" -@erase "$(OUTDIR)\mod_ratelimit.pdb" -@erase "$(OUTDIR)\mod_ratelimit.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_RL_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_ratelimit_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_ratelimit.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_ratelimit.so" /d LONG_NAME="ratelimit_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_ratelimit.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_ratelimit.pdb" /debug /out:"$(OUTDIR)\mod_ratelimit.so" /implib:"$(OUTDIR)\mod_ratelimit.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_ratelimit.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_ratelimit.obj" \ "$(INTDIR)\mod_ratelimit.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_ratelimit.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_ratelimit.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_ratelimit.so" if exist .\Release\mod_ratelimit.so.manifest mt.exe -manifest .\Release\mod_ratelimit.so.manifest -outputresource:.\Release\mod_ratelimit.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_ratelimit - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_ratelimit.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_ratelimit.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_ratelimit.obj" -@erase "$(INTDIR)\mod_ratelimit.res" -@erase "$(INTDIR)\mod_ratelimit_src.idb" -@erase "$(INTDIR)\mod_ratelimit_src.pdb" -@erase "$(OUTDIR)\mod_ratelimit.exp" -@erase "$(OUTDIR)\mod_ratelimit.lib" -@erase "$(OUTDIR)\mod_ratelimit.pdb" -@erase "$(OUTDIR)\mod_ratelimit.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_RL_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_ratelimit_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_ratelimit.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_ratelimit.so" /d LONG_NAME="ratelimit_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_ratelimit.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_ratelimit.pdb" /debug /out:"$(OUTDIR)\mod_ratelimit.so" /implib:"$(OUTDIR)\mod_ratelimit.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_ratelimit.so LINK32_OBJS= \ "$(INTDIR)\mod_ratelimit.obj" \ "$(INTDIR)\mod_ratelimit.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_ratelimit.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_ratelimit.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_ratelimit.so" if exist .\Debug\mod_ratelimit.so.manifest mt.exe -manifest .\Debug\mod_ratelimit.so.manifest -outputresource:.\Debug\mod_ratelimit.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_ratelimit.dep") !INCLUDE "mod_ratelimit.dep" !ELSE !MESSAGE Warning: cannot find "mod_ratelimit.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_ratelimit - Win32 Release" || "$(CFG)" == "mod_ratelimit - Win32 Debug" !IF "$(CFG)" == "mod_ratelimit - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_ratelimit - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_ratelimit - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_ratelimit - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_ratelimit - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_ratelimit - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_ratelimit - Win32 Release" "$(INTDIR)\mod_ratelimit.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_ratelimit.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_ratelimit.so" /d LONG_NAME="ratelimit_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_ratelimit - Win32 Debug" "$(INTDIR)\mod_ratelimit.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_ratelimit.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_ratelimit.so" /d LONG_NAME="ratelimit_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_ratelimit.c "$(INTDIR)\mod_ratelimit.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/filters/mod_reflector.mak0000644000000000000500000002403512701473373017705 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_reflector.dsp !IF "$(CFG)" == "" CFG=mod_reflector - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_reflector - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_reflector - Win32 Release" && "$(CFG)" != "mod_reflector - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_reflector.mak" CFG="mod_reflector - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_reflector - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_reflector - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_reflector - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_reflector.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_reflector.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_reflector.obj" -@erase "$(INTDIR)\mod_reflector.res" -@erase "$(INTDIR)\mod_reflector_src.idb" -@erase "$(INTDIR)\mod_reflector_src.pdb" -@erase "$(OUTDIR)\mod_reflector.exp" -@erase "$(OUTDIR)\mod_reflector.lib" -@erase "$(OUTDIR)\mod_reflector.pdb" -@erase "$(OUTDIR)\mod_reflector.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_RL_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_reflector_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_reflector.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_reflector.so" /d LONG_NAME="reflector_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_reflector.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_reflector.pdb" /debug /out:"$(OUTDIR)\mod_reflector.so" /implib:"$(OUTDIR)\mod_reflector.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_reflector.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_reflector.obj" \ "$(INTDIR)\mod_reflector.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_reflector.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_reflector.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_reflector.so" if exist .\Release\mod_reflector.so.manifest mt.exe -manifest .\Release\mod_reflector.so.manifest -outputresource:.\Release\mod_reflector.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_reflector - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_reflector.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_reflector.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_reflector.obj" -@erase "$(INTDIR)\mod_reflector.res" -@erase "$(INTDIR)\mod_reflector_src.idb" -@erase "$(INTDIR)\mod_reflector_src.pdb" -@erase "$(OUTDIR)\mod_reflector.exp" -@erase "$(OUTDIR)\mod_reflector.lib" -@erase "$(OUTDIR)\mod_reflector.pdb" -@erase "$(OUTDIR)\mod_reflector.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_RL_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_reflector_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_reflector.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_reflector.so" /d LONG_NAME="reflector_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_reflector.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_reflector.pdb" /debug /out:"$(OUTDIR)\mod_reflector.so" /implib:"$(OUTDIR)\mod_reflector.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_reflector.so LINK32_OBJS= \ "$(INTDIR)\mod_reflector.obj" \ "$(INTDIR)\mod_reflector.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_reflector.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_reflector.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_reflector.so" if exist .\Debug\mod_reflector.so.manifest mt.exe -manifest .\Debug\mod_reflector.so.manifest -outputresource:.\Debug\mod_reflector.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_reflector.dep") !INCLUDE "mod_reflector.dep" !ELSE !MESSAGE Warning: cannot find "mod_reflector.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_reflector - Win32 Release" || "$(CFG)" == "mod_reflector - Win32 Debug" !IF "$(CFG)" == "mod_reflector - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_reflector - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_reflector - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_reflector - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_reflector - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_reflector - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_reflector - Win32 Release" "$(INTDIR)\mod_reflector.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_reflector.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_reflector.so" /d LONG_NAME="reflector_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_reflector - Win32 Debug" "$(INTDIR)\mod_reflector.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_reflector.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_reflector.so" /d LONG_NAME="reflector_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_reflector.c "$(INTDIR)\mod_reflector.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/filters/mod_xml2enc.dep0000644000000000000500000000365612674411515017275 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_xml2enc.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_xml2enc.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_xml2enc.h"\ httpd-2.4.41/modules/filters/mod_reqtimeout.dep0000644000000000000500000000410412674411515020110 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_reqtimeout.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_reqtimeout.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/filters/sed.h0000644000000000000500000000264611637145452015320 0ustar rootsrc/* * Copyright (c) 2005, 2008 Sun Microsystems, Inc. All Rights Reserved. * Use is subject to license terms. * * Copyright (c) 1984 AT&T * All Rights Reserved * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * http://www.apache.org/licenses/LICENSE-2.0. * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express * or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef _SED_H #define _SED_H #include #include #define CEND 16 #define CLNUM 14 #define RESIZE 10000 #define LBSIZE 1000 #define ACOM 01 #define BCOM 020 #define CCOM 02 #define CDCOM 025 #define CNCOM 022 #define COCOM 017 #define CPCOM 023 #define DCOM 03 #define ECOM 015 #define EQCOM 013 #define FCOM 016 #define GCOM 027 #define CGCOM 030 #define HCOM 031 #define CHCOM 032 #define ICOM 04 #define LCOM 05 #define NCOM 012 #define PCOM 010 #define QCOM 011 #define RCOM 06 #define SCOM 07 #define TCOM 021 #define WCOM 014 #define CWCOM 024 #define YCOM 026 #define XCOM 033 #endif /* _SED_H */ httpd-2.4.41/modules/filters/mod_ratelimit.dsp0000644000000000000500000001110111162707322017710 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_ratelimit" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_ratelimit - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_ratelimit.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_ratelimit.mak" CFG="mod_ratelimit - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_ratelimit - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_ratelimit - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_ratelimit - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_RL_DECLARE_EXPORT" /Fd"Release\mod_ratelimit_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_ratelimit.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_ratelimit.so" /d LONG_NAME="ratelimit_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_ratelimit.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ratelimit.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_ratelimit.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ratelimit.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_ratelimit.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_ratelimit - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_RL_DECLARE_EXPORT" /Fd"Debug\mod_ratelimit_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_ratelimit.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_ratelimit.so" /d LONG_NAME="ratelimit_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_ratelimit.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ratelimit.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_ratelimit.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ratelimit.so # Begin Special Build Tool TargetPath=.\Debug\mod_ratelimit.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_ratelimit - Win32 Release" # Name "mod_ratelimit - Win32 Debug" # Begin Source File SOURCE=.\mod_ratelimit.c # End Source File # Begin Source File SOURCE=.\mod_ratelimit.h # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/filters/NWGNUproxyhtml0000644000000000000500000001063111652776275017207 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(LIBXML2SDK)/include \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ -L$(LIBXML2SDK)/lib -llibxml2.lib \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxyhtml # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy HTML Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Proxy HTTP Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_proxy_html.o \ $(OBJDIR)/libprews.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ proxy_html_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/filters/mod_request.mak0000644000000000000500000002347112701473373017413 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_request.dsp !IF "$(CFG)" == "" CFG=mod_request - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_request - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_request - Win32 Release" && "$(CFG)" != "mod_request - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_request.mak" CFG="mod_request - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_request - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_request - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_request - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_request.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_request.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_request.obj" -@erase "$(INTDIR)\mod_request.res" -@erase "$(INTDIR)\mod_request_src.idb" -@erase "$(INTDIR)\mod_request_src.pdb" -@erase "$(OUTDIR)\mod_request.exp" -@erase "$(OUTDIR)\mod_request.lib" -@erase "$(OUTDIR)\mod_request.pdb" -@erase "$(OUTDIR)\mod_request.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_request_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_request.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_request.so" /d LONG_NAME="request_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_request.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_request.pdb" /debug /out:"$(OUTDIR)\mod_request.so" /implib:"$(OUTDIR)\mod_request.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_request.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_request.obj" \ "$(INTDIR)\mod_request.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_request.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_request.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_request.so" if exist .\Release\mod_request.so.manifest mt.exe -manifest .\Release\mod_request.so.manifest -outputresource:.\Release\mod_request.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_request - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_request.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_request.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_request.obj" -@erase "$(INTDIR)\mod_request.res" -@erase "$(INTDIR)\mod_request_src.idb" -@erase "$(INTDIR)\mod_request_src.pdb" -@erase "$(OUTDIR)\mod_request.exp" -@erase "$(OUTDIR)\mod_request.lib" -@erase "$(OUTDIR)\mod_request.pdb" -@erase "$(OUTDIR)\mod_request.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_request_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_request.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_request.so" /d LONG_NAME="request_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_request.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_request.pdb" /debug /out:"$(OUTDIR)\mod_request.so" /implib:"$(OUTDIR)\mod_request.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_request.so LINK32_OBJS= \ "$(INTDIR)\mod_request.obj" \ "$(INTDIR)\mod_request.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_request.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_request.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_request.so" if exist .\Debug\mod_request.so.manifest mt.exe -manifest .\Debug\mod_request.so.manifest -outputresource:.\Debug\mod_request.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_request.dep") !INCLUDE "mod_request.dep" !ELSE !MESSAGE Warning: cannot find "mod_request.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_request - Win32 Release" || "$(CFG)" == "mod_request - Win32 Debug" !IF "$(CFG)" == "mod_request - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_request - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_request - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_request - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_request - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_request - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_request - Win32 Release" "$(INTDIR)\mod_request.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_request.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_request.so" /d LONG_NAME="request_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_request - Win32 Debug" "$(INTDIR)\mod_request.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_request.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_request.so" /d LONG_NAME="request_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_request.c "$(INTDIR)\mod_request.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/filters/NWGNUmakefile0000644000000000000500000001122411660331006016667 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/extfiltr.nlm \ $(OBJDIR)/charsetl.nlm \ $(OBJDIR)/mod_data.nlm \ $(OBJDIR)/mod_filter.nlm \ $(OBJDIR)/mod_request.nlm \ $(OBJDIR)/substitute.nlm \ $(OBJDIR)/modsed.nlm \ $(OBJDIR)/modbuffer.nlm \ $(OBJDIR)/ratelimit.nlm \ $(OBJDIR)/reqtimeout.nlm \ $(OBJDIR)/reflector.nlm \ $(EOLIST) # If the zlib library source exists then build the mod_deflate module ifneq "$(ZLIBSDK)" "" ifeq "$(wildcard $(ZLIBSDK))" "$(ZLIBSDK)" TARGET_nlm += $(OBJDIR)/deflate.nlm \ $(EOLIST) endif endif # If the libxml2 library source exists then build the mod_proxy_html module ifneq "$(LIBXML2SDK)" "" ifeq "$(wildcard $(LIBXML2SDK))" "$(LIBXML2SDK)" TARGET_nlm += \ $(OBJDIR)/proxyhtml.nlm \ $(OBJDIR)/xml2enc.nlm \ $(EOLIST) endif endif # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/filters/mod_brotli.c0000644000000000000500000004754713357416563016710 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_core.h" #include "http_log.h" #include "apr_strings.h" #include module AP_MODULE_DECLARE_DATA brotli_module; typedef enum { ETAG_MODE_ADDSUFFIX = 0, ETAG_MODE_NOCHANGE = 1, ETAG_MODE_REMOVE = 2 } etag_mode_e; typedef struct brotli_server_config_t { int quality; int lgwin; int lgblock; etag_mode_e etag_mode; const char *note_ratio_name; const char *note_input_name; const char *note_output_name; } brotli_server_config_t; static void *create_server_config(apr_pool_t *p, server_rec *s) { brotli_server_config_t *conf = apr_pcalloc(p, sizeof(*conf)); /* These default values allow mod_brotli to behave similarly to * mod_deflate in terms of compression speed and memory usage. * * The idea is that since Brotli (generally) gives better compression * ratio than Deflate, simply enabling mod_brotli on the server * will reduce the amount of transferred data while keeping everything * else unchanged. See https://quixdb.github.io/squash-benchmark/ */ conf->quality = 5; conf->lgwin = 18; /* Zero is a special value for BROTLI_PARAM_LGBLOCK that allows * Brotli to automatically select the optimal input block size based * on other encoder parameters. See enc/quality.h: ComputeLgBlock(). */ conf->lgblock = 0; conf->etag_mode = ETAG_MODE_ADDSUFFIX; return conf; } static const char *set_filter_note(cmd_parms *cmd, void *dummy, const char *arg1, const char *arg2) { brotli_server_config_t *conf = ap_get_module_config(cmd->server->module_config, &brotli_module); if (!arg2) { conf->note_ratio_name = arg1; return NULL; } if (ap_cstr_casecmp(arg1, "Ratio") == 0) { conf->note_ratio_name = arg2; } else if (ap_cstr_casecmp(arg1, "Input") == 0) { conf->note_input_name = arg2; } else if (ap_cstr_casecmp(arg1, "Output") == 0) { conf->note_output_name = arg2; } else { return apr_psprintf(cmd->pool, "Unknown BrotliFilterNote type '%s'", arg1); } return NULL; } static const char *set_compression_quality(cmd_parms *cmd, void *dummy, const char *arg) { brotli_server_config_t *conf = ap_get_module_config(cmd->server->module_config, &brotli_module); int val = atoi(arg); if (val < 0 || val > 11) { return "BrotliCompressionQuality must be between 0 and 11"; } conf->quality = val; return NULL; } static const char *set_compression_lgwin(cmd_parms *cmd, void *dummy, const char *arg) { brotli_server_config_t *conf = ap_get_module_config(cmd->server->module_config, &brotli_module); int val = atoi(arg); if (val < 10 || val > 24) { return "BrotliCompressionWindow must be between 10 and 24"; } conf->lgwin = val; return NULL; } static const char *set_compression_lgblock(cmd_parms *cmd, void *dummy, const char *arg) { brotli_server_config_t *conf = ap_get_module_config(cmd->server->module_config, &brotli_module); int val = atoi(arg); if (val < 16 || val > 24) { return "BrotliCompressionMaxInputBlock must be between 16 and 24"; } conf->lgblock = val; return NULL; } static const char *set_etag_mode(cmd_parms *cmd, void *dummy, const char *arg) { brotli_server_config_t *conf = ap_get_module_config(cmd->server->module_config, &brotli_module); if (ap_cstr_casecmp(arg, "AddSuffix") == 0) { conf->etag_mode = ETAG_MODE_ADDSUFFIX; } else if (ap_cstr_casecmp(arg, "NoChange") == 0) { conf->etag_mode = ETAG_MODE_NOCHANGE; } else if (ap_cstr_casecmp(arg, "Remove") == 0) { conf->etag_mode = ETAG_MODE_REMOVE; } else { return "BrotliAlterETag accepts only 'AddSuffix', 'NoChange' and 'Remove'"; } return NULL; } typedef struct brotli_ctx_t { BrotliEncoderState *state; apr_bucket_brigade *bb; apr_off_t total_in; apr_off_t total_out; } brotli_ctx_t; static void *alloc_func(void *opaque, size_t size) { return apr_bucket_alloc(size, opaque); } static void free_func(void *opaque, void *block) { if (block) { apr_bucket_free(block); } } static apr_status_t cleanup_ctx(void *data) { brotli_ctx_t *ctx = data; BrotliEncoderDestroyInstance(ctx->state); ctx->state = NULL; return APR_SUCCESS; } static brotli_ctx_t *create_ctx(int quality, int lgwin, int lgblock, apr_bucket_alloc_t *alloc, apr_pool_t *pool) { brotli_ctx_t *ctx = apr_pcalloc(pool, sizeof(*ctx)); ctx->state = BrotliEncoderCreateInstance(alloc_func, free_func, alloc); BrotliEncoderSetParameter(ctx->state, BROTLI_PARAM_QUALITY, quality); BrotliEncoderSetParameter(ctx->state, BROTLI_PARAM_LGWIN, lgwin); BrotliEncoderSetParameter(ctx->state, BROTLI_PARAM_LGBLOCK, lgblock); apr_pool_cleanup_register(pool, ctx, cleanup_ctx, apr_pool_cleanup_null); ctx->bb = apr_brigade_create(pool, alloc); ctx->total_in = 0; ctx->total_out = 0; return ctx; } static apr_status_t process_chunk(brotli_ctx_t *ctx, const void *data, apr_size_t len, ap_filter_t *f) { const apr_byte_t *next_in = data; apr_size_t avail_in = len; while (avail_in > 0) { apr_byte_t *next_out = NULL; apr_size_t avail_out = 0; if (!BrotliEncoderCompressStream(ctx->state, BROTLI_OPERATION_PROCESS, &avail_in, &next_in, &avail_out, &next_out, NULL)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, f->r, APLOGNO(03459) "Error while compressing data"); return APR_EGENERAL; } if (BrotliEncoderHasMoreOutput(ctx->state)) { apr_size_t output_len = 0; const apr_byte_t *output; apr_status_t rv; apr_bucket *b; /* Drain the accumulated output. Avoid copying the data by * wrapping a pointer to the internal output buffer and passing * it down to the next filter. The pointer is only valid until * the next call to BrotliEncoderCompressStream(), but we're okay * with that, since the brigade is cleaned up right after the * ap_pass_brigade() call. */ output = BrotliEncoderTakeOutput(ctx->state, &output_len); ctx->total_out += output_len; b = apr_bucket_transient_create((const char *)output, output_len, ctx->bb->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->bb, b); rv = ap_pass_brigade(f->next, ctx->bb); apr_brigade_cleanup(ctx->bb); if (rv != APR_SUCCESS) { return rv; } } } ctx->total_in += len; return APR_SUCCESS; } static apr_status_t flush(brotli_ctx_t *ctx, BrotliEncoderOperation op, ap_filter_t *f) { while (1) { const apr_byte_t *next_in = NULL; apr_size_t avail_in = 0; apr_byte_t *next_out = NULL; apr_size_t avail_out = 0; apr_size_t output_len; const apr_byte_t *output; apr_bucket *b; if (!BrotliEncoderCompressStream(ctx->state, op, &avail_in, &next_in, &avail_out, &next_out, NULL)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, f->r, APLOGNO(03460) "Error while compressing data"); return APR_EGENERAL; } if (!BrotliEncoderHasMoreOutput(ctx->state)) { break; } /* A flush can require several calls to BrotliEncoderCompressStream(), * so place the data on the heap (otherwise, the pointer will become * invalid after the next call to BrotliEncoderCompressStream()). */ output_len = 0; output = BrotliEncoderTakeOutput(ctx->state, &output_len); ctx->total_out += output_len; b = apr_bucket_heap_create((const char *)output, output_len, NULL, ctx->bb->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->bb, b); } return APR_SUCCESS; } static const char *get_content_encoding(request_rec *r) { const char *encoding; encoding = apr_table_get(r->headers_out, "Content-Encoding"); if (encoding) { const char *err_enc; err_enc = apr_table_get(r->err_headers_out, "Content-Encoding"); if (err_enc) { encoding = apr_pstrcat(r->pool, encoding, ",", err_enc, NULL); } } else { encoding = apr_table_get(r->err_headers_out, "Content-Encoding"); } if (r->content_encoding) { encoding = encoding ? apr_pstrcat(r->pool, encoding, ",", r->content_encoding, NULL) : r->content_encoding; } return encoding; } static apr_status_t compress_filter(ap_filter_t *f, apr_bucket_brigade *bb) { request_rec *r = f->r; brotli_ctx_t *ctx = f->ctx; apr_status_t rv; brotli_server_config_t *conf; if (APR_BRIGADE_EMPTY(bb)) { return APR_SUCCESS; } conf = ap_get_module_config(r->server->module_config, &brotli_module); if (!ctx) { const char *encoding; const char *token; const char *accepts; /* Only work on main request, not subrequests, that are not * a 204 response with no content, and are not tagged with the * no-brotli env variable, and are not a partial response to * a Range request. * * Note that responding to 304 is handled separately to set * the required headers (such as ETag) per RFC7232, 4.1. */ if (r->main || r->status == HTTP_NO_CONTENT || apr_table_get(r->subprocess_env, "no-brotli") || apr_table_get(r->headers_out, "Content-Range")) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* Let's see what our current Content-Encoding is. */ encoding = get_content_encoding(r); if (encoding) { const char *tmp = encoding; token = ap_get_token(r->pool, &tmp, 0); while (token && *token) { if (strcmp(token, "identity") != 0 && strcmp(token, "7bit") != 0 && strcmp(token, "8bit") != 0 && strcmp(token, "binary") != 0) { /* The data is already encoded, do nothing. */ ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } if (*tmp) { ++tmp; } token = (*tmp) ? ap_get_token(r->pool, &tmp, 0) : NULL; } } /* Even if we don't accept this request based on it not having * the Accept-Encoding, we need to note that we were looking * for this header and downstream proxies should be aware of * that. */ apr_table_mergen(r->headers_out, "Vary", "Accept-Encoding"); accepts = apr_table_get(r->headers_in, "Accept-Encoding"); if (!accepts) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* Do we have Accept-Encoding: br? */ token = ap_get_token(r->pool, &accepts, 0); while (token && token[0] && ap_cstr_casecmp(token, "br") != 0) { while (*accepts == ';') { ++accepts; ap_get_token(r->pool, &accepts, 1); } if (*accepts == ',') { ++accepts; } token = (*accepts) ? ap_get_token(r->pool, &accepts, 0) : NULL; } if (!token || token[0] == '\0') { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* If the entire Content-Encoding is "identity", we can replace it. */ if (!encoding || ap_cstr_casecmp(encoding, "identity") == 0) { apr_table_setn(r->headers_out, "Content-Encoding", "br"); } else { apr_table_mergen(r->headers_out, "Content-Encoding", "br"); } if (r->content_encoding) { r->content_encoding = apr_table_get(r->headers_out, "Content-Encoding"); } apr_table_unset(r->headers_out, "Content-Length"); apr_table_unset(r->headers_out, "Content-MD5"); /* https://bz.apache.org/bugzilla/show_bug.cgi?id=39727 * https://bz.apache.org/bugzilla/show_bug.cgi?id=45023 * * ETag must be unique among the possible representations, so a * change to content-encoding requires a corresponding change to the * ETag. We make this behavior configurable, and mimic mod_deflate's * DeflateAlterETag with BrotliAlterETag to keep the transition from * mod_deflate seamless. */ if (conf->etag_mode == ETAG_MODE_REMOVE) { apr_table_unset(r->headers_out, "ETag"); } else if (conf->etag_mode == ETAG_MODE_ADDSUFFIX) { const char *etag = apr_table_get(r->headers_out, "ETag"); if (etag) { apr_size_t len = strlen(etag); if (len > 2 && etag[len - 1] == '"') { etag = apr_pstrmemdup(r->pool, etag, len - 1); etag = apr_pstrcat(r->pool, etag, "-br\"", NULL); apr_table_setn(r->headers_out, "ETag", etag); } } } /* For 304 responses, we only need to send out the headers. */ if (r->status == HTTP_NOT_MODIFIED) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } ctx = create_ctx(conf->quality, conf->lgwin, conf->lgblock, f->c->bucket_alloc, r->pool); f->ctx = ctx; } while (!APR_BRIGADE_EMPTY(bb)) { apr_bucket *e = APR_BRIGADE_FIRST(bb); /* Optimization: If we are a HEAD request and bytes_sent is not zero * it means that we have passed the content-length filter once and * have more data to send. This means that the content-length filter * could not determine our content-length for the response to the * HEAD request anyway (the associated GET request would deliver the * body in chunked encoding) and we can stop compressing. */ if (r->header_only && r->bytes_sent) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } if (APR_BUCKET_IS_EOS(e)) { rv = flush(ctx, BROTLI_OPERATION_FINISH, f); if (rv != APR_SUCCESS) { return rv; } /* Leave notes for logging. */ if (conf->note_input_name) { apr_table_setn(r->notes, conf->note_input_name, apr_off_t_toa(r->pool, ctx->total_in)); } if (conf->note_output_name) { apr_table_setn(r->notes, conf->note_output_name, apr_off_t_toa(r->pool, ctx->total_out)); } if (conf->note_ratio_name) { if (ctx->total_in > 0) { int ratio = (int) (ctx->total_out * 100 / ctx->total_in); apr_table_setn(r->notes, conf->note_ratio_name, apr_itoa(r->pool, ratio)); } else { apr_table_setn(r->notes, conf->note_ratio_name, "-"); } } APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); rv = ap_pass_brigade(f->next, ctx->bb); apr_brigade_cleanup(ctx->bb); apr_pool_cleanup_run(r->pool, ctx, cleanup_ctx); return rv; } else if (APR_BUCKET_IS_FLUSH(e)) { rv = flush(ctx, BROTLI_OPERATION_FLUSH, f); if (rv != APR_SUCCESS) { return rv; } APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); rv = ap_pass_brigade(f->next, ctx->bb); apr_brigade_cleanup(ctx->bb); if (rv != APR_SUCCESS) { return rv; } } else if (APR_BUCKET_IS_METADATA(e)) { APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); } else { const char *data; apr_size_t len; rv = apr_bucket_read(e, &data, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS) { return rv; } rv = process_chunk(ctx, data, len, f); if (rv != APR_SUCCESS) { return rv; } apr_bucket_delete(e); } } return APR_SUCCESS; } static void register_hooks(apr_pool_t *p) { ap_register_output_filter("BROTLI_COMPRESS", compress_filter, NULL, AP_FTYPE_CONTENT_SET); } static const command_rec cmds[] = { AP_INIT_TAKE12("BrotliFilterNote", set_filter_note, NULL, RSRC_CONF, "Set a note to report on compression ratio"), AP_INIT_TAKE1("BrotliCompressionQuality", set_compression_quality, NULL, RSRC_CONF, "Compression quality between 0 and 11 (higher quality means " "slower compression)"), AP_INIT_TAKE1("BrotliCompressionWindow", set_compression_lgwin, NULL, RSRC_CONF, "Sliding window size between 10 and 24 (larger windows can " "improve compression, but require more memory)"), AP_INIT_TAKE1("BrotliCompressionMaxInputBlock", set_compression_lgblock, NULL, RSRC_CONF, "Maximum input block size between 16 and 24 (larger block " "sizes require more memory)"), AP_INIT_TAKE1("BrotliAlterETag", set_etag_mode, NULL, RSRC_CONF, "Set how mod_brotli should modify ETag response headers: " "'AddSuffix' (default), 'NoChange', 'Remove'"), {NULL} }; AP_DECLARE_MODULE(brotli) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ create_server_config, /* create per-server config structure */ NULL, /* merge per-server config structures */ cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/filters/mod_brotli.dsp0000644000000000000500000001133113100405645017213 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_brotli" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_brotli - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_brotli.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_brotli.mak" CFG="mod_brotli - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_brotli - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_brotli - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_brotli - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "HAVE_ZUTIL_H" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/brotli/include" /I "../../srclib/brotli/c/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_brotli_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_brotli.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_brotli.so" /d LONG_NAME="brotli_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_brotli.so" /libpath:"../../srclib/brotli" /base:@..\..\os\win32\BaseAddr.ref,mod_brotli.so # ADD LINK32 kernel32.lib brotlicommon.lib brotlienc.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_brotli.so" /libpath:"../../srclib/brotli" /base:@..\..\os\win32\BaseAddr.ref,mod_brotli.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_brotli.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_brotli - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/brotli/include" /I "../../srclib/brotli/c/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "HAVE_ZUTIL_H" /Fd"Debug\mod_brotli_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_brotli.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_brotli.so" /d LONG_NAME="brotli_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_brotli.so" /libpath:"../../srclib/brotli" /base:@..\..\os\win32\BaseAddr.ref,mod_brotli.so # ADD LINK32 kernel32.lib brotlicommon.lib brotlienc.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_brotli.so" /libpath:"../../srclib/brotli" /base:@..\..\os\win32\BaseAddr.ref,mod_brotli.so # Begin Special Build Tool TargetPath=.\Debug\mod_brotli.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_brotli - Win32 Release" # Name "mod_brotli - Win32 Debug" # Begin Source File SOURCE=.\mod_brotli.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/filters/mod_request.dep0000644000000000000500000000372412674411515017411 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_request.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_request.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_request.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/filters/mod_sed.dsp0000644000000000000500000001124212062614564016504 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_sed" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_sed - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_sed.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_sed.mak" CFG="mod_sed - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_sed - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_sed - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_sed - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_sed_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_sed.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_sed.so" /d LONG_NAME="sed_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_sed.so" /base:@..\..\os\win32\BaseAddr.ref,mod_sed.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_sed.so" /base:@..\..\os\win32\BaseAddr.ref,mod_sed.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_sed.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_sed - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_sed_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_sed.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_sed.so" /d LONG_NAME="sed_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_sed.so" /base:@..\..\os\win32\BaseAddr.ref,mod_sed.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_sed.so" /base:@..\..\os\win32\BaseAddr.ref,mod_sed.so # Begin Special Build Tool TargetPath=.\Debug\mod_sed.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_sed - Win32 Release" # Name "mod_sed - Win32 Debug" # Begin Source File SOURCE=.\libsed.h # End Source File # Begin Source File SOURCE=.\mod_sed.c # End Source File # Begin Source File SOURCE=.\regexp.c # End Source File # Begin Source File SOURCE=.\regexp.h # End Source File # Begin Source File SOURCE=.\sed.h # End Source File # Begin Source File SOURCE=.\sed0.c # End Source File # Begin Source File SOURCE=.\sed1.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/filters/NWGNUmodsed0000644000000000000500000001031711540546347016404 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = modsed # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) SED Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = modsed Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/modsed.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_sed.o \ $(OBJDIR)/regexp.o \ $(OBJDIR)/sed0.o \ $(OBJDIR)/sed1.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ sed_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/filters/NWGNUmod_data0000644000000000000500000001014111660333246016667 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = mod_data # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Data Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Filter Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/$(NLM_NAME).o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ data_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/filters/config.m40000644000000000000500000001522313522234304016064 0ustar rootsrcdnl modules enabled in this directory by default dnl APACHE_MODULE(name, helptext[, objects[, structname[, default[, config]]]]) APACHE_MODPATH_INIT(filters) APACHE_MODULE(buffer, Filter Buffering, , , most) APACHE_MODULE(data, RFC2397 data encoder, , , ) APACHE_MODULE(ratelimit, Output Bandwidth Limiting, , , most) APACHE_MODULE(reqtimeout, Limit time waiting for request from client, , , yes) APACHE_MODULE(ext_filter, external filter module, , , most) APACHE_MODULE(request, Request Body Filtering, , , most) APACHE_MODULE(include, Server Side Includes, , , most) APACHE_MODULE(filter, Smart Filtering, , , yes) APACHE_MODULE(reflector, Reflect request through the output filter stack, , , ) APACHE_MODULE(substitute, response content rewrite-like filtering, , , most) sed_obj="mod_sed.lo sed0.lo sed1.lo regexp.lo" APACHE_MODULE(sed, filter request and/or response bodies through sed, $sed_obj, , most, [ if test "x$enable_sed" = "xshared"; then # The only symbol which needs to be exported is the module # structure, so ask libtool to hide libsed internals: APR_ADDTO(MOD_SED_LDADD, [-export-symbols-regex sed_module]) fi ]) if test "$ac_cv_ebcdic" = "yes"; then # mod_charset_lite can be very useful on an ebcdic system, # so include it by default APACHE_MODULE(charset_lite, character set translation. Enabled by default only on EBCDIC systems., , , yes) else APACHE_MODULE(charset_lite, character set translation. Enabled by default only on EBCDIC systems., , , ) fi APACHE_MODULE(deflate, Deflate transfer encoding support, , , most, [ AC_ARG_WITH(z, APACHE_HELP_STRING(--with-z=PATH,use a specific zlib library), [ if test "x$withval" != "xyes" && test "x$withval" != "x"; then ap_zlib_base="$withval" ap_zlib_with="yes" fi ]) if test "x$ap_zlib_base" = "x"; then AC_MSG_CHECKING([for zlib location]) AC_CACHE_VAL(ap_cv_zlib,[ for dir in /usr/local /usr ; do if test -d $dir && test -f $dir/include/zlib.h; then ap_cv_zlib=$dir break fi done ]) ap_zlib_base=$ap_cv_zlib if test "x$ap_zlib_base" = "x"; then enable_deflate=no AC_MSG_RESULT([not found]) else AC_MSG_RESULT([$ap_zlib_base]) fi fi if test "$enable_deflate" != "no"; then ap_save_includes=$INCLUDES ap_save_ldflags=$LDFLAGS ap_save_cppflags=$CPPFLAGS ap_zlib_ldflags="" if test "$ap_zlib_base" != "/usr"; then APR_ADDTO(INCLUDES, [-I${ap_zlib_base}/include]) APR_ADDTO(MOD_INCLUDES, [-I${ap_zlib_base}/include]) dnl put in CPPFLAGS temporarily so that AC_TRY_LINK below will work CPPFLAGS="$CPPFLAGS $INCLUDES" APR_ADDTO(LDFLAGS, [-L${ap_zlib_base}/lib]) APR_ADDTO(ap_zlib_ldflags, [-L${ap_zlib_base}/lib]) if test "x$ap_platform_runtime_link_flag" != "x"; then APR_ADDTO(LDFLAGS, [$ap_platform_runtime_link_flag${ap_zlib_base}/lib]) APR_ADDTO(ap_zlib_ldflags, [$ap_platform_runtime_link_flag${ap_zlib_base}/lib]) fi fi APR_ADDTO(LIBS, [-lz]) AC_MSG_CHECKING([for zlib library]) AC_TRY_LINK([#include ], [int i = Z_OK;], [AC_MSG_RESULT(found) APR_ADDTO(MOD_DEFLATE_LDADD, [$ap_zlib_ldflags -lz])], [AC_MSG_RESULT(not found) enable_deflate=no if test "x$ap_zlib_with" = "x"; then AC_MSG_WARN([... Error, zlib was missing or unusable]) else AC_MSG_ERROR([... Error, zlib was missing or unusable]) fi ]) INCLUDES=$ap_save_includes LDFLAGS=$ap_save_ldflags CPPFLAGS=$ap_save_cppflags APR_REMOVEFROM(LIBS, [-lz]) fi ]) AC_DEFUN([FIND_LIBXML2], [ AC_CACHE_CHECK([for libxml2], [ac_cv_libxml2], [ AC_ARG_WITH(libxml2, [APACHE_HELP_STRING(--with-libxml2=PATH,location for libxml2)], [test_paths="${with_libxml2}/include/libxml2 ${with_libxml2}/include ${with_libxml2}"], [test_paths="/usr/include/libxml2 /usr/local/include/libxml2 /usr/include /usr/local/include"] ) AC_MSG_CHECKING(for libxml2) xml2_path="" for x in ${test_paths}; do if test -f "${x}/libxml/parser.h"; then xml2_path="${x}" break fi done if test -n "${xml2_path}" ; then ac_cv_libxml2=yes XML2_INCLUDES="${xml2_path}" else ac_cv_libxml2=no fi ]) ]) APACHE_MODULE(xml2enc, i18n support for markup filters, , , , [ FIND_LIBXML2 if test "$ac_cv_libxml2" = "yes" ; then APR_ADDTO(MOD_CFLAGS, [-I${XML2_INCLUDES}]) APR_ADDTO(MOD_XML2ENC_LDADD, [-lxml2]) else enable_xml2enc=no fi ]) APACHE_MODULE(proxy_html, Fix HTML Links in a Reverse Proxy, , , , [ FIND_LIBXML2 if test "$ac_cv_libxml2" = "yes" ; then APR_ADDTO(MOD_CFLAGS, [-I${XML2_INCLUDES}]) APR_ADDTO(MOD_PROXY_HTML_LDADD, [-lxml2]) else enable_proxy_html=no fi ] ) APACHE_MODULE(brotli, Brotli compression support, , , most, [ AC_ARG_WITH(brotli, APACHE_HELP_STRING(--with-brotli=PATH,Brotli installation directory),[ if test "$withval" != "yes" -a "x$withval" != "x"; then ap_brotli_base="$withval" ap_brotli_with=yes fi ]) ap_brotli_found=no if test -n "$ap_brotli_base"; then ap_save_cppflags=$CPPFLAGS APR_ADDTO(CPPFLAGS, [-I${ap_brotli_base}/include]) AC_MSG_CHECKING([for Brotli library >= 0.6.0 via prefix]) AC_TRY_COMPILE( [#include ],[ const uint8_t *o = BrotliEncoderTakeOutput((BrotliEncoderState*)0, (size_t*)0); if (o) return *o;], [AC_MSG_RESULT(yes) ap_brotli_found=yes ap_brotli_cflags="-I${ap_brotli_base}/include" ap_brotli_libs="-L${ap_brotli_base}/lib -lbrotlienc -lbrotlicommon"], [AC_MSG_RESULT(no)] ) CPPFLAGS=$ap_save_cppflags else if test -n "$PKGCONFIG"; then AC_MSG_CHECKING([for Brotli library >= 0.6.0 via pkg-config]) if $PKGCONFIG --exists "libbrotlienc >= 0.6.0"; then AC_MSG_RESULT(yes) ap_brotli_found=yes ap_brotli_cflags=`$PKGCONFIG libbrotlienc --cflags` ap_brotli_libs=`$PKGCONFIG libbrotlienc --libs` else AC_MSG_RESULT(no) fi fi fi if test "$ap_brotli_found" = "yes"; then APR_ADDTO(MOD_CFLAGS, [$ap_brotli_cflags]) APR_ADDTO(MOD_BROTLI_LDADD, [$ap_brotli_libs]) if test "$enable_brotli" = "shared"; then dnl The only symbol which needs to be exported is the module dnl structure, so ask libtool to hide everything else: APR_ADDTO(MOD_BROTLI_LDADD, [-export-symbols-regex brotli_module]) fi else enable_brotli=no if test "$ap_brotli_with" = "yes"; then AC_MSG_ERROR([Brotli library was missing or unusable]) fi fi ]) APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) APACHE_MODPATH_FINISH httpd-2.4.41/modules/filters/sed0.c0000644000000000000500000006736212730516456015402 0ustar rootsrc/* * Copyright (c) 2005, 2008 Sun Microsystems, Inc. All Rights Reserved. * Use is subject to license terms. * * Copyright (c) 1984 AT&T * All Rights Reserved * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * http://www.apache.org/licenses/LICENSE-2.0. * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express * or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr.h" #include "apr_strings.h" #include "libsed.h" #include "sed.h" #include "regexp.h" #define CCEOF 22 static int fcomp(sed_commands_t *commands, apr_file_t *fin); static char *compsub(sed_commands_t *commands, sed_comp_args *compargs, char *rhsbuf); static int rline(sed_commands_t *commands, apr_file_t *fin, char *lbuf, char *lbend); static char *address(sed_commands_t *commands, char *expbuf, apr_status_t* status); static char *text(sed_commands_t *commands, char *textbuf, char *endbuf); static sed_label_t *search(sed_commands_t *commands); static char *ycomp(sed_commands_t *commands, char *expbuf); static char *comple(sed_commands_t *commands, sed_comp_args *compargs, char *x1, char *ep, char *x3, char x4); static sed_reptr_t *alloc_reptr(sed_commands_t *commands); static int check_finalized(const sed_commands_t *commands); void command_errf(sed_commands_t *commands, const char *fmt, ...) { if (commands->errfn && commands->pool) { va_list args; const char* error; va_start(args, fmt); error = apr_pvsprintf(commands->pool, fmt, args); commands->errfn(commands->data, error); va_end(args); } } /* * sed_init_commands */ apr_status_t sed_init_commands(sed_commands_t *commands, sed_err_fn_t *errfn, void *data, apr_pool_t *p) { memset(commands, 0, sizeof(*commands)); commands->errfn = errfn; commands->data = data; commands->labtab = commands->ltab; commands->lab = commands->labtab + 1; commands->pool = p; commands->respace = apr_pcalloc(p, RESIZE); if (commands->respace == NULL) { command_errf(commands, SEDERR_OOMMES); return APR_EGENERAL; } commands->rep = alloc_reptr(commands); if (commands->rep == NULL) return APR_EGENERAL; commands->rep->ad1 = commands->respace; commands->reend = &commands->respace[RESIZE - 1]; commands->labend = &commands->labtab[SED_LABSIZE]; commands->canbefinal = 1; return APR_SUCCESS; } /* * sed_destroy_commands */ void sed_destroy_commands(sed_commands_t *commands) { } /* * sed_compile_string */ apr_status_t sed_compile_string(sed_commands_t *commands, const char *s) { apr_status_t rv; commands->earg = s; commands->eflag = 1; rv = fcomp(commands, NULL); if (rv == APR_SUCCESS) commands->canbefinal = check_finalized(commands); commands->eflag = 0; return (rv != 0 ? APR_EGENERAL : APR_SUCCESS); } /* * sed_compile_file */ apr_status_t sed_compile_file(sed_commands_t *commands, apr_file_t *fin) { apr_status_t rv = fcomp(commands, fin); return (rv != 0 ? APR_EGENERAL : APR_SUCCESS); } /* * sed_get_finalize_error */ char* sed_get_finalize_error(const sed_commands_t *commands, apr_pool_t* pool) { const sed_label_t *lab; if (commands->depth) { return SEDERR_TMOMES; } /* Empty branch chain is not a issue */ for (lab = commands->labtab + 1; lab < commands->lab; lab++) { char *error; if (lab->address == 0) { error = apr_psprintf(pool, SEDERR_ULMES, lab->asc); return error; } if (lab->chain) { return SEDERR_INTERNAL; } } return NULL; } /* * sed_canbe_finalized */ int sed_canbe_finalized(const sed_commands_t *commands) { return commands->canbefinal; } /* * check_finalized */ static int check_finalized(const sed_commands_t *commands) { const sed_label_t *lab; if (commands->depth) { return 0; } /* Empty branch chain is not a issue */ for (lab = commands->labtab + 1; lab < commands->lab; lab++) { if (lab->address == 0 || (lab->chain)) { return 0; } } return 1; } /* * dechain */ static void dechain(sed_label_t *lpt, sed_reptr_t *address) { sed_reptr_t *rep; if ((lpt == NULL) || (lpt->chain == NULL) || (address == NULL)) return; rep = lpt->chain; while (rep->lb1) { sed_reptr_t *next; next = rep->lb1; rep->lb1 = address; rep = next; } rep->lb1 = address; lpt->chain = NULL; } /* * fcomp */ static int fcomp(sed_commands_t *commands, apr_file_t *fin) { char *p, *op, *tp; sed_reptr_t *pt, *pt1; int i, ii; sed_label_t *lpt; char fnamebuf[APR_PATH_MAX]; apr_status_t status; sed_comp_args compargs; op = commands->lastre; if (!commands->linebuf) { commands->linebuf = apr_pcalloc(commands->pool, LBSIZE + 1); } if (rline(commands, fin, commands->linebuf, (commands->linebuf + LBSIZE + 1)) < 0) return 0; if (*commands->linebuf == '#') { if (commands->linebuf[1] == 'n') commands->nflag = 1; } else { commands->cp = commands->linebuf; goto comploop; } for (;;) { if (rline(commands, fin, commands->linebuf, (commands->linebuf + LBSIZE + 1)) < 0) break; commands->cp = commands->linebuf; comploop: while (*commands->cp == ' ' || *commands->cp == '\t') commands->cp++; if (*commands->cp == '\0' || *commands->cp == '#') continue; if (*commands->cp == ';') { commands->cp++; goto comploop; } p = address(commands, commands->rep->ad1, &status); if (status != APR_SUCCESS) { command_errf(commands, SEDERR_CGMES, commands->linebuf); return -1; } if (p == commands->rep->ad1) { if (op) commands->rep->ad1 = op; else { command_errf(commands, SEDERR_NRMES); return -1; } } else if (p == 0) { p = commands->rep->ad1; commands->rep->ad1 = 0; } else { op = commands->rep->ad1; if (*commands->cp == ',' || *commands->cp == ';') { commands->cp++; commands->rep->ad2 = p; p = address(commands, commands->rep->ad2, &status); if ((status != APR_SUCCESS) || (p == 0)) { command_errf(commands, SEDERR_CGMES, commands->linebuf); return -1; } if (p == commands->rep->ad2) commands->rep->ad2 = op; else op = commands->rep->ad2; } else commands->rep->ad2 = 0; } if(p > &commands->respace[RESIZE-1]) { command_errf(commands, SEDERR_TMMES, commands->linebuf); return -1; } while (*commands->cp == ' ' || *commands->cp == '\t') commands->cp++; swit: switch(*commands->cp++) { default: command_errf(commands, SEDERR_UCMES, commands->linebuf); return -1; case '!': commands->rep->negfl = 1; goto swit; case '{': commands->rep->command = BCOM; commands->rep->negfl = !(commands->rep->negfl); commands->cmpend[commands->depth++] = &commands->rep->lb1; commands->rep = alloc_reptr(commands); commands->rep->ad1 = p; if (*commands->cp == '\0') continue; goto comploop; case '}': if (commands->rep->ad1) { command_errf(commands, SEDERR_AD0MES, commands->linebuf); return -1; } if (--commands->depth < 0) { command_errf(commands, SEDERR_TMCMES); return -1; } *commands->cmpend[commands->depth] = commands->rep; commands->rep->ad1 = p; continue; case '=': commands->rep->command = EQCOM; if (commands->rep->ad2) { command_errf(commands, SEDERR_AD1MES, commands->linebuf); return -1; } break; case ':': if (commands->rep->ad1) { command_errf(commands, SEDERR_AD0MES, commands->linebuf); return -1; } while (*commands->cp++ == ' '); commands->cp--; tp = commands->lab->asc; while ((*tp++ = *commands->cp++)) { if (tp >= &(commands->lab->asc[8])) { command_errf(commands, SEDERR_LTLMES, commands->linebuf); return -1; } } *--tp = '\0'; if ((lpt = search(commands)) != NULL) { if (lpt->address) { command_errf(commands, SEDERR_DLMES, commands->linebuf); return -1; } dechain(lpt, commands->rep); } else { commands->lab->chain = 0; lpt = commands->lab; if (++commands->lab >= commands->labend) { command_errf(commands, SEDERR_TMLMES, commands->linebuf); return -1; } } lpt->address = commands->rep; commands->rep->ad1 = p; continue; case 'a': commands->rep->command = ACOM; if (commands->rep->ad2) { command_errf(commands, SEDERR_AD1MES, commands->linebuf); return -1; } if (*commands->cp == '\\') commands->cp++; if (*commands->cp++ != '\n') { command_errf(commands, SEDERR_CGMES, commands->linebuf); return -1; } commands->rep->re1 = p; p = text(commands, commands->rep->re1, commands->reend); if (p == NULL) return -1; break; case 'c': commands->rep->command = CCOM; if (*commands->cp == '\\') commands->cp++; if (*commands->cp++ != ('\n')) { command_errf(commands, SEDERR_CGMES, commands->linebuf); return -1; } commands->rep->re1 = p; p = text(commands, commands->rep->re1, commands->reend); if (p == NULL) return -1; break; case 'i': commands->rep->command = ICOM; if (commands->rep->ad2) { command_errf(commands, SEDERR_AD1MES, commands->linebuf); return -1; } if (*commands->cp == '\\') commands->cp++; if (*commands->cp++ != ('\n')) { command_errf(commands, SEDERR_CGMES, commands->linebuf); return -1; } commands->rep->re1 = p; p = text(commands, commands->rep->re1, commands->reend); if (p == NULL) return -1; break; case 'g': commands->rep->command = GCOM; break; case 'G': commands->rep->command = CGCOM; break; case 'h': commands->rep->command = HCOM; break; case 'H': commands->rep->command = CHCOM; break; case 't': commands->rep->command = TCOM; goto jtcommon; case 'b': commands->rep->command = BCOM; jtcommon: while (*commands->cp++ == ' '); commands->cp--; if (*commands->cp == '\0') { if ((pt = commands->labtab->chain) != NULL) { while ((pt1 = pt->lb1) != NULL) pt = pt1; pt->lb1 = commands->rep; } else commands->labtab->chain = commands->rep; break; } tp = commands->lab->asc; while ((*tp++ = *commands->cp++)) if (tp >= &(commands->lab->asc[8])) { command_errf(commands, SEDERR_LTLMES, commands->linebuf); return -1; } commands->cp--; *--tp = '\0'; if ((lpt = search(commands)) != NULL) { if (lpt->address) { commands->rep->lb1 = lpt->address; } else { pt = lpt->chain; while ((pt1 = pt->lb1) != NULL) pt = pt1; pt->lb1 = commands->rep; } } else { commands->lab->chain = commands->rep; commands->lab->address = 0; if (++commands->lab >= commands->labend) { command_errf(commands, SEDERR_TMLMES, commands->linebuf); return -1; } } break; case 'n': commands->rep->command = NCOM; break; case 'N': commands->rep->command = CNCOM; break; case 'p': commands->rep->command = PCOM; break; case 'P': commands->rep->command = CPCOM; break; case 'r': commands->rep->command = RCOM; if (commands->rep->ad2) { command_errf(commands, SEDERR_AD1MES, commands->linebuf); return -1; } if (*commands->cp++ != ' ') { command_errf(commands, SEDERR_CGMES, commands->linebuf); return -1; } commands->rep->re1 = p; p = text(commands, commands->rep->re1, commands->reend); if (p == NULL) return -1; break; case 'd': commands->rep->command = DCOM; break; case 'D': commands->rep->command = CDCOM; commands->rep->lb1 = commands->ptrspace; break; case 'q': commands->rep->command = QCOM; if (commands->rep->ad2) { command_errf(commands, SEDERR_AD1MES, commands->linebuf); return -1; } break; case 'l': commands->rep->command = LCOM; break; case 's': commands->rep->command = SCOM; commands->sseof = *commands->cp++; commands->rep->re1 = p; p = comple(commands, &compargs, (char *) 0, commands->rep->re1, commands->reend, commands->sseof); if (p == NULL) return -1; if (p == commands->rep->re1) { if (op) commands->rep->re1 = op; else { command_errf(commands, SEDERR_NRMES); return -1; } } else op = commands->rep->re1; commands->rep->rhs = p; p = compsub(commands, &compargs, commands->rep->rhs); if ((p) == NULL) return -1; if (*commands->cp == 'g') { commands->cp++; commands->rep->gfl = 999; } else if (commands->gflag) commands->rep->gfl = 999; if (*commands->cp >= '1' && *commands->cp <= '9') { i = *commands->cp - '0'; commands->cp++; while (1) { ii = *commands->cp; if (ii < '0' || ii > '9') break; i = i*10 + ii - '0'; if (i > 512) { command_errf(commands, SEDERR_TOOBIG, commands->linebuf); return -1; } commands->cp++; } commands->rep->gfl = i; } if (*commands->cp == 'p') { commands->cp++; commands->rep->pfl = 1; } if (*commands->cp == 'P') { commands->cp++; commands->rep->pfl = 2; } if (*commands->cp == 'w') { commands->cp++; if (*commands->cp++ != ' ') { command_errf(commands, SEDERR_SMMES, commands->linebuf); return -1; } if (text(commands, fnamebuf, &fnamebuf[APR_PATH_MAX-1]) == NULL) { command_errf(commands, SEDERR_FNTL, commands->linebuf); return -1; } for (i = commands->nfiles - 1; i >= 0; i--) if (strcmp(fnamebuf,commands->fname[i]) == 0) { commands->rep->findex = i; goto done; } if (commands->nfiles >= NWFILES) { command_errf(commands, SEDERR_TMWFMES); return -1; } commands->fname[commands->nfiles] = apr_pstrdup(commands->pool, fnamebuf); if (commands->fname[commands->nfiles] == NULL) { command_errf(commands, SEDERR_OOMMES); return -1; } commands->rep->findex = commands->nfiles++; } break; case 'w': commands->rep->command = WCOM; if (*commands->cp++ != ' ') { command_errf(commands, SEDERR_SMMES, commands->linebuf); return -1; } if (text(commands, fnamebuf, &fnamebuf[APR_PATH_MAX-1]) == NULL) { command_errf(commands, SEDERR_FNTL, commands->linebuf); return -1; } for (i = commands->nfiles - 1; i >= 0; i--) if (strcmp(fnamebuf, commands->fname[i]) == 0) { commands->rep->findex = i; goto done; } if (commands->nfiles >= NWFILES) { command_errf(commands, SEDERR_TMWFMES); return -1; } if ((commands->fname[commands->nfiles] = apr_pstrdup(commands->pool, fnamebuf)) == NULL) { command_errf(commands, SEDERR_OOMMES); return -1; } commands->rep->findex = commands->nfiles++; break; case 'x': commands->rep->command = XCOM; break; case 'y': commands->rep->command = YCOM; commands->sseof = *commands->cp++; commands->rep->re1 = p; p = ycomp(commands, commands->rep->re1); if (p == NULL) return -1; break; } done: commands->rep = alloc_reptr(commands); commands->rep->ad1 = p; if (*commands->cp++ != '\0') { if (commands->cp[-1] == ';') goto comploop; command_errf(commands, SEDERR_CGMES, commands->linebuf); return -1; } } commands->rep->command = 0; commands->lastre = op; return 0; } static char *compsub(sed_commands_t *commands, sed_comp_args *compargs, char *rhsbuf) { char *p, *q; p = rhsbuf; q = commands->cp; for(;;) { if(p > &commands->respace[RESIZE-1]) { command_errf(commands, SEDERR_TMMES, commands->linebuf); return NULL; } if((*p = *q++) == '\\') { p++; if(p > &commands->respace[RESIZE-1]) { command_errf(commands, SEDERR_TMMES, commands->linebuf); return NULL; } *p = *q++; if(*p > compargs->nbra + '0' && *p <= '9') { command_errf(commands, SEDERR_DOORNG, commands->linebuf); return NULL; } p++; continue; } if(*p == commands->sseof) { *p++ = '\0'; commands->cp = q; return(p); } if(*p++ == '\0') { command_errf(commands, SEDERR_EDMOSUB, commands->linebuf); return NULL; } } } /* * rline */ static int rline(sed_commands_t *commands, apr_file_t *fin, char *lbuf, char *lbend) { char *p; const char *q; int t; apr_size_t bytes_read; p = lbuf; if(commands->eflag) { if(commands->eflag > 0) { commands->eflag = -1; q = commands->earg; while((t = *q++) != '\0') { if(t == '\n') { commands->saveq = q; goto out1; } if (p < lbend) *p++ = t; if(t == '\\') { if((t = *q++) == '\0') { commands->saveq = NULL; return(-1); } if (p < lbend) *p++ = t; } } commands->saveq = NULL; out1: if (p == lbend) { command_errf(commands, SEDERR_CLTL); return -1; } *p = '\0'; return(1); } if((q = commands->saveq) == 0) return(-1); while((t = *q++) != '\0') { if(t == '\n') { commands->saveq = q; goto out2; } if(p < lbend) *p++ = t; if(t == '\\') { if((t = *q++) == '\0') { commands->saveq = NULL; return(-1); } if (p < lbend) *p++ = t; } } commands->saveq = NULL; out2: if (p == lbend) { command_errf(commands, SEDERR_CLTL); return -1; } *p = '\0'; return(1); } bytes_read = 1; /* XXX extremely inefficient 1 byte reads */ while (apr_file_read(fin, &t, &bytes_read) != APR_SUCCESS) { if(t == '\n') { if (p == lbend) { command_errf(commands, SEDERR_CLTL); return -1; } *p = '\0'; return(1); } if (p < lbend) *p++ = t; if(t == '\\') { bytes_read = 1; if (apr_file_read(fin, &t, &bytes_read) != APR_SUCCESS) { return -1; } if(p < lbend) *p++ = t; } bytes_read = 1; } return(-1); } /* * address */ static char *address(sed_commands_t *commands, char *expbuf, apr_status_t* status) { char *rcp; apr_int64_t lno; sed_comp_args compargs; *status = APR_SUCCESS; if(*commands->cp == '$') { if (expbuf > &commands->respace[RESIZE-2]) { command_errf(commands, SEDERR_TMMES, commands->linebuf); *status = APR_EGENERAL; return NULL; } commands->cp++; *expbuf++ = CEND; *expbuf++ = CCEOF; return(expbuf); } if (*commands->cp == '/' || *commands->cp == '\\' ) { if ( *commands->cp == '\\' ) commands->cp++; commands->sseof = *commands->cp++; return(comple(commands, &compargs, (char *) 0, expbuf, commands->reend, commands->sseof)); } rcp = commands->cp; lno = 0; while(*rcp >= '0' && *rcp <= '9') lno = lno*10 + *rcp++ - '0'; if(rcp > commands->cp) { if (expbuf > &commands->respace[RESIZE-3]) { command_errf(commands, SEDERR_TMMES, commands->linebuf); *status = APR_EGENERAL; return NULL; } *expbuf++ = CLNUM; *expbuf++ = commands->nlno; commands->tlno[commands->nlno++] = lno; if(commands->nlno >= SED_NLINES) { command_errf(commands, SEDERR_TMLNMES); *status = APR_EGENERAL; return NULL; } *expbuf++ = CCEOF; commands->cp = rcp; return(expbuf); } return(NULL); } /* * text */ static char *text(sed_commands_t *commands, char *textbuf, char *tbend) { char *p, *q; p = textbuf; q = commands->cp; #ifndef S5EMUL /* * Strip off indentation from text to be inserted. */ while(*q == '\t' || *q == ' ') q++; #endif for(;;) { if(p > tbend) return(NULL); /* overflowed the buffer */ if((*p = *q++) == '\\') *p = *q++; if(*p == '\0') { commands->cp = --q; return(++p); } #ifndef S5EMUL /* * Strip off indentation from text to be inserted. */ if(*p == '\n') { while(*q == '\t' || *q == ' ') q++; } #endif p++; } } /* * search */ static sed_label_t *search(sed_commands_t *commands) { sed_label_t *rp; sed_label_t *ptr; rp = commands->labtab; ptr = commands->lab; while (rp < ptr) { if (strcmp(rp->asc, ptr->asc) == 0) return rp; rp++; } return 0; } /* * ycomp */ static char *ycomp(sed_commands_t *commands, char *expbuf) { char c; int cint; /* integer value of char c */ char *ep, *tsp; int i; char *sp; ep = expbuf; if(ep + 0377 > &commands->respace[RESIZE-1]) { command_errf(commands, SEDERR_TMMES, commands->linebuf); return NULL; } sp = commands->cp; for(tsp = commands->cp; (c = *tsp) != commands->sseof; tsp++) { if(c == '\\') tsp++; if(c == '\0' || c == '\n') { command_errf(commands, SEDERR_EDMOSTR, commands->linebuf); return NULL; } } tsp++; memset(ep, 0, 0400); while((c = *sp++) != commands->sseof) { c &= 0377; if(c == '\\' && *sp == 'n') { sp++; c = '\n'; } cint = (int) c; if((ep[cint] = *tsp++) == '\\' && *tsp == 'n') { ep[cint] = '\n'; tsp++; } if(ep[cint] == commands->sseof || ep[cint] == '\0') { command_errf(commands, SEDERR_TSNTSS, commands->linebuf); } } if(*tsp != commands->sseof) { if(*tsp == '\0') { command_errf(commands, SEDERR_EDMOSTR, commands->linebuf); } else { command_errf(commands, SEDERR_TSNTSS, commands->linebuf); } return NULL; } commands->cp = ++tsp; for(i = 0; i < 0400; i++) if(ep[i] == 0) ep[i] = i; return(ep + 0400); } /* * comple */ static char *comple(sed_commands_t *commands, sed_comp_args *compargs, char *x1, char *ep, char *x3, char x4) { char *p; p = sed_compile(commands, compargs, ep + 1, x3, x4); if(p == ep + 1) return(ep); *ep = compargs->circf; return(p); } /* * alloc_reptr */ static sed_reptr_t *alloc_reptr(sed_commands_t *commands) { sed_reptr_t *var; var = apr_pcalloc(commands->pool, sizeof(sed_reptr_t)); if (var == NULL) { command_errf(commands, SEDERR_OOMMES); return 0; } var->nrep = commands->nrep; var->findex = -1; commands->nrep++; if (commands->ptrspace == NULL) commands->ptrspace = var; else commands->ptrend->next = var; commands->ptrend = var; commands->labtab->address = var; return var; } httpd-2.4.41/modules/filters/mod_xml2enc.mak0000644000000000000500000002431212701473373017266 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_xml2enc.dsp !IF "$(CFG)" == "" CFG=mod_xml2enc - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_xml2enc - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_xml2enc - Win32 Release" && "$(CFG)" != "mod_xml2enc - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_xml2enc.mak" CFG="mod_xml2enc - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_xml2enc - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_xml2enc - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_xml2enc - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_xml2enc.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_xml2enc.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\httpd.res" -@erase "$(INTDIR)\mod_xml2enc.obj" -@erase "$(INTDIR)\mod_xml2enc_src.idb" -@erase "$(INTDIR)\mod_xml2enc_src.pdb" -@erase "$(OUTDIR)\mod_xml2enc.exp" -@erase "$(OUTDIR)\mod_xml2enc.lib" -@erase "$(OUTDIR)\mod_xml2enc.pdb" -@erase "$(OUTDIR)\mod_xml2enc.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/libxml2/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_xml2enc_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\httpd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../srclib/apr-util/include" /i "../../srclib/libxml2/include" /d "NDEBUG" /d BIN_NAME="mod_xml2enc.so" /d LONG_NAME="xml2enc_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_xml2enc.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib libxml2.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_xml2enc.pdb" /debug /out:"$(OUTDIR)\mod_xml2enc.so" /implib:"$(OUTDIR)\mod_xml2enc.lib" /libpath:"../../srclib/libxml2/win32/bin.msvc" /base:@..\..\os\win32\BaseAddr.ref,mod_xml2enc.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_xml2enc.obj" \ "$(INTDIR)\httpd.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_xml2enc.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_xml2enc.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_xml2enc.so" if exist .\Release\mod_xml2enc.so.manifest mt.exe -manifest .\Release\mod_xml2enc.so.manifest -outputresource:.\Release\mod_xml2enc.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_xml2enc - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_xml2enc.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_xml2enc.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\httpd.res" -@erase "$(INTDIR)\mod_xml2enc.obj" -@erase "$(INTDIR)\mod_xml2enc_src.idb" -@erase "$(INTDIR)\mod_xml2enc_src.pdb" -@erase "$(OUTDIR)\mod_xml2enc.exp" -@erase "$(OUTDIR)\mod_xml2enc.lib" -@erase "$(OUTDIR)\mod_xml2enc.pdb" -@erase "$(OUTDIR)\mod_xml2enc.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/libxml2/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_xml2enc_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\httpd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../srclib/apr-util/include" /i "../../srclib/libxml2/include" /d "_DEBUG" /d BIN_NAME="mod_xml2enc.so" /d LONG_NAME="xml2enc_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_xml2enc.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib libxml2.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_xml2enc.pdb" /debug /out:"$(OUTDIR)\mod_xml2enc.so" /implib:"$(OUTDIR)\mod_xml2enc.lib" /libpath:"../../srclib/libxml2/win32/bin.msvc" /base:@..\..\os\win32\BaseAddr.ref,mod_xml2enc.so LINK32_OBJS= \ "$(INTDIR)\mod_xml2enc.obj" \ "$(INTDIR)\httpd.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_xml2enc.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_xml2enc.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_xml2enc.so" if exist .\Debug\mod_xml2enc.so.manifest mt.exe -manifest .\Debug\mod_xml2enc.so.manifest -outputresource:.\Debug\mod_xml2enc.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_xml2enc.dep") !INCLUDE "mod_xml2enc.dep" !ELSE !MESSAGE Warning: cannot find "mod_xml2enc.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_xml2enc - Win32 Release" || "$(CFG)" == "mod_xml2enc - Win32 Debug" SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_xml2enc - Win32 Release" "$(INTDIR)\httpd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\httpd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../srclib/apr-util/include" /i "../../srclib/libxml2/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_xml2enc.so" /d LONG_NAME="xml2enc_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_xml2enc - Win32 Debug" "$(INTDIR)\httpd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\httpd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../srclib/apr-util/include" /i "../../srclib/libxml2/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_xml2enc.so" /d LONG_NAME="xml2enc_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_xml2enc.c "$(INTDIR)\mod_xml2enc.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_xml2enc - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_xml2enc - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_xml2enc - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_xml2enc - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_xml2enc - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_xml2enc - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF !ENDIF httpd-2.4.41/modules/filters/NWGNUextfiltr0000644000000000000500000001016511540546347016773 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = extfiltr # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) External Filter Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = ExtFilter Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/extfiltr.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_ext_filter.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ ext_filter_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/filters/mod_charset_lite.dep0000644000000000000500000000421512674411515020363 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_charset_lite.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_charset_lite.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/filters/regexp.h0000644000000000000500000000724312117404217016024 0ustar rootsrc/* * Copyright (c) 2005, 2008 Sun Microsystems, Inc. All Rights Reserved. * Use is subject to license terms. * * Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T * All Rights Reserved * * University Copyright- Copyright (c) 1982, 1986, 1988 * The Regents of the University of California * All Rights Reserved * * University Acknowledgment- Portions of this document are derived from * software developed by the University of California, Berkeley, and its * contributors. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * http://www.apache.org/licenses/LICENSE-2.0. * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express * or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef _REGEXP_H #define _REGEXP_H #include "libsed.h" #ifdef __cplusplus extern "C" { #endif #define CBRA 2 #define CCHR 4 #define CDOT 8 #define CCL 12 #define CXCL 16 #define CDOL 20 #define CCEOF 22 #define CKET 24 #define CBACK 36 #define NCCL 40 #define STAR 01 #define RNGE 03 #define NBRA 9 #define PLACE(c) ep[c >> 3] |= bittab[c & 07] #define ISTHERE(c) (ep[c >> 3] & bittab[c & 07]) typedef struct _step_vars_storage { char *loc1, *loc2, *locs; char *braslist[NBRA]; char *braelist[NBRA]; int low; int size; } step_vars_storage; typedef struct _sed_comp_args { int circf; /* Regular expression starts with ^ */ int nbra; /* braces count */ } sed_comp_args; extern char *sed_compile(sed_commands_t *commands, sed_comp_args *compargs, char *ep, char *endbuf, int seof); extern void command_errf(sed_commands_t *commands, const char *fmt, ...) __attribute__((format(printf,2,3))); #define SEDERR_CGMES "command garbled: %s" #define SEDERR_SMMES "Space missing before filename: %s" #define SEDERR_TMMES "too much command text: %s" #define SEDERR_LTLMES "label too long: %s" #define SEDERR_ULMES "undefined label: %s" #define SEDERR_DLMES "duplicate labels: %s" #define SEDERR_TMLMES "too many labels: %s" #define SEDERR_AD0MES "no addresses allowed: %s" #define SEDERR_AD1MES "only one address allowed: %s" #define SEDERR_TOOBIG "suffix too large: %s" #define SEDERR_OOMMES "out of memory" #define SEDERR_COPFMES "cannot open pattern file: %s" #define SEDERR_COIFMES "cannot open input file: %s" #define SEDERR_TMOMES "too many {'s" #define SEDERR_TMCMES "too many }'s" #define SEDERR_NRMES "first RE may not be null" #define SEDERR_UCMES "unrecognized command: %s" #define SEDERR_TMWFMES "too many files in w commands" #define SEDERR_COMES "cannot open %s" #define SEDERR_CCMES "cannot create %s" #define SEDERR_TMLNMES "too many line numbers" #define SEDERR_TMAMES "too many appends after line %lld" #define SEDERR_TMRMES "too many reads after line %lld" #define SEDERR_DOORNG "``\\digit'' out of range: %s" #define SEDERR_EDMOSUB "ending delimiter missing on substitution: %s" #define SEDERR_EDMOSTR "ending delimiter missing on string: %s" #define SEDERR_FNTL "file name too long: %s" #define SEDERR_CLTL "command line too long" #define SEDERR_TSNTSS "transform strings not the same size: %s" #define SEDERR_OLTL "output line too long." #define SEDERR_HSOVERFLOW "hold space overflowed." #define SEDERR_INTERNAL "internal sed error" #ifdef __cplusplus } #endif #endif /* _REGEXP_H */ httpd-2.4.41/modules/filters/mod_filter.mak0000644000000000000500000002334112701473373017204 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_filter.dsp !IF "$(CFG)" == "" CFG=mod_filter - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_filter - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_filter - Win32 Release" && "$(CFG)" != "mod_filter - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_filter.mak" CFG="mod_filter - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_filter - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_filter - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_filter - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_filter.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_filter.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_filter.obj" -@erase "$(INTDIR)\mod_filter.res" -@erase "$(INTDIR)\mod_filter_src.idb" -@erase "$(INTDIR)\mod_filter_src.pdb" -@erase "$(OUTDIR)\mod_filter.exp" -@erase "$(OUTDIR)\mod_filter.lib" -@erase "$(OUTDIR)\mod_filter.pdb" -@erase "$(OUTDIR)\mod_filter.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_filter_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_filter.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_filter.so" /d LONG_NAME="filter_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_filter.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_filter.pdb" /debug /out:"$(OUTDIR)\mod_filter.so" /implib:"$(OUTDIR)\mod_filter.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_filter.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_filter.obj" \ "$(INTDIR)\mod_filter.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_filter.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_filter.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_filter.so" if exist .\Release\mod_filter.so.manifest mt.exe -manifest .\Release\mod_filter.so.manifest -outputresource:.\Release\mod_filter.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_filter - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_filter.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_filter.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_filter.obj" -@erase "$(INTDIR)\mod_filter.res" -@erase "$(INTDIR)\mod_filter_src.idb" -@erase "$(INTDIR)\mod_filter_src.pdb" -@erase "$(OUTDIR)\mod_filter.exp" -@erase "$(OUTDIR)\mod_filter.lib" -@erase "$(OUTDIR)\mod_filter.pdb" -@erase "$(OUTDIR)\mod_filter.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_filter_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_filter.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_filter.so" /d LONG_NAME="filter_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_filter.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_filter.pdb" /debug /out:"$(OUTDIR)\mod_filter.so" /implib:"$(OUTDIR)\mod_filter.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_filter.so LINK32_OBJS= \ "$(INTDIR)\mod_filter.obj" \ "$(INTDIR)\mod_filter.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_filter.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_filter.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_filter.so" if exist .\Debug\mod_filter.so.manifest mt.exe -manifest .\Debug\mod_filter.so.manifest -outputresource:.\Debug\mod_filter.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_filter.dep") !INCLUDE "mod_filter.dep" !ELSE !MESSAGE Warning: cannot find "mod_filter.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_filter - Win32 Release" || "$(CFG)" == "mod_filter - Win32 Debug" !IF "$(CFG)" == "mod_filter - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_filter - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_filter - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_filter - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_filter - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_filter - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_filter - Win32 Release" "$(INTDIR)\mod_filter.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_filter.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_filter.so" /d LONG_NAME="filter_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_filter - Win32 Debug" "$(INTDIR)\mod_filter.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_filter.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_filter.so" /d LONG_NAME="filter_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_filter.c "$(INTDIR)\mod_filter.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/filters/mod_request.c0000644000000000000500000003241112604740124017050 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_request.c --- HTTP routines to set aside or process request bodies. */ #include "apr.h" #include "apr_strings.h" #include "apr_buckets.h" #include "apr_lib.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_protocol.h" #include "http_log.h" /* For errors detected in basic auth common * support code... */ #include "http_request.h" #include "mod_request.h" /* Handles for core filters */ static ap_filter_rec_t *keep_body_input_filter_handle; static ap_filter_rec_t *kept_body_input_filter_handle; static apr_status_t bail_out_on_error(apr_bucket_brigade *bb, ap_filter_t *f, int http_error) { apr_bucket *e; apr_brigade_cleanup(bb); e = ap_bucket_error_create(http_error, NULL, f->r->pool, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); e = apr_bucket_eos_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); return ap_pass_brigade(f->r->output_filters, bb); } typedef struct keep_body_filter_ctx { apr_off_t remaining; apr_off_t keep_body; } keep_body_ctx_t; /** * This is the KEEP_BODY_INPUT filter for HTTP requests, for times when the * body should be set aside for future use by other modules. */ static apr_status_t keep_body_filter(ap_filter_t *f, apr_bucket_brigade *b, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { apr_bucket *e; keep_body_ctx_t *ctx = f->ctx; apr_status_t rv; apr_bucket *bucket; apr_off_t len = 0; if (!ctx) { const char *lenp; char *endstr = NULL; request_dir_conf *dconf = ap_get_module_config(f->r->per_dir_config, &request_module); /* must we step out of the way? */ if (!dconf->keep_body || f->r->kept_body) { ap_remove_input_filter(f); return ap_get_brigade(f->next, b, mode, block, readbytes); } f->ctx = ctx = apr_pcalloc(f->r->pool, sizeof(*ctx)); /* fail fast if the content length exceeds keep body */ lenp = apr_table_get(f->r->headers_in, "Content-Length"); if (lenp) { /* Protects against over/underflow, non-digit chars in the * string (excluding leading space) (the endstr checks) * and a negative number. */ if (apr_strtoff(&ctx->remaining, lenp, &endstr, 10) || endstr == lenp || *endstr || ctx->remaining < 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, f->r, APLOGNO(01411) "Invalid Content-Length"); ap_remove_input_filter(f); return bail_out_on_error(b, f, HTTP_REQUEST_ENTITY_TOO_LARGE); } /* If we have a limit in effect and we know the C-L ahead of * time, stop it here if it is invalid. */ if (dconf->keep_body < ctx->remaining) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, f->r, APLOGNO(01412) "Requested content-length of %" APR_OFF_T_FMT " is larger than the configured limit" " of %" APR_OFF_T_FMT, ctx->remaining, dconf->keep_body); ap_remove_input_filter(f); return bail_out_on_error(b, f, HTTP_REQUEST_ENTITY_TOO_LARGE); } } f->r->kept_body = apr_brigade_create(f->r->pool, f->r->connection->bucket_alloc); ctx->remaining = dconf->keep_body; } /* get the brigade from upstream, and read it in to get its length */ rv = ap_get_brigade(f->next, b, mode, block, readbytes); if (rv == APR_SUCCESS) { rv = apr_brigade_length(b, 1, &len); } /* does the length take us over the limit? */ if (APR_SUCCESS == rv && len > ctx->remaining) { if (f->r->kept_body) { apr_brigade_cleanup(f->r->kept_body); f->r->kept_body = NULL; } ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, f->r, APLOGNO(01413) "Requested content-length of %" APR_OFF_T_FMT " is larger than the configured limit" " of %" APR_OFF_T_FMT, len, ctx->keep_body); return bail_out_on_error(b, f, HTTP_REQUEST_ENTITY_TOO_LARGE); } ctx->remaining -= len; /* pass any errors downstream */ if (rv != APR_SUCCESS) { if (f->r->kept_body) { apr_brigade_cleanup(f->r->kept_body); f->r->kept_body = NULL; } return rv; } /* all is well, set aside the buckets */ for (bucket = APR_BRIGADE_FIRST(b); bucket != APR_BRIGADE_SENTINEL(b); bucket = APR_BUCKET_NEXT(bucket)) { apr_bucket_copy(bucket, &e); APR_BRIGADE_INSERT_TAIL(f->r->kept_body, e); } return APR_SUCCESS; } typedef struct kept_body_filter_ctx { apr_off_t offset; apr_off_t remaining; } kept_body_ctx_t; /** * Initialisation of filter to handle a kept body on subrequests. * * If a body is to be reinserted into a subrequest, any chunking will have * been removed from the body during storage. We need to change the request * from Transfer-Encoding: chunked to an explicit Content-Length. */ static int kept_body_filter_init(ap_filter_t *f) { apr_off_t length = 0; request_rec *r = f->r; apr_bucket_brigade *kept_body = r->kept_body; if (kept_body) { apr_table_unset(r->headers_in, "Transfer-Encoding"); apr_brigade_length(kept_body, 1, &length); apr_table_setn(r->headers_in, "Content-Length", apr_off_t_toa(r->pool, length)); } return OK; } /** * Filter to handle a kept body on subrequests. * * If a body has been previously kept by the request, and if a subrequest wants * to re-insert the body into the request, this input filter makes it happen. */ static apr_status_t kept_body_filter(ap_filter_t *f, apr_bucket_brigade *b, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { request_rec *r = f->r; apr_bucket_brigade *kept_body = r->kept_body; kept_body_ctx_t *ctx = f->ctx; apr_bucket *ec, *e2; apr_status_t rv; /* just get out of the way of things we don't want. */ if (!kept_body || (mode != AP_MODE_READBYTES && mode != AP_MODE_GETLINE)) { return ap_get_brigade(f->next, b, mode, block, readbytes); } /* set up the context if it does not already exist */ if (!ctx) { f->ctx = ctx = apr_palloc(f->r->pool, sizeof(*ctx)); ctx->offset = 0; apr_brigade_length(kept_body, 1, &ctx->remaining); } /* kept_body is finished, send next filter */ if (ctx->remaining <= 0) { return ap_get_brigade(f->next, b, mode, block, readbytes); } /* send all of the kept_body, but no more */ if (readbytes > ctx->remaining) { readbytes = ctx->remaining; } /* send part of the kept_body */ if ((rv = apr_brigade_partition(kept_body, ctx->offset, &ec)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01414) "apr_brigade_partition() failed on kept_body at %" APR_OFF_T_FMT, ctx->offset); return rv; } if ((rv = apr_brigade_partition(kept_body, ctx->offset + readbytes, &e2)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01415) "apr_brigade_partition() failed on kept_body at %" APR_OFF_T_FMT, ctx->offset + readbytes); return rv; } do { apr_bucket *foo; const char *str; apr_size_t len; if (apr_bucket_copy(ec, &foo) != APR_SUCCESS) { /* As above; this should not fail since the bucket has * a known length, but just to be sure, this takes * care of uncopyable buckets that do somehow manage * to slip through. */ /* XXX: check for failure? */ apr_bucket_read(ec, &str, &len, APR_BLOCK_READ); apr_bucket_copy(ec, &foo); } APR_BRIGADE_INSERT_TAIL(b, foo); ec = APR_BUCKET_NEXT(ec); } while (ec != e2); ctx->remaining -= readbytes; ctx->offset += readbytes; return APR_SUCCESS; } /** * Check whether this filter is not already present. */ static int request_is_filter_present(request_rec * r, ap_filter_rec_t *fn) { ap_filter_t * f = r->input_filters; while (f) { if (f->frec == fn) { return 1; } f = f->next; } return 0; } /** * Insert filter hook. * * Add the KEEP_BODY filter to the request, if the admin wants to keep * the body using the KeptBodySize directive. * * As a precaution, any pre-existing instances of either the kept_body or * keep_body filters will be removed before the filter is added. * * @param r The request */ static void ap_request_insert_filter(request_rec * r) { request_dir_conf *conf = ap_get_module_config(r->per_dir_config, &request_module); if (r->kept_body) { if (!request_is_filter_present(r, kept_body_input_filter_handle)) { ap_add_input_filter_handle(kept_body_input_filter_handle, NULL, r, r->connection); } } else if (conf->keep_body) { if (!request_is_filter_present(r, kept_body_input_filter_handle)) { ap_add_input_filter_handle(keep_body_input_filter_handle, NULL, r, r->connection); } } } /** * Remove the kept_body and keep body filters from this specific request. */ static void ap_request_remove_filter(request_rec * r) { ap_filter_t * f = r->input_filters; while (f) { if (f->frec->filter_func.in_func == kept_body_filter || f->frec->filter_func.in_func == keep_body_filter) { ap_remove_input_filter(f); } f = f->next; } } static void *create_request_dir_config(apr_pool_t *p, char *dummy) { request_dir_conf *new = (request_dir_conf *) apr_pcalloc(p, sizeof(request_dir_conf)); new->keep_body_set = 0; /* unset */ new->keep_body = 0; /* don't by default */ return (void *) new; } static void *merge_request_dir_config(apr_pool_t *p, void *basev, void *addv) { request_dir_conf *new = (request_dir_conf *) apr_pcalloc(p, sizeof(request_dir_conf)); request_dir_conf *add = (request_dir_conf *) addv; request_dir_conf *base = (request_dir_conf *) basev; new->keep_body = (add->keep_body_set == 0) ? base->keep_body : add->keep_body; new->keep_body_set = add->keep_body_set || base->keep_body_set; return new; } static const char *set_kept_body_size(cmd_parms *cmd, void *dconf, const char *arg) { request_dir_conf *conf = dconf; char *end = NULL; if (APR_SUCCESS != apr_strtoff(&(conf->keep_body), arg, &end, 10) || conf->keep_body < 0 || *end) { return "KeptBodySize must be a valid size in bytes, or zero."; } conf->keep_body_set = 1; return NULL; } static const command_rec request_cmds[] = { AP_INIT_TAKE1("KeptBodySize", set_kept_body_size, NULL, ACCESS_CONF, "Maximum size of request bodies kept aside for use by filters"), { NULL } }; static void register_hooks(apr_pool_t *p) { keep_body_input_filter_handle = ap_register_input_filter(KEEP_BODY_FILTER, keep_body_filter, NULL, AP_FTYPE_RESOURCE); kept_body_input_filter_handle = ap_register_input_filter(KEPT_BODY_FILTER, kept_body_filter, kept_body_filter_init, AP_FTYPE_RESOURCE); ap_hook_insert_filter(ap_request_insert_filter, NULL, NULL, APR_HOOK_LAST); APR_REGISTER_OPTIONAL_FN(ap_request_insert_filter); APR_REGISTER_OPTIONAL_FN(ap_request_remove_filter); } AP_DECLARE_MODULE(request) = { STANDARD20_MODULE_STUFF, create_request_dir_config, /* create per-directory config structure */ merge_request_dir_config, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ request_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/filters/mod_deflate.dep0000644000000000000500000000346112674411515017323 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_deflate.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_deflate.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\ssl\mod_ssl.h"\ httpd-2.4.41/modules/filters/mod_proxy_html.dep0000644000000000000500000000410312674411515020116 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_proxy_html.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_proxy_html.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_xml2enc.h"\ httpd-2.4.41/modules/filters/NWGNUxml2enc0000644000000000000500000001035111652776275016510 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(LIBXML2SDK)/include \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ -L$(LIBXML2SDK)/lib -llibxml2.lib \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = xml2enc # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) xml2enc Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Substitute Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_xml2enc.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ xml2enc_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/filters/mod_deflate.dsp0000644000000000000500000001114312007303266017326 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_deflate" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_deflate - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_deflate.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_deflate.mak" CFG="mod_deflate - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_deflate - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_deflate - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_deflate - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../ssl" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/zlib" /D "NDEBUG" /D "ZLIB_DLL" /D "HAVE_ZUTIL_H" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_deflate_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_deflate.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_deflate.so" /d LONG_NAME="deflate_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_deflate.so" /base:@..\..\os\win32\BaseAddr.ref,mod_deflate.so # ADD LINK32 kernel32.lib zdll.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_deflate.so" /libpath:"../../srclib/zlib" /base:@..\..\os\win32\BaseAddr.ref,mod_deflate.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_deflate.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_deflate - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../ssl" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/zlib" /D "_DEBUG" /D "ZLIB_DLL" /D "HAVE_ZUTIL_H" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_deflate_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_deflate.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_deflate.so" /d LONG_NAME="deflate_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_deflate.so" /base:@..\..\os\win32\BaseAddr.ref,mod_deflate.so # ADD LINK32 kernel32.lib zdll.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_deflate.so" /libpath:"../../srclib/zlib" /base:@..\..\os\win32\BaseAddr.ref,mod_deflate.so # Begin Special Build Tool TargetPath=.\Debug\mod_deflate.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_deflate - Win32 Release" # Name "mod_deflate - Win32 Debug" # Begin Source File SOURCE=.\mod_deflate.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/filters/mod_ext_filter.mak0000644000000000000500000002410112701473373020057 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_ext_filter.dsp !IF "$(CFG)" == "" CFG=mod_ext_filter - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_ext_filter - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_ext_filter - Win32 Release" && "$(CFG)" != "mod_ext_filter - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_ext_filter.mak" CFG="mod_ext_filter - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_ext_filter - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_ext_filter - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_ext_filter - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_ext_filter.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_ext_filter.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_ext_filter.obj" -@erase "$(INTDIR)\mod_ext_filter.res" -@erase "$(INTDIR)\mod_ext_filter_src.idb" -@erase "$(INTDIR)\mod_ext_filter_src.pdb" -@erase "$(OUTDIR)\mod_ext_filter.exp" -@erase "$(OUTDIR)\mod_ext_filter.lib" -@erase "$(OUTDIR)\mod_ext_filter.pdb" -@erase "$(OUTDIR)\mod_ext_filter.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_ext_filter_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_ext_filter.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_ext_filter.so" /d LONG_NAME="ext_filter_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_ext_filter.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_ext_filter.pdb" /debug /out:"$(OUTDIR)\mod_ext_filter.so" /implib:"$(OUTDIR)\mod_ext_filter.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_ext_filter.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_ext_filter.obj" \ "$(INTDIR)\mod_ext_filter.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_ext_filter.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_ext_filter.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_ext_filter.so" if exist .\Release\mod_ext_filter.so.manifest mt.exe -manifest .\Release\mod_ext_filter.so.manifest -outputresource:.\Release\mod_ext_filter.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_ext_filter - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_ext_filter.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_ext_filter.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_ext_filter.obj" -@erase "$(INTDIR)\mod_ext_filter.res" -@erase "$(INTDIR)\mod_ext_filter_src.idb" -@erase "$(INTDIR)\mod_ext_filter_src.pdb" -@erase "$(OUTDIR)\mod_ext_filter.exp" -@erase "$(OUTDIR)\mod_ext_filter.lib" -@erase "$(OUTDIR)\mod_ext_filter.pdb" -@erase "$(OUTDIR)\mod_ext_filter.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_ext_filter_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_ext_filter.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_ext_filter.so" /d LONG_NAME="ext_filter_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_ext_filter.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_ext_filter.pdb" /debug /out:"$(OUTDIR)\mod_ext_filter.so" /implib:"$(OUTDIR)\mod_ext_filter.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_ext_filter.so LINK32_OBJS= \ "$(INTDIR)\mod_ext_filter.obj" \ "$(INTDIR)\mod_ext_filter.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_ext_filter.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_ext_filter.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_ext_filter.so" if exist .\Debug\mod_ext_filter.so.manifest mt.exe -manifest .\Debug\mod_ext_filter.so.manifest -outputresource:.\Debug\mod_ext_filter.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_ext_filter.dep") !INCLUDE "mod_ext_filter.dep" !ELSE !MESSAGE Warning: cannot find "mod_ext_filter.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_ext_filter - Win32 Release" || "$(CFG)" == "mod_ext_filter - Win32 Debug" !IF "$(CFG)" == "mod_ext_filter - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_ext_filter - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_ext_filter - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_ext_filter - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_ext_filter - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_ext_filter - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_ext_filter - Win32 Release" "$(INTDIR)\mod_ext_filter.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_ext_filter.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_ext_filter.so" /d LONG_NAME="ext_filter_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_ext_filter - Win32 Debug" "$(INTDIR)\mod_ext_filter.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_ext_filter.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_ext_filter.so" /d LONG_NAME="ext_filter_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_ext_filter.c "$(INTDIR)\mod_ext_filter.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/filters/mod_proxy_html.c0000644000000000000500000014322613522234304017572 0ustar rootsrc/* Copyright (c) 2003-11, WebThing Ltd * Copyright (c) 2011-, The Apache Software Foundation * * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* GO_FASTER You can #define GO_FASTER to disable trace logging. */ #ifdef GO_FASTER #define VERBOSE(x) #define VERBOSEB(x) #else #define VERBOSE(x) if (verbose) x #define VERBOSEB(x) if (verbose) {x} #endif /* libxml2 includes unicode/[...].h files which uses C++ comments */ #if defined(__GNUC__) #if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6) #pragma GCC diagnostic push #pragma GCC diagnostic warning "-Wcomment" #endif #elif defined(__clang__) #pragma clang diagnostic push #pragma clang diagnostic warning "-Wcomment" #endif /* libxml2 */ #include #if defined(__GNUC__) #if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6) #pragma GCC diagnostic pop #endif #elif defined(__clang__) #pragma clang diagnostic pop #endif #include "http_protocol.h" #include "http_config.h" #include "http_log.h" #include "apr_strings.h" #include "apr_hash.h" #include "apr_strmatch.h" #include "apr_lib.h" #include "apr_optional.h" #include "mod_xml2enc.h" #include "http_request.h" #include "ap_expr.h" /* globals set once at startup */ static ap_rxplus_t *old_expr; static ap_regex_t *seek_meta; static const apr_strmatch_pattern* seek_content; static apr_status_t (*xml2enc_charset)(request_rec*, xmlCharEncoding*, const char**) = NULL; static apr_status_t (*xml2enc_filter)(request_rec*, const char*, unsigned int) = NULL; module AP_MODULE_DECLARE_DATA proxy_html_module; #define M_HTML 0x01 #define M_EVENTS 0x02 #define M_CDATA 0x04 #define M_REGEX 0x08 #define M_ATSTART 0x10 #define M_ATEND 0x20 #define M_LAST 0x40 #define M_NOTLAST 0x80 #define M_INTERPOLATE_TO 0x100 #define M_INTERPOLATE_FROM 0x200 typedef struct { const char *val; } tattr; typedef struct { unsigned int start; unsigned int end; } meta; typedef struct urlmap { struct urlmap *next; unsigned int flags; unsigned int regflags; union { const char *c; ap_regex_t *r; } from; const char *to; ap_expr_info_t *cond; } urlmap; typedef struct { urlmap *map; const char *doctype; const char *etag; unsigned int flags; size_t bufsz; apr_hash_t *links; apr_array_header_t *events; const char *charset_out; int extfix; int metafix; int strip_comments; int interp; int enabled; } proxy_html_conf; typedef struct { ap_filter_t *f; proxy_html_conf *cfg; htmlParserCtxtPtr parser; apr_bucket_brigade *bb; char *buf; size_t offset; size_t avail; const char *encoding; urlmap *map; char rbuf[4]; apr_size_t rlen; apr_size_t rmin; } saxctxt; #define NORM_LC 0x1 #define NORM_MSSLASH 0x2 #define NORM_RESET 0x4 static htmlSAXHandler sax; typedef enum { ATTR_IGNORE, ATTR_URI, ATTR_EVENT } rewrite_t; static const char *const fpi_html = "\n"; static const char *const fpi_html_legacy = "\n"; static const char *const fpi_xhtml = "\n"; static const char *const fpi_xhtml_legacy = "\n"; static const char *const fpi_html5 = "\n"; static const char *const html_etag = ">"; static const char *const xhtml_etag = " />"; /*#define DEFAULT_DOCTYPE fpi_html */ static const char *const DEFAULT_DOCTYPE = ""; #define DEFAULT_ETAG html_etag static void normalise(unsigned int flags, char *str) { char *p; if (flags & NORM_LC) for (p = str; *p; ++p) if (isupper(*p)) *p = tolower(*p); if (flags & NORM_MSSLASH) for (p = ap_strchr(str, '\\'); p; p = ap_strchr(p+1, '\\')) *p = '/'; } #define consume_buffer(ctx,inbuf,bytes,flag) \ htmlParseChunk(ctx->parser, inbuf, bytes, flag) #define AP_fwrite(ctx,inbuf,bytes,flush) \ ap_fwrite(ctx->f->next, ctx->bb, inbuf, bytes); /* This is always utf-8 on entry. We can convert charset within FLUSH */ #define FLUSH AP_fwrite(ctx, (chars+begin), (i-begin), 0); begin = i+1 static void pcharacters(void *ctxt, const xmlChar *uchars, int length) { const char *chars = (const char*) uchars; saxctxt *ctx = (saxctxt*) ctxt; int i; int begin; for (begin=i=0; if->next, ctx->bb, "&"); break; case '<' : FLUSH; ap_fputs(ctx->f->next, ctx->bb, "<"); break; case '>' : FLUSH; ap_fputs(ctx->f->next, ctx->bb, ">"); break; case '"' : FLUSH; ap_fputs(ctx->f->next, ctx->bb, """); break; default : break; } } FLUSH; } static void preserve(saxctxt *ctx, const size_t len) { char *newbuf; if (len <= (ctx->avail - ctx->offset)) return; else while (len > (ctx->avail - ctx->offset)) ctx->avail += ctx->cfg->bufsz; newbuf = realloc(ctx->buf, ctx->avail); if (newbuf != ctx->buf) { if (ctx->buf) apr_pool_cleanup_kill(ctx->f->r->pool, ctx->buf, (int(*)(void*))free); apr_pool_cleanup_register(ctx->f->r->pool, newbuf, (int(*)(void*))free, apr_pool_cleanup_null); ctx->buf = newbuf; } } static void pappend(saxctxt *ctx, const char *buf, const size_t len) { preserve(ctx, len); memcpy(ctx->buf+ctx->offset, buf, len); ctx->offset += len; } static void dump_content(saxctxt *ctx) { urlmap *m; char *found; size_t s_from, s_to; size_t match; char c = 0; int nmatch; ap_regmatch_t pmatch[10]; char *subs; size_t len, offs; urlmap *themap = ctx->map; #ifndef GO_FASTER int verbose = APLOGrtrace1(ctx->f->r); #endif pappend(ctx, &c, 1); /* append null byte */ /* parse the text for URLs */ for (m = themap; m; m = m->next) { if (!(m->flags & M_CDATA)) continue; if (m->flags & M_REGEX) { nmatch = 10; offs = 0; while (!ap_regexec(m->from.r, ctx->buf+offs, nmatch, pmatch, 0)) { match = pmatch[0].rm_so; s_from = pmatch[0].rm_eo - match; subs = ap_pregsub(ctx->f->r->pool, m->to, ctx->buf+offs, nmatch, pmatch); s_to = strlen(subs); len = strlen(ctx->buf); offs += match; VERBOSEB( const char *f = apr_pstrndup(ctx->f->r->pool, ctx->buf + offs, s_from); ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, ctx->f->r, "C/RX: match at %s, substituting %s", f, subs); ) if (s_to > s_from) { preserve(ctx, s_to - s_from); memmove(ctx->buf+offs+s_to, ctx->buf+offs+s_from, len + 1 - s_from - offs); memcpy(ctx->buf+offs, subs, s_to); } else { memcpy(ctx->buf + offs, subs, s_to); memmove(ctx->buf+offs+s_to, ctx->buf+offs+s_from, len + 1 - s_from - offs); } offs += s_to; } } else { s_from = strlen(m->from.c); s_to = strlen(m->to); for (found = strstr(ctx->buf, m->from.c); found; found = strstr(ctx->buf+match+s_to, m->from.c)) { match = found - ctx->buf; if ((m->flags & M_ATSTART) && (match != 0)) break; len = strlen(ctx->buf); if ((m->flags & M_ATEND) && (match < (len - s_from))) continue; VERBOSE(ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, ctx->f->r, "C: matched %s, substituting %s", m->from.c, m->to)); if (s_to > s_from) { preserve(ctx, s_to - s_from); memmove(ctx->buf+match+s_to, ctx->buf+match+s_from, len + 1 - s_from - match); memcpy(ctx->buf+match, m->to, s_to); } else { memcpy(ctx->buf+match, m->to, s_to); memmove(ctx->buf+match+s_to, ctx->buf+match+s_from, len + 1 - s_from - match); } } } } AP_fwrite(ctx, ctx->buf, strlen(ctx->buf), 1); } static void pcdata(void *ctxt, const xmlChar *uchars, int length) { const char *chars = (const char*) uchars; saxctxt *ctx = (saxctxt*) ctxt; if (ctx->cfg->extfix) { pappend(ctx, chars, length); } else { /* not sure if this should force-flush * (i.e. can one cdata section come in multiple calls?) */ AP_fwrite(ctx, chars, length, 0); } } static void pcomment(void *ctxt, const xmlChar *uchars) { const char *chars = (const char*) uchars; saxctxt *ctx = (saxctxt*) ctxt; if (ctx->cfg->strip_comments) return; if (ctx->cfg->extfix) { pappend(ctx, "", 3); } else { ap_fputs(ctx->f->next, ctx->bb, ""); dump_content(ctx); } } static void pendElement(void *ctxt, const xmlChar *uname) { saxctxt *ctx = (saxctxt*) ctxt; const char *name = (const char*) uname; const htmlElemDesc* desc = htmlTagLookup(uname); if ((ctx->cfg->doctype == fpi_html) || (ctx->cfg->doctype == fpi_xhtml)) { /* enforce html */ if (!desc || desc->depr) return; } else if ((ctx->cfg->doctype == fpi_html_legacy) || (ctx->cfg->doctype == fpi_xhtml_legacy)) { /* enforce html legacy */ if (!desc) return; } /* TODO - implement HTML "allowed here" using the stack */ /* nah. Keeping the stack is too much overhead */ if (ctx->offset > 0) { dump_content(ctx); ctx->offset = 0; /* having dumped it, we can re-use the memory */ } if (!desc || !desc->empty) { ap_fprintf(ctx->f->next, ctx->bb, "", name); } } static void pstartElement(void *ctxt, const xmlChar *uname, const xmlChar** uattrs) { int required_attrs; int num_match; size_t offs, len; char *subs; rewrite_t is_uri; const char** a; urlmap *m; size_t s_to, s_from, match; char *found; saxctxt *ctx = (saxctxt*) ctxt; size_t nmatch; ap_regmatch_t pmatch[10]; #ifndef GO_FASTER int verbose = APLOGrtrace1(ctx->f->r); #endif apr_array_header_t *linkattrs; int i; const char *name = (const char*) uname; const char** attrs = (const char**) uattrs; const htmlElemDesc* desc = htmlTagLookup(uname); urlmap *themap = ctx->map; #ifdef HAVE_STACK const void** descp; #endif int enforce = 0; if ((ctx->cfg->doctype == fpi_html) || (ctx->cfg->doctype == fpi_xhtml)) { /* enforce html */ if (!desc || desc->depr) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, ctx->f->r, APLOGNO(01416) "Bogus HTML element %s dropped", name); return; } enforce = 2; } else if ((ctx->cfg->doctype == fpi_html_legacy) || (ctx->cfg->doctype == fpi_xhtml_legacy)) { /* enforce html legacy */ if (!desc) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, ctx->f->r, APLOGNO(01417) "Deprecated HTML element %s dropped", name); return; } enforce = 1; } #ifdef HAVE_STACK descp = apr_array_push(ctx->stack); *descp = desc; /* TODO - implement HTML "allowed here" */ #endif ap_fputc(ctx->f->next, ctx->bb, '<'); ap_fputs(ctx->f->next, ctx->bb, name); required_attrs = 0; if ((enforce > 0) && (desc != NULL) && (desc->attrs_req != NULL)) for (a = desc->attrs_req; *a; a++) ++required_attrs; if (attrs) { linkattrs = apr_hash_get(ctx->cfg->links, name, APR_HASH_KEY_STRING); for (a = attrs; *a; a += 2) { if (desc && enforce > 0) { switch (htmlAttrAllowed(desc, (xmlChar*)*a, 2-enforce)) { case HTML_INVALID: ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, ctx->f->r, APLOGNO(01418) "Bogus HTML attribute %s of %s dropped", *a, name); continue; case HTML_DEPRECATED: ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, ctx->f->r, APLOGNO(01419) "Deprecated HTML attribute %s of %s dropped", *a, name); continue; case HTML_REQUIRED: required_attrs--; /* cross off the number still needed */ /* fallthrough - required implies valid */ default: break; } } ctx->offset = 0; if (a[1]) { pappend(ctx, a[1], strlen(a[1])+1); is_uri = ATTR_IGNORE; if (linkattrs) { tattr *attrs = (tattr*) linkattrs->elts; for (i=0; i < linkattrs->nelts; ++i) { if (!strcmp(*a, attrs[i].val)) { is_uri = ATTR_URI; break; } } } if ((is_uri == ATTR_IGNORE) && ctx->cfg->extfix && (ctx->cfg->events != NULL)) { for (i=0; i < ctx->cfg->events->nelts; ++i) { tattr *attrs = (tattr*) ctx->cfg->events->elts; if (!strcmp(*a, attrs[i].val)) { is_uri = ATTR_EVENT; break; } } } switch (is_uri) { case ATTR_URI: num_match = 0; for (m = themap; m; m = m->next) { if (!(m->flags & M_HTML)) continue; if (m->flags & M_REGEX) { nmatch = 10; if (!ap_regexec(m->from.r, ctx->buf, nmatch, pmatch, 0)) { ++num_match; offs = match = pmatch[0].rm_so; s_from = pmatch[0].rm_eo - match; subs = ap_pregsub(ctx->f->r->pool, m->to, ctx->buf, nmatch, pmatch); VERBOSE({ const char *f; f = apr_pstrndup(ctx->f->r->pool, ctx->buf + offs, s_from); ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, ctx->f->r, "H/RX: match at %s, substituting %s", f, subs); }) s_to = strlen(subs); len = strlen(ctx->buf); if (s_to > s_from) { preserve(ctx, s_to - s_from); memmove(ctx->buf+offs+s_to, ctx->buf+offs+s_from, len + 1 - s_from - offs); memcpy(ctx->buf+offs, subs, s_to); } else { memcpy(ctx->buf + offs, subs, s_to); memmove(ctx->buf+offs+s_to, ctx->buf+offs+s_from, len + 1 - s_from - offs); } } } else { s_from = strlen(m->from.c); if (!strncasecmp(ctx->buf, m->from.c, s_from)) { ++num_match; s_to = strlen(m->to); len = strlen(ctx->buf); VERBOSE(ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, ctx->f->r, "H: matched %s, substituting %s", m->from.c, m->to)); if (s_to > s_from) { preserve(ctx, s_to - s_from); memmove(ctx->buf+s_to, ctx->buf+s_from, len + 1 - s_from); memcpy(ctx->buf, m->to, s_to); } else { /* it fits in the existing space */ memcpy(ctx->buf, m->to, s_to); memmove(ctx->buf+s_to, ctx->buf+s_from, len + 1 - s_from); } break; } } /* URIs only want one match unless overridden in the config */ if ((num_match > 0) && !(m->flags & M_NOTLAST)) break; } break; case ATTR_EVENT: for (m = themap; m; m = m->next) { num_match = 0; /* reset here since we're working per-rule */ if (!(m->flags & M_EVENTS)) continue; if (m->flags & M_REGEX) { nmatch = 10; offs = 0; while (!ap_regexec(m->from.r, ctx->buf+offs, nmatch, pmatch, 0)) { match = pmatch[0].rm_so; s_from = pmatch[0].rm_eo - match; subs = ap_pregsub(ctx->f->r->pool, m->to, ctx->buf+offs, nmatch, pmatch); VERBOSE({ const char *f; f = apr_pstrndup(ctx->f->r->pool, ctx->buf + offs, s_from); ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, ctx->f->r, "E/RX: match at %s, substituting %s", f, subs); }) s_to = strlen(subs); offs += match; len = strlen(ctx->buf); if (s_to > s_from) { preserve(ctx, s_to - s_from); memmove(ctx->buf+offs+s_to, ctx->buf+offs+s_from, len + 1 - s_from - offs); memcpy(ctx->buf+offs, subs, s_to); } else { memcpy(ctx->buf + offs, subs, s_to); memmove(ctx->buf+offs+s_to, ctx->buf+offs+s_from, len + 1 - s_from - offs); } offs += s_to; ++num_match; } } else { found = strstr(ctx->buf, m->from.c); if ((m->flags & M_ATSTART) && (found != ctx->buf)) continue; while (found) { s_from = strlen(m->from.c); s_to = strlen(m->to); match = found - ctx->buf; if ((s_from < strlen(found)) && (m->flags & M_ATEND)) { found = strstr(ctx->buf+match+s_from, m->from.c); continue; } else { found = strstr(ctx->buf+match+s_to, m->from.c); } VERBOSE(ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, ctx->f->r, "E: matched %s, substituting %s", m->from.c, m->to)); len = strlen(ctx->buf); if (s_to > s_from) { preserve(ctx, s_to - s_from); memmove(ctx->buf+match+s_to, ctx->buf+match+s_from, len + 1 - s_from - match); memcpy(ctx->buf+match, m->to, s_to); } else { memcpy(ctx->buf+match, m->to, s_to); memmove(ctx->buf+match+s_to, ctx->buf+match+s_from, len + 1 - s_from - match); } ++num_match; } } if (num_match && (m->flags & M_LAST)) break; } break; case ATTR_IGNORE: break; } } if (!a[1]) ap_fputstrs(ctx->f->next, ctx->bb, " ", a[0], NULL); else { if (ctx->cfg->flags != 0) normalise(ctx->cfg->flags, ctx->buf); /* write the attribute, using pcharacters to html-escape anything that needs it in the value. */ ap_fputstrs(ctx->f->next, ctx->bb, " ", a[0], "=\"", NULL); pcharacters(ctx, (const xmlChar*)ctx->buf, strlen(ctx->buf)); ap_fputc(ctx->f->next, ctx->bb, '"'); } } } ctx->offset = 0; if (desc && desc->empty) ap_fputs(ctx->f->next, ctx->bb, ctx->cfg->etag); else ap_fputc(ctx->f->next, ctx->bb, '>'); if ((enforce > 0) && (required_attrs > 0)) { /* if there are more required attributes than we found then complain */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, ctx->f->r, APLOGNO(01420) "HTML element %s is missing %d required attributes", name, required_attrs); } } static meta *metafix(request_rec *r, const char *buf, apr_size_t len) { meta *ret = NULL; size_t offs = 0; const char *p; const char *q; char *header; char *content; ap_regmatch_t pmatch[2]; char delim; while (offs < len && !ap_regexec_len(seek_meta, buf + offs, len - offs, 2, pmatch, 0)) { header = NULL; content = NULL; p = buf+offs+pmatch[1].rm_eo; while (!apr_isalpha(*++p)); for (q = p; apr_isalnum(*q) || (*q == '-'); ++q); header = apr_pstrmemdup(r->pool, p, q-p); if (strncasecmp(header, "Content-", 8)) { /* find content=... string */ p = apr_strmatch(seek_content, buf+offs+pmatch[0].rm_so, pmatch[0].rm_eo - pmatch[0].rm_so); /* if it doesn't contain "content", ignore, don't crash! */ if (p != NULL) { while (*p) { p += 7; while (apr_isspace(*p)) ++p; /* XXX Should we search for another content= pattern? */ if (*p != '=') break; while (*p && apr_isspace(*++p)); if ((*p == '\'') || (*p == '"')) { delim = *p++; for (q = p; *q && *q != delim; ++q); /* No terminating delimiter found? Skip the boggus directive */ if (*q != delim) break; } else { for (q = p; *q && !apr_isspace(*q) && (*q != '>'); ++q); } content = apr_pstrmemdup(r->pool, p, q-p); break; } } } else if (!strncasecmp(header, "Content-Type", 12)) { ret = apr_palloc(r->pool, sizeof(meta)); ret->start = offs+pmatch[0].rm_so; ret->end = offs+pmatch[0].rm_eo; } if (header && content) { #ifndef GO_FASTER ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "Adding header [%s: %s] from HTML META", header, content); #endif apr_table_setn(r->headers_out, header, content); } offs += pmatch[0].rm_eo; } return ret; } static const char *interpolate_vars(request_rec *r, const char *str) { const char *start; const char *end; const char *delim; const char *before; const char *after; const char *replacement; const char *var; for (;;) { if ((start = ap_strstr_c(str, "${")) == NULL) break; if ((end = ap_strchr_c(start+2, '}')) == NULL) break; delim = ap_strchr_c(start+2, '|'); /* Restrict delim to ${...} */ if (delim && delim >= end) { delim = NULL; } before = apr_pstrmemdup(r->pool, str, start-str); after = end+1; if (delim) { var = apr_pstrmemdup(r->pool, start+2, delim-start-2); } else { var = apr_pstrmemdup(r->pool, start+2, end-start-2); } replacement = apr_table_get(r->subprocess_env, var); if (!replacement) { if (delim) replacement = apr_pstrmemdup(r->pool, delim+1, end-delim-1); else replacement = ""; } str = apr_pstrcat(r->pool, before, replacement, after, NULL); ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Interpolating %s => %s", var, replacement); } return str; } static void fixup_rules(saxctxt *ctx) { urlmap *newp; urlmap *p; urlmap *prev = NULL; request_rec *r = ctx->f->r; for (p = ctx->cfg->map; p; p = p->next) { if (p->cond != NULL) { const char *err; int ok = ap_expr_exec(r, p->cond, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01421) "Error evaluating expr: %s", err); } if (ok == 0) { continue; /* condition is unsatisfied */ } } newp = apr_pmemdup(r->pool, p, sizeof(urlmap)); if (newp->flags & M_INTERPOLATE_FROM) { newp->from.c = interpolate_vars(r, newp->from.c); if (!newp->from.c || !*newp->from.c) continue; /* don't use empty from-pattern */ if (newp->flags & M_REGEX) { newp->from.r = ap_pregcomp(r->pool, newp->from.c, newp->regflags); } } if (newp->flags & M_INTERPOLATE_TO) { newp->to = interpolate_vars(r, newp->to); } /* evaluate p->cond; continue if unsatisfied */ /* create new urlmap with memcpy and append to map */ /* interpolate from if flagged to do so */ /* interpolate to if flagged to do so */ if (prev != NULL) prev->next = newp; else ctx->map = newp; prev = newp; } if (prev) prev->next = NULL; } static saxctxt *check_filter_init (ap_filter_t *f) { saxctxt *fctx; if (!f->ctx) { proxy_html_conf *cfg; const char *force; const char *errmsg = NULL; cfg = ap_get_module_config(f->r->per_dir_config, &proxy_html_module); force = apr_table_get(f->r->subprocess_env, "PROXY_HTML_FORCE"); if (!force) { if (!f->r->proxyreq) { errmsg = "Non-proxy request; not inserting proxy-html filter"; } else if (!f->r->content_type) { errmsg = "No content-type; bailing out of proxy-html filter"; } else if (strncasecmp(f->r->content_type, "text/html", 9) && strncasecmp(f->r->content_type, "application/xhtml+xml", 21)) { errmsg = "Non-HTML content; not inserting proxy-html filter"; } } if (!cfg->links) { errmsg = "No links configured: nothing for proxy-html filter to do"; } if (errmsg) { #ifndef GO_FASTER ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, f->r, "%s", errmsg); #endif ap_remove_output_filter(f); return NULL; } fctx = f->ctx = apr_pcalloc(f->r->pool, sizeof(saxctxt)); fctx->f = f; fctx->bb = apr_brigade_create(f->r->pool, f->r->connection->bucket_alloc); fctx->cfg = cfg; apr_table_unset(f->r->headers_out, "Content-Length"); if (cfg->interp) fixup_rules(fctx); else fctx->map = cfg->map; /* defer dealing with charset_out until after sniffing charset_in * so we can support setting one to t'other. */ } return f->ctx; } static void prepend_rbuf(saxctxt *ctxt, apr_bucket_brigade *bb) { if (ctxt->rlen) { apr_bucket *b = apr_bucket_transient_create(ctxt->rbuf, ctxt->rlen, bb->bucket_alloc); APR_BRIGADE_INSERT_HEAD(bb, b); ctxt->rlen = 0; } } static apr_status_t proxy_html_filter(ap_filter_t *f, apr_bucket_brigade *bb) { apr_bucket* b; meta *m = NULL; xmlCharEncoding enc; const char *buf = 0; apr_size_t bytes = 0; #ifndef USE_OLD_LIBXML2 int xmlopts = XML_PARSE_RECOVER | XML_PARSE_NONET | XML_PARSE_NOBLANKS | XML_PARSE_NOERROR | XML_PARSE_NOWARNING; #endif saxctxt *ctxt = check_filter_init(f); if (!ctxt) return ap_pass_brigade(f->next, bb); for (b = APR_BRIGADE_FIRST(bb); b != APR_BRIGADE_SENTINEL(bb); b = APR_BUCKET_NEXT(b)) { if (APR_BUCKET_IS_METADATA(b)) { if (APR_BUCKET_IS_EOS(b)) { if (ctxt->parser != NULL) { consume_buffer(ctxt, "", 0, 1); } else { prepend_rbuf(ctxt, ctxt->bb); } APR_BRIGADE_INSERT_TAIL(ctxt->bb, apr_bucket_eos_create(ctxt->bb->bucket_alloc)); ap_pass_brigade(ctxt->f->next, ctxt->bb); apr_brigade_cleanup(ctxt->bb); } else if (APR_BUCKET_IS_FLUSH(b)) { /* pass on flush, except at start where it would cause * headers to be sent before doc sniffing */ if (ctxt->parser != NULL) { ap_fflush(ctxt->f->next, ctxt->bb); } } } else if (apr_bucket_read(b, &buf, &bytes, APR_BLOCK_READ) == APR_SUCCESS) { if (ctxt->parser == NULL) { const char *cenc; /* For documents smaller than four bytes, there is no reason to do * HTML rewriting. The URL schema (i.e. 'http') needs four bytes alone. * And the HTML parser needs at least four bytes to initialise correctly. */ ctxt->rmin += bytes; if (ctxt->rmin < sizeof(ctxt->rbuf)) { memcpy(ctxt->rbuf + ctxt->rlen, buf, bytes); ctxt->rlen += bytes; continue; } if (ctxt->rlen && ctxt->rlen < sizeof(ctxt->rbuf)) { apr_size_t rem = sizeof(ctxt->rbuf) - ctxt->rlen; memcpy(ctxt->rbuf + ctxt->rlen, buf, rem); ctxt->rlen += rem; buf += rem; bytes -= rem; } if (!xml2enc_charset || (xml2enc_charset(f->r, &enc, &cenc) != APR_SUCCESS)) { if (!xml2enc_charset) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, f->r, APLOGNO(01422) "No i18n support found. Install mod_xml2enc if required"); enc = XML_CHAR_ENCODING_NONE; ap_set_content_type(f->r, "text/html;charset=utf-8"); } else { /* if we wanted a non-default charset_out, insert the * xml2enc filter now that we've sniffed it */ if (ctxt->cfg->charset_out && xml2enc_filter) { if (*ctxt->cfg->charset_out != '*') cenc = ctxt->cfg->charset_out; xml2enc_filter(f->r, cenc, ENCIO_OUTPUT); ap_set_content_type(f->r, apr_pstrcat(f->r->pool, "text/html;charset=", cenc, NULL)); } else /* Normal case, everything worked, utf-8 output */ ap_set_content_type(f->r, "text/html;charset=utf-8"); } ap_fputs(f->next, ctxt->bb, ctxt->cfg->doctype); if (ctxt->rlen) { ctxt->parser = htmlCreatePushParserCtxt(&sax, ctxt, ctxt->rbuf, ctxt->rlen, NULL, enc); } else { ctxt->parser = htmlCreatePushParserCtxt(&sax, ctxt, buf, 4, NULL, enc); buf += 4; bytes -= 4; } if (ctxt->parser == NULL) { prepend_rbuf(ctxt, bb); ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } ctxt->rlen = 0; apr_pool_cleanup_register(f->r->pool, ctxt->parser, (int(*)(void*))htmlFreeParserCtxt, apr_pool_cleanup_null); #ifndef USE_OLD_LIBXML2 if (xmlopts = xmlCtxtUseOptions(ctxt->parser, xmlopts), xmlopts) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, f->r, APLOGNO(01423) "Unsupported parser opts %x", xmlopts); #endif if (ctxt->cfg->metafix) m = metafix(f->r, buf, bytes); if (m) { consume_buffer(ctxt, buf, m->start, 0); consume_buffer(ctxt, buf+m->end, bytes-m->end, 0); } else { consume_buffer(ctxt, buf, bytes, 0); } } else { consume_buffer(ctxt, buf, bytes, 0); } } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, f->r, APLOGNO(01424) "Error in bucket read"); } } /*ap_fflush(ctxt->f->next, ctxt->bb); // uncomment for debug */ apr_brigade_cleanup(bb); return APR_SUCCESS; } static void *proxy_html_config(apr_pool_t *pool, char *x) { proxy_html_conf *ret = apr_pcalloc(pool, sizeof(proxy_html_conf)); ret->doctype = DEFAULT_DOCTYPE; ret->etag = DEFAULT_ETAG; ret->bufsz = 8192; /* ret->interp = 1; */ /* don't initialise links and events until they get set/used */ return ret; } static void *proxy_html_merge(apr_pool_t *pool, void *BASE, void *ADD) { proxy_html_conf *base = (proxy_html_conf *) BASE; proxy_html_conf *add = (proxy_html_conf *) ADD; proxy_html_conf *conf = apr_palloc(pool, sizeof(proxy_html_conf)); /* don't merge declarations - just use the most specific */ conf->links = (add->links == NULL) ? base->links : add->links; conf->events = (add->events == NULL) ? base->events : add->events; conf->charset_out = (add->charset_out == NULL) ? base->charset_out : add->charset_out; if (add->map && base->map) { urlmap *a; conf->map = NULL; for (a = base->map; a; a = a->next) { urlmap *save = conf->map; conf->map = apr_pmemdup(pool, a, sizeof(urlmap)); conf->map->next = save; } for (a = add->map; a; a = a->next) { urlmap *save = conf->map; conf->map = apr_pmemdup(pool, a, sizeof(urlmap)); conf->map->next = save; } } else conf->map = add->map ? add->map : base->map; conf->doctype = (add->doctype == DEFAULT_DOCTYPE) ? base->doctype : add->doctype; conf->etag = (add->etag == DEFAULT_ETAG) ? base->etag : add->etag; conf->bufsz = add->bufsz; if (add->flags & NORM_RESET) { conf->flags = add->flags ^ NORM_RESET; conf->metafix = add->metafix; conf->extfix = add->extfix; conf->interp = add->interp; conf->strip_comments = add->strip_comments; conf->enabled = add->enabled; } else { conf->flags = base->flags | add->flags; conf->metafix = base->metafix | add->metafix; conf->extfix = base->extfix | add->extfix; conf->interp = base->interp | add->interp; conf->strip_comments = base->strip_comments | add->strip_comments; conf->enabled = add->enabled | base->enabled; } return conf; } #define REGFLAG(n,s,c) ((s&&(ap_strchr_c((s),(c))!=NULL)) ? (n) : 0) #define XREGFLAG(n,s,c) ((!s||(ap_strchr_c((s),(c))==NULL)) ? (n) : 0) static const char *comp_urlmap(cmd_parms *cmd, urlmap *newmap, const char *from, const char *to, const char *flags, const char *cond) { const char *err = NULL; newmap->flags = XREGFLAG(M_HTML,flags,'h') | XREGFLAG(M_EVENTS,flags,'e') | XREGFLAG(M_CDATA,flags,'c') | REGFLAG(M_ATSTART,flags,'^') | REGFLAG(M_ATEND,flags,'$') | REGFLAG(M_REGEX,flags,'R') | REGFLAG(M_LAST,flags,'L') | REGFLAG(M_NOTLAST,flags,'l') | REGFLAG(M_INTERPOLATE_TO,flags,'V') | REGFLAG(M_INTERPOLATE_FROM,flags,'v'); if ((newmap->flags & M_INTERPOLATE_FROM) || !(newmap->flags & M_REGEX)) { newmap->from.c = from; newmap->to = to; } else { newmap->regflags = REGFLAG(AP_REG_EXTENDED,flags,'x') | REGFLAG(AP_REG_ICASE,flags,'i') | REGFLAG(AP_REG_NOSUB,flags,'n') | REGFLAG(AP_REG_NEWLINE,flags,'s'); newmap->from.r = ap_pregcomp(cmd->pool, from, newmap->regflags); newmap->to = to; } if (cond != NULL) { /* back-compatibility: support old-style ENV expressions * by converting to ap_expr syntax. * * 1. var --> env(var) * 2. var=val --> env(var)=val * 3. !var --> !env(var) * 4. !var=val --> env(var)!=val */ char *newcond = NULL; if (ap_rxplus_exec(cmd->temp_pool, old_expr, cond, &newcond)) { /* we got a substitution. Check for the case (3) above * that the regexp gets wrong: a negation without a comparison. */ if ((cond[0] == '!') && !ap_strchr_c(cond, '=')) { memmove(newcond+1, newcond, strlen(newcond)-1); newcond[0] = '!'; } cond = newcond; } newmap->cond = ap_expr_parse_cmd(cmd, cond, 0, &err, NULL); } else { newmap->cond = NULL; } return err; } static const char *set_urlmap(cmd_parms *cmd, void *CFG, const char *args) { proxy_html_conf *cfg = (proxy_html_conf *)CFG; urlmap *map; apr_pool_t *pool = cmd->pool; urlmap *newmap; const char *usage = "Usage: ProxyHTMLURLMap from-pattern to-pattern [flags] [cond]"; const char *from; const char *to; const char *flags; const char *cond = NULL; if (from = ap_getword_conf(cmd->pool, &args), !from) return usage; if (to = ap_getword_conf(cmd->pool, &args), !to) return usage; flags = ap_getword_conf(cmd->pool, &args); if (flags && *flags) cond = ap_getword_conf(cmd->pool, &args); if (cond && !*cond) cond = NULL; /* the args look OK, so let's use them */ newmap = apr_palloc(pool, sizeof(urlmap)); newmap->next = NULL; if (cfg->map) { for (map = cfg->map; map->next; map = map->next); map->next = newmap; } else cfg->map = newmap; return comp_urlmap(cmd, newmap, from, to, flags, cond); } static const char *set_doctype(cmd_parms *cmd, void *CFG, const char *t, const char *l) { proxy_html_conf *cfg = (proxy_html_conf *)CFG; if (!strcasecmp(t, "xhtml")) { cfg->etag = xhtml_etag; if (l && !strcasecmp(l, "legacy")) cfg->doctype = fpi_xhtml_legacy; else cfg->doctype = fpi_xhtml; } else if (!strcasecmp(t, "html")) { cfg->etag = html_etag; if (l && !strcasecmp(l, "legacy")) cfg->doctype = fpi_html_legacy; else cfg->doctype = fpi_html; } else if (!strcasecmp(t, "html5")) { cfg->etag = html_etag; cfg->doctype = fpi_html5; } else { cfg->doctype = t; if (l && ((l[0] == 'x') || (l[0] == 'X'))) cfg->etag = xhtml_etag; else cfg->etag = html_etag; } return NULL; } static const char *set_flags(cmd_parms *cmd, void *CFG, const char *arg) { proxy_html_conf *cfg = CFG; if (arg && *arg) { if (!strcasecmp(arg, "lowercase")) cfg->flags |= NORM_LC; else if (!strcasecmp(arg, "dospath")) cfg->flags |= NORM_MSSLASH; else if (!strcasecmp(arg, "reset")) cfg->flags |= NORM_RESET; } return NULL; } static const char *set_events(cmd_parms *cmd, void *CFG, const char *arg) { tattr *attr; proxy_html_conf *cfg = CFG; if (cfg->events == NULL) cfg->events = apr_array_make(cmd->pool, 20, sizeof(tattr)); attr = apr_array_push(cfg->events); attr->val = arg; return NULL; } static const char *set_links(cmd_parms *cmd, void *CFG, const char *elt, const char *att) { apr_array_header_t *attrs; tattr *attr; proxy_html_conf *cfg = CFG; if (cfg->links == NULL) cfg->links = apr_hash_make(cmd->pool); attrs = apr_hash_get(cfg->links, elt, APR_HASH_KEY_STRING); if (!attrs) { attrs = apr_array_make(cmd->pool, 2, sizeof(tattr*)); apr_hash_set(cfg->links, elt, APR_HASH_KEY_STRING, attrs); } attr = apr_array_push(attrs); attr->val = att; return NULL; } static const command_rec proxy_html_cmds[] = { AP_INIT_ITERATE("ProxyHTMLEvents", set_events, NULL, RSRC_CONF|ACCESS_CONF, "Strings to be treated as scripting events"), AP_INIT_ITERATE2("ProxyHTMLLinks", set_links, NULL, RSRC_CONF|ACCESS_CONF, "Declare HTML Attributes"), AP_INIT_RAW_ARGS("ProxyHTMLURLMap", set_urlmap, NULL, RSRC_CONF|ACCESS_CONF, "Map URL From To"), AP_INIT_TAKE12("ProxyHTMLDoctype", set_doctype, NULL, RSRC_CONF|ACCESS_CONF, "(HTML|XHTML) [Legacy]"), AP_INIT_ITERATE("ProxyHTMLFixups", set_flags, NULL, RSRC_CONF|ACCESS_CONF, "Options are lowercase, dospath"), AP_INIT_FLAG("ProxyHTMLMeta", ap_set_flag_slot, (void*)APR_OFFSETOF(proxy_html_conf, metafix), RSRC_CONF|ACCESS_CONF, "Fix META http-equiv elements"), AP_INIT_FLAG("ProxyHTMLInterp", ap_set_flag_slot, (void*)APR_OFFSETOF(proxy_html_conf, interp), RSRC_CONF|ACCESS_CONF, "Support interpolation and conditions in URLMaps"), AP_INIT_FLAG("ProxyHTMLExtended", ap_set_flag_slot, (void*)APR_OFFSETOF(proxy_html_conf, extfix), RSRC_CONF|ACCESS_CONF, "Map URLs in Javascript and CSS"), AP_INIT_FLAG("ProxyHTMLStripComments", ap_set_flag_slot, (void*)APR_OFFSETOF(proxy_html_conf, strip_comments), RSRC_CONF|ACCESS_CONF, "Strip out comments"), AP_INIT_TAKE1("ProxyHTMLBufSize", ap_set_int_slot, (void*)APR_OFFSETOF(proxy_html_conf, bufsz), RSRC_CONF|ACCESS_CONF, "Buffer size"), AP_INIT_TAKE1("ProxyHTMLCharsetOut", ap_set_string_slot, (void*)APR_OFFSETOF(proxy_html_conf, charset_out), RSRC_CONF|ACCESS_CONF, "Usage: ProxyHTMLCharsetOut charset"), AP_INIT_FLAG("ProxyHTMLEnable", ap_set_flag_slot, (void*)APR_OFFSETOF(proxy_html_conf, enabled), RSRC_CONF|ACCESS_CONF, "Enable proxy-html and xml2enc filters"), { NULL } }; static int mod_proxy_html(apr_pool_t *p, apr_pool_t *p1, apr_pool_t *p2) { seek_meta = ap_pregcomp(p, "]*(http-equiv)[^>]*>", AP_REG_EXTENDED|AP_REG_ICASE); seek_content = apr_strmatch_precompile(p, "content", 0); memset(&sax, 0, sizeof(htmlSAXHandler)); sax.startElement = pstartElement; sax.endElement = pendElement; sax.characters = pcharacters; sax.comment = pcomment; sax.cdataBlock = pcdata; xml2enc_charset = APR_RETRIEVE_OPTIONAL_FN(xml2enc_charset); xml2enc_filter = APR_RETRIEVE_OPTIONAL_FN(xml2enc_filter); if (!xml2enc_charset) { ap_log_perror(APLOG_MARK, APLOG_NOTICE, 0, p2, APLOGNO(01425) "I18n support in mod_proxy_html requires mod_xml2enc. " "Without it, non-ASCII characters in proxied pages are " "likely to display incorrectly."); } /* old_expr only needs to last the life of the config phase */ old_expr = ap_rxplus_compile(p1, "s/^(!)?(\\w+)((=)(.+))?$/reqenv('$2')$1$4'$5'/"); return OK; } static void proxy_html_insert(request_rec *r) { proxy_html_conf *cfg; cfg = ap_get_module_config(r->per_dir_config, &proxy_html_module); if (cfg->enabled) { if (xml2enc_filter) xml2enc_filter(r, NULL, ENCIO_INPUT_CHECKS); ap_add_output_filter("proxy-html", NULL, r, r->connection); } } static void proxy_html_hooks(apr_pool_t *p) { static const char *aszSucc[] = { "mod_filter.c", NULL }; ap_register_output_filter_protocol("proxy-html", proxy_html_filter, NULL, AP_FTYPE_RESOURCE, AP_FILTER_PROTO_CHANGE|AP_FILTER_PROTO_CHANGE_LENGTH); /* move this to pre_config so old_expr is available to interpret * old-style conditions on URL maps. */ ap_hook_pre_config(mod_proxy_html, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_insert_filter(proxy_html_insert, NULL, aszSucc, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(proxy_html) = { STANDARD20_MODULE_STUFF, proxy_html_config, proxy_html_merge, NULL, NULL, proxy_html_cmds, proxy_html_hooks }; httpd-2.4.41/modules/filters/NWGNUreqtimeout0000644000000000000500000001026211540546347017326 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = reqtimeout # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Request Timeout Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_reqtimeout.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ reqtimeout_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/filters/mod_include.mak0000644000000000000500000002347112701473373017346 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_include.dsp !IF "$(CFG)" == "" CFG=mod_include - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_include - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_include - Win32 Release" && "$(CFG)" != "mod_include - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_include.mak" CFG="mod_include - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_include - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_include - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_include - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_include.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_include.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_include.obj" -@erase "$(INTDIR)\mod_include.res" -@erase "$(INTDIR)\mod_include_src.idb" -@erase "$(INTDIR)\mod_include_src.pdb" -@erase "$(OUTDIR)\mod_include.exp" -@erase "$(OUTDIR)\mod_include.lib" -@erase "$(OUTDIR)\mod_include.pdb" -@erase "$(OUTDIR)\mod_include.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_include_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_include.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_include.so" /d LONG_NAME="include_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_include.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_include.pdb" /debug /out:"$(OUTDIR)\mod_include.so" /implib:"$(OUTDIR)\mod_include.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_include.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_include.obj" \ "$(INTDIR)\mod_include.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_include.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_include.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_include.so" if exist .\Release\mod_include.so.manifest mt.exe -manifest .\Release\mod_include.so.manifest -outputresource:.\Release\mod_include.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_include - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_include.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_include.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_include.obj" -@erase "$(INTDIR)\mod_include.res" -@erase "$(INTDIR)\mod_include_src.idb" -@erase "$(INTDIR)\mod_include_src.pdb" -@erase "$(OUTDIR)\mod_include.exp" -@erase "$(OUTDIR)\mod_include.lib" -@erase "$(OUTDIR)\mod_include.pdb" -@erase "$(OUTDIR)\mod_include.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_include_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_include.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_include.so" /d LONG_NAME="include_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_include.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_include.pdb" /debug /out:"$(OUTDIR)\mod_include.so" /implib:"$(OUTDIR)\mod_include.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_include.so LINK32_OBJS= \ "$(INTDIR)\mod_include.obj" \ "$(INTDIR)\mod_include.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_include.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_include.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_include.so" if exist .\Debug\mod_include.so.manifest mt.exe -manifest .\Debug\mod_include.so.manifest -outputresource:.\Debug\mod_include.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_include.dep") !INCLUDE "mod_include.dep" !ELSE !MESSAGE Warning: cannot find "mod_include.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_include - Win32 Release" || "$(CFG)" == "mod_include - Win32 Debug" !IF "$(CFG)" == "mod_include - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_include - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_include - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_include - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_include - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_include - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_include - Win32 Release" "$(INTDIR)\mod_include.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_include.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_include.so" /d LONG_NAME="include_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_include - Win32 Debug" "$(INTDIR)\mod_include.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_include.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_include.so" /d LONG_NAME="include_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_include.c "$(INTDIR)\mod_include.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/filters/.indent.pro0000644000000000000500000000127510150161574016442 0ustar rootsrc-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int httpd-2.4.41/modules/filters/NWGNUsubstitute0000644000000000000500000001026211540546347017343 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = substitute # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Substitute Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Substitute Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/substitute.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_substitute.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ substitute_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/filters/mod_ext_filter.dsp0000644000000000000500000001075310674443511020103 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_ext_filter" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_ext_filter - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_ext_filter.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_ext_filter.mak" CFG="mod_ext_filter - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_ext_filter - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_ext_filter - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_ext_filter - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_ext_filter_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_ext_filter.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_ext_filter.so" /d LONG_NAME="ext_filter_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_ext_filter.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ext_filter.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_ext_filter.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ext_filter.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_ext_filter.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_ext_filter - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_ext_filter_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_ext_filter.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_ext_filter.so" /d LONG_NAME="ext_filter_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_ext_filter.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ext_filter.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_ext_filter.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ext_filter.so # Begin Special Build Tool TargetPath=.\Debug\mod_ext_filter.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_ext_filter - Win32 Release" # Name "mod_ext_filter - Win32 Debug" # Begin Source File SOURCE=.\mod_ext_filter.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/filters/mod_sed.mak0000644000000000000500000002376512701473373016504 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_sed.dsp !IF "$(CFG)" == "" CFG=mod_sed - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_sed - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_sed - Win32 Release" && "$(CFG)" != "mod_sed - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_sed.mak" CFG="mod_sed - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_sed - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_sed - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_sed - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_sed.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_sed.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_sed.obj" -@erase "$(INTDIR)\mod_sed.res" -@erase "$(INTDIR)\mod_sed_src.idb" -@erase "$(INTDIR)\mod_sed_src.pdb" -@erase "$(INTDIR)\regexp.obj" -@erase "$(INTDIR)\sed0.obj" -@erase "$(INTDIR)\sed1.obj" -@erase "$(OUTDIR)\mod_sed.exp" -@erase "$(OUTDIR)\mod_sed.lib" -@erase "$(OUTDIR)\mod_sed.pdb" -@erase "$(OUTDIR)\mod_sed.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_sed_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_sed.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_sed.so" /d LONG_NAME="sed_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_sed.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_sed.pdb" /debug /out:"$(OUTDIR)\mod_sed.so" /implib:"$(OUTDIR)\mod_sed.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_sed.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_sed.obj" \ "$(INTDIR)\regexp.obj" \ "$(INTDIR)\sed0.obj" \ "$(INTDIR)\sed1.obj" \ "$(INTDIR)\mod_sed.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_sed.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_sed.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_sed.so" if exist .\Release\mod_sed.so.manifest mt.exe -manifest .\Release\mod_sed.so.manifest -outputresource:.\Release\mod_sed.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_sed - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_sed.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_sed.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_sed.obj" -@erase "$(INTDIR)\mod_sed.res" -@erase "$(INTDIR)\mod_sed_src.idb" -@erase "$(INTDIR)\mod_sed_src.pdb" -@erase "$(INTDIR)\regexp.obj" -@erase "$(INTDIR)\sed0.obj" -@erase "$(INTDIR)\sed1.obj" -@erase "$(OUTDIR)\mod_sed.exp" -@erase "$(OUTDIR)\mod_sed.lib" -@erase "$(OUTDIR)\mod_sed.pdb" -@erase "$(OUTDIR)\mod_sed.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_sed_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_sed.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_sed.so" /d LONG_NAME="sed_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_sed.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_sed.pdb" /debug /out:"$(OUTDIR)\mod_sed.so" /implib:"$(OUTDIR)\mod_sed.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_sed.so LINK32_OBJS= \ "$(INTDIR)\mod_sed.obj" \ "$(INTDIR)\regexp.obj" \ "$(INTDIR)\sed0.obj" \ "$(INTDIR)\sed1.obj" \ "$(INTDIR)\mod_sed.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_sed.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_sed.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_sed.so" if exist .\Debug\mod_sed.so.manifest mt.exe -manifest .\Debug\mod_sed.so.manifest -outputresource:.\Debug\mod_sed.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_sed.dep") !INCLUDE "mod_sed.dep" !ELSE !MESSAGE Warning: cannot find "mod_sed.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_sed - Win32 Release" || "$(CFG)" == "mod_sed - Win32 Debug" !IF "$(CFG)" == "mod_sed - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_sed - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_sed - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_sed - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_sed - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_sed - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_sed - Win32 Release" "$(INTDIR)\mod_sed.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_sed.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_sed.so" /d LONG_NAME="sed_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_sed - Win32 Debug" "$(INTDIR)\mod_sed.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_sed.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_sed.so" /d LONG_NAME="sed_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_sed.c "$(INTDIR)\mod_sed.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\regexp.c "$(INTDIR)\regexp.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\sed0.c "$(INTDIR)\sed0.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\sed1.c "$(INTDIR)\sed1.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/filters/mod_deflate.c0000644000000000000500000021351313441675764017011 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_deflate.c: Perform deflate content-encoding on the fly * * Written by Ian Holsman, Justin Erenkrantz, and Nick Kew */ /* * Portions of this software are based upon zlib code by Jean-loup Gailly * (zlib functions gz_open and gzwrite, check_header) */ /* zlib flags */ #define ASCII_FLAG 0x01 /* bit 0 set: file probably ascii text */ #define HEAD_CRC 0x02 /* bit 1 set: header CRC present */ #define EXTRA_FIELD 0x04 /* bit 2 set: extra field present */ #define ORIG_NAME 0x08 /* bit 3 set: original file name present */ #define COMMENT 0x10 /* bit 4 set: file comment present */ #define RESERVED 0xE0 /* bits 5..7: reserved */ #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_core.h" #include "apr_lib.h" #include "apr_strings.h" #include "apr_general.h" #include "util_filter.h" #include "apr_buckets.h" #include "http_request.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "mod_ssl.h" #include "zlib.h" static const char deflateFilterName[] = "DEFLATE"; module AP_MODULE_DECLARE_DATA deflate_module; #define AP_INFLATE_RATIO_LIMIT 200 #define AP_INFLATE_RATIO_BURST 3 typedef struct deflate_filter_config_t { int windowSize; int memlevel; int compressionlevel; apr_size_t bufferSize; const char *note_ratio_name; const char *note_input_name; const char *note_output_name; } deflate_filter_config; typedef struct deflate_dirconf_t { apr_off_t inflate_limit; int ratio_limit, ratio_burst; } deflate_dirconf_t; /* RFC 1952 Section 2.3 defines the gzip header: * * +---+---+---+---+---+---+---+---+---+---+ * |ID1|ID2|CM |FLG| MTIME |XFL|OS | * +---+---+---+---+---+---+---+---+---+---+ */ static const char gzip_header[10] = { '\037', '\213', Z_DEFLATED, 0, 0, 0, 0, 0, /* mtime */ 0, 0x03 /* Unix OS_CODE */ }; /* magic header */ static const char deflate_magic[2] = { '\037', '\213' }; /* windowsize is negative to suppress Zlib header */ #define DEFAULT_COMPRESSION Z_DEFAULT_COMPRESSION #define DEFAULT_WINDOWSIZE -15 #define DEFAULT_MEMLEVEL 9 #define DEFAULT_BUFFERSIZE 8096 static APR_OPTIONAL_FN_TYPE(ssl_var_lookup) *mod_deflate_ssl_var = NULL; /* Check whether a request is gzipped, so we can un-gzip it. * If a request has multiple encodings, we need the gzip * to be the outermost non-identity encoding. */ static int check_gzip(request_rec *r, apr_table_t *hdrs1, apr_table_t *hdrs2) { int found = 0; apr_table_t *hdrs = hdrs1; const char *encoding = apr_table_get(hdrs, "Content-Encoding"); if (!encoding && (hdrs2 != NULL)) { /* the output filter has two tables and a content_encoding to check */ encoding = apr_table_get(hdrs2, "Content-Encoding"); hdrs = hdrs2; if (!encoding) { encoding = r->content_encoding; hdrs = NULL; } } if (encoding && *encoding) { /* check the usual/simple case first */ if (!strcasecmp(encoding, "gzip") || !strcasecmp(encoding, "x-gzip")) { found = 1; if (hdrs) { apr_table_unset(hdrs, "Content-Encoding"); } else { r->content_encoding = NULL; } } else if (ap_strchr_c(encoding, ',') != NULL) { /* If the outermost encoding isn't gzip, there's nothing * we can do. So only check the last non-identity token */ char *new_encoding = apr_pstrdup(r->pool, encoding); char *ptr; for(;;) { char *token = ap_strrchr(new_encoding, ','); if (!token) { /* gzip:identity or other:identity */ if (!strcasecmp(new_encoding, "gzip") || !strcasecmp(new_encoding, "x-gzip")) { found = 1; if (hdrs) { apr_table_unset(hdrs, "Content-Encoding"); } else { r->content_encoding = NULL; } } break; /* seen all tokens */ } for (ptr=token+1; apr_isspace(*ptr); ++ptr); if (!strcasecmp(ptr, "gzip") || !strcasecmp(ptr, "x-gzip")) { *token = '\0'; if (hdrs) { apr_table_setn(hdrs, "Content-Encoding", new_encoding); } else { r->content_encoding = new_encoding; } found = 1; } else if (!ptr[0] || !strcasecmp(ptr, "identity")) { *token = '\0'; continue; /* strip the token and find the next one */ } break; /* found a non-identity token */ } } } /* * If we have dealt with the headers above but content_encoding was set * before sync it with the new value in the hdrs table as * r->content_encoding takes precedence later on in the http_header_filter * and hence would destroy what we have just set in the hdrs table. */ if (hdrs && r->content_encoding) { r->content_encoding = apr_table_get(hdrs, "Content-Encoding"); } return found; } /* Outputs a long in LSB order to the given file * only the bottom 4 bits are required for the deflate file format. */ static void putLong(unsigned char *string, unsigned long x) { string[0] = (unsigned char)(x & 0xff); string[1] = (unsigned char)((x & 0xff00) >> 8); string[2] = (unsigned char)((x & 0xff0000) >> 16); string[3] = (unsigned char)((x & 0xff000000) >> 24); } /* Inputs a string and returns a long. */ static unsigned long getLong(unsigned char *string) { return ((unsigned long)string[0]) | (((unsigned long)string[1]) << 8) | (((unsigned long)string[2]) << 16) | (((unsigned long)string[3]) << 24); } static void *create_deflate_server_config(apr_pool_t *p, server_rec *s) { deflate_filter_config *c = apr_pcalloc(p, sizeof *c); c->memlevel = DEFAULT_MEMLEVEL; c->windowSize = DEFAULT_WINDOWSIZE; c->bufferSize = DEFAULT_BUFFERSIZE; c->compressionlevel = DEFAULT_COMPRESSION; return c; } static void *create_deflate_dirconf(apr_pool_t *p, char *dummy) { deflate_dirconf_t *dc = apr_pcalloc(p, sizeof(*dc)); dc->ratio_limit = AP_INFLATE_RATIO_LIMIT; dc->ratio_burst = AP_INFLATE_RATIO_BURST; return dc; } static const char *deflate_set_window_size(cmd_parms *cmd, void *dummy, const char *arg) { deflate_filter_config *c = ap_get_module_config(cmd->server->module_config, &deflate_module); int i; i = atoi(arg); if (i < 1 || i > 15) return "DeflateWindowSize must be between 1 and 15"; c->windowSize = i * -1; return NULL; } static const char *deflate_set_buffer_size(cmd_parms *cmd, void *dummy, const char *arg) { deflate_filter_config *c = ap_get_module_config(cmd->server->module_config, &deflate_module); int n = atoi(arg); if (n <= 0) { return "DeflateBufferSize should be positive"; } c->bufferSize = (apr_size_t)n; return NULL; } static const char *deflate_set_note(cmd_parms *cmd, void *dummy, const char *arg1, const char *arg2) { deflate_filter_config *c = ap_get_module_config(cmd->server->module_config, &deflate_module); if (arg2 == NULL) { c->note_ratio_name = arg1; } else if (!strcasecmp(arg1, "ratio")) { c->note_ratio_name = arg2; } else if (!strcasecmp(arg1, "input")) { c->note_input_name = arg2; } else if (!strcasecmp(arg1, "output")) { c->note_output_name = arg2; } else { return apr_psprintf(cmd->pool, "Unknown note type %s", arg1); } return NULL; } static const char *deflate_set_memlevel(cmd_parms *cmd, void *dummy, const char *arg) { deflate_filter_config *c = ap_get_module_config(cmd->server->module_config, &deflate_module); int i; i = atoi(arg); if (i < 1 || i > 9) return "DeflateMemLevel must be between 1 and 9"; c->memlevel = i; return NULL; } static const char *deflate_set_compressionlevel(cmd_parms *cmd, void *dummy, const char *arg) { deflate_filter_config *c = ap_get_module_config(cmd->server->module_config, &deflate_module); int i; i = atoi(arg); if (i < 1 || i > 9) return "Compression Level must be between 1 and 9"; c->compressionlevel = i; return NULL; } static const char *deflate_set_inflate_limit(cmd_parms *cmd, void *dirconf, const char *arg) { deflate_dirconf_t *dc = (deflate_dirconf_t*) dirconf; char *errp; if (APR_SUCCESS != apr_strtoff(&dc->inflate_limit, arg, &errp, 10)) { return "DeflateInflateLimitRequestBody is not parsable."; } if (*errp || dc->inflate_limit < 0) { return "DeflateInflateLimitRequestBody requires a non-negative integer."; } return NULL; } static const char *deflate_set_inflate_ratio_limit(cmd_parms *cmd, void *dirconf, const char *arg) { deflate_dirconf_t *dc = (deflate_dirconf_t*) dirconf; int i; i = atoi(arg); if (i <= 0) return "DeflateInflateRatioLimit must be positive"; dc->ratio_limit = i; return NULL; } static const char *deflate_set_inflate_ratio_burst(cmd_parms *cmd, void *dirconf, const char *arg) { deflate_dirconf_t *dc = (deflate_dirconf_t*) dirconf; int i; i = atoi(arg); if (i <= 0) return "DeflateInflateRatioBurst must be positive"; dc->ratio_burst = i; return NULL; } typedef struct deflate_ctx_t { z_stream stream; unsigned char *buffer; unsigned long crc; apr_bucket_brigade *bb, *proc_bb; int (*libz_end_func)(z_streamp); unsigned char *validation_buffer; apr_size_t validation_buffer_length; char header[10]; /* sizeof(gzip_header) */ apr_size_t header_len; int zlib_flags; int ratio_hits; apr_off_t inflate_total; unsigned int consume_pos, consume_len; unsigned int filter_init:1; unsigned int done:1; } deflate_ctx; /* Number of validation bytes (CRC and length) after the compressed data */ #define VALIDATION_SIZE 8 /* Do not update ctx->crc, see comment in flush_libz_buffer */ #define NO_UPDATE_CRC 0 /* Do update ctx->crc, see comment in flush_libz_buffer */ #define UPDATE_CRC 1 static int flush_libz_buffer(deflate_ctx *ctx, deflate_filter_config *c, struct apr_bucket_alloc_t *bucket_alloc, int (*libz_func)(z_streamp, int), int flush, int crc) { int zRC = Z_OK; int done = 0; unsigned int deflate_len; apr_bucket *b; for (;;) { deflate_len = c->bufferSize - ctx->stream.avail_out; if (deflate_len != 0) { /* * Do we need to update ctx->crc? Usually this is the case for * inflate action where we need to do a crc on the output, whereas * in the deflate case we need to do a crc on the input */ if (crc) { ctx->crc = crc32(ctx->crc, (const Bytef *)ctx->buffer, deflate_len); } b = apr_bucket_heap_create((char *)ctx->buffer, deflate_len, NULL, bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->bb, b); ctx->stream.next_out = ctx->buffer; ctx->stream.avail_out = c->bufferSize; } if (done) break; zRC = libz_func(&ctx->stream, flush); /* * We can ignore Z_BUF_ERROR because: * When we call libz_func we can assume that * * - avail_in is zero (due to the surrounding code that calls * flush_libz_buffer) * - avail_out is non zero due to our actions some lines above * * So the only reason for Z_BUF_ERROR is that the internal libz * buffers are now empty and thus we called libz_func one time * too often. This does not hurt. It simply says that we are done. */ if (zRC == Z_BUF_ERROR) { zRC = Z_OK; break; } done = (ctx->stream.avail_out != 0 || zRC == Z_STREAM_END); if (zRC != Z_OK && zRC != Z_STREAM_END) break; } return zRC; } static apr_status_t deflate_ctx_cleanup(void *data) { deflate_ctx *ctx = (deflate_ctx *)data; if (ctx) ctx->libz_end_func(&ctx->stream); return APR_SUCCESS; } /* ETag must be unique among the possible representations, so a change * to content-encoding requires a corresponding change to the ETag. * This routine appends -transform (e.g., -gzip) to the entity-tag * value inside the double-quotes if an ETag has already been set * and its value already contains double-quotes. PR 39727 */ static void deflate_check_etag(request_rec *r, const char *transform) { const char *etag = apr_table_get(r->headers_out, "ETag"); apr_size_t etaglen; if ((etag && ((etaglen = strlen(etag)) > 2))) { if (etag[etaglen - 1] == '"') { apr_size_t transformlen = strlen(transform); char *newtag = apr_palloc(r->pool, etaglen + transformlen + 2); char *d = newtag; char *e = d + etaglen - 1; const char *s = etag; for (; d < e; ++d, ++s) { *d = *s; /* copy etag to newtag up to last quote */ } *d++ = '-'; /* append dash to newtag */ s = transform; e = d + transformlen; for (; d < e; ++d, ++s) { *d = *s; /* copy transform to newtag */ } *d++ = '"'; /* append quote to newtag */ *d = '\0'; /* null terminate newtag */ apr_table_setn(r->headers_out, "ETag", newtag); } } } /* Check whether the (inflate) ratio exceeds the configured limit/burst. */ static int check_ratio(request_rec *r, deflate_ctx *ctx, const deflate_dirconf_t *dc) { if (ctx->stream.total_in) { int ratio = ctx->stream.total_out / ctx->stream.total_in; if (ratio < dc->ratio_limit) { ctx->ratio_hits = 0; } else if (++ctx->ratio_hits > dc->ratio_burst) { return 0; } } return 1; } static int have_ssl_compression(request_rec *r) { const char *comp; if (mod_deflate_ssl_var == NULL) return 0; comp = mod_deflate_ssl_var(r->pool, r->server, r->connection, r, "SSL_COMPRESS_METHOD"); if (comp == NULL || *comp == '\0' || strcmp(comp, "NULL") == 0) return 0; return 1; } static apr_status_t deflate_out_filter(ap_filter_t *f, apr_bucket_brigade *bb) { apr_bucket *e; request_rec *r = f->r; deflate_ctx *ctx = f->ctx; int zRC; apr_size_t len = 0, blen; const char *data; deflate_filter_config *c; /* Do nothing if asked to filter nothing. */ if (APR_BRIGADE_EMPTY(bb)) { return APR_SUCCESS; } c = ap_get_module_config(r->server->module_config, &deflate_module); /* If we don't have a context, we need to ensure that it is okay to send * the deflated content. If we have a context, that means we've done * this before and we liked it. * This could be not so nice if we always fail. But, if we succeed, * we're in better shape. */ if (!ctx) { char *token; const char *encoding; if (have_ssl_compression(r)) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Compression enabled at SSL level; not compressing " "at HTTP level."); ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* We have checked above that bb is not empty */ e = APR_BRIGADE_LAST(bb); if (APR_BUCKET_IS_EOS(e)) { /* * If we already know the size of the response, we can skip * compression on responses smaller than the compression overhead. * However, if we compress, we must initialize deflate_out before * calling ap_pass_brigade() for the first time. Otherwise the * headers will be sent to the client without * "Content-Encoding: gzip". */ e = APR_BRIGADE_FIRST(bb); while (1) { apr_status_t rc; if (APR_BUCKET_IS_EOS(e)) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Not compressing very small response of %" APR_SIZE_T_FMT " bytes", len); ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } if (APR_BUCKET_IS_METADATA(e)) { e = APR_BUCKET_NEXT(e); continue; } rc = apr_bucket_read(e, &data, &blen, APR_BLOCK_READ); if (rc != APR_SUCCESS) return rc; len += blen; /* 50 is for Content-Encoding and Vary headers and ETag suffix */ if (len > sizeof(gzip_header) + VALIDATION_SIZE + 50) break; e = APR_BUCKET_NEXT(e); } } ctx = f->ctx = apr_pcalloc(r->pool, sizeof(*ctx)); /* * Only work on main request, not subrequests, * that are not a 204 response with no content * and are not tagged with the no-gzip env variable * and not a partial response to a Range request. * * Note that responding to 304 is handled separately to * set the required headers (such as ETag) per RFC7232, 4.1. */ if ((r->main != NULL) || (r->status == HTTP_NO_CONTENT) || apr_table_get(r->subprocess_env, "no-gzip") || apr_table_get(r->headers_out, "Content-Range") ) { if (APLOG_R_IS_LEVEL(r, APLOG_TRACE1)) { const char *reason = (r->main != NULL) ? "subrequest" : (r->status == HTTP_NO_CONTENT) ? "no content" : apr_table_get(r->subprocess_env, "no-gzip") ? "no-gzip" : "content-range"; ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Not compressing (%s)", reason); } ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* Some browsers might have problems with content types * other than text/html, so set gzip-only-text/html * (with browsermatch) for them */ if (r->content_type == NULL || strncmp(r->content_type, "text/html", 9)) { const char *env_value = apr_table_get(r->subprocess_env, "gzip-only-text/html"); if ( env_value && (strcmp(env_value,"1") == 0) ) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Not compressing, (gzip-only-text/html)"); ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } } /* Let's see what our current Content-Encoding is. * If it's already encoded, don't compress again. * (We could, but let's not.) */ encoding = apr_table_get(r->headers_out, "Content-Encoding"); if (encoding) { const char *err_enc; err_enc = apr_table_get(r->err_headers_out, "Content-Encoding"); if (err_enc) { encoding = apr_pstrcat(r->pool, encoding, ",", err_enc, NULL); } } else { encoding = apr_table_get(r->err_headers_out, "Content-Encoding"); } if (r->content_encoding) { encoding = encoding ? apr_pstrcat(r->pool, encoding, ",", r->content_encoding, NULL) : r->content_encoding; } if (encoding) { const char *tmp = encoding; token = ap_get_token(r->pool, &tmp, 0); while (token && *token) { /* stolen from mod_negotiation: */ if (strcmp(token, "identity") && strcmp(token, "7bit") && strcmp(token, "8bit") && strcmp(token, "binary")) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Not compressing (content-encoding already " " set: %s)", token); ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* Otherwise, skip token */ if (*tmp) { ++tmp; } token = (*tmp) ? ap_get_token(r->pool, &tmp, 0) : NULL; } } /* Even if we don't accept this request based on it not having * the Accept-Encoding, we need to note that we were looking * for this header and downstream proxies should be aware of that. */ apr_table_mergen(r->headers_out, "Vary", "Accept-Encoding"); /* force-gzip will just force it out regardless if the browser * can actually do anything with it. */ if (!apr_table_get(r->subprocess_env, "force-gzip")) { const char *accepts; /* if they don't have the line, then they can't play */ accepts = apr_table_get(r->headers_in, "Accept-Encoding"); if (accepts == NULL) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } token = ap_get_token(r->pool, &accepts, 0); while (token && token[0] && strcasecmp(token, "gzip")) { /* skip parameters, XXX: ;q=foo evaluation? */ while (*accepts == ';') { ++accepts; ap_get_token(r->pool, &accepts, 1); } /* retrieve next token */ if (*accepts == ',') { ++accepts; } token = (*accepts) ? ap_get_token(r->pool, &accepts, 0) : NULL; } /* No acceptable token found. */ if (token == NULL || token[0] == '\0') { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Not compressing (no Accept-Encoding: gzip)"); ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } } else { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Forcing compression (force-gzip set)"); } /* At this point we have decided to filter the content. Let's try to * to initialize zlib (except for 304 responses, where we will only * send out the headers). */ if (r->status != HTTP_NOT_MODIFIED) { ctx->bb = apr_brigade_create(r->pool, f->c->bucket_alloc); ctx->buffer = apr_palloc(r->pool, c->bufferSize); ctx->libz_end_func = deflateEnd; zRC = deflateInit2(&ctx->stream, c->compressionlevel, Z_DEFLATED, c->windowSize, c->memlevel, Z_DEFAULT_STRATEGY); if (zRC != Z_OK) { deflateEnd(&ctx->stream); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01383) "unable to init Zlib: " "deflateInit2 returned %d: URL %s", zRC, r->uri); /* * Remove ourselves as it does not make sense to return: * We are not able to init libz and pass data down the chain * uncompressed. */ ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* * Register a cleanup function to ensure that we cleanup the internal * libz resources. */ apr_pool_cleanup_register(r->pool, ctx, deflate_ctx_cleanup, apr_pool_cleanup_null); /* Set the filter init flag so subsequent invocations know we are * active. */ ctx->filter_init = 1; } /* * Zlib initialization worked, so we can now change the important * content metadata before sending the response out. */ /* If the entire Content-Encoding is "identity", we can replace it. */ if (!encoding || !strcasecmp(encoding, "identity")) { apr_table_setn(r->headers_out, "Content-Encoding", "gzip"); } else { apr_table_mergen(r->headers_out, "Content-Encoding", "gzip"); } /* Fix r->content_encoding if it was set before */ if (r->content_encoding) { r->content_encoding = apr_table_get(r->headers_out, "Content-Encoding"); } apr_table_unset(r->headers_out, "Content-Length"); apr_table_unset(r->headers_out, "Content-MD5"); deflate_check_etag(r, "gzip"); /* For a 304 response, only change the headers */ if (r->status == HTTP_NOT_MODIFIED) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* add immortal gzip header */ e = apr_bucket_immortal_create(gzip_header, sizeof gzip_header, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); /* initialize deflate output buffer */ ctx->stream.next_out = ctx->buffer; ctx->stream.avail_out = c->bufferSize; } else if (!ctx->filter_init) { /* Hmm. We've run through the filter init before as we have a ctx, * but we never initialized. We probably have a dangling ref. Bail. */ return ap_pass_brigade(f->next, bb); } while (!APR_BRIGADE_EMPTY(bb)) { apr_bucket *b; /* * Optimization: If we are a HEAD request and bytes_sent is not zero * it means that we have passed the content-length filter once and * have more data to sent. This means that the content-length filter * could not determine our content-length for the response to the * HEAD request anyway (the associated GET request would deliver the * body in chunked encoding) and we can stop compressing. */ if (r->header_only && r->bytes_sent) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } e = APR_BRIGADE_FIRST(bb); if (APR_BUCKET_IS_EOS(e)) { char *buf; ctx->stream.avail_in = 0; /* should be zero already anyway */ /* flush the remaining data from the zlib buffers */ flush_libz_buffer(ctx, c, f->c->bucket_alloc, deflate, Z_FINISH, NO_UPDATE_CRC); buf = apr_palloc(r->pool, VALIDATION_SIZE); putLong((unsigned char *)&buf[0], ctx->crc); putLong((unsigned char *)&buf[4], ctx->stream.total_in); b = apr_bucket_pool_create(buf, VALIDATION_SIZE, r->pool, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->bb, b); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01384) "Zlib: Compressed %ld to %ld : URL %s", ctx->stream.total_in, ctx->stream.total_out, r->uri); /* leave notes for logging */ if (c->note_input_name) { apr_table_setn(r->notes, c->note_input_name, (ctx->stream.total_in > 0) ? apr_off_t_toa(r->pool, ctx->stream.total_in) : "-"); } if (c->note_output_name) { apr_table_setn(r->notes, c->note_output_name, (ctx->stream.total_out > 0) ? apr_off_t_toa(r->pool, ctx->stream.total_out) : "-"); } if (c->note_ratio_name) { apr_table_setn(r->notes, c->note_ratio_name, (ctx->stream.total_in > 0) ? apr_itoa(r->pool, (int)(ctx->stream.total_out * 100 / ctx->stream.total_in)) : "-"); } deflateEnd(&ctx->stream); /* No need for cleanup any longer */ apr_pool_cleanup_kill(r->pool, ctx, deflate_ctx_cleanup); /* Remove EOS from the old list, and insert into the new. */ APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); /* Okay, we've seen the EOS. * Time to pass it along down the chain. */ return ap_pass_brigade(f->next, ctx->bb); } if (APR_BUCKET_IS_FLUSH(e)) { apr_status_t rv; /* flush the remaining data from the zlib buffers */ zRC = flush_libz_buffer(ctx, c, f->c->bucket_alloc, deflate, Z_SYNC_FLUSH, NO_UPDATE_CRC); if (zRC != Z_OK) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01385) "Zlib error %d flushing zlib output buffer (%s)", zRC, ctx->stream.msg); return APR_EGENERAL; } /* Remove flush bucket from old brigade anf insert into the new. */ APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); rv = ap_pass_brigade(f->next, ctx->bb); if (rv != APR_SUCCESS) { return rv; } continue; } if (APR_BUCKET_IS_METADATA(e)) { /* * Remove meta data bucket from old brigade and insert into the * new. */ APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); continue; } /* read */ apr_bucket_read(e, &data, &len, APR_BLOCK_READ); if (!len) { apr_bucket_delete(e); continue; } if (len > APR_INT32_MAX) { apr_bucket_split(e, APR_INT32_MAX); apr_bucket_read(e, &data, &len, APR_BLOCK_READ); } /* This crc32 function is from zlib. */ ctx->crc = crc32(ctx->crc, (const Bytef *)data, len); /* write */ ctx->stream.next_in = (unsigned char *)data; /* We just lost const-ness, * but we'll just have to * trust zlib */ ctx->stream.avail_in = len; while (ctx->stream.avail_in != 0) { if (ctx->stream.avail_out == 0) { apr_status_t rv; ctx->stream.next_out = ctx->buffer; len = c->bufferSize - ctx->stream.avail_out; b = apr_bucket_heap_create((char *)ctx->buffer, len, NULL, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->bb, b); ctx->stream.avail_out = c->bufferSize; /* Send what we have right now to the next filter. */ rv = ap_pass_brigade(f->next, ctx->bb); if (rv != APR_SUCCESS) { return rv; } } zRC = deflate(&(ctx->stream), Z_NO_FLUSH); if (zRC != Z_OK) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01386) "Zlib error %d deflating data (%s)", zRC, ctx->stream.msg); return APR_EGENERAL; } } apr_bucket_delete(e); } return APR_SUCCESS; } static apr_status_t consume_zlib_flags(deflate_ctx *ctx, const char **data, apr_size_t *len) { if ((ctx->zlib_flags & EXTRA_FIELD)) { /* Consume 2 bytes length prefixed data. */ if (ctx->consume_pos == 0) { if (!*len) { return APR_INCOMPLETE; } ctx->consume_len = (unsigned int)**data; ctx->consume_pos++; ++*data; --*len; } if (ctx->consume_pos == 1) { if (!*len) { return APR_INCOMPLETE; } ctx->consume_len += ((unsigned int)**data) << 8; ctx->consume_pos++; ++*data; --*len; } if (*len < ctx->consume_len) { ctx->consume_len -= *len; *len = 0; return APR_INCOMPLETE; } *data += ctx->consume_len; *len -= ctx->consume_len; ctx->consume_len = ctx->consume_pos = 0; ctx->zlib_flags &= ~EXTRA_FIELD; } if ((ctx->zlib_flags & ORIG_NAME)) { /* Consume nul terminated string. */ while (*len && **data) { ++*data; --*len; } if (!*len) { return APR_INCOMPLETE; } /* .. and nul. */ ++*data; --*len; ctx->zlib_flags &= ~ORIG_NAME; } if ((ctx->zlib_flags & COMMENT)) { /* Consume nul terminated string. */ while (*len && **data) { ++*data; --*len; } if (!*len) { return APR_INCOMPLETE; } /* .. and nul. */ ++*data; --*len; ctx->zlib_flags &= ~COMMENT; } if ((ctx->zlib_flags & HEAD_CRC)) { /* Consume CRC16 (2 octets). */ if (ctx->consume_pos == 0) { if (!*len) { return APR_INCOMPLETE; } ctx->consume_pos++; ++*data; --*len; } if (!*len) { return APR_INCOMPLETE; } ++*data; --*len; ctx->consume_pos = 0; ctx->zlib_flags &= ~HEAD_CRC; } return APR_SUCCESS; } /* This is the deflate input filter (inflates). */ static apr_status_t deflate_in_filter(ap_filter_t *f, apr_bucket_brigade *bb, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { apr_bucket *bkt; request_rec *r = f->r; deflate_ctx *ctx = f->ctx; int zRC; apr_status_t rv; deflate_filter_config *c; deflate_dirconf_t *dc; apr_off_t inflate_limit; /* just get out of the way of things we don't want. */ if (mode != AP_MODE_READBYTES) { return ap_get_brigade(f->next, bb, mode, block, readbytes); } c = ap_get_module_config(r->server->module_config, &deflate_module); dc = ap_get_module_config(r->per_dir_config, &deflate_module); if (!ctx || ctx->header_len < sizeof(ctx->header)) { apr_size_t len; if (!ctx) { /* only work on main request/no subrequests */ if (!ap_is_initial_req(r)) { ap_remove_input_filter(f); return ap_get_brigade(f->next, bb, mode, block, readbytes); } /* We can't operate on Content-Ranges */ if (apr_table_get(r->headers_in, "Content-Range") != NULL) { ap_remove_input_filter(f); return ap_get_brigade(f->next, bb, mode, block, readbytes); } /* Check whether request body is gzipped. * * If it is, we're transforming the contents, invalidating * some request headers including Content-Encoding. * * If not, we just remove ourself. */ if (check_gzip(r, r->headers_in, NULL) == 0) { ap_remove_input_filter(f); return ap_get_brigade(f->next, bb, mode, block, readbytes); } f->ctx = ctx = apr_pcalloc(f->r->pool, sizeof(*ctx)); ctx->bb = apr_brigade_create(r->pool, f->c->bucket_alloc); ctx->proc_bb = apr_brigade_create(r->pool, f->c->bucket_alloc); ctx->buffer = apr_palloc(r->pool, c->bufferSize); } do { apr_brigade_cleanup(ctx->bb); len = sizeof(ctx->header) - ctx->header_len; rv = ap_get_brigade(f->next, ctx->bb, AP_MODE_READBYTES, block, len); /* ap_get_brigade may return success with an empty brigade for * a non-blocking read which would block (an empty brigade for * a blocking read is an issue which is simply forwarded here). */ if (rv != APR_SUCCESS || APR_BRIGADE_EMPTY(ctx->bb)) { return rv; } /* zero length body? step aside */ bkt = APR_BRIGADE_FIRST(ctx->bb); if (APR_BUCKET_IS_EOS(bkt)) { if (ctx->header_len) { /* If the header was (partially) read it's an error, this * is not a gzip Content-Encoding, as claimed. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02619) "Encountered premature end-of-stream while " "reading inflate header"); return APR_EGENERAL; } APR_BUCKET_REMOVE(bkt); APR_BRIGADE_INSERT_TAIL(bb, bkt); ap_remove_input_filter(f); return APR_SUCCESS; } rv = apr_brigade_flatten(ctx->bb, ctx->header + ctx->header_len, &len); if (rv != APR_SUCCESS) { return rv; } if (len && !ctx->header_len) { apr_table_unset(r->headers_in, "Content-Length"); apr_table_unset(r->headers_in, "Content-MD5"); } ctx->header_len += len; } while (ctx->header_len < sizeof(ctx->header)); /* We didn't get the magic bytes. */ if (ctx->header[0] != deflate_magic[0] || ctx->header[1] != deflate_magic[1]) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01387) "Zlib: Invalid header"); return APR_EGENERAL; } ctx->zlib_flags = ctx->header[3]; if ((ctx->zlib_flags & RESERVED)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01388) "Zlib: Invalid flags %02x", ctx->zlib_flags); return APR_EGENERAL; } zRC = inflateInit2(&ctx->stream, c->windowSize); if (zRC != Z_OK) { f->ctx = NULL; inflateEnd(&ctx->stream); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01389) "unable to init Zlib: " "inflateInit2 returned %d: URL %s", zRC, r->uri); ap_remove_input_filter(f); return ap_get_brigade(f->next, bb, mode, block, readbytes); } /* initialize deflate output buffer */ ctx->stream.next_out = ctx->buffer; ctx->stream.avail_out = c->bufferSize; apr_brigade_cleanup(ctx->bb); } inflate_limit = dc->inflate_limit; if (inflate_limit == 0) { /* The core is checking the deflated body, we'll check the inflated */ inflate_limit = ap_get_limit_req_body(f->r); } if (APR_BRIGADE_EMPTY(ctx->proc_bb)) { rv = ap_get_brigade(f->next, ctx->bb, mode, block, readbytes); /* Don't terminate on EAGAIN (or success with an empty brigade in * non-blocking mode), just return focus. */ if (block == APR_NONBLOCK_READ && (APR_STATUS_IS_EAGAIN(rv) || (rv == APR_SUCCESS && APR_BRIGADE_EMPTY(ctx->bb)))) { return rv; } if (rv != APR_SUCCESS) { inflateEnd(&ctx->stream); return rv; } for (bkt = APR_BRIGADE_FIRST(ctx->bb); bkt != APR_BRIGADE_SENTINEL(ctx->bb); bkt = APR_BUCKET_NEXT(bkt)) { const char *data; apr_size_t len; if (APR_BUCKET_IS_EOS(bkt)) { if (!ctx->done) { inflateEnd(&ctx->stream); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02481) "Encountered premature end-of-stream while inflating"); return APR_EGENERAL; } /* Move everything to the returning brigade. */ APR_BUCKET_REMOVE(bkt); APR_BRIGADE_INSERT_TAIL(ctx->proc_bb, bkt); break; } if (APR_BUCKET_IS_FLUSH(bkt)) { apr_bucket *tmp_b; ctx->inflate_total += ctx->stream.avail_out; zRC = inflate(&(ctx->stream), Z_SYNC_FLUSH); ctx->inflate_total -= ctx->stream.avail_out; if (zRC != Z_OK) { inflateEnd(&ctx->stream); ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01391) "Zlib error %d inflating data (%s)", zRC, ctx->stream.msg); return APR_EGENERAL; } if (inflate_limit && ctx->inflate_total > inflate_limit) { inflateEnd(&ctx->stream); ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02647) "Inflated content length of %" APR_OFF_T_FMT " is larger than the configured limit" " of %" APR_OFF_T_FMT, ctx->inflate_total, inflate_limit); return APR_ENOSPC; } if (!check_ratio(r, ctx, dc)) { inflateEnd(&ctx->stream); ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02805) "Inflated content ratio is larger than the " "configured limit %i by %i time(s)", dc->ratio_limit, dc->ratio_burst); return APR_EINVAL; } len = c->bufferSize - ctx->stream.avail_out; ctx->crc = crc32(ctx->crc, (const Bytef *)ctx->buffer, len); tmp_b = apr_bucket_heap_create((char *)ctx->buffer, len, NULL, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->proc_bb, tmp_b); ctx->stream.next_out = ctx->buffer; ctx->stream.avail_out = c->bufferSize; /* Flush everything so far in the returning brigade, but continue * reading should EOS/more follow (don't lose them). */ tmp_b = APR_BUCKET_PREV(bkt); APR_BUCKET_REMOVE(bkt); APR_BRIGADE_INSERT_TAIL(ctx->proc_bb, bkt); bkt = tmp_b; continue; } /* sanity check - data after completed compressed body and before eos? */ if (ctx->done) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02482) "Encountered extra data after compressed data"); return APR_EGENERAL; } /* read */ apr_bucket_read(bkt, &data, &len, APR_BLOCK_READ); if (!len) { continue; } if (len > APR_INT32_MAX) { apr_bucket_split(bkt, APR_INT32_MAX); apr_bucket_read(bkt, &data, &len, APR_BLOCK_READ); } if (ctx->zlib_flags) { rv = consume_zlib_flags(ctx, &data, &len); if (rv == APR_SUCCESS) { ctx->zlib_flags = 0; } if (!len) { continue; } } /* pass through zlib inflate. */ ctx->stream.next_in = (unsigned char *)data; ctx->stream.avail_in = (int)len; if (!ctx->validation_buffer) { while (ctx->stream.avail_in != 0) { if (ctx->stream.avail_out == 0) { apr_bucket *tmp_heap; ctx->stream.next_out = ctx->buffer; len = c->bufferSize - ctx->stream.avail_out; ctx->crc = crc32(ctx->crc, (const Bytef *)ctx->buffer, len); tmp_heap = apr_bucket_heap_create((char *)ctx->buffer, len, NULL, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->proc_bb, tmp_heap); ctx->stream.avail_out = c->bufferSize; } ctx->inflate_total += ctx->stream.avail_out; zRC = inflate(&ctx->stream, Z_NO_FLUSH); ctx->inflate_total -= ctx->stream.avail_out; if (zRC != Z_OK && zRC != Z_STREAM_END) { inflateEnd(&ctx->stream); ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01392) "Zlib error %d inflating data (%s)", zRC, ctx->stream.msg); return APR_EGENERAL; } if (inflate_limit && ctx->inflate_total > inflate_limit) { inflateEnd(&ctx->stream); ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02648) "Inflated content length of %" APR_OFF_T_FMT " is larger than the configured limit" " of %" APR_OFF_T_FMT, ctx->inflate_total, inflate_limit); return APR_ENOSPC; } if (!check_ratio(r, ctx, dc)) { inflateEnd(&ctx->stream); ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02649) "Inflated content ratio is larger than the " "configured limit %i by %i time(s)", dc->ratio_limit, dc->ratio_burst); return APR_EINVAL; } if (zRC == Z_STREAM_END) { ctx->validation_buffer = apr_pcalloc(r->pool, VALIDATION_SIZE); ctx->validation_buffer_length = 0; break; } } } if (ctx->validation_buffer) { apr_bucket *tmp_heap; apr_size_t avail, valid; unsigned char *buf = ctx->validation_buffer; avail = ctx->stream.avail_in; valid = (apr_size_t)VALIDATION_SIZE - ctx->validation_buffer_length; /* * We have inflated all data. Now try to capture the * validation bytes. We may not have them all available * right now, but capture what is there. */ if (avail < valid) { memcpy(buf + ctx->validation_buffer_length, ctx->stream.next_in, avail); ctx->validation_buffer_length += avail; continue; } memcpy(buf + ctx->validation_buffer_length, ctx->stream.next_in, valid); ctx->validation_buffer_length += valid; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01393) "Zlib: Inflated %ld to %ld : URL %s", ctx->stream.total_in, ctx->stream.total_out, r->uri); len = c->bufferSize - ctx->stream.avail_out; ctx->crc = crc32(ctx->crc, (const Bytef *)ctx->buffer, len); tmp_heap = apr_bucket_heap_create((char *)ctx->buffer, len, NULL, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->proc_bb, tmp_heap); ctx->stream.avail_out = c->bufferSize; { unsigned long compCRC, compLen; compCRC = getLong(buf); if (ctx->crc != compCRC) { inflateEnd(&ctx->stream); ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01394) "Zlib: CRC error inflating data"); return APR_EGENERAL; } compLen = getLong(buf + VALIDATION_SIZE / 2); /* gzip stores original size only as 4 byte value */ if ((ctx->stream.total_out & 0xFFFFFFFF) != compLen) { inflateEnd(&ctx->stream); ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01395) "Zlib: Length %ld of inflated data does " "not match expected value %ld", ctx->stream.total_out, compLen); return APR_EGENERAL; } } inflateEnd(&ctx->stream); ctx->done = 1; /* Did we have trailing data behind the closing 8 bytes? */ if (avail > valid) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02485) "Encountered extra data after compressed data"); return APR_EGENERAL; } } } apr_brigade_cleanup(ctx->bb); } /* If we are about to return nothing for a 'blocking' read and we have * some data in our zlib buffer, flush it out so we can return something. */ if (block == APR_BLOCK_READ && APR_BRIGADE_EMPTY(ctx->proc_bb) && ctx->stream.avail_out < c->bufferSize) { apr_bucket *tmp_heap; apr_size_t len; ctx->stream.next_out = ctx->buffer; len = c->bufferSize - ctx->stream.avail_out; ctx->crc = crc32(ctx->crc, (const Bytef *)ctx->buffer, len); tmp_heap = apr_bucket_heap_create((char *)ctx->buffer, len, NULL, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->proc_bb, tmp_heap); ctx->stream.avail_out = c->bufferSize; } if (!APR_BRIGADE_EMPTY(ctx->proc_bb)) { if (apr_brigade_partition(ctx->proc_bb, readbytes, &bkt) == APR_INCOMPLETE) { APR_BRIGADE_CONCAT(bb, ctx->proc_bb); } else { APR_BRIGADE_CONCAT(bb, ctx->proc_bb); apr_brigade_split_ex(bb, bkt, ctx->proc_bb); } if (APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(bb))) { ap_remove_input_filter(f); } } return APR_SUCCESS; } /* Filter to inflate for a content-transforming proxy. */ static apr_status_t inflate_out_filter(ap_filter_t *f, apr_bucket_brigade *bb) { apr_bucket *e; request_rec *r = f->r; deflate_ctx *ctx = f->ctx; int zRC; apr_status_t rv; deflate_filter_config *c; deflate_dirconf_t *dc; /* Do nothing if asked to filter nothing. */ if (APR_BRIGADE_EMPTY(bb)) { return APR_SUCCESS; } c = ap_get_module_config(r->server->module_config, &deflate_module); dc = ap_get_module_config(r->per_dir_config, &deflate_module); if (!ctx) { /* * Only work on main request, not subrequests, * that are not a 204 response with no content * and not a partial response to a Range request, * and only when Content-Encoding ends in gzip. * * Note that responding to 304 is handled separately to * set the required headers (such as ETag) per RFC7232, 4.1. */ if (!ap_is_initial_req(r) || (r->status == HTTP_NO_CONTENT) || (apr_table_get(r->headers_out, "Content-Range") != NULL) || (check_gzip(r, r->headers_out, r->err_headers_out) == 0) ) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* * At this point we have decided to filter the content, so change * important content metadata before sending any response out. * Content-Encoding was already reset by the check_gzip() call. */ apr_table_unset(r->headers_out, "Content-Length"); apr_table_unset(r->headers_out, "Content-MD5"); deflate_check_etag(r, "gunzip"); /* For a 304 response, only change the headers */ if (r->status == HTTP_NOT_MODIFIED) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } f->ctx = ctx = apr_pcalloc(f->r->pool, sizeof(*ctx)); ctx->bb = apr_brigade_create(r->pool, f->c->bucket_alloc); ctx->buffer = apr_palloc(r->pool, c->bufferSize); ctx->libz_end_func = inflateEnd; ctx->validation_buffer = NULL; ctx->validation_buffer_length = 0; zRC = inflateInit2(&ctx->stream, c->windowSize); if (zRC != Z_OK) { f->ctx = NULL; inflateEnd(&ctx->stream); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01397) "unable to init Zlib: " "inflateInit2 returned %d: URL %s", zRC, r->uri); /* * Remove ourselves as it does not make sense to return: * We are not able to init libz and pass data down the chain * compressed. */ ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* * Register a cleanup function to ensure that we cleanup the internal * libz resources. */ apr_pool_cleanup_register(r->pool, ctx, deflate_ctx_cleanup, apr_pool_cleanup_null); /* initialize inflate output buffer */ ctx->stream.next_out = ctx->buffer; ctx->stream.avail_out = c->bufferSize; } while (!APR_BRIGADE_EMPTY(bb)) { const char *data; apr_bucket *b; apr_size_t len; e = APR_BRIGADE_FIRST(bb); if (APR_BUCKET_IS_EOS(e)) { /* * We are really done now. Ensure that we never return here, even * if a second EOS bucket falls down the chain. Thus remove * ourselves. */ ap_remove_output_filter(f); /* should be zero already anyway */ ctx->stream.avail_in = 0; /* * Flush the remaining data from the zlib buffers. It is correct * to use Z_SYNC_FLUSH in this case and not Z_FINISH as in the * deflate case. In the inflate case Z_FINISH requires to have a * large enough output buffer to put ALL data in otherwise it * fails, whereas in the deflate case you can empty a filled output * buffer and call it again until no more output can be created. */ flush_libz_buffer(ctx, c, f->c->bucket_alloc, inflate, Z_SYNC_FLUSH, UPDATE_CRC); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01398) "Zlib: Inflated %ld to %ld : URL %s", ctx->stream.total_in, ctx->stream.total_out, r->uri); if (ctx->validation_buffer_length == VALIDATION_SIZE) { unsigned long compCRC, compLen; compCRC = getLong(ctx->validation_buffer); if (ctx->crc != compCRC) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01399) "Zlib: Checksum of inflated stream invalid"); return APR_EGENERAL; } ctx->validation_buffer += VALIDATION_SIZE / 2; compLen = getLong(ctx->validation_buffer); /* gzip stores original size only as 4 byte value */ if ((ctx->stream.total_out & 0xFFFFFFFF) != compLen) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01400) "Zlib: Length of inflated stream invalid"); return APR_EGENERAL; } } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01401) "Zlib: Validation bytes not present"); return APR_EGENERAL; } inflateEnd(&ctx->stream); /* No need for cleanup any longer */ apr_pool_cleanup_kill(r->pool, ctx, deflate_ctx_cleanup); /* Remove EOS from the old list, and insert into the new. */ APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); /* * Okay, we've seen the EOS. * Time to pass it along down the chain. */ return ap_pass_brigade(f->next, ctx->bb); } if (APR_BUCKET_IS_FLUSH(e)) { apr_status_t rv; /* flush the remaining data from the zlib buffers */ zRC = flush_libz_buffer(ctx, c, f->c->bucket_alloc, inflate, Z_SYNC_FLUSH, UPDATE_CRC); if (zRC == Z_STREAM_END) { if (ctx->validation_buffer == NULL) { ctx->validation_buffer = apr_pcalloc(f->r->pool, VALIDATION_SIZE); } } else if (zRC != Z_OK) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01402) "Zlib error %d flushing inflate buffer (%s)", zRC, ctx->stream.msg); return APR_EGENERAL; } /* Remove flush bucket from old brigade anf insert into the new. */ APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); rv = ap_pass_brigade(f->next, ctx->bb); if (rv != APR_SUCCESS) { return rv; } continue; } if (APR_BUCKET_IS_METADATA(e)) { /* * Remove meta data bucket from old brigade and insert into the * new. */ APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); continue; } /* read */ apr_bucket_read(e, &data, &len, APR_BLOCK_READ); if (!len) { apr_bucket_delete(e); continue; } if (len > APR_INT32_MAX) { apr_bucket_split(e, APR_INT32_MAX); apr_bucket_read(e, &data, &len, APR_BLOCK_READ); } /* first bucket contains zlib header */ if (ctx->header_len < sizeof(ctx->header)) { apr_size_t rem; rem = sizeof(ctx->header) - ctx->header_len; if (len < rem) { memcpy(ctx->header + ctx->header_len, data, len); ctx->header_len += len; apr_bucket_delete(e); continue; } memcpy(ctx->header + ctx->header_len, data, rem); ctx->header_len += rem; { int zlib_method; zlib_method = ctx->header[2]; if (zlib_method != Z_DEFLATED) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01404) "inflate: data not deflated!"); ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } if (ctx->header[0] != deflate_magic[0] || ctx->header[1] != deflate_magic[1]) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01405) "inflate: bad header"); return APR_EGENERAL ; } ctx->zlib_flags = ctx->header[3]; if ((ctx->zlib_flags & RESERVED)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02620) "inflate: bad flags %02x", ctx->zlib_flags); return APR_EGENERAL; } } if (len == rem) { apr_bucket_delete(e); continue; } data += rem; len -= rem; } if (ctx->zlib_flags) { rv = consume_zlib_flags(ctx, &data, &len); if (rv == APR_SUCCESS) { ctx->zlib_flags = 0; } if (!len) { apr_bucket_delete(e); continue; } } /* pass through zlib inflate. */ ctx->stream.next_in = (unsigned char *)data; ctx->stream.avail_in = len; if (ctx->validation_buffer) { if (ctx->validation_buffer_length < VALIDATION_SIZE) { apr_size_t copy_size; copy_size = VALIDATION_SIZE - ctx->validation_buffer_length; if (copy_size > ctx->stream.avail_in) copy_size = ctx->stream.avail_in; memcpy(ctx->validation_buffer + ctx->validation_buffer_length, ctx->stream.next_in, copy_size); /* Saved copy_size bytes */ ctx->stream.avail_in -= copy_size; ctx->validation_buffer_length += copy_size; } if (ctx->stream.avail_in) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01407) "Zlib: %d bytes of garbage at the end of " "compressed stream.", ctx->stream.avail_in); /* * There is nothing worth consuming for zlib left, because it is * either garbage data or the data has been copied to the * validation buffer (processing validation data is no business * for zlib). So set ctx->stream.avail_in to zero to indicate * this to the following while loop. */ ctx->stream.avail_in = 0; } } while (ctx->stream.avail_in != 0) { if (ctx->stream.avail_out == 0) { ctx->stream.next_out = ctx->buffer; len = c->bufferSize - ctx->stream.avail_out; ctx->crc = crc32(ctx->crc, (const Bytef *)ctx->buffer, len); b = apr_bucket_heap_create((char *)ctx->buffer, len, NULL, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->bb, b); ctx->stream.avail_out = c->bufferSize; /* Send what we have right now to the next filter. */ rv = ap_pass_brigade(f->next, ctx->bb); if (rv != APR_SUCCESS) { return rv; } } zRC = inflate(&ctx->stream, Z_NO_FLUSH); if (zRC != Z_OK && zRC != Z_STREAM_END) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01409) "Zlib error %d inflating data (%s)", zRC, ctx->stream.msg); return APR_EGENERAL; } if (!check_ratio(r, ctx, dc)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02650) "Inflated content ratio is larger than the " "configured limit %i by %i time(s)", dc->ratio_limit, dc->ratio_burst); return APR_EINVAL; } if (zRC == Z_STREAM_END) { /* * We have inflated all data. Now try to capture the * validation bytes. We may not have them all available * right now, but capture what is there. */ ctx->validation_buffer = apr_pcalloc(f->r->pool, VALIDATION_SIZE); if (ctx->stream.avail_in > VALIDATION_SIZE) { ctx->validation_buffer_length = VALIDATION_SIZE; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01408) "Zlib: %d bytes of garbage at the end of " "compressed stream.", ctx->stream.avail_in - VALIDATION_SIZE); } else if (ctx->stream.avail_in > 0) { ctx->validation_buffer_length = ctx->stream.avail_in; } if (ctx->validation_buffer_length) memcpy(ctx->validation_buffer, ctx->stream.next_in, ctx->validation_buffer_length); break; } } apr_bucket_delete(e); } return APR_SUCCESS; } static int mod_deflate_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { mod_deflate_ssl_var = APR_RETRIEVE_OPTIONAL_FN(ssl_var_lookup); return OK; } #define PROTO_FLAGS AP_FILTER_PROTO_CHANGE|AP_FILTER_PROTO_CHANGE_LENGTH static void register_hooks(apr_pool_t *p) { ap_register_output_filter(deflateFilterName, deflate_out_filter, NULL, AP_FTYPE_CONTENT_SET); ap_register_output_filter("INFLATE", inflate_out_filter, NULL, AP_FTYPE_RESOURCE-1); ap_register_input_filter(deflateFilterName, deflate_in_filter, NULL, AP_FTYPE_CONTENT_SET); ap_hook_post_config(mod_deflate_post_config, NULL, NULL, APR_HOOK_MIDDLE); } static const command_rec deflate_filter_cmds[] = { AP_INIT_TAKE12("DeflateFilterNote", deflate_set_note, NULL, RSRC_CONF, "Set a note to report on compression ratio"), AP_INIT_TAKE1("DeflateWindowSize", deflate_set_window_size, NULL, RSRC_CONF, "Set the Deflate window size (1-15)"), AP_INIT_TAKE1("DeflateBufferSize", deflate_set_buffer_size, NULL, RSRC_CONF, "Set the Deflate Buffer Size"), AP_INIT_TAKE1("DeflateMemLevel", deflate_set_memlevel, NULL, RSRC_CONF, "Set the Deflate Memory Level (1-9)"), AP_INIT_TAKE1("DeflateCompressionLevel", deflate_set_compressionlevel, NULL, RSRC_CONF, "Set the Deflate Compression Level (1-9)"), AP_INIT_TAKE1("DeflateInflateLimitRequestBody", deflate_set_inflate_limit, NULL, OR_ALL, "Set a limit on size of inflated input"), AP_INIT_TAKE1("DeflateInflateRatioLimit", deflate_set_inflate_ratio_limit, NULL, OR_ALL, "Set the inflate ratio limit above which inflation is " "aborted (default: " APR_STRINGIFY(AP_INFLATE_RATIO_LIMIT) ")"), AP_INIT_TAKE1("DeflateInflateRatioBurst", deflate_set_inflate_ratio_burst, NULL, OR_ALL, "Set the maximum number of following inflate ratios above limit " "(default: " APR_STRINGIFY(AP_INFLATE_RATIO_BURST) ")"), {NULL} }; AP_DECLARE_MODULE(deflate) = { STANDARD20_MODULE_STUFF, create_deflate_dirconf, /* dir config creater */ NULL, /* dir merger --- default is to override */ create_deflate_server_config, /* server config */ NULL, /* merge server config */ deflate_filter_cmds, /* command table */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/filters/mod_filter.c0000644000000000000500000006146313044663503016662 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #define APR_WANT_STRFUNC #include "apr_want.h" #include "apr_lib.h" #include "apr_strings.h" #include "apr_hash.h" #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_log.h" #include "util_filter.h" #include "ap_expr.h" module AP_MODULE_DECLARE_DATA filter_module; /** * @brief is a filter provider, as defined and implemented by mod_filter. * * The struct is a linked list, with dispatch criteria * defined for each filter. The provider implementation itself is a * (2.0-compatible) ap_filter_rec_t* frec. */ struct ap_filter_provider_t { ap_expr_info_t *expr; const char **types; /** The filter that implements this provider */ ap_filter_rec_t *frec; /** The next provider in the list */ ap_filter_provider_t *next; }; /** we need provider_ctx to save ctx values set by providers in filter_init */ typedef struct provider_ctx provider_ctx; struct provider_ctx { ap_filter_provider_t *provider; void *ctx; provider_ctx *next; }; typedef struct { ap_out_filter_func func; void *fctx; provider_ctx *init_ctx; } harness_ctx; typedef struct mod_filter_chain { const char *fname; struct mod_filter_chain *next; } mod_filter_chain; typedef struct { apr_hash_t *live_filters; mod_filter_chain *chain; } mod_filter_cfg; typedef struct { const char* range ; } mod_filter_ctx ; static void filter_trace(conn_rec *c, int debug, const char *fname, apr_bucket_brigade *bb) { apr_bucket *b; switch (debug) { case 0: /* normal, operational use */ return; case 1: /* mod_diagnostics level */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(01375) "%s", fname); for (b = APR_BRIGADE_FIRST(bb); b != APR_BRIGADE_SENTINEL(bb); b = APR_BUCKET_NEXT(b)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(01376) "%s: type: %s, length: %" APR_SIZE_T_FMT, fname, b->type->name ? b->type->name : "(unknown)", b->length); } break; } } static int filter_init(ap_filter_t *f) { ap_filter_provider_t *p; provider_ctx *pctx; int err; ap_filter_rec_t *filter = f->frec; harness_ctx *fctx = apr_pcalloc(f->r->pool, sizeof(harness_ctx)); for (p = filter->providers; p; p = p->next) { if (p->frec->filter_init_func == filter_init) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, f->c, APLOGNO(01377) "Chaining of FilterProviders not supported"); return HTTP_INTERNAL_SERVER_ERROR; } else if (p->frec->filter_init_func) { f->ctx = NULL; if ((err = p->frec->filter_init_func(f)) != OK) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, f->c, APLOGNO(01378) "filter_init for %s failed", p->frec->name); return err; /* if anyone errors out here, so do we */ } if (f->ctx != NULL) { /* the filter init function set a ctx - we need to record it */ pctx = apr_pcalloc(f->r->pool, sizeof(provider_ctx)); pctx->provider = p; pctx->ctx = f->ctx; pctx->next = fctx->init_ctx; fctx->init_ctx = pctx; } } } f->ctx = fctx; return OK; } static int filter_lookup(ap_filter_t *f, ap_filter_rec_t *filter) { ap_filter_provider_t *provider; int match = 0; const char *err = NULL; request_rec *r = f->r; harness_ctx *ctx = f->ctx; provider_ctx *pctx; #ifndef NO_PROTOCOL unsigned int proto_flags; mod_filter_ctx *rctx = ap_get_module_config(r->request_config, &filter_module); #endif /* Check registered providers in order */ for (provider = filter->providers; provider; provider = provider->next) { if (provider->expr) { match = ap_expr_exec(r, provider->expr, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01379) "Error evaluating filter dispatch condition: %s", err); match = 0; } ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "Expression condition for '%s' %s", provider->frec->name, match ? "matched" : "did not match"); } else if (r->content_type) { const char **type = provider->types; size_t len = strcspn(r->content_type, "; \t"); AP_DEBUG_ASSERT(type != NULL); ap_log_rerror(APLOG_MARK, APLOG_TRACE4, 0, r, "Content-Type '%s' ...", r->content_type); while (*type) { /* Handle 'content-type;charset=...' correctly */ if (strncmp(*type, r->content_type, len) == 0 && (*type)[len] == '\0') { ap_log_rerror(APLOG_MARK, APLOG_TRACE4, 0, r, "... matched '%s'", *type); match = 1; break; } else { ap_log_rerror(APLOG_MARK, APLOG_TRACE4, 0, r, "... did not match '%s'", *type); } type++; } ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "Content-Type condition for '%s' %s", provider->frec->name, match ? "matched" : "did not match"); } else { ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "Content-Type condition for '%s' did not match: " "no Content-Type", provider->frec->name); } if (match) { /* condition matches this provider */ #ifndef NO_PROTOCOL /* check protocol * * FIXME: * This is a quick hack and almost certainly buggy. * The idea is that by putting this in mod_filter, we relieve * filter implementations of the burden of fixing up HTTP headers * for cases that are routinely affected by filters. * * Default is ALWAYS to do nothing, so as not to tread on the * toes of filters which want to do it themselves. * */ proto_flags = provider->frec->proto_flags; /* some specific things can't happen in a proxy */ if (r->proxyreq) { if (proto_flags & AP_FILTER_PROTO_NO_PROXY) { /* can't use this provider; try next */ continue; } if (proto_flags & AP_FILTER_PROTO_TRANSFORM) { const char *str = apr_table_get(r->headers_out, "Cache-Control"); if (str) { if (ap_strcasestr(str, "no-transform")) { /* can't use this provider; try next */ continue; } } apr_table_addn(r->headers_out, "Warning", apr_psprintf(r->pool, "214 %s Transformation applied", r->hostname)); } } /* things that are invalidated if the filter transforms content */ if (proto_flags & AP_FILTER_PROTO_CHANGE) { apr_table_unset(r->headers_out, "Content-MD5"); apr_table_unset(r->headers_out, "ETag"); if (proto_flags & AP_FILTER_PROTO_CHANGE_LENGTH) { apr_table_unset(r->headers_out, "Content-Length"); } } /* no-cache is for a filter that has different effect per-hit */ if (proto_flags & AP_FILTER_PROTO_NO_CACHE) { apr_table_unset(r->headers_out, "Last-Modified"); apr_table_addn(r->headers_out, "Cache-Control", "no-cache"); } if (proto_flags & AP_FILTER_PROTO_NO_BYTERANGE) { apr_table_setn(r->headers_out, "Accept-Ranges", "none"); } else if (rctx && rctx->range) { /* restore range header we saved earlier */ apr_table_setn(r->headers_in, "Range", rctx->range); rctx->range = NULL; } #endif for (pctx = ctx->init_ctx; pctx; pctx = pctx->next) { if (pctx->provider == provider) { ctx->fctx = pctx->ctx ; } } ctx->func = provider->frec->filter_func.out_func; return 1; } } /* No provider matched */ return 0; } static apr_status_t filter_harness(ap_filter_t *f, apr_bucket_brigade *bb) { apr_status_t ret; #ifndef NO_PROTOCOL const char *cachecontrol; #endif harness_ctx *ctx = f->ctx; ap_filter_rec_t *filter = f->frec; if (f->r->status != 200 && !apr_table_get(f->r->subprocess_env, "filter-errordocs")) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } filter_trace(f->c, filter->debug, f->frec->name, bb); /* look up a handler function if we haven't already set it */ if (!ctx->func) { #ifndef NO_PROTOCOL if (f->r->proxyreq) { if (filter->proto_flags & AP_FILTER_PROTO_NO_PROXY) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } if (filter->proto_flags & AP_FILTER_PROTO_TRANSFORM) { cachecontrol = apr_table_get(f->r->headers_out, "Cache-Control"); if (cachecontrol) { if (ap_strcasestr(cachecontrol, "no-transform")) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } } } } #endif if (!filter_lookup(f, filter)) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } AP_DEBUG_ASSERT(ctx->func != NULL); } /* call the content filter with its own context, then restore our * context */ f->ctx = ctx->fctx; ret = ctx->func(f, bb); ctx->fctx = f->ctx; f->ctx = ctx; return ret; } #ifndef NO_PROTOCOL static const char *filter_protocol(cmd_parms *cmd, void *CFG, const char *fname, const char *pname, const char *proto) { static const char *sep = ";, \t"; char *arg; char *tok = 0; unsigned int flags = 0; mod_filter_cfg *cfg = CFG; ap_filter_provider_t *provider = NULL; ap_filter_rec_t *filter = apr_hash_get(cfg->live_filters, fname, APR_HASH_KEY_STRING); if (!filter) { return "FilterProtocol: No such filter"; } /* Fixup the args: it's really pname that's optional */ if (proto == NULL) { proto = pname; pname = NULL; } else { /* Find provider */ for (provider = filter->providers; provider; provider = provider->next) { if (!strcasecmp(provider->frec->name, pname)) { break; } } if (!provider) { return "FilterProtocol: No such provider for this filter"; } } /* Now set flags from our args */ for (arg = apr_strtok(apr_pstrdup(cmd->temp_pool, proto), sep, &tok); arg; arg = apr_strtok(NULL, sep, &tok)) { if (!strcasecmp(arg, "change=yes")) { flags |= AP_FILTER_PROTO_CHANGE | AP_FILTER_PROTO_CHANGE_LENGTH; } if (!strcasecmp(arg, "change=no")) { flags &= ~(AP_FILTER_PROTO_CHANGE | AP_FILTER_PROTO_CHANGE_LENGTH); } else if (!strcasecmp(arg, "change=1:1")) { flags |= AP_FILTER_PROTO_CHANGE; } else if (!strcasecmp(arg, "byteranges=no")) { flags |= AP_FILTER_PROTO_NO_BYTERANGE; } else if (!strcasecmp(arg, "proxy=no")) { flags |= AP_FILTER_PROTO_NO_PROXY; } else if (!strcasecmp(arg, "proxy=transform")) { flags |= AP_FILTER_PROTO_TRANSFORM; } else if (!strcasecmp(arg, "cache=no")) { flags |= AP_FILTER_PROTO_NO_CACHE; } } if (pname) { provider->frec->proto_flags = flags; } else { filter->proto_flags = flags; } return NULL; } #endif static const char *filter_declare(cmd_parms *cmd, void *CFG, const char *fname, const char *place) { mod_filter_cfg *cfg = (mod_filter_cfg *)CFG; ap_filter_rec_t *filter; filter = apr_pcalloc(cmd->pool, sizeof(ap_filter_rec_t)); apr_hash_set(cfg->live_filters, fname, APR_HASH_KEY_STRING, filter); filter->name = fname; filter->filter_init_func = filter_init; filter->filter_func.out_func = filter_harness; filter->ftype = AP_FTYPE_RESOURCE; filter->next = NULL; if (place) { if (!strcasecmp(place, "CONTENT_SET")) { filter->ftype = AP_FTYPE_CONTENT_SET; } else if (!strcasecmp(place, "PROTOCOL")) { filter->ftype = AP_FTYPE_PROTOCOL; } else if (!strcasecmp(place, "CONNECTION")) { filter->ftype = AP_FTYPE_CONNECTION; } else if (!strcasecmp(place, "NETWORK")) { filter->ftype = AP_FTYPE_NETWORK; } } return NULL; } static const char *add_filter(cmd_parms *cmd, void *CFG, const char *fname, const char *pname, const char *expr, const char **types) { mod_filter_cfg *cfg = CFG; ap_filter_provider_t *provider; const char *c; ap_filter_rec_t* frec; ap_filter_rec_t* provider_frec; ap_expr_info_t *node; const char *err = NULL; /* if provider has been registered, we can look it up */ provider_frec = ap_get_output_filter_handle(pname); if (!provider_frec) { return apr_psprintf(cmd->pool, "Unknown filter provider %s", pname); } /* fname has been declared with DeclareFilter, so we can look it up */ frec = apr_hash_get(cfg->live_filters, fname, APR_HASH_KEY_STRING); /* or if provider is mod_filter itself, we can also look it up */ if (!frec) { c = filter_declare(cmd, CFG, fname, NULL); if ( c ) { return c; } frec = apr_hash_get(cfg->live_filters, fname, APR_HASH_KEY_STRING); frec->ftype = provider_frec->ftype; } if (!frec) { return apr_psprintf(cmd->pool, "Undeclared smart filter %s", fname); } provider = apr_palloc(cmd->pool, sizeof(ap_filter_provider_t)); if (expr) { node = ap_expr_parse_cmd(cmd, expr, 0, &err, NULL); if (err) { return apr_pstrcat(cmd->pool, "Error parsing FilterProvider expression:", err, NULL); } provider->expr = node; provider->types = NULL; } else { provider->types = types; provider->expr = NULL; } provider->frec = provider_frec; provider->next = frec->providers; frec->providers = provider; return NULL; } static const char *filter_provider(cmd_parms *cmd, void *CFG, const char *fname, const char *pname, const char *expr) { return add_filter(cmd, CFG, fname, pname, expr, NULL); } static const char *filter_chain(cmd_parms *cmd, void *CFG, const char *arg) { mod_filter_chain *p; mod_filter_chain *q; mod_filter_cfg *cfg = CFG; switch (arg[0]) { case '+': /* add to end of chain */ p = apr_pcalloc(cmd->pool, sizeof(mod_filter_chain)); p->fname = arg+1; if (cfg->chain) { for (q = cfg->chain; q->next; q = q->next); q->next = p; } else { cfg->chain = p; } break; case '@': /* add to start of chain */ p = apr_palloc(cmd->pool, sizeof(mod_filter_chain)); p->fname = arg+1; p->next = cfg->chain; cfg->chain = p; break; case '-': /* remove from chain */ if (cfg->chain) { if (strcasecmp(cfg->chain->fname, arg+1)) { for (p = cfg->chain; p->next; p = p->next) { if (!strcasecmp(p->next->fname, arg+1)) { p->next = p->next->next; } } } else { cfg->chain = cfg->chain->next; } } break; case '!': /* Empty the chain */ /** IG: Add a NULL provider to the beginning so that * we can ensure that we'll empty everything before * this when doing config merges later */ p = apr_pcalloc(cmd->pool, sizeof(mod_filter_chain)); p->fname = NULL; cfg->chain = p; break; case '=': /* initialise chain with this arg */ /** IG: Prepend a NULL provider to the beginning as above */ p = apr_pcalloc(cmd->pool, sizeof(mod_filter_chain)); p->fname = NULL; p->next = apr_pcalloc(cmd->pool, sizeof(mod_filter_chain)); p->next->fname = arg+1; cfg->chain = p; break; default: /* add to end */ p = apr_pcalloc(cmd->pool, sizeof(mod_filter_chain)); p->fname = arg; if (cfg->chain) { for (q = cfg->chain; q->next; q = q->next); q->next = p; } else { cfg->chain = p; } break; } return NULL; } static const char *filter_bytype1(cmd_parms *cmd, void *CFG, const char *pname, const char **types) { const char *rv; const char *fname; int seen_name = 0; mod_filter_cfg *cfg = CFG; /* construct fname from name */ fname = apr_pstrcat(cmd->pool, "BYTYPE:", pname, NULL); /* check whether this is already registered, in which case * it's already in the filter chain */ if (apr_hash_get(cfg->live_filters, fname, APR_HASH_KEY_STRING)) { seen_name = 1; } rv = add_filter(cmd, CFG, fname, pname, NULL, types); /* If it's the first time through, add to filterchain */ if (rv == NULL && !seen_name) { rv = filter_chain(cmd, CFG, fname); } return rv; } static const char *filter_bytype(cmd_parms *cmd, void *CFG, int argc, char *const argv[]) { /* back compatibility, need to parse multiple components in filter name */ char *pname; char *strtok_state = NULL; char *name; const char **types; const char *rv = NULL; if (argc < 2) return "AddOutputFilterByType requires at least two arguments"; name = apr_pstrdup(cmd->temp_pool, argv[0]); types = apr_palloc(cmd->pool, argc * sizeof(char *)); memcpy(types, &argv[1], (argc - 1) * sizeof(char *)); types[argc-1] = NULL; for (pname = apr_strtok(name, ";", &strtok_state); pname != NULL && rv == NULL; pname = apr_strtok(NULL, ";", &strtok_state)) { rv = filter_bytype1(cmd, CFG, pname, types); } return rv; } static const char *filter_debug(cmd_parms *cmd, void *CFG, const char *fname, const char *level) { mod_filter_cfg *cfg = CFG; ap_filter_rec_t *frec = apr_hash_get(cfg->live_filters, fname, APR_HASH_KEY_STRING); if (!frec) { return apr_psprintf(cmd->pool, "Undeclared smart filter %s", fname); } frec->debug = atoi(level); return NULL; } static void filter_insert(request_rec *r) { mod_filter_chain *p; ap_filter_rec_t *filter; mod_filter_cfg *cfg = ap_get_module_config(r->per_dir_config, &filter_module); #ifndef NO_PROTOCOL int ranges = 1; mod_filter_ctx *ctx = apr_pcalloc(r->pool, sizeof(mod_filter_ctx)); ap_set_module_config(r->request_config, &filter_module, ctx); #endif /** IG: Now that we've merged to the final config, go one last time * through the chain, and prune out the NULL filters */ for (p = cfg->chain; p; p = p->next) { if (p->fname == NULL) cfg->chain = p->next; } for (p = cfg->chain; p; p = p->next) { filter = apr_hash_get(cfg->live_filters, p->fname, APR_HASH_KEY_STRING); if (filter == NULL) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01380) "Unknown filter %s not added", p->fname); continue; } ap_add_output_filter_handle(filter, NULL, r, r->connection); #ifndef NO_PROTOCOL if (ranges && (filter->proto_flags & (AP_FILTER_PROTO_NO_BYTERANGE | AP_FILTER_PROTO_CHANGE_LENGTH))) { ctx->range = apr_table_get(r->headers_in, "Range"); apr_table_unset(r->headers_in, "Range"); ranges = 0; } #endif } } static void filter_hooks(apr_pool_t *pool) { ap_hook_insert_filter(filter_insert, NULL, NULL, APR_HOOK_MIDDLE); } static void *filter_config(apr_pool_t *pool, char *x) { mod_filter_cfg *cfg = apr_palloc(pool, sizeof(mod_filter_cfg)); cfg->live_filters = apr_hash_make(pool); cfg->chain = NULL; return cfg; } static void *filter_merge(apr_pool_t *pool, void *BASE, void *ADD) { mod_filter_cfg *base = BASE; mod_filter_cfg *add = ADD; mod_filter_chain *savelink = 0; mod_filter_chain *newlink; mod_filter_chain *p; mod_filter_cfg *conf = apr_palloc(pool, sizeof(mod_filter_cfg)); conf->live_filters = apr_hash_overlay(pool, add->live_filters, base->live_filters); if (base->chain && add->chain) { for (p = base->chain; p; p = p->next) { newlink = apr_pmemdup(pool, p, sizeof(mod_filter_chain)); if (newlink->fname == NULL) { conf->chain = savelink = newlink; } else if (savelink) { savelink->next = newlink; savelink = newlink; } else { conf->chain = savelink = newlink; } } for (p = add->chain; p; p = p->next) { newlink = apr_pmemdup(pool, p, sizeof(mod_filter_chain)); /** Filter out merged chain resets */ if (newlink->fname == NULL) { conf->chain = savelink = newlink; } else if (savelink) { savelink->next = newlink; savelink = newlink; } else { conf->chain = savelink = newlink; } } } else if (add->chain) { conf->chain = add->chain; } else { conf->chain = base->chain; } return conf; } static const command_rec filter_cmds[] = { AP_INIT_TAKE12("FilterDeclare", filter_declare, NULL, OR_OPTIONS, "filter-name [filter-type]"), AP_INIT_TAKE3("FilterProvider", filter_provider, NULL, OR_OPTIONS, "filter-name provider-name match-expression"), AP_INIT_ITERATE("FilterChain", filter_chain, NULL, OR_OPTIONS, "list of filter names with optional [+-=!@]"), AP_INIT_TAKE2("FilterTrace", filter_debug, NULL, RSRC_CONF | ACCESS_CONF, "filter-name debug-level"), AP_INIT_TAKE_ARGV("AddOutputFilterByType", filter_bytype, NULL, OR_FILEINFO, "output filter name followed by one or more content-types"), #ifndef NO_PROTOCOL AP_INIT_TAKE23("FilterProtocol", filter_protocol, NULL, OR_OPTIONS, "filter-name [provider-name] protocol-args"), #endif { NULL } }; AP_DECLARE_MODULE(filter) = { STANDARD20_MODULE_STUFF, filter_config, filter_merge, NULL, NULL, filter_cmds, filter_hooks }; httpd-2.4.41/modules/filters/mod_substitute.dsp0000644000000000000500000001104512062614564020145 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_substitute" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_substitute - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_substitute.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_substitute.mak" CFG="mod_substitute - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_substitute - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_substitute - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_substitute - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_substitute_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_substitute.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_substitute.so" /d LONG_NAME="substitute_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_substitute.so" /base:@..\..\os\win32\BaseAddr.ref,mod_substitute.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_substitute.so" /base:@..\..\os\win32\BaseAddr.ref,mod_substitute.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_substitute.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_substitute - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_substitute_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_substitute.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_substitute.so" /d LONG_NAME="substitute_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_substitute.so" /base:@..\..\os\win32\BaseAddr.ref,mod_substitute.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_substitute.so" /base:@..\..\os\win32\BaseAddr.ref,mod_substitute.so # Begin Special Build Tool TargetPath=.\Debug\mod_substitute.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_substitute - Win32 Release" # Name "mod_substitute - Win32 Debug" # Begin Source File SOURCE=.\mod_substitute.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/filters/mod_ext_filter.exp0000644000000000000500000000002210150161574020070 0ustar rootsrcext_filter_module httpd-2.4.41/modules/filters/mod_proxy_html.mak0000644000000000000500000002466412701473373020135 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_proxy_html.dsp !IF "$(CFG)" == "" CFG=mod_proxy_html - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_proxy_html - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_proxy_html - Win32 Release" && "$(CFG)" != "mod_proxy_html - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_html.mak" CFG="mod_proxy_html - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_html - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_html - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_proxy_html - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_html.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_proxy_html.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\httpd.res" -@erase "$(INTDIR)\mod_proxy_html.obj" -@erase "$(INTDIR)\mod_proxy_html_src.idb" -@erase "$(INTDIR)\mod_proxy_html_src.pdb" -@erase "$(OUTDIR)\mod_proxy_html.exp" -@erase "$(OUTDIR)\mod_proxy_html.lib" -@erase "$(OUTDIR)\mod_proxy_html.pdb" -@erase "$(OUTDIR)\mod_proxy_html.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/libxml2/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_html_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\httpd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../srclib/apr-util/include" /i "../../srclib/libxml2/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_html.so" /d LONG_NAME="proxy_html_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_html.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib libxml2.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_html.pdb" /debug /out:"$(OUTDIR)\mod_proxy_html.so" /implib:"$(OUTDIR)\mod_proxy_html.lib" /libpath:"../../srclib/libxml2/win32/bin.msvc" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_html.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_proxy_html.obj" \ "$(INTDIR)\httpd.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_proxy_html.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_proxy_html.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_html.so" if exist .\Release\mod_proxy_html.so.manifest mt.exe -manifest .\Release\mod_proxy_html.so.manifest -outputresource:.\Release\mod_proxy_html.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_proxy_html - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_html.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_proxy_html.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\httpd.res" -@erase "$(INTDIR)\mod_proxy_html.obj" -@erase "$(INTDIR)\mod_proxy_html_src.idb" -@erase "$(INTDIR)\mod_proxy_html_src.pdb" -@erase "$(OUTDIR)\mod_proxy_html.exp" -@erase "$(OUTDIR)\mod_proxy_html.lib" -@erase "$(OUTDIR)\mod_proxy_html.pdb" -@erase "$(OUTDIR)\mod_proxy_html.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/libxml2/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_html_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\httpd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../srclib/apr-util/include" /i "../../srclib/libxml2/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_html.so" /d LONG_NAME="proxy_html_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_html.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib libxml2.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_html.pdb" /debug /out:"$(OUTDIR)\mod_proxy_html.so" /implib:"$(OUTDIR)\mod_proxy_html.lib" /libpath:"../../srclib/libxml2/win32/bin.msvc" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_html.so LINK32_OBJS= \ "$(INTDIR)\mod_proxy_html.obj" \ "$(INTDIR)\httpd.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_proxy_html.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_proxy_html.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_html.so" if exist .\Debug\mod_proxy_html.so.manifest mt.exe -manifest .\Debug\mod_proxy_html.so.manifest -outputresource:.\Debug\mod_proxy_html.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_proxy_html.dep") !INCLUDE "mod_proxy_html.dep" !ELSE !MESSAGE Warning: cannot find "mod_proxy_html.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_proxy_html - Win32 Release" || "$(CFG)" == "mod_proxy_html - Win32 Debug" SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_proxy_html - Win32 Release" "$(INTDIR)\httpd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\httpd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../srclib/apr-util/include" /i "../../srclib/libxml2/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_proxy_html.so" /d LONG_NAME="proxy_html_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_proxy_html - Win32 Debug" "$(INTDIR)\httpd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\httpd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../srclib/apr-util/include" /i "../../srclib/libxml2/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_proxy_html.so" /d LONG_NAME="proxy_html_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_proxy_html.c "$(INTDIR)\mod_proxy_html.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_proxy_html - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\filters" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_proxy_html - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\filters" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_proxy_html - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\filters" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\filters" !ELSEIF "$(CFG)" == "mod_proxy_html - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\filters" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\filters" !ENDIF !IF "$(CFG)" == "mod_proxy_html - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\filters" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\filters" !ELSEIF "$(CFG)" == "mod_proxy_html - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\filters" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\filters" !ENDIF !ENDIF httpd-2.4.41/modules/filters/mod_data.c0000644000000000000500000002015712215073107016273 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_data.c --- Turn the response into an rfc2397 data URL, suitable for * displaying as inline content on a page. */ #include "apr.h" #include "apr_strings.h" #include "apr_buckets.h" #include "apr_base64.h" #include "apr_lib.h" #include "ap_config.h" #include "util_filter.h" #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_request.h" #include "http_protocol.h" #define DATA_FILTER "DATA" module AP_MODULE_DECLARE_DATA data_module; typedef struct data_ctx { unsigned char overflow[3]; int count; apr_bucket_brigade *bb; } data_ctx; /** * Create a data URL as follows: * * data:[;][charset=;]base64, * * Where: * * mime-type: The mime type of the original response. * charset: The optional character set corresponding to the mime type. * payload: A base64 version of the response body. * * The content type of the response is set to text/plain. * * The Content-Length header, if present, is updated with the new content * length based on the increase in size expected from the base64 conversion. * If the Content-Length header is too large to fit into an int, we remove * the Content-Length header instead. */ static apr_status_t data_out_filter(ap_filter_t *f, apr_bucket_brigade *bb) { apr_bucket *e, *ee; request_rec *r = f->r; data_ctx *ctx = f->ctx; apr_status_t rv = APR_SUCCESS; /* first time in? create a context */ if (!ctx) { char *type; char *charset = NULL; char *end; const char *content_length; /* base64-ing won't work on subrequests, it would be nice if * it did. Within subrequests, we have no EOS to check for, * so we don't know when to flush the tail to the network. */ if (!ap_is_initial_req(f->r)) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } ctx = f->ctx = apr_pcalloc(r->pool, sizeof(*ctx)); ctx->bb = apr_brigade_create(r->pool, f->c->bucket_alloc); type = apr_pstrdup(r->pool, r->content_type); if (type) { charset = strchr(type, ' '); if (charset) { *charset++ = 0; end = strchr(charset, ' '); if (end) { *end++ = 0; } } } apr_brigade_printf(ctx->bb, NULL, NULL, "data:%s%s;base64,", type ? type : "", charset ? charset : ""); content_length = apr_table_get(r->headers_out, "Content-Length"); if (content_length) { apr_off_t len, clen; apr_brigade_length(ctx->bb, 1, &len); clen = apr_atoi64(content_length); if (clen >= 0 && clen < APR_INT32_MAX) { ap_set_content_length(r, len + apr_base64_encode_len((int)clen) - 1); } else { apr_table_unset(r->headers_out, "Content-Length"); } } ap_set_content_type(r, "text/plain"); } /* Do nothing if asked to filter nothing. */ if (APR_BRIGADE_EMPTY(bb)) { return ap_pass_brigade(f->next, bb); } while (APR_SUCCESS == rv && !APR_BRIGADE_EMPTY(bb)) { const char *data; apr_size_t size; apr_size_t tail; apr_size_t len; /* buffer big enough for 8000 encoded bytes (6000 raw bytes) and terminator */ char buffer[APR_BUCKET_BUFF_SIZE + 1]; char encoded[((sizeof(ctx->overflow)) / 3) * 4 + 1]; e = APR_BRIGADE_FIRST(bb); /* EOS means we are done. */ if (APR_BUCKET_IS_EOS(e)) { /* write away the tail */ if (ctx->count) { len = apr_base64_encode_binary(encoded, ctx->overflow, ctx->count); apr_brigade_write(ctx->bb, NULL, NULL, encoded, len - 1); ctx->count = 0; } /* pass the EOS across */ APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); /* pass what we have down the chain */ ap_remove_output_filter(f); rv = ap_pass_brigade(f->next, ctx->bb); /* pass any stray buckets after the EOS down the stack */ if ((APR_SUCCESS == rv) && (!APR_BRIGADE_EMPTY(bb))) { rv = ap_pass_brigade(f->next, bb); } continue; } /* flush what we can, we can't flush the tail until EOS */ if (APR_BUCKET_IS_FLUSH(e)) { /* pass the flush bucket across */ APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); /* pass what we have down the chain */ rv = ap_pass_brigade(f->next, ctx->bb); continue; } /* metadata buckets are preserved as is */ if (APR_BUCKET_IS_METADATA(e)) { /* * Remove meta data bucket from old brigade and insert into the * new. */ APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); continue; } /* make sure we don't read more than 6000 bytes at a time */ apr_brigade_partition(bb, (APR_BUCKET_BUFF_SIZE / 4 * 3), &ee); /* size will never be more than 6000 bytes */ if (APR_SUCCESS == (rv = apr_bucket_read(e, &data, &size, APR_BLOCK_READ))) { /* fill up and write out our overflow buffer if partially used */ while (size && ctx->count && ctx->count < sizeof(ctx->overflow)) { ctx->overflow[ctx->count++] = *data++; size--; } if (ctx->count == sizeof(ctx->overflow)) { len = apr_base64_encode_binary(encoded, ctx->overflow, sizeof(ctx->overflow)); apr_brigade_write(ctx->bb, NULL, NULL, encoded, len - 1); ctx->count = 0; } /* write the main base64 chunk */ tail = size % sizeof(ctx->overflow); size -= tail; if (size) { len = apr_base64_encode_binary(buffer, (const unsigned char *) data, size); apr_brigade_write(ctx->bb, NULL, NULL, buffer, len - 1); } /* save away any tail in the overflow buffer */ if (tail) { memcpy(ctx->overflow, data + size, tail); ctx->count += tail; } apr_bucket_delete(e); /* pass what we have down the chain */ rv = ap_pass_brigade(f->next, ctx->bb); if (rv) { /* should break out of the loop, since our write to the client * failed in some way. */ continue; } } } return rv; } static const command_rec data_cmds[] = { { NULL } }; static void register_hooks(apr_pool_t *p) { ap_register_output_filter(DATA_FILTER, data_out_filter, NULL, AP_FTYPE_RESOURCE); } AP_DECLARE_MODULE(data) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ data_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/filters/NWGNUmod_filter0000644000000000000500000001014511540546347017254 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = mod_filter # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Filter Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Filter Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/mod_filter.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_filter.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ filter_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/filters/regexp.c0000644000000000000500000003551513025005707016022 0ustar rootsrc/* * Copyright (c) 2005, 2008 Sun Microsystems, Inc. All Rights Reserved. * Use is subject to license terms. * * Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T * All Rights Reserved * * University Copyright- Copyright (c) 1982, 1986, 1988 * The Regents of the University of California * All Rights Reserved * * University Acknowledgment- Portions of this document are derived from * software developed by the University of California, Berkeley, and its * contributors. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * http://www.apache.org/licenses/LICENSE-2.0. * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express * or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* Code moved from regexp.h */ #include "apr.h" #include "apr_lib.h" #if APR_HAVE_LIMITS_H #include #endif #if APR_HAVE_STDLIB_H #include #endif #include "libsed.h" #include "regexp.h" #include "sed.h" #define GETC() ((unsigned char)*sp++) #define PEEKC() ((unsigned char)*sp) #define UNGETC(c) (--sp) #define SEDCOMPILE_ERROR(c) { \ regerrno = c; \ goto out; \ } #define ecmp(s1, s2, n) (strncmp(s1, s2, n) == 0) #define uletter(c) (isalpha(c) || c == '_') static unsigned char bittab[] = { 1, 2, 4, 8, 16, 32, 64, 128 }; static int regerr(sed_commands_t *commands, int err); static void comperr(sed_commands_t *commands, char *msg); static void getrnge(char *str, step_vars_storage *vars); static int _advance(char *, char *, step_vars_storage *); extern int sed_step(char *p1, char *p2, int circf, step_vars_storage *vars); static void comperr(sed_commands_t *commands, char *msg) { command_errf(commands, msg, commands->linebuf); } /* */ static int regerr(sed_commands_t *commands, int err) { switch(err) { case 0: /* No error */ break; case 11: comperr(commands, "Range endpoint too large: %s"); break; case 16: comperr(commands, "Bad number: %s"); break; case 25: comperr(commands, "``\\digit'' out of range: %s"); break; case 36: comperr(commands, "Illegal or missing delimiter: %s"); break; case 41: comperr(commands, "No remembered search string: %s"); break; case 42: comperr(commands, "\\( \\) imbalance: %s"); break; case 43: comperr(commands, "Too many \\(: %s"); break; case 44: comperr(commands, "More than 2 numbers given in \\{ \\}: %s"); break; case 45: comperr(commands, "} expected after \\: %s"); break; case 46: comperr(commands, "First number exceeds second in \\{ \\}: %s"); break; case 49: comperr(commands, "[ ] imbalance: %s"); break; case 50: comperr(commands, SEDERR_TMMES); break; default: comperr(commands, "Unknown regexp error code %s\n"); break; } return (0); } char *sed_compile(sed_commands_t *commands, sed_comp_args *compargs, char *ep, char *endbuf, int seof) { int c; int eof = seof; char *lastep; int cclcnt; char bracket[NBRA], *bracketp; int closed; int neg; int lc; int i, cflg; int iflag; /* used for non-ascii characters in brackets */ char *sp = commands->cp; int regerrno = 0; lastep = 0; if ((c = GETC()) == eof || c == '\n') { if (c == '\n') { UNGETC(c); } commands->cp = sp; goto out; } bracketp = bracket; compargs->circf = closed = compargs->nbra = 0; if (c == '^') compargs->circf++; else UNGETC(c); while (1) { if (ep >= endbuf) SEDCOMPILE_ERROR(50); c = GETC(); if (c != '*' && ((c != '\\') || (PEEKC() != '{'))) lastep = ep; if (c == eof) { *ep++ = CCEOF; if (bracketp != bracket) SEDCOMPILE_ERROR(42); commands->cp = sp; goto out; } switch (c) { case '.': *ep++ = CDOT; continue; case '\n': SEDCOMPILE_ERROR(36); commands->cp = sp; goto out; case '*': if (lastep == 0 || *lastep == CBRA || *lastep == CKET) goto defchar; *lastep |= STAR; continue; case '$': if (PEEKC() != eof && PEEKC() != '\n') goto defchar; *ep++ = CDOL; continue; case '[': if (&ep[17] >= endbuf) SEDCOMPILE_ERROR(50); *ep++ = CCL; lc = 0; for (i = 0; i < 16; i++) ep[i] = 0; neg = 0; if ((c = GETC()) == '^') { neg = 1; c = GETC(); } iflag = 1; do { c &= 0377; if (c == '\0' || c == '\n') SEDCOMPILE_ERROR(49); if ((c & 0200) && iflag) { iflag = 0; if (&ep[32] >= endbuf) SEDCOMPILE_ERROR(50); ep[-1] = CXCL; for (i = 16; i < 32; i++) ep[i] = 0; } if (c == '-' && lc != 0) { if ((c = GETC()) == ']') { PLACE('-'); break; } if ((c & 0200) && iflag) { iflag = 0; if (&ep[32] >= endbuf) SEDCOMPILE_ERROR(50); ep[-1] = CXCL; for (i = 16; i < 32; i++) ep[i] = 0; } while (lc < c) { PLACE(lc); lc++; } } lc = c; PLACE(c); } while ((c = GETC()) != ']'); if (iflag) iflag = 16; else iflag = 32; if (neg) { if (iflag == 32) { for (cclcnt = 0; cclcnt < iflag; cclcnt++) ep[cclcnt] ^= 0377; ep[0] &= 0376; } else { ep[-1] = NCCL; /* make nulls match so test fails */ ep[0] |= 01; } } ep += iflag; continue; case '\\': switch (c = GETC()) { case '(': if (compargs->nbra >= NBRA) SEDCOMPILE_ERROR(43); *bracketp++ = compargs->nbra; *ep++ = CBRA; *ep++ = compargs->nbra++; continue; case ')': if (bracketp <= bracket) SEDCOMPILE_ERROR(42); *ep++ = CKET; *ep++ = *--bracketp; closed++; continue; case '{': if (lastep == (char *) 0) goto defchar; *lastep |= RNGE; cflg = 0; nlim: c = GETC(); i = 0; do { if ('0' <= c && c <= '9') i = 10 * i + c - '0'; else SEDCOMPILE_ERROR(16); } while (((c = GETC()) != '\\') && (c != ',')); if (i >= 255) SEDCOMPILE_ERROR(11); *ep++ = i; if (c == ',') { if (cflg++) SEDCOMPILE_ERROR(44); if ((c = GETC()) == '\\') *ep++ = (char) 255; else { UNGETC(c); goto nlim; /* get 2'nd number */ } } if (GETC() != '}') SEDCOMPILE_ERROR(45); if (!cflg) /* one number */ *ep++ = i; else if ((ep[-1] & 0377) < (ep[-2] & 0377)) SEDCOMPILE_ERROR(46); continue; case '\n': SEDCOMPILE_ERROR(36); case 'n': c = '\n'; goto defchar; default: if (c >= '1' && c <= '9') { if ((c -= '1') >= closed) SEDCOMPILE_ERROR(25); *ep++ = CBACK; *ep++ = c; continue; } } /* Drop through to default to use \ to turn off special chars */ defchar: default: lastep = ep; *ep++ = CCHR; *ep++ = c; } } out: if (regerrno) { regerr(commands, regerrno); return (char*) NULL; } /* XXX : Basant : what extra */ /* int reglength = (int)(ep - expbuf); */ return ep; } int sed_step(char *p1, char *p2, int circf, step_vars_storage *vars) { int c; if (circf) { vars->loc1 = p1; return (_advance(p1, p2, vars)); } /* fast check for first character */ if (*p2 == CCHR) { c = p2[1]; do { if (*p1 != c) continue; if (_advance(p1, p2, vars)) { vars->loc1 = p1; return (1); } } while (*p1++); return (0); } /* regular algorithm */ do { if (_advance(p1, p2, vars)) { vars->loc1 = p1; return (1); } } while (*p1++); return (0); } static int _advance(char *lp, char *ep, step_vars_storage *vars) { char *curlp; int c; char *bbeg; char neg; int ct; int epint; /* int value of *ep */ while (1) { neg = 0; switch (*ep++) { case CCHR: if (*ep++ == *lp++) continue; return (0); case CDOT: if (*lp++) continue; return (0); case CDOL: if (*lp == 0) continue; return (0); case CCEOF: vars->loc2 = lp; return (1); case CXCL: c = (unsigned char)*lp++; if (ISTHERE(c)) { ep += 32; continue; } return (0); case NCCL: neg = 1; case CCL: c = *lp++; if (((c & 0200) == 0 && ISTHERE(c)) ^ neg) { ep += 16; continue; } return (0); case CBRA: epint = (int) *ep; vars->braslist[epint] = lp; ep++; continue; case CKET: epint = (int) *ep; vars->braelist[epint] = lp; ep++; continue; case CCHR | RNGE: c = *ep++; getrnge(ep, vars); while (vars->low--) if (*lp++ != c) return (0); curlp = lp; while (vars->size--) if (*lp++ != c) break; if (vars->size < 0) lp++; ep += 2; goto star; case CDOT | RNGE: getrnge(ep, vars); while (vars->low--) if (*lp++ == '\0') return (0); curlp = lp; while (vars->size--) if (*lp++ == '\0') break; if (vars->size < 0) lp++; ep += 2; goto star; case CXCL | RNGE: getrnge(ep + 32, vars); while (vars->low--) { c = (unsigned char)*lp++; if (!ISTHERE(c)) return (0); } curlp = lp; while (vars->size--) { c = (unsigned char)*lp++; if (!ISTHERE(c)) break; } if (vars->size < 0) lp++; ep += 34; /* 32 + 2 */ goto star; case NCCL | RNGE: neg = 1; case CCL | RNGE: getrnge(ep + 16, vars); while (vars->low--) { c = *lp++; if (((c & 0200) || !ISTHERE(c)) ^ neg) return (0); } curlp = lp; while (vars->size--) { c = *lp++; if (((c & 0200) || !ISTHERE(c)) ^ neg) break; } if (vars->size < 0) lp++; ep += 18; /* 16 + 2 */ goto star; case CBACK: epint = (int) *ep; bbeg = vars->braslist[epint]; ct = vars->braelist[epint] - bbeg; ep++; if (ecmp(bbeg, lp, ct)) { lp += ct; continue; } return (0); case CBACK | STAR: epint = (int) *ep; bbeg = vars->braslist[epint]; ct = vars->braelist[epint] - bbeg; ep++; curlp = lp; while (ecmp(bbeg, lp, ct)) lp += ct; while (lp >= curlp) { if (_advance(lp, ep, vars)) return (1); lp -= ct; } return (0); case CDOT | STAR: curlp = lp; while (*lp++); goto star; case CCHR | STAR: curlp = lp; while (*lp++ == *ep); ep++; goto star; case CXCL | STAR: curlp = lp; do { c = (unsigned char)*lp++; } while (ISTHERE(c)); ep += 32; goto star; case NCCL | STAR: neg = 1; case CCL | STAR: curlp = lp; do { c = *lp++; } while (((c & 0200) == 0 && ISTHERE(c)) ^ neg); ep += 16; goto star; star: do { if (--lp == vars->locs) break; if (_advance(lp, ep, vars)) return (1); } while (lp > curlp); return (0); } } } static void getrnge(char *str, step_vars_storage *vars) { vars->low = *str++ & 0377; vars->size = ((*str & 0377) == 255)? 20000: (*str &0377) - vars->low; } httpd-2.4.41/modules/filters/NWGNUcharsetl0000644000000000000500000001031211540546347016731 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ -DAP_WANT_DIR_TRANSLATION \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = charsetl # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Charset Lite Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = charsetl # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/charsetl.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_charset_lite.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ charset_lite_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/filters/mod_include.c0000644000000000000500000041102113303773120017000 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr.h" #include "apr_strings.h" #include "apr_thread_proc.h" #include "apr_hash.h" #include "apr_user.h" #include "apr_lib.h" #include "apr_optional.h" #define APR_WANT_STRFUNC #define APR_WANT_MEMFUNC #include "apr_want.h" #include "ap_config.h" #include "util_filter.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_request.h" #include "http_core.h" #include "http_protocol.h" #include "http_log.h" #include "http_main.h" #include "util_script.h" #include "http_core.h" #include "mod_include.h" #include "ap_expr.h" /* helper for Latin1 <-> entity encoding */ #if APR_CHARSET_EBCDIC #include "util_ebcdic.h" #define RAW_ASCII_CHAR(ch) apr_xlate_conv_byte(ap_hdrs_from_ascii, \ (unsigned char)ch) #else /* APR_CHARSET_EBCDIC */ #define RAW_ASCII_CHAR(ch) (ch) #endif /* !APR_CHARSET_EBCDIC */ /* * +-------------------------------------------------------+ * | | * | Types and Structures * | | * +-------------------------------------------------------+ */ /* sll used for string expansion */ typedef struct result_item { struct result_item *next; apr_size_t len; const char *string; } result_item_t; /* conditional expression parser stuff */ typedef enum { TOKEN_STRING, TOKEN_RE, TOKEN_AND, TOKEN_OR, TOKEN_NOT, TOKEN_EQ, TOKEN_NE, TOKEN_RBRACE, TOKEN_LBRACE, TOKEN_GROUP, TOKEN_GE, TOKEN_LE, TOKEN_GT, TOKEN_LT, TOKEN_ACCESS } token_type_t; typedef struct { token_type_t type; const char *value; #ifdef DEBUG_INCLUDE const char *s; #endif } token_t; typedef struct parse_node { struct parse_node *parent; struct parse_node *left; struct parse_node *right; token_t token; int value; int done; #ifdef DEBUG_INCLUDE int dump_done; #endif } parse_node_t; typedef enum { XBITHACK_OFF, XBITHACK_ON, XBITHACK_FULL, XBITHACK_UNSET } xbithack_t; typedef struct { const char *default_error_msg; const char *default_time_fmt; const char *undefined_echo; xbithack_t xbithack; signed char lastmodified; signed char etag; signed char legacy_expr; } include_dir_config; typedef struct { const char *default_start_tag; const char *default_end_tag; } include_server_config; /* main parser states */ typedef enum { PARSE_PRE_HEAD, PARSE_HEAD, PARSE_DIRECTIVE, PARSE_DIRECTIVE_POSTNAME, PARSE_DIRECTIVE_TAIL, PARSE_DIRECTIVE_POSTTAIL, PARSE_PRE_ARG, PARSE_ARG, PARSE_ARG_NAME, PARSE_ARG_POSTNAME, PARSE_ARG_EQ, PARSE_ARG_PREVAL, PARSE_ARG_VAL, PARSE_ARG_VAL_ESC, PARSE_ARG_POSTVAL, PARSE_TAIL, PARSE_TAIL_SEQ, PARSE_EXECUTE } parse_state_t; typedef struct arg_item { struct arg_item *next; char *name; apr_size_t name_len; char *value; apr_size_t value_len; } arg_item_t; typedef struct { const char *source; const char *rexp; apr_size_t nsub; ap_regmatch_t match[AP_MAX_REG_MATCH]; int have_match; } backref_t; typedef struct { unsigned int T[256]; unsigned int x; apr_size_t pattern_len; } bndm_t; struct ssi_internal_ctx { parse_state_t state; int seen_eos; int error; char quote; /* quote character value (or \0) */ apr_size_t parse_pos; /* parse position of partial matches */ apr_size_t bytes_read; apr_bucket_brigade *tmp_bb; const char *start_seq; bndm_t *start_seq_pat; const char *end_seq; apr_size_t end_seq_len; char *directive; /* name of the current directive */ apr_size_t directive_len; /* length of the current directive name */ arg_item_t *current_arg; /* currently parsed argument */ arg_item_t *argv; /* all arguments */ backref_t *re; /* NULL if there wasn't a regex yet */ const char *undefined_echo; apr_size_t undefined_echo_len; char legacy_expr; /* use ap_expr or legacy mod_include expression parser? */ ap_expr_eval_ctx_t *expr_eval_ctx; /* NULL if there wasn't an ap_expr yet */ const char *expr_vary_this; /* for use by ap_expr_eval_ctx */ const char *expr_err; /* for use by ap_expr_eval_ctx */ #ifdef DEBUG_INCLUDE struct { ap_filter_t *f; apr_bucket_brigade *bb; } debug; #endif }; /* * +-------------------------------------------------------+ * | | * | Debugging Utilities * | | * +-------------------------------------------------------+ */ #ifdef DEBUG_INCLUDE #define TYPE_TOKEN(token, ttype) do { \ (token)->type = ttype; \ (token)->s = #ttype; \ } while(0) #define CREATE_NODE(ctx, name) do { \ (name) = apr_palloc((ctx)->dpool, sizeof(*(name))); \ (name)->parent = (name)->left = (name)->right = NULL; \ (name)->done = 0; \ (name)->dump_done = 0; \ } while(0) static void debug_printf(include_ctx_t *ctx, const char *fmt, ...) { va_list ap; char *debug__str; va_start(ap, fmt); debug__str = apr_pvsprintf(ctx->pool, fmt, ap); va_end(ap); APR_BRIGADE_INSERT_TAIL(ctx->intern->debug.bb, apr_bucket_pool_create( debug__str, strlen(debug__str), ctx->pool, ctx->intern->debug.f->c->bucket_alloc)); } #define DUMP__CHILD(ctx, is, node, child) if (1) { \ parse_node_t *d__c = node->child; \ if (d__c) { \ if (!d__c->dump_done) { \ if (d__c->parent != node) { \ debug_printf(ctx, "!!! Parse tree is not consistent !!!\n"); \ if (!d__c->parent) { \ debug_printf(ctx, "Parent of " #child " child node is " \ "NULL.\n"); \ } \ else { \ debug_printf(ctx, "Parent of " #child " child node " \ "points to another node (of type %s)!\n", \ d__c->parent->token.s); \ } \ return; \ } \ node = d__c; \ continue; \ } \ } \ else { \ debug_printf(ctx, "%s(missing)\n", is); \ } \ } static void debug_dump_tree(include_ctx_t *ctx, parse_node_t *root) { parse_node_t *current; char *is; if (!root) { debug_printf(ctx, " -- Parse Tree empty --\n\n"); return; } debug_printf(ctx, " ----- Parse Tree -----\n"); current = root; is = " "; while (current) { switch (current->token.type) { case TOKEN_STRING: case TOKEN_RE: debug_printf(ctx, "%s%s (%s)\n", is, current->token.s, current->token.value); current->dump_done = 1; current = current->parent; continue; case TOKEN_NOT: case TOKEN_GROUP: case TOKEN_RBRACE: case TOKEN_LBRACE: if (!current->dump_done) { debug_printf(ctx, "%s%s\n", is, current->token.s); is = apr_pstrcat(ctx->dpool, is, " ", NULL); current->dump_done = 1; } DUMP__CHILD(ctx, is, current, right) if (!current->right || current->right->dump_done) { is = apr_pstrmemdup(ctx->dpool, is, strlen(is) - 4); if (current->right) current->right->dump_done = 0; current = current->parent; } continue; default: if (!current->dump_done) { debug_printf(ctx, "%s%s\n", is, current->token.s); is = apr_pstrcat(ctx->dpool, is, " ", NULL); current->dump_done = 1; } DUMP__CHILD(ctx, is, current, left) DUMP__CHILD(ctx, is, current, right) if ((!current->left || current->left->dump_done) && (!current->right || current->right->dump_done)) { is = apr_pstrmemdup(ctx->dpool, is, strlen(is) - 4); if (current->left) current->left->dump_done = 0; if (current->right) current->right->dump_done = 0; current = current->parent; } continue; } } /* it is possible to call this function within the parser loop, to see * how the tree is built. That way, we must cleanup after us to dump * always the whole tree */ root->dump_done = 0; if (root->left) root->left->dump_done = 0; if (root->right) root->right->dump_done = 0; debug_printf(ctx, " --- End Parse Tree ---\n\n"); } #define DEBUG_INIT(ctx, filter, brigade) do { \ (ctx)->intern->debug.f = filter; \ (ctx)->intern->debug.bb = brigade; \ } while(0) #define DEBUG_PRINTF(arg) debug_printf arg #define DEBUG_DUMP_TOKEN(ctx, token) do { \ token_t *d__t = (token); \ \ if (d__t->type == TOKEN_STRING || d__t->type == TOKEN_RE) { \ DEBUG_PRINTF(((ctx), " Found: %s (%s)\n", d__t->s, d__t->value)); \ } \ else { \ DEBUG_PRINTF((ctx, " Found: %s\n", d__t->s)); \ } \ } while(0) #define DEBUG_DUMP_EVAL(ctx, node) do { \ char c = '"'; \ switch ((node)->token.type) { \ case TOKEN_STRING: \ debug_printf((ctx), " Evaluate: %s (%s) -> %c\n", (node)->token.s,\ (node)->token.value, ((node)->value) ? '1':'0'); \ break; \ case TOKEN_AND: \ case TOKEN_OR: \ debug_printf((ctx), " Evaluate: %s (Left: %s; Right: %s) -> %c\n",\ (node)->token.s, \ (((node)->left->done) ? ((node)->left->value ?"1":"0") \ : "short circuited"), \ (((node)->right->done) ? ((node)->right->value?"1":"0") \ : "short circuited"), \ (node)->value ? '1' : '0'); \ break; \ case TOKEN_EQ: \ case TOKEN_NE: \ case TOKEN_GT: \ case TOKEN_GE: \ case TOKEN_LT: \ case TOKEN_LE: \ if ((node)->right->token.type == TOKEN_RE) c = '/'; \ debug_printf((ctx), " Compare: %s (\"%s\" with %c%s%c) -> %c\n", \ (node)->token.s, \ (node)->left->token.value, \ c, (node)->right->token.value, c, \ (node)->value ? '1' : '0'); \ break; \ default: \ debug_printf((ctx), " Evaluate: %s -> %c\n", (node)->token.s, \ (node)->value ? '1' : '0'); \ break; \ } \ } while(0) #define DEBUG_DUMP_UNMATCHED(ctx, unmatched) do { \ if (unmatched) { \ DEBUG_PRINTF(((ctx), " Unmatched %c\n", (char)(unmatched))); \ } \ } while(0) #define DEBUG_DUMP_COND(ctx, text) \ DEBUG_PRINTF(((ctx), "**** %s cond status=\"%c\"\n", (text), \ ((ctx)->flags & SSI_FLAG_COND_TRUE) ? '1' : '0')) #define DEBUG_DUMP_TREE(ctx, root) debug_dump_tree(ctx, root) #else /* DEBUG_INCLUDE */ #define TYPE_TOKEN(token, ttype) (token)->type = ttype #define CREATE_NODE(ctx, name) do { \ (name) = apr_palloc((ctx)->dpool, sizeof(*(name))); \ (name)->parent = (name)->left = (name)->right = NULL; \ (name)->done = 0; \ } while(0) #define DEBUG_INIT(ctx, f, bb) #define DEBUG_PRINTF(arg) #define DEBUG_DUMP_TOKEN(ctx, token) #define DEBUG_DUMP_EVAL(ctx, node) #define DEBUG_DUMP_UNMATCHED(ctx, unmatched) #define DEBUG_DUMP_COND(ctx, text) #define DEBUG_DUMP_TREE(ctx, root) #endif /* !DEBUG_INCLUDE */ /* * +-------------------------------------------------------+ * | | * | Static Module Data * | | * +-------------------------------------------------------+ */ /* global module structure */ module AP_MODULE_DECLARE_DATA include_module; /* function handlers for include directives */ static apr_hash_t *include_handlers; /* forward declaration of handler registry */ static APR_OPTIONAL_FN_TYPE(ap_register_include_handler) *ssi_pfn_register; /* Sentinel value to store in subprocess_env for items that * shouldn't be evaluated until/unless they're actually used */ static const char lazy_eval_sentinel = '\0'; #define LAZY_VALUE (&lazy_eval_sentinel) /* default values */ #define DEFAULT_START_SEQUENCE "" #define DEFAULT_ERROR_MSG "[an error occurred while processing this directive]" #define DEFAULT_TIME_FORMAT "%A, %d-%b-%Y %H:%M:%S %Z" #define DEFAULT_UNDEFINED_ECHO "(none)" #define UNSET -1 #ifdef XBITHACK #define DEFAULT_XBITHACK XBITHACK_FULL #else #define DEFAULT_XBITHACK XBITHACK_OFF #endif /* * +-------------------------------------------------------+ * | | * | Environment/Expansion Functions * | | * +-------------------------------------------------------+ */ /* * decodes a string containing html entities or numeric character references. * 's' is overwritten with the decoded string. * If 's' is syntatically incorrect, then the followed fixups will be made: * unknown entities will be left undecoded; * references to unused numeric characters will be deleted. * In particular, � will not be decoded, but will be deleted. */ /* maximum length of any ISO-LATIN-1 HTML entity name. */ #define MAXENTLEN (6) /* The following is a shrinking transformation, therefore safe. */ /* Note: this function is deprecated in favour of apr_unescape_entity() in APR */ static void decodehtml(char *s) { int val, i, j; char *p; const char *ents; static const char * const entlist[MAXENTLEN + 1] = { NULL, /* 0 */ NULL, /* 1 */ "lt\074gt\076", /* 2 */ "amp\046ETH\320eth\360", /* 3 */ "quot\042Auml\304Euml\313Iuml\317Ouml\326Uuml\334auml\344euml" "\353iuml\357ouml\366uuml\374yuml\377", /* 4 */ "Acirc\302Aring\305AElig\306Ecirc\312Icirc\316Ocirc\324Ucirc" "\333THORN\336szlig\337acirc\342aring\345aelig\346ecirc\352" "icirc\356ocirc\364ucirc\373thorn\376", /* 5 */ "Agrave\300Aacute\301Atilde\303Ccedil\307Egrave\310Eacute\311" "Igrave\314Iacute\315Ntilde\321Ograve\322Oacute\323Otilde" "\325Oslash\330Ugrave\331Uacute\332Yacute\335agrave\340" "aacute\341atilde\343ccedil\347egrave\350eacute\351igrave" "\354iacute\355ntilde\361ograve\362oacute\363otilde\365" "oslash\370ugrave\371uacute\372yacute\375" /* 6 */ }; /* Do a fast scan through the string until we find anything * that needs more complicated handling */ for (; *s != '&'; s++) { if (*s == '\0') { return; } } for (p = s; *s != '\0'; s++, p++) { if (*s != '&') { *p = *s; continue; } /* find end of entity */ for (i = 1; s[i] != ';' && s[i] != '\0'; i++) { continue; } if (s[i] == '\0') { /* treat as normal data */ *p = *s; continue; } /* is it numeric ? */ if (s[1] == '#') { for (j = 2, val = 0; j < i && apr_isdigit(s[j]); j++) { val = val * 10 + s[j] - '0'; } s += i; if (j < i || val <= 8 || (val >= 11 && val <= 31) || (val >= 127 && val <= 160) || val >= 256) { p--; /* no data to output */ } else { *p = RAW_ASCII_CHAR(val); } } else { j = i - 1; if (j > MAXENTLEN || entlist[j] == NULL) { /* wrong length */ *p = '&'; continue; /* skip it */ } for (ents = entlist[j]; *ents != '\0'; ents += i) { if (strncmp(s + 1, ents, j) == 0) { break; } } if (*ents == '\0') { *p = '&'; /* unknown */ } else { *p = RAW_ASCII_CHAR(((const unsigned char *) ents)[j]); s += i; } } } *p = '\0'; } static void add_include_vars(request_rec *r) { apr_table_t *e = r->subprocess_env; char *t; apr_table_setn(e, "DATE_LOCAL", LAZY_VALUE); apr_table_setn(e, "DATE_GMT", LAZY_VALUE); apr_table_setn(e, "LAST_MODIFIED", LAZY_VALUE); apr_table_setn(e, "DOCUMENT_URI", r->uri); apr_table_setn(e, "DOCUMENT_ARGS", r->args ? r->args : ""); if (r->path_info && *r->path_info) { apr_table_setn(e, "DOCUMENT_PATH_INFO", r->path_info); } apr_table_setn(e, "USER_NAME", LAZY_VALUE); if (r->filename && (t = strrchr(r->filename, '/'))) { apr_table_setn(e, "DOCUMENT_NAME", ++t); } else { apr_table_setn(e, "DOCUMENT_NAME", r->uri); } if (r->args) { char *arg_copy = apr_pstrdup(r->pool, r->args); ap_unescape_url(arg_copy); apr_table_setn(e, "QUERY_STRING_UNESCAPED", ap_escape_shell_cmd(r->pool, arg_copy)); } } static const char *add_include_vars_lazy(request_rec *r, const char *var, const char *timefmt) { char *val; if (!strcasecmp(var, "DATE_LOCAL")) { val = ap_ht_time(r->pool, r->request_time, timefmt, 0); } else if (!strcasecmp(var, "DATE_GMT")) { val = ap_ht_time(r->pool, r->request_time, timefmt, 1); } else if (!strcasecmp(var, "LAST_MODIFIED")) { val = ap_ht_time(r->pool, r->finfo.mtime, timefmt, 0); } else if (!strcasecmp(var, "USER_NAME")) { if (apr_uid_name_get(&val, r->finfo.user, r->pool) != APR_SUCCESS) { val = ""; } } else { val = NULL; } if (val) { apr_table_setn(r->subprocess_env, var, val); } return val; } static const char *get_include_var(const char *var, include_ctx_t *ctx) { const char *val; request_rec *r = ctx->r; if (apr_isdigit(*var) && !var[1]) { apr_size_t idx = *var - '0'; backref_t *re = ctx->intern->re; /* Handle $0 .. $9 from the last regex evaluated. * The choice of returning NULL strings on not-found, * v.s. empty strings on an empty match is deliberate. */ if (!re || !re->have_match) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01329) "regex capture $%" APR_SIZE_T_FMT " refers to no regex in %s", idx, r->filename); return NULL; } else if (re->nsub < idx || idx >= AP_MAX_REG_MATCH) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01330) "regex capture $%" APR_SIZE_T_FMT " is out of range (last regex was: '%s') in %s", idx, re->rexp, r->filename); return NULL; } else if (re->match[idx].rm_so < 0 || re->match[idx].rm_eo < 0) { /* This particular subpattern was not used by the regex */ return NULL; } else { val = apr_pstrmemdup(ctx->dpool, re->source + re->match[idx].rm_so, re->match[idx].rm_eo - re->match[idx].rm_so); } } else { val = apr_table_get(r->subprocess_env, var); if (val == LAZY_VALUE) { val = add_include_vars_lazy(r, var, ctx->time_str); } } return val; } static const char *include_expr_var_fn(ap_expr_eval_ctx_t *eval_ctx, const void *data, const char *arg) { const char *res, *name = data; include_ctx_t *ctx = eval_ctx->data; if ((name[0] == 'e') || (name[0] == 'E')) { /* keep legacy "env" semantics */ if ((res = apr_table_get(ctx->r->notes, arg)) != NULL) return res; else if ((res = get_include_var(arg, ctx)) != NULL) return res; else return getenv(arg); } else { return get_include_var(arg, ctx); } } static int include_expr_lookup(ap_expr_lookup_parms *parms) { switch (parms->type) { case AP_EXPR_FUNC_STRING: if (strcasecmp(parms->name, "v") == 0 || strcasecmp(parms->name, "reqenv") == 0 || strcasecmp(parms->name, "env") == 0) { *parms->func = include_expr_var_fn; *parms->data = parms->name; return OK; } break; /* * We could also make the SSI vars available as %{...} style variables * (AP_EXPR_FUNC_VAR), but this would create problems if we ever want * to cache parsed expressions for performance reasons. */ } return ap_run_expr_lookup(parms); } /* * Do variable substitution on strings * * (Note: If out==NULL, this function allocs a buffer for the resulting * string from ctx->pool. The return value is always the parsed string) */ static char *ap_ssi_parse_string(include_ctx_t *ctx, const char *in, char *out, apr_size_t length, int leave_name) { request_rec *r = ctx->r; result_item_t *result = NULL, *current = NULL; apr_size_t outlen = 0, inlen, span; char *ret = NULL, *eout = NULL; const char *p; if (out) { /* sanity check, out && !length is not supported */ ap_assert(out && length); ret = out; eout = out + length - 1; } span = strcspn(in, "\\$"); inlen = strlen(in); /* fast exit */ if (inlen == span) { if (out) { apr_cpystrn(out, in, length); } else { ret = apr_pstrmemdup(ctx->pool, in, (length && length <= inlen) ? length - 1 : inlen); } return ret; } /* well, actually something to do */ p = in + span; if (out) { if (span) { memcpy(out, in, (out+span <= eout) ? span : (eout-out)); out += span; } } else { current = result = apr_palloc(ctx->dpool, sizeof(*result)); current->next = NULL; current->string = in; current->len = span; outlen = span; } /* loop for specials */ do { if ((out && out >= eout) || (length && outlen >= length)) { break; } /* prepare next entry */ if (!out && current->len) { current->next = apr_palloc(ctx->dpool, sizeof(*current->next)); current = current->next; current->next = NULL; current->len = 0; } /* * escaped character */ if (*p == '\\') { if (out) { *out++ = (p[1] == '$') ? *++p : *p; ++p; } else { current->len = 1; current->string = (p[1] == '$') ? ++p : p; ++p; ++outlen; } } /* * variable expansion */ else { /* *p == '$' */ const char *newp = NULL, *ep, *key = NULL; if (*++p == '{') { ep = ap_strchr_c(++p, '}'); if (!ep) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01331) "Missing '}' on " "variable \"%s\" in %s", p, r->filename); break; } if (p < ep) { key = apr_pstrmemdup(ctx->dpool, p, ep - p); newp = ep + 1; } p -= 2; } else { ep = p; while (*ep == '_' || apr_isalnum(*ep)) { ++ep; } if (p < ep) { key = apr_pstrmemdup(ctx->dpool, p, ep - p); newp = ep; } --p; } /* empty name results in a copy of '$' in the output string */ if (!key) { if (out) { *out++ = *p++; } else { current->len = 1; current->string = p++; ++outlen; } } else { const char *val = get_include_var(key, ctx); apr_size_t len = 0; if (val) { len = strlen(val); } else if (leave_name) { val = p; len = ep - p; } if (val && len) { if (out) { memcpy(out, val, (out+len <= eout) ? len : (eout-out)); out += len; } else { current->len = len; current->string = val; outlen += len; } } p = newp; } } if ((out && out >= eout) || (length && outlen >= length)) { break; } /* check the remainder */ if (*p && (span = strcspn(p, "\\$")) > 0) { if (!out && current->len) { current->next = apr_palloc(ctx->dpool, sizeof(*current->next)); current = current->next; current->next = NULL; } if (out) { memcpy(out, p, (out+span <= eout) ? span : (eout-out)); out += span; } else { current->len = span; current->string = p; outlen += span; } p += span; } } while (p < in+inlen); /* assemble result */ if (out) { if (out > eout) { *eout = '\0'; } else { *out = '\0'; } } else { const char *ep; if (length && outlen > length) { outlen = length - 1; } ret = out = apr_palloc(ctx->pool, outlen + 1); ep = ret + outlen; do { if (result->len) { memcpy(out, result->string, (out+result->len <= ep) ? result->len : (ep-out)); out += result->len; } result = result->next; } while (result && out < ep); ret[outlen] = '\0'; } return ret; } /* * +-------------------------------------------------------+ * | | * | Conditional Expression Parser * | | * +-------------------------------------------------------+ */ static APR_INLINE int re_check(include_ctx_t *ctx, const char *string, const char *rexp) { ap_regex_t *compiled; backref_t *re = ctx->intern->re; compiled = ap_pregcomp(ctx->dpool, rexp, AP_REG_EXTENDED); if (!compiled) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, ctx->r, APLOGNO(02667) "unable to compile pattern \"%s\"", rexp); return -1; } if (!re) { re = ctx->intern->re = apr_palloc(ctx->pool, sizeof(*re)); } re->source = apr_pstrdup(ctx->pool, string); re->rexp = apr_pstrdup(ctx->pool, rexp); re->nsub = compiled->re_nsub; re->have_match = !ap_regexec(compiled, string, AP_MAX_REG_MATCH, re->match, 0); ap_pregfree(ctx->dpool, compiled); return re->have_match; } static int get_ptoken(include_ctx_t *ctx, const char **parse, token_t *token, token_t *previous) { const char *p; apr_size_t shift; int unmatched; token->value = NULL; if (!*parse) { return 0; } /* Skip leading white space */ while (apr_isspace(**parse)) { ++*parse; } if (!**parse) { *parse = NULL; return 0; } TYPE_TOKEN(token, TOKEN_STRING); /* the default type */ p = *parse; unmatched = 0; switch (*(*parse)++) { case '(': TYPE_TOKEN(token, TOKEN_LBRACE); return 0; case ')': TYPE_TOKEN(token, TOKEN_RBRACE); return 0; case '=': if (**parse == '=') ++*parse; TYPE_TOKEN(token, TOKEN_EQ); return 0; case '!': if (**parse == '=') { TYPE_TOKEN(token, TOKEN_NE); ++*parse; return 0; } TYPE_TOKEN(token, TOKEN_NOT); return 0; case '\'': unmatched = '\''; break; case '/': /* if last token was ACCESS, this token is STRING */ if (previous != NULL && TOKEN_ACCESS == previous->type) { break; } TYPE_TOKEN(token, TOKEN_RE); unmatched = '/'; break; case '|': if (**parse == '|') { TYPE_TOKEN(token, TOKEN_OR); ++*parse; return 0; } break; case '&': if (**parse == '&') { TYPE_TOKEN(token, TOKEN_AND); ++*parse; return 0; } break; case '>': if (**parse == '=') { TYPE_TOKEN(token, TOKEN_GE); ++*parse; return 0; } TYPE_TOKEN(token, TOKEN_GT); return 0; case '<': if (**parse == '=') { TYPE_TOKEN(token, TOKEN_LE); ++*parse; return 0; } TYPE_TOKEN(token, TOKEN_LT); return 0; case '-': if (**parse == 'A') { TYPE_TOKEN(token, TOKEN_ACCESS); ++*parse; return 0; } break; } /* It's a string or regex token * Now search for the next token, which finishes this string */ shift = 0; p = *parse = token->value = unmatched ? *parse : p; for (; **parse; p = ++*parse) { if (**parse == '\\') { if (!*(++*parse)) { p = *parse; break; } ++shift; } else { if (unmatched) { if (**parse == unmatched) { unmatched = 0; ++*parse; break; } } else if (apr_isspace(**parse)) { break; } else { int found = 0; switch (**parse) { case '(': case ')': case '=': case '!': case '<': case '>': ++found; break; case '|': case '&': if ((*parse)[1] == **parse) { ++found; } break; } if (found) { break; } } } } if (unmatched) { token->value = apr_pstrdup(ctx->dpool, ""); } else { apr_size_t len = p - token->value - shift; char *c = apr_palloc(ctx->dpool, len + 1); p = token->value; token->value = c; while (shift--) { const char *e = ap_strchr_c(p, '\\'); memcpy(c, p, e-p); c += e-p; *c++ = *++e; len -= e-p; p = e+1; } if (len) { memcpy(c, p, len); } c[len] = '\0'; } return unmatched; } static int parse_expr(include_ctx_t *ctx, const char *expr, int *was_error) { parse_node_t *new, *root = NULL, *current = NULL; request_rec *r = ctx->r; request_rec *rr = NULL; const char *error = APLOGNO(03188) "Invalid expression \"%s\" in file %s"; const char *parse = expr; unsigned regex = 0; *was_error = 0; if (!parse) { return 0; } /* Create Parse Tree */ while (1) { /* uncomment this to see how the tree a built: * * DEBUG_DUMP_TREE(ctx, root); */ CREATE_NODE(ctx, new); { #ifdef DEBUG_INCLUDE int was_unmatched = #endif get_ptoken(ctx, &parse, &new->token, (current != NULL ? ¤t->token : NULL)); if (!parse) break; DEBUG_DUMP_UNMATCHED(ctx, was_unmatched); DEBUG_DUMP_TOKEN(ctx, &new->token); } if (!current) { switch (new->token.type) { case TOKEN_STRING: case TOKEN_NOT: case TOKEN_ACCESS: case TOKEN_LBRACE: root = current = new; continue; default: /* Intentional no APLOGNO */ /* error text provides APLOGNO */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, error, expr, r->filename); *was_error = 1; return 0; } } switch (new->token.type) { case TOKEN_STRING: switch (current->token.type) { case TOKEN_STRING: current->token.value = apr_pstrcat(ctx->dpool, current->token.value, *current->token.value ? " " : "", new->token.value, NULL); continue; case TOKEN_RE: case TOKEN_RBRACE: case TOKEN_GROUP: break; default: new->parent = current; current = current->right = new; continue; } break; case TOKEN_RE: switch (current->token.type) { case TOKEN_EQ: case TOKEN_NE: new->parent = current; current = current->right = new; ++regex; continue; default: break; } break; case TOKEN_AND: case TOKEN_OR: switch (current->token.type) { case TOKEN_STRING: case TOKEN_RE: case TOKEN_GROUP: current = current->parent; while (current) { switch (current->token.type) { case TOKEN_AND: case TOKEN_OR: case TOKEN_LBRACE: break; default: current = current->parent; continue; } break; } if (!current) { new->left = root; root->parent = new; current = root = new; continue; } new->left = current->right; new->left->parent = new; new->parent = current; current = current->right = new; continue; default: break; } break; case TOKEN_EQ: case TOKEN_NE: case TOKEN_GE: case TOKEN_GT: case TOKEN_LE: case TOKEN_LT: if (current->token.type == TOKEN_STRING) { current = current->parent; if (!current) { new->left = root; root->parent = new; current = root = new; continue; } switch (current->token.type) { case TOKEN_LBRACE: case TOKEN_AND: case TOKEN_OR: new->left = current->right; new->left->parent = new; new->parent = current; current = current->right = new; continue; default: break; } } break; case TOKEN_RBRACE: while (current && current->token.type != TOKEN_LBRACE) { current = current->parent; } if (current) { TYPE_TOKEN(¤t->token, TOKEN_GROUP); continue; } error = APLOGNO(03189) "Unmatched ')' in \"%s\" in file %s"; break; case TOKEN_NOT: case TOKEN_ACCESS: case TOKEN_LBRACE: switch (current->token.type) { case TOKEN_STRING: case TOKEN_RE: case TOKEN_RBRACE: case TOKEN_GROUP: break; default: current->right = new; new->parent = current; current = new; continue; } break; default: break; } /* Intentional no APLOGNO */ /* error text provides APLOGNO */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, error, expr, r->filename); *was_error = 1; return 0; } DEBUG_DUMP_TREE(ctx, root); /* Evaluate Parse Tree */ current = root; error = NULL; while (current) { switch (current->token.type) { case TOKEN_STRING: current->token.value = ap_ssi_parse_string(ctx, current->token.value, NULL, 0, SSI_EXPAND_DROP_NAME); current->value = !!*current->token.value; break; case TOKEN_AND: case TOKEN_OR: if (!current->left || !current->right) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01332) "Invalid expression \"%s\" in file %s", expr, r->filename); *was_error = 1; return 0; } if (!current->left->done) { switch (current->left->token.type) { case TOKEN_STRING: current->left->token.value = ap_ssi_parse_string(ctx, current->left->token.value, NULL, 0, SSI_EXPAND_DROP_NAME); current->left->value = !!*current->left->token.value; DEBUG_DUMP_EVAL(ctx, current->left); current->left->done = 1; break; default: current = current->left; continue; } } /* short circuit evaluation */ if (!current->right->done && !regex && ((current->token.type == TOKEN_AND && !current->left->value) || (current->token.type == TOKEN_OR && current->left->value))) { current->value = current->left->value; } else { if (!current->right->done) { switch (current->right->token.type) { case TOKEN_STRING: current->right->token.value = ap_ssi_parse_string(ctx,current->right->token.value, NULL, 0, SSI_EXPAND_DROP_NAME); current->right->value = !!*current->right->token.value; DEBUG_DUMP_EVAL(ctx, current->right); current->right->done = 1; break; default: current = current->right; continue; } } if (current->token.type == TOKEN_AND) { current->value = current->left->value && current->right->value; } else { current->value = current->left->value || current->right->value; } } break; case TOKEN_EQ: case TOKEN_NE: if (!current->left || !current->right || current->left->token.type != TOKEN_STRING || (current->right->token.type != TOKEN_STRING && current->right->token.type != TOKEN_RE)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01333) "Invalid expression \"%s\" in file %s", expr, r->filename); *was_error = 1; return 0; } current->left->token.value = ap_ssi_parse_string(ctx, current->left->token.value, NULL, 0, SSI_EXPAND_DROP_NAME); current->right->token.value = ap_ssi_parse_string(ctx, current->right->token.value, NULL, 0, SSI_EXPAND_DROP_NAME); if (current->right->token.type == TOKEN_RE) { current->value = re_check(ctx, current->left->token.value, current->right->token.value); --regex; } else { current->value = !strcmp(current->left->token.value, current->right->token.value); } if (current->token.type == TOKEN_NE) { current->value = !current->value; } break; case TOKEN_GE: case TOKEN_GT: case TOKEN_LE: case TOKEN_LT: if (!current->left || !current->right || current->left->token.type != TOKEN_STRING || current->right->token.type != TOKEN_STRING) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01334) "Invalid expression \"%s\" in file %s", expr, r->filename); *was_error = 1; return 0; } current->left->token.value = ap_ssi_parse_string(ctx, current->left->token.value, NULL, 0, SSI_EXPAND_DROP_NAME); current->right->token.value = ap_ssi_parse_string(ctx, current->right->token.value, NULL, 0, SSI_EXPAND_DROP_NAME); current->value = strcmp(current->left->token.value, current->right->token.value); switch (current->token.type) { case TOKEN_GE: current->value = current->value >= 0; break; case TOKEN_GT: current->value = current->value > 0; break; case TOKEN_LE: current->value = current->value <= 0; break; case TOKEN_LT: current->value = current->value < 0; break; default: current->value = 0; break; /* should not happen */ } break; case TOKEN_NOT: case TOKEN_GROUP: if (current->right) { if (!current->right->done) { current = current->right; continue; } current->value = current->right->value; } else { current->value = 1; } if (current->token.type == TOKEN_NOT) { current->value = !current->value; } break; case TOKEN_ACCESS: if (current->left || !current->right || (current->right->token.type != TOKEN_STRING && current->right->token.type != TOKEN_RE)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01335) "Invalid expression \"%s\" in file %s: Token '-A' must be followed by a URI string.", expr, r->filename); *was_error = 1; return 0; } current->right->token.value = ap_ssi_parse_string(ctx, current->right->token.value, NULL, 0, SSI_EXPAND_DROP_NAME); rr = ap_sub_req_lookup_uri(current->right->token.value, r, NULL); /* 400 and higher are considered access denied */ if (rr->status < HTTP_BAD_REQUEST) { current->value = 1; } else { current->value = 0; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rr->status, r, APLOGNO(01336) "mod_include: The tested " "subrequest -A \"%s\" returned an error code.", current->right->token.value); } ap_destroy_sub_req(rr); break; case TOKEN_RE: if (!error) { error = APLOGNO(03190) "No operator before regex in expr \"%s\" in file %s"; } case TOKEN_LBRACE: if (!error) { error = APLOGNO(03191) "Unmatched '(' in \"%s\" in file %s"; } default: if (!error) { error = APLOGNO(03192) "internal parser error in \"%s\" in file %s"; } /* Intentional no APLOGNO */ /* error text provides APLOGNO */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, error, expr, r->filename); *was_error = 1; return 0; } DEBUG_DUMP_EVAL(ctx, current); current->done = 1; current = current->parent; } return (root ? root->value : 0); } /* same as above, but use common ap_expr syntax / API */ static int parse_ap_expr(include_ctx_t *ctx, const char *expr, int *was_error) { ap_expr_info_t *expr_info = apr_pcalloc(ctx->pool, sizeof (*expr_info)); const char *err; int ret; backref_t *re = ctx->intern->re; ap_expr_eval_ctx_t *eval_ctx = ctx->intern->expr_eval_ctx; expr_info->filename = ctx->r->filename; expr_info->line_number = 0; expr_info->module_index = APLOG_MODULE_INDEX; expr_info->flags = AP_EXPR_FLAG_RESTRICTED; err = ap_expr_parse(ctx->r->pool, ctx->r->pool, expr_info, expr, include_expr_lookup); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, ctx->r, APLOGNO(01337) "Could not parse expr \"%s\" in %s: %s", expr, ctx->r->filename, err); *was_error = 1; return 0; } if (!re) { ctx->intern->re = re = apr_pcalloc(ctx->pool, sizeof(*re)); } else { /* ap_expr_exec_ctx() does not care about re->have_match but only about * re->source */ if (!re->have_match) re->source = NULL; } if (!eval_ctx) { eval_ctx = apr_pcalloc(ctx->pool, sizeof(*eval_ctx)); ctx->intern->expr_eval_ctx = eval_ctx; eval_ctx->r = ctx->r; eval_ctx->c = ctx->r->connection; eval_ctx->s = ctx->r->server; eval_ctx->p = ctx->r->pool; eval_ctx->data = ctx; eval_ctx->err = &ctx->intern->expr_err; eval_ctx->vary_this = &ctx->intern->expr_vary_this; eval_ctx->re_nmatch = AP_MAX_REG_MATCH; eval_ctx->re_pmatch = re->match; eval_ctx->re_source = &re->source; } eval_ctx->info = expr_info; ret = ap_expr_exec_ctx(eval_ctx); if (ret < 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, ctx->r, APLOGNO(01338) "Could not evaluate expr \"%s\" in %s: %s", expr, ctx->r->filename, ctx->intern->expr_err); *was_error = 1; return 0; } *was_error = 0; if (re->source) re->have_match = 1; return ret; } /* * +-------------------------------------------------------+ * | | * | Action Handlers * | | * +-------------------------------------------------------+ */ /* * Extract the next tag name and value. * If there are no more tags, set the tag name to NULL. * The tag value is html decoded if dodecode is non-zero. * The tag value may be NULL if there is no tag value.. */ static void ap_ssi_get_tag_and_value(include_ctx_t *ctx, char **tag, char **tag_val, int dodecode) { if (!ctx->intern->argv) { *tag = NULL; *tag_val = NULL; return; } *tag_val = ctx->intern->argv->value; *tag = ctx->intern->argv->name; ctx->intern->argv = ctx->intern->argv->next; if (dodecode && *tag_val) { decodehtml(*tag_val); } } static int find_file(request_rec *r, const char *directive, const char *tag, char *tag_val, apr_finfo_t *finfo) { char *to_send = tag_val; request_rec *rr = NULL; int ret=0; char *error_fmt = NULL; apr_status_t rv = APR_SUCCESS; if (!strcmp(tag, "file")) { char *newpath; /* be safe; only files in this directory or below allowed */ rv = apr_filepath_merge(&newpath, NULL, tag_val, APR_FILEPATH_SECUREROOTTEST | APR_FILEPATH_NOTABSOLUTE, r->pool); if (rv != APR_SUCCESS) { error_fmt = APLOGNO(02668) "unable to access file \"%s\" " "in parsed file %s"; } else { /* note: it is okay to pass NULL for the "next filter" since we never attempt to "run" this sub request. */ rr = ap_sub_req_lookup_file(newpath, r, NULL); if (rr->status == HTTP_OK && rr->finfo.filetype != APR_NOFILE) { to_send = rr->filename; if ((rv = apr_stat(finfo, to_send, APR_FINFO_GPROT | APR_FINFO_MIN, rr->pool)) != APR_SUCCESS && rv != APR_INCOMPLETE) { error_fmt = APLOGNO(02669) "unable to get information " "about \"%s\" in parsed file %s"; } } else { error_fmt = APLOGNO(02670) "unable to lookup information " "about \"%s\" in parsed file %s"; } } if (error_fmt) { ret = -1; /* Intentional no APLOGNO */ /* error_fmt provides APLOGNO */ ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, error_fmt, to_send, r->filename); } if (rr) ap_destroy_sub_req(rr); return ret; } else if (!strcmp(tag, "virtual")) { /* note: it is okay to pass NULL for the "next filter" since we never attempt to "run" this sub request. */ rr = ap_sub_req_lookup_uri(tag_val, r, NULL); if (rr->status == HTTP_OK && rr->finfo.filetype != APR_NOFILE) { memcpy((char *) finfo, (const char *) &rr->finfo, sizeof(rr->finfo)); ap_destroy_sub_req(rr); return 0; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01339) "unable to get " "information about \"%s\" in parsed file %s", tag_val, r->filename); ap_destroy_sub_req(rr); return -1; } } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01340) "unknown parameter \"%s\" " "to tag %s in %s", tag, directive, r->filename); return -1; } } /* * */ static apr_status_t handle_comment(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb) { return APR_SUCCESS; } /* * * * Output each file/virtual in turn until one of them returns an error. * On error, ignore all further file/virtual attributes until we reach * an onerror attribute, where we make an attempt to serve the onerror * virtual url. If onerror fails, or no onerror is present, the default * error string is inserted into the stream. */ static apr_status_t handle_include(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb) { request_rec *r = f->r; char *last_error; if (!ctx->argc) { ap_log_rerror(APLOG_MARK, (ctx->flags & SSI_FLAG_PRINTING) ? APLOG_ERR : APLOG_WARNING, 0, r, APLOGNO(01341) "missing argument for include element in %s", r->filename); } if (!(ctx->flags & SSI_FLAG_PRINTING)) { return APR_SUCCESS; } if (!ctx->argc) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } last_error = NULL; while (1) { char *tag = NULL; char *tag_val = NULL; request_rec *rr = NULL; char *error_fmt = NULL; char *parsed_string; apr_status_t rv = APR_SUCCESS; int status = 0; ap_ssi_get_tag_and_value(ctx, &tag, &tag_val, SSI_VALUE_DECODED); if (!tag || !tag_val) { break; } if (strcmp(tag, "virtual") && strcmp(tag, "file") && strcmp(tag, "onerror")) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01342) "unknown parameter " "\"%s\" to tag include in %s", tag, r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); break; } parsed_string = ap_ssi_parse_string(ctx, tag_val, NULL, 0, SSI_EXPAND_DROP_NAME); if (tag[0] == 'f') { char *newpath; /* be safe; only files in this directory or below allowed */ rv = apr_filepath_merge(&newpath, NULL, parsed_string, APR_FILEPATH_SECUREROOTTEST | APR_FILEPATH_NOTABSOLUTE, ctx->dpool); if (rv != APR_SUCCESS) { error_fmt = "unable to include file \"%s\" in parsed file %s"; } else { rr = ap_sub_req_lookup_file(newpath, r, f->next); } } else if ((tag[0] == 'v' && !last_error) || (tag[0] == 'o' && last_error)) { if (r->kept_body) { rr = ap_sub_req_method_uri(r->method, parsed_string, r, f->next); } else { rr = ap_sub_req_lookup_uri(parsed_string, r, f->next); } } else { continue; } if (!error_fmt && rr->status != HTTP_OK) { error_fmt = "unable to include \"%s\" in parsed file %s, subrequest setup returned %d"; } if (!error_fmt && (ctx->flags & SSI_FLAG_NO_EXEC) && rr->content_type && strncmp(rr->content_type, "text/", 5)) { error_fmt = "unable to include potential exec \"%s\" in parsed " "file %s, content type not text/*"; } /* See the Kludge in includes_filter for why. * Basically, it puts a bread crumb in here, then looks * for the crumb later to see if its been here. */ if (rr) { ap_set_module_config(rr->request_config, &include_module, r); } if (!error_fmt && ((status = ap_run_sub_req(rr)))) { error_fmt = "unable to include \"%s\" in parsed file %s, subrequest returned %d"; } if (error_fmt) { /* Intentional no APLOGNO */ /* error text is also sent to client */ ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, error_fmt, tag_val, r->filename, status ? status : rr ? rr->status : 0); if (last_error) { /* onerror threw an error, give up completely */ break; } last_error = error_fmt; } else { last_error = NULL; } /* Do *not* destroy the subrequest here; it may have allocated * variables in this r->subprocess_env in the subrequest's * r->pool, so that pool must survive as long as this request. * Yes, this is a memory leak. */ } if (last_error) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); } return APR_SUCCESS; } /* * */ static apr_status_t handle_echo(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb) { const char *encoding = "entity", *decoding = "none"; request_rec *r = f->r; int error = 0; if (!ctx->argc) { ap_log_rerror(APLOG_MARK, (ctx->flags & SSI_FLAG_PRINTING) ? APLOG_ERR : APLOG_WARNING, 0, r, APLOGNO(01343) "missing argument for echo element in %s", r->filename); } if (!(ctx->flags & SSI_FLAG_PRINTING)) { return APR_SUCCESS; } if (!ctx->argc) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } while (1) { char *tag = NULL; char *tag_val = NULL; ap_ssi_get_tag_and_value(ctx, &tag, &tag_val, SSI_VALUE_DECODED); if (!tag || !tag_val) { break; } if (!strcmp(tag, "var")) { const char *val; const char *echo_text = NULL; apr_size_t e_len; val = get_include_var(ap_ssi_parse_string(ctx, tag_val, NULL, 0, SSI_EXPAND_DROP_NAME), ctx); if (val) { char *last = NULL; char *e, *d, *token; echo_text = val; d = apr_pstrdup(ctx->pool, decoding); token = apr_strtok(d, ", \t", &last); while (token) { if (!strcasecmp(token, "none")) { /* do nothing */ } else if (!strcasecmp(token, "url")) { char *buf = apr_pstrdup(ctx->pool, echo_text); ap_unescape_url(buf); echo_text = buf; } else if (!strcasecmp(token, "urlencoded")) { char *buf = apr_pstrdup(ctx->pool, echo_text); ap_unescape_urlencoded(buf); echo_text = buf; } else if (!strcasecmp(token, "entity")) { char *buf = apr_pstrdup(ctx->pool, echo_text); decodehtml(buf); echo_text = buf; } else if (!strcasecmp(token, "base64")) { echo_text = ap_pbase64decode(ctx->dpool, echo_text); } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01344) "unknown value " "\"%s\" to parameter \"decoding\" of tag echo in " "%s", token, r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); error = 1; break; } token = apr_strtok(NULL, ", \t", &last); } e = apr_pstrdup(ctx->pool, encoding); token = apr_strtok(e, ", \t", &last); while (token) { if (!strcasecmp(token, "none")) { /* do nothing */ } else if (!strcasecmp(token, "url")) { echo_text = ap_escape_uri(ctx->dpool, echo_text); } else if (!strcasecmp(token, "urlencoded")) { echo_text = ap_escape_urlencoded(ctx->dpool, echo_text); } else if (!strcasecmp(token, "entity")) { echo_text = ap_escape_html2(ctx->dpool, echo_text, 0); } else if (!strcasecmp(token, "base64")) { char *buf; buf = ap_pbase64encode(ctx->dpool, (char *)echo_text); echo_text = buf; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01345) "unknown value " "\"%s\" to parameter \"encoding\" of tag echo in " "%s", token, r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); error = 1; break; } token = apr_strtok(NULL, ", \t", &last); } e_len = strlen(echo_text); } else { echo_text = ctx->intern->undefined_echo; e_len = ctx->intern->undefined_echo_len; } if (error) { break; } APR_BRIGADE_INSERT_TAIL(bb, apr_bucket_pool_create( apr_pmemdup(ctx->pool, echo_text, e_len), e_len, ctx->pool, f->c->bucket_alloc)); } else if (!strcmp(tag, "decoding")) { decoding = tag_val; } else if (!strcmp(tag, "encoding")) { encoding = tag_val; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01346) "unknown parameter " "\"%s\" in tag echo of %s", tag, r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); break; } } return APR_SUCCESS; } /* * */ static apr_status_t handle_config(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb) { request_rec *r = f->r; apr_table_t *env = r->subprocess_env; if (!ctx->argc) { ap_log_rerror(APLOG_MARK, (ctx->flags & SSI_FLAG_PRINTING) ? APLOG_ERR : APLOG_WARNING, 0, r, APLOGNO(01347) "missing argument for config element in %s", r->filename); } if (!(ctx->flags & SSI_FLAG_PRINTING)) { return APR_SUCCESS; } if (!ctx->argc) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } while (1) { char *tag = NULL; char *tag_val = NULL; ap_ssi_get_tag_and_value(ctx, &tag, &tag_val, SSI_VALUE_RAW); if (!tag || !tag_val) { break; } if (!strcmp(tag, "errmsg")) { ctx->error_str = ap_ssi_parse_string(ctx, tag_val, NULL, 0, SSI_EXPAND_DROP_NAME); } else if (!strcmp(tag, "echomsg")) { ctx->intern->undefined_echo = ap_ssi_parse_string(ctx, tag_val, NULL, 0,SSI_EXPAND_DROP_NAME); ctx->intern->undefined_echo_len=strlen(ctx->intern->undefined_echo); } else if (!strcmp(tag, "timefmt")) { apr_time_t date = r->request_time; ctx->time_str = ap_ssi_parse_string(ctx, tag_val, NULL, 0, SSI_EXPAND_DROP_NAME); apr_table_setn(env, "DATE_LOCAL", ap_ht_time(r->pool, date, ctx->time_str, 0)); apr_table_setn(env, "DATE_GMT", ap_ht_time(r->pool, date, ctx->time_str, 1)); apr_table_setn(env, "LAST_MODIFIED", ap_ht_time(r->pool, r->finfo.mtime, ctx->time_str, 0)); } else if (!strcmp(tag, "sizefmt")) { char *parsed_string; parsed_string = ap_ssi_parse_string(ctx, tag_val, NULL, 0, SSI_EXPAND_DROP_NAME); if (!strcmp(parsed_string, "bytes")) { ctx->flags |= SSI_FLAG_SIZE_IN_BYTES; } else if (!strcmp(parsed_string, "abbrev")) { ctx->flags &= SSI_FLAG_SIZE_ABBREV; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01348) "unknown value " "\"%s\" to parameter \"sizefmt\" of tag config " "in %s", parsed_string, r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); break; } } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01349) "unknown parameter " "\"%s\" to tag config in %s", tag, r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); break; } } return APR_SUCCESS; } /* * */ static apr_status_t handle_fsize(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb) { request_rec *r = f->r; if (!ctx->argc) { ap_log_rerror(APLOG_MARK, (ctx->flags & SSI_FLAG_PRINTING) ? APLOG_ERR : APLOG_WARNING, 0, r, APLOGNO(01350) "missing argument for fsize element in %s", r->filename); } if (!(ctx->flags & SSI_FLAG_PRINTING)) { return APR_SUCCESS; } if (!ctx->argc) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } while (1) { char *tag = NULL; char *tag_val = NULL; apr_finfo_t finfo; char *parsed_string; ap_ssi_get_tag_and_value(ctx, &tag, &tag_val, SSI_VALUE_DECODED); if (!tag || !tag_val) { break; } parsed_string = ap_ssi_parse_string(ctx, tag_val, NULL, 0, SSI_EXPAND_DROP_NAME); if (!find_file(r, "fsize", tag, parsed_string, &finfo)) { char *buf; apr_size_t len; if (!(ctx->flags & SSI_FLAG_SIZE_IN_BYTES)) { buf = apr_strfsize(finfo.size, apr_palloc(ctx->pool, 5)); len = 4; /* omit the \0 terminator */ } else { apr_size_t l, x, pos; char *tmp; tmp = apr_psprintf(ctx->dpool, "%" APR_OFF_T_FMT, finfo.size); len = l = strlen(tmp); for (x = 0; x < l; ++x) { if (x && !((l - x) % 3)) { ++len; } } if (len == l) { buf = apr_pstrmemdup(ctx->pool, tmp, len); } else { buf = apr_palloc(ctx->pool, len); for (pos = x = 0; x < l; ++x) { if (x && !((l - x) % 3)) { buf[pos++] = ','; } buf[pos++] = tmp[x]; } } } APR_BRIGADE_INSERT_TAIL(bb, apr_bucket_pool_create(buf, len, ctx->pool, f->c->bucket_alloc)); } else { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); break; } } return APR_SUCCESS; } /* * */ static apr_status_t handle_flastmod(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb) { request_rec *r = f->r; if (!ctx->argc) { ap_log_rerror(APLOG_MARK, (ctx->flags & SSI_FLAG_PRINTING) ? APLOG_ERR : APLOG_WARNING, 0, r, APLOGNO(01351) "missing argument for flastmod element in %s", r->filename); } if (!(ctx->flags & SSI_FLAG_PRINTING)) { return APR_SUCCESS; } if (!ctx->argc) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } while (1) { char *tag = NULL; char *tag_val = NULL; apr_finfo_t finfo; char *parsed_string; ap_ssi_get_tag_and_value(ctx, &tag, &tag_val, SSI_VALUE_DECODED); if (!tag || !tag_val) { break; } parsed_string = ap_ssi_parse_string(ctx, tag_val, NULL, 0, SSI_EXPAND_DROP_NAME); if (!find_file(r, "flastmod", tag, parsed_string, &finfo)) { char *t_val; apr_size_t t_len; t_val = ap_ht_time(ctx->pool, finfo.mtime, ctx->time_str, 0); t_len = strlen(t_val); APR_BRIGADE_INSERT_TAIL(bb, apr_bucket_pool_create(t_val, t_len, ctx->pool, f->c->bucket_alloc)); } else { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); break; } } return APR_SUCCESS; } /* * */ static apr_status_t handle_if(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb) { char *tag = NULL; char *expr = NULL; request_rec *r = f->r; int expr_ret, was_error; if (ctx->argc != 1) { ap_log_rerror(APLOG_MARK, (ctx->flags & SSI_FLAG_PRINTING) ? APLOG_ERR : APLOG_WARNING, 0, r, (ctx->argc) ? APLOGNO(01352) "too many arguments for if element in %s" : APLOGNO(01353) "missing expr argument for if element in %s", r->filename); } if (!(ctx->flags & SSI_FLAG_PRINTING)) { ++(ctx->if_nesting_level); return APR_SUCCESS; } if (ctx->argc != 1) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } ap_ssi_get_tag_and_value(ctx, &tag, &expr, SSI_VALUE_RAW); if (strcmp(tag, "expr")) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01354) "unknown parameter \"%s\" " "to tag if in %s", tag, r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } if (!expr) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01355) "missing expr value for if " "element in %s", r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } DEBUG_PRINTF((ctx, "**** if expr=\"%s\"\n", expr)); if (ctx->intern->legacy_expr) expr_ret = parse_expr(ctx, expr, &was_error); else expr_ret = parse_ap_expr(ctx, expr, &was_error); if (was_error) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } if (expr_ret) { ctx->flags |= (SSI_FLAG_PRINTING | SSI_FLAG_COND_TRUE); } else { ctx->flags &= SSI_FLAG_CLEAR_PRINT_COND; } DEBUG_DUMP_COND(ctx, " if"); ctx->if_nesting_level = 0; return APR_SUCCESS; } /* * */ static apr_status_t handle_elif(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb) { char *tag = NULL; char *expr = NULL; request_rec *r = f->r; int expr_ret, was_error; if (ctx->argc != 1) { ap_log_rerror(APLOG_MARK, (!(ctx->if_nesting_level)) ? APLOG_ERR : APLOG_WARNING, 0, r, (ctx->argc) ? APLOGNO(01356) "too many arguments for if element in %s" : APLOGNO(01357) "missing expr argument for if element in %s", r->filename); } if (ctx->if_nesting_level) { return APR_SUCCESS; } if (ctx->argc != 1) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } ap_ssi_get_tag_and_value(ctx, &tag, &expr, SSI_VALUE_RAW); if (strcmp(tag, "expr")) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01358) "unknown parameter \"%s\" " "to tag if in %s", tag, r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } if (!expr) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01359) "missing expr in elif " "statement: %s", r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } DEBUG_PRINTF((ctx, "**** elif expr=\"%s\"\n", expr)); DEBUG_DUMP_COND(ctx, " elif"); if (ctx->flags & SSI_FLAG_COND_TRUE) { ctx->flags &= SSI_FLAG_CLEAR_PRINTING; return APR_SUCCESS; } if (ctx->intern->legacy_expr) expr_ret = parse_expr(ctx, expr, &was_error); else expr_ret = parse_ap_expr(ctx, expr, &was_error); if (was_error) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } if (expr_ret) { ctx->flags |= (SSI_FLAG_PRINTING | SSI_FLAG_COND_TRUE); } else { ctx->flags &= SSI_FLAG_CLEAR_PRINT_COND; } DEBUG_DUMP_COND(ctx, " elif"); return APR_SUCCESS; } /* * */ static apr_status_t handle_else(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb) { request_rec *r = f->r; if (ctx->argc) { ap_log_rerror(APLOG_MARK, (!(ctx->if_nesting_level)) ? APLOG_ERR : APLOG_WARNING, 0, r, APLOGNO(01360) "else directive does not take tags in %s", r->filename); } if (ctx->if_nesting_level) { return APR_SUCCESS; } if (ctx->argc) { if (ctx->flags & SSI_FLAG_PRINTING) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); } return APR_SUCCESS; } DEBUG_DUMP_COND(ctx, " else"); if (ctx->flags & SSI_FLAG_COND_TRUE) { ctx->flags &= SSI_FLAG_CLEAR_PRINTING; } else { ctx->flags |= (SSI_FLAG_PRINTING | SSI_FLAG_COND_TRUE); } return APR_SUCCESS; } /* * */ static apr_status_t handle_endif(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb) { request_rec *r = f->r; if (ctx->argc) { ap_log_rerror(APLOG_MARK, (!(ctx->if_nesting_level)) ? APLOG_ERR : APLOG_WARNING, 0, r, APLOGNO(01361) "endif directive does not take tags in %s", r->filename); } if (ctx->if_nesting_level) { --(ctx->if_nesting_level); return APR_SUCCESS; } if (ctx->argc) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } DEBUG_DUMP_COND(ctx, "endif"); ctx->flags |= (SSI_FLAG_PRINTING | SSI_FLAG_COND_TRUE); return APR_SUCCESS; } /* * */ static apr_status_t handle_set(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb) { const char *encoding = "none", *decoding = "none"; char *var = NULL; request_rec *r = f->r; request_rec *sub = r->main; apr_pool_t *p = r->pool; int error = 0; if (ctx->argc < 2) { ap_log_rerror(APLOG_MARK, (ctx->flags & SSI_FLAG_PRINTING) ? APLOG_ERR : APLOG_WARNING, 0, r, APLOGNO(01362) "missing argument for set element in %s", r->filename); } if (!(ctx->flags & SSI_FLAG_PRINTING)) { return APR_SUCCESS; } if (ctx->argc < 2) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } /* we need to use the 'main' request pool to set notes as that is * a notes lifetime */ while (sub) { p = sub->pool; sub = sub->main; } while (1) { char *tag = NULL; char *tag_val = NULL; ap_ssi_get_tag_and_value(ctx, &tag, &tag_val, SSI_VALUE_RAW); if (!tag || !tag_val) { break; } if (!strcmp(tag, "var")) { decodehtml(tag_val); var = ap_ssi_parse_string(ctx, tag_val, NULL, 0, SSI_EXPAND_DROP_NAME); } else if (!strcmp(tag, "decoding")) { decoding = tag_val; } else if (!strcmp(tag, "encoding")) { encoding = tag_val; } else if (!strcmp(tag, "value")) { char *parsed_string; if (!var) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01363) "variable must " "precede value in set directive in %s", r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); break; } parsed_string = ap_ssi_parse_string(ctx, tag_val, NULL, 0, SSI_EXPAND_DROP_NAME); if (parsed_string) { char *last = NULL; char *e, *d, *token; d = apr_pstrdup(ctx->pool, decoding); token = apr_strtok(d, ", \t", &last); while (token) { if (!strcasecmp(token, "none")) { /* do nothing */ } else if (!strcasecmp(token, "url")) { char *buf = apr_pstrdup(ctx->pool, parsed_string); ap_unescape_url(buf); parsed_string = buf; } else if (!strcasecmp(token, "urlencoded")) { char *buf = apr_pstrdup(ctx->pool, parsed_string); ap_unescape_urlencoded(buf); parsed_string = buf; } else if (!strcasecmp(token, "entity")) { char *buf = apr_pstrdup(ctx->pool, parsed_string); decodehtml(buf); parsed_string = buf; } else if (!strcasecmp(token, "base64")) { parsed_string = ap_pbase64decode(ctx->dpool, parsed_string); } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01364) "unknown value " "\"%s\" to parameter \"decoding\" of tag set in " "%s", token, r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); error = 1; break; } token = apr_strtok(NULL, ", \t", &last); } e = apr_pstrdup(ctx->pool, encoding); token = apr_strtok(e, ", \t", &last); while (token) { if (!strcasecmp(token, "none")) { /* do nothing */ } else if (!strcasecmp(token, "url")) { parsed_string = ap_escape_uri(ctx->dpool, parsed_string); } else if (!strcasecmp(token, "urlencoded")) { parsed_string = ap_escape_urlencoded(ctx->dpool, parsed_string); } else if (!strcasecmp(token, "entity")) { parsed_string = ap_escape_html2(ctx->dpool, parsed_string, 0); } else if (!strcasecmp(token, "base64")) { char *buf; buf = ap_pbase64encode(ctx->dpool, (char *)parsed_string); parsed_string = buf; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01365) "unknown value " "\"%s\" to parameter \"encoding\" of tag set in " "%s", token, r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); error = 1; break; } token = apr_strtok(NULL, ", \t", &last); } } if (error) { break; } apr_table_setn(r->subprocess_env, apr_pstrdup(p, var), apr_pstrdup(p, parsed_string)); } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01366) "Invalid tag for set " "directive in %s", r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); break; } } return APR_SUCCESS; } /* * */ static apr_status_t handle_printenv(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb) { request_rec *r = f->r; const apr_array_header_t *arr; const apr_table_entry_t *elts; int i; if (ctx->argc) { ap_log_rerror(APLOG_MARK, (ctx->flags & SSI_FLAG_PRINTING) ? APLOG_ERR : APLOG_WARNING, 0, r, APLOGNO(01367) "printenv directive does not take tags in %s", r->filename); } if (!(ctx->flags & SSI_FLAG_PRINTING)) { return APR_SUCCESS; } if (ctx->argc) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } arr = apr_table_elts(r->subprocess_env); elts = (apr_table_entry_t *)arr->elts; for (i = 0; i < arr->nelts; ++i) { const char *key_text, *val_text; /* get key */ key_text = ap_escape_html(ctx->dpool, elts[i].key); /* get value */ val_text = elts[i].val; if (val_text == LAZY_VALUE) val_text = add_include_vars_lazy(r, elts[i].key, ctx->time_str); val_text = ap_escape_html(ctx->dpool, val_text); apr_brigade_putstrs(bb, NULL, NULL, key_text, "=", val_text, "\n", NULL); } ctx->flush_now = 1; return APR_SUCCESS; } /* * +-------------------------------------------------------+ * | | * | Main Includes-Filter Engine * | | * +-------------------------------------------------------+ */ /* This is an implementation of the BNDM search algorithm. * * Fast and Flexible String Matching by Combining Bit-parallelism and * Suffix Automata (2001) * Gonzalo Navarro, Mathieu Raffinot * * http://www-igm.univ-mlv.fr/~raffinot/ftp/jea2001.ps.gz * * Initial code submitted by Sascha Schumann. */ /* Precompile the bndm_t data structure. */ static bndm_t *bndm_compile(apr_pool_t *pool, const char *n, apr_size_t nl) { unsigned int x; const char *ne = n + nl; bndm_t *t = apr_palloc(pool, sizeof(*t)); memset(t->T, 0, sizeof(unsigned int) * 256); t->pattern_len = nl; for (x = 1; n < ne; x <<= 1) { t->T[(unsigned char) *n++] |= x; } t->x = x - 1; return t; } /* Implements the BNDM search algorithm (as described above). * * h - the string to look in * hl - length of the string to look for * t - precompiled bndm structure against the pattern * * Returns the count of character that is the first match or hl if no * match is found. */ static apr_size_t bndm(bndm_t *t, const char *h, apr_size_t hl) { const char *skip; const char *he, *p, *pi; unsigned int *T, x, d; apr_size_t nl; he = h + hl; T = t->T; x = t->x; nl = t->pattern_len; pi = h - 1; /* pi: p initial */ p = pi + nl; /* compare window right to left. point to the first char */ while (p < he) { skip = p; d = x; do { d &= T[(unsigned char) *p--]; if (!d) { break; } if ((d & 1)) { if (p != pi) { skip = p; } else { return p - h + 1; } } d >>= 1; } while (d); pi = skip; p = pi + nl; } return hl; } /* * returns the index position of the first byte of start_seq (or the len of * the buffer as non-match) */ static apr_size_t find_start_sequence(include_ctx_t *ctx, const char *data, apr_size_t len) { struct ssi_internal_ctx *intern = ctx->intern; apr_size_t slen = intern->start_seq_pat->pattern_len; apr_size_t index; const char *p, *ep; if (len < slen) { p = data; /* try partial match at the end of the buffer (below) */ } else { /* try fast bndm search over the buffer * (hopefully the whole start sequence can be found in this buffer) */ index = bndm(intern->start_seq_pat, data, len); /* wow, found it. ready. */ if (index < len) { intern->state = PARSE_DIRECTIVE; return index; } else { /* ok, the pattern can't be found as whole in the buffer, * check the end for a partial match */ p = data + len - slen + 1; } } ep = data + len; do { while (p < ep && *p != *intern->start_seq) { ++p; } index = p - data; /* found a possible start_seq start */ if (p < ep) { apr_size_t pos = 1; ++p; while (p < ep && *p == intern->start_seq[pos]) { ++p; ++pos; } /* partial match found. Store the info for the next round */ if (p == ep) { intern->state = PARSE_HEAD; intern->parse_pos = pos; return index; } } /* we must try all combinations; consider (e.g.) SSIStartTag "--->" * and a string data of "--.-" and the end of the buffer */ p = data + index + 1; } while (p < ep); /* no match */ return len; } /* * returns the first byte *after* the partial (or final) match. * * If we had to trick with the start_seq start, 'release' returns the * number of chars of the start_seq which appeared not to be part of a * full tag and may have to be passed down the filter chain. */ static apr_size_t find_partial_start_sequence(include_ctx_t *ctx, const char *data, apr_size_t len, apr_size_t *release) { struct ssi_internal_ctx *intern = ctx->intern; apr_size_t pos, spos = 0; apr_size_t slen = intern->start_seq_pat->pattern_len; const char *p, *ep; pos = intern->parse_pos; ep = data + len; *release = 0; do { p = data; while (p < ep && pos < slen && *p == intern->start_seq[pos]) { ++p; ++pos; } /* full match */ if (pos == slen) { intern->state = PARSE_DIRECTIVE; return (p - data); } /* the whole buffer is a partial match */ if (p == ep) { intern->parse_pos = pos; return (p - data); } /* No match so far, but again: * We must try all combinations, since the start_seq is a random * user supplied string * * So: look if the first char of start_seq appears somewhere within * the current partial match. If it does, try to start a match that * begins with this offset. (This can happen, if a strange * start_seq like "---->" spans buffers) */ if (spos < intern->parse_pos) { do { ++spos; ++*release; p = intern->start_seq + spos; pos = intern->parse_pos - spos; while (pos && *p != *intern->start_seq) { ++p; ++spos; ++*release; --pos; } /* if a matching beginning char was found, try to match the * remainder of the old buffer. */ if (pos > 1) { apr_size_t t = 1; ++p; while (t < pos && *p == intern->start_seq[t]) { ++p; ++t; } if (t == pos) { /* yeah, another partial match found in the *old* * buffer, now test the *current* buffer for * continuing match */ break; } } } while (pos > 1); if (pos) { continue; } } break; } while (1); /* work hard to find a match ;-) */ /* no match at all, release all (wrongly) matched chars so far */ *release = intern->parse_pos; intern->state = PARSE_PRE_HEAD; return 0; } /* * returns the position after the directive */ static apr_size_t find_directive(include_ctx_t *ctx, const char *data, apr_size_t len, char ***store, apr_size_t **store_len) { struct ssi_internal_ctx *intern = ctx->intern; const char *p = data; const char *ep = data + len; apr_size_t pos; switch (intern->state) { case PARSE_DIRECTIVE: while (p < ep && !apr_isspace(*p)) { /* we have to consider the case of missing space between directive * and end_seq (be somewhat lenient), e.g. */ if (*p == *intern->end_seq) { intern->state = PARSE_DIRECTIVE_TAIL; intern->parse_pos = 1; ++p; return (p - data); } ++p; } if (p < ep) { /* found delimiter whitespace */ intern->state = PARSE_DIRECTIVE_POSTNAME; *store = &intern->directive; *store_len = &intern->directive_len; } break; case PARSE_DIRECTIVE_TAIL: pos = intern->parse_pos; while (p < ep && pos < intern->end_seq_len && *p == intern->end_seq[pos]) { ++p; ++pos; } /* full match, we're done */ if (pos == intern->end_seq_len) { intern->state = PARSE_DIRECTIVE_POSTTAIL; *store = &intern->directive; *store_len = &intern->directive_len; break; } /* partial match, the buffer is too small to match fully */ if (p == ep) { intern->parse_pos = pos; break; } /* no match. continue normal parsing */ intern->state = PARSE_DIRECTIVE; return 0; case PARSE_DIRECTIVE_POSTTAIL: intern->state = PARSE_EXECUTE; intern->directive_len -= intern->end_seq_len; /* continue immediately with the next state */ case PARSE_DIRECTIVE_POSTNAME: if (PARSE_DIRECTIVE_POSTNAME == intern->state) { intern->state = PARSE_PRE_ARG; } ctx->argc = 0; intern->argv = NULL; if (!intern->directive_len) { intern->error = 1; ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, ctx->r, APLOGNO(01368) "missing " "directive name in parsed document %s", ctx->r->filename); } else { char *sp = intern->directive; char *sep = intern->directive + intern->directive_len; /* normalize directive name */ for (; sp < sep; ++sp) { *sp = apr_tolower(*sp); } } return 0; default: /* get a rid of a gcc warning about unhandled enumerations */ break; } return (p - data); } /* * find out whether the next token is (a possible) end_seq or an argument */ static apr_size_t find_arg_or_tail(include_ctx_t *ctx, const char *data, apr_size_t len) { struct ssi_internal_ctx *intern = ctx->intern; const char *p = data; const char *ep = data + len; /* skip leading WS */ while (p < ep && apr_isspace(*p)) { ++p; } /* buffer doesn't consist of whitespaces only */ if (p < ep) { intern->state = (*p == *intern->end_seq) ? PARSE_TAIL : PARSE_ARG; } return (p - data); } /* * test the stream for end_seq. If it doesn't match at all, it must be an * argument */ static apr_size_t find_tail(include_ctx_t *ctx, const char *data, apr_size_t len) { struct ssi_internal_ctx *intern = ctx->intern; const char *p = data; const char *ep = data + len; apr_size_t pos = intern->parse_pos; if (PARSE_TAIL == intern->state) { intern->state = PARSE_TAIL_SEQ; pos = intern->parse_pos = 0; } while (p < ep && pos < intern->end_seq_len && *p == intern->end_seq[pos]) { ++p; ++pos; } /* bingo, full match */ if (pos == intern->end_seq_len) { intern->state = PARSE_EXECUTE; return (p - data); } /* partial match, the buffer is too small to match fully */ if (p == ep) { intern->parse_pos = pos; return (p - data); } /* no match. It must be an argument string then * The caller should cleanup and rewind to the reparse point */ intern->state = PARSE_ARG; return 0; } /* * extract name=value from the buffer * A pcre-pattern could look (similar to): * name\s*(?:=\s*(["'`]?)value\1(?>\s*))? */ static apr_size_t find_argument(include_ctx_t *ctx, const char *data, apr_size_t len, char ***store, apr_size_t **store_len) { struct ssi_internal_ctx *intern = ctx->intern; const char *p = data; const char *ep = data + len; switch (intern->state) { case PARSE_ARG: /* * create argument structure and append it to the current list */ intern->current_arg = apr_palloc(ctx->dpool, sizeof(*intern->current_arg)); intern->current_arg->next = NULL; ++(ctx->argc); if (!intern->argv) { intern->argv = intern->current_arg; } else { arg_item_t *newarg = intern->argv; while (newarg->next) { newarg = newarg->next; } newarg->next = intern->current_arg; } /* check whether it's a valid one. If it begins with a quote, we * can safely assume, someone forgot the name of the argument */ switch (*p) { case '"': case '\'': case '`': *store = NULL; intern->state = PARSE_ARG_VAL; intern->quote = *p++; intern->current_arg->name = NULL; intern->current_arg->name_len = 0; intern->error = 1; ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, ctx->r, APLOGNO(01369) "missing " "argument name for value to tag %s in %s", apr_pstrmemdup(ctx->r->pool, intern->directive, intern->directive_len), ctx->r->filename); return (p - data); default: intern->state = PARSE_ARG_NAME; } /* continue immediately with next state */ case PARSE_ARG_NAME: while (p < ep && !apr_isspace(*p) && *p != '=') { ++p; } if (p < ep) { intern->state = PARSE_ARG_POSTNAME; *store = &intern->current_arg->name; *store_len = &intern->current_arg->name_len; return (p - data); } break; case PARSE_ARG_POSTNAME: intern->current_arg->name = apr_pstrmemdup(ctx->dpool, intern->current_arg->name, intern->current_arg->name_len); if (!intern->current_arg->name_len) { intern->error = 1; ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, ctx->r, APLOGNO(01370) "missing " "argument name for value to tag %s in %s", apr_pstrmemdup(ctx->r->pool, intern->directive, intern->directive_len), ctx->r->filename); } else { ap_str_tolower(intern->current_arg->name); } intern->state = PARSE_ARG_EQ; /* continue with next state immediately */ case PARSE_ARG_EQ: *store = NULL; while (p < ep && apr_isspace(*p)) { ++p; } if (p < ep) { if (*p == '=') { intern->state = PARSE_ARG_PREVAL; ++p; } else { /* no value */ intern->current_arg->value = NULL; intern->state = PARSE_PRE_ARG; } return (p - data); } break; case PARSE_ARG_PREVAL: *store = NULL; while (p < ep && apr_isspace(*p)) { ++p; } /* buffer doesn't consist of whitespaces only */ if (p < ep) { intern->state = PARSE_ARG_VAL; switch (*p) { case '"': case '\'': case '`': intern->quote = *p++; break; default: intern->quote = '\0'; break; } return (p - data); } break; case PARSE_ARG_VAL_ESC: if (*p == intern->quote) { ++p; } intern->state = PARSE_ARG_VAL; /* continue with next state immediately */ case PARSE_ARG_VAL: for (; p < ep; ++p) { if (intern->quote && *p == '\\') { ++p; if (p == ep) { intern->state = PARSE_ARG_VAL_ESC; break; } if (*p != intern->quote) { --p; } } else if (intern->quote && *p == intern->quote) { ++p; *store = &intern->current_arg->value; *store_len = &intern->current_arg->value_len; intern->state = PARSE_ARG_POSTVAL; break; } else if (!intern->quote && apr_isspace(*p)) { ++p; *store = &intern->current_arg->value; *store_len = &intern->current_arg->value_len; intern->state = PARSE_ARG_POSTVAL; break; } } return (p - data); case PARSE_ARG_POSTVAL: /* * The value is still the raw input string. Finally clean it up. */ --(intern->current_arg->value_len); /* strip quote escaping \ from the string */ if (intern->quote) { apr_size_t shift = 0; char *sp; sp = intern->current_arg->value; ep = intern->current_arg->value + intern->current_arg->value_len; while (sp < ep && *sp != '\\') { ++sp; } for (; sp < ep; ++sp) { if (*sp == '\\' && sp[1] == intern->quote) { ++sp; ++shift; } if (shift) { *(sp-shift) = *sp; } } intern->current_arg->value_len -= shift; } intern->current_arg->value[intern->current_arg->value_len] = '\0'; intern->state = PARSE_PRE_ARG; return 0; default: /* get a rid of a gcc warning about unhandled enumerations */ break; } return len; /* partial match of something */ } /* * This is the main loop over the current bucket brigade. */ static apr_status_t send_parsed_content(ap_filter_t *f, apr_bucket_brigade *bb) { include_ctx_t *ctx = f->ctx; struct ssi_internal_ctx *intern = ctx->intern; request_rec *r = f->r; apr_bucket *b = APR_BRIGADE_FIRST(bb); apr_bucket_brigade *pass_bb; apr_status_t rv = APR_SUCCESS; char *magic; /* magic pointer for sentinel use */ /* fast exit */ if (APR_BRIGADE_EMPTY(bb)) { return APR_SUCCESS; } /* we may crash, since already cleaned up; hand over the responsibility * to the next filter;-) */ if (intern->seen_eos) { return ap_pass_brigade(f->next, bb); } /* All stuff passed along has to be put into that brigade */ pass_bb = apr_brigade_create(ctx->pool, f->c->bucket_alloc); /* initialization for this loop */ intern->bytes_read = 0; intern->error = 0; ctx->flush_now = 0; /* loop over the current bucket brigade */ while (b != APR_BRIGADE_SENTINEL(bb)) { const char *data = NULL; apr_size_t len, index, release; apr_bucket *newb = NULL; char **store = &magic; apr_size_t *store_len = NULL; /* handle meta buckets before reading any data */ if (APR_BUCKET_IS_METADATA(b)) { newb = APR_BUCKET_NEXT(b); APR_BUCKET_REMOVE(b); if (APR_BUCKET_IS_EOS(b)) { intern->seen_eos = 1; /* Hit end of stream, time for cleanup ... But wait! * Perhaps we're not ready yet. We may have to loop one or * two times again to finish our work. In that case, we * just re-insert the EOS bucket to allow for an extra loop. * * PARSE_EXECUTE means, we've hit a directive just before the * EOS, which is now waiting for execution. * * PARSE_DIRECTIVE_POSTTAIL means, we've hit a directive with * no argument and no space between directive and end_seq * just before the EOS. (consider as last * or only string within the stream). This state, however, * just cleans up and turns itself to PARSE_EXECUTE, which * will be passed through within the next (and actually * last) round. */ if (PARSE_EXECUTE == intern->state || PARSE_DIRECTIVE_POSTTAIL == intern->state) { APR_BUCKET_INSERT_BEFORE(newb, b); } else { break; /* END OF STREAM */ } } else { APR_BRIGADE_INSERT_TAIL(pass_bb, b); if (APR_BUCKET_IS_FLUSH(b)) { ctx->flush_now = 1; } b = newb; continue; } } /* enough is enough ... */ if (ctx->flush_now || intern->bytes_read > AP_MIN_BYTES_TO_WRITE) { if (!APR_BRIGADE_EMPTY(pass_bb)) { rv = ap_pass_brigade(f->next, pass_bb); if (rv != APR_SUCCESS) { apr_brigade_destroy(pass_bb); return rv; } } ctx->flush_now = 0; intern->bytes_read = 0; } /* read the current bucket data */ len = 0; if (!intern->seen_eos) { if (intern->bytes_read > 0) { rv = apr_bucket_read(b, &data, &len, APR_NONBLOCK_READ); if (APR_STATUS_IS_EAGAIN(rv)) { ctx->flush_now = 1; continue; } } if (!len || rv != APR_SUCCESS) { rv = apr_bucket_read(b, &data, &len, APR_BLOCK_READ); } if (rv != APR_SUCCESS) { apr_brigade_destroy(pass_bb); return rv; } intern->bytes_read += len; } /* zero length bucket, fetch next one */ if (!len && !intern->seen_eos) { b = APR_BUCKET_NEXT(b); continue; } /* * it's actually a data containing bucket, start/continue parsing */ switch (intern->state) { /* no current tag; search for start sequence */ case PARSE_PRE_HEAD: index = find_start_sequence(ctx, data, len); if (index < len) { apr_bucket_split(b, index); } newb = APR_BUCKET_NEXT(b); if (ctx->flags & SSI_FLAG_PRINTING) { APR_BUCKET_REMOVE(b); APR_BRIGADE_INSERT_TAIL(pass_bb, b); } else { apr_bucket_delete(b); } if (index < len) { /* now delete the start_seq stuff from the remaining bucket */ if (PARSE_DIRECTIVE == intern->state) { /* full match */ apr_bucket_split(newb, intern->start_seq_pat->pattern_len); ctx->flush_now = 1; /* pass pre-tag stuff */ } b = APR_BUCKET_NEXT(newb); apr_bucket_delete(newb); } else { b = newb; } break; /* we're currently looking for the end of the start sequence */ case PARSE_HEAD: index = find_partial_start_sequence(ctx, data, len, &release); /* check if we mismatched earlier and have to release some chars */ if (release && (ctx->flags & SSI_FLAG_PRINTING)) { char *to_release = apr_pmemdup(ctx->pool, intern->start_seq, release); newb = apr_bucket_pool_create(to_release, release, ctx->pool, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(pass_bb, newb); } if (index) { /* any match */ /* now delete the start_seq stuff from the remaining bucket */ if (PARSE_DIRECTIVE == intern->state) { /* final match */ apr_bucket_split(b, index); ctx->flush_now = 1; /* pass pre-tag stuff */ } newb = APR_BUCKET_NEXT(b); apr_bucket_delete(b); b = newb; } break; /* we're currently grabbing the directive name */ case PARSE_DIRECTIVE: case PARSE_DIRECTIVE_POSTNAME: case PARSE_DIRECTIVE_TAIL: case PARSE_DIRECTIVE_POSTTAIL: index = find_directive(ctx, data, len, &store, &store_len); if (index) { apr_bucket_split(b, index); newb = APR_BUCKET_NEXT(b); } if (store) { if (index) { APR_BUCKET_REMOVE(b); apr_bucket_setaside(b, r->pool); APR_BRIGADE_INSERT_TAIL(intern->tmp_bb, b); b = newb; } /* time for cleanup? */ if (store != &magic) { apr_brigade_pflatten(intern->tmp_bb, store, store_len, ctx->dpool); apr_brigade_cleanup(intern->tmp_bb); } } else if (index) { apr_bucket_delete(b); b = newb; } break; /* skip WS and find out what comes next (arg or end_seq) */ case PARSE_PRE_ARG: index = find_arg_or_tail(ctx, data, len); if (index) { /* skipped whitespaces */ if (index < len) { apr_bucket_split(b, index); } newb = APR_BUCKET_NEXT(b); apr_bucket_delete(b); b = newb; } break; /* currently parsing name[=val] */ case PARSE_ARG: case PARSE_ARG_NAME: case PARSE_ARG_POSTNAME: case PARSE_ARG_EQ: case PARSE_ARG_PREVAL: case PARSE_ARG_VAL: case PARSE_ARG_VAL_ESC: case PARSE_ARG_POSTVAL: index = find_argument(ctx, data, len, &store, &store_len); if (index) { apr_bucket_split(b, index); newb = APR_BUCKET_NEXT(b); } if (store) { if (index) { APR_BUCKET_REMOVE(b); apr_bucket_setaside(b, r->pool); APR_BRIGADE_INSERT_TAIL(intern->tmp_bb, b); b = newb; } /* time for cleanup? */ if (store != &magic) { apr_brigade_pflatten(intern->tmp_bb, store, store_len, ctx->dpool); apr_brigade_cleanup(intern->tmp_bb); } } else if (index) { apr_bucket_delete(b); b = newb; } break; /* try to match end_seq at current pos. */ case PARSE_TAIL: case PARSE_TAIL_SEQ: index = find_tail(ctx, data, len); switch (intern->state) { case PARSE_EXECUTE: /* full match */ apr_bucket_split(b, index); newb = APR_BUCKET_NEXT(b); apr_bucket_delete(b); b = newb; break; case PARSE_ARG: /* no match */ /* PARSE_ARG must reparse at the beginning */ APR_BRIGADE_PREPEND(bb, intern->tmp_bb); b = APR_BRIGADE_FIRST(bb); break; default: /* partial match */ newb = APR_BUCKET_NEXT(b); APR_BUCKET_REMOVE(b); apr_bucket_setaside(b, r->pool); APR_BRIGADE_INSERT_TAIL(intern->tmp_bb, b); b = newb; break; } break; /* now execute the parsed directive, cleanup the space and * start again with PARSE_PRE_HEAD */ case PARSE_EXECUTE: /* if there was an error, it was already logged; just stop here */ if (intern->error) { if (ctx->flags & SSI_FLAG_PRINTING) { SSI_CREATE_ERROR_BUCKET(ctx, f, pass_bb); intern->error = 0; } } else { include_handler_fn_t *handle_func; handle_func = (include_handler_fn_t *)apr_hash_get(include_handlers, intern->directive, intern->directive_len); if (handle_func) { DEBUG_INIT(ctx, f, pass_bb); rv = handle_func(ctx, f, pass_bb); if (rv != APR_SUCCESS) { apr_brigade_destroy(pass_bb); return rv; } } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01371) "unknown directive \"%s\" in parsed doc %s", apr_pstrmemdup(r->pool, intern->directive, intern->directive_len), r->filename); if (ctx->flags & SSI_FLAG_PRINTING) { SSI_CREATE_ERROR_BUCKET(ctx, f, pass_bb); } } } /* cleanup */ apr_pool_clear(ctx->dpool); apr_brigade_cleanup(intern->tmp_bb); /* Oooof. Done here, start next round */ intern->state = PARSE_PRE_HEAD; break; } /* switch(ctx->state) */ } /* while (brigade) */ /* End of stream. Final cleanup */ if (intern->seen_eos) { if (PARSE_HEAD == intern->state) { if (ctx->flags & SSI_FLAG_PRINTING) { char *to_release = apr_pmemdup(ctx->pool, intern->start_seq, intern->parse_pos); APR_BRIGADE_INSERT_TAIL(pass_bb, apr_bucket_pool_create(to_release, intern->parse_pos, ctx->pool, f->c->bucket_alloc)); } } else if (PARSE_PRE_HEAD != intern->state) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01372) "SSI directive was not properly finished at the end " "of parsed document %s", r->filename); if (ctx->flags & SSI_FLAG_PRINTING) { SSI_CREATE_ERROR_BUCKET(ctx, f, pass_bb); } } if (!(ctx->flags & SSI_FLAG_PRINTING)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01373) "missing closing endif directive in parsed document" " %s", r->filename); } /* cleanup our temporary memory */ apr_brigade_destroy(intern->tmp_bb); apr_pool_destroy(ctx->dpool); /* don't forget to finally insert the EOS bucket */ APR_BRIGADE_INSERT_TAIL(pass_bb, b); } /* if something's left over, pass it along */ if (!APR_BRIGADE_EMPTY(pass_bb)) { rv = ap_pass_brigade(f->next, pass_bb); } else { rv = APR_SUCCESS; apr_brigade_destroy(pass_bb); } return rv; } /* * +-------------------------------------------------------+ * | | * | Runtime Hooks * | | * +-------------------------------------------------------+ */ static int includes_setup(ap_filter_t *f) { include_dir_config *conf = ap_get_module_config(f->r->per_dir_config, &include_module); /* When our xbithack value isn't set to full or our platform isn't * providing group-level protection bits or our group-level bits do not * have group-execite on, we will set the no_local_copy value to 1 so * that we will not send 304s. */ if ((conf->xbithack != XBITHACK_FULL) || !(f->r->finfo.valid & APR_FINFO_GPROT) || !(f->r->finfo.protection & APR_GEXECUTE)) { f->r->no_local_copy = 1; } /* Don't allow ETag headers to be generated - see RFC2616 - 13.3.4. * We don't know if we are going to be including a file or executing * a program - in either case a strong ETag header will likely be invalid. */ if (conf->etag <= 0) { apr_table_setn(f->r->notes, "no-etag", ""); } return OK; } static apr_status_t includes_filter(ap_filter_t *f, apr_bucket_brigade *b) { request_rec *r = f->r; request_rec *parent; include_dir_config *conf = ap_get_module_config(r->per_dir_config, &include_module); include_server_config *sconf= ap_get_module_config(r->server->module_config, &include_module); if (!(ap_allow_options(r) & OPT_INCLUDES)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01374) "mod_include: Options +Includes (or IncludesNoExec) " "wasn't set, INCLUDES filter removed: %s", r->uri); ap_remove_output_filter(f); return ap_pass_brigade(f->next, b); } if (!f->ctx) { struct ssi_internal_ctx *intern; include_ctx_t *ctx; /* create context for this filter */ f->ctx = ctx = apr_palloc(r->pool, sizeof(*ctx)); ctx->r = r; ctx->intern = intern = apr_palloc(r->pool, sizeof(*ctx->intern)); ctx->pool = r->pool; apr_pool_create(&ctx->dpool, ctx->pool); /* runtime data */ intern->tmp_bb = apr_brigade_create(ctx->pool, f->c->bucket_alloc); intern->seen_eos = 0; intern->state = PARSE_PRE_HEAD; ctx->flags = (SSI_FLAG_PRINTING | SSI_FLAG_COND_TRUE); if ((ap_allow_options(r) & OPT_INC_WITH_EXEC) == 0) { ctx->flags |= SSI_FLAG_NO_EXEC; } intern->legacy_expr = (conf->legacy_expr > 0); intern->expr_eval_ctx = NULL; intern->expr_err = NULL; intern->expr_vary_this = NULL; ctx->if_nesting_level = 0; intern->re = NULL; ctx->error_str = conf->default_error_msg ? conf->default_error_msg : DEFAULT_ERROR_MSG; ctx->time_str = conf->default_time_fmt ? conf->default_time_fmt : DEFAULT_TIME_FORMAT; intern->start_seq = sconf->default_start_tag; intern->start_seq_pat = bndm_compile(ctx->pool, intern->start_seq, strlen(intern->start_seq)); intern->end_seq = sconf->default_end_tag; intern->end_seq_len = strlen(intern->end_seq); intern->undefined_echo = conf->undefined_echo ? conf->undefined_echo : DEFAULT_UNDEFINED_ECHO; intern->undefined_echo_len = strlen(intern->undefined_echo); } if ((parent = ap_get_module_config(r->request_config, &include_module))) { /* Kludge --- for nested includes, we want to keep the subprocess * environment of the base document (for compatibility); that means * torquing our own last_modified date as well so that the * LAST_MODIFIED variable gets reset to the proper value if the * nested document resets . */ r->subprocess_env = r->main->subprocess_env; apr_pool_join(r->main->pool, r->pool); r->finfo.mtime = r->main->finfo.mtime; } else { /* we're not a nested include, so we create an initial * environment */ ap_add_common_vars(r); ap_add_cgi_vars(r); add_include_vars(r); } /* Always unset the content-length. There is no way to know if * the content will be modified at some point by send_parsed_content. * It is very possible for us to not find any content in the first * 9k of the file, but still have to modify the content of the file. * If we are going to pass the file through send_parsed_content, then * the content-length should just be unset. */ apr_table_unset(f->r->headers_out, "Content-Length"); /* Always unset the Last-Modified field - see RFC2616 - 13.3.4. * We don't know if we are going to be including a file or executing * a program which may change the Last-Modified header or make the * content completely dynamic. Therefore, we can't support these * headers. * * Exception: XBitHack full means we *should* set the * Last-Modified field. * * SSILastModified on means we *should* set the Last-Modified field * if not present, or respect an existing value if present. */ /* Must we respect the last modified header? By default, no */ if (conf->lastmodified > 0) { /* update the last modified if we have a valid time, and only if * we don't already have a valid last modified. */ if (r->finfo.valid & APR_FINFO_MTIME && !apr_table_get(f->r->headers_out, "Last-Modified")) { ap_update_mtime(r, r->finfo.mtime); ap_set_last_modified(r); } } /* Assure the platform supports Group protections */ else if (((conf->xbithack == XBITHACK_FULL || (conf->xbithack == XBITHACK_UNSET && DEFAULT_XBITHACK == XBITHACK_FULL)) && (r->finfo.valid & APR_FINFO_GPROT) && (r->finfo.protection & APR_GEXECUTE))) { ap_update_mtime(r, r->finfo.mtime); ap_set_last_modified(r); } else { apr_table_unset(f->r->headers_out, "Last-Modified"); } /* add QUERY stuff to env cause it ain't yet */ if (r->args) { char *arg_copy = apr_pstrdup(r->pool, r->args); apr_table_setn(r->subprocess_env, "QUERY_STRING", r->args); ap_unescape_url(arg_copy); apr_table_setn(r->subprocess_env, "QUERY_STRING_UNESCAPED", ap_escape_shell_cmd(r->pool, arg_copy)); } return send_parsed_content(f, b); } static int include_fixup(request_rec *r) { if (r->handler && (strcmp(r->handler, "server-parsed") == 0)) { if (!r->content_type || !*r->content_type) { ap_set_content_type(r, "text/html"); } r->handler = "default-handler"; } else #if defined(OS2) || defined(WIN32) || defined(NETWARE) /* These OS's don't support xbithack. This is being worked on. */ { return DECLINED; } #else { include_dir_config *conf = ap_get_module_config(r->per_dir_config, &include_module); if (conf->xbithack == XBITHACK_OFF || (DEFAULT_XBITHACK == XBITHACK_OFF && conf->xbithack == XBITHACK_UNSET)) { return DECLINED; } if (!(r->finfo.protection & APR_UEXECUTE)) { return DECLINED; } if (!r->content_type || strncmp(r->content_type, "text/html", 9)) { return DECLINED; } } #endif /* We always return declined, because the default handler actually * serves the file. All we have to do is add the filter. */ ap_add_output_filter("INCLUDES", NULL, r, r->connection); return DECLINED; } /* * +-------------------------------------------------------+ * | | * | Configuration Handling * | | * +-------------------------------------------------------+ */ static void *create_includes_dir_config(apr_pool_t *p, char *dummy) { include_dir_config *result = apr_pcalloc(p, sizeof(include_dir_config)); result->xbithack = XBITHACK_UNSET; result->lastmodified = UNSET; result->etag = UNSET; result->legacy_expr = UNSET; return result; } #define MERGE(b,o,n,val,unset) n->val = o->val != unset ? o->val : b->val static void *merge_includes_dir_config(apr_pool_t *p, void *basev, void *overridesv) { include_dir_config *base = (include_dir_config *)basev, *over = (include_dir_config *)overridesv, *new = apr_palloc(p, sizeof(include_dir_config)); MERGE(base, over, new, default_error_msg, NULL); MERGE(base, over, new, default_time_fmt, NULL); MERGE(base, over, new, undefined_echo, NULL); MERGE(base, over, new, xbithack, XBITHACK_UNSET); MERGE(base, over, new, lastmodified, UNSET); MERGE(base, over, new, etag, UNSET); MERGE(base, over, new, legacy_expr, UNSET); return new; } static void *create_includes_server_config(apr_pool_t *p, server_rec *server) { include_server_config *result; result = apr_palloc(p, sizeof(include_server_config)); result->default_end_tag = DEFAULT_END_SEQUENCE; result->default_start_tag = DEFAULT_START_SEQUENCE; return result; } static const char *set_xbithack(cmd_parms *cmd, void *mconfig, const char *arg) { include_dir_config *conf = mconfig; if (!strcasecmp(arg, "off")) { conf->xbithack = XBITHACK_OFF; } else if (!strcasecmp(arg, "on")) { conf->xbithack = XBITHACK_ON; } else if (!strcasecmp(arg, "full")) { conf->xbithack = XBITHACK_FULL; } else { return "XBitHack must be set to Off, On, or Full"; } return NULL; } static const char *set_default_start_tag(cmd_parms *cmd, void *mconfig, const char *tag) { include_server_config *conf; const char *p = tag; /* be consistent. (See below in set_default_end_tag) */ while (*p) { if (apr_isspace(*p)) { return "SSIStartTag may not contain any whitespaces"; } ++p; } conf= ap_get_module_config(cmd->server->module_config , &include_module); conf->default_start_tag = tag; return NULL; } static const char *set_default_end_tag(cmd_parms *cmd, void *mconfig, const char *tag) { include_server_config *conf; const char *p = tag; /* sanity check. The parser may fail otherwise */ while (*p) { if (apr_isspace(*p)) { return "SSIEndTag may not contain any whitespaces"; } ++p; } conf= ap_get_module_config(cmd->server->module_config , &include_module); conf->default_end_tag = tag; return NULL; } static const char *set_undefined_echo(cmd_parms *cmd, void *mconfig, const char *msg) { include_dir_config *conf = mconfig; conf->undefined_echo = msg; return NULL; } static const char *set_default_error_msg(cmd_parms *cmd, void *mconfig, const char *msg) { include_dir_config *conf = mconfig; conf->default_error_msg = msg; return NULL; } static const char *set_default_time_fmt(cmd_parms *cmd, void *mconfig, const char *fmt) { include_dir_config *conf = mconfig; conf->default_time_fmt = fmt; return NULL; } /* * +-------------------------------------------------------+ * | | * | Module Initialization and Configuration * | | * +-------------------------------------------------------+ */ static int include_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { include_handlers = apr_hash_make(p); ssi_pfn_register = APR_RETRIEVE_OPTIONAL_FN(ap_register_include_handler); if (ssi_pfn_register) { ssi_pfn_register("if", handle_if); ssi_pfn_register("set", handle_set); ssi_pfn_register("else", handle_else); ssi_pfn_register("elif", handle_elif); ssi_pfn_register("echo", handle_echo); ssi_pfn_register("endif", handle_endif); ssi_pfn_register("fsize", handle_fsize); ssi_pfn_register("config", handle_config); ssi_pfn_register("comment", handle_comment); ssi_pfn_register("include", handle_include); ssi_pfn_register("flastmod", handle_flastmod); ssi_pfn_register("printenv", handle_printenv); } return OK; } static const command_rec includes_cmds[] = { AP_INIT_TAKE1("XBitHack", set_xbithack, NULL, OR_OPTIONS, "Off, On, or Full"), AP_INIT_TAKE1("SSIErrorMsg", set_default_error_msg, NULL, OR_ALL, "a string"), AP_INIT_TAKE1("SSITimeFormat", set_default_time_fmt, NULL, OR_ALL, "a strftime(3) formatted string"), AP_INIT_TAKE1("SSIStartTag", set_default_start_tag, NULL, RSRC_CONF, "SSI Start String Tag"), AP_INIT_TAKE1("SSIEndTag", set_default_end_tag, NULL, RSRC_CONF, "SSI End String Tag"), AP_INIT_TAKE1("SSIUndefinedEcho", set_undefined_echo, NULL, OR_ALL, "String to be displayed if an echoed variable is undefined"), AP_INIT_FLAG("SSILegacyExprParser", ap_set_flag_slot_char, (void *)APR_OFFSETOF(include_dir_config, legacy_expr), OR_LIMIT, "Whether to use the legacy expression parser compatible " "with <= 2.2.x. Limited to 'on' or 'off'"), AP_INIT_FLAG("SSILastModified", ap_set_flag_slot_char, (void *)APR_OFFSETOF(include_dir_config, lastmodified), OR_LIMIT, "Whether to set the last modified header or respect " "an existing header. Limited to 'on' or 'off'"), AP_INIT_FLAG("SSIEtag", ap_set_flag_slot_char, (void *)APR_OFFSETOF(include_dir_config, etag), OR_LIMIT, "Whether to allow the generation of ETags within the server. " "Existing ETags will be preserved. Limited to 'on' or 'off'"), {NULL} }; static void ap_register_include_handler(char *tag, include_handler_fn_t *func) { apr_hash_set(include_handlers, tag, strlen(tag), (const void *)func); } static void register_hooks(apr_pool_t *p) { APR_REGISTER_OPTIONAL_FN(ap_ssi_get_tag_and_value); APR_REGISTER_OPTIONAL_FN(ap_ssi_parse_string); APR_REGISTER_OPTIONAL_FN(ap_register_include_handler); ap_hook_post_config(include_post_config, NULL, NULL, APR_HOOK_REALLY_FIRST); ap_hook_fixups(include_fixup, NULL, NULL, APR_HOOK_LAST); ap_register_output_filter("INCLUDES", includes_filter, includes_setup, AP_FTYPE_RESOURCE); } AP_DECLARE_MODULE(include) = { STANDARD20_MODULE_STUFF, create_includes_dir_config, /* dir config creater */ merge_includes_dir_config, /* dir config merger */ create_includes_server_config,/* server config */ NULL, /* merge server config */ includes_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/filters/NWGNUmodbuffer0000644000000000000500000001023411540546347017100 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = modbuffer # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Buffer Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = modbuffer # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/modbuffer.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_buffer.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ buffer_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/filters/Makefile.in0000644000000000000500000000005110150161574016415 0ustar rootsrc include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/filters/mod_sed.dep0000644000000000000500000000712412674411515016472 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_sed.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_sed.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\libsed.h"\ .\regexp.c : \ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\libsed.h"\ ".\regexp.h"\ ".\sed.h"\ .\sed0.c : \ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\libsed.h"\ ".\regexp.h"\ ".\sed.h"\ .\sed1.c : \ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\libsed.h"\ ".\regexp.h"\ ".\sed.h"\ httpd-2.4.41/modules/filters/mod_filter.dep0000644000000000000500000000337412674411515017207 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_filter.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_filter.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/filters/mod_ratelimit.h0000644000000000000500000000437411737125415017374 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef _MOD_RATELIMIT_H_ #define _MOD_RATELIMIT_H_ /* Create a set of AP_RL_DECLARE(type), AP_RL_DECLARE_NONSTD(type) and * AP_RL_DECLARE_DATA with appropriate export and import tags for the platform */ #if !defined(WIN32) #define AP_RL_DECLARE(type) type #define AP_RL_DECLARE_NONSTD(type) type #define AP_RL_DECLARE_DATA #elif defined(AP_RL_DECLARE_STATIC) #define AP_RL_DECLARE(type) type __stdcall #define AP_RL_DECLARE_NONSTD(type) type #define AP_RL_DECLARE_DATA #elif defined(AP_RL_DECLARE_EXPORT) #define AP_RL_DECLARE(type) __declspec(dllexport) type __stdcall #define AP_RL_DECLARE_NONSTD(type) __declspec(dllexport) type #define AP_RL_DECLARE_DATA __declspec(dllexport) #else #define AP_RL_DECLARE(type) __declspec(dllimport) type __stdcall #define AP_RL_DECLARE_NONSTD(type) __declspec(dllimport) type #define AP_RL_DECLARE_DATA __declspec(dllimport) #endif AP_RL_DECLARE_DATA extern const apr_bucket_type_t ap_rl_bucket_type_end; AP_RL_DECLARE_DATA extern const apr_bucket_type_t ap_rl_bucket_type_start; #define AP_RL_BUCKET_IS_END(e) (e->type == &ap_rl_bucket_type_end) #define AP_RL_BUCKET_IS_START(e) (e->type == &ap_rl_bucket_type_start) /* TODO: Make these Optional Functions, so that module load order doesn't matter. */ AP_RL_DECLARE(apr_bucket*) ap_rl_end_create(apr_bucket_alloc_t *list); AP_RL_DECLARE(apr_bucket*) ap_rl_start_create(apr_bucket_alloc_t *list); #endif httpd-2.4.41/modules/filters/mod_reflector.dsp0000644000000000000500000001100112062614564017707 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_reflector" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_reflector - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_reflector.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_reflector.mak" CFG="mod_reflector - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_reflector - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_reflector - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_reflector - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_RL_DECLARE_EXPORT" /Fd"Release\mod_reflector_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_reflector.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_reflector.so" /d LONG_NAME="reflector_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_reflector.so" /base:@..\..\os\win32\BaseAddr.ref,mod_reflector.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_reflector.so" /base:@..\..\os\win32\BaseAddr.ref,mod_reflector.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_reflector.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_reflector - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_RL_DECLARE_EXPORT" /Fd"Debug\mod_reflector_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_reflector.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_reflector.so" /d LONG_NAME="reflector_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_reflector.so" /base:@..\..\os\win32\BaseAddr.ref,mod_reflector.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_reflector.so" /base:@..\..\os\win32\BaseAddr.ref,mod_reflector.so # Begin Special Build Tool TargetPath=.\Debug\mod_reflector.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_reflector - Win32 Release" # Name "mod_reflector - Win32 Debug" # Begin Source File SOURCE=.\mod_reflector.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/filters/mod_ratelimit.dep0000644000000000000500000000306012674411515017704 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_ratelimit.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_ratelimit.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_ratelimit.h"\ httpd-2.4.41/modules/filters/mod_filter.dsp0000644000000000000500000001056310674443511017222 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_filter" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_filter - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_filter.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_filter.mak" CFG="mod_filter - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_filter - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_filter - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_filter - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_filter_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_filter.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_filter.so" /d LONG_NAME="filter_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_filter.so" /base:@..\..\os\win32\BaseAddr.ref,mod_filter.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_filter.so" /base:@..\..\os\win32\BaseAddr.ref,mod_filter.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_filter.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_filter - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_filter_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_filter.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_filter.so" /d LONG_NAME="filter_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_filter.so" /base:@..\..\os\win32\BaseAddr.ref,mod_filter.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_filter.so" /base:@..\..\os\win32\BaseAddr.ref,mod_filter.so # Begin Special Build Tool TargetPath=.\Debug\mod_filter.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_filter - Win32 Release" # Name "mod_filter - Win32 Debug" # Begin Source File SOURCE=.\mod_filter.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/filters/mod_reflector.c0000644000000000000500000001527012532143363017353 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_strings.h" #include "apr_tables.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "mod_core.h" module AP_MODULE_DECLARE_DATA reflector_module; typedef struct { apr_table_t *headers; } reflector_cfg; static int header_do(void *dummy, const char *key, const char *value) { request_rec *r = (request_rec *) dummy; const char *payload; payload = apr_table_get(r->headers_in, key); if (payload) { apr_table_setn(r->headers_out, value, payload); } return 1; } static int reflector_handler(request_rec * r) { apr_bucket_brigade *bbin, *bbout; reflector_cfg *conf; apr_status_t status; if (strcmp(r->handler, "reflector")) { return DECLINED; } conf = (reflector_cfg *) ap_get_module_config(r->per_dir_config, &reflector_module); ap_allow_methods(r, 1, "POST", "OPTIONS", NULL); if (r->method_number == M_OPTIONS) { return ap_send_http_options(r); } else if (r->method_number == M_POST) { const char *content_length, *content_type; int seen_eos; /* * Sometimes we'll get in a state where the input handling has * detected an error where we want to drop the connection, so if * that's the case, don't read the data as that is what we're trying * to avoid. * * This function is also a no-op on a subrequest. */ if (r->main || r->connection->keepalive == AP_CONN_CLOSE || ap_status_drops_connection(r->status)) { return OK; } /* copy headers from in to out if configured */ apr_table_do(header_do, r, conf->headers, NULL); /* last modified defaults to now, unless otherwise set on the way in */ if (!apr_table_get(r->headers_out, "Last-Modified")) { ap_update_mtime(r, apr_time_now()); ap_set_last_modified(r); } ap_set_accept_ranges(r); /* reflect the content length, if present */ if ((content_length = apr_table_get(r->headers_in, "Content-Length"))) { apr_off_t offset; apr_strtoff(&offset, content_length, NULL, 10); ap_set_content_length(r, offset); } /* reflect the content type, if present */ if ((content_type = apr_table_get(r->headers_in, "Content-Type"))) { ap_set_content_type(r, content_type); } bbin = apr_brigade_create(r->pool, r->connection->bucket_alloc); bbout = apr_brigade_create(r->pool, r->connection->bucket_alloc); seen_eos = 0; do { apr_bucket *bucket; status = ap_get_brigade(r->input_filters, bbin, AP_MODE_READBYTES, APR_BLOCK_READ, HUGE_STRING_LEN); if (status != APR_SUCCESS) { apr_brigade_destroy(bbin); return ap_map_http_request_error(status, HTTP_BAD_REQUEST); } for (bucket = APR_BRIGADE_FIRST(bbin); bucket != APR_BRIGADE_SENTINEL(bbin); bucket = APR_BUCKET_NEXT(bucket)) { const char *data; apr_size_t len; if (APR_BUCKET_IS_EOS(bucket)) { seen_eos = 1; break; } /* These are metadata buckets. */ if (bucket->length == 0) { continue; } /* * We MUST read because in case we have an unknown-length * bucket or one that morphs, we want to exhaust it. */ status = apr_bucket_read(bucket, &data, &len, APR_BLOCK_READ); if (status != APR_SUCCESS) { apr_brigade_destroy(bbin); return HTTP_BAD_REQUEST; } apr_brigade_write(bbout, NULL, NULL, data, len); status = ap_pass_brigade(r->output_filters, bbout); if (status != APR_SUCCESS) { /* no way to know what type of error occurred */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, r, APLOGNO(01410) "reflector_handler: ap_pass_brigade returned %i", status); return AP_FILTER_ERROR; } } apr_brigade_cleanup(bbin); } while (!seen_eos); return OK; } else { return HTTP_METHOD_NOT_ALLOWED; } } static void *create_reflector_dir_config(apr_pool_t * p, char *d) { reflector_cfg *conf = apr_pcalloc(p, sizeof(reflector_cfg)); conf->headers = apr_table_make(p, 8); return conf; } static void *merge_reflector_dir_config(apr_pool_t * p, void *basev, void *addv) { reflector_cfg *new = (reflector_cfg *) apr_pcalloc(p, sizeof(reflector_cfg)); reflector_cfg *add = (reflector_cfg *) addv; reflector_cfg *base = (reflector_cfg *) basev; new->headers = apr_table_overlay(p, add->headers, base->headers); return new; } static const char *reflector_header(cmd_parms * cmd, void *dummy, const char *in, const char *out) { reflector_cfg *cfg = (reflector_cfg *) dummy; apr_table_addn(cfg->headers, in, out ? out : in); return NULL; } static void reflector_hooks(apr_pool_t * p) { ap_hook_handler(reflector_handler, NULL, NULL, APR_HOOK_MIDDLE); } static const command_rec reflector_cmds[] = { AP_INIT_TAKE12("ReflectorHeader", reflector_header, NULL, OR_OPTIONS, "Header to reflect back in the response, with an optional new name."), {NULL} }; AP_DECLARE_MODULE(reflector) = { STANDARD20_MODULE_STUFF, create_reflector_dir_config, merge_reflector_dir_config, NULL, NULL, reflector_cmds, reflector_hooks }; httpd-2.4.41/modules/filters/NWGNUratelimit0000644000000000000500000001024611540546347017124 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = ratelimit # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Rate Limit Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = ratelimit # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/ratelimit.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_ratelimit.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ ratelimit_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/mappers/0002755000000000000500000000000013523273342014361 5ustar rootsrchttpd-2.4.41/modules/mappers/mod_dir.exp0000644000000000000500000000001310150161574016500 0ustar rootsrcdir_module httpd-2.4.41/modules/mappers/mod_negotiation.exp0000644000000000000500000000002310150161574020243 0ustar rootsrcnegotiation_module httpd-2.4.41/modules/mappers/mod_vhost_alias.dep0000644000000000000500000000340712674411515020232 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_vhost_alias.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_vhost_alias.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/mappers/mod_actions.mak0000644000000000000500000002347112701473373017362 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_actions.dsp !IF "$(CFG)" == "" CFG=mod_actions - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_actions - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_actions - Win32 Release" && "$(CFG)" != "mod_actions - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_actions.mak" CFG="mod_actions - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_actions - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_actions - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_actions - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_actions.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_actions.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_actions.obj" -@erase "$(INTDIR)\mod_actions.res" -@erase "$(INTDIR)\mod_actions_src.idb" -@erase "$(INTDIR)\mod_actions_src.pdb" -@erase "$(OUTDIR)\mod_actions.exp" -@erase "$(OUTDIR)\mod_actions.lib" -@erase "$(OUTDIR)\mod_actions.pdb" -@erase "$(OUTDIR)\mod_actions.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_actions_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_actions.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_actions.so" /d LONG_NAME="actions_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_actions.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_actions.pdb" /debug /out:"$(OUTDIR)\mod_actions.so" /implib:"$(OUTDIR)\mod_actions.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_actions.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_actions.obj" \ "$(INTDIR)\mod_actions.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_actions.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_actions.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_actions.so" if exist .\Release\mod_actions.so.manifest mt.exe -manifest .\Release\mod_actions.so.manifest -outputresource:.\Release\mod_actions.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_actions - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_actions.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_actions.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_actions.obj" -@erase "$(INTDIR)\mod_actions.res" -@erase "$(INTDIR)\mod_actions_src.idb" -@erase "$(INTDIR)\mod_actions_src.pdb" -@erase "$(OUTDIR)\mod_actions.exp" -@erase "$(OUTDIR)\mod_actions.lib" -@erase "$(OUTDIR)\mod_actions.pdb" -@erase "$(OUTDIR)\mod_actions.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_actions_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_actions.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_actions.so" /d LONG_NAME="actions_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_actions.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_actions.pdb" /debug /out:"$(OUTDIR)\mod_actions.so" /implib:"$(OUTDIR)\mod_actions.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_actions.so LINK32_OBJS= \ "$(INTDIR)\mod_actions.obj" \ "$(INTDIR)\mod_actions.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_actions.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_actions.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_actions.so" if exist .\Debug\mod_actions.so.manifest mt.exe -manifest .\Debug\mod_actions.so.manifest -outputresource:.\Debug\mod_actions.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_actions.dep") !INCLUDE "mod_actions.dep" !ELSE !MESSAGE Warning: cannot find "mod_actions.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_actions - Win32 Release" || "$(CFG)" == "mod_actions - Win32 Debug" !IF "$(CFG)" == "mod_actions - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\mappers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_actions - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\mappers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_actions - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\mappers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_actions - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\mappers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_actions - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\mappers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\mappers" !ELSEIF "$(CFG)" == "mod_actions - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\mappers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\mappers" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_actions - Win32 Release" "$(INTDIR)\mod_actions.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_actions.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_actions.so" /d LONG_NAME="actions_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_actions - Win32 Debug" "$(INTDIR)\mod_actions.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_actions.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_actions.so" /d LONG_NAME="actions_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_actions.c "$(INTDIR)\mod_actions.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/mappers/mod_alias.mak0000644000000000000500000002321112701473373017003 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_alias.dsp !IF "$(CFG)" == "" CFG=mod_alias - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_alias - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_alias - Win32 Release" && "$(CFG)" != "mod_alias - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_alias.mak" CFG="mod_alias - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_alias - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_alias - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_alias - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_alias.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_alias.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_alias.obj" -@erase "$(INTDIR)\mod_alias.res" -@erase "$(INTDIR)\mod_alias_src.idb" -@erase "$(INTDIR)\mod_alias_src.pdb" -@erase "$(OUTDIR)\mod_alias.exp" -@erase "$(OUTDIR)\mod_alias.lib" -@erase "$(OUTDIR)\mod_alias.pdb" -@erase "$(OUTDIR)\mod_alias.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_alias_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_alias.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_alias.so" /d LONG_NAME="alias_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_alias.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_alias.pdb" /debug /out:"$(OUTDIR)\mod_alias.so" /implib:"$(OUTDIR)\mod_alias.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_alias.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_alias.obj" \ "$(INTDIR)\mod_alias.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_alias.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_alias.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_alias.so" if exist .\Release\mod_alias.so.manifest mt.exe -manifest .\Release\mod_alias.so.manifest -outputresource:.\Release\mod_alias.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_alias - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_alias.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_alias.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_alias.obj" -@erase "$(INTDIR)\mod_alias.res" -@erase "$(INTDIR)\mod_alias_src.idb" -@erase "$(INTDIR)\mod_alias_src.pdb" -@erase "$(OUTDIR)\mod_alias.exp" -@erase "$(OUTDIR)\mod_alias.lib" -@erase "$(OUTDIR)\mod_alias.pdb" -@erase "$(OUTDIR)\mod_alias.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_alias_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_alias.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_alias.so" /d LONG_NAME="alias_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_alias.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_alias.pdb" /debug /out:"$(OUTDIR)\mod_alias.so" /implib:"$(OUTDIR)\mod_alias.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_alias.so LINK32_OBJS= \ "$(INTDIR)\mod_alias.obj" \ "$(INTDIR)\mod_alias.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_alias.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_alias.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_alias.so" if exist .\Debug\mod_alias.so.manifest mt.exe -manifest .\Debug\mod_alias.so.manifest -outputresource:.\Debug\mod_alias.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_alias.dep") !INCLUDE "mod_alias.dep" !ELSE !MESSAGE Warning: cannot find "mod_alias.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_alias - Win32 Release" || "$(CFG)" == "mod_alias - Win32 Debug" !IF "$(CFG)" == "mod_alias - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\mappers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_alias - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\mappers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_alias - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\mappers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_alias - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\mappers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_alias - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\mappers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\mappers" !ELSEIF "$(CFG)" == "mod_alias - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\mappers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\mappers" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_alias - Win32 Release" "$(INTDIR)\mod_alias.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_alias.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_alias.so" /d LONG_NAME="alias_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_alias - Win32 Debug" "$(INTDIR)\mod_alias.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_alias.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_alias.so" /d LONG_NAME="alias_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_alias.c "$(INTDIR)\mod_alias.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/mappers/mod_negotiation.dep0000644000000000000500000000407612674411515020241 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_negotiation.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_negotiation.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/mappers/mod_speling.dsp0000644000000000000500000001062110551346420017363 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_speling" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_speling - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_speling.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_speling.mak" CFG="mod_speling - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_speling - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_speling - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_speling - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_speling_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_speling.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_speling.so" /d LONG_NAME="speling_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_speling.so" /base:@..\..\os\win32\BaseAddr.ref,mod_speling.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_speling.so" /base:@..\..\os\win32\BaseAddr.ref,mod_speling.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_speling.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_speling - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_speling_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_speling.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_speling.so" /d LONG_NAME="speling_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_speling.so" /base:@..\..\os\win32\BaseAddr.ref,mod_speling.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_speling.so" /base:@..\..\os\win32\BaseAddr.ref,mod_speling.so # Begin Special Build Tool TargetPath=.\Debug\mod_speling.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_speling - Win32 Release" # Name "mod_speling - Win32 Debug" # Begin Source File SOURCE=.\mod_speling.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/mappers/mod_alias.dep0000644000000000000500000000343012674411515017003 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_alias.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_alias.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/mappers/mod_rewrite.dep0000644000000000000500000000443112674411515017375 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_rewrite.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_rewrite.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_dbd.h"\ "..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_signal.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\database\mod_dbd.h"\ "..\ssl\mod_ssl.h"\ ".\mod_rewrite.h"\ httpd-2.4.41/modules/mappers/mod_speling.dep0000644000000000000500000000343412674411515017357 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_speling.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_speling.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/mappers/mod_rewrite.dsp0000644000000000000500000001071310551346420017405 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_rewrite" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_rewrite - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_rewrite.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_rewrite.mak" CFG="mod_rewrite - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_rewrite - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_rewrite - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_rewrite - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../database" /I "../ssl" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_rewrite_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_rewrite.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_rewrite.so" /d LONG_NAME="rewrite_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_rewrite.so" /base:@..\..\os\win32\BaseAddr.ref,mod_rewrite.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_rewrite.so" /base:@..\..\os\win32\BaseAddr.ref,mod_rewrite.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_rewrite.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_rewrite - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../database" /I "../ssl" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_rewrite_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_rewrite.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_rewrite.so" /d LONG_NAME="rewrite_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_rewrite.so" /base:@..\..\os\win32\BaseAddr.ref,mod_rewrite.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_rewrite.so" /base:@..\..\os\win32\BaseAddr.ref,mod_rewrite.so # Begin Special Build Tool TargetPath=.\Debug\mod_rewrite.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_rewrite - Win32 Release" # Name "mod_rewrite - Win32 Debug" # Begin Source File SOURCE=.\mod_rewrite.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/mappers/NWGNUimagemap0000644000000000000500000001021011540546347016700 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = imagemap # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Image Map Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Image Map Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/imagemap.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_imagemap.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ imagemap_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/mappers/mod_speling.c0000644000000000000500000004515313160167403017030 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr.h" #include "apr_file_io.h" #include "apr_strings.h" #include "apr_lib.h" #define APR_WANT_STRFUNC #include "apr_want.h" #define WANT_BASENAME_MATCH #include "httpd.h" #include "http_core.h" #include "http_config.h" #include "http_request.h" #include "http_log.h" /* mod_speling.c - by Alexei Kosut June, 1996 * * This module is transparent, and simple. It attempts to correct * misspellings of URLs that users might have entered, namely by checking * capitalizations. If it finds a match, it sends a redirect. * * Sep-1999 Hugo Haas * o Added a CheckCaseOnly option to check only miscapitalized words. * * 08-Aug-1997 * o Upgraded module interface to apache_1.3a2-dev API (more NULL's in * speling_module). * o Integrated tcsh's "spelling correction" routine which allows one * misspelling (character insertion/omission/typo/transposition). * Rewrote it to ignore case as well. This ought to catch the majority * of misspelled requests. * o Commented out the second pass where files' suffixes are stripped. * Given the better hit rate of the first pass, this rather ugly * (request index.html, receive index.db ?!?!) solution can be * omitted. * o wrote a "kind of" html page for mod_speling * * Activate it with "CheckSpelling On" */ module AP_MODULE_DECLARE_DATA speling_module; typedef struct { int enabled; int case_only; } spconfig; /* * Create a configuration specific to this module for a server or directory * location, and fill it with the default settings. * * The API says that in the absence of a merge function, the record for the * closest ancestor is used exclusively. That's what we want, so we don't * bother to have such a function. */ static void *mkconfig(apr_pool_t *p) { spconfig *cfg = apr_pcalloc(p, sizeof(spconfig)); cfg->enabled = 0; cfg->case_only = 0; return cfg; } /* * Respond to a callback to create configuration record for a server or * vhost environment. */ static void *create_mconfig_for_server(apr_pool_t *p, server_rec *s) { return mkconfig(p); } /* * Respond to a callback to create a config record for a specific directory. */ static void *create_mconfig_for_directory(apr_pool_t *p, char *dir) { return mkconfig(p); } /* * Define the directives specific to this module. This structure is referenced * later by the 'module' structure. */ static const command_rec speling_cmds[] = { AP_INIT_FLAG("CheckSpelling", ap_set_flag_slot, (void*)APR_OFFSETOF(spconfig, enabled), OR_OPTIONS, "whether or not to fix miscapitalized/misspelled requests"), AP_INIT_FLAG("CheckCaseOnly", ap_set_flag_slot, (void*)APR_OFFSETOF(spconfig, case_only), OR_OPTIONS, "whether or not to fix only miscapitalized requests"), { NULL } }; typedef enum { SP_IDENTICAL = 0, SP_MISCAPITALIZED = 1, SP_TRANSPOSITION = 2, SP_MISSINGCHAR = 3, SP_EXTRACHAR = 4, SP_SIMPLETYPO = 5, SP_VERYDIFFERENT = 6 } sp_reason; static const char *sp_reason_str[] = { "identical", "miscapitalized", "transposed characters", "character missing", "extra character", "mistyped character", "common basename", }; typedef struct { const char *name; sp_reason quality; } misspelled_file; /* * spdist() is taken from Kernighan & Pike, * _The_UNIX_Programming_Environment_ * and adapted somewhat to correspond better to psychological reality. * (Note the changes to the return values) * * According to Pollock and Zamora, CACM April 1984 (V. 27, No. 4), * page 363, the correct order for this is: * OMISSION = TRANSPOSITION > INSERTION > SUBSTITUTION * thus, it was exactly backwards in the old version. -- PWP * * This routine was taken out of tcsh's spelling correction code * (tcsh-6.07.04) and re-converted to apache data types ("char" type * instead of tcsh's NLS'ed "Char"). Plus it now ignores the case * during comparisons, so is a "approximate strcasecmp()". * NOTE that is still allows only _one_ real "typo", * it does NOT try to correct multiple errors. */ static sp_reason spdist(const char *s, const char *t) { for (; apr_tolower(*s) == apr_tolower(*t); t++, s++) { if (*t == '\0') { return SP_MISCAPITALIZED; /* exact match (sans case) */ } } if (*s) { if (*t) { if (s[1] && t[1] && apr_tolower(*s) == apr_tolower(t[1]) && apr_tolower(*t) == apr_tolower(s[1]) && strcasecmp(s + 2, t + 2) == 0) { return SP_TRANSPOSITION; /* transposition */ } if (strcasecmp(s + 1, t + 1) == 0) { return SP_SIMPLETYPO; /* 1 char mismatch */ } } if (strcasecmp(s + 1, t) == 0) { return SP_EXTRACHAR; /* extra character */ } } if (*t && strcasecmp(s, t + 1) == 0) { return SP_MISSINGCHAR; /* missing character */ } return SP_VERYDIFFERENT; /* distance too large to fix. */ } static int sort_by_quality(const void *left, const void *rite) { return (int) (((misspelled_file *) left)->quality) - (int) (((misspelled_file *) rite)->quality); } static int check_speling(request_rec *r) { spconfig *cfg; char *good, *bad, *postgood, *url; apr_finfo_t dirent; int filoc, dotloc, urlen, pglen; apr_array_header_t *candidates = NULL; apr_dir_t *dir; cfg = ap_get_module_config(r->per_dir_config, &speling_module); if (!cfg->enabled) { return DECLINED; } /* We only want to worry about GETs */ if (r->method_number != M_GET) { return DECLINED; } /* We've already got a file of some kind or another */ if (r->finfo.filetype != APR_NOFILE) { return DECLINED; } /* Not a file request */ if (r->proxyreq || !r->filename) { return DECLINED; } /* This is a sub request - don't mess with it */ if (r->main) { return DECLINED; } /* * The request should end up looking like this: * r->uri: /correct-url/mispelling/more * r->filename: /correct-file/mispelling r->path_info: /more * * So we do this in steps. First break r->filename into two pieces */ filoc = ap_rind(r->filename, '/'); /* * Don't do anything if the request doesn't contain a slash, or * requests "/" */ if (filoc == -1 || strcmp(r->uri, "/") == 0) { return DECLINED; } /* good = /correct-file */ good = apr_pstrndup(r->pool, r->filename, filoc); /* bad = mispelling */ bad = apr_pstrdup(r->pool, r->filename + filoc + 1); /* postgood = mispelling/more */ postgood = apr_pstrcat(r->pool, bad, r->path_info, NULL); urlen = strlen(r->uri); pglen = strlen(postgood); /* Check to see if the URL pieces add up */ if (strcmp(postgood, r->uri + (urlen - pglen))) { return DECLINED; } /* url = /correct-url */ url = apr_pstrndup(r->pool, r->uri, (urlen - pglen)); /* Now open the directory and do ourselves a check... */ if (apr_dir_open(&dir, good, r->pool) != APR_SUCCESS) { /* Oops, not a directory... */ return DECLINED; } candidates = apr_array_make(r->pool, 2, sizeof(misspelled_file)); dotloc = ap_ind(bad, '.'); if (dotloc == -1) { dotloc = strlen(bad); } while (apr_dir_read(&dirent, APR_FINFO_DIRENT, dir) == APR_SUCCESS) { sp_reason q; /* * If we end up with a "fixed" URL which is identical to the * requested one, we must have found a broken symlink or some such. * Do _not_ try to redirect this, it causes a loop! */ if (strcmp(bad, dirent.name) == 0) { apr_dir_close(dir); return OK; } /* * miscapitalization errors are checked first (like, e.g., lower case * file, upper case request) */ else if (strcasecmp(bad, dirent.name) == 0) { misspelled_file *sp_new; sp_new = (misspelled_file *) apr_array_push(candidates); sp_new->name = apr_pstrdup(r->pool, dirent.name); sp_new->quality = SP_MISCAPITALIZED; } /* * simple typing errors are checked next (like, e.g., * missing/extra/transposed char) */ else if ((cfg->case_only == 0) && ((q = spdist(bad, dirent.name)) != SP_VERYDIFFERENT)) { misspelled_file *sp_new; sp_new = (misspelled_file *) apr_array_push(candidates); sp_new->name = apr_pstrdup(r->pool, dirent.name); sp_new->quality = q; } /* * The spdist() should have found the majority of the misspelled * requests. It is of questionable use to continue looking for * files with the same base name, but potentially of totally wrong * type (index.html <-> index.db). * I would propose to not set the WANT_BASENAME_MATCH define. * 08-Aug-1997 * * However, Alexei replied giving some reasons to add it anyway: * > Oh, by the way, I remembered why having the * > extension-stripping-and-matching stuff is a good idea: * > * > If you're using MultiViews, and have a file named foobar.html, * > which you refer to as "foobar", and someone tried to access * > "Foobar", mod_speling won't find it, because it won't find * > anything matching that spelling. With the extension-munging, * > it would locate "foobar.html". Not perfect, but I ran into * > that problem when I first wrote the module. */ else { #ifdef WANT_BASENAME_MATCH /* * Okay... we didn't find anything. Now we take out the hard-core * power tools. There are several cases here. Someone might have * entered a wrong extension (.htm instead of .html or vice * versa) or the document could be negotiated. At any rate, now * we just compare stuff before the first dot. If it matches, we * figure we got us a match. This can result in wrong things if * there are files of different content types but the same prefix * (e.g. foo.gif and foo.html) This code will pick the first one * it finds. Better than a Not Found, though. */ int entloc = ap_ind(dirent.name, '.'); if (entloc == -1) { entloc = strlen(dirent.name); } if ((dotloc == entloc) && !strncasecmp(bad, dirent.name, dotloc)) { misspelled_file *sp_new; sp_new = (misspelled_file *) apr_array_push(candidates); sp_new->name = apr_pstrdup(r->pool, dirent.name); sp_new->quality = SP_VERYDIFFERENT; } #endif } } apr_dir_close(dir); if (candidates->nelts != 0) { /* Wow... we found us a mispelling. Construct a fixed url */ char *nuri; const char *ref; misspelled_file *variant = (misspelled_file *) candidates->elts; int i; ref = apr_table_get(r->headers_in, "Referer"); qsort((void *) candidates->elts, candidates->nelts, sizeof(misspelled_file), sort_by_quality); /* * Conditions for immediate redirection: * a) the first candidate was not found by stripping the suffix * AND b) there exists only one candidate OR the best match is not * ambiguous * then return a redirection right away. */ if (variant[0].quality != SP_VERYDIFFERENT && (candidates->nelts == 1 || variant[0].quality != variant[1].quality)) { nuri = ap_escape_uri(r->pool, apr_pstrcat(r->pool, url, variant[0].name, r->path_info, NULL)); if (r->parsed_uri.query) nuri = apr_pstrcat(r->pool, nuri, "?", r->parsed_uri.query, NULL); apr_table_setn(r->headers_out, "Location", ap_construct_url(r->pool, nuri, r)); ap_log_rerror(APLOG_MARK, APLOG_INFO, APR_SUCCESS, r, ref ? APLOGNO(03224) "Fixed spelling: %s to %s from %s" : APLOGNO(03225) "Fixed spelling: %s to %s%s", r->uri, nuri, (ref ? ref : "")); return HTTP_MOVED_PERMANENTLY; } /* * Otherwise, a "[300] Multiple Choices" list with the variants is * returned. */ else { apr_pool_t *p; apr_table_t *notes; apr_pool_t *sub_pool; apr_array_header_t *t; apr_array_header_t *v; if (r->main == NULL) { p = r->pool; notes = r->notes; } else { p = r->main->pool; notes = r->main->notes; } if (apr_pool_create(&sub_pool, p) != APR_SUCCESS) return DECLINED; t = apr_array_make(sub_pool, candidates->nelts * 8 + 8, sizeof(char *)); v = apr_array_make(sub_pool, candidates->nelts * 5, sizeof(char *)); /* Generate the response text. */ *(const char **)apr_array_push(t) = "The document name you requested ("; *(const char **)apr_array_push(t) = ap_escape_html(sub_pool, r->uri); *(const char **)apr_array_push(t) = ") could not be found on this server.\n" "However, we found documents with names similar " "to the one you requested.

    " "Available documents:\n

      \n"; for (i = 0; i < candidates->nelts; ++i) { char *vuri; const char *reason; reason = sp_reason_str[(int) (variant[i].quality)]; /* The format isn't very neat... */ vuri = apr_pstrcat(sub_pool, url, variant[i].name, r->path_info, (r->parsed_uri.query != NULL) ? "?" : "", (r->parsed_uri.query != NULL) ? r->parsed_uri.query : "", NULL); *(const char **)apr_array_push(v) = "\""; *(const char **)apr_array_push(v) = ap_escape_uri(sub_pool, vuri); *(const char **)apr_array_push(v) = "\";\""; *(const char **)apr_array_push(v) = reason; *(const char **)apr_array_push(v) = "\""; *(const char **)apr_array_push(t) = "
    • "; *(const char **)apr_array_push(t) = ap_escape_html(sub_pool, vuri); *(const char **)apr_array_push(t) = " ("; *(const char **)apr_array_push(t) = reason; *(const char **)apr_array_push(t) = ")\n"; /* * when we have printed the "close matches" and there are * more "distant matches" (matched by stripping the suffix), * then we insert an additional separator text to suggest * that the user LOOK CLOSELY whether these are really the * files she wanted. */ if (i > 0 && i < candidates->nelts - 1 && variant[i].quality != SP_VERYDIFFERENT && variant[i + 1].quality == SP_VERYDIFFERENT) { *(const char **)apr_array_push(t) = "
    \nFurthermore, the following related " "documents were found:\n
      \n"; } } *(const char **)apr_array_push(t) = "
    \n"; /* If we know there was a referring page, add a note: */ if (ref != NULL) { *(const char **)apr_array_push(t) = "Please consider informing the owner of the " "referring page "; *(const char **)apr_array_push(t) = ap_escape_html(sub_pool, ref); *(const char **)apr_array_push(t) = " about the broken link.\n"; } /* Pass our apr_table_t to http_protocol.c (see mod_negotiation): */ apr_table_setn(notes, "variant-list", apr_array_pstrcat(p, t, 0)); apr_table_mergen(r->subprocess_env, "VARIANTS", apr_array_pstrcat(p, v, ',')); apr_pool_destroy(sub_pool); ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, ref ? APLOGNO(03226) "Spelling fix: %s: %d candidates from %s" : APLOGNO(03227) "Spelling fix: %s: %d candidates%s", r->uri, candidates->nelts, (ref ? ref : "")); return HTTP_MULTIPLE_CHOICES; } } return OK; } static void register_hooks(apr_pool_t *p) { ap_hook_fixups(check_speling,NULL,NULL,APR_HOOK_LAST); } AP_DECLARE_MODULE(speling) = { STANDARD20_MODULE_STUFF, create_mconfig_for_directory, /* create per-dir config */ NULL, /* merge per-dir config */ create_mconfig_for_server, /* server config */ NULL, /* merge server config */ speling_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/mappers/NWGNUvhost0000644000000000000500000001021411540546347016267 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = vhost # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Vhost Alias Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Vhost Alias Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/vhost.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_vhost_alias.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ vhost_alias_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/mappers/mod_negotiation.c0000644000000000000500000033154613417656725017732 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_negotiation.c: keeps track of MIME types the client is willing to * accept, and contains code to handle type arbitration. * * rst */ #include "apr.h" #include "apr_strings.h" #include "apr_file_io.h" #include "apr_lib.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_protocol.h" #include "http_core.h" #include "http_log.h" #include "util_script.h" #define MAP_FILE_MAGIC_TYPE "application/x-type-map" /* Commands --- configuring document caching on a per (virtual?) * server basis... */ typedef struct { int forcelangpriority; apr_array_header_t *language_priority; } neg_dir_config; /* forcelangpriority flags */ #define FLP_UNDEF 0 /* Same as FLP_DEFAULT, but base overrides */ #define FLP_NONE 1 /* Return 406, HTTP_NOT_ACCEPTABLE */ #define FLP_PREFER 2 /* Use language_priority rather than MC */ #define FLP_FALLBACK 4 /* Use language_priority rather than NA */ #define FLP_DEFAULT FLP_PREFER /* env evaluation */ #define DISCARD_ALL_ENCODINGS 1 /* no-gzip */ #define DISCARD_ALL_BUT_HTML 2 /* gzip-only-text/html */ module AP_MODULE_DECLARE_DATA negotiation_module; static void *create_neg_dir_config(apr_pool_t *p, char *dummy) { neg_dir_config *new = (neg_dir_config *) apr_palloc(p, sizeof(neg_dir_config)); new->forcelangpriority = FLP_UNDEF; new->language_priority = NULL; return new; } static void *merge_neg_dir_configs(apr_pool_t *p, void *basev, void *addv) { neg_dir_config *base = (neg_dir_config *) basev; neg_dir_config *add = (neg_dir_config *) addv; neg_dir_config *new = (neg_dir_config *) apr_palloc(p, sizeof(neg_dir_config)); /* give priority to the config in the subdirectory */ new->forcelangpriority = (add->forcelangpriority != FLP_UNDEF) ? add->forcelangpriority : base->forcelangpriority; new->language_priority = add->language_priority ? add->language_priority : base->language_priority; return new; } static const char *set_language_priority(cmd_parms *cmd, void *n_, const char *lang) { neg_dir_config *n = n_; const char **langp; if (!n->language_priority) n->language_priority = apr_array_make(cmd->pool, 4, sizeof(char *)); langp = (const char **) apr_array_push(n->language_priority); *langp = lang; return NULL; } static const char *set_force_priority(cmd_parms *cmd, void *n_, const char *w) { neg_dir_config *n = n_; if (!strcasecmp(w, "None")) { if (n->forcelangpriority & ~FLP_NONE) { return "Cannot combine ForceLanguagePriority options with None"; } n->forcelangpriority = FLP_NONE; } else if (!strcasecmp(w, "Prefer")) { if (n->forcelangpriority & FLP_NONE) { return "Cannot combine ForceLanguagePriority options None and " "Prefer"; } n->forcelangpriority |= FLP_PREFER; } else if (!strcasecmp(w, "Fallback")) { if (n->forcelangpriority & FLP_NONE) { return "Cannot combine ForceLanguagePriority options None and " "Fallback"; } n->forcelangpriority |= FLP_FALLBACK; } else { return apr_pstrcat(cmd->pool, "Invalid ForceLanguagePriority option ", w, NULL); } return NULL; } static const char *cache_negotiated_docs(cmd_parms *cmd, void *dummy, int arg) { ap_set_module_config(cmd->server->module_config, &negotiation_module, (arg ? "Cache" : NULL)); return NULL; } static int do_cache_negotiated_docs(server_rec *s) { return (ap_get_module_config(s->module_config, &negotiation_module) != NULL); } static const command_rec negotiation_cmds[] = { AP_INIT_FLAG("CacheNegotiatedDocs", cache_negotiated_docs, NULL, RSRC_CONF, "Either 'on' or 'off' (default)"), AP_INIT_ITERATE("LanguagePriority", set_language_priority, NULL, OR_FILEINFO, "space-delimited list of MIME language abbreviations"), AP_INIT_ITERATE("ForceLanguagePriority", set_force_priority, NULL, OR_FILEINFO, "Force LanguagePriority elections, either None, or " "Fallback and/or Prefer"), {NULL} }; /* * Record of available info on a media type specified by the client * (we also use 'em for encodings and languages) */ typedef struct accept_rec { char *name; /* MUST be lowercase */ float quality; float level; char *charset; /* for content-type only */ } accept_rec; /* * Record of available info on a particular variant * * Note that a few of these fields are updated by the actual negotiation * code. These are: * * level_matched --- initialized to zero. Set to the value of level * if the client actually accepts this media type at that * level (and *not* if it got in on a wildcard). See level_cmp * below. * mime_stars -- initialized to zero. Set to the number of stars * present in the best matching Accept header element. * 1 for star/star, 2 for type/star and 3 for * type/subtype. * * definite -- initialized to 1. Set to 0 if there is a match which * makes the variant non-definite according to the rules * in rfc2296. */ typedef struct var_rec { request_rec *sub_req; /* May be NULL (is, for map files) */ const char *mime_type; /* MUST be lowercase */ const char *file_name; /* Set to 'this' (for map file body content) */ apr_off_t body; /* Only for map file body content */ const char *content_encoding; apr_array_header_t *content_languages; /* list of lang. for this variant */ const char *content_charset; const char *description; /* The next five items give the quality values for the dimensions * of negotiation for this variant. They are obtained from the * appropriate header lines, except for source_quality, which * is obtained from the variant itself (the 'qs' parameter value * from the variant's mime-type). Apart from source_quality, * these values are set when we find the quality for each variant * (see best_match()). source_quality is set from the 'qs' parameter * of the variant description or mime type: see set_mime_fields(). */ float lang_quality; /* quality of this variant's language */ float encoding_quality; /* ditto encoding */ float charset_quality; /* ditto charset */ float mime_type_quality; /* ditto media type */ float source_quality; /* source quality for this variant */ /* Now some special values */ float level; /* Auxiliary to content-type... */ apr_off_t bytes; /* content length, if known */ int lang_index; /* Index into LanguagePriority list */ int is_pseudo_html; /* text/html, *or* the INCLUDES_MAGIC_TYPEs */ /* Above are all written-once properties of the variant. The * three fields below are changed during negotiation: */ float level_matched; int mime_stars; int definite; } var_rec; /* Something to carry around the state of negotiation (and to keep * all of this thread-safe)... */ typedef struct { apr_pool_t *pool; request_rec *r; neg_dir_config *conf; char *dir_name; int accept_q; /* 1 if an Accept item has a q= param */ float default_lang_quality; /* fiddle lang q for variants with no lang */ /* the array pointers below are NULL if the corresponding accept * headers are not present */ apr_array_header_t *accepts; /* accept_recs */ apr_array_header_t *accept_encodings; /* accept_recs */ apr_array_header_t *accept_charsets; /* accept_recs */ apr_array_header_t *accept_langs; /* accept_recs */ apr_array_header_t *avail_vars; /* available variants */ int count_multiviews_variants; /* number of variants found on disk */ int is_transparent; /* 1 if this resource is trans. negotiable */ int dont_fiddle_headers; /* 1 if we may not fiddle with accept hdrs */ int ua_supports_trans; /* 1 if ua supports trans negotiation */ int send_alternates; /* 1 if we want to send an Alternates header */ int may_choose; /* 1 if we may choose a variant for the client */ int use_rvsa; /* 1 if we must use RVSA/1.0 negotiation algo */ } negotiation_state; /* A few functions to manipulate var_recs. * Cleaning out the fields... */ static void clean_var_rec(var_rec *mime_info) { mime_info->sub_req = NULL; mime_info->mime_type = ""; mime_info->file_name = ""; mime_info->body = 0; mime_info->content_encoding = NULL; mime_info->content_languages = NULL; mime_info->content_charset = ""; mime_info->description = ""; mime_info->is_pseudo_html = 0; mime_info->level = 0.0f; mime_info->level_matched = 0.0f; mime_info->bytes = -1; mime_info->lang_index = -1; mime_info->mime_stars = 0; mime_info->definite = 1; mime_info->charset_quality = 1.0f; mime_info->encoding_quality = 1.0f; mime_info->lang_quality = 1.0f; mime_info->mime_type_quality = 1.0f; mime_info->source_quality = 0.0f; } /* Initializing the relevant fields of a variant record from the * accept_info read out of its content-type, one way or another. */ static void set_mime_fields(var_rec *var, accept_rec *mime_info) { var->mime_type = mime_info->name; var->source_quality = mime_info->quality; var->level = mime_info->level; var->content_charset = mime_info->charset; var->is_pseudo_html = (!strcmp(var->mime_type, "text/html") || !strcmp(var->mime_type, INCLUDES_MAGIC_TYPE) || !strcmp(var->mime_type, INCLUDES_MAGIC_TYPE3)); } /* Create a variant list validator in r using info from vlistr. */ static void set_vlist_validator(request_rec *r, request_rec *vlistr) { /* Calculating the variant list validator is similar to * calculating an etag for the source of the variant list * information, so we use ap_make_etag(). Note that this * validator can be 'weak' in extreme case. */ ap_update_mtime(vlistr, vlistr->finfo.mtime); r->vlist_validator = ap_make_etag(vlistr, 0); /* ap_set_etag will later take r->vlist_validator into account * when creating the etag header */ } /***************************************************************** * * Parsing (lists of) media types and their parameters, as seen in * HTTPD header lines and elsewhere. */ /* * parse quality value. atof(3) is not well-usable here, because it * depends on the locale (argh). * * However, RFC 2616 states: * 3.9 Quality Values * * [...] HTTP/1.1 applications MUST NOT generate more than three digits * after the decimal point. User configuration of these values SHOULD also * be limited in this fashion. * * qvalue = ( "0" [ "." 0*3DIGIT ] ) * | ( "1" [ "." 0*3("0") ] ) * * This is quite easy. If the supplied string doesn't match the above * definition (loosely), we simply return 1 (same as if there's no qvalue) */ static float atoq(const char *string) { if (!string || !*string) { return 1.0f; } while (apr_isspace(*string)) { ++string; } /* be tolerant and accept qvalues without leading zero * (also for backwards compat, where atof() was in use) */ if (*string != '.' && *string++ != '0') { return 1.0f; } if (*string == '.') { /* better only one division later, than dealing with fscking * IEEE format 0.1 factors ... */ int i = 0; if (*++string >= '0' && *string <= '9') { i += (*string - '0') * 100; if (*++string >= '0' && *string <= '9') { i += (*string - '0') * 10; if (*++string > '0' && *string <= '9') { i += (*string - '0'); } } } return (float)i / 1000.0f; } return 0.0f; } /* * Get a single mime type entry --- one media type and parameters; * enter the values we recognize into the argument accept_rec */ static const char *get_entry(apr_pool_t *p, accept_rec *result, const char *accept_line) { result->quality = 1.0f; result->level = 0.0f; result->charset = ""; /* * Note that this handles what I gather is the "old format", * * Accept: text/html text/plain moo/zot * * without any compatibility kludges --- if the token after the * MIME type begins with a semicolon, we know we're looking at parms, * otherwise, we know we aren't. (So why all the pissing and moaning * in the CERN server code? I must be missing something). */ result->name = ap_get_token(p, &accept_line, 0); ap_str_tolower(result->name); /* You want case insensitive, * you'll *get* case insensitive. */ /* KLUDGE!!! Default HTML to level 2.0 unless the browser * *explicitly* says something else. */ if (!strcmp(result->name, "text/html") && (result->level == 0.0)) { result->level = 2.0f; } else if (!strcmp(result->name, INCLUDES_MAGIC_TYPE)) { result->level = 2.0f; } else if (!strcmp(result->name, INCLUDES_MAGIC_TYPE3)) { result->level = 3.0f; } while (*accept_line == ';') { /* Parameters ... */ char *parm; char *cp; char *end; ++accept_line; parm = ap_get_token(p, &accept_line, 1); /* Look for 'var = value' --- and make sure the var is in lcase. */ for (cp = parm; (*cp && !apr_isspace(*cp) && *cp != '='); ++cp) { *cp = apr_tolower(*cp); } if (!*cp) { continue; /* No '='; just ignore it. */ } *cp++ = '\0'; /* Delimit var */ while (apr_isspace(*cp) || *cp == '=') { ++cp; } if (*cp == '"') { ++cp; for (end = cp; (*end && *end != '\n' && *end != '\r' && *end != '\"'); end++); } else { for (end = cp; (*end && !apr_isspace(*end)); end++); } if (*end) { *end = '\0'; /* strip ending quote or return */ } ap_str_tolower(cp); if (parm[0] == 'q' && (parm[1] == '\0' || (parm[1] == 's' && parm[2] == '\0'))) { result->quality = atoq(cp); } else if (parm[0] == 'l' && !strcmp(&parm[1], "evel")) { result->level = (float)atoi(cp); } else if (!strcmp(parm, "charset")) { result->charset = cp; } } if (*accept_line == ',') { ++accept_line; } return accept_line; } /***************************************************************** * * Dealing with header lines ... * * Accept, Accept-Charset, Accept-Language and Accept-Encoding * are handled by do_header_line() - they all have the same * basic structure of a list of items of the format * name; q=N; charset=TEXT * * where charset is only valid in Accept. */ static apr_array_header_t *do_header_line(apr_pool_t *p, const char *accept_line) { apr_array_header_t *accept_recs; if (!accept_line) { return NULL; } accept_recs = apr_array_make(p, 40, sizeof(accept_rec)); while (*accept_line) { accept_rec *new = (accept_rec *) apr_array_push(accept_recs); accept_line = get_entry(p, new, accept_line); } return accept_recs; } /* Given the text of the Content-Languages: line from the var map file, * return an array containing the languages of this variant */ static apr_array_header_t *do_languages_line(apr_pool_t *p, const char **lang_line) { apr_array_header_t *lang_recs = apr_array_make(p, 2, sizeof(char *)); if (!lang_line) { return lang_recs; } while (**lang_line) { char **new = (char **) apr_array_push(lang_recs); *new = ap_get_token(p, lang_line, 0); ap_str_tolower(*new); if (**lang_line == ',' || **lang_line == ';') { ++(*lang_line); } } return lang_recs; } /***************************************************************** * * Handling header lines from clients... */ static negotiation_state *parse_accept_headers(request_rec *r) { negotiation_state *new = (negotiation_state *) apr_pcalloc(r->pool, sizeof(negotiation_state)); accept_rec *elts; apr_table_t *hdrs = r->headers_in; int i; new->pool = r->pool; new->r = r; new->conf = (neg_dir_config *)ap_get_module_config(r->per_dir_config, &negotiation_module); new->dir_name = ap_make_dirstr_parent(r->pool, r->filename); new->accepts = do_header_line(r->pool, apr_table_get(hdrs, "Accept")); /* calculate new->accept_q value */ if (new->accepts) { elts = (accept_rec *) new->accepts->elts; for (i = 0; i < new->accepts->nelts; ++i) { if (elts[i].quality < 1.0) { new->accept_q = 1; } } } new->accept_encodings = do_header_line(r->pool, apr_table_get(hdrs, "Accept-Encoding")); new->accept_langs = do_header_line(r->pool, apr_table_get(hdrs, "Accept-Language")); new->accept_charsets = do_header_line(r->pool, apr_table_get(hdrs, "Accept-Charset")); /* This is possibly overkill for some servers, heck, we have * only 33 index.html variants in docs/docroot (today). * Make this configurable? */ new->avail_vars = apr_array_make(r->pool, 40, sizeof(var_rec)); return new; } static void parse_negotiate_header(request_rec *r, negotiation_state *neg) { const char *negotiate = apr_table_get(r->headers_in, "Negotiate"); char *tok; /* First, default to no TCN, no Alternates, and the original Apache * negotiation algorithm with fiddles for broken browser configs. * * To save network bandwidth, we do not configure to send an * Alternates header to the user agent by default. User * agents that want an Alternates header for agent-driven * negotiation will have to request it by sending an * appropriate Negotiate header. */ neg->ua_supports_trans = 0; neg->send_alternates = 0; neg->may_choose = 1; neg->use_rvsa = 0; neg->dont_fiddle_headers = 0; if (!negotiate) return; if (strcmp(negotiate, "trans") == 0) { /* Lynx 2.7 and 2.8 send 'negotiate: trans' even though they * do not support transparent content negotiation, so for Lynx we * ignore the negotiate header when its contents are exactly "trans". * If future versions of Lynx ever need to say 'negotiate: trans', * they can send the equivalent 'negotiate: trans, trans' instead * to avoid triggering the workaround below. */ const char *ua = apr_table_get(r->headers_in, "User-Agent"); if (ua && (strncmp(ua, "Lynx", 4) == 0)) return; } neg->may_choose = 0; /* An empty Negotiate would require 300 response */ while ((tok = ap_get_list_item(neg->pool, &negotiate)) != NULL) { if (strcmp(tok, "trans") == 0 || strcmp(tok, "vlist") == 0 || strcmp(tok, "guess-small") == 0 || apr_isdigit(tok[0]) || strcmp(tok, "*") == 0) { /* The user agent supports transparent negotiation */ neg->ua_supports_trans = 1; /* Send-alternates could be configurable, but note * that it must be 1 if we have 'vlist' in the * negotiate header. */ neg->send_alternates = 1; if (strcmp(tok, "1.0") == 0) { /* we may use the RVSA/1.0 algorithm, configure for it */ neg->may_choose = 1; neg->use_rvsa = 1; neg->dont_fiddle_headers = 1; } else if (tok[0] == '*') { /* we may use any variant selection algorithm, configure * to use the Apache algorithm */ neg->may_choose = 1; /* We disable header fiddles on the assumption that a * client sending Negotiate knows how to send correct * headers which don't need fiddling. */ neg->dont_fiddle_headers = 1; } } } #ifdef NEG_DEBUG ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00680) "dont_fiddle_headers=%d use_rvsa=%d ua_supports_trans=%d " "send_alternates=%d, may_choose=%d", neg->dont_fiddle_headers, neg->use_rvsa, neg->ua_supports_trans, neg->send_alternates, neg->may_choose); #endif } /* Sometimes clients will give us no Accept info at all; this routine sets * up the standard default for that case, and also arranges for us to be * willing to run a CGI script if we find one. (In fact, we set up to * dramatically prefer CGI scripts in cases where that's appropriate, * e.g., POST or when URI includes query args or extra path info). */ static void maybe_add_default_accepts(negotiation_state *neg, int prefer_scripts) { accept_rec *new_accept; if (!neg->accepts) { neg->accepts = apr_array_make(neg->pool, 4, sizeof(accept_rec)); new_accept = (accept_rec *) apr_array_push(neg->accepts); new_accept->name = "*/*"; new_accept->quality = 1.0f; new_accept->level = 0.0f; } new_accept = (accept_rec *) apr_array_push(neg->accepts); new_accept->name = CGI_MAGIC_TYPE; if (neg->use_rvsa) { new_accept->quality = 0; } else { new_accept->quality = prefer_scripts ? 2.0f : 0.001f; } new_accept->level = 0.0f; } /***************************************************************** * * Parsing type-map files, in Roy's meta/http format augmented with * #-comments. */ /* Reading RFC822-style header lines, ignoring #-comments and * handling continuations. */ enum header_state { header_eof, header_seen, header_sep }; static enum header_state get_header_line(char *buffer, int len, apr_file_t *map) { char *buf_end = buffer + len; char *cp; char c; /* Get a noncommented line */ do { if (apr_file_gets(buffer, MAX_STRING_LEN, map) != APR_SUCCESS) { return header_eof; } } while (buffer[0] == '#'); /* If blank, just return it --- this ends information on this variant */ for (cp = buffer; apr_isspace(*cp); ++cp) { continue; } if (*cp == '\0') { return header_sep; } /* If non-blank, go looking for header lines, but note that we still * have to treat comments specially... */ cp += strlen(cp); /* We need to shortcut the rest of this block following the Body: * tag - we will not look for continutation after this line. */ if (!strncasecmp(buffer, "Body:", 5)) return header_seen; while (apr_file_getc(&c, map) != APR_EOF) { if (c == '#') { /* Comment line */ while (apr_file_getc(&c, map) != APR_EOF && c != '\n') { continue; } } else if (apr_isspace(c)) { /* Leading whitespace. POSSIBLE continuation line * Also, possibly blank --- if so, we ungetc() the final newline * so that we will pick up the blank line the next time 'round. */ while (c != '\n' && apr_isspace(c)) { if (apr_file_getc(&c, map) != APR_SUCCESS) { break; } } apr_file_ungetc(c, map); if (c == '\n') { return header_seen; /* Blank line */ } /* Continuation */ while ( cp < buf_end - 2 && (apr_file_getc(&c, map)) != APR_EOF && c != '\n') { *cp++ = c; } *cp++ = '\n'; *cp = '\0'; } else { /* Line beginning with something other than whitespace */ apr_file_ungetc(c, map); return header_seen; } } return header_seen; } static apr_off_t get_body(char *buffer, apr_size_t *len, const char *tag, apr_file_t *map) { char *endbody; apr_size_t bodylen; apr_off_t pos; /* We are at the first character following a body:tag\n entry * Suck in the body, then backspace to the first char after the * closing tag entry. If we fail to read, find the tag or back * up then we have a hosed file, so give up already */ --*len; /* Reserve space for '\0' */ if (apr_file_read(map, buffer, len) != APR_SUCCESS) { return -1; } buffer[*len] = '\0'; endbody = ap_strstr(buffer, tag); if (!endbody) { return -1; } bodylen = endbody - buffer; endbody += strlen(tag); /* Skip all the trailing cruft after the end tag to the next line */ while (*endbody) { if (*endbody == '\n') { ++endbody; break; } ++endbody; } pos = -(apr_off_t)(*len - (endbody - buffer)); if (apr_file_seek(map, APR_CUR, &pos) != APR_SUCCESS) { return -1; } /* Give the caller back the actual body's file offset and length */ *len = bodylen; return pos - (endbody - buffer); } /* Stripping out RFC822 comments */ static void strip_paren_comments(char *hdr) { /* Hmmm... is this correct? In Roy's latest draft, (comments) can nest! */ /* Nope, it isn't correct. Fails to handle backslash escape as well. */ while (*hdr) { if (*hdr == '"') { hdr = strchr(hdr, '"'); if (hdr == NULL) { return; } ++hdr; } else if (*hdr == '(') { while (*hdr && *hdr != ')') { *hdr++ = ' '; } if (*hdr) { *hdr++ = ' '; } } else { ++hdr; } } } /* Getting to a header body from the header */ static char *lcase_header_name_return_body(char *header, request_rec *r) { char *cp = header; for ( ; *cp && *cp != ':' ; ++cp) { *cp = apr_tolower(*cp); } if (!*cp) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00681) "Syntax error in type map, no ':' in %s for header %s", r->filename, header); return NULL; } do { ++cp; } while (apr_isspace(*cp)); if (!*cp) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00682) "Syntax error in type map --- no header body: %s for %s", r->filename, header); return NULL; } return cp; } static int read_type_map(apr_file_t **map, negotiation_state *neg, request_rec *rr) { request_rec *r = neg->r; apr_file_t *map_ = NULL; apr_status_t status; char buffer[MAX_STRING_LEN]; enum header_state hstate; struct var_rec mime_info; int has_content; if (!map) map = &map_; /* We are not using multiviews */ neg->count_multiviews_variants = 0; if ((status = apr_file_open(map, rr->filename, APR_READ | APR_BUFFERED, APR_OS_DEFAULT, neg->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(00683) "cannot access type map file: %s", rr->filename); if (APR_STATUS_IS_ENOTDIR(status) || APR_STATUS_IS_ENOENT(status)) { return HTTP_NOT_FOUND; } else { return HTTP_FORBIDDEN; } } clean_var_rec(&mime_info); has_content = 0; do { hstate = get_header_line(buffer, MAX_STRING_LEN, *map); if (hstate == header_seen) { char *body1 = lcase_header_name_return_body(buffer, neg->r); const char *body; if (body1 == NULL) { return HTTP_INTERNAL_SERVER_ERROR; } strip_paren_comments(body1); body = body1; if (!strncmp(buffer, "uri:", 4)) { mime_info.file_name = ap_get_token(neg->pool, &body, 0); } else if (!strncmp(buffer, "content-type:", 13)) { struct accept_rec accept_info; get_entry(neg->pool, &accept_info, body); set_mime_fields(&mime_info, &accept_info); has_content = 1; } else if (!strncmp(buffer, "content-length:", 15)) { char *errp; apr_off_t number; body1 = ap_get_token(neg->pool, &body, 0); if (apr_strtoff(&number, body1, &errp, 10) != APR_SUCCESS || *errp || number < 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00684) "Parse error in type map, Content-Length: " "'%s' in %s is invalid.", body1, r->filename); break; } mime_info.bytes = number; has_content = 1; } else if (!strncmp(buffer, "content-language:", 17)) { mime_info.content_languages = do_languages_line(neg->pool, &body); has_content = 1; } else if (!strncmp(buffer, "content-encoding:", 17)) { mime_info.content_encoding = ap_get_token(neg->pool, &body, 0); has_content = 1; } else if (!strncmp(buffer, "description:", 12)) { char *desc = apr_pstrdup(neg->pool, body); char *cp; for (cp = desc; *cp; ++cp) { if (*cp=='\n') *cp=' '; } if (cp>desc) *(cp-1)=0; mime_info.description = desc; } else if (!strncmp(buffer, "body:", 5)) { char *tag = apr_pstrdup(neg->pool, body); char *eol = strchr(tag, '\0'); apr_size_t len = MAX_STRING_LEN; while (--eol >= tag && apr_isspace(*eol)) *eol = '\0'; if ((mime_info.body = get_body(buffer, &len, tag, *map)) < 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00685) "Syntax error in type map, no end tag '%s' " "found in %s for Body: content.", tag, r->filename); break; } mime_info.bytes = len; mime_info.file_name = apr_filepath_name_get(rr->filename); } } else { if (*mime_info.file_name && has_content) { void *new_var = apr_array_push(neg->avail_vars); memcpy(new_var, (void *) &mime_info, sizeof(var_rec)); } clean_var_rec(&mime_info); has_content = 0; } } while (hstate != header_eof); if (map_) apr_file_close(map_); set_vlist_validator(r, rr); return OK; } /* Sort function used by read_types_multi. */ static int variantsortf(var_rec *a, var_rec *b) { /* First key is the source quality, sort in descending order. */ /* XXX: note that we currently implement no method of setting the * source quality for multiviews variants, so we are always comparing * 1.0 to 1.0 for now */ if (a->source_quality < b->source_quality) return 1; if (a->source_quality > b->source_quality) return -1; /* Second key is the variant name */ return strcmp(a->file_name, b->file_name); } /***************************************************************** * * Same as read_type_map, except we use a filtered directory listing * as the map... */ static int read_types_multi(negotiation_state *neg) { request_rec *r = neg->r; char *filp; int prefix_len; apr_dir_t *dirp; apr_finfo_t dirent; apr_status_t status; struct var_rec mime_info; struct accept_rec accept_info; void *new_var; int anymatch = 0; clean_var_rec(&mime_info); if (r->proxyreq || !r->filename || !ap_os_is_path_absolute(neg->pool, r->filename)) { return DECLINED; } /* Only absolute paths here */ if (!(filp = strrchr(r->filename, '/'))) { return DECLINED; } ++filp; prefix_len = strlen(filp); if ((status = apr_dir_open(&dirp, neg->dir_name, neg->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(00686) "cannot read directory for multi: %s", neg->dir_name); return HTTP_FORBIDDEN; } while (apr_dir_read(&dirent, APR_FINFO_DIRENT, dirp) == APR_SUCCESS) { apr_array_header_t *exception_list; request_rec *sub_req; /* Do we have a match? */ #ifdef CASE_BLIND_FILESYSTEM if (strncasecmp(dirent.name, filp, prefix_len)) { #else if (strncmp(dirent.name, filp, prefix_len)) { #endif continue; } if (dirent.name[prefix_len] != '.') { continue; } /* Don't negotiate directories and other unusual files * Really shouldn't see anything but DIR/LNK/REG here, * and we aught to discover if the LNK was interesting. * * Of course, this only helps platforms that capture the * the filetype in apr_dir_read(), which most can once * they are optimized with some magic [it's known to the * dirent, not associated to the inode, on most FS's.] */ if ((dirent.valid & APR_FINFO_TYPE) && (dirent.filetype == APR_DIR)) continue; /* Ok, something's here. Maybe nothing useful. Remember that * we tried, if we completely fail, so we can reject the request! */ anymatch = 1; /* See if it's something which we have access to, and which * has a known type and encoding. */ sub_req = ap_sub_req_lookup_dirent(&dirent, r, AP_SUBREQ_MERGE_ARGS, NULL); /* Double check, we still don't multi-resolve non-ordinary files */ if (sub_req->finfo.filetype != APR_REG) { /* XXX sub req not destroyed -- may be a bug/unintentional ? */ continue; } /* If it has a handler, we'll pretend it's a CGI script, * since that's a good indication of the sort of thing it * might be doing. */ if (sub_req->handler && !sub_req->content_type) { ap_set_content_type(sub_req, CGI_MAGIC_TYPE); } /* * mod_mime will _always_ provide us the base name in the * ap-mime-exception-list, if it processed anything. If * this list is empty, give up immediately, there was * nothing interesting. For example, looking at the files * readme.txt and readme.foo, we will throw away .foo if * it's an insignificant file (e.g. did not identify a * language, charset, encoding, content type or handler,) */ exception_list = (apr_array_header_t *)apr_table_get(sub_req->notes, "ap-mime-exceptions-list"); if (!exception_list) { ap_destroy_sub_req(sub_req); continue; } /* Each unregonized bit better match our base name, in sequence. * A test of index.html.foo will match index.foo or index.html.foo, * but it will never transpose the segments and allow index.foo.html * because that would introduce too much CPU consumption. Better that * we don't attempt a many-to-many match here. */ { int nexcept = exception_list->nelts; char **cur_except = (char**)exception_list->elts; char *segstart = filp, *segend, saveend; while (*segstart && nexcept) { if (!(segend = strchr(segstart, '.'))) segend = strchr(segstart, '\0'); saveend = *segend; *segend = '\0'; #ifdef CASE_BLIND_FILESYSTEM if (strcasecmp(segstart, *cur_except) == 0) { #else if (strcmp(segstart, *cur_except) == 0) { #endif --nexcept; ++cur_except; } if (!saveend) break; *segend = saveend; segstart = segend + 1; } if (nexcept) { /* Something you don't know is, something you don't know... */ ap_destroy_sub_req(sub_req); continue; } } /* * If we failed the subrequest, or don't * know what we are serving, then continue. */ if (sub_req->status != HTTP_OK || (!sub_req->content_type)) { ap_destroy_sub_req(sub_req); continue; } /* If it's a map file, we use that instead of the map * we're building... */ if (((sub_req->content_type) && !strcmp(sub_req->content_type, MAP_FILE_MAGIC_TYPE)) || ((sub_req->handler) && !strcmp(sub_req->handler, "type-map"))) { apr_dir_close(dirp); neg->avail_vars->nelts = 0; if (sub_req->status != HTTP_OK) { return sub_req->status; } return read_type_map(NULL, neg, sub_req); } /* Have reasonable variant --- gather notes. */ mime_info.sub_req = sub_req; mime_info.file_name = apr_pstrdup(neg->pool, dirent.name); if (sub_req->content_encoding) { mime_info.content_encoding = sub_req->content_encoding; } if (sub_req->content_languages) { mime_info.content_languages = sub_req->content_languages; } get_entry(neg->pool, &accept_info, sub_req->content_type); set_mime_fields(&mime_info, &accept_info); new_var = apr_array_push(neg->avail_vars); memcpy(new_var, (void *) &mime_info, sizeof(var_rec)); neg->count_multiviews_variants++; clean_var_rec(&mime_info); } apr_dir_close(dirp); /* We found some file names that matched. None could be served. * Rather than fall out to autoindex or some other mapper, this * request must die. */ if (anymatch && !neg->avail_vars->nelts) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00687) "Negotiation: discovered file(s) matching request: %s" " (None could be negotiated).", r->filename); return HTTP_NOT_FOUND; } set_vlist_validator(r, r); /* Sort the variants into a canonical order. The negotiation * result sometimes depends on the order of the variants. By * sorting the variants into a canonical order, rather than using * the order in which readdir() happens to return them, we ensure * that the negotiation result will be consistent over filesystem * backup/restores and over all mirror sites. */ qsort((void *) neg->avail_vars->elts, neg->avail_vars->nelts, sizeof(var_rec), (int (*)(const void *, const void *)) variantsortf); return OK; } /***************************************************************** * And now for the code you've been waiting for... actually * finding a match to the client's requirements. */ /* Matching MIME types ... the star/star and foo/star commenting conventions * are implemented here. (You know what I mean by star/star, but just * try mentioning those three characters in a C comment). Using strcmp() * is legit, because everything has already been smashed to lowercase. * * Note also that if we get an exact match on the media type, we update * level_matched for use in level_cmp below... * * We also give a value for mime_stars, which is used later. It should * be 1 for star/star, 2 for type/star and 3 for type/subtype. */ static int mime_match(accept_rec *accept_r, var_rec *avail) { const char *accept_type = accept_r->name; const char *avail_type = avail->mime_type; int len = strlen(accept_type); if ((len == 1 && accept_type[0] == '*') || (len == 3 && !strncmp(accept_type, "*/*", 3))) { /* Anything matches star or star/star */ if (avail->mime_stars < 1) { avail->mime_stars = 1; } return 1; } else if (len > 2 && accept_type[len - 2] == '/' && accept_type[len - 1] == '*' && !strncmp(accept_type, avail_type, len - 2) && avail_type[len - 2] == '/') { /* Any subtype matches for type/star */ if (avail->mime_stars < 2) { avail->mime_stars = 2; } return 1; } else if (!strcmp(accept_type, avail_type) || (!strcmp(accept_type, "text/html") && (!strcmp(avail_type, INCLUDES_MAGIC_TYPE) || !strcmp(avail_type, INCLUDES_MAGIC_TYPE3)))) { if (accept_r->level >= avail->level) { avail->level_matched = avail->level; avail->mime_stars = 3; return 1; } } return OK; } /* This code implements a piece of the tie-breaking algorithm between * variants of equal quality. This piece is the treatment of variants * of the same base media type, but different levels. What we want to * return is the variant at the highest level that the client explicitly * claimed to accept. * * If all the variants available are at a higher level than that, or if * the client didn't say anything specific about this media type at all * and these variants just got in on a wildcard, we prefer the lowest * level, on grounds that that's the one that the client is least likely * to choke on. * * (This is all motivated by treatment of levels in HTML --- we only * want to give level 3 to browsers that explicitly ask for it; browsers * that don't, including HTTP/0.9 browsers that only get the implicit * "Accept: * / *" [space added to avoid confusing cpp --- no, that * syntax doesn't really work] should get HTML2 if available). * * (Note that this code only comes into play when we are choosing among * variants of equal quality, where the draft standard gives us a fair * bit of leeway about what to do. It ain't specified by the standard; * rather, it is a choice made by this server about what to do in cases * where the standard does not specify a unique course of action). */ static int level_cmp(var_rec *var1, var_rec *var2) { /* Levels are only comparable between matching media types */ if (var1->is_pseudo_html && !var2->is_pseudo_html) { return 0; } if (!var1->is_pseudo_html && strcmp(var1->mime_type, var2->mime_type)) { return 0; } /* The result of the above if statements is that, if we get to * here, both variants have the same mime_type or both are * pseudo-html. */ /* Take highest level that matched, if either did match. */ if (var1->level_matched > var2->level_matched) { return 1; } if (var1->level_matched < var2->level_matched) { return -1; } /* Neither matched. Take lowest level, if there's a difference. */ if (var1->level < var2->level) { return 1; } if (var1->level > var2->level) { return -1; } /* Tied */ return 0; } /* Finding languages. The main entry point is set_language_quality() * which is called for each variant. It sets two elements in the * variant record: * language_quality - the 'q' value of the 'best' matching language * from Accept-Language: header (HTTP/1.1) * lang_index - Non-negotiated language priority, using * position of language on the Accept-Language: * header, if present, else LanguagePriority * directive order. * * When we do the variant checking for best variant, we use language * quality first, and if a tie, language_index next (this only applies * when _not_ using the RVSA/1.0 algorithm). If using the RVSA/1.0 * algorithm, lang_index is never used. * * set_language_quality() calls find_lang_index() and find_default_index() * to set lang_index. */ static int find_lang_index(apr_array_header_t *accept_langs, char *lang) { const char **alang; int i; if (!lang || !accept_langs) { return -1; } alang = (const char **) accept_langs->elts; for (i = 0; i < accept_langs->nelts; ++i) { if (!ap_cstr_casecmpn(lang, *alang, strlen(*alang))) { return i; } alang += (accept_langs->elt_size / sizeof(char*)); } return -1; } /* set_default_lang_quality() sets the quality we apply to variants * which have no language assigned to them. If none of the variants * have a language, we are not negotiating on language, so all are * acceptable, and we set the default q value to 1.0. However if * some of the variants have languages, we set this default to 0.0001. * The value of this default will be applied to all variants with * no explicit language -- which will have the effect of making them * acceptable, but only if no variants with an explicit language * are acceptable. The default q value set here is assigned to variants * with no language type in set_language_quality(). * * Note that if using the RVSA/1.0 algorithm, we don't use this * fiddle. */ static void set_default_lang_quality(negotiation_state *neg) { var_rec *avail_recs = (var_rec *) neg->avail_vars->elts; int j; if (!neg->dont_fiddle_headers) { for (j = 0; j < neg->avail_vars->nelts; ++j) { var_rec *variant = &avail_recs[j]; if (variant->content_languages && variant->content_languages->nelts) { neg->default_lang_quality = 0.0001f; return; } } } neg->default_lang_quality = 1.0f; } /* Set the language_quality value in the variant record. Also * assigns lang_index for ForceLanguagePriority. * * To find the language_quality value, we look for the 'q' value * of the 'best' matching language on the Accept-Language * header. The 'best' match is the language on Accept-Language * header which matches the language of this variant either fully, * or as far as the prefix marker (-). If two or more languages * match, use the longest string from the Accept-Language header * (see HTTP/1.1 [14.4]) * * When a variant has multiple languages, we find the 'best' * match for each variant language tag as above, then select the * one with the highest q value. Because both the accept-header * and variant can have multiple languages, we now have a hairy * loop-within-a-loop here. * * If the variant has no language and we have no Accept-Language * items, leave the quality at 1.0 and return. * * If the variant has no language, we use the default as set by * set_default_lang_quality() (1.0 if we are not negotiating on * language, 0.001 if we are). * * Following the setting of the language quality, we drop through to * set the old 'lang_index'. This is set based on either the order * of the languages on the Accept-Language header, or the * order on the LanguagePriority directive. This is only used * in the negotiation if the language qualities tie. */ static void set_language_quality(negotiation_state *neg, var_rec *variant) { int forcepriority = neg->conf->forcelangpriority; if (forcepriority == FLP_UNDEF) { forcepriority = FLP_DEFAULT; } if (!variant->content_languages || !variant->content_languages->nelts) { /* This variant has no content-language, so use the default * quality factor for variants with no content-language * (previously set by set_default_lang_quality()). * Leave the factor alone (it remains at 1.0) when we may not fiddle * with the headers. */ if (!neg->dont_fiddle_headers) { variant->lang_quality = neg->default_lang_quality; } return; } else { /* Variant has one (or more) languages. Look for the best * match. We do this by going through each language on the * variant description looking for a match on the * Accept-Language header. The best match is the longest * matching language on the header. The final result is the * best q value from all the languages on the variant * description. */ if (!neg->accept_langs) { /* no accept-language header makes the variant indefinite */ variant->definite = 0; } else { /* There is an accept-language with 0 or more items */ accept_rec *accs = (accept_rec *) neg->accept_langs->elts; accept_rec *best = NULL, *star = NULL; accept_rec *bestthistag; char *lang, *p; float fiddle_q = 0.0f; int any_match_on_star = 0; int i, j; apr_size_t alen, longest_lang_range_len; for (j = 0; j < variant->content_languages->nelts; ++j) { p = NULL; bestthistag = NULL; longest_lang_range_len = 0; /* lang is the variant's language-tag, which is the one * we are allowed to use the prefix of in HTTP/1.1 */ lang = ((char **) (variant->content_languages->elts))[j]; /* now find the best (i.e. longest) matching * Accept-Language header language. We put the best match * for this tag in bestthistag. We cannot update the * overall best (based on q value) because the best match * for this tag is the longest language item on the accept * header, not necessarily the highest q. */ for (i = 0; i < neg->accept_langs->nelts; ++i) { if (!strcmp(accs[i].name, "*")) { if (!star) { star = &accs[i]; } continue; } /* Find language. We match if either the variant * language tag exactly matches the language range * from the accept header, or a prefix of the variant * language tag up to a '-' character matches the * whole of the language range in the Accept-Language * header. Note that HTTP/1.x allows any number of * '-' characters in a tag or range, currently only * tags with zero or one '-' characters are defined * for general use (see rfc1766). * * We only use language range in the Accept-Language * header the best match for the variant language tag * if it is longer than the previous best match. */ alen = strlen(accs[i].name); if ((strlen(lang) >= alen) && !strncmp(lang, accs[i].name, alen) && ((lang[alen] == 0) || (lang[alen] == '-')) ) { if (alen > longest_lang_range_len) { longest_lang_range_len = alen; bestthistag = &accs[i]; } } if (!bestthistag && !neg->dont_fiddle_headers) { /* The next bit is a fiddle. Some browsers might * be configured to send more specific language * ranges than desirable. For example, an * Accept-Language of en-US should never match * variants with languages en or en-GB. But US * English speakers might pick en-US as their * language choice. So this fiddle checks if the * language range has a prefix, and if so, it * matches variants which match that prefix with a * priority of 0.001. So a request for en-US would * match variants of types en and en-GB, but at * much lower priority than matches of en-US * directly, or of any other language listed on * the Accept-Language header. Note that this * fiddle does not handle multi-level prefixes. */ if ((p = strchr(accs[i].name, '-'))) { int plen = p - accs[i].name; if (!strncmp(lang, accs[i].name, plen)) { fiddle_q = 0.001f; } } } } /* Finished looking at Accept-Language headers, the best * (longest) match is in bestthistag, or NULL if no match */ if (!best || (bestthistag && bestthistag->quality > best->quality)) { best = bestthistag; } /* See if the tag matches on a * in the Accept-Language * header. If so, record this fact for later use */ if (!bestthistag && star) { any_match_on_star = 1; } } /* If one of the language tags of the variant matched on *, we * need to see if its q is better than that of any non-* match * on any other tag of the variant. If so the * match takes * precedence and the overall match is not definite. */ if ( any_match_on_star && ((best && star->quality > best->quality) || (!best)) ) { best = star; variant->definite = 0; } variant->lang_quality = best ? best->quality : fiddle_q; } } /* Handle the ForceDefaultLanguage overrides, based on the best match * to LanguagePriority order. The best match is the lowest index of * any LanguagePriority match. */ if (((forcepriority & FLP_PREFER) && (variant->lang_index < 0)) || ((forcepriority & FLP_FALLBACK) && !variant->lang_quality)) { int bestidx = -1; int j; for (j = 0; j < variant->content_languages->nelts; ++j) { /* lang is the variant's language-tag, which is the one * we are allowed to use the prefix of in HTTP/1.1 */ char *lang = ((char **) (variant->content_languages->elts))[j]; int idx; /* If we wish to fallback or * we use our own LanguagePriority index. */ idx = find_lang_index(neg->conf->language_priority, lang); if ((idx >= 0) && ((bestidx == -1) || (idx < bestidx))) { bestidx = idx; } } if (bestidx >= 0) { if (variant->lang_quality) { if (forcepriority & FLP_PREFER) { variant->lang_index = bestidx; } } else { if (forcepriority & FLP_FALLBACK) { variant->lang_index = bestidx; variant->lang_quality = .0001f; variant->definite = 0; } } } } } /* Determining the content length --- if the map didn't tell us, * we have to do a stat() and remember for next time. */ static apr_off_t find_content_length(negotiation_state *neg, var_rec *variant) { apr_finfo_t statb; if (variant->bytes < 0) { if ( variant->sub_req && (variant->sub_req->finfo.valid & APR_FINFO_SIZE)) { variant->bytes = variant->sub_req->finfo.size; } else { char *fullname = ap_make_full_path(neg->pool, neg->dir_name, variant->file_name); if (apr_stat(&statb, fullname, APR_FINFO_SIZE, neg->pool) == APR_SUCCESS) { variant->bytes = statb.size; } } } return variant->bytes; } /* For a given variant, find the best matching Accept: header * and assign the Accept: header's quality value to the * mime_type_quality field of the variant, for later use in * determining the best matching variant. */ static void set_accept_quality(negotiation_state *neg, var_rec *variant) { int i; accept_rec *accept_recs; float q = 0.0f; int q_definite = 1; /* if no Accept: header, leave quality alone (will * remain at the default value of 1) * * XXX: This if is currently never true because of the effect of * maybe_add_default_accepts(). */ if (!neg->accepts) { if (variant->mime_type && *variant->mime_type) variant->definite = 0; return; } accept_recs = (accept_rec *) neg->accepts->elts; /* * Go through each of the ranges on the Accept: header, * looking for the 'best' match with this variant's * content-type. We use the best match's quality * value (from the Accept: header) for this variant's * mime_type_quality field. * * The best match is determined like this: * type/type is better than type/ * is better than * / * * if match is type/type, use the level mime param if available */ for (i = 0; i < neg->accepts->nelts; ++i) { accept_rec *type = &accept_recs[i]; int prev_mime_stars; prev_mime_stars = variant->mime_stars; if (!mime_match(type, variant)) { continue; /* didn't match the content type at all */ } else { /* did match - see if there were less or more stars than * in previous match */ if (prev_mime_stars == variant->mime_stars) { continue; /* more stars => not as good a match */ } } /* If we are allowed to mess with the q-values * and have no explicit q= parameters in the accept header, * make wildcards very low, so we have a low chance * of ending up with them if there's something better. */ if (!neg->dont_fiddle_headers && !neg->accept_q && variant->mime_stars == 1) { q = 0.01f; } else if (!neg->dont_fiddle_headers && !neg->accept_q && variant->mime_stars == 2) { q = 0.02f; } else { q = type->quality; } q_definite = (variant->mime_stars == 3); } variant->mime_type_quality = q; variant->definite = variant->definite && q_definite; } /* For a given variant, find the 'q' value of the charset given * on the Accept-Charset line. If no charsets are listed, * assume value of '1'. */ static void set_charset_quality(negotiation_state *neg, var_rec *variant) { int i; accept_rec *accept_recs; const char *charset = variant->content_charset; accept_rec *star = NULL; /* if no Accept-Charset: header, leave quality alone (will * remain at the default value of 1) */ if (!neg->accept_charsets) { if (charset && *charset) variant->definite = 0; return; } accept_recs = (accept_rec *) neg->accept_charsets->elts; if (charset == NULL || !*charset) { /* Charset of variant not known */ /* if not a text / * type, leave quality alone */ if (!(!strncmp(variant->mime_type, "text/", 5) || !strcmp(variant->mime_type, INCLUDES_MAGIC_TYPE) || !strcmp(variant->mime_type, INCLUDES_MAGIC_TYPE3) )) return; /* Don't go guessing if we are in strict header mode, * e.g. when running the rvsa, as any guess won't be reflected * in the variant list or content-location headers. */ if (neg->dont_fiddle_headers) return; charset = "iso-8859-1"; /* The default charset for HTTP text types */ } /* * Go through each of the items on the Accept-Charset header, * looking for a match with this variant's charset. If none * match, charset is unacceptable, so set quality to 0. */ for (i = 0; i < neg->accept_charsets->nelts; ++i) { accept_rec *type = &accept_recs[i]; if (!strcmp(type->name, charset)) { variant->charset_quality = type->quality; return; } else if (strcmp(type->name, "*") == 0) { star = type; } } /* No explicit match */ if (star) { variant->charset_quality = star->quality; variant->definite = 0; return; } /* If this variant is in charset iso-8859-1, the default is 1.0 */ if (strcmp(charset, "iso-8859-1") == 0) { variant->charset_quality = 1.0f; } else { variant->charset_quality = 0.0f; } } /* is_identity_encoding is included for back-compat, but does anyone * use 7bit, 8bin or binary in their var files?? */ static int is_identity_encoding(const char *enc) { return (!enc || !enc[0] || !strcmp(enc, "7bit") || !strcmp(enc, "8bit") || !strcmp(enc, "binary")); } /* * set_encoding_quality determines whether the encoding for a particular * variant is acceptable for the user-agent. * * The rules for encoding are that if the user-agent does not supply * any Accept-Encoding header, then all encodings are allowed but a * variant with no encoding should be preferred. * If there is an empty Accept-Encoding header, then no encodings are * acceptable. If there is a non-empty Accept-Encoding header, then * any of the listed encodings are acceptable, as well as no encoding * unless the "identity" encoding is specifically excluded. */ static void set_encoding_quality(negotiation_state *neg, var_rec *variant) { accept_rec *accept_recs; const char *enc = variant->content_encoding; accept_rec *star = NULL; float value_if_not_found = 0.0f; int i; if (!neg->accept_encodings) { /* We had no Accept-Encoding header, assume that all * encodings are acceptable with a low quality, * but we prefer no encoding if available. */ if (!enc || is_identity_encoding(enc)) variant->encoding_quality = 1.0f; else variant->encoding_quality = 0.5f; return; } if (!enc || is_identity_encoding(enc)) { enc = "identity"; value_if_not_found = 0.0001f; } accept_recs = (accept_rec *) neg->accept_encodings->elts; /* Go through each of the encodings on the Accept-Encoding: header, * looking for a match with our encoding. x- prefixes are ignored. */ if (enc[0] == 'x' && enc[1] == '-') { enc += 2; } for (i = 0; i < neg->accept_encodings->nelts; ++i) { char *name = accept_recs[i].name; if (name[0] == 'x' && name[1] == '-') { name += 2; } if (!strcmp(name, enc)) { variant->encoding_quality = accept_recs[i].quality; return; } if (strcmp(name, "*") == 0) { star = &accept_recs[i]; } } /* No explicit match */ if (star) { variant->encoding_quality = star->quality; return; } /* Encoding not found on Accept-Encoding: header, so it is * _not_ acceptable unless it is the identity (no encoding) */ variant->encoding_quality = value_if_not_found; } /************************************************************* * Possible results of the variant selection algorithm */ enum algorithm_results { alg_choice = 1, /* choose variant */ alg_list /* list variants */ }; /* Below is the 'best_match' function. It returns an int, which has * one of the two values alg_choice or alg_list, which give the result * of the variant selection algorithm. alg_list means that no best * variant was found by the algorithm, alg_choice means that a best * variant was found and should be returned. The list/choice * terminology comes from TCN (rfc2295), but is used in a more generic * way here. The best variant is returned in *pbest. best_match has * two possible algorithms for determining the best variant: the * RVSA/1.0 algorithm (from RFC2296), and the standard Apache * algorithm. These are split out into separate functions * (is_variant_better_rvsa() and is_variant_better()). Selection of * one is through the neg->use_rvsa flag. * * The call to best_match also creates full information, including * language, charset, etc quality for _every_ variant. This is needed * for generating a correct Vary header, and can be used for the * Alternates header, the human-readable list responses and 406 errors. */ /* Firstly, the RVSA/1.0 (HTTP Remote Variant Selection Algorithm * v1.0) from rfc2296. This is the algorithm that goes together with * transparent content negotiation (TCN). */ static int is_variant_better_rvsa(negotiation_state *neg, var_rec *variant, var_rec *best, float *p_bestq) { float bestq = *p_bestq, q; /* TCN does not cover negotiation on content-encoding. For now, * we ignore the encoding unless it was explicitly excluded. */ if (variant->encoding_quality == 0.0f) return 0; q = variant->mime_type_quality * variant->source_quality * variant->charset_quality * variant->lang_quality; /* RFC 2296 calls for the result to be rounded to 5 decimal places, * but we don't do that because it serves no useful purpose other * than to ensure that a remote algorithm operates on the same * precision as ours. That is silly, since what we obviously want * is for the algorithm to operate on the best available precision * regardless of who runs it. Since the above calculation may * result in significant variance at 1e-12, rounding would be bogus. */ #ifdef NEG_DEBUG ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00688) "Variant: file=%s type=%s lang=%s sourceq=%1.3f " "mimeq=%1.3f langq=%1.3f charq=%1.3f encq=%1.3f " "q=%1.5f definite=%d", (variant->file_name ? variant->file_name : ""), (variant->mime_type ? variant->mime_type : ""), (variant->content_languages ? apr_array_pstrcat(neg->pool, variant->content_languages, ',') : ""), variant->source_quality, variant->mime_type_quality, variant->lang_quality, variant->charset_quality, variant->encoding_quality, q, variant->definite); #endif if (q <= 0.0f) { return 0; } if (q > bestq) { *p_bestq = q; return 1; } if (q == bestq) { /* If the best variant's encoding is of lesser quality than * this variant, then we prefer this variant */ if (variant->encoding_quality > best->encoding_quality) { *p_bestq = q; return 1; } } return 0; } /* Negotiation algorithm as used by previous versions of Apache * (just about). */ static int is_variant_better(negotiation_state *neg, var_rec *variant, var_rec *best, float *p_bestq) { float bestq = *p_bestq, q; int levcmp; /* For non-transparent negotiation, server can choose how * to handle the negotiation. We'll use the following in * order: content-type, language, content-type level, charset, * content encoding, content length. * * For each check, we have three possible outcomes: * This variant is worse than current best: return 0 * This variant is better than the current best: * assign this variant's q to *p_bestq, and return 1 * This variant is just as desirable as the current best: * drop through to the next test. * * This code is written in this long-winded way to allow future * customisation, either by the addition of additional * checks, or to allow the order of the checks to be determined * by configuration options (e.g. we might prefer to check * language quality _before_ content type). */ /* First though, eliminate this variant if it is not * acceptable by type, charset, encoding or language. */ #ifdef NEG_DEBUG ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00689) "Variant: file=%s type=%s lang=%s sourceq=%1.3f " "mimeq=%1.3f langq=%1.3f langidx=%d charq=%1.3f encq=%1.3f ", (variant->file_name ? variant->file_name : ""), (variant->mime_type ? variant->mime_type : ""), (variant->content_languages ? apr_array_pstrcat(neg->pool, variant->content_languages, ',') : ""), variant->source_quality, variant->mime_type_quality, variant->lang_quality, variant->lang_index, variant->charset_quality, variant->encoding_quality); #endif if (variant->encoding_quality == 0.0f || variant->lang_quality == 0.0f || variant->source_quality == 0.0f || variant->charset_quality == 0.0f || variant->mime_type_quality == 0.0f) { return 0; /* don't consider unacceptables */ } q = variant->mime_type_quality * variant->source_quality; if (q == 0.0 || q < bestq) { return 0; } if (q > bestq || !best) { *p_bestq = q; return 1; } /* language */ if (variant->lang_quality < best->lang_quality) { return 0; } if (variant->lang_quality > best->lang_quality) { *p_bestq = q; return 1; } /* if language qualities were equal, try the LanguagePriority stuff */ if (best->lang_index != -1 && (variant->lang_index == -1 || variant->lang_index > best->lang_index)) { return 0; } if (variant->lang_index != -1 && (best->lang_index == -1 || variant->lang_index < best->lang_index)) { *p_bestq = q; return 1; } /* content-type level (sometimes used with text/html, though we * support it on other types too) */ levcmp = level_cmp(variant, best); if (levcmp == -1) { return 0; } if (levcmp == 1) { *p_bestq = q; return 1; } /* charset */ if (variant->charset_quality < best->charset_quality) { return 0; } /* If the best variant's charset is ISO-8859-1 and this variant has * the same charset quality, then we prefer this variant */ if (variant->charset_quality > best->charset_quality || ((variant->content_charset != NULL && *variant->content_charset != '\0' && strcmp(variant->content_charset, "iso-8859-1") != 0) && (best->content_charset == NULL || *best->content_charset == '\0' || strcmp(best->content_charset, "iso-8859-1") == 0))) { *p_bestq = q; return 1; } /* Prefer the highest value for encoding_quality. */ if (variant->encoding_quality < best->encoding_quality) { return 0; } if (variant->encoding_quality > best->encoding_quality) { *p_bestq = q; return 1; } /* content length if all else equal */ if (find_content_length(neg, variant) >= find_content_length(neg, best)) { return 0; } /* ok, to get here means every thing turned out equal, except * we have a shorter content length, so use this variant */ *p_bestq = q; return 1; } /* figure out, whether a variant is in a specific language * it returns also false, if the variant has no language. */ static int variant_has_language(var_rec *variant, const char *lang) { /* fast exit */ if ( !lang || !variant->content_languages) { return 0; } if (ap_array_str_contains(variant->content_languages, lang)) { return 1; } return 0; } /* check for environment variables 'no-gzip' and * 'gzip-only-text/html' to get a behaviour similar * to mod_deflate */ static int discard_variant_by_env(var_rec *variant, int discard) { if ( is_identity_encoding(variant->content_encoding) || !strcmp(variant->content_encoding, "identity")) { return 0; } return ( (discard == DISCARD_ALL_ENCODINGS) || (discard == DISCARD_ALL_BUT_HTML && (!variant->mime_type || strncmp(variant->mime_type, "text/html", 9)))); } static int best_match(negotiation_state *neg, var_rec **pbest) { int j; var_rec *best; float bestq = 0.0f; enum algorithm_results algorithm_result; int may_discard = 0; var_rec *avail_recs = (var_rec *) neg->avail_vars->elts; /* fetch request dependent variables * prefer-language: prefer a certain language. */ const char *preferred_language = apr_table_get(neg->r->subprocess_env, "prefer-language"); /* no-gzip: do not send encoded documents */ if (apr_table_get(neg->r->subprocess_env, "no-gzip")) { may_discard = DISCARD_ALL_ENCODINGS; } /* gzip-only-text/html: send encoded documents only * if they are text/html. (no-gzip has a higher priority). */ else { const char *env_value = apr_table_get(neg->r->subprocess_env, "gzip-only-text/html"); if (env_value && !strcmp(env_value, "1")) { may_discard = DISCARD_ALL_BUT_HTML; } } set_default_lang_quality(neg); /* * Find the 'best' variant * We run the loop possibly twice: if "prefer-language" * environment variable is set but we did not find an appropriate * best variant. In that case forget the preferred language and * negotiate over all variants. */ do { best = NULL; for (j = 0; j < neg->avail_vars->nelts; ++j) { var_rec *variant = &avail_recs[j]; /* if this variant is encoded somehow and there are special * variables set, we do not negotiate it. see above. */ if ( may_discard && discard_variant_by_env(variant, may_discard)) { continue; } /* if a language is preferred, but the current variant * is not in that language, then drop it for now */ if ( preferred_language && !variant_has_language(variant, preferred_language)) { continue; } /* Find all the relevant 'quality' values from the * Accept... headers, and store in the variant. This also * prepares for sending an Alternates header etc so we need to * do it even if we do not actually plan to find a best * variant. */ set_accept_quality(neg, variant); /* accept the preferred language, even when it's not listed within * the Accept-Language header */ if (preferred_language) { variant->lang_quality = 1.0f; variant->definite = 1; } else { set_language_quality(neg, variant); } set_encoding_quality(neg, variant); set_charset_quality(neg, variant); /* Only do variant selection if we may actually choose a * variant for the client */ if (neg->may_choose) { /* Now find out if this variant is better than the current * best, either using the RVSA/1.0 algorithm, or Apache's * internal server-driven algorithm. Presumably other * server-driven algorithms are possible, and could be * implemented here. */ if (neg->use_rvsa) { if (is_variant_better_rvsa(neg, variant, best, &bestq)) { best = variant; } } else { if (is_variant_better(neg, variant, best, &bestq)) { best = variant; } } } } /* We now either have a best variant, or no best variant */ if (neg->use_rvsa) { /* calculate result for RVSA/1.0 algorithm: * only a choice response if the best variant has q>0 * and is definite */ algorithm_result = (best && best->definite) && (bestq > 0) ? alg_choice : alg_list; } else { /* calculate result for Apache negotiation algorithm */ algorithm_result = bestq > 0 ? alg_choice : alg_list; } /* run the loop again, if the "prefer-language" got no clear result */ if (preferred_language && (!best || algorithm_result != alg_choice)) { preferred_language = NULL; continue; } break; } while (1); /* Returning a choice response with a non-neighboring variant is a * protocol security error in TCN (see rfc2295). We do *not* * verify here that the variant and URI are neighbors, even though * we may return alg_choice. We depend on the environment (the * caller) to only declare the resource transparently negotiable if * all variants are neighbors. */ *pbest = best; return algorithm_result; } /* Sets response headers for a negotiated response. * neg->is_transparent determines whether a transparently negotiated * response or a plain `server driven negotiation' response is * created. Applicable headers are Alternates, Vary, and TCN. * * The Vary header we create is sometimes longer than is required for * the correct caching of negotiated results by HTTP/1.1 caches. For * example if we have 3 variants x.html, x.ps.en and x.ps.nl, and if * the Accept: header assigns a 0 quality to .ps, then the results of * the two server-side negotiation algorithms we currently implement * will never depend on Accept-Language so we could return `Vary: * negotiate, accept' instead of the longer 'Vary: negotiate, accept, * accept-language' which the code below will return. A routine for * computing the exact minimal Vary header would be a huge pain to code * and maintain though, especially because we need to take all possible * twiddles in the server-side negotiation algorithms into account. */ static void set_neg_headers(request_rec *r, negotiation_state *neg, int alg_result) { apr_table_t *hdrs; var_rec *avail_recs = (var_rec *) neg->avail_vars->elts; const char *sample_type = NULL; const char *sample_language = NULL; const char *sample_encoding = NULL; const char *sample_charset = NULL; char *lang; char *qstr; apr_off_t len; apr_array_header_t *arr; int max_vlist_array = (neg->avail_vars->nelts * 21); int first_variant = 1; int vary_by_type = 0; int vary_by_language = 0; int vary_by_charset = 0; int vary_by_encoding = 0; int j; /* In order to avoid O(n^2) memory copies in building Alternates, * we preallocate a apr_table_t with the maximum substrings possible, * fill it with the variant list, and then concatenate the entire array. * Note that if you change the number of substrings pushed, you also * need to change the calculation of max_vlist_array above. */ if (neg->send_alternates && neg->avail_vars->nelts) arr = apr_array_make(r->pool, max_vlist_array, sizeof(char *)); else arr = NULL; /* Put headers into err_headers_out, since send_http_header() * outputs both headers_out and err_headers_out. */ hdrs = r->err_headers_out; for (j = 0; j < neg->avail_vars->nelts; ++j) { var_rec *variant = &avail_recs[j]; if (variant->content_languages && variant->content_languages->nelts) { lang = apr_array_pstrcat(r->pool, variant->content_languages, ','); } else { lang = NULL; } /* Calculate Vary by looking for any difference between variants */ if (first_variant) { sample_type = variant->mime_type; sample_charset = variant->content_charset; sample_language = lang; sample_encoding = variant->content_encoding; } else { if (!vary_by_type && strcmp(sample_type ? sample_type : "", variant->mime_type ? variant->mime_type : "")) { vary_by_type = 1; } if (!vary_by_charset && strcmp(sample_charset ? sample_charset : "", variant->content_charset ? variant->content_charset : "")) { vary_by_charset = 1; } if (!vary_by_language && strcmp(sample_language ? sample_language : "", lang ? lang : "")) { vary_by_language = 1; } if (!vary_by_encoding && strcmp(sample_encoding ? sample_encoding : "", variant->content_encoding ? variant->content_encoding : "")) { vary_by_encoding = 1; } } first_variant = 0; if (!neg->send_alternates) continue; /* Generate the string components for this Alternates entry */ *((const char **) apr_array_push(arr)) = "{\""; *((const char **) apr_array_push(arr)) = ap_escape_path_segment(r->pool, variant->file_name); *((const char **) apr_array_push(arr)) = "\" "; qstr = (char *) apr_palloc(r->pool, 6); apr_snprintf(qstr, 6, "%1.3f", variant->source_quality); /* Strip trailing zeros (saves those valuable network bytes) */ if (qstr[4] == '0') { qstr[4] = '\0'; if (qstr[3] == '0') { qstr[3] = '\0'; if (qstr[2] == '0') { qstr[1] = '\0'; } } } *((const char **) apr_array_push(arr)) = qstr; if (variant->mime_type && *variant->mime_type) { *((const char **) apr_array_push(arr)) = " {type "; *((const char **) apr_array_push(arr)) = variant->mime_type; *((const char **) apr_array_push(arr)) = "}"; } if (variant->content_charset && *variant->content_charset) { *((const char **) apr_array_push(arr)) = " {charset "; *((const char **) apr_array_push(arr)) = variant->content_charset; *((const char **) apr_array_push(arr)) = "}"; } if (lang) { *((const char **) apr_array_push(arr)) = " {language "; *((const char **) apr_array_push(arr)) = lang; *((const char **) apr_array_push(arr)) = "}"; } if (variant->content_encoding && *variant->content_encoding) { /* Strictly speaking, this is non-standard, but so is TCN */ *((const char **) apr_array_push(arr)) = " {encoding "; *((const char **) apr_array_push(arr)) = variant->content_encoding; *((const char **) apr_array_push(arr)) = "}"; } /* Note that the Alternates specification (in rfc2295) does * not require that we include {length x}, so we could omit it * if determining the length is too expensive. We currently * always include it though. * * If the variant is a CGI script, find_content_length would * return the length of the script, not the output it * produces, so we check for the presence of a handler and if * there is one we don't add a length. * * XXX: TODO: This check does not detect a CGI script if we * get the variant from a type map. This needs to be fixed * (without breaking things if the type map specifies a * content-length, which currently leads to the correct result). */ if (!(variant->sub_req && variant->sub_req->handler) && (len = find_content_length(neg, variant)) >= 0) { *((const char **) apr_array_push(arr)) = " {length "; *((const char **) apr_array_push(arr)) = apr_off_t_toa(r->pool, len); *((const char **) apr_array_push(arr)) = "}"; } *((const char **) apr_array_push(arr)) = "}"; *((const char **) apr_array_push(arr)) = ", "; /* trimmed below */ } if (neg->send_alternates && neg->avail_vars->nelts) { arr->nelts--; /* remove last comma */ apr_table_mergen(hdrs, "Alternates", apr_array_pstrcat(r->pool, arr, '\0')); } if (neg->is_transparent || vary_by_type || vary_by_language || vary_by_charset || vary_by_encoding) { apr_table_mergen(hdrs, "Vary", 2 + apr_pstrcat(r->pool, neg->is_transparent ? ", negotiate" : "", vary_by_type ? ", accept" : "", vary_by_language ? ", accept-language" : "", vary_by_charset ? ", accept-charset" : "", vary_by_encoding ? ", accept-encoding" : "", NULL)); } if (neg->is_transparent) { /* Create TCN response header */ apr_table_setn(hdrs, "TCN", alg_result == alg_list ? "list" : "choice"); } } /********************************************************************** * * Return an HTML list of variants. This is output as part of the * choice response or 406 status body. */ static char *make_variant_list(request_rec *r, negotiation_state *neg) { apr_array_header_t *arr; int i; int max_vlist_array = (neg->avail_vars->nelts * 15) + 2; /* In order to avoid O(n^2) memory copies in building the list, * we preallocate a apr_table_t with the maximum substrings possible, * fill it with the variant list, and then concatenate the entire array. */ arr = apr_array_make(r->pool, max_vlist_array, sizeof(char *)); *((const char **) apr_array_push(arr)) = "Available variants:\n
      \n"; for (i = 0; i < neg->avail_vars->nelts; ++i) { var_rec *variant = &((var_rec *) neg->avail_vars->elts)[i]; const char *filename = variant->file_name ? variant->file_name : ""; apr_array_header_t *languages = variant->content_languages; const char *description = variant->description ? variant->description : ""; /* The format isn't very neat, and it would be nice to make * the tags human readable (eg replace 'language en' with 'English'). * Note that if you change the number of substrings pushed, you also * need to change the calculation of max_vlist_array above. */ *((const char **) apr_array_push(arr)) = "
    • pool, filename); *((const char **) apr_array_push(arr)) = "\">"; *((const char **) apr_array_push(arr)) = ap_escape_html(r->pool, filename); *((const char **) apr_array_push(arr)) = " "; *((const char **) apr_array_push(arr)) = description; if (variant->mime_type && *variant->mime_type) { *((const char **) apr_array_push(arr)) = ", type "; *((const char **) apr_array_push(arr)) = variant->mime_type; } if (languages && languages->nelts) { *((const char **) apr_array_push(arr)) = ", language "; *((const char **) apr_array_push(arr)) = apr_array_pstrcat(r->pool, languages, ','); } if (variant->content_charset && *variant->content_charset) { *((const char **) apr_array_push(arr)) = ", charset "; *((const char **) apr_array_push(arr)) = variant->content_charset; } if (variant->content_encoding) { *((const char **) apr_array_push(arr)) = ", encoding "; *((const char **) apr_array_push(arr)) = variant->content_encoding; } *((const char **) apr_array_push(arr)) = "
    • \n"; } *((const char **) apr_array_push(arr)) = "
    \n"; return apr_array_pstrcat(r->pool, arr, '\0'); } static void store_variant_list(request_rec *r, negotiation_state *neg) { if (r->main == NULL) { apr_table_setn(r->notes, "variant-list", make_variant_list(r, neg)); } else { apr_table_setn(r->main->notes, "variant-list", make_variant_list(r->main, neg)); } } /* Called if we got a "Choice" response from the variant selection algorithm. * It checks the result of the chosen variant to see if it * is itself negotiated (if so, return error HTTP_VARIANT_ALSO_VARIES). * Otherwise, add the appropriate headers to the current response. */ static int setup_choice_response(request_rec *r, negotiation_state *neg, var_rec *variant) { request_rec *sub_req; const char *sub_vary; if (!variant->sub_req) { int status; sub_req = ap_sub_req_lookup_file(variant->file_name, r, r->output_filters); status = sub_req->status; if (status != HTTP_OK && !apr_table_get(sub_req->err_headers_out, "TCN")) { ap_destroy_sub_req(sub_req); return status; } variant->sub_req = sub_req; } else { sub_req = variant->sub_req; } /* The variant selection algorithm told us to return a "Choice" * response. This is the normal variant response, with * some extra headers. First, ensure that the chosen * variant did or will not itself engage in transparent negotiation. * If not, set the appropriate headers, and fall through to * the normal variant handling */ /* This catches the error that a transparent type map selects a * transparent multiviews resource as the best variant. * * XXX: We do not signal an error if a transparent type map * selects a _non_transparent multiviews resource as the best * variant, because we can generate a legal negotiation response * in this case. In this case, the vlist_validator of the * nontransparent subrequest will be lost however. This could * lead to cases in which a change in the set of variants or the * negotiation algorithm of the nontransparent resource is never * propagated up to a HTTP/1.1 cache which interprets Vary. To be * completely on the safe side we should return HTTP_VARIANT_ALSO_VARIES * for this type of recursive negotiation too. */ if (neg->is_transparent && apr_table_get(sub_req->err_headers_out, "TCN")) { return HTTP_VARIANT_ALSO_VARIES; } /* This catches the error that a transparent type map recursively * selects, as the best variant, another type map which itself * causes transparent negotiation to be done. * * XXX: Actually, we catch this error by catching all cases of * type map recursion. There are some borderline recursive type * map arrangements which would not produce transparent * negotiation protocol errors or lack of cache propagation * problems, but such arrangements are very hard to detect at this * point in the control flow, so we do not bother to single them * out. * * Recursive type maps imply a recursive arrangement of negotiated * resources which is visible to outside clients, and this is not * supported by the transparent negotiation caching protocols, so * if we are to have generic support for recursive type maps, we * have to create some configuration setting which makes all type * maps non-transparent when recursion is enabled. Also, if we * want recursive type map support which ensures propagation of * type map changes into HTTP/1.1 caches that handle Vary, we * would have to extend the current mechanism for generating * variant list validators. */ if (sub_req->handler && strcmp(sub_req->handler, "type-map") == 0) { return HTTP_VARIANT_ALSO_VARIES; } /* This adds an appropriate Variant-Vary header if the subrequest * is a multiviews resource. * * XXX: TODO: Note that this does _not_ handle any Vary header * returned by a CGI if sub_req is a CGI script, because we don't * see that Vary header yet at this point in the control flow. * This won't cause any cache consistency problems _unless_ the * CGI script also returns a Cache-Control header marking the * response as cacheable. This needs to be fixed, also there are * problems if a CGI returns an Etag header which also need to be * fixed. */ if ((sub_vary = apr_table_get(sub_req->err_headers_out, "Vary")) != NULL) { apr_table_setn(r->err_headers_out, "Variant-Vary", sub_vary); /* Move the subreq Vary header into the main request to * prevent having two Vary headers in the response, which * would be legal but strange. */ apr_table_setn(r->err_headers_out, "Vary", sub_vary); apr_table_unset(sub_req->err_headers_out, "Vary"); } apr_table_setn(r->err_headers_out, "Content-Location", ap_escape_path_segment(r->pool, variant->file_name)); set_neg_headers(r, neg, alg_choice); /* add Alternates and Vary */ /* Still to do by caller: add Expires */ return 0; } /**************************************************************** * * Executive... */ static int do_negotiation(request_rec *r, negotiation_state *neg, var_rec **bestp, int prefer_scripts) { var_rec *avail_recs = (var_rec *) neg->avail_vars->elts; int alg_result; /* result of variant selection algorithm */ int res; int j; /* Decide if resource is transparently negotiable */ /* GET or HEAD? (HEAD has same method number as GET) */ if (r->method_number == M_GET) { /* maybe this should be configurable, see also the comment * about recursive type maps in setup_choice_response() */ neg->is_transparent = 1; /* We can't be transparent if we are a map file in the middle * of the request URI. */ if (r->path_info && *r->path_info) neg->is_transparent = 0; for (j = 0; j < neg->avail_vars->nelts; ++j) { var_rec *variant = &avail_recs[j]; /* We can't be transparent, because of internal * assumptions in best_match(), if there is a * non-neighboring variant. We can have a non-neighboring * variant when processing a type map. */ if (ap_strchr_c(variant->file_name, '/')) neg->is_transparent = 0; /* We can't be transparent, because of the behavior * of variant typemap bodies. */ if (variant->body) { neg->is_transparent = 0; } } } if (neg->is_transparent) { parse_negotiate_header(r, neg); } else { /* configure negotiation on non-transparent resource */ neg->may_choose = 1; } maybe_add_default_accepts(neg, prefer_scripts); alg_result = best_match(neg, bestp); /* alg_result is one of * alg_choice: a best variant is chosen * alg_list: no best variant is chosen */ if (alg_result == alg_list) { /* send a list response or HTTP_NOT_ACCEPTABLE error response */ neg->send_alternates = 1; /* always include Alternates header */ set_neg_headers(r, neg, alg_result); store_variant_list(r, neg); if (neg->is_transparent && neg->ua_supports_trans) { /* XXX todo: expires? cachability? */ /* Some HTTP/1.0 clients are known to choke when they get * a 300 (multiple choices) response without a Location * header. However the 300 code response we are about * to generate will only reach 1.0 clients which support * transparent negotiation, and they should be OK. The * response should never reach older 1.0 clients, even if * we have CacheNegotiatedDocs enabled, because no 1.0 * proxy cache (we know of) will cache and return 300 * responses (they certainly won't if they conform to the * HTTP/1.0 specification). */ return HTTP_MULTIPLE_CHOICES; } if (!*bestp) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00690) "no acceptable variant: %s", r->filename); return HTTP_NOT_ACCEPTABLE; } } /* Variant selection chose a variant */ /* XXX todo: merge the two cases in the if statement below */ if (neg->is_transparent) { if ((res = setup_choice_response(r, neg, *bestp)) != 0) { return res; /* return if error */ } } else { set_neg_headers(r, neg, alg_result); } /* Make sure caching works - Vary should handle HTTP/1.1, but for * HTTP/1.0, we can't allow caching at all. */ /* XXX: Note that we only set r->no_cache to 1, which causes * Expires: to be added, when responding to a HTTP/1.0 * client. If we return the response to a 1.1 client, we do not * add Expires , because doing so would degrade 1.1 cache * performance by preventing re-use of the response without prior * revalidation. On the other hand, if the 1.1 client is a proxy * which was itself contacted by a 1.0 client, or a proxy cache * which can be contacted later by 1.0 clients, then we currently * rely on this 1.1 proxy to add the Expires: when it * forwards the response. * * XXX: TODO: Find out if the 1.1 spec requires proxies and * tunnels to add Expires: when forwarding the response to * 1.0 clients. I (kh) recall it is rather vague on this point. * Testing actual 1.1 proxy implementations would also be nice. If * Expires: is not added by proxies then we need to always * include Expires: ourselves to ensure correct caching, but * this would degrade HTTP/1.1 cache efficiency unless we also add * Cache-Control: max-age=N, which we currently don't. * * Roy: No, we are not going to screw over HTTP future just to * ensure that people who can't be bothered to upgrade their * clients will always receive perfect server-side negotiation. * Hell, those clients are sending bogus accept headers anyway. * * Manual setting of cache-control/expires always overrides this * automated kluge, on purpose. */ if ((!do_cache_negotiated_docs(r->server) && (r->proto_num < HTTP_VERSION(1,1))) && neg->count_multiviews_variants != 1) { r->no_cache = 1; } return OK; } static int handle_map_file(request_rec *r) { negotiation_state *neg; apr_file_t *map; var_rec *best; int res; char *udir; const char *new_req; if (strcmp(r->handler, MAP_FILE_MAGIC_TYPE) && strcmp(r->handler, "type-map")) { return DECLINED; } neg = parse_accept_headers(r); if ((res = read_type_map(&map, neg, r))) { return res; } res = do_negotiation(r, neg, &best, 0); if (res != 0) { return res; } if (best->body) { conn_rec *c = r->connection; apr_bucket_brigade *bb; apr_bucket *e; ap_allow_standard_methods(r, REPLACE_ALLOW, M_GET, M_OPTIONS, M_POST, -1); /* XXX: ? * if (r->method_number == M_OPTIONS) { * return ap_send_http_options(r); *} */ if (r->method_number != M_GET && r->method_number != M_POST) { return HTTP_METHOD_NOT_ALLOWED; } /* ### These may be implemented by adding some 'extra' info * of the file offset onto the etag * ap_update_mtime(r, r->finfo.mtime); * ap_set_last_modified(r); * ap_set_etag(r); */ ap_set_accept_ranges(r); ap_set_content_length(r, best->bytes); /* set MIME type and charset as negotiated */ if (best->mime_type && *best->mime_type) { if (best->content_charset && *best->content_charset) { ap_set_content_type(r, apr_pstrcat(r->pool, best->mime_type, "; charset=", best->content_charset, NULL)); } else { ap_set_content_type(r, apr_pstrdup(r->pool, best->mime_type)); } } /* set Content-language(s) as negotiated */ if (best->content_languages && best->content_languages->nelts) { r->content_languages = apr_array_copy(r->pool, best->content_languages); } /* set Content-Encoding as negotiated */ if (best->content_encoding && *best->content_encoding) { r->content_encoding = apr_pstrdup(r->pool, best->content_encoding); } if ((res = ap_meets_conditions(r)) != OK) { return res; } if ((res = ap_discard_request_body(r)) != OK) { return res; } bb = apr_brigade_create(r->pool, c->bucket_alloc); apr_brigade_insert_file(bb, map, best->body, best->bytes, r->pool); e = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); return ap_pass_brigade_fchk(r, bb, NULL); } if (r->path_info && *r->path_info) { /* remove any path_info from the end of the uri before trying * to change the filename. r->path_info from the original * request is passed along on the redirect. */ r->uri[ap_find_path_info(r->uri, r->path_info)] = '\0'; } udir = ap_make_dirstr_parent(r->pool, r->uri); udir = ap_escape_uri(r->pool, udir); if (r->args) { if (r->path_info) { new_req = apr_pstrcat(r->pool, udir, best->file_name, r->path_info, "?", r->args, NULL); } else { new_req = apr_pstrcat(r->pool, udir, best->file_name, "?", r->args, NULL); } } else { new_req = apr_pstrcat(r->pool, udir, best->file_name, r->path_info, NULL); } ap_internal_redirect(new_req, r); return OK; } static int handle_multi(request_rec *r) { negotiation_state *neg; var_rec *best, *avail_recs; request_rec *sub_req; int res; int j; if (r->finfo.filetype != APR_NOFILE || !(ap_allow_options(r) & OPT_MULTI)) { return DECLINED; } neg = parse_accept_headers(r); if ((res = read_types_multi(neg))) { return_from_multi: /* free all allocated memory from subrequests */ avail_recs = (var_rec *) neg->avail_vars->elts; for (j = 0; j < neg->avail_vars->nelts; ++j) { var_rec *variant = &avail_recs[j]; if (variant->sub_req) { ap_destroy_sub_req(variant->sub_req); } } return res; } if (neg->avail_vars->nelts == 0) { return DECLINED; } res = do_negotiation(r, neg, &best, (r->method_number != M_GET) || r->args || (r->path_info && *r->path_info)); if (res != 0) goto return_from_multi; if (!(sub_req = best->sub_req)) { /* We got this out of a map file, so we don't actually have * a sub_req structure yet. Get one now. */ sub_req = ap_sub_req_lookup_file(best->file_name, r, r->output_filters); if (sub_req->status != HTTP_OK) { res = sub_req->status; ap_destroy_sub_req(sub_req); goto return_from_multi; } } if (sub_req->args == NULL) { sub_req->args = r->args; } /* now do a "fast redirect" ... promotes the sub_req into the main req */ ap_internal_fast_redirect(sub_req, r); /* give no advise for time on this subrequest. Perhaps we * should tally the last mtime among all variants, and date * the most recent, but that could confuse the proxies. */ r->mtime = 0; /* clean up all but our favorite variant, since that sub_req * is now merged into the main request! */ avail_recs = (var_rec *) neg->avail_vars->elts; for (j = 0; j < neg->avail_vars->nelts; ++j) { var_rec *variant = &avail_recs[j]; if (variant != best && variant->sub_req) { ap_destroy_sub_req(variant->sub_req); } } return OK; } /********************************************************************** * There is a problem with content-encoding, as some clients send and * expect an x- token (e.g. x-gzip) while others expect the plain token * (i.e. gzip). To try and deal with this as best as possible we do * the following: if the client sent an Accept-Encoding header and it * contains a plain token corresponding to the content encoding of the * response, then set content encoding using the plain token. Else if * the A-E header contains the x- token use the x- token in the C-E * header. Else don't do anything. * * Note that if no A-E header was sent, or it does not contain a token * compatible with the final content encoding, then the token in the * C-E header will be whatever was specified in the AddEncoding * directive. */ static int fix_encoding(request_rec *r) { const char *enc = r->content_encoding; char *x_enc = NULL; apr_array_header_t *accept_encodings; accept_rec *accept_recs; int i; if (!enc || !*enc) { return DECLINED; } if (enc[0] == 'x' && enc[1] == '-') { enc += 2; } if ((accept_encodings = do_header_line(r->pool, apr_table_get(r->headers_in, "Accept-Encoding"))) == NULL) { return DECLINED; } accept_recs = (accept_rec *) accept_encodings->elts; for (i = 0; i < accept_encodings->nelts; ++i) { char *name = accept_recs[i].name; if (!strcmp(name, enc)) { r->content_encoding = name; return OK; } if (name[0] == 'x' && name[1] == '-' && !strcmp(name+2, enc)) { x_enc = name; } } if (x_enc) { r->content_encoding = x_enc; return OK; } return DECLINED; } static void register_hooks(apr_pool_t *p) { ap_hook_fixups(fix_encoding,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_type_checker(handle_multi,NULL,NULL,APR_HOOK_FIRST); ap_hook_handler(handle_map_file,NULL,NULL,APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(negotiation) = { STANDARD20_MODULE_STUFF, create_neg_dir_config, /* dir config creator */ merge_neg_dir_configs, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ negotiation_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/mappers/mod_rewrite.c0000644000000000000500000052047513403742407017060 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ _ * _ __ ___ ___ __| | _ __ _____ ___ __(_) |_ ___ * | '_ ` _ \ / _ \ / _` | | '__/ _ \ \ /\ / / '__| | __/ _ \ * | | | | | | (_) | (_| | | | | __/\ V V /| | | | || __/ * |_| |_| |_|\___/ \__,_|___|_| \___| \_/\_/ |_| |_|\__\___| * |_____| * * URL Rewriting Module * * This module uses a rule-based rewriting engine (based on a * regular-expression parser) to rewrite requested URLs on the fly. * * It supports an unlimited number of additional rule conditions (which can * operate on a lot of variables, even on HTTP headers) for granular * matching and even external database lookups (either via plain text * tables, DBM hash files or even external processes) for advanced URL * substitution. * * It operates on the full URLs (including the PATH_INFO part) both in * per-server context (httpd.conf) and per-dir context (.htaccess) and even * can generate QUERY_STRING parts on result. The rewriting result finally * can lead to internal subprocessing, external request redirection or even * to internal proxy throughput. * * This module was originally written in April 1996 and * gifted exclusively to the The Apache Software Foundation in July 1997 by * * Ralf S. Engelschall * rse engelschall.com * www.engelschall.com */ #include "apr.h" #include "apr_strings.h" #include "apr_hash.h" #include "apr_user.h" #include "apr_lib.h" #include "apr_signal.h" #include "apr_global_mutex.h" #include "apr_dbm.h" #include "apr_dbd.h" #include "mod_dbd.h" #if APR_HAS_THREADS #include "apr_thread_mutex.h" #endif #define APR_WANT_MEMFUNC #define APR_WANT_STRFUNC #define APR_WANT_IOVEC #include "apr_want.h" /* XXX: Do we really need these headers? */ #if APR_HAVE_UNISTD_H #include #endif #if APR_HAVE_SYS_TYPES_H #include #endif #if APR_HAVE_STDARG_H #include #endif #if APR_HAVE_STDLIB_H #include #endif #if APR_HAVE_CTYPE_H #include #endif #if APR_HAVE_NETINET_IN_H #include #endif #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_vhost.h" #include "util_mutex.h" #include "mod_ssl.h" #include "mod_rewrite.h" #include "ap_expr.h" static ap_dbd_t *(*dbd_acquire)(request_rec*) = NULL; static void (*dbd_prepare)(server_rec*, const char*, const char*) = NULL; static const char* really_last_key = "rewrite_really_last"; /* * in order to improve performance on running production systems, you * may strip all rewritelog code entirely from mod_rewrite by using the * -DREWRITELOG_DISABLED compiler option. * * DO NOT USE THIS OPTION FOR PUBLIC BINARY RELEASES. Otherwise YOU are * responsible for answering all the mod_rewrite questions out there. */ /* If logging is limited to APLOG_DEBUG or lower, disable rewrite log, too */ #ifdef APLOG_MAX_LOGLEVEL #if APLOG_MAX_LOGLEVEL < APLOG_TRACE1 #ifndef REWRITELOG_DISABLED #define REWRITELOG_DISABLED #endif #endif #endif #ifndef REWRITELOG_DISABLED #define rewritelog(x) do_rewritelog x #define REWRITELOG_MODE ( APR_UREAD | APR_UWRITE | APR_GREAD | APR_WREAD ) #define REWRITELOG_FLAGS ( APR_WRITE | APR_APPEND | APR_CREATE ) #else /* !REWRITELOG_DISABLED */ #define rewritelog(x) #endif /* REWRITELOG_DISABLED */ /* remembered mime-type for [T=...] */ #define REWRITE_FORCED_MIMETYPE_NOTEVAR "rewrite-forced-mimetype" #define REWRITE_FORCED_HANDLER_NOTEVAR "rewrite-forced-handler" #define ENVVAR_SCRIPT_URL "SCRIPT_URL" #define REDIRECT_ENVVAR_SCRIPT_URL "REDIRECT_" ENVVAR_SCRIPT_URL #define ENVVAR_SCRIPT_URI "SCRIPT_URI" #define CONDFLAG_NONE (1<<0) #define CONDFLAG_NOCASE (1<<1) #define CONDFLAG_NOTMATCH (1<<2) #define CONDFLAG_ORNEXT (1<<3) #define CONDFLAG_NOVARY (1<<4) #define RULEFLAG_NONE (1<<0) #define RULEFLAG_FORCEREDIRECT (1<<1) #define RULEFLAG_LASTRULE (1<<2) #define RULEFLAG_NEWROUND (1<<3) #define RULEFLAG_CHAIN (1<<4) #define RULEFLAG_IGNOREONSUBREQ (1<<5) #define RULEFLAG_NOTMATCH (1<<6) #define RULEFLAG_PROXY (1<<7) #define RULEFLAG_PASSTHROUGH (1<<8) #define RULEFLAG_QSAPPEND (1<<9) #define RULEFLAG_NOCASE (1<<10) #define RULEFLAG_NOESCAPE (1<<11) #define RULEFLAG_NOSUB (1<<12) #define RULEFLAG_STATUS (1<<13) #define RULEFLAG_ESCAPEBACKREF (1<<14) #define RULEFLAG_DISCARDPATHINFO (1<<15) #define RULEFLAG_QSDISCARD (1<<16) #define RULEFLAG_END (1<<17) #define RULEFLAG_ESCAPENOPLUS (1<<18) #define RULEFLAG_QSLAST (1<<19) /* return code of the rewrite rule * the result may be escaped - or not */ #define ACTION_NORMAL (1<<0) #define ACTION_NOESCAPE (1<<1) #define ACTION_STATUS (1<<2) #define MAPTYPE_TXT (1<<0) #define MAPTYPE_DBM (1<<1) #define MAPTYPE_PRG (1<<2) #define MAPTYPE_INT (1<<3) #define MAPTYPE_RND (1<<4) #define MAPTYPE_DBD (1<<5) #define MAPTYPE_DBD_CACHE (1<<6) #define ENGINE_DISABLED (1<<0) #define ENGINE_ENABLED (1<<1) #define OPTION_NONE (1<<0) #define OPTION_INHERIT (1<<1) #define OPTION_INHERIT_BEFORE (1<<2) #define OPTION_NOSLASH (1<<3) #define OPTION_ANYURI (1<<4) #define OPTION_MERGEBASE (1<<5) #define OPTION_INHERIT_DOWN (1<<6) #define OPTION_INHERIT_DOWN_BEFORE (1<<7) #define OPTION_IGNORE_INHERIT (1<<8) #define OPTION_IGNORE_CONTEXT_INFO (1<<9) #define OPTION_LEGACY_PREFIX_DOCROOT (1<<10) #ifndef RAND_MAX #define RAND_MAX 32767 #endif /* max cookie size in rfc 2109 */ /* XXX: not used at all. We should do a check somewhere and/or cut the cookie */ #define MAX_COOKIE_LEN 4096 /* max line length (incl.\n) in text rewrite maps */ #ifndef REWRITE_MAX_TXT_MAP_LINE #define REWRITE_MAX_TXT_MAP_LINE 1024 #endif /* buffer length for prg rewrite maps */ #ifndef REWRITE_PRG_MAP_BUF #define REWRITE_PRG_MAP_BUF 1024 #endif /* for better readbility */ #define LEFT_CURLY '{' #define RIGHT_CURLY '}' /* * expansion result items on the stack to save some cycles * * (5 == about 2 variables like "foo%{var}bar%{var}baz") */ #define SMALL_EXPANSION 5 /* * check that a subrequest won't cause infinite recursion * * either not in a subrequest, or in a subrequest * and URIs aren't NULL and sub/main URIs differ */ #define subreq_ok(r) (!r->main || \ (r->main->uri && r->uri && strcmp(r->main->uri, r->uri))) #ifndef REWRITE_MAX_ROUNDS #define REWRITE_MAX_ROUNDS 32000 #endif /* * +-------------------------------------------------------+ * | | * | Types and Structures * | | * +-------------------------------------------------------+ */ typedef struct { const char *datafile; /* filename for map data files */ const char *dbmtype; /* dbm type for dbm map data files */ const char *checkfile; /* filename to check for map existence */ const char *cachename; /* for cached maps (txt/rnd/dbm) */ int type; /* the type of the map */ apr_file_t *fpin; /* in file pointer for program maps */ apr_file_t *fpout; /* out file pointer for program maps */ apr_file_t *fperr; /* err file pointer for program maps */ char *(*func)(request_rec *, /* function pointer for internal maps */ char *); char **argv; /* argv of the external rewrite map */ const char *dbdq; /* SQL SELECT statement for rewritemap */ const char *checkfile2; /* filename to check for map existence NULL if only one file */ const char *user; /* run RewriteMap program as this user */ const char *group; /* run RewriteMap program as this group */ } rewritemap_entry; /* special pattern types for RewriteCond */ typedef enum { CONDPAT_REGEX = 0, CONDPAT_FILE_EXISTS, CONDPAT_FILE_SIZE, CONDPAT_FILE_LINK, CONDPAT_FILE_DIR, CONDPAT_FILE_XBIT, CONDPAT_LU_URL, CONDPAT_LU_FILE, CONDPAT_STR_LT, CONDPAT_STR_LE, CONDPAT_STR_EQ, CONDPAT_STR_GT, CONDPAT_STR_GE, CONDPAT_INT_LT, CONDPAT_INT_LE, CONDPAT_INT_EQ, CONDPAT_INT_GT, CONDPAT_INT_GE, CONDPAT_AP_EXPR } pattern_type; typedef struct { char *input; /* Input string of RewriteCond */ char *pattern; /* the RegExp pattern string */ ap_regex_t *regexp; /* the precompiled regexp */ ap_expr_info_t *expr; /* the compiled ap_expr */ int flags; /* Flags which control the match */ pattern_type ptype; /* pattern type */ int pskip; /* back-index to display pattern */ } rewritecond_entry; /* single linked list for env vars and cookies */ typedef struct data_item { struct data_item *next; char *data; } data_item; typedef struct { apr_array_header_t *rewriteconds;/* the corresponding RewriteCond entries */ char *pattern; /* the RegExp pattern string */ ap_regex_t *regexp; /* the RegExp pattern compilation */ char *output; /* the Substitution string */ int flags; /* Flags which control the substitution */ char *forced_mimetype; /* forced MIME type of substitution */ char *forced_handler; /* forced content handler of subst. */ int forced_responsecode; /* forced HTTP response status */ data_item *env; /* added environment variables */ data_item *cookie; /* added cookies */ int skip; /* number of next rules to skip */ int maxrounds; /* limit on number of loops with N flag */ char *escapes; /* specific backref escapes */ } rewriterule_entry; typedef struct { int state; /* the RewriteEngine state */ int options; /* the RewriteOption state */ apr_hash_t *rewritemaps; /* the RewriteMap entries */ apr_array_header_t *rewriteconds; /* the RewriteCond entries (temp.) */ apr_array_header_t *rewriterules; /* the RewriteRule entries */ server_rec *server; /* the corresponding server indicator */ unsigned int state_set:1; unsigned int options_set:1; } rewrite_server_conf; typedef struct { int state; /* the RewriteEngine state */ int options; /* the RewriteOption state */ apr_array_header_t *rewriteconds; /* the RewriteCond entries (temp.) */ apr_array_header_t *rewriterules; /* the RewriteRule entries */ char *directory; /* the directory where it applies */ const char *baseurl; /* the base-URL where it applies */ unsigned int state_set:1; unsigned int options_set:1; unsigned int baseurl_set:1; } rewrite_perdir_conf; /* the (per-child) cache structures. */ typedef struct cache { apr_pool_t *pool; apr_hash_t *maps; #if APR_HAS_THREADS apr_thread_mutex_t *lock; #endif } cache; /* cached maps contain an mtime for the whole map and live in a subpool * of the cachep->pool. That makes it easy to forget them if necessary. */ typedef struct { apr_time_t mtime; apr_pool_t *pool; apr_hash_t *entries; } cachedmap; /* the regex structure for the * substitution of backreferences */ typedef struct backrefinfo { const char *source; ap_regmatch_t regmatch[AP_MAX_REG_MATCH]; } backrefinfo; /* single linked list used for * variable expansion */ typedef struct result_list { struct result_list *next; apr_size_t len; const char *string; } result_list; /* context structure for variable lookup and expansion */ typedef struct { request_rec *r; const char *uri; const char *vary_this; const char *vary; char *perdir; backrefinfo briRR; backrefinfo briRC; } rewrite_ctx; /* * +-------------------------------------------------------+ * | | * | static module data * | | * +-------------------------------------------------------+ */ /* the global module structure */ module AP_MODULE_DECLARE_DATA rewrite_module; /* rewritemap int: handler function registry */ static apr_hash_t *mapfunc_hash; /* the cache */ static cache *cachep; /* whether proxy module is available or not */ static int proxy_available; /* Locks/Mutexes */ static int rewrite_lock_needed = 0; static apr_global_mutex_t *rewrite_mapr_lock_acquire = NULL; static const char *rewritemap_mutex_type = "rewrite-map"; /* Optional functions imported from mod_ssl when loaded: */ static APR_OPTIONAL_FN_TYPE(ssl_var_lookup) *rewrite_ssl_lookup = NULL; static APR_OPTIONAL_FN_TYPE(ssl_is_https) *rewrite_is_https = NULL; static char *escape_backref(apr_pool_t *p, const char *path, const char *escapeme, int noplus); /* * +-------------------------------------------------------+ * | | * | rewriting logfile support * | | * +-------------------------------------------------------+ */ #ifndef REWRITELOG_DISABLED static void do_rewritelog(request_rec *r, int level, char *perdir, const char *fmt, ...) __attribute__((format(printf,4,5))); static void do_rewritelog(request_rec *r, int level, char *perdir, const char *fmt, ...) { char *logline, *text; const char *rhost, *rname; int redir; request_rec *req; va_list ap; if (!APLOG_R_IS_LEVEL(r, APLOG_DEBUG + level)) return; rhost = ap_get_useragent_host(r, REMOTE_NOLOOKUP, NULL); rname = ap_get_remote_logname(r); for (redir=0, req=r; req->prev; req = req->prev) { ++redir; } va_start(ap, fmt); text = apr_pvsprintf(r->pool, fmt, ap); va_end(ap); logline = apr_psprintf(r->pool, "%s %s %s [%s/sid#%pp][rid#%pp/%s%s%s] " "%s%s%s%s", rhost ? rhost : "UNKNOWN-HOST", rname ? rname : "-", r->user ? (*r->user ? r->user : "\"\"") : "-", ap_get_server_name(r), (void *)(r->server), (void *)r, r->main ? "subreq" : "initial", redir ? "/redir#" : "", redir ? apr_itoa(r->pool, redir) : "", perdir ? "[perdir " : "", perdir ? perdir : "", perdir ? "] ": "", text); AP_REWRITE_LOG((uintptr_t)r, level, r->main ? 0 : 1, (char *)ap_get_server_name(r), logline); /* Intentional no APLOGNO */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG + level, 0, r, "%s", logline); return; } #endif /* !REWRITELOG_DISABLED */ /* * +-------------------------------------------------------+ * | | * | URI and path functions * | | * +-------------------------------------------------------+ */ /* return number of chars of the scheme (incl. '://') * if the URI is absolute (includes a scheme etc.) * otherwise 0. * If supportqs is not NULL, we return a whether or not * the scheme supports a query string or not. * * NOTE: If you add new schemes here, please have a * look at escape_absolute_uri and splitout_queryargs. * Not every scheme takes query strings and some schemes * may be handled in a special way. * * XXX: we may consider a scheme registry, perhaps with * appropriate escape callbacks to allow other modules * to extend mod_rewrite at runtime. */ static unsigned is_absolute_uri(char *uri, int *supportsqs) { int dummy, *sqs; sqs = (supportsqs ? supportsqs : &dummy); *sqs = 0; /* fast exit */ if (*uri == '/' || strlen(uri) <= 5) { return 0; } switch (*uri++) { case 'a': case 'A': if (!strncasecmp(uri, "jp://", 5)) { /* ajp:// */ *sqs = 1; return 6; } break; case 'b': case 'B': if (!strncasecmp(uri, "alancer://", 10)) { /* balancer:// */ *sqs = 1; return 11; } break; case 'f': case 'F': if (!strncasecmp(uri, "tp://", 5)) { /* ftp:// */ return 6; } if (!strncasecmp(uri, "cgi://", 6)) { /* fcgi:// */ *sqs = 1; return 7; } break; case 'g': case 'G': if (!strncasecmp(uri, "opher://", 8)) { /* gopher:// */ return 9; } break; case 'h': case 'H': if (!strncasecmp(uri, "ttp://", 6)) { /* http:// */ *sqs = 1; return 7; } else if (!strncasecmp(uri, "ttps://", 7)) { /* https:// */ *sqs = 1; return 8; } else if (!strncasecmp(uri, "2://", 4)) { /* h2:// */ *sqs = 1; return 5; } else if (!strncasecmp(uri, "2c://", 5)) { /* h2c:// */ *sqs = 1; return 6; } break; case 'l': case 'L': if (!strncasecmp(uri, "dap://", 6)) { /* ldap:// */ return 7; } break; case 'm': case 'M': if (!strncasecmp(uri, "ailto:", 6)) { /* mailto: */ *sqs = 1; return 7; } break; case 'n': case 'N': if (!strncasecmp(uri, "ews:", 4)) { /* news: */ return 5; } else if (!strncasecmp(uri, "ntp://", 6)) { /* nntp:// */ return 7; } break; case 's': case 'S': if (!strncasecmp(uri, "cgi://", 6)) { /* scgi:// */ *sqs = 1; return 7; } break; case 'w': case 'W': if (!strncasecmp(uri, "s://", 4)) { /* ws:// */ *sqs = 1; return 5; } else if (!strncasecmp(uri, "ss://", 5)) { /* wss:// */ *sqs = 1; return 6; } break; } return 0; } static const char c2x_table[] = "0123456789abcdef"; static APR_INLINE unsigned char *c2x(unsigned what, unsigned char prefix, unsigned char *where) { #if APR_CHARSET_EBCDIC what = apr_xlate_conv_byte(ap_hdrs_to_ascii, (unsigned char)what); #endif /*APR_CHARSET_EBCDIC*/ *where++ = prefix; *where++ = c2x_table[what >> 4]; *where++ = c2x_table[what & 0xf]; return where; } /* * Escapes a backreference in a similar way as php's urlencode does. * Based on ap_os_escape_path in server/util.c */ static char *escape_backref(apr_pool_t *p, const char *path, const char *escapeme, int noplus) { char *copy = apr_palloc(p, 3 * strlen(path) + 3); const unsigned char *s = (const unsigned char *)path; unsigned char *d = (unsigned char *)copy; unsigned c; while ((c = *s)) { if (!escapeme) { if (apr_isalnum(c) || c == '_') { *d++ = c; } else if (c == ' ' && !noplus) { *d++ = '+'; } else { d = c2x(c, '%', d); } } else { const char *esc = escapeme; while (*esc) { if (c == *esc) { if (c == ' ' && !noplus) { *d++ = '+'; } else { d = c2x(c, '%', d); } break; } ++esc; } if (!*esc) { *d++ = c; } } ++s; } *d = '\0'; return copy; } /* * escape absolute uri, which may or may not be path oriented. * So let's handle them differently. */ static char *escape_absolute_uri(apr_pool_t *p, char *uri, unsigned scheme) { char *cp; /* be safe. * NULL should indicate elsewhere, that something's wrong */ if (!scheme || strlen(uri) < scheme) { return NULL; } cp = uri + scheme; /* scheme with authority part? */ if (cp[-1] == '/') { /* skip host part */ while (*cp && *cp != '/') { ++cp; } /* nothing after the hostpart. ready! */ if (!*cp || !*++cp) { return apr_pstrdup(p, uri); } /* remember the hostname stuff */ scheme = cp - uri; /* special thing for ldap. * The parts are separated by question marks. From RFC 2255: * ldapurl = scheme "://" [hostport] ["/" * [dn ["?" [attributes] ["?" [scope] * ["?" [filter] ["?" extensions]]]]]] */ if (!strncasecmp(uri, "ldap", 4)) { char *token[5]; int c = 0; token[0] = cp = apr_pstrdup(p, cp); while (*cp && c < 4) { if (*cp == '?') { token[++c] = cp + 1; *cp = '\0'; } ++cp; } return apr_pstrcat(p, apr_pstrndup(p, uri, scheme), ap_escape_uri(p, token[0]), (c >= 1) ? "?" : NULL, (c >= 1) ? ap_escape_uri(p, token[1]) : NULL, (c >= 2) ? "?" : NULL, (c >= 2) ? ap_escape_uri(p, token[2]) : NULL, (c >= 3) ? "?" : NULL, (c >= 3) ? ap_escape_uri(p, token[3]) : NULL, (c >= 4) ? "?" : NULL, (c >= 4) ? ap_escape_uri(p, token[4]) : NULL, NULL); } } /* Nothing special here. Apply normal escaping. */ return apr_pstrcat(p, apr_pstrndup(p, uri, scheme), ap_escape_uri(p, cp), NULL); } /* * split out a QUERY_STRING part from * the current URI string */ static void splitout_queryargs(request_rec *r, int qsappend, int qsdiscard, int qslast) { char *q; int split; /* don't touch, unless it's a scheme for which a query string makes sense. * See RFC 1738 and RFC 2368. */ if (is_absolute_uri(r->filename, &split) && !split) { r->args = NULL; /* forget the query that's still flying around */ return; } if ( qsdiscard ) { r->args = NULL; /* Discard query string */ rewritelog((r, 2, NULL, "discarding query string")); } q = qslast ? ap_strrchr(r->filename, '?') : ap_strchr(r->filename, '?'); if (q != NULL) { char *olduri; apr_size_t len; olduri = apr_pstrdup(r->pool, r->filename); *q++ = '\0'; if (qsappend) { if (*q) { r->args = apr_pstrcat(r->pool, q, "&" , r->args, NULL); } } else { r->args = apr_pstrdup(r->pool, q); } if (r->args) { len = strlen(r->args); if (!len) { r->args = NULL; } else if (r->args[len-1] == '&') { r->args[len-1] = '\0'; } } rewritelog((r, 3, NULL, "split uri=%s -> uri=%s, args=%s", olduri, r->filename, r->args ? r->args : "")); } return; } /* * strip 'http[s]://ourhost/' from URI */ static void reduce_uri(request_rec *r) { char *cp; apr_size_t l; cp = (char *)ap_http_scheme(r); l = strlen(cp); if ( strlen(r->filename) > l+3 && strncasecmp(r->filename, cp, l) == 0 && r->filename[l] == ':' && r->filename[l+1] == '/' && r->filename[l+2] == '/' ) { unsigned short port; char *portp, *host, *url, *scratch; scratch = apr_pstrdup(r->pool, r->filename); /* our scratchpad */ /* cut the hostname and port out of the URI */ cp = host = scratch + l + 3; /* 3 == strlen("://") */ while (*cp && *cp != '/' && *cp != ':') { ++cp; } if (*cp == ':') { /* additional port given */ *cp++ = '\0'; portp = cp; while (*cp && *cp != '/') { ++cp; } *cp = '\0'; port = atoi(portp); url = r->filename + (cp - scratch); if (!*url) { url = "/"; } } else if (*cp == '/') { /* default port */ *cp = '\0'; port = ap_default_port(r); url = r->filename + (cp - scratch); } else { port = ap_default_port(r); url = "/"; } /* now check whether we could reduce it to a local path... */ if (ap_matches_request_vhost(r, host, port)) { rewrite_server_conf *conf = ap_get_module_config(r->server->module_config, &rewrite_module); rewritelog((r, 3, NULL, "reduce %s -> %s", r->filename, url)); r->filename = apr_pstrdup(r->pool, url); /* remember that the uri was reduced */ if(!(conf->options & OPTION_LEGACY_PREFIX_DOCROOT)) { apr_table_setn(r->notes, "mod_rewrite_uri_reduced", "true"); } } } return; } /* * add 'http[s]://ourhost[:ourport]/' to URI * if URI is still not fully qualified */ static void fully_qualify_uri(request_rec *r) { if (r->method_number == M_CONNECT) { return; } else if (!is_absolute_uri(r->filename, NULL)) { const char *thisserver; char *thisport; int port; thisserver = ap_get_server_name_for_url(r); port = ap_get_server_port(r); thisport = ap_is_default_port(port, r) ? "" : apr_psprintf(r->pool, ":%u", port); r->filename = apr_psprintf(r->pool, "%s://%s%s%s%s", ap_http_scheme(r), thisserver, thisport, (*r->filename == '/') ? "" : "/", r->filename); } return; } /* * stat() only the first segment of a path */ static int prefix_stat(const char *path, apr_pool_t *pool) { const char *curpath = path; const char *root; const char *slash; char *statpath; apr_status_t rv; rv = apr_filepath_root(&root, &curpath, APR_FILEPATH_TRUENAME, pool); if (rv != APR_SUCCESS) { return 0; } /* let's recognize slashes only, the mod_rewrite semantics are opaque * enough. */ if ((slash = ap_strchr_c(curpath, '/')) != NULL) { rv = apr_filepath_merge(&statpath, root, apr_pstrndup(pool, curpath, (apr_size_t)(slash - curpath)), APR_FILEPATH_NOTABOVEROOT | APR_FILEPATH_NOTRELATIVE, pool); } else { rv = apr_filepath_merge(&statpath, root, curpath, APR_FILEPATH_NOTABOVEROOT | APR_FILEPATH_NOTRELATIVE, pool); } if (rv == APR_SUCCESS) { apr_finfo_t sb; if (apr_stat(&sb, statpath, APR_FINFO_MIN, pool) == APR_SUCCESS) { return 1; } } return 0; } /* * substitute the prefix path 'match' in 'input' with 'subst' (RewriteBase) */ static char *subst_prefix_path(request_rec *r, char *input, const char *match, const char *subst) { apr_size_t len = strlen(match); if (len && match[len - 1] == '/') { --len; } if (!strncmp(input, match, len) && input[len++] == '/') { apr_size_t slen, outlen; char *output; rewritelog((r, 5, NULL, "strip matching prefix: %s -> %s", input, input+len)); slen = strlen(subst); if (slen && subst[slen - 1] != '/') { ++slen; } outlen = strlen(input) + slen - len; output = apr_palloc(r->pool, outlen + 1); /* don't forget the \0 */ memcpy(output, subst, slen); if (slen && !output[slen-1]) { output[slen-1] = '/'; } memcpy(output+slen, input+len, outlen - slen); output[outlen] = '\0'; rewritelog((r, 4, NULL, "add subst prefix: %s -> %s", input+len, output)); return output; } /* prefix didn't match */ return input; } /* * +-------------------------------------------------------+ * | | * | caching support * | | * +-------------------------------------------------------+ */ static void set_cache_value(const char *name, apr_time_t t, char *key, char *val) { cachedmap *map; if (cachep) { #if APR_HAS_THREADS apr_thread_mutex_lock(cachep->lock); #endif map = apr_hash_get(cachep->maps, name, APR_HASH_KEY_STRING); if (!map) { apr_pool_t *p; if (apr_pool_create(&p, cachep->pool) != APR_SUCCESS) { #if APR_HAS_THREADS apr_thread_mutex_unlock(cachep->lock); #endif return; } map = apr_palloc(cachep->pool, sizeof(cachedmap)); map->pool = p; map->entries = apr_hash_make(map->pool); map->mtime = t; apr_hash_set(cachep->maps, name, APR_HASH_KEY_STRING, map); } else if (map->mtime != t) { apr_pool_clear(map->pool); map->entries = apr_hash_make(map->pool); map->mtime = t; } /* Now we should have a valid map->entries hash, where we * can store our value. * * We need to copy the key and the value into OUR pool, * so that we don't leave it during the r->pool cleanup. */ apr_hash_set(map->entries, apr_pstrdup(map->pool, key), APR_HASH_KEY_STRING, apr_pstrdup(map->pool, val)); #if APR_HAS_THREADS apr_thread_mutex_unlock(cachep->lock); #endif } return; } static char *get_cache_value(const char *name, apr_time_t t, char *key, apr_pool_t *p) { cachedmap *map; char *val = NULL; if (cachep) { #if APR_HAS_THREADS apr_thread_mutex_lock(cachep->lock); #endif map = apr_hash_get(cachep->maps, name, APR_HASH_KEY_STRING); if (map) { /* if this map is outdated, forget it. */ if (map->mtime != t) { apr_pool_clear(map->pool); map->entries = apr_hash_make(map->pool); map->mtime = t; } else { val = apr_hash_get(map->entries, key, APR_HASH_KEY_STRING); if (val) { /* copy the cached value into the supplied pool, * where it belongs (r->pool usually) */ val = apr_pstrdup(p, val); } } } #if APR_HAS_THREADS apr_thread_mutex_unlock(cachep->lock); #endif } return val; } static int init_cache(apr_pool_t *p) { cachep = apr_palloc(p, sizeof(cache)); if (apr_pool_create(&cachep->pool, p) != APR_SUCCESS) { cachep = NULL; /* turns off cache */ return 0; } cachep->maps = apr_hash_make(cachep->pool); #if APR_HAS_THREADS (void)apr_thread_mutex_create(&(cachep->lock), APR_THREAD_MUTEX_DEFAULT, p); #endif return 1; } /* * +-------------------------------------------------------+ * | | * | Map Functions * | | * +-------------------------------------------------------+ */ /* * General Note: key is already a fresh string, created (expanded) just * for the purpose to be passed in here. So one can modify key itself. */ static char *rewrite_mapfunc_toupper(request_rec *r, char *key) { ap_str_toupper(key); return key; } static char *rewrite_mapfunc_tolower(request_rec *r, char *key) { ap_str_tolower(key); return key; } static char *rewrite_mapfunc_escape(request_rec *r, char *key) { return ap_escape_uri(r->pool, key); } static char *rewrite_mapfunc_unescape(request_rec *r, char *key) { ap_unescape_url(key); return key; } static char *select_random_value_part(request_rec *r, char *value) { char *p = value; unsigned n = 1; /* count number of distinct values */ while ((p = ap_strchr(p, '|')) != NULL) { ++n; ++p; } if (n > 1) { n = ap_random_pick(1, n); /* extract it from the whole string */ while (--n && (value = ap_strchr(value, '|')) != NULL) { ++value; } if (value) { /* should not be NULL, but ... */ p = ap_strchr(value, '|'); if (p) { *p = '\0'; } } } return value; } /* child process code */ static void rewrite_child_errfn(apr_pool_t *p, apr_status_t err, const char *desc) { ap_log_error(APLOG_MARK, APLOG_ERR, err, NULL, APLOGNO(00653) "%s", desc); } static apr_status_t rewritemap_program_child(apr_pool_t *p, const char *progname, char **argv, const char *user, const char *group, apr_file_t **fpout, apr_file_t **fpin) { apr_status_t rc; apr_procattr_t *procattr; apr_proc_t *procnew; if ( APR_SUCCESS == (rc=apr_procattr_create(&procattr, p)) && APR_SUCCESS == (rc=apr_procattr_io_set(procattr, APR_FULL_BLOCK, APR_FULL_BLOCK, APR_NO_PIPE)) && APR_SUCCESS == (rc=apr_procattr_dir_set(procattr, ap_make_dirstr_parent(p, argv[0]))) && (!user || APR_SUCCESS == (rc=apr_procattr_user_set(procattr, user, ""))) && (!group || APR_SUCCESS == (rc=apr_procattr_group_set(procattr, group))) && APR_SUCCESS == (rc=apr_procattr_cmdtype_set(procattr, APR_PROGRAM)) && APR_SUCCESS == (rc=apr_procattr_child_errfn_set(procattr, rewrite_child_errfn)) && APR_SUCCESS == (rc=apr_procattr_error_check_set(procattr, 1))) { procnew = apr_pcalloc(p, sizeof(*procnew)); rc = apr_proc_create(procnew, argv[0], (const char **)argv, NULL, procattr, p); if (rc == APR_SUCCESS) { apr_pool_note_subprocess(p, procnew, APR_KILL_AFTER_TIMEOUT); if (fpin) { (*fpin) = procnew->in; } if (fpout) { (*fpout) = procnew->out; } } } return (rc); } static apr_status_t run_rewritemap_programs(server_rec *s, apr_pool_t *p) { rewrite_server_conf *conf; apr_hash_index_t *hi; apr_status_t rc; conf = ap_get_module_config(s->module_config, &rewrite_module); /* If the engine isn't turned on, * don't even try to do anything. */ if (conf->state == ENGINE_DISABLED) { return APR_SUCCESS; } for (hi = apr_hash_first(p, conf->rewritemaps); hi; hi = apr_hash_next(hi)){ apr_file_t *fpin = NULL; apr_file_t *fpout = NULL; rewritemap_entry *map; void *val; apr_hash_this(hi, NULL, NULL, &val); map = val; if (map->type != MAPTYPE_PRG) { continue; } if (!(map->argv[0]) || !*(map->argv[0]) || map->fpin || map->fpout) { continue; } rc = rewritemap_program_child(p, map->argv[0], map->argv, map->user, map->group, &fpout, &fpin); if (rc != APR_SUCCESS || fpin == NULL || fpout == NULL) { ap_log_error(APLOG_MARK, APLOG_ERR, rc, s, APLOGNO(00654) "mod_rewrite: could not start RewriteMap " "program %s", map->checkfile); return rc; } map->fpin = fpin; map->fpout = fpout; } return APR_SUCCESS; } /* * +-------------------------------------------------------+ * | | * | Lookup functions * | | * +-------------------------------------------------------+ */ static char *lookup_map_txtfile(request_rec *r, const char *file, char *key) { apr_file_t *fp = NULL; char line[REWRITE_MAX_TXT_MAP_LINE + 1]; /* +1 for \0 */ char *value, *keylast; apr_status_t rv; if ((rv = apr_file_open(&fp, file, APR_READ|APR_BUFFERED, APR_OS_DEFAULT, r->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00655) "mod_rewrite: can't open text RewriteMap file %s", file); return NULL; } keylast = key + strlen(key); value = NULL; while (apr_file_gets(line, sizeof(line), fp) == APR_SUCCESS) { char *p, *c; /* ignore comments and lines starting with whitespaces */ if (*line == '#' || apr_isspace(*line)) { continue; } p = line; c = key; while (c < keylast && *p == *c && !apr_isspace(*p)) { ++p; ++c; } /* key doesn't match - ignore. */ if (c != keylast || !apr_isspace(*p)) { continue; } /* jump to the value */ while (apr_isspace(*p)) { ++p; } /* no value? ignore */ if (!*p) { continue; } /* extract the value and return. */ c = p; while (*p && !apr_isspace(*p)) { ++p; } value = apr_pstrmemdup(r->pool, c, p - c); break; } apr_file_close(fp); return value; } static char *lookup_map_dbmfile(request_rec *r, const char *file, const char *dbmtype, char *key) { apr_dbm_t *dbmfp = NULL; apr_datum_t dbmkey; apr_datum_t dbmval; char *value; apr_status_t rv; if ((rv = apr_dbm_open_ex(&dbmfp, dbmtype, file, APR_DBM_READONLY, APR_OS_DEFAULT, r->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00656) "mod_rewrite: can't open DBM RewriteMap %s", file); return NULL; } dbmkey.dptr = key; dbmkey.dsize = strlen(key); if (apr_dbm_fetch(dbmfp, dbmkey, &dbmval) == APR_SUCCESS && dbmval.dptr) { value = apr_pstrmemdup(r->pool, dbmval.dptr, dbmval.dsize); } else { value = NULL; } apr_dbm_close(dbmfp); return value; } static char *lookup_map_dbd(request_rec *r, char *key, const char *label) { apr_status_t rv; apr_dbd_prepared_t *stmt; const char *errmsg; apr_dbd_results_t *res = NULL; apr_dbd_row_t *row = NULL; char *ret = NULL; int n = 0; ap_dbd_t *db = dbd_acquire(r); if (db == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02963) "rewritemap: No db handle available! " "Check your database access"); return NULL; } stmt = apr_hash_get(db->prepared, label, APR_HASH_KEY_STRING); rv = apr_dbd_pvselect(db->driver, r->pool, db->handle, &res, stmt, 0, key, NULL); if (rv != 0) { errmsg = apr_dbd_error(db->driver, db->handle, rv); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00657) "rewritemap: error %s querying for %s", errmsg, key); return NULL; } while ((rv = apr_dbd_get_row(db->driver, r->pool, res, &row, -1)) == 0) { ++n; if (ret == NULL) { ret = apr_pstrdup(r->pool, apr_dbd_get_entry(db->driver, row, 0)); } else { /* randomise crudely amongst multiple results */ if ((double)rand() < (double)RAND_MAX/(double)n) { ret = apr_pstrdup(r->pool, apr_dbd_get_entry(db->driver, row, 0)); } } } if (rv != -1) { errmsg = apr_dbd_error(db->driver, db->handle, rv); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00658) "rewritemap: error %s looking up %s", errmsg, key); } switch (n) { case 0: return NULL; case 1: return ret; default: /* what's a fair rewritelog level for this? */ rewritelog((r, 3, NULL, "Multiple values found for %s", key)); return ret; } } static char *lookup_map_program(request_rec *r, apr_file_t *fpin, apr_file_t *fpout, char *key) { char *buf; char c; apr_size_t i, nbytes, combined_len = 0; apr_status_t rv; const char *eol = APR_EOL_STR; apr_size_t eolc = 0; int found_nl = 0; result_list *buflist = NULL, *curbuf = NULL; #ifndef NO_WRITEV struct iovec iova[2]; apr_size_t niov; #endif /* when `RewriteEngine off' was used in the per-server * context then the rewritemap-programs were not spawned. * In this case using such a map (usually in per-dir context) * is useless because it is not available. * * newlines in the key leave bytes in the pipe and cause * bad things to happen (next map lookup will use the chars * after the \n instead of the new key etc etc - in other words, * the Rewritemap falls out of sync with the requests). */ if (fpin == NULL || fpout == NULL || ap_strchr(key, '\n')) { return NULL; } /* take the lock */ if (rewrite_mapr_lock_acquire) { rv = apr_global_mutex_lock(rewrite_mapr_lock_acquire); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00659) "apr_global_mutex_lock(rewrite_mapr_lock_acquire) " "failed"); return NULL; /* Maybe this should be fatal? */ } } /* write out the request key */ #ifdef NO_WRITEV nbytes = strlen(key); /* XXX: error handling */ apr_file_write_full(fpin, key, nbytes, NULL); nbytes = 1; apr_file_write_full(fpin, "\n", nbytes, NULL); #else iova[0].iov_base = key; iova[0].iov_len = strlen(key); iova[1].iov_base = "\n"; iova[1].iov_len = 1; niov = 2; /* XXX: error handling */ apr_file_writev_full(fpin, iova, niov, &nbytes); #endif buf = apr_palloc(r->pool, REWRITE_PRG_MAP_BUF + 1); /* read in the response value */ nbytes = 1; apr_file_read(fpout, &c, &nbytes); do { i = 0; while (nbytes == 1 && (i < REWRITE_PRG_MAP_BUF)) { if (c == eol[eolc]) { if (!eol[++eolc]) { /* remove eol from the buffer */ --eolc; if (i < eolc) { curbuf->len -= eolc-i; i = 0; } else { i -= eolc; } ++found_nl; break; } } /* only partial (invalid) eol sequence -> reset the counter */ else if (eolc) { eolc = 0; } /* catch binary mode, e.g. on Win32 */ else if (c == '\n') { ++found_nl; break; } buf[i++] = c; apr_file_read(fpout, &c, &nbytes); } /* well, if there wasn't a newline yet, we need to read further */ if (buflist || (nbytes == 1 && !found_nl)) { if (!buflist) { curbuf = buflist = apr_palloc(r->pool, sizeof(*buflist)); } else if (i) { curbuf->next = apr_palloc(r->pool, sizeof(*buflist)); curbuf = curbuf->next; } curbuf->next = NULL; if (i) { curbuf->string = buf; curbuf->len = i; combined_len += i; buf = apr_palloc(r->pool, REWRITE_PRG_MAP_BUF); } if (nbytes == 1 && !found_nl) { continue; } } break; } while (1); /* concat the stuff */ if (buflist) { char *p; p = buf = apr_palloc(r->pool, combined_len + 1); /* \0 */ while (buflist) { if (buflist->len) { memcpy(p, buflist->string, buflist->len); p += buflist->len; } buflist = buflist->next; } *p = '\0'; i = combined_len; } else { buf[i] = '\0'; } /* give the lock back */ if (rewrite_mapr_lock_acquire) { rv = apr_global_mutex_unlock(rewrite_mapr_lock_acquire); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00660) "apr_global_mutex_unlock(rewrite_mapr_lock_acquire) " "failed"); return NULL; /* Maybe this should be fatal? */ } } /* catch the "failed" case */ if (i == 4 && !strcasecmp(buf, "NULL")) { return NULL; } return buf; } /* * generic map lookup */ static char *lookup_map(request_rec *r, char *name, char *key) { rewrite_server_conf *conf; rewritemap_entry *s; char *value; apr_finfo_t st; apr_status_t rv; /* get map configuration */ conf = ap_get_module_config(r->server->module_config, &rewrite_module); s = apr_hash_get(conf->rewritemaps, name, APR_HASH_KEY_STRING); /* map doesn't exist */ if (!s) { return NULL; } switch (s->type) { /* * Text file map (perhaps random) */ case MAPTYPE_RND: case MAPTYPE_TXT: rv = apr_stat(&st, s->checkfile, APR_FINFO_MIN, r->pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00661) "mod_rewrite: can't access text RewriteMap file %s", s->checkfile); return NULL; } value = get_cache_value(s->cachename, st.mtime, key, r->pool); if (!value) { rewritelog((r, 6, NULL, "cache lookup FAILED, forcing new map lookup")); value = lookup_map_txtfile(r, s->datafile, key); if (!value) { rewritelog((r, 5, NULL, "map lookup FAILED: map=%s[txt] key=%s", name, key)); set_cache_value(s->cachename, st.mtime, key, ""); return NULL; } rewritelog((r, 5, NULL,"map lookup OK: map=%s[txt] key=%s -> val=%s", name, key, value)); set_cache_value(s->cachename, st.mtime, key, value); } else { rewritelog((r,5,NULL,"cache lookup OK: map=%s[txt] key=%s -> val=%s", name, key, value)); } if (s->type == MAPTYPE_RND && *value) { value = select_random_value_part(r, value); rewritelog((r, 5, NULL, "randomly chosen the subvalue `%s'",value)); } return *value ? value : NULL; /* * DBM file map */ case MAPTYPE_DBM: rv = apr_stat(&st, s->checkfile, APR_FINFO_MIN, r->pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00662) "mod_rewrite: can't access DBM RewriteMap file %s", s->checkfile); } else if(s->checkfile2 != NULL) { apr_finfo_t st2; rv = apr_stat(&st2, s->checkfile2, APR_FINFO_MIN, r->pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00663) "mod_rewrite: can't access DBM RewriteMap " "file %s", s->checkfile2); } else if(st2.mtime > st.mtime) { st.mtime = st2.mtime; } } if(rv != APR_SUCCESS) { return NULL; } value = get_cache_value(s->cachename, st.mtime, key, r->pool); if (!value) { rewritelog((r, 6, NULL, "cache lookup FAILED, forcing new map lookup")); value = lookup_map_dbmfile(r, s->datafile, s->dbmtype, key); if (!value) { rewritelog((r, 5, NULL, "map lookup FAILED: map=%s[dbm] key=%s", name, key)); set_cache_value(s->cachename, st.mtime, key, ""); return NULL; } rewritelog((r, 5, NULL, "map lookup OK: map=%s[dbm] key=%s -> " "val=%s", name, key, value)); set_cache_value(s->cachename, st.mtime, key, value); return value; } rewritelog((r, 5, NULL, "cache lookup OK: map=%s[dbm] key=%s -> val=%s", name, key, value)); return *value ? value : NULL; /* * SQL map without cache */ case MAPTYPE_DBD: value = lookup_map_dbd(r, key, s->dbdq); if (!value) { rewritelog((r, 5, NULL, "SQL map lookup FAILED: map %s key=%s", name, key)); return NULL; } rewritelog((r, 5, NULL, "SQL map lookup OK: map %s key=%s, val=%s", name, key, value)); return value; /* * SQL map with cache */ case MAPTYPE_DBD_CACHE: value = get_cache_value(s->cachename, 0, key, r->pool); if (!value) { rewritelog((r, 6, NULL, "cache lookup FAILED, forcing new map lookup")); value = lookup_map_dbd(r, key, s->dbdq); if (!value) { rewritelog((r, 5, NULL, "SQL map lookup FAILED: map %s key=%s", name, key)); set_cache_value(s->cachename, 0, key, ""); return NULL; } rewritelog((r, 5, NULL, "SQL map lookup OK: map %s key=%s, val=%s", name, key, value)); set_cache_value(s->cachename, 0, key, value); return value; } rewritelog((r, 5, NULL, "cache lookup OK: map=%s[SQL] key=%s, val=%s", name, key, value)); return *value ? value : NULL; /* * Program file map */ case MAPTYPE_PRG: value = lookup_map_program(r, s->fpin, s->fpout, key); if (!value) { rewritelog((r, 5,NULL,"map lookup FAILED: map=%s key=%s", name, key)); return NULL; } rewritelog((r, 5, NULL, "map lookup OK: map=%s key=%s -> val=%s", name, key, value)); return value; /* * Internal Map */ case MAPTYPE_INT: value = s->func(r, key); if (!value) { rewritelog((r, 5,NULL,"map lookup FAILED: map=%s key=%s", name, key)); return NULL; } rewritelog((r, 5, NULL, "map lookup OK: map=%s key=%s -> val=%s", name, key, value)); return value; } return NULL; } /* * lookup a HTTP header and set VARY note */ static const char *lookup_header(const char *name, rewrite_ctx *ctx) { const char *val = apr_table_get(ctx->r->headers_in, name); /* Skip the 'Vary: Host' header combination * as indicated in rfc7231 section-7.1.4 */ if (val && strcasecmp(name, "Host") != 0) { ctx->vary_this = ctx->vary_this ? apr_pstrcat(ctx->r->pool, ctx->vary_this, ", ", name, NULL) : apr_pstrdup(ctx->r->pool, name); } return val; } /* * lookahead helper function * Determine the correct URI path in perdir context */ static APR_INLINE const char *la_u(rewrite_ctx *ctx) { rewrite_perdir_conf *conf; if (*ctx->uri == '/') { return ctx->uri; } conf = ap_get_module_config(ctx->r->per_dir_config, &rewrite_module); return apr_pstrcat(ctx->r->pool, conf->baseurl ? conf->baseurl : conf->directory, ctx->uri, NULL); } /* * generic variable lookup */ static char *lookup_variable(char *var, rewrite_ctx *ctx) { const char *result; request_rec *r = ctx->r; apr_size_t varlen = strlen(var); /* fast exit */ if (varlen < 4) { return ""; } result = NULL; /* fast tests for variable length variables (sic) first */ if (var[3] == ':') { if (var[4] && !strncasecmp(var, "ENV", 3)) { var += 4; result = apr_table_get(r->notes, var); if (!result) { result = apr_table_get(r->subprocess_env, var); } if (!result) { result = getenv(var); } } else if (var[4] && !strncasecmp(var, "SSL", 3) && rewrite_ssl_lookup) { result = rewrite_ssl_lookup(r->pool, r->server, r->connection, r, var + 4); } } else if (var[4] == ':') { if (var[5]) { request_rec *rr; const char *path; if (!strncasecmp(var, "HTTP", 4)) { result = lookup_header(var+5, ctx); } else if (!strncasecmp(var, "LA-U", 4)) { if (ctx->uri && subreq_ok(r)) { path = ctx->perdir ? la_u(ctx) : ctx->uri; rr = ap_sub_req_lookup_uri(path, r, NULL); ctx->r = rr; result = apr_pstrdup(r->pool, lookup_variable(var+5, ctx)); ctx->r = r; ap_destroy_sub_req(rr); rewritelog((r, 5, ctx->perdir, "lookahead: path=%s var=%s " "-> val=%s", path, var+5, result)); return (char *)result; } } else if (!strncasecmp(var, "LA-F", 4)) { if (ctx->uri && subreq_ok(r)) { path = ctx->uri; if (ctx->perdir && *path == '/') { /* sigh, the user wants a file based subrequest, but * we can't do one, since we don't know what the file * path is! In this case behave like LA-U. */ rr = ap_sub_req_lookup_uri(path, r, NULL); } else { if (ctx->perdir) { rewrite_perdir_conf *conf; conf = ap_get_module_config(r->per_dir_config, &rewrite_module); path = apr_pstrcat(r->pool, conf->directory, path, NULL); } rr = ap_sub_req_lookup_file(path, r, NULL); } ctx->r = rr; result = apr_pstrdup(r->pool, lookup_variable(var+5, ctx)); ctx->r = r; ap_destroy_sub_req(rr); rewritelog((r, 5, ctx->perdir, "lookahead: path=%s var=%s " "-> val=%s", path, var+5, result)); return (char *)result; } } } } /* well, do it the hard way */ else { apr_time_exp_t tm; /* can't do this above, because of the getenv call */ ap_str_toupper(var); switch (varlen) { case 4: if (!strcmp(var, "TIME")) { apr_time_exp_lt(&tm, apr_time_now()); result = apr_psprintf(r->pool, "%04d%02d%02d%02d%02d%02d", tm.tm_year+1900, tm.tm_mon+1, tm.tm_mday, tm.tm_hour, tm.tm_min, tm.tm_sec); rewritelog((r, 1, ctx->perdir, "RESULT='%s'", result)); return (char *)result; } else if (!strcmp(var, "IPV6")) { int flag = FALSE; #if APR_HAVE_IPV6 apr_sockaddr_t *addr = r->useragent_addr; flag = (addr->family == AF_INET6 && !IN6_IS_ADDR_V4MAPPED((struct in6_addr *)addr->ipaddr_ptr)); rewritelog((r, 1, ctx->perdir, "IPV6='%s'", flag ? "on" : "off")); #else rewritelog((r, 1, ctx->perdir, "IPV6='off' (IPv6 is not enabled)")); #endif result = (flag ? "on" : "off"); } break; case 5: if (!strcmp(var, "HTTPS")) { int flag = rewrite_is_https && rewrite_is_https(r->connection); return apr_pstrdup(r->pool, flag ? "on" : "off"); } break; case 8: switch (var[6]) { case 'A': if (!strcmp(var, "TIME_DAY")) { apr_time_exp_lt(&tm, apr_time_now()); return apr_psprintf(r->pool, "%02d", tm.tm_mday); } break; case 'E': if (!strcmp(var, "TIME_SEC")) { apr_time_exp_lt(&tm, apr_time_now()); return apr_psprintf(r->pool, "%02d", tm.tm_sec); } break; case 'I': if (!strcmp(var, "TIME_MIN")) { apr_time_exp_lt(&tm, apr_time_now()); return apr_psprintf(r->pool, "%02d", tm.tm_min); } break; case 'O': if (!strcmp(var, "TIME_MON")) { apr_time_exp_lt(&tm, apr_time_now()); return apr_psprintf(r->pool, "%02d", tm.tm_mon+1); } break; } break; case 9: switch (var[7]) { case 'A': if (var[8] == 'Y' && !strcmp(var, "TIME_WDAY")) { apr_time_exp_lt(&tm, apr_time_now()); return apr_psprintf(r->pool, "%d", tm.tm_wday); } else if (!strcmp(var, "TIME_YEAR")) { apr_time_exp_lt(&tm, apr_time_now()); return apr_psprintf(r->pool, "%04d", tm.tm_year+1900); } break; case 'E': if (!strcmp(var, "IS_SUBREQ")) { result = (r->main ? "true" : "false"); } break; case 'F': if (!strcmp(var, "PATH_INFO")) { result = r->path_info; } break; case 'P': if (!strcmp(var, "AUTH_TYPE")) { result = r->ap_auth_type; } break; case 'S': if (!strcmp(var, "HTTP_HOST")) { result = lookup_header("Host", ctx); } break; case 'U': if (!strcmp(var, "TIME_HOUR")) { apr_time_exp_lt(&tm, apr_time_now()); return apr_psprintf(r->pool, "%02d", tm.tm_hour); } break; } break; case 11: switch (var[8]) { case 'A': if (!strcmp(var, "SERVER_NAME")) { result = ap_get_server_name_for_url(r); } break; case 'D': if (*var == 'R' && !strcmp(var, "REMOTE_ADDR")) { result = r->useragent_ip; } else if (!strcmp(var, "SERVER_ADDR")) { result = r->connection->local_ip; } break; case 'E': if (*var == 'H' && !strcmp(var, "HTTP_ACCEPT")) { result = lookup_header("Accept", ctx); } else if (!strcmp(var, "THE_REQUEST")) { result = r->the_request; } break; case 'I': if (!strcmp(var, "API_VERSION")) { return apr_psprintf(r->pool, "%d:%d", MODULE_MAGIC_NUMBER_MAJOR, MODULE_MAGIC_NUMBER_MINOR); } break; case 'K': if (!strcmp(var, "HTTP_COOKIE")) { result = lookup_header("Cookie", ctx); } break; case 'O': if (*var == 'S' && !strcmp(var, "SERVER_PORT")) { return apr_psprintf(r->pool, "%u", ap_get_server_port(r)); } else if (var[7] == 'H' && !strcmp(var, "REMOTE_HOST")) { result = ap_get_remote_host(r->connection,r->per_dir_config, REMOTE_NAME, NULL); } else if (!strcmp(var, "REMOTE_PORT")) { return apr_itoa(r->pool, r->useragent_addr->port); } break; case 'S': if (*var == 'R' && !strcmp(var, "REMOTE_USER")) { result = r->user; } else if (!strcmp(var, "SCRIPT_USER")) { result = ""; if (r->finfo.valid & APR_FINFO_USER) { apr_uid_name_get((char **)&result, r->finfo.user, r->pool); } } break; case 'U': if (!strcmp(var, "REQUEST_URI")) { result = r->uri; } break; } break; case 12: switch (var[3]) { case 'I': if (!strcmp(var, "SCRIPT_GROUP")) { result = ""; if (r->finfo.valid & APR_FINFO_GROUP) { apr_gid_name_get((char **)&result, r->finfo.group, r->pool); } } break; case 'O': if (!strcmp(var, "REMOTE_IDENT")) { result = ap_get_remote_logname(r); } break; case 'P': if (!strcmp(var, "HTTP_REFERER")) { result = lookup_header("Referer", ctx); } break; case 'R': if (!strcmp(var, "QUERY_STRING")) { result = r->args; } break; case 'V': if (!strcmp(var, "SERVER_ADMIN")) { result = r->server->server_admin; } break; } break; case 13: if (!strcmp(var, "DOCUMENT_ROOT")) { result = ap_document_root(r); } break; case 14: if (*var == 'H' && !strcmp(var, "HTTP_FORWARDED")) { result = lookup_header("Forwarded", ctx); } else if (*var == 'C' && !strcmp(var, "CONTEXT_PREFIX")) { result = ap_context_prefix(r); } else if (var[8] == 'M' && !strcmp(var, "REQUEST_METHOD")) { result = r->method; } else if (!strcmp(var, "REQUEST_SCHEME")) { result = ap_http_scheme(r); } break; case 15: switch (var[7]) { case 'E': if (!strcmp(var, "HTTP_USER_AGENT")) { result = lookup_header("User-Agent", ctx); } break; case 'F': if (!strcmp(var, "SCRIPT_FILENAME")) { result = r->filename; /* same as request_filename (16) */ } break; case 'P': if (!strcmp(var, "SERVER_PROTOCOL")) { result = r->protocol; } break; case 'S': if (!strcmp(var, "SERVER_SOFTWARE")) { result = ap_get_server_banner(); } break; } break; case 16: if (*var == 'C' && !strcmp(var, "CONN_REMOTE_ADDR")) { result = r->connection->client_ip; } else if (!strcmp(var, "REQUEST_FILENAME")) { result = r->filename; /* same as script_filename (15) */ } break; case 21: if (!strcmp(var, "HTTP_PROXY_CONNECTION")) { result = lookup_header("Proxy-Connection", ctx); } else if (!strcmp(var, "CONTEXT_DOCUMENT_ROOT")) { result = ap_context_document_root(r); } break; } } return apr_pstrdup(r->pool, result ? result : ""); } /* * +-------------------------------------------------------+ * | | * | Expansion functions * | | * +-------------------------------------------------------+ */ /* * Bracketed expression handling * s points after the opening bracket */ static APR_INLINE char *find_closing_curly(char *s) { unsigned depth; for (depth = 1; *s; ++s) { if (*s == RIGHT_CURLY && --depth == 0) { return s; } else if (*s == LEFT_CURLY) { ++depth; } } return NULL; } static APR_INLINE char *find_char_in_curlies(char *s, int c) { unsigned depth; for (depth = 1; *s; ++s) { if (*s == c && depth == 1) { return s; } else if (*s == RIGHT_CURLY && --depth == 0) { return NULL; } else if (*s == LEFT_CURLY) { ++depth; } } return NULL; } /* perform all the expansions on the input string * putting the result into a new string * * for security reasons this expansion must be performed in a * single pass, otherwise an attacker can arrange for the result * of an earlier expansion to include expansion specifiers that * are interpreted by a later expansion, producing results that * were not intended by the administrator. */ static char *do_expand(char *input, rewrite_ctx *ctx, rewriterule_entry *entry) { result_list *result, *current; result_list sresult[SMALL_EXPANSION]; unsigned spc = 0; apr_size_t span, inputlen, outlen; char *p, *c; apr_pool_t *pool = ctx->r->pool; span = strcspn(input, "\\$%"); inputlen = strlen(input); /* fast exit */ if (inputlen == span) { return apr_pstrmemdup(pool, input, inputlen); } /* well, actually something to do */ result = current = &(sresult[spc++]); p = input + span; current->next = NULL; current->string = input; current->len = span; outlen = span; /* loop for specials */ do { /* prepare next entry */ if (current->len) { current->next = (spc < SMALL_EXPANSION) ? &(sresult[spc++]) : (result_list *)apr_palloc(pool, sizeof(result_list)); current = current->next; current->next = NULL; current->len = 0; } /* escaped character */ if (*p == '\\') { current->len = 1; ++outlen; if (!p[1]) { current->string = p; break; } else { current->string = ++p; ++p; } } /* variable or map lookup */ else if (p[1] == '{') { char *endp; endp = find_closing_curly(p+2); if (!endp) { current->len = 2; current->string = p; outlen += 2; p += 2; } /* variable lookup */ else if (*p == '%') { p = lookup_variable(apr_pstrmemdup(pool, p+2, endp-p-2), ctx); span = strlen(p); current->len = span; current->string = p; outlen += span; p = endp + 1; } /* map lookup */ else { /* *p == '$' */ char *key; /* * To make rewrite maps useful, the lookup key and * default values must be expanded, so we make * recursive calls to do the work. For security * reasons we must never expand a string that includes * verbatim data from the network. The recursion here * isn't a problem because the result of expansion is * only passed to lookup_map() so it cannot be * re-expanded, only re-looked-up. Another way of * looking at it is that the recursion is entirely * driven by the syntax of the nested curly brackets. */ key = find_char_in_curlies(p+2, ':'); if (!key) { current->len = 2; current->string = p; outlen += 2; p += 2; } else { char *map, *dflt; map = apr_pstrmemdup(pool, p+2, endp-p-2); key = map + (key-p-2); *key++ = '\0'; dflt = find_char_in_curlies(key, '|'); if (dflt) { *dflt++ = '\0'; } /* reuse of key variable as result */ key = lookup_map(ctx->r, map, do_expand(key, ctx, entry)); if (!key && dflt && *dflt) { key = do_expand(dflt, ctx, entry); } if (key) { span = strlen(key); current->len = span; current->string = key; outlen += span; } p = endp + 1; } } } /* backreference */ else if (apr_isdigit(p[1])) { int n = p[1] - '0'; backrefinfo *bri = (*p == '$') ? &ctx->briRR : &ctx->briRC; /* see ap_pregsub() in server/util.c */ if (bri->source && n < AP_MAX_REG_MATCH && bri->regmatch[n].rm_eo > bri->regmatch[n].rm_so) { span = bri->regmatch[n].rm_eo - bri->regmatch[n].rm_so; if (entry && (entry->flags & RULEFLAG_ESCAPEBACKREF)) { /* escape the backreference */ char *tmp2, *tmp; tmp = apr_pstrmemdup(pool, bri->source + bri->regmatch[n].rm_so, span); tmp2 = escape_backref(pool, tmp, entry->escapes, entry->flags & RULEFLAG_ESCAPENOPLUS); rewritelog((ctx->r, 5, ctx->perdir, "escaping backreference '%s' to '%s'", tmp, tmp2)); current->len = span = strlen(tmp2); current->string = tmp2; } else { current->len = span; current->string = bri->source + bri->regmatch[n].rm_so; } outlen += span; } p += 2; } /* not for us, just copy it */ else { current->len = 1; current->string = p++; ++outlen; } /* check the remainder */ if (*p && (span = strcspn(p, "\\$%")) > 0) { if (current->len) { current->next = (spc < SMALL_EXPANSION) ? &(sresult[spc++]) : (result_list *)apr_palloc(pool, sizeof(result_list)); current = current->next; current->next = NULL; } current->len = span; current->string = p; p += span; outlen += span; } } while (p < input+inputlen); /* assemble result */ c = p = apr_palloc(pool, outlen + 1); /* don't forget the \0 */ do { if (result->len) { ap_assert(c+result->len <= p+outlen); /* XXX: can be removed after * extensive testing and * review */ memcpy(c, result->string, result->len); c += result->len; } result = result->next; } while (result); p[outlen] = '\0'; return p; } /* * perform all the expansions on the environment variables */ static void do_expand_env(data_item *env, rewrite_ctx *ctx) { char *name, *val; while (env) { name = do_expand(env->data, ctx, NULL); if (*name == '!') { name++; apr_table_unset(ctx->r->subprocess_env, name); rewritelog((ctx->r, 5, NULL, "unsetting env variable '%s'", name)); } else { if ((val = ap_strchr(name, ':')) != NULL) { *val++ = '\0'; } else { val = ""; } apr_table_set(ctx->r->subprocess_env, name, val); rewritelog((ctx->r, 5, NULL, "setting env variable '%s' to '%s'", name, val)); } env = env->next; } return; } /* * perform all the expansions on the cookies * * TODO: use cached time similar to how logging does it */ static void add_cookie(request_rec *r, char *s) { char *var; char *val; char *domain; char *expires; char *path; char *secure; char *httponly; char *tok_cntx; char *cookie; /* long-standing default, but can't use ':' in a cookie */ const char *sep = ":"; /* opt-in to ; separator if first character is a ; */ if (s && *s == ';') { sep = ";"; s++; } var = apr_strtok(s, sep, &tok_cntx); val = apr_strtok(NULL, sep, &tok_cntx); domain = apr_strtok(NULL, sep, &tok_cntx); if (var && val && domain) { request_rec *rmain = r; char *notename; void *data; while (rmain->main) { rmain = rmain->main; } notename = apr_pstrcat(rmain->pool, var, "_rewrite", NULL); apr_pool_userdata_get(&data, notename, rmain->pool); if (!data) { char *exp_time = NULL; expires = apr_strtok(NULL, sep, &tok_cntx); path = expires ? apr_strtok(NULL, sep, &tok_cntx) : NULL; secure = path ? apr_strtok(NULL, sep, &tok_cntx) : NULL; httponly = secure ? apr_strtok(NULL, sep, &tok_cntx) : NULL; if (expires) { apr_time_exp_t tms; long exp_min; exp_min = atol(expires); if (exp_min) { apr_time_exp_gmt(&tms, r->request_time + apr_time_from_sec((60 * exp_min))); exp_time = apr_psprintf(r->pool, "%s, %.2d-%s-%.4d " "%.2d:%.2d:%.2d GMT", apr_day_snames[tms.tm_wday], tms.tm_mday, apr_month_snames[tms.tm_mon], tms.tm_year+1900, tms.tm_hour, tms.tm_min, tms.tm_sec); } } cookie = apr_pstrcat(rmain->pool, var, "=", val, "; path=", path ? path : "/", "; domain=", domain, expires ? (exp_time ? "; expires=" : "") : NULL, expires ? (exp_time ? exp_time : "") : NULL, (secure && (!strcasecmp(secure, "true") || !strcmp(secure, "1") || !strcasecmp(secure, "secure"))) ? "; secure" : NULL, (httponly && (!strcasecmp(httponly, "true") || !strcmp(httponly, "1") || !strcasecmp(httponly, "HttpOnly"))) ? "; HttpOnly" : NULL, NULL); apr_table_addn(rmain->err_headers_out, "Set-Cookie", cookie); apr_pool_userdata_set("set", notename, NULL, rmain->pool); rewritelog((rmain, 5, NULL, "setting cookie '%s'", cookie)); } else { rewritelog((rmain, 5, NULL, "skipping already set cookie '%s'", var)); } } return; } static void do_expand_cookie(data_item *cookie, rewrite_ctx *ctx) { while (cookie) { add_cookie(ctx->r, do_expand(cookie->data, ctx, NULL)); cookie = cookie->next; } return; } #if APR_HAS_USER /* * Expand tilde-paths (/~user) through Unix /etc/passwd * database information (or other OS-specific database) */ static char *expand_tildepaths(request_rec *r, char *uri) { if (uri && *uri == '/' && uri[1] == '~') { char *p, *user; p = user = uri + 2; while (*p && *p != '/') { ++p; } if (p > user) { char *homedir; user = apr_pstrmemdup(r->pool, user, p-user); if (apr_uid_homepath_get(&homedir, user, r->pool) == APR_SUCCESS) { if (*p) { /* reuse of user variable */ user = homedir + strlen(homedir) - 1; if (user >= homedir && *user == '/') { *user = '\0'; } return apr_pstrcat(r->pool, homedir, p, NULL); } else { return homedir; } } } } return uri; } #endif /* if APR_HAS_USER */ /* * +-------------------------------------------------------+ * | | * | rewriting lockfile support * | | * +-------------------------------------------------------+ */ static apr_status_t rewritelock_create(server_rec *s, apr_pool_t *p) { apr_status_t rc; /* create the lockfile */ rc = ap_global_mutex_create(&rewrite_mapr_lock_acquire, NULL, rewritemap_mutex_type, NULL, s, p, 0); if (rc != APR_SUCCESS) { return rc; } return APR_SUCCESS; } static apr_status_t rewritelock_remove(void *data) { /* destroy the rewritelock */ if (rewrite_mapr_lock_acquire) { apr_global_mutex_destroy(rewrite_mapr_lock_acquire); rewrite_mapr_lock_acquire = NULL; } return APR_SUCCESS; } /* * +-------------------------------------------------------+ * | | * | configuration directive handling * | | * +-------------------------------------------------------+ */ /* * own command line parser for RewriteRule and RewriteCond, * which doesn't have the '\\' problem. * (returns true on error) * * XXX: what an inclined parser. Seems we have to leave it so * for backwards compat. *sigh* */ static int parseargline(char *str, char **a1, char **a2, char **a3) { char quote; while (apr_isspace(*str)) { ++str; } /* * determine first argument */ quote = (*str == '"' || *str == '\'') ? *str++ : '\0'; *a1 = str; for (; *str; ++str) { if ((apr_isspace(*str) && !quote) || (*str == quote)) { break; } if (*str == '\\' && apr_isspace(str[1])) { ++str; continue; } } if (!*str) { return 1; } *str++ = '\0'; while (apr_isspace(*str)) { ++str; } /* * determine second argument */ quote = (*str == '"' || *str == '\'') ? *str++ : '\0'; *a2 = str; for (; *str; ++str) { if ((apr_isspace(*str) && !quote) || (*str == quote)) { break; } if (*str == '\\' && apr_isspace(str[1])) { ++str; continue; } } if (!*str) { *a3 = NULL; /* 3rd argument is optional */ return 0; } *str++ = '\0'; while (apr_isspace(*str)) { ++str; } if (!*str) { *a3 = NULL; /* 3rd argument is still optional */ return 0; } /* * determine third argument */ quote = (*str == '"' || *str == '\'') ? *str++ : '\0'; *a3 = str; for (; *str; ++str) { if ((apr_isspace(*str) && !quote) || (*str == quote)) { break; } if (*str == '\\' && apr_isspace(str[1])) { ++str; continue; } } *str = '\0'; return 0; } static void *config_server_create(apr_pool_t *p, server_rec *s) { rewrite_server_conf *a; a = (rewrite_server_conf *)apr_pcalloc(p, sizeof(rewrite_server_conf)); a->state = ENGINE_DISABLED; a->options = OPTION_NONE; a->rewritemaps = apr_hash_make(p); a->rewriteconds = apr_array_make(p, 2, sizeof(rewritecond_entry)); a->rewriterules = apr_array_make(p, 2, sizeof(rewriterule_entry)); a->server = s; return (void *)a; } static void *config_server_merge(apr_pool_t *p, void *basev, void *overridesv) { rewrite_server_conf *a, *base, *overrides; a = (rewrite_server_conf *)apr_pcalloc(p, sizeof(rewrite_server_conf)); base = (rewrite_server_conf *)basev; overrides = (rewrite_server_conf *)overridesv; a->state = (overrides->state_set == 0) ? base->state : overrides->state; a->state_set = overrides->state_set || base->state_set; a->options = (overrides->options_set == 0) ? base->options : overrides->options; a->options_set = overrides->options_set || base->options_set; a->server = overrides->server; if (a->options & OPTION_INHERIT || (base->options & OPTION_INHERIT_DOWN && !(a->options & OPTION_IGNORE_INHERIT))) { /* * local directives override * and anything else is inherited */ a->rewritemaps = apr_hash_overlay(p, overrides->rewritemaps, base->rewritemaps); a->rewriteconds = apr_array_append(p, overrides->rewriteconds, base->rewriteconds); a->rewriterules = apr_array_append(p, overrides->rewriterules, base->rewriterules); } else if (a->options & OPTION_INHERIT_BEFORE || (base->options & OPTION_INHERIT_DOWN_BEFORE && !(a->options & OPTION_IGNORE_INHERIT))) { /* * local directives override * and anything else is inherited (preserving order) */ a->rewritemaps = apr_hash_overlay(p, base->rewritemaps, overrides->rewritemaps); a->rewriteconds = apr_array_append(p, base->rewriteconds, overrides->rewriteconds); a->rewriterules = apr_array_append(p, base->rewriterules, overrides->rewriterules); } else { /* * local directives override * and anything else gets defaults */ a->rewritemaps = overrides->rewritemaps; a->rewriteconds = overrides->rewriteconds; a->rewriterules = overrides->rewriterules; } return (void *)a; } static void *config_perdir_create(apr_pool_t *p, char *path) { rewrite_perdir_conf *a; a = (rewrite_perdir_conf *)apr_pcalloc(p, sizeof(rewrite_perdir_conf)); a->state = ENGINE_DISABLED; a->options = OPTION_NONE; a->baseurl = NULL; a->rewriteconds = apr_array_make(p, 2, sizeof(rewritecond_entry)); a->rewriterules = apr_array_make(p, 2, sizeof(rewriterule_entry)); if (path == NULL) { a->directory = NULL; } else { /* make sure it has a trailing slash */ if (path[strlen(path)-1] == '/') { a->directory = apr_pstrdup(p, path); } else { a->directory = apr_pstrcat(p, path, "/", NULL); } } return (void *)a; } static void *config_perdir_merge(apr_pool_t *p, void *basev, void *overridesv) { rewrite_perdir_conf *a, *base, *overrides; a = (rewrite_perdir_conf *)apr_pcalloc(p, sizeof(rewrite_perdir_conf)); base = (rewrite_perdir_conf *)basev; overrides = (rewrite_perdir_conf *)overridesv; a->state = (overrides->state_set == 0) ? base->state : overrides->state; a->state_set = overrides->state_set || base->state_set; a->options = (overrides->options_set == 0) ? base->options : overrides->options; a->options_set = overrides->options_set || base->options_set; if (a->options & OPTION_MERGEBASE) { a->baseurl = (overrides->baseurl_set == 0) ? base->baseurl : overrides->baseurl; a->baseurl_set = overrides->baseurl_set || base->baseurl_set; } else { a->baseurl = overrides->baseurl; } a->directory = overrides->directory; if (a->options & OPTION_INHERIT || (base->options & OPTION_INHERIT_DOWN && !(a->options & OPTION_IGNORE_INHERIT))) { a->rewriteconds = apr_array_append(p, overrides->rewriteconds, base->rewriteconds); a->rewriterules = apr_array_append(p, overrides->rewriterules, base->rewriterules); } else if (a->options & OPTION_INHERIT_BEFORE || (base->options & OPTION_INHERIT_DOWN_BEFORE && !(a->options & OPTION_IGNORE_INHERIT))) { a->rewriteconds = apr_array_append(p, base->rewriteconds, overrides->rewriteconds); a->rewriterules = apr_array_append(p, base->rewriterules, overrides->rewriterules); } else { a->rewriteconds = overrides->rewriteconds; a->rewriterules = overrides->rewriterules; } return (void *)a; } static const char *cmd_rewriteengine(cmd_parms *cmd, void *in_dconf, int flag) { rewrite_perdir_conf *dconf = in_dconf; rewrite_server_conf *sconf; sconf = ap_get_module_config(cmd->server->module_config, &rewrite_module); /* server command? set both global scope and base directory scope */ if (cmd->path == NULL) { sconf->state = (flag ? ENGINE_ENABLED : ENGINE_DISABLED); sconf->state_set = 1; dconf->state = sconf->state; dconf->state_set = 1; } /* directory command? set directory scope only */ else { dconf->state = (flag ? ENGINE_ENABLED : ENGINE_DISABLED); dconf->state_set = 1; } return NULL; } static const char *cmd_rewriteoptions(cmd_parms *cmd, void *in_dconf, const char *option) { int options = 0; while (*option) { char *w = ap_getword_conf(cmd->temp_pool, &option); if (!strcasecmp(w, "inherit")) { options |= OPTION_INHERIT; } else if (!strcasecmp(w, "inheritbefore")) { options |= OPTION_INHERIT_BEFORE; } else if (!strcasecmp(w, "inheritdown")) { options |= OPTION_INHERIT_DOWN; } else if(!strcasecmp(w, "inheritdownbefore")) { options |= OPTION_INHERIT_DOWN_BEFORE; } else if (!strcasecmp(w, "ignoreinherit")) { options |= OPTION_IGNORE_INHERIT; } else if (!strcasecmp(w, "allownoslash")) { options |= OPTION_NOSLASH; } else if (!strncasecmp(w, "MaxRedirects=", 13)) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(00664) "RewriteOptions: MaxRedirects option has been " "removed in favor of the global " "LimitInternalRecursion directive and will be " "ignored."); } else if (!strcasecmp(w, "allowanyuri")) { options |= OPTION_ANYURI; } else if (!strcasecmp(w, "mergebase")) { options |= OPTION_MERGEBASE; } else if (!strcasecmp(w, "ignorecontextinfo")) { options |= OPTION_IGNORE_CONTEXT_INFO; } else if (!strcasecmp(w, "legacyprefixdocroot")) { options |= OPTION_LEGACY_PREFIX_DOCROOT; } else { return apr_pstrcat(cmd->pool, "RewriteOptions: unknown option '", w, "'", NULL); } } /* server command? set both global scope and base directory scope */ if (cmd->path == NULL) { /* is server command */ rewrite_perdir_conf *dconf = in_dconf; rewrite_server_conf *sconf = ap_get_module_config(cmd->server->module_config, &rewrite_module); sconf->options |= options; sconf->options_set = 1; dconf->options |= options; dconf->options_set = 1; } /* directory command? set directory scope only */ else { /* is per-directory command */ rewrite_perdir_conf *dconf = in_dconf; dconf->options |= options; dconf->options_set = 1; } return NULL; } static const char *cmd_rewritemap(cmd_parms *cmd, void *dconf, const char *a1, const char *a2, const char *a3) { rewrite_server_conf *sconf; rewritemap_entry *newmap; apr_finfo_t st; const char *fname; sconf = ap_get_module_config(cmd->server->module_config, &rewrite_module); newmap = apr_pcalloc(cmd->pool, sizeof(rewritemap_entry)); if (strncasecmp(a2, "txt:", 4) == 0) { if ((fname = ap_server_root_relative(cmd->pool, a2+4)) == NULL) { return apr_pstrcat(cmd->pool, "RewriteMap: bad path to txt map: ", a2+4, NULL); } newmap->type = MAPTYPE_TXT; newmap->datafile = fname; newmap->checkfile = fname; newmap->cachename = apr_psprintf(cmd->pool, "%pp:%s", (void *)cmd->server, a1); } else if (strncasecmp(a2, "rnd:", 4) == 0) { if ((fname = ap_server_root_relative(cmd->pool, a2+4)) == NULL) { return apr_pstrcat(cmd->pool, "RewriteMap: bad path to rnd map: ", a2+4, NULL); } newmap->type = MAPTYPE_RND; newmap->datafile = fname; newmap->checkfile = fname; newmap->cachename = apr_psprintf(cmd->pool, "%pp:%s", (void *)cmd->server, a1); } else if (strncasecmp(a2, "dbm", 3) == 0) { apr_status_t rv; newmap->type = MAPTYPE_DBM; fname = NULL; newmap->cachename = apr_psprintf(cmd->pool, "%pp:%s", (void *)cmd->server, a1); if (a2[3] == ':') { newmap->dbmtype = "default"; fname = a2+4; } else if (a2[3] == '=') { const char *colon = ap_strchr_c(a2 + 4, ':'); if (colon) { newmap->dbmtype = apr_pstrndup(cmd->pool, a2 + 4, colon - (a2 + 3) - 1); fname = colon + 1; } } if (!fname) { return apr_pstrcat(cmd->pool, "RewriteMap: bad map:", a2, NULL); } if ((newmap->datafile = ap_server_root_relative(cmd->pool, fname)) == NULL) { return apr_pstrcat(cmd->pool, "RewriteMap: bad path to dbm map: ", fname, NULL); } rv = apr_dbm_get_usednames_ex(cmd->pool, newmap->dbmtype, newmap->datafile, &newmap->checkfile, &newmap->checkfile2); if (rv != APR_SUCCESS) { return apr_pstrcat(cmd->pool, "RewriteMap: dbm type ", newmap->dbmtype, " is invalid", NULL); } } else if ((strncasecmp(a2, "dbd:", 4) == 0) || (strncasecmp(a2, "fastdbd:", 8) == 0)) { if (dbd_prepare == NULL) { return "RewriteMap types dbd and fastdbd require mod_dbd!"; } if ((a2[0] == 'd') || (a2[0] == 'D')) { newmap->type = MAPTYPE_DBD; fname = a2+4; } else { newmap->type = MAPTYPE_DBD_CACHE; fname = a2+8; newmap->cachename = apr_psprintf(cmd->pool, "%pp:%s", (void *)cmd->server, a1); } newmap->dbdq = a1; dbd_prepare(cmd->server, fname, newmap->dbdq); } else if (strncasecmp(a2, "prg:", 4) == 0) { apr_tokenize_to_argv(a2 + 4, &newmap->argv, cmd->pool); fname = newmap->argv[0]; if ((newmap->argv[0] = ap_server_root_relative(cmd->pool, fname)) == NULL) { return apr_pstrcat(cmd->pool, "RewriteMap: bad path to prg map: ", fname, NULL); } newmap->type = MAPTYPE_PRG; newmap->checkfile = newmap->argv[0]; rewrite_lock_needed = 1; if (a3) { char *tok_cntx; newmap->user = apr_strtok(apr_pstrdup(cmd->pool, a3), ":", &tok_cntx); newmap->group = apr_strtok(NULL, ":", &tok_cntx); } } else if (strncasecmp(a2, "int:", 4) == 0) { newmap->type = MAPTYPE_INT; newmap->func = (char *(*)(request_rec *,char *)) apr_hash_get(mapfunc_hash, a2+4, strlen(a2+4)); if (newmap->func == NULL) { return apr_pstrcat(cmd->pool, "RewriteMap: internal map not found:", a2+4, NULL); } } else { if ((fname = ap_server_root_relative(cmd->pool, a2)) == NULL) { return apr_pstrcat(cmd->pool, "RewriteMap: bad path to txt map: ", a2, NULL); } newmap->type = MAPTYPE_TXT; newmap->datafile = fname; newmap->checkfile = fname; newmap->cachename = apr_psprintf(cmd->pool, "%pp:%s", (void *)cmd->server, a1); } if (newmap->checkfile && (apr_stat(&st, newmap->checkfile, APR_FINFO_MIN, cmd->pool) != APR_SUCCESS)) { return apr_pstrcat(cmd->pool, "RewriteMap: file for map ", a1, " not found:", newmap->checkfile, NULL); } apr_hash_set(sconf->rewritemaps, a1, APR_HASH_KEY_STRING, newmap); return NULL; } static const char *cmd_rewritebase(cmd_parms *cmd, void *in_dconf, const char *a1) { rewrite_perdir_conf *dconf = in_dconf; if (cmd->path == NULL || dconf == NULL) { return "RewriteBase: only valid in per-directory config files"; } if (a1[0] == '\0') { return "RewriteBase: empty URL not allowed"; } if (a1[0] != '/') { return "RewriteBase: argument is not a valid URL"; } dconf->baseurl = a1; dconf->baseurl_set = 1; return NULL; } /* * generic lexer for RewriteRule and RewriteCond flags. * The parser will be passed in as a function pointer * and called if a flag was found */ static const char *cmd_parseflagfield(apr_pool_t *p, void *cfg, char *key, const char *(*parse)(apr_pool_t *, void *, char *, char *)) { char *val, *nextp, *endp; const char *err; endp = key + strlen(key) - 1; if (*key != '[' || *endp != ']') { return "bad flag delimiters"; } *endp = ','; /* for simpler parsing */ ++key; while (*key) { /* skip leading spaces */ while (apr_isspace(*key)) { ++key; } if (!*key || (nextp = ap_strchr(key, ',')) == NULL) { /* NULL should not * happen, but ... */ break; } /* strip trailing spaces */ endp = nextp - 1; while (apr_isspace(*endp)) { --endp; } *++endp = '\0'; /* split key and val */ val = ap_strchr(key, '='); if (val) { *val++ = '\0'; } else { val = endp; } err = parse(p, cfg, key, val); if (err) { return err; } key = nextp + 1; } return NULL; } static const char *cmd_rewritecond_setflag(apr_pool_t *p, void *_cfg, char *key, char *val) { rewritecond_entry *cfg = _cfg; if ( strcasecmp(key, "nocase") == 0 || strcasecmp(key, "NC") == 0 ) { cfg->flags |= CONDFLAG_NOCASE; } else if ( strcasecmp(key, "ornext") == 0 || strcasecmp(key, "OR") == 0 ) { cfg->flags |= CONDFLAG_ORNEXT; } else if ( strcasecmp(key, "novary") == 0 || strcasecmp(key, "NV") == 0 ) { cfg->flags |= CONDFLAG_NOVARY; } else { return apr_pstrcat(p, "unknown flag '", key, "'", NULL); } return NULL; } static const char *cmd_rewritecond(cmd_parms *cmd, void *in_dconf, const char *in_str) { rewrite_perdir_conf *dconf = in_dconf; char *str = apr_pstrdup(cmd->pool, in_str); rewrite_server_conf *sconf; rewritecond_entry *newcond; ap_regex_t *regexp; char *a1 = NULL, *a2 = NULL, *a3 = NULL; const char *err; sconf = ap_get_module_config(cmd->server->module_config, &rewrite_module); /* make a new entry in the internal temporary rewrite rule list */ if (cmd->path == NULL) { /* is server command */ newcond = apr_array_push(sconf->rewriteconds); } else { /* is per-directory command */ newcond = apr_array_push(dconf->rewriteconds); } /* parse the argument line ourself * a1 .. a3 are substrings of str, which is a fresh copy * of the argument line. So we can use a1 .. a3 without * copying them again. */ if (parseargline(str, &a1, &a2, &a3)) { return apr_pstrcat(cmd->pool, "RewriteCond: bad argument line '", str, "'", NULL); } /* arg1: the input string */ newcond->input = a1; /* arg3: optional flags field * (this has to be parsed first, because we need to * know if the regex should be compiled with ICASE!) */ newcond->flags = CONDFLAG_NONE; if (a3 != NULL) { if ((err = cmd_parseflagfield(cmd->pool, newcond, a3, cmd_rewritecond_setflag)) != NULL) { return apr_pstrcat(cmd->pool, "RewriteCond: ", err, NULL); } } /* arg2: the pattern */ newcond->pattern = a2; if (*a2 == '!') { newcond->flags |= CONDFLAG_NOTMATCH; ++a2; } /* determine the pattern type */ newcond->ptype = CONDPAT_REGEX; if (strcasecmp(a1, "expr") == 0) { newcond->ptype = CONDPAT_AP_EXPR; } else if (*a2 && a2[1]) { if (*a2 == '-') { if (!a2[2]) { switch (a2[1]) { case 'f': newcond->ptype = CONDPAT_FILE_EXISTS; break; case 's': newcond->ptype = CONDPAT_FILE_SIZE; break; case 'd': newcond->ptype = CONDPAT_FILE_DIR; break; case 'x': newcond->ptype = CONDPAT_FILE_XBIT; break; case 'h': newcond->ptype = CONDPAT_FILE_LINK; break; case 'L': newcond->ptype = CONDPAT_FILE_LINK; break; case 'l': newcond->ptype = CONDPAT_FILE_LINK; break; case 'U': newcond->ptype = CONDPAT_LU_URL; break; case 'F': newcond->ptype = CONDPAT_LU_FILE; break; } } else if (a2[3]) { switch (a2[1]) { case 'l': if (a2[2] == 't') { a2 += 3; newcond->ptype = CONDPAT_INT_LT; } else if (a2[2] == 'e') { a2 += 3; newcond->ptype = CONDPAT_INT_LE; } break; case 'g': if (a2[2] == 't') { a2 += 3; newcond->ptype = CONDPAT_INT_GT; } else if (a2[2] == 'e') { a2 += 3; newcond->ptype = CONDPAT_INT_GE; } break; case 'e': if (a2[2] == 'q') { a2 += 3; newcond->ptype = CONDPAT_INT_EQ; } break; case 'n': if (a2[2] == 'e') { /* Inversion, ensure !-ne == -eq */ a2 += 3; newcond->ptype = CONDPAT_INT_EQ; newcond->flags ^= CONDFLAG_NOTMATCH; } break; } } } else { switch (*a2) { case '>': if (*++a2 == '=') ++a2, newcond->ptype = CONDPAT_STR_GE; else newcond->ptype = CONDPAT_STR_GT; break; case '<': if (*++a2 == '=') ++a2, newcond->ptype = CONDPAT_STR_LE; else newcond->ptype = CONDPAT_STR_LT; break; case '=': newcond->ptype = CONDPAT_STR_EQ; /* "" represents an empty string */ if (*++a2 == '"' && a2[1] == '"' && !a2[2]) a2 += 2; break; } } } if ((newcond->ptype != CONDPAT_REGEX) && (newcond->ptype < CONDPAT_STR_LT || newcond->ptype > CONDPAT_STR_GE) && (newcond->flags & CONDFLAG_NOCASE)) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(00665) "RewriteCond: NoCase option for non-regex pattern '%s' " "is not supported and will be ignored. (%s:%d)", a2, cmd->directive->filename, cmd->directive->line_num); newcond->flags &= ~CONDFLAG_NOCASE; } newcond->pskip = a2 - newcond->pattern; newcond->pattern += newcond->pskip; if (newcond->ptype == CONDPAT_REGEX) { regexp = ap_pregcomp(cmd->pool, a2, AP_REG_EXTENDED | ((newcond->flags & CONDFLAG_NOCASE) ? AP_REG_ICASE : 0)); if (!regexp) { return apr_pstrcat(cmd->pool, "RewriteCond: cannot compile regular " "expression '", a2, "'", NULL); } newcond->regexp = regexp; } else if (newcond->ptype == CONDPAT_AP_EXPR) { unsigned int flags = newcond->flags & CONDFLAG_NOVARY ? AP_EXPR_FLAG_DONT_VARY : 0; newcond->expr = ap_expr_parse_cmd(cmd, a2, flags, &err, NULL); if (err) return apr_psprintf(cmd->pool, "RewriteCond: cannot compile " "expression \"%s\": %s", a2, err); } return NULL; } static const char *cmd_rewriterule_setflag(apr_pool_t *p, void *_cfg, char *key, char *val) { rewriterule_entry *cfg = _cfg; int error = 0; switch (*key++) { case 'b': case 'B': if (!*key || !strcasecmp(key, "ackrefescaping")) { cfg->flags |= RULEFLAG_ESCAPEBACKREF; if (val && *val) { cfg->escapes = val; } } else if (!strcasecmp(key, "NP") || !strcasecmp(key, "ackrefernoplus")) { cfg->flags |= RULEFLAG_ESCAPENOPLUS; } else { ++error; } break; case 'c': case 'C': if (!*key || !strcasecmp(key, "hain")) { /* chain */ cfg->flags |= RULEFLAG_CHAIN; } else if (((*key == 'O' || *key == 'o') && !key[1]) || !strcasecmp(key, "ookie")) { /* cookie */ data_item *cp = cfg->cookie; if (!cp) { cp = cfg->cookie = apr_palloc(p, sizeof(*cp)); } else { while (cp->next) { cp = cp->next; } cp->next = apr_palloc(p, sizeof(*cp)); cp = cp->next; } cp->next = NULL; cp->data = val; } else { ++error; } break; case 'd': case 'D': if (!*key || !strcasecmp(key, "PI") || !strcasecmp(key,"iscardpath")) { cfg->flags |= (RULEFLAG_DISCARDPATHINFO); } break; case 'e': case 'E': if (!*key || !strcasecmp(key, "nv")) { /* env */ data_item *cp = cfg->env; if (!cp) { cp = cfg->env = apr_palloc(p, sizeof(*cp)); } else { while (cp->next) { cp = cp->next; } cp->next = apr_palloc(p, sizeof(*cp)); cp = cp->next; } cp->next = NULL; cp->data = val; } else if (!strcasecmp(key, "nd")) { /* end */ cfg->flags |= RULEFLAG_END; } else { ++error; } break; case 'f': case 'F': if (!*key || !strcasecmp(key, "orbidden")) { /* forbidden */ cfg->flags |= (RULEFLAG_STATUS | RULEFLAG_NOSUB); cfg->forced_responsecode = HTTP_FORBIDDEN; } else { ++error; } break; case 'g': case 'G': if (!*key || !strcasecmp(key, "one")) { /* gone */ cfg->flags |= (RULEFLAG_STATUS | RULEFLAG_NOSUB); cfg->forced_responsecode = HTTP_GONE; } else { ++error; } break; case 'h': case 'H': if (!*key || !strcasecmp(key, "andler")) { /* handler */ cfg->forced_handler = val; } else { ++error; } break; case 'l': case 'L': if (!*key || !strcasecmp(key, "ast")) { /* last */ cfg->flags |= RULEFLAG_LASTRULE; } else { ++error; } break; case 'n': case 'N': if (((*key == 'E' || *key == 'e') && !key[1]) || !strcasecmp(key, "oescape")) { /* noescape */ cfg->flags |= RULEFLAG_NOESCAPE; } else if (!*key || !strcasecmp(key, "ext")) { /* next */ cfg->flags |= RULEFLAG_NEWROUND; if (val && *val) { cfg->maxrounds = atoi(val); } } else if (((*key == 'S' || *key == 's') && !key[1]) || !strcasecmp(key, "osubreq")) { /* nosubreq */ cfg->flags |= RULEFLAG_IGNOREONSUBREQ; } else if (((*key == 'C' || *key == 'c') && !key[1]) || !strcasecmp(key, "ocase")) { /* nocase */ cfg->flags |= RULEFLAG_NOCASE; } else { ++error; } break; case 'p': case 'P': if (!*key || !strcasecmp(key, "roxy")) { /* proxy */ cfg->flags |= RULEFLAG_PROXY; } else if (((*key == 'T' || *key == 't') && !key[1]) || !strcasecmp(key, "assthrough")) { /* passthrough */ cfg->flags |= RULEFLAG_PASSTHROUGH; } else { ++error; } break; case 'q': case 'Q': if ( !strcasecmp(key, "SA") || !strcasecmp(key, "sappend")) { /* qsappend */ cfg->flags |= RULEFLAG_QSAPPEND; } else if ( !strcasecmp(key, "SD") || !strcasecmp(key, "sdiscard") ) { /* qsdiscard */ cfg->flags |= RULEFLAG_QSDISCARD; } else if ( !strcasecmp(key, "SL") || !strcasecmp(key, "slast") ) { /* qslast */ cfg->flags |= RULEFLAG_QSLAST; } else { ++error; } break; case 'r': case 'R': if (!*key || !strcasecmp(key, "edirect")) { /* redirect */ int status = 0; cfg->flags |= RULEFLAG_FORCEREDIRECT; if (*val) { if (strcasecmp(val, "permanent") == 0) { status = HTTP_MOVED_PERMANENTLY; } else if (strcasecmp(val, "temp") == 0) { status = HTTP_MOVED_TEMPORARILY; } else if (strcasecmp(val, "seeother") == 0) { status = HTTP_SEE_OTHER; } else if (apr_isdigit(*val)) { status = atoi(val); if (status != HTTP_INTERNAL_SERVER_ERROR) { int idx = ap_index_of_response(HTTP_INTERNAL_SERVER_ERROR); if (ap_index_of_response(status) == idx) { return apr_psprintf(p, "invalid HTTP " "response code '%s' for " "flag 'R'", val); } } if (!ap_is_HTTP_REDIRECT(status)) { cfg->flags |= (RULEFLAG_STATUS | RULEFLAG_NOSUB); } } cfg->forced_responsecode = status; } } else { ++error; } break; case 's': case 'S': if (!*key || !strcasecmp(key, "kip")) { /* skip */ cfg->skip = atoi(val); } else { ++error; } break; case 't': case 'T': if (!*key || !strcasecmp(key, "ype")) { /* type */ cfg->forced_mimetype = val; } else { ++error; } break; default: ++error; break; } if (error) { return apr_pstrcat(p, "unknown flag '", --key, "'", NULL); } return NULL; } static const char *cmd_rewriterule(cmd_parms *cmd, void *in_dconf, const char *in_str) { rewrite_perdir_conf *dconf = in_dconf; char *str = apr_pstrdup(cmd->pool, in_str); rewrite_server_conf *sconf; rewriterule_entry *newrule; ap_regex_t *regexp; char *a1 = NULL, *a2 = NULL, *a3 = NULL; const char *err; sconf = ap_get_module_config(cmd->server->module_config, &rewrite_module); /* make a new entry in the internal rewrite rule list */ if (cmd->path == NULL) { /* is server command */ newrule = apr_array_push(sconf->rewriterules); } else { /* is per-directory command */ newrule = apr_array_push(dconf->rewriterules); } /* parse the argument line ourself */ if (parseargline(str, &a1, &a2, &a3)) { return apr_pstrcat(cmd->pool, "RewriteRule: bad argument line '", str, "'", NULL); } /* arg3: optional flags field */ newrule->forced_mimetype = NULL; newrule->forced_handler = NULL; newrule->forced_responsecode = HTTP_MOVED_TEMPORARILY; newrule->flags = RULEFLAG_NONE; newrule->env = NULL; newrule->cookie = NULL; newrule->skip = 0; newrule->maxrounds = REWRITE_MAX_ROUNDS; if (a3 != NULL) { if ((err = cmd_parseflagfield(cmd->pool, newrule, a3, cmd_rewriterule_setflag)) != NULL) { return apr_pstrcat(cmd->pool, "RewriteRule: ", err, NULL); } } /* arg1: the pattern * try to compile the regexp to test if is ok */ if (*a1 == '!') { newrule->flags |= RULEFLAG_NOTMATCH; ++a1; } regexp = ap_pregcomp(cmd->pool, a1, AP_REG_EXTENDED | ((newrule->flags & RULEFLAG_NOCASE) ? AP_REG_ICASE : 0)); if (!regexp) { return apr_pstrcat(cmd->pool, "RewriteRule: cannot compile regular expression '", a1, "'", NULL); } newrule->pattern = a1; newrule->regexp = regexp; /* arg2: the output string */ newrule->output = a2; if (*a2 == '-' && !a2[1]) { newrule->flags |= RULEFLAG_NOSUB; } /* now, if the server or per-dir config holds an * array of RewriteCond entries, we take it for us * and clear the array */ if (cmd->path == NULL) { /* is server command */ newrule->rewriteconds = sconf->rewriteconds; sconf->rewriteconds = apr_array_make(cmd->pool, 2, sizeof(rewritecond_entry)); } else { /* is per-directory command */ newrule->rewriteconds = dconf->rewriteconds; dconf->rewriteconds = apr_array_make(cmd->pool, 2, sizeof(rewritecond_entry)); } return NULL; } /* * +-------------------------------------------------------+ * | | * | the rewriting engine * | | * +-------------------------------------------------------+ */ /* Lexicographic Compare */ static APR_INLINE int compare_lexicography(char *a, char *b) { apr_size_t i, lena, lenb; lena = strlen(a); lenb = strlen(b); if (lena == lenb) { for (i = 0; i < lena; ++i) { if (a[i] != b[i]) { return ((unsigned char)a[i] > (unsigned char)b[i]) ? 1 : -1; } } return 0; } return ((lena > lenb) ? 1 : -1); } /* * Apply a single rewriteCond */ static int apply_rewrite_cond(rewritecond_entry *p, rewrite_ctx *ctx) { char *input = NULL; apr_finfo_t sb; request_rec *rsub, *r = ctx->r; ap_regmatch_t regmatch[AP_MAX_REG_MATCH]; int rc = 0; int basis; if (p->ptype != CONDPAT_AP_EXPR) input = do_expand(p->input, ctx, NULL); switch (p->ptype) { case CONDPAT_FILE_EXISTS: if ( apr_stat(&sb, input, APR_FINFO_MIN, r->pool) == APR_SUCCESS && sb.filetype == APR_REG) { rc = 1; } break; case CONDPAT_FILE_SIZE: if ( apr_stat(&sb, input, APR_FINFO_MIN, r->pool) == APR_SUCCESS && sb.filetype == APR_REG && sb.size > 0) { rc = 1; } break; case CONDPAT_FILE_LINK: #if !defined(OS2) if ( apr_stat(&sb, input, APR_FINFO_MIN | APR_FINFO_LINK, r->pool) == APR_SUCCESS && sb.filetype == APR_LNK) { rc = 1; } #endif break; case CONDPAT_FILE_DIR: if ( apr_stat(&sb, input, APR_FINFO_MIN, r->pool) == APR_SUCCESS && sb.filetype == APR_DIR) { rc = 1; } break; case CONDPAT_FILE_XBIT: if ( apr_stat(&sb, input, APR_FINFO_PROT, r->pool) == APR_SUCCESS && (sb.protection & (APR_UEXECUTE | APR_GEXECUTE | APR_WEXECUTE))) { rc = 1; } break; case CONDPAT_LU_URL: if (*input && subreq_ok(r)) { rsub = ap_sub_req_lookup_uri(input, r, NULL); if (rsub->status < 400) { rc = 1; } rewritelog((r, 5, NULL, "RewriteCond URI (-U) check: " "path=%s -> status=%d", input, rsub->status)); ap_destroy_sub_req(rsub); } break; case CONDPAT_LU_FILE: if (*input && subreq_ok(r)) { rsub = ap_sub_req_lookup_file(input, r, NULL); if (rsub->status < 300 && /* double-check that file exists since default result is 200 */ apr_stat(&sb, rsub->filename, APR_FINFO_MIN, r->pool) == APR_SUCCESS) { rc = 1; } rewritelog((r, 5, NULL, "RewriteCond file (-F) check: path=%s " "-> file=%s status=%d", input, rsub->filename, rsub->status)); ap_destroy_sub_req(rsub); } break; case CONDPAT_STR_GE: basis = 0; goto test_str_g; case CONDPAT_STR_GT: basis = 1; test_str_g: if (p->flags & CONDFLAG_NOCASE) { rc = (strcasecmp(input, p->pattern) >= basis) ? 1 : 0; } else { rc = (compare_lexicography(input, p->pattern) >= basis) ? 1 : 0; } break; case CONDPAT_STR_LE: basis = 0; goto test_str_l; case CONDPAT_STR_LT: basis = -1; test_str_l: if (p->flags & CONDFLAG_NOCASE) { rc = (strcasecmp(input, p->pattern) <= basis) ? 1 : 0; } else { rc = (compare_lexicography(input, p->pattern) <= basis) ? 1 : 0; } break; case CONDPAT_STR_EQ: /* Note: the only type where the operator is dropped from p->pattern */ if (p->flags & CONDFLAG_NOCASE) { rc = !strcasecmp(input, p->pattern); } else { rc = !strcmp(input, p->pattern); } break; case CONDPAT_INT_GE: rc = (atoi(input) >= atoi(p->pattern)); break; case CONDPAT_INT_GT: rc = (atoi(input) > atoi(p->pattern)); break; case CONDPAT_INT_LE: rc = (atoi(input) <= atoi(p->pattern)); break; case CONDPAT_INT_LT: rc = (atoi(input) < atoi(p->pattern)); break; case CONDPAT_INT_EQ: rc = (atoi(input) == atoi(p->pattern)); break; case CONDPAT_AP_EXPR: { const char *err, *source; rc = ap_expr_exec_re(r, p->expr, AP_MAX_REG_MATCH, regmatch, &source, &err); if (rc < 0 || err) { rewritelog((r, 1, ctx->perdir, "RewriteCond: expr='%s' evaluation failed: %s", p->pattern - p->pskip, err)); rc = 0; } /* update briRC backref info */ if (rc && !(p->flags & CONDFLAG_NOTMATCH)) { ctx->briRC.source = source; memcpy(ctx->briRC.regmatch, regmatch, sizeof(regmatch)); } } break; default: /* it is really a regexp pattern, so apply it */ rc = !ap_regexec(p->regexp, input, AP_MAX_REG_MATCH, regmatch, 0); /* update briRC backref info */ if (rc && !(p->flags & CONDFLAG_NOTMATCH)) { ctx->briRC.source = input; memcpy(ctx->briRC.regmatch, regmatch, sizeof(regmatch)); } break; } if (p->flags & CONDFLAG_NOTMATCH) { rc = !rc; } rewritelog((r, 4, ctx->perdir, "RewriteCond: input='%s' pattern='%s'%s " "=> %s", input, p->pattern - p->pskip, (p->flags & CONDFLAG_NOCASE) ? " [NC]" : "", rc ? "matched" : "not-matched")); return rc; } /* check for forced type and handler */ static APR_INLINE void force_type_handler(rewriterule_entry *p, rewrite_ctx *ctx) { char *expanded; if (p->forced_mimetype) { expanded = do_expand(p->forced_mimetype, ctx, p); if (*expanded) { ap_str_tolower(expanded); rewritelog((ctx->r, 2, ctx->perdir, "remember %s to have MIME-type " "'%s'", ctx->r->filename, expanded)); apr_table_setn(ctx->r->notes, REWRITE_FORCED_MIMETYPE_NOTEVAR, expanded); } } if (p->forced_handler) { expanded = do_expand(p->forced_handler, ctx, p); if (*expanded) { ap_str_tolower(expanded); rewritelog((ctx->r, 2, ctx->perdir, "remember %s to have " "Content-handler '%s'", ctx->r->filename, expanded)); apr_table_setn(ctx->r->notes, REWRITE_FORCED_HANDLER_NOTEVAR, expanded); } } } /* * Apply a single RewriteRule */ static int apply_rewrite_rule(rewriterule_entry *p, rewrite_ctx *ctx) { ap_regmatch_t regmatch[AP_MAX_REG_MATCH]; apr_array_header_t *rewriteconds; rewritecond_entry *conds; int i, rc; char *newuri = NULL; request_rec *r = ctx->r; int is_proxyreq = 0; ctx->uri = r->filename; if (ctx->perdir) { apr_size_t dirlen = strlen(ctx->perdir); /* * Proxy request? */ is_proxyreq = ( r->proxyreq && r->filename && !strncmp(r->filename, "proxy:", 6)); /* Since we want to match against the (so called) full URL, we have * to re-add the PATH_INFO postfix */ if (r->path_info && *r->path_info) { rewritelog((r, 3, ctx->perdir, "add path info postfix: %s -> %s%s", ctx->uri, ctx->uri, r->path_info)); ctx->uri = apr_pstrcat(r->pool, ctx->uri, r->path_info, NULL); } /* Additionally we strip the physical path from the url to match * it independent from the underlaying filesystem. */ if (!is_proxyreq && strlen(ctx->uri) >= dirlen && !strncmp(ctx->uri, ctx->perdir, dirlen)) { rewritelog((r, 3, ctx->perdir, "strip per-dir prefix: %s -> %s", ctx->uri, ctx->uri + dirlen)); ctx->uri = ctx->uri + dirlen; } } /* Try to match the URI against the RewriteRule pattern * and exit immediately if it didn't apply. */ rewritelog((r, 3, ctx->perdir, "applying pattern '%s' to uri '%s'", p->pattern, ctx->uri)); rc = !ap_regexec(p->regexp, ctx->uri, AP_MAX_REG_MATCH, regmatch, 0); if (! (( rc && !(p->flags & RULEFLAG_NOTMATCH)) || (!rc && (p->flags & RULEFLAG_NOTMATCH)) ) ) { return 0; } /* It matched, wow! Now it's time to prepare the context structure for * further processing */ ctx->vary_this = NULL; ctx->briRC.source = NULL; if (p->flags & RULEFLAG_NOTMATCH) { ctx->briRR.source = NULL; } else { ctx->briRR.source = apr_pstrdup(r->pool, ctx->uri); memcpy(ctx->briRR.regmatch, regmatch, sizeof(regmatch)); } /* Ok, we already know the pattern has matched, but we now * additionally have to check for all existing preconditions * (RewriteCond) which have to be also true. We do this at * this very late stage to avoid unnecessary checks which * would slow down the rewriting engine. */ rewriteconds = p->rewriteconds; conds = (rewritecond_entry *)rewriteconds->elts; for (i = 0; i < rewriteconds->nelts; ++i) { rewritecond_entry *c = &conds[i]; rc = apply_rewrite_cond(c, ctx); /* * Reset vary_this if the novary flag is set for this condition. */ if (c->flags & CONDFLAG_NOVARY) { ctx->vary_this = NULL; } if (c->flags & CONDFLAG_ORNEXT) { if (!rc) { /* One condition is false, but another can be still true. */ ctx->vary_this = NULL; continue; } else { /* skip the rest of the chained OR conditions */ while ( i < rewriteconds->nelts && c->flags & CONDFLAG_ORNEXT) { c = &conds[++i]; } } } else if (!rc) { return 0; } /* If some HTTP header was involved in the condition, remember it * for later use */ if (ctx->vary_this) { ctx->vary = ctx->vary ? apr_pstrcat(r->pool, ctx->vary, ", ", ctx->vary_this, NULL) : ctx->vary_this; ctx->vary_this = NULL; } } /* expand the result */ if (!(p->flags & RULEFLAG_NOSUB)) { newuri = do_expand(p->output, ctx, p); rewritelog((r, 2, ctx->perdir, "rewrite '%s' -> '%s'", ctx->uri, newuri)); } /* expand [E=var:val] and [CO=] */ do_expand_env(p->env, ctx); do_expand_cookie(p->cookie, ctx); /* non-substitution rules ('RewriteRule -') end here. */ if (p->flags & RULEFLAG_NOSUB) { force_type_handler(p, ctx); if (p->flags & RULEFLAG_STATUS) { rewritelog((r, 2, ctx->perdir, "forcing responsecode %d for %s", p->forced_responsecode, r->filename)); r->status = p->forced_responsecode; } return 2; } /* Now adjust API's knowledge about r->filename and r->args */ r->filename = newuri; if (ctx->perdir && (p->flags & RULEFLAG_DISCARDPATHINFO)) { r->path_info = NULL; } splitout_queryargs(r, p->flags & RULEFLAG_QSAPPEND, p->flags & RULEFLAG_QSDISCARD, p->flags & RULEFLAG_QSLAST); /* Add the previously stripped per-directory location prefix, unless * (1) it's an absolute URL path and * (2) it's a full qualified URL */ if ( ctx->perdir && !is_proxyreq && *r->filename != '/' && !is_absolute_uri(r->filename, NULL)) { rewritelog((r, 3, ctx->perdir, "add per-dir prefix: %s -> %s%s", r->filename, ctx->perdir, r->filename)); r->filename = apr_pstrcat(r->pool, ctx->perdir, r->filename, NULL); } /* If this rule is forced for proxy throughput * (`RewriteRule ... ... [P]') then emulate mod_proxy's * URL-to-filename handler to be sure mod_proxy is triggered * for this URL later in the Apache API. But make sure it is * a fully-qualified URL. (If not it is qualified with * ourself). */ if (p->flags & RULEFLAG_PROXY) { /* For rules evaluated in server context, the mod_proxy fixup * hook can be relied upon to escape the URI as and when * necessary, since it occurs later. If in directory context, * the ordering of the fixup hooks is forced such that * mod_proxy comes first, so the URI must be escaped here * instead. See PR 39746, 46428, and other headaches. */ if (ctx->perdir && (p->flags & RULEFLAG_NOESCAPE) == 0) { char *old_filename = r->filename; r->filename = ap_escape_uri(r->pool, r->filename); rewritelog((r, 2, ctx->perdir, "escaped URI in per-dir context " "for proxy, %s -> %s", old_filename, r->filename)); } fully_qualify_uri(r); rewritelog((r, 2, ctx->perdir, "forcing proxy-throughput with %s", r->filename)); r->filename = apr_pstrcat(r->pool, "proxy:", r->filename, NULL); return 1; } /* If this rule is explicitly forced for HTTP redirection * (`RewriteRule .. .. [R]') then force an external HTTP * redirect. But make sure it is a fully-qualified URL. (If * not it is qualified with ourself). */ if (p->flags & RULEFLAG_FORCEREDIRECT) { fully_qualify_uri(r); rewritelog((r, 2, ctx->perdir, "explicitly forcing redirect with %s", r->filename)); r->status = p->forced_responsecode; return 1; } /* Special Rewriting Feature: Self-Reduction * We reduce the URL by stripping a possible * http[s]://[:] prefix, i.e. a prefix which * corresponds to ourself. This is to simplify rewrite maps * and to avoid recursion, etc. When this prefix is not a * coincidence then the user has to use [R] explicitly (see * above). */ reduce_uri(r); /* If this rule is still implicitly forced for HTTP * redirection (`RewriteRule .. ://...') then * directly force an external HTTP redirect. */ if (is_absolute_uri(r->filename, NULL)) { rewritelog((r, 2, ctx->perdir, "implicitly forcing redirect (rc=%d) " "with %s", p->forced_responsecode, r->filename)); r->status = p->forced_responsecode; return 1; } /* Finally remember the forced mime-type */ force_type_handler(p, ctx); /* Puuhhhhhhhh... WHAT COMPLICATED STUFF ;_) * But now we're done for this particular rule. */ return 1; } /* * Apply a complete rule set, * i.e. a list of rewrite rules */ static int apply_rewrite_list(request_rec *r, apr_array_header_t *rewriterules, char *perdir) { rewriterule_entry *entries; rewriterule_entry *p; int i; int changed; int rc; int s; rewrite_ctx *ctx; int round = 1; ctx = apr_palloc(r->pool, sizeof(*ctx)); ctx->perdir = perdir; ctx->r = r; /* * Iterate over all existing rules */ entries = (rewriterule_entry *)rewriterules->elts; changed = 0; loop: for (i = 0; i < rewriterules->nelts; i++) { p = &entries[i]; /* * Ignore this rule on subrequests if we are explicitly * asked to do so or this is a proxy-throughput or a * forced redirect rule. */ if (r->main != NULL && (p->flags & RULEFLAG_IGNOREONSUBREQ || p->flags & RULEFLAG_FORCEREDIRECT )) { continue; } /* * Apply the current rule. */ ctx->vary = NULL; rc = apply_rewrite_rule(p, ctx); if (rc) { /* Catch looping rules with pathinfo growing unbounded */ if ( strlen( r->filename ) > 2*r->server->limit_req_line ) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, "RewriteRule '%s' and URI '%s' " "exceeded maximum length (%d)", p->pattern, r->uri, 2*r->server->limit_req_line ); r->status = HTTP_INTERNAL_SERVER_ERROR; return ACTION_STATUS; } /* Regardless of what we do next, we've found a match. Check to see * if any of the request header fields were involved, and add them * to the Vary field of the response. */ if (ctx->vary) { apr_table_merge(r->headers_out, "Vary", ctx->vary); } /* * The rule sets the response code (implies match-only) */ if (p->flags & RULEFLAG_STATUS) { return ACTION_STATUS; } /* * Indicate a change if this was not a match-only rule. */ if (rc != 2) { changed = ((p->flags & RULEFLAG_NOESCAPE) ? ACTION_NOESCAPE : ACTION_NORMAL); } /* * Pass-Through Feature (`RewriteRule .. .. [PT]'): * Because the Apache 1.x API is very limited we * need this hack to pass the rewritten URL to other * modules like mod_alias, mod_userdir, etc. */ if (p->flags & RULEFLAG_PASSTHROUGH) { rewritelog((r, 2, perdir, "forcing '%s' to get passed through " "to next API URI-to-filename handler", r->filename)); r->filename = apr_pstrcat(r->pool, "passthrough:", r->filename, NULL); changed = ACTION_NORMAL; break; } if (p->flags & RULEFLAG_END) { rewritelog((r, 8, perdir, "Rule has END flag, no further rewriting for this request")); apr_pool_userdata_set("1", really_last_key, apr_pool_cleanup_null, r->pool); break; } /* * Stop processing also on proxy pass-through and * last-rule and new-round flags. */ if (p->flags & (RULEFLAG_PROXY | RULEFLAG_LASTRULE)) { break; } /* * On "new-round" flag we just start from the top of * the rewriting ruleset again. */ if (p->flags & RULEFLAG_NEWROUND) { if (++round >= p->maxrounds) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02596) "RewriteRule '%s' and URI '%s' exceeded " "maximum number of rounds (%d) via the [N] flag", p->pattern, r->uri, p->maxrounds); r->status = HTTP_INTERNAL_SERVER_ERROR; return ACTION_STATUS; } goto loop; } /* * If we are forced to skip N next rules, do it now. */ if (p->skip > 0) { s = p->skip; while ( i < rewriterules->nelts && s > 0) { i++; s--; } } } else { /* * If current rule is chained with next rule(s), * skip all this next rule(s) */ while ( i < rewriterules->nelts && p->flags & RULEFLAG_CHAIN) { i++; p = &entries[i]; } } } return changed; } /* * +-------------------------------------------------------+ * | | * | Module Initialization Hooks * | | * +-------------------------------------------------------+ */ static int pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { APR_OPTIONAL_FN_TYPE(ap_register_rewrite_mapfunc) *map_pfn_register; rewrite_lock_needed = 0; ap_mutex_register(pconf, rewritemap_mutex_type, NULL, APR_LOCK_DEFAULT, 0); /* register int: rewritemap handlers */ map_pfn_register = APR_RETRIEVE_OPTIONAL_FN(ap_register_rewrite_mapfunc); if (map_pfn_register) { map_pfn_register("tolower", rewrite_mapfunc_tolower); map_pfn_register("toupper", rewrite_mapfunc_toupper); map_pfn_register("escape", rewrite_mapfunc_escape); map_pfn_register("unescape", rewrite_mapfunc_unescape); } dbd_acquire = APR_RETRIEVE_OPTIONAL_FN(ap_dbd_acquire); dbd_prepare = APR_RETRIEVE_OPTIONAL_FN(ap_dbd_prepare); return OK; } static int post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { apr_status_t rv; /* check if proxy module is available */ proxy_available = (ap_find_linked_module("mod_proxy.c") != NULL); if (rewrite_lock_needed) { rv = rewritelock_create(s, p); if (rv != APR_SUCCESS) { return HTTP_INTERNAL_SERVER_ERROR; } apr_pool_cleanup_register(p, (void *)s, rewritelock_remove, apr_pool_cleanup_null); } /* if we are not doing the initial config, step through the servers and * open the RewriteMap prg:xxx programs, */ if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_CONFIG) { for (; s; s = s->next) { if (run_rewritemap_programs(s, p) != APR_SUCCESS) { return HTTP_INTERNAL_SERVER_ERROR; } } } rewrite_ssl_lookup = APR_RETRIEVE_OPTIONAL_FN(ssl_var_lookup); rewrite_is_https = APR_RETRIEVE_OPTIONAL_FN(ssl_is_https); return OK; } static void init_child(apr_pool_t *p, server_rec *s) { apr_status_t rv = 0; /* get a rid of gcc warning (REWRITELOG_DISABLED) */ if (rewrite_mapr_lock_acquire) { rv = apr_global_mutex_child_init(&rewrite_mapr_lock_acquire, apr_global_mutex_lockfile(rewrite_mapr_lock_acquire), p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(00666) "mod_rewrite: could not init rewrite_mapr_lock_acquire" " in child"); } } /* create the lookup cache */ if (!init_cache(p)) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(00667) "mod_rewrite: could not init map cache in child"); } } /* * +-------------------------------------------------------+ * | | * | runtime hooks * | | * +-------------------------------------------------------+ */ /* * URI-to-filename hook * [deals with RewriteRules in server context] */ static int hook_uri2file(request_rec *r) { rewrite_perdir_conf *dconf; rewrite_server_conf *conf; const char *saved_rulestatus; const char *var; const char *thisserver; char *thisport; const char *thisurl; unsigned int port; int rulestatus; void *skipdata; const char *oargs; /* * retrieve the config structures */ conf = ap_get_module_config(r->server->module_config, &rewrite_module); dconf = (rewrite_perdir_conf *)ap_get_module_config(r->per_dir_config, &rewrite_module); /* * only do something under runtime if the engine is really enabled, * else return immediately! */ if (!dconf || dconf->state == ENGINE_DISABLED) { return DECLINED; } /* * check for the ugly API case of a virtual host section where no * mod_rewrite directives exists. In this situation we became no chance * by the API to setup our default per-server config so we have to * on-the-fly assume we have the default config. But because the default * config has a disabled rewriting engine we are lucky because can * just stop operating now. */ if (conf->server != r->server) { return DECLINED; } /* END flag was used as a RewriteRule flag on this request */ apr_pool_userdata_get(&skipdata, really_last_key, r->pool); if (skipdata != NULL) { rewritelog((r, 8, NULL, "Declining, no further rewriting due to END flag")); return DECLINED; } /* Unless the anyuri option is set, ensure that the input to the * first rule really is a URL-path, avoiding security issues with * poorly configured rules. See CVE-2011-3368, CVE-2011-4317. */ if ((dconf->options & OPTION_ANYURI) == 0 && ((r->unparsed_uri[0] == '*' && r->unparsed_uri[1] == '\0') || !r->uri || r->uri[0] != '/')) { rewritelog((r, 8, NULL, "Declining, request-URI '%s' is not a URL-path. " "Consult the manual entry for the RewriteOptions directive " "for options and caveats about matching other strings.", r->uri)); return DECLINED; } /* * remember the original query string for later check, since we don't * want to apply URL-escaping when no substitution has changed it. */ oargs = r->args; /* * add the SCRIPT_URL variable to the env. this is a bit complicated * due to the fact that apache uses subrequests and internal redirects */ if (r->main == NULL) { var = apr_table_get(r->subprocess_env, REDIRECT_ENVVAR_SCRIPT_URL); if (var == NULL) { apr_table_setn(r->subprocess_env, ENVVAR_SCRIPT_URL, r->uri); } else { apr_table_setn(r->subprocess_env, ENVVAR_SCRIPT_URL, var); } } else { var = apr_table_get(r->main->subprocess_env, ENVVAR_SCRIPT_URL); apr_table_setn(r->subprocess_env, ENVVAR_SCRIPT_URL, var); } /* * create the SCRIPT_URI variable for the env */ /* add the canonical URI of this URL */ thisserver = ap_get_server_name_for_url(r); port = ap_get_server_port(r); if (ap_is_default_port(port, r)) { thisport = ""; } else { thisport = apr_psprintf(r->pool, ":%u", port); } thisurl = apr_table_get(r->subprocess_env, ENVVAR_SCRIPT_URL); /* set the variable */ var = apr_pstrcat(r->pool, ap_http_scheme(r), "://", thisserver, thisport, thisurl, NULL); apr_table_setn(r->subprocess_env, ENVVAR_SCRIPT_URI, var); if (!(saved_rulestatus = apr_table_get(r->notes,"mod_rewrite_rewritten"))) { /* if filename was not initially set, * we start with the requested URI */ if (r->filename == NULL) { r->filename = apr_pstrdup(r->pool, r->uri); rewritelog((r, 2, NULL, "init rewrite engine with requested uri %s", r->filename)); } else { rewritelog((r, 2, NULL, "init rewrite engine with passed filename " "%s. Original uri = %s", r->filename, r->uri)); } /* * now apply the rules ... */ rulestatus = apply_rewrite_list(r, conf->rewriterules, NULL); apr_table_setn(r->notes, "mod_rewrite_rewritten", apr_psprintf(r->pool,"%d",rulestatus)); } else { rewritelog((r, 2, NULL, "uri already rewritten. Status %s, Uri %s, " "r->filename %s", saved_rulestatus, r->uri, r->filename)); rulestatus = atoi(saved_rulestatus); } if (rulestatus) { unsigned skip; apr_size_t flen; if (ACTION_STATUS == rulestatus) { int n = r->status; r->status = HTTP_OK; return n; } flen = r->filename ? strlen(r->filename) : 0; if (flen > 6 && strncmp(r->filename, "proxy:", 6) == 0) { /* it should be go on as an internal proxy request */ /* check if the proxy module is enabled, so * we can actually use it! */ if (!proxy_available) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00669) "attempt to make remote request from mod_rewrite " "without proxy enabled: %s", r->filename); return HTTP_FORBIDDEN; } if (rulestatus == ACTION_NOESCAPE) { apr_table_setn(r->notes, "proxy-nocanon", "1"); } /* make sure the QUERY_STRING and * PATH_INFO parts get incorporated */ if (r->path_info != NULL) { r->filename = apr_pstrcat(r->pool, r->filename, r->path_info, NULL); } if ((r->args != NULL) && ((r->proxyreq == PROXYREQ_PROXY) || (rulestatus == ACTION_NOESCAPE))) { /* see proxy_http:proxy_http_canon() */ r->filename = apr_pstrcat(r->pool, r->filename, "?", r->args, NULL); } /* now make sure the request gets handled by the proxy handler */ if (PROXYREQ_NONE == r->proxyreq) { r->proxyreq = PROXYREQ_REVERSE; } r->handler = "proxy-server"; rewritelog((r, 1, NULL, "go-ahead with proxy request %s [OK]", r->filename)); return OK; } else if ((skip = is_absolute_uri(r->filename, NULL)) > 0) { int n; /* it was finally rewritten to a remote URL */ if (rulestatus != ACTION_NOESCAPE) { rewritelog((r, 1, NULL, "escaping %s for redirect", r->filename)); r->filename = escape_absolute_uri(r->pool, r->filename, skip); } /* append the QUERY_STRING part */ if (r->args) { char *escaped_args = NULL; int noescape = (rulestatus == ACTION_NOESCAPE || (oargs && !strcmp(r->args, oargs))); r->filename = apr_pstrcat(r->pool, r->filename, "?", noescape ? r->args : (escaped_args = ap_escape_uri(r->pool, r->args)), NULL); rewritelog((r, 1, NULL, "%s %s to query string for redirect %s", noescape ? "copying" : "escaping", r->args , noescape ? "" : escaped_args)); } /* determine HTTP redirect response code */ if (ap_is_HTTP_REDIRECT(r->status)) { n = r->status; r->status = HTTP_OK; /* make Apache kernel happy */ } else { n = HTTP_MOVED_TEMPORARILY; } /* now do the redirection */ apr_table_setn(r->headers_out, "Location", r->filename); rewritelog((r, 1, NULL, "redirect to %s [REDIRECT/%d]", r->filename, n)); return n; } else if (flen > 12 && strncmp(r->filename, "passthrough:", 12) == 0) { /* * Hack because of underpowered API: passing the current * rewritten filename through to other URL-to-filename handlers * just as it were the requested URL. This is to enable * post-processing by mod_alias, etc. which always act on * r->uri! The difference here is: We do not try to * add the document root */ r->uri = apr_pstrdup(r->pool, r->filename+12); return DECLINED; } else { /* it was finally rewritten to a local path */ const char *uri_reduced = NULL; /* expand "/~user" prefix */ #if APR_HAS_USER r->filename = expand_tildepaths(r, r->filename); #endif rewritelog((r, 2, NULL, "local path result: %s", r->filename)); /* the filename must be either an absolute local path or an * absolute local URL. */ if ( *r->filename != '/' && !ap_os_is_path_absolute(r->pool, r->filename)) { return HTTP_BAD_REQUEST; } /* if there is no valid prefix, we call * the translator from the core and * prefix the filename with document_root * * NOTICE: * We cannot leave out the prefix_stat because * - when we always prefix with document_root * then no absolute path can be created, e.g. via * emulating a ScriptAlias directive, etc. * - when we always NOT prefix with document_root * then the files under document_root have to * be references directly and document_root * gets never used and will be a dummy parameter - * this is also bad * * BUT: * Under real Unix systems this is no problem, * because we only do stat() on the first directory * and this gets cached by the kernel for along time! */ if(!(conf->options & OPTION_LEGACY_PREFIX_DOCROOT)) { uri_reduced = apr_table_get(r->notes, "mod_rewrite_uri_reduced"); } if (!prefix_stat(r->filename, r->pool) || uri_reduced != NULL) { int res; char *tmp = r->uri; r->uri = r->filename; res = ap_core_translate(r); r->uri = tmp; if (res != OK) { rewritelog((r, 1, NULL, "prefixing with document_root of %s" " FAILED", r->filename)); return res; } rewritelog((r, 2, NULL, "prefixed with document_root to %s", r->filename)); } rewritelog((r, 1, NULL, "go-ahead with %s [OK]", r->filename)); return OK; } } else { rewritelog((r, 1, NULL, "pass through %s", r->filename)); return DECLINED; } } /* * Fixup hook * [RewriteRules in directory context] */ static int hook_fixup(request_rec *r) { rewrite_perdir_conf *dconf; char *cp; char *cp2; const char *ccp; apr_size_t l; int rulestatus; int n; char *ofilename, *oargs; int is_proxyreq; void *skipdata; dconf = (rewrite_perdir_conf *)ap_get_module_config(r->per_dir_config, &rewrite_module); /* if there is no per-dir config we return immediately */ if (dconf == NULL) { return DECLINED; } /* * only do something under runtime if the engine is really enabled, * for this directory, else return immediately! */ if (dconf->state == ENGINE_DISABLED) { return DECLINED; } /* if there are no real (i.e. no RewriteRule directives!) per-dir config of us, we return also immediately */ if (dconf->directory == NULL) { return DECLINED; } /* * Proxy request? */ is_proxyreq = ( r->proxyreq && r->filename && !strncmp(r->filename, "proxy:", 6)); /* * .htaccess file is called before really entering the directory, i.e.: * URL: http://localhost/foo and .htaccess is located in foo directory * Ignore such attempts, allowing mod_dir to direct the client to the * canonical URL. This can be controlled with the AllowNoSlash option. */ if (!is_proxyreq && !(dconf->options & OPTION_NOSLASH)) { l = strlen(dconf->directory) - 1; if (r->filename && strlen(r->filename) == l && (dconf->directory)[l] == '/' && !strncmp(r->filename, dconf->directory, l)) { return DECLINED; } } /* END flag was used as a RewriteRule flag on this request */ apr_pool_userdata_get(&skipdata, really_last_key, r->pool); if (skipdata != NULL) { rewritelog((r, 8, dconf->directory, "Declining, no further rewriting due to END flag")); return DECLINED; } /* * Do the Options check after engine check, so * the user is able to explicitly turn RewriteEngine Off. */ if (!(ap_allow_options(r) & (OPT_SYM_LINKS | OPT_SYM_OWNER))) { /* FollowSymLinks is mandatory! */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00670) "Options FollowSymLinks and SymLinksIfOwnerMatch are both off, " "so the RewriteRule directive is also forbidden " "due to its similar ability to circumvent directory restrictions : " "%s", r->filename); return HTTP_FORBIDDEN; } /* * remember the current filename before rewriting for later check * to prevent deadlooping because of internal redirects * on final URL/filename which can be equal to the initial one. * also, we'll restore original r->filename if we decline this * request */ ofilename = r->filename; oargs = r->args; if (r->filename == NULL) { r->filename = apr_pstrdup(r->pool, r->uri); rewritelog((r, 2, dconf->directory, "init rewrite engine with" " requested uri %s", r->filename)); } /* * now apply the rules ... */ rulestatus = apply_rewrite_list(r, dconf->rewriterules, dconf->directory); if (rulestatus) { unsigned skip; if (ACTION_STATUS == rulestatus) { int n = r->status; r->status = HTTP_OK; return n; } l = strlen(r->filename); if (l > 6 && strncmp(r->filename, "proxy:", 6) == 0) { /* it should go on as an internal proxy request */ /* make sure the QUERY_STRING and * PATH_INFO parts get incorporated * (r->path_info was already appended by the * rewriting engine because of the per-dir context!) */ if (r->args != NULL) { /* see proxy_http:proxy_http_canon() */ r->filename = apr_pstrcat(r->pool, r->filename, "?", r->args, NULL); } /* now make sure the request gets handled by the proxy handler */ if (PROXYREQ_NONE == r->proxyreq) { r->proxyreq = PROXYREQ_REVERSE; } r->handler = "proxy-server"; rewritelog((r, 1, dconf->directory, "go-ahead with proxy request " "%s [OK]", r->filename)); return OK; } else if ((skip = is_absolute_uri(r->filename, NULL)) > 0) { /* it was finally rewritten to a remote URL */ /* because we are in a per-dir context * first try to replace the directory with its base-URL * if there is a base-URL available */ if (dconf->baseurl != NULL) { /* skip 'scheme://' */ cp = r->filename + skip; if ((cp = ap_strchr(cp, '/')) != NULL && *(++cp)) { rewritelog((r, 2, dconf->directory, "trying to replace prefix %s with %s", dconf->directory, dconf->baseurl)); /* I think, that hack needs an explanation: * well, here is it: * mod_rewrite was written for unix systems, were * absolute file-system paths start with a slash. * URL-paths _also_ start with slashes, so they * can be easily compared with system paths. * * the following assumes, that the actual url-path * may be prefixed by the current directory path and * tries to replace the system path with the RewriteBase * URL. * That assumption is true if we use a RewriteRule like * * RewriteRule ^foo bar [R] * * (see apply_rewrite_rule function) * However on systems that don't have a / as system * root this will never match, so we skip the / after the * hostname and compare/substitute only the stuff after it. * * (note that cp was already increased to the right value) */ cp2 = subst_prefix_path(r, cp, (*dconf->directory == '/') ? dconf->directory + 1 : dconf->directory, dconf->baseurl + 1); if (strcmp(cp2, cp) != 0) { *cp = '\0'; r->filename = apr_pstrcat(r->pool, r->filename, cp2, NULL); } } } /* now prepare the redirect... */ if (rulestatus != ACTION_NOESCAPE) { rewritelog((r, 1, dconf->directory, "escaping %s for redirect", r->filename)); r->filename = escape_absolute_uri(r->pool, r->filename, skip); } /* append the QUERY_STRING part */ if (r->args) { char *escaped_args = NULL; int noescape = (rulestatus == ACTION_NOESCAPE || (oargs && !strcmp(r->args, oargs))); r->filename = apr_pstrcat(r->pool, r->filename, "?", noescape ? r->args : (escaped_args = ap_escape_uri(r->pool, r->args)), NULL); rewritelog((r, 1, dconf->directory, "%s %s to query string for redirect %s", noescape ? "copying" : "escaping", r->args , noescape ? "" : escaped_args)); } /* determine HTTP redirect response code */ if (ap_is_HTTP_REDIRECT(r->status)) { n = r->status; r->status = HTTP_OK; /* make Apache kernel happy */ } else { n = HTTP_MOVED_TEMPORARILY; } /* now do the redirection */ apr_table_setn(r->headers_out, "Location", r->filename); rewritelog((r, 1, dconf->directory, "redirect to %s [REDIRECT/%d]", r->filename, n)); return n; } else { const char *tmpfilename = NULL; /* it was finally rewritten to a local path */ /* if someone used the PASSTHROUGH flag in per-dir * context we just ignore it. It is only useful * in per-server context */ if (l > 12 && strncmp(r->filename, "passthrough:", 12) == 0) { r->filename = apr_pstrdup(r->pool, r->filename+12); } /* the filename must be either an absolute local path or an * absolute local URL. */ if ( *r->filename != '/' && !ap_os_is_path_absolute(r->pool, r->filename)) { return HTTP_BAD_REQUEST; } /* Check for deadlooping: * At this point we KNOW that at least one rewriting * rule was applied, but when the resulting URL is * the same as the initial URL, we are not allowed to * use the following internal redirection stuff because * this would lead to a deadloop. */ if (ofilename != NULL && strcmp(r->filename, ofilename) == 0) { rewritelog((r, 1, dconf->directory, "initial URL equal rewritten" " URL: %s [IGNORING REWRITE]", r->filename)); return OK; } tmpfilename = r->filename; /* if there is a valid base-URL then substitute * the per-dir prefix with this base-URL if the * current filename still is inside this per-dir * context. If not then treat the result as a * plain URL */ if (dconf->baseurl != NULL) { rewritelog((r, 2, dconf->directory, "trying to replace prefix " "%s with %s", dconf->directory, dconf->baseurl)); r->filename = subst_prefix_path(r, r->filename, dconf->directory, dconf->baseurl); } else { /* if no explicit base-URL exists we assume * that the directory prefix is also a valid URL * for this webserver and only try to remove the * document_root if it is prefix */ if ((ccp = ap_document_root(r)) != NULL) { /* strip trailing slash */ l = strlen(ccp); if (ccp[l-1] == '/') { --l; } if (!strncmp(r->filename, ccp, l) && r->filename[l] == '/') { rewritelog((r, 2,dconf->directory, "strip document_root" " prefix: %s -> %s", r->filename, r->filename+l)); r->filename = apr_pstrdup(r->pool, r->filename+l); } } } /* No base URL, or r->filename wasn't still under dconf->directory * or, r->filename wasn't still under the document root. * If there's a context document root AND a context prefix, and * the context document root is a prefix of r->filename, replace. * This allows a relative substitution on a path found by mod_userdir * or mod_alias without baking in a RewriteBase. */ if (tmpfilename == r->filename && !(dconf->options & OPTION_IGNORE_CONTEXT_INFO)) { if ((ccp = ap_context_document_root(r)) != NULL) { const char *prefix = ap_context_prefix(r); if (prefix != NULL) { rewritelog((r, 2, dconf->directory, "trying to replace " "context docroot %s with context prefix %s", ccp, prefix)); r->filename = subst_prefix_path(r, r->filename, ccp, prefix); } } } apr_table_setn(r->notes, "redirect-keeps-vary", ""); /* now initiate the internal redirect */ rewritelog((r, 1, dconf->directory, "internal redirect with %s " "[INTERNAL REDIRECT]", r->filename)); r->filename = apr_pstrcat(r->pool, "redirect:", r->filename, NULL); r->handler = REWRITE_REDIRECT_HANDLER_NAME; return OK; } } else { rewritelog((r, 1, dconf->directory, "pass through %s", r->filename)); r->filename = ofilename; return DECLINED; } } /* * MIME-type hook * [T=...,H=...] execution */ static int hook_mimetype(request_rec *r) { const char *t; /* type */ t = apr_table_get(r->notes, REWRITE_FORCED_MIMETYPE_NOTEVAR); if (t && *t) { rewritelog((r, 1, NULL, "force filename %s to have MIME-type '%s'", r->filename, t)); ap_set_content_type(r, t); } /* handler */ t = apr_table_get(r->notes, REWRITE_FORCED_HANDLER_NOTEVAR); if (t && *t) { rewritelog((r, 1, NULL, "force filename %s to have the " "Content-handler '%s'", r->filename, t)); r->handler = t; } return OK; } /* * "content" handler for internal redirects */ static int handler_redirect(request_rec *r) { if (strcmp(r->handler, REWRITE_REDIRECT_HANDLER_NAME)) { return DECLINED; } /* just make sure that we are really meant! */ if (strncmp(r->filename, "redirect:", 9) != 0) { return DECLINED; } /* now do the internal redirect */ ap_internal_redirect(apr_pstrcat(r->pool, r->filename+9, r->args ? "?" : NULL, r->args, NULL), r); /* and return gracefully */ return OK; } /* * +-------------------------------------------------------+ * | | * | Module paraphernalia * | | * +-------------------------------------------------------+ */ static const command_rec command_table[] = { AP_INIT_FLAG( "RewriteEngine", cmd_rewriteengine, NULL, OR_FILEINFO, "On or Off to enable or disable (default) the whole " "rewriting engine"), AP_INIT_ITERATE( "RewriteOptions", cmd_rewriteoptions, NULL, OR_FILEINFO, "List of option strings to set"), AP_INIT_TAKE1( "RewriteBase", cmd_rewritebase, NULL, OR_FILEINFO, "the base URL of the per-directory context"), AP_INIT_RAW_ARGS("RewriteCond", cmd_rewritecond, NULL, OR_FILEINFO, "an input string and a to be applied regexp-pattern"), AP_INIT_RAW_ARGS("RewriteRule", cmd_rewriterule, NULL, OR_FILEINFO, "an URL-applied regexp-pattern and a substitution URL"), AP_INIT_TAKE23( "RewriteMap", cmd_rewritemap, NULL, RSRC_CONF, "a mapname and a filename and options"), { NULL } }; static void ap_register_rewrite_mapfunc(char *name, rewrite_mapfunc_t *func) { apr_hash_set(mapfunc_hash, name, strlen(name), (const void *)func); } static void register_hooks(apr_pool_t *p) { /* fixup after mod_proxy, so that the proxied url will not * escaped accidentally by mod_proxy's fixup. */ static const char * const aszPre[]={ "mod_proxy.c", NULL }; /* make the hashtable before registering the function, so that * other modules are prevented from accessing uninitialized memory. */ mapfunc_hash = apr_hash_make(p); APR_REGISTER_OPTIONAL_FN(ap_register_rewrite_mapfunc); ap_hook_handler(handler_redirect, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_pre_config(pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(post_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_child_init(init_child, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_fixups(hook_fixup, aszPre, NULL, APR_HOOK_FIRST); ap_hook_fixups(hook_mimetype, NULL, NULL, APR_HOOK_LAST); ap_hook_translate_name(hook_uri2file, NULL, NULL, APR_HOOK_FIRST); } /* the main config structure */ AP_DECLARE_MODULE(rewrite) = { STANDARD20_MODULE_STUFF, config_perdir_create, /* create per-dir config structures */ config_perdir_merge, /* merge per-dir config structures */ config_server_create, /* create per-server config structures */ config_server_merge, /* merge per-server config structures */ command_table, /* table of config file commands */ register_hooks /* register hooks */ }; /*EOF*/ httpd-2.4.41/modules/mappers/mod_dir.dsp0000644000000000000500000001043110551346420016477 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_dir" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_dir - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_dir.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_dir.mak" CFG="mod_dir - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_dir - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_dir - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_dir - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_dir_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_dir.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_dir.so" /d LONG_NAME="dir_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_dir.so" /base:@..\..\os\win32\BaseAddr.ref,mod_dir.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_dir.so" /base:@..\..\os\win32\BaseAddr.ref,mod_dir.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_dir.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_dir - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_dir_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_dir.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_dir.so" /d LONG_NAME="dir_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_dir.so" /base:@..\..\os\win32\BaseAddr.ref,mod_dir.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_dir.so" /base:@..\..\os\win32\BaseAddr.ref,mod_dir.so # Begin Special Build Tool TargetPath=.\Debug\mod_dir.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_dir - Win32 Release" # Name "mod_dir - Win32 Debug" # Begin Source File SOURCE=.\mod_dir.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/mappers/mod_vhost_alias.exp0000644000000000000500000000002310150161574020237 0ustar rootsrcvhost_alias_module httpd-2.4.41/modules/mappers/mod_vhost_alias.mak0000644000000000000500000002423112701473373020231 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_vhost_alias.dsp !IF "$(CFG)" == "" CFG=mod_vhost_alias - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_vhost_alias - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_vhost_alias - Win32 Release" && "$(CFG)" != "mod_vhost_alias - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_vhost_alias.mak" CFG="mod_vhost_alias - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_vhost_alias - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_vhost_alias - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_vhost_alias - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_vhost_alias.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_vhost_alias.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_vhost_alias.obj" -@erase "$(INTDIR)\mod_vhost_alias.res" -@erase "$(INTDIR)\mod_vhost_alias_src.idb" -@erase "$(INTDIR)\mod_vhost_alias_src.pdb" -@erase "$(OUTDIR)\mod_vhost_alias.exp" -@erase "$(OUTDIR)\mod_vhost_alias.lib" -@erase "$(OUTDIR)\mod_vhost_alias.pdb" -@erase "$(OUTDIR)\mod_vhost_alias.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_vhost_alias_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_vhost_alias.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_vhost_alias.so" /d LONG_NAME="vhost_alias_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_vhost_alias.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_vhost_alias.pdb" /debug /out:"$(OUTDIR)\mod_vhost_alias.so" /implib:"$(OUTDIR)\mod_vhost_alias.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_vhost_alias.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_vhost_alias.obj" \ "$(INTDIR)\mod_vhost_alias.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_vhost_alias.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_vhost_alias.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_vhost_alias.so" if exist .\Release\mod_vhost_alias.so.manifest mt.exe -manifest .\Release\mod_vhost_alias.so.manifest -outputresource:.\Release\mod_vhost_alias.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_vhost_alias - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_vhost_alias.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_vhost_alias.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_vhost_alias.obj" -@erase "$(INTDIR)\mod_vhost_alias.res" -@erase "$(INTDIR)\mod_vhost_alias_src.idb" -@erase "$(INTDIR)\mod_vhost_alias_src.pdb" -@erase "$(OUTDIR)\mod_vhost_alias.exp" -@erase "$(OUTDIR)\mod_vhost_alias.lib" -@erase "$(OUTDIR)\mod_vhost_alias.pdb" -@erase "$(OUTDIR)\mod_vhost_alias.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_vhost_alias_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_vhost_alias.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_vhost_alias.so" /d LONG_NAME="vhost_alias_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_vhost_alias.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_vhost_alias.pdb" /debug /out:"$(OUTDIR)\mod_vhost_alias.so" /implib:"$(OUTDIR)\mod_vhost_alias.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_vhost_alias.so LINK32_OBJS= \ "$(INTDIR)\mod_vhost_alias.obj" \ "$(INTDIR)\mod_vhost_alias.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_vhost_alias.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_vhost_alias.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_vhost_alias.so" if exist .\Debug\mod_vhost_alias.so.manifest mt.exe -manifest .\Debug\mod_vhost_alias.so.manifest -outputresource:.\Debug\mod_vhost_alias.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_vhost_alias.dep") !INCLUDE "mod_vhost_alias.dep" !ELSE !MESSAGE Warning: cannot find "mod_vhost_alias.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_vhost_alias - Win32 Release" || "$(CFG)" == "mod_vhost_alias - Win32 Debug" !IF "$(CFG)" == "mod_vhost_alias - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\mappers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_vhost_alias - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\mappers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_vhost_alias - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\mappers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_vhost_alias - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\mappers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_vhost_alias - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\mappers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\mappers" !ELSEIF "$(CFG)" == "mod_vhost_alias - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\mappers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\mappers" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_vhost_alias - Win32 Release" "$(INTDIR)\mod_vhost_alias.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_vhost_alias.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_vhost_alias.so" /d LONG_NAME="vhost_alias_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_vhost_alias - Win32 Debug" "$(INTDIR)\mod_vhost_alias.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_vhost_alias.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_vhost_alias.so" /d LONG_NAME="vhost_alias_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_vhost_alias.c "$(INTDIR)\mod_vhost_alias.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/mappers/NWGNUrewrite0000644000000000000500000001024011540546347016604 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/database \ $(AP_WORK)/modules/ssl \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = rewrite # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Rewrite Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Rewrite Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/rewrite.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_rewrite.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ rewrite_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/mappers/mod_imagemap.mak0000644000000000000500000002362112701473373017477 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_imagemap.dsp !IF "$(CFG)" == "" CFG=mod_imagemap - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_imagemap - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_imagemap - Win32 Release" && "$(CFG)" != "mod_imagemap - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_imagemap.mak" CFG="mod_imagemap - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_imagemap - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_imagemap - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_imagemap - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_imagemap.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_imagemap.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_imagemap.obj" -@erase "$(INTDIR)\mod_imagemap.res" -@erase "$(INTDIR)\mod_imagemap_src.idb" -@erase "$(INTDIR)\mod_imagemap_src.pdb" -@erase "$(OUTDIR)\mod_imagemap.exp" -@erase "$(OUTDIR)\mod_imagemap.lib" -@erase "$(OUTDIR)\mod_imagemap.pdb" -@erase "$(OUTDIR)\mod_imagemap.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_imagemap_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_imagemap.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_imagemap.so" /d LONG_NAME="imagemap_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_imagemap.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_imagemap.pdb" /debug /out:"$(OUTDIR)\mod_imagemap.so" /implib:"$(OUTDIR)\mod_imagemap.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_imagemap.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_imagemap.obj" \ "$(INTDIR)\mod_imagemap.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_imagemap.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_imagemap.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_imagemap.so" if exist .\Release\mod_imagemap.so.manifest mt.exe -manifest .\Release\mod_imagemap.so.manifest -outputresource:.\Release\mod_imagemap.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_imagemap - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_imagemap.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_imagemap.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_imagemap.obj" -@erase "$(INTDIR)\mod_imagemap.res" -@erase "$(INTDIR)\mod_imagemap_src.idb" -@erase "$(INTDIR)\mod_imagemap_src.pdb" -@erase "$(OUTDIR)\mod_imagemap.exp" -@erase "$(OUTDIR)\mod_imagemap.lib" -@erase "$(OUTDIR)\mod_imagemap.pdb" -@erase "$(OUTDIR)\mod_imagemap.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_imagemap_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_imagemap.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_imagemap.so" /d LONG_NAME="imagemap_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_imagemap.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_imagemap.pdb" /debug /out:"$(OUTDIR)\mod_imagemap.so" /implib:"$(OUTDIR)\mod_imagemap.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_imagemap.so LINK32_OBJS= \ "$(INTDIR)\mod_imagemap.obj" \ "$(INTDIR)\mod_imagemap.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_imagemap.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_imagemap.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_imagemap.so" if exist .\Debug\mod_imagemap.so.manifest mt.exe -manifest .\Debug\mod_imagemap.so.manifest -outputresource:.\Debug\mod_imagemap.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_imagemap.dep") !INCLUDE "mod_imagemap.dep" !ELSE !MESSAGE Warning: cannot find "mod_imagemap.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_imagemap - Win32 Release" || "$(CFG)" == "mod_imagemap - Win32 Debug" !IF "$(CFG)" == "mod_imagemap - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\mappers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_imagemap - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\mappers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_imagemap - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\mappers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_imagemap - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\mappers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_imagemap - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\mappers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\mappers" !ELSEIF "$(CFG)" == "mod_imagemap - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\mappers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\mappers" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_imagemap - Win32 Release" "$(INTDIR)\mod_imagemap.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_imagemap.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_imagemap.so" /d LONG_NAME="imagemap_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_imagemap - Win32 Debug" "$(INTDIR)\mod_imagemap.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_imagemap.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_imagemap.so" /d LONG_NAME="imagemap_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_imagemap.c "$(INTDIR)\mod_imagemap.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/mappers/mod_imagemap.c0000644000000000000500000007241112640532101017135 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * This imagemap module started as a port of the original imagemap.c * written by Rob McCool (11/13/93 robm@ncsa.uiuc.edu). * This version includes the mapping algorithms found in version 1.3 * of imagemap.c. * * Contributors to this code include: * * Kevin Hughes, kevinh@pulua.hcc.hawaii.edu * * Eric Haines, erich@eye.com * "macmartinized" polygon code copyright 1992 by Eric Haines, erich@eye.com * * Randy Terbush, randy@zyzzyva.com * port to Apache module format, "base_uri" and support for relative URLs * * James H. Cloos, Jr., cloos@jhcloos.com * Added point datatype, using code in NCSA's version 1.8 imagemap.c * program, as distributed with version 1.4.1 of their server. * The point code is originally added by Craig Milo Rogers, Rogers@ISI.Edu * * Nathan Kurz, nate@tripod.com * Rewrite/reorganization. New handling of default, base and relative URLs. * New Configuration directives: * ImapMenu {none, formatted, semiformatted, unformatted} * ImapDefault {error, nocontent, referer, menu, URL} * ImapBase {map, referer, URL} * Support for creating non-graphical menu added. (backwards compatible): * Old: directive URL [x,y ...] * New: directive URL "Menu text" [x,y ...] * or: directive URL x,y ... "Menu text" * Map format and menu concept courtesy Joshua Bell, jsbell@acs.ucalgary.ca. * * Mark Cox, mark@ukweb.com, Allow relative URLs even when no base specified */ #include "apr.h" #include "apr_strings.h" #include "apr_lib.h" #define APR_WANT_STDIO /* for sscanf() */ #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_core.h" #include "http_protocol.h" #include "http_main.h" #include "http_log.h" #include "util_script.h" #include "mod_core.h" #define IMAP_MAGIC_TYPE "application/x-httpd-imap" #define MAXVERTS 100 #define X 0 #define Y 1 #define IMAP_MENU_DEFAULT "formatted" #define IMAP_DEFAULT_DEFAULT "nocontent" #define IMAP_BASE_DEFAULT "map" module AP_MODULE_DECLARE_DATA imagemap_module; typedef struct { char *imap_menu; char *imap_default; char *imap_base; } imap_conf_rec; static void *create_imap_dir_config(apr_pool_t *p, char *dummy) { imap_conf_rec *icr = (imap_conf_rec *) apr_palloc(p, sizeof(imap_conf_rec)); icr->imap_menu = NULL; icr->imap_default = NULL; icr->imap_base = NULL; return icr; } static void *merge_imap_dir_configs(apr_pool_t *p, void *basev, void *addv) { imap_conf_rec *new = (imap_conf_rec *) apr_palloc(p, sizeof(imap_conf_rec)); imap_conf_rec *base = (imap_conf_rec *) basev; imap_conf_rec *add = (imap_conf_rec *) addv; new->imap_menu = add->imap_menu ? add->imap_menu : base->imap_menu; new->imap_default = add->imap_default ? add->imap_default : base->imap_default; new->imap_base = add->imap_base ? add->imap_base : base->imap_base; return new; } static const command_rec imap_cmds[] = { AP_INIT_TAKE1("ImapMenu", ap_set_string_slot, (void *)APR_OFFSETOF(imap_conf_rec, imap_menu), OR_INDEXES, "the type of menu generated: none, formatted, semiformatted, " "unformatted"), AP_INIT_TAKE1("ImapDefault", ap_set_string_slot, (void *)APR_OFFSETOF(imap_conf_rec, imap_default), OR_INDEXES, "the action taken if no match: error, nocontent, referer, " "menu, URL"), AP_INIT_TAKE1("ImapBase", ap_set_string_slot, (void *)APR_OFFSETOF(imap_conf_rec, imap_base), OR_INDEXES, "the base for all URL's: map, referer, URL (or start of)"), {NULL} }; static int pointinrect(const double point[2], double coords[MAXVERTS][2]) { double max[2], min[2]; if (coords[0][X] > coords[1][X]) { max[0] = coords[0][X]; min[0] = coords[1][X]; } else { max[0] = coords[1][X]; min[0] = coords[0][X]; } if (coords[0][Y] > coords[1][Y]) { max[1] = coords[0][Y]; min[1] = coords[1][Y]; } else { max[1] = coords[1][Y]; min[1] = coords[0][Y]; } return ((point[X] >= min[0] && point[X] <= max[0]) && (point[Y] >= min[1] && point[Y] <= max[1])); } static int pointincircle(const double point[2], double coords[MAXVERTS][2]) { double radius1, radius2; radius1 = ((coords[0][Y] - coords[1][Y]) * (coords[0][Y] - coords[1][Y])) + ((coords[0][X] - coords[1][X]) * (coords[0][X] - coords[1][X])); radius2 = ((coords[0][Y] - point[Y]) * (coords[0][Y] - point[Y])) + ((coords[0][X] - point[X]) * (coords[0][X] - point[X])); return (radius2 <= radius1); } #define fmin(a,b) (((a)>(b))?(b):(a)) #define fmax(a,b) (((a)>(b))?(a):(b)) static int pointinpoly(const double point[2], double pgon[MAXVERTS][2]) { int i, numverts, crossings = 0; double x = point[X], y = point[Y]; for (numverts = 0; numverts < MAXVERTS && pgon[numverts][X] != -1; numverts++) { /* just counting the vertexes */ } for (i = 0; i < numverts; i++) { double x1=pgon[i][X]; double y1=pgon[i][Y]; double x2=pgon[(i + 1) % numverts][X]; double y2=pgon[(i + 1) % numverts][Y]; double d=(y - y1) * (x2 - x1) - (x - x1) * (y2 - y1); if ((y1 >= y) != (y2 >= y)) { crossings +=y2 - y1 >= 0 ? d >= 0 : d <= 0; } if (!d && fmin(x1,x2) <= x && x <= fmax(x1,x2) && fmin(y1,y2) <= y && y <= fmax(y1,y2)) { return 1; } } return crossings & 0x01; } static int is_closer(const double point[2], double coords[MAXVERTS][2], double *closest) { double dist_squared = ((point[X] - coords[0][X]) * (point[X] - coords[0][X])) + ((point[Y] - coords[0][Y]) * (point[Y] - coords[0][Y])); if (point[X] < 0 || point[Y] < 0) { return (0); /* don't mess around with negative coordinates */ } if (*closest < 0 || dist_squared < *closest) { *closest = dist_squared; return (1); /* if this is the first point or is the closest yet set 'closest' equal to this distance^2 */ } return (0); /* if it's not the first or closest */ } static double get_x_coord(const char *args) { char *endptr; /* we want it non-null */ double x_coord = -1; /* -1 is returned if no coordinate is given */ if (args == NULL) { return (-1); /* in case we aren't passed anything */ } while (*args && !apr_isdigit(*args) && *args != ',') { args++; /* jump to the first digit, but not past a comma or end */ } x_coord = strtod(args, &endptr); if (endptr > args) { /* if a conversion was made */ return (x_coord); } return (-1); /* else if no conversion was made, or if no args was given */ } static double get_y_coord(const char *args) { char *endptr; /* we want it non-null */ const char *start_of_y = NULL; double y_coord = -1; /* -1 is returned on error */ if (args == NULL) { return (-1); /* in case we aren't passed anything */ } start_of_y = ap_strchr_c(args, ','); /* the comma */ if (start_of_y) { start_of_y++; /* start looking at the character after the comma */ while (*start_of_y && !apr_isdigit(*start_of_y)) { start_of_y++; /* jump to the first digit, but not past the end */ } y_coord = strtod(start_of_y, &endptr); if (endptr > start_of_y) { return (y_coord); } } return (-1); /* if no conversion was made, or no comma was found in args */ } /* See if string has a "quoted part", and if so set *quoted_part to * the first character of the quoted part, then hammer a \0 onto the * trailing quote, and set *string to point at the first character * past the second quote. * * Otherwise set *quoted_part to NULL, and leave *string alone. */ static void read_quoted(char **string, char **quoted_part) { char *strp = *string; /* assume there's no quoted part */ *quoted_part = NULL; while (apr_isspace(*strp)) { strp++; /* go along string until non-whitespace */ } if (*strp == '"') { /* if that character is a double quote */ strp++; /* step over it */ *quoted_part = strp; /* note where the quoted part begins */ while (*strp && *strp != '"') { ++strp; /* skip the quoted portion */ } *strp = '\0'; /* end the string with a NUL */ strp++; /* step over the last double quote */ *string = strp; } } /* * returns the mapped URL or NULL. */ static const char *imap_url(request_rec *r, const char *base, const char *value) { /* translates a value into a URL. */ int slen, clen; char *string_pos = NULL; const char *string_pos_const = NULL; char *directory = NULL; const char *referer = NULL; char *my_base; if (!strcasecmp(value, "map") || !strcasecmp(value, "menu")) { return ap_construct_url(r->pool, r->uri, r); } if (!strcasecmp(value, "nocontent") || !strcasecmp(value, "error")) { return apr_pstrdup(r->pool, value); /* these are handled elsewhere, so just copy them */ } if (!strcasecmp(value, "referer")) { referer = apr_table_get(r->headers_in, "Referer"); if (referer && *referer) { return referer; } else { /* XXX: This used to do *value = '\0'; ... which is totally bogus * because it hammers the passed in value, which can be a string * constant, or part of a config, or whatever. Total garbage. * This works around that without changing the rest of this * code much */ value = ""; /* if 'referer' but no referring page, null the value */ } } string_pos_const = value; while (apr_isalpha(*string_pos_const)) { string_pos_const++; /* go along the URL from the map until a non-letter */ } if (*string_pos_const == ':') { /* if letters and then a colon (like http:) */ /* it's an absolute URL, so use it! */ return apr_pstrdup(r->pool, value); } if (!base || !*base) { if (value && *value) { return apr_pstrdup(r->pool, value); /* no base: use what is given */ } /* no base, no value: pick a simple default */ return ap_construct_url(r->pool, "/", r); } /* must be a relative URL to be combined with base */ if (ap_strchr_c(base, '/') == NULL && (!strncmp(value, "../", 3) || !strcmp(value, ".."))) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00677) "invalid base directive in map file: %s", r->uri); return NULL; } my_base = apr_pstrdup(r->pool, base); string_pos = my_base; while (*string_pos) { if (*string_pos == '/' && *(string_pos + 1) == '/') { string_pos += 2; /* if there are two slashes, jump over them */ continue; } if (*string_pos == '/') { /* the first single slash */ if (value[0] == '/') { *string_pos = '\0'; } /* if the URL from the map starts from root, end the base URL string at the first single slash */ else { directory = string_pos; /* save the start of the directory portion */ string_pos = strrchr(string_pos, '/'); /* now reuse string_pos */ string_pos++; /* step over that last slash */ *string_pos = '\0'; } /* but if the map url is relative, leave the slash on the base (if there is one) */ break; } string_pos++; /* until we get to the end of my_base without finding a slash by itself */ } while (!strncmp(value, "../", 3) || !strcmp(value, "..")) { if (directory && (slen = strlen(directory))) { /* for each '..', knock a directory off the end by ending the string right at the last slash. But only consider the directory portion: don't eat into the server name. And only try if a directory portion was found */ clen = slen - 1; while ((slen - clen) == 1) { if ((string_pos = strrchr(directory, '/'))) { *string_pos = '\0'; } clen = strlen(directory); if (clen == 0) { break; } } value += 2; /* jump over the '..' that we found in the value */ } else if (directory) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00678) "invalid directory name in map file: %s", r->uri); return NULL; } if (!strncmp(value, "/../", 4) || !strcmp(value, "/..")) { value++; /* step over the '/' if there are more '..' to do. This way, we leave the starting '/' on value after the last '..', but get rid of it otherwise */ } } /* by this point, value does not start with '..' */ if (value && *value) { return apr_pstrcat(r->pool, my_base, value, NULL); } return my_base; } static int imap_reply(request_rec *r, const char *redirect) { if (!strcasecmp(redirect, "error")) { /* they actually requested an error! */ return HTTP_INTERNAL_SERVER_ERROR; } if (!strcasecmp(redirect, "nocontent")) { /* tell the client to keep the page it has */ return HTTP_NO_CONTENT; } if (redirect && *redirect) { /* must be a URL, so redirect to it */ apr_table_setn(r->headers_out, "Location", redirect); return HTTP_MOVED_TEMPORARILY; } return HTTP_INTERNAL_SERVER_ERROR; } static void menu_header(request_rec *r, char *menu) { ap_set_content_type(r, "text/html; charset=ISO-8859-1"); ap_rvputs(r, DOCTYPE_HTML_3_2, "\nMenu for ", ap_escape_html(r->pool, r->uri), "\n\n", NULL); if (!strcasecmp(menu, "formatted")) { ap_rvputs(r, "

    Menu for ", ap_escape_html(r->pool, r->uri), "

    \n
    \n\n", NULL); } } static void menu_blank(request_rec *r, char *menu) { if (!strcasecmp(menu, "formatted")) { ap_rputs("\n", r); } else if (!strcasecmp(menu, "semiformatted")) { ap_rputs("
    \n", r); } else if (!strcasecmp(menu, "unformatted")) { ap_rputs("\n", r); } } static void menu_comment(request_rec *r, char *menu, char *comment) { /* comments are ignored in the 'formatted' form */ if (!strcasecmp(menu, "formatted")) { ap_rputs("\n", r); /* print just a newline if 'formatted' */ } else if (!strcasecmp(menu, "semiformatted") && *comment) { ap_rvputs(r, comment, "\n", NULL); } else if (!strcasecmp(menu, "unformatted") && *comment) { ap_rvputs(r, comment, "\n", NULL); } } static void menu_default(request_rec *r, const char *menu, const char *href, const char *text) { char *ehref, *etext; if (!strcasecmp(href, "error") || !strcasecmp(href, "nocontent")) { return; /* don't print such lines, these aren't really href's */ } ehref = ap_escape_uri(r->pool, href); etext = ap_escape_html(r->pool, text); if (!strcasecmp(menu, "formatted")) { ap_rvputs(r, "
    (Default) ", etext,
                         "
    \n", NULL); } else if (!strcasecmp(menu, "semiformatted")) { ap_rvputs(r, "
    (Default) ", etext,
                   "
    \n", NULL); } else if (!strcasecmp(menu, "unformatted")) { ap_rvputs(r, "", etext, "", NULL); } } static void menu_directive(request_rec *r, const char *menu, const char *href, const char *text) { char *ehref, *etext; if (!strcasecmp(href, "error") || !strcasecmp(href, "nocontent")) { return; /* don't print such lines, as this isn't really an href */ } ehref = ap_escape_uri(r->pool, href); etext = ap_escape_html(r->pool, text); if (!strcasecmp(menu, "formatted")) { ap_rvputs(r, "
              ", etext,
                   "
    \n", NULL); } else if (!strcasecmp(menu, "semiformatted")) { ap_rvputs(r, "
              ", etext,
                   "
    \n", NULL); } else if (!strcasecmp(menu, "unformatted")) { ap_rvputs(r, "", etext, "", NULL); } } static void menu_footer(request_rec *r) { ap_rputs("\n\n\n\n", r); /* finish the menu */ } static int imap_handler_internal(request_rec *r) { char input[MAX_STRING_LEN]; char *directive; char *value; char *href_text; const char *base; const char *redirect; const char *mapdflt; char *closest = NULL; double closest_yet = -1; apr_status_t status; double testpoint[2]; double pointarray[MAXVERTS + 1][2]; int vertex; char *string_pos; int showmenu = 0; imap_conf_rec *icr; char *imap_menu; char *imap_default; char *imap_base; ap_configfile_t *imap; icr = ap_get_module_config(r->per_dir_config, &imagemap_module); imap_menu = icr->imap_menu ? icr->imap_menu : IMAP_MENU_DEFAULT; imap_default = icr->imap_default ? icr->imap_default : IMAP_DEFAULT_DEFAULT; imap_base = icr->imap_base ? icr->imap_base : IMAP_BASE_DEFAULT; status = ap_pcfg_openfile(&imap, r->pool, r->filename); if (status != APR_SUCCESS) { return HTTP_NOT_FOUND; } base = imap_url(r, NULL, imap_base); /* set base according to default */ if (!base) { return HTTP_INTERNAL_SERVER_ERROR; } mapdflt = imap_url(r, NULL, imap_default); /* and default to global default */ if (!mapdflt) { return HTTP_INTERNAL_SERVER_ERROR; } testpoint[X] = get_x_coord(r->args); testpoint[Y] = get_y_coord(r->args); if ((testpoint[X] == -1 || testpoint[Y] == -1) || (testpoint[X] == 0 && testpoint[Y] == 0)) { /* if either is -1 or if both are zero (new Lynx) */ /* we don't have valid coordinates */ testpoint[X] = -1; testpoint[Y] = -1; if (strncasecmp(imap_menu, "none", 2)) { showmenu = 1; /* show the menu _unless_ ImapMenu is 'none' or 'no' */ } } if (showmenu) { /* send start of imagemap menu if we're going to */ menu_header(r, imap_menu); } while (!ap_cfg_getline(input, sizeof(input), imap)) { if (!input[0]) { if (showmenu) { menu_blank(r, imap_menu); } continue; } if (input[0] == '#') { if (showmenu) { menu_comment(r, imap_menu, input + 1); } continue; } /* blank lines and comments are ignored if we aren't printing a menu */ /* find the first two space delimited fields, recall that * ap_cfg_getline has removed leading/trailing whitespace. * * note that we're tokenizing as we go... if we were to use the * ap_getword() class of functions we would end up allocating extra * memory for every line of the map file */ string_pos = input; if (!*string_pos) { /* need at least two fields */ goto need_2_fields; } directive = string_pos; while (*string_pos && !apr_isspace(*string_pos)) { /* past directive */ ++string_pos; } if (!*string_pos) { /* need at least two fields */ goto need_2_fields; } *string_pos++ = '\0'; if (!*string_pos) { /* need at least two fields */ goto need_2_fields; } while (apr_isspace(*string_pos)) { /* past whitespace */ ++string_pos; } value = string_pos; while (*string_pos && !apr_isspace(*string_pos)) { /* past value */ ++string_pos; } if (apr_isspace(*string_pos)) { *string_pos++ = '\0'; } else { /* end of input, don't advance past it */ *string_pos = '\0'; } if (!strncasecmp(directive, "base", 4)) { /* base, base_uri */ base = imap_url(r, NULL, value); if (!base) { goto menu_bail; } continue; /* base is never printed to a menu */ } read_quoted(&string_pos, &href_text); if (!strcasecmp(directive, "default")) { /* default */ mapdflt = imap_url(r, NULL, value); if (!mapdflt) { goto menu_bail; } if (showmenu) { /* print the default if there's a menu */ redirect = imap_url(r, base, mapdflt); if (!redirect) { goto menu_bail; } menu_default(r, imap_menu, redirect, href_text ? href_text : mapdflt); } continue; } vertex = 0; while (vertex < MAXVERTS && sscanf(string_pos, "%lf%*[, ]%lf", &pointarray[vertex][X], &pointarray[vertex][Y]) == 2) { /* Now skip what we just read... we can't use ANSIism %n */ while (apr_isspace(*string_pos)) { /* past whitespace */ string_pos++; } while (apr_isdigit(*string_pos)) { /* and the 1st number */ string_pos++; } string_pos++; /* skip the ',' */ while (apr_isspace(*string_pos)) { /* past any more whitespace */ string_pos++; } while (apr_isdigit(*string_pos)) { /* 2nd number */ string_pos++; } vertex++; } /* so long as there are more vertices to read, and we have room, read them in. We start where we left off of the last sscanf, not at the beginning. */ pointarray[vertex][X] = -1; /* signals the end of vertices */ if (showmenu) { if (!href_text) { read_quoted(&string_pos, &href_text); /* href text could be here instead */ } redirect = imap_url(r, base, value); if (!redirect) { goto menu_bail; } menu_directive(r, imap_menu, redirect, href_text ? href_text : value); continue; } /* note that we don't make it past here if we are making a menu */ if (testpoint[X] == -1 || pointarray[0][X] == -1) { continue; /* don't try the following tests if testpoints are invalid, or if there are no coordinates */ } if (!strcasecmp(directive, "poly")) { /* poly */ if (pointinpoly(testpoint, pointarray)) { ap_cfg_closefile(imap); redirect = imap_url(r, base, value); if (!redirect) { return HTTP_INTERNAL_SERVER_ERROR; } return (imap_reply(r, redirect)); } continue; } if (!strcasecmp(directive, "circle")) { /* circle */ if (pointincircle(testpoint, pointarray)) { ap_cfg_closefile(imap); redirect = imap_url(r, base, value); if (!redirect) { return HTTP_INTERNAL_SERVER_ERROR; } return (imap_reply(r, redirect)); } continue; } if (!strcasecmp(directive, "rect")) { /* rect */ if (pointinrect(testpoint, pointarray)) { ap_cfg_closefile(imap); redirect = imap_url(r, base, value); if (!redirect) { return HTTP_INTERNAL_SERVER_ERROR; } return (imap_reply(r, redirect)); } continue; } if (!strcasecmp(directive, "point")) { /* point */ if (is_closer(testpoint, pointarray, &closest_yet)) { closest = apr_pstrdup(r->pool, value); } continue; } /* move on to next line whether it's closest or not */ } /* nothing matched, so we get another line! */ ap_cfg_closefile(imap); /* we are done with the map file; close it */ if (showmenu) { menu_footer(r); /* finish the menu and we are done */ return OK; } if (closest) { /* if a 'point' directive has been seen */ redirect = imap_url(r, base, closest); if (!redirect) { return HTTP_INTERNAL_SERVER_ERROR; } return (imap_reply(r, redirect)); } if (mapdflt) { /* a default should be defined, even if only 'nocontent' */ redirect = imap_url(r, base, mapdflt); if (!redirect) { return HTTP_INTERNAL_SERVER_ERROR; } return (imap_reply(r, redirect)); } return HTTP_INTERNAL_SERVER_ERROR; /* If we make it this far, we failed. They lose! */ need_2_fields: ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00679) "map file %s, line %d syntax error: requires at " "least two fields", r->uri, imap->line_number); /* fall through */ menu_bail: ap_cfg_closefile(imap); if (showmenu) { /* There's not much else we can do ... we've already sent the headers * to the client. */ ap_rputs("\n\n[an internal server error occured]\n", r); menu_footer(r); return OK; } return HTTP_INTERNAL_SERVER_ERROR; } static int imap_handler(request_rec *r) { /* Optimization: skip the allocation of large local variables on the * stack (in imap_handler_internal()) on requests that aren't using * imagemaps */ if (r->method_number != M_GET || (strcmp(r->handler,IMAP_MAGIC_TYPE) && strcmp(r->handler, "imap-file"))) { return DECLINED; } else { return imap_handler_internal(r); } } static void register_hooks(apr_pool_t *p) { ap_hook_handler(imap_handler,NULL,NULL,APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(imagemap) = { STANDARD20_MODULE_STUFF, create_imap_dir_config, /* dir config creater */ merge_imap_dir_configs, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ imap_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/mappers/mod_speling.exp0000644000000000000500000000001710150161574017367 0ustar rootsrcspeling_module httpd-2.4.41/modules/mappers/mod_userdir.dsp0000644000000000000500000001062110551346420017377 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_userdir" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_userdir - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_userdir.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_userdir.mak" CFG="mod_userdir - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_userdir - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_userdir - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_userdir - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_userdir_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_userdir.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_userdir.so" /d LONG_NAME="userdir_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_userdir.so" /base:@..\..\os\win32\BaseAddr.ref,mod_userdir.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_userdir.so" /base:@..\..\os\win32\BaseAddr.ref,mod_userdir.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_userdir.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_userdir - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_userdir_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_userdir.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_userdir.so" /d LONG_NAME="userdir_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_userdir.so" /base:@..\..\os\win32\BaseAddr.ref,mod_userdir.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_userdir.so" /base:@..\..\os\win32\BaseAddr.ref,mod_userdir.so # Begin Special Build Tool TargetPath=.\Debug\mod_userdir.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_userdir - Win32 Release" # Name "mod_userdir - Win32 Debug" # Begin Source File SOURCE=.\mod_userdir.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/mappers/mod_actions.exp0000644000000000000500000000001710150161574017366 0ustar rootsrcactions_module httpd-2.4.41/modules/mappers/mod_vhost_alias.dsp0000644000000000000500000001101110551346420020230 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_vhost_alias" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_vhost_alias - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_vhost_alias.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_vhost_alias.mak" CFG="mod_vhost_alias - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_vhost_alias - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_vhost_alias - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_vhost_alias - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_vhost_alias_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_vhost_alias.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_vhost_alias.so" /d LONG_NAME="vhost_alias_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_vhost_alias.so" /base:@..\..\os\win32\BaseAddr.ref,mod_vhost_alias.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_vhost_alias.so" /base:@..\..\os\win32\BaseAddr.ref,mod_vhost_alias.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_vhost_alias.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_vhost_alias - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_vhost_alias_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_vhost_alias.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_vhost_alias.so" /d LONG_NAME="vhost_alias_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_vhost_alias.so" /base:@..\..\os\win32\BaseAddr.ref,mod_vhost_alias.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_vhost_alias.so" /base:@..\..\os\win32\BaseAddr.ref,mod_vhost_alias.so # Begin Special Build Tool TargetPath=.\Debug\mod_vhost_alias.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_vhost_alias - Win32 Release" # Name "mod_vhost_alias - Win32 Debug" # Begin Source File SOURCE=.\mod_vhost_alias.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/mappers/mod_dir.mak0000644000000000000500000002273112701473373016476 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_dir.dsp !IF "$(CFG)" == "" CFG=mod_dir - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_dir - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_dir - Win32 Release" && "$(CFG)" != "mod_dir - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_dir.mak" CFG="mod_dir - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_dir - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_dir - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_dir - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_dir.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_dir.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_dir.obj" -@erase "$(INTDIR)\mod_dir.res" -@erase "$(INTDIR)\mod_dir_src.idb" -@erase "$(INTDIR)\mod_dir_src.pdb" -@erase "$(OUTDIR)\mod_dir.exp" -@erase "$(OUTDIR)\mod_dir.lib" -@erase "$(OUTDIR)\mod_dir.pdb" -@erase "$(OUTDIR)\mod_dir.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_dir_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_dir.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_dir.so" /d LONG_NAME="dir_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_dir.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_dir.pdb" /debug /out:"$(OUTDIR)\mod_dir.so" /implib:"$(OUTDIR)\mod_dir.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_dir.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_dir.obj" \ "$(INTDIR)\mod_dir.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_dir.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_dir.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_dir.so" if exist .\Release\mod_dir.so.manifest mt.exe -manifest .\Release\mod_dir.so.manifest -outputresource:.\Release\mod_dir.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_dir - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_dir.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_dir.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_dir.obj" -@erase "$(INTDIR)\mod_dir.res" -@erase "$(INTDIR)\mod_dir_src.idb" -@erase "$(INTDIR)\mod_dir_src.pdb" -@erase "$(OUTDIR)\mod_dir.exp" -@erase "$(OUTDIR)\mod_dir.lib" -@erase "$(OUTDIR)\mod_dir.pdb" -@erase "$(OUTDIR)\mod_dir.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_dir_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_dir.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_dir.so" /d LONG_NAME="dir_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_dir.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_dir.pdb" /debug /out:"$(OUTDIR)\mod_dir.so" /implib:"$(OUTDIR)\mod_dir.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_dir.so LINK32_OBJS= \ "$(INTDIR)\mod_dir.obj" \ "$(INTDIR)\mod_dir.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_dir.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_dir.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_dir.so" if exist .\Debug\mod_dir.so.manifest mt.exe -manifest .\Debug\mod_dir.so.manifest -outputresource:.\Debug\mod_dir.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_dir.dep") !INCLUDE "mod_dir.dep" !ELSE !MESSAGE Warning: cannot find "mod_dir.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_dir - Win32 Release" || "$(CFG)" == "mod_dir - Win32 Debug" !IF "$(CFG)" == "mod_dir - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\mappers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_dir - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\mappers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_dir - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\mappers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_dir - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\mappers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_dir - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\mappers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\mappers" !ELSEIF "$(CFG)" == "mod_dir - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\mappers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\mappers" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_dir - Win32 Release" "$(INTDIR)\mod_dir.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_dir.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_dir.so" /d LONG_NAME="dir_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_dir - Win32 Debug" "$(INTDIR)\mod_dir.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_dir.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_dir.so" /d LONG_NAME="dir_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_dir.c "$(INTDIR)\mod_dir.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/mappers/NWGNUuserdir0000644000000000000500000001020111540546347016575 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = userdir # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) User Dir Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = UserDir Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/userdir.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_userdir.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ userdir_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/mappers/NWGNUactions0000644000000000000500000001014311540546347016565 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = actions # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Actions Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Actions Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/actions.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_actions.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ actions_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/mappers/mod_dir.c0000644000000000000500000003347113066765661016164 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_dir.c: handle default index files, and trailing-/ redirects */ #include "apr_strings.h" #include "apr_lib.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_request.h" #include "http_protocol.h" #include "http_log.h" #include "http_main.h" #include "util_script.h" #include "mod_rewrite.h" module AP_MODULE_DECLARE_DATA dir_module; typedef enum { MODDIR_OFF = 0, MODDIR_ON, MODDIR_UNSET } moddir_cfg; #define REDIRECT_OFF 0 #define REDIRECT_UNSET 1 typedef struct dir_config_struct { apr_array_header_t *index_names; moddir_cfg do_slash; moddir_cfg checkhandler; int redirect_index; const char *dflt; } dir_config_rec; #define DIR_CMD_PERMS OR_INDEXES static const char *add_index(cmd_parms *cmd, void *dummy, const char *arg) { dir_config_rec *d = dummy; const char *t, *w; int count = 0; if (!d->index_names) { d->index_names = apr_array_make(cmd->pool, 2, sizeof(char *)); } t = arg; while ((w = ap_getword_conf(cmd->pool, &t)) && w[0]) { if (count == 0 && !strcasecmp(w, "disabled")) { /* peek to see if "disabled" is first in a series of arguments */ const char *tt = t; const char *ww = ap_getword_conf(cmd->temp_pool, &tt); if (ww[0] == '\0') { /* "disabled" is first, and alone */ apr_array_clear(d->index_names); break; } } *(const char **)apr_array_push(d->index_names) = w; count++; } return NULL; } static const char *configure_slash(cmd_parms *cmd, void *d_, int arg) { dir_config_rec *d = d_; d->do_slash = arg ? MODDIR_ON : MODDIR_OFF; return NULL; } static const char *configure_checkhandler(cmd_parms *cmd, void *d_, int arg) { dir_config_rec *d = d_; d->checkhandler = arg ? MODDIR_ON : MODDIR_OFF; return NULL; } static const char *configure_redirect(cmd_parms *cmd, void *d_, const char *arg1) { dir_config_rec *d = d_; int status; if (!strcasecmp(arg1, "ON")) status = HTTP_MOVED_TEMPORARILY; else if (!strcasecmp(arg1, "OFF")) status = REDIRECT_OFF; else if (!strcasecmp(arg1, "permanent")) status = HTTP_MOVED_PERMANENTLY; else if (!strcasecmp(arg1, "temp")) status = HTTP_MOVED_TEMPORARILY; else if (!strcasecmp(arg1, "seeother")) status = HTTP_SEE_OTHER; else if (apr_isdigit(*arg1)) { status = atoi(arg1); if (!ap_is_HTTP_REDIRECT(status)) { return "DirectoryIndexRedirect only accepts values between 300 and 399"; } } else { return "DirectoryIndexRedirect ON|OFF|permanent|temp|seeother|3xx"; } d->redirect_index = status; return NULL; } static const command_rec dir_cmds[] = { AP_INIT_TAKE1("FallbackResource", ap_set_string_slot, (void*)APR_OFFSETOF(dir_config_rec, dflt), DIR_CMD_PERMS, "Set a default handler"), AP_INIT_RAW_ARGS("DirectoryIndex", add_index, NULL, DIR_CMD_PERMS, "a list of file names"), AP_INIT_FLAG("DirectorySlash", configure_slash, NULL, DIR_CMD_PERMS, "On or Off"), AP_INIT_FLAG("DirectoryCheckHandler", configure_checkhandler, NULL, DIR_CMD_PERMS, "On or Off"), AP_INIT_TAKE1("DirectoryIndexRedirect", configure_redirect, NULL, DIR_CMD_PERMS, "On, Off, or a 3xx status code."), {NULL} }; static void *create_dir_config(apr_pool_t *p, char *dummy) { dir_config_rec *new = apr_pcalloc(p, sizeof(dir_config_rec)); new->index_names = NULL; new->do_slash = MODDIR_UNSET; new->checkhandler = MODDIR_UNSET; new->redirect_index = REDIRECT_UNSET; return (void *) new; } static void *merge_dir_configs(apr_pool_t *p, void *basev, void *addv) { dir_config_rec *new = apr_pcalloc(p, sizeof(dir_config_rec)); dir_config_rec *base = (dir_config_rec *)basev; dir_config_rec *add = (dir_config_rec *)addv; new->index_names = add->index_names ? add->index_names : base->index_names; new->do_slash = (add->do_slash == MODDIR_UNSET) ? base->do_slash : add->do_slash; new->checkhandler = (add->checkhandler == MODDIR_UNSET) ? base->checkhandler : add->checkhandler; new->redirect_index= (add->redirect_index == REDIRECT_UNSET) ? base->redirect_index : add->redirect_index; new->dflt = add->dflt ? add->dflt : base->dflt; return new; } static int fixup_dflt(request_rec *r) { dir_config_rec *d = ap_get_module_config(r->per_dir_config, &dir_module); const char *name_ptr; request_rec *rr; int error_notfound = 0; name_ptr = d->dflt; if ((name_ptr == NULL) || !(strcasecmp(name_ptr,"disabled"))){ return DECLINED; } /* XXX: if FallbackResource points to something that doesn't exist, * this may recurse until it hits the limit for internal redirects * before returning an Internal Server Error. */ /* The logic of this function is basically cloned and simplified * from fixup_dir below. See the comments there. */ if (r->args != NULL) { name_ptr = apr_pstrcat(r->pool, name_ptr, "?", r->args, NULL); } rr = ap_sub_req_lookup_uri(name_ptr, r, r->output_filters); if (rr->status == HTTP_OK && ( (rr->handler && !strcmp(rr->handler, "proxy-server")) || rr->finfo.filetype == APR_REG)) { ap_internal_fast_redirect(rr, r); return OK; } else if (ap_is_HTTP_REDIRECT(rr->status)) { apr_pool_join(r->pool, rr->pool); r->notes = apr_table_overlay(r->pool, r->notes, rr->notes); r->headers_out = apr_table_overlay(r->pool, r->headers_out, rr->headers_out); r->err_headers_out = apr_table_overlay(r->pool, r->err_headers_out, rr->err_headers_out); error_notfound = rr->status; } else if (rr->status && rr->status != HTTP_NOT_FOUND && rr->status != HTTP_OK) { error_notfound = rr->status; } ap_destroy_sub_req(rr); if (error_notfound) { return error_notfound; } /* nothing for us to do, pass on through */ return DECLINED; } static int fixup_dir(request_rec *r) { dir_config_rec *d; char *dummy_ptr[1]; char **names_ptr; int num_names; int error_notfound = 0; /* In case mod_mime wasn't present, and no handler was assigned. */ if (!r->handler) { r->handler = DIR_MAGIC_TYPE; } /* Never tolerate path_info on dir requests */ if (r->path_info && *r->path_info) { return DECLINED; } d = (dir_config_rec *)ap_get_module_config(r->per_dir_config, &dir_module); /* Redirect requests that are not '/' terminated */ if (r->uri[0] == '\0' || r->uri[strlen(r->uri) - 1] != '/') { char *ifile; if (!d->do_slash) { return DECLINED; } /* Only redirect non-get requests if we have no note to warn * that this browser cannot handle redirs on non-GET requests * (such as Microsoft's WebFolders). */ if ((r->method_number != M_GET) && apr_table_get(r->subprocess_env, "redirect-carefully")) { return DECLINED; } if (r->args != NULL) { ifile = apr_pstrcat(r->pool, ap_escape_uri(r->pool, r->uri), "/?", r->args, NULL); } else { ifile = apr_pstrcat(r->pool, ap_escape_uri(r->pool, r->uri), "/", NULL); } apr_table_setn(r->headers_out, "Location", ap_construct_url(r->pool, ifile, r)); return HTTP_MOVED_PERMANENTLY; } /* we're running between mod_rewrites fixup and its internal redirect handler, step aside */ if (!strcmp(r->handler, REWRITE_REDIRECT_HANDLER_NAME)) { /* Prevent DIR_MAGIC_TYPE from leaking out when someone has taken over */ if (!strcmp(r->content_type, DIR_MAGIC_TYPE)) { r->content_type = NULL; } return DECLINED; } if (d->checkhandler == MODDIR_ON && strcmp(r->handler, DIR_MAGIC_TYPE)) { /* Prevent DIR_MAGIC_TYPE from leaking out when someone has taken over */ if (!strcmp(r->content_type, DIR_MAGIC_TYPE)) { r->content_type = NULL; } return DECLINED; } if (d->index_names) { names_ptr = (char **)d->index_names->elts; num_names = d->index_names->nelts; } else { dummy_ptr[0] = AP_DEFAULT_INDEX; names_ptr = dummy_ptr; num_names = 1; } for (; num_names; ++names_ptr, --num_names) { /* XXX: Is this name_ptr considered escaped yet, or not??? */ char *name_ptr = *names_ptr; request_rec *rr; /* Once upon a time args were handled _after_ the successful redirect. * But that redirect might then _refuse_ the given r->args, creating * a nasty tangle. It seems safer to consider the r->args while we * determine if name_ptr is our viable index, and therefore set them * up correctly on redirect. */ if (r->args != NULL) { name_ptr = apr_pstrcat(r->pool, name_ptr, "?", r->args, NULL); } rr = ap_sub_req_lookup_uri(name_ptr, r, r->output_filters); /* The sub request lookup is very liberal, and the core map_to_storage * handler will almost always result in HTTP_OK as /foo/index.html * may be /foo with PATH_INFO="/index.html", or even / with * PATH_INFO="/foo/index.html". To get around this we insist that the * the index be a regular filetype. * * Another reason is that the core handler also makes the assumption * that if r->finfo is still NULL by the time it gets called, the * file does not exist. */ if (rr->status == HTTP_OK && ( (rr->handler && !strcmp(rr->handler, "proxy-server")) || rr->finfo.filetype == APR_REG)) { if (ap_is_HTTP_REDIRECT(d->redirect_index)) { apr_table_setn(r->headers_out, "Location", ap_construct_url(r->pool, rr->uri, r)); return d->redirect_index; } ap_internal_fast_redirect(rr, r); return OK; } /* If the request returned a redirect, propagate it to the client */ if (ap_is_HTTP_REDIRECT(rr->status) || (rr->status == HTTP_NOT_ACCEPTABLE && num_names == 1) || (rr->status == HTTP_UNAUTHORIZED && num_names == 1)) { apr_pool_join(r->pool, rr->pool); error_notfound = rr->status; r->notes = apr_table_overlay(r->pool, r->notes, rr->notes); r->headers_out = apr_table_overlay(r->pool, r->headers_out, rr->headers_out); r->err_headers_out = apr_table_overlay(r->pool, r->err_headers_out, rr->err_headers_out); return error_notfound; } /* If the request returned something other than 404 (or 200), * it means the module encountered some sort of problem. To be * secure, we should return the error, rather than allow autoindex * to create a (possibly unsafe) directory index. * * So we store the error, and if none of the listed files * exist, we return the last error response we got, instead * of a directory listing. */ if (rr->status && rr->status != HTTP_NOT_FOUND && rr->status != HTTP_OK) { error_notfound = rr->status; } ap_destroy_sub_req(rr); } if (error_notfound) { return error_notfound; } /* record what we tried, mostly for the benefit of mod_autoindex */ apr_table_setn(r->notes, "dir-index-names", d->index_names ? apr_array_pstrcat(r->pool, d->index_names, ',') : AP_DEFAULT_INDEX); /* nothing for us to do, pass on through */ return DECLINED; } static int dir_fixups(request_rec *r) { if (r->finfo.filetype == APR_DIR) { /* serve up a directory */ return fixup_dir(r); } else if ((r->finfo.filetype == APR_NOFILE) && (r->handler == NULL)) { /* No handler and nothing in the filesystem - use fallback */ return fixup_dflt(r); } return DECLINED; } static void register_hooks(apr_pool_t *p) { ap_hook_fixups(dir_fixups,NULL,NULL,APR_HOOK_LAST); } AP_DECLARE_MODULE(dir) = { STANDARD20_MODULE_STUFF, create_dir_config, /* create per-directory config structure */ merge_dir_configs, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ dir_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/mappers/mod_userdir.dep0000644000000000000500000000316612674411515017375 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_userdir.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_userdir.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/mappers/mod_alias.dsp0000644000000000000500000001052510551346420017016 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_alias" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_alias - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_alias.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_alias.mak" CFG="mod_alias - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_alias - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_alias - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_alias - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_alias_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_alias.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_alias.so" /d LONG_NAME="alias_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_alias.so" /base:@..\..\os\win32\BaseAddr.ref,mod_alias.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_alias.so" /base:@..\..\os\win32\BaseAddr.ref,mod_alias.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_alias.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_alias - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_alias_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_alias.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_alias.so" /d LONG_NAME="alias_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_alias.so" /base:@..\..\os\win32\BaseAddr.ref,mod_alias.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_alias.so" /base:@..\..\os\win32\BaseAddr.ref,mod_alias.so # Begin Special Build Tool TargetPath=.\Debug\mod_alias.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_alias - Win32 Release" # Name "mod_alias - Win32 Debug" # Begin Source File SOURCE=.\mod_alias.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/mappers/NWGNUmakefile0000644000000000000500000001011211540562746016677 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/actions.nlm \ $(OBJDIR)/imagemap.nlm \ $(OBJDIR)/rewrite.nlm \ $(OBJDIR)/speling.nlm \ $(OBJDIR)/userdir.nlm \ $(OBJDIR)/vhost.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/mappers/mod_userdir.c0000644000000000000500000003124512727637664017064 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_userdir... implement the UserDir command. Broken away from the * Alias stuff for a couple of good and not-so-good reasons: * * 1) It shows a real minimal working example of how to do something like * this. * 2) I know people who are actually interested in changing this *particular* * aspect of server functionality without changing the rest of it. That's * what this whole modular arrangement is supposed to be good at... * * Modified by Alexei Kosut to support the following constructs * (server running at www.foo.com, request for /~bar/one/two.html) * * UserDir public_html -> ~bar/public_html/one/two.html * UserDir /usr/web -> /usr/web/bar/one/two.html * UserDir /home/ * /www -> /home/bar/www/one/two.html * NOTE: theses ^ ^ space only added allow it to work in a comment, ignore * UserDir http://x/users -> (302) http://x/users/bar/one/two.html * UserDir http://x/ * /y -> (302) http://x/bar/y/one/two.html * NOTE: here also ^ ^ * * In addition, you can use multiple entries, to specify alternate * user directories (a la Directory Index). For example: * * UserDir public_html /usr/web http://www.xyz.com/users * * Modified by Ken Coar to provide for the following: * * UserDir disable[d] username ... * UserDir enable[d] username ... * * If "disabled" has no other arguments, *all* ~ references are * disabled, except those explicitly turned on with the "enabled" keyword. */ #include "apr_strings.h" #include "apr_user.h" #define APR_WANT_STRFUNC #include "apr_want.h" #if APR_HAVE_UNISTD_H #include #endif #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_request.h" #if !defined(WIN32) && !defined(OS2) && !defined(NETWARE) #define HAVE_UNIX_SUEXEC #endif #ifdef HAVE_UNIX_SUEXEC #include "unixd.h" /* Contains the suexec_identity hook used on Unix */ #endif /* * The default directory in user's home dir * In the default install, the module is disabled */ #ifndef DEFAULT_USER_DIR #define DEFAULT_USER_DIR NULL #endif #define O_DEFAULT 0 #define O_ENABLE 1 #define O_DISABLE 2 module AP_MODULE_DECLARE_DATA userdir_module; typedef struct { int globally_disabled; const char *userdir; apr_table_t *enabled_users; apr_table_t *disabled_users; } userdir_config; /* * Server config for this module: global disablement flag, a list of usernames * ineligible for UserDir access, a list of those immune to global (but not * explicit) disablement, and the replacement string for all others. */ static void *create_userdir_config(apr_pool_t *p, server_rec *s) { userdir_config *newcfg = apr_pcalloc(p, sizeof(*newcfg)); newcfg->globally_disabled = O_DEFAULT; newcfg->userdir = DEFAULT_USER_DIR; newcfg->enabled_users = apr_table_make(p, 4); newcfg->disabled_users = apr_table_make(p, 4); return newcfg; } static void *merge_userdir_config(apr_pool_t *p, void *basev, void *overridesv) { userdir_config *cfg = apr_pcalloc(p, sizeof(userdir_config)); userdir_config *base = basev, *overrides = overridesv; cfg->globally_disabled = (overrides->globally_disabled != O_DEFAULT) ? overrides->globally_disabled : base->globally_disabled; cfg->userdir = (overrides->userdir != DEFAULT_USER_DIR) ? overrides->userdir : base->userdir; /* not merged */ cfg->enabled_users = overrides->enabled_users; cfg->disabled_users = overrides->disabled_users; return cfg; } static const char *set_user_dir(cmd_parms *cmd, void *dummy, const char *arg) { userdir_config *s_cfg = ap_get_module_config(cmd->server->module_config, &userdir_module); char *username; const char *usernames = arg; char *kw = ap_getword_conf(cmd->temp_pool, &usernames); apr_table_t *usertable; /* Since we are a raw argument, it is possible for us to be called with * zero arguments. So that we aren't ambiguous, flat out reject this. */ if (*kw == '\0') { return "UserDir requires an argument."; } /* * Let's do the comparisons once. */ if ((!strcasecmp(kw, "disable")) || (!strcasecmp(kw, "disabled"))) { /* * If there are no usernames specified, this is a global disable - we * need do no more at this point than record the fact. */ if (!*usernames) { s_cfg->globally_disabled = O_DISABLE; return NULL; } usertable = s_cfg->disabled_users; } else if ((!strcasecmp(kw, "enable")) || (!strcasecmp(kw, "enabled"))) { if (!*usernames) { s_cfg->globally_disabled = O_ENABLE; return NULL; } usertable = s_cfg->enabled_users; } else { /* * If the first (only?) value isn't one of our keywords, just copy * the string to the userdir string. */ s_cfg->userdir = arg; return NULL; } /* * Now we just take each word in turn from the command line and add it to * the appropriate table. */ while (*usernames) { username = ap_getword_conf(cmd->pool, &usernames); apr_table_setn(usertable, username, "1"); } return NULL; } static const command_rec userdir_cmds[] = { AP_INIT_RAW_ARGS("UserDir", set_user_dir, NULL, RSRC_CONF, "the public subdirectory in users' home directories, or " "'disabled', or 'disabled username username...', or " "'enabled username username...'"), {NULL} }; static int translate_userdir(request_rec *r) { ap_conf_vector_t *server_conf; const userdir_config *s_cfg; const char *userdirs; const char *user, *dname; char *redirect; apr_finfo_t statbuf; /* * If the URI doesn't match our basic pattern, we've nothing to do with * it. */ if (r->uri[0] != '/' || r->uri[1] != '~') { return DECLINED; } server_conf = r->server->module_config; s_cfg = ap_get_module_config(server_conf, &userdir_module); userdirs = s_cfg->userdir; if (userdirs == NULL) { return DECLINED; } dname = r->uri + 2; user = ap_getword(r->pool, &dname, '/'); /* * The 'dname' funny business involves backing it up to capture the '/' * delimiting the "/~user" part from the rest of the URL, in case there * was one (the case where there wasn't being just "GET /~user HTTP/1.0", * for which we don't want to tack on a '/' onto the filename). */ if (dname[-1] == '/') { --dname; } /* * If there's no username, it's not for us. Ignore . and .. as well. */ if (user[0] == '\0' || (user[1] == '.' && (user[2] == '\0' || (user[2] == '.' && user[3] == '\0')))) { return DECLINED; } /* * Nor if there's an username but it's in the disabled list. */ if (apr_table_get(s_cfg->disabled_users, user) != NULL) { return DECLINED; } /* * If there's a global interdiction on UserDirs, check to see if this * name is one of the Blessed. */ if (s_cfg->globally_disabled == O_DISABLE && apr_table_get(s_cfg->enabled_users, user) == NULL) { return DECLINED; } /* * Special cases all checked, onward to normal substitution processing. */ while (*userdirs) { const char *userdir = ap_getword_conf(r->pool, &userdirs); char *filename = NULL, *prefix = NULL; apr_status_t rv; int is_absolute = ap_os_is_path_absolute(r->pool, userdir); if (ap_strchr_c(userdir, '*')) prefix = ap_getword(r->pool, &userdir, '*'); if (userdir[0] == '\0' || is_absolute) { if (prefix) { #ifdef HAVE_DRIVE_LETTERS /* * Crummy hack. Need to figure out whether we have been * redirected to a URL or to a file on some drive. Since I * know of no protocols that are a single letter, ignore * a : as the first or second character, and assume a file * was specified */ if (strchr(prefix + 2, ':')) #else if (strchr(prefix, ':') && !is_absolute) #endif /* HAVE_DRIVE_LETTERS */ { redirect = apr_pstrcat(r->pool, prefix, user, userdir, dname, NULL); apr_table_setn(r->headers_out, "Location", redirect); return HTTP_MOVED_TEMPORARILY; } else filename = apr_pstrcat(r->pool, prefix, user, userdir, NULL); } else filename = apr_pstrcat(r->pool, userdir, "/", user, NULL); } else if (prefix && ap_strchr_c(prefix, ':')) { redirect = apr_pstrcat(r->pool, prefix, user, dname, NULL); apr_table_setn(r->headers_out, "Location", redirect); return HTTP_MOVED_TEMPORARILY; } else { #if APR_HAS_USER char *homedir; if (apr_uid_homepath_get(&homedir, user, r->pool) == APR_SUCCESS) { filename = apr_pstrcat(r->pool, homedir, "/", userdir, NULL); } #else return DECLINED; #endif } /* * Now see if it exists, or we're at the last entry. If we are at the * last entry, then use the filename generated (if there is one) * anyway, in the hope that some handler might handle it. This can be * used, for example, to run a CGI script for the user. */ if (filename && (!*userdirs || ((rv = apr_stat(&statbuf, filename, APR_FINFO_MIN, r->pool)) == APR_SUCCESS || rv == APR_INCOMPLETE))) { r->filename = apr_pstrcat(r->pool, filename, dname, NULL); ap_set_context_info(r, apr_pstrmemdup(r->pool, r->uri, dname - r->uri), filename); /* XXX: Does this walk us around FollowSymLink rules? * When statbuf contains info on r->filename we can save a syscall * by copying it to r->finfo */ if (*userdirs && dname[0] == 0) r->finfo = statbuf; /* For use in the get_suexec_identity phase */ apr_table_setn(r->notes, "mod_userdir_user", user); return OK; } } return DECLINED; } #ifdef HAVE_UNIX_SUEXEC static ap_unix_identity_t *get_suexec_id_doer(const request_rec *r) { ap_unix_identity_t *ugid = NULL; #if APR_HAS_USER const char *username = apr_table_get(r->notes, "mod_userdir_user"); if (username == NULL) { return NULL; } if ((ugid = apr_palloc(r->pool, sizeof(*ugid))) == NULL) { return NULL; } if (apr_uid_get(&ugid->uid, &ugid->gid, username, r->pool) != APR_SUCCESS) { return NULL; } ugid->userdir = 1; #endif return ugid; } #endif /* HAVE_UNIX_SUEXEC */ static void register_hooks(apr_pool_t *p) { static const char * const aszPre[]={ "mod_alias.c",NULL }; static const char * const aszSucc[]={ "mod_vhost_alias.c",NULL }; ap_hook_translate_name(translate_userdir,aszPre,aszSucc,APR_HOOK_MIDDLE); #ifdef HAVE_UNIX_SUEXEC ap_hook_get_suexec_identity(get_suexec_id_doer,NULL,NULL,APR_HOOK_FIRST); #endif } AP_DECLARE_MODULE(userdir) = { STANDARD20_MODULE_STUFF, NULL, /* dir config creater */ NULL, /* dir merger --- default is to override */ create_userdir_config, /* server config */ merge_userdir_config, /* merge server config */ userdir_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/mappers/mod_actions.c0000644000000000000500000001663113065221160017021 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_actions.c: executes scripts based on MIME type or HTTP method * * by Alexei Kosut; based on mod_cgi.c, mod_mime.c and mod_includes.c, * adapted by rst from original NCSA code by Rob McCool * * Usage instructions: * * Action mime/type /cgi-bin/script * * will activate /cgi-bin/script when a file of content type mime/type is * requested. It sends the URL and file path of the requested document using * the standard CGI PATH_INFO and PATH_TRANSLATED environment variables. * * Script PUT /cgi-bin/script * * will activate /cgi-bin/script when a request is received with the * HTTP method "PUT". The available method names are defined in httpd.h. * If the method is GET, the script will only be activated if the requested * URI includes query information (stuff after a ?-mark). */ #include "apr_strings.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_core.h" #include "http_protocol.h" #include "http_main.h" #include "http_log.h" #include "util_script.h" typedef struct { apr_table_t *action_types; /* Added with Action... */ const char *scripted[METHODS]; /* Added with Script... */ int configured; /* True if Action or Script has been * called at least once */ } action_dir_config; module AP_MODULE_DECLARE_DATA actions_module; static void *create_action_dir_config(apr_pool_t *p, char *dummy) { action_dir_config *new = (action_dir_config *) apr_pcalloc(p, sizeof(action_dir_config)); new->action_types = apr_table_make(p, 4); return new; } static void *merge_action_dir_configs(apr_pool_t *p, void *basev, void *addv) { action_dir_config *base = (action_dir_config *) basev; action_dir_config *add = (action_dir_config *) addv; action_dir_config *new = (action_dir_config *) apr_palloc(p, sizeof(action_dir_config)); int i; new->action_types = apr_table_overlay(p, add->action_types, base->action_types); for (i = 0; i < METHODS; ++i) { new->scripted[i] = add->scripted[i] ? add->scripted[i] : base->scripted[i]; } new->configured = (base->configured || add->configured); return new; } static const char *add_action(cmd_parms *cmd, void *m_v, const char *type, const char *script, const char *option) { action_dir_config *m = (action_dir_config *)m_v; if (option && strcasecmp(option, "virtual")) { return apr_pstrcat(cmd->pool, "unrecognized option '", option, "'", NULL); } apr_table_setn(m->action_types, type, apr_pstrcat(cmd->pool, option ? "1" : "0", script, NULL)); m->configured = 1; return NULL; } static const char *set_script(cmd_parms *cmd, void *m_v, const char *method, const char *script) { action_dir_config *m = (action_dir_config *)m_v; int methnum; if (cmd->pool == cmd->temp_pool) { /* In .htaccess, we can't globally register new methods. */ methnum = ap_method_number_of(method); } else { /* ap_method_register recognizes already registered methods, * so don't bother to check its previous existence explicitly. */ methnum = ap_method_register(cmd->pool, method); } if (methnum == M_TRACE) { return "TRACE not allowed for Script"; } else if (methnum == M_INVALID) { return apr_pstrcat(cmd->pool, "Could not register method '", method, "' for Script", NULL); } m->scripted[methnum] = script; m->configured = 1; return NULL; } static const command_rec action_cmds[] = { AP_INIT_TAKE23("Action", add_action, NULL, OR_FILEINFO, "a media type followed by a script name"), AP_INIT_TAKE2("Script", set_script, NULL, ACCESS_CONF | RSRC_CONF, "a method followed by a script name"), {NULL} }; static int action_handler(request_rec *r) { action_dir_config *conf = (action_dir_config *) ap_get_module_config(r->per_dir_config, &actions_module); const char *t, *action; const char *script; int i; if (!conf->configured) { return DECLINED; } /* Note that this handler handles _all_ types, so handler is unchecked */ /* Set allowed stuff */ for (i = 0; i < METHODS; ++i) { if (conf->scripted[i]) r->allowed |= (AP_METHOD_BIT << i); } /* First, check for the method-handling scripts */ if (r->method_number == M_GET) { if (r->args) script = conf->scripted[M_GET]; else script = NULL; } else { script = conf->scripted[r->method_number]; } /* Check for looping, which can happen if the CGI script isn't */ if (script && r->prev && r->prev->prev) return DECLINED; /* Second, check for actions (which override the method scripts) */ action = r->handler ? r->handler : ap_field_noparam(r->pool, r->content_type); if (action && (t = apr_table_get(conf->action_types, action))) { int virtual = (*t++ == '0' ? 0 : 1); if (!virtual && r->finfo.filetype == APR_NOFILE) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00652) "File does not exist: %s", r->filename); return HTTP_NOT_FOUND; } script = t; /* propagate the handler name to the script * (will be REDIRECT_HANDLER there) */ apr_table_setn(r->subprocess_env, "HANDLER", action); if (virtual) { apr_table_setn(r->notes, "virtual_script", "1"); } } if (script == NULL) return DECLINED; ap_internal_redirect_handler(apr_pstrcat(r->pool, script, ap_escape_uri(r->pool, r->uri), r->args ? "?" : NULL, r->args, NULL), r); return OK; } static void register_hooks(apr_pool_t *p) { ap_hook_handler(action_handler,NULL,NULL,APR_HOOK_LAST); } AP_DECLARE_MODULE(actions) = { STANDARD20_MODULE_STUFF, create_action_dir_config, /* dir config creater */ merge_action_dir_configs, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ action_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/mappers/mod_dir.dep0000644000000000000500000000414012674411515016467 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_dir.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_dir.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_rewrite.h"\ httpd-2.4.41/modules/mappers/config9.m40000644000000000000500000000150111657335760016165 0ustar rootsrcdnl modules enabled in this directory by default dnl APACHE_MODULE(name, helptext[, objects[, structname[, default[, config]]]]) APACHE_MODPATH_INIT(mappers) APACHE_MODULE(vhost_alias, mass virtual hosting module, , , most) APACHE_MODULE(negotiation, content negotiation, , , most) APACHE_MODULE(dir, directory request handling, , , yes) APACHE_MODULE(imagemap, server-side imagemaps, , , no) APACHE_MODULE(actions, Action triggering on requests, , , most) APACHE_MODULE(speling, correct common URL misspellings, , , most) APACHE_MODULE(userdir, mapping of requests to user-specific directories, , , most) APACHE_MODULE(alias, mapping of requests to different filesystem parts, , , yes) APACHE_MODULE(rewrite, rule based URL manipulation, , , most) APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) APACHE_MODPATH_FINISH httpd-2.4.41/modules/mappers/mod_rewrite.h0000644000000000000500000000256512270224045017052 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_rewrite.h * @brief Rewrite Extension module for Apache * * @defgroup MOD_REWRITE mod_rewrite * @ingroup APACHE_MODS * @{ */ #ifndef MOD_REWRITE_H #define MOD_REWRITE_H 1 #include "apr_optional.h" #include "httpd.h" #define REWRITE_REDIRECT_HANDLER_NAME "redirect-handler" /* rewrite map function prototype */ typedef char *(rewrite_mapfunc_t)(request_rec *r, char *key); /* optional function declaration */ APR_DECLARE_OPTIONAL_FN(void, ap_register_rewrite_mapfunc, (char *name, rewrite_mapfunc_t *func)); #endif /* MOD_REWRITE_H */ /** @} */ httpd-2.4.41/modules/mappers/mod_negotiation.mak0000644000000000000500000002423112701473373020235 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_negotiation.dsp !IF "$(CFG)" == "" CFG=mod_negotiation - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_negotiation - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_negotiation - Win32 Release" && "$(CFG)" != "mod_negotiation - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_negotiation.mak" CFG="mod_negotiation - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_negotiation - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_negotiation - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_negotiation - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_negotiation.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_negotiation.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_negotiation.obj" -@erase "$(INTDIR)\mod_negotiation.res" -@erase "$(INTDIR)\mod_negotiation_src.idb" -@erase "$(INTDIR)\mod_negotiation_src.pdb" -@erase "$(OUTDIR)\mod_negotiation.exp" -@erase "$(OUTDIR)\mod_negotiation.lib" -@erase "$(OUTDIR)\mod_negotiation.pdb" -@erase "$(OUTDIR)\mod_negotiation.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_negotiation_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_negotiation.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_negotiation.so" /d LONG_NAME="negotiation_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_negotiation.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_negotiation.pdb" /debug /out:"$(OUTDIR)\mod_negotiation.so" /implib:"$(OUTDIR)\mod_negotiation.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_negotiation.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_negotiation.obj" \ "$(INTDIR)\mod_negotiation.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_negotiation.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_negotiation.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_negotiation.so" if exist .\Release\mod_negotiation.so.manifest mt.exe -manifest .\Release\mod_negotiation.so.manifest -outputresource:.\Release\mod_negotiation.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_negotiation - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_negotiation.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_negotiation.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_negotiation.obj" -@erase "$(INTDIR)\mod_negotiation.res" -@erase "$(INTDIR)\mod_negotiation_src.idb" -@erase "$(INTDIR)\mod_negotiation_src.pdb" -@erase "$(OUTDIR)\mod_negotiation.exp" -@erase "$(OUTDIR)\mod_negotiation.lib" -@erase "$(OUTDIR)\mod_negotiation.pdb" -@erase "$(OUTDIR)\mod_negotiation.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_negotiation_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_negotiation.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_negotiation.so" /d LONG_NAME="negotiation_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_negotiation.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_negotiation.pdb" /debug /out:"$(OUTDIR)\mod_negotiation.so" /implib:"$(OUTDIR)\mod_negotiation.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_negotiation.so LINK32_OBJS= \ "$(INTDIR)\mod_negotiation.obj" \ "$(INTDIR)\mod_negotiation.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_negotiation.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_negotiation.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_negotiation.so" if exist .\Debug\mod_negotiation.so.manifest mt.exe -manifest .\Debug\mod_negotiation.so.manifest -outputresource:.\Debug\mod_negotiation.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_negotiation.dep") !INCLUDE "mod_negotiation.dep" !ELSE !MESSAGE Warning: cannot find "mod_negotiation.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_negotiation - Win32 Release" || "$(CFG)" == "mod_negotiation - Win32 Debug" !IF "$(CFG)" == "mod_negotiation - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\mappers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_negotiation - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\mappers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_negotiation - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\mappers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_negotiation - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\mappers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_negotiation - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\mappers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\mappers" !ELSEIF "$(CFG)" == "mod_negotiation - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\mappers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\mappers" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_negotiation - Win32 Release" "$(INTDIR)\mod_negotiation.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_negotiation.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_negotiation.so" /d LONG_NAME="negotiation_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_negotiation - Win32 Debug" "$(INTDIR)\mod_negotiation.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_negotiation.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_negotiation.so" /d LONG_NAME="negotiation_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_negotiation.c "$(INTDIR)\mod_negotiation.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/mappers/mod_imagemap.exp0000644000000000000500000000001410225112423017473 0ustar rootsrcimap_module httpd-2.4.41/modules/mappers/mod_imagemap.dsp0000644000000000000500000001065710551346420017513 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_imagemap" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_imagemap - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_imagemap.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_imagemap.mak" CFG="mod_imagemap - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_imagemap - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_imagemap - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_imagemap - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_imagemap_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_imagemap.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_imagemap.so" /d LONG_NAME="imagemap_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_imagemap.so" /base:@..\..\os\win32\BaseAddr.ref,mod_imagemap.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_imagemap.so" /base:@..\..\os\win32\BaseAddr.ref,mod_imagemap.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_imagemap.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_imagemap - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_imagemap_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_imagemap.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_imagemap.so" /d LONG_NAME="imagemap_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_imagemap.so" /base:@..\..\os\win32\BaseAddr.ref,mod_imagemap.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_imagemap.so" /base:@..\..\os\win32\BaseAddr.ref,mod_imagemap.so # Begin Special Build Tool TargetPath=.\Debug\mod_imagemap.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_imagemap - Win32 Release" # Name "mod_imagemap - Win32 Debug" # Begin Source File SOURCE=.\mod_imagemap.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/mappers/mod_rewrite.exp0000644000000000000500000000001710150161574017407 0ustar rootsrcrewrite_module httpd-2.4.41/modules/mappers/NWGNUspeling0000644000000000000500000001014311540546347016566 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = speling # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Speling Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Speling Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/speling.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_speling.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ speling_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/mappers/mod_userdir.mak0000644000000000000500000002347112701473373017377 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_userdir.dsp !IF "$(CFG)" == "" CFG=mod_userdir - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_userdir - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_userdir - Win32 Release" && "$(CFG)" != "mod_userdir - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_userdir.mak" CFG="mod_userdir - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_userdir - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_userdir - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_userdir - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_userdir.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_userdir.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_userdir.obj" -@erase "$(INTDIR)\mod_userdir.res" -@erase "$(INTDIR)\mod_userdir_src.idb" -@erase "$(INTDIR)\mod_userdir_src.pdb" -@erase "$(OUTDIR)\mod_userdir.exp" -@erase "$(OUTDIR)\mod_userdir.lib" -@erase "$(OUTDIR)\mod_userdir.pdb" -@erase "$(OUTDIR)\mod_userdir.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_userdir_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_userdir.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_userdir.so" /d LONG_NAME="userdir_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_userdir.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_userdir.pdb" /debug /out:"$(OUTDIR)\mod_userdir.so" /implib:"$(OUTDIR)\mod_userdir.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_userdir.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_userdir.obj" \ "$(INTDIR)\mod_userdir.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_userdir.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_userdir.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_userdir.so" if exist .\Release\mod_userdir.so.manifest mt.exe -manifest .\Release\mod_userdir.so.manifest -outputresource:.\Release\mod_userdir.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_userdir - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_userdir.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_userdir.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_userdir.obj" -@erase "$(INTDIR)\mod_userdir.res" -@erase "$(INTDIR)\mod_userdir_src.idb" -@erase "$(INTDIR)\mod_userdir_src.pdb" -@erase "$(OUTDIR)\mod_userdir.exp" -@erase "$(OUTDIR)\mod_userdir.lib" -@erase "$(OUTDIR)\mod_userdir.pdb" -@erase "$(OUTDIR)\mod_userdir.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_userdir_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_userdir.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_userdir.so" /d LONG_NAME="userdir_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_userdir.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_userdir.pdb" /debug /out:"$(OUTDIR)\mod_userdir.so" /implib:"$(OUTDIR)\mod_userdir.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_userdir.so LINK32_OBJS= \ "$(INTDIR)\mod_userdir.obj" \ "$(INTDIR)\mod_userdir.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_userdir.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_userdir.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_userdir.so" if exist .\Debug\mod_userdir.so.manifest mt.exe -manifest .\Debug\mod_userdir.so.manifest -outputresource:.\Debug\mod_userdir.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_userdir.dep") !INCLUDE "mod_userdir.dep" !ELSE !MESSAGE Warning: cannot find "mod_userdir.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_userdir - Win32 Release" || "$(CFG)" == "mod_userdir - Win32 Debug" !IF "$(CFG)" == "mod_userdir - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\mappers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_userdir - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\mappers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_userdir - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\mappers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_userdir - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\mappers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_userdir - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\mappers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\mappers" !ELSEIF "$(CFG)" == "mod_userdir - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\mappers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\mappers" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_userdir - Win32 Release" "$(INTDIR)\mod_userdir.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_userdir.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_userdir.so" /d LONG_NAME="userdir_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_userdir - Win32 Debug" "$(INTDIR)\mod_userdir.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_userdir.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_userdir.so" /d LONG_NAME="userdir_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_userdir.c "$(INTDIR)\mod_userdir.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/mappers/mod_vhost_alias.c0000644000000000000500000003166612604740124017706 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_vhost_alias.c: support for dynamically configured mass virtual hosting * * Copyright (c) 1998-1999 Demon Internet Ltd. * * This software was submitted by Demon Internet to the Apache Software Foundation * in May 1999. Future revisions and derivatives of this source code * must acknowledge Demon Internet as the original contributor of * this module. All other licensing and usage conditions are those * of the Apache Software Foundation. * * Originally written by Tony Finch . * * Implementation ideas were taken from mod_alias.c. The overall * concept is derived from the OVERRIDE_DOC_ROOT/OVERRIDE_CGIDIR * patch to Apache 1.3b3 and a similar feature in Demon's thttpd, * both written by James Grinter . */ #include "apr.h" #include "apr_strings.h" #include "ap_hooks.h" #include "apr_lib.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_request.h" /* for ap_hook_translate_name */ module AP_MODULE_DECLARE_DATA vhost_alias_module; /* * basic configuration things * we abbreviate "mod_vhost_alias" to "mva" for shorter names */ typedef enum { VHOST_ALIAS_UNSET, VHOST_ALIAS_NONE, VHOST_ALIAS_NAME, VHOST_ALIAS_IP } mva_mode_e; /* * Per-server module config record. */ typedef struct mva_sconf_t { const char *doc_root; const char *cgi_root; mva_mode_e doc_root_mode; mva_mode_e cgi_root_mode; } mva_sconf_t; static void *mva_create_server_config(apr_pool_t *p, server_rec *s) { mva_sconf_t *conf; conf = (mva_sconf_t *) apr_pcalloc(p, sizeof(mva_sconf_t)); conf->doc_root = NULL; conf->cgi_root = NULL; conf->doc_root_mode = VHOST_ALIAS_UNSET; conf->cgi_root_mode = VHOST_ALIAS_UNSET; return conf; } static void *mva_merge_server_config(apr_pool_t *p, void *parentv, void *childv) { mva_sconf_t *parent = (mva_sconf_t *) parentv; mva_sconf_t *child = (mva_sconf_t *) childv; mva_sconf_t *conf; conf = (mva_sconf_t *) apr_pcalloc(p, sizeof(*conf)); if (child->doc_root_mode == VHOST_ALIAS_UNSET) { conf->doc_root_mode = parent->doc_root_mode; conf->doc_root = parent->doc_root; } else { conf->doc_root_mode = child->doc_root_mode; conf->doc_root = child->doc_root; } if (child->cgi_root_mode == VHOST_ALIAS_UNSET) { conf->cgi_root_mode = parent->cgi_root_mode; conf->cgi_root = parent->cgi_root; } else { conf->cgi_root_mode = child->cgi_root_mode; conf->cgi_root = child->cgi_root; } return conf; } /* * These are just here to tell us what vhost_alias_set should do. * We don't put anything into them; we just use the cell addresses. */ static int vhost_alias_set_doc_root_ip, vhost_alias_set_cgi_root_ip, vhost_alias_set_doc_root_name, vhost_alias_set_cgi_root_name; static const char *vhost_alias_set(cmd_parms *cmd, void *dummy, const char *map) { mva_sconf_t *conf; mva_mode_e mode, *pmode; const char **pmap; const char *p; conf = (mva_sconf_t *) ap_get_module_config(cmd->server->module_config, &vhost_alias_module); /* there ought to be a better way of doing this */ if (&vhost_alias_set_doc_root_ip == cmd->info) { mode = VHOST_ALIAS_IP; pmap = &conf->doc_root; pmode = &conf->doc_root_mode; } else if (&vhost_alias_set_cgi_root_ip == cmd->info) { mode = VHOST_ALIAS_IP; pmap = &conf->cgi_root; pmode = &conf->cgi_root_mode; } else if (&vhost_alias_set_doc_root_name == cmd->info) { mode = VHOST_ALIAS_NAME; pmap = &conf->doc_root; pmode = &conf->doc_root_mode; } else if (&vhost_alias_set_cgi_root_name == cmd->info) { mode = VHOST_ALIAS_NAME; pmap = &conf->cgi_root; pmode = &conf->cgi_root_mode; } else { return "INTERNAL ERROR: unknown command info"; } if (!ap_os_is_path_absolute(cmd->pool, map)) { if (strcasecmp(map, "none")) { return "format string must be an absolute path, or 'none'"; } *pmap = NULL; *pmode = VHOST_ALIAS_NONE; return NULL; } /* sanity check */ p = map; while (*p != '\0') { if (*p++ != '%') { continue; } /* we just found a '%' */ if (*p == 'p' || *p == '%') { ++p; continue; } /* optional dash */ if (*p == '-') { ++p; } /* digit N */ if (apr_isdigit(*p)) { ++p; } else { return "syntax error in format string"; } /* optional plus */ if (*p == '+') { ++p; } /* do we end here? */ if (*p != '.') { continue; } ++p; /* optional dash */ if (*p == '-') { ++p; } /* digit M */ if (apr_isdigit(*p)) { ++p; } else { return "syntax error in format string"; } /* optional plus */ if (*p == '+') { ++p; } } *pmap = map; *pmode = mode; return NULL; } static const command_rec mva_commands[] = { AP_INIT_TAKE1("VirtualScriptAlias", vhost_alias_set, &vhost_alias_set_cgi_root_name, RSRC_CONF, "how to create a ScriptAlias based on the host"), AP_INIT_TAKE1("VirtualDocumentRoot", vhost_alias_set, &vhost_alias_set_doc_root_name, RSRC_CONF, "how to create the DocumentRoot based on the host"), AP_INIT_TAKE1("VirtualScriptAliasIP", vhost_alias_set, &vhost_alias_set_cgi_root_ip, RSRC_CONF, "how to create a ScriptAlias based on the host"), AP_INIT_TAKE1("VirtualDocumentRootIP", vhost_alias_set, &vhost_alias_set_doc_root_ip, RSRC_CONF, "how to create the DocumentRoot based on the host"), { NULL } }; /* * This really wants to be a nested function * but C is too feeble to support them. */ static APR_INLINE void vhost_alias_checkspace(request_rec *r, char *buf, char **pdest, int size) { /* XXX: what if size > HUGE_STRING_LEN? */ if (*pdest + size > buf + HUGE_STRING_LEN) { **pdest = '\0'; if (r->filename) { r->filename = apr_pstrcat(r->pool, r->filename, buf, NULL); } else { r->filename = apr_pstrdup(r->pool, buf); } *pdest = buf; } } static void vhost_alias_interpolate(request_rec *r, const char *name, const char *map, const char *uri) { /* 0..9 9..0 */ enum { MAXDOTS = 19 }; const char *dots[MAXDOTS+1]; int ndots; char buf[HUGE_STRING_LEN]; char *dest; const char *docroot; int N, M, Np, Mp, Nd, Md; const char *start, *end; const char *p; ndots = 0; dots[ndots++] = name-1; /* slightly naughty */ for (p = name; *p; ++p) { if (*p == '.' && ndots < MAXDOTS) { dots[ndots++] = p; } } dots[ndots] = p; r->filename = NULL; dest = buf; while (*map) { if (*map != '%') { /* normal characters */ vhost_alias_checkspace(r, buf, &dest, 1); *dest++ = *map++; continue; } /* we are in a format specifier */ ++map; /* %% -> % */ if (*map == '%') { ++map; vhost_alias_checkspace(r, buf, &dest, 1); *dest++ = '%'; continue; } /* port number */ if (*map == 'p') { ++map; /* no. of decimal digits in a short plus one */ vhost_alias_checkspace(r, buf, &dest, 7); dest += apr_snprintf(dest, 7, "%d", ap_get_server_port(r)); continue; } /* deal with %-N+.-M+ -- syntax is already checked */ M = 0; /* value */ Np = Mp = 0; /* is there a plus? */ Nd = Md = 0; /* is there a dash? */ if (*map == '-') ++map, Nd = 1; N = *map++ - '0'; if (*map == '+') ++map, Np = 1; if (*map == '.') { ++map; if (*map == '-') { ++map, Md = 1; } M = *map++ - '0'; if (*map == '+') { ++map, Mp = 1; } } /* note that N and M are one-based indices, not zero-based */ start = dots[0]+1; /* ptr to the first character */ end = dots[ndots]; /* ptr to the character after the last one */ if (N != 0) { if (N > ndots) { start = "_"; end = start+1; } else if (!Nd) { start = dots[N-1]+1; if (!Np) { end = dots[N]; } } else { if (!Np) { start = dots[ndots-N]+1; } end = dots[ndots-N+1]; } } if (M != 0) { if (M > end - start) { start = "_"; end = start+1; } else if (!Md) { start = start+M-1; if (!Mp) { end = start+1; } } else { if (!Mp) { start = end-M; } end = end-M+1; } } vhost_alias_checkspace(r, buf, &dest, end - start); for (p = start; p < end; ++p) { *dest++ = apr_tolower(*p); } } /* no double slashes */ if (dest - buf > 0 && dest[-1] == '/') { --dest; } *dest = '\0'; if (r->filename) docroot = apr_pstrcat(r->pool, r->filename, buf, NULL); else docroot = apr_pstrdup(r->pool, buf); r->filename = apr_pstrcat(r->pool, docroot, uri, NULL); ap_set_context_info(r, NULL, docroot); ap_set_document_root(r, docroot); } static int mva_translate(request_rec *r) { mva_sconf_t *conf; const char *name, *map, *uri; mva_mode_e mode; const char *cgi; conf = (mva_sconf_t *) ap_get_module_config(r->server->module_config, &vhost_alias_module); cgi = NULL; if (conf->cgi_root) { cgi = strstr(r->uri, "cgi-bin/"); if (cgi && (cgi != r->uri + strspn(r->uri, "/"))) { cgi = NULL; } } if (cgi) { mode = conf->cgi_root_mode; map = conf->cgi_root; uri = cgi + strlen("cgi-bin"); } else if (r->uri[0] == '/') { mode = conf->doc_root_mode; map = conf->doc_root; uri = r->uri; } else { return DECLINED; } if (mode == VHOST_ALIAS_NAME) { name = ap_get_server_name(r); } else if (mode == VHOST_ALIAS_IP) { name = r->connection->local_ip; } else { return DECLINED; } /* ### There is an optimization available here to determine the * absolute portion of the path from the server config phase, * through the first % segment, and note that portion of the path * canonical_path buffer. */ r->canonical_filename = ""; vhost_alias_interpolate(r, name, map, uri); if (cgi) { /* see is_scriptaliased() in mod_cgi */ r->handler = "cgi-script"; apr_table_setn(r->notes, "alias-forced-type", r->handler); ap_set_context_info(r, "/cgi-bin", NULL); } return OK; } static void register_hooks(apr_pool_t *p) { static const char * const aszPre[]={ "mod_alias.c","mod_userdir.c",NULL }; ap_hook_translate_name(mva_translate, aszPre, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(vhost_alias) = { STANDARD20_MODULE_STUFF, NULL, /* dir config creater */ NULL, /* dir merger --- default is to override */ mva_create_server_config, /* server config */ mva_merge_server_config, /* merge server configs */ mva_commands, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/mappers/.indent.pro0000644000000000000500000000127510150161574016441 0ustar rootsrc-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int httpd-2.4.41/modules/mappers/mod_alias.c0000644000000000000500000006045413240674050016461 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * http_alias.c: Stuff for dealing with directory aliases * * Original by Rob McCool, rewritten in succession by David Robinson * and rst. * */ #include "apr_strings.h" #include "apr_lib.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_core.h" #include "http_config.h" #include "http_request.h" #include "http_log.h" #include "ap_expr.h" typedef struct { const char *real; const char *fake; char *handler; ap_regex_t *regexp; int redir_status; /* 301, 302, 303, 410, etc */ } alias_entry; typedef struct { apr_array_header_t *aliases; apr_array_header_t *redirects; } alias_server_conf; typedef struct { unsigned int alias_set:1; unsigned int redirect_set:1; apr_array_header_t *redirects; const ap_expr_info_t *alias; char *handler; const ap_expr_info_t *redirect; int redirect_status; /* 301, 302, 303, 410, etc */ } alias_dir_conf; module AP_MODULE_DECLARE_DATA alias_module; static char magic_error_value; #define PREGSUB_ERROR (&magic_error_value) static void *create_alias_config(apr_pool_t *p, server_rec *s) { alias_server_conf *a = (alias_server_conf *) apr_pcalloc(p, sizeof(alias_server_conf)); a->aliases = apr_array_make(p, 20, sizeof(alias_entry)); a->redirects = apr_array_make(p, 20, sizeof(alias_entry)); return a; } static void *create_alias_dir_config(apr_pool_t *p, char *d) { alias_dir_conf *a = (alias_dir_conf *) apr_pcalloc(p, sizeof(alias_dir_conf)); a->redirects = apr_array_make(p, 2, sizeof(alias_entry)); return a; } static void *merge_alias_config(apr_pool_t *p, void *basev, void *overridesv) { alias_server_conf *a = (alias_server_conf *) apr_pcalloc(p, sizeof(alias_server_conf)); alias_server_conf *base = (alias_server_conf *) basev; alias_server_conf *overrides = (alias_server_conf *) overridesv; a->aliases = apr_array_append(p, overrides->aliases, base->aliases); a->redirects = apr_array_append(p, overrides->redirects, base->redirects); return a; } static void *merge_alias_dir_config(apr_pool_t *p, void *basev, void *overridesv) { alias_dir_conf *a = (alias_dir_conf *) apr_pcalloc(p, sizeof(alias_dir_conf)); alias_dir_conf *base = (alias_dir_conf *) basev; alias_dir_conf *overrides = (alias_dir_conf *) overridesv; a->redirects = apr_array_append(p, overrides->redirects, base->redirects); a->alias = (overrides->alias_set == 0) ? base->alias : overrides->alias; a->handler = (overrides->alias_set == 0) ? base->handler : overrides->handler; a->alias_set = overrides->alias_set || base->alias_set; a->redirect = (overrides->redirect_set == 0) ? base->redirect : overrides->redirect; a->redirect_status = (overrides->redirect_set == 0) ? base->redirect_status : overrides->redirect_status; a->redirect_set = overrides->redirect_set || base->redirect_set; return a; } /* need prototype for overlap check */ static int alias_matches(const char *uri, const char *alias_fakename); static const char *add_alias_internal(cmd_parms *cmd, void *dummy, const char *fake, const char *real, int use_regex) { server_rec *s = cmd->server; alias_server_conf *conf = ap_get_module_config(s->module_config, &alias_module); alias_entry *new = apr_array_push(conf->aliases); alias_entry *entries = (alias_entry *)conf->aliases->elts; int i; /* XXX: real can NOT be relative to DocumentRoot here... compat bug. */ const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err != NULL) { return err; } if (use_regex) { new->regexp = ap_pregcomp(cmd->pool, fake, AP_REG_EXTENDED); if (new->regexp == NULL) return "Regular expression could not be compiled."; new->real = real; } else { /* XXX This may be optimized, but we must know that new->real * exists. If so, we can dir merge later, trusing new->real * and just canonicalizing the remainder. Not till I finish * cleaning out the old ap_canonical stuff first. */ new->real = real; } new->fake = fake; new->handler = cmd->info; /* check for overlapping (Script)Alias directives * and throw a warning if found one */ if (!use_regex) { for (i = 0; i < conf->aliases->nelts - 1; ++i) { alias_entry *alias = &entries[i]; if ( (!alias->regexp && alias_matches(fake, alias->fake) > 0) || (alias->regexp && !ap_regexec(alias->regexp, fake, 0, NULL, 0))) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(00671) "The %s directive in %s at line %d will probably " "never match because it overlaps an earlier " "%sAlias%s.", cmd->cmd->name, cmd->directive->filename, cmd->directive->line_num, alias->handler ? "Script" : "", alias->regexp ? "Match" : ""); break; /* one warning per alias should be sufficient */ } } } return NULL; } static const char *add_alias(cmd_parms *cmd, void *dummy, const char *fake, const char *real) { if (real) { return add_alias_internal(cmd, dummy, fake, real, 0); } else { alias_dir_conf *dirconf = (alias_dir_conf *) dummy; const char *err = ap_check_cmd_context(cmd, NOT_IN_DIRECTORY|NOT_IN_FILES); if (err != NULL) { return err; } if (!cmd->path) { return "Alias must have two arguments when used globally"; } dirconf->alias = ap_expr_parse_cmd(cmd, fake, AP_EXPR_FLAG_STRING_RESULT, &err, NULL); if (err) { return apr_pstrcat(cmd->temp_pool, "Cannot parse alias expression '", fake, "': ", err, NULL); } dirconf->handler = cmd->info; dirconf->alias_set = 1; return NULL; } } static const char *add_alias_regex(cmd_parms *cmd, void *dummy, const char *fake, const char *real) { return add_alias_internal(cmd, dummy, fake, real, 1); } static const char *add_redirect_internal(cmd_parms *cmd, alias_dir_conf *dirconf, const char *arg1, const char *arg2, const char *arg3, int use_regex) { alias_entry *new; server_rec *s = cmd->server; alias_server_conf *serverconf = ap_get_module_config(s->module_config, &alias_module); int status = (int) (long) cmd->info; int grokarg1 = 1; ap_regex_t *regex = NULL; const char *fake = arg2; const char *url = arg3; /* * Logic flow: * Go ahead and try to grok the 1st arg, in case it is a * Redirect status. Now if we have 3 args, we expect that * we were able to understand that 1st argument (it's something * we expected, so if not, then we bail */ if (!strcasecmp(arg1, "permanent")) status = HTTP_MOVED_PERMANENTLY; else if (!strcasecmp(arg1, "temp")) status = HTTP_MOVED_TEMPORARILY; else if (!strcasecmp(arg1, "seeother")) status = HTTP_SEE_OTHER; else if (!strcasecmp(arg1, "gone")) { status = HTTP_GONE; grokarg1 = -1; } else if (apr_isdigit(*arg1)) { status = atoi(arg1); if (!ap_is_HTTP_REDIRECT(status)) { grokarg1 = -1; } } else { grokarg1 = 0; } if (arg3 && !grokarg1) return "Redirect: invalid first argument (of three)"; /* * if we have the 2nd arg and we understand the 1st one as a redirect * status (3xx, but not things like 404 /robots.txt), or if we have the * 1st arg but don't understand it, we use the expression syntax assuming * a path from the location. * * if we understand the first arg but have no second arg, we are dealing * with a status like "GONE" or a non-redirect status (e.g. 404, 503). */ if (!cmd->path) { /* context only for now */ ; } else if ((grokarg1 > 0 && arg2 && !arg3) || (!grokarg1 && !arg2)) { const char *expr_err = NULL; url = grokarg1 ? arg2 : arg1; dirconf->redirect = ap_expr_parse_cmd(cmd, url, AP_EXPR_FLAG_STRING_RESULT, &expr_err, NULL); if (expr_err) { return apr_pstrcat(cmd->temp_pool, "Cannot parse redirect expression '", url, "': ", expr_err, NULL); } dirconf->redirect_status = status; dirconf->redirect_set = 1; return NULL; } else if (grokarg1 < 0 && !arg2) { dirconf->redirect_status = status; dirconf->redirect_set = 1; return NULL; } /* * if we don't have the 3rd arg and we didn't understand the 1st * one, then assume URL-path URL. This also handles case, eg, GONE * we even though we don't have a 3rd arg, we did understand the 1st * one, so we don't want to re-arrange */ if (!arg3 && !grokarg1) { fake = arg1; url = arg2; } if (use_regex) { regex = ap_pregcomp(cmd->pool, fake, AP_REG_EXTENDED); if (regex == NULL) return "Regular expression could not be compiled."; } if (ap_is_HTTP_REDIRECT(status)) { if (!url) return "URL to redirect to is missing"; /* PR#35314: we can allow path components here; * they get correctly resolved to full URLs. */ if (!use_regex && !ap_is_url(url) && (url[0] != '/')) return "Redirect to non-URL"; } else { if (url) return "Redirect URL not valid for this status"; } if (cmd->path) new = apr_array_push(dirconf->redirects); else new = apr_array_push(serverconf->redirects); new->fake = fake; new->real = url; new->regexp = regex; new->redir_status = status; return NULL; } static const char *add_redirect(cmd_parms *cmd, void *dirconf, const char *arg1, const char *arg2, const char *arg3) { return add_redirect_internal(cmd, dirconf, arg1, arg2, arg3, 0); } static const char *add_redirect2(cmd_parms *cmd, void *dirconf, const char *arg1, const char *arg2) { return add_redirect_internal(cmd, dirconf, arg1, arg2, NULL, 0); } static const char *add_redirect_regex(cmd_parms *cmd, void *dirconf, const char *arg1, const char *arg2, const char *arg3) { return add_redirect_internal(cmd, dirconf, arg1, arg2, arg3, 1); } static const command_rec alias_cmds[] = { AP_INIT_TAKE12("Alias", add_alias, NULL, RSRC_CONF | ACCESS_CONF, "a fakename and a realname, or a realname in a Location"), AP_INIT_TAKE12("ScriptAlias", add_alias, "cgi-script", RSRC_CONF | ACCESS_CONF, "a fakename and a realname, or a realname in a Location"), AP_INIT_TAKE123("Redirect", add_redirect, (void *) HTTP_MOVED_TEMPORARILY, OR_FILEINFO, "an optional status, then document to be redirected and " "destination URL"), AP_INIT_TAKE2("AliasMatch", add_alias_regex, NULL, RSRC_CONF, "a regular expression and a filename"), AP_INIT_TAKE2("ScriptAliasMatch", add_alias_regex, "cgi-script", RSRC_CONF, "a regular expression and a filename"), AP_INIT_TAKE23("RedirectMatch", add_redirect_regex, (void *) HTTP_MOVED_TEMPORARILY, OR_FILEINFO, "an optional status, then a regular expression and " "destination URL"), AP_INIT_TAKE2("RedirectTemp", add_redirect2, (void *) HTTP_MOVED_TEMPORARILY, OR_FILEINFO, "a document to be redirected, then the destination URL"), AP_INIT_TAKE2("RedirectPermanent", add_redirect2, (void *) HTTP_MOVED_PERMANENTLY, OR_FILEINFO, "a document to be redirected, then the destination URL"), {NULL} }; static int alias_matches(const char *uri, const char *alias_fakename) { const char *aliasp = alias_fakename, *urip = uri; while (*aliasp) { if (*aliasp == '/') { /* any number of '/' in the alias matches any number in * the supplied URI, but there must be at least one... */ if (*urip != '/') return 0; do { ++aliasp; } while (*aliasp == '/'); do { ++urip; } while (*urip == '/'); } else { /* Other characters are compared literally */ if (*urip++ != *aliasp++) return 0; } } /* Check last alias path component matched all the way */ if (aliasp[-1] != '/' && *urip != '\0' && *urip != '/') return 0; /* Return number of characters from URI which matched (may be * greater than length of alias, since we may have matched * doubled slashes) */ return urip - uri; } static char *try_alias(request_rec *r) { alias_dir_conf *dirconf = (alias_dir_conf *) ap_get_module_config(r->per_dir_config, &alias_module); if (dirconf->alias) { const char *err = NULL; char *found = apr_pstrdup(r->pool, ap_expr_str_exec(r, dirconf->alias, &err)); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02825) "Can't evaluate alias expression: %s", err); return PREGSUB_ERROR; } if (dirconf->handler) { /* Set handler, and leave a note for mod_cgi */ r->handler = dirconf->handler; apr_table_setn(r->notes, "alias-forced-type", r->handler); } /* XXX This is as SLOW as can be, next step, we optimize * and merge to whatever part of the found path was already * canonicalized. After I finish eliminating os canonical. * Better fail test for ap_server_root_relative needed here. */ found = ap_server_root_relative(r->pool, found); return found; } return NULL; } static char *try_redirect(request_rec *r, int *status) { alias_dir_conf *dirconf = (alias_dir_conf *) ap_get_module_config(r->per_dir_config, &alias_module); if (dirconf->redirect_set) { apr_uri_t uri; const char *err = NULL; char *found = ""; if (dirconf->redirect) { found = apr_pstrdup(r->pool, ap_expr_str_exec(r, dirconf->redirect, &err)); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02826) "Can't evaluate redirect expression: %s", err); return PREGSUB_ERROR; } apr_uri_parse(r->pool, found, &uri); /* Do not escape the query string or fragment. */ found = apr_uri_unparse(r->pool, &uri, APR_URI_UNP_OMITQUERY); found = ap_escape_uri(r->pool, found); if (uri.query) { found = apr_pstrcat(r->pool, found, "?", uri.query, NULL); } if (uri.fragment) { found = apr_pstrcat(r->pool, found, "#", uri.fragment, NULL); } } *status = dirconf->redirect_status; return found; } return NULL; } static char *try_alias_list(request_rec *r, apr_array_header_t *aliases, int is_redir, int *status) { alias_entry *entries = (alias_entry *) aliases->elts; ap_regmatch_t regm[AP_MAX_REG_MATCH]; char *found = NULL; int i; for (i = 0; i < aliases->nelts; ++i) { alias_entry *alias = &entries[i]; int l; if (alias->regexp) { if (!ap_regexec(alias->regexp, r->uri, AP_MAX_REG_MATCH, regm, 0)) { if (alias->real) { found = ap_pregsub(r->pool, alias->real, r->uri, AP_MAX_REG_MATCH, regm); if (found) { if (is_redir) { apr_uri_t uri; apr_uri_parse(r->pool, found, &uri); /* Do not escape the query string or fragment. */ found = apr_uri_unparse(r->pool, &uri, APR_URI_UNP_OMITQUERY); found = ap_escape_uri(r->pool, found); if (uri.query) { found = apr_pstrcat(r->pool, found, "?", uri.query, NULL); } if (uri.fragment) { found = apr_pstrcat(r->pool, found, "#", uri.fragment, NULL); } } } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00672) "Regex substitution in '%s' failed. " "Replacement too long?", alias->real); return PREGSUB_ERROR; } } else { /* need something non-null */ found = ""; } } } else { l = alias_matches(r->uri, alias->fake); if (l > 0) { ap_set_context_info(r, alias->fake, alias->real); if (is_redir) { char *escurl; escurl = ap_os_escape_path(r->pool, r->uri + l, 1); found = apr_pstrcat(r->pool, alias->real, escurl, NULL); } else found = apr_pstrcat(r->pool, alias->real, r->uri + l, NULL); } } if (found) { if (alias->handler) { /* Set handler, and leave a note for mod_cgi */ r->handler = alias->handler; apr_table_setn(r->notes, "alias-forced-type", r->handler); } /* XXX This is as SLOW as can be, next step, we optimize * and merge to whatever part of the found path was already * canonicalized. After I finish eliminating os canonical. * Better fail test for ap_server_root_relative needed here. */ if (!is_redir) { found = ap_server_root_relative(r->pool, found); } if (found) { *status = alias->redir_status; } return found; } } return NULL; } static int translate_alias_redir(request_rec *r) { ap_conf_vector_t *sconf = r->server->module_config; alias_server_conf *serverconf = ap_get_module_config(sconf, &alias_module); char *ret; int status; if (r->uri[0] != '/' && r->uri[0] != '\0') { return DECLINED; } if ((ret = try_redirect(r, &status)) != NULL || (ret = try_alias_list(r, serverconf->redirects, 1, &status)) != NULL) { if (ret == PREGSUB_ERROR) return HTTP_INTERNAL_SERVER_ERROR; if (ap_is_HTTP_REDIRECT(status)) { if (ret[0] == '/') { char *orig_target = ret; ret = ap_construct_url(r->pool, ret, r); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00673) "incomplete redirection target of '%s' for " "URI '%s' modified to '%s'", orig_target, r->uri, ret); } if (!ap_is_url(ret)) { status = HTTP_INTERNAL_SERVER_ERROR; ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00674) "cannot redirect '%s' to '%s'; " "target is not a valid absoluteURI or abs_path", r->uri, ret); } else { /* append requested query only, if the config didn't * supply its own. */ if (r->args && !ap_strchr(ret, '?')) { ret = apr_pstrcat(r->pool, ret, "?", r->args, NULL); } apr_table_setn(r->headers_out, "Location", ret); } } return status; } if ((ret = try_alias(r)) != NULL || (ret = try_alias_list(r, serverconf->aliases, 0, &status)) != NULL) { r->filename = ret; return OK; } return DECLINED; } static int fixup_redir(request_rec *r) { void *dconf = r->per_dir_config; alias_dir_conf *dirconf = (alias_dir_conf *) ap_get_module_config(dconf, &alias_module); char *ret; int status; /* It may have changed since last time, so try again */ if ((ret = try_redirect(r, &status)) != NULL || (ret = try_alias_list(r, dirconf->redirects, 1, &status)) != NULL) { if (ret == PREGSUB_ERROR) return HTTP_INTERNAL_SERVER_ERROR; if (ap_is_HTTP_REDIRECT(status)) { if (ret[0] == '/') { char *orig_target = ret; ret = ap_construct_url(r->pool, ret, r); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00675) "incomplete redirection target of '%s' for " "URI '%s' modified to '%s'", orig_target, r->uri, ret); } if (!ap_is_url(ret)) { status = HTTP_INTERNAL_SERVER_ERROR; ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00676) "cannot redirect '%s' to '%s'; " "target is not a valid absoluteURI or abs_path", r->uri, ret); } else { /* append requested query only, if the config didn't * supply its own. */ if (r->args && !ap_strchr(ret, '?')) { ret = apr_pstrcat(r->pool, ret, "?", r->args, NULL); } apr_table_setn(r->headers_out, "Location", ret); } } return status; } return DECLINED; } static void register_hooks(apr_pool_t *p) { static const char * const aszSucc[]={ "mod_userdir.c", "mod_vhost_alias.c",NULL }; ap_hook_translate_name(translate_alias_redir,NULL,aszSucc,APR_HOOK_MIDDLE); ap_hook_fixups(fixup_redir,NULL,NULL,APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(alias) = { STANDARD20_MODULE_STUFF, create_alias_dir_config, /* dir config creater */ merge_alias_dir_config, /* dir merger --- default is to override */ create_alias_config, /* server config */ merge_alias_config, /* merge server configs */ alias_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/mappers/mod_speling.mak0000644000000000000500000002347112701473373017363 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_speling.dsp !IF "$(CFG)" == "" CFG=mod_speling - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_speling - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_speling - Win32 Release" && "$(CFG)" != "mod_speling - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_speling.mak" CFG="mod_speling - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_speling - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_speling - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_speling - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_speling.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_speling.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_speling.obj" -@erase "$(INTDIR)\mod_speling.res" -@erase "$(INTDIR)\mod_speling_src.idb" -@erase "$(INTDIR)\mod_speling_src.pdb" -@erase "$(OUTDIR)\mod_speling.exp" -@erase "$(OUTDIR)\mod_speling.lib" -@erase "$(OUTDIR)\mod_speling.pdb" -@erase "$(OUTDIR)\mod_speling.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_speling_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_speling.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_speling.so" /d LONG_NAME="speling_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_speling.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_speling.pdb" /debug /out:"$(OUTDIR)\mod_speling.so" /implib:"$(OUTDIR)\mod_speling.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_speling.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_speling.obj" \ "$(INTDIR)\mod_speling.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_speling.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_speling.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_speling.so" if exist .\Release\mod_speling.so.manifest mt.exe -manifest .\Release\mod_speling.so.manifest -outputresource:.\Release\mod_speling.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_speling - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_speling.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_speling.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_speling.obj" -@erase "$(INTDIR)\mod_speling.res" -@erase "$(INTDIR)\mod_speling_src.idb" -@erase "$(INTDIR)\mod_speling_src.pdb" -@erase "$(OUTDIR)\mod_speling.exp" -@erase "$(OUTDIR)\mod_speling.lib" -@erase "$(OUTDIR)\mod_speling.pdb" -@erase "$(OUTDIR)\mod_speling.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_speling_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_speling.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_speling.so" /d LONG_NAME="speling_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_speling.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_speling.pdb" /debug /out:"$(OUTDIR)\mod_speling.so" /implib:"$(OUTDIR)\mod_speling.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_speling.so LINK32_OBJS= \ "$(INTDIR)\mod_speling.obj" \ "$(INTDIR)\mod_speling.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_speling.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_speling.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_speling.so" if exist .\Debug\mod_speling.so.manifest mt.exe -manifest .\Debug\mod_speling.so.manifest -outputresource:.\Debug\mod_speling.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_speling.dep") !INCLUDE "mod_speling.dep" !ELSE !MESSAGE Warning: cannot find "mod_speling.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_speling - Win32 Release" || "$(CFG)" == "mod_speling - Win32 Debug" !IF "$(CFG)" == "mod_speling - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\mappers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_speling - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\mappers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_speling - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\mappers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_speling - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\mappers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_speling - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\mappers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\mappers" !ELSEIF "$(CFG)" == "mod_speling - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\mappers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\mappers" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_speling - Win32 Release" "$(INTDIR)\mod_speling.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_speling.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_speling.so" /d LONG_NAME="speling_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_speling - Win32 Debug" "$(INTDIR)\mod_speling.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_speling.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_speling.so" /d LONG_NAME="speling_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_speling.c "$(INTDIR)\mod_speling.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/mappers/mod_userdir.exp0000644000000000000500000000001710150161574017403 0ustar rootsrcuserdir_module httpd-2.4.41/modules/mappers/mod_actions.dsp0000644000000000000500000001062110551346420017362 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_actions" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_actions - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_actions.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_actions.mak" CFG="mod_actions - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_actions - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_actions - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_actions - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_actions_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_actions.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_actions.so" /d LONG_NAME="actions_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_actions.so" /base:@..\..\os\win32\BaseAddr.ref,mod_actions.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_actions.so" /base:@..\..\os\win32\BaseAddr.ref,mod_actions.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_actions.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_actions - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_actions_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_actions.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_actions.so" /d LONG_NAME="actions_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_actions.so" /base:@..\..\os\win32\BaseAddr.ref,mod_actions.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_actions.so" /base:@..\..\os\win32\BaseAddr.ref,mod_actions.so # Begin Special Build Tool TargetPath=.\Debug\mod_actions.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_actions - Win32 Release" # Name "mod_actions - Win32 Debug" # Begin Source File SOURCE=.\mod_actions.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/mappers/mod_imagemap.dep0000644000000000000500000000416312674411515017476 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_imagemap.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_imagemap.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_core.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/mappers/mod_negotiation.dsp0000644000000000000500000001101110551346420020234 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_negotiation" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_negotiation - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_negotiation.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_negotiation.mak" CFG="mod_negotiation - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_negotiation - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_negotiation - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_negotiation - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_negotiation_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_negotiation.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_negotiation.so" /d LONG_NAME="negotiation_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_negotiation.so" /base:@..\..\os\win32\BaseAddr.ref,mod_negotiation.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_negotiation.so" /base:@..\..\os\win32\BaseAddr.ref,mod_negotiation.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_negotiation.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_negotiation - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_negotiation_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_negotiation.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_negotiation.so" /d LONG_NAME="negotiation_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_negotiation.so" /base:@..\..\os\win32\BaseAddr.ref,mod_negotiation.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_negotiation.so" /base:@..\..\os\win32\BaseAddr.ref,mod_negotiation.so # Begin Special Build Tool TargetPath=.\Debug\mod_negotiation.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_negotiation - Win32 Release" # Name "mod_negotiation - Win32 Debug" # Begin Source File SOURCE=.\mod_negotiation.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/mappers/mod_rewrite.mak0000644000000000000500000002356312701473373017405 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_rewrite.dsp !IF "$(CFG)" == "" CFG=mod_rewrite - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_rewrite - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_rewrite - Win32 Release" && "$(CFG)" != "mod_rewrite - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_rewrite.mak" CFG="mod_rewrite - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_rewrite - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_rewrite - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_rewrite - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_rewrite.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_rewrite.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_rewrite.obj" -@erase "$(INTDIR)\mod_rewrite.res" -@erase "$(INTDIR)\mod_rewrite_src.idb" -@erase "$(INTDIR)\mod_rewrite_src.pdb" -@erase "$(OUTDIR)\mod_rewrite.exp" -@erase "$(OUTDIR)\mod_rewrite.lib" -@erase "$(OUTDIR)\mod_rewrite.pdb" -@erase "$(OUTDIR)\mod_rewrite.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../database" /I "../ssl" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_rewrite_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_rewrite.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_rewrite.so" /d LONG_NAME="rewrite_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_rewrite.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_rewrite.pdb" /debug /out:"$(OUTDIR)\mod_rewrite.so" /implib:"$(OUTDIR)\mod_rewrite.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_rewrite.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_rewrite.obj" \ "$(INTDIR)\mod_rewrite.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_rewrite.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_rewrite.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_rewrite.so" if exist .\Release\mod_rewrite.so.manifest mt.exe -manifest .\Release\mod_rewrite.so.manifest -outputresource:.\Release\mod_rewrite.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_rewrite - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_rewrite.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_rewrite.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_rewrite.obj" -@erase "$(INTDIR)\mod_rewrite.res" -@erase "$(INTDIR)\mod_rewrite_src.idb" -@erase "$(INTDIR)\mod_rewrite_src.pdb" -@erase "$(OUTDIR)\mod_rewrite.exp" -@erase "$(OUTDIR)\mod_rewrite.lib" -@erase "$(OUTDIR)\mod_rewrite.pdb" -@erase "$(OUTDIR)\mod_rewrite.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../database" /I "../ssl" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_rewrite_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_rewrite.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_rewrite.so" /d LONG_NAME="rewrite_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_rewrite.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_rewrite.pdb" /debug /out:"$(OUTDIR)\mod_rewrite.so" /implib:"$(OUTDIR)\mod_rewrite.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_rewrite.so LINK32_OBJS= \ "$(INTDIR)\mod_rewrite.obj" \ "$(INTDIR)\mod_rewrite.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_rewrite.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_rewrite.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_rewrite.so" if exist .\Debug\mod_rewrite.so.manifest mt.exe -manifest .\Debug\mod_rewrite.so.manifest -outputresource:.\Debug\mod_rewrite.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_rewrite.dep") !INCLUDE "mod_rewrite.dep" !ELSE !MESSAGE Warning: cannot find "mod_rewrite.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_rewrite - Win32 Release" || "$(CFG)" == "mod_rewrite - Win32 Debug" !IF "$(CFG)" == "mod_rewrite - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\mappers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_rewrite - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\mappers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_rewrite - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\mappers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ELSEIF "$(CFG)" == "mod_rewrite - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\mappers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\mappers" !ENDIF !IF "$(CFG)" == "mod_rewrite - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\mappers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\mappers" !ELSEIF "$(CFG)" == "mod_rewrite - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\mappers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\mappers" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_rewrite - Win32 Release" "$(INTDIR)\mod_rewrite.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_rewrite.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_rewrite.so" /d LONG_NAME="rewrite_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_rewrite - Win32 Debug" "$(INTDIR)\mod_rewrite.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_rewrite.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_rewrite.so" /d LONG_NAME="rewrite_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_rewrite.c "$(INTDIR)\mod_rewrite.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/mappers/Makefile.in0000644000000000000500000000005110150161574016414 0ustar rootsrc include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/mappers/mod_actions.dep0000644000000000000500000000405512674411515017356 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_actions.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_actions.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/mappers/mod_alias.exp0000644000000000000500000000001510150161574017015 0ustar rootsrcalias_module httpd-2.4.41/modules/config7.m40000644000000000000500000000411512077512322014504 0ustar rootsrcAC_MSG_CHECKING(for extra modules) AC_ARG_WITH(module, APACHE_HELP_STRING(--with-module=module-type:module-file, Enable module-file in the modules/ directory.), [ withval=`echo $withval | sed -e 's/,/ /g'` for mod in $withval do modtype=`echo $mod | sed -e's/\(.*\):.*/\1/'` pkg=`echo $mod | sed -e's/.*:\(.*\)/\1/'` modfilec=`echo $pkg | sed -e 's;^.*/;;'` modfileo=`echo $pkg | sed -e 's;^.*/;;' -e 's;\.c$;.o;'` modpath_current="modules/$modtype" if test "x$mod" != "x$modpath_current/$modfilec"; then if test ! -d "$modpath_current"; then mkdir $modpath_current echo 'include $(top_srcdir)/build/special.mk' > $modpath_current/Makefile.in fi cp $pkg $modpath_current/$modfilec fi module=`echo $pkg | sed -e 's;\(.*/\).*mod_\(.*\).c;\2;'` objects="mod_$module.lo" # The filename of a convenience library must have a "lib" prefix: libname="libmod_$module.la" BUILTIN_LIBS="$BUILTIN_LIBS $modpath_current/$libname" if test ! -s "$modpath_current/modules.mk"; then cat >>$modpath_current/modules.mk<>$modpath_current/modules.mk.tmp<> $modpath_current/modules.mk.tmp rm $modpath_current/modules.mk mv $modpath_current/modules.mk.tmp $modpath_current/modules.mk sed -e "s/\(static =.*\)/\1 $libname/" $modpath_current/modules.mk > $modpath_current/modules.mk.tmp rm $modpath_current/modules.mk mv $modpath_current/modules.mk.tmp $modpath_current/modules.mk fi MODLIST="$MODLIST $module" EXTRA_MODLIST="$EXTRA_MODLIST $modtype:$modfilec" MODULE_DIRS="$MODULE_DIRS $modtype" APACHE_FAST_OUTPUT($modpath_current/Makefile) done if test ! -z "$EXTRA_MODLIST"; then AC_MSG_RESULT(added:$EXTRA_MODLIST) fi ], [ AC_MSG_RESULT(none) ]) httpd-2.4.41/modules/metadata/0002755000000000000500000000000013523273341014471 5ustar rootsrchttpd-2.4.41/modules/metadata/mod_usertrack.exp0000644000000000000500000000002110150161574020035 0ustar rootsrcusertrack_module httpd-2.4.41/modules/metadata/mod_cern_meta.dsp0000644000000000000500000001071510551346420017774 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_cern_meta" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_cern_meta - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_cern_meta.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_cern_meta.mak" CFG="mod_cern_meta - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_cern_meta - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_cern_meta - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_cern_meta - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_cern_meta_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_cern_meta.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_cern_meta.so" /d LONG_NAME="cern_meta_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_cern_meta.so" /base:@..\..\os\win32\BaseAddr.ref,mod_cern_meta.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_cern_meta.so" /base:@..\..\os\win32\BaseAddr.ref,mod_cern_meta.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_cern_meta.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_cern_meta - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_cern_meta_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_cern_meta.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_cern_meta.so" /d LONG_NAME="cern_meta_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_cern_meta.so" /base:@..\..\os\win32\BaseAddr.ref,mod_cern_meta.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_cern_meta.so" /base:@..\..\os\win32\BaseAddr.ref,mod_cern_meta.so # Begin Special Build Tool TargetPath=.\Debug\mod_cern_meta.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_cern_meta - Win32 Release" # Name "mod_cern_meta - Win32 Debug" # Begin Source File SOURCE=.\mod_cern_meta.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/metadata/mod_env.c0000644000000000000500000001323413316417514016267 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr.h" #include "apr_strings.h" #if APR_HAVE_STDLIB_H #include #endif #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_log.h" typedef struct { apr_table_t *vars; apr_table_t *unsetenv; } env_dir_config_rec; module AP_MODULE_DECLARE_DATA env_module; static void *create_env_dir_config(apr_pool_t *p, char *dummy) { env_dir_config_rec *conf = apr_palloc(p, sizeof(*conf)); conf->vars = apr_table_make(p, 10); conf->unsetenv = apr_table_make(p, 10); return conf; } static void *merge_env_dir_configs(apr_pool_t *p, void *basev, void *addv) { env_dir_config_rec *base = basev; env_dir_config_rec *add = addv; env_dir_config_rec *res = apr_palloc(p, sizeof(*res)); const apr_table_entry_t *elts; const apr_array_header_t *arr; int i; /* * res->vars = copy_table( p, base->vars ); * foreach $unsetenv ( @add->unsetenv ) * table_unset( res->vars, $unsetenv ); * foreach $element ( @add->vars ) * table_set( res->vars, $element.key, $element.val ); * * add->unsetenv already removed the vars from add->vars, * if they preceded the UnsetEnv directive. */ res->vars = apr_table_copy(p, base->vars); res->unsetenv = NULL; arr = apr_table_elts(add->unsetenv); if (arr) { elts = (const apr_table_entry_t *)arr->elts; for (i = 0; i < arr->nelts; ++i) { apr_table_unset(res->vars, elts[i].key); } } arr = apr_table_elts(add->vars); if (arr) { elts = (const apr_table_entry_t *)arr->elts; for (i = 0; i < arr->nelts; ++i) { apr_table_setn(res->vars, elts[i].key, elts[i].val); } } return res; } static const char *add_env_module_vars_passed(cmd_parms *cmd, void *sconf_, const char *arg) { env_dir_config_rec *sconf = sconf_; apr_table_t *vars = sconf->vars; const char *env_var; env_var = getenv(arg); if (env_var != NULL) { apr_table_setn(vars, arg, apr_pstrdup(cmd->pool, env_var)); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(01506) "PassEnv variable %s was undefined", arg); } return NULL; } static const char *add_env_module_vars_set(cmd_parms *cmd, void *sconf_, const char *name, const char *value) { env_dir_config_rec *sconf = sconf_; if (ap_strchr_c(name, '=')) { char *env, *plast; env = apr_strtok(apr_pstrdup(cmd->temp_pool, name), "=", &plast); ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(10032) "Spurious usage of '=' in an environment variable name. " "'%s %s %s' expected instead?", cmd->cmd->name, env, plast); } /* name is mandatory, value is optional. no value means * set the variable to an empty string */ apr_table_setn(sconf->vars, name, value ? value : ""); return NULL; } static const char *add_env_module_vars_unset(cmd_parms *cmd, void *sconf_, const char *arg) { env_dir_config_rec *sconf = sconf_; /* Always UnsetEnv FOO in the same context as {Set,Pass}Env FOO * only if this UnsetEnv follows the {Set,Pass}Env. The merge * will only apply unsetenv to the parent env (main server). */ apr_table_set(sconf->unsetenv, arg, NULL); apr_table_unset(sconf->vars, arg); return NULL; } static const command_rec env_module_cmds[] = { AP_INIT_ITERATE("PassEnv", add_env_module_vars_passed, NULL, OR_FILEINFO, "a list of environment variables to pass to CGI."), AP_INIT_TAKE12("SetEnv", add_env_module_vars_set, NULL, OR_FILEINFO, "an environment variable name and optional value to pass to CGI."), AP_INIT_ITERATE("UnsetEnv", add_env_module_vars_unset, NULL, OR_FILEINFO, "a list of variables to remove from the CGI environment."), {NULL}, }; static int fixup_env_module(request_rec *r) { env_dir_config_rec *sconf = ap_get_module_config(r->per_dir_config, &env_module); if (apr_is_empty_table(sconf->vars)) { return DECLINED; } r->subprocess_env = apr_table_overlay(r->pool, r->subprocess_env, sconf->vars); return OK; } static void register_hooks(apr_pool_t *p) { ap_hook_fixups(fixup_env_module, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(env) = { STANDARD20_MODULE_STUFF, create_env_dir_config, /* dir config creater */ merge_env_dir_configs, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server configs */ env_module_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/metadata/mod_remoteip.c0000644000000000000500000012705113522531262017322 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * Portions of the input filter code for PROXY protocol support is * Copyright 2014 Cloudzilla Inc. */ #include "ap_config.h" #include "ap_mmn.h" #include "ap_listen.h" #include "httpd.h" #include "http_config.h" #include "http_connection.h" #include "http_protocol.h" #include "http_log.h" #include "http_main.h" #include "apr_strings.h" #include "apr_lib.h" #define APR_WANT_BYTEFUNC #include "apr_want.h" #include "apr_network_io.h" #include "apr_version.h" module AP_MODULE_DECLARE_DATA remoteip_module; typedef struct { /** A proxy IP mask to match */ apr_ipsubnet_t *ip; /** Flagged if internal, otherwise an external trusted proxy */ void *internal; } remoteip_proxymatch_t; typedef struct remoteip_addr_info { struct remoteip_addr_info *next; apr_sockaddr_t *addr; server_rec *source; } remoteip_addr_info; typedef struct { /** The header to retrieve a proxy-via IP list */ const char *header_name; /** A header to record the proxied IP's * (removed as the physical connection and * from the proxy-via IP header value list) */ const char *proxies_header_name; /** A list of trusted proxies, ideally configured * with the most commonly encountered listed first */ apr_array_header_t *proxymatch_ip; remoteip_addr_info *proxy_protocol_enabled; remoteip_addr_info *proxy_protocol_disabled; apr_array_header_t *disabled_subnets; apr_pool_t *pool; } remoteip_config_t; typedef struct { apr_sockaddr_t *useragent_addr; char *useragent_ip; /** The list of proxy IP's ignored as remote IP's */ const char *proxy_ips; /** The remaining list of untrusted proxied remote IP's */ const char *proxied_remote; } remoteip_req_t; /* For PROXY protocol processing */ static ap_filter_rec_t *remoteip_filter; typedef struct { char line[108]; } proxy_v1; typedef union { struct { /* for TCP/UDP over IPv4, len = 12 */ apr_uint32_t src_addr; apr_uint32_t dst_addr; apr_uint16_t src_port; apr_uint16_t dst_port; } ip4; struct { /* for TCP/UDP over IPv6, len = 36 */ apr_byte_t src_addr[16]; apr_byte_t dst_addr[16]; apr_uint16_t src_port; apr_uint16_t dst_port; } ip6; struct { /* for AF_UNIX sockets, len = 216 */ apr_byte_t src_addr[108]; apr_byte_t dst_addr[108]; } unx; } proxy_v2_addr; typedef struct { apr_byte_t sig[12]; /* hex 0D 0A 0D 0A 00 0D 0A 51 55 49 54 0A */ apr_byte_t ver_cmd; /* protocol version and command */ apr_byte_t fam; /* protocol family and address */ apr_uint16_t len; /* number of following bytes part of the header */ proxy_v2_addr addr; } proxy_v2; typedef union { proxy_v1 v1; proxy_v2 v2; } proxy_header; static const char v2sig[12] = "\x0D\x0A\x0D\x0A\x00\x0D\x0A\x51\x55\x49\x54\x0A"; #define MIN_V1_HDR_LEN 15 #define MIN_V2_HDR_LEN 16 #define MIN_HDR_LEN MIN_V1_HDR_LEN /* XXX: Unsure if this is needed if v6 support is not available on this platform */ #ifndef INET6_ADDRSTRLEN #define INET6_ADDRSTRLEN 46 #endif typedef struct { char header[sizeof(proxy_header)]; apr_size_t rcvd; apr_size_t need; int version; ap_input_mode_t mode; apr_bucket_brigade *bb; int done; } remoteip_filter_context; /** Holds the resolved proxy info for this connection and any additional configurable parameters */ typedef struct { /** The parsed client address in native format */ apr_sockaddr_t *client_addr; /** Character representation of the client */ char *client_ip; } remoteip_conn_config_t; typedef enum { HDR_DONE, HDR_ERROR, HDR_NEED_MORE } remoteip_parse_status_t; static void *create_remoteip_server_config(apr_pool_t *p, server_rec *s) { remoteip_config_t *config = apr_pcalloc(p, sizeof(*config)); config->disabled_subnets = apr_array_make(p, 1, sizeof(apr_ipsubnet_t *)); /* config->header_name = NULL; * config->proxies_header_name = NULL; * config->proxy_protocol_enabled = NULL; * config->proxy_protocol_disabled = NULL; */ config->pool = p; return config; } static void *merge_remoteip_server_config(apr_pool_t *p, void *globalv, void *serverv) { remoteip_config_t *global = (remoteip_config_t *) globalv; remoteip_config_t *server = (remoteip_config_t *) serverv; remoteip_config_t *config; config = (remoteip_config_t *) apr_palloc(p, sizeof(*config)); config->header_name = server->header_name ? server->header_name : global->header_name; config->proxies_header_name = server->proxies_header_name ? server->proxies_header_name : global->proxies_header_name; config->proxymatch_ip = server->proxymatch_ip ? server->proxymatch_ip : global->proxymatch_ip; return config; } static const char *header_name_set(cmd_parms *cmd, void *dummy, const char *arg) { remoteip_config_t *config = ap_get_module_config(cmd->server->module_config, &remoteip_module); config->header_name = arg; return NULL; } static const char *proxies_header_name_set(cmd_parms *cmd, void *dummy, const char *arg) { remoteip_config_t *config = ap_get_module_config(cmd->server->module_config, &remoteip_module); config->proxies_header_name = arg; return NULL; } /* Would be quite nice if APR exported this */ /* apr:network_io/unix/sockaddr.c */ static int looks_like_ip(const char *ipstr) { if (ap_strchr_c(ipstr, ':')) { /* definitely not a hostname; assume it is intended to be an IPv6 address */ return 1; } /* simple IPv4 address string check */ while ((*ipstr == '.') || apr_isdigit(*ipstr)) ipstr++; return (*ipstr == '\0'); } static const char *proxies_set(cmd_parms *cmd, void *cfg, const char *arg) { remoteip_config_t *config = ap_get_module_config(cmd->server->module_config, &remoteip_module); remoteip_proxymatch_t *match; apr_status_t rv; char *ip = apr_pstrdup(cmd->temp_pool, arg); char *s = ap_strchr(ip, '/'); if (s) { *s++ = '\0'; } if (!config->proxymatch_ip) { config->proxymatch_ip = apr_array_make(cmd->pool, 1, sizeof(*match)); } match = (remoteip_proxymatch_t *) apr_array_push(config->proxymatch_ip); match->internal = cmd->info; if (looks_like_ip(ip)) { /* Note s may be null, that's fine (explicit host) */ rv = apr_ipsubnet_create(&match->ip, ip, s, cmd->pool); } else { apr_sockaddr_t *temp_sa; if (s) { return apr_pstrcat(cmd->pool, "RemoteIP: Error parsing IP ", arg, " the subnet /", s, " is invalid for ", cmd->cmd->name, NULL); } rv = apr_sockaddr_info_get(&temp_sa, ip, APR_UNSPEC, 0, APR_IPV4_ADDR_OK, cmd->temp_pool); while (rv == APR_SUCCESS) { apr_sockaddr_ip_get(&ip, temp_sa); rv = apr_ipsubnet_create(&match->ip, ip, NULL, cmd->pool); if (!(temp_sa = temp_sa->next)) { break; } match = (remoteip_proxymatch_t *) apr_array_push(config->proxymatch_ip); match->internal = cmd->info; } } if (rv != APR_SUCCESS) { return apr_psprintf(cmd->pool, "RemoteIP: Error parsing IP %s (%pm error) for %s", arg, &rv, cmd->cmd->name); } return NULL; } static const char *proxylist_read(cmd_parms *cmd, void *cfg, const char *filename) { char lbuf[MAX_STRING_LEN]; char *arg; const char *args; const char *errmsg; ap_configfile_t *cfp; apr_status_t rv; filename = ap_server_root_relative(cmd->temp_pool, filename); rv = ap_pcfg_openfile(&cfp, cmd->temp_pool, filename); if (rv != APR_SUCCESS) { return apr_psprintf(cmd->pool, "%s: Could not open file %s: %pm", cmd->cmd->name, filename, &rv); } while (!(ap_cfg_getline(lbuf, MAX_STRING_LEN, cfp))) { args = lbuf; while (*(arg = ap_getword_conf(cmd->temp_pool, &args)) != '\0') { if (*arg == '#') { break; } errmsg = proxies_set(cmd, cfg, arg); if (errmsg) { ap_cfg_closefile(cfp); errmsg = apr_psprintf(cmd->pool, "%s at line %d of %s", errmsg, cfp->line_number, filename); return errmsg; } } } ap_cfg_closefile(cfp); return NULL; } /** Similar to apr_sockaddr_equal, except that it compares ports too. */ static int remoteip_sockaddr_equal(apr_sockaddr_t *addr1, apr_sockaddr_t *addr2) { return (addr1->port == addr2->port && apr_sockaddr_equal(addr1, addr2)); } #if !APR_VERSION_AT_LEAST(1,5,0) #define apr_sockaddr_is_wildcard sockaddr_is_wildcard /* XXX: temp build fix from apr 1.5.x */ static int sockaddr_is_wildcard(const apr_sockaddr_t *addr) { static const char inaddr_any[ #if APR_HAVE_IPV6 sizeof(struct in6_addr) #else sizeof(struct in_addr) #endif ] = {0}; if (addr->ipaddr_ptr /* IP address initialized */ && addr->ipaddr_len <= sizeof inaddr_any) { /* else bug elsewhere? */ if (!memcmp(inaddr_any, addr->ipaddr_ptr, addr->ipaddr_len)) { return 1; } #if APR_HAVE_IPV6 if (addr->family == AF_INET6 && IN6_IS_ADDR_V4MAPPED((struct in6_addr *)addr->ipaddr_ptr)) { struct in_addr *v4 = (struct in_addr *)&((apr_uint32_t *)addr->ipaddr_ptr)[3]; if (!memcmp(inaddr_any, v4, sizeof *v4)) { return 1; } } #endif } return 0; } #endif /** Similar to remoteip_sockaddr_equal, except that it handles wildcard addresses * and ports too. */ static int remoteip_sockaddr_compat(apr_sockaddr_t *addr1, apr_sockaddr_t *addr2) { /* test exact address equality */ if (apr_sockaddr_equal(addr1, addr2) && (addr1->port == addr2->port || addr1->port == 0 || addr2->port == 0)) { return 1; } /* test address wildcards */ if (apr_sockaddr_is_wildcard(addr1) && (addr1->port == 0 || addr1->port == addr2->port)) { return 1; } if (apr_sockaddr_is_wildcard(addr2) && (addr2->port == 0 || addr2->port == addr1->port)) { return 1; } return 0; } static int remoteip_addr_in_list(remoteip_addr_info *list, apr_sockaddr_t *addr) { for (; list; list = list->next) { if (remoteip_sockaddr_compat(list->addr, addr)) { return 1; } } return 0; } static void remoteip_warn_enable_conflict(remoteip_addr_info *prev, server_rec *new, int flag) { char buf[INET6_ADDRSTRLEN]; apr_sockaddr_ip_getbuf(buf, sizeof(buf), prev->addr); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, new, APLOGNO(03491) "RemoteIPProxyProtocol: previous setting for %s:%hu from virtual " "host {%s:%hu in %s} is being overriden by virtual host " "{%s:%hu in %s}; new setting is '%s'", buf, prev->addr->port, prev->source->server_hostname, prev->source->addrs->host_port, prev->source->defn_name, new->server_hostname, new->addrs->host_port, new->defn_name, flag ? "On" : "Off"); } static const char *remoteip_enable_proxy_protocol(cmd_parms *cmd, void *config, int flag) { remoteip_config_t *conf; server_addr_rec *addr; remoteip_addr_info **add; remoteip_addr_info **rem; remoteip_addr_info *list; conf = ap_get_module_config(ap_server_conf->module_config, &remoteip_module); if (flag) { add = &conf->proxy_protocol_enabled; rem = &conf->proxy_protocol_disabled; } else { add = &conf->proxy_protocol_disabled; rem = &conf->proxy_protocol_enabled; } for (addr = cmd->server->addrs; addr; addr = addr->next) { /* remove address from opposite list */ if (*rem) { if (remoteip_sockaddr_equal((*rem)->addr, addr->host_addr)) { remoteip_warn_enable_conflict(*rem, cmd->server, flag); *rem = (*rem)->next; } else { for (list = *rem; list->next; list = list->next) { if (remoteip_sockaddr_equal(list->next->addr, addr->host_addr)) { remoteip_warn_enable_conflict(list->next, cmd->server, flag); list->next = list->next->next; break; } } } } /* add address to desired list */ if (!remoteip_addr_in_list(*add, addr->host_addr)) { remoteip_addr_info *info = apr_palloc(conf->pool, sizeof(*info)); info->addr = addr->host_addr; info->source = cmd->server; info->next = *add; *add = info; } } return NULL; } static const char *remoteip_disable_networks(cmd_parms *cmd, void *d, int argc, char *const argv[]) { int i; apr_pool_t *ptemp = cmd->temp_pool; apr_pool_t *p = cmd->pool; remoteip_config_t *conf = ap_get_module_config(ap_server_conf->module_config, &remoteip_module); if (argc == 0) return apr_pstrcat(p, cmd->cmd->name, " requires an argument", NULL); for (i=0; idisabled_subnets) = *ip; } return NULL; } static int remoteip_hook_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { remoteip_config_t *conf; remoteip_addr_info *info; char buf[INET6_ADDRSTRLEN]; conf = ap_get_module_config(ap_server_conf->module_config, &remoteip_module); for (info = conf->proxy_protocol_enabled; info; info = info->next) { apr_sockaddr_ip_getbuf(buf, sizeof(buf), info->addr); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, s, APLOGNO(03492) "RemoteIPProxyProtocol: enabled on %s:%hu", buf, info->addr->port); } for (info = conf->proxy_protocol_disabled; info; info = info->next) { apr_sockaddr_ip_getbuf(buf, sizeof(buf), info->addr); ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, s, APLOGNO(03494) "RemoteIPProxyProtocol: disabled on %s:%hu", buf, info->addr->port); } return OK; } static int remoteip_modify_request(request_rec *r) { conn_rec *c = r->connection; remoteip_config_t *config = (remoteip_config_t *) ap_get_module_config(r->server->module_config, &remoteip_module); remoteip_conn_config_t *conn_config = (remoteip_conn_config_t *) ap_get_module_config(r->connection->conn_config, &remoteip_module); remoteip_req_t *req = NULL; apr_sockaddr_t *temp_sa; apr_status_t rv; char *remote; char *proxy_ips = NULL; char *parse_remote; char *eos; unsigned char *addrbyte; /* If no RemoteIPInternalProxy, RemoteIPInternalProxyList, RemoteIPTrustedProxy or RemoteIPTrustedProxyList directive is configured, all proxies will be considered as external trusted proxies. */ void *internal = NULL; /* No header defined or results from our input filter */ if (!config->header_name && !conn_config) { return DECLINED; } /* Easy parsing case - just position the data we already have from PROXY protocol handling allowing it to take precedence and return */ if (conn_config) { if (!conn_config->client_addr) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(03496) "RemoteIPProxyProtocol data is missing, but required! Aborting request."); return HTTP_BAD_REQUEST; } r->useragent_addr = conn_config->client_addr; r->useragent_ip = conn_config->client_ip; ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Using %s as client's IP from PROXY protocol", r->useragent_ip); return OK; } if (config->proxymatch_ip) { /* This indicates that a RemoteIPInternalProxy, RemoteIPInternalProxyList, RemoteIPTrustedProxy or RemoteIPTrustedProxyList directive is configured. In this case, default to internal proxy. */ internal = (void *) 1; } remote = (char *) apr_table_get(r->headers_in, config->header_name); if (!remote) { return OK; } remote = apr_pstrdup(r->pool, remote); temp_sa = r->useragent_addr ? r->useragent_addr : c->client_addr; while (remote) { /* verify user agent IP against the trusted proxy list */ if (config->proxymatch_ip) { int i; remoteip_proxymatch_t *match; match = (remoteip_proxymatch_t *)config->proxymatch_ip->elts; for (i = 0; i < config->proxymatch_ip->nelts; ++i) { if (apr_ipsubnet_test(match[i].ip, temp_sa)) { if (internal) { /* Allow an internal proxy to present an external proxy, but do not allow an external proxy to present an internal proxy. In this case, the presented internal proxy will be considered external. */ internal = match[i].internal; } break; } } if (i && i >= config->proxymatch_ip->nelts) { break; } } if ((parse_remote = strrchr(remote, ',')) == NULL) { parse_remote = remote; remote = NULL; } else { *(parse_remote++) = '\0'; } while (*parse_remote == ' ') { ++parse_remote; } eos = parse_remote + strlen(parse_remote) - 1; while (eos >= parse_remote && *eos == ' ') { *(eos--) = '\0'; } if (eos < parse_remote) { if (remote) { *(remote + strlen(remote)) = ','; } else { remote = parse_remote; } break; } /* We map as IPv4 rather than IPv6 for equivalent host names * or IPV4OVERIPV6 */ rv = apr_sockaddr_info_get(&temp_sa, parse_remote, APR_UNSPEC, temp_sa->port, APR_IPV4_ADDR_OK, r->pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(01568) "RemoteIP: Header %s value of %s cannot be parsed " "as a client IP", config->header_name, parse_remote); if (remote) { *(remote + strlen(remote)) = ','; } else { remote = parse_remote; } break; } addrbyte = (unsigned char *) &temp_sa->sa.sin.sin_addr; /* For intranet (Internal proxies) ignore all restrictions below */ if (!internal && ((temp_sa->family == APR_INET /* For internet (non-Internal proxies) deny all * RFC3330 designated local/private subnets: * 10.0.0.0/8 169.254.0.0/16 192.168.0.0/16 * 127.0.0.0/8 172.16.0.0/12 */ && (addrbyte[0] == 10 || addrbyte[0] == 127 || (addrbyte[0] == 169 && addrbyte[1] == 254) || (addrbyte[0] == 172 && (addrbyte[1] & 0xf0) == 16) || (addrbyte[0] == 192 && addrbyte[1] == 168))) #if APR_HAVE_IPV6 || (temp_sa->family == APR_INET6 /* For internet (non-Internal proxies) we translated * IPv4-over-IPv6-mapped addresses as IPv4, above. * Accept only Global Unicast 2000::/3 defined by RFC4291 */ && ((temp_sa->sa.sin6.sin6_addr.s6_addr[0] & 0xe0) != 0x20)) #endif )) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(01569) "RemoteIP: Header %s value of %s appears to be " "a private IP or nonsensical. Ignored", config->header_name, parse_remote); if (remote) { *(remote + strlen(remote)) = ','; } else { remote = parse_remote; } break; } /* save away our results */ if (!req) { req = (remoteip_req_t *) apr_palloc(r->pool, sizeof(remoteip_req_t)); req->useragent_ip = r->useragent_ip; } /* Set useragent_ip string */ if (!internal) { if (proxy_ips) { proxy_ips = apr_pstrcat(r->pool, proxy_ips, ", ", req->useragent_ip, NULL); } else { proxy_ips = req->useragent_ip; } } req->useragent_addr = temp_sa; apr_sockaddr_ip_get(&req->useragent_ip, req->useragent_addr); } /* Nothing happened? */ if (!req) { return OK; } /* Port is not known so set it to zero; otherwise it can be misleading */ req->useragent_addr->port = 0; req->proxied_remote = remote; req->proxy_ips = proxy_ips; if (req->proxied_remote) { apr_table_setn(r->headers_in, config->header_name, req->proxied_remote); } else { apr_table_unset(r->headers_in, config->header_name); } if (req->proxy_ips) { apr_table_setn(r->notes, "remoteip-proxy-ip-list", req->proxy_ips); if (config->proxies_header_name) { apr_table_setn(r->headers_in, config->proxies_header_name, req->proxy_ips); } } r->useragent_addr = req->useragent_addr; r->useragent_ip = req->useragent_ip; ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, req->proxy_ips ? "Using %s as client's IP by proxies %s" : "Using %s as client's IP by internal proxies%s", req->useragent_ip, (req->proxy_ips ? req->proxy_ips : "")); return OK; } static int remoteip_is_server_port(apr_port_t port) { ap_listen_rec *lr; for (lr = ap_listeners; lr; lr = lr->next) { if (lr->bind_addr && lr->bind_addr->port == port) { return 1; } } return 0; } /* * Human readable format: * PROXY {TCP4|TCP6|UNKNOWN} */ static remoteip_parse_status_t remoteip_process_v1_header(conn_rec *c, remoteip_conn_config_t *conn_conf, proxy_header *hdr, apr_size_t len, apr_size_t *hdr_len) { char *end, *word, *host, *valid_addr_chars, *saveptr; char buf[sizeof(hdr->v1.line)]; apr_port_t port; apr_status_t ret; apr_int32_t family; #define GET_NEXT_WORD(field) \ word = apr_strtok(NULL, " ", &saveptr); \ if (!word) { \ ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(03497) \ "RemoteIPProxyProtocol: no " field " found in header '%s'", \ hdr->v1.line); \ return HDR_ERROR; \ } end = memchr(hdr->v1.line, '\r', len - 1); if (!end || end[1] != '\n') { return HDR_NEED_MORE; /* partial or invalid header */ } *end = '\0'; *hdr_len = end + 2 - hdr->v1.line; /* skip header + CRLF */ /* parse in separate buffer so have the original for error messages */ strcpy(buf, hdr->v1.line); apr_strtok(buf, " ", &saveptr); /* parse family */ GET_NEXT_WORD("family") if (strcmp(word, "UNKNOWN") == 0) { conn_conf->client_addr = c->client_addr; conn_conf->client_ip = c->client_ip; return HDR_DONE; } else if (strcmp(word, "TCP4") == 0) { family = APR_INET; valid_addr_chars = "0123456789."; } else if (strcmp(word, "TCP6") == 0) { #if APR_HAVE_IPV6 family = APR_INET6; valid_addr_chars = "0123456789abcdefABCDEF:"; #else ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(03498) "RemoteIPProxyProtocol: Unable to parse v6 address - APR is not compiled with IPv6 support"); return HDR_ERROR; #endif } else { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(03499) "RemoteIPProxyProtocol: unknown family '%s' in header '%s'", word, hdr->v1.line); return HDR_ERROR; } /* parse client-addr */ GET_NEXT_WORD("client-address") if (strspn(word, valid_addr_chars) != strlen(word)) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(03500) "RemoteIPProxyProtocol: invalid client-address '%s' found in " "header '%s'", word, hdr->v1.line); return HDR_ERROR; } host = word; /* parse dest-addr */ GET_NEXT_WORD("destination-address") /* parse client-port */ GET_NEXT_WORD("client-port") if (sscanf(word, "%hu", &port) != 1) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(03501) "RemoteIPProxyProtocol: error parsing port '%s' in header '%s'", word, hdr->v1.line); return HDR_ERROR; } /* parse dest-port */ /* GET_NEXT_WORD("destination-port") - no-op since we don't care about it */ /* create a socketaddr from the info */ ret = apr_sockaddr_info_get(&conn_conf->client_addr, host, family, port, 0, c->pool); if (ret != APR_SUCCESS) { conn_conf->client_addr = NULL; ap_log_cerror(APLOG_MARK, APLOG_ERR, ret, c, APLOGNO(03502) "RemoteIPProxyProtocol: error converting family '%d', host '%s'," " and port '%hu' to sockaddr; header was '%s'", family, host, port, hdr->v1.line); return HDR_ERROR; } conn_conf->client_ip = apr_pstrdup(c->pool, host); return HDR_DONE; } /** Add our filter to the connection if it is requested */ static int remoteip_hook_pre_connection(conn_rec *c, void *csd) { remoteip_config_t *conf; remoteip_conn_config_t *conn_conf; int i; /* Establish master config in slave connections, so that request processing * finds it. */ if (c->master != NULL) { conn_conf = ap_get_module_config(c->master->conn_config, &remoteip_module); if (conn_conf) { ap_set_module_config(c->conn_config, &remoteip_module, conn_conf); } return DECLINED; } conf = ap_get_module_config(ap_server_conf->module_config, &remoteip_module); /* check if we're enabled for this connection */ if (!remoteip_addr_in_list(conf->proxy_protocol_enabled, c->local_addr) || remoteip_addr_in_list(conf->proxy_protocol_disabled, c->local_addr)) { return DECLINED; } /* We are enabled for this IP/port, but check that we aren't explicitly disabled */ for (i = 0; i < conf->disabled_subnets->nelts; i++) { apr_ipsubnet_t *ip = ((apr_ipsubnet_t**)conf->disabled_subnets->elts)[i]; if (ip && apr_ipsubnet_test(ip, c->client_addr)) return DECLINED; } /* mod_proxy creates outgoing connections - we don't want those */ if (!remoteip_is_server_port(c->local_addr->port)) { return DECLINED; } /* add our filter */ if (!ap_add_input_filter_handle(remoteip_filter, NULL, NULL, c)) { /* XXX: Shouldn't this WARN in log? */ return DECLINED; } ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(03503) "RemoteIPProxyProtocol: enabled on connection to %s:%hu", c->local_ip, c->local_addr->port); /* this holds the resolved proxy info for this connection */ conn_conf = apr_pcalloc(c->pool, sizeof(*conn_conf)); ap_set_module_config(c->conn_config, &remoteip_module, conn_conf); return OK; } /* Binary format: * * sig = \x0D \x0A \x0D \x0A \x00 \x0D \x0A \x51 \x55 \x49 \x54 \x0A * cmd = <4-bits-version><4-bits-command> * 4-bits-version = \x02 * 4-bits-command = {\x00|\x01} (\x00 = LOCAL: discard con info; \x01 = PROXY) * proto = <4-bits-family><4-bits-protocol> * 4-bits-family = {\x00|\x01|\x02|\x03} (AF_UNSPEC, AF_INET, AF_INET6, AF_UNIX) * 4-bits-protocol = {\x00|\x01|\x02} (UNSPEC, STREAM, DGRAM) */ static remoteip_parse_status_t remoteip_process_v2_header(conn_rec *c, remoteip_conn_config_t *conn_conf, proxy_header *hdr) { apr_status_t ret; switch (hdr->v2.ver_cmd & 0xF) { case 0x01: /* PROXY command */ switch (hdr->v2.fam) { case 0x11: /* TCPv4 */ ret = apr_sockaddr_info_get(&conn_conf->client_addr, NULL, APR_INET, ntohs(hdr->v2.addr.ip4.src_port), 0, c->pool); if (ret != APR_SUCCESS) { conn_conf->client_addr = NULL; ap_log_cerror(APLOG_MARK, APLOG_ERR, ret, c, APLOGNO(03504) "RemoteIPPProxyProtocol: error creating sockaddr"); return HDR_ERROR; } conn_conf->client_addr->sa.sin.sin_addr.s_addr = hdr->v2.addr.ip4.src_addr; break; case 0x21: /* TCPv6 */ #if APR_HAVE_IPV6 ret = apr_sockaddr_info_get(&conn_conf->client_addr, NULL, APR_INET6, ntohs(hdr->v2.addr.ip6.src_port), 0, c->pool); if (ret != APR_SUCCESS) { conn_conf->client_addr = NULL; ap_log_cerror(APLOG_MARK, APLOG_ERR, ret, c, APLOGNO(03505) "RemoteIPProxyProtocol: error creating sockaddr"); return HDR_ERROR; } memcpy(&conn_conf->client_addr->sa.sin6.sin6_addr.s6_addr, hdr->v2.addr.ip6.src_addr, 16); break; #else ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(03506) "RemoteIPProxyProtocol: APR is not compiled with IPv6 support"); return HDR_ERROR; #endif default: /* unsupported protocol */ ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(10183) "RemoteIPProxyProtocol: unsupported protocol %.2hx", (unsigned short)hdr->v2.fam); return HDR_ERROR; } break; /* we got a sockaddr now */ default: /* not a supported command */ ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(03507) "RemoteIPProxyProtocol: unsupported command %.2hx", (unsigned short)hdr->v2.ver_cmd); return HDR_ERROR; } /* got address - compute the client_ip from it */ ret = apr_sockaddr_ip_get(&conn_conf->client_ip, conn_conf->client_addr); if (ret != APR_SUCCESS) { conn_conf->client_addr = NULL; ap_log_cerror(APLOG_MARK, APLOG_ERR, ret, c, APLOGNO(03508) "RemoteIPProxyProtocol: error converting address to string"); return HDR_ERROR; } return HDR_DONE; } /** Return length for a v2 protocol header. */ static apr_size_t remoteip_get_v2_len(proxy_header *hdr) { return ntohs(hdr->v2.len); } /** Determine if this is a v1 or v2 PROXY header. */ static int remoteip_determine_version(conn_rec *c, const char *ptr) { proxy_header *hdr = (proxy_header *) ptr; /* assert len >= 14 */ if (memcmp(&hdr->v2, v2sig, sizeof(v2sig)) == 0 && (hdr->v2.ver_cmd & 0xF0) == 0x20) { return 2; } else if (memcmp(hdr->v1.line, "PROXY ", 6) == 0) { return 1; } else { return -1; } } /* Capture the first bytes on the protocol and parse the PROXY protocol header. * Removes itself when the header is complete. */ static apr_status_t remoteip_input_filter(ap_filter_t *f, apr_bucket_brigade *bb_out, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { apr_status_t ret; remoteip_filter_context *ctx = f->ctx; remoteip_conn_config_t *conn_conf; apr_bucket *b; remoteip_parse_status_t psts = HDR_NEED_MORE; const char *ptr; apr_size_t len; if (f->c->aborted) { return APR_ECONNABORTED; } /* allocate/retrieve the context that holds our header */ if (!ctx) { ctx = f->ctx = apr_palloc(f->c->pool, sizeof(*ctx)); ctx->rcvd = 0; ctx->need = MIN_HDR_LEN; ctx->version = 0; ctx->mode = AP_MODE_READBYTES; ctx->bb = apr_brigade_create(f->c->pool, f->c->bucket_alloc); ctx->done = 0; } if (ctx->done) { /* Note: because we're a connection filter we can't remove ourselves * when we're done, so we have to stay in the chain and just go into * passthrough mode. */ return ap_get_brigade(f->next, bb_out, mode, block, readbytes); } conn_conf = ap_get_module_config(f->c->conn_config, &remoteip_module); /* try to read a header's worth of data */ while (!ctx->done) { if (APR_BRIGADE_EMPTY(ctx->bb)) { apr_off_t got, want = ctx->need - ctx->rcvd; ret = ap_get_brigade(f->next, ctx->bb, ctx->mode, block, want); if (ret != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_ERR, ret, f->c, APLOGNO(10184) "failed reading input"); return ret; } ret = apr_brigade_length(ctx->bb, 1, &got); if (ret || got > want) { ap_log_cerror(APLOG_MARK, APLOG_ERR, ret, f->c, APLOGNO(10185) "RemoteIPProxyProtocol header too long, " "got %" APR_OFF_T_FMT " expected %" APR_OFF_T_FMT, got, want); f->c->aborted = 1; return APR_ECONNABORTED; } } if (APR_BRIGADE_EMPTY(ctx->bb)) { return block == APR_NONBLOCK_READ ? APR_SUCCESS : APR_EOF; } while (!ctx->done && !APR_BRIGADE_EMPTY(ctx->bb)) { b = APR_BRIGADE_FIRST(ctx->bb); ret = apr_bucket_read(b, &ptr, &len, block); if (APR_STATUS_IS_EAGAIN(ret) && block == APR_NONBLOCK_READ) { return APR_SUCCESS; } if (ret != APR_SUCCESS) { return ret; } memcpy(ctx->header + ctx->rcvd, ptr, len); ctx->rcvd += len; apr_bucket_delete(b); psts = HDR_NEED_MORE; if (ctx->version == 0) { /* reading initial chunk */ if (ctx->rcvd >= MIN_HDR_LEN) { ctx->version = remoteip_determine_version(f->c, ctx->header); if (ctx->version < 0) { psts = HDR_ERROR; } else if (ctx->version == 1) { ctx->mode = AP_MODE_GETLINE; ctx->need = sizeof(proxy_v1); } else if (ctx->version == 2) { ctx->need = MIN_V2_HDR_LEN; } } } else if (ctx->version == 1) { psts = remoteip_process_v1_header(f->c, conn_conf, (proxy_header *) ctx->header, ctx->rcvd, &ctx->need); } else if (ctx->version == 2) { if (ctx->rcvd >= MIN_V2_HDR_LEN) { ctx->need = MIN_V2_HDR_LEN + remoteip_get_v2_len((proxy_header *) ctx->header); if (ctx->need > sizeof(proxy_v2)) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, f->c, APLOGNO(10186) "RemoteIPProxyProtocol protocol header length too long"); f->c->aborted = 1; apr_brigade_destroy(ctx->bb); return APR_ECONNABORTED; } } if (ctx->rcvd >= ctx->need) { psts = remoteip_process_v2_header(f->c, conn_conf, (proxy_header *) ctx->header); } } else { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, f->c, APLOGNO(03509) "RemoteIPProxyProtocol: internal error: unknown version " "%d", ctx->version); f->c->aborted = 1; apr_brigade_destroy(ctx->bb); return APR_ECONNABORTED; } switch (psts) { case HDR_ERROR: f->c->aborted = 1; apr_brigade_destroy(ctx->bb); return APR_ECONNABORTED; case HDR_DONE: ctx->done = 1; break; case HDR_NEED_MORE: break; } } } /* we only get here when done == 1 */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, f->c, APLOGNO(03511) "RemoteIPProxyProtocol: received valid PROXY header: %s:%hu", conn_conf->client_ip, conn_conf->client_addr->port); if (ctx->rcvd > ctx->need || !APR_BRIGADE_EMPTY(ctx->bb)) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, f->c, APLOGNO(03513) "RemoteIPProxyProtocol: internal error: have data left over; " " need=%" APR_SIZE_T_FMT ", rcvd=%" APR_SIZE_T_FMT ", brigade-empty=%d", ctx->need, ctx->rcvd, APR_BRIGADE_EMPTY(ctx->bb)); f->c->aborted = 1; apr_brigade_destroy(ctx->bb); return APR_ECONNABORTED; } /* clean up */ apr_brigade_destroy(ctx->bb); ctx->bb = NULL; /* now do the real read for the upper layer */ return ap_get_brigade(f->next, bb_out, mode, block, readbytes); } static const command_rec remoteip_cmds[] = { AP_INIT_TAKE1("RemoteIPHeader", header_name_set, NULL, RSRC_CONF, "Specifies a request header to trust as the client IP, " "e.g. X-Forwarded-For"), AP_INIT_TAKE1("RemoteIPProxiesHeader", proxies_header_name_set, NULL, RSRC_CONF, "Specifies a request header to record proxy IP's, " "e.g. X-Forwarded-By; if not given then do not record"), AP_INIT_ITERATE("RemoteIPTrustedProxy", proxies_set, 0, RSRC_CONF, "Specifies one or more proxies which are trusted " "to present IP headers"), AP_INIT_ITERATE("RemoteIPInternalProxy", proxies_set, (void*)1, RSRC_CONF, "Specifies one or more internal (transparent) proxies " "which are trusted to present IP headers"), AP_INIT_TAKE1("RemoteIPTrustedProxyList", proxylist_read, 0, RSRC_CONF | EXEC_ON_READ, "The filename to read the list of trusted proxies, " "see the RemoteIPTrustedProxy directive"), AP_INIT_TAKE1("RemoteIPInternalProxyList", proxylist_read, (void*)1, RSRC_CONF | EXEC_ON_READ, "The filename to read the list of internal proxies, " "see the RemoteIPInternalProxy directive"), AP_INIT_FLAG("RemoteIPProxyProtocol", remoteip_enable_proxy_protocol, NULL, RSRC_CONF, "Enable PROXY protocol handling ('on', 'off')"), AP_INIT_TAKE_ARGV("RemoteIPProxyProtocolExceptions", remoteip_disable_networks, NULL, RSRC_CONF, "Disable PROXY " "protocol handling for this list of networks in CIDR format"), { NULL } }; static void register_hooks(apr_pool_t *p) { /* mod_ssl is CONNECTION + 5, so we want something higher (earlier); * mod_reqtimeout is CONNECTION + 8, so we want something lower (later) */ remoteip_filter = ap_register_input_filter("REMOTEIP_INPUT", remoteip_input_filter, NULL, AP_FTYPE_CONNECTION + 7); ap_hook_post_config(remoteip_hook_post_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_pre_connection(remoteip_hook_pre_connection, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_read_request(remoteip_modify_request, NULL, NULL, APR_HOOK_FIRST); } AP_DECLARE_MODULE(remoteip) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ create_remoteip_server_config, /* create per-server config structure */ merge_remoteip_server_config, /* merge per-server config structures */ remoteip_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/metadata/mod_unique_id.dep0000644000000000000500000000342412674411515020010 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_unique_id.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_unique_id.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/metadata/mod_setenvif.dsp0000644000000000000500000001070710551346420017663 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_setenvif" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_setenvif - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_setenvif.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_setenvif.mak" CFG="mod_setenvif - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_setenvif - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_setenvif - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_setenvif - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../ssl" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_setenvif_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_setenvif.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_setenvif.so" /d LONG_NAME="setenvif_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_setenvif.so" /base:@..\..\os\win32\BaseAddr.ref,mod_setenvif.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_setenvif.so" /base:@..\..\os\win32\BaseAddr.ref,mod_setenvif.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_setenvif.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_setenvif - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../ssl" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_setenvif_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_setenvif.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_setenvif.so" /d LONG_NAME="setenvif_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_setenvif.so" /base:@..\..\os\win32\BaseAddr.ref,mod_setenvif.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_setenvif.so" /base:@..\..\os\win32\BaseAddr.ref,mod_setenvif.so # Begin Special Build Tool TargetPath=.\Debug\mod_setenvif.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_setenvif - Win32 Release" # Name "mod_setenvif - Win32 Debug" # Begin Source File SOURCE=.\mod_setenvif.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/metadata/mod_version.exp0000644000000000000500000000001710150161574017524 0ustar rootsrcversion_module httpd-2.4.41/modules/metadata/mod_setenvif.mak0000644000000000000500000002366512701473373017663 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_setenvif.dsp !IF "$(CFG)" == "" CFG=mod_setenvif - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_setenvif - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_setenvif - Win32 Release" && "$(CFG)" != "mod_setenvif - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_setenvif.mak" CFG="mod_setenvif - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_setenvif - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_setenvif - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_setenvif - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_setenvif.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_setenvif.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_setenvif.obj" -@erase "$(INTDIR)\mod_setenvif.res" -@erase "$(INTDIR)\mod_setenvif_src.idb" -@erase "$(INTDIR)\mod_setenvif_src.pdb" -@erase "$(OUTDIR)\mod_setenvif.exp" -@erase "$(OUTDIR)\mod_setenvif.lib" -@erase "$(OUTDIR)\mod_setenvif.pdb" -@erase "$(OUTDIR)\mod_setenvif.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../ssl" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_setenvif_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_setenvif.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_setenvif.so" /d LONG_NAME="setenvif_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_setenvif.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_setenvif.pdb" /debug /out:"$(OUTDIR)\mod_setenvif.so" /implib:"$(OUTDIR)\mod_setenvif.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_setenvif.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_setenvif.obj" \ "$(INTDIR)\mod_setenvif.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_setenvif.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_setenvif.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_setenvif.so" if exist .\Release\mod_setenvif.so.manifest mt.exe -manifest .\Release\mod_setenvif.so.manifest -outputresource:.\Release\mod_setenvif.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_setenvif - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_setenvif.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_setenvif.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_setenvif.obj" -@erase "$(INTDIR)\mod_setenvif.res" -@erase "$(INTDIR)\mod_setenvif_src.idb" -@erase "$(INTDIR)\mod_setenvif_src.pdb" -@erase "$(OUTDIR)\mod_setenvif.exp" -@erase "$(OUTDIR)\mod_setenvif.lib" -@erase "$(OUTDIR)\mod_setenvif.pdb" -@erase "$(OUTDIR)\mod_setenvif.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../ssl" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_setenvif_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_setenvif.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_setenvif.so" /d LONG_NAME="setenvif_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_setenvif.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_setenvif.pdb" /debug /out:"$(OUTDIR)\mod_setenvif.so" /implib:"$(OUTDIR)\mod_setenvif.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_setenvif.so LINK32_OBJS= \ "$(INTDIR)\mod_setenvif.obj" \ "$(INTDIR)\mod_setenvif.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_setenvif.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_setenvif.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_setenvif.so" if exist .\Debug\mod_setenvif.so.manifest mt.exe -manifest .\Debug\mod_setenvif.so.manifest -outputresource:.\Debug\mod_setenvif.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_setenvif.dep") !INCLUDE "mod_setenvif.dep" !ELSE !MESSAGE Warning: cannot find "mod_setenvif.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_setenvif - Win32 Release" || "$(CFG)" == "mod_setenvif - Win32 Debug" !IF "$(CFG)" == "mod_setenvif - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\metadata" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_setenvif - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\metadata" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_setenvif - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\metadata" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_setenvif - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\metadata" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_setenvif - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\metadata" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\metadata" !ELSEIF "$(CFG)" == "mod_setenvif - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\metadata" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\metadata" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_setenvif - Win32 Release" "$(INTDIR)\mod_setenvif.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_setenvif.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_setenvif.so" /d LONG_NAME="setenvif_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_setenvif - Win32 Debug" "$(INTDIR)\mod_setenvif.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_setenvif.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_setenvif.so" /d LONG_NAME="setenvif_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_setenvif.c "$(INTDIR)\mod_setenvif.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/metadata/mod_version.dsp0000644000000000000500000001062110551346420017520 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_version" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_version - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_version.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_version.mak" CFG="mod_version - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_version - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_version - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_version - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_version_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_version.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_version.so" /d LONG_NAME="version_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_version.so" /base:@..\..\os\win32\BaseAddr.ref,mod_version.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_version.so" /base:@..\..\os\win32\BaseAddr.ref,mod_version.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_version.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_version - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_version_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_version.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_version.so" /d LONG_NAME="version_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_version.so" /base:@..\..\os\win32\BaseAddr.ref,mod_version.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_version.so" /base:@..\..\os\win32\BaseAddr.ref,mod_version.so # Begin Special Build Tool TargetPath=.\Debug\mod_version.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_version - Win32 Release" # Name "mod_version - Win32 Debug" # Begin Source File SOURCE=.\mod_version.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/metadata/mod_mime_magic.c0000644000000000000500000022044213507631724017572 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_mime_magic: MIME type lookup via file magic numbers * Copyright (c) 1996-1997 Cisco Systems, Inc. * * This software was submitted by Cisco Systems to the Apache Software Foundation in July * 1997. Future revisions and derivatives of this source code must * acknowledge Cisco Systems as the original contributor of this module. * All other licensing and usage conditions are those of the Apache Software Foundation. * * Some of this code is derived from the free version of the file command * originally posted to comp.sources.unix. Copyright info for that program * is included below as required. * --------------------------------------------------------------------------- * - Copyright (c) Ian F. Darwin, 1987. Written by Ian F. Darwin. * * This software is not subject to any license of the American Telephone and * Telegraph Company or of the Regents of the University of California. * * Permission is granted to anyone to use this software for any purpose on any * computer system, and to alter it and redistribute it freely, subject to * the following restrictions: * * 1. The author is not responsible for the consequences of use of this * software, no matter how awful, even if they arise from flaws in it. * * 2. The origin of this software must not be misrepresented, either by * explicit claim or by omission. Since few users ever read sources, credits * must appear in the documentation. * * 3. Altered versions must be plainly marked as such, and must not be * misrepresented as being the original software. Since few users ever read * sources, credits must appear in the documentation. * * 4. This notice may not be removed or altered. * ------------------------------------------------------------------------- * * For compliance with Mr Darwin's terms: this has been very significantly * modified from the free "file" command. * - all-in-one file for compilation convenience when moving from one * version of Apache to the next. * - Memory allocation is done through the Apache API's apr_pool_t structure. * - All functions have had necessary Apache API request or server * structures passed to them where necessary to call other Apache API * routines. (i.e. usually for logging, files, or memory allocation in * itself or a called function.) * - struct magic has been converted from an array to a single-ended linked * list because it only grows one record at a time, it's only accessed * sequentially, and the Apache API has no equivalent of realloc(). * - Functions have been changed to get their parameters from the server * configuration instead of globals. (It should be reentrant now but has * not been tested in a threaded environment.) * - Places where it used to print results to stdout now saves them in a * list where they're used to set the MIME type in the Apache request * record. * - Command-line flags have been removed since they will never be used here. * * Ian Kluft * Engineering Information Framework * Central Engineering * Cisco Systems, Inc. * San Jose, CA, USA * * Initial installation July/August 1996 * Misc bug fixes May 1997 * Submission to Apache Software Foundation July 1997 * */ #include "apr.h" #include "apr_strings.h" #include "apr_lib.h" #define APR_WANT_STRFUNC #include "apr_want.h" #if APR_HAVE_UNISTD_H #include #endif #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "util_script.h" /* ### this isn't set by configure? does anybody set this? */ #ifdef HAVE_UTIME_H #include #endif /* * data structures and related constants */ #define MODNAME "mod_mime_magic" #define MIME_MAGIC_DEBUG 0 #define MIME_BINARY_UNKNOWN "application/octet-stream" #define MIME_TEXT_UNKNOWN "text/plain" #define MAXMIMESTRING 256 /* HOWMANY must be at least 4096 to make gzip -dcq work */ #define HOWMANY 4096 /* SMALL_HOWMANY limits how much work we do to figure out text files */ #define SMALL_HOWMANY 1024 #define MAXDESC 50 /* max leng of text description */ #define MAXstring 64 /* max leng of "string" types */ struct magic { struct magic *next; /* link to next entry */ int lineno; /* line number from magic file */ short flag; #define INDIR 1 /* if '>(...)' appears, */ #define UNSIGNED 2 /* comparison is unsigned */ short cont_level; /* level of ">" */ struct { char type; /* byte short long */ long offset; /* offset from indirection */ } in; long offset; /* offset to magic number */ unsigned char reln; /* relation (0=eq, '>'=gt, etc) */ char type; /* int, short, long or string. */ char vallen; /* length of string value, if any */ #define BYTE 1 #define SHORT 2 #define LONG 4 #define STRING 5 #define DATE 6 #define BESHORT 7 #define BELONG 8 #define BEDATE 9 #define LESHORT 10 #define LELONG 11 #define LEDATE 12 union VALUETYPE { unsigned char b; unsigned short h; unsigned long l; char s[MAXstring]; unsigned char hs[2]; /* 2 bytes of a fixed-endian "short" */ unsigned char hl[4]; /* 2 bytes of a fixed-endian "long" */ } value; /* either number or string */ unsigned long mask; /* mask before comparison with value */ char nospflag; /* suppress space character */ /* NOTE: this string is suspected of overrunning - find it! */ char desc[MAXDESC]; /* description */ }; /* * data structures for tar file recognition * -------------------------------------------------------------------------- * Header file for public domain tar (tape archive) program. * * @(#)tar.h 1.20 86/10/29 Public Domain. Created 25 August 1985 by John * Gilmore, ihnp4!hoptoad!gnu. * * Header block on tape. * * I'm going to use traditional DP naming conventions here. A "block" is a big * chunk of stuff that we do I/O on. A "record" is a piece of info that we * care about. Typically many "record"s fit into a "block". */ #define RECORDSIZE 512 #define NAMSIZ 100 #define TUNMLEN 32 #define TGNMLEN 32 union record { char charptr[RECORDSIZE]; struct header { char name[NAMSIZ]; char mode[8]; char uid[8]; char gid[8]; char size[12]; char mtime[12]; char chksum[8]; char linkflag; char linkname[NAMSIZ]; char magic[8]; char uname[TUNMLEN]; char gname[TGNMLEN]; char devmajor[8]; char devminor[8]; } header; }; /* The magic field is filled with this if uname and gname are valid. */ #define TMAGIC "ustar " /* 7 chars and a null */ /* * file-function prototypes */ static int ascmagic(request_rec *, unsigned char *, apr_size_t); static int is_tar(unsigned char *, apr_size_t); static int softmagic(request_rec *, unsigned char *, apr_size_t); static int tryit(request_rec *, unsigned char *, apr_size_t, int); static int zmagic(request_rec *, unsigned char *, apr_size_t); static int getvalue(server_rec *, struct magic *, char **); static int hextoint(int); static char *getstr(server_rec *, char *, char *, int, int *); static int parse(server_rec *, apr_pool_t *p, char *, int); static int match(request_rec *, unsigned char *, apr_size_t); static int mget(request_rec *, union VALUETYPE *, unsigned char *, struct magic *, apr_size_t); static int mcheck(request_rec *, union VALUETYPE *, struct magic *); static void mprint(request_rec *, union VALUETYPE *, struct magic *); static int uncompress(request_rec *, int, unsigned char **, apr_size_t); static long from_oct(int, char *); static int fsmagic(request_rec *r, const char *fn); /* * includes for ASCII substring recognition formerly "names.h" in file * command * * Original notes: names and types used by ascmagic in file(1). These tokens are * here because they can appear anywhere in the first HOWMANY bytes, while * tokens in /etc/magic must appear at fixed offsets into the file. Don't * make HOWMANY too high unless you have a very fast CPU. */ /* these types are used to index the apr_table_t 'types': keep em in sync! */ /* HTML inserted in first because this is a web server module now */ #define L_HTML 0 /* HTML */ #define L_C 1 /* first and foremost on UNIX */ #define L_FORT 2 /* the oldest one */ #define L_MAKE 3 /* Makefiles */ #define L_PLI 4 /* PL/1 */ #define L_MACH 5 /* some kinda assembler */ #define L_ENG 6 /* English */ #define L_PAS 7 /* Pascal */ #define L_MAIL 8 /* Electronic mail */ #define L_NEWS 9 /* Usenet Netnews */ static const char *types[] = { "text/html", /* HTML */ "text/plain", /* "c program text", */ "text/plain", /* "fortran program text", */ "text/plain", /* "make commands text", */ "text/plain", /* "pl/1 program text", */ "text/plain", /* "assembler program text", */ "text/plain", /* "English text", */ "text/plain", /* "pascal program text", */ "message/rfc822", /* "mail text", */ "message/news", /* "news text", */ "application/binary", /* "can't happen error on names.h/types", */ 0 }; static const struct names { const char *name; short type; } names[] = { /* These must be sorted by eye for optimal hit rate */ /* Add to this list only after substantial meditation */ { "", L_HTML }, { "", L_HTML }, { "", L_HTML }, { "", L_HTML }, { "", L_HTML }, { "<TITLE>", L_HTML }, { "<h1>", L_HTML }, { "<H1>", L_HTML }, { "<!--", L_HTML }, { "<!DOCTYPE HTML", L_HTML }, { "/*", L_C }, /* must precede "The", "the", etc. */ { "#include", L_C }, { "char", L_C }, { "The", L_ENG }, { "the", L_ENG }, { "double", L_C }, { "extern", L_C }, { "float", L_C }, { "real", L_C }, { "struct", L_C }, { "union", L_C }, { "CFLAGS", L_MAKE }, { "LDFLAGS", L_MAKE }, { "all:", L_MAKE }, { ".PRECIOUS", L_MAKE }, /* * Too many files of text have these words in them. Find another way to * recognize Fortrash. */ #ifdef NOTDEF { "subroutine", L_FORT }, { "function", L_FORT }, { "block", L_FORT }, { "common", L_FORT }, { "dimension", L_FORT }, { "integer", L_FORT }, { "data", L_FORT }, #endif /* NOTDEF */ { ".ascii", L_MACH }, { ".asciiz", L_MACH }, { ".byte", L_MACH }, { ".even", L_MACH }, { ".globl", L_MACH }, { "clr", L_MACH }, { "(input,", L_PAS }, { "dcl", L_PLI }, { "Received:", L_MAIL }, { ">From", L_MAIL }, { "Return-Path:", L_MAIL }, { "Cc:", L_MAIL }, { "Newsgroups:", L_NEWS }, { "Path:", L_NEWS }, { "Organization:", L_NEWS }, { NULL, 0 } }; #define NNAMES ((sizeof(names)/sizeof(struct names)) - 1) /* * Result String List (RSL) * * The file(1) command prints its output. Instead, we store the various * "printed" strings in a list (allocating memory as we go) and concatenate * them at the end when we finally know how much space they'll need. */ typedef struct magic_rsl_s { const char *str; /* string, possibly a fragment */ struct magic_rsl_s *next; /* pointer to next fragment */ } magic_rsl; /* * Apache module configuration structures */ /* per-server info */ typedef struct { const char *magicfile; /* where magic be found */ struct magic *magic; /* head of magic config list */ struct magic *last; } magic_server_config_rec; /* per-request info */ typedef struct { magic_rsl *head; /* result string list */ magic_rsl *tail; unsigned suf_recursion; /* recursion depth in suffix check */ } magic_req_rec; /* * configuration functions - called by Apache API routines */ module AP_MODULE_DECLARE_DATA mime_magic_module; static void *create_magic_server_config(apr_pool_t *p, server_rec *d) { /* allocate the config - use pcalloc because it needs to be zeroed */ return apr_pcalloc(p, sizeof(magic_server_config_rec)); } static void *merge_magic_server_config(apr_pool_t *p, void *basev, void *addv) { magic_server_config_rec *base = (magic_server_config_rec *) basev; magic_server_config_rec *add = (magic_server_config_rec *) addv; magic_server_config_rec *new = (magic_server_config_rec *) apr_palloc(p, sizeof(magic_server_config_rec)); new->magicfile = add->magicfile ? add->magicfile : base->magicfile; new->magic = NULL; new->last = NULL; return new; } static const char *set_magicfile(cmd_parms *cmd, void *dummy, const char *arg) { magic_server_config_rec *conf = (magic_server_config_rec *) ap_get_module_config(cmd->server->module_config, &mime_magic_module); if (!conf) { return MODNAME ": server structure not allocated"; } conf->magicfile = arg; return NULL; } /* * configuration file commands - exported to Apache API */ static const command_rec mime_magic_cmds[] = { AP_INIT_TAKE1("MimeMagicFile", set_magicfile, NULL, RSRC_CONF, "Path to MIME Magic file (in file(1) format)"), {NULL} }; /* * RSL (result string list) processing routines * * These collect strings that would have been printed in fragments by file(1) * into a list of magic_rsl structures with the strings. When complete, * they're concatenated together to become the MIME content and encoding * types. * * return value conventions for these functions: functions which return int: * failure = -1, other = result functions which return pointers: failure = 0, * other = result */ /* allocate a per-request structure and put it in the request record */ static magic_req_rec *magic_set_config(request_rec *r) { magic_req_rec *req_dat = (magic_req_rec *) apr_palloc(r->pool, sizeof(magic_req_rec)); req_dat->head = req_dat->tail = (magic_rsl *) NULL; ap_set_module_config(r->request_config, &mime_magic_module, req_dat); return req_dat; } /* add a string to the result string list for this request */ /* it is the responsibility of the caller to allocate "str" */ static int magic_rsl_add(request_rec *r, const char *str) { magic_req_rec *req_dat = (magic_req_rec *) ap_get_module_config(r->request_config, &mime_magic_module); magic_rsl *rsl; /* make sure we have a list to put it in */ if (!req_dat) { ap_log_rerror(APLOG_MARK, APLOG_ERR, APR_EINVAL, r, APLOGNO(01507) MODNAME ": request config should not be NULL"); if (!(req_dat = magic_set_config(r))) { /* failure */ return -1; } } /* allocate the list entry */ rsl = (magic_rsl *) apr_palloc(r->pool, sizeof(magic_rsl)); /* fill it */ rsl->str = str; rsl->next = (magic_rsl *) NULL; /* append to the list */ if (req_dat->head && req_dat->tail) { req_dat->tail->next = rsl; req_dat->tail = rsl; } else { req_dat->head = req_dat->tail = rsl; } /* success */ return 0; } /* RSL hook for puts-type functions */ static int magic_rsl_puts(request_rec *r, const char *str) { return magic_rsl_add(r, str); } /* RSL hook for printf-type functions */ static int magic_rsl_printf(request_rec *r, char *str,...) { va_list ap; char buf[MAXMIMESTRING]; /* assemble the string into the buffer */ va_start(ap, str); apr_vsnprintf(buf, sizeof(buf), str, ap); va_end(ap); /* add the buffer to the list */ return magic_rsl_add(r, apr_pstrdup(r->pool, buf)); } /* RSL hook for putchar-type functions */ static int magic_rsl_putchar(request_rec *r, char c) { char str[2]; /* high overhead for 1 char - just hope they don't do this much */ str[0] = c; str[1] = '\0'; return magic_rsl_add(r, apr_pstrdup(r->pool, str)); } /* allocate and copy a contiguous string from a result string list */ static char *rsl_strdup(request_rec *r, int start_frag, int start_pos, int len) { char *result; /* return value */ int cur_frag, /* current fragment number/counter */ cur_pos, /* current position within fragment */ res_pos; /* position in result string */ magic_rsl *frag; /* list-traversal pointer */ magic_req_rec *req_dat = (magic_req_rec *) ap_get_module_config(r->request_config, &mime_magic_module); /* allocate the result string */ result = (char *) apr_palloc(r->pool, len + 1); /* loop through and collect the string */ res_pos = 0; for (frag = req_dat->head, cur_frag = 0; frag->next; frag = frag->next, cur_frag++) { /* loop to the first fragment */ if (cur_frag < start_frag) continue; /* loop through and collect chars */ for (cur_pos = (cur_frag == start_frag) ? start_pos : 0; frag->str[cur_pos]; cur_pos++) { if (cur_frag >= start_frag && cur_pos >= start_pos && res_pos <= len) { result[res_pos++] = frag->str[cur_pos]; if (res_pos > len) { break; } } } } /* clean up and return */ result[res_pos] = 0; #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01508) MODNAME ": rsl_strdup() %d chars: %s", res_pos - 1, result); #endif return result; } /* states for the state-machine algorithm in magic_rsl_to_request() */ typedef enum { rsl_leading_space, rsl_type, rsl_subtype, rsl_separator, rsl_encoding } rsl_states; /* process the RSL and set the MIME info in the request record */ static int magic_rsl_to_request(request_rec *r) { int cur_frag, /* current fragment number/counter */ cur_pos, /* current position within fragment */ type_frag, /* content type starting point: fragment */ type_pos, /* content type starting point: position */ type_len, /* content type length */ encoding_frag, /* content encoding starting point: fragment */ encoding_pos, /* content encoding starting point: position */ encoding_len; /* content encoding length */ char *tmp; magic_rsl *frag; /* list-traversal pointer */ rsl_states state; magic_req_rec *req_dat = (magic_req_rec *) ap_get_module_config(r->request_config, &mime_magic_module); /* check if we have a result */ if (!req_dat || !req_dat->head) { /* empty - no match, we defer to other Apache modules */ return DECLINED; } /* start searching for the type and encoding */ state = rsl_leading_space; type_frag = type_pos = type_len = 0; encoding_frag = encoding_pos = encoding_len = 0; for (frag = req_dat->head, cur_frag = 0; frag && frag->next; frag = frag->next, cur_frag++) { /* loop through the characters in the fragment */ for (cur_pos = 0; frag->str[cur_pos]; cur_pos++) { if (apr_isspace(frag->str[cur_pos])) { /* process whitespace actions for each state */ if (state == rsl_leading_space) { /* eat whitespace in this state */ continue; } else if (state == rsl_type) { /* whitespace: type has no slash! */ return DECLINED; } else if (state == rsl_subtype) { /* whitespace: end of MIME type */ state++; continue; } else if (state == rsl_separator) { /* eat whitespace in this state */ continue; } else if (state == rsl_encoding) { /* whitespace: end of MIME encoding */ /* we're done */ frag = req_dat->tail; break; } else { /* should not be possible */ /* abandon malfunctioning module */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01509) MODNAME ": bad state %d (ws)", state); return DECLINED; } /* NOTREACHED */ } else if (state == rsl_type && frag->str[cur_pos] == '/') { /* copy the char and go to rsl_subtype state */ type_len++; state++; } else { /* process non-space actions for each state */ if (state == rsl_leading_space) { /* non-space: begin MIME type */ state++; type_frag = cur_frag; type_pos = cur_pos; type_len = 1; continue; } else if (state == rsl_type || state == rsl_subtype) { /* non-space: adds to type */ type_len++; continue; } else if (state == rsl_separator) { /* non-space: begin MIME encoding */ state++; encoding_frag = cur_frag; encoding_pos = cur_pos; encoding_len = 1; continue; } else if (state == rsl_encoding) { /* non-space: adds to encoding */ encoding_len++; continue; } else { /* should not be possible */ /* abandon malfunctioning module */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01510) MODNAME ": bad state %d (ns)", state); return DECLINED; } /* NOTREACHED */ } /* NOTREACHED */ } } /* if we ended prior to state rsl_subtype, we had incomplete info */ if (state != rsl_subtype && state != rsl_separator && state != rsl_encoding) { /* defer to other modules */ return DECLINED; } /* save the info in the request record */ tmp = rsl_strdup(r, type_frag, type_pos, type_len); /* XXX: this could be done at config time I'm sure... but I'm * confused by all this magic_rsl stuff. -djg */ ap_content_type_tolower(tmp); ap_set_content_type(r, tmp); if (state == rsl_encoding) { tmp = rsl_strdup(r, encoding_frag, encoding_pos, encoding_len); /* XXX: this could be done at config time I'm sure... but I'm * confused by all this magic_rsl stuff. -djg */ ap_str_tolower(tmp); r->content_encoding = tmp; } /* detect memory allocation or other errors */ if (!r->content_type || (state == rsl_encoding && !r->content_encoding)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01511) MODNAME ": unexpected state %d; could be caused by bad " "data in magic file", state); return HTTP_INTERNAL_SERVER_ERROR; } /* success! */ return OK; } /* * magic_process - process input file r Apache API request record * (formerly called "process" in file command, prefix added for clarity) Opens * the file and reads a fixed-size buffer to begin processing the contents. */ static int magic_process(request_rec *r) { apr_file_t *fd = NULL; unsigned char buf[HOWMANY + 1]; /* one extra for terminating '\0' */ apr_size_t nbytes = 0; /* number of bytes read from a datafile */ int result; /* * first try judging the file based on its filesystem status */ switch ((result = fsmagic(r, r->filename))) { case DONE: magic_rsl_putchar(r, '\n'); return OK; case OK: break; default: /* fatal error, bail out */ return result; } if (apr_file_open(&fd, r->filename, APR_READ, APR_OS_DEFAULT, r->pool) != APR_SUCCESS) { /* We can't open it, but we were able to stat it. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01512) MODNAME ": can't read `%s'", r->filename); /* let some other handler decide what the problem is */ return DECLINED; } /* * try looking at the first HOWMANY bytes */ nbytes = sizeof(buf) - 1; if ((result = apr_file_read(fd, (char *) buf, &nbytes)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, result, r, APLOGNO(01513) MODNAME ": read failed: %s", r->filename); return HTTP_INTERNAL_SERVER_ERROR; } if (nbytes == 0) { return DECLINED; } else { buf[nbytes++] = '\0'; /* null-terminate it */ result = tryit(r, buf, nbytes, 1); if (result != OK) { return result; } } (void) apr_file_close(fd); (void) magic_rsl_putchar(r, '\n'); return OK; } static int tryit(request_rec *r, unsigned char *buf, apr_size_t nb, int checkzmagic) { /* * Try compression stuff */ if (checkzmagic == 1) { if (zmagic(r, buf, nb) == 1) return OK; } /* * try tests in /etc/magic (or surrogate magic file) */ if (softmagic(r, buf, nb) == 1) return OK; /* * try known keywords, check for ascii-ness too. */ if (ascmagic(r, buf, nb) == 1) return OK; /* * abandon hope, all ye who remain here */ return DECLINED; } #define EATAB {while (apr_isspace(*l)) ++l;} /* * apprentice - load configuration from the magic file r * API request record */ static int apprentice(server_rec *s, apr_pool_t *p) { apr_file_t *f = NULL; apr_status_t result; char line[BUFSIZ + 1]; int errs = 0; int lineno; #if MIME_MAGIC_DEBUG int rule = 0; struct magic *m, *prevm; #endif magic_server_config_rec *conf = (magic_server_config_rec *) ap_get_module_config(s->module_config, &mime_magic_module); const char *fname = ap_server_root_relative(p, conf->magicfile); if (!fname) { ap_log_error(APLOG_MARK, APLOG_ERR, APR_EBADPATH, s, APLOGNO(01514) MODNAME ": Invalid magic file path %s", conf->magicfile); return -1; } if ((result = apr_file_open(&f, fname, APR_READ | APR_BUFFERED, APR_OS_DEFAULT, p)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, result, s, APLOGNO(01515) MODNAME ": can't read magic file %s", fname); return -1; } /* set up the magic list (empty) */ conf->magic = conf->last = NULL; /* parse it */ for (lineno = 1; apr_file_gets(line, BUFSIZ, f) == APR_SUCCESS; lineno++) { int ws_offset; char *last = line + strlen(line) - 1; /* guaranteed that len >= 1 since an * "empty" line contains a '\n' */ /* delete newline and any other trailing whitespace */ while (last >= line && apr_isspace(*last)) { *last = '\0'; --last; } /* skip leading whitespace */ ws_offset = 0; while (line[ws_offset] && apr_isspace(line[ws_offset])) { ws_offset++; } /* skip blank lines */ if (line[ws_offset] == 0) { continue; } /* comment, do not parse */ if (line[ws_offset] == '#') continue; #if MIME_MAGIC_DEBUG /* if we get here, we're going to use it so count it */ rule++; #endif /* parse it */ if (parse(s, p, line + ws_offset, lineno) != 0) ++errs; } (void) apr_file_close(f); #if MIME_MAGIC_DEBUG ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01516) MODNAME ": apprentice conf=%x file=%s m=%s m->next=%s last=%s", conf, conf->magicfile ? conf->magicfile : "NULL", conf->magic ? "set" : "NULL", (conf->magic && conf->magic->next) ? "set" : "NULL", conf->last ? "set" : "NULL"); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01517) MODNAME ": apprentice read %d lines, %d rules, %d errors", lineno, rule, errs); #endif #if MIME_MAGIC_DEBUG prevm = 0; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01518) MODNAME ": apprentice test"); for (m = conf->magic; m; m = m->next) { if (apr_isprint((((unsigned long) m) >> 24) & 255) && apr_isprint((((unsigned long) m) >> 16) & 255) && apr_isprint((((unsigned long) m) >> 8) & 255) && apr_isprint(((unsigned long) m) & 255)) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01519) MODNAME ": apprentice: POINTER CLOBBERED! " "m=\"%c%c%c%c\" line=%d", (((unsigned long) m) >> 24) & 255, (((unsigned long) m) >> 16) & 255, (((unsigned long) m) >> 8) & 255, ((unsigned long) m) & 255, prevm ? prevm->lineno : -1); break; } prevm = m; } #endif return (errs ? -1 : 0); } /* * extend the sign bit if the comparison is to be signed */ static unsigned long signextend(server_rec *s, struct magic *m, unsigned long v) { if (!(m->flag & UNSIGNED)) switch (m->type) { /* * Do not remove the casts below. They are vital. When later * compared with the data, the sign extension must have happened. */ case BYTE: v = (char) v; break; case SHORT: case BESHORT: case LESHORT: v = (short) v; break; case DATE: case BEDATE: case LEDATE: case LONG: case BELONG: case LELONG: v = (long) v; break; case STRING: break; default: ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01520) MODNAME ": can't happen: m->type=%d", m->type); return -1; } return v; } /* * parse one line from magic file, put into magic[index++] if valid */ static int parse(server_rec *serv, apr_pool_t *p, char *l, int lineno) { struct magic *m; char *t, *s; magic_server_config_rec *conf = (magic_server_config_rec *) ap_get_module_config(serv->module_config, &mime_magic_module); /* allocate magic structure entry */ m = (struct magic *) apr_pcalloc(p, sizeof(struct magic)); /* append to linked list */ m->next = NULL; if (!conf->magic || !conf->last) { conf->magic = conf->last = m; } else { conf->last->next = m; conf->last = m; } /* set values in magic structure */ m->flag = 0; m->cont_level = 0; m->lineno = lineno; while (*l == '>') { ++l; /* step over */ m->cont_level++; } if (m->cont_level != 0 && *l == '(') { ++l; /* step over */ m->flag |= INDIR; } /* get offset, then skip over it */ m->offset = (int) strtol(l, &t, 0); if (l == t) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, serv, APLOGNO(01521) MODNAME ": offset %s invalid", l); } l = t; if (m->flag & INDIR) { m->in.type = LONG; m->in.offset = 0; /* * read [.lbs][+-]nnnnn) */ if (*l == '.') { switch (*++l) { case 'l': m->in.type = LONG; break; case 's': m->in.type = SHORT; break; case 'b': m->in.type = BYTE; break; default: ap_log_error(APLOG_MARK, APLOG_ERR, 0, serv, APLOGNO(01522) MODNAME ": indirect offset type %c invalid", *l); break; } l++; } s = l; if (*l == '+' || *l == '-') l++; if (apr_isdigit((unsigned char) *l)) { m->in.offset = strtol(l, &t, 0); if (*s == '-') m->in.offset = -m->in.offset; } else t = l; if (*t++ != ')') { ap_log_error(APLOG_MARK, APLOG_ERR, 0, serv, APLOGNO(01523) MODNAME ": missing ')' in indirect offset"); } l = t; } while (apr_isdigit((unsigned char) *l)) ++l; EATAB; #define NBYTE 4 #define NSHORT 5 #define NLONG 4 #define NSTRING 6 #define NDATE 4 #define NBESHORT 7 #define NBELONG 6 #define NBEDATE 6 #define NLESHORT 7 #define NLELONG 6 #define NLEDATE 6 if (*l == 'u') { ++l; m->flag |= UNSIGNED; } /* get type, skip it */ if (strncmp(l, "byte", NBYTE) == 0) { m->type = BYTE; l += NBYTE; } else if (strncmp(l, "short", NSHORT) == 0) { m->type = SHORT; l += NSHORT; } else if (strncmp(l, "long", NLONG) == 0) { m->type = LONG; l += NLONG; } else if (strncmp(l, "string", NSTRING) == 0) { m->type = STRING; l += NSTRING; } else if (strncmp(l, "date", NDATE) == 0) { m->type = DATE; l += NDATE; } else if (strncmp(l, "beshort", NBESHORT) == 0) { m->type = BESHORT; l += NBESHORT; } else if (strncmp(l, "belong", NBELONG) == 0) { m->type = BELONG; l += NBELONG; } else if (strncmp(l, "bedate", NBEDATE) == 0) { m->type = BEDATE; l += NBEDATE; } else if (strncmp(l, "leshort", NLESHORT) == 0) { m->type = LESHORT; l += NLESHORT; } else if (strncmp(l, "lelong", NLELONG) == 0) { m->type = LELONG; l += NLELONG; } else if (strncmp(l, "ledate", NLEDATE) == 0) { m->type = LEDATE; l += NLEDATE; } else { ap_log_error(APLOG_MARK, APLOG_ERR, 0, serv, APLOGNO(01524) MODNAME ": type %s invalid", l); return -1; } /* New-style anding: "0 byte&0x80 =0x80 dynamically linked" */ if (*l == '&') { ++l; m->mask = signextend(serv, m, strtol(l, &l, 0)); } else m->mask = ~0L; EATAB; switch (*l) { case '>': case '<': /* Old-style anding: "0 byte &0x80 dynamically linked" */ case '&': case '^': case '=': m->reln = *l; ++l; break; case '!': if (m->type != STRING) { m->reln = *l; ++l; break; } /* FALL THROUGH */ default: if (*l == 'x' && apr_isspace(l[1])) { m->reln = *l; ++l; goto GetDesc; /* Bill The Cat */ } m->reln = '='; break; } EATAB; if (getvalue(serv, m, &l)) return -1; /* * now get last part - the description */ GetDesc: EATAB; if (l[0] == '\b') { ++l; m->nospflag = 1; } else if ((l[0] == '\\') && (l[1] == 'b')) { ++l; ++l; m->nospflag = 1; } else m->nospflag = 0; apr_cpystrn(m->desc, l, sizeof(m->desc)); #if MIME_MAGIC_DEBUG ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, serv, APLOGNO(01525) MODNAME ": parse line=%d m=%x next=%x cont=%d desc=%s", lineno, m, m->next, m->cont_level, m->desc); #endif /* MIME_MAGIC_DEBUG */ return 0; } /* * Read a numeric value from a pointer, into the value union of a magic * pointer, according to the magic type. Update the string pointer to point * just after the number read. Return 0 for success, non-zero for failure. */ static int getvalue(server_rec *s, struct magic *m, char **p) { int slen; if (m->type == STRING) { *p = getstr(s, *p, m->value.s, sizeof(m->value.s), &slen); m->vallen = slen; } else if (m->reln != 'x') m->value.l = signextend(s, m, strtol(*p, p, 0)); return 0; } /* * Convert a string containing C character escapes. Stop at an unescaped * space or tab. Copy the converted version to "p", returning its length in * *slen. Return updated scan pointer as function result. */ static char *getstr(server_rec *serv, register char *s, register char *p, int plen, int *slen) { char *origs = s, *origp = p; char *pmax = p + plen - 1; register int c; register int val; while ((c = *s++) != '\0') { if (apr_isspace(c)) break; if (p >= pmax) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, serv, APLOGNO(01526) MODNAME ": string too long: %s", origs); break; } if (c == '\\') { switch (c = *s++) { case '\0': goto out; default: *p++ = (char) c; break; case 'n': *p++ = '\n'; break; case 'r': *p++ = '\r'; break; case 'b': *p++ = '\b'; break; case 't': *p++ = '\t'; break; case 'f': *p++ = '\f'; break; case 'v': *p++ = '\v'; break; /* \ and up to 3 octal digits */ case '0': case '1': case '2': case '3': case '4': case '5': case '6': case '7': val = c - '0'; c = *s++; /* try for 2 */ if (c >= '0' && c <= '7') { val = (val << 3) | (c - '0'); c = *s++; /* try for 3 */ if (c >= '0' && c <= '7') val = (val << 3) | (c - '0'); else --s; } else --s; *p++ = (char) val; break; /* \x and up to 3 hex digits */ case 'x': val = 'x'; /* Default if no digits */ c = hextoint(*s++); /* Get next char */ if (c >= 0) { val = c; c = hextoint(*s++); if (c >= 0) { val = (val << 4) + c; c = hextoint(*s++); if (c >= 0) { val = (val << 4) + c; } else --s; } else --s; } else --s; *p++ = (char) val; break; } } else *p++ = (char) c; } out: *p = '\0'; *slen = p - origp; return s; } /* Single hex char to int; -1 if not a hex char. */ static int hextoint(int c) { if (apr_isdigit(c)) return c - '0'; if ((c >= 'a') && (c <= 'f')) return c + 10 - 'a'; if ((c >= 'A') && (c <= 'F')) return c + 10 - 'A'; return -1; } /* * return DONE to indicate it's been handled * return OK to indicate it's a regular file still needing handling * other returns indicate a failure of some sort */ static int fsmagic(request_rec *r, const char *fn) { switch (r->finfo.filetype) { case APR_DIR: magic_rsl_puts(r, DIR_MAGIC_TYPE); return DONE; case APR_CHR: /* * (void) magic_rsl_printf(r,"character special (%d/%d)", * major(sb->st_rdev), minor(sb->st_rdev)); */ (void) magic_rsl_puts(r, MIME_BINARY_UNKNOWN); return DONE; case APR_BLK: /* * (void) magic_rsl_printf(r,"block special (%d/%d)", * major(sb->st_rdev), minor(sb->st_rdev)); */ (void) magic_rsl_puts(r, MIME_BINARY_UNKNOWN); return DONE; /* TODO add code to handle V7 MUX and Blit MUX files */ case APR_PIPE: /* * magic_rsl_puts(r,"fifo (named pipe)"); */ (void) magic_rsl_puts(r, MIME_BINARY_UNKNOWN); return DONE; case APR_LNK: /* We used stat(), the only possible reason for this is that the * symlink is broken. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01527) MODNAME ": broken symlink (%s)", fn); return HTTP_INTERNAL_SERVER_ERROR; case APR_SOCK: magic_rsl_puts(r, MIME_BINARY_UNKNOWN); return DONE; case APR_REG: break; default: ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01528) MODNAME ": invalid file type %d.", r->finfo.filetype); return HTTP_INTERNAL_SERVER_ERROR; } /* * regular file, check next possibility */ if (r->finfo.size == 0) { magic_rsl_puts(r, MIME_TEXT_UNKNOWN); return DONE; } return OK; } /* * softmagic - lookup one file in database (already read from /etc/magic by * apprentice.c). Passed the name and FILE * of one file to be typed. */ /* ARGSUSED1 *//* nbytes passed for regularity, maybe need later */ static int softmagic(request_rec *r, unsigned char *buf, apr_size_t nbytes) { if (match(r, buf, nbytes)) return 1; return 0; } /* * Go through the whole list, stopping if you find a match. Process all the * continuations of that match before returning. * * We support multi-level continuations: * * At any time when processing a successful top-level match, there is a current * continuation level; it represents the level of the last successfully * matched continuation. * * Continuations above that level are skipped as, if we see one, it means that * the continuation that controls them - i.e, the lower-level continuation * preceding them - failed to match. * * Continuations below that level are processed as, if we see one, it means * we've finished processing or skipping higher-level continuations under the * control of a successful or unsuccessful lower-level continuation, and are * now seeing the next lower-level continuation and should process it. The * current continuation level reverts to the level of the one we're seeing. * * Continuations at the current level are processed as, if we see one, there's * no lower-level continuation that may have failed. * * If a continuation matches, we bump the current continuation level so that * higher-level continuations are processed. */ static int match(request_rec *r, unsigned char *s, apr_size_t nbytes) { #if MIME_MAGIC_DEBUG int rule_counter = 0; #endif int cont_level = 0; int need_separator = 0; union VALUETYPE p; magic_server_config_rec *conf = (magic_server_config_rec *) ap_get_module_config(r->server->module_config, &mime_magic_module); struct magic *m; #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01529) MODNAME ": match conf=%x file=%s m=%s m->next=%s last=%s", conf, conf->magicfile ? conf->magicfile : "NULL", conf->magic ? "set" : "NULL", (conf->magic && conf->magic->next) ? "set" : "NULL", conf->last ? "set" : "NULL"); #endif #if MIME_MAGIC_DEBUG for (m = conf->magic; m; m = m->next) { if (apr_isprint((((unsigned long) m) >> 24) & 255) && apr_isprint((((unsigned long) m) >> 16) & 255) && apr_isprint((((unsigned long) m) >> 8) & 255) && apr_isprint(((unsigned long) m) & 255)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01530) MODNAME ": match: POINTER CLOBBERED! " "m=\"%c%c%c%c\"", (((unsigned long) m) >> 24) & 255, (((unsigned long) m) >> 16) & 255, (((unsigned long) m) >> 8) & 255, ((unsigned long) m) & 255); break; } } #endif for (m = conf->magic; m; m = m->next) { #if MIME_MAGIC_DEBUG rule_counter++; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01531) MODNAME ": line=%d desc=%s", m->lineno, m->desc); #endif /* check if main entry matches */ if (!mget(r, &p, s, m, nbytes) || !mcheck(r, &p, m)) { struct magic *m_cont; /* * main entry didn't match, flush its continuations */ if (!m->next || (m->next->cont_level == 0)) { continue; } m_cont = m->next; while (m_cont && (m_cont->cont_level != 0)) { #if MIME_MAGIC_DEBUG rule_counter++; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01532) MODNAME ": line=%d mc=%x mc->next=%x cont=%d desc=%s", m_cont->lineno, m_cont, m_cont->next, m_cont->cont_level, m_cont->desc); #endif /* * this trick allows us to keep *m in sync when the continue * advances the pointer */ m = m_cont; m_cont = m_cont->next; } continue; } /* if we get here, the main entry rule was a match */ /* this will be the last run through the loop */ #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01533) MODNAME ": rule matched, line=%d type=%d %s", m->lineno, m->type, (m->type == STRING) ? m->value.s : ""); #endif /* print the match */ mprint(r, &p, m); /* * If we printed something, we'll need to print a blank before we * print something else. */ if (m->desc[0]) need_separator = 1; /* and any continuations that match */ cont_level++; /* * while (m && m->next && m->next->cont_level != 0 && ( m = m->next * )) */ m = m->next; while (m && (m->cont_level != 0)) { #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01534) MODNAME ": match line=%d cont=%d type=%d %s", m->lineno, m->cont_level, m->type, (m->type == STRING) ? m->value.s : ""); #endif if (cont_level >= m->cont_level) { if (cont_level > m->cont_level) { /* * We're at the end of the level "cont_level" * continuations. */ cont_level = m->cont_level; } if (mget(r, &p, s, m, nbytes) && mcheck(r, &p, m)) { /* * This continuation matched. Print its message, with a * blank before it if the previous item printed and this * item isn't empty. */ /* space if previous printed */ if (need_separator && (m->nospflag == 0) && (m->desc[0] != '\0') ) { (void) magic_rsl_putchar(r, ' '); need_separator = 0; } mprint(r, &p, m); if (m->desc[0]) need_separator = 1; /* * If we see any continuations at a higher level, process * them. */ cont_level++; } } /* move to next continuation record */ m = m->next; } #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01535) MODNAME ": matched after %d rules", rule_counter); #endif return 1; /* all through */ } #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01536) MODNAME ": failed after %d rules", rule_counter); #endif return 0; /* no match at all */ } static void mprint(request_rec *r, union VALUETYPE *p, struct magic *m) { char *pp; unsigned long v; char time_str[APR_CTIME_LEN]; switch (m->type) { case BYTE: v = p->b; break; case SHORT: case BESHORT: case LESHORT: v = p->h; break; case LONG: case BELONG: case LELONG: v = p->l; break; case STRING: if (m->reln == '=') { (void) magic_rsl_printf(r, m->desc, m->value.s); } else { (void) magic_rsl_printf(r, m->desc, p->s); } return; case DATE: case BEDATE: case LEDATE: apr_ctime(time_str, apr_time_from_sec(*(time_t *)&p->l)); pp = time_str; (void) magic_rsl_printf(r, m->desc, pp); return; default: ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01537) MODNAME ": invalid m->type (%d) in mprint().", m->type); return; } v = signextend(r->server, m, v) & m->mask; (void) magic_rsl_printf(r, m->desc, (unsigned long) v); } /* * Convert the byte order of the data we are looking at */ static int mconvert(request_rec *r, union VALUETYPE *p, struct magic *m) { char *rt; switch (m->type) { case BYTE: case SHORT: case LONG: case DATE: return 1; case STRING: /* Null terminate and eat the return */ p->s[sizeof(p->s) - 1] = '\0'; if ((rt = strchr(p->s, '\n')) != NULL) *rt = '\0'; return 1; case BESHORT: p->h = (short) ((p->hs[0] << 8) | (p->hs[1])); return 1; case BELONG: case BEDATE: p->l = (long) ((p->hl[0] << 24) | (p->hl[1] << 16) | (p->hl[2] << 8) | (p->hl[3])); return 1; case LESHORT: p->h = (short) ((p->hs[1] << 8) | (p->hs[0])); return 1; case LELONG: case LEDATE: p->l = (long) ((p->hl[3] << 24) | (p->hl[2] << 16) | (p->hl[1] << 8) | (p->hl[0])); return 1; default: ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01538) MODNAME ": invalid type %d in mconvert().", m->type); return 0; } } static int mget(request_rec *r, union VALUETYPE *p, unsigned char *s, struct magic *m, apr_size_t nbytes) { long offset = m->offset; if (offset + sizeof(union VALUETYPE) > nbytes) return 0; memcpy(p, s + offset, sizeof(union VALUETYPE)); if (!mconvert(r, p, m)) return 0; if (m->flag & INDIR) { switch (m->in.type) { case BYTE: offset = p->b + m->in.offset; break; case SHORT: offset = p->h + m->in.offset; break; case LONG: offset = p->l + m->in.offset; break; } if (offset + sizeof(union VALUETYPE) > nbytes) return 0; memcpy(p, s + offset, sizeof(union VALUETYPE)); if (!mconvert(r, p, m)) return 0; } return 1; } static int mcheck(request_rec *r, union VALUETYPE *p, struct magic *m) { register unsigned long l = m->value.l; register unsigned long v; int matched; if ((m->value.s[0] == 'x') && (m->value.s[1] == '\0')) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01539) MODNAME ": BOINK"); return 1; } switch (m->type) { case BYTE: v = p->b; break; case SHORT: case BESHORT: case LESHORT: v = p->h; break; case LONG: case BELONG: case LELONG: case DATE: case BEDATE: case LEDATE: v = p->l; break; case STRING: l = 0; /* * What we want here is: v = strncmp(m->value.s, p->s, m->vallen); * but ignoring any nulls. bcmp doesn't give -/+/0 and isn't * universally available anyway. */ v = 0; { register unsigned char *a = (unsigned char *) m->value.s; register unsigned char *b = (unsigned char *) p->s; register int len = m->vallen; while (--len >= 0) if ((v = *b++ - *a++) != 0) break; } break; default: /* bogosity, pretend that it just wasn't a match */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01540) MODNAME ": invalid type %d in mcheck().", m->type); return 0; } v = signextend(r->server, m, v) & m->mask; switch (m->reln) { case 'x': #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01541) "%lu == *any* = 1", v); #endif matched = 1; break; case '!': matched = v != l; #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01542) "%lu != %lu = %d", v, l, matched); #endif break; case '=': matched = v == l; #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01543) "%lu == %lu = %d", v, l, matched); #endif break; case '>': if (m->flag & UNSIGNED) { matched = v > l; #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01544) "%lu > %lu = %d", v, l, matched); #endif } else { matched = (long) v > (long) l; #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01545) "%ld > %ld = %d", v, l, matched); #endif } break; case '<': if (m->flag & UNSIGNED) { matched = v < l; #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01546) "%lu < %lu = %d", v, l, matched); #endif } else { matched = (long) v < (long) l; #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01547) "%ld < %ld = %d", v, l, matched); #endif } break; case '&': matched = (v & l) == l; #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01548) "((%lx & %lx) == %lx) = %d", v, l, l, matched); #endif break; case '^': matched = (v & l) != l; #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01549) "((%lx & %lx) != %lx) = %d", v, l, l, matched); #endif break; default: /* bogosity, pretend it didn't match */ matched = 0; ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01550) MODNAME ": mcheck: can't happen: invalid relation %d.", m->reln); break; } return matched; } /* an optimization over plain strcmp() */ #define STREQ(a, b) (*(a) == *(b) && strcmp((a), (b)) == 0) static int ascmagic(request_rec *r, unsigned char *buf, apr_size_t nbytes) { int has_escapes = 0; unsigned char *s; char nbuf[SMALL_HOWMANY + 1]; /* one extra for terminating '\0' */ char *token; const struct names *p; int small_nbytes; char *strtok_state; /* these are easy, do them first */ /* * for troff, look for . + letter + letter or .\"; this must be done to * disambiguate tar archives' ./file and other trash from real troff * input. */ if (*buf == '.') { unsigned char *tp = buf + 1; while (apr_isspace(*tp)) ++tp; /* skip leading whitespace */ if ((apr_isalnum(*tp) || *tp == '\\') && (apr_isalnum(*(tp + 1)) || *tp == '"')) { magic_rsl_puts(r, "application/x-troff"); return 1; } } if ((*buf == 'c' || *buf == 'C') && apr_isspace(*(buf + 1))) { /* Fortran */ magic_rsl_puts(r, "text/plain"); return 1; } /* look for tokens from names.h - this is expensive!, so we'll limit * ourselves to only SMALL_HOWMANY bytes */ small_nbytes = (nbytes > SMALL_HOWMANY) ? SMALL_HOWMANY : nbytes; /* make a copy of the buffer here because apr_strtok() will destroy it */ s = (unsigned char *) memcpy(nbuf, buf, small_nbytes); s[small_nbytes] = '\0'; has_escapes = (memchr(s, '\033', small_nbytes) != NULL); while ((token = apr_strtok((char *) s, " \t\n\r\f", &strtok_state)) != NULL) { s = NULL; /* make apr_strtok() keep on tokin' */ for (p = names; p < names + NNAMES; p++) { if (STREQ(p->name, token)) { magic_rsl_puts(r, types[p->type]); if (has_escapes) magic_rsl_puts(r, " (with escape sequences)"); return 1; } } } switch (is_tar(buf, nbytes)) { case 1: /* V7 tar archive */ magic_rsl_puts(r, "application/x-tar"); return 1; case 2: /* POSIX tar archive */ magic_rsl_puts(r, "application/x-tar"); return 1; } /* all else fails, but it is ascii... */ return 0; } /* * compress routines: zmagic() - returns 0 if not recognized, uncompresses * and prints information if recognized uncompress(s, method, old, n, newch) * - uncompress old into new, using method, return sizeof new */ static struct { char *magic; apr_size_t maglen; char *argv[3]; int silent; char *encoding; /* MUST be lowercase */ } compr[] = { /* we use gzip here rather than uncompress because we have to pass * it a full filename -- and uncompress only considers filenames * ending with .Z */ { "\037\235", 2, { "gzip", "-dcq", NULL }, 0, "x-compress" }, { "\037\213", 2, { "gzip", "-dcq", NULL }, 1, "x-gzip" }, /* * XXX pcat does not work, cause I don't know how to make it read stdin, * so we use gzip */ { "\037\036", 2, { "gzip", "-dcq", NULL }, 0, "x-gzip" }, }; static int ncompr = sizeof(compr) / sizeof(compr[0]); static int zmagic(request_rec *r, unsigned char *buf, apr_size_t nbytes) { unsigned char *newbuf; int newsize; int i; for (i = 0; i < ncompr; i++) { if (nbytes < compr[i].maglen) continue; if (memcmp(buf, compr[i].magic, compr[i].maglen) == 0) break; } if (i == ncompr) return 0; if ((newsize = uncompress(r, i, &newbuf, HOWMANY)) > 0) { /* set encoding type in the request record */ r->content_encoding = compr[i].encoding; newbuf[newsize-1] = '\0'; /* null-terminate uncompressed data */ /* Try to detect the content type of the uncompressed data */ if (tryit(r, newbuf, newsize, 0) != OK) { return 0; } } return 1; } struct uncompress_parms { request_rec *r; int method; }; static int create_uncompress_child(struct uncompress_parms *parm, apr_pool_t *cntxt, apr_file_t **pipe_in) { int rc = 1; const char *new_argv[4]; request_rec *r = parm->r; apr_pool_t *child_context = cntxt; apr_procattr_t *procattr; apr_proc_t *procnew; /* XXX missing 1.3 logic: * * what happens when !compr[parm->method].silent? * Should we create the err pipe, read it, and copy to the log? */ if ((apr_procattr_create(&procattr, child_context) != APR_SUCCESS) || (apr_procattr_io_set(procattr, APR_FULL_BLOCK, APR_FULL_BLOCK, APR_NO_PIPE) != APR_SUCCESS) || (apr_procattr_dir_set(procattr, ap_make_dirstr_parent(r->pool, r->filename)) != APR_SUCCESS) || (apr_procattr_cmdtype_set(procattr, APR_PROGRAM_PATH) != APR_SUCCESS)) { /* Something bad happened, tell the world. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, APR_ENOPROC, r, APLOGNO(01551) "couldn't setup child process: %s", r->filename); } else { new_argv[0] = compr[parm->method].argv[0]; new_argv[1] = compr[parm->method].argv[1]; new_argv[2] = r->filename; new_argv[3] = NULL; procnew = apr_pcalloc(child_context, sizeof(*procnew)); rc = apr_proc_create(procnew, compr[parm->method].argv[0], new_argv, NULL, procattr, child_context); if (rc != APR_SUCCESS) { /* Bad things happened. Everyone should have cleaned up. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, APR_ENOPROC, r, APLOGNO(01552) MODNAME ": could not execute `%s'.", compr[parm->method].argv[0]); } else { apr_pool_note_subprocess(child_context, procnew, APR_KILL_AFTER_TIMEOUT); *pipe_in = procnew->out; } } return (rc); } static int uncompress(request_rec *r, int method, unsigned char **newch, apr_size_t n) { struct uncompress_parms parm; apr_file_t *pipe_out = NULL; apr_pool_t *sub_context; apr_status_t rv; parm.r = r; parm.method = method; /* We make a sub_pool so that we can collect our child early, otherwise * there are cases (i.e. generating directory indicies with mod_autoindex) * where we would end up with LOTS of zombies. */ if (apr_pool_create(&sub_context, r->pool) != APR_SUCCESS) return -1; if ((rv = create_uncompress_child(&parm, sub_context, &pipe_out)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01553) MODNAME ": couldn't spawn uncompress process: %s", r->uri); return -1; } *newch = (unsigned char *) apr_palloc(r->pool, n); rv = apr_file_read(pipe_out, *newch, &n); if (n == 0) { apr_pool_destroy(sub_context); ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01554) MODNAME ": read failed from uncompress of %s", r->filename); return -1; } apr_pool_destroy(sub_context); return n; } /* * is_tar() -- figure out whether file is a tar archive. * * Stolen (by author of file utility) from the public domain tar program: Public * Domain version written 26 Aug 1985 John Gilmore (ihnp4!hoptoad!gnu). * * @(#)list.c 1.18 9/23/86 Public Domain - gnu $Id: mod_mime_magic.c,v 1.7 * 1997/06/24 00:41:02 ikluft Exp ikluft $ * * Comments changed and some code/comments reformatted for file command by Ian * Darwin. */ #define isodigit(c) (((unsigned char)(c) >= '0') && ((unsigned char)(c) <= '7')) /* * Return 0 if the checksum is bad (i.e., probably not a tar archive), 1 for * old UNIX tar file, 2 for Unix Std (POSIX) tar file. */ static int is_tar(unsigned char *buf, apr_size_t nbytes) { register union record *header = (union record *) buf; register int i; register long sum, recsum; register char *p; if (nbytes < sizeof(union record)) return 0; recsum = from_oct(8, header->header.chksum); sum = 0; p = header->charptr; for (i = sizeof(union record); --i >= 0;) { /* * We can't use unsigned char here because of old compilers, e.g. V7. */ sum += 0xFF & *p++; } /* Adjust checksum to count the "chksum" field as blanks. */ for (i = sizeof(header->header.chksum); --i >= 0;) sum -= 0xFF & header->header.chksum[i]; sum += ' ' * sizeof header->header.chksum; if (sum != recsum) return 0; /* Not a tar archive */ if (0 == strcmp(header->header.magic, TMAGIC)) return 2; /* Unix Standard tar archive */ return 1; /* Old fashioned tar archive */ } /* * Quick and dirty octal conversion. * * Result is -1 if the field is invalid (all blank, or nonoctal). */ static long from_oct(int digs, char *where) { register long value; while (apr_isspace(*where)) { /* Skip spaces */ where++; if (--digs <= 0) return -1; /* All blank field */ } value = 0; while (digs > 0 && isodigit(*where)) { /* Scan til nonoctal */ value = (value << 3) | (*where++ - '0'); --digs; } if (digs > 0 && *where && !apr_isspace(*where)) return -1; /* Ended on non-space/nul */ return value; } /* * Check for file-revision suffix * * This is for an obscure document control system used on an intranet. * The web representation of each file's revision has an @1, @2, etc * appended with the revision number. This needs to be stripped off to * find the file suffix, which can be recognized by sending the name back * through a sub-request. The base file name (without the @num suffix) * must exist because its type will be used as the result. */ static int revision_suffix(request_rec *r) { int suffix_pos, result; char *sub_filename; request_rec *sub; #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01555) MODNAME ": revision_suffix checking %s", r->filename); #endif /* MIME_MAGIC_DEBUG */ /* check for recognized revision suffix */ suffix_pos = strlen(r->filename) - 1; if (!apr_isdigit(r->filename[suffix_pos])) { return 0; } while (suffix_pos >= 0 && apr_isdigit(r->filename[suffix_pos])) suffix_pos--; if (suffix_pos < 0 || r->filename[suffix_pos] != '@') { return 0; } /* perform sub-request for the file name without the suffix */ result = 0; sub_filename = apr_pstrndup(r->pool, r->filename, suffix_pos); #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01556) MODNAME ": subrequest lookup for %s", sub_filename); #endif /* MIME_MAGIC_DEBUG */ sub = ap_sub_req_lookup_file(sub_filename, r, NULL); /* extract content type/encoding/language from sub-request */ if (sub->content_type) { ap_set_content_type(r, apr_pstrdup(r->pool, sub->content_type)); #if MIME_MAGIC_DEBUG ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01557) MODNAME ": subrequest %s got %s", sub_filename, r->content_type); #endif /* MIME_MAGIC_DEBUG */ if (sub->content_encoding) r->content_encoding = apr_pstrdup(r->pool, sub->content_encoding); if (sub->content_languages) { int n; r->content_languages = apr_array_copy(r->pool, sub->content_languages); for (n = 0; n < r->content_languages->nelts; ++n) { char **lang = ((char **)r->content_languages->elts) + n; *lang = apr_pstrdup(r->pool, *lang); } } result = 1; } /* clean up */ ap_destroy_sub_req(sub); return result; } /* * initialize the module */ static int magic_init(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *main_server) { int result; magic_server_config_rec *conf; magic_server_config_rec *main_conf; server_rec *s; #if MIME_MAGIC_DEBUG struct magic *m, *prevm; #endif /* MIME_MAGIC_DEBUG */ main_conf = ap_get_module_config(main_server->module_config, &mime_magic_module); for (s = main_server; s; s = s->next) { conf = ap_get_module_config(s->module_config, &mime_magic_module); if (conf->magicfile == NULL && s != main_server) { /* inherits from the parent */ *conf = *main_conf; } else if (conf->magicfile) { result = apprentice(s, p); if (result == -1) return OK; #if MIME_MAGIC_DEBUG prevm = 0; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01558) MODNAME ": magic_init 1 test"); for (m = conf->magic; m; m = m->next) { if (apr_isprint((((unsigned long) m) >> 24) & 255) && apr_isprint((((unsigned long) m) >> 16) & 255) && apr_isprint((((unsigned long) m) >> 8) & 255) && apr_isprint(((unsigned long) m) & 255)) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01559) MODNAME ": magic_init 1: POINTER CLOBBERED! " "m=\"%c%c%c%c\" line=%d", (((unsigned long) m) >> 24) & 255, (((unsigned long) m) >> 16) & 255, (((unsigned long) m) >> 8) & 255, ((unsigned long) m) & 255, prevm ? prevm->lineno : -1); break; } prevm = m; } #endif } } return OK; } /* * Find the Content-Type from any resource this module has available */ static int magic_find_ct(request_rec *r) { int result; magic_server_config_rec *conf; /* the file has to exist */ if (r->finfo.filetype == APR_NOFILE || !r->filename) { return DECLINED; } /* was someone else already here? */ if (r->content_type) { return DECLINED; } conf = ap_get_module_config(r->server->module_config, &mime_magic_module); if (!conf || !conf->magic) { return DECLINED; } /* initialize per-request info */ if (!magic_set_config(r)) { return HTTP_INTERNAL_SERVER_ERROR; } /* try excluding file-revision suffixes */ if (revision_suffix(r) != 1) { /* process it based on the file contents */ if ((result = magic_process(r)) != OK) { return result; } } /* if we have any results, put them in the request structure */ return magic_rsl_to_request(r); } static void register_hooks(apr_pool_t *p) { static const char * const aszPre[]={ "mod_mime.c", NULL }; /* mod_mime_magic should be run after mod_mime, if at all. */ ap_hook_type_checker(magic_find_ct, aszPre, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(magic_init, NULL, NULL, APR_HOOK_FIRST); } /* * Apache API module interface */ AP_DECLARE_MODULE(mime_magic) = { STANDARD20_MODULE_STUFF, NULL, /* dir config creator */ NULL, /* dir merger --- default is to override */ create_magic_server_config, /* server config */ merge_magic_server_config, /* merge server config */ mime_magic_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_ident.exp���������������������������������������������������������0000644�0000000�0000050�00000000015�10150161574�017140� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������ident_module �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_env.mak�����������������������������������������������������������0000644�0000000�0000050�00000022745�12701473373�016626� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_env.dsp !IF "$(CFG)" == "" CFG=mod_env - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_env - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_env - Win32 Release" && "$(CFG)" != "mod_env - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_env.mak" CFG="mod_env - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_env - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_env - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_env - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_env.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_env.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_env.obj" -@erase "$(INTDIR)\mod_env.res" -@erase "$(INTDIR)\mod_env_src.idb" -@erase "$(INTDIR)\mod_env_src.pdb" -@erase "$(OUTDIR)\mod_env.exp" -@erase "$(OUTDIR)\mod_env.lib" -@erase "$(OUTDIR)\mod_env.pdb" -@erase "$(OUTDIR)\mod_env.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_env_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_env.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_env.so" /d LONG_NAME="env_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_env.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_env.pdb" /debug /out:"$(OUTDIR)\mod_env.so" /implib:"$(OUTDIR)\mod_env.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_env.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_env.obj" \ "$(INTDIR)\mod_env.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_env.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_env.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_env.so" if exist .\Release\mod_env.so.manifest mt.exe -manifest .\Release\mod_env.so.manifest -outputresource:.\Release\mod_env.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_env - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_env.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_env.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_env.obj" -@erase "$(INTDIR)\mod_env.res" -@erase "$(INTDIR)\mod_env_src.idb" -@erase "$(INTDIR)\mod_env_src.pdb" -@erase "$(OUTDIR)\mod_env.exp" -@erase "$(OUTDIR)\mod_env.lib" -@erase "$(OUTDIR)\mod_env.pdb" -@erase "$(OUTDIR)\mod_env.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_env_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_env.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_env.so" /d LONG_NAME="env_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_env.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_env.pdb" /debug /out:"$(OUTDIR)\mod_env.so" /implib:"$(OUTDIR)\mod_env.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_env.so LINK32_OBJS= \ "$(INTDIR)\mod_env.obj" \ "$(INTDIR)\mod_env.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_env.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_env.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_env.so" if exist .\Debug\mod_env.so.manifest mt.exe -manifest .\Debug\mod_env.so.manifest -outputresource:.\Debug\mod_env.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_env.dep") !INCLUDE "mod_env.dep" !ELSE !MESSAGE Warning: cannot find "mod_env.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_env - Win32 Release" || "$(CFG)" == "mod_env - Win32 Debug" !IF "$(CFG)" == "mod_env - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\metadata" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_env - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\metadata" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_env - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\metadata" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_env - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\metadata" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_env - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\metadata" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\metadata" !ELSEIF "$(CFG)" == "mod_env - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\metadata" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\metadata" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_env - Win32 Release" "$(INTDIR)\mod_env.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_env.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_env.so" /d LONG_NAME="env_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_env - Win32 Debug" "$(INTDIR)\mod_env.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_env.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_env.so" /d LONG_NAME="env_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_env.c "$(INTDIR)\mod_env.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ���������������������������httpd-2.4.41/modules/metadata/mod_usertrack.mak�����������������������������������������������������0000644�0000000�0000050�00000023765�12701473373�020044� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_usertrack.dsp !IF "$(CFG)" == "" CFG=mod_usertrack - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_usertrack - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_usertrack - Win32 Release" && "$(CFG)" != "mod_usertrack - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_usertrack.mak" CFG="mod_usertrack - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_usertrack - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_usertrack - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_usertrack - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_usertrack.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_usertrack.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_usertrack.obj" -@erase "$(INTDIR)\mod_usertrack.res" -@erase "$(INTDIR)\mod_usertrack_src.idb" -@erase "$(INTDIR)\mod_usertrack_src.pdb" -@erase "$(OUTDIR)\mod_usertrack.exp" -@erase "$(OUTDIR)\mod_usertrack.lib" -@erase "$(OUTDIR)\mod_usertrack.pdb" -@erase "$(OUTDIR)\mod_usertrack.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_usertrack_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_usertrack.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_usertrack.so" /d LONG_NAME="usertrack_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_usertrack.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_usertrack.pdb" /debug /out:"$(OUTDIR)\mod_usertrack.so" /implib:"$(OUTDIR)\mod_usertrack.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_usertrack.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_usertrack.obj" \ "$(INTDIR)\mod_usertrack.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_usertrack.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_usertrack.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_usertrack.so" if exist .\Release\mod_usertrack.so.manifest mt.exe -manifest .\Release\mod_usertrack.so.manifest -outputresource:.\Release\mod_usertrack.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_usertrack - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_usertrack.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_usertrack.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_usertrack.obj" -@erase "$(INTDIR)\mod_usertrack.res" -@erase "$(INTDIR)\mod_usertrack_src.idb" -@erase "$(INTDIR)\mod_usertrack_src.pdb" -@erase "$(OUTDIR)\mod_usertrack.exp" -@erase "$(OUTDIR)\mod_usertrack.lib" -@erase "$(OUTDIR)\mod_usertrack.pdb" -@erase "$(OUTDIR)\mod_usertrack.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_usertrack_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_usertrack.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_usertrack.so" /d LONG_NAME="usertrack_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_usertrack.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_usertrack.pdb" /debug /out:"$(OUTDIR)\mod_usertrack.so" /implib:"$(OUTDIR)\mod_usertrack.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_usertrack.so LINK32_OBJS= \ "$(INTDIR)\mod_usertrack.obj" \ "$(INTDIR)\mod_usertrack.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_usertrack.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_usertrack.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_usertrack.so" if exist .\Debug\mod_usertrack.so.manifest mt.exe -manifest .\Debug\mod_usertrack.so.manifest -outputresource:.\Debug\mod_usertrack.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_usertrack.dep") !INCLUDE "mod_usertrack.dep" !ELSE !MESSAGE Warning: cannot find "mod_usertrack.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_usertrack - Win32 Release" || "$(CFG)" == "mod_usertrack - Win32 Debug" !IF "$(CFG)" == "mod_usertrack - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\metadata" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_usertrack - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\metadata" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_usertrack - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\metadata" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_usertrack - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\metadata" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_usertrack - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\metadata" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\metadata" !ELSEIF "$(CFG)" == "mod_usertrack - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\metadata" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\metadata" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_usertrack - Win32 Release" "$(INTDIR)\mod_usertrack.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_usertrack.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_usertrack.so" /d LONG_NAME="usertrack_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_usertrack - Win32 Debug" "$(INTDIR)\mod_usertrack.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_usertrack.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_usertrack.so" /d LONG_NAME="usertrack_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_usertrack.c "$(INTDIR)\mod_usertrack.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �����������httpd-2.4.41/modules/metadata/mod_cern_meta.dep�����������������������������������������������������0000644�0000000�0000050�00000003730�12674411515�017763� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_cern_meta.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_cern_meta.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ����������������������������������������httpd-2.4.41/modules/metadata/mod_version.mak�������������������������������������������������������0000644�0000000�0000050�00000023505�12701473373�017516� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_version.dsp !IF "$(CFG)" == "" CFG=mod_version - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_version - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_version - Win32 Release" && "$(CFG)" != "mod_version - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_version.mak" CFG="mod_version - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_version - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_version - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_version - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_version.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_version.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_version.obj" -@erase "$(INTDIR)\mod_version.res" -@erase "$(INTDIR)\mod_version_src.idb" -@erase "$(INTDIR)\mod_version_src.pdb" -@erase "$(OUTDIR)\mod_version.exp" -@erase "$(OUTDIR)\mod_version.lib" -@erase "$(OUTDIR)\mod_version.pdb" -@erase "$(OUTDIR)\mod_version.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_version_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_version.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_version.so" /d LONG_NAME="version_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_version.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_version.pdb" /debug /out:"$(OUTDIR)\mod_version.so" /implib:"$(OUTDIR)\mod_version.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_version.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_version.obj" \ "$(INTDIR)\mod_version.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_version.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_version.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_version.so" if exist .\Release\mod_version.so.manifest mt.exe -manifest .\Release\mod_version.so.manifest -outputresource:.\Release\mod_version.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_version - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_version.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_version.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_version.obj" -@erase "$(INTDIR)\mod_version.res" -@erase "$(INTDIR)\mod_version_src.idb" -@erase "$(INTDIR)\mod_version_src.pdb" -@erase "$(OUTDIR)\mod_version.exp" -@erase "$(OUTDIR)\mod_version.lib" -@erase "$(OUTDIR)\mod_version.pdb" -@erase "$(OUTDIR)\mod_version.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_version_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_version.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_version.so" /d LONG_NAME="version_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_version.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_version.pdb" /debug /out:"$(OUTDIR)\mod_version.so" /implib:"$(OUTDIR)\mod_version.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_version.so LINK32_OBJS= \ "$(INTDIR)\mod_version.obj" \ "$(INTDIR)\mod_version.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_version.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_version.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_version.so" if exist .\Debug\mod_version.so.manifest mt.exe -manifest .\Debug\mod_version.so.manifest -outputresource:.\Debug\mod_version.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_version.dep") !INCLUDE "mod_version.dep" !ELSE !MESSAGE Warning: cannot find "mod_version.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_version - Win32 Release" || "$(CFG)" == "mod_version - Win32 Debug" !IF "$(CFG)" == "mod_version - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\metadata" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_version - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\metadata" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_version - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\metadata" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_version - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\metadata" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_version - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\metadata" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\metadata" !ELSEIF "$(CFG)" == "mod_version - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\metadata" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\metadata" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_version - Win32 Release" "$(INTDIR)\mod_version.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_version.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_version.so" /d LONG_NAME="version_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_version - Win32 Debug" "$(INTDIR)\mod_version.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_version.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_version.so" /d LONG_NAME="version_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_version.c "$(INTDIR)\mod_version.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_unique_id.dsp�����������������������������������������������������0000644�0000000�0000050�00000010771�10551346420�020023� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_unique_id" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_unique_id - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_unique_id.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_unique_id.mak" CFG="mod_unique_id - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_unique_id - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_unique_id - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_unique_id - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_unique_id_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_unique_id.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_unique_id.so" /d LONG_NAME="unique_id_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_unique_id.so" /base:@..\..\os\win32\BaseAddr.ref,mod_unique_id.so # ADD LINK32 kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_unique_id.so" /base:@..\..\os\win32\BaseAddr.ref,mod_unique_id.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_unique_id.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_unique_id - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_unique_id_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_unique_id.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_unique_id.so" /d LONG_NAME="unique_id_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_unique_id.so" /base:@..\..\os\win32\BaseAddr.ref,mod_unique_id.so # ADD LINK32 kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_unique_id.so" /base:@..\..\os\win32\BaseAddr.ref,mod_unique_id.so # Begin Special Build Tool TargetPath=.\Debug\mod_unique_id.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_unique_id - Win32 Release" # Name "mod_unique_id - Win32 Debug" # Begin Source File SOURCE=.\mod_unique_id.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������httpd-2.4.41/modules/metadata/mod_ident.mak���������������������������������������������������������0000644�0000000�0000050�00000023225�12701473373�017133� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_ident.dsp !IF "$(CFG)" == "" CFG=mod_ident - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_ident - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_ident - Win32 Release" && "$(CFG)" != "mod_ident - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_ident.mak" CFG="mod_ident - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_ident - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_ident - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_ident - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_ident.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_ident.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_ident.obj" -@erase "$(INTDIR)\mod_ident.res" -@erase "$(INTDIR)\mod_ident_src.idb" -@erase "$(INTDIR)\mod_ident_src.pdb" -@erase "$(OUTDIR)\mod_ident.exp" -@erase "$(OUTDIR)\mod_ident.lib" -@erase "$(OUTDIR)\mod_ident.pdb" -@erase "$(OUTDIR)\mod_ident.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_ident_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_ident.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_ident.so" /d LONG_NAME="ident_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_ident.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_ident.pdb" /debug /out:"$(OUTDIR)\mod_ident.so" /implib:"$(OUTDIR)\mod_ident.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_ident.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_ident.obj" \ "$(INTDIR)\mod_ident.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_ident.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_ident.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_ident.so" if exist .\Release\mod_ident.so.manifest mt.exe -manifest .\Release\mod_ident.so.manifest -outputresource:.\Release\mod_ident.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_ident - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_ident.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_ident.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_ident.obj" -@erase "$(INTDIR)\mod_ident.res" -@erase "$(INTDIR)\mod_ident_src.idb" -@erase "$(INTDIR)\mod_ident_src.pdb" -@erase "$(OUTDIR)\mod_ident.exp" -@erase "$(OUTDIR)\mod_ident.lib" -@erase "$(OUTDIR)\mod_ident.pdb" -@erase "$(OUTDIR)\mod_ident.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_ident_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_ident.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_ident.so" /d LONG_NAME="ident_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_ident.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_ident.pdb" /debug /out:"$(OUTDIR)\mod_ident.so" /implib:"$(OUTDIR)\mod_ident.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_ident.so LINK32_OBJS= \ "$(INTDIR)\mod_ident.obj" \ "$(INTDIR)\mod_ident.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_ident.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_ident.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_ident.so" if exist .\Debug\mod_ident.so.manifest mt.exe -manifest .\Debug\mod_ident.so.manifest -outputresource:.\Debug\mod_ident.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_ident.dep") !INCLUDE "mod_ident.dep" !ELSE !MESSAGE Warning: cannot find "mod_ident.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_ident - Win32 Release" || "$(CFG)" == "mod_ident - Win32 Debug" !IF "$(CFG)" == "mod_ident - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\metadata" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_ident - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\metadata" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_ident - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\metadata" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_ident - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\metadata" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_ident - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\metadata" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\metadata" !ELSEIF "$(CFG)" == "mod_ident - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\metadata" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\metadata" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_ident - Win32 Release" "$(INTDIR)\mod_ident.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_ident.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_ident.so" /d LONG_NAME="ident_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_ident - Win32 Debug" "$(INTDIR)\mod_ident.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_ident.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_ident.so" /d LONG_NAME="ident_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_ident.c "$(INTDIR)\mod_ident.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_headers.dsp�������������������������������������������������������0000644�0000000�0000050�00000010631�10551346420�017447� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_headers" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_headers - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_headers.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_headers.mak" CFG="mod_headers - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_headers - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_headers - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_headers - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_headers_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_headers.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_headers.so" /d LONG_NAME="headers_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_headers.so" /base:@..\..\os\win32\BaseAddr.ref,mod_headers.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /debug /out:".\Release\mod_headers.so" /base:@..\..\os\win32\BaseAddr.ref,mod_headers.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_headers.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_headers - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_headers_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_headers.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_headers.so" /d LONG_NAME="headers_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_headers.so" /base:@..\..\os\win32\BaseAddr.ref,mod_headers.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_headers.so" /base:@..\..\os\win32\BaseAddr.ref,mod_headers.so # Begin Special Build Tool TargetPath=.\Debug\mod_headers.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_headers - Win32 Release" # Name "mod_headers - Win32 Debug" # Begin Source File SOURCE=.\mod_headers.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_usertrack.dsp�����������������������������������������������������0000644�0000000�0000050�00000010715�10551346420�020042� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_usertrack" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_usertrack - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_usertrack.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_usertrack.mak" CFG="mod_usertrack - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_usertrack - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_usertrack - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_usertrack - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_usertrack_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_usertrack.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_usertrack.so" /d LONG_NAME="usertrack_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_usertrack.so" /base:@..\..\os\win32\BaseAddr.ref,mod_usertrack.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_usertrack.so" /base:@..\..\os\win32\BaseAddr.ref,mod_usertrack.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_usertrack.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_usertrack - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_usertrack_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_usertrack.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_usertrack.so" /d LONG_NAME="usertrack_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_usertrack.so" /base:@..\..\os\win32\BaseAddr.ref,mod_usertrack.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_usertrack.so" /base:@..\..\os\win32\BaseAddr.ref,mod_usertrack.so # Begin Special Build Tool TargetPath=.\Debug\mod_usertrack.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_usertrack - Win32 Release" # Name "mod_usertrack - Win32 Debug" # Begin Source File SOURCE=.\mod_usertrack.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project ���������������������������������������������������httpd-2.4.41/modules/metadata/mod_unique_id.mak�����������������������������������������������������0000644�0000000�0000050�00000024013�12701473373�020006� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_unique_id.dsp !IF "$(CFG)" == "" CFG=mod_unique_id - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_unique_id - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_unique_id - Win32 Release" && "$(CFG)" != "mod_unique_id - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_unique_id.mak" CFG="mod_unique_id - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_unique_id - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_unique_id - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_unique_id - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_unique_id.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_unique_id.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_unique_id.obj" -@erase "$(INTDIR)\mod_unique_id.res" -@erase "$(INTDIR)\mod_unique_id_src.idb" -@erase "$(INTDIR)\mod_unique_id_src.pdb" -@erase "$(OUTDIR)\mod_unique_id.exp" -@erase "$(OUTDIR)\mod_unique_id.lib" -@erase "$(OUTDIR)\mod_unique_id.pdb" -@erase "$(OUTDIR)\mod_unique_id.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_unique_id_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_unique_id.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_unique_id.so" /d LONG_NAME="unique_id_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_unique_id.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_unique_id.pdb" /debug /out:"$(OUTDIR)\mod_unique_id.so" /implib:"$(OUTDIR)\mod_unique_id.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_unique_id.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_unique_id.obj" \ "$(INTDIR)\mod_unique_id.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_unique_id.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_unique_id.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_unique_id.so" if exist .\Release\mod_unique_id.so.manifest mt.exe -manifest .\Release\mod_unique_id.so.manifest -outputresource:.\Release\mod_unique_id.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_unique_id - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_unique_id.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_unique_id.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_unique_id.obj" -@erase "$(INTDIR)\mod_unique_id.res" -@erase "$(INTDIR)\mod_unique_id_src.idb" -@erase "$(INTDIR)\mod_unique_id_src.pdb" -@erase "$(OUTDIR)\mod_unique_id.exp" -@erase "$(OUTDIR)\mod_unique_id.lib" -@erase "$(OUTDIR)\mod_unique_id.pdb" -@erase "$(OUTDIR)\mod_unique_id.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_unique_id_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_unique_id.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_unique_id.so" /d LONG_NAME="unique_id_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_unique_id.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_unique_id.pdb" /debug /out:"$(OUTDIR)\mod_unique_id.so" /implib:"$(OUTDIR)\mod_unique_id.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_unique_id.so LINK32_OBJS= \ "$(INTDIR)\mod_unique_id.obj" \ "$(INTDIR)\mod_unique_id.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_unique_id.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_unique_id.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_unique_id.so" if exist .\Debug\mod_unique_id.so.manifest mt.exe -manifest .\Debug\mod_unique_id.so.manifest -outputresource:.\Debug\mod_unique_id.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_unique_id.dep") !INCLUDE "mod_unique_id.dep" !ELSE !MESSAGE Warning: cannot find "mod_unique_id.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_unique_id - Win32 Release" || "$(CFG)" == "mod_unique_id - Win32 Debug" !IF "$(CFG)" == "mod_unique_id - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\metadata" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_unique_id - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\metadata" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_unique_id - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\metadata" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_unique_id - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\metadata" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_unique_id - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\metadata" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\metadata" !ELSEIF "$(CFG)" == "mod_unique_id - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\metadata" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\metadata" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_unique_id - Win32 Release" "$(INTDIR)\mod_unique_id.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_unique_id.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_unique_id.so" /d LONG_NAME="unique_id_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_unique_id - Win32 Debug" "$(INTDIR)\mod_unique_id.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_unique_id.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_unique_id.so" /d LONG_NAME="unique_id_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_unique_id.c "$(INTDIR)\mod_unique_id.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_setenvif.c��������������������������������������������������������0000644�0000000�0000050�00000055254�13376023213�017325� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_setenvif.c * Set environment variables based on matching request headers or * attributes against regex strings * * Paul Sutton <paul@ukweb.com> 27 Oct 1996 * Based on mod_browser by Alexei Kosut <akosut@organic.com> */ /* * Used to set environment variables based on the incoming request headers, * or some selected other attributes of the request (e.g., the remote host * name). * * Usage: * * SetEnvIf name regex var ... * * where name is either a HTTP request header name, or one of the * special values (see below). 'name' may be a regex when it is used * to specify an HTTP request header name. The 'value' of the header & (or the value of the special value from below) are compared against * the regex argument. If this is a simple string, a simple sub-string * match is performed. Otherwise, a request expression match is * done. If the value matches the string or regular expression, the * environment variables listed as var ... are set. Each var can * be in one of three formats: var, which sets the named variable * (the value "1"); var=value, which sets the variable to * the given value; or !var, which unsets the variable is it has * been previously set. * * Normally the strings are compared with regard to case. To ignore * case, use the directive SetEnvIfNoCase instead. * * Special values for 'name' are: * * server_addr IP address of interface on which request arrived * (analogous to SERVER_ADDR set in ap_add_common_vars()) * remote_host Remote host name (if available) * remote_addr Remote IP address * request_method Request method (GET, POST, etc) * request_uri Requested URI * * Examples: * * To set the environment variable LOCALHOST if the client is the local * machine: * * SetEnvIf remote_addr 127.0.0.1 LOCALHOST * * To set LOCAL if the client is the local host, or within our company's * domain (192.168.10): * * SetEnvIf remote_addr 192.168.10. LOCAL * SetEnvIf remote_addr 127.0.0.1 LOCALHOST * * This could be written as: * * SetEnvIf remote_addr (127.0.0.1|192.168.10.) LOCAL * * To set HAVE_TS if the client request contains any header beginning * with "TS" with a value beginning with a lower case alphabet: * * SetEnvIf ^TS* ^[a-z].* HAVE_TS */ #include "apr.h" #include "apr_strings.h" #include "apr_strmatch.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" enum special { SPECIAL_NOT, SPECIAL_REMOTE_ADDR, SPECIAL_REMOTE_HOST, SPECIAL_REQUEST_URI, SPECIAL_REQUEST_METHOD, SPECIAL_REQUEST_PROTOCOL, SPECIAL_SERVER_ADDR }; typedef struct { char *name; /* header name */ ap_regex_t *pnamereg; /* compiled header name regex */ char *regex; /* regex to match against */ ap_regex_t *preg; /* compiled regex */ const apr_strmatch_pattern *pattern; /* non-regex pattern to match */ ap_expr_info_t *expr; /* parsed expression */ apr_table_t *features; /* env vars to set (or unset) */ enum special special_type; /* is it a "special" header ? */ int icase; /* ignoring case? */ } sei_entry; typedef struct { apr_array_header_t *conditionals; } sei_cfg_rec; module AP_MODULE_DECLARE_DATA setenvif_module; /* * These routines, the create- and merge-config functions, are called * for both the server-wide and the per-directory contexts. This is * because the different definitions are used at different times; the * server-wide ones are used in the post-read-request phase, and the * per-directory ones are used during the header-parse phase (after * the URI has been mapped to a file and we have anything from the * .htaccess file and <Directory> and <Files> containers). */ static void *create_setenvif_config(apr_pool_t *p) { sei_cfg_rec *new = (sei_cfg_rec *) apr_palloc(p, sizeof(sei_cfg_rec)); new->conditionals = apr_array_make(p, 20, sizeof(sei_entry)); return (void *) new; } static void *create_setenvif_config_svr(apr_pool_t *p, server_rec *dummy) { return create_setenvif_config(p); } static void *create_setenvif_config_dir(apr_pool_t *p, char *dummy) { return create_setenvif_config(p); } static void *merge_setenvif_config(apr_pool_t *p, void *basev, void *overridesv) { sei_cfg_rec *a = apr_pcalloc(p, sizeof(sei_cfg_rec)); sei_cfg_rec *base = basev, *overrides = overridesv; a->conditionals = apr_array_append(p, base->conditionals, overrides->conditionals); return a; } /* * any non-NULL magic constant will do... used to indicate if AP_REG_ICASE should * be used */ #define ICASE_MAGIC ((void *)(&setenvif_module)) #define SEI_MAGIC_HEIRLOOM "setenvif-phase-flag" static ap_regex_t *is_header_regex_regex; static int is_header_regex(apr_pool_t *p, const char* name) { /* If a Header name contains characters other than: * -,_,[A-Z\, [a-z] and [0-9]. * assume the header name is a regular expression. */ if (ap_regexec(is_header_regex_regex, name, 0, NULL, 0)) { return 1; } return 0; } /* If the input string does not take advantage of regular * expression metacharacters, return a pointer to an equivalent * string that can be searched using apr_strmatch(). (The * returned string will often be the input string. But if * the input string contains escaped characters, the returned * string will be a copy with the escapes removed.) */ static const char *non_regex_pattern(apr_pool_t *p, const char *s) { const char *src = s; int escapes_found = 0; int in_escape = 0; while (*src) { switch (*src) { case '^': case '.': case '$': case '|': case '(': case ')': case '[': case ']': case '*': case '+': case '?': case '{': case '}': if (!in_escape) { return NULL; } in_escape = 0; break; case '\\': if (!in_escape) { in_escape = 1; escapes_found = 1; } else { in_escape = 0; } break; default: if (in_escape) { return NULL; } break; } src++; } if (!escapes_found) { return s; } else { char *unescaped = (char *)apr_palloc(p, src - s + 1); char *dst = unescaped; src = s; do { if (*src == '\\') { src++; } } while ((*dst++ = *src++)); return unescaped; } } static const char *add_envvars(cmd_parms *cmd, const char *args, sei_entry *new) { const char *feature; int beenhere = 0; char *var; for ( ; ; ) { feature = ap_getword_conf(cmd->pool, &args); if (!*feature) { break; } beenhere++; var = ap_getword(cmd->pool, &feature, '='); if (*feature) { apr_table_setn(new->features, var, feature); } else if (*var == '!') { apr_table_setn(new->features, var + 1, "!"); } else { apr_table_setn(new->features, var, "1"); } } if (!beenhere) { return apr_pstrcat(cmd->pool, "Missing envariable expression for ", cmd->cmd->name, NULL); } return NULL; } static const char *add_setenvif_core(cmd_parms *cmd, void *mconfig, char *fname, const char *args) { char *regex; const char *simple_pattern; sei_cfg_rec *sconf; sei_entry *new; sei_entry *entries; int i; int icase; /* * Determine from our context into which record to put the entry. * cmd->path == NULL means we're in server-wide context; otherwise, * we're dealing with a per-directory setting. */ sconf = (cmd->path != NULL) ? (sei_cfg_rec *) mconfig : (sei_cfg_rec *) ap_get_module_config(cmd->server->module_config, &setenvif_module); entries = (sei_entry *) sconf->conditionals->elts; /* get regex */ regex = ap_getword_conf(cmd->pool, &args); if (!*regex) { return apr_pstrcat(cmd->pool, "Missing regular expression for ", cmd->cmd->name, NULL); } /* * If we've already got a sei_entry with the same name we want to * just copy the name pointer... so that later on we can compare * two header names just by comparing the pointers. */ for (i = 0; i < sconf->conditionals->nelts; ++i) { new = &entries[i]; if (new->name && !strcasecmp(new->name, fname)) { fname = new->name; break; } } /* if the last entry has an identical headername and regex then * merge with it */ i = sconf->conditionals->nelts - 1; icase = cmd->info == ICASE_MAGIC; if (i < 0 || entries[i].name != fname || entries[i].icase != icase || strcmp(entries[i].regex, regex)) { /* no match, create a new entry */ new = apr_array_push(sconf->conditionals); new->name = fname; new->regex = regex; new->icase = icase; if ((simple_pattern = non_regex_pattern(cmd->pool, regex))) { new->pattern = apr_strmatch_precompile(cmd->pool, simple_pattern, !icase); if (new->pattern == NULL) { return apr_pstrcat(cmd->pool, cmd->cmd->name, " pattern could not be compiled.", NULL); } new->preg = NULL; } else { new->preg = ap_pregcomp(cmd->pool, regex, (AP_REG_EXTENDED | (icase ? AP_REG_ICASE : 0))); if (new->preg == NULL) { return apr_pstrcat(cmd->pool, cmd->cmd->name, " regex could not be compiled.", NULL); } new->pattern = NULL; } new->features = apr_table_make(cmd->pool, 2); if (!strcasecmp(fname, "remote_addr")) { new->special_type = SPECIAL_REMOTE_ADDR; } else if (!strcasecmp(fname, "remote_host")) { new->special_type = SPECIAL_REMOTE_HOST; } else if (!strcasecmp(fname, "request_uri")) { new->special_type = SPECIAL_REQUEST_URI; } else if (!strcasecmp(fname, "request_method")) { new->special_type = SPECIAL_REQUEST_METHOD; } else if (!strcasecmp(fname, "request_protocol")) { new->special_type = SPECIAL_REQUEST_PROTOCOL; } else if (!strcasecmp(fname, "server_addr")) { new->special_type = SPECIAL_SERVER_ADDR; } else { new->special_type = SPECIAL_NOT; /* Handle fname as a regular expression. * If fname a simple header string, identify as such * (new->pnamereg = NULL) to avoid the overhead of searching * through headers_in for a regex match. */ if (is_header_regex(cmd->temp_pool, fname)) { new->pnamereg = ap_pregcomp(cmd->pool, fname, (AP_REG_EXTENDED | AP_REG_NOSUB | (icase ? AP_REG_ICASE : 0))); if (new->pnamereg == NULL) return apr_pstrcat(cmd->pool, cmd->cmd->name, "Header name regex could not be " "compiled.", NULL); } else { new->pnamereg = NULL; } } } else { new = &entries[i]; } return add_envvars(cmd, args, new); } static const char *add_setenvif(cmd_parms *cmd, void *mconfig, const char *args) { char *fname; /* get header name */ fname = ap_getword_conf(cmd->pool, &args); if (!*fname) { return apr_pstrcat(cmd->pool, "Missing header-field name for ", cmd->cmd->name, NULL); } return add_setenvif_core(cmd, mconfig, fname, args); } static const char *add_setenvifexpr(cmd_parms *cmd, void *mconfig, const char *args) { char *expr; sei_cfg_rec *sconf; sei_entry *new; const char *err; /* * Determine from our context into which record to put the entry. * cmd->path == NULL means we're in server-wide context; otherwise, * we're dealing with a per-directory setting. */ sconf = (cmd->path != NULL) ? (sei_cfg_rec *) mconfig : (sei_cfg_rec *) ap_get_module_config(cmd->server->module_config, &setenvif_module); /* get expr */ expr = ap_getword_conf(cmd->pool, &args); if (!*expr) { return apr_pstrcat(cmd->pool, "Missing expression for ", cmd->cmd->name, NULL); } new = apr_array_push(sconf->conditionals); new->features = apr_table_make(cmd->pool, 2); new->name = NULL; new->regex = NULL; new->pattern = NULL; new->preg = NULL; new->expr = ap_expr_parse_cmd(cmd, expr, 0, &err, NULL); if (err) return apr_psprintf(cmd->pool, "Could not parse expression \"%s\": %s", expr, err); return add_envvars(cmd, args, new); } /* * This routine handles the BrowserMatch* directives. It simply turns around * and feeds them, with the appropriate embellishments, to the general-purpose * command handler. */ static const char *add_browser(cmd_parms *cmd, void *mconfig, const char *args) { return add_setenvif_core(cmd, mconfig, "User-Agent", args); } static const command_rec setenvif_module_cmds[] = { AP_INIT_RAW_ARGS("SetEnvIf", add_setenvif, NULL, OR_FILEINFO, "A header-name, regex and a list of variables."), AP_INIT_RAW_ARGS("SetEnvIfNoCase", add_setenvif, ICASE_MAGIC, OR_FILEINFO, "a header-name, regex and a list of variables."), AP_INIT_RAW_ARGS("SetEnvIfExpr", add_setenvifexpr, NULL, OR_FILEINFO, "an expression and a list of variables."), AP_INIT_RAW_ARGS("BrowserMatch", add_browser, NULL, OR_FILEINFO, "A browser regex and a list of variables."), AP_INIT_RAW_ARGS("BrowserMatchNoCase", add_browser, ICASE_MAGIC, OR_FILEINFO, "A browser regex and a list of variables."), { NULL }, }; /* * This routine gets called at two different points in request processing: * once before the URI has been translated (during the post-read-request * phase) and once after (during the header-parse phase). We use different * config records for the two different calls to reduce overhead (by not * re-doing the server-wide settings during directory processing), and * signal which call it is by having the earlier one pass a flag to the * later one. */ static int match_headers(request_rec *r) { sei_cfg_rec *sconf; sei_entry *entries; const apr_table_entry_t *elts; const char *val, *err; apr_size_t val_len = 0; int i, j; char *last_name; ap_regmatch_t regm[AP_MAX_REG_MATCH]; if (!ap_get_module_config(r->request_config, &setenvif_module)) { ap_set_module_config(r->request_config, &setenvif_module, SEI_MAGIC_HEIRLOOM); sconf = (sei_cfg_rec *) ap_get_module_config(r->server->module_config, &setenvif_module); } else { sconf = (sei_cfg_rec *) ap_get_module_config(r->per_dir_config, &setenvif_module); } entries = (sei_entry *) sconf->conditionals->elts; last_name = NULL; val = NULL; for (i = 0; i < sconf->conditionals->nelts; ++i) { sei_entry *b = &entries[i]; if (!b->expr) { /* Optimize the case where a bunch of directives in a row use the * same header. Remember we don't need to strcmp the two header * names because we made sure the pointers were equal during * configuration. */ if (b->name != last_name) { last_name = b->name; switch (b->special_type) { case SPECIAL_REMOTE_ADDR: val = r->useragent_ip; break; case SPECIAL_SERVER_ADDR: val = r->connection->local_ip; break; case SPECIAL_REMOTE_HOST: val = ap_get_useragent_host(r, REMOTE_NAME, NULL); break; case SPECIAL_REQUEST_URI: val = r->uri; break; case SPECIAL_REQUEST_METHOD: val = r->method; break; case SPECIAL_REQUEST_PROTOCOL: val = r->protocol; break; case SPECIAL_NOT: if (b->pnamereg) { /* Matching headers_in against a regex. Iterate through * the headers_in until we find a match or run out of * headers. */ const apr_array_header_t *arr = apr_table_elts(r->headers_in); elts = (const apr_table_entry_t *) arr->elts; val = NULL; for (j = 0; j < arr->nelts; ++j) { if (!ap_regexec(b->pnamereg, elts[j].key, 0, NULL, 0)) { val = elts[j].val; } } } else { /* Not matching against a regex */ val = apr_table_get(r->headers_in, b->name); if (val == NULL) { val = apr_table_get(r->subprocess_env, b->name); } } } val_len = val ? strlen(val) : 0; } } /* * A NULL value indicates that the header field or special entity * wasn't present or is undefined. Represent that as an empty string * so that REs like "^$" will work and allow envariable setting * based on missing or empty field. This is also necessary to make * ap_pregsub work after evaluating an ap_expr_t which does set the * regexp backref data. */ if (val == NULL) { val = ""; val_len = 0; } if ((b->pattern && apr_strmatch(b->pattern, val, val_len)) || (b->preg && !ap_regexec(b->preg, val, AP_MAX_REG_MATCH, regm, 0)) || (b->expr && ap_expr_exec_re(r, b->expr, AP_MAX_REG_MATCH, regm, &val, &err) > 0)) { const apr_array_header_t *arr = apr_table_elts(b->features); elts = (const apr_table_entry_t *) arr->elts; for (j = 0; j < arr->nelts; ++j) { if (*(elts[j].val) == '!') { apr_table_unset(r->subprocess_env, elts[j].key); } else { /* * Do regex replacement, if we did not use a pattern, so * either a regex or an expression and if we have a val * or at least we did not use an expression. * Background: We can have expressions that become true * if a regex pattern in the expression does NOT match. * In this case val is NULL and we should just set the * value for the environment variable like in the pattern * case. */ if (!b->pattern && (val || !b->expr)) { char *replaced = ap_pregsub(r->pool, elts[j].val, val, AP_MAX_REG_MATCH, regm); if (replaced) { apr_table_setn(r->subprocess_env, elts[j].key, replaced); } else { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(01505) "Regular expression replacement " "failed for '%s', value too long?", elts[j].key); return HTTP_INTERNAL_SERVER_ERROR; } } else { apr_table_setn(r->subprocess_env, elts[j].key, elts[j].val); } } ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "Setting %s", elts[j].key); } } } return DECLINED; } static void register_hooks(apr_pool_t *p) { ap_hook_header_parser(match_headers, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_read_request(match_headers, NULL, NULL, APR_HOOK_MIDDLE); is_header_regex_regex = ap_pregcomp(p, "^[-A-Za-z0-9_]*$", (AP_REG_EXTENDED | AP_REG_NOSUB )); ap_assert(is_header_regex_regex != NULL); } AP_DECLARE_MODULE(setenvif) = { STANDARD20_MODULE_STUFF, create_setenvif_config_dir, /* dir config creater */ merge_setenvif_config, /* dir merger --- default is to override */ create_setenvif_config_svr, /* server config */ merge_setenvif_config, /* merge server configs */ setenvif_module_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/NWGNUremoteip���������������������������������������������������������0000644�0000000�0000050�00000010154�11540546347�017064� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = remoteip # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) RemoteIP Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = RemoteIP Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_remoteip.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ remoteip_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_expires.dep�������������������������������������������������������0000644�0000000�0000050�00000003664�12674411515�017513� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_expires.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_expires.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ����������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_usertrack.c�������������������������������������������������������0000644�0000000�0000050�00000035777�12640532101�017507� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* User Tracking Module (Was mod_cookies.c) * * *** IMPORTANT NOTE: This module is not designed to generate * *** cryptographically secure cookies. This means you should not * *** use cookies generated by this module for authentication purposes * * This Apache module is designed to track users paths through a site. * It uses the client-side state ("Cookie") protocol developed by Netscape. * It is known to work on most browsers. * * Each time a page is requested we look to see if the browser is sending * us a Cookie: header that we previously generated. * * If we don't find one then the user hasn't been to this site since * starting their browser or their browser doesn't support cookies. So * we generate a unique Cookie for the transaction and send it back to * the browser (via a "Set-Cookie" header) * Future requests from the same browser should keep the same Cookie line. * * By matching up all the requests with the same cookie you can * work out exactly what path a user took through your site. To log * the cookie use the " %{Cookie}n " directive in a custom access log; * * Example 1 : If you currently use the standard Log file format (CLF) * and use the command "TransferLog somefilename", add the line * LogFormat "%h %l %u %t \"%r\" %s %b %{Cookie}n" * to your config file. * * Example 2 : If you used to use the old "CookieLog" directive, you * can emulate it by adding the following command to your config file * CustomLog filename "%{Cookie}n \"%r\" %t" * * Mark Cox, mjc@apache.org, 6 July 95 * * This file replaces mod_cookies.c */ #include "apr.h" #include "apr_lib.h" #include "apr_strings.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_request.h" #include "http_log.h" module AP_MODULE_DECLARE_DATA usertrack_module; typedef struct { int always; int expires; } cookie_log_state; typedef enum { CT_UNSET, CT_NETSCAPE, CT_COOKIE, CT_COOKIE2 } cookie_type_e; typedef struct { int enabled; cookie_type_e style; const char *cookie_name; const char *cookie_domain; char *regexp_string; /* used to compile regexp; save for debugging */ ap_regex_t *regexp; /* used to find usertrack cookie in cookie header */ } cookie_dir_rec; /* Make Cookie: Now we have to generate something that is going to be * pretty unique. We can base it on the pid, time, hostip */ #define COOKIE_NAME "Apache" static void make_cookie(request_rec *r) { cookie_log_state *cls = ap_get_module_config(r->server->module_config, &usertrack_module); char cookiebuf[2 * (sizeof(apr_uint64_t) + sizeof(int)) + 2]; unsigned int random; apr_time_t now = r->request_time ? r->request_time : apr_time_now(); char *new_cookie; cookie_dir_rec *dcfg; ap_random_insecure_bytes(&random, sizeof(random)); apr_snprintf(cookiebuf, sizeof(cookiebuf), "%x.%" APR_UINT64_T_HEX_FMT, random, (apr_uint64_t)now); dcfg = ap_get_module_config(r->per_dir_config, &usertrack_module); if (cls->expires) { /* Cookie with date; as strftime '%a, %d-%h-%y %H:%M:%S GMT' */ new_cookie = apr_psprintf(r->pool, "%s=%s; path=/", dcfg->cookie_name, cookiebuf); if ((dcfg->style == CT_UNSET) || (dcfg->style == CT_NETSCAPE)) { apr_time_exp_t tms; apr_time_exp_gmt(&tms, r->request_time + apr_time_from_sec(cls->expires)); new_cookie = apr_psprintf(r->pool, "%s; expires=%s, " "%.2d-%s-%.2d %.2d:%.2d:%.2d GMT", new_cookie, apr_day_snames[tms.tm_wday], tms.tm_mday, apr_month_snames[tms.tm_mon], tms.tm_year % 100, tms.tm_hour, tms.tm_min, tms.tm_sec); } else { new_cookie = apr_psprintf(r->pool, "%s; max-age=%d", new_cookie, cls->expires); } } else { new_cookie = apr_psprintf(r->pool, "%s=%s; path=/", dcfg->cookie_name, cookiebuf); } if (dcfg->cookie_domain != NULL) { new_cookie = apr_pstrcat(r->pool, new_cookie, "; domain=", dcfg->cookie_domain, (dcfg->style == CT_COOKIE2 ? "; version=1" : ""), NULL); } apr_table_addn(r->err_headers_out, (dcfg->style == CT_COOKIE2 ? "Set-Cookie2" : "Set-Cookie"), new_cookie); apr_table_setn(r->notes, "cookie", apr_pstrdup(r->pool, cookiebuf)); /* log first time */ } /* dcfg->regexp is "^cookie_name=([^;]+)|;[ \t]+cookie_name=([^;]+)", * which has three subexpressions, $0..$2 */ #define NUM_SUBS 3 static void set_and_comp_regexp(cookie_dir_rec *dcfg, apr_pool_t *p, const char *cookie_name) { int danger_chars = 0; const char *sp = cookie_name; /* The goal is to end up with this regexp, * ^cookie_name=([^;,]+)|[;,][ \t]+cookie_name=([^;,]+) * with cookie_name obviously substituted either * with the real cookie name set by the user in httpd.conf, or with the * default COOKIE_NAME. */ /* Anyway, we need to escape the cookie_name before pasting it * into the regex */ while (*sp) { if (!apr_isalnum(*sp)) { ++danger_chars; } ++sp; } if (danger_chars) { char *cp; cp = apr_palloc(p, sp - cookie_name + danger_chars + 1); /* 1 == \0 */ sp = cookie_name; cookie_name = cp; while (*sp) { if (!apr_isalnum(*sp)) { *cp++ = '\\'; } *cp++ = *sp++; } *cp = '\0'; } dcfg->regexp_string = apr_pstrcat(p, "^", cookie_name, "=([^;,]+)|[;,][ \t]*", cookie_name, "=([^;,]+)", NULL); dcfg->regexp = ap_pregcomp(p, dcfg->regexp_string, AP_REG_EXTENDED); ap_assert(dcfg->regexp != NULL); } static int spot_cookie(request_rec *r) { cookie_dir_rec *dcfg = ap_get_module_config(r->per_dir_config, &usertrack_module); const char *cookie_header; ap_regmatch_t regm[NUM_SUBS]; /* Do not run in subrequests */ if (!dcfg->enabled || r->main) { return DECLINED; } if ((cookie_header = apr_table_get(r->headers_in, "Cookie"))) { if (!ap_regexec(dcfg->regexp, cookie_header, NUM_SUBS, regm, 0)) { char *cookieval = NULL; int err = 0; /* Our regexp, * ^cookie_name=([^;]+)|;[ \t]+cookie_name=([^;]+) * only allows for $1 or $2 to be available. ($0 is always * filled with the entire matched expression, not just * the part in parentheses.) So just check for either one * and assign to cookieval if present. */ if (regm[1].rm_so != -1) { cookieval = ap_pregsub(r->pool, "$1", cookie_header, NUM_SUBS, regm); if (cookieval == NULL) err = 1; } if (regm[2].rm_so != -1) { cookieval = ap_pregsub(r->pool, "$2", cookie_header, NUM_SUBS, regm); if (cookieval == NULL) err = 1; } if (err) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(01499) "Failed to extract cookie value (out of mem?)"); return HTTP_INTERNAL_SERVER_ERROR; } /* Set the cookie in a note, for logging */ apr_table_setn(r->notes, "cookie", cookieval); return DECLINED; /* There's already a cookie, no new one */ } } make_cookie(r); return OK; /* We set our cookie */ } static void *make_cookie_log_state(apr_pool_t *p, server_rec *s) { cookie_log_state *cls = (cookie_log_state *) apr_palloc(p, sizeof(cookie_log_state)); cls->expires = 0; return (void *) cls; } static void *make_cookie_dir(apr_pool_t *p, char *d) { cookie_dir_rec *dcfg; dcfg = (cookie_dir_rec *) apr_pcalloc(p, sizeof(cookie_dir_rec)); dcfg->cookie_name = COOKIE_NAME; dcfg->cookie_domain = NULL; dcfg->style = CT_UNSET; dcfg->enabled = 0; /* In case the user does not use the CookieName directive, * we need to compile the regexp for the default cookie name. */ set_and_comp_regexp(dcfg, p, COOKIE_NAME); return dcfg; } static const char *set_cookie_enable(cmd_parms *cmd, void *mconfig, int arg) { cookie_dir_rec *dcfg = mconfig; dcfg->enabled = arg; return NULL; } static const char *set_cookie_exp(cmd_parms *parms, void *dummy, const char *arg) { cookie_log_state *cls; time_t factor, modifier = 0; time_t num = 0; char *word; cls = ap_get_module_config(parms->server->module_config, &usertrack_module); /* The simple case first - all numbers (we assume) */ if (apr_isdigit(arg[0]) && apr_isdigit(arg[strlen(arg) - 1])) { cls->expires = atol(arg); return NULL; } /* * The harder case - stolen from mod_expires * * CookieExpires "[plus] {<num> <type>}*" */ word = ap_getword_conf(parms->temp_pool, &arg); if (!strncasecmp(word, "plus", 1)) { word = ap_getword_conf(parms->temp_pool, &arg); }; /* {<num> <type>}* */ while (word[0]) { /* <num> */ if (apr_isdigit(word[0])) num = atoi(word); else return "bad expires code, numeric value expected."; /* <type> */ word = ap_getword_conf(parms->temp_pool, &arg); if (!word[0]) return "bad expires code, missing <type>"; if (!strncasecmp(word, "years", 1)) factor = 60 * 60 * 24 * 365; else if (!strncasecmp(word, "months", 2)) factor = 60 * 60 * 24 * 30; else if (!strncasecmp(word, "weeks", 1)) factor = 60 * 60 * 24 * 7; else if (!strncasecmp(word, "days", 1)) factor = 60 * 60 * 24; else if (!strncasecmp(word, "hours", 1)) factor = 60 * 60; else if (!strncasecmp(word, "minutes", 2)) factor = 60; else if (!strncasecmp(word, "seconds", 1)) factor = 1; else return "bad expires code, unrecognized type"; modifier = modifier + factor * num; /* next <num> */ word = ap_getword_conf(parms->temp_pool, &arg); } cls->expires = modifier; return NULL; } static const char *set_cookie_name(cmd_parms *cmd, void *mconfig, const char *name) { cookie_dir_rec *dcfg = (cookie_dir_rec *) mconfig; dcfg->cookie_name = name; set_and_comp_regexp(dcfg, cmd->pool, name); if (dcfg->regexp == NULL) { return "Regular expression could not be compiled."; } if (dcfg->regexp->re_nsub + 1 != NUM_SUBS) { return apr_pstrcat(cmd->pool, "Invalid cookie name \"", name, "\"", NULL); } return NULL; } /* * Set the value for the 'Domain=' attribute. */ static const char *set_cookie_domain(cmd_parms *cmd, void *mconfig, const char *name) { cookie_dir_rec *dcfg; dcfg = (cookie_dir_rec *) mconfig; /* * Apply the restrictions on cookie domain attributes. */ if (!name[0]) { return "CookieDomain values may not be null"; } if (name[0] != '.') { return "CookieDomain values must begin with a dot"; } if (ap_strchr_c(&name[1], '.') == NULL) { return "CookieDomain values must contain at least one embedded dot"; } dcfg->cookie_domain = name; return NULL; } /* * Make a note of the cookie style we should use. */ static const char *set_cookie_style(cmd_parms *cmd, void *mconfig, const char *name) { cookie_dir_rec *dcfg; dcfg = (cookie_dir_rec *) mconfig; if (strcasecmp(name, "Netscape") == 0) { dcfg->style = CT_NETSCAPE; } else if ((strcasecmp(name, "Cookie") == 0) || (strcasecmp(name, "RFC2109") == 0)) { dcfg->style = CT_COOKIE; } else if ((strcasecmp(name, "Cookie2") == 0) || (strcasecmp(name, "RFC2965") == 0)) { dcfg->style = CT_COOKIE2; } else { return apr_psprintf(cmd->pool, "Invalid %s keyword: '%s'", cmd->cmd->name, name); } return NULL; } static const command_rec cookie_log_cmds[] = { AP_INIT_TAKE1("CookieExpires", set_cookie_exp, NULL, OR_FILEINFO, "an expiry date code"), AP_INIT_TAKE1("CookieDomain", set_cookie_domain, NULL, OR_FILEINFO, "domain to which this cookie applies"), AP_INIT_TAKE1("CookieStyle", set_cookie_style, NULL, OR_FILEINFO, "'Netscape', 'Cookie' (RFC2109), or 'Cookie2' (RFC2965)"), AP_INIT_FLAG("CookieTracking", set_cookie_enable, NULL, OR_FILEINFO, "whether or not to enable cookies"), AP_INIT_TAKE1("CookieName", set_cookie_name, NULL, OR_FILEINFO, "name of the tracking cookie"), {NULL} }; static void register_hooks(apr_pool_t *p) { ap_hook_fixups(spot_cookie,NULL,NULL,APR_HOOK_REALLY_FIRST); } AP_DECLARE_MODULE(usertrack) = { STANDARD20_MODULE_STUFF, make_cookie_dir, /* dir config creater */ NULL, /* dir merger --- default is to override */ make_cookie_log_state, /* server config */ NULL, /* merge server configs */ cookie_log_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; �httpd-2.4.41/modules/metadata/mod_ident.dep���������������������������������������������������������0000644�0000000�0000050�00000003477�12674411515�017141� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_ident.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_ident.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_expires.exp�������������������������������������������������������0000644�0000000�0000050�00000000017�10150161574�017516� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������expires_module �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_setenvif.dep������������������������������������������������������0000644�0000000�0000050�00000004001�12674411515�017641� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_setenvif.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_setenvif.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_expires.c���������������������������������������������������������0000644�0000000�0000050�00000043721�12640532101�017147� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_expires.c * version 0.0.11 * status beta * * Andrew Wilson <Andrew.Wilson@cm.cf.ac.uk> 26.Jan.96 * * This module allows you to control the form of the Expires: header * that Apache issues for each access. Directives can appear in * configuration files or in .htaccess files so expiry semantics can * be defined on a per-directory basis. * * DIRECTIVE SYNTAX * * Valid directives are: * * ExpiresActive on | off * ExpiresDefault <code><seconds> * ExpiresByType type/encoding <code><seconds> * * Valid values for <code> are: * * 'M' expires header shows file modification date + <seconds> * 'A' expires header shows access time + <seconds> * * [I'm not sure which of these is best under different * circumstances, I guess it's for other people to explore. * The effects may be indistinguishable for a number of cases] * * <seconds> should be an integer value [acceptable to atoi()] * * There is NO space between the <code> and <seconds>. * * For example, a directory which contains information which changes * frequently might contain: * * # reports generated by cron every hour. don't let caches * # hold onto stale information * ExpiresDefault M3600 * * Another example, our html pages can change all the time, the gifs * tend not to change often: * * # pages are hot (1 week), images are cold (1 month) * ExpiresByType text/html A604800 * ExpiresByType image/gif A2592000 * * Expires can be turned on for all URLs on the server by placing the * following directive in a conf file: * * ExpiresActive on * * ExpiresActive can also appear in .htaccess files, enabling the * behaviour to be turned on or off for each chosen directory. * * # turn off Expires behaviour in this directory * # and subdirectories * ExpiresActive off * * Directives defined for a directory are valid in subdirectories * unless explicitly overridden by new directives in the subdirectory * .htaccess files. * * ALTERNATIVE DIRECTIVE SYNTAX * * Directives can also be defined in a more readable syntax of the form: * * ExpiresDefault "<base> [plus] {<num> <type>}*" * ExpiresByType type/encoding "<base> [plus] {<num> <type>}*" * * where <base> is one of: * access * now equivalent to 'access' * modification * * where the 'plus' keyword is optional * * where <num> should be an integer value [acceptable to atoi()] * * where <type> is one of: * years * months * weeks * days * hours * minutes * seconds * * For example, any of the following directives can be used to make * documents expire 1 month after being accessed, by default: * * ExpiresDefault "access plus 1 month" * ExpiresDefault "access plus 4 weeks" * ExpiresDefault "access plus 30 days" * * The expiry time can be fine-tuned by adding several '<num> <type>' * clauses: * * ExpiresByType text/html "access plus 1 month 15 days 2 hours" * ExpiresByType image/gif "modification plus 5 hours 3 minutes" * * --- * * Change-log: * 29.Jan.96 Hardened the add_* functions. Server will now bail out * if bad directives are given in the conf files. * 02.Feb.96 Returns DECLINED if not 'ExpiresActive on', giving other * expires-aware modules a chance to play with the same * directives. [Michael Rutman] * 03.Feb.96 Call tzset() before localtime(). Trying to get the module * to work properly in non GMT timezones. * 12.Feb.96 Modified directive syntax to allow more readable commands: * ExpiresDefault "now plus 10 days 20 seconds" * ExpiresDefault "access plus 30 days" * ExpiresDefault "modification plus 1 year 10 months 30 days" * 13.Feb.96 Fix call to table_get() with NULL 2nd parameter [Rob Hartill] * 19.Feb.96 Call gm_timestr_822() to get time formatted correctly, can't * rely on presence of HTTP_TIME_FORMAT in Apache 1.1+. * 21.Feb.96 This version (0.0.9) reverses assumptions made in 0.0.8 * about star/star handlers. Reverting to 0.0.7 behaviour. * 08.Jun.96 allows ExpiresDefault to be used with responses that use * the DefaultType by not DECLINING, but instead skipping * the table_get check and then looking for an ExpiresDefault. * [Rob Hartill] * 04.Nov.96 'const' definitions added. * * TODO * add support for Cache-Control: max-age=20 from the HTTP/1.1 * proposal (in this case, a ttl of 20 seconds) [ask roy] * add per-file expiry and explicit expiry times - duplicates some * of the mod_cern_meta.c functionality. eg: * ExpiresExplicit index.html "modification plus 30 days" * * BUGS * Hi, welcome to the internet. */ #include "apr.h" #include "apr_strings.h" #include "apr_lib.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_request.h" #include "http_protocol.h" typedef struct { int active; int wildcards; char *expiresdefault; apr_table_t *expiresbytype; } expires_dir_config; /* from mod_dir, why is this alias used? */ #define DIR_CMD_PERMS OR_INDEXES #define ACTIVE_ON 1 #define ACTIVE_OFF 0 #define ACTIVE_DONTCARE 2 module AP_MODULE_DECLARE_DATA expires_module; static void *create_dir_expires_config(apr_pool_t *p, char *dummy) { expires_dir_config *new = (expires_dir_config *) apr_pcalloc(p, sizeof(expires_dir_config)); new->active = ACTIVE_DONTCARE; new->wildcards = 0; new->expiresdefault = NULL; new->expiresbytype = apr_table_make(p, 4); return (void *) new; } static const char *set_expiresactive(cmd_parms *cmd, void *in_dir_config, int arg) { expires_dir_config *dir_config = in_dir_config; /* if we're here at all it's because someone explicitly * set the active flag */ dir_config->active = ACTIVE_ON; if (arg == 0) { dir_config->active = ACTIVE_OFF; } return NULL; } /* check_code() parse 'code' and return NULL or an error response * string. If we return NULL then real_code contains code converted * to the cnnnn format. */ static char *check_code(apr_pool_t *p, const char *code, char **real_code) { char *word; char base = 'X'; int modifier = 0; int num = 0; int factor; /* 0.0.4 compatibility? */ if ((code[0] == 'A') || (code[0] == 'M')) { *real_code = (char *)code; return NULL; } /* <base> [plus] {<num> <type>}* */ /* <base> */ word = ap_getword_conf(p, &code); if (!strncasecmp(word, "now", 1) || !strncasecmp(word, "access", 1)) { base = 'A'; } else if (!strncasecmp(word, "modification", 1)) { base = 'M'; } else { return apr_pstrcat(p, "bad expires code, unrecognised <base> '", word, "'", NULL); } /* [plus] */ word = ap_getword_conf(p, &code); if (!strncasecmp(word, "plus", 1)) { word = ap_getword_conf(p, &code); } /* {<num> <type>}* */ while (word[0]) { /* <num> */ if (apr_isdigit(word[0])) { num = atoi(word); } else { return apr_pstrcat(p, "bad expires code, numeric value expected <num> '", word, "'", NULL); } /* <type> */ word = ap_getword_conf(p, &code); if (word[0] == '\0') { return apr_pstrcat(p, "bad expires code, missing <type>", NULL); } if (!strncasecmp(word, "years", 1)) { factor = 60 * 60 * 24 * 365; } else if (!strncasecmp(word, "months", 2)) { factor = 60 * 60 * 24 * 30; } else if (!strncasecmp(word, "weeks", 1)) { factor = 60 * 60 * 24 * 7; } else if (!strncasecmp(word, "days", 1)) { factor = 60 * 60 * 24; } else if (!strncasecmp(word, "hours", 1)) { factor = 60 * 60; } else if (!strncasecmp(word, "minutes", 2)) { factor = 60; } else if (!strncasecmp(word, "seconds", 1)) { factor = 1; } else { return apr_pstrcat(p, "bad expires code, unrecognised <type>", "'", word, "'", NULL); } modifier = modifier + factor * num; /* next <num> */ word = ap_getword_conf(p, &code); } *real_code = apr_psprintf(p, "%c%d", base, modifier); return NULL; } static const char *set_expiresbytype(cmd_parms *cmd, void *in_dir_config, const char *mime, const char *code) { expires_dir_config *dir_config = in_dir_config; char *response, *real_code; const char *check; check = ap_strrchr_c(mime, '/'); if (check == NULL) { return "Invalid mimetype: should contain a slash"; } if ((strlen(++check) == 1) && (*check == '*')) { dir_config->wildcards = 1; } if ((response = check_code(cmd->pool, code, &real_code)) == NULL) { apr_table_setn(dir_config->expiresbytype, mime, real_code); return NULL; } return apr_pstrcat(cmd->pool, "'ExpiresByType ", mime, " ", code, "': ", response, NULL); } static const char *set_expiresdefault(cmd_parms *cmd, void *in_dir_config, const char *code) { expires_dir_config * dir_config = in_dir_config; char *response, *real_code; if ((response = check_code(cmd->pool, code, &real_code)) == NULL) { dir_config->expiresdefault = real_code; return NULL; } return apr_pstrcat(cmd->pool, "'ExpiresDefault ", code, "': ", response, NULL); } static const command_rec expires_cmds[] = { AP_INIT_FLAG("ExpiresActive", set_expiresactive, NULL, DIR_CMD_PERMS, "Limited to 'on' or 'off'"), AP_INIT_TAKE2("ExpiresByType", set_expiresbytype, NULL, DIR_CMD_PERMS, "a MIME type followed by an expiry date code"), AP_INIT_TAKE1("ExpiresDefault", set_expiresdefault, NULL, DIR_CMD_PERMS, "an expiry date code"), {NULL} }; static void *merge_expires_dir_configs(apr_pool_t *p, void *basev, void *addv) { expires_dir_config *new = (expires_dir_config *) apr_pcalloc(p, sizeof(expires_dir_config)); expires_dir_config *base = (expires_dir_config *) basev; expires_dir_config *add = (expires_dir_config *) addv; if (add->active == ACTIVE_DONTCARE) { new->active = base->active; } else { new->active = add->active; } if (add->expiresdefault != NULL) { new->expiresdefault = add->expiresdefault; } else { new->expiresdefault = base->expiresdefault; } new->wildcards = add->wildcards; new->expiresbytype = apr_table_overlay(p, add->expiresbytype, base->expiresbytype); return new; } /* * Handle the setting of the expiration response header fields according * to our criteria. */ static int set_expiration_fields(request_rec *r, const char *code, apr_table_t *t) { apr_time_t base; apr_time_t additional; apr_time_t expires; int additional_sec; char *timestr; switch (code[0]) { case 'M': if (r->finfo.filetype == APR_NOFILE) { /* file doesn't exist on disk, so we can't do anything based on * modification time. Note that this does _not_ log an error. */ return DECLINED; } base = r->finfo.mtime; additional_sec = atoi(&code[1]); additional = apr_time_from_sec(additional_sec); break; case 'A': /* there's been some discussion and it's possible that * 'access time' will be stored in request structure */ base = r->request_time; additional_sec = atoi(&code[1]); additional = apr_time_from_sec(additional_sec); break; default: /* expecting the add_* routines to be case-hardened this * is just a reminder that module is beta */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01500) "internal error: bad expires code: %s", r->filename); return HTTP_INTERNAL_SERVER_ERROR; } expires = base + additional; if (expires < r->request_time) { expires = r->request_time; } apr_table_mergen(t, "Cache-Control", apr_psprintf(r->pool, "max-age=%" APR_TIME_T_FMT, apr_time_sec(expires - r->request_time))); timestr = apr_palloc(r->pool, APR_RFC822_DATE_LEN); apr_rfc822_date(timestr, expires); apr_table_setn(t, "Expires", timestr); return OK; } /* * Output filter to set the Expires response header field * according to the content-type of the response -- if it hasn't * already been set. */ static apr_status_t expires_filter(ap_filter_t *f, apr_bucket_brigade *b) { request_rec *r; expires_dir_config *conf; const char *expiry; apr_table_t *t; /* Don't add Expires headers to errors */ if (ap_is_HTTP_ERROR(f->r->status)) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, b); } r = f->r; conf = (expires_dir_config *) ap_get_module_config(r->per_dir_config, &expires_module); /* * Check to see which output header table we should use; * mod_cgi loads script fields into r->err_headers_out, * for instance. */ expiry = apr_table_get(r->err_headers_out, "Expires"); if (expiry != NULL) { t = r->err_headers_out; } else { expiry = apr_table_get(r->headers_out, "Expires"); t = r->headers_out; } if (expiry == NULL) { /* * No expiration has been set, so we can apply any managed by * this module. First, check to see if there is an applicable * ExpiresByType directive. */ expiry = apr_table_get(conf->expiresbytype, ap_field_noparam(r->pool, r->content_type)); if (expiry == NULL) { int usedefault = 1; /* * See if we have a wildcard entry for the major type. */ if (conf->wildcards) { char *checkmime; char *spos; checkmime = apr_pstrdup(r->pool, r->content_type); spos = checkmime ? ap_strchr(checkmime, '/') : NULL; if (spos != NULL) { /* * Without a '/' character, nothing we have will match. * However, we have one. */ if (strlen(++spos) > 0) { *spos++ = '*'; *spos = '\0'; } else { checkmime = apr_pstrcat(r->pool, checkmime, "*", NULL); } expiry = apr_table_get(conf->expiresbytype, checkmime); usedefault = (expiry == NULL); } } if (usedefault) { /* * Use the ExpiresDefault directive */ expiry = conf->expiresdefault; } } if (expiry != NULL) { set_expiration_fields(r, expiry, t); } } ap_remove_output_filter(f); return ap_pass_brigade(f->next, b); } static void expires_insert_filter(request_rec *r) { expires_dir_config *conf; /* Don't add Expires headers to errors */ if (ap_is_HTTP_ERROR(r->status)) { return; } /* Say no to subrequests */ if (r->main != NULL) { return; } conf = (expires_dir_config *) ap_get_module_config(r->per_dir_config, &expires_module); /* Check to see if the filter is enabled and if there are any applicable * config directives for this directory scope */ if (conf->active != ACTIVE_ON || (apr_is_empty_table(conf->expiresbytype) && !conf->expiresdefault)) { return; } ap_add_output_filter("MOD_EXPIRES", NULL, r, r->connection); } static void register_hooks(apr_pool_t *p) { /* mod_expires needs to run *before* the cache save filter which is * AP_FTYPE_CONTENT_SET-1. Otherwise, our expires won't be honored. */ ap_register_output_filter("MOD_EXPIRES", expires_filter, NULL, AP_FTYPE_CONTENT_SET-2); ap_hook_insert_error_filter(expires_insert_filter, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_insert_filter(expires_insert_filter, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(expires) = { STANDARD20_MODULE_STUFF, create_dir_expires_config, /* dir config creater */ merge_expires_dir_configs, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server configs */ expires_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; �����������������������������������������������httpd-2.4.41/modules/metadata/mod_headers.dep�������������������������������������������������������0000644�0000000�0000050�00000004015�12674411515�017436� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_headers.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_headers.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\ssl\mod_ssl.h"\ �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_headers.exp�������������������������������������������������������0000644�0000000�0000050�00000000017�10150161574�017452� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������headers_module �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_mime_magic.mak����������������������������������������������������0000644�0000000�0000050�00000024143�12701473373�020117� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_mime_magic.dsp !IF "$(CFG)" == "" CFG=mod_mime_magic - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_mime_magic - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_mime_magic - Win32 Release" && "$(CFG)" != "mod_mime_magic - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_mime_magic.mak" CFG="mod_mime_magic - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_mime_magic - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_mime_magic - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_mime_magic - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_mime_magic.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_mime_magic.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_mime_magic.obj" -@erase "$(INTDIR)\mod_mime_magic.res" -@erase "$(INTDIR)\mod_mime_magic_src.idb" -@erase "$(INTDIR)\mod_mime_magic_src.pdb" -@erase "$(OUTDIR)\mod_mime_magic.exp" -@erase "$(OUTDIR)\mod_mime_magic.lib" -@erase "$(OUTDIR)\mod_mime_magic.pdb" -@erase "$(OUTDIR)\mod_mime_magic.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_mime_magic_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_mime_magic.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_mime_magic.so" /d LONG_NAME="mime_magic_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_mime_magic.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_mime_magic.pdb" /debug /out:"$(OUTDIR)\mod_mime_magic.so" /implib:"$(OUTDIR)\mod_mime_magic.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_mime_magic.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_mime_magic.obj" \ "$(INTDIR)\mod_mime_magic.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_mime_magic.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_mime_magic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_mime_magic.so" if exist .\Release\mod_mime_magic.so.manifest mt.exe -manifest .\Release\mod_mime_magic.so.manifest -outputresource:.\Release\mod_mime_magic.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_mime_magic - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_mime_magic.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_mime_magic.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_mime_magic.obj" -@erase "$(INTDIR)\mod_mime_magic.res" -@erase "$(INTDIR)\mod_mime_magic_src.idb" -@erase "$(INTDIR)\mod_mime_magic_src.pdb" -@erase "$(OUTDIR)\mod_mime_magic.exp" -@erase "$(OUTDIR)\mod_mime_magic.lib" -@erase "$(OUTDIR)\mod_mime_magic.pdb" -@erase "$(OUTDIR)\mod_mime_magic.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_mime_magic_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_mime_magic.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_mime_magic.so" /d LONG_NAME="mime_magic_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_mime_magic.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_mime_magic.pdb" /debug /out:"$(OUTDIR)\mod_mime_magic.so" /implib:"$(OUTDIR)\mod_mime_magic.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_mime_magic.so LINK32_OBJS= \ "$(INTDIR)\mod_mime_magic.obj" \ "$(INTDIR)\mod_mime_magic.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_mime_magic.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_mime_magic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_mime_magic.so" if exist .\Debug\mod_mime_magic.so.manifest mt.exe -manifest .\Debug\mod_mime_magic.so.manifest -outputresource:.\Debug\mod_mime_magic.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_mime_magic.dep") !INCLUDE "mod_mime_magic.dep" !ELSE !MESSAGE Warning: cannot find "mod_mime_magic.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_mime_magic - Win32 Release" || "$(CFG)" == "mod_mime_magic - Win32 Debug" !IF "$(CFG)" == "mod_mime_magic - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\metadata" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_mime_magic - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\metadata" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_mime_magic - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\metadata" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_mime_magic - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\metadata" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_mime_magic - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\metadata" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\metadata" !ELSEIF "$(CFG)" == "mod_mime_magic - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\metadata" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\metadata" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_mime_magic - Win32 Release" "$(INTDIR)\mod_mime_magic.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_mime_magic.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_mime_magic.so" /d LONG_NAME="mime_magic_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_mime_magic - Win32 Debug" "$(INTDIR)\mod_mime_magic.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_mime_magic.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_mime_magic.so" /d LONG_NAME="mime_magic_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_mime_magic.c "$(INTDIR)\mod_mime_magic.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_unique_id.c�������������������������������������������������������0000644�0000000�0000050�00000030221�13171100705�017442� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_unique_id.c: generate a unique identifier for each request * * Original author: Dean Gaudet <dgaudet@arctic.org> * UUencoding modified by: Alvaro Martinez Echevarria <alvaro@lander.es> */ #define APR_WANT_BYTEFUNC /* for htons() et al */ #include "apr_want.h" #include "apr_general.h" /* for APR_OFFSETOF */ #include "apr_network_io.h" #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_protocol.h" /* for ap_hook_post_read_request */ #define ROOT_SIZE 10 typedef struct { unsigned int stamp; char root[ROOT_SIZE]; unsigned short counter; unsigned int thread_index; } unique_id_rec; /* We are using thread_index (the index into the scoreboard), because we * cannot guarantee the thread_id will be an integer. * * This code looks like it won't give a unique ID with the new thread logic. * It will. The reason is, we don't increment the counter in a thread_safe * manner. Because the thread_index is also in the unique ID now, this does * not matter. In order for the id to not be unique, the same thread would * have to get the same counter twice in the same second. */ /* Comments: * * We want an identifier which is unique across all hits, everywhere. * "everywhere" includes multiple httpd instances on the same machine, or on * multiple machines. Essentially "everywhere" should include all possible * httpds across all servers at a particular "site". We make some assumptions * that if the site has a cluster of machines then their time is relatively * synchronized. We also assume that the first address returned by a * gethostbyname (gethostname()) is unique across all the machines at the * "site". * * The root is assumed to absolutely uniquely identify this one child * from all other currently running children on all servers (including * this physical server if it is running multiple httpds) from each * other. * * The stamp and counter are used to distinguish all hits for a * particular root. The stamp is updated using r->request_time, * saving cpu cycles. The counter is never reset, and is used to * permit up to 64k requests in a single second by a single child. * * The 144-bits of unique_id_rec are encoded using the alphabet * [A-Za-z0-9@-], resulting in 24 bytes of printable characters. That is then * stuffed into the environment variable UNIQUE_ID so that it is available to * other modules. The alphabet choice differs from normal base64 encoding * [A-Za-z0-9+/] because + and / are special characters in URLs and we want to * make it easy to use UNIQUE_ID in URLs. * * Note that UNIQUE_ID should be considered an opaque token by other * applications. No attempt should be made to dissect its internal components. * It is an abstraction that may change in the future as the needs of this * module change. * * It is highly desirable that identifiers exist for "eternity". But future * needs (such as much faster webservers, or moving to a * multithreaded server) may dictate a need to change the contents of * unique_id_rec. Such a future implementation should ensure that the first * field is still a time_t stamp. By doing that, it is possible for a site to * have a "flag second" in which they stop all of their old-format servers, * wait one entire second, and then start all of their new-servers. This * procedure will ensure that the new space of identifiers is completely unique * from the old space. (Since the first four unencoded bytes always differ.) * * Note: previous implementations used 32-bits of IP address plus pid * in place of the PRNG output in the "root" field. This was * insufficient for IPv6-only hosts, required working DNS to determine * a unique IP address (fragile), and needed a [0, 1) second sleep * call at startup to avoid pid reuse. Use of the PRNG avoids all * these issues. */ /* * Sun Jun 7 05:43:49 CEST 1998 -- Alvaro * More comments: * 1) The UUencoding prodecure is now done in a general way, avoiding the problems * with sizes and paddings that can arise depending on the architecture. Now the * offsets and sizes of the elements of the unique_id_rec structure are calculated * in unique_id_global_init; and then used to duplicate the structure without the * paddings that might exist. The multithreaded server fix should be now very easy: * just add a new "tid" field to the unique_id_rec structure, and increase by one * UNIQUE_ID_REC_MAX. * 2) unique_id_rec.stamp has been changed from "time_t" to "unsigned int", because * its size is 64bits on some platforms (linux/alpha), and this caused problems with * htonl/ntohl. Well, this shouldn't be a problem till year 2106. */ /* * XXX: We should have a per-thread counter and not use cur_unique_id.counter * XXX: in all threads, because this is bad for performance on multi-processor * XXX: systems: Writing to the same address from several CPUs causes cache * XXX: thrashing. */ static unique_id_rec cur_unique_id; /* * Number of elements in the structure unique_id_rec. */ #define UNIQUE_ID_REC_MAX 4 static unsigned short unique_id_rec_offset[UNIQUE_ID_REC_MAX], unique_id_rec_size[UNIQUE_ID_REC_MAX], unique_id_rec_total_size, unique_id_rec_size_uu; static int unique_id_global_init(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *main_server) { /* * Calculate the sizes and offsets in cur_unique_id. */ unique_id_rec_offset[0] = APR_OFFSETOF(unique_id_rec, stamp); unique_id_rec_size[0] = sizeof(cur_unique_id.stamp); unique_id_rec_offset[1] = APR_OFFSETOF(unique_id_rec, root); unique_id_rec_size[1] = sizeof(cur_unique_id.root); unique_id_rec_offset[2] = APR_OFFSETOF(unique_id_rec, counter); unique_id_rec_size[2] = sizeof(cur_unique_id.counter); unique_id_rec_offset[3] = APR_OFFSETOF(unique_id_rec, thread_index); unique_id_rec_size[3] = sizeof(cur_unique_id.thread_index); unique_id_rec_total_size = unique_id_rec_size[0] + unique_id_rec_size[1] + unique_id_rec_size[2] + unique_id_rec_size[3]; /* * Calculate the size of the structure when encoded. */ unique_id_rec_size_uu = (unique_id_rec_total_size*8+5)/6; return OK; } static void unique_id_child_init(apr_pool_t *p, server_rec *s) { ap_random_insecure_bytes(&cur_unique_id.root, sizeof(cur_unique_id.root)); /* * If we use 0 as the initial counter we have a little less protection * against restart problems, and a little less protection against a clock * going backwards in time. */ ap_random_insecure_bytes(&cur_unique_id.counter, sizeof(cur_unique_id.counter)); } /* NOTE: This is *NOT* the same encoding used by base64encode ... the last two * characters should be + and /. But those two characters have very special * meanings in URLs, and we want to make it easy to use identifiers in * URLs. So we replace them with @ and -. */ static const char uuencoder[64] = { 'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', 'I', 'J', 'K', 'L', 'M', 'N', 'O', 'P', 'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X', 'Y', 'Z', 'a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x', 'y', 'z', '0', '1', '2', '3', '4', '5', '6', '7', '8', '9', '@', '-', }; static const char *gen_unique_id(const request_rec *r) { char *str; /* * Buffer padded with two final bytes, used to copy the unique_id_red * structure without the internal paddings that it could have. */ unique_id_rec new_unique_id; struct { unique_id_rec foo; unsigned char pad[2]; } paddedbuf; unsigned char *x,*y; unsigned short counter; int i,j,k; memcpy(&new_unique_id.root, &cur_unique_id.root, ROOT_SIZE); new_unique_id.counter = cur_unique_id.counter; new_unique_id.stamp = htonl((unsigned int)apr_time_sec(r->request_time)); new_unique_id.thread_index = htonl((unsigned int)r->connection->id); /* we'll use a temporal buffer to avoid uuencoding the possible internal * paddings of the original structure */ x = (unsigned char *) &paddedbuf; k = 0; for (i = 0; i < UNIQUE_ID_REC_MAX; i++) { y = ((unsigned char *) &new_unique_id) + unique_id_rec_offset[i]; for (j = 0; j < unique_id_rec_size[i]; j++, k++) { x[k] = y[j]; } } /* * We reset two more bytes just in case padding is needed for the uuencoding. */ x[k++] = '\0'; x[k++] = '\0'; /* alloc str and do the uuencoding */ str = (char *)apr_palloc(r->pool, unique_id_rec_size_uu + 1); k = 0; for (i = 0; i < unique_id_rec_total_size; i += 3) { y = x + i; str[k++] = uuencoder[y[0] >> 2]; str[k++] = uuencoder[((y[0] & 0x03) << 4) | ((y[1] & 0xf0) >> 4)]; if (k == unique_id_rec_size_uu) break; str[k++] = uuencoder[((y[1] & 0x0f) << 2) | ((y[2] & 0xc0) >> 6)]; if (k == unique_id_rec_size_uu) break; str[k++] = uuencoder[y[2] & 0x3f]; } str[k++] = '\0'; /* and increment the identifier for the next call */ counter = ntohs(new_unique_id.counter) + 1; cur_unique_id.counter = htons(counter); return str; } /* * There are two ways the generation of a unique id can be triggered: * * - from the post_read_request hook which calls set_unique_id() * - from error logging via the generate_log_id hook which calls * generate_log_id(). This may happen before or after set_unique_id() * has been called, or not at all. */ static int generate_log_id(const conn_rec *c, const request_rec *r, const char **id) { /* we do not care about connection ids */ if (r == NULL) return DECLINED; /* XXX: do we need special handling for internal redirects? */ /* if set_unique_id() has been called for this request, use it */ *id = apr_table_get(r->subprocess_env, "UNIQUE_ID"); if (!*id) *id = gen_unique_id(r); return OK; } static int set_unique_id(request_rec *r) { const char *id = NULL; /* copy the unique_id if this is an internal redirect (we're never * actually called for sub requests, so we don't need to test for * them) */ if (r->prev) { id = apr_table_get(r->subprocess_env, "REDIRECT_UNIQUE_ID"); } if (!id) { /* if we have a log id, it was set by our generate_log_id() function * and we should reuse the same id */ id = r->log_id; } if (!id) { id = gen_unique_id(r); } /* set the environment variable */ apr_table_setn(r->subprocess_env, "UNIQUE_ID", id); return DECLINED; } static void register_hooks(apr_pool_t *p) { ap_hook_post_config(unique_id_global_init, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_child_init(unique_id_child_init, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_read_request(set_unique_id, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_generate_log_id(generate_log_id, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(unique_id) = { STANDARD20_MODULE_STUFF, NULL, /* dir config creater */ NULL, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server configs */ NULL, /* command apr_table_t */ register_hooks /* register hooks */ }; �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_cern_meta.mak�����������������������������������������������������0000644�0000000�0000050�00000023765�12701473373�017776� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_cern_meta.dsp !IF "$(CFG)" == "" CFG=mod_cern_meta - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_cern_meta - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_cern_meta - Win32 Release" && "$(CFG)" != "mod_cern_meta - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_cern_meta.mak" CFG="mod_cern_meta - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_cern_meta - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_cern_meta - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_cern_meta - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_cern_meta.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_cern_meta.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_cern_meta.obj" -@erase "$(INTDIR)\mod_cern_meta.res" -@erase "$(INTDIR)\mod_cern_meta_src.idb" -@erase "$(INTDIR)\mod_cern_meta_src.pdb" -@erase "$(OUTDIR)\mod_cern_meta.exp" -@erase "$(OUTDIR)\mod_cern_meta.lib" -@erase "$(OUTDIR)\mod_cern_meta.pdb" -@erase "$(OUTDIR)\mod_cern_meta.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_cern_meta_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_cern_meta.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_cern_meta.so" /d LONG_NAME="cern_meta_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_cern_meta.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_cern_meta.pdb" /debug /out:"$(OUTDIR)\mod_cern_meta.so" /implib:"$(OUTDIR)\mod_cern_meta.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_cern_meta.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_cern_meta.obj" \ "$(INTDIR)\mod_cern_meta.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_cern_meta.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_cern_meta.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_cern_meta.so" if exist .\Release\mod_cern_meta.so.manifest mt.exe -manifest .\Release\mod_cern_meta.so.manifest -outputresource:.\Release\mod_cern_meta.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_cern_meta - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_cern_meta.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_cern_meta.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_cern_meta.obj" -@erase "$(INTDIR)\mod_cern_meta.res" -@erase "$(INTDIR)\mod_cern_meta_src.idb" -@erase "$(INTDIR)\mod_cern_meta_src.pdb" -@erase "$(OUTDIR)\mod_cern_meta.exp" -@erase "$(OUTDIR)\mod_cern_meta.lib" -@erase "$(OUTDIR)\mod_cern_meta.pdb" -@erase "$(OUTDIR)\mod_cern_meta.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_cern_meta_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_cern_meta.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_cern_meta.so" /d LONG_NAME="cern_meta_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_cern_meta.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_cern_meta.pdb" /debug /out:"$(OUTDIR)\mod_cern_meta.so" /implib:"$(OUTDIR)\mod_cern_meta.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_cern_meta.so LINK32_OBJS= \ "$(INTDIR)\mod_cern_meta.obj" \ "$(INTDIR)\mod_cern_meta.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_cern_meta.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_cern_meta.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_cern_meta.so" if exist .\Debug\mod_cern_meta.so.manifest mt.exe -manifest .\Debug\mod_cern_meta.so.manifest -outputresource:.\Debug\mod_cern_meta.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_cern_meta.dep") !INCLUDE "mod_cern_meta.dep" !ELSE !MESSAGE Warning: cannot find "mod_cern_meta.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_cern_meta - Win32 Release" || "$(CFG)" == "mod_cern_meta - Win32 Debug" !IF "$(CFG)" == "mod_cern_meta - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\metadata" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_cern_meta - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\metadata" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_cern_meta - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\metadata" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_cern_meta - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\metadata" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_cern_meta - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\metadata" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\metadata" !ELSEIF "$(CFG)" == "mod_cern_meta - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\metadata" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\metadata" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_cern_meta - Win32 Release" "$(INTDIR)\mod_cern_meta.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_cern_meta.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_cern_meta.so" /d LONG_NAME="cern_meta_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_cern_meta - Win32 Debug" "$(INTDIR)\mod_cern_meta.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_cern_meta.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_cern_meta.so" /d LONG_NAME="cern_meta_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_cern_meta.c "$(INTDIR)\mod_cern_meta.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �����������httpd-2.4.41/modules/metadata/mod_env.exp�����������������������������������������������������������0000644�0000000�0000050�00000000013�10150161574�016623� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������env_module ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_headers.mak�������������������������������������������������������0000644�0000000�0000050�00000023535�12701473373�017447� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_headers.dsp !IF "$(CFG)" == "" CFG=mod_headers - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_headers - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_headers - Win32 Release" && "$(CFG)" != "mod_headers - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_headers.mak" CFG="mod_headers - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_headers - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_headers - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_headers - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_headers.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_headers.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_headers.obj" -@erase "$(INTDIR)\mod_headers.res" -@erase "$(INTDIR)\mod_headers_src.idb" -@erase "$(INTDIR)\mod_headers_src.pdb" -@erase "$(OUTDIR)\mod_headers.exp" -@erase "$(OUTDIR)\mod_headers.lib" -@erase "$(OUTDIR)\mod_headers.pdb" -@erase "$(OUTDIR)\mod_headers.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_headers_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_headers.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_headers.so" /d LONG_NAME="headers_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_headers.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_headers.pdb" /debug /out:"$(OUTDIR)\mod_headers.so" /implib:"$(OUTDIR)\mod_headers.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_headers.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_headers.obj" \ "$(INTDIR)\mod_headers.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_headers.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_headers.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_headers.so" if exist .\Release\mod_headers.so.manifest mt.exe -manifest .\Release\mod_headers.so.manifest -outputresource:.\Release\mod_headers.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_headers - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_headers.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_headers.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_headers.obj" -@erase "$(INTDIR)\mod_headers.res" -@erase "$(INTDIR)\mod_headers_src.idb" -@erase "$(INTDIR)\mod_headers_src.pdb" -@erase "$(OUTDIR)\mod_headers.exp" -@erase "$(OUTDIR)\mod_headers.lib" -@erase "$(OUTDIR)\mod_headers.pdb" -@erase "$(OUTDIR)\mod_headers.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_headers_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_headers.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_headers.so" /d LONG_NAME="headers_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_headers.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_headers.pdb" /debug /out:"$(OUTDIR)\mod_headers.so" /implib:"$(OUTDIR)\mod_headers.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_headers.so LINK32_OBJS= \ "$(INTDIR)\mod_headers.obj" \ "$(INTDIR)\mod_headers.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_headers.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_headers.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_headers.so" if exist .\Debug\mod_headers.so.manifest mt.exe -manifest .\Debug\mod_headers.so.manifest -outputresource:.\Debug\mod_headers.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_headers.dep") !INCLUDE "mod_headers.dep" !ELSE !MESSAGE Warning: cannot find "mod_headers.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_headers - Win32 Release" || "$(CFG)" == "mod_headers - Win32 Debug" !IF "$(CFG)" == "mod_headers - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\metadata" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_headers - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\metadata" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_headers - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\metadata" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_headers - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\metadata" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_headers - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\metadata" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\metadata" !ELSEIF "$(CFG)" == "mod_headers - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\metadata" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\metadata" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_headers - Win32 Release" "$(INTDIR)\mod_headers.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_headers.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_headers.so" /d LONG_NAME="headers_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_headers - Win32 Debug" "$(INTDIR)\mod_headers.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_headers.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_headers.so" /d LONG_NAME="headers_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_headers.c "$(INTDIR)\mod_headers.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_env.dsp�����������������������������������������������������������0000644�0000000�0000050�00000010431�10551346420�016622� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_env" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_env - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_env.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_env.mak" CFG="mod_env - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_env - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_env - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_env - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_env_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_env.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_env.so" /d LONG_NAME="env_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_env.so" /base:@..\..\os\win32\BaseAddr.ref,mod_env.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_env.so" /base:@..\..\os\win32\BaseAddr.ref,mod_env.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_env.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_env - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_env_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_env.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_env.so" /d LONG_NAME="env_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_env.so" /base:@..\..\os\win32\BaseAddr.ref,mod_env.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_env.so" /base:@..\..\os\win32\BaseAddr.ref,mod_env.so # Begin Special Build Tool TargetPath=.\Debug\mod_env.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_env - Win32 Release" # Name "mod_env - Win32 Debug" # Begin Source File SOURCE=.\mod_env.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_setenvif.exp������������������������������������������������������0000644�0000000�0000050�00000000020�10150161574�017654� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������setenvif_module ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_version.c���������������������������������������������������������0000644�0000000�0000050�00000020677�12757564422�017206� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_version.c * Allow conditional configuration depending on the httpd version * * André Malo (nd/perlig.de), January 2004 * * Some stuff coded here is heavily based on the core <IfModule> * containers. * * The module makes the following confgurations possible: * * <IfVersion op major.minor.patch> * # conditional config here ... *</IfVersion> * * where "op" is one of: * = / == equal * > greater than * >= greater or equal * < less than * <= less or equal * * If minor version and patch level are omitted they are assumed to be 0. * * Alternatively you can match the whole version (including some vendor-added * string of the CORE version, see ap_release.h) against a regular expression: * * <IfVersion op regex> * # conditional config here ... *</IfVersion> * * where "op" is one of: * = / == match; regex must be surrounded by slashes * ~ match; regex MAY NOT be surrounded by slashes * * Note that all operators may be preceded by an exclamation mark * (without spaces) in order to reverse their meaning. * */ #include "apr.h" #include "apr_strings.h" #include "apr_lib.h" #include "httpd.h" #include "http_config.h" #include "http_log.h" /* module structure */ module AP_MODULE_DECLARE_DATA version_module; /* queried httpd version */ static ap_version_t httpd_version; /* * compare the supplied version with the core one */ static int compare_version(char *version_string, const char **error) { char *p = version_string, *ep; int version[3] = {0, 0, 0}; int c = 0; *error = "Version appears to be invalid. It must have the format " "major[.minor[.patch]] where major, minor and patch are " "numbers."; if (!apr_isdigit(*p)) { return 0; } /* parse supplied version */ ep = version_string + strlen(version_string); while (p <= ep && c < 3) { if (*p == '.') { *p = '\0'; } if (!*p) { version[c++] = atoi(version_string); version_string = ++p; continue; } if (!apr_isdigit(*p)) { break; } ++p; } if (p < ep) { /* syntax error */ return 0; } *error = NULL; if (httpd_version.major > version[0]) { return 1; } else if (httpd_version.major < version[0]) { return -1; } else if (httpd_version.minor > version[1]) { return 1; } else if (httpd_version.minor < version[1]) { return -1; } else if (httpd_version.patch > version[2]) { return 1; } else if (httpd_version.patch < version[2]) { return -1; } /* seems to be the same */ return 0; } /* * match version against a regular expression */ static int match_version(apr_pool_t *pool, char *version_string, const char **error) { ap_regex_t *compiled; const char *to_match; int rc; compiled = ap_pregcomp(pool, version_string, AP_REG_EXTENDED); if (!compiled) { *error = "Unable to compile regular expression"; return 0; } *error = NULL; to_match = apr_psprintf(pool, "%d.%d.%d%s", httpd_version.major, httpd_version.minor, httpd_version.patch, httpd_version.add_string); rc = !ap_regexec(compiled, to_match, 0, NULL, 0); ap_pregfree(pool, compiled); return rc; } /* * Implements the <IfVersion> container */ static const char *start_ifversion(cmd_parms *cmd, void *mconfig, const char *arg1, const char *arg2, const char *arg3) { const char *endp; int reverse = 0, done = 0, match = 0, compare; const char *p, *error; char c; /* supplying one argument is possible, we assume an equality check then */ if (!arg2) { arg2 = arg1; arg1 = "="; } /* surrounding quotes without operator */ if (!arg3 && *arg2 == '>' && !arg2[1]) { arg3 = ">"; arg2 = arg1; arg1 = "="; } /* the third argument makes version surrounding quotes plus operator * possible. */ endp = arg2 + strlen(arg2); if ( endp == arg2 || (!(arg3 && *arg3 == '>' && !arg3[1]) && *--endp != '>')) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive missing closing '>'", NULL); } p = arg1; if (*p == '!') { reverse = 1; if (p[1]) { ++p; } } c = *p++; if (!*p || (*p == '=' && !p[1] && c != '~')) { if (!httpd_version.major) { ap_get_server_revision(&httpd_version); } done = 1; switch (c) { case '=': /* normal comparison */ if (*arg2 != '/') { compare = compare_version(apr_pstrmemdup(cmd->temp_pool, arg2, endp-arg2), &error); if (error) { return error; } match = !compare; break; } /* regexp otherwise */ if (endp == ++arg2 || *--endp != '/') { return "Missing delimiting / of regular expression."; } case '~': /* regular expression */ match = match_version(cmd->temp_pool, apr_pstrmemdup(cmd->temp_pool, arg2, endp-arg2), &error); if (error) { return error; } break; case '<': compare = compare_version(apr_pstrmemdup(cmd->temp_pool, arg2, endp-arg2), &error); if (error) { return error; } match = ((-1 == compare) || (*p && !compare)); break; case '>': compare = compare_version(apr_pstrmemdup(cmd->temp_pool, arg2, endp-arg2), &error); if (error) { return error; } match = ((1 == compare) || (*p && !compare)); break; default: done = 0; break; } } if (!done) { return apr_pstrcat(cmd->pool, "unrecognized operator '", arg1, "'", NULL); } if ((!reverse && match) || (reverse && !match)) { ap_directive_t *parent = NULL; ap_directive_t *current = NULL; const char *retval; retval = ap_build_cont_config(cmd->pool, cmd->temp_pool, cmd, ¤t, &parent, "<IfVersion"); *(ap_directive_t **)mconfig = current; return retval; } *(ap_directive_t **)mconfig = NULL; return ap_soak_end_container(cmd, "<IfVersion"); } static const command_rec version_cmds[] = { AP_INIT_TAKE123("<IfVersion", start_ifversion, NULL, EXEC_ON_READ | OR_ALL, "a comparison operator, a version (and a delimiter)"), { NULL } }; AP_DECLARE_MODULE(version) = { STANDARD20_MODULE_STUFF, NULL, /* dir config creater */ NULL, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server configs */ version_cmds, /* command apr_table_t */ NULL, /* register hooks */ }; �����������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_version.dep�������������������������������������������������������0000644�0000000�0000050�00000003110�12674411515�017503� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_version.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_version.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/NWGNUmakefile���������������������������������������������������������0000644�0000000�0000050�00000010237�11540562746�017020� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/cernmeta.nlm \ $(OBJDIR)/expires.nlm \ $(OBJDIR)/headers.nlm \ $(OBJDIR)/mimemagi.nlm \ $(OBJDIR)/modident.nlm \ $(OBJDIR)/uniqueid.nlm \ $(OBJDIR)/usertrk.nlm \ $(OBJDIR)/modversion.nlm \ $(OBJDIR)/remoteip.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_mime_magic.dep����������������������������������������������������0000644�0000000�0000050�00000004074�12674411515�020117� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_mime_magic.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_mime_magic.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_cern_meta.exp�����������������������������������������������������0000644�0000000�0000050�00000000021�10150161574�017767� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������cern_meta_module ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_cern_meta.c�������������������������������������������������������0000644�0000000�0000050�00000026660�12573541030�017436� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_cern_meta.c * version 0.1.0 * status beta * * Andrew Wilson <Andrew.Wilson@cm.cf.ac.uk> 25.Jan.96 * * *** IMPORTANT *** * This version of mod_cern_meta.c controls Meta File behaviour on a * per-directory basis. Previous versions of the module defined behaviour * on a per-server basis. The upshot is that you'll need to revisit your * configuration files in order to make use of the new module. * *** * * Emulate the CERN HTTPD Meta file semantics. Meta files are HTTP * headers that can be output in addition to the normal range of * headers for each file accessed. They appear rather like the Apache * .asis files, and are able to provide a crude way of influencing * the Expires: header, as well as providing other curiosities. * There are many ways to manage meta information, this one was * chosen because there is already a large number of CERN users * who can exploit this module. It should be noted that there are probably * more sensitive ways of managing the Expires: header specifically. * * The module obeys the following directives, which can appear * in the server's .conf files and in .htaccess files. * * MetaFiles <on|off> * * turns on|off meta file processing for any directory. * Default value is off * * # turn on MetaFiles in this directory * MetaFiles on * * MetaDir <directory name> * * specifies the name of the directory in which Apache can find * meta information files. The directory is usually a 'hidden' * subdirectory of the directory that contains the file being * accessed. eg: * * # .meta files are in the *same* directory as the * # file being accessed * MetaDir . * * the default is to look in a '.web' subdirectory. This is the * same as for CERN 3.+ webservers and behaviour is the same as * for the directive: * * MetaDir .web * * MetaSuffix <meta file suffix> * * specifies the file name suffix for the file containing the * meta information. eg: * * # our meta files are suffixed with '.cern_meta' * MetaSuffix .cern_meta * * the default is to look for files with the suffix '.meta'. This * behaviour is the same as for the directive: * * MetaSuffix .meta * * When accessing the file * * DOCUMENT_ROOT/somedir/index.html * * this module will look for the file * * DOCUMENT_ROOT/somedir/.web/index.html.meta * * and will use its contents to generate additional MIME header * information. * * For more information on the CERN Meta file semantics see: * * http://www.w3.org/hypertext/WWW/Daemon/User/Config/General.html#MetaDir * * Change-log: * 29.Jan.96 pfopen/pfclose instead of fopen/fclose * DECLINE when real file not found, we may be checking each * of the index.html/index.shtml/index.htm variants and don't * need to report missing ones as spurious errors. * 31.Jan.96 log_error reports about a malformed .meta file, rather * than a script error. * 20.Jun.96 MetaFiles <on|off> default off, added, so that module * can be configured per-directory. Prior to this the module * was running for each request anywhere on the server, naughty.. * 29.Jun.96 All directives made per-directory. */ #include "apr.h" #include "apr_strings.h" #define APR_WANT_STRFUNC #include "apr_want.h" #if APR_HAVE_SYS_TYPES_H #include <sys/types.h> #endif #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "util_script.h" #include "http_log.h" #include "http_request.h" #include "http_protocol.h" #include "apr_lib.h" #define DIR_CMD_PERMS OR_INDEXES #define DEFAULT_METADIR ".web" #define DEFAULT_METASUFFIX ".meta" #define DEFAULT_METAFILES 0 module AP_MODULE_DECLARE_DATA cern_meta_module; typedef struct { const char *metadir; const char *metasuffix; int metafiles; } cern_meta_dir_config; static void *create_cern_meta_dir_config(apr_pool_t *p, char *dummy) { cern_meta_dir_config *new = (cern_meta_dir_config *) apr_palloc(p, sizeof(cern_meta_dir_config)); new->metadir = NULL; new->metasuffix = NULL; new->metafiles = DEFAULT_METAFILES; return new; } static void *merge_cern_meta_dir_configs(apr_pool_t *p, void *basev, void *addv) { cern_meta_dir_config *base = (cern_meta_dir_config *) basev; cern_meta_dir_config *add = (cern_meta_dir_config *) addv; cern_meta_dir_config *new = (cern_meta_dir_config *) apr_palloc(p, sizeof(cern_meta_dir_config)); new->metadir = add->metadir ? add->metadir : base->metadir; new->metasuffix = add->metasuffix ? add->metasuffix : base->metasuffix; new->metafiles = add->metafiles; return new; } static const char *set_metadir(cmd_parms *parms, void *in_dconf, const char *arg) { cern_meta_dir_config *dconf = in_dconf; dconf->metadir = arg; return NULL; } static const char *set_metasuffix(cmd_parms *parms, void *in_dconf, const char *arg) { cern_meta_dir_config *dconf = in_dconf; dconf->metasuffix = arg; return NULL; } static const char *set_metafiles(cmd_parms *parms, void *in_dconf, int arg) { cern_meta_dir_config *dconf = in_dconf; dconf->metafiles = arg; return NULL; } static const command_rec cern_meta_cmds[] = { AP_INIT_FLAG("MetaFiles", set_metafiles, NULL, DIR_CMD_PERMS, "Limited to 'on' or 'off'"), AP_INIT_TAKE1("MetaDir", set_metadir, NULL, DIR_CMD_PERMS, "the name of the directory containing meta files"), AP_INIT_TAKE1("MetaSuffix", set_metasuffix, NULL, DIR_CMD_PERMS, "the filename suffix for meta files"), {NULL} }; /* XXX: this is very similar to ap_scan_script_header_err_core... * are the differences deliberate, or just a result of bit rot? */ static int scan_meta_file(request_rec *r, apr_file_t *f) { char w[MAX_STRING_LEN]; char *l; int p; apr_table_t *tmp_headers; tmp_headers = apr_table_make(r->pool, 5); while (apr_file_gets(w, MAX_STRING_LEN - 1, f) == APR_SUCCESS) { /* Delete terminal (CR?)LF */ p = strlen(w); if (p > 0 && w[p - 1] == '\n') { if (p > 1 && w[p - 2] == '\015') w[p - 2] = '\0'; else w[p - 1] = '\0'; } if (w[0] == '\0') { return OK; } /* if we see a bogus header don't ignore it. Shout and scream */ if (!(l = strchr(w, ':'))) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01560) "malformed header in meta file: %s", r->filename); return HTTP_INTERNAL_SERVER_ERROR; } *l++ = '\0'; while (apr_isspace(*l)) ++l; if (!strcasecmp(w, "Content-type")) { char *tmp; /* Nuke trailing whitespace */ char *endp = l + strlen(l) - 1; while (endp > l && apr_isspace(*endp)) *endp-- = '\0'; tmp = apr_pstrdup(r->pool, l); ap_content_type_tolower(tmp); ap_set_content_type(r, tmp); } else if (!strcasecmp(w, "Status")) { sscanf(l, "%d", &r->status); r->status_line = apr_pstrdup(r->pool, l); } else { apr_table_set(tmp_headers, w, l); } } apr_table_overlap(r->headers_out, tmp_headers, APR_OVERLAP_TABLES_SET); return OK; } static int add_cern_meta_data(request_rec *r) { char *metafilename; char *leading_slash; char *last_slash; char *real_file; char *scrap_book; apr_file_t *f = NULL; apr_status_t retcode; cern_meta_dir_config *dconf; int rv; request_rec *rr; dconf = ap_get_module_config(r->per_dir_config, &cern_meta_module); if (!dconf->metafiles) { return DECLINED; } /* if ./.web/$1.meta exists then output 'asis' */ if (r->finfo.filetype == APR_NOFILE) { return DECLINED; } /* is this a directory? */ if (r->finfo.filetype == APR_DIR || r->uri[strlen(r->uri) - 1] == '/') { return DECLINED; } /* what directory is this file in? */ scrap_book = apr_pstrdup(r->pool, r->filename); leading_slash = strchr(scrap_book, '/'); last_slash = strrchr(scrap_book, '/'); if ((last_slash != NULL) && (last_slash != leading_slash)) { /* skip over last slash */ real_file = last_slash; real_file++; *last_slash = '\0'; } else { /* no last slash, buh?! */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01561) "internal error in mod_cern_meta: %s", r->filename); /* should really barf, but hey, let's be friends... */ return DECLINED; } metafilename = apr_pstrcat(r->pool, scrap_book, "/", dconf->metadir ? dconf->metadir : DEFAULT_METADIR, "/", real_file, dconf->metasuffix ? dconf->metasuffix : DEFAULT_METASUFFIX, NULL); /* It sucks to require this subrequest to complete, because this * means people must leave their meta files accessible to the world. * A better solution might be a "safe open" feature of pfopen to avoid * pipes, symlinks, and crap like that. * * In fact, this doesn't suck. Because <Location > blocks are never run * against sub_req_lookup_file, the meta can be somewhat protected by * either masking it with a <Location > directive or alias, or stowing * the file outside of the web document tree, while providing the * appropriate directory blocks to allow access to it as a file. */ rr = ap_sub_req_lookup_file(metafilename, r, NULL); if (rr->status != HTTP_OK) { ap_destroy_sub_req(rr); return DECLINED; } ap_destroy_sub_req(rr); retcode = apr_file_open(&f, metafilename, APR_READ, APR_OS_DEFAULT, r->pool); if (retcode != APR_SUCCESS) { if (APR_STATUS_IS_ENOENT(retcode)) { return DECLINED; } ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01562) "meta file permissions deny server access: %s", metafilename); return HTTP_FORBIDDEN; } /* read the headers in */ rv = scan_meta_file(r, f); apr_file_close(f); return rv; } static void register_hooks(apr_pool_t *p) { ap_hook_fixups(add_cern_meta_data,NULL,NULL,APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(cern_meta) = { STANDARD20_MODULE_STUFF, create_cern_meta_dir_config, /* dir config creater */ merge_cern_meta_dir_configs, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server configs */ cern_meta_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; ��������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/config.m4�������������������������������������������������������������0000644�0000000�0000050�00000001642�11657335760�016213� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������dnl modules enabled in this directory by default dnl APACHE_MODULE(name, helptext[, objects[, structname[, default[, config]]]]) APACHE_MODPATH_INIT(metadata) APACHE_MODULE(env, clearing/setting of ENV vars, , , yes) APACHE_MODULE(mime_magic, automagically determining MIME type) APACHE_MODULE(cern_meta, CERN-type meta files, , , no) APACHE_MODULE(expires, Expires header control, , , most) APACHE_MODULE(headers, HTTP header control, , , yes) APACHE_MODULE(ident, RFC 1413 identity check, , , no) APACHE_MODULE(usertrack, user-session tracking, , , , [ AC_CHECK_HEADERS(sys/times.h) AC_CHECK_FUNCS(times) ]) APACHE_MODULE(unique_id, per-request unique ids, , , most) APACHE_MODULE(setenvif, basing ENV vars on headers, , , yes) APACHE_MODULE(version, determining httpd version in config files, , , yes) APACHE_MODULE(remoteip, translate header contents to an apparent client remote_ip, , , most) APACHE_MODPATH_FINISH ����������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/NWGNUmodversion�������������������������������������������������������0000644�0000000�0000050�00000010152�11540546347�017423� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = modversion # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Version Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Version Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_version.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ version_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/NWGNUexpires����������������������������������������������������������0000644�0000000�0000050�00000010143�11540546347�016715� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = expires # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Expires Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Expires Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/expires.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_expires.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ expires_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_expires.dsp�������������������������������������������������������0000644�0000000�0000050�00000010621�10551346420�017512� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_expires" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_expires - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_expires.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_expires.mak" CFG="mod_expires - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_expires - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_expires - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_expires - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_expires_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_expires.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_expires.so" /d LONG_NAME="expires_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_expires.so" /base:@..\..\os\win32\BaseAddr.ref,mod_expires.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_expires.so" /base:@..\..\os\win32\BaseAddr.ref,mod_expires.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_expires.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_expires - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_expires_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_expires.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_expires.so" /d LONG_NAME="expires_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_expires.so" /base:@..\..\os\win32\BaseAddr.ref,mod_expires.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_expires.so" /base:@..\..\os\win32\BaseAddr.ref,mod_expires.so # Begin Special Build Tool TargetPath=.\Debug\mod_expires.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_expires - Win32 Release" # Name "mod_expires - Win32 Debug" # Begin Source File SOURCE=.\mod_expires.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project ���������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_remoteip.mak������������������������������������������������������0000644�0000000�0000050�00000023663�13242645471�017663� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_remoteip.dsp !IF "$(CFG)" == "" CFG=mod_remoteip - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_remoteip - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_remoteip - Win32 Release" && "$(CFG)" != "mod_remoteip - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_remoteip.mak" CFG="mod_remoteip - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_remoteip - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_remoteip - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_remoteip - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_remoteip.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_remoteip.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_remoteip.obj" -@erase "$(INTDIR)\mod_remoteip.res" -@erase "$(INTDIR)\mod_remoteip_src.idb" -@erase "$(INTDIR)\mod_remoteip_src.pdb" -@erase "$(OUTDIR)\mod_remoteip.exp" -@erase "$(OUTDIR)\mod_remoteip.lib" -@erase "$(OUTDIR)\mod_remoteip.pdb" -@erase "$(OUTDIR)\mod_remoteip.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_remoteip_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_remoteip.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_remoteip.so" /d LONG_NAME="remoteip_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_remoteip.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_remoteip.pdb" /debug /out:"$(OUTDIR)\mod_remoteip.so" /implib:"$(OUTDIR)\mod_remoteip.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_remoteip.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_remoteip.obj" \ "$(INTDIR)\mod_remoteip.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_remoteip.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_remoteip.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_remoteip.so" if exist .\Release\mod_remoteip.so.manifest mt.exe -manifest .\Release\mod_remoteip.so.manifest -outputresource:.\Release\mod_remoteip.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_remoteip - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_remoteip.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_remoteip.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_remoteip.obj" -@erase "$(INTDIR)\mod_remoteip.res" -@erase "$(INTDIR)\mod_remoteip_src.idb" -@erase "$(INTDIR)\mod_remoteip_src.pdb" -@erase "$(OUTDIR)\mod_remoteip.exp" -@erase "$(OUTDIR)\mod_remoteip.lib" -@erase "$(OUTDIR)\mod_remoteip.pdb" -@erase "$(OUTDIR)\mod_remoteip.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_remoteip_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_remoteip.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_remoteip.so" /d LONG_NAME="remoteip_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_remoteip.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_remoteip.pdb" /debug /out:"$(OUTDIR)\mod_remoteip.so" /implib:"$(OUTDIR)\mod_remoteip.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_remoteip.so LINK32_OBJS= \ "$(INTDIR)\mod_remoteip.obj" \ "$(INTDIR)\mod_remoteip.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_remoteip.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_remoteip.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_remoteip.so" if exist .\Debug\mod_remoteip.so.manifest mt.exe -manifest .\Debug\mod_remoteip.so.manifest -outputresource:.\Debug\mod_remoteip.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_remoteip.dep") !INCLUDE "mod_remoteip.dep" !ELSE !MESSAGE Warning: cannot find "mod_remoteip.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_remoteip - Win32 Release" || "$(CFG)" == "mod_remoteip - Win32 Debug" !IF "$(CFG)" == "mod_remoteip - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\metadata" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_remoteip - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\metadata" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_remoteip - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\metadata" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_remoteip - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\metadata" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_remoteip - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\metadata" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\metadata" !ELSEIF "$(CFG)" == "mod_remoteip - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\metadata" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\metadata" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_remoteip - Win32 Release" "$(INTDIR)\mod_remoteip.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_remoteip.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_remoteip.so" /d LONG_NAME="remoteip_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_remoteip - Win32 Debug" "$(INTDIR)\mod_remoteip.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_remoteip.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_remoteip.so" /d LONG_NAME="remoteip_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_remoteip.c "$(INTDIR)\mod_remoteip.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �����������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_mime_magic.dsp����������������������������������������������������0000644�0000000�0000050�00000011027�10551346420�020123� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_mime_magic" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_mime_magic - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_mime_magic.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_mime_magic.mak" CFG="mod_mime_magic - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_mime_magic - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_mime_magic - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_mime_magic - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_mime_magic_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_mime_magic.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_mime_magic.so" /d LONG_NAME="mime_magic_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_mime_magic.so" /base:@..\..\os\win32\BaseAddr.ref,mod_mime_magic.so # ADD LINK32 kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_mime_magic.so" /base:@..\..\os\win32\BaseAddr.ref,mod_mime_magic.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_mime_magic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_mime_magic - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_mime_magic_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_mime_magic.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_mime_magic.so" /d LONG_NAME="mime_magic_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_mime_magic.so" /base:@..\..\os\win32\BaseAddr.ref,mod_mime_magic.so # ADD LINK32 kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_mime_magic.so" /base:@..\..\os\win32\BaseAddr.ref,mod_mime_magic.so # Begin Special Build Tool TargetPath=.\Debug\mod_mime_magic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_mime_magic - Win32 Release" # Name "mod_mime_magic - Win32 Debug" # Begin Source File SOURCE=.\mod_mime_magic.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/NWGNUheaders����������������������������������������������������������0000644�0000000�0000050�00000010177�11540546347�016660� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/ssl \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = headers # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Headers Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Headers Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/headers.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_headers.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ headers_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/NWGNUmodident���������������������������������������������������������0000644�0000000�0000050�00000010160�11540546347�017040� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = modident # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Remote User Identity Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Mod_Ident Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/modident.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_ident.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ ident_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_ident.dsp���������������������������������������������������������0000644�0000000�0000050�00000010525�10551346420�017141� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_ident" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_ident - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_ident.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_ident.mak" CFG="mod_ident - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_ident - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_ident - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_ident - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_ident_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_ident.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_ident.so" /d LONG_NAME="ident_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_ident.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ident.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_ident.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ident.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_ident.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_ident - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_ident_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_ident.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_ident.so" /d LONG_NAME="ident_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_ident.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ident.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_ident.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ident.so # Begin Special Build Tool TargetPath=.\Debug\mod_ident.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_ident - Win32 Release" # Name "mod_ident - Win32 Debug" # Begin Source File SOURCE=.\mod_ident.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_mime_magic.exp����������������������������������������������������0000644�0000000�0000050�00000000022�10150161574�020122� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������mime_magic_module ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/.indent.pro�����������������������������������������������������������0000644�0000000�0000050�00000001275�10150161574�016552� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_usertrack.dep�����������������������������������������������������0000644�0000000�0000050�00000003440�12674411515�020027� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_usertrack.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_usertrack.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/NWGNUuniqueid���������������������������������������������������������0000644�0000000�0000050�00000010451�11540546347�017063� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = uniqueid # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Unique ID Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Unique ID Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/uniqueid.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_unique_id.o \ $(OBJDIR)/libprews.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ unique_id_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_ident.c�����������������������������������������������������������0000644�0000000�0000050�00000025402�12604740124�016575� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_ident: Handle RFC 1413 ident request * obtained from rfc1413.c * * rfc1413() speaks a common subset of the RFC 1413, AUTH, TAP and IDENT * protocols. The code queries an RFC 1413 etc. compatible daemon on a remote * host to look up the owner of a connection. The information should not be * used for authentication purposes. This routine intercepts alarm signals. * * Author: Wietse Venema, Eindhoven University of Technology, * The Netherlands. */ /* Some small additions for Apache --- ditch the "sccsid" var if * compiling with gcc (it *has* changed), include ap_config.h for the * prototypes it defines on at least one system (SunlOSs) which has * them missing from the standard header files, and one minor change * below (extra parens around assign "if (foo = bar) ..." to shut up * gcc -Wall). */ /* Rewritten by David Robinson */ #include "apr.h" #include "apr_network_io.h" #include "apr_strings.h" #include "apr_optional.h" #define APR_WANT_STDIO #define APR_WANT_STRFUNC #include "apr_want.h" #include "httpd.h" /* for server_rec, conn_rec, etc. */ #include "http_config.h" #include "http_core.h" #include "http_log.h" /* for aplog_error */ #include "util_ebcdic.h" /* Whether we should enable rfc1413 identity checking */ #ifndef DEFAULT_RFC1413 #define DEFAULT_RFC1413 0 #endif #define RFC1413_UNSET 2 /* request timeout (sec) */ #ifndef RFC1413_TIMEOUT #define RFC1413_TIMEOUT 30 #endif /* Local stuff. */ /* Semi-well-known port */ #define RFC1413_PORT 113 /* maximum allowed length of userid */ #define RFC1413_USERLEN 512 /* rough limit on the amount of data we accept. */ #define RFC1413_MAXDATA 1000 /* default username, if it could not determined */ #define FROM_UNKNOWN "unknown" typedef struct { int do_rfc1413; int timeout_unset; apr_time_t timeout; } ident_config_rec; static apr_status_t rfc1413_connect(apr_socket_t **newsock, conn_rec *conn, server_rec *srv, apr_time_t timeout) { apr_status_t rv; apr_sockaddr_t *localsa, *destsa; if ((rv = apr_sockaddr_info_get(&localsa, conn->local_ip, APR_UNSPEC, 0, /* ephemeral port */ 0, conn->pool)) != APR_SUCCESS) { /* This should not fail since we have a numeric address string * as the host. */ ap_log_error(APLOG_MARK, APLOG_CRIT, rv, srv, APLOGNO(01492) "rfc1413: apr_sockaddr_info_get(%s) failed", conn->local_ip); return rv; } if ((rv = apr_sockaddr_info_get(&destsa, conn->client_ip, localsa->family, /* has to match */ RFC1413_PORT, 0, conn->pool)) != APR_SUCCESS) { /* This should not fail since we have a numeric address string * as the host. */ ap_log_error(APLOG_MARK, APLOG_CRIT, rv, srv, APLOGNO(01493) "rfc1413: apr_sockaddr_info_get(%s) failed", conn->client_ip); return rv; } if ((rv = apr_socket_create(newsock, localsa->family, /* has to match */ SOCK_STREAM, 0, conn->pool)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, srv, APLOGNO(01494) "rfc1413: error creating query socket"); return rv; } if ((rv = apr_socket_timeout_set(*newsock, timeout)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, srv, APLOGNO(01495) "rfc1413: error setting query socket timeout"); apr_socket_close(*newsock); return rv; } /* * Bind the local and remote ends of the query socket to the same * IP addresses as the connection under investigation. We go * through all this trouble because the local or remote system * might have more than one network address. The RFC1413 etc. * client sends only port numbers; the server takes the IP * addresses from the query socket. */ if ((rv = apr_socket_bind(*newsock, localsa)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, srv, APLOGNO(01496) "rfc1413: Error binding query socket to local port"); apr_socket_close(*newsock); return rv; } /* * errors from connect usually imply the remote machine doesn't support * the service; don't log such an error */ if ((rv = apr_socket_connect(*newsock, destsa)) != APR_SUCCESS) { apr_socket_close(*newsock); return rv; } return APR_SUCCESS; } static apr_status_t rfc1413_query(apr_socket_t *sock, conn_rec *conn, server_rec *srv) { apr_port_t rmt_port, our_port; apr_port_t sav_rmt_port, sav_our_port; apr_size_t i; char *cp; char buffer[RFC1413_MAXDATA + 1]; char user[RFC1413_USERLEN + 1]; /* XXX */ apr_size_t buflen; sav_our_port = conn->local_addr->port; sav_rmt_port = conn->client_addr->port; /* send the data */ buflen = apr_snprintf(buffer, sizeof(buffer), "%hu,%hu\r\n", sav_rmt_port, sav_our_port); ap_xlate_proto_to_ascii(buffer, buflen); /* send query to server. Handle short write. */ i = 0; while (i < buflen) { apr_size_t j = strlen(buffer + i); apr_status_t status; status = apr_socket_send(sock, buffer+i, &j); if (status != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, status, srv, APLOGNO(01497) "write: rfc1413: error sending request"); return status; } else if (j > 0) { i+=j; } } /* * Read response from server. - the response should be newline * terminated according to rfc - make sure it doesn't stomp its * way out of the buffer. */ i = 0; memset(buffer, '\0', sizeof(buffer)); /* * Note that the strchr function below checks for \012 instead of '\n' * this allows it to work on both ASCII and EBCDIC machines. */ while ((cp = strchr(buffer, '\012')) == NULL && i < sizeof(buffer) - 1) { apr_size_t j = sizeof(buffer) - 1 - i; apr_status_t status; status = apr_socket_recv(sock, buffer+i, &j); if (status != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, status, srv, APLOGNO(01498) "read: rfc1413: error reading response"); return status; } else if (j > 0) { i+=j; } else if (status == APR_SUCCESS && j == 0) { /* Oops... we ran out of data before finding newline */ return APR_EINVAL; } } /* RFC1413_USERLEN = 512 */ ap_xlate_proto_from_ascii(buffer, i); if (sscanf(buffer, "%hu , %hu : USERID :%*[^:]:%512s", &rmt_port, &our_port, user) != 3 || sav_rmt_port != rmt_port || sav_our_port != our_port) return APR_EINVAL; /* * Strip trailing carriage return. It is part of the * protocol, not part of the data. */ if ((cp = strchr(user, '\r'))) *cp = '\0'; conn->remote_logname = apr_pstrdup(conn->pool, user); return APR_SUCCESS; } static const char *set_idcheck(cmd_parms *cmd, void *d_, int arg) { ident_config_rec *d = d_; d->do_rfc1413 = arg ? 1 : 0; return NULL; } static const char *set_timeout(cmd_parms *cmd, void *d_, const char *arg) { ident_config_rec *d = d_; d->timeout = apr_time_from_sec(atoi(arg)); d->timeout_unset = 0; return NULL; } static void *create_ident_dir_config(apr_pool_t *p, char *d) { ident_config_rec *conf = apr_palloc(p, sizeof(*conf)); conf->do_rfc1413 = DEFAULT_RFC1413 | RFC1413_UNSET; conf->timeout = apr_time_from_sec(RFC1413_TIMEOUT); conf->timeout_unset = 1; return (void *)conf; } static void *merge_ident_dir_config(apr_pool_t *p, void *old_, void *new_) { ident_config_rec *conf = (ident_config_rec *)apr_pcalloc(p, sizeof(*conf)); ident_config_rec *old = (ident_config_rec *) old_; ident_config_rec *new = (ident_config_rec *) new_; conf->timeout = new->timeout_unset ? old->timeout : new->timeout; conf->do_rfc1413 = new->do_rfc1413 & RFC1413_UNSET ? old->do_rfc1413 : new->do_rfc1413; return (void *)conf; } static const command_rec ident_cmds[] = { AP_INIT_FLAG("IdentityCheck", set_idcheck, NULL, RSRC_CONF|ACCESS_CONF, "Enable identd (RFC 1413) user lookups - SLOW"), AP_INIT_TAKE1("IdentityCheckTimeout", set_timeout, NULL, RSRC_CONF|ACCESS_CONF, "Identity check (RFC 1413) timeout duration (sec)"), {NULL} }; module AP_MODULE_DECLARE_DATA ident_module; /* * Optional function for the core to the actual ident request */ static const char *ap_ident_lookup(request_rec *r) { ident_config_rec *conf; apr_socket_t *sock; apr_status_t rv; conn_rec *conn = r->connection; server_rec *srv = r->server; conf = ap_get_module_config(r->per_dir_config, &ident_module); /* return immediately if ident requests are disabled */ if (!(conf->do_rfc1413 & ~RFC1413_UNSET)) { return NULL; } rv = rfc1413_connect(&sock, conn, srv, conf->timeout); if (rv == APR_SUCCESS) { rv = rfc1413_query(sock, conn, srv); apr_socket_close(sock); } if (rv != APR_SUCCESS) { conn->remote_logname = FROM_UNKNOWN; } return (const char *)conn->remote_logname; } static void register_hooks(apr_pool_t *p) { APR_REGISTER_OPTIONAL_FN(ap_ident_lookup); } AP_DECLARE_MODULE(ident) = { STANDARD20_MODULE_STUFF, create_ident_dir_config, /* dir config creater */ merge_ident_dir_config, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ ident_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/NWGNUcernmeta���������������������������������������������������������0000644�0000000�0000050�00000010160�11540546347�017033� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = cernmeta # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) CERN Meta Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = CERN Meta Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/cernmeta.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_cern_meta.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ cern_meta_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_expires.mak�������������������������������������������������������0000644�0000000�0000050�00000023505�12701473373�017510� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_expires.dsp !IF "$(CFG)" == "" CFG=mod_expires - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_expires - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_expires - Win32 Release" && "$(CFG)" != "mod_expires - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_expires.mak" CFG="mod_expires - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_expires - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_expires - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_expires - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_expires.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_expires.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_expires.obj" -@erase "$(INTDIR)\mod_expires.res" -@erase "$(INTDIR)\mod_expires_src.idb" -@erase "$(INTDIR)\mod_expires_src.pdb" -@erase "$(OUTDIR)\mod_expires.exp" -@erase "$(OUTDIR)\mod_expires.lib" -@erase "$(OUTDIR)\mod_expires.pdb" -@erase "$(OUTDIR)\mod_expires.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_expires_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_expires.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_expires.so" /d LONG_NAME="expires_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_expires.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_expires.pdb" /debug /out:"$(OUTDIR)\mod_expires.so" /implib:"$(OUTDIR)\mod_expires.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_expires.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_expires.obj" \ "$(INTDIR)\mod_expires.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_expires.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_expires.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_expires.so" if exist .\Release\mod_expires.so.manifest mt.exe -manifest .\Release\mod_expires.so.manifest -outputresource:.\Release\mod_expires.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_expires - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_expires.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_expires.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_expires.obj" -@erase "$(INTDIR)\mod_expires.res" -@erase "$(INTDIR)\mod_expires_src.idb" -@erase "$(INTDIR)\mod_expires_src.pdb" -@erase "$(OUTDIR)\mod_expires.exp" -@erase "$(OUTDIR)\mod_expires.lib" -@erase "$(OUTDIR)\mod_expires.pdb" -@erase "$(OUTDIR)\mod_expires.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_expires_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_expires.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_expires.so" /d LONG_NAME="expires_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_expires.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_expires.pdb" /debug /out:"$(OUTDIR)\mod_expires.so" /implib:"$(OUTDIR)\mod_expires.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_expires.so LINK32_OBJS= \ "$(INTDIR)\mod_expires.obj" \ "$(INTDIR)\mod_expires.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_expires.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_expires.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_expires.so" if exist .\Debug\mod_expires.so.manifest mt.exe -manifest .\Debug\mod_expires.so.manifest -outputresource:.\Debug\mod_expires.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_expires.dep") !INCLUDE "mod_expires.dep" !ELSE !MESSAGE Warning: cannot find "mod_expires.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_expires - Win32 Release" || "$(CFG)" == "mod_expires - Win32 Debug" !IF "$(CFG)" == "mod_expires - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\metadata" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_expires - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\metadata" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_expires - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\metadata" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ELSEIF "$(CFG)" == "mod_expires - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\metadata" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\metadata" !ENDIF !IF "$(CFG)" == "mod_expires - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\metadata" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\metadata" !ELSEIF "$(CFG)" == "mod_expires - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\metadata" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\metadata" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_expires - Win32 Release" "$(INTDIR)\mod_expires.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_expires.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_expires.so" /d LONG_NAME="expires_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_expires - Win32 Debug" "$(INTDIR)\mod_expires.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_expires.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_expires.so" /d LONG_NAME="expires_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_expires.c "$(INTDIR)\mod_expires.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_remoteip.dsp������������������������������������������������������0000644�0000000�0000050�00000010733�13242365145�017670� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_remoteip" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_remoteip - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_remoteip.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_remoteip.mak" CFG="mod_remoteip - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_remoteip - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_remoteip - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_remoteip - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_remoteip_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_remoteip.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_remoteip.so" /d LONG_NAME="remoteip_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_remoteip.so" /base:@..\..\os\win32\BaseAddr.ref,mod_remoteip.so # ADD LINK32 kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_remoteip.so" /base:@..\..\os\win32\BaseAddr.ref,mod_remoteip.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_remoteip.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_remoteip - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_remoteip_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_remoteip.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_remoteip.so" /d LONG_NAME="remoteip_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_remoteip.so" /base:@..\..\os\win32\BaseAddr.ref,mod_remoteip.so # ADD LINK32 kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_remoteip.so" /base:@..\..\os\win32\BaseAddr.ref,mod_remoteip.so # Begin Special Build Tool TargetPath=.\Debug\mod_remoteip.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_remoteip - Win32 Release" # Name "mod_remoteip - Win32 Debug" # Begin Source File SOURCE=.\mod_remoteip.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������httpd-2.4.41/modules/metadata/mod_remoteip.dep������������������������������������������������������0000644�0000000�0000050�00000003610�12674411515�017647� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_remoteip.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_remoteip.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_env.dep�����������������������������������������������������������0000644�0000000�0000050�00000003213�12674411515�016612� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_env.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_env.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/NWGNUmimemagi���������������������������������������������������������0000644�0000000�0000050�00000010160�11540546347�017022� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = mimemagi # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Mime Magic Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = CERN Meta Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/mimemagi.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_mime_magic.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ mime_magic_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/NWGNUusertrk����������������������������������������������������������0000644�0000000�0000050�00000010155�11540546347�016740� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = usertrk # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) User Track Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = User Track Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/usertrk.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_usertrack.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ usertrack_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_unique_id.exp�����������������������������������������������������0000644�0000000�0000050�00000000021�10150161574�020014� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������unique_id_module ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/Makefile.in�����������������������������������������������������������0000644�0000000�0000050�00000000051�10150161574�016525� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� include $(top_srcdir)/build/special.mk ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/metadata/mod_headers.c���������������������������������������������������������0000644�0000000�0000050�00000077757�13472755016�017143� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_headers.c: Add/append/remove HTTP response headers * Written by Paul Sutton, paul@ukweb.com, 1 Oct 1996 * * The Header directive can be used to add/replace/remove HTTP headers * within the response message. The RequestHeader directive can be used * to add/replace/remove HTTP headers before a request message is processed. * Valid in both per-server and per-dir configurations. * * Syntax is: * * Header action header value * RequestHeader action header value * * Where action is one of: * set - set this header, replacing any old value * add - add this header, possible resulting in two or more * headers with the same name * append - append this text onto any existing header of this same * merge - merge this text onto any existing header of this same, * avoiding duplicate values * unset - remove this header * edit - transform the header value according to a regexp * * Where action is unset, the third argument (value) should not be given. * The header name can include the colon, or not. * * The Header and RequestHeader directives can only be used where allowed * by the FileInfo override. * * When the request is processed, the header directives are processed in * this order: firstly, the main server, then the virtual server handling * this request (if any), then any <Directory> sections (working downwards * from the root dir), then an <Location> sections (working down from * shortest URL component), the any <File> sections. This order is * important if any 'set' or 'unset' actions are used. For example, * the following two directives have different effect if applied in * the reverse order: * * Header append Author "John P. Doe" * Header unset Author * * Examples: * * To set the "Author" header, use * Header add Author "John P. Doe" * * To remove a header: * Header unset Author * */ #include "apr.h" #include "apr_lib.h" #include "apr_strings.h" #include "apr_buckets.h" #include "apr_hash.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_log.h" #include "util_filter.h" #include "http_protocol.h" #include "ap_expr.h" #include "mod_ssl.h" /* for the ssl_var_lookup optional function defn */ /* format_tag_hash is initialized during pre-config */ static apr_hash_t *format_tag_hash; typedef enum { hdr_add = 'a', /* add header (could mean multiple hdrs) */ hdr_set = 's', /* set (replace old value) */ hdr_append = 'm', /* append (merge into any old value) */ hdr_merge = 'g', /* merge (merge, but avoid duplicates) */ hdr_unset = 'u', /* unset header */ hdr_echo = 'e', /* echo headers from request to response */ hdr_edit = 'r', /* change value by regexp, match once */ hdr_edit_r = 'R', /* change value by regexp, everymatch */ hdr_setifempty = 'i', /* set value if header not already present*/ hdr_note = 'n' /* set value of header in a note */ } hdr_actions; /* * magic cmd->info values */ static char hdr_in = '0'; /* RequestHeader */ static char hdr_out_onsuccess = '1'; /* Header onsuccess */ static char hdr_out_always = '2'; /* Header always */ /* Callback function type. */ typedef const char *format_tag_fn(request_rec *r, char *a); /* * There is an array of struct format_tag per Header/RequestHeader * config directive */ typedef struct { format_tag_fn *func; char *arg; } format_tag; /* 'Magic' condition_var value to run action in post_read_request */ static const char* condition_early = "early"; /* * There is one "header_entry" per Header/RequestHeader config directive */ typedef struct { hdr_actions action; const char *header; apr_array_header_t *ta; /* Array of format_tag structs */ ap_regex_t *regex; const char *condition_var; const char *subs; ap_expr_info_t *expr; ap_expr_info_t *expr_out; } header_entry; /* echo_do is used for Header echo to iterate through the request headers*/ typedef struct { request_rec *r; header_entry *hdr; } echo_do; /* edit_do is used for Header edit to iterate through the request headers */ typedef struct { request_rec *r; header_entry *hdr; apr_table_t *t; } edit_do; /* * headers_conf is our per-module configuration. This is used as both * a per-dir and per-server config */ typedef struct { apr_array_header_t *fixup_in; apr_array_header_t *fixup_out; apr_array_header_t *fixup_err; } headers_conf; module AP_MODULE_DECLARE_DATA headers_module; /* Pointer to ssl_var_lookup, if available. */ static APR_OPTIONAL_FN_TYPE(ssl_var_lookup) *header_ssl_lookup = NULL; /* * Tag formatting functions */ static const char *constant_item(request_rec *r, char *stuff) { return stuff; } static const char *header_request_duration(request_rec *r, char *a) { return apr_psprintf(r->pool, "D=%" APR_TIME_T_FMT, (apr_time_now() - r->request_time)); } static const char *header_request_time(request_rec *r, char *a) { return apr_psprintf(r->pool, "t=%" APR_TIME_T_FMT, r->request_time); } /* unwrap_header returns HDR with any newlines converted into * whitespace if necessary. */ static const char *unwrap_header(apr_pool_t *p, const char *hdr) { if (ap_strchr_c(hdr, APR_ASCII_LF) || ap_strchr_c(hdr, APR_ASCII_CR)) { char *ptr; hdr = ptr = apr_pstrdup(p, hdr); do { if (*ptr == APR_ASCII_LF || *ptr == APR_ASCII_CR) *ptr = APR_ASCII_BLANK; } while (*ptr++); } return hdr; } static const char *header_request_env_var(request_rec *r, char *a) { const char *s = apr_table_get(r->subprocess_env,a); if (s) return unwrap_header(r->pool, s); else return "(null)"; } static const char *header_request_ssl_var(request_rec *r, char *name) { if (header_ssl_lookup) { const char *val = header_ssl_lookup(r->pool, r->server, r->connection, r, name); if (val && val[0]) return unwrap_header(r->pool, val); else return "(null)"; } else { return "(null)"; } } static const char *header_request_loadavg(request_rec *r, char *a) { ap_loadavg_t t; ap_get_loadavg(&t); return apr_psprintf(r->pool, "l=%.2f/%.2f/%.2f", t.loadavg, t.loadavg5, t.loadavg15); } static const char *header_request_idle(request_rec *r, char *a) { ap_sload_t t; ap_get_sload(&t); return apr_psprintf(r->pool, "i=%d", t.idle); } static const char *header_request_busy(request_rec *r, char *a) { ap_sload_t t; ap_get_sload(&t); return apr_psprintf(r->pool, "b=%d", t.busy); } /* * Config routines */ static void *create_headers_dir_config(apr_pool_t *p, char *d) { headers_conf *conf = apr_pcalloc(p, sizeof(*conf)); conf->fixup_in = apr_array_make(p, 2, sizeof(header_entry)); conf->fixup_out = apr_array_make(p, 2, sizeof(header_entry)); conf->fixup_err = apr_array_make(p, 2, sizeof(header_entry)); return conf; } static void *merge_headers_config(apr_pool_t *p, void *basev, void *overridesv) { headers_conf *newconf = apr_pcalloc(p, sizeof(*newconf)); headers_conf *base = basev; headers_conf *overrides = overridesv; newconf->fixup_in = apr_array_append(p, base->fixup_in, overrides->fixup_in); newconf->fixup_out = apr_array_append(p, base->fixup_out, overrides->fixup_out); newconf->fixup_err = apr_array_append(p, base->fixup_err, overrides->fixup_err); return newconf; } static char *parse_misc_string(apr_pool_t *p, format_tag *tag, const char **sa) { const char *s; char *d; tag->func = constant_item; s = *sa; while (*s && *s != '%') { s++; } /* * This might allocate a few chars extra if there's a backslash * escape in the format string. */ tag->arg = apr_palloc(p, s - *sa + 1); d = tag->arg; s = *sa; while (*s && *s != '%') { if (*s != '\\') { *d++ = *s++; } else { s++; switch (*s) { case '\\': *d++ = '\\'; s++; break; case 'r': *d++ = '\r'; s++; break; case 'n': *d++ = '\n'; s++; break; case 't': *d++ = '\t'; s++; break; default: /* copy verbatim */ *d++ = '\\'; /* * Allow the loop to deal with this *s in the normal * fashion so that it handles end of string etc. * properly. */ break; } } } *d = '\0'; *sa = s; return NULL; } static char *parse_format_tag(apr_pool_t *p, format_tag *tag, const char **sa) { const char *s = *sa; const char * (*tag_handler)(request_rec *,char *); /* Handle string literal/conditionals */ if (*s != '%') { return parse_misc_string(p, tag, sa); } s++; /* skip the % */ /* Pass through %% or % at end of string as % */ if ((*s == '%') || (*s == '\0')) { tag->func = constant_item; tag->arg = "%"; if (*s) s++; *sa = s; return NULL; } tag->arg = "\0"; /* grab the argument if there is one */ if (*s == '{') { ++s; tag->arg = ap_getword(p,&s,'}'); } tag_handler = (const char * (*)(request_rec *,char *))apr_hash_get(format_tag_hash, s++, 1); if (!tag_handler) { char dummy[2]; dummy[0] = s[-1]; dummy[1] = '\0'; return apr_pstrcat(p, "Unrecognized header format %", dummy, NULL); } tag->func = tag_handler; *sa = s; return NULL; } /* * A format string consists of white space, text and optional format * tags in any order. E.g., * * Header add MyHeader "Free form text %D %t more text" * * Decompose the format string into its tags. Each tag (struct format_tag) * contains a pointer to the function used to format the tag. Then save each * tag in the tag array anchored in the header_entry. */ static char *parse_format_string(cmd_parms *cmd, header_entry *hdr, const char *s) { apr_pool_t *p = cmd->pool; char *res; /* No string to parse with unset and echo commands */ if (hdr->action == hdr_unset || hdr->action == hdr_echo) { return NULL; } /* Tags are in the replacement value for edit */ else if (hdr->action == hdr_edit || hdr->action == hdr_edit_r ) { s = hdr->subs; } if (!strncmp(s, "expr=", 5)) { const char *err; hdr->expr_out = ap_expr_parse_cmd(cmd, s+5, AP_EXPR_FLAG_STRING_RESULT, &err, NULL); if (err) { return apr_pstrcat(cmd->pool, "Can't parse value expression : ", err, NULL); } return NULL; } hdr->ta = apr_array_make(p, 10, sizeof(format_tag)); while (*s) { if ((res = parse_format_tag(p, (format_tag *) apr_array_push(hdr->ta), &s))) { return res; } } return NULL; } /* handle RequestHeader and Header directive */ static APR_INLINE const char *header_inout_cmd(cmd_parms *cmd, void *indirconf, const char *action, const char *hdr, const char *value, const char *subs, const char *envclause) { headers_conf *dirconf = indirconf; const char *condition_var = NULL; const char *colon; header_entry *new; ap_expr_info_t *expr = NULL; apr_array_header_t *fixup = (cmd->info == &hdr_in) ? dirconf->fixup_in : (cmd->info == &hdr_out_always) ? dirconf->fixup_err : dirconf->fixup_out; new = (header_entry *) apr_array_push(fixup); if (!strcasecmp(action, "set")) new->action = hdr_set; else if (!strcasecmp(action, "setifempty")) new->action = hdr_setifempty; else if (!strcasecmp(action, "add")) new->action = hdr_add; else if (!strcasecmp(action, "append")) new->action = hdr_append; else if (!strcasecmp(action, "merge")) new->action = hdr_merge; else if (!strcasecmp(action, "unset")) new->action = hdr_unset; else if (!strcasecmp(action, "echo")) new->action = hdr_echo; else if (!strcasecmp(action, "edit")) new->action = hdr_edit; else if (!strcasecmp(action, "edit*")) new->action = hdr_edit_r; else if (!strcasecmp(action, "note")) new->action = hdr_note; else return "first argument must be 'add', 'set', 'setifempty', 'append', 'merge', " "'unset', 'echo', 'note', 'edit', or 'edit*'."; if (new->action == hdr_edit || new->action == hdr_edit_r) { if (subs == NULL) { return "Header edit requires a match and a substitution"; } new->regex = ap_pregcomp(cmd->pool, value, AP_REG_EXTENDED); if (new->regex == NULL) { return "Header edit regex could not be compiled"; } new->subs = subs; } else { /* there's no subs, so envclause is really that argument */ if (envclause != NULL) { return "Too many arguments to directive"; } envclause = subs; } if (new->action == hdr_unset) { if (value) { if (envclause) { return "header unset takes two arguments"; } envclause = value; value = NULL; } } else if (new->action == hdr_echo) { ap_regex_t *regex; if (value) { if (envclause) { return "Header echo takes two arguments"; } envclause = value; value = NULL; } if (cmd->info != &hdr_out_onsuccess && cmd->info != &hdr_out_always) return "Header echo only valid on Header " "directives"; else { regex = ap_pregcomp(cmd->pool, hdr, AP_REG_EXTENDED | AP_REG_NOSUB); if (regex == NULL) { return "Header echo regex could not be compiled"; } } new->regex = regex; } else if (!value) return "Header requires three arguments"; /* Handle the envclause on Header */ if (envclause != NULL) { if (strcasecmp(envclause, "early") == 0) { condition_var = condition_early; } else if (strncasecmp(envclause, "env=", 4) == 0) { if ((envclause[4] == '\0') || ((envclause[4] == '!') && (envclause[5] == '\0'))) { return "error: missing environment variable name. " "envclause should be in the form env=envar "; } condition_var = envclause + 4; } else if (strncasecmp(envclause, "expr=", 5) == 0) { const char *err = NULL; expr = ap_expr_parse_cmd(cmd, envclause + 5, 0, &err, NULL); if (err) { return apr_pstrcat(cmd->pool, "Can't parse envclause/expression: ", err, NULL); } } else { return apr_pstrcat(cmd->pool, "Unknown parameter: ", envclause, NULL); } } if ((colon = ap_strchr_c(hdr, ':'))) { hdr = apr_pstrmemdup(cmd->pool, hdr, colon-hdr); } new->header = hdr; new->condition_var = condition_var; new->expr = expr; return parse_format_string(cmd, new, value); } /* Handle all (xxx)Header directives */ static const char *header_cmd(cmd_parms *cmd, void *indirconf, const char *args) { const char *action; const char *hdr; const char *val; const char *envclause; const char *subs; action = ap_getword_conf(cmd->temp_pool, &args); if (cmd->info == &hdr_out_onsuccess) { if (!strcasecmp(action, "always")) { cmd->info = &hdr_out_always; action = ap_getword_conf(cmd->temp_pool, &args); } else if (!strcasecmp(action, "onsuccess")) { action = ap_getword_conf(cmd->temp_pool, &args); } } hdr = ap_getword_conf(cmd->pool, &args); val = *args ? ap_getword_conf(cmd->pool, &args) : NULL; subs = *args ? ap_getword_conf(cmd->pool, &args) : NULL; envclause = *args ? ap_getword_conf(cmd->pool, &args) : NULL; if (*args) { return apr_pstrcat(cmd->pool, cmd->cmd->name, " has too many arguments", NULL); } return header_inout_cmd(cmd, indirconf, action, hdr, val, subs, envclause); } /* * Process the tags in the format string. Tags may be format specifiers * (%D, %t, etc.), whitespace or text strings. For each tag, run the handler * (formatter) specific to the tag. Handlers return text strings. * Concatenate the return from each handler into one string that is * returned from this call. * If the original value was prefixed with "expr=", processing is * handled instead by ap_expr. */ static char* process_tags(header_entry *hdr, request_rec *r) { int i; const char *s; char *str = NULL; format_tag *tag = NULL; if (hdr->expr_out) { const char *err; const char *val; val = ap_expr_str_exec(r, hdr->expr_out, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02557) "Can't evaluate value expression: %s", err); return ""; } return apr_pstrdup(r->pool, val); } tag = (format_tag*) hdr->ta->elts; for (i = 0; i < hdr->ta->nelts; i++) { s = tag[i].func(r, tag[i].arg); if (str == NULL) str = apr_pstrdup(r->pool, s); else str = apr_pstrcat(r->pool, str, s, NULL); } return str ? str : ""; } static const char *process_regexp(header_entry *hdr, const char *value, request_rec *r) { ap_regmatch_t pmatch[AP_MAX_REG_MATCH]; const char *subs; const char *remainder; char *ret; int diffsz; if (ap_regexec(hdr->regex, value, AP_MAX_REG_MATCH, pmatch, 0)) { /* no match, nothing to do */ return value; } /* Process tags in the input string rather than the resulting * substitution to avoid surprises */ subs = ap_pregsub(r->pool, process_tags(hdr, r), value, AP_MAX_REG_MATCH, pmatch); if (subs == NULL) return NULL; diffsz = strlen(subs) - (pmatch[0].rm_eo - pmatch[0].rm_so); if (hdr->action == hdr_edit) { remainder = value + pmatch[0].rm_eo; } else { /* recurse to edit multiple matches if applicable */ remainder = process_regexp(hdr, value + pmatch[0].rm_eo, r); if (remainder == NULL) return NULL; diffsz += strlen(remainder) - strlen(value + pmatch[0].rm_eo); } ret = apr_palloc(r->pool, strlen(value) + 1 + diffsz); memcpy(ret, value, pmatch[0].rm_so); strcpy(ret + pmatch[0].rm_so, subs); strcat(ret, remainder); return ret; } static int echo_header(void *v, const char *key, const char *val) { echo_do *ed = (echo_do *)v; /* If the input header (key) matches the regex, echo it intact to * r->headers_out. */ if (!ap_regexec(ed->hdr->regex, key, 0, NULL, 0)) { apr_table_add(ed->r->headers_out, key, val); } return 1; } static int edit_header(void *v, const char *key, const char *val) { edit_do *ed = (edit_do *)v; const char *repl = process_regexp(ed->hdr, val, ed->r); if (repl == NULL) return 0; apr_table_addn(ed->t, key, repl); return 1; } static int add_them_all(void *v, const char *key, const char *val) { apr_table_t *headers = (apr_table_t *)v; apr_table_addn(headers, key, val); return 1; } static int do_headers_fixup(request_rec *r, apr_table_t *headers, apr_array_header_t *fixup, int early) { echo_do v; int i; const char *val; for (i = 0; i < fixup->nelts; ++i) { header_entry *hdr = &((header_entry *) (fixup->elts))[i]; const char *envar = hdr->condition_var; /* ignore early headers in late calls */ if (!early && (envar == condition_early)) { continue; } /* ignore late headers in early calls */ else if (early && (envar != condition_early)) { continue; } /* Do we have an expression to evaluate? */ else if (hdr->expr != NULL) { const char *err = NULL; int eval = ap_expr_exec(r, hdr->expr, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01501) "Failed to evaluate expression (%s) - ignoring", err); } else if (!eval) { continue; } } /* Have any conditional envar-controlled Header processing to do? */ else if (envar && !early) { if (*envar != '!') { if (apr_table_get(r->subprocess_env, envar) == NULL) continue; } else { if (apr_table_get(r->subprocess_env, &envar[1]) != NULL) continue; } } switch (hdr->action) { case hdr_add: apr_table_addn(headers, hdr->header, process_tags(hdr, r)); break; case hdr_append: apr_table_mergen(headers, hdr->header, process_tags(hdr, r)); break; case hdr_merge: val = apr_table_get(headers, hdr->header); if (val == NULL) { apr_table_addn(headers, hdr->header, process_tags(hdr, r)); } else { char *new_val = process_tags(hdr, r); apr_size_t new_val_len = strlen(new_val); int tok_found = 0; /* modified version of logic in ap_get_token() */ while (*val) { const char *tok_start; while (apr_isspace(*val)) ++val; tok_start = val; while (*val && *val != ',') { if (*val++ == '"') while (*val) if (*val++ == '"') break; } if (new_val_len == (apr_size_t)(val - tok_start) && !strncmp(tok_start, new_val, new_val_len)) { tok_found = 1; break; } if (*val) ++val; } if (!tok_found) { apr_table_mergen(headers, hdr->header, new_val); } } break; case hdr_set: if (!strcasecmp(hdr->header, "Content-Type")) { ap_set_content_type(r, process_tags(hdr, r)); } apr_table_setn(headers, hdr->header, process_tags(hdr, r)); break; case hdr_setifempty: if (NULL == apr_table_get(headers, hdr->header)) { if (!strcasecmp(hdr->header, "Content-Type")) { ap_set_content_type(r, process_tags(hdr, r)); } apr_table_setn(headers, hdr->header, process_tags(hdr, r)); } break; case hdr_unset: apr_table_unset(headers, hdr->header); break; case hdr_echo: v.r = r; v.hdr = hdr; apr_table_do(echo_header, &v, r->headers_in, NULL); break; case hdr_edit: case hdr_edit_r: if (!strcasecmp(hdr->header, "Content-Type") && r->content_type) { const char *repl = process_regexp(hdr, r->content_type, r); if (repl == NULL) return 0; ap_set_content_type(r, repl); } if (apr_table_get(headers, hdr->header)) { edit_do ed; ed.r = r; ed.hdr = hdr; ed.t = apr_table_make(r->pool, 5); if (!apr_table_do(edit_header, (void *) &ed, headers, hdr->header, NULL)) return 0; apr_table_unset(headers, hdr->header); apr_table_do(add_them_all, (void *) headers, ed.t, NULL); } break; case hdr_note: apr_table_setn(r->notes, process_tags(hdr, r), apr_table_get(headers, hdr->header)); break; } } return 1; } static void ap_headers_insert_output_filter(request_rec *r) { headers_conf *dirconf = ap_get_module_config(r->per_dir_config, &headers_module); if (dirconf->fixup_out->nelts || dirconf->fixup_err->nelts) { ap_add_output_filter("FIXUP_HEADERS_OUT", NULL, r, r->connection); } } /* * Make sure our error-path filter is in place. */ static void ap_headers_insert_error_filter(request_rec *r) { headers_conf *dirconf = ap_get_module_config(r->per_dir_config, &headers_module); if (dirconf->fixup_err->nelts) { ap_add_output_filter("FIXUP_HEADERS_ERR", NULL, r, r->connection); } } static apr_status_t ap_headers_output_filter(ap_filter_t *f, apr_bucket_brigade *in) { headers_conf *dirconf = ap_get_module_config(f->r->per_dir_config, &headers_module); ap_log_error(APLOG_MARK, APLOG_TRACE2, 0, f->r->server, APLOGNO(01502) "headers: ap_headers_output_filter()"); /* do the fixup */ do_headers_fixup(f->r, f->r->err_headers_out, dirconf->fixup_err, 0); do_headers_fixup(f->r, f->r->headers_out, dirconf->fixup_out, 0); /* remove ourselves from the filter chain */ ap_remove_output_filter(f); /* send the data up the stack */ return ap_pass_brigade(f->next,in); } /* * Make sure we propagate any "Header always" settings on the error * path through http_protocol.c. */ static apr_status_t ap_headers_error_filter(ap_filter_t *f, apr_bucket_brigade *in) { headers_conf *dirconf; dirconf = ap_get_module_config(f->r->per_dir_config, &headers_module); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, f->r->server, APLOGNO(01503) "headers: ap_headers_error_filter()"); /* * Add any header fields defined by "Header always" to r->err_headers_out. * Server-wide first, then per-directory to allow overriding. */ do_headers_fixup(f->r, f->r->err_headers_out, dirconf->fixup_err, 0); /* * We've done our bit; remove ourself from the filter chain so there's * no possibility we'll be called again. */ ap_remove_output_filter(f); /* * Pass the buck. (euro?) */ return ap_pass_brigade(f->next, in); } static apr_status_t ap_headers_fixup(request_rec *r) { headers_conf *dirconf = ap_get_module_config(r->per_dir_config, &headers_module); /* do the fixup */ if (dirconf->fixup_in->nelts) { do_headers_fixup(r, r->headers_in, dirconf->fixup_in, 0); } return DECLINED; } static apr_status_t ap_headers_early(request_rec *r) { headers_conf *dirconf = ap_get_module_config(r->per_dir_config, &headers_module); /* do the fixup */ if (dirconf->fixup_in->nelts) { if (!do_headers_fixup(r, r->headers_in, dirconf->fixup_in, 1)) goto err; } if (dirconf->fixup_err->nelts) { if (!do_headers_fixup(r, r->err_headers_out, dirconf->fixup_err, 1)) goto err; } if (dirconf->fixup_out->nelts) { if (!do_headers_fixup(r, r->headers_out, dirconf->fixup_out, 1)) goto err; } return DECLINED; err: ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(01504) "Regular expression replacement failed (replacement too long?)"); return HTTP_INTERNAL_SERVER_ERROR; } static const command_rec headers_cmds[] = { AP_INIT_RAW_ARGS("Header", header_cmd, &hdr_out_onsuccess, OR_FILEINFO, "an optional condition, an action, header and value " "followed by optional env clause"), AP_INIT_RAW_ARGS("RequestHeader", header_cmd, &hdr_in, OR_FILEINFO, "an action, header and value followed by optional env " "clause"), {NULL} }; static void register_format_tag_handler(const char *tag, format_tag_fn *tag_handler) { apr_hash_set(format_tag_hash, tag, 1, tag_handler); } static int header_pre_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp) { format_tag_hash = apr_hash_make(p); register_format_tag_handler("D", header_request_duration); register_format_tag_handler("t", header_request_time); register_format_tag_handler("e", header_request_env_var); register_format_tag_handler("s", header_request_ssl_var); register_format_tag_handler("l", header_request_loadavg); register_format_tag_handler("i", header_request_idle); register_format_tag_handler("b", header_request_busy); return OK; } static int header_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { header_ssl_lookup = APR_RETRIEVE_OPTIONAL_FN(ssl_var_lookup); return OK; } static void register_hooks(apr_pool_t *p) { ap_register_output_filter("FIXUP_HEADERS_OUT", ap_headers_output_filter, NULL, AP_FTYPE_CONTENT_SET); ap_register_output_filter("FIXUP_HEADERS_ERR", ap_headers_error_filter, NULL, AP_FTYPE_CONTENT_SET); ap_hook_pre_config(header_pre_config,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_post_config(header_post_config,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_insert_filter(ap_headers_insert_output_filter, NULL, NULL, APR_HOOK_LAST); ap_hook_insert_error_filter(ap_headers_insert_error_filter, NULL, NULL, APR_HOOK_LAST); ap_hook_fixups(ap_headers_fixup, NULL, NULL, APR_HOOK_LAST); ap_hook_post_read_request(ap_headers_early, NULL, NULL, APR_HOOK_FIRST); } AP_DECLARE_MODULE(headers) = { STANDARD20_MODULE_STUFF, create_headers_dir_config, /* dir config creater */ merge_headers_config, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server configs */ headers_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; �����������������httpd-2.4.41/modules/database/����������������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273342�014456� 5����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/database/mod_dbd.dep�����������������������������������������������������������0000644�0000000�0000050�00000004100�12674411515�016533� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_dbd.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_dbd.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_dbd.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_dbd.h"\ ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/database/mod_dbd.h�������������������������������������������������������������0000644�0000000�0000050�00000010072�11637105701�016212� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_dbd.h * @brief Database Access Extension Module for Apache * * Overview of what this is and does: * http://www.apache.org/~niq/dbd.html * or * http://apache.webthing.com/database/ * * @defgroup MOD_DBD mod_dbd * @ingroup APACHE_MODS * @{ */ #ifndef DBD_H #define DBD_H /* Create a set of DBD_DECLARE(type), DBD_DECLARE_NONSTD(type) and * DBD_DECLARE_DATA with appropriate export and import tags for the platform */ #if !defined(WIN32) #define DBD_DECLARE(type) type #define DBD_DECLARE_NONSTD(type) type #define DBD_DECLARE_DATA #elif defined(DBD_DECLARE_STATIC) #define DBD_DECLARE(type) type __stdcall #define DBD_DECLARE_NONSTD(type) type #define DBD_DECLARE_DATA #elif defined(DBD_DECLARE_EXPORT) #define DBD_DECLARE(type) __declspec(dllexport) type __stdcall #define DBD_DECLARE_NONSTD(type) __declspec(dllexport) type #define DBD_DECLARE_DATA __declspec(dllexport) #else #define DBD_DECLARE(type) __declspec(dllimport) type __stdcall #define DBD_DECLARE_NONSTD(type) __declspec(dllimport) type #define DBD_DECLARE_DATA __declspec(dllimport) #endif #include <httpd.h> #include <apr_optional.h> #include <apr_hash.h> #include <apr_hooks.h> typedef struct { server_rec *server; const char *name; const char *params; int persist; #if APR_HAS_THREADS int nmin; int nkeep; int nmax; int exptime; int set; #endif apr_hash_t *queries; apr_array_header_t *init_queries; } dbd_cfg_t; typedef struct { apr_dbd_t *handle; const apr_dbd_driver_t *driver; apr_hash_t *prepared; apr_pool_t *pool; } ap_dbd_t; /* Export functions to access the database */ /* acquire a connection that MUST be explicitly closed. * Returns NULL on error */ DBD_DECLARE_NONSTD(ap_dbd_t*) ap_dbd_open(apr_pool_t*, server_rec*); /* release a connection acquired with ap_dbd_open */ DBD_DECLARE_NONSTD(void) ap_dbd_close(server_rec*, ap_dbd_t*); /* acquire a connection that will have the lifetime of a request * and MUST NOT be explicitly closed. Return NULL on error. * This is the preferred function for most applications. */ DBD_DECLARE_NONSTD(ap_dbd_t*) ap_dbd_acquire(request_rec*); /* acquire a connection that will have the lifetime of a connection * and MUST NOT be explicitly closed. Return NULL on error. * This is the preferred function for most applications. */ DBD_DECLARE_NONSTD(ap_dbd_t*) ap_dbd_cacquire(conn_rec*); /* Prepare a statement for use by a client module during * the server startup/configuration phase. Can't be called * after the server has created its children (use apr_dbd_*). */ DBD_DECLARE_NONSTD(void) ap_dbd_prepare(server_rec*, const char*, const char*); /* Also export them as optional functions for modules that prefer it */ APR_DECLARE_OPTIONAL_FN(ap_dbd_t*, ap_dbd_open, (apr_pool_t*, server_rec*)); APR_DECLARE_OPTIONAL_FN(void, ap_dbd_close, (server_rec*, ap_dbd_t*)); APR_DECLARE_OPTIONAL_FN(ap_dbd_t*, ap_dbd_acquire, (request_rec*)); APR_DECLARE_OPTIONAL_FN(ap_dbd_t*, ap_dbd_cacquire, (conn_rec*)); APR_DECLARE_OPTIONAL_FN(void, ap_dbd_prepare, (server_rec*, const char*, const char*)); APR_DECLARE_EXTERNAL_HOOK(dbd, DBD, apr_status_t, post_connect, (apr_pool_t *, dbd_cfg_t *, ap_dbd_t *)) #endif /** @} */ ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/database/NWGNUmakefile���������������������������������������������������������0000644�0000000�0000050�00000010433�11540562746�017002� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = moddbd # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) DBD Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = DBD Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/moddbd.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_dbd.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ dbd_module \ ap_dbd_open \ ap_dbd_close \ ap_dbd_acquire \ ap_dbd_cacquire \ ap_dbd_prepare \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/database/config.m4�������������������������������������������������������������0000644�0000000�0000050�00000000244�11245631222�016155� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� APACHE_MODPATH_INIT(database) APACHE_MODULE(dbd, Apache DBD Framework, , , most) APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) APACHE_MODPATH_FINISH ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/database/mod_dbd.dsp�����������������������������������������������������������0000644�0000000�0000050�00000010675�10551346420�016561� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_dbd" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_dbd - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_dbd.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_dbd.mak" CFG="mod_dbd - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_dbd - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_dbd - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_dbd - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "DBD_DECLARE_EXPORT" /Fd"Release\mod_dbd_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_dbd.so" /d LONG_NAME="dbd_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_dbd.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_dbd.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_dbd - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "DBD_DECLARE_EXPORT" /Fd"Debug\mod_dbd_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_dbd.so" /d LONG_NAME="dbd_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_dbd.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_dbd.so # Begin Special Build Tool TargetPath=.\Debug\mod_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_dbd - Win32 Release" # Name "mod_dbd - Win32 Debug" # Begin Source File SOURCE=.\mod_dbd.h # End Source File # Begin Source File SOURCE=.\mod_dbd.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������httpd-2.4.41/modules/database/mod_dbd.mak�����������������������������������������������������������0000644�0000000�0000050�00000023041�12701473373�016541� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_dbd.dsp !IF "$(CFG)" == "" CFG=mod_dbd - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_dbd - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_dbd - Win32 Release" && "$(CFG)" != "mod_dbd - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_dbd.mak" CFG="mod_dbd - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_dbd - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_dbd - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_dbd - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_dbd.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_dbd.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_dbd.obj" -@erase "$(INTDIR)\mod_dbd.res" -@erase "$(INTDIR)\mod_dbd_src.idb" -@erase "$(INTDIR)\mod_dbd_src.pdb" -@erase "$(OUTDIR)\mod_dbd.exp" -@erase "$(OUTDIR)\mod_dbd.lib" -@erase "$(OUTDIR)\mod_dbd.pdb" -@erase "$(OUTDIR)\mod_dbd.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "DBD_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_dbd_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_dbd.so" /d LONG_NAME="dbd_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_dbd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_dbd.pdb" /debug /out:"$(OUTDIR)\mod_dbd.so" /implib:"$(OUTDIR)\mod_dbd.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_dbd.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_dbd.obj" \ "$(INTDIR)\mod_dbd.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_dbd.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_dbd.so" if exist .\Release\mod_dbd.so.manifest mt.exe -manifest .\Release\mod_dbd.so.manifest -outputresource:.\Release\mod_dbd.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_dbd - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_dbd.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_dbd.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_dbd.obj" -@erase "$(INTDIR)\mod_dbd.res" -@erase "$(INTDIR)\mod_dbd_src.idb" -@erase "$(INTDIR)\mod_dbd_src.pdb" -@erase "$(OUTDIR)\mod_dbd.exp" -@erase "$(OUTDIR)\mod_dbd.lib" -@erase "$(OUTDIR)\mod_dbd.pdb" -@erase "$(OUTDIR)\mod_dbd.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "DBD_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_dbd_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_dbd.so" /d LONG_NAME="dbd_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_dbd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_dbd.pdb" /debug /out:"$(OUTDIR)\mod_dbd.so" /implib:"$(OUTDIR)\mod_dbd.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_dbd.so LINK32_OBJS= \ "$(INTDIR)\mod_dbd.obj" \ "$(INTDIR)\mod_dbd.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_dbd.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_dbd.so" if exist .\Debug\mod_dbd.so.manifest mt.exe -manifest .\Debug\mod_dbd.so.manifest -outputresource:.\Debug\mod_dbd.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_dbd.dep") !INCLUDE "mod_dbd.dep" !ELSE !MESSAGE Warning: cannot find "mod_dbd.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_dbd - Win32 Release" || "$(CFG)" == "mod_dbd - Win32 Debug" !IF "$(CFG)" == "mod_dbd - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\database" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\database" !ELSEIF "$(CFG)" == "mod_dbd - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\database" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\database" !ENDIF !IF "$(CFG)" == "mod_dbd - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\database" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\database" !ELSEIF "$(CFG)" == "mod_dbd - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\database" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\database" !ENDIF !IF "$(CFG)" == "mod_dbd - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\database" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\database" !ELSEIF "$(CFG)" == "mod_dbd - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\database" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\database" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_dbd - Win32 Release" "$(INTDIR)\mod_dbd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_dbd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_dbd.so" /d LONG_NAME="dbd_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_dbd - Win32 Debug" "$(INTDIR)\mod_dbd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_dbd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_dbd.so" /d LONG_NAME="dbd_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_dbd.c "$(INTDIR)\mod_dbd.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/database/mod_dbd.c�������������������������������������������������������������0000644�0000000�0000050�00000072541�12402343253�016213� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* Overview of what this is and does: * http://www.apache.org/~niq/dbd.html * or * http://apache.webthing.com/database/ */ #include "apr_reslist.h" #include "apr_strings.h" #include "apr_hash.h" #include "apr_tables.h" #include "apr_lib.h" #include "apr_dbd.h" #define APR_WANT_MEMFUNC #define APR_WANT_STRFUNC #include "apr_want.h" #include "http_protocol.h" #include "http_config.h" #include "http_log.h" #include "http_request.h" #include "mod_dbd.h" extern module AP_MODULE_DECLARE_DATA dbd_module; APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(dbd, DBD, apr_status_t, post_connect, (apr_pool_t *pool, dbd_cfg_t *cfg, ap_dbd_t *dbd), (pool, cfg, dbd), OK, DECLINED) /************ svr cfg: manage db connection pool ****************/ #define NMIN_SET 0x1 #define NKEEP_SET 0x2 #define NMAX_SET 0x4 #define EXPTIME_SET 0x8 typedef struct dbd_group_t dbd_group_t; struct dbd_group_t { dbd_cfg_t *cfg; dbd_group_t *next; apr_pool_t *pool; #if APR_HAS_THREADS apr_thread_mutex_t *mutex; apr_reslist_t *reslist; int destroyed; #else ap_dbd_t *rec; #endif }; typedef struct { dbd_cfg_t *cfg; dbd_group_t *group; } svr_cfg; typedef enum { cmd_name, cmd_params, cmd_persist, cmd_min, cmd_keep, cmd_max, cmd_exp } cmd_parts; static apr_pool_t *config_pool; static dbd_group_t *group_list; /* a default DBDriver value that'll generate meaningful error messages */ static const char *const no_dbdriver = "[DBDriver unset]"; /* A default nmin of >0 will help with generating meaningful * startup error messages if the database is down. */ #define DEFAULT_NMIN 1 #define DEFAULT_NKEEP 2 #define DEFAULT_NMAX 10 #define DEFAULT_EXPTIME 300 #define DEFAULT_SQL_INIT_ARRAY_SIZE 5 static void *create_dbd_config(apr_pool_t *pool, server_rec *s) { svr_cfg *svr = apr_pcalloc(pool, sizeof(svr_cfg)); dbd_cfg_t *cfg = svr->cfg = apr_pcalloc(pool, sizeof(dbd_cfg_t)); cfg->server = s; cfg->name = no_dbdriver; /* to generate meaningful error messages */ cfg->params = ""; /* don't risk segfault on misconfiguration */ cfg->persist = -1; #if APR_HAS_THREADS cfg->nmin = DEFAULT_NMIN; cfg->nkeep = DEFAULT_NKEEP; cfg->nmax = DEFAULT_NMAX; cfg->exptime = DEFAULT_EXPTIME; #endif cfg->queries = apr_hash_make(pool); cfg->init_queries = apr_array_make(pool, DEFAULT_SQL_INIT_ARRAY_SIZE, sizeof(const char *)); return svr; } static void *merge_dbd_config(apr_pool_t *pool, void *basev, void *addv) { dbd_cfg_t *base = ((svr_cfg*) basev)->cfg; dbd_cfg_t *add = ((svr_cfg*) addv)->cfg; svr_cfg *svr = apr_pcalloc(pool, sizeof(svr_cfg)); dbd_cfg_t *new = svr->cfg = apr_pcalloc(pool, sizeof(dbd_cfg_t)); new->server = add->server; new->name = (add->name != no_dbdriver) ? add->name : base->name; new->params = strcmp(add->params, "") ? add->params : base->params; new->persist = (add->persist != -1) ? add->persist : base->persist; #if APR_HAS_THREADS new->nmin = (add->set&NMIN_SET) ? add->nmin : base->nmin; new->nkeep = (add->set&NKEEP_SET) ? add->nkeep : base->nkeep; new->nmax = (add->set&NMAX_SET) ? add->nmax : base->nmax; new->exptime = (add->set&EXPTIME_SET) ? add->exptime : base->exptime; #endif new->queries = apr_hash_overlay(pool, add->queries, base->queries); new->init_queries = apr_array_append(pool, add->init_queries, base->init_queries); return svr; } static void ap_dbd_sql_init(server_rec *s, const char *query) { svr_cfg *svr; const char **arr_item; svr = ap_get_module_config(s->module_config, &dbd_module); if (!svr) { /* some modules may call from within config directive handlers, and * if these are called in a server context that contains no mod_dbd * config directives, then we have to create our own server config */ svr = create_dbd_config(config_pool, s); ap_set_module_config(s->module_config, &dbd_module, svr); } if (query) { arr_item = apr_array_push(svr->cfg->init_queries); *arr_item = query; } } static const char *dbd_param(cmd_parms *cmd, void *dconf, const char *val) { apr_status_t rv; const apr_dbd_driver_t *driver = NULL; svr_cfg *svr = ap_get_module_config(cmd->server->module_config, &dbd_module); dbd_cfg_t *cfg = svr->cfg; switch ((long) cmd->info) { case cmd_name: cfg->name = val; /* loading the driver involves once-only dlloading that is * best done at server startup. This also guarantees that * we won't return an error later. */ rv = apr_dbd_get_driver(cmd->pool, cfg->name, &driver); if (APR_STATUS_IS_ENOTIMPL(rv)) { return apr_psprintf(cmd->pool, "No driver for %s", cfg->name); } else if (APR_STATUS_IS_EDSOOPEN(rv)) { return apr_psprintf(cmd->pool, #ifdef NETWARE "Can't load driver file dbd%s.nlm", #else "Can't load driver file apr_dbd_%s.so", #endif cfg->name); } else if (APR_STATUS_IS_ESYMNOTFOUND(rv)) { return apr_psprintf(cmd->pool, "Failed to load driver apr_dbd_%s_driver", cfg->name); } break; case cmd_params: cfg->params = val; break; } return NULL; } #if APR_HAS_THREADS static const char *dbd_param_int(cmd_parms *cmd, void *dconf, const char *val) { svr_cfg *svr = ap_get_module_config(cmd->server->module_config, &dbd_module); dbd_cfg_t *cfg = svr->cfg; const char *p; for (p = val; *p; ++p) { if (!apr_isdigit(*p)) { return "Argument must be numeric!"; } } switch ((long) cmd->info) { case cmd_min: cfg->nmin = atoi(val); cfg->set |= NMIN_SET; break; case cmd_keep: cfg->nkeep = atoi(val); cfg->set |= NKEEP_SET; break; case cmd_max: cfg->nmax = atoi(val); cfg->set |= NMAX_SET; break; case cmd_exp: cfg->exptime = atoi(val); cfg->set |= EXPTIME_SET; break; } return NULL; } #endif static const char *dbd_param_flag(cmd_parms *cmd, void *dconf, int flag) { svr_cfg *svr = ap_get_module_config(cmd->server->module_config, &dbd_module); switch ((long) cmd->info) { case cmd_persist: svr->cfg->persist = flag; break; } return NULL; } static const char *dbd_prepare(cmd_parms *cmd, void *dconf, const char *query, const char *label) { if (!label) { label = query; query = ""; } ap_dbd_prepare(cmd->server, query, label); return NULL; } static const char *dbd_init_sql(cmd_parms *cmd, void *dconf, const char *query) { if (!query || *query == '\n') { return "You should specify SQL statement"; } ap_dbd_sql_init(cmd->server, query); return NULL; } static const command_rec dbd_cmds[] = { AP_INIT_TAKE1("DBDriver", dbd_param, (void*)cmd_name, RSRC_CONF, "SQL Driver"), AP_INIT_TAKE1("DBDParams", dbd_param, (void*)cmd_params, RSRC_CONF, "SQL Driver Params"), AP_INIT_FLAG("DBDPersist", dbd_param_flag, (void*)cmd_persist, RSRC_CONF, "Use persistent connection/pool"), AP_INIT_TAKE12("DBDPrepareSQL", dbd_prepare, NULL, RSRC_CONF, "SQL statement to prepare (or nothing, to override " "statement inherited from main server) and label"), AP_INIT_TAKE1("DBDInitSQL", dbd_init_sql, NULL, RSRC_CONF, "SQL statement to be executed after connection is created"), #if APR_HAS_THREADS AP_INIT_TAKE1("DBDMin", dbd_param_int, (void*)cmd_min, RSRC_CONF, "Minimum number of connections"), /* XXX: note that mod_proxy calls this "smax" */ AP_INIT_TAKE1("DBDKeep", dbd_param_int, (void*)cmd_keep, RSRC_CONF, "Maximum number of sustained connections"), AP_INIT_TAKE1("DBDMax", dbd_param_int, (void*)cmd_max, RSRC_CONF, "Maximum number of connections"), /* XXX: note that mod_proxy calls this "ttl" (time to live) */ AP_INIT_TAKE1("DBDExptime", dbd_param_int, (void*)cmd_exp, RSRC_CONF, "Keepalive time for idle connections"), #endif {NULL} }; static int dbd_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { config_pool = pconf; group_list = NULL; return OK; } DBD_DECLARE_NONSTD(void) ap_dbd_prepare(server_rec *s, const char *query, const char *label) { svr_cfg *svr; svr = ap_get_module_config(s->module_config, &dbd_module); if (!svr) { /* some modules may call from within config directive handlers, and * if these are called in a server context that contains no mod_dbd * config directives, then we have to create our own server config */ svr = create_dbd_config(config_pool, s); ap_set_module_config(s->module_config, &dbd_module, svr); } if (apr_hash_get(svr->cfg->queries, label, APR_HASH_KEY_STRING) && strcmp(query, "")) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(02653) "conflicting SQL statements with label %s", label); } apr_hash_set(svr->cfg->queries, label, APR_HASH_KEY_STRING, query); } typedef struct { const char *label, *query; } dbd_query_t; static int dbd_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { server_rec *sp; apr_array_header_t *add_queries = apr_array_make(ptemp, 10, sizeof(dbd_query_t)); for (sp = s; sp; sp = sp->next) { svr_cfg *svr = ap_get_module_config(sp->module_config, &dbd_module); dbd_cfg_t *cfg = svr->cfg; apr_hash_index_t *hi_first = apr_hash_first(ptemp, cfg->queries); dbd_group_t *group; /* dbd_setup in 2.2.3 and under was causing spurious error messages * when dbd isn't configured. We can stop that with a quick check here * together with a similar check in ap_dbd_open (where being * unconfigured is a genuine error that must be reported). */ if (cfg->name == no_dbdriver || !cfg->persist) { continue; } for (group = group_list; group; group = group->next) { dbd_cfg_t *group_cfg = group->cfg; apr_hash_index_t *hi; int group_ok = 1; if (strcmp(cfg->name, group_cfg->name) || strcmp(cfg->params, group_cfg->params)) { continue; } #if APR_HAS_THREADS if (cfg->nmin != group_cfg->nmin || cfg->nkeep != group_cfg->nkeep || cfg->nmax != group_cfg->nmax || cfg->exptime != group_cfg->exptime) { continue; } #endif add_queries->nelts = 0; for (hi = hi_first; hi; hi = apr_hash_next(hi)) { const char *label, *query; const char *group_query; apr_hash_this(hi, (void*) &label, NULL, (void*) &query); group_query = apr_hash_get(group_cfg->queries, label, APR_HASH_KEY_STRING); if (!group_query) { dbd_query_t *add_query = apr_array_push(add_queries); add_query->label = label; add_query->query = query; } else if (strcmp(query, group_query)) { group_ok = 0; break; } } if (group_ok) { int i; for (i = 0; i < add_queries->nelts; ++i) { dbd_query_t *add_query = ((dbd_query_t*) add_queries->elts) + i; apr_hash_set(group_cfg->queries, add_query->label, APR_HASH_KEY_STRING, add_query->query); } svr->group = group; break; } } if (!svr->group) { svr->group = group = apr_pcalloc(pconf, sizeof(dbd_group_t)); group->cfg = cfg; group->next = group_list; group_list = group; } } return OK; } static apr_status_t dbd_prepared_init(apr_pool_t *pool, dbd_cfg_t *cfg, ap_dbd_t *rec) { apr_hash_index_t *hi; rec->prepared = apr_hash_make(pool); for (hi = apr_hash_first(pool, cfg->queries); hi; hi = apr_hash_next(hi)) { const char *label, *query; apr_dbd_prepared_t *stmt; apr_hash_this(hi, (void*) &label, NULL, (void*) &query); if (!strcmp(query, "")) { continue; } stmt = NULL; if (apr_dbd_prepare(rec->driver, pool, rec->handle, query, label, &stmt)) { return APR_EGENERAL; } else { apr_hash_set(rec->prepared, label, APR_HASH_KEY_STRING, stmt); } } return APR_SUCCESS; } static apr_status_t dbd_init_sql_init(apr_pool_t *pool, dbd_cfg_t *cfg, ap_dbd_t *rec) { int i; apr_status_t rv = APR_SUCCESS; for (i = 0; i < cfg->init_queries->nelts; i++) { int nrows; char **query_p; query_p = (char **)cfg->init_queries->elts + i; if (apr_dbd_query(rec->driver, rec->handle, &nrows, *query_p)) { rv = APR_EGENERAL; break; } } return rv; } static apr_status_t dbd_close(void *data) { ap_dbd_t *rec = data; return apr_dbd_close(rec->driver, rec->handle); } #if APR_HAS_THREADS static apr_status_t dbd_destruct(void *data, void *params, apr_pool_t *pool) { dbd_group_t *group = params; if (!group->destroyed) { ap_dbd_t *rec = data; apr_pool_destroy(rec->pool); } return APR_SUCCESS; } #endif /* an apr_reslist_constructor for SQL connections * Also use this for opening in non-reslist modes, since it gives * us all the error-handling in one place. */ static apr_status_t dbd_construct(void **data_ptr, void *params, apr_pool_t *pool) { dbd_group_t *group = params; dbd_cfg_t *cfg = group->cfg; apr_pool_t *rec_pool, *prepared_pool; ap_dbd_t *rec; apr_status_t rv; const char *err = ""; rv = apr_pool_create(&rec_pool, pool); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, cfg->server, APLOGNO(00624) "Failed to create memory pool"); return rv; } rec = apr_pcalloc(rec_pool, sizeof(ap_dbd_t)); rec->pool = rec_pool; /* The driver is loaded at config time now, so this just checks a hash. * If that changes, the driver DSO could be registered to unload against * our pool, which is probably not what we want. Error checking isn't * necessary now, but in case that changes in the future ... */ rv = apr_dbd_get_driver(rec->pool, cfg->name, &rec->driver); if (rv != APR_SUCCESS) { if (APR_STATUS_IS_ENOTIMPL(rv)) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, cfg->server, APLOGNO(00625) "driver for %s not available", cfg->name); } else if (APR_STATUS_IS_EDSOOPEN(rv)) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, cfg->server, APLOGNO(00626) "can't find driver for %s", cfg->name); } else if (APR_STATUS_IS_ESYMNOTFOUND(rv)) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, cfg->server, APLOGNO(00627) "driver for %s is invalid or corrupted", cfg->name); } else { ap_log_error(APLOG_MARK, APLOG_ERR, rv, cfg->server, APLOGNO(00628) "mod_dbd not compatible with APR in get_driver"); } apr_pool_destroy(rec->pool); return rv; } rv = apr_dbd_open_ex(rec->driver, rec->pool, cfg->params, &rec->handle, &err); if (rv != APR_SUCCESS) { switch (rv) { case APR_EGENERAL: ap_log_error(APLOG_MARK, APLOG_ERR, rv, cfg->server, APLOGNO(00629) "Can't connect to %s: %s", cfg->name, err); break; default: ap_log_error(APLOG_MARK, APLOG_ERR, rv, cfg->server, APLOGNO(00630) "mod_dbd not compatible with APR in open"); break; } apr_pool_destroy(rec->pool); return rv; } apr_pool_cleanup_register(rec->pool, rec, dbd_close, apr_pool_cleanup_null); /* we use a sub-pool for the prepared statements for each connection so * that they will be cleaned up first, before the connection is closed */ rv = apr_pool_create(&prepared_pool, rec->pool); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, cfg->server, APLOGNO(00631) "Failed to create memory pool"); apr_pool_destroy(rec->pool); return rv; } rv = dbd_prepared_init(prepared_pool, cfg, rec); if (rv != APR_SUCCESS) { const char *errmsg = apr_dbd_error(rec->driver, rec->handle, rv); ap_log_error(APLOG_MARK, APLOG_ERR, rv, cfg->server, APLOGNO(00632) "failed to prepare SQL statements: %s", (errmsg ? errmsg : "[???]")); apr_pool_destroy(rec->pool); return rv; } dbd_run_post_connect(prepared_pool, cfg, rec); *data_ptr = rec; return APR_SUCCESS; } #if APR_HAS_THREADS static apr_status_t dbd_destroy(void *data) { dbd_group_t *group = data; group->destroyed = 1; return APR_SUCCESS; } static apr_status_t dbd_setup(server_rec *s, dbd_group_t *group) { dbd_cfg_t *cfg = group->cfg; apr_status_t rv; /* We create the reslist using a sub-pool of the pool passed to our * child_init hook. No other threads can be here because we're * either in the child_init phase or dbd_setup_lock() acquired our mutex. * No other threads will use this sub-pool after this, except via * reslist calls, which have an internal mutex. * * We need to short-circuit the cleanup registered internally by * apr_reslist_create(). We do this by registering dbd_destroy() * as a cleanup afterwards, so that it will run before the reslist's * internal cleanup. * * If we didn't do this, then we could free memory twice when the pool * was destroyed. When apr_pool_destroy() runs, it first destroys all * all the per-connection sub-pools created in dbd_construct(), and * then it runs the reslist's cleanup. The cleanup calls dbd_destruct() * on each resource, which would then attempt to destroy the sub-pools * a second time. */ rv = apr_reslist_create(&group->reslist, cfg->nmin, cfg->nkeep, cfg->nmax, apr_time_from_sec(cfg->exptime), dbd_construct, dbd_destruct, group, group->pool); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00633) "failed to initialise"); return rv; } apr_pool_cleanup_register(group->pool, group, dbd_destroy, apr_pool_cleanup_null); return APR_SUCCESS; } #endif static apr_status_t dbd_setup_init(apr_pool_t *pool, server_rec *s) { dbd_group_t *group; apr_status_t rv = APR_SUCCESS; for (group = group_list; group; group = group->next) { apr_status_t rv2; rv2 = apr_pool_create(&group->pool, pool); if (rv2 != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv2, s, APLOGNO(00634) "Failed to create reslist cleanup memory pool"); return rv2; } #if APR_HAS_THREADS rv2 = dbd_setup(s, group); if (rv2 == APR_SUCCESS) { continue; } else if (rv == APR_SUCCESS) { rv = rv2; } /* we failed, so create a mutex so that subsequent competing callers * to ap_dbd_open can serialize themselves while they retry */ rv2 = apr_thread_mutex_create(&group->mutex, APR_THREAD_MUTEX_DEFAULT, pool); if (rv2 != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv2, s, APLOGNO(00635) "Failed to create thread mutex"); return rv2; } #endif } return rv; } static void dbd_child_init(apr_pool_t *p, server_rec *s) { apr_status_t rv = dbd_setup_init(p, s); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(00636) "child init failed!"); } } #if APR_HAS_THREADS static apr_status_t dbd_setup_lock(server_rec *s, dbd_group_t *group) { apr_status_t rv = APR_SUCCESS, rv2; /* several threads could be here at the same time, all trying to * initialize the reslist because dbd_setup_init failed to do so */ if (!group->mutex) { /* we already logged an error when the mutex couldn't be created */ return APR_EGENERAL; } rv2 = apr_thread_mutex_lock(group->mutex); if (rv2 != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv2, s, APLOGNO(00637) "Failed to acquire thread mutex"); return rv2; } if (!group->reslist) { rv = dbd_setup(s, group); } rv2 = apr_thread_mutex_unlock(group->mutex); if (rv2 != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv2, s, APLOGNO(00638) "Failed to release thread mutex"); if (rv == APR_SUCCESS) { rv = rv2; } } return rv; } #endif /* Functions we export for modules to use: - open acquires a connection from the pool (opens one if necessary) - close releases it back in to the pool */ DBD_DECLARE_NONSTD(void) ap_dbd_close(server_rec *s, ap_dbd_t *rec) { svr_cfg *svr = ap_get_module_config(s->module_config, &dbd_module); if (!svr->cfg->persist) { apr_pool_destroy(rec->pool); } #if APR_HAS_THREADS else { apr_reslist_release(svr->group->reslist, rec); } #endif } static apr_status_t dbd_check(apr_pool_t *pool, server_rec *s, ap_dbd_t *rec) { svr_cfg *svr; apr_status_t rv = apr_dbd_check_conn(rec->driver, pool, rec->handle); const char *errmsg; if ((rv == APR_SUCCESS) || (rv == APR_ENOTIMPL)) { return APR_SUCCESS; } /* we don't have a driver-specific error code, so we'll just pass * a "success" value and rely on the driver to ignore it */ errmsg = apr_dbd_error(rec->driver, rec->handle, 0); if (!errmsg) { errmsg = "(unknown)"; } svr = ap_get_module_config(s->module_config, &dbd_module); ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00639) "DBD [%s] Error: %s", svr->cfg->name, errmsg); return rv; } DBD_DECLARE_NONSTD(ap_dbd_t*) ap_dbd_open(apr_pool_t *pool, server_rec *s) { svr_cfg *svr = ap_get_module_config(s->module_config, &dbd_module); dbd_group_t *group = svr->group; dbd_cfg_t *cfg = svr->cfg; ap_dbd_t *rec = NULL; #if APR_HAS_THREADS apr_status_t rv; #endif /* If nothing is configured, we shouldn't be here */ if (cfg->name == no_dbdriver) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(02654) "not configured"); return NULL; } if (!cfg->persist) { /* Return a once-only connection */ group = apr_pcalloc(pool, sizeof(dbd_group_t)); group->cfg = cfg; dbd_construct((void*) &rec, group, pool); return rec; } #if APR_HAS_THREADS if (!group->reslist) { if (dbd_setup_lock(s, group) != APR_SUCCESS) { return NULL; } } rv = apr_reslist_acquire(group->reslist, (void*) &rec); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(02655) "Failed to acquire DBD connection from pool!"); return NULL; } if (dbd_check(pool, s, rec) != APR_SUCCESS) { apr_reslist_invalidate(group->reslist, rec); return NULL; } #else /* If we have a persistent connection and it's good, we'll use it; * since this is non-threaded, we can update without a mutex */ rec = group->rec; if (rec) { if (dbd_check(pool, s, rec) != APR_SUCCESS) { apr_pool_destroy(rec->pool); rec = NULL; } } /* We don't have a connection right now, so we'll open one */ if (!rec) { dbd_construct((void*) &rec, group, group->pool); group->rec = rec; } #endif return rec; } #if APR_HAS_THREADS typedef struct { ap_dbd_t *rec; apr_reslist_t *reslist; } dbd_acquire_t; static apr_status_t dbd_release(void *data) { dbd_acquire_t *acq = data; apr_reslist_release(acq->reslist, acq->rec); return APR_SUCCESS; } DBD_DECLARE_NONSTD(ap_dbd_t *) ap_dbd_acquire(request_rec *r) { dbd_acquire_t *acq; while (!ap_is_initial_req(r)) { if (r->prev) { r = r->prev; } else if (r->main) { r = r->main; } } acq = ap_get_module_config(r->request_config, &dbd_module); if (!acq) { acq = apr_palloc(r->pool, sizeof(dbd_acquire_t)); acq->rec = ap_dbd_open(r->pool, r->server); if (acq->rec) { svr_cfg *svr = ap_get_module_config(r->server->module_config, &dbd_module); ap_set_module_config(r->request_config, &dbd_module, acq); if (svr->cfg->persist) { acq->reslist = svr->group->reslist; apr_pool_cleanup_register(r->pool, acq, dbd_release, apr_pool_cleanup_null); } } } return acq->rec; } DBD_DECLARE_NONSTD(ap_dbd_t *) ap_dbd_cacquire(conn_rec *c) { dbd_acquire_t *acq = ap_get_module_config(c->conn_config, &dbd_module); if (!acq) { acq = apr_palloc(c->pool, sizeof(dbd_acquire_t)); acq->rec = ap_dbd_open(c->pool, c->base_server); if (acq->rec) { svr_cfg *svr = ap_get_module_config(c->base_server->module_config, &dbd_module); ap_set_module_config(c->conn_config, &dbd_module, acq); if (svr->cfg->persist) { acq->reslist = svr->group->reslist; apr_pool_cleanup_register(c->pool, acq, dbd_release, apr_pool_cleanup_null); } } } return acq->rec; } #else DBD_DECLARE_NONSTD(ap_dbd_t *) ap_dbd_acquire(request_rec *r) { ap_dbd_t *rec; while (!ap_is_initial_req(r)) { if (r->prev) { r = r->prev; } else if (r->main) { r = r->main; } } rec = ap_get_module_config(r->request_config, &dbd_module); if (!rec) { rec = ap_dbd_open(r->pool, r->server); if (rec) { ap_set_module_config(r->request_config, &dbd_module, rec); } } return rec; } DBD_DECLARE_NONSTD(ap_dbd_t *) ap_dbd_cacquire(conn_rec *c) { ap_dbd_t *rec = ap_get_module_config(c->conn_config, &dbd_module); if (!rec) { rec = ap_dbd_open(c->pool, c->base_server); if (rec) { ap_set_module_config(c->conn_config, &dbd_module, rec); } } return rec; } #endif static void dbd_hooks(apr_pool_t *pool) { ap_hook_pre_config(dbd_pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(dbd_post_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_child_init(dbd_child_init, NULL, NULL, APR_HOOK_MIDDLE); APR_REGISTER_OPTIONAL_FN(ap_dbd_prepare); APR_REGISTER_OPTIONAL_FN(ap_dbd_open); APR_REGISTER_OPTIONAL_FN(ap_dbd_close); APR_REGISTER_OPTIONAL_FN(ap_dbd_acquire); APR_REGISTER_OPTIONAL_FN(ap_dbd_cacquire); APR_OPTIONAL_HOOK(dbd, post_connect, dbd_init_sql_init, NULL, NULL, APR_HOOK_MIDDLE); apr_dbd_init(pool); } AP_DECLARE_MODULE(dbd) = { STANDARD20_MODULE_STUFF, NULL, NULL, create_dbd_config, merge_dbd_config, dbd_cmds, dbd_hooks }; ���������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/database/Makefile.in�����������������������������������������������������������0000644�0000000�0000050�00000000267�10315220761�016517� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/���������������������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273342�013434� 5����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_dbm.dsp����������������������������������������������������������0000644�0000000�0000050�00000011007�10551346420�016751� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authz_dbm" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authz_dbm - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authz_dbm.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authz_dbm.mak" CFG="mod_authz_dbm - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authz_dbm - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authz_dbm - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authz_dbm - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_authz_dbm_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authz_dbm.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authz_dbm.so" /d LONG_NAME="authz_dbm_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authz_dbm.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_dbm.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authz_dbm.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_dbm.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authz_dbm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authz_dbm - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_authz_dbm_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authz_dbm.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authz_dbm.so" /d LONG_NAME="authz_dbm_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authz_dbm.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_dbm.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authz_dbm.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_dbm.so # Begin Special Build Tool TargetPath=.\Debug\mod_authz_dbm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authz_dbm - Win32 Release" # Name "mod_authz_dbm - Win32 Debug" # Begin Source File SOURCE=.\mod_authz_dbm.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_dbd.c������������������������������������������������������������0000644�0000000�0000050�00000026453�12763577143�016412� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ap_provider.h" #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_request.h" #include "apr_lib.h" #include "apr_dbd.h" #include "mod_dbd.h" #include "apr_strings.h" #include "mod_auth.h" #include "apr_md5.h" #include "apu_version.h" module AP_MODULE_DECLARE_DATA authn_dbd_module; typedef struct { const char *user; const char *realm; } authn_dbd_conf; /* optional function - look it up once in post_config */ static ap_dbd_t *(*authn_dbd_acquire_fn)(request_rec*) = NULL; static void (*authn_dbd_prepare_fn)(server_rec*, const char*, const char*) = NULL; static APR_OPTIONAL_FN_TYPE(ap_authn_cache_store) *authn_cache_store = NULL; #define AUTHN_CACHE_STORE(r,user,realm,data) \ if (authn_cache_store != NULL) \ authn_cache_store((r), "dbd", (user), (realm), (data)) static void *authn_dbd_cr_conf(apr_pool_t *pool, char *dummy) { authn_dbd_conf *ret = apr_pcalloc(pool, sizeof(authn_dbd_conf)); return ret; } static void *authn_dbd_merge_conf(apr_pool_t *pool, void *BASE, void *ADD) { authn_dbd_conf *add = ADD; authn_dbd_conf *base = BASE; authn_dbd_conf *ret = apr_palloc(pool, sizeof(authn_dbd_conf)); ret->user = (add->user == NULL) ? base->user : add->user; ret->realm = (add->realm == NULL) ? base->realm : add->realm; return ret; } static const char *authn_dbd_prepare(cmd_parms *cmd, void *cfg, const char *query) { static unsigned int label_num = 0; char *label; const char *err = ap_check_cmd_context(cmd, NOT_IN_HTACCESS); if (err) return err; if (authn_dbd_prepare_fn == NULL) { authn_dbd_prepare_fn = APR_RETRIEVE_OPTIONAL_FN(ap_dbd_prepare); if (authn_dbd_prepare_fn == NULL) { return "You must load mod_dbd to enable AuthDBD functions"; } authn_dbd_acquire_fn = APR_RETRIEVE_OPTIONAL_FN(ap_dbd_acquire); } label = apr_psprintf(cmd->pool, "authn_dbd_%d", ++label_num); authn_dbd_prepare_fn(cmd->server, query, label); /* save the label here for our own use */ return ap_set_string_slot(cmd, cfg, label); } static const command_rec authn_dbd_cmds[] = { AP_INIT_TAKE1("AuthDBDUserPWQuery", authn_dbd_prepare, (void *)APR_OFFSETOF(authn_dbd_conf, user), ACCESS_CONF, "Query used to fetch password for user"), AP_INIT_TAKE1("AuthDBDUserRealmQuery", authn_dbd_prepare, (void *)APR_OFFSETOF(authn_dbd_conf, realm), ACCESS_CONF, "Query used to fetch password for user+realm"), {NULL} }; static authn_status authn_dbd_password(request_rec *r, const char *user, const char *password) { apr_status_t rv; const char *dbd_password = NULL; apr_dbd_prepared_t *statement; apr_dbd_results_t *res = NULL; apr_dbd_row_t *row = NULL; int ret; authn_dbd_conf *conf = ap_get_module_config(r->per_dir_config, &authn_dbd_module); ap_dbd_t *dbd = authn_dbd_acquire_fn(r); if (dbd == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01653) "Failed to acquire database connection to look up " "user '%s'", user); return AUTH_GENERAL_ERROR; } if (conf->user == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01654) "No AuthDBDUserPWQuery has been specified"); return AUTH_GENERAL_ERROR; } statement = apr_hash_get(dbd->prepared, conf->user, APR_HASH_KEY_STRING); if (statement == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01655) "A prepared statement could not be found for " "AuthDBDUserPWQuery with the key '%s'", conf->user); return AUTH_GENERAL_ERROR; } if ((ret = apr_dbd_pvselect(dbd->driver, r->pool, dbd->handle, &res, statement, 0, user, NULL)) != 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01656) "Query execution error looking up '%s' " "in database [%s]", user, apr_dbd_error(dbd->driver, dbd->handle, ret)); return AUTH_GENERAL_ERROR; } for (rv = apr_dbd_get_row(dbd->driver, r->pool, res, &row, -1); rv != -1; rv = apr_dbd_get_row(dbd->driver, r->pool, res, &row, -1)) { if (rv != 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01657) "Error retrieving results while looking up '%s' " "in database", user); return AUTH_GENERAL_ERROR; } if (dbd_password == NULL) { #if APU_MAJOR_VERSION > 1 || (APU_MAJOR_VERSION == 1 && APU_MINOR_VERSION >= 3) /* add the rest of the columns to the environment */ int i = 1; const char *name; for (name = apr_dbd_get_name(dbd->driver, res, i); name != NULL; name = apr_dbd_get_name(dbd->driver, res, i)) { char *str = apr_pstrcat(r->pool, AUTHN_PREFIX, name, NULL); int j = sizeof(AUTHN_PREFIX)-1; /* string length of "AUTHENTICATE_", excluding the trailing NIL */ while (str[j]) { if (!apr_isalnum(str[j])) { str[j] = '_'; } else { str[j] = apr_toupper(str[j]); } j++; } apr_table_set(r->subprocess_env, str, apr_dbd_get_entry(dbd->driver, row, i)); i++; } #endif dbd_password = apr_pstrdup(r->pool, apr_dbd_get_entry(dbd->driver, row, 0)); } /* we can't break out here or row won't get cleaned up */ } if (!dbd_password) { return AUTH_USER_NOT_FOUND; } AUTHN_CACHE_STORE(r, user, NULL, dbd_password); rv = apr_password_validate(password, dbd_password); if (rv != APR_SUCCESS) { return AUTH_DENIED; } return AUTH_GRANTED; } static authn_status authn_dbd_realm(request_rec *r, const char *user, const char *realm, char **rethash) { apr_status_t rv; const char *dbd_hash = NULL; apr_dbd_prepared_t *statement; apr_dbd_results_t *res = NULL; apr_dbd_row_t *row = NULL; int ret; authn_dbd_conf *conf = ap_get_module_config(r->per_dir_config, &authn_dbd_module); ap_dbd_t *dbd = authn_dbd_acquire_fn(r); if (dbd == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01658) "Failed to acquire database connection to look up " "user '%s:%s'", user, realm); return AUTH_GENERAL_ERROR; } if (conf->realm == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01659) "No AuthDBDUserRealmQuery has been specified"); return AUTH_GENERAL_ERROR; } statement = apr_hash_get(dbd->prepared, conf->realm, APR_HASH_KEY_STRING); if (statement == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01660) "A prepared statement could not be found for " "AuthDBDUserRealmQuery with the key '%s'", conf->realm); return AUTH_GENERAL_ERROR; } if ((ret = apr_dbd_pvselect(dbd->driver, r->pool, dbd->handle, &res, statement, 0, user, realm, NULL)) != 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01661) "Query execution error looking up '%s:%s' " "in database [%s]", user, realm, apr_dbd_error(dbd->driver, dbd->handle, ret)); return AUTH_GENERAL_ERROR; } for (rv = apr_dbd_get_row(dbd->driver, r->pool, res, &row, -1); rv != -1; rv = apr_dbd_get_row(dbd->driver, r->pool, res, &row, -1)) { if (rv != 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01662) "Error retrieving results while looking up '%s:%s' " "in database", user, realm); return AUTH_GENERAL_ERROR; } if (dbd_hash == NULL) { #if APU_MAJOR_VERSION > 1 || (APU_MAJOR_VERSION == 1 && APU_MINOR_VERSION >= 3) /* add the rest of the columns to the environment */ int i = 1; const char *name; for (name = apr_dbd_get_name(dbd->driver, res, i); name != NULL; name = apr_dbd_get_name(dbd->driver, res, i)) { char *str = apr_pstrcat(r->pool, AUTHN_PREFIX, name, NULL); int j = sizeof(AUTHN_PREFIX)-1; /* string length of "AUTHENTICATE_", excluding the trailing NIL */ while (str[j]) { if (!apr_isalnum(str[j])) { str[j] = '_'; } else { str[j] = apr_toupper(str[j]); } j++; } apr_table_set(r->subprocess_env, str, apr_dbd_get_entry(dbd->driver, row, i)); i++; } #endif dbd_hash = apr_pstrdup(r->pool, apr_dbd_get_entry(dbd->driver, row, 0)); } /* we can't break out here or row won't get cleaned up */ } if (!dbd_hash) { return AUTH_USER_NOT_FOUND; } AUTHN_CACHE_STORE(r, user, realm, dbd_hash); *rethash = apr_pstrdup(r->pool, dbd_hash); return AUTH_USER_FOUND; } static void opt_retr(void) { authn_cache_store = APR_RETRIEVE_OPTIONAL_FN(ap_authn_cache_store); } static void authn_dbd_hooks(apr_pool_t *p) { static const authn_provider authn_dbd_provider = { &authn_dbd_password, &authn_dbd_realm }; ap_register_auth_provider(p, AUTHN_PROVIDER_GROUP, "dbd", AUTHN_PROVIDER_VERSION, &authn_dbd_provider, AP_AUTH_INTERNAL_PER_CONF); ap_hook_optional_fn_retrieve(opt_retr, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(authn_dbd) = { STANDARD20_MODULE_STUFF, authn_dbd_cr_conf, authn_dbd_merge_conf, NULL, NULL, authn_dbd_cmds, authn_dbd_hooks }; ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_file.c�����������������������������������������������������������0000644�0000000�0000050�00000013672�12147424465�016571� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_strings.h" #include "apr_md5.h" /* for apr_password_validate */ #include "ap_config.h" #include "ap_provider.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "mod_auth.h" typedef struct { char *pwfile; } authn_file_config_rec; static APR_OPTIONAL_FN_TYPE(ap_authn_cache_store) *authn_cache_store = NULL; #define AUTHN_CACHE_STORE(r,user,realm,data) \ if (authn_cache_store != NULL) \ authn_cache_store((r), "file", (user), (realm), (data)) static void *create_authn_file_dir_config(apr_pool_t *p, char *d) { authn_file_config_rec *conf = apr_palloc(p, sizeof(*conf)); conf->pwfile = NULL; /* just to illustrate the default really */ return conf; } static const command_rec authn_file_cmds[] = { AP_INIT_TAKE1("AuthUserFile", ap_set_file_slot, (void *)APR_OFFSETOF(authn_file_config_rec, pwfile), OR_AUTHCFG, "text file containing user IDs and passwords"), {NULL} }; module AP_MODULE_DECLARE_DATA authn_file_module; static authn_status check_password(request_rec *r, const char *user, const char *password) { authn_file_config_rec *conf = ap_get_module_config(r->per_dir_config, &authn_file_module); ap_configfile_t *f; char l[MAX_STRING_LEN]; apr_status_t status; char *file_password = NULL; if (!conf->pwfile) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01619) "AuthUserFile not specified in the configuration"); return AUTH_GENERAL_ERROR; } status = ap_pcfg_openfile(&f, r->pool, conf->pwfile); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01620) "Could not open password file: %s", conf->pwfile); return AUTH_GENERAL_ERROR; } while (!(ap_cfg_getline(l, MAX_STRING_LEN, f))) { const char *rpw, *w; /* Skip # or blank lines. */ if ((l[0] == '#') || (!l[0])) { continue; } rpw = l; w = ap_getword(r->pool, &rpw, ':'); if (!strcmp(user, w)) { file_password = ap_getword(r->pool, &rpw, ':'); break; } } ap_cfg_closefile(f); if (!file_password) { return AUTH_USER_NOT_FOUND; } AUTHN_CACHE_STORE(r, user, NULL, file_password); status = apr_password_validate(password, file_password); if (status != APR_SUCCESS) { return AUTH_DENIED; } return AUTH_GRANTED; } static authn_status get_realm_hash(request_rec *r, const char *user, const char *realm, char **rethash) { authn_file_config_rec *conf = ap_get_module_config(r->per_dir_config, &authn_file_module); ap_configfile_t *f; char l[MAX_STRING_LEN]; apr_status_t status; char *file_hash = NULL; if (!conf->pwfile) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01621) "AuthUserFile not specified in the configuration"); return AUTH_GENERAL_ERROR; } status = ap_pcfg_openfile(&f, r->pool, conf->pwfile); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01622) "Could not open password file: %s", conf->pwfile); return AUTH_GENERAL_ERROR; } while (!(ap_cfg_getline(l, MAX_STRING_LEN, f))) { const char *rpw, *w, *x; /* Skip # or blank lines. */ if ((l[0] == '#') || (!l[0])) { continue; } rpw = l; w = ap_getword(r->pool, &rpw, ':'); x = ap_getword(r->pool, &rpw, ':'); if (x && w && !strcmp(user, w) && !strcmp(realm, x)) { /* Remember that this is a md5 hash of user:realm:password. */ file_hash = ap_getword(r->pool, &rpw, ':'); break; } } ap_cfg_closefile(f); if (!file_hash) { return AUTH_USER_NOT_FOUND; } *rethash = file_hash; AUTHN_CACHE_STORE(r, user, realm, file_hash); return AUTH_USER_FOUND; } static const authn_provider authn_file_provider = { &check_password, &get_realm_hash, }; static void opt_retr(void) { authn_cache_store = APR_RETRIEVE_OPTIONAL_FN(ap_authn_cache_store); } static void register_hooks(apr_pool_t *p) { ap_register_auth_provider(p, AUTHN_PROVIDER_GROUP, "file", AUTHN_PROVIDER_VERSION, &authn_file_provider, AP_AUTH_INTERNAL_PER_CONF); ap_hook_optional_fn_retrieve(opt_retr, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(authn_file) = { STANDARD20_MODULE_STUFF, create_authn_file_dir_config, /* dir config creater */ NULL, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ authn_file_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; ����������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_core.mak���������������������������������������������������������0000644�0000000�0000050�00000025706�12701473373�017143� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authz_core.dsp !IF "$(CFG)" == "" CFG=mod_authz_core - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_authz_core - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_authz_core - Win32 Release" && "$(CFG)" != "mod_authz_core - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authz_core.mak" CFG="mod_authz_core - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authz_core - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authz_core - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authz_core - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authz_core.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authz_core.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_auth_basic - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authz_core.obj" -@erase "$(INTDIR)\mod_authz_core.res" -@erase "$(INTDIR)\mod_authz_core_src.idb" -@erase "$(INTDIR)\mod_authz_core_src.pdb" -@erase "$(OUTDIR)\mod_authz_core.exp" -@erase "$(OUTDIR)\mod_authz_core.lib" -@erase "$(OUTDIR)\mod_authz_core.pdb" -@erase "$(OUTDIR)\mod_authz_core.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authz_core_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authz_core.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authz_core.so" /d LONG_NAME="authz_core_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authz_core.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authz_core.pdb" /debug /out:"$(OUTDIR)\mod_authz_core.so" /implib:"$(OUTDIR)\mod_authz_core.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_core.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authz_core.obj" \ "$(INTDIR)\mod_authz_core.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authz_core.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authz_core.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authz_core.so" if exist .\Release\mod_authz_core.so.manifest mt.exe -manifest .\Release\mod_authz_core.so.manifest -outputresource:.\Release\mod_authz_core.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authz_core - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authz_core.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authz_core.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_auth_basic - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authz_core.obj" -@erase "$(INTDIR)\mod_authz_core.res" -@erase "$(INTDIR)\mod_authz_core_src.idb" -@erase "$(INTDIR)\mod_authz_core_src.pdb" -@erase "$(OUTDIR)\mod_authz_core.exp" -@erase "$(OUTDIR)\mod_authz_core.lib" -@erase "$(OUTDIR)\mod_authz_core.pdb" -@erase "$(OUTDIR)\mod_authz_core.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authz_core_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authz_core.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authz_core.so" /d LONG_NAME="authz_core_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authz_core.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authz_core.pdb" /debug /out:"$(OUTDIR)\mod_authz_core.so" /implib:"$(OUTDIR)\mod_authz_core.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_core.so LINK32_OBJS= \ "$(INTDIR)\mod_authz_core.obj" \ "$(INTDIR)\mod_authz_core.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authz_core.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authz_core.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authz_core.so" if exist .\Debug\mod_authz_core.so.manifest mt.exe -manifest .\Debug\mod_authz_core.so.manifest -outputresource:.\Debug\mod_authz_core.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authz_core.dep") !INCLUDE "mod_authz_core.dep" !ELSE !MESSAGE Warning: cannot find "mod_authz_core.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authz_core - Win32 Release" || "$(CFG)" == "mod_authz_core - Win32 Debug" !IF "$(CFG)" == "mod_authz_core - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_core - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_core - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_core - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_core - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_core - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_core - Win32 Release" "mod_auth_basic - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" cd "." "mod_auth_basic - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_authz_core - Win32 Debug" "mod_auth_basic - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" cd "." "mod_auth_basic - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authz_core - Win32 Release" "$(INTDIR)\mod_authz_core.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authz_core.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authz_core.so" /d LONG_NAME="authz_core_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authz_core - Win32 Debug" "$(INTDIR)\mod_authz_core.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authz_core.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authz_core.so" /d LONG_NAME="authz_core_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authz_core.c "$(INTDIR)\mod_authz_core.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ����������������������������������������������������������httpd-2.4.41/modules/aaa/mod_auth_digest.mak��������������������������������������������������������0000644�0000000�0000050�00000024165�12701473373�017276� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_auth_digest.dsp !IF "$(CFG)" == "" CFG=mod_auth_digest - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_auth_digest - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_auth_digest - Win32 Release" && "$(CFG)" != "mod_auth_digest - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_auth_digest.mak" CFG="mod_auth_digest - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_auth_digest - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_auth_digest - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_auth_digest - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_auth_digest.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_auth_digest.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_auth_digest.obj" -@erase "$(INTDIR)\mod_auth_digest.res" -@erase "$(INTDIR)\mod_auth_digest_src.idb" -@erase "$(INTDIR)\mod_auth_digest_src.pdb" -@erase "$(OUTDIR)\mod_auth_digest.exp" -@erase "$(OUTDIR)\mod_auth_digest.lib" -@erase "$(OUTDIR)\mod_auth_digest.pdb" -@erase "$(OUTDIR)\mod_auth_digest.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_auth_digest_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_auth_digest.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_auth_digest.so" /d LONG_NAME="auth_digest_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_auth_digest.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_auth_digest.pdb" /debug /out:"$(OUTDIR)\mod_auth_digest.so" /implib:"$(OUTDIR)\mod_auth_digest.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_digest.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_auth_digest.obj" \ "$(INTDIR)\mod_auth_digest.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_auth_digest.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_auth_digest.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_auth_digest.so" if exist .\Release\mod_auth_digest.so.manifest mt.exe -manifest .\Release\mod_auth_digest.so.manifest -outputresource:.\Release\mod_auth_digest.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_auth_digest - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_auth_digest.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_auth_digest.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_auth_digest.obj" -@erase "$(INTDIR)\mod_auth_digest.res" -@erase "$(INTDIR)\mod_auth_digest_src.idb" -@erase "$(INTDIR)\mod_auth_digest_src.pdb" -@erase "$(OUTDIR)\mod_auth_digest.exp" -@erase "$(OUTDIR)\mod_auth_digest.lib" -@erase "$(OUTDIR)\mod_auth_digest.pdb" -@erase "$(OUTDIR)\mod_auth_digest.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_auth_digest_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_auth_digest.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_auth_digest.so" /d LONG_NAME="auth_digest_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_auth_digest.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_auth_digest.pdb" /debug /out:"$(OUTDIR)\mod_auth_digest.so" /implib:"$(OUTDIR)\mod_auth_digest.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_digest.so LINK32_OBJS= \ "$(INTDIR)\mod_auth_digest.obj" \ "$(INTDIR)\mod_auth_digest.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_auth_digest.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_auth_digest.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_auth_digest.so" if exist .\Debug\mod_auth_digest.so.manifest mt.exe -manifest .\Debug\mod_auth_digest.so.manifest -outputresource:.\Debug\mod_auth_digest.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_auth_digest.dep") !INCLUDE "mod_auth_digest.dep" !ELSE !MESSAGE Warning: cannot find "mod_auth_digest.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_auth_digest - Win32 Release" || "$(CFG)" == "mod_auth_digest - Win32 Debug" !IF "$(CFG)" == "mod_auth_digest - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_auth_digest - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_auth_digest - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_auth_digest - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_auth_digest - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_auth_digest - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_auth_digest - Win32 Release" "$(INTDIR)\mod_auth_digest.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_auth_digest.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_auth_digest.so" /d LONG_NAME="auth_digest_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_auth_digest - Win32 Debug" "$(INTDIR)\mod_auth_digest.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_auth_digest.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_auth_digest.so" /d LONG_NAME="auth_digest_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_auth_digest.c "$(INTDIR)\mod_auth_digest.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_auth_form.dep����������������������������������������������������������0000644�0000000�0000050�00000004547�12674411515�016763� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_auth_form.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_auth_form.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\mod_request.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_md5.h"\ "..\..\srclib\apr-util\include\apr_base64.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\session\mod_session.h"\ ���������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUauthnsocache����������������������������������������������������������0000644�0000000�0000050�00000010213�11540546347�016643� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = authnsocache # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Authentication Cache Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = AuthnSOCache Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/authnsocache.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_authn_socache.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ authn_socache_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_dbd.dep����������������������������������������������������������0000644�0000000�0000050�00000004004�12674411515�016713� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authn_dbd.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authn_dbd.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_dbd.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr-util\include\apu_version.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUauthbasc��������������������������������������������������������������0000644�0000000�0000050�00000010172�11540546347�015774� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = authbasc # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Basic Authentication Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = AuthBasic Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/authbasc.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_auth_basic.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ auth_basic_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUauthndbm��������������������������������������������������������������0000644�0000000�0000050�00000010172�11540546347�016004� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = authndbm # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Database Authentication Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = AuthnDBM Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/authndbm.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_authn_dbm.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ authn_dbm_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_groupfile.c������������������������������������������������������0000644�0000000�0000050�00000024415�12757564422�017664� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* This module is triggered by an * * AuthGroupFile standard /path/to/file * * and the presence of a * * require group <list-of-groups> * * In an applicable limit/directory block for that method. * * If there are no AuthGroupFile directives valid for * the request; we DECLINED. * * If the AuthGroupFile is defined; but somehow not * accessible: we SERVER_ERROR (was DECLINED). * * If there are no 'require ' directives defined for * this request then we DECLINED (was OK). * * If there are no 'require ' directives valid for * this request method then we DECLINED. (was OK) * * If there are any 'require group' blocks and we * are not in any group - we HTTP_UNAUTHORIZE * */ #include "apr_strings.h" #include "apr_lib.h" /* apr_isspace */ #include "ap_config.h" #include "ap_provider.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "util_varbuf.h" #include "mod_auth.h" #include "mod_authz_owner.h" typedef struct { char *groupfile; } authz_groupfile_config_rec; static void *create_authz_groupfile_dir_config(apr_pool_t *p, char *d) { authz_groupfile_config_rec *conf = apr_palloc(p, sizeof(*conf)); conf->groupfile = NULL; return conf; } static const command_rec authz_groupfile_cmds[] = { AP_INIT_TAKE1("AuthGroupFile", ap_set_file_slot, (void *)APR_OFFSETOF(authz_groupfile_config_rec, groupfile), OR_AUTHCFG, "text file containing group names and member user IDs"), {NULL} }; module AP_MODULE_DECLARE_DATA authz_groupfile_module; #define VARBUF_INIT_LEN 512 #define VARBUF_MAX_LEN (16*1024*1024) static apr_status_t groups_for_user(apr_pool_t *p, char *user, char *grpfile, apr_table_t ** out) { ap_configfile_t *f; apr_table_t *grps = apr_table_make(p, 15); apr_pool_t *sp; struct ap_varbuf vb; const char *group_name, *ll, *w; apr_status_t status; apr_size_t group_len; if ((status = ap_pcfg_openfile(&f, p, grpfile)) != APR_SUCCESS) { return status ; } apr_pool_create(&sp, p); ap_varbuf_init(p, &vb, VARBUF_INIT_LEN); while (!(ap_varbuf_cfg_getline(&vb, f, VARBUF_MAX_LEN))) { if ((vb.buf[0] == '#') || (!vb.buf[0])) { continue; } ll = vb.buf; apr_pool_clear(sp); group_name = ap_getword(sp, &ll, ':'); group_len = strlen(group_name); while (group_len && apr_isspace(*(group_name + group_len - 1))) { --group_len; } while (ll[0]) { w = ap_getword_conf(sp, &ll); if (!strcmp(w, user)) { apr_table_setn(grps, apr_pstrmemdup(p, group_name, group_len), "in"); break; } } } ap_cfg_closefile(f); apr_pool_destroy(sp); ap_varbuf_free(&vb); *out = grps; return APR_SUCCESS; } static authz_status group_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { authz_groupfile_config_rec *conf = ap_get_module_config(r->per_dir_config, &authz_groupfile_module); char *user = r->user; const char *err = NULL; const ap_expr_info_t *expr = parsed_require_args; const char *require; const char *t, *w; apr_table_t *grpstatus = NULL; apr_status_t status; if (!user) { return AUTHZ_DENIED_NO_USER; } /* If there is no group file - then we are not * configured. So decline. */ if (!(conf->groupfile)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01664) "No group file was specified in the configuration"); return AUTHZ_DENIED; } status = groups_for_user(r->pool, user, conf->groupfile, &grpstatus); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01665) "Could not open group file: %s", conf->groupfile); return AUTHZ_DENIED; } if (apr_is_empty_table(grpstatus)) { /* no groups available, so exit immediately */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01666) "Authorization of user %s to access %s failed, reason: " "user doesn't appear in group file (%s).", r->user, r->uri, conf->groupfile); return AUTHZ_DENIED; } require = ap_expr_str_exec(r, expr, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02592) "authz_groupfile authorize: require group: Can't " "evaluate require expression: %s", err); return AUTHZ_DENIED; } t = require; while ((w = ap_getword_conf(r->pool, &t)) && w[0]) { if (apr_table_get(grpstatus, w)) { return AUTHZ_GRANTED; } } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01667) "Authorization of user %s to access %s failed, reason: " "user is not part of the 'require'ed group(s).", r->user, r->uri); return AUTHZ_DENIED; } static APR_OPTIONAL_FN_TYPE(authz_owner_get_file_group) *authz_owner_get_file_group; static authz_status filegroup_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { authz_groupfile_config_rec *conf = ap_get_module_config(r->per_dir_config, &authz_groupfile_module); char *user = r->user; apr_table_t *grpstatus = NULL; apr_status_t status; const char *filegroup = NULL; if (!user) { return AUTHZ_DENIED_NO_USER; } /* If there is no group file - then we are not * configured. So decline. */ if (!(conf->groupfile)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01668) "No group file was specified in the configuration"); return AUTHZ_DENIED; } status = groups_for_user(r->pool, user, conf->groupfile, &grpstatus); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01669) "Could not open group file: %s", conf->groupfile); return AUTHZ_DENIED; } if (apr_is_empty_table(grpstatus)) { /* no groups available, so exit immediately */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01670) "Authorization of user %s to access %s failed, reason: " "user doesn't appear in group file (%s).", r->user, r->uri, conf->groupfile); return AUTHZ_DENIED; } filegroup = authz_owner_get_file_group(r); if (filegroup) { if (apr_table_get(grpstatus, filegroup)) { return AUTHZ_GRANTED; } } else { /* No need to emit a error log entry because the call to authz_owner_get_file_group already did it for us. */ return AUTHZ_DENIED; } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01671) "Authorization of user %s to access %s failed, reason: " "user is not part of the 'require'ed file group.", r->user, r->uri); return AUTHZ_DENIED; } static const char *groupfile_parse_config(cmd_parms *cmd, const char *require_line, const void **parsed_require_line) { const char *expr_err = NULL; ap_expr_info_t *expr; expr = ap_expr_parse_cmd(cmd, require_line, AP_EXPR_FLAG_STRING_RESULT, &expr_err, NULL); if (expr_err) return apr_pstrcat(cmd->temp_pool, "Cannot parse expression in require line: ", expr_err, NULL); *parsed_require_line = expr; return NULL; } static const authz_provider authz_group_provider = { &group_check_authorization, &groupfile_parse_config, }; static const authz_provider authz_filegroup_provider = { &filegroup_check_authorization, NULL, }; static void authz_groupfile_getfns(void) { authz_owner_get_file_group = APR_RETRIEVE_OPTIONAL_FN(authz_owner_get_file_group); } static void register_hooks(apr_pool_t *p) { ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "group", AUTHZ_PROVIDER_VERSION, &authz_group_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "file-group", AUTHZ_PROVIDER_VERSION, &authz_filegroup_provider, AP_AUTH_INTERNAL_PER_CONF); ap_hook_optional_fn_retrieve(authz_groupfile_getfns, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(authz_groupfile) = { STANDARD20_MODULE_STUFF, create_authz_groupfile_dir_config,/* dir config creater */ NULL, /* dir merger -- default is to override */ NULL, /* server config */ NULL, /* merge server config */ authz_groupfile_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUauthzusr��������������������������������������������������������������0000644�0000000�0000050�00000010167�11540546347�016073� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = authzusr # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) User Authorization Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = AuthzUser Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/authzusr.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_authz_user.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ authz_user_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_dbm.dep����������������������������������������������������������0000644�0000000�0000050�00000004266�12674411515�016736� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authn_dbm.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authn_dbm.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_core.c�����������������������������������������������������������0000644�0000000�0000050�00000031726�12550123743�016573� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * Security options etc. * * Module derived from code originally written by Rob McCool * */ #include "apr_strings.h" #include "apr_network_io.h" #define APR_WANT_STRFUNC #define APR_WANT_BYTEFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_request.h" #include "http_protocol.h" #include "ap_provider.h" #include "mod_auth.h" #if APR_HAVE_NETINET_IN_H #include <netinet/in.h> #endif /* TODO List - Track down all of the references to r->ap_auth_type and change them to ap_auth_type() - Remove ap_auth_type and ap_auth_name from the request_rec */ typedef struct { const char *ap_auth_type; int auth_type_set; const char *ap_auth_name; } authn_core_dir_conf; typedef struct provider_alias_rec { char *provider_name; char *provider_alias; ap_conf_vector_t *sec_auth; const authn_provider *provider; } provider_alias_rec; typedef struct authn_alias_srv_conf { apr_hash_t *alias_rec; } authn_alias_srv_conf; module AP_MODULE_DECLARE_DATA authn_core_module; static void *create_authn_core_dir_config(apr_pool_t *p, char *dummy) { authn_core_dir_conf *conf = (authn_core_dir_conf *)apr_pcalloc(p, sizeof(authn_core_dir_conf)); return (void *)conf; } static void *merge_authn_core_dir_config(apr_pool_t *a, void *basev, void *newv) { authn_core_dir_conf *base = (authn_core_dir_conf *)basev; authn_core_dir_conf *new = (authn_core_dir_conf *)newv; authn_core_dir_conf *conf = (authn_core_dir_conf *)apr_pcalloc(a, sizeof(authn_core_dir_conf)); if (new->auth_type_set) { conf->ap_auth_type = new->ap_auth_type; conf->auth_type_set = 1; } else { conf->ap_auth_type = base->ap_auth_type; conf->auth_type_set = base->auth_type_set; } if (new->ap_auth_name) { conf->ap_auth_name = new->ap_auth_name; } else { conf->ap_auth_name = base->ap_auth_name; } return (void*)conf; } static authn_status authn_alias_check_password(request_rec *r, const char *user, const char *password) { /* Look up the provider alias in the alias list */ /* Get the dir_config and call ap_Merge_per_dir_configs() */ /* Call the real provider->check_password() function */ /* return the result of the above function call */ const char *provider_name = apr_table_get(r->notes, AUTHN_PROVIDER_NAME_NOTE); authn_status ret = AUTH_USER_NOT_FOUND; authn_alias_srv_conf *authcfg = (authn_alias_srv_conf *)ap_get_module_config(r->server->module_config, &authn_core_module); if (provider_name) { provider_alias_rec *prvdraliasrec = apr_hash_get(authcfg->alias_rec, provider_name, APR_HASH_KEY_STRING); ap_conf_vector_t *orig_dir_config = r->per_dir_config; /* If we found the alias provider in the list, then merge the directory configurations and call the real provider */ if (prvdraliasrec) { r->per_dir_config = ap_merge_per_dir_configs(r->pool, orig_dir_config, prvdraliasrec->sec_auth); ret = prvdraliasrec->provider->check_password(r,user,password); r->per_dir_config = orig_dir_config; } } return ret; } static authn_status authn_alias_get_realm_hash(request_rec *r, const char *user, const char *realm, char **rethash) { /* Look up the provider alias in the alias list */ /* Get the dir_config and call ap_Merge_per_dir_configs() */ /* Call the real provider->get_realm_hash() function */ /* return the result of the above function call */ const char *provider_name = apr_table_get(r->notes, AUTHN_PROVIDER_NAME_NOTE); authn_status ret = AUTH_USER_NOT_FOUND; authn_alias_srv_conf *authcfg = (authn_alias_srv_conf *)ap_get_module_config(r->server->module_config, &authn_core_module); if (provider_name) { provider_alias_rec *prvdraliasrec = apr_hash_get(authcfg->alias_rec, provider_name, APR_HASH_KEY_STRING); ap_conf_vector_t *orig_dir_config = r->per_dir_config; /* If we found the alias provider in the list, then merge the directory configurations and call the real provider */ if (prvdraliasrec) { r->per_dir_config = ap_merge_per_dir_configs(r->pool, orig_dir_config, prvdraliasrec->sec_auth); ret = prvdraliasrec->provider->get_realm_hash(r,user,realm,rethash); r->per_dir_config = orig_dir_config; } } return ret; } static void *create_authn_alias_svr_config(apr_pool_t *p, server_rec *s) { authn_alias_srv_conf *authcfg; authcfg = (authn_alias_srv_conf *) apr_pcalloc(p, sizeof(authn_alias_srv_conf)); authcfg->alias_rec = apr_hash_make(p); return (void *) authcfg; } /* Only per-server directive we have is GLOBAL_ONLY */ static void *merge_authn_alias_svr_config(apr_pool_t *p, void *basev, void *overridesv) { return basev; } static const authn_provider authn_alias_provider = { &authn_alias_check_password, &authn_alias_get_realm_hash, }; static const authn_provider authn_alias_provider_nodigest = { &authn_alias_check_password, NULL, }; static const char *authaliassection(cmd_parms *cmd, void *mconfig, const char *arg) { const char *endp = ap_strrchr_c(arg, '>'); const char *args; char *provider_alias; char *provider_name; int old_overrides = cmd->override; const char *errmsg; const authn_provider *provider = NULL; ap_conf_vector_t *new_auth_config = ap_create_per_dir_config(cmd->pool); authn_alias_srv_conf *authcfg = (authn_alias_srv_conf *)ap_get_module_config(cmd->server->module_config, &authn_core_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (endp == NULL) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive missing closing '>'", NULL); } args = apr_pstrndup(cmd->temp_pool, arg, endp - arg); if (!args[0]) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive requires additional arguments", NULL); } /* Pull the real provider name and the alias name from the block header */ provider_name = ap_getword_conf(cmd->pool, &args); provider_alias = ap_getword_conf(cmd->pool, &args); if (!provider_name[0] || !provider_alias[0]) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive requires additional arguments", NULL); } if (strcasecmp(provider_name, provider_alias) == 0) { return apr_pstrcat(cmd->pool, "The alias provider name must be different from the base provider name.", NULL); } /* Look up the alias provider to make sure that it hasn't already been registered. */ provider = ap_lookup_provider(AUTHN_PROVIDER_GROUP, provider_alias, AUTHN_PROVIDER_VERSION); if (provider) { return apr_pstrcat(cmd->pool, "The alias provider ", provider_alias, " has already be registered previously as either a base provider or an alias provider.", NULL); } /* walk the subsection configuration to get the per_dir config that we will merge just before the real provider is called. */ cmd->override = OR_AUTHCFG | ACCESS_CONF; errmsg = ap_walk_config(cmd->directive->first_child, cmd, new_auth_config); cmd->override = old_overrides; if (!errmsg) { provider_alias_rec *prvdraliasrec = apr_pcalloc(cmd->pool, sizeof(provider_alias_rec)); provider = ap_lookup_provider(AUTHN_PROVIDER_GROUP, provider_name, AUTHN_PROVIDER_VERSION); if (!provider) { /* by the time they use it, the provider should be loaded and registered with us. */ return apr_psprintf(cmd->pool, "Unknown Authn provider: %s", provider_name); } /* Save off the new directory config along with the original provider name and function pointer data */ prvdraliasrec->sec_auth = new_auth_config; prvdraliasrec->provider_name = provider_name; prvdraliasrec->provider_alias = provider_alias; prvdraliasrec->provider = provider; apr_hash_set(authcfg->alias_rec, provider_alias, APR_HASH_KEY_STRING, prvdraliasrec); /* Register the fake provider so that we get called first */ ap_register_auth_provider(cmd->pool, AUTHN_PROVIDER_GROUP, provider_alias, AUTHN_PROVIDER_VERSION, provider->get_realm_hash ? &authn_alias_provider : &authn_alias_provider_nodigest, AP_AUTH_INTERNAL_PER_CONF); } return errmsg; } /* * Load an authorisation realm into our location configuration, applying the * usual rules that apply to realms. */ static const char *set_authname(cmd_parms *cmd, void *mconfig, const char *word1) { authn_core_dir_conf *aconfig = (authn_core_dir_conf *)mconfig; aconfig->ap_auth_name = ap_escape_quotes(cmd->pool, word1); return NULL; } static const char *set_authtype(cmd_parms *cmd, void *mconfig, const char *word1) { authn_core_dir_conf *aconfig = (authn_core_dir_conf *)mconfig; aconfig->auth_type_set = 1; aconfig->ap_auth_type = strcasecmp(word1, "None") ? word1 : NULL; return NULL; } static const char *authn_ap_auth_type(request_rec *r) { authn_core_dir_conf *conf; conf = (authn_core_dir_conf *)ap_get_module_config(r->per_dir_config, &authn_core_module); return conf->ap_auth_type; } static const char *authn_ap_auth_name(request_rec *r) { authn_core_dir_conf *conf; conf = (authn_core_dir_conf *)ap_get_module_config(r->per_dir_config, &authn_core_module); return apr_pstrdup(r->pool, conf->ap_auth_name); } static const command_rec authn_cmds[] = { AP_INIT_TAKE1("AuthType", set_authtype, NULL, OR_AUTHCFG, "an HTTP authorization type (e.g., \"Basic\")"), AP_INIT_TAKE1("AuthName", set_authname, NULL, OR_AUTHCFG, "the authentication realm (e.g. \"Members Only\")"), AP_INIT_RAW_ARGS("<AuthnProviderAlias", authaliassection, NULL, RSRC_CONF, "container for grouping an authentication provider's " "directives under a provider alias"), {NULL} }; static int authenticate_no_user(request_rec *r) { /* if there isn't an AuthType, then assume that no authentication is required so return OK */ if (!ap_auth_type(r)) { return OK; } /* there's an AuthType configured, but no authentication module * loaded to support it */ ap_log_rerror(APLOG_MARK, APLOG_ERR, APR_SUCCESS, r, APLOGNO(01796) "AuthType %s configured without corresponding module", ap_auth_type(r)); return HTTP_INTERNAL_SERVER_ERROR; } static void register_hooks(apr_pool_t *p) { APR_REGISTER_OPTIONAL_FN(authn_ap_auth_type); APR_REGISTER_OPTIONAL_FN(authn_ap_auth_name); ap_hook_check_authn(authenticate_no_user, NULL, NULL, APR_HOOK_LAST, AP_AUTH_INTERNAL_PER_CONF); } AP_DECLARE_MODULE(authn_core) = { STANDARD20_MODULE_STUFF, create_authn_core_dir_config, /* dir config creater */ merge_authn_core_dir_config, /* dir merger --- default is to override */ create_authn_alias_svr_config, /* server config */ merge_authn_alias_svr_config, /* merge server config */ authn_cmds, register_hooks /* register hooks */ }; ������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_user.dsp���������������������������������������������������������0000644�0000000�0000050�00000011045�10551346420�017167� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authz_user" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authz_user - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authz_user.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authz_user.mak" CFG="mod_authz_user - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authz_user - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authz_user - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authz_user - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_authz_user_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authz_user.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authz_user.so" /d LONG_NAME="authz_user_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authz_user.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_user.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authz_user.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_user.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authz_user.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authz_user - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_authz_user_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authz_user.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authz_user.so" /d LONG_NAME="authz_user_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authz_user.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_user.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authz_user.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_user.so # Begin Special Build Tool TargetPath=.\Debug\mod_authz_user.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authz_user - Win32 Release" # Name "mod_authz_user - Win32 Debug" # Begin Source File SOURCE=.\mod_authz_user.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUaccesscompat����������������������������������������������������������0000644�0000000�0000050�00000010225�11540546347�016646� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = accesscompat # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) host access control compatibility Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = AccessCompModule # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/accesscompat.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_access_compat.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ access_compat_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_dbd.mak����������������������������������������������������������0000644�0000000�0000050�00000027511�12701473373�016740� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authz_dbd.dsp !IF "$(CFG)" == "" CFG=mod_authz_dbd - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_authz_dbd - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_authz_dbd - Win32 Release" && "$(CFG)" != "mod_authz_dbd - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authz_dbd.mak" CFG="mod_authz_dbd - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authz_dbd - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authz_dbd - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authz_dbd - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authz_dbd.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_dbd - Win32 Release" "mod_auth_basic - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authz_dbd.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_auth_basic - Win32 ReleaseCLEAN" "mod_dbd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authz_dbd.obj" -@erase "$(INTDIR)\mod_authz_dbd.res" -@erase "$(INTDIR)\mod_authz_dbd_src.idb" -@erase "$(INTDIR)\mod_authz_dbd_src.pdb" -@erase "$(OUTDIR)\mod_authz_dbd.exp" -@erase "$(OUTDIR)\mod_authz_dbd.lib" -@erase "$(OUTDIR)\mod_authz_dbd.pdb" -@erase "$(OUTDIR)\mod_authz_dbd.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../database" /D "AUTHZ_DBD_DECLARE_EXPORT" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authz_dbd_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authz_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authz_dbd.so" /d LONG_NAME="authz_dbd_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authz_dbd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authz_dbd.pdb" /debug /out:"$(OUTDIR)\mod_authz_dbd.so" /implib:"$(OUTDIR)\mod_authz_dbd.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_dbd.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authz_dbd.obj" \ "$(INTDIR)\mod_authz_dbd.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" \ "..\database\Release\mod_dbd.lib" "$(OUTDIR)\mod_authz_dbd.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authz_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authz_dbd.so" if exist .\Release\mod_authz_dbd.so.manifest mt.exe -manifest .\Release\mod_authz_dbd.so.manifest -outputresource:.\Release\mod_authz_dbd.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authz_dbd - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authz_dbd.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_dbd - Win32 Debug" "mod_auth_basic - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authz_dbd.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_auth_basic - Win32 DebugCLEAN" "mod_dbd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authz_dbd.obj" -@erase "$(INTDIR)\mod_authz_dbd.res" -@erase "$(INTDIR)\mod_authz_dbd_src.idb" -@erase "$(INTDIR)\mod_authz_dbd_src.pdb" -@erase "$(OUTDIR)\mod_authz_dbd.exp" -@erase "$(OUTDIR)\mod_authz_dbd.lib" -@erase "$(OUTDIR)\mod_authz_dbd.pdb" -@erase "$(OUTDIR)\mod_authz_dbd.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../database" /D "AUTHZ_DBD_DECLARE_EXPORT" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authz_dbd_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authz_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authz_dbd.so" /d LONG_NAME="authz_dbd_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authz_dbd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authz_dbd.pdb" /debug /out:"$(OUTDIR)\mod_authz_dbd.so" /implib:"$(OUTDIR)\mod_authz_dbd.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_dbd.so LINK32_OBJS= \ "$(INTDIR)\mod_authz_dbd.obj" \ "$(INTDIR)\mod_authz_dbd.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" \ "..\database\Debug\mod_dbd.lib" "$(OUTDIR)\mod_authz_dbd.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authz_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authz_dbd.so" if exist .\Debug\mod_authz_dbd.so.manifest mt.exe -manifest .\Debug\mod_authz_dbd.so.manifest -outputresource:.\Debug\mod_authz_dbd.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authz_dbd.dep") !INCLUDE "mod_authz_dbd.dep" !ELSE !MESSAGE Warning: cannot find "mod_authz_dbd.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authz_dbd - Win32 Release" || "$(CFG)" == "mod_authz_dbd - Win32 Debug" !IF "$(CFG)" == "mod_authz_dbd - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_dbd - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_dbd - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_dbd - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_dbd - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_dbd - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_dbd - Win32 Release" "mod_auth_basic - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" cd "." "mod_auth_basic - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_authz_dbd - Win32 Debug" "mod_auth_basic - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" cd "." "mod_auth_basic - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF !IF "$(CFG)" == "mod_authz_dbd - Win32 Release" "mod_dbd - Win32 Release" : cd ".\..\database" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dbd.mak" CFG="mod_dbd - Win32 Release" cd "..\aaa" "mod_dbd - Win32 ReleaseCLEAN" : cd ".\..\database" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dbd.mak" CFG="mod_dbd - Win32 Release" RECURSE=1 CLEAN cd "..\aaa" !ELSEIF "$(CFG)" == "mod_authz_dbd - Win32 Debug" "mod_dbd - Win32 Debug" : cd ".\..\database" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dbd.mak" CFG="mod_dbd - Win32 Debug" cd "..\aaa" "mod_dbd - Win32 DebugCLEAN" : cd ".\..\database" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dbd.mak" CFG="mod_dbd - Win32 Debug" RECURSE=1 CLEAN cd "..\aaa" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authz_dbd - Win32 Release" "$(INTDIR)\mod_authz_dbd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authz_dbd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authz_dbd.so" /d LONG_NAME="authz_dbd_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authz_dbd - Win32 Debug" "$(INTDIR)\mod_authz_dbd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authz_dbd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authz_dbd.so" /d LONG_NAME="authz_dbd_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authz_dbd.c "$(INTDIR)\mod_authz_dbd.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_dbd.dep����������������������������������������������������������0000644�0000000�0000050�00000004214�12674411515�016732� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authz_dbd.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authz_dbd.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_dbd.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\database\mod_dbd.h"\ ".\mod_authz_dbd.h"\ ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_groupfile.mak����������������������������������������������������0000644�0000000�0000050�00000026610�12701473373�020202� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authz_groupfile.dsp !IF "$(CFG)" == "" CFG=mod_authz_groupfile - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_authz_groupfile - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_authz_groupfile - Win32 Release" && "$(CFG)" != "mod_authz_groupfile - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authz_groupfile.mak" CFG="mod_authz_groupfile - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authz_groupfile - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authz_groupfile - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authz_groupfile - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authz_groupfile.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authz_groupfile.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_auth_basic - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authz_groupfile.obj" -@erase "$(INTDIR)\mod_authz_groupfile.res" -@erase "$(INTDIR)\mod_authz_groupfile_src.idb" -@erase "$(INTDIR)\mod_authz_groupfile_src.pdb" -@erase "$(OUTDIR)\mod_authz_groupfile.exp" -@erase "$(OUTDIR)\mod_authz_groupfile.lib" -@erase "$(OUTDIR)\mod_authz_groupfile.pdb" -@erase "$(OUTDIR)\mod_authz_groupfile.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authz_groupfile_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authz_groupfile.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authz_groupfile.so" /d LONG_NAME="authz_groupfile_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authz_groupfile.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authz_groupfile.pdb" /debug /out:"$(OUTDIR)\mod_authz_groupfile.so" /implib:"$(OUTDIR)\mod_authz_groupfile.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_groupfile.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authz_groupfile.obj" \ "$(INTDIR)\mod_authz_groupfile.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authz_groupfile.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authz_groupfile.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authz_groupfile.so" if exist .\Release\mod_authz_groupfile.so.manifest mt.exe -manifest .\Release\mod_authz_groupfile.so.manifest -outputresource:.\Release\mod_authz_groupfile.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authz_groupfile - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authz_groupfile.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authz_groupfile.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_auth_basic - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authz_groupfile.obj" -@erase "$(INTDIR)\mod_authz_groupfile.res" -@erase "$(INTDIR)\mod_authz_groupfile_src.idb" -@erase "$(INTDIR)\mod_authz_groupfile_src.pdb" -@erase "$(OUTDIR)\mod_authz_groupfile.exp" -@erase "$(OUTDIR)\mod_authz_groupfile.lib" -@erase "$(OUTDIR)\mod_authz_groupfile.pdb" -@erase "$(OUTDIR)\mod_authz_groupfile.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authz_groupfile_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authz_groupfile.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authz_groupfile.so" /d LONG_NAME="authz_groupfile_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authz_groupfile.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authz_groupfile.pdb" /debug /out:"$(OUTDIR)\mod_authz_groupfile.so" /implib:"$(OUTDIR)\mod_authz_groupfile.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_groupfile.so LINK32_OBJS= \ "$(INTDIR)\mod_authz_groupfile.obj" \ "$(INTDIR)\mod_authz_groupfile.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authz_groupfile.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authz_groupfile.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authz_groupfile.so" if exist .\Debug\mod_authz_groupfile.so.manifest mt.exe -manifest .\Debug\mod_authz_groupfile.so.manifest -outputresource:.\Debug\mod_authz_groupfile.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authz_groupfile.dep") !INCLUDE "mod_authz_groupfile.dep" !ELSE !MESSAGE Warning: cannot find "mod_authz_groupfile.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authz_groupfile - Win32 Release" || "$(CFG)" == "mod_authz_groupfile - Win32 Debug" !IF "$(CFG)" == "mod_authz_groupfile - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_groupfile - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_groupfile - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_groupfile - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_groupfile - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_groupfile - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_groupfile - Win32 Release" "mod_auth_basic - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" cd "." "mod_auth_basic - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_authz_groupfile - Win32 Debug" "mod_auth_basic - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" cd "." "mod_auth_basic - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authz_groupfile - Win32 Release" "$(INTDIR)\mod_authz_groupfile.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authz_groupfile.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authz_groupfile.so" /d LONG_NAME="authz_groupfile_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authz_groupfile - Win32 Debug" "$(INTDIR)\mod_authz_groupfile.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authz_groupfile.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authz_groupfile.so" /d LONG_NAME="authz_groupfile_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authz_groupfile.c "$(INTDIR)\mod_authz_groupfile.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_allowmethods.mak�������������������������������������������������������0000644�0000000�0000050�00000024315�12701473373�017475� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_allowmethods.dsp !IF "$(CFG)" == "" CFG=mod_allowmethods - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_allowmethods - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_allowmethods - Win32 Release" && "$(CFG)" != "mod_allowmethods - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_allowmethods.mak" CFG="mod_allowmethods - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_allowmethods - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_allowmethods - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_allowmethods - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_allowmethods.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_allowmethods.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_allowmethods.obj" -@erase "$(INTDIR)\mod_allowmethods.res" -@erase "$(INTDIR)\mod_allowmethods_src.idb" -@erase "$(INTDIR)\mod_allowmethods_src.pdb" -@erase "$(OUTDIR)\mod_allowmethods.exp" -@erase "$(OUTDIR)\mod_allowmethods.lib" -@erase "$(OUTDIR)\mod_allowmethods.pdb" -@erase "$(OUTDIR)\mod_allowmethods.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_allowmethods_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_allowmethods.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_allowmethods.so" /d LONG_NAME="allowmethods_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_allowmethods.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_allowmethods.pdb" /debug /out:"$(OUTDIR)\mod_allowmethods.so" /implib:"$(OUTDIR)\mod_allowmethods.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_allowmethods.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_allowmethods.obj" \ "$(INTDIR)\mod_allowmethods.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_allowmethods.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_allowmethods.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_allowmethods.so" if exist .\Release\mod_allowmethods.so.manifest mt.exe -manifest .\Release\mod_allowmethods.so.manifest -outputresource:.\Release\mod_allowmethods.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_allowmethods - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_allowmethods.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_allowmethods.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_allowmethods.obj" -@erase "$(INTDIR)\mod_allowmethods.res" -@erase "$(INTDIR)\mod_allowmethods_src.idb" -@erase "$(INTDIR)\mod_allowmethods_src.pdb" -@erase "$(OUTDIR)\mod_allowmethods.exp" -@erase "$(OUTDIR)\mod_allowmethods.lib" -@erase "$(OUTDIR)\mod_allowmethods.pdb" -@erase "$(OUTDIR)\mod_allowmethods.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_allowmethods_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_allowmethods.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_allowmethods.so" /d LONG_NAME="allowmethods_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_allowmethods.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_allowmethods.pdb" /debug /out:"$(OUTDIR)\mod_allowmethods.so" /implib:"$(OUTDIR)\mod_allowmethods.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_allowmethods.so LINK32_OBJS= \ "$(INTDIR)\mod_allowmethods.obj" \ "$(INTDIR)\mod_allowmethods.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_allowmethods.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_allowmethods.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_allowmethods.so" if exist .\Debug\mod_allowmethods.so.manifest mt.exe -manifest .\Debug\mod_allowmethods.so.manifest -outputresource:.\Debug\mod_allowmethods.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_allowmethods.dep") !INCLUDE "mod_allowmethods.dep" !ELSE !MESSAGE Warning: cannot find "mod_allowmethods.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_allowmethods - Win32 Release" || "$(CFG)" == "mod_allowmethods - Win32 Debug" !IF "$(CFG)" == "mod_allowmethods - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_allowmethods - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_allowmethods - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_allowmethods - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_allowmethods - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_allowmethods - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_allowmethods - Win32 Release" "$(INTDIR)\mod_allowmethods.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_allowmethods.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_allowmethods.so" /d LONG_NAME="allowmethods_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_allowmethods - Win32 Debug" "$(INTDIR)\mod_allowmethods.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_allowmethods.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_allowmethods.so" /d LONG_NAME="allowmethods_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_allowmethods.c "$(INTDIR)\mod_allowmethods.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_dbm.dsp����������������������������������������������������������0000644�0000000�0000050�00000011007�10551346420�016735� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authn_dbm" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authn_dbm - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authn_dbm.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authn_dbm.mak" CFG="mod_authn_dbm - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authn_dbm - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authn_dbm - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authn_dbm - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_authn_dbm_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authn_dbm.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authn_dbm.so" /d LONG_NAME="authn_dbm_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authn_dbm.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_dbm.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authn_dbm.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_dbm.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authn_dbm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authn_dbm - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_authn_dbm_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authn_dbm.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authn_dbm.so" /d LONG_NAME="authn_dbm_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authn_dbm.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_dbm.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authn_dbm.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_dbm.so # Begin Special Build Tool TargetPath=.\Debug\mod_authn_dbm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authn_dbm - Win32 Release" # Name "mod_authn_dbm - Win32 Debug" # Begin Source File SOURCE=.\mod_authn_dbm.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_owner.c����������������������������������������������������������0000644�0000000�0000050�00000015531�12530051571�017002� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_strings.h" #include "apr_file_info.h" #include "apr_user.h" #include "ap_config.h" #include "ap_provider.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "mod_auth.h" #include "mod_authz_owner.h" static const command_rec authz_owner_cmds[] = { {NULL} }; module AP_MODULE_DECLARE_DATA authz_owner_module; static authz_status fileowner_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { char *reason = NULL; apr_status_t status = 0; #if !APR_HAS_USER reason = "'Require file-owner' is not supported on this platform."; ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01632) "Authorization of user %s to access %s failed, reason: %s", r->user, r->uri, reason ? reason : "unknown"); return AUTHZ_DENIED; #else /* APR_HAS_USER */ char *owner = NULL; apr_finfo_t finfo; if (!r->user) { return AUTHZ_DENIED_NO_USER; } if (!r->filename) { reason = "no filename available"; ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01633) "Authorization of user %s to access %s failed, reason: %s", r->user, r->uri, reason ? reason : "unknown"); return AUTHZ_DENIED; } status = apr_stat(&finfo, r->filename, APR_FINFO_USER, r->pool); if (status != APR_SUCCESS) { reason = apr_pstrcat(r->pool, "could not stat file ", r->filename, NULL); ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01634) "Authorization of user %s to access %s failed, reason: %s", r->user, r->uri, reason ? reason : "unknown"); return AUTHZ_DENIED; } if (!(finfo.valid & APR_FINFO_USER)) { reason = "no file owner information available"; ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01635) "Authorization of user %s to access %s failed, reason: %s", r->user, r->uri, reason ? reason : "unknown"); return AUTHZ_DENIED; } status = apr_uid_name_get(&owner, finfo.user, r->pool); if (status != APR_SUCCESS || !owner) { reason = "could not get name of file owner"; ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01636) "Authorization of user %s to access %s failed, reason: %s", r->user, r->uri, reason ? reason : "unknown"); return AUTHZ_DENIED; } if (strcmp(owner, r->user)) { reason = apr_psprintf(r->pool, "file owner %s does not match.", owner); ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01637) "Authorization of user %s to access %s failed, reason: %s", r->user, r->uri, reason ? reason : "unknown"); return AUTHZ_DENIED; } /* this user is authorized */ return AUTHZ_GRANTED; #endif /* APR_HAS_USER */ } static char *authz_owner_get_file_group(request_rec *r) { /* file-group only figures out the file's group and lets * other modules do the actual authorization (against a group file/db). * Thus, these modules have to hook themselves after * mod_authz_owner and of course recognize 'file-group', too. */ #if !APR_HAS_USER return NULL; #else /* APR_HAS_USER */ char *reason = NULL; char *group = NULL; apr_finfo_t finfo; apr_status_t status = 0; if (!r->filename) { reason = "no filename available"; ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01638) "Authorization of user %s to access %s failed, reason: %s", r->user, r->uri, reason ? reason : "unknown"); return NULL; } status = apr_stat(&finfo, r->filename, APR_FINFO_GROUP, r->pool); if (status != APR_SUCCESS) { reason = apr_pstrcat(r->pool, "could not stat file ", r->filename, NULL); ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01639) "Authorization of user %s to access %s failed, reason: %s", r->user, r->uri, reason ? reason : "unknown"); return NULL; } if (!(finfo.valid & APR_FINFO_GROUP)) { reason = "no file group information available"; ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01640) "Authorization of user %s to access %s failed, reason: %s", r->user, r->uri, reason ? reason : "unknown"); return NULL; } status = apr_gid_name_get(&group, finfo.group, r->pool); if (status != APR_SUCCESS || !group) { reason = "could not get name of file group"; ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01641) "Authorization of user %s to access %s failed, reason: %s", r->user, r->uri, reason ? reason : "unknown"); return NULL; } return group; #endif /* APR_HAS_USER */ } static const authz_provider authz_fileowner_provider = { &fileowner_check_authorization, NULL, }; static void register_hooks(apr_pool_t *p) { APR_REGISTER_OPTIONAL_FN(authz_owner_get_file_group); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "file-owner", AUTHZ_PROVIDER_VERSION, &authz_fileowner_provider, AP_AUTH_INTERNAL_PER_CONF); } AP_DECLARE_MODULE(authz_owner) = { STANDARD20_MODULE_STUFF, NULL, /* dir config creater */ NULL, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ authz_owner_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; �����������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_dbd.dsp����������������������������������������������������������0000644�0000000�0000050�00000011351�10663420702�016742� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authz_dbd" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authz_dbd - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authz_dbd.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authz_dbd.mak" CFG="mod_authz_dbd - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authz_dbd - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authz_dbd - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authz_dbd - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../database" /D "AUTHZ_DBD_DECLARE_EXPORT" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_authz_dbd_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authz_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authz_dbd.so" /d LONG_NAME="authz_dbd_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authz_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_dbd.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authz_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_dbd.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authz_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authz_dbd - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../database" /D "AUTHZ_DBD_DECLARE_EXPORT" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_authz_dbd_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authz_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authz_dbd.so" /d LONG_NAME="authz_dbd_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authz_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_dbd.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authz_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_dbd.so # Begin Special Build Tool TargetPath=.\Debug\mod_authz_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authz_dbd - Win32 Release" # Name "mod_authz_dbd - Win32 Debug" # Begin Source File SOURCE=..\database\mod_dbd.h # End Source File # Begin Source File SOURCE=.\mod_authz_dbd.c # End Source File # Begin Source File SOURCE=.\mod_authz_dbd.h # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_auth_form.dsp����������������������������������������������������������0000644�0000000�0000050�00000011127�11022367030�016755� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_auth_form" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_auth_form - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_auth_form.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_auth_form.mak" CFG="mod_auth_form - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_auth_form - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_auth_form - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_auth_form - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../session" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AAA_DECLARE_EXPORT" /Fd"Release\mod_auth_form_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_auth_form.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_auth_form.so" /d LONG_NAME="auth_form_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_auth_form.so" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_form.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_auth_form.so" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_form.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_auth_form.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_auth_form - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../session" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AAA_DECLARE_EXPORT" /Fd"Debug\mod_auth_form_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_auth_form.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_auth_form.so" /d LONG_NAME="auth_form_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_auth_form.so" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_form.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_auth_form.so" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_form.so # Begin Special Build Tool TargetPath=.\Debug\mod_auth_form.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_auth_form - Win32 Release" # Name "mod_auth_form - Win32 Debug" # Begin Source File SOURCE=.\mod_auth_form.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUauthzdbd��������������������������������������������������������������0000644�0000000�0000050�00000010225�11540546347�016006� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(STDMOD)/database \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = authzdbd # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) DBD Database Authorization Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = AuthzDBD Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/authzdbd.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_authz_dbd.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ authz_dbd_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_dbd.dsp����������������������������������������������������������0000644�0000000�0000050�00000011225�10551346420�016726� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authn_dbd" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authn_dbd - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authn_dbd.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authn_dbd.mak" CFG="mod_authn_dbd - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authn_dbd - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authn_dbd - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authn_dbd - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I ../database /D DBD_DECLARE_EXPORT /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_authn_dbd_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authn_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authn_dbd.so" /d LONG_NAME="authn_dbd_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authn_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_dbd.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authn_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_dbd.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authn_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authn_dbd - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I ../database /D DBD_DECLARE_EXPORT /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_authn_dbd_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authn_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authn_dbd.so" /d LONG_NAME="authn_dbd_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authn_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_dbd.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authn_dbd.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_dbd.so # Begin Special Build Tool TargetPath=.\Debug\mod_authn_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authn_dbd - Win32 Release" # Name "mod_authn_dbd - Win32 Debug" # Begin Source File SOURCE=..\database\mod_dbd.h # End Source File # Begin Source File SOURCE=.\mod_authn_dbd.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_access_compat.mak������������������������������������������������������0000644�0000000�0000050�00000024525�12701473373�017602� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_access_compat.dsp !IF "$(CFG)" == "" CFG=mod_access_compat - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_access_compat - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_access_compat - Win32 Release" && "$(CFG)" != "mod_access_compat - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_access_compat.mak" CFG="mod_access_compat - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_access_compat - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_access_compat - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_access_compat - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_access_compat.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_access_compat.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_access_compat.obj" -@erase "$(INTDIR)\mod_access_compat.res" -@erase "$(INTDIR)\mod_access_compat_src.idb" -@erase "$(INTDIR)\mod_access_compat_src.pdb" -@erase "$(OUTDIR)\mod_access_compat.exp" -@erase "$(OUTDIR)\mod_access_compat.lib" -@erase "$(OUTDIR)\mod_access_compat.pdb" -@erase "$(OUTDIR)\mod_access_compat.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AAA_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_access_compat_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_access_compat.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_access_compat.so" /d LONG_NAME="access_compat_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_access_compat.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_access_compat.pdb" /debug /out:"$(OUTDIR)\mod_access_compat.so" /implib:"$(OUTDIR)\mod_access_compat.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_access_compat.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_access_compat.obj" \ "$(INTDIR)\mod_access_compat.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_access_compat.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_access_compat.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_access_compat.so" if exist .\Release\mod_access_compat.so.manifest mt.exe -manifest .\Release\mod_access_compat.so.manifest -outputresource:.\Release\mod_access_compat.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_access_compat - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_access_compat.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_access_compat.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_access_compat.obj" -@erase "$(INTDIR)\mod_access_compat.res" -@erase "$(INTDIR)\mod_access_compat_src.idb" -@erase "$(INTDIR)\mod_access_compat_src.pdb" -@erase "$(OUTDIR)\mod_access_compat.exp" -@erase "$(OUTDIR)\mod_access_compat.lib" -@erase "$(OUTDIR)\mod_access_compat.pdb" -@erase "$(OUTDIR)\mod_access_compat.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AAA_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_access_compat_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_access_compat.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_access_compat.so" /d LONG_NAME="access_compat_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_access_compat.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_access_compat.pdb" /debug /out:"$(OUTDIR)\mod_access_compat.so" /implib:"$(OUTDIR)\mod_access_compat.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_access_compat.so LINK32_OBJS= \ "$(INTDIR)\mod_access_compat.obj" \ "$(INTDIR)\mod_access_compat.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_access_compat.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_access_compat.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_access_compat.so" if exist .\Debug\mod_access_compat.so.manifest mt.exe -manifest .\Debug\mod_access_compat.so.manifest -outputresource:.\Debug\mod_access_compat.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_access_compat.dep") !INCLUDE "mod_access_compat.dep" !ELSE !MESSAGE Warning: cannot find "mod_access_compat.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_access_compat - Win32 Release" || "$(CFG)" == "mod_access_compat - Win32 Debug" !IF "$(CFG)" == "mod_access_compat - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_access_compat - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_access_compat - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_access_compat - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_access_compat - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_access_compat - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_access_compat - Win32 Release" "$(INTDIR)\mod_access_compat.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_access_compat.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_access_compat.so" /d LONG_NAME="access_compat_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_access_compat - Win32 Debug" "$(INTDIR)\mod_access_compat.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_access_compat.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_access_compat.so" /d LONG_NAME="access_compat_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_access_compat.c "$(INTDIR)\mod_access_compat.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_anon.mak���������������������������������������������������������0000644�0000000�0000050�00000025706�12701473373�017132� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authn_anon.dsp !IF "$(CFG)" == "" CFG=mod_authn_anon - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_authn_anon - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_authn_anon - Win32 Release" && "$(CFG)" != "mod_authn_anon - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authn_anon.mak" CFG="mod_authn_anon - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authn_anon - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authn_anon - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authn_anon - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authn_anon.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authn_anon.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_auth_basic - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authn_anon.obj" -@erase "$(INTDIR)\mod_authn_anon.res" -@erase "$(INTDIR)\mod_authn_anon_src.idb" -@erase "$(INTDIR)\mod_authn_anon_src.pdb" -@erase "$(OUTDIR)\mod_authn_anon.exp" -@erase "$(OUTDIR)\mod_authn_anon.lib" -@erase "$(OUTDIR)\mod_authn_anon.pdb" -@erase "$(OUTDIR)\mod_authn_anon.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authn_anon_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authn_anon.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authn_anon.so" /d LONG_NAME="authn_anon_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authn_anon.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authn_anon.pdb" /debug /out:"$(OUTDIR)\mod_authn_anon.so" /implib:"$(OUTDIR)\mod_authn_anon.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_anon.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authn_anon.obj" \ "$(INTDIR)\mod_authn_anon.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authn_anon.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authn_anon.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authn_anon.so" if exist .\Release\mod_authn_anon.so.manifest mt.exe -manifest .\Release\mod_authn_anon.so.manifest -outputresource:.\Release\mod_authn_anon.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authn_anon - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authn_anon.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authn_anon.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_auth_basic - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authn_anon.obj" -@erase "$(INTDIR)\mod_authn_anon.res" -@erase "$(INTDIR)\mod_authn_anon_src.idb" -@erase "$(INTDIR)\mod_authn_anon_src.pdb" -@erase "$(OUTDIR)\mod_authn_anon.exp" -@erase "$(OUTDIR)\mod_authn_anon.lib" -@erase "$(OUTDIR)\mod_authn_anon.pdb" -@erase "$(OUTDIR)\mod_authn_anon.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authn_anon_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authn_anon.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authn_anon.so" /d LONG_NAME="authn_anon_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authn_anon.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authn_anon.pdb" /debug /out:"$(OUTDIR)\mod_authn_anon.so" /implib:"$(OUTDIR)\mod_authn_anon.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_anon.so LINK32_OBJS= \ "$(INTDIR)\mod_authn_anon.obj" \ "$(INTDIR)\mod_authn_anon.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authn_anon.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authn_anon.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authn_anon.so" if exist .\Debug\mod_authn_anon.so.manifest mt.exe -manifest .\Debug\mod_authn_anon.so.manifest -outputresource:.\Debug\mod_authn_anon.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authn_anon.dep") !INCLUDE "mod_authn_anon.dep" !ELSE !MESSAGE Warning: cannot find "mod_authn_anon.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authn_anon - Win32 Release" || "$(CFG)" == "mod_authn_anon - Win32 Debug" !IF "$(CFG)" == "mod_authn_anon - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_anon - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_anon - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_anon - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_anon - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_anon - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_anon - Win32 Release" "mod_auth_basic - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" cd "." "mod_auth_basic - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_authn_anon - Win32 Debug" "mod_auth_basic - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" cd "." "mod_auth_basic - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authn_anon - Win32 Release" "$(INTDIR)\mod_authn_anon.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authn_anon.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authn_anon.so" /d LONG_NAME="authn_anon_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authn_anon - Win32 Debug" "$(INTDIR)\mod_authn_anon.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authn_anon.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authn_anon.so" /d LONG_NAME="authn_anon_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authn_anon.c "$(INTDIR)\mod_authn_anon.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ����������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_socache.mak������������������������������������������������������0000644�0000000�0000050�00000024445�12701473373�017603� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authn_socache.dsp !IF "$(CFG)" == "" CFG=mod_authn_socache - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_authn_socache - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_authn_socache - Win32 Release" && "$(CFG)" != "mod_authn_socache - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authn_socache.mak" CFG="mod_authn_socache - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authn_socache - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authn_socache - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authn_socache - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authn_socache.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authn_socache.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authn_socache.obj" -@erase "$(INTDIR)\mod_authn_socache.res" -@erase "$(INTDIR)\mod_authn_socache_src.idb" -@erase "$(INTDIR)\mod_authn_socache_src.pdb" -@erase "$(OUTDIR)\mod_authn_socache.exp" -@erase "$(OUTDIR)\mod_authn_socache.lib" -@erase "$(OUTDIR)\mod_authn_socache.pdb" -@erase "$(OUTDIR)\mod_authn_socache.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authn_socache_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authn_socache.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authn_socache.so" /d LONG_NAME="authn_socache_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authn_socache.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authn_socache.pdb" /debug /out:"$(OUTDIR)\mod_authn_socache.so" /implib:"$(OUTDIR)\mod_authn_socache.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_socache.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authn_socache.obj" \ "$(INTDIR)\mod_authn_socache.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_authn_socache.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authn_socache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authn_socache.so" if exist .\Release\mod_authn_socache.so.manifest mt.exe -manifest .\Release\mod_authn_socache.so.manifest -outputresource:.\Release\mod_authn_socache.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authn_socache - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authn_socache.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authn_socache.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authn_socache.obj" -@erase "$(INTDIR)\mod_authn_socache.res" -@erase "$(INTDIR)\mod_authn_socache_src.idb" -@erase "$(INTDIR)\mod_authn_socache_src.pdb" -@erase "$(OUTDIR)\mod_authn_socache.exp" -@erase "$(OUTDIR)\mod_authn_socache.lib" -@erase "$(OUTDIR)\mod_authn_socache.pdb" -@erase "$(OUTDIR)\mod_authn_socache.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authn_socache_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authn_socache.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authn_socache.so" /d LONG_NAME="authn_socache_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authn_socache.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authn_socache.pdb" /debug /out:"$(OUTDIR)\mod_authn_socache.so" /implib:"$(OUTDIR)\mod_authn_socache.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_socache.so LINK32_OBJS= \ "$(INTDIR)\mod_authn_socache.obj" \ "$(INTDIR)\mod_authn_socache.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_authn_socache.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authn_socache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authn_socache.so" if exist .\Debug\mod_authn_socache.so.manifest mt.exe -manifest .\Debug\mod_authn_socache.so.manifest -outputresource:.\Debug\mod_authn_socache.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authn_socache.dep") !INCLUDE "mod_authn_socache.dep" !ELSE !MESSAGE Warning: cannot find "mod_authn_socache.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authn_socache - Win32 Release" || "$(CFG)" == "mod_authn_socache - Win32 Debug" !IF "$(CFG)" == "mod_authn_socache - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_socache - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_socache - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_socache - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_socache - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_socache - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authn_socache - Win32 Release" "$(INTDIR)\mod_authn_socache.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authn_socache.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authn_socache.so" /d LONG_NAME="authn_socache_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authn_socache - Win32 Debug" "$(INTDIR)\mod_authn_socache.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authn_socache.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authn_socache.so" /d LONG_NAME="authn_socache_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authn_socache.c "$(INTDIR)\mod_authn_socache.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_user.mak���������������������������������������������������������0000644�0000000�0000050�00000025706�12701473373�017171� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authz_user.dsp !IF "$(CFG)" == "" CFG=mod_authz_user - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_authz_user - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_authz_user - Win32 Release" && "$(CFG)" != "mod_authz_user - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authz_user.mak" CFG="mod_authz_user - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authz_user - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authz_user - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authz_user - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authz_user.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authz_user.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_auth_basic - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authz_user.obj" -@erase "$(INTDIR)\mod_authz_user.res" -@erase "$(INTDIR)\mod_authz_user_src.idb" -@erase "$(INTDIR)\mod_authz_user_src.pdb" -@erase "$(OUTDIR)\mod_authz_user.exp" -@erase "$(OUTDIR)\mod_authz_user.lib" -@erase "$(OUTDIR)\mod_authz_user.pdb" -@erase "$(OUTDIR)\mod_authz_user.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authz_user_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authz_user.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authz_user.so" /d LONG_NAME="authz_user_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authz_user.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authz_user.pdb" /debug /out:"$(OUTDIR)\mod_authz_user.so" /implib:"$(OUTDIR)\mod_authz_user.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_user.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authz_user.obj" \ "$(INTDIR)\mod_authz_user.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authz_user.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authz_user.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authz_user.so" if exist .\Release\mod_authz_user.so.manifest mt.exe -manifest .\Release\mod_authz_user.so.manifest -outputresource:.\Release\mod_authz_user.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authz_user - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authz_user.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authz_user.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_auth_basic - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authz_user.obj" -@erase "$(INTDIR)\mod_authz_user.res" -@erase "$(INTDIR)\mod_authz_user_src.idb" -@erase "$(INTDIR)\mod_authz_user_src.pdb" -@erase "$(OUTDIR)\mod_authz_user.exp" -@erase "$(OUTDIR)\mod_authz_user.lib" -@erase "$(OUTDIR)\mod_authz_user.pdb" -@erase "$(OUTDIR)\mod_authz_user.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authz_user_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authz_user.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authz_user.so" /d LONG_NAME="authz_user_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authz_user.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authz_user.pdb" /debug /out:"$(OUTDIR)\mod_authz_user.so" /implib:"$(OUTDIR)\mod_authz_user.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_user.so LINK32_OBJS= \ "$(INTDIR)\mod_authz_user.obj" \ "$(INTDIR)\mod_authz_user.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authz_user.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authz_user.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authz_user.so" if exist .\Debug\mod_authz_user.so.manifest mt.exe -manifest .\Debug\mod_authz_user.so.manifest -outputresource:.\Debug\mod_authz_user.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authz_user.dep") !INCLUDE "mod_authz_user.dep" !ELSE !MESSAGE Warning: cannot find "mod_authz_user.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authz_user - Win32 Release" || "$(CFG)" == "mod_authz_user - Win32 Debug" !IF "$(CFG)" == "mod_authz_user - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_user - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_user - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_user - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_user - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_user - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_user - Win32 Release" "mod_auth_basic - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" cd "." "mod_auth_basic - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_authz_user - Win32 Debug" "mod_auth_basic - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" cd "." "mod_auth_basic - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authz_user - Win32 Release" "$(INTDIR)\mod_authz_user.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authz_user.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authz_user.so" /d LONG_NAME="authz_user_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authz_user - Win32 Debug" "$(INTDIR)\mod_authz_user.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authz_user.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authz_user.so" /d LONG_NAME="authz_user_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authz_user.c "$(INTDIR)\mod_authz_user.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ����������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_socache.dep������������������������������������������������������0000644�0000000�0000050�00000004320�12674411515�017570� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authn_socache.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authn_socache.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_auth_digest.dep��������������������������������������������������������0000644�0000000�0000050�00000004732�12674411515�017273� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_auth_digest.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_auth_digest.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_md5.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_anylock.h"\ "..\..\srclib\apr-util\include\apr_base64.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_rmm.h"\ "..\..\srclib\apr-util\include\apr_sha1.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_thread_rwlock.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ��������������������������������������httpd-2.4.41/modules/aaa/mod_authn_core.mak���������������������������������������������������������0000644�0000000�0000050�00000025706�12701473373�017127� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authn_core.dsp !IF "$(CFG)" == "" CFG=mod_authn_core - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_authn_core - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_authn_core - Win32 Release" && "$(CFG)" != "mod_authn_core - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authn_core.mak" CFG="mod_authn_core - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authn_core - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authn_core - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authn_core - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authn_core.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authn_core.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_auth_basic - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authn_core.obj" -@erase "$(INTDIR)\mod_authn_core.res" -@erase "$(INTDIR)\mod_authn_core_src.idb" -@erase "$(INTDIR)\mod_authn_core_src.pdb" -@erase "$(OUTDIR)\mod_authn_core.exp" -@erase "$(OUTDIR)\mod_authn_core.lib" -@erase "$(OUTDIR)\mod_authn_core.pdb" -@erase "$(OUTDIR)\mod_authn_core.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authn_core_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authn_core.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authn_core.so" /d LONG_NAME="authn_core_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authn_core.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authn_core.pdb" /debug /out:"$(OUTDIR)\mod_authn_core.so" /implib:"$(OUTDIR)\mod_authn_core.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_core.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authn_core.obj" \ "$(INTDIR)\mod_authn_core.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authn_core.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authn_core.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authn_core.so" if exist .\Release\mod_authn_core.so.manifest mt.exe -manifest .\Release\mod_authn_core.so.manifest -outputresource:.\Release\mod_authn_core.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authn_core - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authn_core.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authn_core.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_auth_basic - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authn_core.obj" -@erase "$(INTDIR)\mod_authn_core.res" -@erase "$(INTDIR)\mod_authn_core_src.idb" -@erase "$(INTDIR)\mod_authn_core_src.pdb" -@erase "$(OUTDIR)\mod_authn_core.exp" -@erase "$(OUTDIR)\mod_authn_core.lib" -@erase "$(OUTDIR)\mod_authn_core.pdb" -@erase "$(OUTDIR)\mod_authn_core.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authn_core_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authn_core.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authn_core.so" /d LONG_NAME="authn_core_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authn_core.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authn_core.pdb" /debug /out:"$(OUTDIR)\mod_authn_core.so" /implib:"$(OUTDIR)\mod_authn_core.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_core.so LINK32_OBJS= \ "$(INTDIR)\mod_authn_core.obj" \ "$(INTDIR)\mod_authn_core.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authn_core.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authn_core.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authn_core.so" if exist .\Debug\mod_authn_core.so.manifest mt.exe -manifest .\Debug\mod_authn_core.so.manifest -outputresource:.\Debug\mod_authn_core.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authn_core.dep") !INCLUDE "mod_authn_core.dep" !ELSE !MESSAGE Warning: cannot find "mod_authn_core.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authn_core - Win32 Release" || "$(CFG)" == "mod_authn_core - Win32 Debug" !IF "$(CFG)" == "mod_authn_core - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_core - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_core - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_core - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_core - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_core - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_core - Win32 Release" "mod_auth_basic - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" cd "." "mod_auth_basic - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_authn_core - Win32 Debug" "mod_auth_basic - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" cd "." "mod_auth_basic - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authn_core - Win32 Release" "$(INTDIR)\mod_authn_core.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authn_core.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authn_core.so" /d LONG_NAME="authn_core_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authn_core - Win32 Debug" "$(INTDIR)\mod_authn_core.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authn_core.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authn_core.so" /d LONG_NAME="authn_core_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authn_core.c "$(INTDIR)\mod_authn_core.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ����������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_socache.c��������������������������������������������������������0000644�0000000�0000050�00000041571�12670264105�017250� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_strings.h" #include "apr_md5.h" /* for apr_password_validate */ #include "ap_config.h" #include "ap_provider.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "mod_auth.h" #include "ap_socache.h" #include "util_mutex.h" #include "apr_optional.h" module AP_MODULE_DECLARE_DATA authn_socache_module; typedef struct authn_cache_dircfg { apr_interval_time_t timeout; apr_array_header_t *providers; const char *context; } authn_cache_dircfg; /* FIXME: * I think the cache and mutex should be global */ static apr_global_mutex_t *authn_cache_mutex = NULL; static ap_socache_provider_t *socache_provider = NULL; static ap_socache_instance_t *socache_instance = NULL; static const char *const authn_cache_id = "authn-socache"; static int configured; static apr_status_t remove_lock(void *data) { if (authn_cache_mutex) { apr_global_mutex_destroy(authn_cache_mutex); authn_cache_mutex = NULL; } return APR_SUCCESS; } static apr_status_t destroy_cache(void *data) { if (socache_instance) { socache_provider->destroy(socache_instance, (server_rec*)data); socache_instance = NULL; } return APR_SUCCESS; } static int authn_cache_precfg(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptmp) { apr_status_t rv = ap_mutex_register(pconf, authn_cache_id, NULL, APR_LOCK_DEFAULT, 0); if (rv != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_CRIT, rv, plog, APLOGNO(01673) "failed to register %s mutex", authn_cache_id); return 500; /* An HTTP status would be a misnomer! */ } socache_provider = ap_lookup_provider(AP_SOCACHE_PROVIDER_GROUP, AP_SOCACHE_DEFAULT_PROVIDER, AP_SOCACHE_PROVIDER_VERSION); configured = 0; return OK; } static int authn_cache_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptmp, server_rec *s) { apr_status_t rv; static struct ap_socache_hints authn_cache_hints = {64, 32, 60000000}; const char *errmsg; if (!configured) { return OK; /* don't waste the overhead of creating mutex & cache */ } if (socache_provider == NULL) { ap_log_perror(APLOG_MARK, APLOG_CRIT, 0, plog, APLOGNO(01674) "Please select a socache provider with AuthnCacheSOCache " "(no default found on this platform). Maybe you need to " "load mod_socache_shmcb or another socache module first"); return 500; /* An HTTP status would be a misnomer! */ } /* We have socache_provider, but do not have socache_instance. This should * happen only when using "default" socache_provider, so create default * socache_instance in this case. */ if (socache_instance == NULL) { errmsg = socache_provider->create(&socache_instance, NULL, ptmp, pconf); if (errmsg) { ap_log_perror(APLOG_MARK, APLOG_CRIT, 0, plog, APLOGNO(02612) "failed to create mod_socache_shmcb socache " "instance: %s", errmsg); return 500; } } rv = ap_global_mutex_create(&authn_cache_mutex, NULL, authn_cache_id, NULL, s, pconf, 0); if (rv != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_CRIT, rv, plog, APLOGNO(01675) "failed to create %s mutex", authn_cache_id); return 500; /* An HTTP status would be a misnomer! */ } apr_pool_cleanup_register(pconf, NULL, remove_lock, apr_pool_cleanup_null); rv = socache_provider->init(socache_instance, authn_cache_id, &authn_cache_hints, s, pconf); if (rv != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_CRIT, rv, plog, APLOGNO(01677) "failed to initialise %s cache", authn_cache_id); return 500; /* An HTTP status would be a misnomer! */ } apr_pool_cleanup_register(pconf, (void*)s, destroy_cache, apr_pool_cleanup_null); return OK; } static void authn_cache_child_init(apr_pool_t *p, server_rec *s) { const char *lock; apr_status_t rv; if (!configured) { return; /* don't waste the overhead of creating mutex & cache */ } lock = apr_global_mutex_lockfile(authn_cache_mutex); rv = apr_global_mutex_child_init(&authn_cache_mutex, lock, p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(01678) "failed to initialise mutex in child_init"); } } static const char *authn_cache_socache(cmd_parms *cmd, void *CFG, const char *arg) { const char *errmsg = ap_check_cmd_context(cmd, GLOBAL_ONLY); const char *sep, *name; if (errmsg) return errmsg; /* Argument is of form 'name:args' or just 'name'. */ sep = ap_strchr_c(arg, ':'); if (sep) { name = apr_pstrmemdup(cmd->pool, arg, sep - arg); sep++; } else { name = arg; } socache_provider = ap_lookup_provider(AP_SOCACHE_PROVIDER_GROUP, name, AP_SOCACHE_PROVIDER_VERSION); if (socache_provider == NULL) { errmsg = apr_psprintf(cmd->pool, "Unknown socache provider '%s'. Maybe you need " "to load the appropriate socache module " "(mod_socache_%s?)", arg, arg); } else { errmsg = socache_provider->create(&socache_instance, sep, cmd->temp_pool, cmd->pool); } if (errmsg) { errmsg = apr_psprintf(cmd->pool, "AuthnCacheSOCache: %s", errmsg); } return errmsg; } static const char *authn_cache_enable(cmd_parms *cmd, void *CFG) { const char *errmsg = ap_check_cmd_context(cmd, GLOBAL_ONLY); configured = 1; return errmsg; } static const char *const directory = "directory"; static void* authn_cache_dircfg_create(apr_pool_t *pool, char *s) { authn_cache_dircfg *ret = apr_palloc(pool, sizeof(authn_cache_dircfg)); ret->timeout = apr_time_from_sec(300); ret->providers = NULL; ret->context = directory; return ret; } /* not sure we want this. Might be safer to document use-all-or-none */ static void* authn_cache_dircfg_merge(apr_pool_t *pool, void *BASE, void *ADD) { authn_cache_dircfg *base = BASE; authn_cache_dircfg *add = ADD; authn_cache_dircfg *ret = apr_pmemdup(pool, add, sizeof(authn_cache_dircfg)); /* preserve context and timeout if not defaults */ if (add->context == directory) { ret->context = base->context; } if (add->timeout == apr_time_from_sec(300)) { ret->timeout = base->timeout; } if (add->providers == NULL) { ret->providers = base->providers; } return ret; } static const char *authn_cache_setprovider(cmd_parms *cmd, void *CFG, const char *arg) { authn_cache_dircfg *cfg = CFG; if (cfg->providers == NULL) { cfg->providers = apr_array_make(cmd->pool, 4, sizeof(const char*)); } APR_ARRAY_PUSH(cfg->providers, const char*) = arg; configured = 1; return NULL; } static const char *authn_cache_timeout(cmd_parms *cmd, void *CFG, const char *arg) { authn_cache_dircfg *cfg = CFG; int secs = atoi(arg); cfg->timeout = apr_time_from_sec(secs); return NULL; } static const command_rec authn_cache_cmds[] = { /* global stuff: cache and mutex */ AP_INIT_TAKE1("AuthnCacheSOCache", authn_cache_socache, NULL, RSRC_CONF, "socache provider for authn cache"), AP_INIT_NO_ARGS("AuthnCacheEnable", authn_cache_enable, NULL, RSRC_CONF, "enable socache configuration in htaccess even if not enabled anywhere else"), /* per-dir stuff */ AP_INIT_ITERATE("AuthnCacheProvideFor", authn_cache_setprovider, NULL, OR_AUTHCFG, "Determine what authn providers to cache for"), AP_INIT_TAKE1("AuthnCacheTimeout", authn_cache_timeout, NULL, OR_AUTHCFG, "Timeout (secs) for cached credentials"), AP_INIT_TAKE1("AuthnCacheContext", ap_set_string_slot, (void*)APR_OFFSETOF(authn_cache_dircfg, context), ACCESS_CONF, "Context for authn cache"), {NULL} }; static const char *construct_key(request_rec *r, const char *context, const char *user, const char *realm) { /* handle "special" context values */ if (!strcmp(context, directory)) { /* FIXME: are we at risk of this blowing up? */ char *new_context; char *slash = strrchr(r->uri, '/'); new_context = apr_palloc(r->pool, slash - r->uri + strlen(r->server->server_hostname) + 1); strcpy(new_context, r->server->server_hostname); strncat(new_context, r->uri, slash - r->uri); context = new_context; } else if (!strcmp(context, "server")) { context = r->server->server_hostname; } /* any other context value is literal */ if (realm == NULL) { /* basic auth */ return apr_pstrcat(r->pool, context, ":", user, NULL); } else { /* digest auth */ return apr_pstrcat(r->pool, context, ":", user, ":", realm, NULL); } } static void ap_authn_cache_store(request_rec *r, const char *module, const char *user, const char *realm, const char* data) { apr_status_t rv; authn_cache_dircfg *dcfg; const char *key; apr_time_t expiry; /* first check whether we're cacheing for this module */ dcfg = ap_get_module_config(r->per_dir_config, &authn_socache_module); if (!configured || !dcfg->providers) { return; } if (!ap_array_str_contains(dcfg->providers, module)) { return; } /* OK, we're on. Grab mutex to do our business */ rv = apr_global_mutex_trylock(authn_cache_mutex); if (APR_STATUS_IS_EBUSY(rv)) { /* don't wait around; just abandon it */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(01679) "authn credentials for %s not cached (mutex busy)", user); return; } else if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01680) "Failed to cache authn credentials for %s in %s", module, dcfg->context); return; } /* We have the mutex, so go ahead */ /* first build our key and determine expiry time */ key = construct_key(r, dcfg->context, user, realm); expiry = apr_time_now() + dcfg->timeout; /* store it */ rv = socache_provider->store(socache_instance, r->server, (unsigned char*)key, strlen(key), expiry, (unsigned char*)data, strlen(data), r->pool); if (rv == APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01681) "Cached authn credentials for %s in %s", user, dcfg->context); } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01682) "Failed to cache authn credentials for %s in %s", module, dcfg->context); } /* We're done with the mutex */ rv = apr_global_mutex_unlock(authn_cache_mutex); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01683) "Failed to release mutex!"); } } #define MAX_VAL_LEN 100 static authn_status check_password(request_rec *r, const char *user, const char *password) { /* construct key * look it up * if found, test password * * mutexing here would be a big performance drag. * It's definitely unnecessary with some backends (like ndbm or gdbm) * Is there a risk in the general case? I guess the only risk we * care about is a race condition that gets us a dangling pointer * to no-longer-defined memory. Hmmm ... */ apr_status_t rv; const char *key; authn_cache_dircfg *dcfg; unsigned char val[MAX_VAL_LEN]; unsigned int vallen = MAX_VAL_LEN - 1; dcfg = ap_get_module_config(r->per_dir_config, &authn_socache_module); if (!configured || !dcfg->providers) { return AUTH_USER_NOT_FOUND; } key = construct_key(r, dcfg->context, user, NULL); rv = socache_provider->retrieve(socache_instance, r->server, (unsigned char*)key, strlen(key), val, &vallen, r->pool); if (APR_STATUS_IS_NOTFOUND(rv)) { /* not found - just return */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01684) "Authn cache: no credentials found for %s", user); return AUTH_USER_NOT_FOUND; } else if (rv == APR_SUCCESS) { /* OK, we got a value */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01685) "Authn cache: found credentials for %s", user); val[vallen] = 0; } else { /* error: give up and pass the buck */ /* FIXME: getting this for NOTFOUND - prolly a bug in mod_socache */ ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01686) "Error accessing authentication cache"); return AUTH_USER_NOT_FOUND; } rv = apr_password_validate(password, (char*) val); if (rv != APR_SUCCESS) { return AUTH_DENIED; } return AUTH_GRANTED; } static authn_status get_realm_hash(request_rec *r, const char *user, const char *realm, char **rethash) { apr_status_t rv; const char *key; authn_cache_dircfg *dcfg; unsigned char val[MAX_VAL_LEN]; unsigned int vallen = MAX_VAL_LEN - 1; dcfg = ap_get_module_config(r->per_dir_config, &authn_socache_module); if (!configured || !dcfg->providers) { return AUTH_USER_NOT_FOUND; } key = construct_key(r, dcfg->context, user, realm); rv = socache_provider->retrieve(socache_instance, r->server, (unsigned char*)key, strlen(key), val, &vallen, r->pool); if (APR_STATUS_IS_NOTFOUND(rv)) { /* not found - just return */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01687) "Authn cache: no credentials found for %s", user); return AUTH_USER_NOT_FOUND; } else if (rv == APR_SUCCESS) { /* OK, we got a value */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01688) "Authn cache: found credentials for %s", user); } else { /* error: give up and pass the buck */ /* FIXME: getting this for NOTFOUND - prolly a bug in mod_socache */ ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01689) "Error accessing authentication cache"); return AUTH_USER_NOT_FOUND; } *rethash = apr_pstrmemdup(r->pool, (char *)val, vallen); return AUTH_USER_FOUND; } static const authn_provider authn_cache_provider = { &check_password, &get_realm_hash, }; static void register_hooks(apr_pool_t *p) { ap_register_auth_provider(p, AUTHN_PROVIDER_GROUP, "socache", AUTHN_PROVIDER_VERSION, &authn_cache_provider, AP_AUTH_INTERNAL_PER_CONF); APR_REGISTER_OPTIONAL_FN(ap_authn_cache_store); ap_hook_pre_config(authn_cache_precfg, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(authn_cache_post_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_child_init(authn_cache_child_init, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(authn_socache) = { STANDARD20_MODULE_STUFF, authn_cache_dircfg_create, authn_cache_dircfg_merge, NULL, NULL, authn_cache_cmds, register_hooks }; ���������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_auth_form.mak����������������������������������������������������������0000644�0000000�0000050�00000024025�12701473373�016755� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_auth_form.dsp !IF "$(CFG)" == "" CFG=mod_auth_form - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_auth_form - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_auth_form - Win32 Release" && "$(CFG)" != "mod_auth_form - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_auth_form.mak" CFG="mod_auth_form - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_auth_form - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_auth_form - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_auth_form - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_auth_form.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_auth_form.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_auth_form.obj" -@erase "$(INTDIR)\mod_auth_form.res" -@erase "$(INTDIR)\mod_auth_form_src.idb" -@erase "$(INTDIR)\mod_auth_form_src.pdb" -@erase "$(OUTDIR)\mod_auth_form.exp" -@erase "$(OUTDIR)\mod_auth_form.lib" -@erase "$(OUTDIR)\mod_auth_form.pdb" -@erase "$(OUTDIR)\mod_auth_form.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../session" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AAA_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_auth_form_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_auth_form.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_auth_form.so" /d LONG_NAME="auth_form_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_auth_form.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_auth_form.pdb" /debug /out:"$(OUTDIR)\mod_auth_form.so" /implib:"$(OUTDIR)\mod_auth_form.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_form.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_auth_form.obj" \ "$(INTDIR)\mod_auth_form.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_auth_form.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_auth_form.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_auth_form.so" if exist .\Release\mod_auth_form.so.manifest mt.exe -manifest .\Release\mod_auth_form.so.manifest -outputresource:.\Release\mod_auth_form.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_auth_form - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_auth_form.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_auth_form.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_auth_form.obj" -@erase "$(INTDIR)\mod_auth_form.res" -@erase "$(INTDIR)\mod_auth_form_src.idb" -@erase "$(INTDIR)\mod_auth_form_src.pdb" -@erase "$(OUTDIR)\mod_auth_form.exp" -@erase "$(OUTDIR)\mod_auth_form.lib" -@erase "$(OUTDIR)\mod_auth_form.pdb" -@erase "$(OUTDIR)\mod_auth_form.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../session" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AAA_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_auth_form_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_auth_form.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_auth_form.so" /d LONG_NAME="auth_form_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_auth_form.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_auth_form.pdb" /debug /out:"$(OUTDIR)\mod_auth_form.so" /implib:"$(OUTDIR)\mod_auth_form.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_form.so LINK32_OBJS= \ "$(INTDIR)\mod_auth_form.obj" \ "$(INTDIR)\mod_auth_form.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_auth_form.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_auth_form.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_auth_form.so" if exist .\Debug\mod_auth_form.so.manifest mt.exe -manifest .\Debug\mod_auth_form.so.manifest -outputresource:.\Debug\mod_auth_form.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_auth_form.dep") !INCLUDE "mod_auth_form.dep" !ELSE !MESSAGE Warning: cannot find "mod_auth_form.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_auth_form - Win32 Release" || "$(CFG)" == "mod_auth_form - Win32 Debug" !IF "$(CFG)" == "mod_auth_form - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_auth_form - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_auth_form - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_auth_form - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_auth_form - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_auth_form - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_auth_form - Win32 Release" "$(INTDIR)\mod_auth_form.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_auth_form.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_auth_form.so" /d LONG_NAME="auth_form_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_auth_form - Win32 Debug" "$(INTDIR)\mod_auth_form.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_auth_form.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_auth_form.so" /d LONG_NAME="auth_form_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_auth_form.c "$(INTDIR)\mod_auth_form.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_dbm.mak����������������������������������������������������������0000644�0000000�0000050�00000025554�12701473373�016742� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authn_dbm.dsp !IF "$(CFG)" == "" CFG=mod_authn_dbm - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_authn_dbm - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_authn_dbm - Win32 Release" && "$(CFG)" != "mod_authn_dbm - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authn_dbm.mak" CFG="mod_authn_dbm - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authn_dbm - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authn_dbm - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authn_dbm - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authn_dbm.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authn_dbm.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_auth_basic - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authn_dbm.obj" -@erase "$(INTDIR)\mod_authn_dbm.res" -@erase "$(INTDIR)\mod_authn_dbm_src.idb" -@erase "$(INTDIR)\mod_authn_dbm_src.pdb" -@erase "$(OUTDIR)\mod_authn_dbm.exp" -@erase "$(OUTDIR)\mod_authn_dbm.lib" -@erase "$(OUTDIR)\mod_authn_dbm.pdb" -@erase "$(OUTDIR)\mod_authn_dbm.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authn_dbm_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authn_dbm.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authn_dbm.so" /d LONG_NAME="authn_dbm_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authn_dbm.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authn_dbm.pdb" /debug /out:"$(OUTDIR)\mod_authn_dbm.so" /implib:"$(OUTDIR)\mod_authn_dbm.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_dbm.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authn_dbm.obj" \ "$(INTDIR)\mod_authn_dbm.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authn_dbm.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authn_dbm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authn_dbm.so" if exist .\Release\mod_authn_dbm.so.manifest mt.exe -manifest .\Release\mod_authn_dbm.so.manifest -outputresource:.\Release\mod_authn_dbm.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authn_dbm - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authn_dbm.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authn_dbm.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_auth_basic - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authn_dbm.obj" -@erase "$(INTDIR)\mod_authn_dbm.res" -@erase "$(INTDIR)\mod_authn_dbm_src.idb" -@erase "$(INTDIR)\mod_authn_dbm_src.pdb" -@erase "$(OUTDIR)\mod_authn_dbm.exp" -@erase "$(OUTDIR)\mod_authn_dbm.lib" -@erase "$(OUTDIR)\mod_authn_dbm.pdb" -@erase "$(OUTDIR)\mod_authn_dbm.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authn_dbm_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authn_dbm.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authn_dbm.so" /d LONG_NAME="authn_dbm_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authn_dbm.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authn_dbm.pdb" /debug /out:"$(OUTDIR)\mod_authn_dbm.so" /implib:"$(OUTDIR)\mod_authn_dbm.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_dbm.so LINK32_OBJS= \ "$(INTDIR)\mod_authn_dbm.obj" \ "$(INTDIR)\mod_authn_dbm.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authn_dbm.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authn_dbm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authn_dbm.so" if exist .\Debug\mod_authn_dbm.so.manifest mt.exe -manifest .\Debug\mod_authn_dbm.so.manifest -outputresource:.\Debug\mod_authn_dbm.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authn_dbm.dep") !INCLUDE "mod_authn_dbm.dep" !ELSE !MESSAGE Warning: cannot find "mod_authn_dbm.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authn_dbm - Win32 Release" || "$(CFG)" == "mod_authn_dbm - Win32 Debug" !IF "$(CFG)" == "mod_authn_dbm - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_dbm - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_dbm - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_dbm - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_dbm - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_dbm - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_dbm - Win32 Release" "mod_auth_basic - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" cd "." "mod_auth_basic - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_authn_dbm - Win32 Debug" "mod_auth_basic - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" cd "." "mod_auth_basic - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authn_dbm - Win32 Release" "$(INTDIR)\mod_authn_dbm.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authn_dbm.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authn_dbm.so" /d LONG_NAME="authn_dbm_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authn_dbm - Win32 Debug" "$(INTDIR)\mod_authn_dbm.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authn_dbm.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authn_dbm.so" /d LONG_NAME="authn_dbm_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authn_dbm.c "$(INTDIR)\mod_authn_dbm.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ����������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_dbm.c������������������������������������������������������������0000644�0000000�0000050�00000025073�12530051571�016414� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #define APR_WANT_STRFUNC #include "apr_want.h" #include "apr_strings.h" #include "apr_dbm.h" #include "apr_md5.h" #include "httpd.h" #include "http_config.h" #include "ap_provider.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" /* for ap_hook_(check_user_id | auth_checker)*/ #include "mod_auth.h" #include "mod_authz_owner.h" typedef struct { const char *grpfile; const char *dbmtype; } authz_dbm_config_rec; /* This should go into APR; perhaps with some nice * caching/locking/flocking of the open dbm file. */ static char *get_dbm_entry_as_str(apr_pool_t *pool, apr_dbm_t *f, char *key) { apr_datum_t d, q; q.dptr = key; #ifndef NETSCAPE_DBM_COMPAT q.dsize = strlen(q.dptr); #else q.dsize = strlen(q.dptr) + 1; #endif if (apr_dbm_fetch(f, q, &d) == APR_SUCCESS && d.dptr) { return apr_pstrmemdup(pool, d.dptr, d.dsize); } return NULL; } static void *create_authz_dbm_dir_config(apr_pool_t *p, char *d) { authz_dbm_config_rec *conf = apr_palloc(p, sizeof(*conf)); conf->grpfile = NULL; conf->dbmtype = "default"; return conf; } static const command_rec authz_dbm_cmds[] = { AP_INIT_TAKE1("AuthDBMGroupFile", ap_set_file_slot, (void *)APR_OFFSETOF(authz_dbm_config_rec, grpfile), OR_AUTHCFG, "database file containing group names and member user IDs"), AP_INIT_TAKE1("AuthzDBMType", ap_set_string_slot, (void *)APR_OFFSETOF(authz_dbm_config_rec, dbmtype), OR_AUTHCFG, "what type of DBM file the group file is"), {NULL} }; module AP_MODULE_DECLARE_DATA authz_dbm_module; /* We do something strange with the group file. If the group file * contains any : we assume the format is * key=username value=":"groupname [":"anything here is ignored] * otherwise we now (0.8.14+) assume that the format is * key=username value=groupname * The first allows the password and group files to be the same * physical DBM file; key=username value=password":"groupname[":"anything] * * mark@telescope.org, 22Sep95 */ static apr_status_t get_dbm_grp(request_rec *r, char *key1, char *key2, const char *dbmgrpfile, const char *dbtype, const char ** out) { char *grp_colon, *val; apr_status_t retval; apr_dbm_t *f; retval = apr_dbm_open_ex(&f, dbtype, dbmgrpfile, APR_DBM_READONLY, APR_OS_DEFAULT, r->pool); if (retval != APR_SUCCESS) { return retval; } /* Try key2 only if key1 failed */ if (!(val = get_dbm_entry_as_str(r->pool, f, key1))) { val = get_dbm_entry_as_str(r->pool, f, key2); } apr_dbm_close(f); if (val && (grp_colon = ap_strchr(val, ':')) != NULL) { char *grp_colon2 = ap_strchr(++grp_colon, ':'); if (grp_colon2) { *grp_colon2 = '\0'; } *out = grp_colon; } else { *out = val; } return retval; } static authz_status dbmgroup_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { authz_dbm_config_rec *conf = ap_get_module_config(r->per_dir_config, &authz_dbm_module); char *user = r->user; const char *err = NULL; const ap_expr_info_t *expr = parsed_require_args; const char *require; const char *t; char *w; const char *orig_groups = NULL; const char *realm = ap_auth_name(r); const char *groups; char *v; if (!user) { return AUTHZ_DENIED_NO_USER; } if (!conf->grpfile) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01798) "No group file was specified in the configuration"); return AUTHZ_DENIED; } /* fetch group data from dbm file only once. */ if (!orig_groups) { apr_status_t status; status = get_dbm_grp(r, apr_pstrcat(r->pool, user, ":", realm, NULL), user, conf->grpfile, conf->dbmtype, &groups); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01799) "could not open dbm (type %s) group access " "file: %s", conf->dbmtype, conf->grpfile); return AUTHZ_GENERAL_ERROR; } if (groups == NULL) { /* no groups available, so exit immediately */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01800) "Authorization of user %s to access %s failed, reason: " "user doesn't appear in DBM group file (%s).", r->user, r->uri, conf->grpfile); return AUTHZ_DENIED; } orig_groups = groups; } require = ap_expr_str_exec(r, expr, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02591) "authz_dbm authorize: require dbm-group: Can't " "evaluate require expression: %s", err); return AUTHZ_DENIED; } t = require; while ((w = ap_getword_white(r->pool, &t)) && w[0]) { groups = orig_groups; while (groups[0]) { v = ap_getword(r->pool, &groups, ','); if (!strcmp(v, w)) { return AUTHZ_GRANTED; } } } ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01801) "Authorization of user %s to access %s failed, reason: " "user is not part of the 'require'ed group(s).", r->user, r->uri); return AUTHZ_DENIED; } static APR_OPTIONAL_FN_TYPE(authz_owner_get_file_group) *authz_owner_get_file_group; static authz_status dbmfilegroup_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { authz_dbm_config_rec *conf = ap_get_module_config(r->per_dir_config, &authz_dbm_module); char *user = r->user; const char *realm = ap_auth_name(r); const char *filegroup = NULL; apr_status_t status; const char *groups; char *v; if (!user) { return AUTHZ_DENIED_NO_USER; } if (!conf->grpfile) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01802) "No group file was specified in the configuration"); return AUTHZ_DENIED; } /* fetch group data from dbm file. */ status = get_dbm_grp(r, apr_pstrcat(r->pool, user, ":", realm, NULL), user, conf->grpfile, conf->dbmtype, &groups); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01803) "could not open dbm (type %s) group access " "file: %s", conf->dbmtype, conf->grpfile); return AUTHZ_DENIED; } if (groups == NULL) { /* no groups available, so exit immediately */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01804) "Authorization of user %s to access %s failed, reason: " "user doesn't appear in DBM group file (%s).", r->user, r->uri, conf->grpfile); return AUTHZ_DENIED; } filegroup = authz_owner_get_file_group(r); if (filegroup) { while (groups[0]) { v = ap_getword(r->pool, &groups, ','); if (!strcmp(v, filegroup)) { return AUTHZ_GRANTED; } } } ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01805) "Authorization of user %s to access %s failed, reason: " "user is not part of the 'require'ed group(s).", r->user, r->uri); return AUTHZ_DENIED; } static const char *dbm_parse_config(cmd_parms *cmd, const char *require_line, const void **parsed_require_line) { const char *expr_err = NULL; ap_expr_info_t *expr; expr = ap_expr_parse_cmd(cmd, require_line, AP_EXPR_FLAG_STRING_RESULT, &expr_err, NULL); if (expr_err) return apr_pstrcat(cmd->temp_pool, "Cannot parse expression in require line: ", expr_err, NULL); *parsed_require_line = expr; return NULL; } static const authz_provider authz_dbmgroup_provider = { &dbmgroup_check_authorization, &dbm_parse_config, }; static const authz_provider authz_dbmfilegroup_provider = { &dbmfilegroup_check_authorization, NULL, }; static void authz_dbm_getfns(void) { authz_owner_get_file_group = APR_RETRIEVE_OPTIONAL_FN(authz_owner_get_file_group); } static void register_hooks(apr_pool_t *p) { ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "dbm-group", AUTHZ_PROVIDER_VERSION, &authz_dbmgroup_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "dbm-file-group", AUTHZ_PROVIDER_VERSION, &authz_dbmfilegroup_provider, AP_AUTH_INTERNAL_PER_CONF); ap_hook_optional_fn_retrieve(authz_dbm_getfns, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(authz_dbm) = { STANDARD20_MODULE_STUFF, create_authz_dbm_dir_config, /* dir config creater */ NULL, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ authz_dbm_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_owner.h����������������������������������������������������������0000644�0000000�0000050�00000002201�12553146475�017012� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef MOD_AUTHZ_OWNER_H #define MOD_AUTHZ_OWNER_H #include "http_request.h" /* mod_authz_owner exports an optional function which retrieves the * group name of the file identified by r->filename, if available, or * else returns NULL. */ APR_DECLARE_OPTIONAL_FN(char*, authz_owner_get_file_group, (request_rec *r)); #endif /* MOD_AUTHZ_OWNER_H */ �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUauthform��������������������������������������������������������������0000644�0000000�0000050�00000010251�11540546347�016025� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(STDMOD)/session \ $(STDMOD)/filters \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = authform # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Basic Authentication Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = AuthBasic Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_auth_form.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ auth_form_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUauthnfil��������������������������������������������������������������0000644�0000000�0000050�00000010171�11540546347�016013� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = authnfil # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) File Authentication Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = AuthnFile Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/authnfil.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_authn_file.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ authn_file_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_host.mak���������������������������������������������������������0000644�0000000�0000050�00000025706�12701473373�017170� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authz_host.dsp !IF "$(CFG)" == "" CFG=mod_authz_host - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_authz_host - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_authz_host - Win32 Release" && "$(CFG)" != "mod_authz_host - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authz_host.mak" CFG="mod_authz_host - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authz_host - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authz_host - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authz_host - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authz_host.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authz_host.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_auth_basic - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authz_host.obj" -@erase "$(INTDIR)\mod_authz_host.res" -@erase "$(INTDIR)\mod_authz_host_src.idb" -@erase "$(INTDIR)\mod_authz_host_src.pdb" -@erase "$(OUTDIR)\mod_authz_host.exp" -@erase "$(OUTDIR)\mod_authz_host.lib" -@erase "$(OUTDIR)\mod_authz_host.pdb" -@erase "$(OUTDIR)\mod_authz_host.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authz_host_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authz_host.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authz_host.so" /d LONG_NAME="authz_host_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authz_host.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authz_host.pdb" /debug /out:"$(OUTDIR)\mod_authz_host.so" /implib:"$(OUTDIR)\mod_authz_host.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_host.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authz_host.obj" \ "$(INTDIR)\mod_authz_host.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authz_host.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authz_host.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authz_host.so" if exist .\Release\mod_authz_host.so.manifest mt.exe -manifest .\Release\mod_authz_host.so.manifest -outputresource:.\Release\mod_authz_host.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authz_host - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authz_host.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authz_host.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_auth_basic - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authz_host.obj" -@erase "$(INTDIR)\mod_authz_host.res" -@erase "$(INTDIR)\mod_authz_host_src.idb" -@erase "$(INTDIR)\mod_authz_host_src.pdb" -@erase "$(OUTDIR)\mod_authz_host.exp" -@erase "$(OUTDIR)\mod_authz_host.lib" -@erase "$(OUTDIR)\mod_authz_host.pdb" -@erase "$(OUTDIR)\mod_authz_host.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authz_host_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authz_host.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authz_host.so" /d LONG_NAME="authz_host_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authz_host.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authz_host.pdb" /debug /out:"$(OUTDIR)\mod_authz_host.so" /implib:"$(OUTDIR)\mod_authz_host.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_host.so LINK32_OBJS= \ "$(INTDIR)\mod_authz_host.obj" \ "$(INTDIR)\mod_authz_host.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authz_host.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authz_host.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authz_host.so" if exist .\Debug\mod_authz_host.so.manifest mt.exe -manifest .\Debug\mod_authz_host.so.manifest -outputresource:.\Debug\mod_authz_host.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authz_host.dep") !INCLUDE "mod_authz_host.dep" !ELSE !MESSAGE Warning: cannot find "mod_authz_host.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authz_host - Win32 Release" || "$(CFG)" == "mod_authz_host - Win32 Debug" !IF "$(CFG)" == "mod_authz_host - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_host - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_host - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_host - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_host - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_host - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_host - Win32 Release" "mod_auth_basic - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" cd "." "mod_auth_basic - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_authz_host - Win32 Debug" "mod_auth_basic - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" cd "." "mod_auth_basic - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authz_host - Win32 Release" "$(INTDIR)\mod_authz_host.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authz_host.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authz_host.so" /d LONG_NAME="authz_host_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authz_host - Win32 Debug" "$(INTDIR)\mod_authz_host.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authz_host.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authz_host.so" /d LONG_NAME="authz_host_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authz_host.c "$(INTDIR)\mod_authz_host.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ����������������������������������������������������������httpd-2.4.41/modules/aaa/mod_auth_basic.c�����������������������������������������������������������0000644�0000000�0000050�00000042505�13350443433�016543� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_strings.h" #include "apr_lib.h" /* for apr_isspace */ #include "apr_base64.h" /* for apr_base64_decode et al */ #define APR_WANT_STRFUNC /* for strcasecmp */ #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "util_md5.h" #include "ap_provider.h" #include "ap_expr.h" #include "mod_auth.h" typedef struct { authn_provider_list *providers; char *dir; /* unused variable */ int authoritative; ap_expr_info_t *fakeuser; ap_expr_info_t *fakepass; const char *use_digest_algorithm; int fake_set:1; int use_digest_algorithm_set:1; int authoritative_set:1; } auth_basic_config_rec; static void *create_auth_basic_dir_config(apr_pool_t *p, char *d) { auth_basic_config_rec *conf = apr_pcalloc(p, sizeof(*conf)); /* Any failures are fatal. */ conf->authoritative = 1; return conf; } static void *merge_auth_basic_dir_config(apr_pool_t *p, void *basev, void *overridesv) { auth_basic_config_rec *newconf = apr_pcalloc(p, sizeof(*newconf)); auth_basic_config_rec *base = basev; auth_basic_config_rec *overrides = overridesv; newconf->authoritative = overrides->authoritative_set ? overrides->authoritative : base->authoritative; newconf->authoritative_set = overrides->authoritative_set || base->authoritative_set; newconf->fakeuser = overrides->fake_set ? overrides->fakeuser : base->fakeuser; newconf->fakepass = overrides->fake_set ? overrides->fakepass : base->fakepass; newconf->fake_set = overrides->fake_set || base->fake_set; newconf->use_digest_algorithm = overrides->use_digest_algorithm_set ? overrides->use_digest_algorithm : base->use_digest_algorithm; newconf->use_digest_algorithm_set = overrides->use_digest_algorithm_set || base->use_digest_algorithm_set; newconf->providers = overrides->providers ? overrides->providers : base->providers; return newconf; } static const char *add_authn_provider(cmd_parms *cmd, void *config, const char *arg) { auth_basic_config_rec *conf = (auth_basic_config_rec*)config; authn_provider_list *newp; newp = apr_pcalloc(cmd->pool, sizeof(authn_provider_list)); newp->provider_name = arg; /* lookup and cache the actual provider now */ newp->provider = ap_lookup_provider(AUTHN_PROVIDER_GROUP, newp->provider_name, AUTHN_PROVIDER_VERSION); if (newp->provider == NULL) { /* by the time they use it, the provider should be loaded and registered with us. */ return apr_psprintf(cmd->pool, "Unknown Authn provider: %s", newp->provider_name); } if (!newp->provider->check_password) { /* if it doesn't provide the appropriate function, reject it */ return apr_psprintf(cmd->pool, "The '%s' Authn provider doesn't support " "Basic Authentication", newp->provider_name); } /* Add it to the list now. */ if (!conf->providers) { conf->providers = newp; } else { authn_provider_list *last = conf->providers; while (last->next) { last = last->next; } last->next = newp; } return NULL; } static const char *set_authoritative(cmd_parms * cmd, void *config, int flag) { auth_basic_config_rec *conf = (auth_basic_config_rec *) config; conf->authoritative = flag; conf->authoritative_set = 1; return NULL; } static const char *add_basic_fake(cmd_parms * cmd, void *config, const char *user, const char *pass) { auth_basic_config_rec *conf = (auth_basic_config_rec *) config; const char *err; if (!strcasecmp(user, "off")) { conf->fakeuser = NULL; conf->fakepass = NULL; conf->fake_set = 1; } else { /* if password is unspecified, set it to the fixed string "password" to * be compatible with the behaviour of mod_ssl. */ if (!pass) { pass = "password"; } conf->fakeuser = ap_expr_parse_cmd(cmd, user, AP_EXPR_FLAG_STRING_RESULT, &err, NULL); if (err) { return apr_psprintf(cmd->pool, "Could not parse fake username expression '%s': %s", user, err); } conf->fakepass = ap_expr_parse_cmd(cmd, pass, AP_EXPR_FLAG_STRING_RESULT, &err, NULL); if (err) { return apr_psprintf(cmd->pool, "Could not parse fake password expression associated to user '%s': %s", user, err); } conf->fake_set = 1; } return NULL; } static const char *set_use_digest_algorithm(cmd_parms *cmd, void *config, const char *alg) { auth_basic_config_rec *conf = (auth_basic_config_rec *)config; if (strcasecmp(alg, "Off") && strcasecmp(alg, "MD5")) { return apr_pstrcat(cmd->pool, "Invalid algorithm in " "AuthBasicUseDigestAlgorithm: ", alg, NULL); } conf->use_digest_algorithm = alg; conf->use_digest_algorithm_set = 1; return NULL; } static const command_rec auth_basic_cmds[] = { AP_INIT_ITERATE("AuthBasicProvider", add_authn_provider, NULL, OR_AUTHCFG, "specify the auth providers for a directory or location"), AP_INIT_FLAG("AuthBasicAuthoritative", set_authoritative, NULL, OR_AUTHCFG, "Set to 'Off' to allow access control to be passed along to " "lower modules if the UserID is not known to this module"), AP_INIT_TAKE12("AuthBasicFake", add_basic_fake, NULL, OR_AUTHCFG, "Fake basic authentication using the given expressions for " "username and password, 'off' to disable. Password defaults " "to 'password' if missing."), AP_INIT_TAKE1("AuthBasicUseDigestAlgorithm", set_use_digest_algorithm, NULL, OR_AUTHCFG, "Set to 'MD5' to use the auth provider's authentication " "check for digest auth, using a hash of 'user:realm:pass'"), {NULL} }; module AP_MODULE_DECLARE_DATA auth_basic_module; /* These functions return 0 if client is OK, and proper error status * if not... either HTTP_UNAUTHORIZED, if we made a check, and it failed, or * HTTP_INTERNAL_SERVER_ERROR, if things are so totally confused that we * couldn't figure out how to tell if the client is authorized or not. * * If they return DECLINED, and all other modules also decline, that's * treated by the server core as a configuration error, logged and * reported as such. */ static void note_basic_auth_failure(request_rec *r) { apr_table_setn(r->err_headers_out, (PROXYREQ_PROXY == r->proxyreq) ? "Proxy-Authenticate" : "WWW-Authenticate", apr_pstrcat(r->pool, "Basic realm=\"", ap_auth_name(r), "\"", NULL)); } static int hook_note_basic_auth_failure(request_rec *r, const char *auth_type) { if (strcasecmp(auth_type, "Basic")) return DECLINED; note_basic_auth_failure(r); return OK; } static int get_basic_auth(request_rec *r, const char **user, const char **pw) { const char *auth_line; char *decoded_line; /* Get the appropriate header */ auth_line = apr_table_get(r->headers_in, (PROXYREQ_PROXY == r->proxyreq) ? "Proxy-Authorization" : "Authorization"); if (!auth_line) { note_basic_auth_failure(r); return HTTP_UNAUTHORIZED; } if (strcasecmp(ap_getword(r->pool, &auth_line, ' '), "Basic")) { /* Client tried to authenticate using wrong auth scheme */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01614) "client used wrong authentication scheme: %s", r->uri); note_basic_auth_failure(r); return HTTP_UNAUTHORIZED; } /* Skip leading spaces. */ while (*auth_line == ' ' || *auth_line == '\t') { auth_line++; } decoded_line = ap_pbase64decode(r->pool, auth_line); *user = ap_getword_nulls(r->pool, (const char**)&decoded_line, ':'); *pw = decoded_line; /* set the user, even though the user is unauthenticated at this point */ r->user = (char *) *user; return OK; } /* Determine user ID, and check if it really is that user, for HTTP * basic authentication... */ static int authenticate_basic_user(request_rec *r) { auth_basic_config_rec *conf = ap_get_module_config(r->per_dir_config, &auth_basic_module); const char *sent_user, *sent_pw, *current_auth; const char *realm = NULL; const char *digest = NULL; int res; authn_status auth_result; authn_provider_list *current_provider; /* Are we configured to be Basic auth? */ current_auth = ap_auth_type(r); if (!current_auth || strcasecmp(current_auth, "Basic")) { return DECLINED; } /* We need an authentication realm. */ if (!ap_auth_name(r)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01615) "need AuthName: %s", r->uri); return HTTP_INTERNAL_SERVER_ERROR; } r->ap_auth_type = (char*)current_auth; res = get_basic_auth(r, &sent_user, &sent_pw); if (res) { return res; } if (conf->use_digest_algorithm && !strcasecmp(conf->use_digest_algorithm, "MD5")) { realm = ap_auth_name(r); digest = ap_md5(r->pool, (unsigned char *)apr_pstrcat(r->pool, sent_user, ":", realm, ":", sent_pw, NULL)); } current_provider = conf->providers; do { const authn_provider *provider; /* For now, if a provider isn't set, we'll be nice and use the file * provider. */ if (!current_provider) { provider = ap_lookup_provider(AUTHN_PROVIDER_GROUP, AUTHN_DEFAULT_PROVIDER, AUTHN_PROVIDER_VERSION); if (!provider || !provider->check_password) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01616) "No Authn provider configured"); auth_result = AUTH_GENERAL_ERROR; break; } apr_table_setn(r->notes, AUTHN_PROVIDER_NAME_NOTE, AUTHN_DEFAULT_PROVIDER); } else { provider = current_provider->provider; apr_table_setn(r->notes, AUTHN_PROVIDER_NAME_NOTE, current_provider->provider_name); } if (digest) { char *password; if (!provider->get_realm_hash) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02493) "Authn provider does not support " "AuthBasicUseDigestAlgorithm"); auth_result = AUTH_GENERAL_ERROR; break; } /* We expect the password to be hash of user:realm:password */ auth_result = provider->get_realm_hash(r, sent_user, realm, &password); if (auth_result == AUTH_USER_FOUND) { auth_result = strcmp(digest, password) ? AUTH_DENIED : AUTH_GRANTED; } } else { auth_result = provider->check_password(r, sent_user, sent_pw); } apr_table_unset(r->notes, AUTHN_PROVIDER_NAME_NOTE); /* Something occurred. Stop checking. */ if (auth_result != AUTH_USER_NOT_FOUND) { break; } /* If we're not really configured for providers, stop now. */ if (!conf->providers) { break; } current_provider = current_provider->next; } while (current_provider); if (auth_result != AUTH_GRANTED) { int return_code; /* If we're not authoritative, then any error is ignored. */ if (!(conf->authoritative) && auth_result != AUTH_DENIED) { return DECLINED; } switch (auth_result) { case AUTH_DENIED: ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01617) "user %s: authentication failure for \"%s\": " "Password Mismatch", sent_user, r->uri); return_code = HTTP_UNAUTHORIZED; break; case AUTH_USER_NOT_FOUND: ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01618) "user %s not found: %s", sent_user, r->uri); return_code = HTTP_UNAUTHORIZED; break; case AUTH_GENERAL_ERROR: default: /* We'll assume that the module has already said what its error * was in the logs. */ return_code = HTTP_INTERNAL_SERVER_ERROR; break; } /* If we're returning 401, tell them to try again. */ if (return_code == HTTP_UNAUTHORIZED) { note_basic_auth_failure(r); } return return_code; } return OK; } /* If requested, create a fake basic authentication header for the benefit * of a proxy or application running behind this server. */ static int authenticate_basic_fake(request_rec *r) { const char *auth_line, *user, *pass, *err; auth_basic_config_rec *conf = ap_get_module_config(r->per_dir_config, &auth_basic_module); if (!conf->fakeuser) { return DECLINED; } user = ap_expr_str_exec(r, conf->fakeuser, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02455) "AuthBasicFake: could not evaluate user expression for URI '%s': %s", r->uri, err); return HTTP_INTERNAL_SERVER_ERROR; } if (!user || !*user) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02458) "AuthBasicFake: empty username expression for URI '%s', ignoring", r->uri); apr_table_unset(r->headers_in, "Authorization"); return DECLINED; } pass = ap_expr_str_exec(r, conf->fakepass, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02456) "AuthBasicFake: could not evaluate password expression for URI '%s': %s", r->uri, err); return HTTP_INTERNAL_SERVER_ERROR; } if (!pass || !*pass) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02459) "AuthBasicFake: empty password expression for URI '%s', ignoring", r->uri); apr_table_unset(r->headers_in, "Authorization"); return DECLINED; } auth_line = apr_pstrcat(r->pool, "Basic ", ap_pbase64encode(r->pool, apr_pstrcat(r->pool, user, ":", pass, NULL)), NULL); apr_table_setn(r->headers_in, "Authorization", auth_line); ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02457) "AuthBasicFake: \"Authorization: %s\"", auth_line); return OK; } static void register_hooks(apr_pool_t *p) { ap_hook_check_authn(authenticate_basic_user, NULL, NULL, APR_HOOK_MIDDLE, AP_AUTH_INTERNAL_PER_CONF); ap_hook_fixups(authenticate_basic_fake, NULL, NULL, APR_HOOK_LAST); ap_hook_note_auth_failure(hook_note_basic_auth_failure, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(auth_basic) = { STANDARD20_MODULE_STUFF, create_auth_basic_dir_config, /* dir config creater */ merge_auth_basic_dir_config, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ auth_basic_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_allowmethods.dsp�������������������������������������������������������0000644�0000000�0000050�00000011141�11456275562�017512� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_allowmethods" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_allowmethods - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_allowmethods.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_allowmethods.mak" CFG="mod_allowmethods - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_allowmethods - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_allowmethods - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_allowmethods - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_allowmethods_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_allowmethods.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_allowmethods.so" /d LONG_NAME="allowmethods_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_allowmethods.so" /base:@..\..\os\win32\BaseAddr.ref,mod_allowmethods.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_allowmethods.so" /base:@..\..\os\win32\BaseAddr.ref,mod_allowmethods.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_allowmethods.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_allowmethods - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_allowmethods_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_allowmethods.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_allowmethods.so" /d LONG_NAME="allowmethods_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_allowmethods.so" /base:@..\..\os\win32\BaseAddr.ref,mod_allowmethods.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_allowmethods.so" /base:@..\..\os\win32\BaseAddr.ref,mod_allowmethods.so # Begin Special Build Tool TargetPath=.\Debug\mod_allowmethods.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_allowmethods - Win32 Release" # Name "mod_allowmethods - Win32 Debug" # Begin Source File SOURCE=.\mod_allowmethods.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_user.c�����������������������������������������������������������0000644�0000000�0000050�00000010710�12267522020�016617� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_strings.h" #include "ap_config.h" #include "ap_provider.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "mod_auth.h" typedef struct { int dummy; /* just here to stop compiler warnings for now. */ } authz_user_config_rec; static void *create_authz_user_dir_config(apr_pool_t *p, char *d) { authz_user_config_rec *conf = apr_palloc(p, sizeof(*conf)); return conf; } static const command_rec authz_user_cmds[] = { {NULL} }; module AP_MODULE_DECLARE_DATA authz_user_module; static authz_status user_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { const char *err = NULL; const ap_expr_info_t *expr = parsed_require_args; const char *require; const char *t, *w; if (!r->user) { return AUTHZ_DENIED_NO_USER; } require = ap_expr_str_exec(r, expr, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02594) "authz_user authorize: require user: Can't " "evaluate require expression: %s", err); return AUTHZ_DENIED; } t = require; while ((w = ap_getword_conf(r->pool, &t)) && w[0]) { if (!strcmp(r->user, w)) { return AUTHZ_GRANTED; } } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01663) "access to %s failed, reason: user '%s' does not meet " "'require'ments for user to be allowed access", r->uri, r->user); return AUTHZ_DENIED; } static authz_status validuser_check_authorization(request_rec *r, const char *require_line, const void *parsed_require_line) { if (!r->user) { return AUTHZ_DENIED_NO_USER; } return AUTHZ_GRANTED; } static const char *user_parse_config(cmd_parms *cmd, const char *require_line, const void **parsed_require_line) { const char *expr_err = NULL; ap_expr_info_t *expr; expr = ap_expr_parse_cmd(cmd, require_line, AP_EXPR_FLAG_STRING_RESULT, &expr_err, NULL); if (expr_err) return apr_pstrcat(cmd->temp_pool, "Cannot parse expression in require line: ", expr_err, NULL); *parsed_require_line = expr; return NULL; } static const authz_provider authz_user_provider = { &user_check_authorization, &user_parse_config, }; static const authz_provider authz_validuser_provider = { &validuser_check_authorization, NULL, }; static void register_hooks(apr_pool_t *p) { ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "user", AUTHZ_PROVIDER_VERSION, &authz_user_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "valid-user", AUTHZ_PROVIDER_VERSION, &authz_validuser_provider, AP_AUTH_INTERNAL_PER_CONF); } AP_DECLARE_MODULE(authz_user) = { STANDARD20_MODULE_STUFF, create_authz_user_dir_config, /* dir config creater */ NULL, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ authz_user_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; ��������������������������������������������������������httpd-2.4.41/modules/aaa/mod_auth_form.c������������������������������������������������������������0000644�0000000�0000050�00000137562�13303773120�016432� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_strings.h" #include "apr_lib.h" /* for apr_isspace */ #include "apr_base64.h" /* for apr_base64_decode et al */ #define APR_WANT_STRFUNC /* for strcasecmp */ #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "ap_provider.h" #include "util_md5.h" #include "ap_expr.h" #include "mod_auth.h" #include "mod_session.h" #include "mod_request.h" #define FORM_LOGIN_HANDLER "form-login-handler" #define FORM_LOGOUT_HANDLER "form-logout-handler" #define FORM_REDIRECT_HANDLER "form-redirect-handler" #define MOD_AUTH_FORM_HASH "site" static int (*ap_session_load_fn) (request_rec * r, session_rec ** z) = NULL; static apr_status_t (*ap_session_get_fn)(request_rec * r, session_rec * z, const char *key, const char **value) = NULL; static apr_status_t (*ap_session_set_fn)(request_rec * r, session_rec * z, const char *key, const char *value) = NULL; static void (*ap_request_insert_filter_fn) (request_rec * r) = NULL; static void (*ap_request_remove_filter_fn) (request_rec * r) = NULL; typedef struct { authn_provider_list *providers; char *dir; int authoritative; int authoritative_set; const char *site; int site_set; const char *username; int username_set; const char *password; int password_set; apr_size_t form_size; int form_size_set; int fakebasicauth; int fakebasicauth_set; const char *location; int location_set; const char *method; int method_set; const char *mimetype; int mimetype_set; const char *body; int body_set; int disable_no_store; int disable_no_store_set; ap_expr_info_t *loginsuccess; int loginsuccess_set; ap_expr_info_t *loginrequired; int loginrequired_set; ap_expr_info_t *logout; int logout_set; } auth_form_config_rec; static void *create_auth_form_dir_config(apr_pool_t * p, char *d) { auth_form_config_rec *conf = apr_pcalloc(p, sizeof(*conf)); conf->dir = d; /* Any failures are fatal. */ conf->authoritative = 1; /* form size defaults to 8k */ conf->form_size = HUGE_STRING_LEN; /* default form field names */ conf->username = "httpd_username"; conf->password = "httpd_password"; conf->location = "httpd_location"; conf->method = "httpd_method"; conf->mimetype = "httpd_mimetype"; conf->body = "httpd_body"; return conf; } static void *merge_auth_form_dir_config(apr_pool_t * p, void *basev, void *addv) { auth_form_config_rec *new = (auth_form_config_rec *) apr_pcalloc(p, sizeof(auth_form_config_rec)); auth_form_config_rec *add = (auth_form_config_rec *) addv; auth_form_config_rec *base = (auth_form_config_rec *) basev; new->providers = !add->providers ? base->providers : add->providers; new->authoritative = (add->authoritative_set == 0) ? base->authoritative : add->authoritative; new->authoritative_set = add->authoritative_set || base->authoritative_set; new->site = (add->site_set == 0) ? base->site : add->site; new->site_set = add->site_set || base->site_set; new->username = (add->username_set == 0) ? base->username : add->username; new->username_set = add->username_set || base->username_set; new->password = (add->password_set == 0) ? base->password : add->password; new->password_set = add->password_set || base->password_set; new->location = (add->location_set == 0) ? base->location : add->location; new->location_set = add->location_set || base->location_set; new->form_size = (add->form_size_set == 0) ? base->form_size : add->form_size; new->form_size_set = add->form_size_set || base->form_size_set; new->fakebasicauth = (add->fakebasicauth_set == 0) ? base->fakebasicauth : add->fakebasicauth; new->fakebasicauth_set = add->fakebasicauth_set || base->fakebasicauth_set; new->method = (add->method_set == 0) ? base->method : add->method; new->method_set = add->method_set || base->method_set; new->mimetype = (add->mimetype_set == 0) ? base->mimetype : add->mimetype; new->mimetype_set = add->mimetype_set || base->mimetype_set; new->body = (add->body_set == 0) ? base->body : add->body; new->body_set = add->body_set || base->body_set; new->disable_no_store = (add->disable_no_store_set == 0) ? base->disable_no_store : add->disable_no_store; new->disable_no_store_set = add->disable_no_store_set || base->disable_no_store_set; new->loginsuccess = (add->loginsuccess_set == 0) ? base->loginsuccess : add->loginsuccess; new->loginsuccess_set = add->loginsuccess_set || base->loginsuccess_set; new->loginrequired = (add->loginrequired_set == 0) ? base->loginrequired : add->loginrequired; new->loginrequired_set = add->loginrequired_set || base->loginrequired_set; new->logout = (add->logout_set == 0) ? base->logout : add->logout; new->logout_set = add->logout_set || base->logout_set; return new; } static const char *add_authn_provider(cmd_parms * cmd, void *config, const char *arg) { auth_form_config_rec *conf = (auth_form_config_rec *) config; authn_provider_list *newp; newp = apr_pcalloc(cmd->pool, sizeof(authn_provider_list)); newp->provider_name = arg; /* lookup and cache the actual provider now */ newp->provider = ap_lookup_provider(AUTHN_PROVIDER_GROUP, newp->provider_name, AUTHN_PROVIDER_VERSION); if (newp->provider == NULL) { /* * by the time they use it, the provider should be loaded and * registered with us. */ return apr_psprintf(cmd->pool, "Unknown Authn provider: %s", newp->provider_name); } if (!newp->provider->check_password) { /* if it doesn't provide the appropriate function, reject it */ return apr_psprintf(cmd->pool, "The '%s' Authn provider doesn't support " "Form Authentication", newp->provider_name); } /* Add it to the list now. */ if (!conf->providers) { conf->providers = newp; } else { authn_provider_list *last = conf->providers; while (last->next) { last = last->next; } last->next = newp; } return NULL; } /** * Sanity check a given string that it exists, is not empty, * and does not contain special characters. */ static const char *check_string(cmd_parms * cmd, const char *string) { if (!string || !*string || ap_strchr_c(string, '=') || ap_strchr_c(string, '&')) { return apr_pstrcat(cmd->pool, cmd->directive->directive, " cannot be empty, or contain '=' or '&'.", NULL); } return NULL; } static const char *set_cookie_form_location(cmd_parms * cmd, void *config, const char *location) { auth_form_config_rec *conf = (auth_form_config_rec *) config; conf->location = location; conf->location_set = 1; return check_string(cmd, location); } static const char *set_cookie_form_username(cmd_parms * cmd, void *config, const char *username) { auth_form_config_rec *conf = (auth_form_config_rec *) config; conf->username = username; conf->username_set = 1; return check_string(cmd, username); } static const char *set_cookie_form_password(cmd_parms * cmd, void *config, const char *password) { auth_form_config_rec *conf = (auth_form_config_rec *) config; conf->password = password; conf->password_set = 1; return check_string(cmd, password); } static const char *set_cookie_form_method(cmd_parms * cmd, void *config, const char *method) { auth_form_config_rec *conf = (auth_form_config_rec *) config; conf->method = method; conf->method_set = 1; return check_string(cmd, method); } static const char *set_cookie_form_mimetype(cmd_parms * cmd, void *config, const char *mimetype) { auth_form_config_rec *conf = (auth_form_config_rec *) config; conf->mimetype = mimetype; conf->mimetype_set = 1; return check_string(cmd, mimetype); } static const char *set_cookie_form_body(cmd_parms * cmd, void *config, const char *body) { auth_form_config_rec *conf = (auth_form_config_rec *) config; conf->body = body; conf->body_set = 1; return check_string(cmd, body); } static const char *set_cookie_form_size(cmd_parms * cmd, void *config, const char *arg) { auth_form_config_rec *conf = config; apr_off_t size; if (APR_SUCCESS != apr_strtoff(&size, arg, NULL, 10) || size < 0 || size > APR_SIZE_MAX) { return "AuthCookieFormSize must be a size in bytes, or zero."; } conf->form_size = (apr_size_t)size; conf->form_size_set = 1; return NULL; } static const char *set_login_required_location(cmd_parms * cmd, void *config, const char *loginrequired) { auth_form_config_rec *conf = (auth_form_config_rec *) config; const char *err; conf->loginrequired = ap_expr_parse_cmd(cmd, loginrequired, AP_EXPR_FLAG_STRING_RESULT, &err, NULL); if (err) { return apr_psprintf(cmd->pool, "Could not parse login required expression '%s': %s", loginrequired, err); } conf->loginrequired_set = 1; return NULL; } static const char *set_login_success_location(cmd_parms * cmd, void *config, const char *loginsuccess) { auth_form_config_rec *conf = (auth_form_config_rec *) config; const char *err; conf->loginsuccess = ap_expr_parse_cmd(cmd, loginsuccess, AP_EXPR_FLAG_STRING_RESULT, &err, NULL); if (err) { return apr_psprintf(cmd->pool, "Could not parse login success expression '%s': %s", loginsuccess, err); } conf->loginsuccess_set = 1; return NULL; } static const char *set_logout_location(cmd_parms * cmd, void *config, const char *logout) { auth_form_config_rec *conf = (auth_form_config_rec *) config; const char *err; conf->logout = ap_expr_parse_cmd(cmd, logout, AP_EXPR_FLAG_STRING_RESULT, &err, NULL); if (err) { return apr_psprintf(cmd->pool, "Could not parse logout required expression '%s': %s", logout, err); } conf->logout_set = 1; return NULL; } static const char *set_site_passphrase(cmd_parms * cmd, void *config, const char *site) { auth_form_config_rec *conf = (auth_form_config_rec *) config; conf->site = site; conf->site_set = 1; return NULL; } static const char *set_authoritative(cmd_parms * cmd, void *config, int flag) { auth_form_config_rec *conf = (auth_form_config_rec *) config; conf->authoritative = flag; conf->authoritative_set = 1; return NULL; } static const char *set_fake_basic_auth(cmd_parms * cmd, void *config, int flag) { auth_form_config_rec *conf = (auth_form_config_rec *) config; conf->fakebasicauth = flag; conf->fakebasicauth_set = 1; return NULL; } static const char *set_disable_no_store(cmd_parms * cmd, void *config, int flag) { auth_form_config_rec *conf = (auth_form_config_rec *) config; conf->disable_no_store = flag; conf->disable_no_store_set = 1; return NULL; } static const command_rec auth_form_cmds[] = { AP_INIT_ITERATE("AuthFormProvider", add_authn_provider, NULL, OR_AUTHCFG, "specify the auth providers for a directory or location"), AP_INIT_TAKE1("AuthFormUsername", set_cookie_form_username, NULL, OR_AUTHCFG, "The field of the login form carrying the username"), AP_INIT_TAKE1("AuthFormPassword", set_cookie_form_password, NULL, OR_AUTHCFG, "The field of the login form carrying the password"), AP_INIT_TAKE1("AuthFormLocation", set_cookie_form_location, NULL, OR_AUTHCFG, "The field of the login form carrying the URL to redirect on " "successful login."), AP_INIT_TAKE1("AuthFormMethod", set_cookie_form_method, NULL, OR_AUTHCFG, "The field of the login form carrying the original request method."), AP_INIT_TAKE1("AuthFormMimetype", set_cookie_form_mimetype, NULL, OR_AUTHCFG, "The field of the login form carrying the original request mimetype."), AP_INIT_TAKE1("AuthFormBody", set_cookie_form_body, NULL, OR_AUTHCFG, "The field of the login form carrying the urlencoded original request " "body."), AP_INIT_TAKE1("AuthFormSize", set_cookie_form_size, NULL, ACCESS_CONF, "Maximum size of body parsed by the form parser"), AP_INIT_TAKE1("AuthFormLoginRequiredLocation", set_login_required_location, NULL, OR_AUTHCFG, "If set, redirect the browser to this URL rather than " "return 401 Not Authorized."), AP_INIT_TAKE1("AuthFormLoginSuccessLocation", set_login_success_location, NULL, OR_AUTHCFG, "If set, redirect the browser to this URL when a login " "processed by the login handler is successful."), AP_INIT_TAKE1("AuthFormLogoutLocation", set_logout_location, NULL, OR_AUTHCFG, "The URL of the logout successful page. An attempt to access an " "URL handled by the handler " FORM_LOGOUT_HANDLER " will result " "in an redirect to this page after logout."), AP_INIT_TAKE1("AuthFormSitePassphrase", set_site_passphrase, NULL, OR_AUTHCFG, "If set, use this passphrase to determine whether the user should " "be authenticated. Bypasses the user authentication check on " "every website hit, and is useful for high traffic sites."), AP_INIT_FLAG("AuthFormAuthoritative", set_authoritative, NULL, OR_AUTHCFG, "Set to 'Off' to allow access control to be passed along to " "lower modules if the UserID is not known to this module"), AP_INIT_FLAG("AuthFormFakeBasicAuth", set_fake_basic_auth, NULL, OR_AUTHCFG, "Set to 'On' to pass through authentication to the rest of the " "server as a basic authentication header."), AP_INIT_FLAG("AuthFormDisableNoStore", set_disable_no_store, NULL, OR_AUTHCFG, "Set to 'on' to stop the sending of a Cache-Control no-store header with " "the login screen. This allows the browser to cache the credentials, but " "at the risk of it being possible for the login form to be resubmitted " "and revealed to the backend server through XSS. Use at own risk."), {NULL} }; module AP_MODULE_DECLARE_DATA auth_form_module; static void note_cookie_auth_failure(request_rec * r) { auth_form_config_rec *conf = ap_get_module_config(r->per_dir_config, &auth_form_module); if (conf->location && ap_strchr_c(conf->location, ':')) { apr_table_setn(r->err_headers_out, "Location", conf->location); } } static int hook_note_cookie_auth_failure(request_rec * r, const char *auth_type) { if (strcasecmp(auth_type, "form")) return DECLINED; note_cookie_auth_failure(r); return OK; } /** * Set the auth username and password into the main request * notes table. */ static void set_notes_auth(request_rec * r, const char *user, const char *pw, const char *method, const char *mimetype) { apr_table_t *notes = NULL; const char *authname; /* find the main request */ while (r->main) { r = r->main; } /* find the first redirect */ while (r->prev) { r = r->prev; } notes = r->notes; /* have we isolated the user and pw before? */ authname = ap_auth_name(r); if (user) { apr_table_setn(notes, apr_pstrcat(r->pool, authname, "-user", NULL), user); } if (pw) { apr_table_setn(notes, apr_pstrcat(r->pool, authname, "-pw", NULL), pw); } if (method) { apr_table_setn(notes, apr_pstrcat(r->pool, authname, "-method", NULL), method); } if (mimetype) { apr_table_setn(notes, apr_pstrcat(r->pool, authname, "-mimetype", NULL), mimetype); } } /** * Get the auth username and password from the main request * notes table, if present. */ static void get_notes_auth(request_rec *r, const char **user, const char **pw, const char **method, const char **mimetype) { const char *authname; request_rec *m = r; /* find the main request */ while (m->main) { m = m->main; } /* find the first redirect */ while (m->prev) { m = m->prev; } /* have we isolated the user and pw before? */ authname = ap_auth_name(m); if (user) { *user = (char *) apr_table_get(m->notes, apr_pstrcat(m->pool, authname, "-user", NULL)); } if (pw) { *pw = (char *) apr_table_get(m->notes, apr_pstrcat(m->pool, authname, "-pw", NULL)); } if (method) { *method = (char *) apr_table_get(m->notes, apr_pstrcat(m->pool, authname, "-method", NULL)); } if (mimetype) { *mimetype = (char *) apr_table_get(m->notes, apr_pstrcat(m->pool, authname, "-mimetype", NULL)); } /* set the user, even though the user is unauthenticated at this point */ if (user && *user) { r->user = (char *) *user; } ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "from notes: user: %s, pw: %s, method: %s, mimetype: %s", user ? *user : "<null>", pw ? *pw : "<null>", method ? *method : "<null>", mimetype ? *mimetype : "<null>"); } /** * Set the auth username and password into the session. * * If either the username, or the password are NULL, the username * and/or password will be removed from the session. */ static apr_status_t set_session_auth(request_rec * r, const char *user, const char *pw, const char *site) { const char *hash = NULL; const char *authname = ap_auth_name(r); session_rec *z = NULL; if (site) { hash = ap_md5(r->pool, (unsigned char *) apr_pstrcat(r->pool, user, ":", site, NULL)); } ap_session_load_fn(r, &z); ap_session_set_fn(r, z, apr_pstrcat(r->pool, authname, "-" MOD_SESSION_USER, NULL), user); ap_session_set_fn(r, z, apr_pstrcat(r->pool, authname, "-" MOD_SESSION_PW, NULL), pw); ap_session_set_fn(r, z, apr_pstrcat(r->pool, authname, "-" MOD_AUTH_FORM_HASH, NULL), hash); return APR_SUCCESS; } /** * Get the auth username and password from the main request * notes table, if present. */ static apr_status_t get_session_auth(request_rec * r, const char **user, const char **pw, const char **hash) { const char *authname = ap_auth_name(r); session_rec *z = NULL; ap_session_load_fn(r, &z); if (user) { ap_session_get_fn(r, z, apr_pstrcat(r->pool, authname, "-" MOD_SESSION_USER, NULL), user); } if (pw) { ap_session_get_fn(r, z, apr_pstrcat(r->pool, authname, "-" MOD_SESSION_PW, NULL), pw); } if (hash) { ap_session_get_fn(r, z, apr_pstrcat(r->pool, authname, "-" MOD_AUTH_FORM_HASH, NULL), hash); } /* set the user, even though the user is unauthenticated at this point */ if (user && *user) { r->user = (char *) *user; } ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "from session: " MOD_SESSION_USER ": %s, " MOD_SESSION_PW ": %s, " MOD_AUTH_FORM_HASH ": %s", user ? *user : "<null>", pw ? *pw : "<null>", hash ? *hash : "<null>"); return APR_SUCCESS; } /** * Isolate the username and password in a POSTed form with the * username in the "username" field, and the password in the * "password" field. * * If either the username or the password is missing, this * function will return HTTP_UNAUTHORIZED. * * The location field is considered optional, and will be returned * if present. */ static int get_form_auth(request_rec * r, const char *username, const char *password, const char *location, const char *method, const char *mimetype, const char *body, const char **sent_user, const char **sent_pw, const char **sent_loc, const char **sent_method, const char **sent_mimetype, apr_bucket_brigade **sent_body, auth_form_config_rec * conf) { /* sanity check - are we a POST request? */ /* find the username and password in the form */ apr_array_header_t *pairs = NULL; apr_off_t len; apr_size_t size; int res; char *buffer; /* have we isolated the user and pw before? */ get_notes_auth(r, sent_user, sent_pw, sent_method, sent_mimetype); if (sent_user && *sent_user && sent_pw && *sent_pw) { return OK; } res = ap_parse_form_data(r, NULL, &pairs, -1, conf->form_size); if (res != OK) { return res; } while (pairs && !apr_is_empty_array(pairs)) { ap_form_pair_t *pair = (ap_form_pair_t *) apr_array_pop(pairs); if (username && !strcmp(pair->name, username) && sent_user) { apr_brigade_length(pair->value, 1, &len); size = (apr_size_t) len; buffer = apr_palloc(r->pool, size + 1); apr_brigade_flatten(pair->value, buffer, &size); buffer[len] = 0; *sent_user = buffer; } else if (password && !strcmp(pair->name, password) && sent_pw) { apr_brigade_length(pair->value, 1, &len); size = (apr_size_t) len; buffer = apr_palloc(r->pool, size + 1); apr_brigade_flatten(pair->value, buffer, &size); buffer[len] = 0; *sent_pw = buffer; } else if (location && !strcmp(pair->name, location) && sent_loc) { apr_brigade_length(pair->value, 1, &len); size = (apr_size_t) len; buffer = apr_palloc(r->pool, size + 1); apr_brigade_flatten(pair->value, buffer, &size); buffer[len] = 0; *sent_loc = buffer; } else if (method && !strcmp(pair->name, method) && sent_method) { apr_brigade_length(pair->value, 1, &len); size = (apr_size_t) len; buffer = apr_palloc(r->pool, size + 1); apr_brigade_flatten(pair->value, buffer, &size); buffer[len] = 0; *sent_method = buffer; } else if (mimetype && !strcmp(pair->name, mimetype) && sent_mimetype) { apr_brigade_length(pair->value, 1, &len); size = (apr_size_t) len; buffer = apr_palloc(r->pool, size + 1); apr_brigade_flatten(pair->value, buffer, &size); buffer[len] = 0; *sent_mimetype = buffer; } else if (body && !strcmp(pair->name, body) && sent_body) { *sent_body = pair->value; } } ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "from form: user: %s, pw: %s, method: %s, mimetype: %s, location: %s", sent_user ? *sent_user : "<null>", sent_pw ? *sent_pw : "<null>", sent_method ? *sent_method : "<null>", sent_mimetype ? *sent_mimetype : "<null>", sent_loc ? *sent_loc : "<null>"); /* set the user, even though the user is unauthenticated at this point */ if (sent_user && *sent_user) { r->user = (char *) *sent_user; } /* a missing username or missing password means auth denied */ if (!sent_user || !*sent_user) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02982) "form parsed, but username field '%s' was missing or empty, unauthorized", username); return HTTP_UNAUTHORIZED; } if (!sent_pw || !*sent_pw) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02983) "form parsed, but password field '%s' was missing or empty, unauthorized", password); return HTTP_UNAUTHORIZED; } /* * save away the username, password, mimetype and method, so that they * are available should the auth need to be run again. */ set_notes_auth(r, *sent_user, *sent_pw, sent_method ? *sent_method : NULL, sent_mimetype ? *sent_mimetype : NULL); return OK; } /* These functions return 0 if client is OK, and proper error status * if not... either HTTP_UNAUTHORIZED, if we made a check, and it failed, or * HTTP_INTERNAL_SERVER_ERROR, if things are so totally confused that we * couldn't figure out how to tell if the client is authorized or not. * * If they return DECLINED, and all other modules also decline, that's * treated by the server core as a configuration error, logged and * reported as such. */ /** * Given a username and site passphrase hash from the session, determine * whether the site passphrase is valid for this session. * * If the site passphrase is NULL, or if the sent_hash is NULL, this * function returns DECLINED. * * If the site passphrase hash does not match the sent hash, this function * returns AUTH_USER_NOT_FOUND. * * On success, returns OK. */ static int check_site(request_rec * r, const char *site, const char *sent_user, const char *sent_hash) { if (site && sent_user && sent_hash) { const char *hash = ap_md5(r->pool, (unsigned char *) apr_pstrcat(r->pool, sent_user, ":", site, NULL)); if (!strcmp(sent_hash, hash)) { return OK; } else { return AUTH_USER_NOT_FOUND; } } return DECLINED; } /** * Given a username and password (extracted externally from a cookie), run * the authnz hooks to determine whether this request is authorized. * * Return an HTTP code. */ static int check_authn(request_rec * r, const char *sent_user, const char *sent_pw) { authn_status auth_result; authn_provider_list *current_provider; auth_form_config_rec *conf = ap_get_module_config(r->per_dir_config, &auth_form_module); current_provider = conf->providers; do { const authn_provider *provider; /* * For now, if a provider isn't set, we'll be nice and use the file * provider. */ if (!current_provider) { provider = ap_lookup_provider(AUTHN_PROVIDER_GROUP, AUTHN_DEFAULT_PROVIDER, AUTHN_PROVIDER_VERSION); if (!provider || !provider->check_password) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01806) "no authn provider configured"); auth_result = AUTH_GENERAL_ERROR; break; } apr_table_setn(r->notes, AUTHN_PROVIDER_NAME_NOTE, AUTHN_DEFAULT_PROVIDER); } else { provider = current_provider->provider; apr_table_setn(r->notes, AUTHN_PROVIDER_NAME_NOTE, current_provider->provider_name); } if (!sent_user || !sent_pw) { auth_result = AUTH_USER_NOT_FOUND; break; } auth_result = provider->check_password(r, sent_user, sent_pw); apr_table_unset(r->notes, AUTHN_PROVIDER_NAME_NOTE); /* Something occurred. Stop checking. */ if (auth_result != AUTH_USER_NOT_FOUND) { break; } /* If we're not really configured for providers, stop now. */ if (!conf->providers) { break; } current_provider = current_provider->next; } while (current_provider); if (auth_result != AUTH_GRANTED) { int return_code; /* If we're not authoritative, then any error is ignored. */ if (!(conf->authoritative) && auth_result != AUTH_DENIED) { return DECLINED; } switch (auth_result) { case AUTH_DENIED: ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01807) "user '%s': authentication failure for \"%s\": " "password Mismatch", sent_user, r->uri); return_code = HTTP_UNAUTHORIZED; break; case AUTH_USER_NOT_FOUND: ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01808) "user '%s' not found: %s", sent_user, r->uri); return_code = HTTP_UNAUTHORIZED; break; case AUTH_GENERAL_ERROR: default: /* * We'll assume that the module has already said what its error * was in the logs. */ return_code = HTTP_INTERNAL_SERVER_ERROR; break; } /* If we're returning 401, tell them to try again. */ if (return_code == HTTP_UNAUTHORIZED) { note_cookie_auth_failure(r); } /* TODO: Flag the user somehow as to the reason for the failure */ return return_code; } return OK; } /* fake the basic authentication header if configured to do so */ static void fake_basic_authentication(request_rec *r, auth_form_config_rec *conf, const char *user, const char *pw) { if (conf->fakebasicauth) { char *basic = apr_pstrcat(r->pool, user, ":", pw, NULL); apr_size_t size = (apr_size_t) strlen(basic); char *base64 = apr_palloc(r->pool, apr_base64_encode_len(size + 1) * sizeof(char)); apr_base64_encode(base64, basic, size); apr_table_setn(r->headers_in, "Authorization", apr_pstrcat(r->pool, "Basic ", base64, NULL)); } } /** * Must we use form authentication? If so, extract the cookie and run * the authnz hooks to determine if the login is valid. * * If the login is not valid, a 401 Not Authorized will be returned. It * is up to the webmaster to ensure this screen displays a suitable login * form to give the user the opportunity to log in. */ static int authenticate_form_authn(request_rec * r) { auth_form_config_rec *conf = ap_get_module_config(r->per_dir_config, &auth_form_module); const char *sent_user = NULL, *sent_pw = NULL, *sent_hash = NULL; const char *sent_loc = NULL, *sent_method = "GET", *sent_mimetype = NULL; const char *current_auth = NULL; const char *err; apr_status_t res; int rv = HTTP_UNAUTHORIZED; /* Are we configured to be Form auth? */ current_auth = ap_auth_type(r); if (!current_auth || strcasecmp(current_auth, "form")) { return DECLINED; } /* * XSS security warning: using cookies to store private data only works * when the administrator has full control over the source website. When * in forward-proxy mode, websites are public by definition, and so can * never be secure. Abort the auth attempt in this case. */ if (PROXYREQ_PROXY == r->proxyreq) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01809) "form auth cannot be used for proxy " "requests due to XSS risk, access denied: %s", r->uri); return HTTP_INTERNAL_SERVER_ERROR; } /* We need an authentication realm. */ if (!ap_auth_name(r)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01810) "need AuthName: %s", r->uri); return HTTP_INTERNAL_SERVER_ERROR; } r->ap_auth_type = (char *) current_auth; /* try get the username and password from the notes, if present */ get_notes_auth(r, &sent_user, &sent_pw, &sent_method, &sent_mimetype); if (!sent_user || !sent_pw || !*sent_user || !*sent_pw) { /* otherwise try get the username and password from a session, if present */ res = get_session_auth(r, &sent_user, &sent_pw, &sent_hash); } else { res = APR_SUCCESS; } /* first test whether the site passphrase matches */ if (APR_SUCCESS == res && sent_user && sent_hash && sent_pw) { rv = check_site(r, conf->site, sent_user, sent_hash); if (OK == rv) { fake_basic_authentication(r, conf, sent_user, sent_pw); return OK; } } /* otherwise test for a normal password match */ if (APR_SUCCESS == res && sent_user && sent_pw) { rv = check_authn(r, sent_user, sent_pw); if (OK == rv) { fake_basic_authentication(r, conf, sent_user, sent_pw); return OK; } } /* * If we reach this point, the request should fail with access denied, * except for one potential scenario: * * If the request is a POST, and the posted form contains user defined fields * for a username and a password, and the username and password are correct, * then return the response obtained by a GET to this URL. * * If an additional user defined location field is present in the form, * instead of a GET of the current URL, redirect the browser to the new * location. * * As a further option, if the user defined fields for the type of request, * the mime type of the body of the request, and the body of the request * itself are present, replace this request with a new request of the given * type and with the given body. * * Otherwise access is denied. * * Reading the body requires some song and dance, because the input filters * are not yet configured. To work around this problem, we create a * subrequest and use that to create a sane filter stack we can read the * form from. * * The main request is then capped with a kept_body input filter, which has * the effect of guaranteeing the input stack can be safely read a second time. * */ if (HTTP_UNAUTHORIZED == rv && r->method_number == M_POST && ap_is_initial_req(r)) { request_rec *rr; apr_bucket_brigade *sent_body = NULL; /* create a subrequest of our current uri */ rr = ap_sub_req_lookup_uri(r->uri, r, r->input_filters); rr->headers_in = r->headers_in; /* run the insert_filters hook on the subrequest to ensure a body read can * be done properly. */ ap_run_insert_filter(rr); /* parse the form by reading the subrequest */ rv = get_form_auth(rr, conf->username, conf->password, conf->location, conf->method, conf->mimetype, conf->body, &sent_user, &sent_pw, &sent_loc, &sent_method, &sent_mimetype, &sent_body, conf); /* make sure any user detected within the subrequest is saved back to * the main request. */ r->user = apr_pstrdup(r->pool, rr->user); /* we cannot clean up rr at this point, as memory allocated to rr is * referenced from the main request. It will be cleaned up when the * main request is cleaned up. */ /* insert the kept_body filter on the main request to guarantee the * input filter stack cannot be read a second time, optionally inject * a saved body if one was specified in the login form. */ if (sent_body && sent_mimetype) { apr_table_set(r->headers_in, "Content-Type", sent_mimetype); r->kept_body = sent_body; } else { r->kept_body = apr_brigade_create(r->pool, r->connection->bucket_alloc); } ap_request_insert_filter_fn(r); /* did the form ask to change the method? if so, switch in the redirect handler * to relaunch this request as the subrequest with the new method. If the * form didn't specify a method, the default value GET will force a redirect. */ if (sent_method && strcmp(r->method, sent_method)) { r->handler = FORM_REDIRECT_HANDLER; } /* check the authn in the main request, based on the username found */ if (OK == rv) { rv = check_authn(r, sent_user, sent_pw); if (OK == rv) { fake_basic_authentication(r, conf, sent_user, sent_pw); set_session_auth(r, sent_user, sent_pw, conf->site); if (sent_loc) { apr_table_set(r->headers_out, "Location", sent_loc); return HTTP_MOVED_TEMPORARILY; } if (conf->loginsuccess) { const char *loginsuccess = ap_expr_str_exec(r, conf->loginsuccess, &err); if (!err) { apr_table_set(r->headers_out, "Location", loginsuccess); return HTTP_MOVED_TEMPORARILY; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02339) "Can't evaluate login success expression: %s", err); return HTTP_INTERNAL_SERVER_ERROR; } } } } } /* * did the admin prefer to be redirected to the login page on failure * instead? */ if (HTTP_UNAUTHORIZED == rv && conf->loginrequired) { const char *loginrequired = ap_expr_str_exec(r, conf->loginrequired, &err); if (!err) { apr_table_set(r->headers_out, "Location", loginrequired); return HTTP_MOVED_TEMPORARILY; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02340) "Can't evaluate login required expression: %s", err); return HTTP_INTERNAL_SERVER_ERROR; } } /* did the user ask to be redirected on login success? */ if (sent_loc) { apr_table_set(r->headers_out, "Location", sent_loc); rv = HTTP_MOVED_TEMPORARILY; } /* * potential security issue: if we return a login to the browser, we must * send a no-store to make sure a well behaved browser will not try and * send the login details a second time if the back button is pressed. * * if the user has full control over the backend, the * AuthCookieDisableNoStore can be used to turn this off. */ if (HTTP_UNAUTHORIZED == rv && !conf->disable_no_store) { apr_table_addn(r->headers_out, "Cache-Control", "no-store"); apr_table_addn(r->err_headers_out, "Cache-Control", "no-store"); } return rv; } /** * Handle a login attempt. * * If the login session is either missing or form authnz is unsuccessful, a * 401 Not Authorized will be returned to the browser. The webmaster * is expected to insert a login form into the 401 Not Authorized * error screen. * * If the webmaster wishes, they can point the form submission at this * handler, which will redirect the user to the correct page on success. * On failure, the 401 Not Authorized error screen will be redisplayed, * where the login attempt can be repeated. * */ static int authenticate_form_login_handler(request_rec * r) { auth_form_config_rec *conf; const char *err; const char *sent_user = NULL, *sent_pw = NULL, *sent_loc = NULL; int rv; if (strcmp(r->handler, FORM_LOGIN_HANDLER)) { return DECLINED; } if (r->method_number != M_POST) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01811) "the " FORM_LOGIN_HANDLER " only supports the POST method for %s", r->uri); return HTTP_METHOD_NOT_ALLOWED; } conf = ap_get_module_config(r->per_dir_config, &auth_form_module); rv = get_form_auth(r, conf->username, conf->password, conf->location, NULL, NULL, NULL, &sent_user, &sent_pw, &sent_loc, NULL, NULL, NULL, conf); if (OK == rv) { rv = check_authn(r, sent_user, sent_pw); if (OK == rv) { set_session_auth(r, sent_user, sent_pw, conf->site); if (sent_loc) { apr_table_set(r->headers_out, "Location", sent_loc); return HTTP_MOVED_TEMPORARILY; } if (conf->loginsuccess) { const char *loginsuccess = ap_expr_str_exec(r, conf->loginsuccess, &err); if (!err) { apr_table_set(r->headers_out, "Location", loginsuccess); return HTTP_MOVED_TEMPORARILY; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02341) "Can't evaluate login success expression: %s", err); return HTTP_INTERNAL_SERVER_ERROR; } } return HTTP_OK; } } /* did we prefer to be redirected to the login page on failure instead? */ if (HTTP_UNAUTHORIZED == rv && conf->loginrequired) { const char *loginrequired = ap_expr_str_exec(r, conf->loginrequired, &err); if (!err) { apr_table_set(r->headers_out, "Location", loginrequired); return HTTP_MOVED_TEMPORARILY; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02342) "Can't evaluate login required expression: %s", err); return HTTP_INTERNAL_SERVER_ERROR; } } return rv; } /** * Handle a logout attempt. * * If an attempt is made to access this URL, any username and password * embedded in the session is deleted. * * This has the effect of logging the person out. * * If a logout URI has been specified, this function will create an * internal redirect to this page. */ static int authenticate_form_logout_handler(request_rec * r) { auth_form_config_rec *conf; const char *err; if (strcmp(r->handler, FORM_LOGOUT_HANDLER)) { return DECLINED; } conf = ap_get_module_config(r->per_dir_config, &auth_form_module); /* remove the username and password, effectively logging the user out */ set_session_auth(r, NULL, NULL, NULL); /* * make sure the logout page is never cached - otherwise the logout won't * work! */ apr_table_addn(r->headers_out, "Cache-Control", "no-store"); apr_table_addn(r->err_headers_out, "Cache-Control", "no-store"); /* if set, internal redirect to the logout page */ if (conf->logout) { const char *logout = ap_expr_str_exec(r, conf->logout, &err); if (!err) { apr_table_addn(r->headers_out, "Location", logout); return HTTP_TEMPORARY_REDIRECT; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02343) "Can't evaluate logout expression: %s", err); return HTTP_INTERNAL_SERVER_ERROR; } } return HTTP_OK; } /** * Handle a redirect attempt. * * If during a form login, the method, mimetype and request body are * specified, this handler will ensure that this request is included * as an internal redirect. * */ static int authenticate_form_redirect_handler(request_rec * r) { request_rec *rr = NULL; const char *sent_method = NULL, *sent_mimetype = NULL; if (strcmp(r->handler, FORM_REDIRECT_HANDLER)) { return DECLINED; } /* get the method and mimetype from the notes */ get_notes_auth(r, NULL, NULL, &sent_method, &sent_mimetype); if (r->kept_body && sent_method && sent_mimetype) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01812) "internal redirect to method '%s' and body mimetype '%s' for the " "uri: %s", sent_method, sent_mimetype, r->uri); rr = ap_sub_req_method_uri(sent_method, r->uri, r, r->output_filters); r->status = ap_run_sub_req(rr); } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01813) "internal redirect requested but one or all of method, mimetype or " "body are NULL: %s", r->uri); return HTTP_INTERNAL_SERVER_ERROR; } /* return the underlying error, or OK on success */ return r->status == HTTP_OK || r->status == OK ? OK : r->status; } static int authenticate_form_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { if (!ap_session_load_fn || !ap_session_get_fn || !ap_session_set_fn) { ap_session_load_fn = APR_RETRIEVE_OPTIONAL_FN(ap_session_load); ap_session_get_fn = APR_RETRIEVE_OPTIONAL_FN(ap_session_get); ap_session_set_fn = APR_RETRIEVE_OPTIONAL_FN(ap_session_set); if (!ap_session_load_fn || !ap_session_get_fn || !ap_session_set_fn) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, NULL, APLOGNO(02617) "You must load mod_session to enable the mod_auth_form " "functions"); return !OK; } } if (!ap_request_insert_filter_fn || !ap_request_remove_filter_fn) { ap_request_insert_filter_fn = APR_RETRIEVE_OPTIONAL_FN(ap_request_insert_filter); ap_request_remove_filter_fn = APR_RETRIEVE_OPTIONAL_FN(ap_request_remove_filter); if (!ap_request_insert_filter_fn || !ap_request_remove_filter_fn) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, NULL, APLOGNO(02618) "You must load mod_request to enable the mod_auth_form " "functions"); return !OK; } } return OK; } static void register_hooks(apr_pool_t * p) { ap_hook_post_config(authenticate_form_post_config,NULL,NULL,APR_HOOK_MIDDLE); #if AP_MODULE_MAGIC_AT_LEAST(20080403,1) ap_hook_check_authn(authenticate_form_authn, NULL, NULL, APR_HOOK_MIDDLE, AP_AUTH_INTERNAL_PER_CONF); #else ap_hook_check_user_id(authenticate_form_authn, NULL, NULL, APR_HOOK_MIDDLE); #endif ap_hook_handler(authenticate_form_login_handler, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_handler(authenticate_form_logout_handler, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_handler(authenticate_form_redirect_handler, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_note_auth_failure(hook_note_cookie_auth_failure, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(auth_form) = { STANDARD20_MODULE_STUFF, create_auth_form_dir_config, /* dir config creater */ merge_auth_form_dir_config, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ auth_form_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; ����������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_core.dep���������������������������������������������������������0000644�0000000�0000050�00000004214�12674411515�017131� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authz_core.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authz_core.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_core.c�����������������������������������������������������������0000644�0000000�0000050�00000112721�13316417421�016602� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * Security options etc. * * Module derived from code originally written by Rob McCool * */ #include "apr_strings.h" #include "apr_network_io.h" #include "apr_md5.h" #define APR_WANT_STRFUNC #define APR_WANT_BYTEFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_request.h" #include "http_protocol.h" #include "ap_provider.h" #include "ap_expr.h" #include "mod_auth.h" #if APR_HAVE_NETINET_IN_H #include <netinet/in.h> #endif #undef AUTHZ_EXTRA_CONFIGS typedef struct provider_alias_rec { char *provider_name; char *provider_alias; char *provider_args; const void *provider_parsed_args; ap_conf_vector_t *sec_auth; const authz_provider *provider; } provider_alias_rec; typedef enum { AUTHZ_LOGIC_AND, AUTHZ_LOGIC_OR, AUTHZ_LOGIC_OFF, AUTHZ_LOGIC_UNSET } authz_logic_op; typedef struct authz_section_conf authz_section_conf; struct authz_section_conf { const char *provider_name; const char *provider_args; const void *provider_parsed_args; const authz_provider *provider; apr_int64_t limited; authz_logic_op op; int negate; /** true if this is not a real container but produced by AuthMerging; * only used for logging */ int is_merged; authz_section_conf *first; authz_section_conf *next; }; typedef struct authz_core_dir_conf authz_core_dir_conf; struct authz_core_dir_conf { authz_section_conf *section; authz_core_dir_conf *next; authz_logic_op op; signed char authz_forbidden_on_fail; }; #define UNSET -1 typedef struct authz_core_srv_conf { apr_hash_t *alias_rec; } authz_core_srv_conf; module AP_MODULE_DECLARE_DATA authz_core_module; static authz_core_dir_conf *authz_core_first_dir_conf; static void *create_authz_core_dir_config(apr_pool_t *p, char *dummy) { authz_core_dir_conf *conf = apr_pcalloc(p, sizeof(*conf)); conf->op = AUTHZ_LOGIC_UNSET; conf->authz_forbidden_on_fail = UNSET; conf->next = authz_core_first_dir_conf; authz_core_first_dir_conf = conf; return (void *)conf; } static void *merge_authz_core_dir_config(apr_pool_t *p, void *basev, void *newv) { authz_core_dir_conf *base = (authz_core_dir_conf *)basev; authz_core_dir_conf *new = (authz_core_dir_conf *)newv; authz_core_dir_conf *conf; if (new->op == AUTHZ_LOGIC_UNSET && !new->section && base->section ) { /* Only authz_forbidden_on_fail has been set in new. Don't treat * it as a new auth config w.r.t. AuthMerging */ conf = apr_pmemdup(p, base, sizeof(*base)); } else if (new->op == AUTHZ_LOGIC_OFF || new->op == AUTHZ_LOGIC_UNSET || !(base->section || new->section)) { conf = apr_pmemdup(p, new, sizeof(*new)); } else { authz_section_conf *section; if (base->section) { if (new->section) { section = apr_pcalloc(p, sizeof(*section)); section->limited = base->section->limited | new->section->limited; section->op = new->op; section->is_merged = 1; section->first = apr_pmemdup(p, base->section, sizeof(*base->section)); section->first->next = apr_pmemdup(p, new->section, sizeof(*new->section)); } else { section = apr_pmemdup(p, base->section, sizeof(*base->section)); } } else { section = apr_pmemdup(p, new->section, sizeof(*new->section)); } conf = apr_pcalloc(p, sizeof(*conf)); conf->section = section; conf->op = new->op; } if (new->authz_forbidden_on_fail == UNSET) conf->authz_forbidden_on_fail = base->authz_forbidden_on_fail; else conf->authz_forbidden_on_fail = new->authz_forbidden_on_fail; return (void*)conf; } /* Only per-server directive we have is GLOBAL_ONLY */ static void *merge_authz_core_svr_config(apr_pool_t *p, void *basev, void *newv) { return basev; } static void *create_authz_core_svr_config(apr_pool_t *p, server_rec *s) { authz_core_srv_conf *authcfg; authcfg = apr_pcalloc(p, sizeof(*authcfg)); authcfg->alias_rec = apr_hash_make(p); return (void *)authcfg; } /* This is a fake authz provider that really merges various authz alias * configurations and then invokes them. */ static authz_status authz_alias_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { const char *provider_name; authz_status ret = AUTHZ_DENIED; /* Look up the provider alias in the alias list. * Get the dir_config and call ap_Merge_per_dir_configs() * Call the real provider->check_authorization() function * return the result of the above function call */ provider_name = apr_table_get(r->notes, AUTHZ_PROVIDER_NAME_NOTE); if (provider_name) { authz_core_srv_conf *authcfg; provider_alias_rec *prvdraliasrec; authcfg = ap_get_module_config(r->server->module_config, &authz_core_module); prvdraliasrec = apr_hash_get(authcfg->alias_rec, provider_name, APR_HASH_KEY_STRING); /* If we found the alias provider in the list, then merge the directory configurations and call the real provider */ if (prvdraliasrec) { ap_conf_vector_t *orig_dir_config = r->per_dir_config; r->per_dir_config = ap_merge_per_dir_configs(r->pool, orig_dir_config, prvdraliasrec->sec_auth); ret = prvdraliasrec->provider-> check_authorization(r, prvdraliasrec->provider_args, prvdraliasrec->provider_parsed_args); r->per_dir_config = orig_dir_config; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02305) "no alias provider found for '%s' (BUG?)", provider_name); } } else { ap_assert(provider_name != NULL); } return ret; } static const authz_provider authz_alias_provider = { &authz_alias_check_authorization, NULL, }; static const char *authz_require_alias_section(cmd_parms *cmd, void *mconfig, const char *args) { const char *endp = ap_strrchr_c(args, '>'); char *provider_name; char *provider_alias; char *provider_args, *extra_args; ap_conf_vector_t *new_authz_config; int old_overrides = cmd->override; const char *errmsg; const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (endp == NULL) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive missing closing '>'", NULL); } args = apr_pstrndup(cmd->temp_pool, args, endp - args); if (!args[0]) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive requires additional arguments", NULL); } /* Pull the real provider name and the alias name from the block header */ provider_name = ap_getword_conf(cmd->pool, &args); provider_alias = ap_getword_conf(cmd->pool, &args); provider_args = ap_getword_conf(cmd->pool, &args); extra_args = ap_getword_conf(cmd->pool, &args); if (!provider_name[0] || !provider_alias[0]) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive requires additional arguments", NULL); } /* We only handle one "Require-Parameters" parameter. If several parameters are needed, they must be enclosed between quotes */ if (extra_args && *extra_args) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(10142) "When several arguments (%s %s...) are passed to a %s directive, " "they must be enclosed in quotation marks. Otherwise, only the " "first one is taken into account", provider_args, extra_args, cmd->cmd->name); } new_authz_config = ap_create_per_dir_config(cmd->pool); /* Walk the subsection configuration to get the per_dir config that we will * merge just before the real provider is called. */ cmd->override = OR_AUTHCFG | ACCESS_CONF; errmsg = ap_walk_config(cmd->directive->first_child, cmd, new_authz_config); cmd->override = old_overrides; if (!errmsg) { provider_alias_rec *prvdraliasrec; authz_core_srv_conf *authcfg; prvdraliasrec = apr_pcalloc(cmd->pool, sizeof(*prvdraliasrec)); /* Save off the new directory config along with the original * provider name and function pointer data */ prvdraliasrec->provider_name = provider_name; prvdraliasrec->provider_alias = provider_alias; prvdraliasrec->provider_args = provider_args; prvdraliasrec->sec_auth = new_authz_config; prvdraliasrec->provider = ap_lookup_provider(AUTHZ_PROVIDER_GROUP, provider_name, AUTHZ_PROVIDER_VERSION); /* by the time the config file is used, the provider should be loaded * and registered with us. */ if (!prvdraliasrec->provider) { return apr_psprintf(cmd->pool, "Unknown Authz provider: %s", provider_name); } if (prvdraliasrec->provider->parse_require_line) { err = prvdraliasrec->provider->parse_require_line(cmd, provider_args, &prvdraliasrec->provider_parsed_args); if (err) return apr_psprintf(cmd->pool, "Can't parse 'Require %s %s': %s", provider_name, provider_args, err); } authcfg = ap_get_module_config(cmd->server->module_config, &authz_core_module); apr_hash_set(authcfg->alias_rec, provider_alias, APR_HASH_KEY_STRING, prvdraliasrec); /* Register the fake provider so that we get called first */ ap_register_auth_provider(cmd->pool, AUTHZ_PROVIDER_GROUP, provider_alias, AUTHZ_PROVIDER_VERSION, &authz_alias_provider, AP_AUTH_INTERNAL_PER_CONF); } return errmsg; } static const char* format_authz_result(authz_status result) { return ((result == AUTHZ_DENIED) ? "denied" : ((result == AUTHZ_GRANTED) ? "granted" : ((result == AUTHZ_DENIED_NO_USER) ? "denied (no authenticated user yet)" : "neutral"))); } static const char* format_authz_command(apr_pool_t *p, authz_section_conf *section) { return (section->provider ? apr_pstrcat(p, "Require ", (section->negate ? "not " : ""), section->provider_name, " ", section->provider_args, NULL) : apr_pstrcat(p, section->is_merged ? "AuthMerging " : "<Require", ((section->op == AUTHZ_LOGIC_AND) ? (section->negate ? "NotAll" : "All") : (section->negate ? "None" : "Any")), section->is_merged ? "" : ">", NULL)); } static authz_section_conf* create_default_section(apr_pool_t *p) { authz_section_conf *section = apr_pcalloc(p, sizeof(*section)); section->op = AUTHZ_LOGIC_OR; return section; } static const char *add_authz_provider(cmd_parms *cmd, void *config, const char *args) { authz_core_dir_conf *conf = (authz_core_dir_conf*)config; authz_section_conf *section = apr_pcalloc(cmd->pool, sizeof(*section)); authz_section_conf *child; section->provider_name = ap_getword_conf(cmd->pool, &args); if (!strcasecmp(section->provider_name, "not")) { section->provider_name = ap_getword_conf(cmd->pool, &args); section->negate = 1; } section->provider_args = args; /* lookup and cache the actual provider now */ section->provider = ap_lookup_provider(AUTHZ_PROVIDER_GROUP, section->provider_name, AUTHZ_PROVIDER_VERSION); /* by the time the config file is used, the provider should be loaded * and registered with us. */ if (!section->provider) { return apr_psprintf(cmd->pool, "Unknown Authz provider: %s", section->provider_name); } /* if the provider doesn't provide the appropriate function, reject it */ if (!section->provider->check_authorization) { return apr_psprintf(cmd->pool, "The '%s' Authz provider is not supported by any " "of the loaded authorization modules", section->provider_name); } section->limited = cmd->limited; if (section->provider->parse_require_line) { const char *err; apr_pool_userdata_setn(section->provider_name, AUTHZ_PROVIDER_NAME_NOTE, apr_pool_cleanup_null, cmd->temp_pool); err = section->provider->parse_require_line(cmd, args, §ion->provider_parsed_args); if (err) return err; } if (!conf->section) { conf->section = create_default_section(cmd->pool); } if (section->negate && conf->section->op == AUTHZ_LOGIC_OR) { return apr_psprintf(cmd->pool, "negative %s directive has no effect " "in %s directive", cmd->cmd->name, format_authz_command(cmd->pool, conf->section)); } conf->section->limited |= section->limited; child = conf->section->first; if (child) { while (child->next) { child = child->next; } child->next = section; } else { conf->section->first = section; } return NULL; } static const char *add_authz_section(cmd_parms *cmd, void *mconfig, const char *args) { authz_core_dir_conf *conf = mconfig; const char *endp = ap_strrchr_c(args, '>'); authz_section_conf *old_section = conf->section; authz_section_conf *section; int old_overrides = cmd->override; apr_int64_t old_limited = cmd->limited; const char *errmsg; if (endp == NULL) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive missing closing '>'", NULL); } args = apr_pstrndup(cmd->temp_pool, args, endp - args); if (args[0]) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive doesn't take additional arguments", NULL); } section = apr_pcalloc(cmd->pool, sizeof(*section)); if (!strcasecmp(cmd->cmd->name, "<RequireAll")) { section->op = AUTHZ_LOGIC_AND; } else if (!strcasecmp(cmd->cmd->name, "<RequireAny")) { section->op = AUTHZ_LOGIC_OR; } else if (!strcasecmp(cmd->cmd->name, "<RequireNotAll")) { section->op = AUTHZ_LOGIC_AND; section->negate = 1; } else { section->op = AUTHZ_LOGIC_OR; section->negate = 1; } conf->section = section; /* trigger NOT_IN_LIMIT errors as if this were a <Limit> directive */ cmd->limited &= ~(AP_METHOD_BIT << (METHODS - 1)); cmd->override = OR_AUTHCFG; errmsg = ap_walk_config(cmd->directive->first_child, cmd, cmd->context); cmd->override = old_overrides; cmd->limited = old_limited; conf->section = old_section; if (errmsg) { return errmsg; } if (section->first) { authz_section_conf *child; if (!old_section) { old_section = conf->section = create_default_section(cmd->pool); } if (section->negate && old_section->op == AUTHZ_LOGIC_OR) { return apr_psprintf(cmd->pool, "%s directive has " "no effect in %s directive", format_authz_command(cmd->pool, section), format_authz_command(cmd->pool, old_section)); } old_section->limited |= section->limited; if (!section->negate && section->op == old_section->op) { /* be associative */ section = section->first; } child = old_section->first; if (child) { while (child->next) { child = child->next; } child->next = section; } else { old_section->first = section; } } else { return apr_pstrcat(cmd->pool, format_authz_command(cmd->pool, section), " directive contains no authorization directives", NULL); } return NULL; } static const char *authz_merge_sections(cmd_parms *cmd, void *mconfig, const char *arg) { authz_core_dir_conf *conf = mconfig; if (!strcasecmp(arg, "Off")) { conf->op = AUTHZ_LOGIC_OFF; } else if (!strcasecmp(arg, "And")) { conf->op = AUTHZ_LOGIC_AND; } else if (!strcasecmp(arg, "Or")) { conf->op = AUTHZ_LOGIC_OR; } else { return apr_pstrcat(cmd->pool, cmd->cmd->name, " must be one of: " "Off | And | Or", NULL); } return NULL; } static int authz_core_check_section(apr_pool_t *p, server_rec *s, authz_section_conf *section, int is_conf) { authz_section_conf *prev = NULL; authz_section_conf *child = section->first; int ret = !OK; while (child) { if (child->first) { if (authz_core_check_section(p, s, child, 0) != OK) { return !OK; } if (child->negate && child->op != section->op) { authz_section_conf *next = child->next; /* avoid one level of recursion when De Morgan permits */ child = child->first; if (prev) { prev->next = child; } else { section->first = child; } do { child->negate = !child->negate; } while (child->next && (child = child->next)); child->next = next; } } prev = child; child = child->next; } child = section->first; while (child) { if (!child->negate) { ret = OK; break; } child = child->next; } if (ret != OK) { ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_STARTUP, APR_SUCCESS, s, APLOGNO(01624) "%s directive contains only negative authorization directives", is_conf ? "<Directory>, <Location>, or similar" : format_authz_command(p, section)); } return ret; } static int authz_core_pre_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp) { authz_core_first_dir_conf = NULL; return OK; } static int authz_core_check_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { authz_core_dir_conf *conf = authz_core_first_dir_conf; while (conf) { if (conf->section) { if (authz_core_check_section(p, s, conf->section, 1) != OK) { return !OK; } } conf = conf->next; } return OK; } static const command_rec authz_cmds[] = { AP_INIT_RAW_ARGS("<AuthzProviderAlias", authz_require_alias_section, NULL, RSRC_CONF, "container for grouping an authorization provider's " "directives under a provider alias"), AP_INIT_RAW_ARGS("Require", add_authz_provider, NULL, OR_AUTHCFG, "specifies authorization directives " "which one must pass (or not) for a request to suceeed"), AP_INIT_RAW_ARGS("<RequireAll", add_authz_section, NULL, OR_AUTHCFG, "container for grouping authorization directives " "of which none must fail and at least one must pass " "for a request to succeed"), AP_INIT_RAW_ARGS("<RequireAny", add_authz_section, NULL, OR_AUTHCFG, "container for grouping authorization directives " "of which one must pass " "for a request to succeed"), #ifdef AUTHZ_EXTRA_CONFIGS AP_INIT_RAW_ARGS("<RequireNotAll", add_authz_section, NULL, OR_AUTHCFG, "container for grouping authorization directives " "of which some must fail or none must pass " "for a request to succeed"), #endif AP_INIT_RAW_ARGS("<RequireNone", add_authz_section, NULL, OR_AUTHCFG, "container for grouping authorization directives " "of which none must pass " "for a request to succeed"), AP_INIT_TAKE1("AuthMerging", authz_merge_sections, NULL, OR_AUTHCFG, "controls how a <Directory>, <Location>, or similar " "directive's authorization directives are combined with " "those of its predecessor"), AP_INIT_FLAG("AuthzSendForbiddenOnFailure", ap_set_flag_slot_char, (void *)APR_OFFSETOF(authz_core_dir_conf, authz_forbidden_on_fail), OR_AUTHCFG, "Controls if an authorization failure should result in a " "'403 FORBIDDEN' response instead of the HTTP-conforming " "'401 UNAUTHORIZED'"), {NULL} }; static authz_status apply_authz_sections(request_rec *r, authz_section_conf *section, authz_logic_op parent_op) { authz_status auth_result; /* check to make sure that the request method requires authorization */ if (!(section->limited & (AP_METHOD_BIT << r->method_number))) { auth_result = (parent_op == AUTHZ_LOGIC_AND) ? AUTHZ_GRANTED : AUTHZ_NEUTRAL; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(01625) "authorization result of %s: %s " "(directive limited to other methods)", format_authz_command(r->pool, section), format_authz_result(auth_result)); return auth_result; } if (section->provider) { apr_table_setn(r->notes, AUTHZ_PROVIDER_NAME_NOTE, section->provider_name); auth_result = section->provider->check_authorization(r, section->provider_args, section->provider_parsed_args); apr_table_unset(r->notes, AUTHZ_PROVIDER_NAME_NOTE); } else { authz_section_conf *child = section->first; auth_result = AUTHZ_NEUTRAL; while (child) { authz_status child_result; child_result = apply_authz_sections(r, child, section->op); if (child_result == AUTHZ_GENERAL_ERROR) { return AUTHZ_GENERAL_ERROR; } if (child_result != AUTHZ_NEUTRAL) { /* * Handling of AUTHZ_DENIED/AUTHZ_DENIED_NO_USER: Return * AUTHZ_DENIED_NO_USER if providing a user may change the * result, AUTHZ_DENIED otherwise. */ if (section->op == AUTHZ_LOGIC_AND) { if (child_result == AUTHZ_DENIED) { auth_result = child_result; break; } if ((child_result == AUTHZ_DENIED_NO_USER && auth_result != AUTHZ_DENIED) || (auth_result == AUTHZ_NEUTRAL)) { auth_result = child_result; } } else { /* AUTHZ_LOGIC_OR */ if (child_result == AUTHZ_GRANTED) { auth_result = child_result; break; } if ((child_result == AUTHZ_DENIED_NO_USER && auth_result == AUTHZ_DENIED) || (auth_result == AUTHZ_NEUTRAL)) { auth_result = child_result; } } } child = child->next; } } if (section->negate) { if (auth_result == AUTHZ_GRANTED) { auth_result = AUTHZ_DENIED; } else if (auth_result == AUTHZ_DENIED || auth_result == AUTHZ_DENIED_NO_USER) { /* For negated directives, if the original result was denied * then the new result is neutral since we can not grant * access simply because authorization was not rejected. */ auth_result = AUTHZ_NEUTRAL; } } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(01626) "authorization result of %s: %s", format_authz_command(r->pool, section), format_authz_result(auth_result)); return auth_result; } static int authorize_user_core(request_rec *r, int after_authn) { authz_core_dir_conf *conf; authz_status auth_result; conf = ap_get_module_config(r->per_dir_config, &authz_core_module); if (!conf->section) { if (ap_auth_type(r)) { /* there's an AuthType configured, but no authorization * directives applied to support it */ ap_log_rerror(APLOG_MARK, APLOG_ERR, APR_SUCCESS, r, APLOGNO(01627) "AuthType configured with no corresponding " "authorization directives"); return HTTP_INTERNAL_SERVER_ERROR; } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(01628) "authorization result: granted (no directives)"); return OK; } auth_result = apply_authz_sections(r, conf->section, AUTHZ_LOGIC_AND); if (auth_result == AUTHZ_GRANTED) { return OK; } else if (auth_result == AUTHZ_DENIED_NO_USER) { if (after_authn) { ap_log_rerror(APLOG_MARK, APLOG_ERR, APR_SUCCESS, r, APLOGNO(01629) "authorization failure (no authenticated user): %s", r->uri); /* * If we're returning 401 to an authenticated user, tell them to * try again. If unauthenticated, note_auth_failure has already * been called during auth. */ if (r->user) ap_note_auth_failure(r); return HTTP_UNAUTHORIZED; } else { /* * We need a user before we can decide what to do. * Get out of the way and proceed with authentication. */ return DECLINED; } } else if (auth_result == AUTHZ_DENIED || auth_result == AUTHZ_NEUTRAL) { if (!after_authn || ap_auth_type(r) == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, APR_SUCCESS, r, APLOGNO(01630) "client denied by server configuration: %s%s", r->filename ? "" : "uri ", r->filename ? r->filename : r->uri); return HTTP_FORBIDDEN; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, APR_SUCCESS, r, APLOGNO(01631) "user %s: authorization failure for \"%s\": ", r->user, r->uri); if (conf->authz_forbidden_on_fail > 0) { return HTTP_FORBIDDEN; } else { /* * If we're returning 401 to an authenticated user, tell them to * try again. If unauthenticated, note_auth_failure has already * been called during auth. */ if (r->user) ap_note_auth_failure(r); return HTTP_UNAUTHORIZED; } } } else { /* We'll assume that the module has already said what its * error was in the logs. */ return HTTP_INTERNAL_SERVER_ERROR; } } static int authorize_userless(request_rec *r) { return authorize_user_core(r, 0); } static int authorize_user(request_rec *r) { return authorize_user_core(r, 1); } static int authz_some_auth_required(request_rec *r) { authz_core_dir_conf *conf; conf = ap_get_module_config(r->per_dir_config, &authz_core_module); if (conf->section && (conf->section->limited & (AP_METHOD_BIT << r->method_number))) { return 1; } return 0; } /* * env authz provider */ static authz_status env_check_authorization(request_rec *r, const char *require_line, const void *parsed_require_line) { const char *t, *w; /* The 'env' provider will allow the configuration to specify a list of env variables to check rather than a single variable. This is different from the previous host based syntax. */ t = require_line; while ((w = ap_getword_conf(r->pool, &t)) && w[0]) { if (apr_table_get(r->subprocess_env, w)) { return AUTHZ_GRANTED; } } return AUTHZ_DENIED; } static const authz_provider authz_env_provider = { &env_check_authorization, NULL, }; /* * all authz provider */ static authz_status all_check_authorization(request_rec *r, const char *require_line, const void *parsed_require_line) { if (parsed_require_line) { return AUTHZ_GRANTED; } return AUTHZ_DENIED; } static const char *all_parse_config(cmd_parms *cmd, const char *require_line, const void **parsed_require_line) { /* * If the argument to the 'all' provider is 'granted' then just let * everybody in. This would be equivalent to the previous syntax of * 'allow from all'. If the argument is 'denied' we reject everybody, * which is equivalent to 'deny from all'. */ if (strcasecmp(require_line, "granted") == 0) { *parsed_require_line = (void *)1; return NULL; } else if (strcasecmp(require_line, "denied") == 0) { /* *parsed_require_line is already NULL */ return NULL; } else { return "Argument for 'Require all' must be 'granted' or 'denied'"; } } static const authz_provider authz_all_provider = { &all_check_authorization, &all_parse_config, }; /* * method authz provider */ static authz_status method_check_authorization(request_rec *r, const char *require_line, const void *parsed_require_line) { const apr_int64_t *allowed = parsed_require_line; if (*allowed & (AP_METHOD_BIT << r->method_number)) return AUTHZ_GRANTED; else return AUTHZ_DENIED; } static const char *method_parse_config(cmd_parms *cmd, const char *require_line, const void **parsed_require_line) { const char *w, *t; apr_int64_t *allowed = apr_pcalloc(cmd->pool, sizeof(apr_int64_t)); t = require_line; while ((w = ap_getword_conf(cmd->temp_pool, &t)) && w[0]) { int m = ap_method_number_of(w); if (m == M_INVALID) { return apr_pstrcat(cmd->pool, "Invalid Method '", w, "'", NULL); } *allowed |= (AP_METHOD_BIT << m); } *parsed_require_line = allowed; return NULL; } static const authz_provider authz_method_provider = { &method_check_authorization, &method_parse_config, }; /* * expr authz provider */ #define REQUIRE_EXPR_NOTE "Require_expr_info" struct require_expr_info { ap_expr_info_t *expr; int want_user; }; static int expr_lookup_fn(ap_expr_lookup_parms *parms) { if (parms->type == AP_EXPR_FUNC_VAR && strcasecmp(parms->name, "REMOTE_USER") == 0) { struct require_expr_info *info; apr_pool_userdata_get((void**)&info, REQUIRE_EXPR_NOTE, parms->ptemp); AP_DEBUG_ASSERT(info != NULL); info->want_user = 1; } return ap_expr_lookup_default(parms); } static const char *expr_parse_config(cmd_parms *cmd, const char *require_line, const void **parsed_require_line) { const char *expr_err = NULL; struct require_expr_info *info = apr_pcalloc(cmd->pool, sizeof(*info)); /* if the expression happens to be surrounded by quotes, skip them */ if (require_line[0] == '"') { apr_size_t len = strlen(require_line); if (require_line[len-1] == '"') require_line = apr_pstrndup(cmd->temp_pool, require_line + 1, len - 2); } apr_pool_userdata_setn(info, REQUIRE_EXPR_NOTE, apr_pool_cleanup_null, cmd->temp_pool); info->expr = ap_expr_parse_cmd(cmd, require_line, 0, &expr_err, expr_lookup_fn); if (expr_err) return apr_pstrcat(cmd->temp_pool, "Cannot parse expression in require line: ", expr_err, NULL); *parsed_require_line = info; return NULL; } static authz_status expr_check_authorization(request_rec *r, const char *require_line, const void *parsed_require_line) { const char *err = NULL; const struct require_expr_info *info = parsed_require_line; int rc = ap_expr_exec(r, info->expr, &err); if (rc < 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02320) "Error evaluating expression in 'Require expr': %s", err); return AUTHZ_GENERAL_ERROR; } else if (rc == 0) { if (info->want_user) return AUTHZ_DENIED_NO_USER; else return AUTHZ_DENIED; } else { return AUTHZ_GRANTED; } } static const authz_provider authz_expr_provider = { &expr_check_authorization, &expr_parse_config, }; static void register_hooks(apr_pool_t *p) { APR_REGISTER_OPTIONAL_FN(authz_some_auth_required); ap_hook_pre_config(authz_core_pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_check_config(authz_core_check_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_check_authz(authorize_user, NULL, NULL, APR_HOOK_LAST, AP_AUTH_INTERNAL_PER_CONF); ap_hook_check_access_ex(authorize_userless, NULL, NULL, APR_HOOK_LAST, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "env", AUTHZ_PROVIDER_VERSION, &authz_env_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "all", AUTHZ_PROVIDER_VERSION, &authz_all_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "method", AUTHZ_PROVIDER_VERSION, &authz_method_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "expr", AUTHZ_PROVIDER_VERSION, &authz_expr_provider, AP_AUTH_INTERNAL_PER_CONF); } AP_DECLARE_MODULE(authz_core) = { STANDARD20_MODULE_STUFF, create_authz_core_dir_config, /* dir config creater */ merge_authz_core_dir_config, /* dir merger */ create_authz_core_svr_config, /* server config */ merge_authz_core_svr_config , /* merge server config */ authz_cmds, register_hooks /* register hooks */ }; �����������������������������������������������httpd-2.4.41/modules/aaa/mod_authnz_ldap.dep��������������������������������������������������������0000644�0000000�0000050�00000005127�12674411515�017303� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authnz_ldap.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authnz_ldap.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_ldap.h"\ "..\..\srclib\apr-util\include\apr_anylock.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_ldap.h"\ "..\..\srclib\apr-util\include\apr_ldap_init.h"\ "..\..\srclib\apr-util\include\apr_ldap_option.h"\ "..\..\srclib\apr-util\include\apr_ldap_rebind.h"\ "..\..\srclib\apr-util\include\apr_ldap_url.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_rmm.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_thread_rwlock.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_owner.dsp��������������������������������������������������������0000644�0000000�0000050�00000011103�10663420702�017336� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authz_owner" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authz_owner - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authz_owner.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authz_owner.mak" CFG="mod_authz_owner - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authz_owner - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authz_owner - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authz_owner - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_authz_owner_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authz_owner.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authz_owner.so" /d LONG_NAME="authz_owner_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authz_owner.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_owner.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authz_owner.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_owner.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authz_owner.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authz_owner - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_authz_owner_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authz_owner.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authz_owner.so" /d LONG_NAME="authz_owner_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authz_owner.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_owner.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authz_owner.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_owner.so # Begin Special Build Tool TargetPath=.\Debug\mod_authz_owner.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authz_owner - Win32 Release" # Name "mod_authz_owner - Win32 Debug" # Begin Source File SOURCE=.\mod_authz_owner.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_core.dsp���������������������������������������������������������0000644�0000000�0000050�00000011045�12062614564�017147� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authz_core" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authz_core - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authz_core.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authz_core.mak" CFG="mod_authz_core - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authz_core - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authz_core - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authz_core - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_authz_core_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authz_core.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authz_core.so" /d LONG_NAME="authz_core_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authz_core.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_core.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authz_core.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_core.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authz_core.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authz_core - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_authz_core_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authz_core.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authz_core.so" /d LONG_NAME="authz_core_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authz_core.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_core.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authz_core.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_core.so # Begin Special Build Tool TargetPath=.\Debug\mod_authz_core.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authz_core - Win32 Release" # Name "mod_authz_core - Win32 Debug" # Begin Source File SOURCE=.\mod_authz_core.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUauthnzldap������������������������������������������������������������0000644�0000000�0000050�00000010676�11540546347�016365� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # #LDAP client requires the use of Winsock # ifdef USE_STDSOCKETS XDEFINES += -DUSE_WINSOCK \ $(EOLIST) endif # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = authnzldap # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) LDAP Authentication Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = AuthnzLDAP Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/authnzldap.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_authnz_ldap.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ lldapsdk \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ util_ldap_connection_find \ util_ldap_connection_close \ util_ldap_cache_checkuserid \ util_ldap_cache_getuserdn \ util_ldap_cache_compare \ util_ldap_cache_comparedn \ @aprlib.imp \ @httpd.imp \ @libc.imp \ @lldapsdk.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ authnz_ldap_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_host.c�����������������������������������������������������������0000644�0000000�0000050�00000031162�13250450660�016625� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * Security options etc. * * Module derived from code originally written by Rob McCool * */ #include "apr_strings.h" #include "apr_network_io.h" #include "apr_md5.h" #include "apr_hash.h" #define APR_WANT_STRFUNC #define APR_WANT_BYTEFUNC #include "apr_want.h" #include "ap_config.h" #include "ap_provider.h" #include "httpd.h" #include "http_core.h" #include "http_config.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "mod_auth.h" #if APR_HAVE_NETINET_IN_H #include <netinet/in.h> #endif /* * To save memory if the same subnets are used in hundres of vhosts, we store * each subnet only once and use this temporary hash to find it again. */ static apr_hash_t *parsed_subnets; static apr_ipsubnet_t *localhost_v4; #if APR_HAVE_IPV6 static apr_ipsubnet_t *localhost_v6; #endif static int in_domain(const char *domain, const char *what) { int dl = strlen(domain); int wl = strlen(what); if ((wl - dl) >= 0) { if (strcasecmp(domain, &what[wl - dl]) != 0) { return 0; } /* Make sure we matched an *entire* subdomain --- if the user * said 'allow from good.com', we don't want people from nogood.com * to be able to get in. */ if (wl == dl) { return 1; /* matched whole thing */ } else { return (domain[0] == '.' || what[wl - dl - 1] == '.'); } } else { return 0; } } static const char *ip_parse_config(cmd_parms *cmd, const char *require_line, const void **parsed_require_line) { const char *t, *w; int count = 0; apr_ipsubnet_t **ip; apr_pool_t *ptemp = cmd->temp_pool; apr_pool_t *p = cmd->pool; /* The 'ip' provider will allow the configuration to specify a list of ip addresses to check rather than a single address. This is different from the previous host based syntax. */ t = require_line; while ((w = ap_getword_conf(ptemp, &t)) && w[0]) count++; if (count == 0) return "'require ip' requires an argument"; ip = apr_pcalloc(p, sizeof(apr_ipsubnet_t *) * (count + 1)); *parsed_require_line = ip; t = require_line; while ((w = ap_getword_conf(ptemp, &t)) && w[0]) { char *addr = apr_pstrdup(ptemp, w); char *mask; apr_status_t rv; if (parsed_subnets && (*ip = apr_hash_get(parsed_subnets, w, APR_HASH_KEY_STRING)) != NULL) { /* we already have parsed this subnet */ ip++; continue; } if ((mask = ap_strchr(addr, '/'))) *mask++ = '\0'; rv = apr_ipsubnet_create(ip, addr, mask, p); if(APR_STATUS_IS_EINVAL(rv)) { /* looked nothing like an IP address */ return apr_psprintf(p, "ip address '%s' appears to be invalid", w); } else if (rv != APR_SUCCESS) { return apr_psprintf(p, "ip address '%s' appears to be invalid: %pm", w, &rv); } if (parsed_subnets) apr_hash_set(parsed_subnets, w, APR_HASH_KEY_STRING, *ip); ip++; } return NULL; } static authz_status ip_check_authorization(request_rec *r, const char *require_line, const void *parsed_require_line) { /* apr_ipsubnet_test should accept const but doesn't */ apr_ipsubnet_t **ip = (apr_ipsubnet_t **)parsed_require_line; while (*ip) { if (apr_ipsubnet_test(*ip, r->useragent_addr)) return AUTHZ_GRANTED; ip++; } /* authz_core will log the require line and the result at DEBUG */ return AUTHZ_DENIED; } static authz_status host_check_authorization(request_rec *r, const char *require_line, const void *parsed_require_line) { const char *t, *w; const char *remotehost = NULL; int remotehost_is_ip; remotehost = ap_get_useragent_host(r, REMOTE_DOUBLE_REV, &remotehost_is_ip); if ((remotehost == NULL) || remotehost_is_ip) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01753) "access check of '%s' to %s failed, reason: unable to get the " "remote host name", require_line, r->uri); } else { const char *err = NULL; const ap_expr_info_t *expr = parsed_require_line; const char *require; require = ap_expr_str_exec(r, expr, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02593) "authz_host authorize: require host: Can't " "evaluate require expression: %s", err); return AUTHZ_DENIED; } /* The 'host' provider will allow the configuration to specify a list of host names to check rather than a single name. This is different from the previous host based syntax. */ t = require; /* '#' is not a valid hostname character and admin could * specify 'Require host localhost# Add example.com later'. We * should not grant access to 'example.com' in that case. */ w = ap_strchr_c(t, '#'); if (w) { if (w == t) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(10120) "authz_host authorize: dubious empty " "'Require host %s' with only comment", t); return AUTHZ_DENIED; } ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(10121) "authz_host authorize: ignoring comment in " "'Require host %s'", t); /* Truncate the string at the #. */ t = apr_pstrmemdup(r->pool, t, w - t); } while ((w = ap_getword_conf(r->pool, &t)) && w[0]) { if (in_domain(w, remotehost)) { return AUTHZ_GRANTED; } } } /* authz_core will log the require line and the result at DEBUG */ return AUTHZ_DENIED; } static authz_status forward_dns_check_authorization(request_rec *r, const char *require_line, const void *parsed_require_line) { const char *err = NULL; const ap_expr_info_t *expr = parsed_require_line; const char *require, *t; char *w; /* the require line is an expression, which is evaluated now. */ require = ap_expr_str_exec(r, expr, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(03354) "authz_host authorize: require forward-dns: " "Can't evaluate require expression: %s", err); return AUTHZ_DENIED; } /* tokenize expected list of names */ t = require; while ((w = ap_getword_conf(r->pool, &t)) && w[0]) { apr_sockaddr_t *sa; apr_status_t rv; char *hash_ptr; /* stop on apache configuration file comments */ if ((hash_ptr = ap_strchr(w, '#'))) { if (hash_ptr == w) { break; } *hash_ptr = '\0'; } /* does the client ip match one of the names? */ rv = apr_sockaddr_info_get(&sa, w, APR_UNSPEC, 0, 0, r->pool); if (rv == APR_SUCCESS) { while (sa) { int match = apr_sockaddr_equal(sa, r->useragent_addr); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03355) "access check for %s as '%s': %s", r->useragent_ip, w, match? "yes": "no"); if (match) { return AUTHZ_GRANTED; } sa = sa->next; } } else { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(03356) "No sockaddr info for \"%s\"", w); } /* stop processing, we are in a comment */ if (hash_ptr) { break; } } return AUTHZ_DENIED; } static authz_status local_check_authorization(request_rec *r, const char *require_line, const void *parsed_require_line) { if ( apr_sockaddr_equal(r->connection->local_addr, r->useragent_addr) || apr_ipsubnet_test(localhost_v4, r->useragent_addr) #if APR_HAVE_IPV6 || apr_ipsubnet_test(localhost_v6, r->useragent_addr) #endif ) { return AUTHZ_GRANTED; } return AUTHZ_DENIED; } static const char *host_parse_config(cmd_parms *cmd, const char *require_line, const void **parsed_require_line) { const char *expr_err = NULL; ap_expr_info_t *expr; expr = ap_expr_parse_cmd(cmd, require_line, AP_EXPR_FLAG_STRING_RESULT, &expr_err, NULL); if (expr_err) return apr_pstrcat(cmd->temp_pool, "Cannot parse expression in require line: ", expr_err, NULL); *parsed_require_line = expr; return NULL; } static const authz_provider authz_ip_provider = { &ip_check_authorization, &ip_parse_config, }; static const authz_provider authz_host_provider = { &host_check_authorization, &host_parse_config, }; static const authz_provider authz_forward_dns_provider = { &forward_dns_check_authorization, &host_parse_config, }; static const authz_provider authz_local_provider = { &local_check_authorization, NULL, }; static int authz_host_pre_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp) { /* we only use this hash in the parse config phase, ptemp is enough */ parsed_subnets = apr_hash_make(ptemp); apr_ipsubnet_create(&localhost_v4, "127.0.0.0", "8", p); apr_hash_set(parsed_subnets, "127.0.0.0/8", APR_HASH_KEY_STRING, localhost_v4); #if APR_HAVE_IPV6 apr_ipsubnet_create(&localhost_v6, "::1", NULL, p); apr_hash_set(parsed_subnets, "::1", APR_HASH_KEY_STRING, localhost_v6); #endif return OK; } static int authz_host_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { /* make sure we don't use this during .htaccess parsing */ parsed_subnets = NULL; return OK; } static void register_hooks(apr_pool_t *p) { ap_hook_pre_config(authz_host_pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(authz_host_post_config, NULL, NULL, APR_HOOK_MIDDLE); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "ip", AUTHZ_PROVIDER_VERSION, &authz_ip_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "host", AUTHZ_PROVIDER_VERSION, &authz_host_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "forward-dns", AUTHZ_PROVIDER_VERSION, &authz_forward_dns_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "local", AUTHZ_PROVIDER_VERSION, &authz_local_provider, AP_AUTH_INTERNAL_PER_CONF); } AP_DECLARE_MODULE(authz_host) = { STANDARD20_MODULE_STUFF, NULL, /* dir config creater */ NULL, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ NULL, register_hooks /* register hooks */ }; ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_file.mak���������������������������������������������������������0000644�0000000�0000050�00000025706�12701473373�017116� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authn_file.dsp !IF "$(CFG)" == "" CFG=mod_authn_file - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_authn_file - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_authn_file - Win32 Release" && "$(CFG)" != "mod_authn_file - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authn_file.mak" CFG="mod_authn_file - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authn_file - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authn_file - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authn_file - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authn_file.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authn_file.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_auth_basic - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authn_file.obj" -@erase "$(INTDIR)\mod_authn_file.res" -@erase "$(INTDIR)\mod_authn_file_src.idb" -@erase "$(INTDIR)\mod_authn_file_src.pdb" -@erase "$(OUTDIR)\mod_authn_file.exp" -@erase "$(OUTDIR)\mod_authn_file.lib" -@erase "$(OUTDIR)\mod_authn_file.pdb" -@erase "$(OUTDIR)\mod_authn_file.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authn_file_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authn_file.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authn_file.so" /d LONG_NAME="authn_file_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authn_file.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authn_file.pdb" /debug /out:"$(OUTDIR)\mod_authn_file.so" /implib:"$(OUTDIR)\mod_authn_file.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_file.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authn_file.obj" \ "$(INTDIR)\mod_authn_file.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authn_file.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authn_file.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authn_file.so" if exist .\Release\mod_authn_file.so.manifest mt.exe -manifest .\Release\mod_authn_file.so.manifest -outputresource:.\Release\mod_authn_file.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authn_file - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authn_file.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authn_file.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_auth_basic - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authn_file.obj" -@erase "$(INTDIR)\mod_authn_file.res" -@erase "$(INTDIR)\mod_authn_file_src.idb" -@erase "$(INTDIR)\mod_authn_file_src.pdb" -@erase "$(OUTDIR)\mod_authn_file.exp" -@erase "$(OUTDIR)\mod_authn_file.lib" -@erase "$(OUTDIR)\mod_authn_file.pdb" -@erase "$(OUTDIR)\mod_authn_file.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authn_file_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authn_file.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authn_file.so" /d LONG_NAME="authn_file_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authn_file.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authn_file.pdb" /debug /out:"$(OUTDIR)\mod_authn_file.so" /implib:"$(OUTDIR)\mod_authn_file.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_file.so LINK32_OBJS= \ "$(INTDIR)\mod_authn_file.obj" \ "$(INTDIR)\mod_authn_file.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authn_file.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authn_file.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authn_file.so" if exist .\Debug\mod_authn_file.so.manifest mt.exe -manifest .\Debug\mod_authn_file.so.manifest -outputresource:.\Debug\mod_authn_file.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authn_file.dep") !INCLUDE "mod_authn_file.dep" !ELSE !MESSAGE Warning: cannot find "mod_authn_file.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authn_file - Win32 Release" || "$(CFG)" == "mod_authn_file - Win32 Debug" !IF "$(CFG)" == "mod_authn_file - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_file - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_file - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_file - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_file - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_file - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_file - Win32 Release" "mod_auth_basic - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" cd "." "mod_auth_basic - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_authn_file - Win32 Debug" "mod_auth_basic - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" cd "." "mod_auth_basic - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authn_file - Win32 Release" "$(INTDIR)\mod_authn_file.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authn_file.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authn_file.so" /d LONG_NAME="authn_file_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authn_file - Win32 Debug" "$(INTDIR)\mod_authn_file.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authn_file.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authn_file.so" /d LONG_NAME="authn_file_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authn_file.c "$(INTDIR)\mod_authn_file.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ����������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUauthdigt��������������������������������������������������������������0000644�0000000�0000050�00000010172�11540546347�016013� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = authdigt # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Digest Authentication Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Digest Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/authdigt.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_auth_digest.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ auth_digest_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authnz_ldap.dsp��������������������������������������������������������0000644�0000000�0000050�00000011155�10551346420�017311� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authnz_ldap" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authnz_ldap - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authnz_ldap.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authnz_ldap.mak" CFG="mod_authnz_ldap - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authnz_ldap - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authnz_ldap - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authnz_ldap - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../ldap" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "LDAP_DECLARE_EXPORT" /Fd"Release\mod_authnz_ldap_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authnz_ldap.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authnz_ldap.so" /d LONG_NAME="authnz_ldap_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authnz_ldap.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authnz_ldap.so # ADD LINK32 kernel32.lib wldap32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authnz_ldap.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authnz_ldap.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authnz_ldap.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authnz_ldap - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../ldap" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "LDAP_DECLARE_EXPORT" /Fd"Debug\mod_authnz_ldap_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authnz_ldap.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authnz_ldap.so" /d LONG_NAME="authnz_ldap_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authnz_ldap.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authnz_ldap.so # ADD LINK32 kernel32.lib wldap32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authnz_ldap.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authnz_ldap.so # Begin Special Build Tool TargetPath=.\Debug\mod_authnz_ldap.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authnz_ldap - Win32 Release" # Name "mod_authnz_ldap - Win32 Debug" # Begin Source File SOURCE=.\mod_authnz_ldap.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUmakefile��������������������������������������������������������������0000644�0000000�0000050�00000011251�11653043670�015752� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # ifeq "$(wildcard $(APRUTIL)/include/apr_ldap.h)" "$(APRUTIL)/include/apr_ldap.h" WITH_LDAP = $(shell $(AWK) '/^\#define APR_HAS_LDAP /{print $$3}' $(APRUTIL)/include/apr_ldap.h) else WITH_LDAP = 0 endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/authbasc.nlm \ $(OBJDIR)/authdigt.nlm \ $(OBJDIR)/authform.nlm \ $(OBJDIR)/authnano.nlm \ $(OBJDIR)/authndbd.nlm \ $(OBJDIR)/authndbm.nlm \ $(OBJDIR)/authnfil.nlm \ $(OBJDIR)/authnsocache.nlm \ $(OBJDIR)/authzdbd.nlm \ $(OBJDIR)/authzdbm.nlm \ $(OBJDIR)/authzgrp.nlm \ $(OBJDIR)/authzusr.nlm \ $(OBJDIR)/allowmethods.nlm \ $(OBJDIR)/accesscompat.nlm \ $(EOLIST) # If WITH_LDAP and LDAPSDK have been defined then build the authnz_ldap module ifeq "$(WITH_LDAP)" "1" ifneq "$(LDAPSDK)" "" TARGET_nlm += $(OBJDIR)/authnzldap.nlm endif endif # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_dbm.dep����������������������������������������������������������0000644�0000000�0000050�00000004316�12674411515�016746� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authz_dbm.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authz_dbm.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_authz_owner.h"\ ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_auth_basic.dep���������������������������������������������������������0000644�0000000�0000050�00000004377�12674411515�017102� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_auth_basic.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_auth_basic.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_md5.h"\ "..\..\srclib\apr-util\include\apr_base64.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_host.dep���������������������������������������������������������0000644�0000000�0000050�00000004214�12674411515�017156� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authz_host.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authz_host.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_auth_digest.c����������������������������������������������������������0000644�0000000�0000050�00000200561�13441675312�016743� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_auth_digest: MD5 digest authentication * * Originally by Alexei Kosut <akosut@nueva.pvt.k12.ca.us> * Updated to RFC-2617 by Ronald Tschal�r <ronald@innovation.ch> * based on mod_auth, by Rob McCool and Robert S. Thau * * This module an updated version of modules/standard/mod_digest.c * It is still fairly new and problems may turn up - submit problem * reports to the Apache bug-database, or send them directly to me * at ronald@innovation.ch. * * Open Issues: * - qop=auth-int (when streams and trailer support available) * - nonce-format configurability * - Proxy-Authorization-Info header is set by this module, but is * currently ignored by mod_proxy (needs patch to mod_proxy) * - The source of the secret should be run-time directive (with server * scope: RSRC_CONF) * - shared-mem not completely tested yet. Seems to work ok for me, * but... (definitely won't work on Windoze) * - Sharing a realm among multiple servers has following problems: * o Server name and port can't be included in nonce-hash * (we need two nonce formats, which must be configured explicitly) * o Nonce-count check can't be for equal, or then nonce-count checking * must be disabled. What we could do is the following: * (expected < received) ? set expected = received : issue error * The only problem is that it allows replay attacks when somebody * captures a packet sent to one server and sends it to another * one. Should we add "AuthDigestNcCheck Strict"? * - expired nonces give amaya fits. * - MD5-sess and auth-int are not yet implemented. An incomplete * implementation has been removed and can be retrieved from svn history. */ #include "apr_sha1.h" #include "apr_base64.h" #include "apr_lib.h" #include "apr_time.h" #include "apr_errno.h" #include "apr_global_mutex.h" #include "apr_strings.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_request.h" #include "http_log.h" #include "http_protocol.h" #include "apr_uri.h" #include "util_md5.h" #include "util_mutex.h" #include "apr_shm.h" #include "apr_rmm.h" #include "ap_provider.h" #include "mod_auth.h" #if APR_HAVE_UNISTD_H #include <unistd.h> #endif /* struct to hold the configuration info */ typedef struct digest_config_struct { const char *dir_name; authn_provider_list *providers; const char *realm; apr_array_header_t *qop_list; apr_sha1_ctx_t nonce_ctx; apr_time_t nonce_lifetime; int check_nc; const char *algorithm; char *uri_list; } digest_config_rec; #define DFLT_ALGORITHM "MD5" #define DFLT_NONCE_LIFE apr_time_from_sec(300) #define NEXTNONCE_DELTA apr_time_from_sec(30) #define NONCE_TIME_LEN (((sizeof(apr_time_t)+2)/3)*4) #define NONCE_HASH_LEN (2*APR_SHA1_DIGESTSIZE) #define NONCE_LEN (int )(NONCE_TIME_LEN + NONCE_HASH_LEN) #define SECRET_LEN 20 #define RETAINED_DATA_ID "mod_auth_digest" /* client list definitions */ typedef struct hash_entry { unsigned long key; /* the key for this entry */ struct hash_entry *next; /* next entry in the bucket */ unsigned long nonce_count; /* for nonce-count checking */ char last_nonce[NONCE_LEN+1]; /* for one-time nonce's */ } client_entry; static struct hash_table { client_entry **table; unsigned long tbl_len; unsigned long num_entries; unsigned long num_created; unsigned long num_removed; unsigned long num_renewed; } *client_list; /* struct to hold a parsed Authorization header */ enum hdr_sts { NO_HEADER, NOT_DIGEST, INVALID, VALID }; typedef struct digest_header_struct { const char *scheme; const char *realm; const char *username; char *nonce; const char *uri; const char *method; const char *digest; const char *algorithm; const char *cnonce; const char *opaque; unsigned long opaque_num; const char *message_qop; const char *nonce_count; /* the following fields are not (directly) from the header */ const char *raw_request_uri; apr_uri_t *psd_request_uri; apr_time_t nonce_time; enum hdr_sts auth_hdr_sts; int needed_auth; const char *ha1; client_entry *client; } digest_header_rec; /* (mostly) nonce stuff */ typedef union time_union { apr_time_t time; unsigned char arr[sizeof(apr_time_t)]; } time_rec; static unsigned char *secret; /* client-list, opaque, and one-time-nonce stuff */ static apr_shm_t *client_shm = NULL; static apr_rmm_t *client_rmm = NULL; static unsigned long *opaque_cntr; static apr_time_t *otn_counter; /* one-time-nonce counter */ static apr_global_mutex_t *client_lock = NULL; static apr_global_mutex_t *opaque_lock = NULL; static const char *client_mutex_type = "authdigest-client"; static const char *opaque_mutex_type = "authdigest-opaque"; static const char *client_shm_filename; #define DEF_SHMEM_SIZE 1000L /* ~ 12 entries */ #define DEF_NUM_BUCKETS 15L #define HASH_DEPTH 5 static apr_size_t shmem_size = DEF_SHMEM_SIZE; static unsigned long num_buckets = DEF_NUM_BUCKETS; module AP_MODULE_DECLARE_DATA auth_digest_module; /* * initialization code */ static apr_status_t cleanup_tables(void *not_used) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, NULL, APLOGNO(01756) "cleaning up shared memory"); if (client_rmm) { apr_rmm_destroy(client_rmm); client_rmm = NULL; } if (client_shm) { apr_shm_destroy(client_shm); client_shm = NULL; } if (client_lock) { apr_global_mutex_destroy(client_lock); client_lock = NULL; } if (opaque_lock) { apr_global_mutex_destroy(opaque_lock); opaque_lock = NULL; } client_list = NULL; return APR_SUCCESS; } static void log_error_and_cleanup(char *msg, apr_status_t sts, server_rec *s) { ap_log_error(APLOG_MARK, APLOG_ERR, sts, s, APLOGNO(01760) "%s - all nonce-count checking and one-time nonces " "disabled", msg); cleanup_tables(NULL); } /* RMM helper functions that behave like single-step malloc/free. */ static void *rmm_malloc(apr_rmm_t *rmm, apr_size_t size) { apr_rmm_off_t offset = apr_rmm_malloc(rmm, size); if (!offset) { return NULL; } return apr_rmm_addr_get(rmm, offset); } static apr_status_t rmm_free(apr_rmm_t *rmm, void *alloc) { apr_rmm_off_t offset = apr_rmm_offset_get(rmm, alloc); return apr_rmm_free(rmm, offset); } #if APR_HAS_SHARED_MEMORY static int initialize_tables(server_rec *s, apr_pool_t *ctx) { unsigned long idx; apr_status_t sts; /* set up client list */ /* Create the shared memory segment */ /* * Create a unique filename using our pid. This information is * stashed in the global variable so the children inherit it. */ client_shm_filename = ap_runtime_dir_relative(ctx, "authdigest_shm"); client_shm_filename = ap_append_pid(ctx, client_shm_filename, "."); /* Use anonymous shm by default, fall back on name-based. */ sts = apr_shm_create(&client_shm, shmem_size, NULL, ctx); if (APR_STATUS_IS_ENOTIMPL(sts)) { /* For a name-based segment, remove it first in case of a * previous unclean shutdown. */ apr_shm_remove(client_shm_filename, ctx); /* Now create that segment */ sts = apr_shm_create(&client_shm, shmem_size, client_shm_filename, ctx); } if (APR_SUCCESS != sts) { ap_log_error(APLOG_MARK, APLOG_ERR, sts, s, APLOGNO(01762) "Failed to create shared memory segment on file %s", client_shm_filename); log_error_and_cleanup("failed to initialize shm", sts, s); return HTTP_INTERNAL_SERVER_ERROR; } sts = apr_rmm_init(&client_rmm, NULL, /* no lock, we'll do the locking ourselves */ apr_shm_baseaddr_get(client_shm), shmem_size, ctx); if (sts != APR_SUCCESS) { log_error_and_cleanup("failed to initialize rmm", sts, s); return !OK; } client_list = rmm_malloc(client_rmm, sizeof(*client_list) + sizeof(client_entry *) * num_buckets); if (!client_list) { log_error_and_cleanup("failed to allocate shared memory", -1, s); return !OK; } client_list->table = (client_entry**) (client_list + 1); for (idx = 0; idx < num_buckets; idx++) { client_list->table[idx] = NULL; } client_list->tbl_len = num_buckets; client_list->num_entries = 0; sts = ap_global_mutex_create(&client_lock, NULL, client_mutex_type, NULL, s, ctx, 0); if (sts != APR_SUCCESS) { log_error_and_cleanup("failed to create lock (client_lock)", sts, s); return !OK; } /* setup opaque */ opaque_cntr = rmm_malloc(client_rmm, sizeof(*opaque_cntr)); if (opaque_cntr == NULL) { log_error_and_cleanup("failed to allocate shared memory", -1, s); return !OK; } *opaque_cntr = 1UL; sts = ap_global_mutex_create(&opaque_lock, NULL, opaque_mutex_type, NULL, s, ctx, 0); if (sts != APR_SUCCESS) { log_error_and_cleanup("failed to create lock (opaque_lock)", sts, s); return !OK; } /* setup one-time-nonce counter */ otn_counter = rmm_malloc(client_rmm, sizeof(*otn_counter)); if (otn_counter == NULL) { log_error_and_cleanup("failed to allocate shared memory", -1, s); return !OK; } *otn_counter = 0; /* no lock here */ /* success */ return OK; } #endif /* APR_HAS_SHARED_MEMORY */ static int pre_init(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { apr_status_t rv; void *retained; rv = ap_mutex_register(pconf, client_mutex_type, NULL, APR_LOCK_DEFAULT, 0); if (rv != APR_SUCCESS) return !OK; rv = ap_mutex_register(pconf, opaque_mutex_type, NULL, APR_LOCK_DEFAULT, 0); if (rv != APR_SUCCESS) return !OK; retained = ap_retained_data_get(RETAINED_DATA_ID); if (retained == NULL) { retained = ap_retained_data_create(RETAINED_DATA_ID, SECRET_LEN); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, NULL, APLOGNO(01757) "generating secret for digest authentication"); #if APR_HAS_RANDOM rv = apr_generate_random_bytes(retained, SECRET_LEN); #else #error APR random number support is missing #endif if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, NULL, APLOGNO(01758) "error generating secret"); return !OK; } } secret = retained; return OK; } static int initialize_module(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { /* initialize_module() will be called twice, and if it's a DSO * then all static data from the first call will be lost. Only * set up our static data on the second call. */ if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) return OK; #if APR_HAS_SHARED_MEMORY /* Note: this stuff is currently fixed for the lifetime of the server, * i.e. even across restarts. This means that A) any shmem-size * configuration changes are ignored, and B) certain optimizations, * such as only allocating the smallest necessary entry for each * client, can't be done. However, the alternative is a nightmare: * we can't call apr_shm_destroy on a graceful restart because there * will be children using the tables, and we also don't know when the * last child dies. Therefore we can never clean up the old stuff, * creating a creeping memory leak. */ if (initialize_tables(s, p) != OK) { return !OK; } /* Call cleanup_tables on exit or restart */ apr_pool_cleanup_register(p, NULL, cleanup_tables, apr_pool_cleanup_null); #endif /* APR_HAS_SHARED_MEMORY */ return OK; } static void initialize_child(apr_pool_t *p, server_rec *s) { apr_status_t sts; if (!client_shm) { return; } /* Get access to rmm in child */ sts = apr_rmm_attach(&client_rmm, NULL, apr_shm_baseaddr_get(client_shm), p); if (sts != APR_SUCCESS) { log_error_and_cleanup("failed to attach to rmm", sts, s); return; } sts = apr_global_mutex_child_init(&client_lock, apr_global_mutex_lockfile(client_lock), p); if (sts != APR_SUCCESS) { log_error_and_cleanup("failed to create lock (client_lock)", sts, s); return; } sts = apr_global_mutex_child_init(&opaque_lock, apr_global_mutex_lockfile(opaque_lock), p); if (sts != APR_SUCCESS) { log_error_and_cleanup("failed to create lock (opaque_lock)", sts, s); return; } } /* * configuration code */ static void *create_digest_dir_config(apr_pool_t *p, char *dir) { digest_config_rec *conf; if (dir == NULL) { return NULL; } conf = (digest_config_rec *) apr_pcalloc(p, sizeof(digest_config_rec)); if (conf) { conf->qop_list = apr_array_make(p, 2, sizeof(char *)); conf->nonce_lifetime = DFLT_NONCE_LIFE; conf->dir_name = apr_pstrdup(p, dir); conf->algorithm = DFLT_ALGORITHM; } return conf; } static const char *set_realm(cmd_parms *cmd, void *config, const char *realm) { digest_config_rec *conf = (digest_config_rec *) config; #ifdef AP_DEBUG int i; /* check that we got random numbers */ for (i = 0; i < SECRET_LEN; i++) { if (secret[i] != 0) break; } ap_assert(i < SECRET_LEN); #endif /* The core already handles the realm, but it's just too convenient to * grab it ourselves too and cache some setups. However, we need to * let the core get at it too, which is why we decline at the end - * this relies on the fact that http_core is last in the list. */ conf->realm = realm; /* we precompute the part of the nonce hash that is constant (well, * the host:port would be too, but that varies for .htaccess files * and directives outside a virtual host section) */ apr_sha1_init(&conf->nonce_ctx); apr_sha1_update_binary(&conf->nonce_ctx, secret, SECRET_LEN); apr_sha1_update_binary(&conf->nonce_ctx, (const unsigned char *) realm, strlen(realm)); return DECLINE_CMD; } static const char *add_authn_provider(cmd_parms *cmd, void *config, const char *arg) { digest_config_rec *conf = (digest_config_rec*)config; authn_provider_list *newp; newp = apr_pcalloc(cmd->pool, sizeof(authn_provider_list)); newp->provider_name = arg; /* lookup and cache the actual provider now */ newp->provider = ap_lookup_provider(AUTHN_PROVIDER_GROUP, newp->provider_name, AUTHN_PROVIDER_VERSION); if (newp->provider == NULL) { /* by the time they use it, the provider should be loaded and registered with us. */ return apr_psprintf(cmd->pool, "Unknown Authn provider: %s", newp->provider_name); } if (!newp->provider->get_realm_hash) { /* if it doesn't provide the appropriate function, reject it */ return apr_psprintf(cmd->pool, "The '%s' Authn provider doesn't support " "Digest Authentication", newp->provider_name); } /* Add it to the list now. */ if (!conf->providers) { conf->providers = newp; } else { authn_provider_list *last = conf->providers; while (last->next) { last = last->next; } last->next = newp; } return NULL; } static const char *set_qop(cmd_parms *cmd, void *config, const char *op) { digest_config_rec *conf = (digest_config_rec *) config; if (!strcasecmp(op, "none")) { apr_array_clear(conf->qop_list); *(const char **)apr_array_push(conf->qop_list) = "none"; return NULL; } if (!strcasecmp(op, "auth-int")) { return "AuthDigestQop auth-int is not implemented"; } else if (strcasecmp(op, "auth")) { return apr_pstrcat(cmd->pool, "Unrecognized qop: ", op, NULL); } *(const char **)apr_array_push(conf->qop_list) = op; return NULL; } static const char *set_nonce_lifetime(cmd_parms *cmd, void *config, const char *t) { char *endptr; long lifetime; lifetime = strtol(t, &endptr, 10); if (endptr < (t+strlen(t)) && !apr_isspace(*endptr)) { return apr_pstrcat(cmd->pool, "Invalid time in AuthDigestNonceLifetime: ", t, NULL); } ((digest_config_rec *) config)->nonce_lifetime = apr_time_from_sec(lifetime); return NULL; } static const char *set_nonce_format(cmd_parms *cmd, void *config, const char *fmt) { return "AuthDigestNonceFormat is not implemented"; } static const char *set_nc_check(cmd_parms *cmd, void *config, int flag) { #if !APR_HAS_SHARED_MEMORY if (flag) { return "AuthDigestNcCheck: ERROR: nonce-count checking " "is not supported on platforms without shared-memory " "support"; } #endif ((digest_config_rec *) config)->check_nc = flag; return NULL; } static const char *set_algorithm(cmd_parms *cmd, void *config, const char *alg) { if (!strcasecmp(alg, "MD5-sess")) { return "AuthDigestAlgorithm: ERROR: algorithm `MD5-sess' " "is not implemented"; } else if (strcasecmp(alg, "MD5")) { return apr_pstrcat(cmd->pool, "Invalid algorithm in AuthDigestAlgorithm: ", alg, NULL); } ((digest_config_rec *) config)->algorithm = alg; return NULL; } static const char *set_uri_list(cmd_parms *cmd, void *config, const char *uri) { digest_config_rec *c = (digest_config_rec *) config; if (c->uri_list) { c->uri_list[strlen(c->uri_list)-1] = '\0'; c->uri_list = apr_pstrcat(cmd->pool, c->uri_list, " ", uri, "\"", NULL); } else { c->uri_list = apr_pstrcat(cmd->pool, ", domain=\"", uri, "\"", NULL); } return NULL; } static const char *set_shmem_size(cmd_parms *cmd, void *config, const char *size_str) { char *endptr; long size, min; size = strtol(size_str, &endptr, 10); while (apr_isspace(*endptr)) endptr++; if (*endptr == '\0' || *endptr == 'b' || *endptr == 'B') { ; } else if (*endptr == 'k' || *endptr == 'K') { size *= 1024; } else if (*endptr == 'm' || *endptr == 'M') { size *= 1048576; } else { return apr_pstrcat(cmd->pool, "Invalid size in AuthDigestShmemSize: ", size_str, NULL); } min = sizeof(*client_list) + sizeof(client_entry*) + sizeof(client_entry); if (size < min) { return apr_psprintf(cmd->pool, "size in AuthDigestShmemSize too small: " "%ld < %ld", size, min); } shmem_size = size; num_buckets = (size - sizeof(*client_list)) / (sizeof(client_entry*) + HASH_DEPTH * sizeof(client_entry)); if (num_buckets == 0) { num_buckets = 1; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01763) "Set shmem-size: %" APR_SIZE_T_FMT ", num-buckets: %ld", shmem_size, num_buckets); return NULL; } static const command_rec digest_cmds[] = { AP_INIT_TAKE1("AuthName", set_realm, NULL, OR_AUTHCFG, "The authentication realm (e.g. \"Members Only\")"), AP_INIT_ITERATE("AuthDigestProvider", add_authn_provider, NULL, OR_AUTHCFG, "specify the auth providers for a directory or location"), AP_INIT_ITERATE("AuthDigestQop", set_qop, NULL, OR_AUTHCFG, "A list of quality-of-protection options"), AP_INIT_TAKE1("AuthDigestNonceLifetime", set_nonce_lifetime, NULL, OR_AUTHCFG, "Maximum lifetime of the server nonce (seconds)"), AP_INIT_TAKE1("AuthDigestNonceFormat", set_nonce_format, NULL, OR_AUTHCFG, "The format to use when generating the server nonce"), AP_INIT_FLAG("AuthDigestNcCheck", set_nc_check, NULL, OR_AUTHCFG, "Whether or not to check the nonce-count sent by the client"), AP_INIT_TAKE1("AuthDigestAlgorithm", set_algorithm, NULL, OR_AUTHCFG, "The algorithm used for the hash calculation"), AP_INIT_ITERATE("AuthDigestDomain", set_uri_list, NULL, OR_AUTHCFG, "A list of URI's which belong to the same protection space as the current URI"), AP_INIT_TAKE1("AuthDigestShmemSize", set_shmem_size, NULL, RSRC_CONF, "The amount of shared memory to allocate for keeping track of clients"), {NULL} }; /* * client list code * * Each client is assigned a number, which is transferred in the opaque * field of the WWW-Authenticate and Authorization headers. The number * is just a simple counter which is incremented for each new client. * Clients can't forge this number because it is hashed up into the * server nonce, and that is checked. * * The clients are kept in a simple hash table, which consists of an * array of client_entry's, each with a linked list of entries hanging * off it. The client's number modulo the size of the array gives the * bucket number. * * The clients are garbage collected whenever a new client is allocated * but there is not enough space left in the shared memory segment. A * simple semi-LRU is used for this: whenever a client entry is accessed * it is moved to the beginning of the linked list in its bucket (this * also makes for faster lookups for current clients). The garbage * collecter then just removes the oldest entry (i.e. the one at the * end of the list) in each bucket. * * The main advantages of the above scheme are that it's easy to implement * and it keeps the hash table evenly balanced (i.e. same number of entries * in each bucket). The major disadvantage is that you may be throwing * entries out which are in active use. This is not tragic, as these * clients will just be sent a new client id (opaque field) and nonce * with a stale=true (i.e. it will just look like the nonce expired, * thereby forcing an extra round trip). If the shared memory segment * has enough headroom over the current client set size then this should * not occur too often. * * To help tune the size of the shared memory segment (and see if the * above algorithm is really sufficient) a set of counters is kept * indicating the number of clients held, the number of garbage collected * clients, and the number of erroneously purged clients. These are printed * out at each garbage collection run. Note that access to the counters is * not synchronized because they are just indicaters, and whether they are * off by a few doesn't matter; and for the same reason no attempt is made * to guarantee the num_renewed is correct in the face of clients spoofing * the opaque field. */ /* * Get the client given its client number (the key). Returns the entry, * or NULL if it's not found. * * Access to the list itself is synchronized via locks. However, access * to the entry returned by get_client() is NOT synchronized. This means * that there are potentially problems if a client uses multiple, * simultaneous connections to access url's within the same protection * space. However, these problems are not new: when using multiple * connections you have no guarantee of the order the requests are * processed anyway, so you have problems with the nonce-count and * one-time nonces anyway. */ static client_entry *get_client(unsigned long key, const request_rec *r) { int bucket; client_entry *entry, *prev = NULL; if (!key || !client_shm) return NULL; bucket = key % client_list->tbl_len; entry = client_list->table[bucket]; apr_global_mutex_lock(client_lock); while (entry && key != entry->key) { prev = entry; entry = entry->next; } if (entry && prev) { /* move entry to front of list */ prev->next = entry->next; entry->next = client_list->table[bucket]; client_list->table[bucket] = entry; } apr_global_mutex_unlock(client_lock); if (entry) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01764) "get_client(): client %lu found", key); } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01765) "get_client(): client %lu not found", key); } return entry; } /* A simple garbage-collecter to remove unused clients. It removes the * last entry in each bucket and updates the counters. Returns the * number of removed entries. */ static long gc(server_rec *s) { client_entry *entry, *prev; unsigned long num_removed = 0, idx; /* garbage collect all last entries */ for (idx = 0; idx < client_list->tbl_len; idx++) { entry = client_list->table[idx]; prev = NULL; if (!entry) { /* This bucket is empty. */ continue; } while (entry->next) { /* find last entry */ prev = entry; entry = entry->next; } if (prev) { prev->next = NULL; /* cut list */ } else { client_list->table[idx] = NULL; } if (entry) { /* remove entry */ apr_status_t err; err = rmm_free(client_rmm, entry); num_removed++; if (err) { /* Nothing we can really do but log... */ ap_log_error(APLOG_MARK, APLOG_ERR, err, s, APLOGNO(10007) "Failed to free auth_digest client allocation"); } } } /* update counters and log */ client_list->num_entries -= num_removed; client_list->num_removed += num_removed; return num_removed; } /* * Add a new client to the list. Returns the entry if successful, NULL * otherwise. This triggers the garbage collection if memory is low. */ static client_entry *add_client(unsigned long key, client_entry *info, server_rec *s) { int bucket; client_entry *entry; if (!key || !client_shm) { return NULL; } bucket = key % client_list->tbl_len; apr_global_mutex_lock(client_lock); /* try to allocate a new entry */ entry = rmm_malloc(client_rmm, sizeof(client_entry)); if (!entry) { long num_removed = gc(s); ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(01766) "gc'd %ld client entries. Total new clients: " "%ld; Total removed clients: %ld; Total renewed clients: " "%ld", num_removed, client_list->num_created - client_list->num_renewed, client_list->num_removed, client_list->num_renewed); entry = rmm_malloc(client_rmm, sizeof(client_entry)); if (!entry) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01767) "unable to allocate new auth_digest client"); apr_global_mutex_unlock(client_lock); return NULL; /* give up */ } } /* now add the entry */ memcpy(entry, info, sizeof(client_entry)); entry->key = key; entry->next = client_list->table[bucket]; client_list->table[bucket] = entry; client_list->num_created++; client_list->num_entries++; apr_global_mutex_unlock(client_lock); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01768) "allocated new client %lu", key); return entry; } /* * Authorization header parser code */ /* Parse the Authorization header, if it exists */ static int get_digest_rec(request_rec *r, digest_header_rec *resp) { const char *auth_line; apr_size_t l; int vk = 0, vv = 0; char *key, *value; auth_line = apr_table_get(r->headers_in, (PROXYREQ_PROXY == r->proxyreq) ? "Proxy-Authorization" : "Authorization"); if (!auth_line) { resp->auth_hdr_sts = NO_HEADER; return !OK; } resp->scheme = ap_getword_white(r->pool, &auth_line); if (strcasecmp(resp->scheme, "Digest")) { resp->auth_hdr_sts = NOT_DIGEST; return !OK; } l = strlen(auth_line); key = apr_palloc(r->pool, l+1); value = apr_palloc(r->pool, l+1); while (auth_line[0] != '\0') { /* find key */ while (apr_isspace(auth_line[0])) { auth_line++; } vk = 0; while (auth_line[0] != '=' && auth_line[0] != ',' && auth_line[0] != '\0' && !apr_isspace(auth_line[0])) { key[vk++] = *auth_line++; } key[vk] = '\0'; while (apr_isspace(auth_line[0])) { auth_line++; } /* find value */ vv = 0; if (auth_line[0] == '=') { auth_line++; while (apr_isspace(auth_line[0])) { auth_line++; } if (auth_line[0] == '\"') { /* quoted string */ auth_line++; while (auth_line[0] != '\"' && auth_line[0] != '\0') { if (auth_line[0] == '\\' && auth_line[1] != '\0') { auth_line++; /* escaped char */ } value[vv++] = *auth_line++; } if (auth_line[0] != '\0') { auth_line++; } } else { /* token */ while (auth_line[0] != ',' && auth_line[0] != '\0' && !apr_isspace(auth_line[0])) { value[vv++] = *auth_line++; } } } value[vv] = '\0'; while (auth_line[0] != ',' && auth_line[0] != '\0') { auth_line++; } if (auth_line[0] != '\0') { auth_line++; } if (!strcasecmp(key, "username")) resp->username = apr_pstrdup(r->pool, value); else if (!strcasecmp(key, "realm")) resp->realm = apr_pstrdup(r->pool, value); else if (!strcasecmp(key, "nonce")) resp->nonce = apr_pstrdup(r->pool, value); else if (!strcasecmp(key, "uri")) resp->uri = apr_pstrdup(r->pool, value); else if (!strcasecmp(key, "response")) resp->digest = apr_pstrdup(r->pool, value); else if (!strcasecmp(key, "algorithm")) resp->algorithm = apr_pstrdup(r->pool, value); else if (!strcasecmp(key, "cnonce")) resp->cnonce = apr_pstrdup(r->pool, value); else if (!strcasecmp(key, "opaque")) resp->opaque = apr_pstrdup(r->pool, value); else if (!strcasecmp(key, "qop")) resp->message_qop = apr_pstrdup(r->pool, value); else if (!strcasecmp(key, "nc")) resp->nonce_count = apr_pstrdup(r->pool, value); } if (!resp->username || !resp->realm || !resp->nonce || !resp->uri || !resp->digest || (resp->message_qop && (!resp->cnonce || !resp->nonce_count))) { resp->auth_hdr_sts = INVALID; return !OK; } if (resp->opaque) { resp->opaque_num = (unsigned long) strtol(resp->opaque, NULL, 16); } resp->auth_hdr_sts = VALID; return OK; } /* Because the browser may preemptively send auth info, incrementing the * nonce-count when it does, and because the client does not get notified * if the URI didn't need authentication after all, we need to be sure to * update the nonce-count each time we receive an Authorization header no * matter what the final outcome of the request. Furthermore this is a * convenient place to get the request-uri (before any subrequests etc * are initiated) and to initialize the request_config. * * Note that this must be called after mod_proxy had its go so that * r->proxyreq is set correctly. */ static int parse_hdr_and_update_nc(request_rec *r) { digest_header_rec *resp; int res; if (!ap_is_initial_req(r)) { return DECLINED; } resp = apr_pcalloc(r->pool, sizeof(digest_header_rec)); resp->raw_request_uri = r->unparsed_uri; resp->psd_request_uri = &r->parsed_uri; resp->needed_auth = 0; resp->method = r->method; ap_set_module_config(r->request_config, &auth_digest_module, resp); res = get_digest_rec(r, resp); resp->client = get_client(resp->opaque_num, r); if (res == OK && resp->client) { resp->client->nonce_count++; } return DECLINED; } /* * Nonce generation code */ /* The hash part of the nonce is a SHA-1 hash of the time, realm, server host * and port, opaque, and our secret. */ static void gen_nonce_hash(char *hash, const char *timestr, const char *opaque, const server_rec *server, const digest_config_rec *conf) { unsigned char sha1[APR_SHA1_DIGESTSIZE]; apr_sha1_ctx_t ctx; memcpy(&ctx, &conf->nonce_ctx, sizeof(ctx)); /* apr_sha1_update_binary(&ctx, (const unsigned char *) server->server_hostname, strlen(server->server_hostname)); apr_sha1_update_binary(&ctx, (const unsigned char *) &server->port, sizeof(server->port)); */ apr_sha1_update_binary(&ctx, (const unsigned char *) timestr, strlen(timestr)); if (opaque) { apr_sha1_update_binary(&ctx, (const unsigned char *) opaque, strlen(opaque)); } apr_sha1_final(sha1, &ctx); ap_bin2hex(sha1, APR_SHA1_DIGESTSIZE, hash); } /* The nonce has the format b64(time)+hash . */ static const char *gen_nonce(apr_pool_t *p, apr_time_t now, const char *opaque, const server_rec *server, const digest_config_rec *conf) { char *nonce = apr_palloc(p, NONCE_LEN+1); time_rec t; if (conf->nonce_lifetime != 0) { t.time = now; } else if (otn_counter) { /* this counter is not synch'd, because it doesn't really matter * if it counts exactly. */ t.time = (*otn_counter)++; } else { /* XXX: WHAT IS THIS CONSTANT? */ t.time = 42; } apr_base64_encode_binary(nonce, t.arr, sizeof(t.arr)); gen_nonce_hash(nonce+NONCE_TIME_LEN, nonce, opaque, server, conf); return nonce; } /* * Opaque and hash-table management */ /* * Generate a new client entry, add it to the list, and return the * entry. Returns NULL if failed. */ static client_entry *gen_client(const request_rec *r) { unsigned long op; client_entry new_entry = { 0, NULL, 0, "" }, *entry; if (!opaque_cntr) { return NULL; } apr_global_mutex_lock(opaque_lock); op = (*opaque_cntr)++; apr_global_mutex_unlock(opaque_lock); if (!(entry = add_client(op, &new_entry, r->server))) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01769) "failed to allocate client entry - ignoring client"); return NULL; } return entry; } /* * Authorization challenge generation code (for WWW-Authenticate) */ static const char *ltox(apr_pool_t *p, unsigned long num) { if (num != 0) { return apr_psprintf(p, "%lx", num); } else { return ""; } } static void note_digest_auth_failure(request_rec *r, const digest_config_rec *conf, digest_header_rec *resp, int stale) { const char *qop, *opaque, *opaque_param, *domain, *nonce; /* Setup qop */ if (apr_is_empty_array(conf->qop_list)) { qop = ", qop=\"auth\""; } else if (!strcasecmp(*(const char **)(conf->qop_list->elts), "none")) { qop = ""; } else { qop = apr_pstrcat(r->pool, ", qop=\"", apr_array_pstrcat(r->pool, conf->qop_list, ','), "\"", NULL); } /* Setup opaque */ if (resp->opaque == NULL) { /* new client */ if ((conf->check_nc || conf->nonce_lifetime == 0) && (resp->client = gen_client(r)) != NULL) { opaque = ltox(r->pool, resp->client->key); } else { opaque = ""; /* opaque not needed */ } } else if (resp->client == NULL) { /* client info was gc'd */ resp->client = gen_client(r); if (resp->client != NULL) { opaque = ltox(r->pool, resp->client->key); stale = 1; client_list->num_renewed++; } else { opaque = ""; /* ??? */ } } else { opaque = resp->opaque; /* we're generating a new nonce, so reset the nonce-count */ resp->client->nonce_count = 0; } if (opaque[0]) { opaque_param = apr_pstrcat(r->pool, ", opaque=\"", opaque, "\"", NULL); } else { opaque_param = NULL; } /* Setup nonce */ nonce = gen_nonce(r->pool, r->request_time, opaque, r->server, conf); if (resp->client && conf->nonce_lifetime == 0) { memcpy(resp->client->last_nonce, nonce, NONCE_LEN+1); } /* setup domain attribute. We want to send this attribute wherever * possible so that the client won't send the Authorization header * unnecessarily (it's usually > 200 bytes!). */ /* don't send domain * - for proxy requests * - if it's not specified */ if (r->proxyreq || !conf->uri_list) { domain = NULL; } else { domain = conf->uri_list; } apr_table_mergen(r->err_headers_out, (PROXYREQ_PROXY == r->proxyreq) ? "Proxy-Authenticate" : "WWW-Authenticate", apr_psprintf(r->pool, "Digest realm=\"%s\", " "nonce=\"%s\", algorithm=%s%s%s%s%s", ap_auth_name(r), nonce, conf->algorithm, opaque_param ? opaque_param : "", domain ? domain : "", stale ? ", stale=true" : "", qop)); } static int hook_note_digest_auth_failure(request_rec *r, const char *auth_type) { request_rec *mainreq; digest_header_rec *resp; digest_config_rec *conf; if (strcasecmp(auth_type, "Digest")) return DECLINED; /* get the client response and mark */ mainreq = r; while (mainreq->main != NULL) { mainreq = mainreq->main; } while (mainreq->prev != NULL) { mainreq = mainreq->prev; } resp = (digest_header_rec *) ap_get_module_config(mainreq->request_config, &auth_digest_module); resp->needed_auth = 1; /* get our conf */ conf = (digest_config_rec *) ap_get_module_config(r->per_dir_config, &auth_digest_module); note_digest_auth_failure(r, conf, resp, 0); return OK; } /* * Authorization header verification code */ static authn_status get_hash(request_rec *r, const char *user, digest_config_rec *conf, const char **rethash) { authn_status auth_result; char *password; authn_provider_list *current_provider; current_provider = conf->providers; do { const authn_provider *provider; /* For now, if a provider isn't set, we'll be nice and use the file * provider. */ if (!current_provider) { provider = ap_lookup_provider(AUTHN_PROVIDER_GROUP, AUTHN_DEFAULT_PROVIDER, AUTHN_PROVIDER_VERSION); if (!provider || !provider->get_realm_hash) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01770) "No Authn provider configured"); auth_result = AUTH_GENERAL_ERROR; break; } apr_table_setn(r->notes, AUTHN_PROVIDER_NAME_NOTE, AUTHN_DEFAULT_PROVIDER); } else { provider = current_provider->provider; apr_table_setn(r->notes, AUTHN_PROVIDER_NAME_NOTE, current_provider->provider_name); } /* We expect the password to be md5 hash of user:realm:password */ auth_result = provider->get_realm_hash(r, user, conf->realm, &password); apr_table_unset(r->notes, AUTHN_PROVIDER_NAME_NOTE); /* Something occurred. Stop checking. */ if (auth_result != AUTH_USER_NOT_FOUND) { break; } /* If we're not really configured for providers, stop now. */ if (!conf->providers) { break; } current_provider = current_provider->next; } while (current_provider); if (auth_result == AUTH_USER_FOUND) { *rethash = password; } return auth_result; } static int check_nc(const request_rec *r, const digest_header_rec *resp, const digest_config_rec *conf) { unsigned long nc; const char *snc = resp->nonce_count; char *endptr; if (conf->check_nc && !client_shm) { /* Shouldn't happen, but just in case... */ ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01771) "cannot check nonce count without shared memory"); return OK; } if (!conf->check_nc || !client_shm) { return OK; } if (!apr_is_empty_array(conf->qop_list) && !strcasecmp(*(const char **)(conf->qop_list->elts), "none")) { /* qop is none, client must not send a nonce count */ if (snc != NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01772) "invalid nc %s received - no nonce count allowed when qop=none", snc); return !OK; } /* qop is none, cannot check nonce count */ return OK; } nc = strtol(snc, &endptr, 16); if (endptr < (snc+strlen(snc)) && !apr_isspace(*endptr)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01773) "invalid nc %s received - not a number", snc); return !OK; } if (!resp->client) { return !OK; } if (nc != resp->client->nonce_count) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01774) "Warning, possible replay attack: nonce-count " "check failed: %lu != %lu", nc, resp->client->nonce_count); return !OK; } return OK; } static int check_nonce(request_rec *r, digest_header_rec *resp, const digest_config_rec *conf) { apr_time_t dt; time_rec nonce_time; char tmp, hash[NONCE_HASH_LEN+1]; if (strlen(resp->nonce) != NONCE_LEN) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01775) "invalid nonce %s received - length is not %d", resp->nonce, NONCE_LEN); note_digest_auth_failure(r, conf, resp, 1); return HTTP_UNAUTHORIZED; } tmp = resp->nonce[NONCE_TIME_LEN]; resp->nonce[NONCE_TIME_LEN] = '\0'; apr_base64_decode_binary(nonce_time.arr, resp->nonce); gen_nonce_hash(hash, resp->nonce, resp->opaque, r->server, conf); resp->nonce[NONCE_TIME_LEN] = tmp; resp->nonce_time = nonce_time.time; if (strcmp(hash, resp->nonce+NONCE_TIME_LEN)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01776) "invalid nonce %s received - hash is not %s", resp->nonce, hash); note_digest_auth_failure(r, conf, resp, 1); return HTTP_UNAUTHORIZED; } dt = r->request_time - nonce_time.time; if (conf->nonce_lifetime > 0 && dt < 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01777) "invalid nonce %s received - user attempted " "time travel", resp->nonce); note_digest_auth_failure(r, conf, resp, 1); return HTTP_UNAUTHORIZED; } if (conf->nonce_lifetime > 0) { if (dt > conf->nonce_lifetime) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0,r, APLOGNO(01778) "user %s: nonce expired (%.2f seconds old " "- max lifetime %.2f) - sending new nonce", r->user, (double)apr_time_sec(dt), (double)apr_time_sec(conf->nonce_lifetime)); note_digest_auth_failure(r, conf, resp, 1); return HTTP_UNAUTHORIZED; } } else if (conf->nonce_lifetime == 0 && resp->client) { if (memcmp(resp->client->last_nonce, resp->nonce, NONCE_LEN)) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01779) "user %s: one-time-nonce mismatch - sending " "new nonce", r->user); note_digest_auth_failure(r, conf, resp, 1); return HTTP_UNAUTHORIZED; } } /* else (lifetime < 0) => never expires */ return OK; } /* The actual MD5 code... whee */ /* RFC-2069 */ static const char *old_digest(const request_rec *r, const digest_header_rec *resp) { const char *ha2; ha2 = ap_md5(r->pool, (unsigned char *)apr_pstrcat(r->pool, resp->method, ":", resp->uri, NULL)); return ap_md5(r->pool, (unsigned char *)apr_pstrcat(r->pool, resp->ha1, ":", resp->nonce, ":", ha2, NULL)); } /* RFC-2617 */ static const char *new_digest(const request_rec *r, digest_header_rec *resp) { const char *ha1, *ha2, *a2; ha1 = resp->ha1; a2 = apr_pstrcat(r->pool, resp->method, ":", resp->uri, NULL); ha2 = ap_md5(r->pool, (const unsigned char *)a2); return ap_md5(r->pool, (unsigned char *)apr_pstrcat(r->pool, ha1, ":", resp->nonce, ":", resp->nonce_count, ":", resp->cnonce, ":", resp->message_qop, ":", ha2, NULL)); } static void copy_uri_components(apr_uri_t *dst, apr_uri_t *src, request_rec *r) { if (src->scheme && src->scheme[0] != '\0') { dst->scheme = src->scheme; } else { dst->scheme = (char *) "http"; } if (src->hostname && src->hostname[0] != '\0') { dst->hostname = apr_pstrdup(r->pool, src->hostname); ap_unescape_url(dst->hostname); } else { dst->hostname = (char *) ap_get_server_name(r); } if (src->port_str && src->port_str[0] != '\0') { dst->port = src->port; } else { dst->port = ap_get_server_port(r); } if (src->path && src->path[0] != '\0') { dst->path = apr_pstrdup(r->pool, src->path); ap_unescape_url(dst->path); } else { dst->path = src->path; } if (src->query && src->query[0] != '\0') { dst->query = apr_pstrdup(r->pool, src->query); ap_unescape_url(dst->query); } else { dst->query = src->query; } dst->hostinfo = src->hostinfo; } /* These functions return 0 if client is OK, and proper error status * if not... either HTTP_UNAUTHORIZED, if we made a check, and it failed, or * HTTP_INTERNAL_SERVER_ERROR, if things are so totally confused that we * couldn't figure out how to tell if the client is authorized or not. * * If they return DECLINED, and all other modules also decline, that's * treated by the server core as a configuration error, logged and * reported as such. */ /* Determine user ID, and check if the attributes are correct, if it * really is that user, if the nonce is correct, etc. */ static int authenticate_digest_user(request_rec *r) { digest_config_rec *conf; digest_header_rec *resp; request_rec *mainreq; const char *t; int res; authn_status return_code; /* do we require Digest auth for this URI? */ if (!(t = ap_auth_type(r)) || strcasecmp(t, "Digest")) { return DECLINED; } if (!ap_auth_name(r)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01780) "need AuthName: %s", r->uri); return HTTP_INTERNAL_SERVER_ERROR; } /* get the client response and mark */ mainreq = r; while (mainreq->main != NULL) { mainreq = mainreq->main; } while (mainreq->prev != NULL) { mainreq = mainreq->prev; } resp = (digest_header_rec *) ap_get_module_config(mainreq->request_config, &auth_digest_module); resp->needed_auth = 1; /* get our conf */ conf = (digest_config_rec *) ap_get_module_config(r->per_dir_config, &auth_digest_module); /* check for existence and syntax of Auth header */ if (resp->auth_hdr_sts != VALID) { if (resp->auth_hdr_sts == NOT_DIGEST) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01781) "client used wrong authentication scheme `%s': %s", resp->scheme, r->uri); } else if (resp->auth_hdr_sts == INVALID) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01782) "missing user, realm, nonce, uri, digest, " "cnonce, or nonce_count in authorization header: %s", r->uri); } /* else (resp->auth_hdr_sts == NO_HEADER) */ note_digest_auth_failure(r, conf, resp, 0); return HTTP_UNAUTHORIZED; } r->user = (char *) resp->username; r->ap_auth_type = (char *) "Digest"; /* check the auth attributes */ if (strcmp(resp->uri, resp->raw_request_uri)) { /* Hmm, the simple match didn't work (probably a proxy modified the * request-uri), so lets do a more sophisticated match */ apr_uri_t r_uri, d_uri; copy_uri_components(&r_uri, resp->psd_request_uri, r); if (apr_uri_parse(r->pool, resp->uri, &d_uri) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01783) "invalid uri <%s> in Authorization header", resp->uri); return HTTP_BAD_REQUEST; } if (d_uri.hostname) { ap_unescape_url(d_uri.hostname); } if (d_uri.path) { ap_unescape_url(d_uri.path); } if (d_uri.query) { ap_unescape_url(d_uri.query); } else if (r_uri.query) { /* MSIE compatibility hack. MSIE has some RFC issues - doesn't * include the query string in the uri Authorization component * or when computing the response component. the second part * works out ok, since we can hash the header and get the same * result. however, the uri from the request line won't match * the uri Authorization component since the header lacks the * query string, leaving us incompatible with a (broken) MSIE. * * the workaround is to fake a query string match if in the proper * environment - BrowserMatch MSIE, for example. the cool thing * is that if MSIE ever fixes itself the simple match ought to * work and this code won't be reached anyway, even if the * environment is set. */ if (apr_table_get(r->subprocess_env, "AuthDigestEnableQueryStringHack")) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01784) "applying AuthDigestEnableQueryStringHack " "to uri <%s>", resp->raw_request_uri); d_uri.query = r_uri.query; } } if (r->method_number == M_CONNECT) { if (!r_uri.hostinfo || strcmp(resp->uri, r_uri.hostinfo)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01785) "uri mismatch - <%s> does not match " "request-uri <%s>", resp->uri, r_uri.hostinfo); return HTTP_BAD_REQUEST; } } else if ( /* check hostname matches, if present */ (d_uri.hostname && d_uri.hostname[0] != '\0' && strcasecmp(d_uri.hostname, r_uri.hostname)) /* check port matches, if present */ || (d_uri.port_str && d_uri.port != r_uri.port) /* check that server-port is default port if no port present */ || (d_uri.hostname && d_uri.hostname[0] != '\0' && !d_uri.port_str && r_uri.port != ap_default_port(r)) /* check that path matches */ || (d_uri.path != r_uri.path /* either exact match */ && (!d_uri.path || !r_uri.path || strcmp(d_uri.path, r_uri.path)) /* or '*' matches empty path in scheme://host */ && !(d_uri.path && !r_uri.path && resp->psd_request_uri->hostname && d_uri.path[0] == '*' && d_uri.path[1] == '\0')) /* check that query matches */ || (d_uri.query != r_uri.query && (!d_uri.query || !r_uri.query || strcmp(d_uri.query, r_uri.query))) ) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01786) "uri mismatch - <%s> does not match " "request-uri <%s>", resp->uri, resp->raw_request_uri); return HTTP_BAD_REQUEST; } } if (resp->opaque && resp->opaque_num == 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01787) "received invalid opaque - got `%s'", resp->opaque); note_digest_auth_failure(r, conf, resp, 0); return HTTP_UNAUTHORIZED; } if (!conf->realm) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02533) "realm mismatch - got `%s' but no realm specified", resp->realm); note_digest_auth_failure(r, conf, resp, 0); return HTTP_UNAUTHORIZED; } if (!resp->realm || strcmp(resp->realm, conf->realm)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01788) "realm mismatch - got `%s' but expected `%s'", resp->realm, conf->realm); note_digest_auth_failure(r, conf, resp, 0); return HTTP_UNAUTHORIZED; } if (resp->algorithm != NULL && strcasecmp(resp->algorithm, "MD5")) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01789) "unknown algorithm `%s' received: %s", resp->algorithm, r->uri); note_digest_auth_failure(r, conf, resp, 0); return HTTP_UNAUTHORIZED; } return_code = get_hash(r, r->user, conf, &resp->ha1); if (return_code == AUTH_USER_NOT_FOUND) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01790) "user `%s' in realm `%s' not found: %s", r->user, conf->realm, r->uri); note_digest_auth_failure(r, conf, resp, 0); return HTTP_UNAUTHORIZED; } else if (return_code == AUTH_USER_FOUND) { /* we have a password, so continue */ } else if (return_code == AUTH_DENIED) { /* authentication denied in the provider before attempting a match */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01791) "user `%s' in realm `%s' denied by provider: %s", r->user, conf->realm, r->uri); note_digest_auth_failure(r, conf, resp, 0); return HTTP_UNAUTHORIZED; } else { /* AUTH_GENERAL_ERROR (or worse) * We'll assume that the module has already said what its error * was in the logs. */ return HTTP_INTERNAL_SERVER_ERROR; } if (resp->message_qop == NULL) { /* old (rfc-2069) style digest */ if (strcmp(resp->digest, old_digest(r, resp))) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01792) "user %s: password mismatch: %s", r->user, r->uri); note_digest_auth_failure(r, conf, resp, 0); return HTTP_UNAUTHORIZED; } } else { const char *exp_digest; int match = 0, idx; const char **tmp = (const char **)(conf->qop_list->elts); for (idx = 0; idx < conf->qop_list->nelts; idx++) { if (!strcasecmp(*tmp, resp->message_qop)) { match = 1; break; } ++tmp; } if (!match && !(apr_is_empty_array(conf->qop_list) && !strcasecmp(resp->message_qop, "auth"))) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01793) "invalid qop `%s' received: %s", resp->message_qop, r->uri); note_digest_auth_failure(r, conf, resp, 0); return HTTP_UNAUTHORIZED; } exp_digest = new_digest(r, resp); if (!exp_digest) { /* we failed to allocate a client struct */ return HTTP_INTERNAL_SERVER_ERROR; } if (strcmp(resp->digest, exp_digest)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01794) "user %s: password mismatch: %s", r->user, r->uri); note_digest_auth_failure(r, conf, resp, 0); return HTTP_UNAUTHORIZED; } } if (check_nc(r, resp, conf) != OK) { note_digest_auth_failure(r, conf, resp, 0); return HTTP_UNAUTHORIZED; } /* Note: this check is done last so that a "stale=true" can be generated if the nonce is old */ if ((res = check_nonce(r, resp, conf))) { return res; } return OK; } /* * Authorization-Info header code */ static int add_auth_info(request_rec *r) { const digest_config_rec *conf = (digest_config_rec *) ap_get_module_config(r->per_dir_config, &auth_digest_module); digest_header_rec *resp = (digest_header_rec *) ap_get_module_config(r->request_config, &auth_digest_module); const char *ai = NULL, *nextnonce = ""; if (resp == NULL || !resp->needed_auth || conf == NULL) { return OK; } /* 2069-style entity-digest is not supported (it's too hard, and * there are no clients which support 2069 but not 2617). */ /* setup nextnonce */ if (conf->nonce_lifetime > 0) { /* send nextnonce if current nonce will expire in less than 30 secs */ if ((r->request_time - resp->nonce_time) > (conf->nonce_lifetime-NEXTNONCE_DELTA)) { nextnonce = apr_pstrcat(r->pool, ", nextnonce=\"", gen_nonce(r->pool, r->request_time, resp->opaque, r->server, conf), "\"", NULL); if (resp->client) resp->client->nonce_count = 0; } } else if (conf->nonce_lifetime == 0 && resp->client) { const char *nonce = gen_nonce(r->pool, 0, resp->opaque, r->server, conf); nextnonce = apr_pstrcat(r->pool, ", nextnonce=\"", nonce, "\"", NULL); memcpy(resp->client->last_nonce, nonce, NONCE_LEN+1); } /* else nonce never expires, hence no nextnonce */ /* do rfc-2069 digest */ if (!apr_is_empty_array(conf->qop_list) && !strcasecmp(*(const char **)(conf->qop_list->elts), "none") && resp->message_qop == NULL) { /* use only RFC-2069 format */ ai = nextnonce; } else { const char *resp_dig, *ha1, *a2, *ha2; /* calculate rspauth attribute */ ha1 = resp->ha1; a2 = apr_pstrcat(r->pool, ":", resp->uri, NULL); ha2 = ap_md5(r->pool, (const unsigned char *)a2); resp_dig = ap_md5(r->pool, (unsigned char *)apr_pstrcat(r->pool, ha1, ":", resp->nonce, ":", resp->nonce_count, ":", resp->cnonce, ":", resp->message_qop ? resp->message_qop : "", ":", ha2, NULL)); /* assemble Authentication-Info header */ ai = apr_pstrcat(r->pool, "rspauth=\"", resp_dig, "\"", nextnonce, resp->cnonce ? ", cnonce=\"" : "", resp->cnonce ? ap_escape_quotes(r->pool, resp->cnonce) : "", resp->cnonce ? "\"" : "", resp->nonce_count ? ", nc=" : "", resp->nonce_count ? resp->nonce_count : "", resp->message_qop ? ", qop=" : "", resp->message_qop ? resp->message_qop : "", NULL); } if (ai && ai[0]) { apr_table_mergen(r->headers_out, (PROXYREQ_PROXY == r->proxyreq) ? "Proxy-Authentication-Info" : "Authentication-Info", ai); } return OK; } static void register_hooks(apr_pool_t *p) { static const char * const cfgPost[]={ "http_core.c", NULL }; static const char * const parsePre[]={ "mod_proxy.c", NULL }; ap_hook_pre_config(pre_init, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(initialize_module, NULL, cfgPost, APR_HOOK_MIDDLE); ap_hook_child_init(initialize_child, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_read_request(parse_hdr_and_update_nc, parsePre, NULL, APR_HOOK_MIDDLE); ap_hook_check_authn(authenticate_digest_user, NULL, NULL, APR_HOOK_MIDDLE, AP_AUTH_INTERNAL_PER_CONF); ap_hook_fixups(add_auth_info, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_note_auth_failure(hook_note_digest_auth_failure, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(auth_digest) = { STANDARD20_MODULE_STUFF, create_digest_dir_config, /* dir config creater */ NULL, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ digest_cmds, /* command table */ register_hooks /* register hooks */ }; �����������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_owner.mak��������������������������������������������������������0000644�0000000�0000050�00000026040�12701473373�017335� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authz_owner.dsp !IF "$(CFG)" == "" CFG=mod_authz_owner - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_authz_owner - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_authz_owner - Win32 Release" && "$(CFG)" != "mod_authz_owner - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authz_owner.mak" CFG="mod_authz_owner - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authz_owner - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authz_owner - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authz_owner - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authz_owner.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authz_owner.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_auth_basic - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authz_owner.obj" -@erase "$(INTDIR)\mod_authz_owner.res" -@erase "$(INTDIR)\mod_authz_owner_src.idb" -@erase "$(INTDIR)\mod_authz_owner_src.pdb" -@erase "$(OUTDIR)\mod_authz_owner.exp" -@erase "$(OUTDIR)\mod_authz_owner.lib" -@erase "$(OUTDIR)\mod_authz_owner.pdb" -@erase "$(OUTDIR)\mod_authz_owner.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authz_owner_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authz_owner.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authz_owner.so" /d LONG_NAME="authz_owner_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authz_owner.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authz_owner.pdb" /debug /out:"$(OUTDIR)\mod_authz_owner.so" /implib:"$(OUTDIR)\mod_authz_owner.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_owner.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authz_owner.obj" \ "$(INTDIR)\mod_authz_owner.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authz_owner.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authz_owner.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authz_owner.so" if exist .\Release\mod_authz_owner.so.manifest mt.exe -manifest .\Release\mod_authz_owner.so.manifest -outputresource:.\Release\mod_authz_owner.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authz_owner - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authz_owner.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authz_owner.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_auth_basic - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authz_owner.obj" -@erase "$(INTDIR)\mod_authz_owner.res" -@erase "$(INTDIR)\mod_authz_owner_src.idb" -@erase "$(INTDIR)\mod_authz_owner_src.pdb" -@erase "$(OUTDIR)\mod_authz_owner.exp" -@erase "$(OUTDIR)\mod_authz_owner.lib" -@erase "$(OUTDIR)\mod_authz_owner.pdb" -@erase "$(OUTDIR)\mod_authz_owner.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authz_owner_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authz_owner.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authz_owner.so" /d LONG_NAME="authz_owner_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authz_owner.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authz_owner.pdb" /debug /out:"$(OUTDIR)\mod_authz_owner.so" /implib:"$(OUTDIR)\mod_authz_owner.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_owner.so LINK32_OBJS= \ "$(INTDIR)\mod_authz_owner.obj" \ "$(INTDIR)\mod_authz_owner.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authz_owner.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authz_owner.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authz_owner.so" if exist .\Debug\mod_authz_owner.so.manifest mt.exe -manifest .\Debug\mod_authz_owner.so.manifest -outputresource:.\Debug\mod_authz_owner.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authz_owner.dep") !INCLUDE "mod_authz_owner.dep" !ELSE !MESSAGE Warning: cannot find "mod_authz_owner.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authz_owner - Win32 Release" || "$(CFG)" == "mod_authz_owner - Win32 Debug" !IF "$(CFG)" == "mod_authz_owner - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_owner - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_owner - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_owner - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_owner - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_owner - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_owner - Win32 Release" "mod_auth_basic - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" cd "." "mod_auth_basic - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_authz_owner - Win32 Debug" "mod_auth_basic - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" cd "." "mod_auth_basic - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authz_owner - Win32 Release" "$(INTDIR)\mod_authz_owner.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authz_owner.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authz_owner.so" /d LONG_NAME="authz_owner_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authz_owner - Win32 Debug" "$(INTDIR)\mod_authz_owner.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authz_owner.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authz_owner.so" /d LONG_NAME="authz_owner_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authz_owner.c "$(INTDIR)\mod_authz_owner.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUauthnano��������������������������������������������������������������0000644�0000000�0000050�00000010175�11540546347�016022� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = authnano # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Anonymous Authentication Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = AuthAnon Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/authnano.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_authn_anon.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ authn_anon_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUauthndbd��������������������������������������������������������������0000644�0000000�0000050�00000010237�11540546347�015775� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(AP_WORK)/modules/database \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = authndbd # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) SQL Database Authentication Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = AuthnDBD Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/authndbd.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_authn_dbd.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ authn_dbd_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_owner.dep��������������������������������������������������������0000644�0000000�0000050�00000004114�12674411515�017332� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authz_owner.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authz_owner.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_authz_owner.h"\ ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUauthzgrp��������������������������������������������������������������0000644�0000000�0000050�00000010206�11540546347�016044� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = authzgrp # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Group File Authorization Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = AuthzGrp Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/authzgrp.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_authz_groupfile.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ authz_groupfile_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_access_compat.dep������������������������������������������������������0000644�0000000�0000050�00000004162�12674411515�017574� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_access_compat.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_access_compat.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authnz_fcgi.dep��������������������������������������������������������0000644�0000000�0000050�00000004231�12674411515�017266� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authnz_fcgi.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authnz_fcgi.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_fcgi.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_core.dsp���������������������������������������������������������0000644�0000000�0000050�00000011045�12062614564�017133� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authn_core" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authn_core - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authn_core.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authn_core.mak" CFG="mod_authn_core - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authn_core - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authn_core - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authn_core - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_authn_core_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authn_core.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authn_core.so" /d LONG_NAME="authn_core_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authn_core.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_core.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authn_core.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_core.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authn_core.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authn_core - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_authn_core_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authn_core.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authn_core.so" /d LONG_NAME="authn_core_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authn_core.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_core.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authn_core.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_core.so # Begin Special Build Tool TargetPath=.\Debug\mod_authn_core.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authn_core - Win32 Release" # Name "mod_authn_core - Win32 Debug" # Begin Source File SOURCE=.\mod_authn_core.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/config.m4������������������������������������������������������������������0000644�0000000�0000050�00000006573�12323565636�015163� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������dnl modules enabled in this directory by default dnl Authentication (authn), Access, and Authorization (authz) dnl APACHE_MODULE(name, helptext[, objects[, structname[, default[, config]]]]) APACHE_MODPATH_INIT(aaa) dnl Authentication modules; modules checking a username and password against a dnl file, database, or other similar magic. dnl APACHE_MODULE(authn_file, file-based authentication control, , , yes) APACHE_MODULE(authn_dbm, DBM-based authentication control, , , most) APACHE_MODULE(authn_anon, anonymous user authentication control, , , most) APACHE_MODULE(authn_dbd, SQL-based authentication control, , , most) APACHE_MODULE(authn_socache, Cached authentication control, , , most) dnl General Authentication modules; module which implements the dnl non-authn module specific directives. dnl APACHE_MODULE(authn_core, core authentication module, , , yes) dnl Authorization modules: modules which verify a certain property such as dnl membership of a group, value of the IP address against a list of pre dnl configured directives (e.g. require, allow) or against an external file dnl or database. dnl APACHE_MODULE(authz_host, host-based authorization control, , , yes) APACHE_MODULE(authz_groupfile, 'require group' authorization control, , , yes) APACHE_MODULE(authz_user, 'require user' authorization control, , , yes) APACHE_MODULE(authz_dbm, DBM-based authorization control, , , most) APACHE_MODULE(authz_owner, 'require file-owner' authorization control, , , most) APACHE_MODULE(authz_dbd, SQL based authorization and Login/Session support, , , most) dnl General Authorization modules; provider module which implements the dnl non-authz module specific directives. dnl APACHE_MODULE(authz_core, core authorization provider vector module, , , yes) dnl LDAP authentication module. This module has both the authn and authz dnl modules in one, so as to share the LDAP server config directives. APACHE_MODULE(authnz_ldap, LDAP based authentication, , , most, [ APACHE_CHECK_APR_HAS_LDAP if test "$ac_cv_APR_HAS_LDAP" = "yes" ; then if test -z "$apu_config" ; then LDAP_LIBS="`$apr_config --ldap-libs`" else LDAP_LIBS="`$apu_config --ldap-libs`" fi APR_ADDTO(MOD_AUTHNZ_LDAP_LDADD, [$LDAP_LIBS]) AC_SUBST(MOD_AUTHNZ_LDAP_LDADD) else AC_MSG_WARN([apr/apr-util is compiled without ldap support]) enable_authnz_ldap=no fi ]) dnl FastCGI authorizer interface, supporting authn and authz. APACHE_MODULE(authnz_fcgi, FastCGI authorizer-based authentication and authorization, , , no) dnl - host access control compatibility modules. Implements Order, Allow, dnl Deny, Satisfy for backward compatibility. These directives have been dnl deprecated in 2.4. APACHE_MODULE(access_compat, mod_access compatibility, , , yes) dnl these are the front-end authentication modules APACHE_MODULE(auth_basic, basic authentication, , , yes) APACHE_MODULE(auth_form, form authentication, , , most) APACHE_MODULE(auth_digest, RFC2617 Digest authentication, , , most, [ APR_CHECK_APR_DEFINE(APR_HAS_RANDOM) if test $ac_cv_define_APR_HAS_RANDOM = "no"; then echo "You need APR random support to use mod_auth_digest." echo "Look at APR configure options --with-egd and --with-devrandom." enable_auth_digest="no" fi ]) APACHE_MODULE(allowmethods, restrict allowed HTTP methods, , , most) APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) APACHE_MODPATH_FINISH �������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_auth_basic.dsp���������������������������������������������������������0000644�0000000�0000050�00000011125�10551346420�017077� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_auth_basic" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_auth_basic - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_auth_basic.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_auth_basic - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_auth_basic - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_auth_basic - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AAA_DECLARE_EXPORT" /Fd"Release\mod_auth_basic_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_auth_basic.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_auth_basic.so" /d LONG_NAME="auth_basic_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_auth_basic.so" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_basic.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_auth_basic.so" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_basic.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_auth_basic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_auth_basic - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AAA_DECLARE_EXPORT" /Fd"Debug\mod_auth_basic_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_auth_basic.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_auth_basic.so" /d LONG_NAME="auth_basic_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_auth_basic.so" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_basic.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_auth_basic.so" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_basic.so # Begin Special Build Tool TargetPath=.\Debug\mod_auth_basic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_auth_basic - Win32 Release" # Name "mod_auth_basic - Win32 Debug" # Begin Source File SOURCE=.\mod_auth_basic.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authnz_ldap.c����������������������������������������������������������0000644�0000000�0000050�00000217772�13350443120�016755� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ap_provider.h" #include "httpd.h" #include "http_config.h" #include "ap_provider.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "util_ldap.h" #include "mod_auth.h" #include "apr_strings.h" #include "apr_xlate.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "apr_lib.h" #include <ctype.h> #if !APR_HAS_LDAP #error mod_authnz_ldap requires APR-util to have LDAP support built in. To fix add --with-ldap to ./configure. #endif static char *default_attributes[3] = { "member", "uniqueMember", NULL }; typedef struct { apr_pool_t *pool; /* Pool that this config is allocated from */ #if APR_HAS_THREADS apr_thread_mutex_t *lock; /* Lock for this config */ #endif /* These parameters are all derived from the AuthLDAPURL directive */ char *url; /* String representation of the URL */ char *host; /* Name of the LDAP server (or space separated list) */ int port; /* Port of the LDAP server */ char *basedn; /* Base DN to do all searches from */ char *attribute; /* Attribute to search for */ char **attributes; /* Array of all the attributes to return */ int scope; /* Scope of the search */ char *filter; /* Filter to further limit the search */ deref_options deref; /* how to handle alias dereferening */ char *binddn; /* DN to bind to server (can be NULL) */ char *bindpw; /* Password to bind to server (can be NULL) */ int bind_authoritative; /* If true, will return errors when bind fails */ int user_is_dn; /* If true, r->user is replaced by DN during authn */ char *remote_user_attribute; /* If set, r->user is replaced by this attribute during authn */ int compare_dn_on_server; /* If true, will use server to do DN compare */ int have_ldap_url; /* Set if we have found an LDAP url */ apr_array_header_t *groupattr; /* List of Group attributes identifying user members. Default:"member uniqueMember" */ int group_attrib_is_dn; /* If true, the group attribute is the DN, otherwise, it's the exact string passed by the HTTP client */ char **sgAttributes; /* Array of strings constructed (post-config) from subgroupattrs. Last entry is NULL. */ apr_array_header_t *subgroupclasses; /* List of object classes of sub-groups. Default:"groupOfNames groupOfUniqueNames" */ int maxNestingDepth; /* Maximum recursive nesting depth permitted during subgroup processing. Default: 10 */ int secure; /* True if SSL connections are requested */ char *authz_prefix; /* Prefix for environment variables added during authz */ int initial_bind_as_user; /* true if we should try to bind (to lookup DN) directly with the basic auth username */ ap_regex_t *bind_regex; /* basic auth -> bind'able username regex */ const char *bind_subst; /* basic auth -> bind'able username substitution */ int search_as_user; /* true if authz searches should be done with the users credentials (when we did authn) */ int compare_as_user; /* true if authz compares should be done with the users credentials (when we did authn) */ } authn_ldap_config_t; typedef struct { char *dn; /* The saved dn from a successful search */ char *user; /* The username provided by the client */ const char **vals; /* The additional values pulled during the DN search*/ char *password; /* if this module successfully authenticates, the basic auth password, else null */ } authn_ldap_request_t; enum auth_ldap_phase { LDAP_AUTHN, LDAP_AUTHZ }; enum auth_ldap_optype { LDAP_SEARCH, LDAP_COMPARE, LDAP_COMPARE_AND_SEARCH /* nested groups */ }; /* maximum group elements supported */ #define GROUPATTR_MAX_ELTS 10 module AP_MODULE_DECLARE_DATA authnz_ldap_module; static APR_OPTIONAL_FN_TYPE(uldap_connection_close) *util_ldap_connection_close; static APR_OPTIONAL_FN_TYPE(uldap_connection_find) *util_ldap_connection_find; static APR_OPTIONAL_FN_TYPE(uldap_cache_comparedn) *util_ldap_cache_comparedn; static APR_OPTIONAL_FN_TYPE(uldap_cache_compare) *util_ldap_cache_compare; static APR_OPTIONAL_FN_TYPE(uldap_cache_check_subgroups) *util_ldap_cache_check_subgroups; static APR_OPTIONAL_FN_TYPE(uldap_cache_checkuserid) *util_ldap_cache_checkuserid; static APR_OPTIONAL_FN_TYPE(uldap_cache_getuserdn) *util_ldap_cache_getuserdn; static APR_OPTIONAL_FN_TYPE(uldap_ssl_supported) *util_ldap_ssl_supported; static apr_hash_t *charset_conversions = NULL; static char *to_charset = NULL; /* UTF-8 identifier derived from the charset.conv file */ /* Derive a code page ID give a language name or ID */ static char* derive_codepage_from_lang (apr_pool_t *p, char *language) { char *charset; if (!language) /* our default codepage */ return apr_pstrdup(p, "ISO-8859-1"); charset = (char*) apr_hash_get(charset_conversions, language, APR_HASH_KEY_STRING); /* * Test if language values like 'en-US' return a match from the charset * conversion map when shortened to 'en'. */ if (!charset && strlen(language) > 3 && language[2] == '-') { char *language_short = apr_pstrndup(p, language, 2); charset = (char*) apr_hash_get(charset_conversions, language_short, APR_HASH_KEY_STRING); } if (charset) { charset = apr_pstrdup(p, charset); } return charset; } static apr_xlate_t* get_conv_set (request_rec *r) { char *lang_line = (char*)apr_table_get(r->headers_in, "accept-language"); char *lang; apr_xlate_t *convset; if (lang_line) { lang_line = apr_pstrdup(r->pool, lang_line); for (lang = lang_line;*lang;lang++) { if ((*lang == ',') || (*lang == ';')) { *lang = '\0'; break; } } lang = derive_codepage_from_lang(r->pool, lang_line); if (lang && (apr_xlate_open(&convset, to_charset, lang, r->pool) == APR_SUCCESS)) { return convset; } } return NULL; } static const char* authn_ldap_xlate_password(request_rec *r, const char* sent_password) { apr_xlate_t *convset = NULL; apr_size_t inbytes; apr_size_t outbytes; char *outbuf; if (charset_conversions && (convset = get_conv_set(r)) ) { inbytes = strlen(sent_password); outbytes = (inbytes+1)*3; outbuf = apr_pcalloc(r->pool, outbytes); /* Convert the password to UTF-8. */ if (apr_xlate_conv_buffer(convset, sent_password, &inbytes, outbuf, &outbytes) == APR_SUCCESS) return outbuf; } return sent_password; } /* * Build the search filter, or at least as much of the search filter that * will fit in the buffer. We don't worry about the buffer not being able * to hold the entire filter. If the buffer wasn't big enough to hold the * filter, ldap_search_s will complain, but the only situation where this * is likely to happen is if the client sent a really, really long * username, most likely as part of an attack. * * The search filter consists of the filter provided with the URL, * combined with a filter made up of the attribute provided with the URL, * and the actual username passed by the HTTP client. For example, assume * that the LDAP URL is * * ldap://ldap.airius.com/ou=People, o=Airius?uid??(posixid=*) * * Further, assume that the userid passed by the client was `userj'. The * search filter will be (&(posixid=*)(uid=userj)). */ #define FILTER_LENGTH MAX_STRING_LEN static void authn_ldap_build_filter(char *filtbuf, request_rec *r, const char* sent_user, const char* sent_filter, authn_ldap_config_t *sec) { char *p, *q, *filtbuf_end; char *user, *filter; apr_xlate_t *convset = NULL; apr_size_t inbytes; apr_size_t outbytes; char *outbuf; int nofilter = 0; if (sent_user != NULL) { user = apr_pstrdup (r->pool, sent_user); } else return; if (sent_filter != NULL) { filter = apr_pstrdup (r->pool, sent_filter); } else filter = sec->filter; if (charset_conversions) { convset = get_conv_set(r); } if (convset) { inbytes = strlen(user); outbytes = (inbytes+1)*3; outbuf = apr_pcalloc(r->pool, outbytes); /* Convert the user name to UTF-8. This is only valid for LDAP v3 */ if (apr_xlate_conv_buffer(convset, user, &inbytes, outbuf, &outbytes) == APR_SUCCESS) { user = apr_pstrdup(r->pool, outbuf); } } /* * Create the first part of the filter, which consists of the * config-supplied portions. */ if ((nofilter = (filter && !strcasecmp(filter, "none")))) { apr_snprintf(filtbuf, FILTER_LENGTH, "(%s=", sec->attribute); } else { apr_snprintf(filtbuf, FILTER_LENGTH, "(&(%s)(%s=", filter, sec->attribute); } /* * Now add the client-supplied username to the filter, ensuring that any * LDAP filter metachars are escaped. */ filtbuf_end = filtbuf + FILTER_LENGTH - 1; #if APR_HAS_MICROSOFT_LDAPSDK for (p = user, q=filtbuf + strlen(filtbuf); *p && q < filtbuf_end; ) { if (strchr("*()\\", *p) != NULL) { if ( q + 3 >= filtbuf_end) break; /* Don't write part of escape sequence if we can't write all of it */ *q++ = '\\'; switch ( *p++ ) { case '*': *q++ = '2'; *q++ = 'a'; break; case '(': *q++ = '2'; *q++ = '8'; break; case ')': *q++ = '2'; *q++ = '9'; break; case '\\': *q++ = '5'; *q++ = 'c'; break; } } else *q++ = *p++; } #else for (p = user, q=filtbuf + strlen(filtbuf); *p && q < filtbuf_end; *q++ = *p++) { if (strchr("*()\\", *p) != NULL) { *q++ = '\\'; if (q >= filtbuf_end) { break; } } } #endif *q = '\0'; /* * Append the closing parens of the filter, unless doing so would * overrun the buffer. */ if (nofilter) { if (q + 1 <= filtbuf_end) strcat(filtbuf, ")"); } else { if (q + 2 <= filtbuf_end) strcat(filtbuf, "))"); } } static void *create_authnz_ldap_dir_config(apr_pool_t *p, char *d) { authn_ldap_config_t *sec = (authn_ldap_config_t *)apr_pcalloc(p, sizeof(authn_ldap_config_t)); sec->pool = p; #if APR_HAS_THREADS apr_thread_mutex_create(&sec->lock, APR_THREAD_MUTEX_DEFAULT, p); #endif /* sec->authz_enabled = 1; */ sec->groupattr = apr_array_make(p, GROUPATTR_MAX_ELTS, sizeof(struct mod_auth_ldap_groupattr_entry_t)); sec->subgroupclasses = apr_array_make(p, GROUPATTR_MAX_ELTS, sizeof(struct mod_auth_ldap_groupattr_entry_t)); sec->have_ldap_url = 0; sec->url = ""; sec->host = NULL; sec->binddn = NULL; sec->bindpw = NULL; sec->bind_authoritative = 1; sec->deref = always; sec->group_attrib_is_dn = 1; sec->secure = -1; /*Initialize to unset*/ sec->maxNestingDepth = 10; sec->sgAttributes = apr_pcalloc(p, sizeof (char *) * GROUPATTR_MAX_ELTS + 1); sec->user_is_dn = 0; sec->remote_user_attribute = NULL; sec->compare_dn_on_server = 0; sec->authz_prefix = AUTHZ_PREFIX; return sec; } static apr_status_t authnz_ldap_cleanup_connection_close(void *param) { util_ldap_connection_t *ldc = param; util_ldap_connection_close(ldc); return APR_SUCCESS; } static int set_request_vars(request_rec *r, enum auth_ldap_phase phase) { char *prefix = NULL; int prefix_len; int remote_user_attribute_set = 0; authn_ldap_request_t *req = (authn_ldap_request_t *)ap_get_module_config(r->request_config, &authnz_ldap_module); authn_ldap_config_t *sec = (authn_ldap_config_t *)ap_get_module_config(r->per_dir_config, &authnz_ldap_module); const char **vals = req->vals; prefix = (phase == LDAP_AUTHN) ? AUTHN_PREFIX : sec->authz_prefix; prefix_len = strlen(prefix); if (sec->attributes && vals) { apr_table_t *e = r->subprocess_env; int i = 0; while (sec->attributes[i]) { char *str = apr_pstrcat(r->pool, prefix, sec->attributes[i], NULL); int j = prefix_len; while (str[j]) { str[j] = apr_toupper(str[j]); j++; } apr_table_setn(e, str, vals[i] ? vals[i] : ""); /* handle remote_user_attribute, if set */ if ((phase == LDAP_AUTHN) && sec->remote_user_attribute && !strcmp(sec->remote_user_attribute, sec->attributes[i])) { r->user = (char *)apr_pstrdup(r->pool, vals[i]); remote_user_attribute_set = 1; } i++; } } return remote_user_attribute_set; } static const char *ldap_determine_binddn(request_rec *r, const char *user) { authn_ldap_config_t *sec = (authn_ldap_config_t *)ap_get_module_config(r->per_dir_config, &authnz_ldap_module); const char *result = user; ap_regmatch_t regm[AP_MAX_REG_MATCH]; if (NULL == user || NULL == sec || !sec->bind_regex || !sec->bind_subst) { return result; } if (!ap_regexec(sec->bind_regex, user, AP_MAX_REG_MATCH, regm, 0)) { char *substituted = ap_pregsub(r->pool, sec->bind_subst, user, AP_MAX_REG_MATCH, regm); if (NULL != substituted) { result = substituted; } } apr_table_set(r->subprocess_env, "LDAP_BINDASUSER", result); return result; } /* Some LDAP servers restrict who can search or compare, and the hard-coded ID * might be good for the DN lookup but not for later operations. */ static util_ldap_connection_t *get_connection_for_authz(request_rec *r, enum auth_ldap_optype type) { authn_ldap_request_t *req = (authn_ldap_request_t *)ap_get_module_config(r->request_config, &authnz_ldap_module); authn_ldap_config_t *sec = (authn_ldap_config_t *)ap_get_module_config(r->per_dir_config, &authnz_ldap_module); char *binddn = sec->binddn; char *bindpw = sec->bindpw; /* If the per-request config isn't set, we didn't authenticate this user, and leave the default credentials */ if (req && req->password && ((type == LDAP_SEARCH && sec->search_as_user) || (type == LDAP_COMPARE && sec->compare_as_user) || (type == LDAP_COMPARE_AND_SEARCH && sec->compare_as_user && sec->search_as_user))){ binddn = req->dn; bindpw = req->password; } return util_ldap_connection_find(r, sec->host, sec->port, binddn, bindpw, sec->deref, sec->secure); } /* * Authentication Phase * -------------------- * * This phase authenticates the credentials the user has sent with * the request (ie the username and password are checked). This is done * by making an attempt to bind to the LDAP server using this user's * DN and the supplied password. * */ static authn_status authn_ldap_check_password(request_rec *r, const char *user, const char *password) { char filtbuf[FILTER_LENGTH]; authn_ldap_config_t *sec = (authn_ldap_config_t *)ap_get_module_config(r->per_dir_config, &authnz_ldap_module); util_ldap_connection_t *ldc = NULL; int result = 0; int remote_user_attribute_set = 0; const char *dn = NULL; const char *utfpassword; authn_ldap_request_t *req = (authn_ldap_request_t *)apr_pcalloc(r->pool, sizeof(authn_ldap_request_t)); ap_set_module_config(r->request_config, &authnz_ldap_module, req); /* if (!sec->enabled) { return AUTH_USER_NOT_FOUND; } */ /* * Basic sanity checks before any LDAP operations even happen. */ if (!sec->have_ldap_url) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02558) "no AuthLDAPURL"); return AUTH_GENERAL_ERROR; } /* There is a good AuthLDAPURL, right? */ if (sec->host) { const char *binddn = sec->binddn; const char *bindpw = sec->bindpw; if (sec->initial_bind_as_user) { bindpw = password; binddn = ldap_determine_binddn(r, user); } ldc = util_ldap_connection_find(r, sec->host, sec->port, binddn, bindpw, sec->deref, sec->secure); } else { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01690) "auth_ldap authenticate: no sec->host - weird...?"); return AUTH_GENERAL_ERROR; } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01691) "auth_ldap authenticate: using URL %s", sec->url); /* Get the password that the client sent */ if (password == NULL) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01692) "auth_ldap authenticate: no password specified"); util_ldap_connection_close(ldc); return AUTH_GENERAL_ERROR; } if (user == NULL) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01693) "auth_ldap authenticate: no user specified"); util_ldap_connection_close(ldc); return AUTH_GENERAL_ERROR; } /* build the username filter */ authn_ldap_build_filter(filtbuf, r, user, NULL, sec); ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "auth_ldap authenticate: final authn filter is %s", filtbuf); /* convert password to utf-8 */ utfpassword = authn_ldap_xlate_password(r, password); /* do the user search */ result = util_ldap_cache_checkuserid(r, ldc, sec->url, sec->basedn, sec->scope, sec->attributes, filtbuf, utfpassword, &dn, &(req->vals)); util_ldap_connection_close(ldc); /* handle bind failure */ if (result != LDAP_SUCCESS) { if (!sec->bind_authoritative) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01694) "auth_ldap authenticate: user %s authentication failed; " "URI %s [%s][%s] (not authoritative)", user, r->uri, ldc->reason, ldap_err2string(result)); return AUTH_USER_NOT_FOUND; } ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01695) "auth_ldap authenticate: " "user %s authentication failed; URI %s [%s][%s]", user, r->uri, ldc->reason, ldap_err2string(result)); /* talking to a primitive LDAP server (like RACF-over-LDAP) that doesn't return specific errors */ if (!strcasecmp(sec->filter, "none") && LDAP_OTHER == result) { return AUTH_USER_NOT_FOUND; } return (LDAP_NO_SUCH_OBJECT == result) ? AUTH_USER_NOT_FOUND #ifdef LDAP_SECURITY_ERROR : (LDAP_SECURITY_ERROR(result)) ? AUTH_DENIED #else : (LDAP_INAPPROPRIATE_AUTH == result) ? AUTH_DENIED : (LDAP_INVALID_CREDENTIALS == result) ? AUTH_DENIED #ifdef LDAP_INSUFFICIENT_ACCESS : (LDAP_INSUFFICIENT_ACCESS == result) ? AUTH_DENIED #endif #ifdef LDAP_INSUFFICIENT_RIGHTS : (LDAP_INSUFFICIENT_RIGHTS == result) ? AUTH_DENIED #endif #endif #ifdef LDAP_CONSTRAINT_VIOLATION /* At least Sun Directory Server sends this if a user is * locked. This is not covered by LDAP_SECURITY_ERROR. */ : (LDAP_CONSTRAINT_VIOLATION == result) ? AUTH_DENIED #endif : AUTH_GENERAL_ERROR; } /* mark the user and DN */ req->dn = apr_pstrdup(r->pool, dn); req->user = apr_pstrdup(r->pool, user); req->password = apr_pstrdup(r->pool, password); if (sec->user_is_dn) { r->user = req->dn; } /* add environment variables */ remote_user_attribute_set = set_request_vars(r, LDAP_AUTHN); /* sanity check */ if (sec->remote_user_attribute && !remote_user_attribute_set) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01696) "auth_ldap authenticate: " "REMOTE_USER was to be set with attribute '%s', " "but this attribute was not requested for in the " "LDAP query for the user. REMOTE_USER will fall " "back to username or DN as appropriate.", sec->remote_user_attribute); } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01697) "auth_ldap authenticate: accepting %s", user); return AUTH_GRANTED; } static authz_status ldapuser_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { int result = 0; authn_ldap_request_t *req = (authn_ldap_request_t *)ap_get_module_config(r->request_config, &authnz_ldap_module); authn_ldap_config_t *sec = (authn_ldap_config_t *)ap_get_module_config(r->per_dir_config, &authnz_ldap_module); util_ldap_connection_t *ldc = NULL; const char *err = NULL; const ap_expr_info_t *expr = parsed_require_args; const char *require; const char *t; char *w; char filtbuf[FILTER_LENGTH]; const char *dn = NULL; if (!r->user) { return AUTHZ_DENIED_NO_USER; } if (!sec->have_ldap_url) { return AUTHZ_DENIED; } if (sec->host) { ldc = get_connection_for_authz(r, LDAP_COMPARE); apr_pool_cleanup_register(r->pool, ldc, authnz_ldap_cleanup_connection_close, apr_pool_cleanup_null); } else { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01698) "auth_ldap authorize: no sec->host - weird...?"); return AUTHZ_DENIED; } /* * If we have been authenticated by some other module than mod_authnz_ldap, * the req structure needed for authorization needs to be created * and populated with the userid and DN of the account in LDAP */ if (!strlen(r->user)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01699) "ldap authorize: Userid is blank, AuthType=%s", r->ap_auth_type); } if(!req) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01700) "ldap authorize: Creating LDAP req structure"); req = (authn_ldap_request_t *)apr_pcalloc(r->pool, sizeof(authn_ldap_request_t)); /* Build the username filter */ authn_ldap_build_filter(filtbuf, r, r->user, NULL, sec); /* Search for the user DN */ result = util_ldap_cache_getuserdn(r, ldc, sec->url, sec->basedn, sec->scope, sec->attributes, filtbuf, &dn, &(req->vals)); /* Search failed, log error and return failure */ if(result != LDAP_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01701) "auth_ldap authorise: User DN not found, %s", ldc->reason); return AUTHZ_DENIED; } ap_set_module_config(r->request_config, &authnz_ldap_module, req); req->dn = apr_pstrdup(r->pool, dn); req->user = r->user; } if (req->dn == NULL || strlen(req->dn) == 0) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01702) "auth_ldap authorize: require user: user's DN has not " "been defined; failing authorization"); return AUTHZ_DENIED; } require = ap_expr_str_exec(r, expr, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02585) "auth_ldap authorize: require user: Can't evaluate expression: %s", err); return AUTHZ_DENIED; } /* * First do a whole-line compare, in case it's something like * require user Babs Jensen */ result = util_ldap_cache_compare(r, ldc, sec->url, req->dn, sec->attribute, require); switch(result) { case LDAP_COMPARE_TRUE: { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01703) "auth_ldap authorize: require user: authorization " "successful"); set_request_vars(r, LDAP_AUTHZ); return AUTHZ_GRANTED; } default: { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01704) "auth_ldap authorize: require user: " "authorization failed [%s][%s]", ldc->reason, ldap_err2string(result)); } } /* * Now break apart the line and compare each word on it */ t = require; while ((w = ap_getword_conf(r->pool, &t)) && w[0]) { result = util_ldap_cache_compare(r, ldc, sec->url, req->dn, sec->attribute, w); switch(result) { case LDAP_COMPARE_TRUE: { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01705) "auth_ldap authorize: " "require user: authorization successful"); set_request_vars(r, LDAP_AUTHZ); return AUTHZ_GRANTED; } default: { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01706) "auth_ldap authorize: " "require user: authorization failed [%s][%s]", ldc->reason, ldap_err2string(result)); } } } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01707) "auth_ldap authorize user: authorization denied for " "user %s to %s", r->user, r->uri); return AUTHZ_DENIED; } static authz_status ldapgroup_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { int result = 0; authn_ldap_request_t *req = (authn_ldap_request_t *)ap_get_module_config(r->request_config, &authnz_ldap_module); authn_ldap_config_t *sec = (authn_ldap_config_t *)ap_get_module_config(r->per_dir_config, &authnz_ldap_module); util_ldap_connection_t *ldc = NULL; const char *err = NULL; const ap_expr_info_t *expr = parsed_require_args; const char *require; const char *t; char filtbuf[FILTER_LENGTH]; const char *dn = NULL; struct mod_auth_ldap_groupattr_entry_t *ent; int i; if (!r->user) { return AUTHZ_DENIED_NO_USER; } if (!sec->have_ldap_url) { return AUTHZ_DENIED; } if (sec->host) { ldc = get_connection_for_authz(r, LDAP_COMPARE); /* for the top-level group only */ apr_pool_cleanup_register(r->pool, ldc, authnz_ldap_cleanup_connection_close, apr_pool_cleanup_null); } else { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01708) "auth_ldap authorize: no sec->host - weird...?"); return AUTHZ_DENIED; } /* * If there are no elements in the group attribute array, the default should be * member and uniquemember; populate the array now. */ if (sec->groupattr->nelts == 0) { struct mod_auth_ldap_groupattr_entry_t *grp; #if APR_HAS_THREADS apr_thread_mutex_lock(sec->lock); #endif grp = apr_array_push(sec->groupattr); grp->name = "member"; grp = apr_array_push(sec->groupattr); grp->name = "uniqueMember"; #if APR_HAS_THREADS apr_thread_mutex_unlock(sec->lock); #endif } /* * If there are no elements in the sub group classes array, the default * should be groupOfNames and groupOfUniqueNames; populate the array now. */ if (sec->subgroupclasses->nelts == 0) { struct mod_auth_ldap_groupattr_entry_t *grp; #if APR_HAS_THREADS apr_thread_mutex_lock(sec->lock); #endif grp = apr_array_push(sec->subgroupclasses); grp->name = "groupOfNames"; grp = apr_array_push(sec->subgroupclasses); grp->name = "groupOfUniqueNames"; #if APR_HAS_THREADS apr_thread_mutex_unlock(sec->lock); #endif } /* * If we have been authenticated by some other module than mod_auth_ldap, * the req structure needed for authorization needs to be created * and populated with the userid and DN of the account in LDAP */ if (!strlen(r->user)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01709) "ldap authorize: Userid is blank, AuthType=%s", r->ap_auth_type); } if(!req) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01710) "ldap authorize: Creating LDAP req structure"); req = (authn_ldap_request_t *)apr_pcalloc(r->pool, sizeof(authn_ldap_request_t)); /* Build the username filter */ authn_ldap_build_filter(filtbuf, r, r->user, NULL, sec); /* Search for the user DN */ result = util_ldap_cache_getuserdn(r, ldc, sec->url, sec->basedn, sec->scope, sec->attributes, filtbuf, &dn, &(req->vals)); /* Search failed, log error and return failure */ if(result != LDAP_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01711) "auth_ldap authorise: User DN not found, %s", ldc->reason); return AUTHZ_DENIED; } ap_set_module_config(r->request_config, &authnz_ldap_module, req); req->dn = apr_pstrdup(r->pool, dn); req->user = r->user; } ent = (struct mod_auth_ldap_groupattr_entry_t *) sec->groupattr->elts; if (sec->group_attrib_is_dn) { if (req->dn == NULL || strlen(req->dn) == 0) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01712) "auth_ldap authorize: require group: user's DN has " "not been defined; failing authorization for user %s", r->user); return AUTHZ_DENIED; } } else { if (req->user == NULL || strlen(req->user) == 0) { /* We weren't called in the authentication phase, so we didn't have a * chance to set the user field. Do so now. */ req->user = r->user; } } require = ap_expr_str_exec(r, expr, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02586) "auth_ldap authorize: require group: Can't evaluate expression: %s", err); return AUTHZ_DENIED; } t = require; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01713) "auth_ldap authorize: require group: testing for group " "membership in \"%s\"", t); /* PR52464 exhaust attrs in base group before checking subgroups */ for (i = 0; i < sec->groupattr->nelts; i++) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01714) "auth_ldap authorize: require group: testing for %s: " "%s (%s)", ent[i].name, sec->group_attrib_is_dn ? req->dn : req->user, t); result = util_ldap_cache_compare(r, ldc, sec->url, t, ent[i].name, sec->group_attrib_is_dn ? req->dn : req->user); if (result == LDAP_COMPARE_TRUE) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01715) "auth_ldap authorize: require group: " "authorization successful (attribute %s) " "[%s][%d - %s]", ent[i].name, ldc->reason, result, ldap_err2string(result)); set_request_vars(r, LDAP_AUTHZ); return AUTHZ_GRANTED; } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01719) "auth_ldap authorize: require group \"%s\": " "didn't match with attr %s [%s][%d - %s]", t, ent[i].name, ldc->reason, result, ldap_err2string(result)); } } for (i = 0; i < sec->groupattr->nelts; i++) { /* nested groups need searches and compares, so grab a new handle */ authnz_ldap_cleanup_connection_close(ldc); apr_pool_cleanup_kill(r->pool, ldc,authnz_ldap_cleanup_connection_close); ldc = get_connection_for_authz(r, LDAP_COMPARE_AND_SEARCH); apr_pool_cleanup_register(r->pool, ldc, authnz_ldap_cleanup_connection_close, apr_pool_cleanup_null); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01716) "auth_ldap authorise: require group \"%s\": " "failed [%s][%d - %s], checking sub-groups", t, ldc->reason, result, ldap_err2string(result)); result = util_ldap_cache_check_subgroups(r, ldc, sec->url, t, ent[i].name, sec->group_attrib_is_dn ? req->dn : req->user, sec->sgAttributes[0] ? sec->sgAttributes : default_attributes, sec->subgroupclasses, 0, sec->maxNestingDepth); if (result == LDAP_COMPARE_TRUE) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01717) "auth_ldap authorise: require group " "(sub-group): authorisation successful " "(attribute %s) [%s][%d - %s]", ent[i].name, ldc->reason, result, ldap_err2string(result)); set_request_vars(r, LDAP_AUTHZ); return AUTHZ_GRANTED; } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01718) "auth_ldap authorise: require group " "(sub-group) \"%s\": didn't match with attr %s " "[%s][%d - %s]", t, ldc->reason, ent[i].name, result, ldap_err2string(result)); } } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01720) "auth_ldap authorize group: authorization denied for " "user %s to %s", r->user, r->uri); return AUTHZ_DENIED; } static authz_status ldapdn_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { int result = 0; authn_ldap_request_t *req = (authn_ldap_request_t *)ap_get_module_config(r->request_config, &authnz_ldap_module); authn_ldap_config_t *sec = (authn_ldap_config_t *)ap_get_module_config(r->per_dir_config, &authnz_ldap_module); util_ldap_connection_t *ldc = NULL; const char *err = NULL; const ap_expr_info_t *expr = parsed_require_args; const char *require; const char *t; char filtbuf[FILTER_LENGTH]; const char *dn = NULL; if (!r->user) { return AUTHZ_DENIED_NO_USER; } if (!sec->have_ldap_url) { return AUTHZ_DENIED; } if (sec->host) { ldc = get_connection_for_authz(r, LDAP_SEARCH); /* _comparedn is a searche */ apr_pool_cleanup_register(r->pool, ldc, authnz_ldap_cleanup_connection_close, apr_pool_cleanup_null); } else { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01721) "auth_ldap authorize: no sec->host - weird...?"); return AUTHZ_DENIED; } /* * If we have been authenticated by some other module than mod_auth_ldap, * the req structure needed for authorization needs to be created * and populated with the userid and DN of the account in LDAP */ if (!strlen(r->user)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01722) "ldap authorize: Userid is blank, AuthType=%s", r->ap_auth_type); } if(!req) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01723) "ldap authorize: Creating LDAP req structure"); req = (authn_ldap_request_t *)apr_pcalloc(r->pool, sizeof(authn_ldap_request_t)); /* Build the username filter */ authn_ldap_build_filter(filtbuf, r, r->user, NULL, sec); /* Search for the user DN */ result = util_ldap_cache_getuserdn(r, ldc, sec->url, sec->basedn, sec->scope, sec->attributes, filtbuf, &dn, &(req->vals)); /* Search failed, log error and return failure */ if(result != LDAP_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01724) "auth_ldap authorise: User DN not found with filter %s: %s", filtbuf, ldc->reason); return AUTHZ_DENIED; } ap_set_module_config(r->request_config, &authnz_ldap_module, req); req->dn = apr_pstrdup(r->pool, dn); req->user = r->user; } require = ap_expr_str_exec(r, expr, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02587) "auth_ldap authorize: require dn: Can't evaluate expression: %s", err); return AUTHZ_DENIED; } t = require; if (req->dn == NULL || strlen(req->dn) == 0) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01725) "auth_ldap authorize: require dn: user's DN has not " "been defined; failing authorization"); return AUTHZ_DENIED; } result = util_ldap_cache_comparedn(r, ldc, sec->url, req->dn, t, sec->compare_dn_on_server); switch(result) { case LDAP_COMPARE_TRUE: { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01726) "auth_ldap authorize: " "require dn: authorization successful"); set_request_vars(r, LDAP_AUTHZ); return AUTHZ_GRANTED; } default: { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01727) "auth_ldap authorize: " "require dn \"%s\": LDAP error [%s][%s]", t, ldc->reason, ldap_err2string(result)); } } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01728) "auth_ldap authorize dn: authorization denied for " "user %s to %s", r->user, r->uri); return AUTHZ_DENIED; } static authz_status ldapattribute_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { int result = 0; authn_ldap_request_t *req = (authn_ldap_request_t *)ap_get_module_config(r->request_config, &authnz_ldap_module); authn_ldap_config_t *sec = (authn_ldap_config_t *)ap_get_module_config(r->per_dir_config, &authnz_ldap_module); util_ldap_connection_t *ldc = NULL; const char *err = NULL; const ap_expr_info_t *expr = parsed_require_args; const char *require; const char *t; char *w, *value; char filtbuf[FILTER_LENGTH]; const char *dn = NULL; if (!r->user) { return AUTHZ_DENIED_NO_USER; } if (!sec->have_ldap_url) { return AUTHZ_DENIED; } if (sec->host) { ldc = get_connection_for_authz(r, LDAP_COMPARE); apr_pool_cleanup_register(r->pool, ldc, authnz_ldap_cleanup_connection_close, apr_pool_cleanup_null); } else { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01729) "auth_ldap authorize: no sec->host - weird...?"); return AUTHZ_DENIED; } /* * If we have been authenticated by some other module than mod_auth_ldap, * the req structure needed for authorization needs to be created * and populated with the userid and DN of the account in LDAP */ if (!strlen(r->user)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01730) "ldap authorize: Userid is blank, AuthType=%s", r->ap_auth_type); } if(!req) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01731) "ldap authorize: Creating LDAP req structure"); req = (authn_ldap_request_t *)apr_pcalloc(r->pool, sizeof(authn_ldap_request_t)); /* Build the username filter */ authn_ldap_build_filter(filtbuf, r, r->user, NULL, sec); /* Search for the user DN */ result = util_ldap_cache_getuserdn(r, ldc, sec->url, sec->basedn, sec->scope, sec->attributes, filtbuf, &dn, &(req->vals)); /* Search failed, log error and return failure */ if(result != LDAP_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01732) "auth_ldap authorise: User DN not found with filter %s: %s", filtbuf, ldc->reason); return AUTHZ_DENIED; } ap_set_module_config(r->request_config, &authnz_ldap_module, req); req->dn = apr_pstrdup(r->pool, dn); req->user = r->user; } if (req->dn == NULL || strlen(req->dn) == 0) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01733) "auth_ldap authorize: require ldap-attribute: user's DN " "has not been defined; failing authorization"); return AUTHZ_DENIED; } require = ap_expr_str_exec(r, expr, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02588) "auth_ldap authorize: require ldap-attribute: Can't " "evaluate expression: %s", err); return AUTHZ_DENIED; } t = require; while (t[0]) { w = ap_getword(r->pool, &t, '='); value = ap_getword_conf(r->pool, &t); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01734) "auth_ldap authorize: checking attribute %s has value %s", w, value); result = util_ldap_cache_compare(r, ldc, sec->url, req->dn, w, value); switch(result) { case LDAP_COMPARE_TRUE: { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01735) "auth_ldap authorize: " "require attribute: authorization successful"); set_request_vars(r, LDAP_AUTHZ); return AUTHZ_GRANTED; } default: { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01736) "auth_ldap authorize: require attribute: " "authorization failed [%s][%s]", ldc->reason, ldap_err2string(result)); } } } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01737) "auth_ldap authorize attribute: authorization denied for " "user %s to %s", r->user, r->uri); return AUTHZ_DENIED; } static authz_status ldapfilter_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { int result = 0; authn_ldap_request_t *req = (authn_ldap_request_t *)ap_get_module_config(r->request_config, &authnz_ldap_module); authn_ldap_config_t *sec = (authn_ldap_config_t *)ap_get_module_config(r->per_dir_config, &authnz_ldap_module); util_ldap_connection_t *ldc = NULL; const char *err = NULL; const ap_expr_info_t *expr = parsed_require_args; const char *require; const char *t; char filtbuf[FILTER_LENGTH]; const char *dn = NULL; if (!r->user) { return AUTHZ_DENIED_NO_USER; } if (!sec->have_ldap_url) { return AUTHZ_DENIED; } if (sec->host) { ldc = get_connection_for_authz(r, LDAP_SEARCH); apr_pool_cleanup_register(r->pool, ldc, authnz_ldap_cleanup_connection_close, apr_pool_cleanup_null); } else { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01738) "auth_ldap authorize: no sec->host - weird...?"); return AUTHZ_DENIED; } /* * If we have been authenticated by some other module than mod_auth_ldap, * the req structure needed for authorization needs to be created * and populated with the userid and DN of the account in LDAP */ if (!strlen(r->user)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01739) "ldap authorize: Userid is blank, AuthType=%s", r->ap_auth_type); } if(!req) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01740) "ldap authorize: Creating LDAP req structure"); req = (authn_ldap_request_t *)apr_pcalloc(r->pool, sizeof(authn_ldap_request_t)); /* Build the username filter */ authn_ldap_build_filter(filtbuf, r, r->user, NULL, sec); /* Search for the user DN */ result = util_ldap_cache_getuserdn(r, ldc, sec->url, sec->basedn, sec->scope, sec->attributes, filtbuf, &dn, &(req->vals)); /* Search failed, log error and return failure */ if(result != LDAP_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01741) "auth_ldap authorise: User DN not found with filter %s: %s", filtbuf, ldc->reason); return AUTHZ_DENIED; } ap_set_module_config(r->request_config, &authnz_ldap_module, req); req->dn = apr_pstrdup(r->pool, dn); req->user = r->user; } if (req->dn == NULL || strlen(req->dn) == 0) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01742) "auth_ldap authorize: require ldap-filter: user's DN " "has not been defined; failing authorization"); return AUTHZ_DENIED; } require = ap_expr_str_exec(r, expr, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02589) "auth_ldap authorize: require ldap-filter: Can't " "evaluate require expression: %s", err); return AUTHZ_DENIED; } t = require; if (t[0]) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01743) "auth_ldap authorize: checking filter %s", t); /* Build the username filter */ authn_ldap_build_filter(filtbuf, r, req->user, t, sec); /* Search for the user DN */ result = util_ldap_cache_getuserdn(r, ldc, sec->url, sec->basedn, sec->scope, sec->attributes, filtbuf, &dn, &(req->vals)); /* Make sure that the filtered search returned the correct user dn */ if (result == LDAP_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01744) "auth_ldap authorize: checking dn match %s", dn); if (sec->compare_as_user) { /* ldap-filter is the only authz that requires a search and a compare */ apr_pool_cleanup_kill(r->pool, ldc, authnz_ldap_cleanup_connection_close); authnz_ldap_cleanup_connection_close(ldc); ldc = get_connection_for_authz(r, LDAP_COMPARE); } result = util_ldap_cache_comparedn(r, ldc, sec->url, req->dn, dn, sec->compare_dn_on_server); } switch(result) { case LDAP_COMPARE_TRUE: { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01745) "auth_ldap authorize: require ldap-filter: " "authorization successful"); set_request_vars(r, LDAP_AUTHZ); return AUTHZ_GRANTED; } case LDAP_FILTER_ERROR: { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01746) "auth_ldap authorize: require ldap-filter: " "%s authorization failed [%s][%s]", filtbuf, ldc->reason, ldap_err2string(result)); break; } default: { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01747) "auth_ldap authorize: require ldap-filter: " "authorization failed [%s][%s]", ldc->reason, ldap_err2string(result)); } } } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01748) "auth_ldap authorize filter: authorization denied for " "user %s to %s", r->user, r->uri); return AUTHZ_DENIED; } static const char *ldap_parse_config(cmd_parms *cmd, const char *require_line, const void **parsed_require_line) { const char *expr_err = NULL; ap_expr_info_t *expr; expr = ap_expr_parse_cmd(cmd, require_line, AP_EXPR_FLAG_STRING_RESULT, &expr_err, NULL); if (expr_err) return apr_pstrcat(cmd->temp_pool, "Cannot parse expression in require line: ", expr_err, NULL); *parsed_require_line = expr; return NULL; } /* * Use the ldap url parsing routines to break up the ldap url into * host and port. */ static const char *mod_auth_ldap_parse_url(cmd_parms *cmd, void *config, const char *url, const char *mode) { int rc; apr_ldap_url_desc_t *urld; apr_ldap_err_t *result; authn_ldap_config_t *sec = config; rc = apr_ldap_url_parse(cmd->pool, url, &(urld), &(result)); if (rc != APR_SUCCESS) { return result->reason; } sec->url = apr_pstrdup(cmd->pool, url); /* Set all the values, or at least some sane defaults */ if (sec->host) { sec->host = apr_pstrcat(cmd->pool, urld->lud_host, " ", sec->host, NULL); } else { sec->host = urld->lud_host? apr_pstrdup(cmd->pool, urld->lud_host) : "localhost"; } sec->basedn = urld->lud_dn? apr_pstrdup(cmd->pool, urld->lud_dn) : ""; if (urld->lud_attrs && urld->lud_attrs[0]) { int i = 1; while (urld->lud_attrs[i]) { i++; } sec->attributes = apr_pcalloc(cmd->pool, sizeof(char *) * (i+1)); i = 0; while (urld->lud_attrs[i]) { sec->attributes[i] = apr_pstrdup(cmd->pool, urld->lud_attrs[i]); i++; } sec->attribute = sec->attributes[0]; } else { sec->attribute = "uid"; } sec->scope = urld->lud_scope == LDAP_SCOPE_ONELEVEL ? LDAP_SCOPE_ONELEVEL : LDAP_SCOPE_SUBTREE; if (urld->lud_filter) { if (urld->lud_filter[0] == '(') { /* * Get rid of the surrounding parens; later on when generating the * filter, they'll be put back. */ sec->filter = apr_pstrmemdup(cmd->pool, urld->lud_filter+1, strlen(urld->lud_filter)-2); } else { sec->filter = apr_pstrdup(cmd->pool, urld->lud_filter); } } else { sec->filter = "objectclass=*"; } if (mode) { if (0 == strcasecmp("NONE", mode)) { sec->secure = APR_LDAP_NONE; } else if (0 == strcasecmp("SSL", mode)) { sec->secure = APR_LDAP_SSL; } else if (0 == strcasecmp("TLS", mode) || 0 == strcasecmp("STARTTLS", mode)) { sec->secure = APR_LDAP_STARTTLS; } else { return "Invalid LDAP connection mode setting: must be one of NONE, " "SSL, or TLS/STARTTLS"; } } /* "ldaps" indicates secure ldap connections desired */ if (strncasecmp(url, "ldaps", 5) == 0) { sec->secure = APR_LDAP_SSL; sec->port = urld->lud_port? urld->lud_port : LDAPS_PORT; } else { sec->port = urld->lud_port? urld->lud_port : LDAP_PORT; } sec->have_ldap_url = 1; ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, cmd->server, "auth_ldap url parse: `%s', Host: %s, Port: %d, DN: %s, " "attrib: %s, scope: %s, filter: %s, connection mode: %s", url, urld->lud_host, urld->lud_port, urld->lud_dn, urld->lud_attrs? urld->lud_attrs[0] : "(null)", (urld->lud_scope == LDAP_SCOPE_SUBTREE? "subtree" : urld->lud_scope == LDAP_SCOPE_BASE? "base" : urld->lud_scope == LDAP_SCOPE_ONELEVEL? "onelevel" : "unknown"), urld->lud_filter, sec->secure == APR_LDAP_SSL ? "using SSL": "not using SSL" ); return NULL; } static const char *mod_auth_ldap_set_deref(cmd_parms *cmd, void *config, const char *arg) { authn_ldap_config_t *sec = config; if (strcmp(arg, "never") == 0 || strcasecmp(arg, "off") == 0) { sec->deref = never; } else if (strcmp(arg, "searching") == 0) { sec->deref = searching; } else if (strcmp(arg, "finding") == 0) { sec->deref = finding; } else if (strcmp(arg, "always") == 0 || strcasecmp(arg, "on") == 0) { sec->deref = always; } else { return "Unrecognized value for AuthLDAPDereferenceAliases directive"; } return NULL; } static const char *mod_auth_ldap_add_subgroup_attribute(cmd_parms *cmd, void *config, const char *arg) { int i = 0; authn_ldap_config_t *sec = config; for (i = 0; sec->sgAttributes[i]; i++) { ; } if (i == GROUPATTR_MAX_ELTS) return "Too many AuthLDAPSubGroupAttribute values"; sec->sgAttributes[i] = apr_pstrdup(cmd->pool, arg); return NULL; } static const char *mod_auth_ldap_add_subgroup_class(cmd_parms *cmd, void *config, const char *arg) { struct mod_auth_ldap_groupattr_entry_t *new; authn_ldap_config_t *sec = config; if (sec->subgroupclasses->nelts > GROUPATTR_MAX_ELTS) return "Too many AuthLDAPSubGroupClass values"; new = apr_array_push(sec->subgroupclasses); new->name = apr_pstrdup(cmd->pool, arg); return NULL; } static const char *mod_auth_ldap_set_subgroup_maxdepth(cmd_parms *cmd, void *config, const char *max_depth) { authn_ldap_config_t *sec = config; sec->maxNestingDepth = atol(max_depth); return NULL; } static const char *mod_auth_ldap_add_group_attribute(cmd_parms *cmd, void *config, const char *arg) { struct mod_auth_ldap_groupattr_entry_t *new; authn_ldap_config_t *sec = config; if (sec->groupattr->nelts > GROUPATTR_MAX_ELTS) return "Too many AuthLDAPGroupAttribute directives"; new = apr_array_push(sec->groupattr); new->name = apr_pstrdup(cmd->pool, arg); return NULL; } static const char *set_charset_config(cmd_parms *cmd, void *config, const char *arg) { ap_set_module_config(cmd->server->module_config, &authnz_ldap_module, (void *)arg); return NULL; } static const char *set_bind_pattern(cmd_parms *cmd, void *_cfg, const char *exp, const char *subst) { authn_ldap_config_t *sec = _cfg; ap_regex_t *regexp; regexp = ap_pregcomp(cmd->pool, exp, AP_REG_EXTENDED); if (!regexp) { return apr_pstrcat(cmd->pool, "AuthLDAPInitialBindPattern: cannot compile regular " "expression '", exp, "'", NULL); } sec->bind_regex = regexp; sec->bind_subst = subst; return NULL; } static const char *set_bind_password(cmd_parms *cmd, void *_cfg, const char *arg) { authn_ldap_config_t *sec = _cfg; int arglen = strlen(arg); char **argv; char *result; if ((arglen > 5) && strncmp(arg, "exec:", 5) == 0) { if (apr_tokenize_to_argv(arg+5, &argv, cmd->temp_pool) != APR_SUCCESS) { return apr_pstrcat(cmd->pool, "Unable to parse exec arguments from ", arg+5, NULL); } argv[0] = ap_server_root_relative(cmd->temp_pool, argv[0]); if (!argv[0]) { return apr_pstrcat(cmd->pool, "Invalid AuthLDAPBindPassword exec location:", arg+5, NULL); } result = ap_get_exec_line(cmd->pool, (const char*)argv[0], (const char * const *)argv); if (!result) { return apr_pstrcat(cmd->pool, "Unable to get bind password from exec of ", arg+5, NULL); } sec->bindpw = result; } else { sec->bindpw = (char *)arg; } return NULL; } static const command_rec authnz_ldap_cmds[] = { AP_INIT_TAKE12("AuthLDAPURL", mod_auth_ldap_parse_url, NULL, OR_AUTHCFG, "URL to define LDAP connection. This should be an RFC 2255 compliant\n" "URL of the form ldap://host[:port]/basedn[?attrib[?scope[?filter]]].\n" "<ul>\n" "<li>Host is the name of the LDAP server. Use a space separated list of hosts \n" "to specify redundant servers.\n" "<li>Port is optional, and specifies the port to connect to.\n" "<li>basedn specifies the base DN to start searches from\n" "<li>Attrib specifies what attribute to search for in the directory. If not " "provided, it defaults to <b>uid</b>.\n" "<li>Scope is the scope of the search, and can be either <b>sub</b> or " "<b>one</b>. If not provided, the default is <b>sub</b>.\n" "<li>Filter is a filter to use in the search. If not provided, " "defaults to <b>(objectClass=*)</b>.\n" "</ul>\n" "Searches are performed using the attribute and the filter combined. " "For example, assume that the\n" "LDAP URL is <b>ldap://ldap.airius.com/ou=People, o=Airius?uid?sub?(posixid=*)</b>. " "Searches will\n" "be done using the filter <b>(&((posixid=*))(uid=<i>username</i>))</b>, " "where <i>username</i>\n" "is the user name passed by the HTTP client. The search will be a subtree " "search on the branch <b>ou=People, o=Airius</b>."), AP_INIT_TAKE1("AuthLDAPBindDN", ap_set_string_slot, (void *)APR_OFFSETOF(authn_ldap_config_t, binddn), OR_AUTHCFG, "DN to use to bind to LDAP server. If not provided, will do an anonymous bind."), AP_INIT_TAKE1("AuthLDAPBindPassword", set_bind_password, NULL, OR_AUTHCFG, "Password to use to bind to LDAP server. If not provided, will do an anonymous bind."), AP_INIT_FLAG("AuthLDAPBindAuthoritative", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_ldap_config_t, bind_authoritative), OR_AUTHCFG, "Set to 'on' to return failures when user-specific bind fails - defaults to on."), AP_INIT_FLAG("AuthLDAPRemoteUserIsDN", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_ldap_config_t, user_is_dn), OR_AUTHCFG, "Set to 'on' to set the REMOTE_USER environment variable to be the full " "DN of the remote user. By default, this is set to off, meaning that " "the REMOTE_USER variable will contain whatever value the remote user sent."), AP_INIT_TAKE1("AuthLDAPRemoteUserAttribute", ap_set_string_slot, (void *)APR_OFFSETOF(authn_ldap_config_t, remote_user_attribute), OR_AUTHCFG, "Override the user supplied username and place the " "contents of this attribute in the REMOTE_USER " "environment variable."), AP_INIT_FLAG("AuthLDAPCompareDNOnServer", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_ldap_config_t, compare_dn_on_server), OR_AUTHCFG, "Set to 'on' to force auth_ldap to do DN compares (for the \"require dn\" " "directive) using the server, and set it 'off' to do the compares locally " "(at the expense of possible false matches). See the documentation for " "a complete description of this option."), AP_INIT_ITERATE("AuthLDAPSubGroupAttribute", mod_auth_ldap_add_subgroup_attribute, NULL, OR_AUTHCFG, "Attribute labels used to define sub-group (or nested group) membership in groups - " "defaults to member and uniqueMember"), AP_INIT_ITERATE("AuthLDAPSubGroupClass", mod_auth_ldap_add_subgroup_class, NULL, OR_AUTHCFG, "LDAP objectClass values used to identify sub-group instances - " "defaults to groupOfNames and groupOfUniqueNames"), AP_INIT_TAKE1("AuthLDAPMaxSubGroupDepth", mod_auth_ldap_set_subgroup_maxdepth, NULL, OR_AUTHCFG, "Maximum subgroup nesting depth to be evaluated - defaults to 10 (top-level group = 0)"), AP_INIT_ITERATE("AuthLDAPGroupAttribute", mod_auth_ldap_add_group_attribute, NULL, OR_AUTHCFG, "A list of attribute labels used to identify the user members of groups - defaults to " "member and uniquemember"), AP_INIT_FLAG("AuthLDAPGroupAttributeIsDN", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_ldap_config_t, group_attrib_is_dn), OR_AUTHCFG, "If set to 'on', auth_ldap uses the DN that is retrieved from the server for " "subsequent group comparisons. If set to 'off', auth_ldap uses the string " "provided by the client directly. Defaults to 'on'."), AP_INIT_TAKE1("AuthLDAPDereferenceAliases", mod_auth_ldap_set_deref, NULL, OR_AUTHCFG, "Determines how aliases are handled during a search. Can be one of the " "values \"never\", \"searching\", \"finding\", or \"always\". " "Defaults to always."), AP_INIT_TAKE1("AuthLDAPCharsetConfig", set_charset_config, NULL, RSRC_CONF, "Character set conversion configuration file. If omitted, character set " "conversion is disabled."), AP_INIT_TAKE1("AuthLDAPAuthorizePrefix", ap_set_string_slot, (void *)APR_OFFSETOF(authn_ldap_config_t, authz_prefix), OR_AUTHCFG, "The prefix to add to environment variables set during " "successful authorization, default '" AUTHZ_PREFIX "'"), AP_INIT_FLAG("AuthLDAPInitialBindAsUser", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_ldap_config_t, initial_bind_as_user), OR_AUTHCFG, "Set to 'on' to perform the initial DN lookup with the basic auth credentials " "instead of anonymous or hard-coded credentials"), AP_INIT_TAKE2("AuthLDAPInitialBindPattern", set_bind_pattern, NULL, OR_AUTHCFG, "The regex and substitution to determine a username that can bind based on an HTTP basic auth username"), AP_INIT_FLAG("AuthLDAPSearchAsUser", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_ldap_config_t, search_as_user), OR_AUTHCFG, "Set to 'on' to perform authorization-based searches with the users credentials, when this module " "has also performed authentication. Does not affect nested groups lookup."), AP_INIT_FLAG("AuthLDAPCompareAsUser", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_ldap_config_t, compare_as_user), OR_AUTHCFG, "Set to 'on' to perform authorization-based compares with the users credentials, when this module " "has also performed authentication. Does not affect nested groups lookups."), {NULL} }; static int authnz_ldap_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { ap_configfile_t *f; char l[MAX_STRING_LEN]; const char *charset_confname = ap_get_module_config(s->module_config, &authnz_ldap_module); apr_status_t status; /* authn_ldap_config_t *sec = (authn_ldap_config_t *) ap_get_module_config(s->module_config, &authnz_ldap_module); if (sec->secure) { if (!util_ldap_ssl_supported(s)) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, s, APLOGNO(03159) "LDAP: SSL connections (ldaps://) not supported by utilLDAP"); return(!OK); } } */ /* make sure that mod_ldap (util_ldap) is loaded */ if (ap_find_linked_module("util_ldap.c") == NULL) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01749) "Module mod_ldap missing. Mod_ldap (aka. util_ldap) " "must be loaded in order for mod_authnz_ldap to function properly"); return HTTP_INTERNAL_SERVER_ERROR; } if (!charset_confname) { return OK; } charset_confname = ap_server_root_relative(p, charset_confname); if (!charset_confname) { ap_log_error(APLOG_MARK, APLOG_ERR, APR_EBADPATH, s, APLOGNO(01750) "Invalid charset conversion config path %s", (const char *)ap_get_module_config(s->module_config, &authnz_ldap_module)); return HTTP_INTERNAL_SERVER_ERROR; } if ((status = ap_pcfg_openfile(&f, ptemp, charset_confname)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, status, s, APLOGNO(01751) "could not open charset conversion config file %s.", charset_confname); return HTTP_INTERNAL_SERVER_ERROR; } charset_conversions = apr_hash_make(p); while (!(ap_cfg_getline(l, MAX_STRING_LEN, f))) { const char *ll = l; char *lang; if (l[0] == '#') { continue; } lang = ap_getword_conf(p, &ll); ap_str_tolower(lang); if (ll[0]) { char *charset = ap_getword_conf(p, &ll); apr_hash_set(charset_conversions, lang, APR_HASH_KEY_STRING, charset); } } ap_cfg_closefile(f); to_charset = derive_codepage_from_lang (p, "utf-8"); if (to_charset == NULL) { ap_log_error(APLOG_MARK, APLOG_ERR, status, s, APLOGNO(01752) "could not find the UTF-8 charset in the file %s.", charset_confname); return HTTP_INTERNAL_SERVER_ERROR; } return OK; } static const authn_provider authn_ldap_provider = { &authn_ldap_check_password, NULL, }; static const authz_provider authz_ldapuser_provider = { &ldapuser_check_authorization, &ldap_parse_config, }; static const authz_provider authz_ldapgroup_provider = { &ldapgroup_check_authorization, &ldap_parse_config, }; static const authz_provider authz_ldapdn_provider = { &ldapdn_check_authorization, &ldap_parse_config, }; static const authz_provider authz_ldapattribute_provider = { &ldapattribute_check_authorization, &ldap_parse_config, }; static const authz_provider authz_ldapfilter_provider = { &ldapfilter_check_authorization, &ldap_parse_config, }; static void ImportULDAPOptFn(void) { util_ldap_connection_close = APR_RETRIEVE_OPTIONAL_FN(uldap_connection_close); util_ldap_connection_find = APR_RETRIEVE_OPTIONAL_FN(uldap_connection_find); util_ldap_cache_comparedn = APR_RETRIEVE_OPTIONAL_FN(uldap_cache_comparedn); util_ldap_cache_compare = APR_RETRIEVE_OPTIONAL_FN(uldap_cache_compare); util_ldap_cache_checkuserid = APR_RETRIEVE_OPTIONAL_FN(uldap_cache_checkuserid); util_ldap_cache_getuserdn = APR_RETRIEVE_OPTIONAL_FN(uldap_cache_getuserdn); util_ldap_ssl_supported = APR_RETRIEVE_OPTIONAL_FN(uldap_ssl_supported); util_ldap_cache_check_subgroups = APR_RETRIEVE_OPTIONAL_FN(uldap_cache_check_subgroups); } static void register_hooks(apr_pool_t *p) { /* Register authn provider */ ap_register_auth_provider(p, AUTHN_PROVIDER_GROUP, "ldap", AUTHN_PROVIDER_VERSION, &authn_ldap_provider, AP_AUTH_INTERNAL_PER_CONF); /* Register authz providers */ ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "ldap-user", AUTHZ_PROVIDER_VERSION, &authz_ldapuser_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "ldap-group", AUTHZ_PROVIDER_VERSION, &authz_ldapgroup_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "ldap-dn", AUTHZ_PROVIDER_VERSION, &authz_ldapdn_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "ldap-attribute", AUTHZ_PROVIDER_VERSION, &authz_ldapattribute_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "ldap-filter", AUTHZ_PROVIDER_VERSION, &authz_ldapfilter_provider, AP_AUTH_INTERNAL_PER_CONF); ap_hook_post_config(authnz_ldap_post_config,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_optional_fn_retrieve(ImportULDAPOptFn,NULL,NULL,APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(authnz_ldap) = { STANDARD20_MODULE_STUFF, create_authnz_ldap_dir_config, /* dir config creater */ NULL, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ authnz_ldap_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; ������httpd-2.4.41/modules/aaa/mod_allowmethods.c���������������������������������������������������������0000644�0000000�0000050�00000010443�12757564422�017153� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_core.h" #include "http_config.h" #include "http_protocol.h" #include "http_request.h" #include "http_log.h" #include "apr_strings.h" /** * This module makes it easy to restrict what HTTP methods can be ran against * a server. * * It provides one command: * AllowMethods * This command takes a list of HTTP methods to allow. * * The most common configuration should be like this: * <Directory /> * AllowMethods GET HEAD OPTIONS * </Directory> * <Directory /special/cgi-bin> * AllowMethods GET HEAD OPTIONS POST * </Directory> * Non-matching methods will be returned a status 405 (method not allowed) * * To allow all methods, and effectively turn off mod_allowmethods, use: * AllowMethods reset */ typedef struct am_conf_t { int allowed_set; apr_int64_t allowed; } am_conf_t; module AP_MODULE_DECLARE_DATA allowmethods_module; static int am_check_access(request_rec *r) { int method = r->method_number; am_conf_t *conf; conf = (am_conf_t *) ap_get_module_config(r->per_dir_config, &allowmethods_module); if (!conf || conf->allowed == 0) { return DECLINED; } r->allowed = conf->allowed; if (conf->allowed & (AP_METHOD_BIT << method)) { return DECLINED; } ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01623) "client method denied by server configuration: '%s' to %s%s", r->method, r->filename ? "" : "uri ", r->filename ? r->filename : r->uri); return HTTP_METHOD_NOT_ALLOWED; } static void *am_create_conf(apr_pool_t *p, char *dummy) { am_conf_t *conf = apr_pcalloc(p, sizeof(am_conf_t)); conf->allowed = 0; conf->allowed_set = 0; return conf; } static void *am_merge_conf(apr_pool_t *pool, void *a, void *b) { am_conf_t *base = (am_conf_t *)a; am_conf_t *add = (am_conf_t *)b; am_conf_t *conf = apr_palloc(pool, sizeof(am_conf_t)); if (add->allowed_set) { conf->allowed = add->allowed; conf->allowed_set = add->allowed_set; } else { conf->allowed = base->allowed; conf->allowed_set = base->allowed_set; } return conf; } static const char *am_allowmethods(cmd_parms *cmd, void *d, int argc, char *const argv[]) { int i; am_conf_t *conf = (am_conf_t *)d; if (argc == 0) { return "AllowMethods: No method or 'reset' keyword given"; } if (argc == 1) { if (strcasecmp("reset", argv[0]) == 0) { conf->allowed = 0; conf->allowed_set = 1; return NULL; } } for (i = 0; i < argc; i++) { int m; m = ap_method_number_of(argv[i]); if (m == M_INVALID) { return apr_pstrcat(cmd->pool, "AllowMethods: Invalid Method '", argv[i], "'", NULL); } conf->allowed |= (AP_METHOD_BIT << m); } conf->allowed_set = 1; return NULL; } static void am_register_hooks(apr_pool_t * p) { ap_hook_access_checker(am_check_access, NULL, NULL, APR_HOOK_REALLY_FIRST); } static const command_rec am_cmds[] = { AP_INIT_TAKE_ARGV("AllowMethods", am_allowmethods, NULL, ACCESS_CONF, "only allow specific methods"), {NULL} }; AP_DECLARE_MODULE(allowmethods) = { STANDARD20_MODULE_STUFF, am_create_conf, am_merge_conf, NULL, NULL, am_cmds, am_register_hooks, }; �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authnz_ldap.mak��������������������������������������������������������0000644�0000000�0000050�00000026112�12701473373�017301� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authnz_ldap.dsp !IF "$(CFG)" == "" CFG=mod_authnz_ldap - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_authnz_ldap - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_authnz_ldap - Win32 Release" && "$(CFG)" != "mod_authnz_ldap - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authnz_ldap.mak" CFG="mod_authnz_ldap - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authnz_ldap - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authnz_ldap - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authnz_ldap - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authnz_ldap.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_ldap - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authnz_ldap.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_ldap - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authnz_ldap.obj" -@erase "$(INTDIR)\mod_authnz_ldap.res" -@erase "$(INTDIR)\mod_authnz_ldap_src.idb" -@erase "$(INTDIR)\mod_authnz_ldap_src.pdb" -@erase "$(OUTDIR)\mod_authnz_ldap.exp" -@erase "$(OUTDIR)\mod_authnz_ldap.lib" -@erase "$(OUTDIR)\mod_authnz_ldap.pdb" -@erase "$(OUTDIR)\mod_authnz_ldap.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../ldap" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "LDAP_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authnz_ldap_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authnz_ldap.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authnz_ldap.so" /d LONG_NAME="authnz_ldap_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authnz_ldap.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib wldap32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authnz_ldap.pdb" /debug /out:"$(OUTDIR)\mod_authnz_ldap.so" /implib:"$(OUTDIR)\mod_authnz_ldap.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authnz_ldap.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authnz_ldap.obj" \ "$(INTDIR)\mod_authnz_ldap.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "..\ldap\Release\mod_ldap.lib" "$(OUTDIR)\mod_authnz_ldap.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authnz_ldap.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authnz_ldap.so" if exist .\Release\mod_authnz_ldap.so.manifest mt.exe -manifest .\Release\mod_authnz_ldap.so.manifest -outputresource:.\Release\mod_authnz_ldap.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authnz_ldap - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authnz_ldap.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_ldap - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authnz_ldap.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_ldap - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authnz_ldap.obj" -@erase "$(INTDIR)\mod_authnz_ldap.res" -@erase "$(INTDIR)\mod_authnz_ldap_src.idb" -@erase "$(INTDIR)\mod_authnz_ldap_src.pdb" -@erase "$(OUTDIR)\mod_authnz_ldap.exp" -@erase "$(OUTDIR)\mod_authnz_ldap.lib" -@erase "$(OUTDIR)\mod_authnz_ldap.pdb" -@erase "$(OUTDIR)\mod_authnz_ldap.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../ldap" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "LDAP_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authnz_ldap_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authnz_ldap.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authnz_ldap.so" /d LONG_NAME="authnz_ldap_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authnz_ldap.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib wldap32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authnz_ldap.pdb" /debug /out:"$(OUTDIR)\mod_authnz_ldap.so" /implib:"$(OUTDIR)\mod_authnz_ldap.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authnz_ldap.so LINK32_OBJS= \ "$(INTDIR)\mod_authnz_ldap.obj" \ "$(INTDIR)\mod_authnz_ldap.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "..\ldap\Debug\mod_ldap.lib" "$(OUTDIR)\mod_authnz_ldap.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authnz_ldap.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authnz_ldap.so" if exist .\Debug\mod_authnz_ldap.so.manifest mt.exe -manifest .\Debug\mod_authnz_ldap.so.manifest -outputresource:.\Debug\mod_authnz_ldap.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authnz_ldap.dep") !INCLUDE "mod_authnz_ldap.dep" !ELSE !MESSAGE Warning: cannot find "mod_authnz_ldap.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authnz_ldap - Win32 Release" || "$(CFG)" == "mod_authnz_ldap - Win32 Debug" !IF "$(CFG)" == "mod_authnz_ldap - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authnz_ldap - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authnz_ldap - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authnz_ldap - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authnz_ldap - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authnz_ldap - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authnz_ldap - Win32 Release" "mod_ldap - Win32 Release" : cd ".\..\ldap" $(MAKE) /$(MAKEFLAGS) /F ".\mod_ldap.mak" CFG="mod_ldap - Win32 Release" cd "..\aaa" "mod_ldap - Win32 ReleaseCLEAN" : cd ".\..\ldap" $(MAKE) /$(MAKEFLAGS) /F ".\mod_ldap.mak" CFG="mod_ldap - Win32 Release" RECURSE=1 CLEAN cd "..\aaa" !ELSEIF "$(CFG)" == "mod_authnz_ldap - Win32 Debug" "mod_ldap - Win32 Debug" : cd ".\..\ldap" $(MAKE) /$(MAKEFLAGS) /F ".\mod_ldap.mak" CFG="mod_ldap - Win32 Debug" cd "..\aaa" "mod_ldap - Win32 DebugCLEAN" : cd ".\..\ldap" $(MAKE) /$(MAKEFLAGS) /F ".\mod_ldap.mak" CFG="mod_ldap - Win32 Debug" RECURSE=1 CLEAN cd "..\aaa" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authnz_ldap - Win32 Release" "$(INTDIR)\mod_authnz_ldap.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authnz_ldap.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authnz_ldap.so" /d LONG_NAME="authnz_ldap_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authnz_ldap - Win32 Debug" "$(INTDIR)\mod_authnz_ldap.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authnz_ldap.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authnz_ldap.so" /d LONG_NAME="authnz_ldap_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authnz_ldap.c "$(INTDIR)\mod_authnz_ldap.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_allowmethods.dep�������������������������������������������������������0000644�0000000�0000050�00000003771�12674411515�017477� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_allowmethods.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_allowmethods.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ �������httpd-2.4.41/modules/aaa/mod_authn_core.dep���������������������������������������������������������0000644�0000000�0000050�00000004062�12674411515�017116� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authn_core.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authn_core.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_dbm.mak����������������������������������������������������������0000644�0000000�0000050�00000025554�12701473373�016756� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authz_dbm.dsp !IF "$(CFG)" == "" CFG=mod_authz_dbm - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_authz_dbm - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_authz_dbm - Win32 Release" && "$(CFG)" != "mod_authz_dbm - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authz_dbm.mak" CFG="mod_authz_dbm - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authz_dbm - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authz_dbm - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authz_dbm - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authz_dbm.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authz_dbm.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_auth_basic - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authz_dbm.obj" -@erase "$(INTDIR)\mod_authz_dbm.res" -@erase "$(INTDIR)\mod_authz_dbm_src.idb" -@erase "$(INTDIR)\mod_authz_dbm_src.pdb" -@erase "$(OUTDIR)\mod_authz_dbm.exp" -@erase "$(OUTDIR)\mod_authz_dbm.lib" -@erase "$(OUTDIR)\mod_authz_dbm.pdb" -@erase "$(OUTDIR)\mod_authz_dbm.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authz_dbm_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authz_dbm.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authz_dbm.so" /d LONG_NAME="authz_dbm_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authz_dbm.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authz_dbm.pdb" /debug /out:"$(OUTDIR)\mod_authz_dbm.so" /implib:"$(OUTDIR)\mod_authz_dbm.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_dbm.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authz_dbm.obj" \ "$(INTDIR)\mod_authz_dbm.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authz_dbm.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authz_dbm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authz_dbm.so" if exist .\Release\mod_authz_dbm.so.manifest mt.exe -manifest .\Release\mod_authz_dbm.so.manifest -outputresource:.\Release\mod_authz_dbm.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authz_dbm - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authz_dbm.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_auth_basic - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authz_dbm.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_auth_basic - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authz_dbm.obj" -@erase "$(INTDIR)\mod_authz_dbm.res" -@erase "$(INTDIR)\mod_authz_dbm_src.idb" -@erase "$(INTDIR)\mod_authz_dbm_src.pdb" -@erase "$(OUTDIR)\mod_authz_dbm.exp" -@erase "$(OUTDIR)\mod_authz_dbm.lib" -@erase "$(OUTDIR)\mod_authz_dbm.pdb" -@erase "$(OUTDIR)\mod_authz_dbm.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authz_dbm_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authz_dbm.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authz_dbm.so" /d LONG_NAME="authz_dbm_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authz_dbm.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authz_dbm.pdb" /debug /out:"$(OUTDIR)\mod_authz_dbm.so" /implib:"$(OUTDIR)\mod_authz_dbm.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_dbm.so LINK32_OBJS= \ "$(INTDIR)\mod_authz_dbm.obj" \ "$(INTDIR)\mod_authz_dbm.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" "$(OUTDIR)\mod_authz_dbm.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authz_dbm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authz_dbm.so" if exist .\Debug\mod_authz_dbm.so.manifest mt.exe -manifest .\Debug\mod_authz_dbm.so.manifest -outputresource:.\Debug\mod_authz_dbm.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authz_dbm.dep") !INCLUDE "mod_authz_dbm.dep" !ELSE !MESSAGE Warning: cannot find "mod_authz_dbm.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authz_dbm - Win32 Release" || "$(CFG)" == "mod_authz_dbm - Win32 Debug" !IF "$(CFG)" == "mod_authz_dbm - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_dbm - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_dbm - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_dbm - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_dbm - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authz_dbm - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authz_dbm - Win32 Release" "mod_auth_basic - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" cd "." "mod_auth_basic - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_authz_dbm - Win32 Debug" "mod_auth_basic - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" cd "." "mod_auth_basic - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authz_dbm - Win32 Release" "$(INTDIR)\mod_authz_dbm.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authz_dbm.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authz_dbm.so" /d LONG_NAME="authz_dbm_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authz_dbm - Win32 Debug" "$(INTDIR)\mod_authz_dbm.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authz_dbm.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authz_dbm.so" /d LONG_NAME="authz_dbm_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authz_dbm.c "$(INTDIR)\mod_authz_dbm.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ����������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_socache.dsp������������������������������������������������������0000644�0000000�0000050�00000011177�12062614564�017616� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authn_socache" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authn_socache - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authn_socache.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authn_socache.mak" CFG="mod_authn_socache - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authn_socache - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authn_socache - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authn_socache - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_authn_socache_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authn_socache.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authn_socache.so" /d LONG_NAME="authn_socache_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authn_socache.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_socache.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authn_socache.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_socache.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authn_socache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authn_socache - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_authn_socache_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authn_socache.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authn_socache.so" /d LONG_NAME="authn_socache_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authn_socache.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_socache.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authn_socache.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_socache.so # Begin Special Build Tool TargetPath=.\Debug\mod_authn_socache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authn_socache - Win32 Release" # Name "mod_authn_socache - Win32 Debug" # Begin Source File SOURCE=.\mod_authn_socache.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_anon.c�����������������������������������������������������������0000644�0000000�0000050�00000015337�12623122041�016565� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * Adapted to allow anonymous logins, just like with Anon-FTP, when * one gives the magic user name 'anonymous' and ones email address * as the password. * * Just add the following tokes to your <directory> setup: * * Anonymous magic-userid [magic-userid]... * * Anonymous_MustGiveEmail [ on | off ] default = on * Anonymous_LogEmail [ on | off ] default = on * Anonymous_VerifyEmail [ on | off ] default = off * Anonymous_NoUserId [ on | off ] default = off * * The magic user id is something like 'anonymous', it is NOT case sensitive. * * The MustGiveEmail flag can be used to force users to enter something * in the password field (like an email address). Default is on. * * Furthermore the 'NoUserID' flag can be set to allow completely empty * usernames in as well; this can be is convenient as a single return * in broken GUIs like W95 is often given by the user. The Default is off. * * Dirk.vanGulik@jrc.it; http://ewse.ceo.org; http://me-www.jrc.it/~dirkx * */ #include "apr_strings.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_provider.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_request.h" #include "http_protocol.h" #include "mod_auth.h" typedef struct anon_auth_user { const char *user; struct anon_auth_user *next; } anon_auth_user; typedef struct { anon_auth_user *users; int nouserid; int logemail; int verifyemail; int mustemail; int anyuserid; } authn_anon_config_rec; static void *create_authn_anon_dir_config(apr_pool_t *p, char *d) { authn_anon_config_rec *conf = apr_palloc(p, sizeof(*conf)); /* just to illustrate the defaults really. */ conf->users = NULL; conf->nouserid = 0; conf->anyuserid = 0; conf->logemail = 1; conf->verifyemail = 0; conf->mustemail = 1; return conf; } static const char *anon_set_string_slots(cmd_parms *cmd, void *my_config, const char *arg) { authn_anon_config_rec *conf = my_config; anon_auth_user *first; if (!*arg) { return "Anonymous string cannot be empty, use Anonymous_NoUserId"; } /* squeeze in a record */ if (!conf->anyuserid) { if (!strcmp(arg, "*")) { conf->anyuserid = 1; } else { first = conf->users; conf->users = apr_palloc(cmd->pool, sizeof(*conf->users)); conf->users->user = arg; conf->users->next = first; } } return NULL; } static const command_rec authn_anon_cmds[] = { AP_INIT_ITERATE("Anonymous", anon_set_string_slots, NULL, OR_AUTHCFG, "a space-separated list of user IDs"), AP_INIT_FLAG("Anonymous_MustGiveEmail", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_anon_config_rec, mustemail), OR_AUTHCFG, "Limited to 'on' or 'off'"), AP_INIT_FLAG("Anonymous_NoUserId", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_anon_config_rec, nouserid), OR_AUTHCFG, "Limited to 'on' or 'off'"), AP_INIT_FLAG("Anonymous_VerifyEmail", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_anon_config_rec, verifyemail), OR_AUTHCFG, "Limited to 'on' or 'off'"), AP_INIT_FLAG("Anonymous_LogEmail", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_anon_config_rec, logemail), OR_AUTHCFG, "Limited to 'on' or 'off'"), {NULL} }; module AP_MODULE_DECLARE_DATA authn_anon_module; static authn_status check_anonymous(request_rec *r, const char *user, const char *sent_pw) { authn_anon_config_rec *conf = ap_get_module_config(r->per_dir_config, &authn_anon_module); authn_status res = AUTH_USER_NOT_FOUND; /* Ignore if we are not configured */ if (!conf->users && !conf->anyuserid) { return AUTH_USER_NOT_FOUND; } /* Do we allow an empty userID and/or is it the magic one */ if (!*user) { if (conf->nouserid) { res = AUTH_USER_FOUND; } } else if (conf->anyuserid) { res = AUTH_USER_FOUND; } else { anon_auth_user *p = conf->users; while (p) { if (!strcasecmp(user, p->user)) { res = AUTH_USER_FOUND; break; } p = p->next; } } /* Now if the supplied user-ID was ok, grant access if: * (a) no passwd was sent and no password and no verification * were configured. * (b) password was sent and no verification was configured * (c) verification was configured and the password (sent or not) * looks like an email address */ if ( (res == AUTH_USER_FOUND) && (!conf->mustemail || *sent_pw) && ( !conf->verifyemail || (ap_strchr_c(sent_pw, '@') && ap_strchr_c(sent_pw, '.')))) { if (conf->logemail && ap_is_initial_req(r)) { ap_log_rerror(APLOG_MARK, APLOG_INFO, APR_SUCCESS, r, APLOGNO(01672) "Anonymous: Passwd <%s> Accepted", sent_pw ? sent_pw : "\'none\'"); } return AUTH_GRANTED; } return (res == AUTH_USER_NOT_FOUND ? res : AUTH_DENIED); } static const authn_provider authn_anon_provider = { &check_anonymous, NULL }; static void register_hooks(apr_pool_t *p) { ap_register_auth_provider(p, AUTHN_PROVIDER_GROUP, "anon", AUTHN_PROVIDER_VERSION, &authn_anon_provider, AP_AUTH_INTERNAL_PER_CONF); } AP_DECLARE_MODULE(authn_anon) = { STANDARD20_MODULE_STUFF, create_authn_anon_dir_config, /* dir config creater */ NULL, /* dir merger ensure strictness */ NULL, /* server config */ NULL, /* merge server config */ authn_anon_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUauthzdbm��������������������������������������������������������������0000644�0000000�0000050�00000010172�11540546347�016020� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = authzdbm # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Database Authorization Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = AuthzDBM Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/authzdbm.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_authz_dbm.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ authz_dbm_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_auth_digest.dsp��������������������������������������������������������0000644�0000000�0000050�00000011103�10551346420�017271� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_auth_digest" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_auth_digest - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_auth_digest.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_auth_digest.mak" CFG="mod_auth_digest - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_auth_digest - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_auth_digest - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_auth_digest - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_auth_digest_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_auth_digest.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_auth_digest.so" /d LONG_NAME="auth_digest_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_auth_digest.so" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_digest.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_auth_digest.so" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_digest.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_auth_digest.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_auth_digest - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_auth_digest_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_auth_digest.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_auth_digest.so" /d LONG_NAME="auth_digest_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_auth_digest.so" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_digest.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_auth_digest.so" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_digest.so # Begin Special Build Tool TargetPath=.\Debug\mod_auth_digest.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_auth_digest - Win32 Release" # Name "mod_auth_digest - Win32 Debug" # Begin Source File SOURCE=.\mod_auth_digest.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_auth_basic.mak���������������������������������������������������������0000644�0000000�0000050�00000024115�12701473373�017073� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_auth_basic.dsp !IF "$(CFG)" == "" CFG=mod_auth_basic - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_auth_basic - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_auth_basic - Win32 Release" && "$(CFG)" != "mod_auth_basic - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_auth_basic - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_auth_basic - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_auth_basic - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_auth_basic.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_auth_basic.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_auth_basic.obj" -@erase "$(INTDIR)\mod_auth_basic.res" -@erase "$(INTDIR)\mod_auth_basic_src.idb" -@erase "$(INTDIR)\mod_auth_basic_src.pdb" -@erase "$(OUTDIR)\mod_auth_basic.exp" -@erase "$(OUTDIR)\mod_auth_basic.lib" -@erase "$(OUTDIR)\mod_auth_basic.pdb" -@erase "$(OUTDIR)\mod_auth_basic.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AAA_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_auth_basic_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_auth_basic.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_auth_basic.so" /d LONG_NAME="auth_basic_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_auth_basic.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_auth_basic.pdb" /debug /out:"$(OUTDIR)\mod_auth_basic.so" /implib:"$(OUTDIR)\mod_auth_basic.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_basic.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_auth_basic.obj" \ "$(INTDIR)\mod_auth_basic.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_auth_basic.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_auth_basic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_auth_basic.so" if exist .\Release\mod_auth_basic.so.manifest mt.exe -manifest .\Release\mod_auth_basic.so.manifest -outputresource:.\Release\mod_auth_basic.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_auth_basic - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_auth_basic.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_auth_basic.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_auth_basic.obj" -@erase "$(INTDIR)\mod_auth_basic.res" -@erase "$(INTDIR)\mod_auth_basic_src.idb" -@erase "$(INTDIR)\mod_auth_basic_src.pdb" -@erase "$(OUTDIR)\mod_auth_basic.exp" -@erase "$(OUTDIR)\mod_auth_basic.lib" -@erase "$(OUTDIR)\mod_auth_basic.pdb" -@erase "$(OUTDIR)\mod_auth_basic.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AAA_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_auth_basic_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_auth_basic.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_auth_basic.so" /d LONG_NAME="auth_basic_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_auth_basic.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_auth_basic.pdb" /debug /out:"$(OUTDIR)\mod_auth_basic.so" /implib:"$(OUTDIR)\mod_auth_basic.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_auth_basic.so LINK32_OBJS= \ "$(INTDIR)\mod_auth_basic.obj" \ "$(INTDIR)\mod_auth_basic.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_auth_basic.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_auth_basic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_auth_basic.so" if exist .\Debug\mod_auth_basic.so.manifest mt.exe -manifest .\Debug\mod_auth_basic.so.manifest -outputresource:.\Debug\mod_auth_basic.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_auth_basic.dep") !INCLUDE "mod_auth_basic.dep" !ELSE !MESSAGE Warning: cannot find "mod_auth_basic.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_auth_basic - Win32 Release" || "$(CFG)" == "mod_auth_basic - Win32 Debug" !IF "$(CFG)" == "mod_auth_basic - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_auth_basic - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_auth_basic - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_auth_basic - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_auth_basic - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_auth_basic - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_auth_basic - Win32 Release" "$(INTDIR)\mod_auth_basic.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_auth_basic.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_auth_basic.so" /d LONG_NAME="auth_basic_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_auth_basic - Win32 Debug" "$(INTDIR)\mod_auth_basic.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_auth_basic.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_auth_basic.so" /d LONG_NAME="auth_basic_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_auth_basic.c "$(INTDIR)\mod_auth_basic.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/.indent.pro����������������������������������������������������������������0000644�0000000�0000050�00000001275�10150161574�015514� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authnz_fcgi.mak��������������������������������������������������������0000644�0000000�0000050�00000024327�12701473373�017277� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authnz_fcgi.dsp !IF "$(CFG)" == "" CFG=mod_authnz_fcgi - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_authnz_fcgi - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_authnz_fcgi - Win32 Release" && "$(CFG)" != "mod_authnz_fcgi - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authnz_fcgi.mak" CFG="mod_authnz_fcgi - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authnz_fcgi - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authnz_fcgi - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authnz_fcgi - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authnz_fcgi.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authnz_fcgi.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authnz_fcgi.obj" -@erase "$(INTDIR)\mod_authnz_fcgi.res" -@erase "$(INTDIR)\mod_authnz_fcgi_src.idb" -@erase "$(INTDIR)\mod_authnz_fcgi_src.pdb" -@erase "$(OUTDIR)\mod_authnz_fcgi.exp" -@erase "$(OUTDIR)\mod_authnz_fcgi.lib" -@erase "$(OUTDIR)\mod_authnz_fcgi.pdb" -@erase "$(OUTDIR)\mod_authnz_fcgi.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../database" /D "authnz_fcgi_DECLARE_EXPORT" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authnz_fcgi_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authnz_fcgi.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authnz_fcgi.so" /d LONG_NAME="authnz_fcgi_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authnz_fcgi.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authnz_fcgi.pdb" /debug /out:"$(OUTDIR)\mod_authnz_fcgi.so" /implib:"$(OUTDIR)\mod_authnz_fcgi.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authnz_fcgi.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authnz_fcgi.obj" \ "$(INTDIR)\mod_authnz_fcgi.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_authnz_fcgi.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authnz_fcgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authnz_fcgi.so" if exist .\Release\mod_authnz_fcgi.so.manifest mt.exe -manifest .\Release\mod_authnz_fcgi.so.manifest -outputresource:.\Release\mod_authnz_fcgi.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authnz_fcgi - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authnz_fcgi.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authnz_fcgi.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authnz_fcgi.obj" -@erase "$(INTDIR)\mod_authnz_fcgi.res" -@erase "$(INTDIR)\mod_authnz_fcgi_src.idb" -@erase "$(INTDIR)\mod_authnz_fcgi_src.pdb" -@erase "$(OUTDIR)\mod_authnz_fcgi.exp" -@erase "$(OUTDIR)\mod_authnz_fcgi.lib" -@erase "$(OUTDIR)\mod_authnz_fcgi.pdb" -@erase "$(OUTDIR)\mod_authnz_fcgi.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../database" /D "authnz_fcgi_DECLARE_EXPORT" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authnz_fcgi_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authnz_fcgi.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authnz_fcgi.so" /d LONG_NAME="authnz_fcgi_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authnz_fcgi.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authnz_fcgi.pdb" /debug /out:"$(OUTDIR)\mod_authnz_fcgi.so" /implib:"$(OUTDIR)\mod_authnz_fcgi.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authnz_fcgi.so LINK32_OBJS= \ "$(INTDIR)\mod_authnz_fcgi.obj" \ "$(INTDIR)\mod_authnz_fcgi.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_authnz_fcgi.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authnz_fcgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authnz_fcgi.so" if exist .\Debug\mod_authnz_fcgi.so.manifest mt.exe -manifest .\Debug\mod_authnz_fcgi.so.manifest -outputresource:.\Debug\mod_authnz_fcgi.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authnz_fcgi.dep") !INCLUDE "mod_authnz_fcgi.dep" !ELSE !MESSAGE Warning: cannot find "mod_authnz_fcgi.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authnz_fcgi - Win32 Release" || "$(CFG)" == "mod_authnz_fcgi - Win32 Debug" !IF "$(CFG)" == "mod_authnz_fcgi - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authnz_fcgi - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authnz_fcgi - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authnz_fcgi - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authnz_fcgi - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authnz_fcgi - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authnz_fcgi - Win32 Release" "$(INTDIR)\mod_authnz_fcgi.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authnz_fcgi.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authnz_fcgi.so" /d LONG_NAME="authnz_fcgi_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authnz_fcgi - Win32 Debug" "$(INTDIR)\mod_authnz_fcgi.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authnz_fcgi.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authnz_fcgi.so" /d LONG_NAME="authnz_fcgi_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authnz_fcgi.c "$(INTDIR)\mod_authnz_fcgi.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_user.dep���������������������������������������������������������0000644�0000000�0000050�00000004062�12674411515�017160� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authz_user.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authz_user.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_access_compat.dsp������������������������������������������������������0000644�0000000�0000050�00000011257�12062614564�017615� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_access_compat" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_access_compat - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_access_compat.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_access_compat.mak" CFG="mod_access_compat - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_access_compat - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_access_compat - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_access_compat - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AAA_DECLARE_EXPORT" /Fd"Release\mod_access_compat_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_access_compat.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_access_compat.so" /d LONG_NAME="access_compat_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_access_compat.so" /base:@..\..\os\win32\BaseAddr.ref,mod_access_compat.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_access_compat.so" /base:@..\..\os\win32\BaseAddr.ref,mod_access_compat.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_access_compat.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_access_compat - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AAA_DECLARE_EXPORT" /Fd"Debug\mod_access_compat_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_access_compat.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_access_compat.so" /d LONG_NAME="access_compat_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_access_compat.so" /base:@..\..\os\win32\BaseAddr.ref,mod_access_compat.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_access_compat.so" /base:@..\..\os\win32\BaseAddr.ref,mod_access_compat.so # Begin Special Build Tool TargetPath=.\Debug\mod_access_compat.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_access_compat - Win32 Release" # Name "mod_access_compat - Win32 Debug" # Begin Source File SOURCE=.\mod_access_compat.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_host.dsp���������������������������������������������������������0000644�0000000�0000050�00000011045�10551346420�017166� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authz_host" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authz_host - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authz_host.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authz_host.mak" CFG="mod_authz_host - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authz_host - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authz_host - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authz_host - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_authz_host_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authz_host.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authz_host.so" /d LONG_NAME="authz_host_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authz_host.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_host.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authz_host.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_host.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authz_host.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authz_host - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_authz_host_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authz_host.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authz_host.so" /d LONG_NAME="authz_host_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authz_host.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_host.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authz_host.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_host.so # Begin Special Build Tool TargetPath=.\Debug\mod_authz_host.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authz_host - Win32 Release" # Name "mod_authz_host - Win32 Debug" # Begin Source File SOURCE=.\mod_authz_host.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authnz_fcgi.dsp��������������������������������������������������������0000644�0000000�0000050�00000011464�12553146475�017320� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authnz_fcgi" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authnz_fcgi - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authnz_fcgi.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authnz_fcgi.mak" CFG="mod_authnz_fcgi - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authnz_fcgi - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authnz_fcgi - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authnz_fcgi - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../database" /D "authnz_fcgi_DECLARE_EXPORT" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_authnz_fcgi_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authnz_fcgi.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authnz_fcgi.so" /d LONG_NAME="authnz_fcgi_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authnz_fcgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authnz_fcgi.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authnz_fcgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authnz_fcgi.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authnz_fcgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authnz_fcgi - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../database" /D "authnz_fcgi_DECLARE_EXPORT" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_authnz_fcgi_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authnz_fcgi.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authnz_fcgi.so" /d LONG_NAME="authnz_fcgi_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authnz_fcgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authnz_fcgi.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authnz_fcgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authnz_fcgi.so # Begin Special Build Tool TargetPath=.\Debug\mod_authnz_fcgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authnz_fcgi - Win32 Release" # Name "mod_authnz_fcgi - Win32 Debug" # Begin Source File SOURCE=.\mod_authnz_fcgi.c # End Source File # Begin Source File SOURCE=..\..\include\mod_auth.h # End Source File # Begin Source File SOURCE=..\..\include\util_fcgi.h # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_groupfile.dep����������������������������������������������������0000644�0000000�0000050�00000004233�12674411515�020176� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authz_groupfile.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authz_groupfile.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_varbuf.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_authz_owner.h"\ ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_file.dsp���������������������������������������������������������0000644�0000000�0000050�00000011045�10551346420�017114� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authn_file" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authn_file - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authn_file.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authn_file.mak" CFG="mod_authn_file - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authn_file - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authn_file - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authn_file - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_authn_file_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authn_file.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authn_file.so" /d LONG_NAME="authn_file_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authn_file.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_file.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authn_file.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_file.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authn_file.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authn_file - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_authn_file_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authn_file.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authn_file.so" /d LONG_NAME="authn_file_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authn_file.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_file.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authn_file.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_file.so # Begin Special Build Tool TargetPath=.\Debug\mod_authn_file.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authn_file - Win32 Release" # Name "mod_authn_file - Win32 Debug" # Begin Source File SOURCE=.\mod_authn_file.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_anon.dep���������������������������������������������������������0000644�0000000�0000050�00000004062�12674411515�017121� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authn_anon.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authn_anon.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_dbd.h������������������������������������������������������������0000644�0000000�0000050�00000003665�11637105701�016415� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef MOD_AUTHZ_DBD_H #define MOD_AUTHZ_DBD_H #include "httpd.h" /* Create a set of AUTHZ_DBD_DECLARE(type), AUTHZ_DBD_DECLARE_NONSTD(type) and * AUTHZ_DBD_DECLARE_DATA with appropriate export and import tags */ #if !defined(WIN32) #define AUTHZ_DBD_DECLARE(type) type #define AUTHZ_DBD_DECLARE_NONSTD(type) type #define AUTHZ_DBD_DECLARE_DATA #elif defined(AUTHZ_DBD_DECLARE_STATIC) #define AUTHZ_DBD_DECLARE(type) type __stdcall #define AUTHZ_DBD_DECLARE_NONSTD(type) type #define AUTHZ_DBD_DECLARE_DATA #elif defined(AUTHZ_DBD_DECLARE_EXPORT) #define AUTHZ_DBD_DECLARE(type) __declspec(dllexport) type __stdcall #define AUTHZ_DBD_DECLARE_NONSTD(type) __declspec(dllexport) type #define AUTHZ_DBD_DECLARE_DATA __declspec(dllexport) #else #define AUTHZ_DBD_DECLARE(type) __declspec(dllimport) type __stdcall #define AUTHZ_DBD_DECLARE_NONSTD(type) __declspec(dllimport) type #define AUTHZ_DBD_DECLARE_DATA __declspec(dllimport) #endif APR_DECLARE_EXTERNAL_HOOK(authz_dbd, AUTHZ_DBD, int, client_login, (request_rec *r, int code, const char *action)) #endif ���������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_access_compat.c��������������������������������������������������������0000644�0000000�0000050�00000024103�13250450660�017236� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * Security options etc. * * Module derived from code originally written by Rob McCool * */ #include "apr_strings.h" #include "apr_network_io.h" #include "apr_md5.h" #define APR_WANT_STRFUNC #define APR_WANT_BYTEFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_core.h" #include "http_config.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "mod_auth.h" #if APR_HAVE_NETINET_IN_H #include <netinet/in.h> #endif enum allowdeny_type { T_ENV, T_NENV, T_ALL, T_IP, T_HOST, T_FAIL }; typedef struct { apr_int64_t limited; union { char *from; apr_ipsubnet_t *ip; } x; enum allowdeny_type type; } allowdeny; /* things in the 'order' array */ #define DENY_THEN_ALLOW 0 #define ALLOW_THEN_DENY 1 #define MUTUAL_FAILURE 2 typedef struct { int order[METHODS]; apr_array_header_t *allows; apr_array_header_t *denys; int *satisfy; /* for every method one */ } access_compat_dir_conf; module AP_MODULE_DECLARE_DATA access_compat_module; static void *create_access_compat_dir_config(apr_pool_t *p, char *dummy) { int i; access_compat_dir_conf *conf = (access_compat_dir_conf *)apr_pcalloc(p, sizeof(access_compat_dir_conf)); for (i = 0; i < METHODS; ++i) { conf->order[i] = DENY_THEN_ALLOW; } conf->allows = apr_array_make(p, 1, sizeof(allowdeny)); conf->denys = apr_array_make(p, 1, sizeof(allowdeny)); conf->satisfy = apr_palloc(p, sizeof(*conf->satisfy) * METHODS); for (i = 0; i < METHODS; ++i) { conf->satisfy[i] = SATISFY_NOSPEC; } return (void *)conf; } static const char *order(cmd_parms *cmd, void *dv, const char *arg) { access_compat_dir_conf *d = (access_compat_dir_conf *) dv; int i, o; if (!strcasecmp(arg, "allow,deny")) o = ALLOW_THEN_DENY; else if (!strcasecmp(arg, "deny,allow")) o = DENY_THEN_ALLOW; else if (!strcasecmp(arg, "mutual-failure")) o = MUTUAL_FAILURE; else return "unknown order"; for (i = 0; i < METHODS; ++i) if (cmd->limited & (AP_METHOD_BIT << i)) d->order[i] = o; return NULL; } static const char *satisfy(cmd_parms *cmd, void *dv, const char *arg) { access_compat_dir_conf *d = (access_compat_dir_conf *) dv; int satisfy = SATISFY_NOSPEC; int i; if (!strcasecmp(arg, "all")) { satisfy = SATISFY_ALL; } else if (!strcasecmp(arg, "any")) { satisfy = SATISFY_ANY; } else { return "Satisfy either 'any' or 'all'."; } for (i = 0; i < METHODS; ++i) { if (cmd->limited & (AP_METHOD_BIT << i)) { d->satisfy[i] = satisfy; } } return NULL; } static const char *allow_cmd(cmd_parms *cmd, void *dv, const char *from, const char *where_c) { access_compat_dir_conf *d = (access_compat_dir_conf *) dv; allowdeny *a; char *where = apr_pstrdup(cmd->pool, where_c); char *s; apr_status_t rv; if (strcasecmp(from, "from")) return "allow and deny must be followed by 'from'"; a = (allowdeny *) apr_array_push(cmd->info ? d->allows : d->denys); a->x.from = where; a->limited = cmd->limited; if (!strncasecmp(where, "env=!", 5)) { a->type = T_NENV; a->x.from += 5; } else if (!strncasecmp(where, "env=", 4)) { a->type = T_ENV; a->x.from += 4; } else if (!strcasecmp(where, "all")) { a->type = T_ALL; } else if ((s = ap_strchr(where, '/'))) { *s++ = '\0'; rv = apr_ipsubnet_create(&a->x.ip, where, s, cmd->pool); if(APR_STATUS_IS_EINVAL(rv)) { /* looked nothing like an IP address */ return "An IP address was expected"; } else if (rv != APR_SUCCESS) { return apr_psprintf(cmd->pool, "%pm", &rv); } a->type = T_IP; } else if (!APR_STATUS_IS_EINVAL(rv = apr_ipsubnet_create(&a->x.ip, where, NULL, cmd->pool))) { if (rv != APR_SUCCESS) return apr_psprintf(cmd->pool, "%pm", &rv); a->type = T_IP; } else if (ap_strchr(where, '#')) { return "No comments are allowed here"; } else { /* no slash, didn't look like an IP address => must be a host */ a->type = T_HOST; } return NULL; } static char its_an_allow; static const command_rec access_compat_cmds[] = { AP_INIT_TAKE1("order", order, NULL, OR_LIMIT, "'allow,deny', 'deny,allow', or 'mutual-failure'"), AP_INIT_ITERATE2("allow", allow_cmd, &its_an_allow, OR_LIMIT, "'from' followed by hostnames or IP-address wildcards"), AP_INIT_ITERATE2("deny", allow_cmd, NULL, OR_LIMIT, "'from' followed by hostnames or IP-address wildcards"), AP_INIT_TAKE1("Satisfy", satisfy, NULL, OR_AUTHCFG, "access policy if both allow and require used ('all' or 'any')"), {NULL} }; static int in_domain(const char *domain, const char *what) { int dl = strlen(domain); int wl = strlen(what); if ((wl - dl) >= 0) { if (strcasecmp(domain, &what[wl - dl]) != 0) { return 0; } /* Make sure we matched an *entire* subdomain --- if the user * said 'allow from good.com', we don't want people from nogood.com * to be able to get in. */ if (wl == dl) { return 1; /* matched whole thing */ } else { return (domain[0] == '.' || what[wl - dl - 1] == '.'); } } else { return 0; } } static int find_allowdeny(request_rec *r, apr_array_header_t *a, int method) { allowdeny *ap = (allowdeny *) a->elts; apr_int64_t mmask = (AP_METHOD_BIT << method); int i; int gothost = 0; const char *remotehost = NULL; for (i = 0; i < a->nelts; ++i) { if (!(mmask & ap[i].limited)) { continue; } switch (ap[i].type) { case T_ENV: if (apr_table_get(r->subprocess_env, ap[i].x.from)) { return 1; } break; case T_NENV: if (!apr_table_get(r->subprocess_env, ap[i].x.from)) { return 1; } break; case T_ALL: return 1; case T_IP: if (apr_ipsubnet_test(ap[i].x.ip, r->useragent_addr)) { return 1; } break; case T_HOST: if (!gothost) { int remotehost_is_ip; remotehost = ap_get_useragent_host(r, REMOTE_DOUBLE_REV, &remotehost_is_ip); if ((remotehost == NULL) || remotehost_is_ip) { gothost = 1; } else { gothost = 2; } } if ((gothost == 2) && in_domain(ap[i].x.from, remotehost)) { return 1; } break; case T_FAIL: /* do nothing? */ break; } } return 0; } static int access_compat_ap_satisfies(request_rec *r) { access_compat_dir_conf *conf = (access_compat_dir_conf *) ap_get_module_config(r->per_dir_config, &access_compat_module); return conf->satisfy[r->method_number]; } static int check_dir_access(request_rec *r) { int method = r->method_number; int ret = OK; access_compat_dir_conf *a = (access_compat_dir_conf *) ap_get_module_config(r->per_dir_config, &access_compat_module); if (a->order[method] == ALLOW_THEN_DENY) { ret = HTTP_FORBIDDEN; if (find_allowdeny(r, a->allows, method)) { ret = OK; } if (find_allowdeny(r, a->denys, method)) { ret = HTTP_FORBIDDEN; } } else if (a->order[method] == DENY_THEN_ALLOW) { if (find_allowdeny(r, a->denys, method)) { ret = HTTP_FORBIDDEN; } if (find_allowdeny(r, a->allows, method)) { ret = OK; } } else { if (find_allowdeny(r, a->allows, method) && !find_allowdeny(r, a->denys, method)) { ret = OK; } else { ret = HTTP_FORBIDDEN; } } if (ret == HTTP_FORBIDDEN) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01797) "client denied by server configuration: %s%s", r->filename ? "" : "uri ", r->filename ? r->filename : r->uri); } return ret; } static void register_hooks(apr_pool_t *p) { APR_REGISTER_OPTIONAL_FN(access_compat_ap_satisfies); /* This can be access checker since we don't require r->user to be set. */ ap_hook_check_access(check_dir_access, NULL, NULL, APR_HOOK_MIDDLE, AP_AUTH_INTERNAL_PER_CONF); } AP_DECLARE_MODULE(access_compat) = { STANDARD20_MODULE_STUFF, create_access_compat_dir_config, /* dir config creater */ NULL, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ access_compat_cmds, register_hooks /* register hooks */ }; �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/NWGNUallowmethods����������������������������������������������������������0000644�0000000�0000050�00000010207�11540546347�016703� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = allowmethods # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Method Restriction Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Allowmethods Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/allowmethods.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_allowmethods.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ allowmethods_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_groupfile.dsp����������������������������������������������������0000644�0000000�0000050�00000011273�10551346420�020210� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authz_groupfile" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authz_groupfile - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authz_groupfile.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authz_groupfile.mak" CFG="mod_authz_groupfile - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authz_groupfile - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authz_groupfile - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authz_groupfile - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_authz_groupfile_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authz_groupfile.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authz_groupfile.so" /d LONG_NAME="authz_groupfile_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authz_groupfile.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_groupfile.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authz_groupfile.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_groupfile.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authz_groupfile.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authz_groupfile - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_authz_groupfile_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authz_groupfile.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authz_groupfile.so" /d LONG_NAME="authz_groupfile_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authz_groupfile.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_groupfile.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authz_groupfile.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authz_groupfile.so # Begin Special Build Tool TargetPath=.\Debug\mod_authz_groupfile.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authz_groupfile - Win32 Release" # Name "mod_authz_groupfile - Win32 Debug" # Begin Source File SOURCE=.\mod_authz_groupfile.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_anon.dsp���������������������������������������������������������0000644�0000000�0000050�00000011045�10551346420�017130� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_authn_anon" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_authn_anon - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_authn_anon.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authn_anon.mak" CFG="mod_authn_anon - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authn_anon - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authn_anon - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_authn_anon - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_authn_anon_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_authn_anon.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authn_anon.so" /d LONG_NAME="authn_anon_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_authn_anon.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_anon.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_authn_anon.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_anon.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_authn_anon.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_authn_anon - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_authn_anon_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_authn_anon.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authn_anon.so" /d LONG_NAME="authn_anon_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authn_anon.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_anon.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_authn_anon.so" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_anon.so # Begin Special Build Tool TargetPath=.\Debug\mod_authn_anon.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_authn_anon - Win32 Release" # Name "mod_authn_anon - Win32 Debug" # Begin Source File SOURCE=.\mod_authn_anon.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authz_dbd.c������������������������������������������������������������0000644�0000000�0000050�00000033751�13167204730�016411� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_log.h" #include "http_config.h" #include "ap_provider.h" #include "http_request.h" #include "http_protocol.h" #include "http_core.h" #include "apr_dbd.h" #include "mod_dbd.h" #include "apr_strings.h" #include "mod_authz_dbd.h" #include "mod_auth.h" module AP_MODULE_DECLARE_DATA authz_dbd_module; /* Export a hook for modules that manage clientside sessions * (e.g. mod_auth_cookie) * to deal with those when we successfully login/logout at the server * * XXX: WHY would this be specific to dbd_authz? Why wouldn't we track * this across all authz user providers in a lower level mod, such as * mod_auth_basic/digest? */ APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(authz_dbd, AUTHZ_DBD, int, client_login, (request_rec *r, int code, const char *action), (r, code, action), OK, DECLINED) typedef struct { const char *query; const char *redir_query; int redirect; } authz_dbd_cfg ; static ap_dbd_t *(*dbd_handle)(request_rec*) = NULL; static void (*dbd_prepare)(server_rec*, const char*, const char*) = NULL; static const char *const noerror = "???"; static void *authz_dbd_cr_cfg(apr_pool_t *pool, char *dummy) { authz_dbd_cfg *ret = apr_pcalloc(pool, sizeof(authz_dbd_cfg)); ret->redirect = -1; return ret; } static void *authz_dbd_merge_cfg(apr_pool_t *pool, void *BASE, void *ADD) { authz_dbd_cfg *base = BASE; authz_dbd_cfg *add = ADD; authz_dbd_cfg *ret = apr_palloc(pool, sizeof(authz_dbd_cfg)); ret->query = (add->query == NULL) ? base->query : add->query; ret->redir_query = (add->redir_query == NULL) ? base->redir_query : add->redir_query; ret->redirect = (add->redirect == -1) ? base->redirect : add->redirect; return ret; } static const char *authz_dbd_prepare(cmd_parms *cmd, void *cfg, const char *query) { static unsigned int label_num = 0; char *label; const char *err = ap_check_cmd_context(cmd, NOT_IN_HTACCESS); if (err) return err; if (dbd_prepare == NULL) { dbd_prepare = APR_RETRIEVE_OPTIONAL_FN(ap_dbd_prepare); if (dbd_prepare == NULL) { return "You must load mod_dbd to enable AuthzDBD functions"; } dbd_handle = APR_RETRIEVE_OPTIONAL_FN(ap_dbd_acquire); } label = apr_psprintf(cmd->pool, "authz_dbd_%d", ++label_num); dbd_prepare(cmd->server, query, label); /* save the label here for our own use */ return ap_set_string_slot(cmd, cfg, label); } static const command_rec authz_dbd_cmds[] = { AP_INIT_FLAG("AuthzDBDLoginToReferer", ap_set_flag_slot, (void*)APR_OFFSETOF(authz_dbd_cfg, redirect), ACCESS_CONF, "Whether to redirect to referer on successful login"), AP_INIT_TAKE1("AuthzDBDQuery", authz_dbd_prepare, (void*)APR_OFFSETOF(authz_dbd_cfg, query), ACCESS_CONF, "SQL query for DBD Authz or login"), AP_INIT_TAKE1("AuthzDBDRedirectQuery", authz_dbd_prepare, (void*)APR_OFFSETOF(authz_dbd_cfg, redir_query), ACCESS_CONF, "SQL query to get per-user redirect URL after login"), {NULL} }; static int authz_dbd_login(request_rec *r, authz_dbd_cfg *cfg, const char *action) { int rv; const char *newuri = NULL; int nrows; const char *message; ap_dbd_t *dbd; apr_dbd_prepared_t *query; apr_dbd_results_t *res = NULL; apr_dbd_row_t *row = NULL; if (cfg->query == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01642) "No query configured for %s!", action); return HTTP_INTERNAL_SERVER_ERROR; } dbd = dbd_handle(r); if (dbd == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02902) "No db handle available for %s! " "Check your database access", action); return HTTP_INTERNAL_SERVER_ERROR; } query = apr_hash_get(dbd->prepared, cfg->query, APR_HASH_KEY_STRING); if (query == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01643) "Error retrieving Query for %s!", action); return HTTP_INTERNAL_SERVER_ERROR; } rv = apr_dbd_pvquery(dbd->driver, r->pool, dbd->handle, &nrows, query, r->user, NULL); if (rv == 0) { if (nrows != 1) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01644) "authz_dbd: %s of user %s updated %d rows", action, r->user, nrows); } } else { message = apr_dbd_error(dbd->driver, dbd->handle, rv); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01645) "authz_dbd: query for %s failed; user %s [%s]", action, r->user, message?message:noerror); return HTTP_INTERNAL_SERVER_ERROR; } if (cfg->redirect == 1) { newuri = apr_table_get(r->headers_in, "Referer"); } if (!newuri && cfg->redir_query) { query = apr_hash_get(dbd->prepared, cfg->redir_query, APR_HASH_KEY_STRING); if (query == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01646) "authz_dbd: no redirect query!"); /* OK, this is non-critical; we can just not-redirect */ } else if ((rv = apr_dbd_pvselect(dbd->driver, r->pool, dbd->handle, &res, query, 0, r->user, NULL)) == 0) { for (rv = apr_dbd_get_row(dbd->driver, r->pool, res, &row, -1); rv != -1; rv = apr_dbd_get_row(dbd->driver, r->pool, res, &row, -1)) { if (rv != 0) { message = apr_dbd_error(dbd->driver, dbd->handle, rv); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01647) "authz_dbd in get_row; action=%s user=%s [%s]", action, r->user, message?message:noerror); } else if (newuri == NULL) { newuri = apr_pstrdup(r->pool, apr_dbd_get_entry(dbd->driver, row, 0)); } /* we can't break out here or row won't get cleaned up */ } } else { message = apr_dbd_error(dbd->driver, dbd->handle, rv); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01648) "authz_dbd/redirect for %s of %s [%s]", action, r->user, message?message:noerror); } } if (newuri != NULL) { r->status = HTTP_MOVED_TEMPORARILY; apr_table_set(r->err_headers_out, "Location", newuri); } authz_dbd_run_client_login(r, OK, action); return OK; } static int authz_dbd_group_query(request_rec *r, authz_dbd_cfg *cfg, apr_array_header_t *groups) { /* SELECT group FROM authz WHERE user = %s */ int rv; const char *message; ap_dbd_t *dbd; apr_dbd_prepared_t *query; apr_dbd_results_t *res = NULL; apr_dbd_row_t *row = NULL; if (cfg->query == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01649) "No query configured for dbd-group!"); return HTTP_INTERNAL_SERVER_ERROR; } dbd = dbd_handle(r); if (dbd == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02903) "No db handle available for dbd-query! " "Check your database access"); return HTTP_INTERNAL_SERVER_ERROR; } query = apr_hash_get(dbd->prepared, cfg->query, APR_HASH_KEY_STRING); if (query == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01650) "Error retrieving query for dbd-group!"); return HTTP_INTERNAL_SERVER_ERROR; } rv = apr_dbd_pvselect(dbd->driver, r->pool, dbd->handle, &res, query, 0, r->user, NULL); if (rv == 0) { for (rv = apr_dbd_get_row(dbd->driver, r->pool, res, &row, -1); rv != -1; rv = apr_dbd_get_row(dbd->driver, r->pool, res, &row, -1)) { if (rv == 0) { APR_ARRAY_PUSH(groups, const char *) = apr_pstrdup(r->pool, apr_dbd_get_entry(dbd->driver, row, 0)); } else { message = apr_dbd_error(dbd->driver, dbd->handle, rv); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01651) "authz_dbd in get_row; group query for user=%s [%s]", r->user, message?message:noerror); return HTTP_INTERNAL_SERVER_ERROR; } } } else { message = apr_dbd_error(dbd->driver, dbd->handle, rv); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01652) "authz_dbd, in groups query for %s [%s]", r->user, message?message:noerror); return HTTP_INTERNAL_SERVER_ERROR; } return OK; } static authz_status dbdgroup_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { int rv; const char *w; apr_array_header_t *groups; const char *err = NULL; const ap_expr_info_t *expr = parsed_require_args; const char *require; const char *t; authz_dbd_cfg *cfg = ap_get_module_config(r->per_dir_config, &authz_dbd_module); if (!r->user) { return AUTHZ_DENIED_NO_USER; } groups = apr_array_make(r->pool, 4, sizeof(const char*)); rv = authz_dbd_group_query(r, cfg, groups); if (rv != OK) { return AUTHZ_GENERAL_ERROR; } require = ap_expr_str_exec(r, expr, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02590) "authz_dbd authorize: require dbd-group: Can't " "evaluate require expression: %s", err); return AUTHZ_DENIED; } t = require; while (t[0]) { w = ap_getword_white(r->pool, &t); if (ap_array_str_contains(groups, w)) { return AUTHZ_GRANTED; } } return AUTHZ_DENIED; } static authz_status dbdlogin_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { authz_dbd_cfg *cfg = ap_get_module_config(r->per_dir_config, &authz_dbd_module); if (!r->user) { return AUTHZ_DENIED_NO_USER; } return (authz_dbd_login(r, cfg, "login") == OK ? AUTHZ_GRANTED : AUTHZ_DENIED); } static authz_status dbdlogout_check_authorization(request_rec *r, const char *require_args, const void *parsed_require_args) { authz_dbd_cfg *cfg = ap_get_module_config(r->per_dir_config, &authz_dbd_module); if (!r->user) { return AUTHZ_DENIED_NO_USER; } return (authz_dbd_login(r, cfg, "logout") == OK ? AUTHZ_GRANTED : AUTHZ_DENIED); } static const char *dbd_parse_config(cmd_parms *cmd, const char *require_line, const void **parsed_require_line) { const char *expr_err = NULL; ap_expr_info_t *expr; expr = ap_expr_parse_cmd(cmd, require_line, AP_EXPR_FLAG_STRING_RESULT, &expr_err, NULL); if (expr_err) { return apr_pstrcat(cmd->temp_pool, "Cannot parse expression in require line: ", expr_err, NULL); } *parsed_require_line = expr; return NULL; } static const authz_provider authz_dbdgroup_provider = { &dbdgroup_check_authorization, &dbd_parse_config, }; static const authz_provider authz_dbdlogin_provider = { &dbdlogin_check_authorization, NULL, }; static const authz_provider authz_dbdlogout_provider = { &dbdlogout_check_authorization, NULL, }; static void authz_dbd_hooks(apr_pool_t *p) { ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "dbd-group", AUTHZ_PROVIDER_VERSION, &authz_dbdgroup_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "dbd-login", AUTHZ_PROVIDER_VERSION, &authz_dbdlogin_provider, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "dbd-logout", AUTHZ_PROVIDER_VERSION, &authz_dbdlogout_provider, AP_AUTH_INTERNAL_PER_CONF); } AP_DECLARE_MODULE(authz_dbd) = { STANDARD20_MODULE_STUFF, authz_dbd_cr_cfg, authz_dbd_merge_cfg, NULL, NULL, authz_dbd_cmds, authz_dbd_hooks }; �����������������������httpd-2.4.41/modules/aaa/mod_authnz_fcgi.c����������������������������������������������������������0000644�0000000�0000050�00000133276�12464757706�016770� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_hash.h" #include "apr_lib.h" #include "apr_strings.h" #include "ap_provider.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_protocol.h" #include "http_request.h" #include "http_log.h" #include "util_script.h" #include "ap_provider.h" #include "mod_auth.h" #include "util_fcgi.h" #include "ap_mmn.h" module AP_MODULE_DECLARE_DATA authnz_fcgi_module; typedef struct { const char *name; /* provider name */ const char *backend; /* backend address, as configured */ const char *host; apr_port_t port; apr_sockaddr_t *backend_addrs; int is_authn; int is_authz; } fcgi_provider_conf; typedef struct { const char *name; /* provider name */ const char *default_user; /* this is user if authorizer returns * success and a user expression yields * empty string */ ap_expr_info_t *user_expr; /* expr to evaluate to set r->user */ char authoritative; /* fail request if user is rejected? */ char require_basic_auth; /* fail if client didn't send credentials? */ } fcgi_dir_conf; typedef struct { /* If an "authnz" provider successfully authenticates, record * the provider name here for checking during authz. */ const char *successful_authnz_provider; } fcgi_request_notes; static apr_hash_t *fcgi_authn_providers, *fcgi_authz_providers; #define FCGI_IO_TIMEOUT apr_time_from_sec(30) #ifndef NON200_RESPONSE_BUF_LEN #define NON200_RESPONSE_BUF_LEN 8192 #endif /* fcgi://{hostname|IPv4|IPv6}:port[/] */ #define FCGI_BACKEND_REGEX_STR "m%^fcgi://(.*):(\\d{1,5})/?$%" /* * utility function to connect to a peer; generally useful, but * wait for AF_UNIX support in this mod before thinking about how * to make it available to other modules */ static apr_status_t connect_to_peer(apr_socket_t **newsock, request_rec *r, apr_sockaddr_t *backend_addrs, const char *backend_name, apr_interval_time_t timeout) { apr_status_t rv = APR_EINVAL; /* returned if no backend addr was provided */ int connected = 0; apr_sockaddr_t *addr = backend_addrs; while (addr && !connected) { int loglevel = addr->next ? APLOG_DEBUG : APLOG_ERR; rv = apr_socket_create(newsock, addr->family, SOCK_STREAM, 0, r->pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, loglevel, rv, r, APLOGNO(02494) "error creating family %d socket " "for target %s", addr->family, backend_name); addr = addr->next; continue; } apr_socket_opt_set(*newsock, APR_TCP_NODELAY, 1); apr_socket_timeout_set(*newsock, timeout ? timeout : r->server->timeout); rv = apr_socket_connect(*newsock, addr); if (rv != APR_SUCCESS) { apr_socket_close(*newsock); ap_log_rerror(APLOG_MARK, loglevel, rv, r, APLOGNO(02495) "attempt to connect to %pI (%s) " "failed", addr, backend_name); addr = addr->next; continue; } connected = 1; } return rv; #undef FN_LOG_MARK } static void log_provider_info(const fcgi_provider_conf *conf, request_rec *r) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02496) "name %s, backend %s, host %s, port %d, " "first address %pI, %c%c", conf->name, conf->backend, conf->host, (int)conf->port, conf->backend_addrs, conf->is_authn ? 'N' : '_', conf->is_authz ? 'Z' : '_'); } static void setupenv(request_rec *r, const char *password, const char *apache_role) { ap_add_common_vars(r); ap_add_cgi_vars(r); apr_table_setn(r->subprocess_env, "FCGI_ROLE", AP_FCGI_AUTHORIZER_STR); if (apache_role) { apr_table_setn(r->subprocess_env, "FCGI_APACHE_ROLE", apache_role); } if (password) { apr_table_setn(r->subprocess_env, "REMOTE_PASSWD", password); } /* Drop the variables CONTENT_LENGTH, PATH_INFO, PATH_TRANSLATED, * SCRIPT_NAME and most Hop-By-Hop headers - EXCEPT we will pass * PROXY_AUTH to allow CGI to perform proxy auth for httpd */ apr_table_unset(r->subprocess_env, "CONTENT_LENGTH"); apr_table_unset(r->subprocess_env, "PATH_INFO"); apr_table_unset(r->subprocess_env, "PATH_TRANSLATED"); apr_table_unset(r->subprocess_env, "SCRIPT_NAME"); apr_table_unset(r->subprocess_env, "HTTP_KEEP_ALIVE"); apr_table_unset(r->subprocess_env, "HTTP_TE"); apr_table_unset(r->subprocess_env, "HTTP_TRAILER"); apr_table_unset(r->subprocess_env, "HTTP_TRANSFER_ENCODING"); apr_table_unset(r->subprocess_env, "HTTP_UPGRADE"); /* Connection hop-by-hop header to prevent the CGI from hanging */ apr_table_setn(r->subprocess_env, "HTTP_CONNECTION", "close"); } static apr_status_t recv_data(const fcgi_provider_conf *conf, request_rec *r, apr_socket_t *s, char *buf, apr_size_t *buflen) { apr_status_t rv; rv = apr_socket_recv(s, buf, buflen); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02497) "Couldn't read from backend %s", conf->backend); return rv; } #if AP_MODULE_MAGIC_AT_LEAST(20130702,2) ap_log_rdata(APLOG_MARK, APLOG_TRACE5, r, "FastCGI data received", buf, *buflen, AP_LOG_DATA_SHOW_OFFSET); #endif return APR_SUCCESS; } static apr_status_t recv_data_full(const fcgi_provider_conf *conf, request_rec *r, apr_socket_t *s, char *buf, apr_size_t buflen) { apr_size_t readlen; apr_size_t cumulative_len = 0; apr_status_t rv; do { readlen = buflen - cumulative_len; rv = recv_data(conf, r, s, buf + cumulative_len, &readlen); if (rv != APR_SUCCESS) { return rv; } cumulative_len += readlen; } while (cumulative_len < buflen); return APR_SUCCESS; } static apr_status_t sendv_data(const fcgi_provider_conf *conf, request_rec *r, apr_socket_t *s, struct iovec *vec, int nvec, apr_size_t *len) { apr_size_t to_write = 0, written = 0; apr_status_t rv = APR_SUCCESS; int i, offset; for (i = 0; i < nvec; i++) { to_write += vec[i].iov_len; #if AP_MODULE_MAGIC_AT_LEAST(20130702,2) ap_log_rdata(APLOG_MARK, APLOG_TRACE5, r, "FastCGI data sent", vec[i].iov_base, vec[i].iov_len, AP_LOG_DATA_SHOW_OFFSET); #endif } offset = 0; while (to_write) { apr_size_t n = 0; rv = apr_socket_sendv(s, vec + offset, nvec - offset, &n); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02498) "Sending data to %s failed", conf->backend); break; } if (n > 0) { written += n; if (written >= to_write) break; /* short circuit out */ for (i = offset; i < nvec; ) { if (n >= vec[i].iov_len) { offset++; n -= vec[i++].iov_len; } else { vec[i].iov_len -= n; vec[i].iov_base = (char *) vec[i].iov_base + n; break; } } } } *len = written; return rv; } static apr_status_t send_begin_request(request_rec *r, const fcgi_provider_conf *conf, apr_socket_t *s, int role, apr_uint16_t request_id) { struct iovec vec[2]; ap_fcgi_header header; unsigned char farray[AP_FCGI_HEADER_LEN]; ap_fcgi_begin_request_body brb; unsigned char abrb[AP_FCGI_HEADER_LEN]; apr_size_t len; ap_fcgi_fill_in_header(&header, AP_FCGI_BEGIN_REQUEST, request_id, sizeof(abrb), 0); ap_fcgi_fill_in_request_body(&brb, role, 0 /* *NOT* AP_FCGI_KEEP_CONN */); ap_fcgi_header_to_array(&header, farray); ap_fcgi_begin_request_body_to_array(&brb, abrb); vec[0].iov_base = (void *)farray; vec[0].iov_len = sizeof(farray); vec[1].iov_base = (void *)abrb; vec[1].iov_len = sizeof(abrb); return sendv_data(conf, r, s, vec, 2, &len); } static apr_status_t send_environment(apr_socket_t *s, const fcgi_provider_conf *conf, request_rec *r, apr_uint16_t request_id, apr_pool_t *temp_pool) { const char *fn = "send_environment"; const apr_array_header_t *envarr; const apr_table_entry_t *elts; struct iovec vec[2]; ap_fcgi_header header; unsigned char farray[AP_FCGI_HEADER_LEN]; char *body; apr_status_t rv; apr_size_t avail_len, len, required_len; int i, next_elem, starting_elem; envarr = apr_table_elts(r->subprocess_env); elts = (const apr_table_entry_t *) envarr->elts; if (APLOG_R_IS_LEVEL(r, APLOG_TRACE2)) { for (i = 0; i < envarr->nelts; ++i) { if (!elts[i].key) { continue; } ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "%s: '%s': '%s'", fn, elts[i].key, !strcmp(elts[i].key, "REMOTE_PASSWD") ? "XXXXXXXX" : elts[i].val); } } /* Send envvars over in as many FastCGI records as it takes, */ next_elem = 0; /* starting with the first one */ avail_len = 16 * 1024; /* our limit per record, which could have been up * to AP_FCGI_MAX_CONTENT_LEN */ while (next_elem < envarr->nelts) { starting_elem = next_elem; required_len = ap_fcgi_encoded_env_len(r->subprocess_env, avail_len, &next_elem); if (!required_len) { if (next_elem < envarr->nelts) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02499) "couldn't encode envvar '%s' in %" APR_SIZE_T_FMT " bytes", elts[next_elem].key, avail_len); /* skip this envvar and continue */ ++next_elem; continue; } /* only an unused element at the end of the array */ break; } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02500) "required len for encoding envvars: %" APR_SIZE_T_FMT ", %d/%d elems processed so far", required_len, next_elem, envarr->nelts); body = apr_palloc(temp_pool, required_len); rv = ap_fcgi_encode_env(r, r->subprocess_env, body, required_len, &starting_elem); /* we pre-compute, so we can't run out of space */ ap_assert(rv == APR_SUCCESS); /* compute and encode must be in sync */ ap_assert(starting_elem == next_elem); ap_fcgi_fill_in_header(&header, AP_FCGI_PARAMS, request_id, (apr_uint16_t)required_len, 0); ap_fcgi_header_to_array(&header, farray); vec[0].iov_base = (void *)farray; vec[0].iov_len = sizeof(farray); vec[1].iov_base = body; vec[1].iov_len = required_len; rv = sendv_data(conf, r, s, vec, 2, &len); apr_pool_clear(temp_pool); if (rv) { return rv; } } /* Envvars sent, so say we're done */ ap_fcgi_fill_in_header(&header, AP_FCGI_PARAMS, request_id, 0, 0); ap_fcgi_header_to_array(&header, farray); vec[0].iov_base = (void *)farray; vec[0].iov_len = sizeof(farray); return sendv_data(conf, r, s, vec, 1, &len); } /* * This header-state logic is from mod_proxy_fcgi. */ enum { HDR_STATE_READING_HEADERS, HDR_STATE_GOT_CR, HDR_STATE_GOT_CRLF, HDR_STATE_GOT_CRLFCR, HDR_STATE_GOT_LF, HDR_STATE_DONE_WITH_HEADERS }; /* Try to find the end of the script headers in the response from the back * end fastcgi server. STATE holds the current header parsing state for this * request. * * Returns 0 if it can't find the end of the headers, and 1 if it found the * end of the headers. */ static int handle_headers(request_rec *r, int *state, const char *readbuf, apr_size_t readlen) { const char *itr = readbuf; while (readlen--) { if (*itr == '\r') { switch (*state) { case HDR_STATE_GOT_CRLF: *state = HDR_STATE_GOT_CRLFCR; break; default: *state = HDR_STATE_GOT_CR; break; } } else if (*itr == '\n') { switch (*state) { case HDR_STATE_GOT_LF: *state = HDR_STATE_DONE_WITH_HEADERS; break; case HDR_STATE_GOT_CR: *state = HDR_STATE_GOT_CRLF; break; case HDR_STATE_GOT_CRLFCR: *state = HDR_STATE_DONE_WITH_HEADERS; break; default: *state = HDR_STATE_GOT_LF; break; } } else { *state = HDR_STATE_READING_HEADERS; } if (*state == HDR_STATE_DONE_WITH_HEADERS) break; ++itr; } if (*state == HDR_STATE_DONE_WITH_HEADERS) { return 1; } return 0; } /* * handle_response() is based on mod_proxy_fcgi's dispatch() */ static apr_status_t handle_response(const fcgi_provider_conf *conf, request_rec *r, apr_socket_t *s, apr_pool_t *temp_pool, apr_uint16_t request_id, char *rspbuf, apr_size_t *rspbuflen) { apr_bucket *b; apr_bucket_brigade *ob; apr_size_t orspbuflen = 0; apr_status_t rv = APR_SUCCESS; const char *fn = "handle_response"; int header_state = HDR_STATE_READING_HEADERS; int seen_end_of_headers = 0, done = 0; if (rspbuflen) { orspbuflen = *rspbuflen; *rspbuflen = 0; /* unless we actually read something */ } ob = apr_brigade_create(r->pool, r->connection->bucket_alloc); while (!done && rv == APR_SUCCESS) { /* Keep reading FastCGI records until * we get AP_FCGI_END_REQUEST (done) * or an error occurs. */ apr_size_t readbuflen; apr_uint16_t clen; apr_uint16_t rid; char readbuf[AP_IOBUFSIZE + 1]; unsigned char farray[AP_FCGI_HEADER_LEN]; unsigned char plen; unsigned char type; unsigned char version; rv = recv_data_full(conf, r, s, (char *)farray, AP_FCGI_HEADER_LEN); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02501) "%s: Error occurred before reading " "entire header", fn); break; } ap_fcgi_header_fields_from_array(&version, &type, &rid, &clen, &plen, farray); if (version != AP_FCGI_VERSION_1) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02502) "%s: Got bogus FastCGI header " "version %d", fn, (int)version); rv = APR_EINVAL; break; } if (rid != request_id) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02503) "%s: Got bogus FastCGI header " "request id %d, expected %d", fn, rid, request_id); rv = APR_EINVAL; break; } recv_again: /* if we need to keep reading more of a record's content */ if (clen > sizeof(readbuf) - 1) { readbuflen = sizeof(readbuf) - 1; } else { readbuflen = clen; } /* * Now get the actual content of the record. */ if (readbuflen != 0) { rv = recv_data(conf, r, s, readbuf, &readbuflen); if (rv != APR_SUCCESS) { break; } readbuf[readbuflen] = '\0'; } switch (type) { case AP_FCGI_STDOUT: /* Response headers and optional body */ if (clen != 0) { b = apr_bucket_transient_create(readbuf, readbuflen, r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ob, b); if (!seen_end_of_headers) { int st = handle_headers(r, &header_state, readbuf, readbuflen); if (st == 1) { int status; seen_end_of_headers = 1; status = ap_scan_script_header_err_brigade_ex(r, ob, NULL, APLOG_MODULE_INDEX); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02504) "%s: script header " "parsing -> %d/%d", fn, status, r->status); if (rspbuf) { /* caller wants to see response body, * if any */ apr_status_t tmprv; if (rspbuflen) { *rspbuflen = orspbuflen; } tmprv = apr_brigade_flatten(ob, rspbuf, rspbuflen); if (tmprv != APR_SUCCESS) { /* should not occur for these bucket types; * does not indicate overflow */ ap_log_rerror(APLOG_MARK, APLOG_ERR, tmprv, r, APLOGNO(02505) "%s: error " "flattening response body", fn); } } if (status != OK) { r->status = status; ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02506) "%s: Error parsing " "script headers from %s", fn, conf->backend); rv = APR_EINVAL; break; } apr_pool_clear(temp_pool); } else { /* We're still looking for the end of the * headers, so this part of the data will need * to persist. */ apr_bucket_setaside(b, temp_pool); } } /* If we didn't read all the data go back and get the * rest of it. */ if (clen > readbuflen) { clen -= readbuflen; goto recv_again; } } break; case AP_FCGI_STDERR: /* Text to log */ if (clen) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02507) "%s: Logged from %s: '%s'", fn, conf->backend, readbuf); } if (clen > readbuflen) { clen -= readbuflen; goto recv_again; /* continue reading this record */ } break; case AP_FCGI_END_REQUEST: done = 1; break; default: ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02508) "%s: Got bogus FastCGI record type " "%d", fn, type); break; } /* Leave on above switch's inner error. */ if (rv != APR_SUCCESS) { break; } /* * Read/discard any trailing padding. */ if (plen) { rv = recv_data_full(conf, r, s, readbuf, plen); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02509) "%s: Error occurred reading " "padding", fn); break; } } } apr_brigade_cleanup(ob); if (rv == APR_SUCCESS && !seen_end_of_headers) { rv = APR_EINVAL; ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02510) "%s: Never reached end of script headers", fn); } return rv; } /* almost from mod_fcgid */ static int mod_fcgid_modify_auth_header(void *vars, const char *key, const char *val) { /* When the application gives a 200 response, the server ignores response headers whose names aren't prefixed with Variable- prefix, and ignores any response content */ if (strncasecmp(key, "Variable-", 9) == 0) apr_table_setn(vars, key, val); return 1; } static int fix_auth_header(void *vr, const char *key, const char *val) { request_rec *r = vr; ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "moving %s->%s", key, val); apr_table_unset(r->err_headers_out, key); apr_table_setn(r->subprocess_env, key + 9, val); return 1; } static void req_rsp(request_rec *r, const fcgi_provider_conf *conf, const char *password, const char *apache_role, char *rspbuf, apr_size_t *rspbuflen) { const char *fn = "req_rsp"; apr_pool_t *temp_pool; apr_size_t orspbuflen = 0; apr_socket_t *s; apr_status_t rv; apr_table_t *saved_subprocess_env = apr_table_copy(r->pool, r->subprocess_env); if (rspbuflen) { orspbuflen = *rspbuflen; *rspbuflen = 0; /* unless we actually read something */ } apr_pool_create(&temp_pool, r->pool); setupenv(r, password, apache_role); rv = connect_to_peer(&s, r, conf->backend_addrs, conf->backend, FCGI_IO_TIMEOUT); if (rv == APR_SUCCESS) { apr_uint16_t request_id = 1; rv = send_begin_request(r, conf, s, AP_FCGI_AUTHORIZER, request_id); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02511) "%s: Failed writing request to %s", fn, conf->backend); } if (rv == APR_SUCCESS) { rv = send_environment(s, conf, r, request_id, temp_pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02512) "%s: Failed writing environment " "to %s", fn, conf->backend); } } /* The responder owns the request body, not the authorizer. * Don't even send an empty AP_FCGI_STDIN block. libfcgi doesn't care, * but it wasn't sent to authorizers by mod_fastcgi or mod_fcgi and * may be unhandled by the app. Additionally, the FastCGI spec does * not mention FCGI_STDIN in the Authorizer description, though it * does describe FCGI_STDIN elsewhere in more general terms than * simply a wrapper for the client's request body. */ if (rv == APR_SUCCESS) { if (rspbuflen) { *rspbuflen = orspbuflen; } rv = handle_response(conf, r, s, temp_pool, request_id, rspbuf, rspbuflen); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02514) "%s: Failed handling response " "from %s", fn, conf->backend); } } apr_socket_close(s); } if (rv != APR_SUCCESS) { /* some sort of mechanical problem */ r->status = HTTP_INTERNAL_SERVER_ERROR; } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02515) "%s: Received HTTP status %d", fn, r->status); } r->subprocess_env = saved_subprocess_env; if (r->status == HTTP_OK) { /* An Authorizer application's 200 response may include headers * whose names are prefixed with Variable-, and they should be * available to subsequent phases via subprocess_env (and yanked * from the client response). */ apr_table_t *vars = apr_table_make(temp_pool, /* not used to allocate * any values that end up * in r->(anything) */ 10); apr_table_do(mod_fcgid_modify_auth_header, vars, r->err_headers_out, NULL); apr_table_do(fix_auth_header, r, vars, NULL); } apr_pool_destroy(temp_pool); } static int fcgi_check_authn(request_rec *r) { const char *fn = "fcgi_check_authn"; fcgi_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &authnz_fcgi_module); const char *password = NULL; const fcgi_provider_conf *conf; const char *prov; const char *auth_type; char rspbuf[NON200_RESPONSE_BUF_LEN + 1]; /* extra byte for '\0' */ apr_size_t rspbuflen = sizeof rspbuf - 1; int res; prov = dconf && dconf->name ? dconf->name : NULL; if (!prov || !strcasecmp(prov, "None")) { return DECLINED; } auth_type = ap_auth_type(r); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02516) "%s, prov %s, authoritative %s, " "require-basic %s, user expr? %s type %s", fn, prov, dconf->authoritative ? "yes" : "no", dconf->require_basic_auth ? "yes" : "no", dconf->user_expr ? "yes" : "no", auth_type); if (auth_type && !strcasecmp(auth_type, "Basic")) { if ((res = ap_get_basic_auth_pw(r, &password))) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02517) "%s: couldn't retrieve basic auth " "password", fn); if (dconf->require_basic_auth) { return res; } password = NULL; } } conf = apr_hash_get(fcgi_authn_providers, prov, APR_HASH_KEY_STRING); if (!conf) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(02518) "%s: can't find config for provider %s", fn, prov); return HTTP_INTERNAL_SERVER_ERROR; } if (APLOGrdebug(r)) { log_provider_info(conf, r); } req_rsp(r, conf, password, AP_FCGI_APACHE_ROLE_AUTHENTICATOR_STR, rspbuf, &rspbuflen); if (r->status == HTTP_OK) { if (dconf->user_expr) { const char *err; const char *user = ap_expr_str_exec(r, dconf->user_expr, &err); if (user && strlen(user)) { r->user = apr_pstrdup(r->pool, user); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02519) "%s: Setting user to '%s'", fn, r->user); } else if (user && dconf->default_user) { r->user = apr_pstrdup(r->pool, dconf->default_user); } else if (user) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02520) "%s: Failure extracting user " "after calling authorizer: user expression " "yielded empty string (variable not set?)", fn); r->status = HTTP_INTERNAL_SERVER_ERROR; } else { /* unexpected error, not even an empty string was returned */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02521) "%s: Failure extracting user " "after calling authorizer: %s", fn, err); r->status = HTTP_INTERNAL_SERVER_ERROR; } } if (conf->is_authz) { /* combined authn/authz phase, so app won't be invoked for authz * * Remember that the request was successfully authorized by this * provider. */ fcgi_request_notes *rnotes = apr_palloc(r->pool, sizeof(*rnotes)); rnotes->successful_authnz_provider = conf->name; ap_set_module_config(r->request_config, &authnz_fcgi_module, rnotes); } } else { /* From the spec: * For Authorizer response status values other than "200" (OK), the * Web server denies access and sends the response status, headers, * and content back to the HTTP client. * But: * This only makes sense if this authorizer is authoritative. */ if (rspbuflen > 0 && !dconf->authoritative) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02522) "%s: Ignoring response body from non-" "authoritative authorizer", fn); } else if (rspbuflen > 0) { if (rspbuflen == sizeof rspbuf - 1) { /* apr_brigade_flatten() interface :( */ ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02523) "%s: possible overflow handling " "response body", fn); } rspbuf[rspbuflen] = '\0'; /* we reserved an extra byte for '\0' */ ap_custom_response(r, r->status, rspbuf); /* API makes a copy */ } } return r->status == HTTP_OK ? OK : dconf->authoritative ? r->status : DECLINED; } static authn_status fcgi_check_password(request_rec *r, const char *user, const char *password) { const char *fn = "fcgi_check_password"; const char *prov = apr_table_get(r->notes, AUTHN_PROVIDER_NAME_NOTE); const fcgi_provider_conf *conf; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02524) "%s(%s, XXX): provider %s", fn, user, prov); if (!prov) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(02525) "%s: provider note isn't set", fn); return AUTH_GENERAL_ERROR; } conf = apr_hash_get(fcgi_authn_providers, prov, APR_HASH_KEY_STRING); if (!conf) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(02526) "%s: can't find config for provider %s", fn, prov); return AUTH_GENERAL_ERROR; } if (APLOGrdebug(r)) { log_provider_info(conf, r); } req_rsp(r, conf, password, /* combined authn and authz: FCGI_APACHE_ROLE not set */ conf->is_authz ? NULL : AP_FCGI_APACHE_ROLE_AUTHENTICATOR_STR, NULL, NULL); if (r->status == HTTP_OK) { if (conf->is_authz) { /* combined authn/authz phase, so app won't be invoked for authz * * Remember that the request was successfully authorized by this * provider. */ fcgi_request_notes *rnotes = apr_palloc(r->pool, sizeof(*rnotes)); rnotes->successful_authnz_provider = conf->name; ap_set_module_config(r->request_config, &authnz_fcgi_module, rnotes); } return AUTH_GRANTED; } else if (r->status == HTTP_INTERNAL_SERVER_ERROR) { return AUTH_GENERAL_ERROR; } else { return AUTH_DENIED; } } static const authn_provider fcgi_authn_provider = { &fcgi_check_password, NULL /* get-realm-hash not supported */ }; static authz_status fcgi_authz_check(request_rec *r, const char *require_line, const void *parsed_require_line) { const char *fn = "fcgi_authz_check"; const char *prov = apr_table_get(r->notes, AUTHZ_PROVIDER_NAME_NOTE); const fcgi_provider_conf *conf; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02527) "%s(%s)", fn, require_line); if (!prov) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(02528) "%s: provider note isn't set", fn); return AUTHZ_GENERAL_ERROR; } conf = apr_hash_get(fcgi_authz_providers, prov, APR_HASH_KEY_STRING); if (!conf) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(02529) "%s: can't find config for provider %s", fn, prov); return AUTHZ_GENERAL_ERROR; } if (APLOGrdebug(r)) { log_provider_info(conf, r); } if (!r->user) { return AUTHZ_DENIED_NO_USER; } if (conf->is_authn) { /* combined authn/authz phase, so app won't be invoked for authz * * If the provider already successfully authorized this request, * success. */ fcgi_request_notes *rnotes = ap_get_module_config(r->request_config, &authnz_fcgi_module); if (rnotes && rnotes->successful_authnz_provider && !strcmp(rnotes->successful_authnz_provider, conf->name)) { return AUTHZ_GRANTED; } else { return AUTHZ_DENIED; } } else { req_rsp(r, conf, NULL, AP_FCGI_APACHE_ROLE_AUTHORIZER_STR, NULL, NULL); if (r->status == HTTP_OK) { return AUTHZ_GRANTED; } else if (r->status == HTTP_INTERNAL_SERVER_ERROR) { return AUTHZ_GENERAL_ERROR; } else { return AUTHZ_DENIED; } } } static const char *fcgi_authz_parse(cmd_parms *cmd, const char *require_line, const void **parsed_require_line) { /* Allowed form: Require [not] registered-provider-name<EOS> */ if (strcmp(require_line, "")) { return "mod_authnz_fcgi doesn't support restrictions on providers " "(i.e., multiple require args)"; } return NULL; } static const authz_provider fcgi_authz_provider = { &fcgi_authz_check, &fcgi_authz_parse, }; static const char *fcgi_check_authn_provider(cmd_parms *cmd, void *d, int argc, char *const argv[]) { const char *dname = "AuthnzFcgiCheckAuthnProvider"; fcgi_dir_conf *dc = d; int ca = 0; if (ca >= argc) { return apr_pstrcat(cmd->pool, dname, ": No provider given", NULL); } dc->name = argv[ca]; ca++; if (!strcasecmp(dc->name, "None")) { if (ca < argc) { return "Options aren't supported with \"None\""; } } while (ca < argc) { const char *var = argv[ca], *val; int badarg = 0; ca++; /* at present, everything needs an argument */ if (ca >= argc) { return apr_pstrcat(cmd->pool, dname, ": ", var, "needs an argument", NULL); } val = argv[ca]; ca++; if (!strcasecmp(var, "Authoritative")) { if (!strcasecmp(val, "On")) { dc->authoritative = 1; } else if (!strcasecmp(val, "Off")) { dc->authoritative = 0; } else { badarg = 1; } } else if (!strcasecmp(var, "DefaultUser")) { dc->default_user = val; } else if (!strcasecmp(var, "RequireBasicAuth")) { if (!strcasecmp(val, "On")) { dc->require_basic_auth = 1; } else if (!strcasecmp(val, "Off")) { dc->require_basic_auth = 0; } else { badarg = 1; } } else if (!strcasecmp(var, "UserExpr")) { const char *err; int flags = AP_EXPR_FLAG_DONT_VARY | AP_EXPR_FLAG_RESTRICTED | AP_EXPR_FLAG_STRING_RESULT; dc->user_expr = ap_expr_parse_cmd(cmd, val, flags, &err, NULL); if (err) { return apr_psprintf(cmd->pool, "%s: Error parsing '%s': '%s'", dname, val, err); } } else { return apr_pstrcat(cmd->pool, dname, ": Unexpected option '", var, "'", NULL); } if (badarg) { return apr_pstrcat(cmd->pool, dname, ": Bad argument '", val, "' to option '", var, "'", NULL); } } return NULL; } /* AuthnzFcgiAuthDefineProvider {authn|authz|authnz} provider-name \ * fcgi://backendhost:backendport/ */ static const char *fcgi_define_provider(cmd_parms *cmd, void *d, int argc, char *const argv[]) { const char *dname = "AuthnzFcgiDefineProvider"; ap_rxplus_t *fcgi_backend_regex; apr_status_t rv; char *host; const char *err, *stype; fcgi_provider_conf *conf = apr_pcalloc(cmd->pool, sizeof(*conf)); int ca = 0, rc, port; fcgi_backend_regex = ap_rxplus_compile(cmd->pool, FCGI_BACKEND_REGEX_STR); if (!fcgi_backend_regex) { return apr_psprintf(cmd->pool, "%s: failed to compile regexec '%s'", dname, FCGI_BACKEND_REGEX_STR); } err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err) return err; if (ca >= argc) { return apr_pstrcat(cmd->pool, dname, ": No type given", NULL); } stype = argv[ca]; ca++; if (!strcasecmp(stype, "authn")) { conf->is_authn = 1; } else if (!strcasecmp(stype, "authz")) { conf->is_authz = 1; } else if (!strcasecmp(stype, "authnz")) { conf->is_authn = conf->is_authz = 1; } else { return apr_pstrcat(cmd->pool, dname, ": Invalid provider type ", stype, NULL); } if (ca >= argc) { return apr_pstrcat(cmd->pool, dname, ": No provider name given", NULL); } conf->name = argv[ca]; ca++; if (ca >= argc) { return apr_pstrcat(cmd->pool, dname, ": No backend-address given", NULL); } rc = ap_rxplus_exec(cmd->pool, fcgi_backend_regex, argv[ca], NULL); if (!rc || ap_rxplus_nmatch(fcgi_backend_regex) != 3) { return apr_pstrcat(cmd->pool, dname, ": backend-address '", argv[ca], "' has invalid form", NULL); } host = ap_rxplus_pmatch(cmd->pool, fcgi_backend_regex, 1); if (host[0] == '[' && host[strlen(host) - 1] == ']') { host += 1; host[strlen(host) - 1] = '\0'; } port = atoi(ap_rxplus_pmatch(cmd->pool, fcgi_backend_regex, 2)); if (port > 65535) { return apr_pstrcat(cmd->pool, dname, ": backend-address '", argv[ca], "' has invalid port", NULL); } conf->backend = argv[ca]; conf->host = host; conf->port = port; ca++; rv = apr_sockaddr_info_get(&conf->backend_addrs, conf->host, APR_UNSPEC, conf->port, 0, cmd->pool); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_STARTUP|APLOG_CRIT, rv, NULL, APLOGNO(02530) "Address %s could not be resolved", conf->backend); return apr_pstrcat(cmd->pool, dname, ": Error resolving backend address", NULL); } if (ca != argc) { return apr_pstrcat(cmd->pool, dname, ": Unexpected parameter ", argv[ca], NULL); } if (conf->is_authn) { apr_hash_set(fcgi_authn_providers, conf->name, APR_HASH_KEY_STRING, conf); ap_register_auth_provider(cmd->pool, AUTHN_PROVIDER_GROUP, conf->name, AUTHN_PROVIDER_VERSION, &fcgi_authn_provider, AP_AUTH_INTERNAL_PER_CONF); } if (conf->is_authz) { apr_hash_set(fcgi_authz_providers, conf->name, APR_HASH_KEY_STRING, conf); ap_register_auth_provider(cmd->pool, AUTHZ_PROVIDER_GROUP, conf->name, AUTHZ_PROVIDER_VERSION, &fcgi_authz_provider, AP_AUTH_INTERNAL_PER_CONF); } return NULL; } static const command_rec fcgi_cmds[] = { AP_INIT_TAKE_ARGV("AuthnzFcgiDefineProvider", fcgi_define_provider, NULL, RSRC_CONF, "Define a FastCGI authn and/or authz provider"), AP_INIT_TAKE_ARGV("AuthnzFcgiCheckAuthnProvider", fcgi_check_authn_provider, NULL, OR_FILEINFO, "Enable/disable a FastCGI authorizer to handle " "check_authn phase"), {NULL} }; static int fcgi_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { fcgi_authn_providers = apr_hash_make(pconf); fcgi_authz_providers = apr_hash_make(pconf); return OK; } static void fcgi_register_hooks(apr_pool_t *p) { static const char * const auth_basic_runs_after_me[] = {"mod_auth_basic.c", NULL}; /* to allow for custom response */ ap_hook_pre_config(fcgi_pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_check_authn(fcgi_check_authn, NULL, auth_basic_runs_after_me, APR_HOOK_MIDDLE, AP_AUTH_INTERNAL_PER_CONF); } static void *create_dir_conf(apr_pool_t *p, char *dummy) { fcgi_dir_conf *dconf = apr_pcalloc(p, sizeof(fcgi_dir_conf)); dconf->authoritative = 1; return dconf; } static void *merge_dir_conf(apr_pool_t *p, void *basev, void *overridesv) { fcgi_dir_conf *a = (fcgi_dir_conf *)apr_pcalloc(p, sizeof(*a)); fcgi_dir_conf *base = (fcgi_dir_conf *)basev, *over = (fcgi_dir_conf *)overridesv; /* currently we just have a single directive applicable to a * directory, so if it is set then grab all fields from fcgi_dir_conf */ if (over->name) { memcpy(a, over, sizeof(*a)); } else { memcpy(a, base, sizeof(*a)); } return a; } AP_DECLARE_MODULE(authnz_fcgi) = { STANDARD20_MODULE_STUFF, create_dir_conf, /* dir config creater */ merge_dir_conf, /* dir merger */ NULL, /* server config */ NULL, /* merge server config */ fcgi_cmds, /* command apr_table_t */ fcgi_register_hooks /* register hooks */ }; ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_dbd.mak����������������������������������������������������������0000644�0000000�0000050�00000027471�12701473373�016731� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_authn_dbd.dsp !IF "$(CFG)" == "" CFG=mod_authn_dbd - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_authn_dbd - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_authn_dbd - Win32 Release" && "$(CFG)" != "mod_authn_dbd - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_authn_dbd.mak" CFG="mod_authn_dbd - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_authn_dbd - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_authn_dbd - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_authn_dbd - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authn_dbd.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_dbd - Win32 Release" "mod_auth_basic - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_authn_dbd.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_auth_basic - Win32 ReleaseCLEAN" "mod_dbd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authn_dbd.obj" -@erase "$(INTDIR)\mod_authn_dbd.res" -@erase "$(INTDIR)\mod_authn_dbd_src.idb" -@erase "$(INTDIR)\mod_authn_dbd_src.pdb" -@erase "$(OUTDIR)\mod_authn_dbd.exp" -@erase "$(OUTDIR)\mod_authn_dbd.lib" -@erase "$(OUTDIR)\mod_authn_dbd.pdb" -@erase "$(OUTDIR)\mod_authn_dbd.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "DBD_DECLARE_EXPORT" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authn_dbd_src" /FD /I ../database /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authn_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_authn_dbd.so" /d LONG_NAME="authn_dbd_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authn_dbd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authn_dbd.pdb" /debug /out:"$(OUTDIR)\mod_authn_dbd.so" /implib:"$(OUTDIR)\mod_authn_dbd.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_dbd.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_authn_dbd.obj" \ "$(INTDIR)\mod_authn_dbd.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" \ "..\database\Release\mod_dbd.lib" "$(OUTDIR)\mod_authn_dbd.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_authn_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authn_dbd.so" if exist .\Release\mod_authn_dbd.so.manifest mt.exe -manifest .\Release\mod_authn_dbd.so.manifest -outputresource:.\Release\mod_authn_dbd.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_authn_dbd - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_authn_dbd.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_dbd - Win32 Debug" "mod_auth_basic - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_authn_dbd.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_auth_basic - Win32 DebugCLEAN" "mod_dbd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_authn_dbd.obj" -@erase "$(INTDIR)\mod_authn_dbd.res" -@erase "$(INTDIR)\mod_authn_dbd_src.idb" -@erase "$(INTDIR)\mod_authn_dbd_src.pdb" -@erase "$(OUTDIR)\mod_authn_dbd.exp" -@erase "$(OUTDIR)\mod_authn_dbd.lib" -@erase "$(OUTDIR)\mod_authn_dbd.pdb" -@erase "$(OUTDIR)\mod_authn_dbd.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "DBD_DECLARE_EXPORT" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_authn_dbd_src" /FD /EHsc /I ../database /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_authn_dbd.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_authn_dbd.so" /d LONG_NAME="authn_dbd_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_authn_dbd.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_authn_dbd.pdb" /debug /out:"$(OUTDIR)\mod_authn_dbd.so" /implib:"$(OUTDIR)\mod_authn_dbd.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_authn_dbd.so LINK32_OBJS= \ "$(INTDIR)\mod_authn_dbd.obj" \ "$(INTDIR)\mod_authn_dbd.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_auth_basic.lib" \ "..\database\Debug\mod_dbd.lib" "$(OUTDIR)\mod_authn_dbd.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_authn_dbd.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_authn_dbd.so" if exist .\Debug\mod_authn_dbd.so.manifest mt.exe -manifest .\Debug\mod_authn_dbd.so.manifest -outputresource:.\Debug\mod_authn_dbd.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_authn_dbd.dep") !INCLUDE "mod_authn_dbd.dep" !ELSE !MESSAGE Warning: cannot find "mod_authn_dbd.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_authn_dbd - Win32 Release" || "$(CFG)" == "mod_authn_dbd - Win32 Debug" !IF "$(CFG)" == "mod_authn_dbd - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\aaa" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_dbd - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\aaa" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_dbd - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\aaa" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_dbd - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\aaa" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_dbd - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\aaa" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\aaa" !ELSEIF "$(CFG)" == "mod_authn_dbd - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\aaa" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\aaa" !ENDIF !IF "$(CFG)" == "mod_authn_dbd - Win32 Release" "mod_auth_basic - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" cd "." "mod_auth_basic - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_authn_dbd - Win32 Debug" "mod_auth_basic - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" cd "." "mod_auth_basic - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_auth_basic.mak" CFG="mod_auth_basic - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF !IF "$(CFG)" == "mod_authn_dbd - Win32 Release" "mod_dbd - Win32 Release" : cd ".\..\database" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dbd.mak" CFG="mod_dbd - Win32 Release" cd "..\aaa" "mod_dbd - Win32 ReleaseCLEAN" : cd ".\..\database" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dbd.mak" CFG="mod_dbd - Win32 Release" RECURSE=1 CLEAN cd "..\aaa" !ELSEIF "$(CFG)" == "mod_authn_dbd - Win32 Debug" "mod_dbd - Win32 Debug" : cd ".\..\database" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dbd.mak" CFG="mod_dbd - Win32 Debug" cd "..\aaa" "mod_dbd - Win32 DebugCLEAN" : cd ".\..\database" $(MAKE) /$(MAKEFLAGS) /F ".\mod_dbd.mak" CFG="mod_dbd - Win32 Debug" RECURSE=1 CLEAN cd "..\aaa" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_authn_dbd - Win32 Release" "$(INTDIR)\mod_authn_dbd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authn_dbd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_authn_dbd.so" /d LONG_NAME="authn_dbd_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_authn_dbd - Win32 Debug" "$(INTDIR)\mod_authn_dbd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_authn_dbd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_authn_dbd.so" /d LONG_NAME="authn_dbd_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_authn_dbd.c "$(INTDIR)\mod_authn_dbd.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/Makefile.in����������������������������������������������������������������0000644�0000000�0000050�00000000051�10150161574�015467� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� include $(top_srcdir)/build/special.mk ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_dbm.c������������������������������������������������������������0000644�0000000�0000050�00000014351�13431561600�016375� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * http_auth: authentication * * Rob McCool & Brian Behlendorf. * * Adapted to Apache by rst. * */ #define APR_WANT_STRFUNC #include "apr_want.h" #include "apr_strings.h" #include "apr_dbm.h" #include "apr_md5.h" /* for apr_password_validate */ #include "ap_provider.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" /* for ap_hook_(check_user_id | auth_checker)*/ #include "mod_auth.h" static APR_OPTIONAL_FN_TYPE(ap_authn_cache_store) *authn_cache_store = NULL; #define AUTHN_CACHE_STORE(r,user,realm,data) \ if (authn_cache_store != NULL) \ authn_cache_store((r), "dbm", (user), (realm), (data)) typedef struct { const char *pwfile; const char *dbmtype; } authn_dbm_config_rec; static void *create_authn_dbm_dir_config(apr_pool_t *p, char *d) { authn_dbm_config_rec *conf = apr_palloc(p, sizeof(*conf)); conf->pwfile = NULL; conf->dbmtype = "default"; return conf; } static const command_rec authn_dbm_cmds[] = { AP_INIT_TAKE1("AuthDBMUserFile", ap_set_file_slot, (void *)APR_OFFSETOF(authn_dbm_config_rec, pwfile), OR_AUTHCFG, "dbm database file containing user IDs and passwords"), AP_INIT_TAKE1("AuthDBMType", ap_set_string_slot, (void *)APR_OFFSETOF(authn_dbm_config_rec, dbmtype), OR_AUTHCFG, "what type of DBM file the user file is"), {NULL} }; module AP_MODULE_DECLARE_DATA authn_dbm_module; static apr_status_t fetch_dbm_value(const char *dbmtype, const char *dbmfile, const char *user, char **value, apr_pool_t *pool) { apr_dbm_t *f; apr_datum_t key, val; apr_status_t rv; rv = apr_dbm_open_ex(&f, dbmtype, dbmfile, APR_DBM_READONLY, APR_OS_DEFAULT, pool); if (rv != APR_SUCCESS) { return rv; } key.dptr = (char*)user; #ifndef NETSCAPE_DBM_COMPAT key.dsize = strlen(key.dptr); #else key.dsize = strlen(key.dptr) + 1; #endif *value = NULL; if (apr_dbm_fetch(f, key, &val) == APR_SUCCESS && val.dptr) { *value = apr_pstrmemdup(pool, val.dptr, val.dsize); } apr_dbm_close(f); /* NOT FOUND is not an error case; this is indicated by a NULL result. * Treat all NULL lookup/error results as success for the simple case * of auth credential lookup, these are DECLINED in both cases. */ return APR_SUCCESS; } static authn_status check_dbm_pw(request_rec *r, const char *user, const char *password) { authn_dbm_config_rec *conf = ap_get_module_config(r->per_dir_config, &authn_dbm_module); apr_status_t rv; char *dbm_password; char *colon_pw; rv = fetch_dbm_value(conf->dbmtype, conf->pwfile, user, &dbm_password, r->pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01754) "could not open dbm (type %s) auth file: %s", conf->dbmtype, conf->pwfile); return AUTH_GENERAL_ERROR; } if (!dbm_password) { return AUTH_USER_NOT_FOUND; } colon_pw = ap_strchr(dbm_password, ':'); if (colon_pw) { *colon_pw = '\0'; } AUTHN_CACHE_STORE(r, user, NULL, dbm_password); rv = apr_password_validate(password, dbm_password); if (rv != APR_SUCCESS) { return AUTH_DENIED; } return AUTH_GRANTED; } static authn_status get_dbm_realm_hash(request_rec *r, const char *user, const char *realm, char **rethash) { authn_dbm_config_rec *conf = ap_get_module_config(r->per_dir_config, &authn_dbm_module); apr_status_t rv; char *dbm_hash; char *colon_hash; rv = fetch_dbm_value(conf->dbmtype, conf->pwfile, apr_pstrcat(r->pool, user, ":", realm, NULL), &dbm_hash, r->pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01755) "Could not open dbm (type %s) hash file: %s", conf->dbmtype, conf->pwfile); return AUTH_GENERAL_ERROR; } if (!dbm_hash) { return AUTH_USER_NOT_FOUND; } colon_hash = ap_strchr(dbm_hash, ':'); if (colon_hash) { *colon_hash = '\0'; } *rethash = dbm_hash; AUTHN_CACHE_STORE(r, user, realm, dbm_hash); return AUTH_USER_FOUND; } static const authn_provider authn_dbm_provider = { &check_dbm_pw, &get_dbm_realm_hash, }; static void opt_retr(void) { authn_cache_store = APR_RETRIEVE_OPTIONAL_FN(ap_authn_cache_store); } static void register_hooks(apr_pool_t *p) { ap_register_auth_provider(p, AUTHN_PROVIDER_GROUP, "dbm", AUTHN_PROVIDER_VERSION, &authn_dbm_provider, AP_AUTH_INTERNAL_PER_CONF); ap_hook_optional_fn_retrieve(opt_retr, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(authn_dbm) = { STANDARD20_MODULE_STUFF, create_authn_dbm_dir_config, /* dir config creater */ NULL, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ authn_dbm_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/aaa/mod_authn_file.dep���������������������������������������������������������0000644�0000000�0000050�00000004214�12674411515�017104� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_authn_file.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_authn_file.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/debugging/���������������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273342�014645� 5����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/debugging/mod_dumpio.mak�������������������������������������������������������0000644�0000000�0000050�00000023371�12701473373�017502� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_dumpio.dsp !IF "$(CFG)" == "" CFG=mod_dumpio - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_dumpio - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_dumpio - Win32 Release" && "$(CFG)" != "mod_dumpio - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_dumpio.mak" CFG="mod_dumpio - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_dumpio - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_dumpio - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_dumpio - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_dumpio.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_dumpio.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_dumpio.obj" -@erase "$(INTDIR)\mod_dumpio.res" -@erase "$(INTDIR)\mod_dumpio_src.idb" -@erase "$(INTDIR)\mod_dumpio_src.pdb" -@erase "$(OUTDIR)\mod_dumpio.exp" -@erase "$(OUTDIR)\mod_dumpio.lib" -@erase "$(OUTDIR)\mod_dumpio.pdb" -@erase "$(OUTDIR)\mod_dumpio.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_dumpio_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_dumpio.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_dumpio.so" /d LONG_NAME="dumpio_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_dumpio.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_dumpio.pdb" /debug /out:"$(OUTDIR)\mod_dumpio.so" /implib:"$(OUTDIR)\mod_dumpio.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_dumpio.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_dumpio.obj" \ "$(INTDIR)\mod_dumpio.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_dumpio.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_dumpio.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_dumpio.so" if exist .\Release\mod_dumpio.so.manifest mt.exe -manifest .\Release\mod_dumpio.so.manifest -outputresource:.\Release\mod_dumpio.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_dumpio - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_dumpio.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_dumpio.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_dumpio.obj" -@erase "$(INTDIR)\mod_dumpio.res" -@erase "$(INTDIR)\mod_dumpio_src.idb" -@erase "$(INTDIR)\mod_dumpio_src.pdb" -@erase "$(OUTDIR)\mod_dumpio.exp" -@erase "$(OUTDIR)\mod_dumpio.lib" -@erase "$(OUTDIR)\mod_dumpio.pdb" -@erase "$(OUTDIR)\mod_dumpio.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_dumpio_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_dumpio.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_dumpio.so" /d LONG_NAME="dumpio_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_dumpio.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_dumpio.pdb" /debug /out:"$(OUTDIR)\mod_dumpio.so" /implib:"$(OUTDIR)\mod_dumpio.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_dumpio.so LINK32_OBJS= \ "$(INTDIR)\mod_dumpio.obj" \ "$(INTDIR)\mod_dumpio.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_dumpio.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_dumpio.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_dumpio.so" if exist .\Debug\mod_dumpio.so.manifest mt.exe -manifest .\Debug\mod_dumpio.so.manifest -outputresource:.\Debug\mod_dumpio.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_dumpio.dep") !INCLUDE "mod_dumpio.dep" !ELSE !MESSAGE Warning: cannot find "mod_dumpio.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_dumpio - Win32 Release" || "$(CFG)" == "mod_dumpio - Win32 Debug" !IF "$(CFG)" == "mod_dumpio - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\debugging" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\debugging" !ELSEIF "$(CFG)" == "mod_dumpio - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\debugging" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\debugging" !ENDIF !IF "$(CFG)" == "mod_dumpio - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\debugging" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\debugging" !ELSEIF "$(CFG)" == "mod_dumpio - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\debugging" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\debugging" !ENDIF !IF "$(CFG)" == "mod_dumpio - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\debugging" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\debugging" !ELSEIF "$(CFG)" == "mod_dumpio - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\debugging" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\debugging" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_dumpio - Win32 Release" "$(INTDIR)\mod_dumpio.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_dumpio.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_dumpio.so" /d LONG_NAME="dumpio_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_dumpio - Win32 Debug" "$(INTDIR)\mod_dumpio.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_dumpio.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_dumpio.so" /d LONG_NAME="dumpio_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_dumpio.c "$(INTDIR)\mod_dumpio.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/debugging/mod_dumpio.dep�������������������������������������������������������0000644�0000000�0000050�00000003366�12674411515�017503� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_dumpio.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_dumpio.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/debugging/README���������������������������������������������������������������0000644�0000000�0000050�00000000041�10453255255�015520� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������debugging modules for Apache 2.x �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/debugging/mod_bucketeer.mak����������������������������������������������������0000644�0000000�0000050�00000024001�12701473373�020145� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_bucketeer.dsp !IF "$(CFG)" == "" CFG=mod_bucketeer - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_bucketeer - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_bucketeer - Win32 Release" && "$(CFG)" != "mod_bucketeer - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_bucketeer.mak" CFG="mod_bucketeer - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_bucketeer - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_bucketeer - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_bucketeer - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_bucketeer.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_bucketeer.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_bucketeer.obj" -@erase "$(INTDIR)\mod_bucketeer.res" -@erase "$(INTDIR)\mod_bucketeer_src.idb" -@erase "$(INTDIR)\mod_bucketeer_src.pdb" -@erase "$(OUTDIR)\mod_bucketeer.exp" -@erase "$(OUTDIR)\mod_bucketeer.lib" -@erase "$(OUTDIR)\mod_bucketeer.pdb" -@erase "$(OUTDIR)\mod_bucketeer.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_bucketeer_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_bucketeer.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_bucketeer.so" /d LONG_NAME="bucketeer_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_bucketeer.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_bucketeer.pdb" /debug /out:"$(OUTDIR)\mod_bucketeer.so" /implib:"$(OUTDIR)\mod_bucketeer.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_bucketeer.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_bucketeer.obj" \ "$(INTDIR)\mod_bucketeer.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_bucketeer.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_bucketeer.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_bucketeer.so" if exist .\Release\mod_bucketeer.so.manifest mt.exe -manifest .\Release\mod_bucketeer.so.manifest -outputresource:.\Release\mod_bucketeer.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_bucketeer - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_bucketeer.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_bucketeer.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_bucketeer.obj" -@erase "$(INTDIR)\mod_bucketeer.res" -@erase "$(INTDIR)\mod_bucketeer_src.idb" -@erase "$(INTDIR)\mod_bucketeer_src.pdb" -@erase "$(OUTDIR)\mod_bucketeer.exp" -@erase "$(OUTDIR)\mod_bucketeer.lib" -@erase "$(OUTDIR)\mod_bucketeer.pdb" -@erase "$(OUTDIR)\mod_bucketeer.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_bucketeer_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_bucketeer.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_bucketeer.so" /d LONG_NAME="bucketeer_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_bucketeer.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_bucketeer.pdb" /debug /out:"$(OUTDIR)\mod_bucketeer.so" /implib:"$(OUTDIR)\mod_bucketeer.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_bucketeer.so LINK32_OBJS= \ "$(INTDIR)\mod_bucketeer.obj" \ "$(INTDIR)\mod_bucketeer.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_bucketeer.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_bucketeer.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_bucketeer.so" if exist .\Debug\mod_bucketeer.so.manifest mt.exe -manifest .\Debug\mod_bucketeer.so.manifest -outputresource:.\Debug\mod_bucketeer.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_bucketeer.dep") !INCLUDE "mod_bucketeer.dep" !ELSE !MESSAGE Warning: cannot find "mod_bucketeer.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_bucketeer - Win32 Release" || "$(CFG)" == "mod_bucketeer - Win32 Debug" !IF "$(CFG)" == "mod_bucketeer - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\debugging" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\debugging" !ELSEIF "$(CFG)" == "mod_bucketeer - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\debugging" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\debugging" !ENDIF !IF "$(CFG)" == "mod_bucketeer - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\debugging" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\debugging" !ELSEIF "$(CFG)" == "mod_bucketeer - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\debugging" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\debugging" !ENDIF !IF "$(CFG)" == "mod_bucketeer - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\debugging" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\debugging" !ELSEIF "$(CFG)" == "mod_bucketeer - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\debugging" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\debugging" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_bucketeer - Win32 Release" "$(INTDIR)\mod_bucketeer.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_bucketeer.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_bucketeer.so" /d LONG_NAME="bucketeer_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_bucketeer - Win32 Debug" "$(INTDIR)\mod_bucketeer.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_bucketeer.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_bucketeer.so" /d LONG_NAME="bucketeer_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_bucketeer.c "$(INTDIR)\mod_bucketeer.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/debugging/NWGNUmodbucketeer����������������������������������������������������0000644�0000000�0000050�00000010164�11674073627�020071� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = modbucketeer # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Bucketeer Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Bucketeer Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_bucketeer.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ bucketeer_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/debugging/mod_bucketeer.c������������������������������������������������������0000644�0000000�0000050�00000013602�11402752006�017612� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_bucketeer.c: split buckets whenever we find a control-char * * Written by Ian Holsman * */ #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "apr_strings.h" #include "apr_general.h" #include "util_filter.h" #include "apr_buckets.h" #include "http_request.h" #include "http_protocol.h" static const char bucketeerFilterName[] = "BUCKETEER"; module AP_MODULE_DECLARE_DATA bucketeer_module; typedef struct bucketeer_filter_config_t { char bucketdelimiter; char passdelimiter; char flushdelimiter; } bucketeer_filter_config_t; static void *create_bucketeer_server_config(apr_pool_t *p, server_rec *s) { bucketeer_filter_config_t *c = apr_pcalloc(p, sizeof *c); c->bucketdelimiter = 0x02; /* ^B */ c->passdelimiter = 0x10; /* ^P */ c->flushdelimiter = 0x06; /* ^F */ return c; } typedef struct bucketeer_ctx_t { apr_bucket_brigade *bb; } bucketeer_ctx_t; static apr_status_t bucketeer_out_filter(ap_filter_t *f, apr_bucket_brigade *bb) { apr_bucket *e; request_rec *r = f->r; bucketeer_ctx_t *ctx = f->ctx; bucketeer_filter_config_t *c; c = ap_get_module_config(r->server->module_config, &bucketeer_module); /* If have a context, it means we've done this before successfully. */ if (!ctx) { if (!r->content_type || strncmp(r->content_type, "text/", 5)) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* We're cool with filtering this. */ ctx = f->ctx = apr_pcalloc(f->r->pool, sizeof(*ctx)); ctx->bb = apr_brigade_create(f->r->pool, f->c->bucket_alloc); apr_table_unset(f->r->headers_out, "Content-Length"); } for (e = APR_BRIGADE_FIRST(bb); e != APR_BRIGADE_SENTINEL(bb); e = APR_BUCKET_NEXT(e)) { const char *data; apr_size_t len, i, lastpos; if (APR_BUCKET_IS_EOS(e)) { APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); /* Okay, we've seen the EOS. * Time to pass it along down the chain. */ return ap_pass_brigade(f->next, ctx->bb); } if (APR_BUCKET_IS_FLUSH(e)) { /* * Ignore flush buckets for the moment.. * we decide what to stream */ continue; } if (APR_BUCKET_IS_METADATA(e)) { /* metadata bucket */ apr_bucket *cpy; apr_bucket_copy(e, &cpy); APR_BRIGADE_INSERT_TAIL(ctx->bb, cpy); continue; } /* read */ apr_bucket_read(e, &data, &len, APR_BLOCK_READ); if (len > 0) { lastpos = 0; for (i = 0; i < len; i++) { if (data[i] == c->flushdelimiter || data[i] == c->bucketdelimiter || data[i] == c->passdelimiter) { apr_bucket *p; if (i - lastpos > 0) { p = apr_bucket_pool_create(apr_pmemdup(f->r->pool, &data[lastpos], i - lastpos), i - lastpos, f->r->pool, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->bb, p); } lastpos = i + 1; if (data[i] == c->flushdelimiter) { p = apr_bucket_flush_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->bb, p); } if (data[i] == c->passdelimiter) { apr_status_t rv; rv = ap_pass_brigade(f->next, ctx->bb); if (rv) { return rv; } } } } /* XXX: really should append this to the next 'real' bucket */ if (lastpos < i) { apr_bucket *p; p = apr_bucket_pool_create(apr_pmemdup(f->r->pool, &data[lastpos], i - lastpos), i - lastpos, f->r->pool, f->c->bucket_alloc); lastpos = i; APR_BRIGADE_INSERT_TAIL(ctx->bb, p); } } } return APR_SUCCESS; } static void register_hooks(apr_pool_t * p) { ap_register_output_filter(bucketeerFilterName, bucketeer_out_filter, NULL, AP_FTYPE_RESOURCE-1); } static const command_rec bucketeer_filter_cmds[] = { {NULL} }; AP_DECLARE_MODULE(bucketeer) = { STANDARD20_MODULE_STUFF, NULL, NULL, create_bucketeer_server_config, NULL, bucketeer_filter_cmds, register_hooks }; ������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/debugging/NWGNUmakefile��������������������������������������������������������0000644�0000000�0000050�00000007756�11711770464�017205� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/modbucketeer.nlm \ $(OBJDIR)/moddumpio.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ������������������httpd-2.4.41/modules/debugging/config.m4������������������������������������������������������������0000644�0000000�0000050�00000000332�11463657631�016360� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� APACHE_MODPATH_INIT(debugging) APACHE_MODULE(bucketeer, buckets manipulation filter. Useful only for developers and testing purposes., , , no) APACHE_MODULE(dumpio, I/O dump filter, , , most) APACHE_MODPATH_FINISH ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/debugging/mod_bucketeer.dsp����������������������������������������������������0000644�0000000�0000050�00000010715�10551346420�020163� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_bucketeer" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_bucketeer - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_bucketeer.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_bucketeer.mak" CFG="mod_bucketeer - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_bucketeer - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_bucketeer - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_bucketeer - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_bucketeer_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_bucketeer.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_bucketeer.so" /d LONG_NAME="bucketeer_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_bucketeer.so" /base:@..\..\os\win32\BaseAddr.ref,mod_bucketeer.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_bucketeer.so" /base:@..\..\os\win32\BaseAddr.ref,mod_bucketeer.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_bucketeer.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_bucketeer - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_bucketeer_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_bucketeer.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_bucketeer.so" /d LONG_NAME="bucketeer_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_bucketeer.so" /base:@..\..\os\win32\BaseAddr.ref,mod_bucketeer.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_bucketeer.so" /base:@..\..\os\win32\BaseAddr.ref,mod_bucketeer.so # Begin Special Build Tool TargetPath=.\Debug\mod_bucketeer.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_bucketeer - Win32 Release" # Name "mod_bucketeer - Win32 Debug" # Begin Source File SOURCE=.\mod_bucketeer.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project ���������������������������������������������������httpd-2.4.41/modules/debugging/mod_dumpio.dsp�������������������������������������������������������0000644�0000000�0000050�00000010563�10551346420�017510� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_dumpio" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_dumpio - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_dumpio.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_dumpio.mak" CFG="mod_dumpio - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_dumpio - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_dumpio - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_dumpio - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_dumpio_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_dumpio.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_dumpio.so" /d LONG_NAME="dumpio_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_dumpio.so" /base:@..\..\os\win32\BaseAddr.ref,mod_dumpio.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_dumpio.so" /base:@..\..\os\win32\BaseAddr.ref,mod_dumpio.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_dumpio.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_dumpio - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_dumpio_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_dumpio.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_dumpio.so" /d LONG_NAME="dumpio_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_dumpio.so" /base:@..\..\os\win32\BaseAddr.ref,mod_dumpio.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_dumpio.so" /base:@..\..\os\win32\BaseAddr.ref,mod_dumpio.so # Begin Special Build Tool TargetPath=.\Debug\mod_dumpio.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_dumpio - Win32 Release" # Name "mod_dumpio - Win32 Debug" # Begin Source File SOURCE=.\mod_dumpio.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project ���������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/debugging/NWGNUmoddumpio�������������������������������������������������������0000644�0000000�0000050�00000010145�11674073627�017414� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = moddumpio # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) DumpIO Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = DumpIO Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_dumpio.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ dumpio_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/debugging/mod_dumpio.c���������������������������������������������������������0000644�0000000�0000050�00000021067�13262704726�017156� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * Originally written @ Covalent by Jim Jagielski */ /* * mod_dumpio.c: * Think of this as a filter sniffer for Apache 2.x. It logs * all filter data right before and after it goes out on the * wire (BUT right before SSL encoded or after SSL decoded). * It can produce a *huge* amount of data. */ #include "httpd.h" #include "http_connection.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "apr_strings.h" module AP_MODULE_DECLARE_DATA dumpio_module ; typedef struct dumpio_conf_t { int enable_input; int enable_output; } dumpio_conf_t; /* consider up to 80 additional characters, and factor the longest * line length of all \xNN sequences; log_error cannot record more * than MAX_STRING_LEN characters. */ #define dumpio_MAX_STRING_LEN (MAX_STRING_LEN / 4 - 80) /* * Workhorse function: simply log to the current error_log * info about the data in the bucket as well as the data itself */ static void dumpit(ap_filter_t *f, apr_bucket *b, dumpio_conf_t *ptr) { conn_rec *c = f->c; ap_log_cerror(APLOG_MARK, APLOG_TRACE7, 0, c, "mod_dumpio: %s (%s-%s): %" APR_SIZE_T_FMT " bytes", f->frec->name, (APR_BUCKET_IS_METADATA(b)) ? "metadata" : "data", b->type->name, b->length) ; if (!(APR_BUCKET_IS_METADATA(b))) { #if APR_CHARSET_EBCDIC char xlatebuf[dumpio_MAX_STRING_LEN + 1]; #endif const char *buf; apr_size_t nbytes; apr_status_t rv = apr_bucket_read(b, &buf, &nbytes, APR_BLOCK_READ); if (rv == APR_SUCCESS) { while (nbytes) { apr_size_t logbytes = nbytes; if (logbytes > dumpio_MAX_STRING_LEN) logbytes = dumpio_MAX_STRING_LEN; nbytes -= logbytes; #if APR_CHARSET_EBCDIC memcpy(xlatebuf, buf, logbytes); ap_xlate_proto_from_ascii(xlatebuf, logbytes); xlatebuf[logbytes] = '\0'; ap_log_cerror(APLOG_MARK, APLOG_TRACE7, 0, c, "mod_dumpio: %s (%s-%s): %s", f->frec->name, (APR_BUCKET_IS_METADATA(b)) ? "metadata" : "data", b->type->name, xlatebuf); #else /* XXX: Seriously flawed; we do not pay attention to embedded * \0's in the request body, these should be escaped; however, * the logging function already performs a significant amount * of escaping, and so any escaping would be double-escaped. * The coding solution is to throw away the current logic * within ap_log_error, and introduce new vformatter %-escapes * for escaping text, and for binary text (fixed len strings). */ ap_log_cerror(APLOG_MARK, APLOG_TRACE7, 0, c, "mod_dumpio: %s (%s-%s): %.*s", f->frec->name, (APR_BUCKET_IS_METADATA(b)) ? "metadata" : "data", b->type->name, (int)logbytes, buf); #endif buf += logbytes; } } else { ap_log_cerror(APLOG_MARK, APLOG_TRACE7, rv, c, "mod_dumpio: %s (%s-%s): %s", f->frec->name, (APR_BUCKET_IS_METADATA(b)) ? "metadata" : "data", b->type->name, "error reading data"); } } } #define whichmode( mode ) \ ( (( mode ) == AP_MODE_READBYTES) ? "readbytes" : \ (( mode ) == AP_MODE_GETLINE) ? "getline" : \ (( mode ) == AP_MODE_EATCRLF) ? "eatcrlf" : \ (( mode ) == AP_MODE_SPECULATIVE) ? "speculative" : \ (( mode ) == AP_MODE_EXHAUSTIVE) ? "exhaustive" : \ (( mode ) == AP_MODE_INIT) ? "init" : "unknown" \ ) static int dumpio_input_filter (ap_filter_t *f, apr_bucket_brigade *bb, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { apr_bucket *b; apr_status_t ret; conn_rec *c = f->c; dumpio_conf_t *ptr = f->ctx; ap_log_cerror(APLOG_MARK, APLOG_TRACE7, 0, c, "mod_dumpio: %s [%s-%s] %" APR_OFF_T_FMT " readbytes", f->frec->name, whichmode(mode), ((block) == APR_BLOCK_READ) ? "blocking" : "nonblocking", readbytes); ret = ap_get_brigade(f->next, bb, mode, block, readbytes); if (ret == APR_SUCCESS) { for (b = APR_BRIGADE_FIRST(bb); b != APR_BRIGADE_SENTINEL(bb); b = APR_BUCKET_NEXT(b)) { dumpit(f, b, ptr); } } else { ap_log_cerror(APLOG_MARK, APLOG_TRACE7, 0, c, "mod_dumpio: %s - %d", f->frec->name, ret) ; return ret; } return APR_SUCCESS ; } static int dumpio_output_filter (ap_filter_t *f, apr_bucket_brigade *bb) { apr_bucket *b; conn_rec *c = f->c; dumpio_conf_t *ptr = f->ctx; ap_log_cerror(APLOG_MARK, APLOG_TRACE7, 0, c, "mod_dumpio: %s", f->frec->name); for (b = APR_BRIGADE_FIRST(bb); b != APR_BRIGADE_SENTINEL(bb); b = APR_BUCKET_NEXT(b)) { /* * If we ever see an EOS, make sure to FLUSH. */ if (APR_BUCKET_IS_EOS(b)) { apr_bucket *flush = apr_bucket_flush_create(f->c->bucket_alloc); APR_BUCKET_INSERT_BEFORE(b, flush); } dumpit(f, b, ptr); } return ap_pass_brigade(f->next, bb) ; } static int dumpio_pre_conn(conn_rec *c, void *csd) { dumpio_conf_t *ptr; if (!APLOGctrace7(c)) { /* Nothing to do below TRACE7 */ return DECLINED; } ptr = (dumpio_conf_t *) ap_get_module_config(c->base_server->module_config, &dumpio_module); if (ptr->enable_input) ap_add_input_filter("DUMPIO_IN", ptr, NULL, c); if (ptr->enable_output) ap_add_output_filter("DUMPIO_OUT", ptr, NULL, c); return OK; } static void dumpio_register_hooks(apr_pool_t *p) { /* * We know that SSL is CONNECTION + 5 */ ap_register_output_filter("DUMPIO_OUT", dumpio_output_filter, NULL, AP_FTYPE_CONNECTION + 3) ; ap_register_input_filter("DUMPIO_IN", dumpio_input_filter, NULL, AP_FTYPE_CONNECTION + 3) ; ap_hook_pre_connection(dumpio_pre_conn, NULL, NULL, APR_HOOK_MIDDLE); } static void *dumpio_create_sconfig(apr_pool_t *p, server_rec *s) { dumpio_conf_t *ptr = apr_pcalloc(p, sizeof *ptr); ptr->enable_input = 0; ptr->enable_output = 0; return ptr; } static const char *dumpio_enable_input(cmd_parms *cmd, void *dummy, int arg) { dumpio_conf_t *ptr = ap_get_module_config(cmd->server->module_config, &dumpio_module); ptr->enable_input = arg; return NULL; } static const char *dumpio_enable_output(cmd_parms *cmd, void *dummy, int arg) { dumpio_conf_t *ptr = ap_get_module_config(cmd->server->module_config, &dumpio_module); ptr->enable_output = arg; return NULL; } static const command_rec dumpio_cmds[] = { AP_INIT_FLAG("DumpIOInput", dumpio_enable_input, NULL, RSRC_CONF, "Enable I/O Dump on Input Data"), AP_INIT_FLAG("DumpIOOutput", dumpio_enable_output, NULL, RSRC_CONF, "Enable I/O Dump on Output Data"), { NULL } }; AP_DECLARE_MODULE(dumpio) = { STANDARD20_MODULE_STUFF, NULL, /* create per-dir config structures */ NULL, /* merge per-dir config structures */ dumpio_create_sconfig, /* create per-server config structures */ NULL, /* merge per-server config structures */ dumpio_cmds, /* table of config file commands */ dumpio_register_hooks /* register hooks */ }; �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/debugging/mod_bucketeer.dep����������������������������������������������������0000644�0000000�0000050�00000003621�12674411515�020151� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_bucketeer.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_bucketeer.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ���������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/debugging/Makefile.in����������������������������������������������������������0000644�0000000�0000050�00000000267�10453255255�016717� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/ldap/��������������������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273341�013631� 5����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/ldap/README.ldap���������������������������������������������������������������0000644�0000000�0000050�00000003446�10752740261�015436� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������Quick installation instructions (UNIX): - Building on generic Unix: Add generic ldap support and the TWO ldap modules to the build, like this: ./configure --with-ldap --enable-ldap --enable-authnz-ldap The --with-ldap switches on LDAP library linking in apr-util. Make sure that you have an LDAP client library available such as those from Netscape/iPlanet/Sun One or the OpenLDAP project. The --enable-ldap option switches on the LDAP caching module. This module is a support module for other LDAP modules, and is not useful on its own. This module is required, but caching can be disabled via the configuration directive LDAPCacheEntries. The --enable-auth-ldap option switches on the LDAP authentication module. - Building on AIX: The following ./configure line is reported to work for AIX: CC=cc_r; export CC CPPFLAGS=-qcpluscmt;export CPPFLAGS ./configure --with-mpm=worker --prefix=/usr/local/apache \ --enable-dav=static --enable-dav_fs=static --enable-ssl=static --with-ldap=yes --with-ldap-include=/usr/local/include --with-ldap-lib=/usr/local/lib --enable-ldap=static --enable-authnz-ldap=static Quick installation instructions (win32): 1. copy the file srclib\apr-util\include\apr_ldap.hw to apr_ldap.h 2. the netscape/iplanet ldap libraries are installed in srclib\ldap 3. Compile the two modules util_ldap and mod_authnz_ldap using the dsp files 4. You get a mod_authnz_ldap.so and a mod_ldap.so module 5. Put them in the modules directory, don't forget to copy the nsldap32v50.dll somewhere where httpd.exe will find it 6. Load the two modules in your httpd.conf, like below: LoadModule ldap_module modules/mod_ldap.so LoadModule authnz_ldap_module modules/mod_authnz_ldap.so 7. Configure the directories as described in the docus. ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/ldap/util_ldap_cache.h���������������������������������������������������������0000644�0000000�0000050�00000020544�13225507043�017103� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef APU_LDAP_CACHE_H #define APU_LDAP_CACHE_H /** * @file util_ldap_cache.h * @brief This switches LDAP support on or off. */ /* this whole thing disappears if LDAP is not enabled */ #if APR_HAS_LDAP /* * LDAP Cache Manager */ #include "util_ldap.h" typedef struct util_cache_node_t { void *payload; /* Pointer to the payload */ apr_time_t add_time; /* Time node was added to cache */ struct util_cache_node_t *next; } util_cache_node_t; typedef struct util_ald_cache util_ald_cache_t; struct util_ald_cache { unsigned long size; /* Size of cache array */ unsigned long maxentries; /* Maximum number of cache entries */ unsigned long numentries; /* Current number of cache entries */ unsigned long fullmark; /* Used to keep track of when cache becomes 3/4 full */ apr_time_t marktime; /* Time that the cache became 3/4 full */ unsigned long ttl; /* Time to live for items in cache */ unsigned long (*hash)(void *); /* Func to hash the payload */ int (*compare)(void *, void *); /* Func to compare two payloads */ void * (*copy)(util_ald_cache_t *cache, void *); /* Func to alloc mem and copy payload to new mem */ void (*free)(util_ald_cache_t *cache, void *); /* Func to free mem used by the payload */ void (*display)(request_rec *r, util_ald_cache_t *cache, void *); /* Func to display the payload contents */ util_cache_node_t **nodes; unsigned long numpurges; /* No. of times the cache has been purged */ double avg_purgetime; /* Average time to purge the cache */ apr_time_t last_purge; /* Time of the last purge */ unsigned long npurged; /* Number of elements purged in last purge. This is not obvious: it won't be 3/4 the size of the cache if there were a lot of expired entries. */ unsigned long fetches; /* Number of fetches */ unsigned long hits; /* Number of cache hits */ unsigned long inserts; /* Number of inserts */ unsigned long removes; /* Number of removes */ #if APR_HAS_SHARED_MEMORY apr_shm_t *shm_addr; apr_rmm_t *rmm_addr; #endif }; #ifndef WIN32 #define ALD_MM_FILE_MODE ( S_IRUSR|S_IWUSR ) #else #define ALD_MM_FILE_MODE ( _S_IREAD|_S_IWRITE ) #endif /* * LDAP Cache */ /* * Maintain a cache of LDAP URLs that the server handles. Each node in * the cache contains the search cache for that URL, and a compare cache * for the URL. The compare cash is populated when doing require group * compares. */ typedef struct util_url_node_t { const char *url; util_ald_cache_t *search_cache; util_ald_cache_t *compare_cache; util_ald_cache_t *dn_compare_cache; } util_url_node_t; /* * When a group is found, subgroups are stored in the group's cache entry. */ typedef struct util_compare_subgroup_t { const char **subgroupDNs; int len; } util_compare_subgroup_t; /* * We cache every successful search and bind operation, using the username * as the key. Each node in the cache contains the returned DN, plus the * password used to bind. */ typedef struct util_search_node_t { const char *username; /* Cache key */ const char *dn; /* DN returned from search */ const char *bindpw; /* The most recently used bind password; NULL if the bind failed */ apr_time_t lastbind; /* Time of last successful bind */ const char **vals; /* Values of queried attributes */ int numvals; /* Number of queried attributes */ } util_search_node_t; /* * We cache every successful compare operation, using the DN, attrib, and * value as the key. */ typedef struct util_compare_node_t { const char *dn; /* DN, attrib and value combine to be the key */ const char *attrib; const char *value; apr_time_t lastcompare; int result; int sgl_processed; /* 0 if no sgl processing yet. 1 if sgl has been processed (even if SGL is NULL). Saves repeat work on leaves. */ struct util_compare_subgroup_t *subgroupList; } util_compare_node_t; /* * We cache every successful compare dn operation, using the dn in the require * statement and the dn fetched based on the client-provided username. */ typedef struct util_dn_compare_node_t { const char *reqdn; /* The DN in the require dn statement */ const char *dn; /* The DN found in the search */ } util_dn_compare_node_t; /* * Function prototypes for LDAP cache */ /* util_ldap_cache.c */ unsigned long util_ldap_url_node_hash(void *n); int util_ldap_url_node_compare(void *a, void *b); void *util_ldap_url_node_copy(util_ald_cache_t *cache, void *c); void util_ldap_url_node_free(util_ald_cache_t *cache, void *n); void util_ldap_url_node_display(request_rec *r, util_ald_cache_t *cache, void *n); unsigned long util_ldap_search_node_hash(void *n); int util_ldap_search_node_compare(void *a, void *b); void *util_ldap_search_node_copy(util_ald_cache_t *cache, void *c); void util_ldap_search_node_free(util_ald_cache_t *cache, void *n); void util_ldap_search_node_display(request_rec *r, util_ald_cache_t *cache, void *n); unsigned long util_ldap_compare_node_hash(void *n); int util_ldap_compare_node_compare(void *a, void *b); void *util_ldap_compare_node_copy(util_ald_cache_t *cache, void *c); void util_ldap_compare_node_free(util_ald_cache_t *cache, void *n); void util_ldap_compare_node_display(request_rec *r, util_ald_cache_t *cache, void *n); unsigned long util_ldap_dn_compare_node_hash(void *n); int util_ldap_dn_compare_node_compare(void *a, void *b); void *util_ldap_dn_compare_node_copy(util_ald_cache_t *cache, void *c); void util_ldap_dn_compare_node_free(util_ald_cache_t *cache, void *n); void util_ldap_dn_compare_node_display(request_rec *r, util_ald_cache_t *cache, void *n); /* util_ldap_cache_mgr.c */ /* Cache alloc and free function, dealing or not with shm */ void util_ald_free(util_ald_cache_t *cache, const void *ptr); void *util_ald_alloc(util_ald_cache_t *cache, unsigned long size); const char *util_ald_strdup(util_ald_cache_t *cache, const char *s); util_compare_subgroup_t *util_ald_sgl_dup(util_ald_cache_t *cache, util_compare_subgroup_t *sgl); void util_ald_sgl_free(util_ald_cache_t *cache, util_compare_subgroup_t **sgl); /* Cache managing function */ unsigned long util_ald_hash_string(int nstr, ...); void util_ald_cache_purge(util_ald_cache_t *cache); util_url_node_t *util_ald_create_caches(util_ldap_state_t *s, const char *url); util_ald_cache_t *util_ald_create_cache(util_ldap_state_t *st, long cache_size, long cache_ttl, unsigned long (*hashfunc)(void *), int (*comparefunc)(void *, void *), void * (*copyfunc)(util_ald_cache_t *cache, void *), void (*freefunc)(util_ald_cache_t *cache, void *), void (*displayfunc)(request_rec *r, util_ald_cache_t *cache, void *)); void util_ald_destroy_cache(util_ald_cache_t *cache); void *util_ald_cache_fetch(util_ald_cache_t *cache, void *payload); void *util_ald_cache_insert(util_ald_cache_t *cache, void *payload); void util_ald_cache_remove(util_ald_cache_t *cache, void *payload); char *util_ald_cache_display_stats(request_rec *r, util_ald_cache_t *cache, char *name, char *id); #endif /* APR_HAS_LDAP */ #endif /* APU_LDAP_CACHE_H */ ������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/ldap/util_ldap.c���������������������������������������������������������������0000644�0000000�0000050�00000336301�13243016176�015756� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * util_ldap.c: LDAP things * * Original code from auth_ldap module for Apache v1.3: * Copyright 1998, 1999 Enbridge Pipelines Inc. * Copyright 1999-2001 Dave Carrigan */ #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "util_mutex.h" #include "util_ldap.h" #include "util_ldap_cache.h" #include <apr_strings.h> #if APR_HAVE_UNISTD_H #include <unistd.h> #endif #if !APR_HAS_LDAP #error mod_ldap requires APR-util to have LDAP support built in #endif /* Default define for ldap functions that need a SIZELIMIT but * do not have the define * XXX This should be removed once a supporting #define is * released through APR-Util. */ #ifndef APR_LDAP_SIZELIMIT #define APR_LDAP_SIZELIMIT -1 #endif #ifdef LDAP_OPT_DEBUG_LEVEL #define AP_LDAP_OPT_DEBUG LDAP_OPT_DEBUG_LEVEL #else #ifdef LDAP_OPT_DEBUG #define AP_LDAP_OPT_DEBUG LDAP_OPT_DEBUG #endif #endif #define AP_LDAP_HOPLIMIT_UNSET -1 #define AP_LDAP_CHASEREFERRALS_SDKDEFAULT -1 #define AP_LDAP_CHASEREFERRALS_OFF 0 #define AP_LDAP_CHASEREFERRALS_ON 1 #define AP_LDAP_CONNPOOL_DEFAULT -1 #define AP_LDAP_CONNPOOL_INFINITE -2 #if !defined(LDAP_OPT_NETWORK_TIMEOUT) && defined(LDAP_OPT_CONNECT_TIMEOUT) #define LDAP_OPT_NETWORK_TIMEOUT LDAP_OPT_CONNECT_TIMEOUT #endif module AP_MODULE_DECLARE_DATA ldap_module; static const char *ldap_cache_mutex_type = "ldap-cache"; static apr_status_t uldap_connection_unbind(void *param); #define LDAP_CACHE_LOCK() do { \ if (st->util_ldap_cache_lock) \ apr_global_mutex_lock(st->util_ldap_cache_lock); \ } while (0) #define LDAP_CACHE_UNLOCK() do { \ if (st->util_ldap_cache_lock) \ apr_global_mutex_unlock(st->util_ldap_cache_lock); \ } while (0) static void util_ldap_strdup (char **str, const char *newstr) { if (*str) { free(*str); *str = NULL; } if (newstr) { *str = strdup(newstr); } } /* * Status Handler * -------------- * * This handler generates a status page about the current performance of * the LDAP cache. It is enabled as follows: * * <Location /ldap-status> * SetHandler ldap-status * </Location> * */ static int util_ldap_handler(request_rec *r) { util_ldap_state_t *st; r->allowed |= (1 << M_GET); if (r->method_number != M_GET) { return DECLINED; } if (strcmp(r->handler, "ldap-status")) { return DECLINED; } st = (util_ldap_state_t *) ap_get_module_config(r->server->module_config, &ldap_module); ap_set_content_type(r, "text/html; charset=ISO-8859-1"); if (r->header_only) return OK; ap_rputs(DOCTYPE_HTML_3_2 "<html><head><title>LDAP Cache Information\n", r); ap_rputs("

    LDAP Cache Information" "

    \n", r); util_ald_cache_display(r, st); return OK; } /* ------------------------------------------------------------------ */ /* * Closes an LDAP connection by unlocking it. The next time * uldap_connection_find() is called this connection will be * available for reuse. */ static void uldap_connection_close(util_ldap_connection_t *ldc) { /* We leave bound LDAP connections floating around in our pool, * but always check/fix the binddn/bindpw when we take them out * of the pool */ if (!ldc->keep) { uldap_connection_unbind(ldc); ldc->r = NULL; } else { /* mark our connection as available for reuse */ ldc->freed = apr_time_now(); ldc->r = NULL; } #if APR_HAS_THREADS apr_thread_mutex_unlock(ldc->lock); #endif } /* * Destroys an LDAP connection by unbinding and closing the connection to * the LDAP server. It is used to bring the connection back to a known * state after an error. */ static apr_status_t uldap_connection_unbind(void *param) { util_ldap_connection_t *ldc = param; if (ldc) { if (ldc->ldap) { if (ldc->r) { ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, ldc->r, "LDC %pp unbind", ldc); } ldap_unbind_s(ldc->ldap); ldc->ldap = NULL; } ldc->bound = 0; /* forget the rebind info for this conn */ if (ldc->ChaseReferrals == AP_LDAP_CHASEREFERRALS_ON) { apr_ldap_rebind_remove(ldc->ldap); apr_pool_clear(ldc->rebind_pool); } } return APR_SUCCESS; } /* not presently used, not part of the API */ #if 0 /* * util_ldap_connection_remove frees all storage associated with the LDAP * connection and removes it completely from the per-virtualhost list of * connections * * The caller should hold the lock for this connection */ static apr_status_t util_ldap_connection_remove (void *param) { util_ldap_connection_t *ldc = param, *l = NULL, *prev = NULL; util_ldap_state_t *st; if (!ldc) return APR_SUCCESS; st = ldc->st; uldap_connection_unbind(ldc); #if APR_HAS_THREADS apr_thread_mutex_lock(st->mutex); #endif /* Remove ldc from the list */ for (l=st->connections; l; l=l->next) { if (l == ldc) { if (prev) { prev->next = l->next; } else { st->connections = l->next; } break; } prev = l; } if (ldc->bindpw) { free((void*)ldc->bindpw); } if (ldc->binddn) { free((void*)ldc->binddn); } #if APR_HAS_THREADS apr_thread_mutex_unlock(ldc->lock); apr_thread_mutex_unlock(st->mutex); #endif /* Destory the pool associated with this connection */ apr_pool_destroy(ldc->pool); return APR_SUCCESS; } #endif static int uldap_connection_init(request_rec *r, util_ldap_connection_t *ldc) { int rc = 0, ldap_option = 0; int version = LDAP_VERSION3; apr_ldap_err_t *result = NULL; #ifdef LDAP_OPT_NETWORK_TIMEOUT struct timeval connectionTimeout = {0}; #endif util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(r->server->module_config, &ldap_module); int have_client_certs = !apr_is_empty_array(ldc->client_certs); #if !APR_HAS_SOLARIS_LDAPSDK /* * Normally we enable SSL/TLS with apr_ldap_set_option(), except * with Solaris LDAP, where this is broken. */ int secure = APR_LDAP_NONE; #else /* * With Solaris LDAP, we enable TSL via the secure argument * to apr_ldap_init(). This requires a fix from apr-util >= 1.4.0. * * Just in case client certificates ever get supported, we * handle those as with the other LDAP SDKs. */ int secure = have_client_certs ? APR_LDAP_NONE : ldc->secure; #endif /* Since the host will include a port if the default port is not used, * always specify the default ports for the port parameter. This will * allow a host string that contains multiple hosts the ability to mix * some hosts with ports and some without. All hosts which do not * specify a port will use the default port. */ apr_ldap_init(r->pool, &(ldc->ldap), ldc->host, APR_LDAP_SSL == ldc->secure ? LDAPS_PORT : LDAP_PORT, secure, &(result)); if (NULL == result) { /* something really bad happened */ ldc->bound = 0; if (NULL == ldc->reason) { ldc->reason = "LDAP: ldap initialization failed"; } return(APR_EGENERAL); } if (result->rc) { ldc->reason = result->reason; ldc->bound = 0; return result->rc; } if (NULL == ldc->ldap) { ldc->bound = 0; if (NULL == ldc->reason) { ldc->reason = "LDAP: ldap initialization failed"; } else { ldc->reason = result->reason; } return(result->rc); } ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "LDC %pp init", ldc); if (ldc->ChaseReferrals == AP_LDAP_CHASEREFERRALS_ON) { /* Now that we have an ldap struct, add it to the referral list for rebinds. */ rc = apr_ldap_rebind_add(ldc->rebind_pool, ldc->ldap, ldc->binddn, ldc->bindpw); if (rc != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rc, r->server, APLOGNO(01277) "LDAP: Unable to add rebind cross reference entry. Out of memory?"); uldap_connection_unbind(ldc); ldc->reason = "LDAP: Unable to add rebind cross reference entry."; return(rc); } } /* always default to LDAP V3 */ ldap_set_option(ldc->ldap, LDAP_OPT_PROTOCOL_VERSION, &version); /* set client certificates */ if (have_client_certs) { apr_ldap_set_option(r->pool, ldc->ldap, APR_LDAP_OPT_TLS_CERT, ldc->client_certs, &(result)); if (LDAP_SUCCESS != result->rc) { uldap_connection_unbind( ldc ); ldc->reason = result->reason; return(result->rc); } } /* switch on SSL/TLS */ if (APR_LDAP_NONE != ldc->secure #if APR_HAS_SOLARIS_LDAPSDK /* See comments near apr_ldap_init() above */ && have_client_certs #endif ) { apr_ldap_set_option(r->pool, ldc->ldap, APR_LDAP_OPT_TLS, &ldc->secure, &(result)); if (LDAP_SUCCESS != result->rc) { uldap_connection_unbind( ldc ); ldc->reason = result->reason; return(result->rc); } } /* Set the alias dereferencing option */ ldap_option = ldc->deref; ldap_set_option(ldc->ldap, LDAP_OPT_DEREF, &ldap_option); if (ldc->ChaseReferrals != AP_LDAP_CHASEREFERRALS_SDKDEFAULT) { /* Set options for rebind and referrals. */ ap_log_error(APLOG_MARK, APLOG_TRACE4, 0, r->server, APLOGNO(01278) "LDAP: Setting referrals to %s.", ((ldc->ChaseReferrals == AP_LDAP_CHASEREFERRALS_ON) ? "On" : "Off")); apr_ldap_set_option(r->pool, ldc->ldap, APR_LDAP_OPT_REFERRALS, (void *)((ldc->ChaseReferrals == AP_LDAP_CHASEREFERRALS_ON) ? LDAP_OPT_ON : LDAP_OPT_OFF), &(result)); if (result->rc != LDAP_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, r->server, APLOGNO(01279) "Unable to set LDAP_OPT_REFERRALS option to %s: %d.", ((ldc->ChaseReferrals == AP_LDAP_CHASEREFERRALS_ON) ? "On" : "Off"), result->rc); result->reason = "Unable to set LDAP_OPT_REFERRALS."; ldc->reason = result->reason; uldap_connection_unbind(ldc); return(result->rc); } } if (ldc->ChaseReferrals == AP_LDAP_CHASEREFERRALS_ON) { if ((ldc->ReferralHopLimit != AP_LDAP_HOPLIMIT_UNSET) && ldc->ChaseReferrals == AP_LDAP_CHASEREFERRALS_ON) { /* Referral hop limit - only if referrals are enabled and a hop limit is explicitly requested */ ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, r->server, APLOGNO(01280) "Setting referral hop limit to %d.", ldc->ReferralHopLimit); apr_ldap_set_option(r->pool, ldc->ldap, APR_LDAP_OPT_REFHOPLIMIT, (void *)&ldc->ReferralHopLimit, &(result)); if (result->rc != LDAP_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, r->server, APLOGNO(01281) "Unable to set LDAP_OPT_REFHOPLIMIT option to %d: %d.", ldc->ReferralHopLimit, result->rc); result->reason = "Unable to set LDAP_OPT_REFHOPLIMIT."; ldc->reason = result->reason; uldap_connection_unbind(ldc); return(result->rc); } } } /*XXX All of the #ifdef's need to be removed once apr-util 1.2 is released */ #ifdef APR_LDAP_OPT_VERIFY_CERT apr_ldap_set_option(r->pool, ldc->ldap, APR_LDAP_OPT_VERIFY_CERT, &(st->verify_svr_cert), &(result)); #else #if defined(LDAPSSL_VERIFY_SERVER) if (st->verify_svr_cert) { result->rc = ldapssl_set_verify_mode(LDAPSSL_VERIFY_SERVER); } else { result->rc = ldapssl_set_verify_mode(LDAPSSL_VERIFY_NONE); } #elif defined(LDAP_OPT_X_TLS_REQUIRE_CERT) /* This is not a per-connection setting so just pass NULL for the Ldap connection handle */ if (st->verify_svr_cert) { int i = LDAP_OPT_X_TLS_DEMAND; result->rc = ldap_set_option(NULL, LDAP_OPT_X_TLS_REQUIRE_CERT, &i); } else { int i = LDAP_OPT_X_TLS_NEVER; result->rc = ldap_set_option(NULL, LDAP_OPT_X_TLS_REQUIRE_CERT, &i); } #endif #endif #ifdef LDAP_OPT_NETWORK_TIMEOUT if (st->connectionTimeout > 0) { connectionTimeout.tv_sec = st->connectionTimeout; } if (connectionTimeout.tv_sec > 0) { rc = apr_ldap_set_option(r->pool, ldc->ldap, LDAP_OPT_NETWORK_TIMEOUT, (void *)&connectionTimeout, &(result)); if (APR_SUCCESS != rc) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, r->server, APLOGNO(01282) "LDAP: Could not set the connection timeout"); } } #endif #ifdef LDAP_OPT_TIMEOUT /* * LDAP_OPT_TIMEOUT is not portable, but it influences all synchronous ldap * function calls and not just ldap_search_ext_s(), which accepts a timeout * parameter. * XXX: It would be possible to simulate LDAP_OPT_TIMEOUT by replacing all * XXX: synchronous ldap function calls with asynchronous calls and using * XXX: ldap_result() with a timeout. */ if (st->opTimeout) { rc = apr_ldap_set_option(r->pool, ldc->ldap, LDAP_OPT_TIMEOUT, st->opTimeout, &(result)); if (APR_SUCCESS != rc) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, r->server, APLOGNO(01283) "LDAP: Could not set LDAP_OPT_TIMEOUT"); } } #endif return(rc); } static int uldap_ld_errno(util_ldap_connection_t *ldc) { int ldaprc; #ifdef LDAP_OPT_ERROR_NUMBER if (LDAP_SUCCESS == ldap_get_option(ldc->ldap, LDAP_OPT_ERROR_NUMBER, &ldaprc)) return ldaprc; #endif #ifdef LDAP_OPT_RESULT_CODE if (LDAP_SUCCESS == ldap_get_option(ldc->ldap, LDAP_OPT_RESULT_CODE, &ldaprc)) return ldaprc; #endif return LDAP_OTHER; } /* * Replacement function for ldap_simple_bind_s() with a timeout. * To do this in a portable way, we have to use ldap_simple_bind() and * ldap_result(). * * Returns LDAP_SUCCESS on success; and an error code on failure */ static int uldap_simple_bind(util_ldap_connection_t *ldc, char *binddn, char* bindpw, struct timeval *timeout) { LDAPMessage *result; int rc; int msgid = ldap_simple_bind(ldc->ldap, binddn, bindpw); if (msgid == -1) { ldc->reason = "LDAP: ldap_simple_bind() failed"; return uldap_ld_errno(ldc); } rc = ldap_result(ldc->ldap, msgid, 0, timeout, &result); if (rc == -1) { ldc->reason = "LDAP: ldap_simple_bind() result retrieval failed"; /* -1 is LDAP_SERVER_DOWN in openldap, use something else */ return uldap_ld_errno(ldc); } else if (rc == 0) { ldc->reason = "LDAP: ldap_simple_bind() timed out"; rc = LDAP_TIMEOUT; } else if (ldap_parse_result(ldc->ldap, result, &rc, NULL, NULL, NULL, NULL, 1) == -1) { ldc->reason = "LDAP: ldap_simple_bind() parse result failed"; return uldap_ld_errno(ldc); } else { ldc->last_backend_conn = ldc->r->request_time; ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, ldc->r, "LDC %pp bind", ldc); } return rc; } /* * Connect to the LDAP server and binds. Does not connect if already * connected (i.e. ldc->ldap is non-NULL.) Does not bind if already bound. * * Returns LDAP_SUCCESS on success; and an error code on failure */ static int uldap_connection_open(request_rec *r, util_ldap_connection_t *ldc) { int rc = 0; int failures = 0; int new_connection = 0; util_ldap_state_t *st; /* sanity check for NULL */ if (!ldc) { return -1; } /* If the connection is already bound, return */ if (ldc->bound && !ldc->must_rebind) { ldc->reason = "LDAP: connection open successful (already bound)"; return LDAP_SUCCESS; } /* create the ldap session handle */ if (NULL == ldc->ldap) { new_connection = 1; rc = uldap_connection_init( r, ldc ); if (LDAP_SUCCESS != rc) { return rc; } } st = (util_ldap_state_t *)ap_get_module_config(r->server->module_config, &ldap_module); /* loop trying to bind up to st->retries times if LDAP_SERVER_DOWN or LDAP_TIMEOUT * are returned. Close the connection before the first retry, and then on every * other retry. * * On Success or any other error, break out of the loop. * * NOTE: Looping is probably not a great idea. If the server isn't * responding the chances it will respond after a few tries are poor. * However, the original code looped and it only happens on * the error condition. */ while (failures <= st->retries) { if (failures > 0 && st->retry_delay > 0) { apr_sleep(st->retry_delay); } rc = uldap_simple_bind(ldc, (char *)ldc->binddn, (char *)ldc->bindpw, st->opTimeout); if (rc == LDAP_SUCCESS) break; failures++; if (AP_LDAP_IS_SERVER_DOWN(rc)) { ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "ldap_simple_bind() failed with server down " "(try %d)", failures); } else if (rc == LDAP_TIMEOUT) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01284) "ldap_simple_bind() timed out on %s " "connection, dropped by firewall?", new_connection ? "new" : "reused"); } else { /* Other errors not retryable */ break; } if (!(failures % 2)) { ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "attempt to re-init the connection"); uldap_connection_unbind(ldc); if (LDAP_SUCCESS != uldap_connection_init(r, ldc)) { /* leave rc as the initial bind return code */ break; } } } /* free the handle if there was an error */ if (LDAP_SUCCESS != rc) { uldap_connection_unbind(ldc); ldc->reason = "LDAP: ldap_simple_bind() failed"; } else { ldc->bound = 1; ldc->must_rebind = 0; ldc->reason = "LDAP: connection open successful"; } return(rc); } /* * Compare client certificate arrays. * * Returns 1 on compare failure, 0 otherwise. */ static int compare_client_certs(apr_array_header_t *srcs, apr_array_header_t *dests) { int i = 0; struct apr_ldap_opt_tls_cert_t *src, *dest; /* arrays both NULL? if so, then equal */ if (srcs == NULL && dests == NULL) { return 0; } /* arrays different length or either NULL? If so, then not equal */ if (srcs == NULL || dests == NULL || srcs->nelts != dests->nelts) { return 1; } /* run an actual comparison */ src = (struct apr_ldap_opt_tls_cert_t *)srcs->elts; dest = (struct apr_ldap_opt_tls_cert_t *)dests->elts; for (i = 0; i < srcs->nelts; i++) { if ((strcmp(src[i].path, dest[i].path)) || (src[i].type != dest[i].type) || /* One is passwordless? If so, then not equal */ ((src[i].password == NULL) ^ (dest[i].password == NULL)) || (src[i].password != NULL && dest[i].password != NULL && strcmp(src[i].password, dest[i].password))) { return 1; } } /* if we got here, the cert arrays were identical */ return 0; } /* * Find an existing ldap connection struct that matches the * provided ldap connection parameters. * * If not found in the cache, a new ldc structure will be allocated * from st->pool and returned to the caller. If found in the cache, * a pointer to the existing ldc structure will be returned. */ static util_ldap_connection_t * uldap_connection_find(request_rec *r, const char *host, int port, const char *binddn, const char *bindpw, deref_options deref, int secure) { struct util_ldap_connection_t *l, *p; /* To traverse the linked list */ int secureflag = secure; apr_time_t now = apr_time_now(); util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(r->server->module_config, &ldap_module); util_ldap_config_t *dc = (util_ldap_config_t *) ap_get_module_config(r->per_dir_config, &ldap_module); #if APR_HAS_THREADS /* mutex lock this function */ apr_thread_mutex_lock(st->mutex); #endif if (secure < APR_LDAP_NONE) { secureflag = st->secure; } /* Search for an exact connection match in the list that is not * being used. */ for (l=st->connections,p=NULL; l; l=l->next) { #if APR_HAS_THREADS if (APR_SUCCESS == apr_thread_mutex_trylock(l->lock)) { #endif if ( (l->port == port) && (strcmp(l->host, host) == 0) && ((!l->binddn && !binddn) || (l->binddn && binddn && !strcmp(l->binddn, binddn))) && ((!l->bindpw && !bindpw) || (l->bindpw && bindpw && !strcmp(l->bindpw, bindpw))) && (l->deref == deref) && (l->secure == secureflag) && !compare_client_certs(dc->client_certs, l->client_certs)) { if (st->connection_pool_ttl > 0) { if (l->bound && (now - l->last_backend_conn) > st->connection_pool_ttl) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Removing LDAP connection last used %" APR_TIME_T_FMT " seconds ago", (now - l->last_backend_conn) / APR_USEC_PER_SEC); l->r = r; uldap_connection_unbind(l); /* Go ahead (by falling through) and use it, so we don't create more just to unbind some other old ones */ } ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "Reuse %s LDC %pp", l->bound ? "bound" : "unbound", l); } break; } #if APR_HAS_THREADS /* If this connection didn't match the criteria, then we * need to unlock the mutex so it is available to be reused. */ apr_thread_mutex_unlock(l->lock); } #endif p = l; } /* If nothing found, search again, but we don't care about the * binddn and bindpw this time. */ if (!l) { for (l=st->connections,p=NULL; l; l=l->next) { #if APR_HAS_THREADS if (APR_SUCCESS == apr_thread_mutex_trylock(l->lock)) { #endif if ((l->port == port) && (strcmp(l->host, host) == 0) && (l->deref == deref) && (l->secure == secureflag) && !compare_client_certs(dc->client_certs, l->client_certs)) { if (st->connection_pool_ttl > 0) { if (l->bound && (now - l->last_backend_conn) > st->connection_pool_ttl) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Removing LDAP connection last used %" APR_TIME_T_FMT " seconds ago", (now - l->last_backend_conn) / APR_USEC_PER_SEC); l->r = r; uldap_connection_unbind(l); /* Go ahead (by falling through) and use it, so we don't create more just to unbind some other old ones */ } ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "Reuse %s LDC %pp (will rebind)", l->bound ? "bound" : "unbound", l); } /* the bind credentials have changed */ l->must_rebind = 1; util_ldap_strdup((char**)&(l->binddn), binddn); util_ldap_strdup((char**)&(l->bindpw), bindpw); break; } #if APR_HAS_THREADS /* If this connection didn't match the criteria, then we * need to unlock the mutex so it is available to be reused. */ apr_thread_mutex_unlock(l->lock); } #endif p = l; } } /* artificially disable cache */ /* l = NULL; */ /* If no connection was found after the second search, we * must create one. */ if (!l) { apr_pool_t *newpool; if (apr_pool_create(&newpool, NULL) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(01285) "util_ldap: Failed to create memory pool"); #if APR_HAS_THREADS apr_thread_mutex_unlock(st->mutex); #endif return NULL; } /* * Add the new connection entry to the linked list. Note that we * don't actually establish an LDAP connection yet; that happens * the first time authentication is requested. */ /* create the details of this connection in the new pool */ l = apr_pcalloc(newpool, sizeof(util_ldap_connection_t)); l->pool = newpool; l->st = st; #if APR_HAS_THREADS apr_thread_mutex_create(&l->lock, APR_THREAD_MUTEX_DEFAULT, l->pool); apr_thread_mutex_lock(l->lock); #endif l->bound = 0; l->host = apr_pstrdup(l->pool, host); l->port = port; l->deref = deref; util_ldap_strdup((char**)&(l->binddn), binddn); util_ldap_strdup((char**)&(l->bindpw), bindpw); l->ChaseReferrals = dc->ChaseReferrals; l->ReferralHopLimit = dc->ReferralHopLimit; /* The security mode after parsing the URL will always be either * APR_LDAP_NONE (ldap://) or APR_LDAP_SSL (ldaps://). * If the security setting is NONE, override it to the security * setting optionally supplied by the admin using LDAPTrustedMode */ l->secure = secureflag; /* save away a copy of the client cert list that is presently valid */ l->client_certs = apr_array_copy_hdr(l->pool, dc->client_certs); /* whether or not to keep this connection in the pool when it's returned */ l->keep = (st->connection_pool_ttl == 0) ? 0 : 1; if (l->ChaseReferrals == AP_LDAP_CHASEREFERRALS_ON) { if (apr_pool_create(&(l->rebind_pool), l->pool) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(01286) "util_ldap: Failed to create memory pool"); #if APR_HAS_THREADS apr_thread_mutex_unlock(st->mutex); #endif return NULL; } } if (p) { p->next = l; } else { st->connections = l; } } #if APR_HAS_THREADS apr_thread_mutex_unlock(st->mutex); #endif l->r = r; return l; } /* ------------------------------------------------------------------ */ /* * Compares two DNs to see if they're equal. The only way to do this correctly * is to search for the dn and then do ldap_get_dn() on the result. This should * match the initial dn, since it would have been also retrieved with * ldap_get_dn(). This is expensive, so if the configuration value * compare_dn_on_server is false, just does an ordinary strcmp. * * The lock for the ldap cache should already be acquired. */ static int uldap_cache_comparedn(request_rec *r, util_ldap_connection_t *ldc, const char *url, const char *dn, const char *reqdn, int compare_dn_on_server) { int result = 0; util_url_node_t *curl; util_url_node_t curnode; util_dn_compare_node_t *node; util_dn_compare_node_t newnode; int failures = 0; LDAPMessage *res, *entry; char *searchdn; util_ldap_state_t *st = (util_ldap_state_t *) ap_get_module_config(r->server->module_config, &ldap_module); /* get cache entry (or create one) */ LDAP_CACHE_LOCK(); curnode.url = url; curl = util_ald_cache_fetch(st->util_ldap_cache, &curnode); if (curl == NULL) { curl = util_ald_create_caches(st, url); } LDAP_CACHE_UNLOCK(); /* a simple compare? */ if (!compare_dn_on_server) { /* unlock this read lock */ if (strcmp(dn, reqdn)) { ldc->reason = "DN Comparison FALSE (direct strcmp())"; return LDAP_COMPARE_FALSE; } else { ldc->reason = "DN Comparison TRUE (direct strcmp())"; return LDAP_COMPARE_TRUE; } } if (curl) { /* no - it's a server side compare */ LDAP_CACHE_LOCK(); /* is it in the compare cache? */ newnode.reqdn = (char *)reqdn; node = util_ald_cache_fetch(curl->dn_compare_cache, &newnode); if (node != NULL) { /* If it's in the cache, it's good */ /* unlock this read lock */ LDAP_CACHE_UNLOCK(); ldc->reason = "DN Comparison TRUE (cached)"; return LDAP_COMPARE_TRUE; } /* unlock this read lock */ LDAP_CACHE_UNLOCK(); } start_over: if (failures > st->retries) { return result; } if (failures > 0 && st->retry_delay > 0) { apr_sleep(st->retry_delay); } /* make a server connection */ if (LDAP_SUCCESS != (result = uldap_connection_open(r, ldc))) { /* connect to server failed */ return result; } /* search for reqdn */ result = ldap_search_ext_s(ldc->ldap, (char *)reqdn, LDAP_SCOPE_BASE, "(objectclass=*)", NULL, 1, NULL, NULL, st->opTimeout, APR_LDAP_SIZELIMIT, &res); if (AP_LDAP_IS_SERVER_DOWN(result)) { ldc->reason = "DN Comparison ldap_search_ext_s() " "failed with server down"; uldap_connection_unbind(ldc); failures++; ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "%s (attempt %d)", ldc->reason, failures); goto start_over; } if (result == LDAP_TIMEOUT && failures == 0) { /* * we are reusing a connection that doesn't seem to be active anymore * (firewall state drop?), let's try a new connection. */ ldc->reason = "DN Comparison ldap_search_ext_s() " "failed with timeout"; uldap_connection_unbind(ldc); failures++; ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "%s (attempt %d)", ldc->reason, failures); goto start_over; } if (result != LDAP_SUCCESS) { /* search for reqdn failed - no match */ ldc->reason = "DN Comparison ldap_search_ext_s() failed"; return result; } ldc->last_backend_conn = r->request_time; entry = ldap_first_entry(ldc->ldap, res); searchdn = ldap_get_dn(ldc->ldap, entry); ldap_msgfree(res); if (strcmp(dn, searchdn) != 0) { /* compare unsuccessful */ ldc->reason = "DN Comparison FALSE (checked on server)"; result = LDAP_COMPARE_FALSE; } else { if (curl) { /* compare successful - add to the compare cache */ LDAP_CACHE_LOCK(); newnode.reqdn = (char *)reqdn; newnode.dn = (char *)dn; node = util_ald_cache_fetch(curl->dn_compare_cache, &newnode); if ( (node == NULL) || (strcmp(reqdn, node->reqdn) != 0) || (strcmp(dn, node->dn) != 0)) { util_ald_cache_insert(curl->dn_compare_cache, &newnode); } LDAP_CACHE_UNLOCK(); } ldc->reason = "DN Comparison TRUE (checked on server)"; result = LDAP_COMPARE_TRUE; } ldap_memfree(searchdn); return result; } /* * Does an generic ldap_compare operation. It accepts a cache that it will use * to lookup the compare in the cache. We cache two kinds of compares * (require group compares) and (require user compares). Each compare has a * different cache node: require group includes the DN; require user does not * because the require user cache is owned by the * */ static int uldap_cache_compare(request_rec *r, util_ldap_connection_t *ldc, const char *url, const char *dn, const char *attrib, const char *value) { int result = 0; util_url_node_t *curl; util_url_node_t curnode; util_compare_node_t *compare_nodep; util_compare_node_t the_compare_node; apr_time_t curtime = 0; /* silence gcc -Wall */ int failures = 0; util_ldap_state_t *st = (util_ldap_state_t *) ap_get_module_config(r->server->module_config, &ldap_module); /* get cache entry (or create one) */ LDAP_CACHE_LOCK(); curnode.url = url; curl = util_ald_cache_fetch(st->util_ldap_cache, &curnode); if (curl == NULL) { curl = util_ald_create_caches(st, url); } LDAP_CACHE_UNLOCK(); if (curl) { /* make a comparison to the cache */ LDAP_CACHE_LOCK(); curtime = apr_time_now(); the_compare_node.dn = (char *)dn; the_compare_node.attrib = (char *)attrib; the_compare_node.value = (char *)value; the_compare_node.result = 0; the_compare_node.sgl_processed = 0; the_compare_node.subgroupList = NULL; compare_nodep = util_ald_cache_fetch(curl->compare_cache, &the_compare_node); if (compare_nodep != NULL) { /* found it... */ if (curtime - compare_nodep->lastcompare > st->compare_cache_ttl) { /* ...but it is too old */ util_ald_cache_remove(curl->compare_cache, compare_nodep); } else { /* ...and it is good */ if (LDAP_COMPARE_TRUE == compare_nodep->result) { ldc->reason = "Comparison true (cached)"; } else if (LDAP_COMPARE_FALSE == compare_nodep->result) { ldc->reason = "Comparison false (cached)"; } else if (LDAP_NO_SUCH_ATTRIBUTE == compare_nodep->result) { ldc->reason = "Comparison no such attribute (cached)"; } else { ldc->reason = apr_psprintf(r->pool, "Comparison undefined: (%d): %s (adding to cache)", result, ldap_err2string(result)); } /* record the result code to return with the reason... */ result = compare_nodep->result; /* and unlock this read lock */ LDAP_CACHE_UNLOCK(); ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "ldap_compare_s(%pp, %s, %s, %s) = %s (cached)", ldc->ldap, dn, attrib, value, ldap_err2string(result)); return result; } } /* unlock this read lock */ LDAP_CACHE_UNLOCK(); } start_over: if (failures > st->retries) { return result; } if (failures > 0 && st->retry_delay > 0) { apr_sleep(st->retry_delay); } if (LDAP_SUCCESS != (result = uldap_connection_open(r, ldc))) { /* connect failed */ return result; } result = ldap_compare_s(ldc->ldap, (char *)dn, (char *)attrib, (char *)value); if (AP_LDAP_IS_SERVER_DOWN(result)) { /* connection failed - try again */ ldc->reason = "ldap_compare_s() failed with server down"; uldap_connection_unbind(ldc); failures++; ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "%s (attempt %d)", ldc->reason, failures); goto start_over; } if (result == LDAP_TIMEOUT && failures == 0) { /* * we are reusing a connection that doesn't seem to be active anymore * (firewall state drop?), let's try a new connection. */ ldc->reason = "ldap_compare_s() failed with timeout"; uldap_connection_unbind(ldc); failures++; ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "%s (attempt %d)", ldc->reason, failures); goto start_over; } ldc->last_backend_conn = r->request_time; ldc->reason = "Comparison complete"; if ((LDAP_COMPARE_TRUE == result) || (LDAP_COMPARE_FALSE == result) || (LDAP_NO_SUCH_ATTRIBUTE == result)) { if (curl) { /* compare completed; caching result */ LDAP_CACHE_LOCK(); the_compare_node.lastcompare = curtime; the_compare_node.result = result; the_compare_node.sgl_processed = 0; the_compare_node.subgroupList = NULL; /* If the node doesn't exist then insert it, otherwise just update * it with the last results */ compare_nodep = util_ald_cache_fetch(curl->compare_cache, &the_compare_node); if ( (compare_nodep == NULL) || (strcmp(the_compare_node.dn, compare_nodep->dn) != 0) || (strcmp(the_compare_node.attrib,compare_nodep->attrib) != 0) || (strcmp(the_compare_node.value, compare_nodep->value) != 0)) { void *junk; junk = util_ald_cache_insert(curl->compare_cache, &the_compare_node); if (junk == NULL) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01287) "cache_compare: Cache insertion failure."); } } else { compare_nodep->lastcompare = curtime; compare_nodep->result = result; } LDAP_CACHE_UNLOCK(); } if (LDAP_COMPARE_TRUE == result) { ldc->reason = "Comparison true (adding to cache)"; } else if (LDAP_COMPARE_FALSE == result) { ldc->reason = "Comparison false (adding to cache)"; } else if (LDAP_NO_SUCH_ATTRIBUTE == result) { ldc->reason = "Comparison no such attribute (adding to cache)"; } else { ldc->reason = apr_psprintf(r->pool, "Comparison undefined: (%d): %s (adding to cache)", result, ldap_err2string(result)); } } ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "ldap_compare_s(%pp, %s, %s, %s) = %s", ldc->ldap, dn, attrib, value, ldap_err2string(result)); return result; } static util_compare_subgroup_t* uldap_get_subgroups(request_rec *r, util_ldap_connection_t *ldc, const char *url, const char *dn, char **subgroupAttrs, apr_array_header_t *subgroupclasses) { int failures = 0; int result = LDAP_COMPARE_FALSE; util_compare_subgroup_t *res = NULL; LDAPMessage *sga_res, *entry; struct mod_auth_ldap_groupattr_entry_t *sgc_ents; apr_array_header_t *subgroups = apr_array_make(r->pool, 20, sizeof(char *)); util_ldap_state_t *st = (util_ldap_state_t *) ap_get_module_config(r->server->module_config, &ldap_module); sgc_ents = (struct mod_auth_ldap_groupattr_entry_t *) subgroupclasses->elts; if (!subgroupAttrs) { return res; } start_over: /* * 3.B. The cache didn't have any subgrouplist yet. Go check for subgroups. */ if (failures > st->retries) { return res; } if (failures > 0 && st->retry_delay > 0) { apr_sleep(st->retry_delay); } if (LDAP_SUCCESS != (result = uldap_connection_open(r, ldc))) { /* connect failed */ return res; } /* try to do the search */ result = ldap_search_ext_s(ldc->ldap, (char *)dn, LDAP_SCOPE_BASE, NULL, subgroupAttrs, 0, NULL, NULL, NULL, APR_LDAP_SIZELIMIT, &sga_res); if (AP_LDAP_IS_SERVER_DOWN(result)) { ldc->reason = "ldap_search_ext_s() for subgroups failed with server" " down"; uldap_connection_unbind(ldc); failures++; ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "%s (attempt %d)", ldc->reason, failures); goto start_over; } if (result == LDAP_TIMEOUT && failures == 0) { /* * we are reusing a connection that doesn't seem to be active anymore * (firewall state drop?), let's try a new connection. */ ldc->reason = "ldap_search_ext_s() for subgroups failed with timeout"; uldap_connection_unbind(ldc); failures++; ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "%s (attempt %d)", ldc->reason, failures); goto start_over; } /* if there is an error (including LDAP_NO_SUCH_OBJECT) return now */ if (result != LDAP_SUCCESS) { ldc->reason = "ldap_search_ext_s() for subgroups failed"; return res; } ldc->last_backend_conn = r->request_time; entry = ldap_first_entry(ldc->ldap, sga_res); /* * Get values for the provided sub-group attributes. */ if (subgroupAttrs) { int indx = 0, tmp_sgcIndex; while (subgroupAttrs[indx]) { char **values; int val_index = 0; /* Get *all* matching "member" values from this group. */ values = ldap_get_values(ldc->ldap, entry, subgroupAttrs[indx]); if (values) { val_index = 0; /* * Now we are going to pare the subgroup members of this group * to *just* the subgroups, add them to the compare_nodep, and * then proceed to check the new level of subgroups. */ while (values[val_index]) { /* Check if this entry really is a group. */ tmp_sgcIndex = 0; result = LDAP_COMPARE_FALSE; while ((tmp_sgcIndex < subgroupclasses->nelts) && (result != LDAP_COMPARE_TRUE)) { result = uldap_cache_compare(r, ldc, url, values[val_index], "objectClass", sgc_ents[tmp_sgcIndex].name ); if (result != LDAP_COMPARE_TRUE) { tmp_sgcIndex++; } } /* It's a group, so add it to the array. */ if (result == LDAP_COMPARE_TRUE) { char **newgrp = (char **) apr_array_push(subgroups); *newgrp = apr_pstrdup(r->pool, values[val_index]); } val_index++; } ldap_value_free(values); } indx++; } } ldap_msgfree(sga_res); if (subgroups->nelts > 0) { /* We need to fill in tmp_local_subgroups using the data from LDAP */ int sgindex; char **group; res = apr_pcalloc(r->pool, sizeof(util_compare_subgroup_t)); res->subgroupDNs = apr_palloc(r->pool, sizeof(char *) * (subgroups->nelts)); for (sgindex = 0; (group = apr_array_pop(subgroups)); sgindex++) { res->subgroupDNs[sgindex] = apr_pstrdup(r->pool, *group); } res->len = sgindex; } return res; } /* * Does a recursive lookup operation to try to find a user within (cached) * nested groups. It accepts a cache that it will use to lookup previous * compare attempts. We cache two kinds of compares (require group compares) * and (require user compares). Each compare has a different cache node: * require group includes the DN; require user does not because the require * user cache is owned by the * * DON'T CALL THIS UNLESS YOU CALLED uldap_cache_compare FIRST!!!!! * * * 1. Call uldap_cache_compare for each subgroupclass value to check the * generic, user-agnostic, cached group entry. This will create a new generic * cache entry if there * wasn't one. If nothing returns LDAP_COMPARE_TRUE skip to step 5 since we * have no groups. * 2. Lock The cache and get the generic cache entry. * 3. Check if there is already a subgrouplist in this generic group's cache * entry. * A. If there is, go to step 4. * B. If there isn't: * i) Use ldap_search to get the full list * of subgroup "members" (which may include non-group "members"). * ii) Use uldap_cache_compare to strip the list down to just groups. * iii) Lock and add this stripped down list to the cache of the generic * group. * 4. Loop through the sgl and call uldap_cache_compare (using the user info) * for each * subgroup to see if the subgroup contains the user and to get the subgroups * added to the * cache (with user-afinity, if they aren't already there). * A. If the user is in the subgroup, then we'll be returning * LDAP_COMPARE_TRUE. * B. if the user isn't in the subgroup (LDAP_COMPARE_FALSE via * uldap_cache_compare) then recursively call this function to get the * sub-subgroups added... * 5. Cleanup local allocations. * 6. Return the final result. */ static int uldap_cache_check_subgroups(request_rec *r, util_ldap_connection_t *ldc, const char *url, const char *dn, const char *attrib, const char *value, char **subgroupAttrs, apr_array_header_t *subgroupclasses, int cur_subgroup_depth, int max_subgroup_depth) { int result = LDAP_COMPARE_FALSE; util_url_node_t *curl; util_url_node_t curnode; util_compare_node_t *compare_nodep; util_compare_node_t the_compare_node; util_compare_subgroup_t *tmp_local_sgl = NULL; int sgl_cached_empty = 0, sgindex = 0, base_sgcIndex = 0; struct mod_auth_ldap_groupattr_entry_t *sgc_ents = (struct mod_auth_ldap_groupattr_entry_t *) subgroupclasses->elts; util_ldap_state_t *st = (util_ldap_state_t *) ap_get_module_config(r->server->module_config, &ldap_module); /* * Stop looking at deeper levels of nested groups if we have reached the * max. Since we already checked the top-level group in uldap_cache_compare, * we don't need to check it again here - so if max_subgroup_depth is set * to 0, we won't check it (i.e. that is why we check < rather than <=). * We'll be calling uldap_cache_compare from here to check if the user is * in the next level before we recurse into that next level looking for * more subgroups. */ if (cur_subgroup_depth >= max_subgroup_depth) { return LDAP_COMPARE_FALSE; } /* * 1. Check the "groupiness" of the specified basedn. Stopping at the first * TRUE return. */ while ((base_sgcIndex < subgroupclasses->nelts) && (result != LDAP_COMPARE_TRUE)) { result = uldap_cache_compare(r, ldc, url, dn, "objectClass", sgc_ents[base_sgcIndex].name); if (result != LDAP_COMPARE_TRUE) { base_sgcIndex++; } } if (result != LDAP_COMPARE_TRUE) { ldc->reason = "DN failed group verification."; return result; } /* * 2. Find previously created cache entry and check if there is already a * subgrouplist. */ LDAP_CACHE_LOCK(); curnode.url = url; curl = util_ald_cache_fetch(st->util_ldap_cache, &curnode); LDAP_CACHE_UNLOCK(); if (curl && curl->compare_cache) { /* make a comparison to the cache */ LDAP_CACHE_LOCK(); the_compare_node.dn = (char *)dn; the_compare_node.attrib = (char *)"objectClass"; the_compare_node.value = (char *)sgc_ents[base_sgcIndex].name; the_compare_node.result = 0; the_compare_node.sgl_processed = 0; the_compare_node.subgroupList = NULL; compare_nodep = util_ald_cache_fetch(curl->compare_cache, &the_compare_node); if (compare_nodep != NULL) { /* * Found the generic group entry... but the user isn't in this * group or we wouldn't be here. */ if (compare_nodep->sgl_processed) { if (compare_nodep->subgroupList) { /* Make a local copy of the subgroup list */ int i; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01288) "Making local copy of SGL for " "group (%s)(objectClass=%s) ", dn, (char *)sgc_ents[base_sgcIndex].name); tmp_local_sgl = apr_pcalloc(r->pool, sizeof(util_compare_subgroup_t)); tmp_local_sgl->len = compare_nodep->subgroupList->len; tmp_local_sgl->subgroupDNs = apr_palloc(r->pool, sizeof(char *) * compare_nodep->subgroupList->len); for (i = 0; i < compare_nodep->subgroupList->len; i++) { tmp_local_sgl->subgroupDNs[i] = apr_pstrdup(r->pool, compare_nodep->subgroupList->subgroupDNs[i]); } } else { sgl_cached_empty = 1; } } } LDAP_CACHE_UNLOCK(); } if (!tmp_local_sgl && !sgl_cached_empty) { /* No Cached SGL, retrieve from LDAP */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01289) "no cached SGL for %s, retrieving from LDAP", dn); tmp_local_sgl = uldap_get_subgroups(r, ldc, url, dn, subgroupAttrs, subgroupclasses); if (!tmp_local_sgl) { /* No SGL aailable via LDAP either */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01290) "no subgroups for %s", dn); } if (curl && curl->compare_cache) { /* * Find the generic group cache entry and add the sgl we just retrieved. */ LDAP_CACHE_LOCK(); the_compare_node.dn = (char *)dn; the_compare_node.attrib = (char *)"objectClass"; the_compare_node.value = (char *)sgc_ents[base_sgcIndex].name; the_compare_node.result = 0; the_compare_node.sgl_processed = 0; the_compare_node.subgroupList = NULL; compare_nodep = util_ald_cache_fetch(curl->compare_cache, &the_compare_node); if (compare_nodep == NULL) { /* * The group entry we want to attach our SGL to doesn't exist. * We only got here if we verified this DN was actually a group * based on the objectClass, but we can't call the compare function * while we already hold the cache lock -- only the insert. */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01291) "Cache entry for %s doesn't exist", dn); the_compare_node.result = LDAP_COMPARE_TRUE; util_ald_cache_insert(curl->compare_cache, &the_compare_node); compare_nodep = util_ald_cache_fetch(curl->compare_cache, &the_compare_node); if (compare_nodep == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01292) "util_ldap: Couldn't retrieve group entry " "for %s from cache", dn); } } /* * We have a valid cache entry and a locally generated SGL. * Attach the SGL to the cache entry */ if (compare_nodep && !compare_nodep->sgl_processed) { if (!tmp_local_sgl) { /* We looked up an SGL for a group and found it to be empty */ if (compare_nodep->subgroupList == NULL) { compare_nodep->sgl_processed = 1; } } else { util_compare_subgroup_t *sgl_copy = util_ald_sgl_dup(curl->compare_cache, tmp_local_sgl); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, r->server, APLOGNO(01293) "Copying local SGL of len %d for group %s into cache", tmp_local_sgl->len, dn); if (sgl_copy) { if (compare_nodep->subgroupList) { util_ald_sgl_free(curl->compare_cache, &(compare_nodep->subgroupList)); } compare_nodep->subgroupList = sgl_copy; compare_nodep->sgl_processed = 1; } else { ap_log_error(APLOG_MARK, APLOG_ERR, 0, r->server, APLOGNO(01294) "Copy of SGL failed to obtain shared memory, " "couldn't update cache"); } } } LDAP_CACHE_UNLOCK(); } } /* * tmp_local_sgl has either been created, or copied out of the cache * If tmp_local_sgl is NULL, there are no subgroups to process and we'll * return false */ result = LDAP_COMPARE_FALSE; if (!tmp_local_sgl) { return result; } while ((result != LDAP_COMPARE_TRUE) && (sgindex < tmp_local_sgl->len)) { const char *group = NULL; group = tmp_local_sgl->subgroupDNs[sgindex]; /* * 4. Now loop through the subgroupList and call uldap_cache_compare * to check for the user. */ result = uldap_cache_compare(r, ldc, url, group, attrib, value); if (result == LDAP_COMPARE_TRUE) { /* * 4.A. We found the user in the subgroup. Return * LDAP_COMPARE_TRUE. */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01295) "Found user %s in a subgroup (%s) at level %d of %d.", r->user, group, cur_subgroup_depth+1, max_subgroup_depth); } else { /* * 4.B. We didn't find the user in this subgroup, so recurse into * it and keep looking. */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01296) "User %s not found in subgroup (%s) at level %d of " "%d.", r->user, group, cur_subgroup_depth+1, max_subgroup_depth); result = uldap_cache_check_subgroups(r, ldc, url, group, attrib, value, subgroupAttrs, subgroupclasses, cur_subgroup_depth+1, max_subgroup_depth); } sgindex++; } return result; } static int uldap_cache_checkuserid(request_rec *r, util_ldap_connection_t *ldc, const char *url, const char *basedn, int scope, char **attrs, const char *filter, const char *bindpw, const char **binddn, const char ***retvals) { const char **vals = NULL; int numvals = 0; int result = 0; LDAPMessage *res, *entry; char *dn; int count; int failures = 0; util_url_node_t *curl; /* Cached URL node */ util_url_node_t curnode; util_search_node_t *search_nodep; /* Cached search node */ util_search_node_t the_search_node; apr_time_t curtime; util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(r->server->module_config, &ldap_module); /* Get the cache node for this url */ LDAP_CACHE_LOCK(); curnode.url = url; curl = (util_url_node_t *)util_ald_cache_fetch(st->util_ldap_cache, &curnode); if (curl == NULL) { curl = util_ald_create_caches(st, url); } LDAP_CACHE_UNLOCK(); if (curl) { LDAP_CACHE_LOCK(); the_search_node.username = filter; search_nodep = util_ald_cache_fetch(curl->search_cache, &the_search_node); if (search_nodep != NULL) { /* found entry in search cache... */ curtime = apr_time_now(); /* * Remove this item from the cache if its expired. If the sent * password doesn't match the storepassword, the entry will * be removed and readded later if the credentials pass * authentication. */ if ((curtime - search_nodep->lastbind) > st->search_cache_ttl) { /* ...but entry is too old */ util_ald_cache_remove(curl->search_cache, search_nodep); } else if ( (search_nodep->bindpw) && (search_nodep->bindpw[0] != '\0') && (strcmp(search_nodep->bindpw, bindpw) == 0)) { /* ...and entry is valid */ *binddn = apr_pstrdup(r->pool, search_nodep->dn); if (attrs) { int i; *retvals = apr_palloc(r->pool, sizeof(char *) * search_nodep->numvals); for (i = 0; i < search_nodep->numvals; i++) { (*retvals)[i] = apr_pstrdup(r->pool, search_nodep->vals[i]); } } LDAP_CACHE_UNLOCK(); ldc->reason = "Authentication successful (cached)"; return LDAP_SUCCESS; } } /* unlock this read lock */ LDAP_CACHE_UNLOCK(); } /* * At this point, there is no valid cached search, so lets do the search. */ /* * If LDAP operation fails due to LDAP_SERVER_DOWN, control returns here. */ start_over: if (failures > st->retries) { return result; } if (failures > 0 && st->retry_delay > 0) { apr_sleep(st->retry_delay); } if (LDAP_SUCCESS != (result = uldap_connection_open(r, ldc))) { return result; } /* try do the search */ result = ldap_search_ext_s(ldc->ldap, (char *)basedn, scope, (char *)filter, attrs, 0, NULL, NULL, st->opTimeout, APR_LDAP_SIZELIMIT, &res); if (AP_LDAP_IS_SERVER_DOWN(result)) { ldc->reason = "ldap_search_ext_s() for user failed with server down"; uldap_connection_unbind(ldc); failures++; ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "%s (attempt %d)", ldc->reason, failures); goto start_over; } if (result == LDAP_TIMEOUT) { ldc->reason = "ldap_search_ext_s() for user failed with timeout"; uldap_connection_unbind(ldc); failures++; ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "%s (attempt %d)", ldc->reason, failures); goto start_over; } /* if there is an error (including LDAP_NO_SUCH_OBJECT) return now */ if (result != LDAP_SUCCESS) { ldc->reason = "ldap_search_ext_s() for user failed"; return result; } /* * We should have found exactly one entry; to find a different * number is an error. */ ldc->last_backend_conn = r->request_time; count = ldap_count_entries(ldc->ldap, res); if (count != 1) { if (count == 0 ) ldc->reason = "User not found"; else ldc->reason = "User is not unique (search found two " "or more matches)"; ldap_msgfree(res); return LDAP_NO_SUCH_OBJECT; } entry = ldap_first_entry(ldc->ldap, res); /* Grab the dn, copy it into the pool, and free it again */ dn = ldap_get_dn(ldc->ldap, entry); *binddn = apr_pstrdup(r->pool, dn); ldap_memfree(dn); /* * A bind to the server with an empty password always succeeds, so * we check to ensure that the password is not empty. This implies * that users who actually do have empty passwords will never be * able to authenticate with this module. I don't see this as a big * problem. */ if (!bindpw || strlen(bindpw) <= 0) { ldap_msgfree(res); ldc->reason = "Empty password not allowed"; return LDAP_INVALID_CREDENTIALS; } /* * Attempt to bind with the retrieved dn and the password. If the bind * fails, it means that the password is wrong (the dn obviously * exists, since we just retrieved it) */ result = uldap_simple_bind(ldc, (char *)*binddn, (char *)bindpw, st->opTimeout); if (AP_LDAP_IS_SERVER_DOWN(result) || (result == LDAP_TIMEOUT && failures == 0)) { if (AP_LDAP_IS_SERVER_DOWN(result)) ldc->reason = "ldap_simple_bind() to check user credentials " "failed with server down"; else ldc->reason = "ldap_simple_bind() to check user credentials " "timed out"; ldap_msgfree(res); uldap_connection_unbind(ldc); failures++; ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "%s (attempt %d)", ldc->reason, failures); goto start_over; } /* failure? if so - return */ if (result != LDAP_SUCCESS) { ldc->reason = "ldap_simple_bind() to check user credentials failed"; ldap_msgfree(res); uldap_connection_unbind(ldc); return result; } else { /* * We have just bound the connection to a different user and password * combination, which might be reused unintentionally next time this * connection is used from the connection pool. */ ldc->must_rebind = 1; ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "LDC %pp used for authn, must be rebound", ldc); } /* * Get values for the provided attributes. */ if (attrs) { int k = 0; int i = 0; while (attrs[k++]); vals = apr_pcalloc(r->pool, sizeof(char *) * (k+1)); numvals = k; while (attrs[i]) { char **values; int j = 0; char *str = NULL; /* get values */ values = ldap_get_values(ldc->ldap, entry, attrs[i]); while (values && values[j]) { str = str ? apr_pstrcat(r->pool, str, "; ", values[j], NULL) : apr_pstrdup(r->pool, values[j]); j++; } ldap_value_free(values); vals[i] = str; i++; } *retvals = vals; } /* * Add the new username to the search cache. */ if (curl) { LDAP_CACHE_LOCK(); the_search_node.username = filter; the_search_node.dn = *binddn; the_search_node.bindpw = bindpw; the_search_node.lastbind = apr_time_now(); the_search_node.vals = vals; the_search_node.numvals = numvals; /* Search again to make sure that another thread didn't ready insert * this node into the cache before we got here. If it does exist then * update the lastbind */ search_nodep = util_ald_cache_fetch(curl->search_cache, &the_search_node); if ((search_nodep == NULL) || (strcmp(*binddn, search_nodep->dn) != 0)) { /* Nothing in cache, insert new entry */ util_ald_cache_insert(curl->search_cache, &the_search_node); } else if ((!search_nodep->bindpw) || (strcmp(bindpw, search_nodep->bindpw) != 0)) { /* Entry in cache is invalid, remove it and insert new one */ util_ald_cache_remove(curl->search_cache, search_nodep); util_ald_cache_insert(curl->search_cache, &the_search_node); } else { /* Cache entry is valid, update lastbind */ search_nodep->lastbind = the_search_node.lastbind; } LDAP_CACHE_UNLOCK(); } ldap_msgfree(res); ldc->reason = "Authentication successful"; return LDAP_SUCCESS; } /* * This function will return the DN of the entry matching userid. * It is used to get the DN in case some other module than mod_auth_ldap * has authenticated the user. * The function is basically a copy of uldap_cache_checkuserid * with password checking removed. */ static int uldap_cache_getuserdn(request_rec *r, util_ldap_connection_t *ldc, const char *url, const char *basedn, int scope, char **attrs, const char *filter, const char **binddn, const char ***retvals) { const char **vals = NULL; int numvals = 0; int result = 0; LDAPMessage *res, *entry; char *dn; int count; int failures = 0; util_url_node_t *curl; /* Cached URL node */ util_url_node_t curnode; util_search_node_t *search_nodep; /* Cached search node */ util_search_node_t the_search_node; apr_time_t curtime; util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(r->server->module_config, &ldap_module); /* Get the cache node for this url */ LDAP_CACHE_LOCK(); curnode.url = url; curl = (util_url_node_t *)util_ald_cache_fetch(st->util_ldap_cache, &curnode); if (curl == NULL) { curl = util_ald_create_caches(st, url); } LDAP_CACHE_UNLOCK(); if (curl) { LDAP_CACHE_LOCK(); the_search_node.username = filter; search_nodep = util_ald_cache_fetch(curl->search_cache, &the_search_node); if (search_nodep != NULL) { /* found entry in search cache... */ curtime = apr_time_now(); /* * Remove this item from the cache if its expired. */ if ((curtime - search_nodep->lastbind) > st->search_cache_ttl) { /* ...but entry is too old */ util_ald_cache_remove(curl->search_cache, search_nodep); } else { /* ...and entry is valid */ *binddn = apr_pstrdup(r->pool, search_nodep->dn); if (attrs) { int i; *retvals = apr_palloc(r->pool, sizeof(char *) * search_nodep->numvals); for (i = 0; i < search_nodep->numvals; i++) { (*retvals)[i] = apr_pstrdup(r->pool, search_nodep->vals[i]); } } LDAP_CACHE_UNLOCK(); ldc->reason = "Search successful (cached)"; return LDAP_SUCCESS; } } /* unlock this read lock */ LDAP_CACHE_UNLOCK(); } /* * At this point, there is no valid cached search, so lets do the search. */ /* * If LDAP operation fails due to LDAP_SERVER_DOWN, control returns here. */ start_over: if (failures > st->retries) { return result; } if (failures > 0 && st->retry_delay > 0) { apr_sleep(st->retry_delay); } if (LDAP_SUCCESS != (result = uldap_connection_open(r, ldc))) { return result; } /* try do the search */ result = ldap_search_ext_s(ldc->ldap, (char *)basedn, scope, (char *)filter, attrs, 0, NULL, NULL, st->opTimeout, APR_LDAP_SIZELIMIT, &res); if (AP_LDAP_IS_SERVER_DOWN(result)) { ldc->reason = "ldap_search_ext_s() for user failed with server down"; uldap_connection_unbind(ldc); failures++; ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "%s (attempt %d)", ldc->reason, failures); goto start_over; } /* if there is an error (including LDAP_NO_SUCH_OBJECT) return now */ if (result != LDAP_SUCCESS) { ldc->reason = "ldap_search_ext_s() for user failed"; return result; } /* * We should have found exactly one entry; to find a different * number is an error. */ ldc->last_backend_conn = r->request_time; count = ldap_count_entries(ldc->ldap, res); if (count != 1) { if (count == 0 ) ldc->reason = "User not found"; else ldc->reason = "User is not unique (search found two " "or more matches)"; ldap_msgfree(res); return LDAP_NO_SUCH_OBJECT; } entry = ldap_first_entry(ldc->ldap, res); /* Grab the dn, copy it into the pool, and free it again */ dn = ldap_get_dn(ldc->ldap, entry); *binddn = apr_pstrdup(r->pool, dn); ldap_memfree(dn); /* * Get values for the provided attributes. */ if (attrs) { int k = 0; int i = 0; while (attrs[k++]); vals = apr_pcalloc(r->pool, sizeof(char *) * (k+1)); numvals = k; while (attrs[i]) { char **values; int j = 0; char *str = NULL; /* get values */ values = ldap_get_values(ldc->ldap, entry, attrs[i]); while (values && values[j]) { str = str ? apr_pstrcat(r->pool, str, "; ", values[j], NULL) : apr_pstrdup(r->pool, values[j]); j++; } ldap_value_free(values); vals[i] = str; i++; } *retvals = vals; } /* * Add the new username to the search cache. */ if (curl) { LDAP_CACHE_LOCK(); the_search_node.username = filter; the_search_node.dn = *binddn; the_search_node.bindpw = NULL; the_search_node.lastbind = apr_time_now(); the_search_node.vals = vals; the_search_node.numvals = numvals; /* Search again to make sure that another thread didn't ready insert * this node into the cache before we got here. If it does exist then * update the lastbind */ search_nodep = util_ald_cache_fetch(curl->search_cache, &the_search_node); if ((search_nodep == NULL) || (strcmp(*binddn, search_nodep->dn) != 0)) { /* Nothing in cache, insert new entry */ util_ald_cache_insert(curl->search_cache, &the_search_node); } /* * Don't update lastbind on entries with bindpw because * we haven't verified that password. It's OK to update * the entry if there is no password in it. */ else if (!search_nodep->bindpw) { /* Cache entry is valid, update lastbind */ search_nodep->lastbind = the_search_node.lastbind; } LDAP_CACHE_UNLOCK(); } ldap_msgfree(res); ldc->reason = "Search successful"; return LDAP_SUCCESS; } /* * Reports if ssl support is enabled * * 1 = enabled, 0 = not enabled */ static int uldap_ssl_supported(request_rec *r) { util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config( r->server->module_config, &ldap_module); return(st->ssl_supported); } /* ---------------------------------------- */ /* config directives */ static const char *util_ldap_set_cache_bytes(cmd_parms *cmd, void *dummy, const char *bytes) { util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } st->cache_bytes = atol(bytes); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01297) "ldap cache: Setting shared memory cache size to " "%" APR_SIZE_T_FMT " bytes.", st->cache_bytes); return NULL; } static const char *util_ldap_set_cache_file(cmd_parms *cmd, void *dummy, const char *file) { util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (file) { st->cache_file = ap_server_root_relative(st->pool, file); } else { st->cache_file = NULL; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01298) "LDAP cache: Setting shared memory cache file to %s.", st->cache_file); return NULL; } static const char *util_ldap_set_cache_ttl(cmd_parms *cmd, void *dummy, const char *ttl) { util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } st->search_cache_ttl = atol(ttl) * 1000000; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01299) "ldap cache: Setting cache TTL to %ld microseconds.", st->search_cache_ttl); return NULL; } static const char *util_ldap_set_cache_entries(cmd_parms *cmd, void *dummy, const char *size) { util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } st->search_cache_size = atol(size); if (st->search_cache_size < 0) { st->search_cache_size = 0; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01300) "ldap cache: Setting search cache size to %ld entries.", st->search_cache_size); return NULL; } static const char *util_ldap_set_opcache_ttl(cmd_parms *cmd, void *dummy, const char *ttl) { util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } st->compare_cache_ttl = atol(ttl) * APR_USEC_PER_SEC; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01301) "ldap cache: Setting operation cache TTL to %ld microseconds.", st->compare_cache_ttl); return NULL; } static const char *util_ldap_set_opcache_entries(cmd_parms *cmd, void *dummy, const char *size) { util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } st->compare_cache_size = atol(size); if (st->compare_cache_size < 0) { st->compare_cache_size = 0; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01302) "ldap cache: Setting operation cache size to %ld entries.", st->compare_cache_size); return NULL; } /** * Parse the certificate type. * * The type can be one of the following: * CA_DER, CA_BASE64, CA_CERT7_DB, CA_SECMOD, CERT_DER, CERT_BASE64, * CERT_KEY3_DB, CERT_NICKNAME, KEY_DER, KEY_BASE64 * * If no matches are found, APR_LDAP_CA_TYPE_UNKNOWN is returned. */ static int util_ldap_parse_cert_type(const char *type) { /* Authority file in binary DER format */ if (0 == strcasecmp("CA_DER", type)) { return APR_LDAP_CA_TYPE_DER; } /* Authority file in Base64 format */ else if (0 == strcasecmp("CA_BASE64", type)) { return APR_LDAP_CA_TYPE_BASE64; } /* Netscape certificate database file/directory */ else if (0 == strcasecmp("CA_CERT7_DB", type)) { return APR_LDAP_CA_TYPE_CERT7_DB; } /* Netscape secmod file/directory */ else if (0 == strcasecmp("CA_SECMOD", type)) { return APR_LDAP_CA_TYPE_SECMOD; } /* Client cert file in DER format */ else if (0 == strcasecmp("CERT_DER", type)) { return APR_LDAP_CERT_TYPE_DER; } /* Client cert file in Base64 format */ else if (0 == strcasecmp("CERT_BASE64", type)) { return APR_LDAP_CERT_TYPE_BASE64; } /* Client cert file in PKCS#12 format */ else if (0 == strcasecmp("CERT_PFX", type)) { return APR_LDAP_CERT_TYPE_PFX; } /* Netscape client cert database file/directory */ else if (0 == strcasecmp("CERT_KEY3_DB", type)) { return APR_LDAP_CERT_TYPE_KEY3_DB; } /* Netscape client cert nickname */ else if (0 == strcasecmp("CERT_NICKNAME", type)) { return APR_LDAP_CERT_TYPE_NICKNAME; } /* Client cert key file in DER format */ else if (0 == strcasecmp("KEY_DER", type)) { return APR_LDAP_KEY_TYPE_DER; } /* Client cert key file in Base64 format */ else if (0 == strcasecmp("KEY_BASE64", type)) { return APR_LDAP_KEY_TYPE_BASE64; } /* Client cert key file in PKCS#12 format */ else if (0 == strcasecmp("KEY_PFX", type)) { return APR_LDAP_KEY_TYPE_PFX; } else { return APR_LDAP_CA_TYPE_UNKNOWN; } } /** * Set LDAPTrustedGlobalCert. * * This directive takes either two or three arguments: * - certificate type * - certificate file / directory / nickname * - certificate password (optional) * * This directive may only be used globally. */ static const char *util_ldap_set_trusted_global_cert(cmd_parms *cmd, void *dummy, const char *type, const char *file, const char *password) { util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); apr_finfo_t finfo; apr_status_t rv; int cert_type = 0; apr_ldap_opt_tls_cert_t *cert; if (err != NULL) { return err; } /* handle the certificate type */ if (type) { cert_type = util_ldap_parse_cert_type(type); if (APR_LDAP_CA_TYPE_UNKNOWN == cert_type) { return apr_psprintf(cmd->pool, "The certificate type %s is " "not recognised. It should be one " "of CA_DER, CA_BASE64, CA_CERT7_DB, " "CA_SECMOD, CERT_DER, CERT_BASE64, " "CERT_KEY3_DB, CERT_NICKNAME, " "KEY_DER, KEY_BASE64", type); } } else { return "Certificate type was not specified."; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01303) "LDAP: SSL trusted global cert - %s (type %s)", file, type); /* add the certificate to the global array */ cert = (apr_ldap_opt_tls_cert_t *)apr_array_push(st->global_certs); cert->type = cert_type; cert->path = file; cert->password = password; /* if file is a file or path, fix the path */ if (cert_type != APR_LDAP_CA_TYPE_UNKNOWN && cert_type != APR_LDAP_CERT_TYPE_NICKNAME) { cert->path = ap_server_root_relative(cmd->pool, file); if (cert->path && ((rv = apr_stat (&finfo, cert->path, APR_FINFO_MIN, cmd->pool)) != APR_SUCCESS)) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, cmd->server, APLOGNO(01304) "LDAP: Could not open SSL trusted certificate " "authority file - %s", cert->path == NULL ? file : cert->path); return "Invalid global certificate file path"; } } return(NULL); } /** * Set LDAPTrustedClientCert. * * This directive takes either two or three arguments: * - certificate type * - certificate file / directory / nickname * - certificate password (optional) */ static const char *util_ldap_set_trusted_client_cert(cmd_parms *cmd, void *config, const char *type, const char *file, const char *password) { util_ldap_config_t *dc = config; apr_finfo_t finfo; apr_status_t rv; int cert_type = 0; apr_ldap_opt_tls_cert_t *cert; /* handle the certificate type */ if (type) { cert_type = util_ldap_parse_cert_type(type); if (APR_LDAP_CA_TYPE_UNKNOWN == cert_type) { return apr_psprintf(cmd->pool, "The certificate type \"%s\" is " "not recognised. It should be one " "of CA_DER, CA_BASE64, " "CERT_DER, CERT_BASE64, " "CERT_NICKNAME, CERT_PFX, " "KEY_DER, KEY_BASE64, KEY_PFX", type); } else if ( APR_LDAP_CA_TYPE_CERT7_DB == cert_type || APR_LDAP_CA_TYPE_SECMOD == cert_type || APR_LDAP_CERT_TYPE_PFX == cert_type || APR_LDAP_CERT_TYPE_KEY3_DB == cert_type) { return apr_psprintf(cmd->pool, "The certificate type \"%s\" is " "only valid within a " "LDAPTrustedGlobalCert directive. " "Only CA_DER, CA_BASE64, " "CERT_DER, CERT_BASE64, " "CERT_NICKNAME, KEY_DER, and " "KEY_BASE64 may be used.", type); } } else { return "Certificate type was not specified."; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01305) "LDAP: SSL trusted client cert - %s (type %s)", file, type); /* add the certificate to the client array */ cert = (apr_ldap_opt_tls_cert_t *)apr_array_push(dc->client_certs); cert->type = cert_type; cert->path = file; cert->password = password; /* if file is a file or path, fix the path */ if (cert_type != APR_LDAP_CA_TYPE_UNKNOWN && cert_type != APR_LDAP_CERT_TYPE_NICKNAME) { cert->path = ap_server_root_relative(cmd->pool, file); if (cert->path && ((rv = apr_stat (&finfo, cert->path, APR_FINFO_MIN, cmd->pool)) != APR_SUCCESS)) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, cmd->server, APLOGNO(01306) "LDAP: Could not open SSL client certificate " "file - %s", cert->path == NULL ? file : cert->path); return "Invalid client certificate file path"; } } return(NULL); } /** * Set LDAPTrustedMode. * * This directive sets what encryption mode to use on a connection: * - None (No encryption) * - SSL (SSL encryption) * - STARTTLS (TLS encryption) */ static const char *util_ldap_set_trusted_mode(cmd_parms *cmd, void *dummy, const char *mode) { util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01307) "LDAP: SSL trusted mode - %s", mode); if (0 == strcasecmp("NONE", mode)) { st->secure = APR_LDAP_NONE; } else if (0 == strcasecmp("SSL", mode)) { st->secure = APR_LDAP_SSL; } else if ( (0 == strcasecmp("TLS", mode)) || (0 == strcasecmp("STARTTLS", mode))) { st->secure = APR_LDAP_STARTTLS; } else { return "Invalid LDAPTrustedMode setting: must be one of NONE, " "SSL, or TLS/STARTTLS"; } st->secure_set = 1; return(NULL); } static const char *util_ldap_set_verify_srv_cert(cmd_parms *cmd, void *dummy, int mode) { util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01308) "LDAP: SSL verify server certificate - %s", mode?"TRUE":"FALSE"); st->verify_svr_cert = mode; return(NULL); } static const char *util_ldap_set_connection_timeout(cmd_parms *cmd, void *dummy, const char *ttl) { #ifdef LDAP_OPT_NETWORK_TIMEOUT util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); #endif const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } #ifdef LDAP_OPT_NETWORK_TIMEOUT st->connectionTimeout = atol(ttl); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01309) "ldap connection: Setting connection timeout to %ld seconds.", st->connectionTimeout); #else ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, cmd->server, APLOGNO(01310) "LDAP: Connection timeout option not supported by the " "LDAP SDK in use." ); #endif return NULL; } static const char *util_ldap_set_chase_referrals(cmd_parms *cmd, void *config, const char *arg) { util_ldap_config_t *dc = config; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01311) "LDAP: Setting referral chasing %s", arg); if (0 == strcasecmp(arg, "on")) { dc->ChaseReferrals = AP_LDAP_CHASEREFERRALS_ON; } else if (0 == strcasecmp(arg, "off")) { dc->ChaseReferrals = AP_LDAP_CHASEREFERRALS_OFF; } else if (0 == strcasecmp(arg, "default")) { dc->ChaseReferrals = AP_LDAP_CHASEREFERRALS_SDKDEFAULT; } else { return "LDAPReferrals must be 'on', 'off', or 'default'"; } return(NULL); } static const char *util_ldap_set_debug_level(cmd_parms *cmd, void *config, const char *arg) { #ifdef AP_LDAP_OPT_DEBUG util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); #endif const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } #ifndef AP_LDAP_OPT_DEBUG return "This directive is not supported with the currently linked LDAP library"; #else st->debug_level = atoi(arg); return NULL; #endif } static const char *util_ldap_set_referral_hop_limit(cmd_parms *cmd, void *config, const char *hop_limit) { util_ldap_config_t *dc = config; dc->ReferralHopLimit = atol(hop_limit); if (dc->ReferralHopLimit <= 0) { return "LDAPReferralHopLimit must be greater than zero (Use 'LDAPReferrals Off' to disable referral chasing)"; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01312) "LDAP: Limit chased referrals to maximum of %d hops.", dc->ReferralHopLimit); return NULL; } static void *util_ldap_create_dir_config(apr_pool_t *p, char *d) { util_ldap_config_t *dc = (util_ldap_config_t *) apr_pcalloc(p,sizeof(util_ldap_config_t)); /* defaults are AP_LDAP_CHASEREFERRALS_ON and AP_LDAP_DEFAULT_HOPLIMIT */ dc->client_certs = apr_array_make(p, 10, sizeof(apr_ldap_opt_tls_cert_t)); dc->ChaseReferrals = AP_LDAP_CHASEREFERRALS_ON; dc->ReferralHopLimit = AP_LDAP_HOPLIMIT_UNSET; return dc; } static const char *util_ldap_set_op_timeout(cmd_parms *cmd, void *dummy, const char *val) { long timeout; char *endptr; util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } timeout = strtol(val, &endptr, 10); if ((val == endptr) || (*endptr != '\0')) { return "Timeout not numerical"; } if (timeout < 0) { return "Timeout must be non-negative"; } if (timeout) { if (!st->opTimeout) { st->opTimeout = apr_pcalloc(cmd->pool, sizeof(struct timeval)); } st->opTimeout->tv_sec = timeout; } else { st->opTimeout = NULL; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01313) "ldap connection: Setting op timeout to %ld seconds.", timeout); #ifndef LDAP_OPT_TIMEOUT ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01314) "LDAP: LDAP_OPT_TIMEOUT option not supported by the " "LDAP library in use. Using LDAPTimeout value as search " "timeout only." ); #endif return NULL; } static const char *util_ldap_set_conn_ttl(cmd_parms *cmd, void *dummy, const char *val) { apr_interval_time_t timeout; util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); if (ap_timeout_parameter_parse(val, &timeout, "s") != APR_SUCCESS) { return "LDAPConnectionPoolTTL has wrong format"; } if (timeout < 0) { /* reserve -1 for default value */ timeout = AP_LDAP_CONNPOOL_INFINITE; } st->connection_pool_ttl = timeout; return NULL; } static const char *util_ldap_set_retry_delay(cmd_parms *cmd, void *dummy, const char *val) { apr_interval_time_t timeout; util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (ap_timeout_parameter_parse(val, &timeout, "s") != APR_SUCCESS) { return "LDAPRetryDelay has wrong format"; } if (timeout < 0) { return "LDAPRetryDelay must be >= 0"; } st->retry_delay = timeout; return NULL; } static const char *util_ldap_set_retries(cmd_parms *cmd, void *dummy, const char *val) { util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config(cmd->server->module_config, &ldap_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } st->retries = atoi(val); if (st->retries < 0) { return "LDAPRetries must be >= 0"; } return NULL; } static void *util_ldap_create_config(apr_pool_t *p, server_rec *s) { util_ldap_state_t *st = (util_ldap_state_t *)apr_pcalloc(p, sizeof(util_ldap_state_t)); /* Create a per vhost pool for mod_ldap to use, serialized with * st->mutex (also one per vhost). both are replicated by fork(), * no shared memory managed by either. */ apr_pool_create(&st->pool, p); #if APR_HAS_THREADS apr_thread_mutex_create(&st->mutex, APR_THREAD_MUTEX_DEFAULT, st->pool); #endif st->cache_bytes = 500000; st->search_cache_ttl = 600 * APR_USEC_PER_SEC; /* 10 minutes */ st->search_cache_size = 1024; st->compare_cache_ttl = 600 * APR_USEC_PER_SEC; /* 10 minutes */ st->compare_cache_size = 1024; st->connections = NULL; st->ssl_supported = 0; st->global_certs = apr_array_make(p, 10, sizeof(apr_ldap_opt_tls_cert_t)); st->secure = APR_LDAP_NONE; st->secure_set = 0; st->connectionTimeout = 10; st->opTimeout = apr_pcalloc(p, sizeof(struct timeval)); st->opTimeout->tv_sec = 60; st->verify_svr_cert = 1; st->connection_pool_ttl = AP_LDAP_CONNPOOL_DEFAULT; /* no limit */ st->retries = 3; st->retry_delay = 0; /* no delay */ return st; } /* cache-related settings are not merged here, but in the post_config hook, * since the cache has not yet sprung to life */ static void *util_ldap_merge_config(apr_pool_t *p, void *basev, void *overridesv) { util_ldap_state_t *st = apr_pcalloc(p, sizeof(util_ldap_state_t)); util_ldap_state_t *base = (util_ldap_state_t *) basev; util_ldap_state_t *overrides = (util_ldap_state_t *) overridesv; st->pool = overrides->pool; #if APR_HAS_THREADS st->mutex = overrides->mutex; #endif /* The cache settings can not be modified in a virtual host since all server use the same shared memory cache. */ st->cache_bytes = base->cache_bytes; st->search_cache_ttl = base->search_cache_ttl; st->search_cache_size = base->search_cache_size; st->compare_cache_ttl = base->compare_cache_ttl; st->compare_cache_size = base->compare_cache_size; st->connections = NULL; st->ssl_supported = 0; /* not known until post-config and re-merged */ st->global_certs = apr_array_append(p, base->global_certs, overrides->global_certs); st->secure = (overrides->secure_set == 0) ? base->secure : overrides->secure; /* These LDAP connection settings can not be overwritten in a virtual host. Once set in the base server, they must remain the same. None of the LDAP SDKs seem to be able to handle setting the verify_svr_cert flag on a per-connection basis. The OpenLDAP client appears to be able to handle the connection timeout per-connection but the Novell SDK cannot. Allowing the timeout to be set by each vhost is of little value so rather than trying to make special expections for one LDAP SDK, GLOBAL_ONLY is being enforced on this setting as well. */ st->connectionTimeout = base->connectionTimeout; st->opTimeout = base->opTimeout; st->verify_svr_cert = base->verify_svr_cert; st->debug_level = base->debug_level; st->connection_pool_ttl = (overrides->connection_pool_ttl == AP_LDAP_CONNPOOL_DEFAULT) ? base->connection_pool_ttl : overrides->connection_pool_ttl; st->retries = base->retries; st->retry_delay = base->retry_delay; return st; } static apr_status_t util_ldap_cleanup_module(void *data) { server_rec *s = data; util_ldap_state_t *st = (util_ldap_state_t *)ap_get_module_config( s->module_config, &ldap_module); if (st->ssl_supported) { apr_ldap_ssl_deinit(); } return APR_SUCCESS; } static int util_ldap_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { apr_status_t result; result = ap_mutex_register(pconf, ldap_cache_mutex_type, NULL, APR_LOCK_DEFAULT, 0); if (result != APR_SUCCESS) { return result; } return OK; } static int util_ldap_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { apr_status_t result; server_rec *s_vhost; util_ldap_state_t *st_vhost; util_ldap_state_t *st = (util_ldap_state_t *) ap_get_module_config(s->module_config, &ldap_module); apr_ldap_err_t *result_err = NULL; int rc; /* util_ldap_post_config() will be called twice. Don't bother * going through all of the initialization on the first call * because it will just be thrown away.*/ if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) { #if APR_HAS_SHARED_MEMORY /* * If we are using shared memory caching and the cache file already * exists then delete it. Otherwise we are going to run into problems * creating the shared memory. */ if (st->cache_file && st->cache_bytes > 0) { char *lck_file = apr_pstrcat(ptemp, st->cache_file, ".lck", NULL); apr_file_remove(lck_file, ptemp); } #endif return OK; } #if APR_HAS_SHARED_MEMORY /* * initializing cache if we don't already have a shm address */ if (!st->cache_shm) { #endif result = util_ldap_cache_init(p, st); if (result != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, result, s, APLOGNO(01315) "LDAP cache: could not create shared memory segment"); return DONE; } result = ap_global_mutex_create(&st->util_ldap_cache_lock, NULL, ldap_cache_mutex_type, NULL, s, p, 0); if (result != APR_SUCCESS) { return result; } /* merge config in all vhost */ s_vhost = s->next; while (s_vhost) { st_vhost = (util_ldap_state_t *) ap_get_module_config(s_vhost->module_config, &ldap_module); st_vhost->util_ldap_cache = st->util_ldap_cache; st_vhost->util_ldap_cache_lock = st->util_ldap_cache_lock; #if APR_HAS_SHARED_MEMORY st_vhost->cache_shm = st->cache_shm; st_vhost->cache_rmm = st->cache_rmm; st_vhost->cache_file = st->cache_file; ap_log_error(APLOG_MARK, APLOG_DEBUG, result, s, APLOGNO(01316) "LDAP merging Shared Cache conf: shm=0x%pp rmm=0x%pp " "for VHOST: %s", st->cache_shm, st->cache_rmm, s_vhost->server_hostname); #endif s_vhost = s_vhost->next; } #if APR_HAS_SHARED_MEMORY } else { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01317) "LDAP cache: LDAPSharedCacheSize is zero, disabling " "shared memory cache"); } #endif /* log the LDAP SDK used */ { apr_ldap_err_t *result = NULL; apr_ldap_info(p, &(result)); if (result != NULL) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(01318) "%s", result->reason); } } apr_pool_cleanup_register(p, s, util_ldap_cleanup_module, util_ldap_cleanup_module); /* * Initialize SSL support, and log the result for the benefit of the admin. * * If SSL is not supported it is not necessarily an error, as the * application may not want to use it. */ rc = apr_ldap_ssl_init(p, NULL, 0, &(result_err)); if (APR_SUCCESS == rc) { rc = apr_ldap_set_option(ptemp, NULL, APR_LDAP_OPT_TLS_CERT, (void *)st->global_certs, &(result_err)); } if (APR_SUCCESS == rc) { st->ssl_supported = 1; ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(01319) "LDAP: SSL support available" ); } else { st->ssl_supported = 0; ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(01320) "LDAP: SSL support unavailable%s%s", result_err ? ": " : "", result_err ? result_err->reason : ""); } /* ssl_supported is really a global setting */ s_vhost = s->next; while (s_vhost) { st_vhost = (util_ldap_state_t *) ap_get_module_config(s_vhost->module_config, &ldap_module); st_vhost->ssl_supported = st->ssl_supported; s_vhost = s_vhost->next; } /* Initialize the rebind callback's cross reference list. */ apr_ldap_rebind_init (p); #ifdef AP_LDAP_OPT_DEBUG if (st->debug_level > 0) { result = ldap_set_option(NULL, AP_LDAP_OPT_DEBUG, &st->debug_level); if (result != LDAP_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01321) "LDAP: Could not set the LDAP library debug level to %d:(%d) %s", st->debug_level, result, ldap_err2string(result)); } } #endif return(OK); } static void util_ldap_child_init(apr_pool_t *p, server_rec *s) { apr_status_t sts; util_ldap_state_t *st = ap_get_module_config(s->module_config, &ldap_module); if (!st->util_ldap_cache_lock) return; sts = apr_global_mutex_child_init(&st->util_ldap_cache_lock, apr_global_mutex_lockfile(st->util_ldap_cache_lock), p); if (sts != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, sts, s, APLOGNO(01322) "Failed to initialise global mutex %s in child process", ldap_cache_mutex_type); } } static const command_rec util_ldap_cmds[] = { AP_INIT_TAKE1("LDAPSharedCacheSize", util_ldap_set_cache_bytes, NULL, RSRC_CONF, "Set the size of the shared memory cache (in bytes). Use " "0 to disable the shared memory cache. (default: 500000)"), AP_INIT_TAKE1("LDAPSharedCacheFile", util_ldap_set_cache_file, NULL, RSRC_CONF, "Set the file name for the shared memory cache."), AP_INIT_TAKE1("LDAPCacheEntries", util_ldap_set_cache_entries, NULL, RSRC_CONF, "Set the maximum number of entries that are possible in the " "LDAP search cache. Use 0 or -1 to disable the search cache " "(default: 1024)"), AP_INIT_TAKE1("LDAPCacheTTL", util_ldap_set_cache_ttl, NULL, RSRC_CONF, "Set the maximum time (in seconds) that an item can be " "cached in the LDAP search cache. Use 0 for no limit. " "(default 600)"), AP_INIT_TAKE1("LDAPOpCacheEntries", util_ldap_set_opcache_entries, NULL, RSRC_CONF, "Set the maximum number of entries that are possible " "in the LDAP compare cache. Use 0 or -1 to disable the compare cache " "(default: 1024)"), AP_INIT_TAKE1("LDAPOpCacheTTL", util_ldap_set_opcache_ttl, NULL, RSRC_CONF, "Set the maximum time (in seconds) that an item is cached " "in the LDAP operation cache. Use 0 for no limit. " "(default: 600)"), AP_INIT_TAKE23("LDAPTrustedGlobalCert", util_ldap_set_trusted_global_cert, NULL, RSRC_CONF, "Takes three arguments; the first argument is the cert " "type of the second argument, one of CA_DER, CA_BASE64, " "CA_CERT7_DB, CA_SECMOD, CERT_DER, CERT_BASE64, CERT_KEY3_DB, " "CERT_NICKNAME, KEY_DER, or KEY_BASE64. The second argument " "specifes the file and/or directory containing the trusted CA " "certificates (and global client certs for Netware) used to " "validate the LDAP server. The third argument is an optional " "passphrase if applicable."), AP_INIT_TAKE23("LDAPTrustedClientCert", util_ldap_set_trusted_client_cert, NULL, OR_AUTHCFG, "Takes three arguments: the first argument is the certificate " "type of the second argument, one of CA_DER, CA_BASE64, " "CA_CERT7_DB, CA_SECMOD, CERT_DER, CERT_BASE64, CERT_KEY3_DB, " "CERT_NICKNAME, KEY_DER, or KEY_BASE64. The second argument " "specifies the file and/or directory containing the client " "certificate, or certificate ID used to validate this LDAP " "client. The third argument is an optional passphrase if " "applicable."), AP_INIT_TAKE1("LDAPTrustedMode", util_ldap_set_trusted_mode, NULL, RSRC_CONF, "Specify the type of security that should be applied to " "an LDAP connection. One of; NONE, SSL or STARTTLS."), AP_INIT_FLAG("LDAPVerifyServerCert", util_ldap_set_verify_srv_cert, NULL, RSRC_CONF, "Set to 'ON' requires that the server certificate be verified" " before a secure LDAP connection can be establish. Default" " 'ON'"), AP_INIT_TAKE1("LDAPConnectionTimeout", util_ldap_set_connection_timeout, NULL, RSRC_CONF, "Specify the LDAP socket connection timeout in seconds " "(default: 10)"), AP_INIT_TAKE1("LDAPReferrals", util_ldap_set_chase_referrals, NULL, OR_AUTHCFG, "Choose whether referrals are chased ['ON'|'OFF'|'DEFAULT']. Default 'ON'"), AP_INIT_TAKE1("LDAPReferralHopLimit", util_ldap_set_referral_hop_limit, NULL, OR_AUTHCFG, "Limit the number of referral hops that LDAP can follow. " "(Integer value, Consult LDAP SDK documentation for applicability and defaults"), AP_INIT_TAKE1("LDAPLibraryDebug", util_ldap_set_debug_level, NULL, RSRC_CONF, "Enable debugging in LDAP SDK (Default: off, values: SDK specific"), AP_INIT_TAKE1("LDAPTimeout", util_ldap_set_op_timeout, NULL, RSRC_CONF, "Specify the LDAP bind/search timeout in seconds " "(0 = no limit). Default: 60"), AP_INIT_TAKE1("LDAPConnectionPoolTTL", util_ldap_set_conn_ttl, NULL, RSRC_CONF, "Specify the maximum amount of time a bound connection can sit " "idle and still be considered valid for reuse" "(0 = no pool, -1 = no limit, n = time in seconds). Default: -1"), AP_INIT_TAKE1("LDAPRetries", util_ldap_set_retries, NULL, RSRC_CONF, "Specify the number of times a failed LDAP operation should be retried " "(0 = no retries). Default: 3"), AP_INIT_TAKE1("LDAPRetryDelay", util_ldap_set_retry_delay, NULL, RSRC_CONF, "Specify the delay between retries of a failed LDAP operation " "(0 = no delay). Default: 0"), {NULL} }; static void util_ldap_register_hooks(apr_pool_t *p) { APR_REGISTER_OPTIONAL_FN(uldap_connection_open); APR_REGISTER_OPTIONAL_FN(uldap_connection_close); APR_REGISTER_OPTIONAL_FN(uldap_connection_unbind); APR_REGISTER_OPTIONAL_FN(uldap_connection_find); APR_REGISTER_OPTIONAL_FN(uldap_cache_comparedn); APR_REGISTER_OPTIONAL_FN(uldap_cache_compare); APR_REGISTER_OPTIONAL_FN(uldap_cache_checkuserid); APR_REGISTER_OPTIONAL_FN(uldap_cache_getuserdn); APR_REGISTER_OPTIONAL_FN(uldap_ssl_supported); APR_REGISTER_OPTIONAL_FN(uldap_cache_check_subgroups); ap_hook_pre_config(util_ldap_pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(util_ldap_post_config,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_handler(util_ldap_handler, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_child_init(util_ldap_child_init, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(ldap) = { STANDARD20_MODULE_STUFF, util_ldap_create_dir_config, /* create dir config */ NULL, /* merge dir config */ util_ldap_create_config, /* create server config */ util_ldap_merge_config, /* merge server config */ util_ldap_cmds, /* command table */ util_ldap_register_hooks, /* set up request processing hooks */ }; httpd-2.4.41/modules/ldap/mod_ldap.dep0000644000000000000500000001617312674411515016113 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_ldap.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\util_ldap.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_ldap.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_anylock.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_ldap.h"\ "..\..\srclib\apr-util\include\apr_ldap_init.h"\ "..\..\srclib\apr-util\include\apr_ldap_option.h"\ "..\..\srclib\apr-util\include\apr_ldap_rebind.h"\ "..\..\srclib\apr-util\include\apr_ldap_url.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_rmm.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_thread_rwlock.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\util_ldap_cache.h"\ .\util_ldap_cache.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_ldap.h"\ "..\..\srclib\apr-util\include\apr_anylock.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_ldap.h"\ "..\..\srclib\apr-util\include\apr_ldap_init.h"\ "..\..\srclib\apr-util\include\apr_ldap_option.h"\ "..\..\srclib\apr-util\include\apr_ldap_rebind.h"\ "..\..\srclib\apr-util\include\apr_ldap_url.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_rmm.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_thread_rwlock.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\util_ldap_cache.h"\ .\util_ldap_cache_mgr.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_ldap.h"\ "..\..\srclib\apr-util\include\apr_anylock.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_ldap.h"\ "..\..\srclib\apr-util\include\apr_ldap_init.h"\ "..\..\srclib\apr-util\include\apr_ldap_option.h"\ "..\..\srclib\apr-util\include\apr_ldap_rebind.h"\ "..\..\srclib\apr-util\include\apr_ldap_url.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_rmm.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_thread_rwlock.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\util_ldap_cache.h"\ httpd-2.4.41/modules/ldap/mod_ldap.mak0000644000000000000500000002412112701473373016104 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_ldap.dsp !IF "$(CFG)" == "" CFG=mod_ldap - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_ldap - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_ldap - Win32 Release" && "$(CFG)" != "mod_ldap - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_ldap.mak" CFG="mod_ldap - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_ldap - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_ldap - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_ldap - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_ldap.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_ldap.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_ldap.res" -@erase "$(INTDIR)\mod_ldap_src.idb" -@erase "$(INTDIR)\mod_ldap_src.pdb" -@erase "$(INTDIR)\util_ldap.obj" -@erase "$(INTDIR)\util_ldap_cache.obj" -@erase "$(INTDIR)\util_ldap_cache_mgr.obj" -@erase "$(OUTDIR)\mod_ldap.exp" -@erase "$(OUTDIR)\mod_ldap.lib" -@erase "$(OUTDIR)\mod_ldap.pdb" -@erase "$(OUTDIR)\mod_ldap.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "LDAP_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_ldap_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_ldap.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_ldap.so" /d LONG_NAME="ldap_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_ldap.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib wldap32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_ldap.pdb" /debug /out:"$(OUTDIR)\mod_ldap.so" /implib:"$(OUTDIR)\mod_ldap.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_ldap.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\util_ldap.obj" \ "$(INTDIR)\util_ldap_cache.obj" \ "$(INTDIR)\util_ldap_cache_mgr.obj" \ "$(INTDIR)\mod_ldap.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_ldap.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_ldap.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_ldap.so" if exist .\Release\mod_ldap.so.manifest mt.exe -manifest .\Release\mod_ldap.so.manifest -outputresource:.\Release\mod_ldap.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_ldap - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_ldap.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_ldap.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_ldap.res" -@erase "$(INTDIR)\mod_ldap_src.idb" -@erase "$(INTDIR)\mod_ldap_src.pdb" -@erase "$(INTDIR)\util_ldap.obj" -@erase "$(INTDIR)\util_ldap_cache.obj" -@erase "$(INTDIR)\util_ldap_cache_mgr.obj" -@erase "$(OUTDIR)\mod_ldap.exp" -@erase "$(OUTDIR)\mod_ldap.lib" -@erase "$(OUTDIR)\mod_ldap.pdb" -@erase "$(OUTDIR)\mod_ldap.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "LDAP_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_ldap_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_ldap.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_ldap.so" /d LONG_NAME="ldap_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_ldap.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib wldap32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_ldap.pdb" /debug /out:"$(OUTDIR)\mod_ldap.so" /implib:"$(OUTDIR)\mod_ldap.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_ldap.so LINK32_OBJS= \ "$(INTDIR)\util_ldap.obj" \ "$(INTDIR)\util_ldap_cache.obj" \ "$(INTDIR)\util_ldap_cache_mgr.obj" \ "$(INTDIR)\mod_ldap.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_ldap.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_ldap.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_ldap.so" if exist .\Debug\mod_ldap.so.manifest mt.exe -manifest .\Debug\mod_ldap.so.manifest -outputresource:.\Debug\mod_ldap.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_ldap.dep") !INCLUDE "mod_ldap.dep" !ELSE !MESSAGE Warning: cannot find "mod_ldap.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_ldap - Win32 Release" || "$(CFG)" == "mod_ldap - Win32 Debug" !IF "$(CFG)" == "mod_ldap - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\ldap" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\ldap" !ELSEIF "$(CFG)" == "mod_ldap - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\ldap" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\ldap" !ENDIF !IF "$(CFG)" == "mod_ldap - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\ldap" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\ldap" !ELSEIF "$(CFG)" == "mod_ldap - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\ldap" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\ldap" !ENDIF !IF "$(CFG)" == "mod_ldap - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\ldap" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\ldap" !ELSEIF "$(CFG)" == "mod_ldap - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\ldap" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\ldap" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_ldap - Win32 Release" "$(INTDIR)\mod_ldap.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_ldap.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_ldap.so" /d LONG_NAME="ldap_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_ldap - Win32 Debug" "$(INTDIR)\mod_ldap.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_ldap.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_ldap.so" /d LONG_NAME="ldap_module for Apache" $(SOURCE) !ENDIF SOURCE=.\util_ldap.c "$(INTDIR)\util_ldap.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\util_ldap_cache.c "$(INTDIR)\util_ldap_cache.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\util_ldap_cache_mgr.c "$(INTDIR)\util_ldap_cache_mgr.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/ldap/NWGNUmakefile0000644000000000000500000001064611540562746016164 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(LDAPSDK)/inc \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # #LDAP client requires the use of Winsock # ifdef USE_STDSOCKETS XDEFINES += -DUSE_WINSOCK \ $(EOLIST) endif # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = utilldap # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) LDAP Authentication Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = UtilLDAP Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/utilldap.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/util_ldap.o \ $(OBJDIR)/util_ldap_cache.o \ $(OBJDIR)/util_ldap_cache_mgr.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ lldapsdk \ lldapssl \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ @lldapsdk.imp \ @lldapssl.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ ldap_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/ldap/config.m40000644000000000000500000000134311616721533015341 0ustar rootsrc dnl APACHE_MODULE(name, helptext[, objects[, structname[, default[, config]]]]) APACHE_MODPATH_INIT(ldap) ldap_objects="util_ldap.lo util_ldap_cache.lo util_ldap_cache_mgr.lo" APACHE_MODULE(ldap, LDAP caching and connection pooling services, $ldap_objects, , most , [ APACHE_CHECK_APR_HAS_LDAP if test "$ac_cv_APR_HAS_LDAP" = "yes" ; then if test -z "$apu_config" ; then LDAP_LIBS="`$apr_config --ldap-libs`" else LDAP_LIBS="`$apu_config --ldap-libs`" fi APR_ADDTO(MOD_LDAP_LDADD, [$LDAP_LIBS]) AC_SUBST(MOD_LDAP_LDADD) else AC_MSG_WARN([apr/apr-util is compiled without ldap support]) enable_ldap=no fi ]) APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) APACHE_MODPATH_FINISH httpd-2.4.41/modules/ldap/util_ldap_cache_mgr.c0000644000000000000500000007504513303341742017750 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * util_ldap_cache_mgr.c: LDAP cache manager things * * Original code from auth_ldap module for Apache v1.3: * Copyright 1998, 1999 Enbridge Pipelines Inc. * Copyright 1999-2001 Dave Carrigan */ #include "httpd.h" #include "util_ldap.h" #include "util_ldap_cache.h" #include APLOG_USE_MODULE(ldap); #if APR_HAS_LDAP /* only here until strdup is gone */ #include /* here till malloc is gone */ #include static const unsigned long primes[] = { 11, 19, 37, 73, 109, 163, 251, 367, 557, 823, 1237, 1861, 2777, 4177, 6247, 9371, 14057, 21089, 31627, 47431, 71143, 106721, 160073, 240101, 360163, 540217, 810343, 1215497, 1823231, 2734867, 4102283, 6153409, 9230113, 13845163, 0 }; void util_ald_free(util_ald_cache_t *cache, const void *ptr) { #if APR_HAS_SHARED_MEMORY if (cache->rmm_addr) { if (ptr) /* Free in shared memory */ apr_rmm_free(cache->rmm_addr, apr_rmm_offset_get(cache->rmm_addr, (void *)ptr)); } else { if (ptr) /* Cache shm is not used */ free((void *)ptr); } #else if (ptr) free((void *)ptr); #endif } void *util_ald_alloc(util_ald_cache_t *cache, unsigned long size) { if (0 == size) return NULL; #if APR_HAS_SHARED_MEMORY if (cache->rmm_addr) { /* allocate from shared memory */ apr_rmm_off_t block = apr_rmm_calloc(cache->rmm_addr, size); return block ? (void *)apr_rmm_addr_get(cache->rmm_addr, block) : NULL; } else { /* Cache shm is not used */ return (void *)calloc(sizeof(char), size); } #else return (void *)calloc(sizeof(char), size); #endif } const char *util_ald_strdup(util_ald_cache_t *cache, const char *s) { #if APR_HAS_SHARED_MEMORY if (cache->rmm_addr) { /* allocate from shared memory */ apr_rmm_off_t block = apr_rmm_calloc(cache->rmm_addr, strlen(s)+1); char *buf = block ? (char *)apr_rmm_addr_get(cache->rmm_addr, block) : NULL; if (buf) { strcpy(buf, s); return buf; } else { return NULL; } } else { /* Cache shm is not used */ return strdup(s); } #else return strdup(s); #endif } /* * Duplicate a subgroupList from one compare entry to another. * Returns: ptr to a new copy of the subgroupList or NULL if allocation failed. */ util_compare_subgroup_t *util_ald_sgl_dup(util_ald_cache_t *cache, util_compare_subgroup_t *sgl_in) { int i = 0; util_compare_subgroup_t *sgl_out = NULL; if (!sgl_in) { return NULL; } sgl_out = (util_compare_subgroup_t *) util_ald_alloc(cache, sizeof(util_compare_subgroup_t)); if (sgl_out) { sgl_out->subgroupDNs = util_ald_alloc(cache, sizeof(char *) * sgl_in->len); if (sgl_out->subgroupDNs) { for (i = 0; i < sgl_in->len; i++) { sgl_out->subgroupDNs[i] = util_ald_strdup(cache, sgl_in->subgroupDNs[i]); if (!sgl_out->subgroupDNs[i]) { /* We ran out of SHM, delete the strings we allocated for the SGL */ for (i = (i - 1); i >= 0; i--) { util_ald_free(cache, sgl_out->subgroupDNs[i]); } util_ald_free(cache, sgl_out->subgroupDNs); util_ald_free(cache, sgl_out); sgl_out = NULL; break; } } /* We were able to allocate new strings for all the subgroups */ if (sgl_out != NULL) { sgl_out->len = sgl_in->len; } } } return sgl_out; } /* * Delete an entire subgroupList. */ void util_ald_sgl_free(util_ald_cache_t *cache, util_compare_subgroup_t **sgl) { int i = 0; if (sgl == NULL || *sgl == NULL) { return; } for (i = 0; i < (*sgl)->len; i++) { util_ald_free(cache, (*sgl)->subgroupDNs[i]); } util_ald_free(cache, *sgl); } /* * Computes the hash on a set of strings. The first argument is the number * of strings to hash, the rest of the args are strings. * Algorithm taken from glibc. */ unsigned long util_ald_hash_string(int nstr, ...) { int i; va_list args; unsigned long h=0, g; char *str, *p; va_start(args, nstr); for (i=0; i < nstr; ++i) { str = va_arg(args, char *); for (p = str; *p; ++p) { h = ( h << 4 ) + *p; if ( ( g = h & 0xf0000000 ) ) { h = h ^ (g >> 24); h = h ^ g; } } } va_end(args); return h; } /* Purges a cache that has gotten full. We keep track of the time that we added the entry that made the cache 3/4 full, then delete all entries that were added before that time. It's pretty simplistic, but time to purge is only O(n), which is more important. */ void util_ald_cache_purge(util_ald_cache_t *cache) { unsigned long i; util_cache_node_t *p, *q, **pp; apr_time_t now; if (!cache) return; now = cache->last_purge = apr_time_now(); cache->npurged = 0; cache->numpurges++; /* If the marktime is farther back than TTL from now, move the marktime forward to include additional expired entries. */ if (now - cache->ttl > cache->marktime) { cache->marktime = now - cache->ttl; } for (i=0; i < cache->size; ++i) { pp = cache->nodes + i; p = *pp; while (p != NULL) { if (p->add_time < cache->marktime) { q = p->next; (*cache->free)(cache, p->payload); util_ald_free(cache, p); cache->numentries--; cache->npurged++; p = *pp = q; } else { pp = &(p->next); p = *pp; } } } now = apr_time_now(); cache->avg_purgetime = ((now - cache->last_purge) + (cache->avg_purgetime * (cache->numpurges-1))) / cache->numpurges; } /* * create caches */ util_url_node_t *util_ald_create_caches(util_ldap_state_t *st, const char *url) { util_url_node_t curl, *newcurl = NULL; util_ald_cache_t *search_cache; util_ald_cache_t *compare_cache; util_ald_cache_t *dn_compare_cache; /* create the three caches */ search_cache = util_ald_create_cache(st, st->search_cache_size, st->search_cache_ttl, util_ldap_search_node_hash, util_ldap_search_node_compare, util_ldap_search_node_copy, util_ldap_search_node_free, util_ldap_search_node_display); compare_cache = util_ald_create_cache(st, st->compare_cache_size, st->compare_cache_ttl, util_ldap_compare_node_hash, util_ldap_compare_node_compare, util_ldap_compare_node_copy, util_ldap_compare_node_free, util_ldap_compare_node_display); dn_compare_cache = util_ald_create_cache(st, st->compare_cache_size, st->compare_cache_ttl, util_ldap_dn_compare_node_hash, util_ldap_dn_compare_node_compare, util_ldap_dn_compare_node_copy, util_ldap_dn_compare_node_free, util_ldap_dn_compare_node_display); /* check that all the caches initialised successfully */ if (search_cache && compare_cache && dn_compare_cache) { /* The contents of this structure will be duplicated in shared memory during the insert. So use stack memory rather than pool memory to avoid a memory leak. */ memset (&curl, 0, sizeof(util_url_node_t)); curl.url = url; curl.search_cache = search_cache; curl.compare_cache = compare_cache; curl.dn_compare_cache = dn_compare_cache; newcurl = util_ald_cache_insert(st->util_ldap_cache, &curl); } return newcurl; } util_ald_cache_t *util_ald_create_cache(util_ldap_state_t *st, long cache_size, long cache_ttl, unsigned long (*hashfunc)(void *), int (*comparefunc)(void *, void *), void * (*copyfunc)(util_ald_cache_t *cache, void *), void (*freefunc)(util_ald_cache_t *cache, void *), void (*displayfunc)(request_rec *r, util_ald_cache_t *cache, void *)) { util_ald_cache_t *cache; unsigned long i; #if APR_HAS_SHARED_MEMORY apr_rmm_off_t block; #endif if (cache_size <= 0) return NULL; #if APR_HAS_SHARED_MEMORY if (!st->cache_rmm) { cache = (util_ald_cache_t *)calloc(sizeof(util_ald_cache_t), 1); } else { block = apr_rmm_calloc(st->cache_rmm, sizeof(util_ald_cache_t)); cache = block ? (util_ald_cache_t *)apr_rmm_addr_get(st->cache_rmm, block) : NULL; } #else cache = (util_ald_cache_t *)calloc(sizeof(util_ald_cache_t), 1); #endif if (!cache) return NULL; #if APR_HAS_SHARED_MEMORY cache->rmm_addr = st->cache_rmm; cache->shm_addr = st->cache_shm; #endif cache->maxentries = cache_size; cache->numentries = 0; cache->size = cache_size / 3; if (cache->size < 64) cache->size = 64; for (i = 0; primes[i] && primes[i] < cache->size; ++i) ; cache->size = primes[i] ? primes[i] : primes[i-1]; cache->nodes = (util_cache_node_t **)util_ald_alloc(cache, cache->size * sizeof(util_cache_node_t *)); if (!cache->nodes) { /* This frees cache in the right way even if !APR_HAS_SHARED_MEMORY or !st->cache_rmm */ util_ald_free(cache, cache); return NULL; } for (i=0; i < cache->size; ++i) cache->nodes[i] = NULL; cache->hash = hashfunc; cache->compare = comparefunc; cache->copy = copyfunc; cache->free = freefunc; cache->display = displayfunc; cache->fullmark = cache->maxentries / 4 * 3; cache->marktime = 0; cache->ttl = cache_ttl; cache->avg_purgetime = 0.0; cache->numpurges = 0; cache->last_purge = 0; cache->npurged = 0; cache->fetches = 0; cache->hits = 0; cache->inserts = 0; cache->removes = 0; return cache; } void util_ald_destroy_cache(util_ald_cache_t *cache) { unsigned long i; util_cache_node_t *p, *q; if (cache == NULL) return; for (i = 0; i < cache->size; ++i) { p = cache->nodes[i]; q = NULL; while (p != NULL) { q = p->next; (*cache->free)(cache, p->payload); util_ald_free(cache, p); p = q; } } util_ald_free(cache, cache->nodes); util_ald_free(cache, cache); } void *util_ald_cache_fetch(util_ald_cache_t *cache, void *payload) { unsigned long hashval; util_cache_node_t *p; if (cache == NULL) return NULL; cache->fetches++; hashval = (*cache->hash)(payload) % cache->size; for (p = cache->nodes[hashval]; p && !(*cache->compare)(p->payload, payload); p = p->next) ; if (p != NULL) { cache->hits++; return p->payload; } else { return NULL; } } /* * Insert an item into the cache. * *** Does not catch duplicates!!! *** */ void *util_ald_cache_insert(util_ald_cache_t *cache, void *payload) { unsigned long hashval; void *tmp_payload; util_cache_node_t *node; /* sanity check */ if (cache == NULL || payload == NULL) { return NULL; } /* check if we are full - if so, try purge */ if (cache->numentries >= cache->maxentries) { util_ald_cache_purge(cache); if (cache->numentries >= cache->maxentries) { /* if the purge was not effective, we leave now to avoid an overflow */ ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(01323) "Purge of LDAP cache failed"); return NULL; } } node = (util_cache_node_t *)util_ald_alloc(cache, sizeof(util_cache_node_t)); if (node == NULL) { /* * XXX: The cache management should be rewritten to work * properly when LDAPSharedCacheSize is too small. */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, NULL, APLOGNO(01324) "LDAPSharedCacheSize is too small. Increase it or " "reduce LDAPCacheEntries/LDAPOpCacheEntries!"); if (cache->numentries < cache->fullmark) { /* * We have not even reached fullmark, trigger a complete purge. * This is still better than not being able to add new entries * at all. */ cache->marktime = apr_time_now(); } util_ald_cache_purge(cache); node = (util_cache_node_t *)util_ald_alloc(cache, sizeof(util_cache_node_t)); if (node == NULL) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(01325) "Could not allocate memory for LDAP cache entry"); return NULL; } } /* Take a copy of the payload before proceeding. */ tmp_payload = (*cache->copy)(cache, payload); if (tmp_payload == NULL) { /* * XXX: The cache management should be rewritten to work * properly when LDAPSharedCacheSize is too small. */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, NULL, APLOGNO(01326) "LDAPSharedCacheSize is too small. Increase it or " "reduce LDAPCacheEntries/LDAPOpCacheEntries!"); if (cache->numentries < cache->fullmark) { /* * We have not even reached fullmark, trigger a complete purge. * This is still better than not being able to add new entries * at all. */ cache->marktime = apr_time_now(); } util_ald_cache_purge(cache); tmp_payload = (*cache->copy)(cache, payload); if (tmp_payload == NULL) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(01327) "Could not allocate memory for LDAP cache value"); util_ald_free(cache, node); return NULL; } } payload = tmp_payload; /* populate the entry */ cache->inserts++; hashval = (*cache->hash)(payload) % cache->size; node->add_time = apr_time_now(); node->payload = payload; node->next = cache->nodes[hashval]; cache->nodes[hashval] = node; /* if we reach the full mark, note the time we did so * for the benefit of the purge function */ if (++cache->numentries == cache->fullmark) { cache->marktime=apr_time_now(); } return node->payload; } void util_ald_cache_remove(util_ald_cache_t *cache, void *payload) { unsigned long hashval; util_cache_node_t *p, *q; if (cache == NULL) return; cache->removes++; hashval = (*cache->hash)(payload) % cache->size; for (p = cache->nodes[hashval], q=NULL; p && !(*cache->compare)(p->payload, payload); p = p->next) { q = p; } /* If p is null, it means that we couldn't find the node, so just return */ if (p == NULL) return; if (q == NULL) { /* We found the node, and it's the first in the list */ cache->nodes[hashval] = p->next; } else { /* We found the node and it's not the first in the list */ q->next = p->next; } (*cache->free)(cache, p->payload); util_ald_free(cache, p); cache->numentries--; } char *util_ald_cache_display_stats(request_rec *r, util_ald_cache_t *cache, char *name, char *id) { unsigned long i; int totchainlen = 0; int nchains = 0; double chainlen; util_cache_node_t *n; char *buf, *buf2; apr_pool_t *p = r->pool; if (cache == NULL) { return ""; } for (i=0; i < cache->size; ++i) { if (cache->nodes[i] != NULL) { nchains++; for (n = cache->nodes[i]; n != NULL && n != n->next; n = n->next) { totchainlen++; } } } chainlen = nchains? (double)totchainlen / (double)nchains : 0; if (id) { buf2 = apr_psprintf(p, "%s", ap_escape_html(r->pool, ap_escape_uri(r->pool, r->uri)), id, name); } else { buf2 = name; } buf = apr_psprintf(p, "" "%s" "%lu (%.0f%% full)" "%.1f" "%lu/%lu" "%.0f%%" "%lu/%lu", buf2, cache->numentries, (double)cache->numentries / (double)cache->maxentries * 100.0, chainlen, cache->hits, cache->fetches, (cache->fetches > 0 ? (double)(cache->hits) / (double)(cache->fetches) * 100.0 : 100.0), cache->inserts, cache->removes); if (cache->numpurges) { char str_ctime[APR_CTIME_LEN]; apr_ctime(str_ctime, cache->last_purge); buf = apr_psprintf(p, "%s" "%lu\n" "%s\n", buf, cache->numpurges, str_ctime); } else { buf = apr_psprintf(p, "%s(none)\n", buf); } buf = apr_psprintf(p, "%s%.2gms\n", buf, cache->avg_purgetime); return buf; } char *util_ald_cache_display(request_rec *r, util_ldap_state_t *st) { unsigned long i,j; char *buf, *t1, *t2, *t3; char *id1, *id2, *id3; char *argfmt = "cache=%s&id=%d&off=%d"; char *scanfmt = "cache=%4s&id=%u&off=%u%1s"; apr_pool_t *pool = r->pool; util_cache_node_t *p = NULL; util_url_node_t *n = NULL; util_ald_cache_t *util_ldap_cache = st->util_ldap_cache; if (!util_ldap_cache) { ap_rputs("Cache has not been enabled/initialised.", r); return NULL; } if (r->args && strlen(r->args)) { char cachetype[5], lint[2]; unsigned int id, off; char date_str[APR_CTIME_LEN]; if ((3 == sscanf(r->args, scanfmt, cachetype, &id, &off, lint)) && (id < util_ldap_cache->size)) { if ((p = util_ldap_cache->nodes[id]) != NULL) { n = (util_url_node_t *)p->payload; buf = (char*)n->url; } else { buf = ""; } ap_rprintf(r, "

    \n" "\n" "\n" "" "" "\n" "
    Cache Name:%s (%s)
    \n

    \n", buf, cachetype[0] == 'm'? "Main" : (cachetype[0] == 's' ? "Search" : (cachetype[0] == 'c' ? "Compares" : "DNCompares"))); switch (cachetype[0]) { case 'm': if (util_ldap_cache->marktime) { apr_ctime(date_str, util_ldap_cache->marktime); } else date_str[0] = 0; ap_rprintf(r, "

    \n" "\n" "\n" "" "" "\n" "\n" "" "" "\n" "\n" "" "" "\n" "\n" "" "" "\n" "\n" "" "" "\n" "\n" "" "" "\n" "
    Size:%ld
    Max Entries:%ld
    # Entries:%ld
    TTL (sec):%" APR_TIME_T_FMT "
    Full Mark:%ld
    Full Mark Time:%s
    \n

    \n", util_ldap_cache->size, util_ldap_cache->maxentries, util_ldap_cache->numentries, apr_time_sec(util_ldap_cache->ttl), util_ldap_cache->fullmark, date_str); ap_rputs("

    \n" "\n" "\n" "" "" "" "" "" "" "" "\n", r ); for (i=0; i < util_ldap_cache->size; ++i) { for (p = util_ldap_cache->nodes[i]; p != NULL; p = p->next) { (*util_ldap_cache->display)(r, util_ldap_cache, p->payload); } } ap_rputs("
    LDAP URLSizeMax Entries# EntriesTTL (sec)Full MarkFull Mark Time
    \n

    \n", r); break; case 's': ap_rputs("

    \n" "\n" "\n" "" "" "" "\n", r ); if (n) { for (i=0; i < n->search_cache->size; ++i) { for (p = n->search_cache->nodes[i]; p != NULL; p = p->next) { (*n->search_cache->display)(r, n->search_cache, p->payload); } } } ap_rputs("
    LDAP FilterUser NameLast Bind
    \n

    \n", r); break; case 'c': ap_rputs("

    \n" "\n" "\n" "" "" "" "" "" "" "" "\n", r ); if (n) { for (i=0; i < n->compare_cache->size; ++i) { for (p = n->compare_cache->nodes[i]; p != NULL; p = p->next) { (*n->compare_cache->display)(r, n->compare_cache, p->payload); } } } ap_rputs("
    DNAttributeValueLast CompareResultSub-groups?S-G Checked?
    \n

    \n", r); break; case 'd': ap_rputs("

    \n" "\n" "\n" "" "" "\n", r ); if (n) { for (i=0; i < n->dn_compare_cache->size; ++i) { for (p = n->dn_compare_cache->nodes[i]; p != NULL; p = p->next) { (*n->dn_compare_cache->display)(r, n->dn_compare_cache, p->payload); } } } ap_rputs("
    Require DNActual DN
    \n

    \n", r); break; default: break; } } else { buf = ""; } } else { ap_rputs("

    \n" "\n" "\n" "" "" "" "" "" "" "" "\n", r ); id1 = apr_psprintf(pool, argfmt, "main", 0, 0); buf = util_ald_cache_display_stats(r, st->util_ldap_cache, "LDAP URL Cache", id1); for (i=0; i < util_ldap_cache->size; ++i) { for (p = util_ldap_cache->nodes[i],j=0; p != NULL; p = p->next,j++) { n = (util_url_node_t *)p->payload; t1 = apr_psprintf(pool, "%s (Searches)", n->url); t2 = apr_psprintf(pool, "%s (Compares)", n->url); t3 = apr_psprintf(pool, "%s (DNCompares)", n->url); id1 = apr_psprintf(pool, argfmt, "srch", i, j); id2 = apr_psprintf(pool, argfmt, "cmpr", i, j); id3 = apr_psprintf(pool, argfmt, "dncp", i, j); buf = apr_psprintf(pool, "%s\n\n" "%s\n\n" "%s\n\n" "%s\n\n", buf, util_ald_cache_display_stats(r, n->search_cache, t1, id1), util_ald_cache_display_stats(r, n->compare_cache, t2, id2), util_ald_cache_display_stats(r, n->dn_compare_cache, t3, id3) ); } } ap_rputs(buf, r); ap_rputs("
    Cache NameEntriesAvg. Chain Len.HitsIns/RemPurgesAvg Purge Time
    \n

    \n", r); } return buf; } #endif /* APR_HAS_LDAP */ httpd-2.4.41/modules/ldap/mod_ldap.dsp0000644000000000000500000001121011612604620016104 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_ldap" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_ldap - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_ldap.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_ldap.mak" CFG="mod_ldap - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_ldap - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_ldap - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_ldap - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "LDAP_DECLARE_EXPORT" /Fd"Release\mod_ldap_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_ldap.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_ldap.so" /d LONG_NAME="ldap_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_ldap.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ldap.so # ADD LINK32 kernel32.lib wldap32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_ldap.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ldap.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_ldap.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_ldap - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "LDAP_DECLARE_EXPORT" /Fd"Debug\mod_ldap_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_ldap.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_ldap.so" /d LONG_NAME="ldap_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_ldap.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ldap.so # ADD LINK32 kernel32.lib wldap32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_ldap.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ldap.so # Begin Special Build Tool TargetPath=.\Debug\mod_ldap.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_ldap - Win32 Release" # Name "mod_ldap - Win32 Debug" # Begin Source File SOURCE=.\util_ldap.c # End Source File # Begin Source File SOURCE=.\util_ldap.h # End Source File # Begin Source File SOURCE=.\util_ldap_cache.c # End Source File # Begin Source File SOURCE=.\util_ldap_cache.h # End Source File # Begin Source File SOURCE=.\util_ldap_cache_mgr.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/ldap/Makefile.in0000644000000000000500000000026710150161574015676 0ustar rootsrc# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/ldap/util_ldap_cache.c0000644000000000000500000003206213303341742017073 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * util_ldap_cache.c: LDAP cache things * * Original code from auth_ldap module for Apache v1.3: * Copyright 1998, 1999 Enbridge Pipelines Inc. * Copyright 1999-2001 Dave Carrigan */ #include "httpd.h" #include "util_ldap.h" #include "util_ldap_cache.h" #include #if APR_HAS_LDAP /* ------------------------------------------------------------------ */ unsigned long util_ldap_url_node_hash(void *n) { util_url_node_t *node = n; return util_ald_hash_string(1, node->url); } int util_ldap_url_node_compare(void *a, void *b) { util_url_node_t *na = a; util_url_node_t *nb = b; return (strcmp(na->url, nb->url) == 0); } void *util_ldap_url_node_copy(util_ald_cache_t *cache, void *c) { util_url_node_t *n = c; util_url_node_t *node = util_ald_alloc(cache, sizeof *node); if (node) { if (!(node->url = util_ald_strdup(cache, n->url))) { util_ald_free(cache, node); return NULL; } node->search_cache = n->search_cache; node->compare_cache = n->compare_cache; node->dn_compare_cache = n->dn_compare_cache; return node; } else { return NULL; } } void util_ldap_url_node_free(util_ald_cache_t *cache, void *n) { util_url_node_t *node = n; util_ald_free(cache, node->url); util_ald_destroy_cache(node->search_cache); util_ald_destroy_cache(node->compare_cache); util_ald_destroy_cache(node->dn_compare_cache); util_ald_free(cache, node); } void util_ldap_url_node_display(request_rec *r, util_ald_cache_t *cache, void *n) { util_url_node_t *node = n; char date_str[APR_CTIME_LEN]; const char *type_str; util_ald_cache_t *cache_node; int x; for (x=0;x<3;x++) { switch (x) { case 0: cache_node = node->search_cache; type_str = "Searches"; break; case 1: cache_node = node->compare_cache; type_str = "Compares"; break; case 2: default: cache_node = node->dn_compare_cache; type_str = "DN Compares"; break; } if (cache_node->marktime) { apr_ctime(date_str, cache_node->marktime); } else date_str[0] = 0; ap_rprintf(r, "" "%s (%s)" "%ld" "%ld" "%ld" "%" APR_TIME_T_FMT "" "%ld" "%s" "", node->url, type_str, cache_node->size, cache_node->maxentries, cache_node->numentries, apr_time_sec(cache_node->ttl), cache_node->fullmark, date_str); } } /* ------------------------------------------------------------------ */ /* Cache functions for search nodes */ unsigned long util_ldap_search_node_hash(void *n) { util_search_node_t *node = n; return util_ald_hash_string(1, node->username); } int util_ldap_search_node_compare(void *a, void *b) { util_search_node_t *na = a; util_search_node_t *nb = b; return (strcmp(na->username, nb->username) == 0); } void *util_ldap_search_node_copy(util_ald_cache_t *cache, void *c) { util_search_node_t *node = c; util_search_node_t *newnode = util_ald_alloc(cache, sizeof *newnode); /* safety check */ if (newnode) { /* copy vals */ if (node->vals) { int k = node->numvals; int i = 0; if (!(newnode->vals = util_ald_alloc(cache, sizeof(char *) * (k+1)))) { util_ldap_search_node_free(cache, newnode); return NULL; } newnode->numvals = node->numvals; for (;k;k--) { if (node->vals[i]) { if (!(newnode->vals[i] = util_ald_strdup(cache, node->vals[i]))) { util_ldap_search_node_free(cache, newnode); return NULL; } } else newnode->vals[i] = NULL; i++; } } else { newnode->vals = NULL; } if (!(newnode->username = util_ald_strdup(cache, node->username)) || !(newnode->dn = util_ald_strdup(cache, node->dn)) ) { util_ldap_search_node_free(cache, newnode); return NULL; } if (node->bindpw) { if (!(newnode->bindpw = util_ald_strdup(cache, node->bindpw))) { util_ldap_search_node_free(cache, newnode); return NULL; } } else { newnode->bindpw = NULL; } newnode->lastbind = node->lastbind; } return (void *)newnode; } void util_ldap_search_node_free(util_ald_cache_t *cache, void *n) { int i = 0; util_search_node_t *node = n; int k = node->numvals; if (node->vals) { for (;k;k--,i++) { if (node->vals[i]) { util_ald_free(cache, node->vals[i]); } } util_ald_free(cache, node->vals); } util_ald_free(cache, node->username); util_ald_free(cache, node->dn); util_ald_free(cache, node->bindpw); util_ald_free(cache, node); } void util_ldap_search_node_display(request_rec *r, util_ald_cache_t *cache, void *n) { util_search_node_t *node = n; char date_str[APR_CTIME_LEN]; apr_ctime(date_str, node->lastbind); ap_rprintf(r, "" "%s" "%s" "%s" "", node->username, node->dn, date_str); } /* ------------------------------------------------------------------ */ unsigned long util_ldap_compare_node_hash(void *n) { util_compare_node_t *node = n; return util_ald_hash_string(3, node->dn, node->attrib, node->value); } int util_ldap_compare_node_compare(void *a, void *b) { util_compare_node_t *na = a; util_compare_node_t *nb = b; return (strcmp(na->dn, nb->dn) == 0 && strcmp(na->attrib, nb->attrib) == 0 && strcmp(na->value, nb->value) == 0); } void *util_ldap_compare_node_copy(util_ald_cache_t *cache, void *c) { util_compare_node_t *n = c; util_compare_node_t *node = util_ald_alloc(cache, sizeof *node); if (node) { if (!(node->dn = util_ald_strdup(cache, n->dn)) || !(node->attrib = util_ald_strdup(cache, n->attrib)) || !(node->value = util_ald_strdup(cache, n->value)) || ((n->subgroupList) && !(node->subgroupList = util_ald_sgl_dup(cache, n->subgroupList)))) { util_ldap_compare_node_free(cache, node); return NULL; } node->lastcompare = n->lastcompare; node->result = n->result; node->sgl_processed = n->sgl_processed; return node; } else { return NULL; } } void util_ldap_compare_node_free(util_ald_cache_t *cache, void *n) { util_compare_node_t *node = n; util_ald_sgl_free(cache, &(node->subgroupList)); util_ald_free(cache, node->dn); util_ald_free(cache, node->attrib); util_ald_free(cache, node->value); util_ald_free(cache, node); } void util_ldap_compare_node_display(request_rec *r, util_ald_cache_t *cache, void *n) { util_compare_node_t *node = n; char date_str[APR_CTIME_LEN]; char *cmp_result; char *sub_groups_val; char *sub_groups_checked; apr_ctime(date_str, node->lastcompare); if (node->result == LDAP_COMPARE_TRUE) { cmp_result = "LDAP_COMPARE_TRUE"; } else if (node->result == LDAP_COMPARE_FALSE) { cmp_result = "LDAP_COMPARE_FALSE"; } else { cmp_result = apr_itoa(r->pool, node->result); } if (node->subgroupList) { sub_groups_val = "Yes"; } else { sub_groups_val = "No"; } if (node->sgl_processed) { sub_groups_checked = "Yes"; } else { sub_groups_checked = "No"; } ap_rprintf(r, "" "%s" "%s" "%s" "%s" "%s" "%s" "%s" "", node->dn, node->attrib, node->value, date_str, cmp_result, sub_groups_val, sub_groups_checked); } /* ------------------------------------------------------------------ */ unsigned long util_ldap_dn_compare_node_hash(void *n) { util_dn_compare_node_t *node = n; return util_ald_hash_string(1, node->reqdn); } int util_ldap_dn_compare_node_compare(void *a, void *b) { util_dn_compare_node_t *na = a; util_dn_compare_node_t *nb = b; return (strcmp(na->reqdn, nb->reqdn) == 0); } void *util_ldap_dn_compare_node_copy(util_ald_cache_t *cache, void *c) { util_dn_compare_node_t *n = c; util_dn_compare_node_t *node = util_ald_alloc(cache, sizeof *node); if (node) { if (!(node->reqdn = util_ald_strdup(cache, n->reqdn)) || !(node->dn = util_ald_strdup(cache, n->dn))) { util_ldap_dn_compare_node_free(cache, node); return NULL; } return node; } else { return NULL; } } void util_ldap_dn_compare_node_free(util_ald_cache_t *cache, void *n) { util_dn_compare_node_t *node = n; util_ald_free(cache, node->reqdn); util_ald_free(cache, node->dn); util_ald_free(cache, node); } void util_ldap_dn_compare_node_display(request_rec *r, util_ald_cache_t *cache, void *n) { util_dn_compare_node_t *node = n; ap_rprintf(r, "" "%s" "%s" "", node->reqdn, node->dn); } /* ------------------------------------------------------------------ */ static apr_status_t util_ldap_cache_module_kill(void *data) { util_ldap_state_t *st = data; util_ald_destroy_cache(st->util_ldap_cache); #if APR_HAS_SHARED_MEMORY if (st->cache_rmm != NULL) { apr_rmm_destroy (st->cache_rmm); st->cache_rmm = NULL; } if (st->cache_shm != NULL) { apr_status_t result = apr_shm_destroy(st->cache_shm); st->cache_shm = NULL; return result; } #endif return APR_SUCCESS; } apr_status_t util_ldap_cache_init(apr_pool_t *pool, util_ldap_state_t *st) { #if APR_HAS_SHARED_MEMORY apr_status_t result; apr_size_t size; if (st->cache_bytes > 0) { if (st->cache_file) { /* Remove any existing shm segment with this name. */ apr_shm_remove(st->cache_file, st->pool); } size = APR_ALIGN_DEFAULT(st->cache_bytes); result = apr_shm_create(&st->cache_shm, size, st->cache_file, st->pool); if (result != APR_SUCCESS) { return result; } /* Determine the usable size of the shm segment. */ size = apr_shm_size_get(st->cache_shm); /* This will create a rmm "handler" to get into the shared memory area */ result = apr_rmm_init(&st->cache_rmm, NULL, apr_shm_baseaddr_get(st->cache_shm), size, st->pool); if (result != APR_SUCCESS) { return result; } } #endif apr_pool_cleanup_register(st->pool, st , util_ldap_cache_module_kill, apr_pool_cleanup_null); st->util_ldap_cache = util_ald_create_cache(st, st->search_cache_size, st->search_cache_ttl, util_ldap_url_node_hash, util_ldap_url_node_compare, util_ldap_url_node_copy, util_ldap_url_node_free, util_ldap_url_node_display); return APR_SUCCESS; } #endif /* APR_HAS_LDAP */ httpd-2.4.41/modules/http/0002755000000000000500000000000013523273341013670 5ustar rootsrchttpd-2.4.41/modules/http/mod_mime.mak0000644000000000000500000002301512701473373016153 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_mime.dsp !IF "$(CFG)" == "" CFG=mod_mime - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_mime - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_mime - Win32 Release" && "$(CFG)" != "mod_mime - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_mime.mak" CFG="mod_mime - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_mime - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_mime - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_mime - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_mime.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_mime.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_mime.obj" -@erase "$(INTDIR)\mod_mime.res" -@erase "$(INTDIR)\mod_mime_src.idb" -@erase "$(INTDIR)\mod_mime_src.pdb" -@erase "$(OUTDIR)\mod_mime.exp" -@erase "$(OUTDIR)\mod_mime.lib" -@erase "$(OUTDIR)\mod_mime.pdb" -@erase "$(OUTDIR)\mod_mime.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_mime_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_mime.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_mime.so" /d LONG_NAME="mime_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_mime.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_mime.pdb" /debug /out:"$(OUTDIR)\mod_mime.so" /implib:"$(OUTDIR)\mod_mime.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_mime.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_mime.obj" \ "$(INTDIR)\mod_mime.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_mime.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_mime.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_mime.so" if exist .\Release\mod_mime.so.manifest mt.exe -manifest .\Release\mod_mime.so.manifest -outputresource:.\Release\mod_mime.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_mime - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_mime.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_mime.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_mime.obj" -@erase "$(INTDIR)\mod_mime.res" -@erase "$(INTDIR)\mod_mime_src.idb" -@erase "$(INTDIR)\mod_mime_src.pdb" -@erase "$(OUTDIR)\mod_mime.exp" -@erase "$(OUTDIR)\mod_mime.lib" -@erase "$(OUTDIR)\mod_mime.pdb" -@erase "$(OUTDIR)\mod_mime.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_mime_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_mime.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_mime.so" /d LONG_NAME="mime_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_mime.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_mime.pdb" /debug /out:"$(OUTDIR)\mod_mime.so" /implib:"$(OUTDIR)\mod_mime.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_mime.so LINK32_OBJS= \ "$(INTDIR)\mod_mime.obj" \ "$(INTDIR)\mod_mime.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_mime.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_mime.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_mime.so" if exist .\Debug\mod_mime.so.manifest mt.exe -manifest .\Debug\mod_mime.so.manifest -outputresource:.\Debug\mod_mime.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_mime.dep") !INCLUDE "mod_mime.dep" !ELSE !MESSAGE Warning: cannot find "mod_mime.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_mime - Win32 Release" || "$(CFG)" == "mod_mime - Win32 Debug" !IF "$(CFG)" == "mod_mime - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\http" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\http" !ELSEIF "$(CFG)" == "mod_mime - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\http" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\http" !ENDIF !IF "$(CFG)" == "mod_mime - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\http" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\http" !ELSEIF "$(CFG)" == "mod_mime - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\http" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\http" !ENDIF !IF "$(CFG)" == "mod_mime - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\http" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\http" !ELSEIF "$(CFG)" == "mod_mime - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\http" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\http" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_mime - Win32 Release" "$(INTDIR)\mod_mime.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_mime.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_mime.so" /d LONG_NAME="mime_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_mime - Win32 Debug" "$(INTDIR)\mod_mime.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_mime.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_mime.so" /d LONG_NAME="mime_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_mime.c "$(INTDIR)\mod_mime.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/http/http_etag.c0000644000000000000500000001566611573243040016023 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_strings.h" #include "apr_thread_proc.h" /* for RLIMIT stuff */ #define APR_WANT_STRFUNC #include "apr_want.h" #include "httpd.h" #include "http_config.h" #include "http_connection.h" #include "http_core.h" #include "http_protocol.h" /* For index_of_response(). Grump. */ #include "http_request.h" /* Generate the human-readable hex representation of an apr_uint64_t * (basically a faster version of 'sprintf("%llx")') */ #define HEX_DIGITS "0123456789abcdef" static char *etag_uint64_to_hex(char *next, apr_uint64_t u) { int printing = 0; int shift = sizeof(apr_uint64_t) * 8 - 4; do { unsigned short next_digit = (unsigned short) ((u >> shift) & (apr_uint64_t)0xf); if (next_digit) { *next++ = HEX_DIGITS[next_digit]; printing = 1; } else if (printing) { *next++ = HEX_DIGITS[next_digit]; } shift -= 4; } while (shift); *next++ = HEX_DIGITS[u & (apr_uint64_t)0xf]; return next; } #define ETAG_WEAK "W/" #define CHARS_PER_UINT64 (sizeof(apr_uint64_t) * 2) /* * Construct an entity tag (ETag) from resource information. If it's a real * file, build in some of the file characteristics. If the modification time * is newer than (request-time minus 1 second), mark the ETag as weak - it * could be modified again in as short an interval. We rationalize the * modification time we're given to keep it from being in the future. */ AP_DECLARE(char *) ap_make_etag(request_rec *r, int force_weak) { char *weak; apr_size_t weak_len; char *etag; char *next; core_dir_config *cfg; etag_components_t etag_bits; etag_components_t bits_added; cfg = (core_dir_config *)ap_get_core_module_config(r->per_dir_config); etag_bits = (cfg->etag_bits & (~ cfg->etag_remove)) | cfg->etag_add; /* * If it's a file (or we wouldn't be here) and no ETags * should be set for files, return an empty string and * note it for the header-sender to ignore. */ if (etag_bits & ETAG_NONE) { apr_table_setn(r->notes, "no-etag", "omit"); return ""; } if (etag_bits == ETAG_UNSET) { etag_bits = ETAG_BACKWARD; } /* * Make an ETag header out of various pieces of information. We use * the last-modified date and, if we have a real file, the * length and inode number - note that this doesn't have to match * the content-length (i.e. includes), it just has to be unique * for the file. * * If the request was made within a second of the last-modified date, * we send a weak tag instead of a strong one, since it could * be modified again later in the second, and the validation * would be incorrect. */ if ((r->request_time - r->mtime > (1 * APR_USEC_PER_SEC)) && !force_weak) { weak = NULL; weak_len = 0; } else { weak = ETAG_WEAK; weak_len = sizeof(ETAG_WEAK); } if (r->finfo.filetype != APR_NOFILE) { /* * ETag gets set to [W/]"inode-size-mtime", modulo any * FileETag keywords. */ etag = apr_palloc(r->pool, weak_len + sizeof("\"--\"") + 3 * CHARS_PER_UINT64 + 1); next = etag; if (weak) { while (*weak) { *next++ = *weak++; } } *next++ = '"'; bits_added = 0; if (etag_bits & ETAG_INODE) { next = etag_uint64_to_hex(next, r->finfo.inode); bits_added |= ETAG_INODE; } if (etag_bits & ETAG_SIZE) { if (bits_added != 0) { *next++ = '-'; } next = etag_uint64_to_hex(next, r->finfo.size); bits_added |= ETAG_SIZE; } if (etag_bits & ETAG_MTIME) { if (bits_added != 0) { *next++ = '-'; } next = etag_uint64_to_hex(next, r->mtime); } *next++ = '"'; *next = '\0'; } else { /* * Not a file document, so just use the mtime: [W/]"mtime" */ etag = apr_palloc(r->pool, weak_len + sizeof("\"\"") + CHARS_PER_UINT64 + 1); next = etag; if (weak) { while (*weak) { *next++ = *weak++; } } *next++ = '"'; next = etag_uint64_to_hex(next, r->mtime); *next++ = '"'; *next = '\0'; } return etag; } AP_DECLARE(void) ap_set_etag(request_rec *r) { char *etag; char *variant_etag, *vlv; int vlv_weak; if (!r->vlist_validator) { etag = ap_make_etag(r, 0); /* If we get a blank etag back, don't set the header. */ if (!etag[0]) { return; } } else { /* If we have a variant list validator (vlv) due to the * response being negotiated, then we create a structured * entity tag which merges the variant etag with the variant * list validator (vlv). This merging makes revalidation * somewhat safer, ensures that caches which can deal with * Vary will (eventually) be updated if the set of variants is * changed, and is also a protocol requirement for transparent * content negotiation. */ /* if the variant list validator is weak, we make the whole * structured etag weak. If we would not, then clients could * have problems merging range responses if we have different * variants with the same non-globally-unique strong etag. */ vlv = r->vlist_validator; vlv_weak = (vlv[0] == 'W'); variant_etag = ap_make_etag(r, vlv_weak); /* If we get a blank etag back, don't append vlv and stop now. */ if (!variant_etag[0]) { return; } /* merge variant_etag and vlv into a structured etag */ variant_etag[strlen(variant_etag) - 1] = '\0'; if (vlv_weak) { vlv += 3; } else { vlv++; } etag = apr_pstrcat(r->pool, variant_etag, ";", vlv, NULL); } apr_table_setn(r->headers_out, "ETag", etag); } httpd-2.4.41/modules/http/http_request.c0000644000000000000500000007327313312201005016555 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * http_request.c: functions to get and process requests * * Rob McCool 3/21/93 * * Thoroughly revamped by rst for Apache. NB this file reads * best from the bottom up. * */ #include "apr_strings.h" #include "apr_file_io.h" #include "apr_fnmatch.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_core.h" #include "http_protocol.h" #include "http_log.h" #include "http_main.h" #include "util_filter.h" #include "util_charset.h" #include "scoreboard.h" #include "mod_core.h" #if APR_HAVE_STDARG_H #include #endif APLOG_USE_MODULE(http); /***************************************************************** * * Mainline request processing... */ /* XXX A cleaner and faster way to do this might be to pass the request_rec * down the filter chain as a parameter. It would need to change for * subrequest vs. main request filters; perhaps the subrequest filter could * make the switch. */ static void update_r_in_filters(ap_filter_t *f, request_rec *from, request_rec *to) { while (f) { if (f->r == from) { f->r = to; } f = f->next; } } static void ap_die_r(int type, request_rec *r, int recursive_error) { char *custom_response; request_rec *r_1st_err = r; if (type == OK || type == DONE) { ap_finalize_request_protocol(r); return; } if (!ap_is_HTTP_VALID_RESPONSE(type)) { ap_filter_t *next; /* * Check if we still have the ap_http_header_filter in place. If * this is the case we should not ignore the error here because * it means that we have not sent any response at all and never * will. This is bad. Sent an internal server error instead. */ next = r->output_filters; while (next && (next->frec != ap_http_header_filter_handle)) { next = next->next; } /* * If next != NULL then we left the while above because of * next->frec == ap_http_header_filter */ if (next) { if (type != AP_FILTER_ERROR) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01579) "Invalid response status %i", type); } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02831) "Response from AP_FILTER_ERROR"); } type = HTTP_INTERNAL_SERVER_ERROR; } else { return; } } /* * The following takes care of Apache redirects to custom response URLs * Note that if we are already dealing with the response to some other * error condition, we just report on the original error, and give up on * any attempt to handle the other thing "intelligently"... */ if (recursive_error != HTTP_OK) { while (r_1st_err->prev && (r_1st_err->prev->status != HTTP_OK)) r_1st_err = r_1st_err->prev; /* Get back to original error */ if (r_1st_err != r) { /* The recursive error was caused by an ErrorDocument specifying * an internal redirect to a bad URI. ap_internal_redirect has * changed the filter chains to point to the ErrorDocument's * request_rec. Back out those changes so we can safely use the * original failing request_rec to send the canned error message. * * ap_send_error_response gets rid of existing resource filters * on the output side, so we can skip those. */ update_r_in_filters(r_1st_err->proto_output_filters, r, r_1st_err); update_r_in_filters(r_1st_err->input_filters, r, r_1st_err); } custom_response = NULL; /* Do NOT retry the custom thing! */ } else { int error_index = ap_index_of_response(type); custom_response = ap_response_code_string(r, error_index); recursive_error = 0; } r->status = type; /* * This test is done here so that none of the auth modules needs to know * about proxy authentication. They treat it like normal auth, and then * we tweak the status. */ if (HTTP_UNAUTHORIZED == r->status && PROXYREQ_PROXY == r->proxyreq) { r->status = HTTP_PROXY_AUTHENTICATION_REQUIRED; } /* If we don't want to keep the connection, make sure we mark that the * connection is not eligible for keepalive. If we want to keep the * connection, be sure that the request body (if any) has been read. */ if (ap_status_drops_connection(r->status)) { r->connection->keepalive = AP_CONN_CLOSE; } /* * Two types of custom redirects --- plain text, and URLs. Plain text has * a leading '"', so the URL code, here, is triggered on its absence */ if (custom_response && custom_response[0] != '"') { if (ap_is_url(custom_response)) { /* * The URL isn't local, so lets drop through the rest of this * apache code, and continue with the usual REDIRECT handler. * But note that the client will ultimately see the wrong * status... */ r->status = HTTP_MOVED_TEMPORARILY; apr_table_setn(r->headers_out, "Location", custom_response); } else if (custom_response[0] == '/') { const char *error_notes, *original_method; int original_method_number; r->no_local_copy = 1; /* Do NOT send HTTP_NOT_MODIFIED for * error documents! */ /* * This redirect needs to be a GET no matter what the original * method was. */ apr_table_setn(r->subprocess_env, "REQUEST_METHOD", r->method); /* * Provide a special method for modules to communicate * more informative (than the plain canned) messages to us. * Propagate them to ErrorDocuments via the ERROR_NOTES variable: */ if ((error_notes = apr_table_get(r->notes, "error-notes")) != NULL) { apr_table_setn(r->subprocess_env, "ERROR_NOTES", error_notes); } original_method = r->method; original_method_number = r->method_number; r->method = "GET"; r->method_number = M_GET; ap_internal_redirect(custom_response, r); /* preserve ability to see %method = original_method; r->method_number = original_method_number; return; } else { /* * Dumb user has given us a bad url to redirect to --- fake up * dying with a recursive server error... */ recursive_error = HTTP_INTERNAL_SERVER_ERROR; ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01580) "Invalid error redirection directive: %s", custom_response); } } ap_send_error_response(r_1st_err, recursive_error); } AP_DECLARE(void) ap_die(int type, request_rec *r) { ap_die_r(type, r, r->status); } AP_DECLARE(apr_status_t) ap_check_pipeline(conn_rec *c, apr_bucket_brigade *bb, unsigned int max_blank_lines) { apr_status_t rv = APR_EOF; ap_input_mode_t mode = AP_MODE_SPECULATIVE; unsigned int num_blank_lines = 0; apr_size_t cr = 0; char buf[2]; while (c->keepalive != AP_CONN_CLOSE && !c->aborted) { apr_size_t len = cr + 1; apr_brigade_cleanup(bb); rv = ap_get_brigade(c->input_filters, bb, mode, APR_NONBLOCK_READ, len); if (rv != APR_SUCCESS || APR_BRIGADE_EMPTY(bb) || !max_blank_lines) { if (mode == AP_MODE_READBYTES) { /* Unexpected error, stop with this connection */ ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, c, APLOGNO(02967) "Can't consume pipelined empty lines"); c->keepalive = AP_CONN_CLOSE; rv = APR_EGENERAL; } else if (rv != APR_SUCCESS || APR_BRIGADE_EMPTY(bb)) { if (rv != APR_SUCCESS && !APR_STATUS_IS_EAGAIN(rv)) { /* Pipe is dead */ c->keepalive = AP_CONN_CLOSE; } else { /* Pipe is up and empty */ rv = APR_EAGAIN; } } else { apr_off_t n = 0; /* Single read asked, (non-meta-)data available? */ rv = apr_brigade_length(bb, 0, &n); if (rv == APR_SUCCESS && n <= 0) { rv = APR_EAGAIN; } } break; } /* Lookup and consume blank lines */ rv = apr_brigade_flatten(bb, buf, &len); if (rv != APR_SUCCESS || len != cr + 1) { int log_level; if (mode == AP_MODE_READBYTES) { /* Unexpected error, stop with this connection */ c->keepalive = AP_CONN_CLOSE; log_level = APLOG_ERR; rv = APR_EGENERAL; } else { /* Let outside (non-speculative/blocking) read determine * where this possible failure comes from (metadata, * morphed EOF socket, ...). Debug only here. */ log_level = APLOG_DEBUG; rv = APR_SUCCESS; } ap_log_cerror(APLOG_MARK, log_level, rv, c, APLOGNO(02968) "Can't check pipelined data"); break; } if (mode == AP_MODE_READBYTES) { /* [CR]LF consumed, try next */ mode = AP_MODE_SPECULATIVE; cr = 0; } else if (cr) { AP_DEBUG_ASSERT(len == 2 && buf[0] == APR_ASCII_CR); if (buf[1] == APR_ASCII_LF) { /* consume this CRLF */ mode = AP_MODE_READBYTES; num_blank_lines++; } else { /* CR(?!LF) is data */ break; } } else { if (buf[0] == APR_ASCII_LF) { /* consume this LF */ mode = AP_MODE_READBYTES; num_blank_lines++; } else if (buf[0] == APR_ASCII_CR) { cr = 1; } else { /* Not [CR]LF, some data */ break; } } if (num_blank_lines > max_blank_lines) { /* Enough blank lines with this connection, * stop and don't recycle it. */ c->keepalive = AP_CONN_CLOSE; rv = APR_NOTFOUND; break; } } return rv; } #define RETRIEVE_BRIGADE_FROM_POOL(bb, key, pool, allocator) do { \ apr_pool_userdata_get((void **)&bb, key, pool); \ if (bb == NULL) { \ bb = apr_brigade_create(pool, allocator); \ apr_pool_userdata_setn((const void *)bb, key, NULL, pool); \ } \ else { \ apr_brigade_cleanup(bb); \ } \ } while(0) AP_DECLARE(void) ap_process_request_after_handler(request_rec *r) { apr_bucket_brigade *bb; apr_bucket *b; conn_rec *c = r->connection; apr_status_t rv; /* Send an EOR bucket through the output filter chain. When * this bucket is destroyed, the request will be logged and * its pool will be freed */ RETRIEVE_BRIGADE_FROM_POOL(bb, "ap_process_request_after_handler_brigade", c->pool, c->bucket_alloc); b = ap_bucket_eor_create(c->bucket_alloc, r); APR_BRIGADE_INSERT_HEAD(bb, b); ap_pass_brigade(c->output_filters, bb); /* The EOR bucket has either been handled by an output filter (eg. * deleted or moved to a buffered_bb => no more in bb), or an error * occured before that (eg. c->aborted => still in bb) and we ought * to destroy it now. So cleanup any remaining bucket along with * the orphan request (if any). */ apr_brigade_cleanup(bb); /* From here onward, it is no longer safe to reference r * or r->pool, because r->pool may have been destroyed * already by the EOR bucket's cleanup function. */ /* Check pipeline consuming blank lines, they must not be interpreted as * the next pipelined request, otherwise we would block on the next read * without flushing data, and hence possibly delay pending response(s) * until the next/real request comes in or the keepalive timeout expires. */ rv = ap_check_pipeline(c, bb, DEFAULT_LIMIT_BLANK_LINES); c->data_in_input_filters = (rv == APR_SUCCESS); apr_brigade_cleanup(bb); if (c->cs) c->cs->state = (c->aborted) ? CONN_STATE_LINGER : CONN_STATE_WRITE_COMPLETION; AP_PROCESS_REQUEST_RETURN((uintptr_t)r, r->uri, r->status); if (ap_extended_status) { ap_time_process_request(c->sbh, STOP_PREQUEST); } } void ap_process_async_request(request_rec *r) { conn_rec *c = r->connection; int access_status; /* Give quick handlers a shot at serving the request on the fast * path, bypassing all of the other Apache hooks. * * This hook was added to enable serving files out of a URI keyed * content cache ( e.g., Mike Abbott's Quick Shortcut Cache, * described here: http://oss.sgi.com/projects/apache/mod_qsc.html ) * * It may have other uses as well, such as routing requests directly to * content handlers that have the ability to grok HTTP and do their * own access checking, etc (e.g. servlet engines). * * Use this hook with extreme care and only if you know what you are * doing. */ AP_PROCESS_REQUEST_ENTRY((uintptr_t)r, r->uri); if (ap_extended_status) { ap_time_process_request(r->connection->sbh, START_PREQUEST); } if (APLOGrtrace4(r)) { int i; const apr_array_header_t *t_h = apr_table_elts(r->headers_in); const apr_table_entry_t *t_elt = (apr_table_entry_t *)t_h->elts; ap_log_rerror(APLOG_MARK, APLOG_TRACE4, 0, r, "Headers received from client:"); for (i = 0; i < t_h->nelts; i++, t_elt++) { ap_log_rerror(APLOG_MARK, APLOG_TRACE4, 0, r, " %s: %s", ap_escape_logitem(r->pool, t_elt->key), ap_escape_logitem(r->pool, t_elt->val)); } } #if APR_HAS_THREADS apr_thread_mutex_create(&r->invoke_mtx, APR_THREAD_MUTEX_DEFAULT, r->pool); apr_thread_mutex_lock(r->invoke_mtx); #endif access_status = ap_run_quick_handler(r, 0); /* Not a look-up request */ if (access_status == DECLINED) { access_status = ap_process_request_internal(r); if (access_status == OK) { access_status = ap_invoke_handler(r); } } if (access_status == SUSPENDED) { /* TODO: Should move these steps into a generic function, so modules * working on a suspended request can also call _ENTRY again. */ AP_PROCESS_REQUEST_RETURN((uintptr_t)r, r->uri, access_status); if (ap_extended_status) { ap_time_process_request(c->sbh, STOP_PREQUEST); } if (c->cs) c->cs->state = CONN_STATE_SUSPENDED; #if APR_HAS_THREADS apr_thread_mutex_unlock(r->invoke_mtx); #endif return; } #if APR_HAS_THREADS apr_thread_mutex_unlock(r->invoke_mtx); #endif ap_die_r(access_status, r, HTTP_OK); ap_process_request_after_handler(r); } AP_DECLARE(void) ap_process_request(request_rec *r) { apr_bucket_brigade *bb; apr_bucket *b; conn_rec *c = r->connection; apr_status_t rv; ap_process_async_request(r); if (!c->data_in_input_filters) { RETRIEVE_BRIGADE_FROM_POOL(bb, "ap_process_request_brigade", c->pool, c->bucket_alloc); b = apr_bucket_flush_create(c->bucket_alloc); APR_BRIGADE_INSERT_HEAD(bb, b); rv = ap_pass_brigade(c->output_filters, bb); if (APR_STATUS_IS_TIMEUP(rv)) { /* * Notice a timeout as an error message. This might be * valuable for detecting clients with broken network * connections or possible DoS attacks. */ ap_log_cerror(APLOG_MARK, APLOG_INFO, rv, c, APLOGNO(01581) "flushing data to the client"); } apr_brigade_cleanup(bb); } if (ap_extended_status) { ap_time_process_request(c->sbh, STOP_PREQUEST); } } static apr_table_t *rename_original_env(apr_pool_t *p, apr_table_t *t) { const apr_array_header_t *env_arr = apr_table_elts(t); const apr_table_entry_t *elts = (const apr_table_entry_t *) env_arr->elts; apr_table_t *new = apr_table_make(p, env_arr->nalloc); int i; for (i = 0; i < env_arr->nelts; ++i) { if (!elts[i].key) continue; apr_table_setn(new, apr_pstrcat(p, "REDIRECT_", elts[i].key, NULL), elts[i].val); } return new; } static request_rec *internal_internal_redirect(const char *new_uri, request_rec *r) { int access_status; request_rec *new; const char *vary_header; if (ap_is_recursion_limit_exceeded(r)) { ap_die(HTTP_INTERNAL_SERVER_ERROR, r); return NULL; } new = (request_rec *) apr_pcalloc(r->pool, sizeof(request_rec)); new->connection = r->connection; new->server = r->server; new->pool = r->pool; /* * A whole lot of this really ought to be shared with http_protocol.c... * another missing cleanup. It's particularly inappropriate to be * setting header_only, etc., here. */ new->method = r->method; new->method_number = r->method_number; new->allowed_methods = ap_make_method_list(new->pool, 2); ap_parse_uri(new, new_uri); new->parsed_uri.port_str = r->parsed_uri.port_str; new->parsed_uri.port = r->parsed_uri.port; new->request_config = ap_create_request_config(r->pool); new->per_dir_config = r->server->lookup_defaults; new->prev = r; r->next = new; new->useragent_addr = r->useragent_addr; new->useragent_ip = r->useragent_ip; /* Must have prev and next pointers set before calling create_request * hook. */ ap_run_create_request(new); /* Inherit the rest of the protocol info... */ new->the_request = r->the_request; new->allowed = r->allowed; new->status = r->status; new->assbackwards = r->assbackwards; new->header_only = r->header_only; new->protocol = r->protocol; new->proto_num = r->proto_num; new->hostname = r->hostname; new->request_time = r->request_time; new->main = r->main; new->headers_in = r->headers_in; new->trailers_in = r->trailers_in; new->headers_out = apr_table_make(r->pool, 12); if (ap_is_HTTP_REDIRECT(new->status)) { const char *location = apr_table_get(r->headers_out, "Location"); if (location) apr_table_setn(new->headers_out, "Location", location); } /* A module (like mod_rewrite) can force an internal redirect * to carry over the Vary header (if present). */ if (apr_table_get(r->notes, "redirect-keeps-vary")) { if((vary_header = apr_table_get(r->headers_out, "Vary"))) { apr_table_setn(new->headers_out, "Vary", vary_header); } } new->err_headers_out = r->err_headers_out; new->trailers_out = apr_table_make(r->pool, 5); new->subprocess_env = rename_original_env(r->pool, r->subprocess_env); new->notes = apr_table_make(r->pool, 5); new->htaccess = r->htaccess; new->no_cache = r->no_cache; new->expecting_100 = r->expecting_100; new->no_local_copy = r->no_local_copy; new->read_length = r->read_length; /* We can only read it once */ new->vlist_validator = r->vlist_validator; new->proto_output_filters = r->proto_output_filters; new->proto_input_filters = r->proto_input_filters; new->input_filters = new->proto_input_filters; if (new->main) { ap_filter_t *f, *nextf; /* If this is a subrequest, the filter chain may contain a * mixture of filters specific to the old request (r), and * some inherited from r->main. Here, inherit that filter * chain, and remove all those which are specific to the old * request; ensuring the subreq filter is left in place. */ new->output_filters = r->output_filters; f = new->output_filters; do { nextf = f->next; if (f->r == r && f->frec != ap_subreq_core_filter_handle) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01582) "dropping filter '%s' in internal redirect from %s to %s", f->frec->name, r->unparsed_uri, new_uri); /* To remove the filter, first set f->r to the *new* * request_rec, so that ->output_filters on 'new' is * changed (if necessary) when removing the filter. */ f->r = new; ap_remove_output_filter(f); } f = nextf; /* Stop at the protocol filters. If a protocol filter has * been newly installed for this resource, better leave it * in place, though it's probably a misconfiguration or * filter bug to get into this state. */ } while (f && f != new->proto_output_filters); } else { /* If this is not a subrequest, clear out all * resource-specific filters. */ new->output_filters = new->proto_output_filters; } update_r_in_filters(new->input_filters, r, new); update_r_in_filters(new->output_filters, r, new); apr_table_setn(new->subprocess_env, "REDIRECT_STATUS", apr_itoa(r->pool, r->status)); /* Begin by presuming any module can make its own path_info assumptions, * until some module interjects and changes the value. */ new->used_path_info = AP_REQ_DEFAULT_PATH_INFO; #if APR_HAS_THREADS new->invoke_mtx = r->invoke_mtx; #endif /* * XXX: hmm. This is because mod_setenvif and mod_unique_id really need * to do their thing on internal redirects as well. Perhaps this is a * misnamed function. */ if ((access_status = ap_run_post_read_request(new))) { ap_die(access_status, new); return NULL; } return new; } /* XXX: Is this function is so bogus and fragile that we deep-6 it? */ AP_DECLARE(void) ap_internal_fast_redirect(request_rec *rr, request_rec *r) { /* We need to tell POOL_DEBUG that we're guaranteeing that rr->pool * will exist as long as r->pool. Otherwise we run into troubles because * some values in this request will be allocated in r->pool, and others in * rr->pool. */ apr_pool_join(r->pool, rr->pool); r->proxyreq = rr->proxyreq; r->no_cache = (r->no_cache && rr->no_cache); r->no_local_copy = (r->no_local_copy && rr->no_local_copy); r->mtime = rr->mtime; r->uri = rr->uri; r->filename = rr->filename; r->canonical_filename = rr->canonical_filename; r->path_info = rr->path_info; r->args = rr->args; r->finfo = rr->finfo; r->handler = rr->handler; ap_set_content_type(r, rr->content_type); r->content_encoding = rr->content_encoding; r->content_languages = rr->content_languages; r->per_dir_config = rr->per_dir_config; /* copy output headers from subrequest, but leave negotiation headers */ r->notes = apr_table_overlay(r->pool, rr->notes, r->notes); r->headers_out = apr_table_overlay(r->pool, rr->headers_out, r->headers_out); r->err_headers_out = apr_table_overlay(r->pool, rr->err_headers_out, r->err_headers_out); r->trailers_out = apr_table_overlay(r->pool, rr->trailers_out, r->trailers_out); r->subprocess_env = apr_table_overlay(r->pool, rr->subprocess_env, r->subprocess_env); r->output_filters = rr->output_filters; r->input_filters = rr->input_filters; /* If any filters pointed at the now-defunct rr, we must point them * at our "new" instance of r. In particular, some of rr's structures * will now be bogus (say rr->headers_out). If a filter tried to modify * their f->r structure when it is pointing to rr, the real request_rec * will not get updated. Fix that here. */ update_r_in_filters(r->input_filters, rr, r); update_r_in_filters(r->output_filters, rr, r); if (r->main) { ap_filter_t *next = r->output_filters; while (next && (next != r->proto_output_filters)) { if (next->frec == ap_subreq_core_filter_handle) { break; } next = next->next; } if (!next || next == r->proto_output_filters) { ap_add_output_filter_handle(ap_subreq_core_filter_handle, NULL, r, r->connection); } } else { /* * We need to check if we now have the SUBREQ_CORE filter in our filter * chain. If this is the case we need to remove it since we are NO * subrequest. But we need to keep in mind that the SUBREQ_CORE filter * does not necessarily need to be the first filter in our chain. So we * need to go through the chain. But we only need to walk up the chain * until the proto_output_filters as the SUBREQ_CORE filter is below the * protocol filters. */ ap_filter_t *next; next = r->output_filters; while (next && (next->frec != ap_subreq_core_filter_handle) && (next != r->proto_output_filters)) { next = next->next; } if (next && (next->frec == ap_subreq_core_filter_handle)) { ap_remove_output_filter(next); } } } AP_DECLARE(void) ap_internal_redirect(const char *new_uri, request_rec *r) { int access_status; request_rec *new = internal_internal_redirect(new_uri, r); AP_INTERNAL_REDIRECT(r->uri, new_uri); /* ap_die was already called, if an error occured */ if (!new) { return; } access_status = ap_run_quick_handler(new, 0); /* Not a look-up request */ if (access_status == DECLINED) { access_status = ap_process_request_internal(new); if (access_status == OK) { access_status = ap_invoke_handler(new); } } ap_die(access_status, new); } /* This function is designed for things like actions or CGI scripts, when * using AddHandler, and you want to preserve the content type across * an internal redirect. */ AP_DECLARE(void) ap_internal_redirect_handler(const char *new_uri, request_rec *r) { int access_status; request_rec *new = internal_internal_redirect(new_uri, r); /* ap_die was already called, if an error occured */ if (!new) { return; } if (r->handler) ap_set_content_type(new, r->content_type); access_status = ap_process_request_internal(new); if (access_status == OK) { access_status = ap_invoke_handler(new); } ap_die(access_status, new); } AP_DECLARE(void) ap_allow_methods(request_rec *r, int reset, ...) { const char *method; va_list methods; /* * Get rid of any current settings if requested; not just the * well-known methods but any extensions as well. */ if (reset) { ap_clear_method_list(r->allowed_methods); } va_start(methods, reset); while ((method = va_arg(methods, const char *)) != NULL) { ap_method_list_add(r->allowed_methods, method); } va_end(methods); } AP_DECLARE(void) ap_allow_standard_methods(request_rec *r, int reset, ...) { int method; va_list methods; apr_int64_t mask; /* * Get rid of any current settings if requested; not just the * well-known methods but any extensions as well. */ if (reset) { ap_clear_method_list(r->allowed_methods); } mask = 0; va_start(methods, reset); while ((method = va_arg(methods, int)) != -1) { mask |= (AP_METHOD_BIT << method); } va_end(methods); r->allowed_methods->method_mask |= mask; } httpd-2.4.41/modules/http/mod_mime.exp0000644000000000000500000000001410150161574016162 0ustar rootsrcmime_module httpd-2.4.41/modules/http/http_protocol.c0000644000000000000500000016155213520776756016763 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * http_protocol.c --- routines which directly communicate with the client. * * Code originally by Rob McCool; much redone by Robert S. Thau * and the Apache Software Foundation. */ #include "apr.h" #include "apr_strings.h" #include "apr_buckets.h" #include "apr_lib.h" #include "apr_signal.h" #define APR_WANT_STDIO /* for sscanf */ #define APR_WANT_STRFUNC #define APR_WANT_MEMFUNC #include "apr_want.h" #include "util_filter.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_protocol.h" #include "http_main.h" #include "http_request.h" #include "http_vhost.h" #include "http_log.h" /* For errors detected in basic auth common * support code... */ #include "apr_date.h" /* For apr_date_parse_http and APR_DATE_BAD */ #include "util_charset.h" #include "util_ebcdic.h" #include "util_time.h" #include "ap_mpm.h" #include "mod_core.h" #if APR_HAVE_STDARG_H #include #endif #if APR_HAVE_UNISTD_H #include #endif APLOG_USE_MODULE(http); /* New Apache routine to map status codes into array indicies * e.g. 100 -> 0, 101 -> 1, 200 -> 2 ... * The number of status lines must equal the value of * RESPONSE_CODES (httpd.h) and must be listed in order. * No gaps are allowed between X00 and the largest Xnn * for any X (see ap_index_of_response). * When adding a new code here, add a define to httpd.h * as well. */ static const char * const status_lines[RESPONSE_CODES] = { "100 Continue", "101 Switching Protocols", "102 Processing", #define LEVEL_200 3 "200 OK", "201 Created", "202 Accepted", "203 Non-Authoritative Information", "204 No Content", "205 Reset Content", "206 Partial Content", "207 Multi-Status", "208 Already Reported", NULL, /* 209 */ NULL, /* 210 */ NULL, /* 211 */ NULL, /* 212 */ NULL, /* 213 */ NULL, /* 214 */ NULL, /* 215 */ NULL, /* 216 */ NULL, /* 217 */ NULL, /* 218 */ NULL, /* 219 */ NULL, /* 220 */ NULL, /* 221 */ NULL, /* 222 */ NULL, /* 223 */ NULL, /* 224 */ NULL, /* 225 */ "226 IM Used", #define LEVEL_300 30 "300 Multiple Choices", "301 Moved Permanently", "302 Found", "303 See Other", "304 Not Modified", "305 Use Proxy", NULL, /* 306 */ "307 Temporary Redirect", "308 Permanent Redirect", #define LEVEL_400 39 "400 Bad Request", "401 Unauthorized", "402 Payment Required", "403 Forbidden", "404 Not Found", "405 Method Not Allowed", "406 Not Acceptable", "407 Proxy Authentication Required", "408 Request Timeout", "409 Conflict", "410 Gone", "411 Length Required", "412 Precondition Failed", "413 Request Entity Too Large", "414 Request-URI Too Long", "415 Unsupported Media Type", "416 Requested Range Not Satisfiable", "417 Expectation Failed", NULL, /* 418 */ NULL, /* 419 */ NULL, /* 420 */ "421 Misdirected Request", "422 Unprocessable Entity", "423 Locked", "424 Failed Dependency", NULL, /* 425 */ "426 Upgrade Required", NULL, /* 427 */ "428 Precondition Required", "429 Too Many Requests", NULL, /* 430 */ "431 Request Header Fields Too Large", NULL, /* 432 */ NULL, /* 433 */ NULL, /* 434 */ NULL, /* 435 */ NULL, /* 436 */ NULL, /* 437 */ NULL, /* 438 */ NULL, /* 439 */ NULL, /* 440 */ NULL, /* 441 */ NULL, /* 442 */ NULL, /* 443 */ NULL, /* 444 */ NULL, /* 445 */ NULL, /* 446 */ NULL, /* 447 */ NULL, /* 448 */ NULL, /* 449 */ NULL, /* 450 */ "451 Unavailable For Legal Reasons", #define LEVEL_500 91 "500 Internal Server Error", "501 Not Implemented", "502 Bad Gateway", "503 Service Unavailable", "504 Gateway Timeout", "505 HTTP Version Not Supported", "506 Variant Also Negotiates", "507 Insufficient Storage", "508 Loop Detected", NULL, /* 509 */ "510 Not Extended", "511 Network Authentication Required" }; APR_HOOK_STRUCT( APR_HOOK_LINK(insert_error_filter) ) AP_IMPLEMENT_HOOK_VOID(insert_error_filter, (request_rec *r), (r)) /* The index of the first bit field that is used to index into a limit * bitmask. M_INVALID + 1 to METHOD_NUMBER_LAST. */ #define METHOD_NUMBER_FIRST (M_INVALID + 1) /* The max method number. Method numbers are used to shift bitmasks, * so this cannot exceed 63, and all bits high is equal to -1, which is a * special flag, so the last bit used has index 62. */ #define METHOD_NUMBER_LAST 62 static int is_mpm_running(void) { int mpm_state = 0; if (ap_mpm_query(AP_MPMQ_MPM_STATE, &mpm_state)) { return 0; } if (mpm_state == AP_MPMQ_STOPPING) { return 0; } return 1; } AP_DECLARE(int) ap_set_keepalive(request_rec *r) { int ka_sent = 0; int left = r->server->keep_alive_max - r->connection->keepalives; int wimpy = ap_find_token(r->pool, apr_table_get(r->headers_out, "Connection"), "close"); const char *conn = apr_table_get(r->headers_in, "Connection"); /* The following convoluted conditional determines whether or not * the current connection should remain persistent after this response * (a.k.a. HTTP Keep-Alive) and whether or not the output message * body should use the HTTP/1.1 chunked transfer-coding. In English, * * IF we have not marked this connection as errored; * and the client isn't expecting 100-continue (PR47087 - more * input here could be the client continuing when we're * closing the request). * and the response body has a defined length due to the status code * being 304 or 204, the request method being HEAD, already * having defined Content-Length or Transfer-Encoding: chunked, or * the request version being HTTP/1.1 and thus capable of being set * as chunked [we know the (r->chunked = 1) side-effect is ugly]; * and the server configuration enables keep-alive; * and the server configuration has a reasonable inter-request timeout; * and there is no maximum # requests or the max hasn't been reached; * and the response status does not require a close; * and the response generator has not already indicated close; * and the client did not request non-persistence (Connection: close); * and we haven't been configured to ignore the buggy twit * or they're a buggy twit coming through a HTTP/1.1 proxy * and the client is requesting an HTTP/1.0-style keep-alive * or the client claims to be HTTP/1.1 compliant (perhaps a proxy); * and this MPM process is not already exiting * THEN we can be persistent, which requires more headers be output. * * Note that the condition evaluation order is extremely important. */ if ((r->connection->keepalive != AP_CONN_CLOSE) && !r->expecting_100 && (r->header_only || AP_STATUS_IS_HEADER_ONLY(r->status) || apr_table_get(r->headers_out, "Content-Length") || ap_find_last_token(r->pool, apr_table_get(r->headers_out, "Transfer-Encoding"), "chunked") || ((r->proto_num >= HTTP_VERSION(1,1)) && (r->chunked = 1))) /* THIS CODE IS CORRECT, see above. */ && r->server->keep_alive && (r->server->keep_alive_timeout > 0) && ((r->server->keep_alive_max == 0) || (left > 0)) && !ap_status_drops_connection(r->status) && !wimpy && !ap_find_token(r->pool, conn, "close") && (!apr_table_get(r->subprocess_env, "nokeepalive") || apr_table_get(r->headers_in, "Via")) && ((ka_sent = ap_find_token(r->pool, conn, "keep-alive")) || (r->proto_num >= HTTP_VERSION(1,1))) && is_mpm_running()) { r->connection->keepalive = AP_CONN_KEEPALIVE; r->connection->keepalives++; /* If they sent a Keep-Alive token, send one back */ if (ka_sent) { if (r->server->keep_alive_max) { apr_table_setn(r->headers_out, "Keep-Alive", apr_psprintf(r->pool, "timeout=%d, max=%d", (int)apr_time_sec(r->server->keep_alive_timeout), left)); } else { apr_table_setn(r->headers_out, "Keep-Alive", apr_psprintf(r->pool, "timeout=%d", (int)apr_time_sec(r->server->keep_alive_timeout))); } apr_table_mergen(r->headers_out, "Connection", "Keep-Alive"); } return 1; } /* Otherwise, we need to indicate that we will be closing this * connection immediately after the current response. * * We only really need to send "close" to HTTP/1.1 clients, but we * always send it anyway, because a broken proxy may identify itself * as HTTP/1.0, but pass our request along with our HTTP/1.1 tag * to a HTTP/1.1 client. Better safe than sorry. */ if (!wimpy) { apr_table_mergen(r->headers_out, "Connection", "close"); } /* * If we had previously been a keepalive connection and this * is the last one, then bump up the number of keepalives * we've had */ if ((r->connection->keepalive != AP_CONN_CLOSE) && r->server->keep_alive_max && !left) { r->connection->keepalives++; } r->connection->keepalive = AP_CONN_CLOSE; return 0; } AP_DECLARE(ap_condition_e) ap_condition_if_match(request_rec *r, apr_table_t *headers) { const char *if_match, *etag; /* A server MUST use the strong comparison function (see section 13.3.3) * to compare the entity tags in If-Match. */ if ((if_match = apr_table_get(r->headers_in, "If-Match")) != NULL) { if (if_match[0] == '*' || ((etag = apr_table_get(headers, "ETag")) != NULL && ap_find_etag_strong(r->pool, if_match, etag))) { return AP_CONDITION_STRONG; } else { return AP_CONDITION_NOMATCH; } } return AP_CONDITION_NONE; } AP_DECLARE(ap_condition_e) ap_condition_if_unmodified_since(request_rec *r, apr_table_t *headers) { const char *if_unmodified; if_unmodified = apr_table_get(r->headers_in, "If-Unmodified-Since"); if (if_unmodified) { apr_int64_t mtime, reqtime; apr_time_t ius = apr_time_sec(apr_date_parse_http(if_unmodified)); /* All of our comparisons must be in seconds, because that's the * highest time resolution the HTTP specification allows. */ mtime = apr_time_sec(apr_date_parse_http( apr_table_get(headers, "Last-Modified"))); if (mtime == APR_DATE_BAD) { mtime = apr_time_sec(r->mtime ? r->mtime : apr_time_now()); } reqtime = apr_time_sec(apr_date_parse_http( apr_table_get(headers, "Date"))); if (!reqtime) { reqtime = apr_time_sec(r->request_time); } if ((ius != APR_DATE_BAD) && (mtime > ius)) { if (reqtime < mtime + 60) { if (apr_table_get(r->headers_in, "Range")) { /* weak matches not allowed with Range requests */ return AP_CONDITION_NOMATCH; } else { return AP_CONDITION_WEAK; } } else { return AP_CONDITION_STRONG; } } else { return AP_CONDITION_NOMATCH; } } return AP_CONDITION_NONE; } AP_DECLARE(ap_condition_e) ap_condition_if_none_match(request_rec *r, apr_table_t *headers) { const char *if_nonematch, *etag; if_nonematch = apr_table_get(r->headers_in, "If-None-Match"); if (if_nonematch != NULL) { if (if_nonematch[0] == '*') { return AP_CONDITION_STRONG; } /* See section 13.3.3 for rules on how to determine if two entities tags * match. The weak comparison function can only be used with GET or HEAD * requests. */ if (r->method_number == M_GET) { if ((etag = apr_table_get(headers, "ETag")) != NULL) { if (apr_table_get(r->headers_in, "Range")) { if (ap_find_etag_strong(r->pool, if_nonematch, etag)) { return AP_CONDITION_STRONG; } } else { if (ap_find_etag_weak(r->pool, if_nonematch, etag)) { return AP_CONDITION_WEAK; } } } } else if ((etag = apr_table_get(headers, "ETag")) != NULL && ap_find_etag_strong(r->pool, if_nonematch, etag)) { return AP_CONDITION_STRONG; } return AP_CONDITION_NOMATCH; } return AP_CONDITION_NONE; } AP_DECLARE(ap_condition_e) ap_condition_if_modified_since(request_rec *r, apr_table_t *headers) { const char *if_modified_since; if ((if_modified_since = apr_table_get(r->headers_in, "If-Modified-Since")) != NULL) { apr_int64_t mtime; apr_int64_t ims, reqtime; /* All of our comparisons must be in seconds, because that's the * highest time resolution the HTTP specification allows. */ mtime = apr_time_sec(apr_date_parse_http( apr_table_get(headers, "Last-Modified"))); if (mtime == APR_DATE_BAD) { mtime = apr_time_sec(r->mtime ? r->mtime : apr_time_now()); } reqtime = apr_time_sec(apr_date_parse_http( apr_table_get(headers, "Date"))); if (!reqtime) { reqtime = apr_time_sec(r->request_time); } ims = apr_time_sec(apr_date_parse_http(if_modified_since)); if (ims >= mtime && ims <= reqtime) { if (reqtime < mtime + 60) { if (apr_table_get(r->headers_in, "Range")) { /* weak matches not allowed with Range requests */ return AP_CONDITION_NOMATCH; } else { return AP_CONDITION_WEAK; } } else { return AP_CONDITION_STRONG; } } else { return AP_CONDITION_NOMATCH; } } return AP_CONDITION_NONE; } AP_DECLARE(ap_condition_e) ap_condition_if_range(request_rec *r, apr_table_t *headers) { const char *if_range, *etag; if ((if_range = apr_table_get(r->headers_in, "If-Range")) && apr_table_get(r->headers_in, "Range")) { if (if_range[0] == '"') { if ((etag = apr_table_get(headers, "ETag")) && !strcmp(if_range, etag)) { return AP_CONDITION_STRONG; } else { return AP_CONDITION_NOMATCH; } } else { apr_int64_t mtime; apr_int64_t rtime, reqtime; /* All of our comparisons must be in seconds, because that's the * highest time resolution the HTTP specification allows. */ mtime = apr_time_sec(apr_date_parse_http( apr_table_get(headers, "Last-Modified"))); if (mtime == APR_DATE_BAD) { mtime = apr_time_sec(r->mtime ? r->mtime : apr_time_now()); } reqtime = apr_time_sec(apr_date_parse_http( apr_table_get(headers, "Date"))); if (!reqtime) { reqtime = apr_time_sec(r->request_time); } rtime = apr_time_sec(apr_date_parse_http(if_range)); if (rtime == mtime) { if (reqtime < mtime + 60) { /* weak matches not allowed with Range requests */ return AP_CONDITION_NOMATCH; } else { return AP_CONDITION_STRONG; } } else { return AP_CONDITION_NOMATCH; } } } return AP_CONDITION_NONE; } AP_DECLARE(int) ap_meets_conditions(request_rec *r) { int not_modified = -1; /* unset by default */ ap_condition_e cond; /* Check for conditional requests --- note that we only want to do * this if we are successful so far and we are not processing a * subrequest or an ErrorDocument. * * The order of the checks is important, since ETag checks are supposed * to be more accurate than checks relative to the modification time. * However, not all documents are guaranteed to *have* ETags, and some * might have Last-Modified values w/o ETags, so this gets a little * complicated. */ if (!ap_is_HTTP_SUCCESS(r->status) || r->no_local_copy) { return OK; } /* If an If-Match request-header field was given * AND the field value is not "*" (meaning match anything) * AND if our strong ETag does not match any entity tag in that field, * respond with a status of 412 (Precondition Failed). */ cond = ap_condition_if_match(r, r->headers_out); if (AP_CONDITION_NOMATCH == cond) { return HTTP_PRECONDITION_FAILED; } /* Else if a valid If-Unmodified-Since request-header field was given * AND the requested resource has been modified since the time * specified in this field, then the server MUST * respond with a status of 412 (Precondition Failed). */ cond = ap_condition_if_unmodified_since(r, r->headers_out); if (AP_CONDITION_NOMATCH == cond) { not_modified = 0; } else if (cond >= AP_CONDITION_WEAK) { return HTTP_PRECONDITION_FAILED; } /* If an If-None-Match request-header field was given * AND the field value is "*" (meaning match anything) * OR our ETag matches any of the entity tags in that field, fail. * * If the request method was GET or HEAD, failure means the server * SHOULD respond with a 304 (Not Modified) response. * For all other request methods, failure means the server MUST * respond with a status of 412 (Precondition Failed). * * GET or HEAD allow weak etag comparison, all other methods require * strong comparison. We can only use weak if it's not a range request. */ cond = ap_condition_if_none_match(r, r->headers_out); if (AP_CONDITION_NOMATCH == cond) { not_modified = 0; } else if (cond >= AP_CONDITION_WEAK) { if (r->method_number == M_GET) { if (not_modified) { not_modified = 1; } } else { return HTTP_PRECONDITION_FAILED; } } /* If a valid If-Modified-Since request-header field was given * AND it is a GET or HEAD request * AND the requested resource has not been modified since the time * specified in this field, then the server MUST * respond with a status of 304 (Not Modified). * A date later than the server's current request time is invalid. */ cond = ap_condition_if_modified_since(r, r->headers_out); if (AP_CONDITION_NOMATCH == cond) { not_modified = 0; } else if (cond >= AP_CONDITION_WEAK) { if (r->method_number == M_GET) { if (not_modified) { not_modified = 1; } } } /* If an If-Range and an Range header is present, we must return * 200 OK. The byterange filter will convert it to a range response. */ cond = ap_condition_if_range(r, r->headers_out); if (cond > AP_CONDITION_NONE) { return OK; } if (not_modified == 1) { return HTTP_NOT_MODIFIED; } return OK; } /** * Singleton registry of additional methods. This maps new method names * such as "MYGET" to methnums, which are int offsets into bitmasks. * * This follows the same technique as standard M_GET, M_POST, etc. These * are dynamically assigned when modules are loaded and * directives are processed. */ static apr_hash_t *methods_registry = NULL; static int cur_method_number = METHOD_NUMBER_FIRST; /* internal function to register one method/number pair */ static void register_one_method(apr_pool_t *p, const char *methname, int methnum) { int *pnum = apr_palloc(p, sizeof(*pnum)); *pnum = methnum; apr_hash_set(methods_registry, methname, APR_HASH_KEY_STRING, pnum); } /* This internal function is used to clear the method registry * and reset the cur_method_number counter. */ static apr_status_t ap_method_registry_destroy(void *notused) { methods_registry = NULL; cur_method_number = METHOD_NUMBER_FIRST; return APR_SUCCESS; } AP_DECLARE(void) ap_method_registry_init(apr_pool_t *p) { methods_registry = apr_hash_make(p); apr_pool_cleanup_register(p, NULL, ap_method_registry_destroy, apr_pool_cleanup_null); /* put all the standard methods into the registry hash to ease the * mapping operations between name and number * HEAD is a special-instance of the GET method and shares the same ID */ register_one_method(p, "GET", M_GET); register_one_method(p, "HEAD", M_GET); register_one_method(p, "PUT", M_PUT); register_one_method(p, "POST", M_POST); register_one_method(p, "DELETE", M_DELETE); register_one_method(p, "CONNECT", M_CONNECT); register_one_method(p, "OPTIONS", M_OPTIONS); register_one_method(p, "TRACE", M_TRACE); register_one_method(p, "PATCH", M_PATCH); register_one_method(p, "PROPFIND", M_PROPFIND); register_one_method(p, "PROPPATCH", M_PROPPATCH); register_one_method(p, "MKCOL", M_MKCOL); register_one_method(p, "COPY", M_COPY); register_one_method(p, "MOVE", M_MOVE); register_one_method(p, "LOCK", M_LOCK); register_one_method(p, "UNLOCK", M_UNLOCK); register_one_method(p, "VERSION-CONTROL", M_VERSION_CONTROL); register_one_method(p, "CHECKOUT", M_CHECKOUT); register_one_method(p, "UNCHECKOUT", M_UNCHECKOUT); register_one_method(p, "CHECKIN", M_CHECKIN); register_one_method(p, "UPDATE", M_UPDATE); register_one_method(p, "LABEL", M_LABEL); register_one_method(p, "REPORT", M_REPORT); register_one_method(p, "MKWORKSPACE", M_MKWORKSPACE); register_one_method(p, "MKACTIVITY", M_MKACTIVITY); register_one_method(p, "BASELINE-CONTROL", M_BASELINE_CONTROL); register_one_method(p, "MERGE", M_MERGE); } AP_DECLARE(int) ap_method_register(apr_pool_t *p, const char *methname) { int *methnum; if (methods_registry == NULL) { ap_method_registry_init(p); } if (methname == NULL) { return M_INVALID; } /* Check if the method was previously registered. If it was * return the associated method number. */ methnum = (int *)apr_hash_get(methods_registry, methname, APR_HASH_KEY_STRING); if (methnum != NULL) return *methnum; if (cur_method_number > METHOD_NUMBER_LAST) { /* The method registry has run out of dynamically * assignable method numbers. Log this and return M_INVALID. */ ap_log_perror(APLOG_MARK, APLOG_ERR, 0, p, APLOGNO(01610) "Maximum new request methods %d reached while " "registering method %s.", METHOD_NUMBER_LAST, methname); return M_INVALID; } register_one_method(p, methname, cur_method_number); return cur_method_number++; } #define UNKNOWN_METHOD (-1) static int lookup_builtin_method(const char *method, apr_size_t len) { /* Note: the following code was generated by the "shilka" tool from the "cocom" parsing/compilation toolkit. It is an optimized lookup based on analysis of the input keywords. Postprocessing was done on the shilka output, but the basic structure and analysis is from there. Should new HTTP methods be added, then manual insertion into this code is fine, or simply re-running the shilka tool on the appropriate input. */ /* Note: it is also quite reasonable to just use our method_registry, but I'm assuming (probably incorrectly) we want more speed here (based on the optimizations the previous code was doing). */ switch (len) { case 3: switch (method[0]) { case 'P': return (method[1] == 'U' && method[2] == 'T' ? M_PUT : UNKNOWN_METHOD); case 'G': return (method[1] == 'E' && method[2] == 'T' ? M_GET : UNKNOWN_METHOD); default: return UNKNOWN_METHOD; } case 4: switch (method[0]) { case 'H': return (method[1] == 'E' && method[2] == 'A' && method[3] == 'D' ? M_GET : UNKNOWN_METHOD); case 'P': return (method[1] == 'O' && method[2] == 'S' && method[3] == 'T' ? M_POST : UNKNOWN_METHOD); case 'M': return (method[1] == 'O' && method[2] == 'V' && method[3] == 'E' ? M_MOVE : UNKNOWN_METHOD); case 'L': return (method[1] == 'O' && method[2] == 'C' && method[3] == 'K' ? M_LOCK : UNKNOWN_METHOD); case 'C': return (method[1] == 'O' && method[2] == 'P' && method[3] == 'Y' ? M_COPY : UNKNOWN_METHOD); default: return UNKNOWN_METHOD; } case 5: switch (method[2]) { case 'T': return (memcmp(method, "PATCH", 5) == 0 ? M_PATCH : UNKNOWN_METHOD); case 'R': return (memcmp(method, "MERGE", 5) == 0 ? M_MERGE : UNKNOWN_METHOD); case 'C': return (memcmp(method, "MKCOL", 5) == 0 ? M_MKCOL : UNKNOWN_METHOD); case 'B': return (memcmp(method, "LABEL", 5) == 0 ? M_LABEL : UNKNOWN_METHOD); case 'A': return (memcmp(method, "TRACE", 5) == 0 ? M_TRACE : UNKNOWN_METHOD); default: return UNKNOWN_METHOD; } case 6: switch (method[0]) { case 'U': switch (method[5]) { case 'K': return (memcmp(method, "UNLOCK", 6) == 0 ? M_UNLOCK : UNKNOWN_METHOD); case 'E': return (memcmp(method, "UPDATE", 6) == 0 ? M_UPDATE : UNKNOWN_METHOD); default: return UNKNOWN_METHOD; } case 'R': return (memcmp(method, "REPORT", 6) == 0 ? M_REPORT : UNKNOWN_METHOD); case 'D': return (memcmp(method, "DELETE", 6) == 0 ? M_DELETE : UNKNOWN_METHOD); default: return UNKNOWN_METHOD; } case 7: switch (method[1]) { case 'P': return (memcmp(method, "OPTIONS", 7) == 0 ? M_OPTIONS : UNKNOWN_METHOD); case 'O': return (memcmp(method, "CONNECT", 7) == 0 ? M_CONNECT : UNKNOWN_METHOD); case 'H': return (memcmp(method, "CHECKIN", 7) == 0 ? M_CHECKIN : UNKNOWN_METHOD); default: return UNKNOWN_METHOD; } case 8: switch (method[0]) { case 'P': return (memcmp(method, "PROPFIND", 8) == 0 ? M_PROPFIND : UNKNOWN_METHOD); case 'C': return (memcmp(method, "CHECKOUT", 8) == 0 ? M_CHECKOUT : UNKNOWN_METHOD); default: return UNKNOWN_METHOD; } case 9: return (memcmp(method, "PROPPATCH", 9) == 0 ? M_PROPPATCH : UNKNOWN_METHOD); case 10: switch (method[0]) { case 'U': return (memcmp(method, "UNCHECKOUT", 10) == 0 ? M_UNCHECKOUT : UNKNOWN_METHOD); case 'M': return (memcmp(method, "MKACTIVITY", 10) == 0 ? M_MKACTIVITY : UNKNOWN_METHOD); default: return UNKNOWN_METHOD; } case 11: return (memcmp(method, "MKWORKSPACE", 11) == 0 ? M_MKWORKSPACE : UNKNOWN_METHOD); case 15: return (memcmp(method, "VERSION-CONTROL", 15) == 0 ? M_VERSION_CONTROL : UNKNOWN_METHOD); case 16: return (memcmp(method, "BASELINE-CONTROL", 16) == 0 ? M_BASELINE_CONTROL : UNKNOWN_METHOD); default: return UNKNOWN_METHOD; } /* NOTREACHED */ } /* Get the method number associated with the given string, assumed to * contain an HTTP method. Returns M_INVALID if not recognized. * * This is the first step toward placing method names in a configurable * list. Hopefully it (and other routines) can eventually be moved to * something like a mod_http_methods.c, complete with config stuff. */ AP_DECLARE(int) ap_method_number_of(const char *method) { int len = strlen(method); int which = lookup_builtin_method(method, len); if (which != UNKNOWN_METHOD) return which; /* check if the method has been dynamically registered */ if (methods_registry != NULL) { int *methnum = apr_hash_get(methods_registry, method, len); if (methnum != NULL) { return *methnum; } } return M_INVALID; } /* * Turn a known method number into a name. */ AP_DECLARE(const char *) ap_method_name_of(apr_pool_t *p, int methnum) { apr_hash_index_t *hi = apr_hash_first(p, methods_registry); /* scan through the hash table, looking for a value that matches the provided method number. */ for (; hi; hi = apr_hash_next(hi)) { const void *key; void *val; apr_hash_this(hi, &key, NULL, &val); if (*(int *)val == methnum) return key; } /* it wasn't found in the hash */ return NULL; } /* The index is found by its offset from the x00 code of each level. * Although this is fast, it will need to be replaced if some nutcase * decides to define a high-numbered code before the lower numbers. * If that sad event occurs, replace the code below with a linear search * from status_lines[shortcut[i]] to status_lines[shortcut[i+1]-1]; * or use NULL to fill the gaps. */ AP_DECLARE(int) ap_index_of_response(int status) { static int shortcut[6] = {0, LEVEL_200, LEVEL_300, LEVEL_400, LEVEL_500, RESPONSE_CODES}; int i, pos; if (status < 100) { /* Below 100 is illegal for HTTP status */ return LEVEL_500; } for (i = 0; i < 5; i++) { status -= 100; if (status < 100) { pos = (status + shortcut[i]); if (pos < shortcut[i + 1] && status_lines[pos] != NULL) { return pos; } else { return LEVEL_500; /* status unknown (falls in gap) */ } } } return LEVEL_500; /* 600 or above is also illegal */ } AP_DECLARE(const char *) ap_get_status_line(int status) { return status_lines[ap_index_of_response(status)]; } /* Build the Allow field-value from the request handler method mask. */ static char *make_allow(request_rec *r) { apr_int64_t mask; apr_array_header_t *allow = apr_array_make(r->pool, 10, sizeof(char *)); apr_hash_index_t *hi = apr_hash_first(r->pool, methods_registry); /* For TRACE below */ core_server_config *conf = ap_get_core_module_config(r->server->module_config); mask = r->allowed_methods->method_mask; for (; hi; hi = apr_hash_next(hi)) { const void *key; void *val; apr_hash_this(hi, &key, NULL, &val); if ((mask & (AP_METHOD_BIT << *(int *)val)) != 0) { APR_ARRAY_PUSH(allow, const char *) = key; } } /* TRACE is tested on a per-server basis */ if (conf->trace_enable != AP_TRACE_DISABLE) *(const char **)apr_array_push(allow) = "TRACE"; /* ### this is rather annoying. we should enforce registration of ### these methods */ if ((mask & (AP_METHOD_BIT << M_INVALID)) && (r->allowed_methods->method_list != NULL) && (r->allowed_methods->method_list->nelts != 0)) { apr_array_cat(allow, r->allowed_methods->method_list); } return apr_array_pstrcat(r->pool, allow, ','); } AP_DECLARE(int) ap_send_http_options(request_rec *r) { if (r->assbackwards) { return DECLINED; } apr_table_setn(r->headers_out, "Allow", make_allow(r)); /* the request finalization will send an EOS, which will flush all * the headers out (including the Allow header) */ return OK; } AP_DECLARE(void) ap_set_content_type(request_rec *r, const char *ct) { if (!ct) { r->content_type = NULL; } else if (!r->content_type || strcmp(r->content_type, ct)) { r->content_type = ct; } } AP_DECLARE(void) ap_set_accept_ranges(request_rec *r) { core_dir_config *d = ap_get_core_module_config(r->per_dir_config); apr_table_setn(r->headers_out, "Accept-Ranges", (d->max_ranges == AP_MAXRANGES_NORANGES) ? "none" : "bytes"); } static const char *add_optional_notes(request_rec *r, const char *prefix, const char *key, const char *suffix) { const char *notes, *result; if ((notes = apr_table_get(r->notes, key)) == NULL) { result = apr_pstrcat(r->pool, prefix, suffix, NULL); } else { result = apr_pstrcat(r->pool, prefix, notes, suffix, NULL); } return result; } /* construct and return the default error message for a given * HTTP defined error code */ static const char *get_canned_error_string(int status, request_rec *r, const char *location) { apr_pool_t *p = r->pool; const char *error_notes, *h1, *s1; switch (status) { case HTTP_MOVED_PERMANENTLY: case HTTP_MOVED_TEMPORARILY: case HTTP_TEMPORARY_REDIRECT: case HTTP_PERMANENT_REDIRECT: return(apr_pstrcat(p, "

    The document has moved pool, location), "\">here.

    \n", NULL)); case HTTP_SEE_OTHER: return(apr_pstrcat(p, "

    The answer to your request is located " "pool, location), "\">here.

    \n", NULL)); case HTTP_USE_PROXY: return("

    This resource is only accessible " "through the proxy\n" "
    \nYou will need to configure " "your client to use that proxy.

    \n"); case HTTP_PROXY_AUTHENTICATION_REQUIRED: case HTTP_UNAUTHORIZED: return("

    This server could not verify that you\n" "are authorized to access the document\n" "requested. Either you supplied the wrong\n" "credentials (e.g., bad password), or your\n" "browser doesn't understand how to supply\n" "the credentials required.

    \n"); case HTTP_BAD_REQUEST: return(add_optional_notes(r, "

    Your browser sent a request that " "this server could not understand.
    \n", "error-notes", "

    \n")); case HTTP_FORBIDDEN: return(add_optional_notes(r, "

    You don't have permission to access this resource.", "error-notes", "

    \n")); case HTTP_NOT_FOUND: return("

    The requested URL was not found on this server.

    \n"); case HTTP_METHOD_NOT_ALLOWED: return(apr_pstrcat(p, "

    The requested method ", ap_escape_html(r->pool, r->method), " is not allowed for this URL.

    \n", NULL)); case HTTP_NOT_ACCEPTABLE: return(add_optional_notes(r, "

    An appropriate representation of the requested resource " "could not be found on this server.

    \n", "variant-list", "")); case HTTP_MULTIPLE_CHOICES: return(add_optional_notes(r, "", "variant-list", "")); case HTTP_LENGTH_REQUIRED: s1 = apr_pstrcat(p, "

    A request of the requested method ", ap_escape_html(r->pool, r->method), " requires a valid Content-length.
    \n", NULL); return(add_optional_notes(r, s1, "error-notes", "

    \n")); case HTTP_PRECONDITION_FAILED: return("

    The precondition on the request " "for this URL evaluated to false.

    \n"); case HTTP_NOT_IMPLEMENTED: s1 = apr_pstrcat(p, "

    ", ap_escape_html(r->pool, r->method), " ", " not supported for current URL.
    \n", NULL); return(add_optional_notes(r, s1, "error-notes", "

    \n")); case HTTP_BAD_GATEWAY: s1 = "

    The proxy server received an invalid" CRLF "response from an upstream server.
    " CRLF; return(add_optional_notes(r, s1, "error-notes", "

    \n")); case HTTP_VARIANT_ALSO_VARIES: return("

    A variant for the requested " "resource\n

    \n"
                   "\n
    \nis itself a negotiable resource. " "This indicates a configuration error.

    \n"); case HTTP_REQUEST_TIME_OUT: return("

    Server timeout waiting for the HTTP request from the client.

    \n"); case HTTP_GONE: return("

    The requested resource is no longer available on this server" " and there is no forwarding address.\n" "Please remove all references to this resource.

    \n"); case HTTP_REQUEST_ENTITY_TOO_LARGE: return(apr_pstrcat(p, "The requested resource does not allow request data with ", ap_escape_html(r->pool, r->method), " requests, or the amount of data provided in\n" "the request exceeds the capacity limit.\n", NULL)); case HTTP_REQUEST_URI_TOO_LARGE: s1 = "

    The requested URL's length exceeds the capacity\n" "limit for this server.
    \n"; return(add_optional_notes(r, s1, "error-notes", "

    \n")); case HTTP_UNSUPPORTED_MEDIA_TYPE: return("

    The supplied request data is not in a format\n" "acceptable for processing by this resource.

    \n"); case HTTP_RANGE_NOT_SATISFIABLE: return("

    None of the range-specifier values in the Range\n" "request-header field overlap the current extent\n" "of the selected resource.

    \n"); case HTTP_EXPECTATION_FAILED: s1 = apr_table_get(r->headers_in, "Expect"); if (s1) s1 = apr_pstrcat(p, "

    The expectation given in the Expect request-header\n" "field could not be met by this server.\n" "The client sent

    \n    Expect: ",
                         ap_escape_html(r->pool, s1), "\n
    \n", NULL); else s1 = "

    No expectation was seen, the Expect request-header \n" "field was not presented by the client.\n"; return add_optional_notes(r, s1, "error-notes", "

    " "

    Only the 100-continue expectation is supported.

    \n"); case HTTP_UNPROCESSABLE_ENTITY: return("

    The server understands the media type of the\n" "request entity, but was unable to process the\n" "contained instructions.

    \n"); case HTTP_LOCKED: return("

    The requested resource is currently locked.\n" "The lock must be released or proper identification\n" "given before the method can be applied.

    \n"); case HTTP_FAILED_DEPENDENCY: return("

    The method could not be performed on the resource\n" "because the requested action depended on another\n" "action and that other action failed.

    \n"); case HTTP_UPGRADE_REQUIRED: return("

    The requested resource can only be retrieved\n" "using SSL. The server is willing to upgrade the current\n" "connection to SSL, but your client doesn't support it.\n" "Either upgrade your client, or try requesting the page\n" "using https://\n"); case HTTP_PRECONDITION_REQUIRED: return("

    The request is required to be conditional.

    \n"); case HTTP_TOO_MANY_REQUESTS: return("

    The user has sent too many requests\n" "in a given amount of time.

    \n"); case HTTP_REQUEST_HEADER_FIELDS_TOO_LARGE: return("

    The server refused this request because\n" "the request header fields are too large.

    \n"); case HTTP_INSUFFICIENT_STORAGE: return("

    The method could not be performed on the resource\n" "because the server is unable to store the\n" "representation needed to successfully complete the\n" "request. There is insufficient free space left in\n" "your storage allocation.

    \n"); case HTTP_SERVICE_UNAVAILABLE: return("

    The server is temporarily unable to service your\n" "request due to maintenance downtime or capacity\n" "problems. Please try again later.

    \n"); case HTTP_GATEWAY_TIME_OUT: return("

    The gateway did not receive a timely response\n" "from the upstream server or application.

    \n"); case HTTP_LOOP_DETECTED: return("

    The server terminated an operation because\n" "it encountered an infinite loop.

    \n"); case HTTP_NOT_EXTENDED: return("

    A mandatory extension policy in the request is not\n" "accepted by the server for this resource.

    \n"); case HTTP_NETWORK_AUTHENTICATION_REQUIRED: return("

    The client needs to authenticate to gain\n" "network access.

    \n"); case HTTP_MISDIRECTED_REQUEST: return("

    The client needs a new connection for this\n" "request as the requested host name does not match\n" "the Server Name Indication (SNI) in use for this\n" "connection.

    \n"); case HTTP_UNAVAILABLE_FOR_LEGAL_REASONS: return(add_optional_notes(r, "

    Access to this URL has been denied for legal reasons.
    \n", "error-notes", "

    \n")); default: /* HTTP_INTERNAL_SERVER_ERROR */ /* * This comparison to expose error-notes could be modified to * use a configuration directive and export based on that * directive. For now "*" is used to designate an error-notes * that is totally safe for any user to see (ie lacks paths, * database passwords, etc.) */ if (((error_notes = apr_table_get(r->notes, "error-notes")) != NULL) && (h1 = apr_table_get(r->notes, "verbose-error-to")) != NULL && (strcmp(h1, "*") == 0)) { return(apr_pstrcat(p, error_notes, "

    \n", NULL)); } else { return(apr_pstrcat(p, "

    The server encountered an internal " "error or\n" "misconfiguration and was unable to complete\n" "your request.

    \n" "

    Please contact the server " "administrator at \n ", ap_escape_html(r->pool, r->server->server_admin), " to inform them of the time this " "error occurred,\n" " and the actions you performed just before " "this error.

    \n" "

    More information about this error " "may be available\n" "in the server error log.

    \n", NULL)); } /* * It would be nice to give the user the information they need to * fix the problem directly since many users don't have access to * the error_log (think University sites) even though they can easily * get this error by misconfiguring an htaccess file. However, the * e error notes tend to include the real file pathname in this case, * which some people consider to be a breach of privacy. Until we * can figure out a way to remove the pathname, leave this commented. * * if ((error_notes = apr_table_get(r->notes, * "error-notes")) != NULL) { * return(apr_pstrcat(p, error_notes, "

    \n", NULL); * } * else { * return ""; * } */ } } /* We should have named this send_canned_response, since it is used for any * response that can be generated by the server from the request record. * This includes all 204 (no content), 3xx (redirect), 4xx (client error), * and 5xx (server error) messages that have not been redirected to another * handler via the ErrorDocument feature. */ AP_DECLARE(void) ap_send_error_response(request_rec *r, int recursive_error) { int status = r->status; int idx = ap_index_of_response(status); char *custom_response; const char *location = apr_table_get(r->headers_out, "Location"); /* At this point, we are starting the response over, so we have to reset * this value. */ r->eos_sent = 0; /* and we need to get rid of any RESOURCE filters that might be lurking * around, thinking they are in the middle of the original request */ r->output_filters = r->proto_output_filters; ap_run_insert_error_filter(r); /* We need to special-case the handling of 204 and 304 responses, * since they have specific HTTP requirements and do not include a * message body. Note that being assbackwards here is not an option. */ if (AP_STATUS_IS_HEADER_ONLY(status)) { ap_finalize_request_protocol(r); return; } /* * It's possible that the Location field might be in r->err_headers_out * instead of r->headers_out; use the latter if possible, else the * former. */ if (location == NULL) { location = apr_table_get(r->err_headers_out, "Location"); } if (!r->assbackwards) { apr_table_t *tmp = r->headers_out; /* For all HTTP/1.x responses for which we generate the message, * we need to avoid inheriting the "normal status" header fields * that may have been set by the request handler before the * error or redirect, except for Location on external redirects. */ r->headers_out = r->err_headers_out; r->err_headers_out = tmp; apr_table_clear(r->err_headers_out); if (ap_is_HTTP_REDIRECT(status) || (status == HTTP_CREATED)) { if ((location != NULL) && *location) { apr_table_setn(r->headers_out, "Location", location); } else { location = ""; /* avoids coredump when printing, below */ } } r->content_languages = NULL; r->content_encoding = NULL; r->clength = 0; if (apr_table_get(r->subprocess_env, "suppress-error-charset") != NULL) { core_request_config *request_conf = ap_get_core_module_config(r->request_config); request_conf->suppress_charset = 1; /* avoid adding default * charset later */ ap_set_content_type(r, "text/html"); } else { ap_set_content_type(r, "text/html; charset=iso-8859-1"); } if ((status == HTTP_METHOD_NOT_ALLOWED) || (status == HTTP_NOT_IMPLEMENTED)) { apr_table_setn(r->headers_out, "Allow", make_allow(r)); } if (r->header_only) { ap_finalize_request_protocol(r); return; } } if ((custom_response = ap_response_code_string(r, idx))) { /* * We have a custom response output. This should only be * a text-string to write back. But if the ErrorDocument * was a local redirect and the requested resource failed * for any reason, the custom_response will still hold the * redirect URL. We don't really want to output this URL * as a text message, so first check the custom response * string to ensure that it is a text-string (using the * same test used in ap_die(), i.e. does it start with a "). * * If it's not a text string, we've got a recursive error or * an external redirect. If it's a recursive error, ap_die passes * us the second error code so we can write both, and has already * backed up to the original error. If it's an external redirect, * it hasn't happened yet; we may never know if it fails. */ if (custom_response[0] == '\"') { ap_rputs(custom_response + 1, r); ap_finalize_request_protocol(r); return; } } { const char *title = status_lines[idx]; const char *h1; /* Accept a status_line set by a module, but only if it begins * with the correct 3 digit status code */ if (r->status_line) { char *end; int len = strlen(r->status_line); if (len >= 3 && apr_strtoi64(r->status_line, &end, 10) == r->status && (end - 3) == r->status_line && (len < 4 || apr_isspace(r->status_line[3])) && (len < 5 || apr_isalnum(r->status_line[4]))) { /* Since we passed the above check, we know that length three * is equivalent to only a 3 digit numeric http status. * RFC2616 mandates a trailing space, let's add it. * If we have an empty reason phrase, we also add "Unknown Reason". */ if (len == 3) { r->status_line = apr_pstrcat(r->pool, r->status_line, " Unknown Reason", NULL); } else if (len == 4) { r->status_line = apr_pstrcat(r->pool, r->status_line, "Unknown Reason", NULL); } title = r->status_line; } } /* folks decided they didn't want the error code in the H1 text */ h1 = &title[4]; /* can't count on a charset filter being in place here, * so do ebcdic->ascii translation explicitly (if needed) */ ap_rvputs_proto_in_ascii(r, DOCTYPE_HTML_2_0 "\n", title, "\n\n

    ", h1, "

    \n", NULL); ap_rvputs_proto_in_ascii(r, get_canned_error_string(status, r, location), NULL); if (recursive_error) { ap_rvputs_proto_in_ascii(r, "

    Additionally, a ", status_lines[ap_index_of_response(recursive_error)], "\nerror was encountered while trying to use an " "ErrorDocument to handle the request.

    \n", NULL); } ap_rvputs_proto_in_ascii(r, ap_psignature("
    \n", r), NULL); ap_rvputs_proto_in_ascii(r, "\n", NULL); } ap_finalize_request_protocol(r); } /* * Create a new method list with the specified number of preallocated * extension slots. */ AP_DECLARE(ap_method_list_t *) ap_make_method_list(apr_pool_t *p, int nelts) { ap_method_list_t *ml; ml = (ap_method_list_t *) apr_palloc(p, sizeof(ap_method_list_t)); ml->method_mask = 0; ml->method_list = apr_array_make(p, nelts, sizeof(char *)); return ml; } /* * Make a copy of a method list (primarily for subrequests that may * subsequently change it; don't want them changing the parent's, too!). */ AP_DECLARE(void) ap_copy_method_list(ap_method_list_t *dest, ap_method_list_t *src) { int i; char **imethods; char **omethods; dest->method_mask = src->method_mask; imethods = (char **) src->method_list->elts; for (i = 0; i < src->method_list->nelts; ++i) { omethods = (char **) apr_array_push(dest->method_list); *omethods = apr_pstrdup(dest->method_list->pool, imethods[i]); } } /* * Return true if the specified HTTP method is in the provided * method list. */ AP_DECLARE(int) ap_method_in_list(ap_method_list_t *l, const char *method) { int methnum; /* * If it's one of our known methods, use the shortcut and check the * bitmask. */ methnum = ap_method_number_of(method); if (methnum != M_INVALID) { return !!(l->method_mask & (AP_METHOD_BIT << methnum)); } /* * Otherwise, see if the method name is in the array of string names. */ if ((l->method_list == NULL) || (l->method_list->nelts == 0)) { return 0; } return ap_array_str_contains(l->method_list, method); } /* * Add the specified method to a method list (if it isn't already there). */ AP_DECLARE(void) ap_method_list_add(ap_method_list_t *l, const char *method) { int methnum; const char **xmethod; /* * If it's one of our known methods, use the shortcut and use the * bitmask. */ methnum = ap_method_number_of(method); if (methnum != M_INVALID) { l->method_mask |= (AP_METHOD_BIT << methnum); return; } /* * Otherwise, see if the method name is in the array of string names. */ if (ap_array_str_contains(l->method_list, method)) { return; } xmethod = (const char **) apr_array_push(l->method_list); *xmethod = method; } /* * Remove the specified method from a method list. */ AP_DECLARE(void) ap_method_list_remove(ap_method_list_t *l, const char *method) { int methnum; char **methods; /* * If it's a known methods, either builtin or registered * by a module, use the bitmask. */ methnum = ap_method_number_of(method); if (methnum != M_INVALID) { l->method_mask &= ~(AP_METHOD_BIT << methnum); return; } /* * Otherwise, see if the method name is in the array of string names. */ if (l->method_list->nelts != 0) { int i, j, k; methods = (char **)l->method_list->elts; for (i = 0; i < l->method_list->nelts; ) { if (strcmp(method, methods[i]) == 0) { for (j = i, k = i + 1; k < l->method_list->nelts; ++j, ++k) { methods[j] = methods[k]; } --l->method_list->nelts; } else { ++i; } } } } /* * Reset a method list to be completely empty. */ AP_DECLARE(void) ap_clear_method_list(ap_method_list_t *l) { l->method_mask = 0; l->method_list->nelts = 0; } httpd-2.4.41/modules/http/mod_mime.dsp0000644000000000000500000001046710551346420016171 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_mime" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_mime - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_mime.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_mime.mak" CFG="mod_mime - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_mime - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_mime - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_mime - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_mime_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_mime.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_mime.so" /d LONG_NAME="mime_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_mime.so" /base:@..\..\os\win32\BaseAddr.ref,mod_mime.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_mime.so" /base:@..\..\os\win32\BaseAddr.ref,mod_mime.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_mime.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_mime - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_mime_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_mime.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_mime.so" /d LONG_NAME="mime_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_mime.so" /base:@..\..\os\win32\BaseAddr.ref,mod_mime.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_mime.so" /base:@..\..\os\win32\BaseAddr.ref,mod_mime.so # Begin Special Build Tool TargetPath=.\Debug\mod_mime.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_mime - Win32 Release" # Name "mod_mime - Win32 Debug" # Begin Source File SOURCE=.\mod_mime.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/http/byterange_filter.c0000644000000000000500000004625112400644014017357 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * byterange_filter.c --- HTTP byterange filter and friends. */ #include "apr.h" #include "apr_strings.h" #include "apr_buckets.h" #include "apr_lib.h" #include "apr_signal.h" #define APR_WANT_STDIO /* for sscanf */ #define APR_WANT_STRFUNC #define APR_WANT_MEMFUNC #include "apr_want.h" #include "util_filter.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_protocol.h" #include "http_main.h" #include "http_request.h" #include "http_vhost.h" #include "http_log.h" /* For errors detected in basic auth common * support code... */ #include "apr_date.h" /* For apr_date_parse_http and APR_DATE_BAD */ #include "util_charset.h" #include "util_ebcdic.h" #include "util_time.h" #include "mod_core.h" #if APR_HAVE_STDARG_H #include #endif #if APR_HAVE_UNISTD_H #include #endif #ifndef AP_DEFAULT_MAX_RANGES #define AP_DEFAULT_MAX_RANGES 200 #endif #ifndef AP_DEFAULT_MAX_OVERLAPS #define AP_DEFAULT_MAX_OVERLAPS 20 #endif #ifndef AP_DEFAULT_MAX_REVERSALS #define AP_DEFAULT_MAX_REVERSALS 20 #endif #define MAX_PREALLOC_RANGES 100 APLOG_USE_MODULE(http); typedef struct indexes_t { apr_off_t start; apr_off_t end; } indexes_t; /* * Returns: number of ranges (merged) or -1 for no-good */ static int ap_set_byterange(request_rec *r, apr_off_t clength, apr_array_header_t **indexes, int *overlaps, int *reversals) { const char *range; const char *ct; char *cur; apr_array_header_t *merged; int num_ranges = 0, unsatisfiable = 0; apr_off_t ostart = 0, oend = 0, sum_lengths = 0; int in_merge = 0; indexes_t *idx; int ranges = 1; int i; const char *it; *overlaps = 0; *reversals = 0; if (r->assbackwards) { return 0; } /* * Check for Range request-header (HTTP/1.1) or Request-Range for * backwards-compatibility with second-draft Luotonen/Franks * byte-ranges (e.g. Netscape Navigator 2-3). * * We support this form, with Request-Range, and (farther down) we * send multipart/x-byteranges instead of multipart/byteranges for * Request-Range based requests to work around a bug in Netscape * Navigator 2-3 and MSIE 3. */ if (!(range = apr_table_get(r->headers_in, "Range"))) { range = apr_table_get(r->headers_in, "Request-Range"); } if (!range || strncasecmp(range, "bytes=", 6) || r->status != HTTP_OK) { return 0; } /* is content already a single range? */ if (apr_table_get(r->headers_out, "Content-Range")) { return 0; } /* is content already a multiple range? */ if ((ct = apr_table_get(r->headers_out, "Content-Type")) && (!strncasecmp(ct, "multipart/byteranges", 20) || !strncasecmp(ct, "multipart/x-byteranges", 22))) { return 0; } /* * Check the If-Range header for Etag or Date. */ if (AP_CONDITION_NOMATCH == ap_condition_if_range(r, r->headers_out)) { return 0; } range += 6; it = range; while (*it) { if (*it++ == ',') { ranges++; } } it = range; if (ranges > MAX_PREALLOC_RANGES) { ranges = MAX_PREALLOC_RANGES; } *indexes = apr_array_make(r->pool, ranges, sizeof(indexes_t)); while ((cur = ap_getword(r->pool, &range, ','))) { char *dash; char *errp; apr_off_t number, start, end; if (!*cur) break; /* * Per RFC 2616 14.35.1: If there is at least one syntactically invalid * byte-range-spec, we must ignore the whole header. */ if (!(dash = strchr(cur, '-'))) { return 0; } if (dash == cur) { /* In the form "-5" */ if (apr_strtoff(&number, dash+1, &errp, 10) || *errp) { return 0; } if (number < 1) { return 0; } start = clength - number; end = clength - 1; } else { *dash++ = '\0'; if (apr_strtoff(&number, cur, &errp, 10) || *errp) { return 0; } start = number; if (*dash) { if (apr_strtoff(&number, dash, &errp, 10) || *errp) { return 0; } end = number; if (start > end) { return 0; } } else { /* "5-" */ end = clength - 1; /* * special case: 0- * ignore all other ranges provided * return as a single range: 0- */ if (start == 0) { num_ranges = 0; sum_lengths = 0; in_merge = 1; oend = end; ostart = start; apr_array_clear(*indexes); break; } } } if (start < 0) { start = 0; } if (start >= clength) { unsatisfiable = 1; continue; } if (end >= clength) { end = clength - 1; } if (!in_merge) { /* new set */ ostart = start; oend = end; in_merge = 1; continue; } in_merge = 0; if (start >= ostart && end <= oend) { in_merge = 1; } if (start < ostart && end >= ostart-1) { ostart = start; ++*reversals; in_merge = 1; } if (end >= oend && start <= oend+1 ) { oend = end; in_merge = 1; } if (in_merge) { ++*overlaps; continue; } else { idx = (indexes_t *)apr_array_push(*indexes); idx->start = ostart; idx->end = oend; sum_lengths += oend - ostart + 1; /* new set again */ in_merge = 1; ostart = start; oend = end; num_ranges++; } } if (in_merge) { idx = (indexes_t *)apr_array_push(*indexes); idx->start = ostart; idx->end = oend; sum_lengths += oend - ostart + 1; num_ranges++; } else if (num_ranges == 0 && unsatisfiable) { /* If all ranges are unsatisfiable, we should return 416 */ return -1; } if (sum_lengths > clength) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Sum of ranges larger than file, ignoring."); return 0; } /* * create the merged table now, now that we know we need it */ merged = apr_array_make(r->pool, num_ranges, sizeof(char *)); idx = (indexes_t *)(*indexes)->elts; for (i = 0; i < (*indexes)->nelts; i++, idx++) { char **new = (char **)apr_array_push(merged); *new = apr_psprintf(r->pool, "%" APR_OFF_T_FMT "-%" APR_OFF_T_FMT, idx->start, idx->end); } r->status = HTTP_PARTIAL_CONTENT; r->range = apr_array_pstrcat(r->pool, merged, ','); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01583) "Range: %s | %s (%d : %d : %"APR_OFF_T_FMT")", it, r->range, *overlaps, *reversals, clength); return num_ranges; } /* * Here we try to be compatible with clients that want multipart/x-byteranges * instead of multipart/byteranges (also see above), as per HTTP/1.1. We * look for the Request-Range header (e.g. Netscape 2 and 3) as an indication * that the browser supports an older protocol. We also check User-Agent * for Microsoft Internet Explorer 3, which needs this as well. */ static int use_range_x(request_rec *r) { const char *ua; return (apr_table_get(r->headers_in, "Request-Range") || ((ua = apr_table_get(r->headers_in, "User-Agent")) && ap_strstr_c(ua, "MSIE 3"))); } #define BYTERANGE_FMT "%" APR_OFF_T_FMT "-%" APR_OFF_T_FMT "/%" APR_OFF_T_FMT static apr_status_t copy_brigade_range(apr_bucket_brigade *bb, apr_bucket_brigade *bbout, apr_off_t start, apr_off_t end) { apr_bucket *first = NULL, *last = NULL, *out_first = NULL, *e; apr_uint64_t pos = 0, off_first = 0, off_last = 0; apr_status_t rv; apr_uint64_t start64, end64; apr_off_t pofft = 0; /* * Once we know that start and end are >= 0 convert everything to apr_uint64_t. * See the comments in apr_brigade_partition why. * In short apr_off_t (for values >= 0)and apr_size_t fit into apr_uint64_t. */ start64 = (apr_uint64_t)start; end64 = (apr_uint64_t)end; if (start < 0 || end < 0 || start64 > end64) return APR_EINVAL; for (e = APR_BRIGADE_FIRST(bb); e != APR_BRIGADE_SENTINEL(bb); e = APR_BUCKET_NEXT(e)) { apr_uint64_t elen64; /* we know that no bucket has undefined length (-1) */ AP_DEBUG_ASSERT(e->length != (apr_size_t)(-1)); elen64 = (apr_uint64_t)e->length; if (!first && (elen64 + pos > start64)) { first = e; off_first = pos; } if (elen64 + pos > end64) { last = e; off_last = pos; break; } pos += elen64; } if (!first || !last) return APR_EINVAL; e = first; while (1) { apr_bucket *copy; AP_DEBUG_ASSERT(e != APR_BRIGADE_SENTINEL(bb)); rv = apr_bucket_copy(e, ©); if (rv != APR_SUCCESS) { apr_brigade_cleanup(bbout); return rv; } APR_BRIGADE_INSERT_TAIL(bbout, copy); if (e == first) { if (off_first != start64) { rv = apr_bucket_split(copy, (apr_size_t)(start64 - off_first)); if (rv != APR_SUCCESS) { apr_brigade_cleanup(bbout); return rv; } out_first = APR_BUCKET_NEXT(copy); apr_bucket_delete(copy); } else { out_first = copy; } } if (e == last) { if (e == first) { off_last += start64 - off_first; copy = out_first; } if (end64 - off_last != (apr_uint64_t)e->length) { rv = apr_bucket_split(copy, (apr_size_t)(end64 + 1 - off_last)); if (rv != APR_SUCCESS) { apr_brigade_cleanup(bbout); return rv; } copy = APR_BUCKET_NEXT(copy); if (copy != APR_BRIGADE_SENTINEL(bbout)) { apr_bucket_delete(copy); } } break; } e = APR_BUCKET_NEXT(e); } AP_DEBUG_ASSERT(APR_SUCCESS == apr_brigade_length(bbout, 1, &pofft)); pos = (apr_uint64_t)pofft; AP_DEBUG_ASSERT(pos == end64 - start64 + 1); return APR_SUCCESS; } static apr_status_t send_416(ap_filter_t *f, apr_bucket_brigade *tmpbb) { apr_bucket *e; conn_rec *c = f->r->connection; ap_remove_output_filter(f); f->r->status = HTTP_OK; e = ap_bucket_error_create(HTTP_RANGE_NOT_SATISFIABLE, NULL, f->r->pool, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(tmpbb, e); e = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(tmpbb, e); return ap_pass_brigade(f->next, tmpbb); } AP_CORE_DECLARE_NONSTD(apr_status_t) ap_byterange_filter(ap_filter_t *f, apr_bucket_brigade *bb) { request_rec *r = f->r; conn_rec *c = r->connection; apr_bucket *e; apr_bucket_brigade *bsend; apr_bucket_brigade *tmpbb; apr_off_t range_start; apr_off_t range_end; apr_off_t clength = 0; apr_status_t rv; int found = 0; int num_ranges; char *bound_head = NULL; apr_array_header_t *indexes; indexes_t *idx; int i; int original_status; int max_ranges, max_overlaps, max_reversals; int overlaps = 0, reversals = 0; core_dir_config *core_conf = ap_get_core_module_config(r->per_dir_config); max_ranges = ( (core_conf->max_ranges >= 0 || core_conf->max_ranges == AP_MAXRANGES_UNLIMITED) ? core_conf->max_ranges : AP_DEFAULT_MAX_RANGES ); max_overlaps = ( (core_conf->max_overlaps >= 0 || core_conf->max_overlaps == AP_MAXRANGES_UNLIMITED) ? core_conf->max_overlaps : AP_DEFAULT_MAX_OVERLAPS ); max_reversals = ( (core_conf->max_reversals >= 0 || core_conf->max_reversals == AP_MAXRANGES_UNLIMITED) ? core_conf->max_reversals : AP_DEFAULT_MAX_REVERSALS ); /* * Iterate through the brigade until reaching EOS or a bucket with * unknown length. */ for (e = APR_BRIGADE_FIRST(bb); (e != APR_BRIGADE_SENTINEL(bb) && !APR_BUCKET_IS_EOS(e) && e->length != (apr_size_t)-1); e = APR_BUCKET_NEXT(e)) { clength += e->length; } /* * Don't attempt to do byte range work if this brigade doesn't * contain an EOS, or if any of the buckets has an unknown length; * this avoids the cases where it is expensive to perform * byteranging (i.e. may require arbitrary amounts of memory). */ if (!APR_BUCKET_IS_EOS(e) || clength <= 0) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } original_status = r->status; num_ranges = ap_set_byterange(r, clength, &indexes, &overlaps, &reversals); /* No Ranges or we hit a limit? We have nothing to do, get out of the way. */ if (num_ranges == 0 || (max_ranges >= 0 && num_ranges > max_ranges) || (max_overlaps >= 0 && overlaps > max_overlaps) || (max_reversals >= 0 && reversals > max_reversals)) { r->status = original_status; ap_remove_output_filter(f); return ap_pass_brigade(f->next, bb); } /* this brigade holds what we will be sending */ bsend = apr_brigade_create(r->pool, c->bucket_alloc); if (num_ranges < 0) return send_416(f, bsend); if (num_ranges > 1) { /* Is ap_make_content_type required here? */ const char *orig_ct = ap_make_content_type(r, r->content_type); ap_set_content_type(r, apr_pstrcat(r->pool, "multipart", use_range_x(r) ? "/x-" : "/", "byteranges; boundary=", ap_multipart_boundary, NULL)); if (orig_ct) { bound_head = apr_pstrcat(r->pool, CRLF "--", ap_multipart_boundary, CRLF "Content-type: ", orig_ct, CRLF "Content-range: bytes ", NULL); } else { /* if we have no type for the content, do our best */ bound_head = apr_pstrcat(r->pool, CRLF "--", ap_multipart_boundary, CRLF "Content-range: bytes ", NULL); } ap_xlate_proto_to_ascii(bound_head, strlen(bound_head)); } tmpbb = apr_brigade_create(r->pool, c->bucket_alloc); idx = (indexes_t *)indexes->elts; for (i = 0; i < indexes->nelts; i++, idx++) { range_start = idx->start; range_end = idx->end; rv = copy_brigade_range(bb, tmpbb, range_start, range_end); if (rv != APR_SUCCESS ) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01584) "copy_brigade_range() failed [%" APR_OFF_T_FMT "-%" APR_OFF_T_FMT ",%" APR_OFF_T_FMT "]", range_start, range_end, clength); continue; } found = 1; /* * For single range requests, we must produce Content-Range header. * Otherwise, we need to produce the multipart boundaries. */ if (num_ranges == 1) { apr_table_setn(r->headers_out, "Content-Range", apr_psprintf(r->pool, "bytes " BYTERANGE_FMT, range_start, range_end, clength)); } else { char *ts; e = apr_bucket_pool_create(bound_head, strlen(bound_head), r->pool, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bsend, e); ts = apr_psprintf(r->pool, BYTERANGE_FMT CRLF CRLF, range_start, range_end, clength); ap_xlate_proto_to_ascii(ts, strlen(ts)); e = apr_bucket_pool_create(ts, strlen(ts), r->pool, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bsend, e); } APR_BRIGADE_CONCAT(bsend, tmpbb); if (i && !(i & 0x1F)) { /* * Every now and then, pass what we have down the filter chain. * In this case, the content-length filter cannot calculate and * set the content length and we must remove any Content-Length * header already present. */ apr_table_unset(r->headers_out, "Content-Length"); if ((rv = ap_pass_brigade(f->next, bsend)) != APR_SUCCESS) return rv; apr_brigade_cleanup(bsend); } } if (found == 0) { /* bsend is assumed to be empty if we get here. */ return send_416(f, bsend); } if (num_ranges > 1) { char *end; /* add the final boundary */ end = apr_pstrcat(r->pool, CRLF "--", ap_multipart_boundary, "--" CRLF, NULL); ap_xlate_proto_to_ascii(end, strlen(end)); e = apr_bucket_pool_create(end, strlen(end), r->pool, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bsend, e); } e = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bsend, e); /* we're done with the original content - all of our data is in bsend. */ apr_brigade_cleanup(bb); apr_brigade_destroy(tmpbb); /* send our multipart output */ return ap_pass_brigade(f->next, bsend); } httpd-2.4.41/modules/http/chunk_filter.c0000644000000000000500000001576313341325553016524 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * chunk_filter.c --- HTTP/1.1 chunked transfer encoding filter. */ #include "apr_strings.h" #include "apr_thread_proc.h" /* for RLIMIT stuff */ #define APR_WANT_STRFUNC #include "apr_want.h" #include "httpd.h" #include "http_config.h" #include "http_connection.h" #include "http_core.h" #include "http_protocol.h" /* For index_of_response(). Grump. */ #include "http_request.h" #include "util_filter.h" #include "util_ebcdic.h" #include "ap_mpm.h" #include "scoreboard.h" #include "mod_core.h" /* * A pointer to this is used to memorize in the filter context that a bad * gateway error bucket had been seen. It is used as an invented unique pointer. */ static char bad_gateway_seen; apr_status_t ap_http_chunk_filter(ap_filter_t *f, apr_bucket_brigade *b) { #define ASCII_CRLF "\015\012" #define ASCII_ZERO "\060" conn_rec *c = f->r->connection; apr_bucket_brigade *more, *tmp; apr_bucket *e; apr_status_t rv; for (more = tmp = NULL; b; b = more, more = NULL) { apr_off_t bytes = 0; apr_bucket *eos = NULL; apr_bucket *flush = NULL; /* XXX: chunk_hdr must remain at this scope since it is used in a * transient bucket. */ char chunk_hdr[20]; /* enough space for the snprintf below */ for (e = APR_BRIGADE_FIRST(b); e != APR_BRIGADE_SENTINEL(b); e = APR_BUCKET_NEXT(e)) { if (APR_BUCKET_IS_EOS(e)) { /* there shouldn't be anything after the eos */ ap_remove_output_filter(f); eos = e; break; } if (AP_BUCKET_IS_ERROR(e) && (((ap_bucket_error *)(e->data))->status == HTTP_BAD_GATEWAY)) { /* * We had a broken backend. Memorize this in the filter * context. */ f->ctx = &bad_gateway_seen; continue; } if (APR_BUCKET_IS_FLUSH(e)) { flush = e; if (e != APR_BRIGADE_LAST(b)) { more = apr_brigade_split_ex(b, APR_BUCKET_NEXT(e), tmp); } break; } else if (e->length == (apr_size_t)-1) { /* unknown amount of data (e.g. a pipe) */ const char *data; apr_size_t len; rv = apr_bucket_read(e, &data, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS) { return rv; } if (len > 0) { /* * There may be a new next bucket representing the * rest of the data stream on which a read() may * block so we pass down what we have so far. */ bytes += len; more = apr_brigade_split_ex(b, APR_BUCKET_NEXT(e), tmp); break; } else { /* If there was nothing in this bucket then we can * safely move on to the next one without pausing * to pass down what we have counted up so far. */ continue; } } else { bytes += e->length; } } /* * XXX: if there aren't very many bytes at this point it may * be a good idea to set them aside and return for more, * unless we haven't finished counting this brigade yet. */ /* if there are content bytes, then wrap them in a chunk */ if (bytes > 0) { apr_size_t hdr_len; /* * Insert the chunk header, specifying the number of bytes in * the chunk. */ hdr_len = apr_snprintf(chunk_hdr, sizeof(chunk_hdr), "%" APR_UINT64_T_HEX_FMT CRLF, (apr_uint64_t)bytes); ap_xlate_proto_to_ascii(chunk_hdr, hdr_len); e = apr_bucket_transient_create(chunk_hdr, hdr_len, c->bucket_alloc); APR_BRIGADE_INSERT_HEAD(b, e); /* * Insert the end-of-chunk CRLF before an EOS or * FLUSH bucket, or appended to the brigade */ e = apr_bucket_immortal_create(ASCII_CRLF, 2, c->bucket_alloc); if (eos != NULL) { APR_BUCKET_INSERT_BEFORE(eos, e); } else if (flush != NULL) { APR_BUCKET_INSERT_BEFORE(flush, e); } else { APR_BRIGADE_INSERT_TAIL(b, e); } } /* RFC 2616, Section 3.6.1 * * If there is an EOS bucket, then prefix it with: * 1) the last-chunk marker ("0" CRLF) * 2) the trailer * 3) the end-of-chunked body CRLF * * We only do this if we have not seen an error bucket with * status HTTP_BAD_GATEWAY. We have memorized an * error bucket that we had seen in the filter context. * The error bucket with status HTTP_BAD_GATEWAY indicates that the * connection to the backend (mod_proxy) broke in the middle of the * response. In order to signal the client that something went wrong * we do not create the last-chunk marker and set c->keepalive to * AP_CONN_CLOSE in the core output filter. * * XXX: it would be nice to combine this with the end-of-chunk * marker above, but this is a bit more straight-forward for * now. */ if (eos && !f->ctx) { /* XXX: (2) trailers ... does not yet exist */ e = apr_bucket_immortal_create(ASCII_ZERO ASCII_CRLF /* */ ASCII_CRLF, 5, c->bucket_alloc); APR_BUCKET_INSERT_BEFORE(eos, e); } /* pass the brigade to the next filter. */ rv = ap_pass_brigade(f->next, b); apr_brigade_cleanup(b); if (rv != APR_SUCCESS || eos != NULL) { return rv; } tmp = b; } return APR_SUCCESS; } httpd-2.4.41/modules/http/config.m40000644000000000000500000000216011465233725015401 0ustar rootsrcdnl modules enabled in this directory by default APACHE_MODPATH_INIT(http) http_objects="http_core.lo http_protocol.lo http_request.lo http_filters.lo chunk_filter.lo byterange_filter.lo http_etag.lo" dnl mod_http should only be built as a static module for now. dnl this will hopefully be "fixed" at some point in the future by dnl refactoring mod_http and moving some things to the core and dnl vice versa so that the core does not depend upon mod_http. if test "$enable_http" = "yes"; then enable_http="static" elif test "$enable_http" = "shared"; then AC_MSG_ERROR([mod_http can not be built as a shared DSO]) fi APACHE_MODULE(http,[HTTP protocol handling. The http module is a basic one that enables the server to function as an HTTP server. It is only useful to disable it if you want to use another protocol module instead. Don't disable this module unless you are really sure what you are doing. Note: This module will always be linked statically.], $http_objects, , static) APACHE_MODULE(mime, mapping of file-extension to MIME. Disabling this module is normally not recommended., , , yes) APACHE_MODPATH_FINISH httpd-2.4.41/modules/http/mod_mime.c0000644000000000000500000010437213472755016015636 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * http_mime.c: Sends/gets MIME headers for requests * * Rob McCool * */ #include "apr.h" #include "apr_strings.h" #include "apr_lib.h" #include "apr_hash.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_request.h" #include "http_protocol.h" /* XXXX - fix me / EBCDIC * there was a cludge here which would use its * own version apr_isascii(). Indicating that * on some platforms that might be needed. * * #define OS_ASC(c) (c) -- for mere mortals * or * #define OS_ASC(c) (ebcdic2ascii[c]) -- for dino's * * #define apr_isascii(c) ((OS_ASC(c) & 0x80) == 0) */ /* XXXXX - fix me - See note with NOT_PROXY */ typedef struct attrib_info { char *name; int offset; } attrib_info; /* Information to which an extension can be mapped */ typedef struct extension_info { char *forced_type; /* Additional AddTyped stuff */ char *encoding_type; /* Added with AddEncoding... */ char *language_type; /* Added with AddLanguage... */ char *handler; /* Added with AddHandler... */ char *charset_type; /* Added with AddCharset... */ char *input_filters; /* Added with AddInputFilter... */ char *output_filters; /* Added with AddOutputFilter... */ } extension_info; #define MULTIMATCH_UNSET 0 #define MULTIMATCH_ANY 1 #define MULTIMATCH_NEGOTIATED 2 #define MULTIMATCH_HANDLERS 4 #define MULTIMATCH_FILTERS 8 typedef struct { apr_hash_t *extension_mappings; /* Map from extension name to * extension_info structure */ apr_array_header_t *remove_mappings; /* A simple list, walked once */ char *default_language; /* Language if no AddLanguage ext found */ int multimatch; /* Extensions to include in multiview matching * for filenames, e.g. Filters and Handlers */ int use_path_info; /* If set to 0, only use filename. * If set to 1, append PATH_INFO to filename for * lookups. * If set to 2, this value is unset and is * effectively 0. */ } mime_dir_config; typedef struct param_s { char *attr; char *val; struct param_s *next; } param; typedef struct { const char *type; apr_size_t type_len; const char *subtype; apr_size_t subtype_len; param *param; } content_type; static char tspecial[] = { '(', ')', '<', '>', '@', ',', ';', ':', '\\', '"', '/', '[', ']', '?', '=', '\0' }; module AP_MODULE_DECLARE_DATA mime_module; static void *create_mime_dir_config(apr_pool_t *p, char *dummy) { mime_dir_config *new = apr_palloc(p, sizeof(mime_dir_config)); new->extension_mappings = NULL; new->remove_mappings = NULL; new->default_language = NULL; new->multimatch = MULTIMATCH_UNSET; new->use_path_info = 2; return new; } /* * Overlay one hash table of extension_mappings onto another */ static void *overlay_extension_mappings(apr_pool_t *p, const void *key, apr_ssize_t klen, const void *overlay_val, const void *base_val, const void *data) { const extension_info *overlay_info = (const extension_info *)overlay_val; const extension_info *base_info = (const extension_info *)base_val; extension_info *new_info = apr_pmemdup(p, base_info, sizeof(extension_info)); if (overlay_info->forced_type) { new_info->forced_type = overlay_info->forced_type; } if (overlay_info->encoding_type) { new_info->encoding_type = overlay_info->encoding_type; } if (overlay_info->language_type) { new_info->language_type = overlay_info->language_type; } if (overlay_info->handler) { new_info->handler = overlay_info->handler; } if (overlay_info->charset_type) { new_info->charset_type = overlay_info->charset_type; } if (overlay_info->input_filters) { new_info->input_filters = overlay_info->input_filters; } if (overlay_info->output_filters) { new_info->output_filters = overlay_info->output_filters; } return new_info; } /* Member is the offset within an extension_info of the pointer to reset */ static void remove_items(apr_pool_t *p, apr_array_header_t *remove, apr_hash_t *mappings) { attrib_info *suffix = (attrib_info *) remove->elts; int i; for (i = 0; i < remove->nelts; i++) { extension_info *exinfo = apr_hash_get(mappings, suffix[i].name, APR_HASH_KEY_STRING); if (exinfo && *(const char**)((char *)exinfo + suffix[i].offset)) { extension_info *copyinfo = exinfo; exinfo = apr_pmemdup(p, copyinfo, sizeof(*exinfo)); apr_hash_set(mappings, suffix[i].name, APR_HASH_KEY_STRING, exinfo); *(const char**)((char *)exinfo + suffix[i].offset) = NULL; } } } static void *merge_mime_dir_configs(apr_pool_t *p, void *basev, void *addv) { mime_dir_config *base = (mime_dir_config *)basev; mime_dir_config *add = (mime_dir_config *)addv; mime_dir_config *new = apr_palloc(p, sizeof(mime_dir_config)); if (base->extension_mappings && add->extension_mappings) { new->extension_mappings = apr_hash_merge(p, add->extension_mappings, base->extension_mappings, overlay_extension_mappings, NULL); } else { if (base->extension_mappings == NULL) { new->extension_mappings = add->extension_mappings; } else { new->extension_mappings = base->extension_mappings; } /* We may not be merging the tables, but if we potentially will change * an exinfo member, then we are about to trounce it anyways. * We must have a copy for safety. */ if (new->extension_mappings && add->remove_mappings) { new->extension_mappings = apr_hash_copy(p, new->extension_mappings); } } if (new->extension_mappings) { if (add->remove_mappings) remove_items(p, add->remove_mappings, new->extension_mappings); } new->remove_mappings = NULL; new->default_language = add->default_language ? add->default_language : base->default_language; new->multimatch = (add->multimatch != MULTIMATCH_UNSET) ? add->multimatch : base->multimatch; if ((add->use_path_info & 2) == 0) { new->use_path_info = add->use_path_info; } else { new->use_path_info = base->use_path_info; } return new; } static const char *add_extension_info(cmd_parms *cmd, void *m_, const char *value_, const char* ext) { mime_dir_config *m=m_; extension_info *exinfo; int offset = (int) (long) cmd->info; char *key = apr_pstrdup(cmd->temp_pool, ext); char *value = apr_pstrdup(cmd->pool, value_); ap_str_tolower(value); ap_str_tolower(key); if (*key == '.') { ++key; } if (!m->extension_mappings) { m->extension_mappings = apr_hash_make(cmd->pool); exinfo = NULL; } else { exinfo = (extension_info*)apr_hash_get(m->extension_mappings, key, APR_HASH_KEY_STRING); } if (!exinfo) { exinfo = apr_pcalloc(cmd->pool, sizeof(extension_info)); key = apr_pstrdup(cmd->pool, key); apr_hash_set(m->extension_mappings, key, APR_HASH_KEY_STRING, exinfo); } *(const char**)((char *)exinfo + offset) = value; return NULL; } /* * As RemoveType should also override the info from TypesConfig, we add an * empty string as type instead of actually removing the type. */ static const char *remove_extension_type(cmd_parms *cmd, void *m_, const char *ext) { return add_extension_info(cmd, m_, "", ext); } /* * Note handler names are un-added with each per_dir_config merge. * This keeps the association from being inherited, but not * from being re-added at a subordinate level. */ static const char *remove_extension_info(cmd_parms *cmd, void *m_, const char *ext) { mime_dir_config *m = (mime_dir_config *) m_; attrib_info *suffix; if (*ext == '.') { ++ext; } if (!m->remove_mappings) { m->remove_mappings = apr_array_make(cmd->pool, 4, sizeof(*suffix)); } suffix = (attrib_info *)apr_array_push(m->remove_mappings); suffix->name = apr_pstrdup(cmd->pool, ext); ap_str_tolower(suffix->name); suffix->offset = (int) (long) cmd->info; return NULL; } /* The sole bit of server configuration that the MIME module has is * the name of its config file, so... */ static const char *set_types_config(cmd_parms *cmd, void *dummy, const char *arg) { ap_set_module_config(cmd->server->module_config, &mime_module, (void *)arg); return NULL; } static const char *multiviews_match(cmd_parms *cmd, void *m_, const char *include) { mime_dir_config *m = (mime_dir_config *) m_; const char *errmsg; errmsg = ap_check_cmd_context(cmd, NOT_IN_LOCATION); if (errmsg != NULL) { return errmsg; } if (strcasecmp(include, "Any") == 0) { if (m->multimatch && (m->multimatch & ~MULTIMATCH_ANY)) { return "Any is incompatible with NegotiatedOnly, " "Filters and Handlers"; } m->multimatch |= MULTIMATCH_ANY; } else if (strcasecmp(include, "NegotiatedOnly") == 0) { if (m->multimatch && (m->multimatch & ~MULTIMATCH_NEGOTIATED)) { return "NegotiatedOnly is incompatible with Any, " "Filters and Handlers"; } m->multimatch |= MULTIMATCH_NEGOTIATED; } else if (strcasecmp(include, "Filters") == 0) { if (m->multimatch && (m->multimatch & (MULTIMATCH_NEGOTIATED | MULTIMATCH_ANY))) { return "Filters is incompatible with Any and NegotiatedOnly"; } m->multimatch |= MULTIMATCH_FILTERS; } else if (strcasecmp(include, "Handlers") == 0) { if (m->multimatch && (m->multimatch & (MULTIMATCH_NEGOTIATED | MULTIMATCH_ANY))) { return "Handlers is incompatible with Any and NegotiatedOnly"; } m->multimatch |= MULTIMATCH_HANDLERS; } else { return apr_psprintf(cmd->pool, "Unrecognized option '%s'", include); } return NULL; } static const command_rec mime_cmds[] = { AP_INIT_ITERATE2("AddCharset", add_extension_info, (void *)APR_OFFSETOF(extension_info, charset_type), OR_FILEINFO, "a charset (e.g., iso-2022-jp), followed by one or more " "file extensions"), AP_INIT_ITERATE2("AddEncoding", add_extension_info, (void *)APR_OFFSETOF(extension_info, encoding_type), OR_FILEINFO, "an encoding (e.g., gzip), followed by one or more file extensions"), AP_INIT_ITERATE2("AddHandler", add_extension_info, (void *)APR_OFFSETOF(extension_info, handler), OR_FILEINFO, "a handler name followed by one or more file extensions"), AP_INIT_ITERATE2("AddInputFilter", add_extension_info, (void *)APR_OFFSETOF(extension_info, input_filters), OR_FILEINFO, "input filter name (or ; delimited names) followed by one or " "more file extensions"), AP_INIT_ITERATE2("AddLanguage", add_extension_info, (void *)APR_OFFSETOF(extension_info, language_type), OR_FILEINFO, "a language (e.g., fr), followed by one or more file extensions"), AP_INIT_ITERATE2("AddOutputFilter", add_extension_info, (void *)APR_OFFSETOF(extension_info, output_filters), OR_FILEINFO, "output filter name (or ; delimited names) followed by one or " "more file extensions"), AP_INIT_ITERATE2("AddType", add_extension_info, (void *)APR_OFFSETOF(extension_info, forced_type), OR_FILEINFO, "a mime type followed by one or more file extensions"), AP_INIT_TAKE1("DefaultLanguage", ap_set_string_slot, (void*)APR_OFFSETOF(mime_dir_config, default_language), OR_FILEINFO, "language to use for documents with no other language file extension"), AP_INIT_ITERATE("MultiviewsMatch", multiviews_match, NULL, OR_FILEINFO, "NegotiatedOnly (default), Handlers and/or Filters, or Any"), AP_INIT_ITERATE("RemoveCharset", remove_extension_info, (void *)APR_OFFSETOF(extension_info, charset_type), OR_FILEINFO, "one or more file extensions"), AP_INIT_ITERATE("RemoveEncoding", remove_extension_info, (void *)APR_OFFSETOF(extension_info, encoding_type), OR_FILEINFO, "one or more file extensions"), AP_INIT_ITERATE("RemoveHandler", remove_extension_info, (void *)APR_OFFSETOF(extension_info, handler), OR_FILEINFO, "one or more file extensions"), AP_INIT_ITERATE("RemoveInputFilter", remove_extension_info, (void *)APR_OFFSETOF(extension_info, input_filters), OR_FILEINFO, "one or more file extensions"), AP_INIT_ITERATE("RemoveLanguage", remove_extension_info, (void *)APR_OFFSETOF(extension_info, language_type), OR_FILEINFO, "one or more file extensions"), AP_INIT_ITERATE("RemoveOutputFilter", remove_extension_info, (void *)APR_OFFSETOF(extension_info, output_filters), OR_FILEINFO, "one or more file extensions"), AP_INIT_ITERATE("RemoveType", remove_extension_type, (void *)APR_OFFSETOF(extension_info, forced_type), OR_FILEINFO, "one or more file extensions"), AP_INIT_TAKE1("TypesConfig", set_types_config, NULL, RSRC_CONF, "the MIME types config file"), AP_INIT_FLAG("ModMimeUsePathInfo", ap_set_flag_slot, (void *)APR_OFFSETOF(mime_dir_config, use_path_info), ACCESS_CONF, "Set to 'yes' to allow mod_mime to use path info for type checking"), {NULL} }; static apr_hash_t *mime_type_extensions; static int mime_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { ap_configfile_t *f; char l[MAX_STRING_LEN]; const char *types_confname = ap_get_module_config(s->module_config, &mime_module); apr_status_t status; if (!types_confname) { types_confname = AP_TYPES_CONFIG_FILE; } types_confname = ap_server_root_relative(p, types_confname); if (!types_confname) { ap_log_error(APLOG_MARK, APLOG_ERR, APR_EBADPATH, s, APLOGNO(01596) "Invalid mime types config path %s", (const char *)ap_get_module_config(s->module_config, &mime_module)); return HTTP_INTERNAL_SERVER_ERROR; } if ((status = ap_pcfg_openfile(&f, ptemp, types_confname)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, status, s, APLOGNO(01597) "could not open mime types config file %s.", types_confname); return HTTP_INTERNAL_SERVER_ERROR; } mime_type_extensions = apr_hash_make(p); while (!(ap_cfg_getline(l, MAX_STRING_LEN, f))) { const char *ll = l, *ct; if (l[0] == '#') { continue; } ct = ap_getword_conf(p, &ll); while (ll[0]) { char *ext = ap_getword_conf(p, &ll); ap_str_tolower(ext); apr_hash_set(mime_type_extensions, ext, APR_HASH_KEY_STRING, ct); } } ap_cfg_closefile(f); return OK; } static const char *zap_sp(const char *s) { if (s == NULL) { return (NULL); } if (*s == '\0') { return (s); } /* skip prefixed white space */ for (; *s == ' ' || *s == '\t' || *s == '\n'; s++) ; return (s); } static char *zap_sp_and_dup(apr_pool_t *p, const char *start, const char *end, apr_size_t *len) { while ((start < end) && apr_isspace(*start)) { start++; } while ((end > start) && apr_isspace(*(end - 1))) { end--; } if (len) { *len = end - start; } return apr_pstrmemdup(p, start, end - start); } static int is_token(char c) { int res; res = (apr_isascii(c) && apr_isgraph(c) && (strchr(tspecial, c) == NULL)) ? 1 : -1; return res; } static int is_qtext(char c) { int res; res = (apr_isascii(c) && (c != '"') && (c != '\\') && (c != '\n')) ? 1 : -1; return res; } static int is_quoted_pair(const char *s) { int res = -1; int c; if (*s == '\\') { c = (int) *(s + 1); if (c && apr_isascii(c)) { res = 1; } } return (res); } static content_type *analyze_ct(request_rec *r, const char *s) { const char *cp, *mp; char *attribute, *value; int quoted = 0; server_rec * ss = r->server; apr_pool_t * p = r->pool; content_type *ctp; param *pp, *npp; /* initialize ctp */ ctp = (content_type *)apr_palloc(p, sizeof(content_type)); ctp->type = NULL; ctp->subtype = NULL; ctp->param = NULL; mp = s; /* getting a type */ cp = mp; while (apr_isspace(*cp)) { cp++; } if (!*cp) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ss, APLOGNO(01598) "mod_mime: analyze_ct: cannot get media type from '%s'", (const char *) mp); return (NULL); } ctp->type = cp; do { cp++; } while (*cp && (*cp != '/') && !apr_isspace(*cp) && (*cp != ';')); if (!*cp || (*cp == ';')) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ss, APLOGNO(01599) "Cannot get media type from '%s'", (const char *) mp); return (NULL); } while (apr_isspace(*cp)) { cp++; } if (*cp != '/') { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ss, APLOGNO(01600) "mod_mime: analyze_ct: cannot get media type from '%s'", (const char *) mp); return (NULL); } ctp->type_len = cp - ctp->type; cp++; /* skip the '/' */ /* getting a subtype */ while (apr_isspace(*cp)) { cp++; } if (!*cp) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ss, APLOGNO(01601) "Cannot get media subtype."); return (NULL); } ctp->subtype = cp; do { cp++; } while (*cp && !apr_isspace(*cp) && (*cp != ';')); ctp->subtype_len = cp - ctp->subtype; while (apr_isspace(*cp)) { cp++; } if (*cp == '\0') { return (ctp); } /* getting parameters */ cp++; /* skip the ';' */ cp = zap_sp(cp); if (cp == NULL || *cp == '\0') { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ss, APLOGNO(01602) "Cannot get media parameter."); return (NULL); } mp = cp; attribute = NULL; value = NULL; while (cp != NULL && *cp != '\0') { if (attribute == NULL) { if (is_token(*cp) > 0) { cp++; continue; } else if (*cp == ' ' || *cp == '\t' || *cp == '\n') { cp++; continue; } else if (*cp == '=') { attribute = zap_sp_and_dup(p, mp, cp, NULL); if (attribute == NULL || *attribute == '\0') { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ss, APLOGNO(01603) "Cannot get media parameter."); return (NULL); } cp++; cp = zap_sp(cp); if (cp == NULL || *cp == '\0') { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ss, APLOGNO(01604) "Cannot get media parameter."); return (NULL); } mp = cp; continue; } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ss, APLOGNO(01605) "Cannot get media parameter."); return (NULL); } } else { if (mp == cp) { if (*cp == '"') { quoted = 1; cp++; } else { quoted = 0; } } if (quoted > 0) { while (quoted && *cp != '\0') { if (is_qtext(*cp) > 0) { cp++; } else if (is_quoted_pair(cp) > 0) { cp += 2; } else if (*cp == '"') { cp++; while (*cp == ' ' || *cp == '\t' || *cp == '\n') { cp++; } if (*cp != ';' && *cp != '\0') { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ss, APLOGNO(01606) "Cannot get media parameter."); return(NULL); } quoted = 0; } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ss, APLOGNO(01607) "Cannot get media parameter."); return (NULL); } } } else { while (1) { if (is_token(*cp) > 0) { cp++; } else if (*cp == '\0' || *cp == ';') { break; } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ss, APLOGNO(01608) "Cannot get media parameter."); return (NULL); } } } value = zap_sp_and_dup(p, mp, cp, NULL); if (value == NULL || *value == '\0') { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ss, APLOGNO(01609) "Cannot get media parameter."); return (NULL); } pp = apr_palloc(p, sizeof(param)); pp->attr = attribute; pp->val = value; pp->next = NULL; if (ctp->param == NULL) { ctp->param = pp; } else { npp = ctp->param; while (npp->next) { npp = npp->next; } npp->next = pp; } quoted = 0; attribute = NULL; value = NULL; if (*cp == '\0') { break; } cp++; mp = cp; } } return (ctp); } /* * find_ct is the hook routine for determining content-type and other * MIME-related metadata. It assumes that r->filename has already been * set and stat has been called for r->finfo. It also assumes that the * non-path base file name is not the empty string unless it is a dir. */ static int find_ct(request_rec *r) { mime_dir_config *conf; apr_array_header_t *exception_list; char *ext; const char *fn, *fntmp, *type, *charset = NULL, *resource_name; int found_metadata = 0; if (r->finfo.filetype == APR_DIR) { ap_set_content_type(r, DIR_MAGIC_TYPE); return OK; } if (!r->filename) { return DECLINED; } conf = (mime_dir_config *)ap_get_module_config(r->per_dir_config, &mime_module); exception_list = apr_array_make(r->pool, 2, sizeof(char *)); /* If use_path_info is explicitly set to on (value & 1 == 1), append. */ if (conf->use_path_info & 1) { resource_name = apr_pstrcat(r->pool, r->filename, r->path_info, NULL); } else { resource_name = r->filename; } /* Always drop the path leading up to the file name. */ if ((fn = ap_strrchr_c(resource_name, '/')) == NULL) { fn = resource_name; } else { ++fn; } /* The exception list keeps track of those filename components that * are not associated with extensions indicating metadata. * The base name is always the first exception (i.e., "txt.html" has * a basename of "txt" even though it might look like an extension). * Leading dots are considered to be part of the base name (a file named * ".png" is likely not a png file but just a hidden file called png). */ fntmp = fn; while (*fntmp == '.') fntmp++; fntmp = ap_strchr_c(fntmp, '.'); if (fntmp) { ext = apr_pstrmemdup(r->pool, fn, fntmp - fn); fn = fntmp + 1; } else { ext = apr_pstrdup(r->pool, fn); fn += strlen(fn); } *((const char **)apr_array_push(exception_list)) = ext; /* Parse filename extensions which can be in any order */ while (*fn && (ext = ap_getword(r->pool, &fn, '.'))) { const extension_info *exinfo = NULL; int found; char *extcase; if (*ext == '\0') { /* ignore empty extensions "bad..html" */ continue; } found = 0; /* Save the ext in extcase before converting it to lower case. */ extcase = apr_pstrdup(r->pool, ext); ap_str_tolower(ext); if (conf->extension_mappings != NULL) { exinfo = (extension_info*)apr_hash_get(conf->extension_mappings, ext, APR_HASH_KEY_STRING); } if (exinfo == NULL || !exinfo->forced_type) { if ((type = apr_hash_get(mime_type_extensions, ext, APR_HASH_KEY_STRING)) != NULL) { ap_set_content_type(r, (char*) type); found = 1; } } if (exinfo != NULL) { /* empty string is treated as special case for RemoveType */ if (exinfo->forced_type && *exinfo->forced_type) { ap_set_content_type(r, exinfo->forced_type); found = 1; } if (exinfo->charset_type) { charset = exinfo->charset_type; found = 1; } if (exinfo->language_type) { if (!r->content_languages) { r->content_languages = apr_array_make(r->pool, 2, sizeof(char *)); } *((const char **)apr_array_push(r->content_languages)) = exinfo->language_type; found = 1; } if (exinfo->encoding_type) { if (!r->content_encoding) { r->content_encoding = exinfo->encoding_type; } else { /* XXX should eliminate duplicate entities * * ah no. Order is important and double encoding is neither * forbidden nor impossible. -- nd */ r->content_encoding = apr_pstrcat(r->pool, r->content_encoding, ", ", exinfo->encoding_type, NULL); } found = 1; } /* The following extensions are not 'Found'. That is, they don't * make any contribution to metadata negotiation, so they must have * been explicitly requested by name. */ if (exinfo->handler && r->proxyreq == PROXYREQ_NONE) { r->handler = exinfo->handler; if (conf->multimatch & MULTIMATCH_HANDLERS) { found = 1; } } /* XXX Two significant problems; 1, we don't check to see if we are * setting redundant filters. 2, we insert these in the types * config hook, which may be too early (dunno.) */ if (exinfo->input_filters) { const char *filter, *filters = exinfo->input_filters; while (*filters && (filter = ap_getword(r->pool, &filters, ';'))) { ap_add_input_filter(filter, NULL, r, r->connection); } if (conf->multimatch & MULTIMATCH_FILTERS) { found = 1; } } if (exinfo->output_filters) { const char *filter, *filters = exinfo->output_filters; while (*filters && (filter = ap_getword(r->pool, &filters, ';'))) { ap_add_output_filter(filter, NULL, r, r->connection); } if (conf->multimatch & MULTIMATCH_FILTERS) { found = 1; } } } if (found || (conf->multimatch & MULTIMATCH_ANY)) { found_metadata = 1; } else { *((const char **) apr_array_push(exception_list)) = extcase; } } /* * Need to set a notes entry on r for unrecognized elements. * Somebody better claim them! If we did absolutely nothing, * skip the notes to alert mod_negotiation we are clueless. */ if (found_metadata) { apr_table_setn(r->notes, "ap-mime-exceptions-list", (void *)exception_list); } if (r->content_type) { content_type *ctp; int override = 0; if ((ctp = analyze_ct(r, r->content_type))) { param *pp = ctp->param; char *base_content_type = apr_palloc(r->pool, ctp->type_len + ctp->subtype_len + sizeof("/")); char *tmp = base_content_type; memcpy(tmp, ctp->type, ctp->type_len); tmp += ctp->type_len; *tmp++ = '/'; memcpy(tmp, ctp->subtype, ctp->subtype_len); tmp += ctp->subtype_len; *tmp = 0; ap_set_content_type(r, base_content_type); while (pp != NULL) { if (charset && !strcmp(pp->attr, "charset")) { if (!override) { ap_set_content_type(r, apr_pstrcat(r->pool, r->content_type, "; charset=", charset, NULL)); override = 1; } } else { ap_set_content_type(r, apr_pstrcat(r->pool, r->content_type, "; ", pp->attr, "=", pp->val, NULL)); } pp = pp->next; } if (charset && !override) { ap_set_content_type(r, apr_pstrcat(r->pool, r->content_type, "; charset=", charset, NULL)); } } } /* Set default language, if none was specified by the extensions * and we have a DefaultLanguage setting in force */ if (!r->content_languages && conf->default_language) { const char **new; r->content_languages = apr_array_make(r->pool, 2, sizeof(char *)); new = (const char **)apr_array_push(r->content_languages); *new = conf->default_language; } if (!r->content_type) { return DECLINED; } return OK; } static void register_hooks(apr_pool_t *p) { ap_hook_post_config(mime_post_config,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_type_checker(find_ct,NULL,NULL,APR_HOOK_MIDDLE); /* * this hook seems redundant ... is there any reason a type checker isn't * allowed to do this already? I'd think that fixups in general would be * the last opportunity to get the filters right. * ap_hook_insert_filter(mime_insert_filters,NULL,NULL,APR_HOOK_MIDDLE); */ } AP_DECLARE_MODULE(mime) = { STANDARD20_MODULE_STUFF, create_mime_dir_config, /* create per-directory config structure */ merge_mime_dir_configs, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ mime_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/http/.indent.pro0000644000000000000500000000127510150161574015751 0ustar rootsrc-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int httpd-2.4.41/modules/http/mod_mime.dep0000644000000000000500000000372612674411515016161 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_mime.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_mime.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/http/http_core.c0000644000000000000500000002663313472755016016042 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_strings.h" #include "apr_thread_proc.h" /* for RLIMIT stuff */ #define APR_WANT_STRFUNC #include "apr_want.h" #include "httpd.h" #include "http_config.h" #include "http_connection.h" #include "http_core.h" #include "http_protocol.h" /* For index_of_response(). Grump. */ #include "http_request.h" #include "util_filter.h" #include "util_ebcdic.h" #include "ap_mpm.h" #include "scoreboard.h" #include "mod_core.h" /* Handles for core filters */ AP_DECLARE_DATA ap_filter_rec_t *ap_http_input_filter_handle; AP_DECLARE_DATA ap_filter_rec_t *ap_http_header_filter_handle; AP_DECLARE_DATA ap_filter_rec_t *ap_chunk_filter_handle; AP_DECLARE_DATA ap_filter_rec_t *ap_http_outerror_filter_handle; AP_DECLARE_DATA ap_filter_rec_t *ap_byterange_filter_handle; AP_DECLARE_DATA const char *ap_multipart_boundary; /* If we are using an MPM That Supports Async Connections, * use a different processing function */ static int async_mpm = 0; static const char *set_keep_alive_timeout(cmd_parms *cmd, void *dummy, const char *arg) { apr_interval_time_t timeout; const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err != NULL) { return err; } /* Stolen from mod_proxy.c */ if (ap_timeout_parameter_parse(arg, &timeout, "s") != APR_SUCCESS) return "KeepAliveTimeout has wrong format"; cmd->server->keep_alive_timeout = timeout; /* We don't want to take into account whether or not KeepAliveTimeout is * set for the main server, because if no http_module directive is used * for a vhost, it will inherit the http_srv_cfg from the main server. * However keep_alive_timeout_set helps determine whether the vhost should * use its own configured timeout or the one from the vhost declared first * on the same IP:port (ie. c->base_server, and the legacy behaviour). */ if (cmd->server->is_virtual) { cmd->server->keep_alive_timeout_set = 1; } return NULL; } static const char *set_keep_alive(cmd_parms *cmd, void *dummy, int arg) { const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err != NULL) { return err; } cmd->server->keep_alive = arg; return NULL; } static const char *set_keep_alive_max(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err != NULL) { return err; } cmd->server->keep_alive_max = atoi(arg); return NULL; } static const command_rec http_cmds[] = { AP_INIT_TAKE1("KeepAliveTimeout", set_keep_alive_timeout, NULL, RSRC_CONF, "Keep-Alive timeout duration (sec)"), AP_INIT_TAKE1("MaxKeepAliveRequests", set_keep_alive_max, NULL, RSRC_CONF, "Maximum number of Keep-Alive requests per connection, " "or 0 for infinite"), AP_INIT_FLAG("KeepAlive", set_keep_alive, NULL, RSRC_CONF, "Whether persistent connections should be On or Off"), { NULL } }; static const char *http_scheme(const request_rec *r) { /* * The http module shouldn't return anything other than * "http" (the default) or "https". */ if (r->server->server_scheme && (strcmp(r->server->server_scheme, "https") == 0)) return "https"; return "http"; } static apr_port_t http_port(const request_rec *r) { if (r->server->server_scheme && (strcmp(r->server->server_scheme, "https") == 0)) return DEFAULT_HTTPS_PORT; return DEFAULT_HTTP_PORT; } static int ap_process_http_async_connection(conn_rec *c) { request_rec *r = NULL; conn_state_t *cs = c->cs; AP_DEBUG_ASSERT(cs != NULL); AP_DEBUG_ASSERT(cs->state == CONN_STATE_READ_REQUEST_LINE); if (cs->state == CONN_STATE_READ_REQUEST_LINE) { ap_update_child_status_from_conn(c->sbh, SERVER_BUSY_READ, c); if (ap_extended_status) { ap_set_conn_count(c->sbh, r, c->keepalives); } if ((r = ap_read_request(c))) { c->keepalive = AP_CONN_UNKNOWN; /* process the request if it was read without error */ if (r->status == HTTP_OK) { cs->state = CONN_STATE_HANDLER; if (ap_extended_status) { ap_set_conn_count(c->sbh, r, c->keepalives + 1); } ap_update_child_status(c->sbh, SERVER_BUSY_WRITE, r); ap_process_async_request(r); /* After the call to ap_process_request, the * request pool may have been deleted. We set * r=NULL here to ensure that any dereference * of r that might be added later in this function * will result in a segfault immediately instead * of nondeterministic failures later. */ r = NULL; } if (cs->state != CONN_STATE_WRITE_COMPLETION && cs->state != CONN_STATE_SUSPENDED) { /* Something went wrong; close the connection */ cs->state = CONN_STATE_LINGER; } } else { /* ap_read_request failed - client may have closed */ cs->state = CONN_STATE_LINGER; } } return OK; } static int ap_process_http_sync_connection(conn_rec *c) { request_rec *r; conn_state_t *cs = c->cs; apr_socket_t *csd = NULL; int mpm_state = 0; /* * Read and process each request found on our connection * until no requests are left or we decide to close. */ ap_update_child_status_from_conn(c->sbh, SERVER_BUSY_READ, c); while ((r = ap_read_request(c)) != NULL) { apr_interval_time_t keep_alive_timeout = r->server->keep_alive_timeout; /* To preserve legacy behaviour, use the keepalive timeout from the * base server (first on this IP:port) when none is explicitly * configured on this server. */ if (!r->server->keep_alive_timeout_set) { keep_alive_timeout = c->base_server->keep_alive_timeout; } c->keepalive = AP_CONN_UNKNOWN; /* process the request if it was read without error */ if (r->status == HTTP_OK) { if (cs) cs->state = CONN_STATE_HANDLER; ap_update_child_status(c->sbh, SERVER_BUSY_WRITE, r); ap_process_request(r); /* After the call to ap_process_request, the * request pool will have been deleted. We set * r=NULL here to ensure that any dereference * of r that might be added later in this function * will result in a segfault immediately instead * of nondeterministic failures later. */ r = NULL; } if (c->keepalive != AP_CONN_KEEPALIVE || c->aborted) break; ap_update_child_status(c->sbh, SERVER_BUSY_KEEPALIVE, NULL); if (ap_mpm_query(AP_MPMQ_MPM_STATE, &mpm_state)) { break; } if (mpm_state == AP_MPMQ_STOPPING) { break; } if (!csd) { csd = ap_get_conn_socket(c); } apr_socket_opt_set(csd, APR_INCOMPLETE_READ, 1); apr_socket_timeout_set(csd, keep_alive_timeout); /* Go straight to select() to wait for the next request */ } return OK; } static int ap_process_http_connection(conn_rec *c) { if (async_mpm && !c->clogging_input_filters) { return ap_process_http_async_connection(c); } else { return ap_process_http_sync_connection(c); } } static int http_create_request(request_rec *r) { if (!r->main && !r->prev) { ap_add_output_filter_handle(ap_byterange_filter_handle, NULL, r, r->connection); ap_add_output_filter_handle(ap_content_length_filter_handle, NULL, r, r->connection); ap_add_output_filter_handle(ap_http_header_filter_handle, NULL, r, r->connection); ap_add_output_filter_handle(ap_http_outerror_filter_handle, NULL, r, r->connection); } return OK; } static int http_send_options(request_rec *r) { if ((r->method_number == M_OPTIONS) && r->uri && (r->uri[0] == '*') && (r->uri[1] == '\0')) { return DONE; /* Send HTTP pong, without Allow header */ } return DECLINED; } static int http_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { apr_uint64_t val; if (ap_mpm_query(AP_MPMQ_IS_ASYNC, &async_mpm) != APR_SUCCESS) { async_mpm = 0; } ap_random_insecure_bytes(&val, sizeof(val)); ap_multipart_boundary = apr_psprintf(p, "%0" APR_UINT64_T_HEX_FMT, val); return OK; } static void register_hooks(apr_pool_t *p) { ap_hook_post_config(http_post_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_process_connection(ap_process_http_connection, NULL, NULL, APR_HOOK_REALLY_LAST); ap_hook_map_to_storage(ap_send_http_trace,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_map_to_storage(http_send_options,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_http_scheme(http_scheme,NULL,NULL,APR_HOOK_REALLY_LAST); ap_hook_default_port(http_port,NULL,NULL,APR_HOOK_REALLY_LAST); ap_hook_create_request(http_create_request, NULL, NULL, APR_HOOK_REALLY_LAST); ap_http_input_filter_handle = ap_register_input_filter("HTTP_IN", ap_http_filter, NULL, AP_FTYPE_PROTOCOL); ap_http_header_filter_handle = ap_register_output_filter("HTTP_HEADER", ap_http_header_filter, NULL, AP_FTYPE_PROTOCOL); ap_chunk_filter_handle = ap_register_output_filter("CHUNK", ap_http_chunk_filter, NULL, AP_FTYPE_TRANSCODE); ap_http_outerror_filter_handle = ap_register_output_filter("HTTP_OUTERROR", ap_http_outerror_filter, NULL, AP_FTYPE_PROTOCOL); ap_byterange_filter_handle = ap_register_output_filter("BYTERANGE", ap_byterange_filter, NULL, AP_FTYPE_PROTOCOL); ap_method_registry_init(p); } AP_DECLARE_MODULE(http) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ http_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/http/http_filters.c0000644000000000000500000017462013442153304016547 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * http_filter.c --- HTTP routines which either filters or deal with filters. */ #include "apr.h" #include "apr_strings.h" #include "apr_buckets.h" #include "apr_lib.h" #include "apr_signal.h" #define APR_WANT_STDIO /* for sscanf */ #define APR_WANT_STRFUNC #define APR_WANT_MEMFUNC #include "apr_want.h" #include "util_filter.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_protocol.h" #include "http_main.h" #include "http_request.h" #include "http_vhost.h" #include "http_connection.h" #include "http_log.h" /* For errors detected in basic auth common * support code... */ #include "apr_date.h" /* For apr_date_parse_http and APR_DATE_BAD */ #include "util_charset.h" #include "util_ebcdic.h" #include "util_time.h" #include "mod_core.h" #if APR_HAVE_STDARG_H #include #endif #if APR_HAVE_UNISTD_H #include #endif APLOG_USE_MODULE(http); typedef struct http_filter_ctx { apr_off_t remaining; apr_off_t limit; apr_off_t limit_used; apr_int32_t chunk_used; apr_int32_t chunk_bws; apr_int32_t chunkbits; enum { BODY_NONE, /* streamed data */ BODY_LENGTH, /* data constrained by content length */ BODY_CHUNK, /* chunk expected */ BODY_CHUNK_PART, /* chunk digits */ BODY_CHUNK_EXT, /* chunk extension */ BODY_CHUNK_CR, /* got space(s) after digits, expect [CR]LF or ext */ BODY_CHUNK_LF, /* got CR after digits or ext, expect LF */ BODY_CHUNK_DATA, /* data constrained by chunked encoding */ BODY_CHUNK_END, /* chunked data terminating CRLF */ BODY_CHUNK_END_LF, /* got CR after data, expect LF */ BODY_CHUNK_TRAILER /* trailers */ } state; unsigned int eos_sent :1; apr_bucket_brigade *bb; } http_ctx_t; /* bail out if some error in the HTTP input filter happens */ static apr_status_t bail_out_on_error(http_ctx_t *ctx, ap_filter_t *f, int http_error) { apr_bucket *e; apr_bucket_brigade *bb = ctx->bb; apr_brigade_cleanup(bb); if (f->r->proxyreq == PROXYREQ_RESPONSE) { switch (http_error) { case HTTP_REQUEST_ENTITY_TOO_LARGE: return APR_ENOSPC; case HTTP_REQUEST_TIME_OUT: return APR_INCOMPLETE; case HTTP_NOT_IMPLEMENTED: return APR_ENOTIMPL; default: return APR_EGENERAL; } } e = ap_bucket_error_create(http_error, NULL, f->r->pool, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); e = apr_bucket_eos_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); ctx->eos_sent = 1; /* If chunked encoding / content-length are corrupt, we may treat parts * of this request's body as the next one's headers. * To be safe, disable keep-alive. */ f->r->connection->keepalive = AP_CONN_CLOSE; return ap_pass_brigade(f->r->output_filters, bb); } /** * Parse a chunk line with optional extension, detect overflow. * There are several error cases: * 1) If the chunk link is misformatted, APR_EINVAL is returned. * 2) If the conversion would require too many bits, APR_EGENERAL is returned. * 3) If the conversion used the correct number of bits, but an overflow * caused only the sign bit to flip, then APR_ENOSPC is returned. * A negative chunk length always indicates an overflow error. */ static apr_status_t parse_chunk_size(http_ctx_t *ctx, const char *buffer, apr_size_t len, int linelimit, int strict) { apr_size_t i = 0; while (i < len) { char c = buffer[i]; ap_xlate_proto_from_ascii(&c, 1); /* handle CRLF after the chunk */ if (ctx->state == BODY_CHUNK_END || ctx->state == BODY_CHUNK_END_LF) { if (c == LF) { if (strict && (ctx->state != BODY_CHUNK_END_LF)) { /* * CR missing before LF. */ return APR_EINVAL; } ctx->state = BODY_CHUNK; } else if (c == CR && ctx->state == BODY_CHUNK_END) { ctx->state = BODY_CHUNK_END_LF; } else { /* * CRLF expected. */ return APR_EINVAL; } i++; continue; } /* handle start of the chunk */ if (ctx->state == BODY_CHUNK) { if (!apr_isxdigit(c)) { /* * Detect invalid character at beginning. This also works for * empty chunk size lines. */ return APR_EINVAL; } else { ctx->state = BODY_CHUNK_PART; } ctx->remaining = 0; ctx->chunkbits = sizeof(apr_off_t) * 8; ctx->chunk_used = 0; ctx->chunk_bws = 0; } if (c == LF) { if (strict && (ctx->state != BODY_CHUNK_LF)) { /* * CR missing before LF. */ return APR_EINVAL; } if (ctx->remaining) { ctx->state = BODY_CHUNK_DATA; } else { ctx->state = BODY_CHUNK_TRAILER; } } else if (ctx->state == BODY_CHUNK_LF) { /* * LF expected. */ return APR_EINVAL; } else if (c == CR) { ctx->state = BODY_CHUNK_LF; } else if (c == ';') { ctx->state = BODY_CHUNK_EXT; } else if (ctx->state == BODY_CHUNK_EXT) { /* * Control chars (excluding tabs) are invalid. * TODO: more precisely limit input */ if (c != '\t' && apr_iscntrl(c)) { return APR_EINVAL; } } else if (c == ' ' || c == '\t') { /* Be lenient up to 10 implied *LWS, a legacy of RFC 2616, * and noted as errata to RFC7230; * https://www.rfc-editor.org/errata_search.php?rfc=7230&eid=4667 */ ctx->state = BODY_CHUNK_CR; if (++ctx->chunk_bws > 10) { return APR_EINVAL; } } else if (ctx->state == BODY_CHUNK_CR) { /* * ';', CR or LF expected. */ return APR_EINVAL; } else if (ctx->state == BODY_CHUNK_PART) { int xvalue; /* ignore leading zeros */ if (!ctx->remaining && c == '0') { i++; continue; } ctx->chunkbits -= 4; if (ctx->chunkbits < 0) { /* overflow */ return APR_ENOSPC; } if (c >= '0' && c <= '9') { xvalue = c - '0'; } else if (c >= 'A' && c <= 'F') { xvalue = c - 'A' + 0xa; } else if (c >= 'a' && c <= 'f') { xvalue = c - 'a' + 0xa; } else { /* bogus character */ return APR_EINVAL; } ctx->remaining = (ctx->remaining << 4) | xvalue; if (ctx->remaining < 0) { /* overflow */ return APR_ENOSPC; } } else { /* Should not happen */ return APR_EGENERAL; } i++; } /* sanity check */ ctx->chunk_used += len; if (ctx->chunk_used < 0 || ctx->chunk_used > linelimit) { return APR_ENOSPC; } return APR_SUCCESS; } static apr_status_t read_chunked_trailers(http_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *b, int merge) { int rv; apr_bucket *e; request_rec *r = f->r; apr_table_t *saved_headers_in = r->headers_in; int saved_status = r->status; r->status = HTTP_OK; r->headers_in = r->trailers_in; apr_table_clear(r->headers_in); ap_get_mime_headers(r); if(r->status == HTTP_OK) { r->status = saved_status; e = apr_bucket_eos_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(b, e); ctx->eos_sent = 1; rv = APR_SUCCESS; } else { const char *error_notes = apr_table_get(r->notes, "error-notes"); ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02656) "Error while reading HTTP trailer: %i%s%s", r->status, error_notes ? ": " : "", error_notes ? error_notes : ""); rv = APR_EINVAL; } if(!merge) { r->headers_in = saved_headers_in; } else { r->headers_in = apr_table_overlay(r->pool, saved_headers_in, r->trailers_in); } return rv; } /* This is the HTTP_INPUT filter for HTTP requests and responses from * proxied servers (mod_proxy). It handles chunked and content-length * bodies. This can only be inserted/used after the headers * are successfully parsed. */ apr_status_t ap_http_filter(ap_filter_t *f, apr_bucket_brigade *b, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { core_server_config *conf = (core_server_config *) ap_get_module_config(f->r->server->module_config, &core_module); int strict = (conf->http_conformance != AP_HTTP_CONFORMANCE_UNSAFE); apr_bucket *e; http_ctx_t *ctx = f->ctx; apr_status_t rv; int http_error = HTTP_REQUEST_ENTITY_TOO_LARGE; apr_bucket_brigade *bb; int again; /* just get out of the way of things we don't want. */ if (mode != AP_MODE_READBYTES && mode != AP_MODE_GETLINE) { return ap_get_brigade(f->next, b, mode, block, readbytes); } if (!ctx) { const char *tenc, *lenp; f->ctx = ctx = apr_pcalloc(f->r->pool, sizeof(*ctx)); ctx->state = BODY_NONE; ctx->bb = apr_brigade_create(f->r->pool, f->c->bucket_alloc); bb = ctx->bb; /* LimitRequestBody does not apply to proxied responses. * Consider implementing this check in its own filter. * Would adding a directive to limit the size of proxied * responses be useful? */ if (!f->r->proxyreq) { ctx->limit = ap_get_limit_req_body(f->r); } else { ctx->limit = 0; } tenc = apr_table_get(f->r->headers_in, "Transfer-Encoding"); lenp = apr_table_get(f->r->headers_in, "Content-Length"); if (tenc) { if (strcasecmp(tenc, "chunked") == 0 /* fast path */ || ap_find_last_token(f->r->pool, tenc, "chunked")) { ctx->state = BODY_CHUNK; } else if (f->r->proxyreq == PROXYREQ_RESPONSE) { /* http://tools.ietf.org/html/draft-ietf-httpbis-p1-messaging-23 * Section 3.3.3.3: "If a Transfer-Encoding header field is * present in a response and the chunked transfer coding is not * the final encoding, the message body length is determined by * reading the connection until it is closed by the server." */ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, f->r, APLOGNO(02555) "Unknown Transfer-Encoding: %s; " "using read-until-close", tenc); tenc = NULL; } else { /* Something that isn't a HTTP request, unless some future * edition defines new transfer encodings, is unsupported. */ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, f->r, APLOGNO(01585) "Unknown Transfer-Encoding: %s", tenc); return bail_out_on_error(ctx, f, HTTP_BAD_REQUEST); } lenp = NULL; } if (lenp) { char *endstr; ctx->state = BODY_LENGTH; /* Protects against over/underflow, non-digit chars in the * string (excluding leading space) (the endstr checks) * and a negative number. */ if (apr_strtoff(&ctx->remaining, lenp, &endstr, 10) || endstr == lenp || *endstr || ctx->remaining < 0) { ctx->remaining = 0; ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, f->r, APLOGNO(01587) "Invalid Content-Length"); return bail_out_on_error(ctx, f, HTTP_BAD_REQUEST); } /* If we have a limit in effect and we know the C-L ahead of * time, stop it here if it is invalid. */ if (ctx->limit && ctx->limit < ctx->remaining) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, f->r, APLOGNO(01588) "Requested content-length of %" APR_OFF_T_FMT " is larger than the configured limit" " of %" APR_OFF_T_FMT, ctx->remaining, ctx->limit); return bail_out_on_error(ctx, f, HTTP_REQUEST_ENTITY_TOO_LARGE); } } /* If we don't have a request entity indicated by the headers, EOS. * (BODY_NONE is a valid intermediate state due to trailers, * but it isn't a valid starting state.) * * RFC 2616 Section 4.4 note 5 states that connection-close * is invalid for a request entity - request bodies must be * denoted by C-L or T-E: chunked. * * Note that since the proxy uses this filter to handle the * proxied *response*, proxy responses MUST be exempt. */ if (ctx->state == BODY_NONE && f->r->proxyreq != PROXYREQ_RESPONSE) { e = apr_bucket_eos_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(b, e); ctx->eos_sent = 1; return APR_SUCCESS; } /* Since we're about to read data, send 100-Continue if needed. * Only valid on chunked and C-L bodies where the C-L is > 0. */ if ((ctx->state == BODY_CHUNK || (ctx->state == BODY_LENGTH && ctx->remaining > 0)) && f->r->expecting_100 && f->r->proto_num >= HTTP_VERSION(1,1) && !(f->r->eos_sent || f->r->bytes_sent)) { if (!ap_is_HTTP_SUCCESS(f->r->status)) { ctx->state = BODY_NONE; ctx->eos_sent = 1; } else { char *tmp; int len; /* if we send an interim response, we're no longer * in a state of expecting one. */ f->r->expecting_100 = 0; tmp = apr_pstrcat(f->r->pool, AP_SERVER_PROTOCOL " ", ap_get_status_line(HTTP_CONTINUE), CRLF CRLF, NULL); len = strlen(tmp); ap_xlate_proto_to_ascii(tmp, len); apr_brigade_cleanup(bb); e = apr_bucket_pool_create(tmp, len, f->r->pool, f->c->bucket_alloc); APR_BRIGADE_INSERT_HEAD(bb, e); e = apr_bucket_flush_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); rv = ap_pass_brigade(f->c->output_filters, bb); if (rv != APR_SUCCESS) { return AP_FILTER_ERROR; } } } } /* sanity check in case we're read twice */ if (ctx->eos_sent) { e = apr_bucket_eos_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(b, e); return APR_SUCCESS; } do { apr_brigade_cleanup(b); again = 0; /* until further notice */ /* read and handle the brigade */ switch (ctx->state) { case BODY_CHUNK: case BODY_CHUNK_PART: case BODY_CHUNK_EXT: case BODY_CHUNK_CR: case BODY_CHUNK_LF: case BODY_CHUNK_END: case BODY_CHUNK_END_LF: { rv = ap_get_brigade(f->next, b, AP_MODE_GETLINE, block, 0); /* for timeout */ if (block == APR_NONBLOCK_READ && ((rv == APR_SUCCESS && APR_BRIGADE_EMPTY(b)) || (APR_STATUS_IS_EAGAIN(rv)))) { return APR_EAGAIN; } if (rv == APR_EOF) { return APR_INCOMPLETE; } if (rv != APR_SUCCESS) { return rv; } e = APR_BRIGADE_FIRST(b); while (e != APR_BRIGADE_SENTINEL(b)) { const char *buffer; apr_size_t len; if (!APR_BUCKET_IS_METADATA(e)) { int parsing = 0; rv = apr_bucket_read(e, &buffer, &len, APR_BLOCK_READ); if (rv == APR_SUCCESS) { parsing = 1; rv = parse_chunk_size(ctx, buffer, len, f->r->server->limit_req_fieldsize, strict); } if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_INFO, rv, f->r, APLOGNO(01590) "Error reading/parsing chunk %s ", (APR_ENOSPC == rv) ? "(overflow)" : ""); if (parsing) { if (rv != APR_ENOSPC) { http_error = HTTP_BAD_REQUEST; } return bail_out_on_error(ctx, f, http_error); } return rv; } } apr_bucket_delete(e); e = APR_BRIGADE_FIRST(b); } again = 1; /* come around again */ if (ctx->state == BODY_CHUNK_TRAILER) { /* Treat UNSET as DISABLE - trailers aren't merged by default */ return read_chunked_trailers(ctx, f, b, conf->merge_trailers == AP_MERGE_TRAILERS_ENABLE); } break; } case BODY_NONE: case BODY_LENGTH: case BODY_CHUNK_DATA: { /* Ensure that the caller can not go over our boundary point. */ if (ctx->state != BODY_NONE && ctx->remaining < readbytes) { readbytes = ctx->remaining; } if (readbytes > 0) { apr_off_t totalread; rv = ap_get_brigade(f->next, b, mode, block, readbytes); /* for timeout */ if (block == APR_NONBLOCK_READ && ((rv == APR_SUCCESS && APR_BRIGADE_EMPTY(b)) || (APR_STATUS_IS_EAGAIN(rv)))) { return APR_EAGAIN; } if (rv == APR_EOF && ctx->state != BODY_NONE && ctx->remaining > 0) { return APR_INCOMPLETE; } if (rv != APR_SUCCESS) { return rv; } /* How many bytes did we just read? */ apr_brigade_length(b, 0, &totalread); /* If this happens, we have a bucket of unknown length. Die because * it means our assumptions have changed. */ AP_DEBUG_ASSERT(totalread >= 0); if (ctx->state != BODY_NONE) { ctx->remaining -= totalread; if (ctx->remaining > 0) { e = APR_BRIGADE_LAST(b); if (APR_BUCKET_IS_EOS(e)) { apr_bucket_delete(e); return APR_INCOMPLETE; } } else if (ctx->state == BODY_CHUNK_DATA) { /* next chunk please */ ctx->state = BODY_CHUNK_END; ctx->chunk_used = 0; } } /* We have a limit in effect. */ if (ctx->limit) { /* FIXME: Note that we might get slightly confused on * chunked inputs as we'd need to compensate for the chunk * lengths which may not really count. This seems to be up * for interpretation. */ ctx->limit_used += totalread; if (ctx->limit < ctx->limit_used) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, f->r, APLOGNO(01591) "Read content length of " "%" APR_OFF_T_FMT " is larger than the " "configured limit of %" APR_OFF_T_FMT, ctx->limit_used, ctx->limit); return bail_out_on_error(ctx, f, HTTP_REQUEST_ENTITY_TOO_LARGE); } } } /* If we have no more bytes remaining on a C-L request, * save the caller a round trip to discover EOS. */ if (ctx->state == BODY_LENGTH && ctx->remaining == 0) { e = apr_bucket_eos_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(b, e); ctx->eos_sent = 1; } break; } case BODY_CHUNK_TRAILER: { rv = ap_get_brigade(f->next, b, mode, block, readbytes); /* for timeout */ if (block == APR_NONBLOCK_READ && ((rv == APR_SUCCESS && APR_BRIGADE_EMPTY(b)) || (APR_STATUS_IS_EAGAIN(rv)))) { return APR_EAGAIN; } if (rv != APR_SUCCESS) { return rv; } break; } default: { /* Should not happen */ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, f->r, APLOGNO(02901) "Unexpected body state (%i)", (int)ctx->state); return APR_EGENERAL; } } } while (again); return APR_SUCCESS; } struct check_header_ctx { request_rec *r; int strict; }; /* check a single header, to be used with apr_table_do() */ static int check_header(struct check_header_ctx *ctx, const char *name, const char **val) { const char *pos, *end; char *dst = NULL; if (name[0] == '\0') { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, ctx->r, APLOGNO(02428) "Empty response header name, aborting request"); return 0; } if (ctx->strict) { end = ap_scan_http_token(name); } else { end = ap_scan_vchar_obstext(name); } if (*end) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, ctx->r, APLOGNO(02429) "Response header name '%s' contains invalid " "characters, aborting request", name); return 0; } for (pos = *val; *pos; pos = end) { end = ap_scan_http_field_content(pos); if (*end) { if (end[0] != CR || end[1] != LF || (end[2] != ' ' && end[2] != '\t')) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, ctx->r, APLOGNO(02430) "Response header '%s' value of '%s' contains " "invalid characters, aborting request", name, pos); return 0; } if (!dst) { *val = dst = apr_palloc(ctx->r->pool, strlen(*val) + 1); } } if (dst) { memcpy(dst, pos, end - pos); dst += end - pos; if (*end) { /* skip folding and replace with a single space */ end += 3 + strspn(end + 3, "\t "); *dst++ = ' '; } } } if (dst) { *dst = '\0'; } return 1; } static int check_headers_table(apr_table_t *t, struct check_header_ctx *ctx) { const apr_array_header_t *headers = apr_table_elts(t); apr_table_entry_t *header; int i; for (i = 0; i < headers->nelts; ++i) { header = &APR_ARRAY_IDX(headers, i, apr_table_entry_t); if (!header->key) { continue; } if (!check_header(ctx, header->key, (const char **)&header->val)) { return 0; } } return 1; } /** * Check headers for HTTP conformance * @return 1 if ok, 0 if bad */ static APR_INLINE int check_headers(request_rec *r) { struct check_header_ctx ctx; core_server_config *conf = ap_get_core_module_config(r->server->module_config); ctx.r = r; ctx.strict = (conf->http_conformance != AP_HTTP_CONFORMANCE_UNSAFE); return check_headers_table(r->headers_out, &ctx) && check_headers_table(r->err_headers_out, &ctx); } static int check_headers_recursion(request_rec *r) { void *check = NULL; apr_pool_userdata_get(&check, "check_headers_recursion", r->pool); if (check) { return 1; } apr_pool_userdata_setn("true", "check_headers_recursion", NULL, r->pool); return 0; } typedef struct header_struct { apr_pool_t *pool; apr_bucket_brigade *bb; } header_struct; /* Send a single HTTP header field to the client. Note that this function * is used in calls to apr_table_do(), so don't change its interface. * It returns true unless there was a write error of some kind. */ static int form_header_field(header_struct *h, const char *fieldname, const char *fieldval) { #if APR_CHARSET_EBCDIC char *headfield; apr_size_t len; headfield = apr_pstrcat(h->pool, fieldname, ": ", fieldval, CRLF, NULL); len = strlen(headfield); ap_xlate_proto_to_ascii(headfield, len); apr_brigade_write(h->bb, NULL, NULL, headfield, len); #else struct iovec vec[4]; struct iovec *v = vec; v->iov_base = (void *)fieldname; v->iov_len = strlen(fieldname); v++; v->iov_base = ": "; v->iov_len = sizeof(": ") - 1; v++; v->iov_base = (void *)fieldval; v->iov_len = strlen(fieldval); v++; v->iov_base = CRLF; v->iov_len = sizeof(CRLF) - 1; apr_brigade_writev(h->bb, NULL, NULL, vec, 4); #endif /* !APR_CHARSET_EBCDIC */ return 1; } /* This routine is called by apr_table_do and merges all instances of * the passed field values into a single array that will be further * processed by some later routine. Originally intended to help split * and recombine multiple Vary fields, though it is generic to any field * consisting of comma/space-separated tokens. */ static int uniq_field_values(void *d, const char *key, const char *val) { apr_array_header_t *values; char *start; char *e; char **strpp; int i; values = (apr_array_header_t *)d; e = apr_pstrdup(values->pool, val); do { /* Find a non-empty fieldname */ while (*e == ',' || apr_isspace(*e)) { ++e; } if (*e == '\0') { break; } start = e; while (*e != '\0' && *e != ',' && !apr_isspace(*e)) { ++e; } if (*e != '\0') { *e++ = '\0'; } /* Now add it to values if it isn't already represented. * Could be replaced by a ap_array_strcasecmp() if we had one. */ for (i = 0, strpp = (char **) values->elts; i < values->nelts; ++i, ++strpp) { if (*strpp && strcasecmp(*strpp, start) == 0) { break; } } if (i == values->nelts) { /* if not found */ *(char **)apr_array_push(values) = start; } } while (*e != '\0'); return 1; } /* * Since some clients choke violently on multiple Vary fields, or * Vary fields with duplicate tokens, combine any multiples and remove * any duplicates. */ static void fixup_vary(request_rec *r) { apr_array_header_t *varies; varies = apr_array_make(r->pool, 5, sizeof(char *)); /* Extract all Vary fields from the headers_out, separate each into * its comma-separated fieldname values, and then add them to varies * if not already present in the array. */ apr_table_do(uniq_field_values, varies, r->headers_out, "Vary", NULL); /* If we found any, replace old Vary fields with unique-ified value */ if (varies->nelts > 0) { apr_table_setn(r->headers_out, "Vary", apr_array_pstrcat(r->pool, varies, ',')); } } /* Send a request's HTTP response headers to the client. */ static apr_status_t send_all_header_fields(header_struct *h, const request_rec *r) { const apr_array_header_t *elts; const apr_table_entry_t *t_elt; const apr_table_entry_t *t_end; struct iovec *vec; struct iovec *vec_next; elts = apr_table_elts(r->headers_out); if (elts->nelts == 0) { return APR_SUCCESS; } t_elt = (const apr_table_entry_t *)(elts->elts); t_end = t_elt + elts->nelts; vec = (struct iovec *)apr_palloc(h->pool, 4 * elts->nelts * sizeof(struct iovec)); vec_next = vec; /* For each field, generate * name ": " value CRLF */ do { vec_next->iov_base = (void*)(t_elt->key); vec_next->iov_len = strlen(t_elt->key); vec_next++; vec_next->iov_base = ": "; vec_next->iov_len = sizeof(": ") - 1; vec_next++; vec_next->iov_base = (void*)(t_elt->val); vec_next->iov_len = strlen(t_elt->val); vec_next++; vec_next->iov_base = CRLF; vec_next->iov_len = sizeof(CRLF) - 1; vec_next++; t_elt++; } while (t_elt < t_end); if (APLOGrtrace4(r)) { t_elt = (const apr_table_entry_t *)(elts->elts); do { ap_log_rerror(APLOG_MARK, APLOG_TRACE4, 0, r, " %s: %s", ap_escape_logitem(r->pool, t_elt->key), ap_escape_logitem(r->pool, t_elt->val)); t_elt++; } while (t_elt < t_end); } #if APR_CHARSET_EBCDIC { apr_size_t len; char *tmp = apr_pstrcatv(r->pool, vec, vec_next - vec, &len); ap_xlate_proto_to_ascii(tmp, len); return apr_brigade_write(h->bb, NULL, NULL, tmp, len); } #else return apr_brigade_writev(h->bb, NULL, NULL, vec, vec_next - vec); #endif } /* Confirm that the status line is well-formed and matches r->status. * If they don't match, a filter may have negated the status line set by a * handler. * Zap r->status_line if bad. */ static apr_status_t validate_status_line(request_rec *r) { char *end; if (r->status_line) { int len = strlen(r->status_line); if (len < 3 || apr_strtoi64(r->status_line, &end, 10) != r->status || (end - 3) != r->status_line || (len >= 4 && ! apr_isspace(r->status_line[3]))) { r->status_line = NULL; return APR_EGENERAL; } /* Since we passed the above check, we know that length three * is equivalent to only a 3 digit numeric http status. * RFC2616 mandates a trailing space, let's add it. */ if (len == 3) { r->status_line = apr_pstrcat(r->pool, r->status_line, " ", NULL); return APR_EGENERAL; } return APR_SUCCESS; } return APR_EGENERAL; } /* * Determine the protocol to use for the response. Potentially downgrade * to HTTP/1.0 in some situations and/or turn off keepalives. * * also prepare r->status_line. */ static void basic_http_header_check(request_rec *r, const char **protocol) { apr_status_t rv; if (r->assbackwards) { /* no such thing as a response protocol */ return; } rv = validate_status_line(r); if (!r->status_line) { r->status_line = ap_get_status_line(r->status); } else if (rv != APR_SUCCESS) { /* Status line is OK but our own reason phrase * would be preferred if defined */ const char *tmp = ap_get_status_line(r->status); if (!strncmp(tmp, r->status_line, 3)) { r->status_line = tmp; } } /* Note that we must downgrade before checking for force responses. */ if (r->proto_num > HTTP_VERSION(1,0) && apr_table_get(r->subprocess_env, "downgrade-1.0")) { r->proto_num = HTTP_VERSION(1,0); } /* kludge around broken browsers when indicated by force-response-1.0 */ if (r->proto_num == HTTP_VERSION(1,0) && apr_table_get(r->subprocess_env, "force-response-1.0")) { *protocol = "HTTP/1.0"; r->connection->keepalive = AP_CONN_CLOSE; } else { *protocol = AP_SERVER_PROTOCOL; } } /* fill "bb" with a barebones/initial HTTP response header */ static void basic_http_header(request_rec *r, apr_bucket_brigade *bb, const char *protocol) { char *date = NULL; const char *proxy_date = NULL; const char *server = NULL; const char *us = ap_get_server_banner(); header_struct h; struct iovec vec[4]; if (r->assbackwards) { /* there are no headers to send */ return; } /* Output the HTTP/1.x Status-Line and the Date and Server fields */ vec[0].iov_base = (void *)protocol; vec[0].iov_len = strlen(protocol); vec[1].iov_base = (void *)" "; vec[1].iov_len = sizeof(" ") - 1; vec[2].iov_base = (void *)(r->status_line); vec[2].iov_len = strlen(r->status_line); vec[3].iov_base = (void *)CRLF; vec[3].iov_len = sizeof(CRLF) - 1; #if APR_CHARSET_EBCDIC { char *tmp; apr_size_t len; tmp = apr_pstrcatv(r->pool, vec, 4, &len); ap_xlate_proto_to_ascii(tmp, len); apr_brigade_write(bb, NULL, NULL, tmp, len); } #else apr_brigade_writev(bb, NULL, NULL, vec, 4); #endif h.pool = r->pool; h.bb = bb; /* * keep the set-by-proxy server and date headers, otherwise * generate a new server header / date header */ if (r->proxyreq != PROXYREQ_NONE) { proxy_date = apr_table_get(r->headers_out, "Date"); if (!proxy_date) { /* * proxy_date needs to be const. So use date for the creation of * our own Date header and pass it over to proxy_date later to * avoid a compiler warning. */ date = apr_palloc(r->pool, APR_RFC822_DATE_LEN); ap_recent_rfc822_date(date, r->request_time); } server = apr_table_get(r->headers_out, "Server"); } else { date = apr_palloc(r->pool, APR_RFC822_DATE_LEN); ap_recent_rfc822_date(date, r->request_time); } form_header_field(&h, "Date", proxy_date ? proxy_date : date ); if (!server && *us) server = us; if (server) form_header_field(&h, "Server", server); if (APLOGrtrace3(r)) { ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "Response sent with status %d%s", r->status, APLOGrtrace4(r) ? ", headers:" : ""); /* * Date and Server are less interesting, use TRACE5 for them while * using TRACE4 for the other headers. */ ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, " Date: %s", proxy_date ? proxy_date : date ); if (server) ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, " Server: %s", server); } /* unset so we don't send them again */ apr_table_unset(r->headers_out, "Date"); /* Avoid bogosity */ if (server) { apr_table_unset(r->headers_out, "Server"); } } AP_DECLARE(void) ap_basic_http_header(request_rec *r, apr_bucket_brigade *bb) { const char *protocol = NULL; basic_http_header_check(r, &protocol); basic_http_header(r, bb, protocol); } static void terminate_header(apr_bucket_brigade *bb) { char crlf[] = CRLF; apr_size_t buflen; buflen = strlen(crlf); ap_xlate_proto_to_ascii(crlf, buflen); apr_brigade_write(bb, NULL, NULL, crlf, buflen); } AP_DECLARE_NONSTD(int) ap_send_http_trace(request_rec *r) { core_server_config *conf; int rv; apr_bucket_brigade *bb; header_struct h; apr_bucket *b; int body; char *bodyread = NULL, *bodyoff; apr_size_t bodylen = 0; apr_size_t bodybuf; long res = -1; /* init to avoid gcc -Wall warning */ if (r->method_number != M_TRACE) { return DECLINED; } /* Get the original request */ while (r->prev) { r = r->prev; } conf = ap_get_core_module_config(r->server->module_config); if (conf->trace_enable == AP_TRACE_DISABLE) { apr_table_setn(r->notes, "error-notes", "TRACE denied by server configuration"); return HTTP_METHOD_NOT_ALLOWED; } if (conf->trace_enable == AP_TRACE_EXTENDED) /* XXX: should be = REQUEST_CHUNKED_PASS */ body = REQUEST_CHUNKED_DECHUNK; else body = REQUEST_NO_BODY; if ((rv = ap_setup_client_block(r, body))) { if (rv == HTTP_REQUEST_ENTITY_TOO_LARGE) apr_table_setn(r->notes, "error-notes", "TRACE with a request body is not allowed"); return rv; } if (ap_should_client_block(r)) { if (r->remaining > 0) { if (r->remaining > 65536) { apr_table_setn(r->notes, "error-notes", "Extended TRACE request bodies cannot exceed 64k\n"); return HTTP_REQUEST_ENTITY_TOO_LARGE; } /* always 32 extra bytes to catch chunk header exceptions */ bodybuf = (apr_size_t)r->remaining + 32; } else { /* Add an extra 8192 for chunk headers */ bodybuf = 73730; } bodyoff = bodyread = apr_palloc(r->pool, bodybuf); /* only while we have enough for a chunked header */ while ((!bodylen || bodybuf >= 32) && (res = ap_get_client_block(r, bodyoff, bodybuf)) > 0) { bodylen += res; bodybuf -= res; bodyoff += res; } if (res > 0 && bodybuf < 32) { /* discard_rest_of_request_body into our buffer */ while (ap_get_client_block(r, bodyread, bodylen) > 0) ; apr_table_setn(r->notes, "error-notes", "Extended TRACE request bodies cannot exceed 64k\n"); return HTTP_REQUEST_ENTITY_TOO_LARGE; } if (res < 0) { return HTTP_BAD_REQUEST; } } ap_set_content_type(r, "message/http"); /* Now we recreate the request, and echo it back */ bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); #if APR_CHARSET_EBCDIC { char *tmp; apr_size_t len; len = strlen(r->the_request); tmp = apr_pmemdup(r->pool, r->the_request, len); ap_xlate_proto_to_ascii(tmp, len); apr_brigade_putstrs(bb, NULL, NULL, tmp, CRLF_ASCII, NULL); } #else apr_brigade_putstrs(bb, NULL, NULL, r->the_request, CRLF, NULL); #endif h.pool = r->pool; h.bb = bb; apr_table_do((int (*) (void *, const char *, const char *)) form_header_field, (void *) &h, r->headers_in, NULL); apr_brigade_puts(bb, NULL, NULL, CRLF_ASCII); /* If configured to accept a body, echo the body */ if (bodylen) { b = apr_bucket_pool_create(bodyread, bodylen, r->pool, bb->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); } ap_pass_brigade(r->output_filters, bb); return DONE; } typedef struct header_filter_ctx { int headers_sent; } header_filter_ctx; AP_CORE_DECLARE_NONSTD(apr_status_t) ap_http_header_filter(ap_filter_t *f, apr_bucket_brigade *b) { request_rec *r = f->r; conn_rec *c = r->connection; const char *clheader; int header_only = (r->header_only || AP_STATUS_IS_HEADER_ONLY(r->status)); const char *protocol = NULL; apr_bucket *e; apr_bucket_brigade *b2; header_struct h; header_filter_ctx *ctx = f->ctx; const char *ctype; ap_bucket_error *eb = NULL; apr_status_t rv = APR_SUCCESS; int recursive_error = 0; AP_DEBUG_ASSERT(!r->main); if (!ctx) { ctx = f->ctx = apr_pcalloc(r->pool, sizeof(header_filter_ctx)); } else if (ctx->headers_sent) { /* Eat body if response must not have one. */ if (header_only) { /* Still next filters may be waiting for EOS, so pass it (alone) * when encountered and be done with this filter. */ e = APR_BRIGADE_LAST(b); if (e != APR_BRIGADE_SENTINEL(b) && APR_BUCKET_IS_EOS(e)) { APR_BUCKET_REMOVE(e); apr_brigade_cleanup(b); APR_BRIGADE_INSERT_HEAD(b, e); ap_remove_output_filter(f); rv = ap_pass_brigade(f->next, b); } apr_brigade_cleanup(b); return rv; } } for (e = APR_BRIGADE_FIRST(b); e != APR_BRIGADE_SENTINEL(b); e = APR_BUCKET_NEXT(e)) { if (AP_BUCKET_IS_ERROR(e) && !eb) { eb = e->data; continue; } /* * If we see an EOC bucket it is a signal that we should get out * of the way doing nothing. */ if (AP_BUCKET_IS_EOC(e)) { ap_remove_output_filter(f); return ap_pass_brigade(f->next, b); } } if (!ctx->headers_sent && !check_headers(r)) { /* We may come back here from ap_die() below, * so clear anything from this response. */ apr_table_clear(r->headers_out); apr_table_clear(r->err_headers_out); apr_brigade_cleanup(b); /* Don't recall ap_die() if we come back here (from its own internal * redirect or error response), otherwise we can end up in infinite * recursion; better fall through with 500, minimal headers and an * empty body (EOS only). */ if (!check_headers_recursion(r)) { ap_die(HTTP_INTERNAL_SERVER_ERROR, r); return AP_FILTER_ERROR; } r->status = HTTP_INTERNAL_SERVER_ERROR; e = ap_bucket_eoc_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(b, e); e = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(b, e); r->content_type = r->content_encoding = NULL; r->content_languages = NULL; ap_set_content_length(r, 0); recursive_error = 1; } else if (eb) { int status; status = eb->status; apr_brigade_cleanup(b); ap_die(status, r); return AP_FILTER_ERROR; } if (r->assbackwards) { r->sent_bodyct = 1; ap_remove_output_filter(f); rv = ap_pass_brigade(f->next, b); goto out; } /* * Now that we are ready to send a response, we need to combine the two * header field tables into a single table. If we don't do this, our * later attempts to set or unset a given fieldname might be bypassed. */ if (!apr_is_empty_table(r->err_headers_out)) { r->headers_out = apr_table_overlay(r->pool, r->err_headers_out, r->headers_out); } /* * Remove the 'Vary' header field if the client can't handle it. * Since this will have nasty effects on HTTP/1.1 caches, force * the response into HTTP/1.0 mode. * * Note: the force-response-1.0 should come before the call to * basic_http_header_check() */ if (apr_table_get(r->subprocess_env, "force-no-vary") != NULL) { apr_table_unset(r->headers_out, "Vary"); r->proto_num = HTTP_VERSION(1,0); apr_table_setn(r->subprocess_env, "force-response-1.0", "1"); } else { fixup_vary(r); } /* * Now remove any ETag response header field if earlier processing * says so (such as a 'FileETag None' directive). */ if (apr_table_get(r->notes, "no-etag") != NULL) { apr_table_unset(r->headers_out, "ETag"); } /* determine the protocol and whether we should use keepalives. */ basic_http_header_check(r, &protocol); ap_set_keepalive(r); if (AP_STATUS_IS_HEADER_ONLY(r->status)) { apr_table_unset(r->headers_out, "Transfer-Encoding"); apr_table_unset(r->headers_out, "Content-Length"); r->content_type = r->content_encoding = NULL; r->content_languages = NULL; r->clength = r->chunked = 0; } else if (r->chunked) { apr_table_mergen(r->headers_out, "Transfer-Encoding", "chunked"); apr_table_unset(r->headers_out, "Content-Length"); } ctype = ap_make_content_type(r, r->content_type); if (ctype) { apr_table_setn(r->headers_out, "Content-Type", ctype); } if (r->content_encoding) { apr_table_setn(r->headers_out, "Content-Encoding", r->content_encoding); } if (!apr_is_empty_array(r->content_languages)) { int i; char *token; char **languages = (char **)(r->content_languages->elts); const char *field = apr_table_get(r->headers_out, "Content-Language"); while (field && (token = ap_get_list_item(r->pool, &field)) != NULL) { for (i = 0; i < r->content_languages->nelts; ++i) { if (!strcasecmp(token, languages[i])) break; } if (i == r->content_languages->nelts) { *((char **) apr_array_push(r->content_languages)) = token; } } field = apr_array_pstrcat(r->pool, r->content_languages, ','); apr_table_setn(r->headers_out, "Content-Language", field); } /* * Control cachability for non-cacheable responses if not already set by * some other part of the server configuration. */ if (r->no_cache && !apr_table_get(r->headers_out, "Expires")) { char *date = apr_palloc(r->pool, APR_RFC822_DATE_LEN); ap_recent_rfc822_date(date, r->request_time); apr_table_addn(r->headers_out, "Expires", date); } /* This is a hack, but I can't find anyway around it. The idea is that * we don't want to send out 0 Content-Lengths if it is a head request. * This happens when modules try to outsmart the server, and return * if they see a HEAD request. Apache 1.3 handlers were supposed to * just return in that situation, and the core handled the HEAD. In * 2.0, if a handler returns, then the core sends an EOS bucket down * the filter stack, and the content-length filter computes a C-L of * zero and that gets put in the headers, and we end up sending a * zero C-L to the client. We can't just remove the C-L filter, * because well behaved 2.0 handlers will send their data down the stack, * and we will compute a real C-L for the head request. RBB */ if (r->header_only && (clheader = apr_table_get(r->headers_out, "Content-Length")) && !strcmp(clheader, "0")) { apr_table_unset(r->headers_out, "Content-Length"); } b2 = apr_brigade_create(r->pool, c->bucket_alloc); basic_http_header(r, b2, protocol); h.pool = r->pool; h.bb = b2; if (r->status == HTTP_NOT_MODIFIED) { apr_table_do((int (*)(void *, const char *, const char *)) form_header_field, (void *) &h, r->headers_out, "Connection", "Keep-Alive", "ETag", "Content-Location", "Expires", "Cache-Control", "Vary", "Warning", "WWW-Authenticate", "Proxy-Authenticate", "Set-Cookie", "Set-Cookie2", NULL); } else { send_all_header_fields(&h, r); } terminate_header(b2); if (header_only) { e = APR_BRIGADE_LAST(b); if (e != APR_BRIGADE_SENTINEL(b) && APR_BUCKET_IS_EOS(e)) { APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(b2, e); ap_remove_output_filter(f); } apr_brigade_cleanup(b); } rv = ap_pass_brigade(f->next, b2); apr_brigade_cleanup(b2); ctx->headers_sent = 1; if (rv != APR_SUCCESS || header_only) { goto out; } r->sent_bodyct = 1; /* Whatever follows is real body stuff... */ if (r->chunked) { /* We can't add this filter until we have already sent the headers. * If we add it before this point, then the headers will be chunked * as well, and that is just wrong. */ ap_add_output_filter("CHUNK", NULL, r, r->connection); } /* Don't remove this filter until after we have added the CHUNK filter. * Otherwise, f->next won't be the CHUNK filter and thus the first * brigade won't be chunked properly. */ ap_remove_output_filter(f); rv = ap_pass_brigade(f->next, b); out: if (recursive_error) { return AP_FILTER_ERROR; } return rv; } /* * Map specific APR codes returned by the filter stack to HTTP error * codes, or the default status code provided. Use it as follows: * * return ap_map_http_request_error(rv, HTTP_BAD_REQUEST); * * If the filter has already handled the error, AP_FILTER_ERROR will * be returned, which is cleanly passed through. * * These mappings imply that the filter stack is reading from the * downstream client, the proxy will map these codes differently. */ AP_DECLARE(int) ap_map_http_request_error(apr_status_t rv, int status) { switch (rv) { case AP_FILTER_ERROR: return AP_FILTER_ERROR; case APR_ENOSPC: return HTTP_REQUEST_ENTITY_TOO_LARGE; case APR_ENOTIMPL: return HTTP_NOT_IMPLEMENTED; case APR_TIMEUP: case APR_ETIMEDOUT: return HTTP_REQUEST_TIME_OUT; default: return status; } } /* In HTTP/1.1, any method can have a body. However, most GET handlers * wouldn't know what to do with a request body if they received one. * This helper routine tests for and reads any message body in the request, * simply discarding whatever it receives. We need to do this because * failing to read the request body would cause it to be interpreted * as the next request on a persistent connection. * * Since we return an error status if the request is malformed, this * routine should be called at the beginning of a no-body handler, e.g., * * if ((retval = ap_discard_request_body(r)) != OK) { * return retval; * } */ AP_DECLARE(int) ap_discard_request_body(request_rec *r) { apr_bucket_brigade *bb; int seen_eos; apr_status_t rv; /* Sometimes we'll get in a state where the input handling has * detected an error where we want to drop the connection, so if * that's the case, don't read the data as that is what we're trying * to avoid. * * This function is also a no-op on a subrequest. */ if (r->main || r->connection->keepalive == AP_CONN_CLOSE || ap_status_drops_connection(r->status)) { return OK; } bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); seen_eos = 0; do { apr_bucket *bucket; rv = ap_get_brigade(r->input_filters, bb, AP_MODE_READBYTES, APR_BLOCK_READ, HUGE_STRING_LEN); if (rv != APR_SUCCESS) { apr_brigade_destroy(bb); return ap_map_http_request_error(rv, HTTP_BAD_REQUEST); } for (bucket = APR_BRIGADE_FIRST(bb); bucket != APR_BRIGADE_SENTINEL(bb); bucket = APR_BUCKET_NEXT(bucket)) { const char *data; apr_size_t len; if (APR_BUCKET_IS_EOS(bucket)) { seen_eos = 1; break; } /* These are metadata buckets. */ if (bucket->length == 0) { continue; } /* We MUST read because in case we have an unknown-length * bucket or one that morphs, we want to exhaust it. */ rv = apr_bucket_read(bucket, &data, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS) { apr_brigade_destroy(bb); return HTTP_BAD_REQUEST; } } apr_brigade_cleanup(bb); } while (!seen_eos); return OK; } /* Here we deal with getting the request message body from the client. * Whether or not the request contains a body is signaled by the presence * of a non-zero Content-Length or by a Transfer-Encoding: chunked. * * Note that this is more complicated than it was in Apache 1.1 and prior * versions, because chunked support means that the module does less. * * The proper procedure is this: * * 1. Call ap_setup_client_block() near the beginning of the request * handler. This will set up all the necessary properties, and will * return either OK, or an error code. If the latter, the module should * return that error code. The second parameter selects the policy to * apply if the request message indicates a body, and how a chunked * transfer-coding should be interpreted. Choose one of * * REQUEST_NO_BODY Send 413 error if message has any body * REQUEST_CHUNKED_ERROR Send 411 error if body without Content-Length * REQUEST_CHUNKED_DECHUNK If chunked, remove the chunks for me. * REQUEST_CHUNKED_PASS If chunked, pass the chunk headers with body. * * In order to use the last two options, the caller MUST provide a buffer * large enough to hold a chunk-size line, including any extensions. * * 2. When you are ready to read a body (if any), call ap_should_client_block(). * This will tell the module whether or not to read input. If it is 0, * the module should assume that there is no message body to read. * * 3. Finally, call ap_get_client_block in a loop. Pass it a buffer and its size. * It will put data into the buffer (not necessarily a full buffer), and * return the length of the input block. When it is done reading, it will * return 0 if EOF, or -1 if there was an error. * If an error occurs on input, we force an end to keepalive. * * This step also sends a 100 Continue response to HTTP/1.1 clients if appropriate. */ AP_DECLARE(int) ap_setup_client_block(request_rec *r, int read_policy) { const char *tenc = apr_table_get(r->headers_in, "Transfer-Encoding"); const char *lenp = apr_table_get(r->headers_in, "Content-Length"); r->read_body = read_policy; r->read_chunked = 0; r->remaining = 0; if (tenc) { if (strcasecmp(tenc, "chunked")) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01592) "Unknown Transfer-Encoding %s", tenc); return HTTP_NOT_IMPLEMENTED; } if (r->read_body == REQUEST_CHUNKED_ERROR) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01593) "chunked Transfer-Encoding forbidden: %s", r->uri); return (lenp) ? HTTP_BAD_REQUEST : HTTP_LENGTH_REQUIRED; } r->read_chunked = 1; } else if (lenp) { char *endstr; if (apr_strtoff(&r->remaining, lenp, &endstr, 10) || *endstr || r->remaining < 0) { r->remaining = 0; ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01594) "Invalid Content-Length"); return HTTP_BAD_REQUEST; } } if ((r->read_body == REQUEST_NO_BODY) && (r->read_chunked || (r->remaining > 0))) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01595) "%s with body is not allowed for %s", r->method, r->uri); return HTTP_REQUEST_ENTITY_TOO_LARGE; } #ifdef AP_DEBUG { /* Make sure ap_getline() didn't leave any droppings. */ core_request_config *req_cfg = (core_request_config *)ap_get_core_module_config(r->request_config); AP_DEBUG_ASSERT(APR_BRIGADE_EMPTY(req_cfg->bb)); } #endif return OK; } AP_DECLARE(int) ap_should_client_block(request_rec *r) { /* First check if we have already read the request body */ if (r->read_length || (!r->read_chunked && (r->remaining <= 0))) { return 0; } return 1; } /* get_client_block is called in a loop to get the request message body. * This is quite simple if the client includes a content-length * (the normal case), but gets messy if the body is chunked. Note that * r->remaining is used to maintain state across calls and that * r->read_length is the total number of bytes given to the caller * across all invocations. It is messy because we have to be careful not * to read past the data provided by the client, since these reads block. * Returns 0 on End-of-body, -1 on error or premature chunk end. * */ AP_DECLARE(long) ap_get_client_block(request_rec *r, char *buffer, apr_size_t bufsiz) { apr_status_t rv; apr_bucket_brigade *bb; if (r->remaining < 0 || (!r->read_chunked && r->remaining == 0)) { return 0; } bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); if (bb == NULL) { r->connection->keepalive = AP_CONN_CLOSE; return -1; } rv = ap_get_brigade(r->input_filters, bb, AP_MODE_READBYTES, APR_BLOCK_READ, bufsiz); /* We lose the failure code here. This is why ap_get_client_block should * not be used. */ if (rv == AP_FILTER_ERROR) { /* AP_FILTER_ERROR means a filter has responded already, * we are DONE. */ apr_brigade_destroy(bb); return -1; } if (rv != APR_SUCCESS) { /* if we actually fail here, we want to just return and * stop trying to read data from the client. */ r->connection->keepalive = AP_CONN_CLOSE; apr_brigade_destroy(bb); return -1; } /* If this fails, it means that a filter is written incorrectly and that * it needs to learn how to properly handle APR_BLOCK_READ requests by * returning data when requested. */ AP_DEBUG_ASSERT(!APR_BRIGADE_EMPTY(bb)); /* Check to see if EOS in the brigade. * * If so, we have to leave a nugget for the *next* ap_get_client_block * call to return 0. */ if (APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(bb))) { if (r->read_chunked) { r->remaining = -1; } else { r->remaining = 0; } } rv = apr_brigade_flatten(bb, buffer, &bufsiz); if (rv != APR_SUCCESS) { apr_brigade_destroy(bb); return -1; } /* XXX yank me? */ r->read_length += bufsiz; apr_brigade_destroy(bb); return bufsiz; } /* Context struct for ap_http_outerror_filter */ typedef struct { int seen_eoc; } outerror_filter_ctx_t; /* Filter to handle any error buckets on output */ apr_status_t ap_http_outerror_filter(ap_filter_t *f, apr_bucket_brigade *b) { request_rec *r = f->r; outerror_filter_ctx_t *ctx = (outerror_filter_ctx_t *)(f->ctx); apr_bucket *e; /* Create context if none is present */ if (!ctx) { ctx = apr_pcalloc(r->pool, sizeof(outerror_filter_ctx_t)); f->ctx = ctx; } for (e = APR_BRIGADE_FIRST(b); e != APR_BRIGADE_SENTINEL(b); e = APR_BUCKET_NEXT(e)) { if (AP_BUCKET_IS_ERROR(e)) { /* * Start of error handling state tree. Just one condition * right now :) */ if (((ap_bucket_error *)(e->data))->status == HTTP_BAD_GATEWAY) { /* stream aborted and we have not ended it yet */ r->connection->keepalive = AP_CONN_CLOSE; } continue; } /* Detect EOC buckets and memorize this in the context. */ if (AP_BUCKET_IS_EOC(e)) { ctx->seen_eoc = 1; } } /* * Remove all data buckets that are in a brigade after an EOC bucket * was seen, as an EOC bucket tells us that no (further) resource * and protocol data should go out to the client. OTOH meta buckets * are still welcome as they might trigger needed actions down in * the chain (e.g. in network filters like SSL). * Remark 1: It is needed to dump ALL data buckets in the brigade * since an filter in between might have inserted data * buckets BEFORE the EOC bucket sent by the original * sender and we do NOT want this data to be sent. * Remark 2: Dumping all data buckets here does not necessarily mean * that no further data is send to the client as: * 1. Network filters like SSL can still be triggered via * meta buckets to talk with the client e.g. for a * clean shutdown. * 2. There could be still data that was buffered before * down in the chain that gets flushed by a FLUSH or an * EOS bucket. */ if (ctx->seen_eoc) { for (e = APR_BRIGADE_FIRST(b); e != APR_BRIGADE_SENTINEL(b); e = APR_BUCKET_NEXT(e)) { if (!APR_BUCKET_IS_METADATA(e)) { APR_BUCKET_REMOVE(e); } } } return ap_pass_brigade(f->next, b); } httpd-2.4.41/modules/http/Makefile.in0000644000000000000500000000005110150161574015724 0ustar rootsrc include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/slotmem/0002755000000000000500000000000013523273341014371 5ustar rootsrchttpd-2.4.41/modules/slotmem/mod_slotmem_shm.dsp0000644000000000000500000001101112062614564020262 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_slotmem_shm" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_slotmem_shm - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_slotmem_shm.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_slotmem_shm.mak" CFG="mod_slotmem_shm - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_slotmem_shm - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_slotmem_shm - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_slotmem_shm - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_slotmem_shm_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_slotmem_shm.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_slotmem_shm.so" /d LONG_NAME="slotmem_shm_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_slotmem_shm.so" /base:@..\..\os\win32\BaseAddr.ref,mod_slotmem_shm.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_slotmem_shm.so" /base:@..\..\os\win32\BaseAddr.ref,mod_slotmem_shm.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_slotmem_shm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_slotmem_shm - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_slotmem_shm_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_slotmem_shm.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_slotmem_shm.so" /d LONG_NAME="slotmem_shm_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_slotmem_shm.so" /base:@..\..\os\win32\BaseAddr.ref,mod_slotmem_shm.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_slotmem_shm.so" /base:@..\..\os\win32\BaseAddr.ref,mod_slotmem_shm.so # Begin Special Build Tool TargetPath=.\Debug\mod_slotmem_shm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_slotmem_shm - Win32 Release" # Name "mod_slotmem_shm - Win32 Debug" # Begin Source File SOURCE=.\mod_slotmem_shm.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/slotmem/mod_slotmem_plain.dsp0000644000000000000500000001110512062614564020602 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_slotmem_plain" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_slotmem_plain - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_slotmem_plain.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_slotmem_plain.mak" CFG="mod_slotmem_plain - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_slotmem_plain - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_slotmem_plain - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_slotmem_plain - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_slotmem_plain_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_slotmem_plain.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_slotmem_plain.so" /d LONG_NAME="slotmem_plain_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_slotmem_plain.so" /base:@..\..\os\win32\BaseAddr.ref,mod_slotmem_plain.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_slotmem_plain.so" /base:@..\..\os\win32\BaseAddr.ref,mod_slotmem_plain.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_slotmem_plain.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_slotmem_plain - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_slotmem_plain_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_slotmem_plain.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_slotmem_plain.so" /d LONG_NAME="slotmem_plain_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_slotmem_plain.so" /base:@..\..\os\win32\BaseAddr.ref,mod_slotmem_plain.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_slotmem_plain.so" /base:@..\..\os\win32\BaseAddr.ref,mod_slotmem_plain.so # Begin Special Build Tool TargetPath=.\Debug\mod_slotmem_plain.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_slotmem_plain - Win32 Release" # Name "mod_slotmem_plain - Win32 Debug" # Begin Source File SOURCE=.\mod_slotmem_plain.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/slotmem/mod_slotmem_shm.dep0000644000000000000500000000404312674411515020253 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_slotmem_shm.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_slotmem_shm.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/slotmem/mod_slotmem_plain.dep0000644000000000000500000000351312674411515020570 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_slotmem_plain.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_slotmem_plain.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/slotmem/mod_slotmem_shm.c0000644000000000000500000006126013403743120017720 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* Memory handler for a shared memory divided in slot. * This one uses shared memory. * * Shared memory is cleaned-up for each restart, graceful or * otherwise. */ #include "ap_slotmem.h" #include "httpd.h" #include "http_main.h" #include "ap_mpm.h" /* for ap_mpm_query() */ #define AP_SLOTMEM_IS_PREGRAB(t) (t->desc->type & AP_SLOTMEM_TYPE_PREGRAB) #define AP_SLOTMEM_IS_PERSIST(t) (t->desc->type & AP_SLOTMEM_TYPE_PERSIST) #define AP_SLOTMEM_IS_CLEARINUSE(t) (t->desc->type & AP_SLOTMEM_TYPE_CLEARINUSE) /* The description of the slots to reuse the slotmem */ typedef struct { apr_size_t size; /* size of each memory slot */ unsigned int num; /* number of mem slots */ ap_slotmem_type_t type; /* type-specific flags */ } sharedslotdesc_t; #define AP_SLOTMEM_OFFSET (APR_ALIGN_DEFAULT(sizeof(sharedslotdesc_t))) #define AP_UNSIGNEDINT_OFFSET (APR_ALIGN_DEFAULT(sizeof(unsigned int))) struct ap_slotmem_instance_t { char *name; /* file based SHM path/name */ char *pname; /* persisted file path/name */ int fbased; /* filebased? */ void *shm; /* ptr to memory segment (apr_shm_t *) */ void *base; /* data set start */ apr_pool_t *gpool; /* per segment pool (generation cleared) */ char *inuse; /* in-use flag table*/ unsigned int *num_free; /* slot free count for this instance */ void *persist; /* persist dataset start */ const sharedslotdesc_t *desc; /* per slot desc */ struct ap_slotmem_instance_t *next; /* location of next allocated segment */ }; /* * Layout for SHM and persited file : * * +-------------------------------------------------------------+~> * | desc | num_free | base (slots) | inuse (array) | md5 | desc | compat.. * +------+-----------------------------------------+------------+~> * ^ ^ ^ \ / ^ : * |______|_____________ SHM (mem->@) ______________| | _____|__/ * | |/ | * | ^ v | * |_____________________ File (mem->persist + [meta]) __| */ /* global pool and list of slotmem we are handling */ static struct ap_slotmem_instance_t *globallistmem = NULL; static apr_pool_t *gpool = NULL; #define DEFAULT_SLOTMEM_PREFIX "slotmem-shm-" #define DEFAULT_SLOTMEM_SUFFIX ".shm" #define DEFAULT_SLOTMEM_PERSIST_SUFFIX ".persist" /* * Persist the slotmem in a file * slotmem name and file name. * none : no persistent data * rel_name : $server_root/rel_name * /abs_name : $abs_name * */ static int slotmem_filenames(apr_pool_t *pool, const char *slotname, const char **filename, const char **persistname) { const char *fname = NULL, *pname = NULL; if (slotname && *slotname && strcasecmp(slotname, "none") != 0) { if (slotname[0] != '/') { /* Each generation needs its own file name. */ int generation = 0; ap_mpm_query(AP_MPMQ_GENERATION, &generation); fname = apr_psprintf(pool, "%s%s_%x%s", DEFAULT_SLOTMEM_PREFIX, slotname, generation, DEFAULT_SLOTMEM_SUFFIX); fname = ap_runtime_dir_relative(pool, fname); } else { /* Don't mangle the file name if given an absolute path, it's * up to the caller to provide a unique name when necessary. */ fname = slotname; } if (persistname) { /* Persisted file names are immutable... */ if (slotname[0] != '/') { pname = apr_pstrcat(pool, DEFAULT_SLOTMEM_PREFIX, slotname, DEFAULT_SLOTMEM_SUFFIX, DEFAULT_SLOTMEM_PERSIST_SUFFIX, NULL); pname = ap_runtime_dir_relative(pool, pname); } else { pname = apr_pstrcat(pool, slotname, DEFAULT_SLOTMEM_PERSIST_SUFFIX, NULL); } } } *filename = fname; if (persistname) { *persistname = pname; } return (fname != NULL); } static void slotmem_clearinuse(ap_slotmem_instance_t *slot) { unsigned int i; char *inuse; if (!slot) { return; } inuse = slot->inuse; for (i = 0; i < slot->desc->num; i++, inuse++) { if (*inuse) { *inuse = 0; (*slot->num_free)++; } } } static void store_slotmem(ap_slotmem_instance_t *slotmem) { apr_file_t *fp; apr_status_t rv; apr_size_t nbytes; unsigned char digest[APR_MD5_DIGESTSIZE]; const char *storename = slotmem->pname; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02334) "storing %s", storename); if (storename) { rv = apr_file_open(&fp, storename, APR_CREATE | APR_READ | APR_WRITE, APR_OS_DEFAULT, slotmem->gpool); if (APR_STATUS_IS_EEXIST(rv)) { apr_file_remove(storename, slotmem->gpool); rv = apr_file_open(&fp, storename, APR_CREATE | APR_READ | APR_WRITE, APR_OS_DEFAULT, slotmem->gpool); } if (rv != APR_SUCCESS) { return; } if (AP_SLOTMEM_IS_CLEARINUSE(slotmem)) { slotmem_clearinuse(slotmem); } nbytes = (slotmem->desc->size * slotmem->desc->num) + (slotmem->desc->num * sizeof(char)) + AP_UNSIGNEDINT_OFFSET; apr_md5(digest, slotmem->persist, nbytes); rv = apr_file_write_full(fp, slotmem->persist, nbytes, NULL); if (rv == APR_SUCCESS) { rv = apr_file_write_full(fp, digest, APR_MD5_DIGESTSIZE, NULL); } if (rv == APR_SUCCESS) { rv = apr_file_write_full(fp, slotmem->desc, AP_SLOTMEM_OFFSET, NULL); } apr_file_close(fp); if (rv != APR_SUCCESS) { apr_file_remove(storename, slotmem->gpool); } } } static apr_status_t restore_slotmem(sharedslotdesc_t *desc, const char *storename, apr_size_t size, apr_pool_t *pool) { apr_file_t *fp; apr_status_t rv = APR_ENOTIMPL; void *ptr = (char *)desc + AP_SLOTMEM_OFFSET; apr_size_t nbytes = size - AP_SLOTMEM_OFFSET; unsigned char digest[APR_MD5_DIGESTSIZE]; unsigned char digest2[APR_MD5_DIGESTSIZE]; char desc_buf[AP_SLOTMEM_OFFSET]; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02335) "restoring %s", storename); if (storename) { rv = apr_file_open(&fp, storename, APR_READ | APR_WRITE, APR_OS_DEFAULT, pool); if (rv == APR_SUCCESS) { rv = apr_file_read_full(fp, ptr, nbytes, NULL); if (rv == APR_SUCCESS || rv == APR_EOF) { /* * if at EOF, don't bother checking md5 * - backwards compatibility * */ if (apr_file_eof(fp) != APR_EOF) { rv = apr_file_read_full(fp, digest, APR_MD5_DIGESTSIZE, NULL); if (rv == APR_SUCCESS || rv == APR_EOF) { apr_md5(digest2, ptr, nbytes); if (memcmp(digest, digest2, APR_MD5_DIGESTSIZE)) { rv = APR_EMISMATCH; } /* * if at EOF, don't bother checking desc * - backwards compatibility * */ else if (apr_file_eof(fp) != APR_EOF) { rv = apr_file_read_full(fp, desc_buf, sizeof(desc_buf), NULL); if (rv == APR_SUCCESS || rv == APR_EOF) { if (memcmp(desc, desc_buf, sizeof(desc_buf))) { rv = APR_EMISMATCH; } else { rv = APR_SUCCESS; } } else { rv = APR_INCOMPLETE; } } else { rv = APR_EOF; } } else { rv = APR_INCOMPLETE; } } else { rv = APR_EOF; } if (rv == APR_EMISMATCH) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(02551) "persisted slotmem md5/desc mismatch"); } else if (rv == APR_EOF) { ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, APLOGNO(02552) "persisted slotmem at EOF... bypassing md5/desc match check " "(old persist file?)"); rv = APR_SUCCESS; } } else { rv = APR_INCOMPLETE; } if (rv == APR_INCOMPLETE) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(02553) "persisted slotmem read had unexpected size"); } apr_file_close(fp); } } return rv; } /* * Whether the module is called from a MPM that re-enter main() and * pre/post_config phases. */ static APR_INLINE int is_child_process(void) { #ifdef WIN32 return getenv("AP_PARENT_PID") != NULL; #else return 0; #endif } static apr_status_t cleanup_slotmem(void *param) { int is_child = is_child_process(); ap_slotmem_instance_t *next = globallistmem; while (next) { if (!is_child && AP_SLOTMEM_IS_PERSIST(next)) { store_slotmem(next); } apr_shm_destroy(next->shm); apr_shm_remove(next->name, next->gpool); next = next->next; } globallistmem = NULL; return APR_SUCCESS; } static apr_status_t slotmem_doall(ap_slotmem_instance_t *mem, ap_slotmem_callback_fn_t *func, void *data, apr_pool_t *pool) { unsigned int i; char *ptr; char *inuse; apr_status_t retval = APR_SUCCESS; if (!mem) { return APR_ENOSHMAVAIL; } ptr = (char *)mem->base; inuse = mem->inuse; for (i = 0; i < mem->desc->num; i++, inuse++) { if (!AP_SLOTMEM_IS_PREGRAB(mem) || *inuse) { retval = func((void *) ptr, data, pool); if (retval != APR_SUCCESS) break; } ptr += mem->desc->size; } return retval; } static apr_status_t slotmem_create(ap_slotmem_instance_t **new, const char *name, apr_size_t item_size, unsigned int item_num, ap_slotmem_type_t type, apr_pool_t *pool) { int fbased = 1; int restored = 0; char *ptr; sharedslotdesc_t *desc; ap_slotmem_instance_t *res; ap_slotmem_instance_t *next = globallistmem; const char *fname, *pname = NULL; apr_shm_t *shm; apr_size_t basesize = (item_size * item_num); apr_size_t size = AP_SLOTMEM_OFFSET + AP_UNSIGNEDINT_OFFSET + (item_num * sizeof(char)) + basesize; int persist = (type & AP_SLOTMEM_TYPE_PERSIST) != 0; apr_status_t rv; *new = NULL; if (gpool == NULL) { return APR_ENOSHMAVAIL; } if (slotmem_filenames(pool, name, &fname, persist ? &pname : NULL)) { /* first try to attach to existing slotmem */ if (next) { for (;;) { if (strcmp(next->name, fname) == 0) { /* we already have it */ *new = next; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02603) "create found %s in global list", fname); return APR_SUCCESS; } if (!next->next) { break; } next = next->next; } } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02602) "create didn't find %s in global list", fname); } else { fbased = 0; fname = "none"; } /* first try to attach to existing shared memory */ ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02300) "create %s: %"APR_SIZE_T_FMT"/%u", fname, item_size, item_num); { /* For MPMs that run pre/post_config() phases in both the parent * and children processes (e.g. winnt), SHMs created by the * parent exist in the children already; attach them. */ if (fbased) { if (is_child_process()) { rv = apr_shm_attach(&shm, fname, gpool); } else { apr_shm_remove(fname, pool); rv = apr_shm_create(&shm, size, fname, gpool); } } else { rv = apr_shm_create(&shm, size, NULL, gpool); } ap_log_error(APLOG_MARK, rv == APR_SUCCESS ? APLOG_DEBUG : APLOG_ERR, rv, ap_server_conf, APLOGNO(02611) "create: apr_shm_%s(%s) %s", fbased && is_child_process() ? "attach" : "create", fname, rv == APR_SUCCESS ? "succeeded" : "failed"); if (rv != APR_SUCCESS) { return rv; } desc = (sharedslotdesc_t *)apr_shm_baseaddr_get(shm); memset(desc, 0, size); desc->size = item_size; desc->num = item_num; desc->type = type; /* * TODO: Error check the below... What error makes * sense if the restore fails? Any? * For now, we continue with a fresh new slotmem, * but NOTICE in the log. */ if (persist) { rv = restore_slotmem(desc, pname, size, pool); if (rv == APR_SUCCESS) { restored = 1; } else { /* just in case, re-zero */ ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02554) "could not restore %s", fname); memset((char *)desc + AP_SLOTMEM_OFFSET, 0, size - AP_SLOTMEM_OFFSET); } } } ptr = (char *)desc + AP_SLOTMEM_OFFSET; /* For the chained slotmem stuff */ res = apr_pcalloc(gpool, sizeof(ap_slotmem_instance_t)); res->name = apr_pstrdup(gpool, fname); res->pname = apr_pstrdup(gpool, pname); res->fbased = fbased; res->shm = shm; res->persist = (void *)ptr; res->num_free = (unsigned int *)ptr; ptr += AP_UNSIGNEDINT_OFFSET; if (!restored) { *res->num_free = item_num; } res->base = (void *)ptr; res->desc = desc; res->gpool = gpool; res->next = NULL; res->inuse = ptr + basesize; if (fbased) { if (globallistmem == NULL) { globallistmem = res; } else { next->next = res; } } *new = res; return APR_SUCCESS; } static apr_status_t slotmem_attach(ap_slotmem_instance_t **new, const char *name, apr_size_t *item_size, unsigned int *item_num, apr_pool_t *pool) { char *ptr; ap_slotmem_instance_t *res; ap_slotmem_instance_t *next = globallistmem; sharedslotdesc_t *desc; const char *fname; apr_shm_t *shm; apr_status_t rv; if (gpool == NULL) { return APR_ENOSHMAVAIL; } if (!slotmem_filenames(pool, name, &fname, NULL)) { return APR_ENOSHMAVAIL; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02301) "attach looking for %s", fname); /* first try to attach to existing slotmem */ if (next) { for (;;) { if (strcmp(next->name, fname) == 0) { /* we already have it */ *new = next; *item_size = next->desc->size; *item_num = next->desc->num; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02302) "attach found %s: %"APR_SIZE_T_FMT"/%u", fname, *item_size, *item_num); return APR_SUCCESS; } if (!next->next) { break; } next = next->next; } } /* next try to attach to existing shared memory */ rv = apr_shm_attach(&shm, fname, gpool); if (rv != APR_SUCCESS) { return rv; } /* Read the description of the slotmem */ desc = (sharedslotdesc_t *)apr_shm_baseaddr_get(shm); ptr = (char *)desc + AP_SLOTMEM_OFFSET; /* For the chained slotmem stuff */ res = apr_pcalloc(gpool, sizeof(ap_slotmem_instance_t)); res->name = apr_pstrdup(gpool, fname); res->fbased = 1; res->shm = shm; res->persist = (void *)ptr; res->num_free = (unsigned int *)ptr; ptr += AP_UNSIGNEDINT_OFFSET; res->base = (void *)ptr; res->desc = desc; res->gpool = gpool; res->inuse = ptr + (desc->size * desc->num); res->next = NULL; *new = res; *item_size = desc->size; *item_num = desc->num; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02303) "attach found %s: %"APR_SIZE_T_FMT"/%u", fname, *item_size, *item_num); return APR_SUCCESS; } static apr_status_t slotmem_dptr(ap_slotmem_instance_t *slot, unsigned int id, void **mem) { char *ptr; if (!slot) { return APR_ENOSHMAVAIL; } if (id >= slot->desc->num) { return APR_EINVAL; } ptr = (char *)slot->base + slot->desc->size * id; if (!ptr) { return APR_ENOSHMAVAIL; } *mem = (void *)ptr; return APR_SUCCESS; } static apr_status_t slotmem_get(ap_slotmem_instance_t *slot, unsigned int id, unsigned char *dest, apr_size_t dest_len) { void *ptr; char *inuse; apr_status_t ret; if (!slot) { return APR_ENOSHMAVAIL; } inuse = slot->inuse + id; if (id >= slot->desc->num) { return APR_EINVAL; } if (AP_SLOTMEM_IS_PREGRAB(slot) && !*inuse) { return APR_NOTFOUND; } ret = slotmem_dptr(slot, id, &ptr); if (ret != APR_SUCCESS) { return ret; } *inuse = 1; memcpy(dest, ptr, dest_len); /* bounds check? */ return APR_SUCCESS; } static apr_status_t slotmem_put(ap_slotmem_instance_t *slot, unsigned int id, unsigned char *src, apr_size_t src_len) { void *ptr; char *inuse; apr_status_t ret; if (!slot) { return APR_ENOSHMAVAIL; } inuse = slot->inuse + id; if (id >= slot->desc->num) { return APR_EINVAL; } if (AP_SLOTMEM_IS_PREGRAB(slot) && !*inuse) { return APR_NOTFOUND; } ret = slotmem_dptr(slot, id, &ptr); if (ret != APR_SUCCESS) { return ret; } *inuse=1; memcpy(ptr, src, src_len); /* bounds check? */ return APR_SUCCESS; } static unsigned int slotmem_num_slots(ap_slotmem_instance_t *slot) { return slot->desc->num; } static unsigned int slotmem_num_free_slots(ap_slotmem_instance_t *slot) { if (AP_SLOTMEM_IS_PREGRAB(slot)) return *slot->num_free; else { unsigned int i, counter=0; char *inuse = slot->inuse; for (i=0; idesc->num; i++, inuse++) { if (!*inuse) counter++; } return counter; } } static apr_size_t slotmem_slot_size(ap_slotmem_instance_t *slot) { return slot->desc->size; } static apr_status_t slotmem_grab(ap_slotmem_instance_t *slot, unsigned int *id) { unsigned int i; char *inuse; if (!slot) { return APR_ENOSHMAVAIL; } inuse = slot->inuse; for (i = 0; i < slot->desc->num; i++, inuse++) { if (!*inuse) { break; } } if (i >= slot->desc->num) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02293) "slotmem(%s) grab failed. Num %u/num_free %u", slot->name, slotmem_num_slots(slot), slotmem_num_free_slots(slot)); return APR_EINVAL; } *inuse = 1; *id = i; (*slot->num_free)--; return APR_SUCCESS; } static apr_status_t slotmem_fgrab(ap_slotmem_instance_t *slot, unsigned int id) { char *inuse; if (!slot) { return APR_ENOSHMAVAIL; } if (id >= slot->desc->num) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02397) "slotmem(%s) fgrab failed. Num %u/num_free %u", slot->name, slotmem_num_slots(slot), slotmem_num_free_slots(slot)); return APR_EINVAL; } inuse = slot->inuse + id; if (!*inuse) { *inuse = 1; (*slot->num_free)--; } return APR_SUCCESS; } static apr_status_t slotmem_release(ap_slotmem_instance_t *slot, unsigned int id) { char *inuse; if (!slot) { return APR_ENOSHMAVAIL; } inuse = slot->inuse; if (id >= slot->desc->num || !inuse[id] ) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02294) "slotmem(%s) release failed. Num %u/inuse[%u] %d", slot->name, slotmem_num_slots(slot), id, (int)inuse[id]); if (id >= slot->desc->num) { return APR_EINVAL; } else { return APR_NOTFOUND; } } inuse[id] = 0; (*slot->num_free)++; return APR_SUCCESS; } static const ap_slotmem_provider_t storage = { "sharedmem", &slotmem_doall, &slotmem_create, &slotmem_attach, &slotmem_dptr, &slotmem_get, &slotmem_put, &slotmem_num_slots, &slotmem_num_free_slots, &slotmem_slot_size, &slotmem_grab, &slotmem_release, &slotmem_fgrab }; /* make the storage usable from outside */ static const ap_slotmem_provider_t *slotmem_shm_getstorage(void) { return (&storage); } /* * Make sure the shared memory is cleaned */ static int post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { apr_pool_cleanup_register(p, NULL, cleanup_slotmem, apr_pool_cleanup_null); return OK; } static int pre_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp) { gpool = p; globallistmem = NULL; return OK; } static void ap_slotmem_shm_register_hook(apr_pool_t *p) { const ap_slotmem_provider_t *storage = slotmem_shm_getstorage(); ap_register_provider(p, AP_SLOTMEM_PROVIDER_GROUP, "shm", AP_SLOTMEM_PROVIDER_VERSION, storage); ap_hook_post_config(post_config, NULL, NULL, APR_HOOK_LAST); ap_hook_pre_config(pre_config, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(slotmem_shm) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ NULL, /* command apr_table_t */ ap_slotmem_shm_register_hook /* register hooks */ }; httpd-2.4.41/modules/slotmem/mod_slotmem_shm.mak0000644000000000000500000002423112701473373020255 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_slotmem_shm.dsp !IF "$(CFG)" == "" CFG=mod_slotmem_shm - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_slotmem_shm - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_slotmem_shm - Win32 Release" && "$(CFG)" != "mod_slotmem_shm - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_slotmem_shm.mak" CFG="mod_slotmem_shm - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_slotmem_shm - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_slotmem_shm - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_slotmem_shm - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_slotmem_shm.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_slotmem_shm.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_slotmem_shm.obj" -@erase "$(INTDIR)\mod_slotmem_shm.res" -@erase "$(INTDIR)\mod_slotmem_shm_src.idb" -@erase "$(INTDIR)\mod_slotmem_shm_src.pdb" -@erase "$(OUTDIR)\mod_slotmem_shm.exp" -@erase "$(OUTDIR)\mod_slotmem_shm.lib" -@erase "$(OUTDIR)\mod_slotmem_shm.pdb" -@erase "$(OUTDIR)\mod_slotmem_shm.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_slotmem_shm_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_slotmem_shm.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_slotmem_shm.so" /d LONG_NAME="slotmem_shm_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_slotmem_shm.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_slotmem_shm.pdb" /debug /out:"$(OUTDIR)\mod_slotmem_shm.so" /implib:"$(OUTDIR)\mod_slotmem_shm.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_slotmem_shm.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_slotmem_shm.obj" \ "$(INTDIR)\mod_slotmem_shm.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_slotmem_shm.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_slotmem_shm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_slotmem_shm.so" if exist .\Release\mod_slotmem_shm.so.manifest mt.exe -manifest .\Release\mod_slotmem_shm.so.manifest -outputresource:.\Release\mod_slotmem_shm.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_slotmem_shm - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_slotmem_shm.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_slotmem_shm.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_slotmem_shm.obj" -@erase "$(INTDIR)\mod_slotmem_shm.res" -@erase "$(INTDIR)\mod_slotmem_shm_src.idb" -@erase "$(INTDIR)\mod_slotmem_shm_src.pdb" -@erase "$(OUTDIR)\mod_slotmem_shm.exp" -@erase "$(OUTDIR)\mod_slotmem_shm.lib" -@erase "$(OUTDIR)\mod_slotmem_shm.pdb" -@erase "$(OUTDIR)\mod_slotmem_shm.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_slotmem_shm_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_slotmem_shm.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_slotmem_shm.so" /d LONG_NAME="slotmem_shm_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_slotmem_shm.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_slotmem_shm.pdb" /debug /out:"$(OUTDIR)\mod_slotmem_shm.so" /implib:"$(OUTDIR)\mod_slotmem_shm.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_slotmem_shm.so LINK32_OBJS= \ "$(INTDIR)\mod_slotmem_shm.obj" \ "$(INTDIR)\mod_slotmem_shm.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_slotmem_shm.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_slotmem_shm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_slotmem_shm.so" if exist .\Debug\mod_slotmem_shm.so.manifest mt.exe -manifest .\Debug\mod_slotmem_shm.so.manifest -outputresource:.\Debug\mod_slotmem_shm.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_slotmem_shm.dep") !INCLUDE "mod_slotmem_shm.dep" !ELSE !MESSAGE Warning: cannot find "mod_slotmem_shm.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_slotmem_shm - Win32 Release" || "$(CFG)" == "mod_slotmem_shm - Win32 Debug" !IF "$(CFG)" == "mod_slotmem_shm - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\slotmem" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\slotmem" !ELSEIF "$(CFG)" == "mod_slotmem_shm - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\slotmem" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\slotmem" !ENDIF !IF "$(CFG)" == "mod_slotmem_shm - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\slotmem" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\slotmem" !ELSEIF "$(CFG)" == "mod_slotmem_shm - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\slotmem" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\slotmem" !ENDIF !IF "$(CFG)" == "mod_slotmem_shm - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\slotmem" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\slotmem" !ELSEIF "$(CFG)" == "mod_slotmem_shm - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\slotmem" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\slotmem" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_slotmem_shm - Win32 Release" "$(INTDIR)\mod_slotmem_shm.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_slotmem_shm.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_slotmem_shm.so" /d LONG_NAME="slotmem_shm_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_slotmem_shm - Win32 Debug" "$(INTDIR)\mod_slotmem_shm.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_slotmem_shm.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_slotmem_shm.so" /d LONG_NAME="slotmem_shm_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_slotmem_shm.c "$(INTDIR)\mod_slotmem_shm.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/slotmem/NWGNUmakefile0000644000000000000500000000776111540562746016730 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/slotmem_plain.nlm \ $(OBJDIR)/slotmem_shm.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/slotmem/NWGNUslotmem_plain0000644000000000000500000001024011540546347017777 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = slotmem_plain # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Slotmem Plain Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Slotmem Plain Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_slotmem_plain.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ slotmem_plain_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/slotmem/config.m40000644000000000000500000000052311665401625016101 0ustar rootsrcdnl modules enabled in this directory by default dnl APACHE_MODULE(name, helptext[, objects[, structname[, default[, config]]]]) APACHE_MODPATH_INIT(slotmem) APACHE_MODULE(slotmem_shm, slotmem provider that uses shared memory, , , most) APACHE_MODULE(slotmem_plain, slotmem provider that uses plain memory, , , ) APACHE_MODPATH_FINISH httpd-2.4.41/modules/slotmem/mod_slotmem_plain.c0000644000000000000500000002161412063353435020242 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* Memory handler for a plain memory divided in slot. * This one uses plain memory. */ #include "ap_slotmem.h" #define AP_SLOTMEM_IS_PREGRAB(t) (t->type & AP_SLOTMEM_TYPE_PREGRAB) struct ap_slotmem_instance_t { char *name; /* per segment name */ void *base; /* data set start */ apr_size_t size; /* size of each memory slot */ unsigned int num; /* number of mem slots */ apr_pool_t *gpool; /* per segment global pool */ char *inuse; /* in-use flag table*/ ap_slotmem_type_t type; /* type-specific flags */ struct ap_slotmem_instance_t *next; /* location of next allocated segment */ }; /* global pool and list of slotmem we are handling */ static struct ap_slotmem_instance_t *globallistmem = NULL; static apr_pool_t *gpool = NULL; static apr_status_t slotmem_do(ap_slotmem_instance_t *mem, ap_slotmem_callback_fn_t *func, void *data, apr_pool_t *pool) { unsigned int i; char *ptr; char *inuse; apr_status_t retval = APR_SUCCESS; if (!mem) return APR_ENOSHMAVAIL; ptr = (char *)mem->base; inuse = mem->inuse; for (i = 0; i < mem->num; i++, inuse++) { if (!AP_SLOTMEM_IS_PREGRAB(mem) || (AP_SLOTMEM_IS_PREGRAB(mem) && *inuse)) { retval = func((void *) ptr, data, pool); if (retval != APR_SUCCESS) break; } ptr += mem->size; } return retval; } static apr_status_t slotmem_create(ap_slotmem_instance_t **new, const char *name, apr_size_t item_size, unsigned int item_num, ap_slotmem_type_t type, apr_pool_t *pool) { ap_slotmem_instance_t *res; ap_slotmem_instance_t *next = globallistmem; apr_size_t basesize = (item_size * item_num); const char *fname; if (name) { if (name[0] == ':') fname = name; else fname = ap_runtime_dir_relative(pool, name); /* first try to attach to existing slotmem */ if (next) { for (;;) { if (strcmp(next->name, fname) == 0) { /* we already have it */ *new = next; return APR_SUCCESS; } if (!next->next) { break; } next = next->next; } } } else fname = "anonymous"; /* create the memory using the gpool */ res = (ap_slotmem_instance_t *) apr_pcalloc(gpool, sizeof(ap_slotmem_instance_t)); res->base = apr_pcalloc(gpool, basesize + (item_num * sizeof(char))); if (!res->base) return APR_ENOSHMAVAIL; /* For the chained slotmem stuff */ res->name = apr_pstrdup(gpool, fname); res->size = item_size; res->num = item_num; res->next = NULL; res->type = type; res->inuse = (char *)res->base + basesize; if (globallistmem == NULL) globallistmem = res; else next->next = res; *new = res; return APR_SUCCESS; } static apr_status_t slotmem_attach(ap_slotmem_instance_t **new, const char *name, apr_size_t *item_size, unsigned int *item_num, apr_pool_t *pool) { ap_slotmem_instance_t *next = globallistmem; const char *fname; if (name) { if (name[0] == ':') fname = name; else fname = ap_runtime_dir_relative(pool, name); } else return APR_ENOSHMAVAIL; /* first try to attach to existing slotmem */ while (next) { if (strcmp(next->name, fname) == 0) { /* we already have it */ *new = next; *item_size = next->size; *item_num = next->num; return APR_SUCCESS; } next = next->next; } return APR_ENOSHMAVAIL; } static apr_status_t slotmem_dptr(ap_slotmem_instance_t *score, unsigned int id, void **mem) { char *ptr; if (!score) return APR_ENOSHMAVAIL; if (id >= score->num) return APR_EINVAL; ptr = (char *)score->base + score->size * id; if (!ptr) return APR_ENOSHMAVAIL; *mem = ptr; return APR_SUCCESS; } static apr_status_t slotmem_get(ap_slotmem_instance_t *slot, unsigned int id, unsigned char *dest, apr_size_t dest_len) { void *ptr; char *inuse; apr_status_t ret; if (!slot) { return APR_ENOSHMAVAIL; } inuse = slot->inuse + id; if (id >= slot->num) { return APR_EINVAL; } if (AP_SLOTMEM_IS_PREGRAB(slot) && !*inuse) { return APR_NOTFOUND; } ret = slotmem_dptr(slot, id, &ptr); if (ret != APR_SUCCESS) { return ret; } *inuse=1; memcpy(dest, ptr, dest_len); /* bounds check? */ return APR_SUCCESS; } static apr_status_t slotmem_put(ap_slotmem_instance_t *slot, unsigned int id, unsigned char *src, apr_size_t src_len) { void *ptr; char *inuse; apr_status_t ret; if (!slot) { return APR_ENOSHMAVAIL; } inuse = slot->inuse + id; if (id >= slot->num) { return APR_EINVAL; } if (AP_SLOTMEM_IS_PREGRAB(slot) && !*inuse) { return APR_NOTFOUND; } ret = slotmem_dptr(slot, id, &ptr); if (ret != APR_SUCCESS) { return ret; } *inuse=1; memcpy(ptr, src, src_len); /* bounds check? */ return APR_SUCCESS; } static unsigned int slotmem_num_slots(ap_slotmem_instance_t *slot) { return slot->num; } static unsigned int slotmem_num_free_slots(ap_slotmem_instance_t *slot) { unsigned int i, counter=0; char *inuse = slot->inuse; for (i = 0; i < slot->num; i++, inuse++) { if (!*inuse) counter++; } return counter; } static apr_size_t slotmem_slot_size(ap_slotmem_instance_t *slot) { return slot->size; } /* * XXXX: if !AP_SLOTMEM_IS_PREGRAB, then still worry about * inuse for grab and return? */ static apr_status_t slotmem_grab(ap_slotmem_instance_t *slot, unsigned int *id) { unsigned int i; char *inuse; if (!slot) { return APR_ENOSHMAVAIL; } inuse = slot->inuse; for (i = 0; i < slot->num; i++, inuse++) { if (!*inuse) { break; } } if (i >= slot->num) { return APR_EINVAL; } *inuse = 1; *id = i; return APR_SUCCESS; } static apr_status_t slotmem_fgrab(ap_slotmem_instance_t *slot, unsigned int id) { char *inuse; if (!slot) { return APR_ENOSHMAVAIL; } if (id >= slot->num) { return APR_EINVAL; } inuse = slot->inuse + id; *inuse = 1; return APR_SUCCESS; } static apr_status_t slotmem_release(ap_slotmem_instance_t *slot, unsigned int id) { char *inuse; if (!slot) { return APR_ENOSHMAVAIL; } inuse = slot->inuse; if (id >= slot->num) { return APR_EINVAL; } if (!inuse[id] ) { return APR_NOTFOUND; } inuse[id] = 0; return APR_SUCCESS; } static const ap_slotmem_provider_t storage = { "plainmem", &slotmem_do, &slotmem_create, &slotmem_attach, &slotmem_dptr, &slotmem_get, &slotmem_put, &slotmem_num_slots, &slotmem_num_free_slots, &slotmem_slot_size, &slotmem_grab, &slotmem_release, &slotmem_fgrab }; static int pre_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp) { gpool = p; return OK; } static void ap_slotmem_plain_register_hook(apr_pool_t *p) { /* XXX: static const char * const prePos[] = { "mod_slotmem.c", NULL }; */ ap_register_provider(p, AP_SLOTMEM_PROVIDER_GROUP, "plain", AP_SLOTMEM_PROVIDER_VERSION, &storage); ap_hook_pre_config(pre_config, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(slotmem_plain) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ NULL, /* command apr_table_t */ ap_slotmem_plain_register_hook /* register hooks */ }; httpd-2.4.41/modules/slotmem/NWGNUslotmem_shm0000644000000000000500000001022611540546347017467 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = slotmem_shm # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Slotmem SHM Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Slotmem SHM Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_slotmem_shm.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ slotmem_shm_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/slotmem/Makefile.in0000644000000000000500000000026711203275423016435 0ustar rootsrc# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/slotmem/mod_slotmem_plain.mak0000644000000000000500000002451112701473373020572 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_slotmem_plain.dsp !IF "$(CFG)" == "" CFG=mod_slotmem_plain - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_slotmem_plain - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_slotmem_plain - Win32 Release" && "$(CFG)" != "mod_slotmem_plain - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_slotmem_plain.mak" CFG="mod_slotmem_plain - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_slotmem_plain - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_slotmem_plain - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_slotmem_plain - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_slotmem_plain.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_slotmem_plain.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_slotmem_plain.obj" -@erase "$(INTDIR)\mod_slotmem_plain.res" -@erase "$(INTDIR)\mod_slotmem_plain_src.idb" -@erase "$(INTDIR)\mod_slotmem_plain_src.pdb" -@erase "$(OUTDIR)\mod_slotmem_plain.exp" -@erase "$(OUTDIR)\mod_slotmem_plain.lib" -@erase "$(OUTDIR)\mod_slotmem_plain.pdb" -@erase "$(OUTDIR)\mod_slotmem_plain.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_slotmem_plain_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_slotmem_plain.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_slotmem_plain.so" /d LONG_NAME="slotmem_plain_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_slotmem_plain.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_slotmem_plain.pdb" /debug /out:"$(OUTDIR)\mod_slotmem_plain.so" /implib:"$(OUTDIR)\mod_slotmem_plain.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_slotmem_plain.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_slotmem_plain.obj" \ "$(INTDIR)\mod_slotmem_plain.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_slotmem_plain.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_slotmem_plain.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_slotmem_plain.so" if exist .\Release\mod_slotmem_plain.so.manifest mt.exe -manifest .\Release\mod_slotmem_plain.so.manifest -outputresource:.\Release\mod_slotmem_plain.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_slotmem_plain - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_slotmem_plain.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_slotmem_plain.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_slotmem_plain.obj" -@erase "$(INTDIR)\mod_slotmem_plain.res" -@erase "$(INTDIR)\mod_slotmem_plain_src.idb" -@erase "$(INTDIR)\mod_slotmem_plain_src.pdb" -@erase "$(OUTDIR)\mod_slotmem_plain.exp" -@erase "$(OUTDIR)\mod_slotmem_plain.lib" -@erase "$(OUTDIR)\mod_slotmem_plain.pdb" -@erase "$(OUTDIR)\mod_slotmem_plain.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_slotmem_plain_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_slotmem_plain.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_slotmem_plain.so" /d LONG_NAME="slotmem_plain_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_slotmem_plain.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_slotmem_plain.pdb" /debug /out:"$(OUTDIR)\mod_slotmem_plain.so" /implib:"$(OUTDIR)\mod_slotmem_plain.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_slotmem_plain.so LINK32_OBJS= \ "$(INTDIR)\mod_slotmem_plain.obj" \ "$(INTDIR)\mod_slotmem_plain.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_slotmem_plain.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_slotmem_plain.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_slotmem_plain.so" if exist .\Debug\mod_slotmem_plain.so.manifest mt.exe -manifest .\Debug\mod_slotmem_plain.so.manifest -outputresource:.\Debug\mod_slotmem_plain.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_slotmem_plain.dep") !INCLUDE "mod_slotmem_plain.dep" !ELSE !MESSAGE Warning: cannot find "mod_slotmem_plain.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_slotmem_plain - Win32 Release" || "$(CFG)" == "mod_slotmem_plain - Win32 Debug" !IF "$(CFG)" == "mod_slotmem_plain - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\slotmem" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\slotmem" !ELSEIF "$(CFG)" == "mod_slotmem_plain - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\slotmem" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\slotmem" !ENDIF !IF "$(CFG)" == "mod_slotmem_plain - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\slotmem" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\slotmem" !ELSEIF "$(CFG)" == "mod_slotmem_plain - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\slotmem" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\slotmem" !ENDIF !IF "$(CFG)" == "mod_slotmem_plain - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\slotmem" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\slotmem" !ELSEIF "$(CFG)" == "mod_slotmem_plain - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\slotmem" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\slotmem" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_slotmem_plain - Win32 Release" "$(INTDIR)\mod_slotmem_plain.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_slotmem_plain.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_slotmem_plain.so" /d LONG_NAME="slotmem_plain_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_slotmem_plain - Win32 Debug" "$(INTDIR)\mod_slotmem_plain.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_slotmem_plain.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_slotmem_plain.so" /d LONG_NAME="slotmem_plain_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_slotmem_plain.c "$(INTDIR)\mod_slotmem_plain.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/NWGNUmakefile0000644000000000000500000000504012757564422015240 0ustar rootsrc# # To build with exerimental modules set the environment # variable WITH_EXPERIMENTAL=1 # To build with the mod_ssl module set the environment # variable WITH_SSL=1 # To build with the mod_lua module set the environment # variable WITH_LUA=1 # To build with the mod_http2 module set the environment # variable WITH_HTTP2=1 # # Check if LDAP is enabled in APR-UTIL # include $(AP_WORK)/build/NWGNUenvironment.inc ifeq "$(wildcard $(APRUTIL)/include/apr_ldap.h)" "$(APRUTIL)/include/apr_ldap.h" WITH_LDAP = $(shell $(AWK) '/^\#define APR_HAS_LDAP /{print $$3}' $(APRUTIL)/include/apr_ldap.h) else WITH_LDAP = 1 ifneq "$(MAKECMDGOALS)" "clean" ifneq "$(findstring clobber_,$(MAKECMDGOALS))" "clobber_" WITH_LDAP = 0 endif endif endif # If USE_STDSOCKETS is defined we always build mod_ssl ifdef USE_STDSOCKETS WITH_SSL = 1 endif # # Declare the sub-directories to be built here # SUBDIRS = \ aaa \ cache \ cluster \ core \ dav/main \ dav/fs \ dav/lock \ echo \ examples \ generators \ loggers \ mappers \ metadata \ proxy \ filters \ database \ session \ slotmem \ $(EOLIST) # If WITH_LDAP and LDAPSDK have been defined then build the util_ldap module ifeq "$(WITH_LDAP)" "1" ifneq "$(LDAPSDK)" "" SUBDIRS += ldap endif endif # If WITH_SSL and OSSLSDK have been defined then build the mod_ssl module ifeq "$(WITH_SSL)" "1" ifneq "$(OSSLSDK)" "" SUBDIRS += ssl endif endif # If WITH_LUA and LUASRC have been defined then build the mod_lua module ifeq "$(WITH_LUA)" "1" ifneq "$(LUASRC)" "" SUBDIRS += lua endif endif # Allow the mod_http2 module to be built if WITH_HTTP2 is defined ifeq "$(WITH_HTTP2)" "1" ifneq "$(NGH2SRC)" "" SUBDIRS += http2 endif endif # Allow the experimental modules to be built if WITH_EXPERIMENTAL is defined ifeq "$(WITH_EXPERIMENTAL)" "1" SUBDIRS += experimental endif # Allow the debugging modules to be built if WITH_DEBUGGING is defined ifeq "$(WITH_DEBUGGING)" "1" SUBDIRS += debugging endif # Allow the test modules to be built if WITH_TEST is defined ifeq "$(WITH_TEST)" "1" SUBDIRS += test endif #If the mod_edir directory exists then build the mod_edir module ifeq "$(wildcard $(STDMOD)/mod_edir)" "$(STDMOD)/mod_edir" SUBDIRS += mod_edir endif # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files ifeq "$(wildcard NWGNUmakefile.mak)" "NWGNUmakefile.mak" include NWGNUmakefile.mak endif # # You can use this target if all that is needed is to copy files to the # installation area # install :: nlms FORCE httpd-2.4.41/modules/arch/0002755000000000000500000000000013523273343013630 5ustar rootsrchttpd-2.4.41/modules/arch/unix/0002755000000000000500000000000013523273343014613 5ustar rootsrchttpd-2.4.41/modules/arch/unix/mod_unixd.c0000644000000000000500000003204713303573314016746 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_main.h" #include "http_log.h" #include "http_core.h" #include "mpm_common.h" #include "os.h" #include "ap_mpm.h" #include "mod_unixd.h" #include "apr_thread_proc.h" #include "apr_strings.h" #include "apr_portable.h" #ifdef HAVE_PWD_H #include #endif #ifdef HAVE_SYS_RESOURCE_H #include #endif /* XXX */ #include #ifdef HAVE_UNISTD_H #include #endif #ifdef HAVE_GRP_H #include #endif #ifdef HAVE_STRINGS_H #include #endif #ifdef HAVE_SYS_SEM_H #include #endif #ifdef HAVE_SYS_PRCTL_H #include #endif #ifndef DEFAULT_USER #define DEFAULT_USER "#-1" #endif #ifndef DEFAULT_GROUP #define DEFAULT_GROUP "#-1" #endif #if 0 typedef struct { const char *user_name; uid_t user_id; gid_t group_id; const char *chroot_dir; } unixd_config_t; #else /* * TODO: clean up the separation between this code * and its data structures and unixd.c, as shown * by the fact that we include unixd.h. Create * mod_unixd.h which does what we need and * clean up unixd.h for what it no longer needs */ #include "unixd.h" #endif /* Set group privileges. * * Note that we use the username as set in the config files, rather than * the lookup of to uid --- the same uid may have multiple passwd entries, * with different sets of groups for each. */ static int set_group_privs(void) { if (!geteuid()) { const char *name; /* Get username if passed as a uid */ if (ap_unixd_config.user_name[0] == '#') { struct passwd *ent; uid_t uid = atol(&ap_unixd_config.user_name[1]); if ((ent = getpwuid(uid)) == NULL) { ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02155) "getpwuid: couldn't determine user name from uid %ld, " "you probably need to modify the User directive", (long)uid); return -1; } name = ent->pw_name; } else name = ap_unixd_config.user_name; #if !defined(OS2) /* OS/2 doesn't support groups. */ /* * Set the GID before initgroups(), since on some platforms * setgid() is known to zap the group list. */ if (setgid(ap_unixd_config.group_id) == -1) { ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02156) "setgid: unable to set group id to Group %ld", (long)ap_unixd_config.group_id); return -1; } /* Reset `groups' attributes. */ if (initgroups(name, ap_unixd_config.group_id) == -1) { ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02157) "initgroups: unable to set groups for User %s " "and Group %ld", name, (long)ap_unixd_config.group_id); return -1; } #endif /* !defined(OS2) */ } return 0; } static int unixd_drop_privileges(apr_pool_t *pool, server_rec *s) { int rv = set_group_privs(); if (rv) { return rv; } if (NULL != ap_unixd_config.chroot_dir) { if (geteuid()) { rv = errno; ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02158) "Cannot chroot when not started as root"); return rv; } if (chdir(ap_unixd_config.chroot_dir) != 0) { rv = errno; ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02159) "Can't chdir to %s", ap_unixd_config.chroot_dir); return rv; } if (chroot(ap_unixd_config.chroot_dir) != 0) { rv = errno; ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02160) "Can't chroot to %s", ap_unixd_config.chroot_dir); return rv; } if (chdir("/") != 0) { rv = errno; ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02161) "Can't chdir to new root"); return rv; } } /* Only try to switch if we're running as root */ if (!geteuid() && ( #ifdef _OSD_POSIX os_init_job_environment(NULL, ap_unixd_config.user_name, ap_exists_config_define("DEBUG")) != 0 || #endif setuid(ap_unixd_config.user_id) == -1)) { rv = errno; ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02162) "setuid: unable to change to uid: %ld", (long) ap_unixd_config.user_id); return rv; } #if defined(HAVE_PRCTL) && defined(PR_SET_DUMPABLE) /* this applies to Linux 2.4+ */ if (ap_coredumpdir_configured) { if (prctl(PR_SET_DUMPABLE, 1)) { rv = errno; ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02163) "set dumpable failed - this child will not coredump" " after software errors"); return rv; } } #endif return OK; } static const char * unixd_set_user(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_unixd_config.user_name = arg; ap_unixd_config.user_id = ap_uname2id(arg); #if !defined (BIG_SECURITY_HOLE) && !defined (OS2) if (ap_unixd_config.user_id == 0) { return "Error:\tApache has not been designed to serve pages while\n" "\trunning as root. There are known race conditions that\n" "\twill allow any local user to read any file on the system.\n" "\tIf you still desire to serve pages as root then\n" "\tadd -DBIG_SECURITY_HOLE to the CFLAGS env variable\n" "\tand then rebuild the server.\n" "\tIt is strongly suggested that you instead modify the User\n" "\tdirective in your httpd.conf file to list a non-root\n" "\tuser.\n"; } #endif return NULL; } static const char* unixd_set_group(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ap_unixd_config.group_name = arg; ap_unixd_config.group_id = ap_gname2id(arg); return NULL; } static const char* unixd_set_chroot_dir(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (!ap_is_directory(cmd->pool, arg)) { return "ChrootDir must be a valid directory"; } ap_unixd_config.chroot_dir = arg; return NULL; } static const char * unixd_set_suexec(cmd_parms *cmd, void *dummy, int arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (!ap_unixd_config.suexec_enabled && arg) { return apr_pstrcat(cmd->pool, "suEXEC isn't supported: ", ap_unixd_config.suexec_disabled_reason, NULL); } if (!arg) { ap_unixd_config.suexec_disabled_reason = "Suexec directive is Off"; } ap_unixd_config.suexec_enabled = arg; return NULL; } #ifdef AP_SUEXEC_CAPABILITIES /* If suexec is using capabilities, don't test for the setuid bit. */ #define SETUID_TEST(finfo) (1) #else #define SETUID_TEST(finfo) (finfo.protection & APR_USETID) #endif static int unixd_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { apr_finfo_t wrapper; ap_unixd_config.user_name = DEFAULT_USER; ap_unixd_config.user_id = ap_uname2id(DEFAULT_USER); ap_unixd_config.group_name = DEFAULT_GROUP; ap_unixd_config.group_id = ap_gname2id(DEFAULT_GROUP); ap_unixd_config.chroot_dir = NULL; /* none */ /* Check for suexec */ ap_unixd_config.suexec_enabled = 0; if ((apr_stat(&wrapper, SUEXEC_BIN, APR_FINFO_NORM, ptemp)) == APR_SUCCESS) { if (SETUID_TEST(wrapper) && wrapper.user == 0 && (access(SUEXEC_BIN, R_OK|X_OK) == 0)) { ap_unixd_config.suexec_enabled = 1; ap_unixd_config.suexec_disabled_reason = ""; } else { ap_unixd_config.suexec_disabled_reason = "Invalid owner or file mode for " SUEXEC_BIN; } } else { ap_unixd_config.suexec_disabled_reason = "Missing suexec binary " SUEXEC_BIN; } ap_sys_privileges_handlers(1); return OK; } AP_DECLARE(int) ap_unixd_setup_child(void) { if (set_group_privs()) { return -1; } if (NULL != ap_unixd_config.chroot_dir) { if (geteuid()) { ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02164) "Cannot chroot when not started as root"); return -1; } if (chdir(ap_unixd_config.chroot_dir) != 0) { ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02165) "Can't chdir to %s", ap_unixd_config.chroot_dir); return -1; } if (chroot(ap_unixd_config.chroot_dir) != 0) { ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02166) "Can't chroot to %s", ap_unixd_config.chroot_dir); return -1; } if (chdir("/") != 0) { ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02167) "Can't chdir to new root"); return -1; } } /* Only try to switch if we're running as root */ if (!geteuid() && ( #ifdef _OSD_POSIX os_init_job_environment(NULL, ap_unixd_config.user_name, ap_exists_config_define("DEBUG")) != 0 || #endif setuid(ap_unixd_config.user_id) == -1)) { ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02168) "setuid: unable to change to uid: %ld", (long) ap_unixd_config.user_id); return -1; } #if defined(HAVE_PRCTL) && defined(PR_SET_DUMPABLE) /* this applies to Linux 2.4+ */ if (ap_coredumpdir_configured) { if (prctl(PR_SET_DUMPABLE, 1)) { ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL, APLOGNO(02169) "set dumpable failed - this child will not coredump" " after software errors"); } } #endif return 0; } static void unixd_dump_config(apr_pool_t *p, server_rec *s) { apr_file_t *out = NULL; apr_uid_t uid = ap_unixd_config.user_id; apr_gid_t gid = ap_unixd_config.group_id; char *no_root = ""; if (!ap_exists_config_define("DUMP_RUN_CFG")) return; if (geteuid() != 0) no_root = " not_used"; apr_file_open_stdout(&out, p); apr_file_printf(out, "User: name=\"%s\" id=%lu%s\n", ap_unixd_config.user_name, (unsigned long)uid, no_root); apr_file_printf(out, "Group: name=\"%s\" id=%lu%s\n", ap_unixd_config.group_name, (unsigned long)gid, no_root); if (ap_unixd_config.chroot_dir) apr_file_printf(out, "ChrootDir: \"%s\"%s\n", ap_unixd_config.chroot_dir, no_root); } static void unixd_hooks(apr_pool_t *pool) { ap_hook_pre_config(unixd_pre_config, NULL, NULL, APR_HOOK_FIRST); ap_hook_test_config(unixd_dump_config, NULL, NULL, APR_HOOK_FIRST); ap_hook_drop_privileges(unixd_drop_privileges, NULL, NULL, APR_HOOK_MIDDLE); } static const command_rec unixd_cmds[] = { AP_INIT_TAKE1("User", unixd_set_user, NULL, RSRC_CONF, "Effective user id for this server"), AP_INIT_TAKE1("Group", unixd_set_group, NULL, RSRC_CONF, "Effective group id for this server"), AP_INIT_TAKE1("ChrootDir", unixd_set_chroot_dir, NULL, RSRC_CONF, "The directory to chroot(2) into"), AP_INIT_FLAG("Suexec", unixd_set_suexec, NULL, RSRC_CONF, "Enable or disable suEXEC support"), {NULL} }; AP_DECLARE_MODULE(unixd) = { STANDARD20_MODULE_STUFF, NULL, NULL, NULL, NULL, unixd_cmds, unixd_hooks }; httpd-2.4.41/modules/arch/unix/mod_privileges.c0000644000000000000500000005262112661357032017773 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include "httpd.h" #include "http_config.h" #include "http_protocol.h" #include "http_log.h" #include "mpm_common.h" #include "ap_mpm.h" #include "apr_strings.h" /* TODO - get rid of unixd dependency */ #include "unixd.h" #define CFG_CHECK(x) if ((x) == -1) { \ char msgbuf[128]; \ apr_strerror(errno, msgbuf, sizeof(msgbuf)); \ return apr_pstrdup(cmd->pool, msgbuf); \ } #define CR_CHECK(x, y) if (x == -1) \ ap_log_error(APLOG_MARK, APLOG_CRIT, errno, 0, y \ "Failed to initialise privileges") module AP_MODULE_DECLARE_DATA privileges_module; /* #define BIG_SECURITY_HOLE 1 */ typedef enum { PRIV_UNSET, PRIV_FAST, PRIV_SECURE, PRIV_SELECTIVE } priv_mode; typedef struct { priv_set_t *priv; priv_set_t *child_priv; uid_t uid; gid_t gid; priv_mode mode; } priv_cfg; typedef struct { priv_mode mode; } priv_dir_cfg; static priv_set_t *priv_setid; static priv_set_t *priv_default = NULL; static int dtrace_enabled = 0; static apr_status_t priv_cfg_cleanup(void *CFG) { priv_cfg *cfg = CFG; priv_freeset(cfg->priv); priv_freeset(cfg->child_priv); return APR_SUCCESS; } static void *privileges_merge_cfg(apr_pool_t *pool, void *BASE, void *ADD) { /* inherit the mode if it's not set; the rest won't be inherited */ priv_cfg *base = BASE; priv_cfg *add = ADD; priv_cfg *ret = apr_pmemdup(pool, add, sizeof(priv_cfg)); ret->mode = (add->mode == PRIV_UNSET) ? base->mode : add->mode; return ret; } static void *privileges_create_cfg(apr_pool_t *pool, server_rec *s) { priv_cfg *cfg = apr_palloc(pool, sizeof(priv_cfg)); /* Start at basic privileges all round. */ cfg->priv = priv_str_to_set("basic", ",", NULL); cfg->child_priv = priv_str_to_set("basic", ",", NULL); /* By default, run in secure vhost mode. * That means dropping basic privileges we don't usually need. */ CR_CHECK(priv_delset(cfg->priv, PRIV_FILE_LINK_ANY), APLOGNO(03160)); CR_CHECK(priv_delset(cfg->priv, PRIV_PROC_INFO), APLOGNO(03161)); CR_CHECK(priv_delset(cfg->priv, PRIV_PROC_SESSION), APLOGNO(03162)); /* Hmmm, should CGI default to secure too ? */ /* CR_CHECK(priv_delset(cfg->child_priv, PRIV_FILE_LINK_ANY), APLOGNO(03163)); CR_CHECK(priv_delset(cfg->child_priv, PRIV_PROC_INFO), APLOGNO(03164)); CR_CHECK(priv_delset(cfg->child_priv, PRIV_PROC_SESSION), APLOGNO(03165)); CR_CHECK(priv_delset(cfg->child_priv, PRIV_PROC_FORK), APLOGNO(03166)); CR_CHECK(priv_delset(cfg->child_priv, PRIV_PROC_EXEC), APLOGNO(03167)); */ /* we´ll use 0 for unset */ cfg->uid = 0; cfg->gid = 0; cfg->mode = PRIV_UNSET; apr_pool_cleanup_register(pool, cfg, priv_cfg_cleanup, apr_pool_cleanup_null); /* top-level default_priv wants the top-level cfg */ if (priv_default == NULL) { priv_default = cfg->priv; } return cfg; } static void *privileges_create_dir_cfg(apr_pool_t *pool, char *dummy) { priv_dir_cfg *cfg = apr_palloc(pool, sizeof(priv_dir_cfg)); cfg->mode = PRIV_UNSET; return cfg; } static void *privileges_merge_dir_cfg(apr_pool_t *pool, void *BASE, void *ADD) { priv_dir_cfg *base = BASE; priv_dir_cfg *add = ADD; priv_dir_cfg *ret = apr_palloc(pool, sizeof(priv_dir_cfg)); ret->mode = (add->mode == PRIV_UNSET) ? base->mode : add->mode; return ret; } static apr_status_t privileges_end_req(void *data) { request_rec *r = data; priv_cfg *cfg = ap_get_module_config(r->server->module_config, &privileges_module); priv_dir_cfg *dcfg = ap_get_module_config(r->per_dir_config, &privileges_module); /* ugly hack: grab default uid and gid from unixd */ extern unixd_config_rec ap_unixd_config; /* If we forked a child, we dropped privilege to revert, so * all we can do now is exit */ if ((cfg->mode == PRIV_SECURE) || ((cfg->mode == PRIV_SELECTIVE) && (dcfg->mode == PRIV_SECURE))) { exit(0); } /* if either user or group are not the default, restore them */ if (cfg->uid || cfg->gid) { if (setppriv(PRIV_ON, PRIV_EFFECTIVE, priv_setid) == -1) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02136) "PRIV_ON failed restoring default user/group"); } if (cfg->uid && (setuid(ap_unixd_config.user_id) == -1)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02137) "Error restoring default userid"); } if (cfg->gid && (setgid(ap_unixd_config.group_id) == -1)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02138) "Error restoring default group"); } } /* restore default privileges */ if (setppriv(PRIV_SET, PRIV_EFFECTIVE, priv_default) == -1) { ap_log_rerror(APLOG_MARK, APLOG_ERR, errno, r, APLOGNO(02139) "Error restoring default privileges"); } return APR_SUCCESS; } static int privileges_req(request_rec *r) { /* secure mode: fork a process to handle the request */ apr_proc_t proc; apr_status_t rv; int exitcode; apr_exit_why_e exitwhy; int fork_req; priv_cfg *cfg = ap_get_module_config(r->server->module_config, &privileges_module); void *breadcrumb = ap_get_module_config(r->request_config, &privileges_module); if (!breadcrumb) { /* first call: this is the vhost */ fork_req = (cfg->mode == PRIV_SECURE); /* set breadcrumb */ ap_set_module_config(r->request_config, &privileges_module, &cfg->mode); /* If we have per-dir config, defer doing anything */ if ((cfg->mode == PRIV_SELECTIVE)) { /* Defer dropping privileges 'til we have a directory * context that'll tell us whether to fork. */ return DECLINED; } } else { /* second call is for per-directory. */ priv_dir_cfg *dcfg; if ((cfg->mode != PRIV_SELECTIVE)) { /* Our fate was already determined for the vhost - * nothing to do per-directory */ return DECLINED; } dcfg = ap_get_module_config(r->per_dir_config, &privileges_module); fork_req = (dcfg->mode == PRIV_SECURE); } if (fork_req) { rv = apr_proc_fork(&proc, r->pool); switch (rv) { case APR_INPARENT: ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02140) "parent waiting for child"); /* FIXME - does the child need to run synchronously? * esp. if we enable mod_privileges with threaded MPMs? * We do need at least to ensure r outlives the child. */ rv = apr_proc_wait(&proc, &exitcode, &exitwhy, APR_WAIT); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02141) "parent: child %s", (rv == APR_CHILD_DONE) ? "done" : "notdone"); /* The child has taken responsibility for reading all input * and sending all output. So we need to bow right out, * and even abandon "normal" housekeeping. */ r->eos_sent = 1; apr_table_unset(r->headers_in, "Content-Type"); apr_table_unset(r->headers_in, "Content-Length"); /* Testing with ab and 100k requests reveals no nasties * so I infer we're not leaking anything like memory * or file descriptors. That's nice! */ return DONE; case APR_INCHILD: ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02142) "In child!"); break; /* now we'll drop privileges in the child */ default: ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02143) "Failed to fork secure child process!"); return HTTP_INTERNAL_SERVER_ERROR; } } /* OK, now drop privileges. */ /* cleanup should happen even if something fails part-way through here */ apr_pool_cleanup_register(r->pool, r, privileges_end_req, apr_pool_cleanup_null); /* set user and group if configured */ if (cfg->uid || cfg->gid) { if (setppriv(PRIV_ON, PRIV_EFFECTIVE, priv_setid) == -1) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02144) "No privilege to set user/group"); } /* if we should be able to set these but can't, it could be * a serious security issue. Bail out rather than risk it! */ if (cfg->uid && (setuid(cfg->uid) == -1)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02145) "Error setting userid"); return HTTP_INTERNAL_SERVER_ERROR; } if (cfg->gid && (setgid(cfg->gid) == -1)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02146) "Error setting group"); return HTTP_INTERNAL_SERVER_ERROR; } } /* set vhost's privileges */ if (setppriv(PRIV_SET, PRIV_EFFECTIVE, cfg->priv) == -1) { ap_log_rerror(APLOG_MARK, APLOG_ERR, errno, r, APLOGNO(02147) "Error setting effective privileges"); return HTTP_INTERNAL_SERVER_ERROR; } /* ... including those of any subprocesses */ if (setppriv(PRIV_SET, PRIV_INHERITABLE, cfg->child_priv) == -1) { ap_log_rerror(APLOG_MARK, APLOG_ERR, errno, r, APLOGNO(02148) "Error setting inheritable privileges"); return HTTP_INTERNAL_SERVER_ERROR; } if (setppriv(PRIV_SET, PRIV_LIMIT, cfg->child_priv) == -1) { ap_log_rerror(APLOG_MARK, APLOG_ERR, errno, r, APLOGNO(02149) "Error setting limit privileges"); return HTTP_INTERNAL_SERVER_ERROR; } /* If we're in a child process, drop down PPERM too */ if (fork_req) { if (setppriv(PRIV_SET, PRIV_PERMITTED, cfg->priv) == -1) { ap_log_rerror(APLOG_MARK, APLOG_ERR, errno, r, APLOGNO(02150) "Error setting permitted privileges"); return HTTP_INTERNAL_SERVER_ERROR; } } return OK; } #define PDROP_CHECK(x) if (x == -1) { \ ap_log_error(APLOG_MARK, APLOG_CRIT, errno, s, APLOGNO(02151) \ "Error dropping privileges"); \ return !OK; \ } static int privileges_drop_first(apr_pool_t *pool, server_rec *s) { /* We need to set privileges before mod_unixd, * 'cos otherwise setuid will wipe our privilege to do so */ priv_cfg *spcfg; server_rec *sp; priv_set_t *ppriv = priv_allocset(); /* compute ppriv from the union of all the vhosts plus setid */ priv_copyset(priv_setid, ppriv); for (sp = s; sp != NULL; sp=sp->next) { spcfg = ap_get_module_config(sp->module_config, &privileges_module); priv_union(spcfg->priv, ppriv); } PDROP_CHECK(setppriv(PRIV_SET, PRIV_PERMITTED, ppriv)) PDROP_CHECK(setppriv(PRIV_SET, PRIV_EFFECTIVE, ppriv)) priv_freeset(ppriv); return OK; } static int privileges_drop_last(apr_pool_t *pool, server_rec *s) { /* Our config stuff has set the privileges we need, so now * we just set them to those of the parent server_rec * * This has to happen after mod_unixd, 'cos mod_unixd needs * privileges we drop here. */ priv_cfg *cfg = ap_get_module_config(s->module_config, &privileges_module); /* defaults - the default vhost */ PDROP_CHECK(setppriv(PRIV_SET, PRIV_LIMIT, cfg->child_priv)) PDROP_CHECK(setppriv(PRIV_SET, PRIV_INHERITABLE, cfg->child_priv)) PDROP_CHECK(setppriv(PRIV_SET, PRIV_EFFECTIVE, cfg->priv)) return OK; } static apr_status_t privileges_term(void *rec) { priv_freeset(priv_setid); return APR_SUCCESS; } static int privileges_postconf(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { priv_cfg *cfg; server_rec *sp; /* if we have dtrace enabled, merge it into everything */ if (dtrace_enabled) { for (sp = s; sp != NULL; sp = sp->next) { cfg = ap_get_module_config(sp->module_config, &privileges_module); CR_CHECK(priv_addset(cfg->priv, PRIV_DTRACE_KERNEL), APLOGNO(03168)); CR_CHECK(priv_addset(cfg->priv, PRIV_DTRACE_PROC), APLOGNO(03169)); CR_CHECK(priv_addset(cfg->priv, PRIV_DTRACE_USER), APLOGNO(03170)); CR_CHECK(priv_addset(cfg->child_priv, PRIV_DTRACE_KERNEL), APLOGNO(03171)); CR_CHECK(priv_addset(cfg->child_priv, PRIV_DTRACE_PROC), APLOGNO(03172)); CR_CHECK(priv_addset(cfg->child_priv, PRIV_DTRACE_USER), APLOGNO(03173)); } CR_CHECK(priv_addset(priv_default, PRIV_DTRACE_KERNEL), APLOGNO(03174)); CR_CHECK(priv_addset(priv_default, PRIV_DTRACE_PROC), APLOGNO(03175)); CR_CHECK(priv_addset(priv_default, PRIV_DTRACE_USER), APLOGNO(03176)); } /* set up priv_setid for per-request use */ priv_setid = priv_allocset(); apr_pool_cleanup_register(pconf, NULL, privileges_term, apr_pool_cleanup_null); priv_emptyset(priv_setid); if (priv_addset(priv_setid, PRIV_PROC_SETID) == -1) { ap_log_perror(APLOG_MARK, APLOG_CRIT, errno, ptemp, APLOGNO(02152) "priv_addset"); return !OK; } return OK; } static int privileges_init(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { /* refuse to work if the MPM is threaded */ int threaded; int rv = ap_mpm_query(AP_MPMQ_IS_THREADED, &threaded); if (rv != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_NOTICE, rv, ptemp, APLOGNO(02153) "mod_privileges: unable to determine MPM characteristics." " Please ensure you are using a non-threaded MPM " "with this module."); } if (threaded) { ap_log_perror(APLOG_MARK, APLOG_CRIT, rv, ptemp, APLOGNO(02154) "mod_privileges is not compatible with a threaded MPM."); return !OK; } return OK; } static void privileges_hooks(apr_pool_t *pool) { ap_hook_post_read_request(privileges_req, NULL, NULL, APR_HOOK_REALLY_FIRST); ap_hook_header_parser(privileges_req, NULL, NULL, APR_HOOK_REALLY_FIRST); ap_hook_drop_privileges(privileges_drop_first, NULL, NULL, APR_HOOK_FIRST); ap_hook_drop_privileges(privileges_drop_last, NULL, NULL, APR_HOOK_LAST); ap_hook_post_config(privileges_postconf, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_pre_config(privileges_init, NULL, NULL, APR_HOOK_FIRST); } static const char *vhost_user(cmd_parms *cmd, void *dir, const char *arg) { priv_cfg *cfg = ap_get_module_config(cmd->server->module_config, &privileges_module); cfg->uid = ap_uname2id(arg); if (cfg->uid == 0) { return apr_pstrcat(cmd->pool, "Invalid userid for VHostUser: ", arg, NULL); } return NULL; } static const char *vhost_group(cmd_parms *cmd, void *dir, const char *arg) { priv_cfg *cfg = ap_get_module_config(cmd->server->module_config, &privileges_module); cfg->gid = ap_gname2id(arg); if (cfg->uid == 0) { return apr_pstrcat(cmd->pool, "Invalid groupid for VHostGroup: ", arg, NULL); } return NULL; } static const char *vhost_secure(cmd_parms *cmd, void *dir, int arg) { priv_cfg *cfg = ap_get_module_config(cmd->server->module_config, &privileges_module); if (!arg) { /* add basic privileges, excluding those covered by cgimode */ CFG_CHECK(priv_addset(cfg->priv, PRIV_FILE_LINK_ANY)); CFG_CHECK(priv_addset(cfg->priv, PRIV_PROC_INFO)); CFG_CHECK(priv_addset(cfg->priv, PRIV_PROC_SESSION)); } return NULL; } static const char *vhost_cgimode(cmd_parms *cmd, void *dir, const char *arg) { priv_cfg *cfg = ap_get_module_config(cmd->server->module_config, &privileges_module); if (!strcasecmp(arg, "on")) { /* default - nothing to do */ } else if (!strcasecmp(arg, "off")) { /* drop fork+exec privs */ CFG_CHECK(priv_delset(cfg->priv, PRIV_PROC_FORK)); CFG_CHECK(priv_delset(cfg->priv, PRIV_PROC_EXEC)); } else if (!strcasecmp(arg, "secure")) { /* deny privileges to CGI procs */ CFG_CHECK(priv_delset(cfg->child_priv, PRIV_PROC_FORK)); CFG_CHECK(priv_delset(cfg->child_priv, PRIV_PROC_EXEC)); CFG_CHECK(priv_delset(cfg->child_priv, PRIV_FILE_LINK_ANY)); CFG_CHECK(priv_delset(cfg->child_priv, PRIV_PROC_INFO)); CFG_CHECK(priv_delset(cfg->child_priv, PRIV_PROC_SESSION)); } else { return "VHostCGIMode must be On, Off or Secure"; } return NULL; } static const char *dtraceenable(cmd_parms *cmd, void *dir, int arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } dtrace_enabled = arg; return NULL; } static const char *privs_mode(cmd_parms *cmd, void *dir, const char *arg) { priv_mode mode = PRIV_UNSET; if (!strcasecmp(arg, "FAST")) { mode = PRIV_FAST; } else if (!strcasecmp(arg, "SECURE")) { mode = PRIV_SECURE; } else if (!strcasecmp(arg, "SELECTIVE")) { mode = PRIV_SELECTIVE; } if (cmd->path) { /* In a directory context, set the per_dir_config */ priv_dir_cfg *cfg = dir; cfg->mode = mode; if ((mode == PRIV_UNSET) || (mode == PRIV_SELECTIVE)) { return "PrivilegesMode in a Directory context must be FAST or SECURE"; } } else { /* In a global or vhost context, set the server config */ priv_cfg *cfg = ap_get_module_config(cmd->server->module_config, &privileges_module); cfg->mode = mode; if (mode == PRIV_UNSET) { return "PrivilegesMode must be FAST, SECURE or SELECTIVE"; } } return NULL; } #ifdef BIG_SECURITY_HOLE static const char *vhost_privs(cmd_parms *cmd, void *dir, const char *arg) { priv_cfg *cfg = ap_get_module_config(cmd->server->module_config, &privileges_module); const char *priv = arg; if (*priv == '-') { CFG_CHECK(priv_delset(cfg->priv, priv+1)); } else if (*priv == '+') { CFG_CHECK(priv_addset(cfg->priv, priv+1)); } else { priv_emptyset(cfg->priv); CFG_CHECK(priv_addset(cfg->priv, priv)); } return NULL; } static const char *vhost_cgiprivs(cmd_parms *cmd, void *dir, const char *arg) { priv_cfg *cfg = ap_get_module_config(cmd->server->module_config, &privileges_module); const char *priv = arg; if (*priv == '-') { CFG_CHECK(priv_delset(cfg->child_priv, priv+1)); } else if (*priv == '+') { CFG_CHECK(priv_addset(cfg->child_priv, priv+1)); } else { priv_emptyset(cfg->child_priv); CFG_CHECK(priv_addset(cfg->child_priv, priv)); } return NULL; } #endif static const command_rec privileges_cmds[] = { AP_INIT_TAKE1("VHostUser", vhost_user, NULL, RSRC_CONF, "Userid under which the virtualhost will run"), AP_INIT_TAKE1("VHostGroup", vhost_group, NULL, RSRC_CONF, "Group under which the virtualhost will run"), AP_INIT_FLAG("VHostSecure", vhost_secure, NULL, RSRC_CONF, "Run in enhanced security mode (default ON)"), AP_INIT_TAKE1("VHostCGIMode", vhost_cgimode, NULL, RSRC_CONF, "Enable fork+exec for this virtualhost (Off|Secure|On)"), AP_INIT_FLAG("DTracePrivileges", dtraceenable, NULL, RSRC_CONF, "Enable DTrace"), AP_INIT_TAKE1("PrivilegesMode", privs_mode, NULL, RSRC_CONF|ACCESS_CONF, "tradeoff performance vs security (fast or secure)"), #ifdef BIG_SECURITY_HOLE AP_INIT_ITERATE("VHostPrivs", vhost_privs, NULL, RSRC_CONF, "Privileges available in the (virtual) server"), AP_INIT_ITERATE("VHostCGIPrivs", vhost_cgiprivs, NULL, RSRC_CONF, "Privileges available to external programs"), #endif {NULL} }; AP_DECLARE_MODULE(privileges) = { STANDARD20_MODULE_STUFF, privileges_create_dir_cfg, privileges_merge_dir_cfg, privileges_create_cfg, privileges_merge_cfg, privileges_cmds, privileges_hooks }; httpd-2.4.41/modules/arch/unix/config5.m40000644000000000000500000000122111657551565016414 0ustar rootsrc APACHE_MODPATH_INIT(arch/unix) if ap_mpm_is_enabled "worker" \ || ap_mpm_is_enabled "event" \ || ap_mpm_is_enabled "prefork"; then unixd_mods_enable=yes else unixd_mods_enable=no fi APACHE_MODULE(unixd, unix specific support, , , $unixd_mods_enable) APACHE_MODULE(privileges, Per-virtualhost Unix UserIDs and enhanced security for Solaris, , , no, [ AC_CHECK_HEADERS(priv.h, [ap_HAVE_PRIV_H="yes"], [ap_HAVE_PRIV_H="no"]) if test $ap_HAVE_PRIV_H = "no"; then AC_MSG_WARN([Your system does not support privileges.]) enable_privileges="no" fi ]) APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) APACHE_MODPATH_FINISH httpd-2.4.41/modules/arch/unix/Makefile.in0000644000000000000500000000005111737125415016653 0ustar rootsrc include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/arch/unix/mod_unixd.h0000644000000000000500000000213211637105701016742 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_unixd.h * @brief common stuff that unix MPMs will want * * @addtogroup APACHE_OS_UNIX * @{ */ #ifndef MOD_UNIXD_H #define MOD_UNIXD_H #include "ap_config.h" #ifdef __cplusplus extern "C" { #endif AP_DECLARE(int) ap_unixd_setup_child(void); #ifdef __cplusplus } #endif #endif /** @} */ httpd-2.4.41/modules/arch/netware/0002755000000000000500000000000013523273343015275 5ustar rootsrchttpd-2.4.41/modules/arch/netware/libprews.c0000644000000000000500000000454211546464734017304 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /*------------------------------------------------------------------ These functions are to be called when the shared NLM starts and stops. By using these functions instead of defining a main() and calling ExitThread(TSR_THREAD, 0), the load time of the shared NLM is faster and memory size reduced. You may also want to override these in your own Apache module to do any cleanup other than the mechanism Apache modules provide. ------------------------------------------------------------------*/ #include #ifdef USE_WINSOCK #include #endif int _NonAppStart ( void *NLMHandle, void *errorScreen, const char *cmdLine, const char *loadDirPath, size_t uninitializedDataLength, void *NLMFileHandle, int (*readRoutineP)( int conn, void *fileHandle, size_t offset, size_t nbytes, size_t *bytesRead, void *buffer ), size_t customDataOffset, size_t customDataSize, int messageCount, const char **messages ) { #pragma unused(cmdLine) #pragma unused(loadDirPath) #pragma unused(uninitializedDataLength) #pragma unused(NLMFileHandle) #pragma unused(readRoutineP) #pragma unused(customDataOffset) #pragma unused(customDataSize) #pragma unused(messageCount) #pragma unused(messages) #ifdef USE_WINSOCK WSADATA wsaData; return WSAStartup((WORD) MAKEWORD(2, 0), &wsaData); #else return 0; #endif } void _NonAppStop( void ) { #ifdef USE_WINSOCK WSACleanup(); #else return; #endif } int _NonAppCheckUnload( void ) { return 0; } httpd-2.4.41/modules/arch/netware/mod_netware.c0000644000000000000500000001536312604740124017746 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_strings.h" #include "apr_portable.h" #include "apr_buckets.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_protocol.h" #include "http_request.h" #include "http_log.h" #include "util_script.h" #include "mod_core.h" #include "apr_optional.h" #include "apr_lib.h" #include "mod_cgi.h" #include "mpm_common.h" #ifdef NETWARE module AP_MODULE_DECLARE_DATA netware_module; typedef struct { apr_table_t *file_type_handlers; /* CGI map from file types to CGI modules */ apr_table_t *file_handler_mode; /* CGI module mode (spawn in same address space or not) */ apr_table_t *extra_env_vars; /* Environment variables to be added to the CGI environment */ } netware_dir_config; static void *create_netware_dir_config(apr_pool_t *p, char *dir) { netware_dir_config *new = (netware_dir_config*) apr_palloc(p, sizeof(netware_dir_config)); new->file_type_handlers = apr_table_make(p, 10); new->file_handler_mode = apr_table_make(p, 10); new->extra_env_vars = apr_table_make(p, 10); apr_table_setn(new->file_type_handlers, "NLM", "OS"); return new; } static void *merge_netware_dir_configs(apr_pool_t *p, void *basev, void *addv) { netware_dir_config *base = (netware_dir_config *) basev; netware_dir_config *add = (netware_dir_config *) addv; netware_dir_config *new = (netware_dir_config *) apr_palloc(p, sizeof(netware_dir_config)); new->file_type_handlers = apr_table_overlay(p, add->file_type_handlers, base->file_type_handlers); new->file_handler_mode = apr_table_overlay(p, add->file_handler_mode, base->file_handler_mode); new->extra_env_vars = apr_table_overlay(p, add->extra_env_vars, base->extra_env_vars); return new; } static const char *set_extension_map(cmd_parms *cmd, netware_dir_config *m, char *CGIhdlr, char *ext, char *detach) { int i, len; if (*ext == '.') ++ext; if (CGIhdlr != NULL) { len = strlen(CGIhdlr); for (i=0; ifile_type_handlers, ext, CGIhdlr); if (detach) { apr_table_set(m->file_handler_mode, ext, "y"); } return NULL; } static apr_status_t ap_cgi_build_command(const char **cmd, const char ***argv, request_rec *r, apr_pool_t *p, cgi_exec_info_t *e_info) { char *ext = NULL; char *cmd_only, *ptr; const char *new_cmd; netware_dir_config *d; const char *args = ""; d = (netware_dir_config *)ap_get_module_config(r->per_dir_config, &netware_module); if (e_info->process_cgi) { /* Handle the complete file name, we DON'T want to follow suexec, since * an unrooted command is as predictable as shooting craps in Win32. * * Notice that unlike most mime extension parsing, we have to use the * win32 parsing here, therefore the final extension is the only one * we will consider */ *cmd = r->filename; if (r->args && r->args[0] && !ap_strchr_c(r->args, '=')) { args = r->args; } } cmd_only = apr_pstrdup(p, *cmd); e_info->cmd_type = APR_PROGRAM; /* truncate any arguments from the cmd */ for (ptr = cmd_only; *ptr && (*ptr != ' '); ptr++); *ptr = '\0'; /* Figure out what the extension is so that we can match it. */ ext = strrchr(apr_filepath_name_get(cmd_only), '.'); /* If there isn't an extension then give it an empty string */ if (!ext) { ext = ""; } /* eliminate the '.' if there is one */ if (*ext == '.') { ++ext; } /* check if we have a registered command for the extension*/ new_cmd = apr_table_get(d->file_type_handlers, ext); e_info->detached = 1; if (new_cmd == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02135) "Could not find a command associated with the %s extension", ext); return APR_EBADF; } if (stricmp(new_cmd, "OS")) { /* If we have a registered command then add the file that was passed in as a parameter to the registered command. */ *cmd = apr_pstrcat (p, new_cmd, " ", cmd_only, NULL); /* Run in its own address space if specified */ if (apr_table_get(d->file_handler_mode, ext)) { e_info->addrspace = 1; } } /* Tokenize the full command string into its arguments */ apr_tokenize_to_argv(*cmd, (char***)argv, p); /* The first argument should be the executible */ *cmd = ap_server_root_relative(p, *argv[0]); return APR_SUCCESS; } static int netware_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { ap_sys_privileges_handlers(1); return OK; } static void register_hooks(apr_pool_t *p) { APR_REGISTER_OPTIONAL_FN(ap_cgi_build_command); ap_hook_pre_config(netware_pre_config, NULL, NULL, APR_HOOK_FIRST); } static const command_rec netware_cmds[] = { AP_INIT_TAKE23("CGIMapExtension", set_extension_map, NULL, OR_FILEINFO, "Full path to the CGI NLM module followed by a file extension. If the " "first parameter is set to \"OS\" then the following file extension is " "treated as NLM. The optional parameter \"detach\" can be specified if " "the NLM should be launched in its own address space."), { NULL } }; AP_DECLARE_MODULE(netware) = { STANDARD20_MODULE_STUFF, create_netware_dir_config, /* create per-dir config */ merge_netware_dir_configs, /* merge per-dir config */ NULL, /* server config */ NULL, /* merge server config */ netware_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; #endif httpd-2.4.41/modules/arch/netware/mod_nw_ssl.c0000644000000000000500000012060512757564422017620 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * based on mod_tls.c - Apache SSL/TLS module for NetWare by Mike Gardiner. * * This module gives Apache the ability to do SSL/TLS with a minimum amount * of effort. All of the SSL/TLS logic is already on NetWare versions 5 and * above and is interfaced through WinSock on NetWare. As you can see in * the code below SSL/TLS sockets can be created with three WinSock calls. * * To load, simply place the module in the modules directory under the main * apache tree. Then add a "SecureListen" with two arguments. The first * argument is an address and/or port. The second argument is the key pair * name as created in ConsoleOne. * * Examples: * * SecureListen 443 "SSL CertificateIP" * SecureListen 123.45.67.89:443 mycert * * The module also supports RFC 2817 / TLS Upgrade for HTTP 1.1. * For this add a "NWSSLUpgradeable" with two arguments. The first * argument is an address and/or port. The second argument is the key pair * name as created in ConsoleOne. * * Examples: * * NWSSLUpgradeable 8080 "SSL CertificateIP" * NWSSLUpgradeable 123.45.67.89:8080 mycert * */ #define WS_SSL #define MAX_ADDRESS 512 #define MAX_KEY 80 #include "httpd.h" #include "http_config.h" #include "http_connection.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "ap_listen.h" #include "apr_strings.h" #include "apr_portable.h" #include "apr_optional.h" #include #ifndef SO_TLS_UNCLEAN_SHUTDOWN #define SO_TLS_UNCLEAN_SHUTDOWN 0 #endif /* The ssl_var_lookup() optional function retrieves SSL environment * variables. */ APR_DECLARE_OPTIONAL_FN(char *, ssl_var_lookup, (apr_pool_t *, server_rec *, conn_rec *, request_rec *, char *)); /* An optional function which returns non-zero if the given connection * is using SSL/TLS. */ APR_DECLARE_OPTIONAL_FN(int, ssl_is_https, (conn_rec *)); /* The ssl_proxy_enable() and ssl_engine_disable() optional functions * are used by mod_proxy to enable use of SSL for outgoing * connections. */ APR_DECLARE_OPTIONAL_FN(int, ssl_proxy_enable, (conn_rec *)); APR_DECLARE_OPTIONAL_FN(int, ssl_engine_disable, (conn_rec *)); #define strEQ(s1,s2) (strcmp(s1,s2) == 0) #define strNE(s1,s2) (strcmp(s1,s2) != 0) #define strEQn(s1,s2,n) (strncmp(s1,s2,n) == 0) #define strNEn(s1,s2,n) (strncmp(s1,s2,n) != 0) #define strcEQ(s1,s2) (strcasecmp(s1,s2) == 0) #define strcNE(s1,s2) (strcasecmp(s1,s2) != 0) #define strcEQn(s1,s2,n) (strncasecmp(s1,s2,n) == 0) #define strcNEn(s1,s2,n) (strncasecmp(s1,s2,n) != 0) #define strIsEmpty(s) (s == NULL || s[0] == NUL) module AP_MODULE_DECLARE_DATA nwssl_module; typedef struct NWSSLSrvConfigRec NWSSLSrvConfigRec; typedef struct seclisten_rec seclisten_rec; typedef struct seclistenup_rec seclistenup_rec; typedef struct secsocket_data secsocket_data; struct seclisten_rec { seclisten_rec *next; struct sockaddr_in local_addr; /* local IP address and port */ int fd; int used; /* Only used during restart */ char key[MAX_KEY]; int mutual; char *addr; apr_port_t port; }; struct seclistenup_rec { seclistenup_rec *next; char key[MAX_KEY]; char *addr; apr_port_t port; }; struct NWSSLSrvConfigRec { apr_table_t *sltable; apr_table_t *slutable; apr_pool_t *pPool; }; struct secsocket_data { apr_socket_t* csd; int is_secure; }; static apr_array_header_t *certlist = NULL; static unicode_t** certarray = NULL; static int numcerts = 0; static seclisten_rec* ap_seclisteners = NULL; static seclistenup_rec* ap_seclistenersup = NULL; static ap_listen_rec *nw_old_listeners; #define get_nwssl_cfg(srv) (NWSSLSrvConfigRec *) ap_get_module_config(srv->module_config, &nwssl_module) static void build_cert_list(apr_pool_t *p) { int i; char **rootcerts = (char **)certlist->elts; numcerts = certlist->nelts; certarray = apr_palloc(p, sizeof(unicode_t*)*numcerts); for (i = 0; i < numcerts; ++i) { unicode_t *unistr; unistr = (unicode_t*)apr_palloc(p, strlen(rootcerts[i])*4); loc2uni (UNI_LOCAL_DEFAULT, unistr, rootcerts[i], 0, 2); certarray[i] = unistr; } } /* * Parses a host of the form
    [:port] * :port is permitted if 'port' is not NULL */ static unsigned long parse_addr(const char *w, unsigned short *ports) { struct hostent *hep; unsigned long my_addr; char *p; p = strchr(w, ':'); if (ports != NULL) { *ports = 0; if (p != NULL && strcmp(p + 1, "*") != 0) *ports = atoi(p + 1); } if (p != NULL) *p = '\0'; if (strcmp(w, "*") == 0) { if (p != NULL) *p = ':'; return htonl(INADDR_ANY); } my_addr = apr_inet_addr((char *)w); if (my_addr != INADDR_NONE) { if (p != NULL) *p = ':'; return my_addr; } hep = gethostbyname(w); if ((!hep) || (hep->h_addrtype != AF_INET || !hep->h_addr_list[0])) { /* XXX Should be echoing by h_errno the actual failure, no? * ap_log_error would be good here. Better yet - APRize. */ fprintf(stderr, "Cannot resolve host name %s --- exiting!\n", w); exit(1); } if (hep->h_addr_list[1]) { fprintf(stderr, "Host %s has multiple addresses ---\n", w); fprintf(stderr, "you must choose one explicitly for use as\n"); fprintf(stderr, "a secure port. Exiting!!!\n"); exit(1); } if (p != NULL) *p = ':'; return ((struct in_addr *) (hep->h_addr))->s_addr; } static int find_secure_listener(seclisten_rec *lr) { seclisten_rec *sl; for (sl = ap_seclisteners; sl; sl = sl->next) { if (!memcmp(&sl->local_addr, &lr->local_addr, sizeof(sl->local_addr))) { sl->used = 1; return sl->fd; } } return -1; } static char *get_port_key(conn_rec *c) { seclistenup_rec *sl; for (sl = ap_seclistenersup; sl; sl = sl->next) { if ((sl->port == (c->local_addr)->port) && ((strcmp(sl->addr, "0.0.0.0") == 0) || (strcmp(sl->addr, c->local_ip) == 0))) { return sl->key; } } return NULL; } static int make_secure_socket(apr_pool_t *pconf, const struct sockaddr_in *server, char* key, int mutual, server_rec *sconf) { int s; char addr[MAX_ADDRESS]; struct sslserveropts opts; unsigned int optParam; WSAPROTOCOL_INFO SecureProtoInfo; if (server->sin_addr.s_addr != htonl(INADDR_ANY)) apr_snprintf(addr, sizeof(addr), "address %s port %d", inet_ntoa(server->sin_addr), ntohs(server->sin_port)); else apr_snprintf(addr, sizeof(addr), "port %d", ntohs(server->sin_port)); /* note that because we're about to slack we don't use psocket */ memset(&SecureProtoInfo, 0, sizeof(WSAPROTOCOL_INFO)); SecureProtoInfo.iAddressFamily = AF_INET; SecureProtoInfo.iSocketType = SOCK_STREAM; SecureProtoInfo.iProtocol = IPPROTO_TCP; SecureProtoInfo.iSecurityScheme = SECURITY_PROTOCOL_SSL; s = WSASocket(AF_INET, SOCK_STREAM, IPPROTO_TCP, (LPWSAPROTOCOL_INFO)&SecureProtoInfo, 0, 0); if (s == INVALID_SOCKET) { ap_log_error(APLOG_MARK, APLOG_CRIT, WSAGetLastError(), sconf, APLOGNO(02120) "make_secure_socket: failed to get a socket for %s", addr); return -1; } if (!mutual) { optParam = SO_SSL_ENABLE | SO_SSL_SERVER; if (WSAIoctl(s, SO_SSL_SET_FLAGS, (char *)&optParam, sizeof(optParam), NULL, 0, NULL, NULL, NULL)) { ap_log_error(APLOG_MARK, APLOG_CRIT, WSAGetLastError(), sconf, APLOGNO(02121) "make_secure_socket: for %s, WSAIoctl: " "(SO_SSL_SET_FLAGS)", addr); return -1; } } opts.cert = key; opts.certlen = strlen(key); opts.sidtimeout = 0; opts.sidentries = 0; opts.siddir = NULL; if (WSAIoctl(s, SO_SSL_SET_SERVER, (char *)&opts, sizeof(opts), NULL, 0, NULL, NULL, NULL) != 0) { ap_log_error(APLOG_MARK, APLOG_CRIT, WSAGetLastError(), sconf, APLOGNO(02122) "make_secure_socket: for %s, WSAIoctl: " "(SO_SSL_SET_SERVER)", addr); return -1; } if (mutual) { optParam = 0x07; /* SO_SSL_AUTH_CLIENT */ if (WSAIoctl(s, SO_SSL_SET_FLAGS, (char*)&optParam, sizeof(optParam), NULL, 0, NULL, NULL, NULL)) { ap_log_error(APLOG_MARK, APLOG_CRIT, WSAGetLastError(), sconf, APLOGNO(02123) "make_secure_socket: for %s, WSAIoctl: " "(SO_SSL_SET_FLAGS)", addr); return -1; } } optParam = SO_TLS_UNCLEAN_SHUTDOWN; WSAIoctl(s, SO_SSL_SET_FLAGS, (char *)&optParam, sizeof(optParam), NULL, 0, NULL, NULL, NULL); return s; } static int convert_secure_socket(conn_rec *c, apr_socket_t *csd) { int rcode; struct tlsclientopts sWS2Opts; struct nwtlsopts sNWTLSOpts; struct sslserveropts opts; unsigned long ulFlags; SOCKET sock; unicode_t keyFileName[60]; apr_os_sock_get(&sock, csd); /* zero out buffers */ memset((char *)&sWS2Opts, 0, sizeof(struct tlsclientopts)); memset((char *)&sNWTLSOpts, 0, sizeof(struct nwtlsopts)); /* turn on ssl for the socket */ ulFlags = (numcerts ? SO_TLS_ENABLE : SO_TLS_ENABLE | SO_TLS_BLIND_ACCEPT); rcode = WSAIoctl(sock, SO_TLS_SET_FLAGS, &ulFlags, sizeof(unsigned long), NULL, 0, NULL, NULL, NULL); if (SOCKET_ERROR == rcode) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, c->base_server, APLOGNO(02124) "Error: %d with WSAIoctl(flag SO_TLS_ENABLE)", WSAGetLastError()); return rcode; } ulFlags = SO_TLS_UNCLEAN_SHUTDOWN; WSAIoctl(sock, SO_TLS_SET_FLAGS, &ulFlags, sizeof(unsigned long), NULL, 0, NULL, NULL, NULL); /* setup the socket for SSL */ memset (&sWS2Opts, 0, sizeof(sWS2Opts)); memset (&sNWTLSOpts, 0, sizeof(sNWTLSOpts)); sWS2Opts.options = &sNWTLSOpts; if (numcerts) { sNWTLSOpts.walletProvider = WAL_PROV_DER; /* the wallet provider defined in wdefs.h */ sNWTLSOpts.TrustedRootList = certarray; /* array of certs in UNICODE format */ sNWTLSOpts.numElementsInTRList = numcerts; /* number of certs in TRList */ } else { /* setup the socket for SSL */ unicpy(keyFileName, L"SSL CertificateIP"); sWS2Opts.wallet = keyFileName; /* no client certificate */ sWS2Opts.walletlen = unilen(keyFileName); sNWTLSOpts.walletProvider = WAL_PROV_KMO; /* the wallet provider defined in wdefs.h */ } /* make the IOCTL call */ rcode = WSAIoctl(sock, SO_TLS_SET_CLIENT, &sWS2Opts, sizeof(struct tlsclientopts), NULL, 0, NULL, NULL, NULL); /* make sure that it was successful */ if (SOCKET_ERROR == rcode ) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, c->base_server, APLOGNO(02125) "Error: %d with WSAIoctl(SO_TLS_SET_CLIENT)", WSAGetLastError()); } return rcode; } static int SSLize_Socket(SOCKET socketHnd, char *key, request_rec *r) { int rcode; struct tlsserveropts sWS2Opts; struct nwtlsopts sNWTLSOpts; unicode_t SASKey[512]; unsigned long ulFlag; memset((char *)&sWS2Opts, 0, sizeof(struct tlsserveropts)); memset((char *)&sNWTLSOpts, 0, sizeof(struct nwtlsopts)); ulFlag = SO_TLS_ENABLE; rcode = WSAIoctl(socketHnd, SO_TLS_SET_FLAGS, &ulFlag, sizeof(unsigned long), NULL, 0, NULL, NULL, NULL); if (rcode) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, r->server, APLOGNO(02126) "Error: %d with WSAIoctl(SO_TLS_SET_FLAGS, SO_TLS_ENABLE)", WSAGetLastError()); goto ERR; } ulFlag = SO_TLS_SERVER; rcode = WSAIoctl(socketHnd, SO_TLS_SET_FLAGS, &ulFlag, sizeof(unsigned long),NULL, 0, NULL, NULL, NULL); if (rcode) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, r->server, APLOGNO(02127) "Error: %d with WSAIoctl(SO_TLS_SET_FLAGS, SO_TLS_SERVER)", WSAGetLastError()); goto ERR; } loc2uni(UNI_LOCAL_DEFAULT, SASKey, key, 0, 0); /* setup the tlsserveropts struct */ sWS2Opts.wallet = SASKey; sWS2Opts.walletlen = unilen(SASKey); sWS2Opts.sidtimeout = 0; sWS2Opts.sidentries = 0; sWS2Opts.siddir = NULL; sWS2Opts.options = &sNWTLSOpts; /* setup the nwtlsopts structure */ sNWTLSOpts.walletProvider = WAL_PROV_KMO; sNWTLSOpts.keysList = NULL; sNWTLSOpts.numElementsInKeyList = 0; sNWTLSOpts.reservedforfutureuse = NULL; sNWTLSOpts.reservedforfutureCRL = NULL; sNWTLSOpts.reservedforfutureCRLLen = 0; sNWTLSOpts.reserved1 = NULL; sNWTLSOpts.reserved2 = NULL; sNWTLSOpts.reserved3 = NULL; rcode = WSAIoctl(socketHnd, SO_TLS_SET_SERVER, &sWS2Opts, sizeof(struct tlsserveropts), NULL, 0, NULL, NULL, NULL); if (SOCKET_ERROR == rcode) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, r->server, APLOGNO(02128) "Error: %d with WSAIoctl(SO_TLS_SET_SERVER)", WSAGetLastError()); goto ERR; } ERR: return rcode; } static const char *set_secure_listener(cmd_parms *cmd, void *dummy, const char *ips, const char* key, const char* mutual) { NWSSLSrvConfigRec* sc = get_nwssl_cfg(cmd->server); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); char *ports, *addr; unsigned short port; seclisten_rec *new; ap_listen_rec **walk; apr_sockaddr_t *sa; int found_listener = 0; if (err != NULL) return err; ports = strchr(ips, ':'); if (ports != NULL) { if (ports == ips) return "Missing IP address"; else if (ports[1] == '\0') return "Address must end in :"; *(ports++) = '\0'; } else { ports = (char*)ips; } new = apr_pcalloc(cmd->server->process->pool, sizeof(seclisten_rec)); new->local_addr.sin_family = AF_INET; if (ports == ips) { new->local_addr.sin_addr.s_addr = htonl(INADDR_ANY); addr = apr_pstrdup(cmd->server->process->pool, "0.0.0.0"); } else { new->local_addr.sin_addr.s_addr = parse_addr(ips, NULL); addr = apr_pstrdup(cmd->server->process->pool, ips); } port = atoi(ports); if (!port) return "Port must be numeric"; /* If the specified addr:port was created previously, put the listen socket record back on the ap_listeners list so that the socket will be reused rather than recreated */ for (walk = &nw_old_listeners; *walk;) { sa = (*walk)->bind_addr; if (sa) { ap_listen_rec *new; apr_port_t oldport; oldport = sa->port; /* If both ports are equivalent, then if their names are equivalent, * then we will re-use the existing record. */ if (port == oldport && ((!addr && !sa->hostname) || ((addr && sa->hostname) && !strcmp(sa->hostname, addr)))) { new = *walk; *walk = new->next; new->next = ap_listeners; ap_listeners = new; found_listener = 1; continue; } } walk = &(*walk)->next; } apr_table_add(sc->sltable, ports, addr); /* If we found a pre-existing listen socket record, then there is no need to create a new secure listen socket record. */ if (found_listener) { return NULL; } new->local_addr.sin_port = htons(port); new->fd = -1; new->used = 0; new->next = ap_seclisteners; strcpy(new->key, key); new->mutual = (mutual) ? 1 : 0; new->addr = addr; new->port = port; ap_seclisteners = new; return NULL; } static const char *set_secure_upgradeable_listener(cmd_parms *cmd, void *dummy, const char *ips, const char* key) { NWSSLSrvConfigRec* sc = get_nwssl_cfg(cmd->server); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); char *ports, *addr; unsigned short port; seclistenup_rec *new; if (err != NULL) return err; ports = strchr(ips, ':'); if (ports != NULL) { if (ports == ips) return "Missing IP address"; else if (ports[1] == '\0') return "Address must end in :"; *(ports++) = '\0'; } else { ports = (char*)ips; } if (ports == ips) { addr = apr_pstrdup(cmd->pool, "0.0.0.0"); } else { addr = apr_pstrdup(cmd->pool, ips); } port = atoi(ports); if (!port) return "Port must be numeric"; apr_table_set(sc->slutable, ports, addr); new = apr_pcalloc(cmd->pool, sizeof(seclistenup_rec)); new->next = ap_seclistenersup; strcpy(new->key, key); new->addr = addr; new->port = port; ap_seclistenersup = new; return err; } static apr_status_t nwssl_socket_cleanup(void *data) { ap_listen_rec* slr = (ap_listen_rec*)data; ap_listen_rec* lr; /* Remove our secure listener from the listener list */ for (lr = ap_listeners; lr; lr = lr->next) { /* slr is at the head of the list */ if (lr == slr) { ap_listeners = slr->next; break; } /* slr is somewhere in between or at the end*/ if (lr->next == slr) { lr->next = slr->next; break; } } return APR_SUCCESS; } static const char *set_trusted_certs(cmd_parms *cmd, void *dummy, char *arg) { char **ptr = (char **)apr_array_push(certlist); *ptr = arg; return NULL; } static int nwssl_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { seclisten_rec* ap_old_seclisteners; ap_listen_rec **walk; seclisten_rec **secwalk; apr_sockaddr_t *sa; int found; /* Pull all of the listeners that were created by mod_nw_ssl out of the ap_listeners list so that the normal listen socket processing does automatically close them */ nw_old_listeners = NULL; ap_old_seclisteners = NULL; for (secwalk = &ap_seclisteners; *secwalk;) { found = 0; for (walk = &ap_listeners; *walk;) { sa = (*walk)->bind_addr; if (sa) { ap_listen_rec *new; seclisten_rec *secnew; apr_port_t oldport; oldport = sa->port; /* If both ports are equivalent, then if their names are equivalent, * then we will re-use the existing record. */ if ((*secwalk)->port == oldport && ((!(*secwalk)->addr && !sa->hostname) || (((*secwalk)->addr && sa->hostname) && !strcmp(sa->hostname, (*secwalk)->addr)))) { /* Move the listen socket from ap_listeners to nw_old_listeners */ new = *walk; *walk = new->next; new->next = nw_old_listeners; nw_old_listeners = new; /* Move the secure socket record to ap_old_seclisterners */ secnew = *secwalk; *secwalk = secnew->next; secnew->next = ap_old_seclisteners; ap_old_seclisteners = secnew; found = 1; break; } } walk = &(*walk)->next; } if (!found && &(*secwalk)->next) { secwalk = &(*secwalk)->next; } } /* Restore the secure socket records list so that the post config can process all of the sockets normally */ ap_seclisteners = ap_old_seclisteners; ap_seclistenersup = NULL; certlist = apr_array_make(pconf, 1, sizeof(char *)); /* Now that we have removed all of the mod_nw_ssl created socket records, allow the normal listen socket handling to occur. NOTE: If for any reason mod_nw_ssl is removed as a built-in module, the following call must be put back into the pre-config handler of the MPM. It is only here to ensure that mod_nw_ssl fixes up the listen socket list before anything else looks at it. */ ap_listen_pre_config(); return OK; } static int nwssl_pre_connection(conn_rec *c, void *csd) { if (apr_table_get(c->notes, "nwconv-ssl")) { convert_secure_socket(c, (apr_socket_t*)csd); } else { secsocket_data *csd_data = apr_palloc(c->pool, sizeof(secsocket_data)); csd_data->csd = (apr_socket_t*)csd; csd_data->is_secure = 0; ap_set_module_config(c->conn_config, &nwssl_module, (void*)csd_data); } return OK; } static int nwssl_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { seclisten_rec* sl; ap_listen_rec* lr; apr_socket_t* sd; apr_status_t status; seclistenup_rec *slu; int found; ap_listen_rec *walk; seclisten_rec *secwalk, *lastsecwalk; apr_sockaddr_t *sa; /* Walk the old listeners list and compare it to the secure listeners list and remove any secure listener records that are not being reused */ for (walk = nw_old_listeners; walk; walk = walk->next) { sa = walk->bind_addr; if (sa) { ap_listen_rec *new; apr_port_t oldport; oldport = sa->port; for (secwalk = ap_seclisteners, lastsecwalk = ap_seclisteners; secwalk; secwalk = lastsecwalk->next) { unsigned short port = secwalk->port; char *addr = secwalk->addr; /* If both ports are equivalent, then if their names are equivalent, * then we will re-use the existing record. */ if (port == oldport && ((!addr && !sa->hostname) || ((addr && sa->hostname) && !strcmp(sa->hostname, addr)))) { if (secwalk == ap_seclisteners) { ap_seclisteners = secwalk->next; } else { lastsecwalk->next = secwalk->next; } apr_socket_close(walk->sd); walk->active = 0; break; } else { lastsecwalk = secwalk; } } } } for (sl = ap_seclisteners; sl != NULL; sl = sl->next) { /* If we find a pre-existing listen socket and it has already been created, then no need to go any further, just reuse it. */ if (((sl->fd = find_secure_listener(sl)) >= 0) && (sl->used)) { continue; } if (sl->fd < 0) sl->fd = make_secure_socket(s->process->pool, &sl->local_addr, sl->key, sl->mutual, s); if (sl->fd >= 0) { apr_os_sock_info_t sock_info; sock_info.os_sock = &(sl->fd); sock_info.local = (struct sockaddr*)&(sl->local_addr); sock_info.remote = NULL; sock_info.family = APR_INET; sock_info.type = SOCK_STREAM; apr_os_sock_make(&sd, &sock_info, s->process->pool); lr = apr_pcalloc(s->process->pool, sizeof(ap_listen_rec)); if (lr) { lr->sd = sd; if ((status = apr_sockaddr_info_get(&lr->bind_addr, sl->addr, APR_UNSPEC, sl->port, 0, s->process->pool)) != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_CRIT, status, pconf, APLOGNO(02129) "alloc_listener: failed to set up sockaddr for %s:%d", sl->addr, sl->port); return HTTP_INTERNAL_SERVER_ERROR; } lr->next = ap_listeners; ap_listeners = lr; apr_pool_cleanup_register(s->process->pool, lr, nwssl_socket_cleanup, apr_pool_cleanup_null); } } else { return HTTP_INTERNAL_SERVER_ERROR; } } for (slu = ap_seclistenersup; slu; slu = slu->next) { /* Check the listener list for a matching upgradeable listener */ found = 0; for (lr = ap_listeners; lr; lr = lr->next) { if (slu->port == lr->bind_addr->port) { found = 1; break; } } if (!found) { ap_log_perror(APLOG_MARK, APLOG_WARNING, 0, plog, APLOGNO(02130) "No Listen directive found for upgradeable listener %s:%d", slu->addr, slu->port); } } build_cert_list(s->process->pool); return OK; } static void *nwssl_config_server_create(apr_pool_t *p, server_rec *s) { NWSSLSrvConfigRec *new = apr_palloc(p, sizeof(NWSSLSrvConfigRec)); new->sltable = apr_table_make(p, 5); new->slutable = apr_table_make(p, 5); return new; } static void *nwssl_config_server_merge(apr_pool_t *p, void *basev, void *addv) { NWSSLSrvConfigRec *base = (NWSSLSrvConfigRec *)basev; NWSSLSrvConfigRec *add = (NWSSLSrvConfigRec *)addv; NWSSLSrvConfigRec *merged = (NWSSLSrvConfigRec *)apr_palloc(p, sizeof(NWSSLSrvConfigRec)); return merged; } static int compare_ipports(void *rec, const char *key, const char *value) { conn_rec *c = (conn_rec*)rec; if (value && ((strcmp(value, "0.0.0.0") == 0) || (strcmp(value, c->local_ip) == 0))) { return 0; } return 1; } static int isSecureConnEx (const server_rec *s, const conn_rec *c, const apr_table_t *t) { char port[8]; itoa((c->local_addr)->port, port, 10); if (!apr_table_do(compare_ipports, (void*)c, t, port, NULL)) { return 1; } return 0; } static int isSecureConn (const server_rec *s, const conn_rec *c) { NWSSLSrvConfigRec *sc = get_nwssl_cfg(s); return isSecureConnEx (s, c, sc->sltable); } static int isSecureConnUpgradeable (const server_rec *s, const conn_rec *c) { NWSSLSrvConfigRec *sc = get_nwssl_cfg(s); return isSecureConnEx (s, c, sc->slutable); } static int isSecure (const request_rec *r) { return isSecureConn (r->server, r->connection); } static int isSecureUpgradeable (const request_rec *r) { return isSecureConnUpgradeable (r->server, r->connection); } static int isSecureUpgraded (const request_rec *r) { secsocket_data *csd_data = (secsocket_data*)ap_get_module_config(r->connection->conn_config, &nwssl_module); return csd_data->is_secure; } static int nwssl_hook_Fixup(request_rec *r) { if (!isSecure(r) && !isSecureUpgraded(r)) return DECLINED; apr_table_setn(r->subprocess_env, "HTTPS", "on"); return DECLINED; } static const char *nwssl_hook_http_scheme(const request_rec *r) { if (isSecure(r) && !isSecureUpgraded(r)) return "https"; return NULL; } static apr_port_t nwssl_hook_default_port(const request_rec *r) { if (isSecure(r)) return DEFAULT_HTTPS_PORT; return 0; } int ssl_proxy_enable(conn_rec *c) { apr_table_setn(c->notes, "nwconv-ssl", "Y"); return 1; } int ssl_engine_disable(conn_rec *c) { return 1; } static int ssl_is_https(conn_rec *c) { secsocket_data *csd_data = (secsocket_data*)ap_get_module_config(c->conn_config, &nwssl_module); return isSecureConn (c->base_server, c) || (csd_data && csd_data->is_secure); } /* This function must remain safe to use for a non-SSL connection. */ char *ssl_var_lookup(apr_pool_t *p, server_rec *s, conn_rec *c, request_rec *r, char *var) { NWSSLSrvConfigRec *mc = get_nwssl_cfg(s); const char *result; BOOL resdup; apr_time_exp_t tm; result = NULL; resdup = TRUE; /* * When no pool is given try to find one */ if (p == NULL) { if (r != NULL) p = r->pool; else if (c != NULL) p = c->pool; else p = mc->pPool; } /* * Request dependent stuff */ if (r != NULL) { switch (var[0]) { case 'H': case 'h': if (strcEQ(var, "HTTP_USER_AGENT")) result = apr_table_get(r->headers_in, "User-Agent"); else if (strcEQ(var, "HTTP_REFERER")) result = apr_table_get(r->headers_in, "Referer"); else if (strcEQ(var, "HTTP_COOKIE")) result = apr_table_get(r->headers_in, "Cookie"); else if (strcEQ(var, "HTTP_FORWARDED")) result = apr_table_get(r->headers_in, "Forwarded"); else if (strcEQ(var, "HTTP_HOST")) result = apr_table_get(r->headers_in, "Host"); else if (strcEQ(var, "HTTP_PROXY_CONNECTION")) result = apr_table_get(r->headers_in, "Proxy-Connection"); else if (strcEQ(var, "HTTP_ACCEPT")) result = apr_table_get(r->headers_in, "Accept"); else if (strcEQ(var, "HTTPS")) { if (isSecure(r) || isSecureUpgraded(r)) result = "on"; else result = "off"; } else if (strlen(var) > 5 && strcEQn(var, "HTTP:", 5)) /* all other headers from which we are still not know about */ result = apr_table_get(r->headers_in, var+5); break; case 'R': case 'r': if (strcEQ(var, "REQUEST_METHOD")) result = r->method; else if (strcEQ(var, "REQUEST_SCHEME")) result = ap_http_scheme(r); else if (strcEQ(var, "REQUEST_URI")) result = r->uri; else if (strcEQ(var, "REQUEST_FILENAME")) result = r->filename; else if (strcEQ(var, "REMOTE_ADDR")) result = r->useragent_ip; else if (strcEQ(var, "REMOTE_HOST")) result = ap_get_useragent_host(r, REMOTE_NAME, NULL); else if (strcEQ(var, "REMOTE_IDENT")) result = ap_get_remote_logname(r); else if (strcEQ(var, "REMOTE_USER")) result = r->user; break; case 'S': case 's': if (strcEQn(var, "SSL", 3)) break; /* shortcut common case */ if (strcEQ(var, "SERVER_ADMIN")) result = r->server->server_admin; else if (strcEQ(var, "SERVER_NAME")) result = ap_get_server_name_for_url(r); else if (strcEQ(var, "SERVER_PORT")) result = apr_psprintf(p, "%u", ap_get_server_port(r)); else if (strcEQ(var, "SERVER_PROTOCOL")) result = r->protocol; else if (strcEQ(var, "SCRIPT_FILENAME")) result = r->filename; break; default: if (strcEQ(var, "PATH_INFO")) result = r->path_info; else if (strcEQ(var, "QUERY_STRING")) result = r->args; else if (strcEQ(var, "IS_SUBREQ")) result = (r->main != NULL ? "true" : "false"); else if (strcEQ(var, "DOCUMENT_ROOT")) result = ap_document_root(r); else if (strcEQ(var, "AUTH_TYPE")) result = r->ap_auth_type; else if (strcEQ(var, "THE_REQUEST")) result = r->the_request; break; } } /* * Connection stuff */ if (result == NULL && c != NULL) { /* XXX-Can't get specific SSL info from NetWare */ /* SSLConnRec *sslconn = myConnConfig(c); if (strlen(var) > 4 && strcEQn(var, "SSL_", 4) && sslconn && sslconn->ssl) result = ssl_var_lookup_ssl(p, c, var+4);*/ if (strlen(var) > 4 && strcEQn(var, "SSL_", 4)) result = NULL; } /* * Totally independent stuff */ if (result == NULL) { if (strlen(var) > 12 && strcEQn(var, "SSL_VERSION_", 12)) result = NULL; /* XXX-Can't get specific SSL info from NetWare */ /*result = ssl_var_lookup_ssl_version(p, var+12);*/ else if (strcEQ(var, "SERVER_SOFTWARE")) result = ap_get_server_banner(); else if (strcEQ(var, "API_VERSION")) { result = apr_itoa(p, MODULE_MAGIC_NUMBER_MAJOR); resdup = FALSE; } else if (strcEQ(var, "TIME_YEAR")) { apr_time_exp_lt(&tm, apr_time_now()); result = apr_psprintf(p, "%02d%02d", (tm.tm_year / 100) + 19, tm.tm_year % 100); resdup = FALSE; } #define MKTIMESTR(format, tmfield) \ apr_time_exp_lt(&tm, apr_time_now()); \ result = apr_psprintf(p, format, tm.tmfield); \ resdup = FALSE; else if (strcEQ(var, "TIME_MON")) { MKTIMESTR("%02d", tm_mon+1) } else if (strcEQ(var, "TIME_DAY")) { MKTIMESTR("%02d", tm_mday) } else if (strcEQ(var, "TIME_HOUR")) { MKTIMESTR("%02d", tm_hour) } else if (strcEQ(var, "TIME_MIN")) { MKTIMESTR("%02d", tm_min) } else if (strcEQ(var, "TIME_SEC")) { MKTIMESTR("%02d", tm_sec) } else if (strcEQ(var, "TIME_WDAY")) { MKTIMESTR("%d", tm_wday) } else if (strcEQ(var, "TIME")) { apr_time_exp_lt(&tm, apr_time_now()); result = apr_psprintf(p, "%02d%02d%02d%02d%02d%02d%02d", (tm.tm_year / 100) + 19, (tm.tm_year % 100), tm.tm_mon+1, tm.tm_mday, tm.tm_hour, tm.tm_min, tm.tm_sec); resdup = FALSE; } /* all other env-variables from the parent Apache process */ else if (strlen(var) > 4 && strcEQn(var, "ENV:", 4)) { result = apr_table_get(r->notes, var+4); if (result == NULL) result = apr_table_get(r->subprocess_env, var+4); if (result == NULL) result = getenv(var+4); } } if (result != NULL && resdup) result = apr_pstrdup(p, result); if (result == NULL) result = ""; return (char *)result; } #define SWITCH_STATUS_LINE "HTTP/1.1 101 Switching Protocols" #define UPGRADE_HEADER "Upgrade: TLS/1.0, HTTP/1.1" #define CONNECTION_HEADER "Connection: Upgrade" static apr_status_t ssl_io_filter_Upgrade(ap_filter_t *f, apr_bucket_brigade *bb) { const char *upgrade; apr_bucket_brigade *upgradebb; request_rec *r = f->r; apr_socket_t *csd = NULL; char *key; int ret; secsocket_data *csd_data; apr_bucket *b; apr_status_t rv; /* Just remove the filter, if it doesn't work the first time, it won't * work at all for this request. */ ap_remove_output_filter(f); if (!r) { /* ap_log_error(APLOG_MARK, APLOG_ERR, 0, r->server, APLOGNO(02131) "Unable to get upgradeable socket handle"); */ return ap_pass_brigade(f->next, bb); } /* No need to ensure that this is a server with optional SSL, the filter * is only inserted if that is true. */ upgrade = apr_table_get(r->headers_in, "Upgrade"); if (upgrade == NULL || strcmp(ap_getword(r->pool, &upgrade, ','), "TLS/1.0")) { /* "Upgrade: TLS/1.0, ..." header not found, don't do Upgrade */ return ap_pass_brigade(f->next, bb); } apr_table_unset(r->headers_out, "Upgrade"); csd_data = (secsocket_data*)ap_get_module_config(r->connection->conn_config, &nwssl_module); csd = csd_data->csd; /* Send the interim 101 response. */ upgradebb = apr_brigade_create(r->pool, f->c->bucket_alloc); ap_fputs(f->next, upgradebb, SWITCH_STATUS_LINE CRLF UPGRADE_HEADER CRLF CONNECTION_HEADER CRLF CRLF); b = apr_bucket_flush_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(upgradebb, b); rv = ap_pass_brigade(f->next, upgradebb); if (rv) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02132) "could not send interim 101 Upgrade response"); return AP_FILTER_ERROR; } key = get_port_key(r->connection); if (csd && key) { int sockdes; apr_os_sock_get(&sockdes, csd); ret = SSLize_Socket(sockdes, key, r); if (!ret) { csd_data->is_secure = 1; } } else { ap_log_error(APLOG_MARK, APLOG_ERR, 0, r->server, APLOGNO(02133) "Upgradeable socket handle not found"); return AP_FILTER_ERROR; } ap_log_error(APLOG_MARK, APLOG_INFO, 0, r->server, APLOGNO(02134) "Awaiting re-negotiation handshake"); /* Now that we have initialized the ssl connection which added the ssl_io_filter, pass the brigade off to the connection based output filters so that the request can complete encrypted */ return ap_pass_brigade(f->c->output_filters, bb); } static void ssl_hook_Insert_Filter(request_rec *r) { NWSSLSrvConfigRec *sc = get_nwssl_cfg(r->server); if (isSecureUpgradeable (r)) { ap_add_output_filter("UPGRADE_FILTER", NULL, r, r->connection); } } static const command_rec nwssl_module_cmds[] = { AP_INIT_TAKE23("SecureListen", set_secure_listener, NULL, RSRC_CONF, "specify an address and/or port with a key pair name.\n" "Optional third parameter of MUTUAL configures the port for mutual authentication."), AP_INIT_TAKE2("NWSSLUpgradeable", set_secure_upgradeable_listener, NULL, RSRC_CONF, "specify an address and/or port with a key pair name, that can be upgraded to an SSL connection.\n" "The address and/or port must have already be defined using a Listen directive."), AP_INIT_ITERATE("NWSSLTrustedCerts", set_trusted_certs, NULL, RSRC_CONF, "Adds trusted certificates that are used to create secure connections to proxied servers"), {NULL} }; static void register_hooks(apr_pool_t *p) { ap_register_output_filter ("UPGRADE_FILTER", ssl_io_filter_Upgrade, NULL, AP_FTYPE_PROTOCOL + 5); ap_hook_pre_config(nwssl_pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_pre_connection(nwssl_pre_connection, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(nwssl_post_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_fixups(nwssl_hook_Fixup, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_http_scheme(nwssl_hook_http_scheme, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_default_port(nwssl_hook_default_port, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_insert_filter(ssl_hook_Insert_Filter, NULL, NULL, APR_HOOK_MIDDLE); APR_REGISTER_OPTIONAL_FN(ssl_is_https); APR_REGISTER_OPTIONAL_FN(ssl_var_lookup); APR_REGISTER_OPTIONAL_FN(ssl_proxy_enable); APR_REGISTER_OPTIONAL_FN(ssl_engine_disable); } AP_DECLARE_MODULE(nwssl) = { STANDARD20_MODULE_STUFF, NULL, /* dir config creater */ NULL, /* dir merger --- default is to override */ nwssl_config_server_create, /* server config */ nwssl_config_server_merge, /* merge server config */ nwssl_module_cmds, /* command apr_table_t */ register_hooks }; httpd-2.4.41/modules/arch/win32/0002755000000000000500000000000013523273343014572 5ustar rootsrchttpd-2.4.41/modules/arch/win32/mod_isapi.c0000644000000000000500000017652312757564422016727 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_isapi.c - Internet Server Application (ISA) module for Apache * by Alexei Kosut , significant overhauls and * redesign by William Rowe , and hints from many * other developer/users who have hit on specific flaws. * * This module implements the ISAPI Handler architecture, allowing * Apache to load Internet Server Applications (ISAPI extensions), * similar to the support in IIS, Zope, O'Reilly's WebSite and others. * * It is a complete implementation of the ISAPI 2.0 specification, * except for "Microsoft extensions" to the API which provide * asynchronous I/O. It is further extended to include additional * "Microsoft extensions" through IIS 5.0, with some deficiencies * where one-to-one mappings don't exist. * * Refer to /manual/mod/mod_isapi.html for additional details on * configuration and use, but check this source for specific support * of the API, */ #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_protocol.h" #include "http_request.h" #include "http_log.h" #include "util_script.h" #include "mod_core.h" #include "apr_lib.h" #include "apr_strings.h" #include "apr_portable.h" #include "apr_buckets.h" #include "apr_thread_mutex.h" #include "apr_thread_rwlock.h" #include "apr_hash.h" #include "mod_isapi.h" /* Retry frequency for a failed-to-load isapi .dll */ #define ISAPI_RETRY apr_time_from_sec(30) /********************************************************** * * ISAPI Module Configuration * **********************************************************/ module AP_MODULE_DECLARE_DATA isapi_module; #define ISAPI_UNDEF -1 /* Our isapi per-dir config structure */ typedef struct isapi_dir_conf { int read_ahead_buflen; int log_unsupported; int log_to_errlog; int log_to_query; int fake_async; } isapi_dir_conf; typedef struct isapi_loaded isapi_loaded; apr_status_t isapi_lookup(apr_pool_t *p, server_rec *s, request_rec *r, const char *fpath, isapi_loaded** isa); static void *create_isapi_dir_config(apr_pool_t *p, char *dummy) { isapi_dir_conf *dir = apr_palloc(p, sizeof(isapi_dir_conf)); dir->read_ahead_buflen = ISAPI_UNDEF; dir->log_unsupported = ISAPI_UNDEF; dir->log_to_errlog = ISAPI_UNDEF; dir->log_to_query = ISAPI_UNDEF; dir->fake_async = ISAPI_UNDEF; return dir; } static void *merge_isapi_dir_configs(apr_pool_t *p, void *base_, void *add_) { isapi_dir_conf *base = (isapi_dir_conf *) base_; isapi_dir_conf *add = (isapi_dir_conf *) add_; isapi_dir_conf *dir = apr_palloc(p, sizeof(isapi_dir_conf)); dir->read_ahead_buflen = (add->read_ahead_buflen == ISAPI_UNDEF) ? base->read_ahead_buflen : add->read_ahead_buflen; dir->log_unsupported = (add->log_unsupported == ISAPI_UNDEF) ? base->log_unsupported : add->log_unsupported; dir->log_to_errlog = (add->log_to_errlog == ISAPI_UNDEF) ? base->log_to_errlog : add->log_to_errlog; dir->log_to_query = (add->log_to_query == ISAPI_UNDEF) ? base->log_to_query : add->log_to_query; dir->fake_async = (add->fake_async == ISAPI_UNDEF) ? base->fake_async : add->fake_async; return dir; } static const char *isapi_cmd_cachefile(cmd_parms *cmd, void *dummy, const char *filename) { isapi_loaded *isa; apr_finfo_t tmp; apr_status_t rv; char *fspec; /* ### Just an observation ... it would be terribly cool to be * able to use this per-dir, relative to the directory block being * defined. The hash result remains global, but shorthand of * * ISAPICacheFile myapp.dll anotherapp.dll thirdapp.dll * * would be very convienent. */ fspec = ap_server_root_relative(cmd->pool, filename); if (!fspec) { ap_log_error(APLOG_MARK, APLOG_WARNING, APR_EBADPATH, cmd->server, APLOGNO(02103) "invalid module path, skipping %s", filename); return NULL; } if ((rv = apr_stat(&tmp, fspec, APR_FINFO_TYPE, cmd->temp_pool)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, cmd->server, APLOGNO(02104) "unable to stat, skipping %s", fspec); return NULL; } if (tmp.filetype != APR_REG) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(02105) "not a regular file, skipping %s", fspec); return NULL; } /* Load the extension as cached (with null request_rec) */ rv = isapi_lookup(cmd->pool, cmd->server, NULL, fspec, &isa); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, cmd->server, APLOGNO(02106) "unable to cache, skipping %s", fspec); return NULL; } return NULL; } static const command_rec isapi_cmds[] = { AP_INIT_TAKE1("ISAPIReadAheadBuffer", ap_set_int_slot, (void *)APR_OFFSETOF(isapi_dir_conf, read_ahead_buflen), OR_FILEINFO, "Maximum client request body to initially pass to the" " ISAPI handler (default: 49152)"), AP_INIT_FLAG("ISAPILogNotSupported", ap_set_flag_slot, (void *)APR_OFFSETOF(isapi_dir_conf, log_unsupported), OR_FILEINFO, "Log requests not supported by the ISAPI server" " on or off (default: off)"), AP_INIT_FLAG("ISAPIAppendLogToErrors", ap_set_flag_slot, (void *)APR_OFFSETOF(isapi_dir_conf, log_to_errlog), OR_FILEINFO, "Send all Append Log requests to the error log" " on or off (default: off)"), AP_INIT_FLAG("ISAPIAppendLogToQuery", ap_set_flag_slot, (void *)APR_OFFSETOF(isapi_dir_conf, log_to_query), OR_FILEINFO, "Append Log requests are concatinated to the query args" " on or off (default: on)"), AP_INIT_FLAG("ISAPIFakeAsync", ap_set_flag_slot, (void *)APR_OFFSETOF(isapi_dir_conf, fake_async), OR_FILEINFO, "Fake Asynchronous support for isapi callbacks" " on or off [Experimental] (default: off)"), AP_INIT_ITERATE("ISAPICacheFile", isapi_cmd_cachefile, NULL, RSRC_CONF, "Cache the specified ISAPI extension in-process"), {NULL} }; /********************************************************** * * ISAPI Module Cache handling section * **********************************************************/ /* Our isapi global config values */ static struct isapi_global_conf { apr_pool_t *pool; apr_thread_mutex_t *lock; apr_hash_t *hash; } loaded; /* Our loaded isapi module description structure */ struct isapi_loaded { const char *filename; apr_thread_rwlock_t *in_progress; apr_status_t last_load_rv; apr_time_t last_load_time; apr_dso_handle_t *handle; HSE_VERSION_INFO *isapi_version; apr_uint32_t report_version; apr_uint32_t timeout; PFN_GETEXTENSIONVERSION GetExtensionVersion; PFN_HTTPEXTENSIONPROC HttpExtensionProc; PFN_TERMINATEEXTENSION TerminateExtension; }; static apr_status_t isapi_unload(isapi_loaded *isa, int force) { /* All done with the DLL... get rid of it... * * If optionally cached, and we weren't asked to force the unload, * pass HSE_TERM_ADVISORY_UNLOAD, and if it returns 1, unload, * otherwise, leave it alone (it didn't choose to cooperate.) */ if (!isa->handle) { return APR_SUCCESS; } if (isa->TerminateExtension) { if (force) { (*isa->TerminateExtension)(HSE_TERM_MUST_UNLOAD); } else if (!(*isa->TerminateExtension)(HSE_TERM_ADVISORY_UNLOAD)) { return APR_EGENERAL; } } apr_dso_unload(isa->handle); isa->handle = NULL; return APR_SUCCESS; } static apr_status_t cleanup_isapi(void *isa_) { isapi_loaded* isa = (isapi_loaded*) isa_; /* We must force the module to unload, we are about * to lose the isapi structure's allocation entirely. */ return isapi_unload(isa, 1); } static apr_status_t isapi_load(apr_pool_t *p, server_rec *s, isapi_loaded *isa) { apr_status_t rv; isa->isapi_version = apr_pcalloc(p, sizeof(HSE_VERSION_INFO)); /* TODO: These aught to become overrideable, so that we * assure a given isapi can be fooled into behaving well. * * The tricky bit, they aren't really a per-dir sort of * config, they will always be constant across every * reference to the .dll no matter what context (vhost, * location, etc) they apply to. */ isa->report_version = 0x500; /* Revision 5.0 */ isa->timeout = 300 * 1000000; /* microsecs, not used */ rv = apr_dso_load(&isa->handle, isa->filename, p); if (rv) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(02107) "failed to load %s", isa->filename); isa->handle = NULL; return rv; } rv = apr_dso_sym((void**)&isa->GetExtensionVersion, isa->handle, "GetExtensionVersion"); if (rv) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(02108) "missing GetExtensionVersion() in %s", isa->filename); apr_dso_unload(isa->handle); isa->handle = NULL; return rv; } rv = apr_dso_sym((void**)&isa->HttpExtensionProc, isa->handle, "HttpExtensionProc"); if (rv) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(02109) "missing HttpExtensionProc() in %s", isa->filename); apr_dso_unload(isa->handle); isa->handle = NULL; return rv; } /* TerminateExtension() is an optional interface */ rv = apr_dso_sym((void**)&isa->TerminateExtension, isa->handle, "TerminateExtension"); apr_set_os_error(0); /* Run GetExtensionVersion() */ if (!(isa->GetExtensionVersion)(isa->isapi_version)) { apr_status_t rv = apr_get_os_error(); ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(02110) "failed call to GetExtensionVersion() in %s", isa->filename); apr_dso_unload(isa->handle); isa->handle = NULL; return rv; } apr_pool_cleanup_register(p, isa, cleanup_isapi, apr_pool_cleanup_null); return APR_SUCCESS; } apr_status_t isapi_lookup(apr_pool_t *p, server_rec *s, request_rec *r, const char *fpath, isapi_loaded** isa) { apr_status_t rv; const char *key; if ((rv = apr_thread_mutex_lock(loaded.lock)) != APR_SUCCESS) { return rv; } *isa = apr_hash_get(loaded.hash, fpath, APR_HASH_KEY_STRING); if (*isa) { /* If we find this lock exists, use a set-aside copy of gainlock * to avoid race conditions on NULLing the in_progress variable * when the load has completed. Release the global isapi hash * lock so other requests can proceed, then rdlock for completion * of loading our desired dll or wrlock if we would like to retry * loading the dll (because last_load_rv failed and retry is up.) */ apr_thread_rwlock_t *gainlock = (*isa)->in_progress; /* gainlock is NULLed after the module loads successfully. * This free-threaded module can be used without any locking. */ if (!gainlock) { rv = (*isa)->last_load_rv; apr_thread_mutex_unlock(loaded.lock); return rv; } if ((*isa)->last_load_rv == APR_SUCCESS) { apr_thread_mutex_unlock(loaded.lock); if ((rv = apr_thread_rwlock_rdlock(gainlock)) != APR_SUCCESS) { return rv; } rv = (*isa)->last_load_rv; apr_thread_rwlock_unlock(gainlock); return rv; } if (apr_time_now() > (*isa)->last_load_time + ISAPI_RETRY) { /* Remember last_load_time before releasing the global * hash lock to avoid colliding with another thread * that hit this exception at the same time as our * retry attempt, since we unlock the global mutex * before attempting a write lock for this module. */ apr_time_t check_time = (*isa)->last_load_time; apr_thread_mutex_unlock(loaded.lock); if ((rv = apr_thread_rwlock_wrlock(gainlock)) != APR_SUCCESS) { return rv; } /* If last_load_time is unchanged, we still own this * retry, otherwise presume another thread provided * our retry (for good or ill). Relock the global * hash for updating last_load_ vars, so their update * is always atomic to the global lock. */ if (check_time == (*isa)->last_load_time) { rv = isapi_load(loaded.pool, s, *isa); apr_thread_mutex_lock(loaded.lock); (*isa)->last_load_rv = rv; (*isa)->last_load_time = apr_time_now(); apr_thread_mutex_unlock(loaded.lock); } else { rv = (*isa)->last_load_rv; } apr_thread_rwlock_unlock(gainlock); return rv; } /* We haven't hit timeup on retry, let's grab the last_rv * within the hash mutex before unlocking. */ rv = (*isa)->last_load_rv; apr_thread_mutex_unlock(loaded.lock); return rv; } /* If the module was not found, it's time to create a hash key entry * before releasing the hash lock to avoid multiple threads from * loading the same module. */ key = apr_pstrdup(loaded.pool, fpath); *isa = apr_pcalloc(loaded.pool, sizeof(isapi_loaded)); (*isa)->filename = key; if (r) { /* A mutex that exists only long enough to attempt to * load this isapi dll, the release this module to all * other takers that came along during the one-time * load process. Short lifetime for this lock would * be great, however, using r->pool is nasty if those * blocked on the lock haven't all unlocked before we * attempt to destroy. A nastier race condition than * I want to deal with at this moment... */ apr_thread_rwlock_create(&(*isa)->in_progress, loaded.pool); apr_thread_rwlock_wrlock((*isa)->in_progress); } apr_hash_set(loaded.hash, key, APR_HASH_KEY_STRING, *isa); /* Now attempt to load the isapi on our own time, * allow other isapi processing to resume. */ apr_thread_mutex_unlock(loaded.lock); rv = isapi_load(loaded.pool, s, *isa); (*isa)->last_load_time = apr_time_now(); (*isa)->last_load_rv = rv; if (r && (rv == APR_SUCCESS)) { /* Let others who are blocked on this particular * module resume their requests, for better or worse. */ apr_thread_rwlock_t *unlock = (*isa)->in_progress; (*isa)->in_progress = NULL; apr_thread_rwlock_unlock(unlock); } else if (!r && (rv != APR_SUCCESS)) { /* We must leave a rwlock around for requests to retry * loading this dll after timeup... since we were in * the setup code we had avoided creating this lock. */ apr_thread_rwlock_create(&(*isa)->in_progress, loaded.pool); } return (*isa)->last_load_rv; } /********************************************************** * * ISAPI Module request callbacks section * **********************************************************/ /* Our "Connection ID" structure */ struct isapi_cid { EXTENSION_CONTROL_BLOCK *ecb; isapi_dir_conf dconf; isapi_loaded *isa; request_rec *r; int headers_set; int response_sent; PFN_HSE_IO_COMPLETION completion; void *completion_arg; apr_thread_mutex_t *completed; }; static int APR_THREAD_FUNC regfnGetServerVariable(isapi_cid *cid, char *variable_name, void *buf_ptr, apr_uint32_t *buf_size) { request_rec *r = cid->r; const char *result; char *buf_data = (char*)buf_ptr; apr_uint32_t len; if (!strcmp(variable_name, "ALL_HTTP")) { /* crlf delimited, colon split, comma separated and * null terminated list of HTTP_ vars */ const apr_array_header_t *arr = apr_table_elts(r->subprocess_env); const apr_table_entry_t *elts = (const apr_table_entry_t *)arr->elts; int i; for (len = 0, i = 0; i < arr->nelts; i++) { if (!strncmp(elts[i].key, "HTTP_", 5)) { len += strlen(elts[i].key) + strlen(elts[i].val) + 3; } } if (*buf_size < len + 1) { *buf_size = len + 1; apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INSUFFICIENT_BUFFER)); return 0; } for (i = 0; i < arr->nelts; i++) { if (!strncmp(elts[i].key, "HTTP_", 5)) { strcpy(buf_data, elts[i].key); buf_data += strlen(elts[i].key); *(buf_data++) = ':'; strcpy(buf_data, elts[i].val); buf_data += strlen(elts[i].val); *(buf_data++) = '\r'; *(buf_data++) = '\n'; } } *(buf_data++) = '\0'; *buf_size = len + 1; return 1; } if (!strcmp(variable_name, "ALL_RAW")) { /* crlf delimited, colon split, comma separated and * null terminated list of the raw request header */ const apr_array_header_t *arr = apr_table_elts(r->headers_in); const apr_table_entry_t *elts = (const apr_table_entry_t *)arr->elts; int i; for (len = 0, i = 0; i < arr->nelts; i++) { len += strlen(elts[i].key) + strlen(elts[i].val) + 4; } if (*buf_size < len + 1) { *buf_size = len + 1; apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INSUFFICIENT_BUFFER)); return 0; } for (i = 0; i < arr->nelts; i++) { strcpy(buf_data, elts[i].key); buf_data += strlen(elts[i].key); *(buf_data++) = ':'; *(buf_data++) = ' '; strcpy(buf_data, elts[i].val); buf_data += strlen(elts[i].val); *(buf_data++) = '\r'; *(buf_data++) = '\n'; } *(buf_data++) = '\0'; *buf_size = len + 1; return 1; } /* Not a special case */ result = apr_table_get(r->subprocess_env, variable_name); if (result) { len = strlen(result); if (*buf_size < len + 1) { *buf_size = len + 1; apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INSUFFICIENT_BUFFER)); return 0; } strcpy(buf_data, result); *buf_size = len + 1; return 1; } /* Not Found */ apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_INDEX)); return 0; } static int APR_THREAD_FUNC regfnReadClient(isapi_cid *cid, void *buf_data, apr_uint32_t *buf_size) { request_rec *r = cid->r; apr_uint32_t read = 0; int res = 0; if (r->remaining < *buf_size) { *buf_size = (apr_size_t)r->remaining; } while (read < *buf_size && ((res = ap_get_client_block(r, (char*)buf_data + read, *buf_size - read)) > 0)) { read += res; } *buf_size = read; if (res < 0) { apr_set_os_error(APR_FROM_OS_ERROR(ERROR_READ_FAULT)); } return (res >= 0); } /* Common code invoked for both HSE_REQ_SEND_RESPONSE_HEADER and * the newer HSE_REQ_SEND_RESPONSE_HEADER_EX ServerSupportFunction(s) * as well as other functions that write responses and presume that * the support functions above are optional. * * Other callers trying to split headers and body bytes should pass * head/headlen alone (leaving stat/statlen NULL/0), so that they * get a proper count of bytes consumed. The argument passed to stat * isn't counted as the head bytes are. */ static apr_ssize_t send_response_header(isapi_cid *cid, const char *stat, const char *head, apr_size_t statlen, apr_size_t headlen) { int head_present = 1; int termarg; int res; int old_status; const char *termch; apr_size_t ate = 0; if (!head || headlen == 0 || !*head) { head = stat; stat = NULL; headlen = statlen; statlen = 0; head_present = 0; /* Don't eat the header */ } if (!stat || statlen == 0 || !*stat) { if (head && headlen && *head && ((stat = memchr(head, '\r', headlen)) || (stat = memchr(head, '\n', headlen)) || (stat = memchr(head, '\0', headlen)) || (stat = head + headlen))) { statlen = stat - head; if (memchr(head, ':', statlen)) { stat = "Status: 200 OK"; statlen = strlen(stat); } else { const char *flip = head; head = stat; stat = flip; headlen -= statlen; ate += statlen; if (*head == '\r' && headlen) ++head, --headlen, ++ate; if (*head == '\n' && headlen) ++head, --headlen, ++ate; } } } if (stat && (statlen > 0) && *stat) { char *newstat; if (!apr_isdigit(*stat)) { const char *stattok = stat; int toklen = statlen; while (toklen && *stattok && !apr_isspace(*stattok)) { ++stattok; --toklen; } while (toklen && apr_isspace(*stattok)) { ++stattok; --toklen; } /* Now decide if we follow the xxx message * or the http/x.x xxx message format */ if (toklen && apr_isdigit(*stattok)) { statlen = toklen; stat = stattok; } } newstat = apr_palloc(cid->r->pool, statlen + 9); strcpy(newstat, "Status: "); apr_cpystrn(newstat + 8, stat, statlen + 1); stat = newstat; statlen += 8; } if (!head || headlen == 0 || !*head) { head = "\r\n"; headlen = 2; } else { if (head[headlen - 1] && head[headlen]) { /* Whoops... not NULL terminated */ head = apr_pstrndup(cid->r->pool, head, headlen); } } /* Seems IIS does not enforce the requirement for \r\n termination * on HSE_REQ_SEND_RESPONSE_HEADER, but we won't panic... * ap_scan_script_header_err_strs handles this aspect for us. * * Parse them out, or die trying */ old_status = cid->r->status; if (stat) { res = ap_scan_script_header_err_strs_ex(cid->r, NULL, APLOG_MODULE_INDEX, &termch, &termarg, stat, head, NULL); } else { res = ap_scan_script_header_err_strs_ex(cid->r, NULL, APLOG_MODULE_INDEX, &termch, &termarg, head, NULL); } /* Set our status. */ if (res) { /* This is an immediate error result from the parser */ cid->r->status = res; cid->r->status_line = ap_get_status_line(cid->r->status); cid->ecb->dwHttpStatusCode = cid->r->status; } else if (cid->r->status) { /* We have a status in r->status, so let's just use it. * This is likely to be the Status: parsed above, and * may also be a delayed error result from the parser. * If it was filled in, status_line should also have * been filled in. */ cid->ecb->dwHttpStatusCode = cid->r->status; } else if (cid->ecb->dwHttpStatusCode && cid->ecb->dwHttpStatusCode != HTTP_OK) { /* Now we fall back on dwHttpStatusCode if it appears * ap_scan_script_header fell back on the default code. * Any other results set dwHttpStatusCode to the decoded * status value. */ cid->r->status = cid->ecb->dwHttpStatusCode; cid->r->status_line = ap_get_status_line(cid->r->status); } else if (old_status) { /* Well... either there is no dwHttpStatusCode or it's HTTP_OK. * In any case, we don't have a good status to return yet... * Perhaps the one we came in with will be better. Let's use it, * if we were given one (note this is a pedantic case, it would * normally be covered above unless the scan script code unset * the r->status). Should there be a check here as to whether * we are setting a valid response code? */ cid->r->status = old_status; cid->r->status_line = ap_get_status_line(cid->r->status); cid->ecb->dwHttpStatusCode = cid->r->status; } else { /* None of dwHttpStatusCode, the parser's r->status nor the * old value of r->status were helpful, and nothing was decoded * from Status: string passed to us. Let's just say HTTP_OK * and get the data out, this was the isapi dev's oversight. */ cid->r->status = HTTP_OK; cid->r->status_line = ap_get_status_line(cid->r->status); cid->ecb->dwHttpStatusCode = cid->r->status; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, cid->r, APLOGNO(02111) "Could not determine HTTP response code; using %d", cid->r->status); } if (cid->r->status == HTTP_INTERNAL_SERVER_ERROR) { return -1; } /* If only Status was passed, we consumed nothing */ if (!head_present) return 0; cid->headers_set = 1; /* If all went well, tell the caller we consumed the headers complete */ if (!termch) return(ate + headlen); /* Any data left must be sent directly by the caller, all we * give back is the size of the headers we consumed (which only * happens if the parser got to the head arg, which varies based * on whether we passed stat+head to scan, or only head. */ if (termch && (termarg == (stat ? 1 : 0)) && head_present && head + headlen > termch) { return ate + termch - head; } return ate; } static int APR_THREAD_FUNC regfnWriteClient(isapi_cid *cid, void *buf_ptr, apr_uint32_t *size_arg, apr_uint32_t flags) { request_rec *r = cid->r; conn_rec *c = r->connection; apr_uint32_t buf_size = *size_arg; char *buf_data = (char*)buf_ptr; apr_bucket_brigade *bb; apr_bucket *b; apr_status_t rv = APR_SUCCESS; if (!cid->headers_set) { /* It appears that the foxisapi module and other clients * presume that WriteClient("headers\n\nbody") will work. * Parse them out, or die trying. */ apr_ssize_t ate; ate = send_response_header(cid, NULL, buf_data, 0, buf_size); if (ate < 0) { apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; } buf_data += ate; buf_size -= ate; } if (buf_size) { bb = apr_brigade_create(r->pool, c->bucket_alloc); b = apr_bucket_transient_create(buf_data, buf_size, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); b = apr_bucket_flush_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); rv = ap_pass_brigade(r->output_filters, bb); cid->response_sent = 1; if (rv != APR_SUCCESS) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(02984) "WriteClient ap_pass_brigade failed: %s", r->filename); } if ((flags & HSE_IO_ASYNC) && cid->completion) { if (rv == APR_SUCCESS) { cid->completion(cid->ecb, cid->completion_arg, *size_arg, ERROR_SUCCESS); } else { cid->completion(cid->ecb, cid->completion_arg, *size_arg, ERROR_WRITE_FAULT); } } return (rv == APR_SUCCESS); } static int APR_THREAD_FUNC regfnServerSupportFunction(isapi_cid *cid, apr_uint32_t HSE_code, void *buf_ptr, apr_uint32_t *buf_size, apr_uint32_t *data_type) { request_rec *r = cid->r; conn_rec *c = r->connection; char *buf_data = (char*)buf_ptr; request_rec *subreq; apr_status_t rv; switch (HSE_code) { case HSE_REQ_SEND_URL_REDIRECT_RESP: /* Set the status to be returned when the HttpExtensionProc() * is done. * WARNING: Microsoft now advertises HSE_REQ_SEND_URL_REDIRECT_RESP * and HSE_REQ_SEND_URL as equivalent per the Jan 2000 SDK. * They most definitely are not, even in their own samples. */ apr_table_set (r->headers_out, "Location", buf_data); cid->r->status = cid->ecb->dwHttpStatusCode = HTTP_MOVED_TEMPORARILY; cid->r->status_line = ap_get_status_line(cid->r->status); cid->headers_set = 1; return 1; case HSE_REQ_SEND_URL: /* Soak up remaining input */ if (r->remaining > 0) { char argsbuffer[HUGE_STRING_LEN]; while (ap_get_client_block(r, argsbuffer, HUGE_STRING_LEN)); } /* Reset the method to GET */ r->method = "GET"; r->method_number = M_GET; /* Don't let anyone think there's still data */ apr_table_unset(r->headers_in, "Content-Length"); /* AV fault per PR3598 - redirected path is lost! */ buf_data = apr_pstrdup(r->pool, (char*)buf_data); ap_internal_redirect(buf_data, r); return 1; case HSE_REQ_SEND_RESPONSE_HEADER: { /* Parse them out, or die trying */ apr_size_t statlen = 0, headlen = 0; apr_ssize_t ate; if (buf_data) statlen = strlen((char*) buf_data); if (data_type) headlen = strlen((char*) data_type); ate = send_response_header(cid, (char*) buf_data, (char*) data_type, statlen, headlen); if (ate < 0) { apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; } else if ((apr_size_t)ate < headlen) { apr_bucket_brigade *bb; apr_bucket *b; bb = apr_brigade_create(cid->r->pool, c->bucket_alloc); b = apr_bucket_transient_create((char*) data_type + ate, headlen - ate, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); b = apr_bucket_flush_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); rv = ap_pass_brigade(cid->r->output_filters, bb); cid->response_sent = 1; if (rv != APR_SUCCESS) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(03177) "ServerSupportFunction " "HSE_REQ_SEND_RESPONSE_HEADER " "ap_pass_brigade failed: %s", r->filename); return (rv == APR_SUCCESS); } /* Deliberately hold off sending 'just the headers' to begin to * accumulate the body and speed up the overall response, or at * least wait for the end the session. */ return 1; } case HSE_REQ_DONE_WITH_SESSION: /* Signal to resume the thread completing this request, * leave it to the pool cleanup to dispose of our mutex. */ if (cid->completed) { (void)apr_thread_mutex_unlock(cid->completed); return 1; } else if (cid->dconf.log_unsupported) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02671) "ServerSupportFunction " "HSE_REQ_DONE_WITH_SESSION is not supported: %s", r->filename); } apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; case HSE_REQ_MAP_URL_TO_PATH: { /* Map a URL to a filename */ char *file = (char *)buf_data; apr_uint32_t len; subreq = ap_sub_req_lookup_uri( apr_pstrndup(cid->r->pool, file, *buf_size), r, NULL); if (!subreq->filename) { ap_destroy_sub_req(subreq); return 0; } len = (apr_uint32_t)strlen(r->filename); if ((subreq->finfo.filetype == APR_DIR) && (!subreq->path_info) && (file[len - 1] != '/')) file = apr_pstrcat(cid->r->pool, subreq->filename, "/", NULL); else file = apr_pstrcat(cid->r->pool, subreq->filename, subreq->path_info, NULL); ap_destroy_sub_req(subreq); #ifdef WIN32 /* We need to make this a real Windows path name */ apr_filepath_merge(&file, "", file, APR_FILEPATH_NATIVE, r->pool); #endif *buf_size = apr_cpystrn(buf_data, file, *buf_size) - buf_data; return 1; } case HSE_REQ_GET_SSPI_INFO: if (cid->dconf.log_unsupported) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02672) "ServerSupportFunction HSE_REQ_GET_SSPI_INFO " "is not supported: %s", r->filename); apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; case HSE_APPEND_LOG_PARAMETER: /* Log buf_data, of buf_size bytes, in the URI Query (cs-uri-query) field */ apr_table_set(r->notes, "isapi-parameter", (char*) buf_data); if (cid->dconf.log_to_query) { if (r->args) r->args = apr_pstrcat(r->pool, r->args, (char*) buf_data, NULL); else r->args = apr_pstrdup(r->pool, (char*) buf_data); } if (cid->dconf.log_to_errlog) ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02985) "%s: %s", cid->r->filename, (char*) buf_data); return 1; case HSE_REQ_IO_COMPLETION: /* Emulates a completion port... Record callback address and * user defined arg, we will call this after any async request * (e.g. transmitfile) as if the request executed async. * Per MS docs... HSE_REQ_IO_COMPLETION replaces any prior call * to HSE_REQ_IO_COMPLETION, and buf_data may be set to NULL. */ if (cid->dconf.fake_async) { cid->completion = (PFN_HSE_IO_COMPLETION) buf_data; cid->completion_arg = (void *) data_type; return 1; } if (cid->dconf.log_unsupported) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02673) "ServerSupportFunction HSE_REQ_IO_COMPLETION " "is not supported: %s", r->filename); apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; case HSE_REQ_TRANSMIT_FILE: { /* we do nothing with (tf->dwFlags & HSE_DISCONNECT_AFTER_SEND) */ HSE_TF_INFO *tf = (HSE_TF_INFO*)buf_data; apr_uint32_t sent = 0; apr_ssize_t ate = 0; apr_bucket_brigade *bb; apr_bucket *b; apr_file_t *fd; apr_off_t fsize; if (!cid->dconf.fake_async && (tf->dwFlags & HSE_IO_ASYNC)) { if (cid->dconf.log_unsupported) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02674) "ServerSupportFunction HSE_REQ_TRANSMIT_FILE " "as HSE_IO_ASYNC is not supported: %s", r->filename); apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; } /* Presume the handle was opened with the CORRECT semantics * for TransmitFile */ if ((rv = apr_os_file_put(&fd, &tf->hFile, APR_READ | APR_XTHREAD, r->pool)) != APR_SUCCESS) { return 0; } if (tf->BytesToWrite) { fsize = tf->BytesToWrite; } else { apr_finfo_t fi; if (apr_file_info_get(&fi, APR_FINFO_SIZE, fd) != APR_SUCCESS) { apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; } fsize = fi.size - tf->Offset; } /* apr_dupfile_oshandle (&fd, tf->hFile, r->pool); */ bb = apr_brigade_create(r->pool, c->bucket_alloc); /* According to MS: if calling HSE_REQ_TRANSMIT_FILE with the * HSE_IO_SEND_HEADERS flag, then you can't otherwise call any * HSE_SEND_RESPONSE_HEADERS* fn, but if you don't use the flag, * you must have done so. They document that the pHead headers * option is valid only for HSE_IO_SEND_HEADERS - we are a bit * more flexible and assume with the flag, pHead are the * response headers, and without, pHead simply contains text * (handled after this case). */ if ((tf->dwFlags & HSE_IO_SEND_HEADERS) && tf->pszStatusCode) { ate = send_response_header(cid, tf->pszStatusCode, (char*)tf->pHead, strlen(tf->pszStatusCode), tf->HeadLength); } else if (!cid->headers_set && tf->pHead && tf->HeadLength && *(char*)tf->pHead) { ate = send_response_header(cid, NULL, (char*)tf->pHead, 0, tf->HeadLength); if (ate < 0) { apr_brigade_destroy(bb); apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; } } if (tf->pHead && (apr_size_t)ate < tf->HeadLength) { b = apr_bucket_transient_create((char*)tf->pHead + ate, tf->HeadLength - ate, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); sent = tf->HeadLength; } sent += (apr_uint32_t)fsize; apr_brigade_insert_file(bb, fd, tf->Offset, fsize, r->pool); if (tf->pTail && tf->TailLength) { sent += tf->TailLength; b = apr_bucket_transient_create((char*)tf->pTail, tf->TailLength, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); } b = apr_bucket_flush_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); rv = ap_pass_brigade(r->output_filters, bb); cid->response_sent = 1; if (rv != APR_SUCCESS) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(03178) "ServerSupportFunction " "HSE_REQ_TRANSMIT_FILE " "ap_pass_brigade failed: %s", r->filename); /* Use tf->pfnHseIO + tf->pContext, or if NULL, then use cid->fnIOComplete * pass pContect to the HseIO callback. */ if (tf->dwFlags & HSE_IO_ASYNC) { if (tf->pfnHseIO) { if (rv == APR_SUCCESS) { tf->pfnHseIO(cid->ecb, tf->pContext, ERROR_SUCCESS, sent); } else { tf->pfnHseIO(cid->ecb, tf->pContext, ERROR_WRITE_FAULT, sent); } } else if (cid->completion) { if (rv == APR_SUCCESS) { cid->completion(cid->ecb, cid->completion_arg, sent, ERROR_SUCCESS); } else { cid->completion(cid->ecb, cid->completion_arg, sent, ERROR_WRITE_FAULT); } } } return (rv == APR_SUCCESS); } case HSE_REQ_REFRESH_ISAPI_ACL: if (cid->dconf.log_unsupported) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02675) "ServerSupportFunction " "HSE_REQ_REFRESH_ISAPI_ACL " "is not supported: %s", r->filename); apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; case HSE_REQ_IS_KEEP_CONN: *((int *)buf_data) = (r->connection->keepalive == AP_CONN_KEEPALIVE); return 1; case HSE_REQ_ASYNC_READ_CLIENT: { apr_uint32_t read = 0; int res = 0; if (!cid->dconf.fake_async) { if (cid->dconf.log_unsupported) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02986) "asynchronous I/O not supported: %s", r->filename); apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; } if (r->remaining < *buf_size) { *buf_size = (apr_size_t)r->remaining; } while (read < *buf_size && ((res = ap_get_client_block(r, (char*)buf_data + read, *buf_size - read)) > 0)) { read += res; } if ((*data_type & HSE_IO_ASYNC) && cid->completion) { /* XXX: Many authors issue their next HSE_REQ_ASYNC_READ_CLIENT * within the completion logic. An example is MS's own PSDK * sample web/iis/extensions/io/ASyncRead. This potentially * leads to stack exhaustion. To refactor, the notification * logic needs to move to isapi_handler() - differentiating * the cid->completed event with a new flag to indicate * an async-notice versus the async request completed. */ if (res >= 0) { cid->completion(cid->ecb, cid->completion_arg, read, ERROR_SUCCESS); } else { cid->completion(cid->ecb, cid->completion_arg, read, ERROR_READ_FAULT); } } return (res >= 0); } case HSE_REQ_GET_IMPERSONATION_TOKEN: /* Added in ISAPI 4.0 */ if (cid->dconf.log_unsupported) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02676) "ServerSupportFunction " "HSE_REQ_GET_IMPERSONATION_TOKEN " "is not supported: %s", r->filename); apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; case HSE_REQ_MAP_URL_TO_PATH_EX: { /* Map a URL to a filename */ HSE_URL_MAPEX_INFO *info = (HSE_URL_MAPEX_INFO*)data_type; char* test_uri = apr_pstrndup(r->pool, (char *)buf_data, *buf_size); subreq = ap_sub_req_lookup_uri(test_uri, r, NULL); info->cchMatchingURL = strlen(test_uri); info->cchMatchingPath = apr_cpystrn(info->lpszPath, subreq->filename, sizeof(info->lpszPath)) - info->lpszPath; /* Mapping started with assuming both strings matched. * Now roll on the path_info as a mismatch and handle * terminating slashes for directory matches. */ if (subreq->path_info && *subreq->path_info) { apr_cpystrn(info->lpszPath + info->cchMatchingPath, subreq->path_info, sizeof(info->lpszPath) - info->cchMatchingPath); info->cchMatchingURL -= strlen(subreq->path_info); if (subreq->finfo.filetype == APR_DIR && info->cchMatchingPath < sizeof(info->lpszPath) - 1) { /* roll forward over path_info's first slash */ ++info->cchMatchingPath; ++info->cchMatchingURL; } } else if (subreq->finfo.filetype == APR_DIR && info->cchMatchingPath < sizeof(info->lpszPath) - 1) { /* Add a trailing slash for directory */ info->lpszPath[info->cchMatchingPath++] = '/'; info->lpszPath[info->cchMatchingPath] = '\0'; } /* If the matched isn't a file, roll match back to the prior slash */ if (subreq->finfo.filetype == APR_NOFILE) { while (info->cchMatchingPath && info->cchMatchingURL) { if (info->lpszPath[info->cchMatchingPath - 1] == '/') break; --info->cchMatchingPath; --info->cchMatchingURL; } } /* Paths returned with back slashes */ for (test_uri = info->lpszPath; *test_uri; ++test_uri) if (*test_uri == '/') *test_uri = '\\'; /* is a combination of: * HSE_URL_FLAGS_READ 0x001 Allow read * HSE_URL_FLAGS_WRITE 0x002 Allow write * HSE_URL_FLAGS_EXECUTE 0x004 Allow execute * HSE_URL_FLAGS_SSL 0x008 Require SSL * HSE_URL_FLAGS_DONT_CACHE 0x010 Don't cache (VRoot only) * HSE_URL_FLAGS_NEGO_CERT 0x020 Allow client SSL cert * HSE_URL_FLAGS_REQUIRE_CERT 0x040 Require client SSL cert * HSE_URL_FLAGS_MAP_CERT 0x080 Map client SSL cert to account * HSE_URL_FLAGS_SSL128 0x100 Require 128-bit SSL cert * HSE_URL_FLAGS_SCRIPT 0x200 Allow script execution * * XxX: As everywhere, EXEC flags could use some work... * and this could go further with more flags, as desired. */ info->dwFlags = (subreq->finfo.protection & APR_UREAD ? 0x001 : 0) | (subreq->finfo.protection & APR_UWRITE ? 0x002 : 0) | (subreq->finfo.protection & APR_UEXECUTE ? 0x204 : 0); return 1; } case HSE_REQ_ABORTIVE_CLOSE: if (cid->dconf.log_unsupported) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02677) "ServerSupportFunction HSE_REQ_ABORTIVE_CLOSE" " is not supported: %s", r->filename); apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; case HSE_REQ_GET_CERT_INFO_EX: /* Added in ISAPI 4.0 */ if (cid->dconf.log_unsupported) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02678) "ServerSupportFunction " "HSE_REQ_GET_CERT_INFO_EX " "is not supported: %s", r->filename); apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; case HSE_REQ_SEND_RESPONSE_HEADER_EX: /* Added in ISAPI 4.0 */ { HSE_SEND_HEADER_EX_INFO *shi = (HSE_SEND_HEADER_EX_INFO*)buf_data; /* Ignore shi->fKeepConn - we don't want the advise */ apr_ssize_t ate = send_response_header(cid, shi->pszStatus, shi->pszHeader, shi->cchStatus, shi->cchHeader); if (ate < 0) { apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; } else if ((apr_size_t)ate < shi->cchHeader) { apr_bucket_brigade *bb; apr_bucket *b; bb = apr_brigade_create(cid->r->pool, c->bucket_alloc); b = apr_bucket_transient_create(shi->pszHeader + ate, shi->cchHeader - ate, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); b = apr_bucket_flush_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); rv = ap_pass_brigade(cid->r->output_filters, bb); cid->response_sent = 1; if (rv != APR_SUCCESS) ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(03179) "ServerSupportFunction " "HSE_REQ_SEND_RESPONSE_HEADER_EX " "ap_pass_brigade failed: %s", r->filename); return (rv == APR_SUCCESS); } /* Deliberately hold off sending 'just the headers' to begin to * accumulate the body and speed up the overall response, or at * least wait for the end the session. */ return 1; } case HSE_REQ_CLOSE_CONNECTION: /* Added after ISAPI 4.0 */ if (cid->dconf.log_unsupported) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02679) "ServerSupportFunction " "HSE_REQ_CLOSE_CONNECTION " "is not supported: %s", r->filename); apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; case HSE_REQ_IS_CONNECTED: /* Added after ISAPI 4.0 */ /* Returns True if client is connected c.f. MSKB Q188346 * assuming the identical return mechanism as HSE_REQ_IS_KEEP_CONN */ *((int *)buf_data) = (r->connection->aborted == 0); return 1; case HSE_REQ_EXTENSION_TRIGGER: /* Added after ISAPI 4.0 */ /* Undocumented - defined by the Microsoft Jan '00 Platform SDK */ if (cid->dconf.log_unsupported) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02680) "ServerSupportFunction " "HSE_REQ_EXTENSION_TRIGGER " "is not supported: %s", r->filename); apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; default: if (cid->dconf.log_unsupported) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02681) "ServerSupportFunction (%d) not supported: " "%s", HSE_code, r->filename); apr_set_os_error(APR_FROM_OS_ERROR(ERROR_INVALID_PARAMETER)); return 0; } } /********************************************************** * * ISAPI Module request invocation section * **********************************************************/ static apr_status_t isapi_handler (request_rec *r) { isapi_dir_conf *dconf; apr_table_t *e; apr_status_t rv; isapi_loaded *isa; isapi_cid *cid; const char *val; apr_uint32_t read; int res; if (strcmp(r->handler, "isapi-isa") && strcmp(r->handler, "isapi-handler")) { /* Hang on to the isapi-isa for compatibility with older docs * (wtf did '-isa' mean in the first place?) but introduce * a newer and clearer "isapi-handler" name. */ return DECLINED; } dconf = ap_get_module_config(r->per_dir_config, &isapi_module); e = r->subprocess_env; /* Use similar restrictions as CGIs * * If this fails, it's pointless to load the isapi dll. */ if (!(ap_allow_options(r) & OPT_EXECCGI)) { return HTTP_FORBIDDEN; } if (r->finfo.filetype == APR_NOFILE) { return HTTP_NOT_FOUND; } if (r->finfo.filetype != APR_REG) { return HTTP_FORBIDDEN; } if ((r->used_path_info == AP_REQ_REJECT_PATH_INFO) && r->path_info && *r->path_info) { /* default to accept */ return HTTP_NOT_FOUND; } if (isapi_lookup(r->pool, r->server, r, r->filename, &isa) != APR_SUCCESS) { return HTTP_INTERNAL_SERVER_ERROR; } /* Set up variables */ ap_add_common_vars(r); ap_add_cgi_vars(r); apr_table_setn(e, "UNMAPPED_REMOTE_USER", "REMOTE_USER"); if ((val = apr_table_get(e, "HTTPS")) && (strcmp(val, "on") == 0)) apr_table_setn(e, "SERVER_PORT_SECURE", "1"); else apr_table_setn(e, "SERVER_PORT_SECURE", "0"); apr_table_setn(e, "URL", r->uri); /* Set up connection structure and ecb, * NULL or zero out most fields. */ cid = apr_pcalloc(r->pool, sizeof(isapi_cid)); /* Fixup defaults for dconf */ cid->dconf.read_ahead_buflen = (dconf->read_ahead_buflen == ISAPI_UNDEF) ? 49152 : dconf->read_ahead_buflen; cid->dconf.log_unsupported = (dconf->log_unsupported == ISAPI_UNDEF) ? 0 : dconf->log_unsupported; cid->dconf.log_to_errlog = (dconf->log_to_errlog == ISAPI_UNDEF) ? 0 : dconf->log_to_errlog; cid->dconf.log_to_query = (dconf->log_to_query == ISAPI_UNDEF) ? 1 : dconf->log_to_query; cid->dconf.fake_async = (dconf->fake_async == ISAPI_UNDEF) ? 0 : dconf->fake_async; cid->ecb = apr_pcalloc(r->pool, sizeof(EXTENSION_CONTROL_BLOCK)); cid->ecb->ConnID = cid; cid->isa = isa; cid->r = r; r->status = 0; cid->ecb->cbSize = sizeof(EXTENSION_CONTROL_BLOCK); cid->ecb->dwVersion = isa->report_version; cid->ecb->dwHttpStatusCode = 0; strcpy(cid->ecb->lpszLogData, ""); /* TODO: are copies really needed here? */ cid->ecb->lpszMethod = (char*) r->method; cid->ecb->lpszQueryString = (char*) apr_table_get(e, "QUERY_STRING"); cid->ecb->lpszPathInfo = (char*) apr_table_get(e, "PATH_INFO"); cid->ecb->lpszPathTranslated = (char*) apr_table_get(e, "PATH_TRANSLATED"); cid->ecb->lpszContentType = (char*) apr_table_get(e, "CONTENT_TYPE"); /* Set up the callbacks */ cid->ecb->GetServerVariable = regfnGetServerVariable; cid->ecb->WriteClient = regfnWriteClient; cid->ecb->ReadClient = regfnReadClient; cid->ecb->ServerSupportFunction = regfnServerSupportFunction; /* Set up client input */ res = ap_setup_client_block(r, REQUEST_CHUNKED_ERROR); if (res) { return res; } if (ap_should_client_block(r)) { /* Time to start reading the appropriate amount of data, * and allow the administrator to tweak the number */ if (r->remaining) { cid->ecb->cbTotalBytes = (apr_size_t)r->remaining; if (cid->ecb->cbTotalBytes > (apr_uint32_t)cid->dconf.read_ahead_buflen) cid->ecb->cbAvailable = cid->dconf.read_ahead_buflen; else cid->ecb->cbAvailable = cid->ecb->cbTotalBytes; } else { cid->ecb->cbTotalBytes = 0xffffffff; cid->ecb->cbAvailable = cid->dconf.read_ahead_buflen; } cid->ecb->lpbData = apr_pcalloc(r->pool, cid->ecb->cbAvailable + 1); read = 0; while (read < cid->ecb->cbAvailable && ((res = ap_get_client_block(r, (char*)cid->ecb->lpbData + read, cid->ecb->cbAvailable - read)) > 0)) { read += res; } if (res < 0) { return HTTP_INTERNAL_SERVER_ERROR; } /* Although it's not to spec, IIS seems to null-terminate * its lpdData string. So we will too. */ if (res == 0) cid->ecb->cbAvailable = cid->ecb->cbTotalBytes = read; else cid->ecb->cbAvailable = read; cid->ecb->lpbData[read] = '\0'; } else { cid->ecb->cbTotalBytes = 0; cid->ecb->cbAvailable = 0; cid->ecb->lpbData = NULL; } /* To emulate async behavior... * * We create a cid->completed mutex and lock on it so that the * app can believe is it running async. * * This request completes upon a notification through * ServerSupportFunction(HSE_REQ_DONE_WITH_SESSION), which * unlocks this mutex. If the HttpExtensionProc() returns * HSE_STATUS_PENDING, we will attempt to gain this lock again * which may *only* happen once HSE_REQ_DONE_WITH_SESSION has * unlocked the mutex. */ if (cid->dconf.fake_async) { rv = apr_thread_mutex_create(&cid->completed, APR_THREAD_MUTEX_UNNESTED, r->pool); if (cid->completed && (rv == APR_SUCCESS)) { rv = apr_thread_mutex_lock(cid->completed); } if (!cid->completed || (rv != APR_SUCCESS)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02112) "Failed to create completion mutex"); return HTTP_INTERNAL_SERVER_ERROR; } } /* All right... try and run the sucker */ rv = (*isa->HttpExtensionProc)(cid->ecb); /* Check for a log message - and log it */ if (*cid->ecb->lpszLogData) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02113) "%s: %s", r->filename, cid->ecb->lpszLogData); } switch(rv) { case 0: /* Strange, but MS isapi accepts this as success */ case HSE_STATUS_SUCCESS: case HSE_STATUS_SUCCESS_AND_KEEP_CONN: /* Ignore the keepalive stuff; Apache handles it just fine without * the ISAPI Handler's "advice". * Per Microsoft: "In IIS versions 4.0 and later, the return * values HSE_STATUS_SUCCESS and HSE_STATUS_SUCCESS_AND_KEEP_CONN * are functionally identical: Keep-Alive connections are * maintained, if supported by the client." * ... so we were pat all this time */ break; case HSE_STATUS_PENDING: /* emulating async behavior... */ if (cid->completed) { /* The completion port was locked prior to invoking * HttpExtensionProc(). Once we can regain the lock, * when ServerSupportFunction(HSE_REQ_DONE_WITH_SESSION) * is called by the extension to release the lock, * we may finally destroy the request. */ (void)apr_thread_mutex_lock(cid->completed); break; } else if (cid->dconf.log_unsupported) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02114) "asynch I/O result HSE_STATUS_PENDING " "from HttpExtensionProc() is not supported: %s", r->filename); r->status = HTTP_INTERNAL_SERVER_ERROR; } break; case HSE_STATUS_ERROR: /* end response if we have yet to do so. */ ap_log_rerror(APLOG_MARK, APLOG_WARNING, apr_get_os_error(), r, APLOGNO(02115) "HSE_STATUS_ERROR result from " "HttpExtensionProc(): %s", r->filename); r->status = HTTP_INTERNAL_SERVER_ERROR; break; default: ap_log_rerror(APLOG_MARK, APLOG_WARNING, apr_get_os_error(), r, APLOGNO(02116) "unrecognized result code %d " "from HttpExtensionProc(): %s ", rv, r->filename); r->status = HTTP_INTERNAL_SERVER_ERROR; break; } /* Flush the response now, including headers-only responses */ if (cid->headers_set || cid->response_sent) { conn_rec *c = r->connection; apr_bucket_brigade *bb; apr_bucket *b; apr_status_t rv; bb = apr_brigade_create(r->pool, c->bucket_alloc); b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); rv = ap_pass_brigade(r->output_filters, bb); cid->response_sent = 1; if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(02117) "ap_pass_brigade failed to " "complete the response: %s ", r->filename); } return OK; /* NOT r->status, even if it has changed. */ } /* As the client returned no error, and if we did not error out * ourselves, trust dwHttpStatusCode to say something relevant. */ if (!ap_is_HTTP_SERVER_ERROR(r->status) && cid->ecb->dwHttpStatusCode) { r->status = cid->ecb->dwHttpStatusCode; } /* For all missing-response situations simply return the status, * and let the core respond to the client. */ return r->status; } /********************************************************** * * ISAPI Module Setup Hooks * **********************************************************/ static int isapi_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { apr_status_t rv; apr_pool_create_ex(&loaded.pool, pconf, NULL, NULL); if (!loaded.pool) { ap_log_error(APLOG_MARK, APLOG_ERR, APR_EGENERAL, NULL, APLOGNO(02118) "could not create the isapi cache pool"); return APR_EGENERAL; } loaded.hash = apr_hash_make(loaded.pool); if (!loaded.hash) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(02119) "Failed to create module cache"); return APR_EGENERAL; } rv = apr_thread_mutex_create(&loaded.lock, APR_THREAD_MUTEX_DEFAULT, loaded.pool); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, NULL, APLOGNO(02682) "Failed to create module cache lock"); return rv; } return OK; } static void isapi_hooks(apr_pool_t *cont) { ap_hook_pre_config(isapi_pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_handler(isapi_handler, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(isapi) = { STANDARD20_MODULE_STUFF, create_isapi_dir_config, /* create per-dir config */ merge_isapi_dir_configs, /* merge per-dir config */ NULL, /* server config */ NULL, /* merge server config */ isapi_cmds, /* command apr_table_t */ isapi_hooks /* register hooks */ }; httpd-2.4.41/modules/arch/win32/mod_isapi.dep0000644000000000000500000000446412674411515017237 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_isapi.mak ..\..\..\build\win32\httpd.rc : \ "..\..\..\include\ap_release.h"\ .\mod_isapi.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_expr.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\http_core.h"\ "..\..\..\include\http_log.h"\ "..\..\..\include\http_protocol.h"\ "..\..\..\include\http_request.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\mod_core.h"\ "..\..\..\include\os.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_script.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_dso.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_lib.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_portable.h"\ "..\..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_shm.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_thread_rwlock.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ ".\mod_isapi.h"\ httpd-2.4.41/modules/arch/win32/mod_win32.c0000644000000000000500000004644312661357032016550 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifdef WIN32 #include "apr_strings.h" #include "apr_portable.h" #include "apr_buckets.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_protocol.h" #include "http_request.h" #include "http_log.h" #include "util_script.h" #include "mod_core.h" #include "mod_cgi.h" #include "apr_lib.h" #include "ap_regkey.h" /* * CGI Script stuff for Win32... */ typedef enum { eFileTypeUNKNOWN, eFileTypeBIN, eFileTypeEXE16, eFileTypeEXE32, eFileTypeSCRIPT } file_type_e; typedef enum { INTERPRETER_SOURCE_UNSET, INTERPRETER_SOURCE_REGISTRY_STRICT, INTERPRETER_SOURCE_REGISTRY, INTERPRETER_SOURCE_SHEBANG } interpreter_source_e; AP_DECLARE(file_type_e) ap_get_win32_interpreter(const request_rec *, char **interpreter, char **arguments); module AP_MODULE_DECLARE_DATA win32_module; typedef struct { /* Where to find interpreter to run scripts */ interpreter_source_e script_interpreter_source; } win32_dir_conf; static void *create_win32_dir_config(apr_pool_t *p, char *dir) { win32_dir_conf *conf; conf = (win32_dir_conf*)apr_palloc(p, sizeof(win32_dir_conf)); conf->script_interpreter_source = INTERPRETER_SOURCE_UNSET; return conf; } static void *merge_win32_dir_configs(apr_pool_t *p, void *basev, void *addv) { win32_dir_conf *new; win32_dir_conf *base = (win32_dir_conf *) basev; win32_dir_conf *add = (win32_dir_conf *) addv; new = (win32_dir_conf *) apr_pcalloc(p, sizeof(win32_dir_conf)); new->script_interpreter_source = (add->script_interpreter_source != INTERPRETER_SOURCE_UNSET) ? add->script_interpreter_source : base->script_interpreter_source; return new; } static const char *set_interpreter_source(cmd_parms *cmd, void *dv, char *arg) { win32_dir_conf *d = (win32_dir_conf *)dv; if (!strcasecmp(arg, "registry")) { d->script_interpreter_source = INTERPRETER_SOURCE_REGISTRY; } else if (!strcasecmp(arg, "registry-strict")) { d->script_interpreter_source = INTERPRETER_SOURCE_REGISTRY_STRICT; } else if (!strcasecmp(arg, "script")) { d->script_interpreter_source = INTERPRETER_SOURCE_SHEBANG; } else { return apr_pstrcat(cmd->temp_pool, "ScriptInterpreterSource \"", arg, "\" must be \"registry\", \"registry-strict\" or " "\"script\"", NULL); } return NULL; } /* XXX: prep_string should translate the string into unicode, * such that it is compatible with whatever codepage the client * will read characters 80-ff. For the moment, use the unicode * values 0080-00ff. This isn't trivial, since the code page * varies between msdos and Windows applications. * For subsystem 2 [GUI] the default is the system Ansi CP. * For subsystem 3 [CLI] the default is the system OEM CP. */ static void prep_string(const char ** str, apr_pool_t *p) { const char *ch = *str; char *ch2; apr_size_t widen = 0; if (!ch) { return; } while (*ch) { if (*(ch++) & 0x80) { ++widen; } } if (!widen) { return; } widen += (ch - *str) + 1; ch = *str; *str = ch2 = apr_palloc(p, widen); while (*ch) { if (*ch & 0x80) { /* sign extension won't hurt us here */ *(ch2++) = 0xC0 | ((*ch >> 6) & 0x03); *(ch2++) = 0x80 | (*(ch++) & 0x3f); } else { *(ch2++) = *(ch++); } } *(ch2++) = '\0'; } /* Somewhat more exciting ... figure out where the registry has stashed the * ExecCGI or Open command - it may be nested one level deep (or more???) */ static char* get_interpreter_from_win32_registry(apr_pool_t *p, const char* ext, int strict) { apr_status_t rv; ap_regkey_t *name_key = NULL; ap_regkey_t *type_key; ap_regkey_t *key; char execcgi_path[] = "SHELL\\EXECCGI\\COMMAND"; char execopen_path[] = "SHELL\\OPEN\\COMMAND"; char *type_name; char *buffer; if (!ext) { return NULL; } /* * Future optimization: * When the registry is successfully searched, store the strings for * interpreter and arguments in an ext hash to speed up subsequent look-ups */ /* Open the key associated with the script filetype extension */ rv = ap_regkey_open(&type_key, AP_REGKEY_CLASSES_ROOT, ext, APR_READ, p); if (rv != APR_SUCCESS) { return NULL; } /* Retrieve the name of the script filetype extension */ rv = ap_regkey_value_get(&type_name, type_key, "", p); if (rv == APR_SUCCESS && type_name[0]) { /* Open the key associated with the script filetype extension */ rv = ap_regkey_open(&name_key, AP_REGKEY_CLASSES_ROOT, type_name, APR_READ, p); } /* Open the key for the script command path by: * * 1) the 'named' filetype key for ExecCGI/Command * 2) the extension's type key for ExecCGI/Command * * and if the strict arg is false, then continue trying: * * 3) the 'named' filetype key for Open/Command * 4) the extension's type key for Open/Command */ if (name_key) { if ((rv = ap_regkey_open(&key, name_key, execcgi_path, APR_READ, p)) == APR_SUCCESS) { rv = ap_regkey_value_get(&buffer, key, "", p); ap_regkey_close(name_key); } } if (!name_key || (rv != APR_SUCCESS)) { if ((rv = ap_regkey_open(&key, type_key, execcgi_path, APR_READ, p)) == APR_SUCCESS) { rv = ap_regkey_value_get(&buffer, key, "", p); ap_regkey_close(type_key); } } if (!strict && name_key && (rv != APR_SUCCESS)) { if ((rv = ap_regkey_open(&key, name_key, execopen_path, APR_READ, p)) == APR_SUCCESS) { rv = ap_regkey_value_get(&buffer, key, "", p); ap_regkey_close(name_key); } } if (!strict && (rv != APR_SUCCESS)) { if ((rv = ap_regkey_open(&key, type_key, execopen_path, APR_READ, p)) == APR_SUCCESS) { rv = ap_regkey_value_get(&buffer, key, "", p); ap_regkey_close(type_key); } } if (name_key) { ap_regkey_close(name_key); } ap_regkey_close(type_key); if (rv != APR_SUCCESS || !buffer[0]) { return NULL; } return buffer; } static apr_array_header_t *split_argv(apr_pool_t *p, const char *interp, const char *cgiprg, const char *cgiargs) { apr_array_header_t *args = apr_array_make(p, 8, sizeof(char*)); char *d = apr_palloc(p, strlen(interp)+1); const char *ch = interp; const char **arg; int prgtaken = 0; int argtaken = 0; int inquo; int sl; while (*ch) { /* Skip on through Deep Space */ if (apr_isspace(*ch)) { ++ch; continue; } /* One Arg */ if (((*ch == '$') || (*ch == '%')) && (*(ch + 1) == '*')) { const char *cgiarg = cgiargs; argtaken = 1; for (;;) { char *w = ap_getword_nulls(p, &cgiarg, '+'); if (!*w) { break; } ap_unescape_url(w); prep_string((const char**)&w, p); arg = (const char**)apr_array_push(args); *arg = ap_escape_shell_cmd(p, w); } ch += 2; continue; } if (((*ch == '$') || (*ch == '%')) && (*(ch + 1) == '1')) { /* Todo: Make short name!!! */ prgtaken = 1; arg = (const char**)apr_array_push(args); if (*ch == '%') { char *repl = apr_pstrdup(p, cgiprg); *arg = repl; while ((repl = strchr(repl, '/'))) { *repl++ = '\\'; } } else { *arg = cgiprg; } ch += 2; continue; } if ((*ch == '\"') && ((*(ch + 1) == '$') || (*(ch + 1) == '%')) && (*(ch + 2) == '1') && (*(ch + 3) == '\"')) { prgtaken = 1; arg = (const char**)apr_array_push(args); if (*(ch + 1) == '%') { char *repl = apr_pstrdup(p, cgiprg); *arg = repl; while ((repl = strchr(repl, '/'))) { *repl++ = '\\'; } } else { *arg = cgiprg; } ch += 4; continue; } arg = (const char**)apr_array_push(args); *arg = d; inquo = 0; while (*ch) { if (apr_isspace(*ch) && !inquo) { ++ch; break; } /* Get 'em backslashes */ for (sl = 0; *ch == '\\'; ++sl) { *d++ = *ch++; } if (sl & 1) { /* last unmatched '\' + '"' sequence is a '"' */ if (*ch == '\"') { *(d - 1) = *ch++; } continue; } if (*ch == '\"') { /* '""' sequence within quotes is a '"' */ if (*++ch == '\"' && inquo) { *d++ = *ch++; continue; } /* Flip quote state */ inquo = !inquo; if (apr_isspace(*ch) && !inquo) { ++ch; break; } /* All other '"'s are Munched */ continue; } /* Anything else is, well, something else */ *d++ = *ch++; } /* Term that arg, already pushed on args */ *d++ = '\0'; } if (!prgtaken) { arg = (const char**)apr_array_push(args); *arg = cgiprg; } if (!argtaken) { const char *cgiarg = cgiargs; for (;;) { char *w = ap_getword_nulls(p, &cgiarg, '+'); if (!*w) { break; } ap_unescape_url(w); prep_string((const char**)&w, p); arg = (const char**)apr_array_push(args); *arg = ap_escape_shell_cmd(p, w); } } arg = (const char**)apr_array_push(args); *arg = NULL; return args; } static apr_status_t ap_cgi_build_command(const char **cmd, const char ***argv, request_rec *r, apr_pool_t *p, cgi_exec_info_t *e_info) { const apr_array_header_t *elts_arr = apr_table_elts(r->subprocess_env); const apr_table_entry_t *elts = (apr_table_entry_t *) elts_arr->elts; const char *ext = NULL; const char *interpreter = NULL; win32_dir_conf *d; apr_file_t *fh; const char *args = ""; int i; d = (win32_dir_conf *)ap_get_module_config(r->per_dir_config, &win32_module); if (e_info->cmd_type) { /* We have to consider that the client gets any QUERY_ARGS * without any charset interpretation, use prep_string to * create a string of the literal QUERY_ARGS bytes. */ *cmd = r->filename; if (r->args && r->args[0] && !ap_strchr_c(r->args, '=')) { args = r->args; } } /* Handle the complete file name, we DON'T want to follow suexec, since * an unrooted command is as predictable as shooting craps in Win32. * Notice that unlike most mime extension parsing, we have to use the * win32 parsing here, therefore the final extension is the only one * we will consider. */ ext = strrchr(apr_filepath_name_get(*cmd), '.'); /* If the file has an extension and it is not .com and not .exe and * we've been instructed to search the registry, then do so. * Let apr_proc_create do all of the .bat/.cmd dirty work. */ if (ext && (!strcasecmp(ext,".exe") || !strcasecmp(ext,".com") || !strcasecmp(ext,".bat") || !strcasecmp(ext,".cmd"))) { interpreter = ""; } if (!interpreter && ext && (d->script_interpreter_source == INTERPRETER_SOURCE_REGISTRY || d->script_interpreter_source == INTERPRETER_SOURCE_REGISTRY_STRICT)) { /* Check the registry */ int strict = (d->script_interpreter_source == INTERPRETER_SOURCE_REGISTRY_STRICT); interpreter = get_interpreter_from_win32_registry(r->pool, ext, strict); if (interpreter && e_info->cmd_type != APR_SHELLCMD) { e_info->cmd_type = APR_PROGRAM_PATH; } else { ap_log_error(APLOG_MARK, APLOG_INFO, 0, r->server, strict ? APLOGNO(03180) "No ExecCGI verb found for files of type '%s'." : APLOGNO(03181) "No ExecCGI or Open verb found for files of type '%s'.", ext); } } if (!interpreter) { apr_status_t rv; char buffer[1024]; apr_size_t bytes = sizeof(buffer); apr_size_t i; /* Need to peek into the file figure out what it really is... * ### aught to go back and build a cache for this one of these days. */ if ((rv = apr_file_open(&fh, *cmd, APR_READ | APR_BUFFERED, APR_OS_DEFAULT, r->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02100) "Failed to open cgi file %s for testing", *cmd); return rv; } if ((rv = apr_file_read(fh, buffer, &bytes)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02101) "Failed to read cgi file %s for testing", *cmd); return rv; } apr_file_close(fh); /* Some twisted character [no pun intended] at MS decided that a * zero width joiner as the lead wide character would be ideal for * describing Unicode text files. This was further convoluted to * another MSism that the same character mapped into utf-8, EF BB BF * would signify utf-8 text files. * * Since MS configuration files are all protecting utf-8 encoded * Unicode path, file and resource names, we already have the correct * WinNT encoding. But at least eat the stupid three bytes up front. * * ### A more thorough check would also allow UNICODE text in buf, and * convert it to UTF-8 for invoking unicode scripts. Those are few * and far between, so leave that code an enterprising soul with a need. */ if ((bytes >= 3) && memcmp(buffer, "\xEF\xBB\xBF", 3) == 0) { memmove(buffer, buffer + 3, bytes -= 3); } /* Script or executable, that is the question... * we check here also for '! so that .vbs scripts can work as CGI. */ if ((bytes >= 2) && ((buffer[0] == '#') || (buffer[0] == '\'')) && (buffer[1] == '!')) { /* Assuming file is a script since it starts with a shebang */ for (i = 2; i < bytes; i++) { if ((buffer[i] == '\r') || (buffer[i] == '\n')) { buffer[i] = '\0'; break; } } if (i < bytes) { interpreter = buffer + 2; while (apr_isspace(*interpreter)) { ++interpreter; } if (e_info->cmd_type != APR_SHELLCMD) { e_info->cmd_type = APR_PROGRAM_PATH; } } } else if (bytes >= sizeof(IMAGE_DOS_HEADER)) { /* Not a script, is it an executable? */ IMAGE_DOS_HEADER *hdr = (IMAGE_DOS_HEADER*)buffer; if (hdr->e_magic == IMAGE_DOS_SIGNATURE) { if (hdr->e_lfarlc < 0x40) { /* Ought to invoke this 16 bit exe by a stub, (cmd /c?) */ interpreter = ""; } else { interpreter = ""; } } } } if (!interpreter) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02102) "%s is not executable; ensure interpreted scripts have " "\"#!\" or \"'!\" first line", *cmd); return APR_EBADF; } *argv = (const char **)(split_argv(p, interpreter, *cmd, args)->elts); *cmd = (*argv)[0]; e_info->detached = 1; /* XXX: Must fix r->subprocess_env to follow utf-8 conventions from * the client's octets so that win32 apr_proc_create is happy. * The -best- way is to determine if the .exe is unicode aware * (using 0x0080-0x00ff) or is linked as a command or windows * application (following the OEM or Ansi code page in effect.) */ for (i = 0; i < elts_arr->nelts; ++i) { if (elts[i].key && *elts[i].key && *elts[i].val && !(strncmp(elts[i].key, "REMOTE_", 7) == 0 || strcmp(elts[i].key, "GATEWAY_INTERFACE") == 0 || strcmp(elts[i].key, "REQUEST_METHOD") == 0 || strcmp(elts[i].key, "SERVER_ADDR") == 0 || strcmp(elts[i].key, "SERVER_PORT") == 0 || strcmp(elts[i].key, "SERVER_PROTOCOL") == 0)) { prep_string((const char**) &elts[i].val, r->pool); } } return APR_SUCCESS; } static void register_hooks(apr_pool_t *p) { APR_REGISTER_OPTIONAL_FN(ap_cgi_build_command); } static const command_rec win32_cmds[] = { AP_INIT_TAKE1("ScriptInterpreterSource", set_interpreter_source, NULL, OR_FILEINFO, "Where to find interpreter to run Win32 scripts " "(Registry or script shebang line)"), { NULL } }; AP_DECLARE_MODULE(win32) = { STANDARD20_MODULE_STUFF, create_win32_dir_config, /* create per-dir config */ merge_win32_dir_configs, /* merge per-dir config */ NULL, /* server config */ NULL, /* merge server config */ win32_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; #endif /* defined WIN32 */ httpd-2.4.41/modules/arch/win32/mod_isapi.dsp0000644000000000000500000001103210551346420017234 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_isapi" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_isapi - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_isapi.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_isapi.mak" CFG="mod_isapi - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_isapi - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_isapi - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_isapi - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_isapi_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_isapi.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_isapi.so" /d LONG_NAME="isapi_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_isapi.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_isapi.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_isapi.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_isapi.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_isapi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_isapi - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_isapi_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_isapi.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_isapi.so" /d LONG_NAME="isapi_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_isapi.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_isapi.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_isapi.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_isapi.so # Begin Special Build Tool TargetPath=.\Debug\mod_isapi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_isapi - Win32 Release" # Name "mod_isapi - Win32 Debug" # Begin Source File SOURCE=.\mod_isapi.c # End Source File # Begin Source File SOURCE=.\mod_isapi.h # End Source File # Begin Source File SOURCE=..\..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/arch/win32/config.m40000644000000000000500000000036110150161574016272 0ustar rootsrcdnl modules enabled in this directory by default dnl APACHE_MODULE(name, helptext[, objects[, structname[, default[, config]]]]) APACHE_MODPATH_INIT(arch/win32) APACHE_MODULE(isapi, isapi extension support, , , no) APACHE_MODPATH_FINISH httpd-2.4.41/modules/arch/win32/mod_isapi.h0000644000000000000500000002566012757564422016727 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_isapi.h * @brief ISAPI module extension to Apache * * @defgroup MOD_ISAPI mod_isapi * @ingroup APACHE_MODS * @{ */ #ifndef MOD_ISAPI_H #define MOD_ISAPI_H #ifdef __cplusplus extern "C" { #endif /* The Version Information storage passed to a module on startup * via the GetExtensionVersion() entry point. */ typedef struct HSE_VERSION_INFO { apr_uint32_t dwExtensionVersion; char lpszExtensionDesc[256]; } HSE_VERSION_INFO; /* The startup entry point that must be exported by every ISAPI handler */ int APR_THREAD_FUNC GetExtensionVersion(HSE_VERSION_INFO *ver_info); typedef int (APR_THREAD_FUNC *PFN_GETEXTENSIONVERSION)(HSE_VERSION_INFO *ver_info); /* Our internal 'HCONN' representation, always opaque to the user. */ typedef struct isapi_cid isapi_cid; typedef struct isapi_cid *HCONN; /* Prototypes of the essential functions exposed by mod_isapi * for the module to communicate with Apache. */ typedef int (APR_THREAD_FUNC *PFN_GETSERVERVARIABLE)(HCONN cid, char *variable_name, void *buf_data, apr_uint32_t *buf_size); typedef int (APR_THREAD_FUNC *PFN_WRITECLIENT)(HCONN cid, void *buf_data, apr_uint32_t *buf_size, apr_uint32_t flags); typedef int (APR_THREAD_FUNC *PFN_READCLIENT)(HCONN cid, void *buf_data, apr_uint32_t *buf_size); typedef int (APR_THREAD_FUNC *PFN_SERVERSUPPORTFUNCTION)(HCONN cid, apr_uint32_t HSE_code, void *buf_data, apr_uint32_t *buf_size, apr_uint32_t *flags); /* The ecb structure is passed on each invocation of the module */ typedef struct EXTENSION_CONTROL_BLOCK { apr_uint32_t cbSize; apr_uint32_t dwVersion; HCONN ConnID; apr_uint32_t dwHttpStatusCode; char lpszLogData[80]; char *lpszMethod; char *lpszQueryString; char *lpszPathInfo; char *lpszPathTranslated; apr_uint32_t cbTotalBytes; apr_uint32_t cbAvailable; unsigned char *lpbData; char *lpszContentType; PFN_GETSERVERVARIABLE GetServerVariable; PFN_WRITECLIENT WriteClient; PFN_READCLIENT ReadClient; PFN_SERVERSUPPORTFUNCTION ServerSupportFunction; } EXTENSION_CONTROL_BLOCK; /* Status/Headers structure to pass to HSE_SEND_HEADER_EX, * an MS extension to ServerSupportFunction */ typedef struct HSE_SEND_HEADER_EX_INFO { const char * pszStatus; /* HTTP status text, such as "200 OK" */ const char * pszHeader; /* HTTP header lines text, such as * "Content-type: text/plain\r\n" * "Content-Language: en\r\n" * Note that (in spite of cchFoo lengths below) * NULL characters will interfere in headers. */ apr_uint32_t cchStatus; /* length of pszStatus text */ apr_uint32_t cchHeader; /* length of pszHeader text */ int fKeepConn; /* Ignored: used to set keep-alive status, * but Apache follows the client's negotiated * HTTP contract to decide. */ } HSE_SEND_HEADER_EX_INFO; /* Our only 'supported' MS extended flag bit for TransmitFile, * HSE_IO_SEND_HEADERS indicates that Status+Headers are present * in the pszStatusCode member of the HSE_TF_INFO structure. */ #define HSE_IO_SEND_HEADERS 8 /* The remaining flags are MS extended flag bits that bear little * relation to Apache; the rules that the Apache server obeys follow * its own design and HTTP protocol filter rules. * * We do not support async, however, we fake it. If HSE_IO_SYNC is * not passed, and a completion context was defined, we will invoke the * completion function immediately following the transfer, and then * return to the caller. If HSE_IO_SYNC is passed, there is no call * necessary to the completion context. */ #define HSE_IO_SYNC 1 #define HSE_IO_ASYNC 2 #define HSE_IO_DISCONNECT_AFTER_SEND 4 #define HSE_IO_NODELAY 4096 /* The Completion function prototype. This callback may be fixed with * the HSE_REQ_IO_COMPLETION ServerSupportFunction call, or overridden * for the HSE_REQ_TRANSMIT_FILE call. */ typedef void (APR_THREAD_FUNC *PFN_HSE_IO_COMPLETION) (EXTENSION_CONTROL_BLOCK *ecb, void *ctxt, apr_uint32_t cbIO, apr_uint32_t dwError); /* TransmitFile structure to pass to HSE_REQ_TRANSMIT_FILE, an MS extension */ typedef struct HSE_TF_INFO { PFN_HSE_IO_COMPLETION pfnHseIO; /* Overrides the default setting of * HSE_REQ_IO_COMPLETION if not NULL */ void *pContext; apr_os_file_t hFile; /* HANDLE/fd to transmit */ const char *pszStatusCode; /* Ignored if HSE_IO_SEND_HEADERS is * not set. Includes HTTP status text * plus header text lines, such as * "200 OK\r\n" * "Content-type: text/plain\r\n" */ apr_uint32_t BytesToWrite; /* 0 is write-all */ apr_uint32_t Offset; /* File Offset */ void *pHead; /* Prefix with *pHead body text */ apr_uint32_t HeadLength; /* Length of *pHead body text */ void *pTail; /* Prefix with *pTail body text */ apr_uint32_t TailLength; /* Length of *pTail body text */ apr_uint32_t dwFlags; /* bit flags described above */ } HSE_TF_INFO; typedef struct HSE_URL_MAPEX_INFO { char lpszPath[260]; apr_uint32_t dwFlags; apr_uint32_t cchMatchingPath; apr_uint32_t cchMatchingURL; apr_uint32_t dwReserved1; apr_uint32_t dwReserved2; } HSE_URL_MAPEX_INFO; /* Original ISAPI ServerSupportFunction() HSE_code methods */ #define HSE_REQ_SEND_URL_REDIRECT_RESP 1 #define HSE_REQ_SEND_URL 2 #define HSE_REQ_SEND_RESPONSE_HEADER 3 #define HSE_REQ_DONE_WITH_SESSION 4 /* MS Extented methods to ISAPI ServerSupportFunction() HSE_code */ #define HSE_REQ_MAP_URL_TO_PATH 1001 /* Emulated */ #define HSE_REQ_GET_SSPI_INFO 1002 /* Not Supported */ #define HSE_APPEND_LOG_PARAMETER 1003 /* Supported */ #define HSE_REQ_IO_COMPLETION 1005 /* Emulated */ #define HSE_REQ_TRANSMIT_FILE 1006 /* Async Emulated */ #define HSE_REQ_REFRESH_ISAPI_ACL 1007 /* Not Supported */ #define HSE_REQ_IS_KEEP_CONN 1008 /* Supported */ #define HSE_REQ_ASYNC_READ_CLIENT 1010 /* Emulated */ /* Added with ISAPI 4.0 */ #define HSE_REQ_GET_IMPERSONATION_TOKEN 1011 /* Not Supported */ #define HSE_REQ_MAP_URL_TO_PATH_EX 1012 /* Emulated */ #define HSE_REQ_ABORTIVE_CLOSE 1014 /* Ignored */ /* Added after ISAPI 4.0 in IIS 5.0 */ #define HSE_REQ_GET_CERT_INFO_EX 1015 /* Not Supported */ #define HSE_REQ_SEND_RESPONSE_HEADER_EX 1016 /* Supported (no nulls!) */ #define HSE_REQ_CLOSE_CONNECTION 1017 /* Ignored */ #define HSE_REQ_IS_CONNECTED 1018 /* Supported */ #define HSE_REQ_EXTENSION_TRIGGER 1020 /* Not Supported */ /* The request entry point that must be exported by every ISAPI handler */ apr_uint32_t APR_THREAD_FUNC HttpExtensionProc(EXTENSION_CONTROL_BLOCK *ecb); typedef apr_uint32_t (APR_THREAD_FUNC *PFN_HTTPEXTENSIONPROC)(EXTENSION_CONTROL_BLOCK *ecb); /* Allowable return values from HttpExtensionProc (apparently 0 is also * accepted by MS IIS, and we will respect it as Success.) * If the HttpExtensionProc returns HSE_STATUS_PENDING, we will create * a wait mutex and lock on it, until HSE_REQ_DONE_WITH_SESSION is called. */ #define HSE_STATUS_SUCCESS 1 #define HSE_STATUS_SUCCESS_AND_KEEP_CONN 2 /* 1 vs 2 Ignored, we choose */ #define HSE_STATUS_PENDING 3 /* Emulated (thread lock) */ #define HSE_STATUS_ERROR 4 /* Anticipated error code for common faults within mod_isapi itself */ #ifndef ERROR_INSUFFICIENT_BUFFER #define ERROR_INSUFFICIENT_BUFFER ENOBUFS #endif #ifndef ERROR_INVALID_INDEX #define ERROR_INVALID_INDEX EINVAL #endif #ifndef ERROR_INVALID_PARAMETER #define ERROR_INVALID_PARAMETER EINVAL #endif #ifndef ERROR_READ_FAULT #define ERROR_READ_FAULT EIO #endif #ifndef ERROR_WRITE_FAULT #define ERROR_WRITE_FAULT EIO #endif #ifndef ERROR_SUCCESS #define ERROR_SUCCESS 0 #endif /* Valid flags passed with TerminateExtension() */ #define HSE_TERM_MUST_UNLOAD 1 #define HSE_TERM_ADVISORY_UNLOAD 2 /* The shutdown entry point optionally exported by an ISAPI handler, passed * HSE_TERM_MUST_UNLOAD or HSE_TERM_ADVISORY_UNLOAD. The module may return * if passed HSE_TERM_ADVISORY_UNLOAD, and the module will remain loaded. * If the module returns 1 to HSE_TERM_ADVISORY_UNLOAD it is immediately * unloaded. If the module is passed HSE_TERM_MUST_UNLOAD, its return value * is ignored. */ int APR_THREAD_FUNC TerminateExtension(apr_uint32_t flags); typedef int (APR_THREAD_FUNC *PFN_TERMINATEEXTENSION)(apr_uint32_t flags); /* Module may return 0 if passed HSE_TERM_ADVISORY_UNLOAD, and the module * will remain loaded, or 1 if it consents to being unloaded. If the module * is passed HSE_TERM_MUST_UNLOAD, its return value is ignored. */ #define HSE_TERM_MUST_UNLOAD 1 #define HSE_TERM_ADVISORY_UNLOAD 2 #ifdef __cplusplus } #endif #endif /* !MOD_ISAPI_H */ /** @} */ httpd-2.4.41/modules/arch/win32/Makefile.in0000644000000000000500000000026710150161574016635 0ustar rootsrc# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/arch/win32/mod_isapi.mak0000644000000000000500000002351212701473373017233 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_isapi.dsp !IF "$(CFG)" == "" CFG=mod_isapi - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_isapi - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_isapi - Win32 Release" && "$(CFG)" != "mod_isapi - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_isapi.mak" CFG="mod_isapi - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_isapi - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_isapi - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_isapi - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_isapi.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_isapi.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_isapi.obj" -@erase "$(INTDIR)\mod_isapi.res" -@erase "$(INTDIR)\mod_isapi_src.idb" -@erase "$(INTDIR)\mod_isapi_src.pdb" -@erase "$(OUTDIR)\mod_isapi.exp" -@erase "$(OUTDIR)\mod_isapi.lib" -@erase "$(OUTDIR)\mod_isapi.pdb" -@erase "$(OUTDIR)\mod_isapi.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_isapi_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_isapi.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_isapi.so" /d LONG_NAME="isapi_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_isapi.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_isapi.pdb" /debug /out:"$(OUTDIR)\mod_isapi.so" /implib:"$(OUTDIR)\mod_isapi.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_isapi.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_isapi.obj" \ "$(INTDIR)\mod_isapi.res" \ "..\..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_isapi.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_isapi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_isapi.so" if exist .\Release\mod_isapi.so.manifest mt.exe -manifest .\Release\mod_isapi.so.manifest -outputresource:.\Release\mod_isapi.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_isapi - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_isapi.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_isapi.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_isapi.obj" -@erase "$(INTDIR)\mod_isapi.res" -@erase "$(INTDIR)\mod_isapi_src.idb" -@erase "$(INTDIR)\mod_isapi_src.pdb" -@erase "$(OUTDIR)\mod_isapi.exp" -@erase "$(OUTDIR)\mod_isapi.lib" -@erase "$(OUTDIR)\mod_isapi.pdb" -@erase "$(OUTDIR)\mod_isapi.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_isapi_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_isapi.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_isapi.so" /d LONG_NAME="isapi_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_isapi.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_isapi.pdb" /debug /out:"$(OUTDIR)\mod_isapi.so" /implib:"$(OUTDIR)\mod_isapi.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_isapi.so LINK32_OBJS= \ "$(INTDIR)\mod_isapi.obj" \ "$(INTDIR)\mod_isapi.res" \ "..\..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_isapi.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_isapi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_isapi.so" if exist .\Debug\mod_isapi.so.manifest mt.exe -manifest .\Debug\mod_isapi.so.manifest -outputresource:.\Debug\mod_isapi.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_isapi.dep") !INCLUDE "mod_isapi.dep" !ELSE !MESSAGE Warning: cannot find "mod_isapi.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_isapi - Win32 Release" || "$(CFG)" == "mod_isapi - Win32 Debug" !IF "$(CFG)" == "mod_isapi - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\arch\win32" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\arch\win32" !ELSEIF "$(CFG)" == "mod_isapi - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\arch\win32" "libapr - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\arch\win32" !ENDIF !IF "$(CFG)" == "mod_isapi - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\arch\win32" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\arch\win32" !ELSEIF "$(CFG)" == "mod_isapi - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\arch\win32" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\arch\win32" !ENDIF !IF "$(CFG)" == "mod_isapi - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\arch\win32" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\arch\win32" !ELSEIF "$(CFG)" == "mod_isapi - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\arch\win32" "libhttpd - Win32 DebugCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\arch\win32" !ENDIF SOURCE=..\..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_isapi - Win32 Release" "$(INTDIR)\mod_isapi.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_isapi.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_isapi.so" /d LONG_NAME="isapi_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_isapi - Win32 Debug" "$(INTDIR)\mod_isapi.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_isapi.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_isapi.so" /d LONG_NAME="isapi_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_isapi.c "$(INTDIR)\mod_isapi.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/http2/0002755000000000000500000000000013523273342013753 5ustar rootsrchttpd-2.4.41/modules/http2/h2_bucket_beam.c0000644000000000000500000011707513350443476016767 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include #include #include "h2_private.h" #include "h2_util.h" #include "h2_bucket_beam.h" static void h2_beam_emitted(h2_bucket_beam *beam, h2_beam_proxy *proxy); #define H2_BPROXY_NEXT(e) APR_RING_NEXT((e), link) #define H2_BPROXY_PREV(e) APR_RING_PREV((e), link) #define H2_BPROXY_REMOVE(e) APR_RING_REMOVE((e), link) #define H2_BPROXY_LIST_INIT(b) APR_RING_INIT(&(b)->list, h2_beam_proxy, link); #define H2_BPROXY_LIST_SENTINEL(b) APR_RING_SENTINEL(&(b)->list, h2_beam_proxy, link) #define H2_BPROXY_LIST_EMPTY(b) APR_RING_EMPTY(&(b)->list, h2_beam_proxy, link) #define H2_BPROXY_LIST_FIRST(b) APR_RING_FIRST(&(b)->list) #define H2_BPROXY_LIST_LAST(b) APR_RING_LAST(&(b)->list) #define H2_PROXY_BLIST_INSERT_HEAD(b, e) do { \ h2_beam_proxy *ap__b = (e); \ APR_RING_INSERT_HEAD(&(b)->list, ap__b, h2_beam_proxy, link); \ } while (0) #define H2_BPROXY_LIST_INSERT_TAIL(b, e) do { \ h2_beam_proxy *ap__b = (e); \ APR_RING_INSERT_TAIL(&(b)->list, ap__b, h2_beam_proxy, link); \ } while (0) #define H2_BPROXY_LIST_CONCAT(a, b) do { \ APR_RING_CONCAT(&(a)->list, &(b)->list, h2_beam_proxy, link); \ } while (0) #define H2_BPROXY_LIST_PREPEND(a, b) do { \ APR_RING_PREPEND(&(a)->list, &(b)->list, h2_beam_proxy, link); \ } while (0) /******************************************************************************* * beam bucket with reference to beam and bucket it represents ******************************************************************************/ const apr_bucket_type_t h2_bucket_type_beam; #define H2_BUCKET_IS_BEAM(e) (e->type == &h2_bucket_type_beam) struct h2_beam_proxy { apr_bucket_refcount refcount; APR_RING_ENTRY(h2_beam_proxy) link; h2_bucket_beam *beam; apr_bucket *bsender; apr_size_t n; }; static const char Dummy = '\0'; static apr_status_t beam_bucket_read(apr_bucket *b, const char **str, apr_size_t *len, apr_read_type_e block) { h2_beam_proxy *d = b->data; if (d->bsender) { const char *data; apr_status_t status = apr_bucket_read(d->bsender, &data, len, block); if (status == APR_SUCCESS) { *str = data + b->start; *len = b->length; } return status; } *str = &Dummy; *len = 0; return APR_ECONNRESET; } static void beam_bucket_destroy(void *data) { h2_beam_proxy *d = data; if (apr_bucket_shared_destroy(d)) { /* When the beam gets destroyed before this bucket, it will * NULLify its reference here. This is not protected by a mutex, * so it will not help with race conditions. * But it lets us shut down memory pool with circulare beam * references. */ if (d->beam) { h2_beam_emitted(d->beam, d); } apr_bucket_free(d); } } static apr_bucket * h2_beam_bucket_make(apr_bucket *b, h2_bucket_beam *beam, apr_bucket *bsender, apr_size_t n) { h2_beam_proxy *d; d = apr_bucket_alloc(sizeof(*d), b->list); H2_BPROXY_LIST_INSERT_TAIL(&beam->proxies, d); d->beam = beam; d->bsender = bsender; d->n = n; b = apr_bucket_shared_make(b, d, 0, bsender? bsender->length : 0); b->type = &h2_bucket_type_beam; return b; } static apr_bucket *h2_beam_bucket_create(h2_bucket_beam *beam, apr_bucket *bsender, apr_bucket_alloc_t *list, apr_size_t n) { apr_bucket *b = apr_bucket_alloc(sizeof(*b), list); APR_BUCKET_INIT(b); b->free = apr_bucket_free; b->list = list; return h2_beam_bucket_make(b, beam, bsender, n); } const apr_bucket_type_t h2_bucket_type_beam = { "BEAM", 5, APR_BUCKET_DATA, beam_bucket_destroy, beam_bucket_read, apr_bucket_setaside_noop, apr_bucket_shared_split, apr_bucket_shared_copy }; /******************************************************************************* * h2_blist, a brigade without allocations ******************************************************************************/ static apr_array_header_t *beamers; static apr_status_t cleanup_beamers(void *dummy) { (void)dummy; beamers = NULL; return APR_SUCCESS; } void h2_register_bucket_beamer(h2_bucket_beamer *beamer) { if (!beamers) { apr_pool_cleanup_register(apr_hook_global_pool, NULL, cleanup_beamers, apr_pool_cleanup_null); beamers = apr_array_make(apr_hook_global_pool, 10, sizeof(h2_bucket_beamer*)); } APR_ARRAY_PUSH(beamers, h2_bucket_beamer*) = beamer; } static apr_bucket *h2_beam_bucket(h2_bucket_beam *beam, apr_bucket_brigade *dest, const apr_bucket *src) { apr_bucket *b = NULL; int i; if (beamers) { for (i = 0; i < beamers->nelts && b == NULL; ++i) { h2_bucket_beamer *beamer; beamer = APR_ARRAY_IDX(beamers, i, h2_bucket_beamer*); b = beamer(beam, dest, src); } } return b; } /******************************************************************************* * bucket beam that can transport buckets across threads ******************************************************************************/ static void mutex_leave(void *ctx, apr_thread_mutex_t *lock) { apr_thread_mutex_unlock(lock); } static apr_status_t mutex_enter(void *ctx, h2_beam_lock *pbl) { h2_bucket_beam *beam = ctx; pbl->mutex = beam->lock; pbl->leave = mutex_leave; return apr_thread_mutex_lock(pbl->mutex); } static apr_status_t enter_yellow(h2_bucket_beam *beam, h2_beam_lock *pbl) { return mutex_enter(beam, pbl); } static void leave_yellow(h2_bucket_beam *beam, h2_beam_lock *pbl) { if (pbl->leave) { pbl->leave(pbl->leave_ctx, pbl->mutex); } } static apr_off_t bucket_mem_used(apr_bucket *b) { if (APR_BUCKET_IS_FILE(b)) { return 0; } else { /* should all have determinate length */ return b->length; } } static int report_consumption(h2_bucket_beam *beam, h2_beam_lock *pbl) { int rv = 0; apr_off_t len = beam->received_bytes - beam->cons_bytes_reported; h2_beam_io_callback *cb = beam->cons_io_cb; if (len > 0) { if (cb) { void *ctx = beam->cons_ctx; if (pbl) leave_yellow(beam, pbl); cb(ctx, beam, len); if (pbl) enter_yellow(beam, pbl); rv = 1; } beam->cons_bytes_reported += len; } return rv; } static void report_prod_io(h2_bucket_beam *beam, int force, h2_beam_lock *pbl) { apr_off_t len = beam->sent_bytes - beam->prod_bytes_reported; if (force || len > 0) { h2_beam_io_callback *cb = beam->prod_io_cb; if (cb) { void *ctx = beam->prod_ctx; leave_yellow(beam, pbl); cb(ctx, beam, len); enter_yellow(beam, pbl); } beam->prod_bytes_reported += len; } } static apr_size_t calc_buffered(h2_bucket_beam *beam) { apr_size_t len = 0; apr_bucket *b; for (b = H2_BLIST_FIRST(&beam->send_list); b != H2_BLIST_SENTINEL(&beam->send_list); b = APR_BUCKET_NEXT(b)) { if (b->length == ((apr_size_t)-1)) { /* do not count */ } else if (APR_BUCKET_IS_FILE(b)) { /* if unread, has no real mem footprint. */ } else { len += b->length; } } return len; } static void r_purge_sent(h2_bucket_beam *beam) { apr_bucket *b; /* delete all sender buckets in purge brigade, needs to be called * from sender thread only */ while (!H2_BLIST_EMPTY(&beam->purge_list)) { b = H2_BLIST_FIRST(&beam->purge_list); apr_bucket_delete(b); } } static apr_size_t calc_space_left(h2_bucket_beam *beam) { if (beam->max_buf_size > 0) { apr_off_t len = calc_buffered(beam); return (beam->max_buf_size > len? (beam->max_buf_size - len) : 0); } return APR_SIZE_MAX; } static int buffer_is_empty(h2_bucket_beam *beam) { return ((!beam->recv_buffer || APR_BRIGADE_EMPTY(beam->recv_buffer)) && H2_BLIST_EMPTY(&beam->send_list)); } static apr_status_t wait_empty(h2_bucket_beam *beam, apr_read_type_e block, apr_thread_mutex_t *lock) { apr_status_t rv = APR_SUCCESS; while (!buffer_is_empty(beam) && APR_SUCCESS == rv) { if (APR_BLOCK_READ != block || !lock) { rv = APR_EAGAIN; } else if (beam->timeout > 0) { rv = apr_thread_cond_timedwait(beam->change, lock, beam->timeout); } else { rv = apr_thread_cond_wait(beam->change, lock); } } return rv; } static apr_status_t wait_not_empty(h2_bucket_beam *beam, apr_read_type_e block, apr_thread_mutex_t *lock) { apr_status_t rv = APR_SUCCESS; while (buffer_is_empty(beam) && APR_SUCCESS == rv) { if (beam->aborted) { rv = APR_ECONNABORTED; } else if (beam->closed) { rv = APR_EOF; } else if (APR_BLOCK_READ != block || !lock) { rv = APR_EAGAIN; } else if (beam->timeout > 0) { rv = apr_thread_cond_timedwait(beam->change, lock, beam->timeout); } else { rv = apr_thread_cond_wait(beam->change, lock); } } return rv; } static apr_status_t wait_not_full(h2_bucket_beam *beam, apr_read_type_e block, apr_size_t *pspace_left, h2_beam_lock *bl) { apr_status_t rv = APR_SUCCESS; apr_size_t left; while (0 == (left = calc_space_left(beam)) && APR_SUCCESS == rv) { if (beam->aborted) { rv = APR_ECONNABORTED; } else if (block != APR_BLOCK_READ || !bl->mutex) { rv = APR_EAGAIN; } else { if (beam->timeout > 0) { rv = apr_thread_cond_timedwait(beam->change, bl->mutex, beam->timeout); } else { rv = apr_thread_cond_wait(beam->change, bl->mutex); } } } *pspace_left = left; return rv; } static void h2_beam_emitted(h2_bucket_beam *beam, h2_beam_proxy *proxy) { h2_beam_lock bl; apr_bucket *b, *next; if (enter_yellow(beam, &bl) == APR_SUCCESS) { /* even when beam buckets are split, only the one where * refcount drops to 0 will call us */ H2_BPROXY_REMOVE(proxy); /* invoked from receiver thread, the last beam bucket for the send * bucket is about to be destroyed. * remove it from the hold, where it should be now */ if (proxy->bsender) { for (b = H2_BLIST_FIRST(&beam->hold_list); b != H2_BLIST_SENTINEL(&beam->hold_list); b = APR_BUCKET_NEXT(b)) { if (b == proxy->bsender) { break; } } if (b != H2_BLIST_SENTINEL(&beam->hold_list)) { /* bucket is in hold as it should be, mark this one * and all before it for purging. We might have placed meta * buckets without a receiver proxy into the hold before it * and schedule them for purging now */ for (b = H2_BLIST_FIRST(&beam->hold_list); b != H2_BLIST_SENTINEL(&beam->hold_list); b = next) { next = APR_BUCKET_NEXT(b); if (b == proxy->bsender) { APR_BUCKET_REMOVE(b); H2_BLIST_INSERT_TAIL(&beam->purge_list, b); break; } else if (APR_BUCKET_IS_METADATA(b)) { APR_BUCKET_REMOVE(b); H2_BLIST_INSERT_TAIL(&beam->purge_list, b); } else { /* another data bucket before this one in hold. this * is normal since DATA buckets need not be destroyed * in order */ } } proxy->bsender = NULL; } else { /* it should be there unless we screwed up */ ap_log_perror(APLOG_MARK, APLOG_WARNING, 0, beam->send_pool, APLOGNO(03384) "h2_beam(%d-%s): emitted bucket not " "in hold, n=%d", beam->id, beam->tag, (int)proxy->n); ap_assert(!proxy->bsender); } } /* notify anyone waiting on space to become available */ if (!bl.mutex) { r_purge_sent(beam); } else { apr_thread_cond_broadcast(beam->change); } leave_yellow(beam, &bl); } } static void h2_blist_cleanup(h2_blist *bl) { apr_bucket *e; while (!H2_BLIST_EMPTY(bl)) { e = H2_BLIST_FIRST(bl); apr_bucket_delete(e); } } static apr_status_t beam_close(h2_bucket_beam *beam) { if (!beam->closed) { beam->closed = 1; apr_thread_cond_broadcast(beam->change); } return APR_SUCCESS; } int h2_beam_is_closed(h2_bucket_beam *beam) { return beam->closed; } static int pool_register(h2_bucket_beam *beam, apr_pool_t *pool, apr_status_t (*cleanup)(void *)) { if (pool && pool != beam->pool) { apr_pool_pre_cleanup_register(pool, beam, cleanup); return 1; } return 0; } static int pool_kill(h2_bucket_beam *beam, apr_pool_t *pool, apr_status_t (*cleanup)(void *)) { if (pool && pool != beam->pool) { apr_pool_cleanup_kill(pool, beam, cleanup); return 1; } return 0; } static apr_status_t beam_recv_cleanup(void *data) { h2_bucket_beam *beam = data; /* receiver pool has gone away, clear references */ beam->recv_buffer = NULL; beam->recv_pool = NULL; return APR_SUCCESS; } static apr_status_t beam_send_cleanup(void *data) { h2_bucket_beam *beam = data; /* sender is going away, clear up all references to its memory */ r_purge_sent(beam); h2_blist_cleanup(&beam->send_list); report_consumption(beam, NULL); while (!H2_BPROXY_LIST_EMPTY(&beam->proxies)) { h2_beam_proxy *proxy = H2_BPROXY_LIST_FIRST(&beam->proxies); H2_BPROXY_REMOVE(proxy); proxy->beam = NULL; proxy->bsender = NULL; } h2_blist_cleanup(&beam->purge_list); h2_blist_cleanup(&beam->hold_list); beam->send_pool = NULL; return APR_SUCCESS; } static void beam_set_send_pool(h2_bucket_beam *beam, apr_pool_t *pool) { if (beam->send_pool != pool) { if (beam->send_pool && beam->send_pool != beam->pool) { pool_kill(beam, beam->send_pool, beam_send_cleanup); beam_send_cleanup(beam); } beam->send_pool = pool; pool_register(beam, beam->send_pool, beam_send_cleanup); } } static void recv_buffer_cleanup(h2_bucket_beam *beam, h2_beam_lock *bl) { if (beam->recv_buffer && !APR_BRIGADE_EMPTY(beam->recv_buffer)) { apr_bucket_brigade *bb = beam->recv_buffer; apr_off_t bblen = 0; beam->recv_buffer = NULL; apr_brigade_length(bb, 0, &bblen); beam->received_bytes += bblen; /* need to do this unlocked since bucket destroy might * call this beam again. */ if (bl) leave_yellow(beam, bl); apr_brigade_destroy(bb); if (bl) enter_yellow(beam, bl); apr_thread_cond_broadcast(beam->change); if (beam->cons_ev_cb) { beam->cons_ev_cb(beam->cons_ctx, beam); } } } static apr_status_t beam_cleanup(h2_bucket_beam *beam, int from_pool) { apr_status_t status = APR_SUCCESS; int safe_send = (beam->owner == H2_BEAM_OWNER_SEND); int safe_recv = (beam->owner == H2_BEAM_OWNER_RECV); /* * Owner of the beam is going away, depending on which side it owns, * cleanup strategies will differ. * * In general, receiver holds references to memory from sender. * Clean up receiver first, if safe, then cleanup sender, if safe. */ /* When called from pool destroy, io callbacks are disabled */ if (from_pool) { beam->cons_io_cb = NULL; } /* When modify send is not safe, this means we still have multi-thread * protection and the owner is receiving the buckets. If the sending * side has not gone away, this means we could have dangling buckets * in our lists that never get destroyed. This should not happen. */ ap_assert(safe_send || !beam->send_pool); if (!H2_BLIST_EMPTY(&beam->send_list)) { ap_assert(beam->send_pool); } if (safe_recv) { if (beam->recv_pool) { pool_kill(beam, beam->recv_pool, beam_recv_cleanup); beam->recv_pool = NULL; } recv_buffer_cleanup(beam, NULL); } else { beam->recv_buffer = NULL; beam->recv_pool = NULL; } if (safe_send && beam->send_pool) { pool_kill(beam, beam->send_pool, beam_send_cleanup); status = beam_send_cleanup(beam); } if (safe_recv) { ap_assert(H2_BPROXY_LIST_EMPTY(&beam->proxies)); ap_assert(H2_BLIST_EMPTY(&beam->send_list)); ap_assert(H2_BLIST_EMPTY(&beam->hold_list)); ap_assert(H2_BLIST_EMPTY(&beam->purge_list)); } return status; } static apr_status_t beam_pool_cleanup(void *data) { return beam_cleanup(data, 1); } apr_status_t h2_beam_destroy(h2_bucket_beam *beam) { apr_pool_cleanup_kill(beam->pool, beam, beam_pool_cleanup); return beam_cleanup(beam, 0); } apr_status_t h2_beam_create(h2_bucket_beam **pbeam, apr_pool_t *pool, int id, const char *tag, h2_beam_owner_t owner, apr_size_t max_buf_size, apr_interval_time_t timeout) { h2_bucket_beam *beam; apr_status_t rv = APR_SUCCESS; beam = apr_pcalloc(pool, sizeof(*beam)); if (!beam) { return APR_ENOMEM; } beam->id = id; beam->tag = tag; beam->pool = pool; beam->owner = owner; H2_BLIST_INIT(&beam->send_list); H2_BLIST_INIT(&beam->hold_list); H2_BLIST_INIT(&beam->purge_list); H2_BPROXY_LIST_INIT(&beam->proxies); beam->tx_mem_limits = 1; beam->max_buf_size = max_buf_size; beam->timeout = timeout; rv = apr_thread_mutex_create(&beam->lock, APR_THREAD_MUTEX_DEFAULT, pool); if (APR_SUCCESS == rv) { rv = apr_thread_cond_create(&beam->change, pool); if (APR_SUCCESS == rv) { apr_pool_pre_cleanup_register(pool, beam, beam_pool_cleanup); *pbeam = beam; } } return rv; } void h2_beam_buffer_size_set(h2_bucket_beam *beam, apr_size_t buffer_size) { h2_beam_lock bl; if (enter_yellow(beam, &bl) == APR_SUCCESS) { beam->max_buf_size = buffer_size; leave_yellow(beam, &bl); } } apr_size_t h2_beam_buffer_size_get(h2_bucket_beam *beam) { h2_beam_lock bl; apr_size_t buffer_size = 0; if (beam && enter_yellow(beam, &bl) == APR_SUCCESS) { buffer_size = beam->max_buf_size; leave_yellow(beam, &bl); } return buffer_size; } void h2_beam_timeout_set(h2_bucket_beam *beam, apr_interval_time_t timeout) { h2_beam_lock bl; if (enter_yellow(beam, &bl) == APR_SUCCESS) { beam->timeout = timeout; leave_yellow(beam, &bl); } } apr_interval_time_t h2_beam_timeout_get(h2_bucket_beam *beam) { h2_beam_lock bl; apr_interval_time_t timeout = 0; if (enter_yellow(beam, &bl) == APR_SUCCESS) { timeout = beam->timeout; leave_yellow(beam, &bl); } return timeout; } void h2_beam_abort(h2_bucket_beam *beam) { h2_beam_lock bl; if (beam && enter_yellow(beam, &bl) == APR_SUCCESS) { beam->aborted = 1; r_purge_sent(beam); h2_blist_cleanup(&beam->send_list); report_consumption(beam, &bl); apr_thread_cond_broadcast(beam->change); leave_yellow(beam, &bl); } } apr_status_t h2_beam_close(h2_bucket_beam *beam) { h2_beam_lock bl; if (beam && enter_yellow(beam, &bl) == APR_SUCCESS) { r_purge_sent(beam); beam_close(beam); report_consumption(beam, &bl); leave_yellow(beam, &bl); } return beam->aborted? APR_ECONNABORTED : APR_SUCCESS; } apr_status_t h2_beam_leave(h2_bucket_beam *beam) { h2_beam_lock bl; if (beam && enter_yellow(beam, &bl) == APR_SUCCESS) { recv_buffer_cleanup(beam, &bl); beam->aborted = 1; beam_close(beam); leave_yellow(beam, &bl); } return APR_SUCCESS; } apr_status_t h2_beam_wait_empty(h2_bucket_beam *beam, apr_read_type_e block) { apr_status_t status; h2_beam_lock bl; if ((status = enter_yellow(beam, &bl)) == APR_SUCCESS) { status = wait_empty(beam, block, bl.mutex); leave_yellow(beam, &bl); } return status; } static void move_to_hold(h2_bucket_beam *beam, apr_bucket_brigade *sender_bb) { apr_bucket *b; while (sender_bb && !APR_BRIGADE_EMPTY(sender_bb)) { b = APR_BRIGADE_FIRST(sender_bb); APR_BUCKET_REMOVE(b); H2_BLIST_INSERT_TAIL(&beam->send_list, b); } } static apr_status_t append_bucket(h2_bucket_beam *beam, apr_bucket *b, apr_read_type_e block, apr_size_t *pspace_left, h2_beam_lock *pbl) { const char *data; apr_size_t len; apr_status_t status; int can_beam = 0, check_len; if (beam->aborted) { return APR_ECONNABORTED; } if (APR_BUCKET_IS_METADATA(b)) { if (APR_BUCKET_IS_EOS(b)) { beam->closed = 1; } APR_BUCKET_REMOVE(b); H2_BLIST_INSERT_TAIL(&beam->send_list, b); return APR_SUCCESS; } else if (APR_BUCKET_IS_FILE(b)) { /* For file buckets the problem is their internal readpool that * is used on the first read to allocate buffer/mmap. * Since setting aside a file bucket will de-register the * file cleanup function from the previous pool, we need to * call that only from the sender thread. * * Currently, we do not handle file bucket with refcount > 1 as * the beam is then not in complete control of the file's lifetime. * Which results in the bug that a file get closed by the receiver * while the sender or the beam still have buckets using it. * * Additionally, we allow callbacks to prevent beaming file * handles across. The use case for this is to limit the number * of open file handles and rather use a less efficient beam * transport. */ apr_bucket_file *bf = b->data; apr_file_t *fd = bf->fd; can_beam = (bf->refcount.refcount == 1); if (can_beam && beam->can_beam_fn) { can_beam = beam->can_beam_fn(beam->can_beam_ctx, beam, fd); } check_len = !can_beam; } else { if (b->length == ((apr_size_t)-1)) { const char *data; status = apr_bucket_read(b, &data, &len, APR_BLOCK_READ); if (status != APR_SUCCESS) { return status; } } check_len = 1; } if (check_len) { if (b->length > *pspace_left) { apr_bucket_split(b, *pspace_left); } *pspace_left -= b->length; } /* The fundamental problem is that reading a sender bucket from * a receiver thread is a total NO GO, because the bucket might use * its pool/bucket_alloc from a foreign thread and that will * corrupt. */ status = APR_ENOTIMPL; if (APR_BUCKET_IS_TRANSIENT(b)) { /* this takes care of transient buckets and converts them * into heap ones. Other bucket types might or might not be * affected by this. */ status = apr_bucket_setaside(b, beam->send_pool); } else if (APR_BUCKET_IS_HEAP(b)) { /* For heap buckets read from a receiver thread is fine. The * data will be there and live until the bucket itself is * destroyed. */ status = APR_SUCCESS; } else if (APR_BUCKET_IS_POOL(b)) { /* pool buckets are bastards that register at pool cleanup * to morph themselves into heap buckets. That may happen anytime, * even after the bucket data pointer has been read. So at * any time inside the receiver thread, the pool bucket memory * may disappear. yikes. */ status = apr_bucket_read(b, &data, &len, APR_BLOCK_READ); if (status == APR_SUCCESS) { apr_bucket_heap_make(b, data, len, NULL); } } else if (APR_BUCKET_IS_FILE(b) && can_beam) { status = apr_bucket_setaside(b, beam->send_pool); } if (status == APR_ENOTIMPL) { /* we have no knowledge about the internals of this bucket, * but hope that after read, its data stays immutable for the * lifetime of the bucket. (see pool bucket handling above for * a counter example). * We do the read while in the sender thread, so that the bucket may * use pools/allocators safely. */ status = apr_bucket_read(b, &data, &len, APR_BLOCK_READ); if (status == APR_SUCCESS) { status = apr_bucket_setaside(b, beam->send_pool); } } if (status != APR_SUCCESS && status != APR_ENOTIMPL) { return status; } APR_BUCKET_REMOVE(b); H2_BLIST_INSERT_TAIL(&beam->send_list, b); beam->sent_bytes += b->length; return APR_SUCCESS; } void h2_beam_send_from(h2_bucket_beam *beam, apr_pool_t *p) { h2_beam_lock bl; /* Called from the sender thread to add buckets to the beam */ if (enter_yellow(beam, &bl) == APR_SUCCESS) { r_purge_sent(beam); beam_set_send_pool(beam, p); leave_yellow(beam, &bl); } } apr_status_t h2_beam_send(h2_bucket_beam *beam, apr_bucket_brigade *sender_bb, apr_read_type_e block) { apr_bucket *b; apr_status_t rv = APR_SUCCESS; apr_size_t space_left = 0; h2_beam_lock bl; /* Called from the sender thread to add buckets to the beam */ if (enter_yellow(beam, &bl) == APR_SUCCESS) { ap_assert(beam->send_pool); r_purge_sent(beam); if (beam->aborted) { move_to_hold(beam, sender_bb); rv = APR_ECONNABORTED; } else if (sender_bb) { int force_report = !APR_BRIGADE_EMPTY(sender_bb); space_left = calc_space_left(beam); while (!APR_BRIGADE_EMPTY(sender_bb) && APR_SUCCESS == rv) { if (space_left <= 0) { report_prod_io(beam, force_report, &bl); r_purge_sent(beam); rv = wait_not_full(beam, block, &space_left, &bl); if (APR_SUCCESS != rv) { break; } } b = APR_BRIGADE_FIRST(sender_bb); rv = append_bucket(beam, b, block, &space_left, &bl); } report_prod_io(beam, force_report, &bl); apr_thread_cond_broadcast(beam->change); } report_consumption(beam, &bl); leave_yellow(beam, &bl); } return rv; } apr_status_t h2_beam_receive(h2_bucket_beam *beam, apr_bucket_brigade *bb, apr_read_type_e block, apr_off_t readbytes) { h2_beam_lock bl; apr_bucket *bsender, *brecv, *ng; int transferred = 0; apr_status_t status = APR_SUCCESS; apr_off_t remain; int transferred_buckets = 0; /* Called from the receiver thread to take buckets from the beam */ if (enter_yellow(beam, &bl) == APR_SUCCESS) { if (readbytes <= 0) { readbytes = APR_SIZE_MAX; } remain = readbytes; transfer: if (beam->aborted) { recv_buffer_cleanup(beam, &bl); status = APR_ECONNABORTED; goto leave; } /* transfer enough buckets from our receiver brigade, if we have one */ while (remain >= 0 && beam->recv_buffer && !APR_BRIGADE_EMPTY(beam->recv_buffer)) { brecv = APR_BRIGADE_FIRST(beam->recv_buffer); if (brecv->length > 0 && remain <= 0) { break; } APR_BUCKET_REMOVE(brecv); APR_BRIGADE_INSERT_TAIL(bb, brecv); remain -= brecv->length; ++transferred; } /* transfer from our sender brigade, transforming sender buckets to * receiver ones until we have enough */ while (remain >= 0 && !H2_BLIST_EMPTY(&beam->send_list)) { brecv = NULL; bsender = H2_BLIST_FIRST(&beam->send_list); if (bsender->length > 0 && remain <= 0) { break; } if (APR_BUCKET_IS_METADATA(bsender)) { if (APR_BUCKET_IS_EOS(bsender)) { brecv = apr_bucket_eos_create(bb->bucket_alloc); beam->close_sent = 1; } else if (APR_BUCKET_IS_FLUSH(bsender)) { brecv = apr_bucket_flush_create(bb->bucket_alloc); } else if (AP_BUCKET_IS_ERROR(bsender)) { ap_bucket_error *eb = (ap_bucket_error *)bsender; brecv = ap_bucket_error_create(eb->status, eb->data, bb->p, bb->bucket_alloc); } } else if (bsender->length == 0) { APR_BUCKET_REMOVE(bsender); H2_BLIST_INSERT_TAIL(&beam->hold_list, bsender); continue; } else if (APR_BUCKET_IS_FILE(bsender)) { /* This is set aside into the target brigade pool so that * any read operation messes with that pool and not * the sender one. */ apr_bucket_file *f = (apr_bucket_file *)bsender->data; apr_file_t *fd = f->fd; int setaside = (f->readpool != bb->p); if (setaside) { status = apr_file_setaside(&fd, fd, bb->p); if (status != APR_SUCCESS) { goto leave; } ++beam->files_beamed; } ng = apr_brigade_insert_file(bb, fd, bsender->start, bsender->length, bb->p); #if APR_HAS_MMAP /* disable mmap handling as this leads to segfaults when * the underlying file is changed while memory pointer has * been handed out. See also PR 59348 */ apr_bucket_file_enable_mmap(ng, 0); #endif APR_BUCKET_REMOVE(bsender); H2_BLIST_INSERT_TAIL(&beam->hold_list, bsender); remain -= bsender->length; ++transferred; ++transferred_buckets; continue; } else { /* create a "receiver" standin bucket. we took care about the * underlying sender bucket and its data when we placed it into * the sender brigade. * the beam bucket will notify us on destruction that bsender is * no longer needed. */ brecv = h2_beam_bucket_create(beam, bsender, bb->bucket_alloc, beam->buckets_sent++); } /* Place the sender bucket into our hold, to be destroyed when no * receiver bucket references it any more. */ APR_BUCKET_REMOVE(bsender); H2_BLIST_INSERT_TAIL(&beam->hold_list, bsender); beam->received_bytes += bsender->length; ++transferred_buckets; if (brecv) { APR_BRIGADE_INSERT_TAIL(bb, brecv); remain -= brecv->length; ++transferred; } else { /* let outside hook determine how bucket is beamed */ leave_yellow(beam, &bl); brecv = h2_beam_bucket(beam, bb, bsender); enter_yellow(beam, &bl); while (brecv && brecv != APR_BRIGADE_SENTINEL(bb)) { ++transferred; remain -= brecv->length; brecv = APR_BUCKET_NEXT(brecv); } } } if (remain < 0) { /* too much, put some back into out recv_buffer */ remain = readbytes; for (brecv = APR_BRIGADE_FIRST(bb); brecv != APR_BRIGADE_SENTINEL(bb); brecv = APR_BUCKET_NEXT(brecv)) { remain -= (beam->tx_mem_limits? bucket_mem_used(brecv) : brecv->length); if (remain < 0) { apr_bucket_split(brecv, brecv->length+remain); beam->recv_buffer = apr_brigade_split_ex(bb, APR_BUCKET_NEXT(brecv), beam->recv_buffer); break; } } } if (beam->closed && buffer_is_empty(beam)) { /* beam is closed and we have nothing more to receive */ if (!beam->close_sent) { apr_bucket *b = apr_bucket_eos_create(bb->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); beam->close_sent = 1; ++transferred; status = APR_SUCCESS; } } if (transferred_buckets > 0) { if (beam->cons_ev_cb) { beam->cons_ev_cb(beam->cons_ctx, beam); } } if (transferred) { apr_thread_cond_broadcast(beam->change); status = APR_SUCCESS; } else { status = wait_not_empty(beam, block, bl.mutex); if (status != APR_SUCCESS) { goto leave; } goto transfer; } leave: leave_yellow(beam, &bl); } return status; } void h2_beam_on_consumed(h2_bucket_beam *beam, h2_beam_ev_callback *ev_cb, h2_beam_io_callback *io_cb, void *ctx) { h2_beam_lock bl; if (enter_yellow(beam, &bl) == APR_SUCCESS) { beam->cons_ev_cb = ev_cb; beam->cons_io_cb = io_cb; beam->cons_ctx = ctx; leave_yellow(beam, &bl); } } void h2_beam_on_produced(h2_bucket_beam *beam, h2_beam_io_callback *io_cb, void *ctx) { h2_beam_lock bl; if (enter_yellow(beam, &bl) == APR_SUCCESS) { beam->prod_io_cb = io_cb; beam->prod_ctx = ctx; leave_yellow(beam, &bl); } } void h2_beam_on_file_beam(h2_bucket_beam *beam, h2_beam_can_beam_callback *cb, void *ctx) { h2_beam_lock bl; if (enter_yellow(beam, &bl) == APR_SUCCESS) { beam->can_beam_fn = cb; beam->can_beam_ctx = ctx; leave_yellow(beam, &bl); } } apr_off_t h2_beam_get_buffered(h2_bucket_beam *beam) { apr_bucket *b; apr_off_t l = 0; h2_beam_lock bl; if (beam && enter_yellow(beam, &bl) == APR_SUCCESS) { for (b = H2_BLIST_FIRST(&beam->send_list); b != H2_BLIST_SENTINEL(&beam->send_list); b = APR_BUCKET_NEXT(b)) { /* should all have determinate length */ l += b->length; } leave_yellow(beam, &bl); } return l; } apr_off_t h2_beam_get_mem_used(h2_bucket_beam *beam) { apr_bucket *b; apr_off_t l = 0; h2_beam_lock bl; if (beam && enter_yellow(beam, &bl) == APR_SUCCESS) { for (b = H2_BLIST_FIRST(&beam->send_list); b != H2_BLIST_SENTINEL(&beam->send_list); b = APR_BUCKET_NEXT(b)) { l += bucket_mem_used(b); } leave_yellow(beam, &bl); } return l; } int h2_beam_empty(h2_bucket_beam *beam) { int empty = 1; h2_beam_lock bl; if (beam && enter_yellow(beam, &bl) == APR_SUCCESS) { empty = (H2_BLIST_EMPTY(&beam->send_list) && (!beam->recv_buffer || APR_BRIGADE_EMPTY(beam->recv_buffer))); leave_yellow(beam, &bl); } return empty; } int h2_beam_holds_proxies(h2_bucket_beam *beam) { int has_proxies = 1; h2_beam_lock bl; if (beam && enter_yellow(beam, &bl) == APR_SUCCESS) { has_proxies = !H2_BPROXY_LIST_EMPTY(&beam->proxies); leave_yellow(beam, &bl); } return has_proxies; } int h2_beam_was_received(h2_bucket_beam *beam) { int happend = 0; h2_beam_lock bl; if (beam && enter_yellow(beam, &bl) == APR_SUCCESS) { happend = (beam->received_bytes > 0); leave_yellow(beam, &bl); } return happend; } apr_size_t h2_beam_get_files_beamed(h2_bucket_beam *beam) { apr_size_t n = 0; h2_beam_lock bl; if (beam && enter_yellow(beam, &bl) == APR_SUCCESS) { n = beam->files_beamed; leave_yellow(beam, &bl); } return n; } int h2_beam_no_files(void *ctx, h2_bucket_beam *beam, apr_file_t *file) { return 0; } int h2_beam_report_consumption(h2_bucket_beam *beam) { h2_beam_lock bl; int rv = 0; if (enter_yellow(beam, &bl) == APR_SUCCESS) { rv = report_consumption(beam, &bl); leave_yellow(beam, &bl); } return rv; } void h2_beam_log(h2_bucket_beam *beam, conn_rec *c, int level, const char *msg) { if (beam && APLOG_C_IS_LEVEL(c,level)) { ap_log_cerror(APLOG_MARK, level, 0, c, "beam(%ld-%d,%s,closed=%d,aborted=%d,empty=%d,buf=%ld): %s", (c->master? c->master->id : c->id), beam->id, beam->tag, beam->closed, beam->aborted, h2_beam_empty(beam), (long)h2_beam_get_buffered(beam), msg); } } httpd-2.4.41/modules/http2/h2_push.h0000644000000000000500000001070213237611704015472 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_push__ #define __mod_h2__h2_push__ #include "h2.h" struct h2_request; struct h2_headers; struct h2_ngheader; struct h2_session; struct h2_stream; typedef struct h2_push { const struct h2_request *req; h2_priority *priority; } h2_push; typedef enum { H2_PUSH_DIGEST_APR_HASH, H2_PUSH_DIGEST_SHA256 } h2_push_digest_type; typedef struct h2_push_diary h2_push_diary; typedef void h2_push_digest_calc(h2_push_diary *diary, apr_uint64_t *phash, h2_push *push); struct h2_push_diary { apr_array_header_t *entries; int NMax; /* Maximum for N, should size change be necessary */ int N; /* Current maximum number of entries, power of 2 */ apr_uint64_t mask; /* mask for relevant bits */ unsigned int mask_bits; /* number of relevant bits */ const char *authority; h2_push_digest_type dtype; h2_push_digest_calc *dcalc; }; /** * Determine the list of h2_push'es to send to the client on behalf of * the given request/response pair. * * @param p the pool to use * @param req the requst from the client * @param res the response from the server * @return array of h2_push addresses or NULL */ apr_array_header_t *h2_push_collect(apr_pool_t *p, const struct h2_request *req, int push_policy, const struct h2_headers *res); /** * Create a new push diary for the given maximum number of entries. * * @param p the pool to use * @param N the max number of entries, rounded up to 2^x * @return the created diary, might be NULL of max_entries is 0 */ h2_push_diary *h2_push_diary_create(apr_pool_t *p, int N); /** * Filters the given pushes against the diary and returns only those pushes * that were newly entered in the diary. */ apr_array_header_t *h2_push_diary_update(struct h2_session *session, apr_array_header_t *pushes); /** * Collect pushes for the given request/response pair, enter them into the * diary and return those pushes newly entered. */ apr_array_header_t *h2_push_collect_update(struct h2_stream *stream, const struct h2_request *req, const struct h2_headers *res); /** * Get a cache digest as described in * https://datatracker.ietf.org/doc/draft-kazuho-h2-cache-digest/ * from the contents of the push diary. * * @param diary the diary to calculdate the digest from * @param p the pool to use * @param authority the authority to get the data for, use NULL/"*" for all * @param pdata on successful return, the binary cache digest * @param plen on successful return, the length of the binary data */ apr_status_t h2_push_diary_digest_get(h2_push_diary *diary, apr_pool_t *p, int maxP, const char *authority, const char **pdata, apr_size_t *plen); /** * Initialize the push diary by a cache digest as described in * https://datatracker.ietf.org/doc/draft-kazuho-h2-cache-digest/ * . * @param diary the diary to set the digest into * @param authority the authority to set the data for * @param data the binary cache digest * @param len the length of the cache digest * @return APR_EINVAL if digest was not successfully parsed */ apr_status_t h2_push_diary_digest_set(h2_push_diary *diary, const char *authority, const char *data, apr_size_t len); apr_status_t h2_push_diary_digest64_set(h2_push_diary *diary, const char *authority, const char *data64url, apr_pool_t *pool); #endif /* defined(__mod_h2__h2_push__) */ httpd-2.4.41/modules/http2/h2_ctx.h0000644000000000000500000000531413442215451015311 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_ctx__ #define __mod_h2__h2_ctx__ struct h2_session; struct h2_task; struct h2_config; /** * The h2 module context associated with a connection. * * It keeps track of the different types of connections: * - those from clients that use HTTP/2 protocol * - those from clients that do not use HTTP/2 * - those created by ourself to perform work on HTTP/2 streams */ typedef struct h2_ctx { const char *protocol; /* the protocol negotiated */ struct h2_session *session; /* the session established */ struct h2_task *task; /* the h2_task executing or NULL */ const char *hostname; /* hostname negotiated via SNI, optional */ server_rec *server; /* httpd server config selected. */ const struct h2_config *config; /* effective config in this context */ } h2_ctx; /** * Get (or create) a h2 context record for this connection. * @param c the connection to look at * @param create != 0 iff missing context shall be created * @return h2 context of this connection */ h2_ctx *h2_ctx_get(const conn_rec *c, int create); void h2_ctx_clear(const conn_rec *c); h2_ctx *h2_ctx_rget(const request_rec *r); h2_ctx *h2_ctx_create_for(const conn_rec *c, struct h2_task *task); /* Set the h2 protocol established on this connection context or * NULL when other protocols are in place. */ h2_ctx *h2_ctx_protocol_set(h2_ctx *ctx, const char *proto); /* Update the server_rec relevant for this context. A server for * a connection may change during SNI handling, for example. */ h2_ctx *h2_ctx_server_update(h2_ctx *ctx, server_rec *s); void h2_ctx_session_set(h2_ctx *ctx, struct h2_session *session); /** * Get the h2 protocol negotiated for this connection, or NULL. */ const char *h2_ctx_protocol_get(const conn_rec *c); struct h2_session *h2_ctx_get_session(conn_rec *c); struct h2_task *h2_ctx_get_task(conn_rec *c); #endif /* defined(__mod_h2__h2_ctx__) */ httpd-2.4.41/modules/http2/h2_proxy_util.c0000644000000000000500000011173013506635714016735 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include #include #include #include "h2.h" #include "h2_proxy_util.h" APLOG_USE_MODULE(proxy_http2); /* h2_log2(n) iff n is a power of 2 */ unsigned char h2_proxy_log2(int n) { int lz = 0; if (!n) { return 0; } if (!(n & 0xffff0000u)) { lz += 16; n = (n << 16); } if (!(n & 0xff000000u)) { lz += 8; n = (n << 8); } if (!(n & 0xf0000000u)) { lz += 4; n = (n << 4); } if (!(n & 0xc0000000u)) { lz += 2; n = (n << 2); } if (!(n & 0x80000000u)) { lz += 1; } return 31 - lz; } /******************************************************************************* * ihash - hash for structs with int identifier ******************************************************************************/ struct h2_proxy_ihash_t { apr_hash_t *hash; size_t ioff; }; static unsigned int ihash(const char *key, apr_ssize_t *klen) { return (unsigned int)(*((int*)key)); } h2_proxy_ihash_t *h2_proxy_ihash_create(apr_pool_t *pool, size_t offset_of_int) { h2_proxy_ihash_t *ih = apr_pcalloc(pool, sizeof(h2_proxy_ihash_t)); ih->hash = apr_hash_make_custom(pool, ihash); ih->ioff = offset_of_int; return ih; } size_t h2_proxy_ihash_count(h2_proxy_ihash_t *ih) { return apr_hash_count(ih->hash); } int h2_proxy_ihash_empty(h2_proxy_ihash_t *ih) { return apr_hash_count(ih->hash) == 0; } void *h2_proxy_ihash_get(h2_proxy_ihash_t *ih, int id) { return apr_hash_get(ih->hash, &id, sizeof(id)); } typedef struct { h2_proxy_ihash_iter_t *iter; void *ctx; } iter_ctx; static int ihash_iter(void *ctx, const void *key, apr_ssize_t klen, const void *val) { iter_ctx *ictx = ctx; return ictx->iter(ictx->ctx, (void*)val); /* why is this passed const?*/ } int h2_proxy_ihash_iter(h2_proxy_ihash_t *ih, h2_proxy_ihash_iter_t *fn, void *ctx) { iter_ctx ictx; ictx.iter = fn; ictx.ctx = ctx; return apr_hash_do(ihash_iter, &ictx, ih->hash); } void h2_proxy_ihash_add(h2_proxy_ihash_t *ih, void *val) { apr_hash_set(ih->hash, ((char *)val + ih->ioff), sizeof(int), val); } void h2_proxy_ihash_remove(h2_proxy_ihash_t *ih, int id) { apr_hash_set(ih->hash, &id, sizeof(id), NULL); } void h2_proxy_ihash_remove_val(h2_proxy_ihash_t *ih, void *val) { int id = *((int*)((char *)val + ih->ioff)); apr_hash_set(ih->hash, &id, sizeof(id), NULL); } void h2_proxy_ihash_clear(h2_proxy_ihash_t *ih) { apr_hash_clear(ih->hash); } typedef struct { h2_proxy_ihash_t *ih; void **buffer; size_t max; size_t len; } collect_ctx; static int collect_iter(void *x, void *val) { collect_ctx *ctx = x; if (ctx->len < ctx->max) { ctx->buffer[ctx->len++] = val; return 1; } return 0; } size_t h2_proxy_ihash_shift(h2_proxy_ihash_t *ih, void **buffer, size_t max) { collect_ctx ctx; size_t i; ctx.ih = ih; ctx.buffer = buffer; ctx.max = max; ctx.len = 0; h2_proxy_ihash_iter(ih, collect_iter, &ctx); for (i = 0; i < ctx.len; ++i) { h2_proxy_ihash_remove_val(ih, buffer[i]); } return ctx.len; } typedef struct { h2_proxy_ihash_t *ih; int *buffer; size_t max; size_t len; } icollect_ctx; static int icollect_iter(void *x, void *val) { icollect_ctx *ctx = x; if (ctx->len < ctx->max) { ctx->buffer[ctx->len++] = *((int*)((char *)val + ctx->ih->ioff)); return 1; } return 0; } size_t h2_proxy_ihash_ishift(h2_proxy_ihash_t *ih, int *buffer, size_t max) { icollect_ctx ctx; size_t i; ctx.ih = ih; ctx.buffer = buffer; ctx.max = max; ctx.len = 0; h2_proxy_ihash_iter(ih, icollect_iter, &ctx); for (i = 0; i < ctx.len; ++i) { h2_proxy_ihash_remove(ih, buffer[i]); } return ctx.len; } /******************************************************************************* * iqueue - sorted list of int ******************************************************************************/ static void iq_grow(h2_proxy_iqueue *q, int nlen); static void iq_swap(h2_proxy_iqueue *q, int i, int j); static int iq_bubble_up(h2_proxy_iqueue *q, int i, int top, h2_proxy_iq_cmp *cmp, void *ctx); static int iq_bubble_down(h2_proxy_iqueue *q, int i, int bottom, h2_proxy_iq_cmp *cmp, void *ctx); h2_proxy_iqueue *h2_proxy_iq_create(apr_pool_t *pool, int capacity) { h2_proxy_iqueue *q = apr_pcalloc(pool, sizeof(h2_proxy_iqueue)); if (q) { q->pool = pool; iq_grow(q, capacity); q->nelts = 0; } return q; } int h2_proxy_iq_empty(h2_proxy_iqueue *q) { return q->nelts == 0; } int h2_proxy_iq_count(h2_proxy_iqueue *q) { return q->nelts; } void h2_proxy_iq_add(h2_proxy_iqueue *q, int sid, h2_proxy_iq_cmp *cmp, void *ctx) { int i; if (q->nelts >= q->nalloc) { iq_grow(q, q->nalloc * 2); } i = (q->head + q->nelts) % q->nalloc; q->elts[i] = sid; ++q->nelts; if (cmp) { /* bubble it to the front of the queue */ iq_bubble_up(q, i, q->head, cmp, ctx); } } int h2_proxy_iq_remove(h2_proxy_iqueue *q, int sid) { int i; for (i = 0; i < q->nelts; ++i) { if (sid == q->elts[(q->head + i) % q->nalloc]) { break; } } if (i < q->nelts) { ++i; for (; i < q->nelts; ++i) { q->elts[(q->head+i-1)%q->nalloc] = q->elts[(q->head+i)%q->nalloc]; } --q->nelts; return 1; } return 0; } void h2_proxy_iq_clear(h2_proxy_iqueue *q) { q->nelts = 0; } void h2_proxy_iq_sort(h2_proxy_iqueue *q, h2_proxy_iq_cmp *cmp, void *ctx) { /* Assume that changes in ordering are minimal. This needs, * best case, q->nelts - 1 comparisons to check that nothing * changed. */ if (q->nelts > 0) { int i, ni, prev, last; /* Start at the end of the queue and create a tail of sorted * entries. Make that tail one element longer in each iteration. */ last = i = (q->head + q->nelts - 1) % q->nalloc; while (i != q->head) { prev = (q->nalloc + i - 1) % q->nalloc; ni = iq_bubble_up(q, i, prev, cmp, ctx); if (ni == prev) { /* i bubbled one up, bubble the new i down, which * keeps all tasks below i sorted. */ iq_bubble_down(q, i, last, cmp, ctx); } i = prev; }; } } int h2_proxy_iq_shift(h2_proxy_iqueue *q) { int sid; if (q->nelts <= 0) { return 0; } sid = q->elts[q->head]; q->head = (q->head + 1) % q->nalloc; q->nelts--; return sid; } static void iq_grow(h2_proxy_iqueue *q, int nlen) { if (nlen > q->nalloc) { int *nq = apr_pcalloc(q->pool, sizeof(int) * nlen); if (q->nelts > 0) { int l = ((q->head + q->nelts) % q->nalloc) - q->head; memmove(nq, q->elts + q->head, sizeof(int) * l); if (l < q->nelts) { /* elts wrapped, append elts in [0, remain] to nq */ int remain = q->nelts - l; memmove(nq + l, q->elts, sizeof(int) * remain); } } q->elts = nq; q->nalloc = nlen; q->head = 0; } } static void iq_swap(h2_proxy_iqueue *q, int i, int j) { int x = q->elts[i]; q->elts[i] = q->elts[j]; q->elts[j] = x; } static int iq_bubble_up(h2_proxy_iqueue *q, int i, int top, h2_proxy_iq_cmp *cmp, void *ctx) { int prev; while (((prev = (q->nalloc + i - 1) % q->nalloc), i != top) && (*cmp)(q->elts[i], q->elts[prev], ctx) < 0) { iq_swap(q, prev, i); i = prev; } return i; } static int iq_bubble_down(h2_proxy_iqueue *q, int i, int bottom, h2_proxy_iq_cmp *cmp, void *ctx) { int next; while (((next = (q->nalloc + i + 1) % q->nalloc), i != bottom) && (*cmp)(q->elts[i], q->elts[next], ctx) > 0) { iq_swap(q, next, i); i = next; } return i; } /******************************************************************************* * h2_proxy_ngheader ******************************************************************************/ #define H2_HD_MATCH_LIT_CS(l, name) \ ((strlen(name) == sizeof(l) - 1) && !apr_strnatcasecmp(l, name)) static int h2_util_ignore_header(const char *name) { /* never forward, ch. 8.1.2.2 */ return (H2_HD_MATCH_LIT_CS("connection", name) || H2_HD_MATCH_LIT_CS("proxy-connection", name) || H2_HD_MATCH_LIT_CS("upgrade", name) || H2_HD_MATCH_LIT_CS("keep-alive", name) || H2_HD_MATCH_LIT_CS("transfer-encoding", name)); } static int count_header(void *ctx, const char *key, const char *value) { if (!h2_util_ignore_header(key)) { (*((size_t*)ctx))++; } return 1; } #define NV_ADD_LIT_CS(nv, k, v) add_header(nv, k, sizeof(k) - 1, v, strlen(v)) #define NV_ADD_CS_CS(nv, k, v) add_header(nv, k, strlen(k), v, strlen(v)) static int add_header(h2_proxy_ngheader *ngh, const char *key, size_t key_len, const char *value, size_t val_len) { nghttp2_nv *nv = &ngh->nv[ngh->nvlen++]; nv->name = (uint8_t*)key; nv->namelen = key_len; nv->value = (uint8_t*)value; nv->valuelen = val_len; return 1; } static int add_table_header(void *ctx, const char *key, const char *value) { if (!h2_util_ignore_header(key)) { add_header(ctx, key, strlen(key), value, strlen(value)); } return 1; } h2_proxy_ngheader *h2_proxy_util_nghd_make_req(apr_pool_t *p, const h2_proxy_request *req) { h2_proxy_ngheader *ngh; size_t n; ap_assert(req); ap_assert(req->scheme); ap_assert(req->authority); ap_assert(req->path); ap_assert(req->method); n = 4; apr_table_do(count_header, &n, req->headers, NULL); ngh = apr_pcalloc(p, sizeof(h2_proxy_ngheader)); ngh->nv = apr_pcalloc(p, n * sizeof(nghttp2_nv)); NV_ADD_LIT_CS(ngh, ":scheme", req->scheme); NV_ADD_LIT_CS(ngh, ":authority", req->authority); NV_ADD_LIT_CS(ngh, ":path", req->path); NV_ADD_LIT_CS(ngh, ":method", req->method); apr_table_do(add_table_header, ngh, req->headers, NULL); return ngh; } h2_proxy_ngheader *h2_proxy_util_nghd_make(apr_pool_t *p, apr_table_t *headers) { h2_proxy_ngheader *ngh; size_t n; n = 0; apr_table_do(count_header, &n, headers, NULL); ngh = apr_pcalloc(p, sizeof(h2_proxy_ngheader)); ngh->nv = apr_pcalloc(p, n * sizeof(nghttp2_nv)); apr_table_do(add_table_header, ngh, headers, NULL); return ngh; } /******************************************************************************* * header HTTP/1 <-> HTTP/2 conversions ******************************************************************************/ typedef struct { const char *name; size_t len; } literal; #define H2_DEF_LITERAL(n) { (n), (sizeof(n)-1) } #define H2_LIT_ARGS(a) (a),H2_ALEN(a) static literal IgnoredRequestHeaders[] = { H2_DEF_LITERAL("upgrade"), H2_DEF_LITERAL("connection"), H2_DEF_LITERAL("keep-alive"), H2_DEF_LITERAL("http2-settings"), H2_DEF_LITERAL("proxy-connection"), H2_DEF_LITERAL("transfer-encoding"), }; static literal IgnoredProxyRespHds[] = { H2_DEF_LITERAL("alt-svc"), }; static int ignore_header(const literal *lits, size_t llen, const char *name, size_t nlen) { const literal *lit; int i; for (i = 0; i < llen; ++i) { lit = &lits[i]; if (lit->len == nlen && !apr_strnatcasecmp(lit->name, name)) { return 1; } } return 0; } static int h2_proxy_req_ignore_header(const char *name, size_t len) { return ignore_header(H2_LIT_ARGS(IgnoredRequestHeaders), name, len); } int h2_proxy_res_ignore_header(const char *name, size_t len) { return (h2_proxy_req_ignore_header(name, len) || ignore_header(H2_LIT_ARGS(IgnoredProxyRespHds), name, len)); } void h2_proxy_util_camel_case_header(char *s, size_t len) { size_t start = 1; size_t i; for (i = 0; i < len; ++i) { if (start) { if (s[i] >= 'a' && s[i] <= 'z') { s[i] -= 'a' - 'A'; } start = 0; } else if (s[i] == '-') { start = 1; } } } /******************************************************************************* * h2 request handling ******************************************************************************/ /** Match a header value against a string constance, case insensitive */ #define H2_HD_MATCH_LIT(l, name, nlen) \ ((nlen == sizeof(l) - 1) && !apr_strnatcasecmp(l, name)) static apr_status_t h2_headers_add_h1(apr_table_t *headers, apr_pool_t *pool, const char *name, size_t nlen, const char *value, size_t vlen) { char *hname, *hvalue; if (h2_proxy_req_ignore_header(name, nlen)) { return APR_SUCCESS; } else if (H2_HD_MATCH_LIT("cookie", name, nlen)) { const char *existing = apr_table_get(headers, "cookie"); if (existing) { char *nval; /* Cookie header come separately in HTTP/2, but need * to be merged by "; " (instead of default ", ") */ hvalue = apr_pstrndup(pool, value, vlen); nval = apr_psprintf(pool, "%s; %s", existing, hvalue); apr_table_setn(headers, "Cookie", nval); return APR_SUCCESS; } } else if (H2_HD_MATCH_LIT("host", name, nlen)) { if (apr_table_get(headers, "Host")) { return APR_SUCCESS; /* ignore duplicate */ } } hname = apr_pstrndup(pool, name, nlen); hvalue = apr_pstrndup(pool, value, vlen); h2_proxy_util_camel_case_header(hname, nlen); apr_table_mergen(headers, hname, hvalue); return APR_SUCCESS; } static h2_proxy_request *h2_proxy_req_createn(int id, apr_pool_t *pool, const char *method, const char *scheme, const char *authority, const char *path, apr_table_t *header, int serialize) { h2_proxy_request *req = apr_pcalloc(pool, sizeof(h2_proxy_request)); req->method = method; req->scheme = scheme; req->authority = authority; req->path = path; req->headers = header? header : apr_table_make(pool, 10); req->request_time = apr_time_now(); req->serialize = serialize; return req; } h2_proxy_request *h2_proxy_req_create(int id, apr_pool_t *pool, int serialize) { return h2_proxy_req_createn(id, pool, NULL, NULL, NULL, NULL, NULL, serialize); } typedef struct { apr_table_t *headers; apr_pool_t *pool; } h1_ctx; static int set_h1_header(void *ctx, const char *key, const char *value) { h1_ctx *x = ctx; size_t klen = strlen(key); if (!h2_proxy_req_ignore_header(key, klen)) { h2_headers_add_h1(x->headers, x->pool, key, klen, value, strlen(value)); } return 1; } apr_status_t h2_proxy_req_make(h2_proxy_request *req, apr_pool_t *pool, const char *method, const char *scheme, const char *authority, const char *path, apr_table_t *headers) { h1_ctx x; const char *val; req->method = method; req->scheme = scheme; req->authority = authority; req->path = path; ap_assert(req->scheme); ap_assert(req->authority); ap_assert(req->path); ap_assert(req->method); x.pool = pool; x.headers = req->headers; apr_table_do(set_h1_header, &x, headers, NULL); if ((val = apr_table_get(headers, "TE")) && ap_find_token(pool, val, "trailers")) { /* client accepts trailers, forward this information */ apr_table_addn(req->headers, "TE", "trailers"); } apr_table_setn(req->headers, "te", "trailers"); return APR_SUCCESS; } /******************************************************************************* * frame logging ******************************************************************************/ int h2_proxy_util_frame_print(const nghttp2_frame *frame, char *buffer, size_t maxlen) { char scratch[128]; size_t s_len = sizeof(scratch)/sizeof(scratch[0]); switch (frame->hd.type) { case NGHTTP2_DATA: { return apr_snprintf(buffer, maxlen, "DATA[length=%d, flags=%d, stream=%d, padlen=%d]", (int)frame->hd.length, frame->hd.flags, frame->hd.stream_id, (int)frame->data.padlen); } case NGHTTP2_HEADERS: { return apr_snprintf(buffer, maxlen, "HEADERS[length=%d, hend=%d, stream=%d, eos=%d]", (int)frame->hd.length, !!(frame->hd.flags & NGHTTP2_FLAG_END_HEADERS), frame->hd.stream_id, !!(frame->hd.flags & NGHTTP2_FLAG_END_STREAM)); } case NGHTTP2_PRIORITY: { return apr_snprintf(buffer, maxlen, "PRIORITY[length=%d, flags=%d, stream=%d]", (int)frame->hd.length, frame->hd.flags, frame->hd.stream_id); } case NGHTTP2_RST_STREAM: { return apr_snprintf(buffer, maxlen, "RST_STREAM[length=%d, flags=%d, stream=%d]", (int)frame->hd.length, frame->hd.flags, frame->hd.stream_id); } case NGHTTP2_SETTINGS: { if (frame->hd.flags & NGHTTP2_FLAG_ACK) { return apr_snprintf(buffer, maxlen, "SETTINGS[ack=1, stream=%d]", frame->hd.stream_id); } return apr_snprintf(buffer, maxlen, "SETTINGS[length=%d, stream=%d]", (int)frame->hd.length, frame->hd.stream_id); } case NGHTTP2_PUSH_PROMISE: { return apr_snprintf(buffer, maxlen, "PUSH_PROMISE[length=%d, hend=%d, stream=%d]", (int)frame->hd.length, !!(frame->hd.flags & NGHTTP2_FLAG_END_HEADERS), frame->hd.stream_id); } case NGHTTP2_PING: { return apr_snprintf(buffer, maxlen, "PING[length=%d, ack=%d, stream=%d]", (int)frame->hd.length, frame->hd.flags&NGHTTP2_FLAG_ACK, frame->hd.stream_id); } case NGHTTP2_GOAWAY: { size_t len = (frame->goaway.opaque_data_len < s_len)? frame->goaway.opaque_data_len : s_len-1; memcpy(scratch, frame->goaway.opaque_data, len); scratch[len] = '\0'; return apr_snprintf(buffer, maxlen, "GOAWAY[error=%d, reason='%s', " "last_stream=%d]", frame->goaway.error_code, scratch, frame->goaway.last_stream_id); } case NGHTTP2_WINDOW_UPDATE: { return apr_snprintf(buffer, maxlen, "WINDOW_UPDATE[stream=%d, incr=%d]", frame->hd.stream_id, frame->window_update.window_size_increment); } default: return apr_snprintf(buffer, maxlen, "type=%d[length=%d, flags=%d, stream=%d]", frame->hd.type, (int)frame->hd.length, frame->hd.flags, frame->hd.stream_id); } } /******************************************************************************* * link header handling ******************************************************************************/ typedef struct { apr_pool_t *pool; request_rec *r; proxy_dir_conf *conf; const char *s; int slen; int i; const char *server_uri; int su_len; const char *real_backend_uri; int rbu_len; const char *p_server_uri; int psu_len; int link_start; int link_end; } link_ctx; static int attr_char(char c) { switch (c) { case '!': case '#': case '$': case '&': case '+': case '-': case '.': case '^': case '_': case '`': case '|': case '~': return 1; default: return apr_isalnum(c); } } static int ptoken_char(char c) { switch (c) { case '!': case '#': case '$': case '&': case '\'': case '(': case ')': case '*': case '+': case '-': case '.': case '/': case ':': case '<': case '=': case '>': case '?': case '@': case '[': case ']': case '^': case '_': case '`': case '{': case '|': case '}': case '~': return 1; default: return apr_isalnum(c); } } static int skip_ws(link_ctx *ctx) { char c; while (ctx->i < ctx->slen && (((c = ctx->s[ctx->i]) == ' ') || (c == '\t'))) { ++ctx->i; } return (ctx->i < ctx->slen); } static int find_chr(link_ctx *ctx, char c, int *pidx) { int j; for (j = ctx->i; j < ctx->slen; ++j) { if (ctx->s[j] == c) { *pidx = j; return 1; } } return 0; } static int read_chr(link_ctx *ctx, char c) { if (ctx->i < ctx->slen && ctx->s[ctx->i] == c) { ++ctx->i; return 1; } return 0; } static int skip_qstring(link_ctx *ctx) { if (skip_ws(ctx) && read_chr(ctx, '\"')) { int end; if (find_chr(ctx, '\"', &end)) { ctx->i = end + 1; return 1; } } return 0; } static int skip_ptoken(link_ctx *ctx) { if (skip_ws(ctx)) { int i; for (i = ctx->i; i < ctx->slen && ptoken_char(ctx->s[i]); ++i) { /* nop */ } if (i > ctx->i) { ctx->i = i; return 1; } } return 0; } static int read_link(link_ctx *ctx) { ctx->link_start = ctx->link_end = 0; if (skip_ws(ctx) && read_chr(ctx, '<')) { int end; if (find_chr(ctx, '>', &end)) { ctx->link_start = ctx->i; ctx->link_end = end; ctx->i = end + 1; return 1; } } return 0; } static int skip_pname(link_ctx *ctx) { if (skip_ws(ctx)) { int i; for (i = ctx->i; i < ctx->slen && attr_char(ctx->s[i]); ++i) { /* nop */ } if (i > ctx->i) { ctx->i = i; return 1; } } return 0; } static int skip_pvalue(link_ctx *ctx) { if (skip_ws(ctx) && read_chr(ctx, '=')) { if (skip_qstring(ctx) || skip_ptoken(ctx)) { return 1; } } return 0; } static int skip_param(link_ctx *ctx) { if (skip_ws(ctx) && read_chr(ctx, ';')) { if (skip_pname(ctx)) { skip_pvalue(ctx); /* value is optional */ return 1; } } return 0; } static int read_sep(link_ctx *ctx) { if (skip_ws(ctx) && read_chr(ctx, ',')) { return 1; } return 0; } static size_t subst_str(link_ctx *ctx, int start, int end, const char *ns) { int olen, nlen, plen; int delta; char *p; olen = end - start; nlen = (int)strlen(ns); delta = nlen - olen; plen = ctx->slen + delta + 1; p = apr_palloc(ctx->pool, plen); memcpy(p, ctx->s, start); memcpy(p + start, ns, nlen); strcpy(p + start + nlen, ctx->s + end); ctx->s = p; ctx->slen = plen - 1; /* (int)strlen(p) */ if (ctx->i >= end) { ctx->i += delta; } return nlen; } static void map_link(link_ctx *ctx) { if (ctx->link_start < ctx->link_end) { char buffer[HUGE_STRING_LEN]; int need_len, link_len, buffer_len, prepend_p_server; const char *mapped; buffer[0] = '\0'; buffer_len = 0; link_len = ctx->link_end - ctx->link_start; need_len = link_len + 1; prepend_p_server = (ctx->s[ctx->link_start] == '/'); if (prepend_p_server) { /* common to use relative uris in link header, for mappings * to work need to prefix the backend server uri */ need_len += ctx->psu_len; apr_cpystrn(buffer, ctx->p_server_uri, sizeof(buffer)); buffer_len = ctx->psu_len; } if (need_len > sizeof(buffer)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, ctx->r, APLOGNO(03482) "link_reverse_map uri too long, skipped: %s", ctx->s); return; } apr_cpystrn(buffer + buffer_len, ctx->s + ctx->link_start, link_len + 1); if (!prepend_p_server && strcmp(ctx->real_backend_uri, ctx->p_server_uri) && !strncmp(buffer, ctx->real_backend_uri, ctx->rbu_len)) { /* the server uri and our local proxy uri we use differ, for mapping * to work, we need to use the proxy uri */ int path_start = ctx->link_start + ctx->rbu_len; link_len -= ctx->rbu_len; memcpy(buffer, ctx->p_server_uri, ctx->psu_len); memcpy(buffer + ctx->psu_len, ctx->s + path_start, link_len); buffer_len = ctx->psu_len + link_len; buffer[buffer_len] = '\0'; } mapped = ap_proxy_location_reverse_map(ctx->r, ctx->conf, buffer); ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, ctx->r, "reverse_map[%s] %s --> %s", ctx->p_server_uri, buffer, mapped); if (mapped != buffer) { if (prepend_p_server) { if (ctx->server_uri == NULL) { ctx->server_uri = ap_construct_url(ctx->pool, "", ctx->r); ctx->su_len = (int)strlen(ctx->server_uri); } if (!strncmp(mapped, ctx->server_uri, ctx->su_len)) { mapped += ctx->su_len; } } subst_str(ctx, ctx->link_start, ctx->link_end, mapped); } } } /* RFC 5988 Link = "Link" ":" #link-value link-value = "<" URI-Reference ">" *( ";" link-param ) link-param = ( ( "rel" "=" relation-types ) | ( "anchor" "=" <"> URI-Reference <"> ) | ( "rev" "=" relation-types ) | ( "hreflang" "=" Language-Tag ) | ( "media" "=" ( MediaDesc | ( <"> MediaDesc <"> ) ) ) | ( "title" "=" quoted-string ) | ( "title*" "=" ext-value ) | ( "type" "=" ( media-type | quoted-mt ) ) | ( link-extension ) ) link-extension = ( parmname [ "=" ( ptoken | quoted-string ) ] ) | ( ext-name-star "=" ext-value ) ext-name-star = parmname "*" ; reserved for RFC2231-profiled ; extensions. Whitespace NOT ; allowed in between. ptoken = 1*ptokenchar ptokenchar = "!" | "#" | "$" | "%" | "&" | "'" | "(" | ")" | "*" | "+" | "-" | "." | "/" | DIGIT | ":" | "<" | "=" | ">" | "?" | "@" | ALPHA | "[" | "]" | "^" | "_" | "`" | "{" | "|" | "}" | "~" media-type = type-name "/" subtype-name quoted-mt = <"> media-type <"> relation-types = relation-type | <"> relation-type *( 1*SP relation-type ) <"> relation-type = reg-rel-type | ext-rel-type reg-rel-type = LOALPHA *( LOALPHA | DIGIT | "." | "-" ) ext-rel-type = URI and from parmname = 1*attr-char attr-char = ALPHA / DIGIT / "!" / "#" / "$" / "&" / "+" / "-" / "." / "^" / "_" / "`" / "|" / "~" */ const char *h2_proxy_link_reverse_map(request_rec *r, proxy_dir_conf *conf, const char *real_backend_uri, const char *proxy_server_uri, const char *s) { link_ctx ctx; if (r->proxyreq != PROXYREQ_REVERSE) { return s; } memset(&ctx, 0, sizeof(ctx)); ctx.r = r; ctx.pool = r->pool; ctx.conf = conf; ctx.real_backend_uri = real_backend_uri; ctx.rbu_len = (int)strlen(ctx.real_backend_uri); ctx.p_server_uri = proxy_server_uri; ctx.psu_len = (int)strlen(ctx.p_server_uri); ctx.s = s; ctx.slen = (int)strlen(s); while (read_link(&ctx)) { while (skip_param(&ctx)) { /* nop */ } map_link(&ctx); if (!read_sep(&ctx)) { break; } } ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "link_reverse_map %s --> %s", s, ctx.s); return ctx.s; } /******************************************************************************* * FIFO queue ******************************************************************************/ struct h2_proxy_fifo { void **elems; int nelems; int set; int head; int count; int aborted; apr_thread_mutex_t *lock; apr_thread_cond_t *not_empty; apr_thread_cond_t *not_full; }; static int nth_index(h2_proxy_fifo *fifo, int n) { return (fifo->head + n) % fifo->nelems; } static apr_status_t fifo_destroy(void *data) { h2_proxy_fifo *fifo = data; apr_thread_cond_destroy(fifo->not_empty); apr_thread_cond_destroy(fifo->not_full); apr_thread_mutex_destroy(fifo->lock); return APR_SUCCESS; } static int index_of(h2_proxy_fifo *fifo, void *elem) { int i; for (i = 0; i < fifo->count; ++i) { if (elem == fifo->elems[nth_index(fifo, i)]) { return i; } } return -1; } static apr_status_t create_int(h2_proxy_fifo **pfifo, apr_pool_t *pool, int capacity, int as_set) { apr_status_t rv; h2_proxy_fifo *fifo; fifo = apr_pcalloc(pool, sizeof(*fifo)); if (fifo == NULL) { return APR_ENOMEM; } rv = apr_thread_mutex_create(&fifo->lock, APR_THREAD_MUTEX_UNNESTED, pool); if (rv != APR_SUCCESS) { return rv; } rv = apr_thread_cond_create(&fifo->not_empty, pool); if (rv != APR_SUCCESS) { return rv; } rv = apr_thread_cond_create(&fifo->not_full, pool); if (rv != APR_SUCCESS) { return rv; } fifo->elems = apr_pcalloc(pool, capacity * sizeof(void*)); if (fifo->elems == NULL) { return APR_ENOMEM; } fifo->nelems = capacity; fifo->set = as_set; *pfifo = fifo; apr_pool_cleanup_register(pool, fifo, fifo_destroy, apr_pool_cleanup_null); return APR_SUCCESS; } apr_status_t h2_proxy_fifo_create(h2_proxy_fifo **pfifo, apr_pool_t *pool, int capacity) { return create_int(pfifo, pool, capacity, 0); } apr_status_t h2_proxy_fifo_set_create(h2_proxy_fifo **pfifo, apr_pool_t *pool, int capacity) { return create_int(pfifo, pool, capacity, 1); } apr_status_t h2_proxy_fifo_term(h2_proxy_fifo *fifo) { apr_status_t rv; if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { fifo->aborted = 1; apr_thread_mutex_unlock(fifo->lock); } return rv; } apr_status_t h2_proxy_fifo_interrupt(h2_proxy_fifo *fifo) { apr_status_t rv; if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { apr_thread_cond_broadcast(fifo->not_empty); apr_thread_cond_broadcast(fifo->not_full); apr_thread_mutex_unlock(fifo->lock); } return rv; } int h2_proxy_fifo_count(h2_proxy_fifo *fifo) { return fifo->count; } int h2_proxy_fifo_capacity(h2_proxy_fifo *fifo) { return fifo->nelems; } static apr_status_t check_not_empty(h2_proxy_fifo *fifo, int block) { if (fifo->count == 0) { if (!block) { return APR_EAGAIN; } while (fifo->count == 0) { if (fifo->aborted) { return APR_EOF; } apr_thread_cond_wait(fifo->not_empty, fifo->lock); } } return APR_SUCCESS; } static apr_status_t fifo_push(h2_proxy_fifo *fifo, void *elem, int block) { apr_status_t rv; if (fifo->aborted) { return APR_EOF; } if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { if (fifo->set && index_of(fifo, elem) >= 0) { /* set mode, elem already member */ apr_thread_mutex_unlock(fifo->lock); return APR_EEXIST; } else if (fifo->count == fifo->nelems) { if (block) { while (fifo->count == fifo->nelems) { if (fifo->aborted) { apr_thread_mutex_unlock(fifo->lock); return APR_EOF; } apr_thread_cond_wait(fifo->not_full, fifo->lock); } } else { apr_thread_mutex_unlock(fifo->lock); return APR_EAGAIN; } } ap_assert(fifo->count < fifo->nelems); fifo->elems[nth_index(fifo, fifo->count)] = elem; ++fifo->count; if (fifo->count == 1) { apr_thread_cond_broadcast(fifo->not_empty); } apr_thread_mutex_unlock(fifo->lock); } return rv; } apr_status_t h2_proxy_fifo_push(h2_proxy_fifo *fifo, void *elem) { return fifo_push(fifo, elem, 1); } apr_status_t h2_proxy_fifo_try_push(h2_proxy_fifo *fifo, void *elem) { return fifo_push(fifo, elem, 0); } static void *pull_head(h2_proxy_fifo *fifo) { void *elem; ap_assert(fifo->count > 0); elem = fifo->elems[fifo->head]; --fifo->count; if (fifo->count > 0) { fifo->head = nth_index(fifo, 1); if (fifo->count+1 == fifo->nelems) { apr_thread_cond_broadcast(fifo->not_full); } } return elem; } static apr_status_t fifo_pull(h2_proxy_fifo *fifo, void **pelem, int block) { apr_status_t rv; if (fifo->aborted) { return APR_EOF; } if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { if ((rv = check_not_empty(fifo, block)) != APR_SUCCESS) { apr_thread_mutex_unlock(fifo->lock); *pelem = NULL; return rv; } ap_assert(fifo->count > 0); *pelem = pull_head(fifo); apr_thread_mutex_unlock(fifo->lock); } return rv; } apr_status_t h2_proxy_fifo_pull(h2_proxy_fifo *fifo, void **pelem) { return fifo_pull(fifo, pelem, 1); } apr_status_t h2_proxy_fifo_try_pull(h2_proxy_fifo *fifo, void **pelem) { return fifo_pull(fifo, pelem, 0); } apr_status_t h2_proxy_fifo_remove(h2_proxy_fifo *fifo, void *elem) { apr_status_t rv; if (fifo->aborted) { return APR_EOF; } if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { int i, rc; void *e; rc = 0; for (i = 0; i < fifo->count; ++i) { e = fifo->elems[nth_index(fifo, i)]; if (e == elem) { ++rc; } else if (rc) { fifo->elems[nth_index(fifo, i-rc)] = e; } } if (rc) { fifo->count -= rc; if (fifo->count + rc == fifo->nelems) { apr_thread_cond_broadcast(fifo->not_full); } rv = APR_SUCCESS; } else { rv = APR_EAGAIN; } apr_thread_mutex_unlock(fifo->lock); } return rv; } httpd-2.4.41/modules/http2/mod_proxy_http2.dsp0000644000000000000500000001202412727742623017631 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_proxy_http2" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_proxy_http2 - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_proxy_http2.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_http2.mak" CFG="mod_proxy_http2 - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_http2 - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_http2 - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_proxy_http2 - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "ssize_t=long" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/nghttp2/lib/includes" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "ssize_t=long" /Fd"Release\mod_proxy_http2_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_proxy_http2.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_http2.so" /d LONG_NAME="http2_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib nghttp2.lib /nologo /subsystem:windows /dll /libpath:"..\..\srclib\nghttp2\lib\MSVC_obj" /out:".\Release\mod_proxy_http2.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_http2.so # ADD LINK32 kernel32.lib nghttp2.lib /nologo /subsystem:windows /dll /libpath:"..\..\srclib\nghttp2\lib\MSVC_obj" /incremental:no /debug /out:".\Release\mod_proxy_http2.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_http2.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_proxy_http2.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_proxy_http2 - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /D "ssize_t=long" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/nghttp2/lib/includes" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "ssize_t=long" /Fd"Debug\mod_proxy_http2_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_proxy_http2.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_http2.so" /d LONG_NAME="http2_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib nghttp2d.lib /nologo /subsystem:windows /dll /libpath:"..\..\srclib\nghttp2\lib\MSVC_obj" /incremental:no /debug /out:".\Debug\mod_proxy_http2.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_http2.so # ADD LINK32 kernel32.lib nghttp2d.lib /nologo /subsystem:windows /dll /libpath:"..\..\srclib\nghttp2\lib\MSVC_obj" /incremental:no /debug /out:".\Debug\mod_proxy_http2.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_http2.so # Begin Special Build Tool TargetPath=.\Debug\mod_proxy_http2.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_proxy_http2 - Win32 Release" # Name "mod_proxy_http2 - Win32 Debug" # Begin Source File SOURCE=./h2_proxy_session.c # End Source File # Begin Source File SOURCE=./h2_proxy_util.c # End Source File # Begin Source File SOURCE=./mod_proxy_http2.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/http2/h2_stream.c0000644000000000000500000011352713523111321015776 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include "h2_private.h" #include "h2.h" #include "h2_bucket_beam.h" #include "h2_conn.h" #include "h2_config.h" #include "h2_h2.h" #include "h2_mplx.h" #include "h2_push.h" #include "h2_request.h" #include "h2_headers.h" #include "h2_session.h" #include "h2_stream.h" #include "h2_task.h" #include "h2_ctx.h" #include "h2_task.h" #include "h2_util.h" static const char *h2_ss_str(h2_stream_state_t state) { switch (state) { case H2_SS_IDLE: return "IDLE"; case H2_SS_RSVD_L: return "RESERVED_LOCAL"; case H2_SS_RSVD_R: return "RESERVED_REMOTE"; case H2_SS_OPEN: return "OPEN"; case H2_SS_CLOSED_L: return "HALF_CLOSED_LOCAL"; case H2_SS_CLOSED_R: return "HALF_CLOSED_REMOTE"; case H2_SS_CLOSED: return "CLOSED"; case H2_SS_CLEANUP: return "CLEANUP"; default: return "UNKNOWN"; } } const char *h2_stream_state_str(h2_stream *stream) { return h2_ss_str(stream->state); } /* Abbreviations for stream transit tables */ #define S_XXX (-2) /* Programming Error */ #define S_ERR (-1) /* Protocol Error */ #define S_NOP (0) /* No Change */ #define S_IDL (H2_SS_IDL + 1) #define S_RS_L (H2_SS_RSVD_L + 1) #define S_RS_R (H2_SS_RSVD_R + 1) #define S_OPEN (H2_SS_OPEN + 1) #define S_CL_L (H2_SS_CLOSED_L + 1) #define S_CL_R (H2_SS_CLOSED_R + 1) #define S_CLS (H2_SS_CLOSED + 1) #define S_CLN (H2_SS_CLEANUP + 1) /* state transisitions when certain frame types are sent */ static int trans_on_send[][H2_SS_MAX] = { /*S_IDLE,S_RS_R, S_RS_L, S_OPEN, S_CL_R, S_CL_L, S_CLS, S_CLN, */ { S_ERR, S_ERR, S_ERR, S_NOP, S_NOP, S_ERR, S_NOP, S_NOP, },/* DATA */ { S_ERR, S_ERR, S_CL_R, S_NOP, S_NOP, S_ERR, S_NOP, S_NOP, },/* HEADERS */ { S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, },/* PRIORITY */ { S_CLS, S_CLS, S_CLS, S_CLS, S_CLS, S_CLS, S_NOP, S_NOP, },/* RST_STREAM */ { S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, },/* SETTINGS */ { S_RS_L,S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, },/* PUSH_PROMISE */ { S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, },/* PING */ { S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, },/* GOAWAY */ { S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, },/* WINDOW_UPDATE */ { S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, },/* CONT */ }; /* state transisitions when certain frame types are received */ static int trans_on_recv[][H2_SS_MAX] = { /*S_IDLE,S_RS_R, S_RS_L, S_OPEN, S_CL_R, S_CL_L, S_CLS, S_CLN, */ { S_ERR, S_ERR, S_ERR, S_NOP, S_ERR, S_NOP, S_NOP, S_NOP, },/* DATA */ { S_OPEN,S_CL_L, S_ERR, S_NOP, S_ERR, S_NOP, S_NOP, S_NOP, },/* HEADERS */ { S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, },/* PRIORITY */ { S_ERR, S_CLS, S_CLS, S_CLS, S_CLS, S_CLS, S_NOP, S_NOP, },/* RST_STREAM */ { S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, },/* SETTINGS */ { S_RS_R,S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, },/* PUSH_PROMISE */ { S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, },/* PING */ { S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, S_ERR, },/* GOAWAY */ { S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, },/* WINDOW_UPDATE */ { S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, S_NOP, },/* CONT */ }; /* state transisitions when certain events happen */ static int trans_on_event[][H2_SS_MAX] = { /*S_IDLE,S_RS_R, S_RS_L, S_OPEN, S_CL_R, S_CL_L, S_CLS, S_CLN, */ { S_XXX, S_ERR, S_ERR, S_CL_L, S_CLS, S_XXX, S_XXX, S_XXX, },/* EV_CLOSED_L*/ { S_ERR, S_ERR, S_ERR, S_CL_R, S_ERR, S_CLS, S_NOP, S_NOP, },/* EV_CLOSED_R*/ { S_CLS, S_CLS, S_CLS, S_CLS, S_CLS, S_CLS, S_NOP, S_NOP, },/* EV_CANCELLED*/ { S_NOP, S_XXX, S_XXX, S_XXX, S_XXX, S_CLS, S_CLN, S_XXX, },/* EV_EOS_SENT*/ }; static int on_map(h2_stream_state_t state, int map[H2_SS_MAX]) { int op = map[state]; switch (op) { case S_XXX: case S_ERR: return op; case S_NOP: return state; default: return op-1; } } static int on_frame(h2_stream_state_t state, int frame_type, int frame_map[][H2_SS_MAX], apr_size_t maxlen) { ap_assert(frame_type >= 0); ap_assert(state >= 0); if (frame_type >= maxlen) { return state; /* NOP, ignore unknown frame types */ } return on_map(state, frame_map[frame_type]); } static int on_frame_send(h2_stream_state_t state, int frame_type) { return on_frame(state, frame_type, trans_on_send, H2_ALEN(trans_on_send)); } static int on_frame_recv(h2_stream_state_t state, int frame_type) { return on_frame(state, frame_type, trans_on_recv, H2_ALEN(trans_on_recv)); } static int on_event(h2_stream* stream, h2_stream_event_t ev) { if (stream->monitor && stream->monitor->on_event) { stream->monitor->on_event(stream->monitor->ctx, stream, ev); } if (ev < H2_ALEN(trans_on_event)) { return on_map(stream->state, trans_on_event[ev]); } return stream->state; } static void H2_STREAM_OUT_LOG(int lvl, h2_stream *s, const char *tag) { if (APLOG_C_IS_LEVEL(s->session->c, lvl)) { conn_rec *c = s->session->c; char buffer[4 * 1024]; apr_size_t len, bmax = sizeof(buffer)/sizeof(buffer[0]); len = h2_util_bb_print(buffer, bmax, tag, "", s->out_buffer); ap_log_cerror(APLOG_MARK, lvl, 0, c, H2_STRM_MSG(s, "out-buffer(%s)"), len? buffer : "empty"); } } static apr_status_t setup_input(h2_stream *stream) { if (stream->input == NULL) { int empty = (stream->input_eof && (!stream->in_buffer || APR_BRIGADE_EMPTY(stream->in_buffer))); if (!empty) { h2_beam_create(&stream->input, stream->pool, stream->id, "input", H2_BEAM_OWNER_SEND, 0, stream->session->s->timeout); h2_beam_send_from(stream->input, stream->pool); } } return APR_SUCCESS; } static apr_status_t close_input(h2_stream *stream) { conn_rec *c = stream->session->c; apr_status_t status = APR_SUCCESS; stream->input_eof = 1; if (stream->input && h2_beam_is_closed(stream->input)) { return APR_SUCCESS; } ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, stream->session->c, H2_STRM_MSG(stream, "closing input")); if (stream->rst_error) { return APR_ECONNRESET; } if (stream->trailers && !apr_is_empty_table(stream->trailers)) { apr_bucket *b; h2_headers *r; if (!stream->in_buffer) { stream->in_buffer = apr_brigade_create(stream->pool, c->bucket_alloc); } r = h2_headers_create(HTTP_OK, stream->trailers, NULL, stream->in_trailer_octets, stream->pool); stream->trailers = NULL; b = h2_bucket_headers_create(c->bucket_alloc, r); APR_BRIGADE_INSERT_TAIL(stream->in_buffer, b); b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(stream->in_buffer, b); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, stream->session->c, H2_STRM_MSG(stream, "added trailers")); h2_stream_dispatch(stream, H2_SEV_IN_DATA_PENDING); } if (stream->input) { h2_stream_flush_input(stream); return h2_beam_close(stream->input); } return status; } static apr_status_t close_output(h2_stream *stream) { if (!stream->output || h2_beam_is_closed(stream->output)) { return APR_SUCCESS; } ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, stream->session->c, H2_STRM_MSG(stream, "closing output")); return h2_beam_leave(stream->output); } static void on_state_enter(h2_stream *stream) { if (stream->monitor && stream->monitor->on_state_enter) { stream->monitor->on_state_enter(stream->monitor->ctx, stream); } } static void on_state_event(h2_stream *stream, h2_stream_event_t ev) { if (stream->monitor && stream->monitor->on_state_event) { stream->monitor->on_state_event(stream->monitor->ctx, stream, ev); } } static void on_state_invalid(h2_stream *stream) { if (stream->monitor && stream->monitor->on_state_invalid) { stream->monitor->on_state_invalid(stream->monitor->ctx, stream); } /* stream got an event/frame invalid in its state */ ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, stream->session->c, H2_STRM_MSG(stream, "invalid state event")); switch (stream->state) { case H2_SS_OPEN: case H2_SS_RSVD_L: case H2_SS_RSVD_R: case H2_SS_CLOSED_L: case H2_SS_CLOSED_R: h2_stream_rst(stream, H2_ERR_INTERNAL_ERROR); break; default: break; } } static apr_status_t transit(h2_stream *stream, int new_state) { if (new_state == stream->state) { return APR_SUCCESS; } else if (new_state < 0) { ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, stream->session->c, H2_STRM_LOG(APLOGNO(03081), stream, "invalid transition")); on_state_invalid(stream); return APR_EINVAL; } ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, stream->session->c, H2_STRM_MSG(stream, "transit to [%s]"), h2_ss_str(new_state)); stream->state = new_state; switch (new_state) { case H2_SS_IDLE: break; case H2_SS_RSVD_L: close_input(stream); break; case H2_SS_RSVD_R: break; case H2_SS_OPEN: break; case H2_SS_CLOSED_L: close_output(stream); break; case H2_SS_CLOSED_R: close_input(stream); break; case H2_SS_CLOSED: close_input(stream); close_output(stream); if (stream->out_buffer) { apr_brigade_cleanup(stream->out_buffer); } break; case H2_SS_CLEANUP: break; } on_state_enter(stream); return APR_SUCCESS; } void h2_stream_set_monitor(h2_stream *stream, h2_stream_monitor *monitor) { stream->monitor = monitor; } void h2_stream_dispatch(h2_stream *stream, h2_stream_event_t ev) { int new_state; ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, stream->session->c, H2_STRM_MSG(stream, "dispatch event %d"), ev); new_state = on_event(stream, ev); if (new_state < 0) { ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, stream->session->c, H2_STRM_LOG(APLOGNO(10002), stream, "invalid event %d"), ev); on_state_invalid(stream); AP_DEBUG_ASSERT(new_state > S_XXX); return; } else if (new_state == stream->state) { /* nop */ ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, stream->session->c, H2_STRM_MSG(stream, "non-state event %d"), ev); return; } else { on_state_event(stream, ev); transit(stream, new_state); } } static void set_policy_for(h2_stream *stream, h2_request *r) { int enabled = h2_session_push_enabled(stream->session); stream->push_policy = h2_push_policy_determine(r->headers, stream->pool, enabled); r->serialize = h2_config_sgeti(stream->session->s, H2_CONF_SER_HEADERS); } apr_status_t h2_stream_send_frame(h2_stream *stream, int ftype, int flags, size_t frame_len) { apr_status_t status = APR_SUCCESS; int new_state, eos = 0; new_state = on_frame_send(stream->state, ftype); if (new_state < 0) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, stream->session->c, H2_STRM_MSG(stream, "invalid frame %d send"), ftype); AP_DEBUG_ASSERT(new_state > S_XXX); return transit(stream, new_state); } ++stream->out_frames; stream->out_frame_octets += frame_len; switch (ftype) { case NGHTTP2_DATA: eos = (flags & NGHTTP2_FLAG_END_STREAM); break; case NGHTTP2_HEADERS: eos = (flags & NGHTTP2_FLAG_END_STREAM); break; case NGHTTP2_PUSH_PROMISE: /* start pushed stream */ ap_assert(stream->request == NULL); ap_assert(stream->rtmp != NULL); status = h2_stream_end_headers(stream, 1, 0); if (status != APR_SUCCESS) goto leave; break; default: break; } ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, stream->session->c, H2_STRM_MSG(stream, "send frame %d, eos=%d"), ftype, eos); status = transit(stream, new_state); if (status == APR_SUCCESS && eos) { status = transit(stream, on_event(stream, H2_SEV_CLOSED_L)); } leave: return status; } apr_status_t h2_stream_recv_frame(h2_stream *stream, int ftype, int flags, size_t frame_len) { apr_status_t status = APR_SUCCESS; int new_state, eos = 0; new_state = on_frame_recv(stream->state, ftype); if (new_state < 0) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, stream->session->c, H2_STRM_MSG(stream, "invalid frame %d recv"), ftype); AP_DEBUG_ASSERT(new_state > S_XXX); return transit(stream, new_state); } switch (ftype) { case NGHTTP2_DATA: eos = (flags & NGHTTP2_FLAG_END_STREAM); break; case NGHTTP2_HEADERS: eos = (flags & NGHTTP2_FLAG_END_STREAM); if (stream->state == H2_SS_OPEN) { /* trailer HEADER */ if (!eos) { h2_stream_rst(stream, H2_ERR_PROTOCOL_ERROR); } stream->in_trailer_octets += frame_len; } else { /* request HEADER */ ap_assert(stream->request == NULL); if (stream->rtmp == NULL) { /* This can only happen, if the stream has received no header * name/value pairs at all. The lastest nghttp2 version have become * pretty good at detecting this early. In any case, we have * to abort the connection here, since this is clearly a protocol error */ return APR_EINVAL; } status = h2_stream_end_headers(stream, eos, frame_len); if (status != APR_SUCCESS) goto leave; } break; default: break; } status = transit(stream, new_state); if (status == APR_SUCCESS && eos) { status = transit(stream, on_event(stream, H2_SEV_CLOSED_R)); } leave: return status; } apr_status_t h2_stream_flush_input(h2_stream *stream) { apr_status_t status = APR_SUCCESS; if (stream->in_buffer && !APR_BRIGADE_EMPTY(stream->in_buffer)) { setup_input(stream); status = h2_beam_send(stream->input, stream->in_buffer, APR_BLOCK_READ); stream->in_last_write = apr_time_now(); } if (stream->input_eof && stream->input && !h2_beam_is_closed(stream->input)) { status = h2_beam_close(stream->input); } return status; } apr_status_t h2_stream_recv_DATA(h2_stream *stream, uint8_t flags, const uint8_t *data, size_t len) { h2_session *session = stream->session; apr_status_t status = APR_SUCCESS; stream->in_data_frames++; if (len > 0) { if (APLOGctrace3(session->c)) { const char *load = apr_pstrndup(stream->pool, (const char *)data, len); ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, session->c, H2_STRM_MSG(stream, "recv DATA, len=%d: -->%s<--"), (int)len, load); } else { ap_log_cerror(APLOG_MARK, APLOG_TRACE2, status, session->c, H2_STRM_MSG(stream, "recv DATA, len=%d"), (int)len); } stream->in_data_octets += len; if (!stream->in_buffer) { stream->in_buffer = apr_brigade_create(stream->pool, session->c->bucket_alloc); } apr_brigade_write(stream->in_buffer, NULL, NULL, (const char *)data, len); h2_stream_dispatch(stream, H2_SEV_IN_DATA_PENDING); } return status; } static void prep_output(h2_stream *stream) { conn_rec *c = stream->session->c; if (!stream->out_buffer) { stream->out_buffer = apr_brigade_create(stream->pool, c->bucket_alloc); } } h2_stream *h2_stream_create(int id, apr_pool_t *pool, h2_session *session, h2_stream_monitor *monitor, int initiated_on) { h2_stream *stream = apr_pcalloc(pool, sizeof(h2_stream)); stream->id = id; stream->initiated_on = initiated_on; stream->created = apr_time_now(); stream->state = H2_SS_IDLE; stream->pool = pool; stream->session = session; stream->monitor = monitor; stream->max_mem = session->max_stream_mem; #ifdef H2_NG2_LOCAL_WIN_SIZE stream->in_window_size = nghttp2_session_get_stream_local_window_size( stream->session->ngh2, stream->id); #endif ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_STRM_LOG(APLOGNO(03082), stream, "created")); on_state_enter(stream); return stream; } void h2_stream_cleanup(h2_stream *stream) { apr_status_t status; ap_assert(stream); if (stream->out_buffer) { /* remove any left over output buckets that may still have * references into request pools */ apr_brigade_cleanup(stream->out_buffer); } if (stream->input) { h2_beam_abort(stream->input); status = h2_beam_wait_empty(stream->input, APR_NONBLOCK_READ); if (status == APR_EAGAIN) { ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, stream->session->c, H2_STRM_MSG(stream, "wait on input drain")); status = h2_beam_wait_empty(stream->input, APR_BLOCK_READ); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, status, stream->session->c, H2_STRM_MSG(stream, "input drain returned")); } } } void h2_stream_destroy(h2_stream *stream) { ap_assert(stream); ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, stream->session->c, H2_STRM_MSG(stream, "destroy")); apr_pool_destroy(stream->pool); } apr_status_t h2_stream_prep_processing(h2_stream *stream) { if (stream->request) { const h2_request *r = stream->request; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, stream->session->c, H2_STRM_MSG(stream, "schedule %s %s://%s%s chunked=%d"), r->method, r->scheme, r->authority, r->path, r->chunked); setup_input(stream); stream->scheduled = 1; return APR_SUCCESS; } return APR_EINVAL; } void h2_stream_rst(h2_stream *stream, int error_code) { stream->rst_error = error_code; if (stream->input) { h2_beam_abort(stream->input); } if (stream->output) { h2_beam_leave(stream->output); } ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, stream->session->c, H2_STRM_MSG(stream, "reset, error=%d"), error_code); h2_stream_dispatch(stream, H2_SEV_CANCELLED); } apr_status_t h2_stream_set_request_rec(h2_stream *stream, request_rec *r, int eos) { h2_request *req; apr_status_t status; ap_assert(stream->request == NULL); ap_assert(stream->rtmp == NULL); if (stream->rst_error) { return APR_ECONNRESET; } status = h2_request_rcreate(&req, stream->pool, r); if (status == APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, r, H2_STRM_LOG(APLOGNO(03058), stream, "set_request_rec %s host=%s://%s%s"), req->method, req->scheme, req->authority, req->path); stream->rtmp = req; /* simulate the frames that led to this */ return h2_stream_recv_frame(stream, NGHTTP2_HEADERS, NGHTTP2_FLAG_END_STREAM, 0); } return status; } void h2_stream_set_request(h2_stream *stream, const h2_request *r) { ap_assert(stream->request == NULL); ap_assert(stream->rtmp == NULL); stream->rtmp = h2_request_clone(stream->pool, r); } static void set_error_response(h2_stream *stream, int http_status) { if (!h2_stream_is_ready(stream)) { conn_rec *c = stream->session->c; apr_bucket *b; h2_headers *response; response = h2_headers_die(http_status, stream->request, stream->pool); prep_output(stream); b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_HEAD(stream->out_buffer, b); b = h2_bucket_headers_create(c->bucket_alloc, response); APR_BRIGADE_INSERT_HEAD(stream->out_buffer, b); } } static apr_status_t add_trailer(h2_stream *stream, const char *name, size_t nlen, const char *value, size_t vlen) { conn_rec *c = stream->session->c; char *hname, *hvalue; if (nlen == 0 || name[0] == ':') { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, APR_EINVAL, c, H2_STRM_LOG(APLOGNO(03060), stream, "pseudo header in trailer")); return APR_EINVAL; } if (h2_req_ignore_trailer(name, nlen)) { return APR_SUCCESS; } if (!stream->trailers) { stream->trailers = apr_table_make(stream->pool, 5); } hname = apr_pstrndup(stream->pool, name, nlen); hvalue = apr_pstrndup(stream->pool, value, vlen); h2_util_camel_case_header(hname, nlen); apr_table_mergen(stream->trailers, hname, hvalue); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, c, H2_STRM_MSG(stream, "added trailer '%s: %s'"), hname, hvalue); return APR_SUCCESS; } apr_status_t h2_stream_add_header(h2_stream *stream, const char *name, size_t nlen, const char *value, size_t vlen) { h2_session *session = stream->session; int error = 0; apr_status_t status; if (stream->has_response) { return APR_EINVAL; } ++stream->request_headers_added; if (name[0] == ':') { if ((vlen) > session->s->limit_req_line) { /* pseudo header: approximation of request line size check */ ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, session->c, H2_STRM_LOG(APLOGNO(10178), stream, "Request pseudo header exceeds " "LimitRequestFieldSize: %s"), name); error = HTTP_REQUEST_URI_TOO_LARGE; } } else if ((nlen + 2 + vlen) > session->s->limit_req_fieldsize) { /* header too long */ ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, session->c, H2_STRM_LOG(APLOGNO(10180), stream,"Request header exceeds " "LimitRequestFieldSize: %.*s"), (int)H2MIN(nlen, 80), name); error = HTTP_REQUEST_HEADER_FIELDS_TOO_LARGE; } if (stream->request_headers_added > session->s->limit_req_fields + 4) { /* too many header lines, include 4 pseudo headers */ if (stream->request_headers_added > session->s->limit_req_fields + 4 + 100) { /* yeah, right */ h2_stream_rst(stream, H2_ERR_ENHANCE_YOUR_CALM); return APR_ECONNRESET; } ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, session->c, H2_STRM_LOG(APLOGNO(10181), stream, "Number of request headers " "exceeds LimitRequestFields")); error = HTTP_REQUEST_HEADER_FIELDS_TOO_LARGE; } if (error) { set_error_response(stream, error); return APR_EINVAL; } else if (H2_SS_IDLE == stream->state) { if (!stream->rtmp) { stream->rtmp = h2_req_create(stream->id, stream->pool, NULL, NULL, NULL, NULL, NULL, 0); } status = h2_request_add_header(stream->rtmp, stream->pool, name, nlen, value, vlen); } else if (H2_SS_OPEN == stream->state) { status = add_trailer(stream, name, nlen, value, vlen); } else { status = APR_EINVAL; } if (status != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, session->c, H2_STRM_MSG(stream, "header %s not accepted"), name); h2_stream_dispatch(stream, H2_SEV_CANCELLED); } return status; } typedef struct { apr_size_t maxlen; const char *failed_key; } val_len_check_ctx; static int table_check_val_len(void *baton, const char *key, const char *value) { val_len_check_ctx *ctx = baton; if (strlen(value) <= ctx->maxlen) return 1; ctx->failed_key = key; return 0; } apr_status_t h2_stream_end_headers(h2_stream *stream, int eos, size_t raw_bytes) { apr_status_t status; val_len_check_ctx ctx; status = h2_request_end_headers(stream->rtmp, stream->pool, eos, raw_bytes); if (APR_SUCCESS == status) { set_policy_for(stream, stream->rtmp); stream->request = stream->rtmp; stream->rtmp = NULL; ctx.maxlen = stream->session->s->limit_req_fieldsize; ctx.failed_key = NULL; apr_table_do(table_check_val_len, &ctx, stream->request->headers, NULL); if (ctx.failed_key) { ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, stream->session->c, H2_STRM_LOG(APLOGNO(10190), stream,"Request header exceeds " "LimitRequestFieldSize: %.*s"), (int)H2MIN(strlen(ctx.failed_key), 80), ctx.failed_key); set_error_response(stream, HTTP_REQUEST_HEADER_FIELDS_TOO_LARGE); /* keep on returning APR_SUCCESS, so that we send a HTTP response and * do not RST the stream. */ } } return status; } static apr_bucket *get_first_headers_bucket(apr_bucket_brigade *bb) { if (bb) { apr_bucket *b = APR_BRIGADE_FIRST(bb); while (b != APR_BRIGADE_SENTINEL(bb)) { if (H2_BUCKET_IS_HEADERS(b)) { return b; } b = APR_BUCKET_NEXT(b); } } return NULL; } static apr_status_t add_buffered_data(h2_stream *stream, apr_off_t requested, apr_off_t *plen, int *peos, int *is_all, h2_headers **pheaders) { apr_bucket *b, *e; *peos = 0; *plen = 0; *is_all = 0; if (pheaders) { *pheaders = NULL; } H2_STREAM_OUT_LOG(APLOG_TRACE2, stream, "add_buffered_data"); b = APR_BRIGADE_FIRST(stream->out_buffer); while (b != APR_BRIGADE_SENTINEL(stream->out_buffer)) { e = APR_BUCKET_NEXT(b); if (APR_BUCKET_IS_METADATA(b)) { if (APR_BUCKET_IS_FLUSH(b)) { APR_BUCKET_REMOVE(b); apr_bucket_destroy(b); } else if (APR_BUCKET_IS_EOS(b)) { *peos = 1; return APR_SUCCESS; } else if (H2_BUCKET_IS_HEADERS(b)) { if (*plen > 0) { /* data before the response, can only return up to here */ return APR_SUCCESS; } else if (pheaders) { *pheaders = h2_bucket_headers_get(b); APR_BUCKET_REMOVE(b); apr_bucket_destroy(b); ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, stream->session->c, H2_STRM_MSG(stream, "prep, -> response %d"), (*pheaders)->status); return APR_SUCCESS; } else { return APR_EAGAIN; } } } else if (b->length == 0) { APR_BUCKET_REMOVE(b); apr_bucket_destroy(b); } else { ap_assert(b->length != (apr_size_t)-1); *plen += b->length; if (*plen >= requested) { *plen = requested; return APR_SUCCESS; } } b = e; } *is_all = 1; return APR_SUCCESS; } apr_status_t h2_stream_out_prepare(h2_stream *stream, apr_off_t *plen, int *peos, h2_headers **pheaders) { apr_status_t status = APR_SUCCESS; apr_off_t requested, missing, max_chunk = H2_DATA_CHUNK_SIZE; conn_rec *c; int complete; ap_assert(stream); if (stream->rst_error) { *plen = 0; *peos = 1; return APR_ECONNRESET; } c = stream->session->c; prep_output(stream); /* determine how much we'd like to send. We cannot send more than * is requested. But we can reduce the size in case the master * connection operates in smaller chunks. (TSL warmup) */ if (stream->session->io.write_size > 0) { max_chunk = stream->session->io.write_size - H2_FRAME_HDR_LEN; } requested = (*plen > 0)? H2MIN(*plen, max_chunk) : max_chunk; /* count the buffered data until eos or a headers bucket */ status = add_buffered_data(stream, requested, plen, peos, &complete, pheaders); if (status == APR_EAGAIN) { /* TODO: ugly, someone needs to retrieve the response first */ h2_mplx_keep_active(stream->session->mplx, stream); ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, H2_STRM_MSG(stream, "prep, response eagain")); return status; } else if (status != APR_SUCCESS) { return status; } if (pheaders && *pheaders) { return APR_SUCCESS; } /* If there we do not have enough buffered data to satisfy the requested * length *and* we counted the _complete_ buffer (and did not stop in the middle * because of meta data there), lets see if we can read more from the * output beam */ missing = H2MIN(requested, stream->max_mem) - *plen; if (complete && !*peos && missing > 0) { apr_status_t rv = APR_EOF; if (stream->output) { H2_STREAM_OUT_LOG(APLOG_TRACE2, stream, "pre"); rv = h2_beam_receive(stream->output, stream->out_buffer, APR_NONBLOCK_READ, stream->max_mem - *plen); H2_STREAM_OUT_LOG(APLOG_TRACE2, stream, "post"); } if (rv == APR_SUCCESS) { /* count the buffer again, now that we have read output */ status = add_buffered_data(stream, requested, plen, peos, &complete, pheaders); } else if (APR_STATUS_IS_EOF(rv)) { apr_bucket *eos = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(stream->out_buffer, eos); *peos = 1; } else if (APR_STATUS_IS_EAGAIN(rv)) { /* we set this is the status of this call only if there * is no buffered data, see check below */ } else { /* real error reading. Give this back directly, even though * we may have something buffered. */ status = rv; } } if (status == APR_SUCCESS) { if (*peos || *plen) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, H2_STRM_MSG(stream, "prepare, len=%ld eos=%d"), (long)*plen, *peos); } else { status = (stream->output && h2_beam_is_closed(stream->output))? APR_EOF : APR_EAGAIN; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, H2_STRM_MSG(stream, "prepare, no data")); } } return status; } static int is_not_headers(apr_bucket *b) { return !H2_BUCKET_IS_HEADERS(b); } apr_status_t h2_stream_read_to(h2_stream *stream, apr_bucket_brigade *bb, apr_off_t *plen, int *peos) { conn_rec *c = stream->session->c; apr_status_t status = APR_SUCCESS; if (stream->rst_error) { return APR_ECONNRESET; } status = h2_append_brigade(bb, stream->out_buffer, plen, peos, is_not_headers); if (status == APR_SUCCESS && !*peos && !*plen) { status = APR_EAGAIN; } ap_log_cerror(APLOG_MARK, APLOG_TRACE2, status, c, H2_STRM_MSG(stream, "read_to, len=%ld eos=%d"), (long)*plen, *peos); return status; } apr_status_t h2_stream_submit_pushes(h2_stream *stream, h2_headers *response) { apr_status_t status = APR_SUCCESS; apr_array_header_t *pushes; int i; pushes = h2_push_collect_update(stream, stream->request, response); if (pushes && !apr_is_empty_array(pushes)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, stream->session->c, H2_STRM_MSG(stream, "found %d push candidates"), pushes->nelts); for (i = 0; i < pushes->nelts; ++i) { h2_push *push = APR_ARRAY_IDX(pushes, i, h2_push*); h2_stream *s = h2_session_push(stream->session, stream, push); if (!s) { status = APR_ECONNRESET; break; } } } return status; } apr_table_t *h2_stream_get_trailers(h2_stream *stream) { return NULL; } const h2_priority *h2_stream_get_priority(h2_stream *stream, h2_headers *response) { if (response && stream->initiated_on) { const char *ctype = apr_table_get(response->headers, "content-type"); if (ctype) { /* FIXME: Not good enough, config needs to come from request->server */ return h2_cconfig_get_priority(stream->session->c, ctype); } } return NULL; } int h2_stream_is_ready(h2_stream *stream) { if (stream->has_response) { return 1; } else if (stream->out_buffer && get_first_headers_bucket(stream->out_buffer)) { return 1; } return 0; } int h2_stream_was_closed(const h2_stream *stream) { switch (stream->state) { case H2_SS_CLOSED: case H2_SS_CLEANUP: return 1; default: return 0; } } apr_status_t h2_stream_in_consumed(h2_stream *stream, apr_off_t amount) { h2_session *session = stream->session; if (amount > 0) { apr_off_t consumed = amount; while (consumed > 0) { int len = (consumed > INT_MAX)? INT_MAX : (int)consumed; nghttp2_session_consume(session->ngh2, stream->id, len); consumed -= len; } #ifdef H2_NG2_LOCAL_WIN_SIZE if (1) { int cur_size = nghttp2_session_get_stream_local_window_size( session->ngh2, stream->id); int win = stream->in_window_size; int thigh = win * 8/10; int tlow = win * 2/10; const int win_max = 2*1024*1024; const int win_min = 32*1024; /* Work in progress, probably should add directives for these * values once this stabilizes somewhat. The general idea is * to adapt stream window sizes if the input window changes * a) very quickly (< good RTT) from full to empty * b) only a little bit (> bad RTT) * where in a) it grows and in b) it shrinks again. */ if (cur_size > thigh && amount > thigh && win < win_max) { /* almost empty again with one reported consumption, how * long did this take? */ long ms = apr_time_msec(apr_time_now() - stream->in_last_write); if (ms < 40) { win = H2MIN(win_max, win + (64*1024)); } } else if (cur_size < tlow && amount < tlow && win > win_min) { /* staying full, for how long already? */ long ms = apr_time_msec(apr_time_now() - stream->in_last_write); if (ms > 700) { win = H2MAX(win_min, win - (32*1024)); } } if (win != stream->in_window_size) { stream->in_window_size = win; nghttp2_session_set_local_window_size(session->ngh2, NGHTTP2_FLAG_NONE, stream->id, win); } ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, "h2_stream(%ld-%d): consumed %ld bytes, window now %d/%d", session->id, stream->id, (long)amount, cur_size, stream->in_window_size); } #endif } return APR_SUCCESS; } httpd-2.4.41/modules/http2/h2_bucket_eos.c0000644000000000000500000000730213215000635016622 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include "h2_private.h" #include "h2.h" #include "h2_mplx.h" #include "h2_stream.h" #include "h2_bucket_eos.h" typedef struct { apr_bucket_refcount refcount; h2_stream *stream; } h2_bucket_eos; static apr_status_t bucket_cleanup(void *data) { h2_stream **pstream = data; if (*pstream) { /* If bucket_destroy is called after us, this prevents * bucket_destroy from trying to destroy the stream again. */ *pstream = NULL; } return APR_SUCCESS; } static apr_status_t bucket_read(apr_bucket *b, const char **str, apr_size_t *len, apr_read_type_e block) { (void)b; (void)block; *str = NULL; *len = 0; return APR_SUCCESS; } apr_bucket *h2_bucket_eos_make(apr_bucket *b, h2_stream *stream) { h2_bucket_eos *h; h = apr_bucket_alloc(sizeof(*h), b->list); h->stream = stream; b = apr_bucket_shared_make(b, h, 0, 0); b->type = &h2_bucket_type_eos; return b; } apr_bucket *h2_bucket_eos_create(apr_bucket_alloc_t *list, h2_stream *stream) { apr_bucket *b = apr_bucket_alloc(sizeof(*b), list); APR_BUCKET_INIT(b); b->free = apr_bucket_free; b->list = list; b = h2_bucket_eos_make(b, stream); if (stream) { h2_bucket_eos *h = b->data; apr_pool_pre_cleanup_register(stream->pool, &h->stream, bucket_cleanup); } return b; } static void bucket_destroy(void *data) { h2_bucket_eos *h = data; if (apr_bucket_shared_destroy(h)) { h2_stream *stream = h->stream; if (stream && stream->pool) { apr_pool_cleanup_kill(stream->pool, &h->stream, bucket_cleanup); } apr_bucket_free(h); if (stream) { h2_stream_dispatch(stream, H2_SEV_EOS_SENT); } } } const apr_bucket_type_t h2_bucket_type_eos = { "H2EOS", 5, APR_BUCKET_METADATA, bucket_destroy, bucket_read, apr_bucket_setaside_noop, apr_bucket_split_notimpl, apr_bucket_shared_copy }; httpd-2.4.41/modules/http2/h2_session.c0000644000000000000500000026405713520520073016200 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include #include #include #include #include "h2_private.h" #include "h2.h" #include "h2_bucket_beam.h" #include "h2_bucket_eos.h" #include "h2_config.h" #include "h2_ctx.h" #include "h2_filter.h" #include "h2_h2.h" #include "h2_mplx.h" #include "h2_push.h" #include "h2_request.h" #include "h2_headers.h" #include "h2_stream.h" #include "h2_task.h" #include "h2_session.h" #include "h2_util.h" #include "h2_version.h" #include "h2_workers.h" static apr_status_t dispatch_master(h2_session *session); static apr_status_t h2_session_read(h2_session *session, int block); static void transit(h2_session *session, const char *action, h2_session_state nstate); static void on_stream_state_enter(void *ctx, h2_stream *stream); static void on_stream_state_event(void *ctx, h2_stream *stream, h2_stream_event_t ev); static void on_stream_event(void *ctx, h2_stream *stream, h2_stream_event_t ev); static int h2_session_status_from_apr_status(apr_status_t rv) { if (rv == APR_SUCCESS) { return NGHTTP2_NO_ERROR; } else if (APR_STATUS_IS_EAGAIN(rv)) { return NGHTTP2_ERR_WOULDBLOCK; } else if (APR_STATUS_IS_EOF(rv)) { return NGHTTP2_ERR_EOF; } return NGHTTP2_ERR_PROTO; } h2_stream *h2_session_stream_get(h2_session *session, int stream_id) { return nghttp2_session_get_stream_user_data(session->ngh2, stream_id); } static void dispatch_event(h2_session *session, h2_session_event_t ev, int err, const char *msg); void h2_session_event(h2_session *session, h2_session_event_t ev, int err, const char *msg) { dispatch_event(session, ev, err, msg); } static int rst_unprocessed_stream(h2_stream *stream, void *ctx) { int unprocessed = (!h2_stream_was_closed(stream) && (H2_STREAM_CLIENT_INITIATED(stream->id)? (!stream->session->local.accepting && stream->id > stream->session->local.accepted_max) : (!stream->session->remote.accepting && stream->id > stream->session->remote.accepted_max)) ); if (unprocessed) { h2_stream_rst(stream, H2_ERR_NO_ERROR); return 0; } return 1; } static void cleanup_unprocessed_streams(h2_session *session) { h2_mplx_stream_do(session->mplx, rst_unprocessed_stream, session); } static h2_stream *h2_session_open_stream(h2_session *session, int stream_id, int initiated_on) { h2_stream * stream; apr_pool_t *stream_pool; apr_pool_create(&stream_pool, session->pool); apr_pool_tag(stream_pool, "h2_stream"); stream = h2_stream_create(stream_id, stream_pool, session, session->monitor, initiated_on); if (stream) { nghttp2_session_set_stream_user_data(session->ngh2, stream_id, stream); } return stream; } /** * Determine the importance of streams when scheduling tasks. * - if both stream depend on the same one, compare weights * - if one stream is closer to the root, prioritize that one * - if both are on the same level, use the weight of their root * level ancestors */ static int spri_cmp(int sid1, nghttp2_stream *s1, int sid2, nghttp2_stream *s2, h2_session *session) { nghttp2_stream *p1, *p2; p1 = nghttp2_stream_get_parent(s1); p2 = nghttp2_stream_get_parent(s2); if (p1 == p2) { int32_t w1, w2; w1 = nghttp2_stream_get_weight(s1); w2 = nghttp2_stream_get_weight(s2); return w2 - w1; } else if (!p1) { /* stream 1 closer to root */ return -1; } else if (!p2) { /* stream 2 closer to root */ return 1; } return spri_cmp(sid1, p1, sid2, p2, session); } static int stream_pri_cmp(int sid1, int sid2, void *ctx) { h2_session *session = ctx; nghttp2_stream *s1, *s2; s1 = nghttp2_session_find_stream(session->ngh2, sid1); s2 = nghttp2_session_find_stream(session->ngh2, sid2); if (s1 == s2) { return 0; } else if (!s1) { return 1; } else if (!s2) { return -1; } return spri_cmp(sid1, s1, sid2, s2, session); } /* * Callback when nghttp2 wants to send bytes back to the client. */ static ssize_t send_cb(nghttp2_session *ngh2, const uint8_t *data, size_t length, int flags, void *userp) { h2_session *session = (h2_session *)userp; apr_status_t status; (void)ngh2; (void)flags; status = h2_conn_io_write(&session->io, (const char *)data, length); if (status == APR_SUCCESS) { return length; } if (APR_STATUS_IS_EAGAIN(status)) { return NGHTTP2_ERR_WOULDBLOCK; } ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, session->c, APLOGNO(03062) "h2_session: send error"); return h2_session_status_from_apr_status(status); } static int on_invalid_frame_recv_cb(nghttp2_session *ngh2, const nghttp2_frame *frame, int error, void *userp) { h2_session *session = (h2_session *)userp; (void)ngh2; if (APLOGcdebug(session->c)) { char buffer[256]; h2_util_frame_print(frame, buffer, sizeof(buffer)/sizeof(buffer[0])); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_SSSN_LOG(APLOGNO(03063), session, "recv invalid FRAME[%s], frames=%ld/%ld (r/s)"), buffer, (long)session->frames_received, (long)session->frames_sent); } return 0; } static int on_data_chunk_recv_cb(nghttp2_session *ngh2, uint8_t flags, int32_t stream_id, const uint8_t *data, size_t len, void *userp) { h2_session *session = (h2_session *)userp; apr_status_t status = APR_EINVAL; h2_stream * stream; int rv = 0; stream = h2_session_stream_get(session, stream_id); if (stream) { status = h2_stream_recv_DATA(stream, flags, data, len); dispatch_event(session, H2_SESSION_EV_STREAM_CHANGE, 0, "stream data rcvd"); } else { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03064) "h2_stream(%ld-%d): on_data_chunk for unknown stream", session->id, (int)stream_id); rv = NGHTTP2_ERR_CALLBACK_FAILURE; } if (status != APR_SUCCESS) { /* count this as consumed explicitly as no one will read it */ nghttp2_session_consume(session->ngh2, stream_id, len); } return rv; } static int on_stream_close_cb(nghttp2_session *ngh2, int32_t stream_id, uint32_t error_code, void *userp) { h2_session *session = (h2_session *)userp; h2_stream *stream; (void)ngh2; stream = h2_session_stream_get(session, stream_id); if (stream) { if (error_code) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_STRM_LOG(APLOGNO(03065), stream, "closing with err=%d %s"), (int)error_code, h2_h2_err_description(error_code)); h2_stream_rst(stream, error_code); } } return 0; } static int on_begin_headers_cb(nghttp2_session *ngh2, const nghttp2_frame *frame, void *userp) { h2_session *session = (h2_session *)userp; h2_stream *s; /* We may see HEADERs at the start of a stream or after all DATA * streams to carry trailers. */ (void)ngh2; s = h2_session_stream_get(session, frame->hd.stream_id); if (s) { /* nop */ } else { s = h2_session_open_stream(userp, frame->hd.stream_id, 0); } return s? 0 : NGHTTP2_ERR_START_STREAM_NOT_ALLOWED; } static int on_header_cb(nghttp2_session *ngh2, const nghttp2_frame *frame, const uint8_t *name, size_t namelen, const uint8_t *value, size_t valuelen, uint8_t flags, void *userp) { h2_session *session = (h2_session *)userp; h2_stream * stream; apr_status_t status; (void)flags; stream = h2_session_stream_get(session, frame->hd.stream_id); if (!stream) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(02920) "h2_stream(%ld-%d): on_header unknown stream", session->id, (int)frame->hd.stream_id); return NGHTTP2_ERR_TEMPORAL_CALLBACK_FAILURE; } status = h2_stream_add_header(stream, (const char *)name, namelen, (const char *)value, valuelen); if (status != APR_SUCCESS && !h2_stream_is_ready(stream)) { return NGHTTP2_ERR_TEMPORAL_CALLBACK_FAILURE; } return 0; } /** * nghttp2 session has received a complete frame. Most are used by nghttp2 * for processing of internal state. Some, like HEADER and DATA frames, * we need to act on. */ static int on_frame_recv_cb(nghttp2_session *ng2s, const nghttp2_frame *frame, void *userp) { h2_session *session = (h2_session *)userp; h2_stream *stream; apr_status_t rv = APR_SUCCESS; if (APLOGcdebug(session->c)) { char buffer[256]; h2_util_frame_print(frame, buffer, sizeof(buffer)/sizeof(buffer[0])); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_SSSN_LOG(APLOGNO(03066), session, "recv FRAME[%s], frames=%ld/%ld (r/s)"), buffer, (long)session->frames_received, (long)session->frames_sent); } ++session->frames_received; switch (frame->hd.type) { case NGHTTP2_HEADERS: /* This can be HEADERS for a new stream, defining the request, * or HEADER may come after DATA at the end of a stream as in * trailers */ stream = h2_session_stream_get(session, frame->hd.stream_id); if (stream) { rv = h2_stream_recv_frame(stream, NGHTTP2_HEADERS, frame->hd.flags, frame->hd.length + H2_FRAME_HDR_LEN); } break; case NGHTTP2_DATA: stream = h2_session_stream_get(session, frame->hd.stream_id); if (stream) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_STRM_LOG(APLOGNO(02923), stream, "DATA, len=%ld, flags=%d"), (long)frame->hd.length, frame->hd.flags); rv = h2_stream_recv_frame(stream, NGHTTP2_DATA, frame->hd.flags, frame->hd.length + H2_FRAME_HDR_LEN); } break; case NGHTTP2_PRIORITY: session->reprioritize = 1; ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, "h2_stream(%ld-%d): PRIORITY frame " " weight=%d, dependsOn=%d, exclusive=%d", session->id, (int)frame->hd.stream_id, frame->priority.pri_spec.weight, frame->priority.pri_spec.stream_id, frame->priority.pri_spec.exclusive); break; case NGHTTP2_WINDOW_UPDATE: ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, "h2_stream(%ld-%d): WINDOW_UPDATE incr=%d", session->id, (int)frame->hd.stream_id, frame->window_update.window_size_increment); if (nghttp2_session_want_write(session->ngh2)) { dispatch_event(session, H2_SESSION_EV_FRAME_RCVD, 0, "window update"); } break; case NGHTTP2_RST_STREAM: ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03067) "h2_stream(%ld-%d): RST_STREAM by client, errror=%d", session->id, (int)frame->hd.stream_id, (int)frame->rst_stream.error_code); stream = h2_session_stream_get(session, frame->hd.stream_id); if (stream && stream->initiated_on) { /* A stream reset on a request we sent it. Normal, when the * client does not want it. */ ++session->pushes_reset; } else { /* A stream reset on a request it sent us. Could happen in a browser * when the user navigates away or cancels loading - maybe. */ h2_mplx_client_rst(session->mplx, frame->hd.stream_id); ++session->streams_reset; } break; case NGHTTP2_GOAWAY: if (frame->goaway.error_code == 0 && frame->goaway.last_stream_id == ((1u << 31) - 1)) { /* shutdown notice. Should not come from a client... */ session->remote.accepting = 0; } else { session->remote.accepted_max = frame->goaway.last_stream_id; dispatch_event(session, H2_SESSION_EV_REMOTE_GOAWAY, frame->goaway.error_code, NULL); } break; case NGHTTP2_SETTINGS: if (APLOGctrace2(session->c)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, H2_SSSN_MSG(session, "SETTINGS, len=%ld"), (long)frame->hd.length); } break; default: if (APLOGctrace2(session->c)) { char buffer[256]; h2_util_frame_print(frame, buffer, sizeof(buffer)/sizeof(buffer[0])); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, H2_SSSN_MSG(session, "on_frame_rcv %s"), buffer); } break; } if (session->state == H2_SESSION_ST_IDLE) { /* We received a frame, but session is in state IDLE. That means the frame * did not really progress any of the (possibly) open streams. It was a meta * frame, e.g. SETTINGS/WINDOW_UPDATE/unknown/etc. * Remember: IDLE means we cannot send because either there are no streams open or * all open streams are blocked on exhausted WINDOWs for outgoing data. * The more frames we receive that do not change this, the less interested we * become in serving this connection. This is expressed in increasing "idle_delays". * Eventually, the connection will timeout and we'll close it. */ session->idle_frames = H2MIN(session->idle_frames + 1, session->frames_received); ap_log_cerror( APLOG_MARK, APLOG_TRACE2, 0, session->c, H2_SSSN_MSG(session, "session has %ld idle frames"), (long)session->idle_frames); if (session->idle_frames > 10) { apr_size_t busy_frames = H2MAX(session->frames_received - session->idle_frames, 1); int idle_ratio = (int)(session->idle_frames / busy_frames); if (idle_ratio > 100) { session->idle_delay = apr_time_from_msec(H2MIN(1000, idle_ratio)); } else if (idle_ratio > 10) { session->idle_delay = apr_time_from_msec(10); } else if (idle_ratio > 1) { session->idle_delay = apr_time_from_msec(1); } else { session->idle_delay = 0; } } } if (APR_SUCCESS != rv) return NGHTTP2_ERR_PROTO; return 0; } static int h2_session_continue_data(h2_session *session) { if (h2_mplx_has_master_events(session->mplx)) { return 0; } if (h2_conn_io_needs_flush(&session->io)) { return 0; } return 1; } static char immortal_zeros[H2_MAX_PADLEN]; static int on_send_data_cb(nghttp2_session *ngh2, nghttp2_frame *frame, const uint8_t *framehd, size_t length, nghttp2_data_source *source, void *userp) { apr_status_t status = APR_SUCCESS; h2_session *session = (h2_session *)userp; int stream_id = (int)frame->hd.stream_id; unsigned char padlen; int eos; h2_stream *stream; apr_bucket *b; apr_off_t len = length; (void)ngh2; (void)source; if (!h2_session_continue_data(session)) { return NGHTTP2_ERR_WOULDBLOCK; } ap_assert(frame->data.padlen <= (H2_MAX_PADLEN+1)); padlen = (unsigned char)frame->data.padlen; stream = h2_session_stream_get(session, stream_id); if (!stream) { ap_log_cerror(APLOG_MARK, APLOG_ERR, APR_NOTFOUND, session->c, APLOGNO(02924) "h2_stream(%ld-%d): send_data, stream not found", session->id, (int)stream_id); return NGHTTP2_ERR_CALLBACK_FAILURE; } ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, H2_STRM_MSG(stream, "send_data_cb for %ld bytes"), (long)length); status = h2_conn_io_write(&session->io, (const char *)framehd, H2_FRAME_HDR_LEN); if (padlen && status == APR_SUCCESS) { --padlen; status = h2_conn_io_write(&session->io, (const char *)&padlen, 1); } if (status != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, status, session->c, H2_STRM_MSG(stream, "writing frame header")); return NGHTTP2_ERR_CALLBACK_FAILURE; } status = h2_stream_read_to(stream, session->bbtmp, &len, &eos); if (status != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, status, session->c, H2_STRM_MSG(stream, "send_data_cb, reading stream")); apr_brigade_cleanup(session->bbtmp); return NGHTTP2_ERR_CALLBACK_FAILURE; } else if (len != length) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, status, session->c, H2_STRM_MSG(stream, "send_data_cb, wanted %ld bytes, " "got %ld from stream"), (long)length, (long)len); apr_brigade_cleanup(session->bbtmp); return NGHTTP2_ERR_CALLBACK_FAILURE; } if (padlen) { b = apr_bucket_immortal_create(immortal_zeros, padlen, session->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(session->bbtmp, b); } status = h2_conn_io_pass(&session->io, session->bbtmp); apr_brigade_cleanup(session->bbtmp); if (status == APR_SUCCESS) { stream->out_data_frames++; stream->out_data_octets += length; return 0; } else { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, session->c, H2_STRM_LOG(APLOGNO(02925), stream, "failed send_data_cb")); return NGHTTP2_ERR_CALLBACK_FAILURE; } } static int on_frame_send_cb(nghttp2_session *ngh2, const nghttp2_frame *frame, void *user_data) { h2_session *session = user_data; h2_stream *stream; int stream_id = frame->hd.stream_id; ++session->frames_sent; switch (frame->hd.type) { case NGHTTP2_PUSH_PROMISE: /* PUSH_PROMISE we report on the promised stream */ stream_id = frame->push_promise.promised_stream_id; break; default: break; } if (APLOGcdebug(session->c)) { char buffer[256]; h2_util_frame_print(frame, buffer, sizeof(buffer)/sizeof(buffer[0])); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_SSSN_LOG(APLOGNO(03068), session, "sent FRAME[%s], frames=%ld/%ld (r/s)"), buffer, (long)session->frames_received, (long)session->frames_sent); } stream = h2_session_stream_get(session, stream_id); if (stream) { h2_stream_send_frame(stream, frame->hd.type, frame->hd.flags, frame->hd.length + H2_FRAME_HDR_LEN); } return 0; } #ifdef H2_NG2_INVALID_HEADER_CB static int on_invalid_header_cb(nghttp2_session *ngh2, const nghttp2_frame *frame, const uint8_t *name, size_t namelen, const uint8_t *value, size_t valuelen, uint8_t flags, void *user_data) { h2_session *session = user_data; h2_stream *stream; if (APLOGcdebug(session->c)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03456) "h2_stream(%ld-%d): invalid header '%s: %s'", session->id, (int)frame->hd.stream_id, apr_pstrndup(session->pool, (const char *)name, namelen), apr_pstrndup(session->pool, (const char *)value, valuelen)); } stream = h2_session_stream_get(session, frame->hd.stream_id); if (stream) { h2_stream_rst(stream, NGHTTP2_PROTOCOL_ERROR); } return 0; } #endif static ssize_t select_padding_cb(nghttp2_session *ngh2, const nghttp2_frame *frame, size_t max_payloadlen, void *user_data) { h2_session *session = user_data; ssize_t frame_len = frame->hd.length + H2_FRAME_HDR_LEN; /* the total length without padding */ ssize_t padded_len = frame_len; /* Determine # of padding bytes to append to frame. Unless session->padding_always * the number my be capped by the ui.write_size that currently applies. */ if (session->padding_max) { int n = ap_random_pick(0, session->padding_max); padded_len = H2MIN(max_payloadlen + H2_FRAME_HDR_LEN, frame_len + n); } if (padded_len != frame_len) { if (!session->padding_always && session->io.write_size && (padded_len > session->io.write_size) && (frame_len <= session->io.write_size)) { padded_len = session->io.write_size; } if (APLOGctrace2(session->c)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, "select padding from [%d, %d]: %d (frame length: 0x%04x, write size: %d)", (int)frame_len, (int)max_payloadlen+H2_FRAME_HDR_LEN, (int)(padded_len - frame_len), (int)padded_len, (int)session->io.write_size); } return padded_len - H2_FRAME_HDR_LEN; } return frame->hd.length; } #define NGH2_SET_CALLBACK(callbacks, name, fn)\ nghttp2_session_callbacks_set_##name##_callback(callbacks, fn) static apr_status_t init_callbacks(conn_rec *c, nghttp2_session_callbacks **pcb) { int rv = nghttp2_session_callbacks_new(pcb); if (rv != 0) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(02926) "nghttp2_session_callbacks_new: %s", nghttp2_strerror(rv)); return APR_EGENERAL; } NGH2_SET_CALLBACK(*pcb, send, send_cb); NGH2_SET_CALLBACK(*pcb, on_frame_recv, on_frame_recv_cb); NGH2_SET_CALLBACK(*pcb, on_invalid_frame_recv, on_invalid_frame_recv_cb); NGH2_SET_CALLBACK(*pcb, on_data_chunk_recv, on_data_chunk_recv_cb); NGH2_SET_CALLBACK(*pcb, on_stream_close, on_stream_close_cb); NGH2_SET_CALLBACK(*pcb, on_begin_headers, on_begin_headers_cb); NGH2_SET_CALLBACK(*pcb, on_header, on_header_cb); NGH2_SET_CALLBACK(*pcb, send_data, on_send_data_cb); NGH2_SET_CALLBACK(*pcb, on_frame_send, on_frame_send_cb); #ifdef H2_NG2_INVALID_HEADER_CB NGH2_SET_CALLBACK(*pcb, on_invalid_header, on_invalid_header_cb); #endif NGH2_SET_CALLBACK(*pcb, select_padding, select_padding_cb); return APR_SUCCESS; } static apr_status_t h2_session_shutdown_notice(h2_session *session) { apr_status_t status; ap_assert(session); if (!session->local.accepting) { return APR_SUCCESS; } nghttp2_submit_shutdown_notice(session->ngh2); session->local.accepting = 0; status = nghttp2_session_send(session->ngh2); if (status == APR_SUCCESS) { status = h2_conn_io_flush(&session->io); } ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_SSSN_LOG(APLOGNO(03457), session, "sent shutdown notice")); return status; } static apr_status_t h2_session_shutdown(h2_session *session, int error, const char *msg, int force_close) { apr_status_t status = APR_SUCCESS; ap_assert(session); if (session->local.shutdown) { return APR_SUCCESS; } if (!msg && error) { msg = nghttp2_strerror(error); } if (error || force_close) { /* not a graceful shutdown, we want to leave... * Do not start further streams that are waiting to be scheduled. * Find out the max stream id that we habe been processed or * are still actively working on. * Remove all streams greater than this number without submitting * a RST_STREAM frame, since that should be clear from the GOAWAY * we send. */ session->local.accepted_max = h2_mplx_shutdown(session->mplx); session->local.error = error; } else { /* graceful shutdown. we will continue processing all streams * we have, but no longer accept new ones. Report the max stream * we have received and discard all new ones. */ } session->local.accepting = 0; session->local.shutdown = 1; if (!session->c->aborted) { nghttp2_submit_goaway(session->ngh2, NGHTTP2_FLAG_NONE, session->local.accepted_max, error, (uint8_t*)msg, msg? strlen(msg):0); status = nghttp2_session_send(session->ngh2); if (status == APR_SUCCESS) { status = h2_conn_io_flush(&session->io); } ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_SSSN_LOG(APLOGNO(03069), session, "sent GOAWAY, err=%d, msg=%s"), error, msg? msg : ""); } dispatch_event(session, H2_SESSION_EV_LOCAL_GOAWAY, error, msg); return status; } static apr_status_t session_cleanup(h2_session *session, const char *trigger) { conn_rec *c = session->c; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, H2_SSSN_MSG(session, "pool_cleanup")); if (session->state != H2_SESSION_ST_DONE && session->state != H2_SESSION_ST_INIT) { /* Not good. The connection is being torn down and we have * not sent a goaway. This is considered a protocol error and * the client has to assume that any streams "in flight" may have * been processed and are not safe to retry. * As clients with idle connection may only learn about a closed * connection when sending the next request, this has the effect * that at least this one request will fail. */ ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, c, H2_SSSN_LOG(APLOGNO(03199), session, "connection disappeared without proper " "goodbye, clients will be confused, should not happen")); } transit(session, trigger, H2_SESSION_ST_CLEANUP); h2_mplx_release_and_join(session->mplx, session->iowait); session->mplx = NULL; ap_assert(session->ngh2); nghttp2_session_del(session->ngh2); session->ngh2 = NULL; h2_ctx_clear(c); return APR_SUCCESS; } static apr_status_t session_pool_cleanup(void *data) { conn_rec *c = data; h2_session *session; if ((session = h2_ctx_get_session(c))) { /* if the session is still there, now is the last chance * to perform cleanup. Normally, cleanup should have happened * earlier in the connection pre_close. Main reason is that * any ongoing requests on slave connections might still access * data which has, at this time, already been freed. An example * is mod_ssl that uses request hooks. */ ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, c, H2_SSSN_LOG(APLOGNO(10020), session, "session cleanup triggered by pool cleanup. " "this should have happened earlier already.")); return session_cleanup(session, "pool cleanup"); } return APR_SUCCESS; } apr_status_t h2_session_create(h2_session **psession, conn_rec *c, request_rec *r, server_rec *s, h2_workers *workers) { nghttp2_session_callbacks *callbacks = NULL; nghttp2_option *options = NULL; apr_allocator_t *allocator; apr_thread_mutex_t *mutex; uint32_t n; apr_pool_t *pool = NULL; h2_session *session; apr_status_t status; int rv; *psession = NULL; status = apr_allocator_create(&allocator); if (status != APR_SUCCESS) { return status; } apr_allocator_max_free_set(allocator, ap_max_mem_free); apr_pool_create_ex(&pool, c->pool, NULL, allocator); if (!pool) { apr_allocator_destroy(allocator); return APR_ENOMEM; } apr_pool_tag(pool, "h2_session"); apr_allocator_owner_set(allocator, pool); status = apr_thread_mutex_create(&mutex, APR_THREAD_MUTEX_DEFAULT, pool); if (status != APR_SUCCESS) { apr_pool_destroy(pool); return APR_ENOMEM; } apr_allocator_mutex_set(allocator, mutex); session = apr_pcalloc(pool, sizeof(h2_session)); if (!session) { return APR_ENOMEM; } *psession = session; session->id = c->id; session->c = c; session->r = r; session->s = s; session->pool = pool; session->workers = workers; session->state = H2_SESSION_ST_INIT; session->local.accepting = 1; session->remote.accepting = 1; session->max_stream_count = h2_config_sgeti(s, H2_CONF_MAX_STREAMS); session->max_stream_mem = h2_config_sgeti(s, H2_CONF_STREAM_MAX_MEM); status = apr_thread_cond_create(&session->iowait, session->pool); if (status != APR_SUCCESS) { apr_pool_destroy(pool); return status; } session->in_pending = h2_iq_create(session->pool, (int)session->max_stream_count); if (session->in_pending == NULL) { apr_pool_destroy(pool); return APR_ENOMEM; } session->in_process = h2_iq_create(session->pool, (int)session->max_stream_count); if (session->in_process == NULL) { apr_pool_destroy(pool); return APR_ENOMEM; } session->monitor = apr_pcalloc(pool, sizeof(h2_stream_monitor)); if (session->monitor == NULL) { apr_pool_destroy(pool); return APR_ENOMEM; } session->monitor->ctx = session; session->monitor->on_state_enter = on_stream_state_enter; session->monitor->on_state_event = on_stream_state_event; session->monitor->on_event = on_stream_event; session->mplx = h2_mplx_create(c, s, session->pool, workers); /* connection input filter that feeds the session */ session->cin = h2_filter_cin_create(session); ap_add_input_filter("H2_IN", session->cin, r, c); h2_conn_io_init(&session->io, c, s); session->padding_max = h2_config_sgeti(s, H2_CONF_PADDING_BITS); if (session->padding_max) { session->padding_max = (0x01 << session->padding_max) - 1; } session->padding_always = h2_config_sgeti(s, H2_CONF_PADDING_ALWAYS); session->bbtmp = apr_brigade_create(session->pool, c->bucket_alloc); status = init_callbacks(c, &callbacks); if (status != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_ERR, status, c, APLOGNO(02927) "nghttp2: error in init_callbacks"); apr_pool_destroy(pool); return status; } rv = nghttp2_option_new(&options); if (rv != 0) { ap_log_cerror(APLOG_MARK, APLOG_ERR, APR_EGENERAL, c, APLOGNO(02928) "nghttp2_option_new: %s", nghttp2_strerror(rv)); apr_pool_destroy(pool); return status; } nghttp2_option_set_peer_max_concurrent_streams(options, (uint32_t)session->max_stream_count); /* We need to handle window updates ourself, otherwise we * get flooded by nghttp2. */ nghttp2_option_set_no_auto_window_update(options, 1); rv = nghttp2_session_server_new2(&session->ngh2, callbacks, session, options); nghttp2_session_callbacks_del(callbacks); nghttp2_option_del(options); if (rv != 0) { ap_log_cerror(APLOG_MARK, APLOG_ERR, APR_EGENERAL, c, APLOGNO(02929) "nghttp2_session_server_new: %s", nghttp2_strerror(rv)); apr_pool_destroy(pool); return APR_ENOMEM; } n = h2_config_sgeti(s, H2_CONF_PUSH_DIARY_SIZE); session->push_diary = h2_push_diary_create(session->pool, n); if (APLOGcdebug(c)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, H2_SSSN_LOG(APLOGNO(03200), session, "created, max_streams=%d, stream_mem=%d, " "workers_limit=%d, workers_max=%d, " "push_diary(type=%d,N=%d)"), (int)session->max_stream_count, (int)session->max_stream_mem, session->mplx->limit_active, session->mplx->max_active, session->push_diary->dtype, (int)session->push_diary->N); } apr_pool_pre_cleanup_register(pool, c, session_pool_cleanup); return APR_SUCCESS; } static apr_status_t h2_session_start(h2_session *session, int *rv) { apr_status_t status = APR_SUCCESS; nghttp2_settings_entry settings[3]; size_t slen; int win_size; ap_assert(session); /* Start the conversation by submitting our SETTINGS frame */ *rv = 0; if (session->r) { const char *s, *cs; apr_size_t dlen; h2_stream * stream; /* 'h2c' mode: we should have a 'HTTP2-Settings' header with * base64 encoded client settings. */ s = apr_table_get(session->r->headers_in, "HTTP2-Settings"); if (!s) { ap_log_rerror(APLOG_MARK, APLOG_ERR, APR_EINVAL, session->r, APLOGNO(02931) "HTTP2-Settings header missing in request"); return APR_EINVAL; } cs = NULL; dlen = h2_util_base64url_decode(&cs, s, session->pool); if (APLOGrdebug(session->r)) { char buffer[128]; h2_util_hex_dump(buffer, 128, (char*)cs, dlen); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, session->r, APLOGNO(03070) "upgrading h2c session with HTTP2-Settings: %s -> %s (%d)", s, buffer, (int)dlen); } *rv = nghttp2_session_upgrade(session->ngh2, (uint8_t*)cs, dlen, NULL); if (*rv != 0) { status = APR_EINVAL; ap_log_rerror(APLOG_MARK, APLOG_ERR, status, session->r, APLOGNO(02932) "nghttp2_session_upgrade: %s", nghttp2_strerror(*rv)); return status; } /* Now we need to auto-open stream 1 for the request we got. */ stream = h2_session_open_stream(session, 1, 0); if (!stream) { status = APR_EGENERAL; ap_log_rerror(APLOG_MARK, APLOG_ERR, status, session->r, APLOGNO(02933) "open stream 1: %s", nghttp2_strerror(*rv)); return status; } status = h2_stream_set_request_rec(stream, session->r, 1); if (status != APR_SUCCESS) { return status; } } slen = 0; settings[slen].settings_id = NGHTTP2_SETTINGS_MAX_CONCURRENT_STREAMS; settings[slen].value = (uint32_t)session->max_stream_count; ++slen; win_size = h2_config_sgeti(session->s, H2_CONF_WIN_SIZE); if (win_size != H2_INITIAL_WINDOW_SIZE) { settings[slen].settings_id = NGHTTP2_SETTINGS_INITIAL_WINDOW_SIZE; settings[slen].value = win_size; ++slen; } ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, session->c, H2_SSSN_LOG(APLOGNO(03201), session, "start, INITIAL_WINDOW_SIZE=%ld, MAX_CONCURRENT_STREAMS=%d"), (long)win_size, (int)session->max_stream_count); *rv = nghttp2_submit_settings(session->ngh2, NGHTTP2_FLAG_NONE, settings, slen); if (*rv != 0) { status = APR_EGENERAL; ap_log_cerror(APLOG_MARK, APLOG_ERR, status, session->c, H2_SSSN_LOG(APLOGNO(02935), session, "nghttp2_submit_settings: %s"), nghttp2_strerror(*rv)); } else { /* use maximum possible value for connection window size. We are only * interested in per stream flow control. which have the initial window * size configured above. * Therefore, for our use, the connection window can only get in the * way. Example: if we allow 100 streams with a 32KB window each, we * buffer up to 3.2 MB of data. Unless we do separate connection window * interim updates, any smaller connection window will lead to blocking * in DATA flow. */ *rv = nghttp2_submit_window_update(session->ngh2, NGHTTP2_FLAG_NONE, 0, NGHTTP2_MAX_WINDOW_SIZE - win_size); if (*rv != 0) { status = APR_EGENERAL; ap_log_cerror(APLOG_MARK, APLOG_ERR, status, session->c, H2_SSSN_LOG(APLOGNO(02970), session, "nghttp2_submit_window_update: %s"), nghttp2_strerror(*rv)); } } return status; } static apr_status_t on_stream_headers(h2_session *session, h2_stream *stream, h2_headers *headers, apr_off_t len, int eos); static ssize_t stream_data_cb(nghttp2_session *ng2s, int32_t stream_id, uint8_t *buf, size_t length, uint32_t *data_flags, nghttp2_data_source *source, void *puser) { h2_session *session = (h2_session *)puser; apr_off_t nread = length; int eos = 0; apr_status_t status; h2_stream *stream; ap_assert(session); /* The session wants to send more DATA for the stream. We need * to find out how much of the requested length we can send without * blocking. * Indicate EOS when we encounter it or DEFERRED if the stream * should be suspended. Beware of trailers. */ (void)ng2s; (void)buf; (void)source; stream = h2_session_stream_get(session, stream_id); if (!stream) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, session->c, APLOGNO(02937) "h2_stream(%ld-%d): data_cb, stream not found", session->id, (int)stream_id); return NGHTTP2_ERR_CALLBACK_FAILURE; } status = h2_stream_out_prepare(stream, &nread, &eos, NULL); if (nread) { ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, H2_STRM_MSG(stream, "prepared no_copy, len=%ld, eos=%d"), (long)nread, eos); *data_flags |= NGHTTP2_DATA_FLAG_NO_COPY; } switch (status) { case APR_SUCCESS: break; case APR_EOF: eos = 1; break; case APR_ECONNRESET: case APR_ECONNABORTED: return NGHTTP2_ERR_CALLBACK_FAILURE; case APR_EAGAIN: /* If there is no data available, our session will automatically * suspend this stream and not ask for more data until we resume * it. Remember at our h2_stream that we need to do this. */ nread = 0; ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_STRM_LOG(APLOGNO(03071), stream, "suspending")); return NGHTTP2_ERR_DEFERRED; default: nread = 0; ap_log_cerror(APLOG_MARK, APLOG_ERR, status, session->c, H2_STRM_LOG(APLOGNO(02938), stream, "reading data")); return NGHTTP2_ERR_CALLBACK_FAILURE; } if (eos) { *data_flags |= NGHTTP2_DATA_FLAG_EOF; } return (ssize_t)nread; } struct h2_stream *h2_session_push(h2_session *session, h2_stream *is, h2_push *push) { h2_stream *stream; h2_ngheader *ngh; apr_status_t status; int nid = 0; status = h2_req_create_ngheader(&ngh, is->pool, push->req); if (status == APR_SUCCESS) { nid = nghttp2_submit_push_promise(session->ngh2, 0, is->id, ngh->nv, ngh->nvlen, NULL); } if (status != APR_SUCCESS || nid <= 0) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, session->c, H2_STRM_LOG(APLOGNO(03075), is, "submitting push promise fail: %s"), nghttp2_strerror(nid)); return NULL; } ++session->pushes_promised; ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_STRM_LOG(APLOGNO(03076), is, "SERVER_PUSH %d for %s %s on %d"), nid, push->req->method, push->req->path, is->id); stream = h2_session_open_stream(session, nid, is->id); if (!stream) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_STRM_LOG(APLOGNO(03077), stream, "failed to create stream obj %d"), nid); /* kill the push_promise */ nghttp2_submit_rst_stream(session->ngh2, NGHTTP2_FLAG_NONE, nid, NGHTTP2_INTERNAL_ERROR); return NULL; } h2_session_set_prio(session, stream, push->priority); h2_stream_set_request(stream, push->req); ++session->unsent_promises; return stream; } static int valid_weight(float f) { int w = (int)f; return (w < NGHTTP2_MIN_WEIGHT? NGHTTP2_MIN_WEIGHT : (w > NGHTTP2_MAX_WEIGHT)? NGHTTP2_MAX_WEIGHT : w); } apr_status_t h2_session_set_prio(h2_session *session, h2_stream *stream, const h2_priority *prio) { apr_status_t status = APR_SUCCESS; #ifdef H2_NG2_CHANGE_PRIO nghttp2_stream *s_grandpa, *s_parent, *s; if (prio == NULL) { /* we treat this as a NOP */ return APR_SUCCESS; } s = nghttp2_session_find_stream(session->ngh2, stream->id); if (!s) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, session->c, H2_STRM_MSG(stream, "lookup of nghttp2_stream failed")); return APR_EINVAL; } s_parent = nghttp2_stream_get_parent(s); if (s_parent) { nghttp2_priority_spec ps; int id_parent, id_grandpa, w_parent, w; int rv = 0; const char *ptype = "AFTER"; h2_dependency dep = prio->dependency; id_parent = nghttp2_stream_get_stream_id(s_parent); s_grandpa = nghttp2_stream_get_parent(s_parent); if (s_grandpa) { id_grandpa = nghttp2_stream_get_stream_id(s_grandpa); } else { /* parent of parent does not exist, * only possible if parent == root */ dep = H2_DEPENDANT_AFTER; } switch (dep) { case H2_DEPENDANT_INTERLEAVED: /* PUSHed stream is to be interleaved with initiating stream. * It is made a sibling of the initiating stream and gets a * proportional weight [1, MAX_WEIGHT] of the initiaing * stream weight. */ ptype = "INTERLEAVED"; w_parent = nghttp2_stream_get_weight(s_parent); w = valid_weight(w_parent * ((float)prio->weight / NGHTTP2_MAX_WEIGHT)); nghttp2_priority_spec_init(&ps, id_grandpa, w, 0); break; case H2_DEPENDANT_BEFORE: /* PUSHed stream os to be sent BEFORE the initiating stream. * It gets the same weight as the initiating stream, replaces * that stream in the dependency tree and has the initiating * stream as child. */ ptype = "BEFORE"; w = w_parent = nghttp2_stream_get_weight(s_parent); nghttp2_priority_spec_init(&ps, stream->id, w_parent, 0); id_grandpa = nghttp2_stream_get_stream_id(s_grandpa); rv = nghttp2_session_change_stream_priority(session->ngh2, id_parent, &ps); if (rv < 0) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03202) "h2_stream(%ld-%d): PUSH BEFORE, weight=%d, " "depends=%d, returned=%d", session->id, id_parent, ps.weight, ps.stream_id, rv); return APR_EGENERAL; } nghttp2_priority_spec_init(&ps, id_grandpa, w, 0); break; case H2_DEPENDANT_AFTER: /* The PUSHed stream is to be sent after the initiating stream. * Give if the specified weight and let it depend on the intiating * stream. */ /* fall through, it's the default */ default: nghttp2_priority_spec_init(&ps, id_parent, valid_weight(prio->weight), 0); break; } rv = nghttp2_session_change_stream_priority(session->ngh2, stream->id, &ps); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, ""H2_STRM_LOG(APLOGNO(03203), stream, "PUSH %s, weight=%d, depends=%d, returned=%d"), ptype, ps.weight, ps.stream_id, rv); status = (rv < 0)? APR_EGENERAL : APR_SUCCESS; } #else (void)session; (void)stream; (void)prio; (void)valid_weight; #endif return status; } int h2_session_push_enabled(h2_session *session) { /* iff we can and they can and want */ return (session->remote.accepting /* remote GOAWAY received */ && h2_config_sgeti(session->s, H2_CONF_PUSH) && nghttp2_session_get_remote_settings(session->ngh2, NGHTTP2_SETTINGS_ENABLE_PUSH)); } static apr_status_t h2_session_send(h2_session *session) { apr_interval_time_t saved_timeout; int rv; apr_socket_t *socket; socket = ap_get_conn_socket(session->c); if (socket) { apr_socket_timeout_get(socket, &saved_timeout); apr_socket_timeout_set(socket, session->s->timeout); } rv = nghttp2_session_send(session->ngh2); if (socket) { apr_socket_timeout_set(socket, saved_timeout); } session->have_written = 1; if (rv != 0 && rv != NGHTTP2_ERR_WOULDBLOCK) { if (nghttp2_is_fatal(rv)) { dispatch_event(session, H2_SESSION_EV_PROTO_ERROR, rv, nghttp2_strerror(rv)); return APR_EGENERAL; } } session->unsent_promises = 0; session->unsent_submits = 0; return APR_SUCCESS; } /** * headers for the stream are ready. */ static apr_status_t on_stream_headers(h2_session *session, h2_stream *stream, h2_headers *headers, apr_off_t len, int eos) { apr_status_t status = APR_SUCCESS; const char *s; int rv = 0; ap_assert(session); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, H2_STRM_MSG(stream, "on_headers")); if (headers->status < 100) { h2_stream_rst(stream, headers->status); goto leave; } else if (stream->has_response) { h2_ngheader *nh; status = h2_res_create_ngtrailer(&nh, stream->pool, headers); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, session->c, H2_STRM_LOG(APLOGNO(03072), stream, "submit %d trailers"), (int)nh->nvlen); if (status == APR_SUCCESS) { rv = nghttp2_submit_trailer(session->ngh2, stream->id, nh->nv, nh->nvlen); } else { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, session->c, H2_STRM_LOG(APLOGNO(10024), stream, "invalid trailers")); h2_stream_rst(stream, NGHTTP2_PROTOCOL_ERROR); } goto leave; } else { nghttp2_data_provider provider, *pprovider = NULL; h2_ngheader *ngh; const char *note; ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_STRM_LOG(APLOGNO(03073), stream, "submit response %d, REMOTE_WINDOW_SIZE=%u"), headers->status, (unsigned int)nghttp2_session_get_stream_remote_window_size(session->ngh2, stream->id)); if (!eos || len > 0) { memset(&provider, 0, sizeof(provider)); provider.source.fd = stream->id; provider.read_callback = stream_data_cb; pprovider = &provider; } /* If this stream is not a pushed one itself, * and HTTP/2 server push is enabled here, * and the response HTTP status is not sth >= 400, * and the remote side has pushing enabled, * -> find and perform any pushes on this stream * *before* we submit the stream response itself. * This helps clients avoid opening new streams on Link * headers that get pushed right afterwards. * * *) the response code is relevant, as we do not want to * make pushes on 401 or 403 codes and friends. * And if we see a 304, we do not push either * as the client, having this resource in its cache, might * also have the pushed ones as well. */ if (!stream->initiated_on && !stream->has_response && stream->request && stream->request->method && !strcmp("GET", stream->request->method) && (headers->status < 400) && (headers->status != 304) && h2_session_push_enabled(session)) { /* PUSH is possibe and enabled on server, unless the request * denies it, submit resources to push */ s = apr_table_get(headers->notes, H2_PUSH_MODE_NOTE); if (!s || strcmp(s, "0")) { h2_stream_submit_pushes(stream, headers); } } if (!stream->pref_priority) { stream->pref_priority = h2_stream_get_priority(stream, headers); } h2_session_set_prio(session, stream, stream->pref_priority); note = apr_table_get(headers->notes, H2_FILTER_DEBUG_NOTE); if (note && !strcmp("on", note)) { int32_t connFlowIn, connFlowOut; connFlowIn = nghttp2_session_get_effective_local_window_size(session->ngh2); connFlowOut = nghttp2_session_get_remote_window_size(session->ngh2); headers = h2_headers_copy(stream->pool, headers); apr_table_setn(headers->headers, "conn-flow-in", apr_itoa(stream->pool, connFlowIn)); apr_table_setn(headers->headers, "conn-flow-out", apr_itoa(stream->pool, connFlowOut)); } if (headers->status == 103 && !h2_config_sgeti(session->s, H2_CONF_EARLY_HINTS)) { /* suppress sending this to the client, it might have triggered * pushes and served its purpose nevertheless */ rv = 0; goto leave; } status = h2_res_create_ngheader(&ngh, stream->pool, headers); if (status == APR_SUCCESS) { rv = nghttp2_submit_response(session->ngh2, stream->id, ngh->nv, ngh->nvlen, pprovider); stream->has_response = h2_headers_are_response(headers); session->have_written = 1; if (stream->initiated_on) { ++session->pushes_submitted; } else { ++session->responses_submitted; } } else { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, session->c, H2_STRM_LOG(APLOGNO(10025), stream, "invalid response")); h2_stream_rst(stream, NGHTTP2_PROTOCOL_ERROR); } } leave: if (nghttp2_is_fatal(rv)) { status = APR_EGENERAL; dispatch_event(session, H2_SESSION_EV_PROTO_ERROR, rv, nghttp2_strerror(rv)); ap_log_cerror(APLOG_MARK, APLOG_ERR, status, session->c, APLOGNO(02940) "submit_response: %s", nghttp2_strerror(rv)); } ++session->unsent_submits; /* Unsent push promises are written immediately, as nghttp2 * 1.5.0 realizes internal stream data structures only on * send and we might need them for other submits. * Also, to conserve memory, we send at least every 10 submits * so that nghttp2 does not buffer all outbound items too * long. */ if (status == APR_SUCCESS && (session->unsent_promises || session->unsent_submits > 10)) { status = h2_session_send(session); } return status; } /** * A stream was resumed as new response/output data arrived. */ static apr_status_t on_stream_resume(void *ctx, h2_stream *stream) { h2_session *session = ctx; apr_status_t status = APR_EAGAIN; int rv; apr_off_t len = 0; int eos = 0; h2_headers *headers; ap_assert(stream); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, H2_STRM_MSG(stream, "on_resume")); send_headers: headers = NULL; status = h2_stream_out_prepare(stream, &len, &eos, &headers); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, status, session->c, H2_STRM_MSG(stream, "prepared len=%ld, eos=%d"), (long)len, eos); if (headers) { status = on_stream_headers(session, stream, headers, len, eos); if (status != APR_SUCCESS || stream->rst_error) { return status; } goto send_headers; } else if (status != APR_EAGAIN) { /* we have DATA to send */ if (!stream->has_response) { /* but no response */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_STRM_LOG(APLOGNO(03466), stream, "no response, RST_STREAM")); h2_stream_rst(stream, H2_ERR_PROTOCOL_ERROR); return APR_SUCCESS; } rv = nghttp2_session_resume_data(session->ngh2, stream->id); session->have_written = 1; ap_log_cerror(APLOG_MARK, nghttp2_is_fatal(rv)? APLOG_ERR : APLOG_DEBUG, 0, session->c, H2_STRM_LOG(APLOGNO(02936), stream, "resumed")); } return status; } static void h2_session_in_flush(h2_session *session) { int id; while ((id = h2_iq_shift(session->in_process)) > 0) { h2_stream *stream = h2_session_stream_get(session, id); if (stream) { ap_assert(!stream->scheduled); if (h2_stream_prep_processing(stream) == APR_SUCCESS) { h2_mplx_process(session->mplx, stream, stream_pri_cmp, session); } else { h2_stream_rst(stream, H2_ERR_INTERNAL_ERROR); } } } while ((id = h2_iq_shift(session->in_pending)) > 0) { h2_stream *stream = h2_session_stream_get(session, id); if (stream) { h2_stream_flush_input(stream); } } } static apr_status_t session_read(h2_session *session, apr_size_t readlen, int block) { apr_status_t status, rstatus = APR_EAGAIN; conn_rec *c = session->c; apr_off_t read_start = session->io.bytes_read; while (1) { /* H2_IN filter handles all incoming data against the session. * We just pull at the filter chain to make it happen */ status = ap_get_brigade(c->input_filters, session->bbtmp, AP_MODE_READBYTES, block? APR_BLOCK_READ : APR_NONBLOCK_READ, H2MAX(APR_BUCKET_BUFF_SIZE, readlen)); /* get rid of any possible data we do not expect to get */ apr_brigade_cleanup(session->bbtmp); switch (status) { case APR_SUCCESS: /* successful read, reset our idle timers */ rstatus = APR_SUCCESS; if (block) { /* successful blocked read, try unblocked to * get more. */ block = 0; } break; case APR_EAGAIN: return rstatus; case APR_TIMEUP: return status; default: if (session->io.bytes_read == read_start) { /* first attempt failed */ if (APR_STATUS_IS_ETIMEDOUT(status) || APR_STATUS_IS_ECONNABORTED(status) || APR_STATUS_IS_ECONNRESET(status) || APR_STATUS_IS_EOF(status) || APR_STATUS_IS_EBADF(status)) { /* common status for a client that has left */ ap_log_cerror(APLOG_MARK, APLOG_TRACE1, status, c, H2_SSSN_MSG(session, "input gone")); } else { /* uncommon status, log on INFO so that we see this */ ap_log_cerror( APLOG_MARK, APLOG_DEBUG, status, c, H2_SSSN_LOG(APLOGNO(02950), session, "error reading, terminating")); } return status; } /* subsequent failure after success(es), return initial * status. */ return rstatus; } if ((session->io.bytes_read - read_start) > readlen) { /* read enough in one go, give write a chance */ ap_log_cerror(APLOG_MARK, APLOG_TRACE2, status, c, H2_SSSN_MSG(session, "read enough, returning")); break; } } return rstatus; } static apr_status_t h2_session_read(h2_session *session, int block) { apr_status_t status = session_read(session, session->max_stream_mem * H2MAX(2, session->open_streams), block); h2_session_in_flush(session); return status; } static const char *StateNames[] = { "INIT", /* H2_SESSION_ST_INIT */ "DONE", /* H2_SESSION_ST_DONE */ "IDLE", /* H2_SESSION_ST_IDLE */ "BUSY", /* H2_SESSION_ST_BUSY */ "WAIT", /* H2_SESSION_ST_WAIT */ "CLEANUP", /* H2_SESSION_ST_CLEANUP */ }; const char *h2_session_state_str(h2_session_state state) { if (state >= (sizeof(StateNames)/sizeof(StateNames[0]))) { return "unknown"; } return StateNames[state]; } static void update_child_status(h2_session *session, int status, const char *msg) { /* Assume that we also change code/msg when something really happened and * avoid updating the scoreboard in between */ if (session->last_status_code != status || session->last_status_msg != msg) { apr_snprintf(session->status, sizeof(session->status), "%s, streams: %d/%d/%d/%d/%d (open/recv/resp/push/rst)", msg? msg : "-", (int)session->open_streams, (int)session->remote.emitted_count, (int)session->responses_submitted, (int)session->pushes_submitted, (int)session->pushes_reset + session->streams_reset); ap_update_child_status_descr(session->c->sbh, status, session->status); } } static void transit(h2_session *session, const char *action, h2_session_state nstate) { apr_time_t timeout; int ostate, loglvl; const char *s; if (session->state != nstate) { ostate = session->state; session->state = nstate; loglvl = APLOG_DEBUG; if ((ostate == H2_SESSION_ST_BUSY && nstate == H2_SESSION_ST_WAIT) || (ostate == H2_SESSION_ST_WAIT && nstate == H2_SESSION_ST_BUSY)){ loglvl = APLOG_TRACE1; } ap_log_cerror(APLOG_MARK, loglvl, 0, session->c, H2_SSSN_LOG(APLOGNO(03078), session, "transit [%s] -- %s --> [%s]"), h2_session_state_str(ostate), action, h2_session_state_str(nstate)); switch (session->state) { case H2_SESSION_ST_IDLE: if (!session->remote.emitted_count) { /* on fresh connections, with async mpm, do not return * to mpm for a second. This gives the first request a better * chance to arrive (und connection leaving IDLE state). * If we return to mpm right away, this connection has the * same chance of being cleaned up by the mpm as connections * that already served requests - not fair. */ session->idle_sync_until = apr_time_now() + apr_time_from_sec(1); s = "timeout"; timeout = session->s->timeout; update_child_status(session, SERVER_BUSY_READ, "idle"); ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, session->c, H2_SSSN_LOG("", session, "enter idle, timeout = %d sec"), (int)apr_time_sec(H2MAX(session->s->timeout, session->s->keep_alive_timeout))); } else if (session->open_streams) { s = "timeout"; timeout = session->s->timeout; update_child_status(session, SERVER_BUSY_READ, "idle"); } else { /* normal keepalive setup */ s = "keepalive"; timeout = session->s->keep_alive_timeout; update_child_status(session, SERVER_BUSY_KEEPALIVE, "idle"); } session->idle_until = apr_time_now() + timeout; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, session->c, H2_SSSN_LOG("", session, "enter idle, %s = %d sec"), s, (int)apr_time_sec(timeout)); break; case H2_SESSION_ST_DONE: update_child_status(session, SERVER_CLOSING, "done"); break; default: /* nop */ break; } } } static void h2_session_ev_init(h2_session *session, int arg, const char *msg) { switch (session->state) { case H2_SESSION_ST_INIT: transit(session, "init", H2_SESSION_ST_BUSY); break; default: /* nop */ break; } } static void h2_session_ev_local_goaway(h2_session *session, int arg, const char *msg) { cleanup_unprocessed_streams(session); if (!session->remote.shutdown) { update_child_status(session, SERVER_CLOSING, "local goaway"); } transit(session, "local goaway", H2_SESSION_ST_DONE); } static void h2_session_ev_remote_goaway(h2_session *session, int arg, const char *msg) { if (!session->remote.shutdown) { session->remote.error = arg; session->remote.accepting = 0; session->remote.shutdown = 1; cleanup_unprocessed_streams(session); update_child_status(session, SERVER_CLOSING, "remote goaway"); transit(session, "remote goaway", H2_SESSION_ST_DONE); } } static void h2_session_ev_conn_error(h2_session *session, int arg, const char *msg) { switch (session->state) { case H2_SESSION_ST_INIT: case H2_SESSION_ST_DONE: /* just leave */ transit(session, "conn error", H2_SESSION_ST_DONE); break; default: ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_SSSN_LOG(APLOGNO(03401), session, "conn error -> shutdown")); h2_session_shutdown(session, arg, msg, 0); break; } } static void h2_session_ev_proto_error(h2_session *session, int arg, const char *msg) { if (!session->local.shutdown) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, H2_SSSN_LOG(APLOGNO(03402), session, "proto error -> shutdown")); h2_session_shutdown(session, arg, msg, 0); } } static void h2_session_ev_conn_timeout(h2_session *session, int arg, const char *msg) { transit(session, msg, H2_SESSION_ST_DONE); if (!session->local.shutdown) { h2_session_shutdown(session, arg, msg, 1); } } static void h2_session_ev_no_io(h2_session *session, int arg, const char *msg) { switch (session->state) { case H2_SESSION_ST_BUSY: /* Nothing to READ, nothing to WRITE on the master connection. * Possible causes: * - we wait for the client to send us sth * - we wait for started tasks to produce output * - we have finished all streams and the client has sent GO_AWAY */ ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, H2_SSSN_MSG(session, "NO_IO event, %d streams open"), session->open_streams); h2_conn_io_flush(&session->io); if (session->open_streams > 0) { if (h2_mplx_awaits_data(session->mplx)) { /* waiting for at least one stream to produce data */ transit(session, "no io", H2_SESSION_ST_WAIT); } else { /* we have streams open, and all are submitted and none * is suspended. The only thing keeping us from WRITEing * more must be the flow control. * This means we only wait for WINDOW_UPDATE from the * client and can block on READ. */ transit(session, "no io (flow wait)", H2_SESSION_ST_IDLE); /* Make sure we have flushed all previously written output * so that the client will react. */ if (h2_conn_io_flush(&session->io) != APR_SUCCESS) { dispatch_event(session, H2_SESSION_EV_CONN_ERROR, 0, NULL); return; } } } else if (session->local.accepting) { /* When we have no streams, but accept new, switch to idle */ transit(session, "no io (keepalive)", H2_SESSION_ST_IDLE); } else { /* We are no longer accepting new streams and there are * none left. Time to leave. */ h2_session_shutdown(session, arg, msg, 0); transit(session, "no io", H2_SESSION_ST_DONE); } break; default: /* nop */ break; } } static void h2_session_ev_frame_rcvd(h2_session *session, int arg, const char *msg) { switch (session->state) { case H2_SESSION_ST_IDLE: case H2_SESSION_ST_WAIT: transit(session, "frame received", H2_SESSION_ST_BUSY); break; default: /* nop */ break; } } static void h2_session_ev_stream_change(h2_session *session, int arg, const char *msg) { switch (session->state) { case H2_SESSION_ST_IDLE: case H2_SESSION_ST_WAIT: transit(session, "stream change", H2_SESSION_ST_BUSY); break; default: /* nop */ break; } } static void h2_session_ev_ngh2_done(h2_session *session, int arg, const char *msg) { switch (session->state) { case H2_SESSION_ST_DONE: /* nop */ break; default: transit(session, "nghttp2 done", H2_SESSION_ST_DONE); break; } } static void h2_session_ev_mpm_stopping(h2_session *session, int arg, const char *msg) { switch (session->state) { case H2_SESSION_ST_DONE: /* nop */ break; default: h2_session_shutdown_notice(session); break; } } static void h2_session_ev_pre_close(h2_session *session, int arg, const char *msg) { h2_session_shutdown(session, arg, msg, 1); } static void ev_stream_open(h2_session *session, h2_stream *stream) { h2_iq_append(session->in_process, stream->id); } static void ev_stream_closed(h2_session *session, h2_stream *stream) { apr_bucket *b; if (H2_STREAM_CLIENT_INITIATED(stream->id) && (stream->id > session->local.completed_max)) { session->local.completed_max = stream->id; } switch (session->state) { case H2_SESSION_ST_IDLE: break; default: break; } /* The stream might have data in the buffers of the main connection. * We can only free the allocated resources once all had been written. * Send a special buckets on the connection that gets destroyed when * all preceding data has been handled. On its destruction, it is safe * to purge all resources of the stream. */ b = h2_bucket_eos_create(session->c->bucket_alloc, stream); APR_BRIGADE_INSERT_TAIL(session->bbtmp, b); h2_conn_io_pass(&session->io, session->bbtmp); apr_brigade_cleanup(session->bbtmp); } static void on_stream_state_enter(void *ctx, h2_stream *stream) { h2_session *session = ctx; /* stream entered a new state */ ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, H2_STRM_MSG(stream, "entered state")); switch (stream->state) { case H2_SS_IDLE: /* stream was created */ ++session->open_streams; if (H2_STREAM_CLIENT_INITIATED(stream->id)) { ++session->remote.emitted_count; if (stream->id > session->remote.emitted_max) { session->remote.emitted_max = stream->id; session->local.accepted_max = stream->id; } } else { if (stream->id > session->local.emitted_max) { ++session->local.emitted_count; session->remote.emitted_max = stream->id; } } break; case H2_SS_OPEN: /* stream has request headers */ case H2_SS_RSVD_L: /* stream has request headers */ ev_stream_open(session, stream); break; case H2_SS_CLOSED_L: /* stream output was closed */ break; case H2_SS_CLOSED_R: /* stream input was closed */ break; case H2_SS_CLOSED: /* stream in+out were closed */ --session->open_streams; ev_stream_closed(session, stream); break; case H2_SS_CLEANUP: nghttp2_session_set_stream_user_data(session->ngh2, stream->id, NULL); h2_mplx_stream_cleanup(session->mplx, stream); break; default: break; } dispatch_event(session, H2_SESSION_EV_STREAM_CHANGE, 0, "stream state change"); } static void on_stream_event(void *ctx, h2_stream *stream, h2_stream_event_t ev) { h2_session *session = ctx; switch (ev) { case H2_SEV_IN_DATA_PENDING: h2_iq_append(session->in_pending, stream->id); break; default: /* NOP */ break; } } static void on_stream_state_event(void *ctx, h2_stream *stream, h2_stream_event_t ev) { h2_session *session = ctx; switch (ev) { case H2_SEV_CANCELLED: if (session->state != H2_SESSION_ST_DONE) { nghttp2_submit_rst_stream(session->ngh2, NGHTTP2_FLAG_NONE, stream->id, stream->rst_error); } break; default: /* NOP */ break; } } static void dispatch_event(h2_session *session, h2_session_event_t ev, int arg, const char *msg) { switch (ev) { case H2_SESSION_EV_INIT: h2_session_ev_init(session, arg, msg); break; case H2_SESSION_EV_LOCAL_GOAWAY: h2_session_ev_local_goaway(session, arg, msg); break; case H2_SESSION_EV_REMOTE_GOAWAY: h2_session_ev_remote_goaway(session, arg, msg); break; case H2_SESSION_EV_CONN_ERROR: h2_session_ev_conn_error(session, arg, msg); break; case H2_SESSION_EV_PROTO_ERROR: h2_session_ev_proto_error(session, arg, msg); break; case H2_SESSION_EV_CONN_TIMEOUT: h2_session_ev_conn_timeout(session, arg, msg); break; case H2_SESSION_EV_NO_IO: h2_session_ev_no_io(session, arg, msg); break; case H2_SESSION_EV_FRAME_RCVD: h2_session_ev_frame_rcvd(session, arg, msg); break; case H2_SESSION_EV_NGH2_DONE: h2_session_ev_ngh2_done(session, arg, msg); break; case H2_SESSION_EV_MPM_STOPPING: h2_session_ev_mpm_stopping(session, arg, msg); break; case H2_SESSION_EV_PRE_CLOSE: h2_session_ev_pre_close(session, arg, msg); break; case H2_SESSION_EV_STREAM_CHANGE: h2_session_ev_stream_change(session, arg, msg); break; default: ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, session->c, H2_SSSN_MSG(session, "unknown event %d"), ev); break; } } /* trigger window updates, stream resumes and submits */ static apr_status_t dispatch_master(h2_session *session) { apr_status_t status; status = h2_mplx_dispatch_master_events(session->mplx, on_stream_resume, session); if (status == APR_EAGAIN) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, status, session->c, H2_SSSN_MSG(session, "no master event available")); } else if (status != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, status, session->c, H2_SSSN_MSG(session, "dispatch error")); dispatch_event(session, H2_SESSION_EV_CONN_ERROR, H2_ERR_INTERNAL_ERROR, "dispatch error"); } return status; } static const int MAX_WAIT_MICROS = 200 * 1000; apr_status_t h2_session_process(h2_session *session, int async) { apr_status_t status = APR_SUCCESS; conn_rec *c = session->c; int rv, mpm_state, trace = APLOGctrace3(c); apr_time_t now; if (trace) { ap_log_cerror( APLOG_MARK, APLOG_TRACE3, status, c, H2_SSSN_MSG(session, "process start, async=%d"), async); } while (session->state != H2_SESSION_ST_DONE) { now = apr_time_now(); session->have_read = session->have_written = 0; if (session->local.accepting && !ap_mpm_query(AP_MPMQ_MPM_STATE, &mpm_state)) { if (mpm_state == AP_MPMQ_STOPPING) { dispatch_event(session, H2_SESSION_EV_MPM_STOPPING, 0, NULL); } } session->status[0] = '\0'; switch (session->state) { case H2_SESSION_ST_INIT: ap_update_child_status_from_conn(c->sbh, SERVER_BUSY_READ, c); if (!h2_is_acceptable_connection(c, session->r, 1)) { update_child_status(session, SERVER_BUSY_READ, "inadequate security"); h2_session_shutdown(session, NGHTTP2_INADEQUATE_SECURITY, NULL, 1); } else { update_child_status(session, SERVER_BUSY_READ, "init"); status = h2_session_start(session, &rv); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, c, H2_SSSN_LOG(APLOGNO(03079), session, "started on %s:%d"), session->s->server_hostname, c->local_addr->port); if (status != APR_SUCCESS) { dispatch_event(session, H2_SESSION_EV_CONN_ERROR, 0, NULL); } dispatch_event(session, H2_SESSION_EV_INIT, 0, NULL); } break; case H2_SESSION_ST_IDLE: if (session->idle_until && (apr_time_now() + session->idle_delay) > session->idle_until) { ap_log_cerror( APLOG_MARK, APLOG_TRACE1, status, c, H2_SSSN_MSG(session, "idle, timeout reached, closing")); if (session->idle_delay) { apr_table_setn(session->c->notes, "short-lingering-close", "1"); } dispatch_event(session, H2_SESSION_EV_CONN_TIMEOUT, 0, "timeout"); goto out; } if (session->idle_delay) { /* we are less interested in spending time on this connection */ ap_log_cerror( APLOG_MARK, APLOG_TRACE2, status, c, H2_SSSN_MSG(session, "session is idle (%ld ms), idle wait %ld sec left"), (long)apr_time_as_msec(session->idle_delay), (long)apr_time_sec(session->idle_until - now)); apr_sleep(session->idle_delay); session->idle_delay = 0; } h2_conn_io_flush(&session->io); if (async && !session->r && (now > session->idle_sync_until)) { if (trace) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, status, c, H2_SSSN_MSG(session, "nonblock read, %d streams open"), session->open_streams); } status = h2_session_read(session, 0); if (status == APR_SUCCESS) { session->have_read = 1; } else if (APR_STATUS_IS_EAGAIN(status) || APR_STATUS_IS_TIMEUP(status)) { status = h2_mplx_idle(session->mplx); if (status == APR_EAGAIN) { break; } else if (status != APR_SUCCESS) { dispatch_event(session, H2_SESSION_EV_CONN_ERROR, H2_ERR_ENHANCE_YOUR_CALM, "less is more"); } status = APR_EAGAIN; goto out; } else { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, c, H2_SSSN_LOG(APLOGNO(03403), session, "no data, error")); dispatch_event(session, H2_SESSION_EV_CONN_ERROR, 0, "timeout"); } } else { /* make certain, we send everything before we idle */ if (trace) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, status, c, H2_SSSN_MSG(session, "sync, stutter 1-sec, %d streams open"), session->open_streams); } /* We wait in smaller increments, using a 1 second timeout. * That gives us the chance to check for MPMQ_STOPPING often. */ status = h2_mplx_idle(session->mplx); if (status == APR_EAGAIN) { break; } else if (status != APR_SUCCESS) { dispatch_event(session, H2_SESSION_EV_CONN_ERROR, H2_ERR_ENHANCE_YOUR_CALM, "less is more"); } h2_filter_cin_timeout_set(session->cin, apr_time_from_sec(1)); status = h2_session_read(session, 1); if (status == APR_SUCCESS) { session->have_read = 1; } else if (status == APR_EAGAIN) { /* nothing to read */ } else if (APR_STATUS_IS_TIMEUP(status)) { /* continue reading handling */ } else if (APR_STATUS_IS_ECONNABORTED(status) || APR_STATUS_IS_ECONNRESET(status) || APR_STATUS_IS_EOF(status) || APR_STATUS_IS_EBADF(status)) { ap_log_cerror( APLOG_MARK, APLOG_TRACE3, status, c, H2_SSSN_MSG(session, "input gone")); dispatch_event(session, H2_SESSION_EV_CONN_ERROR, 0, NULL); } else { ap_log_cerror( APLOG_MARK, APLOG_TRACE3, status, c, H2_SSSN_MSG(session, "(1 sec timeout) read failed")); dispatch_event(session, H2_SESSION_EV_CONN_ERROR, 0, "error"); } } if (nghttp2_session_want_write(session->ngh2)) { ap_update_child_status(session->c->sbh, SERVER_BUSY_WRITE, NULL); status = h2_session_send(session); if (status == APR_SUCCESS) { status = h2_conn_io_flush(&session->io); } if (status != APR_SUCCESS) { dispatch_event(session, H2_SESSION_EV_CONN_ERROR, H2_ERR_INTERNAL_ERROR, "writing"); break; } } break; case H2_SESSION_ST_BUSY: if (nghttp2_session_want_read(session->ngh2)) { ap_update_child_status(session->c->sbh, SERVER_BUSY_READ, NULL); h2_filter_cin_timeout_set(session->cin, session->s->timeout); status = h2_session_read(session, 0); if (status == APR_SUCCESS) { session->have_read = 1; } else if (status == APR_EAGAIN) { /* nothing to read */ } else if (APR_STATUS_IS_TIMEUP(status)) { dispatch_event(session, H2_SESSION_EV_CONN_TIMEOUT, 0, NULL); break; } else { dispatch_event(session, H2_SESSION_EV_CONN_ERROR, 0, NULL); } } status = dispatch_master(session); if (status != APR_SUCCESS && status != APR_EAGAIN) { break; } if (nghttp2_session_want_write(session->ngh2)) { ap_update_child_status(session->c->sbh, SERVER_BUSY_WRITE, NULL); status = h2_session_send(session); if (status == APR_SUCCESS) { status = h2_conn_io_flush(&session->io); } if (status != APR_SUCCESS) { dispatch_event(session, H2_SESSION_EV_CONN_ERROR, H2_ERR_INTERNAL_ERROR, "writing"); break; } } if (session->have_read || session->have_written) { if (session->wait_us) { session->wait_us = 0; } } else if (!nghttp2_session_want_write(session->ngh2)) { dispatch_event(session, H2_SESSION_EV_NO_IO, 0, NULL); } break; case H2_SESSION_ST_WAIT: if (session->wait_us <= 0) { session->wait_us = 10; if (h2_conn_io_flush(&session->io) != APR_SUCCESS) { dispatch_event(session, H2_SESSION_EV_CONN_ERROR, 0, NULL); break; } } else { /* repeating, increase timer for graceful backoff */ session->wait_us = H2MIN(session->wait_us*2, MAX_WAIT_MICROS); } if (trace) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, c, "h2_session: wait for data, %ld micros", (long)session->wait_us); } status = h2_mplx_out_trywait(session->mplx, session->wait_us, session->iowait); if (status == APR_SUCCESS) { session->wait_us = 0; dispatch_event(session, H2_SESSION_EV_STREAM_CHANGE, 0, NULL); } else if (APR_STATUS_IS_TIMEUP(status)) { /* go back to checking all inputs again */ transit(session, "wait cycle", session->local.shutdown? H2_SESSION_ST_DONE : H2_SESSION_ST_BUSY); } else if (APR_STATUS_IS_ECONNRESET(status) || APR_STATUS_IS_ECONNABORTED(status)) { dispatch_event(session, H2_SESSION_EV_CONN_ERROR, 0, NULL); } else { ap_log_cerror(APLOG_MARK, APLOG_WARNING, status, c, H2_SSSN_LOG(APLOGNO(03404), session, "waiting on conditional")); h2_session_shutdown(session, H2_ERR_INTERNAL_ERROR, "cond wait error", 0); } break; default: ap_log_cerror(APLOG_MARK, APLOG_ERR, APR_EGENERAL, c, H2_SSSN_LOG(APLOGNO(03080), session, "unknown state")); dispatch_event(session, H2_SESSION_EV_PROTO_ERROR, 0, NULL); break; } if (!nghttp2_session_want_read(session->ngh2) && !nghttp2_session_want_write(session->ngh2)) { dispatch_event(session, H2_SESSION_EV_NGH2_DONE, 0, NULL); } if (session->reprioritize) { h2_mplx_reprioritize(session->mplx, stream_pri_cmp, session); session->reprioritize = 0; } } out: if (trace) { ap_log_cerror( APLOG_MARK, APLOG_TRACE3, status, c, H2_SSSN_MSG(session, "process returns")); } if ((session->state != H2_SESSION_ST_DONE) && (APR_STATUS_IS_EOF(status) || APR_STATUS_IS_ECONNRESET(status) || APR_STATUS_IS_ECONNABORTED(status))) { dispatch_event(session, H2_SESSION_EV_CONN_ERROR, 0, NULL); } return (session->state == H2_SESSION_ST_DONE)? APR_EOF : APR_SUCCESS; } apr_status_t h2_session_pre_close(h2_session *session, int async) { apr_status_t status; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, session->c, H2_SSSN_MSG(session, "pre_close")); dispatch_event(session, H2_SESSION_EV_PRE_CLOSE, 0, (session->state == H2_SESSION_ST_IDLE)? "timeout" : NULL); status = session_cleanup(session, "pre_close"); if (status == APR_SUCCESS) { /* no one should hold a reference to this session any longer and * the h2_ctx was removed from the connection. * Take the pool (and thus all subpools etc. down now, instead of * during cleanup of main connection pool. */ apr_pool_destroy(session->pool); } return status; } httpd-2.4.41/modules/http2/h2_proxy_session.c0000644000000000000500000016036313520520073017434 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include "mod_http2.h" #include "h2.h" #include "h2_proxy_util.h" #include "h2_proxy_session.h" APLOG_USE_MODULE(proxy_http2); typedef struct h2_proxy_stream { int id; apr_pool_t *pool; h2_proxy_session *session; const char *url; request_rec *r; h2_proxy_request *req; const char *real_server_uri; const char *p_server_uri; int standalone; h2_proxy_stream_state_t state; unsigned int suspended : 1; unsigned int waiting_on_100 : 1; unsigned int waiting_on_ping : 1; unsigned int headers_ended : 1; uint32_t error_code; apr_bucket_brigade *input; apr_off_t data_sent; apr_bucket_brigade *output; apr_off_t data_received; apr_table_t *saves; } h2_proxy_stream; static void dispatch_event(h2_proxy_session *session, h2_proxys_event_t ev, int arg, const char *msg); static void ping_arrived(h2_proxy_session *session); static apr_status_t check_suspended(h2_proxy_session *session); static void stream_resume(h2_proxy_stream *stream); static apr_status_t submit_trailers(h2_proxy_stream *stream); static apr_status_t proxy_session_pre_close(void *theconn) { proxy_conn_rec *p_conn = (proxy_conn_rec *)theconn; h2_proxy_session *session = p_conn->data; if (session && session->ngh2) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, session->c, "proxy_session(%s): pool cleanup, state=%d, streams=%d", session->id, session->state, (int)h2_proxy_ihash_count(session->streams)); session->aborted = 1; dispatch_event(session, H2_PROXYS_EV_PRE_CLOSE, 0, NULL); nghttp2_session_del(session->ngh2); session->ngh2 = NULL; p_conn->data = NULL; } return APR_SUCCESS; } static int proxy_pass_brigade(apr_bucket_alloc_t *bucket_alloc, proxy_conn_rec *p_conn, conn_rec *origin, apr_bucket_brigade *bb, int flush) { apr_status_t status; apr_off_t transferred; if (flush) { apr_bucket *e = apr_bucket_flush_create(bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); } apr_brigade_length(bb, 0, &transferred); if (transferred != -1) p_conn->worker->s->transferred += transferred; status = ap_pass_brigade(origin->output_filters, bb); /* Cleanup the brigade now to avoid buckets lifetime * issues in case of error returned below. */ apr_brigade_cleanup(bb); if (status != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, origin, APLOGNO(03357) "pass output failed to %pI (%s)", p_conn->addr, p_conn->hostname); } return status; } static ssize_t raw_send(nghttp2_session *ngh2, const uint8_t *data, size_t length, int flags, void *user_data) { h2_proxy_session *session = user_data; apr_bucket *b; apr_status_t status; int flush = 1; if (data) { b = apr_bucket_transient_create((const char*)data, length, session->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(session->output, b); } status = proxy_pass_brigade(session->c->bucket_alloc, session->p_conn, session->c, session->output, flush); ap_log_cerror(APLOG_MARK, APLOG_TRACE1, status, session->c, "h2_proxy_sesssion(%s): raw_send %d bytes, flush=%d", session->id, (int)length, flush); if (status != APR_SUCCESS) { return NGHTTP2_ERR_CALLBACK_FAILURE; } return length; } static int on_frame_recv(nghttp2_session *ngh2, const nghttp2_frame *frame, void *user_data) { h2_proxy_session *session = user_data; h2_proxy_stream *stream; request_rec *r; int n; if (APLOGcdebug(session->c)) { char buffer[256]; h2_proxy_util_frame_print(frame, buffer, sizeof(buffer)/sizeof(buffer[0])); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03341) "h2_proxy_session(%s): recv FRAME[%s]", session->id, buffer); } session->last_frame_received = apr_time_now(); switch (frame->hd.type) { case NGHTTP2_HEADERS: stream = nghttp2_session_get_stream_user_data(ngh2, frame->hd.stream_id); if (!stream) { return NGHTTP2_ERR_CALLBACK_FAILURE; } r = stream->r; if (r->status >= 100 && r->status < 200) { /* By default, we will forward all interim responses when * we are sitting on a HTTP/2 connection to the client */ int forward = session->h2_front; switch(r->status) { case 100: if (stream->waiting_on_100) { stream->waiting_on_100 = 0; r->status_line = ap_get_status_line(r->status); forward = 1; } break; case 103: /* workaround until we get this into http protocol base * parts. without this, unknown codes are converted to * 500... */ r->status_line = "103 Early Hints"; break; default: r->status_line = ap_get_status_line(r->status); break; } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03487) "h2_proxy_session(%s): got interim HEADERS, " "status=%d, will forward=%d", session->id, r->status, forward); if (forward) { ap_send_interim_response(r, 1); } } stream_resume(stream); break; case NGHTTP2_PING: if (session->check_ping) { session->check_ping = 0; ping_arrived(session); } break; case NGHTTP2_PUSH_PROMISE: break; case NGHTTP2_SETTINGS: if (frame->settings.niv > 0) { n = nghttp2_session_get_remote_settings(ngh2, NGHTTP2_SETTINGS_MAX_CONCURRENT_STREAMS); if (n > 0) { session->remote_max_concurrent = n; } } break; case NGHTTP2_GOAWAY: /* we expect the remote server to tell us the highest stream id * that it has started processing. */ session->last_stream_id = frame->goaway.last_stream_id; dispatch_event(session, H2_PROXYS_EV_REMOTE_GOAWAY, 0, NULL); break; default: break; } return 0; } static int before_frame_send(nghttp2_session *ngh2, const nghttp2_frame *frame, void *user_data) { h2_proxy_session *session = user_data; if (APLOGcdebug(session->c)) { char buffer[256]; h2_proxy_util_frame_print(frame, buffer, sizeof(buffer)/sizeof(buffer[0])); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03343) "h2_proxy_session(%s): sent FRAME[%s]", session->id, buffer); } return 0; } static int add_header(void *table, const char *n, const char *v) { apr_table_add(table, n, v); return 1; } static void process_proxy_header(apr_table_t *headers, h2_proxy_stream *stream, const char *n, const char *v) { static const struct { const char *name; ap_proxy_header_reverse_map_fn func; } transform_hdrs[] = { { "Location", ap_proxy_location_reverse_map }, { "Content-Location", ap_proxy_location_reverse_map }, { "URI", ap_proxy_location_reverse_map }, { "Destination", ap_proxy_location_reverse_map }, { "Set-Cookie", ap_proxy_cookie_reverse_map }, { NULL, NULL } }; request_rec *r = stream->r; proxy_dir_conf *dconf; int i; dconf = ap_get_module_config(r->per_dir_config, &proxy_module); if (!dconf->preserve_host) { for (i = 0; transform_hdrs[i].name; ++i) { if (!ap_cstr_casecmp(transform_hdrs[i].name, n)) { apr_table_add(headers, n, (*transform_hdrs[i].func)(r, dconf, v)); return; } } if (!ap_cstr_casecmp("Link", n)) { dconf = ap_get_module_config(r->per_dir_config, &proxy_module); apr_table_add(headers, n, h2_proxy_link_reverse_map(r, dconf, stream->real_server_uri, stream->p_server_uri, v)); return; } } apr_table_add(headers, n, v); } static apr_status_t h2_proxy_stream_add_header_out(h2_proxy_stream *stream, const char *n, apr_size_t nlen, const char *v, apr_size_t vlen) { if (n[0] == ':') { if (!stream->data_received && !strncmp(":status", n, nlen)) { char *s = apr_pstrndup(stream->r->pool, v, vlen); apr_table_setn(stream->r->notes, "proxy-status", s); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, stream->session->c, "h2_proxy_stream(%s-%d): got status %s", stream->session->id, stream->id, s); stream->r->status = (int)apr_atoi64(s); if (stream->r->status <= 0) { stream->r->status = 500; return APR_EGENERAL; } } return APR_SUCCESS; } ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, stream->session->c, "h2_proxy_stream(%s-%d): on_header %s: %s", stream->session->id, stream->id, n, v); if (!h2_proxy_res_ignore_header(n, nlen)) { char *hname, *hvalue; apr_table_t *headers = (stream->headers_ended? stream->r->trailers_out : stream->r->headers_out); hname = apr_pstrndup(stream->pool, n, nlen); h2_proxy_util_camel_case_header(hname, nlen); hvalue = apr_pstrndup(stream->pool, v, vlen); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, stream->session->c, "h2_proxy_stream(%s-%d): got header %s: %s", stream->session->id, stream->id, hname, hvalue); process_proxy_header(headers, stream, hname, hvalue); } return APR_SUCCESS; } static int log_header(void *ctx, const char *key, const char *value) { h2_proxy_stream *stream = ctx; ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, stream->r, "h2_proxy_stream(%s-%d), header_out %s: %s", stream->session->id, stream->id, key, value); return 1; } static void h2_proxy_stream_end_headers_out(h2_proxy_stream *stream) { h2_proxy_session *session = stream->session; request_rec *r = stream->r; apr_pool_t *p = r->pool; /* Now, add in the cookies from the response to the ones already saved */ apr_table_do(add_header, stream->saves, r->headers_out, "Set-Cookie", NULL); /* and now load 'em all in */ if (!apr_is_empty_table(stream->saves)) { apr_table_unset(r->headers_out, "Set-Cookie"); r->headers_out = apr_table_overlay(p, r->headers_out, stream->saves); } /* handle Via header in response */ if (session->conf->viaopt != via_off && session->conf->viaopt != via_block) { const char *server_name = ap_get_server_name(stream->r); apr_port_t port = ap_get_server_port(stream->r); char portstr[32]; /* If USE_CANONICAL_NAME_OFF was configured for the proxy virtual host, * then the server name returned by ap_get_server_name() is the * origin server name (which doesn't make sense with Via: headers) * so we use the proxy vhost's name instead. */ if (server_name == stream->r->hostname) { server_name = stream->r->server->server_hostname; } if (ap_is_default_port(port, stream->r)) { portstr[0] = '\0'; } else { apr_snprintf(portstr, sizeof(portstr), ":%d", port); } /* create a "Via:" response header entry and merge it */ apr_table_add(r->headers_out, "Via", (session->conf->viaopt == via_full) ? apr_psprintf(p, "%d.%d %s%s (%s)", HTTP_VERSION_MAJOR(r->proto_num), HTTP_VERSION_MINOR(r->proto_num), server_name, portstr, AP_SERVER_BASEVERSION) : apr_psprintf(p, "%d.%d %s%s", HTTP_VERSION_MAJOR(r->proto_num), HTTP_VERSION_MINOR(r->proto_num), server_name, portstr) ); } if (r->status >= 200) stream->headers_ended = 1; if (APLOGrtrace2(stream->r)) { ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, stream->r, "h2_proxy_stream(%s-%d), header_out after merging", stream->session->id, stream->id); apr_table_do(log_header, stream, stream->r->headers_out, NULL); } } static int stream_response_data(nghttp2_session *ngh2, uint8_t flags, int32_t stream_id, const uint8_t *data, size_t len, void *user_data) { h2_proxy_session *session = user_data; h2_proxy_stream *stream; apr_bucket *b; apr_status_t status; stream = nghttp2_session_get_stream_user_data(ngh2, stream_id); if (!stream) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(03358) "h2_proxy_session(%s): recv data chunk for " "unknown stream %d, ignored", session->id, stream_id); return 0; } if (!stream->data_received) { /* last chance to manipulate response headers. * after this, only trailers */ h2_proxy_stream_end_headers_out(stream); } stream->data_received += len; b = apr_bucket_transient_create((const char*)data, len, stream->r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(stream->output, b); /* always flush after a DATA frame, as we have no other indication * of buffer use */ b = apr_bucket_flush_create(stream->r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(stream->output, b); status = ap_pass_brigade(stream->r->output_filters, stream->output); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, stream->r, APLOGNO(03359) "h2_proxy_session(%s): stream=%d, response DATA %ld, %ld" " total", session->id, stream_id, (long)len, (long)stream->data_received); if (status != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, session->c, APLOGNO(03344) "h2_proxy_session(%s): passing output on stream %d", session->id, stream->id); nghttp2_submit_rst_stream(ngh2, NGHTTP2_FLAG_NONE, stream_id, NGHTTP2_STREAM_CLOSED); return NGHTTP2_ERR_STREAM_CLOSING; } return 0; } static int on_stream_close(nghttp2_session *ngh2, int32_t stream_id, uint32_t error_code, void *user_data) { h2_proxy_session *session = user_data; h2_proxy_stream *stream; if (!session->aborted) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03360) "h2_proxy_session(%s): stream=%d, closed, err=%d", session->id, stream_id, error_code); stream = h2_proxy_ihash_get(session->streams, stream_id); if (stream) { stream->error_code = error_code; } dispatch_event(session, H2_PROXYS_EV_STREAM_DONE, stream_id, NULL); } return 0; } static int on_header(nghttp2_session *ngh2, const nghttp2_frame *frame, const uint8_t *namearg, size_t nlen, const uint8_t *valuearg, size_t vlen, uint8_t flags, void *user_data) { h2_proxy_session *session = user_data; h2_proxy_stream *stream; const char *n = (const char*)namearg; const char *v = (const char*)valuearg; (void)session; if (frame->hd.type == NGHTTP2_HEADERS && nlen) { stream = nghttp2_session_get_stream_user_data(ngh2, frame->hd.stream_id); if (stream) { if (h2_proxy_stream_add_header_out(stream, n, nlen, v, vlen)) { return NGHTTP2_ERR_CALLBACK_FAILURE; } } } else if (frame->hd.type == NGHTTP2_PUSH_PROMISE) { } return 0; } static ssize_t stream_request_data(nghttp2_session *ngh2, int32_t stream_id, uint8_t *buf, size_t length, uint32_t *data_flags, nghttp2_data_source *source, void *user_data) { h2_proxy_stream *stream; apr_status_t status = APR_SUCCESS; *data_flags = 0; stream = nghttp2_session_get_stream_user_data(ngh2, stream_id); if (!stream) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(03361) "h2_proxy_stream(NULL): data_read, stream %d not found", stream_id); return NGHTTP2_ERR_CALLBACK_FAILURE; } if (stream->session->check_ping) { /* suspend until we hear from the other side */ stream->waiting_on_ping = 1; status = APR_EAGAIN; } else if (stream->r->expecting_100) { /* suspend until the answer comes */ stream->waiting_on_100 = 1; status = APR_EAGAIN; } else if (APR_BRIGADE_EMPTY(stream->input)) { status = ap_get_brigade(stream->r->input_filters, stream->input, AP_MODE_READBYTES, APR_NONBLOCK_READ, H2MAX(APR_BUCKET_BUFF_SIZE, length)); ap_log_rerror(APLOG_MARK, APLOG_TRACE2, status, stream->r, "h2_proxy_stream(%s-%d): request body read", stream->session->id, stream->id); } if (status == APR_SUCCESS) { ssize_t readlen = 0; while (status == APR_SUCCESS && (readlen < length) && !APR_BRIGADE_EMPTY(stream->input)) { apr_bucket* b = APR_BRIGADE_FIRST(stream->input); if (APR_BUCKET_IS_METADATA(b)) { if (APR_BUCKET_IS_EOS(b)) { *data_flags |= NGHTTP2_DATA_FLAG_EOF; } else { /* we do nothing more regarding any meta here */ } } else { const char *bdata = NULL; apr_size_t blen = 0; status = apr_bucket_read(b, &bdata, &blen, APR_BLOCK_READ); if (status == APR_SUCCESS && blen > 0) { ssize_t copylen = H2MIN(length - readlen, blen); memcpy(buf, bdata, copylen); buf += copylen; readlen += copylen; if (copylen < blen) { /* We have data left in the bucket. Split it. */ status = apr_bucket_split(b, copylen); } } } apr_bucket_delete(b); } stream->data_sent += readlen; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, stream->r, APLOGNO(03468) "h2_proxy_stream(%d): request DATA %ld, %ld" " total, flags=%d", stream->id, (long)readlen, (long)stream->data_sent, (int)*data_flags); if ((*data_flags & NGHTTP2_DATA_FLAG_EOF) && !apr_is_empty_table(stream->r->trailers_in)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, stream->r, APLOGNO(10179) "h2_proxy_stream(%d): submit trailers", stream->id); *data_flags |= NGHTTP2_DATA_FLAG_NO_END_STREAM; submit_trailers(stream); } return readlen; } else if (APR_STATUS_IS_EAGAIN(status)) { /* suspended stream, needs to be re-awakened */ ap_log_rerror(APLOG_MARK, APLOG_TRACE2, status, stream->r, "h2_proxy_stream(%s-%d): suspending", stream->session->id, stream_id); stream->suspended = 1; h2_proxy_iq_add(stream->session->suspended, stream->id, NULL, NULL); return NGHTTP2_ERR_DEFERRED; } else { nghttp2_submit_rst_stream(ngh2, NGHTTP2_FLAG_NONE, stream_id, NGHTTP2_STREAM_CLOSED); return NGHTTP2_ERR_STREAM_CLOSING; } } #ifdef H2_NG2_INVALID_HEADER_CB static int on_invalid_header_cb(nghttp2_session *ngh2, const nghttp2_frame *frame, const uint8_t *name, size_t namelen, const uint8_t *value, size_t valuelen, uint8_t flags, void *user_data) { h2_proxy_session *session = user_data; if (APLOGcdebug(session->c)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03469) "h2_proxy_session(%s-%d): denying stream with invalid header " "'%s: %s'", session->id, (int)frame->hd.stream_id, apr_pstrndup(session->pool, (const char *)name, namelen), apr_pstrndup(session->pool, (const char *)value, valuelen)); } return nghttp2_submit_rst_stream(session->ngh2, NGHTTP2_FLAG_NONE, frame->hd.stream_id, NGHTTP2_PROTOCOL_ERROR); } #endif h2_proxy_session *h2_proxy_session_setup(const char *id, proxy_conn_rec *p_conn, proxy_server_conf *conf, int h2_front, unsigned char window_bits_connection, unsigned char window_bits_stream, h2_proxy_request_done *done) { if (!p_conn->data) { apr_pool_t *pool = p_conn->scpool; h2_proxy_session *session; nghttp2_session_callbacks *cbs; nghttp2_option *option; session = apr_pcalloc(pool, sizeof(*session)); apr_pool_pre_cleanup_register(pool, p_conn, proxy_session_pre_close); p_conn->data = session; session->id = apr_pstrdup(p_conn->scpool, id); session->c = p_conn->connection; session->p_conn = p_conn; session->conf = conf; session->pool = p_conn->scpool; session->state = H2_PROXYS_ST_INIT; session->h2_front = h2_front; session->window_bits_stream = window_bits_stream; session->window_bits_connection = window_bits_connection; session->streams = h2_proxy_ihash_create(pool, offsetof(h2_proxy_stream, id)); session->suspended = h2_proxy_iq_create(pool, 5); session->done = done; session->input = apr_brigade_create(session->pool, session->c->bucket_alloc); session->output = apr_brigade_create(session->pool, session->c->bucket_alloc); nghttp2_session_callbacks_new(&cbs); nghttp2_session_callbacks_set_on_frame_recv_callback(cbs, on_frame_recv); nghttp2_session_callbacks_set_on_data_chunk_recv_callback(cbs, stream_response_data); nghttp2_session_callbacks_set_on_stream_close_callback(cbs, on_stream_close); nghttp2_session_callbacks_set_on_header_callback(cbs, on_header); nghttp2_session_callbacks_set_before_frame_send_callback(cbs, before_frame_send); nghttp2_session_callbacks_set_send_callback(cbs, raw_send); #ifdef H2_NG2_INVALID_HEADER_CB nghttp2_session_callbacks_set_on_invalid_header_callback(cbs, on_invalid_header_cb); #endif nghttp2_option_new(&option); nghttp2_option_set_peer_max_concurrent_streams(option, 100); nghttp2_option_set_no_auto_window_update(option, 0); nghttp2_session_client_new2(&session->ngh2, cbs, session, option); nghttp2_option_del(option); nghttp2_session_callbacks_del(cbs); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03362) "setup session for %s", p_conn->hostname); } else { h2_proxy_session *session = p_conn->data; if (!session->check_ping) { apr_interval_time_t age = apr_time_now() - session->last_frame_received; if (age > apr_time_from_sec(1)) { session->check_ping = 1; nghttp2_submit_ping(session->ngh2, 0, (const uint8_t *)"nevergonnagiveyouup"); } } } return p_conn->data; } static apr_status_t session_start(h2_proxy_session *session) { nghttp2_settings_entry settings[2]; int rv, add_conn_window; apr_socket_t *s; s = ap_get_conn_socket(session->c); #if (!defined(WIN32) && !defined(NETWARE)) || defined(DOXYGEN) if (s) { ap_sock_disable_nagle(s); } #endif settings[0].settings_id = NGHTTP2_SETTINGS_ENABLE_PUSH; settings[0].value = 0; settings[1].settings_id = NGHTTP2_SETTINGS_INITIAL_WINDOW_SIZE; settings[1].value = (1 << session->window_bits_stream) - 1; rv = nghttp2_submit_settings(session->ngh2, NGHTTP2_FLAG_NONE, settings, H2_ALEN(settings)); /* If the connection window is larger than our default, trigger a WINDOW_UPDATE */ add_conn_window = ((1 << session->window_bits_connection) - 1 - NGHTTP2_INITIAL_CONNECTION_WINDOW_SIZE); if (!rv && add_conn_window != 0) { rv = nghttp2_submit_window_update(session->ngh2, NGHTTP2_FLAG_NONE, 0, add_conn_window); } return rv? APR_EGENERAL : APR_SUCCESS; } static apr_status_t open_stream(h2_proxy_session *session, const char *url, request_rec *r, int standalone, h2_proxy_stream **pstream) { h2_proxy_stream *stream; apr_uri_t puri; const char *authority, *scheme, *path; apr_status_t status; proxy_dir_conf *dconf; stream = apr_pcalloc(r->pool, sizeof(*stream)); stream->pool = r->pool; stream->url = url; stream->r = r; stream->standalone = standalone; stream->session = session; stream->state = H2_STREAM_ST_IDLE; stream->input = apr_brigade_create(stream->pool, session->c->bucket_alloc); stream->output = apr_brigade_create(stream->pool, session->c->bucket_alloc); stream->req = h2_proxy_req_create(1, stream->pool, 0); status = apr_uri_parse(stream->pool, url, &puri); if (status != APR_SUCCESS) return status; scheme = (strcmp(puri.scheme, "h2")? "http" : "https"); dconf = ap_get_module_config(r->per_dir_config, &proxy_module); if (dconf->preserve_host) { authority = r->hostname; } else { authority = puri.hostname; if (!ap_strchr_c(authority, ':') && puri.port && apr_uri_port_of_scheme(scheme) != puri.port) { /* port info missing and port is not default for scheme: append */ authority = apr_psprintf(stream->pool, "%s:%d", authority, puri.port); } } /* we need this for mapping relative uris in headers ("Link") back * to local uris */ stream->real_server_uri = apr_psprintf(stream->pool, "%s://%s", scheme, authority); stream->p_server_uri = apr_psprintf(stream->pool, "%s://%s", puri.scheme, authority); path = apr_uri_unparse(stream->pool, &puri, APR_URI_UNP_OMITSITEPART); h2_proxy_req_make(stream->req, stream->pool, r->method, scheme, authority, path, r->headers_in); if (dconf->add_forwarded_headers) { if (PROXYREQ_REVERSE == r->proxyreq) { const char *buf; /* Add X-Forwarded-For: so that the upstream has a chance to * determine, where the original request came from. */ apr_table_mergen(stream->req->headers, "X-Forwarded-For", r->useragent_ip); /* Add X-Forwarded-Host: so that upstream knows what the * original request hostname was. */ if ((buf = apr_table_get(r->headers_in, "Host"))) { apr_table_mergen(stream->req->headers, "X-Forwarded-Host", buf); } /* Add X-Forwarded-Server: so that upstream knows what the * name of this proxy server is (if there are more than one) * XXX: This duplicates Via: - do we strictly need it? */ apr_table_mergen(stream->req->headers, "X-Forwarded-Server", r->server->server_hostname); } } /* Tuck away all already existing cookies */ stream->saves = apr_table_make(r->pool, 2); apr_table_do(add_header, stream->saves, r->headers_out, "Set-Cookie", NULL); *pstream = stream; return APR_SUCCESS; } static apr_status_t submit_stream(h2_proxy_session *session, h2_proxy_stream *stream) { h2_proxy_ngheader *hd; nghttp2_data_provider *pp = NULL; nghttp2_data_provider provider; int rv, may_have_request_body = 1; apr_status_t status; hd = h2_proxy_util_nghd_make_req(stream->pool, stream->req); /* If we expect a 100-continue response, we must refrain from reading any input until we get it. Reading the input will possibly trigger HTTP_IN filter to generate the 100-continue itself. */ if (stream->waiting_on_100 || stream->waiting_on_ping) { /* make a small test if we get an EOF/EOS immediately */ status = ap_get_brigade(stream->r->input_filters, stream->input, AP_MODE_READBYTES, APR_NONBLOCK_READ, APR_BUCKET_BUFF_SIZE); may_have_request_body = APR_STATUS_IS_EAGAIN(status) || (status == APR_SUCCESS && !APR_BUCKET_IS_EOS(APR_BRIGADE_FIRST(stream->input))); } if (may_have_request_body) { provider.source.fd = 0; provider.source.ptr = NULL; provider.read_callback = stream_request_data; pp = &provider; } rv = nghttp2_submit_request(session->ngh2, NULL, hd->nv, hd->nvlen, pp, stream); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03363) "h2_proxy_session(%s): submit %s%s -> %d", session->id, stream->req->authority, stream->req->path, rv); if (rv > 0) { stream->id = rv; stream->state = H2_STREAM_ST_OPEN; h2_proxy_ihash_add(session->streams, stream); dispatch_event(session, H2_PROXYS_EV_STREAM_SUBMITTED, rv, NULL); return APR_SUCCESS; } return APR_EGENERAL; } static apr_status_t submit_trailers(h2_proxy_stream *stream) { h2_proxy_ngheader *hd; int rv; hd = h2_proxy_util_nghd_make(stream->pool, stream->r->trailers_in); rv = nghttp2_submit_trailer(stream->session->ngh2, stream->id, hd->nv, hd->nvlen); return rv == 0? APR_SUCCESS: APR_EGENERAL; } static apr_status_t feed_brigade(h2_proxy_session *session, apr_bucket_brigade *bb) { apr_status_t status = APR_SUCCESS; apr_size_t readlen = 0; ssize_t n; while (status == APR_SUCCESS && !APR_BRIGADE_EMPTY(bb)) { apr_bucket* b = APR_BRIGADE_FIRST(bb); if (APR_BUCKET_IS_METADATA(b)) { /* nop */ } else { const char *bdata = NULL; apr_size_t blen = 0; status = apr_bucket_read(b, &bdata, &blen, APR_BLOCK_READ); if (status == APR_SUCCESS && blen > 0) { n = nghttp2_session_mem_recv(session->ngh2, (const uint8_t *)bdata, blen); ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, session->c, "h2_proxy_session(%s): feeding %ld bytes -> %ld", session->id, (long)blen, (long)n); if (n < 0) { if (nghttp2_is_fatal((int)n)) { status = APR_EGENERAL; } } else { readlen += n; if (n < blen) { apr_bucket_split(b, n); } } } } apr_bucket_delete(b); } ap_log_cerror(APLOG_MARK, APLOG_TRACE1, status, session->c, "h2_proxy_session(%s): fed %ld bytes of input to session", session->id, (long)readlen); if (readlen == 0 && status == APR_SUCCESS) { return APR_EAGAIN; } return status; } static apr_status_t h2_proxy_session_read(h2_proxy_session *session, int block, apr_interval_time_t timeout) { apr_status_t status = APR_SUCCESS; if (APR_BRIGADE_EMPTY(session->input)) { apr_socket_t *socket = NULL; apr_time_t save_timeout = -1; if (block) { socket = ap_get_conn_socket(session->c); if (socket) { apr_socket_timeout_get(socket, &save_timeout); apr_socket_timeout_set(socket, timeout); } else { /* cannot block on timeout */ ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, session->c, APLOGNO(03379) "h2_proxy_session(%s): unable to get conn socket", session->id); return APR_ENOTIMPL; } } status = ap_get_brigade(session->c->input_filters, session->input, AP_MODE_READBYTES, block? APR_BLOCK_READ : APR_NONBLOCK_READ, 64 * 1024); ap_log_cerror(APLOG_MARK, APLOG_TRACE3, status, session->c, "h2_proxy_session(%s): read from conn", session->id); if (socket && save_timeout != -1) { apr_socket_timeout_set(socket, save_timeout); } } if (status == APR_SUCCESS) { status = feed_brigade(session, session->input); } else if (APR_STATUS_IS_TIMEUP(status)) { /* nop */ } else if (!APR_STATUS_IS_EAGAIN(status)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, session->c, APLOGNO(03380) "h2_proxy_session(%s): read error", session->id); dispatch_event(session, H2_PROXYS_EV_CONN_ERROR, status, NULL); } return status; } apr_status_t h2_proxy_session_submit(h2_proxy_session *session, const char *url, request_rec *r, int standalone) { h2_proxy_stream *stream; apr_status_t status; status = open_stream(session, url, r, standalone, &stream); if (status == APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03381) "process stream(%d): %s %s%s, original: %s", stream->id, stream->req->method, stream->req->authority, stream->req->path, r->the_request); status = submit_stream(session, stream); } return status; } static void stream_resume(h2_proxy_stream *stream) { h2_proxy_session *session = stream->session; ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, "h2_proxy_stream(%s-%d): resuming", session->id, stream->id); stream->suspended = 0; h2_proxy_iq_remove(session->suspended, stream->id); nghttp2_session_resume_data(session->ngh2, stream->id); dispatch_event(session, H2_PROXYS_EV_STREAM_RESUMED, 0, NULL); } static apr_status_t check_suspended(h2_proxy_session *session) { h2_proxy_stream *stream; int i, stream_id; apr_status_t status; for (i = 0; i < session->suspended->nelts; ++i) { stream_id = session->suspended->elts[i]; stream = nghttp2_session_get_stream_user_data(session->ngh2, stream_id); if (stream) { if (stream->waiting_on_100 || stream->waiting_on_ping) { status = APR_EAGAIN; } else { status = ap_get_brigade(stream->r->input_filters, stream->input, AP_MODE_READBYTES, APR_NONBLOCK_READ, APR_BUCKET_BUFF_SIZE); } if (status == APR_SUCCESS && !APR_BRIGADE_EMPTY(stream->input)) { stream_resume(stream); check_suspended(session); return APR_SUCCESS; } else if (status != APR_SUCCESS && !APR_STATUS_IS_EAGAIN(status)) { ap_log_cerror(APLOG_MARK, APLOG_WARNING, status, session->c, APLOGNO(03382) "h2_proxy_stream(%s-%d): check input", session->id, stream_id); stream_resume(stream); check_suspended(session); return APR_SUCCESS; } } else { /* gone? */ h2_proxy_iq_remove(session->suspended, stream_id); check_suspended(session); return APR_SUCCESS; } } return APR_EAGAIN; } static apr_status_t session_shutdown(h2_proxy_session *session, int reason, const char *msg) { apr_status_t status = APR_SUCCESS; const char *err = msg; ap_assert(session); if (!err && reason) { err = nghttp2_strerror(reason); } nghttp2_submit_goaway(session->ngh2, NGHTTP2_FLAG_NONE, 0, reason, (uint8_t*)err, err? strlen(err):0); status = nghttp2_session_send(session->ngh2); dispatch_event(session, H2_PROXYS_EV_LOCAL_GOAWAY, reason, err); return status; } static const char *StateNames[] = { "INIT", /* H2_PROXYS_ST_INIT */ "DONE", /* H2_PROXYS_ST_DONE */ "IDLE", /* H2_PROXYS_ST_IDLE */ "BUSY", /* H2_PROXYS_ST_BUSY */ "WAIT", /* H2_PROXYS_ST_WAIT */ "LSHUTDOWN", /* H2_PROXYS_ST_LOCAL_SHUTDOWN */ "RSHUTDOWN", /* H2_PROXYS_ST_REMOTE_SHUTDOWN */ }; static const char *state_name(h2_proxys_state state) { if (state >= (sizeof(StateNames)/sizeof(StateNames[0]))) { return "unknown"; } return StateNames[state]; } static int is_accepting_streams(h2_proxy_session *session) { switch (session->state) { case H2_PROXYS_ST_IDLE: case H2_PROXYS_ST_BUSY: case H2_PROXYS_ST_WAIT: return 1; default: return 0; } } static void transit(h2_proxy_session *session, const char *action, h2_proxys_state nstate) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03345) "h2_proxy_session(%s): transit [%s] -- %s --> [%s]", session->id, state_name(session->state), action, state_name(nstate)); session->state = nstate; } static void ev_init(h2_proxy_session *session, int arg, const char *msg) { switch (session->state) { case H2_PROXYS_ST_INIT: if (h2_proxy_ihash_empty(session->streams)) { transit(session, "init", H2_PROXYS_ST_IDLE); } else { transit(session, "init", H2_PROXYS_ST_BUSY); } break; default: /* nop */ break; } } static void ev_local_goaway(h2_proxy_session *session, int arg, const char *msg) { switch (session->state) { case H2_PROXYS_ST_LOCAL_SHUTDOWN: /* already did that? */ break; case H2_PROXYS_ST_IDLE: case H2_PROXYS_ST_REMOTE_SHUTDOWN: /* all done */ transit(session, "local goaway", H2_PROXYS_ST_DONE); break; default: transit(session, "local goaway", H2_PROXYS_ST_LOCAL_SHUTDOWN); break; } } static void ev_remote_goaway(h2_proxy_session *session, int arg, const char *msg) { switch (session->state) { case H2_PROXYS_ST_REMOTE_SHUTDOWN: /* already received that? */ break; case H2_PROXYS_ST_IDLE: case H2_PROXYS_ST_LOCAL_SHUTDOWN: /* all done */ transit(session, "remote goaway", H2_PROXYS_ST_DONE); break; default: transit(session, "remote goaway", H2_PROXYS_ST_REMOTE_SHUTDOWN); break; } } static void ev_conn_error(h2_proxy_session *session, int arg, const char *msg) { switch (session->state) { case H2_PROXYS_ST_INIT: case H2_PROXYS_ST_DONE: case H2_PROXYS_ST_LOCAL_SHUTDOWN: /* just leave */ transit(session, "conn error", H2_PROXYS_ST_DONE); break; default: ap_log_cerror(APLOG_MARK, APLOG_TRACE1, arg, session->c, "h2_proxy_session(%s): conn error -> shutdown", session->id); session_shutdown(session, arg, msg); break; } } static void ev_proto_error(h2_proxy_session *session, int arg, const char *msg) { switch (session->state) { case H2_PROXYS_ST_DONE: case H2_PROXYS_ST_LOCAL_SHUTDOWN: /* just leave */ transit(session, "proto error", H2_PROXYS_ST_DONE); break; default: ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, session->c, "h2_proxy_session(%s): proto error -> shutdown", session->id); session_shutdown(session, arg, msg); break; } } static void ev_conn_timeout(h2_proxy_session *session, int arg, const char *msg) { switch (session->state) { case H2_PROXYS_ST_LOCAL_SHUTDOWN: transit(session, "conn timeout", H2_PROXYS_ST_DONE); break; default: session_shutdown(session, arg, msg); transit(session, "conn timeout", H2_PROXYS_ST_DONE); break; } } static void ev_no_io(h2_proxy_session *session, int arg, const char *msg) { switch (session->state) { case H2_PROXYS_ST_BUSY: case H2_PROXYS_ST_LOCAL_SHUTDOWN: case H2_PROXYS_ST_REMOTE_SHUTDOWN: /* nothing for input and output to do. If we remain * in this state, we go into a tight loop and suck up * CPU cycles. Ideally, we'd like to do a blocking read, but that * is not possible if we have scheduled tasks and wait * for them to produce something. */ if (h2_proxy_ihash_empty(session->streams)) { if (!is_accepting_streams(session)) { /* We are no longer accepting new streams and have * finished processing existing ones. Time to leave. */ session_shutdown(session, arg, msg); transit(session, "no io", H2_PROXYS_ST_DONE); } else { /* When we have no streams, no task events are possible, * switch to blocking reads */ transit(session, "no io", H2_PROXYS_ST_IDLE); } } else { /* Unable to do blocking reads, as we wait on events from * task processing in other threads. Do a busy wait with * backoff timer. */ transit(session, "no io", H2_PROXYS_ST_WAIT); } break; default: /* nop */ break; } } static void ev_stream_submitted(h2_proxy_session *session, int stream_id, const char *msg) { switch (session->state) { case H2_PROXYS_ST_IDLE: case H2_PROXYS_ST_WAIT: transit(session, "stream submitted", H2_PROXYS_ST_BUSY); break; default: /* nop */ break; } } static void ev_stream_done(h2_proxy_session *session, int stream_id, const char *msg) { h2_proxy_stream *stream; stream = nghttp2_session_get_stream_user_data(session->ngh2, stream_id); if (stream) { int touched = (stream->data_sent || stream_id <= session->last_stream_id); apr_status_t status = (stream->error_code == 0)? APR_SUCCESS : APR_EINVAL; ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03364) "h2_proxy_sesssion(%s): stream(%d) closed " "(touched=%d, error=%d)", session->id, stream_id, touched, stream->error_code); if (status != APR_SUCCESS) { stream->r->status = 500; } else if (!stream->data_received) { apr_bucket *b; /* if the response had no body, this is the time to flush * an empty brigade which will also write the resonse * headers */ h2_proxy_stream_end_headers_out(stream); stream->data_received = 1; b = apr_bucket_flush_create(stream->r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(stream->output, b); b = apr_bucket_eos_create(stream->r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(stream->output, b); ap_pass_brigade(stream->r->output_filters, stream->output); } stream->state = H2_STREAM_ST_CLOSED; h2_proxy_ihash_remove(session->streams, stream_id); h2_proxy_iq_remove(session->suspended, stream_id); if (session->done) { session->done(session, stream->r, status, touched); } } switch (session->state) { default: /* nop */ break; } } static void ev_stream_resumed(h2_proxy_session *session, int arg, const char *msg) { switch (session->state) { case H2_PROXYS_ST_WAIT: transit(session, "stream resumed", H2_PROXYS_ST_BUSY); break; default: /* nop */ break; } } static void ev_data_read(h2_proxy_session *session, int arg, const char *msg) { switch (session->state) { case H2_PROXYS_ST_IDLE: case H2_PROXYS_ST_WAIT: transit(session, "data read", H2_PROXYS_ST_BUSY); break; default: /* nop */ break; } } static void ev_ngh2_done(h2_proxy_session *session, int arg, const char *msg) { switch (session->state) { case H2_PROXYS_ST_DONE: /* nop */ break; default: transit(session, "nghttp2 done", H2_PROXYS_ST_DONE); break; } } static void ev_pre_close(h2_proxy_session *session, int arg, const char *msg) { switch (session->state) { case H2_PROXYS_ST_DONE: case H2_PROXYS_ST_LOCAL_SHUTDOWN: /* nop */ break; default: session_shutdown(session, arg, msg); break; } } static void dispatch_event(h2_proxy_session *session, h2_proxys_event_t ev, int arg, const char *msg) { switch (ev) { case H2_PROXYS_EV_INIT: ev_init(session, arg, msg); break; case H2_PROXYS_EV_LOCAL_GOAWAY: ev_local_goaway(session, arg, msg); break; case H2_PROXYS_EV_REMOTE_GOAWAY: ev_remote_goaway(session, arg, msg); break; case H2_PROXYS_EV_CONN_ERROR: ev_conn_error(session, arg, msg); break; case H2_PROXYS_EV_PROTO_ERROR: ev_proto_error(session, arg, msg); break; case H2_PROXYS_EV_CONN_TIMEOUT: ev_conn_timeout(session, arg, msg); break; case H2_PROXYS_EV_NO_IO: ev_no_io(session, arg, msg); break; case H2_PROXYS_EV_STREAM_SUBMITTED: ev_stream_submitted(session, arg, msg); break; case H2_PROXYS_EV_STREAM_DONE: ev_stream_done(session, arg, msg); break; case H2_PROXYS_EV_STREAM_RESUMED: ev_stream_resumed(session, arg, msg); break; case H2_PROXYS_EV_DATA_READ: ev_data_read(session, arg, msg); break; case H2_PROXYS_EV_NGH2_DONE: ev_ngh2_done(session, arg, msg); break; case H2_PROXYS_EV_PRE_CLOSE: ev_pre_close(session, arg, msg); break; default: ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, session->c, "h2_proxy_session(%s): unknown event %d", session->id, ev); break; } } static int send_loop(h2_proxy_session *session) { while (nghttp2_session_want_write(session->ngh2)) { int rv = nghttp2_session_send(session->ngh2); if (rv < 0 && nghttp2_is_fatal(rv)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, "h2_proxy_session(%s): write, rv=%d", session->id, rv); dispatch_event(session, H2_PROXYS_EV_CONN_ERROR, rv, NULL); break; } return 1; } return 0; } apr_status_t h2_proxy_session_process(h2_proxy_session *session) { apr_status_t status; int have_written = 0, have_read = 0; ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, "h2_proxy_session(%s): process", session->id); run_loop: switch (session->state) { case H2_PROXYS_ST_INIT: status = session_start(session); if (status == APR_SUCCESS) { dispatch_event(session, H2_PROXYS_EV_INIT, 0, NULL); goto run_loop; } else { dispatch_event(session, H2_PROXYS_EV_CONN_ERROR, status, NULL); } break; case H2_PROXYS_ST_BUSY: case H2_PROXYS_ST_LOCAL_SHUTDOWN: case H2_PROXYS_ST_REMOTE_SHUTDOWN: have_written = send_loop(session); if (nghttp2_session_want_read(session->ngh2)) { status = h2_proxy_session_read(session, 0, 0); if (status == APR_SUCCESS) { have_read = 1; } } if (!have_written && !have_read && !nghttp2_session_want_write(session->ngh2)) { dispatch_event(session, H2_PROXYS_EV_NO_IO, 0, NULL); goto run_loop; } break; case H2_PROXYS_ST_WAIT: if (check_suspended(session) == APR_EAGAIN) { /* no stream has become resumed. Do a blocking read with * ever increasing timeouts... */ if (session->wait_timeout < 25) { session->wait_timeout = 25; } else { session->wait_timeout = H2MIN(apr_time_from_msec(100), 2*session->wait_timeout); } status = h2_proxy_session_read(session, 1, session->wait_timeout); ap_log_cerror(APLOG_MARK, APLOG_TRACE3, status, session->c, APLOGNO(03365) "h2_proxy_session(%s): WAIT read, timeout=%fms", session->id, session->wait_timeout/1000.0); if (status == APR_SUCCESS) { have_read = 1; dispatch_event(session, H2_PROXYS_EV_DATA_READ, 0, NULL); } else if (APR_STATUS_IS_TIMEUP(status) || APR_STATUS_IS_EAGAIN(status)) { /* go back to checking all inputs again */ transit(session, "wait cycle", H2_PROXYS_ST_BUSY); } } break; case H2_PROXYS_ST_IDLE: break; case H2_PROXYS_ST_DONE: /* done, session terminated */ return APR_EOF; default: ap_log_cerror(APLOG_MARK, APLOG_ERR, APR_EGENERAL, session->c, APLOGNO(03346)"h2_proxy_session(%s): unknown state %d", session->id, session->state); dispatch_event(session, H2_PROXYS_EV_PROTO_ERROR, 0, NULL); break; } if (have_read || have_written) { session->wait_timeout = 0; } if (!nghttp2_session_want_read(session->ngh2) && !nghttp2_session_want_write(session->ngh2)) { dispatch_event(session, H2_PROXYS_EV_NGH2_DONE, 0, NULL); } return APR_SUCCESS; /* needs to be called again */ } typedef struct { h2_proxy_session *session; h2_proxy_request_done *done; } cleanup_iter_ctx; static int cancel_iter(void *udata, void *val) { cleanup_iter_ctx *ctx = udata; h2_proxy_stream *stream = val; nghttp2_submit_rst_stream(ctx->session->ngh2, NGHTTP2_FLAG_NONE, stream->id, 0); return 1; } void h2_proxy_session_cancel_all(h2_proxy_session *session) { if (!h2_proxy_ihash_empty(session->streams)) { cleanup_iter_ctx ctx; ctx.session = session; ctx.done = session->done; ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03366) "h2_proxy_session(%s): cancel %d streams", session->id, (int)h2_proxy_ihash_count(session->streams)); h2_proxy_ihash_iter(session->streams, cancel_iter, &ctx); session_shutdown(session, 0, NULL); } } static int done_iter(void *udata, void *val) { cleanup_iter_ctx *ctx = udata; h2_proxy_stream *stream = val; int touched = (stream->data_sent || stream->id <= ctx->session->last_stream_id); ctx->done(ctx->session, stream->r, APR_ECONNABORTED, touched); return 1; } void h2_proxy_session_cleanup(h2_proxy_session *session, h2_proxy_request_done *done) { if (!h2_proxy_ihash_empty(session->streams)) { cleanup_iter_ctx ctx; ctx.session = session; ctx.done = done; ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03519) "h2_proxy_session(%s): terminated, %d streams unfinished", session->id, (int)h2_proxy_ihash_count(session->streams)); h2_proxy_ihash_iter(session->streams, done_iter, &ctx); h2_proxy_ihash_clear(session->streams); } } static int ping_arrived_iter(void *udata, void *val) { h2_proxy_stream *stream = val; if (stream->waiting_on_ping) { stream->waiting_on_ping = 0; stream_resume(stream); } return 1; } static void ping_arrived(h2_proxy_session *session) { if (!h2_proxy_ihash_empty(session->streams)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, session->c, APLOGNO(03470) "h2_proxy_session(%s): ping arrived, unblocking streams", session->id); h2_proxy_ihash_iter(session->streams, ping_arrived_iter, &session); } } typedef struct { h2_proxy_session *session; conn_rec *c; apr_off_t bytes; int updated; } win_update_ctx; httpd-2.4.41/modules/http2/h2_private.h0000644000000000000500000000174313237611704016172 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_h2_h2_private_h #define mod_h2_h2_private_h #include #include extern module AP_MODULE_DECLARE_DATA http2_module; APLOG_USE_MODULE(http2); #endif httpd-2.4.41/modules/http2/h2_switch.c0000644000000000000500000001435013442215451016007 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include #include #include "h2_private.h" #include "h2_config.h" #include "h2_ctx.h" #include "h2_conn.h" #include "h2_h2.h" #include "h2_switch.h" /******************************************************************************* * Once per lifetime init, retrieve optional functions */ apr_status_t h2_switch_init(apr_pool_t *pool, server_rec *s) { (void)pool; ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, s, "h2_switch init"); return APR_SUCCESS; } static int h2_protocol_propose(conn_rec *c, request_rec *r, server_rec *s, const apr_array_header_t *offers, apr_array_header_t *proposals) { int proposed = 0; int is_tls = h2_h2_is_tls(c); const char **protos = is_tls? h2_tls_protos : h2_clear_protos; if (!h2_mpm_supported()) { return DECLINED; } if (strcmp(AP_PROTOCOL_HTTP1, ap_get_protocol(c))) { /* We do not know how to switch from anything else but http/1.1. */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(03083) "protocol switch: current proto != http/1.1, declined"); return DECLINED; } if (!h2_is_acceptable_connection(c, r, 0)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(03084) "protocol propose: connection requirements not met"); return DECLINED; } if (r) { /* So far, this indicates an HTTP/1 Upgrade header initiated * protocol switch. For that, the HTTP2-Settings header needs * to be present and valid for the connection. */ const char *p; if (!h2_allows_h2_upgrade(r)) { return DECLINED; } p = apr_table_get(r->headers_in, "HTTP2-Settings"); if (!p) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03085) "upgrade without HTTP2-Settings declined"); return DECLINED; } p = apr_table_get(r->headers_in, "Connection"); if (!ap_find_token(r->pool, p, "http2-settings")) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03086) "upgrade without HTTP2-Settings declined"); return DECLINED; } /* We also allow switching only for requests that have no body. */ p = apr_table_get(r->headers_in, "Content-Length"); if (p && strcmp(p, "0")) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03087) "upgrade with content-length: %s, declined", p); return DECLINED; } } while (*protos) { /* Add all protocols we know (tls or clear) and that * are part of the offerings (if there have been any). */ if (!offers || ap_array_str_contains(offers, *protos)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "proposing protocol '%s'", *protos); APR_ARRAY_PUSH(proposals, const char*) = *protos; proposed = 1; } ++protos; } return proposed? DECLINED : OK; } static int h2_protocol_switch(conn_rec *c, request_rec *r, server_rec *s, const char *protocol) { int found = 0; const char **protos = h2_h2_is_tls(c)? h2_tls_protos : h2_clear_protos; const char **p = protos; (void)s; if (!h2_mpm_supported()) { return DECLINED; } while (*p) { if (!strcmp(*p, protocol)) { found = 1; break; } p++; } if (found) { h2_ctx *ctx = h2_ctx_get(c, 1); ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "switching protocol to '%s'", protocol); h2_ctx_protocol_set(ctx, protocol); h2_ctx_server_update(ctx, s); if (r != NULL) { apr_status_t status; /* Switching in the middle of a request means that * we have to send out the response to this one in h2 * format. So we need to take over the connection * right away. */ ap_remove_input_filter_byhandle(r->input_filters, "http_in"); ap_remove_input_filter_byhandle(r->input_filters, "reqtimeout"); ap_remove_output_filter_byhandle(r->output_filters, "HTTP_HEADER"); /* Ok, start an h2_conn on this one. */ status = h2_conn_setup(c, r, s); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, r, APLOGNO(03088) "session setup"); h2_ctx_clear(c); return !OK; } h2_conn_run(c); } return OK; } return DECLINED; } static const char *h2_protocol_get(const conn_rec *c) { return h2_ctx_protocol_get(c); } void h2_switch_register_hooks(void) { ap_hook_protocol_propose(h2_protocol_propose, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_protocol_switch(h2_protocol_switch, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_protocol_get(h2_protocol_get, NULL, NULL, APR_HOOK_MIDDLE); } httpd-2.4.41/modules/http2/h2_headers.c0000644000000000000500000001425313500427255016125 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include "h2_private.h" #include "h2_h2.h" #include "h2_config.h" #include "h2_util.h" #include "h2_request.h" #include "h2_headers.h" static int is_unsafe(server_rec *s) { core_server_config *conf = ap_get_core_module_config(s->module_config); return (conf->http_conformance == AP_HTTP_CONFORMANCE_UNSAFE); } typedef struct { apr_bucket_refcount refcount; h2_headers *headers; } h2_bucket_headers; static apr_status_t bucket_read(apr_bucket *b, const char **str, apr_size_t *len, apr_read_type_e block) { (void)b; (void)block; *str = NULL; *len = 0; return APR_SUCCESS; } apr_bucket * h2_bucket_headers_make(apr_bucket *b, h2_headers *r) { h2_bucket_headers *br; br = apr_bucket_alloc(sizeof(*br), b->list); br->headers = r; b = apr_bucket_shared_make(b, br, 0, 0); b->type = &h2_bucket_type_headers; return b; } apr_bucket * h2_bucket_headers_create(apr_bucket_alloc_t *list, h2_headers *r) { apr_bucket *b = apr_bucket_alloc(sizeof(*b), list); APR_BUCKET_INIT(b); b->free = apr_bucket_free; b->list = list; b = h2_bucket_headers_make(b, r); return b; } h2_headers *h2_bucket_headers_get(apr_bucket *b) { if (H2_BUCKET_IS_HEADERS(b)) { return ((h2_bucket_headers *)b->data)->headers; } return NULL; } const apr_bucket_type_t h2_bucket_type_headers = { "H2HEADERS", 5, APR_BUCKET_METADATA, apr_bucket_destroy_noop, bucket_read, apr_bucket_setaside_noop, apr_bucket_split_notimpl, apr_bucket_shared_copy }; apr_bucket *h2_bucket_headers_beam(struct h2_bucket_beam *beam, apr_bucket_brigade *dest, const apr_bucket *src) { if (H2_BUCKET_IS_HEADERS(src)) { h2_headers *src_headers = ((h2_bucket_headers *)src->data)->headers; apr_bucket *b = h2_bucket_headers_create(dest->bucket_alloc, h2_headers_clone(dest->p, src_headers)); APR_BRIGADE_INSERT_TAIL(dest, b); return b; } return NULL; } h2_headers *h2_headers_create(int status, apr_table_t *headers_in, apr_table_t *notes, apr_off_t raw_bytes, apr_pool_t *pool) { h2_headers *headers = apr_pcalloc(pool, sizeof(h2_headers)); headers->status = status; headers->headers = (headers_in? apr_table_clone(pool, headers_in) : apr_table_make(pool, 5)); headers->notes = (notes? apr_table_clone(pool, notes) : apr_table_make(pool, 5)); return headers; } h2_headers *h2_headers_rcreate(request_rec *r, int status, apr_table_t *header, apr_pool_t *pool) { h2_headers *headers = h2_headers_create(status, header, r->notes, 0, pool); if (headers->status == HTTP_FORBIDDEN) { request_rec *r_prev; for (r_prev = r; r_prev != NULL; r_prev = r_prev->prev) { const char *cause = apr_table_get(r_prev->notes, "ssl-renegotiate-forbidden"); if (cause) { /* This request triggered a TLS renegotiation that is not allowed * in HTTP/2. Tell the client that it should use HTTP/1.1 for this. */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, headers->status, r, APLOGNO(03061) "h2_headers(%ld): renegotiate forbidden, cause: %s", (long)r->connection->id, cause); headers->status = H2_ERR_HTTP_1_1_REQUIRED; break; } } } if (is_unsafe(r->server)) { apr_table_setn(headers->notes, H2_HDR_CONFORMANCE, H2_HDR_CONFORMANCE_UNSAFE); } if (h2_config_rgeti(r, H2_CONF_PUSH) == 0 && h2_config_sgeti(r->server, H2_CONF_PUSH) != 0) { apr_table_setn(headers->notes, H2_PUSH_MODE_NOTE, "0"); } return headers; } h2_headers *h2_headers_copy(apr_pool_t *pool, h2_headers *h) { return h2_headers_create(h->status, apr_table_copy(pool, h->headers), apr_table_copy(pool, h->notes), h->raw_bytes, pool); } h2_headers *h2_headers_clone(apr_pool_t *pool, h2_headers *h) { return h2_headers_create(h->status, apr_table_clone(pool, h->headers), apr_table_clone(pool, h->notes), h->raw_bytes, pool); } h2_headers *h2_headers_die(apr_status_t type, const h2_request *req, apr_pool_t *pool) { h2_headers *headers; char *date; headers = apr_pcalloc(pool, sizeof(h2_headers)); headers->status = (type >= 200 && type < 600)? type : 500; headers->headers = apr_table_make(pool, 5); headers->notes = apr_table_make(pool, 5); date = apr_palloc(pool, APR_RFC822_DATE_LEN); ap_recent_rfc822_date(date, req? req->request_time : apr_time_now()); apr_table_setn(headers->headers, "Date", date); apr_table_setn(headers->headers, "Server", ap_get_server_banner()); return headers; } int h2_headers_are_response(h2_headers *headers) { return headers->status >= 200; } httpd-2.4.41/modules/http2/h2_h2.c0000644000000000000500000011275213442215451015024 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include #include #include #include "mod_ssl.h" #include "mod_http2.h" #include "h2_private.h" #include "h2_bucket_beam.h" #include "h2_stream.h" #include "h2_task.h" #include "h2_config.h" #include "h2_ctx.h" #include "h2_conn.h" #include "h2_filter.h" #include "h2_request.h" #include "h2_headers.h" #include "h2_session.h" #include "h2_util.h" #include "h2_h2.h" #include "mod_http2.h" const char *h2_tls_protos[] = { "h2", NULL }; const char *h2_clear_protos[] = { "h2c", NULL }; const char *H2_MAGIC_TOKEN = "PRI * HTTP/2.0\r\n\r\nSM\r\n\r\n"; /******************************************************************************* * The optional mod_ssl functions we need. */ static APR_OPTIONAL_FN_TYPE(ssl_is_https) *opt_ssl_is_https; static APR_OPTIONAL_FN_TYPE(ssl_var_lookup) *opt_ssl_var_lookup; /******************************************************************************* * HTTP/2 error stuff */ static const char *h2_err_descr[] = { "no error", /* 0x0 */ "protocol error", "internal error", "flow control error", "settings timeout", "stream closed", /* 0x5 */ "frame size error", "refused stream", "cancel", "compression error", "connect error", /* 0xa */ "enhance your calm", "inadequate security", "http/1.1 required", }; const char *h2_h2_err_description(unsigned int h2_error) { if (h2_error < (sizeof(h2_err_descr)/sizeof(h2_err_descr[0]))) { return h2_err_descr[h2_error]; } return "unknown http/2 error code"; } /******************************************************************************* * Check connection security requirements of RFC 7540 */ /* * Black Listed Ciphers from RFC 7549 Appendix A * */ static const char *RFC7540_names[] = { /* ciphers with NULL encrpytion */ "NULL-MD5", /* TLS_NULL_WITH_NULL_NULL */ /* same */ /* TLS_RSA_WITH_NULL_MD5 */ "NULL-SHA", /* TLS_RSA_WITH_NULL_SHA */ "NULL-SHA256", /* TLS_RSA_WITH_NULL_SHA256 */ "PSK-NULL-SHA", /* TLS_PSK_WITH_NULL_SHA */ "DHE-PSK-NULL-SHA", /* TLS_DHE_PSK_WITH_NULL_SHA */ "RSA-PSK-NULL-SHA", /* TLS_RSA_PSK_WITH_NULL_SHA */ "PSK-NULL-SHA256", /* TLS_PSK_WITH_NULL_SHA256 */ "PSK-NULL-SHA384", /* TLS_PSK_WITH_NULL_SHA384 */ "DHE-PSK-NULL-SHA256", /* TLS_DHE_PSK_WITH_NULL_SHA256 */ "DHE-PSK-NULL-SHA384", /* TLS_DHE_PSK_WITH_NULL_SHA384 */ "RSA-PSK-NULL-SHA256", /* TLS_RSA_PSK_WITH_NULL_SHA256 */ "RSA-PSK-NULL-SHA384", /* TLS_RSA_PSK_WITH_NULL_SHA384 */ "ECDH-ECDSA-NULL-SHA", /* TLS_ECDH_ECDSA_WITH_NULL_SHA */ "ECDHE-ECDSA-NULL-SHA", /* TLS_ECDHE_ECDSA_WITH_NULL_SHA */ "ECDH-RSA-NULL-SHA", /* TLS_ECDH_RSA_WITH_NULL_SHA */ "ECDHE-RSA-NULL-SHA", /* TLS_ECDHE_RSA_WITH_NULL_SHA */ "AECDH-NULL-SHA", /* TLS_ECDH_anon_WITH_NULL_SHA */ "ECDHE-PSK-NULL-SHA", /* TLS_ECDHE_PSK_WITH_NULL_SHA */ "ECDHE-PSK-NULL-SHA256", /* TLS_ECDHE_PSK_WITH_NULL_SHA256 */ "ECDHE-PSK-NULL-SHA384", /* TLS_ECDHE_PSK_WITH_NULL_SHA384 */ /* DES/3DES ciphers */ "PSK-3DES-EDE-CBC-SHA", /* TLS_PSK_WITH_3DES_EDE_CBC_SHA */ "DHE-PSK-3DES-EDE-CBC-SHA", /* TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA */ "RSA-PSK-3DES-EDE-CBC-SHA", /* TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA */ "ECDH-ECDSA-DES-CBC3-SHA", /* TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA */ "ECDHE-ECDSA-DES-CBC3-SHA", /* TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA */ "ECDH-RSA-DES-CBC3-SHA", /* TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA */ "ECDHE-RSA-DES-CBC3-SHA", /* TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA */ "AECDH-DES-CBC3-SHA", /* TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA */ "SRP-3DES-EDE-CBC-SHA", /* TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA */ "SRP-RSA-3DES-EDE-CBC-SHA", /* TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA */ "SRP-DSS-3DES-EDE-CBC-SHA", /* TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA */ "ECDHE-PSK-3DES-EDE-CBC-SHA", /* TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA */ "DES-CBC-SHA", /* TLS_RSA_WITH_DES_CBC_SHA */ "DES-CBC3-SHA", /* TLS_RSA_WITH_3DES_EDE_CBC_SHA */ "DHE-DSS-DES-CBC3-SHA", /* TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA */ "DHE-RSA-DES-CBC-SHA", /* TLS_DHE_RSA_WITH_DES_CBC_SHA */ "DHE-RSA-DES-CBC3-SHA", /* TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA */ "ADH-DES-CBC-SHA", /* TLS_DH_anon_WITH_DES_CBC_SHA */ "ADH-DES-CBC3-SHA", /* TLS_DH_anon_WITH_3DES_EDE_CBC_SHA */ "EXP-DH-DSS-DES-CBC-SHA", /* TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA */ "DH-DSS-DES-CBC-SHA", /* TLS_DH_DSS_WITH_DES_CBC_SHA */ "DH-DSS-DES-CBC3-SHA", /* TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA */ "EXP-DH-RSA-DES-CBC-SHA", /* TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA */ "DH-RSA-DES-CBC-SHA", /* TLS_DH_RSA_WITH_DES_CBC_SHA */ "DH-RSA-DES-CBC3-SHA", /* TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA */ /* blacklisted EXPORT ciphers */ "EXP-RC4-MD5", /* TLS_RSA_EXPORT_WITH_RC4_40_MD5 */ "EXP-RC2-CBC-MD5", /* TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 */ "EXP-DES-CBC-SHA", /* TLS_RSA_EXPORT_WITH_DES40_CBC_SHA */ "EXP-DHE-DSS-DES-CBC-SHA", /* TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA */ "EXP-DHE-RSA-DES-CBC-SHA", /* TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA */ "EXP-ADH-DES-CBC-SHA", /* TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA */ "EXP-ADH-RC4-MD5", /* TLS_DH_anon_EXPORT_WITH_RC4_40_MD5 */ /* blacklisted RC4 encryption */ "RC4-MD5", /* TLS_RSA_WITH_RC4_128_MD5 */ "RC4-SHA", /* TLS_RSA_WITH_RC4_128_SHA */ "ADH-RC4-MD5", /* TLS_DH_anon_WITH_RC4_128_MD5 */ "KRB5-RC4-SHA", /* TLS_KRB5_WITH_RC4_128_SHA */ "KRB5-RC4-MD5", /* TLS_KRB5_WITH_RC4_128_MD5 */ "EXP-KRB5-RC4-SHA", /* TLS_KRB5_EXPORT_WITH_RC4_40_SHA */ "EXP-KRB5-RC4-MD5", /* TLS_KRB5_EXPORT_WITH_RC4_40_MD5 */ "PSK-RC4-SHA", /* TLS_PSK_WITH_RC4_128_SHA */ "DHE-PSK-RC4-SHA", /* TLS_DHE_PSK_WITH_RC4_128_SHA */ "RSA-PSK-RC4-SHA", /* TLS_RSA_PSK_WITH_RC4_128_SHA */ "ECDH-ECDSA-RC4-SHA", /* TLS_ECDH_ECDSA_WITH_RC4_128_SHA */ "ECDHE-ECDSA-RC4-SHA", /* TLS_ECDHE_ECDSA_WITH_RC4_128_SHA */ "ECDH-RSA-RC4-SHA", /* TLS_ECDH_RSA_WITH_RC4_128_SHA */ "ECDHE-RSA-RC4-SHA", /* TLS_ECDHE_RSA_WITH_RC4_128_SHA */ "AECDH-RC4-SHA", /* TLS_ECDH_anon_WITH_RC4_128_SHA */ "ECDHE-PSK-RC4-SHA", /* TLS_ECDHE_PSK_WITH_RC4_128_SHA */ /* blacklisted AES128 encrpytion ciphers */ "AES128-SHA256", /* TLS_RSA_WITH_AES_128_CBC_SHA */ "DH-DSS-AES128-SHA", /* TLS_DH_DSS_WITH_AES_128_CBC_SHA */ "DH-RSA-AES128-SHA", /* TLS_DH_RSA_WITH_AES_128_CBC_SHA */ "DHE-DSS-AES128-SHA", /* TLS_DHE_DSS_WITH_AES_128_CBC_SHA */ "DHE-RSA-AES128-SHA", /* TLS_DHE_RSA_WITH_AES_128_CBC_SHA */ "ADH-AES128-SHA", /* TLS_DH_anon_WITH_AES_128_CBC_SHA */ "AES128-SHA256", /* TLS_RSA_WITH_AES_128_CBC_SHA256 */ "DH-DSS-AES128-SHA256", /* TLS_DH_DSS_WITH_AES_128_CBC_SHA256 */ "DH-RSA-AES128-SHA256", /* TLS_DH_RSA_WITH_AES_128_CBC_SHA256 */ "DHE-DSS-AES128-SHA256", /* TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 */ "DHE-RSA-AES128-SHA256", /* TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 */ "ECDH-ECDSA-AES128-SHA", /* TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA */ "ECDHE-ECDSA-AES128-SHA", /* TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA */ "ECDH-RSA-AES128-SHA", /* TLS_ECDH_RSA_WITH_AES_128_CBC_SHA */ "ECDHE-RSA-AES128-SHA", /* TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA */ "AECDH-AES128-SHA", /* TLS_ECDH_anon_WITH_AES_128_CBC_SHA */ "ECDHE-ECDSA-AES128-SHA256", /* TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 */ "ECDH-ECDSA-AES128-SHA256", /* TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 */ "ECDHE-RSA-AES128-SHA256", /* TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 */ "ECDH-RSA-AES128-SHA256", /* TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 */ "ADH-AES128-SHA256", /* TLS_DH_anon_WITH_AES_128_CBC_SHA256 */ "PSK-AES128-CBC-SHA", /* TLS_PSK_WITH_AES_128_CBC_SHA */ "DHE-PSK-AES128-CBC-SHA", /* TLS_DHE_PSK_WITH_AES_128_CBC_SHA */ "RSA-PSK-AES128-CBC-SHA", /* TLS_RSA_PSK_WITH_AES_128_CBC_SHA */ "PSK-AES128-CBC-SHA256", /* TLS_PSK_WITH_AES_128_CBC_SHA256 */ "DHE-PSK-AES128-CBC-SHA256", /* TLS_DHE_PSK_WITH_AES_128_CBC_SHA256 */ "RSA-PSK-AES128-CBC-SHA256", /* TLS_RSA_PSK_WITH_AES_128_CBC_SHA256 */ "ECDHE-PSK-AES128-CBC-SHA", /* TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA */ "ECDHE-PSK-AES128-CBC-SHA256", /* TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256 */ "AES128-CCM", /* TLS_RSA_WITH_AES_128_CCM */ "AES128-CCM8", /* TLS_RSA_WITH_AES_128_CCM_8 */ "PSK-AES128-CCM", /* TLS_PSK_WITH_AES_128_CCM */ "PSK-AES128-CCM8", /* TLS_PSK_WITH_AES_128_CCM_8 */ "AES128-GCM-SHA256", /* TLS_RSA_WITH_AES_128_GCM_SHA256 */ "DH-RSA-AES128-GCM-SHA256", /* TLS_DH_RSA_WITH_AES_128_GCM_SHA256 */ "DH-DSS-AES128-GCM-SHA256", /* TLS_DH_DSS_WITH_AES_128_GCM_SHA256 */ "ADH-AES128-GCM-SHA256", /* TLS_DH_anon_WITH_AES_128_GCM_SHA256 */ "PSK-AES128-GCM-SHA256", /* TLS_PSK_WITH_AES_128_GCM_SHA256 */ "RSA-PSK-AES128-GCM-SHA256", /* TLS_RSA_PSK_WITH_AES_128_GCM_SHA256 */ "ECDH-ECDSA-AES128-GCM-SHA256", /* TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 */ "ECDH-RSA-AES128-GCM-SHA256", /* TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 */ "SRP-AES-128-CBC-SHA", /* TLS_SRP_SHA_WITH_AES_128_CBC_SHA */ "SRP-RSA-AES-128-CBC-SHA", /* TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA */ "SRP-DSS-AES-128-CBC-SHA", /* TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA */ /* blacklisted AES256 encrpytion ciphers */ "AES256-SHA", /* TLS_RSA_WITH_AES_256_CBC_SHA */ "DH-DSS-AES256-SHA", /* TLS_DH_DSS_WITH_AES_256_CBC_SHA */ "DH-RSA-AES256-SHA", /* TLS_DH_RSA_WITH_AES_256_CBC_SHA */ "DHE-DSS-AES256-SHA", /* TLS_DHE_DSS_WITH_AES_256_CBC_SHA */ "DHE-RSA-AES256-SHA", /* TLS_DHE_RSA_WITH_AES_256_CBC_SHA */ "ADH-AES256-SHA", /* TLS_DH_anon_WITH_AES_256_CBC_SHA */ "AES256-SHA256", /* TLS_RSA_WITH_AES_256_CBC_SHA256 */ "DH-DSS-AES256-SHA256", /* TLS_DH_DSS_WITH_AES_256_CBC_SHA256 */ "DH-RSA-AES256-SHA256", /* TLS_DH_RSA_WITH_AES_256_CBC_SHA256 */ "DHE-DSS-AES256-SHA256", /* TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 */ "DHE-RSA-AES256-SHA256", /* TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 */ "ADH-AES256-SHA256", /* TLS_DH_anon_WITH_AES_256_CBC_SHA256 */ "ECDH-ECDSA-AES256-SHA", /* TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA */ "ECDHE-ECDSA-AES256-SHA", /* TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA */ "ECDH-RSA-AES256-SHA", /* TLS_ECDH_RSA_WITH_AES_256_CBC_SHA */ "ECDHE-RSA-AES256-SHA", /* TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA */ "AECDH-AES256-SHA", /* TLS_ECDH_anon_WITH_AES_256_CBC_SHA */ "ECDHE-ECDSA-AES256-SHA384", /* TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 */ "ECDH-ECDSA-AES256-SHA384", /* TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 */ "ECDHE-RSA-AES256-SHA384", /* TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 */ "ECDH-RSA-AES256-SHA384", /* TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 */ "PSK-AES256-CBC-SHA", /* TLS_PSK_WITH_AES_256_CBC_SHA */ "DHE-PSK-AES256-CBC-SHA", /* TLS_DHE_PSK_WITH_AES_256_CBC_SHA */ "RSA-PSK-AES256-CBC-SHA", /* TLS_RSA_PSK_WITH_AES_256_CBC_SHA */ "PSK-AES256-CBC-SHA384", /* TLS_PSK_WITH_AES_256_CBC_SHA384 */ "DHE-PSK-AES256-CBC-SHA384", /* TLS_DHE_PSK_WITH_AES_256_CBC_SHA384 */ "RSA-PSK-AES256-CBC-SHA384", /* TLS_RSA_PSK_WITH_AES_256_CBC_SHA384 */ "ECDHE-PSK-AES256-CBC-SHA", /* TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA */ "ECDHE-PSK-AES256-CBC-SHA384", /* TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384 */ "SRP-AES-256-CBC-SHA", /* TLS_SRP_SHA_WITH_AES_256_CBC_SHA */ "SRP-RSA-AES-256-CBC-SHA", /* TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA */ "SRP-DSS-AES-256-CBC-SHA", /* TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA */ "AES256-CCM", /* TLS_RSA_WITH_AES_256_CCM */ "AES256-CCM8", /* TLS_RSA_WITH_AES_256_CCM_8 */ "PSK-AES256-CCM", /* TLS_PSK_WITH_AES_256_CCM */ "PSK-AES256-CCM8", /* TLS_PSK_WITH_AES_256_CCM_8 */ "AES256-GCM-SHA384", /* TLS_RSA_WITH_AES_256_GCM_SHA384 */ "DH-RSA-AES256-GCM-SHA384", /* TLS_DH_RSA_WITH_AES_256_GCM_SHA384 */ "DH-DSS-AES256-GCM-SHA384", /* TLS_DH_DSS_WITH_AES_256_GCM_SHA384 */ "ADH-AES256-GCM-SHA384", /* TLS_DH_anon_WITH_AES_256_GCM_SHA384 */ "PSK-AES256-GCM-SHA384", /* TLS_PSK_WITH_AES_256_GCM_SHA384 */ "RSA-PSK-AES256-GCM-SHA384", /* TLS_RSA_PSK_WITH_AES_256_GCM_SHA384 */ "ECDH-ECDSA-AES256-GCM-SHA384", /* TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 */ "ECDH-RSA-AES256-GCM-SHA384", /* TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 */ /* blacklisted CAMELLIA128 encrpytion ciphers */ "CAMELLIA128-SHA", /* TLS_RSA_WITH_CAMELLIA_128_CBC_SHA */ "DH-DSS-CAMELLIA128-SHA", /* TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA */ "DH-RSA-CAMELLIA128-SHA", /* TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA */ "DHE-DSS-CAMELLIA128-SHA", /* TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA */ "DHE-RSA-CAMELLIA128-SHA", /* TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA */ "ADH-CAMELLIA128-SHA", /* TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA */ "ECDHE-ECDSA-CAMELLIA128-SHA256", /* TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 */ "ECDH-ECDSA-CAMELLIA128-SHA256", /* TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 */ "ECDHE-RSA-CAMELLIA128-SHA256", /* TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 */ "ECDH-RSA-CAMELLIA128-SHA256", /* TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256 */ "PSK-CAMELLIA128-SHA256", /* TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256 */ "DHE-PSK-CAMELLIA128-SHA256", /* TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 */ "RSA-PSK-CAMELLIA128-SHA256", /* TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256 */ "ECDHE-PSK-CAMELLIA128-SHA256", /* TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 */ "CAMELLIA128-GCM-SHA256", /* TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256 */ "DH-RSA-CAMELLIA128-GCM-SHA256", /* TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256 */ "DH-DSS-CAMELLIA128-GCM-SHA256", /* TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256 */ "ADH-CAMELLIA128-GCM-SHA256", /* TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256 */ "ECDH-ECDSA-CAMELLIA128-GCM-SHA256",/* TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 */ "ECDH-RSA-CAMELLIA128-GCM-SHA256", /* TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256 */ "PSK-CAMELLIA128-GCM-SHA256", /* TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256 */ "RSA-PSK-CAMELLIA128-GCM-SHA256", /* TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256 */ "CAMELLIA128-SHA256", /* TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 */ "DH-DSS-CAMELLIA128-SHA256", /* TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256 */ "DH-RSA-CAMELLIA128-SHA256", /* TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256 */ "DHE-DSS-CAMELLIA128-SHA256", /* TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256 */ "DHE-RSA-CAMELLIA128-SHA256", /* TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 */ "ADH-CAMELLIA128-SHA256", /* TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256 */ /* blacklisted CAMELLIA256 encrpytion ciphers */ "CAMELLIA256-SHA", /* TLS_RSA_WITH_CAMELLIA_256_CBC_SHA */ "DH-RSA-CAMELLIA256-SHA", /* TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA */ "DH-DSS-CAMELLIA256-SHA", /* TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA */ "DHE-DSS-CAMELLIA256-SHA", /* TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA */ "DHE-RSA-CAMELLIA256-SHA", /* TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA */ "ADH-CAMELLIA256-SHA", /* TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA */ "ECDHE-ECDSA-CAMELLIA256-SHA384", /* TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 */ "ECDH-ECDSA-CAMELLIA256-SHA384", /* TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 */ "ECDHE-RSA-CAMELLIA256-SHA384", /* TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 */ "ECDH-RSA-CAMELLIA256-SHA384", /* TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384 */ "PSK-CAMELLIA256-SHA384", /* TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384 */ "DHE-PSK-CAMELLIA256-SHA384", /* TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 */ "RSA-PSK-CAMELLIA256-SHA384", /* TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384 */ "ECDHE-PSK-CAMELLIA256-SHA384", /* TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 */ "CAMELLIA256-SHA256", /* TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 */ "DH-DSS-CAMELLIA256-SHA256", /* TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256 */ "DH-RSA-CAMELLIA256-SHA256", /* TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256 */ "DHE-DSS-CAMELLIA256-SHA256", /* TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256 */ "DHE-RSA-CAMELLIA256-SHA256", /* TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 */ "ADH-CAMELLIA256-SHA256", /* TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256 */ "CAMELLIA256-GCM-SHA384", /* TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384 */ "DH-RSA-CAMELLIA256-GCM-SHA384", /* TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384 */ "DH-DSS-CAMELLIA256-GCM-SHA384", /* TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384 */ "ADH-CAMELLIA256-GCM-SHA384", /* TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384 */ "ECDH-ECDSA-CAMELLIA256-GCM-SHA384",/* TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 */ "ECDH-RSA-CAMELLIA256-GCM-SHA384", /* TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384 */ "PSK-CAMELLIA256-GCM-SHA384", /* TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384 */ "RSA-PSK-CAMELLIA256-GCM-SHA384", /* TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384 */ /* The blacklisted ARIA encrpytion ciphers */ "ARIA128-SHA256", /* TLS_RSA_WITH_ARIA_128_CBC_SHA256 */ "ARIA256-SHA384", /* TLS_RSA_WITH_ARIA_256_CBC_SHA384 */ "DH-DSS-ARIA128-SHA256", /* TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256 */ "DH-DSS-ARIA256-SHA384", /* TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384 */ "DH-RSA-ARIA128-SHA256", /* TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256 */ "DH-RSA-ARIA256-SHA384", /* TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384 */ "DHE-DSS-ARIA128-SHA256", /* TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256 */ "DHE-DSS-ARIA256-SHA384", /* TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384 */ "DHE-RSA-ARIA128-SHA256", /* TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256 */ "DHE-RSA-ARIA256-SHA384", /* TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384 */ "ADH-ARIA128-SHA256", /* TLS_DH_anon_WITH_ARIA_128_CBC_SHA256 */ "ADH-ARIA256-SHA384", /* TLS_DH_anon_WITH_ARIA_256_CBC_SHA384 */ "ECDHE-ECDSA-ARIA128-SHA256", /* TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256 */ "ECDHE-ECDSA-ARIA256-SHA384", /* TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384 */ "ECDH-ECDSA-ARIA128-SHA256", /* TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256 */ "ECDH-ECDSA-ARIA256-SHA384", /* TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384 */ "ECDHE-RSA-ARIA128-SHA256", /* TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256 */ "ECDHE-RSA-ARIA256-SHA384", /* TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384 */ "ECDH-RSA-ARIA128-SHA256", /* TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256 */ "ECDH-RSA-ARIA256-SHA384", /* TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384 */ "ARIA128-GCM-SHA256", /* TLS_RSA_WITH_ARIA_128_GCM_SHA256 */ "ARIA256-GCM-SHA384", /* TLS_RSA_WITH_ARIA_256_GCM_SHA384 */ "DH-DSS-ARIA128-GCM-SHA256", /* TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256 */ "DH-DSS-ARIA256-GCM-SHA384", /* TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384 */ "DH-RSA-ARIA128-GCM-SHA256", /* TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256 */ "DH-RSA-ARIA256-GCM-SHA384", /* TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384 */ "ADH-ARIA128-GCM-SHA256", /* TLS_DH_anon_WITH_ARIA_128_GCM_SHA256 */ "ADH-ARIA256-GCM-SHA384", /* TLS_DH_anon_WITH_ARIA_256_GCM_SHA384 */ "ECDH-ECDSA-ARIA128-GCM-SHA256", /* TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256 */ "ECDH-ECDSA-ARIA256-GCM-SHA384", /* TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384 */ "ECDH-RSA-ARIA128-GCM-SHA256", /* TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256 */ "ECDH-RSA-ARIA256-GCM-SHA384", /* TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384 */ "PSK-ARIA128-SHA256", /* TLS_PSK_WITH_ARIA_128_CBC_SHA256 */ "PSK-ARIA256-SHA384", /* TLS_PSK_WITH_ARIA_256_CBC_SHA384 */ "DHE-PSK-ARIA128-SHA256", /* TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256 */ "DHE-PSK-ARIA256-SHA384", /* TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384 */ "RSA-PSK-ARIA128-SHA256", /* TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256 */ "RSA-PSK-ARIA256-SHA384", /* TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384 */ "ARIA128-GCM-SHA256", /* TLS_PSK_WITH_ARIA_128_GCM_SHA256 */ "ARIA256-GCM-SHA384", /* TLS_PSK_WITH_ARIA_256_GCM_SHA384 */ "RSA-PSK-ARIA128-GCM-SHA256", /* TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256 */ "RSA-PSK-ARIA256-GCM-SHA384", /* TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384 */ "ECDHE-PSK-ARIA128-SHA256", /* TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256 */ "ECDHE-PSK-ARIA256-SHA384", /* TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384 */ /* blacklisted SEED encryptions */ "SEED-SHA", /*TLS_RSA_WITH_SEED_CBC_SHA */ "DH-DSS-SEED-SHA", /* TLS_DH_DSS_WITH_SEED_CBC_SHA */ "DH-RSA-SEED-SHA", /* TLS_DH_RSA_WITH_SEED_CBC_SHA */ "DHE-DSS-SEED-SHA", /* TLS_DHE_DSS_WITH_SEED_CBC_SHA */ "DHE-RSA-SEED-SHA", /* TLS_DHE_RSA_WITH_SEED_CBC_SHA */ "ADH-SEED-SHA", /* TLS_DH_anon_WITH_SEED_CBC_SHA */ /* blacklisted KRB5 ciphers */ "KRB5-DES-CBC-SHA", /* TLS_KRB5_WITH_DES_CBC_SHA */ "KRB5-DES-CBC3-SHA", /* TLS_KRB5_WITH_3DES_EDE_CBC_SHA */ "KRB5-IDEA-CBC-SHA", /* TLS_KRB5_WITH_IDEA_CBC_SHA */ "KRB5-DES-CBC-MD5", /* TLS_KRB5_WITH_DES_CBC_MD5 */ "KRB5-DES-CBC3-MD5", /* TLS_KRB5_WITH_3DES_EDE_CBC_MD5 */ "KRB5-IDEA-CBC-MD5", /* TLS_KRB5_WITH_IDEA_CBC_MD5 */ "EXP-KRB5-DES-CBC-SHA", /* TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA */ "EXP-KRB5-DES-CBC-MD5", /* TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5 */ "EXP-KRB5-RC2-CBC-SHA", /* TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA */ "EXP-KRB5-RC2-CBC-MD5", /* TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5 */ /* blacklisted exoticas */ "DHE-DSS-CBC-SHA", /* TLS_DHE_DSS_WITH_DES_CBC_SHA */ "IDEA-CBC-SHA", /* TLS_RSA_WITH_IDEA_CBC_SHA */ /* not really sure if the following names are correct */ "SSL3_CK_SCSV", /* TLS_EMPTY_RENEGOTIATION_INFO_SCSV */ "SSL3_CK_FALLBACK_SCSV" }; static size_t RFC7540_names_LEN = sizeof(RFC7540_names)/sizeof(RFC7540_names[0]); static apr_hash_t *BLCNames; static void cipher_init(apr_pool_t *pool) { apr_hash_t *hash = apr_hash_make(pool); const char *source; unsigned int i; source = "rfc7540"; for (i = 0; i < RFC7540_names_LEN; ++i) { apr_hash_set(hash, RFC7540_names[i], APR_HASH_KEY_STRING, source); } BLCNames = hash; } static int cipher_is_blacklisted(const char *cipher, const char **psource) { *psource = apr_hash_get(BLCNames, cipher, APR_HASH_KEY_STRING); return !!*psource; } /******************************************************************************* * Hooks for processing incoming connections: * - process_conn take over connection in case of h2 */ static int h2_h2_process_conn(conn_rec* c); static int h2_h2_pre_close_conn(conn_rec* c); static int h2_h2_post_read_req(request_rec *r); static int h2_h2_late_fixups(request_rec *r); /******************************************************************************* * Once per lifetime init, retrieve optional functions */ apr_status_t h2_h2_init(apr_pool_t *pool, server_rec *s) { (void)pool; ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, s, "h2_h2, child_init"); opt_ssl_is_https = APR_RETRIEVE_OPTIONAL_FN(ssl_is_https); opt_ssl_var_lookup = APR_RETRIEVE_OPTIONAL_FN(ssl_var_lookup); if (!opt_ssl_is_https || !opt_ssl_var_lookup) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(02951) "mod_ssl does not seem to be enabled"); } cipher_init(pool); return APR_SUCCESS; } int h2_h2_is_tls(conn_rec *c) { return opt_ssl_is_https && opt_ssl_is_https(c); } int h2_is_acceptable_connection(conn_rec *c, request_rec *r, int require_all) { int is_tls = h2_h2_is_tls(c); if (is_tls && h2_config_cgeti(c, H2_CONF_MODERN_TLS_ONLY) > 0) { /* Check TLS connection for modern TLS parameters, as defined in * RFC 7540 and https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility */ apr_pool_t *pool = c->pool; server_rec *s = c->base_server; char *val; if (!opt_ssl_var_lookup) { /* unable to check */ return 0; } /* Need Tlsv1.2 or higher, rfc 7540, ch. 9.2 */ val = opt_ssl_var_lookup(pool, s, c, NULL, (char*)"SSL_PROTOCOL"); if (val && *val) { if (strncmp("TLS", val, 3) || !strcmp("TLSv1", val) || !strcmp("TLSv1.1", val)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(03050) "h2_h2(%ld): tls protocol not suitable: %s", (long)c->id, val); return 0; } } else if (require_all) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(03051) "h2_h2(%ld): tls protocol is indetermined", (long)c->id); return 0; } /* Check TLS cipher blacklist */ val = opt_ssl_var_lookup(pool, s, c, NULL, (char*)"SSL_CIPHER"); if (val && *val) { const char *source; if (cipher_is_blacklisted(val, &source)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(03052) "h2_h2(%ld): tls cipher %s blacklisted by %s", (long)c->id, val, source); return 0; } } else if (require_all) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(03053) "h2_h2(%ld): tls cipher is indetermined", (long)c->id); return 0; } } return 1; } static int h2_allows_h2_direct(conn_rec *c) { int is_tls = h2_h2_is_tls(c); const char *needed_protocol = is_tls? "h2" : "h2c"; int h2_direct = h2_config_cgeti(c, H2_CONF_DIRECT); if (h2_direct < 0) { h2_direct = is_tls? 0 : 1; } return (h2_direct && ap_is_allowed_protocol(c, NULL, NULL, needed_protocol)); } int h2_allows_h2_upgrade(request_rec *r) { int h2_upgrade = h2_config_rgeti(r, H2_CONF_UPGRADE); return h2_upgrade > 0 || (h2_upgrade < 0 && !h2_h2_is_tls(r->connection)); } /******************************************************************************* * Register various hooks */ static const char* const mod_ssl[] = { "mod_ssl.c", NULL}; static const char* const mod_reqtimeout[] = { "mod_reqtimeout.c", NULL}; void h2_h2_register_hooks(void) { /* Our main processing needs to run quite late. Definitely after mod_ssl, * as we need its connection filters, but also before reqtimeout as its * method of timeouts is specific to HTTP/1.1 (as of now). * The core HTTP/1 processing run as REALLY_LAST, so we will have * a chance to take over before it. */ ap_hook_process_connection(h2_h2_process_conn, mod_ssl, mod_reqtimeout, APR_HOOK_LAST); /* One last chance to properly say goodbye if we have not done so * already. */ ap_hook_pre_close_connection(h2_h2_pre_close_conn, NULL, mod_ssl, APR_HOOK_LAST); /* With "H2SerializeHeaders On", we install the filter in this hook * that parses the response. This needs to happen before any other post * read function terminates the request with an error. Otherwise we will * never see the response. */ ap_hook_post_read_request(h2_h2_post_read_req, NULL, NULL, APR_HOOK_REALLY_FIRST); ap_hook_fixups(h2_h2_late_fixups, NULL, NULL, APR_HOOK_LAST); /* special bucket type transfer through a h2_bucket_beam */ h2_register_bucket_beamer(h2_bucket_headers_beam); h2_register_bucket_beamer(h2_bucket_observer_beam); } int h2_h2_process_conn(conn_rec* c) { apr_status_t status; h2_ctx *ctx; server_rec *s; if (c->master) { return DECLINED; } ctx = h2_ctx_get(c, 0); s = ctx? ctx->server : c->base_server; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "h2_h2, process_conn"); if (ctx && ctx->task) { /* our stream pseudo connection */ ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, c, "h2_h2, task, declined"); return DECLINED; } if (!ctx && c->keepalives == 0) { const char *proto = ap_get_protocol(c); if (APLOGctrace1(c)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "h2_h2, process_conn, " "new connection using protocol '%s', direct=%d, " "tls acceptable=%d", proto, h2_allows_h2_direct(c), h2_is_acceptable_connection(c, NULL, 1)); } if (!strcmp(AP_PROTOCOL_HTTP1, proto) && h2_allows_h2_direct(c) && h2_is_acceptable_connection(c, NULL, 1)) { /* Fresh connection still is on http/1.1 and H2Direct is enabled. * Otherwise connection is in a fully acceptable state. * -> peek at the first 24 incoming bytes */ apr_bucket_brigade *temp; char *peek = NULL; apr_size_t peeklen; temp = apr_brigade_create(c->pool, c->bucket_alloc); status = ap_get_brigade(c->input_filters, temp, AP_MODE_SPECULATIVE, APR_BLOCK_READ, 24); if (status != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, c, APLOGNO(03054) "h2_h2, error reading 24 bytes speculative"); apr_brigade_destroy(temp); return DECLINED; } apr_brigade_pflatten(temp, &peek, &peeklen, c->pool); if ((peeklen >= 24) && !memcmp(H2_MAGIC_TOKEN, peek, 24)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "h2_h2, direct mode detected"); if (!ctx) { ctx = h2_ctx_get(c, 1); } h2_ctx_protocol_set(ctx, h2_h2_is_tls(c)? "h2" : "h2c"); } else if (APLOGctrace2(c)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, c, "h2_h2, not detected in %d bytes(base64): %s", (int)peeklen, h2_util_base64url_encode(peek, peeklen, c->pool)); } apr_brigade_destroy(temp); } } if (ctx) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "process_conn"); if (!h2_ctx_get_session(c)) { status = h2_conn_setup(c, NULL, s); ap_log_cerror(APLOG_MARK, APLOG_TRACE1, status, c, "conn_setup"); if (status != APR_SUCCESS) { h2_ctx_clear(c); return !OK; } } h2_conn_run(c); return OK; } ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "h2_h2, declined"); return DECLINED; } static int h2_h2_pre_close_conn(conn_rec *c) { h2_ctx *ctx; /* slave connection? */ if (c->master) { return DECLINED; } ctx = h2_ctx_get(c, 0); if (ctx) { /* If the session has been closed correctly already, we will not * find a h2_ctx here. The presence indicates that the session * is still ongoing. */ return h2_conn_pre_close(ctx, c); } return DECLINED; } static void check_push(request_rec *r, const char *tag) { apr_array_header_t *push_list = h2_config_push_list(r); if (!r->expecting_100 && push_list && push_list->nelts > 0) { int i, old_status; const char *old_line; ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "%s, early announcing %d resources for push", tag, push_list->nelts); for (i = 0; i < push_list->nelts; ++i) { h2_push_res *push = &APR_ARRAY_IDX(push_list, i, h2_push_res); apr_table_add(r->headers_out, "Link", apr_psprintf(r->pool, "<%s>; rel=preload%s", push->uri_ref, push->critical? "; critical" : "")); } old_status = r->status; old_line = r->status_line; r->status = 103; r->status_line = "103 Early Hints"; ap_send_interim_response(r, 1); r->status = old_status; r->status_line = old_line; } } static int h2_h2_post_read_req(request_rec *r) { /* slave connection? */ if (r->connection->master) { struct h2_task *task = h2_ctx_get_task(r->connection); /* This hook will get called twice on internal redirects. Take care * that we manipulate filters only once. */ if (task && !task->filters_set) { ap_filter_t *f; ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "h2_task(%s): adding request filters", task->id); /* setup the correct filters to process the request for h2 */ ap_add_input_filter("H2_REQUEST", task, r, r->connection); /* replace the core http filter that formats response headers * in HTTP/1 with our own that collects status and headers */ ap_remove_output_filter_byhandle(r->output_filters, "HTTP_HEADER"); ap_add_output_filter("H2_RESPONSE", task, r, r->connection); for (f = r->input_filters; f; f = f->next) { if (!strcmp("H2_SLAVE_IN", f->frec->name)) { f->r = r; break; } } ap_add_output_filter("H2_TRAILERS_OUT", task, r, r->connection); task->filters_set = 1; } } return DECLINED; } static int h2_h2_late_fixups(request_rec *r) { /* slave connection? */ if (r->connection->master) { struct h2_task *task = h2_ctx_get_task(r->connection); if (task) { /* check if we copy vs. setaside files in this location */ task->output.copy_files = h2_config_rgeti(r, H2_CONF_COPY_FILES); if (task->output.copy_files) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, task->c, "h2_slave_out(%s): copy_files on", task->id); h2_beam_on_file_beam(task->output.beam, h2_beam_no_files, NULL); } check_push(r, "late_fixup"); } } return DECLINED; } httpd-2.4.41/modules/http2/mod_http2.mak0000644000000000000500000003345413442347205016354 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_http2.dsp !IF "$(CFG)" == "" CFG=mod_http2 - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_http2 - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_http2 - Win32 Release" && "$(CFG)" != "mod_http2 - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_http2.mak" CFG="mod_http2 - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_http2 - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_http2 - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_http2 - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_http2.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_http2.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\h2_alt_svc.obj" -@erase "$(INTDIR)\h2_bucket_beam.obj" -@erase "$(INTDIR)\h2_bucket_eos.obj" -@erase "$(INTDIR)\h2_config.obj" -@erase "$(INTDIR)\h2_conn.obj" -@erase "$(INTDIR)\h2_conn_io.obj" -@erase "$(INTDIR)\h2_ctx.obj" -@erase "$(INTDIR)\h2_filter.obj" -@erase "$(INTDIR)\h2_from_h1.obj" -@erase "$(INTDIR)\h2_h2.obj" -@erase "$(INTDIR)\h2_headers.obj" -@erase "$(INTDIR)\h2_mplx.obj" -@erase "$(INTDIR)\h2_push.obj" -@erase "$(INTDIR)\h2_request.obj" -@erase "$(INTDIR)\h2_session.obj" -@erase "$(INTDIR)\h2_stream.obj" -@erase "$(INTDIR)\h2_switch.obj" -@erase "$(INTDIR)\h2_task.obj" -@erase "$(INTDIR)\h2_util.obj" -@erase "$(INTDIR)\h2_workers.obj" -@erase "$(INTDIR)\mod_http2.obj" -@erase "$(INTDIR)\mod_http2.res" -@erase "$(INTDIR)\mod_http2_src.idb" -@erase "$(INTDIR)\mod_http2_src.pdb" -@erase "$(OUTDIR)\mod_http2.exp" -@erase "$(OUTDIR)\mod_http2.lib" -@erase "$(OUTDIR)\mod_http2.pdb" -@erase "$(OUTDIR)\mod_http2.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/nghttp2/lib/includes" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D ssize_t=long /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_http2_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_http2.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_http2.so" /d LONG_NAME="http2_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_http2.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib nghttp2.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_http2.pdb" /debug /out:"$(OUTDIR)\mod_http2.so" /implib:"$(OUTDIR)\mod_http2.lib" /libpath:"..\..\srclib\nghttp2\lib\MSVC_obj" /base:@..\..\os\win32\BaseAddr.ref,mod_http2.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\h2_alt_svc.obj" \ "$(INTDIR)\h2_bucket_beam.obj" \ "$(INTDIR)\h2_bucket_eos.obj" \ "$(INTDIR)\h2_config.obj" \ "$(INTDIR)\h2_conn.obj" \ "$(INTDIR)\h2_conn_io.obj" \ "$(INTDIR)\h2_ctx.obj" \ "$(INTDIR)\h2_filter.obj" \ "$(INTDIR)\h2_from_h1.obj" \ "$(INTDIR)\h2_h2.obj" \ "$(INTDIR)\h2_headers.obj" \ "$(INTDIR)\h2_mplx.obj" \ "$(INTDIR)\h2_push.obj" \ "$(INTDIR)\h2_request.obj" \ "$(INTDIR)\h2_session.obj" \ "$(INTDIR)\h2_stream.obj" \ "$(INTDIR)\h2_switch.obj" \ "$(INTDIR)\h2_task.obj" \ "$(INTDIR)\h2_util.obj" \ "$(INTDIR)\h2_workers.obj" \ "$(INTDIR)\mod_http2.obj" \ "$(INTDIR)\mod_http2.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_http2.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_http2.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_http2.so" if exist .\Release\mod_http2.so.manifest mt.exe -manifest .\Release\mod_http2.so.manifest -outputresource:.\Release\mod_http2.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_http2 - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_http2.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_http2.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\h2_alt_svc.obj" -@erase "$(INTDIR)\h2_bucket_beam.obj" -@erase "$(INTDIR)\h2_bucket_eos.obj" -@erase "$(INTDIR)\h2_config.obj" -@erase "$(INTDIR)\h2_conn.obj" -@erase "$(INTDIR)\h2_conn_io.obj" -@erase "$(INTDIR)\h2_ctx.obj" -@erase "$(INTDIR)\h2_filter.obj" -@erase "$(INTDIR)\h2_from_h1.obj" -@erase "$(INTDIR)\h2_h2.obj" -@erase "$(INTDIR)\h2_headers.obj" -@erase "$(INTDIR)\h2_mplx.obj" -@erase "$(INTDIR)\h2_push.obj" -@erase "$(INTDIR)\h2_request.obj" -@erase "$(INTDIR)\h2_session.obj" -@erase "$(INTDIR)\h2_stream.obj" -@erase "$(INTDIR)\h2_switch.obj" -@erase "$(INTDIR)\h2_task.obj" -@erase "$(INTDIR)\h2_util.obj" -@erase "$(INTDIR)\h2_workers.obj" -@erase "$(INTDIR)\mod_http2.obj" -@erase "$(INTDIR)\mod_http2.res" -@erase "$(INTDIR)\mod_http2_src.idb" -@erase "$(INTDIR)\mod_http2_src.pdb" -@erase "$(OUTDIR)\mod_http2.exp" -@erase "$(OUTDIR)\mod_http2.lib" -@erase "$(OUTDIR)\mod_http2.pdb" -@erase "$(OUTDIR)\mod_http2.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/nghttp2/lib/includes" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D ssize_t=long /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_http2_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_http2.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_http2.so" /d LONG_NAME="http2_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_http2.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib nghttp2d.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_http2.pdb" /debug /out:"$(OUTDIR)\mod_http2.so" /implib:"$(OUTDIR)\mod_http2.lib" /libpath:"..\..\srclib\nghttp2\lib\MSVC_obj" /base:@..\..\os\win32\BaseAddr.ref,mod_http2.so LINK32_OBJS= \ "$(INTDIR)\h2_alt_svc.obj" \ "$(INTDIR)\h2_bucket_beam.obj" \ "$(INTDIR)\h2_bucket_eos.obj" \ "$(INTDIR)\h2_config.obj" \ "$(INTDIR)\h2_conn.obj" \ "$(INTDIR)\h2_conn_io.obj" \ "$(INTDIR)\h2_ctx.obj" \ "$(INTDIR)\h2_filter.obj" \ "$(INTDIR)\h2_from_h1.obj" \ "$(INTDIR)\h2_h2.obj" \ "$(INTDIR)\h2_headers.obj" \ "$(INTDIR)\h2_mplx.obj" \ "$(INTDIR)\h2_push.obj" \ "$(INTDIR)\h2_request.obj" \ "$(INTDIR)\h2_session.obj" \ "$(INTDIR)\h2_stream.obj" \ "$(INTDIR)\h2_switch.obj" \ "$(INTDIR)\h2_task.obj" \ "$(INTDIR)\h2_util.obj" \ "$(INTDIR)\h2_workers.obj" \ "$(INTDIR)\mod_http2.obj" \ "$(INTDIR)\mod_http2.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_http2.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_http2.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_http2.so" if exist .\Debug\mod_http2.so.manifest mt.exe -manifest .\Debug\mod_http2.so.manifest -outputresource:.\Debug\mod_http2.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_http2.dep") !INCLUDE "mod_http2.dep" !ELSE !MESSAGE Warning: cannot find "mod_http2.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_http2 - Win32 Release" || "$(CFG)" == "mod_http2 - Win32 Debug" !IF "$(CFG)" == "mod_http2 - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\http2" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\http2" !ELSEIF "$(CFG)" == "mod_http2 - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\http2" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\http2" !ENDIF !IF "$(CFG)" == "mod_http2 - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\http2" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\http2" !ELSEIF "$(CFG)" == "mod_http2 - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\http2" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\http2" !ENDIF !IF "$(CFG)" == "mod_http2 - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\http2" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\http2" !ELSEIF "$(CFG)" == "mod_http2 - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\http2" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\http2" !ENDIF SOURCE=./h2_alt_svc.c "$(INTDIR)\h2_alt_svc.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_bucket_beam.c "$(INTDIR)/h2_bucket_beam.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_bucket_eos.c "$(INTDIR)\h2_bucket_eos.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_config.c "$(INTDIR)\h2_config.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_conn.c "$(INTDIR)\h2_conn.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_conn_io.c "$(INTDIR)\h2_conn_io.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_ctx.c "$(INTDIR)\h2_ctx.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_filter.c "$(INTDIR)\h2_filter.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_from_h1.c "$(INTDIR)\h2_from_h1.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_h2.c "$(INTDIR)\h2_h2.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_headers.c "$(INTDIR)\h2_headers.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_mplx.c "$(INTDIR)\h2_mplx.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_push.c "$(INTDIR)\h2_push.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_request.c "$(INTDIR)\h2_request.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_session.c "$(INTDIR)\h2_session.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_stream.c "$(INTDIR)\h2_stream.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_switch.c "$(INTDIR)\h2_switch.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_task.c "$(INTDIR)\h2_task.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_util.c "$(INTDIR)\h2_util.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_workers.c "$(INTDIR)\h2_workers.obj" : $(SOURCE) "$(INTDIR)" SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_http2 - Win32 Release" "$(INTDIR)\mod_http2.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_http2.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_http2.so" /d LONG_NAME="http2_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_http2 - Win32 Debug" "$(INTDIR)\mod_http2.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_http2.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_http2.so" /d LONG_NAME="http2_module for Apache" $(SOURCE) !ENDIF SOURCE=./mod_http2.c "$(INTDIR)\mod_http2.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/http2/mod_http2.dsp0000644000000000000500000001363013442347205016364 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_http2" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_http2 - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_http2.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_http2.mak" CFG="mod_http2 - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_http2 - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_http2 - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_http2 - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "ssize_t=long" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/nghttp2/lib/includes" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "ssize_t=long" /Fd"Release\mod_http2_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_http2.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_http2.so" /d LONG_NAME="http2_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib nghttp2.lib /nologo /subsystem:windows /dll /libpath:"..\..\srclib\nghttp2\lib\MSVC_obj" /out:".\Release\mod_http2.so" /base:@..\..\os\win32\BaseAddr.ref,mod_http2.so # ADD LINK32 kernel32.lib nghttp2.lib /nologo /subsystem:windows /dll /libpath:"..\..\srclib\nghttp2\lib\MSVC_obj" /incremental:no /debug /out:".\Release\mod_http2.so" /base:@..\..\os\win32\BaseAddr.ref,mod_http2.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_http2.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_http2 - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /D "ssize_t=long" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/nghttp2/lib/includes" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "ssize_t=long" /Fd"Debug\mod_http2_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_http2.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_http2.so" /d LONG_NAME="http2_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib nghttp2d.lib /nologo /subsystem:windows /dll /libpath:"..\..\srclib\nghttp2\lib\MSVC_obj" /incremental:no /debug /out:".\Debug\mod_http2.so" /base:@..\..\os\win32\BaseAddr.ref,mod_http2.so # ADD LINK32 kernel32.lib nghttp2d.lib /nologo /subsystem:windows /dll /libpath:"..\..\srclib\nghttp2\lib\MSVC_obj" /incremental:no /debug /out:".\Debug\mod_http2.so" /base:@..\..\os\win32\BaseAddr.ref,mod_http2.so # Begin Special Build Tool TargetPath=.\Debug\mod_http2.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_http2 - Win32 Release" # Name "mod_http2 - Win32 Debug" # Begin Source File SOURCE=./h2_alt_svc.c # End Source File # Begin Source File SOURCE=./h2_bucket_beam.c # End Source File # Begin Source File SOURCE=./h2_bucket_eos.c # End Source File # Begin Source File SOURCE=./h2_config.c # End Source File # Begin Source File SOURCE=./h2_conn.c # End Source File # Begin Source File SOURCE=./h2_conn_io.c # End Source File # Begin Source File SOURCE=./h2_ctx.c # End Source File # Begin Source File SOURCE=./h2_filter.c # End Source File # Begin Source File SOURCE=./h2_from_h1.c # End Source File # Begin Source File SOURCE=./h2_h2.c # End Source File # Begin Source File SOURCE=./h2_mplx.c # End Source File # Begin Source File SOURCE=./h2_push.c # End Source File # Begin Source File SOURCE=./h2_request.c # End Source File # Begin Source File SOURCE=./h2_headers.c # End Source File # Begin Source File SOURCE=./h2_session.c # End Source File # Begin Source File SOURCE=./h2_stream.c # End Source File # Begin Source File SOURCE=./h2_switch.c # End Source File # Begin Source File SOURCE=./h2_task.c # End Source File # Begin Source File SOURCE=./h2_util.c # End Source File # Begin Source File SOURCE=./h2_workers.c # End Source File # Begin Source File SOURCE=./mod_http2.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/http2/mod_http2.dep0000644000000000000500000013544713442347205016361 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_http2.mak ./h2_alt_svc.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2_alt_svc.h"\ ".\h2_config.h"\ ".\h2_ctx.h"\ ".\h2_h2.h"\ ".\h2_private.h"\ ".\h2_util.h"\ ./h2_bucket_eos.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_queue.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_bucket_eos.h"\ ".\h2_mplx.h"\ ".\h2_private.h"\ ".\h2_stream.h"\ ./h2_config.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_alt_svc.h"\ ".\h2_config.h"\ ".\h2_conn.h"\ ".\h2_ctx.h"\ ".\h2_h2.h"\ ".\h2_private.h"\ ./h2_conn.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_queue.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_config.h"\ ".\h2_conn.h"\ ".\h2_conn_io.h"\ ".\h2_ctx.h"\ ".\h2_filter.h"\ ".\h2_h2.h"\ ".\h2_mplx.h"\ ".\h2_private.h"\ ".\h2_session.h"\ ".\h2_stream.h"\ ".\h2_task.h"\ ".\h2_version.h"\ ".\h2_workers.h"\ ./h2_conn_io.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_bucket_eos.h"\ ".\h2_config.h"\ ".\h2_conn_io.h"\ ".\h2_h2.h"\ ".\h2_private.h"\ ".\h2_session.h"\ ".\h2_util.h"\ ./h2_ctx.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_conn_io.h"\ ".\h2_ctx.h"\ ".\h2_private.h"\ ".\h2_session.h"\ ".\h2_task.h"\ ./h2_filter.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_queue.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_conn_io.h"\ ".\h2_ctx.h"\ ".\h2_filter.h"\ ".\h2_mplx.h"\ ".\h2_private.h"\ ".\h2_push.h"\ ".\h2_request.h"\ ".\h2_session.h"\ ".\h2_stream.h"\ ".\h2_task.h"\ ".\h2_util.h"\ ".\h2_version.h"\ ./h2_from_h1.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_time.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_from_h1.h"\ ".\h2_private.h"\ ".\h2_task.h"\ ".\h2_util.h"\ ./h2_h2.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\ssl\mod_ssl.h"\ ".\h2.h"\ ".\h2_config.h"\ ".\h2_conn.h"\ ".\h2_conn_io.h"\ ".\h2_ctx.h"\ ".\h2_h2.h"\ ".\h2_private.h"\ ".\h2_request.h"\ ".\h2_session.h"\ ".\h2_stream.h"\ ".\h2_task.h"\ ".\h2_util.h"\ ".\mod_http2.h"\ ./h2_int_queue.c : \ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_want.h"\ ./h2_io.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_queue.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_cond.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_h2.h"\ ".\h2_mplx.h"\ ".\h2_private.h"\ ".\h2_request.h"\ ".\h2_task.h"\ ".\h2_util.h"\ ./h2_io_set.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2_io_set.h"\ ".\h2_private.h"\ ./h2_mplx.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_queue.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_cond.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_config.h"\ ".\h2_conn.h"\ ".\h2_ctx.h"\ ".\h2_h2.h"\ ".\h2_mplx.h"\ ".\h2_private.h"\ ".\h2_request.h"\ ".\h2_stream.h"\ ".\h2_task.h"\ ".\h2_util.h"\ ".\h2_workers.h"\ ".\mod_http2.h"\ ./h2_ngn_shed.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_queue.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_cond.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_config.h"\ ".\h2_conn.h"\ ".\h2_ctx.h"\ ".\h2_h2.h"\ ".\h2_mplx.h"\ ".\h2_private.h"\ ".\h2_request.h"\ ".\h2_task.h"\ ".\h2_util.h"\ ".\mod_http2.h"\ ./h2_push.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_conn_io.h"\ ".\h2_h2.h"\ ".\h2_private.h"\ ".\h2_push.h"\ ".\h2_request.h"\ ".\h2_session.h"\ ".\h2_stream.h"\ ".\h2_util.h"\ ./h2_request.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_core.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_private.h"\ ".\h2_push.h"\ ".\h2_request.h"\ ".\h2_util.h"\ ./h2_session.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_base64.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_queue.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_cond.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_bucket_eos.h"\ ".\h2_config.h"\ ".\h2_conn_io.h"\ ".\h2_ctx.h"\ ".\h2_filter.h"\ ".\h2_from_h1.h"\ ".\h2_h2.h"\ ".\h2_mplx.h"\ ".\h2_private.h"\ ".\h2_push.h"\ ".\h2_request.h"\ ".\h2_session.h"\ ".\h2_stream.h"\ ".\h2_task.h"\ ".\h2_util.h"\ ".\h2_version.h"\ ".\h2_workers.h"\ ./h2_stream.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_queue.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_config.h"\ ".\h2_conn.h"\ ".\h2_conn_io.h"\ ".\h2_ctx.h"\ ".\h2_filter.h"\ ".\h2_h2.h"\ ".\h2_mplx.h"\ ".\h2_private.h"\ ".\h2_push.h"\ ".\h2_request.h"\ ".\h2_session.h"\ ".\h2_stream.h"\ ".\h2_task.h"\ ".\h2_util.h"\ ./h2_switch.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2_config.h"\ ".\h2_conn.h"\ ".\h2_ctx.h"\ ".\h2_h2.h"\ ".\h2_private.h"\ ".\h2_switch.h"\ ./h2_task.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_core.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_queue.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_atomic.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_cond.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_config.h"\ ".\h2_conn.h"\ ".\h2_conn_io.h"\ ".\h2_ctx.h"\ ".\h2_from_h1.h"\ ".\h2_h2.h"\ ".\h2_mplx.h"\ ".\h2_private.h"\ ".\h2_request.h"\ ".\h2_session.h"\ ".\h2_stream.h"\ ".\h2_task.h"\ ./h2_task_input.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_queue.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_conn.h"\ ".\h2_conn_io.h"\ ".\h2_mplx.h"\ ".\h2_private.h"\ ".\h2_request.h"\ ".\h2_session.h"\ ".\h2_stream.h"\ ".\h2_task.h"\ ".\h2_util.h"\ ./h2_task_output.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_queue.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_cond.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_conn.h"\ ".\h2_conn_io.h"\ ".\h2_from_h1.h"\ ".\h2_mplx.h"\ ".\h2_private.h"\ ".\h2_request.h"\ ".\h2_session.h"\ ".\h2_stream.h"\ ".\h2_task.h"\ ".\h2_util.h"\ ./h2_util.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_private.h"\ ".\h2_request.h"\ ".\h2_util.h"\ ./h2_workers.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\mpm_common.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_queue.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_atomic.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_cond.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_mplx.h"\ ".\h2_private.h"\ ".\h2_task.h"\ ".\h2_workers.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ ./mod_http2.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_queue.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\h2.h"\ ".\h2_alt_svc.h"\ ".\h2_config.h"\ ".\h2_conn.h"\ ".\h2_conn_io.h"\ ".\h2_ctx.h"\ ".\h2_filter.h"\ ".\h2_h2.h"\ ".\h2_mplx.h"\ ".\h2_push.h"\ ".\h2_request.h"\ ".\h2_session.h"\ ".\h2_stream.h"\ ".\h2_switch.h"\ ".\h2_task.h"\ ".\h2_version.h"\ ".\mod_http2.h"\ httpd-2.4.41/modules/http2/h2_request.h0000644000000000000500000000364713303341455016212 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_request__ #define __mod_h2__h2_request__ #include "h2.h" apr_status_t h2_request_rcreate(h2_request **preq, apr_pool_t *pool, request_rec *r); apr_status_t h2_request_add_header(h2_request *req, apr_pool_t *pool, const char *name, size_t nlen, const char *value, size_t vlen); apr_status_t h2_request_add_trailer(h2_request *req, apr_pool_t *pool, const char *name, size_t nlen, const char *value, size_t vlen); apr_status_t h2_request_end_headers(h2_request *req, apr_pool_t *pool, int eos, size_t raw_bytes); h2_request *h2_request_clone(apr_pool_t *p, const h2_request *src); /** * Create a request_rec representing the h2_request to be * processed on the given connection. * * @param req the h2 request to process * @param conn the connection to process the request on * @return the request_rec representing the request */ request_rec *h2_request_create_rec(const h2_request *req, conn_rec *conn); #endif /* defined(__mod_h2__h2_request__) */ httpd-2.4.41/modules/http2/NWGNUmod_http20000644000000000000500000002246513067530315016423 0ustar rootsrc# # This Makefile requires the environment var NGH2SRC # pointing to the base directory of nghttp2 source tree. # # # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(SRC)/include \ $(NGH2SRC)/lib/ \ $(NGH2SRC)/lib/includes \ $(SERVER)/mpm/NetWare \ $(STDMOD)/ssl \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ -DHAVE_CONFIG_H \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ -L$(OBJDIR) \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = mod_http2 # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) HTTP2 Support module (w/ NGHTTP2 Lib) # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 65536 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If this is specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # Declare all target files (you must add your files here) # # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(OBJDIR)/nghttp2.lib \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/h2_alt_svc.o \ $(OBJDIR)/h2_bucket_beam.o \ $(OBJDIR)/h2_bucket_eos.o \ $(OBJDIR)/h2_config.o \ $(OBJDIR)/h2_conn.o \ $(OBJDIR)/h2_conn_io.o \ $(OBJDIR)/h2_ctx.o \ $(OBJDIR)/h2_filter.o \ $(OBJDIR)/h2_from_h1.o \ $(OBJDIR)/h2_h2.o \ $(OBJDIR)/h2_mplx.o \ $(OBJDIR)/h2_ngn_shed.o \ $(OBJDIR)/h2_push.o \ $(OBJDIR)/h2_request.o \ $(OBJDIR)/h2_headers.o \ $(OBJDIR)/h2_session.o \ $(OBJDIR)/h2_stream.o \ $(OBJDIR)/h2_switch.o \ $(OBJDIR)/h2_task.o \ $(OBJDIR)/h2_util.o \ $(OBJDIR)/h2_workers.o \ $(OBJDIR)/mod_http2.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(OBJDIR)/nghttp2.lib \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ Libc \ Apache2 \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ @$(OBJDIR)/mod_http2.imp \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs := $(sort $(patsubst $(NGH2SRC)/lib/%.c,$(OBJDIR)/%.o,$(wildcard $(NGH2SRC)/lib/*.c))) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(NGH2SRC)/lib/config.h $(TARGET_lib) nlms :: libs $(OBJDIR)/mod_http2.imp $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) clean :: $(call DEL,$(NGH2SRC)/lib/config.h) # # Any specialized rules here # vpath %.c $(NGH2SRC)/lib $(NGH2SRC)/lib/config.h : NWGNUmod_http2 @-$(RM) $@ @echo $(DL)GEN $@$(DL) @echo $(DL)/* For NetWare target.$(DL) > $@ @echo $(DL)** Do not edit - created by Make!$(DL) >> $@ @echo $(DL)*/$(DL) >> $@ @echo $(DL)#ifndef NGH2_CONFIG_H$(DL) >> $@ @echo $(DL)#define NGH2_CONFIG_H$(DL) >> $@ @echo #define HAVE_ARPA_INET_H 1 >> $@ @echo #define HAVE_CHOWN 1 >> $@ @echo #define HAVE_DECL_STRERROR_R 1 >> $@ @echo #define HAVE_DLFCN_H 1 >> $@ @echo #define HAVE_DUP2 1 >> $@ @echo #define HAVE_FCNTL_H 1 >> $@ @echo #define HAVE_GETCWD 1 >> $@ @echo #define HAVE_INTTYPES_H 1 >> $@ @echo #define HAVE_LIMITS_H 1 >> $@ @echo #define HAVE_LOCALTIME_R 1 >> $@ @echo #define HAVE_MALLOC 1 >> $@ @echo #define HAVE_MEMCHR 1 >> $@ @echo #define HAVE_MEMMOVE 1 >> $@ @echo #define HAVE_MEMORY_H 1 >> $@ @echo #define HAVE_MEMSET 1 >> $@ @echo #define HAVE_NETDB_H 1 >> $@ @echo #define HAVE_NETINET_IN_H 1 >> $@ @echo #define HAVE_PTRDIFF_T 1 >> $@ @echo #define HAVE_PWD_H 1 >> $@ @echo #define HAVE_SOCKET 1 >> $@ @echo #define HAVE_SQRT 1 >> $@ @echo #define HAVE_STDDEF_H 1 >> $@ @echo #define HAVE_STDINT_H 1 >> $@ @echo #define HAVE_STDLIB_H 1 >> $@ @echo #define HAVE_STRCHR 1 >> $@ @echo #define HAVE_STRDUP 1 >> $@ @echo #define HAVE_STRERROR 1 >> $@ @echo #define HAVE_STRERROR_R 1 >> $@ @echo #define HAVE_STRINGS_H 1 >> $@ @echo #define HAVE_STRING_H 1 >> $@ @echo #define HAVE_STRSTR 1 >> $@ @echo #define HAVE_STRTOL 1 >> $@ @echo #define HAVE_STRTOUL 1 >> $@ @echo #define HAVE_SYSLOG_H 1 >> $@ @echo #define HAVE_SYS_SOCKET_H 1 >> $@ @echo #define HAVE_SYS_STAT_H 1 >> $@ @echo #define HAVE_SYS_TIME_H 1 >> $@ @echo #define HAVE_SYS_TYPES_H 1 >> $@ @echo #define HAVE_TIME_H 1 >> $@ @echo #define HAVE_UNISTD_H 1 >> $@ @echo #define SIZEOF_INT_P 4 >> $@ @echo #define STDC_HEADERS 1 >> $@ @echo #define STRERROR_R_CHAR_P 4 >> $@ # Hint to compiler a function parameter is not used @echo #define _U_ >> $@ @echo #ifndef __cplusplus >> $@ @echo #define inline __inline >> $@ @echo #endif >> $@ @echo $(DL)#endif /* NGH2_CONFIG_H */$(DL) >> $@ # # Exports from mod_http2 for mod_proxy_http2 $(OBJDIR)/mod_http2.imp : NWGNUmod_http2 @-$(RM) $@ @echo $(DL)GEN $@$(DL) @echo $(DL) (HTTP2)$(DL) > $@ @echo $(DL) http2_module,$(DL) >> $@ @echo $(DL) nghttp2_is_fatal,$(DL) >> $@ @echo $(DL) nghttp2_option_del,$(DL) >> $@ @echo $(DL) nghttp2_option_new,$(DL) >> $@ @echo $(DL) nghttp2_option_set_no_auto_window_update,$(DL) >> $@ @echo $(DL) nghttp2_option_set_peer_max_concurrent_streams,$(DL) >> $@ @echo $(DL) nghttp2_session_callbacks_del,$(DL) >> $@ @echo $(DL) nghttp2_session_callbacks_new,$(DL) >> $@ @echo $(DL) nghttp2_session_callbacks_set_before_frame_send_callback,$(DL) >> $@ @echo $(DL) nghttp2_session_callbacks_set_on_data_chunk_recv_callback,$(DL) >> $@ @echo $(DL) nghttp2_session_callbacks_set_on_frame_recv_callback,$(DL) >> $@ @echo $(DL) nghttp2_session_callbacks_set_on_header_callback,$(DL) >> $@ @echo $(DL) nghttp2_session_callbacks_set_on_stream_close_callback,$(DL) >> $@ @echo $(DL) nghttp2_session_callbacks_set_send_callback,$(DL) >> $@ @echo $(DL) nghttp2_session_client_new2,$(DL) >> $@ @echo $(DL) nghttp2_session_consume,$(DL) >> $@ @echo $(DL) nghttp2_session_consume_connection,$(DL) >> $@ @echo $(DL) nghttp2_session_del,$(DL) >> $@ @echo $(DL) nghttp2_session_get_remote_settings,$(DL) >> $@ @echo $(DL) nghttp2_session_get_stream_user_data,$(DL) >> $@ @echo $(DL) nghttp2_session_mem_recv,$(DL) >> $@ @echo $(DL) nghttp2_session_resume_data,$(DL) >> $@ @echo $(DL) nghttp2_session_send,$(DL) >> $@ @echo $(DL) nghttp2_session_want_read,$(DL) >> $@ @echo $(DL) nghttp2_session_want_write,$(DL) >> $@ @echo $(DL) nghttp2_strerror,$(DL) >> $@ @echo $(DL) nghttp2_submit_goaway,$(DL) >> $@ @echo $(DL) nghttp2_submit_ping,$(DL) >> $@ @echo $(DL) nghttp2_submit_request,$(DL) >> $@ @echo $(DL) nghttp2_submit_rst_stream,$(DL) >> $@ @echo $(DL) nghttp2_submit_settings,$(DL) >> $@ @echo $(DL) nghttp2_submit_window_update,$(DL) >> $@ @echo $(DL) nghttp2_version$(DL) >> $@ # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/http2/h2_alt_svc.h0000644000000000000500000000254513237611704016154 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_alt_svc__ #define __mod_h2__h2_alt_svc__ typedef struct h2_alt_svc h2_alt_svc; struct h2_alt_svc { const char *alpn; const char *host; int port; }; void h2_alt_svc_register_hooks(void); /** * Parse an Alt-Svc specifier as described in "HTTP Alternative Services" * (https://tools.ietf.org/html/draft-ietf-httpbis-alt-svc-04) * with the following changes: * - do not percent encode token values * - do not use quotation marks */ h2_alt_svc *h2_alt_svc_parse(const char *s, apr_pool_t *pool); #endif /* defined(__mod_h2__h2_alt_svc__) */ httpd-2.4.41/modules/http2/mod_proxy_http2.dep0000644000000000000500000001655312733263444017622 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_proxy_http2.mak ./h2_proxy_session.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_proxy.h"\ "..\..\include\mpm_common.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\..\srclib\nghttp2\lib\includes\nghttp2\nghttp2.h"\ "..\..\srclib\nghttp2\lib\includes\nghttp2\nghttp2ver.h"\ ".\h2.h"\ ".\h2_proxy_session.h"\ ".\h2_proxy_util.h"\ ".\mod_http2.h"\ ./h2_proxy_util.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\..\srclib\nghttp2\lib\includes\nghttp2\nghttp2.h"\ "..\..\srclib\nghttp2\lib\includes\nghttp2\nghttp2ver.h"\ ".\h2.h"\ ".\h2_proxy_util.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ ./mod_proxy_http2.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_proxy.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\..\srclib\nghttp2\lib\includes\nghttp2\nghttp2.h"\ "..\..\srclib\nghttp2\lib\includes\nghttp2\nghttp2ver.h"\ ".\h2.h"\ ".\h2_proxy_session.h"\ ".\h2_request.h"\ ".\h2_proxy_util.h"\ ".\h2_version.h"\ ".\mod_http2.h"\ ".\mod_proxy_http2.h"\ httpd-2.4.41/modules/http2/h2_workers.c0000644000000000000500000002606013237611704016206 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include "h2.h" #include "h2_private.h" #include "h2_mplx.h" #include "h2_task.h" #include "h2_workers.h" #include "h2_util.h" typedef struct h2_slot h2_slot; struct h2_slot { int id; h2_slot *next; h2_workers *workers; int aborted; int sticks; h2_task *task; apr_thread_t *thread; apr_thread_mutex_t *lock; apr_thread_cond_t *not_idle; }; static h2_slot *pop_slot(h2_slot **phead) { /* Atomically pop a slot from the list */ for (;;) { h2_slot *first = *phead; if (first == NULL) { return NULL; } if (apr_atomic_casptr((void*)phead, first->next, first) == first) { first->next = NULL; return first; } } } static void push_slot(h2_slot **phead, h2_slot *slot) { /* Atomically push a slot to the list */ ap_assert(!slot->next); for (;;) { h2_slot *next = slot->next = *phead; if (apr_atomic_casptr((void*)phead, slot, next) == next) { return; } } } static void* APR_THREAD_FUNC slot_run(apr_thread_t *thread, void *wctx); static apr_status_t activate_slot(h2_workers *workers, h2_slot *slot) { apr_status_t status; slot->workers = workers; slot->aborted = 0; slot->task = NULL; if (!slot->lock) { status = apr_thread_mutex_create(&slot->lock, APR_THREAD_MUTEX_DEFAULT, workers->pool); if (status != APR_SUCCESS) { push_slot(&workers->free, slot); return status; } } if (!slot->not_idle) { status = apr_thread_cond_create(&slot->not_idle, workers->pool); if (status != APR_SUCCESS) { push_slot(&workers->free, slot); return status; } } ap_log_error(APLOG_MARK, APLOG_TRACE2, 0, workers->s, "h2_workers: new thread for slot %d", slot->id); /* thread will either immediately start work or add itself * to the idle queue */ apr_thread_create(&slot->thread, workers->thread_attr, slot_run, slot, workers->pool); if (!slot->thread) { push_slot(&workers->free, slot); return APR_ENOMEM; } apr_atomic_inc32(&workers->worker_count); return APR_SUCCESS; } static apr_status_t add_worker(h2_workers *workers) { h2_slot *slot = pop_slot(&workers->free); if (slot) { return activate_slot(workers, slot); } return APR_EAGAIN; } static void wake_idle_worker(h2_workers *workers) { h2_slot *slot = pop_slot(&workers->idle); if (slot) { apr_thread_mutex_lock(slot->lock); apr_thread_cond_signal(slot->not_idle); apr_thread_mutex_unlock(slot->lock); } else if (workers->dynamic) { add_worker(workers); } } static void cleanup_zombies(h2_workers *workers) { h2_slot *slot; while ((slot = pop_slot(&workers->zombies))) { if (slot->thread) { apr_status_t status; apr_thread_join(&status, slot->thread); slot->thread = NULL; } apr_atomic_dec32(&workers->worker_count); slot->next = NULL; push_slot(&workers->free, slot); } } static apr_status_t slot_pull_task(h2_slot *slot, h2_mplx *m) { apr_status_t rv; rv = h2_mplx_pop_task(m, &slot->task); if (slot->task) { /* Ok, we got something to give back to the worker for execution. * If we still have idle workers, we let the worker be sticky, * e.g. making it poll the task's h2_mplx instance for more work * before asking back here. */ slot->sticks = slot->workers->max_workers; return rv; } slot->sticks = 0; return APR_EOF; } static h2_fifo_op_t mplx_peek(void *head, void *ctx) { h2_mplx *m = head; h2_slot *slot = ctx; if (slot_pull_task(slot, m) == APR_EAGAIN) { wake_idle_worker(slot->workers); return H2_FIFO_OP_REPUSH; } return H2_FIFO_OP_PULL; } /** * Get the next task for the given worker. Will block until a task arrives * or the max_wait timer expires and more than min workers exist. */ static apr_status_t get_next(h2_slot *slot) { h2_workers *workers = slot->workers; apr_status_t status; slot->task = NULL; while (!slot->aborted) { if (!slot->task) { status = h2_fifo_try_peek(workers->mplxs, mplx_peek, slot); if (status == APR_EOF) { return status; } } if (slot->task) { return APR_SUCCESS; } cleanup_zombies(workers); apr_thread_mutex_lock(slot->lock); push_slot(&workers->idle, slot); apr_thread_cond_wait(slot->not_idle, slot->lock); apr_thread_mutex_unlock(slot->lock); } return APR_EOF; } static void slot_done(h2_slot *slot) { push_slot(&(slot->workers->zombies), slot); } static void* APR_THREAD_FUNC slot_run(apr_thread_t *thread, void *wctx) { h2_slot *slot = wctx; while (!slot->aborted) { /* Get a h2_task from the mplxs queue. */ get_next(slot); while (slot->task) { h2_task_do(slot->task, thread, slot->id); /* Report the task as done. If stickyness is left, offer the * mplx the opportunity to give us back a new task right away. */ if (!slot->aborted && (--slot->sticks > 0)) { h2_mplx_task_done(slot->task->mplx, slot->task, &slot->task); } else { h2_mplx_task_done(slot->task->mplx, slot->task, NULL); slot->task = NULL; } } } slot_done(slot); return NULL; } static apr_status_t workers_pool_cleanup(void *data) { h2_workers *workers = data; h2_slot *slot; if (!workers->aborted) { workers->aborted = 1; /* abort all idle slots */ for (;;) { slot = pop_slot(&workers->idle); if (slot) { apr_thread_mutex_lock(slot->lock); slot->aborted = 1; apr_thread_cond_signal(slot->not_idle); apr_thread_mutex_unlock(slot->lock); } else { break; } } h2_fifo_term(workers->mplxs); h2_fifo_interrupt(workers->mplxs); cleanup_zombies(workers); } return APR_SUCCESS; } h2_workers *h2_workers_create(server_rec *s, apr_pool_t *server_pool, int min_workers, int max_workers, int idle_secs) { apr_status_t status; h2_workers *workers; apr_pool_t *pool; int i, n; ap_assert(s); ap_assert(server_pool); /* let's have our own pool that will be parent to all h2_worker * instances we create. This happens in various threads, but always * guarded by our lock. Without this pool, all subpool creations would * happen on the pool handed to us, which we do not guard. */ apr_pool_create(&pool, server_pool); apr_pool_tag(pool, "h2_workers"); workers = apr_pcalloc(pool, sizeof(h2_workers)); if (!workers) { return NULL; } workers->s = s; workers->pool = pool; workers->min_workers = min_workers; workers->max_workers = max_workers; workers->max_idle_secs = (idle_secs > 0)? idle_secs : 10; /* FIXME: the fifo set we use here has limited capacity. Once the * set is full, connections with new requests do a wait. Unfortunately, * we have optimizations in place there that makes such waiting "unfair" * in the sense that it may take connections a looong time to get scheduled. * * Need to rewrite this to use one of our double-linked lists and a mutex * to have unlimited capacity and fair scheduling. * * For now, we just make enough room to have many connections inside one * process. */ status = h2_fifo_set_create(&workers->mplxs, pool, 8 * 1024); if (status != APR_SUCCESS) { return NULL; } status = apr_threadattr_create(&workers->thread_attr, workers->pool); if (status != APR_SUCCESS) { return NULL; } if (ap_thread_stacksize != 0) { apr_threadattr_stacksize_set(workers->thread_attr, ap_thread_stacksize); ap_log_error(APLOG_MARK, APLOG_TRACE3, 0, s, "h2_workers: using stacksize=%ld", (long)ap_thread_stacksize); } status = apr_thread_mutex_create(&workers->lock, APR_THREAD_MUTEX_DEFAULT, workers->pool); if (status == APR_SUCCESS) { n = workers->nslots = workers->max_workers; workers->slots = apr_pcalloc(workers->pool, n * sizeof(h2_slot)); if (workers->slots == NULL) { workers->nslots = 0; status = APR_ENOMEM; } for (i = 0; i < n; ++i) { workers->slots[i].id = i; } } if (status == APR_SUCCESS) { /* we activate all for now, TODO: support min_workers again. * do this in reverse for vanity reasons so slot 0 will most * likely be at head of idle queue. */ n = workers->max_workers; for (i = n-1; i >= 0; --i) { status = activate_slot(workers, &workers->slots[i]); } /* the rest of the slots go on the free list */ for(i = n; i < workers->nslots; ++i) { push_slot(&workers->free, &workers->slots[i]); } workers->dynamic = (workers->worker_count < workers->max_workers); } if (status == APR_SUCCESS) { apr_pool_pre_cleanup_register(pool, workers, workers_pool_cleanup); return workers; } return NULL; } apr_status_t h2_workers_register(h2_workers *workers, struct h2_mplx *m) { apr_status_t status = h2_fifo_push(workers->mplxs, m); wake_idle_worker(workers); return status; } apr_status_t h2_workers_unregister(h2_workers *workers, struct h2_mplx *m) { return h2_fifo_remove(workers->mplxs, m); } httpd-2.4.41/modules/http2/h2_util.h0000644000000000000500000004747113237611704015505 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_util__ #define __mod_h2__h2_util__ #include /******************************************************************************* * some debugging/format helpers ******************************************************************************/ struct h2_request; struct nghttp2_frame; size_t h2_util_hex_dump(char *buffer, size_t maxlen, const char *data, size_t datalen); size_t h2_util_header_print(char *buffer, size_t maxlen, const char *name, size_t namelen, const char *value, size_t valuelen); void h2_util_camel_case_header(char *s, size_t len); int h2_util_frame_print(const nghttp2_frame *frame, char *buffer, size_t maxlen); /******************************************************************************* * ihash - hash for structs with int identifier ******************************************************************************/ typedef struct h2_ihash_t h2_ihash_t; typedef int h2_ihash_iter_t(void *ctx, void *val); /** * Create a hash for structures that have an identifying int member. * @param pool the pool to use * @param offset_of_int the offsetof() the int member in the struct */ h2_ihash_t *h2_ihash_create(apr_pool_t *pool, size_t offset_of_int); size_t h2_ihash_count(h2_ihash_t *ih); int h2_ihash_empty(h2_ihash_t *ih); void *h2_ihash_get(h2_ihash_t *ih, int id); /** * Iterate over the hash members (without defined order) and invoke * fn for each member until 0 is returned. * @param ih the hash to iterate over * @param fn the function to invoke on each member * @param ctx user supplied data passed into each iteration call * @return 0 if one iteration returned 0, otherwise != 0 */ int h2_ihash_iter(h2_ihash_t *ih, h2_ihash_iter_t *fn, void *ctx); void h2_ihash_add(h2_ihash_t *ih, void *val); void h2_ihash_remove(h2_ihash_t *ih, int id); void h2_ihash_remove_val(h2_ihash_t *ih, void *val); void h2_ihash_clear(h2_ihash_t *ih); size_t h2_ihash_shift(h2_ihash_t *ih, void **buffer, size_t max); /******************************************************************************* * iqueue - sorted list of int with user defined ordering ******************************************************************************/ typedef struct h2_iqueue { int *elts; int head; int nelts; int nalloc; apr_pool_t *pool; } h2_iqueue; /** * Comparator for two int to determine their order. * * @param i1 first int to compare * @param i2 second int to compare * @param ctx provided user data * @return value is the same as for strcmp() and has the effect: * == 0: s1 and s2 are treated equal in ordering * < 0: s1 should be sorted before s2 * > 0: s2 should be sorted before s1 */ typedef int h2_iq_cmp(int i1, int i2, void *ctx); /** * Allocate a new queue from the pool and initialize. * @param id the identifier of the queue * @param pool the memory pool */ h2_iqueue *h2_iq_create(apr_pool_t *pool, int capacity); /** * Return != 0 iff there are no tasks in the queue. * @param q the queue to check */ int h2_iq_empty(h2_iqueue *q); /** * Return the number of int in the queue. * @param q the queue to get size on */ int h2_iq_count(h2_iqueue *q); /** * Add a stream id to the queue. * * @param q the queue to append the id to * @param sid the stream id to add * @param cmp the comparator for sorting * @param ctx user data for comparator * @return != 0 iff id was not already there */ int h2_iq_add(h2_iqueue *q, int sid, h2_iq_cmp *cmp, void *ctx); /** * Append the id to the queue if not already present. * * @param q the queue to append the id to * @param sid the id to append * @return != 0 iff id was not already there */ int h2_iq_append(h2_iqueue *q, int sid); /** * Remove the stream id from the queue. Return != 0 iff task * was found in queue. * @param q the task queue * @param sid the stream id to remove * @return != 0 iff task was found in queue */ int h2_iq_remove(h2_iqueue *q, int sid); /** * Remove all entries in the queue. */ void h2_iq_clear(h2_iqueue *q); /** * Sort the stream idqueue again. Call if the task ordering * has changed. * * @param q the queue to sort * @param cmp the comparator for sorting * @param ctx user data for the comparator */ void h2_iq_sort(h2_iqueue *q, h2_iq_cmp *cmp, void *ctx); /** * Get the first id from the queue or 0 if the queue is empty. * The id is being removed. * * @param q the queue to get the first id from * @return the first id of the queue, 0 if empty */ int h2_iq_shift(h2_iqueue *q); /** * Get the first max ids from the queue. All these ids will be removed. * * @param q the queue to get the first task from * @param pint the int array to receive the values * @param max the maximum number of ids to shift * @return the actual number of ids shifted */ size_t h2_iq_mshift(h2_iqueue *q, int *pint, size_t max); /** * Determine if int is in the queue already * * @parm q the queue * @param sid the integer id to check for * @return != 0 iff sid is already in the queue */ int h2_iq_contains(h2_iqueue *q, int sid); /******************************************************************************* * FIFO queue (void* elements) ******************************************************************************/ /** * A thread-safe FIFO queue with some extra bells and whistles, if you * do not need anything special, better use 'apr_queue'. */ typedef struct h2_fifo h2_fifo; /** * Create a FIFO queue that can hold up to capacity elements. Elements can * appear several times. */ apr_status_t h2_fifo_create(h2_fifo **pfifo, apr_pool_t *pool, int capacity); /** * Create a FIFO set that can hold up to capacity elements. Elements only * appear once. Pushing an element already present does not change the * queue and is successful. */ apr_status_t h2_fifo_set_create(h2_fifo **pfifo, apr_pool_t *pool, int capacity); apr_status_t h2_fifo_term(h2_fifo *fifo); apr_status_t h2_fifo_interrupt(h2_fifo *fifo); int h2_fifo_count(h2_fifo *fifo); /** * Push en element into the queue. Blocks if there is no capacity left. * * @param fifo the FIFO queue * @param elem the element to push * @return APR_SUCCESS on push, APR_EAGAIN on try_push on a full queue, * APR_EEXIST when in set mode and elem already there. */ apr_status_t h2_fifo_push(h2_fifo *fifo, void *elem); apr_status_t h2_fifo_try_push(h2_fifo *fifo, void *elem); apr_status_t h2_fifo_pull(h2_fifo *fifo, void **pelem); apr_status_t h2_fifo_try_pull(h2_fifo *fifo, void **pelem); typedef enum { H2_FIFO_OP_PULL, /* pull the element from the queue, ie discard it */ H2_FIFO_OP_REPUSH, /* pull and immediatley re-push it */ } h2_fifo_op_t; typedef h2_fifo_op_t h2_fifo_peek_fn(void *head, void *ctx); /** * Call given function on the head of the queue, once it exists, and * perform the returned operation on it. The queue will hold its lock during * this time, so no other operations on the queue are possible. * @param fifo the queue to peek at * @param fn the function to call on the head, once available * @param ctx context to pass in call to function */ apr_status_t h2_fifo_peek(h2_fifo *fifo, h2_fifo_peek_fn *fn, void *ctx); /** * Non-blocking version of h2_fifo_peek. */ apr_status_t h2_fifo_try_peek(h2_fifo *fifo, h2_fifo_peek_fn *fn, void *ctx); /** * Remove the elem from the queue, will remove multiple appearances. * @param elem the element to remove * @return APR_SUCCESS iff > 0 elems were removed, APR_EAGAIN otherwise. */ apr_status_t h2_fifo_remove(h2_fifo *fifo, void *elem); /******************************************************************************* * iFIFO queue (int elements) ******************************************************************************/ /** * A thread-safe FIFO queue with some extra bells and whistles, if you * do not need anything special, better use 'apr_queue'. */ typedef struct h2_ififo h2_ififo; /** * Create a FIFO queue that can hold up to capacity int. ints can * appear several times. */ apr_status_t h2_ififo_create(h2_ififo **pfifo, apr_pool_t *pool, int capacity); /** * Create a FIFO set that can hold up to capacity integers. Ints only * appear once. Pushing an int already present does not change the * queue and is successful. */ apr_status_t h2_ififo_set_create(h2_ififo **pfifo, apr_pool_t *pool, int capacity); apr_status_t h2_ififo_term(h2_ififo *fifo); apr_status_t h2_ififo_interrupt(h2_ififo *fifo); int h2_ififo_count(h2_ififo *fifo); /** * Push an int into the queue. Blocks if there is no capacity left. * * @param fifo the FIFO queue * @param id the int to push * @return APR_SUCCESS on push, APR_EAGAIN on try_push on a full queue, * APR_EEXIST when in set mode and elem already there. */ apr_status_t h2_ififo_push(h2_ififo *fifo, int id); apr_status_t h2_ififo_try_push(h2_ififo *fifo, int id); apr_status_t h2_ififo_pull(h2_ififo *fifo, int *pi); apr_status_t h2_ififo_try_pull(h2_ififo *fifo, int *pi); typedef h2_fifo_op_t h2_ififo_peek_fn(int head, void *ctx); /** * Call given function on the head of the queue, once it exists, and * perform the returned operation on it. The queue will hold its lock during * this time, so no other operations on the queue are possible. * @param fifo the queue to peek at * @param fn the function to call on the head, once available * @param ctx context to pass in call to function */ apr_status_t h2_ififo_peek(h2_ififo *fifo, h2_ififo_peek_fn *fn, void *ctx); /** * Non-blocking version of h2_fifo_peek. */ apr_status_t h2_ififo_try_peek(h2_ififo *fifo, h2_ififo_peek_fn *fn, void *ctx); /** * Remove the integer from the queue, will remove multiple appearances. * @param id the integer to remove * @return APR_SUCCESS iff > 0 ints were removed, APR_EAGAIN otherwise. */ apr_status_t h2_ififo_remove(h2_ififo *fifo, int id); /******************************************************************************* * common helpers ******************************************************************************/ /* h2_log2(n) iff n is a power of 2 */ unsigned char h2_log2(int n); /** * Count the bytes that all key/value pairs in a table have * in length (exlucding terminating 0s), plus additional extra per pair. * * @param t the table to inspect * @param pair_extra the extra amount to add per pair * @return the number of bytes all key/value pairs have */ apr_size_t h2_util_table_bytes(apr_table_t *t, apr_size_t pair_extra); /** Match a header value against a string constance, case insensitive */ #define H2_HD_MATCH_LIT(l, name, nlen) \ ((nlen == sizeof(l) - 1) && !apr_strnatcasecmp(l, name)) /******************************************************************************* * HTTP/2 header helpers ******************************************************************************/ int h2_req_ignore_header(const char *name, size_t len); int h2_req_ignore_trailer(const char *name, size_t len); int h2_res_ignore_trailer(const char *name, size_t len); /** * Set the push policy for the given request. Takes request headers into * account, see draft https://tools.ietf.org/html/draft-ruellan-http-accept-push-policy-00 * for details. * * @param headers the http headers to inspect * @param p the pool to use * @param push_enabled if HTTP/2 server push is generally enabled for this request * @return the push policy desired */ int h2_push_policy_determine(apr_table_t *headers, apr_pool_t *p, int push_enabled); /******************************************************************************* * base64 url encoding, different table from normal base64 ******************************************************************************/ /** * I always wanted to write my own base64url decoder...not. See * https://tools.ietf.org/html/rfc4648#section-5 for description. */ apr_size_t h2_util_base64url_decode(const char **decoded, const char *encoded, apr_pool_t *pool); const char *h2_util_base64url_encode(const char *data, apr_size_t len, apr_pool_t *pool); /******************************************************************************* * nghttp2 helpers ******************************************************************************/ #define H2_HD_MATCH_LIT_CS(l, name) \ ((strlen(name) == sizeof(l) - 1) && !apr_strnatcasecmp(l, name)) #define H2_CREATE_NV_LIT_CS(nv, NAME, VALUE) nv->name = (uint8_t *)NAME; \ nv->namelen = sizeof(NAME) - 1; \ nv->value = (uint8_t *)VALUE; \ nv->valuelen = strlen(VALUE) #define H2_CREATE_NV_CS_LIT(nv, NAME, VALUE) nv->name = (uint8_t *)NAME; \ nv->namelen = strlen(NAME); \ nv->value = (uint8_t *)VALUE; \ nv->valuelen = sizeof(VALUE) - 1 #define H2_CREATE_NV_CS_CS(nv, NAME, VALUE) nv->name = (uint8_t *)NAME; \ nv->namelen = strlen(NAME); \ nv->value = (uint8_t *)VALUE; \ nv->valuelen = strlen(VALUE) int h2_util_ignore_header(const char *name); struct h2_headers; typedef struct h2_ngheader { nghttp2_nv *nv; apr_size_t nvlen; } h2_ngheader; apr_status_t h2_res_create_ngtrailer(h2_ngheader **ph, apr_pool_t *p, struct h2_headers *headers); apr_status_t h2_res_create_ngheader(h2_ngheader **ph, apr_pool_t *p, struct h2_headers *headers); apr_status_t h2_req_create_ngheader(h2_ngheader **ph, apr_pool_t *p, const struct h2_request *req); apr_status_t h2_req_add_header(apr_table_t *headers, apr_pool_t *pool, const char *name, size_t nlen, const char *value, size_t vlen); /******************************************************************************* * h2_request helpers ******************************************************************************/ struct h2_request *h2_req_create(int id, apr_pool_t *pool, const char *method, const char *scheme, const char *authority, const char *path, apr_table_t *header, int serialize); /******************************************************************************* * apr brigade helpers ******************************************************************************/ /** * Concatenate at most length bytes from src to dest brigade, splitting * buckets if necessary and reading buckets of indeterminate length. */ apr_status_t h2_brigade_concat_length(apr_bucket_brigade *dest, apr_bucket_brigade *src, apr_off_t length); /** * Copy at most length bytes from src to dest brigade, splitting * buckets if necessary and reading buckets of indeterminate length. */ apr_status_t h2_brigade_copy_length(apr_bucket_brigade *dest, apr_bucket_brigade *src, apr_off_t length); /** * Return != 0 iff there is a FLUSH or EOS bucket in the brigade. * @param bb the brigade to check on * @return != 0 iff brigade holds FLUSH or EOS bucket (or both) */ int h2_util_has_eos(apr_bucket_brigade *bb, apr_off_t len); /** * Check how many bytes of the desired amount are available and if the * end of stream is reached by that amount. * @param bb the brigade to check * @param plen the desired length and, on return, the available length * @param on return, if eos has been reached */ apr_status_t h2_util_bb_avail(apr_bucket_brigade *bb, apr_off_t *plen, int *peos); typedef apr_status_t h2_util_pass_cb(void *ctx, const char *data, apr_off_t len); /** * Read at most *plen bytes from the brigade and pass them into the * given callback. If cb is NULL, just return the amount of data that * could have been read. * If an EOS was/would be encountered, set *peos != 0. * @param bb the brigade to read from * @param cb the callback to invoke for the read data * @param ctx optional data passed to callback * @param plen inout, as input gives the maximum number of bytes to read, * on return specifies the actual/would be number of bytes * @param peos != 0 iff an EOS bucket was/would be encountered. */ apr_status_t h2_util_bb_readx(apr_bucket_brigade *bb, h2_util_pass_cb *cb, void *ctx, apr_off_t *plen, int *peos); /** * Print a bucket's meta data (type and length) to the buffer. * @return number of characters printed */ apr_size_t h2_util_bucket_print(char *buffer, apr_size_t bmax, apr_bucket *b, const char *sep); /** * Prints the brigade bucket types and lengths into the given buffer * up to bmax. * @return number of characters printed */ apr_size_t h2_util_bb_print(char *buffer, apr_size_t bmax, const char *tag, const char *sep, apr_bucket_brigade *bb); /** * Logs the bucket brigade (which bucket types with what length) * to the log at the given level. * @param c the connection to log for * @param sid the stream identifier this brigade belongs to * @param level the log level (as in APLOG_*) * @param tag a short message text about the context * @param bb the brigade to log */ #define h2_util_bb_log(c, sid, level, tag, bb) \ do { \ char buffer[4 * 1024]; \ const char *line = "(null)"; \ apr_size_t len, bmax = sizeof(buffer)/sizeof(buffer[0]); \ len = h2_util_bb_print(buffer, bmax, (tag), "", (bb)); \ ap_log_cerror(APLOG_MARK, level, 0, (c), "bb_dump(%ld): %s", \ ((c)->master? (c)->master->id : (c)->id), (len? buffer : line)); \ } while(0) typedef int h2_bucket_gate(apr_bucket *b); /** * Transfer buckets from one brigade to another with a limit on the * maximum amount of bytes transferred. Does no setaside magic, lifetime * of brigades must fit. * @param to brigade to transfer buckets to * @param from brigades to remove buckets from * @param plen maximum bytes to transfer, actual bytes transferred * @param peos if an EOS bucket was transferred */ apr_status_t h2_append_brigade(apr_bucket_brigade *to, apr_bucket_brigade *from, apr_off_t *plen, int *peos, h2_bucket_gate *should_append); /** * Get an approximnation of the memory footprint of the given * brigade. This varies from apr_brigade_length as * - no buckets are ever read * - only buckets known to allocate memory (HEAP+POOL) are counted * - the bucket struct itself is counted */ apr_off_t h2_brigade_mem_size(apr_bucket_brigade *bb); #endif /* defined(__mod_h2__h2_util__) */ httpd-2.4.41/modules/http2/h2_config.c0000644000000000000500000010412613442215451015754 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include #include #include "h2.h" #include "h2_alt_svc.h" #include "h2_ctx.h" #include "h2_conn.h" #include "h2_config.h" #include "h2_h2.h" #include "h2_private.h" #define DEF_VAL (-1) #define H2_CONFIG_GET(a, b, n) \ (((a)->n == DEF_VAL)? (b) : (a))->n #define H2_CONFIG_SET(a, n, v) \ ((a)->n = v) #define CONFIG_CMD_SET(cmd,dir,var,val) \ h2_config_seti(((cmd)->path? (dir) : NULL), h2_config_sget((cmd)->server), var, val) #define CONFIG_CMD_SET64(cmd,dir,var,val) \ h2_config_seti64(((cmd)->path? (dir) : NULL), h2_config_sget((cmd)->server), var, val) /* Apache httpd module configuration for h2. */ typedef struct h2_config { const char *name; int h2_max_streams; /* max concurrent # streams (http2) */ int h2_window_size; /* stream window size (http2) */ int min_workers; /* min # of worker threads/child */ int max_workers; /* max # of worker threads/child */ int max_worker_idle_secs; /* max # of idle seconds for worker */ int stream_max_mem_size; /* max # bytes held in memory/stream */ apr_array_header_t *alt_svcs; /* h2_alt_svc specs for this server */ int alt_svc_max_age; /* seconds clients can rely on alt-svc info*/ int serialize_headers; /* Use serialized HTTP/1.1 headers for processing, better compatibility */ int h2_direct; /* if mod_h2 is active directly */ int modern_tls_only; /* Accept only modern TLS in HTTP/2 connections */ int h2_upgrade; /* Allow HTTP/1 upgrade to h2/h2c */ apr_int64_t tls_warmup_size; /* Amount of TLS data to send before going full write size */ int tls_cooldown_secs; /* Seconds of idle time before going back to small TLS records */ int h2_push; /* if HTTP/2 server push is enabled */ struct apr_hash_t *priorities;/* map of content-type to h2_priority records */ int push_diary_size; /* # of entries in push diary */ int copy_files; /* if files shall be copied vs setaside on output */ apr_array_header_t *push_list;/* list of h2_push_res configurations */ int early_hints; /* support status code 103 */ int padding_bits; int padding_always; } h2_config; typedef struct h2_dir_config { const char *name; apr_array_header_t *alt_svcs; /* h2_alt_svc specs for this server */ int alt_svc_max_age; /* seconds clients can rely on alt-svc info*/ int h2_upgrade; /* Allow HTTP/1 upgrade to h2/h2c */ int h2_push; /* if HTTP/2 server push is enabled */ apr_array_header_t *push_list;/* list of h2_push_res configurations */ int early_hints; /* support status code 103 */ } h2_dir_config; static h2_config defconf = { "default", 100, /* max_streams */ H2_INITIAL_WINDOW_SIZE, /* window_size */ -1, /* min workers */ -1, /* max workers */ 10 * 60, /* max workers idle secs */ 32 * 1024, /* stream max mem size */ NULL, /* no alt-svcs */ -1, /* alt-svc max age */ 0, /* serialize headers */ -1, /* h2 direct mode */ 1, /* modern TLS only */ -1, /* HTTP/1 Upgrade support */ 1024*1024, /* TLS warmup size */ 1, /* TLS cooldown secs */ 1, /* HTTP/2 server push enabled */ NULL, /* map of content-type to priorities */ 256, /* push diary size */ 0, /* copy files across threads */ NULL, /* push list */ 0, /* early hints, http status 103 */ 0, /* padding bits */ 1, /* padding always */ }; static h2_dir_config defdconf = { "default", NULL, /* no alt-svcs */ -1, /* alt-svc max age */ -1, /* HTTP/1 Upgrade support */ -1, /* HTTP/2 server push enabled */ NULL, /* push list */ -1, /* early hints, http status 103 */ }; void h2_config_init(apr_pool_t *pool) { (void)pool; } void *h2_config_create_svr(apr_pool_t *pool, server_rec *s) { h2_config *conf = (h2_config *)apr_pcalloc(pool, sizeof(h2_config)); char *name = apr_pstrcat(pool, "srv[", s->defn_name, "]", NULL); conf->name = name; conf->h2_max_streams = DEF_VAL; conf->h2_window_size = DEF_VAL; conf->min_workers = DEF_VAL; conf->max_workers = DEF_VAL; conf->max_worker_idle_secs = DEF_VAL; conf->stream_max_mem_size = DEF_VAL; conf->alt_svc_max_age = DEF_VAL; conf->serialize_headers = DEF_VAL; conf->h2_direct = DEF_VAL; conf->modern_tls_only = DEF_VAL; conf->h2_upgrade = DEF_VAL; conf->tls_warmup_size = DEF_VAL; conf->tls_cooldown_secs = DEF_VAL; conf->h2_push = DEF_VAL; conf->priorities = NULL; conf->push_diary_size = DEF_VAL; conf->copy_files = DEF_VAL; conf->push_list = NULL; conf->early_hints = DEF_VAL; conf->padding_bits = DEF_VAL; conf->padding_always = DEF_VAL; return conf; } static void *h2_config_merge(apr_pool_t *pool, void *basev, void *addv) { h2_config *base = (h2_config *)basev; h2_config *add = (h2_config *)addv; h2_config *n = (h2_config *)apr_pcalloc(pool, sizeof(h2_config)); char *name = apr_pstrcat(pool, "merged[", add->name, ", ", base->name, "]", NULL); n->name = name; n->h2_max_streams = H2_CONFIG_GET(add, base, h2_max_streams); n->h2_window_size = H2_CONFIG_GET(add, base, h2_window_size); n->min_workers = H2_CONFIG_GET(add, base, min_workers); n->max_workers = H2_CONFIG_GET(add, base, max_workers); n->max_worker_idle_secs = H2_CONFIG_GET(add, base, max_worker_idle_secs); n->stream_max_mem_size = H2_CONFIG_GET(add, base, stream_max_mem_size); n->alt_svcs = add->alt_svcs? add->alt_svcs : base->alt_svcs; n->alt_svc_max_age = H2_CONFIG_GET(add, base, alt_svc_max_age); n->serialize_headers = H2_CONFIG_GET(add, base, serialize_headers); n->h2_direct = H2_CONFIG_GET(add, base, h2_direct); n->modern_tls_only = H2_CONFIG_GET(add, base, modern_tls_only); n->h2_upgrade = H2_CONFIG_GET(add, base, h2_upgrade); n->tls_warmup_size = H2_CONFIG_GET(add, base, tls_warmup_size); n->tls_cooldown_secs = H2_CONFIG_GET(add, base, tls_cooldown_secs); n->h2_push = H2_CONFIG_GET(add, base, h2_push); if (add->priorities && base->priorities) { n->priorities = apr_hash_overlay(pool, add->priorities, base->priorities); } else { n->priorities = add->priorities? add->priorities : base->priorities; } n->push_diary_size = H2_CONFIG_GET(add, base, push_diary_size); n->copy_files = H2_CONFIG_GET(add, base, copy_files); if (add->push_list && base->push_list) { n->push_list = apr_array_append(pool, base->push_list, add->push_list); } else { n->push_list = add->push_list? add->push_list : base->push_list; } n->early_hints = H2_CONFIG_GET(add, base, early_hints); n->padding_bits = H2_CONFIG_GET(add, base, padding_bits); n->padding_always = H2_CONFIG_GET(add, base, padding_always); return n; } void *h2_config_merge_svr(apr_pool_t *pool, void *basev, void *addv) { return h2_config_merge(pool, basev, addv); } void *h2_config_create_dir(apr_pool_t *pool, char *x) { h2_dir_config *conf = (h2_dir_config *)apr_pcalloc(pool, sizeof(h2_dir_config)); const char *s = x? x : "unknown"; char *name = apr_pstrcat(pool, "dir[", s, "]", NULL); conf->name = name; conf->alt_svc_max_age = DEF_VAL; conf->h2_upgrade = DEF_VAL; conf->h2_push = DEF_VAL; conf->early_hints = DEF_VAL; return conf; } void *h2_config_merge_dir(apr_pool_t *pool, void *basev, void *addv) { h2_dir_config *base = (h2_dir_config *)basev; h2_dir_config *add = (h2_dir_config *)addv; h2_dir_config *n = (h2_dir_config *)apr_pcalloc(pool, sizeof(h2_dir_config)); n->name = apr_pstrcat(pool, "merged[", add->name, ", ", base->name, "]", NULL); n->alt_svcs = add->alt_svcs? add->alt_svcs : base->alt_svcs; n->alt_svc_max_age = H2_CONFIG_GET(add, base, alt_svc_max_age); n->h2_upgrade = H2_CONFIG_GET(add, base, h2_upgrade); n->h2_push = H2_CONFIG_GET(add, base, h2_push); if (add->push_list && base->push_list) { n->push_list = apr_array_append(pool, base->push_list, add->push_list); } else { n->push_list = add->push_list? add->push_list : base->push_list; } n->early_hints = H2_CONFIG_GET(add, base, early_hints); return n; } static apr_int64_t h2_srv_config_geti64(const h2_config *conf, h2_config_var_t var) { switch(var) { case H2_CONF_MAX_STREAMS: return H2_CONFIG_GET(conf, &defconf, h2_max_streams); case H2_CONF_WIN_SIZE: return H2_CONFIG_GET(conf, &defconf, h2_window_size); case H2_CONF_MIN_WORKERS: return H2_CONFIG_GET(conf, &defconf, min_workers); case H2_CONF_MAX_WORKERS: return H2_CONFIG_GET(conf, &defconf, max_workers); case H2_CONF_MAX_WORKER_IDLE_SECS: return H2_CONFIG_GET(conf, &defconf, max_worker_idle_secs); case H2_CONF_STREAM_MAX_MEM: return H2_CONFIG_GET(conf, &defconf, stream_max_mem_size); case H2_CONF_ALT_SVC_MAX_AGE: return H2_CONFIG_GET(conf, &defconf, alt_svc_max_age); case H2_CONF_SER_HEADERS: return H2_CONFIG_GET(conf, &defconf, serialize_headers); case H2_CONF_MODERN_TLS_ONLY: return H2_CONFIG_GET(conf, &defconf, modern_tls_only); case H2_CONF_UPGRADE: return H2_CONFIG_GET(conf, &defconf, h2_upgrade); case H2_CONF_DIRECT: return 1; /*return H2_CONFIG_GET(conf, &defconf, h2_direct);*/ case H2_CONF_TLS_WARMUP_SIZE: return H2_CONFIG_GET(conf, &defconf, tls_warmup_size); case H2_CONF_TLS_COOLDOWN_SECS: return H2_CONFIG_GET(conf, &defconf, tls_cooldown_secs); case H2_CONF_PUSH: return H2_CONFIG_GET(conf, &defconf, h2_push); case H2_CONF_PUSH_DIARY_SIZE: return H2_CONFIG_GET(conf, &defconf, push_diary_size); case H2_CONF_COPY_FILES: return H2_CONFIG_GET(conf, &defconf, copy_files); case H2_CONF_EARLY_HINTS: return H2_CONFIG_GET(conf, &defconf, early_hints); case H2_CONF_PADDING_BITS: return H2_CONFIG_GET(conf, &defconf, padding_bits); case H2_CONF_PADDING_ALWAYS: return H2_CONFIG_GET(conf, &defconf, padding_always); default: return DEF_VAL; } } static void h2_srv_config_seti(h2_config *conf, h2_config_var_t var, int val) { switch(var) { case H2_CONF_MAX_STREAMS: H2_CONFIG_SET(conf, h2_max_streams, val); break; case H2_CONF_WIN_SIZE: H2_CONFIG_SET(conf, h2_window_size, val); break; case H2_CONF_MIN_WORKERS: H2_CONFIG_SET(conf, min_workers, val); break; case H2_CONF_MAX_WORKERS: H2_CONFIG_SET(conf, max_workers, val); break; case H2_CONF_MAX_WORKER_IDLE_SECS: H2_CONFIG_SET(conf, max_worker_idle_secs, val); break; case H2_CONF_STREAM_MAX_MEM: H2_CONFIG_SET(conf, stream_max_mem_size, val); break; case H2_CONF_ALT_SVC_MAX_AGE: H2_CONFIG_SET(conf, alt_svc_max_age, val); break; case H2_CONF_SER_HEADERS: H2_CONFIG_SET(conf, serialize_headers, val); break; case H2_CONF_MODERN_TLS_ONLY: H2_CONFIG_SET(conf, modern_tls_only, val); break; case H2_CONF_UPGRADE: H2_CONFIG_SET(conf, h2_upgrade, val); break; case H2_CONF_DIRECT: H2_CONFIG_SET(conf, h2_direct, val); break; case H2_CONF_TLS_WARMUP_SIZE: H2_CONFIG_SET(conf, tls_warmup_size, val); break; case H2_CONF_TLS_COOLDOWN_SECS: H2_CONFIG_SET(conf, tls_cooldown_secs, val); break; case H2_CONF_PUSH: H2_CONFIG_SET(conf, h2_push, val); break; case H2_CONF_PUSH_DIARY_SIZE: H2_CONFIG_SET(conf, push_diary_size, val); break; case H2_CONF_COPY_FILES: H2_CONFIG_SET(conf, copy_files, val); break; case H2_CONF_EARLY_HINTS: H2_CONFIG_SET(conf, early_hints, val); break; case H2_CONF_PADDING_BITS: H2_CONFIG_SET(conf, padding_bits, val); break; case H2_CONF_PADDING_ALWAYS: H2_CONFIG_SET(conf, padding_always, val); break; default: break; } } static void h2_srv_config_seti64(h2_config *conf, h2_config_var_t var, apr_int64_t val) { switch(var) { case H2_CONF_TLS_WARMUP_SIZE: H2_CONFIG_SET(conf, tls_warmup_size, val); break; default: h2_srv_config_seti(conf, var, (int)val); break; } } static h2_config *h2_config_sget(server_rec *s) { h2_config *cfg = (h2_config *)ap_get_module_config(s->module_config, &http2_module); ap_assert(cfg); return cfg; } static const h2_dir_config *h2_config_rget(request_rec *r) { h2_dir_config *cfg = (h2_dir_config *)ap_get_module_config(r->per_dir_config, &http2_module); ap_assert(cfg); return cfg; } static apr_int64_t h2_dir_config_geti64(const h2_dir_config *conf, h2_config_var_t var) { switch(var) { case H2_CONF_ALT_SVC_MAX_AGE: return H2_CONFIG_GET(conf, &defdconf, alt_svc_max_age); case H2_CONF_UPGRADE: return H2_CONFIG_GET(conf, &defdconf, h2_upgrade); case H2_CONF_PUSH: return H2_CONFIG_GET(conf, &defdconf, h2_push); case H2_CONF_EARLY_HINTS: return H2_CONFIG_GET(conf, &defdconf, early_hints); default: return DEF_VAL; } } static void h2_config_seti(h2_dir_config *dconf, h2_config *conf, h2_config_var_t var, int val) { int set_srv = !dconf; if (dconf) { switch(var) { case H2_CONF_ALT_SVC_MAX_AGE: H2_CONFIG_SET(dconf, alt_svc_max_age, val); break; case H2_CONF_UPGRADE: H2_CONFIG_SET(dconf, h2_upgrade, val); break; case H2_CONF_PUSH: H2_CONFIG_SET(dconf, h2_push, val); break; case H2_CONF_EARLY_HINTS: H2_CONFIG_SET(dconf, early_hints, val); break; default: /* not handled in dir_conf */ set_srv = 1; break; } } if (set_srv) { h2_srv_config_seti(conf, var, val); } } static void h2_config_seti64(h2_dir_config *dconf, h2_config *conf, h2_config_var_t var, apr_int64_t val) { int set_srv = !dconf; if (dconf) { switch(var) { default: /* not handled in dir_conf */ set_srv = 1; break; } } if (set_srv) { h2_srv_config_seti64(conf, var, val); } } static const h2_config *h2_config_get(conn_rec *c) { h2_ctx *ctx = h2_ctx_get(c, 0); if (ctx) { if (ctx->config) { return ctx->config; } else if (ctx->server) { ctx->config = h2_config_sget(ctx->server); return ctx->config; } } return h2_config_sget(c->base_server); } int h2_config_cgeti(conn_rec *c, h2_config_var_t var) { return (int)h2_srv_config_geti64(h2_config_get(c), var); } apr_int64_t h2_config_cgeti64(conn_rec *c, h2_config_var_t var) { return h2_srv_config_geti64(h2_config_get(c), var); } int h2_config_sgeti(server_rec *s, h2_config_var_t var) { return (int)h2_srv_config_geti64(h2_config_sget(s), var); } apr_int64_t h2_config_sgeti64(server_rec *s, h2_config_var_t var) { return h2_srv_config_geti64(h2_config_sget(s), var); } int h2_config_geti(request_rec *r, server_rec *s, h2_config_var_t var) { return (int)h2_config_geti64(r, s, var); } apr_int64_t h2_config_geti64(request_rec *r, server_rec *s, h2_config_var_t var) { apr_int64_t mode = r? (int)h2_dir_config_geti64(h2_config_rget(r), var) : DEF_VAL; return (mode != DEF_VAL)? mode : h2_config_sgeti64(s, var); } int h2_config_rgeti(request_rec *r, h2_config_var_t var) { return h2_config_geti(r, r->server, var); } apr_int64_t h2_config_rgeti64(request_rec *r, h2_config_var_t var) { return h2_config_geti64(r, r->server, var); } apr_array_header_t *h2_config_push_list(request_rec *r) { const h2_config *sconf; const h2_dir_config *conf = h2_config_rget(r); if (conf && conf->push_list) { return conf->push_list; } sconf = h2_config_sget(r->server); return sconf? sconf->push_list : NULL; } apr_array_header_t *h2_config_alt_svcs(request_rec *r) { const h2_config *sconf; const h2_dir_config *conf = h2_config_rget(r); if (conf && conf->alt_svcs) { return conf->alt_svcs; } sconf = h2_config_sget(r->server); return sconf? sconf->alt_svcs : NULL; } const struct h2_priority *h2_cconfig_get_priority(conn_rec *c, const char *content_type) { const h2_config *conf = h2_config_get(c); if (content_type && conf->priorities) { size_t len = strcspn(content_type, "; \t"); h2_priority *prio = apr_hash_get(conf->priorities, content_type, len); return prio? prio : apr_hash_get(conf->priorities, "*", 1); } return NULL; } static const char *h2_conf_set_max_streams(cmd_parms *cmd, void *dirconf, const char *value) { apr_int64_t ival = (int)apr_atoi64(value); if (ival < 1) { return "value must be > 0"; } CONFIG_CMD_SET64(cmd, dirconf, H2_CONF_MAX_STREAMS, ival); return NULL; } static const char *h2_conf_set_window_size(cmd_parms *cmd, void *dirconf, const char *value) { int val = (int)apr_atoi64(value); if (val < 1024) { return "value must be >= 1024"; } CONFIG_CMD_SET(cmd, dirconf, H2_CONF_WIN_SIZE, val); return NULL; } static const char *h2_conf_set_min_workers(cmd_parms *cmd, void *dirconf, const char *value) { int val = (int)apr_atoi64(value); if (val < 1) { return "value must be > 0"; } CONFIG_CMD_SET(cmd, dirconf, H2_CONF_MIN_WORKERS, val); return NULL; } static const char *h2_conf_set_max_workers(cmd_parms *cmd, void *dirconf, const char *value) { int val = (int)apr_atoi64(value); if (val < 1) { return "value must be > 0"; } CONFIG_CMD_SET(cmd, dirconf, H2_CONF_MAX_WORKERS, val); return NULL; } static const char *h2_conf_set_max_worker_idle_secs(cmd_parms *cmd, void *dirconf, const char *value) { int val = (int)apr_atoi64(value); if (val < 1) { return "value must be > 0"; } CONFIG_CMD_SET(cmd, dirconf, H2_CONF_MAX_WORKER_IDLE_SECS, val); return NULL; } static const char *h2_conf_set_stream_max_mem_size(cmd_parms *cmd, void *dirconf, const char *value) { int val = (int)apr_atoi64(value); if (val < 1024) { return "value must be >= 1024"; } CONFIG_CMD_SET(cmd, dirconf, H2_CONF_STREAM_MAX_MEM, val); return NULL; } static const char *h2_add_alt_svc(cmd_parms *cmd, void *dirconf, const char *value) { if (value && *value) { h2_alt_svc *as = h2_alt_svc_parse(value, cmd->pool); if (!as) { return "unable to parse alt-svc specifier"; } if (cmd->path) { h2_dir_config *dcfg = (h2_dir_config *)dirconf; if (!dcfg->alt_svcs) { dcfg->alt_svcs = apr_array_make(cmd->pool, 5, sizeof(h2_alt_svc*)); } APR_ARRAY_PUSH(dcfg->alt_svcs, h2_alt_svc*) = as; } else { h2_config *cfg = (h2_config *)h2_config_sget(cmd->server); if (!cfg->alt_svcs) { cfg->alt_svcs = apr_array_make(cmd->pool, 5, sizeof(h2_alt_svc*)); } APR_ARRAY_PUSH(cfg->alt_svcs, h2_alt_svc*) = as; } } return NULL; } static const char *h2_conf_set_alt_svc_max_age(cmd_parms *cmd, void *dirconf, const char *value) { int val = (int)apr_atoi64(value); CONFIG_CMD_SET(cmd, dirconf, H2_CONF_ALT_SVC_MAX_AGE, val); return NULL; } static const char *h2_conf_set_session_extra_files(cmd_parms *cmd, void *dirconf, const char *value) { /* deprecated, ignore */ (void)dirconf; (void)value; ap_log_perror(APLOG_MARK, APLOG_WARNING, 0, cmd->pool, /* NO LOGNO */ "H2SessionExtraFiles is obsolete and will be ignored"); return NULL; } static const char *h2_conf_set_serialize_headers(cmd_parms *cmd, void *dirconf, const char *value) { if (!strcasecmp(value, "On")) { CONFIG_CMD_SET(cmd, dirconf, H2_CONF_SER_HEADERS, 1); return NULL; } else if (!strcasecmp(value, "Off")) { CONFIG_CMD_SET(cmd, dirconf, H2_CONF_SER_HEADERS, 0); return NULL; } return "value must be On or Off"; } static const char *h2_conf_set_direct(cmd_parms *cmd, void *dirconf, const char *value) { if (!strcasecmp(value, "On")) { CONFIG_CMD_SET(cmd, dirconf, H2_CONF_DIRECT, 1); return NULL; } else if (!strcasecmp(value, "Off")) { CONFIG_CMD_SET(cmd, dirconf, H2_CONF_DIRECT, 0); return NULL; } return "value must be On or Off"; } static const char *h2_conf_set_push(cmd_parms *cmd, void *dirconf, const char *value) { if (!strcasecmp(value, "On")) { CONFIG_CMD_SET(cmd, dirconf, H2_CONF_PUSH, 1); return NULL; } else if (!strcasecmp(value, "Off")) { CONFIG_CMD_SET(cmd, dirconf, H2_CONF_PUSH, 0); return NULL; } return "value must be On or Off"; } static const char *h2_conf_add_push_priority(cmd_parms *cmd, void *_cfg, const char *ctype, const char *sdependency, const char *sweight) { h2_config *cfg = (h2_config *)h2_config_sget(cmd->server); const char *sdefweight = "16"; /* default AFTER weight */ h2_dependency dependency; h2_priority *priority; int weight; if (!*ctype) { return "1st argument must be a mime-type, like 'text/css' or '*'"; } if (!sweight) { /* 2 args only, but which one? */ if (apr_isdigit(sdependency[0])) { sweight = sdependency; sdependency = "AFTER"; /* default dependency */ } } if (!strcasecmp("AFTER", sdependency)) { dependency = H2_DEPENDANT_AFTER; } else if (!strcasecmp("BEFORE", sdependency)) { dependency = H2_DEPENDANT_BEFORE; if (sweight) { return "dependecy 'Before' does not allow a weight"; } } else if (!strcasecmp("INTERLEAVED", sdependency)) { dependency = H2_DEPENDANT_INTERLEAVED; sdefweight = "256"; /* default INTERLEAVED weight */ } else { return "dependency must be one of 'After', 'Before' or 'Interleaved'"; } weight = (int)apr_atoi64(sweight? sweight : sdefweight); if (weight < NGHTTP2_MIN_WEIGHT) { return apr_psprintf(cmd->pool, "weight must be a number >= %d", NGHTTP2_MIN_WEIGHT); } priority = apr_pcalloc(cmd->pool, sizeof(*priority)); priority->dependency = dependency; priority->weight = weight; if (!cfg->priorities) { cfg->priorities = apr_hash_make(cmd->pool); } apr_hash_set(cfg->priorities, ctype, strlen(ctype), priority); return NULL; } static const char *h2_conf_set_modern_tls_only(cmd_parms *cmd, void *dirconf, const char *value) { if (!strcasecmp(value, "On")) { CONFIG_CMD_SET(cmd, dirconf, H2_CONF_MODERN_TLS_ONLY, 1); return NULL; } else if (!strcasecmp(value, "Off")) { CONFIG_CMD_SET(cmd, dirconf, H2_CONF_MODERN_TLS_ONLY, 0); return NULL; } return "value must be On or Off"; } static const char *h2_conf_set_upgrade(cmd_parms *cmd, void *dirconf, const char *value) { if (!strcasecmp(value, "On")) { CONFIG_CMD_SET(cmd, dirconf, H2_CONF_UPGRADE, 1); return NULL; } else if (!strcasecmp(value, "Off")) { CONFIG_CMD_SET(cmd, dirconf, H2_CONF_UPGRADE, 0); return NULL; } return "value must be On or Off"; } static const char *h2_conf_set_tls_warmup_size(cmd_parms *cmd, void *dirconf, const char *value) { apr_int64_t val = apr_atoi64(value); CONFIG_CMD_SET64(cmd, dirconf, H2_CONF_TLS_WARMUP_SIZE, val); return NULL; } static const char *h2_conf_set_tls_cooldown_secs(cmd_parms *cmd, void *dirconf, const char *value) { apr_int64_t val = (int)apr_atoi64(value); CONFIG_CMD_SET64(cmd, dirconf, H2_CONF_TLS_COOLDOWN_SECS, val); return NULL; } static const char *h2_conf_set_push_diary_size(cmd_parms *cmd, void *dirconf, const char *value) { int val = (int)apr_atoi64(value); if (val < 0) { return "value must be >= 0"; } if (val > 0 && (val & (val-1))) { return "value must a power of 2"; } if (val > (1 << 15)) { return "value must <= 65536"; } CONFIG_CMD_SET(cmd, dirconf, H2_CONF_PUSH_DIARY_SIZE, val); return NULL; } static const char *h2_conf_set_copy_files(cmd_parms *cmd, void *dirconf, const char *value) { if (!strcasecmp(value, "On")) { CONFIG_CMD_SET(cmd, dirconf, H2_CONF_COPY_FILES, 1); return NULL; } else if (!strcasecmp(value, "Off")) { CONFIG_CMD_SET(cmd, dirconf, H2_CONF_COPY_FILES, 0); return NULL; } return "value must be On or Off"; } static void add_push(apr_array_header_t **plist, apr_pool_t *pool, h2_push_res *push) { h2_push_res *new; if (!*plist) { *plist = apr_array_make(pool, 10, sizeof(*push)); } new = apr_array_push(*plist); new->uri_ref = push->uri_ref; new->critical = push->critical; } static const char *h2_conf_add_push_res(cmd_parms *cmd, void *dirconf, const char *arg1, const char *arg2, const char *arg3) { h2_push_res push; const char *last = arg3; memset(&push, 0, sizeof(push)); if (!strcasecmp("add", arg1)) { push.uri_ref = arg2; } else { push.uri_ref = arg1; last = arg2; if (arg3) { return "too many parameter"; } } if (last) { if (!strcasecmp("critical", last)) { push.critical = 1; } else { return "unknown last parameter"; } } if (cmd->path) { add_push(&(((h2_dir_config*)dirconf)->push_list), cmd->pool, &push); } else { add_push(&(h2_config_sget(cmd->server)->push_list), cmd->pool, &push); } return NULL; } static const char *h2_conf_set_early_hints(cmd_parms *cmd, void *dirconf, const char *value) { int val; if (!strcasecmp(value, "On")) val = 1; else if (!strcasecmp(value, "Off")) val = 0; else return "value must be On or Off"; CONFIG_CMD_SET(cmd, dirconf, H2_CONF_EARLY_HINTS, val); if (cmd->path) { ap_log_perror(APLOG_MARK, APLOG_WARNING, 0, cmd->pool, "H2EarlyHints = %d on path %s", val, cmd->path); } return NULL; } static const char *h2_conf_set_padding(cmd_parms *cmd, void *dirconf, const char *value) { int val; val = (int)apr_atoi64(value); if (val < 0) { return "number of bits must be >= 0"; } if (val > 8) { return "number of bits must be <= 8"; } CONFIG_CMD_SET(cmd, dirconf, H2_CONF_PADDING_BITS, val); return NULL; } void h2_get_num_workers(server_rec *s, int *minw, int *maxw) { int threads_per_child = 0; *minw = h2_config_sgeti(s, H2_CONF_MIN_WORKERS); *maxw = h2_config_sgeti(s, H2_CONF_MAX_WORKERS); ap_mpm_query(AP_MPMQ_MAX_THREADS, &threads_per_child); if (*minw <= 0) { *minw = threads_per_child; } if (*maxw <= 0) { /* As a default, this seems to work quite well under mpm_event. * For people enabling http2 under mpm_prefork, start 4 threads unless * configured otherwise. People get unhappy if their http2 requests are * blocking each other. */ *maxw = 3 * (*minw) / 2; if (*maxw < 4) { *maxw = 4; } } } #define AP_END_CMD AP_INIT_TAKE1(NULL, NULL, NULL, RSRC_CONF, NULL) const command_rec h2_cmds[] = { AP_INIT_TAKE1("H2MaxSessionStreams", h2_conf_set_max_streams, NULL, RSRC_CONF, "maximum number of open streams per session"), AP_INIT_TAKE1("H2WindowSize", h2_conf_set_window_size, NULL, RSRC_CONF, "window size on client DATA"), AP_INIT_TAKE1("H2MinWorkers", h2_conf_set_min_workers, NULL, RSRC_CONF, "minimum number of worker threads per child"), AP_INIT_TAKE1("H2MaxWorkers", h2_conf_set_max_workers, NULL, RSRC_CONF, "maximum number of worker threads per child"), AP_INIT_TAKE1("H2MaxWorkerIdleSeconds", h2_conf_set_max_worker_idle_secs, NULL, RSRC_CONF, "maximum number of idle seconds before a worker shuts down"), AP_INIT_TAKE1("H2StreamMaxMemSize", h2_conf_set_stream_max_mem_size, NULL, RSRC_CONF, "maximum number of bytes buffered in memory for a stream"), AP_INIT_TAKE1("H2AltSvc", h2_add_alt_svc, NULL, RSRC_CONF, "adds an Alt-Svc for this server"), AP_INIT_TAKE1("H2AltSvcMaxAge", h2_conf_set_alt_svc_max_age, NULL, RSRC_CONF, "set the maximum age (in seconds) that client can rely on alt-svc information"), AP_INIT_TAKE1("H2SerializeHeaders", h2_conf_set_serialize_headers, NULL, RSRC_CONF, "on to enable header serialization for compatibility"), AP_INIT_TAKE1("H2ModernTLSOnly", h2_conf_set_modern_tls_only, NULL, RSRC_CONF, "off to not impose RFC 7540 restrictions on TLS"), AP_INIT_TAKE1("H2Upgrade", h2_conf_set_upgrade, NULL, RSRC_CONF|OR_AUTHCFG, "on to allow HTTP/1 Upgrades to h2/h2c"), AP_INIT_TAKE1("H2Direct", h2_conf_set_direct, NULL, RSRC_CONF, "on to enable direct HTTP/2 mode"), AP_INIT_TAKE1("H2SessionExtraFiles", h2_conf_set_session_extra_files, NULL, RSRC_CONF, "number of extra file a session might keep open (obsolete)"), AP_INIT_TAKE1("H2TLSWarmUpSize", h2_conf_set_tls_warmup_size, NULL, RSRC_CONF, "number of bytes on TLS connection before doing max writes"), AP_INIT_TAKE1("H2TLSCoolDownSecs", h2_conf_set_tls_cooldown_secs, NULL, RSRC_CONF, "seconds of idle time on TLS before shrinking writes"), AP_INIT_TAKE1("H2Push", h2_conf_set_push, NULL, RSRC_CONF|OR_AUTHCFG, "off to disable HTTP/2 server push"), AP_INIT_TAKE23("H2PushPriority", h2_conf_add_push_priority, NULL, RSRC_CONF, "define priority of PUSHed resources per content type"), AP_INIT_TAKE1("H2PushDiarySize", h2_conf_set_push_diary_size, NULL, RSRC_CONF, "size of push diary"), AP_INIT_TAKE1("H2CopyFiles", h2_conf_set_copy_files, NULL, OR_FILEINFO, "on to perform copy of file data"), AP_INIT_TAKE123("H2PushResource", h2_conf_add_push_res, NULL, OR_FILEINFO|OR_AUTHCFG, "add a resource to be pushed in this location/on this server."), AP_INIT_TAKE1("H2EarlyHints", h2_conf_set_early_hints, NULL, RSRC_CONF, "on to enable interim status 103 responses"), AP_INIT_TAKE1("H2Padding", h2_conf_set_padding, NULL, RSRC_CONF, "set payload padding"), AP_END_CMD }; httpd-2.4.41/modules/http2/h2_from_h1.c0000644000000000000500000007604013442215451016045 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include #include #include #include #include "h2_private.h" #include "h2_headers.h" #include "h2_from_h1.h" #include "h2_task.h" #include "h2_util.h" /* This routine is called by apr_table_do and merges all instances of * the passed field values into a single array that will be further * processed by some later routine. Originally intended to help split * and recombine multiple Vary fields, though it is generic to any field * consisting of comma/space-separated tokens. */ static int uniq_field_values(void *d, const char *key, const char *val) { apr_array_header_t *values; char *start; char *e; char **strpp; int i; (void)key; values = (apr_array_header_t *)d; e = apr_pstrdup(values->pool, val); do { /* Find a non-empty fieldname */ while (*e == ',' || apr_isspace(*e)) { ++e; } if (*e == '\0') { break; } start = e; while (*e != '\0' && *e != ',' && !apr_isspace(*e)) { ++e; } if (*e != '\0') { *e++ = '\0'; } /* Now add it to values if it isn't already represented. * Could be replaced by a ap_array_strcasecmp() if we had one. */ for (i = 0, strpp = (char **) values->elts; i < values->nelts; ++i, ++strpp) { if (*strpp && apr_strnatcasecmp(*strpp, start) == 0) { break; } } if (i == values->nelts) { /* if not found */ *(char **)apr_array_push(values) = start; } } while (*e != '\0'); return 1; } /* * Since some clients choke violently on multiple Vary fields, or * Vary fields with duplicate tokens, combine any multiples and remove * any duplicates. */ static void fix_vary(request_rec *r) { apr_array_header_t *varies; varies = apr_array_make(r->pool, 5, sizeof(char *)); /* Extract all Vary fields from the headers_out, separate each into * its comma-separated fieldname values, and then add them to varies * if not already present in the array. */ apr_table_do(uniq_field_values, varies, r->headers_out, "Vary", NULL); /* If we found any, replace old Vary fields with unique-ified value */ if (varies->nelts > 0) { apr_table_setn(r->headers_out, "Vary", apr_array_pstrcat(r->pool, varies, ',')); } } static void set_basic_http_header(apr_table_t *headers, request_rec *r, apr_pool_t *pool) { char *date = NULL; const char *proxy_date = NULL; const char *server = NULL; const char *us = ap_get_server_banner(); /* * keep the set-by-proxy server and date headers, otherwise * generate a new server header / date header */ if (r && r->proxyreq != PROXYREQ_NONE) { proxy_date = apr_table_get(r->headers_out, "Date"); if (!proxy_date) { /* * proxy_date needs to be const. So use date for the creation of * our own Date header and pass it over to proxy_date later to * avoid a compiler warning. */ date = apr_palloc(pool, APR_RFC822_DATE_LEN); ap_recent_rfc822_date(date, r->request_time); } server = apr_table_get(r->headers_out, "Server"); } else { date = apr_palloc(pool, APR_RFC822_DATE_LEN); ap_recent_rfc822_date(date, r? r->request_time : apr_time_now()); } apr_table_setn(headers, "Date", proxy_date ? proxy_date : date ); if (r) { apr_table_unset(r->headers_out, "Date"); } if (!server && *us) { server = us; } if (server) { apr_table_setn(headers, "Server", server); if (r) { apr_table_unset(r->headers_out, "Server"); } } } static int copy_header(void *ctx, const char *name, const char *value) { apr_table_t *headers = ctx; apr_table_add(headers, name, value); return 1; } static h2_headers *create_response(h2_task *task, request_rec *r) { const char *clheader; const char *ctype; apr_table_t *headers; /* * Now that we are ready to send a response, we need to combine the two * header field tables into a single table. If we don't do this, our * later attempts to set or unset a given fieldname might be bypassed. */ if (!apr_is_empty_table(r->err_headers_out)) { r->headers_out = apr_table_overlay(r->pool, r->err_headers_out, r->headers_out); apr_table_clear(r->err_headers_out); } /* * Remove the 'Vary' header field if the client can't handle it. * Since this will have nasty effects on HTTP/1.1 caches, force * the response into HTTP/1.0 mode. */ if (apr_table_get(r->subprocess_env, "force-no-vary") != NULL) { apr_table_unset(r->headers_out, "Vary"); r->proto_num = HTTP_VERSION(1,0); apr_table_setn(r->subprocess_env, "force-response-1.0", "1"); } else { fix_vary(r); } /* * Now remove any ETag response header field if earlier processing * says so (such as a 'FileETag None' directive). */ if (apr_table_get(r->notes, "no-etag") != NULL) { apr_table_unset(r->headers_out, "ETag"); } /* determine the protocol and whether we should use keepalives. */ ap_set_keepalive(r); if (AP_STATUS_IS_HEADER_ONLY(r->status)) { apr_table_unset(r->headers_out, "Transfer-Encoding"); apr_table_unset(r->headers_out, "Content-Length"); r->content_type = r->content_encoding = NULL; r->content_languages = NULL; r->clength = r->chunked = 0; } else if (r->chunked) { apr_table_mergen(r->headers_out, "Transfer-Encoding", "chunked"); apr_table_unset(r->headers_out, "Content-Length"); } ctype = ap_make_content_type(r, r->content_type); if (ctype) { apr_table_setn(r->headers_out, "Content-Type", ctype); } if (r->content_encoding) { apr_table_setn(r->headers_out, "Content-Encoding", r->content_encoding); } if (!apr_is_empty_array(r->content_languages)) { unsigned int i; char *token; char **languages = (char **)(r->content_languages->elts); const char *field = apr_table_get(r->headers_out, "Content-Language"); while (field && (token = ap_get_list_item(r->pool, &field)) != NULL) { for (i = 0; i < r->content_languages->nelts; ++i) { if (!apr_strnatcasecmp(token, languages[i])) break; } if (i == r->content_languages->nelts) { *((char **) apr_array_push(r->content_languages)) = token; } } field = apr_array_pstrcat(r->pool, r->content_languages, ','); apr_table_setn(r->headers_out, "Content-Language", field); } /* * Control cachability for non-cachable responses if not already set by * some other part of the server configuration. */ if (r->no_cache && !apr_table_get(r->headers_out, "Expires")) { char *date = apr_palloc(r->pool, APR_RFC822_DATE_LEN); ap_recent_rfc822_date(date, r->request_time); apr_table_add(r->headers_out, "Expires", date); } /* This is a hack, but I can't find anyway around it. The idea is that * we don't want to send out 0 Content-Lengths if it is a head request. * This happens when modules try to outsmart the server, and return * if they see a HEAD request. Apache 1.3 handlers were supposed to * just return in that situation, and the core handled the HEAD. In * 2.0, if a handler returns, then the core sends an EOS bucket down * the filter stack, and the content-length filter computes a C-L of * zero and that gets put in the headers, and we end up sending a * zero C-L to the client. We can't just remove the C-L filter, * because well behaved 2.0 handlers will send their data down the stack, * and we will compute a real C-L for the head request. RBB */ if (r->header_only && (clheader = apr_table_get(r->headers_out, "Content-Length")) && !strcmp(clheader, "0")) { apr_table_unset(r->headers_out, "Content-Length"); } headers = apr_table_make(r->pool, 10); set_basic_http_header(headers, r, r->pool); if (r->status == HTTP_NOT_MODIFIED) { apr_table_do(copy_header, headers, r->headers_out, "ETag", "Content-Location", "Expires", "Cache-Control", "Vary", "Warning", "WWW-Authenticate", "Proxy-Authenticate", "Set-Cookie", "Set-Cookie2", NULL); } else { apr_table_do(copy_header, headers, r->headers_out, NULL); } return h2_headers_rcreate(r, r->status, headers, r->pool); } typedef enum { H2_RP_STATUS_LINE, H2_RP_HEADER_LINE, H2_RP_DONE } h2_rp_state_t; typedef struct h2_response_parser { h2_rp_state_t state; h2_task *task; int http_status; apr_array_header_t *hlines; apr_bucket_brigade *tmp; } h2_response_parser; static apr_status_t parse_header(h2_response_parser *parser, char *line) { const char *hline; if (line[0] == ' ' || line[0] == '\t') { char **plast; /* continuation line from the header before this */ while (line[0] == ' ' || line[0] == '\t') { ++line; } plast = apr_array_pop(parser->hlines); if (plast == NULL) { /* not well formed */ return APR_EINVAL; } hline = apr_psprintf(parser->task->pool, "%s %s", *plast, line); } else { /* new header line */ hline = apr_pstrdup(parser->task->pool, line); } APR_ARRAY_PUSH(parser->hlines, const char*) = hline; return APR_SUCCESS; } static apr_status_t get_line(h2_response_parser *parser, apr_bucket_brigade *bb, char *line, apr_size_t len) { h2_task *task = parser->task; apr_status_t status; if (!parser->tmp) { parser->tmp = apr_brigade_create(task->pool, task->c->bucket_alloc); } status = apr_brigade_split_line(parser->tmp, bb, APR_BLOCK_READ, HUGE_STRING_LEN); if (status == APR_SUCCESS) { --len; status = apr_brigade_flatten(parser->tmp, line, &len); if (status == APR_SUCCESS) { /* we assume a non-0 containing line and remove trailing crlf. */ line[len] = '\0'; if (len >= 2 && !strcmp(H2_CRLF, line + len - 2)) { len -= 2; line[len] = '\0'; apr_brigade_cleanup(parser->tmp); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, task->c, "h2_task(%s): read response line: %s", task->id, line); } else { /* this does not look like a complete line yet */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, task->c, "h2_task(%s): read response, incomplete line: %s", task->id, line); return APR_EAGAIN; } } } apr_brigade_cleanup(parser->tmp); return status; } static apr_table_t *make_table(h2_response_parser *parser) { h2_task *task = parser->task; apr_array_header_t *hlines = parser->hlines; if (hlines) { apr_table_t *headers = apr_table_make(task->pool, hlines->nelts); int i; for (i = 0; i < hlines->nelts; ++i) { char *hline = ((char **)hlines->elts)[i]; char *sep = ap_strchr(hline, ':'); if (!sep) { ap_log_cerror(APLOG_MARK, APLOG_WARNING, APR_EINVAL, task->c, APLOGNO(02955) "h2_task(%s): invalid header[%d] '%s'", task->id, i, (char*)hline); /* not valid format, abort */ return NULL; } (*sep++) = '\0'; while (*sep == ' ' || *sep == '\t') { ++sep; } if (!h2_util_ignore_header(hline)) { apr_table_merge(headers, hline, sep); } } return headers; } else { return apr_table_make(task->pool, 0); } } static apr_status_t pass_response(h2_task *task, ap_filter_t *f, h2_response_parser *parser) { apr_bucket *b; apr_status_t status; h2_headers *response = h2_headers_create(parser->http_status, make_table(parser), NULL, 0, task->pool); apr_brigade_cleanup(parser->tmp); b = h2_bucket_headers_create(task->c->bucket_alloc, response); APR_BRIGADE_INSERT_TAIL(parser->tmp, b); b = apr_bucket_flush_create(task->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(parser->tmp, b); status = ap_pass_brigade(f->next, parser->tmp); apr_brigade_cleanup(parser->tmp); /* reset parser for possible next response */ parser->state = H2_RP_STATUS_LINE; apr_array_clear(parser->hlines); if (response->status >= 200) { task->output.sent_response = 1; } ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, task->c, APLOGNO(03197) "h2_task(%s): passed response %d", task->id, response->status); return status; } static apr_status_t parse_status(h2_task *task, char *line) { h2_response_parser *parser = task->output.rparser; int sindex = (apr_date_checkmask(line, "HTTP/#.# ###*")? 9 : (apr_date_checkmask(line, "HTTP/# ###*")? 7 : 0)); if (sindex > 0) { int k = sindex + 3; char keepchar = line[k]; line[k] = '\0'; parser->http_status = atoi(&line[sindex]); line[k] = keepchar; parser->state = H2_RP_HEADER_LINE; return APR_SUCCESS; } /* Seems like there is garbage on the connection. May be a leftover * from a previous proxy request. * This should only happen if the H2_RESPONSE filter is not yet in * place (post_read_request has not been reached and the handler wants * to write something. Probably just the interim response we are * waiting for. But if there is other data hanging around before * that, this needs to fail. */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, task->c, APLOGNO(03467) "h2_task(%s): unable to parse status line: %s", task->id, line); return APR_EINVAL; } apr_status_t h2_from_h1_parse_response(h2_task *task, ap_filter_t *f, apr_bucket_brigade *bb) { h2_response_parser *parser = task->output.rparser; char line[HUGE_STRING_LEN]; apr_status_t status = APR_SUCCESS; if (!parser) { parser = apr_pcalloc(task->pool, sizeof(*parser)); parser->task = task; parser->state = H2_RP_STATUS_LINE; parser->hlines = apr_array_make(task->pool, 10, sizeof(char *)); task->output.rparser = parser; } while (!APR_BRIGADE_EMPTY(bb) && status == APR_SUCCESS) { switch (parser->state) { case H2_RP_STATUS_LINE: case H2_RP_HEADER_LINE: status = get_line(parser, bb, line, sizeof(line)); if (status == APR_EAGAIN) { /* need more data */ return APR_SUCCESS; } else if (status != APR_SUCCESS) { return status; } if (parser->state == H2_RP_STATUS_LINE) { /* instead of parsing, just take it directly */ status = parse_status(task, line); } else if (line[0] == '\0') { /* end of headers, pass response onward */ ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, f->c, "h2_task(%s): end of response", task->id); return pass_response(task, f, parser); } else { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, f->c, "h2_task(%s): response header %s", task->id, line); status = parse_header(parser, line); } break; default: return status; } } return status; } apr_status_t h2_filter_headers_out(ap_filter_t *f, apr_bucket_brigade *bb) { h2_task *task = f->ctx; request_rec *r = f->r; apr_bucket *b, *bresp, *body_bucket = NULL, *next; ap_bucket_error *eb = NULL; h2_headers *response = NULL; int headers_passing = 0; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, f->c, "h2_task(%s): output_filter called", task->id); if (!task->output.sent_response && !f->c->aborted) { /* check, if we need to send the response now. Until we actually * see a DATA bucket or some EOS/EOR, we do not do so. */ for (b = APR_BRIGADE_FIRST(bb); b != APR_BRIGADE_SENTINEL(bb); b = APR_BUCKET_NEXT(b)) { if (AP_BUCKET_IS_ERROR(b) && !eb) { eb = b->data; } else if (AP_BUCKET_IS_EOC(b)) { /* If we see an EOC bucket it is a signal that we should get out * of the way doing nothing. */ ap_remove_output_filter(f); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, f->c, "h2_task(%s): eoc bucket passed", task->id); return ap_pass_brigade(f->next, bb); } else if (H2_BUCKET_IS_HEADERS(b)) { headers_passing = 1; } else if (!APR_BUCKET_IS_FLUSH(b)) { body_bucket = b; break; } } if (eb) { int st = eb->status; ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, f->c, APLOGNO(03047) "h2_task(%s): err bucket status=%d", task->id, st); /* throw everything away and replace it with the error response * generated by ap_die() */ apr_brigade_cleanup(bb); ap_die(st, r); return AP_FILTER_ERROR; } if (body_bucket || !headers_passing) { /* time to insert the response bucket before the body or if * no h2_headers is passed, e.g. the response is empty */ response = create_response(task, r); if (response == NULL) { ap_log_cerror(APLOG_MARK, APLOG_NOTICE, 0, f->c, APLOGNO(03048) "h2_task(%s): unable to create response", task->id); return APR_ENOMEM; } bresp = h2_bucket_headers_create(f->c->bucket_alloc, response); if (body_bucket) { APR_BUCKET_INSERT_BEFORE(body_bucket, bresp); } else { APR_BRIGADE_INSERT_HEAD(bb, bresp); } task->output.sent_response = 1; r->sent_bodyct = 1; } } if (r->header_only || AP_STATUS_IS_HEADER_ONLY(r->status)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, f->c, "h2_task(%s): headers only, cleanup output brigade", task->id); b = body_bucket? body_bucket : APR_BRIGADE_FIRST(bb); while (b != APR_BRIGADE_SENTINEL(bb)) { next = APR_BUCKET_NEXT(b); if (APR_BUCKET_IS_EOS(b) || AP_BUCKET_IS_EOR(b)) { break; } if (!H2_BUCKET_IS_HEADERS(b)) { APR_BUCKET_REMOVE(b); apr_bucket_destroy(b); } b = next; } } else if (task->output.sent_response) { /* lets get out of the way, our task is done */ ap_remove_output_filter(f); } return ap_pass_brigade(f->next, bb); } static void make_chunk(h2_task *task, apr_bucket_brigade *bb, apr_bucket *first, apr_off_t chunk_len, apr_bucket *tail) { /* Surround the buckets [first, tail[ with new buckets carrying the * HTTP/1.1 chunked encoding format. If tail is NULL, the chunk extends * to the end of the brigade. */ char buffer[128]; apr_bucket *c; int len; len = apr_snprintf(buffer, H2_ALEN(buffer), "%"APR_UINT64_T_HEX_FMT"\r\n", (apr_uint64_t)chunk_len); c = apr_bucket_heap_create(buffer, len, NULL, bb->bucket_alloc); APR_BUCKET_INSERT_BEFORE(first, c); c = apr_bucket_heap_create("\r\n", 2, NULL, bb->bucket_alloc); if (tail) { APR_BUCKET_INSERT_BEFORE(tail, c); } else { APR_BRIGADE_INSERT_TAIL(bb, c); } task->input.chunked_total += chunk_len; ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, task->c, "h2_task(%s): added chunk %ld, total %ld", task->id, (long)chunk_len, (long)task->input.chunked_total); } static int ser_header(void *ctx, const char *name, const char *value) { apr_bucket_brigade *bb = ctx; apr_brigade_printf(bb, NULL, NULL, "%s: %s\r\n", name, value); return 1; } static apr_status_t read_and_chunk(ap_filter_t *f, h2_task *task, apr_read_type_e block) { request_rec *r = f->r; apr_status_t status = APR_SUCCESS; apr_bucket_brigade *bb = task->input.bbchunk; if (!bb) { bb = apr_brigade_create(r->pool, f->c->bucket_alloc); task->input.bbchunk = bb; } if (APR_BRIGADE_EMPTY(bb)) { apr_bucket *b, *next, *first_data = NULL; apr_bucket_brigade *tmp; apr_off_t bblen = 0; /* get more data from the lower layer filters. Always do this * in larger pieces, since we handle the read modes ourself. */ status = ap_get_brigade(f->next, bb, AP_MODE_READBYTES, block, 32*1024); if (status == APR_EOF) { if (!task->input.eos) { status = apr_brigade_puts(bb, NULL, NULL, "0\r\n\r\n"); task->input.eos = 1; return APR_SUCCESS; } ap_remove_input_filter(f); return status; } else if (status != APR_SUCCESS) { return status; } for (b = APR_BRIGADE_FIRST(bb); b != APR_BRIGADE_SENTINEL(bb) && !task->input.eos; b = next) { next = APR_BUCKET_NEXT(b); if (APR_BUCKET_IS_METADATA(b)) { if (first_data) { make_chunk(task, bb, first_data, bblen, b); first_data = NULL; } if (H2_BUCKET_IS_HEADERS(b)) { h2_headers *headers = h2_bucket_headers_get(b); ap_assert(headers); ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "h2_task(%s): receiving trailers", task->id); tmp = apr_brigade_split_ex(bb, b, NULL); if (!apr_is_empty_table(headers->headers)) { status = apr_brigade_puts(bb, NULL, NULL, "0\r\n"); apr_table_do(ser_header, bb, headers->headers, NULL); status = apr_brigade_puts(bb, NULL, NULL, "\r\n"); } else { status = apr_brigade_puts(bb, NULL, NULL, "0\r\n\r\n"); } r->trailers_in = apr_table_clone(r->pool, headers->headers); APR_BUCKET_REMOVE(b); apr_bucket_destroy(b); APR_BRIGADE_CONCAT(bb, tmp); apr_brigade_destroy(tmp); task->input.eos = 1; } else if (APR_BUCKET_IS_EOS(b)) { tmp = apr_brigade_split_ex(bb, b, NULL); status = apr_brigade_puts(bb, NULL, NULL, "0\r\n\r\n"); APR_BRIGADE_CONCAT(bb, tmp); apr_brigade_destroy(tmp); task->input.eos = 1; } } else if (b->length == 0) { APR_BUCKET_REMOVE(b); apr_bucket_destroy(b); } else { if (!first_data) { first_data = b; bblen = 0; } bblen += b->length; } } if (first_data) { make_chunk(task, bb, first_data, bblen, NULL); } } return status; } apr_status_t h2_filter_request_in(ap_filter_t* f, apr_bucket_brigade* bb, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { h2_task *task = f->ctx; request_rec *r = f->r; apr_status_t status = APR_SUCCESS; apr_bucket *b, *next; core_server_config *conf = (core_server_config *) ap_get_module_config(r->server->module_config, &core_module); ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, f->r, "h2_task(%s): request filter, exp=%d", task->id, r->expecting_100); if (!task->request->chunked) { status = ap_get_brigade(f->next, bb, mode, block, readbytes); /* pipe data through, just take care of trailers */ for (b = APR_BRIGADE_FIRST(bb); b != APR_BRIGADE_SENTINEL(bb); b = next) { next = APR_BUCKET_NEXT(b); if (H2_BUCKET_IS_HEADERS(b)) { h2_headers *headers = h2_bucket_headers_get(b); ap_assert(headers); ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "h2_task(%s): receiving trailers", task->id); r->trailers_in = headers->headers; if (conf && conf->merge_trailers == AP_MERGE_TRAILERS_ENABLE) { r->headers_in = apr_table_overlay(r->pool, r->headers_in, r->trailers_in); } APR_BUCKET_REMOVE(b); apr_bucket_destroy(b); ap_remove_input_filter(f); if (headers->raw_bytes && h2_task_logio_add_bytes_in) { h2_task_logio_add_bytes_in(task->c, headers->raw_bytes); } break; } } return status; } /* Things are more complicated. The standard HTTP input filter, which * does a lot what we do not want to duplicate, also cares about chunked * transfer encoding and trailers. * We need to simulate chunked encoding for it to be happy. */ if ((status = read_and_chunk(f, task, block)) != APR_SUCCESS) { return status; } if (mode == AP_MODE_EXHAUSTIVE) { /* return all we have */ APR_BRIGADE_CONCAT(bb, task->input.bbchunk); } else if (mode == AP_MODE_READBYTES) { status = h2_brigade_concat_length(bb, task->input.bbchunk, readbytes); } else if (mode == AP_MODE_SPECULATIVE) { status = h2_brigade_copy_length(bb, task->input.bbchunk, readbytes); } else if (mode == AP_MODE_GETLINE) { /* we are reading a single LF line, e.g. the HTTP headers. * this has the nasty side effect to split the bucket, even * though it ends with CRLF and creates a 0 length bucket */ status = apr_brigade_split_line(bb, task->input.bbchunk, block, HUGE_STRING_LEN); if (APLOGctrace1(f->c)) { char buffer[1024]; apr_size_t len = sizeof(buffer)-1; apr_brigade_flatten(bb, buffer, &len); buffer[len] = 0; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, status, f->c, "h2_task(%s): getline: %s", task->id, buffer); } } else { /* Hmm, well. There is mode AP_MODE_EATCRLF, but we chose not * to support it. Seems to work. */ ap_log_cerror(APLOG_MARK, APLOG_ERR, APR_ENOTIMPL, f->c, APLOGNO(02942) "h2_task, unsupported READ mode %d", mode); status = APR_ENOTIMPL; } h2_util_bb_log(f->c, task->stream_id, APLOG_TRACE2, "forwarding input", bb); return status; } apr_status_t h2_filter_trailers_out(ap_filter_t *f, apr_bucket_brigade *bb) { h2_task *task = f->ctx; request_rec *r = f->r; apr_bucket *b, *e; if (task && r) { /* Detect the EOS/EOR bucket and forward any trailers that may have * been set to our h2_headers. */ for (b = APR_BRIGADE_FIRST(bb); b != APR_BRIGADE_SENTINEL(bb); b = APR_BUCKET_NEXT(b)) { if ((APR_BUCKET_IS_EOS(b) || AP_BUCKET_IS_EOR(b)) && r->trailers_out && !apr_is_empty_table(r->trailers_out)) { h2_headers *headers; apr_table_t *trailers; ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, f->c, APLOGNO(03049) "h2_task(%s): sending trailers", task->id); trailers = apr_table_clone(r->pool, r->trailers_out); headers = h2_headers_rcreate(r, HTTP_OK, trailers, r->pool); e = h2_bucket_headers_create(bb->bucket_alloc, headers); APR_BUCKET_INSERT_BEFORE(b, e); apr_table_clear(r->trailers_out); ap_remove_output_filter(f); break; } } } return ap_pass_brigade(f->next, bb); } httpd-2.4.41/modules/http2/h2_bucket_beam.h0000644000000000000500000003711613237611704016764 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef h2_bucket_beam_h #define h2_bucket_beam_h struct apr_thread_mutex_t; struct apr_thread_cond_t; /******************************************************************************* * apr_bucket list without bells and whistles ******************************************************************************/ /** * h2_blist can hold a list of buckets just like apr_bucket_brigade, but * does not to any allocations or related features. */ typedef struct { APR_RING_HEAD(h2_bucket_list, apr_bucket) list; } h2_blist; #define H2_BLIST_INIT(b) APR_RING_INIT(&(b)->list, apr_bucket, link); #define H2_BLIST_SENTINEL(b) APR_RING_SENTINEL(&(b)->list, apr_bucket, link) #define H2_BLIST_EMPTY(b) APR_RING_EMPTY(&(b)->list, apr_bucket, link) #define H2_BLIST_FIRST(b) APR_RING_FIRST(&(b)->list) #define H2_BLIST_LAST(b) APR_RING_LAST(&(b)->list) #define H2_BLIST_INSERT_HEAD(b, e) do { \ apr_bucket *ap__b = (e); \ APR_RING_INSERT_HEAD(&(b)->list, ap__b, apr_bucket, link); \ } while (0) #define H2_BLIST_INSERT_TAIL(b, e) do { \ apr_bucket *ap__b = (e); \ APR_RING_INSERT_TAIL(&(b)->list, ap__b, apr_bucket, link); \ } while (0) #define H2_BLIST_CONCAT(a, b) do { \ APR_RING_CONCAT(&(a)->list, &(b)->list, apr_bucket, link); \ } while (0) #define H2_BLIST_PREPEND(a, b) do { \ APR_RING_PREPEND(&(a)->list, &(b)->list, apr_bucket, link); \ } while (0) /******************************************************************************* * h2_bucket_beam ******************************************************************************/ /** * A h2_bucket_beam solves the task of transferring buckets, esp. their data, * across threads with zero buffer copies. * * When a thread, let's call it the sender thread, wants to send buckets to * another, the green thread, it creates a h2_bucket_beam and adds buckets * via the h2_beam_send(). It gives the beam to the green thread which then * can receive buckets into its own brigade via h2_beam_receive(). * * Sending and receiving can happen concurrently. * * The beam can limit the amount of data it accepts via the buffer_size. This * can also be adjusted during its lifetime. Sends and receives can be done blocking. * A timeout can be set for such blocks. * * Care needs to be taken when terminating the beam. The beam registers at * the pool it was created with and will cleanup after itself. However, if * received buckets do still exist, already freed memory might be accessed. * The beam does a assertion on this condition. * * The proper way of shutting down a beam is to first make sure there are no * more green buckets out there, then cleanup the beam to purge eventually * still existing sender buckets and then, possibly, terminate the beam itself * (or the pool it was created with). * * The following restrictions apply to bucket transport: * - only EOS and FLUSH meta buckets are copied through. All other meta buckets * are kept in the beams hold. * - all kind of data buckets are transported through: * - transient buckets are converted to heap ones on send * - heap and pool buckets require no extra handling * - buckets with indeterminate length are read on send * - file buckets will transfer the file itself into a new bucket, if allowed * - all other buckets are read on send to make sure data is present * * This assures that when the sender thread sends its sender buckets, the data * is made accessible while still on the sender side. The sender bucket then enters * the beams hold storage. * When the green thread calls receive, sender buckets in the hold are wrapped * into special beam buckets. Beam buckets on read present the data directly * from the internal sender one, but otherwise live on the green side. When a * beam bucket gets destroyed, it notifies its beam that the corresponding * sender bucket from the hold may be destroyed. * Since the destruction of green buckets happens in the green thread, any * corresponding sender bucket can not immediately be destroyed, as that would * result in race conditions. * Instead, the beam transfers such sender buckets from the hold to the purge * storage. Next time there is a call from the sender side, the buckets in * purge will be deleted. * * There are callbacks that can be registesender with a beam: * - a "consumed" callback that gets called on the sender side with the * amount of data that has been received by the green side. The amount * is a delta from the last callback invocation. The sender side can trigger * these callbacks by calling h2_beam_send() with a NULL brigade. * - a "can_beam_file" callback that can prohibit the transfer of file handles * through the beam. This will cause file buckets to be read on send and * its data buffer will then be transports just like a heap bucket would. * When no callback is registered, no restrictions apply and all files are * passed through. * File handles transfersender to the green side will stay there until the * receiving brigade's pool is destroyed/cleared. If the pool lives very * long or if many different files are beamed, the process might run out * of available file handles. * * The name "beam" of course is inspired by good old transporter * technology where humans are kept inside the transporter's memory * buffers until the transmission is complete. Star gates use a similar trick. */ typedef void h2_beam_mutex_leave(void *ctx, struct apr_thread_mutex_t *lock); typedef struct { apr_thread_mutex_t *mutex; h2_beam_mutex_leave *leave; void *leave_ctx; } h2_beam_lock; typedef struct h2_bucket_beam h2_bucket_beam; typedef apr_status_t h2_beam_mutex_enter(void *ctx, h2_beam_lock *pbl); typedef void h2_beam_io_callback(void *ctx, h2_bucket_beam *beam, apr_off_t bytes); typedef void h2_beam_ev_callback(void *ctx, h2_bucket_beam *beam); typedef struct h2_beam_proxy h2_beam_proxy; typedef struct { APR_RING_HEAD(h2_beam_proxy_list, h2_beam_proxy) list; } h2_bproxy_list; typedef int h2_beam_can_beam_callback(void *ctx, h2_bucket_beam *beam, apr_file_t *file); typedef enum { H2_BEAM_OWNER_SEND, H2_BEAM_OWNER_RECV } h2_beam_owner_t; /** * Will deny all transfer of apr_file_t across the beam and force * a data copy instead. */ int h2_beam_no_files(void *ctx, h2_bucket_beam *beam, apr_file_t *file); struct h2_bucket_beam { int id; const char *tag; apr_pool_t *pool; h2_beam_owner_t owner; h2_blist send_list; h2_blist hold_list; h2_blist purge_list; apr_bucket_brigade *recv_buffer; h2_bproxy_list proxies; apr_pool_t *send_pool; apr_pool_t *recv_pool; apr_size_t max_buf_size; apr_interval_time_t timeout; apr_off_t sent_bytes; /* amount of bytes send */ apr_off_t received_bytes; /* amount of bytes received */ apr_size_t buckets_sent; /* # of beam buckets sent */ apr_size_t files_beamed; /* how many file handles have been set aside */ unsigned int aborted : 1; unsigned int closed : 1; unsigned int close_sent : 1; unsigned int tx_mem_limits : 1; /* only memory size counts on transfers */ struct apr_thread_mutex_t *lock; struct apr_thread_cond_t *change; apr_off_t cons_bytes_reported; /* amount of bytes reported as consumed */ h2_beam_ev_callback *cons_ev_cb; h2_beam_io_callback *cons_io_cb; void *cons_ctx; apr_off_t prod_bytes_reported; /* amount of bytes reported as produced */ h2_beam_io_callback *prod_io_cb; void *prod_ctx; h2_beam_can_beam_callback *can_beam_fn; void *can_beam_ctx; }; /** * Creates a new bucket beam for transfer of buckets across threads. * * The pool the beam is created with will be protected by the given * mutex and will be used in multiple threads. It needs a pool allocator * that is only used inside that same mutex. * * @param pbeam will hold the created beam on return * @param pool pool owning the beam, beam will cleanup when pool released * @param id identifier of the beam * @param tag tag identifying beam for logging * @param owner if the beam is owned by the sender or receiver, e.g. if * the pool owner is using this beam for sending or receiving * @param buffer_size maximum memory footprint of buckets buffered in beam, or * 0 for no limitation * @param timeout timeout for blocking operations */ apr_status_t h2_beam_create(h2_bucket_beam **pbeam, apr_pool_t *pool, int id, const char *tag, h2_beam_owner_t owner, apr_size_t buffer_size, apr_interval_time_t timeout); /** * Destroys the beam immediately without cleanup. */ apr_status_t h2_beam_destroy(h2_bucket_beam *beam); /** * Send buckets from the given brigade through the beam. Will hold buckets * internally as long as they have not been processed by the receiving side. * All accepted buckets are removed from the given brigade. Will return with * APR_EAGAIN on non-blocking sends when not all buckets could be accepted. * * Call from the sender side only. */ apr_status_t h2_beam_send(h2_bucket_beam *beam, apr_bucket_brigade *bb, apr_read_type_e block); /** * Register the pool from which future buckets are send. This defines * the lifetime of the buckets, e.g. the pool should not be cleared/destroyed * until the data is no longer needed (or has been received). */ void h2_beam_send_from(h2_bucket_beam *beam, apr_pool_t *p); /** * Receive buckets from the beam into the given brigade. Will return APR_EOF * when reading past an EOS bucket. Reads can be blocking until data is * available or the beam has been closed. Non-blocking calls return APR_EAGAIN * if no data is available. * * Call from the receiver side only. */ apr_status_t h2_beam_receive(h2_bucket_beam *beam, apr_bucket_brigade *green_buckets, apr_read_type_e block, apr_off_t readbytes); /** * Determine if beam is empty. */ int h2_beam_empty(h2_bucket_beam *beam); /** * Determine if beam has handed out proxy buckets that are not destroyed. */ int h2_beam_holds_proxies(h2_bucket_beam *beam); /** * Abort the beam. Will cleanup any buffered buckets and answer all send * and receives with APR_ECONNABORTED. * * Call from the sender side only. */ void h2_beam_abort(h2_bucket_beam *beam); /** * Close the beam. Sending an EOS bucket serves the same purpose. * * Call from the sender side only. */ apr_status_t h2_beam_close(h2_bucket_beam *beam); /** * Receives leaves the beam, e.g. will no longer read. This will * interrupt any sender blocked writing and fail future send. * * Call from the receiver side only. */ apr_status_t h2_beam_leave(h2_bucket_beam *beam); int h2_beam_is_closed(h2_bucket_beam *beam); /** * Return APR_SUCCESS when all buckets in transit have been handled. * When called with APR_BLOCK_READ and a mutex set, will wait until the green * side has consumed all data. Otherwise APR_EAGAIN is returned. * With clear_buffers set, any queued data is discarded. * If a timeout is set on the beam, waiting might also time out and * return APR_ETIMEUP. * * Call from the sender side only. */ apr_status_t h2_beam_wait_empty(h2_bucket_beam *beam, apr_read_type_e block); /** * Set/get the timeout for blocking read/write operations. Only works * if a mutex has been set for the beam. */ void h2_beam_timeout_set(h2_bucket_beam *beam, apr_interval_time_t timeout); apr_interval_time_t h2_beam_timeout_get(h2_bucket_beam *beam); /** * Set/get the maximum buffer size for beam data (memory footprint). */ void h2_beam_buffer_size_set(h2_bucket_beam *beam, apr_size_t buffer_size); apr_size_t h2_beam_buffer_size_get(h2_bucket_beam *beam); /** * Register a callback to be invoked on the sender side with the * amount of bytes that have been consumed by the receiver, since the * last callback invocation or reset. * @param beam the beam to set the callback on * @param ev_cb the callback or NULL, called when bytes are consumed * @param io_cb the callback or NULL, called on sender with bytes consumed * @param ctx the context to use in callback invocation * * Call from the sender side, io callbacks invoked on sender side, ev callback * from any side. */ void h2_beam_on_consumed(h2_bucket_beam *beam, h2_beam_ev_callback *ev_cb, h2_beam_io_callback *io_cb, void *ctx); /** * Call any registered consumed handler, if any changes have happened * since the last invocation. * @return !=0 iff a handler has been called * * Needs to be invoked from the sending side. */ int h2_beam_report_consumption(h2_bucket_beam *beam); /** * Register a callback to be invoked on the receiver side with the * amount of bytes that have been produces by the sender, since the * last callback invocation or reset. * @param beam the beam to set the callback on * @param io_cb the callback or NULL, called on receiver with bytes produced * @param ctx the context to use in callback invocation * * Call from the receiver side, callbacks invoked on either side. */ void h2_beam_on_produced(h2_bucket_beam *beam, h2_beam_io_callback *io_cb, void *ctx); /** * Register a callback that may prevent a file from being beam as * file handle, forcing the file content to be copied. Then no callback * is set (NULL), file handles are transferred directly. * @param beam the beam to set the callback on * @param io_cb the callback or NULL, called on receiver with bytes produced * @param ctx the context to use in callback invocation * * Call from the receiver side, callbacks invoked on either side. */ void h2_beam_on_file_beam(h2_bucket_beam *beam, h2_beam_can_beam_callback *cb, void *ctx); /** * Get the amount of bytes currently buffered in the beam (unread). */ apr_off_t h2_beam_get_buffered(h2_bucket_beam *beam); /** * Get the memory used by the buffered buckets, approximately. */ apr_off_t h2_beam_get_mem_used(h2_bucket_beam *beam); /** * Return != 0 iff (some) data from the beam has been received. */ int h2_beam_was_received(h2_bucket_beam *beam); apr_size_t h2_beam_get_files_beamed(h2_bucket_beam *beam); typedef apr_bucket *h2_bucket_beamer(h2_bucket_beam *beam, apr_bucket_brigade *dest, const apr_bucket *src); void h2_register_bucket_beamer(h2_bucket_beamer *beamer); void h2_beam_log(h2_bucket_beam *beam, conn_rec *c, int level, const char *msg); #endif /* h2_bucket_beam_h */ httpd-2.4.41/modules/http2/h2_stream.h0000644000000000000500000002657613520520073016017 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_stream__ #define __mod_h2__h2_stream__ #include "h2.h" /** * A HTTP/2 stream, e.g. a client request+response in HTTP/1.1 terms. * * A stream always belongs to a h2_session, the one managing the * connection to the client. The h2_session writes to the h2_stream, * adding HEADERS and DATA and finally an EOS. When headers are done, * h2_stream is scheduled for handling, which is expected to produce * a response h2_headers at least. * * The h2_headers may be followed by more h2_headers (interim responses) and * by DATA frames read from the h2_stream until EOS is reached. Trailers * are send when a last h2_headers is received. This always closes the stream * output. */ struct h2_mplx; struct h2_priority; struct h2_request; struct h2_headers; struct h2_session; struct h2_task; struct h2_bucket_beam; typedef struct h2_stream h2_stream; typedef void h2_stream_state_cb(void *ctx, h2_stream *stream); typedef void h2_stream_event_cb(void *ctx, h2_stream *stream, h2_stream_event_t ev); /** * Callback structure for events and stream state transisitions */ typedef struct h2_stream_monitor { void *ctx; h2_stream_state_cb *on_state_enter; /* called when a state is entered */ h2_stream_state_cb *on_state_invalid; /* called when an invalid state change was detected */ h2_stream_event_cb *on_state_event; /* called right before the given event result in a new stream state */ h2_stream_event_cb *on_event; /* called for events that do not trigger a state change */ } h2_stream_monitor; struct h2_stream { int id; /* http2 stream identifier */ int initiated_on; /* initiating stream id (PUSH) or 0 */ apr_pool_t *pool; /* the memory pool for this stream */ struct h2_session *session; /* the session this stream belongs to */ h2_stream_state_t state; /* state of this stream */ apr_time_t created; /* when stream was created */ const struct h2_request *request; /* the request made in this stream */ struct h2_request *rtmp; /* request being assembled */ apr_table_t *trailers; /* optional incoming trailers */ int request_headers_added; /* number of request headers added */ struct h2_bucket_beam *input; apr_bucket_brigade *in_buffer; int in_window_size; apr_time_t in_last_write; struct h2_bucket_beam *output; apr_bucket_brigade *out_buffer; apr_size_t max_mem; /* maximum amount of data buffered */ int rst_error; /* stream error for RST_STREAM */ unsigned int aborted : 1; /* was aborted */ unsigned int scheduled : 1; /* stream has been scheduled */ unsigned int has_response : 1; /* response headers are known */ unsigned int input_eof : 1; /* no more request data coming */ unsigned int out_checked : 1; /* output eof was double checked */ unsigned int push_policy; /* which push policy to use for this request */ struct h2_task *task; /* assigned task to fullfill request */ const h2_priority *pref_priority; /* preferred priority for this stream */ apr_off_t out_frames; /* # of frames sent out */ apr_off_t out_frame_octets; /* # of RAW frame octets sent out */ apr_off_t out_data_frames; /* # of DATA frames sent */ apr_off_t out_data_octets; /* # of DATA octets (payload) sent */ apr_off_t in_data_frames; /* # of DATA frames received */ apr_off_t in_data_octets; /* # of DATA octets (payload) received */ apr_off_t in_trailer_octets; /* # of HEADER octets (payload) received in trailers */ h2_stream_monitor *monitor; /* optional monitor for stream states */ }; #define H2_STREAM_RST(s, def) (s->rst_error? s->rst_error : (def)) /** * Create a stream in H2_SS_IDLE state. * @param id the stream identifier * @param pool the memory pool to use for this stream * @param session the session this stream belongs to * @param monitor an optional monitor to be called for events and * state transisitions * @param initiated_on the id of the stream this one was initiated on (PUSH) * * @return the newly opened stream */ h2_stream *h2_stream_create(int id, apr_pool_t *pool, struct h2_session *session, h2_stream_monitor *monitor, int initiated_on); /** * Destroy memory pool if still owned by the stream. */ void h2_stream_destroy(h2_stream *stream); /** * Prepare the stream so that processing may start. * * This is the time to allocated resources not needed before. * * @param stream the stream to prep */ apr_status_t h2_stream_prep_processing(h2_stream *stream); /* * Set a new monitor for this stream, replacing any existing one. Can * be called with NULL to have no monitor installed. */ void h2_stream_set_monitor(h2_stream *stream, h2_stream_monitor *monitor); /** * Dispatch (handle) an event on the given stream. * @param stream the streama the event happened on * @param ev the type of event */ void h2_stream_dispatch(h2_stream *stream, h2_stream_event_t ev); /** * Cleanup references into requst processing. * * @param stream the stream to cleanup */ void h2_stream_cleanup(h2_stream *stream); /** * Notify the stream that amount bytes have been consumed of its input * since the last invocation of this method (delta amount). */ apr_status_t h2_stream_in_consumed(h2_stream *stream, apr_off_t amount); /** * Set complete stream headers from given h2_request. * * @param stream stream to write request to * @param r the request with all the meta data * @param eos != 0 iff stream input is closed */ void h2_stream_set_request(h2_stream *stream, const h2_request *r); /** * Set complete stream header from given request_rec. * * @param stream stream to write request to * @param r the request with all the meta data * @param eos != 0 iff stream input is closed */ apr_status_t h2_stream_set_request_rec(h2_stream *stream, request_rec *r, int eos); /* * Add a HTTP/2 header (including pseudo headers) or trailer * to the given stream, depending on stream state. * * @param stream stream to write the header to * @param name the name of the HTTP/2 header * @param nlen the number of characters in name * @param value the header value * @param vlen the number of characters in value */ apr_status_t h2_stream_add_header(h2_stream *stream, const char *name, size_t nlen, const char *value, size_t vlen); /* End the contruction of request headers */ apr_status_t h2_stream_end_headers(h2_stream *stream, int eos, size_t raw_bytes); apr_status_t h2_stream_send_frame(h2_stream *stream, int frame_type, int flags, size_t frame_len); apr_status_t h2_stream_recv_frame(h2_stream *stream, int frame_type, int flags, size_t frame_len); /* * Process a frame of received DATA. * * @param stream stream to write the data to * @param flags the frame flags * @param data the beginning of the bytes to write * @param len the number of bytes to write */ apr_status_t h2_stream_recv_DATA(h2_stream *stream, uint8_t flags, const uint8_t *data, size_t len); apr_status_t h2_stream_flush_input(h2_stream *stream); /** * Reset the stream. Stream write/reads will return errors afterwards. * * @param stream the stream to reset * @param error_code the HTTP/2 error code */ void h2_stream_rst(h2_stream *stream, int error_code); /** * Determine if stream was closed already. This is true for * states H2_SS_CLOSED, H2_SS_CLEANUP. But not true * for H2_SS_CLOSED_L and H2_SS_CLOSED_R. * * @param stream the stream to check on * @return != 0 iff stream has been closed */ int h2_stream_was_closed(const h2_stream *stream); /** * Do a speculative read on the stream output to determine the * amount of data that can be read. * * @param stream the stream to speculatively read from * @param plen (in-/out) number of bytes requested and on return amount of bytes that * may be read without blocking * @param peos (out) != 0 iff end of stream will be reached when reading plen * bytes (out value). * @param presponse (out) the response of one became available * @return APR_SUCCESS if out information was computed successfully. * APR_EAGAIN if not data is available and end of stream has not been * reached yet. */ apr_status_t h2_stream_out_prepare(h2_stream *stream, apr_off_t *plen, int *peos, h2_headers **presponse); /** * Read a maximum number of bytes into the bucket brigade. * * @param stream the stream to read from * @param bb the brigade to append output to * @param plen (in-/out) max. number of bytes to append and on return actual * number of bytes appended to brigade * @param peos (out) != 0 iff end of stream has been reached while reading * @return APR_SUCCESS if out information was computed successfully. * APR_EAGAIN if not data is available and end of stream has not been * reached yet. */ apr_status_t h2_stream_read_to(h2_stream *stream, apr_bucket_brigade *bb, apr_off_t *plen, int *peos); /** * Get optional trailers for this stream, may be NULL. Meaningful * results can only be expected when the end of the response body has * been reached. * * @param stream to ask for trailers * @return trailers for NULL */ apr_table_t *h2_stream_get_trailers(h2_stream *stream); /** * Submit any server push promises on this stream and schedule * the tasks connection with these. * * @param stream the stream for which to submit */ apr_status_t h2_stream_submit_pushes(h2_stream *stream, h2_headers *response); /** * Get priority information set for this stream. */ const struct h2_priority *h2_stream_get_priority(h2_stream *stream, h2_headers *response); /** * Return a textual representation of the stream state as in RFC 7540 * nomenclator, all caps, underscores. */ const char *h2_stream_state_str(h2_stream *stream); /** * Determine if stream is ready for submitting a response or a RST * @param stream the stream to check */ int h2_stream_is_ready(h2_stream *stream); #define H2_STRM_MSG(s, msg) \ "h2_stream(%ld-%d,%s): "msg, s->session->id, s->id, h2_stream_state_str(s) #define H2_STRM_LOG(aplogno, s, msg) aplogno H2_STRM_MSG(s, msg) #endif /* defined(__mod_h2__h2_stream__) */ httpd-2.4.41/modules/http2/h2_version.h0000644000000000000500000000254013520520073016172 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_h2_h2_version_h #define mod_h2_h2_version_h #undef PACKAGE_VERSION #undef PACKAGE_TARNAME #undef PACKAGE_STRING #undef PACKAGE_NAME #undef PACKAGE_BUGREPORT /** * @macro * Version number of the http2 module as c string */ #define MOD_HTTP2_VERSION "1.15.4" /** * @macro * Numerical representation of the version number of the http2 module * release. This is a 24 bit number with 8 bits for major number, 8 bits * for minor and 8 bits for patch. Version 1.2.3 becomes 0x010203. */ #define MOD_HTTP2_VERSION_NUM 0x010f04 #endif /* mod_h2_h2_version_h */ httpd-2.4.41/modules/http2/h2_task.c0000644000000000000500000006004513520520073015446 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include "h2_private.h" #include "h2.h" #include "h2_bucket_beam.h" #include "h2_conn.h" #include "h2_config.h" #include "h2_ctx.h" #include "h2_from_h1.h" #include "h2_h2.h" #include "h2_mplx.h" #include "h2_request.h" #include "h2_headers.h" #include "h2_session.h" #include "h2_stream.h" #include "h2_task.h" #include "h2_util.h" static void H2_TASK_OUT_LOG(int lvl, h2_task *task, apr_bucket_brigade *bb, const char *tag) { if (APLOG_C_IS_LEVEL(task->c, lvl)) { conn_rec *c = task->c; char buffer[4 * 1024]; const char *line = "(null)"; apr_size_t len, bmax = sizeof(buffer)/sizeof(buffer[0]); len = h2_util_bb_print(buffer, bmax, tag, "", bb); ap_log_cerror(APLOG_MARK, lvl, 0, c, "bb_dump(%s): %s", task->id, len? buffer : line); } } /******************************************************************************* * task input handling ******************************************************************************/ static int input_ser_header(void *ctx, const char *name, const char *value) { h2_task *task = ctx; apr_brigade_printf(task->input.bb, NULL, NULL, "%s: %s\r\n", name, value); return 1; } /******************************************************************************* * task output handling ******************************************************************************/ static apr_status_t open_output(h2_task *task) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, task->c, APLOGNO(03348) "h2_task(%s): open output to %s %s %s", task->id, task->request->method, task->request->authority, task->request->path); task->output.opened = 1; return h2_mplx_out_open(task->mplx, task->stream_id, task->output.beam); } static apr_status_t send_out(h2_task *task, apr_bucket_brigade* bb, int block) { apr_off_t written, left; apr_status_t status; apr_brigade_length(bb, 0, &written); H2_TASK_OUT_LOG(APLOG_TRACE2, task, bb, "h2_task send_out"); h2_beam_log(task->output.beam, task->c, APLOG_TRACE2, "send_out(before)"); status = h2_beam_send(task->output.beam, bb, block? APR_BLOCK_READ : APR_NONBLOCK_READ); h2_beam_log(task->output.beam, task->c, APLOG_TRACE2, "send_out(after)"); if (APR_STATUS_IS_EAGAIN(status)) { apr_brigade_length(bb, 0, &left); written -= left; status = APR_SUCCESS; } if (status == APR_SUCCESS) { if (h2_task_logio_add_bytes_out) { h2_task_logio_add_bytes_out(task->c, written); } ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, task->c, "h2_task(%s): send_out done", task->id); } else { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, task->c, "h2_task(%s): send_out (%ld bytes)", task->id, (long)written); } return status; } /* Bring the data from the brigade (which represents the result of the * request_rec out filter chain) into the h2_mplx for further sending * on the master connection. */ static apr_status_t slave_out(h2_task *task, ap_filter_t* f, apr_bucket_brigade* bb) { apr_bucket *b; apr_status_t rv = APR_SUCCESS; int flush = 0, blocking; send: /* we send block once we opened the output, so someone is there reading it */ blocking = task->output.opened; for (b = APR_BRIGADE_FIRST(bb); b != APR_BRIGADE_SENTINEL(bb); b = APR_BUCKET_NEXT(b)) { if (APR_BUCKET_IS_FLUSH(b) || APR_BUCKET_IS_EOS(b) || AP_BUCKET_IS_EOR(b)) { flush = 1; break; } } if (task->output.bb && !APR_BRIGADE_EMPTY(task->output.bb)) { /* still have data buffered from previous attempt. * setaside and append new data and try to pass the complete data */ if (!APR_BRIGADE_EMPTY(bb)) { if (APR_SUCCESS != (rv = ap_save_brigade(f, &task->output.bb, &bb, task->pool))) { goto out; } } rv = send_out(task, task->output.bb, blocking); } else { /* no data buffered previously, pass brigade directly */ rv = send_out(task, bb, blocking); if (APR_SUCCESS == rv && !APR_BRIGADE_EMPTY(bb)) { /* output refused to buffer it all, time to open? */ if (!task->output.opened && APR_SUCCESS == (rv = open_output(task))) { /* Make another attempt to send the data. With the output open, * the call might be blocking and send all data, so we do not need * to save the brigade */ goto send; } else if (blocking && flush) { /* Need to keep on doing this. */ goto send; } if (APR_SUCCESS == rv) { /* could not write all, buffer the rest */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, rv, task->c, APLOGNO(03405) "h2_slave_out(%s): saving brigade", task->id); ap_assert(NULL); rv = ap_save_brigade(f, &task->output.bb, &bb, task->pool); flush = 1; } } } if (APR_SUCCESS == rv && !task->output.opened && flush) { /* got a flush or could not write all, time to tell someone to read */ rv = open_output(task); } out: ap_log_cerror(APLOG_MARK, APLOG_TRACE2, rv, task->c, "h2_slave_out(%s): slave_out leave", task->id); return rv; } static apr_status_t output_finish(h2_task *task) { if (!task->output.opened) { return open_output(task); } return APR_SUCCESS; } /******************************************************************************* * task slave connection filters ******************************************************************************/ static apr_status_t h2_filter_slave_in(ap_filter_t* f, apr_bucket_brigade* bb, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { h2_task *task; apr_status_t status = APR_SUCCESS; apr_bucket *b, *next; apr_off_t bblen; const int trace1 = APLOGctrace1(f->c); apr_size_t rmax = ((readbytes <= APR_SIZE_MAX)? (apr_size_t)readbytes : APR_SIZE_MAX); task = h2_ctx_get_task(f->c); ap_assert(task); if (trace1) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, f->c, "h2_slave_in(%s): read, mode=%d, block=%d, readbytes=%ld", task->id, mode, block, (long)readbytes); } if (mode == AP_MODE_INIT) { return ap_get_brigade(f->c->input_filters, bb, mode, block, readbytes); } if (f->c->aborted) { return APR_ECONNABORTED; } if (!task->input.bb) { return APR_EOF; } /* Cleanup brigades from those nasty 0 length non-meta buckets * that apr_brigade_split_line() sometimes produces. */ for (b = APR_BRIGADE_FIRST(task->input.bb); b != APR_BRIGADE_SENTINEL(task->input.bb); b = next) { next = APR_BUCKET_NEXT(b); if (b->length == 0 && !APR_BUCKET_IS_METADATA(b)) { apr_bucket_delete(b); } } while (APR_BRIGADE_EMPTY(task->input.bb)) { /* Get more input data for our request. */ if (trace1) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, status, f->c, "h2_slave_in(%s): get more data from mplx, block=%d, " "readbytes=%ld", task->id, block, (long)readbytes); } if (task->input.beam) { status = h2_beam_receive(task->input.beam, task->input.bb, block, 128*1024); } else { status = APR_EOF; } if (trace1) { ap_log_cerror(APLOG_MARK, APLOG_TRACE2, status, f->c, "h2_slave_in(%s): read returned", task->id); } if (APR_STATUS_IS_EAGAIN(status) && (mode == AP_MODE_GETLINE || block == APR_BLOCK_READ)) { /* chunked input handling does not seem to like it if we * return with APR_EAGAIN from a GETLINE read... * upload 100k test on test-ser.example.org hangs */ status = APR_SUCCESS; } else if (APR_STATUS_IS_EOF(status)) { break; } else if (status != APR_SUCCESS) { return status; } if (trace1) { h2_util_bb_log(f->c, task->stream_id, APLOG_TRACE2, "input.beam recv raw", task->input.bb); } if (h2_task_logio_add_bytes_in) { apr_brigade_length(bb, 0, &bblen); h2_task_logio_add_bytes_in(f->c, bblen); } } /* Nothing there, no more data to get. Return. */ if (status == APR_EOF && APR_BRIGADE_EMPTY(task->input.bb)) { return status; } if (trace1) { h2_util_bb_log(f->c, task->stream_id, APLOG_TRACE2, "task_input.bb", task->input.bb); } if (APR_BRIGADE_EMPTY(task->input.bb)) { if (trace1) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, f->c, "h2_slave_in(%s): no data", task->id); } return (block == APR_NONBLOCK_READ)? APR_EAGAIN : APR_EOF; } if (mode == AP_MODE_EXHAUSTIVE) { /* return all we have */ APR_BRIGADE_CONCAT(bb, task->input.bb); } else if (mode == AP_MODE_READBYTES) { status = h2_brigade_concat_length(bb, task->input.bb, rmax); } else if (mode == AP_MODE_SPECULATIVE) { status = h2_brigade_copy_length(bb, task->input.bb, rmax); } else if (mode == AP_MODE_GETLINE) { /* we are reading a single LF line, e.g. the HTTP headers. * this has the nasty side effect to split the bucket, even * though it ends with CRLF and creates a 0 length bucket */ status = apr_brigade_split_line(bb, task->input.bb, block, HUGE_STRING_LEN); if (APLOGctrace1(f->c)) { char buffer[1024]; apr_size_t len = sizeof(buffer)-1; apr_brigade_flatten(bb, buffer, &len); buffer[len] = 0; if (trace1) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, status, f->c, "h2_slave_in(%s): getline: %s", task->id, buffer); } } } else { /* Hmm, well. There is mode AP_MODE_EATCRLF, but we chose not * to support it. Seems to work. */ ap_log_cerror(APLOG_MARK, APLOG_ERR, APR_ENOTIMPL, f->c, APLOGNO(03472) "h2_slave_in(%s), unsupported READ mode %d", task->id, mode); status = APR_ENOTIMPL; } if (trace1) { apr_brigade_length(bb, 0, &bblen); ap_log_cerror(APLOG_MARK, APLOG_TRACE1, status, f->c, "h2_slave_in(%s): %ld data bytes", task->id, (long)bblen); } return status; } static apr_status_t h2_filter_slave_output(ap_filter_t* filter, apr_bucket_brigade* brigade) { h2_task *task = h2_ctx_get_task(filter->c); apr_status_t status; ap_assert(task); status = slave_out(task, filter, brigade); if (status != APR_SUCCESS) { h2_task_rst(task, H2_ERR_INTERNAL_ERROR); } return status; } static apr_status_t h2_filter_parse_h1(ap_filter_t* f, apr_bucket_brigade* bb) { h2_task *task = h2_ctx_get_task(f->c); apr_status_t status; ap_assert(task); /* There are cases where we need to parse a serialized http/1.1 * response. One example is a 100-continue answer in serialized mode * or via a mod_proxy setup */ while (bb && !task->output.sent_response) { status = h2_from_h1_parse_response(task, f, bb); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, status, f->c, "h2_task(%s): parsed response", task->id); if (APR_BRIGADE_EMPTY(bb) || status != APR_SUCCESS) { return status; } } return ap_pass_brigade(f->next, bb); } /******************************************************************************* * task things ******************************************************************************/ int h2_task_can_redo(h2_task *task) { if (task->input.beam && h2_beam_was_received(task->input.beam)) { /* cannot repeat that. */ return 0; } return (!strcmp("GET", task->request->method) || !strcmp("HEAD", task->request->method) || !strcmp("OPTIONS", task->request->method)); } int h2_task_has_started(h2_task *task) { return task && task->started_at != 0; } void h2_task_redo(h2_task *task) { task->started_at = 0; task->worker_done = 0; task->rst_error = 0; } void h2_task_rst(h2_task *task, int error) { task->rst_error = error; if (task->input.beam) { h2_beam_leave(task->input.beam); } if (!task->worker_done) { h2_beam_abort(task->output.beam); } if (task->c) { task->c->aborted = 1; } } /******************************************************************************* * Register various hooks */ static const char *const mod_ssl[] = { "mod_ssl.c", NULL}; static int h2_task_pre_conn(conn_rec* c, void *arg); static int h2_task_process_conn(conn_rec* c); APR_OPTIONAL_FN_TYPE(ap_logio_add_bytes_in) *h2_task_logio_add_bytes_in; APR_OPTIONAL_FN_TYPE(ap_logio_add_bytes_out) *h2_task_logio_add_bytes_out; void h2_task_register_hooks(void) { /* This hook runs on new connections before mod_ssl has a say. * Its purpose is to prevent mod_ssl from touching our pseudo-connections * for streams. */ ap_hook_pre_connection(h2_task_pre_conn, NULL, mod_ssl, APR_HOOK_FIRST); /* When the connection processing actually starts, we might * take over, if the connection is for a task. */ ap_hook_process_connection(h2_task_process_conn, NULL, NULL, APR_HOOK_FIRST); ap_register_input_filter("H2_SLAVE_IN", h2_filter_slave_in, NULL, AP_FTYPE_NETWORK); ap_register_output_filter("H2_SLAVE_OUT", h2_filter_slave_output, NULL, AP_FTYPE_NETWORK); ap_register_output_filter("H2_PARSE_H1", h2_filter_parse_h1, NULL, AP_FTYPE_NETWORK); ap_register_input_filter("H2_REQUEST", h2_filter_request_in, NULL, AP_FTYPE_PROTOCOL); ap_register_output_filter("H2_RESPONSE", h2_filter_headers_out, NULL, AP_FTYPE_PROTOCOL); ap_register_output_filter("H2_TRAILERS_OUT", h2_filter_trailers_out, NULL, AP_FTYPE_PROTOCOL); } /* post config init */ apr_status_t h2_task_init(apr_pool_t *pool, server_rec *s) { h2_task_logio_add_bytes_in = APR_RETRIEVE_OPTIONAL_FN(ap_logio_add_bytes_in); h2_task_logio_add_bytes_out = APR_RETRIEVE_OPTIONAL_FN(ap_logio_add_bytes_out); return APR_SUCCESS; } static int h2_task_pre_conn(conn_rec* c, void *arg) { h2_ctx *ctx; if (!c->master) { return OK; } ctx = h2_ctx_get(c, 0); (void)arg; if (ctx->task) { ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, c, "h2_slave(%s), pre_connection, adding filters", c->log_id); ap_add_input_filter("H2_SLAVE_IN", NULL, NULL, c); ap_add_output_filter("H2_PARSE_H1", NULL, NULL, c); ap_add_output_filter("H2_SLAVE_OUT", NULL, NULL, c); } return OK; } h2_task *h2_task_create(conn_rec *slave, int stream_id, const h2_request *req, h2_mplx *m, h2_bucket_beam *input, apr_interval_time_t timeout, apr_size_t output_max_mem) { apr_pool_t *pool; h2_task *task; ap_assert(slave); ap_assert(req); apr_pool_create(&pool, slave->pool); apr_pool_tag(pool, "h2_task"); task = apr_pcalloc(pool, sizeof(h2_task)); if (task == NULL) { return NULL; } task->id = "000"; task->stream_id = stream_id; task->c = slave; task->mplx = m; task->pool = pool; task->request = req; task->timeout = timeout; task->input.beam = input; task->output.max_buffer = output_max_mem; return task; } void h2_task_destroy(h2_task *task) { if (task->output.beam) { h2_beam_destroy(task->output.beam); task->output.beam = NULL; } if (task->eor) { apr_bucket_destroy(task->eor); } if (task->pool) { apr_pool_destroy(task->pool); } } apr_status_t h2_task_do(h2_task *task, apr_thread_t *thread, int worker_id) { conn_rec *c; ap_assert(task); c = task->c; task->worker_started = 1; if (c->master) { /* Each conn_rec->id is supposed to be unique at a point in time. Since * some modules (and maybe external code) uses this id as an identifier * for the request_rec they handle, it needs to be unique for slave * connections also. * The connection id is generated by the MPM and most MPMs use the formula * id := (child_num * max_threads) + thread_num * which means that there is a maximum id of about * idmax := max_child_count * max_threads * If we assume 2024 child processes with 2048 threads max, we get * idmax ~= 2024 * 2048 = 2 ** 22 * On 32 bit systems, we have not much space left, but on 64 bit systems * (and higher?) we can use the upper 32 bits without fear of collision. * 32 bits is just what we need, since a connection can only handle so * many streams. */ int slave_id, free_bits; task->id = apr_psprintf(task->pool, "%ld-%d", c->master->id, task->stream_id); if (sizeof(unsigned long) >= 8) { free_bits = 32; slave_id = task->stream_id; } else { /* Assume we have a more limited number of threads/processes * and h2 workers on a 32-bit system. Use the worker instead * of the stream id. */ free_bits = 8; slave_id = worker_id; } task->c->id = (c->master->id << free_bits)^slave_id; } h2_beam_create(&task->output.beam, c->pool, task->stream_id, "output", H2_BEAM_OWNER_SEND, 0, task->timeout); if (!task->output.beam) { return APR_ENOMEM; } h2_beam_buffer_size_set(task->output.beam, task->output.max_buffer); h2_beam_send_from(task->output.beam, task->pool); h2_ctx_create_for(c, task); apr_table_setn(c->notes, H2_TASK_ID_NOTE, task->id); h2_slave_run_pre_connection(c, ap_get_conn_socket(c)); task->input.bb = apr_brigade_create(task->pool, c->bucket_alloc); if (task->request->serialize) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "h2_task(%s): serialize request %s %s", task->id, task->request->method, task->request->path); apr_brigade_printf(task->input.bb, NULL, NULL, "%s %s HTTP/1.1\r\n", task->request->method, task->request->path); apr_table_do(input_ser_header, task, task->request->headers, NULL); apr_brigade_puts(task->input.bb, NULL, NULL, "\r\n"); } ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "h2_task(%s): process connection", task->id); task->c->current_thread = thread; ap_run_process_connection(c); ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "h2_task(%s): processing done", task->id); return output_finish(task); } static apr_status_t h2_task_process_request(h2_task *task, conn_rec *c) { const h2_request *req = task->request; conn_state_t *cs = c->cs; request_rec *r; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "h2_task(%s): create request_rec", task->id); r = h2_request_create_rec(req, c); if (r && (r->status == HTTP_OK)) { /* set timeouts for virtual host of request */ if (task->timeout != r->server->timeout) { task->timeout = r->server->timeout; h2_beam_timeout_set(task->output.beam, task->timeout); if (task->input.beam) { h2_beam_timeout_set(task->input.beam, task->timeout); } } ap_update_child_status(c->sbh, SERVER_BUSY_WRITE, r); if (cs) { cs->state = CONN_STATE_HANDLER; } ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "h2_task(%s): start process_request", task->id); /* Add the raw bytes of the request (e.g. header frame lengths to * the logio for this request. */ if (req->raw_bytes && h2_task_logio_add_bytes_in) { h2_task_logio_add_bytes_in(c, req->raw_bytes); } ap_process_request(r); ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "h2_task(%s): process_request done", task->id); /* After the call to ap_process_request, the * request pool may have been deleted. We set * r=NULL here to ensure that any dereference * of r that might be added later in this function * will result in a segfault immediately instead * of nondeterministic failures later. */ if (cs) cs->state = CONN_STATE_WRITE_COMPLETION; r = NULL; } else if (!r) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "h2_task(%s): create request_rec failed, r=NULL", task->id); } else { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "h2_task(%s): create request_rec failed, r->status=%d", task->id, r->status); } return APR_SUCCESS; } static int h2_task_process_conn(conn_rec* c) { h2_ctx *ctx; if (!c->master) { return DECLINED; } ctx = h2_ctx_get(c, 0); if (ctx->task) { if (!ctx->task->request->serialize) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "h2_h2, processing request directly"); h2_task_process_request(ctx->task, c); return DONE; } ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "h2_task(%s), serialized handling", ctx->task->id); } else { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "slave_conn(%ld): has no task", c->id); } return DECLINED; } httpd-2.4.41/modules/http2/h2_ctx.c0000644000000000000500000000512213442215451015301 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include "h2_private.h" #include "h2_session.h" #include "h2_task.h" #include "h2_ctx.h" static h2_ctx *h2_ctx_create(const conn_rec *c) { h2_ctx *ctx = apr_pcalloc(c->pool, sizeof(h2_ctx)); ap_assert(ctx); h2_ctx_server_update(ctx, c->base_server); ap_set_module_config(c->conn_config, &http2_module, ctx); return ctx; } void h2_ctx_clear(const conn_rec *c) { ap_assert(c); ap_set_module_config(c->conn_config, &http2_module, NULL); } h2_ctx *h2_ctx_create_for(const conn_rec *c, h2_task *task) { h2_ctx *ctx = h2_ctx_create(c); if (ctx) { ctx->task = task; } return ctx; } h2_ctx *h2_ctx_get(const conn_rec *c, int create) { h2_ctx *ctx = (h2_ctx*)ap_get_module_config(c->conn_config, &http2_module); if (ctx == NULL && create) { ctx = h2_ctx_create(c); } return ctx; } h2_ctx *h2_ctx_rget(const request_rec *r) { return h2_ctx_get(r->connection, 0); } const char *h2_ctx_protocol_get(const conn_rec *c) { h2_ctx *ctx; if (c->master) { c = c->master; } ctx = (h2_ctx*)ap_get_module_config(c->conn_config, &http2_module); return ctx? ctx->protocol : NULL; } h2_ctx *h2_ctx_protocol_set(h2_ctx *ctx, const char *proto) { ctx->protocol = proto; return ctx; } h2_session *h2_ctx_get_session(conn_rec *c) { h2_ctx *ctx = h2_ctx_get(c, 0); return ctx? ctx->session : NULL; } void h2_ctx_session_set(h2_ctx *ctx, struct h2_session *session) { ctx->session = session; } h2_ctx *h2_ctx_server_update(h2_ctx *ctx, server_rec *s) { if (ctx->server != s) { ctx->server = s; } return ctx; } h2_task *h2_ctx_get_task(conn_rec *c) { h2_ctx *ctx = h2_ctx_get(c, 0); return ctx? ctx->task : NULL; } httpd-2.4.41/modules/http2/h2_h2.h0000644000000000000500000000447513442215451015033 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_h2__ #define __mod_h2__h2_h2__ /** * List of ALPN protocol identifiers that we support in cleartext * negotiations. NULL terminated. */ extern const char *h2_clear_protos[]; /** * List of ALPN protocol identifiers that we support in TLS encrypted * negotiations. NULL terminated. */ extern const char *h2_tls_protos[]; /** * Provide a user readable description of the HTTP/2 error code- * @param h2_error http/2 error code, as in rfc 7540, ch. 7 * @return textual description of code or that it is unknown. */ const char *h2_h2_err_description(unsigned int h2_error); /* * One time, post config initialization. */ apr_status_t h2_h2_init(apr_pool_t *pool, server_rec *s); /* Is the connection a TLS connection? */ int h2_h2_is_tls(conn_rec *c); /* Register apache hooks for h2 protocol */ void h2_h2_register_hooks(void); /** * Check if the given connection fulfills the requirements as configured. * @param c the connection * @param require_all != 0 iff any missing connection properties make * the test fail. For example, a cipher might not have been selected while * the handshake is still ongoing. * @return != 0 iff connection requirements are met */ int h2_is_acceptable_connection(conn_rec *c, request_rec *r, int require_all); /** * Check if the "Upgrade" HTTP/1.1 mode of protocol switching is enabled * for the given request. * @param r the request to check * @return != 0 iff Upgrade switching is enabled */ int h2_allows_h2_upgrade(request_rec *r); #endif /* defined(__mod_h2__h2_h2__) */ httpd-2.4.41/modules/http2/h2_workers.h0000644000000000000500000000453213237611704016213 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_workers__ #define __mod_h2__h2_workers__ /* Thread pool specific to executing h2_tasks. Has a minimum and maximum * number of workers it creates. Starts with minimum workers and adds * some on load, reduces the number again when idle. * */ struct apr_thread_mutex_t; struct apr_thread_cond_t; struct h2_mplx; struct h2_request; struct h2_task; struct h2_fifo; struct h2_slot; typedef struct h2_workers h2_workers; struct h2_workers { server_rec *s; apr_pool_t *pool; int next_worker_id; int min_workers; int max_workers; int max_idle_secs; int aborted; int dynamic; apr_threadattr_t *thread_attr; int nslots; struct h2_slot *slots; volatile apr_uint32_t worker_count; struct h2_slot *free; struct h2_slot *idle; struct h2_slot *zombies; struct h2_fifo *mplxs; struct apr_thread_mutex_t *lock; }; /* Create a worker pool with the given minimum and maximum number of * threads. */ h2_workers *h2_workers_create(server_rec *s, apr_pool_t *pool, int min_size, int max_size, int idle_secs); /** * Registers a h2_mplx for task scheduling. If this h2_mplx runs * out of tasks, it will be automatically be unregistered. Should * new tasks arrive, it needs to be registered again. */ apr_status_t h2_workers_register(h2_workers *workers, struct h2_mplx *m); /** * Remove a h2_mplx from the worker registry. */ apr_status_t h2_workers_unregister(h2_workers *workers, struct h2_mplx *m); #endif /* defined(__mod_h2__h2_workers__) */ httpd-2.4.41/modules/http2/h2_request.c0000644000000000000500000002736513442215451016210 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include "h2_private.h" #include "h2_config.h" #include "h2_push.h" #include "h2_request.h" #include "h2_util.h" typedef struct { apr_table_t *headers; apr_pool_t *pool; apr_status_t status; } h1_ctx; static int set_h1_header(void *ctx, const char *key, const char *value) { h1_ctx *x = ctx; x->status = h2_req_add_header(x->headers, x->pool, key, strlen(key), value, strlen(value)); return (x->status == APR_SUCCESS)? 1 : 0; } apr_status_t h2_request_rcreate(h2_request **preq, apr_pool_t *pool, request_rec *r) { h2_request *req; const char *scheme, *authority, *path; h1_ctx x; *preq = NULL; scheme = apr_pstrdup(pool, r->parsed_uri.scheme? r->parsed_uri.scheme : ap_http_scheme(r)); authority = apr_pstrdup(pool, r->hostname); path = apr_uri_unparse(pool, &r->parsed_uri, APR_URI_UNP_OMITSITEPART); if (!r->method || !scheme || !r->hostname || !path) { return APR_EINVAL; } if (!ap_strchr_c(authority, ':') && r->server && r->server->port) { apr_port_t defport = apr_uri_port_of_scheme(scheme); if (defport != r->server->port) { /* port info missing and port is not default for scheme: append */ authority = apr_psprintf(pool, "%s:%d", authority, (int)r->server->port); } } req = apr_pcalloc(pool, sizeof(*req)); req->method = apr_pstrdup(pool, r->method); req->scheme = scheme; req->authority = authority; req->path = path; req->headers = apr_table_make(pool, 10); if (r->server) { req->serialize = h2_config_rgeti(r, H2_CONF_SER_HEADERS); } x.pool = pool; x.headers = req->headers; x.status = APR_SUCCESS; apr_table_do(set_h1_header, &x, r->headers_in, NULL); *preq = req; return x.status; } apr_status_t h2_request_add_header(h2_request *req, apr_pool_t *pool, const char *name, size_t nlen, const char *value, size_t vlen) { apr_status_t status = APR_SUCCESS; if (nlen <= 0) { return status; } if (name[0] == ':') { /* pseudo header, see ch. 8.1.2.3, always should come first */ if (!apr_is_empty_table(req->headers)) { ap_log_perror(APLOG_MARK, APLOG_ERR, 0, pool, APLOGNO(02917) "h2_request: pseudo header after request start"); return APR_EGENERAL; } if (H2_HEADER_METHOD_LEN == nlen && !strncmp(H2_HEADER_METHOD, name, nlen)) { req->method = apr_pstrndup(pool, value, vlen); } else if (H2_HEADER_SCHEME_LEN == nlen && !strncmp(H2_HEADER_SCHEME, name, nlen)) { req->scheme = apr_pstrndup(pool, value, vlen); } else if (H2_HEADER_PATH_LEN == nlen && !strncmp(H2_HEADER_PATH, name, nlen)) { req->path = apr_pstrndup(pool, value, vlen); } else if (H2_HEADER_AUTH_LEN == nlen && !strncmp(H2_HEADER_AUTH, name, nlen)) { req->authority = apr_pstrndup(pool, value, vlen); } else { char buffer[32]; memset(buffer, 0, 32); strncpy(buffer, name, (nlen > 31)? 31 : nlen); ap_log_perror(APLOG_MARK, APLOG_WARNING, 0, pool, APLOGNO(02954) "h2_request: ignoring unknown pseudo header %s", buffer); } } else { /* non-pseudo header, append to work bucket of stream */ status = h2_req_add_header(req->headers, pool, name, nlen, value, vlen); } return status; } apr_status_t h2_request_end_headers(h2_request *req, apr_pool_t *pool, int eos, size_t raw_bytes) { const char *s; /* rfc7540, ch. 8.1.2.3: * - if we have :authority, it overrides any Host header * - :authority MUST be ommited when converting h1->h2, so we * might get a stream without, but then Host needs to be there */ if (!req->authority) { const char *host = apr_table_get(req->headers, "Host"); if (!host) { return APR_BADARG; } req->authority = host; } else { apr_table_setn(req->headers, "Host", req->authority); } s = apr_table_get(req->headers, "Content-Length"); if (!s) { /* HTTP/2 does not need a Content-Length for framing, but our * internal request processing is used to HTTP/1.1, so we * need to either add a Content-Length or a Transfer-Encoding * if any content can be expected. */ if (!eos) { /* We have not seen a content-length and have no eos, * simulate a chunked encoding for our HTTP/1.1 infrastructure, * in case we have "H2SerializeHeaders on" here */ req->chunked = 1; apr_table_mergen(req->headers, "Transfer-Encoding", "chunked"); } else if (apr_table_get(req->headers, "Content-Type")) { /* If we have a content-type, but already seen eos, no more * data will come. Signal a zero content length explicitly. */ apr_table_setn(req->headers, "Content-Length", "0"); } } req->raw_bytes += raw_bytes; return APR_SUCCESS; } h2_request *h2_request_clone(apr_pool_t *p, const h2_request *src) { h2_request *dst = apr_pmemdup(p, src, sizeof(*dst)); dst->method = apr_pstrdup(p, src->method); dst->scheme = apr_pstrdup(p, src->scheme); dst->authority = apr_pstrdup(p, src->authority); dst->path = apr_pstrdup(p, src->path); dst->headers = apr_table_clone(p, src->headers); return dst; } #if !AP_MODULE_MAGIC_AT_LEAST(20150222, 13) static request_rec *my_ap_create_request(conn_rec *c) { apr_pool_t *p; request_rec *r; apr_pool_create(&p, c->pool); apr_pool_tag(p, "request"); r = apr_pcalloc(p, sizeof(request_rec)); AP_READ_REQUEST_ENTRY((intptr_t)r, (uintptr_t)c); r->pool = p; r->connection = c; r->server = c->base_server; r->user = NULL; r->ap_auth_type = NULL; r->allowed_methods = ap_make_method_list(p, 2); r->headers_in = apr_table_make(r->pool, 5); r->trailers_in = apr_table_make(r->pool, 5); r->subprocess_env = apr_table_make(r->pool, 25); r->headers_out = apr_table_make(r->pool, 12); r->err_headers_out = apr_table_make(r->pool, 5); r->trailers_out = apr_table_make(r->pool, 5); r->notes = apr_table_make(r->pool, 5); r->request_config = ap_create_request_config(r->pool); /* Must be set before we run create request hook */ r->proto_output_filters = c->output_filters; r->output_filters = r->proto_output_filters; r->proto_input_filters = c->input_filters; r->input_filters = r->proto_input_filters; ap_run_create_request(r); r->per_dir_config = r->server->lookup_defaults; r->sent_bodyct = 0; /* bytect isn't for body */ r->read_length = 0; r->read_body = REQUEST_NO_BODY; r->status = HTTP_OK; /* Until further notice */ r->header_only = 0; r->the_request = NULL; /* Begin by presuming any module can make its own path_info assumptions, * until some module interjects and changes the value. */ r->used_path_info = AP_REQ_DEFAULT_PATH_INFO; r->useragent_addr = c->client_addr; r->useragent_ip = c->client_ip; return r; } #endif request_rec *h2_request_create_rec(const h2_request *req, conn_rec *c) { int access_status = HTTP_OK; const char *rpath; const char *s; #if AP_MODULE_MAGIC_AT_LEAST(20150222, 13) request_rec *r = ap_create_request(c); #else request_rec *r = my_ap_create_request(c); #endif r->headers_in = apr_table_clone(r->pool, req->headers); ap_run_pre_read_request(r, c); /* Time to populate r with the data we have. */ r->request_time = req->request_time; r->method = apr_pstrdup(r->pool, req->method); /* Provide quick information about the request method as soon as known */ r->method_number = ap_method_number_of(r->method); if (r->method_number == M_GET && r->method[0] == 'H') { r->header_only = 1; } rpath = (req->path ? req->path : ""); ap_parse_uri(r, rpath); r->protocol = (char*)"HTTP/2.0"; r->proto_num = HTTP_VERSION(2, 0); r->the_request = apr_psprintf(r->pool, "%s %s %s", r->method, rpath, r->protocol); /* update what we think the virtual host is based on the headers we've * now read. may update status. * Leave r->hostname empty, vhost will parse if form our Host: header, * otherwise we get complains about port numbers. */ r->hostname = NULL; ap_update_vhost_from_headers(r); /* we may have switched to another server */ r->per_dir_config = r->server->lookup_defaults; s = apr_table_get(r->headers_in, "Expect"); if (s && s[0]) { if (ap_cstr_casecmp(s, "100-continue") == 0) { r->expecting_100 = 1; } else { r->status = HTTP_EXPECTATION_FAILED; ap_send_error_response(r, 0); } } /* * Add the HTTP_IN filter here to ensure that ap_discard_request_body * called by ap_die and by ap_send_error_response works correctly on * status codes that do not cause the connection to be dropped and * in situations where the connection should be kept alive. */ ap_add_input_filter_handle(ap_http_input_filter_handle, NULL, r, r->connection); if (access_status != HTTP_OK || (access_status = ap_run_post_read_request(r))) { /* Request check post hooks failed. An example of this would be a * request for a vhost where h2 is disabled --> 421. */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(03367) "h2_request: access_status=%d, request_create failed", access_status); ap_die(access_status, r); ap_update_child_status(c->sbh, SERVER_BUSY_LOG, r); ap_run_log_transaction(r); r = NULL; goto traceout; } AP_READ_REQUEST_SUCCESS((uintptr_t)r, (char *)r->method, (char *)r->uri, (char *)r->server->defn_name, r->status); return r; traceout: AP_READ_REQUEST_FAILURE((uintptr_t)r); return r; } httpd-2.4.41/modules/http2/mod_proxy_http2.h0000644000000000000500000000154513237611704017270 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __MOD_PROXY_HTTP2_H__ #define __MOD_PROXY_HTTP2_H__ #endif httpd-2.4.41/modules/http2/h2_bucket_eos.h0000644000000000000500000000243213237611704016637 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_http2_h2_bucket_stream_eos_h #define mod_http2_h2_bucket_stream_eos_h struct h2_stream; /** End Of HTTP/2 STREAM (H2EOS) bucket */ extern const apr_bucket_type_t h2_bucket_type_eos; #define H2_BUCKET_IS_H2EOS(e) (e->type == &h2_bucket_type_eos) apr_bucket *h2_bucket_eos_make(apr_bucket *b, struct h2_stream *stream); apr_bucket *h2_bucket_eos_create(apr_bucket_alloc_t *list, struct h2_stream *stream); #endif /* mod_http2_h2_bucket_stream_eos_h */ httpd-2.4.41/modules/http2/h2_switch.h0000644000000000000500000000212313237611704016012 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_switch__ #define __mod_h2__h2_switch__ /* * One time, post config initialization. */ apr_status_t h2_switch_init(apr_pool_t *pool, server_rec *s); /* Register apache hooks for protocol switching */ void h2_switch_register_hooks(void); #endif /* defined(__mod_h2__h2_switch__) */ httpd-2.4.41/modules/http2/mod_http2.h0000644000000000000500000000717513442215451016031 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __MOD_HTTP2_H__ #define __MOD_HTTP2_H__ /** The http2_var_lookup() optional function retrieves HTTP2 environment * variables. */ APR_DECLARE_OPTIONAL_FN(char *, http2_var_lookup, (apr_pool_t *, server_rec *, conn_rec *, request_rec *, char *)); /** An optional function which returns non-zero if the given connection * or its master connection is using HTTP/2. */ APR_DECLARE_OPTIONAL_FN(int, http2_is_h2, (conn_rec *)); /******************************************************************************* * START HTTP/2 request engines (DEPRECATED) ******************************************************************************/ /* The following functions were introduced for the experimental mod_proxy_http2 * support, but have been abandoned since. * They are still declared here for backward compatibiliy, in case someone * tries to build an old mod_proxy_http2 against it, but will disappear * completely sometime in the future. */ struct apr_thread_cond_t; typedef struct h2_req_engine h2_req_engine; typedef void http2_output_consumed(void *ctx, conn_rec *c, apr_off_t consumed); typedef apr_status_t http2_req_engine_init(h2_req_engine *engine, const char *id, const char *type, apr_pool_t *pool, apr_size_t req_buffer_size, request_rec *r, http2_output_consumed **pconsumed, void **pbaton); APR_DECLARE_OPTIONAL_FN(apr_status_t, http2_req_engine_push, (const char *engine_type, request_rec *r, http2_req_engine_init *einit)); APR_DECLARE_OPTIONAL_FN(apr_status_t, http2_req_engine_pull, (h2_req_engine *engine, apr_read_type_e block, int capacity, request_rec **pr)); APR_DECLARE_OPTIONAL_FN(void, http2_req_engine_done, (h2_req_engine *engine, conn_rec *rconn, apr_status_t status)); APR_DECLARE_OPTIONAL_FN(void, http2_get_num_workers, (server_rec *s, int *minw, int *max)); /******************************************************************************* * END HTTP/2 request engines (DEPRECATED) ******************************************************************************/ #endif httpd-2.4.41/modules/http2/h2_config.h0000644000000000000500000000615513442215451015764 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_config_h__ #define __mod_h2__h2_config_h__ #undef PACKAGE_VERSION #undef PACKAGE_TARNAME #undef PACKAGE_STRING #undef PACKAGE_NAME #undef PACKAGE_BUGREPORT typedef enum { H2_CONF_MAX_STREAMS, H2_CONF_WIN_SIZE, H2_CONF_MIN_WORKERS, H2_CONF_MAX_WORKERS, H2_CONF_MAX_WORKER_IDLE_SECS, H2_CONF_STREAM_MAX_MEM, H2_CONF_ALT_SVCS, H2_CONF_ALT_SVC_MAX_AGE, H2_CONF_SER_HEADERS, H2_CONF_DIRECT, H2_CONF_MODERN_TLS_ONLY, H2_CONF_UPGRADE, H2_CONF_TLS_WARMUP_SIZE, H2_CONF_TLS_COOLDOWN_SECS, H2_CONF_PUSH, H2_CONF_PUSH_DIARY_SIZE, H2_CONF_COPY_FILES, H2_CONF_EARLY_HINTS, H2_CONF_PADDING_BITS, H2_CONF_PADDING_ALWAYS, } h2_config_var_t; struct apr_hash_t; struct h2_priority; struct h2_push_res; typedef struct h2_push_res { const char *uri_ref; int critical; } h2_push_res; void *h2_config_create_dir(apr_pool_t *pool, char *x); void *h2_config_merge_dir(apr_pool_t *pool, void *basev, void *addv); void *h2_config_create_svr(apr_pool_t *pool, server_rec *s); void *h2_config_merge_svr(apr_pool_t *pool, void *basev, void *addv); extern const command_rec h2_cmds[]; int h2_config_geti(request_rec *r, server_rec *s, h2_config_var_t var); apr_int64_t h2_config_geti64(request_rec *r, server_rec *s, h2_config_var_t var); /** * Get the configured value for variable at the given connection. */ int h2_config_cgeti(conn_rec *c, h2_config_var_t var); apr_int64_t h2_config_cgeti64(conn_rec *c, h2_config_var_t var); /** * Get the configured value for variable at the given server. */ int h2_config_sgeti(server_rec *s, h2_config_var_t var); apr_int64_t h2_config_sgeti64(server_rec *s, h2_config_var_t var); /** * Get the configured value for variable at the given request, * if configured for the request location. * Fallback to request server config otherwise. */ int h2_config_rgeti(request_rec *r, h2_config_var_t var); apr_int64_t h2_config_rgeti64(request_rec *r, h2_config_var_t var); apr_array_header_t *h2_config_push_list(request_rec *r); apr_array_header_t *h2_config_alt_svcs(request_rec *r); void h2_get_num_workers(server_rec *s, int *minw, int *maxw); void h2_config_init(apr_pool_t *pool); const struct h2_priority *h2_cconfig_get_priority(conn_rec *c, const char *content_type); #endif /* __mod_h2__h2_config_h__ */ httpd-2.4.41/modules/http2/mod_http2.c0000644000000000000500000002670413442215451016023 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include #include "mod_http2.h" #include #include "h2_stream.h" #include "h2_alt_svc.h" #include "h2_conn.h" #include "h2_filter.h" #include "h2_task.h" #include "h2_session.h" #include "h2_config.h" #include "h2_ctx.h" #include "h2_h2.h" #include "h2_mplx.h" #include "h2_push.h" #include "h2_request.h" #include "h2_switch.h" #include "h2_version.h" static void h2_hooks(apr_pool_t *pool); AP_DECLARE_MODULE(http2) = { STANDARD20_MODULE_STUFF, h2_config_create_dir, /* func to create per dir config */ h2_config_merge_dir, /* func to merge per dir config */ h2_config_create_svr, /* func to create per server config */ h2_config_merge_svr, /* func to merge per server config */ h2_cmds, /* command handlers */ h2_hooks, #if defined(AP_MODULE_FLAG_NONE) AP_MODULE_FLAG_ALWAYS_MERGE #endif }; static int h2_h2_fixups(request_rec *r); typedef struct { unsigned int change_prio : 1; unsigned int sha256 : 1; unsigned int inv_headers : 1; unsigned int dyn_windows : 1; } features; static features myfeats; static int mpm_warned; /* The module initialization. Called once as apache hook, before any multi * processing (threaded or not) happens. It is typically at least called twice, * see * http://wiki.apache.org/httpd/ModuleLife * Since the first run is just a "practise" run, we want to initialize for real * only on the second try. This defeats the purpose of the first dry run a bit, * since apache wants to verify that a new configuration actually will work. * So if we have trouble with the configuration, this will only be detected * when the server has already switched. * On the other hand, when we initialize lib nghttp2, all possible crazy things * might happen and this might even eat threads. So, better init on the real * invocation, for now at least. */ static int h2_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { void *data = NULL; const char *mod_h2_init_key = "mod_http2_init_counter"; nghttp2_info *ngh2; apr_status_t status; (void)plog;(void)ptemp; #ifdef H2_NG2_CHANGE_PRIO myfeats.change_prio = 1; #endif #ifdef H2_OPENSSL myfeats.sha256 = 1; #endif #ifdef H2_NG2_INVALID_HEADER_CB myfeats.inv_headers = 1; #endif #ifdef H2_NG2_LOCAL_WIN_SIZE myfeats.dyn_windows = 1; #endif apr_pool_userdata_get(&data, mod_h2_init_key, s->process->pool); if ( data == NULL ) { ap_log_error( APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(03089) "initializing post config dry run"); apr_pool_userdata_set((const void *)1, mod_h2_init_key, apr_pool_cleanup_null, s->process->pool); return APR_SUCCESS; } ngh2 = nghttp2_version(0); ap_log_error( APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(03090) "mod_http2 (v%s, feats=%s%s%s%s, nghttp2 %s), initializing...", MOD_HTTP2_VERSION, myfeats.change_prio? "CHPRIO" : "", myfeats.sha256? "+SHA256" : "", myfeats.inv_headers? "+INVHD" : "", myfeats.dyn_windows? "+DWINS" : "", ngh2? ngh2->version_str : "unknown"); switch (h2_conn_mpm_type()) { case H2_MPM_SIMPLE: case H2_MPM_MOTORZ: case H2_MPM_NETWARE: case H2_MPM_WINNT: /* not sure we need something extra for those. */ break; case H2_MPM_EVENT: case H2_MPM_WORKER: /* all fine, we know these ones */ break; case H2_MPM_PREFORK: /* ok, we now know how to handle that one */ break; case H2_MPM_UNKNOWN: /* ??? */ ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(03091) "post_config: mpm type unknown"); break; } if (!h2_mpm_supported() && !mpm_warned) { mpm_warned = 1; ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(10034) "The mpm module (%s) is not supported by mod_http2. The mpm determines " "how things are processed in your server. HTTP/2 has more demands in " "this regard and the currently selected mpm will just not do. " "This is an advisory warning. Your server will continue to work, but " "the HTTP/2 protocol will be inactive.", h2_conn_mpm_name()); } status = h2_h2_init(p, s); if (status == APR_SUCCESS) { status = h2_switch_init(p, s); } if (status == APR_SUCCESS) { status = h2_task_init(p, s); } return status; } static char *http2_var_lookup(apr_pool_t *, server_rec *, conn_rec *, request_rec *, char *name); static int http2_is_h2(conn_rec *); static void http2_get_num_workers(server_rec *s, int *minw, int *maxw) { h2_get_num_workers(s, minw, maxw); } /* Runs once per created child process. Perform any process * related initionalization here. */ static void h2_child_init(apr_pool_t *pool, server_rec *s) { /* Set up our connection processing */ apr_status_t status = h2_conn_child_init(pool, s); if (status != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, status, s, APLOGNO(02949) "initializing connection handling"); } } /* Install this module into the apache2 infrastructure. */ static void h2_hooks(apr_pool_t *pool) { static const char *const mod_ssl[] = { "mod_ssl.c", NULL}; APR_REGISTER_OPTIONAL_FN(http2_is_h2); APR_REGISTER_OPTIONAL_FN(http2_var_lookup); APR_REGISTER_OPTIONAL_FN(http2_get_num_workers); ap_log_perror(APLOG_MARK, APLOG_TRACE1, 0, pool, "installing hooks"); /* Run once after configuration is set, but before mpm children initialize. */ ap_hook_post_config(h2_post_config, mod_ssl, NULL, APR_HOOK_MIDDLE); /* Run once after a child process has been created. */ ap_hook_child_init(h2_child_init, NULL, NULL, APR_HOOK_MIDDLE); h2_h2_register_hooks(); h2_switch_register_hooks(); h2_task_register_hooks(); h2_alt_svc_register_hooks(); /* Setup subprocess env for certain variables */ ap_hook_fixups(h2_h2_fixups, NULL,NULL, APR_HOOK_MIDDLE); /* test http2 connection status handler */ ap_hook_handler(h2_filter_h2_status_handler, NULL, NULL, APR_HOOK_MIDDLE); } static const char *val_HTTP2(apr_pool_t *p, server_rec *s, conn_rec *c, request_rec *r, h2_ctx *ctx) { return ctx? "on" : "off"; } static const char *val_H2_PUSH(apr_pool_t *p, server_rec *s, conn_rec *c, request_rec *r, h2_ctx *ctx) { if (ctx) { if (r) { if (ctx->task) { h2_stream *stream = h2_mplx_stream_get(ctx->task->mplx, ctx->task->stream_id); if (stream && stream->push_policy != H2_PUSH_NONE) { return "on"; } } } else if (c && h2_session_push_enabled(ctx->session)) { return "on"; } } else if (s) { if (h2_config_geti(r, s, H2_CONF_PUSH)) { return "on"; } } return "off"; } static const char *val_H2_PUSHED(apr_pool_t *p, server_rec *s, conn_rec *c, request_rec *r, h2_ctx *ctx) { if (ctx) { if (ctx->task && !H2_STREAM_CLIENT_INITIATED(ctx->task->stream_id)) { return "PUSHED"; } } return ""; } static const char *val_H2_PUSHED_ON(apr_pool_t *p, server_rec *s, conn_rec *c, request_rec *r, h2_ctx *ctx) { if (ctx) { if (ctx->task && !H2_STREAM_CLIENT_INITIATED(ctx->task->stream_id)) { h2_stream *stream = h2_mplx_stream_get(ctx->task->mplx, ctx->task->stream_id); if (stream) { return apr_itoa(p, stream->initiated_on); } } } return ""; } static const char *val_H2_STREAM_TAG(apr_pool_t *p, server_rec *s, conn_rec *c, request_rec *r, h2_ctx *ctx) { if (ctx) { if (ctx->task) { return ctx->task->id; } } return ""; } static const char *val_H2_STREAM_ID(apr_pool_t *p, server_rec *s, conn_rec *c, request_rec *r, h2_ctx *ctx) { const char *cp = val_H2_STREAM_TAG(p, s, c, r, ctx); if (cp && (cp = ap_strchr_c(cp, '-'))) { return ++cp; } return NULL; } typedef const char *h2_var_lookup(apr_pool_t *p, server_rec *s, conn_rec *c, request_rec *r, h2_ctx *ctx); typedef struct h2_var_def { const char *name; h2_var_lookup *lookup; unsigned int subprocess : 1; /* should be set in r->subprocess_env */ } h2_var_def; static h2_var_def H2_VARS[] = { { "HTTP2", val_HTTP2, 1 }, { "H2PUSH", val_H2_PUSH, 1 }, { "H2_PUSH", val_H2_PUSH, 1 }, { "H2_PUSHED", val_H2_PUSHED, 1 }, { "H2_PUSHED_ON", val_H2_PUSHED_ON, 1 }, { "H2_STREAM_ID", val_H2_STREAM_ID, 1 }, { "H2_STREAM_TAG", val_H2_STREAM_TAG, 1 }, }; #ifndef H2_ALEN #define H2_ALEN(a) (sizeof(a)/sizeof((a)[0])) #endif static int http2_is_h2(conn_rec *c) { return h2_ctx_get(c->master? c->master : c, 0) != NULL; } static char *http2_var_lookup(apr_pool_t *p, server_rec *s, conn_rec *c, request_rec *r, char *name) { int i; /* If the # of vars grow, we need to put definitions in a hash */ for (i = 0; i < H2_ALEN(H2_VARS); ++i) { h2_var_def *vdef = &H2_VARS[i]; if (!strcmp(vdef->name, name)) { h2_ctx *ctx = (r? h2_ctx_get(c, 0) : h2_ctx_get(c->master? c->master : c, 0)); return (char *)vdef->lookup(p, s, c, r, ctx); } } return (char*)""; } static int h2_h2_fixups(request_rec *r) { if (r->connection->master) { h2_ctx *ctx = h2_ctx_get(r->connection, 0); int i; for (i = 0; ctx && i < H2_ALEN(H2_VARS); ++i) { h2_var_def *vdef = &H2_VARS[i]; if (vdef->subprocess) { apr_table_setn(r->subprocess_env, vdef->name, vdef->lookup(r->pool, r->server, r->connection, r, ctx)); } } } return DECLINED; } httpd-2.4.41/modules/http2/mod_proxy_http2.mak0000644000000000000500000003113012733263444017606 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_proxy_http2.dsp !IF "$(CFG)" == "" CFG=mod_proxy_http2 - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_proxy_http2 - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_proxy_http2 - Win32 Release" && "$(CFG)" != "mod_proxy_http2 - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_http2.mak" CFG="mod_proxy_http2 - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_http2 - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_http2 - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_proxy_http2 - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_http2.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Release" "mod_http2 - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_proxy_http2.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_http2 - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\h2_proxy_session.obj" -@erase "$(INTDIR)\h2_proxy_util.obj" -@erase "$(INTDIR)\mod_proxy_http2.obj" -@erase "$(INTDIR)\mod_proxy_http2.res" -@erase "$(INTDIR)\mod_proxy_http2_src.idb" -@erase "$(INTDIR)\mod_proxy_http2_src.pdb" -@erase "$(OUTDIR)\mod_proxy_http2.exp" -@erase "$(OUTDIR)\mod_proxy_http2.lib" -@erase "$(OUTDIR)\mod_proxy_http2.pdb" -@erase "$(OUTDIR)\mod_proxy_http2.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/nghttp2/lib/includes" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D ssize_t=long /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_http2_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_http2.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_http2.so" /d LONG_NAME="http2_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_http2.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib nghttp2.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_http2.pdb" /debug /out:"$(OUTDIR)\mod_proxy_http2.so" /implib:"$(OUTDIR)\mod_proxy_http2.lib" /libpath:"..\..\srclib\nghttp2\lib\MSVC_obj" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_http2.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\h2_proxy_session.obj" \ "$(INTDIR)\h2_proxy_util.obj" \ "$(INTDIR)\mod_proxy_http2.obj" \ "$(INTDIR)\mod_proxy_http2.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_http2.lib" \ "..\proxy\Release\mod_proxy.lib" "$(OUTDIR)\mod_proxy_http2.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_proxy_http2.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_http2.so" if exist .\Release\mod_proxy_http2.so.manifest mt.exe -manifest .\Release\mod_proxy_http2.so.manifest -outputresource:.\Release\mod_proxy_http2.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_proxy_http2 - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_http2.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Debug" "mod_http2 - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_proxy_http2.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_http2 - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\h2_proxy_session.obj" -@erase "$(INTDIR)\h2_proxy_util.obj" -@erase "$(INTDIR)\mod_proxy_http2.obj" -@erase "$(INTDIR)\mod_proxy_http2.res" -@erase "$(INTDIR)\mod_proxy_http2_src.idb" -@erase "$(INTDIR)\mod_proxy_http2_src.pdb" -@erase "$(OUTDIR)\mod_proxy_http2.exp" -@erase "$(OUTDIR)\mod_proxy_http2.lib" -@erase "$(OUTDIR)\mod_proxy_http2.pdb" -@erase "$(OUTDIR)\mod_proxy_http2.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/nghttp2/lib/includes" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D ssize_t=long /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_http2_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_http2.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_http2.so" /d LONG_NAME="http2_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_http2.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib nghttp2d.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_http2.pdb" /debug /out:"$(OUTDIR)\mod_proxy_http2.so" /implib:"$(OUTDIR)\mod_proxy_http2.lib" /libpath:"..\..\srclib\nghttp2\lib\MSVC_obj" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_http2.so LINK32_OBJS= \ "$(INTDIR)\h2_proxy_session.obj" \ "$(INTDIR)\h2_proxy_util.obj" \ "$(INTDIR)\mod_proxy_http2.obj" \ "$(INTDIR)\mod_proxy_http2.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_http2.lib" \ "..\proxy\Debug\mod_proxy.lib" "$(OUTDIR)\mod_proxy_http2.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_proxy_http2.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_http2.so" if exist .\Debug\mod_proxy_http2.so.manifest mt.exe -manifest .\Debug\mod_proxy_http2.so.manifest -outputresource:.\Debug\mod_proxy_http2.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_proxy_http2.dep") !INCLUDE "mod_proxy_http2.dep" !ELSE !MESSAGE Warning: cannot find "mod_proxy_http2.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_proxy_http2 - Win32 Release" || "$(CFG)" == "mod_proxy_http2 - Win32 Debug" !IF "$(CFG)" == "mod_proxy_http2 - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\http2" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\http2" !ELSEIF "$(CFG)" == "mod_proxy_http2 - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\http2" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\http2" !ENDIF !IF "$(CFG)" == "mod_proxy_http2 - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\http2" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\http2" !ELSEIF "$(CFG)" == "mod_proxy_http2 - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\http2" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\http2" !ENDIF !IF "$(CFG)" == "mod_proxy_http2 - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\http2" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\http2" !ELSEIF "$(CFG)" == "mod_proxy_http2 - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\http2" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\http2" !ENDIF !IF "$(CFG)" == "mod_proxy_http2 - Win32 Release" "mod_http2 - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_http2.mak" CFG="mod_http2 - Win32 Release" cd "." "mod_http2 - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_http2.mak" CFG="mod_http2 - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_proxy_http2 - Win32 Debug" "mod_http2 - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_http2.mak" CFG="mod_http2 - Win32 Debug" cd "." "mod_http2 - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_http2.mak" CFG="mod_http2 - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF !IF "$(CFG)" == "mod_proxy_http2 - Win32 Release" "mod_proxy - Win32 Release" : cd ".\..\proxy" $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd "..\http2" "mod_proxy - Win32 ReleaseCLEAN" : cd ".\..\proxy" $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd "..\http2" !ELSEIF "$(CFG)" == "mod_proxy_http2 - Win32 Debug" "mod_proxy - Win32 Debug" : cd ".\..\proxy" $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd "..\http2" "mod_proxy - Win32 DebugCLEAN" : cd ".\..\proxy" $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd "..\http2" !ENDIF SOURCE=./h2_proxy_session.c "$(INTDIR)\h2_proxy_session.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./h2_proxy_util.c "$(INTDIR)\h2_proxy_util.obj" : $(SOURCE) "$(INTDIR)" SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_proxy_http2 - Win32 Release" "$(INTDIR)\mod_proxy_http2.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_http2.res" /i "../../include" /i "../../srclib/apr/include" /i "\Build11\httpd-2.4.21-dev-mph2\build\win32" /d "NDEBUG" /d BIN_NAME="mod_proxy_http2.so" /d LONG_NAME="http2_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_proxy_http2 - Win32 Debug" "$(INTDIR)\mod_proxy_http2.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_http2.res" /i "../../include" /i "../../srclib/apr/include" /i "\Build11\httpd-2.4.21-dev-mph2\build\win32" /d "_DEBUG" /d BIN_NAME="mod_proxy_http2.so" /d LONG_NAME="http2_module for Apache" $(SOURCE) !ENDIF SOURCE=./mod_proxy_http2.c "$(INTDIR)\mod_proxy_http2.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/http2/h2_proxy_session.h0000644000000000000500000001154313442215451017440 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef h2_proxy_session_h #define h2_proxy_session_h #define H2_ALEN(a) (sizeof(a)/sizeof((a)[0])) #include struct h2_proxy_iqueue; struct h2_proxy_ihash_t; typedef enum { H2_STREAM_ST_IDLE, H2_STREAM_ST_OPEN, H2_STREAM_ST_RESV_LOCAL, H2_STREAM_ST_RESV_REMOTE, H2_STREAM_ST_CLOSED_INPUT, H2_STREAM_ST_CLOSED_OUTPUT, H2_STREAM_ST_CLOSED, } h2_proxy_stream_state_t; typedef enum { H2_PROXYS_ST_INIT, /* send initial SETTINGS, etc. */ H2_PROXYS_ST_DONE, /* finished, connection close */ H2_PROXYS_ST_IDLE, /* no streams to process */ H2_PROXYS_ST_BUSY, /* read/write without stop */ H2_PROXYS_ST_WAIT, /* waiting for tasks reporting back */ H2_PROXYS_ST_LOCAL_SHUTDOWN, /* we announced GOAWAY */ H2_PROXYS_ST_REMOTE_SHUTDOWN, /* client announced GOAWAY */ } h2_proxys_state; typedef enum { H2_PROXYS_EV_INIT, /* session was initialized */ H2_PROXYS_EV_LOCAL_GOAWAY, /* we send a GOAWAY */ H2_PROXYS_EV_REMOTE_GOAWAY, /* remote send us a GOAWAY */ H2_PROXYS_EV_CONN_ERROR, /* connection error */ H2_PROXYS_EV_PROTO_ERROR, /* protocol error */ H2_PROXYS_EV_CONN_TIMEOUT, /* connection timeout */ H2_PROXYS_EV_NO_IO, /* nothing has been read or written */ H2_PROXYS_EV_STREAM_SUBMITTED, /* stream has been submitted */ H2_PROXYS_EV_STREAM_DONE, /* stream has been finished */ H2_PROXYS_EV_STREAM_RESUMED, /* stream signalled availability of headers/data */ H2_PROXYS_EV_DATA_READ, /* connection data has been read */ H2_PROXYS_EV_NGH2_DONE, /* nghttp2 wants neither read nor write anything */ H2_PROXYS_EV_PRE_CLOSE, /* connection will close after this */ } h2_proxys_event_t; typedef struct h2_proxy_session h2_proxy_session; typedef void h2_proxy_request_done(h2_proxy_session *s, request_rec *r, apr_status_t status, int touched); struct h2_proxy_session { const char *id; conn_rec *c; proxy_conn_rec *p_conn; proxy_server_conf *conf; apr_pool_t *pool; nghttp2_session *ngh2; /* the nghttp2 session itself */ unsigned int aborted : 1; unsigned int check_ping : 1; unsigned int h2_front : 1; /* if front-end connection is HTTP/2 */ h2_proxy_request_done *done; void *user_data; unsigned char window_bits_stream; unsigned char window_bits_connection; h2_proxys_state state; apr_interval_time_t wait_timeout; struct h2_proxy_ihash_t *streams; struct h2_proxy_iqueue *suspended; apr_size_t remote_max_concurrent; int last_stream_id; /* last stream id processed by backend, or 0 */ apr_time_t last_frame_received; apr_bucket_brigade *input; apr_bucket_brigade *output; }; h2_proxy_session *h2_proxy_session_setup(const char *id, proxy_conn_rec *p_conn, proxy_server_conf *conf, int h2_front, unsigned char window_bits_connection, unsigned char window_bits_stream, h2_proxy_request_done *done); apr_status_t h2_proxy_session_submit(h2_proxy_session *s, const char *url, request_rec *r, int standalone); /** * Perform a step in processing the proxy session. Will return aftert * one read/write cycle and indicate session status by status code. * @param s the session to process * @return APR_EAGAIN when processing needs to be invoked again * APR_SUCCESS when all streams have been processed, session still live * APR_EOF when the session has been terminated */ apr_status_t h2_proxy_session_process(h2_proxy_session *s); void h2_proxy_session_cancel_all(h2_proxy_session *s); void h2_proxy_session_cleanup(h2_proxy_session *s, h2_proxy_request_done *done); #define H2_PROXY_REQ_URL_NOTE "h2-proxy-req-url" #endif /* h2_proxy_session_h */ httpd-2.4.41/modules/http2/h2_push.c0000644000000000000500000007765413303341455015505 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #ifdef H2_OPENSSL #include #endif #include #include #include #include "h2_private.h" #include "h2_h2.h" #include "h2_util.h" #include "h2_push.h" #include "h2_request.h" #include "h2_headers.h" #include "h2_session.h" #include "h2_stream.h" /******************************************************************************* * link header handling ******************************************************************************/ static const char *policy_str(h2_push_policy policy) { switch (policy) { case H2_PUSH_NONE: return "none"; case H2_PUSH_FAST_LOAD: return "fast-load"; case H2_PUSH_HEAD: return "head"; default: return "default"; } } typedef struct { const h2_request *req; int push_policy; apr_pool_t *pool; apr_array_header_t *pushes; const char *s; size_t slen; size_t i; const char *link; apr_table_t *params; char b[4096]; } link_ctx; static int attr_char(char c) { switch (c) { case '!': case '#': case '$': case '&': case '+': case '-': case '.': case '^': case '_': case '`': case '|': case '~': return 1; default: return apr_isalnum(c); } } static int ptoken_char(char c) { switch (c) { case '!': case '#': case '$': case '&': case '\'': case '(': case ')': case '*': case '+': case '-': case '.': case '/': case ':': case '<': case '=': case '>': case '?': case '@': case '[': case ']': case '^': case '_': case '`': case '{': case '|': case '}': case '~': return 1; default: return apr_isalnum(c); } } static int skip_ws(link_ctx *ctx) { char c; while (ctx->i < ctx->slen && (((c = ctx->s[ctx->i]) == ' ') || (c == '\t'))) { ++ctx->i; } return (ctx->i < ctx->slen); } static int find_chr(link_ctx *ctx, char c, size_t *pidx) { size_t j; for (j = ctx->i; j < ctx->slen; ++j) { if (ctx->s[j] == c) { *pidx = j; return 1; } } return 0; } static int read_chr(link_ctx *ctx, char c) { if (ctx->i < ctx->slen && ctx->s[ctx->i] == c) { ++ctx->i; return 1; } return 0; } static char *mk_str(link_ctx *ctx, size_t end) { if (ctx->i < end) { return apr_pstrndup(ctx->pool, ctx->s + ctx->i, end - ctx->i); } return (char*)""; } static int read_qstring(link_ctx *ctx, const char **ps) { if (skip_ws(ctx) && read_chr(ctx, '\"')) { size_t end; if (find_chr(ctx, '\"', &end)) { *ps = mk_str(ctx, end); ctx->i = end + 1; return 1; } } return 0; } static int read_ptoken(link_ctx *ctx, const char **ps) { if (skip_ws(ctx)) { size_t i; for (i = ctx->i; i < ctx->slen && ptoken_char(ctx->s[i]); ++i) { /* nop */ } if (i > ctx->i) { *ps = mk_str(ctx, i); ctx->i = i; return 1; } } return 0; } static int read_link(link_ctx *ctx) { if (skip_ws(ctx) && read_chr(ctx, '<')) { size_t end; if (find_chr(ctx, '>', &end)) { ctx->link = mk_str(ctx, end); ctx->i = end + 1; return 1; } } return 0; } static int read_pname(link_ctx *ctx, const char **pname) { if (skip_ws(ctx)) { size_t i; for (i = ctx->i; i < ctx->slen && attr_char(ctx->s[i]); ++i) { /* nop */ } if (i > ctx->i) { *pname = mk_str(ctx, i); ctx->i = i; return 1; } } return 0; } static int read_pvalue(link_ctx *ctx, const char **pvalue) { if (skip_ws(ctx) && read_chr(ctx, '=')) { if (read_qstring(ctx, pvalue) || read_ptoken(ctx, pvalue)) { return 1; } } return 0; } static int read_param(link_ctx *ctx) { if (skip_ws(ctx) && read_chr(ctx, ';')) { const char *name, *value = ""; if (read_pname(ctx, &name)) { read_pvalue(ctx, &value); /* value is optional */ apr_table_setn(ctx->params, name, value); return 1; } } return 0; } static int read_sep(link_ctx *ctx) { if (skip_ws(ctx) && read_chr(ctx, ',')) { return 1; } return 0; } static void init_params(link_ctx *ctx) { if (!ctx->params) { ctx->params = apr_table_make(ctx->pool, 5); } else { apr_table_clear(ctx->params); } } static int same_authority(const h2_request *req, const apr_uri_t *uri) { if (uri->scheme != NULL && strcmp(uri->scheme, req->scheme)) { return 0; } if (uri->hostinfo != NULL && strcmp(uri->hostinfo, req->authority)) { return 0; } return 1; } static int set_push_header(void *ctx, const char *key, const char *value) { size_t klen = strlen(key); if (H2_HD_MATCH_LIT("User-Agent", key, klen) || H2_HD_MATCH_LIT("Accept", key, klen) || H2_HD_MATCH_LIT("Accept-Encoding", key, klen) || H2_HD_MATCH_LIT("Accept-Language", key, klen) || H2_HD_MATCH_LIT("Cache-Control", key, klen)) { apr_table_setn(ctx, key, value); } return 1; } static int has_param(link_ctx *ctx, const char *param) { const char *p = apr_table_get(ctx->params, param); return !!p; } static int has_relation(link_ctx *ctx, const char *rel) { const char *s, *val = apr_table_get(ctx->params, "rel"); if (val) { if (!strcmp(rel, val)) { return 1; } s = ap_strstr_c(val, rel); if (s && (s == val || s[-1] == ' ')) { s += strlen(rel); if (!*s || *s == ' ') { return 1; } } } return 0; } static int add_push(link_ctx *ctx) { /* so, we have read a Link header and need to decide * if we transform it into a push. */ if (has_relation(ctx, "preload") && !has_param(ctx, "nopush")) { apr_uri_t uri; if (apr_uri_parse(ctx->pool, ctx->link, &uri) == APR_SUCCESS) { if (uri.path && same_authority(ctx->req, &uri)) { char *path; const char *method; apr_table_t *headers; h2_request *req; h2_push *push; /* We only want to generate pushes for resources in the * same authority than the original request. * icing: i think that is wise, otherwise we really need to * check that the vhost/server is available and uses the same * TLS (if any) parameters. */ path = apr_uri_unparse(ctx->pool, &uri, APR_URI_UNP_OMITSITEPART); push = apr_pcalloc(ctx->pool, sizeof(*push)); switch (ctx->push_policy) { case H2_PUSH_HEAD: method = "HEAD"; break; default: method = "GET"; break; } headers = apr_table_make(ctx->pool, 5); apr_table_do(set_push_header, headers, ctx->req->headers, NULL); req = h2_req_create(0, ctx->pool, method, ctx->req->scheme, ctx->req->authority, path, headers, ctx->req->serialize); /* atm, we do not push on pushes */ h2_request_end_headers(req, ctx->pool, 1, 0); push->req = req; if (has_param(ctx, "critical")) { h2_priority *prio = apr_pcalloc(ctx->pool, sizeof(*prio)); prio->dependency = H2_DEPENDANT_BEFORE; push->priority = prio; } if (!ctx->pushes) { ctx->pushes = apr_array_make(ctx->pool, 5, sizeof(h2_push*)); } APR_ARRAY_PUSH(ctx->pushes, h2_push*) = push; } } } return 0; } static void inspect_link(link_ctx *ctx, const char *s, size_t slen) { /* RFC 5988 Link = "Link" ":" #link-value link-value = "<" URI-Reference ">" *( ";" link-param ) link-param = ( ( "rel" "=" relation-types ) | ( "anchor" "=" <"> URI-Reference <"> ) | ( "rev" "=" relation-types ) | ( "hreflang" "=" Language-Tag ) | ( "media" "=" ( MediaDesc | ( <"> MediaDesc <"> ) ) ) | ( "title" "=" quoted-string ) | ( "title*" "=" ext-value ) | ( "type" "=" ( media-type | quoted-mt ) ) | ( link-extension ) ) link-extension = ( parmname [ "=" ( ptoken | quoted-string ) ] ) | ( ext-name-star "=" ext-value ) ext-name-star = parmname "*" ; reserved for RFC2231-profiled ; extensions. Whitespace NOT ; allowed in between. ptoken = 1*ptokenchar ptokenchar = "!" | "#" | "$" | "%" | "&" | "'" | "(" | ")" | "*" | "+" | "-" | "." | "/" | DIGIT | ":" | "<" | "=" | ">" | "?" | "@" | ALPHA | "[" | "]" | "^" | "_" | "`" | "{" | "|" | "}" | "~" media-type = type-name "/" subtype-name quoted-mt = <"> media-type <"> relation-types = relation-type | <"> relation-type *( 1*SP relation-type ) <"> relation-type = reg-rel-type | ext-rel-type reg-rel-type = LOALPHA *( LOALPHA | DIGIT | "." | "-" ) ext-rel-type = URI and from parmname = 1*attr-char attr-char = ALPHA / DIGIT / "!" / "#" / "$" / "&" / "+" / "-" / "." / "^" / "_" / "`" / "|" / "~" */ ctx->s = s; ctx->slen = slen; ctx->i = 0; while (read_link(ctx)) { init_params(ctx); while (read_param(ctx)) { /* nop */ } add_push(ctx); if (!read_sep(ctx)) { break; } } } static int head_iter(void *ctx, const char *key, const char *value) { if (!apr_strnatcasecmp("link", key)) { inspect_link(ctx, value, strlen(value)); } return 1; } apr_array_header_t *h2_push_collect(apr_pool_t *p, const h2_request *req, int push_policy, const h2_headers *res) { if (req && push_policy != H2_PUSH_NONE) { /* Collect push candidates from the request/response pair. * * One source for pushes are "rel=preload" link headers * in the response. * * TODO: This may be extended in the future by hooks or callbacks * where other modules can provide push information directly. */ if (res->headers) { link_ctx ctx; memset(&ctx, 0, sizeof(ctx)); ctx.req = req; ctx.push_policy = push_policy; ctx.pool = p; apr_table_do(head_iter, &ctx, res->headers, NULL); if (ctx.pushes) { apr_table_setn(res->headers, "push-policy", policy_str(push_policy)); } return ctx.pushes; } } return NULL; } /******************************************************************************* * push diary * * - The push diary keeps track of resources already PUSHed via HTTP/2 on this * connection. It records a hash value from the absolute URL of the resource * pushed. * - Lacking openssl, it uses 'apr_hashfunc_default' for the value * - with openssl, it uses SHA256 to calculate the hash value * - whatever the method to generate the hash, the diary keeps a maximum of 64 * bits per hash, limiting the memory consumption to about * H2PushDiarySize * 8 * bytes. Entries are sorted by most recently used and oldest entries are * forgotten first. * - Clients can initialize/replace the push diary by sending a 'Cache-Digest' * header. Currently, this is the base64url encoded value of the cache digest * as specified in https://datatracker.ietf.org/doc/draft-kazuho-h2-cache-digest/ * This draft can be expected to evolve and the definition of the header * will be added there and refined. * - The cache digest header is a Golomb Coded Set of hash values, but it may * limit the amount of bits per hash value even further. For a good description * of GCS, read here: * http://giovanni.bajo.it/post/47119962313/golomb-coded-sets-smaller-than-bloom-filters * - The means that the push diary might be initialized with hash values of much * less than 64 bits, leading to more false positives, but smaller digest size. ******************************************************************************/ #define GCSLOG_LEVEL APLOG_TRACE1 typedef struct h2_push_diary_entry { apr_uint64_t hash; } h2_push_diary_entry; #ifdef H2_OPENSSL static void sha256_update(SHA256_CTX *ctx, const char *s) { SHA256_Update(ctx, s, strlen(s)); } static void calc_sha256_hash(h2_push_diary *diary, apr_uint64_t *phash, h2_push *push) { SHA256_CTX sha256; apr_uint64_t val; unsigned char hash[SHA256_DIGEST_LENGTH]; int i; SHA256_Init(&sha256); sha256_update(&sha256, push->req->scheme); sha256_update(&sha256, "://"); sha256_update(&sha256, push->req->authority); sha256_update(&sha256, push->req->path); SHA256_Final(hash, &sha256); val = 0; for (i = 0; i != sizeof(val); ++i) val = val * 256 + hash[i]; *phash = val >> (64 - diary->mask_bits); } #endif static unsigned int val_apr_hash(const char *str) { apr_ssize_t len = strlen(str); return apr_hashfunc_default(str, &len); } static void calc_apr_hash(h2_push_diary *diary, apr_uint64_t *phash, h2_push *push) { apr_uint64_t val; #if APR_UINT64_MAX > UINT_MAX val = ((apr_uint64_t)(val_apr_hash(push->req->scheme)) << 32); val ^= ((apr_uint64_t)(val_apr_hash(push->req->authority)) << 16); val ^= val_apr_hash(push->req->path); #else val = val_apr_hash(push->req->scheme); val ^= val_apr_hash(push->req->authority); val ^= val_apr_hash(push->req->path); #endif *phash = val; } static apr_int32_t ceil_power_of_2(apr_int32_t n) { if (n <= 2) return 2; --n; n |= n >> 1; n |= n >> 2; n |= n >> 4; n |= n >> 8; n |= n >> 16; return ++n; } static h2_push_diary *diary_create(apr_pool_t *p, h2_push_digest_type dtype, int N) { h2_push_diary *diary = NULL; if (N > 0) { diary = apr_pcalloc(p, sizeof(*diary)); diary->NMax = ceil_power_of_2(N); diary->N = diary->NMax; /* the mask we use in value comparison depends on where we got * the values from. If we calculate them ourselves, we can use * the full 64 bits. * If we set the diary via a compressed golomb set, we have less * relevant bits and need to use a smaller mask. */ diary->mask_bits = 64; /* grows by doubling, start with a power of 2 */ diary->entries = apr_array_make(p, 16, sizeof(h2_push_diary_entry)); switch (dtype) { #ifdef H2_OPENSSL case H2_PUSH_DIGEST_SHA256: diary->dtype = H2_PUSH_DIGEST_SHA256; diary->dcalc = calc_sha256_hash; break; #endif /* ifdef H2_OPENSSL */ default: diary->dtype = H2_PUSH_DIGEST_APR_HASH; diary->dcalc = calc_apr_hash; break; } } return diary; } h2_push_diary *h2_push_diary_create(apr_pool_t *p, int N) { return diary_create(p, H2_PUSH_DIGEST_SHA256, N); } static int h2_push_diary_find(h2_push_diary *diary, apr_uint64_t hash) { if (diary) { h2_push_diary_entry *e; int i; /* search from the end, where the last accessed digests are */ for (i = diary->entries->nelts-1; i >= 0; --i) { e = &APR_ARRAY_IDX(diary->entries, i, h2_push_diary_entry); if (e->hash == hash) { return i; } } } return -1; } static h2_push_diary_entry *move_to_last(h2_push_diary *diary, apr_size_t idx) { h2_push_diary_entry *entries = (h2_push_diary_entry*)diary->entries->elts; h2_push_diary_entry e; apr_size_t lastidx = diary->entries->nelts-1; /* move entry[idx] to the end */ if (idx < lastidx) { e = entries[idx]; memmove(entries+idx, entries+idx+1, sizeof(e) * (lastidx - idx)); entries[lastidx] = e; } return &entries[lastidx]; } static void h2_push_diary_append(h2_push_diary *diary, h2_push_diary_entry *e) { h2_push_diary_entry *ne; if (diary->entries->nelts < diary->N) { /* append a new diary entry at the end */ APR_ARRAY_PUSH(diary->entries, h2_push_diary_entry) = *e; ne = &APR_ARRAY_IDX(diary->entries, diary->entries->nelts-1, h2_push_diary_entry); } else { /* replace content with new digest. keeps memory usage constant once diary is full */ ne = move_to_last(diary, 0); *ne = *e; } /* Intentional no APLOGNO */ ap_log_perror(APLOG_MARK, GCSLOG_LEVEL, 0, diary->entries->pool, "push_diary_append: %"APR_UINT64_T_HEX_FMT, ne->hash); } apr_array_header_t *h2_push_diary_update(h2_session *session, apr_array_header_t *pushes) { apr_array_header_t *npushes = pushes; h2_push_diary_entry e; int i, idx; if (session->push_diary && pushes) { npushes = NULL; for (i = 0; i < pushes->nelts; ++i) { h2_push *push; push = APR_ARRAY_IDX(pushes, i, h2_push*); session->push_diary->dcalc(session->push_diary, &e.hash, push); idx = h2_push_diary_find(session->push_diary, e.hash); if (idx >= 0) { /* Intentional no APLOGNO */ ap_log_cerror(APLOG_MARK, GCSLOG_LEVEL, 0, session->c, "push_diary_update: already there PUSH %s", push->req->path); move_to_last(session->push_diary, idx); } else { /* Intentional no APLOGNO */ ap_log_cerror(APLOG_MARK, GCSLOG_LEVEL, 0, session->c, "push_diary_update: adding PUSH %s", push->req->path); if (!npushes) { npushes = apr_array_make(pushes->pool, 5, sizeof(h2_push_diary_entry*)); } APR_ARRAY_PUSH(npushes, h2_push*) = push; h2_push_diary_append(session->push_diary, &e); } } } return npushes; } apr_array_header_t *h2_push_collect_update(h2_stream *stream, const struct h2_request *req, const struct h2_headers *res) { h2_session *session = stream->session; const char *cache_digest = apr_table_get(req->headers, "Cache-Digest"); apr_array_header_t *pushes; apr_status_t status; if (cache_digest && session->push_diary) { status = h2_push_diary_digest64_set(session->push_diary, req->authority, cache_digest, stream->pool); if (status != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, session->c, H2_SSSN_LOG(APLOGNO(03057), session, "push diary set from Cache-Digest: %s"), cache_digest); } } pushes = h2_push_collect(stream->pool, req, stream->push_policy, res); return h2_push_diary_update(stream->session, pushes); } static apr_int32_t h2_log2inv(unsigned char log2) { return log2? (1 << log2) : 1; } typedef struct { h2_push_diary *diary; unsigned char log2p; int mask_bits; int delta_bits; int fixed_bits; apr_uint64_t fixed_mask; apr_pool_t *pool; unsigned char *data; apr_size_t datalen; apr_size_t offset; unsigned int bit; apr_uint64_t last; } gset_encoder; static int cmp_puint64(const void *p1, const void *p2) { const apr_uint64_t *pu1 = p1, *pu2 = p2; return (*pu1 > *pu2)? 1 : ((*pu1 == *pu2)? 0 : -1); } /* in golomb bit stream encoding, bit 0 is the 8th of the first char, or * more generally: * char(bit/8) & cbit_mask[(bit % 8)] */ static unsigned char cbit_mask[] = { 0x80u, 0x40u, 0x20u, 0x10u, 0x08u, 0x04u, 0x02u, 0x01u, }; static apr_status_t gset_encode_bit(gset_encoder *encoder, int bit) { if (++encoder->bit >= 8) { if (++encoder->offset >= encoder->datalen) { apr_size_t nlen = encoder->datalen*2; unsigned char *ndata = apr_pcalloc(encoder->pool, nlen); if (!ndata) { return APR_ENOMEM; } memcpy(ndata, encoder->data, encoder->datalen); encoder->data = ndata; encoder->datalen = nlen; } encoder->bit = 0; encoder->data[encoder->offset] = 0xffu; } if (!bit) { encoder->data[encoder->offset] &= ~cbit_mask[encoder->bit]; } return APR_SUCCESS; } static apr_status_t gset_encode_next(gset_encoder *encoder, apr_uint64_t pval) { apr_uint64_t delta, flex_bits; apr_status_t status = APR_SUCCESS; int i; delta = pval - encoder->last; encoder->last = pval; flex_bits = (delta >> encoder->fixed_bits); /* Intentional no APLOGNO */ ap_log_perror(APLOG_MARK, GCSLOG_LEVEL, 0, encoder->pool, "h2_push_diary_enc: val=%"APR_UINT64_T_HEX_FMT", delta=%" APR_UINT64_T_HEX_FMT" flex_bits=%"APR_UINT64_T_FMT", " ", fixed_bits=%d, fixed_val=%"APR_UINT64_T_HEX_FMT, pval, delta, flex_bits, encoder->fixed_bits, delta&encoder->fixed_mask); for (; flex_bits != 0; --flex_bits) { status = gset_encode_bit(encoder, 1); if (status != APR_SUCCESS) { return status; } } status = gset_encode_bit(encoder, 0); if (status != APR_SUCCESS) { return status; } for (i = encoder->fixed_bits-1; i >= 0; --i) { status = gset_encode_bit(encoder, (delta >> i) & 1); if (status != APR_SUCCESS) { return status; } } return APR_SUCCESS; } /** * Get a cache digest as described in * https://datatracker.ietf.org/doc/draft-kazuho-h2-cache-digest/ * from the contents of the push diary. * * @param diary the diary to calculdate the digest from * @param p the pool to use * @param pdata on successful return, the binary cache digest * @param plen on successful return, the length of the binary data */ apr_status_t h2_push_diary_digest_get(h2_push_diary *diary, apr_pool_t *pool, int maxP, const char *authority, const char **pdata, apr_size_t *plen) { int nelts, N, i; unsigned char log2n, log2pmax; gset_encoder encoder; apr_uint64_t *hashes; apr_size_t hash_count; nelts = diary->entries->nelts; if (nelts > APR_UINT32_MAX) { /* should not happen */ return APR_ENOTIMPL; } N = ceil_power_of_2(nelts); log2n = h2_log2(N); /* Now log2p is the max number of relevant bits, so that * log2p + log2n == mask_bits. We can uise a lower log2p * and have a shorter set encoding... */ log2pmax = h2_log2(ceil_power_of_2(maxP)); memset(&encoder, 0, sizeof(encoder)); encoder.diary = diary; encoder.log2p = H2MIN(diary->mask_bits - log2n, log2pmax); encoder.mask_bits = log2n + encoder.log2p; encoder.delta_bits = diary->mask_bits - encoder.mask_bits; encoder.fixed_bits = encoder.log2p; encoder.fixed_mask = 1; encoder.fixed_mask = (encoder.fixed_mask << encoder.fixed_bits) - 1; encoder.pool = pool; encoder.datalen = 512; encoder.data = apr_pcalloc(encoder.pool, encoder.datalen); encoder.data[0] = log2n; encoder.data[1] = encoder.log2p; encoder.offset = 1; encoder.bit = 8; encoder.last = 0; /* Intentional no APLOGNO */ ap_log_perror(APLOG_MARK, GCSLOG_LEVEL, 0, pool, "h2_push_diary_digest_get: %d entries, N=%d, log2n=%d, " "mask_bits=%d, enc.mask_bits=%d, delta_bits=%d, enc.log2p=%d, authority=%s", (int)nelts, (int)N, (int)log2n, diary->mask_bits, (int)encoder.mask_bits, (int)encoder.delta_bits, (int)encoder.log2p, authority); if (!authority || !diary->authority || !strcmp("*", authority) || !strcmp(diary->authority, authority)) { hash_count = diary->entries->nelts; hashes = apr_pcalloc(encoder.pool, hash_count); for (i = 0; i < hash_count; ++i) { hashes[i] = ((&APR_ARRAY_IDX(diary->entries, i, h2_push_diary_entry))->hash >> encoder.delta_bits); } qsort(hashes, hash_count, sizeof(apr_uint64_t), cmp_puint64); for (i = 0; i < hash_count; ++i) { if (!i || (hashes[i] != hashes[i-1])) { gset_encode_next(&encoder, hashes[i]); } } /* Intentional no APLOGNO */ ap_log_perror(APLOG_MARK, GCSLOG_LEVEL, 0, pool, "h2_push_diary_digest_get: golomb compressed hashes, %d bytes", (int)encoder.offset + 1); } *pdata = (const char *)encoder.data; *plen = encoder.offset + 1; return APR_SUCCESS; } typedef struct { h2_push_diary *diary; apr_pool_t *pool; unsigned char log2p; const unsigned char *data; apr_size_t datalen; apr_size_t offset; unsigned int bit; apr_uint64_t last_val; } gset_decoder; static int gset_decode_next_bit(gset_decoder *decoder) { if (++decoder->bit >= 8) { if (++decoder->offset >= decoder->datalen) { return -1; } decoder->bit = 0; } return (decoder->data[decoder->offset] & cbit_mask[decoder->bit])? 1 : 0; } static apr_status_t gset_decode_next(gset_decoder *decoder, apr_uint64_t *phash) { apr_uint64_t flex = 0, fixed = 0, delta; int i; /* read 1 bits until we encounter 0, then read log2n(diary-P) bits. * On a malformed bit-string, this will not fail, but produce results * which are pbly too large. Luckily, the diary will modulo the hash. */ while (1) { int bit = gset_decode_next_bit(decoder); if (bit == -1) { return APR_EINVAL; } if (!bit) { break; } ++flex; } for (i = 0; i < decoder->log2p; ++i) { int bit = gset_decode_next_bit(decoder); if (bit == -1) { return APR_EINVAL; } fixed = (fixed << 1) | bit; } delta = (flex << decoder->log2p) | fixed; *phash = delta + decoder->last_val; decoder->last_val = *phash; /* Intentional no APLOGNO */ ap_log_perror(APLOG_MARK, GCSLOG_LEVEL, 0, decoder->pool, "h2_push_diary_digest_dec: val=%"APR_UINT64_T_HEX_FMT", delta=%" APR_UINT64_T_HEX_FMT", flex=%d, fixed=%"APR_UINT64_T_HEX_FMT, *phash, delta, (int)flex, fixed); return APR_SUCCESS; } /** * Initialize the push diary by a cache digest as described in * https://datatracker.ietf.org/doc/draft-kazuho-h2-cache-digest/ * . * @param diary the diary to set the digest into * @param data the binary cache digest * @param len the length of the cache digest * @return APR_EINVAL if digest was not successfully parsed */ apr_status_t h2_push_diary_digest_set(h2_push_diary *diary, const char *authority, const char *data, apr_size_t len) { gset_decoder decoder; unsigned char log2n, log2p; int N, i; apr_pool_t *pool = diary->entries->pool; h2_push_diary_entry e; apr_status_t status = APR_SUCCESS; if (len < 2) { /* at least this should be there */ return APR_EINVAL; } log2n = data[0]; log2p = data[1]; diary->mask_bits = log2n + log2p; if (diary->mask_bits > 64) { /* cannot handle */ return APR_ENOTIMPL; } /* whatever is in the digest, it replaces the diary entries */ apr_array_clear(diary->entries); if (!authority || !strcmp("*", authority)) { diary->authority = NULL; } else if (!diary->authority || strcmp(diary->authority, authority)) { diary->authority = apr_pstrdup(diary->entries->pool, authority); } N = h2_log2inv(log2n + log2p); decoder.diary = diary; decoder.pool = pool; decoder.log2p = log2p; decoder.data = (const unsigned char*)data; decoder.datalen = len; decoder.offset = 1; decoder.bit = 8; decoder.last_val = 0; diary->N = N; /* Determine effective N we use for storage */ if (!N) { /* a totally empty cache digest. someone tells us that she has no * entries in the cache at all. Use our own preferences for N+mask */ diary->N = diary->NMax; return APR_SUCCESS; } else if (N > diary->NMax) { /* Store not more than diary is configured to hold. We open us up * to DOS attacks otherwise. */ diary->N = diary->NMax; } /* Intentional no APLOGNO */ ap_log_perror(APLOG_MARK, GCSLOG_LEVEL, 0, pool, "h2_push_diary_digest_set: N=%d, log2n=%d, " "diary->mask_bits=%d, dec.log2p=%d", (int)diary->N, (int)log2n, diary->mask_bits, (int)decoder.log2p); for (i = 0; i < diary->N; ++i) { if (gset_decode_next(&decoder, &e.hash) != APR_SUCCESS) { /* the data may have less than N values */ break; } h2_push_diary_append(diary, &e); } /* Intentional no APLOGNO */ ap_log_perror(APLOG_MARK, GCSLOG_LEVEL, 0, pool, "h2_push_diary_digest_set: diary now with %d entries, mask_bits=%d", (int)diary->entries->nelts, diary->mask_bits); return status; } apr_status_t h2_push_diary_digest64_set(h2_push_diary *diary, const char *authority, const char *data64url, apr_pool_t *pool) { const char *data; apr_size_t len = h2_util_base64url_decode(&data, data64url, pool); /* Intentional no APLOGNO */ ap_log_perror(APLOG_MARK, GCSLOG_LEVEL, 0, pool, "h2_push_diary_digest64_set: digest=%s, dlen=%d", data64url, (int)len); return h2_push_diary_digest_set(diary, authority, data, len); } httpd-2.4.41/modules/http2/h2_from_h1.h0000644000000000000500000000406313237611704016051 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_from_h1__ #define __mod_h2__h2_from_h1__ /** * h2_from_h1 parses a HTTP/1.1 response into * - response status * - a list of header values * - a series of bytes that represent the response body alone, without * any meta data, such as inserted by chunked transfer encoding. * * All data is allocated from the stream memory pool. * * Again, see comments in h2_request: ideally we would take the headers * and status from the httpd structures instead of parsing them here, but * we need to have all handlers and filters involved in request/response * processing, so this seems to be the way for now. */ struct h2_headers; struct h2_task; apr_status_t h2_from_h1_parse_response(struct h2_task *task, ap_filter_t *f, apr_bucket_brigade *bb); apr_status_t h2_filter_headers_out(ap_filter_t *f, apr_bucket_brigade *bb); apr_status_t h2_filter_request_in(ap_filter_t* f, apr_bucket_brigade* brigade, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes); apr_status_t h2_filter_trailers_out(ap_filter_t *f, apr_bucket_brigade *bb); #endif /* defined(__mod_h2__h2_from_h1__) */ httpd-2.4.41/modules/http2/h2_session.h0000644000000000000500000002212213442215451016172 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_session__ #define __mod_h2__h2_session__ #include "h2_conn_io.h" /** * A HTTP/2 connection, a session with a specific client. * * h2_session sits on top of a httpd conn_rec* instance and takes complete * control of the connection data. It receives protocol frames from the * client. For new HTTP/2 streams it creates h2_task(s) that are sent * via callback to a dispatcher (see h2_conn.c). * h2_session keeps h2_io's for each ongoing stream which buffer the * payload for that stream. * * New incoming HEADER frames are converted into a h2_stream+h2_task instance * that both represent a HTTP/2 stream, but may have separate lifetimes. This * allows h2_task to be scheduled in other threads without semaphores * all over the place. It allows task memory to be freed independent of * session lifetime and sessions may close down while tasks are still running. * * */ #include "h2.h" struct apr_thread_mutext_t; struct apr_thread_cond_t; struct h2_ctx; struct h2_config; struct h2_filter_cin; struct h2_ihash_t; struct h2_mplx; struct h2_priority; struct h2_push; struct h2_push_diary; struct h2_session; struct h2_stream; struct h2_stream_monitor; struct h2_task; struct h2_workers; struct nghttp2_session; typedef enum { H2_SESSION_EV_INIT, /* session was initialized */ H2_SESSION_EV_LOCAL_GOAWAY, /* we send a GOAWAY */ H2_SESSION_EV_REMOTE_GOAWAY, /* remote send us a GOAWAY */ H2_SESSION_EV_CONN_ERROR, /* connection error */ H2_SESSION_EV_PROTO_ERROR, /* protocol error */ H2_SESSION_EV_CONN_TIMEOUT, /* connection timeout */ H2_SESSION_EV_NO_IO, /* nothing has been read or written */ H2_SESSION_EV_FRAME_RCVD, /* a frame has been received */ H2_SESSION_EV_NGH2_DONE, /* nghttp2 wants neither read nor write anything */ H2_SESSION_EV_MPM_STOPPING, /* the process is stopping */ H2_SESSION_EV_PRE_CLOSE, /* connection will close after this */ H2_SESSION_EV_STREAM_CHANGE, /* a stream (state/input/output) changed */ } h2_session_event_t; typedef struct h2_session { long id; /* identifier of this session, unique * inside a httpd process */ conn_rec *c; /* the connection this session serves */ request_rec *r; /* the request that started this in case * of 'h2c', NULL otherwise */ server_rec *s; /* server/vhost we're starting on */ apr_pool_t *pool; /* pool to use in session */ struct h2_mplx *mplx; /* multiplexer for stream data */ struct h2_workers *workers; /* for executing stream tasks */ struct h2_filter_cin *cin; /* connection input filter context */ h2_conn_io io; /* io on httpd conn filters */ int padding_max; /* max number of padding bytes */ int padding_always; /* padding has precedence over I/O optimizations */ struct nghttp2_session *ngh2; /* the nghttp2 session (internal use) */ h2_session_state state; /* state session is in */ h2_session_props local; /* properties of local session */ h2_session_props remote; /* properites of remote session */ unsigned int reprioritize : 1; /* scheduled streams priority changed */ unsigned int flush : 1; /* flushing output necessary */ unsigned int have_read : 1; /* session has read client data */ unsigned int have_written : 1; /* session did write data to client */ apr_interval_time_t wait_us; /* timeout during BUSY_WAIT state, micro secs */ struct h2_push_diary *push_diary; /* remember pushes, avoid duplicates */ struct h2_stream_monitor *monitor;/* monitor callbacks for streams */ int open_streams; /* number of client streams open */ int unsent_submits; /* number of submitted, but not yet written responses. */ int unsent_promises; /* number of submitted, but not yet written push promises */ int responses_submitted; /* number of http/2 responses submitted */ int streams_reset; /* number of http/2 streams reset by client */ int pushes_promised; /* number of http/2 push promises submitted */ int pushes_submitted; /* number of http/2 pushed responses submitted */ int pushes_reset; /* number of http/2 pushed reset by client */ apr_size_t frames_received; /* number of http/2 frames received */ apr_size_t frames_sent; /* number of http/2 frames sent */ apr_size_t max_stream_count; /* max number of open streams */ apr_size_t max_stream_mem; /* max buffer memory for a single stream */ apr_time_t idle_until; /* Time we shut down due to sheer boredom */ apr_time_t idle_sync_until; /* Time we sync wait until keepalive handling kicks in */ apr_size_t idle_frames; /* number of rcvd frames that kept session in idle state */ apr_interval_time_t idle_delay; /* Time we delay processing rcvd frames in idle state */ apr_bucket_brigade *bbtmp; /* brigade for keeping temporary data */ struct apr_thread_cond_t *iowait; /* our cond when trywaiting for data */ char status[64]; /* status message for scoreboard */ int last_status_code; /* the one already reported */ const char *last_status_msg; /* the one already reported */ struct h2_iqueue *in_pending; /* all streams with input pending */ struct h2_iqueue *in_process; /* all streams ready for processing on slave */ } h2_session; const char *h2_session_state_str(h2_session_state state); /** * Create a new h2_session for the given connection. * The session will apply the configured parameter. * @param psession pointer receiving the created session on success or NULL * @param c the connection to work on * @param r optional request when protocol was upgraded * @param cfg the module config to apply * @param workers the worker pool to use * @return the created session */ apr_status_t h2_session_create(h2_session **psession, conn_rec *c, request_rec *r, server_rec *, struct h2_workers *workers); void h2_session_event(h2_session *session, h2_session_event_t ev, int err, const char *msg); /** * Process the given HTTP/2 session until it is ended or a fatal * error occurred. * * @param session the sessionm to process */ apr_status_t h2_session_process(h2_session *session, int async); /** * Last chance to do anything before the connection is closed. */ apr_status_t h2_session_pre_close(h2_session *session, int async); /** * Called when a serious error occurred and the session needs to terminate * without further connection io. * @param session the session to abort * @param reason the apache status that caused the abort */ void h2_session_abort(h2_session *session, apr_status_t reason); /** * Close and deallocate the given session. */ void h2_session_close(h2_session *session); /** * Returns if client settings have push enabled. * @param != 0 iff push is enabled in client settings */ int h2_session_push_enabled(h2_session *session); /** * Look up the stream in this session with the given id. */ struct h2_stream *h2_session_stream_get(h2_session *session, int stream_id); /** * Submit a push promise on the stream and schedule the new steam for * processing.. * * @param session the session to work in * @param is the stream initiating the push * @param push the push to promise * @return the new promised stream or NULL */ struct h2_stream *h2_session_push(h2_session *session, struct h2_stream *is, struct h2_push *push); apr_status_t h2_session_set_prio(h2_session *session, struct h2_stream *stream, const struct h2_priority *prio); #define H2_SSSN_MSG(s, msg) \ "h2_session(%ld,%s,%d): "msg, s->id, h2_session_state_str(s->state), \ s->open_streams #define H2_SSSN_LOG(aplogno, s, msg) aplogno H2_SSSN_MSG(s, msg) #endif /* defined(__mod_h2__h2_session__) */ httpd-2.4.41/modules/http2/h2_mplx.c0000644000000000000500000010707013520520073015464 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include #include #include #include #include "mod_http2.h" #include "h2.h" #include "h2_private.h" #include "h2_bucket_beam.h" #include "h2_config.h" #include "h2_conn.h" #include "h2_ctx.h" #include "h2_h2.h" #include "h2_mplx.h" #include "h2_request.h" #include "h2_stream.h" #include "h2_session.h" #include "h2_task.h" #include "h2_workers.h" #include "h2_util.h" /* utility for iterating over ihash stream sets */ typedef struct { h2_mplx *m; h2_stream *stream; apr_time_t now; apr_size_t count; } stream_iter_ctx; static apr_status_t mplx_be_happy(h2_mplx *m); static apr_status_t mplx_be_annoyed(h2_mplx *m); apr_status_t h2_mplx_child_init(apr_pool_t *pool, server_rec *s) { return APR_SUCCESS; } #define H2_MPLX_ENTER(m) \ do { apr_status_t rv; if ((rv = apr_thread_mutex_lock(m->lock)) != APR_SUCCESS) {\ return rv;\ } } while(0) #define H2_MPLX_LEAVE(m) \ apr_thread_mutex_unlock(m->lock) #define H2_MPLX_ENTER_ALWAYS(m) \ apr_thread_mutex_lock(m->lock) #define H2_MPLX_ENTER_MAYBE(m, lock) \ if (lock) apr_thread_mutex_lock(m->lock) #define H2_MPLX_LEAVE_MAYBE(m, lock) \ if (lock) apr_thread_mutex_unlock(m->lock) static void check_data_for(h2_mplx *m, h2_stream *stream, int lock); static void stream_output_consumed(void *ctx, h2_bucket_beam *beam, apr_off_t length) { } static void stream_input_ev(void *ctx, h2_bucket_beam *beam) { h2_stream *stream = ctx; h2_mplx *m = stream->session->mplx; apr_atomic_set32(&m->event_pending, 1); } static void stream_input_consumed(void *ctx, h2_bucket_beam *beam, apr_off_t length) { h2_stream_in_consumed(ctx, length); } static void stream_joined(h2_mplx *m, h2_stream *stream) { ap_assert(!h2_task_has_started(stream->task) || stream->task->worker_done); h2_ihash_remove(m->shold, stream->id); h2_ihash_add(m->spurge, stream); } static void stream_cleanup(h2_mplx *m, h2_stream *stream) { ap_assert(stream->state == H2_SS_CLEANUP); if (stream->input) { h2_beam_on_consumed(stream->input, NULL, NULL, NULL); h2_beam_abort(stream->input); } if (stream->output) { h2_beam_on_produced(stream->output, NULL, NULL); h2_beam_leave(stream->output); } h2_stream_cleanup(stream); h2_ihash_remove(m->streams, stream->id); h2_iq_remove(m->q, stream->id); h2_ififo_remove(m->readyq, stream->id); h2_ihash_add(m->shold, stream); if (!h2_task_has_started(stream->task) || stream->task->done_done) { stream_joined(m, stream); } else if (stream->task) { stream->task->c->aborted = 1; } } /** * A h2_mplx needs to be thread-safe *and* if will be called by * the h2_session thread *and* the h2_worker threads. Therefore: * - calls are protected by a mutex lock, m->lock * - the pool needs its own allocator, since apr_allocator_t are * not re-entrant. The separate allocator works without a * separate lock since we already protect h2_mplx itself. * Since HTTP/2 connections can be expected to live longer than * their HTTP/1 cousins, the separate allocator seems to work better * than protecting a shared h2_session one with an own lock. */ h2_mplx *h2_mplx_create(conn_rec *c, server_rec *s, apr_pool_t *parent, h2_workers *workers) { apr_status_t status = APR_SUCCESS; apr_allocator_t *allocator; apr_thread_mutex_t *mutex; h2_mplx *m; m = apr_pcalloc(parent, sizeof(h2_mplx)); if (m) { m->id = c->id; m->c = c; m->s = s; /* We create a pool with its own allocator to be used for * processing slave connections. This is the only way to have the * processing independant of its parent pool in the sense that it * can work in another thread. Also, the new allocator needs its own * mutex to synchronize sub-pools. */ status = apr_allocator_create(&allocator); if (status != APR_SUCCESS) { return NULL; } apr_allocator_max_free_set(allocator, ap_max_mem_free); apr_pool_create_ex(&m->pool, parent, NULL, allocator); if (!m->pool) { apr_allocator_destroy(allocator); return NULL; } apr_pool_tag(m->pool, "h2_mplx"); apr_allocator_owner_set(allocator, m->pool); status = apr_thread_mutex_create(&mutex, APR_THREAD_MUTEX_DEFAULT, m->pool); if (status != APR_SUCCESS) { apr_pool_destroy(m->pool); return NULL; } apr_allocator_mutex_set(allocator, mutex); status = apr_thread_mutex_create(&m->lock, APR_THREAD_MUTEX_DEFAULT, m->pool); if (status != APR_SUCCESS) { apr_pool_destroy(m->pool); return NULL; } m->max_streams = h2_config_sgeti(s, H2_CONF_MAX_STREAMS); m->stream_max_mem = h2_config_sgeti(s, H2_CONF_STREAM_MAX_MEM); m->streams = h2_ihash_create(m->pool, offsetof(h2_stream,id)); m->shold = h2_ihash_create(m->pool, offsetof(h2_stream,id)); m->spurge = h2_ihash_create(m->pool, offsetof(h2_stream,id)); m->q = h2_iq_create(m->pool, m->max_streams); status = h2_ififo_set_create(&m->readyq, m->pool, m->max_streams); if (status != APR_SUCCESS) { apr_pool_destroy(m->pool); return NULL; } m->workers = workers; m->max_active = workers->max_workers; m->limit_active = 6; /* the original h1 max parallel connections */ m->last_mood_change = apr_time_now(); m->mood_update_interval = apr_time_from_msec(100); m->spare_slaves = apr_array_make(m->pool, 10, sizeof(conn_rec*)); } return m; } int h2_mplx_shutdown(h2_mplx *m) { int max_stream_started = 0; H2_MPLX_ENTER(m); max_stream_started = m->max_stream_started; /* Clear schedule queue, disabling existing streams from starting */ h2_iq_clear(m->q); H2_MPLX_LEAVE(m); return max_stream_started; } static int input_consumed_signal(h2_mplx *m, h2_stream *stream) { if (stream->input) { return h2_beam_report_consumption(stream->input); } return 0; } static int report_consumption_iter(void *ctx, void *val) { h2_stream *stream = val; h2_mplx *m = ctx; input_consumed_signal(m, stream); if (stream->state == H2_SS_CLOSED_L && (!stream->task || stream->task->worker_done)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, m->c, H2_STRM_LOG(APLOGNO(10026), stream, "remote close missing")); nghttp2_submit_rst_stream(stream->session->ngh2, NGHTTP2_FLAG_NONE, stream->id, NGHTTP2_NO_ERROR); } return 1; } static int output_consumed_signal(h2_mplx *m, h2_task *task) { if (task->output.beam) { return h2_beam_report_consumption(task->output.beam); } return 0; } static int stream_destroy_iter(void *ctx, void *val) { h2_mplx *m = ctx; h2_stream *stream = val; h2_ihash_remove(m->spurge, stream->id); ap_assert(stream->state == H2_SS_CLEANUP); if (stream->input) { /* Process outstanding events before destruction */ input_consumed_signal(m, stream); h2_beam_log(stream->input, m->c, APLOG_TRACE2, "stream_destroy"); h2_beam_destroy(stream->input); stream->input = NULL; } if (stream->task) { h2_task *task = stream->task; conn_rec *slave; int reuse_slave = 0; stream->task = NULL; slave = task->c; if (slave) { /* On non-serialized requests, the IO logging has not accounted for any * meta data send over the network: response headers and h2 frame headers. we * counted this on the stream and need to add this now. * This is supposed to happen before the EOR bucket triggers the * logging of the transaction. *fingers crossed* */ if (task->request && !task->request->serialize && h2_task_logio_add_bytes_out) { apr_off_t unaccounted = stream->out_frame_octets - stream->out_data_octets; if (unaccounted > 0) { h2_task_logio_add_bytes_out(slave, unaccounted); } } if (m->s->keep_alive_max == 0 || slave->keepalives < m->s->keep_alive_max) { reuse_slave = ((m->spare_slaves->nelts < (m->limit_active * 3 / 2)) && !task->rst_error); } task->c = NULL; if (reuse_slave) { h2_beam_log(task->output.beam, m->c, APLOG_DEBUG, APLOGNO(03385) "h2_task_destroy, reuse slave"); h2_task_destroy(task); APR_ARRAY_PUSH(m->spare_slaves, conn_rec*) = slave; } else { h2_beam_log(task->output.beam, m->c, APLOG_TRACE1, "h2_task_destroy, destroy slave"); h2_slave_destroy(slave); } } } h2_stream_destroy(stream); return 0; } static void purge_streams(h2_mplx *m, int lock) { if (!h2_ihash_empty(m->spurge)) { H2_MPLX_ENTER_MAYBE(m, lock); while (!h2_ihash_iter(m->spurge, stream_destroy_iter, m)) { /* repeat until empty */ } H2_MPLX_LEAVE_MAYBE(m, lock); } } typedef struct { h2_mplx_stream_cb *cb; void *ctx; } stream_iter_ctx_t; static int stream_iter_wrap(void *ctx, void *stream) { stream_iter_ctx_t *x = ctx; return x->cb(stream, x->ctx); } apr_status_t h2_mplx_stream_do(h2_mplx *m, h2_mplx_stream_cb *cb, void *ctx) { stream_iter_ctx_t x; H2_MPLX_ENTER(m); x.cb = cb; x.ctx = ctx; h2_ihash_iter(m->streams, stream_iter_wrap, &x); H2_MPLX_LEAVE(m); return APR_SUCCESS; } static int report_stream_iter(void *ctx, void *val) { h2_mplx *m = ctx; h2_stream *stream = val; h2_task *task = stream->task; if (APLOGctrace1(m->c)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, m->c, H2_STRM_MSG(stream, "started=%d, scheduled=%d, ready=%d, out_buffer=%ld"), !!stream->task, stream->scheduled, h2_stream_is_ready(stream), (long)h2_beam_get_buffered(stream->output)); } if (task) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, m->c, /* NO APLOGNO */ H2_STRM_MSG(stream, "->03198: %s %s %s" "[started=%d/done=%d]"), task->request->method, task->request->authority, task->request->path, task->worker_started, task->worker_done); } else { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, m->c, /* NO APLOGNO */ H2_STRM_MSG(stream, "->03198: no task")); } return 1; } static int unexpected_stream_iter(void *ctx, void *val) { h2_mplx *m = ctx; h2_stream *stream = val; ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, m->c, /* NO APLOGNO */ H2_STRM_MSG(stream, "unexpected, started=%d, scheduled=%d, ready=%d"), !!stream->task, stream->scheduled, h2_stream_is_ready(stream)); return 1; } static int stream_cancel_iter(void *ctx, void *val) { h2_mplx *m = ctx; h2_stream *stream = val; /* disabled input consumed reporting */ if (stream->input) { h2_beam_on_consumed(stream->input, NULL, NULL, NULL); } /* take over event monitoring */ h2_stream_set_monitor(stream, NULL); /* Reset, should transit to CLOSED state */ h2_stream_rst(stream, H2_ERR_NO_ERROR); /* All connection data has been sent, simulate cleanup */ h2_stream_dispatch(stream, H2_SEV_EOS_SENT); stream_cleanup(m, stream); return 0; } void h2_mplx_release_and_join(h2_mplx *m, apr_thread_cond_t *wait) { apr_status_t status; int i, wait_secs = 60, old_aborted; ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, m->c, "h2_mplx(%ld): start release", m->id); /* How to shut down a h2 connection: * 0. abort and tell the workers that no more tasks will come from us */ m->aborted = 1; h2_workers_unregister(m->workers, m); H2_MPLX_ENTER_ALWAYS(m); /* While really terminating any slave connections, treat the master * connection as aborted. It's not as if we could send any more data * at this point. */ old_aborted = m->c->aborted; m->c->aborted = 1; /* How to shut down a h2 connection: * 1. cancel all streams still active */ ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, m->c, "h2_mplx(%ld): release, %d/%d/%d streams (total/hold/purge), %d active tasks", m->id, (int)h2_ihash_count(m->streams), (int)h2_ihash_count(m->shold), (int)h2_ihash_count(m->spurge), m->tasks_active); while (!h2_ihash_iter(m->streams, stream_cancel_iter, m)) { /* until empty */ } /* 2. no more streams should be scheduled or in the active set */ ap_assert(h2_ihash_empty(m->streams)); ap_assert(h2_iq_empty(m->q)); /* 3. while workers are busy on this connection, meaning they * are processing tasks from this connection, wait on them finishing * in order to wake us and let us check again. * Eventually, this has to succeed. */ m->join_wait = wait; for (i = 0; h2_ihash_count(m->shold) > 0; ++i) { status = apr_thread_cond_timedwait(wait, m->lock, apr_time_from_sec(wait_secs)); if (APR_STATUS_IS_TIMEUP(status)) { /* This can happen if we have very long running requests * that do not time out on IO. */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, m->c, APLOGNO(03198) "h2_mplx(%ld): waited %d sec for %d tasks", m->id, i*wait_secs, (int)h2_ihash_count(m->shold)); h2_ihash_iter(m->shold, report_stream_iter, m); } } m->join_wait = NULL; /* 4. With all workers done, all streams should be in spurge */ ap_assert(m->tasks_active == 0); if (!h2_ihash_empty(m->shold)) { ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, m->c, APLOGNO(03516) "h2_mplx(%ld): unexpected %d streams in hold", m->id, (int)h2_ihash_count(m->shold)); h2_ihash_iter(m->shold, unexpected_stream_iter, m); } m->c->aborted = old_aborted; H2_MPLX_LEAVE(m); ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, m->c, "h2_mplx(%ld): released", m->id); } apr_status_t h2_mplx_stream_cleanup(h2_mplx *m, h2_stream *stream) { H2_MPLX_ENTER(m); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, m->c, H2_STRM_MSG(stream, "cleanup")); stream_cleanup(m, stream); H2_MPLX_LEAVE(m); return APR_SUCCESS; } h2_stream *h2_mplx_stream_get(h2_mplx *m, int id) { h2_stream *s = NULL; H2_MPLX_ENTER_ALWAYS(m); s = h2_ihash_get(m->streams, id); H2_MPLX_LEAVE(m); return s; } static void output_produced(void *ctx, h2_bucket_beam *beam, apr_off_t bytes) { h2_stream *stream = ctx; h2_mplx *m = stream->session->mplx; check_data_for(m, stream, 1); } static apr_status_t out_open(h2_mplx *m, int stream_id, h2_bucket_beam *beam) { apr_status_t status = APR_SUCCESS; h2_stream *stream = h2_ihash_get(m->streams, stream_id); if (!stream || !stream->task || m->aborted) { return APR_ECONNABORTED; } ap_assert(stream->output == NULL); stream->output = beam; if (APLOGctrace2(m->c)) { h2_beam_log(beam, m->c, APLOG_TRACE2, "out_open"); } else { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, status, m->c, "h2_mplx(%s): out open", stream->task->id); } h2_beam_on_consumed(stream->output, NULL, stream_output_consumed, stream); h2_beam_on_produced(stream->output, output_produced, stream); if (stream->task->output.copy_files) { h2_beam_on_file_beam(stream->output, h2_beam_no_files, NULL); } /* we might see some file buckets in the output, see * if we have enough handles reserved. */ check_data_for(m, stream, 0); return status; } apr_status_t h2_mplx_out_open(h2_mplx *m, int stream_id, h2_bucket_beam *beam) { apr_status_t status; H2_MPLX_ENTER(m); if (m->aborted) { status = APR_ECONNABORTED; } else { status = out_open(m, stream_id, beam); } H2_MPLX_LEAVE(m); return status; } static apr_status_t out_close(h2_mplx *m, h2_task *task) { apr_status_t status = APR_SUCCESS; h2_stream *stream; if (!task) { return APR_ECONNABORTED; } if (task->c) { ++task->c->keepalives; } stream = h2_ihash_get(m->streams, task->stream_id); if (!stream) { return APR_ECONNABORTED; } ap_log_cerror(APLOG_MARK, APLOG_TRACE2, status, m->c, "h2_mplx(%s): close", task->id); status = h2_beam_close(task->output.beam); h2_beam_log(task->output.beam, m->c, APLOG_TRACE2, "out_close"); output_consumed_signal(m, task); check_data_for(m, stream, 0); return status; } apr_status_t h2_mplx_out_trywait(h2_mplx *m, apr_interval_time_t timeout, apr_thread_cond_t *iowait) { apr_status_t status; H2_MPLX_ENTER(m); if (m->aborted) { status = APR_ECONNABORTED; } else if (h2_mplx_has_master_events(m)) { status = APR_SUCCESS; } else { purge_streams(m, 0); h2_ihash_iter(m->streams, report_consumption_iter, m); m->added_output = iowait; status = apr_thread_cond_timedwait(m->added_output, m->lock, timeout); if (APLOGctrace2(m->c)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, m->c, "h2_mplx(%ld): trywait on data for %f ms)", m->id, timeout/1000.0); } m->added_output = NULL; } H2_MPLX_LEAVE(m); return status; } static void check_data_for(h2_mplx *m, h2_stream *stream, int lock) { if (h2_ififo_push(m->readyq, stream->id) == APR_SUCCESS) { apr_atomic_set32(&m->event_pending, 1); H2_MPLX_ENTER_MAYBE(m, lock); if (m->added_output) { apr_thread_cond_signal(m->added_output); } H2_MPLX_LEAVE_MAYBE(m, lock); } } apr_status_t h2_mplx_reprioritize(h2_mplx *m, h2_stream_pri_cmp *cmp, void *ctx) { apr_status_t status; H2_MPLX_ENTER(m); if (m->aborted) { status = APR_ECONNABORTED; } else { h2_iq_sort(m->q, cmp, ctx); ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, m->c, "h2_mplx(%ld): reprioritize tasks", m->id); status = APR_SUCCESS; } H2_MPLX_LEAVE(m); return status; } static void register_if_needed(h2_mplx *m) { if (!m->aborted && !m->is_registered && !h2_iq_empty(m->q)) { apr_status_t status = h2_workers_register(m->workers, m); if (status == APR_SUCCESS) { m->is_registered = 1; } else { ap_log_cerror(APLOG_MARK, APLOG_ERR, status, m->c, APLOGNO(10021) "h2_mplx(%ld): register at workers", m->id); } } } apr_status_t h2_mplx_process(h2_mplx *m, struct h2_stream *stream, h2_stream_pri_cmp *cmp, void *ctx) { apr_status_t status; H2_MPLX_ENTER(m); if (m->aborted) { status = APR_ECONNABORTED; } else { status = APR_SUCCESS; h2_ihash_add(m->streams, stream); if (h2_stream_is_ready(stream)) { /* already have a response */ check_data_for(m, stream, 0); ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, m->c, H2_STRM_MSG(stream, "process, add to readyq")); } else { h2_iq_add(m->q, stream->id, cmp, ctx); register_if_needed(m); ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, m->c, H2_STRM_MSG(stream, "process, added to q")); } } H2_MPLX_LEAVE(m); return status; } static h2_task *next_stream_task(h2_mplx *m) { h2_stream *stream; int sid; while (!m->aborted && (m->tasks_active < m->limit_active) && (sid = h2_iq_shift(m->q)) > 0) { stream = h2_ihash_get(m->streams, sid); if (stream) { conn_rec *slave, **pslave; pslave = (conn_rec **)apr_array_pop(m->spare_slaves); if (pslave) { slave = *pslave; slave->aborted = 0; } else { slave = h2_slave_create(m->c, stream->id, m->pool); } if (!stream->task) { if (sid > m->max_stream_started) { m->max_stream_started = sid; } if (stream->input) { h2_beam_on_consumed(stream->input, stream_input_ev, stream_input_consumed, stream); } stream->task = h2_task_create(slave, stream->id, stream->request, m, stream->input, stream->session->s->timeout, m->stream_max_mem); if (!stream->task) { ap_log_cerror(APLOG_MARK, APLOG_ERR, APR_ENOMEM, slave, H2_STRM_LOG(APLOGNO(02941), stream, "create task")); return NULL; } } stream->task->started_at = apr_time_now(); ++m->tasks_active; return stream->task; } } return NULL; } apr_status_t h2_mplx_pop_task(h2_mplx *m, h2_task **ptask) { apr_status_t rv = APR_EOF; *ptask = NULL; ap_assert(m); ap_assert(m->lock); if (APR_SUCCESS != (rv = apr_thread_mutex_lock(m->lock))) { return rv; } if (m->aborted) { rv = APR_EOF; } else { *ptask = next_stream_task(m); rv = (*ptask != NULL && !h2_iq_empty(m->q))? APR_EAGAIN : APR_SUCCESS; } if (APR_EAGAIN != rv) { m->is_registered = 0; /* h2_workers will discard this mplx */ } H2_MPLX_LEAVE(m); return rv; } static void task_done(h2_mplx *m, h2_task *task) { h2_stream *stream; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, m->c, "h2_mplx(%ld): task(%s) done", m->id, task->id); out_close(m, task); task->worker_done = 1; task->done_at = apr_time_now(); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, m->c, "h2_mplx(%s): request done, %f ms elapsed", task->id, (task->done_at - task->started_at) / 1000.0); if (task->c && !task->c->aborted && task->started_at > m->last_mood_change) { mplx_be_happy(m); } ap_assert(task->done_done == 0); stream = h2_ihash_get(m->streams, task->stream_id); if (stream) { /* stream not done yet. */ if (!m->aborted && task->redo) { /* reset and schedule again */ h2_task_redo(task); h2_iq_add(m->q, stream->id, NULL, NULL); ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, m->c, H2_STRM_MSG(stream, "redo, added to q")); } else { /* stream not cleaned up, stay around */ task->done_done = 1; ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, m->c, H2_STRM_MSG(stream, "task_done, stream open")); if (stream->input) { h2_beam_leave(stream->input); } /* more data will not arrive, resume the stream */ check_data_for(m, stream, 0); } } else if ((stream = h2_ihash_get(m->shold, task->stream_id)) != NULL) { /* stream is done, was just waiting for this. */ task->done_done = 1; ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, m->c, H2_STRM_MSG(stream, "task_done, in hold")); if (stream->input) { h2_beam_leave(stream->input); } stream_joined(m, stream); } else if ((stream = h2_ihash_get(m->spurge, task->stream_id)) != NULL) { ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, m->c, H2_STRM_LOG(APLOGNO(03517), stream, "already in spurge")); ap_assert("stream should not be in spurge" == NULL); } else { ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, m->c, APLOGNO(03518) "h2_mplx(%s): task_done, stream not found", task->id); ap_assert("stream should still be available" == NULL); } } void h2_mplx_task_done(h2_mplx *m, h2_task *task, h2_task **ptask) { H2_MPLX_ENTER_ALWAYS(m); --m->tasks_active; task_done(m, task); if (m->join_wait) { apr_thread_cond_signal(m->join_wait); } if (ptask) { /* caller wants another task */ *ptask = next_stream_task(m); } register_if_needed(m); H2_MPLX_LEAVE(m); } /******************************************************************************* * h2_mplx DoS protection ******************************************************************************/ static int timed_out_busy_iter(void *data, void *val) { stream_iter_ctx *ctx = data; h2_stream *stream = val; if (h2_task_has_started(stream->task) && !stream->task->worker_done && (ctx->now - stream->task->started_at) > stream->task->timeout) { /* timed out stream occupying a worker, found */ ctx->stream = stream; return 0; } return 1; } static h2_stream *get_timed_out_busy_stream(h2_mplx *m) { stream_iter_ctx ctx; ctx.m = m; ctx.stream = NULL; ctx.now = apr_time_now(); h2_ihash_iter(m->streams, timed_out_busy_iter, &ctx); return ctx.stream; } static int latest_repeatable_unsubmitted_iter(void *data, void *val) { stream_iter_ctx *ctx = data; h2_stream *stream = val; if (!stream->task) goto leave; if (!h2_task_has_started(stream->task) || stream->task->worker_done) goto leave; if (h2_stream_is_ready(stream)) goto leave; if (stream->task->redo) { ++ctx->count; goto leave; } if (h2_task_can_redo(stream->task)) { /* this task occupies a worker, the response has not been submitted * yet, not been cancelled and it is a repeatable request * -> we could redo it later */ if (!ctx->stream || (ctx->stream->task->started_at < stream->task->started_at)) { /* we did not have one or this one was started later */ ctx->stream = stream; } } leave: return 1; } static apr_status_t assess_task_to_throttle(h2_task **ptask, h2_mplx *m) { stream_iter_ctx ctx; /* count the running tasks already marked for redo and get one that could * be throttled */ *ptask = NULL; ctx.m = m; ctx.stream = NULL; ctx.count = 0; h2_ihash_iter(m->streams, latest_repeatable_unsubmitted_iter, &ctx); if (m->tasks_active - ctx.count > m->limit_active) { /* we are above the limit of running tasks, accounting for the ones * already throttled. */ if (ctx.stream && ctx.stream->task) { *ptask = ctx.stream->task; return APR_EAGAIN; } /* above limit, be seeing no candidate for easy throttling */ if (get_timed_out_busy_stream(m)) { /* Too many busy workers, unable to cancel enough streams * and with a busy, timed out stream, we tell the client * to go away... */ return APR_TIMEUP; } } return APR_SUCCESS; } static apr_status_t unschedule_slow_tasks(h2_mplx *m) { h2_task *task; apr_status_t rv; /* Try to get rid of streams that occupy workers. Look for safe requests * that are repeatable. If none found, fail the connection. */ while (APR_EAGAIN == (rv = assess_task_to_throttle(&task, m))) { ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, m->c, "h2_mplx(%s): unschedule, resetting task for redo later", task->id); task->redo = 1; h2_task_rst(task, H2_ERR_CANCEL); } return rv; } static apr_status_t mplx_be_happy(h2_mplx *m) { apr_time_t now; --m->irritations_since; now = apr_time_now(); if (m->limit_active < m->max_active && (now - m->last_mood_change >= m->mood_update_interval || m->irritations_since < -m->limit_active)) { m->limit_active = H2MIN(m->limit_active * 2, m->max_active); m->last_mood_change = now; m->irritations_since = 0; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, m->c, "h2_mplx(%ld): mood update, increasing worker limit to %d", m->id, m->limit_active); } return APR_SUCCESS; } static apr_status_t mplx_be_annoyed(h2_mplx *m) { apr_status_t status = APR_SUCCESS; apr_time_t now; ++m->irritations_since; now = apr_time_now(); if (m->limit_active > 2 && ((now - m->last_mood_change >= m->mood_update_interval) || (m->irritations_since >= m->limit_active))) { if (m->limit_active > 16) { m->limit_active = 16; } else if (m->limit_active > 8) { m->limit_active = 8; } else if (m->limit_active > 4) { m->limit_active = 4; } else if (m->limit_active > 2) { m->limit_active = 2; } m->last_mood_change = now; m->irritations_since = 0; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, m->c, "h2_mplx(%ld): mood update, decreasing worker limit to %d", m->id, m->limit_active); } if (m->tasks_active > m->limit_active) { status = unschedule_slow_tasks(m); } return status; } apr_status_t h2_mplx_idle(h2_mplx *m) { apr_status_t status = APR_SUCCESS; apr_size_t scount; H2_MPLX_ENTER(m); scount = h2_ihash_count(m->streams); if (scount > 0) { if (m->tasks_active) { /* If we have streams in connection state 'IDLE', meaning * all streams are ready to sent data out, but lack * WINDOW_UPDATEs. * * This is ok, unless we have streams that still occupy * h2 workers. As worker threads are a scarce resource, * we need to take measures that we do not get DoSed. * * This is what we call an 'idle block'. Limit the amount * of busy workers we allow for this connection until it * well behaves. */ status = mplx_be_annoyed(m); } else if (!h2_iq_empty(m->q)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, m->c, "h2_mplx(%ld): idle, but %d streams to process", m->id, (int)h2_iq_count(m->q)); status = APR_EAGAIN; } else { /* idle, have streams, but no tasks active. what are we waiting for? * WINDOW_UPDATEs from client? */ h2_stream *stream = NULL; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, m->c, "h2_mplx(%ld): idle, no tasks ongoing, %d streams", m->id, (int)h2_ihash_count(m->streams)); h2_ihash_shift(m->streams, (void**)&stream, 1); if (stream) { h2_ihash_add(m->streams, stream); if (stream->output && !stream->out_checked) { /* FIXME: this looks like a race between the session thinking * it is idle and the EOF on a stream not being sent. * Signal to caller to leave IDLE state. */ ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, m->c, H2_STRM_MSG(stream, "output closed=%d, mplx idle" ", out has %ld bytes buffered"), h2_beam_is_closed(stream->output), (long)h2_beam_get_buffered(stream->output)); h2_ihash_add(m->streams, stream); check_data_for(m, stream, 0); stream->out_checked = 1; status = APR_EAGAIN; } } } } register_if_needed(m); H2_MPLX_LEAVE(m); return status; } /******************************************************************************* * mplx master events dispatching ******************************************************************************/ int h2_mplx_has_master_events(h2_mplx *m) { return apr_atomic_read32(&m->event_pending) > 0; } apr_status_t h2_mplx_dispatch_master_events(h2_mplx *m, stream_ev_callback *on_resume, void *on_ctx) { h2_stream *stream; int n, id; ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, m->c, "h2_mplx(%ld): dispatch events", m->id); apr_atomic_set32(&m->event_pending, 0); /* update input windows for streams */ h2_ihash_iter(m->streams, report_consumption_iter, m); purge_streams(m, 1); n = h2_ififo_count(m->readyq); while (n > 0 && (h2_ififo_try_pull(m->readyq, &id) == APR_SUCCESS)) { --n; stream = h2_ihash_get(m->streams, id); if (stream) { on_resume(on_ctx, stream); } } return APR_SUCCESS; } apr_status_t h2_mplx_keep_active(h2_mplx *m, h2_stream *stream) { check_data_for(m, stream, 1); return APR_SUCCESS; } int h2_mplx_awaits_data(h2_mplx *m) { int waiting = 1; H2_MPLX_ENTER_ALWAYS(m); if (h2_ihash_empty(m->streams)) { waiting = 0; } else if (!m->tasks_active && !h2_ififo_count(m->readyq) && h2_iq_empty(m->q)) { waiting = 0; } H2_MPLX_LEAVE(m); return waiting; } apr_status_t h2_mplx_client_rst(h2_mplx *m, int stream_id) { h2_stream *stream; apr_status_t status = APR_SUCCESS; H2_MPLX_ENTER_ALWAYS(m); stream = h2_ihash_get(m->streams, stream_id); if (stream && stream->task) { status = mplx_be_annoyed(m); } H2_MPLX_LEAVE(m); return status; } httpd-2.4.41/modules/http2/NWGNUmakefile0000644000000000000500000000775212715172671016310 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/mod_http2.nlm \ $(OBJDIR)/proxyht2.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/http2/h2_conn_io.h0000644000000000000500000000452013442215451016135 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_conn_io__ #define __mod_h2__h2_conn_io__ struct h2_config; struct h2_session; /* h2_io is the basic handler of a httpd connection. It keeps two brigades, * one for input, one for output and works with the installed connection * filters. * The read is done via a callback function, so that input can be processed * directly without copying. */ typedef struct { conn_rec *c; apr_bucket_brigade *output; int is_tls; apr_time_t cooldown_usecs; apr_int64_t warmup_size; apr_size_t write_size; apr_time_t last_write; apr_int64_t bytes_read; apr_int64_t bytes_written; int buffer_output; apr_size_t flush_threshold; unsigned int is_flushed : 1; char *scratch; apr_size_t ssize; apr_size_t slen; } h2_conn_io; apr_status_t h2_conn_io_init(h2_conn_io *io, conn_rec *c, server_rec *s); /** * Append data to the buffered output. * @param buf the data to append * @param length the length of the data to append */ apr_status_t h2_conn_io_write(h2_conn_io *io, const char *buf, size_t length); apr_status_t h2_conn_io_pass(h2_conn_io *io, apr_bucket_brigade *bb); /** * Pass any buffered data on to the connection output filters. * @param io the connection io * @param flush if a flush bucket should be appended to any output */ apr_status_t h2_conn_io_flush(h2_conn_io *io); /** * Check if the buffered amount of data needs flushing. */ int h2_conn_io_needs_flush(h2_conn_io *io); #endif /* defined(__mod_h2__h2_conn_io__) */ httpd-2.4.41/modules/http2/h2.h0000644000000000000500000001314213442215451014431 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2__ #define __mod_h2__h2__ /** * The magic PRIamble of RFC 7540 that is always sent when starting * a h2 communication. */ extern const char *H2_MAGIC_TOKEN; #define H2_ERR_NO_ERROR (0x00) #define H2_ERR_PROTOCOL_ERROR (0x01) #define H2_ERR_INTERNAL_ERROR (0x02) #define H2_ERR_FLOW_CONTROL_ERROR (0x03) #define H2_ERR_SETTINGS_TIMEOUT (0x04) #define H2_ERR_STREAM_CLOSED (0x05) #define H2_ERR_FRAME_SIZE_ERROR (0x06) #define H2_ERR_REFUSED_STREAM (0x07) #define H2_ERR_CANCEL (0x08) #define H2_ERR_COMPRESSION_ERROR (0x09) #define H2_ERR_CONNECT_ERROR (0x0a) #define H2_ERR_ENHANCE_YOUR_CALM (0x0b) #define H2_ERR_INADEQUATE_SECURITY (0x0c) #define H2_ERR_HTTP_1_1_REQUIRED (0x0d) #define H2_HEADER_METHOD ":method" #define H2_HEADER_METHOD_LEN 7 #define H2_HEADER_SCHEME ":scheme" #define H2_HEADER_SCHEME_LEN 7 #define H2_HEADER_AUTH ":authority" #define H2_HEADER_AUTH_LEN 10 #define H2_HEADER_PATH ":path" #define H2_HEADER_PATH_LEN 5 #define H2_CRLF "\r\n" /* Size of the frame header itself in HTTP/2 */ #define H2_FRAME_HDR_LEN 9 /* Max data size to write so it fits inside a TLS record */ #define H2_DATA_CHUNK_SIZE ((16*1024) - 100 - H2_FRAME_HDR_LEN) /* Maximum number of padding bytes in a frame, rfc7540 */ #define H2_MAX_PADLEN 256 /* Initial default window size, RFC 7540 ch. 6.5.2 */ #define H2_INITIAL_WINDOW_SIZE ((64*1024)-1) #define H2_STREAM_CLIENT_INITIATED(id) (id&0x01) #define H2_ALEN(a) (sizeof(a)/sizeof((a)[0])) #define H2MAX(x,y) ((x) > (y) ? (x) : (y)) #define H2MIN(x,y) ((x) < (y) ? (x) : (y)) typedef enum { H2_DEPENDANT_AFTER, H2_DEPENDANT_INTERLEAVED, H2_DEPENDANT_BEFORE, } h2_dependency; typedef struct h2_priority { h2_dependency dependency; int weight; } h2_priority; typedef enum { H2_PUSH_NONE, H2_PUSH_DEFAULT, H2_PUSH_HEAD, H2_PUSH_FAST_LOAD, } h2_push_policy; typedef enum { H2_SESSION_ST_INIT, /* send initial SETTINGS, etc. */ H2_SESSION_ST_DONE, /* finished, connection close */ H2_SESSION_ST_IDLE, /* nothing to write, expecting data inc */ H2_SESSION_ST_BUSY, /* read/write without stop */ H2_SESSION_ST_WAIT, /* waiting for tasks reporting back */ H2_SESSION_ST_CLEANUP, /* pool is being cleaned up */ } h2_session_state; typedef struct h2_session_props { int accepted_max; /* the highest remote stream id was/will be handled */ int completed_max; /* the highest remote stream completed */ int emitted_count; /* the number of local streams sent */ int emitted_max; /* the highest local stream id sent */ int error; /* the last session error encountered */ unsigned int accepting : 1; /* if the session is accepting new streams */ unsigned int shutdown : 1; /* if the final GOAWAY has been sent */ } h2_session_props; typedef enum h2_stream_state_t { H2_SS_IDLE, H2_SS_RSVD_R, H2_SS_RSVD_L, H2_SS_OPEN, H2_SS_CLOSED_R, H2_SS_CLOSED_L, H2_SS_CLOSED, H2_SS_CLEANUP, H2_SS_MAX } h2_stream_state_t; typedef enum { H2_SEV_CLOSED_L, H2_SEV_CLOSED_R, H2_SEV_CANCELLED, H2_SEV_EOS_SENT, H2_SEV_IN_DATA_PENDING, } h2_stream_event_t; /* h2_request is the transformer of HTTP2 streams into HTTP/1.1 internal * format that will be fed to various httpd input filters to finally * become a request_rec to be handled by soemone. */ typedef struct h2_request h2_request; struct h2_request { const char *method; /* pseudo header values, see ch. 8.1.2.3 */ const char *scheme; const char *authority; const char *path; apr_table_t *headers; apr_time_t request_time; unsigned int chunked : 1; /* iff requst body needs to be forwarded as chunked */ unsigned int serialize : 1; /* iff this request is written in HTTP/1.1 serialization */ apr_off_t raw_bytes; /* RAW network bytes that generated this request - if known. */ }; typedef struct h2_headers h2_headers; struct h2_headers { int status; apr_table_t *headers; apr_table_t *notes; apr_off_t raw_bytes; /* RAW network bytes that generated this request - if known. */ }; typedef apr_status_t h2_io_data_cb(void *ctx, const char *data, apr_off_t len); typedef int h2_stream_pri_cmp(int stream_id1, int stream_id2, void *ctx); /* Note key to attach connection task id to conn_rec/request_rec instances */ #define H2_TASK_ID_NOTE "http2-task-id" #define H2_FILTER_DEBUG_NOTE "http2-debug" #define H2_HDR_CONFORMANCE "http2-hdr-conformance" #define H2_HDR_CONFORMANCE_UNSAFE "unsafe" #define H2_PUSH_MODE_NOTE "http2-push-mode" #endif /* defined(__mod_h2__h2__) */ httpd-2.4.41/modules/http2/NWGNUproxyht20000644000000000000500000001205012761517777016330 0ustar rootsrc# # This Makefile requires the environment var NGH2SRC # pointing to the base directory of nghttp2 source tree. # # # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(SRC)/include \ $(NGH2SRC)/lib/includes \ $(STDMOD)/proxy \ $(SERVER)/mpm/NetWare \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ -L$(OBJDIR) \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxyht2 # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) HTTP2 Proxy module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 65536 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If this is specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # Declare all target files (you must add your files here) # # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_proxy_http2.o \ $(OBJDIR)/h2_proxy_session.o \ $(OBJDIR)/h2_proxy_util.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ Libc \ Apache2 \ mod_proxy \ mod_http2 \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ @$(OBJDIR)/mod_http2.imp \ ap_proxy_acquire_connection \ ap_proxy_canon_netloc \ ap_proxy_canonenc \ ap_proxy_connect_backend \ ap_proxy_connection_create \ ap_proxy_cookie_reverse_map \ ap_proxy_determine_connection \ ap_proxy_location_reverse_map \ ap_proxy_port_of_scheme \ ap_proxy_release_connection \ ap_proxy_ssl_connection_cleanup \ ap_sock_disable_nagle \ proxy_hook_canon_handler \ proxy_hook_scheme_handler \ proxy_module \ proxy_run_detach_backend \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ proxy_http2_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs := # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) clean :: # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/http2/h2_conn.c0000644000000000000500000003003613520520073015436 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include #include #include #include #include "h2_private.h" #include "h2.h" #include "h2_config.h" #include "h2_ctx.h" #include "h2_filter.h" #include "h2_mplx.h" #include "h2_session.h" #include "h2_stream.h" #include "h2_h2.h" #include "h2_task.h" #include "h2_workers.h" #include "h2_conn.h" #include "h2_version.h" static struct h2_workers *workers; static h2_mpm_type_t mpm_type = H2_MPM_UNKNOWN; static module *mpm_module; static int async_mpm; static int mpm_supported = 1; static apr_socket_t *dummy_socket; static void check_modules(int force) { static int checked = 0; int i; if (force || !checked) { for (i = 0; ap_loaded_modules[i]; ++i) { module *m = ap_loaded_modules[i]; if (!strcmp("event.c", m->name)) { mpm_type = H2_MPM_EVENT; mpm_module = m; break; } else if (!strcmp("motorz.c", m->name)) { mpm_type = H2_MPM_MOTORZ; mpm_module = m; break; } else if (!strcmp("mpm_netware.c", m->name)) { mpm_type = H2_MPM_NETWARE; mpm_module = m; break; } else if (!strcmp("prefork.c", m->name)) { mpm_type = H2_MPM_PREFORK; mpm_module = m; /* While http2 can work really well on prefork, it collides * today's use case for prefork: runnning single-thread app engines * like php. If we restrict h2_workers to 1 per process, php will * work fine, but browser will be limited to 1 active request at a * time. */ mpm_supported = 0; break; } else if (!strcmp("simple_api.c", m->name)) { mpm_type = H2_MPM_SIMPLE; mpm_module = m; mpm_supported = 0; break; } else if (!strcmp("mpm_winnt.c", m->name)) { mpm_type = H2_MPM_WINNT; mpm_module = m; break; } else if (!strcmp("worker.c", m->name)) { mpm_type = H2_MPM_WORKER; mpm_module = m; break; } } checked = 1; } } apr_status_t h2_conn_child_init(apr_pool_t *pool, server_rec *s) { apr_status_t status = APR_SUCCESS; int minw, maxw; int max_threads_per_child = 0; int idle_secs = 0; check_modules(1); ap_mpm_query(AP_MPMQ_MAX_THREADS, &max_threads_per_child); status = ap_mpm_query(AP_MPMQ_IS_ASYNC, &async_mpm); if (status != APR_SUCCESS) { /* some MPMs do not implemnent this */ async_mpm = 0; status = APR_SUCCESS; } h2_config_init(pool); h2_get_num_workers(s, &minw, &maxw); idle_secs = h2_config_sgeti(s, H2_CONF_MAX_WORKER_IDLE_SECS); ap_log_error(APLOG_MARK, APLOG_TRACE3, 0, s, "h2_workers: min=%d max=%d, mthrpchild=%d, idle_secs=%d", minw, maxw, max_threads_per_child, idle_secs); workers = h2_workers_create(s, pool, minw, maxw, idle_secs); ap_register_input_filter("H2_IN", h2_filter_core_input, NULL, AP_FTYPE_CONNECTION); status = h2_mplx_child_init(pool, s); if (status == APR_SUCCESS) { status = apr_socket_create(&dummy_socket, APR_INET, SOCK_STREAM, APR_PROTO_TCP, pool); } return status; } h2_mpm_type_t h2_conn_mpm_type(void) { check_modules(0); return mpm_type; } const char *h2_conn_mpm_name(void) { check_modules(0); return mpm_module? mpm_module->name : "unknown"; } int h2_mpm_supported(void) { check_modules(0); return mpm_supported; } static module *h2_conn_mpm_module(void) { check_modules(0); return mpm_module; } apr_status_t h2_conn_setup(conn_rec *c, request_rec *r, server_rec *s) { h2_session *session; h2_ctx *ctx; apr_status_t status; if (!workers) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(02911) "workers not initialized"); return APR_EGENERAL; } if (APR_SUCCESS == (status = h2_session_create(&session, c, r, s, workers))) { ctx = h2_ctx_get(c, 1); h2_ctx_session_set(ctx, session); } return status; } apr_status_t h2_conn_run(conn_rec *c) { apr_status_t status; int mpm_state = 0; h2_session *session = h2_ctx_get_session(c); ap_assert(session); do { if (c->cs) { c->cs->sense = CONN_SENSE_DEFAULT; c->cs->state = CONN_STATE_HANDLER; } status = h2_session_process(session, async_mpm); if (APR_STATUS_IS_EOF(status)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, c, H2_SSSN_LOG(APLOGNO(03045), session, "process, closing conn")); c->keepalive = AP_CONN_CLOSE; } else { c->keepalive = AP_CONN_KEEPALIVE; } if (ap_mpm_query(AP_MPMQ_MPM_STATE, &mpm_state)) { break; } } while (!async_mpm && c->keepalive == AP_CONN_KEEPALIVE && mpm_state != AP_MPMQ_STOPPING); if (c->cs) { switch (session->state) { case H2_SESSION_ST_INIT: case H2_SESSION_ST_IDLE: case H2_SESSION_ST_BUSY: case H2_SESSION_ST_WAIT: c->cs->state = CONN_STATE_WRITE_COMPLETION; if (c->cs && (session->open_streams || !session->remote.emitted_count)) { /* let the MPM know that we are not done and want * the Timeout behaviour instead of a KeepAliveTimeout * See PR 63534. */ c->cs->sense = CONN_SENSE_WANT_READ; } break; case H2_SESSION_ST_CLEANUP: case H2_SESSION_ST_DONE: default: c->cs->state = CONN_STATE_LINGER; break; } } return APR_SUCCESS; } apr_status_t h2_conn_pre_close(struct h2_ctx *ctx, conn_rec *c) { h2_session *session = h2_ctx_get_session(c); if (session) { apr_status_t status = h2_session_pre_close(session, async_mpm); return (status == APR_SUCCESS)? DONE : status; } return DONE; } conn_rec *h2_slave_create(conn_rec *master, int slave_id, apr_pool_t *parent) { apr_allocator_t *allocator; apr_status_t status; apr_pool_t *pool; conn_rec *c; void *cfg; module *mpm; ap_assert(master); ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, master, "h2_stream(%ld-%d): create slave", master->id, slave_id); /* We create a pool with its own allocator to be used for * processing a request. This is the only way to have the processing * independant of its parent pool in the sense that it can work in * another thread. Also, the new allocator needs its own mutex to * synchronize sub-pools. */ apr_allocator_create(&allocator); apr_allocator_max_free_set(allocator, ap_max_mem_free); status = apr_pool_create_ex(&pool, parent, NULL, allocator); if (status != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_ERR, status, master, APLOGNO(10004) "h2_session(%ld-%d): create slave pool", master->id, slave_id); return NULL; } apr_allocator_owner_set(allocator, pool); apr_pool_tag(pool, "h2_slave_conn"); c = (conn_rec *) apr_palloc(pool, sizeof(conn_rec)); if (c == NULL) { ap_log_cerror(APLOG_MARK, APLOG_ERR, APR_ENOMEM, master, APLOGNO(02913) "h2_session(%ld-%d): create slave", master->id, slave_id); apr_pool_destroy(pool); return NULL; } memcpy(c, master, sizeof(conn_rec)); c->master = master; c->pool = pool; c->conn_config = ap_create_conn_config(pool); c->notes = apr_table_make(pool, 5); c->input_filters = NULL; c->output_filters = NULL; c->keepalives = 0; #if AP_MODULE_MAGIC_AT_LEAST(20180903, 1) c->filter_conn_ctx = NULL; #endif c->bucket_alloc = apr_bucket_alloc_create(pool); #if !AP_MODULE_MAGIC_AT_LEAST(20180720, 1) c->data_in_input_filters = 0; c->data_in_output_filters = 0; #endif /* prevent mpm_event from making wrong assumptions about this connection, * like e.g. using its socket for an async read check. */ c->clogging_input_filters = 1; c->log = NULL; c->log_id = apr_psprintf(pool, "%ld-%d", master->id, slave_id); c->aborted = 0; /* We cannot install the master connection socket on the slaves, as * modules mess with timeouts/blocking of the socket, with * unwanted side effects to the master connection processing. * Fortunately, since we never use the slave socket, we can just install * a single, process-wide dummy and everyone is happy. */ ap_set_module_config(c->conn_config, &core_module, dummy_socket); /* TODO: these should be unique to this thread */ c->sbh = master->sbh; /* TODO: not all mpm modules have learned about slave connections yet. * copy their config from master to slave. */ if ((mpm = h2_conn_mpm_module()) != NULL) { cfg = ap_get_module_config(master->conn_config, mpm); ap_set_module_config(c->conn_config, mpm, cfg); } ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, c, "h2_slave(%s): created", c->log_id); return c; } void h2_slave_destroy(conn_rec *slave) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, slave, "h2_slave(%s): destroy", slave->log_id); slave->sbh = NULL; apr_pool_destroy(slave->pool); } apr_status_t h2_slave_run_pre_connection(conn_rec *slave, apr_socket_t *csd) { if (slave->keepalives == 0) { /* Simulate that we had already a request on this connection. Some * hooks trigger special behaviour when keepalives is 0. * (Not necessarily in pre_connection, but later. Set it here, so it * is in place.) */ slave->keepalives = 1; /* We signal that this connection will be closed after the request. * Which is true in that sense that we throw away all traffic data * on this slave connection after each requests. Although we might * reuse internal structures like memory pools. * The wanted effect of this is that httpd does not try to clean up * any dangling data on this connection when a request is done. Which * is unneccessary on a h2 stream. */ slave->keepalive = AP_CONN_CLOSE; return ap_run_pre_connection(slave, csd); } ap_assert(slave->output_filters); return APR_SUCCESS; } httpd-2.4.41/modules/http2/h2_util.c0000644000000000000500000015567013350443476015506 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include #include "h2.h" #include "h2_util.h" /* h2_log2(n) iff n is a power of 2 */ unsigned char h2_log2(int n) { int lz = 0; if (!n) { return 0; } if (!(n & 0xffff0000u)) { lz += 16; n = (n << 16); } if (!(n & 0xff000000u)) { lz += 8; n = (n << 8); } if (!(n & 0xf0000000u)) { lz += 4; n = (n << 4); } if (!(n & 0xc0000000u)) { lz += 2; n = (n << 2); } if (!(n & 0x80000000u)) { lz += 1; } return 31 - lz; } size_t h2_util_hex_dump(char *buffer, size_t maxlen, const char *data, size_t datalen) { size_t offset = 0; size_t maxoffset = (maxlen-4); size_t i; for (i = 0; i < datalen && offset < maxoffset; ++i) { const char *sep = (i && i % 16 == 0)? "\n" : " "; int n = apr_snprintf(buffer+offset, maxoffset-offset, "%2x%s", ((unsigned int)data[i]&0xff), sep); offset += n; } strcpy(buffer+offset, (i= 'a' && s[i] <= 'z') { s[i] -= 'a' - 'A'; } start = 0; } else if (s[i] == '-') { start = 1; } } } /* base64 url encoding ****************************************************************************/ #define N6 (unsigned int)-1 static const unsigned int BASE64URL_UINT6[] = { /* 0 1 2 3 4 5 6 7 8 9 a b c d e f */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* 0 */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* 1 */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, 62, N6, N6, /* 2 */ 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, N6, N6, N6, N6, N6, N6, /* 3 */ N6, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, /* 4 */ 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, N6, N6, N6, N6, 63, /* 5 */ N6, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, /* 6 */ 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, N6, N6, N6, N6, N6, /* 7 */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* 8 */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* 9 */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* a */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* b */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* c */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* d */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* e */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6 /* f */ }; static const unsigned char BASE64URL_CHARS[] = { 'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', 'I', 'J', /* 0 - 9 */ 'K', 'L', 'M', 'N', 'O', 'P', 'Q', 'R', 'S', 'T', /* 10 - 19 */ 'U', 'V', 'W', 'X', 'Y', 'Z', 'a', 'b', 'c', 'd', /* 20 - 29 */ 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', /* 30 - 39 */ 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x', /* 40 - 49 */ 'y', 'z', '0', '1', '2', '3', '4', '5', '6', '7', /* 50 - 59 */ '8', '9', '-', '_', ' ', ' ', ' ', ' ', ' ', ' ', /* 60 - 69 */ }; #define BASE64URL_CHAR(x) BASE64URL_CHARS[ (unsigned int)(x) & 0x3fu ] apr_size_t h2_util_base64url_decode(const char **decoded, const char *encoded, apr_pool_t *pool) { const unsigned char *e = (const unsigned char *)encoded; const unsigned char *p = e; unsigned char *d; unsigned int n; long len, mlen, remain, i; while (*p && BASE64URL_UINT6[ *p ] != N6) { ++p; } len = (int)(p - e); mlen = (len/4)*4; *decoded = apr_pcalloc(pool, (apr_size_t)len + 1); i = 0; d = (unsigned char*)*decoded; for (; i < mlen; i += 4) { n = ((BASE64URL_UINT6[ e[i+0] ] << 18) + (BASE64URL_UINT6[ e[i+1] ] << 12) + (BASE64URL_UINT6[ e[i+2] ] << 6) + (BASE64URL_UINT6[ e[i+3] ])); *d++ = (unsigned char)(n >> 16); *d++ = (unsigned char)(n >> 8 & 0xffu); *d++ = (unsigned char)(n & 0xffu); } remain = len - mlen; switch (remain) { case 2: n = ((BASE64URL_UINT6[ e[mlen+0] ] << 18) + (BASE64URL_UINT6[ e[mlen+1] ] << 12)); *d++ = (unsigned char)(n >> 16); remain = 1; break; case 3: n = ((BASE64URL_UINT6[ e[mlen+0] ] << 18) + (BASE64URL_UINT6[ e[mlen+1] ] << 12) + (BASE64URL_UINT6[ e[mlen+2] ] << 6)); *d++ = (unsigned char)(n >> 16); *d++ = (unsigned char)(n >> 8 & 0xffu); remain = 2; break; default: /* do nothing */ break; } return (apr_size_t)(mlen/4*3 + remain); } const char *h2_util_base64url_encode(const char *data, apr_size_t dlen, apr_pool_t *pool) { int i, len = (int)dlen; apr_size_t slen = ((dlen+2)/3)*4 + 1; /* 0 terminated */ const unsigned char *udata = (const unsigned char*)data; unsigned char *enc, *p = apr_pcalloc(pool, slen); enc = p; for (i = 0; i < len-2; i+= 3) { *p++ = BASE64URL_CHAR( (udata[i] >> 2) ); *p++ = BASE64URL_CHAR( (udata[i] << 4) + (udata[i+1] >> 4) ); *p++ = BASE64URL_CHAR( (udata[i+1] << 2) + (udata[i+2] >> 6) ); *p++ = BASE64URL_CHAR( (udata[i+2]) ); } if (i < len) { *p++ = BASE64URL_CHAR( (udata[i] >> 2) ); if (i == (len - 1)) { *p++ = BASE64URL_CHARS[ ((unsigned int)udata[i] << 4) & 0x3fu ]; } else { *p++ = BASE64URL_CHAR( (udata[i] << 4) + (udata[i+1] >> 4) ); *p++ = BASE64URL_CHAR( (udata[i+1] << 2) ); } } *p++ = '\0'; return (char *)enc; } /******************************************************************************* * ihash - hash for structs with int identifier ******************************************************************************/ struct h2_ihash_t { apr_hash_t *hash; size_t ioff; }; static unsigned int ihash(const char *key, apr_ssize_t *klen) { return (unsigned int)(*((int*)key)); } h2_ihash_t *h2_ihash_create(apr_pool_t *pool, size_t offset_of_int) { h2_ihash_t *ih = apr_pcalloc(pool, sizeof(h2_ihash_t)); ih->hash = apr_hash_make_custom(pool, ihash); ih->ioff = offset_of_int; return ih; } size_t h2_ihash_count(h2_ihash_t *ih) { return apr_hash_count(ih->hash); } int h2_ihash_empty(h2_ihash_t *ih) { return apr_hash_count(ih->hash) == 0; } void *h2_ihash_get(h2_ihash_t *ih, int id) { return apr_hash_get(ih->hash, &id, sizeof(id)); } typedef struct { h2_ihash_iter_t *iter; void *ctx; } iter_ctx; static int ihash_iter(void *ctx, const void *key, apr_ssize_t klen, const void *val) { iter_ctx *ictx = ctx; return ictx->iter(ictx->ctx, (void*)val); /* why is this passed const?*/ } int h2_ihash_iter(h2_ihash_t *ih, h2_ihash_iter_t *fn, void *ctx) { iter_ctx ictx; ictx.iter = fn; ictx.ctx = ctx; return apr_hash_do(ihash_iter, &ictx, ih->hash); } void h2_ihash_add(h2_ihash_t *ih, void *val) { apr_hash_set(ih->hash, ((char *)val + ih->ioff), sizeof(int), val); } void h2_ihash_remove(h2_ihash_t *ih, int id) { apr_hash_set(ih->hash, &id, sizeof(id), NULL); } void h2_ihash_remove_val(h2_ihash_t *ih, void *val) { int id = *((int*)((char *)val + ih->ioff)); apr_hash_set(ih->hash, &id, sizeof(id), NULL); } void h2_ihash_clear(h2_ihash_t *ih) { apr_hash_clear(ih->hash); } typedef struct { h2_ihash_t *ih; void **buffer; size_t max; size_t len; } collect_ctx; static int collect_iter(void *x, void *val) { collect_ctx *ctx = x; if (ctx->len < ctx->max) { ctx->buffer[ctx->len++] = val; return 1; } return 0; } size_t h2_ihash_shift(h2_ihash_t *ih, void **buffer, size_t max) { collect_ctx ctx; size_t i; ctx.ih = ih; ctx.buffer = buffer; ctx.max = max; ctx.len = 0; h2_ihash_iter(ih, collect_iter, &ctx); for (i = 0; i < ctx.len; ++i) { h2_ihash_remove_val(ih, buffer[i]); } return ctx.len; } /******************************************************************************* * iqueue - sorted list of int ******************************************************************************/ static void iq_grow(h2_iqueue *q, int nlen); static void iq_swap(h2_iqueue *q, int i, int j); static int iq_bubble_up(h2_iqueue *q, int i, int top, h2_iq_cmp *cmp, void *ctx); static int iq_bubble_down(h2_iqueue *q, int i, int bottom, h2_iq_cmp *cmp, void *ctx); h2_iqueue *h2_iq_create(apr_pool_t *pool, int capacity) { h2_iqueue *q = apr_pcalloc(pool, sizeof(h2_iqueue)); if (q) { q->pool = pool; iq_grow(q, capacity); q->nelts = 0; } return q; } int h2_iq_empty(h2_iqueue *q) { return q->nelts == 0; } int h2_iq_count(h2_iqueue *q) { return q->nelts; } int h2_iq_add(h2_iqueue *q, int sid, h2_iq_cmp *cmp, void *ctx) { int i; if (h2_iq_contains(q, sid)) { return 0; } if (q->nelts >= q->nalloc) { iq_grow(q, q->nalloc * 2); } i = (q->head + q->nelts) % q->nalloc; q->elts[i] = sid; ++q->nelts; if (cmp) { /* bubble it to the front of the queue */ iq_bubble_up(q, i, q->head, cmp, ctx); } return 1; } int h2_iq_append(h2_iqueue *q, int sid) { return h2_iq_add(q, sid, NULL, NULL); } int h2_iq_remove(h2_iqueue *q, int sid) { int i; for (i = 0; i < q->nelts; ++i) { if (sid == q->elts[(q->head + i) % q->nalloc]) { break; } } if (i < q->nelts) { ++i; for (; i < q->nelts; ++i) { q->elts[(q->head+i-1)%q->nalloc] = q->elts[(q->head+i)%q->nalloc]; } --q->nelts; return 1; } return 0; } void h2_iq_clear(h2_iqueue *q) { q->nelts = 0; } void h2_iq_sort(h2_iqueue *q, h2_iq_cmp *cmp, void *ctx) { /* Assume that changes in ordering are minimal. This needs, * best case, q->nelts - 1 comparisions to check that nothing * changed. */ if (q->nelts > 0) { int i, ni, prev, last; /* Start at the end of the queue and create a tail of sorted * entries. Make that tail one element longer in each iteration. */ last = i = (q->head + q->nelts - 1) % q->nalloc; while (i != q->head) { prev = (q->nalloc + i - 1) % q->nalloc; ni = iq_bubble_up(q, i, prev, cmp, ctx); if (ni == prev) { /* i bubbled one up, bubble the new i down, which * keeps all tasks below i sorted. */ iq_bubble_down(q, i, last, cmp, ctx); } i = prev; }; } } int h2_iq_shift(h2_iqueue *q) { int sid; if (q->nelts <= 0) { return 0; } sid = q->elts[q->head]; q->head = (q->head + 1) % q->nalloc; q->nelts--; return sid; } size_t h2_iq_mshift(h2_iqueue *q, int *pint, size_t max) { int i; for (i = 0; i < max; ++i) { pint[i] = h2_iq_shift(q); if (pint[i] == 0) { break; } } return i; } static void iq_grow(h2_iqueue *q, int nlen) { if (nlen > q->nalloc) { int *nq = apr_pcalloc(q->pool, sizeof(int) * nlen); if (q->nelts > 0) { int l = ((q->head + q->nelts) % q->nalloc) - q->head; memmove(nq, q->elts + q->head, sizeof(int) * l); if (l < q->nelts) { /* elts wrapped, append elts in [0, remain] to nq */ int remain = q->nelts - l; memmove(nq + l, q->elts, sizeof(int) * remain); } } q->elts = nq; q->nalloc = nlen; q->head = 0; } } static void iq_swap(h2_iqueue *q, int i, int j) { int x = q->elts[i]; q->elts[i] = q->elts[j]; q->elts[j] = x; } static int iq_bubble_up(h2_iqueue *q, int i, int top, h2_iq_cmp *cmp, void *ctx) { int prev; while (((prev = (q->nalloc + i - 1) % q->nalloc), i != top) && (*cmp)(q->elts[i], q->elts[prev], ctx) < 0) { iq_swap(q, prev, i); i = prev; } return i; } static int iq_bubble_down(h2_iqueue *q, int i, int bottom, h2_iq_cmp *cmp, void *ctx) { int next; while (((next = (q->nalloc + i + 1) % q->nalloc), i != bottom) && (*cmp)(q->elts[i], q->elts[next], ctx) > 0) { iq_swap(q, next, i); i = next; } return i; } int h2_iq_contains(h2_iqueue *q, int sid) { int i; for (i = 0; i < q->nelts; ++i) { if (sid == q->elts[(q->head + i) % q->nalloc]) { return 1; } } return 0; } /******************************************************************************* * FIFO queue ******************************************************************************/ struct h2_fifo { void **elems; int nelems; int set; int head; int count; int aborted; apr_thread_mutex_t *lock; apr_thread_cond_t *not_empty; apr_thread_cond_t *not_full; }; static int nth_index(h2_fifo *fifo, int n) { return (fifo->head + n) % fifo->nelems; } static apr_status_t fifo_destroy(void *data) { h2_fifo *fifo = data; apr_thread_cond_destroy(fifo->not_empty); apr_thread_cond_destroy(fifo->not_full); apr_thread_mutex_destroy(fifo->lock); return APR_SUCCESS; } static int index_of(h2_fifo *fifo, void *elem) { int i; for (i = 0; i < fifo->count; ++i) { if (elem == fifo->elems[nth_index(fifo, i)]) { return i; } } return -1; } static apr_status_t create_int(h2_fifo **pfifo, apr_pool_t *pool, int capacity, int as_set) { apr_status_t rv; h2_fifo *fifo; fifo = apr_pcalloc(pool, sizeof(*fifo)); if (fifo == NULL) { return APR_ENOMEM; } rv = apr_thread_mutex_create(&fifo->lock, APR_THREAD_MUTEX_UNNESTED, pool); if (rv != APR_SUCCESS) { return rv; } rv = apr_thread_cond_create(&fifo->not_empty, pool); if (rv != APR_SUCCESS) { return rv; } rv = apr_thread_cond_create(&fifo->not_full, pool); if (rv != APR_SUCCESS) { return rv; } fifo->elems = apr_pcalloc(pool, capacity * sizeof(void*)); if (fifo->elems == NULL) { return APR_ENOMEM; } fifo->nelems = capacity; fifo->set = as_set; *pfifo = fifo; apr_pool_cleanup_register(pool, fifo, fifo_destroy, apr_pool_cleanup_null); return APR_SUCCESS; } apr_status_t h2_fifo_create(h2_fifo **pfifo, apr_pool_t *pool, int capacity) { return create_int(pfifo, pool, capacity, 0); } apr_status_t h2_fifo_set_create(h2_fifo **pfifo, apr_pool_t *pool, int capacity) { return create_int(pfifo, pool, capacity, 1); } apr_status_t h2_fifo_term(h2_fifo *fifo) { apr_status_t rv; if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { fifo->aborted = 1; apr_thread_mutex_unlock(fifo->lock); } return rv; } apr_status_t h2_fifo_interrupt(h2_fifo *fifo) { apr_status_t rv; if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { apr_thread_cond_broadcast(fifo->not_empty); apr_thread_cond_broadcast(fifo->not_full); apr_thread_mutex_unlock(fifo->lock); } return rv; } int h2_fifo_count(h2_fifo *fifo) { return fifo->count; } static apr_status_t check_not_empty(h2_fifo *fifo, int block) { while (fifo->count == 0) { if (!block) { return APR_EAGAIN; } if (fifo->aborted) { return APR_EOF; } apr_thread_cond_wait(fifo->not_empty, fifo->lock); } return APR_SUCCESS; } static apr_status_t fifo_push_int(h2_fifo *fifo, void *elem, int block) { if (fifo->aborted) { return APR_EOF; } if (fifo->set && index_of(fifo, elem) >= 0) { /* set mode, elem already member */ return APR_EEXIST; } else if (fifo->count == fifo->nelems) { if (block) { while (fifo->count == fifo->nelems) { if (fifo->aborted) { return APR_EOF; } apr_thread_cond_wait(fifo->not_full, fifo->lock); } } else { return APR_EAGAIN; } } ap_assert(fifo->count < fifo->nelems); fifo->elems[nth_index(fifo, fifo->count)] = elem; ++fifo->count; if (fifo->count == 1) { apr_thread_cond_broadcast(fifo->not_empty); } return APR_SUCCESS; } static apr_status_t fifo_push(h2_fifo *fifo, void *elem, int block) { apr_status_t rv; if (fifo->aborted) { return APR_EOF; } if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { rv = fifo_push_int(fifo, elem, block); apr_thread_mutex_unlock(fifo->lock); } return rv; } apr_status_t h2_fifo_push(h2_fifo *fifo, void *elem) { return fifo_push(fifo, elem, 1); } apr_status_t h2_fifo_try_push(h2_fifo *fifo, void *elem) { return fifo_push(fifo, elem, 0); } static apr_status_t pull_head(h2_fifo *fifo, void **pelem, int block) { apr_status_t rv; if ((rv = check_not_empty(fifo, block)) != APR_SUCCESS) { *pelem = NULL; return rv; } *pelem = fifo->elems[fifo->head]; --fifo->count; if (fifo->count > 0) { fifo->head = nth_index(fifo, 1); if (fifo->count+1 == fifo->nelems) { apr_thread_cond_broadcast(fifo->not_full); } } return APR_SUCCESS; } static apr_status_t fifo_pull(h2_fifo *fifo, void **pelem, int block) { apr_status_t rv; if (fifo->aborted) { return APR_EOF; } if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { rv = pull_head(fifo, pelem, block); apr_thread_mutex_unlock(fifo->lock); } return rv; } apr_status_t h2_fifo_pull(h2_fifo *fifo, void **pelem) { return fifo_pull(fifo, pelem, 1); } apr_status_t h2_fifo_try_pull(h2_fifo *fifo, void **pelem) { return fifo_pull(fifo, pelem, 0); } static apr_status_t fifo_peek(h2_fifo *fifo, h2_fifo_peek_fn *fn, void *ctx, int block) { apr_status_t rv; void *elem; if (fifo->aborted) { return APR_EOF; } if (APR_SUCCESS == (rv = apr_thread_mutex_lock(fifo->lock))) { if (APR_SUCCESS == (rv = pull_head(fifo, &elem, block))) { switch (fn(elem, ctx)) { case H2_FIFO_OP_PULL: break; case H2_FIFO_OP_REPUSH: rv = fifo_push_int(fifo, elem, block); break; } } apr_thread_mutex_unlock(fifo->lock); } return rv; } apr_status_t h2_fifo_peek(h2_fifo *fifo, h2_fifo_peek_fn *fn, void *ctx) { return fifo_peek(fifo, fn, ctx, 1); } apr_status_t h2_fifo_try_peek(h2_fifo *fifo, h2_fifo_peek_fn *fn, void *ctx) { return fifo_peek(fifo, fn, ctx, 0); } apr_status_t h2_fifo_remove(h2_fifo *fifo, void *elem) { apr_status_t rv; if (fifo->aborted) { return APR_EOF; } if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { int i, rc; void *e; rc = 0; for (i = 0; i < fifo->count; ++i) { e = fifo->elems[nth_index(fifo, i)]; if (e == elem) { ++rc; } else if (rc) { fifo->elems[nth_index(fifo, i-rc)] = e; } } if (rc) { fifo->count -= rc; if (fifo->count + rc == fifo->nelems) { apr_thread_cond_broadcast(fifo->not_full); } rv = APR_SUCCESS; } else { rv = APR_EAGAIN; } apr_thread_mutex_unlock(fifo->lock); } return rv; } /******************************************************************************* * FIFO int queue ******************************************************************************/ struct h2_ififo { int *elems; int nelems; int set; int head; int count; int aborted; apr_thread_mutex_t *lock; apr_thread_cond_t *not_empty; apr_thread_cond_t *not_full; }; static int inth_index(h2_ififo *fifo, int n) { return (fifo->head + n) % fifo->nelems; } static apr_status_t ififo_destroy(void *data) { h2_ififo *fifo = data; apr_thread_cond_destroy(fifo->not_empty); apr_thread_cond_destroy(fifo->not_full); apr_thread_mutex_destroy(fifo->lock); return APR_SUCCESS; } static int iindex_of(h2_ififo *fifo, int id) { int i; for (i = 0; i < fifo->count; ++i) { if (id == fifo->elems[inth_index(fifo, i)]) { return i; } } return -1; } static apr_status_t icreate_int(h2_ififo **pfifo, apr_pool_t *pool, int capacity, int as_set) { apr_status_t rv; h2_ififo *fifo; fifo = apr_pcalloc(pool, sizeof(*fifo)); if (fifo == NULL) { return APR_ENOMEM; } rv = apr_thread_mutex_create(&fifo->lock, APR_THREAD_MUTEX_UNNESTED, pool); if (rv != APR_SUCCESS) { return rv; } rv = apr_thread_cond_create(&fifo->not_empty, pool); if (rv != APR_SUCCESS) { return rv; } rv = apr_thread_cond_create(&fifo->not_full, pool); if (rv != APR_SUCCESS) { return rv; } fifo->elems = apr_pcalloc(pool, capacity * sizeof(int)); if (fifo->elems == NULL) { return APR_ENOMEM; } fifo->nelems = capacity; fifo->set = as_set; *pfifo = fifo; apr_pool_cleanup_register(pool, fifo, ififo_destroy, apr_pool_cleanup_null); return APR_SUCCESS; } apr_status_t h2_ififo_create(h2_ififo **pfifo, apr_pool_t *pool, int capacity) { return icreate_int(pfifo, pool, capacity, 0); } apr_status_t h2_ififo_set_create(h2_ififo **pfifo, apr_pool_t *pool, int capacity) { return icreate_int(pfifo, pool, capacity, 1); } apr_status_t h2_ififo_term(h2_ififo *fifo) { apr_status_t rv; if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { fifo->aborted = 1; apr_thread_mutex_unlock(fifo->lock); } return rv; } apr_status_t h2_ififo_interrupt(h2_ififo *fifo) { apr_status_t rv; if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { apr_thread_cond_broadcast(fifo->not_empty); apr_thread_cond_broadcast(fifo->not_full); apr_thread_mutex_unlock(fifo->lock); } return rv; } int h2_ififo_count(h2_ififo *fifo) { return fifo->count; } static apr_status_t icheck_not_empty(h2_ififo *fifo, int block) { while (fifo->count == 0) { if (!block) { return APR_EAGAIN; } if (fifo->aborted) { return APR_EOF; } apr_thread_cond_wait(fifo->not_empty, fifo->lock); } return APR_SUCCESS; } static apr_status_t ififo_push_int(h2_ififo *fifo, int id, int block) { if (fifo->aborted) { return APR_EOF; } if (fifo->set && iindex_of(fifo, id) >= 0) { /* set mode, elem already member */ return APR_EEXIST; } else if (fifo->count == fifo->nelems) { if (block) { while (fifo->count == fifo->nelems) { if (fifo->aborted) { return APR_EOF; } apr_thread_cond_wait(fifo->not_full, fifo->lock); } } else { return APR_EAGAIN; } } ap_assert(fifo->count < fifo->nelems); fifo->elems[inth_index(fifo, fifo->count)] = id; ++fifo->count; if (fifo->count == 1) { apr_thread_cond_broadcast(fifo->not_empty); } return APR_SUCCESS; } static apr_status_t ififo_push(h2_ififo *fifo, int id, int block) { apr_status_t rv; if (fifo->aborted) { return APR_EOF; } if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { rv = ififo_push_int(fifo, id, block); apr_thread_mutex_unlock(fifo->lock); } return rv; } apr_status_t h2_ififo_push(h2_ififo *fifo, int id) { return ififo_push(fifo, id, 1); } apr_status_t h2_ififo_try_push(h2_ififo *fifo, int id) { return ififo_push(fifo, id, 0); } static apr_status_t ipull_head(h2_ififo *fifo, int *pi, int block) { apr_status_t rv; if ((rv = icheck_not_empty(fifo, block)) != APR_SUCCESS) { *pi = 0; return rv; } *pi = fifo->elems[fifo->head]; --fifo->count; if (fifo->count > 0) { fifo->head = inth_index(fifo, 1); if (fifo->count+1 == fifo->nelems) { apr_thread_cond_broadcast(fifo->not_full); } } return APR_SUCCESS; } static apr_status_t ififo_pull(h2_ififo *fifo, int *pi, int block) { apr_status_t rv; if (fifo->aborted) { return APR_EOF; } if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { rv = ipull_head(fifo, pi, block); apr_thread_mutex_unlock(fifo->lock); } return rv; } apr_status_t h2_ififo_pull(h2_ififo *fifo, int *pi) { return ififo_pull(fifo, pi, 1); } apr_status_t h2_ififo_try_pull(h2_ififo *fifo, int *pi) { return ififo_pull(fifo, pi, 0); } static apr_status_t ififo_peek(h2_ififo *fifo, h2_ififo_peek_fn *fn, void *ctx, int block) { apr_status_t rv; int id; if (fifo->aborted) { return APR_EOF; } if (APR_SUCCESS == (rv = apr_thread_mutex_lock(fifo->lock))) { if (APR_SUCCESS == (rv = ipull_head(fifo, &id, block))) { switch (fn(id, ctx)) { case H2_FIFO_OP_PULL: break; case H2_FIFO_OP_REPUSH: rv = ififo_push_int(fifo, id, block); break; } } apr_thread_mutex_unlock(fifo->lock); } return rv; } apr_status_t h2_ififo_peek(h2_ififo *fifo, h2_ififo_peek_fn *fn, void *ctx) { return ififo_peek(fifo, fn, ctx, 1); } apr_status_t h2_ififo_try_peek(h2_ififo *fifo, h2_ififo_peek_fn *fn, void *ctx) { return ififo_peek(fifo, fn, ctx, 0); } apr_status_t h2_ififo_remove(h2_ififo *fifo, int id) { apr_status_t rv; if (fifo->aborted) { return APR_EOF; } if ((rv = apr_thread_mutex_lock(fifo->lock)) == APR_SUCCESS) { int i, rc; int e; rc = 0; for (i = 0; i < fifo->count; ++i) { e = fifo->elems[inth_index(fifo, i)]; if (e == id) { ++rc; } else if (rc) { fifo->elems[inth_index(fifo, i-rc)] = e; } } if (rc) { fifo->count -= rc; if (fifo->count + rc == fifo->nelems) { apr_thread_cond_broadcast(fifo->not_full); } rv = APR_SUCCESS; } else { rv = APR_EAGAIN; } apr_thread_mutex_unlock(fifo->lock); } return rv; } /******************************************************************************* * h2_util for apt_table_t ******************************************************************************/ typedef struct { apr_size_t bytes; apr_size_t pair_extra; } table_bytes_ctx; static int count_bytes(void *x, const char *key, const char *value) { table_bytes_ctx *ctx = x; if (key) { ctx->bytes += strlen(key); } if (value) { ctx->bytes += strlen(value); } ctx->bytes += ctx->pair_extra; return 1; } apr_size_t h2_util_table_bytes(apr_table_t *t, apr_size_t pair_extra) { table_bytes_ctx ctx; ctx.bytes = 0; ctx.pair_extra = pair_extra; apr_table_do(count_bytes, &ctx, t, NULL); return ctx.bytes; } /******************************************************************************* * h2_util for bucket brigades ******************************************************************************/ static apr_status_t last_not_included(apr_bucket_brigade *bb, apr_off_t maxlen, int same_alloc, apr_size_t *pfile_buckets_allowed, apr_bucket **pend) { apr_bucket *b; apr_status_t status = APR_SUCCESS; int files_allowed = pfile_buckets_allowed? (int)*pfile_buckets_allowed : 0; if (maxlen >= 0) { /* Find the bucket, up to which we reach maxlen/mem bytes */ for (b = APR_BRIGADE_FIRST(bb); (b != APR_BRIGADE_SENTINEL(bb)); b = APR_BUCKET_NEXT(b)) { if (APR_BUCKET_IS_METADATA(b)) { /* included */ } else { if (b->length == ((apr_size_t)-1)) { const char *ign; apr_size_t ilen; status = apr_bucket_read(b, &ign, &ilen, APR_BLOCK_READ); if (status != APR_SUCCESS) { return status; } } if (maxlen == 0 && b->length > 0) { *pend = b; return status; } if (same_alloc && APR_BUCKET_IS_FILE(b)) { /* we like it move it, always */ } else if (files_allowed > 0 && APR_BUCKET_IS_FILE(b)) { /* this has no memory footprint really unless * it is read, disregard it in length count, * unless we do not move the file buckets */ --files_allowed; } else if (maxlen < (apr_off_t)b->length) { apr_bucket_split(b, (apr_size_t)maxlen); maxlen = 0; } else { maxlen -= b->length; } } } } *pend = APR_BRIGADE_SENTINEL(bb); return status; } apr_status_t h2_brigade_concat_length(apr_bucket_brigade *dest, apr_bucket_brigade *src, apr_off_t length) { apr_bucket *b; apr_off_t remain = length; apr_status_t status = APR_SUCCESS; while (!APR_BRIGADE_EMPTY(src)) { b = APR_BRIGADE_FIRST(src); if (APR_BUCKET_IS_METADATA(b)) { APR_BUCKET_REMOVE(b); APR_BRIGADE_INSERT_TAIL(dest, b); } else { if (remain == b->length) { /* fall through */ } else if (remain <= 0) { return status; } else { if (b->length == ((apr_size_t)-1)) { const char *ign; apr_size_t ilen; status = apr_bucket_read(b, &ign, &ilen, APR_BLOCK_READ); if (status != APR_SUCCESS) { return status; } } if (remain < b->length) { apr_bucket_split(b, remain); } } APR_BUCKET_REMOVE(b); APR_BRIGADE_INSERT_TAIL(dest, b); remain -= b->length; } } return status; } apr_status_t h2_brigade_copy_length(apr_bucket_brigade *dest, apr_bucket_brigade *src, apr_off_t length) { apr_bucket *b, *next; apr_off_t remain = length; apr_status_t status = APR_SUCCESS; for (b = APR_BRIGADE_FIRST(src); b != APR_BRIGADE_SENTINEL(src); b = next) { next = APR_BUCKET_NEXT(b); if (APR_BUCKET_IS_METADATA(b)) { /* fall through */ } else { if (remain == b->length) { /* fall through */ } else if (remain <= 0) { return status; } else { if (b->length == ((apr_size_t)-1)) { const char *ign; apr_size_t ilen; status = apr_bucket_read(b, &ign, &ilen, APR_BLOCK_READ); if (status != APR_SUCCESS) { return status; } } if (remain < b->length) { apr_bucket_split(b, remain); } } } status = apr_bucket_copy(b, &b); if (status != APR_SUCCESS) { return status; } APR_BRIGADE_INSERT_TAIL(dest, b); remain -= b->length; } return status; } int h2_util_has_eos(apr_bucket_brigade *bb, apr_off_t len) { apr_bucket *b, *end; apr_status_t status = last_not_included(bb, len, 0, 0, &end); if (status != APR_SUCCESS) { return status; } for (b = APR_BRIGADE_FIRST(bb); b != APR_BRIGADE_SENTINEL(bb) && b != end; b = APR_BUCKET_NEXT(b)) { if (APR_BUCKET_IS_EOS(b)) { return 1; } } return 0; } apr_status_t h2_util_bb_avail(apr_bucket_brigade *bb, apr_off_t *plen, int *peos) { apr_status_t status; apr_off_t blen = 0; /* test read to determine available length */ status = apr_brigade_length(bb, 1, &blen); if (status != APR_SUCCESS) { return status; } else if (blen == 0) { /* brigade without data, does it have an EOS bucket somwhere? */ *plen = 0; *peos = h2_util_has_eos(bb, -1); } else { /* data in the brigade, limit the length returned. Check for EOS * bucket only if we indicate data. This is required since plen == 0 * means "the whole brigade" for h2_util_hash_eos() */ if (blen < *plen || *plen < 0) { *plen = blen; } *peos = h2_util_has_eos(bb, *plen); } return APR_SUCCESS; } apr_status_t h2_util_bb_readx(apr_bucket_brigade *bb, h2_util_pass_cb *cb, void *ctx, apr_off_t *plen, int *peos) { apr_status_t status = APR_SUCCESS; int consume = (cb != NULL); apr_off_t written = 0; apr_off_t avail = *plen; apr_bucket *next, *b; /* Pass data in our brigade through the callback until the length * is satisfied or we encounter an EOS. */ *peos = 0; for (b = APR_BRIGADE_FIRST(bb); (status == APR_SUCCESS) && (b != APR_BRIGADE_SENTINEL(bb)); b = next) { if (APR_BUCKET_IS_METADATA(b)) { if (APR_BUCKET_IS_EOS(b)) { *peos = 1; } else { /* ignore */ } } else if (avail <= 0) { break; } else { const char *data = NULL; apr_size_t data_len; if (b->length == ((apr_size_t)-1)) { /* read to determine length */ status = apr_bucket_read(b, &data, &data_len, APR_NONBLOCK_READ); } else { data_len = b->length; } if (data_len > avail) { apr_bucket_split(b, avail); data_len = (apr_size_t)avail; } if (consume) { if (!data) { status = apr_bucket_read(b, &data, &data_len, APR_NONBLOCK_READ); } if (status == APR_SUCCESS) { status = cb(ctx, data, data_len); } } else { data_len = b->length; } avail -= data_len; written += data_len; } next = APR_BUCKET_NEXT(b); if (consume) { apr_bucket_delete(b); } } *plen = written; if (status == APR_SUCCESS && !*peos && !*plen) { return APR_EAGAIN; } return status; } apr_size_t h2_util_bucket_print(char *buffer, apr_size_t bmax, apr_bucket *b, const char *sep) { apr_size_t off = 0; if (sep && *sep) { off += apr_snprintf(buffer+off, bmax-off, "%s", sep); } if (bmax <= off) { return off; } else if (APR_BUCKET_IS_METADATA(b)) { off += apr_snprintf(buffer+off, bmax-off, "%s", b->type->name); } else if (bmax > off) { off += apr_snprintf(buffer+off, bmax-off, "%s[%ld]", b->type->name, (long)(b->length == ((apr_size_t)-1)? -1 : b->length)); } return off; } apr_size_t h2_util_bb_print(char *buffer, apr_size_t bmax, const char *tag, const char *sep, apr_bucket_brigade *bb) { apr_size_t off = 0; const char *sp = ""; apr_bucket *b; if (bmax > 1) { if (bb) { memset(buffer, 0, bmax--); off += apr_snprintf(buffer+off, bmax-off, "%s(", tag); for (b = APR_BRIGADE_FIRST(bb); (bmax > off) && (b != APR_BRIGADE_SENTINEL(bb)); b = APR_BUCKET_NEXT(b)) { off += h2_util_bucket_print(buffer+off, bmax-off, b, sp); sp = " "; } if (bmax > off) { off += apr_snprintf(buffer+off, bmax-off, ")%s", sep); } } else { off += apr_snprintf(buffer+off, bmax-off, "%s(null)%s", tag, sep); } } return off; } apr_status_t h2_append_brigade(apr_bucket_brigade *to, apr_bucket_brigade *from, apr_off_t *plen, int *peos, h2_bucket_gate *should_append) { apr_bucket *e; apr_off_t len = 0, remain = *plen; apr_status_t rv; *peos = 0; while (!APR_BRIGADE_EMPTY(from)) { e = APR_BRIGADE_FIRST(from); if (!should_append(e)) { goto leave; } else if (APR_BUCKET_IS_METADATA(e)) { if (APR_BUCKET_IS_EOS(e)) { *peos = 1; apr_bucket_delete(e); continue; } } else { if (remain > 0 && e->length == ((apr_size_t)-1)) { const char *ign; apr_size_t ilen; rv = apr_bucket_read(e, &ign, &ilen, APR_BLOCK_READ); if (rv != APR_SUCCESS) { return rv; } } if (remain < e->length) { if (remain <= 0) { goto leave; } apr_bucket_split(e, (apr_size_t)remain); } } APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(to, e); len += e->length; remain -= e->length; } leave: *plen = len; return APR_SUCCESS; } apr_off_t h2_brigade_mem_size(apr_bucket_brigade *bb) { apr_bucket *b; apr_off_t total = 0; for (b = APR_BRIGADE_FIRST(bb); b != APR_BRIGADE_SENTINEL(bb); b = APR_BUCKET_NEXT(b)) { total += sizeof(*b); if (b->length > 0) { if (APR_BUCKET_IS_HEAP(b) || APR_BUCKET_IS_POOL(b)) { total += b->length; } } } return total; } /******************************************************************************* * h2_ngheader ******************************************************************************/ int h2_util_ignore_header(const char *name) { /* never forward, ch. 8.1.2.2 */ return (H2_HD_MATCH_LIT_CS("connection", name) || H2_HD_MATCH_LIT_CS("proxy-connection", name) || H2_HD_MATCH_LIT_CS("upgrade", name) || H2_HD_MATCH_LIT_CS("keep-alive", name) || H2_HD_MATCH_LIT_CS("transfer-encoding", name)); } static int count_header(void *ctx, const char *key, const char *value) { if (!h2_util_ignore_header(key)) { (*((size_t*)ctx))++; } return 1; } static const char *inv_field_name_chr(const char *token) { const char *p = ap_scan_http_token(token); if (p == token && *p == ':') { p = ap_scan_http_token(++p); } return (p && *p)? p : NULL; } static const char *inv_field_value_chr(const char *token) { const char *p = ap_scan_http_field_content(token); return (p && *p)? p : NULL; } typedef struct ngh_ctx { apr_pool_t *p; int unsafe; h2_ngheader *ngh; apr_status_t status; } ngh_ctx; static int add_header(ngh_ctx *ctx, const char *key, const char *value) { nghttp2_nv *nv = &(ctx->ngh)->nv[(ctx->ngh)->nvlen++]; const char *p; if (!ctx->unsafe) { if ((p = inv_field_name_chr(key))) { ap_log_perror(APLOG_MARK, APLOG_TRACE1, APR_EINVAL, ctx->p, "h2_request: head field '%s: %s' has invalid char %s", key, value, p); ctx->status = APR_EINVAL; return 0; } if ((p = inv_field_value_chr(value))) { ap_log_perror(APLOG_MARK, APLOG_TRACE1, APR_EINVAL, ctx->p, "h2_request: head field '%s: %s' has invalid char %s", key, value, p); ctx->status = APR_EINVAL; return 0; } } nv->name = (uint8_t*)key; nv->namelen = strlen(key); nv->value = (uint8_t*)value; nv->valuelen = strlen(value); return 1; } static int add_table_header(void *ctx, const char *key, const char *value) { if (!h2_util_ignore_header(key)) { add_header(ctx, key, value); } return 1; } static apr_status_t ngheader_create(h2_ngheader **ph, apr_pool_t *p, int unsafe, size_t key_count, const char *keys[], const char *values[], apr_table_t *headers) { ngh_ctx ctx; size_t n, i; ctx.p = p; ctx.unsafe = unsafe; n = key_count; apr_table_do(count_header, &n, headers, NULL); *ph = ctx.ngh = apr_pcalloc(p, sizeof(h2_ngheader)); if (!ctx.ngh) { return APR_ENOMEM; } ctx.ngh->nv = apr_pcalloc(p, n * sizeof(nghttp2_nv)); if (!ctx.ngh->nv) { return APR_ENOMEM; } ctx.status = APR_SUCCESS; for (i = 0; i < key_count; ++i) { if (!add_header(&ctx, keys[i], values[i])) { return ctx.status; } } apr_table_do(add_table_header, &ctx, headers, NULL); return ctx.status; } static int is_unsafe(h2_headers *h) { const char *v = apr_table_get(h->notes, H2_HDR_CONFORMANCE); return (v && !strcmp(v, H2_HDR_CONFORMANCE_UNSAFE)); } apr_status_t h2_res_create_ngtrailer(h2_ngheader **ph, apr_pool_t *p, h2_headers *headers) { return ngheader_create(ph, p, is_unsafe(headers), 0, NULL, NULL, headers->headers); } apr_status_t h2_res_create_ngheader(h2_ngheader **ph, apr_pool_t *p, h2_headers *headers) { const char *keys[] = { ":status" }; const char *values[] = { apr_psprintf(p, "%d", headers->status) }; return ngheader_create(ph, p, is_unsafe(headers), H2_ALEN(keys), keys, values, headers->headers); } apr_status_t h2_req_create_ngheader(h2_ngheader **ph, apr_pool_t *p, const struct h2_request *req) { const char *keys[] = { ":scheme", ":authority", ":path", ":method", }; const char *values[] = { req->scheme, req->authority, req->path, req->method, }; ap_assert(req->scheme); ap_assert(req->authority); ap_assert(req->path); ap_assert(req->method); return ngheader_create(ph, p, 0, H2_ALEN(keys), keys, values, req->headers); } /******************************************************************************* * header HTTP/1 <-> HTTP/2 conversions ******************************************************************************/ typedef struct { const char *name; size_t len; } literal; #define H2_DEF_LITERAL(n) { (n), (sizeof(n)-1) } #define H2_LIT_ARGS(a) (a),H2_ALEN(a) static literal IgnoredRequestHeaders[] = { H2_DEF_LITERAL("upgrade"), H2_DEF_LITERAL("connection"), H2_DEF_LITERAL("keep-alive"), H2_DEF_LITERAL("http2-settings"), H2_DEF_LITERAL("proxy-connection"), H2_DEF_LITERAL("transfer-encoding"), }; static literal IgnoredRequestTrailers[] = { /* Ignore, see rfc7230, ch. 4.1.2 */ H2_DEF_LITERAL("te"), H2_DEF_LITERAL("host"), H2_DEF_LITERAL("range"), H2_DEF_LITERAL("cookie"), H2_DEF_LITERAL("expect"), H2_DEF_LITERAL("pragma"), H2_DEF_LITERAL("max-forwards"), H2_DEF_LITERAL("cache-control"), H2_DEF_LITERAL("authorization"), H2_DEF_LITERAL("content-length"), H2_DEF_LITERAL("proxy-authorization"), }; static literal IgnoredResponseTrailers[] = { H2_DEF_LITERAL("age"), H2_DEF_LITERAL("date"), H2_DEF_LITERAL("vary"), H2_DEF_LITERAL("cookie"), H2_DEF_LITERAL("expires"), H2_DEF_LITERAL("warning"), H2_DEF_LITERAL("location"), H2_DEF_LITERAL("retry-after"), H2_DEF_LITERAL("cache-control"), H2_DEF_LITERAL("www-authenticate"), H2_DEF_LITERAL("proxy-authenticate"), }; static int ignore_header(const literal *lits, size_t llen, const char *name, size_t nlen) { const literal *lit; size_t i; for (i = 0; i < llen; ++i) { lit = &lits[i]; if (lit->len == nlen && !apr_strnatcasecmp(lit->name, name)) { return 1; } } return 0; } int h2_req_ignore_header(const char *name, size_t len) { return ignore_header(H2_LIT_ARGS(IgnoredRequestHeaders), name, len); } int h2_req_ignore_trailer(const char *name, size_t len) { return (h2_req_ignore_header(name, len) || ignore_header(H2_LIT_ARGS(IgnoredRequestTrailers), name, len)); } int h2_res_ignore_trailer(const char *name, size_t len) { return ignore_header(H2_LIT_ARGS(IgnoredResponseTrailers), name, len); } apr_status_t h2_req_add_header(apr_table_t *headers, apr_pool_t *pool, const char *name, size_t nlen, const char *value, size_t vlen) { char *hname, *hvalue; if (h2_req_ignore_header(name, nlen)) { return APR_SUCCESS; } else if (H2_HD_MATCH_LIT("cookie", name, nlen)) { const char *existing = apr_table_get(headers, "cookie"); if (existing) { char *nval; /* Cookie header come separately in HTTP/2, but need * to be merged by "; " (instead of default ", ") */ hvalue = apr_pstrndup(pool, value, vlen); nval = apr_psprintf(pool, "%s; %s", existing, hvalue); apr_table_setn(headers, "Cookie", nval); return APR_SUCCESS; } } else if (H2_HD_MATCH_LIT("host", name, nlen)) { if (apr_table_get(headers, "Host")) { return APR_SUCCESS; /* ignore duplicate */ } } hname = apr_pstrndup(pool, name, nlen); hvalue = apr_pstrndup(pool, value, vlen); h2_util_camel_case_header(hname, nlen); apr_table_mergen(headers, hname, hvalue); return APR_SUCCESS; } /******************************************************************************* * h2 request handling ******************************************************************************/ h2_request *h2_req_create(int id, apr_pool_t *pool, const char *method, const char *scheme, const char *authority, const char *path, apr_table_t *header, int serialize) { h2_request *req = apr_pcalloc(pool, sizeof(h2_request)); req->method = method; req->scheme = scheme; req->authority = authority; req->path = path; req->headers = header? header : apr_table_make(pool, 10); req->request_time = apr_time_now(); req->serialize = serialize; return req; } /******************************************************************************* * frame logging ******************************************************************************/ int h2_util_frame_print(const nghttp2_frame *frame, char *buffer, size_t maxlen) { char scratch[128]; size_t s_len = sizeof(scratch)/sizeof(scratch[0]); switch (frame->hd.type) { case NGHTTP2_DATA: { return apr_snprintf(buffer, maxlen, "DATA[length=%d, flags=%d, stream=%d, padlen=%d]", (int)frame->hd.length, frame->hd.flags, frame->hd.stream_id, (int)frame->data.padlen); } case NGHTTP2_HEADERS: { return apr_snprintf(buffer, maxlen, "HEADERS[length=%d, hend=%d, stream=%d, eos=%d]", (int)frame->hd.length, !!(frame->hd.flags & NGHTTP2_FLAG_END_HEADERS), frame->hd.stream_id, !!(frame->hd.flags & NGHTTP2_FLAG_END_STREAM)); } case NGHTTP2_PRIORITY: { return apr_snprintf(buffer, maxlen, "PRIORITY[length=%d, flags=%d, stream=%d]", (int)frame->hd.length, frame->hd.flags, frame->hd.stream_id); } case NGHTTP2_RST_STREAM: { return apr_snprintf(buffer, maxlen, "RST_STREAM[length=%d, flags=%d, stream=%d]", (int)frame->hd.length, frame->hd.flags, frame->hd.stream_id); } case NGHTTP2_SETTINGS: { if (frame->hd.flags & NGHTTP2_FLAG_ACK) { return apr_snprintf(buffer, maxlen, "SETTINGS[ack=1, stream=%d]", frame->hd.stream_id); } return apr_snprintf(buffer, maxlen, "SETTINGS[length=%d, stream=%d]", (int)frame->hd.length, frame->hd.stream_id); } case NGHTTP2_PUSH_PROMISE: { return apr_snprintf(buffer, maxlen, "PUSH_PROMISE[length=%d, hend=%d, stream=%d]", (int)frame->hd.length, !!(frame->hd.flags & NGHTTP2_FLAG_END_HEADERS), frame->hd.stream_id); } case NGHTTP2_PING: { return apr_snprintf(buffer, maxlen, "PING[length=%d, ack=%d, stream=%d]", (int)frame->hd.length, frame->hd.flags&NGHTTP2_FLAG_ACK, frame->hd.stream_id); } case NGHTTP2_GOAWAY: { size_t len = (frame->goaway.opaque_data_len < s_len)? frame->goaway.opaque_data_len : s_len-1; memcpy(scratch, frame->goaway.opaque_data, len); scratch[len] = '\0'; return apr_snprintf(buffer, maxlen, "GOAWAY[error=%d, reason='%s', " "last_stream=%d]", frame->goaway.error_code, scratch, frame->goaway.last_stream_id); } case NGHTTP2_WINDOW_UPDATE: { return apr_snprintf(buffer, maxlen, "WINDOW_UPDATE[stream=%d, incr=%d]", frame->hd.stream_id, frame->window_update.window_size_increment); } default: return apr_snprintf(buffer, maxlen, "type=%d[length=%d, flags=%d, stream=%d]", frame->hd.type, (int)frame->hd.length, frame->hd.flags, frame->hd.stream_id); } } /******************************************************************************* * push policy ******************************************************************************/ int h2_push_policy_determine(apr_table_t *headers, apr_pool_t *p, int push_enabled) { h2_push_policy policy = H2_PUSH_NONE; if (push_enabled) { const char *val = apr_table_get(headers, "accept-push-policy"); if (val) { if (ap_find_token(p, val, "fast-load")) { policy = H2_PUSH_FAST_LOAD; } else if (ap_find_token(p, val, "head")) { policy = H2_PUSH_HEAD; } else if (ap_find_token(p, val, "default")) { policy = H2_PUSH_DEFAULT; } else if (ap_find_token(p, val, "none")) { policy = H2_PUSH_NONE; } else { /* nothing known found in this header, go by default */ policy = H2_PUSH_DEFAULT; } } else { policy = H2_PUSH_DEFAULT; } } return policy; } httpd-2.4.41/modules/http2/h2_alt_svc.c0000644000000000000500000001105113442215451016134 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include "h2_private.h" #include "h2_alt_svc.h" #include "h2_ctx.h" #include "h2_config.h" #include "h2_h2.h" #include "h2_util.h" static int h2_alt_svc_handler(request_rec *r); void h2_alt_svc_register_hooks(void) { ap_hook_post_read_request(h2_alt_svc_handler, NULL, NULL, APR_HOOK_MIDDLE); } /** * Parse an Alt-Svc specifier as described in "HTTP Alternative Services" * (https://tools.ietf.org/html/draft-ietf-httpbis-alt-svc-04) * with the following changes: * - do not percent encode token values * - do not use quotation marks */ h2_alt_svc *h2_alt_svc_parse(const char *s, apr_pool_t *pool) { const char *sep = ap_strchr_c(s, '='); if (sep) { const char *alpn = apr_pstrmemdup(pool, s, sep - s); const char *host = NULL; int port = 0; s = sep + 1; sep = ap_strchr_c(s, ':'); /* mandatory : */ if (sep) { if (sep != s) { /* optional host */ host = apr_pstrmemdup(pool, s, sep - s); } s = sep + 1; if (*s) { /* must be a port number */ port = (int)apr_atoi64(s); if (port > 0 && port < (0x1 << 16)) { h2_alt_svc *as = apr_pcalloc(pool, sizeof(*as)); as->alpn = alpn; as->host = host; as->port = port; return as; } } } } return NULL; } #define h2_alt_svc_IDX(list, i) ((h2_alt_svc**)(list)->elts)[i] static int h2_alt_svc_handler(request_rec *r) { apr_array_header_t *alt_svcs; int i; if (r->connection->keepalives > 0) { /* Only announce Alt-Svc on the first response */ return DECLINED; } if (h2_ctx_rget(r)) { return DECLINED; } alt_svcs = h2_config_alt_svcs(r); if (r->hostname && alt_svcs && alt_svcs->nelts > 0) { const char *alt_svc_used = apr_table_get(r->headers_in, "Alt-Svc-Used"); if (!alt_svc_used) { /* We have alt-svcs defined and client is not already using * one, announce the services that were configured and match. * The security of this connection determines if we allow * other host names or ports only. */ const char *alt_svc = ""; const char *svc_ma = ""; int secure = h2_h2_is_tls(r->connection); int ma = h2_config_rgeti(r, H2_CONF_ALT_SVC_MAX_AGE); if (ma >= 0) { svc_ma = apr_psprintf(r->pool, "; ma=%d", ma); } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03043) "h2_alt_svc: announce %s for %s:%d", (secure? "secure" : "insecure"), r->hostname, (int)r->server->port); for (i = 0; i < alt_svcs->nelts; ++i) { h2_alt_svc *as = h2_alt_svc_IDX(alt_svcs, i); const char *ahost = as->host; if (ahost && !apr_strnatcasecmp(ahost, r->hostname)) { ahost = NULL; } if (secure || !ahost) { alt_svc = apr_psprintf(r->pool, "%s%s%s=\"%s:%d\"%s", alt_svc, (*alt_svc? ", " : ""), as->alpn, ahost? ahost : "", as->port, svc_ma); } } if (*alt_svc) { apr_table_setn(r->headers_out, "Alt-Svc", alt_svc); } } } return DECLINED; } httpd-2.4.41/modules/http2/h2_task.h0000644000000000000500000001011213520520073015441 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_task__ #define __mod_h2__h2_task__ #include /** * A h2_task fakes a HTTP/1.1 request from the data in a HTTP/2 stream * (HEADER+CONT.+DATA) the module recieves. * * In order to answer a HTTP/2 stream, we want all Apache httpd infrastructure * to be involved as usual, as if this stream can as a separate HTTP/1.1 * request. The basic trickery to do so was derived from google's mod_spdy * source. Basically, we fake a new conn_rec object, even with its own * socket and give it to ap_process_connection(). * * Since h2_task instances are executed in separate threads, we may have * different lifetimes than our h2_stream or h2_session instances. Basically, * we would like to be as standalone as possible. * * Finally, to keep certain connection level filters, such as ourselves and * especially mod_ssl ones, from messing with our data, we need a filter * of our own to disble those. */ struct h2_bucket_beam; struct h2_conn; struct h2_mplx; struct h2_task; struct h2_request; struct h2_response_parser; struct h2_stream; struct h2_worker; typedef struct h2_task h2_task; struct h2_task { const char *id; int stream_id; conn_rec *c; apr_pool_t *pool; const struct h2_request *request; apr_interval_time_t timeout; int rst_error; /* h2 related stream abort error */ struct { struct h2_bucket_beam *beam; unsigned int eos : 1; apr_bucket_brigade *bb; apr_bucket_brigade *bbchunk; apr_off_t chunked_total; } input; struct { struct h2_bucket_beam *beam; unsigned int opened : 1; unsigned int sent_response : 1; unsigned int copy_files : 1; struct h2_response_parser *rparser; apr_bucket_brigade *bb; apr_size_t max_buffer; } output; struct h2_mplx *mplx; unsigned int filters_set : 1; unsigned int worker_started : 1; /* h2_worker started processing */ unsigned int redo : 1; /* was throttled, should be restarted later */ int worker_done; /* h2_worker finished */ int done_done; /* task_done has been handled */ apr_time_t started_at; /* when processing started */ apr_time_t done_at; /* when processing was done */ apr_bucket *eor; }; h2_task *h2_task_create(conn_rec *slave, int stream_id, const h2_request *req, struct h2_mplx *m, struct h2_bucket_beam *input, apr_interval_time_t timeout, apr_size_t output_max_mem); void h2_task_destroy(h2_task *task); apr_status_t h2_task_do(h2_task *task, apr_thread_t *thread, int worker_id); void h2_task_redo(h2_task *task); int h2_task_can_redo(h2_task *task); int h2_task_has_started(h2_task *task); /** * Reset the task with the given error code, resets all input/output. */ void h2_task_rst(h2_task *task, int error); void h2_task_register_hooks(void); /* * One time, post config intialization. */ apr_status_t h2_task_init(apr_pool_t *pool, server_rec *s); extern APR_OPTIONAL_FN_TYPE(ap_logio_add_bytes_in) *h2_task_logio_add_bytes_in; extern APR_OPTIONAL_FN_TYPE(ap_logio_add_bytes_out) *h2_task_logio_add_bytes_out; #endif /* defined(__mod_h2__h2_task__) */ httpd-2.4.41/modules/http2/h2_filter.c0000644000000000000500000004636713520520073016004 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include "h2_private.h" #include "h2.h" #include "h2_config.h" #include "h2_conn_io.h" #include "h2_ctx.h" #include "h2_mplx.h" #include "h2_push.h" #include "h2_task.h" #include "h2_stream.h" #include "h2_request.h" #include "h2_headers.h" #include "h2_stream.h" #include "h2_session.h" #include "h2_util.h" #include "h2_version.h" #include "h2_filter.h" #define UNSET -1 #define H2MIN(x,y) ((x) < (y) ? (x) : (y)) static apr_status_t recv_RAW_DATA(conn_rec *c, h2_filter_cin *cin, apr_bucket *b, apr_read_type_e block) { h2_session *session = cin->session; apr_status_t status = APR_SUCCESS; apr_size_t len; const char *data; ssize_t n; (void)c; status = apr_bucket_read(b, &data, &len, block); while (status == APR_SUCCESS && len > 0) { n = nghttp2_session_mem_recv(session->ngh2, (const uint8_t *)data, len); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, session->c, H2_SSSN_MSG(session, "fed %ld bytes to nghttp2, %ld read"), (long)len, (long)n); if (n < 0) { if (nghttp2_is_fatal((int)n)) { h2_session_event(session, H2_SESSION_EV_PROTO_ERROR, (int)n, nghttp2_strerror((int)n)); status = APR_EGENERAL; } } else { session->io.bytes_read += n; if ((apr_ssize_t)len <= n) { break; } len -= (apr_size_t)n; data += n; } } return status; } static apr_status_t recv_RAW_brigade(conn_rec *c, h2_filter_cin *cin, apr_bucket_brigade *bb, apr_read_type_e block) { apr_status_t status = APR_SUCCESS; apr_bucket* b; int consumed = 0; h2_util_bb_log(c, c->id, APLOG_TRACE2, "RAW_in", bb); while (status == APR_SUCCESS && !APR_BRIGADE_EMPTY(bb)) { b = APR_BRIGADE_FIRST(bb); if (APR_BUCKET_IS_METADATA(b)) { /* nop */ } else { status = recv_RAW_DATA(c, cin, b, block); } consumed = 1; apr_bucket_delete(b); } if (!consumed && status == APR_SUCCESS && block == APR_NONBLOCK_READ) { return APR_EAGAIN; } return status; } h2_filter_cin *h2_filter_cin_create(h2_session *session) { h2_filter_cin *cin; cin = apr_pcalloc(session->pool, sizeof(*cin)); if (!cin) { return NULL; } cin->session = session; return cin; } void h2_filter_cin_timeout_set(h2_filter_cin *cin, apr_interval_time_t timeout) { cin->timeout = timeout; } apr_status_t h2_filter_core_input(ap_filter_t* f, apr_bucket_brigade* brigade, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { h2_filter_cin *cin = f->ctx; apr_status_t status = APR_SUCCESS; apr_interval_time_t saved_timeout = UNSET; const int trace1 = APLOGctrace1(f->c); if (trace1) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, f->c, "h2_session(%ld): read, %s, mode=%d, readbytes=%ld", (long)f->c->id, (block == APR_BLOCK_READ)? "BLOCK_READ" : "NONBLOCK_READ", mode, (long)readbytes); } if (mode == AP_MODE_INIT || mode == AP_MODE_SPECULATIVE) { return ap_get_brigade(f->next, brigade, mode, block, readbytes); } if (mode != AP_MODE_READBYTES) { return (block == APR_BLOCK_READ)? APR_SUCCESS : APR_EAGAIN; } if (!cin->bb) { cin->bb = apr_brigade_create(cin->session->pool, f->c->bucket_alloc); } if (!cin->socket) { cin->socket = ap_get_conn_socket(f->c); } if (APR_BRIGADE_EMPTY(cin->bb)) { /* We only do a blocking read when we have no streams to process. So, * in httpd scoreboard lingo, we are in a KEEPALIVE connection state. */ if (block == APR_BLOCK_READ) { if (cin->timeout > 0) { apr_socket_timeout_get(cin->socket, &saved_timeout); apr_socket_timeout_set(cin->socket, cin->timeout); } } status = ap_get_brigade(f->next, cin->bb, AP_MODE_READBYTES, block, readbytes); if (saved_timeout != UNSET) { apr_socket_timeout_set(cin->socket, saved_timeout); } } switch (status) { case APR_SUCCESS: status = recv_RAW_brigade(f->c, cin, cin->bb, block); break; case APR_EOF: case APR_EAGAIN: case APR_TIMEUP: if (trace1) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, status, f->c, "h2_session(%ld): read", f->c->id); } break; default: ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, f->c, APLOGNO(03046) "h2_session(%ld): error reading", f->c->id); break; } return status; } /******************************************************************************* * http2 connection status handler + stream out source ******************************************************************************/ typedef struct { apr_bucket_refcount refcount; h2_bucket_event_cb *cb; void *ctx; } h2_bucket_observer; static apr_status_t bucket_read(apr_bucket *b, const char **str, apr_size_t *len, apr_read_type_e block) { (void)b; (void)block; *str = NULL; *len = 0; return APR_SUCCESS; } static void bucket_destroy(void *data) { h2_bucket_observer *h = data; if (apr_bucket_shared_destroy(h)) { if (h->cb) { h->cb(h->ctx, H2_BUCKET_EV_BEFORE_DESTROY, NULL); } apr_bucket_free(h); } } apr_bucket * h2_bucket_observer_make(apr_bucket *b, h2_bucket_event_cb *cb, void *ctx) { h2_bucket_observer *br; br = apr_bucket_alloc(sizeof(*br), b->list); br->cb = cb; br->ctx = ctx; b = apr_bucket_shared_make(b, br, 0, 0); b->type = &h2_bucket_type_observer; return b; } apr_bucket * h2_bucket_observer_create(apr_bucket_alloc_t *list, h2_bucket_event_cb *cb, void *ctx) { apr_bucket *b = apr_bucket_alloc(sizeof(*b), list); APR_BUCKET_INIT(b); b->free = apr_bucket_free; b->list = list; b = h2_bucket_observer_make(b, cb, ctx); return b; } apr_status_t h2_bucket_observer_fire(apr_bucket *b, h2_bucket_event event) { if (H2_BUCKET_IS_OBSERVER(b)) { h2_bucket_observer *l = (h2_bucket_observer *)b->data; return l->cb(l->ctx, event, b); } return APR_EINVAL; } const apr_bucket_type_t h2_bucket_type_observer = { "H2OBS", 5, APR_BUCKET_METADATA, bucket_destroy, bucket_read, apr_bucket_setaside_noop, apr_bucket_split_notimpl, apr_bucket_shared_copy }; apr_bucket *h2_bucket_observer_beam(struct h2_bucket_beam *beam, apr_bucket_brigade *dest, const apr_bucket *src) { (void)beam; if (H2_BUCKET_IS_OBSERVER(src)) { h2_bucket_observer *l = (h2_bucket_observer *)src->data; apr_bucket *b = h2_bucket_observer_create(dest->bucket_alloc, l->cb, l->ctx); APR_BRIGADE_INSERT_TAIL(dest, b); l->cb = NULL; l->ctx = NULL; h2_bucket_observer_fire(b, H2_BUCKET_EV_BEFORE_MASTER_SEND); return b; } return NULL; } static apr_status_t bbout(apr_bucket_brigade *bb, const char *fmt, ...) __attribute__((format(printf,2,3))); static apr_status_t bbout(apr_bucket_brigade *bb, const char *fmt, ...) { va_list args; apr_status_t rv; va_start(args, fmt); rv = apr_brigade_vprintf(bb, NULL, NULL, fmt, args); va_end(args); return rv; } static void add_settings(apr_bucket_brigade *bb, h2_session *s, int last) { h2_mplx *m = s->mplx; bbout(bb, " \"settings\": {\n"); bbout(bb, " \"SETTINGS_MAX_CONCURRENT_STREAMS\": %d,\n", m->max_streams); bbout(bb, " \"SETTINGS_MAX_FRAME_SIZE\": %d,\n", 16*1024); bbout(bb, " \"SETTINGS_INITIAL_WINDOW_SIZE\": %d,\n", h2_config_sgeti(s->s, H2_CONF_WIN_SIZE)); bbout(bb, " \"SETTINGS_ENABLE_PUSH\": %d\n", h2_session_push_enabled(s)); bbout(bb, " }%s\n", last? "" : ","); } static void add_peer_settings(apr_bucket_brigade *bb, h2_session *s, int last) { bbout(bb, " \"peerSettings\": {\n"); bbout(bb, " \"SETTINGS_MAX_CONCURRENT_STREAMS\": %d,\n", nghttp2_session_get_remote_settings(s->ngh2, NGHTTP2_SETTINGS_MAX_CONCURRENT_STREAMS)); bbout(bb, " \"SETTINGS_MAX_FRAME_SIZE\": %d,\n", nghttp2_session_get_remote_settings(s->ngh2, NGHTTP2_SETTINGS_MAX_FRAME_SIZE)); bbout(bb, " \"SETTINGS_INITIAL_WINDOW_SIZE\": %d,\n", nghttp2_session_get_remote_settings(s->ngh2, NGHTTP2_SETTINGS_INITIAL_WINDOW_SIZE)); bbout(bb, " \"SETTINGS_ENABLE_PUSH\": %d,\n", nghttp2_session_get_remote_settings(s->ngh2, NGHTTP2_SETTINGS_ENABLE_PUSH)); bbout(bb, " \"SETTINGS_HEADER_TABLE_SIZE\": %d,\n", nghttp2_session_get_remote_settings(s->ngh2, NGHTTP2_SETTINGS_HEADER_TABLE_SIZE)); bbout(bb, " \"SETTINGS_MAX_HEADER_LIST_SIZE\": %d\n", nghttp2_session_get_remote_settings(s->ngh2, NGHTTP2_SETTINGS_MAX_HEADER_LIST_SIZE)); bbout(bb, " }%s\n", last? "" : ","); } typedef struct { apr_bucket_brigade *bb; h2_session *s; int idx; } stream_ctx_t; static int add_stream(h2_stream *stream, void *ctx) { stream_ctx_t *x = ctx; int32_t flowIn, flowOut; flowIn = nghttp2_session_get_stream_effective_local_window_size(x->s->ngh2, stream->id); flowOut = nghttp2_session_get_stream_remote_window_size(x->s->ngh2, stream->id); bbout(x->bb, "%s\n \"%d\": {\n", (x->idx? "," : ""), stream->id); bbout(x->bb, " \"state\": \"%s\",\n", h2_stream_state_str(stream)); bbout(x->bb, " \"created\": %f,\n", ((double)stream->created)/APR_USEC_PER_SEC); bbout(x->bb, " \"flowIn\": %d,\n", flowIn); bbout(x->bb, " \"flowOut\": %d,\n", flowOut); bbout(x->bb, " \"dataIn\": %"APR_OFF_T_FMT",\n", stream->in_data_octets); bbout(x->bb, " \"dataOut\": %"APR_OFF_T_FMT"\n", stream->out_data_octets); bbout(x->bb, " }"); ++x->idx; return 1; } static void add_streams(apr_bucket_brigade *bb, h2_session *s, int last) { stream_ctx_t x; x.bb = bb; x.s = s; x.idx = 0; bbout(bb, " \"streams\": {"); h2_mplx_stream_do(s->mplx, add_stream, &x); bbout(bb, "\n }%s\n", last? "" : ","); } static void add_push(apr_bucket_brigade *bb, h2_session *s, h2_stream *stream, int last) { h2_push_diary *diary; apr_status_t status; bbout(bb, " \"push\": {\n"); diary = s->push_diary; if (diary) { const char *data; const char *base64_digest; apr_size_t len; status = h2_push_diary_digest_get(diary, bb->p, 256, stream->request->authority, &data, &len); if (status == APR_SUCCESS) { base64_digest = h2_util_base64url_encode(data, len, bb->p); bbout(bb, " \"cacheDigest\": \"%s\",\n", base64_digest); } } bbout(bb, " \"promises\": %d,\n", s->pushes_promised); bbout(bb, " \"submits\": %d,\n", s->pushes_submitted); bbout(bb, " \"resets\": %d\n", s->pushes_reset); bbout(bb, " }%s\n", last? "" : ","); } static void add_in(apr_bucket_brigade *bb, h2_session *s, int last) { bbout(bb, " \"in\": {\n"); bbout(bb, " \"requests\": %d,\n", s->remote.emitted_count); bbout(bb, " \"resets\": %d, \n", s->streams_reset); bbout(bb, " \"frames\": %ld,\n", (long)s->frames_received); bbout(bb, " \"octets\": %"APR_UINT64_T_FMT"\n", s->io.bytes_read); bbout(bb, " }%s\n", last? "" : ","); } static void add_out(apr_bucket_brigade *bb, h2_session *s, int last) { bbout(bb, " \"out\": {\n"); bbout(bb, " \"responses\": %d,\n", s->responses_submitted); bbout(bb, " \"frames\": %ld,\n", (long)s->frames_sent); bbout(bb, " \"octets\": %"APR_UINT64_T_FMT"\n", s->io.bytes_written); bbout(bb, " }%s\n", last? "" : ","); } static void add_stats(apr_bucket_brigade *bb, h2_session *s, h2_stream *stream, int last) { bbout(bb, " \"stats\": {\n"); add_in(bb, s, 0); add_out(bb, s, 0); add_push(bb, s, stream, 1); bbout(bb, " }%s\n", last? "" : ","); } static apr_status_t h2_status_insert(h2_task *task, apr_bucket *b) { h2_mplx *m = task->mplx; h2_stream *stream = h2_mplx_stream_get(m, task->stream_id); h2_session *s; conn_rec *c; apr_bucket_brigade *bb; apr_bucket *e; int32_t connFlowIn, connFlowOut; if (!stream) { /* stream already done */ return APR_SUCCESS; } s = stream->session; c = s->c; bb = apr_brigade_create(stream->pool, c->bucket_alloc); connFlowIn = nghttp2_session_get_effective_local_window_size(s->ngh2); connFlowOut = nghttp2_session_get_remote_window_size(s->ngh2); bbout(bb, "{\n"); bbout(bb, " \"version\": \"draft-01\",\n"); add_settings(bb, s, 0); add_peer_settings(bb, s, 0); bbout(bb, " \"connFlowIn\": %d,\n", connFlowIn); bbout(bb, " \"connFlowOut\": %d,\n", connFlowOut); bbout(bb, " \"sentGoAway\": %d,\n", s->local.shutdown); add_streams(bb, s, 0); add_stats(bb, s, stream, 1); bbout(bb, "}\n"); while ((e = APR_BRIGADE_FIRST(bb)) != APR_BRIGADE_SENTINEL(bb)) { APR_BUCKET_REMOVE(e); APR_BUCKET_INSERT_AFTER(b, e); b = e; } apr_brigade_destroy(bb); return APR_SUCCESS; } static apr_status_t status_event(void *ctx, h2_bucket_event event, apr_bucket *b) { h2_task *task = ctx; ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, task->c->master, "status_event(%s): %d", task->id, event); switch (event) { case H2_BUCKET_EV_BEFORE_MASTER_SEND: h2_status_insert(task, b); break; default: break; } return APR_SUCCESS; } static apr_status_t discard_body(request_rec *r, apr_off_t maxlen) { apr_bucket_brigade *bb; int seen_eos; apr_status_t rv; bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); seen_eos = 0; do { apr_bucket *bucket; rv = ap_get_brigade(r->input_filters, bb, AP_MODE_READBYTES, APR_BLOCK_READ, HUGE_STRING_LEN); if (rv != APR_SUCCESS) { apr_brigade_destroy(bb); return rv; } for (bucket = APR_BRIGADE_FIRST(bb); bucket != APR_BRIGADE_SENTINEL(bb); bucket = APR_BUCKET_NEXT(bucket)) { const char *data; apr_size_t len; if (APR_BUCKET_IS_EOS(bucket)) { seen_eos = 1; break; } if (bucket->length == 0) { continue; } rv = apr_bucket_read(bucket, &data, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS) { apr_brigade_destroy(bb); return rv; } maxlen -= bucket->length; } apr_brigade_cleanup(bb); } while (!seen_eos && maxlen >= 0); return APR_SUCCESS; } int h2_filter_h2_status_handler(request_rec *r) { conn_rec *c = r->connection; h2_task *task; apr_bucket_brigade *bb; apr_bucket *b; apr_status_t status; if (strcmp(r->handler, "http2-status")) { return DECLINED; } if (r->method_number != M_GET && r->method_number != M_POST) { return DECLINED; } task = h2_ctx_get_task(r->connection); if (task) { /* In this handler, we do some special sauce to send footers back, * IFF we received footers in the request. This is used in our test * cases, since CGI has no way of handling those. */ if ((status = discard_body(r, 1024)) != OK) { return status; } /* We need to handle the actual output on the main thread, as * we need to access h2_session information. */ r->status = 200; r->clength = -1; r->chunked = 1; apr_table_unset(r->headers_out, "Content-Length"); /* Discourage content-encodings */ apr_table_unset(r->headers_out, "Content-Encoding"); apr_table_setn(r->subprocess_env, "no-brotli", "1"); apr_table_setn(r->subprocess_env, "no-gzip", "1"); ap_set_content_type(r, "application/json"); apr_table_setn(r->notes, H2_FILTER_DEBUG_NOTE, "on"); bb = apr_brigade_create(r->pool, c->bucket_alloc); b = h2_bucket_observer_create(c->bucket_alloc, status_event, task); APR_BRIGADE_INSERT_TAIL(bb, b); b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "status_handler(%s): checking for incoming trailers", task->id); if (r->trailers_in && !apr_is_empty_table(r->trailers_in)) { ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "status_handler(%s): seeing incoming trailers", task->id); apr_table_setn(r->trailers_out, "h2-trailers-in", apr_itoa(r->pool, 1)); } status = ap_pass_brigade(r->output_filters, bb); if (status == APR_SUCCESS || r->status != HTTP_OK || c->aborted) { return OK; } else { /* no way to know what type of error occurred */ ap_log_rerror(APLOG_MARK, APLOG_TRACE1, status, r, "status_handler(%s): ap_pass_brigade failed", task->id); return AP_FILTER_ERROR; } } return DECLINED; } httpd-2.4.41/modules/http2/h2_mplx.h0000644000000000000500000002370213520520073015470 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_mplx__ #define __mod_h2__h2_mplx__ /** * The stream multiplexer. It pushes buckets from the connection * thread to the stream threads and vice versa. It's thread-safe * to use. * * There is one h2_mplx instance for each h2_session, which sits on top * of a particular httpd conn_rec. Input goes from the connection to * the stream tasks. Output goes from the stream tasks to the connection, * e.g. the client. * * For each stream, there can be at most "H2StreamMaxMemSize" output bytes * queued in the multiplexer. If a task thread tries to write more * data, it is blocked until space becomes available. * * Writing input is never blocked. In order to use flow control on the input, * the mplx can be polled for input data consumption. */ struct apr_pool_t; struct apr_thread_mutex_t; struct apr_thread_cond_t; struct h2_bucket_beam; struct h2_config; struct h2_ihash_t; struct h2_task; struct h2_stream; struct h2_request; struct apr_thread_cond_t; struct h2_workers; struct h2_iqueue; #include typedef struct h2_mplx h2_mplx; struct h2_mplx { long id; conn_rec *c; apr_pool_t *pool; server_rec *s; /* server for master conn */ unsigned int event_pending; unsigned int aborted; unsigned int is_registered; /* is registered at h2_workers */ struct h2_ihash_t *streams; /* all streams currently processing */ struct h2_ihash_t *shold; /* all streams done with task ongoing */ struct h2_ihash_t *spurge; /* all streams done, ready for destroy */ struct h2_iqueue *q; /* all stream ids that need to be started */ struct h2_ififo *readyq; /* all stream ids ready for output */ struct h2_ihash_t *redo_tasks; /* all tasks that need to be redone */ int max_streams; /* max # of concurrent streams */ int max_stream_started; /* highest stream id that started processing */ int tasks_active; /* # of tasks being processed from this mplx */ int limit_active; /* current limit on active tasks, dynamic */ int max_active; /* max, hard limit # of active tasks in a process */ apr_time_t last_mood_change; /* last time, we worker limit changed */ apr_interval_time_t mood_update_interval; /* how frequent we update at most */ int irritations_since; /* irritations (>0) or happy events (<0) since last mood change */ apr_thread_mutex_t *lock; struct apr_thread_cond_t *added_output; struct apr_thread_cond_t *join_wait; apr_size_t stream_max_mem; apr_pool_t *spare_io_pool; apr_array_header_t *spare_slaves; /* spare slave connections */ struct h2_workers *workers; }; /******************************************************************************* * Object lifecycle and information. ******************************************************************************/ apr_status_t h2_mplx_child_init(apr_pool_t *pool, server_rec *s); /** * Create the multiplexer for the given HTTP2 session. * Implicitly has reference count 1. */ h2_mplx *h2_mplx_create(conn_rec *c, server_rec *s, apr_pool_t *master, struct h2_workers *workers); /** * Decreases the reference counter of this mplx and waits for it * to reached 0, destroy the mplx afterwards. * This is to be called from the thread that created the mplx in * the first place. * @param m the mplx to be released and destroyed * @param wait condition var to wait on for ref counter == 0 */ void h2_mplx_release_and_join(h2_mplx *m, struct apr_thread_cond_t *wait); apr_status_t h2_mplx_pop_task(h2_mplx *m, struct h2_task **ptask); void h2_mplx_task_done(h2_mplx *m, struct h2_task *task, struct h2_task **ptask); /** * Shut down the multiplexer gracefully. Will no longer schedule new streams * but let the ongoing ones finish normally. * @return the highest stream id being/been processed */ int h2_mplx_shutdown(h2_mplx *m); int h2_mplx_is_busy(h2_mplx *m); /******************************************************************************* * IO lifetime of streams. ******************************************************************************/ struct h2_stream *h2_mplx_stream_get(h2_mplx *m, int id); /** * Notifies mplx that a stream has been completely handled on the main * connection and is ready for cleanup. * * @param m the mplx itself * @param stream the stream ready for cleanup */ apr_status_t h2_mplx_stream_cleanup(h2_mplx *m, struct h2_stream *stream); /** * Waits on output data from any stream in this session to become available. * Returns APR_TIMEUP if no data arrived in the given time. */ apr_status_t h2_mplx_out_trywait(h2_mplx *m, apr_interval_time_t timeout, struct apr_thread_cond_t *iowait); apr_status_t h2_mplx_keep_active(h2_mplx *m, struct h2_stream *stream); /******************************************************************************* * Stream processing. ******************************************************************************/ /** * Process a stream request. * * @param m the multiplexer * @param stream the identifier of the stream * @param r the request to be processed * @param cmp the stream priority compare function * @param ctx context data for the compare function */ apr_status_t h2_mplx_process(h2_mplx *m, struct h2_stream *stream, h2_stream_pri_cmp *cmp, void *ctx); /** * Stream priorities have changed, reschedule pending requests. * * @param m the multiplexer * @param cmp the stream priority compare function * @param ctx context data for the compare function */ apr_status_t h2_mplx_reprioritize(h2_mplx *m, h2_stream_pri_cmp *cmp, void *ctx); typedef apr_status_t stream_ev_callback(void *ctx, struct h2_stream *stream); /** * Check if the multiplexer has events for the master connection pending. * @return != 0 iff there are events pending */ int h2_mplx_has_master_events(h2_mplx *m); /** * Dispatch events for the master connection, such as ± @param m the multiplexer * @param on_resume new output data has arrived for a suspended stream * @param ctx user supplied argument to invocation. */ apr_status_t h2_mplx_dispatch_master_events(h2_mplx *m, stream_ev_callback *on_resume, void *ctx); int h2_mplx_awaits_data(h2_mplx *m); typedef int h2_mplx_stream_cb(struct h2_stream *s, void *ctx); apr_status_t h2_mplx_stream_do(h2_mplx *m, h2_mplx_stream_cb *cb, void *ctx); apr_status_t h2_mplx_client_rst(h2_mplx *m, int stream_id); /******************************************************************************* * Output handling of streams. ******************************************************************************/ /** * Opens the output for the given stream with the specified response. */ apr_status_t h2_mplx_out_open(h2_mplx *mplx, int stream_id, struct h2_bucket_beam *beam); /******************************************************************************* * h2_mplx list Manipulation. ******************************************************************************/ /** * The magic pointer value that indicates the head of a h2_mplx list * @param b The mplx list * @return The magic pointer value */ #define H2_MPLX_LIST_SENTINEL(b) APR_RING_SENTINEL((b), h2_mplx, link) /** * Determine if the mplx list is empty * @param b The list to check * @return true or false */ #define H2_MPLX_LIST_EMPTY(b) APR_RING_EMPTY((b), h2_mplx, link) /** * Return the first mplx in a list * @param b The list to query * @return The first mplx in the list */ #define H2_MPLX_LIST_FIRST(b) APR_RING_FIRST(b) /** * Return the last mplx in a list * @param b The list to query * @return The last mplx int he list */ #define H2_MPLX_LIST_LAST(b) APR_RING_LAST(b) /** * Insert a single mplx at the front of a list * @param b The list to add to * @param e The mplx to insert */ #define H2_MPLX_LIST_INSERT_HEAD(b, e) do { \ h2_mplx *ap__b = (e); \ APR_RING_INSERT_HEAD((b), ap__b, h2_mplx, link); \ } while (0) /** * Insert a single mplx at the end of a list * @param b The list to add to * @param e The mplx to insert */ #define H2_MPLX_LIST_INSERT_TAIL(b, e) do { \ h2_mplx *ap__b = (e); \ APR_RING_INSERT_TAIL((b), ap__b, h2_mplx, link); \ } while (0) /** * Get the next mplx in the list * @param e The current mplx * @return The next mplx */ #define H2_MPLX_NEXT(e) APR_RING_NEXT((e), link) /** * Get the previous mplx in the list * @param e The current mplx * @return The previous mplx */ #define H2_MPLX_PREV(e) APR_RING_PREV((e), link) /** * Remove a mplx from its list * @param e The mplx to remove */ #define H2_MPLX_REMOVE(e) APR_RING_REMOVE((e), link) /******************************************************************************* * h2_mplx DoS protection ******************************************************************************/ /** * Master connection has entered idle mode. * @param m the mplx instance of the master connection * @return != SUCCESS iff connection should be terminated */ apr_status_t h2_mplx_idle(h2_mplx *m); #endif /* defined(__mod_h2__h2_mplx__) */ httpd-2.4.41/modules/http2/h2_filter.h0000644000000000000500000000526413237611704016007 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_filter__ #define __mod_h2__h2_filter__ struct h2_bucket_beam; struct h2_headers; struct h2_stream; struct h2_session; typedef struct h2_filter_cin { apr_pool_t *pool; apr_socket_t *socket; apr_interval_time_t timeout; apr_bucket_brigade *bb; struct h2_session *session; apr_bucket *cur; } h2_filter_cin; h2_filter_cin *h2_filter_cin_create(struct h2_session *session); void h2_filter_cin_timeout_set(h2_filter_cin *cin, apr_interval_time_t timeout); apr_status_t h2_filter_core_input(ap_filter_t* filter, apr_bucket_brigade* brigade, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes); /******* observer bucket ******************************************************/ typedef enum { H2_BUCKET_EV_BEFORE_DESTROY, H2_BUCKET_EV_BEFORE_MASTER_SEND } h2_bucket_event; extern const apr_bucket_type_t h2_bucket_type_observer; typedef apr_status_t h2_bucket_event_cb(void *ctx, h2_bucket_event event, apr_bucket *b); #define H2_BUCKET_IS_OBSERVER(e) (e->type == &h2_bucket_type_observer) apr_bucket * h2_bucket_observer_make(apr_bucket *b, h2_bucket_event_cb *cb, void *ctx); apr_bucket * h2_bucket_observer_create(apr_bucket_alloc_t *list, h2_bucket_event_cb *cb, void *ctx); apr_status_t h2_bucket_observer_fire(apr_bucket *b, h2_bucket_event event); apr_bucket *h2_bucket_observer_beam(struct h2_bucket_beam *beam, apr_bucket_brigade *dest, const apr_bucket *src); /******* /.well-known/h2/state handler ****************************************/ int h2_filter_h2_status_handler(request_rec *r); #endif /* __mod_h2__h2_filter__ */ httpd-2.4.41/modules/http2/h2_conn.h0000644000000000000500000000473413442215451015455 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_conn__ #define __mod_h2__h2_conn__ struct h2_ctx; struct h2_task; /** * Setup the connection and our context for HTTP/2 processing * * @param c the connection HTTP/2 is starting on * @param r the upgrade request that still awaits an answer, optional * @param s the server selected for this connection (can be != c->base_server) */ apr_status_t h2_conn_setup(conn_rec *c, request_rec *r, server_rec *s); /** * Run the HTTP/2 connection in synchronous fashion. * Return when the HTTP/2 session is done * and the connection will close or a fatal error occurred. * * @param c the http2 connection to run * @return APR_SUCCESS when session is done. */ apr_status_t h2_conn_run(conn_rec *c); /** * The connection is about to close. If we have not send a GOAWAY * yet, this is the last chance. */ apr_status_t h2_conn_pre_close(struct h2_ctx *ctx, conn_rec *c); /* Initialize this child process for h2 connection work, * to be called once during child init before multi processing * starts. */ apr_status_t h2_conn_child_init(apr_pool_t *pool, server_rec *s); typedef enum { H2_MPM_UNKNOWN, H2_MPM_WORKER, H2_MPM_EVENT, H2_MPM_PREFORK, H2_MPM_MOTORZ, H2_MPM_SIMPLE, H2_MPM_NETWARE, H2_MPM_WINNT, } h2_mpm_type_t; /* Returns the type of MPM module detected */ h2_mpm_type_t h2_conn_mpm_type(void); const char *h2_conn_mpm_name(void); int h2_mpm_supported(void); conn_rec *h2_slave_create(conn_rec *master, int slave_id, apr_pool_t *parent); void h2_slave_destroy(conn_rec *slave); apr_status_t h2_slave_run_pre_connection(conn_rec *slave, apr_socket_t *csd); void h2_slave_run_connection(conn_rec *slave); #endif /* defined(__mod_h2__h2_conn__) */ httpd-2.4.41/modules/http2/README.h20000644000000000000500000000413512757564422015156 0ustar rootsrcThe http2 module adds support for the HTTP/2 protocol to the server. Specifically, it supports the protocols "h2" (HTTP2 over TLS) and "h2c" (HTTP2 over plain HTTP connections via Upgrade). Additionally it offers the "direct" mode for both encrypted and unencrypted connections. You may enable it for the whole server or specific virtual hosts only. BUILD If you have libnghttp2 (https://nghttp2.org) installed on your system, simply add --enable-http2 to your httpd ./configure invocation. Should libnghttp2 reside in a unusual location, add --with-nghttp2= to ./configure. is expected to be the installation prefix, so there should be a /lib/libnghttp2.*. If your system support pkg-config, /lib/pkgconfig/libnghttp2.pc will be inspected. If you want to link nghttp2 statically into the mod_http2 module, you may similarly to mod_ssl add --enable-nghttp2-staticlib-deps For this, the lib directory should only contain the libnghttp2.a, not its shared cousins. CONFIGURATION If mod_http2 is enabled for a site or not depends on the new "Protocols" directive. This directive list all protocols enabled for a server or virtual host. If you do not specify "Protocols" all available protocols are enabled. For sites using TLS, the protocol supported by mod_http2 is "h2". For cleartext http:, the offered protocol is "h2c". The following is an example of a server that only supports http/1.1 in general and offers h2 for a specific virtual host. ... Protocols http/1.1 Protocols h2 http/1.1 ... Please see the documentation of mod_http2 for a complete list and explanation of all options. TLS CONFIGURATION If you want to use HTTP/2 with a browser, most modern browsers will support it without further configuration. However, browsers so far only support HTTP/2 over TLS and are especially picky about the certificate and encryption ciphers used. Server admins may look for up-to-date information about "modern" TLS compatibility under: https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility httpd-2.4.41/modules/http2/h2_headers.h0000644000000000000500000000604113500427255016126 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_headers__ #define __mod_h2__h2_headers__ #include "h2.h" struct h2_bucket_beam; extern const apr_bucket_type_t h2_bucket_type_headers; #define H2_BUCKET_IS_HEADERS(e) (e->type == &h2_bucket_type_headers) apr_bucket * h2_bucket_headers_make(apr_bucket *b, h2_headers *r); apr_bucket * h2_bucket_headers_create(apr_bucket_alloc_t *list, h2_headers *r); h2_headers *h2_bucket_headers_get(apr_bucket *b); apr_bucket *h2_bucket_headers_beam(struct h2_bucket_beam *beam, apr_bucket_brigade *dest, const apr_bucket *src); /** * Create the headers from the given status and headers * @param status the headers status * @param header the headers of the headers * @param notes the notes carried by the headers * @param raw_bytes the raw network bytes (if known) used to transmit these * @param pool the memory pool to use */ h2_headers *h2_headers_create(int status, apr_table_t *header, apr_table_t *notes, apr_off_t raw_bytes, apr_pool_t *pool); /** * Create the headers from the given request_rec. * @param r the request record which was processed * @param status the headers status * @param header the headers of the headers * @param pool the memory pool to use */ h2_headers *h2_headers_rcreate(request_rec *r, int status, apr_table_t *header, apr_pool_t *pool); /** * Copy the headers into another pool. This will not copy any * header strings. */ h2_headers *h2_headers_copy(apr_pool_t *pool, h2_headers *h); /** * Clone the headers into another pool. This will also clone any * header strings. */ h2_headers *h2_headers_clone(apr_pool_t *pool, h2_headers *h); /** * Create the headers for the given error. * @param stream_id id of the stream to create the headers for * @param type the error code * @param req the original h2_request * @param pool the memory pool to use */ h2_headers *h2_headers_die(apr_status_t type, const struct h2_request *req, apr_pool_t *pool); int h2_headers_are_response(h2_headers *headers); #endif /* defined(__mod_h2__h2_headers__) */ httpd-2.4.41/modules/http2/.gitignore0000644000000000000500000000065212573345517015754 0ustar rootsrc*.xcuserstate sandbox/httpd/packages/httpd-2.4.x.tar.gz sandbox/test/conf/sites/mod-h2.greenbytes.de.conf *.o *.slo *.lo *.la *.pcap .libs .configured .deps compile aclocal.m4 autom4te.cache autoscan.log config.guess config.log config.status config.sub config.h config.h.in config.h.in~ configure configure.scan depcomp install-sh libtool ltmain.sh missing stamp-h1 Makefile.in Makefile mod_h2-*.tar.gz mod_h2/h2_version.h m4 httpd-2.4.41/modules/http2/h2_conn_io.c0000644000000000000500000003040013442215451016124 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include "h2_private.h" #include "h2_bucket_eos.h" #include "h2_config.h" #include "h2_conn_io.h" #include "h2_h2.h" #include "h2_session.h" #include "h2_util.h" #define TLS_DATA_MAX (16*1024) /* Calculated like this: assuming MTU 1500 bytes * 1500 - 40 (IP) - 20 (TCP) - 40 (TCP options) * - TLS overhead (60-100) * ~= 1300 bytes */ #define WRITE_SIZE_INITIAL 1300 /* The maximum we'd like to write in one chunk is * the max size of a TLS record. When pushing * many frames down the h2 connection, this might * align differently because of headers and other * frames or simply as not sufficient data is * in a response body. * However keeping frames at or below this limit * should make optimizations at the layer that writes * to TLS easier. */ #define WRITE_SIZE_MAX (TLS_DATA_MAX) static void h2_conn_io_bb_log(conn_rec *c, int stream_id, int level, const char *tag, apr_bucket_brigade *bb) { char buffer[16 * 1024]; const char *line = "(null)"; apr_size_t bmax = sizeof(buffer)/sizeof(buffer[0]); int off = 0; apr_bucket *b; if (bb) { memset(buffer, 0, bmax--); for (b = APR_BRIGADE_FIRST(bb); bmax && (b != APR_BRIGADE_SENTINEL(bb)); b = APR_BUCKET_NEXT(b)) { if (APR_BUCKET_IS_METADATA(b)) { if (APR_BUCKET_IS_EOS(b)) { off += apr_snprintf(buffer+off, bmax-off, "eos "); } else if (APR_BUCKET_IS_FLUSH(b)) { off += apr_snprintf(buffer+off, bmax-off, "flush "); } else if (AP_BUCKET_IS_EOR(b)) { off += apr_snprintf(buffer+off, bmax-off, "eor "); } else if (H2_BUCKET_IS_H2EOS(b)) { off += apr_snprintf(buffer+off, bmax-off, "h2eos "); } else { off += apr_snprintf(buffer+off, bmax-off, "meta(unknown) "); } } else { const char *btype = "data"; if (APR_BUCKET_IS_FILE(b)) { btype = "file"; } else if (APR_BUCKET_IS_PIPE(b)) { btype = "pipe"; } else if (APR_BUCKET_IS_SOCKET(b)) { btype = "socket"; } else if (APR_BUCKET_IS_HEAP(b)) { btype = "heap"; } else if (APR_BUCKET_IS_TRANSIENT(b)) { btype = "transient"; } else if (APR_BUCKET_IS_IMMORTAL(b)) { btype = "immortal"; } #if APR_HAS_MMAP else if (APR_BUCKET_IS_MMAP(b)) { btype = "mmap"; } #endif else if (APR_BUCKET_IS_POOL(b)) { btype = "pool"; } off += apr_snprintf(buffer+off, bmax-off, "%s[%ld] ", btype, (long)(b->length == ((apr_size_t)-1)? -1 : b->length)); } } line = *buffer? buffer : "(empty)"; } /* Intentional no APLOGNO */ ap_log_cerror(APLOG_MARK, level, 0, c, "h2_session(%ld)-%s: %s", c->id, tag, line); } apr_status_t h2_conn_io_init(h2_conn_io *io, conn_rec *c, server_rec *s) { io->c = c; io->output = apr_brigade_create(c->pool, c->bucket_alloc); io->is_tls = h2_h2_is_tls(c); io->buffer_output = io->is_tls; io->flush_threshold = (apr_size_t)h2_config_sgeti64(s, H2_CONF_STREAM_MAX_MEM); if (io->is_tls) { /* This is what we start with, * see https://issues.apache.org/jira/browse/TS-2503 */ io->warmup_size = h2_config_sgeti64(s, H2_CONF_TLS_WARMUP_SIZE); io->cooldown_usecs = (h2_config_sgeti(s, H2_CONF_TLS_COOLDOWN_SECS) * APR_USEC_PER_SEC); io->write_size = (io->cooldown_usecs > 0? WRITE_SIZE_INITIAL : WRITE_SIZE_MAX); } else { io->warmup_size = 0; io->cooldown_usecs = 0; io->write_size = 0; } if (APLOGctrace1(c)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE4, 0, io->c, "h2_conn_io(%ld): init, buffering=%d, warmup_size=%ld, " "cd_secs=%f", io->c->id, io->buffer_output, (long)io->warmup_size, ((float)io->cooldown_usecs/APR_USEC_PER_SEC)); } return APR_SUCCESS; } static void append_scratch(h2_conn_io *io) { if (io->scratch && io->slen > 0) { apr_bucket *b = apr_bucket_heap_create(io->scratch, io->slen, apr_bucket_free, io->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(io->output, b); io->scratch = NULL; io->slen = io->ssize = 0; } } static apr_size_t assure_scratch_space(h2_conn_io *io) { apr_size_t remain = io->ssize - io->slen; if (io->scratch && remain == 0) { append_scratch(io); } if (!io->scratch) { /* we control the size and it is larger than what buckets usually * allocate. */ io->scratch = apr_bucket_alloc(io->write_size, io->c->bucket_alloc); io->ssize = io->write_size; io->slen = 0; remain = io->ssize; } return remain; } static apr_status_t read_to_scratch(h2_conn_io *io, apr_bucket *b) { apr_status_t status; const char *data; apr_size_t len; if (!b->length) { return APR_SUCCESS; } ap_assert(b->length <= (io->ssize - io->slen)); if (APR_BUCKET_IS_FILE(b)) { apr_bucket_file *f = (apr_bucket_file *)b->data; apr_file_t *fd = f->fd; apr_off_t offset = b->start; apr_size_t len = b->length; /* file buckets will either mmap (which we do not want) or * read 8000 byte chunks and split themself. However, we do * know *exactly* how many bytes we need where. */ status = apr_file_seek(fd, APR_SET, &offset); if (status != APR_SUCCESS) { return status; } status = apr_file_read(fd, io->scratch + io->slen, &len); if (status != APR_SUCCESS && status != APR_EOF) { return status; } io->slen += len; } else { status = apr_bucket_read(b, &data, &len, APR_BLOCK_READ); if (status == APR_SUCCESS) { memcpy(io->scratch+io->slen, data, len); io->slen += len; } } return status; } static void check_write_size(h2_conn_io *io) { if (io->write_size > WRITE_SIZE_INITIAL && (io->cooldown_usecs > 0) && (apr_time_now() - io->last_write) >= io->cooldown_usecs) { /* long time not written, reset write size */ io->write_size = WRITE_SIZE_INITIAL; io->bytes_written = 0; } else if (io->write_size < WRITE_SIZE_MAX && io->bytes_written >= io->warmup_size) { /* connection is hot, use max size */ io->write_size = WRITE_SIZE_MAX; } } static apr_status_t pass_output(h2_conn_io *io, int flush) { conn_rec *c = io->c; apr_bucket_brigade *bb = io->output; apr_bucket *b; apr_off_t bblen; apr_status_t status; append_scratch(io); if (flush && !io->is_flushed) { b = apr_bucket_flush_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); } if (APR_BRIGADE_EMPTY(bb)) { return APR_SUCCESS; } ap_update_child_status(c->sbh, SERVER_BUSY_WRITE, NULL); apr_brigade_length(bb, 0, &bblen); h2_conn_io_bb_log(c, 0, APLOG_TRACE2, "out", bb); status = ap_pass_brigade(c->output_filters, bb); if (status == APR_SUCCESS) { io->bytes_written += (apr_size_t)bblen; io->last_write = apr_time_now(); if (flush) { io->is_flushed = 1; } } apr_brigade_cleanup(bb); if (status != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, c, APLOGNO(03044) "h2_conn_io(%ld): pass_out brigade %ld bytes", c->id, (long)bblen); } return status; } int h2_conn_io_needs_flush(h2_conn_io *io) { if (!io->is_flushed) { apr_off_t len = h2_brigade_mem_size(io->output); if (len > io->flush_threshold) { return 1; } /* if we do not exceed flush length due to memory limits, * we want at least flush when we have that amount of data. */ apr_brigade_length(io->output, 0, &len); return len > (4 * io->flush_threshold); } return 0; } apr_status_t h2_conn_io_flush(h2_conn_io *io) { apr_status_t status; status = pass_output(io, 1); check_write_size(io); return status; } apr_status_t h2_conn_io_write(h2_conn_io *io, const char *data, size_t length) { apr_status_t status = APR_SUCCESS; apr_size_t remain; if (length > 0) { io->is_flushed = 0; } if (io->buffer_output) { while (length > 0) { remain = assure_scratch_space(io); if (remain >= length) { memcpy(io->scratch + io->slen, data, length); io->slen += length; length = 0; } else { memcpy(io->scratch + io->slen, data, remain); io->slen += remain; data += remain; length -= remain; } } } else { status = apr_brigade_write(io->output, NULL, NULL, data, length); } return status; } apr_status_t h2_conn_io_pass(h2_conn_io *io, apr_bucket_brigade *bb) { apr_bucket *b; apr_status_t status = APR_SUCCESS; if (!APR_BRIGADE_EMPTY(bb)) { io->is_flushed = 0; } while (!APR_BRIGADE_EMPTY(bb) && status == APR_SUCCESS) { b = APR_BRIGADE_FIRST(bb); if (APR_BUCKET_IS_METADATA(b)) { /* need to finish any open scratch bucket, as meta data * needs to be forward "in order". */ append_scratch(io); APR_BUCKET_REMOVE(b); APR_BRIGADE_INSERT_TAIL(io->output, b); } else if (io->buffer_output) { apr_size_t remain = assure_scratch_space(io); if (b->length > remain) { apr_bucket_split(b, remain); if (io->slen == 0) { /* complete write_size bucket, append unchanged */ APR_BUCKET_REMOVE(b); APR_BRIGADE_INSERT_TAIL(io->output, b); continue; } } else { /* bucket fits in remain, copy to scratch */ status = read_to_scratch(io, b); apr_bucket_delete(b); continue; } } else { /* no buffering, forward buckets setaside on flush */ if (APR_BUCKET_IS_TRANSIENT(b)) { apr_bucket_setaside(b, io->c->pool); } APR_BUCKET_REMOVE(b); APR_BRIGADE_INSERT_TAIL(io->output, b); } } return status; } httpd-2.4.41/modules/http2/config2.m40000644000000000000500000002133113442215451015537 0ustar rootsrcdnl Licensed to the Apache Software Foundation (ASF) under one or more dnl contributor license agreements. See the NOTICE file distributed with dnl this work for additional information regarding copyright ownership. dnl The ASF licenses this file to You under the Apache License, Version 2.0 dnl (the "License"); you may not use this file except in compliance with dnl the License. You may obtain a copy of the License at dnl dnl http://www.apache.org/licenses/LICENSE-2.0 dnl dnl Unless required by applicable law or agreed to in writing, software dnl distributed under the License is distributed on an "AS IS" BASIS, dnl WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. dnl See the License for the specific language governing permissions and dnl limitations under the License. dnl # start of module specific part APACHE_MODPATH_INIT(http2) dnl # list of module object files http2_objs="dnl mod_http2.lo dnl h2_alt_svc.lo dnl h2_bucket_beam.lo dnl h2_bucket_eos.lo dnl h2_config.lo dnl h2_conn.lo dnl h2_conn_io.lo dnl h2_ctx.lo dnl h2_filter.lo dnl h2_from_h1.lo dnl h2_h2.lo dnl h2_headers.lo dnl h2_mplx.lo dnl h2_push.lo dnl h2_request.lo dnl h2_session.lo dnl h2_stream.lo dnl h2_switch.lo dnl h2_task.lo dnl h2_util.lo dnl h2_workers.lo dnl " dnl dnl APACHE_CHECK_NGHTTP2 dnl dnl Configure for nghttp2, giving preference to dnl "--with-nghttp2=" if it was specified. dnl AC_DEFUN([APACHE_CHECK_NGHTTP2],[ AC_CACHE_CHECK([for nghttp2], [ac_cv_nghttp2], [ dnl initialise the variables we use ac_cv_nghttp2=no ap_nghttp2_found="" ap_nghttp2_base="" ap_nghttp2_libs="" dnl Determine the nghttp2 base directory, if any AC_MSG_CHECKING([for user-provided nghttp2 base directory]) AC_ARG_WITH(nghttp2, APACHE_HELP_STRING(--with-nghttp2=PATH, nghttp2 installation directory), [ dnl If --with-nghttp2 specifies a directory, we use that directory if test "x$withval" != "xyes" -a "x$withval" != "x"; then dnl This ensures $withval is actually a directory and that it is absolute ap_nghttp2_base="`cd $withval ; pwd`" fi ]) if test "x$ap_nghttp2_base" = "x"; then AC_MSG_RESULT(none) else AC_MSG_RESULT($ap_nghttp2_base) fi dnl Run header and version checks saved_CPPFLAGS="$CPPFLAGS" saved_LIBS="$LIBS" saved_LDFLAGS="$LDFLAGS" dnl Before doing anything else, load in pkg-config variables if test -n "$PKGCONFIG"; then saved_PKG_CONFIG_PATH="$PKG_CONFIG_PATH" AC_MSG_CHECKING([for pkg-config along $PKG_CONFIG_PATH]) if test "x$ap_nghttp2_base" != "x" ; then if test -f "${ap_nghttp2_base}/lib/pkgconfig/libnghttp2.pc"; then dnl Ensure that the given path is used by pkg-config too, otherwise dnl the system libnghttp2.pc might be picked up instead. PKG_CONFIG_PATH="${ap_nghttp2_base}/lib/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH elif test -f "${ap_nghttp2_base}/lib64/pkgconfig/libnghttp2.pc"; then dnl Ensure that the given path is used by pkg-config too, otherwise dnl the system libnghttp2.pc might be picked up instead. PKG_CONFIG_PATH="${ap_nghttp2_base}/lib64/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH fi fi AC_ARG_ENABLE(nghttp2-staticlib-deps,APACHE_HELP_STRING(--enable-nghttp2-staticlib-deps,[link mod_http2 with dependencies of libnghttp2's static libraries (as indicated by "pkg-config --static"). Must be specified in addition to --enable-http2.]), [ if test "$enableval" = "yes"; then PKGCONFIG_LIBOPTS="--static" fi ]) ap_nghttp2_libs="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-l --silence-errors libnghttp2`" if test $? -eq 0; then ap_nghttp2_found="yes" pkglookup="`$PKGCONFIG --cflags-only-I libnghttp2`" APR_ADDTO(CPPFLAGS, [$pkglookup]) APR_ADDTO(MOD_CFLAGS, [$pkglookup]) pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-L libnghttp2`" APR_ADDTO(LDFLAGS, [$pkglookup]) APR_ADDTO(MOD_LDFLAGS, [$pkglookup]) pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-other libnghttp2`" APR_ADDTO(LDFLAGS, [$pkglookup]) APR_ADDTO(MOD_LDFLAGS, [$pkglookup]) fi PKG_CONFIG_PATH="$saved_PKG_CONFIG_PATH" fi dnl fall back to the user-supplied directory if not found via pkg-config if test "x$ap_nghttp2_base" != "x" -a "x$ap_nghttp2_found" = "x"; then APR_ADDTO(CPPFLAGS, [-I$ap_nghttp2_base/include]) APR_ADDTO(MOD_CFLAGS, [-I$ap_nghttp2_base/include]) APR_ADDTO(LDFLAGS, [-L$ap_nghttp2_base/lib]) APR_ADDTO(MOD_LDFLAGS, [-L$ap_nghttp2_base/lib]) if test "x$ap_platform_runtime_link_flag" != "x"; then APR_ADDTO(LDFLAGS, [$ap_platform_runtime_link_flag$ap_nghttp2_base/lib]) APR_ADDTO(MOD_LDFLAGS, [$ap_platform_runtime_link_flag$ap_nghttp2_base/lib]) fi fi AC_MSG_CHECKING([for nghttp2 version >= 1.2.1]) AC_TRY_COMPILE([#include ],[ #if !defined(NGHTTP2_VERSION_NUM) #error "Missing nghttp2 version" #endif #if NGHTTP2_VERSION_NUM < 0x010201 #error "Unsupported nghttp2 version " NGHTTP2_VERSION_TEXT #endif], [AC_MSG_RESULT(OK) ac_cv_nghttp2=yes], [AC_MSG_RESULT(FAILED)]) if test "x$ac_cv_nghttp2" = "xyes"; then ap_nghttp2_libs="${ap_nghttp2_libs:--lnghttp2} `$apr_config --libs`" APR_ADDTO(MOD_LDFLAGS, [$ap_nghttp2_libs]) APR_ADDTO(LIBS, [$ap_nghttp2_libs]) dnl Run library and function checks liberrors="" AC_CHECK_HEADERS([nghttp2/nghttp2.h]) AC_CHECK_FUNCS([nghttp2_session_server_new2], [], [liberrors="yes"]) if test "x$liberrors" != "x"; then AC_MSG_WARN([nghttp2 library is unusable]) fi dnl # nghttp2 >= 1.3.0: access to stream weights AC_CHECK_FUNCS([nghttp2_stream_get_weight], [], [liberrors="yes"]) if test "x$liberrors" != "x"; then AC_MSG_WARN([nghttp2 version >= 1.3.0 is required]) fi dnl # nghttp2 >= 1.5.0: changing stream priorities AC_CHECK_FUNCS([nghttp2_session_change_stream_priority], [APR_ADDTO(MOD_CPPFLAGS, ["-DH2_NG2_CHANGE_PRIO"])], []) dnl # nghttp2 >= 1.14.0: invalid header callback AC_CHECK_FUNCS([nghttp2_session_callbacks_set_on_invalid_header_callback], [APR_ADDTO(MOD_CPPFLAGS, ["-DH2_NG2_INVALID_HEADER_CB"])], []) dnl # nghttp2 >= 1.15.0: get/set stream window sizes AC_CHECK_FUNCS([nghttp2_session_get_stream_local_window_size], [APR_ADDTO(MOD_CPPFLAGS, ["-DH2_NG2_LOCAL_WIN_SIZE"])], []) else AC_MSG_WARN([nghttp2 version is too old]) fi dnl restore CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" ]) if test "x$ac_cv_nghttp2" = "xyes"; then AC_DEFINE(HAVE_NGHTTP2, 1, [Define if nghttp2 is available]) fi ]) dnl # hook module into the Autoconf mechanism (--enable-http2) APACHE_MODULE(http2, [HTTP/2 protocol handling in addition to HTTP protocol handling. Implemented by mod_http2. This module requires a libnghttp2 installation. See --with-nghttp2 on how to manage non-standard locations. This module is usually linked shared and requires loading. ], $http2_objs, , most, [ APACHE_CHECK_OPENSSL if test "$ac_cv_openssl" = "yes" ; then APR_ADDTO(MOD_CPPFLAGS, ["-DH2_OPENSSL"]) fi APACHE_CHECK_NGHTTP2 if test "$ac_cv_nghttp2" = "yes" ; then if test "x$enable_http2" = "xshared"; then # The only symbol which needs to be exported is the module # structure, so ask libtool to hide everything else: APR_ADDTO(MOD_HTTP2_LDADD, [-export-symbols-regex http2_module]) fi else enable_http2=no fi ]) # Ensure that other modules can pick up mod_http2.h # icing: hold back for now until it is more stable #APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) dnl # list of module object files proxy_http2_objs="dnl mod_proxy_http2.lo dnl h2_proxy_session.lo dnl h2_proxy_util.lo dnl " dnl # hook module into the Autoconf mechanism (--enable-proxy_http2) APACHE_MODULE(proxy_http2, [HTTP/2 proxy module. This module requires a libnghttp2 installation. See --with-nghttp2 on how to manage non-standard locations. Also requires --enable-proxy.], $proxy_http2_objs, , no, [ APACHE_CHECK_NGHTTP2 if test "$ac_cv_nghttp2" = "yes" ; then if test "x$enable_http2" = "xshared"; then # The only symbol which needs to be exported is the module # structure, so ask libtool to hide everything else: APR_ADDTO(MOD_PROXY_HTTP2_LDADD, [-export-symbols-regex proxy_http2_module]) fi else enable_proxy_http2=no fi ], proxy) dnl # end of module specific part APACHE_MODPATH_FINISH httpd-2.4.41/modules/http2/h2_proxy_util.h0000644000000000000500000002270313500707377016742 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef __mod_h2__h2_proxy_util__ #define __mod_h2__h2_proxy_util__ /******************************************************************************* * some debugging/format helpers ******************************************************************************/ struct h2_proxy_request; struct nghttp2_frame; int h2_proxy_util_frame_print(const nghttp2_frame *frame, char *buffer, size_t maxlen); /******************************************************************************* * ihash - hash for structs with int identifier ******************************************************************************/ typedef struct h2_proxy_ihash_t h2_proxy_ihash_t; typedef int h2_proxy_ihash_iter_t(void *ctx, void *val); /** * Create a hash for structures that have an identifying int member. * @param pool the pool to use * @param offset_of_int the offsetof() the int member in the struct */ h2_proxy_ihash_t *h2_proxy_ihash_create(apr_pool_t *pool, size_t offset_of_int); size_t h2_proxy_ihash_count(h2_proxy_ihash_t *ih); int h2_proxy_ihash_empty(h2_proxy_ihash_t *ih); void *h2_proxy_ihash_get(h2_proxy_ihash_t *ih, int id); /** * Iterate over the hash members (without defined order) and invoke * fn for each member until 0 is returned. * @param ih the hash to iterate over * @param fn the function to invoke on each member * @param ctx user supplied data passed into each iteration call * @return 0 if one iteration returned 0, otherwise != 0 */ int h2_proxy_ihash_iter(h2_proxy_ihash_t *ih, h2_proxy_ihash_iter_t *fn, void *ctx); void h2_proxy_ihash_add(h2_proxy_ihash_t *ih, void *val); void h2_proxy_ihash_remove(h2_proxy_ihash_t *ih, int id); void h2_proxy_ihash_remove_val(h2_proxy_ihash_t *ih, void *val); void h2_proxy_ihash_clear(h2_proxy_ihash_t *ih); size_t h2_proxy_ihash_shift(h2_proxy_ihash_t *ih, void **buffer, size_t max); size_t h2_proxy_ihash_ishift(h2_proxy_ihash_t *ih, int *buffer, size_t max); /******************************************************************************* * iqueue - sorted list of int with user defined ordering ******************************************************************************/ typedef struct h2_proxy_iqueue { int *elts; int head; int nelts; int nalloc; apr_pool_t *pool; } h2_proxy_iqueue; /** * Comparator for two int to determine their order. * * @param i1 first int to compare * @param i2 second int to compare * @param ctx provided user data * @return value is the same as for strcmp() and has the effect: * == 0: s1 and s2 are treated equal in ordering * < 0: s1 should be sorted before s2 * > 0: s2 should be sorted before s1 */ typedef int h2_proxy_iq_cmp(int i1, int i2, void *ctx); /** * Allocate a new queue from the pool and initialize. * @param id the identifier of the queue * @param pool the memory pool */ h2_proxy_iqueue *h2_proxy_iq_create(apr_pool_t *pool, int capacity); /** * Return != 0 iff there are no tasks in the queue. * @param q the queue to check */ int h2_proxy_iq_empty(h2_proxy_iqueue *q); /** * Return the number of int in the queue. * @param q the queue to get size on */ int h2_proxy_iq_count(h2_proxy_iqueue *q); /** * Add a stream id to the queue. * * @param q the queue to append the task to * @param sid the stream id to add * @param cmp the comparator for sorting * @param ctx user data for comparator */ void h2_proxy_iq_add(h2_proxy_iqueue *q, int sid, h2_proxy_iq_cmp *cmp, void *ctx); /** * Remove the stream id from the queue. Return != 0 iff task * was found in queue. * @param q the task queue * @param sid the stream id to remove * @return != 0 iff task was found in queue */ int h2_proxy_iq_remove(h2_proxy_iqueue *q, int sid); /** * Remove all entries in the queue. */ void h2_proxy_iq_clear(h2_proxy_iqueue *q); /** * Sort the stream idqueue again. Call if the task ordering * has changed. * * @param q the queue to sort * @param cmp the comparator for sorting * @param ctx user data for the comparator */ void h2_proxy_iq_sort(h2_proxy_iqueue *q, h2_proxy_iq_cmp *cmp, void *ctx); /** * Get the first stream id from the queue or NULL if the queue is empty. * The task will be removed. * * @param q the queue to get the first task from * @return the first stream id of the queue, 0 if empty */ int h2_proxy_iq_shift(h2_proxy_iqueue *q); /******************************************************************************* * common helpers ******************************************************************************/ /* h2_proxy_log2(n) iff n is a power of 2 */ unsigned char h2_proxy_log2(int n); /******************************************************************************* * HTTP/2 header helpers ******************************************************************************/ void h2_proxy_util_camel_case_header(char *s, size_t len); int h2_proxy_res_ignore_header(const char *name, size_t len); /******************************************************************************* * nghttp2 helpers ******************************************************************************/ typedef struct h2_proxy_ngheader { nghttp2_nv *nv; apr_size_t nvlen; } h2_proxy_ngheader; h2_proxy_ngheader *h2_proxy_util_nghd_make_req(apr_pool_t *p, const struct h2_proxy_request *req); h2_proxy_ngheader *h2_proxy_util_nghd_make(apr_pool_t *p, apr_table_t *headers); /******************************************************************************* * h2_proxy_request helpers ******************************************************************************/ typedef struct h2_proxy_request h2_proxy_request; struct h2_proxy_request { const char *method; /* pseudo header values, see ch. 8.1.2.3 */ const char *scheme; const char *authority; const char *path; apr_table_t *headers; apr_time_t request_time; unsigned int chunked : 1; /* iff requst body needs to be forwarded as chunked */ unsigned int serialize : 1; /* iff this request is written in HTTP/1.1 serialization */ }; h2_proxy_request *h2_proxy_req_create(int id, apr_pool_t *pool, int serialize); apr_status_t h2_proxy_req_make(h2_proxy_request *req, apr_pool_t *pool, const char *method, const char *scheme, const char *authority, const char *path, apr_table_t *headers); /******************************************************************************* * reverse mapping for link headers ******************************************************************************/ const char *h2_proxy_link_reverse_map(request_rec *r, proxy_dir_conf *conf, const char *real_server_uri, const char *proxy_server_uri, const char *s); /******************************************************************************* * FIFO queue ******************************************************************************/ /** * A thread-safe FIFO queue with some extra bells and whistles, if you * do not need anything special, better use 'apr_queue'. */ typedef struct h2_proxy_fifo h2_proxy_fifo; /** * Create a FIFO queue that can hold up to capacity elements. Elements can * appear several times. */ apr_status_t h2_proxy_fifo_create(h2_proxy_fifo **pfifo, apr_pool_t *pool, int capacity); /** * Create a FIFO set that can hold up to capacity elements. Elements only * appear once. Pushing an element already present does not change the * queue and is successful. */ apr_status_t h2_proxy_fifo_set_create(h2_proxy_fifo **pfifo, apr_pool_t *pool, int capacity); apr_status_t h2_proxy_fifo_term(h2_proxy_fifo *fifo); apr_status_t h2_proxy_fifo_interrupt(h2_proxy_fifo *fifo); int h2_proxy_fifo_capacity(h2_proxy_fifo *fifo); int h2_proxy_fifo_count(h2_proxy_fifo *fifo); /** * Push en element into the queue. Blocks if there is no capacity left. * * @param fifo the FIFO queue * @param elem the element to push * @return APR_SUCCESS on push, APR_EAGAIN on try_push on a full queue, * APR_EEXIST when in set mode and elem already there. */ apr_status_t h2_proxy_fifo_push(h2_proxy_fifo *fifo, void *elem); apr_status_t h2_proxy_fifo_try_push(h2_proxy_fifo *fifo, void *elem); apr_status_t h2_proxy_fifo_pull(h2_proxy_fifo *fifo, void **pelem); apr_status_t h2_proxy_fifo_try_pull(h2_proxy_fifo *fifo, void **pelem); /** * Remove the elem from the queue, will remove multiple appearances. * @param elem the element to remove * @return APR_SUCCESS iff > 0 elems were removed, APR_EAGAIN otherwise. */ apr_status_t h2_proxy_fifo_remove(h2_proxy_fifo *fifo, void *elem); #endif /* defined(__mod_h2__h2_proxy_util__) */ httpd-2.4.41/modules/http2/mod_proxy_http2.c0000644000000000000500000003674413473070160017271 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include "mod_http2.h" #include "mod_proxy_http2.h" #include "h2.h" #include "h2_proxy_util.h" #include "h2_version.h" #include "h2_proxy_session.h" #define H2MIN(x,y) ((x) < (y) ? (x) : (y)) static void register_hook(apr_pool_t *p); AP_DECLARE_MODULE(proxy_http2) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ NULL, /* command apr_table_t */ register_hook, /* register hooks */ #if defined(AP_MODULE_FLAG_NONE) AP_MODULE_FLAG_ALWAYS_MERGE #endif }; /* Optional functions from mod_http2 */ static int (*is_h2)(conn_rec *c); typedef struct h2_proxy_ctx { const char *id; conn_rec *master; conn_rec *owner; apr_pool_t *pool; server_rec *server; const char *proxy_func; char server_portstr[32]; proxy_conn_rec *p_conn; proxy_worker *worker; proxy_server_conf *conf; apr_size_t req_buffer_size; int capacity; unsigned is_ssl : 1; request_rec *r; /* the request processed in this ctx */ apr_status_t r_status; /* status of request work */ int r_done; /* request was processed, not necessarily successfully */ int r_may_retry; /* request may be retried */ h2_proxy_session *session; /* current http2 session against backend */ } h2_proxy_ctx; static int h2_proxy_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { void *data = NULL; const char *init_key = "mod_proxy_http2_init_counter"; nghttp2_info *ngh2; apr_status_t status = APR_SUCCESS; (void)plog;(void)ptemp; apr_pool_userdata_get(&data, init_key, s->process->pool); if ( data == NULL ) { apr_pool_userdata_set((const void *)1, init_key, apr_pool_cleanup_null, s->process->pool); return APR_SUCCESS; } ngh2 = nghttp2_version(0); ap_log_error( APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(03349) "mod_proxy_http2 (v%s, nghttp2 %s), initializing...", MOD_HTTP2_VERSION, ngh2? ngh2->version_str : "unknown"); is_h2 = APR_RETRIEVE_OPTIONAL_FN(http2_is_h2); return status; } /** * canonicalize the url into the request, if it is meant for us. * slightly modified copy from mod_http */ static int proxy_http2_canon(request_rec *r, char *url) { char *host, *path, sport[7]; char *search = NULL; const char *err; const char *scheme; const char *http_scheme; apr_port_t port, def_port; /* ap_port_of_scheme() */ if (ap_cstr_casecmpn(url, "h2c:", 4) == 0) { url += 4; scheme = "h2c"; http_scheme = "http"; } else if (ap_cstr_casecmpn(url, "h2:", 3) == 0) { url += 3; scheme = "h2"; http_scheme = "https"; } else { return DECLINED; } port = def_port = ap_proxy_port_of_scheme(http_scheme); ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "HTTP2: canonicalising URL %s", url); /* do syntatic check. * We break the URL into host, port, path, search */ err = ap_proxy_canon_netloc(r->pool, &url, NULL, NULL, &host, &port); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(03350) "error parsing URL %s: %s", url, err); return HTTP_BAD_REQUEST; } /* * now parse path/search args, according to rfc1738: * process the path. * * In a reverse proxy, our URL has been processed, so canonicalise * unless proxy-nocanon is set to say it's raw * In a forward proxy, we have and MUST NOT MANGLE the original. */ switch (r->proxyreq) { default: /* wtf are we doing here? */ case PROXYREQ_REVERSE: if (apr_table_get(r->notes, "proxy-nocanon")) { path = url; /* this is the raw path */ } else { path = ap_proxy_canonenc(r->pool, url, (int)strlen(url), enc_path, 0, r->proxyreq); search = r->args; } break; case PROXYREQ_PROXY: path = url; break; } if (path == NULL) { return HTTP_BAD_REQUEST; } if (port != def_port) { apr_snprintf(sport, sizeof(sport), ":%d", port); } else { sport[0] = '\0'; } if (ap_strchr_c(host, ':')) { /* if literal IPv6 address */ host = apr_pstrcat(r->pool, "[", host, "]", NULL); } r->filename = apr_pstrcat(r->pool, "proxy:", scheme, "://", host, sport, "/", path, (search) ? "?" : "", (search) ? search : "", NULL); return OK; } static apr_status_t add_request(h2_proxy_session *session, request_rec *r) { h2_proxy_ctx *ctx = session->user_data; const char *url; apr_status_t status; url = apr_table_get(r->notes, H2_PROXY_REQ_URL_NOTE); apr_table_setn(r->notes, "proxy-source-port", apr_psprintf(r->pool, "%hu", ctx->p_conn->connection->local_addr->port)); status = h2_proxy_session_submit(session, url, r, 1); if (status != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_ERR, status, r->connection, APLOGNO(03351) "pass request body failed to %pI (%s) from %s (%s)", ctx->p_conn->addr, ctx->p_conn->hostname ? ctx->p_conn->hostname: "", session->c->client_ip, session->c->remote_host ? session->c->remote_host: ""); } return status; } static void request_done(h2_proxy_ctx *ctx, request_rec *r, apr_status_t status, int touched) { if (r == ctx->r) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, status, r->connection, "h2_proxy_session(%s): request done, touched=%d", ctx->id, touched); ctx->r_done = 1; if (touched) ctx->r_may_retry = 0; ctx->r_status = ((status == APR_SUCCESS)? APR_SUCCESS : HTTP_SERVICE_UNAVAILABLE); } } static void session_req_done(h2_proxy_session *session, request_rec *r, apr_status_t status, int touched) { request_done(session->user_data, r, status, touched); } static apr_status_t ctx_run(h2_proxy_ctx *ctx) { apr_status_t status = OK; int h2_front; /* Step Four: Send the Request in a new HTTP/2 stream and * loop until we got the response or encounter errors. */ h2_front = is_h2? is_h2(ctx->owner) : 0; ctx->session = h2_proxy_session_setup(ctx->id, ctx->p_conn, ctx->conf, h2_front, 30, h2_proxy_log2((int)ctx->req_buffer_size), session_req_done); if (!ctx->session) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, ctx->owner, APLOGNO(03372) "session unavailable"); return HTTP_SERVICE_UNAVAILABLE; } ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, ctx->owner, APLOGNO(03373) "eng(%s): run session %s", ctx->id, ctx->session->id); ctx->session->user_data = ctx; ctx->r_done = 0; add_request(ctx->session, ctx->r); while (!ctx->master->aborted && !ctx->r_done) { status = h2_proxy_session_process(ctx->session); if (status != APR_SUCCESS) { /* Encountered an error during session processing */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, ctx->owner, APLOGNO(03375) "eng(%s): end of session %s", ctx->id, ctx->session->id); /* Any open stream of that session needs to * a) be reopened on the new session iff safe to do so * b) reported as done (failed) otherwise */ h2_proxy_session_cleanup(ctx->session, session_req_done); goto out; } } out: if (ctx->master->aborted) { /* master connection gone */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, ctx->owner, APLOGNO(03374) "eng(%s): master connection gone", ctx->id); /* cancel all ongoing requests */ h2_proxy_session_cancel_all(ctx->session); h2_proxy_session_process(ctx->session); if (!ctx->master->aborted) { status = ctx->r_status = APR_SUCCESS; } } ctx->session->user_data = NULL; ctx->session = NULL; return status; } static int proxy_http2_handler(request_rec *r, proxy_worker *worker, proxy_server_conf *conf, char *url, const char *proxyname, apr_port_t proxyport) { const char *proxy_func, *task_id; char *locurl = url, *u; apr_size_t slen; int is_ssl = 0; apr_status_t status; h2_proxy_ctx *ctx; apr_uri_t uri; int reconnects = 0; /* find the scheme */ if ((url[0] != 'h' && url[0] != 'H') || url[1] != '2') { return DECLINED; } u = strchr(url, ':'); if (u == NULL || u[1] != '/' || u[2] != '/' || u[3] == '\0') { return DECLINED; } slen = (u - url); switch(slen) { case 2: proxy_func = "H2"; is_ssl = 1; break; case 3: if (url[2] != 'c' && url[2] != 'C') { return DECLINED; } proxy_func = "H2C"; break; default: return DECLINED; } task_id = apr_table_get(r->connection->notes, H2_TASK_ID_NOTE); ctx = apr_pcalloc(r->pool, sizeof(*ctx)); ctx->master = r->connection->master? r->connection->master : r->connection; ctx->id = task_id? task_id : apr_psprintf(r->pool, "%ld", (long)ctx->master->id); ctx->owner = r->connection; ctx->pool = r->pool; ctx->server = r->server; ctx->proxy_func = proxy_func; ctx->is_ssl = is_ssl; ctx->worker = worker; ctx->conf = conf; ctx->req_buffer_size = (32*1024); ctx->r = r; ctx->r_status = status = HTTP_SERVICE_UNAVAILABLE; ctx->r_done = 0; ctx->r_may_retry = 1; ap_set_module_config(ctx->owner->conn_config, &proxy_http2_module, ctx); /* scheme says, this is for us. */ apr_table_setn(ctx->r->notes, H2_PROXY_REQ_URL_NOTE, url); ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, ctx->r, "H2: serving URL %s", url); run_connect: if (ctx->master->aborted) goto cleanup; /* Get a proxy_conn_rec from the worker, might be a new one, might * be one still open from another request, or it might fail if the * worker is stopped or in error. */ if ((status = ap_proxy_acquire_connection(ctx->proxy_func, &ctx->p_conn, ctx->worker, ctx->server)) != OK) { goto cleanup; } ctx->p_conn->is_ssl = ctx->is_ssl; /* Step One: Determine the URL to connect to (might be a proxy), * initialize the backend accordingly and determine the server * port string we can expect in responses. */ if ((status = ap_proxy_determine_connection(ctx->pool, ctx->r, conf, worker, ctx->p_conn, &uri, &locurl, proxyname, proxyport, ctx->server_portstr, sizeof(ctx->server_portstr))) != OK) { goto cleanup; } /* Step Two: Make the Connection (or check that an already existing * socket is still usable). On success, we have a socket connected to * backend->hostname. */ if (ap_proxy_connect_backend(ctx->proxy_func, ctx->p_conn, ctx->worker, ctx->server)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, ctx->owner, APLOGNO(03352) "H2: failed to make connection to backend: %s", ctx->p_conn->hostname); goto cleanup; } /* Step Three: Create conn_rec for the socket we have open now. */ status = ap_proxy_connection_create_ex(ctx->proxy_func, ctx->p_conn, ctx->r); if (status != OK) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, ctx->owner, APLOGNO(03353) "setup new connection: is_ssl=%d %s %s %s", ctx->p_conn->is_ssl, ctx->p_conn->ssl_hostname, locurl, ctx->p_conn->hostname); ctx->r_status = status; goto cleanup; } if (!ctx->p_conn->data && ctx->is_ssl) { /* New SSL connection: set a note on the connection about what * protocol we want. */ apr_table_setn(ctx->p_conn->connection->notes, "proxy-request-alpn-protos", "h2"); } if (ctx->master->aborted) goto cleanup; status = ctx_run(ctx); if (ctx->r_status != APR_SUCCESS && ctx->r_may_retry && !ctx->master->aborted) { /* Not successfully processed, but may retry, tear down old conn and start over */ if (ctx->p_conn) { ctx->p_conn->close = 1; #if AP_MODULE_MAGIC_AT_LEAST(20140207, 2) proxy_run_detach_backend(r, ctx->p_conn); #endif ap_proxy_release_connection(ctx->proxy_func, ctx->p_conn, ctx->server); ctx->p_conn = NULL; } ++reconnects; if (reconnects < 5) { goto run_connect; } ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, ctx->owner, APLOGNO(10023) "giving up after %d reconnects, request-done=%d", reconnects, ctx->r_done); } cleanup: if (ctx->p_conn) { if (status != APR_SUCCESS) { /* close socket when errors happened or session shut down (EOF) */ ctx->p_conn->close = 1; } #if AP_MODULE_MAGIC_AT_LEAST(20140207, 2) proxy_run_detach_backend(ctx->r, ctx->p_conn); #endif ap_proxy_release_connection(ctx->proxy_func, ctx->p_conn, ctx->server); ctx->p_conn = NULL; } ap_set_module_config(ctx->owner->conn_config, &proxy_http2_module, NULL); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, ctx->owner, APLOGNO(03377) "leaving handler"); return ctx->r_status; } static void register_hook(apr_pool_t *p) { ap_hook_post_config(h2_proxy_post_config, NULL, NULL, APR_HOOK_MIDDLE); proxy_hook_scheme_handler(proxy_http2_handler, NULL, NULL, APR_HOOK_FIRST); proxy_hook_canon_handler(proxy_http2_canon, NULL, NULL, APR_HOOK_FIRST); } httpd-2.4.41/modules/http2/Makefile.in0000644000000000000500000000151512573345517016030 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # standard stuff # include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/cache/0002755000000000000500000000000013523273342013755 5ustar rootsrchttpd-2.4.41/modules/cache/mod_cache.dsp0000644000000000000500000001125011022330134016345 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_cache" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_cache - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_cache.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_cache.mak" CFG="mod_cache - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_cache - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_cache - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_cache - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "MOD_CACHE_EXPORTS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "CACHE_DECLARE_EXPORT" /D "MOD_CACHE_EXPORTS" /Fd"Release\mod_cache_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_cache.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_cache.so" /d LONG_NAME="cache_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_cache.so" /base:@..\..\os\win32\BaseAddr.ref,mod_cache.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_cache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_cache - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "CACHE_DECLARE_EXPORT" /Fd"Debug\mod_cache_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_cache.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_cache.so" /d LONG_NAME="cache_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_cache.so" /base:@..\..\os\win32\BaseAddr.ref,mod_cache.so # Begin Special Build Tool TargetPath=.\Debug\mod_cache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_cache - Win32 Release" # Name "mod_cache - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\cache_storage.c # End Source File # Begin Source File SOURCE=.\cache_util.c # End Source File # Begin Source File SOURCE=.\mod_cache.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter "h;hpp;hxx;hm;inl" # Begin Source File SOURCE=.\mod_cache.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/cache/mod_socache_dc.dep0000644000000000000500000000372212674411515017365 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_socache_dc.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_socache_dc.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/cache/mod_socache_dbm.dsp0000644000000000000500000001071012520576322017550 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_socache_dbm" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_socache_dbm - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_socache_dbm.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_socache_dbm.mak" CFG="mod_socache_dbm - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_socache_dbm - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_socache_dbm - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_socache_dbm - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "_MBCS" /D "_USRDLL" /D "mod_socache_dbm_EXPORTS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_socache_dbm_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_socache_dbm.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_socache_dbm.so" /d LONG_NAME="socache_dbm_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_socache_dbm.so" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_dbm.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_socache_dbm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_socache_dbm - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_socache_dbm_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_socache_dbm.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_socache_dbm.so" /d LONG_NAME="socache_dbm_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_socache_dbm.so" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_dbm.so # Begin Special Build Tool TargetPath=.\Debug\mod_socache_dbm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_socache_dbm - Win32 Release" # Name "mod_socache_dbm - Win32 Debug" # Begin Source File SOURCE=.\mod_socache_dbm.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/cache/mod_file_cache.dep0000644000000000000500000000376512674411515017363 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_file_cache.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_file_cache.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/cache/mod_cache.mak0000644000000000000500000002414712701473373016362 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_cache.dsp !IF "$(CFG)" == "" CFG=mod_cache - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_cache - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_cache - Win32 Release" && "$(CFG)" != "mod_cache - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_cache.mak" CFG="mod_cache - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_cache - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_cache - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_cache - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_cache.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_cache.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\cache_storage.obj" -@erase "$(INTDIR)\cache_util.obj" -@erase "$(INTDIR)\mod_cache.obj" -@erase "$(INTDIR)\mod_cache.res" -@erase "$(INTDIR)\mod_cache_src.idb" -@erase "$(INTDIR)\mod_cache_src.pdb" -@erase "$(OUTDIR)\mod_cache.exp" -@erase "$(OUTDIR)\mod_cache.lib" -@erase "$(OUTDIR)\mod_cache.pdb" -@erase "$(OUTDIR)\mod_cache.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "CACHE_DECLARE_EXPORT" /D "MOD_CACHE_EXPORTS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_cache_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_cache.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_cache.so" /d LONG_NAME="cache_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_cache.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_cache.pdb" /debug /out:"$(OUTDIR)\mod_cache.so" /implib:"$(OUTDIR)\mod_cache.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_cache.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\cache_storage.obj" \ "$(INTDIR)\cache_util.obj" \ "$(INTDIR)\mod_cache.obj" \ "$(INTDIR)\mod_cache.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_cache.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_cache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_cache.so" if exist .\Release\mod_cache.so.manifest mt.exe -manifest .\Release\mod_cache.so.manifest -outputresource:.\Release\mod_cache.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_cache - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_cache.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_cache.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\cache_storage.obj" -@erase "$(INTDIR)\cache_util.obj" -@erase "$(INTDIR)\mod_cache.obj" -@erase "$(INTDIR)\mod_cache.res" -@erase "$(INTDIR)\mod_cache_src.idb" -@erase "$(INTDIR)\mod_cache_src.pdb" -@erase "$(OUTDIR)\mod_cache.exp" -@erase "$(OUTDIR)\mod_cache.lib" -@erase "$(OUTDIR)\mod_cache.pdb" -@erase "$(OUTDIR)\mod_cache.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "CACHE_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_cache_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_cache.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_cache.so" /d LONG_NAME="cache_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_cache.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_cache.pdb" /debug /out:"$(OUTDIR)\mod_cache.so" /implib:"$(OUTDIR)\mod_cache.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_cache.so LINK32_OBJS= \ "$(INTDIR)\cache_storage.obj" \ "$(INTDIR)\cache_util.obj" \ "$(INTDIR)\mod_cache.obj" \ "$(INTDIR)\mod_cache.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_cache.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_cache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_cache.so" if exist .\Debug\mod_cache.so.manifest mt.exe -manifest .\Debug\mod_cache.so.manifest -outputresource:.\Debug\mod_cache.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_cache.dep") !INCLUDE "mod_cache.dep" !ELSE !MESSAGE Warning: cannot find "mod_cache.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_cache - Win32 Release" || "$(CFG)" == "mod_cache - Win32 Debug" SOURCE=.\cache_storage.c "$(INTDIR)\cache_storage.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\cache_util.c "$(INTDIR)\cache_util.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\mod_cache.c "$(INTDIR)\mod_cache.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_cache - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\cache" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_cache - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\cache" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_cache - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\cache" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_cache - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\cache" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_cache - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\cache" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\cache" !ELSEIF "$(CFG)" == "mod_cache - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\cache" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\cache" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_cache - Win32 Release" "$(INTDIR)\mod_cache.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_cache.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_cache.so" /d LONG_NAME="cache_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_cache - Win32 Debug" "$(INTDIR)\mod_cache.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_cache.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_cache.so" /d LONG_NAME="cache_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/cache/mod_cache_disk.dsp0000644000000000000500000001061711471761032017402 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_cache_disk" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_cache_disk - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_cache_disk.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_cache_disk.mak" CFG="mod_cache_disk - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_cache_disk - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_cache_disk - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_cache_disk - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /Fd"Release\mod_cache_disk_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_cache_disk.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_cache_disk.so" /d LONG_NAME="cache_disk_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_cache_disk.so" /base:@..\..\os\win32\BaseAddr.ref,mod_cache_disk.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_cache_disk.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_cache_disk - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /Fd"Debug\mod_cache_disk_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_cache_disk.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_cache_disk.so" /d LONG_NAME="cache_disk_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_cache_disk.so" /base:@..\..\os\win32\BaseAddr.ref,mod_cache_disk.so # Begin Special Build Tool TargetPath=.\Debug\mod_cache_disk.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_cache_disk - Win32 Release" # Name "mod_cache_disk - Win32 Debug" # Begin Source File SOURCE=.\mod_cache.h # End Source File # Begin Source File SOURCE=.\mod_cache_disk.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/cache/cache_storage.h0000644000000000000500000000442112154266057016720 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file cache_storage.h * @brief Cache Storage Functions * * @defgroup Cache_storage Cache Storage Functions * @ingroup MOD_CACHE * @{ */ #ifndef CACHE_STORAGE_H #define CACHE_STORAGE_H #ifdef __cplusplus extern "C" { #endif #include "mod_cache.h" #include "cache_util.h" /** * cache_storage.c */ int cache_remove_url(cache_request_rec *cache, request_rec *r); int cache_create_entity(cache_request_rec *cache, request_rec *r, apr_off_t size, apr_bucket_brigade *in); int cache_select(cache_request_rec *cache, request_rec *r); /** * invalidate a specific URL entity in all caches * * All cached entities for this URL are removed, usually in * response to a POST/PUT or DELETE. * * This function returns OK if at least one entity was found and * removed, and DECLINED if no cached entities were removed. * @param cache cache_request_rec * @param r request_rec */ int cache_invalidate(cache_request_rec *cache, request_rec *r); apr_status_t cache_generate_key_default(request_rec *r, apr_pool_t* p, const char **key); /** * Merge in cached headers into the response * @param h cache_handle_t * @param r request_rec * @param top headers to be applied * @param bottom headers to be overwritten * @param revalidation true if revalidation is taking place */ void cache_accept_headers(cache_handle_t *h, request_rec *r, apr_table_t *top, apr_table_t *bottom, int revalidation); #ifdef __cplusplus } #endif #endif /* !CACHE_STORAGE_H */ /** @} */ httpd-2.4.41/modules/cache/mod_cache_disk.dep0000644000000000000500000000402512674411515017364 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_cache_disk.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_cache_disk.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\cache_common.h"\ ".\cache_disk_common.h"\ ".\mod_cache.h"\ ".\mod_cache_disk.h"\ httpd-2.4.41/modules/cache/mod_file_cache.dsp0000644000000000000500000001076110551346420017365 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_file_cache" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_file_cache - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_file_cache.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_file_cache.mak" CFG="mod_file_cache - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_file_cache - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_file_cache - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_file_cache - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_file_cache_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_file_cache.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_file_cache.so" /d LONG_NAME="file_cache_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 /nologo /subsystem:windows /dll /out:".\Release\mod_file_cache.so" /base:@..\..\os\win32\BaseAddr.ref,mod_file_cache.so # ADD LINK32 /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_file_cache.so" /base:@..\..\os\win32\BaseAddr.ref,mod_file_cache.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_file_cache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_file_cache - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_file_cache_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_file_cache.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_file_cache.so" /d LONG_NAME="file_cache_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_file_cache.so" /base:@..\..\os\win32\BaseAddr.ref,mod_file_cache.so # ADD LINK32 /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_file_cache.so" /base:@..\..\os\win32\BaseAddr.ref,mod_file_cache.so # Begin Special Build Tool TargetPath=.\Debug\mod_file_cache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_file_cache - Win32 Release" # Name "mod_file_cache - Win32 Debug" # Begin Source File SOURCE=.\mod_file_cache.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/cache/mod_cache_disk.h0000644000000000000500000000637411662033112017041 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef MOD_CACHE_DISK_H #define MOD_CACHE_DISK_H #include "apr_file_io.h" #include "cache_disk_common.h" /* * include for mod_cache_disk: Disk Based HTTP 1.1 Cache. */ typedef struct { apr_pool_t *pool; const char *file; apr_file_t *fd; char *tempfile; apr_file_t *tempfd; } disk_cache_file_t; /* * disk_cache_object_t * Pointed to by cache_object_t::vobj */ typedef struct disk_cache_object { const char *root; /* the location of the cache directory */ apr_size_t root_len; const char *prefix; disk_cache_file_t data; /* data file structure */ disk_cache_file_t hdrs; /* headers file structure */ disk_cache_file_t vary; /* vary file structure */ const char *hashfile; /* Computed hash key for this URI */ const char *name; /* Requested URI without vary bits - suitable for mortals. */ const char *key; /* On-disk prefix; URI with Vary bits (if present) */ apr_off_t file_size; /* File size of the cached data file */ disk_cache_info_t disk_info; /* Header information. */ apr_table_t *headers_in; /* Input headers to save */ apr_table_t *headers_out; /* Output headers to save */ apr_off_t offset; /* Max size to set aside */ apr_time_t timeout; /* Max time to set aside */ unsigned int done:1; /* Is the attempt to cache complete? */ } disk_cache_object_t; /* * mod_cache_disk configuration */ /* TODO: Make defaults OS specific */ #define CACHEFILE_LEN 20 /* must be less than HASH_LEN/2 */ #define DEFAULT_DIRLEVELS 2 #define DEFAULT_DIRLENGTH 2 #define DEFAULT_MIN_FILE_SIZE 1 #define DEFAULT_MAX_FILE_SIZE 1000000 #define DEFAULT_READSIZE 0 #define DEFAULT_READTIME 0 typedef struct { const char* cache_root; apr_size_t cache_root_len; int dirlevels; /* Number of levels of subdirectories */ int dirlength; /* Length of subdirectory names */ } disk_cache_conf; typedef struct { apr_off_t minfs; /* minimum file size for cached files */ apr_off_t maxfs; /* maximum file size for cached files */ apr_off_t readsize; /* maximum data to attempt to cache in one go */ apr_time_t readtime; /* maximum time taken to cache in one go */ unsigned int minfs_set:1; unsigned int maxfs_set:1; unsigned int readsize_set:1; unsigned int readtime_set:1; } disk_cache_dir_conf; #endif /*MOD_CACHE_DISK_H*/ httpd-2.4.41/modules/cache/mod_socache_shmcb.c0000644000000000000500000012564713512031735017552 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_log.h" #include "http_request.h" #include "http_protocol.h" #include "http_config.h" #include "mod_status.h" #include "apr.h" #include "apr_strings.h" #include "apr_time.h" #include "apr_shm.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "apr_general.h" #if APR_HAVE_LIMITS_H #include #endif #include "ap_socache.h" /* XXX Unfortunately, there are still many unsigned ints in use here, so we * XXX cannot allow more than UINT_MAX. Since some of the ints are exposed in * XXX public interfaces, a simple search and replace is not enough. * XXX It should be possible to extend that so that the total cache size can * XXX be APR_SIZE_MAX and only the object size needs to be smaller than * XXX UINT_MAX. */ #define SHMCB_MAX_SIZE (UINT_MAXsubcache_num SHMCBSubcache * structures. The hash table is indexed by SHMCB_MASK(id). Each * SHMCBSubcache structure has a fixed size (header->subcache_size), * which is determined at creation time, and looks like the following: * * [ SHMCBSubcache | Indexes | Data ] * * Each subcache is prefixed by the SHMCBSubcache structure. * * The subcache's "Data" segment is a single cyclic data buffer, of * total size header->subcache_data_size; data inside is referenced * using byte offsets. The offset marking the beginning of the cyclic * buffer is subcache->data_pos; the buffer's length is * subcache->data_used. * * "Indexes" is an array of header->index_num SHMCBIndex structures, * which is used as a cyclic queue; subcache->idx_pos gives the array * index of the first in use, subcache->idx_used gives the number in * use. Both ->idx_* values have a range of [0, header->index_num) * * Each in-use SHMCBIndex structure represents a single cached object. * The ID and data segment are stored consecutively in the subcache's * cyclic data buffer. The "Data" segment can thus be seen to * look like this, for example * * offset: [ 0 1 2 3 4 5 6 ... * contents:[ ID1 Data1 ID2 Data2 ID3 ... * * where the corresponding indices would look like: * * idx1 = { data_pos = 0, data_used = 3, id_len = 1, ...} * idx2 = { data_pos = 3, data_used = 3, id_len = 1, ...} * ... */ /* This macro takes a pointer to the header and a zero-based index and returns * a pointer to the corresponding subcache. */ #define SHMCB_SUBCACHE(pHeader, num) \ (SHMCBSubcache *)(((unsigned char *)(pHeader)) + \ ALIGNED_HEADER_SIZE + \ (num) * ((pHeader)->subcache_size)) /* This macro takes a pointer to the header and an id and returns a * pointer to the corresponding subcache. */ #define SHMCB_MASK(pHeader, id) \ SHMCB_SUBCACHE((pHeader), *(id) & ((pHeader)->subcache_num - 1)) /* This macro takes the same params as the last, generating two outputs for use * in ap_log_error(...). */ #define SHMCB_MASK_DBG(pHeader, id) \ *(id), (*(id) & ((pHeader)->subcache_num - 1)) /* This macro takes a pointer to a subcache and a zero-based index and returns * a pointer to the corresponding SHMCBIndex. */ #define SHMCB_INDEX(pSubcache, num) \ (SHMCBIndex *)(((unsigned char *)pSubcache) + \ ALIGNED_SUBCACHE_SIZE + \ (num) * ALIGNED_INDEX_SIZE) /* This macro takes a pointer to the header and a subcache and returns a * pointer to the corresponding data area. */ #define SHMCB_DATA(pHeader, pSubcache) \ ((unsigned char *)(pSubcache) + (pHeader)->subcache_data_offset) /* * Cyclic functions - assists in "wrap-around"/modulo logic */ /* Addition modulo 'mod' */ #define SHMCB_CYCLIC_INCREMENT(val,inc,mod) \ (((val) + (inc)) % (mod)) /* Subtraction (or "distance between") modulo 'mod' */ #define SHMCB_CYCLIC_SPACE(val1,val2,mod) \ ((val2) >= (val1) ? ((val2) - (val1)) : \ ((val2) + (mod) - (val1))) /* A "normal-to-cyclic" memcpy. */ static void shmcb_cyclic_ntoc_memcpy(unsigned int buf_size, unsigned char *data, unsigned int dest_offset, const unsigned char *src, unsigned int src_len) { if (dest_offset + src_len < buf_size) /* It be copied all in one go */ memcpy(data + dest_offset, src, src_len); else { /* Copy the two splits */ memcpy(data + dest_offset, src, buf_size - dest_offset); memcpy(data, src + buf_size - dest_offset, src_len + dest_offset - buf_size); } } /* A "cyclic-to-normal" memcpy. */ static void shmcb_cyclic_cton_memcpy(unsigned int buf_size, unsigned char *dest, const unsigned char *data, unsigned int src_offset, unsigned int src_len) { if (src_offset + src_len < buf_size) /* It be copied all in one go */ memcpy(dest, data + src_offset, src_len); else { /* Copy the two splits */ memcpy(dest, data + src_offset, buf_size - src_offset); memcpy(dest + buf_size - src_offset, data, src_len + src_offset - buf_size); } } /* A memcmp against a cyclic data buffer. Compares SRC of length * SRC_LEN against the contents of cyclic buffer DATA (which is of * size BUF_SIZE), starting at offset DEST_OFFSET. Got that? Good. */ static int shmcb_cyclic_memcmp(unsigned int buf_size, unsigned char *data, unsigned int dest_offset, const unsigned char *src, unsigned int src_len) { if (dest_offset + src_len < buf_size) /* It be compared all in one go */ return memcmp(data + dest_offset, src, src_len); else { /* Compare the two splits */ int diff; diff = memcmp(data + dest_offset, src, buf_size - dest_offset); if (diff) { return diff; } return memcmp(data, src + buf_size - dest_offset, src_len + dest_offset - buf_size); } } /* Prototypes for low-level subcache operations */ static void shmcb_subcache_expire(server_rec *, SHMCBHeader *, SHMCBSubcache *, apr_time_t); /* Returns zero on success, non-zero on failure. */ static int shmcb_subcache_store(server_rec *s, SHMCBHeader *header, SHMCBSubcache *subcache, unsigned char *data, unsigned int data_len, const unsigned char *id, unsigned int id_len, apr_time_t expiry); /* Returns zero on success, non-zero on failure. */ static int shmcb_subcache_retrieve(server_rec *, SHMCBHeader *, SHMCBSubcache *, const unsigned char *id, unsigned int idlen, unsigned char *data, unsigned int *datalen); /* Returns zero on success, non-zero on failure. */ static int shmcb_subcache_remove(server_rec *, SHMCBHeader *, SHMCBSubcache *, const unsigned char *, unsigned int); /* Returns result of the (iterator)() call, zero is success (continue) */ static apr_status_t shmcb_subcache_iterate(ap_socache_instance_t *instance, server_rec *s, void *userctx, SHMCBHeader *header, SHMCBSubcache *subcache, ap_socache_iterator_t *iterator, unsigned char **buf, apr_size_t *buf_len, apr_pool_t *pool, apr_time_t now); /* * High-Level "handlers" as per ssl_scache.c * subcache internals are deferred to shmcb_subcache_*** functions lower down */ static const char *socache_shmcb_create(ap_socache_instance_t **context, const char *arg, apr_pool_t *tmp, apr_pool_t *p) { ap_socache_instance_t *ctx; char *path, *cp, *cp2; /* Allocate the context. */ *context = ctx = apr_pcalloc(p, sizeof *ctx); ctx->shm_size = 1024*512; /* 512KB */ if (!arg || *arg == '\0') { /* Use defaults. */ return NULL; } ctx->data_file = path = ap_server_root_relative(p, arg); cp = strrchr(path, '('); cp2 = path + strlen(path) - 1; if (cp) { char *endptr; if (*cp2 != ')') { return "Invalid argument: no closing parenthesis or cache size " "missing after pathname with parenthesis"; } *cp++ = '\0'; *cp2 = '\0'; ctx->shm_size = strtol(cp, &endptr, 10); if (endptr != cp2) { return "Invalid argument: cache size not numerical"; } if (ctx->shm_size < 8192) { return "Invalid argument: size has to be >= 8192 bytes"; } if (ctx->shm_size >= SHMCB_MAX_SIZE) { return apr_psprintf(tmp, "Invalid argument: size has " "to be < %" APR_SIZE_T_FMT " bytes on this platform", SHMCB_MAX_SIZE); } } else if (cp2 >= path && *cp2 == ')') { return "Invalid argument: no opening parenthesis"; } return NULL; } static apr_status_t socache_shmcb_init(ap_socache_instance_t *ctx, const char *namespace, const struct ap_socache_hints *hints, server_rec *s, apr_pool_t *p) { void *shm_segment; apr_size_t shm_segsize; apr_status_t rv; SHMCBHeader *header; unsigned int num_subcache, num_idx, loop; apr_size_t avg_obj_size, avg_id_len; /* Create shared memory segment */ if (ctx->data_file == NULL) { const char *path = apr_pstrcat(p, DEFAULT_SHMCB_PREFIX, namespace, DEFAULT_SHMCB_SUFFIX, NULL); ctx->data_file = ap_runtime_dir_relative(p, path); } /* Use anonymous shm by default, fall back on name-based. */ rv = apr_shm_create(&ctx->shm, ctx->shm_size, NULL, p); if (APR_STATUS_IS_ENOTIMPL(rv)) { /* If anon shm isn't supported, fail if no named file was * configured successfully; the ap_server_root_relative call * above will return NULL for invalid paths. */ if (ctx->data_file == NULL) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00818) "Could not use anonymous shm for '%s' cache", namespace); return APR_EINVAL; } /* For a name-based segment, remove it first in case of a * previous unclean shutdown. */ apr_shm_remove(ctx->data_file, p); rv = apr_shm_create(&ctx->shm, ctx->shm_size, ctx->data_file, p); } if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00819) "Could not allocate shared memory segment for shmcb " "socache"); return rv; } shm_segment = apr_shm_baseaddr_get(ctx->shm); shm_segsize = apr_shm_size_get(ctx->shm); if (shm_segsize < (5 * ALIGNED_HEADER_SIZE)) { /* the segment is ridiculously small, bail out */ ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00820) "shared memory segment too small"); return APR_ENOSPC; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00821) "shmcb_init allocated %" APR_SIZE_T_FMT " bytes of shared memory", shm_segsize); /* Discount the header */ shm_segsize -= ALIGNED_HEADER_SIZE; /* Select index size based on average object size hints, if given. */ avg_obj_size = hints && hints->avg_obj_size ? hints->avg_obj_size : 150; avg_id_len = hints && hints->avg_id_len ? hints->avg_id_len : 30; num_idx = (shm_segsize) / (avg_obj_size + avg_id_len); num_subcache = 256; while ((num_idx / num_subcache) < (2 * num_subcache)) num_subcache /= 2; num_idx /= num_subcache; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00822) "for %" APR_SIZE_T_FMT " bytes (%" APR_SIZE_T_FMT " including header), recommending %u subcaches, " "%u indexes each", shm_segsize, shm_segsize + ALIGNED_HEADER_SIZE, num_subcache, num_idx); if (num_idx < 5) { /* we're still too small, bail out */ ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00823) "shared memory segment too small"); return APR_ENOSPC; } /* OK, we're sorted */ ctx->header = header = shm_segment; header->stat_stores = 0; header->stat_replaced = 0; header->stat_expiries = 0; header->stat_scrolled = 0; header->stat_retrieves_hit = 0; header->stat_retrieves_miss = 0; header->stat_removes_hit = 0; header->stat_removes_miss = 0; header->subcache_num = num_subcache; /* Convert the subcache size (in bytes) to a value that is suitable for * structure alignment on the host platform, by rounding down if necessary. */ header->subcache_size = (size_t)(shm_segsize / num_subcache); if (header->subcache_size != APR_ALIGN_DEFAULT(header->subcache_size)) { header->subcache_size = APR_ALIGN_DEFAULT(header->subcache_size) - APR_ALIGN_DEFAULT(1); } header->subcache_data_offset = ALIGNED_SUBCACHE_SIZE + num_idx * ALIGNED_INDEX_SIZE; header->subcache_data_size = header->subcache_size - header->subcache_data_offset; header->index_num = num_idx; /* Output trace info */ ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00824) "shmcb_init_memory choices follow"); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00825) "subcache_num = %u", header->subcache_num); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00826) "subcache_size = %u", header->subcache_size); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00827) "subcache_data_offset = %u", header->subcache_data_offset); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00828) "subcache_data_size = %u", header->subcache_data_size); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00829) "index_num = %u", header->index_num); /* The header is done, make the caches empty */ for (loop = 0; loop < header->subcache_num; loop++) { SHMCBSubcache *subcache = SHMCB_SUBCACHE(header, loop); subcache->idx_pos = subcache->idx_used = 0; subcache->data_pos = subcache->data_used = 0; } ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(00830) "Shared memory socache initialised"); /* Success ... */ return APR_SUCCESS; } static void socache_shmcb_destroy(ap_socache_instance_t *ctx, server_rec *s) { if (ctx && ctx->shm) { apr_shm_destroy(ctx->shm); ctx->shm = NULL; } } static apr_status_t socache_shmcb_store(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, apr_time_t expiry, unsigned char *encoded, unsigned int len_encoded, apr_pool_t *p) { SHMCBHeader *header = ctx->header; SHMCBSubcache *subcache = SHMCB_MASK(header, id); int tryreplace; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00831) "socache_shmcb_store (0x%02x -> subcache %d)", SHMCB_MASK_DBG(header, id)); /* XXX: Says who? Why shouldn't this be acceptable, or padded if not? */ if (idlen < 4) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00832) "unusably short id provided " "(%u bytes)", idlen); return APR_EINVAL; } tryreplace = shmcb_subcache_remove(s, header, subcache, id, idlen); if (shmcb_subcache_store(s, header, subcache, encoded, len_encoded, id, idlen, expiry)) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00833) "can't store an socache entry!"); return APR_ENOSPC; } if (tryreplace == 0) { header->stat_replaced++; } else { header->stat_stores++; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00834) "leaving socache_shmcb_store successfully"); return APR_SUCCESS; } static apr_status_t socache_shmcb_retrieve(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, unsigned char *dest, unsigned int *destlen, apr_pool_t *p) { SHMCBHeader *header = ctx->header; SHMCBSubcache *subcache = SHMCB_MASK(header, id); int rv; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00835) "socache_shmcb_retrieve (0x%02x -> subcache %d)", SHMCB_MASK_DBG(header, id)); /* Get the entry corresponding to the id, if it exists. */ rv = shmcb_subcache_retrieve(s, header, subcache, id, idlen, dest, destlen); if (rv == 0) header->stat_retrieves_hit++; else header->stat_retrieves_miss++; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00836) "leaving socache_shmcb_retrieve successfully"); return rv == 0 ? APR_SUCCESS : APR_NOTFOUND; } static apr_status_t socache_shmcb_remove(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, apr_pool_t *p) { SHMCBHeader *header = ctx->header; SHMCBSubcache *subcache = SHMCB_MASK(header, id); apr_status_t rv; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00837) "socache_shmcb_remove (0x%02x -> subcache %d)", SHMCB_MASK_DBG(header, id)); if (idlen < 4) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00838) "unusably short id provided " "(%u bytes)", idlen); return APR_EINVAL; } if (shmcb_subcache_remove(s, header, subcache, id, idlen) == 0) { header->stat_removes_hit++; rv = APR_SUCCESS; } else { header->stat_removes_miss++; rv = APR_NOTFOUND; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00839) "leaving socache_shmcb_remove successfully"); return rv; } static void socache_shmcb_status(ap_socache_instance_t *ctx, request_rec *r, int flags) { server_rec *s = r->server; SHMCBHeader *header = ctx->header; unsigned int loop, total = 0, cache_total = 0, non_empty_subcaches = 0; apr_time_t idx_expiry, min_expiry = 0, max_expiry = 0; apr_time_t now = apr_time_now(); double expiry_total = 0; int index_pct, cache_pct; AP_DEBUG_ASSERT(header->subcache_num > 0); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00840) "inside shmcb_status"); /* Perform the iteration inside the mutex to avoid corruption or invalid * pointer arithmetic. The rest of our logic uses read-only header data so * doesn't need the lock. */ /* Iterate over the subcaches */ for (loop = 0; loop < header->subcache_num; loop++) { SHMCBSubcache *subcache = SHMCB_SUBCACHE(header, loop); shmcb_subcache_expire(s, header, subcache, now); total += subcache->idx_used; cache_total += subcache->data_used; if (subcache->idx_used) { SHMCBIndex *idx = SHMCB_INDEX(subcache, subcache->idx_pos); non_empty_subcaches++; idx_expiry = idx->expires; expiry_total += (double)idx_expiry; max_expiry = ((idx_expiry > max_expiry) ? idx_expiry : max_expiry); if (!min_expiry) min_expiry = idx_expiry; else min_expiry = ((idx_expiry < min_expiry) ? idx_expiry : min_expiry); } } index_pct = (100 * total) / (header->index_num * header->subcache_num); cache_pct = (100 * cache_total) / (header->subcache_data_size * header->subcache_num); /* Generate Output */ if (!(flags & AP_STATUS_SHORT)) { ap_rprintf(r, "cache type: SHMCB, shared memory: %" APR_SIZE_T_FMT " " "bytes, current entries: %d
    ", ctx->shm_size, total); ap_rprintf(r, "subcaches: %d, indexes per subcache: %d
    ", header->subcache_num, header->index_num); if (non_empty_subcaches) { apr_time_t average_expiry = (apr_time_t)(expiry_total / (double)non_empty_subcaches); ap_rprintf(r, "time left on oldest entries' objects: "); if (now < average_expiry) ap_rprintf(r, "avg: %d seconds, (range: %d...%d)
    ", (int)apr_time_sec(average_expiry - now), (int)apr_time_sec(min_expiry - now), (int)apr_time_sec(max_expiry - now)); else ap_rprintf(r, "expiry_threshold: Calculation error!
    "); } ap_rprintf(r, "index usage: %d%%, cache usage: %d%%
    ", index_pct, cache_pct); ap_rprintf(r, "total entries stored since starting: %lu
    ", header->stat_stores); ap_rprintf(r, "total entries replaced since starting: %lu
    ", header->stat_replaced); ap_rprintf(r, "total entries expired since starting: %lu
    ", header->stat_expiries); ap_rprintf(r, "total (pre-expiry) entries scrolled out of the cache: " "%lu
    ", header->stat_scrolled); ap_rprintf(r, "total retrieves since starting: %lu hit, " "%lu miss
    ", header->stat_retrieves_hit, header->stat_retrieves_miss); ap_rprintf(r, "total removes since starting: %lu hit, " "%lu miss
    ", header->stat_removes_hit, header->stat_removes_miss); } else { ap_rputs("CacheType: SHMCB\n", r); ap_rprintf(r, "CacheSharedMemory: %" APR_SIZE_T_FMT "\n", ctx->shm_size); ap_rprintf(r, "CacheCurrentEntries: %d\n", total); ap_rprintf(r, "CacheSubcaches: %d\n", header->subcache_num); ap_rprintf(r, "CacheIndexesPerSubcaches: %d\n", header->index_num); if (non_empty_subcaches) { apr_time_t average_expiry = (apr_time_t)(expiry_total / (double)non_empty_subcaches); if (now < average_expiry) { ap_rprintf(r, "CacheTimeLeftOldestAvg: %d\n", (int)apr_time_sec(average_expiry - now)); ap_rprintf(r, "CacheTimeLeftOldestMin: %d\n", (int)apr_time_sec(min_expiry - now)); ap_rprintf(r, "CacheTimeLeftOldestMax: %d\n", (int)apr_time_sec(max_expiry - now)); } } ap_rprintf(r, "CacheIndexUsage: %d%%\n", index_pct); ap_rprintf(r, "CacheUsage: %d%%\n", cache_pct); ap_rprintf(r, "CacheStoreCount: %lu\n", header->stat_stores); ap_rprintf(r, "CacheReplaceCount: %lu\n", header->stat_replaced); ap_rprintf(r, "CacheExpireCount: %lu\n", header->stat_expiries); ap_rprintf(r, "CacheDiscardCount: %lu\n", header->stat_scrolled); ap_rprintf(r, "CacheRetrieveHitCount: %lu\n", header->stat_retrieves_hit); ap_rprintf(r, "CacheRetrieveMissCount: %lu\n", header->stat_retrieves_miss); ap_rprintf(r, "CacheRemoveHitCount: %lu\n", header->stat_removes_hit); ap_rprintf(r, "CacheRemoveMissCount: %lu\n", header->stat_removes_miss); } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00841) "leaving shmcb_status"); } static apr_status_t socache_shmcb_iterate(ap_socache_instance_t *instance, server_rec *s, void *userctx, ap_socache_iterator_t *iterator, apr_pool_t *pool) { SHMCBHeader *header = instance->header; unsigned int loop; apr_time_t now = apr_time_now(); apr_status_t rv = APR_SUCCESS; apr_size_t buflen = 0; unsigned char *buf = NULL; /* Perform the iteration inside the mutex to avoid corruption or invalid * pointer arithmetic. The rest of our logic uses read-only header data so * doesn't need the lock. */ /* Iterate over the subcaches */ for (loop = 0; loop < header->subcache_num && rv == APR_SUCCESS; loop++) { SHMCBSubcache *subcache = SHMCB_SUBCACHE(header, loop); rv = shmcb_subcache_iterate(instance, s, userctx, header, subcache, iterator, &buf, &buflen, pool, now); } return rv; } /* * Subcache-level cache operations */ static void shmcb_subcache_expire(server_rec *s, SHMCBHeader *header, SHMCBSubcache *subcache, apr_time_t now) { unsigned int loop = 0, freed = 0, expired = 0; unsigned int new_idx_pos = subcache->idx_pos; SHMCBIndex *idx = NULL; while (loop < subcache->idx_used) { idx = SHMCB_INDEX(subcache, new_idx_pos); if (idx->removed) freed++; else if (idx->expires <= now) expired++; else /* not removed and not expired yet, we're done iterating */ break; loop++; new_idx_pos = SHMCB_CYCLIC_INCREMENT(new_idx_pos, 1, header->index_num); } if (!loop) /* Nothing to do */ return; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00842) "expiring %u and reclaiming %u removed socache entries", expired, freed); if (loop == subcache->idx_used) { /* We're expiring everything, piece of cake */ subcache->idx_used = 0; subcache->data_used = 0; } else { /* There remain other indexes, so we can use idx to adjust 'data' */ unsigned int diff = SHMCB_CYCLIC_SPACE(subcache->data_pos, idx->data_pos, header->subcache_data_size); /* Adjust the indexes */ subcache->idx_used -= loop; subcache->idx_pos = new_idx_pos; /* Adjust the data area */ subcache->data_used -= diff; subcache->data_pos = idx->data_pos; } header->stat_expiries += expired; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00843) "we now have %u socache entries", subcache->idx_used); } static int shmcb_subcache_store(server_rec *s, SHMCBHeader *header, SHMCBSubcache *subcache, unsigned char *data, unsigned int data_len, const unsigned char *id, unsigned int id_len, apr_time_t expiry) { unsigned int data_offset, new_idx, id_offset; SHMCBIndex *idx; unsigned int total_len = id_len + data_len; /* Sanity check the input */ if (total_len > header->subcache_data_size) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00844) "inserting socache entry larger (%d) than subcache data area (%d)", total_len, header->subcache_data_size); return -1; } /* First reclaim space from removed and expired records. */ shmcb_subcache_expire(s, header, subcache, apr_time_now()); /* Loop until there is enough space to insert * XXX: This should first compress out-of-order expiries and * removed records, and then force-remove oldest-first */ if (header->subcache_data_size - subcache->data_used < total_len || subcache->idx_used == header->index_num) { unsigned int loop = 0; idx = SHMCB_INDEX(subcache, subcache->idx_pos); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00845) "about to force-expire, subcache: idx_used=%d, " "data_used=%d", subcache->idx_used, subcache->data_used); do { SHMCBIndex *idx2; /* Adjust the indexes by one */ subcache->idx_pos = SHMCB_CYCLIC_INCREMENT(subcache->idx_pos, 1, header->index_num); subcache->idx_used--; if (!subcache->idx_used) { /* There's nothing left */ subcache->data_used = 0; break; } /* Adjust the data */ idx2 = SHMCB_INDEX(subcache, subcache->idx_pos); subcache->data_used -= SHMCB_CYCLIC_SPACE(idx->data_pos, idx2->data_pos, header->subcache_data_size); subcache->data_pos = idx2->data_pos; /* Stats */ header->stat_scrolled++; /* Loop admin */ idx = idx2; loop++; } while (header->subcache_data_size - subcache->data_used < total_len); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00846) "finished force-expire, subcache: idx_used=%d, " "data_used=%d", subcache->idx_used, subcache->data_used); } /* HERE WE ASSUME THAT THE NEW ENTRY SHOULD GO ON THE END! I'M NOT * CHECKING WHETHER IT SHOULD BE GENUINELY "INSERTED" SOMEWHERE. * * We aught to fix that. httpd (never mind third party modules) * does not promise to perform any processing in date order * (c.f. FAQ "My log entries are not in date order!") */ /* Insert the id */ id_offset = SHMCB_CYCLIC_INCREMENT(subcache->data_pos, subcache->data_used, header->subcache_data_size); shmcb_cyclic_ntoc_memcpy(header->subcache_data_size, SHMCB_DATA(header, subcache), id_offset, id, id_len); subcache->data_used += id_len; /* Insert the data */ data_offset = SHMCB_CYCLIC_INCREMENT(subcache->data_pos, subcache->data_used, header->subcache_data_size); shmcb_cyclic_ntoc_memcpy(header->subcache_data_size, SHMCB_DATA(header, subcache), data_offset, data, data_len); subcache->data_used += data_len; /* Insert the index */ new_idx = SHMCB_CYCLIC_INCREMENT(subcache->idx_pos, subcache->idx_used, header->index_num); idx = SHMCB_INDEX(subcache, new_idx); idx->expires = expiry; idx->data_pos = id_offset; idx->data_used = total_len; idx->id_len = id_len; idx->removed = 0; subcache->idx_used++; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00847) "insert happened at idx=%d, data=(%u:%u)", new_idx, id_offset, data_offset); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00848) "finished insert, subcache: idx_pos/idx_used=%d/%d, " "data_pos/data_used=%d/%d", subcache->idx_pos, subcache->idx_used, subcache->data_pos, subcache->data_used); return 0; } static int shmcb_subcache_retrieve(server_rec *s, SHMCBHeader *header, SHMCBSubcache *subcache, const unsigned char *id, unsigned int idlen, unsigned char *dest, unsigned int *destlen) { unsigned int pos; unsigned int loop = 0; apr_time_t now = apr_time_now(); pos = subcache->idx_pos; while (loop < subcache->idx_used) { SHMCBIndex *idx = SHMCB_INDEX(subcache, pos); /* Only consider 'idx' if the id matches, and the "removed" * flag isn't set, and the record is not expired. * Check the data length too to avoid a buffer overflow * in case of corruption, which should be impossible, * but it's cheap to be safe. */ if (!idx->removed && idx->id_len == idlen && (idx->data_used - idx->id_len) <= *destlen && shmcb_cyclic_memcmp(header->subcache_data_size, SHMCB_DATA(header, subcache), idx->data_pos, id, idx->id_len) == 0) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00849) "match at idx=%d, data=%d", pos, idx->data_pos); if (idx->expires > now) { unsigned int data_offset; /* Find the offset of the data segment, after the id */ data_offset = SHMCB_CYCLIC_INCREMENT(idx->data_pos, idx->id_len, header->subcache_data_size); *destlen = idx->data_used - idx->id_len; /* Copy out the data */ shmcb_cyclic_cton_memcpy(header->subcache_data_size, dest, SHMCB_DATA(header, subcache), data_offset, *destlen); return 0; } else { /* Already stale, quietly remove and treat as not-found */ idx->removed = 1; header->stat_expiries++; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00850) "shmcb_subcache_retrieve discarding expired entry"); return -1; } } /* Increment */ loop++; pos = SHMCB_CYCLIC_INCREMENT(pos, 1, header->index_num); } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00851) "shmcb_subcache_retrieve found no match"); return -1; } static int shmcb_subcache_remove(server_rec *s, SHMCBHeader *header, SHMCBSubcache *subcache, const unsigned char *id, unsigned int idlen) { unsigned int pos; unsigned int loop = 0; pos = subcache->idx_pos; while (loop < subcache->idx_used) { SHMCBIndex *idx = SHMCB_INDEX(subcache, pos); /* Only consider 'idx' if the id matches, and the "removed" * flag isn't set. */ if (!idx->removed && idx->id_len == idlen && shmcb_cyclic_memcmp(header->subcache_data_size, SHMCB_DATA(header, subcache), idx->data_pos, id, idx->id_len) == 0) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00852) "possible match at idx=%d, data=%d", pos, idx->data_pos); /* Found the matching entry, remove it quietly. */ idx->removed = 1; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00853) "shmcb_subcache_remove removing matching entry"); return 0; } /* Increment */ loop++; pos = SHMCB_CYCLIC_INCREMENT(pos, 1, header->index_num); } return -1; /* failure */ } static apr_status_t shmcb_subcache_iterate(ap_socache_instance_t *instance, server_rec *s, void *userctx, SHMCBHeader *header, SHMCBSubcache *subcache, ap_socache_iterator_t *iterator, unsigned char **buf, apr_size_t *buf_len, apr_pool_t *pool, apr_time_t now) { unsigned int pos; unsigned int loop = 0; apr_status_t rv; pos = subcache->idx_pos; while (loop < subcache->idx_used) { SHMCBIndex *idx = SHMCB_INDEX(subcache, pos); /* Only consider 'idx' if the "removed" flag isn't set. */ if (!idx->removed) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00854) "iterating idx=%d, data=%d", pos, idx->data_pos); if (idx->expires > now) { unsigned char *id = *buf; unsigned char *dest; unsigned int data_offset, dest_len; apr_size_t buf_req; /* Find the offset of the data segment, after the id */ data_offset = SHMCB_CYCLIC_INCREMENT(idx->data_pos, idx->id_len, header->subcache_data_size); dest_len = idx->data_used - idx->id_len; buf_req = APR_ALIGN_DEFAULT(idx->id_len + 1) + APR_ALIGN_DEFAULT(dest_len + 1); if (buf_req > *buf_len) { /* Grow to ~150% of this buffer requirement on resize * always using APR_ALIGN_DEFAULT sized pages */ *buf_len = buf_req + APR_ALIGN_DEFAULT(buf_req / 2); *buf = apr_palloc(pool, *buf_len); id = *buf; } dest = *buf + APR_ALIGN_DEFAULT(idx->id_len + 1); /* Copy out the data, because it's potentially cyclic */ shmcb_cyclic_cton_memcpy(header->subcache_data_size, id, SHMCB_DATA(header, subcache), idx->data_pos, idx->id_len); id[idx->id_len] = '\0'; shmcb_cyclic_cton_memcpy(header->subcache_data_size, dest, SHMCB_DATA(header, subcache), data_offset, dest_len); dest[dest_len] = '\0'; rv = iterator(instance, s, userctx, id, idx->id_len, dest, dest_len, pool); ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, s, APLOGNO(00855) "shmcb entry iterated"); if (rv != APR_SUCCESS) return rv; } else { /* Already stale, quietly remove and treat as not-found */ idx->removed = 1; header->stat_expiries++; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00856) "shmcb_subcache_iterate discarding expired entry"); } } /* Increment */ loop++; pos = SHMCB_CYCLIC_INCREMENT(pos, 1, header->index_num); } return APR_SUCCESS; } static const ap_socache_provider_t socache_shmcb = { "shmcb", AP_SOCACHE_FLAG_NOTMPSAFE, socache_shmcb_create, socache_shmcb_init, socache_shmcb_destroy, socache_shmcb_store, socache_shmcb_retrieve, socache_shmcb_remove, socache_shmcb_status, socache_shmcb_iterate }; static void register_hooks(apr_pool_t *p) { ap_register_provider(p, AP_SOCACHE_PROVIDER_GROUP, "shmcb", AP_SOCACHE_PROVIDER_VERSION, &socache_shmcb); /* Also register shmcb under the default provider name. */ ap_register_provider(p, AP_SOCACHE_PROVIDER_GROUP, AP_SOCACHE_DEFAULT_PROVIDER, AP_SOCACHE_PROVIDER_VERSION, &socache_shmcb); } AP_DECLARE_MODULE(socache_shmcb) = { STANDARD20_MODULE_STUFF, NULL, NULL, NULL, NULL, NULL, register_hooks }; httpd-2.4.41/modules/cache/NWGNUsocachdbm0000644000000000000500000001045212561766033016447 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/server/mpm/netware \ $(NWOS) \ $(STDMOD)/generators \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = socachedbm # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Socache DBM Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = socachedbm # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 65536 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If this is specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # Declare all target files (you must add your files here) # # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_socache_dbm.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ Apache2 \ Libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ socache_dbm_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/cache/mod_socache_memcache.mak0000644000000000000500000002513113025033421020522 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_socache_memcache.dsp !IF "$(CFG)" == "" CFG=mod_socache_memcache - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_socache_memcache - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_socache_memcache - Win32 Release" && "$(CFG)" != "mod_socache_memcache - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_socache_memcache.mak" CFG="mod_socache_memcache - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_socache_memcache - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_socache_memcache - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_socache_memcache - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_socache_memcache.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_socache_memcache.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_socache_memcache.obj" -@erase "$(INTDIR)\mod_socache_memcache.res" -@erase "$(INTDIR)\mod_socache_memcache_src.idb" -@erase "$(INTDIR)\mod_socache_memcache_src.pdb" -@erase "$(OUTDIR)\mod_socache_memcache.exp" -@erase "$(OUTDIR)\mod_socache_memcache.lib" -@erase "$(OUTDIR)\mod_socache_memcache.pdb" -@erase "$(OUTDIR)\mod_socache_memcache.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_socache_memcache_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_socache_memcache.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_socache_memcache.so" /d LONG_NAME="socache_memcache_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_socache_memcache.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_socache_memcache.pdb" /debug /out:"$(OUTDIR)\mod_socache_memcache.so" /implib:"$(OUTDIR)\mod_socache_memcache.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_memcache.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_socache_memcache.obj" \ "$(INTDIR)\mod_socache_memcache.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_socache_memcache.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_socache_memcache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_socache_memcache.so" if exist .\Release\mod_socache_memcache.so.manifest mt.exe -manifest .\Release\mod_socache_memcache.so.manifest -outputresource:.\Release\mod_socache_memcache.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_socache_memcache - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_socache_memcache.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_socache_memcache.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_socache_memcache.obj" -@erase "$(INTDIR)\mod_socache_memcache.res" -@erase "$(INTDIR)\mod_socache_memcache_src.idb" -@erase "$(INTDIR)\mod_socache_memcache_src.pdb" -@erase "$(OUTDIR)\mod_socache_memcache.exp" -@erase "$(OUTDIR)\mod_socache_memcache.lib" -@erase "$(OUTDIR)\mod_socache_memcache.pdb" -@erase "$(OUTDIR)\mod_socache_memcache.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_socache_memcache_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_socache_memcache.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_socache_memcache.so" /d LONG_NAME="socache_memcache_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_socache_memcache.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_socache_memcache.pdb" /debug /out:"$(OUTDIR)\mod_socache_memcache.so" /implib:"$(OUTDIR)\mod_socache_memcache.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_memcache.so LINK32_OBJS= \ "$(INTDIR)\mod_socache_memcache.obj" \ "$(INTDIR)\mod_socache_memcache.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_socache_memcache.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_socache_memcache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_socache_memcache.so" if exist .\Debug\mod_socache_memcache.so.manifest mt.exe -manifest .\Debug\mod_socache_memcache.so.manifest -outputresource:.\Debug\mod_socache_memcache.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_socache_memcache.dep") !INCLUDE "mod_socache_memcache.dep" !ELSE !MESSAGE Warning: cannot find "mod_socache_memcache.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_socache_memcache - Win32 Release" || "$(CFG)" == "mod_socache_memcache - Win32 Debug" !IF "$(CFG)" == "mod_socache_memcache - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\cache" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_memcache - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\cache" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_socache_memcache - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\cache" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_memcache - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\cache" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_socache_memcache - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\cache" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_memcache - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\cache" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\cache" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_socache_memcache - Win32 Release" "$(INTDIR)\mod_socache_memcache.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_socache_memcache.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_socache_memcache.so" /d LONG_NAME="socache_memcache_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_socache_memcache - Win32 Debug" "$(INTDIR)\mod_socache_memcache.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_socache_memcache.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_socache_memcache.so" /d LONG_NAME="socache_memcache_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_socache_memcache.c "$(INTDIR)\mod_socache_memcache.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/cache/NWGNUcach_socache0000644000000000000500000001050612561746315017110 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(SRC)/include \ $(STDMOD)/generators \ $(SERVER)/mpm/netware \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = cach_socache # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Cache Socache Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = cach_socache # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 65536 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If this is specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # Declare all target files (you must add your files here) # # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_cache_socache.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ Apache2 \ Libc \ mod_cach \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ @mod_cache.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ cache_socache_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/cache/mod_socache_memcache.c0000644000000000000500000003542513025005660020207 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "http_protocol.h" #include "apr.h" #include "apu_version.h" /* apr_memcache support requires >= 1.3 */ #if APU_MAJOR_VERSION > 1 || \ (APU_MAJOR_VERSION == 1 && APU_MINOR_VERSION > 2) #define HAVE_APU_MEMCACHE 1 #endif #ifdef HAVE_APU_MEMCACHE #include "ap_socache.h" #include "ap_mpm.h" #include "http_log.h" #include "apr_memcache.h" #include "apr_strings.h" #include "mod_status.h" /* The underlying apr_memcache system is thread safe.. */ #define MC_KEY_LEN 254 #ifndef MC_DEFAULT_SERVER_PORT #define MC_DEFAULT_SERVER_PORT 11211 #endif #ifndef MC_DEFAULT_SERVER_MIN #define MC_DEFAULT_SERVER_MIN 0 #endif #ifndef MC_DEFAULT_SERVER_SMAX #define MC_DEFAULT_SERVER_SMAX 1 #endif #ifndef MC_DEFAULT_SERVER_TTL #define MC_DEFAULT_SERVER_TTL apr_time_from_sec(15) #endif module AP_MODULE_DECLARE_DATA socache_memcache_module; typedef struct { apr_uint32_t ttl; } socache_mc_svr_cfg; struct ap_socache_instance_t { const char *servers; apr_memcache_t *mc; const char *tag; apr_size_t taglen; /* strlen(tag) + 1 */ }; static const char *socache_mc_create(ap_socache_instance_t **context, const char *arg, apr_pool_t *tmp, apr_pool_t *p) { ap_socache_instance_t *ctx; *context = ctx = apr_palloc(p, sizeof *ctx); if (!arg || !*arg) { return "List of server names required to create memcache socache."; } ctx->servers = apr_pstrdup(p, arg); return NULL; } static apr_status_t socache_mc_init(ap_socache_instance_t *ctx, const char *namespace, const struct ap_socache_hints *hints, server_rec *s, apr_pool_t *p) { apr_status_t rv; int thread_limit = 0; apr_uint16_t nservers = 0; char *cache_config; char *split; char *tok; socache_mc_svr_cfg *sconf = ap_get_module_config(s->module_config, &socache_memcache_module); ap_mpm_query(AP_MPMQ_HARD_LIMIT_THREADS, &thread_limit); /* Find all the servers in the first run to get a total count */ cache_config = apr_pstrdup(p, ctx->servers); split = apr_strtok(cache_config, ",", &tok); while (split) { nservers++; split = apr_strtok(NULL,",", &tok); } rv = apr_memcache_create(p, nservers, 0, &ctx->mc); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(00785) "Failed to create Memcache Object of '%d' size.", nservers); return rv; } /* Now add each server to the memcache */ cache_config = apr_pstrdup(p, ctx->servers); split = apr_strtok(cache_config, ",", &tok); while (split) { apr_memcache_server_t *st; char *host_str; char *scope_id; apr_port_t port; rv = apr_parse_addr_port(&host_str, &scope_id, &port, split, p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(00786) "Failed to Parse memcache Server: '%s'", split); return rv; } if (host_str == NULL) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(00787) "Failed to Parse Server, " "no hostname specified: '%s'", split); return APR_EINVAL; } if (port == 0) { port = MC_DEFAULT_SERVER_PORT; } rv = apr_memcache_server_create(p, host_str, port, MC_DEFAULT_SERVER_MIN, MC_DEFAULT_SERVER_SMAX, thread_limit, sconf->ttl, &st); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(00788) "Failed to Create memcache Server: %s:%d", host_str, port); return rv; } rv = apr_memcache_add_server(ctx->mc, st); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(00789) "Failed to Add memcache Server: %s:%d", host_str, port); return rv; } split = apr_strtok(NULL,",", &tok); } ctx->tag = apr_pstrcat(p, namespace, ":", NULL); ctx->taglen = strlen(ctx->tag) + 1; /* socache API constraint: */ AP_DEBUG_ASSERT(ctx->taglen <= 16); return APR_SUCCESS; } static void socache_mc_destroy(ap_socache_instance_t *context, server_rec *s) { /* noop. */ } /* Converts (binary) id into a key prefixed by the predetermined * namespace tag; writes output to key buffer. Returns non-zero if * the id won't fit in the key buffer. */ static int socache_mc_id2key(ap_socache_instance_t *ctx, const unsigned char *id, unsigned int idlen, char *key, apr_size_t keylen) { char *cp; if (idlen * 2 + ctx->taglen >= keylen) return 1; cp = apr_cpystrn(key, ctx->tag, ctx->taglen); ap_bin2hex(id, idlen, cp); return 0; } static apr_status_t socache_mc_store(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, apr_time_t expiry, unsigned char *ucaData, unsigned int nData, apr_pool_t *p) { char buf[MC_KEY_LEN]; apr_status_t rv; if (socache_mc_id2key(ctx, id, idlen, buf, sizeof buf)) { return APR_EINVAL; } /* memcache needs time in seconds till expiry; fail if this is not * positive *before* casting to unsigned (apr_uint32_t). */ expiry -= apr_time_now(); if (apr_time_sec(expiry) <= 0) { return APR_EINVAL; } rv = apr_memcache_set(ctx->mc, buf, (char*)ucaData, nData, apr_time_sec(expiry), 0); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(00790) "scache_mc: error setting key '%s' " "with %d bytes of data", buf, nData); return rv; } return APR_SUCCESS; } static apr_status_t socache_mc_retrieve(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, unsigned char *dest, unsigned int *destlen, apr_pool_t *p) { apr_size_t data_len; char buf[MC_KEY_LEN], *data; apr_status_t rv; if (socache_mc_id2key(ctx, id, idlen, buf, sizeof buf)) { return APR_EINVAL; } /* ### this could do with a subpool, but _getp looks like it will * eat memory like it's going out of fashion anyway. */ rv = apr_memcache_getp(ctx->mc, p, buf, &data, &data_len, NULL); if (rv) { if (rv != APR_NOTFOUND) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00791) "scache_mc: 'retrieve' FAIL"); } return rv; } else if (data_len > *destlen) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00792) "scache_mc: 'retrieve' OVERFLOW"); return APR_ENOMEM; } memcpy(dest, data, data_len); *destlen = data_len; return APR_SUCCESS; } static apr_status_t socache_mc_remove(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, apr_pool_t *p) { char buf[MC_KEY_LEN]; apr_status_t rv; if (socache_mc_id2key(ctx, id, idlen, buf, sizeof buf)) { return APR_EINVAL; } rv = apr_memcache_delete(ctx->mc, buf, 0); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, s, APLOGNO(00793) "scache_mc: error deleting key '%s' ", buf); } return rv; } static void socache_mc_status(ap_socache_instance_t *ctx, request_rec *r, int flags) { apr_memcache_t *rc = ctx->mc; int i; for (i = 0; i < rc->ntotal; i++) { apr_memcache_server_t *ms; apr_memcache_stats_t *stats; apr_status_t rv; char *br = (!(flags & AP_STATUS_SHORT) ? "
    " : ""); ms = rc->live_servers[i]; ap_rprintf(r, "Memcached server: %s:%d [%s]%s\n", ms->host, (int)ms->port, (ms->status == APR_MC_SERVER_LIVE) ? "Up" : "Down", br); rv = apr_memcache_stats(ms, r->pool, &stats); if (rv != APR_SUCCESS) continue; if (!(flags & AP_STATUS_SHORT)) { ap_rprintf(r, "Version: %s [%u bits], PID: %u, Uptime: %u hrs
    \n", stats->version , stats->pointer_size, stats->pid, stats->uptime/3600); ap_rprintf(r, "Clients:: Structures: %u, Total: %u, Current: %u
    \n", stats->connection_structures, stats->total_connections, stats->curr_connections); ap_rprintf(r, "Storage:: Total Items: %u, Current Items: %u, Bytes: %" APR_UINT64_T_FMT "
    \n", stats->total_items, stats->curr_items, stats->bytes); ap_rprintf(r, "CPU:: System: %u, User: %u
    \n", (unsigned)stats->rusage_system, (unsigned)stats->rusage_user ); ap_rprintf(r, "Cache:: Gets: %u, Sets: %u, Hits: %u, Misses: %u
    \n", stats->cmd_get, stats->cmd_set, stats->get_hits, stats->get_misses); ap_rprintf(r, "Net:: Input bytes: %" APR_UINT64_T_FMT ", Output bytes: %" APR_UINT64_T_FMT "
    \n", stats->bytes_read, stats->bytes_written); ap_rprintf(r, "Misc:: Evictions: %" APR_UINT64_T_FMT ", MaxMem: %u, Threads: %u
    \n", stats->evictions, stats->limit_maxbytes, stats->threads); ap_rputs("

    \n", r); } else { ap_rprintf(r, "Version: %s [%u bits], PID: %u, Uptime: %u hrs %s\n", stats->version , stats->pointer_size, stats->pid, stats->uptime/3600, br); ap_rprintf(r, "Clients:: Structures: %d, Total: %d, Current: %u %s\n", stats->connection_structures, stats->total_connections, stats->curr_connections, br); ap_rprintf(r, "Storage:: Total Items: %u, Current Items: %u, Bytes: %" APR_UINT64_T_FMT " %s\n", stats->total_items, stats->curr_items, stats->bytes, br); ap_rprintf(r, "CPU:: System: %u, User: %u %s\n", (unsigned)stats->rusage_system, (unsigned)stats->rusage_user , br); ap_rprintf(r, "Cache:: Gets: %u, Sets: %u, Hits: %u, Misses: %u %s\n", stats->cmd_get, stats->cmd_set, stats->get_hits, stats->get_misses, br); ap_rprintf(r, "Net:: Input bytes: %" APR_UINT64_T_FMT ", Output bytes: %" APR_UINT64_T_FMT " %s\n", stats->bytes_read, stats->bytes_written, br); ap_rprintf(r, "Misc:: Evictions: %" APR_UINT64_T_FMT ", MaxMem: %u, Threads: %u %s\n", stats->evictions, stats->limit_maxbytes, stats->threads, br); } } } static apr_status_t socache_mc_iterate(ap_socache_instance_t *instance, server_rec *s, void *userctx, ap_socache_iterator_t *iterator, apr_pool_t *pool) { return APR_ENOTIMPL; } static const ap_socache_provider_t socache_mc = { "memcache", 0, socache_mc_create, socache_mc_init, socache_mc_destroy, socache_mc_store, socache_mc_retrieve, socache_mc_remove, socache_mc_status, socache_mc_iterate }; #endif /* HAVE_APU_MEMCACHE */ static void *create_server_config(apr_pool_t *p, server_rec *s) { socache_mc_svr_cfg *sconf = apr_pcalloc(p, sizeof(socache_mc_svr_cfg)); sconf->ttl = MC_DEFAULT_SERVER_TTL; return sconf; } static const char *socache_mc_set_ttl(cmd_parms *cmd, void *dummy, const char *arg) { apr_interval_time_t ttl; socache_mc_svr_cfg *sconf = ap_get_module_config(cmd->server->module_config, &socache_memcache_module); if (ap_timeout_parameter_parse(arg, &ttl, "s") != APR_SUCCESS) { return apr_pstrcat(cmd->pool, cmd->cmd->name, " has wrong format", NULL); } if ((ttl < apr_time_from_sec(0)) || (ttl > apr_time_from_sec(3600))) { return apr_pstrcat(cmd->pool, cmd->cmd->name, " can only be 0 or up to one hour.", NULL); } /* apr_memcache_server_create needs a ttl in usec. */ sconf->ttl = ttl; return NULL; } static void register_hooks(apr_pool_t *p) { #ifdef HAVE_APU_MEMCACHE ap_register_provider(p, AP_SOCACHE_PROVIDER_GROUP, "memcache", AP_SOCACHE_PROVIDER_VERSION, &socache_mc); #endif } static const command_rec socache_memcache_cmds[] = { AP_INIT_TAKE1("MemcacheConnTTL", socache_mc_set_ttl, NULL, RSRC_CONF, "TTL used for the connection with the memcache server(s)"), { NULL } }; AP_DECLARE_MODULE(socache_memcache) = { STANDARD20_MODULE_STUFF, NULL, /* create per-dir config structures */ NULL, /* merge per-dir config structures */ create_server_config, /* create per-server config structures */ NULL, /* merge per-server config structures */ socache_memcache_cmds, /* table of config file commands */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/cache/mod_socache_redis.dep0000644000000000000500000000023313446306656020106 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_socache_shmcb.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/cache/mod_socache_memcache.dsp0000644000000000000500000001111713025030244020537 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_socache_memcache" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_socache_memcache - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_socache_memcache.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_socache_memcache.mak" CFG="mod_socache_memcache - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_socache_memcache - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_socache_memcache - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_socache_memcache - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "_MBCS" /D "_USRDLL" /D "mod_socache_memcache_EXPORTS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_socache_memcache_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_socache_memcache.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_socache_memcache.so" /d LONG_NAME="socache_memcache_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_socache_memcache.so" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_memcache.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_socache_memcache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_socache_memcache - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_socache_memcache_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_socache_memcache.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_socache_memcache.so" /d LONG_NAME="socache_memcache_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_socache_memcache.so" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_memcache.so # Begin Special Build Tool TargetPath=.\Debug\mod_socache_memcache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_socache_memcache - Win32 Release" # Name "mod_socache_memcache - Win32 Debug" # Begin Source File SOURCE=.\mod_socache_memcache.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/cache/mod_socache_dc.mak0000644000000000000500000002404312701473373017365 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_socache_dc.dsp !IF "$(CFG)" == "" CFG=mod_socache_dc - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_socache_dc - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_socache_dc - Win32 Release" && "$(CFG)" != "mod_socache_dc - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_socache_dc.mak" CFG="mod_socache_dc - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_socache_dc - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_socache_dc - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_socache_dc - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_socache_dc.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_socache_dc.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_socache_dc.obj" -@erase "$(INTDIR)\mod_socache_dc.res" -@erase "$(INTDIR)\mod_socache_dc_src.idb" -@erase "$(INTDIR)\mod_socache_dc_src.pdb" -@erase "$(OUTDIR)\mod_socache_dc.exp" -@erase "$(OUTDIR)\mod_socache_dc.lib" -@erase "$(OUTDIR)\mod_socache_dc.pdb" -@erase "$(OUTDIR)\mod_socache_dc.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_socache_dc_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_socache_dc.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_socache_dc.so" /d LONG_NAME="socache_dc_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_socache_dc.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_socache_dc.pdb" /debug /out:"$(OUTDIR)\mod_socache_dc.so" /implib:"$(OUTDIR)\mod_socache_dc.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_dc.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_socache_dc.obj" \ "$(INTDIR)\mod_socache_dc.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_socache_dc.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_socache_dc.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_socache_dc.so" if exist .\Release\mod_socache_dc.so.manifest mt.exe -manifest .\Release\mod_socache_dc.so.manifest -outputresource:.\Release\mod_socache_dc.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_socache_dc - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_socache_dc.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_socache_dc.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_socache_dc.obj" -@erase "$(INTDIR)\mod_socache_dc.res" -@erase "$(INTDIR)\mod_socache_dc_src.idb" -@erase "$(INTDIR)\mod_socache_dc_src.pdb" -@erase "$(OUTDIR)\mod_socache_dc.exp" -@erase "$(OUTDIR)\mod_socache_dc.lib" -@erase "$(OUTDIR)\mod_socache_dc.pdb" -@erase "$(OUTDIR)\mod_socache_dc.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_socache_dc_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_socache_dc.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_socache_dc.so" /d LONG_NAME="socache_dc_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_socache_dc.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_socache_dc.pdb" /debug /out:"$(OUTDIR)\mod_socache_dc.so" /implib:"$(OUTDIR)\mod_socache_dc.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_dc.so LINK32_OBJS= \ "$(INTDIR)\mod_socache_dc.obj" \ "$(INTDIR)\mod_socache_dc.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_socache_dc.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_socache_dc.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_socache_dc.so" if exist .\Debug\mod_socache_dc.so.manifest mt.exe -manifest .\Debug\mod_socache_dc.so.manifest -outputresource:.\Debug\mod_socache_dc.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_socache_dc.dep") !INCLUDE "mod_socache_dc.dep" !ELSE !MESSAGE Warning: cannot find "mod_socache_dc.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_socache_dc - Win32 Release" || "$(CFG)" == "mod_socache_dc - Win32 Debug" !IF "$(CFG)" == "mod_socache_dc - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\cache" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_dc - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\cache" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_socache_dc - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\cache" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_dc - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\cache" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_socache_dc - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\cache" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_dc - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\cache" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\cache" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_socache_dc - Win32 Release" "$(INTDIR)\mod_socache_dc.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_socache_dc.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_socache_dc.so" /d LONG_NAME="socache_dc_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_socache_dc - Win32 Debug" "$(INTDIR)\mod_socache_dc.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_socache_dc.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_socache_dc.so" /d LONG_NAME="socache_dc_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_socache_dc.c "$(INTDIR)\mod_socache_dc.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/cache/mod_socache_shmcb.dep0000644000000000000500000000376712674411515020104 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_socache_shmcb.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_socache_shmcb.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\generators\mod_status.h"\ httpd-2.4.41/modules/cache/NWGNUsocachshmcb0000644000000000000500000001046112561766033017001 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/server/mpm/netware \ $(NWOS) \ $(STDMOD)/generators \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = socacheshmcb # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Socache DC Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = socacheshmcb # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 65536 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If this is specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # Declare all target files (you must add your files here) # # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_socache_shmcb.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ Apache2 \ Libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ socache_shmcb_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/cache/mod_socache_dc.dsp0000644000000000000500000001060711022367030017367 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_socache_dc" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_socache_dc - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_socache_dc.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_socache_dc.mak" CFG="mod_socache_dc - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_socache_dc - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_socache_dc - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_socache_dc - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "_MBCS" /D "_USRDLL" /D "mod_socache_dc_EXPORTS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_socache_dc_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_socache_dc.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_socache_dc.so" /d LONG_NAME="socache_dc_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_socache_dc.so" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_dc.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_socache_dc.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_socache_dc - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_socache_dc_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_socache_dc.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_socache_dc.so" /d LONG_NAME="socache_dc_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_socache_dc.so" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_dc.so # Begin Special Build Tool TargetPath=.\Debug\mod_socache_dc.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_socache_dc - Win32 Release" # Name "mod_socache_dc - Win32 Debug" # Begin Source File SOURCE=.\mod_socache_dc.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/cache/cache_socache_common.h0000644000000000000500000000353712146465263020241 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file cache_socache_common.h * @brief Common Shared Object Cache vars/structs * * @defgroup Cache_cache Cache Functions * @ingroup MOD_SOCACHE_CACHE * @{ */ #ifndef CACHE_SOCACHE_COMMON_H #define CACHE_SOCACHE_COMMON_H #include "apr_time.h" #include "cache_common.h" #define CACHE_SOCACHE_VARY_FORMAT_VERSION 1 #define CACHE_SOCACHE_DISK_FORMAT_VERSION 2 typedef struct { /* Indicates the format of the header struct stored on-disk. */ apr_uint32_t format; /* The HTTP status code returned for this response. */ int status; /* The size of the entity name that follows. */ apr_size_t name_len; /* The number of times we've cached this entity. */ apr_size_t entity_version; /* Miscellaneous time values. */ apr_time_t date; apr_time_t expire; apr_time_t request_time; apr_time_t response_time; /* Does this cached request have a body? */ unsigned int header_only:1; /* The parsed cache control header */ cache_control_t control; } cache_socache_info_t; #endif /* CACHE_SOCACHE_COMMON_H */ /** @} */ httpd-2.4.41/modules/cache/mod_socache_redis.dsp0000644000000000000500000001150413444157463020125 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_socache_redis" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_socache_redis - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_socache_redis.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_socache_redis.mak" CFG="mod_socache_redis - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_socache_redis - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_socache_redis - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_socache_redis - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../generators" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AAA_DECLARE_EXPORT" /Fd"Release\mod_socache_redis_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_socache_redis.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_socache_redis.so" /d LONG_NAME="socache_redis module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_socache_redis.so" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_redis.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_socache_redis.so" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_redis.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_socache_redis.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_socache_redis - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../generators" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AAA_DECLARE_EXPORT" /Fd"Debug\mod_socache_redis_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_socache_redis.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_socache_redis.so" /d LONG_NAME="socache_redis module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_socache_redis.so" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_redis.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_socache_redis.so" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_redis.so # Begin Special Build Tool TargetPath=.\Debug\mod_socache_redis.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_socache_redis - Win32 Release" # Name "mod_socache_redis - Win32 Debug" # Begin Source File SOURCE=.\mod_socache_redis.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/cache/cache_disk_common.h0000644000000000000500000000445511544421404017554 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file cache_disk_common.h * @brief Common Disk Cache vars/structs * * @defgroup Cache_cache Cache Functions * @ingroup MOD_DISK_CACHE * @{ */ #ifndef CACHE_DIST_COMMON_H #define CACHE_DIST_COMMON_H #define VARY_FORMAT_VERSION 5 #define DISK_FORMAT_VERSION 6 #define CACHE_HEADER_SUFFIX ".header" #define CACHE_DATA_SUFFIX ".data" #define CACHE_VDIR_SUFFIX ".vary" #define AP_TEMPFILE_PREFIX "/" #define AP_TEMPFILE_BASE "aptmp" #define AP_TEMPFILE_SUFFIX "XXXXXX" #define AP_TEMPFILE_BASELEN strlen(AP_TEMPFILE_BASE) #define AP_TEMPFILE_NAMELEN strlen(AP_TEMPFILE_BASE AP_TEMPFILE_SUFFIX) #define AP_TEMPFILE AP_TEMPFILE_PREFIX AP_TEMPFILE_BASE AP_TEMPFILE_SUFFIX typedef struct { /* Indicates the format of the header struct stored on-disk. */ apr_uint32_t format; /* The HTTP status code returned for this response. */ int status; /* The size of the entity name that follows. */ apr_size_t name_len; /* The number of times we've cached this entity. */ apr_size_t entity_version; /* Miscellaneous time values. */ apr_time_t date; apr_time_t expire; apr_time_t request_time; apr_time_t response_time; /* The ident of the body file, so we can test the body matches the header */ apr_ino_t inode; apr_dev_t device; /* Does this cached request have a body? */ unsigned int has_body:1; unsigned int header_only:1; /* The parsed cache control header */ cache_control_t control; } disk_cache_info_t; #endif /* CACHE_DIST_COMMON_H */ /** @} */ httpd-2.4.41/modules/cache/mod_socache_dbm.mak0000644000000000000500000002424112701473373017541 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_socache_dbm.dsp !IF "$(CFG)" == "" CFG=mod_socache_dbm - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_socache_dbm - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_socache_dbm - Win32 Release" && "$(CFG)" != "mod_socache_dbm - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_socache_dbm.mak" CFG="mod_socache_dbm - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_socache_dbm - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_socache_dbm - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_socache_dbm - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_socache_dbm.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_socache_dbm.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_socache_dbm.obj" -@erase "$(INTDIR)\mod_socache_dbm.res" -@erase "$(INTDIR)\mod_socache_dbm_src.idb" -@erase "$(INTDIR)\mod_socache_dbm_src.pdb" -@erase "$(OUTDIR)\mod_socache_dbm.exp" -@erase "$(OUTDIR)\mod_socache_dbm.lib" -@erase "$(OUTDIR)\mod_socache_dbm.pdb" -@erase "$(OUTDIR)\mod_socache_dbm.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_socache_dbm_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_socache_dbm.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_socache_dbm.so" /d LONG_NAME="socache_dbm_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_socache_dbm.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_socache_dbm.pdb" /debug /out:"$(OUTDIR)\mod_socache_dbm.so" /implib:"$(OUTDIR)\mod_socache_dbm.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_dbm.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_socache_dbm.obj" \ "$(INTDIR)\mod_socache_dbm.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_socache_dbm.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_socache_dbm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_socache_dbm.so" if exist .\Release\mod_socache_dbm.so.manifest mt.exe -manifest .\Release\mod_socache_dbm.so.manifest -outputresource:.\Release\mod_socache_dbm.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_socache_dbm - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_socache_dbm.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_socache_dbm.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_socache_dbm.obj" -@erase "$(INTDIR)\mod_socache_dbm.res" -@erase "$(INTDIR)\mod_socache_dbm_src.idb" -@erase "$(INTDIR)\mod_socache_dbm_src.pdb" -@erase "$(OUTDIR)\mod_socache_dbm.exp" -@erase "$(OUTDIR)\mod_socache_dbm.lib" -@erase "$(OUTDIR)\mod_socache_dbm.pdb" -@erase "$(OUTDIR)\mod_socache_dbm.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_socache_dbm_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_socache_dbm.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_socache_dbm.so" /d LONG_NAME="socache_dbm_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_socache_dbm.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_socache_dbm.pdb" /debug /out:"$(OUTDIR)\mod_socache_dbm.so" /implib:"$(OUTDIR)\mod_socache_dbm.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_dbm.so LINK32_OBJS= \ "$(INTDIR)\mod_socache_dbm.obj" \ "$(INTDIR)\mod_socache_dbm.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_socache_dbm.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_socache_dbm.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_socache_dbm.so" if exist .\Debug\mod_socache_dbm.so.manifest mt.exe -manifest .\Debug\mod_socache_dbm.so.manifest -outputresource:.\Debug\mod_socache_dbm.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_socache_dbm.dep") !INCLUDE "mod_socache_dbm.dep" !ELSE !MESSAGE Warning: cannot find "mod_socache_dbm.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_socache_dbm - Win32 Release" || "$(CFG)" == "mod_socache_dbm - Win32 Debug" !IF "$(CFG)" == "mod_socache_dbm - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\cache" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_dbm - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\cache" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_socache_dbm - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\cache" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_dbm - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\cache" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_socache_dbm - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\cache" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_dbm - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\cache" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\cache" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_socache_dbm - Win32 Release" "$(INTDIR)\mod_socache_dbm.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_socache_dbm.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_socache_dbm.so" /d LONG_NAME="socache_dbm_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_socache_dbm - Win32 Debug" "$(INTDIR)\mod_socache_dbm.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_socache_dbm.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_socache_dbm.so" /d LONG_NAME="socache_dbm_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_socache_dbm.c "$(INTDIR)\mod_socache_dbm.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/cache/mod_socache_memcache.dep0000644000000000000500000000423112674411515020535 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_socache_memcache.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_socache_memcache.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_memcache.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr-util\include\apu_version.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/cache/mod_cache_disk.mak0000644000000000000500000002556212701473373017376 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_cache_disk.dsp !IF "$(CFG)" == "" CFG=mod_cache_disk - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_cache_disk - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_cache_disk - Win32 Release" && "$(CFG)" != "mod_cache_disk - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_cache_disk.mak" CFG="mod_cache_disk - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_cache_disk - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_cache_disk - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_cache_disk - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_cache_disk.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_cache - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_cache_disk.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_cache - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_cache_disk.obj" -@erase "$(INTDIR)\mod_cache_disk.res" -@erase "$(INTDIR)\mod_cache_disk_src.idb" -@erase "$(INTDIR)\mod_cache_disk_src.pdb" -@erase "$(OUTDIR)\mod_cache_disk.exp" -@erase "$(OUTDIR)\mod_cache_disk.lib" -@erase "$(OUTDIR)\mod_cache_disk.pdb" -@erase "$(OUTDIR)\mod_cache_disk.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_cache_disk_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_cache_disk.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_cache_disk.so" /d LONG_NAME="cache_disk_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_cache_disk.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_cache_disk.pdb" /debug /out:"$(OUTDIR)\mod_cache_disk.so" /implib:"$(OUTDIR)\mod_cache_disk.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_cache_disk.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_cache_disk.obj" \ "$(INTDIR)\mod_cache_disk.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_cache.lib" "$(OUTDIR)\mod_cache_disk.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_cache_disk.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_cache_disk.so" if exist .\Release\mod_cache_disk.so.manifest mt.exe -manifest .\Release\mod_cache_disk.so.manifest -outputresource:.\Release\mod_cache_disk.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_cache_disk - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_cache_disk.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_cache - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_cache_disk.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_cache - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_cache_disk.obj" -@erase "$(INTDIR)\mod_cache_disk.res" -@erase "$(INTDIR)\mod_cache_disk_src.idb" -@erase "$(INTDIR)\mod_cache_disk_src.pdb" -@erase "$(OUTDIR)\mod_cache_disk.exp" -@erase "$(OUTDIR)\mod_cache_disk.lib" -@erase "$(OUTDIR)\mod_cache_disk.pdb" -@erase "$(OUTDIR)\mod_cache_disk.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_cache_disk_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_cache_disk.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_cache_disk.so" /d LONG_NAME="cache_disk_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_cache_disk.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_cache_disk.pdb" /debug /out:"$(OUTDIR)\mod_cache_disk.so" /implib:"$(OUTDIR)\mod_cache_disk.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_cache_disk.so LINK32_OBJS= \ "$(INTDIR)\mod_cache_disk.obj" \ "$(INTDIR)\mod_cache_disk.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_cache.lib" "$(OUTDIR)\mod_cache_disk.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_cache_disk.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_cache_disk.so" if exist .\Debug\mod_cache_disk.so.manifest mt.exe -manifest .\Debug\mod_cache_disk.so.manifest -outputresource:.\Debug\mod_cache_disk.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_cache_disk.dep") !INCLUDE "mod_cache_disk.dep" !ELSE !MESSAGE Warning: cannot find "mod_cache_disk.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_cache_disk - Win32 Release" || "$(CFG)" == "mod_cache_disk - Win32 Debug" !IF "$(CFG)" == "mod_cache_disk - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\cache" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_cache_disk - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\cache" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_cache_disk - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\cache" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_cache_disk - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\cache" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_cache_disk - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\cache" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\cache" !ELSEIF "$(CFG)" == "mod_cache_disk - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\cache" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\cache" !ENDIF !IF "$(CFG)" == "mod_cache_disk - Win32 Release" "mod_cache - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_cache.mak" CFG="mod_cache - Win32 Release" cd "." "mod_cache - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_cache.mak" CFG="mod_cache - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_cache_disk - Win32 Debug" "mod_cache - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_cache.mak" CFG="mod_cache - Win32 Debug" cd "." "mod_cache - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_cache.mak" CFG="mod_cache - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_cache_disk - Win32 Release" "$(INTDIR)\mod_cache_disk.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_cache_disk.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_cache_disk.so" /d LONG_NAME="cache_disk_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_cache_disk - Win32 Debug" "$(INTDIR)\mod_cache_disk.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_cache_disk.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_cache_disk.so" /d LONG_NAME="cache_disk_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_cache_disk.c "$(INTDIR)\mod_cache_disk.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/cache/mod_cache_socache.mak0000644000000000000500000002624612701473373020051 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_cache_socache.dsp !IF "$(CFG)" == "" CFG=mod_cache_socache - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_cache_socache - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_cache_socache - Win32 Release" && "$(CFG)" != "mod_cache_socache - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_cache_socache.mak" CFG="mod_cache_socache - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_cache_socache - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_cache_socache - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_cache_socache - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_cache_socache.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_cache - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_cache_socache.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_cache - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_cache_socache.obj" -@erase "$(INTDIR)\mod_cache_socache.res" -@erase "$(INTDIR)\mod_cache_socache_src.idb" -@erase "$(INTDIR)\mod_cache_socache_src.pdb" -@erase "$(OUTDIR)\mod_cache_socache.exp" -@erase "$(OUTDIR)\mod_cache_socache.lib" -@erase "$(OUTDIR)\mod_cache_socache.pdb" -@erase "$(OUTDIR)\mod_cache_socache.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_cache_socache_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_cache_socache.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_cache_socache.so" /d LONG_NAME="cache_socache_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_cache_socache.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_cache_socache.pdb" /debug /out:"$(OUTDIR)\mod_cache_socache.so" /implib:"$(OUTDIR)\mod_cache_socache.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_cache_socache.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_cache_socache.obj" \ "$(INTDIR)\mod_cache_socache.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_cache.lib" "$(OUTDIR)\mod_cache_socache.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_cache_socache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_cache_socache.so" if exist .\Release\mod_cache_socache.so.manifest mt.exe -manifest .\Release\mod_cache_socache.so.manifest -outputresource:.\Release\mod_cache_socache.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_cache_socache - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_cache_socache.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_cache - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_cache_socache.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_cache - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_cache_socache.obj" -@erase "$(INTDIR)\mod_cache_socache.res" -@erase "$(INTDIR)\mod_cache_socache_src.idb" -@erase "$(INTDIR)\mod_cache_socache_src.pdb" -@erase "$(OUTDIR)\mod_cache_socache.exp" -@erase "$(OUTDIR)\mod_cache_socache.lib" -@erase "$(OUTDIR)\mod_cache_socache.pdb" -@erase "$(OUTDIR)\mod_cache_socache.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_cache_socache_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_cache_socache.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_cache_socache.so" /d LONG_NAME="cache_socache_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_cache_socache.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_cache_socache.pdb" /debug /out:"$(OUTDIR)\mod_cache_socache.so" /implib:"$(OUTDIR)\mod_cache_socache.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_cache_socache.so LINK32_OBJS= \ "$(INTDIR)\mod_cache_socache.obj" \ "$(INTDIR)\mod_cache_socache.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_cache.lib" "$(OUTDIR)\mod_cache_socache.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_cache_socache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_cache_socache.so" if exist .\Debug\mod_cache_socache.so.manifest mt.exe -manifest .\Debug\mod_cache_socache.so.manifest -outputresource:.\Debug\mod_cache_socache.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_cache_socache.dep") !INCLUDE "mod_cache_socache.dep" !ELSE !MESSAGE Warning: cannot find "mod_cache_socache.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_cache_socache - Win32 Release" || "$(CFG)" == "mod_cache_socache - Win32 Debug" !IF "$(CFG)" == "mod_cache_socache - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\cache" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_cache_socache - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\cache" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_cache_socache - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\cache" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_cache_socache - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\cache" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_cache_socache - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\cache" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\cache" !ELSEIF "$(CFG)" == "mod_cache_socache - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\cache" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\cache" !ENDIF !IF "$(CFG)" == "mod_cache_socache - Win32 Release" "mod_cache - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_cache.mak" CFG="mod_cache - Win32 Release" cd "." "mod_cache - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_cache.mak" CFG="mod_cache - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_cache_socache - Win32 Debug" "mod_cache - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_cache.mak" CFG="mod_cache - Win32 Debug" cd "." "mod_cache - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_cache.mak" CFG="mod_cache - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_cache_socache - Win32 Release" "$(INTDIR)\mod_cache_socache.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_cache_socache.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_cache_socache.so" /d LONG_NAME="cache_socache_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_cache_socache - Win32 Debug" "$(INTDIR)\mod_cache_socache.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_cache_socache.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_cache_socache.so" /d LONG_NAME="cache_socache_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_cache_socache.c "$(INTDIR)\mod_cache_socache.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/cache/mod_cache.c0000644000000000000500000030356113313667776016050 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_cache.h" #include "cache_storage.h" #include "cache_util.h" module AP_MODULE_DECLARE_DATA cache_module; APR_OPTIONAL_FN_TYPE(ap_cache_generate_key) *cache_generate_key; /* -------------------------------------------------------------- */ /* Handles for cache filters, resolved at startup to eliminate * a name-to-function mapping on each request */ static ap_filter_rec_t *cache_filter_handle; static ap_filter_rec_t *cache_save_filter_handle; static ap_filter_rec_t *cache_save_subreq_filter_handle; static ap_filter_rec_t *cache_out_filter_handle; static ap_filter_rec_t *cache_out_subreq_filter_handle; static ap_filter_rec_t *cache_remove_url_filter_handle; static ap_filter_rec_t *cache_invalidate_filter_handle; /** * Entity headers' names */ static const char *MOD_CACHE_ENTITY_HEADERS[] = { "Allow", "Content-Encoding", "Content-Language", "Content-Length", "Content-Location", "Content-MD5", "Content-Range", "Content-Type", "Last-Modified", NULL }; /* * CACHE handler * ------------- * * Can we deliver this request from the cache? * If yes: * deliver the content by installing the CACHE_OUT filter. * If no: * check whether we're allowed to try cache it * If yes: * add CACHE_SAVE filter * If No: * oh well. * * By default, the cache handler runs in the quick handler, bypassing * virtually all server processing and offering the cache its optimal * performance. In this mode, the cache bolts onto the front of the * server, and behaves as a discrete RFC2616 caching proxy * implementation. * * Under certain circumstances, an admin might want to run the cache as * a normal handler instead of a quick handler, allowing the cache to * run after the authorisation hooks, or by allowing fine control over * the placement of the cache in the filter chain. This option comes at * a performance penalty, and should only be used to achieve specific * caching goals where the admin understands what they are doing. */ static int cache_quick_handler(request_rec *r, int lookup) { apr_status_t rv; const char *auth; cache_provider_list *providers; cache_request_rec *cache; apr_bucket_brigade *out; apr_bucket *e; ap_filter_t *next; ap_filter_rec_t *cache_out_handle; cache_server_conf *conf; conf = (cache_server_conf *) ap_get_module_config(r->server->module_config, &cache_module); /* only run if the quick handler is enabled */ if (!conf->quick) { return DECLINED; } /* * Which cache module (if any) should handle this request? */ if (!(providers = cache_get_providers(r, conf))) { return DECLINED; } /* make space for the per request config */ cache = apr_pcalloc(r->pool, sizeof(cache_request_rec)); cache->size = -1; cache->out = apr_brigade_create(r->pool, r->connection->bucket_alloc); /* save away the possible providers */ cache->providers = providers; /* * Are we allowed to serve cached info at all? */ if (!ap_cache_check_no_store(cache, r)) { return DECLINED; } /* find certain cache controlling headers */ auth = apr_table_get(r->headers_in, "Authorization"); /* First things first - does the request allow us to return * cached information at all? If not, just decline the request. */ if (auth) { return DECLINED; } /* Are we PUT/POST/DELETE? If so, prepare to invalidate the cached entities. */ switch (r->method_number) { case M_PUT: case M_POST: case M_DELETE: { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(02461) "PUT/POST/DELETE: Adding CACHE_INVALIDATE filter for %s", r->uri); /* Add cache_invalidate filter to this request to force a * cache entry to be invalidated if the response is * ultimately successful (2xx). */ ap_add_output_filter_handle( cache_invalidate_filter_handle, cache, r, r->connection); return DECLINED; } case M_GET: { break; } default : { ap_log_rerror( APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(02462) "cache: Method '%s' not cacheable by mod_cache, ignoring: %s", r->method, r->uri); return DECLINED; } } /* * Try to serve this request from the cache. * * If no existing cache file (DECLINED) * add cache_save filter * If cached file (OK) * clear filter stack * add cache_out filter * return OK */ rv = cache_select(cache, r); if (rv != OK) { if (rv == DECLINED) { if (!lookup) { /* try to obtain a cache lock at this point. if we succeed, * we are the first to try and cache this url. if we fail, * it means someone else is already trying to cache this * url, and we should just let the request through to the * backend without any attempt to cache. this stops * duplicated simultaneous attempts to cache an entity. */ rv = cache_try_lock(conf, cache, r); if (APR_SUCCESS == rv) { /* * Add cache_save filter to cache this request. Choose * the correct filter by checking if we are a subrequest * or not. */ if (r->main) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00749) "Adding CACHE_SAVE_SUBREQ filter for %s", r->uri); cache->save_filter = ap_add_output_filter_handle( cache_save_subreq_filter_handle, cache, r, r->connection); } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00750) "Adding CACHE_SAVE filter for %s", r->uri); cache->save_filter = ap_add_output_filter_handle( cache_save_filter_handle, cache, r, r->connection); } apr_pool_userdata_setn(cache, CACHE_CTX_KEY, NULL, r->pool); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00751) "Adding CACHE_REMOVE_URL filter for %s", r->uri); /* Add cache_remove_url filter to this request to remove a * stale cache entry if needed. Also put the current cache * request rec in the filter context, as the request that * is available later during running the filter may be * different due to an internal redirect. */ cache->remove_url_filter = ap_add_output_filter_handle( cache_remove_url_filter_handle, cache, r, r->connection); } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(00752) "Cache locked for url, not caching " "response: %s", r->uri); /* cache_select() may have added conditional headers */ if (cache->stale_headers) { r->headers_in = cache->stale_headers; } } } else { if (cache->stale_headers) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00753) "Restoring request headers for %s", r->uri); r->headers_in = cache->stale_headers; } } } else { /* error */ return rv; } return DECLINED; } /* we've got a cache hit! tell everyone who cares */ cache_run_cache_status(cache->handle, r, r->headers_out, AP_CACHE_HIT, "cache hit"); /* if we are a lookup, we are exiting soon one way or another; Restore * the headers. */ if (lookup) { if (cache->stale_headers) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00754) "Restoring request headers."); r->headers_in = cache->stale_headers; } } rv = ap_meets_conditions(r); if (rv != OK) { /* If we are a lookup, we have to return DECLINED as we have no * way of knowing if we will be able to serve the content. */ if (lookup) { return DECLINED; } /* Return cached status. */ return rv; } /* If we're a lookup, we can exit now instead of serving the content. */ if (lookup) { return OK; } /* Serve up the content */ /* We are in the quick handler hook, which means that no output * filters have been set. So lets run the insert_filter hook. */ ap_run_insert_filter(r); /* * Add cache_out filter to serve this request. Choose * the correct filter by checking if we are a subrequest * or not. */ if (r->main) { cache_out_handle = cache_out_subreq_filter_handle; } else { cache_out_handle = cache_out_filter_handle; } ap_add_output_filter_handle(cache_out_handle, cache, r, r->connection); /* * Remove all filters that are before the cache_out filter. This ensures * that we kick off the filter stack with our cache_out filter being the * first in the chain. This make sense because we want to restore things * in the same manner as we saved them. * There may be filters before our cache_out filter, because * * 1. We call ap_set_content_type during cache_select. This causes * Content-Type specific filters to be added. * 2. We call the insert_filter hook. This causes filters e.g. like * the ones set with SetOutputFilter to be added. */ next = r->output_filters; while (next && (next->frec != cache_out_handle)) { ap_remove_output_filter(next); next = next->next; } /* kick off the filter stack */ out = apr_brigade_create(r->pool, r->connection->bucket_alloc); e = apr_bucket_eos_create(out->bucket_alloc); APR_BRIGADE_INSERT_TAIL(out, e); return ap_pass_brigade_fchk(r, out, "cache_quick_handler(%s): ap_pass_brigade returned", cache->provider_name); } /** * If the two filter handles are present within the filter chain, replace * the last instance of the first filter with the last instance of the * second filter, and return true. If the second filter is not present at * all, the first filter is removed, and false is returned. If neither * filter is present, false is returned and this function does nothing. * If a stop filter is specified, processing will stop once this filter is * reached. */ static int cache_replace_filter(ap_filter_t *next, ap_filter_rec_t *from, ap_filter_rec_t *to, ap_filter_rec_t *stop) { ap_filter_t *ffrom = NULL, *fto = NULL; while (next && next->frec != stop) { if (next->frec == from) { ffrom = next; } if (next->frec == to) { fto = next; } next = next->next; } if (ffrom && fto) { ffrom->frec = fto->frec; ffrom->ctx = fto->ctx; ap_remove_output_filter(fto); return 1; } if (ffrom) { ap_remove_output_filter(ffrom); } return 0; } /** * Find the given filter, and return it if found, or NULL otherwise. */ static ap_filter_t *cache_get_filter(ap_filter_t *next, ap_filter_rec_t *rec) { while (next) { if (next->frec == rec && next->ctx) { break; } next = next->next; } return next; } /** * The cache handler is functionally similar to the cache_quick_hander, * however a number of steps that are required by the quick handler are * not required here, as the normal httpd processing has already handled * these steps. */ static int cache_handler(request_rec *r) { apr_status_t rv; cache_provider_list *providers; cache_request_rec *cache; apr_bucket_brigade *out; apr_bucket *e; ap_filter_t *next; ap_filter_rec_t *cache_out_handle; ap_filter_rec_t *cache_save_handle; cache_server_conf *conf; conf = (cache_server_conf *) ap_get_module_config(r->server->module_config, &cache_module); /* only run if the quick handler is disabled */ if (conf->quick) { return DECLINED; } /* * Which cache module (if any) should handle this request? */ if (!(providers = cache_get_providers(r, conf))) { return DECLINED; } /* make space for the per request config */ cache = apr_pcalloc(r->pool, sizeof(cache_request_rec)); cache->size = -1; cache->out = apr_brigade_create(r->pool, r->connection->bucket_alloc); /* save away the possible providers */ cache->providers = providers; /* * Are we allowed to serve cached info at all? */ if (!ap_cache_check_no_store(cache, r)) { return DECLINED; } /* Are we PUT/POST/DELETE? If so, prepare to invalidate the cached entities. */ switch (r->method_number) { case M_PUT: case M_POST: case M_DELETE: { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(02463) "PUT/POST/DELETE: Adding CACHE_INVALIDATE filter for %s", r->uri); /* Add cache_invalidate filter to this request to force a * cache entry to be invalidated if the response is * ultimately successful (2xx). */ ap_add_output_filter_handle( cache_invalidate_filter_handle, cache, r, r->connection); return DECLINED; } case M_GET: { break; } default : { ap_log_rerror( APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(02464) "cache: Method '%s' not cacheable by mod_cache, ignoring: %s", r->method, r->uri); return DECLINED; } } /* * Try to serve this request from the cache. * * If no existing cache file (DECLINED) * add cache_save filter * If cached file (OK) * clear filter stack * add cache_out filter * return OK */ rv = cache_select(cache, r); if (rv != OK) { if (rv == DECLINED) { /* try to obtain a cache lock at this point. if we succeed, * we are the first to try and cache this url. if we fail, * it means someone else is already trying to cache this * url, and we should just let the request through to the * backend without any attempt to cache. this stops * duplicated simultaneous attempts to cache an entity. */ rv = cache_try_lock(conf, cache, r); if (APR_SUCCESS == rv) { /* * Add cache_save filter to cache this request. Choose * the correct filter by checking if we are a subrequest * or not. */ if (r->main) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00756) "Adding CACHE_SAVE_SUBREQ filter for %s", r->uri); cache_save_handle = cache_save_subreq_filter_handle; } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00757) "Adding CACHE_SAVE filter for %s", r->uri); cache_save_handle = cache_save_filter_handle; } ap_add_output_filter_handle(cache_save_handle, cache, r, r->connection); /* * Did the user indicate the precise location of the * CACHE_SAVE filter by inserting the CACHE filter as a * marker? * * If so, we get cunning and replace CACHE with the * CACHE_SAVE filter. This has the effect of inserting * the CACHE_SAVE filter at the precise location where * the admin wants to cache the content. All filters that * lie before and after the original location of the CACHE * filter will remain in place. */ if (cache_replace_filter(r->output_filters, cache_filter_handle, cache_save_handle, ap_get_input_filter_handle("SUBREQ_CORE"))) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00758) "Replacing CACHE with CACHE_SAVE " "filter for %s", r->uri); } /* save away the save filter stack */ cache->save_filter = cache_get_filter(r->output_filters, cache_save_filter_handle); apr_pool_userdata_setn(cache, CACHE_CTX_KEY, NULL, r->pool); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00759) "Adding CACHE_REMOVE_URL filter for %s", r->uri); /* Add cache_remove_url filter to this request to remove a * stale cache entry if needed. Also put the current cache * request rec in the filter context, as the request that * is available later during running the filter may be * different due to an internal redirect. */ cache->remove_url_filter = ap_add_output_filter_handle( cache_remove_url_filter_handle, cache, r, r->connection); } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(00760) "Cache locked for url, not caching " "response: %s", r->uri); } } else { /* error */ return rv; } return DECLINED; } /* we've got a cache hit! tell everyone who cares */ cache_run_cache_status(cache->handle, r, r->headers_out, AP_CACHE_HIT, "cache hit"); rv = ap_meets_conditions(r); if (rv != OK) { return rv; } /* Serve up the content */ /* * Add cache_out filter to serve this request. Choose * the correct filter by checking if we are a subrequest * or not. */ if (r->main) { cache_out_handle = cache_out_subreq_filter_handle; } else { cache_out_handle = cache_out_filter_handle; } ap_add_output_filter_handle(cache_out_handle, cache, r, r->connection); /* * Did the user indicate the precise location of the CACHE_OUT filter by * inserting the CACHE filter as a marker? * * If so, we get cunning and replace CACHE with the CACHE_OUT filters. * This has the effect of inserting the CACHE_OUT filter at the precise * location where the admin wants to cache the content. All filters that * lie *after* the original location of the CACHE filter will remain in * place. */ if (cache_replace_filter(r->output_filters, cache_filter_handle, cache_out_handle, ap_get_input_filter_handle("SUBREQ_CORE"))) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00761) "Replacing CACHE with CACHE_OUT filter for %s", r->uri); } /* * Remove all filters that are before the cache_out filter. This ensures * that we kick off the filter stack with our cache_out filter being the * first in the chain. This make sense because we want to restore things * in the same manner as we saved them. * There may be filters before our cache_out filter, because * * 1. We call ap_set_content_type during cache_select. This causes * Content-Type specific filters to be added. * 2. We call the insert_filter hook. This causes filters e.g. like * the ones set with SetOutputFilter to be added. */ next = r->output_filters; while (next && (next->frec != cache_out_handle)) { ap_remove_output_filter(next); next = next->next; } /* kick off the filter stack */ out = apr_brigade_create(r->pool, r->connection->bucket_alloc); e = apr_bucket_eos_create(out->bucket_alloc); APR_BRIGADE_INSERT_TAIL(out, e); return ap_pass_brigade_fchk(r, out, "cache(%s): ap_pass_brigade returned", cache->provider_name); } /* * CACHE_OUT filter * ---------------- * * Deliver cached content (headers and body) up the stack. */ static apr_status_t cache_out_filter(ap_filter_t *f, apr_bucket_brigade *in) { request_rec *r = f->r; cache_request_rec *cache = (cache_request_rec *)f->ctx; if (!cache) { /* user likely configured CACHE_OUT manually; they should use mod_cache * configuration to do that */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00762) "CACHE/CACHE_OUT filter enabled while caching is disabled, ignoring"); ap_remove_output_filter(f); return ap_pass_brigade(f->next, in); } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00763) "cache: running CACHE_OUT filter"); /* clean out any previous response up to EOS, if any */ while (!APR_BRIGADE_EMPTY(in)) { apr_bucket *e = APR_BRIGADE_FIRST(in); if (APR_BUCKET_IS_EOS(e)) { apr_bucket_brigade *bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); /* restore content type of cached response if available */ /* Needed especially when stale content gets served. */ const char *ct = apr_table_get(cache->handle->resp_hdrs, "Content-Type"); if (ct) { ap_set_content_type(r, ct); } /* restore status of cached response */ r->status = cache->handle->cache_obj->info.status; /* recall_headers() was called in cache_select() */ cache->provider->recall_body(cache->handle, r->pool, bb); APR_BRIGADE_PREPEND(in, bb); /* This filter is done once it has served up its content */ ap_remove_output_filter(f); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00764) "cache: serving %s", r->uri); return ap_pass_brigade(f->next, in); } apr_bucket_delete(e); } return APR_SUCCESS; } /* * Having jumped through all the hoops and decided to cache the * response, call store_body() for each brigade, handling the * case where the provider can't swallow the full brigade. In this * case, we write the brigade we were passed out downstream, and * loop around to try and cache some more until the in brigade is * completely empty. As soon as the out brigade contains eos, call * commit_entity() to finalise the cached element. */ static int cache_save_store(ap_filter_t *f, apr_bucket_brigade *in, cache_server_conf *conf, cache_request_rec *cache) { int rv = APR_SUCCESS; apr_bucket *e; /* pass the brigade in into the cache provider, which is then * expected to move cached buckets to the out brigade, for us * to pass up the filter stack. repeat until in is empty, or * we fail. */ while (APR_SUCCESS == rv && !APR_BRIGADE_EMPTY(in)) { rv = cache->provider->store_body(cache->handle, f->r, in, cache->out); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, f->r, APLOGNO(00765) "cache: Cache provider's store_body failed for URI %s", f->r->uri); ap_remove_output_filter(f); /* give someone else the chance to cache the file */ cache_remove_lock(conf, cache, f->r, NULL); /* give up trying to cache, just step out the way */ APR_BRIGADE_PREPEND(in, cache->out); return ap_pass_brigade(f->next, in); } /* does the out brigade contain eos? if so, we're done, commit! */ for (e = APR_BRIGADE_FIRST(cache->out); e != APR_BRIGADE_SENTINEL(cache->out); e = APR_BUCKET_NEXT(e)) { if (APR_BUCKET_IS_EOS(e)) { rv = cache->provider->commit_entity(cache->handle, f->r); break; } } /* conditionally remove the lock as soon as we see the eos bucket */ cache_remove_lock(conf, cache, f->r, cache->out); if (APR_BRIGADE_EMPTY(cache->out)) { if (APR_BRIGADE_EMPTY(in)) { /* cache provider wants more data before passing the brigade * upstream, oblige the provider by leaving to fetch more. */ break; } else { /* oops, no data out, but not all data read in either, be * safe and stand down to prevent a spin. */ ap_log_rerror(APLOG_MARK, APLOG_WARNING, rv, f->r, APLOGNO(00766) "cache: Cache provider's store_body returned an " "empty brigade, but didn't consume all of the " "input brigade, standing down to prevent a spin"); ap_remove_output_filter(f); /* give someone else the chance to cache the file */ cache_remove_lock(conf, cache, f->r, NULL); return ap_pass_brigade(f->next, in); } } rv = ap_pass_brigade(f->next, cache->out); } return rv; } /** * Sanity check for 304 Not Modified responses, as per RFC2616 Section 10.3.5. */ static int cache_header_cmp(apr_pool_t *pool, apr_table_t *left, apr_table_t *right, const char *key) { const char *h1, *h2; if ((h1 = cache_table_getm(pool, left, key)) && (h2 = cache_table_getm(pool, right, key)) && (strcmp(h1, h2))) { return 1; } return 0; } /* * CACHE_SAVE filter * --------------- * * Decide whether or not this content should be cached. * If we decide no it should not: * remove the filter from the chain * If we decide yes it should: * Have we already started saving the response? * If we have started, pass the data to the storage manager via store_body * Otherwise: * Check to see if we *can* save this particular response. * If we can, call cache_create_entity() and save the headers and body * Finally, pass the data to the next filter (the network or whatever) * * After the various failure cases, the cache lock is proactively removed, so * that another request is given the opportunity to attempt to cache without * waiting for a potentially slow client to acknowledge the failure. */ static apr_status_t cache_save_filter(ap_filter_t *f, apr_bucket_brigade *in) { int rv = !OK; request_rec *r = f->r; cache_request_rec *cache = (cache_request_rec *)f->ctx; cache_server_conf *conf; cache_dir_conf *dconf; cache_control_t control; const char *cc_out, *cl, *pragma; const char *exps, *lastmods, *dates, *etag; apr_time_t exp, date, lastmod, now; apr_off_t size = -1; cache_info *info = NULL; const char *reason, **eh; apr_pool_t *p; apr_bucket *e; apr_table_t *headers; const char *query; conf = (cache_server_conf *) ap_get_module_config(r->server->module_config, &cache_module); /* Setup cache_request_rec */ if (!cache) { /* user likely configured CACHE_SAVE manually; they should really use * mod_cache configuration to do that */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00767) "CACHE/CACHE_SAVE filter enabled while caching is disabled, ignoring"); ap_remove_output_filter(f); return ap_pass_brigade(f->next, in); } reason = NULL; p = r->pool; /* * Pass Data to Cache * ------------------ * This section passes the brigades into the cache modules, but only * if the setup section (see below) is complete. */ if (cache->block_response) { /* We've already sent down the response and EOS. So, ignore * whatever comes now. */ return APR_SUCCESS; } /* have we already run the cacheability check and set up the * cached file handle? */ if (cache->in_checked) { return cache_save_store(f, in, conf, cache); } /* * Setup Data in Cache * ------------------- * This section opens the cache entity and sets various caching * parameters, and decides whether this URL should be cached at * all. This section is* run before the above section. */ dconf = ap_get_module_config(r->per_dir_config, &cache_module); /* RFC2616 13.8 Errors or Incomplete Response Cache Behavior: * If a cache receives a 5xx response while attempting to revalidate an * entry, it MAY either forward this response to the requesting client, * or act as if the server failed to respond. In the latter case, it MAY * return a previously received response unless the cached entry * includes the "must-revalidate" cache-control directive (see section * 14.9). * * This covers the case where an error was generated behind us, for example * by a backend server via mod_proxy. */ if (dconf->stale_on_error && r->status >= HTTP_INTERNAL_SERVER_ERROR) { ap_remove_output_filter(cache->remove_url_filter); if (cache->stale_handle && !cache->stale_handle->cache_obj->info.control.must_revalidate && !cache->stale_handle->cache_obj->info.control.proxy_revalidate) { const char *warn_head; /* morph the current save filter into the out filter, and serve from * cache. */ cache->handle = cache->stale_handle; if (r->main) { f->frec = cache_out_subreq_filter_handle; } else { f->frec = cache_out_filter_handle; } r->headers_out = cache->stale_handle->resp_hdrs; ap_set_content_type(r, apr_table_get( cache->stale_handle->resp_hdrs, "Content-Type")); /* add a revalidation warning */ warn_head = apr_table_get(r->err_headers_out, "Warning"); if ((warn_head == NULL) || ((warn_head != NULL) && (ap_strstr_c(warn_head, "111") == NULL))) { apr_table_mergen(r->err_headers_out, "Warning", "111 Revalidation failed"); } cache_run_cache_status(cache->handle, r, r->headers_out, AP_CACHE_HIT, apr_psprintf(r->pool, "cache hit: %d status; stale content returned", r->status)); /* give someone else the chance to cache the file */ cache_remove_lock(conf, cache, f->r, NULL); /* pass brigade to our morphed out filter */ return ap_pass_brigade(f, in); } } query = cache_use_early_url(r) ? r->parsed_uri.query : r->args; /* read expiry date; if a bad date, then leave it so the client can * read it */ exps = apr_table_get(r->err_headers_out, "Expires"); if (exps == NULL) { exps = apr_table_get(r->headers_out, "Expires"); } if (exps != NULL) { exp = apr_date_parse_http(exps); } else { exp = APR_DATE_BAD; } /* read the last-modified date; if the date is bad, then delete it */ lastmods = apr_table_get(r->err_headers_out, "Last-Modified"); if (lastmods == NULL) { lastmods = apr_table_get(r->headers_out, "Last-Modified"); } if (lastmods != NULL) { lastmod = apr_date_parse_http(lastmods); if (lastmod == APR_DATE_BAD) { lastmods = NULL; } } else { lastmod = APR_DATE_BAD; } /* read the etag and cache-control from the entity */ etag = apr_table_get(r->err_headers_out, "Etag"); if (etag == NULL) { etag = apr_table_get(r->headers_out, "Etag"); } cc_out = cache_table_getm(r->pool, r->err_headers_out, "Cache-Control"); pragma = cache_table_getm(r->pool, r->err_headers_out, "Pragma"); headers = r->err_headers_out; if (!cc_out && !pragma) { cc_out = cache_table_getm(r->pool, r->headers_out, "Cache-Control"); pragma = cache_table_getm(r->pool, r->headers_out, "Pragma"); headers = r->headers_out; } /* Have we received a 304 response without any headers at all? Fall back to * the original headers in the original cached request. */ if (r->status == HTTP_NOT_MODIFIED && cache->stale_handle) { if (!cc_out && !pragma) { cc_out = cache_table_getm(r->pool, cache->stale_handle->resp_hdrs, "Cache-Control"); pragma = cache_table_getm(r->pool, cache->stale_handle->resp_hdrs, "Pragma"); } /* 304 does not contain Content-Type and mod_mime regenerates the * Content-Type based on the r->filename. This would lead to original * Content-Type to be lost (overwriten by whatever mod_mime generates). * We preserves the original Content-Type here. */ ap_set_content_type(r, apr_table_get( cache->stale_handle->resp_hdrs, "Content-Type")); } /* Parse the cache control header */ memset(&control, 0, sizeof(cache_control_t)); ap_cache_control(r, &control, cc_out, pragma, headers); /* * what responses should we not cache? * * At this point we decide based on the response headers whether it * is appropriate _NOT_ to cache the data from the server. There are * a whole lot of conditions that prevent us from caching this data. * They are tested here one by one to be clear and unambiguous. */ if (r->status != HTTP_OK && r->status != HTTP_NON_AUTHORITATIVE && r->status != HTTP_PARTIAL_CONTENT && r->status != HTTP_MULTIPLE_CHOICES && r->status != HTTP_MOVED_PERMANENTLY && r->status != HTTP_NOT_MODIFIED) { /* RFC2616 13.4 we are allowed to cache 200, 203, 206, 300, 301 or 410 * We allow the caching of 206, but a cache implementation might choose * to decline to cache a 206 if it doesn't know how to. * We include 304 Not Modified here too as this is the origin server * telling us to serve the cached copy. */ if (exps != NULL || cc_out != NULL) { /* We are also allowed to cache any response given that it has a * valid Expires or Cache Control header. If we find a either of * those here, we pass request through the rest of the tests. From * the RFC: * * A response received with any other status code (e.g. status * codes 302 and 307) MUST NOT be returned in a reply to a * subsequent request unless there are cache-control directives or * another header(s) that explicitly allow it. For example, these * include the following: an Expires header (section 14.21); a * "max-age", "s-maxage", "must-revalidate", "proxy-revalidate", * "public" or "private" cache-control directive (section 14.9). * * FIXME: Wrong if cc_out has just an extension we don't know about */ } else { reason = apr_psprintf(p, "Response status %d", r->status); } } if (reason) { /* noop */ } else if (!control.s_maxage && !control.max_age && !dconf->store_expired && exps != NULL && exp == APR_DATE_BAD) { /* if a broken Expires header is present, don't cache it * Unless CC: s-maxage or max-age is present */ reason = apr_pstrcat(p, "Broken expires header: ", exps, NULL); } else if (!control.s_maxage && !control.max_age && !dconf->store_expired && exp != APR_DATE_BAD && exp < r->request_time) { /* if a Expires header is in the past, don't cache it * Unless CC: s-maxage or max-age is present */ reason = "Expires header already expired; not cacheable"; } else if (!dconf->store_expired && (control.must_revalidate || control.proxy_revalidate) && (!control.s_maxage_value || (!control.s_maxage && !control.max_age_value)) && lastmods == NULL && etag == NULL) { /* if we're already stale, but can never revalidate, don't cache it */ reason = "s-maxage or max-age zero and no Last-Modified or Etag; not cacheable"; } else if (!conf->ignorequerystring && query && exps == NULL && !control.max_age && !control.s_maxage) { /* if a query string is present but no explicit expiration time, * don't cache it (RFC 2616/13.9 & 13.2.1) */ reason = "Query string present but no explicit expiration time"; } else if (r->status == HTTP_NOT_MODIFIED && !cache->handle && !cache->stale_handle) { /* if the server said 304 Not Modified but we have no cache * file - pass this untouched to the user agent, it's not for us. */ reason = "HTTP Status 304 Not Modified"; } else if (r->status == HTTP_OK && lastmods == NULL && etag == NULL && (exps == NULL) && (dconf->no_last_mod_ignore == 0) && !control.max_age && !control.s_maxage) { /* 200 OK response from HTTP/1.0 and up without Last-Modified, * Etag, Expires, Cache-Control:max-age, or Cache-Control:s-maxage * headers. */ /* Note: mod-include clears last_modified/expires/etags - this * is why we have an optional function for a key-gen ;-) */ reason = "No Last-Modified; Etag; Expires; Cache-Control:max-age or Cache-Control:s-maxage headers"; } else if (!dconf->store_nostore && control.no_store) { /* RFC2616 14.9.2 Cache-Control: no-store response * indicating do not cache, or stop now if you are * trying to cache it. */ reason = "Cache-Control: no-store present"; } else if (!dconf->store_private && control.private) { /* RFC2616 14.9.1 Cache-Control: private response * this object is marked for this user's eyes only. Behave * as a tunnel. */ reason = "Cache-Control: private present"; } else if (apr_table_get(r->headers_in, "Authorization") && !(control.s_maxage || control.must_revalidate || control.proxy_revalidate || control.public)) { /* RFC2616 14.8 Authorisation: * if authorisation is included in the request, we don't cache, * but we can cache if the following exceptions are true: * 1) If Cache-Control: s-maxage is included * 2) If Cache-Control: must-revalidate is included * 3) If Cache-Control: public is included */ reason = "Authorization required"; } else if (ap_find_token(NULL, apr_table_get(r->headers_out, "Vary"), "*")) { reason = "Vary header contains '*'"; } else if (apr_table_get(r->subprocess_env, "no-cache") != NULL) { reason = "environment variable 'no-cache' is set"; } else if (r->no_cache) { /* or we've been asked not to cache it above */ reason = "r->no_cache present"; } else if (cache->stale_handle && APR_DATE_BAD != (date = apr_date_parse_http( apr_table_get(r->headers_out, "Date"))) && date < cache->stale_handle->cache_obj->info.date) { /** * 13.12 Cache Replacement: * * Note: a new response that has an older Date header value than * existing cached responses is not cacheable. */ reason = "updated entity is older than cached entity"; /* while this response is not cacheable, the previous response still is */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02474) "cache: Removing CACHE_REMOVE_URL filter."); ap_remove_output_filter(cache->remove_url_filter); } else if (r->status == HTTP_NOT_MODIFIED && cache->stale_handle) { apr_table_t *left = cache->stale_handle->resp_hdrs; apr_table_t *right = r->headers_out; const char *ehs = NULL; /* and lastly, contradiction checks for revalidated responses * as per RFC2616 Section 10.3.5 */ if (cache_header_cmp(r->pool, left, right, "ETag")) { ehs = "ETag"; } for (eh = MOD_CACHE_ENTITY_HEADERS; *eh; ++eh) { if (cache_header_cmp(r->pool, left, right, *eh)) { ehs = (ehs) ? apr_pstrcat(r->pool, ehs, ", ", *eh, NULL) : *eh; } } if (ehs) { reason = apr_pstrcat(r->pool, "contradiction: 304 Not Modified; " "but ", ehs, " modified", NULL); } } /** * Enforce RFC2616 Section 10.3.5, just in case. We caught any * inconsistencies above. * * If the conditional GET used a strong cache validator (see section * 13.3.3), the response SHOULD NOT include other entity-headers. * Otherwise (i.e., the conditional GET used a weak validator), the * response MUST NOT include other entity-headers; this prevents * inconsistencies between cached entity-bodies and updated headers. */ if (r->status == HTTP_NOT_MODIFIED) { for (eh = MOD_CACHE_ENTITY_HEADERS; *eh; ++eh) { apr_table_unset(r->headers_out, *eh); } } /* Hold the phone. Some servers might allow us to cache a 2xx, but * then make their 304 responses non cacheable. RFC2616 says this: * * If a 304 response indicates an entity not currently cached, then * the cache MUST disregard the response and repeat the request * without the conditional. * * A 304 response with contradictory headers is technically a * different entity, to be safe, we remove the entity from the cache. */ if (reason && r->status == HTTP_NOT_MODIFIED && cache->stale_handle) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02473) "cache: %s responded with an uncacheable 304, " "retrying the request %s. Reason: %s", cache->key, r->unparsed_uri, reason); /* we've got a cache conditional miss! tell anyone who cares */ cache_run_cache_status(cache->handle, r, r->headers_out, AP_CACHE_MISS, apr_psprintf(r->pool, "conditional cache miss: 304 was uncacheable, entity removed: %s", reason)); /* remove the cached entity immediately, we might cache it again */ ap_remove_output_filter(cache->remove_url_filter); cache_remove_url(cache, r); /* let someone else attempt to cache */ cache_remove_lock(conf, cache, r, NULL); /* remove this filter from the chain */ ap_remove_output_filter(f); /* retry without the conditionals */ apr_table_unset(r->headers_in, "If-Match"); apr_table_unset(r->headers_in, "If-Modified-Since"); apr_table_unset(r->headers_in, "If-None-Match"); apr_table_unset(r->headers_in, "If-Range"); apr_table_unset(r->headers_in, "If-Unmodified-Since"); /* Currently HTTP_NOT_MODIFIED, and after the redirect, handlers won't think to set status to HTTP_OK */ r->status = HTTP_OK; ap_internal_redirect(r->unparsed_uri, r); return APR_SUCCESS; } if (reason) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00768) "cache: %s not cached for request %s. Reason: %s", cache->key, r->unparsed_uri, reason); /* we've got a cache miss! tell anyone who cares */ cache_run_cache_status(cache->handle, r, r->headers_out, AP_CACHE_MISS, reason); /* remove this filter from the chain */ ap_remove_output_filter(f); /* remove the lock file unconditionally */ cache_remove_lock(conf, cache, r, NULL); /* ship the data up the stack */ return ap_pass_brigade(f->next, in); } /* Make it so that we don't execute this path again. */ cache->in_checked = 1; /* Set the content length if known. */ cl = apr_table_get(r->err_headers_out, "Content-Length"); if (cl == NULL) { cl = apr_table_get(r->headers_out, "Content-Length"); } if (cl) { char *errp; if (apr_strtoff(&size, cl, &errp, 10) || *errp || size < 0) { cl = NULL; /* parse error, see next 'if' block */ } } if (!cl) { /* if we don't get the content-length, see if we have all the * buckets and use their length to calculate the size */ int all_buckets_here=0; size=0; for (e = APR_BRIGADE_FIRST(in); e != APR_BRIGADE_SENTINEL(in); e = APR_BUCKET_NEXT(e)) { if (APR_BUCKET_IS_EOS(e)) { all_buckets_here=1; break; } if (APR_BUCKET_IS_FLUSH(e)) { continue; } if (e->length == (apr_size_t)-1) { break; } size += e->length; } if (!all_buckets_here) { size = -1; } } /* remember content length to check response size against later */ cache->size = size; /* It's safe to cache the response. * * There are two possibilities at this point: * - cache->handle == NULL. In this case there is no previously * cached entity anywhere on the system. We must create a brand * new entity and store the response in it. * - cache->stale_handle != NULL. In this case there is a stale * entity in the system which needs to be replaced by new * content (unless the result was 304 Not Modified, which means * the cached entity is actually fresh, and we should update * the headers). */ /* Did we have a stale cache entry that really is stale? */ if (cache->stale_handle) { if (r->status == HTTP_NOT_MODIFIED) { /* Oh, hey. It isn't that stale! Yay! */ cache->handle = cache->stale_handle; info = &cache->handle->cache_obj->info; rv = OK; } else { /* Oh, well. Toss it. */ cache->provider->remove_entity(cache->stale_handle); /* Treat the request as if it wasn't conditional. */ cache->stale_handle = NULL; /* * Restore the original request headers as they may be needed * by further output filters like the byterange filter to make * the correct decisions. */ r->headers_in = cache->stale_headers; } } /* no cache handle, create a new entity */ if (!cache->handle) { rv = cache_create_entity(cache, r, size, in); info = apr_pcalloc(r->pool, sizeof(cache_info)); /* We only set info->status upon the initial creation. */ info->status = r->status; } if (rv != OK) { /* we've got a cache miss! tell anyone who cares */ cache_run_cache_status(cache->handle, r, r->headers_out, AP_CACHE_MISS, "cache miss: cache unwilling to store response"); /* Caching layer declined the opportunity to cache the response */ ap_remove_output_filter(f); cache_remove_lock(conf, cache, r, NULL); return ap_pass_brigade(f->next, in); } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00769) "cache: Caching url %s for request %s", cache->key, r->unparsed_uri); /* We are actually caching this response. So it does not * make sense to remove this entity any more. */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00770) "cache: Removing CACHE_REMOVE_URL filter."); ap_remove_output_filter(cache->remove_url_filter); /* * We now want to update the cache file header information with * the new date, last modified, expire and content length and write * it away to our cache file. First, we determine these values from * the response, using heuristics if appropriate. * * In addition, we make HTTP/1.1 age calculations and write them away * too. */ /* store away the previously parsed cache control headers */ memcpy(&info->control, &control, sizeof(cache_control_t)); /* Read the date. Generate one if one is not supplied */ dates = apr_table_get(r->err_headers_out, "Date"); if (dates == NULL) { dates = apr_table_get(r->headers_out, "Date"); } if (dates != NULL) { info->date = apr_date_parse_http(dates); } else { info->date = APR_DATE_BAD; } now = apr_time_now(); if (info->date == APR_DATE_BAD) { /* No, or bad date */ /* no date header (or bad header)! */ info->date = now; } date = info->date; /* set response_time for HTTP/1.1 age calculations */ info->response_time = now; /* get the request time */ info->request_time = r->request_time; /* check last-modified date */ if (lastmod != APR_DATE_BAD && lastmod > date) { /* if it's in the future, then replace by date */ lastmod = date; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00771) "cache: Last modified is in the future, " "replacing with now"); } /* CC has priority over Expires. */ if (control.s_maxage || control.max_age) { apr_int64_t x; x = control.s_maxage ? control.s_maxage_value : control.max_age_value; x = x * MSEC_ONE_SEC; if (x < dconf->minex) { x = dconf->minex; } if (x > dconf->maxex) { x = dconf->maxex; } exp = date + x; } /* if no expiry date then * if Cache-Control: s-maxage * expiry date = date + smaxage * if Cache-Control: max-age * expiry date = date + max-age * else if lastmod * expiry date = date + min((date - lastmod) * factor, maxexpire) * else * expire date = date + defaultexpire */ if (exp == APR_DATE_BAD) { if ((lastmod != APR_DATE_BAD) && (lastmod < date)) { /* if lastmod == date then you get 0*conf->factor which results in * an expiration time of now. This causes some problems with * freshness calculations, so we choose the else path... */ apr_time_t x = (apr_time_t) ((date - lastmod) * dconf->factor); if (x < dconf->minex) { x = dconf->minex; } if (x > dconf->maxex) { x = dconf->maxex; } exp = date + x; } else { exp = date + dconf->defex; } } info->expire = exp; /* We found a stale entry which wasn't really stale. */ if (cache->stale_handle) { /* RFC 2616 10.3.5 states that entity headers are not supposed * to be in the 304 response. Therefore, we need to combine the * response headers with the cached headers *before* we update * the cached headers. * * However, before doing that, we need to first merge in * err_headers_out (note that store_headers() below already selects * the cacheable only headers using ap_cache_cacheable_headers_out(), * here we want to keep the original headers in r->headers_out and * forward all of them to the client, including non-cacheable ones). */ r->headers_out = cache_merge_headers_out(r); apr_table_clear(r->err_headers_out); /* Merge in our cached headers. However, keep any updated values. */ /* take output, overlay on top of cached */ cache_accept_headers(cache->handle, r, r->headers_out, cache->handle->resp_hdrs, 1); } /* Write away header information to cache. It is possible that we are * trying to update headers for an entity which has already been cached. * * This may fail, due to an unwritable cache area. E.g. filesystem full, * permissions problems or a read-only (re)mount. This must be handled * later. */ rv = cache->provider->store_headers(cache->handle, r, info); /* Did we just update the cached headers on a revalidated response? * * If so, we can now decide what to serve to the client. This is done in * the same way as with a regular response, but conditions are now checked * against the cached or merged response headers. */ if (cache->stale_handle) { apr_bucket_brigade *bb; apr_bucket *bkt; int status; /* Load in the saved status and clear the status line. */ r->status = info->status; r->status_line = NULL; /* We're just saving response headers, so we are done. Commit * the response at this point, unless there was a previous error. */ if (rv == APR_SUCCESS) { rv = cache->provider->commit_entity(cache->handle, r); } bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); /* Restore the original request headers and see if we need to * return anything else than the cached response (ie. the original * request was conditional). */ r->headers_in = cache->stale_headers; status = ap_meets_conditions(r); if (status != OK) { r->status = status; /* Strip the entity headers merged from the cached headers before * updating the entry (see cache_accept_headers() above). */ for (eh = MOD_CACHE_ENTITY_HEADERS; *eh; ++eh) { apr_table_unset(r->headers_out, *eh); } bkt = apr_bucket_flush_create(bb->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, bkt); } else { cache->provider->recall_body(cache->handle, r->pool, bb); bkt = apr_bucket_eos_create(bb->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, bkt); } cache->block_response = 1; /* Before returning we need to handle the possible case of an * unwritable cache. Rather than leaving the entity in the cache * and having it constantly re-validated, now that we have recalled * the body it is safe to try and remove the url from the cache. */ if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(00772) "cache: updating headers with store_headers failed. " "Removing cached url."); rv = cache->provider->remove_url(cache->stale_handle, r); if (rv != OK) { /* Probably a mod_cache_disk cache area has been (re)mounted * read-only, or that there is a permissions problem. */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(00773) "cache: attempt to remove url from cache unsuccessful."); } /* we've got a cache conditional hit! tell anyone who cares */ cache_run_cache_status(cache->handle, r, r->headers_out, AP_CACHE_REVALIDATE, "conditional cache hit: entity refresh failed"); } else { /* we've got a cache conditional hit! tell anyone who cares */ cache_run_cache_status(cache->handle, r, r->headers_out, AP_CACHE_REVALIDATE, "conditional cache hit: entity refreshed"); } /* let someone else attempt to cache */ cache_remove_lock(conf, cache, r, NULL); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(02971) "cache: serving %s (revalidated)", r->uri); return ap_pass_brigade(f->next, bb); } if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(00774) "cache: store_headers failed"); /* we've got a cache miss! tell anyone who cares */ cache_run_cache_status(cache->handle, r, r->headers_out, AP_CACHE_MISS, "cache miss: store_headers failed"); ap_remove_output_filter(f); cache_remove_lock(conf, cache, r, NULL); return ap_pass_brigade(f->next, in); } /* we've got a cache miss! tell anyone who cares */ cache_run_cache_status(cache->handle, r, r->headers_out, AP_CACHE_MISS, "cache miss: attempting entity save"); return cache_save_store(f, in, conf, cache); } /* * CACHE_REMOVE_URL filter * ----------------------- * * This filter gets added in the quick handler every time the CACHE_SAVE filter * gets inserted. Its purpose is to remove a confirmed stale cache entry from * the cache. * * CACHE_REMOVE_URL has to be a protocol filter to ensure that is run even if * the response is a canned error message, which removes the content filters * and thus the CACHE_SAVE filter from the chain. * * CACHE_REMOVE_URL expects cache request rec within its context because the * request this filter runs on can be different from the one whose cache entry * should be removed, due to internal redirects. * * Note that CACHE_SAVE_URL (as a content-set filter, hence run before the * protocol filters) will remove this filter if it decides to cache the file. * Therefore, if this filter is left in, it must mean we need to toss any * existing files. */ static apr_status_t cache_remove_url_filter(ap_filter_t *f, apr_bucket_brigade *in) { request_rec *r = f->r; cache_request_rec *cache; /* Setup cache_request_rec */ cache = (cache_request_rec *) f->ctx; if (!cache) { /* user likely configured CACHE_REMOVE_URL manually; they should really * use mod_cache configuration to do that. So: * 1. Remove ourselves * 2. Do nothing and bail out */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00775) "cache: CACHE_REMOVE_URL enabled unexpectedly"); ap_remove_output_filter(f); return ap_pass_brigade(f->next, in); } /* Now remove this cache entry from the cache */ cache_remove_url(cache, r); /* remove ourselves */ ap_remove_output_filter(f); return ap_pass_brigade(f->next, in); } /* * CACHE_INVALIDATE filter * ----------------------- * * This filter gets added in the quick handler should a PUT, POST or DELETE * method be detected. If the response is successful, we must invalidate any * cached entity as per RFC2616 section 13.10. * * CACHE_INVALIDATE has to be a protocol filter to ensure that is run even if * the response is a canned error message, which removes the content filters * from the chain. * * CACHE_INVALIDATE expects cache request rec within its context because the * request this filter runs on can be different from the one whose cache entry * should be removed, due to internal redirects. */ static apr_status_t cache_invalidate_filter(ap_filter_t *f, apr_bucket_brigade *in) { request_rec *r = f->r; cache_request_rec *cache; /* Setup cache_request_rec */ cache = (cache_request_rec *) f->ctx; if (!cache) { /* user likely configured CACHE_INVALIDATE manually; they should really * use mod_cache configuration to do that. So: * 1. Remove ourselves * 2. Do nothing and bail out */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02465) "cache: CACHE_INVALIDATE enabled unexpectedly: %s", r->uri); } else { if (r->status > 299) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02466) "cache: response status to '%s' method is %d (>299), not invalidating cached entity: %s", r->method, r->status, r->uri); } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(02467) "cache: Invalidating all cached entities in response to '%s' request for %s", r->method, r->uri); cache_invalidate(cache, r); /* we've got a cache invalidate! tell everyone who cares */ cache_run_cache_status(cache->handle, r, r->headers_out, AP_CACHE_INVALIDATE, apr_psprintf(r->pool, "cache invalidated by %s", r->method)); } } /* remove ourselves */ ap_remove_output_filter(f); return ap_pass_brigade(f->next, in); } /* * CACHE filter * ------------ * * This filter can be optionally inserted into the filter chain by the admin as * a marker representing the precise location within the filter chain where * caching is to be performed. * * When the filter chain is set up in the non-quick version of the URL handler, * the CACHE filter is replaced by the CACHE_OUT or CACHE_SAVE filter, * effectively inserting the caching filters at the point indicated by the * admin. The CACHE filter is then removed. * * This allows caching to be performed before the content is passed to the * INCLUDES filter, or to a filter that might perform transformations unique * to the specific request and that would otherwise be non-cacheable. */ static apr_status_t cache_filter(ap_filter_t *f, apr_bucket_brigade *in) { cache_server_conf *conf = (cache_server_conf *) ap_get_module_config(f->r->server->module_config, &cache_module); /* was the quick handler enabled */ if (conf->quick) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, f->r, APLOGNO(00776) "cache: CACHE filter was added in quick handler mode and " "will be ignored: %s", f->r->unparsed_uri); } /* otherwise we may have been bypassed, nothing to see here */ else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, f->r, APLOGNO(00777) "cache: CACHE filter was added twice, or was added where " "the cache has been bypassed and will be ignored: %s", f->r->unparsed_uri); } /* we are just a marker, so let's just remove ourselves */ ap_remove_output_filter(f); return ap_pass_brigade(f->next, in); } /** * If configured, add the status of the caching attempt to the subprocess * environment, and if configured, to headers in the response. * * The status is saved below the broad category of the status (hit, miss, * revalidate), as well as a single cache-status key. This can be used for * conditional logging. * * The status is optionally saved to an X-Cache header, and the detail of * why a particular cache entry was cached (or not cached) is optionally * saved to an X-Cache-Detail header. This extra detail is useful for * service developers who may need to know whether their Cache-Control headers * are working correctly. */ static int cache_status(cache_handle_t *h, request_rec *r, apr_table_t *headers, ap_cache_status_e status, const char *reason) { cache_server_conf *conf = (cache_server_conf *) ap_get_module_config(r->server->module_config, &cache_module); cache_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &cache_module); int x_cache = 0, x_cache_detail = 0; switch (status) { case AP_CACHE_HIT: { apr_table_setn(r->subprocess_env, AP_CACHE_HIT_ENV, reason); break; } case AP_CACHE_REVALIDATE: { apr_table_setn(r->subprocess_env, AP_CACHE_REVALIDATE_ENV, reason); break; } case AP_CACHE_MISS: { apr_table_setn(r->subprocess_env, AP_CACHE_MISS_ENV, reason); break; } case AP_CACHE_INVALIDATE: { apr_table_setn(r->subprocess_env, AP_CACHE_INVALIDATE_ENV, reason); break; } } apr_table_setn(r->subprocess_env, AP_CACHE_STATUS_ENV, reason); if (dconf && dconf->x_cache_set) { x_cache = dconf->x_cache; } else { x_cache = conf->x_cache; } if (x_cache) { apr_table_setn(headers, "X-Cache", apr_psprintf(r->pool, "%s from %s", status == AP_CACHE_HIT ? "HIT" : status == AP_CACHE_REVALIDATE ? "REVALIDATE" : status == AP_CACHE_INVALIDATE ? "INVALIDATE" : "MISS", r->server->server_hostname)); } if (dconf && dconf->x_cache_detail_set) { x_cache_detail = dconf->x_cache_detail; } else { x_cache_detail = conf->x_cache_detail; } if (x_cache_detail) { apr_table_setn(headers, "X-Cache-Detail", apr_psprintf(r->pool, "\"%s\" from %s", reason, r->server->server_hostname)); } return OK; } /** * If an error has occurred, but we have a stale cached entry, restore the * filter stack from the save filter onwards. The canned error message will * be discarded in the process, and replaced with the cached response. */ static void cache_insert_error_filter(request_rec *r) { void *dummy; cache_dir_conf *dconf; /* ignore everything except for 5xx errors */ if (r->status < HTTP_INTERNAL_SERVER_ERROR) { return; } dconf = ap_get_module_config(r->per_dir_config, &cache_module); if (!dconf->stale_on_error) { return; } /* RFC2616 13.8 Errors or Incomplete Response Cache Behavior: * If a cache receives a 5xx response while attempting to revalidate an * entry, it MAY either forward this response to the requesting client, * or act as if the server failed to respond. In the latter case, it MAY * return a previously received response unless the cached entry * includes the "must-revalidate" cache-control directive (see section * 14.9). * * This covers the case where the error was generated by our server via * ap_die(). */ apr_pool_userdata_get(&dummy, CACHE_CTX_KEY, r->pool); if (dummy) { cache_request_rec *cache = (cache_request_rec *) dummy; ap_remove_output_filter(cache->remove_url_filter); if (cache->stale_handle && cache->save_filter && !cache->stale_handle->cache_obj->info.control.must_revalidate && !cache->stale_handle->cache_obj->info.control.proxy_revalidate && !cache->stale_handle->cache_obj->info.control.s_maxage) { const char *warn_head; cache_server_conf *conf = (cache_server_conf *) ap_get_module_config(r->server->module_config, &cache_module); /* morph the current save filter into the out filter, and serve from * cache. */ cache->handle = cache->stale_handle; if (r->main) { cache->save_filter->frec = cache_out_subreq_filter_handle; } else { cache->save_filter->frec = cache_out_filter_handle; } r->output_filters = cache->save_filter; r->err_headers_out = cache->stale_handle->resp_hdrs; /* add a revalidation warning */ warn_head = apr_table_get(r->err_headers_out, "Warning"); if ((warn_head == NULL) || ((warn_head != NULL) && (ap_strstr_c(warn_head, "111") == NULL))) { apr_table_mergen(r->err_headers_out, "Warning", "111 Revalidation failed"); } cache_run_cache_status( cache->handle, r, r->err_headers_out, AP_CACHE_HIT, apr_psprintf( r->pool, "cache hit: %d status; stale content returned", r->status)); /* give someone else the chance to cache the file */ cache_remove_lock(conf, cache, r, NULL); } } return; } /* -------------------------------------------------------------- */ /* Setup configurable data */ static void *create_dir_config(apr_pool_t *p, char *dummy) { cache_dir_conf *dconf = apr_pcalloc(p, sizeof(cache_dir_conf)); dconf->no_last_mod_ignore = 0; dconf->store_expired = 0; dconf->store_private = 0; dconf->store_nostore = 0; /* maximum time to cache a document */ dconf->maxex = DEFAULT_CACHE_MAXEXPIRE; dconf->minex = DEFAULT_CACHE_MINEXPIRE; /* default time to cache a document */ dconf->defex = DEFAULT_CACHE_EXPIRE; /* factor used to estimate Expires date from LastModified date */ dconf->factor = DEFAULT_CACHE_LMFACTOR; dconf->x_cache = DEFAULT_X_CACHE; dconf->x_cache_detail = DEFAULT_X_CACHE_DETAIL; dconf->stale_on_error = DEFAULT_CACHE_STALE_ON_ERROR; /* array of providers for this URL space */ dconf->cacheenable = apr_array_make(p, 10, sizeof(struct cache_enable)); return dconf; } static void *merge_dir_config(apr_pool_t *p, void *basev, void *addv) { cache_dir_conf *new = (cache_dir_conf *) apr_pcalloc(p, sizeof(cache_dir_conf)); cache_dir_conf *add = (cache_dir_conf *) addv; cache_dir_conf *base = (cache_dir_conf *) basev; new->no_last_mod_ignore = (add->no_last_mod_ignore_set == 0) ? base->no_last_mod_ignore : add->no_last_mod_ignore; new->no_last_mod_ignore_set = add->no_last_mod_ignore_set || base->no_last_mod_ignore_set; new->store_expired = (add->store_expired_set == 0) ? base->store_expired : add->store_expired; new->store_expired_set = add->store_expired_set || base->store_expired_set; new->store_private = (add->store_private_set == 0) ? base->store_private : add->store_private; new->store_private_set = add->store_private_set || base->store_private_set; new->store_nostore = (add->store_nostore_set == 0) ? base->store_nostore : add->store_nostore; new->store_nostore_set = add->store_nostore_set || base->store_nostore_set; /* maximum time to cache a document */ new->maxex = (add->maxex_set == 0) ? base->maxex : add->maxex; new->maxex_set = add->maxex_set || base->maxex_set; new->minex = (add->minex_set == 0) ? base->minex : add->minex; new->minex_set = add->minex_set || base->minex_set; /* default time to cache a document */ new->defex = (add->defex_set == 0) ? base->defex : add->defex; new->defex_set = add->defex_set || base->defex_set; /* factor used to estimate Expires date from LastModified date */ new->factor = (add->factor_set == 0) ? base->factor : add->factor; new->factor_set = add->factor_set || base->factor_set; new->x_cache = (add->x_cache_set == 0) ? base->x_cache : add->x_cache; new->x_cache_set = add->x_cache_set || base->x_cache_set; new->x_cache_detail = (add->x_cache_detail_set == 0) ? base->x_cache_detail : add->x_cache_detail; new->x_cache_detail_set = add->x_cache_detail_set || base->x_cache_detail_set; new->stale_on_error = (add->stale_on_error_set == 0) ? base->stale_on_error : add->stale_on_error; new->stale_on_error_set = add->stale_on_error_set || base->stale_on_error_set; new->cacheenable = add->enable_set ? apr_array_append(p, base->cacheenable, add->cacheenable) : base->cacheenable; new->enable_set = add->enable_set || base->enable_set; new->disable = (add->disable_set == 0) ? base->disable : add->disable; new->disable_set = add->disable_set || base->disable_set; return new; } static void * create_cache_config(apr_pool_t *p, server_rec *s) { const char *tmppath = NULL; cache_server_conf *ps = apr_pcalloc(p, sizeof(cache_server_conf)); /* array of URL prefixes for which caching is enabled */ ps->cacheenable = apr_array_make(p, 10, sizeof(struct cache_enable)); /* array of URL prefixes for which caching is disabled */ ps->cachedisable = apr_array_make(p, 10, sizeof(struct cache_disable)); ps->ignorecachecontrol = 0; ps->ignorecachecontrol_set = 0; /* array of headers that should not be stored in cache */ ps->ignore_headers = apr_array_make(p, 10, sizeof(char *)); ps->ignore_headers_set = CACHE_IGNORE_HEADERS_UNSET; /* flag indicating that query-string should be ignored when caching */ ps->ignorequerystring = 0; ps->ignorequerystring_set = 0; /* by default, run in the quick handler */ ps->quick = 1; ps->quick_set = 0; /* array of identifiers that should not be used for key calculation */ ps->ignore_session_id = apr_array_make(p, 10, sizeof(char *)); ps->ignore_session_id_set = CACHE_IGNORE_SESSION_ID_UNSET; ps->lock = 0; /* thundering herd lock defaults to off */ ps->lock_set = 0; apr_temp_dir_get(&tmppath, p); if (tmppath) { ps->lockpath = apr_pstrcat(p, tmppath, DEFAULT_CACHE_LOCKPATH, NULL); } ps->lockmaxage = apr_time_from_sec(DEFAULT_CACHE_MAXAGE); ps->x_cache = DEFAULT_X_CACHE; ps->x_cache_detail = DEFAULT_X_CACHE_DETAIL; return ps; } static void * merge_cache_config(apr_pool_t *p, void *basev, void *overridesv) { cache_server_conf *ps = apr_pcalloc(p, sizeof(cache_server_conf)); cache_server_conf *base = (cache_server_conf *) basev; cache_server_conf *overrides = (cache_server_conf *) overridesv; /* array of URL prefixes for which caching is disabled */ ps->cachedisable = apr_array_append(p, base->cachedisable, overrides->cachedisable); /* array of URL prefixes for which caching is enabled */ ps->cacheenable = apr_array_append(p, base->cacheenable, overrides->cacheenable); ps->ignorecachecontrol = (overrides->ignorecachecontrol_set == 0) ? base->ignorecachecontrol : overrides->ignorecachecontrol; ps->ignore_headers = (overrides->ignore_headers_set == CACHE_IGNORE_HEADERS_UNSET) ? base->ignore_headers : overrides->ignore_headers; ps->ignorequerystring = (overrides->ignorequerystring_set == 0) ? base->ignorequerystring : overrides->ignorequerystring; ps->ignore_session_id = (overrides->ignore_session_id_set == CACHE_IGNORE_SESSION_ID_UNSET) ? base->ignore_session_id : overrides->ignore_session_id; ps->lock = (overrides->lock_set == 0) ? base->lock : overrides->lock; ps->lockpath = (overrides->lockpath_set == 0) ? base->lockpath : overrides->lockpath; ps->lockmaxage = (overrides->lockmaxage_set == 0) ? base->lockmaxage : overrides->lockmaxage; ps->quick = (overrides->quick_set == 0) ? base->quick : overrides->quick; ps->x_cache = (overrides->x_cache_set == 0) ? base->x_cache : overrides->x_cache; ps->x_cache_detail = (overrides->x_cache_detail_set == 0) ? base->x_cache_detail : overrides->x_cache_detail; ps->base_uri = (overrides->base_uri_set == 0) ? base->base_uri : overrides->base_uri; return ps; } static const char *set_cache_quick_handler(cmd_parms *parms, void *dummy, int flag) { cache_server_conf *conf; conf = (cache_server_conf *)ap_get_module_config(parms->server->module_config, &cache_module); conf->quick = flag; conf->quick_set = 1; return NULL; } static const char *set_cache_ignore_no_last_mod(cmd_parms *parms, void *dummy, int flag) { cache_dir_conf *dconf = (cache_dir_conf *)dummy; dconf->no_last_mod_ignore = flag; dconf->no_last_mod_ignore_set = 1; return NULL; } static const char *set_cache_ignore_cachecontrol(cmd_parms *parms, void *dummy, int flag) { cache_server_conf *conf; conf = (cache_server_conf *)ap_get_module_config(parms->server->module_config, &cache_module); conf->ignorecachecontrol = flag; conf->ignorecachecontrol_set = 1; return NULL; } static const char *set_cache_store_expired(cmd_parms *parms, void *dummy, int flag) { cache_dir_conf *dconf = (cache_dir_conf *)dummy; dconf->store_expired = flag; dconf->store_expired_set = 1; return NULL; } static const char *set_cache_store_private(cmd_parms *parms, void *dummy, int flag) { cache_dir_conf *dconf = (cache_dir_conf *)dummy; dconf->store_private = flag; dconf->store_private_set = 1; return NULL; } static const char *set_cache_store_nostore(cmd_parms *parms, void *dummy, int flag) { cache_dir_conf *dconf = (cache_dir_conf *)dummy; dconf->store_nostore = flag; dconf->store_nostore_set = 1; return NULL; } static const char *add_ignore_header(cmd_parms *parms, void *dummy, const char *header) { cache_server_conf *conf; char **new; conf = (cache_server_conf *)ap_get_module_config(parms->server->module_config, &cache_module); if (!strcasecmp(header, "None")) { /* if header None is listed clear array */ conf->ignore_headers->nelts = 0; } else { if ((conf->ignore_headers_set == CACHE_IGNORE_HEADERS_UNSET) || (conf->ignore_headers->nelts)) { /* Only add header if no "None" has been found in header list * so far. * (When 'None' is passed, IGNORE_HEADERS_SET && nelts == 0.) */ new = (char **)apr_array_push(conf->ignore_headers); (*new) = (char *)header; } } conf->ignore_headers_set = CACHE_IGNORE_HEADERS_SET; return NULL; } static const char *add_ignore_session_id(cmd_parms *parms, void *dummy, const char *identifier) { cache_server_conf *conf; char **new; conf = (cache_server_conf *)ap_get_module_config(parms->server->module_config, &cache_module); if (!strcasecmp(identifier, "None")) { /* if identifier None is listed clear array */ conf->ignore_session_id->nelts = 0; } else { if ((conf->ignore_session_id_set == CACHE_IGNORE_SESSION_ID_UNSET) || (conf->ignore_session_id->nelts)) { /* * Only add identifier if no "None" has been found in identifier * list so far. */ new = (char **)apr_array_push(conf->ignore_session_id); (*new) = (char *)identifier; } } conf->ignore_session_id_set = CACHE_IGNORE_SESSION_ID_SET; return NULL; } static const char *add_cache_enable(cmd_parms *parms, void *dummy, const char *type, const char *url) { cache_dir_conf *dconf = (cache_dir_conf *)dummy; cache_server_conf *conf; struct cache_enable *new; const char *err = ap_check_cmd_context(parms, NOT_IN_DIRECTORY|NOT_IN_LIMIT|NOT_IN_FILES); if (err != NULL) { return err; } if (*type == '/') { return apr_psprintf(parms->pool, "provider (%s) starts with a '/'. Are url and provider switched?", type); } if (!url) { url = parms->path; } if (!url) { return apr_psprintf(parms->pool, "CacheEnable provider (%s) is missing an URL.", type); } if (parms->path && strncmp(parms->path, url, strlen(parms->path))) { return "When in a Location, CacheEnable must specify a path or an URL below " "that location."; } conf = (cache_server_conf *)ap_get_module_config(parms->server->module_config, &cache_module); if (parms->path) { new = apr_array_push(dconf->cacheenable); dconf->enable_set = 1; } else { new = apr_array_push(conf->cacheenable); } new->type = type; if (apr_uri_parse(parms->pool, url, &(new->url))) { return NULL; } if (new->url.path) { new->pathlen = strlen(new->url.path); } else { new->pathlen = 1; new->url.path = "/"; } return NULL; } static const char *add_cache_disable(cmd_parms *parms, void *dummy, const char *url) { cache_dir_conf *dconf = (cache_dir_conf *)dummy; cache_server_conf *conf; struct cache_disable *new; const char *err = ap_check_cmd_context(parms, NOT_IN_DIRECTORY|NOT_IN_LIMIT|NOT_IN_FILES); if (err != NULL) { return err; } conf = (cache_server_conf *)ap_get_module_config(parms->server->module_config, &cache_module); if (parms->path) { if (!strcasecmp(url, "on")) { dconf->disable = 1; dconf->disable_set = 1; return NULL; } else { return "CacheDisable must be followed by the word 'on' when in a Location."; } } if (!url || (url[0] != '/' && !ap_strchr_c(url, ':'))) { return "CacheDisable must specify a path or an URL."; } new = apr_array_push(conf->cachedisable); if (apr_uri_parse(parms->pool, url, &(new->url))) { return NULL; } if (new->url.path) { new->pathlen = strlen(new->url.path); } else { new->pathlen = 1; new->url.path = "/"; } return NULL; } static const char *set_cache_maxex(cmd_parms *parms, void *dummy, const char *arg) { cache_dir_conf *dconf = (cache_dir_conf *)dummy; dconf->maxex = (apr_time_t) (atol(arg) * MSEC_ONE_SEC); dconf->maxex_set = 1; return NULL; } static const char *set_cache_minex(cmd_parms *parms, void *dummy, const char *arg) { cache_dir_conf *dconf = (cache_dir_conf *)dummy; dconf->minex = (apr_time_t) (atol(arg) * MSEC_ONE_SEC); dconf->minex_set = 1; return NULL; } static const char *set_cache_defex(cmd_parms *parms, void *dummy, const char *arg) { cache_dir_conf *dconf = (cache_dir_conf *)dummy; dconf->defex = (apr_time_t) (atol(arg) * MSEC_ONE_SEC); dconf->defex_set = 1; return NULL; } static const char *set_cache_factor(cmd_parms *parms, void *dummy, const char *arg) { cache_dir_conf *dconf = (cache_dir_conf *)dummy; double val; if (sscanf(arg, "%lg", &val) != 1) { return "CacheLastModifiedFactor value must be a float"; } dconf->factor = val; dconf->factor_set = 1; return NULL; } static const char *set_cache_ignore_querystring(cmd_parms *parms, void *dummy, int flag) { cache_server_conf *conf; conf = (cache_server_conf *)ap_get_module_config(parms->server->module_config, &cache_module); conf->ignorequerystring = flag; conf->ignorequerystring_set = 1; return NULL; } static const char *set_cache_lock(cmd_parms *parms, void *dummy, int flag) { cache_server_conf *conf; conf = (cache_server_conf *)ap_get_module_config(parms->server->module_config, &cache_module); conf->lock = flag; conf->lock_set = 1; return NULL; } static const char *set_cache_lock_path(cmd_parms *parms, void *dummy, const char *arg) { cache_server_conf *conf; conf = (cache_server_conf *)ap_get_module_config(parms->server->module_config, &cache_module); conf->lockpath = ap_server_root_relative(parms->pool, arg); if (!conf->lockpath) { return apr_pstrcat(parms->pool, "Invalid CacheLockPath path ", arg, NULL); } conf->lockpath_set = 1; return NULL; } static const char *set_cache_lock_maxage(cmd_parms *parms, void *dummy, const char *arg) { cache_server_conf *conf; apr_int64_t seconds; conf = (cache_server_conf *)ap_get_module_config(parms->server->module_config, &cache_module); seconds = apr_atoi64(arg); if (seconds <= 0) { return "CacheLockMaxAge value must be a non-zero positive integer"; } conf->lockmaxage = apr_time_from_sec(seconds); conf->lockmaxage_set = 1; return NULL; } static const char *set_cache_x_cache(cmd_parms *parms, void *dummy, int flag) { if (parms->path) { cache_dir_conf *dconf = (cache_dir_conf *)dummy; dconf->x_cache = flag; dconf->x_cache_set = 1; } else { cache_server_conf *conf = (cache_server_conf *)ap_get_module_config(parms->server->module_config, &cache_module); conf->x_cache = flag; conf->x_cache_set = 1; } return NULL; } static const char *set_cache_x_cache_detail(cmd_parms *parms, void *dummy, int flag) { if (parms->path) { cache_dir_conf *dconf = (cache_dir_conf *)dummy; dconf->x_cache_detail = flag; dconf->x_cache_detail_set = 1; } else { cache_server_conf *conf = (cache_server_conf *)ap_get_module_config(parms->server->module_config, &cache_module); conf->x_cache_detail = flag; conf->x_cache_detail_set = 1; } return NULL; } static const char *set_cache_key_base_url(cmd_parms *parms, void *dummy, const char *arg) { cache_server_conf *conf; apr_status_t rv; conf = (cache_server_conf *)ap_get_module_config(parms->server->module_config, &cache_module); conf->base_uri = apr_pcalloc(parms->pool, sizeof(apr_uri_t)); rv = apr_uri_parse(parms->pool, arg, conf->base_uri); if (rv != APR_SUCCESS) { return apr_psprintf(parms->pool, "Could not parse '%s' as an URL.", arg); } else if (!conf->base_uri->scheme && !conf->base_uri->hostname && !conf->base_uri->port_str) { return apr_psprintf(parms->pool, "URL '%s' must contain at least one of a scheme, a hostname or a port.", arg); } conf->base_uri_set = 1; return NULL; } static const char *set_cache_stale_on_error(cmd_parms *parms, void *dummy, int flag) { cache_dir_conf *dconf = (cache_dir_conf *)dummy; dconf->stale_on_error = flag; dconf->stale_on_error_set = 1; return NULL; } static int cache_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { /* This is the means by which unusual (non-unix) os's may find alternate * means to run a given command (e.g. shebang/registry parsing on Win32) */ cache_generate_key = APR_RETRIEVE_OPTIONAL_FN(ap_cache_generate_key); if (!cache_generate_key) { cache_generate_key = cache_generate_key_default; } return OK; } static const command_rec cache_cmds[] = { /* XXX * Consider a new config directive that enables loading specific cache * implememtations (like mod_cache_mem, mod_cache_file, etc.). * Rather than using a LoadModule directive, admin would use something * like CacheModule mem_cache_module | file_cache_module, etc, * which would cause the approprpriate cache module to be loaded. * This is more intuitive that requiring a LoadModule directive. */ AP_INIT_TAKE12("CacheEnable", add_cache_enable, NULL, RSRC_CONF|ACCESS_CONF, "A cache type and partial URL prefix below which " "caching is enabled"), AP_INIT_TAKE1("CacheDisable", add_cache_disable, NULL, RSRC_CONF|ACCESS_CONF, "A partial URL prefix below which caching is disabled"), AP_INIT_TAKE1("CacheMaxExpire", set_cache_maxex, NULL, RSRC_CONF|ACCESS_CONF, "The maximum time in seconds to cache a document"), AP_INIT_TAKE1("CacheMinExpire", set_cache_minex, NULL, RSRC_CONF|ACCESS_CONF, "The minimum time in seconds to cache a document"), AP_INIT_TAKE1("CacheDefaultExpire", set_cache_defex, NULL, RSRC_CONF|ACCESS_CONF, "The default time in seconds to cache a document"), AP_INIT_FLAG("CacheQuickHandler", set_cache_quick_handler, NULL, RSRC_CONF, "Run the cache in the quick handler, default on"), AP_INIT_FLAG("CacheIgnoreNoLastMod", set_cache_ignore_no_last_mod, NULL, RSRC_CONF|ACCESS_CONF, "Ignore Responses where there is no Last Modified Header"), AP_INIT_FLAG("CacheIgnoreCacheControl", set_cache_ignore_cachecontrol, NULL, RSRC_CONF, "Ignore requests from the client for uncached content"), AP_INIT_FLAG("CacheStoreExpired", set_cache_store_expired, NULL, RSRC_CONF|ACCESS_CONF, "Ignore expiration dates when populating cache, resulting in " "an If-Modified-Since request to the backend on retrieval"), AP_INIT_FLAG("CacheStorePrivate", set_cache_store_private, NULL, RSRC_CONF|ACCESS_CONF, "Ignore 'Cache-Control: private' and store private content"), AP_INIT_FLAG("CacheStoreNoStore", set_cache_store_nostore, NULL, RSRC_CONF|ACCESS_CONF, "Ignore 'Cache-Control: no-store' and store sensitive content"), AP_INIT_ITERATE("CacheIgnoreHeaders", add_ignore_header, NULL, RSRC_CONF, "A space separated list of headers that should not be " "stored by the cache"), AP_INIT_FLAG("CacheIgnoreQueryString", set_cache_ignore_querystring, NULL, RSRC_CONF, "Ignore query-string when caching"), AP_INIT_ITERATE("CacheIgnoreURLSessionIdentifiers", add_ignore_session_id, NULL, RSRC_CONF, "A space separated list of session " "identifiers that should be ignored for creating the key " "of the cached entity."), AP_INIT_TAKE1("CacheLastModifiedFactor", set_cache_factor, NULL, RSRC_CONF|ACCESS_CONF, "The factor used to estimate Expires date from " "LastModified date"), AP_INIT_FLAG("CacheLock", set_cache_lock, NULL, RSRC_CONF, "Enable or disable the thundering herd lock."), AP_INIT_TAKE1("CacheLockPath", set_cache_lock_path, NULL, RSRC_CONF, "The thundering herd lock path. Defaults to the '" DEFAULT_CACHE_LOCKPATH "' directory in the system " "temp directory."), AP_INIT_TAKE1("CacheLockMaxAge", set_cache_lock_maxage, NULL, RSRC_CONF, "Maximum age of any thundering herd lock."), AP_INIT_FLAG("CacheHeader", set_cache_x_cache, NULL, RSRC_CONF | ACCESS_CONF, "Add a X-Cache header to responses. Default is off."), AP_INIT_FLAG("CacheDetailHeader", set_cache_x_cache_detail, NULL, RSRC_CONF | ACCESS_CONF, "Add a X-Cache-Detail header to responses. Default is off."), AP_INIT_TAKE1("CacheKeyBaseURL", set_cache_key_base_url, NULL, RSRC_CONF, "Override the base URL of reverse proxied cache keys."), AP_INIT_FLAG("CacheStaleOnError", set_cache_stale_on_error, NULL, RSRC_CONF|ACCESS_CONF, "Serve stale content on 5xx errors if present. Defaults to on."), {NULL} }; static void register_hooks(apr_pool_t *p) { /* cache initializer */ /* cache quick handler */ ap_hook_quick_handler(cache_quick_handler, NULL, NULL, APR_HOOK_FIRST); /* cache handler */ ap_hook_handler(cache_handler, NULL, NULL, APR_HOOK_REALLY_FIRST); /* cache status */ cache_hook_cache_status(cache_status, NULL, NULL, APR_HOOK_MIDDLE); /* cache error handler */ ap_hook_insert_error_filter(cache_insert_error_filter, NULL, NULL, APR_HOOK_MIDDLE); /* cache filters * XXX The cache filters need to run right after the handlers and before * any other filters. Consider creating AP_FTYPE_CACHE for this purpose. * * Depending on the type of request (subrequest / main request) they * need to be run before AP_FTYPE_CONTENT_SET / after AP_FTYPE_CONTENT_SET * filters. Thus create two filter handles for each type: * cache_save_filter_handle / cache_out_filter_handle to be used by * main requests and * cache_save_subreq_filter_handle / cache_out_subreq_filter_handle * to be run by subrequest */ /* * CACHE is placed into the filter chain at an admin specified location, * and when the cache_handler is run, the CACHE filter is swapped with * the CACHE_OUT filter, or CACHE_SAVE filter as appropriate. This has * the effect of offering optional fine control of where the cache is * inserted into the filter chain. */ cache_filter_handle = ap_register_output_filter("CACHE", cache_filter, NULL, AP_FTYPE_RESOURCE); /* * CACHE_SAVE must go into the filter chain after a possible DEFLATE * filter to ensure that the compressed content is stored. * Incrementing filter type by 1 ensures this happens. */ cache_save_filter_handle = ap_register_output_filter("CACHE_SAVE", cache_save_filter, NULL, AP_FTYPE_CONTENT_SET+1); /* * CACHE_SAVE_SUBREQ must go into the filter chain before SUBREQ_CORE to * handle subrequsts. Decrementing filter type by 1 ensures this * happens. */ cache_save_subreq_filter_handle = ap_register_output_filter("CACHE_SAVE_SUBREQ", cache_save_filter, NULL, AP_FTYPE_CONTENT_SET-1); /* * CACHE_OUT must go into the filter chain after a possible DEFLATE * filter to ensure that already compressed cache objects do not * get compressed again. Incrementing filter type by 1 ensures * this happens. */ cache_out_filter_handle = ap_register_output_filter("CACHE_OUT", cache_out_filter, NULL, AP_FTYPE_CONTENT_SET+1); /* * CACHE_OUT_SUBREQ must go into the filter chain before SUBREQ_CORE to * handle subrequsts. Decrementing filter type by 1 ensures this * happens. */ cache_out_subreq_filter_handle = ap_register_output_filter("CACHE_OUT_SUBREQ", cache_out_filter, NULL, AP_FTYPE_CONTENT_SET-1); /* CACHE_REMOVE_URL has to be a protocol filter to ensure that is * run even if the response is a canned error message, which * removes the content filters. */ cache_remove_url_filter_handle = ap_register_output_filter("CACHE_REMOVE_URL", cache_remove_url_filter, NULL, AP_FTYPE_PROTOCOL); cache_invalidate_filter_handle = ap_register_output_filter("CACHE_INVALIDATE", cache_invalidate_filter, NULL, AP_FTYPE_PROTOCOL); ap_hook_post_config(cache_post_config, NULL, NULL, APR_HOOK_REALLY_FIRST); } AP_DECLARE_MODULE(cache) = { STANDARD20_MODULE_STUFF, create_dir_config, /* create per-directory config structure */ merge_dir_config, /* merge per-directory config structures */ create_cache_config, /* create per-server config structure */ merge_cache_config, /* merge per-server config structures */ cache_cmds, /* command apr_table_t */ register_hooks }; APR_HOOK_STRUCT( APR_HOOK_LINK(cache_status) ) APR_IMPLEMENT_EXTERNAL_HOOK_RUN_ALL(cache, CACHE, int, cache_status, (cache_handle_t *h, request_rec *r, apr_table_t *headers, ap_cache_status_e status, const char *reason), (h, r, headers, status, reason), OK, DECLINED) httpd-2.4.41/modules/cache/NWGNUmod_cach0000644000000000000500000001053511540546347016263 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/server/mpm/netware \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ -DDEBUG \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = mod_cach # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Cache module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = mod_cach # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 65536 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If this is specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # Declare all target files (you must add your files here) # # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/mod_cach.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/cache_util.o \ $(OBJDIR)/cache_storage.o \ $(OBJDIR)/mod_cache.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ Apache2 \ Libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ @netware.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ @mod_cache.imp \ cache_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/cache/mod_cache_socache.dsp0000644000000000000500000001100312441706176020051 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_cache_socache" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_cache_socache - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_cache_socache.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_cache_socache.mak" CFG="mod_cache_socache - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_cache_socache - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_cache_socache - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_cache_socache - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /Fd"Release\mod_cache_socache_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_cache_socache.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_cache_socache.so" /d LONG_NAME="cache_socache_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_cache_socache.so" /base:@..\..\os\win32\BaseAddr.ref,mod_cache_socache.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_cache_socache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_cache_socache - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /Fd"Debug\mod_cache_socache_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_cache_socache.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_cache_socache.so" /d LONG_NAME="cache_socache_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_cache_socache.so" /base:@..\..\os\win32\BaseAddr.ref,mod_cache_socache.so # Begin Special Build Tool TargetPath=.\Debug\mod_cache_socache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_cache_socache - Win32 Release" # Name "mod_cache_socache - Win32 Debug" # Begin Source File SOURCE=.\mod_cache.h # End Source File # Begin Source File SOURCE=.\mod_cache_socache.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/cache/NWGNUmakefile0000644000000000000500000001013212137751745016277 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/mod_cach.nlm \ $(OBJDIR)/cach_dsk.nlm \ $(OBJDIR)/cach_socache.nlm \ $(OBJDIR)/socachdbm.nlm \ $(OBJDIR)/socachmem.nlm \ $(OBJDIR)/socachshmcb.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/cache/mod_cache_socache.dep0000644000000000000500000000453612674411515020046 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_cache_socache.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_cache_socache.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\generators\mod_status.h"\ ".\cache_common.h"\ ".\cache_socache_common.h"\ ".\mod_cache.h"\ httpd-2.4.41/modules/cache/mod_cache_socache.c0000644000000000000500000015246313514075127017522 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_lib.h" #include "apr_file_io.h" #include "apr_strings.h" #include "apr_buckets.h" #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_core.h" #include "http_protocol.h" #include "ap_provider.h" #include "ap_socache.h" #include "util_filter.h" #include "util_script.h" #include "util_charset.h" #include "util_mutex.h" #include "mod_cache.h" #include "mod_status.h" #include "cache_socache_common.h" /* * mod_cache_socache: Shared Object Cache Based HTTP 1.1 Cache. * * Flow to Find the entry: * Incoming client requests URI /foo/bar/baz * Fetch URI key (may contain Format #1 or Format #2) * If format #1 (Contains a list of Vary Headers): * Use each header name (from .header) with our request values (headers_in) to * regenerate key using HeaderName+HeaderValue+.../foo/bar/baz * re-read in key (must be format #2) * * Format #1: * apr_uint32_t format; * apr_time_t expire; * apr_array_t vary_headers (delimited by CRLF) * * Format #2: * cache_socache_info_t (first sizeof(apr_uint32_t) bytes is the format) * entity name (sobj->name) [length is in cache_socache_info_t->name_len] * r->headers_out (delimited by CRLF) * CRLF * r->headers_in (delimited by CRLF) * CRLF */ module AP_MODULE_DECLARE_DATA cache_socache_module; /* * cache_socache_object_t * Pointed to by cache_object_t::vobj */ typedef struct cache_socache_object_t { apr_pool_t *pool; /* pool */ unsigned char *buffer; /* the cache buffer */ apr_size_t buffer_len; /* size of the buffer */ apr_bucket_brigade *body; /* brigade containing the body, if any */ apr_table_t *headers_in; /* Input headers to save */ apr_table_t *headers_out; /* Output headers to save */ cache_socache_info_t socache_info; /* Header information. */ apr_size_t body_offset; /* offset to the start of the body */ apr_off_t body_length; /* length of the cached entity body */ apr_time_t expire; /* when to expire the entry */ const char *name; /* Requested URI without vary bits - suitable for mortals. */ const char *key; /* On-disk prefix; URI with Vary bits (if present) */ apr_off_t offset; /* Max size to set aside */ apr_time_t timeout; /* Max time to set aside */ unsigned int newbody :1; /* whether a new body is present */ unsigned int done :1; /* Is the attempt to cache complete? */ } cache_socache_object_t; /* * mod_cache_socache configuration */ #define DEFAULT_MAX_FILE_SIZE 100*1024 #define DEFAULT_MAXTIME 86400 #define DEFAULT_MINTIME 600 #define DEFAULT_READSIZE 0 #define DEFAULT_READTIME 0 typedef struct cache_socache_provider_conf { const char *args; ap_socache_provider_t *socache_provider; ap_socache_instance_t *socache_instance; } cache_socache_provider_conf; typedef struct cache_socache_conf { cache_socache_provider_conf *provider; } cache_socache_conf; typedef struct cache_socache_dir_conf { apr_off_t max; /* maximum file size for cached files */ apr_time_t maxtime; /* maximum expiry time */ apr_time_t mintime; /* minimum expiry time */ apr_off_t readsize; /* maximum data to attempt to cache in one go */ apr_time_t readtime; /* maximum time taken to cache in one go */ unsigned int max_set :1; unsigned int maxtime_set :1; unsigned int mintime_set :1; unsigned int readsize_set :1; unsigned int readtime_set :1; } cache_socache_dir_conf; /* Shared object cache and mutex */ static const char * const cache_socache_id = "cache-socache"; static apr_global_mutex_t *socache_mutex = NULL; /* * Local static functions */ static apr_status_t read_array(request_rec *r, apr_array_header_t *arr, unsigned char *buffer, apr_size_t buffer_len, apr_size_t *slider) { apr_size_t val = *slider; while (*slider < buffer_len) { if (buffer[*slider] == '\r') { if (val == *slider) { (*slider)++; return APR_SUCCESS; } *((const char **) apr_array_push(arr)) = apr_pstrndup(r->pool, (const char *) buffer + val, *slider - val); (*slider)++; if (buffer[*slider] == '\n') { (*slider)++; } val = *slider; } else if (buffer[*slider] == '\0') { (*slider)++; return APR_SUCCESS; } else { (*slider)++; } } return APR_EOF; } static apr_status_t store_array(apr_array_header_t *arr, unsigned char *buffer, apr_size_t buffer_len, apr_size_t *slider) { int i, len; const char **elts; elts = (const char **) arr->elts; for (i = 0; i < arr->nelts; i++) { apr_size_t e_len = strlen(elts[i]); if (e_len + 3 >= buffer_len - *slider) { return APR_EOF; } len = apr_snprintf(buffer ? (char *) buffer + *slider : NULL, buffer ? buffer_len - *slider : 0, "%s" CRLF, elts[i]); *slider += len; } if (buffer) { memcpy(buffer + *slider, CRLF, sizeof(CRLF) - 1); } *slider += sizeof(CRLF) - 1; return APR_SUCCESS; } static apr_status_t read_table(cache_handle_t *handle, request_rec *r, apr_table_t *table, unsigned char *buffer, apr_size_t buffer_len, apr_size_t *slider) { apr_size_t key = *slider, colon = 0, len = 0; while (*slider < buffer_len) { if (buffer[*slider] == ':') { if (!colon) { colon = *slider; } (*slider)++; } else if (buffer[*slider] == '\r') { len = colon; if (key == *slider) { (*slider)++; if (buffer[*slider] == '\n') { (*slider)++; } return APR_SUCCESS; } if (!colon || buffer[colon++] != ':') { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02344) "Premature end of cache headers."); return APR_EGENERAL; } /* Do not go past the \r from above as apr_isspace('\r') is true */ while (apr_isspace(buffer[colon]) && (colon < *slider)) { colon++; } apr_table_addn(table, apr_pstrmemdup(r->pool, (const char *) buffer + key, len - key), apr_pstrmemdup(r->pool, (const char *) buffer + colon, *slider - colon)); (*slider)++; if (buffer[*slider] == '\n') { (*slider)++; } key = *slider; colon = 0; } else if (buffer[*slider] == '\0') { (*slider)++; return APR_SUCCESS; } else { (*slider)++; } } return APR_EOF; } static apr_status_t store_table(apr_table_t *table, unsigned char *buffer, apr_size_t buffer_len, apr_size_t *slider) { int i, len; apr_table_entry_t *elts; elts = (apr_table_entry_t *) apr_table_elts(table)->elts; for (i = 0; i < apr_table_elts(table)->nelts; ++i) { if (elts[i].key != NULL) { apr_size_t key_len = strlen(elts[i].key); apr_size_t val_len = strlen(elts[i].val); if (key_len + val_len + 5 >= buffer_len - *slider) { return APR_EOF; } len = apr_snprintf(buffer ? (char *) buffer + *slider : NULL, buffer ? buffer_len - *slider : 0, "%s: %s" CRLF, elts[i].key, elts[i].val); *slider += len; } } if (3 >= buffer_len - *slider) { return APR_EOF; } if (buffer) { memcpy(buffer + *slider, CRLF, sizeof(CRLF) - 1); } *slider += sizeof(CRLF) - 1; return APR_SUCCESS; } static const char* regen_key(apr_pool_t *p, apr_table_t *headers, apr_array_header_t *varray, const char *oldkey, apr_size_t *newkeylen) { struct iovec *iov; int i, k; int nvec; const char *header; const char **elts; nvec = (varray->nelts * 2) + 1; iov = apr_palloc(p, sizeof(struct iovec) * nvec); elts = (const char **) varray->elts; /* TODO: * - Handle multiple-value headers better. (sort them?) * - Handle Case in-sensitive Values better. * This isn't the end of the world, since it just lowers the cache * hit rate, but it would be nice to fix. * * The majority are case insenstive if they are values (encoding etc). * Most of rfc2616 is case insensitive on header contents. * * So the better solution may be to identify headers which should be * treated case-sensitive? * HTTP URI's (3.2.3) [host and scheme are insensitive] * HTTP method (5.1.1) * HTTP-date values (3.3.1) * 3.7 Media Types [exerpt] * The type, subtype, and parameter attribute names are case- * insensitive. Parameter values might or might not be case-sensitive, * depending on the semantics of the parameter name. * 4.20 Except [exerpt] * Comparison of expectation values is case-insensitive for unquoted * tokens (including the 100-continue token), and is case-sensitive for * quoted-string expectation-extensions. */ for (i = 0, k = 0; i < varray->nelts; i++) { header = apr_table_get(headers, elts[i]); if (!header) { header = ""; } iov[k].iov_base = (char*) elts[i]; iov[k].iov_len = strlen(elts[i]); k++; iov[k].iov_base = (char*) header; iov[k].iov_len = strlen(header); k++; } iov[k].iov_base = (char*) oldkey; iov[k].iov_len = strlen(oldkey); k++; return apr_pstrcatv(p, iov, k, newkeylen); } static int array_alphasort(const void *fn1, const void *fn2) { return strcmp(*(char**) fn1, *(char**) fn2); } static void tokens_to_array(apr_pool_t *p, const char *data, apr_array_header_t *arr) { char *token; while ((token = ap_get_list_item(p, &data)) != NULL) { *((const char **) apr_array_push(arr)) = token; } /* Sort it so that "Vary: A, B" and "Vary: B, A" are stored the same. */ qsort((void *) arr->elts, arr->nelts, sizeof(char *), array_alphasort); } /* * Hook and mod_cache callback functions */ static int create_entity(cache_handle_t *h, request_rec *r, const char *key, apr_off_t len, apr_bucket_brigade *bb) { cache_socache_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &cache_socache_module); cache_socache_conf *conf = ap_get_module_config(r->server->module_config, &cache_socache_module); cache_object_t *obj; cache_socache_object_t *sobj; apr_size_t total; if (conf->provider == NULL) { return DECLINED; } /* we don't support caching of range requests (yet) */ /* TODO: but we could */ if (r->status == HTTP_PARTIAL_CONTENT) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02345) "URL %s partial content response not cached", key); return DECLINED; } /* * We have a chicken and egg problem. We don't know until we * attempt to store_headers just how big the response will be * and whether it will fit in the cache limits set. But we * need to make a decision now as to whether we plan to try. * If we make the wrong decision, we could prevent another * cache implementation, such as cache_disk, from getting the * opportunity to cache, and that would be unfortunate. * * In a series of tests, from cheapest to most expensive, * decide whether or not to ignore this attempt to cache, * with a small margin just to be sure. */ if (len < 0) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02346) "URL '%s' had no explicit size, ignoring", key); return DECLINED; } if (len > dconf->max) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02347) "URL '%s' body larger than limit, ignoring " "(%" APR_OFF_T_FMT " > %" APR_OFF_T_FMT ")", key, len, dconf->max); return DECLINED; } /* estimate the total cached size, given current headers */ total = len + sizeof(cache_socache_info_t) + strlen(key); if (APR_SUCCESS != store_table(r->headers_out, NULL, dconf->max, &total) || APR_SUCCESS != store_table(r->headers_in, NULL, dconf->max, &total)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02348) "URL '%s' estimated headers size larger than limit, ignoring " "(%" APR_SIZE_T_FMT " > %" APR_OFF_T_FMT ")", key, total, dconf->max); return DECLINED; } if (total >= dconf->max) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02349) "URL '%s' body and headers larger than limit, ignoring " "(%" APR_OFF_T_FMT " > %" APR_OFF_T_FMT ")", key, len, dconf->max); return DECLINED; } /* Allocate and initialize cache_object_t and cache_socache_object_t */ h->cache_obj = obj = apr_pcalloc(r->pool, sizeof(*obj)); obj->vobj = sobj = apr_pcalloc(r->pool, sizeof(*sobj)); obj->key = apr_pstrdup(r->pool, key); sobj->key = obj->key; sobj->name = obj->key; return OK; } static apr_status_t sobj_body_pre_cleanup(void *baton) { cache_socache_object_t *sobj = baton; apr_brigade_cleanup(sobj->body); sobj->body = NULL; return APR_SUCCESS; } static int open_entity(cache_handle_t *h, request_rec *r, const char *key) { cache_socache_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &cache_socache_module); cache_socache_conf *conf = ap_get_module_config(r->server->module_config, &cache_socache_module); apr_uint32_t format; apr_size_t slider; unsigned int buffer_len; const char *nkey; apr_status_t rc; cache_object_t *obj; cache_info *info; cache_socache_object_t *sobj; apr_size_t len; nkey = NULL; h->cache_obj = NULL; if (!conf->provider || !conf->provider->socache_instance) { return DECLINED; } /* Create and init the cache object */ obj = apr_pcalloc(r->pool, sizeof(cache_object_t)); sobj = apr_pcalloc(r->pool, sizeof(cache_socache_object_t)); info = &(obj->info); /* Create a temporary pool for the buffer, and destroy it if something * goes wrong so we don't have large buffers of unused memory hanging * about for the lifetime of the response. */ apr_pool_create(&sobj->pool, r->pool); sobj->buffer = apr_palloc(sobj->pool, dconf->max); sobj->buffer_len = dconf->max; /* attempt to retrieve the cached entry */ if (socache_mutex) { apr_status_t status = apr_global_mutex_lock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02350) "could not acquire lock, ignoring: %s", obj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return DECLINED; } } buffer_len = sobj->buffer_len; rc = conf->provider->socache_provider->retrieve( conf->provider->socache_instance, r->server, (unsigned char *) key, strlen(key), sobj->buffer, &buffer_len, r->pool); if (socache_mutex) { apr_status_t status = apr_global_mutex_unlock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02351) "could not release lock, ignoring: %s", obj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return DECLINED; } } if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rc, r, APLOGNO(02352) "Key not found in cache: %s", key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return DECLINED; } if (buffer_len >= sobj->buffer_len) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rc, r, APLOGNO(02353) "Key found in cache but too big, ignoring: %s", key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return DECLINED; } /* read the format from the cache file */ memcpy(&format, sobj->buffer, sizeof(format)); slider = sizeof(format); if (format == CACHE_SOCACHE_VARY_FORMAT_VERSION) { apr_array_header_t* varray; apr_time_t expire; memcpy(&expire, sobj->buffer + slider, sizeof(expire)); slider += sizeof(expire); varray = apr_array_make(r->pool, 5, sizeof(char*)); rc = read_array(r, varray, sobj->buffer, buffer_len, &slider); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, r, APLOGNO(02354) "Cannot parse vary entry for key: %s", key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return DECLINED; } nkey = regen_key(r->pool, r->headers_in, varray, key, &len); /* attempt to retrieve the cached entry */ if (socache_mutex) { apr_status_t status = apr_global_mutex_lock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02355) "could not acquire lock, ignoring: %s", obj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return DECLINED; } } buffer_len = sobj->buffer_len; rc = conf->provider->socache_provider->retrieve( conf->provider->socache_instance, r->server, (unsigned char *) nkey, len, sobj->buffer, &buffer_len, r->pool); if (socache_mutex) { apr_status_t status = apr_global_mutex_unlock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02356) "could not release lock, ignoring: %s", obj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return DECLINED; } } if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rc, r, APLOGNO(02357) "Key not found in cache: %s", key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return DECLINED; } if (buffer_len >= sobj->buffer_len) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rc, r, APLOGNO(02358) "Key found in cache but too big, ignoring: %s", key); goto fail; } } else if (format != CACHE_SOCACHE_DISK_FORMAT_VERSION) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02359) "Key '%s' found in cache has version %d, expected %d, ignoring", key, format, CACHE_SOCACHE_DISK_FORMAT_VERSION); goto fail; } else { nkey = key; } obj->key = nkey; sobj->key = nkey; sobj->name = key; if (buffer_len >= sizeof(cache_socache_info_t)) { memcpy(&sobj->socache_info, sobj->buffer, sizeof(cache_socache_info_t)); } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, r, APLOGNO(02360) "Cache entry for key '%s' too short, removing", nkey); goto fail; } slider = sizeof(cache_socache_info_t); /* Store it away so we can get it later. */ info->status = sobj->socache_info.status; info->date = sobj->socache_info.date; info->expire = sobj->socache_info.expire; info->request_time = sobj->socache_info.request_time; info->response_time = sobj->socache_info.response_time; memcpy(&info->control, &sobj->socache_info.control, sizeof(cache_control_t)); if (sobj->socache_info.name_len <= buffer_len - slider) { if (strncmp((const char *) sobj->buffer + slider, sobj->name, sobj->socache_info.name_len)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, r, APLOGNO(02361) "Cache entry for key '%s' URL mismatch, ignoring", nkey); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return DECLINED; } slider += sobj->socache_info.name_len; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, r, APLOGNO(02362) "Cache entry for key '%s' too short, removing", nkey); goto fail; } /* Is this a cached HEAD request? */ if (sobj->socache_info.header_only && !r->header_only) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(02363) "HEAD request cached, non-HEAD requested, ignoring: %s", sobj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return DECLINED; } h->req_hdrs = apr_table_make(r->pool, 20); h->resp_hdrs = apr_table_make(r->pool, 20); /* Call routine to read the header lines/status line */ if (APR_SUCCESS != read_table(h, r, h->resp_hdrs, sobj->buffer, buffer_len, &slider)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, r, APLOGNO(02364) "Cache entry for key '%s' response headers unreadable, removing", nkey); goto fail; } if (APR_SUCCESS != read_table(h, r, h->req_hdrs, sobj->buffer, buffer_len, &slider)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, r, APLOGNO(02365) "Cache entry for key '%s' request headers unreadable, removing", nkey); goto fail; } /* Retrieve the body if we have one */ len = buffer_len - slider; if (len > 0) { apr_bucket *e; /* Create the body brigade later concatenated to the output filters' * brigade by recall_body(). Since sobj->buffer (the data) point to * sobj->pool (a subpool of r->pool), be safe by using a pool bucket * which can morph to heap if sobj->pool is destroyed while the bucket * is still alive. But if sobj->pool gets destroyed while the bucket is * still in sobj->body (i.e. recall_body() was never called), we don't * need to morph to something just about to be freed, so a pre_cleanup * will take care of cleaning up sobj->body before this happens (and is * a noop otherwise). */ sobj->body = apr_brigade_create(sobj->pool, r->connection->bucket_alloc); apr_pool_pre_cleanup_register(sobj->pool, sobj, sobj_body_pre_cleanup); e = apr_bucket_pool_create((const char *) sobj->buffer + slider, len, sobj->pool, r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(sobj->body, e); } /* make the configuration stick */ h->cache_obj = obj; obj->vobj = sobj; return OK; fail: if (socache_mutex) { apr_status_t status = apr_global_mutex_lock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02366) "could not acquire lock, ignoring: %s", obj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return DECLINED; } } conf->provider->socache_provider->remove( conf->provider->socache_instance, r->server, (unsigned char *) nkey, strlen(nkey), r->pool); if (socache_mutex) { apr_status_t status = apr_global_mutex_unlock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02367) "could not release lock, ignoring: %s", obj->key); } } apr_pool_destroy(sobj->pool); sobj->pool = NULL; return DECLINED; } static int remove_entity(cache_handle_t *h) { /* Null out the cache object pointer so next time we start from scratch */ h->cache_obj = NULL; return OK; } static int remove_url(cache_handle_t *h, request_rec *r) { cache_socache_conf *conf = ap_get_module_config(r->server->module_config, &cache_socache_module); cache_socache_object_t *sobj; sobj = (cache_socache_object_t *) h->cache_obj->vobj; if (!sobj) { return DECLINED; } /* Remove the key from the cache */ if (socache_mutex) { apr_status_t status = apr_global_mutex_lock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02368) "could not acquire lock, ignoring: %s", sobj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return DECLINED; } } conf->provider->socache_provider->remove(conf->provider->socache_instance, r->server, (unsigned char *) sobj->key, strlen(sobj->key), r->pool); if (socache_mutex) { apr_status_t status = apr_global_mutex_unlock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02369) "could not release lock, ignoring: %s", sobj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return DECLINED; } } return OK; } static apr_status_t recall_headers(cache_handle_t *h, request_rec *r) { /* we recalled the headers during open_entity, so do nothing */ return APR_SUCCESS; } static apr_status_t recall_body(cache_handle_t *h, apr_pool_t *p, apr_bucket_brigade *bb) { cache_socache_object_t *sobj = (cache_socache_object_t*) h->cache_obj->vobj; if (sobj->body) { APR_BRIGADE_CONCAT(bb, sobj->body); } return APR_SUCCESS; } static apr_status_t store_headers(cache_handle_t *h, request_rec *r, cache_info *info) { cache_socache_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &cache_socache_module); cache_socache_conf *conf = ap_get_module_config(r->server->module_config, &cache_socache_module); apr_size_t slider; apr_status_t rv; cache_object_t *obj = h->cache_obj; cache_socache_object_t *sobj = (cache_socache_object_t*) obj->vobj; cache_socache_info_t *socache_info; memcpy(&h->cache_obj->info, info, sizeof(cache_info)); if (r->headers_out) { sobj->headers_out = ap_cache_cacheable_headers_out(r); } if (r->headers_in) { sobj->headers_in = ap_cache_cacheable_headers_in(r); } sobj->expire = obj->info.expire > r->request_time + dconf->maxtime ? r->request_time + dconf->maxtime : obj->info.expire + dconf->mintime; apr_pool_create(&sobj->pool, r->pool); sobj->buffer = apr_palloc(sobj->pool, dconf->max); sobj->buffer_len = dconf->max; socache_info = (cache_socache_info_t *) sobj->buffer; if (sobj->headers_out) { const char *vary; vary = apr_table_get(sobj->headers_out, "Vary"); if (vary) { apr_array_header_t* varray; apr_uint32_t format = CACHE_SOCACHE_VARY_FORMAT_VERSION; memcpy(sobj->buffer, &format, sizeof(format)); slider = sizeof(format); memcpy(sobj->buffer + slider, &obj->info.expire, sizeof(obj->info.expire)); slider += sizeof(obj->info.expire); varray = apr_array_make(r->pool, 6, sizeof(char*)); tokens_to_array(r->pool, vary, varray); if (APR_SUCCESS != (rv = store_array(varray, sobj->buffer, sobj->buffer_len, &slider))) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02370) "buffer too small for Vary array, caching aborted: %s", obj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return rv; } if (socache_mutex) { apr_status_t status = apr_global_mutex_lock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02371) "could not acquire lock, ignoring: %s", obj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return status; } } rv = conf->provider->socache_provider->store( conf->provider->socache_instance, r->server, (unsigned char *) obj->key, strlen(obj->key), sobj->expire, (unsigned char *) sobj->buffer, (unsigned int) slider, sobj->pool); if (socache_mutex) { apr_status_t status = apr_global_mutex_unlock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02372) "could not release lock, ignoring: %s", obj->key); } } if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(02373) "Vary not written to cache, ignoring: %s", obj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return rv; } obj->key = sobj->key = regen_key(r->pool, sobj->headers_in, varray, sobj->name, NULL); } } socache_info->format = CACHE_SOCACHE_DISK_FORMAT_VERSION; socache_info->date = obj->info.date; socache_info->expire = obj->info.expire; socache_info->entity_version = sobj->socache_info.entity_version++; socache_info->request_time = obj->info.request_time; socache_info->response_time = obj->info.response_time; socache_info->status = obj->info.status; if (r->header_only && r->status != HTTP_NOT_MODIFIED) { socache_info->header_only = 1; } else { socache_info->header_only = sobj->socache_info.header_only; } socache_info->name_len = strlen(sobj->name); memcpy(&socache_info->control, &obj->info.control, sizeof(cache_control_t)); slider = sizeof(cache_socache_info_t); if (slider + socache_info->name_len >= sobj->buffer_len) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02374) "cache buffer too small for name: %s", sobj->name); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return APR_EGENERAL; } memcpy(sobj->buffer + slider, sobj->name, socache_info->name_len); slider += socache_info->name_len; if (sobj->headers_out) { if (APR_SUCCESS != store_table(sobj->headers_out, sobj->buffer, sobj->buffer_len, &slider)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02375) "out-headers didn't fit in buffer: %s", sobj->name); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return APR_EGENERAL; } } /* Parse the vary header and dump those fields from the headers_in. */ /* TODO: Make call to the same thing cache_select calls to crack Vary. */ if (sobj->headers_in) { if (APR_SUCCESS != store_table(sobj->headers_in, sobj->buffer, sobj->buffer_len, &slider)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02376) "in-headers didn't fit in buffer %s", sobj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return APR_EGENERAL; } } sobj->body_offset = slider; return APR_SUCCESS; } static apr_status_t store_body(cache_handle_t *h, request_rec *r, apr_bucket_brigade *in, apr_bucket_brigade *out) { apr_bucket *e; apr_status_t rv = APR_SUCCESS; cache_socache_object_t *sobj = (cache_socache_object_t *) h->cache_obj->vobj; cache_socache_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &cache_socache_module); int seen_eos = 0; if (!sobj->offset) { sobj->offset = dconf->readsize; } if (!sobj->timeout && dconf->readtime) { sobj->timeout = apr_time_now() + dconf->readtime; } if (!sobj->newbody) { sobj->body_length = 0; sobj->newbody = 1; } if (sobj->offset) { apr_brigade_partition(in, sobj->offset, &e); } while (APR_SUCCESS == rv && !APR_BRIGADE_EMPTY(in)) { const char *str; apr_size_t length; e = APR_BRIGADE_FIRST(in); /* are we done completely? if so, pass any trailing buckets right through */ if (sobj->done || !sobj->pool) { APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(out, e); continue; } /* have we seen eos yet? */ if (APR_BUCKET_IS_EOS(e)) { seen_eos = 1; sobj->done = 1; APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(out, e); break; } /* honour flush buckets, we'll get called again */ if (APR_BUCKET_IS_FLUSH(e)) { APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(out, e); break; } /* metadata buckets are preserved as is */ if (APR_BUCKET_IS_METADATA(e)) { APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(out, e); continue; } /* read the bucket, write to the cache */ rv = apr_bucket_read(e, &str, &length, APR_BLOCK_READ); APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(out, e); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02377) "Error when reading bucket for URL %s", h->cache_obj->key); /* Remove the intermediate cache file and return non-APR_SUCCESS */ apr_pool_destroy(sobj->pool); sobj->pool = NULL; return rv; } /* don't write empty buckets to the cache */ if (!length) { continue; } sobj->body_length += length; if (sobj->body_length >= sobj->buffer_len - sobj->body_offset) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02378) "URL %s failed the buffer size check " "(%" APR_OFF_T_FMT ">=%" APR_SIZE_T_FMT ")", h->cache_obj->key, sobj->body_length, sobj->buffer_len - sobj->body_offset); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return APR_EGENERAL; } memcpy(sobj->buffer + sobj->body_offset + sobj->body_length - length, str, length); /* have we reached the limit of how much we're prepared to write in one * go? If so, leave, we'll get called again. This prevents us from trying * to swallow too much data at once, or taking so long to write the data * the client times out. */ sobj->offset -= length; if (sobj->offset <= 0) { sobj->offset = 0; break; } if ((dconf->readtime && apr_time_now() > sobj->timeout)) { sobj->timeout = 0; break; } } /* Was this the final bucket? If yes, perform sanity checks. */ if (seen_eos) { const char *cl_header = apr_table_get(r->headers_out, "Content-Length"); if (r->connection->aborted || r->no_cache) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02380) "Discarding body for URL %s " "because connection has been aborted.", h->cache_obj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return APR_EGENERAL; } if (cl_header) { apr_off_t cl; char *cl_endp; if (apr_strtoff(&cl, cl_header, &cl_endp, 10) != APR_SUCCESS || *cl_endp != '\0' || cl != sobj->body_length) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02381) "URL %s didn't receive complete response, not caching", h->cache_obj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return APR_EGENERAL; } } /* All checks were fine, we're good to go when the commit comes */ } return APR_SUCCESS; } static apr_status_t commit_entity(cache_handle_t *h, request_rec *r) { cache_socache_conf *conf = ap_get_module_config(r->server->module_config, &cache_socache_module); cache_object_t *obj = h->cache_obj; cache_socache_object_t *sobj = (cache_socache_object_t *) obj->vobj; apr_status_t rv; if (socache_mutex) { apr_status_t status = apr_global_mutex_lock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02384) "could not acquire lock, ignoring: %s", obj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return status; } } rv = conf->provider->socache_provider->store( conf->provider->socache_instance, r->server, (unsigned char *) sobj->key, strlen(sobj->key), sobj->expire, sobj->buffer, sobj->body_offset + sobj->body_length, sobj->pool); if (socache_mutex) { apr_status_t status = apr_global_mutex_unlock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02385) "could not release lock, ignoring: %s", obj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return status; } } if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, rv, r, APLOGNO(02386) "could not write to cache, ignoring: %s", sobj->key); goto fail; } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02387) "commit_entity: Headers and body for URL %s cached for maximum of %d seconds.", sobj->name, (apr_uint32_t)apr_time_sec(sobj->expire - r->request_time)); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return APR_SUCCESS; fail: /* For safety, remove any existing entry on failure, just in case it could not * be revalidated successfully. */ if (socache_mutex) { apr_status_t status = apr_global_mutex_lock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02388) "could not acquire lock, ignoring: %s", obj->key); apr_pool_destroy(sobj->pool); sobj->pool = NULL; return rv; } } conf->provider->socache_provider->remove(conf->provider->socache_instance, r->server, (unsigned char *) sobj->key, strlen(sobj->key), r->pool); if (socache_mutex) { apr_status_t status = apr_global_mutex_unlock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02389) "could not release lock, ignoring: %s", obj->key); } } apr_pool_destroy(sobj->pool); sobj->pool = NULL; return rv; } static apr_status_t invalidate_entity(cache_handle_t *h, request_rec *r) { /* mark the entity as invalidated */ h->cache_obj->info.control.invalidated = 1; return commit_entity(h, r); } static void *create_dir_config(apr_pool_t *p, char *dummy) { cache_socache_dir_conf *dconf = apr_pcalloc(p, sizeof(cache_socache_dir_conf)); dconf->max = DEFAULT_MAX_FILE_SIZE; dconf->maxtime = apr_time_from_sec(DEFAULT_MAXTIME); dconf->mintime = apr_time_from_sec(DEFAULT_MINTIME); dconf->readsize = DEFAULT_READSIZE; dconf->readtime = DEFAULT_READTIME; return dconf; } static void *merge_dir_config(apr_pool_t *p, void *basev, void *addv) { cache_socache_dir_conf *new = (cache_socache_dir_conf *) apr_pcalloc(p, sizeof(cache_socache_dir_conf)); cache_socache_dir_conf *add = (cache_socache_dir_conf *) addv; cache_socache_dir_conf *base = (cache_socache_dir_conf *) basev; new->max = (add->max_set == 0) ? base->max : add->max; new->max_set = add->max_set || base->max_set; new->maxtime = (add->maxtime_set == 0) ? base->maxtime : add->maxtime; new->maxtime_set = add->maxtime_set || base->maxtime_set; new->mintime = (add->mintime_set == 0) ? base->mintime : add->mintime; new->mintime_set = add->mintime_set || base->mintime_set; new->readsize = (add->readsize_set == 0) ? base->readsize : add->readsize; new->readsize_set = add->readsize_set || base->readsize_set; new->readtime = (add->readtime_set == 0) ? base->readtime : add->readtime; new->readtime_set = add->readtime_set || base->readtime_set; return new; } static void *create_config(apr_pool_t *p, server_rec *s) { cache_socache_conf *conf = apr_pcalloc(p, sizeof(cache_socache_conf)); return conf; } static void *merge_config(apr_pool_t *p, void *basev, void *overridesv) { cache_socache_conf *ps; cache_socache_conf *base = (cache_socache_conf *) basev; cache_socache_conf *overrides = (cache_socache_conf *) overridesv; /* socache server config only has one field */ ps = overrides ? overrides : base; return ps; } /* * mod_cache_socache configuration directives handlers. */ static const char *set_cache_socache(cmd_parms *cmd, void *in_struct_ptr, const char *arg) { cache_socache_conf *conf = ap_get_module_config(cmd->server->module_config, &cache_socache_module); cache_socache_provider_conf *provider = conf->provider = apr_pcalloc(cmd->pool, sizeof(cache_socache_provider_conf)); const char *err = NULL, *sep, *name; /* Argument is of form 'name:args' or just 'name'. */ sep = ap_strchr_c(arg, ':'); if (sep) { name = apr_pstrmemdup(cmd->pool, arg, sep - arg); sep++; provider->args = sep; } else { name = arg; } provider->socache_provider = ap_lookup_provider(AP_SOCACHE_PROVIDER_GROUP, name, AP_SOCACHE_PROVIDER_VERSION); if (provider->socache_provider == NULL) { err = apr_psprintf(cmd->pool, "Unknown socache provider '%s'. Maybe you need " "to load the appropriate socache module " "(mod_socache_%s?)", name, name); } return err; } static const char *set_cache_max(cmd_parms *parms, void *in_struct_ptr, const char *arg) { cache_socache_dir_conf *dconf = (cache_socache_dir_conf *) in_struct_ptr; if (apr_strtoff(&dconf->max, arg, NULL, 10) != APR_SUCCESS || dconf->max < 1024 || dconf->max > APR_UINT32_MAX) { return "CacheSocacheMaxSize argument must be a integer representing " "the max size of a cached entry (headers and body), at least 1024 " "and at most " APR_STRINGIFY(APR_UINT32_MAX); } dconf->max_set = 1; return NULL; } static const char *set_cache_maxtime(cmd_parms *parms, void *in_struct_ptr, const char *arg) { cache_socache_dir_conf *dconf = (cache_socache_dir_conf *) in_struct_ptr; apr_off_t seconds; if (apr_strtoff(&seconds, arg, NULL, 10) != APR_SUCCESS || seconds < 0) { return "CacheSocacheMaxTime argument must be the maximum amount of time in seconds to cache an entry."; } dconf->maxtime = apr_time_from_sec(seconds); dconf->maxtime_set = 1; return NULL; } static const char *set_cache_mintime(cmd_parms *parms, void *in_struct_ptr, const char *arg) { cache_socache_dir_conf *dconf = (cache_socache_dir_conf *) in_struct_ptr; apr_off_t seconds; if (apr_strtoff(&seconds, arg, NULL, 10) != APR_SUCCESS || seconds < 0) { return "CacheSocacheMinTime argument must be the minimum amount of time in seconds to cache an entry."; } dconf->mintime = apr_time_from_sec(seconds); dconf->mintime_set = 1; return NULL; } static const char *set_cache_readsize(cmd_parms *parms, void *in_struct_ptr, const char *arg) { cache_socache_dir_conf *dconf = (cache_socache_dir_conf *) in_struct_ptr; if (apr_strtoff(&dconf->readsize, arg, NULL, 10) != APR_SUCCESS || dconf->readsize < 0) { return "CacheSocacheReadSize argument must be a non-negative integer representing the max amount of data to cache in go."; } dconf->readsize_set = 1; return NULL; } static const char *set_cache_readtime(cmd_parms *parms, void *in_struct_ptr, const char *arg) { cache_socache_dir_conf *dconf = (cache_socache_dir_conf *) in_struct_ptr; apr_off_t milliseconds; if (apr_strtoff(&milliseconds, arg, NULL, 10) != APR_SUCCESS || milliseconds < 0) { return "CacheSocacheReadTime argument must be a non-negative integer representing the max amount of time taken to cache in go."; } dconf->readtime = apr_time_from_msec(milliseconds); dconf->readtime_set = 1; return NULL; } static apr_status_t remove_lock(void *data) { if (socache_mutex) { apr_global_mutex_destroy(socache_mutex); socache_mutex = NULL; } return APR_SUCCESS; } static apr_status_t destroy_cache(void *data) { server_rec *s = data; cache_socache_conf *conf = ap_get_module_config(s->module_config, &cache_socache_module); if (conf->provider && conf->provider->socache_instance) { conf->provider->socache_provider->destroy( conf->provider->socache_instance, s); conf->provider->socache_instance = NULL; } return APR_SUCCESS; } static int socache_status_hook(request_rec *r, int flags) { apr_status_t status = APR_SUCCESS; cache_socache_conf *conf = ap_get_module_config(r->server->module_config, &cache_socache_module); if (!conf->provider || !conf->provider->socache_provider || !conf->provider->socache_instance) { return DECLINED; } if (!(flags & AP_STATUS_SHORT)) { ap_rputs("
    \n" "\n" "\n" "\n
    \n" "" "mod_cache_socache Status:\n" "
    \n", r); } else { ap_rputs("ModCacheSocacheStatus\n", r); } if (socache_mutex) { status = apr_global_mutex_lock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02816) "could not acquire lock for cache status"); } } if (status != APR_SUCCESS) { if (!(flags & AP_STATUS_SHORT)) { ap_rputs("No cache status data available\n", r); } else { ap_rputs("NotAvailable\n", r); } } else { conf->provider->socache_provider->status(conf->provider->socache_instance, r, flags); } if (socache_mutex && status == APR_SUCCESS) { status = apr_global_mutex_unlock(socache_mutex); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02817) "could not release lock for cache status"); } } if (!(flags & AP_STATUS_SHORT)) { ap_rputs("
    \n", r); } return OK; } static void socache_status_register(apr_pool_t *p) { APR_OPTIONAL_HOOK(ap, status_hook, socache_status_hook, NULL, NULL, APR_HOOK_MIDDLE); } static int socache_precfg(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptmp) { apr_status_t rv = ap_mutex_register(pconf, cache_socache_id, NULL, APR_LOCK_DEFAULT, 0); if (rv != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_CRIT, rv, plog, APLOGNO(02390) "failed to register %s mutex", cache_socache_id); return 500; /* An HTTP status would be a misnomer! */ } /* Register to handle mod_status status page generation */ socache_status_register(pconf); return OK; } static int socache_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptmp, server_rec *base_server) { server_rec *s; apr_status_t rv; const char *errmsg; static struct ap_socache_hints socache_hints = { 64, 2048, 60000000 }; for (s = base_server; s; s = s->next) { cache_socache_conf *conf = ap_get_module_config(s->module_config, &cache_socache_module); if (!conf->provider) { continue; } if (!socache_mutex && conf->provider->socache_provider->flags & AP_SOCACHE_FLAG_NOTMPSAFE) { rv = ap_global_mutex_create(&socache_mutex, NULL, cache_socache_id, NULL, s, pconf, 0); if (rv != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_CRIT, rv, plog, APLOGNO(02391) "failed to create %s mutex", cache_socache_id); return 500; /* An HTTP status would be a misnomer! */ } apr_pool_cleanup_register(pconf, NULL, remove_lock, apr_pool_cleanup_null); } errmsg = conf->provider->socache_provider->create( &conf->provider->socache_instance, conf->provider->args, ptmp, pconf); if (errmsg) { ap_log_perror(APLOG_MARK, APLOG_CRIT, 0, plog, APLOGNO(02392) "%s", errmsg); return 500; /* An HTTP status would be a misnomer! */ } rv = conf->provider->socache_provider->init( conf->provider->socache_instance, cache_socache_id, &socache_hints, s, pconf); if (rv != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_CRIT, rv, plog, APLOGNO(02393) "failed to initialise %s cache", cache_socache_id); return 500; /* An HTTP status would be a misnomer! */ } apr_pool_cleanup_register(pconf, (void *) s, destroy_cache, apr_pool_cleanup_null); } return OK; } static void socache_child_init(apr_pool_t *p, server_rec *s) { const char *lock; apr_status_t rv; if (!socache_mutex) { return; /* don't waste the overhead of creating mutex & cache */ } lock = apr_global_mutex_lockfile(socache_mutex); rv = apr_global_mutex_child_init(&socache_mutex, lock, p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(02394) "failed to initialise mutex in child_init"); } } static const command_rec cache_socache_cmds[] = { AP_INIT_TAKE1("CacheSocache", set_cache_socache, NULL, RSRC_CONF, "The shared object cache to store cache files"), AP_INIT_TAKE1("CacheSocacheMaxTime", set_cache_maxtime, NULL, RSRC_CONF | ACCESS_CONF, "The maximum cache expiry age to cache a document in seconds"), AP_INIT_TAKE1("CacheSocacheMinTime", set_cache_mintime, NULL, RSRC_CONF | ACCESS_CONF, "The minimum cache expiry age to cache a document in seconds"), AP_INIT_TAKE1("CacheSocacheMaxSize", set_cache_max, NULL, RSRC_CONF | ACCESS_CONF, "The maximum cache entry size (headers and body) to cache a document"), AP_INIT_TAKE1("CacheSocacheReadSize", set_cache_readsize, NULL, RSRC_CONF | ACCESS_CONF, "The maximum quantity of data to attempt to read and cache in one go"), AP_INIT_TAKE1("CacheSocacheReadTime", set_cache_readtime, NULL, RSRC_CONF | ACCESS_CONF, "The maximum time taken to attempt to read and cache in go"), { NULL } }; static const cache_provider cache_socache_provider = { &remove_entity, &store_headers, &store_body, &recall_headers, &recall_body, &create_entity, &open_entity, &remove_url, &commit_entity, &invalidate_entity }; static void cache_socache_register_hook(apr_pool_t *p) { /* cache initializer */ ap_register_provider(p, CACHE_PROVIDER_GROUP, "socache", "0", &cache_socache_provider); ap_hook_pre_config(socache_precfg, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(socache_post_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_child_init(socache_child_init, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(cache_socache) = { STANDARD20_MODULE_STUFF, create_dir_config, /* create per-directory config structure */ merge_dir_config, /* merge per-directory config structures */ create_config, /* create per-server config structure */ merge_config, /* merge per-server config structures */ cache_socache_cmds, /* command apr_table_t */ cache_socache_register_hook /* register hooks */ }; httpd-2.4.41/modules/cache/mod_file_cache.exp0000644000000000000500000000002210150161574017360 0ustar rootsrcfile_cache_module httpd-2.4.41/modules/cache/mod_socache_redis.mak0000644000000000000500000002452113446306656020114 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_socache_redis.dsp !IF "$(CFG)" == "" CFG=mod_socache_redis - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_socache_redis - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_socache_redis - Win32 Release" && "$(CFG)" != "mod_socache_redis - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_socache_redis.mak" CFG="mod_socache_redis - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_socache_redis - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_socache_redis - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_socache_redis - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_socache_redis.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_socache_redis.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_socache_redis.obj" -@erase "$(INTDIR)\mod_socache_redis.res" -@erase "$(INTDIR)\mod_socache_redis_src.idb" -@erase "$(INTDIR)\mod_socache_redis_src.pdb" -@erase "$(OUTDIR)\mod_socache_redis.exp" -@erase "$(OUTDIR)\mod_socache_redis.lib" -@erase "$(OUTDIR)\mod_socache_redis.pdb" -@erase "$(OUTDIR)\mod_socache_redis.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_socache_redis_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_socache_redis.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_socache_redis.so" /d LONG_NAME="socache_redis_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_socache_redis.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_socache_redis.pdb" /debug /out:"$(OUTDIR)\mod_socache_redis.so" /implib:"$(OUTDIR)\mod_socache_redis.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_redis.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_socache_redis.obj" \ "$(INTDIR)\mod_socache_redis.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_socache_redis.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_socache_redis.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_socache_redis.so" if exist .\Release\mod_socache_redis.so.manifest mt.exe -manifest .\Release\mod_socache_redis.so.manifest -outputresource:.\Release\mod_socache_redis.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_socache_redis - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_socache_redis.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_socache_redis.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_socache_redis.obj" -@erase "$(INTDIR)\mod_socache_redis.res" -@erase "$(INTDIR)\mod_socache_redis_src.idb" -@erase "$(INTDIR)\mod_socache_redis_src.pdb" -@erase "$(OUTDIR)\mod_socache_redis.exp" -@erase "$(OUTDIR)\mod_socache_redis.lib" -@erase "$(OUTDIR)\mod_socache_redis.pdb" -@erase "$(OUTDIR)\mod_socache_redis.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_socache_redis_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_socache_redis.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_socache_redis.so" /d LONG_NAME="socache_redis_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_socache_redis.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_socache_redis.pdb" /debug /out:"$(OUTDIR)\mod_socache_redis.so" /implib:"$(OUTDIR)\mod_socache_redis.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_redis.so LINK32_OBJS= \ "$(INTDIR)\mod_socache_redis.obj" \ "$(INTDIR)\mod_socache_redis.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_socache_redis.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_socache_redis.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_socache_redis.so" if exist .\Debug\mod_socache_redis.so.manifest mt.exe -manifest .\Debug\mod_socache_redis.so.manifest -outputresource:.\Debug\mod_socache_redis.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_socache_redis.dep") !INCLUDE "mod_socache_redis.dep" !ELSE !MESSAGE Warning: cannot find "mod_socache_redis.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_socache_redis - Win32 Release" || "$(CFG)" == "mod_socache_redis - Win32 Debug" !IF "$(CFG)" == "mod_socache_redis - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\cache" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_redis - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\cache" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_socache_redis - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\cache" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_redis - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\cache" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_socache_redis - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\cache" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_redis - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\cache" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\cache" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_socache_redis - Win32 Release" "$(INTDIR)\mod_socache_redis.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_socache_redis.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_socache_redis.so" /d LONG_NAME="socache_redis_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_socache_redis - Win32 Debug" "$(INTDIR)\mod_socache_redis.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_socache_redis.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_socache_redis.so" /d LONG_NAME="socache_redis_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_socache_redis.c "$(INTDIR)\mod_socache_redis.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/cache/NWGNUsocachmem0000644000000000000500000001046713023777056016472 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(STDMOD)/generators \ $(AP_WORK)/server/mpm/netware \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = socachemem # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Socache Memory Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = socachemem # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 65536 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If this is specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # Declare all target files (you must add your files here) # # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_socache_memcache.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ Apache2 \ Libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ socache_memcache_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/cache/cache_storage.c0000644000000000000500000007050213514075260016711 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_cache.h" #include "cache_storage.h" #include "cache_util.h" APLOG_USE_MODULE(cache); extern APR_OPTIONAL_FN_TYPE(ap_cache_generate_key) *cache_generate_key; extern module AP_MODULE_DECLARE_DATA cache_module; /* -------------------------------------------------------------- */ /* * delete all URL entities from the cache * */ int cache_remove_url(cache_request_rec *cache, request_rec *r) { cache_provider_list *list; cache_handle_t *h; list = cache->providers; /* Remove the stale cache entry if present. If not, we're * being called from outside of a request; remove the * non-stale handle. */ h = cache->stale_handle ? cache->stale_handle : cache->handle; if (!h) { return OK; } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00691) "cache: Removing url %s from the cache", h->cache_obj->key); /* for each specified cache type, delete the URL */ while (list) { list->provider->remove_url(h, r); list = list->next; } return OK; } /* * create a new URL entity in the cache * * It is possible to store more than once entity per URL. This * function will always create a new entity, regardless of whether * other entities already exist for the same URL. * * The size of the entity is provided so that a cache module can * decide whether or not it wants to cache this particular entity. * If the size is unknown, a size of -1 should be set. */ int cache_create_entity(cache_request_rec *cache, request_rec *r, apr_off_t size, apr_bucket_brigade *in) { cache_provider_list *list; cache_handle_t *h = apr_pcalloc(r->pool, sizeof(cache_handle_t)); apr_status_t rv; if (!cache) { /* This should never happen */ ap_log_rerror(APLOG_MARK, APLOG_ERR, APR_EGENERAL, r, APLOGNO(00692) "cache: No cache request information available for key" " generation"); return APR_EGENERAL; } if (!cache->key) { rv = cache_generate_key(r, r->pool, &cache->key); if (rv != APR_SUCCESS) { return rv; } } list = cache->providers; /* for each specified cache type, delete the URL */ while (list) { switch (rv = list->provider->create_entity(h, r, cache->key, size, in)) { case OK: { cache->handle = h; cache->provider = list->provider; cache->provider_name = list->provider_name; return OK; } case DECLINED: { list = list->next; continue; } default: { return rv; } } } return DECLINED; } static int filter_header_do(void *v, const char *key, const char *val) { if ((*key == 'W' || *key == 'w') && !ap_cstr_casecmp(key, "Warning") && *val == '1') { /* any stored Warning headers with warn-code 1xx (see section * 14.46) MUST be deleted from the cache entry and the forwarded * response. */ } else { apr_table_addn(v, key, val); } return 1; } static int remove_header_do(void *v, const char *key, const char *val) { if ((*key == 'W' || *key == 'w') && !ap_cstr_casecmp(key, "Warning")) { /* any stored Warning headers with warn-code 2xx MUST be retained * in the cache entry and the forwarded response. */ } else { apr_table_unset(v, key); } return 1; } static int add_header_do(void *v, const char *key, const char *val) { apr_table_addn(v, key, val); return 1; } /** * Take two sets of headers, sandwich them together, and apply the result to * r->headers_out. * * To complicate this, a header may be duplicated in either table. Should a * header exist in the top table, all matching headers will be removed from * the bottom table before the headers are combined. The Warning headers are * handled specially. Warnings are added rather than being replaced, while * in the case of revalidation 1xx Warnings are stripped. * * The Content-Type and Last-Modified headers are then re-parsed and inserted * into the request. */ void cache_accept_headers(cache_handle_t *h, request_rec *r, apr_table_t *top, apr_table_t *bottom, int revalidation) { const char *v; if (revalidation) { r->headers_out = apr_table_make(r->pool, 10); apr_table_do(filter_header_do, r->headers_out, bottom, NULL); } else if (r->headers_out != bottom) { r->headers_out = apr_table_copy(r->pool, bottom); } apr_table_do(remove_header_do, r->headers_out, top, NULL); apr_table_do(add_header_do, r->headers_out, top, NULL); v = apr_table_get(r->headers_out, "Content-Type"); if (v) { ap_set_content_type(r, v); /* * Also unset possible Content-Type headers in r->headers_out and * r->err_headers_out as they may be different to what we have received * from the cache. * Actually they are not needed as r->content_type set by * ap_set_content_type above will be used in the store_headers functions * of the storage providers as a fallback and the HTTP_HEADER filter * does overwrite the Content-Type header with r->content_type anyway. */ apr_table_unset(r->headers_out, "Content-Type"); apr_table_unset(r->err_headers_out, "Content-Type"); } /* If the cache gave us a Last-Modified header, we can't just * pass it on blindly because of restrictions on future values. */ v = apr_table_get(r->headers_out, "Last-Modified"); if (v) { ap_update_mtime(r, apr_date_parse_http(v)); ap_set_last_modified(r); } } /* * select a specific URL entity in the cache * * It is possible to store more than one entity per URL. Content * negotiation is used to select an entity. Once an entity is * selected, details of it are stored in the per request * config to save time when serving the request later. * * This function returns OK if successful, DECLINED if no * cached entity fits the bill. */ int cache_select(cache_request_rec *cache, request_rec *r) { cache_provider_list *list; apr_status_t rv; cache_handle_t *h; if (!cache) { /* This should never happen */ ap_log_rerror(APLOG_MARK, APLOG_ERR, APR_EGENERAL, r, APLOGNO(00693) "cache: No cache request information available for key" " generation"); return DECLINED; } /* if no-cache, we can't serve from the cache, but we may store to the * cache. */ if (!ap_cache_check_no_cache(cache, r)) { return DECLINED; } if (!cache->key) { rv = cache_generate_key(r, r->pool, &cache->key); if (rv != APR_SUCCESS) { return DECLINED; } } /* go through the cache types till we get a match */ h = apr_palloc(r->pool, sizeof(cache_handle_t)); list = cache->providers; while (list) { switch ((rv = list->provider->open_entity(h, r, cache->key))) { case OK: { char *vary = NULL; int mismatch = 0; char *last = NULL; if (list->provider->recall_headers(h, r) != APR_SUCCESS) { /* try again with next cache type */ list = list->next; continue; } /* * Check Content-Negotiation - Vary * * At this point we need to make sure that the object we found in * the cache is the same object that would be delivered to the * client, when the effects of content negotiation are taken into * effect. * * In plain english, we want to make sure that a language-negotiated * document in one language is not given to a client asking for a * language negotiated document in a different language by mistake. * * This code makes the assumption that the storage manager will * cache the req_hdrs if the response contains a Vary header. * * RFC2616 13.6 and 14.44 describe the Vary mechanism. */ vary = cache_strqtok( apr_pstrdup(r->pool, cache_table_getm(r->pool, h->resp_hdrs, "Vary")), CACHE_SEPARATOR, &last); while (vary) { const char *h1, *h2; /* * is this header in the request and the header in the cached * request identical? If not, we give up and do a straight get */ h1 = cache_table_getm(r->pool, r->headers_in, vary); h2 = cache_table_getm(r->pool, h->req_hdrs, vary); if (h1 == h2) { /* both headers NULL, so a match - do nothing */ } else if (h1 && h2 && !strcmp(h1, h2)) { /* both headers exist and are equal - do nothing */ } else { /* headers do not match, so Vary failed */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00694) "cache_select(): Vary header mismatch."); mismatch = 1; break; } vary = cache_strqtok(NULL, CACHE_SEPARATOR, &last); } /* no vary match, try next provider */ if (mismatch) { /* try again with next cache type */ list = list->next; continue; } cache->provider = list->provider; cache->provider_name = list->provider_name; /* * RFC2616 13.3.4 Rules for When to Use Entity Tags and Last-Modified * Dates: An HTTP/1.1 caching proxy, upon receiving a conditional request * that includes both a Last-Modified date and one or more entity tags as * cache validators, MUST NOT return a locally cached response to the * client unless that cached response is consistent with all of the * conditional header fields in the request. */ if (ap_condition_if_match(r, h->resp_hdrs) == AP_CONDITION_NOMATCH || ap_condition_if_unmodified_since(r, h->resp_hdrs) == AP_CONDITION_NOMATCH || ap_condition_if_none_match(r, h->resp_hdrs) == AP_CONDITION_NOMATCH || ap_condition_if_modified_since(r, h->resp_hdrs) == AP_CONDITION_NOMATCH || ap_condition_if_range(r, h->resp_hdrs) == AP_CONDITION_NOMATCH) { mismatch = 1; } /* Is our cached response fresh enough? */ if (mismatch || !cache_check_freshness(h, cache, r)) { const char *etag, *lastmod; /* Cache-Control: only-if-cached and revalidation required, try * the next provider */ if (cache->control_in.only_if_cached) { /* try again with next cache type */ list = list->next; continue; } /* set aside the stale entry for accessing later */ cache->stale_headers = apr_table_copy(r->pool, r->headers_in); cache->stale_handle = h; /* if no existing conditionals, use conditionals of our own */ if (!mismatch) { ap_log_rerror( APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00695) "Cached response for %s isn't fresh. Adding " "conditional request headers.", r->uri); /* Remove existing conditionals that might conflict with ours */ apr_table_unset(r->headers_in, "If-Match"); apr_table_unset(r->headers_in, "If-Modified-Since"); apr_table_unset(r->headers_in, "If-None-Match"); apr_table_unset(r->headers_in, "If-Range"); apr_table_unset(r->headers_in, "If-Unmodified-Since"); etag = apr_table_get(h->resp_hdrs, "ETag"); lastmod = apr_table_get(h->resp_hdrs, "Last-Modified"); if (etag || lastmod) { /* If we have a cached etag and/or Last-Modified add in * our own conditionals. */ if (etag) { apr_table_set(r->headers_in, "If-None-Match", etag); } if (lastmod) { apr_table_set(r->headers_in, "If-Modified-Since", lastmod); } /* * Do not do Range requests with our own conditionals: If * we get 304 the Range does not matter and otherwise the * entity changed and we want to have the complete entity */ apr_table_unset(r->headers_in, "Range"); } } /* ready to revalidate, pretend we were never here */ return DECLINED; } /* Okay, this response looks okay. Merge in our stuff and go. */ cache_accept_headers(h, r, h->resp_hdrs, r->headers_out, 0); cache->handle = h; return OK; } case DECLINED: { /* try again with next cache type */ list = list->next; continue; } default: { /* oo-er! an error */ return rv; } } } /* if Cache-Control: only-if-cached, and not cached, return 504 */ if (cache->control_in.only_if_cached) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00696) "cache: 'only-if-cached' requested and no cached entity, " "returning 504 Gateway Timeout for: %s", r->uri); return HTTP_GATEWAY_TIME_OUT; } return DECLINED; } static apr_status_t cache_canonicalise_key(request_rec *r, apr_pool_t* p, const char *path, const char *query, apr_uri_t *parsed_uri, const char **key) { cache_server_conf *conf; char *port_str, *hn, *lcs; const char *hostname, *scheme; int i; const char *kpath; const char *kquery; if (*key) { /* * We have been here before during the processing of this request. */ return APR_SUCCESS; } /* * Get the module configuration. We need this for the CacheIgnoreQueryString * option below. */ conf = (cache_server_conf *) ap_get_module_config(r->server->module_config, &cache_module); /* * Use the canonical name to improve cache hit rate, but only if this is * not a proxy request or if this is a reverse proxy request. * We need to handle both cases in the same manner as for the reverse proxy * case we have the following situation: * * If a cached entry is looked up by mod_cache's quick handler r->proxyreq * is still unset in the reverse proxy case as it only gets set in the * translate name hook (either by ProxyPass or mod_rewrite) which is run * after the quick handler hook. This is different to the forward proxy * case where it gets set before the quick handler is run (in the * post_read_request hook). * If a cache entry is created by the CACHE_SAVE filter we always have * r->proxyreq set correctly. * So we must ensure that in the reverse proxy case we use the same code * path and using the canonical name seems to be the right thing to do * in the reverse proxy case. */ if (!r->proxyreq || (r->proxyreq == PROXYREQ_REVERSE)) { if (conf->base_uri && conf->base_uri->hostname) { hostname = conf->base_uri->hostname; } else { /* Use _default_ as the hostname if none present, as in mod_vhost */ hostname = ap_get_server_name(r); if (!hostname) { hostname = "_default_"; } } } else if (parsed_uri->hostname) { /* Copy the parsed uri hostname */ hn = apr_pstrdup(p, parsed_uri->hostname); ap_str_tolower(hn); /* const work-around */ hostname = hn; } else { /* We are a proxied request, with no hostname. Unlikely * to get very far - but just in case */ hostname = "_default_"; } /* * Copy the scheme, ensuring that it is lower case. If the parsed uri * contains no string or if this is not a proxy request get the http * scheme for this request. As r->parsed_uri.scheme is not set if this * is a reverse proxy request, it is ensured that the cases * "no proxy request" and "reverse proxy request" are handled in the same * manner (see above why this is needed). */ if (r->proxyreq && parsed_uri->scheme) { /* Copy the scheme and lower-case it */ lcs = apr_pstrdup(p, parsed_uri->scheme); ap_str_tolower(lcs); /* const work-around */ scheme = lcs; } else { if (conf->base_uri && conf->base_uri->scheme) { scheme = conf->base_uri->scheme; } else { scheme = ap_http_scheme(r); } } /* * If this is a proxy request, but not a reverse proxy request (see comment * above why these cases must be handled in the same manner), copy the * URI's port-string (which may be a service name). If the URI contains * no port-string, use apr-util's notion of the default port for that * scheme - if available. Otherwise use the port-number of the current * server. */ if (r->proxyreq && (r->proxyreq != PROXYREQ_REVERSE)) { if (parsed_uri->port_str) { port_str = apr_pcalloc(p, strlen(parsed_uri->port_str) + 2); port_str[0] = ':'; for (i = 0; parsed_uri->port_str[i]; i++) { port_str[i + 1] = apr_tolower(parsed_uri->port_str[i]); } } else if (apr_uri_port_of_scheme(scheme)) { port_str = apr_psprintf(p, ":%u", apr_uri_port_of_scheme(scheme)); } else { /* No port string given in the AbsoluteUri, and we have no * idea what the default port for the scheme is. Leave it * blank and live with the inefficiency of some extra cached * entities. */ port_str = ""; } } else { if (conf->base_uri && conf->base_uri->port_str) { port_str = apr_pstrcat(p, ":", conf->base_uri->port_str, NULL); } else if (conf->base_uri && conf->base_uri->hostname) { port_str = ""; } else { /* Use the server port */ port_str = apr_psprintf(p, ":%u", ap_get_server_port(r)); } } /* * Check if we need to ignore session identifiers in the URL and do so * if needed. */ kpath = path; kquery = conf->ignorequerystring ? NULL : query; if (conf->ignore_session_id->nelts) { int i; char **identifier; identifier = (char **) conf->ignore_session_id->elts; for (i = 0; i < conf->ignore_session_id->nelts; i++, identifier++) { int len; const char *param; len = strlen(*identifier); /* * Check that we have a parameter separator in the last segment * of the path and that the parameter matches our identifier */ if ((param = ap_strrchr_c(kpath, ';')) && !strncmp(param + 1, *identifier, len) && (*(param + len + 1) == '=') && !ap_strchr_c(param + len + 2, '/')) { kpath = apr_pstrmemdup(p, kpath, param - kpath); continue; } /* * Check if the identifier is in the query string and cut it out. */ if (kquery && *kquery) { /* * First check if the identifier is at the beginning of the * query string and followed by a '=' */ if (!strncmp(kquery, *identifier, len) && kquery[len] == '=') { param = kquery; } else { char *complete; /* * In order to avoid subkey matching (PR 48401) prepend * identifier with a '&' and append a '=' */ complete = apr_pstrcat(p, "&", *identifier, "=", NULL); param = ap_strstr_c(kquery, complete); /* If we found something we are sitting on the '&' */ if (param) { param++; } } if (param) { const char *amp; char *dup = NULL; if (kquery != param) { dup = apr_pstrmemdup(p, kquery, param - kquery); kquery = dup; } else { kquery = ""; } if ((amp = ap_strchr_c(param + len + 1, '&'))) { kquery = apr_pstrcat(p, kquery, amp + 1, NULL); } else { /* * If query string is not "", then we have the case * that the identifier parameter we removed was the * last one in the original query string. Hence we have * a trailing '&' which needs to be removed. */ if (dup) { dup[strlen(dup) - 1] = '\0'; } } } } } } /* Key format is a URI, optionally without the query-string (NULL * per above if conf->ignorequerystring) */ *key = apr_pstrcat(p, scheme, "://", hostname, port_str, kpath, "?", kquery, NULL); /* * Store the key in the request_config for the cache as r->parsed_uri * might have changed in the time from our first visit here triggered by the * quick handler and our possible second visit triggered by the CACHE_SAVE * filter (e.g. r->parsed_uri got unescaped). In this case we would save the * resource in the cache under a key where it is never found by the quick * handler during following requests. */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00698) "cache: Key for entity %s?%s is %s", path, query, *key); return APR_SUCCESS; } apr_status_t cache_generate_key_default(request_rec *r, apr_pool_t* p, const char **key) { /* In early processing (quick-handler, forward proxy), we want the initial * query-string from r->parsed_uri, since any change before CACHE_SAVE * shouldn't modify the key. Otherwise we want the actual query-string. */ const char *path = r->uri; const char *query = r->args; if (cache_use_early_url(r)) { path = r->parsed_uri.path; query = r->parsed_uri.query; } return cache_canonicalise_key(r, p, path, query, &r->parsed_uri, key); } /* * Invalidate a specific URL entity in all caches * * All cached entities for this URL are removed, usually in * response to a POST/PUT or DELETE. * * This function returns OK if at least one entity was found and * removed, and DECLINED if no cached entities were removed. */ int cache_invalidate(cache_request_rec *cache, request_rec *r) { cache_provider_list *list; apr_status_t rv, status = DECLINED; cache_handle_t *h; apr_uri_t location_uri; apr_uri_t content_location_uri; const char *location, *location_key = NULL; const char *content_location, *content_location_key = NULL; if (!cache) { /* This should never happen */ ap_log_rerror( APLOG_MARK, APLOG_ERR, APR_EGENERAL, r, APLOGNO(00697) "cache: No cache request information available for key" " generation"); return DECLINED; } if (!cache->key) { rv = cache_generate_key(r, r->pool, &cache->key); if (rv != APR_SUCCESS) { return DECLINED; } } location = apr_table_get(r->headers_out, "Location"); if (location) { if (apr_uri_parse(r->pool, location, &location_uri) || cache_canonicalise_key(r, r->pool, location_uri.path, location_uri.query, &location_uri, &location_key) || !(r->parsed_uri.hostname && location_uri.hostname && !strcmp(r->parsed_uri.hostname, location_uri.hostname))) { location_key = NULL; } } content_location = apr_table_get(r->headers_out, "Content-Location"); if (content_location) { if (apr_uri_parse(r->pool, content_location, &content_location_uri) || cache_canonicalise_key(r, r->pool, content_location_uri.path, content_location_uri.query, &content_location_uri, &content_location_key) || !(r->parsed_uri.hostname && content_location_uri.hostname && !strcmp(r->parsed_uri.hostname, content_location_uri.hostname))) { content_location_key = NULL; } } /* go through the cache types */ h = apr_palloc(r->pool, sizeof(cache_handle_t)); list = cache->providers; while (list) { /* invalidate the request uri */ rv = list->provider->open_entity(h, r, cache->key); if (OK == rv) { rv = list->provider->invalidate_entity(h, r); status = OK; } ap_log_rerror( APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(02468) "cache: Attempted to invalidate cached entity with key: %s", cache->key); /* invalidate the Location */ if (location_key) { rv = list->provider->open_entity(h, r, location_key); if (OK == rv) { rv = list->provider->invalidate_entity(h, r); status = OK; } ap_log_rerror( APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(02469) "cache: Attempted to invalidate cached entity with key: %s", location_key); } /* invalidate the Content-Location */ if (content_location_key) { rv = list->provider->open_entity(h, r, content_location_key); if (OK == rv) { rv = list->provider->invalidate_entity(h, r); status = OK; } ap_log_rerror( APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(02470) "cache: Attempted to invalidate cached entity with key: %s", content_location_key); } list = list->next; } return status; } httpd-2.4.41/modules/cache/config.m40000644000000000000500000001145413444157463015476 0ustar rootsrcdnl modules enabled in this directory by default dnl APACHE_MODULE(name, helptext[, objects[, structname[, default[, config]]]]) APACHE_MODPATH_INIT(cache) APACHE_MODULE(file_cache, File cache, , , most) dnl # list of object files for mod_cache cache_objs="dnl mod_cache.lo dnl cache_storage.lo dnl cache_util.lo dnl " cache_disk_objs="mod_cache_disk.lo" cache_socache_objs="mod_cache_socache.lo" case "$host" in *os2*) # OS/2 DLLs must resolve all symbols at build time # and we need some from main cache module cache_disk_objs="$cache_disk_objs mod_cache.la" cache_socache_objs="$cache_socache_objs mod_cache.la" ;; esac APACHE_MODULE(cache, dynamic file caching. At least one storage management module (e.g. mod_cache_disk) is also necessary., $cache_objs, , most) APACHE_MODULE(cache_disk, disk caching module, $cache_disk_objs, , most, , cache) APACHE_MODULE(cache_socache, shared object caching module, $cache_socache_objs, , most) dnl dnl APACHE_CHECK_DISTCACHE dnl dnl Configure for the detected distcache installation, giving dnl preference to "--with-distcache=" if it was specified. dnl AC_DEFUN([APACHE_CHECK_DISTCACHE],[ if test "x$ap_distcache_configured" = "x"; then dnl initialise the variables we use ap_distcache_found="" ap_distcache_base="" ap_distcache_libs="" ap_distcache_ldflags="" ap_distcache_with="" dnl Determine the distcache base directory, if any AC_MSG_CHECKING([for user-provided distcache base]) AC_ARG_WITH(distcache, APACHE_HELP_STRING(--with-distcache=PATH, Distcache installation directory), [ dnl If --with-distcache specifies a directory, we use that directory or fail if test "x$withval" != "xyes" -a "x$withval" != "x"; then dnl This ensures $withval is actually a directory and that it is absolute ap_distcache_with="yes" ap_distcache_base="`cd $withval ; pwd`" fi ]) if test "x$ap_distcache_base" = "x"; then AC_MSG_RESULT(none) else AC_MSG_RESULT($ap_distcache_base) fi dnl Run header and version checks saved_CPPFLAGS="$CPPFLAGS" saved_LIBS="$LIBS" saved_LDFLAGS="$LDFLAGS" if test "x$ap_distcache_base" != "x"; then APR_ADDTO(CPPFLAGS, [-I$ap_distcache_base/include]) APR_ADDTO(MOD_INCLUDES, [-I$ap_distcache_base/include]) APR_ADDTO(LDFLAGS, [-L$ap_distcache_base/lib]) APR_ADDTO(ap_distcache_ldflags, [-L$ap_distcache_base/lib]) if test "x$ap_platform_runtime_link_flag" != "x"; then APR_ADDTO(LDFLAGS, [$ap_platform_runtime_link_flag$ap_distcache_base/lib]) APR_ADDTO(ap_distcache_ldflags, [$ap_platform_runtime_link_flag$ap_distcache_base/lib]) fi fi dnl First check for mandatory headers AC_CHECK_HEADERS([distcache/dc_client.h], [ap_distcache_found="yes"], []) if test "$ap_distcache_found" = "yes"; then dnl test for a good version AC_MSG_CHECKING(for distcache version) AC_TRY_COMPILE([#include ],[ #if DISTCACHE_CLIENT_API != 0x0001 #error "distcache API version is unrecognised" #endif], [], [ap_distcache_found="no"]) AC_MSG_RESULT($ap_distcache_found) fi if test "$ap_distcache_found" != "yes"; then if test "x$ap_distcache_with" = "x"; then AC_MSG_WARN([...No distcache detected]) else AC_MSG_ERROR([...No distcache detected]) fi else dnl Run library and function checks AC_MSG_CHECKING(for distcache libraries) ap_distcache_libs="-ldistcache -lnal" APR_ADDTO(LIBS, [$ap_distcache_libs]) AC_TRY_LINK( [#include ], [DC_CTX *foo = DC_CTX_new((const char *)0,0);], [], [ap_distcache_found="no"]) AC_MSG_RESULT($ap_distcache_found) if test "$ap_distcache_found" != "yes"; then if test "x$ap_distcache_base" = "x"; then AC_MSG_WARN([... Error, distcache libraries were missing or unusable]) else AC_MSG_ERROR([... Error, distcache libraries were missing or unusable]) fi fi fi dnl restore CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" dnl Adjust apache's configuration based on what we found above. if test "$ap_distcache_found" = "yes"; then APR_ADDTO(MOD_SOCACHE_DC_LDADD, [$ap_distcache_ldflags $ap_distcache_libs]) AC_DEFINE(HAVE_DISTCACHE, 1, [Define if distcache support is enabled]) else enable_socache_dc=no fi ap_distcache_configured="yes" fi ]) APACHE_MODULE(socache_shmcb, shmcb small object cache provider, , , most) APACHE_MODULE(socache_dbm, dbm small object cache provider, , , most) APACHE_MODULE(socache_memcache, memcache small object cache provider, , , most) APACHE_MODULE(socache_redis, redis small object cache provider, , , most) APACHE_MODULE(socache_dc, distcache small object cache provider, , , no, [ APACHE_CHECK_DISTCACHE ]) APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) APACHE_MODPATH_FINISH httpd-2.4.41/modules/cache/mod_file_cache.mak0000644000000000000500000002403312701473373017353 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_file_cache.dsp !IF "$(CFG)" == "" CFG=mod_file_cache - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_file_cache - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_file_cache - Win32 Release" && "$(CFG)" != "mod_file_cache - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_file_cache.mak" CFG="mod_file_cache - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_file_cache - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_file_cache - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_file_cache - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_file_cache.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_file_cache.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_file_cache.obj" -@erase "$(INTDIR)\mod_file_cache.res" -@erase "$(INTDIR)\mod_file_cache_src.idb" -@erase "$(INTDIR)\mod_file_cache_src.pdb" -@erase "$(OUTDIR)\mod_file_cache.exp" -@erase "$(OUTDIR)\mod_file_cache.lib" -@erase "$(OUTDIR)\mod_file_cache.pdb" -@erase "$(OUTDIR)\mod_file_cache.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_file_cache_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_file_cache.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_file_cache.so" /d LONG_NAME="file_cache_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_file_cache.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=/nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_file_cache.pdb" /debug /out:"$(OUTDIR)\mod_file_cache.so" /implib:"$(OUTDIR)\mod_file_cache.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_file_cache.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_file_cache.obj" \ "$(INTDIR)\mod_file_cache.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_file_cache.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_file_cache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_file_cache.so" if exist .\Release\mod_file_cache.so.manifest mt.exe -manifest .\Release\mod_file_cache.so.manifest -outputresource:.\Release\mod_file_cache.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_file_cache - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_file_cache.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_file_cache.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_file_cache.obj" -@erase "$(INTDIR)\mod_file_cache.res" -@erase "$(INTDIR)\mod_file_cache_src.idb" -@erase "$(INTDIR)\mod_file_cache_src.pdb" -@erase "$(OUTDIR)\mod_file_cache.exp" -@erase "$(OUTDIR)\mod_file_cache.lib" -@erase "$(OUTDIR)\mod_file_cache.pdb" -@erase "$(OUTDIR)\mod_file_cache.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_file_cache_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_file_cache.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_file_cache.so" /d LONG_NAME="file_cache_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_file_cache.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=/nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_file_cache.pdb" /debug /out:"$(OUTDIR)\mod_file_cache.so" /implib:"$(OUTDIR)\mod_file_cache.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_file_cache.so LINK32_OBJS= \ "$(INTDIR)\mod_file_cache.obj" \ "$(INTDIR)\mod_file_cache.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_file_cache.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_file_cache.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_file_cache.so" if exist .\Debug\mod_file_cache.so.manifest mt.exe -manifest .\Debug\mod_file_cache.so.manifest -outputresource:.\Debug\mod_file_cache.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_file_cache.dep") !INCLUDE "mod_file_cache.dep" !ELSE !MESSAGE Warning: cannot find "mod_file_cache.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_file_cache - Win32 Release" || "$(CFG)" == "mod_file_cache - Win32 Debug" !IF "$(CFG)" == "mod_file_cache - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\cache" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_file_cache - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\cache" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_file_cache - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\cache" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_file_cache - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\cache" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_file_cache - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\cache" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\cache" !ELSEIF "$(CFG)" == "mod_file_cache - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\cache" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\cache" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_file_cache - Win32 Release" "$(INTDIR)\mod_file_cache.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_file_cache.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_file_cache.so" /d LONG_NAME="file_cache_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_file_cache - Win32 Debug" "$(INTDIR)\mod_file_cache.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_file_cache.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_file_cache.so" /d LONG_NAME="file_cache_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_file_cache.c "$(INTDIR)\mod_file_cache.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/cache/mod_socache_dc.c0000644000000000000500000001643712514767133017051 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_log.h" #include "http_request.h" #include "http_config.h" #include "http_protocol.h" #include "mod_status.h" #include "apr_strings.h" #include "apr_time.h" #include "ap_socache.h" #include "distcache/dc_client.h" #if !defined(DISTCACHE_CLIENT_API) || (DISTCACHE_CLIENT_API < 0x0001) #error "You must compile with a more recent version of the distcache-base package" #endif struct ap_socache_instance_t { /* Configured target server: */ const char *target; /* distcache client context: */ DC_CTX *dc; }; static const char *socache_dc_create(ap_socache_instance_t **context, const char *arg, apr_pool_t *tmp, apr_pool_t *p) { struct ap_socache_instance_t *ctx; ctx = *context = apr_palloc(p, sizeof *ctx); ctx->target = apr_pstrdup(p, arg); return NULL; } static apr_status_t socache_dc_init(ap_socache_instance_t *ctx, const char *namespace, const struct ap_socache_hints *hints, server_rec *s, apr_pool_t *p) { #if 0 /* If a "persistent connection" mode of operation is preferred, you *must* * also use the PIDCHECK flag to ensure fork()'d processes don't interlace * comms on the same connection as each other. */ #define SESSION_CTX_FLAGS SESSION_CTX_FLAG_PERSISTENT | \ SESSION_CTX_FLAG_PERSISTENT_PIDCHECK | \ SESSION_CTX_FLAG_PERSISTENT_RETRY | \ SESSION_CTX_FLAG_PERSISTENT_LATE #else /* This mode of operation will open a temporary connection to the 'target' * for each cache operation - this makes it safe against fork() * automatically. This mode is preferred when running a local proxy (over * unix domain sockets) because overhead is negligable and it reduces the * performance/stability danger of file-descriptor bloatage. */ #define SESSION_CTX_FLAGS 0 #endif ctx->dc = DC_CTX_new(ctx->target, SESSION_CTX_FLAGS); if (!ctx->dc) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00738) "distributed scache failed to obtain context"); return APR_EGENERAL; } ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(00739) "distributed scache context initialised"); return APR_SUCCESS; } static void socache_dc_destroy(ap_socache_instance_t *ctx, server_rec *s) { if (ctx && ctx->dc) { DC_CTX_free(ctx->dc); ctx->dc = NULL; } } static apr_status_t socache_dc_store(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, apr_time_t expiry, unsigned char *der, unsigned int der_len, apr_pool_t *p) { /* !@#$%^ - why do we deal with *absolute* time anyway??? * Uhm - because most things expire things at a specific time? * Were the API were thought out expiry - r->request_time is a good approximation */ expiry -= apr_time_now(); /* Send the serialised session to the distributed cache context */ if (!DC_CTX_add_session(ctx->dc, id, idlen, der, der_len, apr_time_msec(expiry))) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00740) "distributed scache 'store' failed"); return APR_EGENERAL; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00741) "distributed scache 'store' successful"); return APR_SUCCESS; } static apr_status_t socache_dc_retrieve(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, unsigned char *dest, unsigned int *destlen, apr_pool_t *p) { unsigned int data_len; /* Retrieve any corresponding session from the distributed cache context */ if (!DC_CTX_get_session(ctx->dc, id, idlen, dest, *destlen, &data_len)) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00742) "distributed scache 'retrieve' MISS"); return APR_NOTFOUND; } if (data_len > *destlen) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00743) "distributed scache 'retrieve' OVERFLOW"); return APR_ENOSPC; } *destlen = data_len; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00744) "distributed scache 'retrieve' HIT"); return APR_SUCCESS; } static apr_status_t socache_dc_remove(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, apr_pool_t *p) { /* Remove any corresponding session from the distributed cache context */ if (!DC_CTX_remove_session(ctx->dc, id, idlen)) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00745) "distributed scache 'remove' MISS"); return APR_NOTFOUND; } else { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00746) "distributed scache 'remove' HIT"); return APR_SUCCESS; } } static void socache_dc_status(ap_socache_instance_t *ctx, request_rec *r, int flags) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00747) "distributed scache 'socache_dc_status'"); if (!(flags & AP_STATUS_SHORT)) { ap_rprintf(r, "cache type: DC (Distributed Cache), " " target: %s
    ", ctx->target); } else { ap_rputs("CacheType: DC\n", r); ap_rvputs(r, "CacheTarget: ", ctx->target, "\n", NULL); } } static apr_status_t socache_dc_iterate(ap_socache_instance_t *instance, server_rec *s, void *userctx, ap_socache_iterator_t *iterator, apr_pool_t *pool) { return APR_ENOTIMPL; } static const ap_socache_provider_t socache_dc = { "distcache", 0, socache_dc_create, socache_dc_init, socache_dc_destroy, socache_dc_store, socache_dc_retrieve, socache_dc_remove, socache_dc_status, socache_dc_iterate }; static void register_hooks(apr_pool_t *p) { ap_register_provider(p, AP_SOCACHE_PROVIDER_GROUP, "dc", AP_SOCACHE_PROVIDER_VERSION, &socache_dc); } AP_DECLARE_MODULE(socache_dc) = { STANDARD20_MODULE_STUFF, NULL, NULL, NULL, NULL, NULL, register_hooks }; httpd-2.4.41/modules/cache/mod_cache.dep0000644000000000000500000001550512674411515016357 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_cache.mak .\cache_storage.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_atomic.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\cache_common.h"\ ".\cache_storage.h"\ ".\cache_util.h"\ ".\mod_cache.h"\ .\cache_util.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_atomic.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\cache_common.h"\ ".\cache_util.h"\ ".\mod_cache.h"\ .\mod_cache.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_atomic.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\cache_common.h"\ ".\cache_storage.h"\ ".\cache_util.h"\ ".\mod_cache.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/cache/cache_util.h0000644000000000000500000002716613065257310016236 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file cache_util.h * @brief Cache Storage Functions * * @defgroup Cache_util Cache Utility Functions * @ingroup MOD_CACHE * @{ */ #ifndef CACHE_UTIL_H #define CACHE_UTIL_H #ifdef __cplusplus extern "C" { #endif #include "mod_cache.h" #include "apr_hooks.h" #include "apr.h" #include "apr_lib.h" #include "apr_strings.h" #include "apr_buckets.h" #include "apr_md5.h" #include "apr_pools.h" #include "apr_strings.h" #include "apr_optional.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "httpd.h" #include "http_config.h" #include "ap_config.h" #include "http_core.h" #include "http_protocol.h" #include "http_request.h" #include "http_vhost.h" #include "http_main.h" #include "http_log.h" #include "http_connection.h" #include "util_filter.h" #include "apr_uri.h" #ifdef HAVE_NETDB_H #include #endif #ifdef HAVE_SYS_SOCKET_H #include #endif #ifdef HAVE_NETINET_IN_H #include #endif #ifdef HAVE_ARPA_INET_H #include #endif #include "apr_atomic.h" #ifndef MAX #define MAX(a,b) ((a) > (b) ? (a) : (b)) #endif #ifndef MIN #define MIN(a,b) ((a) < (b) ? (a) : (b)) #endif #define MSEC_ONE_DAY ((apr_time_t)(86400*APR_USEC_PER_SEC)) /* one day, in microseconds */ #define MSEC_ONE_HR ((apr_time_t)(3600*APR_USEC_PER_SEC)) /* one hour, in microseconds */ #define MSEC_ONE_MIN ((apr_time_t)(60*APR_USEC_PER_SEC)) /* one minute, in microseconds */ #define MSEC_ONE_SEC ((apr_time_t)(APR_USEC_PER_SEC)) /* one second, in microseconds */ #define DEFAULT_CACHE_MAXEXPIRE MSEC_ONE_DAY #define DEFAULT_CACHE_MINEXPIRE 0 #define DEFAULT_CACHE_EXPIRE MSEC_ONE_HR #define DEFAULT_CACHE_LMFACTOR (0.1) #define DEFAULT_CACHE_MAXAGE 5 #define DEFAULT_X_CACHE 0 #define DEFAULT_X_CACHE_DETAIL 0 #define DEFAULT_CACHE_STALE_ON_ERROR 1 #define DEFAULT_CACHE_LOCKPATH "/mod_cache-lock" #define CACHE_LOCKNAME_KEY "mod_cache-lockname" #define CACHE_LOCKFILE_KEY "mod_cache-lockfile" #define CACHE_CTX_KEY "mod_cache-ctx" #define CACHE_SEPARATOR ", \t" /** * cache_util.c */ struct cache_enable { apr_uri_t url; const char *type; apr_size_t pathlen; }; struct cache_disable { apr_uri_t url; apr_size_t pathlen; }; /* static information about the local cache */ typedef struct { apr_array_header_t *cacheenable; /* URLs to cache */ apr_array_header_t *cachedisable; /* URLs not to cache */ /** store the headers that should not be stored in the cache */ apr_array_header_t *ignore_headers; /** store the identifiers that should not be used for key calculation */ apr_array_header_t *ignore_session_id; const char *lockpath; apr_time_t lockmaxage; apr_uri_t *base_uri; /** ignore client's requests for uncached responses */ unsigned int ignorecachecontrol:1; /** ignore query-string when caching */ unsigned int ignorequerystring:1; /** run within the quick handler */ unsigned int quick:1; /* thundering herd lock */ unsigned int lock:1; unsigned int x_cache:1; unsigned int x_cache_detail:1; /* flag if CacheIgnoreHeader has been set */ #define CACHE_IGNORE_HEADERS_SET 1 #define CACHE_IGNORE_HEADERS_UNSET 0 unsigned int ignore_headers_set:1; /* flag if CacheIgnoreURLSessionIdentifiers has been set */ #define CACHE_IGNORE_SESSION_ID_SET 1 #define CACHE_IGNORE_SESSION_ID_UNSET 0 unsigned int ignore_session_id_set:1; unsigned int base_uri_set:1; unsigned int ignorecachecontrol_set:1; unsigned int ignorequerystring_set:1; unsigned int quick_set:1; unsigned int lock_set:1; unsigned int lockpath_set:1; unsigned int lockmaxage_set:1; unsigned int x_cache_set:1; unsigned int x_cache_detail_set:1; } cache_server_conf; typedef struct { /* Minimum time to keep cached files in msecs */ apr_time_t minex; /* Maximum time to keep cached files in msecs */ apr_time_t maxex; /* default time to keep cached file in msecs */ apr_time_t defex; /* factor for estimating expires date */ double factor; /* cache enabled for this location */ apr_array_header_t *cacheenable; /* cache disabled for this location */ unsigned int disable:1; /* set X-Cache headers */ unsigned int x_cache:1; unsigned int x_cache_detail:1; /* serve stale on error */ unsigned int stale_on_error:1; /** ignore the last-modified header when deciding to cache this request */ unsigned int no_last_mod_ignore:1; /** ignore expiration date from server */ unsigned int store_expired:1; /** ignore Cache-Control: private header from server */ unsigned int store_private:1; /** ignore Cache-Control: no-store header from client or server */ unsigned int store_nostore:1; unsigned int minex_set:1; unsigned int maxex_set:1; unsigned int defex_set:1; unsigned int factor_set:1; unsigned int x_cache_set:1; unsigned int x_cache_detail_set:1; unsigned int stale_on_error_set:1; unsigned int no_last_mod_ignore_set:1; unsigned int store_expired_set:1; unsigned int store_private_set:1; unsigned int store_nostore_set:1; unsigned int enable_set:1; unsigned int disable_set:1; } cache_dir_conf; /* A linked-list of authn providers. */ typedef struct cache_provider_list cache_provider_list; struct cache_provider_list { const char *provider_name; const cache_provider *provider; cache_provider_list *next; }; /* per request cache information */ typedef struct { cache_provider_list *providers; /* possible cache providers */ const cache_provider *provider; /* current cache provider */ const char *provider_name; /* current cache provider name */ int fresh; /* is the entity fresh? */ cache_handle_t *handle; /* current cache handle */ cache_handle_t *stale_handle; /* stale cache handle */ apr_table_t *stale_headers; /* original request headers. */ int in_checked; /* CACHE_SAVE must cache the entity */ int block_response; /* CACHE_SAVE must block response. */ apr_bucket_brigade *saved_brigade; /* copy of partial response */ apr_off_t saved_size; /* length of saved_brigade */ apr_time_t exp; /* expiration */ apr_time_t lastmod; /* last-modified time */ cache_info *info; /* current cache info */ ap_filter_t *save_filter; /* Enable us to restore the filter on error */ ap_filter_t *remove_url_filter; /* Enable us to remove the filter */ const char *key; /* The cache key created for this * request */ apr_off_t size; /* the content length from the headers, or -1 */ apr_bucket_brigade *out; /* brigade to reuse for upstream responses */ cache_control_t control_in; /* cache control incoming */ } cache_request_rec; /** * Check the whether the request allows a cached object to be served as per RFC2616 * section 14.9.4 (Cache Revalidation and Reload Controls) * @param cache cache_request_rec * @param r request_rec * @return 0 ==> cache object may not be served, 1 ==> cache object may be served */ int ap_cache_check_no_cache(cache_request_rec *cache, request_rec *r); /** * Check the whether the request allows a cached object to be stored as per RFC2616 * section 14.9.2 (What May be Stored by Caches) * @param cache cache_request_rec * @param r request_rec * @return 0 ==> cache object may not be served, 1 ==> cache object may be served */ int ap_cache_check_no_store(cache_request_rec *cache, request_rec *r); /** * Check the freshness of the cache object per RFC2616 section 13.2 (Expiration Model) * @param h cache_handle_t * @param cache cache_request_rec * @param r request_rec * @return 0 ==> cache object is stale, 1 ==> cache object is fresh */ int cache_check_freshness(cache_handle_t *h, cache_request_rec *cache, request_rec *r); /** * Try obtain a cache wide lock on the given cache key. * * If we return APR_SUCCESS, we obtained the lock, and we are clear to * proceed to the backend. If we return APR_EEXISTS, then the lock is * already locked, someone else has gone to refresh the backend data * already, so we must return stale data with a warning in the mean * time. If we return anything else, then something has gone pear * shaped, and we allow the request through to the backend regardless. * * This lock is created from the request pool, meaning that should * something go wrong and the lock isn't deleted on return of the * request headers from the backend for whatever reason, at worst the * lock will be cleaned up when the request is dies or finishes. * * If something goes truly bananas and the lock isn't deleted when the * request dies, the lock will be trashed when its max-age is reached, * or when a request arrives containing a Cache-Control: no-cache. At * no point is it possible for this lock to permanently deny access to * the backend. */ apr_status_t cache_try_lock(cache_server_conf *conf, cache_request_rec *cache, request_rec *r); /** * Remove the cache lock, if present. * * First, try to close the file handle, whose delete-on-close should * kill the file. Otherwise, just delete the file by name. * * If no lock name has yet been calculated, do the calculation of the * lock name first before trying to delete the file. * * If an optional bucket brigade is passed, the lock will only be * removed if the bucket brigade contains an EOS bucket. */ apr_status_t cache_remove_lock(cache_server_conf *conf, cache_request_rec *cache, request_rec *r, apr_bucket_brigade *bb); cache_provider_list *cache_get_providers(request_rec *r, cache_server_conf *conf); /** * Get a value from a table, where the table may contain multiple * values for a given key. * * When the table contains a single value, that value is returned * unchanged. * * When the table contains two or more values for a key, all values * for the key are returned, separated by commas. */ const char *cache_table_getm(apr_pool_t *p, const apr_table_t *t, const char *key); /** * String tokenizer that ignores separator characters within quoted strings * and escaped characters, as per RFC2616 section 2.2. */ char *cache_strqtok(char *str, const char *sep, char **last); /** * Merge err_headers_out into headers_out and add request's Content-Type and * Content-Encoding if available. */ apr_table_t *cache_merge_headers_out(request_rec *r); /** * Return whether to use request's path/query from early stage (r->parsed_uri) * or the current/rewritable ones (r->uri/r->args). */ int cache_use_early_url(request_rec *r); #ifdef __cplusplus } #endif #endif /* !CACHE_UTIL_H */ /** @} */ httpd-2.4.41/modules/cache/mod_cache_disk.c0000644000000000000500000015112313020257025017026 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_lib.h" #include "apr_file_io.h" #include "apr_strings.h" #include "mod_cache.h" #include "mod_cache_disk.h" #include "http_config.h" #include "http_log.h" #include "http_core.h" #include "ap_provider.h" #include "util_filter.h" #include "util_script.h" #include "util_charset.h" /* * mod_cache_disk: Disk Based HTTP 1.1 Cache. * * Flow to Find the .data file: * Incoming client requests URI /foo/bar/baz * Generate off of /foo/bar/baz * Open .header * Read in .header file (may contain Format #1 or Format #2) * If format #1 (Contains a list of Vary Headers): * Use each header name (from .header) with our request values (headers_in) to * regenerate using HeaderName+HeaderValue+.../foo/bar/baz * re-read in .header (must be format #2) * read in .data * * Format #1: * apr_uint32_t format; * apr_time_t expire; * apr_array_t vary_headers (delimited by CRLF) * * Format #2: * disk_cache_info_t (first sizeof(apr_uint32_t) bytes is the format) * entity name (dobj->name) [length is in disk_cache_info_t->name_len] * r->headers_out (delimited by CRLF) * CRLF * r->headers_in (delimited by CRLF) * CRLF */ module AP_MODULE_DECLARE_DATA cache_disk_module; /* Forward declarations */ static int remove_entity(cache_handle_t *h); static apr_status_t store_headers(cache_handle_t *h, request_rec *r, cache_info *i); static apr_status_t store_body(cache_handle_t *h, request_rec *r, apr_bucket_brigade *in, apr_bucket_brigade *out); static apr_status_t recall_headers(cache_handle_t *h, request_rec *r); static apr_status_t recall_body(cache_handle_t *h, apr_pool_t *p, apr_bucket_brigade *bb); static apr_status_t read_array(request_rec *r, apr_array_header_t* arr, apr_file_t *file); /* * Local static functions */ static char *header_file(apr_pool_t *p, disk_cache_conf *conf, disk_cache_object_t *dobj, const char *name) { if (!dobj->hashfile) { dobj->hashfile = ap_cache_generate_name(p, conf->dirlevels, conf->dirlength, name); } if (dobj->prefix) { return apr_pstrcat(p, dobj->prefix, CACHE_VDIR_SUFFIX "/", dobj->hashfile, CACHE_HEADER_SUFFIX, NULL); } else { return apr_pstrcat(p, conf->cache_root, "/", dobj->hashfile, CACHE_HEADER_SUFFIX, NULL); } } static char *data_file(apr_pool_t *p, disk_cache_conf *conf, disk_cache_object_t *dobj, const char *name) { if (!dobj->hashfile) { dobj->hashfile = ap_cache_generate_name(p, conf->dirlevels, conf->dirlength, name); } if (dobj->prefix) { return apr_pstrcat(p, dobj->prefix, CACHE_VDIR_SUFFIX "/", dobj->hashfile, CACHE_DATA_SUFFIX, NULL); } else { return apr_pstrcat(p, conf->cache_root, "/", dobj->hashfile, CACHE_DATA_SUFFIX, NULL); } } static apr_status_t mkdir_structure(disk_cache_conf *conf, const char *file, apr_pool_t *pool) { apr_status_t rv; char *p; for (p = (char*)file + conf->cache_root_len + 1;;) { p = strchr(p, '/'); if (!p) break; *p = '\0'; rv = apr_dir_make(file, APR_UREAD|APR_UWRITE|APR_UEXECUTE, pool); if (rv != APR_SUCCESS && !APR_STATUS_IS_EEXIST(rv)) { return rv; } *p = '/'; ++p; } return APR_SUCCESS; } /* htcacheclean may remove directories underneath us. * So, we'll try renaming three times at a cost of 0.002 seconds. */ static apr_status_t safe_file_rename(disk_cache_conf *conf, const char *src, const char *dest, apr_pool_t *pool) { apr_status_t rv; rv = apr_file_rename(src, dest, pool); if (rv != APR_SUCCESS) { int i; for (i = 0; i < 2 && rv != APR_SUCCESS; i++) { /* 1000 micro-seconds aka 0.001 seconds. */ apr_sleep(1000); rv = mkdir_structure(conf, dest, pool); if (rv != APR_SUCCESS) continue; rv = apr_file_rename(src, dest, pool); } } return rv; } static apr_status_t file_cache_el_final(disk_cache_conf *conf, disk_cache_file_t *file, request_rec *r) { apr_status_t rv = APR_SUCCESS; /* This assumes that the tempfiles are on the same file system * as the cache_root. If not, then we need a file copy/move * rather than a rename. */ /* move the file over */ if (file->tempfd) { rv = safe_file_rename(conf, file->tempfile, file->file, file->pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, rv, r, APLOGNO(00699) "rename tempfile to file failed:" " %s -> %s", file->tempfile, file->file); apr_file_remove(file->tempfile, file->pool); } file->tempfd = NULL; } return rv; } static apr_status_t file_cache_temp_cleanup(void *dummy) { disk_cache_file_t *file = (disk_cache_file_t *)dummy; /* clean up the temporary file */ if (file->tempfd) { apr_file_remove(file->tempfile, file->pool); file->tempfd = NULL; } file->tempfile = NULL; file->pool = NULL; return APR_SUCCESS; } static apr_status_t file_cache_create(disk_cache_conf *conf, disk_cache_file_t *file, apr_pool_t *pool) { file->pool = pool; file->tempfile = apr_pstrcat(pool, conf->cache_root, AP_TEMPFILE, NULL); apr_pool_cleanup_register(pool, file, file_cache_temp_cleanup, apr_pool_cleanup_null); return APR_SUCCESS; } /* These two functions get and put state information into the data * file for an ap_cache_el, this state information will be read * and written transparent to clients of this module */ static int file_cache_recall_mydata(apr_file_t *fd, cache_info *info, disk_cache_object_t *dobj, request_rec *r) { apr_status_t rv; char *urlbuff; apr_size_t len; /* read the data from the cache file */ len = sizeof(disk_cache_info_t); rv = apr_file_read_full(fd, &dobj->disk_info, len, &len); if (rv != APR_SUCCESS) { return rv; } /* Store it away so we can get it later. */ info->status = dobj->disk_info.status; info->date = dobj->disk_info.date; info->expire = dobj->disk_info.expire; info->request_time = dobj->disk_info.request_time; info->response_time = dobj->disk_info.response_time; memcpy(&info->control, &dobj->disk_info.control, sizeof(cache_control_t)); /* Note that we could optimize this by conditionally doing the palloc * depending upon the size. */ urlbuff = apr_palloc(r->pool, dobj->disk_info.name_len + 1); len = dobj->disk_info.name_len; rv = apr_file_read_full(fd, urlbuff, len, &len); if (rv != APR_SUCCESS) { return rv; } urlbuff[dobj->disk_info.name_len] = '\0'; /* check that we have the same URL */ /* Would strncmp be correct? */ if (strcmp(urlbuff, dobj->name) != 0) { return APR_EGENERAL; } return APR_SUCCESS; } static const char* regen_key(apr_pool_t *p, apr_table_t *headers, apr_array_header_t *varray, const char *oldkey) { struct iovec *iov; int i, k; int nvec; const char *header; const char **elts; nvec = (varray->nelts * 2) + 1; iov = apr_palloc(p, sizeof(struct iovec) * nvec); elts = (const char **) varray->elts; /* TODO: * - Handle multiple-value headers better. (sort them?) * - Handle Case in-sensitive Values better. * This isn't the end of the world, since it just lowers the cache * hit rate, but it would be nice to fix. * * The majority are case insenstive if they are values (encoding etc). * Most of rfc2616 is case insensitive on header contents. * * So the better solution may be to identify headers which should be * treated case-sensitive? * HTTP URI's (3.2.3) [host and scheme are insensitive] * HTTP method (5.1.1) * HTTP-date values (3.3.1) * 3.7 Media Types [exerpt] * The type, subtype, and parameter attribute names are case- * insensitive. Parameter values might or might not be case-sensitive, * depending on the semantics of the parameter name. * 4.20 Except [exerpt] * Comparison of expectation values is case-insensitive for unquoted * tokens (including the 100-continue token), and is case-sensitive for * quoted-string expectation-extensions. */ for (i=0, k=0; i < varray->nelts; i++) { header = apr_table_get(headers, elts[i]); if (!header) { header = ""; } iov[k].iov_base = (char*) elts[i]; iov[k].iov_len = strlen(elts[i]); k++; iov[k].iov_base = (char*) header; iov[k].iov_len = strlen(header); k++; } iov[k].iov_base = (char*) oldkey; iov[k].iov_len = strlen(oldkey); k++; return apr_pstrcatv(p, iov, k, NULL); } static int array_alphasort(const void *fn1, const void *fn2) { return strcmp(*(char**)fn1, *(char**)fn2); } static void tokens_to_array(apr_pool_t *p, const char *data, apr_array_header_t *arr) { char *token; while ((token = ap_get_list_item(p, &data)) != NULL) { *((const char **) apr_array_push(arr)) = token; } /* Sort it so that "Vary: A, B" and "Vary: B, A" are stored the same. */ qsort((void *) arr->elts, arr->nelts, sizeof(char *), array_alphasort); } /* * Hook and mod_cache callback functions */ static int create_entity(cache_handle_t *h, request_rec *r, const char *key, apr_off_t len, apr_bucket_brigade *bb) { disk_cache_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &cache_disk_module); disk_cache_conf *conf = ap_get_module_config(r->server->module_config, &cache_disk_module); cache_object_t *obj; disk_cache_object_t *dobj; apr_pool_t *pool; if (conf->cache_root == NULL) { return DECLINED; } /* we don't support caching of range requests (yet) */ if (r->status == HTTP_PARTIAL_CONTENT) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00700) "URL %s partial content response not cached", key); return DECLINED; } /* Note, len is -1 if unknown so don't trust it too hard */ if (len > dconf->maxfs) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00701) "URL %s failed the size check " "(%" APR_OFF_T_FMT " > %" APR_OFF_T_FMT ")", key, len, dconf->maxfs); return DECLINED; } if (len >= 0 && len < dconf->minfs) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00702) "URL %s failed the size check " "(%" APR_OFF_T_FMT " < %" APR_OFF_T_FMT ")", key, len, dconf->minfs); return DECLINED; } /* Allocate and initialize cache_object_t and disk_cache_object_t */ h->cache_obj = obj = apr_pcalloc(r->pool, sizeof(*obj)); obj->vobj = dobj = apr_pcalloc(r->pool, sizeof(*dobj)); obj->key = apr_pstrdup(r->pool, key); dobj->name = obj->key; dobj->prefix = NULL; /* Save the cache root */ dobj->root = apr_pstrmemdup(r->pool, conf->cache_root, conf->cache_root_len); dobj->root_len = conf->cache_root_len; apr_pool_create(&pool, r->pool); apr_pool_tag(pool, "mod_cache (create_entity)"); file_cache_create(conf, &dobj->hdrs, pool); file_cache_create(conf, &dobj->vary, pool); file_cache_create(conf, &dobj->data, pool); dobj->data.file = data_file(r->pool, conf, dobj, key); dobj->hdrs.file = header_file(r->pool, conf, dobj, key); dobj->vary.file = header_file(r->pool, conf, dobj, key); dobj->disk_info.header_only = r->header_only; return OK; } static int open_entity(cache_handle_t *h, request_rec *r, const char *key) { apr_uint32_t format; apr_size_t len; const char *nkey; apr_status_t rc; static int error_logged = 0; disk_cache_conf *conf = ap_get_module_config(r->server->module_config, &cache_disk_module); #ifdef APR_SENDFILE_ENABLED core_dir_config *coreconf = ap_get_core_module_config(r->per_dir_config); #endif apr_finfo_t finfo; cache_object_t *obj; cache_info *info; disk_cache_object_t *dobj; int flags; apr_pool_t *pool; h->cache_obj = NULL; /* Look up entity keyed to 'url' */ if (conf->cache_root == NULL) { if (!error_logged) { error_logged = 1; ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00703) "Cannot cache files to disk without a CacheRoot specified."); } return DECLINED; } /* Create and init the cache object */ obj = apr_pcalloc(r->pool, sizeof(cache_object_t)); dobj = apr_pcalloc(r->pool, sizeof(disk_cache_object_t)); info = &(obj->info); /* Open the headers file */ dobj->prefix = NULL; /* Save the cache root */ dobj->root = apr_pstrmemdup(r->pool, conf->cache_root, conf->cache_root_len); dobj->root_len = conf->cache_root_len; dobj->vary.file = header_file(r->pool, conf, dobj, key); flags = APR_READ|APR_BINARY|APR_BUFFERED; rc = apr_file_open(&dobj->vary.fd, dobj->vary.file, flags, 0, r->pool); if (rc != APR_SUCCESS) { return DECLINED; } /* read the format from the cache file */ len = sizeof(format); apr_file_read_full(dobj->vary.fd, &format, len, &len); if (format == VARY_FORMAT_VERSION) { apr_array_header_t* varray; apr_time_t expire; len = sizeof(expire); apr_file_read_full(dobj->vary.fd, &expire, len, &len); varray = apr_array_make(r->pool, 5, sizeof(char*)); rc = read_array(r, varray, dobj->vary.fd); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, r, APLOGNO(00704) "Cannot parse vary header file: %s", dobj->vary.file); apr_file_close(dobj->vary.fd); return DECLINED; } apr_file_close(dobj->vary.fd); nkey = regen_key(r->pool, r->headers_in, varray, key); dobj->hashfile = NULL; dobj->prefix = dobj->vary.file; dobj->hdrs.file = header_file(r->pool, conf, dobj, nkey); flags = APR_READ|APR_BINARY|APR_BUFFERED; rc = apr_file_open(&dobj->hdrs.fd, dobj->hdrs.file, flags, 0, r->pool); if (rc != APR_SUCCESS) { return DECLINED; } } else if (format != DISK_FORMAT_VERSION) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00705) "File '%s' has a version mismatch. File had version: %d.", dobj->vary.file, format); apr_file_close(dobj->vary.fd); return DECLINED; } else { apr_off_t offset = 0; /* oops, not vary as it turns out */ dobj->hdrs.fd = dobj->vary.fd; dobj->vary.fd = NULL; dobj->hdrs.file = dobj->vary.file; /* This wasn't a Vary Format file, so we must seek to the * start of the file again, so that later reads work. */ apr_file_seek(dobj->hdrs.fd, APR_SET, &offset); nkey = key; } obj->key = nkey; dobj->key = nkey; dobj->name = key; apr_pool_create(&pool, r->pool); apr_pool_tag(pool, "mod_cache (open_entity)"); file_cache_create(conf, &dobj->hdrs, pool); file_cache_create(conf, &dobj->vary, pool); file_cache_create(conf, &dobj->data, pool); dobj->data.file = data_file(r->pool, conf, dobj, nkey); /* Read the bytes to setup the cache_info fields */ rc = file_cache_recall_mydata(dobj->hdrs.fd, info, dobj, r); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, r, APLOGNO(00706) "Cannot read header file %s", dobj->hdrs.file); apr_file_close(dobj->hdrs.fd); return DECLINED; } /* Is this a cached HEAD request? */ if (dobj->disk_info.header_only && !r->header_only) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, APR_SUCCESS, r, APLOGNO(00707) "HEAD request cached, non-HEAD requested, ignoring: %s", dobj->hdrs.file); apr_file_close(dobj->hdrs.fd); return DECLINED; } /* Open the data file */ if (dobj->disk_info.has_body) { flags = APR_READ | APR_BINARY; #ifdef APR_SENDFILE_ENABLED /* When we are in the quick handler we don't have the per-directory * configuration, so this check only takes the global setting of * the EnableSendFile directive into account. */ flags |= AP_SENDFILE_ENABLED(coreconf->enable_sendfile); #endif rc = apr_file_open(&dobj->data.fd, dobj->data.file, flags, 0, r->pool); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, r, APLOGNO(00708) "Cannot open data file %s", dobj->data.file); apr_file_close(dobj->hdrs.fd); return DECLINED; } rc = apr_file_info_get(&finfo, APR_FINFO_SIZE | APR_FINFO_IDENT, dobj->data.fd); if (rc == APR_SUCCESS) { dobj->file_size = finfo.size; } /* Atomic check - does the body file belong to the header file? */ if (dobj->disk_info.inode == finfo.inode && dobj->disk_info.device == finfo.device) { /* Initialize the cache_handle callback functions */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00709) "Recalled cached URL info header %s", dobj->name); /* make the configuration stick */ h->cache_obj = obj; obj->vobj = dobj; return OK; } } else { /* make the configuration stick */ h->cache_obj = obj; obj->vobj = dobj; return OK; } /* Oh dear, no luck matching header to the body */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00710) "Cached URL info header '%s' didn't match body, ignoring this entry", dobj->name); apr_file_close(dobj->hdrs.fd); return DECLINED; } static void close_disk_cache_fd(disk_cache_file_t *file) { if (file->fd != NULL) { apr_file_close(file->fd); file->fd = NULL; } if (file->tempfd != NULL) { apr_file_close(file->tempfd); file->tempfd = NULL; } } static int remove_entity(cache_handle_t *h) { disk_cache_object_t *dobj = (disk_cache_object_t *) h->cache_obj->vobj; close_disk_cache_fd(&(dobj->hdrs)); close_disk_cache_fd(&(dobj->vary)); close_disk_cache_fd(&(dobj->data)); /* Null out the cache object pointer so next time we start from scratch */ h->cache_obj = NULL; return OK; } static int remove_url(cache_handle_t *h, request_rec *r) { apr_status_t rc; disk_cache_object_t *dobj; /* Get disk cache object from cache handle */ dobj = (disk_cache_object_t *) h->cache_obj->vobj; if (!dobj) { return DECLINED; } /* Delete headers file */ if (dobj->hdrs.file) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00711) "Deleting %s from cache.", dobj->hdrs.file); rc = apr_file_remove(dobj->hdrs.file, r->pool); if ((rc != APR_SUCCESS) && !APR_STATUS_IS_ENOENT(rc)) { /* Will only result in an output if httpd is started with -e debug. * For reason see log_error_core for the case s == NULL. */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rc, r, APLOGNO(00712) "Failed to delete headers file %s from cache.", dobj->hdrs.file); return DECLINED; } } /* Delete data file */ if (dobj->data.file) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00713) "Deleting %s from cache.", dobj->data.file); rc = apr_file_remove(dobj->data.file, r->pool); if ((rc != APR_SUCCESS) && !APR_STATUS_IS_ENOENT(rc)) { /* Will only result in an output if httpd is started with -e debug. * For reason see log_error_core for the case s == NULL. */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rc, r, APLOGNO(00714) "Failed to delete data file %s from cache.", dobj->data.file); return DECLINED; } } /* now delete directories as far as possible up to our cache root */ if (dobj->root) { const char *str_to_copy; str_to_copy = dobj->hdrs.file ? dobj->hdrs.file : dobj->data.file; if (str_to_copy) { char *dir, *slash, *q; dir = apr_pstrdup(r->pool, str_to_copy); /* remove filename */ slash = strrchr(dir, '/'); *slash = '\0'; /* * now walk our way back to the cache root, delete everything * in the way as far as possible * * Note: due to the way we constructed the file names in * header_file and data_file, we are guaranteed that the * cache_root is suffixed by at least one '/' which will be * turned into a terminating null by this loop. Therefore, * we won't either delete or go above our cache root. */ for (q = dir + dobj->root_len; *q ; ) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00715) "Deleting directory %s from cache", dir); rc = apr_dir_remove(dir, r->pool); if (rc != APR_SUCCESS && !APR_STATUS_IS_ENOENT(rc)) { break; } slash = strrchr(q, '/'); *slash = '\0'; } } } return OK; } static apr_status_t read_array(request_rec *r, apr_array_header_t* arr, apr_file_t *file) { char w[MAX_STRING_LEN]; int p; apr_status_t rv; while (1) { rv = apr_file_gets(w, MAX_STRING_LEN - 1, file); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00716) "Premature end of vary array."); return rv; } p = strlen(w); if (p > 0 && w[p - 1] == '\n') { if (p > 1 && w[p - 2] == CR) { w[p - 2] = '\0'; } else { w[p - 1] = '\0'; } } /* If we've finished reading the array, break out of the loop. */ if (w[0] == '\0') { break; } *((const char **) apr_array_push(arr)) = apr_pstrdup(r->pool, w); } return APR_SUCCESS; } static apr_status_t store_array(apr_file_t *fd, apr_array_header_t* arr) { int i; apr_status_t rv; struct iovec iov[2]; apr_size_t amt; const char **elts; elts = (const char **) arr->elts; for (i = 0; i < arr->nelts; i++) { iov[0].iov_base = (char*) elts[i]; iov[0].iov_len = strlen(elts[i]); iov[1].iov_base = CRLF; iov[1].iov_len = sizeof(CRLF) - 1; rv = apr_file_writev_full(fd, (const struct iovec *) &iov, 2, &amt); if (rv != APR_SUCCESS) { return rv; } } iov[0].iov_base = CRLF; iov[0].iov_len = sizeof(CRLF) - 1; return apr_file_writev_full(fd, (const struct iovec *) &iov, 1, &amt); } static apr_status_t read_table(cache_handle_t *handle, request_rec *r, apr_table_t *table, apr_file_t *file) { char w[MAX_STRING_LEN]; char *l; int p; apr_status_t rv; while (1) { /* ### What about APR_EOF? */ rv = apr_file_gets(w, MAX_STRING_LEN - 1, file); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00717) "Premature end of cache headers."); return rv; } /* Delete terminal (CR?)LF */ p = strlen(w); /* Indeed, the host's '\n': '\012' for UNIX; '\015' for MacOS; '\025' for OS/390 -- whatever the script generates. */ if (p > 0 && w[p - 1] == '\n') { if (p > 1 && w[p - 2] == CR) { w[p - 2] = '\0'; } else { w[p - 1] = '\0'; } } /* If we've finished reading the headers, break out of the loop. */ if (w[0] == '\0') { break; } #if APR_CHARSET_EBCDIC /* Chances are that we received an ASCII header text instead of * the expected EBCDIC header lines. Try to auto-detect: */ if (!(l = strchr(w, ':'))) { int maybeASCII = 0, maybeEBCDIC = 0; unsigned char *cp, native; apr_size_t inbytes_left, outbytes_left; for (cp = w; *cp != '\0'; ++cp) { native = apr_xlate_conv_byte(ap_hdrs_from_ascii, *cp); if (apr_isprint(*cp) && !apr_isprint(native)) ++maybeEBCDIC; if (!apr_isprint(*cp) && apr_isprint(native)) ++maybeASCII; } if (maybeASCII > maybeEBCDIC) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00718) "CGI Interface Error: Script headers apparently ASCII: (CGI = %s)", r->filename); inbytes_left = outbytes_left = cp - w; apr_xlate_conv_buffer(ap_hdrs_from_ascii, w, &inbytes_left, w, &outbytes_left); } } #endif /*APR_CHARSET_EBCDIC*/ /* if we see a bogus header don't ignore it. Shout and scream */ if (!(l = strchr(w, ':'))) { return APR_EGENERAL; } *l++ = '\0'; while (apr_isspace(*l)) { ++l; } apr_table_add(table, w, l); } return APR_SUCCESS; } /* * Reads headers from a buffer and returns an array of headers. * Returns NULL on file error * This routine tries to deal with too long lines and continuation lines. * @@@: XXX: FIXME: currently the headers are passed thru un-merged. * Is that okay, or should they be collapsed where possible? */ static apr_status_t recall_headers(cache_handle_t *h, request_rec *r) { disk_cache_object_t *dobj = (disk_cache_object_t *) h->cache_obj->vobj; apr_status_t rv; /* This case should not happen... */ if (!dobj->hdrs.fd) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00719) "recalling headers; but no header fd for %s", dobj->name); return APR_NOTFOUND; } h->req_hdrs = apr_table_make(r->pool, 20); h->resp_hdrs = apr_table_make(r->pool, 20); /* Call routine to read the header lines/status line */ rv = read_table(h, r, h->resp_hdrs, dobj->hdrs.fd); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02987) "Error reading response headers from %s for %s", dobj->hdrs.file, dobj->name); } rv = read_table(h, r, h->req_hdrs, dobj->hdrs.fd); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02988) "Error reading request headers from %s for %s", dobj->hdrs.file, dobj->name); } apr_file_close(dobj->hdrs.fd); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00720) "Recalled headers for URL %s", dobj->name); return APR_SUCCESS; } static apr_status_t recall_body(cache_handle_t *h, apr_pool_t *p, apr_bucket_brigade *bb) { disk_cache_object_t *dobj = (disk_cache_object_t*) h->cache_obj->vobj; if (dobj->data.fd) { apr_brigade_insert_file(bb, dobj->data.fd, 0, dobj->file_size, p); } return APR_SUCCESS; } static apr_status_t store_table(apr_file_t *fd, apr_table_t *table) { int i; apr_status_t rv; struct iovec iov[4]; apr_size_t amt; apr_table_entry_t *elts; elts = (apr_table_entry_t *) apr_table_elts(table)->elts; for (i = 0; i < apr_table_elts(table)->nelts; ++i) { if (elts[i].key != NULL) { iov[0].iov_base = elts[i].key; iov[0].iov_len = strlen(elts[i].key); iov[1].iov_base = ": "; iov[1].iov_len = sizeof(": ") - 1; iov[2].iov_base = elts[i].val; iov[2].iov_len = strlen(elts[i].val); iov[3].iov_base = CRLF; iov[3].iov_len = sizeof(CRLF) - 1; rv = apr_file_writev_full(fd, (const struct iovec *) &iov, 4, &amt); if (rv != APR_SUCCESS) { return rv; } } } iov[0].iov_base = CRLF; iov[0].iov_len = sizeof(CRLF) - 1; rv = apr_file_writev_full(fd, (const struct iovec *) &iov, 1, &amt); return rv; } static apr_status_t store_headers(cache_handle_t *h, request_rec *r, cache_info *info) { disk_cache_object_t *dobj = (disk_cache_object_t*) h->cache_obj->vobj; memcpy(&h->cache_obj->info, info, sizeof(cache_info)); if (r->headers_out) { dobj->headers_out = ap_cache_cacheable_headers_out(r); } if (r->headers_in) { dobj->headers_in = ap_cache_cacheable_headers_in(r); } if (r->header_only && r->status != HTTP_NOT_MODIFIED) { dobj->disk_info.header_only = 1; } return APR_SUCCESS; } static apr_status_t write_headers(cache_handle_t *h, request_rec *r) { disk_cache_conf *conf = ap_get_module_config(r->server->module_config, &cache_disk_module); apr_status_t rv; apr_size_t amt; disk_cache_object_t *dobj = (disk_cache_object_t*) h->cache_obj->vobj; disk_cache_info_t disk_info; struct iovec iov[2]; memset(&disk_info, 0, sizeof(disk_cache_info_t)); if (dobj->headers_out) { const char *tmp; tmp = apr_table_get(dobj->headers_out, "Vary"); if (tmp) { apr_array_header_t* varray; apr_uint32_t format = VARY_FORMAT_VERSION; /* If we were initially opened as a vary format, rollback * that internal state for the moment so we can recreate the * vary format hints in the appropriate directory. */ if (dobj->prefix) { dobj->hdrs.file = dobj->prefix; dobj->prefix = NULL; } rv = mkdir_structure(conf, dobj->hdrs.file, r->pool); rv = apr_file_mktemp(&dobj->vary.tempfd, dobj->vary.tempfile, APR_CREATE | APR_WRITE | APR_BINARY | APR_EXCL, dobj->vary.pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, rv, r, APLOGNO(00721) "could not create vary file %s", dobj->vary.tempfile); return rv; } amt = sizeof(format); rv = apr_file_write_full(dobj->vary.tempfd, &format, amt, NULL); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, rv, r, APLOGNO(00722) "could not write to vary file %s", dobj->vary.tempfile); apr_file_close(dobj->vary.tempfd); apr_pool_destroy(dobj->vary.pool); return rv; } amt = sizeof(h->cache_obj->info.expire); rv = apr_file_write_full(dobj->vary.tempfd, &h->cache_obj->info.expire, amt, NULL); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, rv, r, APLOGNO(00723) "could not write to vary file %s", dobj->vary.tempfile); apr_file_close(dobj->vary.tempfd); apr_pool_destroy(dobj->vary.pool); return rv; } varray = apr_array_make(r->pool, 6, sizeof(char*)); tokens_to_array(r->pool, tmp, varray); store_array(dobj->vary.tempfd, varray); rv = apr_file_close(dobj->vary.tempfd); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, rv, r, APLOGNO(00724) "could not close vary file %s", dobj->vary.tempfile); apr_pool_destroy(dobj->vary.pool); return rv; } tmp = regen_key(r->pool, dobj->headers_in, varray, dobj->name); dobj->prefix = dobj->hdrs.file; dobj->hashfile = NULL; dobj->data.file = data_file(r->pool, conf, dobj, tmp); dobj->hdrs.file = header_file(r->pool, conf, dobj, tmp); } } rv = apr_file_mktemp(&dobj->hdrs.tempfd, dobj->hdrs.tempfile, APR_CREATE | APR_WRITE | APR_BINARY | APR_BUFFERED | APR_EXCL, dobj->hdrs.pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, rv, r, APLOGNO(00725) "could not create header file %s", dobj->hdrs.tempfile); return rv; } disk_info.format = DISK_FORMAT_VERSION; disk_info.date = h->cache_obj->info.date; disk_info.expire = h->cache_obj->info.expire; disk_info.entity_version = dobj->disk_info.entity_version++; disk_info.request_time = h->cache_obj->info.request_time; disk_info.response_time = h->cache_obj->info.response_time; disk_info.status = h->cache_obj->info.status; disk_info.inode = dobj->disk_info.inode; disk_info.device = dobj->disk_info.device; disk_info.has_body = dobj->disk_info.has_body; disk_info.header_only = dobj->disk_info.header_only; disk_info.name_len = strlen(dobj->name); memcpy(&disk_info.control, &h->cache_obj->info.control, sizeof(cache_control_t)); iov[0].iov_base = (void*)&disk_info; iov[0].iov_len = sizeof(disk_cache_info_t); iov[1].iov_base = (void*)dobj->name; iov[1].iov_len = disk_info.name_len; rv = apr_file_writev_full(dobj->hdrs.tempfd, (const struct iovec *) &iov, 2, &amt); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, rv, r, APLOGNO(00726) "could not write info to header file %s", dobj->hdrs.tempfile); apr_file_close(dobj->hdrs.tempfd); apr_pool_destroy(dobj->hdrs.pool); return rv; } if (dobj->headers_out) { rv = store_table(dobj->hdrs.tempfd, dobj->headers_out); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, rv, r, APLOGNO(00727) "could not write out-headers to header file %s", dobj->hdrs.tempfile); apr_file_close(dobj->hdrs.tempfd); apr_pool_destroy(dobj->hdrs.pool); return rv; } } /* Parse the vary header and dump those fields from the headers_in. */ /* FIXME: Make call to the same thing cache_select calls to crack Vary. */ if (dobj->headers_in) { rv = store_table(dobj->hdrs.tempfd, dobj->headers_in); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, rv, r, APLOGNO(00728) "could not write in-headers to header file %s", dobj->hdrs.tempfile); apr_file_close(dobj->hdrs.tempfd); apr_pool_destroy(dobj->hdrs.pool); return rv; } } rv = apr_file_close(dobj->hdrs.tempfd); /* flush and close */ if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, rv, r, APLOGNO(00729) "could not close header file %s", dobj->hdrs.tempfile); apr_pool_destroy(dobj->hdrs.pool); return rv; } return APR_SUCCESS; } static apr_status_t store_body(cache_handle_t *h, request_rec *r, apr_bucket_brigade *in, apr_bucket_brigade *out) { apr_bucket *e; apr_status_t rv = APR_SUCCESS; disk_cache_object_t *dobj = (disk_cache_object_t *) h->cache_obj->vobj; disk_cache_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &cache_disk_module); int seen_eos = 0; if (!dobj->offset) { dobj->offset = dconf->readsize; } if (!dobj->timeout && dconf->readtime) { dobj->timeout = apr_time_now() + dconf->readtime; } if (dobj->offset) { apr_brigade_partition(in, dobj->offset, &e); } while (APR_SUCCESS == rv && !APR_BRIGADE_EMPTY(in)) { const char *str; apr_size_t length, written; e = APR_BRIGADE_FIRST(in); /* are we done completely? if so, pass any trailing buckets right through */ if (dobj->done || !dobj->data.pool) { APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(out, e); continue; } /* have we seen eos yet? */ if (APR_BUCKET_IS_EOS(e)) { seen_eos = 1; dobj->done = 1; APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(out, e); break; } /* honour flush buckets, we'll get called again */ if (APR_BUCKET_IS_FLUSH(e)) { APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(out, e); break; } /* metadata buckets are preserved as is */ if (APR_BUCKET_IS_METADATA(e)) { APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(out, e); continue; } /* read the bucket, write to the cache */ rv = apr_bucket_read(e, &str, &length, APR_BLOCK_READ); APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(out, e); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00730) "Error when reading bucket for URL %s", h->cache_obj->key); /* Remove the intermediate cache file and return non-APR_SUCCESS */ apr_pool_destroy(dobj->data.pool); return rv; } /* don't write empty buckets to the cache */ if (!length) { continue; } if (!dobj->disk_info.header_only) { /* Attempt to create the data file at the last possible moment, if * the body is empty, we don't write a file at all, and save an inode. */ if (!dobj->data.tempfd) { apr_finfo_t finfo; rv = apr_file_mktemp(&dobj->data.tempfd, dobj->data.tempfile, APR_CREATE | APR_WRITE | APR_BINARY | APR_BUFFERED | APR_EXCL, dobj->data.pool); if (rv != APR_SUCCESS) { apr_pool_destroy(dobj->data.pool); return rv; } dobj->file_size = 0; rv = apr_file_info_get(&finfo, APR_FINFO_IDENT, dobj->data.tempfd); if (rv != APR_SUCCESS) { apr_pool_destroy(dobj->data.pool); return rv; } dobj->disk_info.device = finfo.device; dobj->disk_info.inode = finfo.inode; dobj->disk_info.has_body = 1; } /* write to the cache, leave if we fail */ rv = apr_file_write_full(dobj->data.tempfd, str, length, &written); if (rv != APR_SUCCESS) { ap_log_rerror( APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00731) "Error when writing cache file for URL %s", h->cache_obj->key); /* Remove the intermediate cache file and return non-APR_SUCCESS */ apr_pool_destroy(dobj->data.pool); return rv; } dobj->file_size += written; if (dobj->file_size > dconf->maxfs) { ap_log_rerror( APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00732) "URL %s failed the size check " "(%" APR_OFF_T_FMT ">%" APR_OFF_T_FMT ")", h->cache_obj->key, dobj->file_size, dconf->maxfs); /* Remove the intermediate cache file and return non-APR_SUCCESS */ apr_pool_destroy(dobj->data.pool); return APR_EGENERAL; } } /* have we reached the limit of how much we're prepared to write in one * go? If so, leave, we'll get called again. This prevents us from trying * to swallow too much data at once, or taking so long to write the data * the client times out. */ dobj->offset -= length; if (dobj->offset <= 0) { dobj->offset = 0; break; } if ((dconf->readtime && apr_time_now() > dobj->timeout)) { dobj->timeout = 0; break; } } /* Was this the final bucket? If yes, close the temp file and perform * sanity checks. */ if (seen_eos) { const char *cl_header = apr_table_get(r->headers_out, "Content-Length"); if (!dobj->disk_info.header_only) { if (dobj->data.tempfd) { rv = apr_file_close(dobj->data.tempfd); if (rv != APR_SUCCESS) { /* Buffered write failed, abandon attempt to write */ apr_pool_destroy(dobj->data.pool); return rv; } } if (r->connection->aborted || r->no_cache) { ap_log_rerror( APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00733) "Discarding body for URL %s " "because connection has been aborted.", h->cache_obj->key); /* Remove the intermediate cache file and return non-APR_SUCCESS */ apr_pool_destroy(dobj->data.pool); return APR_EGENERAL; } if (dobj->file_size < dconf->minfs) { ap_log_rerror( APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00734) "URL %s failed the size check " "(%" APR_OFF_T_FMT "<%" APR_OFF_T_FMT ")", h->cache_obj->key, dobj->file_size, dconf->minfs); /* Remove the intermediate cache file and return non-APR_SUCCESS */ apr_pool_destroy(dobj->data.pool); return APR_EGENERAL; } if (cl_header) { apr_int64_t cl = apr_atoi64(cl_header); if ((errno == 0) && (dobj->file_size != cl)) { ap_log_rerror( APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00735) "URL %s didn't receive complete response, not caching", h->cache_obj->key); /* Remove the intermediate cache file and return non-APR_SUCCESS */ apr_pool_destroy(dobj->data.pool); return APR_EGENERAL; } } } /* All checks were fine, we're good to go when the commit comes */ } return APR_SUCCESS; } static apr_status_t commit_entity(cache_handle_t *h, request_rec *r) { disk_cache_conf *conf = ap_get_module_config(r->server->module_config, &cache_disk_module); disk_cache_object_t *dobj = (disk_cache_object_t *) h->cache_obj->vobj; apr_status_t rv; /* write the headers to disk at the last possible moment */ rv = write_headers(h, r); /* move header and data tempfiles to the final destination */ if (APR_SUCCESS == rv) { rv = file_cache_el_final(conf, &dobj->hdrs, r); } if (APR_SUCCESS == rv) { rv = file_cache_el_final(conf, &dobj->vary, r); } if (APR_SUCCESS == rv) { if (!dobj->disk_info.header_only) { rv = file_cache_el_final(conf, &dobj->data, r); } else if (dobj->data.file) { rv = apr_file_remove(dobj->data.file, dobj->data.pool); } } /* remove the cached items completely on any failure */ if (APR_SUCCESS != rv) { remove_url(h, r); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00736) "commit_entity: URL '%s' not cached due to earlier disk error.", dobj->name); } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00737) "commit_entity: Headers and body for URL %s cached.", dobj->name); } apr_pool_destroy(dobj->data.pool); return APR_SUCCESS; } static apr_status_t invalidate_entity(cache_handle_t *h, request_rec *r) { apr_status_t rv; rv = recall_headers(h, r); if (rv != APR_SUCCESS) { return rv; } /* mark the entity as invalidated */ h->cache_obj->info.control.invalidated = 1; return commit_entity(h, r); } static void *create_dir_config(apr_pool_t *p, char *dummy) { disk_cache_dir_conf *dconf = apr_pcalloc(p, sizeof(disk_cache_dir_conf)); dconf->maxfs = DEFAULT_MAX_FILE_SIZE; dconf->minfs = DEFAULT_MIN_FILE_SIZE; dconf->readsize = DEFAULT_READSIZE; dconf->readtime = DEFAULT_READTIME; return dconf; } static void *merge_dir_config(apr_pool_t *p, void *basev, void *addv) { disk_cache_dir_conf *new = (disk_cache_dir_conf *) apr_pcalloc(p, sizeof(disk_cache_dir_conf)); disk_cache_dir_conf *add = (disk_cache_dir_conf *) addv; disk_cache_dir_conf *base = (disk_cache_dir_conf *) basev; new->maxfs = (add->maxfs_set == 0) ? base->maxfs : add->maxfs; new->maxfs_set = add->maxfs_set || base->maxfs_set; new->minfs = (add->minfs_set == 0) ? base->minfs : add->minfs; new->minfs_set = add->minfs_set || base->minfs_set; new->readsize = (add->readsize_set == 0) ? base->readsize : add->readsize; new->readsize_set = add->readsize_set || base->readsize_set; new->readtime = (add->readtime_set == 0) ? base->readtime : add->readtime; new->readtime_set = add->readtime_set || base->readtime_set; return new; } static void *create_config(apr_pool_t *p, server_rec *s) { disk_cache_conf *conf = apr_pcalloc(p, sizeof(disk_cache_conf)); /* XXX: Set default values */ conf->dirlevels = DEFAULT_DIRLEVELS; conf->dirlength = DEFAULT_DIRLENGTH; conf->cache_root = NULL; conf->cache_root_len = 0; return conf; } /* * mod_cache_disk configuration directives handlers. */ static const char *set_cache_root(cmd_parms *parms, void *in_struct_ptr, const char *arg) { disk_cache_conf *conf = ap_get_module_config(parms->server->module_config, &cache_disk_module); conf->cache_root = arg; conf->cache_root_len = strlen(arg); /* TODO: canonicalize cache_root and strip off any trailing slashes */ return NULL; } /* * Consider eliminating the next two directives in favor of * Ian's prime number hash... * key = hash_fn( r->uri) * filename = "/key % prime1 /key %prime2/key %prime3" */ static const char *set_cache_dirlevels(cmd_parms *parms, void *in_struct_ptr, const char *arg) { disk_cache_conf *conf = ap_get_module_config(parms->server->module_config, &cache_disk_module); int val = atoi(arg); if (val < 1) return "CacheDirLevels value must be an integer greater than 0"; if (val * conf->dirlength > CACHEFILE_LEN) return "CacheDirLevels*CacheDirLength value must not be higher than 20"; conf->dirlevels = val; return NULL; } static const char *set_cache_dirlength(cmd_parms *parms, void *in_struct_ptr, const char *arg) { disk_cache_conf *conf = ap_get_module_config(parms->server->module_config, &cache_disk_module); int val = atoi(arg); if (val < 1) return "CacheDirLength value must be an integer greater than 0"; if (val * conf->dirlevels > CACHEFILE_LEN) return "CacheDirLevels*CacheDirLength value must not be higher than 20"; conf->dirlength = val; return NULL; } static const char *set_cache_minfs(cmd_parms *parms, void *in_struct_ptr, const char *arg) { disk_cache_dir_conf *dconf = (disk_cache_dir_conf *)in_struct_ptr; if (apr_strtoff(&dconf->minfs, arg, NULL, 10) != APR_SUCCESS || dconf->minfs < 0) { return "CacheMinFileSize argument must be a non-negative integer representing the min size of a file to cache in bytes."; } dconf->minfs_set = 1; return NULL; } static const char *set_cache_maxfs(cmd_parms *parms, void *in_struct_ptr, const char *arg) { disk_cache_dir_conf *dconf = (disk_cache_dir_conf *)in_struct_ptr; if (apr_strtoff(&dconf->maxfs, arg, NULL, 10) != APR_SUCCESS || dconf->maxfs < 0) { return "CacheMaxFileSize argument must be a non-negative integer representing the max size of a file to cache in bytes."; } dconf->maxfs_set = 1; return NULL; } static const char *set_cache_readsize(cmd_parms *parms, void *in_struct_ptr, const char *arg) { disk_cache_dir_conf *dconf = (disk_cache_dir_conf *)in_struct_ptr; if (apr_strtoff(&dconf->readsize, arg, NULL, 10) != APR_SUCCESS || dconf->readsize < 0) { return "CacheReadSize argument must be a non-negative integer representing the max amount of data to cache in go."; } dconf->readsize_set = 1; return NULL; } static const char *set_cache_readtime(cmd_parms *parms, void *in_struct_ptr, const char *arg) { disk_cache_dir_conf *dconf = (disk_cache_dir_conf *)in_struct_ptr; apr_off_t milliseconds; if (apr_strtoff(&milliseconds, arg, NULL, 10) != APR_SUCCESS || milliseconds < 0) { return "CacheReadTime argument must be a non-negative integer representing the max amount of time taken to cache in go."; } dconf->readtime = apr_time_from_msec(milliseconds); dconf->readtime_set = 1; return NULL; } static const command_rec disk_cache_cmds[] = { AP_INIT_TAKE1("CacheRoot", set_cache_root, NULL, RSRC_CONF, "The directory to store cache files"), AP_INIT_TAKE1("CacheDirLevels", set_cache_dirlevels, NULL, RSRC_CONF, "The number of levels of subdirectories in the cache"), AP_INIT_TAKE1("CacheDirLength", set_cache_dirlength, NULL, RSRC_CONF, "The number of characters in subdirectory names"), AP_INIT_TAKE1("CacheMinFileSize", set_cache_minfs, NULL, RSRC_CONF | ACCESS_CONF, "The minimum file size to cache a document"), AP_INIT_TAKE1("CacheMaxFileSize", set_cache_maxfs, NULL, RSRC_CONF | ACCESS_CONF, "The maximum file size to cache a document"), AP_INIT_TAKE1("CacheReadSize", set_cache_readsize, NULL, RSRC_CONF | ACCESS_CONF, "The maximum quantity of data to attempt to read and cache in one go"), AP_INIT_TAKE1("CacheReadTime", set_cache_readtime, NULL, RSRC_CONF | ACCESS_CONF, "The maximum time taken to attempt to read and cache in go"), {NULL} }; static const cache_provider cache_disk_provider = { &remove_entity, &store_headers, &store_body, &recall_headers, &recall_body, &create_entity, &open_entity, &remove_url, &commit_entity, &invalidate_entity }; static void disk_cache_register_hook(apr_pool_t *p) { /* cache initializer */ ap_register_provider(p, CACHE_PROVIDER_GROUP, "disk", "0", &cache_disk_provider); } AP_DECLARE_MODULE(cache_disk) = { STANDARD20_MODULE_STUFF, create_dir_config, /* create per-directory config structure */ merge_dir_config, /* merge per-directory config structures */ create_config, /* create per-server config structure */ NULL, /* merge per-server config structures */ disk_cache_cmds, /* command apr_table_t */ disk_cache_register_hook /* register hooks */ }; httpd-2.4.41/modules/cache/.indent.pro0000644000000000000500000000127510150161574016035 0ustar rootsrc-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int httpd-2.4.41/modules/cache/cache_util.c0000644000000000000500000013000313066765661016230 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_cache.h" #include "cache_util.h" #include APLOG_USE_MODULE(cache); /* -------------------------------------------------------------- */ extern APR_OPTIONAL_FN_TYPE(ap_cache_generate_key) *cache_generate_key; extern module AP_MODULE_DECLARE_DATA cache_module; /* Determine if "url" matches the hostname, scheme and port and path * in "filter". All but the path comparisons are case-insensitive. */ static int uri_meets_conditions(const apr_uri_t *filter, const int pathlen, const apr_uri_t *url, const char *path) { /* Scheme, hostname port and local part. The filter URI and the * URI we test may have the following shapes: * / * [:://[:][/]] * That is, if there is no scheme then there must be only the path, * and we check only the path; if there is a scheme, we check the * scheme for equality, and then if present we match the hostname, * and then if present match the port, and finally the path if any. * * Note that this means that "/" only matches local paths, * and to match proxied paths one *must* specify the scheme. */ /* Is the filter is just for a local path or a proxy URI? */ if (!filter->scheme) { if (url->scheme || url->hostname) { return 0; } } else { /* The URI scheme must be present and identical except for case. */ if (!url->scheme || ap_cstr_casecmp(filter->scheme, url->scheme)) { return 0; } /* If the filter hostname is null or empty it matches any hostname, * if it begins with a "*" it matches the _end_ of the URI hostname * excluding the "*", if it begins with a "." it matches the _end_ * of the URI * hostname including the ".", otherwise it must match * the URI hostname exactly. */ if (filter->hostname && filter->hostname[0]) { if (filter->hostname[0] == '.') { const size_t fhostlen = strlen(filter->hostname); const size_t uhostlen = url->hostname ? strlen(url->hostname) : 0; if (fhostlen > uhostlen || (url->hostname && strcasecmp(filter->hostname, url->hostname + uhostlen - fhostlen))) { return 0; } } else if (filter->hostname[0] == '*') { const size_t fhostlen = strlen(filter->hostname + 1); const size_t uhostlen = url->hostname ? strlen(url->hostname) : 0; if (fhostlen > uhostlen || (url->hostname && strcasecmp(filter->hostname + 1, url->hostname + uhostlen - fhostlen))) { return 0; } } else if (!url->hostname || strcasecmp(filter->hostname, url->hostname)) { return 0; } } /* If the filter port is empty it matches any URL port. * If the filter or URL port are missing, or the URL port is * empty, they default to the port for their scheme. */ if (!(filter->port_str && !filter->port_str[0])) { /* NOTE: ap_port_of_scheme will return 0 if given NULL input */ const unsigned fport = filter->port_str ? filter->port : apr_uri_port_of_scheme(filter->scheme); const unsigned uport = (url->port_str && url->port_str[0]) ? url->port : apr_uri_port_of_scheme(url->scheme); if (fport != uport) { return 0; } } } /* For HTTP caching purposes, an empty (NULL) path is equivalent to * a single "/" path. RFCs 3986/2396 */ if (!path) { if (*filter->path == '/' && pathlen == 1) { return 1; } else { return 0; } } /* Url has met all of the filter conditions so far, determine * if the paths match. */ return !strncmp(filter->path, path, pathlen); } int cache_use_early_url(request_rec *r) { cache_server_conf *conf; if (r->proxyreq == PROXYREQ_PROXY) { return 1; } conf = ap_get_module_config(r->server->module_config, &cache_module); if (conf->quick) { return 1; } return 0; } static cache_provider_list *get_provider(request_rec *r, struct cache_enable *ent, cache_provider_list *providers) { /* Fetch from global config and add to the list. */ cache_provider *provider; provider = ap_lookup_provider(CACHE_PROVIDER_GROUP, ent->type, "0"); if (!provider) { /* Log an error! */ } else { cache_provider_list *newp; newp = apr_pcalloc(r->pool, sizeof(cache_provider_list)); newp->provider_name = ent->type; newp->provider = provider; if (!providers) { providers = newp; } else { cache_provider_list *last = providers; while (last->next) { if (last->provider == provider) { return providers; } last = last->next; } if (last->provider == provider) { return providers; } last->next = newp; } } return providers; } cache_provider_list *cache_get_providers(request_rec *r, cache_server_conf *conf) { cache_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &cache_module); cache_provider_list *providers = NULL; const char *path; int i; /* per directory cache disable */ if (dconf->disable) { return NULL; } path = cache_use_early_url(r) ? r->parsed_uri.path : r->uri; /* global cache disable */ for (i = 0; i < conf->cachedisable->nelts; i++) { struct cache_disable *ent = (struct cache_disable *)conf->cachedisable->elts; if (uri_meets_conditions(&ent[i].url, ent[i].pathlen, &r->parsed_uri, path)) { /* Stop searching now. */ return NULL; } } /* loop through all the per directory cacheenable entries */ for (i = 0; i < dconf->cacheenable->nelts; i++) { struct cache_enable *ent = (struct cache_enable *)dconf->cacheenable->elts; providers = get_provider(r, &ent[i], providers); } /* loop through all the global cacheenable entries */ for (i = 0; i < conf->cacheenable->nelts; i++) { struct cache_enable *ent = (struct cache_enable *)conf->cacheenable->elts; if (uri_meets_conditions(&ent[i].url, ent[i].pathlen, &r->parsed_uri, path)) { providers = get_provider(r, &ent[i], providers); } } return providers; } /* do a HTTP/1.1 age calculation */ CACHE_DECLARE(apr_int64_t) ap_cache_current_age(cache_info *info, const apr_time_t age_value, apr_time_t now) { apr_time_t apparent_age, corrected_received_age, response_delay, corrected_initial_age, resident_time, current_age, age_value_usec; age_value_usec = apr_time_from_sec(age_value); /* Perform an HTTP/1.1 age calculation. (RFC2616 13.2.3) */ apparent_age = MAX(0, info->response_time - info->date); corrected_received_age = MAX(apparent_age, age_value_usec); response_delay = info->response_time - info->request_time; corrected_initial_age = corrected_received_age + response_delay; resident_time = now - info->response_time; current_age = corrected_initial_age + resident_time; if (current_age < 0) { current_age = 0; } return apr_time_sec(current_age); } /** * Try obtain a cache wide lock on the given cache key. * * If we return APR_SUCCESS, we obtained the lock, and we are clear to * proceed to the backend. If we return APR_EEXIST, then the lock is * already locked, someone else has gone to refresh the backend data * already, so we must return stale data with a warning in the mean * time. If we return anything else, then something has gone pear * shaped, and we allow the request through to the backend regardless. * * This lock is created from the request pool, meaning that should * something go wrong and the lock isn't deleted on return of the * request headers from the backend for whatever reason, at worst the * lock will be cleaned up when the request dies or finishes. * * If something goes truly bananas and the lock isn't deleted when the * request dies, the lock will be trashed when its max-age is reached, * or when a request arrives containing a Cache-Control: no-cache. At * no point is it possible for this lock to permanently deny access to * the backend. */ apr_status_t cache_try_lock(cache_server_conf *conf, cache_request_rec *cache, request_rec *r) { apr_status_t status; const char *lockname; const char *path; char dir[5]; apr_time_t now = apr_time_now(); apr_finfo_t finfo; apr_file_t *lockfile; void *dummy; finfo.mtime = 0; if (!conf || !conf->lock || !conf->lockpath) { /* no locks configured, leave */ return APR_SUCCESS; } /* lock already obtained earlier? if so, success */ apr_pool_userdata_get(&dummy, CACHE_LOCKFILE_KEY, r->pool); if (dummy) { return APR_SUCCESS; } /* create the key if it doesn't exist */ if (!cache->key) { cache_handle_t *h; /* * Try to use the key of a possible open but stale cache * entry if we have one. */ if (cache->handle != NULL) { h = cache->handle; } else { h = cache->stale_handle; } if ((h != NULL) && (h->cache_obj != NULL) && (h->cache_obj->key != NULL)) { cache->key = apr_pstrdup(r->pool, h->cache_obj->key); } else { cache_generate_key(r, r->pool, &cache->key); } } /* create a hashed filename from the key, and save it for later */ lockname = ap_cache_generate_name(r->pool, 0, 0, cache->key); /* lock files represent discrete just-went-stale URLs "in flight", so * we support a simple two level directory structure, more is overkill. */ dir[0] = '/'; dir[1] = lockname[0]; dir[2] = '/'; dir[3] = lockname[1]; dir[4] = 0; /* make the directories */ path = apr_pstrcat(r->pool, conf->lockpath, dir, NULL); if (APR_SUCCESS != (status = apr_dir_make_recursive(path, APR_UREAD|APR_UWRITE|APR_UEXECUTE, r->pool))) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(00778) "Could not create a cache lock directory: %s", path); return status; } lockname = apr_pstrcat(r->pool, path, "/", lockname, NULL); apr_pool_userdata_set(lockname, CACHE_LOCKNAME_KEY, NULL, r->pool); /* is an existing lock file too old? */ status = apr_stat(&finfo, lockname, APR_FINFO_MTIME | APR_FINFO_NLINK, r->pool); if (!(APR_STATUS_IS_ENOENT(status)) && APR_SUCCESS != status) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(00779) "Could not stat a cache lock file: %s", lockname); return status; } if ((status == APR_SUCCESS) && (((now - finfo.mtime) > conf->lockmaxage) || (now < finfo.mtime))) { ap_log_rerror(APLOG_MARK, APLOG_INFO, status, r, APLOGNO(00780) "Cache lock file for '%s' too old, removing: %s", r->uri, lockname); apr_file_remove(lockname, r->pool); } /* try obtain a lock on the file */ if (APR_SUCCESS == (status = apr_file_open(&lockfile, lockname, APR_WRITE | APR_CREATE | APR_EXCL | APR_DELONCLOSE, APR_UREAD | APR_UWRITE, r->pool))) { apr_pool_userdata_set(lockfile, CACHE_LOCKFILE_KEY, NULL, r->pool); } return status; } /** * Remove the cache lock, if present. * * First, try to close the file handle, whose delete-on-close should * kill the file. Otherwise, just delete the file by name. * * If no lock name has yet been calculated, do the calculation of the * lock name first before trying to delete the file. * * If an optional bucket brigade is passed, the lock will only be * removed if the bucket brigade contains an EOS bucket. */ apr_status_t cache_remove_lock(cache_server_conf *conf, cache_request_rec *cache, request_rec *r, apr_bucket_brigade *bb) { void *dummy; const char *lockname; if (!conf || !conf->lock || !conf->lockpath) { /* no locks configured, leave */ return APR_SUCCESS; } if (bb) { apr_bucket *e; int eos_found = 0; for (e = APR_BRIGADE_FIRST(bb); e != APR_BRIGADE_SENTINEL(bb); e = APR_BUCKET_NEXT(e)) { if (APR_BUCKET_IS_EOS(e)) { eos_found = 1; break; } } if (!eos_found) { /* no eos found in brigade, don't delete anything just yet, * we are not done. */ return APR_SUCCESS; } } apr_pool_userdata_get(&dummy, CACHE_LOCKFILE_KEY, r->pool); if (dummy) { return apr_file_close((apr_file_t *)dummy); } apr_pool_userdata_get(&dummy, CACHE_LOCKNAME_KEY, r->pool); lockname = (const char *)dummy; if (!lockname) { char dir[5]; /* create the key if it doesn't exist */ if (!cache->key) { cache_generate_key(r, r->pool, &cache->key); } /* create a hashed filename from the key, and save it for later */ lockname = ap_cache_generate_name(r->pool, 0, 0, cache->key); /* lock files represent discrete just-went-stale URLs "in flight", so * we support a simple two level directory structure, more is overkill. */ dir[0] = '/'; dir[1] = lockname[0]; dir[2] = '/'; dir[3] = lockname[1]; dir[4] = 0; lockname = apr_pstrcat(r->pool, conf->lockpath, dir, "/", lockname, NULL); } return apr_file_remove(lockname, r->pool); } int ap_cache_check_no_cache(cache_request_rec *cache, request_rec *r) { cache_server_conf *conf = (cache_server_conf *)ap_get_module_config(r->server->module_config, &cache_module); /* * At this point, we may have data cached, but the request may have * specified that cached data may not be used in a response. * * This is covered under RFC2616 section 14.9.4 (Cache Revalidation and * Reload Controls). * * - RFC2616 14.9.4 End to end reload, Cache-Control: no-cache, or Pragma: * no-cache. The server MUST NOT use a cached copy when responding to such * a request. */ /* This value comes from the client's initial request. */ if (!cache->control_in.parsed) { const char *cc_req = cache_table_getm(r->pool, r->headers_in, "Cache-Control"); const char *pragma = cache_table_getm(r->pool, r->headers_in, "Pragma"); ap_cache_control(r, &cache->control_in, cc_req, pragma, r->headers_in); } if (cache->control_in.no_cache) { if (!conf->ignorecachecontrol) { return 0; } else { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02657) "Incoming request is asking for an uncached version of " "%s, but we have been configured to ignore it and serve " "cached content anyway", r->unparsed_uri); } } return 1; } int ap_cache_check_no_store(cache_request_rec *cache, request_rec *r) { cache_server_conf *conf = (cache_server_conf *)ap_get_module_config(r->server->module_config, &cache_module); /* * At this point, we may have data cached, but the request may have * specified that cached data may not be used in a response. * * - RFC2616 14.9.2 What May be Stored by Caches. If Cache-Control: * no-store arrives, do not serve from or store to the cache. */ /* This value comes from the client's initial request. */ if (!cache->control_in.parsed) { const char *cc_req = cache_table_getm(r->pool, r->headers_in, "Cache-Control"); const char *pragma = cache_table_getm(r->pool, r->headers_in, "Pragma"); ap_cache_control(r, &cache->control_in, cc_req, pragma, r->headers_in); } if (cache->control_in.no_store) { if (!conf->ignorecachecontrol) { /* We're not allowed to serve a cached copy */ return 0; } else { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02658) "Incoming request is asking for a no-store version of " "%s, but we have been configured to ignore it and serve " "cached content anyway", r->unparsed_uri); } } return 1; } int cache_check_freshness(cache_handle_t *h, cache_request_rec *cache, request_rec *r) { apr_status_t status; apr_int64_t age, maxage_req, maxage_cresp, maxage, smaxage, maxstale; apr_int64_t minfresh; const char *cc_req; const char *pragma; const char *agestr = NULL; apr_time_t age_c = 0; cache_info *info = &(h->cache_obj->info); const char *warn_head; cache_server_conf *conf = (cache_server_conf *)ap_get_module_config(r->server->module_config, &cache_module); /* * We now want to check if our cached data is still fresh. This depends * on a few things, in this order: * * - RFC2616 14.9.4 End to end reload, Cache-Control: no-cache. no-cache * in either the request or the cached response means that we must * perform the request unconditionally, and ignore cached content. We * should never reach here, but if we do, mark the content as stale, * as this is the best we can do. * * - RFC2616 14.32 Pragma: no-cache This is treated the same as * Cache-Control: no-cache. * * - RFC2616 14.9.3 Cache-Control: max-stale, must-revalidate, * proxy-revalidate if the max-stale request header exists, modify the * stale calculations below so that an object can be at most * seconds stale before we request a revalidation, _UNLESS_ a * must-revalidate or proxy-revalidate cached response header exists to * stop us doing this. * * - RFC2616 14.9.3 Cache-Control: s-maxage the origin server specifies the * maximum age an object can be before it is considered stale. This * directive has the effect of proxy|must revalidate, which in turn means * simple ignore any max-stale setting. * * - RFC2616 14.9.4 Cache-Control: max-age this header can appear in both * requests and responses. If both are specified, the smaller of the two * takes priority. * * - RFC2616 14.21 Expires: if this request header exists in the cached * entity, and it's value is in the past, it has expired. * */ /* This value comes from the client's initial request. */ cc_req = apr_table_get(r->headers_in, "Cache-Control"); pragma = apr_table_get(r->headers_in, "Pragma"); ap_cache_control(r, &cache->control_in, cc_req, pragma, r->headers_in); if (cache->control_in.no_cache) { if (!conf->ignorecachecontrol) { /* Treat as stale, causing revalidation */ return 0; } ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(00781) "Incoming request is asking for a uncached version of " "%s, but we have been configured to ignore it and " "serve a cached response anyway", r->unparsed_uri); } /* These come from the cached entity. */ if (h->cache_obj->info.control.no_cache || h->cache_obj->info.control.invalidated) { /* * The cached entity contained Cache-Control: no-cache, or a * no-cache with a header present, or a private with a header * present, or the cached entity has been invalidated in the * past, so treat as stale causing revalidation. */ return 0; } if ((agestr = apr_table_get(h->resp_hdrs, "Age"))) { char *endp; apr_off_t offt; if (!apr_strtoff(&offt, agestr, &endp, 10) && endp > agestr && !*endp) { age_c = offt; } } /* calculate age of object */ age = ap_cache_current_age(info, age_c, r->request_time); /* extract s-maxage */ smaxage = h->cache_obj->info.control.s_maxage_value; /* extract max-age from request */ maxage_req = -1; if (!conf->ignorecachecontrol) { maxage_req = cache->control_in.max_age_value; } /* * extract max-age from response, if both s-maxage and max-age, s-maxage * takes priority */ if (smaxage != -1) { maxage_cresp = smaxage; } else { maxage_cresp = h->cache_obj->info.control.max_age_value; } /* * if both maxage request and response, the smaller one takes priority */ if (maxage_req == -1) { maxage = maxage_cresp; } else if (maxage_cresp == -1) { maxage = maxage_req; } else { maxage = MIN(maxage_req, maxage_cresp); } /* extract max-stale */ if (cache->control_in.max_stale) { if (cache->control_in.max_stale_value != -1) { maxstale = cache->control_in.max_stale_value; } else { /* * If no value is assigned to max-stale, then the client is willing * to accept a stale response of any age (RFC2616 14.9.3). We will * set it to one year in this case as this situation is somewhat * similar to a "never expires" Expires header (RFC2616 14.21) * which is set to a date one year from the time the response is * sent in this case. */ maxstale = APR_INT64_C(86400*365); } } else { maxstale = 0; } /* extract min-fresh */ if (!conf->ignorecachecontrol && cache->control_in.min_fresh) { minfresh = cache->control_in.min_fresh_value; } else { minfresh = 0; } /* override maxstale if must-revalidate, proxy-revalidate or s-maxage */ if (maxstale && (h->cache_obj->info.control.must_revalidate || h->cache_obj->info.control.proxy_revalidate || smaxage != -1)) { maxstale = 0; } /* handle expiration */ if (((maxage != -1) && (age < (maxage + maxstale - minfresh))) || ((smaxage == -1) && (maxage == -1) && (info->expire != APR_DATE_BAD) && (age < (apr_time_sec(info->expire - info->date) + maxstale - minfresh)))) { warn_head = apr_table_get(h->resp_hdrs, "Warning"); /* it's fresh darlings... */ /* set age header on response */ apr_table_set(h->resp_hdrs, "Age", apr_psprintf(r->pool, "%lu", (unsigned long)age)); /* add warning if maxstale overrode freshness calculation */ if (!(((maxage != -1) && age < maxage) || (info->expire != APR_DATE_BAD && (apr_time_sec(info->expire - info->date)) > age))) { /* make sure we don't stomp on a previous warning */ if ((warn_head == NULL) || ((warn_head != NULL) && (ap_strstr_c(warn_head, "110") == NULL))) { apr_table_mergen(h->resp_hdrs, "Warning", "110 Response is stale"); } } /* * If none of Expires, Cache-Control: max-age, or Cache-Control: * s-maxage appears in the response, and the response header age * calculated is more than 24 hours add the warning 113 */ if ((maxage_cresp == -1) && (smaxage == -1) && (apr_table_get( h->resp_hdrs, "Expires") == NULL) && (age > 86400)) { /* Make sure we don't stomp on a previous warning, and don't dup * a 113 marning that is already present. Also, make sure to add * the new warning to the correct *headers_out location. */ if ((warn_head == NULL) || ((warn_head != NULL) && (ap_strstr_c(warn_head, "113") == NULL))) { apr_table_mergen(h->resp_hdrs, "Warning", "113 Heuristic expiration"); } } return 1; /* Cache object is fresh (enough) */ } /* * At this point we are stale, but: if we are under load, we may let * a significant number of stale requests through before the first * stale request successfully revalidates itself, causing a sudden * unexpected thundering herd which in turn brings angst and drama. * * So. * * We want the first stale request to go through as normal. But the * second and subsequent request, we must pretend to be fresh until * the first request comes back with either new content or confirmation * that the stale content is still fresh. * * To achieve this, we create a very simple file based lock based on * the key of the cached object. We attempt to open the lock file with * exclusive write access. If we succeed, woohoo! we're first, and we * follow the stale path to the backend server. If we fail, oh well, * we follow the fresh path, and avoid being a thundering herd. * * The lock lives only as long as the stale request that went on ahead. * If the request succeeds, the lock is deleted. If the request fails, * the lock is deleted, and another request gets to make a new lock * and try again. * * At any time, a request marked "no-cache" will force a refresh, * ignoring the lock, ensuring an extended lockout is impossible. * * A lock that exceeds a maximum age will be deleted, and another * request gets to make a new lock and try again. */ status = cache_try_lock(conf, cache, r); if (APR_SUCCESS == status) { /* we obtained a lock, follow the stale path */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00782) "Cache lock obtained for stale cached URL, " "revalidating entry: %s", r->unparsed_uri); return 0; } else if (APR_STATUS_IS_EEXIST(status)) { /* lock already exists, return stale data anyway, with a warning */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, r, APLOGNO(00783) "Cache already locked for stale cached URL, " "pretend it is fresh: %s", r->unparsed_uri); /* make sure we don't stomp on a previous warning */ warn_head = apr_table_get(h->resp_hdrs, "Warning"); if ((warn_head == NULL) || ((warn_head != NULL) && (ap_strstr_c(warn_head, "110") == NULL))) { apr_table_mergen(h->resp_hdrs, "Warning", "110 Response is stale"); } return 1; } else { /* some other error occurred, just treat the object as stale */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, r, APLOGNO(00784) "Attempt to obtain a cache lock for stale " "cached URL failed, revalidating entry anyway: %s", r->unparsed_uri); return 0; } } /* return each comma separated token, one at a time */ CACHE_DECLARE(const char *)ap_cache_tokstr(apr_pool_t *p, const char *list, const char **str) { apr_size_t i; const char *s; s = ap_strchr_c(list, ','); if (s != NULL) { i = s - list; do s++; while (apr_isspace(*s)) ; /* noop */ } else i = strlen(list); while (i > 0 && apr_isspace(list[i - 1])) i--; *str = s; if (i) return apr_pstrmemdup(p, list, i); else return NULL; } /* * Converts apr_time_t expressed as hex digits to * a true apr_time_t. */ CACHE_DECLARE(apr_time_t) ap_cache_hex2usec(const char *x) { int i, ch; apr_time_t j; for (i = 0, j = 0; i < sizeof(j) * 2; i++) { ch = x[i]; j <<= 4; if (apr_isdigit(ch)) j |= ch - '0'; else if (apr_isupper(ch)) j |= ch - ('A' - 10); else j |= ch - ('a' - 10); } return j; } /* * Converts apr_time_t to apr_time_t expressed as hex digits. */ CACHE_DECLARE(void) ap_cache_usec2hex(apr_time_t j, char *y) { int i, ch; for (i = (sizeof(j) * 2)-1; i >= 0; i--) { ch = (int)(j & 0xF); j >>= 4; if (ch >= 10) y[i] = ch + ('A' - 10); else y[i] = ch + '0'; } y[sizeof(j) * 2] = '\0'; } static void cache_hash(const char *it, char *val, int ndepth, int nlength) { apr_md5_ctx_t context; unsigned char digest[16]; char tmp[22]; int i, k, d; unsigned int x; static const char enc_table[64] = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_@"; apr_md5_init(&context); apr_md5_update(&context, (const unsigned char *) it, strlen(it)); apr_md5_final(digest, &context); /* encode 128 bits as 22 characters, using a modified uuencoding * the encoding is 3 bytes -> 4 characters* i.e. 128 bits is * 5 x 3 bytes + 1 byte -> 5 * 4 characters + 2 characters */ for (i = 0, k = 0; i < 15; i += 3) { x = (digest[i] << 16) | (digest[i + 1] << 8) | digest[i + 2]; tmp[k++] = enc_table[x >> 18]; tmp[k++] = enc_table[(x >> 12) & 0x3f]; tmp[k++] = enc_table[(x >> 6) & 0x3f]; tmp[k++] = enc_table[x & 0x3f]; } /* one byte left */ x = digest[15]; tmp[k++] = enc_table[x >> 2]; /* use up 6 bits */ tmp[k++] = enc_table[(x << 4) & 0x3f]; /* now split into directory levels */ for (i = k = d = 0; d < ndepth; ++d) { memcpy(&val[i], &tmp[k], nlength); k += nlength; val[i + nlength] = '/'; i += nlength + 1; } memcpy(&val[i], &tmp[k], 22 - k); val[i + 22 - k] = '\0'; } CACHE_DECLARE(char *)ap_cache_generate_name(apr_pool_t *p, int dirlevels, int dirlength, const char *name) { char hashfile[66]; cache_hash(name, hashfile, dirlevels, dirlength); return apr_pstrdup(p, hashfile); } /** * String tokenizer that ignores separator characters within quoted strings * and escaped characters, as per RFC2616 section 2.2. */ char *cache_strqtok(char *str, const char *sep, char **last) { char *token; int quoted = 0; if (!str) { /* subsequent call */ str = *last; /* start where we left off */ } if (!str) { /* no more tokens */ return NULL; } /* skip characters in sep (will terminate at '\0') */ while (*str && ap_strchr_c(sep, *str)) { ++str; } if (!*str) { /* no more tokens */ return NULL; } token = str; /* skip valid token characters to terminate token and * prepare for the next call (will terminate at '\0) * on the way, ignore all quoted strings, and within * quoted strings, escaped characters. */ *last = token; while (**last) { if (!quoted) { if (**last == '\"' && !ap_strchr_c(sep, '\"')) { quoted = 1; ++*last; } else if (!ap_strchr_c(sep, **last)) { ++*last; } else { break; } } else { if (**last == '\"') { quoted = 0; ++*last; } else if (**last == '\\') { ++*last; if (**last) { ++*last; } } else { ++*last; } } } if (**last) { **last = '\0'; ++*last; } return token; } /** * Parse the Cache-Control and Pragma headers in one go, marking * which tokens appear within the header. Populate the structure * passed in. */ int ap_cache_control(request_rec *r, cache_control_t *cc, const char *cc_header, const char *pragma_header, apr_table_t *headers) { char *last; if (cc->parsed) { return cc->cache_control || cc->pragma; } cc->parsed = 1; cc->max_age_value = -1; cc->max_stale_value = -1; cc->min_fresh_value = -1; cc->s_maxage_value = -1; if (pragma_header) { char *header = apr_pstrdup(r->pool, pragma_header); const char *token = cache_strqtok(header, CACHE_SEPARATOR, &last); while (token) { if (!ap_cstr_casecmp(token, "no-cache")) { cc->no_cache = 1; } token = cache_strqtok(NULL, CACHE_SEPARATOR, &last); } cc->pragma = 1; } if (cc_header) { char *endp; apr_off_t offt; char *header = apr_pstrdup(r->pool, cc_header); const char *token = cache_strqtok(header, CACHE_SEPARATOR, &last); while (token) { switch (token[0]) { case 'n': case 'N': { if (!ap_cstr_casecmpn(token, "no-cache", 8)) { if (token[8] == '=') { cc->no_cache_header = 1; } else if (!token[8]) { cc->no_cache = 1; } } else if (!ap_cstr_casecmp(token, "no-store")) { cc->no_store = 1; } else if (!ap_cstr_casecmp(token, "no-transform")) { cc->no_transform = 1; } break; } case 'm': case 'M': { if (!ap_cstr_casecmpn(token, "max-age", 7)) { if (token[7] == '=' && !apr_strtoff(&offt, token + 8, &endp, 10) && endp > token + 8 && !*endp) { cc->max_age = 1; cc->max_age_value = offt; } } else if (!ap_cstr_casecmp(token, "must-revalidate")) { cc->must_revalidate = 1; } else if (!ap_cstr_casecmpn(token, "max-stale", 9)) { if (token[9] == '=' && !apr_strtoff(&offt, token + 10, &endp, 10) && endp > token + 10 && !*endp) { cc->max_stale = 1; cc->max_stale_value = offt; } else if (!token[9]) { cc->max_stale = 1; cc->max_stale_value = -1; } } else if (!ap_cstr_casecmpn(token, "min-fresh", 9)) { if (token[9] == '=' && !apr_strtoff(&offt, token + 10, &endp, 10) && endp > token + 10 && !*endp) { cc->min_fresh = 1; cc->min_fresh_value = offt; } } break; } case 'o': case 'O': { if (!ap_cstr_casecmp(token, "only-if-cached")) { cc->only_if_cached = 1; } break; } case 'p': case 'P': { if (!ap_cstr_casecmp(token, "public")) { cc->public = 1; } else if (!ap_cstr_casecmpn(token, "private", 7)) { if (token[7] == '=') { cc->private_header = 1; } else if (!token[7]) { cc->private = 1; } } else if (!ap_cstr_casecmp(token, "proxy-revalidate")) { cc->proxy_revalidate = 1; } break; } case 's': case 'S': { if (!ap_cstr_casecmpn(token, "s-maxage", 8)) { if (token[8] == '=' && !apr_strtoff(&offt, token + 9, &endp, 10) && endp > token + 9 && !*endp) { cc->s_maxage = 1; cc->s_maxage_value = offt; } } break; } } token = cache_strqtok(NULL, CACHE_SEPARATOR, &last); } cc->cache_control = 1; } return (cc_header != NULL || pragma_header != NULL); } /** * Parse the Cache-Control, identifying and removing headers that * exist as tokens after the no-cache and private tokens. */ static int cache_control_remove(request_rec *r, const char *cc_header, apr_table_t *headers) { char *last, *slast; int found = 0; if (cc_header) { char *header = apr_pstrdup(r->pool, cc_header); char *token = cache_strqtok(header, CACHE_SEPARATOR, &last); while (token) { switch (token[0]) { case 'n': case 'N': { if (!ap_cstr_casecmpn(token, "no-cache", 8)) { if (token[8] == '=') { const char *header = cache_strqtok(token + 9, CACHE_SEPARATOR "\"", &slast); while (header) { apr_table_unset(headers, header); header = cache_strqtok(NULL, CACHE_SEPARATOR "\"", &slast); } found = 1; } } break; } case 'p': case 'P': { if (!ap_cstr_casecmpn(token, "private", 7)) { if (token[7] == '=') { const char *header = cache_strqtok(token + 8, CACHE_SEPARATOR "\"", &slast); while (header) { apr_table_unset(headers, header); header = cache_strqtok(NULL, CACHE_SEPARATOR "\"", &slast); } found = 1; } } break; } } token = cache_strqtok(NULL, CACHE_SEPARATOR, &last); } } return found; } /* * Create a new table consisting of those elements from an * headers table that are allowed to be stored in a cache. */ CACHE_DECLARE(apr_table_t *)ap_cache_cacheable_headers(apr_pool_t *pool, apr_table_t *t, server_rec *s) { cache_server_conf *conf; char **header; int i; apr_table_t *headers_out; /* Short circuit the common case that there are not * (yet) any headers populated. */ if (t == NULL) { return apr_table_make(pool, 10); }; /* Make a copy of the headers, and remove from * the copy any hop-by-hop headers, as defined in Section * 13.5.1 of RFC 2616 */ headers_out = apr_table_copy(pool, t); apr_table_unset(headers_out, "Connection"); apr_table_unset(headers_out, "Keep-Alive"); apr_table_unset(headers_out, "Proxy-Authenticate"); apr_table_unset(headers_out, "Proxy-Authorization"); apr_table_unset(headers_out, "TE"); apr_table_unset(headers_out, "Trailers"); apr_table_unset(headers_out, "Transfer-Encoding"); apr_table_unset(headers_out, "Upgrade"); conf = (cache_server_conf *)ap_get_module_config(s->module_config, &cache_module); /* Remove the user defined headers set with CacheIgnoreHeaders. * This may break RFC 2616 compliance on behalf of the administrator. */ header = (char **)conf->ignore_headers->elts; for (i = 0; i < conf->ignore_headers->nelts; i++) { apr_table_unset(headers_out, header[i]); } return headers_out; } /* * Create a new table consisting of those elements from an input * headers table that are allowed to be stored in a cache. */ CACHE_DECLARE(apr_table_t *)ap_cache_cacheable_headers_in(request_rec *r) { return ap_cache_cacheable_headers(r->pool, r->headers_in, r->server); } /* * Create a new table consisting of those elements from an output * headers table that are allowed to be stored in a cache; * ensure there is a content type and capture any errors. */ CACHE_DECLARE(apr_table_t *)ap_cache_cacheable_headers_out(request_rec *r) { apr_table_t *headers_out; headers_out = ap_cache_cacheable_headers(r->pool, cache_merge_headers_out(r), r->server); cache_control_remove(r, cache_table_getm(r->pool, headers_out, "Cache-Control"), headers_out); return headers_out; } apr_table_t *cache_merge_headers_out(request_rec *r) { apr_table_t *headers_out; headers_out = apr_table_overlay(r->pool, r->headers_out, r->err_headers_out); if (r->content_type && !apr_table_get(headers_out, "Content-Type")) { const char *ctype = ap_make_content_type(r, r->content_type); if (ctype) { apr_table_setn(headers_out, "Content-Type", ctype); } } if (r->content_encoding && !apr_table_get(headers_out, "Content-Encoding")) { apr_table_setn(headers_out, "Content-Encoding", r->content_encoding); } return headers_out; } typedef struct { apr_pool_t *p; const char *first; apr_array_header_t *merged; } cache_table_getm_t; static int cache_table_getm_do(void *v, const char *key, const char *val) { cache_table_getm_t *state = (cache_table_getm_t *) v; if (!state->first) { /** * The most common case is a single header, and this is covered by * a fast path that doesn't allocate any memory. On the second and * subsequent header, an array is created and the array concatenated * together to form the final value. */ state->first = val; } else { const char **elt; if (!state->merged) { state->merged = apr_array_make(state->p, 10, sizeof(const char *)); elt = apr_array_push(state->merged); *elt = state->first; } elt = apr_array_push(state->merged); *elt = val; } return 1; } const char *cache_table_getm(apr_pool_t *p, const apr_table_t *t, const char *key) { cache_table_getm_t state; state.p = p; state.first = NULL; state.merged = NULL; apr_table_do(cache_table_getm_do, &state, t, key, NULL); if (!state.first) { return NULL; } else if (!state.merged) { return state.first; } else { return apr_array_pstrcat(p, state.merged, ','); } } httpd-2.4.41/modules/cache/mod_socache_shmcb.dsp0000644000000000000500000001077612520576322020116 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_socache_shmcb" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_socache_shmcb - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_socache_shmcb.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_socache_shmcb.mak" CFG="mod_socache_shmcb - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_socache_shmcb - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_socache_shmcb - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_socache_shmcb - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "_MBCS" /D "_USRDLL" /D "mod_socache_shmcb_EXPORTS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_socache_shmcb_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_socache_shmcb.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_socache_shmcb.so" /d LONG_NAME="socache_shmcb_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_socache_shmcb.so" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_shmcb.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_socache_shmcb.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_socache_shmcb - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_socache_shmcb_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_socache_shmcb.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_socache_shmcb.so" /d LONG_NAME="socache_shmcb_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_socache_shmcb.so" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_shmcb.so # Begin Special Build Tool TargetPath=.\Debug\mod_socache_shmcb.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_socache_shmcb - Win32 Release" # Name "mod_socache_shmcb - Win32 Debug" # Begin Source File SOURCE=.\mod_socache_shmcb.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/cache/mod_file_cache.c0000644000000000000500000003257313020257025017022 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * Author: mod_file_cache by Bill Stoddard * Based on mod_mmap_static by Dean Gaudet * * v0.01: initial implementation */ /* Documentation: Some sites have a set of static files that are really busy, and change infrequently (or even on a regular schedule). Save time by caching open handles to these files. This module, unlike mod_mmap_static, caches open file handles, not file content. On systems (like Windows) with heavy system call overhead and that have an efficient sendfile implementation, caching file handles offers several advantages over caching content. First, the file system can manage the memory, allowing infrequently hit cached files to be paged out. Second, since caching open handles does not consume significant resources, it will be possible to enable an AutoLoadCache feature where static files are dynamically loaded in the cache as the server runs. On systems that have file change notification, this module can be enhanced to automatically garbage collect cached files that change on disk. This module should work on Unix systems that have sendfile. Place cachefile directives into your configuration to direct files to be cached. cachefile /path/to/file1 cachefile /path/to/file2 ... These files are only cached when the server is restarted, so if you change the list, or if the files are changed, then you'll need to restart the server. To reiterate that point: if the files are modified *in place* without restarting the server you may end up serving requests that are completely bogus. You should update files by unlinking the old copy and putting a new copy in place. There's no such thing as inheriting these files across vhosts or whatever... place the directives in the main server only. Known problems: Don't use Alias or RewriteRule to move these files around... unless you feel like paying for an extra stat() on each request. This is a deficiency in the Apache API that will hopefully be solved some day. The file will be served out of the file handle cache, but there will be an extra stat() that's a waste. */ #include "apr.h" #if !(APR_HAS_SENDFILE || APR_HAS_MMAP) #error mod_file_cache only works on systems with APR_HAS_SENDFILE or APR_HAS_MMAP #endif #include "apr_mmap.h" #include "apr_strings.h" #include "apr_hash.h" #include "apr_buckets.h" #define APR_WANT_STRFUNC #include "apr_want.h" #if APR_HAVE_SYS_TYPES_H #include #endif #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "http_core.h" module AP_MODULE_DECLARE_DATA file_cache_module; typedef struct { #if APR_HAS_SENDFILE apr_file_t *file; #endif const char *filename; apr_finfo_t finfo; int is_mmapped; #if APR_HAS_MMAP apr_mmap_t *mm; #endif char mtimestr[APR_RFC822_DATE_LEN]; char sizestr[21]; /* big enough to hold any 64-bit file size + null */ } a_file; typedef struct { apr_hash_t *fileht; } a_server_config; static void *create_server_config(apr_pool_t *p, server_rec *s) { a_server_config *sconf = apr_palloc(p, sizeof(*sconf)); sconf->fileht = apr_hash_make(p); return sconf; } static void cache_the_file(cmd_parms *cmd, const char *filename, int mmap) { a_server_config *sconf; a_file *new_file; a_file tmp; apr_file_t *fd = NULL; apr_status_t rc; const char *fspec; fspec = ap_server_root_relative(cmd->pool, filename); if (!fspec) { ap_log_error(APLOG_MARK, APLOG_WARNING, APR_EBADPATH, cmd->server, APLOGNO(00794) "invalid file path " "%s, skipping", filename); return; } if ((rc = apr_stat(&tmp.finfo, fspec, APR_FINFO_MIN, cmd->temp_pool)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_WARNING, rc, cmd->server, APLOGNO(00795) "unable to stat(%s), skipping", fspec); return; } if (tmp.finfo.filetype != APR_REG) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(00796) "%s isn't a regular file, skipping", fspec); return; } if (tmp.finfo.size > AP_MAX_SENDFILE) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(00797) "%s is too large to cache, skipping", fspec); return; } rc = apr_file_open(&fd, fspec, APR_READ | APR_BINARY | APR_XTHREAD, APR_OS_DEFAULT, cmd->pool); if (rc != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_WARNING, rc, cmd->server, APLOGNO(00798) "unable to open(%s, O_RDONLY), skipping", fspec); return; } apr_file_inherit_set(fd); /* WooHoo, we have a file to put in the cache */ new_file = apr_pcalloc(cmd->pool, sizeof(a_file)); new_file->finfo = tmp.finfo; #if APR_HAS_MMAP if (mmap) { /* MMAPFile directive. MMAP'ing the file * XXX: APR_HAS_LARGE_FILES issue; need to reject this request if * size is greater than MAX(apr_size_t) (perhaps greater than 1M?). */ if ((rc = apr_mmap_create(&new_file->mm, fd, 0, (apr_size_t)new_file->finfo.size, APR_MMAP_READ, cmd->pool)) != APR_SUCCESS) { apr_file_close(fd); ap_log_error(APLOG_MARK, APLOG_WARNING, rc, cmd->server, APLOGNO(00799) "unable to mmap %s, skipping", filename); return; } apr_file_close(fd); new_file->is_mmapped = TRUE; } #endif #if APR_HAS_SENDFILE if (!mmap) { /* CacheFile directive. Caching the file handle */ new_file->is_mmapped = FALSE; new_file->file = fd; } #endif new_file->filename = fspec; apr_rfc822_date(new_file->mtimestr, new_file->finfo.mtime); apr_snprintf(new_file->sizestr, sizeof new_file->sizestr, "%" APR_OFF_T_FMT, new_file->finfo.size); sconf = ap_get_module_config(cmd->server->module_config, &file_cache_module); apr_hash_set(sconf->fileht, new_file->filename, strlen(new_file->filename), new_file); } static const char *cachefilehandle(cmd_parms *cmd, void *dummy, const char *filename) { #if APR_HAS_SENDFILE cache_the_file(cmd, filename, 0); #else /* Sendfile not supported by this OS */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(00800) "unable to cache file: %s. Sendfile is not supported on this OS", filename); #endif return NULL; } static const char *cachefilemmap(cmd_parms *cmd, void *dummy, const char *filename) { #if APR_HAS_MMAP cache_the_file(cmd, filename, 1); #else /* MMAP not supported by this OS */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(00801) "unable to cache file: %s. MMAP is not supported by this OS", filename); #endif return NULL; } static int file_cache_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { /* Hummm, anything to do here? */ return OK; } /* If it's one of ours, fill in r->finfo now to avoid extra stat()... this is a * bit of a kludge, because we really want to run after core_translate runs. */ static int file_cache_xlat(request_rec *r) { a_server_config *sconf; a_file *match; int res; sconf = ap_get_module_config(r->server->module_config, &file_cache_module); /* we only operate when at least one cachefile directive was used */ if (!apr_hash_count(sconf->fileht)) { return DECLINED; } res = ap_core_translate(r); if (res != OK || !r->filename) { return res; } /* search the cache */ match = (a_file *) apr_hash_get(sconf->fileht, r->filename, APR_HASH_KEY_STRING); if (match == NULL) return DECLINED; /* pass search results to handler */ ap_set_module_config(r->request_config, &file_cache_module, match); /* shortcircuit the get_path_info() stat() calls and stuff */ r->finfo = match->finfo; return OK; } static int mmap_handler(request_rec *r, a_file *file) { #if APR_HAS_MMAP conn_rec *c = r->connection; apr_bucket *b; apr_mmap_t *mm; apr_bucket_brigade *bb = apr_brigade_create(r->pool, c->bucket_alloc); apr_mmap_dup(&mm, file->mm, r->pool); b = apr_bucket_mmap_create(mm, 0, (apr_size_t)file->finfo.size, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); if (ap_pass_brigade(r->output_filters, bb) != APR_SUCCESS) return AP_FILTER_ERROR; #endif return OK; } static int sendfile_handler(request_rec *r, a_file *file) { #if APR_HAS_SENDFILE conn_rec *c = r->connection; apr_bucket *b; apr_bucket_brigade *bb = apr_brigade_create(r->pool, c->bucket_alloc); apr_brigade_insert_file(bb, file->file, 0, file->finfo.size, r->pool); b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); if (ap_pass_brigade(r->output_filters, bb) != APR_SUCCESS) return AP_FILTER_ERROR; #endif return OK; } static int file_cache_handler(request_rec *r) { a_file *match; int errstatus; int rc = OK; /* Bail out if r->handler isn't the default value, and doesn't look like a Content-Type * XXX: Even though we made the user explicitly list each path to cache? */ if (ap_strcmp_match(r->handler, "*/*") && !AP_IS_DEFAULT_HANDLER_NAME(r->handler)) { return DECLINED; } /* we don't handle anything but GET */ if (r->method_number != M_GET) return DECLINED; /* did xlat phase find the file? */ match = ap_get_module_config(r->request_config, &file_cache_module); if (match == NULL) { return DECLINED; } /* note that we would handle GET on this resource */ r->allowed |= (AP_METHOD_BIT << M_GET); /* This handler has no use for a request body (yet), but we still * need to read and discard it if the client sent one. */ if ((errstatus = ap_discard_request_body(r)) != OK) return errstatus; ap_update_mtime(r, match->finfo.mtime); /* ap_set_last_modified() always converts the file mtime to a string * which is slow. Accelerate the common case. * ap_set_last_modified(r); */ { apr_time_t mod_time; char *datestr; mod_time = ap_rationalize_mtime(r, r->mtime); if (mod_time == match->finfo.mtime) datestr = match->mtimestr; else { datestr = apr_palloc(r->pool, APR_RFC822_DATE_LEN); apr_rfc822_date(datestr, mod_time); } apr_table_setn(r->headers_out, "Last-Modified", datestr); } /* ap_set_content_length() always converts the same number and never * returns an error. Accelerate it. */ r->clength = match->finfo.size; apr_table_setn(r->headers_out, "Content-Length", match->sizestr); ap_set_etag(r); if ((errstatus = ap_meets_conditions(r)) != OK) { return errstatus; } /* Call appropriate handler */ if (!r->header_only) { if (match->is_mmapped == TRUE) rc = mmap_handler(r, match); else rc = sendfile_handler(r, match); } return rc; } static command_rec file_cache_cmds[] = { AP_INIT_ITERATE("cachefile", cachefilehandle, NULL, RSRC_CONF, "A space separated list of files to add to the file handle cache at config time"), AP_INIT_ITERATE("mmapfile", cachefilemmap, NULL, RSRC_CONF, "A space separated list of files to mmap at config time"), {NULL} }; static void register_hooks(apr_pool_t *p) { ap_hook_handler(file_cache_handler, NULL, NULL, APR_HOOK_LAST); ap_hook_post_config(file_cache_post_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_translate_name(file_cache_xlat, NULL, NULL, APR_HOOK_MIDDLE); /* This trick doesn't work apparently because the translate hooks are single shot. If the core_hook returns OK, then our hook is not called. ap_hook_translate_name(file_cache_xlat, aszPre, NULL, APR_HOOK_MIDDLE); */ } AP_DECLARE_MODULE(file_cache) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ create_server_config, /* create per-server config structure */ NULL, /* merge per-server config structures */ file_cache_cmds, /* command handlers */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/cache/mod_socache_dbm.c0000644000000000000500000004622212640532101017201 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_log.h" #include "http_request.h" #include "http_protocol.h" #include "http_config.h" #include "mpm_common.h" #include "mod_status.h" #include "apr.h" #include "apr_strings.h" #include "apr_time.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "apr_dbm.h" #if APR_HAVE_UNISTD_H #include #endif #include "ap_socache.h" #if AP_NEED_SET_MUTEX_PERMS #include "unixd.h" #endif /* Use of the context structure must be thread-safe after the initial * create/init; callers must hold the mutex. */ struct ap_socache_instance_t { const char *data_file; /* Pool must only be used with the mutex held. */ apr_pool_t *pool; apr_time_t last_expiry; apr_interval_time_t expiry_interval; }; /** * Support for DBM library */ #define DBM_FILE_MODE ( APR_UREAD | APR_UWRITE | APR_GREAD | APR_WREAD ) #define DEFAULT_DBM_PREFIX "socache-dbm-" /* ### this should use apr_dbm_usednames. */ #if !defined(DBM_FILE_SUFFIX_DIR) && !defined(DBM_FILE_SUFFIX_PAG) #if defined(DBM_SUFFIX) #define DBM_FILE_SUFFIX_DIR DBM_SUFFIX #define DBM_FILE_SUFFIX_PAG DBM_SUFFIX #elif defined(__FreeBSD__) || (defined(DB_LOCK) && defined(DB_SHMEM)) #define DBM_FILE_SUFFIX_DIR ".db" #define DBM_FILE_SUFFIX_PAG ".db" #else #define DBM_FILE_SUFFIX_DIR ".dir" #define DBM_FILE_SUFFIX_PAG ".pag" #endif #endif static void socache_dbm_expire(ap_socache_instance_t *ctx, server_rec *s); static apr_status_t socache_dbm_remove(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, apr_pool_t *p); static const char *socache_dbm_create(ap_socache_instance_t **context, const char *arg, apr_pool_t *tmp, apr_pool_t *p) { ap_socache_instance_t *ctx; *context = ctx = apr_pcalloc(p, sizeof *ctx); if (arg && *arg) { ctx->data_file = ap_server_root_relative(p, arg); if (!ctx->data_file) { return apr_psprintf(tmp, "Invalid cache file path %s", arg); } } apr_pool_create(&ctx->pool, p); return NULL; } #if AP_NEED_SET_MUTEX_PERMS static int try_chown(apr_pool_t *p, server_rec *s, const char *name, const char *suffix) { if (suffix) name = apr_pstrcat(p, name, suffix, NULL); if (-1 == chown(name, ap_unixd_config.user_id, (gid_t)-1 /* no gid change */ )) { if (errno != ENOENT) ap_log_error(APLOG_MARK, APLOG_ERR, APR_FROM_OS_ERROR(errno), s, APLOGNO(00802) "Can't change owner of %s", name); return -1; } return 0; } #endif static apr_status_t socache_dbm_init(ap_socache_instance_t *ctx, const char *namespace, const struct ap_socache_hints *hints, server_rec *s, apr_pool_t *p) { apr_dbm_t *dbm; apr_status_t rv; /* for the DBM we need the data file */ if (ctx->data_file == NULL) { const char *path = apr_pstrcat(p, DEFAULT_DBM_PREFIX, namespace, NULL); ctx->data_file = ap_runtime_dir_relative(p, path); if (ctx->data_file == NULL) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00803) "could not use default path '%s' for DBM socache", path); return APR_EINVAL; } } /* open it once to create it and to make sure it _can_ be created */ apr_pool_clear(ctx->pool); if ((rv = apr_dbm_open(&dbm, ctx->data_file, APR_DBM_RWCREATE, DBM_FILE_MODE, ctx->pool)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00804) "Cannot create socache DBM file `%s'", ctx->data_file); return rv; } apr_dbm_close(dbm); ctx->expiry_interval = (hints && hints->expiry_interval ? hints->expiry_interval : apr_time_from_sec(30)); #if AP_NEED_SET_MUTEX_PERMS /* * We have to make sure the Apache child processes have access to * the DBM file. But because there are brain-dead platforms where we * cannot exactly determine the suffixes we try all possibilities. */ if (geteuid() == 0 /* is superuser */) { try_chown(p, s, ctx->data_file, NULL); if (try_chown(p, s, ctx->data_file, DBM_FILE_SUFFIX_DIR)) if (try_chown(p, s, ctx->data_file, ".db")) try_chown(p, s, ctx->data_file, ".dir"); if (try_chown(p, s, ctx->data_file, DBM_FILE_SUFFIX_PAG)) if (try_chown(p, s, ctx->data_file, ".db")) try_chown(p, s, ctx->data_file, ".pag"); } #endif socache_dbm_expire(ctx, s); return APR_SUCCESS; } static void socache_dbm_destroy(ap_socache_instance_t *ctx, server_rec *s) { /* the correct way */ unlink(apr_pstrcat(ctx->pool, ctx->data_file, DBM_FILE_SUFFIX_DIR, NULL)); unlink(apr_pstrcat(ctx->pool, ctx->data_file, DBM_FILE_SUFFIX_PAG, NULL)); /* the additional ways to be sure */ unlink(apr_pstrcat(ctx->pool, ctx->data_file, ".dir", NULL)); unlink(apr_pstrcat(ctx->pool, ctx->data_file, ".pag", NULL)); unlink(apr_pstrcat(ctx->pool, ctx->data_file, ".db", NULL)); unlink(ctx->data_file); } static apr_status_t socache_dbm_store(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, apr_time_t expiry, unsigned char *ucaData, unsigned int nData, apr_pool_t *pool) { apr_dbm_t *dbm; apr_datum_t dbmkey; apr_datum_t dbmval; apr_status_t rv; /* be careful: do not try to store too much bytes in a DBM file! */ #ifdef PAIRMAX if ((idlen + nData) >= PAIRMAX) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00805) "data size too large for DBM socache: %d >= %d", (idlen + nData), PAIRMAX); return APR_ENOSPC; } #else if ((idlen + nData) >= 950 /* at least less than approx. 1KB */) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00806) "data size too large for DBM socache: %d >= %d", (idlen + nData), 950); return APR_ENOSPC; } #endif /* create DBM key */ dbmkey.dptr = (char *)id; dbmkey.dsize = idlen; /* create DBM value */ dbmval.dsize = sizeof(apr_time_t) + nData; dbmval.dptr = (char *)ap_malloc(dbmval.dsize); memcpy((char *)dbmval.dptr, &expiry, sizeof(apr_time_t)); memcpy((char *)dbmval.dptr+sizeof(apr_time_t), ucaData, nData); /* and store it to the DBM file */ apr_pool_clear(ctx->pool); if ((rv = apr_dbm_open(&dbm, ctx->data_file, APR_DBM_RWCREATE, DBM_FILE_MODE, ctx->pool)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00807) "Cannot open socache DBM file `%s' for writing " "(store)", ctx->data_file); free(dbmval.dptr); return rv; } if ((rv = apr_dbm_store(dbm, dbmkey, dbmval)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00808) "Cannot store socache object to DBM file `%s'", ctx->data_file); apr_dbm_close(dbm); free(dbmval.dptr); return rv; } apr_dbm_close(dbm); /* free temporary buffers */ free(dbmval.dptr); /* allow the regular expiring to occur */ socache_dbm_expire(ctx, s); return APR_SUCCESS; } static apr_status_t socache_dbm_retrieve(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, unsigned char *dest, unsigned int *destlen, apr_pool_t *p) { apr_dbm_t *dbm; apr_datum_t dbmkey; apr_datum_t dbmval; unsigned int nData; apr_time_t expiry; apr_time_t now; apr_status_t rc; /* allow the regular expiring to occur */ socache_dbm_expire(ctx, s); /* create DBM key and values */ dbmkey.dptr = (char *)id; dbmkey.dsize = idlen; /* and fetch it from the DBM file * XXX: Should we open the dbm against r->pool so the cleanup will * do the apr_dbm_close? This would make the code a bit cleaner. */ apr_pool_clear(ctx->pool); if ((rc = apr_dbm_open(&dbm, ctx->data_file, APR_DBM_RWCREATE, DBM_FILE_MODE, ctx->pool)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rc, s, APLOGNO(00809) "Cannot open socache DBM file `%s' for reading " "(fetch)", ctx->data_file); return rc; } rc = apr_dbm_fetch(dbm, dbmkey, &dbmval); if (rc != APR_SUCCESS) { apr_dbm_close(dbm); return APR_NOTFOUND; } if (dbmval.dptr == NULL || dbmval.dsize <= sizeof(apr_time_t)) { apr_dbm_close(dbm); return APR_EGENERAL; } /* parse resulting data */ nData = dbmval.dsize-sizeof(apr_time_t); if (nData > *destlen) { apr_dbm_close(dbm); return APR_ENOSPC; } *destlen = nData; memcpy(&expiry, dbmval.dptr, sizeof(apr_time_t)); memcpy(dest, (char *)dbmval.dptr + sizeof(apr_time_t), nData); apr_dbm_close(dbm); /* make sure the stuff is still not expired */ now = apr_time_now(); if (expiry <= now) { socache_dbm_remove(ctx, s, id, idlen, p); return APR_NOTFOUND; } return APR_SUCCESS; } static apr_status_t socache_dbm_remove(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, apr_pool_t *p) { apr_dbm_t *dbm; apr_datum_t dbmkey; apr_status_t rv; /* create DBM key and values */ dbmkey.dptr = (char *)id; dbmkey.dsize = idlen; /* and delete it from the DBM file */ apr_pool_clear(ctx->pool); if ((rv = apr_dbm_open(&dbm, ctx->data_file, APR_DBM_RWCREATE, DBM_FILE_MODE, ctx->pool)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00810) "Cannot open socache DBM file `%s' for writing " "(delete)", ctx->data_file); return rv; } apr_dbm_delete(dbm, dbmkey); apr_dbm_close(dbm); return APR_SUCCESS; } static void socache_dbm_expire(ap_socache_instance_t *ctx, server_rec *s) { apr_dbm_t *dbm; apr_datum_t dbmkey; apr_datum_t dbmval; apr_time_t expiry; int elts = 0; int deleted = 0; int expired; apr_datum_t *keylist; int keyidx; int i; apr_time_t now; apr_status_t rv; /* * make sure the expiration for still not-accessed * socache entries is done only from time to time */ now = apr_time_now(); if (now < ctx->last_expiry + ctx->expiry_interval) { return; } ctx->last_expiry = now; /* * Here we have to be very carefully: Not all DBM libraries are * smart enough to allow one to iterate over the elements and at the * same time delete expired ones. Some of them get totally crazy * while others have no problems. So we have to do it the slower but * more safe way: we first iterate over all elements and remember * those which have to be expired. Then in a second pass we delete * all those expired elements. Additionally we reopen the DBM file * to be really safe in state. */ #define KEYMAX 1024 for (;;) { /* allocate the key array in a memory sub pool */ apr_pool_clear(ctx->pool); if ((keylist = apr_palloc(ctx->pool, sizeof(dbmkey)*KEYMAX)) == NULL) { break; } /* pass 1: scan DBM database */ keyidx = 0; if ((rv = apr_dbm_open(&dbm, ctx->data_file, APR_DBM_RWCREATE, DBM_FILE_MODE, ctx->pool)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00811) "Cannot open socache DBM file `%s' for " "scanning", ctx->data_file); break; } apr_dbm_firstkey(dbm, &dbmkey); while (dbmkey.dptr != NULL) { elts++; expired = FALSE; apr_dbm_fetch(dbm, dbmkey, &dbmval); if (dbmval.dsize <= sizeof(apr_time_t) || dbmval.dptr == NULL) expired = TRUE; else { memcpy(&expiry, dbmval.dptr, sizeof(apr_time_t)); if (expiry <= now) expired = TRUE; } if (expired) { if ((keylist[keyidx].dptr = apr_pmemdup(ctx->pool, dbmkey.dptr, dbmkey.dsize)) != NULL) { keylist[keyidx].dsize = dbmkey.dsize; keyidx++; if (keyidx == KEYMAX) break; } } apr_dbm_nextkey(dbm, &dbmkey); } apr_dbm_close(dbm); /* pass 2: delete expired elements */ if (apr_dbm_open(&dbm, ctx->data_file, APR_DBM_RWCREATE, DBM_FILE_MODE, ctx->pool) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00812) "Cannot re-open socache DBM file `%s' for " "expiring", ctx->data_file); break; } for (i = 0; i < keyidx; i++) { apr_dbm_delete(dbm, keylist[i]); deleted++; } apr_dbm_close(dbm); if (keyidx < KEYMAX) break; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00813) "DBM socache expiry: " "old: %d, new: %d, removed: %d", elts, elts-deleted, deleted); } static void socache_dbm_status(ap_socache_instance_t *ctx, request_rec *r, int flags) { apr_dbm_t *dbm; apr_datum_t dbmkey; apr_datum_t dbmval; int elts; long size; int avg; apr_status_t rv; elts = 0; size = 0; apr_pool_clear(ctx->pool); if ((rv = apr_dbm_open(&dbm, ctx->data_file, APR_DBM_RWCREATE, DBM_FILE_MODE, ctx->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00814) "Cannot open socache DBM file `%s' for status " "retrival", ctx->data_file); return; } /* * XXX - Check the return value of apr_dbm_firstkey, apr_dbm_fetch - TBD */ apr_dbm_firstkey(dbm, &dbmkey); for ( ; dbmkey.dptr != NULL; apr_dbm_nextkey(dbm, &dbmkey)) { apr_dbm_fetch(dbm, dbmkey, &dbmval); if (dbmval.dptr == NULL) continue; elts += 1; size += dbmval.dsize; } apr_dbm_close(dbm); if (size > 0 && elts > 0) avg = (int)(size / (long)elts); else avg = 0; if (!(flags & AP_STATUS_SHORT)) { ap_rprintf(r, "cache type: DBM, maximum size: unlimited
    "); ap_rprintf(r, "current entries: %d, current size: %ld bytes
    ", elts, size); ap_rprintf(r, "average entry size: %d bytes
    ", avg); } else { ap_rputs("CacheType: DBM\n", r); ap_rputs("CacheMaximumSize: unlimited\n", r); ap_rprintf(r, "CacheCurrentEntries: %d\n", elts); ap_rprintf(r, "CacheCurrentSize: %ld\n", size); ap_rprintf(r, "CacheAvgEntrySize: %d\n", avg); } } static apr_status_t socache_dbm_iterate(ap_socache_instance_t *ctx, server_rec *s, void *userctx, ap_socache_iterator_t *iterator, apr_pool_t *pool) { apr_dbm_t *dbm; apr_datum_t dbmkey; apr_datum_t dbmval; apr_time_t expiry; int expired; apr_time_t now; apr_status_t rv; /* * make sure the expired records are omitted */ now = apr_time_now(); if ((rv = apr_dbm_open(&dbm, ctx->data_file, APR_DBM_RWCREATE, DBM_FILE_MODE, ctx->pool)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00815) "Cannot open socache DBM file `%s' for " "iterating", ctx->data_file); return rv; } rv = apr_dbm_firstkey(dbm, &dbmkey); while (rv == APR_SUCCESS && dbmkey.dptr != NULL) { expired = FALSE; apr_dbm_fetch(dbm, dbmkey, &dbmval); if (dbmval.dsize <= sizeof(apr_time_t) || dbmval.dptr == NULL) expired = TRUE; else { memcpy(&expiry, dbmval.dptr, sizeof(apr_time_t)); if (expiry <= now) expired = TRUE; } if (!expired) { rv = iterator(ctx, s, userctx, (unsigned char *)dbmkey.dptr, dbmkey.dsize, (unsigned char *)dbmval.dptr + sizeof(apr_time_t), dbmval.dsize - sizeof(apr_time_t), pool); ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, s, APLOGNO(00816) "dbm `%s' entry iterated", ctx->data_file); if (rv != APR_SUCCESS) return rv; } rv = apr_dbm_nextkey(dbm, &dbmkey); } apr_dbm_close(dbm); if (rv != APR_SUCCESS && rv != APR_EOF) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00817) "Failure reading first/next socache DBM file `%s' record", ctx->data_file); return rv; } return APR_SUCCESS; } static const ap_socache_provider_t socache_dbm = { "dbm", AP_SOCACHE_FLAG_NOTMPSAFE, socache_dbm_create, socache_dbm_init, socache_dbm_destroy, socache_dbm_store, socache_dbm_retrieve, socache_dbm_remove, socache_dbm_status, socache_dbm_iterate }; static void register_hooks(apr_pool_t *p) { ap_register_provider(p, AP_SOCACHE_PROVIDER_GROUP, "dbm", AP_SOCACHE_PROVIDER_VERSION, &socache_dbm); } AP_DECLARE_MODULE(socache_dbm) = { STANDARD20_MODULE_STUFF, NULL, NULL, NULL, NULL, NULL, register_hooks }; httpd-2.4.41/modules/cache/NWGNUcach_dsk0000644000000000000500000001046011667422031016253 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/server/mpm/netware \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = cach_dsk # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Memory Cache Sub-Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 65536 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If this is specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # Declare all target files (you must add your files here) # # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_cache_disk.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ Apache2 \ Libc \ mod_cach \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ @mod_cache.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ cache_disk_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/cache/mod_socache_shmcb.mak0000644000000000000500000002452112701473373020074 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_socache_shmcb.dsp !IF "$(CFG)" == "" CFG=mod_socache_shmcb - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_socache_shmcb - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_socache_shmcb - Win32 Release" && "$(CFG)" != "mod_socache_shmcb - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_socache_shmcb.mak" CFG="mod_socache_shmcb - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_socache_shmcb - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_socache_shmcb - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_socache_shmcb - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_socache_shmcb.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_socache_shmcb.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_socache_shmcb.obj" -@erase "$(INTDIR)\mod_socache_shmcb.res" -@erase "$(INTDIR)\mod_socache_shmcb_src.idb" -@erase "$(INTDIR)\mod_socache_shmcb_src.pdb" -@erase "$(OUTDIR)\mod_socache_shmcb.exp" -@erase "$(OUTDIR)\mod_socache_shmcb.lib" -@erase "$(OUTDIR)\mod_socache_shmcb.pdb" -@erase "$(OUTDIR)\mod_socache_shmcb.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_socache_shmcb_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_socache_shmcb.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_socache_shmcb.so" /d LONG_NAME="socache_shmcb_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_socache_shmcb.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_socache_shmcb.pdb" /debug /out:"$(OUTDIR)\mod_socache_shmcb.so" /implib:"$(OUTDIR)\mod_socache_shmcb.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_shmcb.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_socache_shmcb.obj" \ "$(INTDIR)\mod_socache_shmcb.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_socache_shmcb.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_socache_shmcb.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_socache_shmcb.so" if exist .\Release\mod_socache_shmcb.so.manifest mt.exe -manifest .\Release\mod_socache_shmcb.so.manifest -outputresource:.\Release\mod_socache_shmcb.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_socache_shmcb - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_socache_shmcb.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_socache_shmcb.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_socache_shmcb.obj" -@erase "$(INTDIR)\mod_socache_shmcb.res" -@erase "$(INTDIR)\mod_socache_shmcb_src.idb" -@erase "$(INTDIR)\mod_socache_shmcb_src.pdb" -@erase "$(OUTDIR)\mod_socache_shmcb.exp" -@erase "$(OUTDIR)\mod_socache_shmcb.lib" -@erase "$(OUTDIR)\mod_socache_shmcb.pdb" -@erase "$(OUTDIR)\mod_socache_shmcb.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../srclib/apr-util/include" /I "../../srclib/apr/include" /I "../../include" /I "../generators" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_socache_shmcb_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_socache_shmcb.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_socache_shmcb.so" /d LONG_NAME="socache_shmcb_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_socache_shmcb.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_socache_shmcb.pdb" /debug /out:"$(OUTDIR)\mod_socache_shmcb.so" /implib:"$(OUTDIR)\mod_socache_shmcb.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_socache_shmcb.so LINK32_OBJS= \ "$(INTDIR)\mod_socache_shmcb.obj" \ "$(INTDIR)\mod_socache_shmcb.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_socache_shmcb.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_socache_shmcb.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_socache_shmcb.so" if exist .\Debug\mod_socache_shmcb.so.manifest mt.exe -manifest .\Debug\mod_socache_shmcb.so.manifest -outputresource:.\Debug\mod_socache_shmcb.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_socache_shmcb.dep") !INCLUDE "mod_socache_shmcb.dep" !ELSE !MESSAGE Warning: cannot find "mod_socache_shmcb.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_socache_shmcb - Win32 Release" || "$(CFG)" == "mod_socache_shmcb - Win32 Debug" !IF "$(CFG)" == "mod_socache_shmcb - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\cache" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_shmcb - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\cache" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_socache_shmcb - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\cache" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_shmcb - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\cache" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cache" !ENDIF !IF "$(CFG)" == "mod_socache_shmcb - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\cache" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\cache" !ELSEIF "$(CFG)" == "mod_socache_shmcb - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\cache" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\cache" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_socache_shmcb - Win32 Release" "$(INTDIR)\mod_socache_shmcb.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_socache_shmcb.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_socache_shmcb.so" /d LONG_NAME="socache_shmcb_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_socache_shmcb - Win32 Debug" "$(INTDIR)\mod_socache_shmcb.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_socache_shmcb.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_socache_shmcb.so" /d LONG_NAME="socache_shmcb_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_socache_shmcb.c "$(INTDIR)\mod_socache_shmcb.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/cache/mod_socache_dbm.dep0000644000000000000500000000417012674411515017537 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_socache_dbm.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_socache_dbm.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mpm_common.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\generators\mod_status.h"\ httpd-2.4.41/modules/cache/cache_common.h0000644000000000000500000000374112151211714016533 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file cache_common.h * @brief Common Cache structs * * @defgroup Cache_cache Cache Functions * @ingroup MOD_CACHE * @{ */ #ifndef CACHE_COMMON_H #define CACHE_COMMON_H /* a cache control header breakdown */ typedef struct cache_control { unsigned int parsed:1; unsigned int cache_control:1; unsigned int pragma:1; unsigned int no_cache:1; unsigned int no_cache_header:1; /* no cache by header match */ unsigned int no_store:1; unsigned int max_age:1; unsigned int max_stale:1; unsigned int min_fresh:1; unsigned int no_transform:1; unsigned int only_if_cached:1; unsigned int public:1; unsigned int private:1; unsigned int private_header:1; /* private by header match */ unsigned int must_revalidate:1; unsigned int proxy_revalidate:1; unsigned int s_maxage:1; unsigned int invalidated:1; /* has this entity been invalidated? */ apr_int64_t max_age_value; /* if positive, then set */ apr_int64_t max_stale_value; /* if positive, then set */ apr_int64_t min_fresh_value; /* if positive, then set */ apr_int64_t s_maxage_value; /* if positive, then set */ } cache_control_t; #endif /* CACHE_COMMON_H */ /** @} */ httpd-2.4.41/modules/cache/mod_socache_redis.c0000644000000000000500000004156713444157463017575 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "http_protocol.h" #include "apr.h" #include "apu_version.h" #include "ap_socache.h" #include "ap_mpm.h" #include "http_log.h" #include "apr_strings.h" #include "mod_status.h" typedef struct { apr_uint32_t ttl; apr_uint32_t rwto; } socache_rd_svr_cfg; /* apr_redis support requires >= 1.6 */ #if APU_MAJOR_VERSION > 1 || \ (APU_MAJOR_VERSION == 1 && APU_MINOR_VERSION > 5) #define HAVE_APU_REDIS 1 #endif /* The underlying apr_redis system is thread safe.. */ #define RD_KEY_LEN 254 #ifndef RD_DEFAULT_SERVER_PORT #define RD_DEFAULT_SERVER_PORT 6379 #endif #ifndef RD_DEFAULT_SERVER_MIN #define RD_DEFAULT_SERVER_MIN 0 #endif #ifndef RD_DEFAULT_SERVER_SMAX #define RD_DEFAULT_SERVER_SMAX 1 #endif #ifndef RD_DEFAULT_SERVER_TTL #define RD_DEFAULT_SERVER_TTL apr_time_from_sec(15) #endif #ifndef RD_DEFAULT_SERVER_RWTO #define RD_DEFAULT_SERVER_RWTO apr_time_from_sec(5) #endif module AP_MODULE_DECLARE_DATA socache_redis_module; #ifdef HAVE_APU_REDIS #include "apr_redis.h" struct ap_socache_instance_t { const char *servers; apr_redis_t *rc; const char *tag; apr_size_t taglen; /* strlen(tag) + 1 */ }; static const char *socache_rd_create(ap_socache_instance_t **context, const char *arg, apr_pool_t *tmp, apr_pool_t *p) { ap_socache_instance_t *ctx; *context = ctx = apr_pcalloc(p, sizeof *ctx); if (!arg || !*arg) { return "List of server names required to create redis socache."; } ctx->servers = apr_pstrdup(p, arg); return NULL; } static apr_status_t socache_rd_init(ap_socache_instance_t *ctx, const char *namespace, const struct ap_socache_hints *hints, server_rec *s, apr_pool_t *p) { apr_status_t rv; int thread_limit = 0; apr_uint16_t nservers = 0; char *cache_config; char *split; char *tok; socache_rd_svr_cfg *sconf = ap_get_module_config(s->module_config, &socache_redis_module); ap_mpm_query(AP_MPMQ_HARD_LIMIT_THREADS, &thread_limit); /* Find all the servers in the first run to get a total count */ cache_config = apr_pstrdup(p, ctx->servers); split = apr_strtok(cache_config, ",", &tok); while (split) { nservers++; split = apr_strtok(NULL,",", &tok); } rv = apr_redis_create(p, nservers, 0, &ctx->rc); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(03473) "Failed to create Redis Object of '%d' size.", nservers); return rv; } /* Now add each server to the redis */ cache_config = apr_pstrdup(p, ctx->servers); split = apr_strtok(cache_config, ",", &tok); while (split) { apr_redis_server_t *st; char *host_str; char *scope_id; apr_port_t port; rv = apr_parse_addr_port(&host_str, &scope_id, &port, split, p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(03474) "Failed to Parse redis Server: '%s'", split); return rv; } if (host_str == NULL) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(03475) "Failed to Parse Server, " "no hostname specified: '%s'", split); return APR_EINVAL; } if (port == 0) { port = RD_DEFAULT_SERVER_PORT; } rv = apr_redis_server_create(p, host_str, port, RD_DEFAULT_SERVER_MIN, RD_DEFAULT_SERVER_SMAX, thread_limit, sconf->ttl, sconf->rwto, &st); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(03476) "Failed to Create redis Server: %s:%d", host_str, port); return rv; } rv = apr_redis_add_server(ctx->rc, st); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(03477) "Failed to Add redis Server: %s:%d", host_str, port); return rv; } split = apr_strtok(NULL,",", &tok); } ctx->tag = apr_pstrcat(p, namespace, ":", NULL); ctx->taglen = strlen(ctx->tag) + 1; /* socache API constraint: */ AP_DEBUG_ASSERT(ctx->taglen <= 16); return APR_SUCCESS; } static void socache_rd_destroy(ap_socache_instance_t *context, server_rec *s) { /* noop. */ } /* Converts (binary) id into a key prefixed by the predetermined * namespace tag; writes output to key buffer. Returns non-zero if * the id won't fit in the key buffer. */ static int socache_rd_id2key(ap_socache_instance_t *ctx, const unsigned char *id, unsigned int idlen, char *key, apr_size_t keylen) { char *cp; if (idlen * 2 + ctx->taglen >= keylen) return 1; cp = apr_cpystrn(key, ctx->tag, ctx->taglen); ap_bin2hex(id, idlen, cp); return 0; } static apr_status_t socache_rd_store(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, apr_time_t expiry, unsigned char *ucaData, unsigned int nData, apr_pool_t *p) { char buf[RD_KEY_LEN]; apr_status_t rv; apr_uint32_t timeout; if (socache_rd_id2key(ctx, id, idlen, buf, sizeof(buf))) { return APR_EINVAL; } timeout = apr_time_sec(expiry - apr_time_now()); if (timeout <= 0) { return APR_EINVAL; } rv = apr_redis_setex(ctx->rc, buf, (char*)ucaData, nData, timeout, 0); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(03478) "scache_rd: error setting key '%s' " "with %d bytes of data", buf, nData); return rv; } return APR_SUCCESS; } static apr_status_t socache_rd_retrieve(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, unsigned char *dest, unsigned int *destlen, apr_pool_t *p) { apr_size_t data_len; char buf[RD_KEY_LEN], *data; apr_status_t rv; if (socache_rd_id2key(ctx, id, idlen, buf, sizeof buf)) { return APR_EINVAL; } /* ### this could do with a subpool, but _getp looks like it will * eat memory like it's going out of fashion anyway. */ rv = apr_redis_getp(ctx->rc, p, buf, &data, &data_len, NULL); if (rv) { if (rv != APR_NOTFOUND) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(03479) "scache_rd: 'retrieve' FAIL"); } return rv; } else if (data_len > *destlen) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(03480) "scache_rd: 'retrieve' OVERFLOW"); return APR_ENOMEM; } memcpy(dest, data, data_len); *destlen = data_len; return APR_SUCCESS; } static apr_status_t socache_rd_remove(ap_socache_instance_t *ctx, server_rec *s, const unsigned char *id, unsigned int idlen, apr_pool_t *p) { char buf[RD_KEY_LEN]; apr_status_t rv; if (socache_rd_id2key(ctx, id, idlen, buf, sizeof buf)) { return APR_EINVAL; } rv = apr_redis_delete(ctx->rc, buf, 0); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, s, APLOGNO(03481) "scache_rd: error deleting key '%s' ", buf); } return rv; } static void socache_rd_status(ap_socache_instance_t *ctx, request_rec *r, int flags) { apr_redis_t *rc = ctx->rc; int i; for (i = 0; i < rc->ntotal; i++) { apr_redis_server_t *rs; apr_redis_stats_t *stats; char *role; apr_status_t rv; char *br = (!(flags & AP_STATUS_SHORT) ? "
    " : ""); rs = rc->live_servers[i]; ap_rprintf(r, "Redis server: %s:%d [%s]%s\n", rs->host, (int)rs->port, (rs->status == APR_RC_SERVER_LIVE) ? "Up" : "Down", br); rv = apr_redis_stats(rs, r->pool, &stats); if (rv != APR_SUCCESS) continue; if (!(flags & AP_STATUS_SHORT)) { ap_rprintf(r, "General:: Version: %u.%u.%u [%u bits], PID: %u, Uptime: %u hrs
    \n", stats->major, stats->minor, stats->patch, stats->arch_bits, stats->process_id, stats->uptime_in_seconds/3600); ap_rprintf(r, "Clients:: Connected: %d, Blocked: %d
    \n", stats->connected_clients, stats->blocked_clients); ap_rprintf(r, "Memory:: Total: %" APR_UINT64_T_FMT ", Max: %" APR_UINT64_T_FMT ", Used: %" APR_UINT64_T_FMT "
    \n", stats->total_system_memory, stats->maxmemory, stats->used_memory); ap_rprintf(r, "CPU:: System: %u, User: %u
    \n", stats->used_cpu_sys, stats->used_cpu_user ); ap_rprintf(r, "Connections:: Recd: %" APR_UINT64_T_FMT ", Processed: %" APR_UINT64_T_FMT ", Rejected: %" APR_UINT64_T_FMT "
    \n", stats->total_connections_received, stats->total_commands_processed, stats->rejected_connections); ap_rprintf(r, "Cache:: Hits: %" APR_UINT64_T_FMT ", Misses: %" APR_UINT64_T_FMT "
    \n", stats->keyspace_hits, stats->keyspace_misses); ap_rprintf(r, "Net:: Input bytes: %" APR_UINT64_T_FMT ", Output bytes: %" APR_UINT64_T_FMT "
    \n", stats->total_net_input_bytes, stats->total_net_output_bytes); if (stats->role == APR_RS_SERVER_MASTER) role = "master"; else if (stats->role == APR_RS_SERVER_SLAVE) role = "slave"; else role = "unknown"; ap_rprintf(r, "Misc:: Role: %s, Connected Slaves: %u, Is Cluster?: %s \n", role, stats->connected_clients, (stats->cluster_enabled ? "yes" : "no")); ap_rputs("

    \n", r); } else { ap_rprintf(r, "Version: %u.%u.%u [%u bits], PID: %u, Uptime: %u hrs %s\n", stats->major, stats->minor, stats->patch, stats->arch_bits, stats->process_id, stats->uptime_in_seconds/3600, br); ap_rprintf(r, "Clients:: Connected: %d, Blocked: %d %s\n", stats->connected_clients, stats->blocked_clients, br); ap_rprintf(r, "Memory:: Total: %" APR_UINT64_T_FMT ", Max: %" APR_UINT64_T_FMT ", Used: %" APR_UINT64_T_FMT " %s\n", stats->total_system_memory, stats->maxmemory, stats->used_memory, br); ap_rprintf(r, "CPU:: System: %u, User: %u %s\n", stats->used_cpu_sys, stats->used_cpu_user , br); ap_rprintf(r, "Connections:: Recd: %" APR_UINT64_T_FMT ", Processed: %" APR_UINT64_T_FMT ", Rejected: %" APR_UINT64_T_FMT " %s\n", stats->total_connections_received, stats->total_commands_processed, stats->rejected_connections, br); ap_rprintf(r, "Cache:: Hits: %" APR_UINT64_T_FMT ", Misses: %" APR_UINT64_T_FMT " %s\n", stats->keyspace_hits, stats->keyspace_misses, br); ap_rprintf(r, "Net:: Input bytes: %" APR_UINT64_T_FMT ", Output bytes: %" APR_UINT64_T_FMT " %s\n", stats->total_net_input_bytes, stats->total_net_output_bytes, br); if (stats->role == APR_RS_SERVER_MASTER) role = "master"; else if (stats->role == APR_RS_SERVER_SLAVE) role = "slave"; else role = "unknown"; ap_rprintf(r, "Misc:: Role: %s, Connected Slaves: %u, Is Cluster?: %s %s\n", role, stats->connected_clients, (stats->cluster_enabled ? "yes" : "no"), br); } } } static apr_status_t socache_rd_iterate(ap_socache_instance_t *instance, server_rec *s, void *userctx, ap_socache_iterator_t *iterator, apr_pool_t *pool) { return APR_ENOTIMPL; } static const ap_socache_provider_t socache_mc = { "redis", 0, socache_rd_create, socache_rd_init, socache_rd_destroy, socache_rd_store, socache_rd_retrieve, socache_rd_remove, socache_rd_status, socache_rd_iterate, }; #endif /* HAVE_APU_REDIS */ static void* create_server_config(apr_pool_t* p, server_rec* s) { socache_rd_svr_cfg *sconf = apr_palloc(p, sizeof(socache_rd_svr_cfg)); sconf->ttl = RD_DEFAULT_SERVER_TTL; sconf->rwto = RD_DEFAULT_SERVER_RWTO; return sconf; } static const char *socache_rd_set_ttl(cmd_parms *cmd, void *dummy, const char *arg) { apr_interval_time_t ttl; socache_rd_svr_cfg *sconf = ap_get_module_config(cmd->server->module_config, &socache_redis_module); if (ap_timeout_parameter_parse(arg, &ttl, "s") != APR_SUCCESS) { return apr_pstrcat(cmd->pool, cmd->cmd->name, " has wrong format", NULL); } if ((ttl < apr_time_from_sec(0)) || (ttl > apr_time_from_sec(3600))) { return apr_pstrcat(cmd->pool, cmd->cmd->name, " can only be 0 or up to one hour.", NULL); } /* apr_redis_server_create needs a ttl in usec. */ sconf->ttl = ttl; return NULL; } static const char *socache_rd_set_rwto(cmd_parms *cmd, void *dummy, const char *arg) { apr_interval_time_t rwto; socache_rd_svr_cfg *sconf = ap_get_module_config(cmd->server->module_config, &socache_redis_module); if (ap_timeout_parameter_parse(arg, &rwto, "s") != APR_SUCCESS) { return apr_pstrcat(cmd->pool, cmd->cmd->name, " has wrong format", NULL); } if ((rwto < apr_time_from_sec(0)) || (rwto > apr_time_from_sec(3600))) { return apr_pstrcat(cmd->pool, cmd->cmd->name, " can only be 0 or up to one hour.", NULL); } /* apr_redis_server_create needs a ttl in usec. */ sconf->rwto = rwto; return NULL; } static void register_hooks(apr_pool_t *p) { #ifdef HAVE_APU_REDIS ap_register_provider(p, AP_SOCACHE_PROVIDER_GROUP, "redis", AP_SOCACHE_PROVIDER_VERSION, &socache_mc); #endif } static const command_rec socache_redis_cmds[] = { AP_INIT_TAKE1("RedisConnPoolTTL", socache_rd_set_ttl, NULL, RSRC_CONF, "TTL used for the connection pool with the Redis server(s)"), AP_INIT_TAKE1("RedisTimeout", socache_rd_set_rwto, NULL, RSRC_CONF, "R/W timeout used for the connection with the Redis server(s)"), {NULL} }; AP_DECLARE_MODULE(socache_redis) = { STANDARD20_MODULE_STUFF, NULL, /* create per-dir config structures */ NULL, /* merge per-dir config structures */ create_server_config, /* create per-server config structures */ NULL, /* merge per-server config structures */ socache_redis_cmds, /* table of config file commands */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/cache/Makefile.in0000644000000000000500000000005110150161574016010 0ustar rootsrc include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/cache/mod_cache.h0000644000000000000500000001613011666462060016032 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_cache.h * @brief Main include file for the Apache Transparent Cache * * @defgroup MOD_CACHE mod_cache * @ingroup APACHE_MODS * @{ */ #ifndef MOD_CACHE_H #define MOD_CACHE_H #include "httpd.h" #include "apr_date.h" #include "apr_optional.h" #include "apr_hooks.h" #include "cache_common.h" /* Create a set of CACHE_DECLARE(type), CACHE_DECLARE_NONSTD(type) and * CACHE_DECLARE_DATA with appropriate export and import tags for the platform */ #if !defined(WIN32) #define CACHE_DECLARE(type) type #define CACHE_DECLARE_NONSTD(type) type #define CACHE_DECLARE_DATA #elif defined(CACHE_DECLARE_STATIC) #define CACHE_DECLARE(type) type __stdcall #define CACHE_DECLARE_NONSTD(type) type #define CACHE_DECLARE_DATA #elif defined(CACHE_DECLARE_EXPORT) #define CACHE_DECLARE(type) __declspec(dllexport) type __stdcall #define CACHE_DECLARE_NONSTD(type) __declspec(dllexport) type #define CACHE_DECLARE_DATA __declspec(dllexport) #else #define CACHE_DECLARE(type) __declspec(dllimport) type __stdcall #define CACHE_DECLARE_NONSTD(type) __declspec(dllimport) type #define CACHE_DECLARE_DATA __declspec(dllimport) #endif /* cache info information */ typedef struct cache_info cache_info; struct cache_info { /** * the original time corresponding to the 'Date:' header of the request * served */ apr_time_t date; /** a time when the cached entity is due to expire */ apr_time_t expire; /** r->request_time from the same request */ apr_time_t request_time; /** apr_time_now() at the time the entity was actually cached */ apr_time_t response_time; /** * HTTP status code of the cached entity. Though not necessarily the * status code finally issued to the request. */ int status; /* cached cache-control */ cache_control_t control; }; /* cache handle information */ typedef struct cache_object cache_object_t; struct cache_object { const char *key; cache_object_t *next; cache_info info; /* Opaque portion (specific to the implementation) of the cache object */ void *vobj; }; typedef struct cache_handle cache_handle_t; struct cache_handle { cache_object_t *cache_obj; apr_table_t *req_hdrs; /* cached request headers */ apr_table_t *resp_hdrs; /* cached response headers */ }; #define CACHE_PROVIDER_GROUP "cache" typedef struct { int (*remove_entity) (cache_handle_t *h); apr_status_t (*store_headers)(cache_handle_t *h, request_rec *r, cache_info *i); apr_status_t (*store_body)(cache_handle_t *h, request_rec *r, apr_bucket_brigade *in, apr_bucket_brigade *out); apr_status_t (*recall_headers) (cache_handle_t *h, request_rec *r); apr_status_t (*recall_body) (cache_handle_t *h, apr_pool_t *p, apr_bucket_brigade *bb); int (*create_entity) (cache_handle_t *h, request_rec *r, const char *urlkey, apr_off_t len, apr_bucket_brigade *bb); int (*open_entity) (cache_handle_t *h, request_rec *r, const char *urlkey); int (*remove_url) (cache_handle_t *h, request_rec *r); apr_status_t (*commit_entity)(cache_handle_t *h, request_rec *r); apr_status_t (*invalidate_entity)(cache_handle_t *h, request_rec *r); } cache_provider; typedef enum { AP_CACHE_HIT, AP_CACHE_REVALIDATE, AP_CACHE_MISS, AP_CACHE_INVALIDATE } ap_cache_status_e; #define AP_CACHE_HIT_ENV "cache-hit" #define AP_CACHE_REVALIDATE_ENV "cache-revalidate" #define AP_CACHE_MISS_ENV "cache-miss" #define AP_CACHE_INVALIDATE_ENV "cache-invalidate" #define AP_CACHE_STATUS_ENV "cache-status" /* cache_util.c */ /* do a HTTP/1.1 age calculation */ CACHE_DECLARE(apr_time_t) ap_cache_current_age(cache_info *info, const apr_time_t age_value, apr_time_t now); CACHE_DECLARE(apr_time_t) ap_cache_hex2usec(const char *x); CACHE_DECLARE(void) ap_cache_usec2hex(apr_time_t j, char *y); CACHE_DECLARE(char *) ap_cache_generate_name(apr_pool_t *p, int dirlevels, int dirlength, const char *name); CACHE_DECLARE(const char *)ap_cache_tokstr(apr_pool_t *p, const char *list, const char **str); /* Create a new table consisting of those elements from an * headers table that are allowed to be stored in a cache. */ CACHE_DECLARE(apr_table_t *)ap_cache_cacheable_headers(apr_pool_t *pool, apr_table_t *t, server_rec *s); /* Create a new table consisting of those elements from an input * headers table that are allowed to be stored in a cache. */ CACHE_DECLARE(apr_table_t *)ap_cache_cacheable_headers_in(request_rec *r); /* Create a new table consisting of those elements from an output * headers table that are allowed to be stored in a cache; * ensure there is a content type and capture any errors. */ CACHE_DECLARE(apr_table_t *)ap_cache_cacheable_headers_out(request_rec *r); /** * Parse the Cache-Control and Pragma headers in one go, marking * which tokens appear within the header. Populate the structure * passed in. */ int ap_cache_control(request_rec *r, cache_control_t *cc, const char *cc_header, const char *pragma_header, apr_table_t *headers); /* hooks */ /** * Cache status hook. * This hook is called as soon as the cache has made a decision as to whether * an entity should be served from cache (hit), should be served from cache * after a successful validation (revalidate), or served from the backend * and potentially cached (miss). * * A basic implementation of this hook exists in mod_cache which writes this * information to the subprocess environment, and optionally to request * headers. Further implementations may add hooks as appropriate to perform * more advanced processing, or to store statistics about the cache behaviour. */ APR_DECLARE_EXTERNAL_HOOK(cache, CACHE, int, cache_status, (cache_handle_t *h, request_rec *r, apr_table_t *headers, ap_cache_status_e status, const char *reason)) APR_DECLARE_OPTIONAL_FN(apr_status_t, ap_cache_generate_key, (request_rec *r, apr_pool_t*p, const char **key)); #endif /*MOD_CACHE_H*/ /** @} */ httpd-2.4.41/modules/loggers/0002755000000000000500000000000013523273342014354 5ustar rootsrchttpd-2.4.41/modules/loggers/mod_log_forensic.c0000644000000000000500000001716512117403546020037 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * See also support/check_forensic. * Relate the forensic log to the transfer log by including * %{forensic-id}n in the custom log format, for example: * CustomLog logs/custom "%h %l %u %t \"%r\" %>s %b %{forensic-id}n" * * Credit is due to Tina Bird , whose * idea this module was. * * Ben Laurie 29/12/2003 */ #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "apr_strings.h" #include "apr_atomic.h" #include "http_protocol.h" #include "test_char.h" #if APR_HAVE_UNISTD_H #include #endif module AP_MODULE_DECLARE_DATA log_forensic_module; typedef struct fcfg { const char *logname; apr_file_t *fd; } fcfg; static apr_uint32_t next_id; static void *make_forensic_log_scfg(apr_pool_t *p, server_rec *s) { fcfg *cfg = apr_pcalloc(p, sizeof *cfg); cfg->logname = NULL; cfg->fd = NULL; return cfg; } static void *merge_forensic_log_scfg(apr_pool_t *p, void *parent, void *new) { fcfg *cfg = apr_pcalloc(p, sizeof *cfg); fcfg *pc = parent; fcfg *nc = new; cfg->logname = apr_pstrdup(p, nc->logname ? nc->logname : pc->logname); cfg->fd = NULL; return cfg; } static int open_log(server_rec *s, apr_pool_t *p) { fcfg *cfg = ap_get_module_config(s->module_config, &log_forensic_module); if (!cfg->logname || cfg->fd) return 1; if (*cfg->logname == '|') { piped_log *pl; const char *pname = ap_server_root_relative(p, cfg->logname + 1); pl = ap_open_piped_log(p, pname); if (pl == NULL) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00650) "couldn't spawn forensic log pipe %s", cfg->logname); return 0; } cfg->fd = ap_piped_log_write_fd(pl); } else { const char *fname = ap_server_root_relative(p, cfg->logname); apr_status_t rv; if ((rv = apr_file_open(&cfg->fd, fname, APR_WRITE | APR_APPEND | APR_CREATE, APR_OS_DEFAULT, p)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00651) "could not open forensic log file %s.", fname); return 0; } } return 1; } static int log_init(apr_pool_t *pc, apr_pool_t *p, apr_pool_t *pt, server_rec *s) { for ( ; s ; s = s->next) { if (!open_log(s, p)) { return HTTP_INTERNAL_SERVER_ERROR; } } return OK; } /* e is the first _invalid_ location in q N.B. returns the terminating NUL. */ static char *log_escape(char *q, const char *e, const char *p) { for ( ; *p ; ++p) { ap_assert(q < e); if (test_char_table[*(unsigned char *)p]&T_ESCAPE_FORENSIC) { ap_assert(q+2 < e); *q++ = '%'; ap_bin2hex(p, 1, q); q += 2; } else *q++ = *p; } ap_assert(q < e); *q = '\0'; return q; } typedef struct hlog { char *log; char *pos; char *end; apr_pool_t *p; apr_size_t count; } hlog; static int count_string(const char *p) { int n; for (n = 0 ; *p ; ++p, ++n) if (test_char_table[*(unsigned char *)p]&T_ESCAPE_FORENSIC) n += 2; return n; } static int count_headers(void *h_, const char *key, const char *value) { hlog *h = h_; h->count += count_string(key)+count_string(value)+2; return 1; } static int log_headers(void *h_, const char *key, const char *value) { hlog *h = h_; /* note that we don't have to check h->pos here, coz its been done for us by log_escape */ *h->pos++ = '|'; h->pos = log_escape(h->pos, h->end, key); *h->pos++ = ':'; h->pos = log_escape(h->pos, h->end, value); return 1; } static int log_before(request_rec *r) { fcfg *cfg = ap_get_module_config(r->server->module_config, &log_forensic_module); const char *id; hlog h; apr_size_t n; apr_status_t rv; if (!cfg->fd || r->prev) { return DECLINED; } if (!(id = apr_table_get(r->subprocess_env, "UNIQUE_ID"))) { /* we make the assumption that we can't go through all the PIDs in under 1 second */ id = apr_psprintf(r->pool, "%" APR_PID_T_FMT ":%lx:%x", getpid(), time(NULL), apr_atomic_inc32(&next_id)); } ap_set_module_config(r->request_config, &log_forensic_module, (char *)id); h.p = r->pool; h.count = 0; apr_table_do(count_headers, &h, r->headers_in, NULL); h.count += 1+strlen(id)+1+count_string(r->the_request)+1+1; h.log = apr_palloc(r->pool, h.count); h.pos = h.log; h.end = h.log+h.count; *h.pos++ = '+'; strcpy(h.pos, id); h.pos += strlen(h.pos); *h.pos++ = '|'; h.pos = log_escape(h.pos, h.end, r->the_request); apr_table_do(log_headers, &h, r->headers_in, NULL); ap_assert(h.pos < h.end); *h.pos++ = '\n'; n = h.count-1; rv = apr_file_write(cfg->fd, h.log, &n); ap_assert(rv == APR_SUCCESS && n == h.count-1); apr_table_setn(r->notes, "forensic-id", id); return OK; } static int log_after(request_rec *r) { fcfg *cfg = ap_get_module_config(r->server->module_config, &log_forensic_module); const char *id = ap_get_module_config(r->request_config, &log_forensic_module); char *s; apr_size_t l, n; apr_status_t rv; if (!cfg->fd || id == NULL) { return DECLINED; } s = apr_pstrcat(r->pool, "-", id, "\n", NULL); l = n = strlen(s); rv = apr_file_write(cfg->fd, s, &n); ap_assert(rv == APR_SUCCESS && n == l); return OK; } static const char *set_forensic_log(cmd_parms *cmd, void *dummy, const char *fn) { fcfg *cfg = ap_get_module_config(cmd->server->module_config, &log_forensic_module); cfg->logname = fn; return NULL; } static const command_rec forensic_log_cmds[] = { AP_INIT_TAKE1("ForensicLog", set_forensic_log, NULL, RSRC_CONF, "the filename of the forensic log"), { NULL } }; static void register_hooks(apr_pool_t *p) { static const char * const pre[] = { "mod_unique_id.c", NULL }; ap_hook_open_logs(log_init,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_post_read_request(log_before,pre,NULL,APR_HOOK_REALLY_FIRST); ap_hook_log_transaction(log_after,NULL,NULL,APR_HOOK_REALLY_LAST); } AP_DECLARE_MODULE(log_forensic) = { STANDARD20_MODULE_STUFF, NULL, /* create per-dir config */ NULL, /* merge per-dir config */ make_forensic_log_scfg, /* server config */ merge_forensic_log_scfg, /* merge server config */ forensic_log_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/loggers/NWGNUmodlogio0000644000000000000500000001036011540562746016733 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = logio # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) IO Logging Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Logio Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/modlogio.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_logio.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ logio_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/loggers/NWGNUforensic0000644000000000000500000001041211540562746016730 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = forensic # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Forensic Logging Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Forensic Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/forensic.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_log_forensic.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ log_forensic_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/loggers/mod_log_debug.c0000644000000000000500000002207012656470644017317 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_strings.h" #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "ap_expr.h" extern module AP_MODULE_DECLARE_DATA log_debug_module; typedef struct { ap_expr_info_t *msg_expr; ap_expr_info_t *condition; const char *hook; } msg_entry; typedef struct { apr_array_header_t *entries; } log_debug_dirconf; static const char *allhooks = "all"; static const char * const hooks[] = { "log_transaction", /* 0 */ "quick_handler", /* 1 */ "handler", /* 2 */ "translate_name", /* 3 */ "map_to_storage", /* 4 */ "fixups", /* 5 */ "type_checker", /* 6 */ "check_access", /* 7 */ "check_access_ex", /* 8 */ "check_authn", /* 9 */ "check_authz", /* 10 */ "insert_filter", /* 11 */ NULL }; static void do_debug_log(request_rec *r, const char *hookname) { log_debug_dirconf *dconf = ap_get_module_config(r->per_dir_config, &log_debug_module); int i; if (dconf->entries == NULL) return; for (i = 0; i < dconf->entries->nelts; i++) { const char *msg, *err; msg_entry *entry = APR_ARRAY_IDX(dconf->entries, i, msg_entry *); if (entry->hook != allhooks && entry->hook != hookname) continue; if (entry->condition) { int ret = ap_expr_exec(r, entry->condition, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00640) "Can't evaluate condition: %s", err); continue; } if (!ret) continue; } msg = ap_expr_str_exec(r, entry->msg_expr, &err); if (err) ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00641) "Can't evaluate message expression: %s", err); if (APLOGrdebug(r)) /* Intentional no APLOGNO */ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, "%s (%s hook, %s:%d)", msg, hookname, entry->msg_expr->filename, entry->msg_expr->line_number); else /* Intentional no APLOGNO */ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, "%s", msg); } } static int log_debug_log_transaction(request_rec *r) { do_debug_log(r, hooks[0]); return DECLINED; } static int log_debug_quick_handler(request_rec *r, int lookup_uri) { do_debug_log(r, hooks[1]); return DECLINED; } static int log_debug_handler(request_rec *r) { do_debug_log(r, hooks[2]); return DECLINED; } static int log_debug_translate_name(request_rec *r) { do_debug_log(r, hooks[3]); return DECLINED; } static int log_debug_map_to_storage(request_rec *r) { do_debug_log(r, hooks[4]); return DECLINED; } static int log_debug_fixups(request_rec *r) { do_debug_log(r, hooks[5]); return DECLINED; } static int log_debug_type_checker(request_rec *r) { do_debug_log(r, hooks[6]); return DECLINED; } static int log_debug_check_access(request_rec *r) { do_debug_log(r, hooks[7]); return DECLINED; } static int log_debug_check_access_ex(request_rec *r) { do_debug_log(r, hooks[8]); return DECLINED; } static int log_debug_check_authn(request_rec *r) { do_debug_log(r, hooks[9]); return DECLINED; } static int log_debug_check_authz(request_rec *r) { do_debug_log(r, hooks[10]); return DECLINED; } static void log_debug_insert_filter(request_rec *r) { do_debug_log(r, hooks[11]); } static void *log_debug_create_dconf(apr_pool_t *p, char *dirspec) { log_debug_dirconf *dconf = apr_pcalloc(p, sizeof(log_debug_dirconf)); return dconf; } static void *log_debug_merge_dconf(apr_pool_t *p, void *parent_conf, void *new_conf) { log_debug_dirconf *merged = apr_pcalloc(p, sizeof(log_debug_dirconf)); const log_debug_dirconf *parent = parent_conf; const log_debug_dirconf *new = new_conf; if (parent->entries == NULL) merged->entries = new->entries; else if (new->entries == NULL) merged->entries = parent->entries; else /* apr_array_append actually creates a new array */ merged->entries = apr_array_append(p, parent->entries, new->entries); return merged; } static const char *cmd_log_message(cmd_parms *cmd, void *dconf_, const char *arg1, const char *arg2, const char *arg3) { msg_entry *entry = apr_pcalloc(cmd->pool, sizeof(msg_entry)); log_debug_dirconf *dconf = dconf_; int i, j; const char *err; const char *args[2]; args[0] = arg2; args[1] = arg3; entry->msg_expr = ap_expr_parse_cmd(cmd, arg1, AP_EXPR_FLAG_STRING_RESULT| AP_EXPR_FLAG_DONT_VARY, &err, NULL); if (err) return apr_psprintf(cmd->pool, "Could not parse message expression '%s': %s", arg1, err); for (i = 0; i < 2; i++) { if (args[i] == NULL) break; if (strncasecmp(args[i], "hook=", 5) == 0) { const char *name = args[i] + 5; j = 0; while (hooks[j]) { if (strcasecmp(hooks[j], name) == 0) { entry->hook = hooks[j]; break; } j++; } if (entry->hook == NULL) { if (strcmp(name, "*") == 0 || strcasecmp(name, allhooks) == 0) entry->hook = allhooks; else return apr_psprintf(cmd->pool, "Invalid hook name: %s", name); } } else if (strncasecmp(args[i], "expr=", 5) == 0) { const char *expr = args[i] + 5; entry->condition = ap_expr_parse_cmd(cmd, expr, AP_EXPR_FLAG_DONT_VARY, &err, NULL); if (err) return apr_psprintf(cmd->pool, "Could not parse expression '%s': %s", expr, err); } else { return apr_psprintf(cmd->pool, "Invalid argument %s", args[i]); } } if (entry->hook == NULL) entry->hook = hooks[0]; if (!dconf->entries) dconf->entries = apr_array_make(cmd->pool, 4, sizeof(msg_entry *)); APR_ARRAY_PUSH(dconf->entries, msg_entry *) = entry; return NULL; } static const command_rec log_debug_cmds[] = { AP_INIT_TAKE123("LogMessage", cmd_log_message, NULL, RSRC_CONF|ACCESS_CONF, "Log a debug message to the error log if this config block is used for " " a request"), {NULL} }; static void register_hooks(apr_pool_t *p) { ap_hook_log_transaction(log_debug_log_transaction, NULL, NULL, APR_HOOK_FIRST); ap_hook_quick_handler(log_debug_quick_handler, NULL, NULL, APR_HOOK_FIRST); ap_hook_handler(log_debug_handler, NULL, NULL, APR_HOOK_FIRST); ap_hook_translate_name(log_debug_translate_name, NULL, NULL, APR_HOOK_FIRST); ap_hook_map_to_storage(log_debug_map_to_storage, NULL, NULL, APR_HOOK_FIRST); ap_hook_fixups(log_debug_fixups, NULL, NULL, APR_HOOK_FIRST); ap_hook_type_checker(log_debug_type_checker, NULL, NULL, APR_HOOK_FIRST); ap_hook_check_access(log_debug_check_access, NULL, NULL, APR_HOOK_FIRST, AP_AUTH_INTERNAL_PER_URI); ap_hook_check_access_ex(log_debug_check_access_ex, NULL, NULL, APR_HOOK_FIRST, AP_AUTH_INTERNAL_PER_URI); ap_hook_check_authn(log_debug_check_authn, NULL, NULL, APR_HOOK_FIRST, AP_AUTH_INTERNAL_PER_URI); ap_hook_check_authz(log_debug_check_authz, NULL, NULL, APR_HOOK_FIRST, AP_AUTH_INTERNAL_PER_URI); ap_hook_insert_filter(log_debug_insert_filter, NULL, NULL, APR_HOOK_FIRST); } AP_DECLARE_MODULE(log_debug) = { STANDARD20_MODULE_STUFF, log_debug_create_dconf, /* create per-dir config */ log_debug_merge_dconf, /* merge per-dir config */ NULL, /* server config */ NULL, /* merge server config */ log_debug_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/loggers/mod_log_debug.dep0000644000000000000500000000365512674411515017645 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_log_debug.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_log_debug.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/loggers/mod_log_forensic.mak0000644000000000000500000002442512701473373020366 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_log_forensic.dsp !IF "$(CFG)" == "" CFG=mod_log_forensic - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_log_forensic - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_log_forensic - Win32 Release" && "$(CFG)" != "mod_log_forensic - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_log_forensic.mak" CFG="mod_log_forensic - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_log_forensic - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_log_forensic - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_log_forensic - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_log_forensic.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_log_forensic.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_log_forensic.obj" -@erase "$(INTDIR)\mod_log_forensic.res" -@erase "$(INTDIR)\mod_log_forensic_src.idb" -@erase "$(INTDIR)\mod_log_forensic_src.pdb" -@erase "$(OUTDIR)\mod_log_forensic.exp" -@erase "$(OUTDIR)\mod_log_forensic.lib" -@erase "$(OUTDIR)\mod_log_forensic.pdb" -@erase "$(OUTDIR)\mod_log_forensic.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../server" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_log_forensic_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_log_forensic.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_log_forensic.so" /d LONG_NAME="log_forensic_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_log_forensic.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_log_forensic.pdb" /debug /out:"$(OUTDIR)\mod_log_forensic.so" /implib:"$(OUTDIR)\mod_log_forensic.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_log_forensic.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_log_forensic.obj" \ "$(INTDIR)\mod_log_forensic.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_log_forensic.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_log_forensic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_log_forensic.so" if exist .\Release\mod_log_forensic.so.manifest mt.exe -manifest .\Release\mod_log_forensic.so.manifest -outputresource:.\Release\mod_log_forensic.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_log_forensic - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_log_forensic.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_log_forensic.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_log_forensic.obj" -@erase "$(INTDIR)\mod_log_forensic.res" -@erase "$(INTDIR)\mod_log_forensic_src.idb" -@erase "$(INTDIR)\mod_log_forensic_src.pdb" -@erase "$(OUTDIR)\mod_log_forensic.exp" -@erase "$(OUTDIR)\mod_log_forensic.lib" -@erase "$(OUTDIR)\mod_log_forensic.pdb" -@erase "$(OUTDIR)\mod_log_forensic.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../server" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_log_forensic_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_log_forensic.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_log_forensic.so" /d LONG_NAME="log_forensic_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_log_forensic.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_log_forensic.pdb" /debug /out:"$(OUTDIR)\mod_log_forensic.so" /implib:"$(OUTDIR)\mod_log_forensic.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_log_forensic.so LINK32_OBJS= \ "$(INTDIR)\mod_log_forensic.obj" \ "$(INTDIR)\mod_log_forensic.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_log_forensic.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_log_forensic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_log_forensic.so" if exist .\Debug\mod_log_forensic.so.manifest mt.exe -manifest .\Debug\mod_log_forensic.so.manifest -outputresource:.\Debug\mod_log_forensic.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_log_forensic.dep") !INCLUDE "mod_log_forensic.dep" !ELSE !MESSAGE Warning: cannot find "mod_log_forensic.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_log_forensic - Win32 Release" || "$(CFG)" == "mod_log_forensic - Win32 Debug" !IF "$(CFG)" == "mod_log_forensic - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\loggers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\loggers" !ELSEIF "$(CFG)" == "mod_log_forensic - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\loggers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\loggers" !ENDIF !IF "$(CFG)" == "mod_log_forensic - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\loggers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\loggers" !ELSEIF "$(CFG)" == "mod_log_forensic - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\loggers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\loggers" !ENDIF !IF "$(CFG)" == "mod_log_forensic - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\loggers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\loggers" !ELSEIF "$(CFG)" == "mod_log_forensic - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\loggers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\loggers" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_log_forensic - Win32 Release" "$(INTDIR)\mod_log_forensic.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_log_forensic.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_log_forensic.so" /d LONG_NAME="log_forensic_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_log_forensic - Win32 Debug" "$(INTDIR)\mod_log_forensic.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_log_forensic.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_log_forensic.so" /d LONG_NAME="log_forensic_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_log_forensic.c "$(INTDIR)\mod_log_forensic.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/loggers/mod_logio.mak0000644000000000000500000002321112701473373017016 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_logio.dsp !IF "$(CFG)" == "" CFG=mod_logio - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_logio - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_logio - Win32 Release" && "$(CFG)" != "mod_logio - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_logio.mak" CFG="mod_logio - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_logio - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_logio - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_logio - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_logio.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_logio.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_logio.obj" -@erase "$(INTDIR)\mod_logio.res" -@erase "$(INTDIR)\mod_logio_src.idb" -@erase "$(INTDIR)\mod_logio_src.pdb" -@erase "$(OUTDIR)\mod_logio.exp" -@erase "$(OUTDIR)\mod_logio.lib" -@erase "$(OUTDIR)\mod_logio.pdb" -@erase "$(OUTDIR)\mod_logio.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_logio_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_logio.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_logio.so" /d LONG_NAME="logio_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_logio.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_logio.pdb" /debug /out:"$(OUTDIR)\mod_logio.so" /implib:"$(OUTDIR)\mod_logio.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_logio.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_logio.obj" \ "$(INTDIR)\mod_logio.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_logio.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_logio.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_logio.so" if exist .\Release\mod_logio.so.manifest mt.exe -manifest .\Release\mod_logio.so.manifest -outputresource:.\Release\mod_logio.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_logio - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_logio.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_logio.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_logio.obj" -@erase "$(INTDIR)\mod_logio.res" -@erase "$(INTDIR)\mod_logio_src.idb" -@erase "$(INTDIR)\mod_logio_src.pdb" -@erase "$(OUTDIR)\mod_logio.exp" -@erase "$(OUTDIR)\mod_logio.lib" -@erase "$(OUTDIR)\mod_logio.pdb" -@erase "$(OUTDIR)\mod_logio.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_logio_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_logio.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_logio.so" /d LONG_NAME="logio_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_logio.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_logio.pdb" /debug /out:"$(OUTDIR)\mod_logio.so" /implib:"$(OUTDIR)\mod_logio.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_logio.so LINK32_OBJS= \ "$(INTDIR)\mod_logio.obj" \ "$(INTDIR)\mod_logio.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_logio.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_logio.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_logio.so" if exist .\Debug\mod_logio.so.manifest mt.exe -manifest .\Debug\mod_logio.so.manifest -outputresource:.\Debug\mod_logio.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_logio.dep") !INCLUDE "mod_logio.dep" !ELSE !MESSAGE Warning: cannot find "mod_logio.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_logio - Win32 Release" || "$(CFG)" == "mod_logio - Win32 Debug" !IF "$(CFG)" == "mod_logio - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\loggers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\loggers" !ELSEIF "$(CFG)" == "mod_logio - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\loggers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\loggers" !ENDIF !IF "$(CFG)" == "mod_logio - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\loggers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\loggers" !ELSEIF "$(CFG)" == "mod_logio - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\loggers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\loggers" !ENDIF !IF "$(CFG)" == "mod_logio - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\loggers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\loggers" !ELSEIF "$(CFG)" == "mod_logio - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\loggers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\loggers" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_logio - Win32 Release" "$(INTDIR)\mod_logio.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_logio.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_logio.so" /d LONG_NAME="logio_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_logio - Win32 Debug" "$(INTDIR)\mod_logio.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_logio.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_logio.so" /d LONG_NAME="logio_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_logio.c "$(INTDIR)\mod_logio.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/loggers/mod_logio.c0000644000000000000500000002002513262704500016460 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * Written by Bojan Smojver . */ #include "apr_strings.h" #include "apr_lib.h" #include "apr_hash.h" #include "apr_optional.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "mod_log_config.h" #include "httpd.h" #include "http_core.h" #include "http_config.h" #include "http_connection.h" #include "http_protocol.h" #include "http_request.h" module AP_MODULE_DECLARE_DATA logio_module; static const char logio_filter_name[] = "LOG_INPUT_OUTPUT"; static const char logio_ttfb_filter_name[] = "LOGIO_TTFB_OUT"; /* * Logging of input and output config... */ typedef struct logio_config_t { apr_off_t bytes_in; apr_off_t bytes_out; apr_off_t bytes_last_request; } logio_config_t; typedef struct logio_dirconf_t { unsigned int track_ttfb:1; } logio_dirconf_t; typedef struct logio_req_t { apr_time_t ttfb; } logio_req_t; /* * Optional function for the core to add to bytes_out */ static void ap_logio_add_bytes_out(conn_rec *c, apr_off_t bytes) { logio_config_t *cf = ap_get_module_config(c->conn_config, &logio_module); cf->bytes_out += bytes; } /* * Optional function for modules to adjust bytes_in */ static void ap_logio_add_bytes_in(conn_rec *c, apr_off_t bytes) { logio_config_t *cf = ap_get_module_config(c->conn_config, &logio_module); cf->bytes_in += bytes; } /* * Optional function to get total byte count of last request for * ap_increment_counts. */ static apr_off_t ap_logio_get_last_bytes(conn_rec *c) { logio_config_t *cf = ap_get_module_config(c->conn_config, &logio_module); return cf->bytes_last_request; } /* * Format items... */ static const char *log_bytes_in(request_rec *r, char *a) { logio_config_t *cf = ap_get_module_config(r->connection->conn_config, &logio_module); return apr_off_t_toa(r->pool, cf->bytes_in); } static const char *log_bytes_out(request_rec *r, char *a) { logio_config_t *cf = ap_get_module_config(r->connection->conn_config, &logio_module); return apr_off_t_toa(r->pool, cf->bytes_out); } static const char *log_bytes_combined(request_rec *r, char *a) { logio_config_t *cf = ap_get_module_config(r->connection->conn_config, &logio_module); return apr_off_t_toa(r->pool, cf->bytes_out + cf->bytes_in); } static const char *log_ttfb(request_rec *r, char *a) { logio_req_t *rconf = ap_get_module_config(r->request_config, &logio_module); if (!rconf || !rconf->ttfb) { return "-"; } return apr_psprintf(r->pool, "%" APR_TIME_T_FMT, rconf->ttfb); } /* * Reset counters after logging... */ static int logio_transaction(request_rec *r) { logio_config_t *cf = ap_get_module_config(r->connection->conn_config, &logio_module); /* need to save byte count of last request for ap_increment_counts */ cf->bytes_last_request = cf->bytes_in + cf->bytes_out; cf->bytes_in = cf->bytes_out = 0; return OK; } /* * Logging of input filter... */ static apr_status_t logio_in_filter(ap_filter_t *f, apr_bucket_brigade *bb, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { apr_off_t length; apr_status_t status; logio_config_t *cf = ap_get_module_config(f->c->conn_config, &logio_module); status = ap_get_brigade(f->next, bb, mode, block, readbytes); apr_brigade_length (bb, 0, &length); if (length > 0) cf->bytes_in += length; return status; } /* * The hooks... */ static int logio_pre_conn(conn_rec *c, void *csd) { logio_config_t *cf = apr_pcalloc(c->pool, sizeof(*cf)); ap_set_module_config(c->conn_config, &logio_module, cf); ap_add_input_filter(logio_filter_name, NULL, NULL, c); return OK; } static int logio_pre_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp) { APR_OPTIONAL_FN_TYPE(ap_register_log_handler) *log_pfn_register; log_pfn_register = APR_RETRIEVE_OPTIONAL_FN(ap_register_log_handler); if (log_pfn_register) { log_pfn_register(p, "I", log_bytes_in, 0); log_pfn_register(p, "O", log_bytes_out, 0); log_pfn_register(p, "S", log_bytes_combined, 0); log_pfn_register(p, "^FB", log_ttfb, 0); } return OK; } static apr_status_t logio_ttfb_filter(ap_filter_t *f, apr_bucket_brigade *b) { request_rec *r = f->r; logio_dirconf_t *conf = ap_get_module_config(r->per_dir_config, &logio_module); if (conf && conf->track_ttfb) { logio_req_t *rconf = ap_get_module_config(r->request_config, &logio_module); if (rconf == NULL) { rconf = apr_pcalloc(r->pool, sizeof(logio_req_t)); rconf->ttfb = apr_time_now() - r->request_time; ap_set_module_config(r->request_config, &logio_module, rconf); } } ap_remove_output_filter(f); return ap_pass_brigade(f->next, b); } static void logio_insert_filter(request_rec * r) { logio_dirconf_t *conf = ap_get_module_config(r->per_dir_config, &logio_module); if (conf->track_ttfb) { ap_add_output_filter(logio_ttfb_filter_name, NULL, r, r->connection); } } static const char *logio_track_ttfb(cmd_parms *cmd, void *in_dir_config, int arg) { logio_dirconf_t *dir_config = in_dir_config; dir_config->track_ttfb = arg; return NULL; } static void *create_logio_dirconf (apr_pool_t *p, char *dummy) { logio_dirconf_t *new = (logio_dirconf_t *) apr_pcalloc(p, sizeof(logio_dirconf_t)); return (void *) new; } static const command_rec logio_cmds[] = { AP_INIT_FLAG ("LogIOTrackTTFB", logio_track_ttfb, NULL, OR_ALL, "Set to 'ON' to enable tracking time to first byte"), {NULL} }; static void register_hooks(apr_pool_t *p) { static const char *pre[] = { "mod_log_config.c", NULL }; ap_hook_pre_connection(logio_pre_conn, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_pre_config(logio_pre_config, NULL, NULL, APR_HOOK_REALLY_FIRST); ap_hook_log_transaction(logio_transaction, pre, NULL, APR_HOOK_MIDDLE); ap_register_input_filter(logio_filter_name, logio_in_filter, NULL, AP_FTYPE_NETWORK - 1); ap_hook_insert_filter(logio_insert_filter, NULL, NULL, APR_HOOK_LAST); ap_register_output_filter(logio_ttfb_filter_name, logio_ttfb_filter, NULL, AP_FTYPE_RESOURCE); APR_REGISTER_OPTIONAL_FN(ap_logio_add_bytes_out); APR_REGISTER_OPTIONAL_FN(ap_logio_add_bytes_in); APR_REGISTER_OPTIONAL_FN(ap_logio_get_last_bytes); } AP_DECLARE_MODULE(logio) = { STANDARD20_MODULE_STUFF, create_logio_dirconf, /* create per-dir config */ NULL, /* merge per-dir config */ NULL, /* server config */ NULL, /* merge server config */ logio_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/loggers/mod_log_debug.dsp0000644000000000000500000001071512062614564017656 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_log_debug" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_log_debug - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_log_debug.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_log_debug.mak" CFG="mod_log_debug - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_log_debug - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_log_debug - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_log_debug - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_log_debug_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_log_debug.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_log_debug.so" /d LONG_NAME="log_debug_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_log_debug.so" /base:@..\..\os\win32\BaseAddr.ref,mod_log_debug.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_log_debug.so" /base:@..\..\os\win32\BaseAddr.ref,mod_log_debug.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_log_debug.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_log_debug - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_log_debug_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_log_debug.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_log_debug.so" /d LONG_NAME="log_debug_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_log_debug.so" /base:@..\..\os\win32\BaseAddr.ref,mod_log_debug.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_log_debug.so" /base:@..\..\os\win32\BaseAddr.ref,mod_log_debug.so # Begin Special Build Tool TargetPath=.\Debug\mod_log_debug.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_log_debug - Win32 Release" # Name "mod_log_debug - Win32 Debug" # Begin Source File SOURCE=.\mod_log_debug.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/loggers/mod_log_debug.mak0000644000000000000500000002167012701473373017643 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_log_debug.dsp !IF "$(CFG)" == "" CFG=mod_log_debug - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_log_debug - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_log_debug - Win32 Release" && "$(CFG)" != "mod_log_debug - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_log_debug.mak" CFG="mod_log_debug - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_log_debug - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_log_debug - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_log_debug - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_log_debug.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_log_debug.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_log_debug.obj" -@erase "$(INTDIR)\mod_log_debug.res" -@erase "$(INTDIR)\mod_log_debug_src.idb" -@erase "$(INTDIR)\mod_log_debug_src.pdb" -@erase "$(OUTDIR)\mod_log_debug.exp" -@erase "$(OUTDIR)\mod_log_debug.lib" -@erase "$(OUTDIR)\mod_log_debug.pdb" -@erase "$(OUTDIR)\mod_log_debug.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_log_debug_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_log_debug.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_log_debug.so" /d LONG_NAME="log_debug_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_log_debug.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_log_debug.pdb" /debug /out:"$(OUTDIR)\mod_log_debug.so" /implib:"$(OUTDIR)\mod_log_debug.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_log_debug.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_log_debug.obj" \ "$(INTDIR)\mod_log_debug.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_log_debug.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_log_debug.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_log_debug.so" if exist .\Release\mod_log_debug.so.manifest mt.exe -manifest .\Release\mod_log_debug.so.manifest -outputresource:.\Release\mod_log_debug.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_log_debug - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_log_debug.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_log_debug.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_log_debug.obj" -@erase "$(INTDIR)\mod_log_debug.res" -@erase "$(INTDIR)\mod_log_debug_src.idb" -@erase "$(INTDIR)\mod_log_debug_src.pdb" -@erase "$(OUTDIR)\mod_log_debug.exp" -@erase "$(OUTDIR)\mod_log_debug.lib" -@erase "$(OUTDIR)\mod_log_debug.pdb" -@erase "$(OUTDIR)\mod_log_debug.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_log_debug_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_log_debug.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_log_debug.so" /d LONG_NAME="log_debug_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_log_debug.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_log_debug.pdb" /debug /out:"$(OUTDIR)\mod_log_debug.so" /implib:"$(OUTDIR)\mod_log_debug.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_log_debug.so LINK32_OBJS= \ "$(INTDIR)\mod_log_debug.obj" \ "$(INTDIR)\mod_log_debug.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_log_debug.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_log_debug.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_log_debug.so" if exist .\Debug\mod_log_debug.so.manifest mt.exe -manifest .\Debug\mod_log_debug.so.manifest -outputresource:.\Debug\mod_log_debug.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_log_debug.dep") !INCLUDE "mod_log_debug.dep" !ELSE !MESSAGE Warning: cannot find "mod_log_debug.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_log_debug - Win32 Release" || "$(CFG)" == "mod_log_debug - Win32 Debug" !IF "$(CFG)" == "mod_log_debug - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\loggers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\loggers" !ELSEIF "$(CFG)" == "mod_log_debug - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\loggers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\loggers" !ENDIF !IF "$(CFG)" == "mod_log_debug - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\loggers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\loggers" !ELSEIF "$(CFG)" == "mod_log_debug - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\loggers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\loggers" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_log_debug - Win32 Release" "$(INTDIR)\mod_log_debug.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_log_debug.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_log_debug.so" /d LONG_NAME="log_debug_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_log_debug - Win32 Debug" "$(INTDIR)\mod_log_debug.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_log_debug.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_log_debug.so" /d LONG_NAME="log_debug_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_log_debug.c "$(INTDIR)\mod_log_debug.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/loggers/mod_logio.dsp0000644000000000000500000001052510551346420017031 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_logio" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_logio - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_logio.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_logio.mak" CFG="mod_logio - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_logio - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_logio - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_logio - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_logio_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_logio.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_logio.so" /d LONG_NAME="logio_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_logio.so" /base:@..\..\os\win32\BaseAddr.ref,mod_logio.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_logio.so" /base:@..\..\os\win32\BaseAddr.ref,mod_logio.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_logio.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_logio - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_logio_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_logio.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_logio.so" /d LONG_NAME="logio_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_logio.so" /base:@..\..\os\win32\BaseAddr.ref,mod_logio.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_logio.so" /base:@..\..\os\win32\BaseAddr.ref,mod_logio.so # Begin Special Build Tool TargetPath=.\Debug\mod_logio.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_logio - Win32 Release" # Name "mod_logio - Win32 Debug" # Begin Source File SOURCE=.\mod_logio.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/loggers/NWGNUmakefile0000644000000000000500000001000311605024175016660 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/modlogio.nlm \ $(OBJDIR)/forensic.nlm \ $(OBJDIR)/logdebug.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/loggers/mod_log_forensic.dsp0000644000000000000500000001111310551346420020363 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_log_forensic" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_log_forensic - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_log_forensic.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_log_forensic.mak" CFG="mod_log_forensic - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_log_forensic - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_log_forensic - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_log_forensic - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../server" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_log_forensic_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_log_forensic.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_log_forensic.so" /d LONG_NAME="log_forensic_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_log_forensic.so" /base:@..\..\os\win32\BaseAddr.ref,mod_log_forensic.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_log_forensic.so" /base:@..\..\os\win32\BaseAddr.ref,mod_log_forensic.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_log_forensic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_log_forensic - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../server" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_log_forensic_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_log_forensic.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_log_forensic.so" /d LONG_NAME="log_forensic_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_log_forensic.so" /base:@..\..\os\win32\BaseAddr.ref,mod_log_forensic.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_log_forensic.so" /base:@..\..\os\win32\BaseAddr.ref,mod_log_forensic.so # Begin Special Build Tool TargetPath=.\Debug\mod_log_forensic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_log_forensic - Win32 Release" # Name "mod_log_forensic - Win32 Debug" # Begin Source File SOURCE=.\mod_log_forensic.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/loggers/NWGNUlogdebug0000644000000000000500000001040211605024175016676 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = logdebug # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Debug Logging Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Logdbg Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_log_debug.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ log_debug_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/loggers/config.m40000644000000000000500000000125711607365420016066 0ustar rootsrcdnl modules enabled in this directory by default dnl APACHE_MODULE(name, helptext[, objects[, structname[, default[, config]]]]) APACHE_MODPATH_INIT(loggers) APACHE_MODULE(log_config, logging configuration. You won't be able to log requests to the server without this module., , , yes) APACHE_MODULE(log_debug, configurable debug logging, , , most) APACHE_MODULE(log_forensic, forensic logging) if test "x$enable_log_forensic" != "xno"; then # mod_log_forensic needs test_char.h APR_ADDTO(INCLUDES, [-I\$(top_builddir)/server]) fi APACHE_MODULE(logio, input and output logging, , , most) APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) APACHE_MODPATH_FINISH httpd-2.4.41/modules/loggers/mod_log_forensic.exp0000644000000000000500000000002410150161574020370 0ustar rootsrclog_forensic_module httpd-2.4.41/modules/loggers/mod_log_forensic.dep0000644000000000000500000000361412674411515020362 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_log_forensic.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_log_forensic.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\server\test_char.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_atomic.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/loggers/.indent.pro0000644000000000000500000000127510150161574016434 0ustar rootsrc-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int httpd-2.4.41/modules/loggers/mod_log_config.c0000644000000000000500000016362313444160433017474 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * Modified by djm@va.pubnix.com: * If no TransferLog is given explicitly, decline to log. * * This is module implements the TransferLog directive (same as the * common log module), and additional directives, LogFormat and CustomLog. * * * Syntax: * * TransferLog fn Logs transfers to fn in standard log format, unless * a custom format is set with LogFormat * LogFormat format Set a log format from TransferLog files * CustomLog fn format * Log to file fn with format given by the format * argument * * There can be any number of TransferLog and CustomLog * commands. Each request will be logged to _ALL_ the * named files, in the appropriate format. * * If no TransferLog or CustomLog directive appears in a VirtualHost, * the request will be logged to the log file(s) defined outside * the virtual host section. If a TransferLog or CustomLog directive * appears in the VirtualHost section, the log files defined outside * the VirtualHost will _not_ be used. This makes this module compatible * with the CLF and config log modules, where the use of TransferLog * inside the VirtualHost section overrides its use outside. * * Examples: * * TransferLog logs/access_log * * LogFormat "... custom format ..." * TransferLog log/virtual_only * CustomLog log/virtual_useragents "%t %{user-agent}i" * * * This will log using CLF to access_log any requests handled by the * main server, while any requests to the virtual host will be logged * with the "... custom format..." to virtual_only _AND_ using * the custom user-agent log to virtual_useragents. * * Note that the NCSA referer and user-agent logs are easily added with * CustomLog: * CustomLog logs/referer "%{referer}i -> %U" * CustomLog logs/agent "%{user-agent}i" * * RefererIgnore functionality can be obtained with conditional * logging (SetEnvIf and CustomLog ... env=!VAR). * * But using this method allows much easier modification of the * log format, e.g. to log hosts along with UA: * CustomLog logs/referer "%{referer}i %U %h" * * The argument to LogFormat and CustomLog is a string, which can include * literal characters copied into the log files, and '%' directives as * follows: * * %...B: bytes sent, excluding HTTP headers. * %...b: bytes sent, excluding HTTP headers in CLF format, i.e. a '-' * when no bytes where sent (rather than a '0'. * %...{FOOBAR}C: The contents of the HTTP cookie FOOBAR * %...{FOOBAR}e: The contents of the environment variable FOOBAR * %...f: filename * %...h: remote host * %...a: remote IP-address * %...A: local IP-address * %...{Foobar}i: The contents of Foobar: header line(s) in the request * sent to the client. * %...k: number of keepalive requests served over this connection * %...l: remote logname (from identd, if supplied) * %...{Foobar}n: The contents of note "Foobar" from another module. * %...{Foobar}o: The contents of Foobar: header line(s) in the reply. * %...p: the canonical port for the server * %...{format}p: the canonical port for the server, or the actual local * or remote port * %...P: the process ID of the child that serviced the request. * %...{format}P: the process ID or thread ID of the child/thread that * serviced the request * %...r: first line of request * %...s: status. For requests that got internally redirected, this * is status of the *original* request --- %...>s for the last. * %...t: time, in common log format time format * %...{format}t: The time, in the form given by format, which should * be in strftime(3) format. * %...T: the time taken to serve the request, in seconds. * %...{s}T: the time taken to serve the request, in seconds, same as %T. * %...{us}T: the time taken to serve the request, in micro seconds, same as %D. * %...{ms}T: the time taken to serve the request, in milliseconds. * %...D: the time taken to serve the request, in micro seconds. * %...u: remote user (from auth; may be bogus if return status (%s) is 401) * %...U: the URL path requested. * %...v: the configured name of the server (i.e. which virtual host?) * %...V: the server name according to the UseCanonicalName setting * %...m: the request method * %...H: the request protocol * %...q: the query string prepended by "?", or empty if no query string * %...X: Status of the connection. * 'X' = connection aborted before the response completed. * '+' = connection may be kept alive after the response is sent. * '-' = connection will be closed after the response is sent. * (This directive was %...c in late versions of Apache 1.3, but * this conflicted with the historical ssl %...{var}c syntax.) * %...L: Log-Id of the Request (or '-' if none) * %...{c}L: Log-Id of the Connection (or '-' if none) * * The '...' can be nothing at all (e.g. "%h %u %r %s %b"), or it can * indicate conditions for inclusion of the item (which will cause it * to be replaced with '-' if the condition is not met). Note that * there is no escaping performed on the strings from %r, %...i and * %...o; some with long memories may remember that I thought this was * a bad idea, once upon a time, and I'm still not comfortable with * it, but it is difficult to see how to "do the right thing" with all * of '%..i', unless we URL-escape everything and break with CLF. * * The forms of condition are a list of HTTP status codes, which may * or may not be preceded by '!'. Thus, '%400,501{User-agent}i' logs * User-agent: on 400 errors and 501 errors (Bad Request, Not * Implemented) only; '%!200,304,302{Referer}i' logs Referer: on all * requests which did *not* return some sort of normal status. * * The default LogFormat reproduces CLF; see below. * * The way this is supposed to work with virtual hosts is as follows: * a virtual host can have its own LogFormat, or its own TransferLog. * If it doesn't have its own LogFormat, it inherits from the main * server. If it doesn't have its own TransferLog, it writes to the * same descriptor (meaning the same process for "| ..."). * * --- rst */ #include "apr_strings.h" #include "apr_lib.h" #include "apr_hash.h" #include "apr_optional.h" #include "apr_anylock.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "mod_log_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" /* For REMOTE_NAME */ #include "http_log.h" #include "http_protocol.h" #include "util_time.h" #include "ap_mpm.h" #if APR_HAVE_UNISTD_H #include #endif #ifdef HAVE_LIMITS_H #include #endif #define DEFAULT_LOG_FORMAT "%h %l %u %t \"%r\" %>s %b" module AP_MODULE_DECLARE_DATA log_config_module; static int xfer_flags = (APR_WRITE | APR_APPEND | APR_CREATE | APR_LARGEFILE); static apr_fileperms_t xfer_perms = APR_OS_DEFAULT; static apr_hash_t *log_hash; static apr_status_t ap_default_log_writer(request_rec *r, void *handle, const char **strs, int *strl, int nelts, apr_size_t len); static apr_status_t ap_buffered_log_writer(request_rec *r, void *handle, const char **strs, int *strl, int nelts, apr_size_t len); static void *ap_default_log_writer_init(apr_pool_t *p, server_rec *s, const char* name); static void *ap_buffered_log_writer_init(apr_pool_t *p, server_rec *s, const char* name); static ap_log_writer_init *ap_log_set_writer_init(ap_log_writer_init *handle); static ap_log_writer *ap_log_set_writer(ap_log_writer *handle); static ap_log_writer *log_writer = ap_default_log_writer; static ap_log_writer_init *log_writer_init = ap_default_log_writer_init; static int buffered_logs = 0; /* default unbuffered */ static apr_array_header_t *all_buffered_logs = NULL; /* POSIX.1 defines PIPE_BUF as the maximum number of bytes that is * guaranteed to be atomic when writing a pipe. And PIPE_BUF >= 512 * is guaranteed. So we'll just guess 512 in the event the system * doesn't have this. Now, for file writes there is actually no limit, * the entire write is atomic. Whether all systems implement this * correctly is another question entirely ... so we'll just use PIPE_BUF * because it's probably a good guess as to what is implemented correctly * everywhere. */ #ifdef PIPE_BUF #define LOG_BUFSIZE PIPE_BUF #else #define LOG_BUFSIZE (512) #endif /* * multi_log_state is our per-(virtual)-server configuration. We store * an array of the logs we are going to use, each of type config_log_state. * If a default log format is given by LogFormat, store in default_format * (backward compat. with mod_log_config). We also store for each virtual * server a pointer to the logs specified for the main server, so that if this * vhost has no logs defined, we can use the main server's logs instead. * * So, for the main server, config_logs contains a list of the log files * and server_config_logs is empty. For a vhost, server_config_logs * points to the same array as config_logs in the main server, and * config_logs points to the array of logs defined inside this vhost, * which might be empty. */ typedef struct { const char *default_format_string; apr_array_header_t *default_format; apr_array_header_t *config_logs; apr_array_header_t *server_config_logs; apr_table_t *formats; } multi_log_state; /* * config_log_state holds the status of a single log file. fname might * be NULL, which means this module does no logging for this * request. format might be NULL, in which case the default_format * from the multi_log_state should be used, or if that is NULL as * well, use the CLF. * log_writer is NULL before the log file is opened and is * set to a opaque structure (usually a fd) after it is opened. */ typedef struct { apr_file_t *handle; apr_size_t outcnt; char outbuf[LOG_BUFSIZE]; apr_anylock_t mutex; } buffered_log; typedef struct { const char *fname; const char *format_string; apr_array_header_t *format; void *log_writer; char *condition_var; int inherit; ap_expr_info_t *condition_expr; /** place of definition or NULL if already checked */ const ap_directive_t *directive; } config_log_state; /* * log_request_state holds request specific log data that is not * part of the request_rec. */ typedef struct { apr_time_t request_end_time; } log_request_state; /* * Format items... * Note that many of these could have ap_sprintfs replaced with static buffers. */ typedef struct { ap_log_handler_fn_t *func; char *arg; int condition_sense; int want_orig; apr_array_header_t *conditions; } log_format_item; static char *pfmt(apr_pool_t *p, int i) { if (i <= 0) { return "-"; } else { return apr_itoa(p, i); } } static const char *constant_item(request_rec *dummy, char *stuff) { return stuff; } static const char *log_remote_host(request_rec *r, char *a) { const char *remote_host; if (a && !strcmp(a, "c")) { remote_host = ap_get_remote_host(r->connection, r->per_dir_config, REMOTE_NAME, NULL); } else { remote_host = ap_get_useragent_host(r, REMOTE_NAME, NULL); } return ap_escape_logitem(r->pool, remote_host); } static const char *log_remote_address(request_rec *r, char *a) { if (a && !strcmp(a, "c")) { return r->connection->client_ip; } else { return r->useragent_ip; } } static const char *log_local_address(request_rec *r, char *a) { return r->connection->local_ip; } static const char *log_remote_logname(request_rec *r, char *a) { return ap_escape_logitem(r->pool, ap_get_remote_logname(r)); } static const char *log_remote_user(request_rec *r, char *a) { char *rvalue = r->user; if (rvalue == NULL) { rvalue = "-"; } else if (strlen(rvalue) == 0) { rvalue = "\"\""; } else { rvalue = ap_escape_logitem(r->pool, rvalue); } return rvalue; } static const char *log_request_line(request_rec *r, char *a) { /* NOTE: If the original request contained a password, we * re-write the request line here to contain XXXXXX instead: * (note the truncation before the protocol string for HTTP/0.9 requests) * (note also that r->the_request contains the unmodified request) */ return ap_escape_logitem(r->pool, (r->parsed_uri.password) ? apr_pstrcat(r->pool, r->method, " ", apr_uri_unparse(r->pool, &r->parsed_uri, 0), r->assbackwards ? NULL : " ", r->protocol, NULL) : r->the_request); } static const char *log_request_file(request_rec *r, char *a) { return ap_escape_logitem(r->pool, r->filename); } static const char *log_request_uri(request_rec *r, char *a) { return ap_escape_logitem(r->pool, r->uri); } static const char *log_request_method(request_rec *r, char *a) { return ap_escape_logitem(r->pool, r->method); } static const char *log_log_id(request_rec *r, char *a) { if (a && !strcmp(a, "c")) { return r->connection->log_id ? r->connection->log_id : "-"; } else { return r->log_id ? r->log_id : "-"; } } static const char *log_request_protocol(request_rec *r, char *a) { return ap_escape_logitem(r->pool, r->protocol); } static const char *log_request_query(request_rec *r, char *a) { return (r->args) ? apr_pstrcat(r->pool, "?", ap_escape_logitem(r->pool, r->args), NULL) : ""; } static const char *log_status(request_rec *r, char *a) { return pfmt(r->pool, r->status); } static const char *log_handler(request_rec *r, char *a) { return ap_escape_logitem(r->pool, r->handler); } static const char *clf_log_bytes_sent(request_rec *r, char *a) { if (!r->sent_bodyct || !r->bytes_sent) { return "-"; } else { return apr_off_t_toa(r->pool, r->bytes_sent); } } static const char *log_bytes_sent(request_rec *r, char *a) { if (!r->sent_bodyct || !r->bytes_sent) { return "0"; } else { return apr_off_t_toa(r->pool, r->bytes_sent); } } static const char *log_header_in(request_rec *r, char *a) { return ap_escape_logitem(r->pool, apr_table_get(r->headers_in, a)); } static const char *log_trailer_in(request_rec *r, char *a) { return ap_escape_logitem(r->pool, apr_table_get(r->trailers_in, a)); } static APR_INLINE char *find_multiple_headers(apr_pool_t *pool, const apr_table_t *table, const char *key) { const apr_array_header_t *elts; const apr_table_entry_t *t_elt; const apr_table_entry_t *t_end; apr_size_t len; struct sle { struct sle *next; const char *value; apr_size_t len; } *result_list, *rp; elts = apr_table_elts(table); if (!elts->nelts) { return NULL; } t_elt = (const apr_table_entry_t *)elts->elts; t_end = t_elt + elts->nelts; len = 1; /* \0 */ result_list = rp = NULL; do { if (!strcasecmp(t_elt->key, key)) { if (!result_list) { result_list = rp = apr_palloc(pool, sizeof(*rp)); } else { rp = rp->next = apr_palloc(pool, sizeof(*rp)); len += 2; /* ", " */ } rp->next = NULL; rp->value = t_elt->val; rp->len = strlen(rp->value); len += rp->len; } ++t_elt; } while (t_elt < t_end); if (result_list) { char *result = apr_palloc(pool, len); char *cp = result; rp = result_list; while (rp) { if (rp != result_list) { *cp++ = ','; *cp++ = ' '; } memcpy(cp, rp->value, rp->len); cp += rp->len; rp = rp->next; } *cp = '\0'; return result; } return NULL; } static const char *log_header_out(request_rec *r, char *a) { const char *cp = NULL; if (!strcasecmp(a, "Content-type") && r->content_type) { cp = ap_field_noparam(r->pool, r->content_type); } else if (!strcasecmp(a, "Set-Cookie")) { cp = find_multiple_headers(r->pool, r->headers_out, a); } else { cp = apr_table_get(r->headers_out, a); } return ap_escape_logitem(r->pool, cp); } static const char *log_trailer_out(request_rec *r, char *a) { return ap_escape_logitem(r->pool, apr_table_get(r->trailers_out, a)); } static const char *log_note(request_rec *r, char *a) { return ap_escape_logitem(r->pool, apr_table_get(r->notes, a)); } static const char *log_env_var(request_rec *r, char *a) { return ap_escape_logitem(r->pool, apr_table_get(r->subprocess_env, a)); } static const char *log_cookie(request_rec *r, char *a) { const char *cookies_entry; /* * This supports Netscape version 0 cookies while being tolerant to * some properties of RFC2109/2965 version 1 cookies: * - case-insensitive match of cookie names * - white space between the tokens * It does not support the following version 1 features: * - quoted strings as cookie values * - commas to separate cookies */ if ((cookies_entry = apr_table_get(r->headers_in, "Cookie"))) { char *cookie, *last1, *last2; char *cookies = apr_pstrdup(r->pool, cookies_entry); while ((cookie = apr_strtok(cookies, ";", &last1))) { char *name = apr_strtok(cookie, "=", &last2); /* last2 points to the next char following an '=' delim, or the trailing NUL char of the string */ char *value = last2; if (name && *name && value && *value) { char *last = value - 2; /* Move past leading WS */ name += strspn(name, " \t"); while (last >= name && apr_isspace(*last)) { *last = '\0'; --last; } if (!strcasecmp(name, a)) { /* last1 points to the next char following the ';' delim, or the trailing NUL char of the string */ last = last1 - (*last1 ? 2 : 1); /* Move past leading WS */ value += strspn(value, " \t"); while (last >= value && apr_isspace(*last)) { *last = '\0'; --last; } return ap_escape_logitem(r->pool, value); } } /* Iterate the remaining tokens using apr_strtok(NULL, ...) */ cookies = NULL; } } return NULL; } static const char *log_request_time_custom(request_rec *r, char *a, apr_time_exp_t *xt) { apr_size_t retcode; char tstr[MAX_STRING_LEN]; apr_strftime(tstr, &retcode, sizeof(tstr), a, xt); return apr_pstrdup(r->pool, tstr); } #define DEFAULT_REQUEST_TIME_SIZE 32 typedef struct { unsigned t; char timestr[DEFAULT_REQUEST_TIME_SIZE]; unsigned t_validate; } cached_request_time; #define TIME_FMT_CUSTOM 0 #define TIME_FMT_CLF 1 #define TIME_FMT_ABS_SEC 2 #define TIME_FMT_ABS_MSEC 3 #define TIME_FMT_ABS_USEC 4 #define TIME_FMT_ABS_MSEC_FRAC 5 #define TIME_FMT_ABS_USEC_FRAC 6 #define TIME_CACHE_SIZE 4 #define TIME_CACHE_MASK 3 static cached_request_time request_time_cache[TIME_CACHE_SIZE]; static apr_time_t get_request_end_time(request_rec *r) { log_request_state *state = (log_request_state *)ap_get_module_config(r->request_config, &log_config_module); if (!state) { state = apr_pcalloc(r->pool, sizeof(log_request_state)); ap_set_module_config(r->request_config, &log_config_module, state); } if (state->request_end_time == 0) { state->request_end_time = apr_time_now(); } return state->request_end_time; } static const char *log_request_time(request_rec *r, char *a) { apr_time_exp_t xt; apr_time_t request_time = r->request_time; int fmt_type = TIME_FMT_CUSTOM; char *fmt = a; if (fmt && *fmt) { if (!strncmp(fmt, "begin", 5)) { fmt += 5; if (!*fmt) { fmt_type = TIME_FMT_CLF; } else if (*fmt == ':') { fmt++; a = fmt; } } else if (!strncmp(fmt, "end", 3)) { fmt += 3; if (!*fmt) { request_time = get_request_end_time(r); fmt_type = TIME_FMT_CLF; } else if (*fmt == ':') { fmt++; a = fmt; request_time = get_request_end_time(r); } } if (!strncmp(fmt, "msec", 4)) { fmt += 4; if (!*fmt) { fmt_type = TIME_FMT_ABS_MSEC; } else if (!strcmp(fmt, "_frac")) { fmt_type = TIME_FMT_ABS_MSEC_FRAC; } } else if (!strncmp(fmt, "usec", 4)) { fmt += 4; if (!*fmt) { fmt_type = TIME_FMT_ABS_USEC; } else if (!strcmp(fmt, "_frac")) { fmt_type = TIME_FMT_ABS_USEC_FRAC; } } else if (!strcmp(fmt, "sec")) { fmt_type = TIME_FMT_ABS_SEC; } else if (!*fmt) { fmt_type = TIME_FMT_CLF; } } else { fmt_type = TIME_FMT_CLF; } if (fmt_type >= TIME_FMT_ABS_SEC) { /* Absolute (micro-/milli-)second time * or msec/usec fraction */ char* buf = apr_palloc(r->pool, 20); switch (fmt_type) { case TIME_FMT_ABS_SEC: apr_snprintf(buf, 20, "%" APR_TIME_T_FMT, apr_time_sec(request_time)); break; case TIME_FMT_ABS_MSEC: apr_snprintf(buf, 20, "%" APR_TIME_T_FMT, apr_time_as_msec(request_time)); break; case TIME_FMT_ABS_USEC: apr_snprintf(buf, 20, "%" APR_TIME_T_FMT, request_time); break; case TIME_FMT_ABS_MSEC_FRAC: apr_snprintf(buf, 20, "%03" APR_TIME_T_FMT, apr_time_msec(request_time)); break; case TIME_FMT_ABS_USEC_FRAC: apr_snprintf(buf, 20, "%06" APR_TIME_T_FMT, apr_time_usec(request_time)); break; default: return "-"; } return buf; } else if (fmt_type == TIME_FMT_CUSTOM) { /* Custom format */ /* The custom time formatting uses a very large temp buffer * on the stack. To avoid using so much stack space in the * common case where we're not using a custom format, the code * for the custom format in a separate function. (That's why * log_request_time_custom is not inlined right here.) */ ap_explode_recent_localtime(&xt, request_time); return log_request_time_custom(r, a, &xt); } else { /* CLF format */ /* This code uses the same technique as ap_explode_recent_localtime(): * optimistic caching with logic to detect and correct race conditions. * See the comments in server/util_time.c for more information. */ cached_request_time* cached_time = apr_palloc(r->pool, sizeof(*cached_time)); unsigned t_seconds = (unsigned)apr_time_sec(request_time); unsigned i = t_seconds & TIME_CACHE_MASK; *cached_time = request_time_cache[i]; if ((t_seconds != cached_time->t) || (t_seconds != cached_time->t_validate)) { /* Invalid or old snapshot, so compute the proper time string * and store it in the cache */ char sign; int timz; ap_explode_recent_localtime(&xt, request_time); timz = xt.tm_gmtoff; if (timz < 0) { timz = -timz; sign = '-'; } else { sign = '+'; } cached_time->t = t_seconds; apr_snprintf(cached_time->timestr, DEFAULT_REQUEST_TIME_SIZE, "[%02d/%s/%d:%02d:%02d:%02d %c%.2d%.2d]", xt.tm_mday, apr_month_snames[xt.tm_mon], xt.tm_year+1900, xt.tm_hour, xt.tm_min, xt.tm_sec, sign, timz / (60*60), (timz % (60*60)) / 60); cached_time->t_validate = t_seconds; request_time_cache[i] = *cached_time; } return cached_time->timestr; } } static const char *log_request_duration_microseconds(request_rec *r, char *a) { return apr_psprintf(r->pool, "%" APR_TIME_T_FMT, (get_request_end_time(r) - r->request_time)); } static const char *log_request_duration_scaled(request_rec *r, char *a) { apr_time_t duration = get_request_end_time(r) - r->request_time; if (*a == '\0' || !strcasecmp(a, "s")) { duration = apr_time_sec(duration); } else if (!strcasecmp(a, "ms")) { duration = apr_time_as_msec(duration); } else if (!strcasecmp(a, "us")) { } else { /* bogus format */ return a; } return apr_psprintf(r->pool, "%" APR_TIME_T_FMT, duration); } /* These next two routines use the canonical name:port so that log * parsers don't need to duplicate all the vhost parsing crud. */ static const char *log_virtual_host(request_rec *r, char *a) { return ap_escape_logitem(r->pool, r->server->server_hostname); } static const char *log_server_port(request_rec *r, char *a) { apr_port_t port; if (*a == '\0' || !strcasecmp(a, "canonical")) { port = r->server->port ? r->server->port : ap_default_port(r); } else if (!strcasecmp(a, "remote")) { port = r->useragent_addr->port; } else if (!strcasecmp(a, "local")) { port = r->connection->local_addr->port; } else { /* bogus format */ return a; } return apr_itoa(r->pool, (int)port); } /* This respects the setting of UseCanonicalName so that * the dynamic mass virtual hosting trick works better. */ static const char *log_server_name(request_rec *r, char *a) { return ap_escape_logitem(r->pool, ap_get_server_name(r)); } static const char *log_pid_tid(request_rec *r, char *a) { if (*a == '\0' || !strcasecmp(a, "pid")) { return ap_append_pid(r->pool, "", ""); } else if (!strcasecmp(a, "tid") || !strcasecmp(a, "hextid")) { #if APR_HAS_THREADS apr_os_thread_t tid = apr_os_thread_current(); #else int tid = 0; /* APR will format "0" anyway but an arg is needed */ #endif return apr_psprintf(r->pool, #if APR_MAJOR_VERSION > 1 || (APR_MAJOR_VERSION == 1 && APR_MINOR_VERSION >= 2) /* APR can format a thread id in hex */ *a == 'h' ? "%pt" : "%pT", #else /* APR is missing the feature, so always use decimal */ "%pT", #endif &tid); } /* bogus format */ return a; } static const char *log_connection_status(request_rec *r, char *a) { if (r->connection->aborted) return "X"; if (r->connection->keepalive == AP_CONN_KEEPALIVE && (!r->server->keep_alive_max || (r->server->keep_alive_max - r->connection->keepalives) > 0)) { return "+"; } return "-"; } static const char *log_requests_on_connection(request_rec *r, char *a) { int num = r->connection->keepalives ? r->connection->keepalives - 1 : 0; return apr_itoa(r->pool, num); } /***************************************************************** * * Parsing the log format string */ static char *parse_log_misc_string(apr_pool_t *p, log_format_item *it, const char **sa) { const char *s; char *d; it->func = constant_item; it->conditions = NULL; s = *sa; while (*s && *s != '%') { s++; } /* * This might allocate a few chars extra if there's a backslash * escape in the format string. */ it->arg = apr_palloc(p, s - *sa + 1); d = it->arg; s = *sa; while (*s && *s != '%') { if (*s != '\\') { *d++ = *s++; } else { s++; switch (*s) { case '\\': *d++ = '\\'; s++; break; case 'r': *d++ = '\r'; s++; break; case 'n': *d++ = '\n'; s++; break; case 't': *d++ = '\t'; s++; break; default: /* copy verbatim */ *d++ = '\\'; /* * Allow the loop to deal with this *s in the normal * fashion so that it handles end of string etc. * properly. */ break; } } } *d = '\0'; *sa = s; return NULL; } static char *parse_log_item(apr_pool_t *p, log_format_item *it, const char **sa) { const char *s = *sa; ap_log_handler *handler = NULL; if (*s != '%') { return parse_log_misc_string(p, it, sa); } ++s; it->condition_sense = 0; it->conditions = NULL; if (*s == '%') { it->arg = "%"; it->func = constant_item; *sa = ++s; return NULL; } it->want_orig = -1; it->arg = ""; /* For safety's sake... */ while (*s) { int i; switch (*s) { case '!': ++s; it->condition_sense = !it->condition_sense; break; case '<': ++s; it->want_orig = 1; break; case '>': ++s; it->want_orig = 0; break; case ',': ++s; break; case '{': ++s; it->arg = ap_getword(p, &s, '}'); break; case '0': case '1': case '2': case '3': case '4': case '5': case '6': case '7': case '8': case '9': i = *s - '0'; while (apr_isdigit(*++s)) { i = i * 10 + (*s) - '0'; } if (!it->conditions) { it->conditions = apr_array_make(p, 4, sizeof(int)); } *(int *) apr_array_push(it->conditions) = i; break; default: /* check for '^' + two character format first */ if (*s == '^' && *(s+1) && *(s+2)) { handler = (ap_log_handler *)apr_hash_get(log_hash, s, 3); if (handler) { s += 3; } } if (!handler) { handler = (ap_log_handler *)apr_hash_get(log_hash, s++, 1); } if (!handler) { char dummy[2]; dummy[0] = s[-1]; dummy[1] = '\0'; return apr_pstrcat(p, "Unrecognized LogFormat directive %", dummy, NULL); } it->func = handler->func; if (it->want_orig == -1) { it->want_orig = handler->want_orig_default; } *sa = s; return NULL; } } return "Ran off end of LogFormat parsing args to some directive"; } static apr_array_header_t *parse_log_string(apr_pool_t *p, const char *s, const char **err) { apr_array_header_t *a = apr_array_make(p, 30, sizeof(log_format_item)); char *res; while (*s) { if ((res = parse_log_item(p, (log_format_item *) apr_array_push(a), &s))) { *err = res; return NULL; } } s = APR_EOL_STR; parse_log_item(p, (log_format_item *) apr_array_push(a), &s); return a; } /***************************************************************** * * Actually logging. */ static const char *process_item(request_rec *r, request_rec *orig, log_format_item *item) { const char *cp; /* First, see if we need to process this thing at all... */ if (item->conditions && item->conditions->nelts != 0) { int i; int *conds = (int *) item->conditions->elts; int in_list = 0; for (i = 0; i < item->conditions->nelts; ++i) { if (r->status == conds[i]) { in_list = 1; break; } } if ((item->condition_sense && in_list) || (!item->condition_sense && !in_list)) { return "-"; } } /* We do. Do it... */ cp = (*item->func) (item->want_orig ? orig : r, item->arg); return cp ? cp : "-"; } static void flush_log(buffered_log *buf) { if (buf->outcnt && buf->handle != NULL) { apr_file_write(buf->handle, buf->outbuf, &buf->outcnt); buf->outcnt = 0; } } static int config_log_transaction(request_rec *r, config_log_state *cls, apr_array_header_t *default_format) { log_format_item *items; const char **strs; int *strl; request_rec *orig; int i; apr_size_t len = 0; apr_array_header_t *format; char *envar; apr_status_t rv; if (cls->fname == NULL) { return DECLINED; } /* * See if we've got any conditional envariable-controlled logging decisions * to make. */ if (cls->condition_var != NULL) { envar = cls->condition_var; if (*envar != '!') { if (apr_table_get(r->subprocess_env, envar) == NULL) { return DECLINED; } } else { if (apr_table_get(r->subprocess_env, &envar[1]) != NULL) { return DECLINED; } } } else if (cls->condition_expr != NULL) { const char *err; int rc = ap_expr_exec(r, cls->condition_expr, &err); if (rc < 0) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(00644) "Error evaluating log condition: %s", err); if (rc <= 0) return DECLINED; } format = cls->format ? cls->format : default_format; strs = apr_palloc(r->pool, sizeof(char *) * (format->nelts)); strl = apr_palloc(r->pool, sizeof(int) * (format->nelts)); items = (log_format_item *) format->elts; orig = r; while (orig->prev) { orig = orig->prev; } while (r->next) { r = r->next; } for (i = 0; i < format->nelts; ++i) { strs[i] = process_item(r, orig, &items[i]); } for (i = 0; i < format->nelts; ++i) { len += strl[i] = strlen(strs[i]); } if (!log_writer) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00645) "log writer isn't correctly setup"); return HTTP_INTERNAL_SERVER_ERROR; } rv = log_writer(r, cls->log_writer, strs, strl, format->nelts, len); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, rv, r, APLOGNO(00646) "Error writing to %s", cls->fname); } return OK; } static int multi_log_transaction(request_rec *r) { multi_log_state *mls = ap_get_module_config(r->server->module_config, &log_config_module); config_log_state *clsarray; int i; /* * Initialize per request state */ log_request_state *state = apr_pcalloc(r->pool, sizeof(log_request_state)); ap_set_module_config(r->request_config, &log_config_module, state); /* * Log this transaction.. */ if (mls->config_logs->nelts) { clsarray = (config_log_state *) mls->config_logs->elts; for (i = 0; i < mls->config_logs->nelts; ++i) { config_log_state *cls = &clsarray[i]; config_log_transaction(r, cls, mls->default_format); } } if (mls->server_config_logs) { clsarray = (config_log_state *) mls->server_config_logs->elts; for (i = 0; i < mls->server_config_logs->nelts; ++i) { config_log_state *cls = &clsarray[i]; if (cls->inherit || !mls->config_logs->nelts) { config_log_transaction(r, cls, mls->default_format); } } } return OK; } /***************************************************************** * * Module glue... */ static void *make_config_log_state(apr_pool_t *p, server_rec *s) { multi_log_state *mls; mls = (multi_log_state *) apr_palloc(p, sizeof(multi_log_state)); mls->config_logs = apr_array_make(p, 1, sizeof(config_log_state)); mls->default_format_string = NULL; mls->default_format = NULL; mls->server_config_logs = NULL; mls->formats = apr_table_make(p, 4); apr_table_setn(mls->formats, "CLF", DEFAULT_LOG_FORMAT); return mls; } /* * Use the merger to simply add a pointer from the vhost log state * to the log of logs specified for the non-vhost configuration. Make sure * vhosts inherit any globally-defined format names. */ static void *merge_config_log_state(apr_pool_t *p, void *basev, void *addv) { multi_log_state *base = (multi_log_state *) basev; multi_log_state *add = (multi_log_state *) addv; add->server_config_logs = base->config_logs; if (!add->default_format) { add->default_format_string = base->default_format_string; add->default_format = base->default_format; } add->formats = apr_table_overlay(p, base->formats, add->formats); return add; } /* * Set the default logfile format, or define a nickname for a format string. */ static const char *log_format(cmd_parms *cmd, void *dummy, const char *fmt, const char *name) { const char *err_string = NULL; multi_log_state *mls = ap_get_module_config(cmd->server->module_config, &log_config_module); /* * If we were given two arguments, the second is a name to be given to the * format. This syntax just defines the nickname - it doesn't actually * make the format the default. */ if (name != NULL) { parse_log_string(cmd->pool, fmt, &err_string); if (err_string == NULL) { apr_table_setn(mls->formats, name, fmt); } } else { mls->default_format_string = fmt; mls->default_format = parse_log_string(cmd->pool, fmt, &err_string); } return err_string; } static const char *add_custom_log(cmd_parms *cmd, void *dummy, const char *fn, const char *fmt, const char *envclause) { const char *err_string = NULL; multi_log_state *mls = ap_get_module_config(cmd->server->module_config, &log_config_module); config_log_state *cls; cls = (config_log_state *) apr_array_push(mls->config_logs); cls->condition_var = NULL; cls->condition_expr = NULL; if (envclause != NULL) { if (strncasecmp(envclause, "env=", 4) == 0) { if ((envclause[4] == '\0') || ((envclause[4] == '!') && (envclause[5] == '\0'))) { return "missing environment variable name"; } cls->condition_var = apr_pstrdup(cmd->pool, &envclause[4]); } else if (strncasecmp(envclause, "expr=", 5) == 0) { const char *err; if ((envclause[5] == '\0')) return "missing condition"; cls->condition_expr = ap_expr_parse_cmd(cmd, &envclause[5], AP_EXPR_FLAG_DONT_VARY, &err, NULL); if (err) return err; } else { return "error in condition clause"; } } cls->fname = fn; cls->format_string = fmt; cls->directive = cmd->directive; if (fmt == NULL) { cls->format = NULL; } else { cls->format = parse_log_string(cmd->pool, fmt, &err_string); } cls->log_writer = NULL; return err_string; } static const char *add_global_log(cmd_parms *cmd, void *dummy, const char *fn, const char *fmt, const char *envclause) { multi_log_state *mls = ap_get_module_config(cmd->server->module_config, &log_config_module); config_log_state *clsarray; config_log_state *cls; const char *ret; const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err) { return err; } /* Add a custom log through the normal channel */ ret = add_custom_log(cmd, dummy, fn, fmt, envclause); /* Set the inherit flag unless there was some error */ if (ret == NULL) { clsarray = (config_log_state*)mls->config_logs->elts; cls = &clsarray[mls->config_logs->nelts-1]; cls->inherit = 1; } return ret; } static const char *set_transfer_log(cmd_parms *cmd, void *dummy, const char *fn) { return add_custom_log(cmd, dummy, fn, NULL, NULL); } static const char *set_buffered_logs_on(cmd_parms *parms, void *dummy, int flag) { buffered_logs = flag; if (buffered_logs) { ap_log_set_writer_init(ap_buffered_log_writer_init); ap_log_set_writer(ap_buffered_log_writer); } else { ap_log_set_writer_init(ap_default_log_writer_init); ap_log_set_writer(ap_default_log_writer); } return NULL; } static const command_rec config_log_cmds[] = { AP_INIT_TAKE23("CustomLog", add_custom_log, NULL, RSRC_CONF, "a file name, a custom log format string or format name, " "and an optional \"env=\" or \"expr=\" clause (see docs)"), AP_INIT_TAKE23("GlobalLog", add_global_log, NULL, RSRC_CONF, "Same as CustomLog, but forces virtualhosts to inherit the log"), AP_INIT_TAKE1("TransferLog", set_transfer_log, NULL, RSRC_CONF, "the filename of the access log"), AP_INIT_TAKE12("LogFormat", log_format, NULL, RSRC_CONF, "a log format string (see docs) and an optional format name"), AP_INIT_FLAG("BufferedLogs", set_buffered_logs_on, NULL, RSRC_CONF, "Enable Buffered Logging (experimental)"), {NULL} }; static config_log_state *open_config_log(server_rec *s, apr_pool_t *p, config_log_state *cls, apr_array_header_t *default_format) { if (cls->log_writer != NULL) { return cls; /* virtual config shared w/main server */ } if (cls->fname == NULL) { return cls; /* Leave it NULL to decline. */ } cls->log_writer = log_writer_init(p, s, cls->fname); if (cls->log_writer == NULL) return NULL; return cls; } static int open_multi_logs(server_rec *s, apr_pool_t *p) { int i; multi_log_state *mls = ap_get_module_config(s->module_config, &log_config_module); config_log_state *clsarray; const char *dummy; const char *format; if (mls->default_format_string) { format = apr_table_get(mls->formats, mls->default_format_string); if (format) { mls->default_format = parse_log_string(p, format, &dummy); } } if (!mls->default_format) { mls->default_format = parse_log_string(p, DEFAULT_LOG_FORMAT, &dummy); } if (mls->config_logs->nelts) { clsarray = (config_log_state *) mls->config_logs->elts; for (i = 0; i < mls->config_logs->nelts; ++i) { config_log_state *cls = &clsarray[i]; if (cls->format_string) { format = apr_table_get(mls->formats, cls->format_string); if (format) { cls->format = parse_log_string(p, format, &dummy); } } if (!open_config_log(s, p, cls, mls->default_format)) { /* Failure already logged by open_config_log */ return DONE; } } } else if (mls->server_config_logs) { clsarray = (config_log_state *) mls->server_config_logs->elts; for (i = 0; i < mls->server_config_logs->nelts; ++i) { config_log_state *cls = &clsarray[i]; if (cls->format_string) { format = apr_table_get(mls->formats, cls->format_string); if (format) { cls->format = parse_log_string(p, format, &dummy); } } if (!open_config_log(s, p, cls, mls->default_format)) { /* Failure already logged by open_config_log */ return DONE; } } } return OK; } static apr_status_t flush_all_logs(void *data) { server_rec *s = data; multi_log_state *mls; apr_array_header_t *log_list; config_log_state *clsarray; buffered_log *buf; int i; if (!buffered_logs) return APR_SUCCESS; for (; s; s = s->next) { mls = ap_get_module_config(s->module_config, &log_config_module); log_list = NULL; if (mls->config_logs->nelts) { log_list = mls->config_logs; } else if (mls->server_config_logs) { log_list = mls->server_config_logs; } if (log_list) { clsarray = (config_log_state *) log_list->elts; for (i = 0; i < log_list->nelts; ++i) { buf = clsarray[i].log_writer; flush_log(buf); } } } return APR_SUCCESS; } static int init_config_log(apr_pool_t *pc, apr_pool_t *p, apr_pool_t *pt, server_rec *s) { int res; /* First init the buffered logs array, which is needed when opening the logs. */ if (buffered_logs) { all_buffered_logs = apr_array_make(p, 5, sizeof(buffered_log *)); } /* Next, do "physical" server, which gets default log fd and format * for the virtual servers, if they don't override... */ res = open_multi_logs(s, p); /* Then, virtual servers */ for (s = s->next; (res == OK) && s; s = s->next) { res = open_multi_logs(s, p); } return res; } static void init_child(apr_pool_t *p, server_rec *s) { int mpm_threads; ap_mpm_query(AP_MPMQ_MAX_THREADS, &mpm_threads); /* Now register the last buffer flush with the cleanup engine */ if (buffered_logs) { int i; buffered_log **array = (buffered_log **)all_buffered_logs->elts; apr_pool_cleanup_register(p, s, flush_all_logs, flush_all_logs); for (i = 0; i < all_buffered_logs->nelts; i++) { buffered_log *this = array[i]; #if APR_HAS_THREADS if (mpm_threads > 1) { apr_status_t rv; this->mutex.type = apr_anylock_threadmutex; rv = apr_thread_mutex_create(&this->mutex.lock.tm, APR_THREAD_MUTEX_DEFAULT, p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(00647) "could not initialize buffered log mutex, " "transfer log may become corrupted"); this->mutex.type = apr_anylock_none; } } else #endif { this->mutex.type = apr_anylock_none; } } } } static void ap_register_log_handler(apr_pool_t *p, char *tag, ap_log_handler_fn_t *handler, int def) { ap_log_handler *log_struct = apr_palloc(p, sizeof(*log_struct)); log_struct->func = handler; log_struct->want_orig_default = def; apr_hash_set(log_hash, tag, strlen(tag), (const void *)log_struct); } static ap_log_writer_init *ap_log_set_writer_init(ap_log_writer_init *handle) { ap_log_writer_init *old = log_writer_init; log_writer_init = handle; return old; } static ap_log_writer *ap_log_set_writer(ap_log_writer *handle) { ap_log_writer *old = log_writer; log_writer = handle; return old; } static apr_status_t ap_default_log_writer( request_rec *r, void *handle, const char **strs, int *strl, int nelts, apr_size_t len) { char *str; char *s; int i; apr_status_t rv; /* * We do this memcpy dance because write() is atomic for len < PIPE_BUF, * while writev() need not be. */ str = apr_palloc(r->pool, len + 1); for (i = 0, s = str; i < nelts; ++i) { memcpy(s, strs[i], strl[i]); s += strl[i]; } rv = apr_file_write((apr_file_t*)handle, str, &len); return rv; } static void *ap_default_log_writer_init(apr_pool_t *p, server_rec *s, const char* name) { if (*name == '|') { piped_log *pl; pl = ap_open_piped_log(p, name + 1); if (pl == NULL) { return NULL; } return ap_piped_log_write_fd(pl); } else { const char *fname = ap_server_root_relative(p, name); apr_file_t *fd; apr_status_t rv; if (!fname) { ap_log_error(APLOG_MARK, APLOG_ERR, APR_EBADPATH, s, APLOGNO(00648) "invalid transfer log path %s.", name); return NULL; } rv = apr_file_open(&fd, fname, xfer_flags, xfer_perms, p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00649) "could not open transfer log file %s.", fname); return NULL; } return fd; } } static void *ap_buffered_log_writer_init(apr_pool_t *p, server_rec *s, const char* name) { buffered_log *b; b = apr_pcalloc(p, sizeof(buffered_log)); b->handle = ap_default_log_writer_init(p, s, name); if (b->handle) { *(buffered_log **)apr_array_push(all_buffered_logs) = b; return b; } else return NULL; } static apr_status_t ap_buffered_log_writer(request_rec *r, void *handle, const char **strs, int *strl, int nelts, apr_size_t len) { char *str; char *s; int i; apr_status_t rv; buffered_log *buf = (buffered_log*)handle; if ((rv = APR_ANYLOCK_LOCK(&buf->mutex)) != APR_SUCCESS) { return rv; } if (len + buf->outcnt > LOG_BUFSIZE) { flush_log(buf); } if (len >= LOG_BUFSIZE) { apr_size_t w; /* * We do this memcpy dance because write() is atomic for * len < PIPE_BUF, while writev() need not be. */ str = apr_palloc(r->pool, len + 1); for (i = 0, s = str; i < nelts; ++i) { memcpy(s, strs[i], strl[i]); s += strl[i]; } w = len; rv = apr_file_write(buf->handle, str, &w); } else { for (i = 0, s = &buf->outbuf[buf->outcnt]; i < nelts; ++i) { memcpy(s, strs[i], strl[i]); s += strl[i]; } buf->outcnt += len; rv = APR_SUCCESS; } APR_ANYLOCK_UNLOCK(&buf->mutex); return rv; } static int log_pre_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp) { static APR_OPTIONAL_FN_TYPE(ap_register_log_handler) *log_pfn_register; log_pfn_register = APR_RETRIEVE_OPTIONAL_FN(ap_register_log_handler); if (log_pfn_register) { log_pfn_register(p, "h", log_remote_host, 0); log_pfn_register(p, "a", log_remote_address, 0 ); log_pfn_register(p, "A", log_local_address, 0 ); log_pfn_register(p, "l", log_remote_logname, 0); log_pfn_register(p, "u", log_remote_user, 0); log_pfn_register(p, "t", log_request_time, 0); log_pfn_register(p, "f", log_request_file, 0); log_pfn_register(p, "b", clf_log_bytes_sent, 0); log_pfn_register(p, "B", log_bytes_sent, 0); log_pfn_register(p, "i", log_header_in, 0); log_pfn_register(p, "o", log_header_out, 0); log_pfn_register(p, "n", log_note, 0); log_pfn_register(p, "L", log_log_id, 1); log_pfn_register(p, "e", log_env_var, 0); log_pfn_register(p, "V", log_server_name, 0); log_pfn_register(p, "v", log_virtual_host, 0); log_pfn_register(p, "p", log_server_port, 0); log_pfn_register(p, "P", log_pid_tid, 0); log_pfn_register(p, "H", log_request_protocol, 0); log_pfn_register(p, "m", log_request_method, 0); log_pfn_register(p, "q", log_request_query, 0); log_pfn_register(p, "X", log_connection_status, 0); log_pfn_register(p, "C", log_cookie, 0); log_pfn_register(p, "k", log_requests_on_connection, 0); log_pfn_register(p, "r", log_request_line, 1); log_pfn_register(p, "D", log_request_duration_microseconds, 1); log_pfn_register(p, "T", log_request_duration_scaled, 1); log_pfn_register(p, "U", log_request_uri, 1); log_pfn_register(p, "s", log_status, 1); log_pfn_register(p, "R", log_handler, 1); log_pfn_register(p, "^ti", log_trailer_in, 0); log_pfn_register(p, "^to", log_trailer_out, 0); } /* reset to default conditions */ ap_log_set_writer_init(ap_default_log_writer_init); ap_log_set_writer(ap_default_log_writer); buffered_logs = 0; return OK; } static int check_log_dir(apr_pool_t *p, server_rec *s, config_log_state *cls) { if (!cls->fname || cls->fname[0] == '|' || !cls->directive) { return OK; } else { char *abs = ap_server_root_relative(p, cls->fname); char *dir = ap_make_dirstr_parent(p, abs); apr_finfo_t finfo; const ap_directive_t *directive = cls->directive; apr_status_t rv = apr_stat(&finfo, dir, APR_FINFO_TYPE, p); cls->directive = NULL; /* Don't check this config_log_state again */ if (rv == APR_SUCCESS && finfo.filetype != APR_DIR) rv = APR_ENOTDIR; if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_STARTUP|APLOG_EMERG, rv, s, APLOGNO(02297) "Cannot access directory '%s' for log file '%s' " "defined at %s:%d", dir, cls->fname, directive->filename, directive->line_num); return !OK; } } return OK; } static int log_check_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { int rv = OK; while (s) { multi_log_state *mls = ap_get_module_config(s->module_config, &log_config_module); /* * We don't need to check mls->server_config_logs because it just * points to the parent server's mls->config_logs. */ apr_array_header_t *log_list = mls->config_logs; config_log_state *clsarray = (config_log_state *) log_list->elts; int i; for (i = 0; i < log_list->nelts; ++i) { if (check_log_dir(ptemp, s, &clsarray[i]) != OK) rv = !OK; } s = s->next; } return rv; } static void register_hooks(apr_pool_t *p) { ap_hook_pre_config(log_pre_config,NULL,NULL,APR_HOOK_REALLY_FIRST); ap_hook_check_config(log_check_config,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_child_init(init_child,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_open_logs(init_config_log,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_log_transaction(multi_log_transaction,NULL,NULL,APR_HOOK_MIDDLE); /* Init log_hash before we register the optional function. It is * possible for the optional function, ap_register_log_handler, * to be called before any other mod_log_config hooks are called. * As a policy, we should init everything required by an optional function * before calling APR_REGISTER_OPTIONAL_FN. */ log_hash = apr_hash_make(p); APR_REGISTER_OPTIONAL_FN(ap_register_log_handler); APR_REGISTER_OPTIONAL_FN(ap_log_set_writer_init); APR_REGISTER_OPTIONAL_FN(ap_log_set_writer); } AP_DECLARE_MODULE(log_config) = { STANDARD20_MODULE_STUFF, NULL, /* create per-dir config */ NULL, /* merge per-dir config */ make_config_log_state, /* server config */ merge_config_log_state, /* merge server config */ config_log_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/loggers/mod_log_config.exp0000644000000000000500000000002210150161574020023 0ustar rootsrclog_config_module httpd-2.4.41/modules/loggers/mod_log_config.mak0000644000000000000500000002410112701473373020012 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_log_config.dsp !IF "$(CFG)" == "" CFG=mod_log_config - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_log_config - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_log_config - Win32 Release" && "$(CFG)" != "mod_log_config - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_log_config.mak" CFG="mod_log_config - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_log_config - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_log_config - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_log_config - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_log_config.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_log_config.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_log_config.obj" -@erase "$(INTDIR)\mod_log_config.res" -@erase "$(INTDIR)\mod_log_config_src.idb" -@erase "$(INTDIR)\mod_log_config_src.pdb" -@erase "$(OUTDIR)\mod_log_config.exp" -@erase "$(OUTDIR)\mod_log_config.lib" -@erase "$(OUTDIR)\mod_log_config.pdb" -@erase "$(OUTDIR)\mod_log_config.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_log_config_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_log_config.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_log_config.so" /d LONG_NAME="log_config_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_log_config.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_log_config.pdb" /debug /out:"$(OUTDIR)\mod_log_config.so" /implib:"$(OUTDIR)\mod_log_config.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_log_config.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_log_config.obj" \ "$(INTDIR)\mod_log_config.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_log_config.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_log_config.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_log_config.so" if exist .\Release\mod_log_config.so.manifest mt.exe -manifest .\Release\mod_log_config.so.manifest -outputresource:.\Release\mod_log_config.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_log_config - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_log_config.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_log_config.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_log_config.obj" -@erase "$(INTDIR)\mod_log_config.res" -@erase "$(INTDIR)\mod_log_config_src.idb" -@erase "$(INTDIR)\mod_log_config_src.pdb" -@erase "$(OUTDIR)\mod_log_config.exp" -@erase "$(OUTDIR)\mod_log_config.lib" -@erase "$(OUTDIR)\mod_log_config.pdb" -@erase "$(OUTDIR)\mod_log_config.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_log_config_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_log_config.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_log_config.so" /d LONG_NAME="log_config_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_log_config.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_log_config.pdb" /debug /out:"$(OUTDIR)\mod_log_config.so" /implib:"$(OUTDIR)\mod_log_config.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_log_config.so LINK32_OBJS= \ "$(INTDIR)\mod_log_config.obj" \ "$(INTDIR)\mod_log_config.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_log_config.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_log_config.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_log_config.so" if exist .\Debug\mod_log_config.so.manifest mt.exe -manifest .\Debug\mod_log_config.so.manifest -outputresource:.\Debug\mod_log_config.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_log_config.dep") !INCLUDE "mod_log_config.dep" !ELSE !MESSAGE Warning: cannot find "mod_log_config.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_log_config - Win32 Release" || "$(CFG)" == "mod_log_config - Win32 Debug" !IF "$(CFG)" == "mod_log_config - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\loggers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\loggers" !ELSEIF "$(CFG)" == "mod_log_config - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\loggers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\loggers" !ENDIF !IF "$(CFG)" == "mod_log_config - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\loggers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\loggers" !ELSEIF "$(CFG)" == "mod_log_config - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\loggers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\loggers" !ENDIF !IF "$(CFG)" == "mod_log_config - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\loggers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\loggers" !ELSEIF "$(CFG)" == "mod_log_config - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\loggers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\loggers" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_log_config - Win32 Release" "$(INTDIR)\mod_log_config.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_log_config.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_log_config.so" /d LONG_NAME="log_config_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_log_config - Win32 Debug" "$(INTDIR)\mod_log_config.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_log_config.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_log_config.so" /d LONG_NAME="log_config_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_log_config.c "$(INTDIR)\mod_log_config.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/loggers/mod_log_config.dep0000644000000000000500000000431312674411515020014 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_log_config.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_log_config.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_time.h"\ "..\..\srclib\apr-util\include\apr_anylock.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_thread_rwlock.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_log_config.h"\ httpd-2.4.41/modules/loggers/mod_logio.dep0000644000000000000500000000411712674411515017021 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_logio.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_logio.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_log_config.h"\ httpd-2.4.41/modules/loggers/mod_log_config.dsp0000644000000000000500000001075310551346420020031 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_log_config" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_log_config - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_log_config.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_log_config.mak" CFG="mod_log_config - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_log_config - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_log_config - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_log_config - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_log_config_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_log_config.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_log_config.so" /d LONG_NAME="log_config_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_log_config.so" /base:@..\..\os\win32\BaseAddr.ref,mod_log_config.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_log_config.so" /base:@..\..\os\win32\BaseAddr.ref,mod_log_config.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_log_config.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_log_config - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_log_config_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_log_config.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_log_config.so" /d LONG_NAME="log_config_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_log_config.so" /base:@..\..\os\win32\BaseAddr.ref,mod_log_config.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_log_config.so" /base:@..\..\os\win32\BaseAddr.ref,mod_log_config.so # Begin Special Build Tool TargetPath=.\Debug\mod_log_config.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_log_config - Win32 Release" # Name "mod_log_config - Win32 Debug" # Begin Source File SOURCE=.\mod_log_config.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/loggers/mod_log_config.h0000644000000000000500000000466511637105701017500 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_log_config.h * @brief Logging Configuration Extension Module for Apache * * @defgroup MOD_LOG_CONFIG mod_log_config * @ingroup APACHE_MODS * @{ */ #include "apr_optional.h" #include "httpd.h" #include "scoreboard.h" #ifndef _MOD_LOG_CONFIG_H #define _MOD_LOG_CONFIG_H 1 /** * callback function prototype for a external log handler */ typedef const char *ap_log_handler_fn_t(request_rec *r, char *a); /** * callback function prototype for external writer initialization. */ typedef void *ap_log_writer_init(apr_pool_t *p, server_rec *s, const char *name); /** * callback which gets called where there is a log line to write. */ typedef apr_status_t ap_log_writer( request_rec *r, void *handle, const char **portions, int *lengths, int nelts, apr_size_t len); typedef struct ap_log_handler { ap_log_handler_fn_t *func; int want_orig_default; } ap_log_handler; APR_DECLARE_OPTIONAL_FN(void, ap_register_log_handler, (apr_pool_t *p, char *tag, ap_log_handler_fn_t *func, int def)); /** * you will need to set your init handler *BEFORE* the open_logs * in mod_log_config gets executed */ APR_DECLARE_OPTIONAL_FN(ap_log_writer_init*, ap_log_set_writer_init,(ap_log_writer_init *func)); /** * you should probably set the writer at the same time (ie..before open_logs) */ APR_DECLARE_OPTIONAL_FN(ap_log_writer*, ap_log_set_writer, (ap_log_writer* func)); #endif /* MOD_LOG_CONFIG */ /** @} */ httpd-2.4.41/modules/loggers/Makefile.in0000644000000000000500000000005110150161574016407 0ustar rootsrc include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/lua/0002755000000000000500000000000013523273341013472 5ustar rootsrchttpd-2.4.41/modules/lua/lua_dbd.h0000644000000000000500000000404412155362210015227 0ustar rootsrc/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef _LUA_DBD_H_ #define _LUA_DBD_H_ #include "mod_lua.h" #include "apr.h" #include "apr_dbd.h" #include "mod_dbd.h" #define LUA_DBTYPE_APR_DBD 0 #define LUA_DBTYPE_MOD_DBD 1 typedef struct { apr_dbd_t *handle; const apr_dbd_driver_t *driver; int alive; apr_pool_t *pool; char type; ap_dbd_t * dbdhandle; server_rec *server; } lua_db_handle; typedef struct { const apr_dbd_driver_t *driver; int rows; int cols; apr_dbd_results_t *results; apr_pool_t *pool; } lua_db_result_set; typedef struct { apr_dbd_prepared_t *statement; int variables; lua_db_handle *db; } lua_db_prepared_statement; int lua_db_acquire(lua_State* L); int lua_db_escape(lua_State* L); int lua_db_close(lua_State* L); int lua_db_prepare(lua_State* L); int lua_db_prepared(lua_State* L); int lua_db_select(lua_State* L); int lua_db_query(lua_State* L); int lua_db_prepared_select(lua_State* L); int lua_db_prepared_query(lua_State* L); int lua_db_get_row(lua_State* L); int lua_db_gc(lua_State* L); int lua_db_active(lua_State* L); #endif /* !_LUA_DBD_H_ */ httpd-2.4.41/modules/lua/test/0002755000000000000500000000000013523273341014451 5ustar rootsrchttpd-2.4.41/modules/lua/test/test.lua0000755000000000000500000001104711657256456016155 0ustar rootsrc#!/usr/bin/env lua -- Licensed to the Apache Software Foundation (ASF) under one or more -- contributor license agreements. See the NOTICE file distributed with -- this work for additional information regarding copyright ownership. -- The ASF licenses this file to You under the Apache License, Version 2.0 -- (the "License"); you may not use this file except in compliance with -- the License. You may obtain a copy of the License at -- -- http://www.apache.org/licenses/LICENSE-2.0 -- -- Unless required by applicable law or agreed to in writing, software -- distributed under the License is distributed on an "AS IS" BASIS, -- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -- See the License for the specific language governing permissions and -- limitations under the License. local mu = require "moonunit" local http = require "helpers" http.base_url = "http://localhost:8008" local test = mu.TestCase:new{} function test:document_root() local b, c = http.get "/document_root.lua" assert(200 == c, "expected status code 200, got " .. c) assert(b:find("test"), "test not found in document root") end function test:basic_get() local b, c = http.get "/basic" assert(200 == c, "expected status code 200, got " .. c) assert(b:find("hello Lua world"), "'hello Lua world' not found in response") end function test:quietly() local b, c = http.get "/test_quietly" assert(200 == c, "unexpected response code " .. c) assert(b == 'hello!', "unexpected response body [" .. b .. "]") end function test.basic_post() local b, c = http.post "/basic" "hello=7&hello=1" assert(200 == c, "expected status code 200, got " .. c) assert(b:find("complex:%s+hello: 7, 1\n"), "didn't find complex post parsing") assert(b:find("simple:%s+hello: 7\n"), "didn't find simple post parsing") end function test.basic_post_alt() local b, c = http.post("/test_foo", "hello=7&hello=1") assert(201 == c, "expected status code 200, got " .. c) assert(b:find("Handler FOO!"), "unexpected output!") end function test.post_with_table() local b, c = http.post "/basic" { hello = "7" } assert(200 == c, "expected status code 200, got " .. c) assert(b:find("hello: 7"), "didn't get expected post data [" .. b .."]") b, c = http.post "/basic" { hello = "7", goodbye = "8" } assert(200 == c, "expected status code 200, got " .. c) assert(b:find("hello: 7"), "didn't get expected post data [" .. b .."]") assert(b:find("goodbye: 8"), "didn't get expected post data [" .. b .."]") end function test:simple_filter() local b, c = http.get "/filter/simple" assert(200 == c, "expected status code 200, got " .. c) end function test:request_attributes() local r, c = http.get "/test_attributes?yes=no" assert(201 == c, "expected status code 201, got " .. c) assert(r:find("status: 200\nstatus: 201"), "changing status code failed") assert(r:find("method: GET"), "method wasn't reported correctly") assert(r:find("protocol: HTTP/1.1"), "protocol reported incorrectly") assert(r:find("assbackwards: false"), "assbackwards reported incorrectly") assert(r:find("args: yes=no"), "args not reported correctly") end function test:map_regex() local r, c = http.get "/test_regex" assert(200 == c, "expected status code 200, got " .. c) assert(r:find("matched in handle_regex"), "didn't find 'matched in handle_regex'") end function test:map_regex2() local r, c = http.get "/test_regex?a=8" assert(200 == c, "expected status code 200, got " .. c) assert(r:find("matched in handle_regex"), "didn't find 'matched in handle_regex'") end function test:translate_name_hook() local r, c = http.get "/translate-name" assert(200 == c, "expected 200 got " .. c) assert(r:find("please find me"), "didn't get expected static file :-(, instead got " .. r) end function test:translate_name_hook2() local r, c = http.get "/translate-name2" assert(200 == c, "expected 200 got " .. c) assert(r:find("please find me"), "didn't get expected static file :-(, instead got " .. r) end function test:server_version() local r, c = http.get "/test_serverversion" assert(200 == c) assert(r:find("Apache/2"), "version isn't Apache/2, but is " .. r) end function test:fixups_hook() local r, c = http.get "/test_fixupstest" assert(201 == c, "incorrect status code returned, expected 201 got " .. c) assert(r:find("status is 201"), "handler sees incorrect status") end function test:simple() local r, c = http.get "/simple.lua" assert(200 == c, "incorrect status code returned, expected 200 got " .. c) assert(r:find("Hi"), "Didn't find 'Hi'") end test:run() httpd-2.4.41/modules/lua/test/lib/0002755000000000000500000000000013523273341015217 5ustar rootsrchttpd-2.4.41/modules/lua/test/lib/kangaroo.lua0000644000000000000500000000153011123517417017517 0ustar rootsrc-- Licensed to the Apache Software Foundation (ASF) under one or more -- contributor license agreements. See the NOTICE file distributed with -- this work for additional information regarding copyright ownership. -- The ASF licenses this file to You under the Apache License, Version 2.0 -- (the "License"); you may not use this file except in compliance with -- the License. You may obtain a copy of the License at -- -- http://www.apache.org/licenses/LICENSE-2.0 -- -- Unless required by applicable law or agreed to in writing, software -- distributed under the License is distributed on an "AS IS" BASIS, -- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -- See the License for the specific language governing permissions and -- limitations under the License. module("kangaroo") function hop(r) r:puts(" hop hop!\n") end httpd-2.4.41/modules/lua/test/test_httpd.conf0000644000000000000500000000160311737125415017503 0ustar rootsrc# Customize these two values for your Apache2 install ServerRoot "/Users/brianm/.opt/httpd-2.2.3-worker-for-lua" DocumentRoot "/Users/brianm/src/wombat/test/htdocs" # Customize this value to point to the top of mod_wombat's test dir LuaRoot /Users/brianm/src/wombat/test Listen 8000 LoadModule lua_module modules/mod_lua.so AddHandler lua-script .lua #LuaConfig httpd_config.lua configure LuaMapHandler /basic /Users/brianm/src/wombat/test/htdocs/test.lua LuaMapHandler /filter/simple /Users/brianm/src/wombat/test/htdocs/filters.lua handle_simple LuaMapHandler ^/(\w+)_(\w+)$ /Users/brianm/src/wombat/test/htdocs/$1.lua handle_$2 LuaHookTranslateName htdocs/hooks.lua translate_name LuaHookTranslateName htdocs/hooks.lua translate_name2 LuaHookFixups htdocs/hooks.lua fixups_test LuaPackagePath lib/?.lua # stat | forever | never LuaCodeCache stat ErrorLog logs/error_log LogLevel debug httpd-2.4.41/modules/lua/test/htdocs/0002755000000000000500000000000013523273341015735 5ustar rootsrchttpd-2.4.41/modules/lua/test/htdocs/hooks.lua0000644000000000000500000000110211123517417017552 0ustar rootsrcrequire 'string' require 'apache2' function translate_name(r) if r.uri == "/translate-name" then r.uri = "/find_me.txt" return apache2.DECLINED end return apache2.DECLINED end function translate_name2(r) if r.uri == "/translate-name2" then r.uri = "/find_me.txt" return apache2.DECLINED end return apache2.DECLINED end function fixups_test(r) -- r:err("KABAZ") if r.uri == "/test_fixupstest" then -- r:err("KABIZ") r.status = 201 return apache2.OK end -- r:err("ZIBAK") return apache2.DECLINED endhttpd-2.4.41/modules/lua/test/htdocs/test.lua0000644000000000000500000000565611737125415017434 0ustar rootsrc-- Licensed to the Apache Software Foundation (ASF) under one or more -- contributor license agreements. See the NOTICE file distributed with -- this work for additional information regarding copyright ownership. -- The ASF licenses this file to You under the Apache License, Version 2.0 -- (the "License"); you may not use this file except in compliance with -- the License. You may obtain a copy of the License at -- -- http://www.apache.org/licenses/LICENSE-2.0 -- -- Unless required by applicable law or agreed to in writing, software -- distributed under the License is distributed on an "AS IS" BASIS, -- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -- See the License for the specific language governing permissions and -- limitations under the License. require 'string' function print_args(r, simple, complex) local s = " %s: %s\n" r:puts(" simple:\n") for k, v in pairs(simple) do r:puts(s:format(k, v)) end s = " %s: " r:puts(" complex:\n") for k, ary in pairs(complex) do r:puts(s:format(k)) for i=1, #ary do r:puts(ary[i]) if i < #ary then r:puts(", ") end end r:puts("\n") end end function debug_stuff(r) r:debug("This is a debug log message") -- r:info("This is an info log message") -- r:notice("This is an notice log message") -- r:warn("This is an warn log message") -- r:err("This is an err log message") -- r:alert("This is an alert log message") -- r:crit("This is an crit log message") -- r:emerg("This is an emerg log message") end function handle(r) r:puts("hello Lua world\n") r:puts("Query args:\n") print_args(r, r:parseargs()); debug_stuff(r) r:puts("HTTP Method:\n " .. r.method .. "\n") if r.method == 'POST' then print_args(r, r:parsebody()) end require("other") r:puts("loaded relative to script:\n ") other.doit(r) r:puts("loaded from LuaPackagePath:\n") require("kangaroo"); kangaroo.hop(r); end function handle_foo(r) r:puts("Handler FOO!\n") r.status = 201 r:debug("set status to 201") end function handle_attributes(r) local function pf(name) r:puts(("%s: %s\n"):format(name, tostring(r[name]))) end pf("status") r.status = 201 pf("status") r:puts("\n") pf("content_type") r.content_type = "text/plain?charset=ascii" pf("content_type") r:puts("\n") pf("method") pf("protocol") pf("assbackwards") pf("the_request") pf("range") pf("content_encoding") pf("user") pf("unparsed_uri") pf("ap_auth_type") pf("uri") pf("filename") pf("canonical_filename") pf("path_info") pf("args") r:puts("\n") end function test_headers(r) r:puts("test getting and setting headers here\n") end function handle_quietly(r) r:puts("hello!") end function handle_regex(r) r:puts("matched in handle_regex") end function handle_serverversion(r) r:puts(apache2.version) end function handle_fixupstest(r) r:puts("status is " .. r.status) endhttpd-2.4.41/modules/lua/test/htdocs/headers.lua0000644000000000000500000000020011173775143020047 0ustar rootsrcfunction handle(r) local host = r.headers_in['host'] r:debug(host) r:puts(host) r.headers_out['wombat'] = 'lua' end httpd-2.4.41/modules/lua/test/htdocs/find_me.txt0000644000000000000500000000001611737125415020075 0ustar rootsrcplease find mehttpd-2.4.41/modules/lua/test/htdocs/other.lua0000644000000000000500000000155411123517417017563 0ustar rootsrc-- Licensed to the Apache Software Foundation (ASF) under one or more -- contributor license agreements. See the NOTICE file distributed with -- this work for additional information regarding copyright ownership. -- The ASF licenses this file to You under the Apache License, Version 2.0 -- (the "License"); you may not use this file except in compliance with -- the License. You may obtain a copy of the License at -- -- http://www.apache.org/licenses/LICENSE-2.0 -- -- Unless required by applicable law or agreed to in writing, software -- distributed under the License is distributed on an "AS IS" BASIS, -- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -- See the License for the specific language governing permissions and -- limitations under the License. module("other") function doit(r) r:debug("doing it...") r:puts("Do It!\n") end httpd-2.4.41/modules/lua/test/htdocs/config_tests.lua0000644000000000000500000000226411123517417021130 0ustar rootsrc-- Licensed to the Apache Software Foundation (ASF) under one or more -- contributor license agreements. See the NOTICE file distributed with -- this work for additional information regarding copyright ownership. -- The ASF licenses this file to You under the Apache License, Version 2.0 -- (the "License"); you may not use this file except in compliance with -- the License. You may obtain a copy of the License at -- -- http://www.apache.org/licenses/LICENSE-2.0 -- -- Unless required by applicable law or agreed to in writing, software -- distributed under the License is distributed on an "AS IS" BASIS, -- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -- See the License for the specific language governing permissions and -- limitations under the License. require 'string' local count = 0 function handle(r) r:puts("success in handle " .. count) end function handle_server_vm(r) r:puts("hello from server scope " .. count) count = count + 1 end function handle_request_vm(r) r:puts("hello from request scope " .. count) count = count + 1 end function handle_conn_vm(r) r:puts("hello from request scope " .. count) count = count + 1 endhttpd-2.4.41/modules/lua/test/htdocs/filters.lua0000644000000000000500000000017411123517417020107 0ustar rootsrc local s = require 'string' function handle_simple(r) -- r:addoutputfilter("wombathood") r:puts("added wombathood") endhttpd-2.4.41/modules/lua/test/htdocs/simple.lua0000644000000000000500000000011711152362007017720 0ustar rootsrcfunction handle(r) r.content_type = "text/plain" r:puts("Hi there!") end httpd-2.4.41/modules/lua/test/moonunit.lua0000644000000000000500000000313111123517417017017 0ustar rootsrc-- Licensed to the Apache Software Foundation (ASF) under one or more -- contributor license agreements. See the NOTICE file distributed with -- this work for additional information regarding copyright ownership. -- The ASF licenses this file to You under the Apache License, Version 2.0 -- (the "License"); you may not use this file except in compliance with -- the License. You may obtain a copy of the License at -- -- http://www.apache.org/licenses/LICENSE-2.0 -- -- Unless required by applicable law or agreed to in writing, software -- distributed under the License is distributed on an "AS IS" BASIS, -- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -- See the License for the specific language governing permissions and -- limitations under the License. module("moonunit", package.seeall) TestCase = {} function TestCase:new(it) it = it or {} setmetatable(it, self) self.__index = self return it end function TestCase:run(args) args = args or arg local function run_test(t, name) local status, err = pcall(t, self) if status then print(("%-39s \27[32mpass\27[39m"):format("[" .. name .. "]")) else print(("%-39s \27[31mFAIL\27[39m %s"):format("[" .. name .. "]", err)) end end if (args and #args > 0) then for _, v in ipairs(args) do if type(self[v]) == "function" then run_test(self[v], v) else print(("%-39s FAIL %s"):format("[" .. v .. "]", "'" .. v .. "' doesn't appear to be a test function")) end end else for k, v in pairs(self) do run_test(v, k) end end end httpd-2.4.41/modules/lua/test/helpers.lua0000644000000000000500000000126211123517417016614 0ustar rootsrcmodule("helpers", package.seeall) local io = require("io") local http = require("socket.http") local string = require("string") base_url = "http://localhost" function get(uri) return http.request(base_url .. uri) end function post(uri, body) local function do_it(body) local flat if (type(body) == "table") then i = 1 for k, v in pairs(body) do if i == 1 then flat = k .. "=" ..v else flat = flat .. "&" .. k .. "=" .. v end i = i + 1 end else flat = body; end return http.request(base_url .. uri, flat) end if body then return do_it(body) else return do_it end endhttpd-2.4.41/modules/lua/mod_lua.dsp0000644000000000000500000001251112223620035015610 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_lua" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_lua - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_lua.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_lua.mak" CFG="mod_lua - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_lua - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_lua - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_lua - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/lua/src" /I "../ssl" /I "../database" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_LUA_DECLARE_EXPORT" /Fd"Release\mod_lua_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_lua.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_lua.so" /d LONG_NAME="lua_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_lua.so" /base:@..\..\os\win32\BaseAddr.ref,mod_lua.so # ADD LINK32 kernel32.lib ws2_32.lib lua51.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_lua.so" /base:@..\..\os\win32\BaseAddr.ref,mod_lua.so /opt:ref /libpath:"../../srclib/lua/src" # Begin Special Build Tool TargetPath=.\Release\mod_lua.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_lua - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/lua/src" /I "../ssl" /I "../database" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_LUA_DECLARE_EXPORT" /Fd"Debug\mod_lua_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_lua.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_lua.so" /d LONG_NAME="lua_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_lua.so" /base:@..\..\os\win32\BaseAddr.ref,mod_lua.so # ADD LINK32 kernel32.lib ws2_32.lib lua51.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_lua.so" /base:@..\..\os\win32\BaseAddr.ref,mod_lua.so /libpath:"../../srclib/lua/src" # Begin Special Build Tool TargetPath=.\Debug\mod_lua.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_lua - Win32 Release" # Name "mod_lua - Win32 Debug" # Begin Source File SOURCE=.\lua_apr.c # End Source File # Begin Source File SOURCE=.\lua_apr.h # End Source File # Begin Source File SOURCE=.\lua_config.c # End Source File # Begin Source File SOURCE=.\lua_config.h # End Source File # Begin Source File SOURCE=.\lua_passwd.c # End Source File # Begin Source File SOURCE=.\lua_passwd.h # End Source File # Begin Source File SOURCE=.\lua_request.c # End Source File # Begin Source File SOURCE=.\lua_request.h # End Source File # Begin Source File SOURCE=.\lua_vmprep.c # End Source File # Begin Source File SOURCE=.\lua_vmprep.h # End Source File # Begin Source File SOURCE=.\mod_lua.c # End Source File # Begin Source File SOURCE=.\mod_lua.h # End Source File # Begin Source File SOURCE=.\lua_dbd.c # End Source File # Begin Source File SOURCE=.\lua_dbd.h # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/lua/lua_config.h0000644000000000000500000000237112155362210015744 0ustar rootsrc/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_lua.h" #ifndef _APL_CONFIG_H_ #define _APL_CONFIG_H_ void ap_lua_load_config_lmodule(lua_State *L); apr_status_t ap_lua_map_handler(ap_lua_dir_cfg *cfg, const char *file, const char *function, const char *pattern, const char *scope); #endif /* !_APL_CONFIG_H_ */ httpd-2.4.41/modules/lua/lua_apr.h0000644000000000000500000000232212315507465015270 0ustar rootsrc/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef _LUA_APR_H_ #define _LUA_APR_H_ #include "scoreboard.h" #include "http_main.h" #include "ap_mpm.h" #include "apr_md5.h" #include "apr_sha1.h" #include "apr_poll.h" #include "apr.h" #include "apr_tables.h" #include "apr_base64.h" int ap_lua_init(lua_State *L, apr_pool_t * p); req_table_t *ap_lua_check_apr_table(lua_State *L, int index); void ap_lua_push_apr_table(lua_State *L, req_table_t *t); #endif /* !_LUA_APR_H_ */ httpd-2.4.41/modules/lua/lua_vmprep.h0000644000000000000500000001031512155362210016005 0ustar rootsrc/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "lua.h" #include "lauxlib.h" #include "lualib.h" #include "httpd.h" #include "apr_thread_rwlock.h" #include "apr_strings.h" #include "apr_tables.h" #include "apr_hash.h" #include "apr_buckets.h" #include "apr_file_info.h" #include "apr_time.h" #include "apr_pools.h" #include "apr_reslist.h" #ifndef VMPREP_H #define VMPREP_H #define AP_LUA_SCOPE_UNSET 0 #define AP_LUA_SCOPE_ONCE 1 #define AP_LUA_SCOPE_REQUEST 2 #define AP_LUA_SCOPE_CONN 3 #define AP_LUA_SCOPE_THREAD 4 #define AP_LUA_SCOPE_SERVER 5 #define AP_LUA_CACHE_UNSET 0 #define AP_LUA_CACHE_NEVER 1 #define AP_LUA_CACHE_STAT 2 #define AP_LUA_CACHE_FOREVER 3 #define AP_LUA_FILTER_INPUT 1 #define AP_LUA_FILTER_OUTPUT 2 typedef void (*ap_lua_state_open_callback) (lua_State *L, apr_pool_t *p, void *ctx); /** * Specification for a lua virtual machine */ typedef struct { /* NEED TO ADD ADDITIONAL PACKAGE PATHS AS PART OF SPEC INSTEAD OF DIR CONFIG */ apr_array_header_t *package_paths; apr_array_header_t *package_cpaths; /* name of base file to load in the vm */ const char *file; /* APL_SCOPE_ONCE | APL_SCOPE_REQUEST | APL_SCOPE_CONN | APL_SCOPE_THREAD | APL_SCOPE_SERVER */ int scope; unsigned int vm_min; unsigned int vm_max; ap_lua_state_open_callback cb; void* cb_arg; /* pool to use for lifecycle if APL_SCOPE_ONCE is set, otherwise unused */ apr_pool_t *pool; /* Pre-compiled Lua Byte code to load directly. If bytecode_len is >0, * the file part of this structure is ignored for loading purposes, but * it is used for error messages. */ const char *bytecode; apr_size_t bytecode_len; int codecache; } ap_lua_vm_spec; typedef struct { const char *function_name; const char *file_name; int scope; ap_regex_t *uri_pattern; const char *bytecode; apr_size_t bytecode_len; int codecache; } ap_lua_mapped_handler_spec; typedef struct { const char *function_name; const char *file_name; const char* filter_name; int direction; /* AP_LUA_FILTER_INPUT | AP_LUA_FILTER_OUTPUT */ } ap_lua_filter_handler_spec; typedef struct { apr_size_t runs; apr_time_t modified; apr_off_t size; } ap_lua_finfo; typedef struct { lua_State* L; ap_lua_finfo* finfo; } ap_lua_server_spec; /** * Fake out addition of the "apache2" module */ void ap_lua_load_apache2_lmodule(lua_State *L); /* * alternate means of getting lua_State (preferred eventually) * Obtain a lua_State which has loaded file and is associated with lifecycle_pool * If one exists, will return extant one, otherwise will create, attach, and return * This does no locking around the lua_State, so if the pool is shared between * threads, locking is up the client. * * @lifecycle_pool -> pool whose lifeycle controls the lua_State * @file file to be opened, also used as a key for uniquing lua_States * @cb callback for vm initialization called *before* the file is opened * @ctx a baton passed to cb */ lua_State *ap_lua_get_lua_state(apr_pool_t *lifecycle_pool, ap_lua_vm_spec *spec, request_rec* r); #if APR_HAS_THREADS || defined(DOXYGEN) /* * Initialize mod_lua mutex. * @pool pool for mutex * @s server_rec for logging */ void ap_lua_init_mutex(apr_pool_t *pool, server_rec *s); #endif #endif httpd-2.4.41/modules/lua/lua_passwd.h0000644000000000000500000000444012210657505016005 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef _LUA_PASSWD_H #define _LUA_PASSWD_H #include "apr.h" #include "apr_lib.h" #include "apr_strings.h" #include "apr_errno.h" #include "apr_file_io.h" #include "apr_general.h" #include "apr_version.h" #if !APR_VERSION_AT_LEAST(2,0,0) #include "apu_version.h" #endif #define MAX_PASSWD_LEN 256 #define ALG_APMD5 0 #define ALG_APSHA 1 #define ALG_BCRYPT 2 #define ALG_CRYPT 3 #define BCRYPT_DEFAULT_COST 5 #define ERR_FILEPERM 1 #define ERR_SYNTAX 2 #define ERR_PWMISMATCH 3 #define ERR_INTERRUPTED 4 #define ERR_OVERFLOW 5 #define ERR_BADUSER 6 #define ERR_INVALID 7 #define ERR_RANDOM 8 #define ERR_GENERAL 9 #define ERR_ALG_NOT_SUPP 10 #if defined(WIN32) || defined(NETWARE) #define CRYPT_ALGO_SUPPORTED 0 #define PLAIN_ALGO_SUPPORTED 1 #else #define CRYPT_ALGO_SUPPORTED 1 #define PLAIN_ALGO_SUPPORTED 0 #endif #if APR_VERSION_AT_LEAST(2,0,0) || \ (APU_MAJOR_VERSION == 1 && APU_MINOR_VERSION >= 5) #define BCRYPT_ALGO_SUPPORTED 1 #else #define BCRYPT_ALGO_SUPPORTED 0 #endif typedef struct passwd_ctx passwd_ctx; struct passwd_ctx { apr_pool_t *pool; const char *errstr; char *out; apr_size_t out_len; char *passwd; int alg; int cost; }; /* * The following functions return zero on success; otherwise, one of * the ERR_* codes is returned and an error message is stored in ctx->errstr. */ /* * Make a password record from the given information. */ int mk_password_hash(passwd_ctx *ctx); #endif /* _LUA_PASSWD_H */ httpd-2.4.41/modules/lua/README0000644000000000000500000000332313127013226014343 0ustar rootsrc-*- mode:org -*- * Requirements: ** lua 5.1, 5.2, 5.3 ( http://www.lua.org/ ) or LuaJIT 2.x ( http://www.luajit.org/ ) ** Apache HTTPD 2.4 ( http://httpd.apache.org/ ) or higher * Documentation See docs/README * Building For now, see docs/building-from-subversion.txt * Task List ** TODO Use r->file to determine file, doing rewriting in translate_name ** TODO Provide means to get useful output from lua errors in response body Probably have to put it on the vm spec for pre-handler errors, as it is pre-handler, will prolly be on the request_config somewhere, but sometimes cannot put there, so... fun ** TODO Mapping in the server_rec ** TODO Figure out how reentrancy works regarding filter chain stuff. Do we need new "threads"? ** TODO: Flatten LuaHook* to LuaHook phase file fn ? ** TODO: document or remove block sections ** TODO: test per-dir behavior of block sections ** TODO: Suppress internal details (fs path to scripts, etc) in error responses ** TODO: Check whether we can tighten the mode flag in lua_load(), luaL_loadfile() an dluaL_loadbuffer() from NULL (="bt") to e.g. "t". * License Apache License, Version 2.0, http://www.apache.org/licenses/LICENSE-2.0 See NOTICE file for more information * Problems and Patches: Please use dev@httpd.apache.org for discussing mod_lua development To subscribe send email to dev-subscribe@httpd.apache.org Note that this is for development discussion, not user support :-) * Contributors Include ** Brian McCallister ** Paul Querna ** Garrett Rooney ** Martin Traverso ** Brian Akins ** Justin Erenkrantz ** Philip M. Gollucci ** Stefan Fritsch ** Eric Covener ** Daniel Gruno ** Günter Knauf ** Jim Jagielski httpd-2.4.41/modules/lua/lua_request.c0000644000000000000500000027670513350264472016211 0ustar rootsrc/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_lua.h" #include "lua_apr.h" #include "lua_dbd.h" #include "lua_passwd.h" #include "scoreboard.h" #include "util_md5.h" #include "util_script.h" #include "util_varbuf.h" #include "apr_date.h" #include "apr_pools.h" #include "apr_thread_mutex.h" #include "apr_tables.h" #include "util_cookies.h" #define APR_WANT_BYTEFUNC #include "apr_want.h" extern apr_global_mutex_t* lua_ivm_mutex; extern apr_shm_t *lua_ivm_shm; APLOG_USE_MODULE(lua); #define POST_MAX_VARS 500 #ifndef MODLUA_MAX_REG_MATCH #define MODLUA_MAX_REG_MATCH 25 #endif typedef char *(*req_field_string_f) (request_rec * r); typedef int (*req_field_int_f) (request_rec * r); typedef req_table_t *(*req_field_apr_table_f) (request_rec * r); void ap_lua_rstack_dump(lua_State *L, request_rec *r, const char *msg) { int i; int top = lua_gettop(L); ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01484) "Lua Stack Dump: [%s]", msg); for (i = 1; i <= top; i++) { int t = lua_type(L, i); switch (t) { case LUA_TSTRING:{ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(03001) "%d: '%s'", i, lua_tostring(L, i)); break; } case LUA_TUSERDATA:{ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(03002) "%d: userdata", i); break; } case LUA_TLIGHTUSERDATA:{ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(03003) "%d: lightuserdata", i); break; } case LUA_TNIL:{ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(03004) "%d: NIL", i); break; } case LUA_TNONE:{ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(03005) "%d: None", i); break; } case LUA_TBOOLEAN:{ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(03006) "%d: %s", i, lua_toboolean(L, i) ? "true" : "false"); break; } case LUA_TNUMBER:{ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(03007) "%d: %g", i, lua_tonumber(L, i)); break; } case LUA_TTABLE:{ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(03008) "%d: ", i); break; } case LUA_TFUNCTION:{ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(03009) "%d: ", i); break; } default:{ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(03010) "%d: unknown: -[%s]-", i, lua_typename(L, i)); break; } } } } /** * Verify that the thing at index is a request_rec wrapping * userdata thingamajig and return it if it is. if it is not * lua will enter its error handling routine. */ static request_rec *ap_lua_check_request_rec(lua_State *L, int index) { request_rec *r; luaL_checkudata(L, index, "Apache2.Request"); r = (request_rec *) lua_unboxpointer(L, index); return r; } /* ------------------ request methods -------------------- */ /* helper callback for req_parseargs */ static int req_aprtable2luatable_cb(void *l, const char *key, const char *value) { int t; lua_State *L = (lua_State *) l; /* [table, table] */ /* rstack_dump(L, RRR, "start of cb"); */ /* L is [table, table] */ /* build complex */ lua_getfield(L, -1, key); /* [VALUE, table, table] */ /* rstack_dump(L, RRR, "after getfield"); */ t = lua_type(L, -1); switch (t) { case LUA_TNIL: case LUA_TNONE:{ lua_pop(L, 1); /* [table, table] */ lua_newtable(L); /* [array, table, table] */ lua_pushnumber(L, 1); /* [1, array, table, table] */ lua_pushstring(L, value); /* [string, 1, array, table, table] */ lua_settable(L, -3); /* [array, table, table] */ lua_setfield(L, -2, key); /* [table, table] */ break; } case LUA_TTABLE:{ /* [array, table, table] */ int size = lua_rawlen(L, -1); lua_pushnumber(L, size + 1); /* [#, array, table, table] */ lua_pushstring(L, value); /* [string, #, array, table, table] */ lua_settable(L, -3); /* [array, table, table] */ lua_setfield(L, -2, key); /* [table, table] */ break; } } /* L is [table, table] */ /* build simple */ lua_getfield(L, -2, key); /* [VALUE, table, table] */ if (lua_isnoneornil(L, -1)) { /* only set if not already set */ lua_pop(L, 1); /* [table, table]] */ lua_pushstring(L, value); /* [string, table, table] */ lua_setfield(L, -3, key); /* [table, table] */ } else { lua_pop(L, 1); } return 1; } /* helper callback for req_parseargs */ static int req_aprtable2luatable_cb_len(void *l, const char *key, const char *value, size_t len) { int t; lua_State *L = (lua_State *) l; /* [table, table] */ /* rstack_dump(L, RRR, "start of cb"); */ /* L is [table, table] */ /* build complex */ lua_getfield(L, -1, key); /* [VALUE, table, table] */ /* rstack_dump(L, RRR, "after getfield"); */ t = lua_type(L, -1); switch (t) { case LUA_TNIL: case LUA_TNONE:{ lua_pop(L, 1); /* [table, table] */ lua_newtable(L); /* [array, table, table] */ lua_pushnumber(L, 1); /* [1, array, table, table] */ lua_pushlstring(L, value, len); /* [string, 1, array, table, table] */ lua_settable(L, -3); /* [array, table, table] */ lua_setfield(L, -2, key); /* [table, table] */ break; } case LUA_TTABLE:{ /* [array, table, table] */ int size = lua_rawlen(L, -1); lua_pushnumber(L, size + 1); /* [#, array, table, table] */ lua_pushlstring(L, value, len); /* [string, #, array, table, table] */ lua_settable(L, -3); /* [array, table, table] */ lua_setfield(L, -2, key); /* [table, table] */ break; } } /* L is [table, table] */ /* build simple */ lua_getfield(L, -2, key); /* [VALUE, table, table] */ if (lua_isnoneornil(L, -1)) { /* only set if not already set */ lua_pop(L, 1); /* [table, table]] */ lua_pushlstring(L, value, len); /* [string, table, table] */ lua_setfield(L, -3, key); /* [table, table] */ } else { lua_pop(L, 1); } return 1; } /* ======================================================================================================================= lua_read_body(request_rec *r, const char **rbuf, apr_off_t *size): Reads any additional form data sent in POST/PUT requests. Used for multipart POST data. ======================================================================================================================= */ static int lua_read_body(request_rec *r, const char **rbuf, apr_off_t *size, apr_off_t maxsize) { int rc = OK; if ((rc = ap_setup_client_block(r, REQUEST_CHUNKED_ERROR))) { return (rc); } if (ap_should_client_block(r)) { /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ char argsbuffer[HUGE_STRING_LEN]; apr_off_t rsize, len_read, rpos = 0; apr_off_t length = r->remaining; /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ if (maxsize != 0 && length > maxsize) { return APR_EINCOMPLETE; /* Only room for incomplete data chunk :( */ } *rbuf = (const char *) apr_pcalloc(r->pool, (apr_size_t) (length + 1)); *size = length; while ((len_read = ap_get_client_block(r, argsbuffer, sizeof(argsbuffer))) > 0) { if ((rpos + len_read) > length) { rsize = length - rpos; } else { rsize = len_read; } memcpy((char *) *rbuf + rpos, argsbuffer, (size_t) rsize); rpos += rsize; } } return (rc); } /* * ======================================================================================================================= * lua_write_body: Reads any additional form data sent in POST/PUT requests * and writes to a file. * ======================================================================================================================= */ static apr_status_t lua_write_body(request_rec *r, apr_file_t *file, apr_off_t *size) { apr_status_t rc = OK; if ((rc = ap_setup_client_block(r, REQUEST_CHUNKED_ERROR))) return rc; if (ap_should_client_block(r)) { char argsbuffer[HUGE_STRING_LEN]; apr_off_t rsize, len_read, rpos = 0; apr_off_t length = r->remaining; *size = length; while ((len_read = ap_get_client_block(r, argsbuffer, sizeof(argsbuffer))) > 0) { if ((rpos + len_read) > length) rsize = (apr_size_t) length - rpos; else rsize = len_read; rc = apr_file_write_full(file, argsbuffer, (apr_size_t) rsize, NULL); if (rc != APR_SUCCESS) return rc; rpos += rsize; } } return rc; } /* r:parseargs() returning a lua table */ static int req_parseargs(lua_State *L) { apr_table_t *form_table; request_rec *r = ap_lua_check_request_rec(L, 1); lua_newtable(L); lua_newtable(L); /* [table, table] */ ap_args_to_table(r, &form_table); apr_table_do(req_aprtable2luatable_cb, L, form_table, NULL); return 2; /* [table, table>] */ } /* ap_lua_binstrstr: Binary strstr function for uploaded data with NULL bytes */ static char* ap_lua_binstrstr (const char * haystack, size_t hsize, const char* needle, size_t nsize) { size_t p; if (haystack == NULL) return NULL; if (needle == NULL) return NULL; if (hsize < nsize) return NULL; for (p = 0; p <= (hsize - nsize); ++p) { if (memcmp(haystack + p, needle, nsize) == 0) { return (char*) (haystack + p); } } return NULL; } /* r:parsebody(): Parses regular (url-enocded) or multipart POST data and returns two tables*/ static int req_parsebody(lua_State *L) { apr_array_header_t *pairs; apr_off_t len; int res; apr_size_t size; apr_size_t max_post_size; char *multipart; const char *contentType; request_rec *r = ap_lua_check_request_rec(L, 1); max_post_size = (apr_size_t) luaL_optinteger(L, 2, MAX_STRING_LEN); multipart = apr_pcalloc(r->pool, 256); contentType = apr_table_get(r->headers_in, "Content-Type"); lua_newtable(L); lua_newtable(L); /* [table, table] */ if (contentType != NULL && (sscanf(contentType, "multipart/form-data; boundary=%250c", multipart) == 1)) { char *buffer, *key, *filename; char *start = 0, *end = 0, *crlf = 0; const char *data; int i; size_t vlen = 0; size_t len = 0; if (lua_read_body(r, &data, (apr_off_t*) &size, max_post_size) != OK) { return 2; } len = strlen(multipart); i = 0; for ( start = strstr((char *) data, multipart); start != NULL; start = end ) { i++; if (i == POST_MAX_VARS) break; crlf = strstr((char *) start, "\r\n\r\n"); if (!crlf) break; end = ap_lua_binstrstr(crlf, (size - (crlf - data)), multipart, len); if (end == NULL) break; key = (char *) apr_pcalloc(r->pool, 256); filename = (char *) apr_pcalloc(r->pool, 256); vlen = end - crlf - 8; buffer = (char *) apr_pcalloc(r->pool, vlen+1); memcpy(buffer, crlf + 4, vlen); sscanf(start + len + 2, "Content-Disposition: form-data; name=\"%255[^\"]\"; filename=\"%255[^\"]\"", key, filename); if (*key) { req_aprtable2luatable_cb_len(L, key, buffer, vlen); } } } else { char *buffer; res = ap_parse_form_data(r, NULL, &pairs, -1, max_post_size); if (res == OK) { while(pairs && !apr_is_empty_array(pairs)) { ap_form_pair_t *pair = (ap_form_pair_t *) apr_array_pop(pairs); apr_brigade_length(pair->value, 1, &len); size = (apr_size_t) len; buffer = apr_palloc(r->pool, size + 1); apr_brigade_flatten(pair->value, buffer, &size); buffer[len] = 0; req_aprtable2luatable_cb(L, pair->name, buffer); } } } return 2; /* [table, table>] */ } /* * lua_ap_requestbody; r:requestbody([filename]) - Reads or stores the request * body */ static int lua_ap_requestbody(lua_State *L) { const char *filename; request_rec *r; apr_off_t maxSize; r = ap_lua_check_request_rec(L, 1); filename = luaL_optstring(L, 2, 0); maxSize = (apr_off_t)luaL_optinteger(L, 3, 0); if (r) { apr_off_t size; if (maxSize > 0 && r->remaining > maxSize) { lua_pushnil(L); lua_pushliteral(L, "Request body was larger than the permitted size."); return 2; } if (r->method_number != M_POST && r->method_number != M_PUT) return (0); if (!filename) { const char *data; if (lua_read_body(r, &data, &size, maxSize) != OK) return (0); lua_pushlstring(L, data, (size_t) size); lua_pushinteger(L, (lua_Integer) size); return (2); } else { apr_status_t rc; apr_file_t *file; rc = apr_file_open(&file, filename, APR_CREATE | APR_FOPEN_WRITE, APR_FPROT_OS_DEFAULT, r->pool); lua_settop(L, 0); if (rc == APR_SUCCESS) { rc = lua_write_body(r, file, &size); apr_file_close(file); if (rc != OK) { lua_pushboolean(L, 0); return 1; } lua_pushinteger(L, (lua_Integer) size); return (1); } else lua_pushboolean(L, 0); return (1); } } return (0); } /* wrap ap_rputs as r:puts(String) */ static int req_puts(lua_State *L) { request_rec *r = ap_lua_check_request_rec(L, 1); int argc = lua_gettop(L); int i; for (i = 2; i <= argc; i++) { ap_rputs(luaL_checkstring(L, i), r); } return 0; } /* wrap ap_rwrite as r:write(String) */ static int req_write(lua_State *L) { request_rec *r = ap_lua_check_request_rec(L, 1); size_t n; int rv; const char *buf = luaL_checklstring(L, 2, &n); rv = ap_rwrite((void *) buf, n, r); lua_pushinteger(L, rv); return 1; } /* r:add_output_filter(name) */ static int req_add_output_filter(lua_State *L) { request_rec *r = ap_lua_check_request_rec(L, 1); const char *name = luaL_checkstring(L, 2); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01485) "adding output filter %s", name); ap_add_output_filter(name, L, r, r->connection); return 0; } /* wrap ap_construct_url as r:construct_url(String) */ static int req_construct_url(lua_State *L) { request_rec *r = ap_lua_check_request_rec(L, 1); const char *name = luaL_checkstring(L, 2); lua_pushstring(L, ap_construct_url(r->pool, name, r)); return 1; } /* wrap ap_escape_html r:escape_html(String) */ static int req_escape_html(lua_State *L) { request_rec *r = ap_lua_check_request_rec(L, 1); const char *s = luaL_checkstring(L, 2); lua_pushstring(L, ap_escape_html(r->pool, s)); return 1; } /* wrap optional ssl_var_lookup as r:ssl_var_lookup(String) */ static int req_ssl_var_lookup(lua_State *L) { request_rec *r = ap_lua_check_request_rec(L, 1); const char *s = luaL_checkstring(L, 2); const char *res = ap_lua_ssl_val(r->pool, r->server, r->connection, r, (char *)s); lua_pushstring(L, res); return 1; } /* BEGIN dispatch mathods for request_rec fields */ /* not really a field, but we treat it like one */ static const char *req_document_root(request_rec *r) { return ap_document_root(r); } static const char *req_context_prefix(request_rec *r) { return ap_context_prefix(r); } static const char *req_context_document_root(request_rec *r) { return ap_context_document_root(r); } static char *req_uri_field(request_rec *r) { return r->uri; } static const char *req_method_field(request_rec *r) { return r->method; } static const char *req_handler_field(request_rec *r) { return r->handler; } static const char *req_proxyreq_field(request_rec *r) { switch (r->proxyreq) { case PROXYREQ_NONE: return "PROXYREQ_NONE"; case PROXYREQ_PROXY: return "PROXYREQ_PROXY"; case PROXYREQ_REVERSE: return "PROXYREQ_REVERSE"; case PROXYREQ_RESPONSE: return "PROXYREQ_RESPONSE"; default: return NULL; } } static const char *req_hostname_field(request_rec *r) { return r->hostname; } static const char *req_args_field(request_rec *r) { return r->args; } static const char *req_path_info_field(request_rec *r) { return r->path_info; } static const char *req_canonical_filename_field(request_rec *r) { return r->canonical_filename; } static const char *req_filename_field(request_rec *r) { return r->filename; } static const char *req_user_field(request_rec *r) { return r->user; } static const char *req_unparsed_uri_field(request_rec *r) { return r->unparsed_uri; } static const char *req_ap_auth_type_field(request_rec *r) { return r->ap_auth_type; } static const char *req_content_encoding_field(request_rec *r) { return r->content_encoding; } static const char *req_content_type_field(request_rec *r) { return r->content_type; } static const char *req_range_field(request_rec *r) { return r->range; } static const char *req_protocol_field(request_rec *r) { return r->protocol; } static const char *req_the_request_field(request_rec *r) { return r->the_request; } static const char *req_log_id_field(request_rec *r) { return r->log_id; } static const char *req_useragent_ip_field(request_rec *r) { return r->useragent_ip; } static int req_remaining_field(request_rec *r) { return r->remaining; } static int req_status_field(request_rec *r) { return r->status; } static int req_assbackwards_field(request_rec *r) { return r->assbackwards; } static req_table_t* req_headers_in(request_rec *r) { req_table_t* t = apr_palloc(r->pool, sizeof(req_table_t)); t->r = r; t->t = r->headers_in; t->n = "headers_in"; return t; } static req_table_t* req_headers_out(request_rec *r) { req_table_t* t = apr_palloc(r->pool, sizeof(req_table_t)); t->r = r; t->t = r->headers_out; t->n = "headers_out"; return t; } static req_table_t* req_err_headers_out(request_rec *r) { req_table_t* t = apr_palloc(r->pool, sizeof(req_table_t)); t->r = r; t->t = r->err_headers_out; t->n = "err_headers_out"; return t; } static req_table_t* req_subprocess_env(request_rec *r) { req_table_t* t = apr_palloc(r->pool, sizeof(req_table_t)); t->r = r; t->t = r->subprocess_env; t->n = "subprocess_env"; return t; } static req_table_t* req_notes(request_rec *r) { req_table_t* t = apr_palloc(r->pool, sizeof(req_table_t)); t->r = r; t->t = r->notes; t->n = "notes"; return t; } static int req_ssl_is_https_field(request_rec *r) { return ap_lua_ssl_is_https(r->connection); } static int req_ap_get_server_port(request_rec *r) { return (int) ap_get_server_port(r); } static int lua_ap_rflush (lua_State *L) { int returnValue; request_rec *r; luaL_checktype(L, 1, LUA_TUSERDATA); r = ap_lua_check_request_rec(L, 1); returnValue = ap_rflush(r); lua_pushboolean(L, (returnValue == 0)); return 1; } static const char* lua_ap_options(request_rec* r) { int opts; opts = ap_allow_options(r); return apr_psprintf(r->pool, "%s %s %s %s %s %s", (opts&OPT_INDEXES) ? "Indexes" : "", (opts&OPT_INCLUDES) ? "Includes" : "", (opts&OPT_SYM_LINKS) ? "FollowSymLinks" : "", (opts&OPT_EXECCGI) ? "ExecCGI" : "", (opts&OPT_MULTI) ? "MultiViews" : "", (opts&OPT_ALL) == OPT_ALL ? "All" : "" ); } static const char* lua_ap_allowoverrides(request_rec* r) { int opts; opts = ap_allow_overrides(r); if ( (opts & OR_ALL) == OR_ALL) { return "All"; } else if (opts == OR_NONE) { return "None"; } return apr_psprintf(r->pool, "%s %s %s %s %s", (opts & OR_LIMIT) ? "Limit" : "", (opts & OR_OPTIONS) ? "Options" : "", (opts & OR_FILEINFO) ? "FileInfo" : "", (opts & OR_AUTHCFG) ? "AuthCfg" : "", (opts & OR_INDEXES) ? "Indexes" : "" ); } static int lua_ap_started(request_rec* r) { return (int)(ap_scoreboard_image->global->restart_time / 1000000); } static const char* lua_ap_basic_auth_pw(request_rec* r) { const char* pw = NULL; ap_get_basic_auth_pw(r, &pw); return pw ? pw : ""; } static int lua_ap_limit_req_body(request_rec* r) { return (int) ap_get_limit_req_body(r); } static int lua_ap_is_initial_req(request_rec *r) { return ap_is_initial_req(r); } static int lua_ap_some_auth_required(request_rec *r) { return ap_some_auth_required(r); } static int lua_ap_sendfile(lua_State *L) { apr_finfo_t file_info; const char *filename; request_rec *r; luaL_checktype(L, 1, LUA_TUSERDATA); luaL_checktype(L, 2, LUA_TSTRING); r = ap_lua_check_request_rec(L, 1); filename = lua_tostring(L, 2); apr_stat(&file_info, filename, APR_FINFO_MIN, r->pool); if (file_info.filetype == APR_NOFILE || file_info.filetype == APR_DIR) { lua_pushboolean(L, 0); } else { apr_size_t sent; apr_status_t rc; apr_file_t *file; rc = apr_file_open(&file, filename, APR_READ, APR_OS_DEFAULT, r->pool); if (rc == APR_SUCCESS) { ap_send_fd(file, r, 0, (apr_size_t)file_info.size, &sent); apr_file_close(file); lua_pushinteger(L, sent); } else { lua_pushboolean(L, 0); } } return (1); } /* * lua_apr_b64encode; r:encode_base64(string) - encodes a string to Base64 * format */ static int lua_apr_b64encode(lua_State *L) { const char *plain; char *encoded; size_t plain_len, encoded_len; request_rec *r; r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TSTRING); plain = lua_tolstring(L, 2, &plain_len); encoded_len = apr_base64_encode_len(plain_len); if (encoded_len) { encoded = apr_palloc(r->pool, encoded_len); encoded_len = apr_base64_encode(encoded, plain, plain_len); if (encoded_len > 0 && encoded[encoded_len - 1] == '\0') encoded_len--; lua_pushlstring(L, encoded, encoded_len); return 1; } return 0; } /* * lua_apr_b64decode; r:decode_base64(string) - decodes a Base64 string */ static int lua_apr_b64decode(lua_State *L) { const char *encoded; char *plain; size_t encoded_len, decoded_len; request_rec *r; r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TSTRING); encoded = lua_tolstring(L, 2, &encoded_len); decoded_len = apr_base64_decode_len(encoded); if (decoded_len) { plain = apr_palloc(r->pool, decoded_len); decoded_len = apr_base64_decode(plain, encoded); if (decoded_len > 0 && plain[decoded_len - 1] == '\0') decoded_len--; lua_pushlstring(L, plain, decoded_len); return 1; } return 0; } /* * lua_ap_unescape; r:unescape(string) - Unescapes an URL-encoded string */ static int lua_ap_unescape(lua_State *L) { const char *escaped; char *plain; size_t x, y; request_rec *r; r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TSTRING); escaped = lua_tolstring(L, 2, &x); plain = apr_pstrdup(r->pool, escaped); y = ap_unescape_urlencoded(plain); if (!y) { lua_pushstring(L, plain); return 1; } return 0; } /* * lua_ap_escape; r:escape(string) - URL-escapes a string */ static int lua_ap_escape(lua_State *L) { const char *plain; char *escaped; size_t x; request_rec *r; r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TSTRING); plain = lua_tolstring(L, 2, &x); escaped = ap_escape_urlencoded(r->pool, plain); lua_pushstring(L, escaped); return 1; } /* * lua_apr_md5; r:md5(string) - Calculates an MD5 digest of a string */ static int lua_apr_md5(lua_State *L) { const char *buffer; char *result; size_t len; request_rec *r; r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TSTRING); buffer = lua_tolstring(L, 2, &len); result = ap_md5_binary(r->pool, (const unsigned char *)buffer, len); lua_pushstring(L, result); return 1; } /* * lua_apr_sha1; r:sha1(string) - Calculates the SHA1 digest of a string */ static int lua_apr_sha1(lua_State *L) { unsigned char digest[APR_SHA1_DIGESTSIZE]; apr_sha1_ctx_t sha1; const char *buffer; char *result; size_t len; request_rec *r; r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TSTRING); result = apr_pcalloc(r->pool, sizeof(digest) * 2 + 1); buffer = lua_tolstring(L, 2, &len); apr_sha1_init(&sha1); apr_sha1_update(&sha1, buffer, len); apr_sha1_final(digest, &sha1); ap_bin2hex(digest, sizeof(digest), result); lua_pushstring(L, result); return 1; } /* * lua_apr_htpassword; r:htpassword(string [, algorithm [, cost]]) - Creates * a htpassword hash from a string */ static int lua_apr_htpassword(lua_State *L) { passwd_ctx ctx = { 0 }; request_rec *r; r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TSTRING); ctx.passwd = apr_pstrdup(r->pool, lua_tostring(L, 2)); ctx.alg = luaL_optinteger(L, 3, ALG_APMD5); ctx.cost = luaL_optinteger(L, 4, 0); ctx.pool = r->pool; ctx.out = apr_pcalloc(r->pool, MAX_PASSWD_LEN); ctx.out_len = MAX_PASSWD_LEN; if (mk_password_hash(&ctx)) { lua_pushboolean(L, 0); lua_pushstring(L, ctx.errstr); return 2; } else { lua_pushstring(L, ctx.out); } return 1; } /* * lua_apr_touch; r:touch(string [, time]) - Sets mtime of a file */ static int lua_apr_touch(lua_State *L) { request_rec *r; const char *path; apr_status_t status; apr_time_t mtime; r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TSTRING); path = lua_tostring(L, 2); mtime = (apr_time_t)luaL_optnumber(L, 3, (lua_Number)apr_time_now()); status = apr_file_mtime_set(path, mtime, r->pool); lua_pushboolean(L, (status == 0)); return 1; } /* * lua_apr_mkdir; r:mkdir(string [, permissions]) - Creates a directory */ static int lua_apr_mkdir(lua_State *L) { request_rec *r; const char *path; apr_status_t status; apr_fileperms_t perms; r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TSTRING); path = lua_tostring(L, 2); perms = luaL_optinteger(L, 3, APR_OS_DEFAULT); status = apr_dir_make(path, perms, r->pool); lua_pushboolean(L, (status == 0)); return 1; } /* * lua_apr_mkrdir; r:mkrdir(string [, permissions]) - Creates directories * recursive */ static int lua_apr_mkrdir(lua_State *L) { request_rec *r; const char *path; apr_status_t status; apr_fileperms_t perms; r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TSTRING); path = lua_tostring(L, 2); perms = luaL_optinteger(L, 3, APR_OS_DEFAULT); status = apr_dir_make_recursive(path, perms, r->pool); lua_pushboolean(L, (status == 0)); return 1; } /* * lua_apr_rmdir; r:rmdir(string) - Removes a directory */ static int lua_apr_rmdir(lua_State *L) { request_rec *r; const char *path; apr_status_t status; r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TSTRING); path = lua_tostring(L, 2); status = apr_dir_remove(path, r->pool); lua_pushboolean(L, (status == 0)); return 1; } /* * lua_apr_date_parse_rfc; r.date_parse_rfc(string) - Parses a DateTime string */ static int lua_apr_date_parse_rfc(lua_State *L) { const char *input; apr_time_t result; luaL_checktype(L, 1, LUA_TSTRING); input = lua_tostring(L, 1); result = apr_date_parse_rfc(input); if (result == 0) return 0; lua_pushnumber(L, (lua_Number)(result / APR_USEC_PER_SEC)); return 1; } /* * lua_ap_mpm_query; r:mpm_query(info) - Queries for MPM info */ static int lua_ap_mpm_query(lua_State *L) { int x, y; x = lua_tointeger(L, 1); ap_mpm_query(x, &y); lua_pushinteger(L, y); return 1; } /* * lua_ap_expr; r:expr(string) - Evaluates an expr statement. */ static int lua_ap_expr(lua_State *L) { request_rec *r; int x = 0; const char *expr, *err; ap_expr_info_t res; luaL_checktype(L, 1, LUA_TUSERDATA); luaL_checktype(L, 2, LUA_TSTRING); r = ap_lua_check_request_rec(L, 1); expr = lua_tostring(L, 2); res.filename = NULL; res.flags = 0; res.line_number = 0; res.module_index = APLOG_MODULE_INDEX; err = ap_expr_parse(r->pool, r->pool, &res, expr, NULL); if (!err) { x = ap_expr_exec(r, &res, &err); lua_pushboolean(L, x); if (x < 0) { lua_pushstring(L, err); return 2; } return 1; } else { lua_pushboolean(L, 0); lua_pushstring(L, err); return 2; } lua_pushboolean(L, 0); return 1; } /* * lua_ap_regex; r:regex(string, pattern [, flags]) * - Evaluates a regex and returns captures if matched */ static int lua_ap_regex(lua_State *L) { request_rec *r; int i, rv, flags; const char *pattern, *source; char *err; ap_regex_t regex; ap_regmatch_t matches[MODLUA_MAX_REG_MATCH+1]; luaL_checktype(L, 1, LUA_TUSERDATA); luaL_checktype(L, 2, LUA_TSTRING); luaL_checktype(L, 3, LUA_TSTRING); r = ap_lua_check_request_rec(L, 1); source = lua_tostring(L, 2); pattern = lua_tostring(L, 3); flags = luaL_optinteger(L, 4, 0); rv = ap_regcomp(®ex, pattern, flags); if (rv) { lua_pushboolean(L, 0); err = apr_palloc(r->pool, 256); ap_regerror(rv, ®ex, err, 256); lua_pushstring(L, err); return 2; } if (regex.re_nsub > MODLUA_MAX_REG_MATCH) { lua_pushboolean(L, 0); err = apr_palloc(r->pool, 64); apr_snprintf(err, 64, "regcomp found %d matches; only %d allowed.", regex.re_nsub, MODLUA_MAX_REG_MATCH); lua_pushstring(L, err); return 2; } rv = ap_regexec(®ex, source, MODLUA_MAX_REG_MATCH, matches, 0); if (rv == AP_REG_NOMATCH) { lua_pushboolean(L, 0); return 1; } lua_newtable(L); for (i = 0; i <= regex.re_nsub; i++) { lua_pushinteger(L, i); if (matches[i].rm_so >= 0 && matches[i].rm_eo >= 0) lua_pushstring(L, apr_pstrndup(r->pool, source + matches[i].rm_so, matches[i].rm_eo - matches[i].rm_so)); else lua_pushnil(L); lua_settable(L, -3); } return 1; } /* * lua_ap_scoreboard_process; r:scoreboard_process(a) - returns scoreboard info */ static int lua_ap_scoreboard_process(lua_State *L) { int i; process_score *ps_record; luaL_checktype(L, 1, LUA_TUSERDATA); luaL_checktype(L, 2, LUA_TNUMBER); i = lua_tointeger(L, 2); ps_record = ap_get_scoreboard_process(i); if (ps_record) { lua_newtable(L); lua_pushstring(L, "connections"); lua_pushnumber(L, ps_record->connections); lua_settable(L, -3); lua_pushstring(L, "keepalive"); lua_pushnumber(L, ps_record->keep_alive); lua_settable(L, -3); lua_pushstring(L, "lingering_close"); lua_pushnumber(L, ps_record->lingering_close); lua_settable(L, -3); lua_pushstring(L, "pid"); lua_pushnumber(L, ps_record->pid); lua_settable(L, -3); lua_pushstring(L, "suspended"); lua_pushnumber(L, ps_record->suspended); lua_settable(L, -3); lua_pushstring(L, "write_completion"); lua_pushnumber(L, ps_record->write_completion); lua_settable(L, -3); lua_pushstring(L, "not_accepting"); lua_pushnumber(L, ps_record->not_accepting); lua_settable(L, -3); lua_pushstring(L, "quiescing"); lua_pushnumber(L, ps_record->quiescing); lua_settable(L, -3); return 1; } return 0; } /* * lua_ap_scoreboard_worker; r:scoreboard_worker(proc, thread) - Returns thread * info */ static int lua_ap_scoreboard_worker(lua_State *L) { int i, j; worker_score *ws_record = NULL; request_rec *r = NULL; luaL_checktype(L, 1, LUA_TUSERDATA); luaL_checktype(L, 2, LUA_TNUMBER); luaL_checktype(L, 3, LUA_TNUMBER); r = ap_lua_check_request_rec(L, 1); if (!r) return 0; i = lua_tointeger(L, 2); j = lua_tointeger(L, 3); ws_record = apr_palloc(r->pool, sizeof *ws_record); ap_copy_scoreboard_worker(ws_record, i, j); if (ws_record) { lua_newtable(L); lua_pushstring(L, "access_count"); lua_pushnumber(L, ws_record->access_count); lua_settable(L, -3); lua_pushstring(L, "bytes_served"); lua_pushnumber(L, (lua_Number) ws_record->bytes_served); lua_settable(L, -3); lua_pushstring(L, "client"); lua_pushstring(L, ws_record->client); lua_settable(L, -3); lua_pushstring(L, "client64"); lua_pushstring(L, ws_record->client64); lua_settable(L, -3); lua_pushstring(L, "conn_bytes"); lua_pushnumber(L, (lua_Number) ws_record->conn_bytes); lua_settable(L, -3); lua_pushstring(L, "conn_count"); lua_pushnumber(L, ws_record->conn_count); lua_settable(L, -3); lua_pushstring(L, "generation"); lua_pushnumber(L, ws_record->generation); lua_settable(L, -3); lua_pushstring(L, "last_used"); lua_pushnumber(L, (lua_Number) ws_record->last_used); lua_settable(L, -3); lua_pushstring(L, "pid"); lua_pushnumber(L, ws_record->pid); lua_settable(L, -3); lua_pushstring(L, "request"); lua_pushstring(L, ws_record->request); lua_settable(L, -3); lua_pushstring(L, "start_time"); lua_pushnumber(L, (lua_Number) ws_record->start_time); lua_settable(L, -3); lua_pushstring(L, "status"); lua_pushnumber(L, ws_record->status); lua_settable(L, -3); lua_pushstring(L, "stop_time"); lua_pushnumber(L, (lua_Number) ws_record->stop_time); lua_settable(L, -3); lua_pushstring(L, "tid"); lua_pushinteger(L, (lua_Integer) ws_record->tid); lua_settable(L, -3); lua_pushstring(L, "vhost"); lua_pushstring(L, ws_record->vhost); lua_settable(L, -3); #ifdef HAVE_TIMES lua_pushstring(L, "stimes"); lua_pushnumber(L, ws_record->times.tms_stime); lua_settable(L, -3); lua_pushstring(L, "utimes"); lua_pushnumber(L, ws_record->times.tms_utime); lua_settable(L, -3); #endif return 1; } return 0; } /* * lua_ap_clock; r:clock() - Returns timestamp with microsecond precision */ static int lua_ap_clock(lua_State *L) { apr_time_t now; now = apr_time_now(); lua_pushnumber(L, (lua_Number) now); return 1; } /* * lua_ap_add_input_filter; r:add_input_filter(name) - Adds an input filter to * the chain */ static int lua_ap_add_input_filter(lua_State *L) { request_rec *r; const char *filterName; ap_filter_rec_t *filter; luaL_checktype(L, 1, LUA_TUSERDATA); luaL_checktype(L, 2, LUA_TSTRING); r = ap_lua_check_request_rec(L, 1); filterName = lua_tostring(L, 2); filter = ap_get_input_filter_handle(filterName); if (filter) { ap_add_input_filter_handle(filter, NULL, r, r->connection); lua_pushboolean(L, 1); } else lua_pushboolean(L, 0); return 1; } /* * lua_ap_module_info; r:module_info(mod_name) - Returns information about a * loaded module */ static int lua_ap_module_info(lua_State *L) { const char *moduleName; module *mod; luaL_checktype(L, 1, LUA_TSTRING); moduleName = lua_tostring(L, 1); mod = ap_find_linked_module(moduleName); if (mod && mod->cmds) { const command_rec *cmd; lua_newtable(L); lua_pushstring(L, "commands"); lua_newtable(L); for (cmd = mod->cmds; cmd->name; ++cmd) { lua_pushstring(L, cmd->name); lua_pushstring(L, cmd->errmsg); lua_settable(L, -3); } lua_settable(L, -3); return 1; } return 0; } /* * lua_ap_runtime_dir_relative: r:runtime_dir_relative(file): Returns the * filename as relative to the runtime dir */ static int lua_ap_runtime_dir_relative(lua_State *L) { request_rec *r; const char *file; luaL_checktype(L, 1, LUA_TUSERDATA); r = ap_lua_check_request_rec(L, 1); file = luaL_optstring(L, 2, "."); lua_pushstring(L, ap_runtime_dir_relative(r->pool, file)); return 1; } /* * lua_ap_set_document_root; r:set_document_root(path) - sets the current doc * root for the request */ static int lua_ap_set_document_root(lua_State *L) { request_rec *r; const char *root; luaL_checktype(L, 1, LUA_TUSERDATA); luaL_checktype(L, 2, LUA_TSTRING); r = ap_lua_check_request_rec(L, 1); root = lua_tostring(L, 2); ap_set_document_root(r, root); return 0; } /* * lua_ap_getdir; r:get_direntries(directory) - Gets all entries of a * directory and returns the directory info as a table */ static int lua_ap_getdir(lua_State *L) { request_rec *r; apr_dir_t *thedir; apr_finfo_t file_info; apr_status_t status; const char *directory; luaL_checktype(L, 1, LUA_TUSERDATA); luaL_checktype(L, 2, LUA_TSTRING); r = ap_lua_check_request_rec(L, 1); directory = lua_tostring(L, 2); if (apr_dir_open(&thedir, directory, r->pool) == APR_SUCCESS) { int i = 0; lua_newtable(L); do { status = apr_dir_read(&file_info, APR_FINFO_NAME, thedir); if (APR_STATUS_IS_INCOMPLETE(status)) { continue; /* ignore un-stat()able files */ } else if (status != APR_SUCCESS) { break; } lua_pushinteger(L, ++i); lua_pushstring(L, file_info.name); lua_settable(L, -3); } while (1); apr_dir_close(thedir); return 1; } else { return 0; } } /* * lua_ap_stat; r:stat(filename [, wanted]) - Runs stat on a file and * returns the file info as a table */ static int lua_ap_stat(lua_State *L) { request_rec *r; const char *filename; apr_finfo_t file_info; apr_int32_t wanted; luaL_checktype(L, 1, LUA_TUSERDATA); luaL_checktype(L, 2, LUA_TSTRING); r = ap_lua_check_request_rec(L, 1); filename = lua_tostring(L, 2); wanted = luaL_optinteger(L, 3, APR_FINFO_MIN); if (apr_stat(&file_info, filename, wanted, r->pool) == OK) { lua_newtable(L); if (wanted & APR_FINFO_MTIME) { lua_pushstring(L, "mtime"); lua_pushnumber(L, (lua_Number) file_info.mtime); lua_settable(L, -3); } if (wanted & APR_FINFO_ATIME) { lua_pushstring(L, "atime"); lua_pushnumber(L, (lua_Number) file_info.atime); lua_settable(L, -3); } if (wanted & APR_FINFO_CTIME) { lua_pushstring(L, "ctime"); lua_pushnumber(L, (lua_Number) file_info.ctime); lua_settable(L, -3); } if (wanted & APR_FINFO_SIZE) { lua_pushstring(L, "size"); lua_pushnumber(L, (lua_Number) file_info.size); lua_settable(L, -3); } if (wanted & APR_FINFO_TYPE) { lua_pushstring(L, "filetype"); lua_pushinteger(L, file_info.filetype); lua_settable(L, -3); } if (wanted & APR_FINFO_PROT) { lua_pushstring(L, "protection"); lua_pushinteger(L, file_info.protection); lua_settable(L, -3); } return 1; } else { return 0; } } /* * lua_ap_loaded_modules; r:loaded_modules() - Returns a list of loaded modules */ static int lua_ap_loaded_modules(lua_State *L) { int i; lua_newtable(L); for (i = 0; ap_loaded_modules[i] && ap_loaded_modules[i]->name; i++) { lua_pushinteger(L, i + 1); lua_pushstring(L, ap_loaded_modules[i]->name); lua_settable(L, -3); } return 1; } /* * lua_ap_server_info; r:server_info() - Returns server info, such as the * executable filename, server root, mpm etc */ static int lua_ap_server_info(lua_State *L) { lua_newtable(L); lua_pushstring(L, "server_executable"); lua_pushstring(L, ap_server_argv0); lua_settable(L, -3); lua_pushstring(L, "server_root"); lua_pushstring(L, ap_server_root); lua_settable(L, -3); lua_pushstring(L, "scoreboard_fname"); lua_pushstring(L, ap_scoreboard_fname); lua_settable(L, -3); lua_pushstring(L, "server_mpm"); lua_pushstring(L, ap_show_mpm()); lua_settable(L, -3); return 1; } /* * === Auto-scraped functions === */ /** * ap_set_context_info: Set context_prefix and context_document_root. * @param r The request * @param prefix the URI prefix, without trailing slash * @param document_root the corresponding directory on disk, without trailing * slash * @note If one of prefix of document_root is NULL, the corrsponding * property will not be changed. */ static int lua_ap_set_context_info(lua_State *L) { request_rec *r; const char *prefix; const char *document_root; luaL_checktype(L, 1, LUA_TUSERDATA); r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TSTRING); prefix = lua_tostring(L, 2); luaL_checktype(L, 3, LUA_TSTRING); document_root = lua_tostring(L, 3); ap_set_context_info(r, prefix, document_root); return 0; } /** * ap_os_escape_path (apr_pool_t *p, const char *path, int partial) * convert an OS path to a URL in an OS dependant way. * @param p The pool to allocate from * @param path The path to convert * @param partial if set, assume that the path will be appended to something * with a '/' in it (and thus does not prefix "./") * @return The converted URL */ static int lua_ap_os_escape_path(lua_State *L) { char *returnValue; request_rec *r; const char *path; int partial = 0; luaL_checktype(L, 1, LUA_TUSERDATA); r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TSTRING); path = lua_tostring(L, 2); if (lua_isboolean(L, 3)) partial = lua_toboolean(L, 3); returnValue = ap_os_escape_path(r->pool, path, partial); lua_pushstring(L, returnValue); return 1; } /** * ap_escape_logitem (apr_pool_t *p, const char *str) * Escape a string for logging * @param p The pool to allocate from * @param str The string to escape * @return The escaped string */ static int lua_ap_escape_logitem(lua_State *L) { char *returnValue; request_rec *r; const char *str; luaL_checktype(L, 1, LUA_TUSERDATA); r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TSTRING); str = lua_tostring(L, 2); returnValue = ap_escape_logitem(r->pool, str); lua_pushstring(L, returnValue); return 1; } /** * ap_strcmp_match (const char *str, const char *expected) * Determine if a string matches a pattern containing the wildcards '?' or '*' * @param str The string to check * @param expected The pattern to match against * @param ignoreCase Whether to ignore case when matching * @return 1 if the two strings match, 0 otherwise */ static int lua_ap_strcmp_match(lua_State *L) { int returnValue; const char *str; const char *expected; int ignoreCase = 0; luaL_checktype(L, 1, LUA_TSTRING); str = lua_tostring(L, 1); luaL_checktype(L, 2, LUA_TSTRING); expected = lua_tostring(L, 2); if (lua_isboolean(L, 3)) ignoreCase = lua_toboolean(L, 3); if (!ignoreCase) returnValue = ap_strcmp_match(str, expected); else returnValue = ap_strcasecmp_match(str, expected); lua_pushboolean(L, (!returnValue)); return 1; } /** * ap_set_keepalive (request_rec *r) * Set the keepalive status for this request * @param r The current request * @return 1 if keepalive can be set, 0 otherwise */ static int lua_ap_set_keepalive(lua_State *L) { int returnValue; request_rec *r; luaL_checktype(L, 1, LUA_TUSERDATA); r = ap_lua_check_request_rec(L, 1); returnValue = ap_set_keepalive(r); lua_pushboolean(L, returnValue); return 1; } /** * ap_make_etag (request_rec *r, int force_weak) * Construct an entity tag from the resource information. If it's a real * file, build in some of the file characteristics. * @param r The current request * @param force_weak Force the entity tag to be weak - it could be modified * again in as short an interval. * @return The entity tag */ static int lua_ap_make_etag(lua_State *L) { char *returnValue; request_rec *r; int force_weak; luaL_checktype(L, 1, LUA_TUSERDATA); r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TBOOLEAN); force_weak = (int)luaL_optinteger(L, 2, 0); returnValue = ap_make_etag(r, force_weak); lua_pushstring(L, returnValue); return 1; } /** * ap_send_interim_response (request_rec *r, int send_headers) * Send an interim (HTTP 1xx) response immediately. * @param r The request * @param send_headers Whether to send&clear headers in r->headers_out */ static int lua_ap_send_interim_response(lua_State *L) { request_rec *r; int send_headers = 0; luaL_checktype(L, 1, LUA_TUSERDATA); r = ap_lua_check_request_rec(L, 1); if (lua_isboolean(L, 2)) send_headers = lua_toboolean(L, 2); ap_send_interim_response(r, send_headers); return 0; } /** * ap_custom_response (request_rec *r, int status, const char *string) * Install a custom response handler for a given status * @param r The current request * @param status The status for which the custom response should be used * @param string The custom response. This can be a static string, a file * or a URL */ static int lua_ap_custom_response(lua_State *L) { request_rec *r; int status; const char *string; luaL_checktype(L, 1, LUA_TUSERDATA); r = ap_lua_check_request_rec(L, 1); luaL_checktype(L, 2, LUA_TNUMBER); status = lua_tointeger(L, 2); luaL_checktype(L, 3, LUA_TSTRING); string = lua_tostring(L, 3); ap_custom_response(r, status, string); return 0; } /** * ap_exists_config_define (const char *name) * Check for a definition from the server command line * @param name The define to check for * @return 1 if defined, 0 otherwise */ static int lua_ap_exists_config_define(lua_State *L) { int returnValue; const char *name; luaL_checktype(L, 1, LUA_TSTRING); name = lua_tostring(L, 1); returnValue = ap_exists_config_define(name); lua_pushboolean(L, returnValue); return 1; } static int lua_ap_get_server_name_for_url(lua_State *L) { const char *servername; request_rec *r; luaL_checktype(L, 1, LUA_TUSERDATA); r = ap_lua_check_request_rec(L, 1); servername = ap_get_server_name_for_url(r); lua_pushstring(L, servername); return 1; } /* ap_state_query (int query_code) item starts a new field */ static int lua_ap_state_query(lua_State *L) { int returnValue; int query_code; luaL_checktype(L, 1, LUA_TNUMBER); query_code = lua_tointeger(L, 1); returnValue = ap_state_query(query_code); lua_pushinteger(L, returnValue); return 1; } /* * lua_ap_usleep; r:usleep(microseconds) * - Sleep for the specified number of microseconds. */ static int lua_ap_usleep(lua_State *L) { apr_interval_time_t msec; luaL_checktype(L, 1, LUA_TNUMBER); msec = (apr_interval_time_t)lua_tonumber(L, 1); apr_sleep(msec); return 0; } /* END dispatch methods for request_rec fields */ static int req_dispatch(lua_State *L) { apr_hash_t *dispatch; req_fun_t *rft; request_rec *r = ap_lua_check_request_rec(L, 1); const char *name = luaL_checkstring(L, 2); lua_pop(L, 2); lua_getfield(L, LUA_REGISTRYINDEX, "Apache2.Request.dispatch"); dispatch = lua_touserdata(L, 1); lua_pop(L, 1); rft = apr_hash_get(dispatch, name, APR_HASH_KEY_STRING); if (rft) { switch (rft->type) { case APL_REQ_FUNTYPE_TABLE:{ req_table_t *rs; req_field_apr_table_f func = (req_field_apr_table_f)rft->fun; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01486) "request_rec->dispatching %s -> apr table", name); rs = (*func)(r); ap_lua_push_apr_table(L, rs); return 1; } case APL_REQ_FUNTYPE_LUACFUN:{ lua_CFunction func = (lua_CFunction)rft->fun; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01487) "request_rec->dispatching %s -> lua_CFunction", name); lua_pushcfunction(L, func); return 1; } case APL_REQ_FUNTYPE_STRING:{ req_field_string_f func = (req_field_string_f)rft->fun; char *rs; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01488) "request_rec->dispatching %s -> string", name); rs = (*func) (r); lua_pushstring(L, rs); return 1; } case APL_REQ_FUNTYPE_INT:{ req_field_int_f func = (req_field_int_f)rft->fun; int rs; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01489) "request_rec->dispatching %s -> int", name); rs = (*func) (r); lua_pushinteger(L, rs); return 1; } case APL_REQ_FUNTYPE_BOOLEAN:{ req_field_int_f func = (req_field_int_f)rft->fun; int rs; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01490) "request_rec->dispatching %s -> boolean", name); rs = (*func) (r); lua_pushboolean(L, rs); return 1; } } } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01491) "nothing for %s", name); return 0; } /* helper function for the logging functions below */ static int req_log_at(lua_State *L, int level) { const char *msg; request_rec *r = ap_lua_check_request_rec(L, 1); lua_Debug dbg; lua_getstack(L, 1, &dbg); lua_getinfo(L, "Sl", &dbg); msg = luaL_checkstring(L, 2); /* Intentional no APLOGNO */ ap_log_rerror(dbg.source, dbg.currentline, APLOG_MODULE_INDEX, level, 0, r, "%s", msg); return 0; } /* r:debug(String) and friends which use apache logging */ static int req_emerg(lua_State *L) { return req_log_at(L, APLOG_EMERG); } static int req_alert(lua_State *L) { return req_log_at(L, APLOG_ALERT); } static int req_crit(lua_State *L) { return req_log_at(L, APLOG_CRIT); } static int req_err(lua_State *L) { return req_log_at(L, APLOG_ERR); } static int req_warn(lua_State *L) { return req_log_at(L, APLOG_WARNING); } static int req_notice(lua_State *L) { return req_log_at(L, APLOG_NOTICE); } static int req_info(lua_State *L) { return req_log_at(L, APLOG_INFO); } static int req_debug(lua_State *L) { return req_log_at(L, APLOG_DEBUG); } static int lua_ivm_get(lua_State *L) { const char *key, *raw_key; apr_pool_t *pool; lua_ivm_object *object = NULL; request_rec *r = ap_lua_check_request_rec(L, 1); key = luaL_checkstring(L, 2); raw_key = apr_pstrcat(r->pool, "lua_ivm_", key, NULL); apr_global_mutex_lock(lua_ivm_mutex); pool = *((apr_pool_t**) apr_shm_baseaddr_get(lua_ivm_shm)); apr_pool_userdata_get((void **)&object, raw_key, pool); if (object) { if (object->type == LUA_TBOOLEAN) lua_pushboolean(L, (int) object->number); else if (object->type == LUA_TNUMBER) lua_pushnumber(L, object->number); else if (object->type == LUA_TSTRING) lua_pushlstring(L, object->vb.buf, object->size); apr_global_mutex_unlock(lua_ivm_mutex); return 1; } else { apr_global_mutex_unlock(lua_ivm_mutex); return 0; } } static int lua_ivm_set(lua_State *L) { const char *key, *raw_key; const char *value = NULL; apr_pool_t *pool; size_t str_len; lua_ivm_object *object = NULL; request_rec *r = ap_lua_check_request_rec(L, 1); key = luaL_checkstring(L, 2); luaL_checkany(L, 3); raw_key = apr_pstrcat(r->pool, "lua_ivm_", key, NULL); apr_global_mutex_lock(lua_ivm_mutex); pool = *((apr_pool_t**) apr_shm_baseaddr_get(lua_ivm_shm)); apr_pool_userdata_get((void **)&object, raw_key, pool); if (!object) { object = apr_pcalloc(pool, sizeof(lua_ivm_object)); ap_varbuf_init(pool, &object->vb, 2); object->size = 1; object->vb_size = 1; } object->type = lua_type(L, 3); if (object->type == LUA_TNUMBER) object->number = lua_tonumber(L, 3); else if (object->type == LUA_TBOOLEAN) object->number = lua_tonumber(L, 3); else if (object->type == LUA_TSTRING) { value = lua_tolstring(L, 3, &str_len); str_len++; /* add trailing \0 */ if ( str_len > object->vb_size) { ap_varbuf_grow(&object->vb, str_len); object->vb_size = str_len; } object->size = str_len-1; memset(object->vb.buf, 0, str_len); memcpy(object->vb.buf, value, str_len-1); } apr_pool_userdata_set(object, raw_key, NULL, pool); apr_global_mutex_unlock(lua_ivm_mutex); return 0; } static int lua_get_cookie(lua_State *L) { const char *key, *cookie; request_rec *r = ap_lua_check_request_rec(L, 1); key = luaL_checkstring(L, 2); cookie = NULL; ap_cookie_read(r, key, &cookie, 0); if (cookie != NULL) { lua_pushstring(L, cookie); return 1; } return 0; } static int lua_set_cookie(lua_State *L) { const char *key, *value, *out, *path = "", *domain = ""; const char *strexpires = "", *strdomain = "", *strpath = ""; int secure = 0, expires = 0, httponly = 0; char cdate[APR_RFC822_DATE_LEN+1]; apr_status_t rv; request_rec *r = ap_lua_check_request_rec(L, 1); /* New >= 2.4.8 method: */ if (lua_istable(L, 2)) { /* key */ lua_pushstring(L, "key"); lua_gettable(L, -2); key = luaL_checkstring(L, -1); lua_pop(L, 1); /* value */ lua_pushstring(L, "value"); lua_gettable(L, -2); value = luaL_checkstring(L, -1); lua_pop(L, 1); /* expiry */ lua_pushstring(L, "expires"); lua_gettable(L, -2); expires = (int)luaL_optinteger(L, -1, 0); lua_pop(L, 1); /* secure */ lua_pushstring(L, "secure"); lua_gettable(L, -2); if (lua_isboolean(L, -1)) { secure = lua_toboolean(L, -1); } lua_pop(L, 1); /* httponly */ lua_pushstring(L, "httponly"); lua_gettable(L, -2); if (lua_isboolean(L, -1)) { httponly = lua_toboolean(L, -1); } lua_pop(L, 1); /* path */ lua_pushstring(L, "path"); lua_gettable(L, -2); path = luaL_optstring(L, -1, "/"); lua_pop(L, 1); /* domain */ lua_pushstring(L, "domain"); lua_gettable(L, -2); domain = luaL_optstring(L, -1, ""); lua_pop(L, 1); } /* Old <= 2.4.7 method: */ else { key = luaL_checkstring(L, 2); value = luaL_checkstring(L, 3); secure = 0; if (lua_isboolean(L, 4)) { secure = lua_toboolean(L, 4); } expires = luaL_optinteger(L, 5, 0); } /* Calculate expiry if set */ if (expires > 0) { rv = apr_rfc822_date(cdate, apr_time_from_sec(expires)); if (rv == APR_SUCCESS) { strexpires = apr_psprintf(r->pool, "Expires=%s;", cdate); } } /* Create path segment */ if (path != NULL && strlen(path) > 0) { strpath = apr_psprintf(r->pool, "Path=%s;", path); } /* Create domain segment */ if (domain != NULL && strlen(domain) > 0) { /* Domain does NOT like quotes in most browsers, so let's avoid that */ strdomain = apr_psprintf(r->pool, "Domain=%s;", domain); } /* URL-encode key/value */ value = ap_escape_urlencoded(r->pool, value); key = ap_escape_urlencoded(r->pool, key); /* Create the header */ out = apr_psprintf(r->pool, "%s=%s; %s %s %s %s %s", key, value, secure ? "Secure;" : "", expires ? strexpires : "", httponly ? "HttpOnly;" : "", *strdomain ? strdomain : "", *strpath ? strpath : ""); apr_table_add(r->err_headers_out, "Set-Cookie", out); return 0; } static apr_uint64_t ap_ntoh64(const apr_uint64_t *input) { apr_uint64_t rval; unsigned char *data = (unsigned char *)&rval; if (APR_IS_BIGENDIAN) { return *input; } data[0] = *input >> 56; data[1] = *input >> 48; data[2] = *input >> 40; data[3] = *input >> 32; data[4] = *input >> 24; data[5] = *input >> 16; data[6] = *input >> 8; data[7] = *input >> 0; return rval; } static int lua_websocket_greet(lua_State *L) { const char *key = NULL; unsigned char digest[APR_SHA1_DIGESTSIZE]; apr_sha1_ctx_t sha1; char *encoded; int encoded_len; request_rec *r = ap_lua_check_request_rec(L, 1); key = apr_table_get(r->headers_in, "Sec-WebSocket-Key"); if (key != NULL) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03011) "Websocket: Got websocket key: %s", key); key = apr_pstrcat(r->pool, key, "258EAFA5-E914-47DA-95CA-C5AB0DC85B11", NULL); apr_sha1_init(&sha1); apr_sha1_update(&sha1, key, strlen(key)); apr_sha1_final(digest, &sha1); encoded_len = apr_base64_encode_len(APR_SHA1_DIGESTSIZE); if (encoded_len) { encoded = apr_palloc(r->pool, encoded_len); encoded_len = apr_base64_encode(encoded, (char*) digest, APR_SHA1_DIGESTSIZE); r->status = 101; apr_table_setn(r->headers_out, "Upgrade", "websocket"); apr_table_setn(r->headers_out, "Connection", "Upgrade"); apr_table_setn(r->headers_out, "Sec-WebSocket-Accept", encoded); /* Trick httpd into NOT using the chunked filter, IMPORTANT!!!111*/ apr_table_setn(r->headers_out, "Transfer-Encoding", "chunked"); r->clength = 0; r->bytes_sent = 0; r->read_chunked = 0; ap_rflush(r); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03012) "Websocket: Upgraded from HTTP to Websocket"); lua_pushboolean(L, 1); return 1; } } ap_log_rerror(APLOG_MARK, APLOG_NOTICE, 0, r, APLOGNO(02666) "Websocket: Upgrade from HTTP to Websocket failed"); return 0; } static apr_status_t lua_websocket_readbytes(conn_rec* c, char* buffer, apr_off_t len) { apr_bucket_brigade *brigade = apr_brigade_create(c->pool, c->bucket_alloc); apr_status_t rv; rv = ap_get_brigade(c->input_filters, brigade, AP_MODE_READBYTES, APR_BLOCK_READ, len); if (rv == APR_SUCCESS) { if (!APR_BRIGADE_EMPTY(brigade)) { apr_bucket* bucket = APR_BRIGADE_FIRST(brigade); const char* data = NULL; apr_size_t data_length = 0; rv = apr_bucket_read(bucket, &data, &data_length, APR_BLOCK_READ); if (rv == APR_SUCCESS) { memcpy(buffer, data, len); } apr_bucket_delete(bucket); } } apr_brigade_cleanup(brigade); return rv; } static int lua_websocket_peek(lua_State *L) { apr_status_t rv; apr_bucket_brigade *brigade; request_rec *r = ap_lua_check_request_rec(L, 1); brigade = apr_brigade_create(r->connection->pool, r->connection->bucket_alloc); rv = ap_get_brigade(r->connection->input_filters, brigade, AP_MODE_READBYTES, APR_NONBLOCK_READ, 1); if (rv == APR_SUCCESS) { lua_pushboolean(L, 1); } else { lua_pushboolean(L, 0); } apr_brigade_cleanup(brigade); return 1; } static int lua_websocket_read(lua_State *L) { apr_socket_t *sock; apr_status_t rv; int do_read = 1; int n = 0; apr_size_t len = 1; apr_size_t plen = 0; unsigned short payload_short = 0; apr_uint64_t payload_long = 0; unsigned char *mask_bytes; char byte; int plaintext; request_rec *r = ap_lua_check_request_rec(L, 1); plaintext = ap_lua_ssl_is_https(r->connection) ? 0 : 1; mask_bytes = apr_pcalloc(r->pool, 4); sock = ap_get_conn_socket(r->connection); while (do_read) { do_read = 0; /* Get opcode and FIN bit */ if (plaintext) { rv = apr_socket_recv(sock, &byte, &len); } else { rv = lua_websocket_readbytes(r->connection, &byte, 1); } if (rv == APR_SUCCESS) { unsigned char ubyte, fin, opcode, mask, payload; ubyte = (unsigned char)byte; /* fin bit is the first bit */ fin = ubyte >> (CHAR_BIT - 1); /* opcode is the last four bits (there's 3 reserved bits we don't care about) */ opcode = ubyte & 0xf; /* Get the payload length and mask bit */ if (plaintext) { rv = apr_socket_recv(sock, &byte, &len); } else { rv = lua_websocket_readbytes(r->connection, &byte, 1); } if (rv == APR_SUCCESS) { ubyte = (unsigned char)byte; /* Mask is the first bit */ mask = ubyte >> (CHAR_BIT - 1); /* Payload is the last 7 bits */ payload = ubyte & 0x7f; plen = payload; /* Extended payload? */ if (payload == 126) { len = 2; if (plaintext) { /* XXX: apr_socket_recv does not receive len bits, only up to len bits! */ rv = apr_socket_recv(sock, (char*) &payload_short, &len); } else { rv = lua_websocket_readbytes(r->connection, (char*) &payload_short, 2); } payload_short = ntohs(payload_short); if (rv == APR_SUCCESS) { plen = payload_short; } else { return 0; } } /* Super duper extended payload? */ if (payload == 127) { len = 8; if (plaintext) { rv = apr_socket_recv(sock, (char*) &payload_long, &len); } else { rv = lua_websocket_readbytes(r->connection, (char*) &payload_long, 8); } if (rv == APR_SUCCESS) { plen = ap_ntoh64(&payload_long); } else { return 0; } } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03210) "Websocket: Reading %" APR_SIZE_T_FMT " (%s) bytes, masking is %s. %s", plen, (payload >= 126) ? "extra payload" : "no extra payload", mask ? "on" : "off", fin ? "This is a final frame" : "more to follow"); if (mask) { len = 4; if (plaintext) { rv = apr_socket_recv(sock, (char*) mask_bytes, &len); } else { rv = lua_websocket_readbytes(r->connection, (char*) mask_bytes, 4); } if (rv != APR_SUCCESS) { return 0; } } if (plen < (HUGE_STRING_LEN*1024) && plen > 0) { apr_size_t remaining = plen; apr_size_t received; apr_off_t at = 0; char *buffer = apr_palloc(r->pool, plen+1); buffer[plen] = 0; if (plaintext) { while (remaining > 0) { received = remaining; rv = apr_socket_recv(sock, buffer+at, &received); if (received > 0 ) { remaining -= received; at += received; } } ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Websocket: Frame contained %" APR_OFF_T_FMT " bytes, pushed to Lua stack", at); } else { rv = lua_websocket_readbytes(r->connection, buffer, remaining); ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Websocket: SSL Frame contained %" APR_SIZE_T_FMT " bytes, "\ "pushed to Lua stack", remaining); } if (mask) { for (n = 0; n < plen; n++) { buffer[n] ^= mask_bytes[n%4]; } } lua_pushlstring(L, buffer, (size_t) plen); /* push to stack */ lua_pushboolean(L, fin); /* push FIN bit to stack as boolean */ return 2; } /* Decide if we need to react to the opcode or not */ if (opcode == 0x09) { /* ping */ char frame[2]; plen = 2; frame[0] = 0x8A; frame[1] = 0; apr_socket_send(sock, frame, &plen); /* Pong! */ do_read = 1; } } } } return 0; } static int lua_websocket_write(lua_State *L) { const char *string; apr_status_t rv; size_t len; int raw = 0; char prelude; request_rec *r = ap_lua_check_request_rec(L, 1); if (lua_isboolean(L, 3)) { raw = lua_toboolean(L, 3); } string = lua_tolstring(L, 2, &len); if (raw != 1) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03013) "Websocket: Writing framed message to client"); prelude = 0x81; /* text frame, FIN */ ap_rputc(prelude, r); if (len < 126) { ap_rputc(len, r); } else if (len < 65535) { apr_uint16_t slen = len; ap_rputc(126, r); slen = htons(slen); ap_rwrite((char*) &slen, 2, r); } else { apr_uint64_t llen = len; ap_rputc(127, r); llen = ap_ntoh64(&llen); /* ntoh doubles as hton */ ap_rwrite((char*) &llen, 8, r); } } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03014) "Websocket: Writing raw message to client"); } ap_rwrite(string, len, r); rv = ap_rflush(r); if (rv == APR_SUCCESS) { lua_pushboolean(L, 1); } else { lua_pushboolean(L, 0); } return 1; } static int lua_websocket_close(lua_State *L) { apr_socket_t *sock; char prelude[2]; request_rec *r = ap_lua_check_request_rec(L, 1); sock = ap_get_conn_socket(r->connection); /* Send a header that says: socket is closing. */ prelude[0] = 0x88; /* closing socket opcode */ prelude[1] = 0; /* zero length frame */ ap_rwrite(prelude, 2, r); /* Close up tell the MPM and filters to back off */ apr_socket_close(sock); r->output_filters = NULL; r->connection->keepalive = AP_CONN_CLOSE; return 0; } static int lua_websocket_ping(lua_State *L) { apr_socket_t *sock; apr_size_t plen; char prelude[2]; apr_status_t rv; request_rec *r = ap_lua_check_request_rec(L, 1); sock = ap_get_conn_socket(r->connection); /* Send a header that says: PING. */ prelude[0] = 0x89; /* ping opcode */ prelude[1] = 0; plen = 2; apr_socket_send(sock, prelude, &plen); /* Get opcode and FIN bit from pong */ plen = 2; rv = apr_socket_recv(sock, prelude, &plen); if (rv == APR_SUCCESS) { unsigned char opcode = prelude[0]; unsigned char len = prelude[1]; unsigned char mask = len >> 7; if (mask) len -= 128; plen = len; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03015) "Websocket: Got PONG opcode: %x", opcode); if (opcode == 0x8A) { lua_pushboolean(L, 1); } else { lua_pushboolean(L, 0); } if (plen > 0) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Websocket: Reading %" APR_SIZE_T_FMT " bytes of PONG", plen); return 1; } if (mask) { plen = 2; apr_socket_recv(sock, prelude, &plen); plen = 2; apr_socket_recv(sock, prelude, &plen); } } else { lua_pushboolean(L, 0); } return 1; } #define APLUA_REQ_TRACE(lev) static int req_trace##lev(lua_State *L) \ { \ return req_log_at(L, APLOG_TRACE##lev); \ } APLUA_REQ_TRACE(1) APLUA_REQ_TRACE(2) APLUA_REQ_TRACE(3) APLUA_REQ_TRACE(4) APLUA_REQ_TRACE(5) APLUA_REQ_TRACE(6) APLUA_REQ_TRACE(7) APLUA_REQ_TRACE(8) /* handle r.status = 201 */ static int req_newindex(lua_State *L) { const char *key; /* request_rec* r = lua_touserdata(L, lua_upvalueindex(1)); */ /* const char* key = luaL_checkstring(L, -2); */ request_rec *r = ap_lua_check_request_rec(L, 1); key = luaL_checkstring(L, 2); if (0 == strcmp("args", key)) { const char *value = luaL_checkstring(L, 3); r->args = apr_pstrdup(r->pool, value); return 0; } if (0 == strcmp("content_type", key)) { const char *value = luaL_checkstring(L, 3); ap_set_content_type(r, apr_pstrdup(r->pool, value)); return 0; } if (0 == strcmp("filename", key)) { const char *value = luaL_checkstring(L, 3); r->filename = apr_pstrdup(r->pool, value); return 0; } if (0 == strcmp("handler", key)) { const char *value = luaL_checkstring(L, 3); r->handler = apr_pstrdup(r->pool, value); return 0; } if (0 == strcmp("proxyreq", key)) { int value = luaL_checkinteger(L, 3); r->proxyreq = value; return 0; } if (0 == strcmp("status", key)) { int code = luaL_checkinteger(L, 3); r->status = code; return 0; } if (0 == strcmp("uri", key)) { const char *value = luaL_checkstring(L, 3); r->uri = apr_pstrdup(r->pool, value); return 0; } if (0 == strcmp("user", key)) { const char *value = luaL_checkstring(L, 3); r->user = apr_pstrdup(r->pool, value); return 0; } lua_pushstring(L, apr_psprintf(r->pool, "Property [%s] may not be set on a request_rec", key)); lua_error(L); return 0; } /* helper function for walking config trees */ static void read_cfg_tree(lua_State *L, request_rec *r, ap_directive_t *rcfg) { int x = 0; const char* value; ap_directive_t *cfg; lua_newtable(L); for (cfg = rcfg; cfg; cfg = cfg->next) { x++; lua_pushnumber(L, x); lua_newtable(L); value = apr_psprintf(r->pool, "%s %s", cfg->directive, cfg->args); lua_pushstring(L, "directive"); lua_pushstring(L, value); lua_settable(L, -3); lua_pushstring(L, "file"); lua_pushstring(L, cfg->filename); lua_settable(L, -3); lua_pushstring(L, "line"); lua_pushnumber(L, cfg->line_num); lua_settable(L, -3); if (cfg->first_child) { lua_pushstring(L, "children"); read_cfg_tree(L, r, cfg->first_child); lua_settable(L, -3); } lua_settable(L, -3); } } static int lua_ap_get_config(lua_State *L) { request_rec *r = ap_lua_check_request_rec(L, 1); read_cfg_tree(L, r, ap_conftree); return 1; } /* Hack, hack, hack...! TODO: Make this actually work properly */ static int lua_ap_get_active_config(lua_State *L) { ap_directive_t *subdir; ap_directive_t *dir = ap_conftree; request_rec *r = ap_lua_check_request_rec(L, 1); for (dir = ap_conftree; dir; dir = dir->next) { if (ap_strcasestr(dir->directive, "first_child) { for (subdir = dir->first_child; subdir; subdir = subdir->next) { if (ap_strcasecmp_match(subdir->directive, "servername") && !ap_strcasecmp_match(r->hostname, subdir->args)) { read_cfg_tree(L, r, dir->first_child); return 1; } if (ap_strcasecmp_match(subdir->directive, "serveralias") && !ap_strcasecmp_match(r->hostname, subdir->args)) { read_cfg_tree(L, r, dir->first_child); return 1; } } } } return 0; } static const struct luaL_Reg request_methods[] = { {"__index", req_dispatch}, {"__newindex", req_newindex}, /* {"__newindex", req_set_field}, */ {NULL, NULL} }; static const struct luaL_Reg connection_methods[] = { {NULL, NULL} }; static const char* lua_ap_auth_name(request_rec* r) { const char *name; name = ap_auth_name(r); return name ? name : ""; } static const char* lua_ap_get_server_name(request_rec* r) { const char *name; name = ap_get_server_name(r); return name ? name : "localhost"; } static const struct luaL_Reg server_methods[] = { {NULL, NULL} }; static req_fun_t *makefun(const void *fun, int type, apr_pool_t *pool) { req_fun_t *rft = apr_palloc(pool, sizeof(req_fun_t)); rft->fun = fun; rft->type = type; return rft; } void ap_lua_load_request_lmodule(lua_State *L, apr_pool_t *p) { apr_hash_t *dispatch = apr_hash_make(p); apr_hash_set(dispatch, "puts", APR_HASH_KEY_STRING, makefun(&req_puts, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "write", APR_HASH_KEY_STRING, makefun(&req_write, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "document_root", APR_HASH_KEY_STRING, makefun(&req_document_root, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "context_prefix", APR_HASH_KEY_STRING, makefun(&req_context_prefix, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "context_document_root", APR_HASH_KEY_STRING, makefun(&req_context_document_root, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "parseargs", APR_HASH_KEY_STRING, makefun(&req_parseargs, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "parsebody", APR_HASH_KEY_STRING, makefun(&req_parsebody, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "debug", APR_HASH_KEY_STRING, makefun(&req_debug, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "info", APR_HASH_KEY_STRING, makefun(&req_info, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "notice", APR_HASH_KEY_STRING, makefun(&req_notice, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "warn", APR_HASH_KEY_STRING, makefun(&req_warn, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "err", APR_HASH_KEY_STRING, makefun(&req_err, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "crit", APR_HASH_KEY_STRING, makefun(&req_crit, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "alert", APR_HASH_KEY_STRING, makefun(&req_alert, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "emerg", APR_HASH_KEY_STRING, makefun(&req_emerg, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "trace1", APR_HASH_KEY_STRING, makefun(&req_trace1, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "trace2", APR_HASH_KEY_STRING, makefun(&req_trace2, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "trace3", APR_HASH_KEY_STRING, makefun(&req_trace3, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "trace4", APR_HASH_KEY_STRING, makefun(&req_trace4, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "trace5", APR_HASH_KEY_STRING, makefun(&req_trace5, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "trace6", APR_HASH_KEY_STRING, makefun(&req_trace6, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "trace7", APR_HASH_KEY_STRING, makefun(&req_trace7, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "trace8", APR_HASH_KEY_STRING, makefun(&req_trace8, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "add_output_filter", APR_HASH_KEY_STRING, makefun(&req_add_output_filter, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "construct_url", APR_HASH_KEY_STRING, makefun(&req_construct_url, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "escape_html", APR_HASH_KEY_STRING, makefun(&req_escape_html, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "ssl_var_lookup", APR_HASH_KEY_STRING, makefun(&req_ssl_var_lookup, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "is_https", APR_HASH_KEY_STRING, makefun(&req_ssl_is_https_field, APL_REQ_FUNTYPE_BOOLEAN, p)); apr_hash_set(dispatch, "assbackwards", APR_HASH_KEY_STRING, makefun(&req_assbackwards_field, APL_REQ_FUNTYPE_BOOLEAN, p)); apr_hash_set(dispatch, "status", APR_HASH_KEY_STRING, makefun(&req_status_field, APL_REQ_FUNTYPE_INT, p)); apr_hash_set(dispatch, "protocol", APR_HASH_KEY_STRING, makefun(&req_protocol_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "range", APR_HASH_KEY_STRING, makefun(&req_range_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "content_type", APR_HASH_KEY_STRING, makefun(&req_content_type_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "content_encoding", APR_HASH_KEY_STRING, makefun(&req_content_encoding_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "ap_auth_type", APR_HASH_KEY_STRING, makefun(&req_ap_auth_type_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "unparsed_uri", APR_HASH_KEY_STRING, makefun(&req_unparsed_uri_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "user", APR_HASH_KEY_STRING, makefun(&req_user_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "filename", APR_HASH_KEY_STRING, makefun(&req_filename_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "canonical_filename", APR_HASH_KEY_STRING, makefun(&req_canonical_filename_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "path_info", APR_HASH_KEY_STRING, makefun(&req_path_info_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "args", APR_HASH_KEY_STRING, makefun(&req_args_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "handler", APR_HASH_KEY_STRING, makefun(&req_handler_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "hostname", APR_HASH_KEY_STRING, makefun(&req_hostname_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "uri", APR_HASH_KEY_STRING, makefun(&req_uri_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "the_request", APR_HASH_KEY_STRING, makefun(&req_the_request_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "log_id", APR_HASH_KEY_STRING, makefun(&req_log_id_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "useragent_ip", APR_HASH_KEY_STRING, makefun(&req_useragent_ip_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "method", APR_HASH_KEY_STRING, makefun(&req_method_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "proxyreq", APR_HASH_KEY_STRING, makefun(&req_proxyreq_field, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "headers_in", APR_HASH_KEY_STRING, makefun(&req_headers_in, APL_REQ_FUNTYPE_TABLE, p)); apr_hash_set(dispatch, "headers_out", APR_HASH_KEY_STRING, makefun(&req_headers_out, APL_REQ_FUNTYPE_TABLE, p)); apr_hash_set(dispatch, "err_headers_out", APR_HASH_KEY_STRING, makefun(&req_err_headers_out, APL_REQ_FUNTYPE_TABLE, p)); apr_hash_set(dispatch, "notes", APR_HASH_KEY_STRING, makefun(&req_notes, APL_REQ_FUNTYPE_TABLE, p)); apr_hash_set(dispatch, "subprocess_env", APR_HASH_KEY_STRING, makefun(&req_subprocess_env, APL_REQ_FUNTYPE_TABLE, p)); apr_hash_set(dispatch, "flush", APR_HASH_KEY_STRING, makefun(&lua_ap_rflush, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "port", APR_HASH_KEY_STRING, makefun(&req_ap_get_server_port, APL_REQ_FUNTYPE_INT, p)); apr_hash_set(dispatch, "banner", APR_HASH_KEY_STRING, makefun(&ap_get_server_banner, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "options", APR_HASH_KEY_STRING, makefun(&lua_ap_options, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "allowoverrides", APR_HASH_KEY_STRING, makefun(&lua_ap_allowoverrides, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "started", APR_HASH_KEY_STRING, makefun(&lua_ap_started, APL_REQ_FUNTYPE_INT, p)); apr_hash_set(dispatch, "basic_auth_pw", APR_HASH_KEY_STRING, makefun(&lua_ap_basic_auth_pw, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "limit_req_body", APR_HASH_KEY_STRING, makefun(&lua_ap_limit_req_body, APL_REQ_FUNTYPE_INT, p)); apr_hash_set(dispatch, "server_built", APR_HASH_KEY_STRING, makefun(&ap_get_server_built, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "is_initial_req", APR_HASH_KEY_STRING, makefun(&lua_ap_is_initial_req, APL_REQ_FUNTYPE_BOOLEAN, p)); apr_hash_set(dispatch, "remaining", APR_HASH_KEY_STRING, makefun(&req_remaining_field, APL_REQ_FUNTYPE_INT, p)); apr_hash_set(dispatch, "some_auth_required", APR_HASH_KEY_STRING, makefun(&lua_ap_some_auth_required, APL_REQ_FUNTYPE_BOOLEAN, p)); apr_hash_set(dispatch, "server_name", APR_HASH_KEY_STRING, makefun(&lua_ap_get_server_name, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "auth_name", APR_HASH_KEY_STRING, makefun(&lua_ap_auth_name, APL_REQ_FUNTYPE_STRING, p)); apr_hash_set(dispatch, "sendfile", APR_HASH_KEY_STRING, makefun(&lua_ap_sendfile, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "dbacquire", APR_HASH_KEY_STRING, makefun(&lua_db_acquire, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "stat", APR_HASH_KEY_STRING, makefun(&lua_ap_stat, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "get_direntries", APR_HASH_KEY_STRING, makefun(&lua_ap_getdir, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "regex", APR_HASH_KEY_STRING, makefun(&lua_ap_regex, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "usleep", APR_HASH_KEY_STRING, makefun(&lua_ap_usleep, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "base64_encode", APR_HASH_KEY_STRING, makefun(&lua_apr_b64encode, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "base64_decode", APR_HASH_KEY_STRING, makefun(&lua_apr_b64decode, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "md5", APR_HASH_KEY_STRING, makefun(&lua_apr_md5, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "sha1", APR_HASH_KEY_STRING, makefun(&lua_apr_sha1, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "htpassword", APR_HASH_KEY_STRING, makefun(&lua_apr_htpassword, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "touch", APR_HASH_KEY_STRING, makefun(&lua_apr_touch, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "mkdir", APR_HASH_KEY_STRING, makefun(&lua_apr_mkdir, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "mkrdir", APR_HASH_KEY_STRING, makefun(&lua_apr_mkrdir, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "rmdir", APR_HASH_KEY_STRING, makefun(&lua_apr_rmdir, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "date_parse_rfc", APR_HASH_KEY_STRING, makefun(&lua_apr_date_parse_rfc, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "escape", APR_HASH_KEY_STRING, makefun(&lua_ap_escape, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "unescape", APR_HASH_KEY_STRING, makefun(&lua_ap_unescape, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "mpm_query", APR_HASH_KEY_STRING, makefun(&lua_ap_mpm_query, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "expr", APR_HASH_KEY_STRING, makefun(&lua_ap_expr, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "scoreboard_process", APR_HASH_KEY_STRING, makefun(&lua_ap_scoreboard_process, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "scoreboard_worker", APR_HASH_KEY_STRING, makefun(&lua_ap_scoreboard_worker, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "clock", APR_HASH_KEY_STRING, makefun(&lua_ap_clock, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "requestbody", APR_HASH_KEY_STRING, makefun(&lua_ap_requestbody, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "add_input_filter", APR_HASH_KEY_STRING, makefun(&lua_ap_add_input_filter, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "module_info", APR_HASH_KEY_STRING, makefun(&lua_ap_module_info, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "loaded_modules", APR_HASH_KEY_STRING, makefun(&lua_ap_loaded_modules, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "runtime_dir_relative", APR_HASH_KEY_STRING, makefun(&lua_ap_runtime_dir_relative, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "server_info", APR_HASH_KEY_STRING, makefun(&lua_ap_server_info, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "set_document_root", APR_HASH_KEY_STRING, makefun(&lua_ap_set_document_root, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "set_context_info", APR_HASH_KEY_STRING, makefun(&lua_ap_set_context_info, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "os_escape_path", APR_HASH_KEY_STRING, makefun(&lua_ap_os_escape_path, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "escape_logitem", APR_HASH_KEY_STRING, makefun(&lua_ap_escape_logitem, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "strcmp_match", APR_HASH_KEY_STRING, makefun(&lua_ap_strcmp_match, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "set_keepalive", APR_HASH_KEY_STRING, makefun(&lua_ap_set_keepalive, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "make_etag", APR_HASH_KEY_STRING, makefun(&lua_ap_make_etag, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "send_interim_response", APR_HASH_KEY_STRING, makefun(&lua_ap_send_interim_response, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "custom_response", APR_HASH_KEY_STRING, makefun(&lua_ap_custom_response, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "exists_config_define", APR_HASH_KEY_STRING, makefun(&lua_ap_exists_config_define, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "state_query", APR_HASH_KEY_STRING, makefun(&lua_ap_state_query, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "get_server_name_for_url", APR_HASH_KEY_STRING, makefun(&lua_ap_get_server_name_for_url, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "ivm_get", APR_HASH_KEY_STRING, makefun(&lua_ivm_get, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "ivm_set", APR_HASH_KEY_STRING, makefun(&lua_ivm_set, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "getcookie", APR_HASH_KEY_STRING, makefun(&lua_get_cookie, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "setcookie", APR_HASH_KEY_STRING, makefun(&lua_set_cookie, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "wsupgrade", APR_HASH_KEY_STRING, makefun(&lua_websocket_greet, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "wsread", APR_HASH_KEY_STRING, makefun(&lua_websocket_read, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "wspeek", APR_HASH_KEY_STRING, makefun(&lua_websocket_peek, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "wswrite", APR_HASH_KEY_STRING, makefun(&lua_websocket_write, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "wsclose", APR_HASH_KEY_STRING, makefun(&lua_websocket_close, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "wsping", APR_HASH_KEY_STRING, makefun(&lua_websocket_ping, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "config", APR_HASH_KEY_STRING, makefun(&lua_ap_get_config, APL_REQ_FUNTYPE_LUACFUN, p)); apr_hash_set(dispatch, "activeconfig", APR_HASH_KEY_STRING, makefun(&lua_ap_get_active_config, APL_REQ_FUNTYPE_LUACFUN, p)); lua_pushlightuserdata(L, dispatch); lua_setfield(L, LUA_REGISTRYINDEX, "Apache2.Request.dispatch"); luaL_newmetatable(L, "Apache2.Request"); /* [metatable] */ lua_pushvalue(L, -1); lua_setfield(L, -2, "__index"); luaL_setfuncs_compat(L, request_methods); /* [metatable] */ lua_pop(L, 2); luaL_newmetatable(L, "Apache2.Connection"); /* [metatable] */ lua_pushvalue(L, -1); lua_setfield(L, -2, "__index"); luaL_setfuncs_compat(L, connection_methods); /* [metatable] */ lua_pop(L, 2); luaL_newmetatable(L, "Apache2.Server"); /* [metatable] */ lua_pushvalue(L, -1); lua_setfield(L, -2, "__index"); luaL_setfuncs_compat(L, server_methods); /* [metatable] */ lua_pop(L, 2); } void ap_lua_push_connection(lua_State *L, conn_rec *c) { req_table_t* t; lua_boxpointer(L, c); luaL_getmetatable(L, "Apache2.Connection"); lua_setmetatable(L, -2); luaL_getmetatable(L, "Apache2.Connection"); t = apr_pcalloc(c->pool, sizeof(req_table_t)); t->t = c->notes; t->r = NULL; t->n = "notes"; ap_lua_push_apr_table(L, t); lua_setfield(L, -2, "notes"); lua_pushstring(L, c->client_ip); lua_setfield(L, -2, "client_ip"); lua_pop(L, 1); } void ap_lua_push_server(lua_State *L, server_rec *s) { lua_boxpointer(L, s); luaL_getmetatable(L, "Apache2.Server"); lua_setmetatable(L, -2); luaL_getmetatable(L, "Apache2.Server"); lua_pushstring(L, s->server_hostname); lua_setfield(L, -2, "server_hostname"); lua_pop(L, 1); } void ap_lua_push_request(lua_State *L, request_rec *r) { lua_boxpointer(L, r); luaL_getmetatable(L, "Apache2.Request"); lua_setmetatable(L, -2); } httpd-2.4.41/modules/lua/lua_config.c0000644000000000000500000001661713127013226015747 0ustar rootsrc/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "lua_config.h" #include "lua_vmprep.h" APLOG_USE_MODULE(lua); static ap_lua_dir_cfg *check_dir_config(lua_State *L, int index) { ap_lua_dir_cfg *cfg; luaL_checkudata(L, index, "Apache2.DirConfig"); cfg = (ap_lua_dir_cfg *) lua_unboxpointer(L, index); return cfg; } static cmd_parms *check_cmd_parms(lua_State *L, int index) { cmd_parms *cmd; luaL_checkudata(L, index, "Apache2.CommandParameters"); cmd = (cmd_parms *) lua_unboxpointer(L, index); return cmd; } static int apl_toscope(const char *name) { if (0 == strcmp("once", name)) return AP_LUA_SCOPE_ONCE; if (0 == strcmp("request", name)) return AP_LUA_SCOPE_REQUEST; if (0 == strcmp("connection", name)) return AP_LUA_SCOPE_CONN; if (0 == strcmp("conn", name)) return AP_LUA_SCOPE_CONN; if (0 == strcmp("thread", name)) return AP_LUA_SCOPE_THREAD; return AP_LUA_SCOPE_ONCE; } apr_status_t ap_lua_map_handler(ap_lua_dir_cfg *cfg, const char *file, const char *function, const char *pattern, const char *scope) { ap_regex_t *uri_pattern; apr_status_t rv; ap_lua_mapped_handler_spec *handler = apr_pcalloc(cfg->pool, sizeof(ap_lua_mapped_handler_spec)); handler->uri_pattern = NULL; handler->function_name = NULL; uri_pattern = apr_palloc(cfg->pool, sizeof(ap_regex_t)); if ((rv = ap_regcomp(uri_pattern, pattern, 0)) != APR_SUCCESS) { return rv; } handler->file_name = apr_pstrdup(cfg->pool, file); handler->uri_pattern = uri_pattern; handler->scope = apl_toscope(scope); handler->function_name = apr_pstrdup(cfg->pool, function); *(const ap_lua_mapped_handler_spec **) apr_array_push(cfg->mapped_handlers) = handler; return APR_SUCCESS; } /* Change to use ap_lua_map_handler */ static int cfg_lua_map_handler(lua_State *L) { ap_lua_dir_cfg *cfg = check_dir_config(L, 1); ap_lua_mapped_handler_spec *handler = apr_pcalloc(cfg->pool, sizeof(ap_lua_mapped_handler_spec)); handler->uri_pattern = NULL; handler->function_name = NULL; luaL_checktype(L, 2, LUA_TTABLE); lua_getfield(L, 2, "file"); if (lua_isstring(L, -1)) { const char *file = lua_tostring(L, -1); handler->file_name = apr_pstrdup(cfg->pool, file); } lua_pop(L, 1); lua_getfield(L, 2, "pattern"); if (lua_isstring(L, -1)) { const char *pattern = lua_tostring(L, -1); ap_regex_t *uri_pattern = apr_palloc(cfg->pool, sizeof(ap_regex_t)); if (ap_regcomp(uri_pattern, pattern, 0) != OK) { return luaL_error(L, "Unable to compile regular expression, '%s'", pattern); } handler->uri_pattern = uri_pattern; } lua_pop(L, 1); lua_getfield(L, 2, "scope"); if (lua_isstring(L, -1)) { const char *scope = lua_tostring(L, -1); handler->scope = apl_toscope(scope); } else { handler->scope = AP_LUA_SCOPE_ONCE; } lua_pop(L, 1); lua_getfield(L, 2, "func"); if (lua_isstring(L, -1)) { const char *value = lua_tostring(L, -1); handler->function_name = apr_pstrdup(cfg->pool, value); } else { handler->function_name = "handle"; } lua_pop(L, 1); *(const ap_lua_mapped_handler_spec **) apr_array_push(cfg->mapped_handlers) = handler; return 0; } static int cfg_directory(lua_State *L) { ap_lua_dir_cfg *cfg = check_dir_config(L, 1); lua_pushstring(L, cfg->dir); return 1; } /*static int cfg_root(lua_State *L) { ap_lua_dir_cfg *cfg = check_dir_config(L, 1); lua_pushstring(L, cfg->root_path); return 1; }*/ static const struct luaL_Reg cfg_methods[] = { {"match_handler", cfg_lua_map_handler}, {"directory", cfg_directory}, /* {"root", cfg_root}, */ {NULL, NULL} }; /* helper function for the logging functions below */ static int cmd_log_at(lua_State *L, int level) { const char *msg; cmd_parms *cmd = check_cmd_parms(L, 1); lua_Debug dbg; lua_getstack(L, 1, &dbg); lua_getinfo(L, "Sl", &dbg); msg = luaL_checkstring(L, 2); /* Intentional no APLOGNO */ ap_log_error(dbg.source, dbg.currentline, APLOG_MODULE_INDEX, level, 0, cmd->server, "%s", msg); return 0; } /* r:debug(String) and friends which use apache logging */ static int cmd_emerg(lua_State *L) { return cmd_log_at(L, APLOG_EMERG); } static int cmd_alert(lua_State *L) { return cmd_log_at(L, APLOG_ALERT); } static int cmd_crit(lua_State *L) { return cmd_log_at(L, APLOG_CRIT); } static int cmd_err(lua_State *L) { return cmd_log_at(L, APLOG_ERR); } static int cmd_warn(lua_State *L) { return cmd_log_at(L, APLOG_WARNING); } static int cmd_notice(lua_State *L) { return cmd_log_at(L, APLOG_NOTICE); } static int cmd_info(lua_State *L) { return cmd_log_at(L, APLOG_INFO); } static int cmd_debug(lua_State *L) { return cmd_log_at(L, APLOG_DEBUG); } static int cmd_trace1(lua_State *L) { return cmd_log_at(L, APLOG_TRACE1); } static int cmd_trace2(lua_State *L) { return cmd_log_at(L, APLOG_TRACE2); } static int cmd_trace3(lua_State *L) { return cmd_log_at(L, APLOG_TRACE3); } static int cmd_trace4(lua_State *L) { return cmd_log_at(L, APLOG_TRACE4); } static int cmd_trace5(lua_State *L) { return cmd_log_at(L, APLOG_TRACE5); } static int cmd_trace6(lua_State *L) { return cmd_log_at(L, APLOG_TRACE6); } static int cmd_trace7(lua_State *L) { return cmd_log_at(L, APLOG_TRACE7); } static int cmd_trace8(lua_State *L) { return cmd_log_at(L, APLOG_TRACE8); } static const struct luaL_Reg cmd_methods[] = { {"trace8", cmd_trace8}, {"trace7", cmd_trace7}, {"trace6", cmd_trace6}, {"trace5", cmd_trace5}, {"trace4", cmd_trace4}, {"trace3", cmd_trace3}, {"trace2", cmd_trace2}, {"trace1", cmd_trace1}, {"debug", cmd_debug}, {"info", cmd_info}, {"notice", cmd_notice}, {"warn", cmd_warn}, {"err", cmd_err}, {"crit", cmd_crit}, {"alert", cmd_alert}, {"emerg", cmd_emerg}, {NULL, NULL} }; void ap_lua_load_config_lmodule(lua_State *L) { luaL_newmetatable(L, "Apache2.DirConfig"); /* [metatable] */ lua_pushvalue(L, -1); lua_setfield(L, -2, "__index"); luaL_setfuncs_compat(L, cfg_methods); /* [metatable] */ luaL_newmetatable(L, "Apache2.CommandParameters"); lua_pushvalue(L, -1); lua_setfield(L, -2, "__index"); luaL_setfuncs_compat(L, cmd_methods); /* [metatable] */ } httpd-2.4.41/modules/lua/mod_lua.dep0000644000000000000500000003522012674411515015607 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_lua.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\lua_apr.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_varbuf.h"\ "..\..\srclib\apr-util\include\apr_base64.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_sha1.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_thread_rwlock.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\lua_apr.h"\ ".\lua_request.h"\ ".\lua_vmprep.h"\ ".\mod_lua.h"\ .\lua_config.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_varbuf.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_thread_rwlock.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\lua_config.h"\ ".\lua_request.h"\ ".\lua_vmprep.h"\ ".\mod_lua.h"\ .\lua_dbd.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_varbuf.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_dbd.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_thread_rwlock.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\database\mod_dbd.h"\ ".\lua_dbd.h"\ ".\lua_request.h"\ ".\lua_vmprep.h"\ ".\mod_lua.h"\ .\lua_passwd.c : \ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_sha1.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr-util\include\apu_version.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\lua_passwd.h"\ .\lua_request.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_cookies.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_md5.h"\ "..\..\include\util_script.h"\ "..\..\include\util_varbuf.h"\ "..\..\srclib\apr-util\include\apr_base64.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_dbd.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_sha1.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr-util\include\apu_version.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_thread_rwlock.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\database\mod_dbd.h"\ ".\lua_apr.h"\ ".\lua_dbd.h"\ ".\lua_passwd.h"\ ".\lua_request.h"\ ".\lua_vmprep.h"\ ".\mod_lua.h"\ .\lua_vmprep.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_varbuf.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_thread_rwlock.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\lua_config.h"\ ".\lua_request.h"\ ".\lua_vmprep.h"\ ".\mod_lua.h"\ .\mod_lua.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_varbuf.h"\ "..\..\srclib\apr-util\include\apr_base64.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_sha1.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_thread_rwlock.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\ssl\mod_ssl.h"\ ".\lua_apr.h"\ ".\lua_config.h"\ ".\lua_request.h"\ ".\lua_vmprep.h"\ ".\mod_lua.h"\ httpd-2.4.41/modules/lua/mod_lua.c0000644000000000000500000023356013127013226015257 0ustar rootsrc/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_lua.h" #include #include #include #include #include #include "lua_apr.h" #include "lua_config.h" #include "apr_optional.h" #include "mod_ssl.h" #include "mod_auth.h" #include "util_mutex.h" #ifdef APR_HAS_THREADS #include "apr_thread_proc.h" #endif /* getpid for *NIX */ #if APR_HAVE_SYS_TYPES_H #include #endif #if APR_HAVE_UNISTD_H #include #endif /* getpid for Windows */ #if APR_HAVE_PROCESS_H #include #endif APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(ap_lua, AP_LUA, int, lua_open, (lua_State *L, apr_pool_t *p), (L, p), OK, DECLINED) APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(ap_lua, AP_LUA, int, lua_request, (lua_State *L, request_rec *r), (L, r), OK, DECLINED) static APR_OPTIONAL_FN_TYPE(ssl_var_lookup) *lua_ssl_val = NULL; static APR_OPTIONAL_FN_TYPE(ssl_is_https) *lua_ssl_is_https = NULL; module AP_MODULE_DECLARE_DATA lua_module; #define AP_LUA_HOOK_FIRST (APR_HOOK_FIRST - 1) #define AP_LUA_HOOK_LAST (APR_HOOK_LAST + 1) typedef struct { const char *name; const char *file_name; const char *function_name; ap_lua_vm_spec *spec; } lua_authz_provider_spec; typedef struct { lua_authz_provider_spec *spec; apr_array_header_t *args; } lua_authz_provider_func; apr_hash_t *lua_authz_providers; typedef struct { apr_bucket_brigade *tmpBucket; lua_State *L; ap_lua_vm_spec *spec; int broken; } lua_filter_ctx; #define DEFAULT_LUA_SHMFILE "lua_ivm_shm" apr_global_mutex_t *lua_ivm_mutex; apr_shm_t *lua_ivm_shm; char *lua_ivm_shmfile; static apr_status_t shm_cleanup_wrapper(void *unused) { if (lua_ivm_shm) { return apr_shm_destroy(lua_ivm_shm); } return OK; } /** * error reporting if lua has an error. * Extracts the error from lua stack and prints */ static void report_lua_error(lua_State *L, request_rec *r) { const char *lua_response; r->status = HTTP_INTERNAL_SERVER_ERROR; r->content_type = "text/html"; ap_rputs("

    Error!

    \n", r); ap_rputs("
    ", r);
        lua_response = lua_tostring(L, -1);
        ap_rputs(ap_escape_html(r->pool, lua_response), r);
        ap_rputs("
    \n", r); ap_log_perror(APLOG_MARK, APLOG_WARNING, 0, r->pool, APLOGNO(01471) "Lua error: %s", lua_response); } static void lua_open_callback(lua_State *L, apr_pool_t *p, void *ctx) { ap_lua_init(L, p); ap_lua_load_apache2_lmodule(L); ap_lua_load_request_lmodule(L, p); ap_lua_load_config_lmodule(L); } static int lua_open_hook(lua_State *L, apr_pool_t *p) { lua_open_callback(L, p, NULL); return OK; } static const char *scope_to_string(unsigned int scope) { switch (scope) { case AP_LUA_SCOPE_ONCE: case AP_LUA_SCOPE_UNSET: return "once"; case AP_LUA_SCOPE_REQUEST: return "request"; case AP_LUA_SCOPE_CONN: return "conn"; #if APR_HAS_THREADS case AP_LUA_SCOPE_THREAD: return "thread"; case AP_LUA_SCOPE_SERVER: return "server"; #endif default: ap_assert(0); return 0; } } static void ap_lua_release_state(lua_State* L, ap_lua_vm_spec* spec, request_rec* r) { char *hash; apr_reslist_t* reslist = NULL; if (spec->scope == AP_LUA_SCOPE_SERVER) { ap_lua_server_spec* sspec = NULL; lua_settop(L, 0); lua_getfield(L, LUA_REGISTRYINDEX, "Apache2.Lua.server_spec"); sspec = (ap_lua_server_spec*) lua_touserdata(L, 1); hash = apr_psprintf(r->pool, "reslist:%s", spec->file); if (apr_pool_userdata_get((void **)&reslist, hash, r->server->process->pool) == APR_SUCCESS) { AP_DEBUG_ASSERT(sspec != NULL); if (reslist != NULL) { apr_reslist_release(reslist, sspec); } } } } static ap_lua_vm_spec *create_vm_spec(apr_pool_t **lifecycle_pool, request_rec *r, const ap_lua_dir_cfg *cfg, const ap_lua_server_cfg *server_cfg, const char *filename, const char *bytecode, apr_size_t bytecode_len, const char *function, const char *what) { apr_pool_t *pool; ap_lua_vm_spec *spec = apr_pcalloc(r->pool, sizeof(ap_lua_vm_spec)); spec->scope = cfg->vm_scope; spec->pool = r->pool; spec->package_paths = cfg->package_paths; spec->package_cpaths = cfg->package_cpaths; spec->cb = &lua_open_callback; spec->cb_arg = NULL; spec->bytecode = bytecode; spec->bytecode_len = bytecode_len; spec->codecache = (cfg->codecache == AP_LUA_CACHE_UNSET) ? AP_LUA_CACHE_STAT : cfg->codecache; spec->vm_min = cfg->vm_min ? cfg->vm_min : 1; spec->vm_max = cfg->vm_max ? cfg->vm_max : 1; if (filename) { char *file; apr_filepath_merge(&file, server_cfg->root_path, filename, APR_FILEPATH_NOTRELATIVE, r->pool); spec->file = file; } else { spec->file = r->filename; } ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, APLOGNO(02313) "%s details: scope: %s, file: %s, func: %s", what, scope_to_string(spec->scope), spec->file, function ? function : "-"); switch (spec->scope) { case AP_LUA_SCOPE_ONCE: case AP_LUA_SCOPE_UNSET: apr_pool_create(&pool, r->pool); break; case AP_LUA_SCOPE_REQUEST: pool = r->pool; break; case AP_LUA_SCOPE_CONN: pool = r->connection->pool; break; #if APR_HAS_THREADS case AP_LUA_SCOPE_THREAD: pool = apr_thread_pool_get(r->connection->current_thread); break; case AP_LUA_SCOPE_SERVER: pool = r->server->process->pool; break; #endif default: ap_assert(0); } *lifecycle_pool = pool; return spec; } static const char* ap_lua_interpolate_string(apr_pool_t* pool, const char* string, const char** values) { char *stringBetween; const char* ret; int srclen,x,y; srclen = strlen(string); ret = ""; y = 0; for (x=0; x < srclen; x++) { if (string[x] == '$' && x != srclen-1 && string[x+1] >= '0' && string[x+1] <= '9') { int v = *(string+x+1) - '0'; if (x-y > 0) { stringBetween = apr_pstrndup(pool, string+y, x-y); } else { stringBetween = ""; } ret = apr_pstrcat(pool, ret, stringBetween, values[v], NULL); y = ++x+1; } } if (x-y > 0 && y > 0) { stringBetween = apr_pstrndup(pool, string+y, x-y); ret = apr_pstrcat(pool, ret, stringBetween, NULL); } /* If no replacement was made, just return the original string */ else if (y == 0) { return string; } return ret; } /** * "main" */ static int lua_handler(request_rec *r) { int rc = OK; if (strcmp(r->handler, "lua-script")) { return DECLINED; } /* Decline the request if the script does not exist (or is a directory), * rather than just returning internal server error */ if ( (r->finfo.filetype == APR_NOFILE) || (r->finfo.filetype & APR_DIR) ) { return DECLINED; } ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, APLOGNO(01472) "handling [%s] in mod_lua", r->filename); /* XXX: This seems wrong because it may generate wrong headers for HEAD requests */ if (!r->header_only) { lua_State *L; apr_pool_t *pool; const ap_lua_dir_cfg *cfg = ap_get_module_config(r->per_dir_config, &lua_module); ap_lua_vm_spec *spec = create_vm_spec(&pool, r, cfg, NULL, NULL, NULL, 0, "handle", "request handler"); L = ap_lua_get_lua_state(pool, spec, r); if (!L) { /* TODO annotate spec with failure reason */ r->status = HTTP_INTERNAL_SERVER_ERROR; ap_rputs("Unable to compile VM, see logs", r); ap_lua_release_state(L, spec, r); return HTTP_INTERNAL_SERVER_ERROR; } ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, APLOGNO(01474) "got a vm!"); lua_getglobal(L, "handle"); if (!lua_isfunction(L, -1)) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(01475) "lua: Unable to find entry function '%s' in %s (not a valid function)", "handle", spec->file); ap_lua_release_state(L, spec, r); return HTTP_INTERNAL_SERVER_ERROR; } ap_lua_run_lua_request(L, r); if (lua_pcall(L, 1, 1, 0)) { report_lua_error(L, r); } if (lua_isnumber(L, -1)) { rc = lua_tointeger(L, -1); } ap_lua_release_state(L, spec, r); } return rc; } /* ------------------- Input/output content filters ------------------- */ static apr_status_t lua_setup_filter_ctx(ap_filter_t* f, request_rec* r, lua_filter_ctx** c) { apr_pool_t *pool; ap_lua_vm_spec *spec; int n, rc; lua_State *L; lua_filter_ctx *ctx; ap_lua_server_cfg *server_cfg = ap_get_module_config(r->server->module_config, &lua_module); const ap_lua_dir_cfg *cfg = ap_get_module_config(r->per_dir_config, &lua_module); ctx = apr_pcalloc(r->pool, sizeof(lua_filter_ctx)); ctx->broken = 0; *c = ctx; /* Find the filter that was called. * XXX: If we were wired with mod_filter, the filter (mod_filters name) * and the provider (our underlying filters name) need to have matched. */ for (n = 0; n < cfg->mapped_filters->nelts; n++) { ap_lua_filter_handler_spec *hook_spec = ((ap_lua_filter_handler_spec **) cfg->mapped_filters->elts)[n]; if (hook_spec == NULL) { continue; } if (!strcasecmp(hook_spec->filter_name, f->frec->name)) { spec = create_vm_spec(&pool, r, cfg, server_cfg, hook_spec->file_name, NULL, 0, hook_spec->function_name, "filter"); L = ap_lua_get_lua_state(pool, spec, r); if (L) { L = lua_newthread(L); } if (!L) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(02328) "lua: Failed to obtain lua interpreter for %s %s", hook_spec->function_name, hook_spec->file_name); ap_lua_release_state(L, spec, r); return APR_EGENERAL; } if (hook_spec->function_name != NULL) { lua_getglobal(L, hook_spec->function_name); if (!lua_isfunction(L, -1)) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(02329) "lua: Unable to find entry function '%s' in %s (not a valid function)", hook_spec->function_name, hook_spec->file_name); ap_lua_release_state(L, spec, r); return APR_EGENERAL; } ap_lua_run_lua_request(L, r); } else { int t; ap_lua_run_lua_request(L, r); t = lua_gettop(L); lua_setglobal(L, "r"); lua_settop(L, t); } ctx->L = L; ctx->spec = spec; /* If a Lua filter is interested in filtering a request, it must first do a yield, * otherwise we'll assume that it's not interested and pretend we didn't find it. */ rc = lua_resume(L, 1); if (rc == LUA_YIELD) { if (f->frec->providers == NULL) { /* Not wired by mod_filter */ apr_table_unset(r->headers_out, "Content-Length"); apr_table_unset(r->headers_out, "Content-MD5"); apr_table_unset(r->headers_out, "ETAG"); } return OK; } else { ap_lua_release_state(L, spec, r); return APR_ENOENT; } } } return APR_ENOENT; } static apr_status_t lua_output_filter_handle(ap_filter_t *f, apr_bucket_brigade *pbbIn) { request_rec *r = f->r; int rc; lua_State *L; lua_filter_ctx* ctx; conn_rec *c = r->connection; apr_bucket *pbktIn; apr_status_t rv; /* Set up the initial filter context and acquire the function. * The corresponding Lua function should yield here. */ if (!f->ctx) { rc = lua_setup_filter_ctx(f,r,&ctx); if (rc == APR_EGENERAL) { return HTTP_INTERNAL_SERVER_ERROR; } if (rc == APR_ENOENT) { /* No filter entry found (or the script declined to filter), just pass on the buckets */ ap_remove_output_filter(f); return ap_pass_brigade(f->next,pbbIn); } else { /* We've got a willing lua filter, setup and check for a prefix */ size_t olen; apr_bucket *pbktOut; const char* output = lua_tolstring(ctx->L, 1, &olen); f->ctx = ctx; ctx->tmpBucket = apr_brigade_create(r->pool, c->bucket_alloc); if (olen > 0) { pbktOut = apr_bucket_heap_create(output, olen, NULL, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->tmpBucket, pbktOut); rv = ap_pass_brigade(f->next, ctx->tmpBucket); apr_brigade_cleanup(ctx->tmpBucket); if (rv != APR_SUCCESS) { return rv; } } } } ctx = (lua_filter_ctx*) f->ctx; L = ctx->L; /* While the Lua function is still yielding, pass in buckets to the coroutine */ if (!ctx->broken) { for (pbktIn = APR_BRIGADE_FIRST(pbbIn); pbktIn != APR_BRIGADE_SENTINEL(pbbIn); pbktIn = APR_BUCKET_NEXT(pbktIn)) { const char *data; apr_size_t len; apr_bucket *pbktOut; /* read the bucket */ apr_bucket_read(pbktIn,&data,&len,APR_BLOCK_READ); /* Push the bucket onto the Lua stack as a global var */ lua_pushlstring(L, data, len); lua_setglobal(L, "bucket"); /* If Lua yielded, it means we have something to pass on */ if (lua_resume(L, 0) == LUA_YIELD) { size_t olen; const char* output = lua_tolstring(L, 1, &olen); if (olen > 0) { pbktOut = apr_bucket_heap_create(output, olen, NULL, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->tmpBucket, pbktOut); rv = ap_pass_brigade(f->next, ctx->tmpBucket); apr_brigade_cleanup(ctx->tmpBucket); if (rv != APR_SUCCESS) { return rv; } } } else { ctx->broken = 1; ap_lua_release_state(L, ctx->spec, r); ap_remove_output_filter(f); apr_brigade_cleanup(pbbIn); apr_brigade_cleanup(ctx->tmpBucket); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02663) "lua: Error while executing filter: %s", lua_tostring(L, -1)); return HTTP_INTERNAL_SERVER_ERROR; } } /* If we've safely reached the end, do a final call to Lua to allow for any finishing moves by the script, such as appending a tail. */ if (APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(pbbIn))) { apr_bucket *pbktEOS; lua_pushnil(L); lua_setglobal(L, "bucket"); if (lua_resume(L, 0) == LUA_YIELD) { apr_bucket *pbktOut; size_t olen; const char* output = lua_tolstring(L, 1, &olen); if (olen > 0) { pbktOut = apr_bucket_heap_create(output, olen, NULL, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->tmpBucket, pbktOut); } } pbktEOS = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ctx->tmpBucket, pbktEOS); ap_lua_release_state(L, ctx->spec, r); rv = ap_pass_brigade(f->next, ctx->tmpBucket); apr_brigade_cleanup(ctx->tmpBucket); if (rv != APR_SUCCESS) { return rv; } } } /* Clean up */ apr_brigade_cleanup(pbbIn); return APR_SUCCESS; } static apr_status_t lua_input_filter_handle(ap_filter_t *f, apr_bucket_brigade *pbbOut, ap_input_mode_t eMode, apr_read_type_e eBlock, apr_off_t nBytes) { request_rec *r = f->r; int rc, lastCall = 0; lua_State *L; lua_filter_ctx* ctx; conn_rec *c = r->connection; apr_status_t ret; /* Set up the initial filter context and acquire the function. * The corresponding Lua function should yield here. */ if (!f->ctx) { rc = lua_setup_filter_ctx(f,r,&ctx); f->ctx = ctx; if (rc == APR_EGENERAL) { ctx->broken = 1; ap_remove_input_filter(f); return HTTP_INTERNAL_SERVER_ERROR; } if (rc == APR_ENOENT ) { ap_remove_input_filter(f); ctx->broken = 1; } if (rc == APR_SUCCESS) { ctx->tmpBucket = apr_brigade_create(r->pool, c->bucket_alloc); } } ctx = (lua_filter_ctx*) f->ctx; L = ctx->L; /* If the Lua script broke or denied serving the request, just pass the buckets through */ if (ctx->broken) { return ap_get_brigade(f->next, pbbOut, eMode, eBlock, nBytes); } if (APR_BRIGADE_EMPTY(ctx->tmpBucket)) { ret = ap_get_brigade(f->next, ctx->tmpBucket, eMode, eBlock, nBytes); if (eMode == AP_MODE_EATCRLF || ret != APR_SUCCESS) return ret; } /* While the Lua function is still yielding, pass buckets to the coroutine */ if (!ctx->broken) { lastCall = 0; while (!APR_BRIGADE_EMPTY(ctx->tmpBucket)) { apr_bucket *pbktIn = APR_BRIGADE_FIRST(ctx->tmpBucket); apr_bucket *pbktOut; const char *data; apr_size_t len; if (APR_BUCKET_IS_EOS(pbktIn)) { APR_BUCKET_REMOVE(pbktIn); break; } /* read the bucket */ ret = apr_bucket_read(pbktIn, &data, &len, eBlock); if (ret != APR_SUCCESS) return ret; /* Push the bucket onto the Lua stack as a global var */ lastCall++; lua_pushlstring(L, data, len); lua_setglobal(L, "bucket"); /* If Lua yielded, it means we have something to pass on */ if (lua_resume(L, 0) == LUA_YIELD) { size_t olen; const char* output = lua_tolstring(L, 1, &olen); pbktOut = apr_bucket_heap_create(output, olen, 0, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(pbbOut, pbktOut); apr_bucket_delete(pbktIn); return APR_SUCCESS; } else { ctx->broken = 1; ap_lua_release_state(L, ctx->spec, r); ap_remove_input_filter(f); apr_bucket_delete(pbktIn); return HTTP_INTERNAL_SERVER_ERROR; } } /* If we've safely reached the end, do a final call to Lua to allow for any finishing moves by the script, such as appending a tail. */ if (lastCall == 0) { apr_bucket *pbktEOS = apr_bucket_eos_create(c->bucket_alloc); lua_pushnil(L); lua_setglobal(L, "bucket"); if (lua_resume(L, 0) == LUA_YIELD) { apr_bucket *pbktOut; size_t olen; const char* output = lua_tolstring(L, 1, &olen); pbktOut = apr_bucket_heap_create(output, olen, 0, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(pbbOut, pbktOut); } APR_BRIGADE_INSERT_TAIL(pbbOut,pbktEOS); ap_lua_release_state(L, ctx->spec, r); } } return APR_SUCCESS; } /* ---------------- Configury stuff --------------- */ /** harnesses for magic hooks **/ static int lua_request_rec_hook_harness(request_rec *r, const char *name, int apr_hook_when) { int rc; apr_pool_t *pool; lua_State *L; ap_lua_vm_spec *spec; ap_lua_server_cfg *server_cfg = ap_get_module_config(r->server->module_config, &lua_module); const ap_lua_dir_cfg *cfg = ap_get_module_config(r->per_dir_config, &lua_module); const char *key = apr_psprintf(r->pool, "%s_%d", name, apr_hook_when); apr_array_header_t *hook_specs = apr_hash_get(cfg->hooks, key, APR_HASH_KEY_STRING); if (hook_specs) { int i; for (i = 0; i < hook_specs->nelts; i++) { ap_lua_mapped_handler_spec *hook_spec = ((ap_lua_mapped_handler_spec **) hook_specs->elts)[i]; if (hook_spec == NULL) { continue; } spec = create_vm_spec(&pool, r, cfg, server_cfg, hook_spec->file_name, hook_spec->bytecode, hook_spec->bytecode_len, hook_spec->function_name, "request hook"); L = ap_lua_get_lua_state(pool, spec, r); if (!L) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(01477) "lua: Failed to obtain lua interpreter for entry function '%s' in %s", hook_spec->function_name, hook_spec->file_name); return HTTP_INTERNAL_SERVER_ERROR; } if (hook_spec->function_name != NULL) { lua_getglobal(L, hook_spec->function_name); if (!lua_isfunction(L, -1)) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(01478) "lua: Unable to find entry function '%s' in %s (not a valid function)", hook_spec->function_name, hook_spec->file_name); ap_lua_release_state(L, spec, r); return HTTP_INTERNAL_SERVER_ERROR; } ap_lua_run_lua_request(L, r); } else { int t; ap_lua_run_lua_request(L, r); t = lua_gettop(L); lua_setglobal(L, "r"); lua_settop(L, t); } if (lua_pcall(L, 1, 1, 0)) { report_lua_error(L, r); ap_lua_release_state(L, spec, r); return HTTP_INTERNAL_SERVER_ERROR; } rc = DECLINED; if (lua_isnumber(L, -1)) { rc = lua_tointeger(L, -1); ap_log_rerror(APLOG_MARK, APLOG_TRACE4, 0, r, "Lua hook %s:%s for phase %s returned %d", hook_spec->file_name, hook_spec->function_name, name, rc); } else { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(03017) "Lua hook %s:%s for phase %s did not return a numeric value", hook_spec->file_name, hook_spec->function_name, name); return HTTP_INTERNAL_SERVER_ERROR; } if (rc != DECLINED) { ap_lua_release_state(L, spec, r); return rc; } ap_lua_release_state(L, spec, r); } } return DECLINED; } /* Fix for making sure that LuaMapHandler works when FallbackResource is set */ static int lua_map_handler_fixups(request_rec *r) { /* If there is no handler set yet, this might be a LuaMapHandler request */ if (r->handler == NULL) { int n = 0; ap_regmatch_t match[10]; const ap_lua_dir_cfg *cfg = ap_get_module_config(r->per_dir_config, &lua_module); for (n = 0; n < cfg->mapped_handlers->nelts; n++) { ap_lua_mapped_handler_spec *hook_spec = ((ap_lua_mapped_handler_spec **) cfg->mapped_handlers->elts)[n]; if (hook_spec == NULL) { continue; } if (!ap_regexec(hook_spec->uri_pattern, r->uri, 10, match, 0)) { r->handler = apr_pstrdup(r->pool, "lua-map-handler"); return OK; } } } return DECLINED; } static int lua_map_handler(request_rec *r) { int rc, n = 0; apr_pool_t *pool; lua_State *L; const char *filename, *function_name; const char *values[10]; ap_lua_vm_spec *spec; ap_regmatch_t match[10]; ap_lua_server_cfg *server_cfg = ap_get_module_config(r->server->module_config, &lua_module); const ap_lua_dir_cfg *cfg = ap_get_module_config(r->per_dir_config, &lua_module); for (n = 0; n < cfg->mapped_handlers->nelts; n++) { ap_lua_mapped_handler_spec *hook_spec = ((ap_lua_mapped_handler_spec **) cfg->mapped_handlers->elts)[n]; if (hook_spec == NULL) { continue; } if (!ap_regexec(hook_spec->uri_pattern, r->uri, 10, match, 0)) { int i; for (i=0 ; i < 10; i++) { if (match[i].rm_eo >= 0) { values[i] = apr_pstrndup(r->pool, r->uri+match[i].rm_so, match[i].rm_eo - match[i].rm_so); } else values[i] = ""; } filename = ap_lua_interpolate_string(r->pool, hook_spec->file_name, values); function_name = ap_lua_interpolate_string(r->pool, hook_spec->function_name, values); spec = create_vm_spec(&pool, r, cfg, server_cfg, filename, hook_spec->bytecode, hook_spec->bytecode_len, function_name, "mapped handler"); L = ap_lua_get_lua_state(pool, spec, r); if (!L) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(02330) "lua: Failed to obtain Lua interpreter for entry function '%s' in %s", function_name, filename); ap_lua_release_state(L, spec, r); return HTTP_INTERNAL_SERVER_ERROR; } if (function_name != NULL) { lua_getglobal(L, function_name); if (!lua_isfunction(L, -1)) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(02331) "lua: Unable to find entry function '%s' in %s (not a valid function)", function_name, filename); ap_lua_release_state(L, spec, r); return HTTP_INTERNAL_SERVER_ERROR; } ap_lua_run_lua_request(L, r); } else { int t; ap_lua_run_lua_request(L, r); t = lua_gettop(L); lua_setglobal(L, "r"); lua_settop(L, t); } if (lua_pcall(L, 1, 1, 0)) { report_lua_error(L, r); ap_lua_release_state(L, spec, r); return HTTP_INTERNAL_SERVER_ERROR; } rc = DECLINED; if (lua_isnumber(L, -1)) { rc = lua_tointeger(L, -1); } else { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02483) "lua: Lua handler %s in %s did not return a value, assuming apache2.OK", function_name, filename); rc = OK; } ap_lua_release_state(L, spec, r); if (rc != DECLINED) { return rc; } } } return DECLINED; } static apr_size_t config_getstr(ap_configfile_t *cfg, char *buf, size_t bufsiz) { apr_size_t i = 0; if (cfg->getstr) { apr_status_t rc = (cfg->getstr) (buf, bufsiz, cfg->param); if (rc == APR_SUCCESS) { i = strlen(buf); if (i && buf[i - 1] == '\n') ++cfg->line_number; } else { buf[0] = '\0'; i = 0; } } else { while (i < bufsiz) { char ch; apr_status_t rc = (cfg->getch) (&ch, cfg->param); if (rc != APR_SUCCESS) break; buf[i++] = ch; if (ch == '\n') { ++cfg->line_number; break; } } } return i; } typedef struct cr_ctx { cmd_parms *cmd; ap_configfile_t *cfp; size_t startline; const char *endstr; char buf[HUGE_STRING_LEN]; } cr_ctx; /* Okay, this deserves a little explanation -- in order for the errors that lua * generates to be 'accuarate', including line numbers, we basically inject * N line number new lines into the 'top' of the chunk reader..... * * be happy. this is cool. * */ static const char *lf = "\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n"; #define N_LF 32 static const char *direct_chunkreader(lua_State *lvm, void *udata, size_t *plen) { const char *p; struct cr_ctx *ctx = udata; if (ctx->startline) { *plen = ctx->startline > N_LF ? N_LF : ctx->startline; ctx->startline -= *plen; return lf; } *plen = config_getstr(ctx->cfp, ctx->buf, HUGE_STRING_LEN); for (p = ctx->buf; isspace(*p); ++p); if (p[0] == '<' && p[1] == '/') { apr_size_t i = 0; while (i < strlen(ctx->endstr)) { if (tolower(p[i + 2]) != ctx->endstr[i]) return ctx->buf; ++i; } *plen = 0; return NULL; } /*fprintf(stderr, "buf read: %s\n", ctx->buf); */ return ctx->buf; } static int ldump_writer(lua_State *L, const void *b, size_t size, void *B) { (void) L; luaL_addlstring((luaL_Buffer *) B, (const char *) b, size); return 0; } typedef struct hack_section_baton { const char *name; ap_lua_mapped_handler_spec *spec; int apr_hook_when; } hack_section_baton; /* You can be unhappy now. * * This is uncool. * * When you create a
    directive; hack_section_baton *baton = directive->data; const char *key = apr_psprintf(cmd->pool, "%s_%d", baton->name, baton->apr_hook_when); apr_array_header_t *hook_specs = apr_hash_get(cfg->hooks, key, APR_HASH_KEY_STRING); if (!hook_specs) { hook_specs = apr_array_make(cmd->pool, 2, sizeof(ap_lua_mapped_handler_spec *)); apr_hash_set(cfg->hooks, key, APR_HASH_KEY_STRING, hook_specs); } baton->spec->scope = cfg->vm_scope; *(ap_lua_mapped_handler_spec **) apr_array_push(hook_specs) = baton->spec; return NULL; } static const char *register_named_block_function_hook(const char *name, cmd_parms *cmd, void *mconfig, const char *line) { const char *function = NULL; ap_lua_mapped_handler_spec *spec; int when = APR_HOOK_MIDDLE; const char *endp = ap_strrchr_c(line, '>'); if (endp == NULL) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive missing closing '>'", NULL); } line = apr_pstrndup(cmd->temp_pool, line, endp - line); if (line[0]) { const char *word; word = ap_getword_conf(cmd->temp_pool, &line); if (*word) { function = apr_pstrdup(cmd->pool, word); } word = ap_getword_conf(cmd->temp_pool, &line); if (*word) { if (!strcasecmp("early", word)) { when = AP_LUA_HOOK_FIRST; } else if (!strcasecmp("late", word)) { when = AP_LUA_HOOK_LAST; } else { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> 2nd argument must be 'early' or 'late'", NULL); } } } spec = apr_pcalloc(cmd->pool, sizeof(ap_lua_mapped_handler_spec)); { cr_ctx ctx; lua_State *lvm; char *tmp; int rv; ap_directive_t **current; hack_section_baton *baton; spec->file_name = apr_psprintf(cmd->pool, "%s:%u", cmd->config_file->name, cmd->config_file->line_number); if (function) { spec->function_name = (char *) function; } else { function = NULL; } ctx.cmd = cmd; tmp = apr_pstrdup(cmd->pool, cmd->err_directive->directive + 1); ap_str_tolower(tmp); ctx.endstr = tmp; ctx.cfp = cmd->config_file; ctx.startline = cmd->config_file->line_number; /* This lua State is used only to compile the input strings -> bytecode, so we don't need anything extra. */ lvm = luaL_newstate(); lua_settop(lvm, 0); rv = lua_load(lvm, direct_chunkreader, &ctx, spec->file_name); if (rv != 0) { const char *errstr = apr_pstrcat(cmd->pool, "Lua Error:", lua_tostring(lvm, -1), NULL); lua_close(lvm); return errstr; } else { luaL_Buffer b; luaL_buffinit(lvm, &b); lua_dump(lvm, ldump_writer, &b); luaL_pushresult(&b); spec->bytecode_len = lua_rawlen(lvm, -1); spec->bytecode = apr_pstrmemdup(cmd->pool, lua_tostring(lvm, -1), spec->bytecode_len); lua_close(lvm); } current = mconfig; /* Here, we have to replace our current config node for the next pass */ if (!*current) { *current = apr_pcalloc(cmd->pool, sizeof(**current)); } baton = apr_pcalloc(cmd->pool, sizeof(hack_section_baton)); baton->name = name; baton->spec = spec; baton->apr_hook_when = when; (*current)->filename = cmd->config_file->name; (*current)->line_num = cmd->config_file->line_number; (*current)->directive = apr_pstrdup(cmd->pool, "Lua_____ByteCodeHack"); (*current)->args = NULL; (*current)->data = baton; } return NULL; } static const char *register_named_file_function_hook(const char *name, cmd_parms *cmd, void *_cfg, const char *file, const char *function, int apr_hook_when) { ap_lua_mapped_handler_spec *spec; ap_lua_dir_cfg *cfg = (ap_lua_dir_cfg *) _cfg; const char *key = apr_psprintf(cmd->pool, "%s_%d", name, apr_hook_when); apr_array_header_t *hook_specs = apr_hash_get(cfg->hooks, key, APR_HASH_KEY_STRING); if (!hook_specs) { hook_specs = apr_array_make(cmd->pool, 2, sizeof(ap_lua_mapped_handler_spec *)); apr_hash_set(cfg->hooks, key, APR_HASH_KEY_STRING, hook_specs); } spec = apr_pcalloc(cmd->pool, sizeof(ap_lua_mapped_handler_spec)); spec->file_name = apr_pstrdup(cmd->pool, file); spec->function_name = apr_pstrdup(cmd->pool, function); spec->scope = cfg->vm_scope; *(ap_lua_mapped_handler_spec **) apr_array_push(hook_specs) = spec; return NULL; } static const char *register_mapped_file_function_hook(const char *pattern, cmd_parms *cmd, void *_cfg, const char *file, const char *function) { ap_lua_mapped_handler_spec *spec; ap_lua_dir_cfg *cfg = (ap_lua_dir_cfg *) _cfg; ap_regex_t *regex = apr_pcalloc(cmd->pool, sizeof(ap_regex_t)); if (ap_regcomp(regex, pattern,0)) { return "Invalid regex pattern!"; } spec = apr_pcalloc(cmd->pool, sizeof(ap_lua_mapped_handler_spec)); spec->file_name = apr_pstrdup(cmd->pool, file); spec->function_name = apr_pstrdup(cmd->pool, function); spec->scope = cfg->vm_scope; spec->uri_pattern = regex; *(ap_lua_mapped_handler_spec **) apr_array_push(cfg->mapped_handlers) = spec; return NULL; } static const char *register_filter_function_hook(const char *filter, cmd_parms *cmd, void *_cfg, const char *file, const char *function, int direction) { ap_lua_filter_handler_spec *spec; ap_lua_dir_cfg *cfg = (ap_lua_dir_cfg *) _cfg; spec = apr_pcalloc(cmd->pool, sizeof(ap_lua_filter_handler_spec)); spec->file_name = apr_pstrdup(cmd->pool, file); spec->function_name = apr_pstrdup(cmd->pool, function); spec->filter_name = filter; *(ap_lua_filter_handler_spec **) apr_array_push(cfg->mapped_filters) = spec; /* TODO: Make it work on other types than just AP_FTYPE_RESOURCE? */ if (direction == AP_LUA_FILTER_OUTPUT) { spec->direction = AP_LUA_FILTER_OUTPUT; ap_register_output_filter_protocol(filter, lua_output_filter_handle, NULL, AP_FTYPE_RESOURCE, AP_FILTER_PROTO_CHANGE|AP_FILTER_PROTO_CHANGE_LENGTH); } else { spec->direction = AP_LUA_FILTER_INPUT; ap_register_input_filter(filter, lua_input_filter_handle, NULL, AP_FTYPE_RESOURCE); } return NULL; } /* disabled (see reference below) static int lua_check_user_id_harness_first(request_rec *r) { return lua_request_rec_hook_harness(r, "check_user_id", AP_LUA_HOOK_FIRST); } */ static int lua_check_user_id_harness(request_rec *r) { return lua_request_rec_hook_harness(r, "check_user_id", APR_HOOK_MIDDLE); } /* disabled (see reference below) static int lua_check_user_id_harness_last(request_rec *r) { return lua_request_rec_hook_harness(r, "check_user_id", AP_LUA_HOOK_LAST); } */ static int lua_translate_name_harness_first(request_rec *r) { return lua_request_rec_hook_harness(r, "translate_name", AP_LUA_HOOK_FIRST); } static int lua_translate_name_harness(request_rec *r) { return lua_request_rec_hook_harness(r, "translate_name", APR_HOOK_MIDDLE); } static int lua_translate_name_harness_last(request_rec *r) { return lua_request_rec_hook_harness(r, "translate_name", AP_LUA_HOOK_LAST); } static int lua_fixup_harness(request_rec *r) { return lua_request_rec_hook_harness(r, "fixups", APR_HOOK_MIDDLE); } static int lua_map_to_storage_harness(request_rec *r) { return lua_request_rec_hook_harness(r, "map_to_storage", APR_HOOK_MIDDLE); } static int lua_type_checker_harness(request_rec *r) { return lua_request_rec_hook_harness(r, "type_checker", APR_HOOK_MIDDLE); } static int lua_access_checker_harness_first(request_rec *r) { return lua_request_rec_hook_harness(r, "access_checker", AP_LUA_HOOK_FIRST); } static int lua_access_checker_harness(request_rec *r) { return lua_request_rec_hook_harness(r, "access_checker", APR_HOOK_MIDDLE); } static int lua_access_checker_harness_last(request_rec *r) { return lua_request_rec_hook_harness(r, "access_checker", AP_LUA_HOOK_LAST); } static int lua_auth_checker_harness_first(request_rec *r) { return lua_request_rec_hook_harness(r, "auth_checker", AP_LUA_HOOK_FIRST); } static int lua_auth_checker_harness(request_rec *r) { return lua_request_rec_hook_harness(r, "auth_checker", APR_HOOK_MIDDLE); } static int lua_auth_checker_harness_last(request_rec *r) { return lua_request_rec_hook_harness(r, "auth_checker", AP_LUA_HOOK_LAST); } static void lua_insert_filter_harness(request_rec *r) { /* ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(03223) * "LuaHookInsertFilter not yet implemented"); */ } static int lua_log_transaction_harness(request_rec *r) { return lua_request_rec_hook_harness(r, "log_transaction", APR_HOOK_FIRST); } static int lua_quick_harness(request_rec *r, int lookup) { if (lookup) { return DECLINED; } return lua_request_rec_hook_harness(r, "quick", APR_HOOK_MIDDLE); } static const char *register_translate_name_hook(cmd_parms *cmd, void *_cfg, const char *file, const char *function, const char *when) { const char *err = ap_check_cmd_context(cmd, NOT_IN_DIRECTORY|NOT_IN_FILES| NOT_IN_HTACCESS); int apr_hook_when = APR_HOOK_MIDDLE; if (err) { return err; } if (when) { if (!strcasecmp(when, "early")) { apr_hook_when = AP_LUA_HOOK_FIRST; } else if (!strcasecmp(when, "late")) { apr_hook_when = AP_LUA_HOOK_LAST; } else { return "Third argument must be 'early' or 'late'"; } } return register_named_file_function_hook("translate_name", cmd, _cfg, file, function, apr_hook_when); } static const char *register_translate_name_block(cmd_parms *cmd, void *_cfg, const char *line) { return register_named_block_function_hook("translate_name", cmd, _cfg, line); } static const char *register_fixups_hook(cmd_parms *cmd, void *_cfg, const char *file, const char *function) { return register_named_file_function_hook("fixups", cmd, _cfg, file, function, APR_HOOK_MIDDLE); } static const char *register_fixups_block(cmd_parms *cmd, void *_cfg, const char *line) { return register_named_block_function_hook("fixups", cmd, _cfg, line); } static const char *register_map_to_storage_hook(cmd_parms *cmd, void *_cfg, const char *file, const char *function) { return register_named_file_function_hook("map_to_storage", cmd, _cfg, file, function, APR_HOOK_MIDDLE); } static const char *register_log_transaction_hook(cmd_parms *cmd, void *_cfg, const char *file, const char *function) { return register_named_file_function_hook("log_transaction", cmd, _cfg, file, function, APR_HOOK_FIRST); } static const char *register_map_to_storage_block(cmd_parms *cmd, void *_cfg, const char *line) { return register_named_block_function_hook("map_to_storage", cmd, _cfg, line); } static const char *register_check_user_id_hook(cmd_parms *cmd, void *_cfg, const char *file, const char *function, const char *when) { int apr_hook_when = APR_HOOK_MIDDLE; /* XXX: This does not currently work!! if (when) { if (!strcasecmp(when, "early")) { apr_hook_when = AP_LUA_HOOK_FIRST; } else if (!strcasecmp(when, "late")) { apr_hook_when = AP_LUA_HOOK_LAST; } else { return "Third argument must be 'early' or 'late'"; } } */ return register_named_file_function_hook("check_user_id", cmd, _cfg, file, function, apr_hook_when); } static const char *register_check_user_id_block(cmd_parms *cmd, void *_cfg, const char *line) { return register_named_block_function_hook("check_user_id", cmd, _cfg, line); } static const char *register_type_checker_hook(cmd_parms *cmd, void *_cfg, const char *file, const char *function) { return register_named_file_function_hook("type_checker", cmd, _cfg, file, function, APR_HOOK_MIDDLE); } static const char *register_type_checker_block(cmd_parms *cmd, void *_cfg, const char *line) { return register_named_block_function_hook("type_checker", cmd, _cfg, line); } static const char *register_access_checker_hook(cmd_parms *cmd, void *_cfg, const char *file, const char *function, const char *when) { int apr_hook_when = APR_HOOK_MIDDLE; if (when) { if (!strcasecmp(when, "early")) { apr_hook_when = AP_LUA_HOOK_FIRST; } else if (!strcasecmp(when, "late")) { apr_hook_when = AP_LUA_HOOK_LAST; } else { return "Third argument must be 'early' or 'late'"; } } return register_named_file_function_hook("access_checker", cmd, _cfg, file, function, apr_hook_when); } static const char *register_access_checker_block(cmd_parms *cmd, void *_cfg, const char *line) { return register_named_block_function_hook("access_checker", cmd, _cfg, line); } static const char *register_auth_checker_hook(cmd_parms *cmd, void *_cfg, const char *file, const char *function, const char *when) { int apr_hook_when = APR_HOOK_MIDDLE; if (when) { if (!strcasecmp(when, "early")) { apr_hook_when = AP_LUA_HOOK_FIRST; } else if (!strcasecmp(when, "late")) { apr_hook_when = AP_LUA_HOOK_LAST; } else { return "Third argument must be 'early' or 'late'"; } } return register_named_file_function_hook("auth_checker", cmd, _cfg, file, function, apr_hook_when); } static const char *register_auth_checker_block(cmd_parms *cmd, void *_cfg, const char *line) { return register_named_block_function_hook("auth_checker", cmd, _cfg, line); } static const char *register_insert_filter_hook(cmd_parms *cmd, void *_cfg, const char *file, const char *function) { return "LuaHookInsertFilter not yet implemented"; } static const char *register_quick_hook(cmd_parms *cmd, void *_cfg, const char *file, const char *function) { const char *err = ap_check_cmd_context(cmd, NOT_IN_DIRECTORY|NOT_IN_FILES| NOT_IN_HTACCESS); if (err) { return err; } return register_named_file_function_hook("quick", cmd, _cfg, file, function, APR_HOOK_MIDDLE); } static const char *register_map_handler(cmd_parms *cmd, void *_cfg, const char* match, const char *file, const char *function) { const char *err = ap_check_cmd_context(cmd, NOT_IN_DIRECTORY|NOT_IN_FILES| NOT_IN_HTACCESS); if (err) { return err; } if (!function) function = "handle"; return register_mapped_file_function_hook(match, cmd, _cfg, file, function); } static const char *register_output_filter(cmd_parms *cmd, void *_cfg, const char* filter, const char *file, const char *function) { const char *err = ap_check_cmd_context(cmd, NOT_IN_DIRECTORY|NOT_IN_FILES| NOT_IN_HTACCESS); if (err) { return err; } if (!function) function = "handle"; return register_filter_function_hook(filter, cmd, _cfg, file, function, AP_LUA_FILTER_OUTPUT); } static const char *register_input_filter(cmd_parms *cmd, void *_cfg, const char* filter, const char *file, const char *function) { const char *err = ap_check_cmd_context(cmd, NOT_IN_DIRECTORY|NOT_IN_FILES| NOT_IN_HTACCESS); if (err) { return err; } if (!function) function = "handle"; return register_filter_function_hook(filter, cmd, _cfg, file, function, AP_LUA_FILTER_INPUT); } static const char *register_quick_block(cmd_parms *cmd, void *_cfg, const char *line) { return register_named_block_function_hook("quick", cmd, _cfg, line); } static const char *register_package_helper(cmd_parms *cmd, const char *arg, apr_array_header_t *dir_array) { apr_status_t rv; ap_lua_server_cfg *server_cfg = ap_get_module_config(cmd->server->module_config, &lua_module); char *fixed_filename; rv = apr_filepath_merge(&fixed_filename, server_cfg->root_path, arg, APR_FILEPATH_NOTRELATIVE, cmd->pool); if (rv != APR_SUCCESS) { return apr_psprintf(cmd->pool, "Unable to build full path to file, %s", arg); } *(const char **) apr_array_push(dir_array) = fixed_filename; return NULL; } /** * Called for config directive which looks like * LuaPackagePath /lua/package/path/mapped/thing/like/this/?.lua */ static const char *register_package_dir(cmd_parms *cmd, void *_cfg, const char *arg) { ap_lua_dir_cfg *cfg = (ap_lua_dir_cfg *) _cfg; return register_package_helper(cmd, arg, cfg->package_paths); } /** * Called for config directive which looks like * LuaPackageCPath /lua/package/path/mapped/thing/like/this/?.so */ static const char *register_package_cdir(cmd_parms *cmd, void *_cfg, const char *arg) { ap_lua_dir_cfg *cfg = (ap_lua_dir_cfg *) _cfg; return register_package_helper(cmd, arg, cfg->package_cpaths); } static const char *register_lua_inherit(cmd_parms *cmd, void *_cfg, const char *arg) { ap_lua_dir_cfg *cfg = (ap_lua_dir_cfg *) _cfg; if (strcasecmp("none", arg) == 0) { cfg->inherit = AP_LUA_INHERIT_NONE; } else if (strcasecmp("parent-first", arg) == 0) { cfg->inherit = AP_LUA_INHERIT_PARENT_FIRST; } else if (strcasecmp("parent-last", arg) == 0) { cfg->inherit = AP_LUA_INHERIT_PARENT_LAST; } else { return apr_psprintf(cmd->pool, "LuaInherit type of '%s' not recognized, valid " "options are 'none', 'parent-first', and 'parent-last'", arg); } return NULL; } static const char *register_lua_codecache(cmd_parms *cmd, void *_cfg, const char *arg) { ap_lua_dir_cfg *cfg = (ap_lua_dir_cfg *) _cfg; if (strcasecmp("never", arg) == 0) { cfg->codecache = AP_LUA_CACHE_NEVER; } else if (strcasecmp("stat", arg) == 0) { cfg->codecache = AP_LUA_CACHE_STAT; } else if (strcasecmp("forever", arg) == 0) { cfg->codecache = AP_LUA_CACHE_FOREVER; } else { return apr_psprintf(cmd->pool, "LuaCodeCache type of '%s' not recognized, valid " "options are 'never', 'stat', and 'forever'", arg); } return NULL; } static const char *register_lua_scope(cmd_parms *cmd, void *_cfg, const char *scope, const char *min, const char *max) { ap_lua_dir_cfg *cfg = (ap_lua_dir_cfg *) _cfg; if (strcmp("once", scope) == 0) { cfg->vm_scope = AP_LUA_SCOPE_ONCE; } else if (strcmp("request", scope) == 0) { cfg->vm_scope = AP_LUA_SCOPE_REQUEST; } else if (strcmp("conn", scope) == 0) { cfg->vm_scope = AP_LUA_SCOPE_CONN; } else if (strcmp("thread", scope) == 0) { #if !APR_HAS_THREADS return apr_psprintf(cmd->pool, "Scope type of '%s' cannot be used because this " "server does not have threading support " "(APR_HAS_THREADS)" scope); #endif cfg->vm_scope = AP_LUA_SCOPE_THREAD; } else if (strcmp("server", scope) == 0) { unsigned int vmin, vmax; #if !APR_HAS_THREADS return apr_psprintf(cmd->pool, "Scope type of '%s' cannot be used because this " "server does not have threading support " "(APR_HAS_THREADS)" scope); #endif cfg->vm_scope = AP_LUA_SCOPE_SERVER; vmin = min ? atoi(min) : 1; vmax = max ? atoi(max) : 1; if (vmin == 0) { vmin = 1; } if (vmax < vmin) { vmax = vmin; } cfg->vm_min = vmin; cfg->vm_max = vmax; } else { return apr_psprintf(cmd->pool, "Invalid value for LuaScope, '%s', acceptable " "values are: 'once', 'request', 'conn'" #if APR_HAS_THREADS ", 'thread', 'server'" #endif ,scope); } return NULL; } static const char *register_lua_root(cmd_parms *cmd, void *_cfg, const char *root) { /* ap_lua_dir_cfg* cfg = (ap_lua_dir_cfg*)_cfg; */ ap_lua_server_cfg *cfg = ap_get_module_config(cmd->server->module_config, &lua_module); cfg->root_path = root; return NULL; } const char *ap_lua_ssl_val(apr_pool_t *p, server_rec *s, conn_rec *c, request_rec *r, const char *var) { if (lua_ssl_val) { return (const char *)lua_ssl_val(p, s, c, r, (char *)var); } return NULL; } int ap_lua_ssl_is_https(conn_rec *c) { return lua_ssl_is_https ? lua_ssl_is_https(c) : 0; } /*******************************/ static const char *lua_authz_parse(cmd_parms *cmd, const char *require_line, const void **parsed_require_line) { const char *provider_name; lua_authz_provider_spec *spec; lua_authz_provider_func *func = apr_pcalloc(cmd->pool, sizeof(lua_authz_provider_func)); apr_pool_userdata_get((void**)&provider_name, AUTHZ_PROVIDER_NAME_NOTE, cmd->temp_pool); ap_assert(provider_name != NULL); spec = apr_hash_get(lua_authz_providers, provider_name, APR_HASH_KEY_STRING); ap_assert(spec != NULL); func->spec = spec; if (require_line && *require_line) { const char *arg; func->args = apr_array_make(cmd->pool, 2, sizeof(const char *)); while ((arg = ap_getword_conf(cmd->pool, &require_line)) && *arg) { APR_ARRAY_PUSH(func->args, const char *) = arg; } } *parsed_require_line = func; return NULL; } static authz_status lua_authz_check(request_rec *r, const char *require_line, const void *parsed_require_line) { apr_pool_t *pool; ap_lua_vm_spec *spec; lua_State *L; ap_lua_server_cfg *server_cfg = ap_get_module_config(r->server->module_config, &lua_module); const ap_lua_dir_cfg *cfg = ap_get_module_config(r->per_dir_config, &lua_module); const lua_authz_provider_func *prov_func = parsed_require_line; const lua_authz_provider_spec *prov_spec = prov_func->spec; int result; int nargs = 0; spec = create_vm_spec(&pool, r, cfg, server_cfg, prov_spec->file_name, NULL, 0, prov_spec->function_name, "authz provider"); L = ap_lua_get_lua_state(pool, spec, r); if (L == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02314) "Unable to compile VM for authz provider %s", prov_spec->name); return AUTHZ_GENERAL_ERROR; } lua_getglobal(L, prov_spec->function_name); if (!lua_isfunction(L, -1)) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(02319) "Unable to find entry function '%s' in %s (not a valid function)", prov_spec->function_name, prov_spec->file_name); ap_lua_release_state(L, spec, r); return AUTHZ_GENERAL_ERROR; } ap_lua_run_lua_request(L, r); if (prov_func->args) { int i; if (!lua_checkstack(L, prov_func->args->nelts)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02315) "Error: authz provider %s: too many arguments", prov_spec->name); ap_lua_release_state(L, spec, r); return AUTHZ_GENERAL_ERROR; } for (i = 0; i < prov_func->args->nelts; i++) { const char *arg = APR_ARRAY_IDX(prov_func->args, i, const char *); lua_pushstring(L, arg); } nargs = prov_func->args->nelts; } if (lua_pcall(L, 1 + nargs, 1, 0)) { const char *err = lua_tostring(L, -1); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02316) "Error executing authz provider %s: %s", prov_spec->name, err); ap_lua_release_state(L, spec, r); return AUTHZ_GENERAL_ERROR; } if (!lua_isnumber(L, -1)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02317) "Error: authz provider %s did not return integer", prov_spec->name); ap_lua_release_state(L, spec, r); return AUTHZ_GENERAL_ERROR; } result = lua_tointeger(L, -1); ap_lua_release_state(L, spec, r); switch (result) { case AUTHZ_DENIED: case AUTHZ_GRANTED: case AUTHZ_NEUTRAL: case AUTHZ_GENERAL_ERROR: case AUTHZ_DENIED_NO_USER: return result; default: ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02318) "Error: authz provider %s: invalid return value %d", prov_spec->name, result); } return AUTHZ_GENERAL_ERROR; } static const authz_provider lua_authz_provider = { &lua_authz_check, &lua_authz_parse, }; static const char *register_authz_provider(cmd_parms *cmd, void *_cfg, const char *name, const char *file, const char *function) { lua_authz_provider_spec *spec; const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err) return err; spec = apr_pcalloc(cmd->pool, sizeof(*spec)); spec->name = name; spec->file_name = file; spec->function_name = function; apr_hash_set(lua_authz_providers, name, APR_HASH_KEY_STRING, spec); ap_register_auth_provider(cmd->pool, AUTHZ_PROVIDER_GROUP, name, AUTHZ_PROVIDER_VERSION, &lua_authz_provider, AP_AUTH_INTERNAL_PER_CONF); return NULL; } command_rec lua_commands[] = { AP_INIT_TAKE1("LuaRoot", register_lua_root, NULL, OR_ALL, "Specify the base path for resolving relative paths for mod_lua directives"), AP_INIT_TAKE1("LuaPackagePath", register_package_dir, NULL, OR_ALL, "Add a directory to lua's package.path"), AP_INIT_TAKE1("LuaPackageCPath", register_package_cdir, NULL, OR_ALL, "Add a directory to lua's package.cpath"), AP_INIT_TAKE3("LuaAuthzProvider", register_authz_provider, NULL, RSRC_CONF|EXEC_ON_READ, "Provide an authorization provider"), AP_INIT_TAKE23("LuaHookTranslateName", register_translate_name_hook, NULL, OR_ALL, "Provide a hook for the translate name phase of request processing"), AP_INIT_RAW_ARGS("package_paths = apr_array_make(p, 2, sizeof(char *)); cfg->package_cpaths = apr_array_make(p, 2, sizeof(char *)); cfg->mapped_handlers = apr_array_make(p, 1, sizeof(ap_lua_mapped_handler_spec *)); cfg->mapped_filters = apr_array_make(p, 1, sizeof(ap_lua_filter_handler_spec *)); cfg->pool = p; cfg->hooks = apr_hash_make(p); cfg->dir = apr_pstrdup(p, dir); cfg->vm_scope = AP_LUA_SCOPE_UNSET; cfg->codecache = AP_LUA_CACHE_UNSET; cfg->vm_min = 0; cfg->vm_max = 0; cfg->inherit = AP_LUA_INHERIT_UNSET; return cfg; } static int create_request_config(request_rec *r) { ap_lua_request_cfg *cfg = apr_palloc(r->pool, sizeof(ap_lua_request_cfg)); cfg->mapped_request_details = NULL; cfg->request_scoped_vms = apr_hash_make(r->pool); ap_set_module_config(r->request_config, &lua_module, cfg); return OK; } static void *create_server_config(apr_pool_t *p, server_rec *s) { ap_lua_server_cfg *cfg = apr_pcalloc(p, sizeof(ap_lua_server_cfg)); cfg->root_path = NULL; return cfg; } static int lua_request_hook(lua_State *L, request_rec *r) { ap_lua_push_request(L, r); return OK; } static int lua_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { ap_mutex_register(pconf, "lua-ivm-shm", NULL, APR_LOCK_DEFAULT, 0); return OK; } static int lua_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { apr_pool_t **pool; apr_status_t rs; lua_ssl_val = APR_RETRIEVE_OPTIONAL_FN(ssl_var_lookup); lua_ssl_is_https = APR_RETRIEVE_OPTIONAL_FN(ssl_is_https); if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) return OK; /* Create ivm mutex */ rs = ap_global_mutex_create(&lua_ivm_mutex, NULL, "lua-ivm-shm", NULL, s, pconf, 0); if (APR_SUCCESS != rs) { return HTTP_INTERNAL_SERVER_ERROR; } /* Create shared memory space, anonymous first if possible. */ rs = apr_shm_create(&lua_ivm_shm, sizeof pool, NULL, pconf); if (APR_STATUS_IS_ENOTIMPL(rs)) { /* Fall back to filename-based; nuke any left-over first. */ lua_ivm_shmfile = ap_runtime_dir_relative(pconf, DEFAULT_LUA_SHMFILE); apr_shm_remove(lua_ivm_shmfile, pconf); rs = apr_shm_create(&lua_ivm_shm, sizeof pool, lua_ivm_shmfile, pconf); } if (rs != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rs, s, APLOGNO(02665) "mod_lua: Failed to create shared memory segment on file %s", lua_ivm_shmfile ? lua_ivm_shmfile : "(anonymous)"); return HTTP_INTERNAL_SERVER_ERROR; } pool = (apr_pool_t **)apr_shm_baseaddr_get(lua_ivm_shm); apr_pool_create(pool, pconf); apr_pool_cleanup_register(pconf, NULL, shm_cleanup_wrapper, apr_pool_cleanup_null); return OK; } static void *overlay_hook_specs(apr_pool_t *p, const void *key, apr_ssize_t klen, const void *overlay_val, const void *base_val, const void *data) { const apr_array_header_t *overlay_info = (const apr_array_header_t*)overlay_val; const apr_array_header_t *base_info = (const apr_array_header_t*)base_val; return apr_array_append(p, base_info, overlay_info); } static void *merge_dir_config(apr_pool_t *p, void *basev, void *overridesv) { ap_lua_dir_cfg *a, *base, *overrides; a = (ap_lua_dir_cfg *)apr_pcalloc(p, sizeof(ap_lua_dir_cfg)); base = (ap_lua_dir_cfg*)basev; overrides = (ap_lua_dir_cfg*)overridesv; a->pool = overrides->pool; a->dir = apr_pstrdup(p, overrides->dir); a->vm_scope = (overrides->vm_scope == AP_LUA_SCOPE_UNSET) ? base->vm_scope: overrides->vm_scope; a->inherit = (overrides->inherit == AP_LUA_INHERIT_UNSET) ? base->inherit : overrides->inherit; a->codecache = (overrides->codecache == AP_LUA_CACHE_UNSET) ? base->codecache : overrides->codecache; a->vm_min = (overrides->vm_min == 0) ? base->vm_min : overrides->vm_min; a->vm_max = (overrides->vm_max == 0) ? base->vm_max : overrides->vm_max; if (a->inherit == AP_LUA_INHERIT_UNSET || a->inherit == AP_LUA_INHERIT_PARENT_FIRST) { a->package_paths = apr_array_append(p, base->package_paths, overrides->package_paths); a->package_cpaths = apr_array_append(p, base->package_cpaths, overrides->package_cpaths); a->mapped_handlers = apr_array_append(p, base->mapped_handlers, overrides->mapped_handlers); a->mapped_filters = apr_array_append(p, base->mapped_filters, overrides->mapped_filters); a->hooks = apr_hash_merge(p, overrides->hooks, base->hooks, overlay_hook_specs, NULL); } else if (a->inherit == AP_LUA_INHERIT_PARENT_LAST) { a->package_paths = apr_array_append(p, overrides->package_paths, base->package_paths); a->package_cpaths = apr_array_append(p, overrides->package_cpaths, base->package_cpaths); a->mapped_handlers = apr_array_append(p, overrides->mapped_handlers, base->mapped_handlers); a->mapped_filters = apr_array_append(p, overrides->mapped_filters, base->mapped_filters); a->hooks = apr_hash_merge(p, base->hooks, overrides->hooks, overlay_hook_specs, NULL); } else { a->package_paths = overrides->package_paths; a->package_cpaths = overrides->package_cpaths; a->mapped_handlers= overrides->mapped_handlers; a->mapped_filters= overrides->mapped_filters; a->hooks= overrides->hooks; } return a; } static void lua_register_hooks(apr_pool_t *p) { /* ap_register_output_filter("luahood", luahood, NULL, AP_FTYPE_RESOURCE); */ ap_hook_handler(lua_handler, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_create_request(create_request_config, NULL, NULL, APR_HOOK_MIDDLE); /* http_request.h hooks */ ap_hook_translate_name(lua_translate_name_harness_first, NULL, NULL, AP_LUA_HOOK_FIRST); ap_hook_translate_name(lua_translate_name_harness, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_translate_name(lua_translate_name_harness_last, NULL, NULL, AP_LUA_HOOK_LAST); ap_hook_fixups(lua_fixup_harness, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_map_to_storage(lua_map_to_storage_harness, NULL, NULL, APR_HOOK_MIDDLE); /* XXX: Does not work :( * ap_hook_check_user_id(lua_check_user_id_harness_first, NULL, NULL, AP_LUA_HOOK_FIRST); */ ap_hook_check_user_id(lua_check_user_id_harness, NULL, NULL, APR_HOOK_MIDDLE); /* XXX: Does not work :( * ap_hook_check_user_id(lua_check_user_id_harness_last, NULL, NULL, AP_LUA_HOOK_LAST); */ ap_hook_type_checker(lua_type_checker_harness, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_access_checker(lua_access_checker_harness_first, NULL, NULL, AP_LUA_HOOK_FIRST); ap_hook_access_checker(lua_access_checker_harness, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_access_checker(lua_access_checker_harness_last, NULL, NULL, AP_LUA_HOOK_LAST); ap_hook_auth_checker(lua_auth_checker_harness_first, NULL, NULL, AP_LUA_HOOK_FIRST); ap_hook_auth_checker(lua_auth_checker_harness, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_auth_checker(lua_auth_checker_harness_last, NULL, NULL, AP_LUA_HOOK_LAST); ap_hook_insert_filter(lua_insert_filter_harness, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_quick_handler(lua_quick_harness, NULL, NULL, APR_HOOK_FIRST); ap_hook_post_config(lua_post_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_pre_config(lua_pre_config, NULL, NULL, APR_HOOK_MIDDLE); APR_OPTIONAL_HOOK(ap_lua, lua_open, lua_open_hook, NULL, NULL, APR_HOOK_REALLY_FIRST); APR_OPTIONAL_HOOK(ap_lua, lua_request, lua_request_hook, NULL, NULL, APR_HOOK_REALLY_FIRST); ap_hook_handler(lua_map_handler, NULL, NULL, AP_LUA_HOOK_FIRST); /* Hook this right before FallbackResource kicks in */ ap_hook_fixups(lua_map_handler_fixups, NULL, NULL, AP_LUA_HOOK_LAST-2); #if APR_HAS_THREADS ap_hook_child_init(ap_lua_init_mutex, NULL, NULL, APR_HOOK_MIDDLE); #endif /* providers */ lua_authz_providers = apr_hash_make(p); /* Logging catcher */ ap_hook_log_transaction(lua_log_transaction_harness,NULL,NULL, APR_HOOK_FIRST); } AP_DECLARE_MODULE(lua) = { STANDARD20_MODULE_STUFF, create_dir_config, /* create per-dir config structures */ merge_dir_config, /* merge per-dir config structures */ create_server_config, /* create per-server config structures */ NULL, /* merge per-server config structures */ lua_commands, /* table of config file commands */ lua_register_hooks /* register hooks */ }; httpd-2.4.41/modules/lua/lua_dbd.c0000644000000000000500000006457413055576313015253 0ustar rootsrc/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_lua.h" #include "lua_dbd.h" APLOG_USE_MODULE(lua); static APR_OPTIONAL_FN_TYPE(ap_dbd_close) *lua_ap_dbd_close = NULL; static APR_OPTIONAL_FN_TYPE(ap_dbd_open) *lua_ap_dbd_open = NULL; static request_rec *ap_lua_check_request_rec(lua_State *L, int index) { request_rec *r; luaL_checkudata(L, index, "Apache2.Request"); r = lua_unboxpointer(L, index); return r; } static lua_db_handle *lua_get_db_handle(lua_State *L) { luaL_checktype(L, 1, LUA_TTABLE); lua_rawgeti(L, 1, 0); luaL_checktype(L, -1, LUA_TUSERDATA); return (lua_db_handle *) lua_topointer(L, -1); } static lua_db_result_set *lua_get_result_set(lua_State *L) { luaL_checktype(L, 1, LUA_TTABLE); lua_rawgeti(L, 1, 0); luaL_checktype(L, -1, LUA_TUSERDATA); return (lua_db_result_set *) lua_topointer(L, -1); } /* ============================================================================= db:close(): Closes an open database connection. ============================================================================= */ int lua_db_close(lua_State *L) { /*~~~~~~~~~~~~~~~~~~~~*/ lua_db_handle *db; apr_status_t rc = 0; /*~~~~~~~~~~~~~~~~~~~~*/ db = lua_get_db_handle(L); if (db && db->alive) { if (db->type == LUA_DBTYPE_APR_DBD) { rc = apr_dbd_close(db->driver, db->handle); if (db->pool) apr_pool_destroy(db->pool); } else { lua_ap_dbd_close = APR_RETRIEVE_OPTIONAL_FN(ap_dbd_close); if (lua_ap_dbd_close != NULL) if (db->dbdhandle) lua_ap_dbd_close(db->server, db->dbdhandle); } db->driver = NULL; db->handle = NULL; db->alive = 0; db->pool = NULL; } lua_settop(L, 0); lua_pushnumber(L, rc); return 1; } /* ============================================================================= db:__gc(): Garbage collecting function. ============================================================================= */ int lua_db_gc(lua_State *L) { /*~~~~~~~~~~~~~~~~*/ lua_db_handle *db; /*~~~~~~~~~~~~~~~~~~~~*/ db = lua_touserdata(L, 1); if (db && db->alive) { if (db->type == LUA_DBTYPE_APR_DBD) { apr_dbd_close(db->driver, db->handle); if (db->pool) apr_pool_destroy(db->pool); } else { lua_ap_dbd_close = APR_RETRIEVE_OPTIONAL_FN(ap_dbd_close); if (lua_ap_dbd_close != NULL) if (db->dbdhandle) lua_ap_dbd_close(db->server, db->dbdhandle); } db->driver = NULL; db->handle = NULL; db->alive = 0; db->pool = NULL; } lua_settop(L, 0); return 0; } /* ============================================================================= db:active(): Returns true if the connection to the db is still active. ============================================================================= */ int lua_db_active(lua_State *L) { /*~~~~~~~~~~~~~~~~~~~~*/ lua_db_handle *db = 0; apr_status_t rc = 0; /*~~~~~~~~~~~~~~~~~~~~*/ db = lua_get_db_handle(L); if (db && db->alive) { rc = apr_dbd_check_conn(db->driver, db->pool, db->handle); if (rc == APR_SUCCESS) { lua_pushboolean(L, 1); return 1; } } lua_pushboolean(L, 0); return 1; } /* ============================================================================= db:query(statement): Executes the given database query and returns the number of rows affected. If an error is encountered, returns nil as the first parameter and the error message as the second. ============================================================================= */ int lua_db_query(lua_State *L) { /*~~~~~~~~~~~~~~~~~~~~~~~*/ lua_db_handle *db = 0; apr_status_t rc = 0; int x = 0; const char *statement; /*~~~~~~~~~~~~~~~~~~~~~~~*/ luaL_checktype(L, 3, LUA_TSTRING); statement = lua_tostring(L, 3); db = lua_get_db_handle(L); if (db && db->alive) rc = apr_dbd_query(db->driver, db->handle, &x, statement); else { rc = 0; x = -1; } if (rc == APR_SUCCESS) lua_pushnumber(L, x); else { /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ const char *err = apr_dbd_error(db->driver, db->handle, rc); /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ lua_pushnil(L); if (err) { lua_pushstring(L, err); return 2; } } return 1; } /* ============================================================================= db:escape(string): Escapes a string for safe use in the given database type. ============================================================================= */ int lua_db_escape(lua_State *L) { /*~~~~~~~~~~~~~~~~~~~~~*/ lua_db_handle *db = 0; const char *statement; const char *escaped = 0; request_rec *r; /*~~~~~~~~~~~~~~~~~~~~~*/ r = ap_lua_check_request_rec(L, 2); if (r) { luaL_checktype(L, 3, LUA_TSTRING); statement = lua_tostring(L, 3); db = lua_get_db_handle(L); if (db && db->alive) { apr_dbd_init(r->pool); escaped = apr_dbd_escape(db->driver, r->pool, statement, db->handle); if (escaped) { lua_pushstring(L, escaped); return 1; } } else { lua_pushnil(L); } return (1); } return 0; } /* ============================================================================= resultset(N): Fetches one or more rows from a result set. ============================================================================= */ int lua_db_get_row(lua_State *L) { int row_no,x,alpha = 0; const char *entry, *rowname; apr_dbd_row_t *row = 0; lua_db_result_set *res = lua_get_result_set(L); row_no = luaL_optinteger(L, 2, 0); if (lua_isboolean(L, 3)) { alpha = lua_toboolean(L, 3); } lua_settop(L,0); /* Fetch all rows at once? */ if (row_no == 0) { row_no = 1; lua_newtable(L); while (apr_dbd_get_row(res->driver, res->pool, res->results, &row, -1) != -1) { lua_pushinteger(L, row_no); lua_newtable(L); for (x = 0; x < res->cols; x++) { entry = apr_dbd_get_entry(res->driver, row, x); if (entry) { if (alpha == 1) { rowname = apr_dbd_get_name(res->driver, res->results, x); lua_pushstring(L, rowname ? rowname : "(oob)"); } else { lua_pushinteger(L, x + 1); } lua_pushstring(L, entry); lua_rawset(L, -3); } } lua_rawset(L, -3); row_no++; } return 1; } /* Just fetch a single row */ if (apr_dbd_get_row(res->driver, res->pool, res->results, &row, row_no) != -1) { lua_newtable(L); for (x = 0; x < res->cols; x++) { entry = apr_dbd_get_entry(res->driver, row, x); if (entry) { if (alpha == 1) { rowname = apr_dbd_get_name(res->driver, res->results, x); lua_pushstring(L, rowname ? rowname : "(oob)"); } else { lua_pushinteger(L, x + 1); } lua_pushstring(L, entry); lua_rawset(L, -3); } } return 1; } return 0; } /* ============================================================================= db:select(statement): Queries the database for the given statement and returns the rows/columns found as a table. If an error is encountered, returns nil as the first parameter and the error message as the second. ============================================================================= */ int lua_db_select(lua_State *L) { /*~~~~~~~~~~~~~~~~~~~~~~~*/ lua_db_handle *db = 0; apr_status_t rc = 0; const char *statement; request_rec *r; /*~~~~~~~~~~~~~~~~~~~~~~~*/ r = ap_lua_check_request_rec(L, 2); if (r) { luaL_checktype(L, 3, LUA_TSTRING); statement = lua_tostring(L, 3); db = lua_get_db_handle(L); if (db && db->alive) { /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ int cols; apr_dbd_results_t *results = 0; lua_db_result_set* resultset = NULL; /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ rc = apr_dbd_select(db->driver, db->pool, db->handle, &results, statement, 0); if (rc == APR_SUCCESS) { cols = apr_dbd_num_cols(db->driver, results); if (cols > 0) { lua_newtable(L); resultset = lua_newuserdata(L, sizeof(lua_db_result_set)); resultset->cols = cols; resultset->driver = db->driver; resultset->pool = db->pool; resultset->rows = apr_dbd_num_tuples(db->driver, results); resultset->results = results; luaL_newmetatable(L, "lua_apr.dbselect"); lua_pushliteral(L, "__call"); lua_pushcfunction(L, lua_db_get_row); lua_rawset(L, -3); lua_setmetatable(L, -3); lua_rawseti(L, -2, 0); return 1; } return 0; } else { /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ const char *err = apr_dbd_error(db->driver, db->handle, rc); /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ lua_pushnil(L); if (err) { lua_pushstring(L, err); return 2; } } } lua_pushboolean(L, 0); return 1; } return 0; } /* ============================================================================= statement:select(var1, var2, var3...): Injects variables into a prepared statement and returns the number of rows matching the query. ============================================================================= */ int lua_db_prepared_select(lua_State *L) { /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ lua_db_prepared_statement *st = 0; apr_status_t rc = 0; const char **vars; int x, have; /*~~~~~~~~~~~~~~~~~~~~~~~*/ /* Fetch the prepared statement and the vars passed */ luaL_checktype(L, 1, LUA_TTABLE); lua_rawgeti(L, 1, 0); luaL_checktype(L, -1, LUA_TUSERDATA); st = (lua_db_prepared_statement*) lua_topointer(L, -1); /* Check if we got enough variables passed on to us. * This, of course, only works for prepared statements made through lua. */ have = lua_gettop(L) - 2; if (st->variables != -1 && have < st->variables ) { lua_pushboolean(L, 0); lua_pushfstring(L, "Error in executing prepared statement: Expected %d arguments, got %d.", st->variables, have); return 2; } vars = apr_pcalloc(st->db->pool, have*sizeof(char *)); for (x = 0; x < have; x++) { vars[x] = lua_tostring(L, x + 2); } /* Fire off the query */ if (st->db && st->db->alive) { /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ int cols; apr_dbd_results_t *results = 0; /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ rc = apr_dbd_pselect(st->db->driver, st->db->pool, st->db->handle, &results, st->statement, 0, have, vars); if (rc == APR_SUCCESS) { /*~~~~~~~~~~~~~~~~~~~~~*/ lua_db_result_set *resultset; /*~~~~~~~~~~~~~~~~~~~~~*/ cols = apr_dbd_num_cols(st->db->driver, results); lua_newtable(L); resultset = lua_newuserdata(L, sizeof(lua_db_result_set)); resultset->cols = cols; resultset->driver = st->db->driver; resultset->pool = st->db->pool; resultset->rows = apr_dbd_num_tuples(st->db->driver, results); resultset->results = results; luaL_newmetatable(L, "lua_apr.dbselect"); lua_pushliteral(L, "__call"); lua_pushcfunction(L, lua_db_get_row); lua_rawset(L, -3); lua_setmetatable(L, -3); lua_rawseti(L, -2, 0); return 1; } else { /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ const char *err = apr_dbd_error(st->db->driver, st->db->handle, rc); /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ lua_pushnil(L); if (err) { lua_pushstring(L, err); return 2; } return 1; } } lua_pushboolean(L, 0); lua_pushliteral(L, "Database connection seems to be closed, please reacquire it."); return (2); } /* ============================================================================= statement:query(var1, var2, var3...): Injects variables into a prepared statement and returns the number of rows affected. ============================================================================= */ int lua_db_prepared_query(lua_State *L) { /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ lua_db_prepared_statement *st = 0; apr_status_t rc = 0; const char **vars; int x, have; /*~~~~~~~~~~~~~~~~~~~~~~~*/ /* Fetch the prepared statement and the vars passed */ luaL_checktype(L, 1, LUA_TTABLE); lua_rawgeti(L, 1, 0); luaL_checktype(L, -1, LUA_TUSERDATA); st = (lua_db_prepared_statement*) lua_topointer(L, -1); /* Check if we got enough variables passed on to us. * This, of course, only works for prepared statements made through lua. */ have = lua_gettop(L) - 2; if (st->variables != -1 && have < st->variables ) { lua_pushboolean(L, 0); lua_pushfstring(L, "Error in executing prepared statement: Expected %d arguments, got %d.", st->variables, have); return 2; } vars = apr_pcalloc(st->db->pool, have*sizeof(char *)); for (x = 0; x < have; x++) { vars[x] = lua_tostring(L, x + 2); } /* Fire off the query */ if (st->db && st->db->alive) { /*~~~~~~~~~~~~~~*/ int affected = 0; /*~~~~~~~~~~~~~~*/ rc = apr_dbd_pquery(st->db->driver, st->db->pool, st->db->handle, &affected, st->statement, have, vars); if (rc == APR_SUCCESS) { lua_pushinteger(L, affected); return 1; } else { /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ const char *err = apr_dbd_error(st->db->driver, st->db->handle, rc); /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ lua_pushnil(L); if (err) { lua_pushstring(L, err); return 2; } return 1; } } lua_pushboolean(L, 0); lua_pushliteral(L, "Database connection seems to be closed, please reacquire it."); return (2); } /* ============================================================================= db:prepare(statement): Prepares a statement for later query/select. Returns a table with a :query and :select function, same as the db funcs. ============================================================================= */ int lua_db_prepare(lua_State* L) { /*~~~~~~~~~~~~~~~~~~~~~~~~~~*/ lua_db_handle *db = 0; apr_status_t rc = 0; const char *statement, *at; request_rec *r; lua_db_prepared_statement* st; int need = 0; /*~~~~~~~~~~~~~~~~~~~~~~~~~~*/ r = ap_lua_check_request_rec(L, 2); if (r) { apr_dbd_prepared_t *pstatement = NULL; luaL_checktype(L, 3, LUA_TSTRING); statement = lua_tostring(L, 3); /* Count number of variables in statement */ at = ap_strchr_c(statement,'%'); while (at != NULL) { if (at[1] == '%') { at++; } else { need++; } at = ap_strchr_c(at+1,'%'); } db = lua_get_db_handle(L); rc = apr_dbd_prepare(db->driver, r->pool, db->handle, statement, NULL, &pstatement); if (rc != APR_SUCCESS) { /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ const char *err = apr_dbd_error(db->driver, db->handle, rc); /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ lua_pushnil(L); if (err) { lua_pushstring(L, err); return 2; } return 1; } /* Push the prepared statement table */ lua_newtable(L); st = lua_newuserdata(L, sizeof(lua_db_prepared_statement)); st->statement = pstatement; st->variables = need; st->db = db; lua_pushliteral(L, "select"); lua_pushcfunction(L, lua_db_prepared_select); lua_rawset(L, -4); lua_pushliteral(L, "query"); lua_pushcfunction(L, lua_db_prepared_query); lua_rawset(L, -4); lua_rawseti(L, -2, 0); return 1; } return 0; } /* ============================================================================= db:prepared(statement): Fetches a prepared statement made through DBDPrepareSQL. ============================================================================= */ int lua_db_prepared(lua_State* L) { /*~~~~~~~~~~~~~~~~~~~~~~~~~~*/ lua_db_handle *db = 0; const char *tag; request_rec *r; lua_db_prepared_statement* st; /*~~~~~~~~~~~~~~~~~~~~~~~~~~*/ r = ap_lua_check_request_rec(L, 2); if (r) { apr_dbd_prepared_t *pstatement = NULL; db = lua_get_db_handle(L); luaL_checktype(L, 3, LUA_TSTRING); tag = lua_tostring(L, 3); /* Look for the statement */ pstatement = apr_hash_get(db->dbdhandle->prepared, tag, APR_HASH_KEY_STRING); if (pstatement == NULL) { lua_pushnil(L); lua_pushfstring(L, "Could not find any prepared statement called %s!", tag); return 2; } /* Push the prepared statement table */ lua_newtable(L); st = lua_newuserdata(L, sizeof(lua_db_prepared_statement)); st->statement = pstatement; st->variables = -1; /* we don't know :( */ st->db = db; lua_pushliteral(L, "select"); lua_pushcfunction(L, lua_db_prepared_select); lua_rawset(L, -4); lua_pushliteral(L, "query"); lua_pushcfunction(L, lua_db_prepared_query); lua_rawset(L, -4); lua_rawseti(L, -2, 0); return 1; } return 0; } /* lua_push_db_handle: Creates a database table object with database functions and a userdata at index 0, which will call lua_dbgc when garbage collected. */ static lua_db_handle* lua_push_db_handle(lua_State *L, request_rec* r, int type, apr_pool_t* pool) { lua_db_handle* db; lua_newtable(L); db = lua_newuserdata(L, sizeof(lua_db_handle)); db->alive = 1; db->pool = pool; db->type = type; db->dbdhandle = 0; db->server = r->server; luaL_newmetatable(L, "lua_apr.dbacquire"); lua_pushliteral(L, "__gc"); lua_pushcfunction(L, lua_db_gc); lua_rawset(L, -3); lua_setmetatable(L, -2); lua_rawseti(L, -2, 0); lua_pushliteral(L, "escape"); lua_pushcfunction(L, lua_db_escape); lua_rawset(L, -3); lua_pushliteral(L, "close"); lua_pushcfunction(L, lua_db_close); lua_rawset(L, -3); lua_pushliteral(L, "select"); lua_pushcfunction(L, lua_db_select); lua_rawset(L, -3); lua_pushliteral(L, "query"); lua_pushcfunction(L, lua_db_query); lua_rawset(L, -3); lua_pushliteral(L, "active"); lua_pushcfunction(L, lua_db_active); lua_rawset(L, -3); lua_pushliteral(L, "prepare"); lua_pushcfunction(L, lua_db_prepare); lua_rawset(L, -3); lua_pushliteral(L, "prepared"); lua_pushcfunction(L, lua_db_prepared); lua_rawset(L, -3); return db; } /* ============================================================================= dbacquire(dbType, dbString): Opens a new connection to a database of type _dbType_ and with the connection parameters _dbString_. If successful, returns a table with functions for using the database handle. If an error occurs, returns nil as the first parameter and the error message as the second. See the APR_DBD for a list of database types and connection strings supported. ============================================================================= */ int lua_db_acquire(lua_State *L) { /*~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ const char *type; const char *arguments; const char *error = 0; request_rec *r; lua_db_handle *db = 0; apr_status_t rc = 0; ap_dbd_t *dbdhandle = NULL; apr_pool_t *pool = NULL; /*~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ r = ap_lua_check_request_rec(L, 1); if (r) { type = luaL_optstring(L, 2, "mod_dbd"); /* Defaults to mod_dbd */ if (!strcmp(type, "mod_dbd")) { lua_settop(L, 0); lua_ap_dbd_open = APR_RETRIEVE_OPTIONAL_FN(ap_dbd_open); if (lua_ap_dbd_open) dbdhandle = (ap_dbd_t *) lua_ap_dbd_open( r->server->process->pool, r->server); if (dbdhandle) { db = lua_push_db_handle(L, r, LUA_DBTYPE_MOD_DBD, dbdhandle->pool); db->driver = dbdhandle->driver; db->handle = dbdhandle->handle; db->dbdhandle = dbdhandle; return 1; } else { lua_pushnil(L); if ( lua_ap_dbd_open == NULL ) lua_pushliteral(L, "mod_dbd doesn't seem to have been loaded."); else lua_pushliteral( L, "Could not acquire connection from mod_dbd. If your database is running, this may indicate a permission problem."); return 2; } } else { rc = apr_pool_create(&pool, NULL); if (rc != APR_SUCCESS) { lua_pushnil(L); lua_pushliteral(L, "Could not allocate memory for database!"); return 2; } apr_pool_tag(pool, "lua_dbd_pool"); apr_dbd_init(pool); dbdhandle = apr_pcalloc(pool, sizeof(ap_dbd_t)); rc = apr_dbd_get_driver(pool, type, &dbdhandle->driver); if (rc == APR_SUCCESS) { luaL_checktype(L, 3, LUA_TSTRING); arguments = lua_tostring(L, 3); lua_settop(L, 0); if (*arguments) { rc = apr_dbd_open_ex(dbdhandle->driver, pool, arguments, &dbdhandle->handle, &error); if (rc == APR_SUCCESS) { db = lua_push_db_handle(L, r, LUA_DBTYPE_APR_DBD, pool); db->driver = dbdhandle->driver; db->handle = dbdhandle->handle; db->dbdhandle = dbdhandle; return 1; } else { lua_pushnil(L); if (error) { lua_pushstring(L, error); return 2; } return 1; } } lua_pushnil(L); lua_pushliteral(L, "No database connection string was specified."); apr_pool_destroy(pool); return (2); } else { lua_pushnil(L); if (APR_STATUS_IS_ENOTIMPL(rc)) { lua_pushfstring(L, "driver for %s not available", type); } else if (APR_STATUS_IS_EDSOOPEN(rc)) { lua_pushfstring(L, "can't find driver for %s", type); } else if (APR_STATUS_IS_ESYMNOTFOUND(rc)) { lua_pushfstring(L, "driver for %s is invalid or corrupted", type); } else { lua_pushliteral(L, "mod_lua not compatible with APR in get_driver"); } lua_pushinteger(L, rc); apr_pool_destroy(pool); return 3; } } lua_pushnil(L); return 1; } return 0; } httpd-2.4.41/modules/lua/lua_apr.c0000644000000000000500000000577013127013226015262 0ustar rootsrc/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_lua.h" #include "lua_apr.h" APLOG_USE_MODULE(lua); req_table_t *ap_lua_check_apr_table(lua_State *L, int index) { req_table_t* t; luaL_checkudata(L, index, "Apr.Table"); t = lua_unboxpointer(L, index); return t; } void ap_lua_push_apr_table(lua_State *L, req_table_t *t) { lua_boxpointer(L, t); luaL_getmetatable(L, "Apr.Table"); lua_setmetatable(L, -2); } static int lua_table_set(lua_State *L) { req_table_t *t = ap_lua_check_apr_table(L, 1); const char *key = luaL_checkstring(L, 2); const char *val = luaL_checkstring(L, 3); /* Unless it's the 'notes' table, check for newline chars */ /* t->r will be NULL in case of the connection notes, but since we aren't going to check anything called 'notes', we can safely disregard checking whether t->r is defined. */ if (strcmp(t->n, "notes") && ap_strchr_c(val, '\n')) { char *badchar; char *replacement = apr_pstrdup(t->r->pool, val); badchar = replacement; while ( (badchar = ap_strchr(badchar, '\n')) ) { *badchar = ' '; } ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, t->r, APLOGNO(02614) "mod_lua: Value for '%s' in table '%s' contains newline!", key, t->n); apr_table_set(t->t, key, replacement); } else { apr_table_set(t->t, key, val); } return 0; } static int lua_table_get(lua_State *L) { req_table_t *t = ap_lua_check_apr_table(L, 1); const char *key = luaL_checkstring(L, 2); const char *val = apr_table_get(t->t, key); lua_pushstring(L, val); return 1; } static const luaL_Reg lua_table_methods[] = { {"set", lua_table_set}, {"get", lua_table_get}, {0, 0} }; int ap_lua_init(lua_State *L, apr_pool_t *p) { luaL_newmetatable(L, "Apr.Table"); #if LUA_VERSION_NUM < 502 luaL_register(L, "apr_table", lua_table_methods); #else luaL_newlib(L, lua_table_methods); #endif lua_pushstring(L, "__index"); lua_pushstring(L, "get"); lua_gettable(L, 2); lua_settable(L, 1); lua_pushstring(L, "__newindex"); lua_pushstring(L, "set"); lua_gettable(L, 2); lua_settable(L, 1); return 0; } httpd-2.4.41/modules/lua/lua_passwd.c0000644000000000000500000001213412155674011015776 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "lua_passwd.h" #include "apr_strings.h" #include "apr_errno.h" #if APR_HAVE_STDIO_H #include #endif #include "apr_md5.h" #include "apr_sha1.h" #if APR_HAVE_TIME_H #include #endif #if APR_HAVE_CRYPT_H #include #endif #if APR_HAVE_STDLIB_H #include #endif #if APR_HAVE_STRING_H #include #endif #if APR_HAVE_UNISTD_H #include #endif #if APR_HAVE_IO_H #include #endif static int generate_salt(char *s, size_t size, const char **errstr, apr_pool_t *pool) { unsigned char rnd[32]; static const char itoa64[] = "./0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"; apr_size_t n; unsigned int val = 0, bits = 0; apr_status_t rv; n = (size * 6 + 7)/8; if (n > sizeof(rnd)) { *errstr = apr_psprintf(pool, "generate_salt(): BUG: Buffer too small"); return ERR_RANDOM; } rv = apr_generate_random_bytes(rnd, n); if (rv) { *errstr = apr_psprintf(pool, "Unable to generate random bytes: %pm", &rv); return ERR_RANDOM; } n = 0; while (size > 0) { if (bits < 6) { val |= (rnd[n++] << bits); bits += 8; } *s++ = itoa64[val & 0x3f]; size--; val >>= 6; bits -= 6; } *s = '\0'; return 0; } /* * Make a password record from the given information. A zero return * indicates success; on failure, ctx->errstr points to the error message. */ int mk_password_hash(passwd_ctx *ctx) { char *pw; char salt[16]; apr_status_t rv; int ret = 0; #if CRYPT_ALGO_SUPPORTED char *cbuf; #endif pw = ctx->passwd; switch (ctx->alg) { case ALG_APSHA: /* XXX out >= 28 + strlen(sha1) chars - fixed len SHA */ apr_sha1_base64(pw, strlen(pw), ctx->out); break; case ALG_APMD5: ret = generate_salt(salt, 8, &ctx->errstr, ctx->pool); if (ret != 0) { ret = ERR_GENERAL; break; } rv = apr_md5_encode(pw, salt, ctx->out, ctx->out_len); if (rv != APR_SUCCESS) { ctx->errstr = apr_psprintf(ctx->pool, "could not encode password: %pm", &rv); ret = ERR_GENERAL; } break; #if CRYPT_ALGO_SUPPORTED case ALG_CRYPT: ret = generate_salt(salt, 8, &ctx->errstr, ctx->pool); if (ret != 0) break; cbuf = crypt(pw, salt); if (cbuf == NULL) { rv = APR_FROM_OS_ERROR(errno); ctx->errstr = apr_psprintf(ctx->pool, "crypt() failed: %pm", &rv); ret = ERR_PWMISMATCH; break; } apr_cpystrn(ctx->out, cbuf, ctx->out_len - 1); if (strlen(pw) > 8) { char *truncpw = apr_pstrdup(ctx->pool, pw); truncpw[8] = '\0'; if (!strcmp(ctx->out, crypt(truncpw, salt))) { ctx->errstr = apr_psprintf(ctx->pool, "Warning: Password truncated to 8 " "characters by CRYPT algorithm."); } memset(truncpw, '\0', strlen(pw)); } break; #endif /* CRYPT_ALGO_SUPPORTED */ #if BCRYPT_ALGO_SUPPORTED case ALG_BCRYPT: rv = apr_generate_random_bytes((unsigned char*)salt, 16); if (rv != APR_SUCCESS) { ctx->errstr = apr_psprintf(ctx->pool, "Unable to generate random " "bytes: %pm", &rv); ret = ERR_RANDOM; break; } if (ctx->cost == 0) ctx->cost = BCRYPT_DEFAULT_COST; rv = apr_bcrypt_encode(pw, ctx->cost, (unsigned char*)salt, 16, ctx->out, ctx->out_len); if (rv != APR_SUCCESS) { ctx->errstr = apr_psprintf(ctx->pool, "Unable to encode with " "bcrypt: %pm", &rv); ret = ERR_PWMISMATCH; break; } break; #endif /* BCRYPT_ALGO_SUPPORTED */ default: ctx->errstr = apr_psprintf(ctx->pool, "mk_password_hash(): unsupported algorithm %d", ctx->alg); ret = ERR_GENERAL; } memset(pw, '\0', strlen(pw)); return ret; } httpd-2.4.41/modules/lua/NWGNUmakefile0000644000000000000500000001173513055576313016023 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(SRC)/include \ $(STDMOD)/database \ $(STDMOD)/http \ $(STDMOD)/ssl \ $(NWOS) \ $(LUASRC)/src \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ -opt nointrinsics \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ -DLUA_COMPAT_ALL \ -DLUA_COMPAT_5_2 \ -DLUA_COMPAT_5_1 \ -DLUA_COMPAT_MODULE \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ -L$(OBJDIR) \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = mod_lua # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) LUA Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = LUA Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 131072 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(OBJDIR)/lua.lib \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_lua.o \ $(OBJDIR)/lua_apr.o \ $(OBJDIR)/lua_config.o \ $(OBJDIR)/lua_passwd.o \ $(OBJDIR)/lua_request.o \ $(OBJDIR)/lua_vmprep.o \ $(OBJDIR)/lua_dbd.o \ $(OBJDIR)/libprews.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(OBJDIR)/lua.lib \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ lua_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # UNWANTED = $(LUASRC)/src/lua.c $(LUASRC)/src/luac.c $(LUASRC)/src/print.c FILES_lib_objs = \ $(patsubst $(LUASRC)/src/%.c,$(OBJDIR)/%.o, $(filter-out $(UNWANTED), $(wildcard $(LUASRC)/src/*.c))) \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # vpath %.c $(LUASRC)/src ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/lua/config.m40000644000000000000500000000674413245744013015212 0ustar rootsrc APACHE_MODPATH_INIT(lua) dnl CHECK_LUA_PATH(PREFIX, INCLUDE-PATH, LIB-PATH, LIB-NAME) dnl dnl Checks for a specific version of the Lua libraries. Use CHECK_LUA instead, dnl which will call this macro. dnl dnl Sets LUA_CFLAGS and LUA_LIBS, and breaks from its containing loop, if the dnl check succeeds. AC_DEFUN([CHECK_LUA_PATH], [dnl AC_MSG_CHECKING([for lua.h in $1/$2]) if test -f $1/$2/lua.h; then AC_MSG_RESULT([yes]) save_CFLAGS=$CFLAGS save_LDFLAGS=$LDFLAGS CFLAGS="$CFLAGS" LDFLAGS="-L$1/$3 $LDFLAGS $lib_m" AC_CHECK_LIB($4, luaL_newstate, [ LUA_LIBS="-L$1/$3 -l$4 $lib_m" if test "x$ap_platform_runtime_link_flag" != "x"; then APR_ADDTO(LUA_LIBS, [$ap_platform_runtime_link_flag$1/$3]) fi LUA_CFLAGS="-I$1/$2" ]) CFLAGS=$save_CFLAGS LDFLAGS=$save_LDFLAGS if test -n "${LUA_LIBS}"; then break fi else AC_MSG_RESULT([no]) fi ]) dnl Check for Lua 5.3/5.2/5.1 Libraries dnl CHECK_LUA(ACTION-IF-FOUND [, ACTION-IF-NOT-FOUND]) dnl Sets: dnl LUA_CFLAGS dnl LUA_LIBS AC_DEFUN([CHECK_LUA], [dnl AC_ARG_WITH( lua, [AC_HELP_STRING([--with-lua=PATH],[Path to the Lua 5.3/5.2/5.1 prefix])], lua_path="$withval", :) dnl # Determine lua lib directory if test -z "$lua_path"; then test_paths=". /usr/local /usr" else test_paths="${lua_path}" fi if test -n "$PKGCONFIG" -a -z "$lua_path" \ && $PKGCONFIG --atleast-version=5.1 lua; then LUA_LIBS="`$PKGCONFIG --libs lua`" LUA_CFLAGS="`$PKGCONFIG --cflags lua`" LUA_VERSION="`$PKGCONFIG --modversion lua`" AC_MSG_NOTICE([using Lua $LUA_VERSION configuration from pkg-config]) else AC_CHECK_LIB(m, pow, lib_m="-lm") AC_CHECK_LIB(m, sqrt, lib_m="-lm") for x in $test_paths ; do CHECK_LUA_PATH([${x}], [include/lua-5.3], [lib/lua-5.3], [lua-5.3]) CHECK_LUA_PATH([${x}], [include/lua5.3], [lib], [lua5.3]) CHECK_LUA_PATH([${x}], [include/lua53], [lib/lua53], [lua]) CHECK_LUA_PATH([${x}], [include], [lib], [lua]) CHECK_LUA_PATH([${x}], [include/lua-5.2], [lib/lua-5.2], [lua-5.2]) CHECK_LUA_PATH([${x}], [include/lua5.2], [lib], [lua5.2]) CHECK_LUA_PATH([${x}], [include/lua52], [lib/lua52], [lua]) CHECK_LUA_PATH([${x}], [include/lua-5.1], [lib/lua-5.1], [lua-5.1]) CHECK_LUA_PATH([${x}], [include/lua5.1], [lib], [lua5.1]) CHECK_LUA_PATH([${x}], [include/lua51], [lib/lua51], [lua]) done fi AC_SUBST(LUA_LIBS) AC_SUBST(LUA_CFLAGS) if test -z "${LUA_LIBS}"; then AC_MSG_WARN([*** Lua 5.3 5.2 or 5.1 library not found.]) ifelse([$2], , enable_lua="no" if test -z "${lua_path}"; then AC_MSG_WARN([Lua 5.3 5.2 or 5.1 library is required]) else AC_MSG_ERROR([Lua 5.3 5.2 or 5.1 library is required]) fi, $2) else AC_MSG_NOTICE([using '${LUA_LIBS}' for Lua Library]) AC_ARG_ENABLE(luajit,APACHE_HELP_STRING(--enable-luajit,Enable LuaJit Support), [ if test "$enableval" = "yes"; then APR_ADDTO(MOD_CPPFLAGS, ["-DAP_ENABLE_LUAJIT"]) fi ]) ifelse([$1], , , $1) fi ]) lua_objects="lua_apr.lo lua_config.lo mod_lua.lo lua_request.lo lua_vmprep.lo lua_dbd.lo lua_passwd.lo" APACHE_MODULE(lua, Apache Lua Framework, $lua_objects, , , [ CHECK_LUA() if test "x$enable_lua" != "xno" ; then APR_ADDTO(MOD_INCLUDES, [$LUA_CFLAGS]) APR_ADDTO(MOD_LUA_LDADD, [$LUA_LIBS $CRYPT_LIBS]) fi ]) APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) APACHE_MODPATH_FINISH httpd-2.4.41/modules/lua/lua_vmprep.c0000644000000000000500000004525613350443433016021 0ustar rootsrc/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_lua.h" #include "http_log.h" #include "apr_uuid.h" #include "lua_config.h" #include "apr_file_info.h" #include "mod_auth.h" APLOG_USE_MODULE(lua); #ifndef AP_LUA_MODULE_EXT #if defined(NETWARE) #define AP_LUA_MODULE_EXT ".nlm" #elif defined(WIN32) #define AP_LUA_MODULE_EXT ".dll" #elif (defined(__hpux__) || defined(__hpux)) && !defined(__ia64) #define AP_LUA_MODULE_EXT ".sl" #else #define AP_LUA_MODULE_EXT ".so" #endif #endif #if APR_HAS_THREADS apr_thread_mutex_t *ap_lua_mutex; #endif extern apr_global_mutex_t *lua_ivm_mutex; void ap_lua_init_mutex(apr_pool_t *pool, server_rec *s) { apr_status_t rv; /* global IVM mutex */ rv = apr_global_mutex_child_init(&lua_ivm_mutex, apr_global_mutex_lockfile(lua_ivm_mutex), pool); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(03016) "mod_lua: Failed to reopen mutex lua-ivm-shm in child"); exit(1); /* bah :( */ } /* Server pool mutex */ #if APR_HAS_THREADS apr_thread_mutex_create(&ap_lua_mutex, APR_THREAD_MUTEX_DEFAULT, pool); #endif } /* forward dec'l from this file */ #if 0 static void pstack_dump(lua_State *L, apr_pool_t *r, int level, const char *msg) { int i; int top = lua_gettop(L); ap_log_perror(APLOG_MARK, level, 0, r, APLOGNO(03211) "Lua Stack Dump: [%s]", msg); for (i = 1; i <= top; i++) { int t = lua_type(L, i); switch (t) { case LUA_TSTRING:{ ap_log_perror(APLOG_MARK, level, 0, r, APLOGNO(03212) "%d: '%s'", i, lua_tostring(L, i)); break; } case LUA_TUSERDATA:{ ap_log_perror(APLOG_MARK, level, 0, r, APLOGNO(03213) "%d: userdata", i); break; } case LUA_TLIGHTUSERDATA:{ ap_log_perror(APLOG_MARK, level, 0, r, APLOGNO(03214) "%d: lightuserdata", i); break; } case LUA_TNIL:{ ap_log_perror(APLOG_MARK, level, 0, r, APLOGNO(03215) "%d: NIL", i); break; } case LUA_TNONE:{ ap_log_perror(APLOG_MARK, level, 0, r, APLOGNO(03216) "%d: None", i); break; } case LUA_TBOOLEAN:{ ap_log_perror(APLOG_MARK, level, 0, r, APLOGNO(03217) "%d: %s", i, lua_toboolean(L, i) ? "true" : "false"); break; } case LUA_TNUMBER:{ ap_log_perror(APLOG_MARK, level, 0, r, APLOGNO(03218) "%d: %g", i, lua_tonumber(L, i)); break; } case LUA_TTABLE:{ ap_log_perror(APLOG_MARK, level, 0, r, APLOGNO(03219) "%d:
    ", i); break; } case LUA_TTHREAD:{ ap_log_perror(APLOG_MARK, level, 0, r, APLOGNO(03220) "%d: ", i); break; } case LUA_TFUNCTION:{ ap_log_perror(APLOG_MARK, level, 0, r, APLOGNO(03221) "%d: ", i); break; } default:{ ap_log_perror(APLOG_MARK, level, 0, r, APLOGNO(03222) "%d: unknown: [%s]", i, lua_typename(L, i)); break; } } } } #endif /* BEGIN modules*/ /* BEGIN apache lmodule */ #define makeintegerfield(L, n) lua_pushinteger(L, n); lua_setfield(L, -2, #n) void ap_lua_load_apache2_lmodule(lua_State *L) { lua_getglobal(L, "package"); lua_getfield(L, -1, "loaded"); lua_newtable(L); lua_setfield(L, -2, "apache2"); lua_setglobal(L, "apache2"); lua_pop(L, 1); /* empty stack */ lua_getglobal(L, "apache2"); lua_pushstring(L, ap_get_server_banner()); lua_setfield(L, -2, "version"); makeintegerfield(L, OK); makeintegerfield(L, DECLINED); makeintegerfield(L, DONE); makeintegerfield(L, HTTP_MOVED_TEMPORARILY); makeintegerfield(L, PROXYREQ_NONE); makeintegerfield(L, PROXYREQ_PROXY); makeintegerfield(L, PROXYREQ_REVERSE); makeintegerfield(L, PROXYREQ_RESPONSE); makeintegerfield(L, PROXYREQ_RESPONSE); makeintegerfield(L, AUTHZ_DENIED); makeintegerfield(L, AUTHZ_GRANTED); makeintegerfield(L, AUTHZ_NEUTRAL); makeintegerfield(L, AUTHZ_GENERAL_ERROR); makeintegerfield(L, AUTHZ_DENIED_NO_USER); /* makeintegerfield(L, HTTP_CONTINUE); makeintegerfield(L, HTTP_SWITCHING_PROTOCOLS); makeintegerfield(L, HTTP_PROCESSING); makeintegerfield(L, HTTP_OK); makeintegerfield(L, HTTP_CREATED); makeintegerfield(L, HTTP_ACCEPTED); makeintegerfield(L, HTTP_NON_AUTHORITATIVE); makeintegerfield(L, HTTP_NO_CONTENT); makeintegerfield(L, HTTP_RESET_CONTENT); makeintegerfield(L, HTTP_PARTIAL_CONTENT); makeintegerfield(L, HTTP_MULTI_STATUS); makeintegerfield(L, HTTP_ALREADY_REPORTED); makeintegerfield(L, HTTP_IM_USED); makeintegerfield(L, HTTP_MULTIPLE_CHOICES); makeintegerfield(L, HTTP_MOVED_PERMANENTLY); makeintegerfield(L, HTTP_MOVED_TEMPORARILY); makeintegerfield(L, HTTP_SEE_OTHER); makeintegerfield(L, HTTP_NOT_MODIFIED); makeintegerfield(L, HTTP_USE_PROXY); makeintegerfield(L, HTTP_TEMPORARY_REDIRECT); makeintegerfield(L, HTTP_PERMANENT_REDIRECT); makeintegerfield(L, HTTP_BAD_REQUEST); makeintegerfield(L, HTTP_UNAUTHORIZED); makeintegerfield(L, HTTP_PAYMENT_REQUIRED); makeintegerfield(L, HTTP_FORBIDDEN); makeintegerfield(L, HTTP_NOT_FOUND); makeintegerfield(L, HTTP_METHOD_NOT_ALLOWED); makeintegerfield(L, HTTP_NOT_ACCEPTABLE); makeintegerfield(L, HTTP_PROXY_AUTHENTICATION_REQUIRED); makeintegerfield(L, HTTP_REQUEST_TIME_OUT); makeintegerfield(L, HTTP_CONFLICT); makeintegerfield(L, HTTP_GONE); makeintegerfield(L, HTTP_LENGTH_REQUIRED); makeintegerfield(L, HTTP_PRECONDITION_FAILED); makeintegerfield(L, HTTP_REQUEST_ENTITY_TOO_LARGE); makeintegerfield(L, HTTP_REQUEST_URI_TOO_LARGE); makeintegerfield(L, HTTP_UNSUPPORTED_MEDIA_TYPE); makeintegerfield(L, HTTP_RANGE_NOT_SATISFIABLE); makeintegerfield(L, HTTP_EXPECTATION_FAILED); makeintegerfield(L, HTTP_UNPROCESSABLE_ENTITY); makeintegerfield(L, HTTP_LOCKED); makeintegerfield(L, HTTP_FAILED_DEPENDENCY); makeintegerfield(L, HTTP_UPGRADE_REQUIRED); makeintegerfield(L, HTTP_PRECONDITION_REQUIRED); makeintegerfield(L, HTTP_TOO_MANY_REQUESTS); makeintegerfield(L, HTTP_REQUEST_HEADER_FIELDS_TOO_LARGE); makeintegerfield(L, HTTP_INTERNAL_SERVER_ERROR); makeintegerfield(L, HTTP_NOT_IMPLEMENTED); makeintegerfield(L, HTTP_BAD_GATEWAY); makeintegerfield(L, HTTP_SERVICE_UNAVAILABLE); makeintegerfield(L, HTTP_GATEWAY_TIME_OUT); makeintegerfield(L, HTTP_VERSION_NOT_SUPPORTED); makeintegerfield(L, HTTP_VARIANT_ALSO_VARIES); makeintegerfield(L, HTTP_INSUFFICIENT_STORAGE); makeintegerfield(L, HTTP_LOOP_DETECTED); makeintegerfield(L, HTTP_NOT_EXTENDED); makeintegerfield(L, HTTP_NETWORK_AUTHENTICATION_REQUIRED); */ } /* END apache2 lmodule */ /* END library functions */ /* callback for cleaning up a lua vm when pool is closed */ static apr_status_t cleanup_lua(void *l) { AP_DEBUG_ASSERT(l != NULL); lua_close((lua_State *) l); return APR_SUCCESS; } static apr_status_t server_cleanup_lua(void *resource, void *params, apr_pool_t *pool) { ap_lua_server_spec* spec = (ap_lua_server_spec*) resource; AP_DEBUG_ASSERT(spec != NULL); if (spec->L != NULL) { lua_close((lua_State *) spec->L); } return APR_SUCCESS; } /* munge_path(L, "path", "?.lua", "./?.lua", lifecycle_pool, spec->package_paths, spec->file); */ /** * field -> "path" or "cpath" * sub_pat -> "?.lua" * rep_pat -> "./?.lua" * pool -> lifecycle pool for allocations * paths -> things to add * file -> ??? */ static void munge_path(lua_State *L, const char *field, const char *sub_pat, const char *rep_pat, apr_pool_t *pool, apr_array_header_t *paths, const char *file) { const char *current; const char *parent_dir; const char *pattern; const char *modified; char *part; lua_getglobal(L, "package"); lua_getfield(L, -1, field); current = lua_tostring(L, -1); parent_dir = ap_make_dirstr_parent(pool, file); pattern = apr_pstrcat(pool, parent_dir, sub_pat, NULL); luaL_gsub(L, current, rep_pat, pattern); lua_setfield(L, -3, field); lua_getfield(L, -2, field); modified = lua_tostring(L, -1); lua_pop(L, 2); part = apr_pstrcat(pool, modified, ";", apr_array_pstrcat(pool, paths, ';'), NULL); lua_pushstring(L, part); lua_setfield(L, -2, field); lua_pop(L, 1); /* pop "package" off the stack */ } #ifdef AP_ENABLE_LUAJIT static int loadjitmodule(lua_State *L, apr_pool_t *lifecycle_pool) { lua_getglobal(L, "require"); lua_pushliteral(L, "jit."); lua_pushvalue(L, -3); lua_concat(L, 2); if (lua_pcall(L, 1, 1, 0)) { const char *msg = lua_tostring(L, -1); ap_log_perror(APLOG_MARK, APLOG_DEBUG, 0, lifecycle_pool, APLOGNO(01480) "Failed to init LuaJIT: %s", msg); return 1; } lua_getfield(L, -1, "start"); lua_remove(L, -2); /* drop module table */ return 0; } #endif static apr_status_t vm_construct(lua_State **vm, void *params, apr_pool_t *lifecycle_pool) { lua_State* L; ap_lua_vm_spec *spec = params; L = luaL_newstate(); #ifdef AP_ENABLE_LUAJIT luaopen_jit(L); #endif luaL_openlibs(L); if (spec->package_paths) { munge_path(L, "path", "?.lua", "./?.lua", lifecycle_pool, spec->package_paths, spec->file); } if (spec->package_cpaths) { munge_path(L, "cpath", "?" AP_LUA_MODULE_EXT, "./?" AP_LUA_MODULE_EXT, lifecycle_pool, spec->package_cpaths, spec->file); } if (spec->cb) { spec->cb(L, lifecycle_pool, spec->cb_arg); } if (spec->bytecode && spec->bytecode_len > 0) { luaL_loadbuffer(L, spec->bytecode, spec->bytecode_len, spec->file); lua_pcall(L, 0, LUA_MULTRET, 0); } else { int rc; ap_log_perror(APLOG_MARK, APLOG_DEBUG, 0, lifecycle_pool, APLOGNO(01481) "loading lua file %s", spec->file); rc = luaL_loadfile(L, spec->file); if (rc != 0) { ap_log_perror(APLOG_MARK, APLOG_ERR, 0, lifecycle_pool, APLOGNO(01482) "Error loading %s: %s", spec->file, rc == LUA_ERRMEM ? "memory allocation error" : lua_tostring(L, 0)); return APR_EBADF; } if ( lua_pcall(L, 0, LUA_MULTRET, 0) == LUA_ERRRUN ) { ap_log_perror(APLOG_MARK, APLOG_ERR, 0, lifecycle_pool, APLOGNO(02613) "Error loading %s: %s", spec->file, lua_tostring(L, -1)); return APR_EBADF; } } #ifdef AP_ENABLE_LUAJIT loadjitmodule(L, lifecycle_pool); #endif lua_pushlightuserdata(L, lifecycle_pool); lua_setfield(L, LUA_REGISTRYINDEX, "Apache2.Wombat.pool"); *vm = L; return APR_SUCCESS; } static ap_lua_vm_spec* copy_vm_spec(apr_pool_t* pool, ap_lua_vm_spec* spec) { ap_lua_vm_spec* copied_spec = apr_pcalloc(pool, sizeof(ap_lua_vm_spec)); copied_spec->bytecode_len = spec->bytecode_len; copied_spec->bytecode = apr_pstrdup(pool, spec->bytecode); copied_spec->cb = spec->cb; copied_spec->cb_arg = NULL; copied_spec->file = apr_pstrdup(pool, spec->file); copied_spec->package_cpaths = apr_array_copy(pool, spec->package_cpaths); copied_spec->package_paths = apr_array_copy(pool, spec->package_paths); copied_spec->pool = pool; copied_spec->scope = AP_LUA_SCOPE_SERVER; copied_spec->codecache = spec->codecache; return copied_spec; } static apr_status_t server_vm_construct(lua_State **resource, void *params, apr_pool_t *pool) { lua_State* L; ap_lua_server_spec* spec = apr_pcalloc(pool, sizeof(ap_lua_server_spec)); *resource = NULL; if (vm_construct(&L, params, pool) == APR_SUCCESS) { spec->finfo = apr_pcalloc(pool, sizeof(ap_lua_finfo)); if (L != NULL) { spec->L = L; *resource = (void*) spec; lua_pushlightuserdata(L, spec); lua_setfield(L, LUA_REGISTRYINDEX, "Apache2.Lua.server_spec"); return APR_SUCCESS; } } return APR_EGENERAL; } /** * Function used to create a lua_State instance bound into the web * server in the appropriate scope. */ lua_State *ap_lua_get_lua_state(apr_pool_t *lifecycle_pool, ap_lua_vm_spec *spec, request_rec* r) { lua_State *L = NULL; ap_lua_finfo *cache_info = NULL; int tryCache = 0; if (spec->scope == AP_LUA_SCOPE_SERVER) { char *hash; apr_reslist_t* reslist = NULL; ap_lua_server_spec* sspec = NULL; hash = apr_psprintf(r->pool, "reslist:%s", spec->file); #if APR_HAS_THREADS apr_thread_mutex_lock(ap_lua_mutex); #endif if (apr_pool_userdata_get((void **)&reslist, hash, r->server->process->pool) == APR_SUCCESS) { if (reslist != NULL) { if (apr_reslist_acquire(reslist, (void**) &sspec) == APR_SUCCESS) { L = sspec->L; cache_info = sspec->finfo; } } } if (L == NULL) { ap_lua_vm_spec* server_spec = copy_vm_spec(r->server->process->pool, spec); if ( apr_reslist_create(&reslist, spec->vm_min, spec->vm_max, spec->vm_max, 0, (apr_reslist_constructor) server_vm_construct, (apr_reslist_destructor) server_cleanup_lua, server_spec, r->server->process->pool) == APR_SUCCESS && reslist != NULL) { apr_pool_userdata_set(reslist, hash, NULL, r->server->process->pool); if (apr_reslist_acquire(reslist, (void**) &sspec) == APR_SUCCESS) { L = sspec->L; cache_info = sspec->finfo; } else { #if APR_HAS_THREADS apr_thread_mutex_unlock(ap_lua_mutex); #endif return NULL; } } } #if APR_HAS_THREADS apr_thread_mutex_unlock(ap_lua_mutex); #endif } else { if (apr_pool_userdata_get((void **)&L, spec->file, lifecycle_pool) != APR_SUCCESS) { L = NULL; } } if (L == NULL) { ap_log_perror(APLOG_MARK, APLOG_DEBUG, 0, lifecycle_pool, APLOGNO(01483) "creating lua_State with file %s", spec->file); /* not available, so create */ if (!vm_construct(&L, spec, lifecycle_pool)) { AP_DEBUG_ASSERT(L != NULL); apr_pool_userdata_set(L, spec->file, cleanup_lua, lifecycle_pool); } } if (spec->codecache == AP_LUA_CACHE_FOREVER || (spec->bytecode && spec->bytecode_len > 0)) { tryCache = 1; } else { char* mkey; if (spec->scope != AP_LUA_SCOPE_SERVER) { mkey = apr_psprintf(r->pool, "ap_lua_modified:%s", spec->file); apr_pool_userdata_get((void **)&cache_info, mkey, lifecycle_pool); if (cache_info == NULL) { cache_info = apr_pcalloc(lifecycle_pool, sizeof(ap_lua_finfo)); apr_pool_userdata_set((void*) cache_info, mkey, NULL, lifecycle_pool); } } if (spec->codecache == AP_LUA_CACHE_STAT) { apr_finfo_t lua_finfo; apr_stat(&lua_finfo, spec->file, APR_FINFO_MTIME|APR_FINFO_SIZE, lifecycle_pool); /* On first visit, modified will be zero, but that's fine - The file is loaded in the vm_construct function. */ if ((cache_info->modified == lua_finfo.mtime && cache_info->size == lua_finfo.size) || cache_info->modified == 0) { tryCache = 1; } cache_info->modified = lua_finfo.mtime; cache_info->size = lua_finfo.size; } else if (spec->codecache == AP_LUA_CACHE_NEVER) { if (cache_info->runs == 0) tryCache = 1; } cache_info->runs++; } if (tryCache == 0 && spec->scope != AP_LUA_SCOPE_ONCE) { int rc; ap_log_perror(APLOG_MARK, APLOG_DEBUG, 0, lifecycle_pool, APLOGNO(02332) "(re)loading lua file %s", spec->file); rc = luaL_loadfile(L, spec->file); if (rc != 0) { ap_log_perror(APLOG_MARK, APLOG_ERR, 0, lifecycle_pool, APLOGNO(02333) "Error loading %s: %s", spec->file, rc == LUA_ERRMEM ? "memory allocation error" : lua_tostring(L, 0)); return 0; } lua_pcall(L, 0, LUA_MULTRET, 0); } return L; } httpd-2.4.41/modules/lua/mod_lua.h0000644000000000000500000001162213127013226015255 0ustar rootsrc/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef _MOD_LUA_H_ #define _MOD_LUA_H_ #include #include "httpd.h" #include "http_core.h" #include "http_config.h" #include "http_request.h" #include "http_log.h" #include "http_protocol.h" #include "ap_regex.h" #include "ap_config.h" #include "util_filter.h" #include "apr_thread_rwlock.h" #include "apr_strings.h" #include "apr_tables.h" #include "apr_hash.h" #include "apr_buckets.h" #include "apr_file_info.h" #include "apr_time.h" #include "apr_hooks.h" #include "apr_reslist.h" #include "lua.h" #include "lauxlib.h" #include "lualib.h" #if LUA_VERSION_NUM > 501 /* Load mode for lua_load() */ #define lua_load(a,b,c,d) lua_load(a,b,c,d,NULL) #define lua_resume(a,b) lua_resume(a, NULL, b) #define luaL_setfuncs_compat(a,b) luaL_setfuncs(a,b,0) #else #define lua_rawlen(L,i) lua_objlen(L, (i)) #define luaL_setfuncs_compat(a,b) luaL_register(a,NULL,b) #endif #if LUA_VERSION_NUM > 502 #define lua_dump(a,b,c) lua_dump(a,b,c,0) #endif /* Create a set of AP_LUA_DECLARE(type), AP_LUA_DECLARE_NONSTD(type) and * AP_LUA_DECLARE_DATA with appropriate export and import tags for the platform */ #if !defined(WIN32) #define AP_LUA_DECLARE(type) type #define AP_LUA_DECLARE_NONSTD(type) type #define AP_LUA_DECLARE_DATA #elif defined(AP_LUA_DECLARE_STATIC) #define AP_LUA_DECLARE(type) type __stdcall #define AP_LUA_DECLARE_NONSTD(type) type #define AP_LUA_DECLARE_DATA #elif defined(AP_LUA_DECLARE_EXPORT) #define AP_LUA_DECLARE(type) __declspec(dllexport) type __stdcall #define AP_LUA_DECLARE_NONSTD(type) __declspec(dllexport) type #define AP_LUA_DECLARE_DATA __declspec(dllexport) #else #define AP_LUA_DECLARE(type) __declspec(dllimport) type __stdcall #define AP_LUA_DECLARE_NONSTD(type) __declspec(dllimport) type #define AP_LUA_DECLARE_DATA __declspec(dllimport) #endif #include "lua_request.h" #include "lua_vmprep.h" typedef enum { AP_LUA_INHERIT_UNSET = -1, AP_LUA_INHERIT_NONE = 0, AP_LUA_INHERIT_PARENT_FIRST = 1, AP_LUA_INHERIT_PARENT_LAST = 2 } ap_lua_inherit_t; /** * make a userdata out of a C pointer, and vice versa * instead of using lightuserdata */ #ifndef lua_boxpointer #define lua_boxpointer(L,u) (*(void **)(lua_newuserdata(L, sizeof(void *))) = (u)) #define lua_unboxpointer(L,i) (*(void **)(lua_touserdata(L, i))) #endif void ap_lua_rstack_dump(lua_State *L, request_rec *r, const char *msg); typedef struct { apr_array_header_t *package_paths; apr_array_header_t *package_cpaths; /** * mapped handlers/filters */ apr_array_header_t *mapped_handlers; apr_array_header_t *mapped_filters; apr_pool_t *pool; /** * AP_LUA_SCOPE_ONCE | AP_LUA_SCOPE_REQUEST | AP_LUA_SCOPE_CONN | AP_LUA_SCOPE_SERVER */ unsigned int vm_scope; unsigned int vm_min; unsigned int vm_max; /* info for the hook harnesses */ apr_hash_t *hooks; /* */ /* the actual directory being configured */ const char *dir; /* Whether Lua scripts in a sub-dir are run before parents */ ap_lua_inherit_t inherit; /** * AP_LUA_CACHE_NEVER | AP_LUA_CACHE_STAT | AP_LUA_CACHE_FOREVER */ unsigned int codecache; } ap_lua_dir_cfg; typedef struct { /* value of the LuaRoot directive */ const char *root_path; } ap_lua_server_cfg; typedef struct { const char *function_name; ap_lua_vm_spec *spec; } mapped_request_details; typedef struct { mapped_request_details *mapped_request_details; apr_hash_t *request_scoped_vms; } ap_lua_request_cfg; typedef struct { lua_State *L; const char *function; } ap_lua_filter_ctx; extern module AP_MODULE_DECLARE_DATA lua_module; APR_DECLARE_EXTERNAL_HOOK(ap_lua, AP_LUA, int, lua_open, (lua_State *L, apr_pool_t *p)) APR_DECLARE_EXTERNAL_HOOK(ap_lua, AP_LUA, int, lua_request, (lua_State *L, request_rec *r)) const char *ap_lua_ssl_val(apr_pool_t *p, server_rec *s, conn_rec *c, request_rec *r, const char *var); int ap_lua_ssl_is_https(conn_rec *c); #endif /* !_MOD_LUA_H_ */ httpd-2.4.41/modules/lua/lua_request.h0000644000000000000500000000333213055576313016200 0ustar rootsrc/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef _LUA_REQUEST_H_ #define _LUA_REQUEST_H_ #include "mod_lua.h" #include "util_varbuf.h" void ap_lua_load_request_lmodule(lua_State *L, apr_pool_t *p); void ap_lua_push_connection(lua_State *L, conn_rec *r); void ap_lua_push_server(lua_State *L, server_rec *r); void ap_lua_push_request(lua_State *L, request_rec *r); #define APL_REQ_FUNTYPE_STRING 1 #define APL_REQ_FUNTYPE_INT 2 #define APL_REQ_FUNTYPE_TABLE 3 #define APL_REQ_FUNTYPE_LUACFUN 4 #define APL_REQ_FUNTYPE_BOOLEAN 5 typedef struct { const void *fun; int type; } req_fun_t; /* Struct to use as userdata for request_rec tables */ typedef struct { request_rec *r; /* Request_rec */ apr_table_t *t; /* apr_table_t* */ const char *n; /* name of table */ } req_table_t; typedef struct { int type; size_t size; size_t vb_size; lua_Number number; struct ap_varbuf vb; } lua_ivm_object; #endif /* !_LUA_REQUEST_H_ */ httpd-2.4.41/modules/lua/docs/0002755000000000000500000000000013523273341014422 5ustar rootsrchttpd-2.4.41/modules/lua/docs/README0000644000000000000500000000054111123517417015277 0ustar rootsrcIndex of documents: building-from-subversion.txt Basic build instructions basic-configuration.txt Getting mod_wombat up and running running-developer-tests.txt How to set up and run the developer and regression tests writing-handlers.txt basics on writing handlers in mod_wombathttpd-2.4.41/modules/lua/docs/basic-configuration.txt0000644000000000000500000001302311376506251021111 0ustar rootsrcSee sample_httpd.conf for examples The basic module loading directive is LoadModule lua_module modules/mod_lua.so The handler name is "lua-script" so you can use the normal AddHandler directive, such as "AddHandler lua-script .lua" to set anything ending in .lua to use mod_lua to evaluate mod_lua exports several additional directives: LuaRoot /path/to/a/directory Specify the base path which will be used to evaluate all relative paths within mod_lua. If not specified they will be resolved relative to the current working directory, which may not always work well for a server. LuaScope once|request|conn|server [max|min max] Specify the lifecycle scope of the Lua interpreter which will be used by handlers in this "Directory." The default is "once" once: use the interpreter once and throw it away. request: use the interpreter to handle anything based on the same file within this request, which is also request scoped. conn: Same as request but attached to the connection_rec server: This one is different than others because the server scope is quite long lived, and multiple threads will have the same server_rec. To accommodate this server scoped interpreter are stored in an apr resource list. The min and max arguments are intended to specify the pool size, but are unused at this time. LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name] This directive matches a uri pattern to invoke a specific handler function in a specific file. It uses PCRE regular expressions to match the uri, and supports interpolating match groups into both the file path and the function name be careful writing your regular expressions to avoid security issues. Examples: LuaMapHandler /(\w+)/(/w+) /scripts/$1.lua handle_$2 This would match uri's such as /photos/show?id=9 to the file /scripts/photos.lua and invoke the handler function handle_show on the lua vm after loading that file. LuaMapHandler /bingo /scripts/wombat.lua This would invoke the "handle" function, which is the default if no specific function name is provided. LuaPackagePath /path/to/include/?.lua Add a path to lua's module search path. Follows the same conventions as lua. This just munges the package.path in the lua vms. Examples: LuaPackagePath /scripts/lib/?.lua LuaPackagePath /scripts/lib/?/init.lua LuaPackageCPath /path/to/include/?.soa Add a path to lua's shared library search path. Follows the same conventions as lua. This just munges the package.cpath in the lua vms. Examples: LuaPackagePath /scripts/lib/?.so LuaCodeCache stat|forever|never Specify the behavior of the in-memory code cache. The default is stat, which stats the top level script (not any included ones) each time that file is needed, and reloads it if the modified time indicates it is newer than the one it has already loaded. The other values cause it to keep the file cached forever (don't stat and replace) or to never cache the file. In general stat or forever is good production and stat or never for development. Examples: LuaCodeCache stat LuaCodeCache forever LuaCodeCache never LuaHookTranslateName /path/to/lua/script.lua hook_function_name Add a hook (at APR_HOOK_MIDDLE) to the translate name phase of request processing. The hook function receives a single argument, the request_rec, and should return a status code, which is either an HTTP error code, or the constants defined in the apache2 module: apache2.OK, apache2.DECLINED, or apache2.DONE. For those new to hooks, basically each hook will be invoked until one of them returns apache2.OK. If your hook doesn't want to do the translation it should just return apache2.DECLINED. If the request should stop processing, then return apache2.DONE. Example: LuaHookTranslateName /scripts/conf/hooks.lua silly_mapper -- /scripts/conf/hooks.lua -- function silly_mapper(r) if r.uri == "/" then r.file = "/var/www/home.lua" return apache2.OK else return apache2.DECLINED end end LuaHookFixups /path/to/lua/script.lua hook_function_name Just like LuaHookTranslateName, but executed at the fixups phase LuaHookMapToStorage /path/to/lua/script.lua hook_function_name ... LuaHookCheckUserID /path/to/lua/script.lua hook_function_name ... LuaHookTypeChecker /path/to/lua/script.lua hook_function_name ... LuaHookAuthChecker /path/to/lua/script.lua hook_function_name ... LuaHookAccessChecker /path/to/lua/script.lua hook_function_name ... LuaHookAuthChecker /path/to/lua/script.lua hook_function_name ... LuaHookInsertFilter /path/to/lua/script.lua hook_function_name Not Yet Implemented httpd-2.4.41/modules/lua/docs/building-from-subversion.txt0000644000000000000500000000531211123517417022114 0ustar rootsrcInstall Lua 5.1 http://www.lua.org/download.html Lua does not use autoconf for compiling. This means that you do not use ./configure. It has good build instructions, though, so hopefully things will go smoothly. I like to change the directory Lua installs to. In order to do this you need to set LUA_TOP in the configuration makefile for Lua. For these instructions I have set LUA_TOP to /Users/brianm/.opt/lua-5.1.2 -- you will see this directory referred to later. Install Apache HTTPD 2.2 http://httpd.apache.org/download.cgi You can build apache pretty much any way you like, as long as you enable dynamic module loading (--enable-so) so that mod_wombat can be loaded. You may user (and I encourage you to!) the threaded MPMs -- mod_wombat plays nicely with them. I build it with these flags: ./configure --prefix=/Users/brianm/.opt/httpd-2.2.4-worker-wombat \ --with-mpm=worker \ --enable-so Install libapreq2 http://httpd.apache.org/apreq/download.cgi The download link is in the page body, NOT under the "Download!" link in the left hand column. Right now, mod_wombat requires libapreq2 for parsing entity bodies. This dependency will probably be made optional in the near future, but for now you need it. I build it with these flags: ./configure --prefix=/Users/brianm/.opt/libapreq2-2.0.8 \ --with-apache2-apxs=/Users/brianm/.opt/httpd-2.2.4-worker-wombat/bin/apxs Install mod_wombat from subversion http://svn.apache.org/repos/asf/httpd/mod_wombat/trunk The first step, when building from subversion, is to bootstrap autoconf. To do this run the bootstrap script: ./bootstrap The bootstrap script may report an error that it cannot find libtoolize or glibtoolize. That is fine as long as it doesn't report that it cannot find both of them. The script just sets up the autoconf magic. After that, it is a normal configure and build: ./configure --with-lua=/Users/brianm/.opt/lua-5.1.2/ \ --with-apxs=/Users/brianm/.opt/httpd-2.2.4-worker-wombat/bin/apxs \ --with-apreq2=/Users/brianm/.opt/libapreq2-2.0.8/ If compiling (make) reports an error that it cannot find the libapreq2 header file, please tell me ( brianm@apache.org ) as this occurs under some configurations but we haven't hammered down the weird things libapreq2 does with its install. If you build libapreq2 with a --prefix configuration option, it always seems to work. That is it. To configure mod_wombat, look at the basic-configuration.txt document.httpd-2.4.41/modules/lua/docs/writing-handlers.txt0000644000000000000500000000341111366570643020451 0ustar rootsrcmod_lua always looks to invoke a function for the handler, rather than just evaluating a script body CGI style. A handler function looks something like this: -- example.lua -- require "string" function handle_something(r) r.content_type = "text/plain" r:puts("Hello Lua World!\n") if r.method == 'GET' then for k, v in pairs( r:parseargs() ) do r:puts( string.format("%s: %s", k, v) ) end elseif r.method == 'POST' then for k, v in pairs( r:parsebody() ) do r:puts( string.format("%s: %s", k, v) ) end else r:puts("unknown HTTP method " .. r.method) end end This handler function just prints out the uri or form encoded arguments to a plaintext page. This means (and in fact encourages) that you can have multiple handlers (or hooks, or filters) in the same script. Data Structures: request_rec: the request_rec is mapped in as a userdata. It has a metatable which lets you do useful things with it. For the most part it has the same fields as the request_rec struct (see httpd.h until we get better docs here) many of which are writeable as well as readable, and has (at least) the following methods: r:puts("hello", " world", "!") -- print to response body -- logging functions r:debug("This is a debug log message") r:info("This is an info log message") r:notice("This is an notice log message") r:warn("This is an warn log message") r:err("This is an err log message") r:alert("This is an alert log message") r:crit("This is an crit log message") r:emerg("This is an emerg log message") httpd-2.4.41/modules/lua/docs/running-developer-tests.txt0000644000000000000500000000101111366570643021765 0ustar rootsrc-*- mode:org -*- * Building mod_lua The first step is to build mod_lua per the instructions in building-from-subversion.txt. * Build and install LuaSocket http://www.cs.princeton.edu/~diego/professional/luasocket/ FreeBSD: /usr/ports/net/luasocket * Running Tests 1. Replace apache's httpd.conf with test/test_httpd.conf 2. Customize the new httpd.conf to match your directories 3. Finally, to run the tests, start apache and run: $ cd test $ lua ./test.lua FreeBSD: lua-5.1 ./test.lua httpd-2.4.41/modules/lua/mod_lua.mak0000644000000000000500000002557112701473373015620 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_lua.dsp !IF "$(CFG)" == "" CFG=mod_lua - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_lua - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_lua - Win32 Release" && "$(CFG)" != "mod_lua - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_lua.mak" CFG="mod_lua - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_lua - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_lua - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_lua - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_lua.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_lua.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\lua_apr.obj" -@erase "$(INTDIR)\lua_config.obj" -@erase "$(INTDIR)\lua_dbd.obj" -@erase "$(INTDIR)\lua_passwd.obj" -@erase "$(INTDIR)\lua_request.obj" -@erase "$(INTDIR)\lua_vmprep.obj" -@erase "$(INTDIR)\mod_lua.obj" -@erase "$(INTDIR)\mod_lua.res" -@erase "$(INTDIR)\mod_lua_src.idb" -@erase "$(INTDIR)\mod_lua_src.pdb" -@erase "$(OUTDIR)\mod_lua.exp" -@erase "$(OUTDIR)\mod_lua.lib" -@erase "$(OUTDIR)\mod_lua.pdb" -@erase "$(OUTDIR)\mod_lua.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/lua/src" /I "../ssl" /I "../database" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_LUA_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_lua_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_lua.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_lua.so" /d LONG_NAME="lua_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_lua.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib lua51.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_lua.pdb" /debug /out:"$(OUTDIR)\mod_lua.so" /implib:"$(OUTDIR)\mod_lua.lib" /libpath:"../../srclib/lua/src" /base:@..\..\os\win32\BaseAddr.ref,mod_lua.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\lua_apr.obj" \ "$(INTDIR)\lua_config.obj" \ "$(INTDIR)\lua_passwd.obj" \ "$(INTDIR)\lua_request.obj" \ "$(INTDIR)\lua_vmprep.obj" \ "$(INTDIR)\mod_lua.obj" \ "$(INTDIR)\lua_dbd.obj" \ "$(INTDIR)\mod_lua.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_lua.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_lua.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_lua.so" if exist .\Release\mod_lua.so.manifest mt.exe -manifest .\Release\mod_lua.so.manifest -outputresource:.\Release\mod_lua.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_lua - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_lua.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_lua.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\lua_apr.obj" -@erase "$(INTDIR)\lua_config.obj" -@erase "$(INTDIR)\lua_dbd.obj" -@erase "$(INTDIR)\lua_passwd.obj" -@erase "$(INTDIR)\lua_request.obj" -@erase "$(INTDIR)\lua_vmprep.obj" -@erase "$(INTDIR)\mod_lua.obj" -@erase "$(INTDIR)\mod_lua.res" -@erase "$(INTDIR)\mod_lua_src.idb" -@erase "$(INTDIR)\mod_lua_src.pdb" -@erase "$(OUTDIR)\mod_lua.exp" -@erase "$(OUTDIR)\mod_lua.lib" -@erase "$(OUTDIR)\mod_lua.pdb" -@erase "$(OUTDIR)\mod_lua.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/lua/src" /I "../ssl" /I "../database" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "AP_LUA_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_lua_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_lua.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_lua.so" /d LONG_NAME="lua_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_lua.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib lua51.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_lua.pdb" /debug /out:"$(OUTDIR)\mod_lua.so" /implib:"$(OUTDIR)\mod_lua.lib" /libpath:"../../srclib/lua/src" /base:@..\..\os\win32\BaseAddr.ref,mod_lua.so LINK32_OBJS= \ "$(INTDIR)\lua_apr.obj" \ "$(INTDIR)\lua_config.obj" \ "$(INTDIR)\lua_passwd.obj" \ "$(INTDIR)\lua_request.obj" \ "$(INTDIR)\lua_vmprep.obj" \ "$(INTDIR)\mod_lua.obj" \ "$(INTDIR)\lua_dbd.obj" \ "$(INTDIR)\mod_lua.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_lua.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_lua.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_lua.so" if exist .\Debug\mod_lua.so.manifest mt.exe -manifest .\Debug\mod_lua.so.manifest -outputresource:.\Debug\mod_lua.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_lua.dep") !INCLUDE "mod_lua.dep" !ELSE !MESSAGE Warning: cannot find "mod_lua.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_lua - Win32 Release" || "$(CFG)" == "mod_lua - Win32 Debug" !IF "$(CFG)" == "mod_lua - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\lua" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\lua" !ELSEIF "$(CFG)" == "mod_lua - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\lua" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\lua" !ENDIF !IF "$(CFG)" == "mod_lua - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\lua" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\lua" !ELSEIF "$(CFG)" == "mod_lua - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\lua" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\lua" !ENDIF !IF "$(CFG)" == "mod_lua - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\lua" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\lua" !ELSEIF "$(CFG)" == "mod_lua - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\lua" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\lua" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_lua - Win32 Release" "$(INTDIR)\mod_lua.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_lua.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_lua.so" /d LONG_NAME="lua_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_lua - Win32 Debug" "$(INTDIR)\mod_lua.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_lua.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_lua.so" /d LONG_NAME="lua_module for Apache" $(SOURCE) !ENDIF SOURCE=.\lua_apr.c "$(INTDIR)\lua_apr.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\lua_config.c "$(INTDIR)\lua_config.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\lua_dbd.c "$(INTDIR)\lua_dbd.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\lua_passwd.c "$(INTDIR)\lua_passwd.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\lua_request.c "$(INTDIR)\lua_request.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\lua_vmprep.c "$(INTDIR)\lua_vmprep.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\mod_lua.c "$(INTDIR)\mod_lua.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/lua/Makefile.in0000644000000000000500000000026711737125415015545 0ustar rootsrc# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/generators/0002755000000000000500000000000013523273343015064 5ustar rootsrchttpd-2.4.41/modules/generators/mod_info.c0000644000000000000500000007736013467257727017054 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * Info Module. Display configuration information for the server and * all included modules. * * * SetHandler server-info * * * GET /server-info - Returns full configuration page for server and all modules * GET /server-info?server - Returns server configuration only * GET /server-info?module_name - Returns configuration for a single module * GET /server-info?list - Returns quick list of included modules * GET /server-info?config - Returns full configuration * GET /server-info?hooks - Returns a listing of the modules active for each hook * * Original Author: * Rasmus Lerdorf , May 1996 * * Modified By: * Lou Langholtz , July 1997 * * Apache 2.0 Port: * Ryan Morgan , August 2000 * */ #include "apr.h" #include "apr_strings.h" #include "apr_lib.h" #include "apr_version.h" #if APR_MAJOR_VERSION < 2 #include "apu_version.h" #endif #define APR_WANT_STRFUNC #include "apr_want.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_main.h" #include "http_protocol.h" #include "http_connection.h" #include "http_request.h" #include "util_script.h" #include "ap_mpm.h" #include "mpm_common.h" #include "ap_provider.h" #include #include typedef struct { const char *name; /* matching module name */ const char *info; /* additional info */ } info_entry; typedef struct { apr_array_header_t *more_info; } info_svr_conf; module AP_MODULE_DECLARE_DATA info_module; /* current file name when doing -DDUMP_CONFIG */ static const char *dump_config_fn_info; /* file handle when doing -DDUMP_CONFIG */ static apr_file_t *out = NULL; static void *create_info_config(apr_pool_t * p, server_rec * s) { info_svr_conf *conf = (info_svr_conf *) apr_pcalloc(p, sizeof(info_svr_conf)); conf->more_info = apr_array_make(p, 20, sizeof(info_entry)); return conf; } static void *merge_info_config(apr_pool_t * p, void *basev, void *overridesv) { info_svr_conf *new = (info_svr_conf *) apr_pcalloc(p, sizeof(info_svr_conf)); info_svr_conf *base = (info_svr_conf *) basev; info_svr_conf *overrides = (info_svr_conf *) overridesv; new->more_info = apr_array_append(p, overrides->more_info, base->more_info); return new; } static void put_int_flush_right(request_rec * r, int i, int field) { if (field > 1 || i > 9) put_int_flush_right(r, i / 10, field - 1); if (i) { if (r) ap_rputc('0' + i % 10, r); else apr_file_putc((char)('0' + i % 10), out); } else { if (r) ap_rputs(" ", r); else apr_file_printf(out, " "); } } static void set_fn_info(request_rec *r, const char *name) { if (r) ap_set_module_config(r->request_config, &info_module, (void *)name); else dump_config_fn_info = name; } static const char *get_fn_info(request_rec *r) { if (r) return ap_get_module_config(r->request_config, &info_module); else return dump_config_fn_info; } static void mod_info_indent(request_rec * r, int nest, const char *thisfn, int linenum) { int i; const char *prevfn = get_fn_info(r); if (thisfn == NULL) thisfn = "*UNKNOWN*"; if (prevfn == NULL || 0 != strcmp(prevfn, thisfn)) { if (r) { thisfn = ap_escape_html(r->pool, thisfn); ap_rprintf(r, "
    In file: %s
    \n", thisfn); } else { apr_file_printf(out, "# In file: %s\n", thisfn); } set_fn_info(r, thisfn); } if (r) { ap_rputs("
    ", r); put_int_flush_right(r, linenum > 0 ? linenum : 0, 4); ap_rputs(": ", r); } else if (linenum > 0) { for (i = 1; i <= nest; ++i) apr_file_printf(out, " "); apr_file_putc('#', out); put_int_flush_right(r, linenum, 4); apr_file_printf(out, ":\n"); } for (i = 1; i <= nest; ++i) { if (r) ap_rputs("  ", r); else apr_file_printf(out, " "); } } static void mod_info_show_cmd(request_rec * r, const ap_directive_t * dir, int nest) { mod_info_indent(r, nest, dir->filename, dir->line_num); if (r) ap_rprintf(r, "%s %s
    \n", ap_escape_html(r->pool, dir->directive), ap_escape_html(r->pool, dir->args)); else apr_file_printf(out, "%s %s\n", dir->directive, dir->args); } static void mod_info_show_open(request_rec * r, const ap_directive_t * dir, int nest) { mod_info_indent(r, nest, dir->filename, dir->line_num); if (r) ap_rprintf(r, "%s %s\n", ap_escape_html(r->pool, dir->directive), ap_escape_html(r->pool, dir->args)); else apr_file_printf(out, "%s %s\n", dir->directive, dir->args); } static void mod_info_show_close(request_rec * r, const ap_directive_t * dir, int nest) { const char *dirname = dir->directive; mod_info_indent(r, nest, dir->filename, 0); if (*dirname == '<') { if (r) ap_rprintf(r, "</%s>", ap_escape_html(r->pool, dirname + 1)); else apr_file_printf(out, "\n", dirname + 1); } else { if (r) ap_rprintf(r, "/%s", ap_escape_html(r->pool, dirname)); else apr_file_printf(out, "/%s\n", dirname); } } static int mod_info_has_cmd(const command_rec * cmds, ap_directive_t * dir) { const command_rec *cmd; if (cmds == NULL) return 1; for (cmd = cmds; cmd->name; ++cmd) { if (strcasecmp(cmd->name, dir->directive) == 0) return 1; } return 0; } static void mod_info_show_parents(request_rec * r, ap_directive_t * node, int from, int to) { if (from < to) mod_info_show_parents(r, node->parent, from, to - 1); mod_info_show_open(r, node, to); } static int mod_info_module_cmds(request_rec * r, const command_rec * cmds, ap_directive_t * node, int from, int level) { int shown = from; ap_directive_t *dir; if (level == 0) set_fn_info(r, NULL); for (dir = node; dir; dir = dir->next) { if (dir->first_child != NULL) { if (level < mod_info_module_cmds(r, cmds, dir->first_child, shown, level + 1)) { shown = level; mod_info_show_close(r, dir, level); } } else if (mod_info_has_cmd(cmds, dir)) { if (shown < level) { mod_info_show_parents(r, dir->parent, shown, level - 1); shown = level; } mod_info_show_cmd(r, dir, level); } } return shown; } typedef struct { /*XXX: should get something from apr_hooks.h instead */ void (*pFunc) (void); /* just to get the right size */ const char *szName; const char *const *aszPredecessors; const char *const *aszSuccessors; int nOrder; } hook_struct_t; /* * hook_get_t is a pointer to a function that takes void as an argument and * returns a pointer to an apr_array_header_t. The nasty WIN32 ifdef * is required to account for the fact that the ap_hook* calls all use * STDCALL calling convention. */ typedef apr_array_header_t *( #ifdef WIN32 __stdcall #endif * hook_get_t) (void); typedef struct { const char *name; hook_get_t get; } hook_lookup_t; static const hook_lookup_t startup_hooks[] = { {"Pre-Config", ap_hook_get_pre_config}, {"Check Configuration", ap_hook_get_check_config}, {"Test Configuration", ap_hook_get_test_config}, {"Post Configuration", ap_hook_get_post_config}, {"Open Logs", ap_hook_get_open_logs}, {"Pre-MPM", ap_hook_get_pre_mpm}, {"MPM", ap_hook_get_mpm}, {"Drop Privileges", ap_hook_get_drop_privileges}, {"Retrieve Optional Functions", ap_hook_get_optional_fn_retrieve}, {"Child Init", ap_hook_get_child_init}, {NULL}, }; static const hook_lookup_t request_hooks[] = { {"Pre-Connection", ap_hook_get_pre_connection}, {"Create Connection", ap_hook_get_create_connection}, {"Process Connection", ap_hook_get_process_connection}, {"Create Request", ap_hook_get_create_request}, {"Pre-Read Request", ap_hook_get_pre_read_request}, {"Post-Read Request", ap_hook_get_post_read_request}, {"Header Parse", ap_hook_get_header_parser}, {"HTTP Scheme", ap_hook_get_http_scheme}, {"Default Port", ap_hook_get_default_port}, {"Quick Handler", ap_hook_get_quick_handler}, {"Translate Name", ap_hook_get_translate_name}, {"Map to Storage", ap_hook_get_map_to_storage}, {"Check Access", ap_hook_get_access_checker_ex}, {"Check Access (legacy)", ap_hook_get_access_checker}, {"Verify User ID", ap_hook_get_check_user_id}, {"Note Authentication Failure", ap_hook_get_note_auth_failure}, {"Verify User Access", ap_hook_get_auth_checker}, {"Check Type", ap_hook_get_type_checker}, {"Fixups", ap_hook_get_fixups}, {"Insert Filters", ap_hook_get_insert_filter}, {"Content Handlers", ap_hook_get_handler}, {"Transaction Logging", ap_hook_get_log_transaction}, {"Insert Errors", ap_hook_get_insert_error_filter}, {"Generate Log ID", ap_hook_get_generate_log_id}, {NULL}, }; static const hook_lookup_t other_hooks[] = { {"Monitor", ap_hook_get_monitor}, {"Child Status", ap_hook_get_child_status}, {"End Generation", ap_hook_get_end_generation}, {"Error Logging", ap_hook_get_error_log}, {"Query MPM Attributes", ap_hook_get_mpm_query}, {"Query MPM Name", ap_hook_get_mpm_get_name}, {"Register Timed Callback", ap_hook_get_mpm_register_timed_callback}, {"Extend Expression Parser", ap_hook_get_expr_lookup}, {"Set Management Items", ap_hook_get_get_mgmt_items}, #if AP_ENABLE_EXCEPTION_HOOK {"Handle Fatal Exceptions", ap_hook_get_fatal_exception}, #endif {NULL}, }; static int module_find_hook(module * modp, hook_get_t hook_get) { int i; apr_array_header_t *hooks = hook_get(); hook_struct_t *elts; if (!hooks) { return 0; } elts = (hook_struct_t *) hooks->elts; for (i = 0; i < hooks->nelts; i++) { if (strcmp(elts[i].szName, modp->name) == 0) { return 1; } } return 0; } static void module_participate(request_rec * r, module * modp, const hook_lookup_t *lookup, int *comma) { if (module_find_hook(modp, lookup->get)) { if (*comma) { ap_rputs(", ", r); } ap_rvputs(r, "", lookup->name, "", NULL); *comma = 1; } } static void module_request_hook_participate(request_rec * r, module * modp) { int i, comma = 0; ap_rputs("
    Request Phase Participation:\n", r); for (i = 0; request_hooks[i].name; i++) { module_participate(r, modp, &request_hooks[i], &comma); } if (!comma) { ap_rputs(" none", r); } ap_rputs("
    \n", r); } static const char *find_more_info(server_rec * s, const char *module_name) { int i; info_svr_conf *conf = (info_svr_conf *) ap_get_module_config(s->module_config, &info_module); info_entry *entry = (info_entry *) conf->more_info->elts; if (!module_name) { return 0; } for (i = 0; i < conf->more_info->nelts; i++) { if (!strcmp(module_name, entry->name)) { return entry->info; } entry++; } return 0; } static int show_server_settings(request_rec * r) { server_rec *serv = r->server; int max_daemons, forked, threaded; ap_rputs("

    Server Settings

    ", r); ap_rprintf(r, "
    Server Version: " "%s
    \n", ap_get_server_description()); ap_rprintf(r, "
    Server Built: " "%s
    \n", ap_get_server_built()); ap_rprintf(r, "
    Server loaded APR Version: " "%s
    \n", apr_version_string()); ap_rprintf(r, "
    Compiled with APR Version: " "%s
    \n", APR_VERSION_STRING); #if APR_MAJOR_VERSION < 2 ap_rprintf(r, "
    Server loaded APU Version: " "%s
    \n", apu_version_string()); ap_rprintf(r, "
    Compiled with APU Version: " "%s
    \n", APU_VERSION_STRING); #endif ap_rprintf(r, "
    Module Magic Number: " "%d:%d
    \n", MODULE_MAGIC_NUMBER_MAJOR, MODULE_MAGIC_NUMBER_MINOR); ap_rprintf(r, "
    Hostname/port: " "%s:%u
    \n", ap_escape_html(r->pool, ap_get_server_name(r)), ap_get_server_port(r)); ap_rprintf(r, "
    Timeouts: " "connection: %d    " "keep-alive: %d
    ", (int) (apr_time_sec(serv->timeout)), (int) (apr_time_sec(serv->keep_alive_timeout))); ap_mpm_query(AP_MPMQ_MAX_DAEMON_USED, &max_daemons); ap_mpm_query(AP_MPMQ_IS_THREADED, &threaded); ap_mpm_query(AP_MPMQ_IS_FORKED, &forked); ap_rprintf(r, "
    MPM Name: %s
    \n", ap_show_mpm()); ap_rprintf(r, "
    MPM Information: " "Max Daemons: %d Threaded: %s Forked: %s
    \n", max_daemons, threaded ? "yes" : "no", forked ? "yes" : "no"); ap_rprintf(r, "
    Server Architecture: " "%ld-bit
    \n", 8 * (long) sizeof(void *)); ap_rprintf(r, "
    Server Root: " "%s
    \n", ap_server_root); ap_rprintf(r, "
    Config File: " "%s
    \n", ap_conftree->filename); ap_rputs("
    Server Built With:\n" "\n", r); /* TODO: Not all of these defines are getting set like they do in main.c. * Missing some headers? */ #ifdef BIG_SECURITY_HOLE ap_rputs(" -D BIG_SECURITY_HOLE\n", r); #endif #ifdef SECURITY_HOLE_PASS_AUTHORIZATION ap_rputs(" -D SECURITY_HOLE_PASS_AUTHORIZATION\n", r); #endif #ifdef OS ap_rputs(" -D OS=\"" OS "\"\n", r); #endif #ifdef HAVE_SHMGET ap_rputs(" -D HAVE_SHMGET\n", r); #endif #if APR_FILE_BASED_SHM ap_rputs(" -D APR_FILE_BASED_SHM\n", r); #endif #if APR_HAS_SENDFILE ap_rputs(" -D APR_HAS_SENDFILE\n", r); #endif #if APR_HAS_MMAP ap_rputs(" -D APR_HAS_MMAP\n", r); #endif #ifdef NO_WRITEV ap_rputs(" -D NO_WRITEV\n", r); #endif #ifdef NO_LINGCLOSE ap_rputs(" -D NO_LINGCLOSE\n", r); #endif #if APR_HAVE_IPV6 ap_rputs(" -D APR_HAVE_IPV6 (IPv4-mapped addresses ", r); #ifdef AP_ENABLE_V4_MAPPED ap_rputs("enabled)\n", r); #else ap_rputs("disabled)\n", r); #endif #endif #if APR_USE_FLOCK_SERIALIZE ap_rputs(" -D APR_USE_FLOCK_SERIALIZE\n", r); #endif #if APR_USE_SYSVSEM_SERIALIZE ap_rputs(" -D APR_USE_SYSVSEM_SERIALIZE\n", r); #endif #if APR_USE_POSIXSEM_SERIALIZE ap_rputs(" -D APR_USE_POSIXSEM_SERIALIZE\n", r); #endif #if APR_USE_FCNTL_SERIALIZE ap_rputs(" -D APR_USE_FCNTL_SERIALIZE\n", r); #endif #if APR_USE_PROC_PTHREAD_SERIALIZE ap_rputs(" -D APR_USE_PROC_PTHREAD_SERIALIZE\n", r); #endif #if APR_PROCESS_LOCK_IS_GLOBAL ap_rputs(" -D APR_PROCESS_LOCK_IS_GLOBAL\n", r); #endif #ifdef SINGLE_LISTEN_UNSERIALIZED_ACCEPT ap_rputs(" -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT\n", r); #endif #if APR_HAS_OTHER_CHILD ap_rputs(" -D APR_HAS_OTHER_CHILD\n", r); #endif #ifdef AP_HAVE_RELIABLE_PIPED_LOGS ap_rputs(" -D AP_HAVE_RELIABLE_PIPED_LOGS\n", r); #endif #ifdef BUFFERED_LOGS ap_rputs(" -D BUFFERED_LOGS\n", r); #ifdef PIPE_BUF ap_rprintf(r, " -D PIPE_BUF=%ld\n", (long) PIPE_BUF); #endif #endif #if APR_CHARSET_EBCDIC ap_rputs(" -D APR_CHARSET_EBCDIC\n", r); #endif #ifdef NEED_HASHBANG_EMUL ap_rputs(" -D NEED_HASHBANG_EMUL\n", r); #endif /* This list displays the compiled in default paths: */ #ifdef HTTPD_ROOT ap_rputs(" -D HTTPD_ROOT=\"" HTTPD_ROOT "\"\n", r); #endif #ifdef SUEXEC_BIN ap_rputs(" -D SUEXEC_BIN=\"" SUEXEC_BIN "\"\n", r); #endif #ifdef DEFAULT_PIDLOG ap_rputs(" -D DEFAULT_PIDLOG=\"" DEFAULT_PIDLOG "\"\n", r); #endif #ifdef DEFAULT_SCOREBOARD ap_rputs(" -D DEFAULT_SCOREBOARD=\"" DEFAULT_SCOREBOARD "\"\n", r); #endif #ifdef DEFAULT_ERRORLOG ap_rputs(" -D DEFAULT_ERRORLOG=\"" DEFAULT_ERRORLOG "\"\n", r); #endif #ifdef AP_TYPES_CONFIG_FILE ap_rputs(" -D AP_TYPES_CONFIG_FILE=\"" AP_TYPES_CONFIG_FILE "\"\n", r); #endif #ifdef SERVER_CONFIG_FILE ap_rputs(" -D SERVER_CONFIG_FILE=\"" SERVER_CONFIG_FILE "\"\n", r); #endif ap_rputs("
    \n", r); ap_rputs("

    ", r); return 0; } static int dump_a_hook(request_rec * r, hook_get_t hook_get) { int i; char qs; hook_struct_t *elts; apr_array_header_t *hooks = hook_get(); if (!hooks) { return 0; } if (r->args && strcasecmp(r->args, "hooks") == 0) { qs = '?'; } else { qs = '#'; } elts = (hook_struct_t *) hooks->elts; for (i = 0; i < hooks->nelts; i++) { ap_rprintf(r, "   %02d %s
    ", elts[i].nOrder, qs, elts[i].szName, elts[i].szName); } return 0; } static int show_active_hooks(request_rec * r) { int i; ap_rputs("

    Startup Hooks

    \n
    ", r); for (i = 0; startup_hooks[i].name; i++) { ap_rprintf(r, "
    %s:\n
    \n", startup_hooks[i].name); dump_a_hook(r, startup_hooks[i].get); ap_rputs("\n \n
    \n", r); } ap_rputs ("
    \n
    \n

    Request Hooks

    \n
    ", r); for (i = 0; request_hooks[i].name; i++) { ap_rprintf(r, "
    %s:\n
    \n", request_hooks[i].name); dump_a_hook(r, request_hooks[i].get); ap_rputs("\n \n
    \n", r); } ap_rputs ("
    \n
    \n

    Other Hooks

    \n
    ", r); for (i = 0; other_hooks[i].name; i++) { ap_rprintf(r, "
    %s:\n
    \n", other_hooks[i].name); dump_a_hook(r, other_hooks[i].get); ap_rputs("\n \n
    \n", r); } ap_rputs("
    \n
    \n", r); return 0; } static int cmp_provider_groups(const void *a_, const void *b_) { const ap_list_provider_groups_t *a = a_, *b = b_; int ret = strcmp(a->provider_group, b->provider_group); if (!ret) ret = strcmp(a->provider_version, b->provider_version); return ret; } static int cmp_provider_names(const void *a_, const void *b_) { const ap_list_provider_names_t *a = a_, *b = b_; return strcmp(a->provider_name, b->provider_name); } static void show_providers(request_rec *r) { apr_array_header_t *groups = ap_list_provider_groups(r->pool); ap_list_provider_groups_t *group; apr_array_header_t *names; ap_list_provider_names_t *name; int i,j; const char *cur_group = NULL; qsort(groups->elts, groups->nelts, sizeof(ap_list_provider_groups_t), cmp_provider_groups); ap_rputs("

    Providers

    \n
    ", r); for (i = 0; i < groups->nelts; i++) { group = &APR_ARRAY_IDX(groups, i, ap_list_provider_groups_t); if (!cur_group || strcmp(cur_group, group->provider_group) != 0) { if (cur_group) ap_rputs("\n\n", r); cur_group = group->provider_group; ap_rprintf(r, "
    %s (version %s):" "\n
    \n", cur_group, group->provider_version); } names = ap_list_provider_names(r->pool, group->provider_group, group->provider_version); qsort(names->elts, names->nelts, sizeof(ap_list_provider_names_t), cmp_provider_names); for (j = 0; j < names->nelts; j++) { name = &APR_ARRAY_IDX(names, j, ap_list_provider_names_t); ap_rprintf(r, "  %s
    ", name->provider_name); } } if (cur_group) ap_rputs("\n
    \n", r); ap_rputs("
    \n
    \n", r); } static int cmp_module_name(const void *a_, const void *b_) { const module * const *a = a_; const module * const *b = b_; return strcmp((*a)->name, (*b)->name); } static apr_array_header_t *get_sorted_modules(apr_pool_t *p) { apr_array_header_t *arr = apr_array_make(p, 64, sizeof(module *)); module *modp, **entry; for (modp = ap_top_module; modp; modp = modp->next) { entry = &APR_ARRAY_PUSH(arr, module *); *entry = modp; } qsort(arr->elts, arr->nelts, sizeof(module *), cmp_module_name); return arr; } static int display_info(request_rec * r) { module *modp = NULL; const char *more_info; const command_rec *cmd; apr_array_header_t *modules = NULL; int i; if (strcmp(r->handler, "server-info")) { return DECLINED; } r->allowed |= (AP_METHOD_BIT << M_GET); if (r->method_number != M_GET) { return DECLINED; } ap_set_content_type(r, "text/html; charset=ISO-8859-1"); ap_rputs(DOCTYPE_XHTML_1_0T "\n" "\n" " Server Information\n" "\n", r); ap_rputs("

    " "Apache Server Information

    \n", r); if (!r->args || strcasecmp(r->args, "list")) { if (!r->args) { ap_rputs("
    Subpages:
    ", r); ap_rputs("Configuration Files, " "Server Settings, " "Module List, " "Active Hooks, " "Available Providers", r); ap_rputs("

    ", r); ap_rputs("
    Sections:
    ", r); ap_rputs("Loaded Modules, " "Server Settings, " "Startup Hooks, " "Request Hooks, " "Other Hooks, " "Providers", r); ap_rputs("

    ", r); ap_rputs("

    Loaded Modules

    " "
    ", r); modules = get_sorted_modules(r->pool); for (i = 0; i < modules->nelts; i++) { modp = APR_ARRAY_IDX(modules, i, module *); ap_rprintf(r, "%s", modp->name, modp->name); if (i < modules->nelts) { ap_rputs(", ", r); } } ap_rputs("

    ", r); } if (!r->args || !strcasecmp(r->args, "server")) { show_server_settings(r); } if (!r->args || !strcasecmp(r->args, "hooks")) { show_active_hooks(r); } if (!r->args || !strcasecmp(r->args, "providers")) { show_providers(r); } if (r->args && 0 == strcasecmp(r->args, "config")) { ap_rputs("
    Configuration:\n", r); mod_info_module_cmds(r, NULL, ap_conftree, 0, 0); ap_rputs("

    ", r); } else { int comma = 0; if (!modules) modules = get_sorted_modules(r->pool); for (i = 0; i < modules->nelts; i++) { modp = APR_ARRAY_IDX(modules, i, module *); if (!r->args || !strcasecmp(modp->name, r->args)) { ap_rprintf(r, "
    Module Name: " "%s
    \n", modp->name, modp->name, modp->name); ap_rputs("
    Content handlers: ", r); if (module_find_hook(modp, ap_hook_get_handler)) { ap_rputs(" yes", r); } else { ap_rputs(" none", r); } ap_rputs("
    ", r); ap_rputs ("
    Configuration Phase Participation:\n", r); if (modp->create_dir_config) { if (comma) { ap_rputs(", ", r); } ap_rputs("Create Directory Config", r); comma = 1; } if (modp->merge_dir_config) { if (comma) { ap_rputs(", ", r); } ap_rputs("Merge Directory Configs", r); comma = 1; } if (modp->create_server_config) { if (comma) { ap_rputs(", ", r); } ap_rputs("Create Server Config", r); comma = 1; } if (modp->merge_server_config) { if (comma) { ap_rputs(", ", r); } ap_rputs("Merge Server Configs", r); comma = 1; } if (!comma) ap_rputs(" none", r); comma = 0; ap_rputs("
    ", r); module_request_hook_participate(r, modp); cmd = modp->cmds; if (cmd) { ap_rputs ("
    Module Directives:
    ", r); while (cmd) { if (cmd->name) { ap_rprintf(r, "
    %s%s - ", ap_escape_html(r->pool, cmd->name), cmd->name[0] == '<' ? ">" : ""); if (cmd->errmsg) { ap_rputs(ap_escape_html(r->pool, cmd->errmsg), r); } ap_rputs("
    \n", r); } else { break; } cmd++; } ap_rputs ("
    Current Configuration:
    \n", r); mod_info_module_cmds(r, modp->cmds, ap_conftree, 0, 0); } else { ap_rputs ("
    Module Directives: none
    ", r); } more_info = find_more_info(r->server, modp->name); if (more_info) { ap_rputs ("
    Additional Information:\n
    ", r); ap_rputs(more_info, r); ap_rputs("
    ", r); } ap_rputs("

    \n", r); if (r->args) { break; } } } if (!modp && r->args && strcasecmp(r->args, "server")) { ap_rputs("

    No such module

    \n", r); } } } else { ap_rputs("
    Server Module List
    ", r); modules = get_sorted_modules(r->pool); for (i = 0; i < modules->nelts; i++) { modp = APR_ARRAY_IDX(modules, i, module *); ap_rputs("
    ", r); ap_rputs(modp->name, r); ap_rputs("
    ", r); } ap_rputs("

    ", r); } ap_rputs(ap_psignature("", r), r); ap_rputs("\n", r); /* Done, turn off timeout, close file and return */ return 0; } static const char *add_module_info(cmd_parms * cmd, void *dummy, const char *name, const char *info) { server_rec *s = cmd->server; info_svr_conf *conf = (info_svr_conf *) ap_get_module_config(s->module_config, &info_module); info_entry *new = apr_array_push(conf->more_info); new->name = name; new->info = info; return NULL; } static const command_rec info_cmds[] = { AP_INIT_TAKE2("AddModuleInfo", add_module_info, NULL, RSRC_CONF, "a module name and additional information on that module"), {NULL} }; static int check_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { if (ap_exists_config_define("DUMP_CONFIG")) { apr_file_open_stdout(&out, ptemp); mod_info_module_cmds(NULL, NULL, ap_conftree, 0, 0); } return DECLINED; } static void register_hooks(apr_pool_t * p) { ap_hook_handler(display_info, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_check_config(check_config, NULL, NULL, APR_HOOK_FIRST); } AP_DECLARE_MODULE(info) = { STANDARD20_MODULE_STUFF, NULL, /* dir config creater */ NULL, /* dir merger --- default is to override */ create_info_config, /* server config */ merge_info_config, /* merge server config */ info_cmds, /* command apr_table_t */ register_hooks }; httpd-2.4.41/modules/generators/mod_cgi.c0000644000000000000500000012400613154513270016626 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * http_script: keeps all script-related ramblings together. * * Compliant to CGI/1.1 spec * * Adapted by rst from original NCSA code by Rob McCool * * This modules uses a httpd core function (ap_add_common_vars) to add some new env vars, * like REDIRECT_URL and REDIRECT_QUERY_STRING for custom error responses and DOCUMENT_ROOT. * It also adds SERVER_ADMIN - useful for scripts to know who to mail when they fail. * */ #include "apr.h" #include "apr_strings.h" #include "apr_thread_proc.h" /* for RLIMIT stuff */ #include "apr_optional.h" #include "apr_buckets.h" #include "apr_lib.h" #include "apr_poll.h" #define APR_WANT_STRFUNC #define APR_WANT_MEMFUNC #include "apr_want.h" #include "util_filter.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_core.h" #include "http_protocol.h" #include "http_main.h" #include "http_log.h" #include "util_script.h" #include "ap_mpm.h" #include "mod_core.h" #include "mod_cgi.h" #if APR_HAVE_STRUCT_RLIMIT #if defined (RLIMIT_CPU) || defined (RLIMIT_NPROC) || defined (RLIMIT_DATA) || defined(RLIMIT_VMEM) || defined(RLIMIT_AS) #define AP_CGI_USE_RLIMIT #endif #endif module AP_MODULE_DECLARE_DATA cgi_module; static APR_OPTIONAL_FN_TYPE(ap_register_include_handler) *cgi_pfn_reg_with_ssi; static APR_OPTIONAL_FN_TYPE(ap_ssi_get_tag_and_value) *cgi_pfn_gtv; static APR_OPTIONAL_FN_TYPE(ap_ssi_parse_string) *cgi_pfn_ps; static APR_OPTIONAL_FN_TYPE(ap_cgi_build_command) *cgi_build_command; /* Read and discard the data in the brigade produced by a CGI script */ static void discard_script_output(apr_bucket_brigade *bb); /* KLUDGE --- for back-combatibility, we don't have to check ExecCGI * in ScriptAliased directories, which means we need to know if this * request came through ScriptAlias or not... so the Alias module * leaves a note for us. */ static int is_scriptaliased(request_rec *r) { const char *t = apr_table_get(r->notes, "alias-forced-type"); return t && (!strcasecmp(t, "cgi-script")); } /* Configuration stuff */ #define DEFAULT_LOGBYTES 10385760 #define DEFAULT_BUFBYTES 1024 typedef struct { const char *logname; long logbytes; apr_size_t bufbytes; } cgi_server_conf; static void *create_cgi_config(apr_pool_t *p, server_rec *s) { cgi_server_conf *c = (cgi_server_conf *) apr_pcalloc(p, sizeof(cgi_server_conf)); c->logname = NULL; c->logbytes = DEFAULT_LOGBYTES; c->bufbytes = DEFAULT_BUFBYTES; return c; } static void *merge_cgi_config(apr_pool_t *p, void *basev, void *overridesv) { cgi_server_conf *base = (cgi_server_conf *) basev, *overrides = (cgi_server_conf *) overridesv; return overrides->logname ? overrides : base; } static const char *set_scriptlog(cmd_parms *cmd, void *dummy, const char *arg) { server_rec *s = cmd->server; cgi_server_conf *conf = ap_get_module_config(s->module_config, &cgi_module); conf->logname = ap_server_root_relative(cmd->pool, arg); if (!conf->logname) { return apr_pstrcat(cmd->pool, "Invalid ScriptLog path ", arg, NULL); } return NULL; } static const char *set_scriptlog_length(cmd_parms *cmd, void *dummy, const char *arg) { server_rec *s = cmd->server; cgi_server_conf *conf = ap_get_module_config(s->module_config, &cgi_module); conf->logbytes = atol(arg); return NULL; } static const char *set_scriptlog_buffer(cmd_parms *cmd, void *dummy, const char *arg) { server_rec *s = cmd->server; cgi_server_conf *conf = ap_get_module_config(s->module_config, &cgi_module); conf->bufbytes = atoi(arg); return NULL; } static const command_rec cgi_cmds[] = { AP_INIT_TAKE1("ScriptLog", set_scriptlog, NULL, RSRC_CONF, "the name of a log for script debugging info"), AP_INIT_TAKE1("ScriptLogLength", set_scriptlog_length, NULL, RSRC_CONF, "the maximum length (in bytes) of the script debug log"), AP_INIT_TAKE1("ScriptLogBuffer", set_scriptlog_buffer, NULL, RSRC_CONF, "the maximum size (in bytes) to record of a POST request"), {NULL} }; static int log_scripterror(request_rec *r, cgi_server_conf * conf, int ret, apr_status_t rv, char *logno, char *error) { apr_file_t *f = NULL; apr_finfo_t finfo; char time_str[APR_CTIME_LEN]; int log_flags = rv ? APLOG_ERR : APLOG_ERR; /* Intentional no APLOGNO */ /* Callee provides APLOGNO in error text */ ap_log_rerror(APLOG_MARK, log_flags, rv, r, "%s%s: %s", logno ? logno : "", error, r->filename); /* XXX Very expensive mainline case! Open, then getfileinfo! */ if (!conf->logname || ((apr_stat(&finfo, conf->logname, APR_FINFO_SIZE, r->pool) == APR_SUCCESS) && (finfo.size > conf->logbytes)) || (apr_file_open(&f, conf->logname, APR_APPEND|APR_WRITE|APR_CREATE, APR_OS_DEFAULT, r->pool) != APR_SUCCESS)) { return ret; } /* "%% [Wed Jun 19 10:53:21 1996] GET /cgi-bin/printenv HTTP/1.0" */ apr_ctime(time_str, apr_time_now()); apr_file_printf(f, "%%%% [%s] %s %s%s%s %s\n", time_str, r->method, r->uri, r->args ? "?" : "", r->args ? r->args : "", r->protocol); /* "%% 500 /usr/local/apache/cgi-bin */ apr_file_printf(f, "%%%% %d %s\n", ret, r->filename); apr_file_printf(f, "%%error\n%s\n", error); apr_file_close(f); return ret; } /* Soak up stderr from a script and redirect it to the error log. */ static apr_status_t log_script_err(request_rec *r, apr_file_t *script_err) { char argsbuffer[HUGE_STRING_LEN]; char *newline; apr_status_t rv; cgi_server_conf *conf = ap_get_module_config(r->server->module_config, &cgi_module); while ((rv = apr_file_gets(argsbuffer, HUGE_STRING_LEN, script_err)) == APR_SUCCESS) { newline = strchr(argsbuffer, '\n'); if (newline) { *newline = '\0'; } log_scripterror(r, conf, r->status, 0, APLOGNO(01215), argsbuffer); } return rv; } static int log_script(request_rec *r, cgi_server_conf * conf, int ret, char *dbuf, const char *sbuf, apr_bucket_brigade *bb, apr_file_t *script_err) { const apr_array_header_t *hdrs_arr = apr_table_elts(r->headers_in); const apr_table_entry_t *hdrs = (const apr_table_entry_t *) hdrs_arr->elts; char argsbuffer[HUGE_STRING_LEN]; apr_file_t *f = NULL; apr_bucket *e; const char *buf; apr_size_t len; apr_status_t rv; int first; int i; apr_finfo_t finfo; char time_str[APR_CTIME_LEN]; /* XXX Very expensive mainline case! Open, then getfileinfo! */ if (!conf->logname || ((apr_stat(&finfo, conf->logname, APR_FINFO_SIZE, r->pool) == APR_SUCCESS) && (finfo.size > conf->logbytes)) || (apr_file_open(&f, conf->logname, APR_APPEND|APR_WRITE|APR_CREATE, APR_OS_DEFAULT, r->pool) != APR_SUCCESS)) { /* Soak up script output */ discard_script_output(bb); log_script_err(r, script_err); return ret; } /* "%% [Wed Jun 19 10:53:21 1996] GET /cgi-bin/printenv HTTP/1.0" */ apr_ctime(time_str, apr_time_now()); apr_file_printf(f, "%%%% [%s] %s %s%s%s %s\n", time_str, r->method, r->uri, r->args ? "?" : "", r->args ? r->args : "", r->protocol); /* "%% 500 /usr/local/apache/cgi-bin" */ apr_file_printf(f, "%%%% %d %s\n", ret, r->filename); apr_file_puts("%request\n", f); for (i = 0; i < hdrs_arr->nelts; ++i) { if (!hdrs[i].key) continue; apr_file_printf(f, "%s: %s\n", hdrs[i].key, hdrs[i].val); } if ((r->method_number == M_POST || r->method_number == M_PUT) && *dbuf) { apr_file_printf(f, "\n%s\n", dbuf); } apr_file_puts("%response\n", f); hdrs_arr = apr_table_elts(r->err_headers_out); hdrs = (const apr_table_entry_t *) hdrs_arr->elts; for (i = 0; i < hdrs_arr->nelts; ++i) { if (!hdrs[i].key) continue; apr_file_printf(f, "%s: %s\n", hdrs[i].key, hdrs[i].val); } if (sbuf && *sbuf) apr_file_printf(f, "%s\n", sbuf); first = 1; for (e = APR_BRIGADE_FIRST(bb); e != APR_BRIGADE_SENTINEL(bb); e = APR_BUCKET_NEXT(e)) { if (APR_BUCKET_IS_EOS(e)) { break; } rv = apr_bucket_read(e, &buf, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS || (len == 0)) { break; } if (first) { apr_file_puts("%stdout\n", f); first = 0; } apr_file_write(f, buf, &len); apr_file_puts("\n", f); } if (apr_file_gets(argsbuffer, HUGE_STRING_LEN, script_err) == APR_SUCCESS) { apr_file_puts("%stderr\n", f); apr_file_puts(argsbuffer, f); while (apr_file_gets(argsbuffer, HUGE_STRING_LEN, script_err) == APR_SUCCESS) { apr_file_puts(argsbuffer, f); } apr_file_puts("\n", f); } apr_brigade_destroy(bb); apr_file_close(script_err); apr_file_close(f); return ret; } /* This is the special environment used for running the "exec cmd=" * variety of SSI directives. */ static void add_ssi_vars(request_rec *r) { apr_table_t *e = r->subprocess_env; if (r->path_info && r->path_info[0] != '\0') { request_rec *pa_req; apr_table_setn(e, "PATH_INFO", ap_escape_shell_cmd(r->pool, r->path_info)); pa_req = ap_sub_req_lookup_uri(ap_escape_uri(r->pool, r->path_info), r, NULL); if (pa_req->filename) { apr_table_setn(e, "PATH_TRANSLATED", apr_pstrcat(r->pool, pa_req->filename, pa_req->path_info, NULL)); } ap_destroy_sub_req(pa_req); } if (r->args) { char *arg_copy = apr_pstrdup(r->pool, r->args); apr_table_setn(e, "QUERY_STRING", r->args); ap_unescape_url(arg_copy); apr_table_setn(e, "QUERY_STRING_UNESCAPED", ap_escape_shell_cmd(r->pool, arg_copy)); } } static void cgi_child_errfn(apr_pool_t *pool, apr_status_t err, const char *description) { apr_file_t *stderr_log; apr_file_open_stderr(&stderr_log, pool); /* Escape the logged string because it may be something that * came in over the network. */ apr_file_printf(stderr_log, "(%d)%pm: %s\n", err, &err, #ifndef AP_UNSAFE_ERROR_LOG_UNESCAPED ap_escape_logitem(pool, #endif description #ifndef AP_UNSAFE_ERROR_LOG_UNESCAPED ) #endif ); } static apr_status_t run_cgi_child(apr_file_t **script_out, apr_file_t **script_in, apr_file_t **script_err, const char *command, const char * const argv[], request_rec *r, apr_pool_t *p, cgi_exec_info_t *e_info) { const char * const *env; apr_procattr_t *procattr; apr_proc_t *procnew; apr_status_t rc = APR_SUCCESS; #ifdef AP_CGI_USE_RLIMIT core_dir_config *conf = ap_get_core_module_config(r->per_dir_config); #endif #ifdef DEBUG_CGI #ifdef OS2 /* Under OS/2 need to use device con. */ FILE *dbg = fopen("con", "w"); #else FILE *dbg = fopen("/dev/tty", "w"); #endif int i; #endif RAISE_SIGSTOP(CGI_CHILD); #ifdef DEBUG_CGI fprintf(dbg, "Attempting to exec %s as CGI child (argv0 = %s)\n", r->filename, argv[0]); #endif env = (const char * const *)ap_create_environment(p, r->subprocess_env); #ifdef DEBUG_CGI fprintf(dbg, "Environment: \n"); for (i = 0; env[i]; ++i) fprintf(dbg, "'%s'\n", env[i]); fclose(dbg); #endif /* Transmute ourselves into the script. * NB only ISINDEX scripts get decoded arguments. */ if (((rc = apr_procattr_create(&procattr, p)) != APR_SUCCESS) || ((rc = apr_procattr_io_set(procattr, e_info->in_pipe, e_info->out_pipe, e_info->err_pipe)) != APR_SUCCESS) || ((rc = apr_procattr_dir_set(procattr, ap_make_dirstr_parent(r->pool, r->filename))) != APR_SUCCESS) || #if defined(RLIMIT_CPU) && defined(AP_CGI_USE_RLIMIT) ((rc = apr_procattr_limit_set(procattr, APR_LIMIT_CPU, conf->limit_cpu)) != APR_SUCCESS) || #endif #if defined(AP_CGI_USE_RLIMIT) && (defined(RLIMIT_DATA) || defined(RLIMIT_VMEM) || defined(RLIMIT_AS)) ((rc = apr_procattr_limit_set(procattr, APR_LIMIT_MEM, conf->limit_mem)) != APR_SUCCESS) || #endif #if defined(RLIMIT_NPROC) && defined(AP_CGI_USE_RLIMIT) ((rc = apr_procattr_limit_set(procattr, APR_LIMIT_NPROC, conf->limit_nproc)) != APR_SUCCESS) || #endif ((rc = apr_procattr_cmdtype_set(procattr, e_info->cmd_type)) != APR_SUCCESS) || ((rc = apr_procattr_detach_set(procattr, e_info->detached)) != APR_SUCCESS) || ((rc = apr_procattr_addrspace_set(procattr, e_info->addrspace)) != APR_SUCCESS) || ((rc = apr_procattr_child_errfn_set(procattr, cgi_child_errfn)) != APR_SUCCESS)) { /* Something bad happened, tell the world. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, r, APLOGNO(01216) "couldn't set child process attributes: %s", r->filename); } else { procnew = apr_pcalloc(p, sizeof(*procnew)); rc = ap_os_create_privileged_process(r, procnew, command, argv, env, procattr, p); if (rc != APR_SUCCESS) { /* Bad things happened. Everyone should have cleaned up. */ /* Intentional no APLOGNO */ ap_log_rerror(APLOG_MARK, APLOG_ERR|APLOG_TOCLIENT, rc, r, "couldn't create child process: %d: %s", rc, apr_filepath_name_get(r->filename)); } else { apr_pool_note_subprocess(p, procnew, APR_KILL_AFTER_TIMEOUT); *script_in = procnew->out; if (!*script_in) return APR_EBADF; apr_file_pipe_timeout_set(*script_in, r->server->timeout); if (e_info->prog_type == RUN_AS_CGI) { *script_out = procnew->in; if (!*script_out) return APR_EBADF; apr_file_pipe_timeout_set(*script_out, r->server->timeout); *script_err = procnew->err; if (!*script_err) return APR_EBADF; apr_file_pipe_timeout_set(*script_err, r->server->timeout); } } } return (rc); } static apr_status_t default_build_command(const char **cmd, const char ***argv, request_rec *r, apr_pool_t *p, cgi_exec_info_t *e_info) { int numwords, x, idx; char *w; const char *args = NULL; if (e_info->process_cgi) { *cmd = r->filename; /* Do not process r->args if they contain an '=' assignment */ if (r->args && r->args[0] && !ap_strchr_c(r->args, '=')) { args = r->args; } } if (!args) { numwords = 1; } else { /* count the number of keywords */ for (x = 0, numwords = 2; args[x]; x++) { if (args[x] == '+') { ++numwords; } } } /* Everything is - 1 to account for the first parameter * which is the program name. */ if (numwords > APACHE_ARG_MAX - 1) { numwords = APACHE_ARG_MAX - 1; /* Truncate args to prevent overrun */ } *argv = apr_palloc(p, (numwords + 2) * sizeof(char *)); (*argv)[0] = *cmd; for (x = 1, idx = 1; x < numwords; x++) { w = ap_getword_nulls(p, &args, '+'); ap_unescape_url(w); (*argv)[idx++] = ap_escape_shell_cmd(p, w); } (*argv)[idx] = NULL; return APR_SUCCESS; } static void discard_script_output(apr_bucket_brigade *bb) { apr_bucket *e; const char *buf; apr_size_t len; apr_status_t rv; for (e = APR_BRIGADE_FIRST(bb); e != APR_BRIGADE_SENTINEL(bb); e = APR_BUCKET_NEXT(e)) { if (APR_BUCKET_IS_EOS(e)) { break; } rv = apr_bucket_read(e, &buf, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS) { break; } } } #if APR_FILES_AS_SOCKETS /* A CGI bucket type is needed to catch any output to stderr from the * script; see PR 22030. */ static const apr_bucket_type_t bucket_type_cgi; struct cgi_bucket_data { apr_pollset_t *pollset; request_rec *r; }; /* Create a CGI bucket using pipes from script stdout 'out' * and stderr 'err', for request 'r'. */ static apr_bucket *cgi_bucket_create(request_rec *r, apr_file_t *out, apr_file_t *err, apr_bucket_alloc_t *list) { apr_bucket *b = apr_bucket_alloc(sizeof(*b), list); apr_status_t rv; apr_pollfd_t fd; struct cgi_bucket_data *data = apr_palloc(r->pool, sizeof *data); APR_BUCKET_INIT(b); b->free = apr_bucket_free; b->list = list; b->type = &bucket_type_cgi; b->length = (apr_size_t)(-1); b->start = -1; /* Create the pollset */ rv = apr_pollset_create(&data->pollset, 2, r->pool, 0); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01217) "apr_pollset_create(); check system or user limits"); return NULL; } fd.desc_type = APR_POLL_FILE; fd.reqevents = APR_POLLIN; fd.p = r->pool; fd.desc.f = out; /* script's stdout */ fd.client_data = (void *)1; rv = apr_pollset_add(data->pollset, &fd); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01218) "apr_pollset_add(); check system or user limits"); return NULL; } fd.desc.f = err; /* script's stderr */ fd.client_data = (void *)2; rv = apr_pollset_add(data->pollset, &fd); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01219) "apr_pollset_add(); check system or user limits"); return NULL; } data->r = r; b->data = data; return b; } /* Create a duplicate CGI bucket using given bucket data */ static apr_bucket *cgi_bucket_dup(struct cgi_bucket_data *data, apr_bucket_alloc_t *list) { apr_bucket *b = apr_bucket_alloc(sizeof(*b), list); APR_BUCKET_INIT(b); b->free = apr_bucket_free; b->list = list; b->type = &bucket_type_cgi; b->length = (apr_size_t)(-1); b->start = -1; b->data = data; return b; } /* Handle stdout from CGI child. Duplicate of logic from the _read * method of the real APR pipe bucket implementation. */ static apr_status_t cgi_read_stdout(apr_bucket *a, apr_file_t *out, const char **str, apr_size_t *len) { char *buf; apr_status_t rv; *str = NULL; *len = APR_BUCKET_BUFF_SIZE; buf = apr_bucket_alloc(*len, a->list); /* XXX: check for failure? */ rv = apr_file_read(out, buf, len); if (rv != APR_SUCCESS && rv != APR_EOF) { apr_bucket_free(buf); return rv; } if (*len > 0) { struct cgi_bucket_data *data = a->data; apr_bucket_heap *h; /* Change the current bucket to refer to what we read */ a = apr_bucket_heap_make(a, buf, *len, apr_bucket_free); h = a->data; h->alloc_len = APR_BUCKET_BUFF_SIZE; /* note the real buffer size */ *str = buf; APR_BUCKET_INSERT_AFTER(a, cgi_bucket_dup(data, a->list)); } else { apr_bucket_free(buf); a = apr_bucket_immortal_make(a, "", 0); *str = a->data; } return rv; } /* Read method of CGI bucket: polls on stderr and stdout of the child, * sending any stderr output immediately away to the error log. */ static apr_status_t cgi_bucket_read(apr_bucket *b, const char **str, apr_size_t *len, apr_read_type_e block) { struct cgi_bucket_data *data = b->data; apr_interval_time_t timeout; apr_status_t rv; int gotdata = 0; timeout = block == APR_NONBLOCK_READ ? 0 : data->r->server->timeout; do { const apr_pollfd_t *results; apr_int32_t num; rv = apr_pollset_poll(data->pollset, timeout, &num, &results); if (APR_STATUS_IS_TIMEUP(rv)) { if (timeout) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, data->r, APLOGNO(01220) "Timeout waiting for output from CGI script %s", data->r->filename); return rv; } else { return APR_EAGAIN; } } else if (APR_STATUS_IS_EINTR(rv)) { continue; } else if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, data->r, APLOGNO(01221) "poll failed waiting for CGI child"); return rv; } for (; num; num--, results++) { if (results[0].client_data == (void *)1) { /* stdout */ rv = cgi_read_stdout(b, results[0].desc.f, str, len); if (APR_STATUS_IS_EOF(rv)) { rv = APR_SUCCESS; } gotdata = 1; } else { /* stderr */ apr_status_t rv2 = log_script_err(data->r, results[0].desc.f); if (APR_STATUS_IS_EOF(rv2)) { apr_pollset_remove(data->pollset, &results[0]); } } } } while (!gotdata); return rv; } static const apr_bucket_type_t bucket_type_cgi = { "CGI", 5, APR_BUCKET_DATA, apr_bucket_destroy_noop, cgi_bucket_read, apr_bucket_setaside_notimpl, apr_bucket_split_notimpl, apr_bucket_copy_notimpl }; #endif static int cgi_handler(request_rec *r) { int nph; apr_size_t dbpos = 0; const char *argv0; const char *command; const char **argv; char *dbuf = NULL; apr_file_t *script_out = NULL, *script_in = NULL, *script_err = NULL; apr_bucket_brigade *bb; apr_bucket *b; int is_included; int seen_eos, child_stopped_reading; apr_pool_t *p; cgi_server_conf *conf; apr_status_t rv; cgi_exec_info_t e_info; conn_rec *c; if (strcmp(r->handler, CGI_MAGIC_TYPE) && strcmp(r->handler, "cgi-script")) { return DECLINED; } c = r->connection; is_included = !strcmp(r->protocol, "INCLUDED"); p = r->main ? r->main->pool : r->pool; argv0 = apr_filepath_name_get(r->filename); nph = !(strncmp(argv0, "nph-", 4)); conf = ap_get_module_config(r->server->module_config, &cgi_module); if (!(ap_allow_options(r) & OPT_EXECCGI) && !is_scriptaliased(r)) return log_scripterror(r, conf, HTTP_FORBIDDEN, 0, APLOGNO(02809), "Options ExecCGI is off in this directory"); if (nph && is_included) return log_scripterror(r, conf, HTTP_FORBIDDEN, 0, APLOGNO(02810), "attempt to include NPH CGI script"); if (r->finfo.filetype == APR_NOFILE) return log_scripterror(r, conf, HTTP_NOT_FOUND, 0, APLOGNO(02811), "script not found or unable to stat"); if (r->finfo.filetype == APR_DIR) return log_scripterror(r, conf, HTTP_FORBIDDEN, 0, APLOGNO(02812), "attempt to invoke directory as script"); if ((r->used_path_info == AP_REQ_REJECT_PATH_INFO) && r->path_info && *r->path_info) { /* default to accept */ return log_scripterror(r, conf, HTTP_NOT_FOUND, 0, APLOGNO(02813), "AcceptPathInfo off disallows user's path"); } /* if (!ap_suexec_enabled) { if (!ap_can_exec(&r->finfo)) return log_scripterror(r, conf, HTTP_FORBIDDEN, 0, APLOGNO(03194) "file permissions deny server execution"); } */ ap_add_common_vars(r); ap_add_cgi_vars(r); e_info.process_cgi = 1; e_info.cmd_type = APR_PROGRAM; e_info.detached = 0; e_info.in_pipe = APR_CHILD_BLOCK; e_info.out_pipe = APR_CHILD_BLOCK; e_info.err_pipe = APR_CHILD_BLOCK; e_info.prog_type = RUN_AS_CGI; e_info.bb = NULL; e_info.ctx = NULL; e_info.next = NULL; e_info.addrspace = 0; /* build the command line */ if ((rv = cgi_build_command(&command, &argv, r, p, &e_info)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01222) "don't know how to spawn child process: %s", r->filename); return HTTP_INTERNAL_SERVER_ERROR; } /* run the script in its own process */ if ((rv = run_cgi_child(&script_out, &script_in, &script_err, command, argv, r, p, &e_info)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01223) "couldn't spawn child process: %s", r->filename); return HTTP_INTERNAL_SERVER_ERROR; } /* Transfer any put/post args, CERN style... * Note that we already ignore SIGPIPE in the core server. */ bb = apr_brigade_create(r->pool, c->bucket_alloc); seen_eos = 0; child_stopped_reading = 0; if (conf->logname) { dbuf = apr_palloc(r->pool, conf->bufbytes + 1); dbpos = 0; } do { apr_bucket *bucket; rv = ap_get_brigade(r->input_filters, bb, AP_MODE_READBYTES, APR_BLOCK_READ, HUGE_STRING_LEN); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01225) "Error reading request entity data"); return ap_map_http_request_error(rv, HTTP_BAD_REQUEST); } for (bucket = APR_BRIGADE_FIRST(bb); bucket != APR_BRIGADE_SENTINEL(bb); bucket = APR_BUCKET_NEXT(bucket)) { const char *data; apr_size_t len; if (APR_BUCKET_IS_EOS(bucket)) { seen_eos = 1; break; } /* We can't do much with this. */ if (APR_BUCKET_IS_FLUSH(bucket)) { continue; } /* If the child stopped, we still must read to EOS. */ if (child_stopped_reading) { continue; } /* read */ apr_bucket_read(bucket, &data, &len, APR_BLOCK_READ); if (conf->logname && dbpos < conf->bufbytes) { int cursize; if ((dbpos + len) > conf->bufbytes) { cursize = conf->bufbytes - dbpos; } else { cursize = len; } memcpy(dbuf + dbpos, data, cursize); dbpos += cursize; } /* Keep writing data to the child until done or too much time * elapses with no progress or an error occurs. */ rv = apr_file_write_full(script_out, data, len, NULL); if (rv != APR_SUCCESS) { /* silly script stopped reading, soak up remaining message */ child_stopped_reading = 1; } } apr_brigade_cleanup(bb); } while (!seen_eos); if (conf->logname) { dbuf[dbpos] = '\0'; } /* Is this flush really needed? */ apr_file_flush(script_out); apr_file_close(script_out); AP_DEBUG_ASSERT(script_in != NULL); #if APR_FILES_AS_SOCKETS apr_file_pipe_timeout_set(script_in, 0); apr_file_pipe_timeout_set(script_err, 0); b = cgi_bucket_create(r, script_in, script_err, c->bucket_alloc); if (b == NULL) return HTTP_INTERNAL_SERVER_ERROR; #else b = apr_bucket_pipe_create(script_in, c->bucket_alloc); #endif APR_BRIGADE_INSERT_TAIL(bb, b); b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); /* Handle script return... */ if (!nph) { const char *location; char sbuf[MAX_STRING_LEN]; int ret; if ((ret = ap_scan_script_header_err_brigade_ex(r, bb, sbuf, APLOG_MODULE_INDEX))) { ret = log_script(r, conf, ret, dbuf, sbuf, bb, script_err); /* * ret could be HTTP_NOT_MODIFIED in the case that the CGI script * does not set an explicit status and ap_meets_conditions, which * is called by ap_scan_script_header_err_brigade, detects that * the conditions of the requests are met and the response is * not modified. * In this case set r->status and return OK in order to prevent * running through the error processing stack as this would * break with mod_cache, if the conditions had been set by * mod_cache itself to validate a stale entity. * BTW: We circumvent the error processing stack anyway if the * CGI script set an explicit status code (whatever it is) and * the only possible values for ret here are: * * HTTP_NOT_MODIFIED (set by ap_meets_conditions) * HTTP_PRECONDITION_FAILED (set by ap_meets_conditions) * HTTP_INTERNAL_SERVER_ERROR (if something went wrong during the * processing of the response of the CGI script, e.g broken headers * or a crashed CGI process). */ if (ret == HTTP_NOT_MODIFIED) { r->status = ret; return OK; } return ret; } location = apr_table_get(r->headers_out, "Location"); if (location && r->status == 200) { /* For a redirect whether internal or not, discard any * remaining stdout from the script, and log any remaining * stderr output, as normal. */ discard_script_output(bb); apr_brigade_destroy(bb); apr_file_pipe_timeout_set(script_err, r->server->timeout); log_script_err(r, script_err); } if (location && location[0] == '/' && r->status == 200) { /* This redirect needs to be a GET no matter what the original * method was. */ r->method = "GET"; r->method_number = M_GET; /* We already read the message body (if any), so don't allow * the redirected request to think it has one. We can ignore * Transfer-Encoding, since we used REQUEST_CHUNKED_ERROR. */ apr_table_unset(r->headers_in, "Content-Length"); ap_internal_redirect_handler(location, r); return OK; } else if (location && r->status == 200) { /* XXX: Note that if a script wants to produce its own Redirect * body, it now has to explicitly *say* "Status: 302" */ return HTTP_MOVED_TEMPORARILY; } rv = ap_pass_brigade(r->output_filters, bb); } else /* nph */ { struct ap_filter_t *cur; /* get rid of all filters up through protocol... since we * haven't parsed off the headers, there is no way they can * work */ cur = r->proto_output_filters; while (cur && cur->frec->ftype < AP_FTYPE_CONNECTION) { cur = cur->next; } r->output_filters = r->proto_output_filters = cur; rv = ap_pass_brigade(r->output_filters, bb); } /* don't soak up script output if errors occurred writing it * out... otherwise, we prolong the life of the script when the * connection drops or we stopped sending output for some other * reason */ if (rv == APR_SUCCESS && !r->connection->aborted) { apr_file_pipe_timeout_set(script_err, r->server->timeout); log_script_err(r, script_err); } apr_file_close(script_err); return OK; /* NOT r->status, even if it has changed. */ } /*============================================================================ *============================================================================ * This is the beginning of the cgi filter code moved from mod_include. This * is the code required to handle the "exec" SSI directive. *============================================================================ *============================================================================*/ static apr_status_t include_cgi(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb, char *s) { request_rec *r = f->r; request_rec *rr = ap_sub_req_lookup_uri(s, r, f->next); int rr_status; if (rr->status != HTTP_OK) { ap_destroy_sub_req(rr); return APR_EGENERAL; } /* No hardwired path info or query allowed */ if ((rr->path_info && rr->path_info[0]) || rr->args) { ap_destroy_sub_req(rr); return APR_EGENERAL; } if (rr->finfo.filetype != APR_REG) { ap_destroy_sub_req(rr); return APR_EGENERAL; } /* Script gets parameters of the *document*, for back compatibility */ rr->path_info = r->path_info; /* hard to get right; see mod_cgi.c */ rr->args = r->args; /* Force sub_req to be treated as a CGI request, even if ordinary * typing rules would have called it something else. */ ap_set_content_type(rr, CGI_MAGIC_TYPE); /* Run it. */ rr_status = ap_run_sub_req(rr); if (ap_is_HTTP_REDIRECT(rr_status)) { const char *location = apr_table_get(rr->headers_out, "Location"); if (location) { char *buffer; location = ap_escape_html(rr->pool, location); buffer = apr_pstrcat(ctx->pool, "", location, "", NULL); APR_BRIGADE_INSERT_TAIL(bb, apr_bucket_pool_create(buffer, strlen(buffer), ctx->pool, f->c->bucket_alloc)); } } ap_destroy_sub_req(rr); return APR_SUCCESS; } static apr_status_t include_cmd(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb, const char *command) { cgi_exec_info_t e_info; const char **argv; apr_file_t *script_out = NULL, *script_in = NULL, *script_err = NULL; apr_status_t rv; request_rec *r = f->r; add_ssi_vars(r); e_info.process_cgi = 0; e_info.cmd_type = APR_SHELLCMD; e_info.detached = 0; e_info.in_pipe = APR_NO_PIPE; e_info.out_pipe = APR_FULL_BLOCK; e_info.err_pipe = APR_NO_PIPE; e_info.prog_type = RUN_AS_SSI; e_info.bb = &bb; e_info.ctx = ctx; e_info.next = f->next; e_info.addrspace = 0; if ((rv = cgi_build_command(&command, &argv, r, r->pool, &e_info)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01226) "don't know how to spawn cmd child process: %s", r->filename); return rv; } /* run the script in its own process */ if ((rv = run_cgi_child(&script_out, &script_in, &script_err, command, argv, r, r->pool, &e_info)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01227) "couldn't spawn child process: %s", r->filename); return rv; } APR_BRIGADE_INSERT_TAIL(bb, apr_bucket_pipe_create(script_in, f->c->bucket_alloc)); ctx->flush_now = 1; /* We can't close the pipe here, because we may return before the * full CGI has been sent to the network. That's okay though, * because we can rely on the pool to close the pipe for us. */ return APR_SUCCESS; } static apr_status_t handle_exec(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb) { char *tag = NULL; char *tag_val = NULL; request_rec *r = f->r; char *file = r->filename; char parsed_string[MAX_STRING_LEN]; if (!ctx->argc) { ap_log_rerror(APLOG_MARK, (ctx->flags & SSI_FLAG_PRINTING) ? APLOG_ERR : APLOG_WARNING, 0, r, APLOGNO(03195) "missing argument for exec element in %s", r->filename); } if (!(ctx->flags & SSI_FLAG_PRINTING)) { return APR_SUCCESS; } if (!ctx->argc) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } if (ctx->flags & SSI_FLAG_NO_EXEC) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01228) "exec used but not allowed " "in %s", r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } while (1) { cgi_pfn_gtv(ctx, &tag, &tag_val, SSI_VALUE_DECODED); if (!tag || !tag_val) { break; } if (!strcmp(tag, "cmd")) { apr_status_t rv; cgi_pfn_ps(ctx, tag_val, parsed_string, sizeof(parsed_string), SSI_EXPAND_LEAVE_NAME); rv = include_cmd(ctx, f, bb, parsed_string); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01229) "execution failure " "for parameter \"%s\" to tag exec in file %s", tag, r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); break; } } else if (!strcmp(tag, "cgi")) { apr_status_t rv; cgi_pfn_ps(ctx, tag_val, parsed_string, sizeof(parsed_string), SSI_EXPAND_DROP_NAME); rv = include_cgi(ctx, f, bb, parsed_string); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01230) "invalid CGI ref " "\"%s\" in %s", tag_val, file); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); break; } } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01231) "unknown parameter " "\"%s\" to tag exec in %s", tag, file); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); break; } } return APR_SUCCESS; } /*============================================================================ *============================================================================ * This is the end of the cgi filter code moved from mod_include. *============================================================================ *============================================================================*/ static int cgi_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { cgi_pfn_reg_with_ssi = APR_RETRIEVE_OPTIONAL_FN(ap_register_include_handler); cgi_pfn_gtv = APR_RETRIEVE_OPTIONAL_FN(ap_ssi_get_tag_and_value); cgi_pfn_ps = APR_RETRIEVE_OPTIONAL_FN(ap_ssi_parse_string); if ((cgi_pfn_reg_with_ssi) && (cgi_pfn_gtv) && (cgi_pfn_ps)) { /* Required by mod_include filter. This is how mod_cgi registers * with mod_include to provide processing of the exec directive. */ cgi_pfn_reg_with_ssi("exec", handle_exec); } /* This is the means by which unusual (non-unix) os's may find alternate * means to run a given command (e.g. shebang/registry parsing on Win32) */ cgi_build_command = APR_RETRIEVE_OPTIONAL_FN(ap_cgi_build_command); if (!cgi_build_command) { cgi_build_command = default_build_command; } return OK; } static void register_hooks(apr_pool_t *p) { static const char * const aszPre[] = { "mod_include.c", NULL }; ap_hook_handler(cgi_handler, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(cgi_post_config, aszPre, NULL, APR_HOOK_REALLY_FIRST); } AP_DECLARE_MODULE(cgi) = { STANDARD20_MODULE_STUFF, NULL, /* dir config creater */ NULL, /* dir merger --- default is to override */ create_cgi_config, /* server config */ merge_cgi_config, /* merge server config */ cgi_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/generators/mod_info.dsp0000644000000000000500000001046710551346420017367 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_info" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_info - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_info.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_info.mak" CFG="mod_info - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_info - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_info - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_info - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_info_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_info.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_info.so" /d LONG_NAME="info_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_info.so" /base:@..\..\os\win32\BaseAddr.ref,mod_info.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_info.so" /base:@..\..\os\win32\BaseAddr.ref,mod_info.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_info.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_info - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_info_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_info.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_info.so" /d LONG_NAME="info_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_info.so" /base:@..\..\os\win32\BaseAddr.ref,mod_info.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_info.so" /base:@..\..\os\win32\BaseAddr.ref,mod_info.so # Begin Special Build Tool TargetPath=.\Debug\mod_info.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_info - Win32 Release" # Name "mod_info - Win32 Debug" # Begin Source File SOURCE=.\mod_info.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/generators/mod_status.dep0000644000000000000500000000412712674411515017743 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_status.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_status.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_status.h"\ httpd-2.4.41/modules/generators/NWGNUautoindex0000644000000000000500000001021411540546347017626 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = autoindex # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Autoindex Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Autoindex Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/autoindex.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_autoindex.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ autoindex_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/generators/mod_asis.exp0000644000000000000500000000001410150161574017364 0ustar rootsrcasis_module httpd-2.4.41/modules/generators/mod_cgi.h0000644000000000000500000000470011637105701016631 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_cgi.h * @brief CGI Script Execution Extension Module for Apache * * @defgroup MOD_CGI mod_cgi * @ingroup APACHE_MODS * @{ */ #ifndef _MOD_CGI_H #define _MOD_CGI_H 1 #include "mod_include.h" typedef enum {RUN_AS_SSI, RUN_AS_CGI} prog_types; typedef struct { apr_int32_t in_pipe; apr_int32_t out_pipe; apr_int32_t err_pipe; int process_cgi; apr_cmdtype_e cmd_type; apr_int32_t detached; prog_types prog_type; apr_bucket_brigade **bb; include_ctx_t *ctx; ap_filter_t *next; apr_int32_t addrspace; } cgi_exec_info_t; /** * Registerable optional function to override CGI behavior; * Reprocess the command and arguments to execute the given CGI script. * @param cmd Pointer to the command to execute (may be overridden) * @param argv Pointer to the arguments to pass (may be overridden) * @param r The current request * @param p The pool to allocate correct cmd/argv elements within. * @param e_info pass e_info.cmd_type (Set to APR_SHELLCMD or APR_PROGRAM on entry) and e_info.detached (Should the child start in detached state?) * @remark This callback may be registered by the os-specific module * to correct the command and arguments for apr_proc_create invocation * on a given os. mod_cgi will call the function if registered. */ APR_DECLARE_OPTIONAL_FN(apr_status_t, ap_cgi_build_command, (const char **cmd, const char ***argv, request_rec *r, apr_pool_t *p, cgi_exec_info_t *e_info)); #endif /* _MOD_CGI_H */ /** @} */ httpd-2.4.41/modules/generators/mod_cgi.dsp0000644000000000000500000001052310551346420017167 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_cgi" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_cgi - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_cgi.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_cgi.mak" CFG="mod_cgi - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_cgi - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_cgi - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_cgi - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_cgi_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_cgi.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_cgi.so" /d LONG_NAME="cgi_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_cgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_cgi.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_cgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_cgi.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_cgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_cgi - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_cgi_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_cgi.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_cgi.so" /d LONG_NAME="cgi_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_cgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_cgi.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_cgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_cgi.so # Begin Special Build Tool TargetPath=.\Debug\mod_cgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_cgi - Win32 Release" # Name "mod_cgi - Win32 Debug" # Begin Source File SOURCE=.\mod_cgi.c # End Source File # Begin Source File SOURCE=.\mod_cgi.h # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/generators/config5.m40000644000000000000500000000543311657335760016673 0ustar rootsrcdnl modules enabled in this directory by default dnl APACHE_MODULE(name, helptext[, objects[, structname[, default[, config]]]]) APACHE_MODPATH_INIT(generators) APACHE_MODULE(status, process/thread monitoring, , , yes) APACHE_MODULE(autoindex, directory listing, , , yes) APACHE_MODULE(asis, as-is filetypes, , , ) APACHE_MODULE(info, server information, , , most) APACHE_MODULE(suexec, set uid and gid for spawned processes, , , no, [ other_targets=suexec ] ) # Is mod_cgid needed? case $host in *mingw*) dnl No fork+thread+fd issues, and cgid doesn't work anyway. cgid_needed="no" ;; *) if ap_mpm_is_threaded; then dnl if we are using a threaded MPM on Unix, we can get better dnl performance with mod_cgid, and also avoid potential issues dnl with forking from a threaded process. cgid_needed="yes" else dnl if we are using a non-threaded MPM, it makes little sense to dnl use mod_cgid, and it just opens up holes we don't need. cgid_needed="no" fi ;; esac if test $cgid_needed = "yes"; then APACHE_MODULE(cgid, CGI scripts. Enabled by default with threaded MPMs, , , most, [ case $host in *-solaris2*) case `uname -r` in 5.10) dnl Does the system have the appropriate patches? case `uname -p` in i386) patch_id="120665" ;; sparc) patch_id="120664" ;; *) AC_MSG_WARN([Unknown platform]) patch_id="120664" ;; esac AC_MSG_CHECKING([for Solaris patch $patch_id]) showrev -p | grep "$patch_id" >/dev/null 2>&1 if test $? -eq 1; then dnl Solaris 11 (next release) as of snv_19 doesn't have this problem. dnl It may be possible to use /kernel/drv/tl from later releases. AC_MSG_ERROR([Please apply either patch # 120664 (Sparc) or # 120665 (x86). Without these patches, mod_cgid is non-functional on Solaris 10 due to an OS bug with AF_UNIX sockets. If you can not apply these patches, you can do one of the following: - run configure with --disable-cgid - switch to the prefork MPM For more info: ]) else AC_MSG_RESULT(yes) fi ;; esac ;; esac ]) APACHE_MODULE(cgi, CGI scripts. Enabled by default with non-threaded MPMs, , , no) else APACHE_MODULE(cgi, CGI scripts. Enabled by default with non-threaded MPMs, , , most) APACHE_MODULE(cgid, CGI scripts. Enabled by default with threaded MPMs, , , no) fi APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) APACHE_MODPATH_FINISH httpd-2.4.41/modules/generators/mod_status.exp0000644000000000000500000000001610150161574017752 0ustar rootsrcstatus_module httpd-2.4.41/modules/generators/NWGNUstatus0000644000000000000500000001013511540546347017153 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = status # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Status Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Status Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/status.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_status.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ status_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/generators/mod_suexec.c0000644000000000000500000001047213240674050017361 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_request.h" #include "apr_strings.h" #include "unixd.h" #include "mpm_common.h" #include "mod_suexec.h" module AP_MODULE_DECLARE_DATA suexec_module; /* * Create a configuration specific to this module for a server or directory * location, and fill it with the default settings. */ static void *mkconfig(apr_pool_t *p) { suexec_config_t *cfg = apr_palloc(p, sizeof(suexec_config_t)); cfg->active = 0; return cfg; } /* * Respond to a callback to create configuration record for a server or * vhost environment. */ static void *create_mconfig_for_server(apr_pool_t *p, server_rec *s) { return mkconfig(p); } /* * Respond to a callback to create a config record for a specific directory. */ static void *create_mconfig_for_directory(apr_pool_t *p, char *dir) { return mkconfig(p); } static const char *set_suexec_ugid(cmd_parms *cmd, void *mconfig, const char *uid, const char *gid) { suexec_config_t *cfg = (suexec_config_t *) mconfig; const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); if (err != NULL) { return err; } if (!ap_unixd_config.suexec_enabled) { return apr_pstrcat(cmd->pool, "SuexecUserGroup configured, but " "suEXEC is disabled: ", ap_unixd_config.suexec_disabled_reason, NULL); } cfg->ugid.uid = ap_uname2id(uid); cfg->ugid.gid = ap_gname2id(gid); cfg->ugid.userdir = 0; cfg->active = 1; return NULL; } static ap_unix_identity_t *get_suexec_id_doer(const request_rec *r) { suexec_config_t *cfg = (suexec_config_t *) ap_get_module_config(r->per_dir_config, &suexec_module); return cfg->active ? &cfg->ugid : NULL; } #define SUEXEC_POST_CONFIG_USERDATA "suexec_post_config_userdata" static int suexec_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { void *reported; apr_pool_userdata_get(&reported, SUEXEC_POST_CONFIG_USERDATA, s->process->pool); if ((reported == NULL) && ap_unixd_config.suexec_enabled) { ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, s, APLOGNO(01232) "suEXEC mechanism enabled (wrapper: %s)", SUEXEC_BIN); apr_pool_userdata_set((void *)1, SUEXEC_POST_CONFIG_USERDATA, apr_pool_cleanup_null, s->process->pool); } return OK; } #undef SUEXEC_POST_CONFIG_USERDATA /* * Define the directives specific to this module. This structure is referenced * later by the 'module' structure. */ static const command_rec suexec_cmds[] = { /* XXX - Another important reason not to allow this in .htaccess is that * the ap_[ug]name2id() is not thread-safe */ AP_INIT_TAKE2("SuexecUserGroup", set_suexec_ugid, NULL, RSRC_CONF, "User and group for spawned processes"), { NULL } }; static void suexec_hooks(apr_pool_t *p) { ap_hook_get_suexec_identity(get_suexec_id_doer,NULL,NULL,APR_HOOK_MIDDLE); ap_hook_post_config(suexec_post_config,NULL,NULL,APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(suexec) = { STANDARD20_MODULE_STUFF, create_mconfig_for_directory, /* create per-dir config */ NULL, /* merge per-dir config */ create_mconfig_for_server, /* server config */ NULL, /* merge server config */ suexec_cmds, /* command table */ suexec_hooks /* register hooks */ }; httpd-2.4.41/modules/generators/mod_status.c0000644000000000000500000011630113350264472017413 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* Status Module. Display lots of internal data about how Apache is * performing and the state of all children processes. * * To enable this, add the following lines into any config file: * * * SetHandler server-status * * * You may want to protect this location by password or domain so no one * else can look at it. Then you can access the statistics with a URL like: * * http://your_server_name/server-status * * /server-status - Returns page using tables * /server-status?notable - Returns page for browsers without table support * /server-status?refresh - Returns page with 1 second refresh * /server-status?refresh=6 - Returns page with refresh every 6 seconds * /server-status?auto - Returns page with data for automatic parsing * * Mark Cox, mark@ukweb.com, November 1995 * * 12.11.95 Initial version for www.telescope.org * 13.3.96 Updated to remove rprintf's [Mark] * 18.3.96 Added CPU usage, process information, and tidied [Ben Laurie] * 18.3.96 Make extra Scoreboard variables #definable * 25.3.96 Make short report have full precision [Ben Laurie suggested] * 25.3.96 Show uptime better [Mark/Ben Laurie] * 29.3.96 Better HTML and explanation [Mark/Rob Hartill suggested] * 09.4.96 Added message for non-STATUS compiled version * 18.4.96 Added per child and per slot counters [Jim Jagielski] * 01.5.96 Table format, cleanup, even more spiffy data [Chuck Murcko/Jim J.] * 18.5.96 Adapted to use new rprintf() routine, incidentally fixing a missing * piece in short reports [Ben Laurie] * 21.5.96 Additional Status codes (DNS and LOGGING only enabled if * extended STATUS is enabled) [George Burgyan/Jim J.] * 10.8.98 Allow for extended status info at runtime (no more STATUS) * [Jim J.] */ #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_protocol.h" #include "http_main.h" #include "ap_mpm.h" #include "util_script.h" #include #include "scoreboard.h" #include "http_log.h" #include "mod_status.h" #if APR_HAVE_UNISTD_H #include #endif #define APR_WANT_STRFUNC #include "apr_want.h" #include "apr_strings.h" #define STATUS_MAXLINE 64 #define KBYTE 1024 #define MBYTE 1048576L #define GBYTE 1073741824L #ifndef DEFAULT_TIME_FORMAT #define DEFAULT_TIME_FORMAT "%A, %d-%b-%Y %H:%M:%S %Z" #endif #define STATUS_MAGIC_TYPE "application/x-httpd-status" module AP_MODULE_DECLARE_DATA status_module; static int server_limit, thread_limit, threads_per_child, max_servers, is_async; /* Implement 'ap_run_status_hook'. */ APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(ap, STATUS, int, status_hook, (request_rec *r, int flags), (r, flags), OK, DECLINED) #ifdef HAVE_TIMES /* ugh... need to know if we're running with a pthread implementation * such as linuxthreads that treats individual threads as distinct * processes; that affects how we add up CPU time in a process */ static pid_t child_pid; #endif /* Format the number of bytes nicely */ static void format_byte_out(request_rec *r, apr_off_t bytes) { if (bytes < (5 * KBYTE)) ap_rprintf(r, "%d B", (int) bytes); else if (bytes < (MBYTE / 2)) ap_rprintf(r, "%.1f kB", (float) bytes / KBYTE); else if (bytes < (GBYTE / 2)) ap_rprintf(r, "%.1f MB", (float) bytes / MBYTE); else ap_rprintf(r, "%.1f GB", (float) bytes / GBYTE); } static void format_kbyte_out(request_rec *r, apr_off_t kbytes) { if (kbytes < KBYTE) ap_rprintf(r, "%d kB", (int) kbytes); else if (kbytes < MBYTE) ap_rprintf(r, "%.1f MB", (float) kbytes / KBYTE); else ap_rprintf(r, "%.1f GB", (float) kbytes / MBYTE); } static void show_time(request_rec *r, apr_uint32_t tsecs) { int days, hrs, mins, secs; secs = (int)(tsecs % 60); tsecs /= 60; mins = (int)(tsecs % 60); tsecs /= 60; hrs = (int)(tsecs % 24); days = (int)(tsecs / 24); if (days) ap_rprintf(r, " %d day%s", days, days == 1 ? "" : "s"); if (hrs) ap_rprintf(r, " %d hour%s", hrs, hrs == 1 ? "" : "s"); if (mins) ap_rprintf(r, " %d minute%s", mins, mins == 1 ? "" : "s"); if (secs) ap_rprintf(r, " %d second%s", secs, secs == 1 ? "" : "s"); } /* Main handler for x-httpd-status requests */ /* ID values for command table */ #define STAT_OPT_END -1 #define STAT_OPT_REFRESH 0 #define STAT_OPT_NOTABLE 1 #define STAT_OPT_AUTO 2 struct stat_opt { int id; const char *form_data_str; const char *hdr_out_str; }; static const struct stat_opt status_options[] = /* see #defines above */ { {STAT_OPT_REFRESH, "refresh", "Refresh"}, {STAT_OPT_NOTABLE, "notable", NULL}, {STAT_OPT_AUTO, "auto", NULL}, {STAT_OPT_END, NULL, NULL} }; /* add another state for slots above the MaxRequestWorkers setting */ #define SERVER_DISABLED SERVER_NUM_STATUS #define MOD_STATUS_NUM_STATUS (SERVER_NUM_STATUS+1) static char status_flags[MOD_STATUS_NUM_STATUS]; static int status_handler(request_rec *r) { const char *loc; apr_time_t nowtime; apr_uint32_t up_time; ap_loadavg_t t; int j, i, res, written; int ready; int busy; unsigned long count; unsigned long lres, my_lres, conn_lres; apr_off_t bytes, my_bytes, conn_bytes; apr_off_t bcount, kbcount; long req_time; apr_time_t duration_global; apr_time_t duration_slot; int short_report; int no_table_report; global_score *global_record; worker_score *ws_record; process_score *ps_record; char *stat_buffer; pid_t *pid_buffer, worker_pid; int *thread_idle_buffer = NULL; int *thread_busy_buffer = NULL; clock_t tu, ts, tcu, tcs; clock_t gu, gs, gcu, gcs; ap_generation_t mpm_generation, worker_generation; #ifdef HAVE_TIMES float tick; int times_per_thread; #endif if (strcmp(r->handler, STATUS_MAGIC_TYPE) && strcmp(r->handler, "server-status")) { return DECLINED; } #ifdef HAVE_TIMES times_per_thread = getpid() != child_pid; #endif ap_mpm_query(AP_MPMQ_GENERATION, &mpm_generation); #ifdef HAVE_TIMES #ifdef _SC_CLK_TCK tick = sysconf(_SC_CLK_TCK); #else tick = HZ; #endif #endif ready = 0; busy = 0; count = 0; bcount = 0; kbcount = 0; duration_global = 0; short_report = 0; no_table_report = 0; if (!ap_exists_scoreboard_image()) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01237) "Server status unavailable in inetd mode"); return HTTP_INTERNAL_SERVER_ERROR; } pid_buffer = apr_palloc(r->pool, server_limit * sizeof(pid_t)); stat_buffer = apr_palloc(r->pool, server_limit * thread_limit * sizeof(char)); if (is_async) { thread_idle_buffer = apr_palloc(r->pool, server_limit * sizeof(int)); thread_busy_buffer = apr_palloc(r->pool, server_limit * sizeof(int)); } nowtime = apr_time_now(); #ifdef HAVE_TIMES global_record = ap_get_scoreboard_global(); gu = global_record->times.tms_utime; gs = global_record->times.tms_stime; gcu = global_record->times.tms_cutime; gcs = global_record->times.tms_cstime; #else gu = gs = gcu = gcs = 0; #endif tu = ts = tcu = tcs = 0; r->allowed = (AP_METHOD_BIT << M_GET); if (r->method_number != M_GET) return DECLINED; ap_set_content_type(r, "text/html; charset=ISO-8859-1"); /* * Simple table-driven form data set parser that lets you alter the header */ if (r->args) { i = 0; while (status_options[i].id != STAT_OPT_END) { if ((loc = ap_strstr_c(r->args, status_options[i].form_data_str)) != NULL) { switch (status_options[i].id) { case STAT_OPT_REFRESH: { apr_size_t len = strlen(status_options[i].form_data_str); long t = 0; if (*(loc + len ) == '=') { t = atol(loc + len + 1); } apr_table_setn(r->headers_out, status_options[i].hdr_out_str, apr_ltoa(r->pool, t < 1 ? 10 : t)); break; } case STAT_OPT_NOTABLE: no_table_report = 1; break; case STAT_OPT_AUTO: ap_set_content_type(r, "text/plain; charset=ISO-8859-1"); short_report = 1; break; } } i++; } } ws_record = apr_palloc(r->pool, sizeof *ws_record); for (i = 0; i < server_limit; ++i) { #ifdef HAVE_TIMES clock_t proc_tu = 0, proc_ts = 0, proc_tcu = 0, proc_tcs = 0; clock_t tmp_tu, tmp_ts, tmp_tcu, tmp_tcs; #endif ps_record = ap_get_scoreboard_process(i); if (is_async) { thread_idle_buffer[i] = 0; thread_busy_buffer[i] = 0; } for (j = 0; j < thread_limit; ++j) { int indx = (i * thread_limit) + j; ap_copy_scoreboard_worker(ws_record, i, j); res = ws_record->status; if ((i >= max_servers || j >= threads_per_child) && (res == SERVER_DEAD)) stat_buffer[indx] = status_flags[SERVER_DISABLED]; else stat_buffer[indx] = status_flags[res]; if (!ps_record->quiescing && ps_record->pid) { if (res == SERVER_READY) { if (ps_record->generation == mpm_generation) ready++; if (is_async) thread_idle_buffer[i]++; } else if (res != SERVER_DEAD && res != SERVER_STARTING && res != SERVER_IDLE_KILL) { busy++; if (is_async) { if (res == SERVER_GRACEFUL) thread_idle_buffer[i]++; else thread_busy_buffer[i]++; } } } /* XXX what about the counters for quiescing/seg faulted * processes? should they be counted or not? GLA */ if (ap_extended_status) { lres = ws_record->access_count; bytes = ws_record->bytes_served; if (lres != 0 || (res != SERVER_READY && res != SERVER_DEAD)) { #ifdef HAVE_TIMES tmp_tu = ws_record->times.tms_utime; tmp_ts = ws_record->times.tms_stime; tmp_tcu = ws_record->times.tms_cutime; tmp_tcs = ws_record->times.tms_cstime; if (times_per_thread) { proc_tu += tmp_tu; proc_ts += tmp_ts; proc_tcu += tmp_tcu; proc_tcs += tmp_tcs; } else { if (tmp_tu > proc_tu || tmp_ts > proc_ts || tmp_tcu > proc_tcu || tmp_tcs > proc_tcs) { proc_tu = tmp_tu; proc_ts = tmp_ts; proc_tcu = tmp_tcu; proc_tcs = tmp_tcs; } } #endif /* HAVE_TIMES */ count += lres; bcount += bytes; duration_global += ws_record->duration; if (bcount >= KBYTE) { kbcount += (bcount >> 10); bcount = bcount & 0x3ff; } } } } #ifdef HAVE_TIMES tu += proc_tu; ts += proc_ts; tcu += proc_tcu; tcs += proc_tcs; #endif pid_buffer[i] = ps_record->pid; } /* up_time in seconds */ up_time = (apr_uint32_t) apr_time_sec(nowtime - ap_scoreboard_image->global->restart_time); ap_get_loadavg(&t); if (!short_report) { ap_rputs(DOCTYPE_HTML_3_2 "\n" "Apache Status\n" "\n" "

    Apache Server Status for ", r); ap_rvputs(r, ap_escape_html(r->pool, ap_get_server_name(r)), " (via ", r->connection->local_ip, ")

    \n\n", NULL); ap_rvputs(r, "
    Server Version: ", ap_get_server_description(), "
    \n", NULL); ap_rvputs(r, "
    Server MPM: ", ap_show_mpm(), "
    \n", NULL); ap_rvputs(r, "
    Server Built: ", ap_get_server_built(), "\n

    \n", NULL); ap_rvputs(r, "
    Current Time: ", ap_ht_time(r->pool, nowtime, DEFAULT_TIME_FORMAT, 0), "
    \n", NULL); ap_rvputs(r, "
    Restart Time: ", ap_ht_time(r->pool, ap_scoreboard_image->global->restart_time, DEFAULT_TIME_FORMAT, 0), "
    \n", NULL); ap_rprintf(r, "
    Parent Server Config. Generation: %d
    \n", ap_state_query(AP_SQ_CONFIG_GEN)); ap_rprintf(r, "
    Parent Server MPM Generation: %d
    \n", (int)mpm_generation); ap_rputs("
    Server uptime: ", r); show_time(r, up_time); ap_rputs("
    \n", r); ap_rprintf(r, "
    Server load: %.2f %.2f %.2f
    \n", t.loadavg, t.loadavg5, t.loadavg15); } else { ap_rvputs(r, ap_get_server_name(r), "\n", NULL); ap_rvputs(r, "ServerVersion: ", ap_get_server_description(), "\n", NULL); ap_rvputs(r, "ServerMPM: ", ap_show_mpm(), "\n", NULL); ap_rvputs(r, "Server Built: ", ap_get_server_built(), "\n", NULL); ap_rvputs(r, "CurrentTime: ", ap_ht_time(r->pool, nowtime, DEFAULT_TIME_FORMAT, 0), "\n", NULL); ap_rvputs(r, "RestartTime: ", ap_ht_time(r->pool, ap_scoreboard_image->global->restart_time, DEFAULT_TIME_FORMAT, 0), "\n", NULL); ap_rprintf(r, "ParentServerConfigGeneration: %d\n", ap_state_query(AP_SQ_CONFIG_GEN)); ap_rprintf(r, "ParentServerMPMGeneration: %d\n", (int)mpm_generation); ap_rprintf(r, "ServerUptimeSeconds: %u\n", up_time); ap_rputs("ServerUptime:", r); show_time(r, up_time); ap_rputs("\n", r); ap_rprintf(r, "Load1: %.2f\nLoad5: %.2f\nLoad15: %.2f\n", t.loadavg, t.loadavg5, t.loadavg15); } if (ap_extended_status) { clock_t cpu = gu + gs + gcu + gcs + tu + ts + tcu + tcs; if (short_report) { ap_rprintf(r, "Total Accesses: %lu\nTotal kBytes: %" APR_OFF_T_FMT "\nTotal Duration: %" APR_TIME_T_FMT "\n", count, kbcount, apr_time_as_msec(duration_global)); #ifdef HAVE_TIMES /* Allow for OS/2 not having CPU stats */ ap_rprintf(r, "CPUUser: %g\nCPUSystem: %g\nCPUChildrenUser: %g\nCPUChildrenSystem: %g\n", (gu + tu) / tick, (gs + ts) / tick, (gcu + tcu) / tick, (gcs + tcs) / tick); if (cpu) ap_rprintf(r, "CPULoad: %g\n", cpu / tick / up_time * 100.); #endif ap_rprintf(r, "Uptime: %ld\n", (long) (up_time)); if (up_time > 0) { ap_rprintf(r, "ReqPerSec: %g\n", (float) count / (float) up_time); ap_rprintf(r, "BytesPerSec: %g\n", KBYTE * (float) kbcount / (float) up_time); } if (count > 0) { ap_rprintf(r, "BytesPerReq: %g\n", KBYTE * (float) kbcount / (float) count); ap_rprintf(r, "DurationPerReq: %g\n", (float) apr_time_as_msec(duration_global) / (float) count); } } else { /* !short_report */ ap_rprintf(r, "
    Total accesses: %lu - Total Traffic: ", count); format_kbyte_out(r, kbcount); ap_rprintf(r, " - Total Duration: %" APR_TIME_T_FMT "
    \n", apr_time_as_msec(duration_global)); #ifdef HAVE_TIMES /* Allow for OS/2 not having CPU stats */ ap_rprintf(r, "
    CPU Usage: u%g s%g cu%g cs%g", (gu + tu) / tick, (gs + ts) / tick, (gcu + tcu) / tick, (gcs + tcs) / tick); if (cpu) ap_rprintf(r, " - %.3g%% CPU load
    \n", cpu / tick / up_time * 100.); else ap_rputs("\n", r); #endif ap_rputs("
    ", r); if (up_time > 0) { ap_rprintf(r, "%.3g requests/sec - ", (float) count / (float) up_time); format_byte_out(r, (unsigned long)(KBYTE * (float) kbcount / (float) up_time)); ap_rputs("/second", r); } if (count > 0) { if (up_time > 0) ap_rputs(" - ", r); format_byte_out(r, (unsigned long)(KBYTE * (float) kbcount / (float) count)); ap_rprintf(r, "/request - %g ms/request", (float) apr_time_as_msec(duration_global) / (float) count); } ap_rputs("
    \n", r); } /* short_report */ } /* ap_extended_status */ if (!short_report) ap_rprintf(r, "
    %d requests currently being processed, " "%d idle workers
    \n", busy, ready); else ap_rprintf(r, "BusyWorkers: %d\nIdleWorkers: %d\n", busy, ready); if (!short_report) ap_rputs("
    ", r); if (is_async) { int write_completion = 0, lingering_close = 0, keep_alive = 0, connections = 0, stopping = 0, procs = 0; /* * These differ from 'busy' and 'ready' in how gracefully finishing * threads are counted. XXX: How to make this clear in the html? */ int busy_workers = 0, idle_workers = 0; if (!short_report) ap_rputs("\n\n
    \n" "" "" "" "\n" "" "\n" "" "" "\n", r); for (i = 0; i < server_limit; ++i) { ps_record = ap_get_scoreboard_process(i); if (ps_record->pid) { connections += ps_record->connections; write_completion += ps_record->write_completion; keep_alive += ps_record->keep_alive; lingering_close += ps_record->lingering_close; busy_workers += thread_busy_buffer[i]; idle_workers += thread_idle_buffer[i]; procs++; if (ps_record->quiescing) { stopping++; } if (!short_report) { const char *dying = "no"; const char *old = ""; if (ps_record->quiescing) { dying = "yes"; } if (ps_record->generation != mpm_generation) old = " (old gen)"; ap_rprintf(r, "" "" "" "" "" "\n", i, ps_record->pid, dying, old, ps_record->connections, ps_record->not_accepting ? "no" : "yes", thread_busy_buffer[i], thread_idle_buffer[i], ps_record->write_completion, ps_record->keep_alive, ps_record->lingering_close); } } } if (!short_report) { ap_rprintf(r, "" "" "" "" "" "\n
    SlotPIDStoppingConnectionsThreadsAsync connections
    totalacceptingbusyidlewritingkeep-aliveclosing
    %u%" APR_PID_T_FMT "%s%s%u%s%u%u%u%u%u
    Sum%d%d%d %d%d%d%d%d
    \n", procs, stopping, connections, busy_workers, idle_workers, write_completion, keep_alive, lingering_close); } else { ap_rprintf(r, "Processes: %d\n" "Stopping: %d\n" "BusyWorkers: %d\n" "IdleWorkers: %d\n" "ConnsTotal: %d\n" "ConnsAsyncWriting: %d\n" "ConnsAsyncKeepAlive: %d\n" "ConnsAsyncClosing: %d\n", procs, stopping, busy_workers, idle_workers, connections, write_completion, keep_alive, lingering_close); } } /* send the scoreboard 'table' out */ if (!short_report) ap_rputs("
    ", r);
        else
            ap_rputs("Scoreboard: ", r);
    
        written = 0;
        for (i = 0; i < server_limit; ++i) {
            for (j = 0; j < thread_limit; ++j) {
                int indx = (i * thread_limit) + j;
                if (stat_buffer[indx] != status_flags[SERVER_DISABLED]) {
                    ap_rputc(stat_buffer[indx], r);
                    if ((written % STATUS_MAXLINE == (STATUS_MAXLINE - 1))
                        && !short_report)
                        ap_rputs("\n", r);
                    written++;
                }
            }
        }
    
    
        if (short_report)
            ap_rputs("\n", r);
        else {
            ap_rputs("
    \n" "

    Scoreboard Key:
    \n" "\"_\" Waiting for Connection, \n" "\"S\" Starting up, \n" "\"R\" Reading Request,
    \n" "\"W\" Sending Reply, \n" "\"K\" Keepalive (read), \n" "\"D\" DNS Lookup,
    \n" "\"C\" Closing connection, \n" "\"L\" Logging, \n" "\"G\" Gracefully finishing,
    \n" "\"I\" Idle cleanup of worker, \n" "\".\" Open slot with no current process
    \n" "

    \n", r); if (!ap_extended_status) { int j; int k = 0; ap_rputs("PID Key:
    \n" "
    \n", r);
                for (i = 0; i < server_limit; ++i) {
                    for (j = 0; j < thread_limit; ++j) {
                        int indx = (i * thread_limit) + j;
    
                        if (stat_buffer[indx] != '.') {
                            ap_rprintf(r, "   %" APR_PID_T_FMT
                                       " in state: %c ", pid_buffer[i],
                                       stat_buffer[indx]);
    
                            if (++k >= 3) {
                                ap_rputs("\n", r);
                                k = 0;
                            } else
                                ap_rputs(",", r);
                        }
                    }
                }
    
                ap_rputs("\n"
                         "
    \n", r); } } if (ap_extended_status && !short_report) { if (no_table_report) ap_rputs("

    Server Details

    \n\n", r); else ap_rputs("\n\n" "" "" #ifdef HAVE_TIMES "" #endif "" "" "" "\n\n", r); for (i = 0; i < server_limit; ++i) { for (j = 0; j < thread_limit; ++j) { ap_copy_scoreboard_worker(ws_record, i, j); if (ws_record->access_count == 0 && (ws_record->status == SERVER_READY || ws_record->status == SERVER_DEAD)) { continue; } ps_record = ap_get_scoreboard_process(i); if (ws_record->start_time == 0L) req_time = 0L; else req_time = (long) apr_time_as_msec(ws_record->stop_time - ws_record->start_time); if (req_time < 0L) req_time = 0L; lres = ws_record->access_count; my_lres = ws_record->my_access_count; conn_lres = ws_record->conn_count; bytes = ws_record->bytes_served; my_bytes = ws_record->my_bytes_served; conn_bytes = ws_record->conn_bytes; duration_slot = ws_record->duration; if (ws_record->pid) { /* MPM sets per-worker pid and generation */ worker_pid = ws_record->pid; worker_generation = ws_record->generation; } else { worker_pid = ps_record->pid; worker_generation = ps_record->generation; } if (no_table_report) { if (ws_record->status == SERVER_DEAD) ap_rprintf(r, "Server %d-%d (-): %d|%lu|%lu [", i, (int)worker_generation, (int)conn_lres, my_lres, lres); else ap_rprintf(r, "Server %d-%d (%" APR_PID_T_FMT "): %d|%lu|%lu [", i, (int) worker_generation, worker_pid, (int)conn_lres, my_lres, lres); switch (ws_record->status) { case SERVER_READY: ap_rputs("Ready", r); break; case SERVER_STARTING: ap_rputs("Starting", r); break; case SERVER_BUSY_READ: ap_rputs("Read", r); break; case SERVER_BUSY_WRITE: ap_rputs("Write", r); break; case SERVER_BUSY_KEEPALIVE: ap_rputs("Keepalive", r); break; case SERVER_BUSY_LOG: ap_rputs("Logging", r); break; case SERVER_BUSY_DNS: ap_rputs("DNS lookup", r); break; case SERVER_CLOSING: ap_rputs("Closing", r); break; case SERVER_DEAD: ap_rputs("Dead", r); break; case SERVER_GRACEFUL: ap_rputs("Graceful", r); break; case SERVER_IDLE_KILL: ap_rputs("Dying", r); break; default: ap_rputs("?STATE?", r); break; } ap_rprintf(r, "] " #ifdef HAVE_TIMES "u%g s%g cu%g cs%g" #endif "\n %ld %ld %" APR_TIME_T_FMT "(", #ifdef HAVE_TIMES ws_record->times.tms_utime / tick, ws_record->times.tms_stime / tick, ws_record->times.tms_cutime / tick, ws_record->times.tms_cstime / tick, #endif (long)apr_time_sec(nowtime - ws_record->last_used), (long) req_time, apr_time_as_msec(duration_slot)); format_byte_out(r, conn_bytes); ap_rputs("|", r); format_byte_out(r, my_bytes); ap_rputs("|", r); format_byte_out(r, bytes); ap_rputs(")\n", r); ap_rprintf(r, " %s {%s}(%s)[%s]
    \n\n", ap_escape_html(r->pool, ws_record->client64), ap_escape_html(r->pool, ap_escape_logitem(r->pool, ws_record->request)), ap_escape_html(r->pool, ws_record->protocol), ap_escape_html(r->pool, ws_record->vhost)); } else { /* !no_table_report */ if (ws_record->status == SERVER_DEAD) ap_rprintf(r, "" #ifdef HAVE_TIMES "" #endif "" "\n\n", ap_escape_html(r->pool, ws_record->client64), ap_escape_html(r->pool, ws_record->protocol), ap_escape_html(r->pool, ws_record->vhost), ap_escape_html(r->pool, ap_escape_logitem(r->pool, ws_record->request))); } /* no_table_report */ } /* for (j...) */ } /* for (i...) */ if (!no_table_report) { ap_rputs("
    SrvPIDAccMCPU\nSSReqDurConnChildSlotClientProtocolVHostRequest
    %d-%d-%d/%lu/%lu", i, (int)worker_generation, (int)conn_lres, my_lres, lres); else ap_rprintf(r, "
    %d-%d%" APR_PID_T_FMT "%d/%lu/%lu", i, (int)worker_generation, worker_pid, (int)conn_lres, my_lres, lres); switch (ws_record->status) { case SERVER_READY: ap_rputs("_", r); break; case SERVER_STARTING: ap_rputs("S", r); break; case SERVER_BUSY_READ: ap_rputs("R", r); break; case SERVER_BUSY_WRITE: ap_rputs("W", r); break; case SERVER_BUSY_KEEPALIVE: ap_rputs("K", r); break; case SERVER_BUSY_LOG: ap_rputs("L", r); break; case SERVER_BUSY_DNS: ap_rputs("D", r); break; case SERVER_CLOSING: ap_rputs("C", r); break; case SERVER_DEAD: ap_rputs(".", r); break; case SERVER_GRACEFUL: ap_rputs("G", r); break; case SERVER_IDLE_KILL: ap_rputs("I", r); break; default: ap_rputs("?", r); break; } ap_rprintf(r, "\n%.2f%ld%ld%" APR_TIME_T_FMT, #ifdef HAVE_TIMES (ws_record->times.tms_utime + ws_record->times.tms_stime + ws_record->times.tms_cutime + ws_record->times.tms_cstime) / tick, #endif (long)apr_time_sec(nowtime - ws_record->last_used), (long)req_time, apr_time_as_msec(duration_slot)); ap_rprintf(r, "%-1.1f%-2.2f%-2.2f\n", (float)conn_bytes / KBYTE, (float) my_bytes / MBYTE, (float)bytes / MBYTE); ap_rprintf(r, "%s%s%s%s
    \n \
    \ \n \ \n \ \n \ \n \ \n" #ifdef HAVE_TIMES "\n" #endif "\n \ \n \ \n \ \n \ \n \ \n \
    SrvChild Server number - generation
    PIDOS process ID
    AccNumber of accesses this connection / this child / this slot
    MMode of operation
    CPUCPU usage, number of seconds
    SSSeconds since beginning of most recent request
    ReqMilliseconds required to process most recent request
    DurSum of milliseconds required to process all requests
    ConnKilobytes transferred this connection
    ChildMegabytes transferred this child
    SlotTotal megabytes transferred this slot
    \n", r); } } /* if (ap_extended_status && !short_report) */ else { if (!short_report) { ap_rputs("
    To obtain a full report with current status " "information you need to use the " "ExtendedStatus On directive.\n", r); } } { /* Run extension hooks to insert extra content. */ int flags = (short_report ? AP_STATUS_SHORT : 0) | (no_table_report ? AP_STATUS_NOTABLE : 0) | (ap_extended_status ? AP_STATUS_EXTENDED : 0); ap_run_status_hook(r, flags); } if (!short_report) { ap_rputs(ap_psignature("
    \n",r), r); ap_rputs("\n", r); } return 0; } static int status_pre_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp) { /* When mod_status is loaded, default our ExtendedStatus to 'on' * other modules which prefer verbose scoreboards may play a similar game. * If left to their own requirements, mpm modules can make do with simple * scoreboard entries. */ ap_extended_status = 1; return OK; } static int status_init(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { status_flags[SERVER_DEAD] = '.'; /* We don't want to assume these are in */ status_flags[SERVER_READY] = '_'; /* any particular order in scoreboard.h */ status_flags[SERVER_STARTING] = 'S'; status_flags[SERVER_BUSY_READ] = 'R'; status_flags[SERVER_BUSY_WRITE] = 'W'; status_flags[SERVER_BUSY_KEEPALIVE] = 'K'; status_flags[SERVER_BUSY_LOG] = 'L'; status_flags[SERVER_BUSY_DNS] = 'D'; status_flags[SERVER_CLOSING] = 'C'; status_flags[SERVER_GRACEFUL] = 'G'; status_flags[SERVER_IDLE_KILL] = 'I'; status_flags[SERVER_DISABLED] = ' '; ap_mpm_query(AP_MPMQ_HARD_LIMIT_THREADS, &thread_limit); ap_mpm_query(AP_MPMQ_HARD_LIMIT_DAEMONS, &server_limit); ap_mpm_query(AP_MPMQ_MAX_THREADS, &threads_per_child); /* work around buggy MPMs */ if (threads_per_child == 0) threads_per_child = 1; ap_mpm_query(AP_MPMQ_MAX_DAEMONS, &max_servers); ap_mpm_query(AP_MPMQ_IS_ASYNC, &is_async); return OK; } #ifdef HAVE_TIMES static void status_child_init(apr_pool_t *p, server_rec *s) { child_pid = getpid(); } #endif static void register_hooks(apr_pool_t *p) { ap_hook_handler(status_handler, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_pre_config(status_pre_config, NULL, NULL, APR_HOOK_LAST); ap_hook_post_config(status_init, NULL, NULL, APR_HOOK_MIDDLE); #ifdef HAVE_TIMES ap_hook_child_init(status_child_init, NULL, NULL, APR_HOOK_MIDDLE); #endif } AP_DECLARE_MODULE(status) = { STANDARD20_MODULE_STUFF, NULL, /* dir config creater */ NULL, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ NULL, /* command table */ register_hooks /* register_hooks */ }; httpd-2.4.41/modules/generators/mod_status.mak0000644000000000000500000002347312701473373017751 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_status.dsp !IF "$(CFG)" == "" CFG=mod_status - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_status - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_status - Win32 Release" && "$(CFG)" != "mod_status - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_status.mak" CFG="mod_status - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_status - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_status - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_status - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_status.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_status.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_status.obj" -@erase "$(INTDIR)\mod_status.res" -@erase "$(INTDIR)\mod_status_src.idb" -@erase "$(INTDIR)\mod_status_src.pdb" -@erase "$(OUTDIR)\mod_status.exp" -@erase "$(OUTDIR)\mod_status.lib" -@erase "$(OUTDIR)\mod_status.pdb" -@erase "$(OUTDIR)\mod_status.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "STATUS_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_status_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_status.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_status.so" /d LONG_NAME="status_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_status.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_status.pdb" /debug /out:"$(OUTDIR)\mod_status.so" /implib:"$(OUTDIR)\mod_status.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_status.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_status.obj" \ "$(INTDIR)\mod_status.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_status.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_status.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_status.so" if exist .\Release\mod_status.so.manifest mt.exe -manifest .\Release\mod_status.so.manifest -outputresource:.\Release\mod_status.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_status - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_status.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_status.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_status.obj" -@erase "$(INTDIR)\mod_status.res" -@erase "$(INTDIR)\mod_status_src.idb" -@erase "$(INTDIR)\mod_status_src.pdb" -@erase "$(OUTDIR)\mod_status.exp" -@erase "$(OUTDIR)\mod_status.lib" -@erase "$(OUTDIR)\mod_status.pdb" -@erase "$(OUTDIR)\mod_status.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "STATUS_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_status_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_status.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_status.so" /d LONG_NAME="status_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_status.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_status.pdb" /debug /out:"$(OUTDIR)\mod_status.so" /implib:"$(OUTDIR)\mod_status.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_status.so LINK32_OBJS= \ "$(INTDIR)\mod_status.obj" \ "$(INTDIR)\mod_status.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_status.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_status.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_status.so" if exist .\Debug\mod_status.so.manifest mt.exe -manifest .\Debug\mod_status.so.manifest -outputresource:.\Debug\mod_status.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_status.dep") !INCLUDE "mod_status.dep" !ELSE !MESSAGE Warning: cannot find "mod_status.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_status - Win32 Release" || "$(CFG)" == "mod_status - Win32 Debug" !IF "$(CFG)" == "mod_status - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\generators" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\generators" !ELSEIF "$(CFG)" == "mod_status - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\generators" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\generators" !ENDIF !IF "$(CFG)" == "mod_status - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\generators" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\generators" !ELSEIF "$(CFG)" == "mod_status - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\generators" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\generators" !ENDIF !IF "$(CFG)" == "mod_status - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\generators" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\generators" !ELSEIF "$(CFG)" == "mod_status - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\generators" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\generators" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_status - Win32 Release" "$(INTDIR)\mod_status.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_status.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_status.so" /d LONG_NAME="status_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_status - Win32 Debug" "$(INTDIR)\mod_status.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_status.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_status.so" /d LONG_NAME="status_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_status.c "$(INTDIR)\mod_status.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/generators/mod_asis.c0000644000000000000500000001006712532143363017025 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "apr_strings.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_protocol.h" #include "http_log.h" #include "util_script.h" #include "http_main.h" #include "http_request.h" #include "mod_core.h" #define ASIS_MAGIC_TYPE "httpd/send-as-is" static int asis_handler(request_rec *r) { apr_file_t *f; apr_status_t rv; const char *location; if (strcmp(r->handler, ASIS_MAGIC_TYPE) && strcmp(r->handler, "send-as-is")) { return DECLINED; } r->allowed |= (AP_METHOD_BIT << M_GET); if (r->method_number != M_GET) { return DECLINED; } if (r->finfo.filetype == APR_NOFILE) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01233) "File does not exist: %s", r->filename); return HTTP_NOT_FOUND; } if ((rv = apr_file_open(&f, r->filename, APR_READ, APR_OS_DEFAULT, r->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01234) "file permissions deny server access: %s", r->filename); return HTTP_FORBIDDEN; } ap_scan_script_header_err_ex(r, f, NULL, APLOG_MODULE_INDEX); location = apr_table_get(r->headers_out, "Location"); if (location && location[0] == '/' && ((r->status == HTTP_OK) || ap_is_HTTP_REDIRECT(r->status))) { apr_file_close(f); /* Internal redirect -- fake-up a pseudo-request */ r->status = HTTP_OK; /* This redirect needs to be a GET no matter what the original * method was. */ r->method = "GET"; r->method_number = M_GET; ap_internal_redirect_handler(location, r); return OK; } if (!r->header_only) { conn_rec *c = r->connection; apr_bucket_brigade *bb; apr_bucket *b; apr_off_t pos = 0; rv = apr_file_seek(f, APR_CUR, &pos); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01235) "mod_asis: failed to find end-of-headers position " "for %s", r->filename); apr_file_close(f); return HTTP_INTERNAL_SERVER_ERROR; } bb = apr_brigade_create(r->pool, c->bucket_alloc); apr_brigade_insert_file(bb, f, pos, r->finfo.size - pos, r->pool); b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); rv = ap_pass_brigade(r->output_filters, bb); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01236) "mod_asis: ap_pass_brigade failed for file %s", r->filename); return AP_FILTER_ERROR; } } else { apr_file_close(f); } return OK; } static void register_hooks(apr_pool_t *p) { ap_hook_handler(asis_handler,NULL,NULL,APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(asis) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ NULL, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/generators/NWGNUmod_cgi0000644000000000000500000001023111540546347017226 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(AP_WORK)/modules/filters \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = mod_cgi # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) CGI Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Mod_cgi Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/mod_cgi.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_cgi.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ cgi_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/generators/mod_cgi.dep0000644000000000000500000000432312674411515017160 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_cgi.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_cgi.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_core.h"\ "..\..\include\mod_include.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_cgi.h"\ httpd-2.4.41/modules/generators/mod_cgi.exp0000644000000000000500000000001310150161574017166 0ustar rootsrccgi_module httpd-2.4.41/modules/generators/mod_suexec.h0000644000000000000500000000204011637105701017356 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_suexec.h * @brief SuExec Extension Module for Apache * * @defgroup MOD_SUEXEC mod_suexec * @ingroup APACHE_MODS * @{ */ #include "unixd.h" typedef struct { ap_unix_identity_t ugid; int active; } suexec_config_t; /** @}*/ httpd-2.4.41/modules/generators/mod_info.exp0000644000000000000500000000001410150161574017360 0ustar rootsrcinfo_module httpd-2.4.41/modules/generators/NWGNUmakefile0000644000000000000500000001006111540562746017404 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/mod_asis.nlm \ $(OBJDIR)/autoindex.nlm \ $(OBJDIR)/mod_cgi.nlm \ $(OBJDIR)/info.nlm \ $(OBJDIR)/status.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/generators/NWGNUmod_asis0000644000000000000500000001017211540546347017427 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = mod_asis # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) ASIS Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Mod_asis Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/mod_asis.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_asis.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ asis_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/generators/mod_cgid.exp0000644000000000000500000000001410150161574017333 0ustar rootsrccgid_module httpd-2.4.41/modules/generators/mod_cgid.c0000644000000000000500000020206013154513270016767 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * http_script: keeps all script-related ramblings together. * * Compliant to cgi/1.1 spec * * Adapted by rst from original NCSA code by Rob McCool * * This modules uses a httpd core function (ap_add_common_vars) to add some new env vars, * like REDIRECT_URL and REDIRECT_QUERY_STRING for custom error responses and DOCUMENT_ROOT. * It also adds SERVER_ADMIN - useful for scripts to know who to mail when they fail. * */ #include "apr_lib.h" #include "apr_strings.h" #include "apr_general.h" #include "apr_file_io.h" #include "apr_portable.h" #include "apr_buckets.h" #include "apr_optional.h" #include "apr_signal.h" #define APR_WANT_STRFUNC #include "apr_want.h" #if APR_HAVE_SYS_SOCKET_H #include #endif #if APR_HAVE_UNISTD_H #include #endif #if APR_HAVE_SYS_TYPES_H #include #endif #include "util_filter.h" #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_core.h" #include "http_protocol.h" #include "http_main.h" #include "http_log.h" #include "util_script.h" #include "ap_mpm.h" #include "mpm_common.h" #include "mod_suexec.h" #include "../filters/mod_include.h" #include "mod_core.h" /* ### should be tossed in favor of APR */ #include #include /* for sockaddr_un */ #if APR_HAVE_STRUCT_RLIMIT #if defined (RLIMIT_CPU) || defined (RLIMIT_NPROC) || defined (RLIMIT_DATA) || defined(RLIMIT_VMEM) || defined(RLIMIT_AS) #define AP_CGID_USE_RLIMIT #endif #endif module AP_MODULE_DECLARE_DATA cgid_module; static int cgid_start(apr_pool_t *p, server_rec *main_server, apr_proc_t *procnew); static int cgid_init(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *main_server); static int handle_exec(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb); static APR_OPTIONAL_FN_TYPE(ap_register_include_handler) *cgid_pfn_reg_with_ssi; static APR_OPTIONAL_FN_TYPE(ap_ssi_get_tag_and_value) *cgid_pfn_gtv; static APR_OPTIONAL_FN_TYPE(ap_ssi_parse_string) *cgid_pfn_ps; static apr_pool_t *pcgi = NULL; static pid_t daemon_pid; static int daemon_should_exit = 0; static server_rec *root_server = NULL; static apr_pool_t *root_pool = NULL; static const char *sockname; static struct sockaddr_un *server_addr; static apr_socklen_t server_addr_len; static pid_t parent_pid; static ap_unix_identity_t empty_ugid = { (uid_t)-1, (gid_t)-1, -1 }; typedef struct { apr_interval_time_t timeout; } cgid_dirconf; /* The APR other-child API doesn't tell us how the daemon exited * (SIGSEGV vs. exit(1)). The other-child maintenance function * needs to decide whether to restart the daemon after a failure * based on whether or not it exited due to a fatal startup error * or something that happened at steady-state. This exit status * is unlikely to collide with exit signals. */ #define DAEMON_STARTUP_ERROR 254 /* Read and discard the data in the brigade produced by a CGI script */ static void discard_script_output(apr_bucket_brigade *bb); /* This doer will only ever be called when we are sure that we have * a valid ugid. */ static ap_unix_identity_t *cgid_suexec_id_doer(const request_rec *r) { return (ap_unix_identity_t *) ap_get_module_config(r->request_config, &cgid_module); } /* KLUDGE --- for back-combatibility, we don't have to check ExecCGI * in ScriptAliased directories, which means we need to know if this * request came through ScriptAlias or not... so the Alias module * leaves a note for us. */ static int is_scriptaliased(request_rec *r) { const char *t = apr_table_get(r->notes, "alias-forced-type"); return t && (!strcasecmp(t, "cgi-script")); } /* Configuration stuff */ #define DEFAULT_LOGBYTES 10385760 #define DEFAULT_BUFBYTES 1024 #define DEFAULT_SOCKET "cgisock" #define CGI_REQ 1 #define SSI_REQ 2 #define GETPID_REQ 3 /* get the pid of script created for prior request */ #define ERRFN_USERDATA_KEY "CGIDCHILDERRFN" /* DEFAULT_CGID_LISTENBACKLOG controls the max depth on the unix socket's * pending connection queue. If a bunch of cgi requests arrive at about * the same time, connections from httpd threads/processes will back up * in the queue while the cgid process slowly forks off a child to process * each connection on the unix socket. If the queue is too short, the * httpd process will get ECONNREFUSED when trying to connect. */ #ifndef DEFAULT_CGID_LISTENBACKLOG #define DEFAULT_CGID_LISTENBACKLOG 100 #endif /* DEFAULT_CONNECT_ATTEMPTS controls how many times we'll try to connect * to the cgi daemon from the thread/process handling the cgi request. * Generally we want to retry when we get ECONNREFUSED since it is * probably because the listen queue is full. We need to try harder so * the client doesn't see it as a 503 error. * * Set this to 0 to continually retry until the connect works or Apache * terminates. */ #ifndef DEFAULT_CONNECT_ATTEMPTS #define DEFAULT_CONNECT_ATTEMPTS 15 #endif #ifndef DEFAULT_CONNECT_STARTUP_DELAY #define DEFAULT_CONNECT_STARTUP_DELAY 60 #endif typedef struct { const char *logname; long logbytes; int bufbytes; } cgid_server_conf; #ifdef AP_CGID_USE_RLIMIT typedef struct { #ifdef RLIMIT_CPU int limit_cpu_set; struct rlimit limit_cpu; #endif #if defined (RLIMIT_DATA) || defined (RLIMIT_VMEM) || defined(RLIMIT_AS) int limit_mem_set; struct rlimit limit_mem; #endif #ifdef RLIMIT_NPROC int limit_nproc_set; struct rlimit limit_nproc; #endif } cgid_rlimit_t; #endif typedef struct { int req_type; /* request type (CGI_REQ, SSI_REQ, etc.) */ unsigned long conn_id; /* connection id; daemon uses this as a hash value * to find the script pid when it is time for that * process to be cleaned up */ pid_t ppid; /* sanity check for config problems leading to * wrong cgid socket use */ int env_count; ap_unix_identity_t ugid; apr_size_t filename_len; apr_size_t argv0_len; apr_size_t uri_len; apr_size_t args_len; int loglevel; /* to stuff in server_rec */ #ifdef AP_CGID_USE_RLIMIT cgid_rlimit_t limits; #endif } cgid_req_t; /* This routine is called to create the argument list to be passed * to the CGI script. When suexec is enabled, the suexec path, user, and * group are the first three arguments to be passed; if not, all three * must be NULL. The query info is split into separate arguments, where * "+" is the separator between keyword arguments. * * Do not process the args if they containing an '=' assignment. */ static char **create_argv(apr_pool_t *p, char *path, char *user, char *group, char *av0, const char *args) { int x, numwords; char **av; char *w; int idx = 0; if (!(*args) || ap_strchr_c(args, '=')) { numwords = 0; } else { /* count the number of keywords */ for (x = 0, numwords = 1; args[x]; x++) { if (args[x] == '+') { ++numwords; } } } if (numwords > APACHE_ARG_MAX - 5) { numwords = APACHE_ARG_MAX - 5; /* Truncate args to prevent overrun */ } av = (char **) apr_pcalloc(p, (numwords + 5) * sizeof(char *)); if (path) { av[idx++] = path; } if (user) { av[idx++] = user; } if (group) { av[idx++] = group; } av[idx++] = apr_pstrdup(p, av0); for (x = 1; x <= numwords; x++) { w = ap_getword_nulls(p, &args, '+'); ap_unescape_url(w); av[idx++] = ap_escape_shell_cmd(p, w); } av[idx] = NULL; return av; } #if APR_HAS_OTHER_CHILD static void cgid_maint(int reason, void *data, apr_wait_t status) { apr_proc_t *proc = data; int mpm_state; int stopping; switch (reason) { case APR_OC_REASON_DEATH: apr_proc_other_child_unregister(data); /* If apache is not terminating or restarting, * restart the cgid daemon */ stopping = 1; /* if MPM doesn't support query, * assume we shouldn't restart daemon */ if (ap_mpm_query(AP_MPMQ_MPM_STATE, &mpm_state) == APR_SUCCESS && mpm_state != AP_MPMQ_STOPPING) { stopping = 0; } if (!stopping) { if (status == DAEMON_STARTUP_ERROR) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, ap_server_conf, APLOGNO(01238) "cgid daemon failed to initialize"); } else { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(01239) "cgid daemon process died, restarting"); cgid_start(root_pool, root_server, proc); } } break; case APR_OC_REASON_RESTART: /* don't do anything; server is stopping or restarting */ apr_proc_other_child_unregister(data); break; case APR_OC_REASON_LOST: /* Restart the child cgid daemon process */ apr_proc_other_child_unregister(data); cgid_start(root_pool, root_server, proc); break; case APR_OC_REASON_UNREGISTER: /* we get here when pcgi is cleaned up; pcgi gets cleaned * up when pconf gets cleaned up */ kill(proc->pid, SIGHUP); /* send signal to daemon telling it to die */ /* Remove the cgi socket, we must do it here in order to try and * guarantee the same permissions as when the socket was created. */ if (unlink(sockname) < 0 && errno != ENOENT) { ap_log_error(APLOG_MARK, APLOG_ERR, errno, ap_server_conf, APLOGNO(01240) "Couldn't unlink unix domain socket %s", sockname); } break; } } #endif static apr_status_t close_unix_socket(void *thefd) { int fd = (int)((long)thefd); return close(fd); } /* deal with incomplete reads and signals * assume you really have to read buf_size bytes */ static apr_status_t sock_read(int fd, void *vbuf, size_t buf_size) { char *buf = vbuf; int rc; size_t bytes_read = 0; do { do { rc = read(fd, buf + bytes_read, buf_size - bytes_read); } while (rc < 0 && errno == EINTR); switch(rc) { case -1: return errno; case 0: /* unexpected */ return ECONNRESET; default: bytes_read += rc; } } while (bytes_read < buf_size); return APR_SUCCESS; } /* deal with signals */ static apr_status_t sock_write(int fd, const void *buf, size_t buf_size) { int rc; do { rc = write(fd, buf, buf_size); } while (rc < 0 && errno == EINTR); if (rc < 0) { return errno; } return APR_SUCCESS; } static apr_status_t sock_writev(int fd, request_rec *r, int count, ...) { va_list ap; int rc; struct iovec *vec; int i; vec = (struct iovec *)apr_palloc(r->pool, count * sizeof(struct iovec)); va_start(ap, count); for (i = 0; i < count; i++) { vec[i].iov_base = va_arg(ap, caddr_t); vec[i].iov_len = va_arg(ap, apr_size_t); } va_end(ap); do { rc = writev(fd, vec, count); } while (rc < 0 && errno == EINTR); if (rc < 0) { return errno; } return APR_SUCCESS; } static apr_status_t get_req(int fd, request_rec *r, char **argv0, char ***env, cgid_req_t *req) { int i; char **environ; core_request_config *temp_core; void **rconf; apr_status_t stat; r->server = apr_pcalloc(r->pool, sizeof(server_rec)); /* read the request header */ stat = sock_read(fd, req, sizeof(*req)); if (stat != APR_SUCCESS) { return stat; } r->server->log.level = req->loglevel; if (req->req_type == GETPID_REQ) { /* no more data sent for this request */ return APR_SUCCESS; } /* handle module indexes and such */ rconf = (void **)ap_create_request_config(r->pool); temp_core = (core_request_config *)apr_palloc(r->pool, sizeof(core_module)); rconf[AP_CORE_MODULE_INDEX] = (void *)temp_core; r->request_config = (ap_conf_vector_t *)rconf; ap_set_module_config(r->request_config, &cgid_module, (void *)&req->ugid); /* Read the filename, argv0, uri, and args */ r->filename = apr_pcalloc(r->pool, req->filename_len + 1); *argv0 = apr_pcalloc(r->pool, req->argv0_len + 1); r->uri = apr_pcalloc(r->pool, req->uri_len + 1); if ((stat = sock_read(fd, r->filename, req->filename_len)) != APR_SUCCESS || (stat = sock_read(fd, *argv0, req->argv0_len)) != APR_SUCCESS || (stat = sock_read(fd, r->uri, req->uri_len)) != APR_SUCCESS) { return stat; } r->args = apr_pcalloc(r->pool, req->args_len + 1); /* empty string if no args */ if (req->args_len) { if ((stat = sock_read(fd, r->args, req->args_len)) != APR_SUCCESS) { return stat; } } /* read the environment variables */ environ = apr_pcalloc(r->pool, (req->env_count + 2) *sizeof(char *)); for (i = 0; i < req->env_count; i++) { apr_size_t curlen; if ((stat = sock_read(fd, &curlen, sizeof(curlen))) != APR_SUCCESS) { return stat; } environ[i] = apr_pcalloc(r->pool, curlen + 1); if ((stat = sock_read(fd, environ[i], curlen)) != APR_SUCCESS) { return stat; } } *env = environ; #ifdef AP_CGID_USE_RLIMIT if ((stat = sock_read(fd, &(req->limits), sizeof(cgid_rlimit_t))) != APR_SUCCESS) return stat; #endif return APR_SUCCESS; } static apr_status_t send_req(int fd, request_rec *r, char *argv0, char **env, int req_type) { int i; cgid_req_t req = {0}; apr_status_t stat; ap_unix_identity_t * ugid = ap_run_get_suexec_identity(r); core_dir_config *core_conf = ap_get_core_module_config(r->per_dir_config); if (ugid == NULL) { req.ugid = empty_ugid; } else { memcpy(&req.ugid, ugid, sizeof(ap_unix_identity_t)); } req.req_type = req_type; req.ppid = parent_pid; req.conn_id = r->connection->id; for (req.env_count = 0; env[req.env_count]; req.env_count++) { continue; } req.filename_len = strlen(r->filename); req.argv0_len = strlen(argv0); req.uri_len = strlen(r->uri); req.args_len = r->args ? strlen(r->args) : 0; req.loglevel = r->server->log.level; /* Write the request header */ if (req.args_len) { stat = sock_writev(fd, r, 5, &req, sizeof(req), r->filename, req.filename_len, argv0, req.argv0_len, r->uri, req.uri_len, r->args, req.args_len); } else { stat = sock_writev(fd, r, 4, &req, sizeof(req), r->filename, req.filename_len, argv0, req.argv0_len, r->uri, req.uri_len); } if (stat != APR_SUCCESS) { return stat; } /* write the environment variables */ for (i = 0; i < req.env_count; i++) { apr_size_t curlen = strlen(env[i]); if ((stat = sock_writev(fd, r, 2, &curlen, sizeof(curlen), env[i], curlen)) != APR_SUCCESS) { return stat; } } #if defined(RLIMIT_CPU) && defined(AP_CGID_USE_RLIMIT) if (core_conf->limit_cpu) { req.limits.limit_cpu = *(core_conf->limit_cpu); req.limits.limit_cpu_set = 1; } else { req.limits.limit_cpu_set = 0; } #endif #if defined(AP_CGID_USE_RLIMIT) && (defined(RLIMIT_DATA) || defined(RLIMIT_VMEM) || defined(RLIMIT_AS)) if (core_conf->limit_mem) { req.limits.limit_mem = *(core_conf->limit_mem); req.limits.limit_mem_set = 1; } else { req.limits.limit_mem_set = 0; } #endif #if defined(RLIMIT_NPROC) && defined(AP_CGID_USE_RLIMIT) if (core_conf->limit_nproc) { req.limits.limit_nproc = *(core_conf->limit_nproc); req.limits.limit_nproc_set = 1; } else { req.limits.limit_nproc_set = 0; } #endif #ifdef AP_CGID_USE_RLIMIT if ( (stat = sock_write(fd, &(req.limits), sizeof(cgid_rlimit_t))) != APR_SUCCESS) return stat; #endif return APR_SUCCESS; } static void daemon_signal_handler(int sig) { if (sig == SIGHUP) { ++daemon_should_exit; } } static void cgid_child_errfn(apr_pool_t *pool, apr_status_t err, const char *description) { request_rec *r; void *vr; apr_pool_userdata_get(&vr, ERRFN_USERDATA_KEY, pool); r = vr; /* sure we got r, but don't call ap_log_rerror() because we don't * have r->headers_in and possibly other storage referenced by * ap_log_rerror() */ ap_log_error(APLOG_MARK, APLOG_ERR, err, r->server, APLOGNO(01241) "%s", description); } static int cgid_server(void *data) { int sd, sd2, rc; mode_t omask; apr_pool_t *ptrans; server_rec *main_server = data; apr_hash_t *script_hash = apr_hash_make(pcgi); apr_status_t rv; apr_pool_create(&ptrans, pcgi); apr_signal(SIGCHLD, SIG_IGN); apr_signal(SIGHUP, daemon_signal_handler); /* Close our copy of the listening sockets */ ap_close_listeners(); /* cgid should use its own suexec doer */ ap_hook_get_suexec_identity(cgid_suexec_id_doer, NULL, NULL, APR_HOOK_REALLY_FIRST); apr_hook_sort_all(); if ((sd = socket(AF_UNIX, SOCK_STREAM, 0)) < 0) { ap_log_error(APLOG_MARK, APLOG_ERR, errno, main_server, APLOGNO(01242) "Couldn't create unix domain socket"); return errno; } omask = umask(0077); /* so that only Apache can use socket */ rc = bind(sd, (struct sockaddr *)server_addr, server_addr_len); umask(omask); /* can't fail, so can't clobber errno */ if (rc < 0) { ap_log_error(APLOG_MARK, APLOG_ERR, errno, main_server, APLOGNO(01243) "Couldn't bind unix domain socket %s", sockname); return errno; } /* Not all flavors of unix use the current umask for AF_UNIX perms */ rv = apr_file_perms_set(sockname, APR_FPROT_UREAD|APR_FPROT_UWRITE|APR_FPROT_UEXECUTE); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, main_server, APLOGNO(01244) "Couldn't set permissions on unix domain socket %s", sockname); return rv; } if (listen(sd, DEFAULT_CGID_LISTENBACKLOG) < 0) { ap_log_error(APLOG_MARK, APLOG_ERR, errno, main_server, APLOGNO(01245) "Couldn't listen on unix domain socket"); return errno; } if (!geteuid()) { if (chown(sockname, ap_unixd_config.user_id, -1) < 0) { ap_log_error(APLOG_MARK, APLOG_ERR, errno, main_server, APLOGNO(01246) "Couldn't change owner of unix domain socket %s", sockname); return errno; } } apr_pool_cleanup_register(pcgi, (void *)((long)sd), close_unix_socket, close_unix_socket); /* if running as root, switch to configured user/group */ if ((rc = ap_run_drop_privileges(pcgi, ap_server_conf)) != 0) { return rc; } while (!daemon_should_exit) { int errfileno = STDERR_FILENO; char *argv0 = NULL; char **env = NULL; const char * const *argv; apr_int32_t in_pipe; apr_int32_t out_pipe; apr_int32_t err_pipe; apr_cmdtype_e cmd_type; request_rec *r; apr_procattr_t *procattr = NULL; apr_proc_t *procnew = NULL; apr_file_t *inout; cgid_req_t cgid_req; apr_status_t stat; void *key; apr_socklen_t len; struct sockaddr_un unix_addr; apr_pool_clear(ptrans); len = sizeof(unix_addr); sd2 = accept(sd, (struct sockaddr *)&unix_addr, &len); if (sd2 < 0) { #if defined(ENETDOWN) if (errno == ENETDOWN) { /* The network has been shut down, no need to continue. Die gracefully */ ++daemon_should_exit; } #endif if (errno != EINTR) { ap_log_error(APLOG_MARK, APLOG_ERR, errno, (server_rec *)data, APLOGNO(01247) "Error accepting on cgid socket"); } continue; } r = apr_pcalloc(ptrans, sizeof(request_rec)); procnew = apr_pcalloc(ptrans, sizeof(*procnew)); r->pool = ptrans; stat = get_req(sd2, r, &argv0, &env, &cgid_req); if (stat != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, stat, main_server, APLOGNO(01248) "Error reading request on cgid socket"); close(sd2); continue; } if (cgid_req.ppid != parent_pid) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, main_server, APLOGNO(01249) "CGI request received from wrong server instance; " "see ScriptSock directive"); close(sd2); continue; } if (cgid_req.req_type == GETPID_REQ) { pid_t pid; apr_status_t rv; pid = (pid_t)((long)apr_hash_get(script_hash, &cgid_req.conn_id, sizeof(cgid_req.conn_id))); rv = sock_write(sd2, &pid, sizeof(pid)); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, main_server, APLOGNO(01250) "Error writing pid %" APR_PID_T_FMT " to handler", pid); } close(sd2); continue; } apr_os_file_put(&r->server->error_log, &errfileno, 0, r->pool); apr_os_file_put(&inout, &sd2, 0, r->pool); if (cgid_req.req_type == SSI_REQ) { in_pipe = APR_NO_PIPE; out_pipe = APR_FULL_BLOCK; err_pipe = APR_NO_PIPE; cmd_type = APR_SHELLCMD; } else { in_pipe = APR_CHILD_BLOCK; out_pipe = APR_CHILD_BLOCK; err_pipe = APR_CHILD_BLOCK; cmd_type = APR_PROGRAM; } if (((rc = apr_procattr_create(&procattr, ptrans)) != APR_SUCCESS) || ((cgid_req.req_type == CGI_REQ) && (((rc = apr_procattr_io_set(procattr, in_pipe, out_pipe, err_pipe)) != APR_SUCCESS) || /* XXX apr_procattr_child_*_set() is creating an unnecessary * pipe between this process and the child being created... * It is cleaned up with the temporary pool for this request. */ ((rc = apr_procattr_child_err_set(procattr, r->server->error_log, NULL)) != APR_SUCCESS) || ((rc = apr_procattr_child_in_set(procattr, inout, NULL)) != APR_SUCCESS))) || ((rc = apr_procattr_child_out_set(procattr, inout, NULL)) != APR_SUCCESS) || ((rc = apr_procattr_dir_set(procattr, ap_make_dirstr_parent(r->pool, r->filename))) != APR_SUCCESS) || ((rc = apr_procattr_cmdtype_set(procattr, cmd_type)) != APR_SUCCESS) || #ifdef AP_CGID_USE_RLIMIT #ifdef RLIMIT_CPU ( (cgid_req.limits.limit_cpu_set) && ((rc = apr_procattr_limit_set(procattr, APR_LIMIT_CPU, &cgid_req.limits.limit_cpu)) != APR_SUCCESS)) || #endif #if defined(RLIMIT_DATA) || defined(RLIMIT_VMEM) || defined(RLIMIT_AS) ( (cgid_req.limits.limit_mem_set) && ((rc = apr_procattr_limit_set(procattr, APR_LIMIT_MEM, &cgid_req.limits.limit_mem)) != APR_SUCCESS)) || #endif #ifdef RLIMIT_NPROC ( (cgid_req.limits.limit_nproc_set) && ((rc = apr_procattr_limit_set(procattr, APR_LIMIT_NPROC, &cgid_req.limits.limit_nproc)) != APR_SUCCESS)) || #endif #endif ((rc = apr_procattr_child_errfn_set(procattr, cgid_child_errfn)) != APR_SUCCESS)) { /* Something bad happened, tell the world. * ap_log_rerror() won't work because the header table used by * ap_log_rerror() hasn't been replicated in the phony r */ ap_log_error(APLOG_MARK, APLOG_ERR, rc, r->server, APLOGNO(01251) "couldn't set child process attributes: %s", r->filename); procnew->pid = 0; /* no process to clean up */ close(sd2); } else { apr_pool_userdata_set(r, ERRFN_USERDATA_KEY, apr_pool_cleanup_null, ptrans); argv = (const char * const *)create_argv(r->pool, NULL, NULL, NULL, argv0, r->args); /* We want to close sd2 for the new CGI process too. * If it is left open it'll make ap_pass_brigade() block * waiting for EOF if CGI forked something running long. * close(sd2) here should be okay, as CGI channel * is already dup()ed by apr_procattr_child_{in,out}_set() * above. */ close(sd2); if (memcmp(&empty_ugid, &cgid_req.ugid, sizeof(empty_ugid))) { /* We have a valid identity, and can be sure that * cgid_suexec_id_doer will return a valid ugid */ rc = ap_os_create_privileged_process(r, procnew, argv0, argv, (const char * const *)env, procattr, ptrans); } else { rc = apr_proc_create(procnew, argv0, argv, (const char * const *)env, procattr, ptrans); } if (rc != APR_SUCCESS) { /* Bad things happened. Everyone should have cleaned up. * ap_log_rerror() won't work because the header table used by * ap_log_rerror() hasn't been replicated in the phony r */ ap_log_error(APLOG_MARK, APLOG_ERR, rc, r->server, APLOGNO(01252) "couldn't create child process: %d: %s", rc, apr_filepath_name_get(r->filename)); procnew->pid = 0; /* no process to clean up */ } } /* If the script process was created, remember the pid for * later cleanup. If the script process wasn't created, clear * out any prior pid with the same key. * * We don't want to leak storage for the key, so only allocate * a key if the key doesn't exist yet in the hash; there are * only a limited number of possible keys (one for each * possible thread in the server), so we can allocate a copy * of the key the first time a thread has a cgid request. * Note that apr_hash_set() only uses the storage passed in * for the key if it is adding the key to the hash for the * first time; new key storage isn't needed for replacing the * existing value of a key. */ if (apr_hash_get(script_hash, &cgid_req.conn_id, sizeof(cgid_req.conn_id))) { key = &cgid_req.conn_id; } else { key = apr_pmemdup(pcgi, &cgid_req.conn_id, sizeof(cgid_req.conn_id)); } apr_hash_set(script_hash, key, sizeof(cgid_req.conn_id), (void *)((long)procnew->pid)); } return -1; /* should be <= 0 to distinguish from startup errors */ } static int cgid_start(apr_pool_t *p, server_rec *main_server, apr_proc_t *procnew) { daemon_should_exit = 0; /* clear setting from previous generation */ if ((daemon_pid = fork()) < 0) { ap_log_error(APLOG_MARK, APLOG_ERR, errno, main_server, APLOGNO(01253) "mod_cgid: Couldn't spawn cgid daemon process"); return DECLINED; } else if (daemon_pid == 0) { if (pcgi == NULL) { apr_pool_create(&pcgi, p); } exit(cgid_server(main_server) > 0 ? DAEMON_STARTUP_ERROR : -1); } procnew->pid = daemon_pid; procnew->err = procnew->in = procnew->out = NULL; apr_pool_note_subprocess(p, procnew, APR_KILL_AFTER_TIMEOUT); #if APR_HAS_OTHER_CHILD apr_proc_other_child_register(procnew, cgid_maint, procnew, NULL, p); #endif return OK; } static int cgid_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { sockname = ap_append_pid(pconf, DEFAULT_SOCKET, "."); return OK; } static int cgid_init(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *main_server) { apr_proc_t *procnew = NULL; const char *userdata_key = "cgid_init"; int ret = OK; void *data; root_server = main_server; root_pool = p; apr_pool_userdata_get(&data, userdata_key, main_server->process->pool); if (!data) { procnew = apr_pcalloc(main_server->process->pool, sizeof(*procnew)); procnew->pid = -1; procnew->err = procnew->in = procnew->out = NULL; apr_pool_userdata_set((const void *)procnew, userdata_key, apr_pool_cleanup_null, main_server->process->pool); return ret; } else { procnew = data; } if (ap_state_query(AP_SQ_MAIN_STATE) != AP_SQ_MS_CREATE_PRE_CONFIG) { char *tmp_sockname; parent_pid = getpid(); tmp_sockname = ap_runtime_dir_relative(p, sockname); if (strlen(tmp_sockname) > sizeof(server_addr->sun_path) - 1) { tmp_sockname[sizeof(server_addr->sun_path)] = '\0'; ap_log_error(APLOG_MARK, APLOG_ERR, 0, main_server, APLOGNO(01254) "The length of the ScriptSock path exceeds maximum, " "truncating to %s", tmp_sockname); } sockname = tmp_sockname; server_addr_len = APR_OFFSETOF(struct sockaddr_un, sun_path) + strlen(sockname); server_addr = (struct sockaddr_un *)apr_palloc(p, server_addr_len + 1); server_addr->sun_family = AF_UNIX; strcpy(server_addr->sun_path, sockname); ret = cgid_start(p, main_server, procnew); if (ret != OK ) { return ret; } cgid_pfn_reg_with_ssi = APR_RETRIEVE_OPTIONAL_FN(ap_register_include_handler); cgid_pfn_gtv = APR_RETRIEVE_OPTIONAL_FN(ap_ssi_get_tag_and_value); cgid_pfn_ps = APR_RETRIEVE_OPTIONAL_FN(ap_ssi_parse_string); if ((cgid_pfn_reg_with_ssi) && (cgid_pfn_gtv) && (cgid_pfn_ps)) { /* Required by mod_include filter. This is how mod_cgid registers * with mod_include to provide processing of the exec directive. */ cgid_pfn_reg_with_ssi("exec", handle_exec); } } return ret; } static void *create_cgid_config(apr_pool_t *p, server_rec *s) { cgid_server_conf *c = (cgid_server_conf *) apr_pcalloc(p, sizeof(cgid_server_conf)); c->logname = NULL; c->logbytes = DEFAULT_LOGBYTES; c->bufbytes = DEFAULT_BUFBYTES; return c; } static void *merge_cgid_config(apr_pool_t *p, void *basev, void *overridesv) { cgid_server_conf *base = (cgid_server_conf *) basev, *overrides = (cgid_server_conf *) overridesv; return overrides->logname ? overrides : base; } static void *create_cgid_dirconf(apr_pool_t *p, char *dummy) { cgid_dirconf *c = (cgid_dirconf *) apr_pcalloc(p, sizeof(cgid_dirconf)); return c; } static const char *set_scriptlog(cmd_parms *cmd, void *dummy, const char *arg) { server_rec *s = cmd->server; cgid_server_conf *conf = ap_get_module_config(s->module_config, &cgid_module); conf->logname = ap_server_root_relative(cmd->pool, arg); if (!conf->logname) { return apr_pstrcat(cmd->pool, "Invalid ScriptLog path ", arg, NULL); } return NULL; } static const char *set_scriptlog_length(cmd_parms *cmd, void *dummy, const char *arg) { server_rec *s = cmd->server; cgid_server_conf *conf = ap_get_module_config(s->module_config, &cgid_module); conf->logbytes = atol(arg); return NULL; } static const char *set_scriptlog_buffer(cmd_parms *cmd, void *dummy, const char *arg) { server_rec *s = cmd->server; cgid_server_conf *conf = ap_get_module_config(s->module_config, &cgid_module); conf->bufbytes = atoi(arg); return NULL; } static const char *set_script_socket(cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } /* Make sure the pid is appended to the sockname */ sockname = ap_append_pid(cmd->pool, arg, "."); sockname = ap_runtime_dir_relative(cmd->pool, sockname); if (!sockname) { return apr_pstrcat(cmd->pool, "Invalid ScriptSock path", arg, NULL); } return NULL; } static const char *set_script_timeout(cmd_parms *cmd, void *dummy, const char *arg) { cgid_dirconf *dc = dummy; if (ap_timeout_parameter_parse(arg, &dc->timeout, "s") != APR_SUCCESS) { return "CGIDScriptTimeout has wrong format"; } return NULL; } static const command_rec cgid_cmds[] = { AP_INIT_TAKE1("ScriptLog", set_scriptlog, NULL, RSRC_CONF, "the name of a log for script debugging info"), AP_INIT_TAKE1("ScriptLogLength", set_scriptlog_length, NULL, RSRC_CONF, "the maximum length (in bytes) of the script debug log"), AP_INIT_TAKE1("ScriptLogBuffer", set_scriptlog_buffer, NULL, RSRC_CONF, "the maximum size (in bytes) to record of a POST request"), AP_INIT_TAKE1("ScriptSock", set_script_socket, NULL, RSRC_CONF, "the name of the socket to use for communication with " "the cgi daemon."), AP_INIT_TAKE1("CGIDScriptTimeout", set_script_timeout, NULL, RSRC_CONF | ACCESS_CONF, "The amount of time to wait between successful reads from " "the CGI script, in seconds."), {NULL} }; static int log_scripterror(request_rec *r, cgid_server_conf * conf, int ret, apr_status_t rv, char *error) { apr_file_t *f = NULL; struct stat finfo; char time_str[APR_CTIME_LEN]; int log_flags = rv ? APLOG_ERR : APLOG_ERR; /* Intentional no APLOGNO */ /* Callee provides APLOGNO in error text */ ap_log_rerror(APLOG_MARK, log_flags, rv, r, "%s: %s", error, r->filename); /* XXX Very expensive mainline case! Open, then getfileinfo! */ if (!conf->logname || ((stat(conf->logname, &finfo) == 0) && (finfo.st_size > conf->logbytes)) || (apr_file_open(&f, conf->logname, APR_APPEND|APR_WRITE|APR_CREATE, APR_OS_DEFAULT, r->pool) != APR_SUCCESS)) { return ret; } /* "%% [Wed Jun 19 10:53:21 1996] GET /cgid-bin/printenv HTTP/1.0" */ apr_ctime(time_str, apr_time_now()); apr_file_printf(f, "%%%% [%s] %s %s%s%s %s\n", time_str, r->method, r->uri, r->args ? "?" : "", r->args ? r->args : "", r->protocol); /* "%% 500 /usr/local/apache/cgid-bin */ apr_file_printf(f, "%%%% %d %s\n", ret, r->filename); apr_file_printf(f, "%%error\n%s\n", error); apr_file_close(f); return ret; } static int log_script(request_rec *r, cgid_server_conf * conf, int ret, char *dbuf, const char *sbuf, apr_bucket_brigade *bb, apr_file_t *script_err) { const apr_array_header_t *hdrs_arr = apr_table_elts(r->headers_in); const apr_table_entry_t *hdrs = (apr_table_entry_t *) hdrs_arr->elts; char argsbuffer[HUGE_STRING_LEN]; apr_file_t *f = NULL; apr_bucket *e; const char *buf; apr_size_t len; apr_status_t rv; int first; int i; struct stat finfo; char time_str[APR_CTIME_LEN]; /* XXX Very expensive mainline case! Open, then getfileinfo! */ if (!conf->logname || ((stat(conf->logname, &finfo) == 0) && (finfo.st_size > conf->logbytes)) || (apr_file_open(&f, conf->logname, APR_APPEND|APR_WRITE|APR_CREATE, APR_OS_DEFAULT, r->pool) != APR_SUCCESS)) { /* Soak up script output */ discard_script_output(bb); if (script_err) { while (apr_file_gets(argsbuffer, HUGE_STRING_LEN, script_err) == APR_SUCCESS) continue; } return ret; } /* "%% [Wed Jun 19 10:53:21 1996] GET /cgid-bin/printenv HTTP/1.0" */ apr_ctime(time_str, apr_time_now()); apr_file_printf(f, "%%%% [%s] %s %s%s%s %s\n", time_str, r->method, r->uri, r->args ? "?" : "", r->args ? r->args : "", r->protocol); /* "%% 500 /usr/local/apache/cgid-bin" */ apr_file_printf(f, "%%%% %d %s\n", ret, r->filename); apr_file_puts("%request\n", f); for (i = 0; i < hdrs_arr->nelts; ++i) { if (!hdrs[i].key) continue; apr_file_printf(f, "%s: %s\n", hdrs[i].key, hdrs[i].val); } if ((r->method_number == M_POST || r->method_number == M_PUT) && *dbuf) { apr_file_printf(f, "\n%s\n", dbuf); } apr_file_puts("%response\n", f); hdrs_arr = apr_table_elts(r->err_headers_out); hdrs = (const apr_table_entry_t *) hdrs_arr->elts; for (i = 0; i < hdrs_arr->nelts; ++i) { if (!hdrs[i].key) continue; apr_file_printf(f, "%s: %s\n", hdrs[i].key, hdrs[i].val); } if (sbuf && *sbuf) apr_file_printf(f, "%s\n", sbuf); first = 1; for (e = APR_BRIGADE_FIRST(bb); e != APR_BRIGADE_SENTINEL(bb); e = APR_BUCKET_NEXT(e)) { if (APR_BUCKET_IS_EOS(e)) { break; } rv = apr_bucket_read(e, &buf, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS || (len == 0)) { break; } if (first) { apr_file_puts("%stdout\n", f); first = 0; } apr_file_write_full(f, buf, len, NULL); apr_file_puts("\n", f); } if (script_err) { if (apr_file_gets(argsbuffer, HUGE_STRING_LEN, script_err) == APR_SUCCESS) { apr_file_puts("%stderr\n", f); apr_file_puts(argsbuffer, f); while (apr_file_gets(argsbuffer, HUGE_STRING_LEN, script_err) == APR_SUCCESS) apr_file_puts(argsbuffer, f); apr_file_puts("\n", f); } } if (script_err) { apr_file_close(script_err); } apr_file_close(f); return ret; } static int connect_to_daemon(int *sdptr, request_rec *r, cgid_server_conf *conf) { int sd; int connect_tries; int connect_errno; apr_interval_time_t sliding_timer; connect_tries = 0; sliding_timer = 100000; /* 100 milliseconds */ while (1) { connect_errno = 0; ++connect_tries; if ((sd = socket(AF_UNIX, SOCK_STREAM, 0)) < 0) { return log_scripterror(r, conf, HTTP_INTERNAL_SERVER_ERROR, errno, APLOGNO(01255) "unable to create socket to cgi daemon"); } if (connect(sd, (struct sockaddr *)server_addr, server_addr_len) < 0) { /* Save errno for later */ connect_errno = errno; /* ECONNREFUSED means the listen queue is full; ENOENT means that * the cgid server either hasn't started up yet, or we're pointing * at the wrong socket file */ if ((errno == ECONNREFUSED || errno == ENOENT) && connect_tries < DEFAULT_CONNECT_ATTEMPTS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, errno, r, APLOGNO(01256) "connect #%d to cgi daemon failed, sleeping before retry", connect_tries); close(sd); apr_sleep(sliding_timer); if (sliding_timer < apr_time_from_sec(2)) { sliding_timer *= 2; } } else { close(sd); return log_scripterror(r, conf, HTTP_SERVICE_UNAVAILABLE, errno, APLOGNO(01257) "unable to connect to cgi daemon after multiple tries"); } } else { apr_pool_cleanup_register(r->pool, (void *)((long)sd), close_unix_socket, apr_pool_cleanup_null); break; /* we got connected! */ } /* If we didn't find the socket but the server was not recently restarted, * chances are there's something wrong with the cgid daemon */ if (connect_errno == ENOENT && apr_time_sec(apr_time_now() - ap_scoreboard_image->global->restart_time) > DEFAULT_CONNECT_STARTUP_DELAY) { return log_scripterror(r, conf, HTTP_SERVICE_UNAVAILABLE, connect_errno, apr_pstrcat(r->pool, APLOGNO(02833) "ScriptSock ", sockname, " does not exist", NULL)); } /* gotta try again, but make sure the cgid daemon is still around */ if (connect_errno != ENOENT && kill(daemon_pid, 0) != 0) { return log_scripterror(r, conf, HTTP_SERVICE_UNAVAILABLE, connect_errno, APLOGNO(01258) "cgid daemon is gone; is Apache terminating?"); } } *sdptr = sd; return OK; } static void discard_script_output(apr_bucket_brigade *bb) { apr_bucket *e; const char *buf; apr_size_t len; apr_status_t rv; for (e = APR_BRIGADE_FIRST(bb); e != APR_BRIGADE_SENTINEL(bb); e = APR_BUCKET_NEXT(e)) { if (APR_BUCKET_IS_EOS(e)) { break; } rv = apr_bucket_read(e, &buf, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS) { break; } } } /**************************************************************** * * Actual cgid handling... */ struct cleanup_script_info { request_rec *r; cgid_server_conf *conf; pid_t pid; }; static apr_status_t dead_yet(pid_t pid, apr_interval_time_t max_wait) { apr_interval_time_t interval = 10000; /* 10 ms */ apr_interval_time_t total = 0; do { #ifdef _AIX /* On AIX, for processes like mod_cgid's script children where * SIGCHLD is ignored, kill(pid,0) returns success for up to * one second after the script child exits, based on when a * daemon runs to clean up unnecessary process table entries. * getpgid() can report the proper info (-1/ESRCH) immediately. */ if (getpgid(pid) < 0) { #else if (kill(pid, 0) < 0) { #endif return APR_SUCCESS; } apr_sleep(interval); total = total + interval; if (interval < 500000) { interval *= 2; } } while (total < max_wait); return APR_EGENERAL; } static apr_status_t cleanup_nonchild_process(request_rec *r, pid_t pid) { kill(pid, SIGTERM); /* in case it isn't dead yet */ if (dead_yet(pid, apr_time_from_sec(3)) == APR_SUCCESS) { return APR_SUCCESS; } ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01259) "CGI process %" APR_PID_T_FMT " didn't exit, sending SIGKILL", pid); kill(pid, SIGKILL); if (dead_yet(pid, apr_time_from_sec(3)) == APR_SUCCESS) { return APR_SUCCESS; } ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01260) "CGI process %" APR_PID_T_FMT " didn't exit, sending SIGKILL again", pid); kill(pid, SIGKILL); return APR_EGENERAL; } static apr_status_t get_cgi_pid(request_rec *r, cgid_server_conf *conf, pid_t *pid) { cgid_req_t req = {0}; apr_status_t stat; int rc, sd; rc = connect_to_daemon(&sd, r, conf); if (rc != OK) { return APR_EGENERAL; } req.req_type = GETPID_REQ; req.ppid = parent_pid; req.conn_id = r->connection->id; stat = sock_write(sd, &req, sizeof(req)); if (stat != APR_SUCCESS) { return stat; } /* wait for pid of script */ stat = sock_read(sd, pid, sizeof(*pid)); if (stat != APR_SUCCESS) { return stat; } if (pid == 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01261) "daemon couldn't find CGI process for connection %lu", r->connection->id); return APR_EGENERAL; } return APR_SUCCESS; } static apr_status_t cleanup_script(void *vptr) { struct cleanup_script_info *info = vptr; return cleanup_nonchild_process(info->r, info->pid); } static int cgid_handler(request_rec *r) { int retval, nph, dbpos; char *argv0, *dbuf; apr_bucket_brigade *bb; apr_bucket *b; cgid_server_conf *conf; int is_included; int seen_eos, child_stopped_reading; int sd; char **env; apr_file_t *tempsock; struct cleanup_script_info *info; apr_status_t rv; cgid_dirconf *dc; if (strcmp(r->handler, CGI_MAGIC_TYPE) && strcmp(r->handler, "cgi-script")) { return DECLINED; } conf = ap_get_module_config(r->server->module_config, &cgid_module); dc = ap_get_module_config(r->per_dir_config, &cgid_module); is_included = !strcmp(r->protocol, "INCLUDED"); if ((argv0 = strrchr(r->filename, '/')) != NULL) { argv0++; } else { argv0 = r->filename; } nph = !(strncmp(argv0, "nph-", 4)); argv0 = r->filename; if (!(ap_allow_options(r) & OPT_EXECCGI) && !is_scriptaliased(r)) { return log_scripterror(r, conf, HTTP_FORBIDDEN, 0, APLOGNO(01262) "Options ExecCGI is off in this directory"); } if (nph && is_included) { return log_scripterror(r, conf, HTTP_FORBIDDEN, 0, APLOGNO(01263) "attempt to include NPH CGI script"); } #if defined(OS2) || defined(WIN32) #error mod_cgid does not work on this platform. If you teach it to, look #error at mod_cgi.c for required code in this path. #else if (r->finfo.filetype == APR_NOFILE) { return log_scripterror(r, conf, HTTP_NOT_FOUND, 0, APLOGNO(01264) "script not found or unable to stat"); } #endif if (r->finfo.filetype == APR_DIR) { return log_scripterror(r, conf, HTTP_FORBIDDEN, 0, APLOGNO(01265) "attempt to invoke directory as script"); } if ((r->used_path_info == AP_REQ_REJECT_PATH_INFO) && r->path_info && *r->path_info) { /* default to accept */ return log_scripterror(r, conf, HTTP_NOT_FOUND, 0, APLOGNO(01266) "AcceptPathInfo off disallows user's path"); } /* if (!ap_suexec_enabled) { if (!ap_can_exec(&r->finfo)) return log_scripterror(r, conf, HTTP_FORBIDDEN, 0, APLOGNO(01267) "file permissions deny server execution"); } */ /* * httpd core function used to add common environment variables like * DOCUMENT_ROOT. */ ap_add_common_vars(r); ap_add_cgi_vars(r); env = ap_create_environment(r->pool, r->subprocess_env); if ((retval = connect_to_daemon(&sd, r, conf)) != OK) { return retval; } rv = send_req(sd, r, argv0, env, CGI_REQ); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01268) "write to cgi daemon process"); } info = apr_palloc(r->pool, sizeof(struct cleanup_script_info)); info->conf = conf; info->r = r; rv = get_cgi_pid(r, conf, &(info->pid)); if (APR_SUCCESS == rv){ apr_pool_cleanup_register(r->pool, info, cleanup_script, apr_pool_cleanup_null); } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, "error determining cgi PID"); } /* We are putting the socket discriptor into an apr_file_t so that we can * use a pipe bucket to send the data to the client. APR will create * a cleanup for the apr_file_t which will close the socket, so we'll * get rid of the cleanup we registered when we created the socket. */ apr_os_pipe_put_ex(&tempsock, &sd, 1, r->pool); if (dc->timeout > 0) { apr_file_pipe_timeout_set(tempsock, dc->timeout); } else { apr_file_pipe_timeout_set(tempsock, r->server->timeout); } apr_pool_cleanup_kill(r->pool, (void *)((long)sd), close_unix_socket); /* Transfer any put/post args, CERN style... * Note that we already ignore SIGPIPE in the core server. */ bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); seen_eos = 0; child_stopped_reading = 0; dbuf = NULL; dbpos = 0; if (conf->logname) { dbuf = apr_palloc(r->pool, conf->bufbytes + 1); } do { apr_bucket *bucket; rv = ap_get_brigade(r->input_filters, bb, AP_MODE_READBYTES, APR_BLOCK_READ, HUGE_STRING_LEN); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01270) "Error reading request entity data"); return ap_map_http_request_error(rv, HTTP_BAD_REQUEST); } for (bucket = APR_BRIGADE_FIRST(bb); bucket != APR_BRIGADE_SENTINEL(bb); bucket = APR_BUCKET_NEXT(bucket)) { const char *data; apr_size_t len; if (APR_BUCKET_IS_EOS(bucket)) { seen_eos = 1; break; } /* We can't do much with this. */ if (APR_BUCKET_IS_FLUSH(bucket)) { continue; } /* If the child stopped, we still must read to EOS. */ if (child_stopped_reading) { continue; } /* read */ apr_bucket_read(bucket, &data, &len, APR_BLOCK_READ); if (conf->logname && dbpos < conf->bufbytes) { int cursize; if ((dbpos + len) > conf->bufbytes) { cursize = conf->bufbytes - dbpos; } else { cursize = len; } memcpy(dbuf + dbpos, data, cursize); dbpos += cursize; } /* Keep writing data to the child until done or too much time * elapses with no progress or an error occurs. */ rv = apr_file_write_full(tempsock, data, len, NULL); if (rv != APR_SUCCESS) { /* silly script stopped reading, soak up remaining message */ child_stopped_reading = 1; ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02651) "Error writing request body to script %s", r->filename); } } apr_brigade_cleanup(bb); } while (!seen_eos); if (conf->logname) { dbuf[dbpos] = '\0'; } /* we're done writing, or maybe we didn't write at all; * force EOF on child's stdin so that the cgi detects end (or * absence) of data */ shutdown(sd, 1); /* Handle script return... */ if (!nph) { conn_rec *c = r->connection; const char *location; char sbuf[MAX_STRING_LEN]; int ret; bb = apr_brigade_create(r->pool, c->bucket_alloc); b = apr_bucket_pipe_create(tempsock, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); if ((ret = ap_scan_script_header_err_brigade_ex(r, bb, sbuf, APLOG_MODULE_INDEX))) { ret = log_script(r, conf, ret, dbuf, sbuf, bb, NULL); /* * ret could be HTTP_NOT_MODIFIED in the case that the CGI script * does not set an explicit status and ap_meets_conditions, which * is called by ap_scan_script_header_err_brigade, detects that * the conditions of the requests are met and the response is * not modified. * In this case set r->status and return OK in order to prevent * running through the error processing stack as this would * break with mod_cache, if the conditions had been set by * mod_cache itself to validate a stale entity. * BTW: We circumvent the error processing stack anyway if the * CGI script set an explicit status code (whatever it is) and * the only possible values for ret here are: * * HTTP_NOT_MODIFIED (set by ap_meets_conditions) * HTTP_PRECONDITION_FAILED (set by ap_meets_conditions) * HTTP_INTERNAL_SERVER_ERROR (if something went wrong during the * processing of the response of the CGI script, e.g broken headers * or a crashed CGI process). */ if (ret == HTTP_NOT_MODIFIED) { r->status = ret; return OK; } return ret; } location = apr_table_get(r->headers_out, "Location"); if (location && location[0] == '/' && r->status == 200) { /* Soak up all the script output */ discard_script_output(bb); apr_brigade_destroy(bb); /* This redirect needs to be a GET no matter what the original * method was. */ r->method = "GET"; r->method_number = M_GET; /* We already read the message body (if any), so don't allow * the redirected request to think it has one. We can ignore * Transfer-Encoding, since we used REQUEST_CHUNKED_ERROR. */ apr_table_unset(r->headers_in, "Content-Length"); ap_internal_redirect_handler(location, r); return OK; } else if (location && r->status == 200) { /* XXX: Note that if a script wants to produce its own Redirect * body, it now has to explicitly *say* "Status: 302" */ discard_script_output(bb); apr_brigade_destroy(bb); return HTTP_MOVED_TEMPORARILY; } rv = ap_pass_brigade(r->output_filters, bb); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, rv, r, "Failed to flush CGI output to client"); } } if (nph) { conn_rec *c = r->connection; struct ap_filter_t *cur; /* get rid of all filters up through protocol... since we * haven't parsed off the headers, there is no way they can * work */ cur = r->proto_output_filters; while (cur && cur->frec->ftype < AP_FTYPE_CONNECTION) { cur = cur->next; } r->output_filters = r->proto_output_filters = cur; bb = apr_brigade_create(r->pool, c->bucket_alloc); b = apr_bucket_pipe_create(tempsock, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); ap_pass_brigade(r->output_filters, bb); } return OK; /* NOT r->status, even if it has changed. */ } /*============================================================================ *============================================================================ * This is the beginning of the cgi filter code moved from mod_include. This * is the code required to handle the "exec" SSI directive. *============================================================================ *============================================================================*/ static apr_status_t include_cgi(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb, char *s) { request_rec *r = f->r; request_rec *rr = ap_sub_req_lookup_uri(s, r, f->next); int rr_status; if (rr->status != HTTP_OK) { ap_destroy_sub_req(rr); return APR_EGENERAL; } /* No hardwired path info or query allowed */ if ((rr->path_info && rr->path_info[0]) || rr->args) { ap_destroy_sub_req(rr); return APR_EGENERAL; } if (rr->finfo.filetype != APR_REG) { ap_destroy_sub_req(rr); return APR_EGENERAL; } /* Script gets parameters of the *document*, for back compatibility */ rr->path_info = r->path_info; /* hard to get right; see mod_cgi.c */ rr->args = r->args; /* Force sub_req to be treated as a CGI request, even if ordinary * typing rules would have called it something else. */ ap_set_content_type(rr, CGI_MAGIC_TYPE); /* Run it. */ rr_status = ap_run_sub_req(rr); if (ap_is_HTTP_REDIRECT(rr_status)) { const char *location = apr_table_get(rr->headers_out, "Location"); if (location) { char *buffer; location = ap_escape_html(rr->pool, location); buffer = apr_pstrcat(ctx->pool, "", location, "", NULL); APR_BRIGADE_INSERT_TAIL(bb, apr_bucket_pool_create(buffer, strlen(buffer), ctx->pool, f->c->bucket_alloc)); } } ap_destroy_sub_req(rr); return APR_SUCCESS; } /* This is the special environment used for running the "exec cmd=" * variety of SSI directives. */ static void add_ssi_vars(request_rec *r) { apr_table_t *e = r->subprocess_env; if (r->path_info && r->path_info[0] != '\0') { request_rec *pa_req; apr_table_setn(e, "PATH_INFO", ap_escape_shell_cmd(r->pool, r->path_info)); pa_req = ap_sub_req_lookup_uri(ap_escape_uri(r->pool, r->path_info), r, NULL); if (pa_req->filename) { apr_table_setn(e, "PATH_TRANSLATED", apr_pstrcat(r->pool, pa_req->filename, pa_req->path_info, NULL)); } ap_destroy_sub_req(pa_req); } if (r->args) { char *arg_copy = apr_pstrdup(r->pool, r->args); apr_table_setn(e, "QUERY_STRING", r->args); ap_unescape_url(arg_copy); apr_table_setn(e, "QUERY_STRING_UNESCAPED", ap_escape_shell_cmd(r->pool, arg_copy)); } } static int include_cmd(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb, char *command) { char **env; int sd; int retval; apr_file_t *tempsock = NULL; request_rec *r = f->r; cgid_server_conf *conf = ap_get_module_config(r->server->module_config, &cgid_module); cgid_dirconf *dc = ap_get_module_config(r->per_dir_config, &cgid_module); struct cleanup_script_info *info; apr_status_t rv; add_ssi_vars(r); env = ap_create_environment(r->pool, r->subprocess_env); if ((retval = connect_to_daemon(&sd, r, conf)) != OK) { return retval; } send_req(sd, r, command, env, SSI_REQ); info = apr_palloc(r->pool, sizeof(struct cleanup_script_info)); info->conf = conf; info->r = r; rv = get_cgi_pid(r, conf, &(info->pid)); if (APR_SUCCESS == rv) { /* for this type of request, the script is invoked through an * intermediate shell process... cleanup_script is only able * to knock out the shell process, not the actual script */ apr_pool_cleanup_register(r->pool, info, cleanup_script, apr_pool_cleanup_null); } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, "error determining cgi PID (for SSI)"); } apr_pool_cleanup_register(r->pool, info, cleanup_script, apr_pool_cleanup_null); /* We are putting the socket discriptor into an apr_file_t so that we can * use a pipe bucket to send the data to the client. APR will create * a cleanup for the apr_file_t which will close the socket, so we'll * get rid of the cleanup we registered when we created the socket. */ apr_os_pipe_put_ex(&tempsock, &sd, 1, r->pool); if (dc->timeout > 0) { apr_file_pipe_timeout_set(tempsock, dc->timeout); } else { apr_file_pipe_timeout_set(tempsock, r->server->timeout); } apr_pool_cleanup_kill(r->pool, (void *)((long)sd), close_unix_socket); APR_BRIGADE_INSERT_TAIL(bb, apr_bucket_pipe_create(tempsock, f->c->bucket_alloc)); ctx->flush_now = 1; return APR_SUCCESS; } static apr_status_t handle_exec(include_ctx_t *ctx, ap_filter_t *f, apr_bucket_brigade *bb) { char *tag = NULL; char *tag_val = NULL; request_rec *r = f->r; char *file = r->filename; char parsed_string[MAX_STRING_LEN]; if (!ctx->argc) { ap_log_rerror(APLOG_MARK, (ctx->flags & SSI_FLAG_PRINTING) ? APLOG_ERR : APLOG_WARNING, 0, r, APLOGNO(03196) "missing argument for exec element in %s", r->filename); } if (!(ctx->flags & SSI_FLAG_PRINTING)) { return APR_SUCCESS; } if (!ctx->argc) { SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } if (ctx->flags & SSI_FLAG_NO_EXEC) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01271) "exec used but not allowed " "in %s", r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); return APR_SUCCESS; } while (1) { cgid_pfn_gtv(ctx, &tag, &tag_val, SSI_VALUE_DECODED); if (!tag || !tag_val) { break; } if (!strcmp(tag, "cmd")) { apr_status_t rv; cgid_pfn_ps(ctx, tag_val, parsed_string, sizeof(parsed_string), SSI_EXPAND_LEAVE_NAME); rv = include_cmd(ctx, f, bb, parsed_string); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01272) "execution failure for parameter \"%s\" " "to tag exec in file %s", tag, r->filename); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); break; } } else if (!strcmp(tag, "cgi")) { apr_status_t rv; cgid_pfn_ps(ctx, tag_val, parsed_string, sizeof(parsed_string), SSI_EXPAND_DROP_NAME); rv = include_cgi(ctx, f, bb, parsed_string); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01273) "invalid CGI ref " "\"%s\" in %s", tag_val, file); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); break; } } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01274) "unknown parameter " "\"%s\" to tag exec in %s", tag, file); SSI_CREATE_ERROR_BUCKET(ctx, f, bb); break; } } return APR_SUCCESS; } /*============================================================================ *============================================================================ * This is the end of the cgi filter code moved from mod_include. *============================================================================ *============================================================================*/ static void register_hook(apr_pool_t *p) { static const char * const aszPre[] = { "mod_include.c", NULL }; ap_hook_pre_config(cgid_pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(cgid_init, aszPre, NULL, APR_HOOK_MIDDLE); ap_hook_handler(cgid_handler, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(cgid) = { STANDARD20_MODULE_STUFF, create_cgid_dirconf, /* dir config creater */ NULL, /* dir merger --- default is to override */ create_cgid_config, /* server config */ merge_cgid_config, /* merge server config */ cgid_cmds, /* command table */ register_hook /* register_handlers */ }; httpd-2.4.41/modules/generators/mod_autoindex.dep0000644000000000000500000000424012674411515020414 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_autoindex.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_autoindex.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_core.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/generators/mod_autoindex.exp0000644000000000000500000000002110150161574020423 0ustar rootsrcautoindex_module httpd-2.4.41/modules/generators/mod_asis.dsp0000644000000000000500000001046710551346420017373 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_asis" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_asis - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_asis.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_asis.mak" CFG="mod_asis - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_asis - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_asis - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_asis - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_asis_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_asis.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_asis.so" /d LONG_NAME="asis_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_asis.so" /base:@..\..\os\win32\BaseAddr.ref,mod_asis.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_asis.so" /base:@..\..\os\win32\BaseAddr.ref,mod_asis.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_asis.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_asis - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_asis_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_asis.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_asis.so" /d LONG_NAME="asis_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_asis.so" /base:@..\..\os\win32\BaseAddr.ref,mod_asis.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_asis.so" /base:@..\..\os\win32\BaseAddr.ref,mod_asis.so # Begin Special Build Tool TargetPath=.\Debug\mod_asis.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_asis - Win32 Release" # Name "mod_asis - Win32 Debug" # Begin Source File SOURCE=.\mod_asis.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/generators/mod_autoindex.mak0000644000000000000500000002401512701473373020417 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_autoindex.dsp !IF "$(CFG)" == "" CFG=mod_autoindex - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_autoindex - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_autoindex - Win32 Release" && "$(CFG)" != "mod_autoindex - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_autoindex.mak" CFG="mod_autoindex - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_autoindex - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_autoindex - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_autoindex - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_autoindex.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_autoindex.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_autoindex.obj" -@erase "$(INTDIR)\mod_autoindex.res" -@erase "$(INTDIR)\mod_autoindex_src.idb" -@erase "$(INTDIR)\mod_autoindex_src.pdb" -@erase "$(OUTDIR)\mod_autoindex.exp" -@erase "$(OUTDIR)\mod_autoindex.lib" -@erase "$(OUTDIR)\mod_autoindex.pdb" -@erase "$(OUTDIR)\mod_autoindex.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_autoindex_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_autoindex.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_autoindex.so" /d LONG_NAME="autoindex_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_autoindex.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_autoindex.pdb" /debug /out:"$(OUTDIR)\mod_autoindex.so" /implib:"$(OUTDIR)\mod_autoindex.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_autoindex.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_autoindex.obj" \ "$(INTDIR)\mod_autoindex.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_autoindex.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_autoindex.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_autoindex.so" if exist .\Release\mod_autoindex.so.manifest mt.exe -manifest .\Release\mod_autoindex.so.manifest -outputresource:.\Release\mod_autoindex.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_autoindex - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_autoindex.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_autoindex.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_autoindex.obj" -@erase "$(INTDIR)\mod_autoindex.res" -@erase "$(INTDIR)\mod_autoindex_src.idb" -@erase "$(INTDIR)\mod_autoindex_src.pdb" -@erase "$(OUTDIR)\mod_autoindex.exp" -@erase "$(OUTDIR)\mod_autoindex.lib" -@erase "$(OUTDIR)\mod_autoindex.pdb" -@erase "$(OUTDIR)\mod_autoindex.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_autoindex_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_autoindex.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_autoindex.so" /d LONG_NAME="autoindex_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_autoindex.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_autoindex.pdb" /debug /out:"$(OUTDIR)\mod_autoindex.so" /implib:"$(OUTDIR)\mod_autoindex.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_autoindex.so LINK32_OBJS= \ "$(INTDIR)\mod_autoindex.obj" \ "$(INTDIR)\mod_autoindex.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_autoindex.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_autoindex.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_autoindex.so" if exist .\Debug\mod_autoindex.so.manifest mt.exe -manifest .\Debug\mod_autoindex.so.manifest -outputresource:.\Debug\mod_autoindex.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_autoindex.dep") !INCLUDE "mod_autoindex.dep" !ELSE !MESSAGE Warning: cannot find "mod_autoindex.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_autoindex - Win32 Release" || "$(CFG)" == "mod_autoindex - Win32 Debug" !IF "$(CFG)" == "mod_autoindex - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\generators" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\generators" !ELSEIF "$(CFG)" == "mod_autoindex - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\generators" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\generators" !ENDIF !IF "$(CFG)" == "mod_autoindex - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\generators" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\generators" !ELSEIF "$(CFG)" == "mod_autoindex - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\generators" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\generators" !ENDIF !IF "$(CFG)" == "mod_autoindex - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\generators" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\generators" !ELSEIF "$(CFG)" == "mod_autoindex - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\generators" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\generators" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_autoindex - Win32 Release" "$(INTDIR)\mod_autoindex.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_autoindex.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_autoindex.so" /d LONG_NAME="autoindex_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_autoindex - Win32 Debug" "$(INTDIR)\mod_autoindex.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_autoindex.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_autoindex.so" /d LONG_NAME="autoindex_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_autoindex.c "$(INTDIR)\mod_autoindex.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/generators/NWGNUinfo0000644000000000000500000001012111540546347016556 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = info # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Info Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Info Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/info.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_info.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ info_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/generators/mod_autoindex.dsp0000644000000000000500000001071510551346420020430 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_autoindex" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_autoindex - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_autoindex.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_autoindex.mak" CFG="mod_autoindex - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_autoindex - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_autoindex - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_autoindex - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_autoindex_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_autoindex.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_autoindex.so" /d LONG_NAME="autoindex_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_autoindex.so" /base:@..\..\os\win32\BaseAddr.ref,mod_autoindex.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_autoindex.so" /base:@..\..\os\win32\BaseAddr.ref,mod_autoindex.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_autoindex.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_autoindex - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_autoindex_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_autoindex.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_autoindex.so" /d LONG_NAME="autoindex_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_autoindex.so" /base:@..\..\os\win32\BaseAddr.ref,mod_autoindex.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_autoindex.so" /base:@..\..\os\win32\BaseAddr.ref,mod_autoindex.so # Begin Special Build Tool TargetPath=.\Debug\mod_autoindex.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_autoindex - Win32 Release" # Name "mod_autoindex - Win32 Debug" # Begin Source File SOURCE=.\mod_autoindex.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/generators/mod_autoindex.c0000644000000000000500000023324613102063375020072 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_autoindex.c: Handles the on-the-fly html index generation * * Rob McCool * 3/23/93 * * Adapted to Apache by rst. * * Version sort added by Martin Pool . */ #include "apr_strings.h" #include "apr_fnmatch.h" #include "apr_strings.h" #include "apr_lib.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_request.h" #include "http_protocol.h" #include "http_log.h" #include "http_main.h" #include "util_script.h" #include "mod_core.h" module AP_MODULE_DECLARE_DATA autoindex_module; /**************************************************************** * * Handling configuration directives... */ #define NO_OPTIONS (1 << 0) /* Indexing options */ #define ICONS_ARE_LINKS (1 << 1) #define SCAN_HTML_TITLES (1 << 2) #define SUPPRESS_ICON (1 << 3) #define SUPPRESS_LAST_MOD (1 << 4) #define SUPPRESS_SIZE (1 << 5) #define SUPPRESS_DESC (1 << 6) #define SUPPRESS_PREAMBLE (1 << 7) #define SUPPRESS_COLSORT (1 << 8) #define SUPPRESS_RULES (1 << 9) #define FOLDERS_FIRST (1 << 10) #define VERSION_SORT (1 << 11) #define TRACK_MODIFIED (1 << 12) #define FANCY_INDEXING (1 << 13) #define TABLE_INDEXING (1 << 14) #define IGNORE_CLIENT (1 << 15) #define IGNORE_CASE (1 << 16) #define EMIT_XHTML (1 << 17) #define SHOW_FORBIDDEN (1 << 18) #define ADDALTCLASS (1 << 19) #define OPTION_UNSET (1 << 20) #define K_NOADJUST 0 #define K_ADJUST 1 #define K_UNSET 2 /* * Define keys for sorting. */ #define K_NAME 'N' /* Sort by file name (default) */ #define K_LAST_MOD 'M' /* Last modification date */ #define K_SIZE 'S' /* Size (absolute, not as displayed) */ #define K_DESC 'D' /* Description */ #define K_VALID "NMSD" /* String containing _all_ valid K_ opts */ #define D_ASCENDING 'A' #define D_DESCENDING 'D' #define D_VALID "AD" /* String containing _all_ valid D_ opts */ /* * These are the dimensions of the default icons supplied with Apache. */ #define DEFAULT_ICON_WIDTH 20 #define DEFAULT_ICON_HEIGHT 22 /* * Other default dimensions. */ #define DEFAULT_NAME_WIDTH 23 #define DEFAULT_DESC_WIDTH 23 struct item { char *type; char *apply_to; char *apply_path; char *data; }; typedef struct ai_desc_t { char *pattern; char *description; int full_path; int wildcards; } ai_desc_t; typedef struct autoindex_config_struct { char *default_icon; char *style_sheet; char *head_insert; char *header; char *readme; apr_int32_t opts; apr_int32_t incremented_opts; apr_int32_t decremented_opts; int name_width; int name_adjust; int desc_width; int desc_adjust; int icon_width; int icon_height; char default_keyid; char default_direction; apr_array_header_t *icon_list; apr_array_header_t *alt_list; apr_array_header_t *desc_list; apr_array_header_t *ign_list; int ign_noinherit; char *ctype; char *charset; char *datetime_format; } autoindex_config_rec; static char c_by_encoding, c_by_type, c_by_path; #define BY_ENCODING &c_by_encoding #define BY_TYPE &c_by_type #define BY_PATH &c_by_path static APR_INLINE int response_is_html(request_rec *r) { char *ctype = ap_field_noparam(r->pool, r->content_type); return !ap_cstr_casecmp(ctype, "text/html") || !ap_cstr_casecmp(ctype, "application/xhtml+xml"); } /* * This routine puts the standard HTML header at the top of the index page. * We include the DOCTYPE because we may be using features therefrom (i.e., * HEIGHT and WIDTH attributes on the icons if we're FancyIndexing). */ static void emit_preamble(request_rec *r, int xhtml, const char *title) { autoindex_config_rec *d; d = (autoindex_config_rec *) ap_get_module_config(r->per_dir_config, &autoindex_module); if (xhtml) { ap_rvputs(r, DOCTYPE_XHTML_1_0T, "\n" " \n Index of ", title, "\n", NULL); } else { ap_rvputs(r, DOCTYPE_HTML_3_2, "\n \n" " Index of ", title, "\n", NULL); } if (d->style_sheet != NULL) { ap_rvputs(r, " style_sheet, "\" type=\"text/css\"", xhtml ? " />\n" : ">\n", NULL); } if (d->head_insert != NULL) { ap_rputs(d->head_insert, r); } ap_rputs(" \n \n", r); } static void push_item(apr_array_header_t *arr, char *type, const char *to, const char *path, const char *data) { struct item *p = (struct item *) apr_array_push(arr); if (!to) { to = ""; } if (!path) { path = ""; } p->type = type; p->data = apr_pstrdup(arr->pool, data); p->apply_path = apr_pstrcat(arr->pool, path, "*", NULL); if ((type == BY_PATH) && (!ap_is_matchexp(to))) { p->apply_to = apr_pstrcat(arr->pool, "*", to, NULL); } else { p->apply_to = apr_pstrdup(arr->pool, to); } } static const char *add_alt(cmd_parms *cmd, void *d, const char *alt, const char *to) { if (cmd->info == BY_PATH) { if (!strcmp(to, "**DIRECTORY**")) { to = "^^DIRECTORY^^"; } } if (cmd->info == BY_ENCODING) { char *tmp = apr_pstrdup(cmd->temp_pool, to); ap_str_tolower(tmp); to = tmp; } push_item(((autoindex_config_rec *) d)->alt_list, cmd->info, to, cmd->path, alt); return NULL; } static const char *add_icon(cmd_parms *cmd, void *d, const char *icon, const char *to) { char *iconbak = apr_pstrdup(cmd->temp_pool, icon); if (icon[0] == '(') { char *alt; char *cl = strchr(iconbak, ')'); if (cl == NULL) { return "missing closing paren"; } alt = ap_getword_nc(cmd->temp_pool, &iconbak, ','); *cl = '\0'; /* Lose closing paren */ add_alt(cmd, d, &alt[1], to); } if (cmd->info == BY_PATH) { if (!strcmp(to, "**DIRECTORY**")) { to = "^^DIRECTORY^^"; } } if (cmd->info == BY_ENCODING) { char *tmp = apr_pstrdup(cmd->temp_pool, to); ap_str_tolower(tmp); to = tmp; } push_item(((autoindex_config_rec *) d)->icon_list, cmd->info, to, cmd->path, iconbak); return NULL; } /* * Add description text for a filename pattern. If the pattern has * wildcards already (or we need to add them), add leading and * trailing wildcards to it to ensure substring processing. If the * pattern contains a '/' anywhere, force wildcard matching mode, * add a slash to the prefix so that "bar/bletch" won't be matched * by "foobar/bletch", and make a note that there's a delimiter; * the matching routine simplifies to just the actual filename * whenever it can. This allows definitions in parent directories * to be made for files in subordinate ones using relative paths. */ /* * Absent a strcasestr() function, we have to force wildcards on * systems for which "AAA" and "aaa" mean the same file. */ #ifdef CASE_BLIND_FILESYSTEM #define WILDCARDS_REQUIRED 1 #else #define WILDCARDS_REQUIRED 0 #endif static const char *add_desc(cmd_parms *cmd, void *d, const char *desc, const char *to) { autoindex_config_rec *dcfg = (autoindex_config_rec *) d; ai_desc_t *desc_entry; char *prefix = ""; desc_entry = (ai_desc_t *) apr_array_push(dcfg->desc_list); desc_entry->full_path = (ap_strchr_c(to, '/') == NULL) ? 0 : 1; desc_entry->wildcards = (WILDCARDS_REQUIRED || desc_entry->full_path || apr_fnmatch_test(to)); if (desc_entry->wildcards) { prefix = desc_entry->full_path ? "*/" : "*"; desc_entry->pattern = apr_pstrcat(dcfg->desc_list->pool, prefix, to, "*", NULL); } else { desc_entry->pattern = apr_pstrdup(dcfg->desc_list->pool, to); } desc_entry->description = apr_pstrdup(dcfg->desc_list->pool, desc); return NULL; } static const char *add_ignore(cmd_parms *cmd, void *d, const char *ext) { push_item(((autoindex_config_rec *) d)->ign_list, 0, ext, cmd->path, NULL); return NULL; } static const char *add_opts(cmd_parms *cmd, void *d, int argc, char *const argv[]) { int i; char *w; apr_int32_t opts; apr_int32_t opts_add; apr_int32_t opts_remove; char action; autoindex_config_rec *d_cfg = (autoindex_config_rec *) d; opts = d_cfg->opts; opts_add = d_cfg->incremented_opts; opts_remove = d_cfg->decremented_opts; for (i = 0; i < argc; i++) { int option = 0; w = argv[i]; if ((*w == '+') || (*w == '-')) { action = *(w++); } else { action = '\0'; } if (!strcasecmp(w, "FancyIndexing")) { option = FANCY_INDEXING; } else if (!strcasecmp(w, "FoldersFirst")) { option = FOLDERS_FIRST; } else if (!strcasecmp(w, "HTMLTable")) { option = TABLE_INDEXING; } else if (!strcasecmp(w, "IconsAreLinks")) { option = ICONS_ARE_LINKS; } else if (!strcasecmp(w, "IgnoreCase")) { option = IGNORE_CASE; } else if (!strcasecmp(w, "IgnoreClient")) { option = IGNORE_CLIENT; } else if (!strcasecmp(w, "ScanHTMLTitles")) { option = SCAN_HTML_TITLES; } else if (!strcasecmp(w, "SuppressColumnSorting")) { option = SUPPRESS_COLSORT; } else if (!strcasecmp(w, "SuppressDescription")) { option = SUPPRESS_DESC; } else if (!strcasecmp(w, "SuppressHTMLPreamble")) { option = SUPPRESS_PREAMBLE; } else if (!strcasecmp(w, "SuppressIcon")) { option = SUPPRESS_ICON; } else if (!strcasecmp(w, "SuppressLastModified")) { option = SUPPRESS_LAST_MOD; } else if (!strcasecmp(w, "SuppressSize")) { option = SUPPRESS_SIZE; } else if (!strcasecmp(w, "SuppressRules")) { option = SUPPRESS_RULES; } else if (!strcasecmp(w, "TrackModified")) { option = TRACK_MODIFIED; } else if (!strcasecmp(w, "VersionSort")) { option = VERSION_SORT; } else if (!strcasecmp(w, "XHTML")) { option = EMIT_XHTML; } else if (!strcasecmp(w, "ShowForbidden")) { option = SHOW_FORBIDDEN; } else if (!strcasecmp(w, "AddAltClass")) { option = ADDALTCLASS; } else if (!strcasecmp(w, "None")) { if (action != '\0') { return "Cannot combine '+' or '-' with 'None' keyword"; } opts = NO_OPTIONS; opts_add = 0; opts_remove = 0; } else if (!strcasecmp(w, "IconWidth")) { if (action != '-') { d_cfg->icon_width = DEFAULT_ICON_WIDTH; } else { d_cfg->icon_width = 0; } } else if (!strncasecmp(w, "IconWidth=", 10)) { if (action == '-') { return "Cannot combine '-' with IconWidth=n"; } d_cfg->icon_width = atoi(&w[10]); } else if (!strcasecmp(w, "IconHeight")) { if (action != '-') { d_cfg->icon_height = DEFAULT_ICON_HEIGHT; } else { d_cfg->icon_height = 0; } } else if (!strncasecmp(w, "IconHeight=", 11)) { if (action == '-') { return "Cannot combine '-' with IconHeight=n"; } d_cfg->icon_height = atoi(&w[11]); } else if (!strcasecmp(w, "NameWidth")) { if (action != '-') { return "NameWidth with no value may only appear as " "'-NameWidth'"; } d_cfg->name_width = DEFAULT_NAME_WIDTH; d_cfg->name_adjust = K_NOADJUST; } else if (!strncasecmp(w, "NameWidth=", 10)) { if (action == '-') { return "Cannot combine '-' with NameWidth=n"; } if (w[10] == '*') { d_cfg->name_adjust = K_ADJUST; } else { int width = atoi(&w[10]); if (width && (width < 5)) { return "NameWidth value must be greater than 5"; } d_cfg->name_width = width; d_cfg->name_adjust = K_NOADJUST; } } else if (!strcasecmp(w, "DescriptionWidth")) { if (action != '-') { return "DescriptionWidth with no value may only appear as " "'-DescriptionWidth'"; } d_cfg->desc_width = DEFAULT_DESC_WIDTH; d_cfg->desc_adjust = K_NOADJUST; } else if (!strncasecmp(w, "DescriptionWidth=", 17)) { if (action == '-') { return "Cannot combine '-' with DescriptionWidth=n"; } if (w[17] == '*') { d_cfg->desc_adjust = K_ADJUST; } else { int width = atoi(&w[17]); if (width && (width < 12)) { return "DescriptionWidth value must be greater than 12"; } d_cfg->desc_width = width; d_cfg->desc_adjust = K_NOADJUST; } } else if (!strncasecmp(w, "Type=", 5)) { d_cfg->ctype = apr_pstrdup(cmd->pool, &w[5]); } else if (!strncasecmp(w, "Charset=", 8)) { d_cfg->charset = apr_pstrdup(cmd->pool, &w[8]); } else if (!strcasecmp(w, "UseOldDateFormat")) { d_cfg->datetime_format = "%d-%b-%Y %H:%M"; } else { return "Invalid directory indexing option"; } if (action == '\0') { opts |= option; opts_add = 0; opts_remove = 0; } else if (action == '+') { opts_add |= option; opts_remove &= ~option; } else { opts_remove |= option; opts_add &= ~option; } } if ((opts & NO_OPTIONS) && (opts & ~NO_OPTIONS)) { return "Cannot combine other IndexOptions keywords with 'None'"; } d_cfg->incremented_opts = opts_add; d_cfg->decremented_opts = opts_remove; d_cfg->opts = opts; return NULL; } static const char *set_default_order(cmd_parms *cmd, void *m, const char *direction, const char *key) { autoindex_config_rec *d_cfg = (autoindex_config_rec *) m; if (!strcasecmp(direction, "Ascending")) { d_cfg->default_direction = D_ASCENDING; } else if (!strcasecmp(direction, "Descending")) { d_cfg->default_direction = D_DESCENDING; } else { return "First keyword must be 'Ascending' or 'Descending'"; } if (!strcasecmp(key, "Name")) { d_cfg->default_keyid = K_NAME; } else if (!strcasecmp(key, "Date")) { d_cfg->default_keyid = K_LAST_MOD; } else if (!strcasecmp(key, "Size")) { d_cfg->default_keyid = K_SIZE; } else if (!strcasecmp(key, "Description")) { d_cfg->default_keyid = K_DESC; } else { return "Second keyword must be 'Name', 'Date', 'Size', or " "'Description'"; } return NULL; } #define DIR_CMD_PERMS OR_INDEXES static const command_rec autoindex_cmds[] = { AP_INIT_ITERATE2("AddIcon", add_icon, BY_PATH, DIR_CMD_PERMS, "an icon URL followed by one or more filenames"), AP_INIT_ITERATE2("AddIconByType", add_icon, BY_TYPE, DIR_CMD_PERMS, "an icon URL followed by one or more MIME types"), AP_INIT_ITERATE2("AddIconByEncoding", add_icon, BY_ENCODING, DIR_CMD_PERMS, "an icon URL followed by one or more content encodings"), AP_INIT_ITERATE2("AddAlt", add_alt, BY_PATH, DIR_CMD_PERMS, "alternate descriptive text followed by one or more " "filenames"), AP_INIT_ITERATE2("AddAltByType", add_alt, BY_TYPE, DIR_CMD_PERMS, "alternate descriptive text followed by one or more MIME " "types"), AP_INIT_ITERATE2("AddAltByEncoding", add_alt, BY_ENCODING, DIR_CMD_PERMS, "alternate descriptive text followed by one or more " "content encodings"), AP_INIT_TAKE_ARGV("IndexOptions", add_opts, NULL, DIR_CMD_PERMS, "one or more index options [+|-][]"), AP_INIT_TAKE2("IndexOrderDefault", set_default_order, NULL, DIR_CMD_PERMS, "{Ascending,Descending} {Name,Size,Description,Date}"), AP_INIT_ITERATE("IndexIgnore", add_ignore, NULL, DIR_CMD_PERMS, "one or more file extensions"), AP_INIT_FLAG("IndexIgnoreReset", ap_set_flag_slot, (void *)APR_OFFSETOF(autoindex_config_rec, ign_noinherit), DIR_CMD_PERMS, "Reset the inherited list of IndexIgnore filenames"), AP_INIT_ITERATE2("AddDescription", add_desc, BY_PATH, DIR_CMD_PERMS, "Descriptive text followed by one or more filenames"), AP_INIT_TAKE1("HeaderName", ap_set_string_slot, (void *)APR_OFFSETOF(autoindex_config_rec, header), DIR_CMD_PERMS, "a filename"), AP_INIT_TAKE1("ReadmeName", ap_set_string_slot, (void *)APR_OFFSETOF(autoindex_config_rec, readme), DIR_CMD_PERMS, "a filename"), AP_INIT_RAW_ARGS("FancyIndexing", ap_set_deprecated, NULL, OR_ALL, "The FancyIndexing directive is no longer supported. " "Use IndexOptions FancyIndexing."), AP_INIT_TAKE1("DefaultIcon", ap_set_string_slot, (void *)APR_OFFSETOF(autoindex_config_rec, default_icon), DIR_CMD_PERMS, "an icon URL"), AP_INIT_TAKE1("IndexStyleSheet", ap_set_string_slot, (void *)APR_OFFSETOF(autoindex_config_rec, style_sheet), DIR_CMD_PERMS, "URL to style sheet"), AP_INIT_TAKE1("IndexHeadInsert", ap_set_string_slot, (void *)APR_OFFSETOF(autoindex_config_rec, head_insert), DIR_CMD_PERMS, "String to insert in HTML HEAD section"), {NULL} }; static void *create_autoindex_config(apr_pool_t *p, char *dummy) { autoindex_config_rec *new = (autoindex_config_rec *) apr_pcalloc(p, sizeof(autoindex_config_rec)); new->icon_width = 0; new->icon_height = 0; new->name_width = DEFAULT_NAME_WIDTH; new->name_adjust = K_UNSET; new->desc_width = DEFAULT_DESC_WIDTH; new->desc_adjust = K_UNSET; new->icon_list = apr_array_make(p, 4, sizeof(struct item)); new->alt_list = apr_array_make(p, 4, sizeof(struct item)); new->desc_list = apr_array_make(p, 4, sizeof(ai_desc_t)); new->ign_list = apr_array_make(p, 4, sizeof(struct item)); new->opts = OPTION_UNSET; new->incremented_opts = 0; new->decremented_opts = 0; new->default_keyid = '\0'; new->default_direction = '\0'; return (void *) new; } static void *merge_autoindex_configs(apr_pool_t *p, void *basev, void *addv) { autoindex_config_rec *new; autoindex_config_rec *base = (autoindex_config_rec *) basev; autoindex_config_rec *add = (autoindex_config_rec *) addv; new = (autoindex_config_rec *) apr_pcalloc(p, sizeof(autoindex_config_rec)); new->default_icon = add->default_icon ? add->default_icon : base->default_icon; new->style_sheet = add->style_sheet ? add->style_sheet : base->style_sheet; new->head_insert = add->head_insert ? add->head_insert : base->head_insert; new->header = add->header ? add->header : base->header; new->readme = add->readme ? add->readme : base->readme; new->icon_height = add->icon_height ? add->icon_height : base->icon_height; new->icon_width = add->icon_width ? add->icon_width : base->icon_width; new->ctype = add->ctype ? add->ctype : base->ctype; new->charset = add->charset ? add->charset : base->charset; new->datetime_format = add->datetime_format ? add->datetime_format : base->datetime_format; new->alt_list = apr_array_append(p, add->alt_list, base->alt_list); new->desc_list = apr_array_append(p, add->desc_list, base->desc_list); new->icon_list = apr_array_append(p, add->icon_list, base->icon_list); new->ign_list = add->ign_noinherit ? add->ign_list : apr_array_append(p, add->ign_list, base->ign_list); if (add->opts == NO_OPTIONS) { /* * If the current directory explicitly says 'no options' then we also * clear any incremental mods from being inheritable further down. */ new->opts = NO_OPTIONS; new->incremented_opts = 0; new->decremented_opts = 0; } else { /* * If there were any nonincremental options selected for * this directory, they dominate and we don't inherit *anything.* * Contrariwise, we *do* inherit if the only settings here are * incremental ones. */ if (add->opts == OPTION_UNSET) { new->incremented_opts = (base->incremented_opts | add->incremented_opts) & ~add->decremented_opts; new->decremented_opts = (base->decremented_opts | add->decremented_opts); /* * We may have incremental settings, so make sure we don't * inadvertently inherit an IndexOptions None from above. */ new->opts = (base->opts & ~NO_OPTIONS); } else { /* * There are local nonincremental settings, which clear * all inheritance from above. They *are* the new base settings. */ new->opts = add->opts; } /* * We're guaranteed that there'll be no overlap between * the add-options and the remove-options. */ new->opts |= new->incremented_opts; new->opts &= ~new->decremented_opts; } /* * Inherit the NameWidth settings if there aren't any specific to * the new location; otherwise we'll end up using the defaults set in the * config-rec creation routine. */ if (add->name_adjust == K_UNSET) { new->name_width = base->name_width; new->name_adjust = base->name_adjust; } else { new->name_width = add->name_width; new->name_adjust = add->name_adjust; } /* * Likewise for DescriptionWidth. */ if (add->desc_adjust == K_UNSET) { new->desc_width = base->desc_width; new->desc_adjust = base->desc_adjust; } else { new->desc_width = add->desc_width; new->desc_adjust = add->desc_adjust; } new->default_keyid = add->default_keyid ? add->default_keyid : base->default_keyid; new->default_direction = add->default_direction ? add->default_direction : base->default_direction; return new; } /**************************************************************** * * Looking things up in config entries... */ /* Structure used to hold entries when we're actually building an index */ struct ent { char *name; char *icon; char *alt; char *desc; apr_off_t size; apr_time_t lm; struct ent *next; int ascending, ignore_case, version_sort; char key; int isdir; }; static char *find_item(const char *content_type, const char *content_encoding, char *path, apr_array_header_t *list, int path_only) { struct item *items = (struct item *) list->elts; int i; for (i = 0; i < list->nelts; ++i) { struct item *p = &items[i]; /* Special cased for ^^DIRECTORY^^ and ^^BLANKICON^^ */ if ((path[0] == '^') || (!ap_strcmp_match(path, p->apply_path))) { if (!*(p->apply_to)) { return p->data; } else if (p->type == BY_PATH || path[0] == '^') { if (!ap_strcmp_match(path, p->apply_to)) { return p->data; } } else if (!path_only) { if (!content_encoding) { if (p->type == BY_TYPE) { if (content_type && !ap_strcasecmp_match(content_type, p->apply_to)) { return p->data; } } } else { if (p->type == BY_ENCODING) { if (!ap_strcasecmp_match(content_encoding, p->apply_to)) { return p->data; } } } } } } return NULL; } static char *find_item_by_request(request_rec *r, apr_array_header_t *list, int path_only) { return find_item(ap_field_noparam(r->pool, r->content_type), r->content_encoding, r->filename, list, path_only); } #define find_icon(d,p,t) find_item_by_request(p,d->icon_list,t) #define find_alt(d,p,t) find_item_by_request(p,d->alt_list,t) #define find_default_icon(d,n) find_item(NULL, NULL, n, d->icon_list, 1) #define find_default_alt(d,n) find_item(NULL, NULL, n, d->alt_list, 1) /* * Look through the list of pattern/description pairs and return the first one * if any) that matches the filename in the request. If multiple patterns * match, only the first one is used; since the order in the array is the * same as the order in which directives were processed, earlier matching * directives will dominate. */ #ifdef CASE_BLIND_FILESYSTEM #define MATCH_FLAGS APR_FNM_CASE_BLIND #else #define MATCH_FLAGS 0 #endif static char *find_desc(autoindex_config_rec *dcfg, const char *filename_full) { int i; ai_desc_t *list = (ai_desc_t *) dcfg->desc_list->elts; const char *filename_only; const char *filename; /* * If the filename includes a path, extract just the name itself * for the simple matches. */ if ((filename_only = ap_strrchr_c(filename_full, '/')) == NULL) { filename_only = filename_full; } else { filename_only++; } for (i = 0; i < dcfg->desc_list->nelts; ++i) { ai_desc_t *tuple = &list[i]; int found; /* * Only use the full-path filename if the pattern contains '/'s. */ filename = (tuple->full_path) ? filename_full : filename_only; /* * Make the comparison using the cheapest method; only do * wildcard checking if we must. */ if (tuple->wildcards) { found = (apr_fnmatch(tuple->pattern, filename, MATCH_FLAGS) == 0); } else { found = (ap_strstr_c(filename, tuple->pattern) != NULL); } if (found) { return tuple->description; } } return NULL; } static int ignore_entry(autoindex_config_rec *d, char *path) { apr_array_header_t *list = d->ign_list; struct item *items = (struct item *) list->elts; char *tt; int i; if ((tt = strrchr(path, '/')) == NULL) { tt = path; } else { tt++; } for (i = 0; i < list->nelts; ++i) { struct item *p = &items[i]; char *ap; if ((ap = strrchr(p->apply_to, '/')) == NULL) { ap = p->apply_to; } else { ap++; } #ifndef CASE_BLIND_FILESYSTEM if (!ap_strcmp_match(path, p->apply_path) && !ap_strcmp_match(tt, ap)) { return 1; } #else /* !CASE_BLIND_FILESYSTEM */ /* * On some platforms, the match must be case-blind. This is really * a factor of the filesystem involved, but we can't detect that * reliably - so we have to granularise at the OS level. */ if (!ap_strcasecmp_match(path, p->apply_path) && !ap_strcasecmp_match(tt, ap)) { return 1; } #endif /* !CASE_BLIND_FILESYSTEM */ } return 0; } /***************************************************************** * * Actually generating output */ /* * Elements of the emitted document: * Preamble * Emitted unless SUPPRESS_PREAMBLE is set AND ap_run_sub_req * succeeds for the (content_type == text/html) header file. * Header file * Emitted if found (and able). * H1 tag line * Emitted if a header file is NOT emitted. * Directory stuff * Always emitted. * HR * Emitted if FANCY_INDEXING is set. * Readme file * Emitted if found (and able). * ServerSig * Emitted if ServerSignature is not Off AND a readme file * is NOT emitted. * Postamble * Emitted unless SUPPRESS_PREAMBLE is set AND ap_run_sub_req * succeeds for the (content_type == text/html) readme file. */ /* * emit a plain text file */ static void do_emit_plain(request_rec *r, apr_file_t *f) { char buf[AP_IOBUFSIZE + 1]; int ch; apr_size_t i, c, n; apr_status_t rv; ap_rputs("
    \n", r);
        while (!apr_file_eof(f)) {
            do {
                n = sizeof(char) * AP_IOBUFSIZE;
                rv = apr_file_read(f, buf, &n);
            } while (APR_STATUS_IS_EINTR(rv));
            if (n == 0 || rv != APR_SUCCESS) {
                /* ###: better error here? */
                break;
            }
            buf[n] = '\0';
            c = 0;
            while (c < n) {
                for (i = c; i < n; i++) {
                    if (buf[i] == '<' || buf[i] == '>' || buf[i] == '&') {
                        break;
                    }
                }
                ch = buf[i];
                buf[i] = '\0';
                ap_rputs(&buf[c], r);
                if (ch == '<') {
                    ap_rputs("<", r);
                }
                else if (ch == '>') {
                    ap_rputs(">", r);
                }
                else if (ch == '&') {
                    ap_rputs("&", r);
                }
                c = i + 1;
            }
        }
        ap_rputs("
    \n", r); } /* * Handle the preamble through the H1 tag line, inclusive. Locate * the file with a subrequests. Process text/html documents by actually * running the subrequest; text/xxx documents get copied verbatim, * and any other content type is ignored. This means that a non-text * document (such as HEADER.gif) might get multiviewed as the result * instead of a text document, meaning nothing will be displayed, but * oh well. */ static void emit_head(request_rec *r, char *header_fname, int suppress_amble, int emit_xhtml, char *title) { autoindex_config_rec *d; apr_table_t *hdrs = r->headers_in; apr_file_t *f = NULL; request_rec *rr = NULL; int emit_amble = 1; int emit_H1 = 1; const char *r_accept; const char *r_accept_enc; /* * If there's a header file, send a subrequest to look for it. If it's * found and html do the subrequest, otherwise handle it */ r_accept = apr_table_get(hdrs, "Accept"); r_accept_enc = apr_table_get(hdrs, "Accept-Encoding"); apr_table_setn(hdrs, "Accept", "text/html, text/plain"); apr_table_unset(hdrs, "Accept-Encoding"); if ((header_fname != NULL) && r->args) { header_fname = apr_pstrcat(r->pool, header_fname, "?", r->args, NULL); } if ((header_fname != NULL) && (rr = ap_sub_req_lookup_uri(header_fname, r, r->output_filters)) && (rr->status == HTTP_OK) && (rr->filename != NULL) && (rr->finfo.filetype == APR_REG)) { /* * Check for the two specific cases we allow: text/html and * text/anything-else. The former is allowed to be processed for * SSIs. */ if (rr->content_type != NULL) { if (response_is_html(rr)) { ap_filter_t *f; /* Hope everything will work... */ emit_amble = 0; emit_H1 = 0; if (! suppress_amble) { emit_preamble(r, emit_xhtml, title); } /* This is a hack, but I can't find any better way to do this. * The problem is that we have already created the sub-request, * but we just inserted the OLD_WRITE filter, and the * sub-request needs to pass its data through the OLD_WRITE * filter, or things go horribly wrong (missing data, data in * the wrong order, etc). To fix it, if you create a * sub-request and then insert the OLD_WRITE filter before you * run the request, you need to make sure that the sub-request * data goes through the OLD_WRITE filter. Just steal this * code. The long-term solution is to remove the ap_r* * functions. */ for (f=rr->output_filters; f->frec != ap_subreq_core_filter_handle; f = f->next); f->next = r->output_filters; /* * If there's a problem running the subrequest, display the * preamble if we didn't do it before -- the header file * didn't get displayed. */ if (ap_run_sub_req(rr) != OK) { /* It didn't work */ emit_amble = suppress_amble; emit_H1 = 1; } } else if (!strncasecmp("text/", rr->content_type, 5)) { /* * If we can open the file, prefix it with the preamble * regardless; since we'll be sending a
     block around
                     * the file's contents, any HTML header it had won't end up
                     * where it belongs.
                     */
                    if (apr_file_open(&f, rr->filename, APR_READ,
                                      APR_OS_DEFAULT, r->pool) == APR_SUCCESS) {
                        emit_preamble(r, emit_xhtml, title);
                        emit_amble = 0;
                        do_emit_plain(r, f);
                        apr_file_close(f);
                        emit_H1 = 0;
                    }
                }
            }
        }
    
        if (r_accept) {
            apr_table_setn(hdrs, "Accept", r_accept);
        }
        else {
            apr_table_unset(hdrs, "Accept");
        }
    
        if (r_accept_enc) {
            apr_table_setn(hdrs, "Accept-Encoding", r_accept_enc);
        }
    
        if (emit_amble) {
            emit_preamble(r, emit_xhtml, title);
        }
    
        d = (autoindex_config_rec *) ap_get_module_config(r->per_dir_config, &autoindex_module);
    
        if (emit_H1) {
            if (d->style_sheet != NULL) {
                /* Insert style id if stylesheet used */
                ap_rvputs(r, "  

    Index of ", title, "

    \n", NULL); } else { ap_rvputs(r, "

    Index of ", title, "

    \n", NULL); } } if (rr != NULL) { ap_destroy_sub_req(rr); } } /* * Handle the Readme file through the postamble, inclusive. Locate * the file with a subrequests. Process text/html documents by actually * running the subrequest; text/xxx documents get copied verbatim, * and any other content type is ignored. This means that a non-text * document (such as FOOTER.gif) might get multiviewed as the result * instead of a text document, meaning nothing will be displayed, but * oh well. */ static void emit_tail(request_rec *r, char *readme_fname, int suppress_amble) { apr_file_t *f = NULL; request_rec *rr = NULL; int suppress_post = 0; int suppress_sig = 0; /* * If there's a readme file, send a subrequest to look for it. If it's * found and a text file, handle it -- otherwise fall through and * pretend there's nothing there. */ if ((readme_fname != NULL) && (rr = ap_sub_req_lookup_uri(readme_fname, r, r->output_filters)) && (rr->status == HTTP_OK) && (rr->filename != NULL) && rr->finfo.filetype == APR_REG) { /* * Check for the two specific cases we allow: text/html and * text/anything-else. The former is allowed to be processed for * SSIs. */ if (rr->content_type != NULL) { if (response_is_html(rr)) { ap_filter_t *f; for (f=rr->output_filters; f->frec != ap_subreq_core_filter_handle; f = f->next); f->next = r->output_filters; if (ap_run_sub_req(rr) == OK) { /* worked... */ suppress_sig = 1; suppress_post = suppress_amble; } } else if (!strncasecmp("text/", rr->content_type, 5)) { /* * If we can open the file, suppress the signature. */ if (apr_file_open(&f, rr->filename, APR_READ, APR_OS_DEFAULT, r->pool) == APR_SUCCESS) { do_emit_plain(r, f); apr_file_close(f); suppress_sig = 1; } } } } if (!suppress_sig) { ap_rputs(ap_psignature("", r), r); } if (!suppress_post) { ap_rputs("\n", r); } if (rr != NULL) { ap_destroy_sub_req(rr); } } static char *find_title(request_rec *r) { char titlebuf[MAX_STRING_LEN], *find = ""; apr_file_t *thefile = NULL; int x, y, p; apr_size_t n; if (r->status != HTTP_OK) { return NULL; } if ((r->content_type != NULL) && (response_is_html(r) || !strcmp(r->content_type, INCLUDES_MAGIC_TYPE)) && !r->content_encoding) { if (apr_file_open(&thefile, r->filename, APR_READ, APR_OS_DEFAULT, r->pool) != APR_SUCCESS) { return NULL; } n = sizeof(char) * (MAX_STRING_LEN - 1); apr_file_read(thefile, titlebuf, &n); if (n == 0) { apr_file_close(thefile); return NULL; } titlebuf[n] = '\0'; for (x = 0, p = 0; titlebuf[x]; x++) { if (apr_tolower(titlebuf[x]) == find[p]) { if (!find[++p]) { if ((p = ap_ind(&titlebuf[++x], '<')) != -1) { titlebuf[x + p] = '\0'; } /* Scan for line breaks for Tanmoy's secretary */ for (y = x; titlebuf[y]; y++) { if ((titlebuf[y] == CR) || (titlebuf[y] == LF)) { if (y == x) { x++; } else { titlebuf[y] = ' '; } } } apr_file_close(thefile); return apr_pstrdup(r->pool, &titlebuf[x]); } } else { p = 0; } } apr_file_close(thefile); } return NULL; } static struct ent *make_parent_entry(apr_int32_t autoindex_opts, autoindex_config_rec *d, request_rec *r, char keyid, char direction) { struct ent *p = (struct ent *) apr_pcalloc(r->pool, sizeof(struct ent)); char *testpath; /* * p->name is now the true parent URI. * testpath is a crafted lie, so that the syntax '/some/..' * (or simply '..')be used to describe 'up' from '/some/' * when processeing IndexIgnore, and Icon|Alt|Desc configs. */ /* The output has always been to the parent. Don't make ourself * our own parent (worthless cyclical reference). */ if (!(p->name = ap_make_full_path(r->pool, r->uri, "../"))) { return (NULL); } ap_getparents(p->name); if (!*p->name) { return (NULL); } /* IndexIgnore has always compared "/thispath/.." */ testpath = ap_make_full_path(r->pool, r->filename, ".."); if (ignore_entry(d, testpath)) { return (NULL); } p->size = -1; p->lm = -1; p->key = apr_toupper(keyid); p->ascending = (apr_toupper(direction) == D_ASCENDING); p->version_sort = autoindex_opts & VERSION_SORT; if (autoindex_opts & FANCY_INDEXING) { if (!(p->icon = find_default_icon(d, testpath))) { p->icon = find_default_icon(d, "^^DIRECTORY^^"); } if (!(p->alt = find_default_alt(d, testpath))) { if (!(p->alt = find_default_alt(d, "^^DIRECTORY^^"))) { /* Special alt text for parent dir to distinguish it from other directories this is essential when trying to style this dir entry via AddAltClass */ p->alt = "PARENTDIR"; } } p->desc = find_desc(d, testpath); } return p; } static struct ent *make_autoindex_entry(const apr_finfo_t *dirent, int autoindex_opts, autoindex_config_rec *d, request_rec *r, char keyid, char direction, const char *pattern) { request_rec *rr; struct ent *p; int show_forbidden = 0; /* Dot is ignored, Parent is handled by make_parent_entry() */ if ((dirent->name[0] == '.') && (!dirent->name[1] || ((dirent->name[1] == '.') && !dirent->name[2]))) return (NULL); /* * On some platforms, the match must be case-blind. This is really * a factor of the filesystem involved, but we can't detect that * reliably - so we have to granularise at the OS level. */ if (pattern && (apr_fnmatch(pattern, dirent->name, APR_FNM_NOESCAPE | APR_FNM_PERIOD #ifdef CASE_BLIND_FILESYSTEM | APR_FNM_CASE_BLIND #endif ) != APR_SUCCESS)) { return (NULL); } if (ignore_entry(d, ap_make_full_path(r->pool, r->filename, dirent->name))) { return (NULL); } if (!(rr = ap_sub_req_lookup_dirent(dirent, r, AP_SUBREQ_NO_ARGS, NULL))) { return (NULL); } if ((autoindex_opts & SHOW_FORBIDDEN) && (rr->status == HTTP_UNAUTHORIZED || rr->status == HTTP_FORBIDDEN)) { show_forbidden = 1; } if ((rr->finfo.filetype != APR_DIR && rr->finfo.filetype != APR_REG) || !(rr->status == OK || ap_is_HTTP_SUCCESS(rr->status) || ap_is_HTTP_REDIRECT(rr->status) || show_forbidden == 1)) { ap_destroy_sub_req(rr); return (NULL); } p = (struct ent *) apr_pcalloc(r->pool, sizeof(struct ent)); if (dirent->filetype == APR_DIR) { p->name = apr_pstrcat(r->pool, dirent->name, "/", NULL); } else { p->name = apr_pstrdup(r->pool, dirent->name); } p->size = -1; p->icon = NULL; p->alt = NULL; p->desc = NULL; p->lm = -1; p->isdir = 0; p->key = apr_toupper(keyid); p->ascending = (apr_toupper(direction) == D_ASCENDING); p->version_sort = !!(autoindex_opts & VERSION_SORT); p->ignore_case = !!(autoindex_opts & IGNORE_CASE); if (autoindex_opts & (FANCY_INDEXING | TABLE_INDEXING)) { p->lm = rr->finfo.mtime; if (dirent->filetype == APR_DIR) { if (autoindex_opts & FOLDERS_FIRST) { p->isdir = 1; } rr->filename = ap_make_dirstr_parent (rr->pool, rr->filename); /* omit the trailing slash (1.3 compat) */ rr->filename[strlen(rr->filename) - 1] = '\0'; if (!(p->icon = find_icon(d, rr, 1))) { p->icon = find_default_icon(d, "^^DIRECTORY^^"); } if (!(p->alt = find_alt(d, rr, 1))) { if (!(p->alt = find_default_alt(d, "^^DIRECTORY^^"))) { p->alt = "DIR"; } } } else { p->icon = find_icon(d, rr, 0); p->alt = find_alt(d, rr, 0); p->size = rr->finfo.size; } p->desc = find_desc(d, rr->filename); if ((!p->desc) && (autoindex_opts & SCAN_HTML_TITLES)) { p->desc = apr_pstrdup(r->pool, find_title(rr)); } } ap_destroy_sub_req(rr); /* * We don't need to take any special action for the file size key. * If we did, it would go here. */ if (keyid == K_LAST_MOD) { if (p->lm < 0) { p->lm = 0; } } return (p); } static char *terminate_description(autoindex_config_rec *d, char *desc, apr_int32_t autoindex_opts, int desc_width) { int maxsize = desc_width; int x; /* * If there's no DescriptionWidth in effect, default to the old * behaviour of adjusting the description size depending upon * what else is being displayed. Otherwise, stick with the * setting. */ if (d->desc_adjust == K_UNSET) { if (autoindex_opts & SUPPRESS_ICON) { maxsize += 6; } if (autoindex_opts & SUPPRESS_LAST_MOD) { maxsize += 19; } if (autoindex_opts & SUPPRESS_SIZE) { maxsize += 7; } } for (x = 0; desc[x] && ((maxsize > 0) || (desc[x] == '<')); x++) { if (desc[x] == '<') { while (desc[x] != '>') { if (!desc[x]) { maxsize = 0; break; } ++x; } } else if (desc[x] == '&') { /* entities like ä count as one character */ --maxsize; for ( ; desc[x] != ';'; ++x) { if (desc[x] == '\0') { maxsize = 0; break; } } } else { --maxsize; } } if (!maxsize && desc[x] != '\0') { desc[x - 1] = '>'; /* Grump. */ desc[x] = '\0'; /* Double Grump! */ } return desc; } /* * Emit the anchor for the specified field. If a field is the key for the * current request, the link changes its meaning to reverse the order when * selected again. Non-active fields always start in ascending order. */ static void emit_link(request_rec *r, const char *anchor, char column, char curkey, char curdirection, const char *colargs, int nosort) { if (!nosort) { char qvalue[9]; qvalue[0] = '?'; qvalue[1] = 'C'; qvalue[2] = '='; qvalue[3] = column; qvalue[4] = ';'; qvalue[5] = 'O'; qvalue[6] = '='; /* reverse? */ qvalue[7] = ((curkey == column) && (curdirection == D_ASCENDING)) ? D_DESCENDING : D_ASCENDING; qvalue[8] = '\0'; ap_rvputs(r, "<a href=\"", qvalue, colargs ? colargs : "", "\">", anchor, "</a>", NULL); } else { ap_rputs(anchor, r); } } static void output_directories(struct ent **ar, int n, autoindex_config_rec *d, request_rec *r, apr_int32_t autoindex_opts, char keyid, char direction, const char *colargs) { int x; apr_size_t rv; char *tp; int static_columns = !!(autoindex_opts & SUPPRESS_COLSORT); apr_pool_t *scratch; int name_width; int desc_width; char *datetime_format; char *name_scratch; char *pad_scratch; char *breakrow = ""; apr_pool_create(&scratch, r->pool); name_width = d->name_width; desc_width = d->desc_width; datetime_format = d->datetime_format ? d->datetime_format : "%Y-%m-%d %H:%M"; if ((autoindex_opts & (FANCY_INDEXING | TABLE_INDEXING)) == FANCY_INDEXING) { if (d->name_adjust == K_ADJUST) { for (x = 0; x < n; x++) { int t = strlen(ar[x]->name); if (t > name_width) { name_width = t; } } } if (d->desc_adjust == K_ADJUST) { for (x = 0; x < n; x++) { if (ar[x]->desc != NULL) { int t = strlen(ar[x]->desc); if (t > desc_width) { desc_width = t; } } } } } name_scratch = apr_palloc(r->pool, name_width + 1); pad_scratch = apr_palloc(r->pool, name_width + 1); memset(pad_scratch, ' ', name_width); pad_scratch[name_width] = '\0'; if (autoindex_opts & TABLE_INDEXING) { int cols = 1; if (d->style_sheet != NULL) { /* Emit table with style id */ ap_rputs(" <table id=\"indexlist\">\n <tr class=\"indexhead\">", r); } else { ap_rputs(" <table>\n <tr>", r); } if (!(autoindex_opts & SUPPRESS_ICON)) { ap_rvputs(r, "<th", (d->style_sheet != NULL) ? " class=\"indexcolicon\">" : " valign=\"top\">", NULL); if ((tp = find_default_icon(d, "^^BLANKICON^^"))) { ap_rvputs(r, "<img src=\"", ap_escape_html(scratch, tp), "\" alt=\"[ICO]\"", NULL); if (d->icon_width) { ap_rprintf(r, " width=\"%d\"", d->icon_width); } if (d->icon_height) { ap_rprintf(r, " height=\"%d\"", d->icon_height); } if (autoindex_opts & EMIT_XHTML) { ap_rputs(" /", r); } ap_rputs("></th>", r); } else { ap_rputs(" </th>", r); } ++cols; } ap_rvputs(r, "<th", (d->style_sheet != NULL) ? " class=\"indexcolname\">" : ">", NULL); emit_link(r, "Name", K_NAME, keyid, direction, colargs, static_columns); if (!(autoindex_opts & SUPPRESS_LAST_MOD)) { ap_rvputs(r, "</th><th", (d->style_sheet != NULL) ? " class=\"indexcollastmod\">" : ">", NULL); emit_link(r, "Last modified", K_LAST_MOD, keyid, direction, colargs, static_columns); ++cols; } if (!(autoindex_opts & SUPPRESS_SIZE)) { ap_rvputs(r, "</th><th", (d->style_sheet != NULL) ? " class=\"indexcolsize\">" : ">", NULL); emit_link(r, "Size", K_SIZE, keyid, direction, colargs, static_columns); ++cols; } if (!(autoindex_opts & SUPPRESS_DESC)) { ap_rvputs(r, "</th><th", (d->style_sheet != NULL) ? " class=\"indexcoldesc\">" : ">", NULL); emit_link(r, "Description", K_DESC, keyid, direction, colargs, static_columns); ++cols; } if (!(autoindex_opts & SUPPRESS_RULES)) { breakrow = apr_psprintf(r->pool, " <tr%s><th colspan=\"%d\">" "<hr%s></th></tr>\n", (d->style_sheet != NULL) ? " class=\"indexbreakrow\"" : "", cols, (autoindex_opts & EMIT_XHTML) ? " /" : ""); } ap_rvputs(r, "</th></tr>\n", breakrow, NULL); } else if (autoindex_opts & FANCY_INDEXING) { ap_rputs("<pre>", r); if (!(autoindex_opts & SUPPRESS_ICON)) { if ((tp = find_default_icon(d, "^^BLANKICON^^"))) { ap_rvputs(r, "<img src=\"", ap_escape_html(scratch, tp), "\" alt=\"Icon \"", NULL); if (d->icon_width) { ap_rprintf(r, " width=\"%d\"", d->icon_width); } if (d->icon_height) { ap_rprintf(r, " height=\"%d\"", d->icon_height); } if (autoindex_opts & EMIT_XHTML) { ap_rputs(" /", r); } ap_rputs("> ", r); } else { ap_rputs(" ", r); } } emit_link(r, "Name", K_NAME, keyid, direction, colargs, static_columns); ap_rputs(pad_scratch + 4, r); /* * Emit the guaranteed-at-least-one-space-between-columns byte. */ ap_rputs(" ", r); if (!(autoindex_opts & SUPPRESS_LAST_MOD)) { emit_link(r, "Last modified", K_LAST_MOD, keyid, direction, colargs, static_columns); ap_rputs(" ", r); } if (!(autoindex_opts & SUPPRESS_SIZE)) { emit_link(r, "Size", K_SIZE, keyid, direction, colargs, static_columns); ap_rputs(" ", r); } if (!(autoindex_opts & SUPPRESS_DESC)) { emit_link(r, "Description", K_DESC, keyid, direction, colargs, static_columns); } if (!(autoindex_opts & SUPPRESS_RULES)) { ap_rputs("<hr", r); if (autoindex_opts & EMIT_XHTML) { ap_rputs(" /", r); } ap_rputs(">", r); } else { ap_rputc('\n', r); } } else { ap_rputs("<ul>", r); } for (x = 0; x < n; x++) { char *anchor, *t, *t2; int nwidth; apr_pool_clear(scratch); t = ar[x]->name; anchor = ap_escape_html(scratch, ap_os_escape_path(scratch, t, 0)); if (!x && t[0] == '/') { t2 = "Parent Directory"; } else { t2 = t; } if (autoindex_opts & TABLE_INDEXING) { /* Even/Odd rows for IndexStyleSheet */ if (d->style_sheet != NULL) { if (ar[x]->alt && (autoindex_opts & ADDALTCLASS)) { /* Include alt text in class name, distinguish between odd and even rows */ char *altclass = apr_pstrdup(scratch, ar[x]->alt); ap_str_tolower(altclass); ap_rvputs(r, " <tr class=\"", ( x & 0x1) ? "odd-" : "even-", altclass, "\">", NULL); } else { /* Distinguish between odd and even rows */ ap_rvputs(r, " <tr class=\"", ( x & 0x1) ? "odd" : "even", "\">", NULL); } } else { ap_rputs("<tr>", r); } if (!(autoindex_opts & SUPPRESS_ICON)) { ap_rvputs(r, "<td", (d->style_sheet != NULL) ? " class=\"indexcolicon\">" : " valign=\"top\">", NULL); if (autoindex_opts & ICONS_ARE_LINKS) { ap_rvputs(r, "<a href=\"", anchor, "\">", NULL); } if ((ar[x]->icon) || d->default_icon) { ap_rvputs(r, "<img src=\"", ap_escape_html(scratch, ar[x]->icon ? ar[x]->icon : d->default_icon), "\" alt=\"[", (ar[x]->alt ? ar[x]->alt : " "), "]\"", NULL); if (d->icon_width) { ap_rprintf(r, " width=\"%d\"", d->icon_width); } if (d->icon_height) { ap_rprintf(r, " height=\"%d\"", d->icon_height); } if (autoindex_opts & EMIT_XHTML) { ap_rputs(" /", r); } ap_rputs(">", r); } else { ap_rputs(" ", r); } if (autoindex_opts & ICONS_ARE_LINKS) { ap_rputs("</a></td>", r); } else { ap_rputs("</td>", r); } } if (d->name_adjust == K_ADJUST) { ap_rvputs(r, "<td", (d->style_sheet != NULL) ? " class=\"indexcolname\">" : ">", "<a href=\"", anchor, "\">", ap_escape_html(scratch, t2), "</a>", NULL); } else { nwidth = strlen(t2); if (nwidth > name_width) { memcpy(name_scratch, t2, name_width - 3); name_scratch[name_width - 3] = '.'; name_scratch[name_width - 2] = '.'; name_scratch[name_width - 1] = '>'; name_scratch[name_width] = 0; t2 = name_scratch; nwidth = name_width; } ap_rvputs(r, "<td", (d->style_sheet != NULL) ? " class=\"indexcolname\">" : ">", "<a href=\"", anchor, "\">", ap_escape_html(scratch, t2), "</a>", pad_scratch + nwidth, NULL); } if (!(autoindex_opts & SUPPRESS_LAST_MOD)) { if (ar[x]->lm != -1) { char time_str[32]; apr_time_exp_t ts; apr_time_exp_lt(&ts, ar[x]->lm); apr_strftime(time_str, &rv, sizeof(time_str), datetime_format, &ts); ap_rvputs(r, "</td><td", (d->style_sheet != NULL) ? " class=\"indexcollastmod\">" : " align=\"right\">", time_str, " ", NULL); } else { ap_rvputs(r, "</td><td", (d->style_sheet != NULL) ? " class=\"indexcollastmod\"> " : "> ", NULL); } } if (!(autoindex_opts & SUPPRESS_SIZE)) { char buf[5]; ap_rvputs(r, "</td><td", (d->style_sheet != NULL) ? " class=\"indexcolsize\">" : " align=\"right\">", apr_strfsize(ar[x]->size, buf), NULL); } if (!(autoindex_opts & SUPPRESS_DESC)) { if (ar[x]->desc) { if (d->desc_adjust == K_ADJUST) { ap_rvputs(r, "</td><td", (d->style_sheet != NULL) ? " class=\"indexcoldesc\">" : ">", ar[x]->desc, NULL); } else { ap_rvputs(r, "</td><td", (d->style_sheet != NULL) ? " class=\"indexcoldesc\">" : ">", terminate_description(d, ar[x]->desc, autoindex_opts, desc_width), NULL); } } else { ap_rvputs(r, "</td><td", (d->style_sheet != NULL) ? " class=\"indexcoldesc\">" : ">", " ", NULL); } } ap_rputs("</td></tr>\n", r); } else if (autoindex_opts & FANCY_INDEXING) { if (!(autoindex_opts & SUPPRESS_ICON)) { if (autoindex_opts & ICONS_ARE_LINKS) { ap_rvputs(r, "<a href=\"", anchor, "\">", NULL); } if ((ar[x]->icon) || d->default_icon) { ap_rvputs(r, "<img src=\"", ap_escape_html(scratch, ar[x]->icon ? ar[x]->icon : d->default_icon), "\" alt=\"[", (ar[x]->alt ? ar[x]->alt : " "), "]\"", NULL); if (d->icon_width) { ap_rprintf(r, " width=\"%d\"", d->icon_width); } if (d->icon_height) { ap_rprintf(r, " height=\"%d\"", d->icon_height); } if (autoindex_opts & EMIT_XHTML) { ap_rputs(" /", r); } ap_rputs(">", r); } else { ap_rputs(" ", r); } if (autoindex_opts & ICONS_ARE_LINKS) { ap_rputs("</a> ", r); } else { ap_rputc(' ', r); } } nwidth = strlen(t2); if (nwidth > name_width) { memcpy(name_scratch, t2, name_width - 3); name_scratch[name_width - 3] = '.'; name_scratch[name_width - 2] = '.'; name_scratch[name_width - 1] = '>'; name_scratch[name_width] = 0; t2 = name_scratch; nwidth = name_width; } ap_rvputs(r, "<a href=\"", anchor, "\">", ap_escape_html(scratch, t2), "</a>", pad_scratch + nwidth, NULL); /* * The blank before the storm.. er, before the next field. */ ap_rputs(" ", r); if (!(autoindex_opts & SUPPRESS_LAST_MOD)) { if (ar[x]->lm != -1) { char time_str[32]; apr_time_exp_t ts; apr_time_exp_lt(&ts, ar[x]->lm); apr_strftime(time_str, &rv, sizeof(time_str), datetime_format, &ts); ap_rvputs(r, time_str, " ", NULL); } else { /* Length="1975-04-07 01:23 " (default in 2.4 and later) or * Length="07-Apr-1975 01:24 ". (2.2 and UseOldDateFormat) * See 'datetime_format' above. */ ap_rputs(" ", r); } } if (!(autoindex_opts & SUPPRESS_SIZE)) { char buf[5]; ap_rputs(apr_strfsize(ar[x]->size, buf), r); ap_rputs(" ", r); } if (!(autoindex_opts & SUPPRESS_DESC)) { if (ar[x]->desc) { ap_rputs(terminate_description(d, ar[x]->desc, autoindex_opts, desc_width), r); } } ap_rputc('\n', r); } else { ap_rvputs(r, "<li><a href=\"", anchor, "\"> ", ap_escape_html(scratch, t2), "</a></li>\n", NULL); } } if (autoindex_opts & TABLE_INDEXING) { ap_rvputs(r, breakrow, "</table>\n", NULL); } else if (autoindex_opts & FANCY_INDEXING) { if (!(autoindex_opts & SUPPRESS_RULES)) { ap_rputs("<hr", r); if (autoindex_opts & EMIT_XHTML) { ap_rputs(" /", r); } ap_rputs("></pre>\n", r); } else { ap_rputs("</pre>\n", r); } } else { ap_rputs("</ul>\n", r); } } /* * Compare two file entries according to the sort criteria. The return * is essentially a signum function value. */ static int dsortf(struct ent **e1, struct ent **e2) { struct ent *c1; struct ent *c2; int result = 0; /* * First, see if either of the entries is for the parent directory. * If so, that *always* sorts lower than anything else. */ if ((*e1)->name[0] == '/') { return -1; } if ((*e2)->name[0] == '/') { return 1; } /* * Now see if one's a directory and one isn't, if we're set * isdir for FOLDERS_FIRST. */ if ((*e1)->isdir != (*e2)->isdir) { return (*e1)->isdir ? -1 : 1; } /* * All of our comparisons will be of the c1 entry against the c2 one, * so assign them appropriately to take care of the ordering. */ if ((*e1)->ascending) { c1 = *e1; c2 = *e2; } else { c1 = *e2; c2 = *e1; } switch (c1->key) { case K_LAST_MOD: if (c1->lm > c2->lm) { return 1; } else if (c1->lm < c2->lm) { return -1; } break; case K_SIZE: if (c1->size > c2->size) { return 1; } else if (c1->size < c2->size) { return -1; } break; case K_DESC: if (c1->version_sort) { result = apr_strnatcmp(c1->desc ? c1->desc : "", c2->desc ? c2->desc : ""); } else { result = strcmp(c1->desc ? c1->desc : "", c2->desc ? c2->desc : ""); } if (result) { return result; } break; } /* names may identical when treated case-insensitively, * so always fall back on strcmp() flavors to put entries * in deterministic order. This means that 'ABC' and 'abc' * will always appear in the same order, rather than * variably between 'ABC abc' and 'abc ABC' order. */ if (c1->version_sort) { if (c1->ignore_case) { result = apr_strnatcasecmp (c1->name, c2->name); } if (!result) { result = apr_strnatcmp(c1->name, c2->name); } } /* The names may be identical in respects other than * filename case when strnatcmp is used above, so fall back * to strcmp on conflicts so that fn1.01.zzz and fn1.1.zzz * are also sorted in a deterministic order. */ if (!result && c1->ignore_case) { result = strcasecmp (c1->name, c2->name); } if (!result) { result = strcmp (c1->name, c2->name); } return result; } static int index_directory(request_rec *r, autoindex_config_rec *autoindex_conf) { char *title_name = ap_escape_html(r->pool, r->uri); char *title_endp; char *name = r->filename; char *pstring = NULL; apr_finfo_t dirent; apr_dir_t *thedir; apr_status_t status; int num_ent = 0, x; struct ent *head, *p; struct ent **ar = NULL; const char *qstring; apr_int32_t autoindex_opts = autoindex_conf->opts; char keyid; char direction; char *colargs; char *fullpath; apr_size_t dirpathlen; char *ctype = "text/html"; char *charset; if ((status = apr_dir_open(&thedir, name, r->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01275) "Can't open directory for index: %s", r->filename); return HTTP_FORBIDDEN; } if (autoindex_conf->ctype) { ctype = autoindex_conf->ctype; } if (autoindex_conf->charset) { charset = autoindex_conf->charset; } else { #if APR_HAS_UNICODE_FS charset = "UTF-8"; #else charset = "ISO-8859-1"; #endif } if (*charset) { ap_set_content_type(r, apr_pstrcat(r->pool, ctype, ";charset=", charset, NULL)); } else { ap_set_content_type(r, ctype); } if (autoindex_opts & TRACK_MODIFIED) { ap_update_mtime(r, r->finfo.mtime); ap_set_last_modified(r); ap_set_etag(r); } if (r->header_only) { apr_dir_close(thedir); return 0; } /* * If there is no specific ordering defined for this directory, * default to ascending by filename. */ keyid = autoindex_conf->default_keyid ? autoindex_conf->default_keyid : K_NAME; direction = autoindex_conf->default_direction ? autoindex_conf->default_direction : D_ASCENDING; /* * Figure out what sort of indexing (if any) we're supposed to use. * * If no QUERY_STRING was specified or client query strings have been * explicitly disabled. * If we are ignoring the client, suppress column sorting as well. */ if (autoindex_opts & IGNORE_CLIENT) { qstring = NULL; autoindex_opts |= SUPPRESS_COLSORT; colargs = ""; } else { char fval[5], vval[5], *ppre = "", *epattern = ""; fval[0] = '\0'; vval[0] = '\0'; qstring = r->args; while (qstring && *qstring) { /* C= First Sort key Column (N, M, S, D) */ if ( qstring[0] == 'C' && qstring[1] == '=' && qstring[2] && strchr(K_VALID, qstring[2]) && ( qstring[3] == '&' || qstring[3] == ';' || !qstring[3])) { keyid = qstring[2]; qstring += qstring[3] ? 4 : 3; } /* O= Sort order (A, D) */ else if ( qstring[0] == 'O' && qstring[1] == '=' && ( (qstring[2] == D_ASCENDING) || (qstring[2] == D_DESCENDING)) && ( qstring[3] == '&' || qstring[3] == ';' || !qstring[3])) { direction = qstring[2]; qstring += qstring[3] ? 4 : 3; } /* F= Output Format (0 plain, 1 fancy (pre), 2 table) */ else if ( qstring[0] == 'F' && qstring[1] == '=' && qstring[2] && strchr("012", qstring[2]) && ( qstring[3] == '&' || qstring[3] == ';' || !qstring[3])) { if (qstring[2] == '0') { autoindex_opts &= ~(FANCY_INDEXING | TABLE_INDEXING); } else if (qstring[2] == '1') { autoindex_opts = (autoindex_opts | FANCY_INDEXING) & ~TABLE_INDEXING; } else if (qstring[2] == '2') { autoindex_opts |= FANCY_INDEXING | TABLE_INDEXING; } strcpy(fval, ";F= "); fval[3] = qstring[2]; qstring += qstring[3] ? 4 : 3; } /* V= Version sort (0, 1) */ else if ( qstring[0] == 'V' && qstring[1] == '=' && (qstring[2] == '0' || qstring[2] == '1') && ( qstring[3] == '&' || qstring[3] == ';' || !qstring[3])) { if (qstring[2] == '0') { autoindex_opts &= ~VERSION_SORT; } else if (qstring[2] == '1') { autoindex_opts |= VERSION_SORT; } strcpy(vval, ";V= "); vval[3] = qstring[2]; qstring += qstring[3] ? 4 : 3; } /* P= wildcard pattern (*.foo) */ else if (qstring[0] == 'P' && qstring[1] == '=') { const char *eos = qstring += 2; /* for efficiency */ while (*eos && *eos != '&' && *eos != ';') { ++eos; } if (eos == qstring) { pstring = NULL; } else { pstring = apr_pstrndup(r->pool, qstring, eos - qstring); if (ap_unescape_url(pstring) != OK) { /* ignore the pattern, if it's bad. */ pstring = NULL; } else { ppre = ";P="; /* be correct */ epattern = ap_escape_uri(r->pool, pstring); } } if (*eos && *++eos) { qstring = eos; } else { qstring = NULL; } } /* Syntax error? Ignore the remainder! */ else { qstring = NULL; } } colargs = apr_pstrcat(r->pool, fval, vval, ppre, epattern, NULL); } /* Spew HTML preamble */ title_endp = title_name + strlen(title_name) - 1; while (title_endp > title_name && *title_endp == '/') { *title_endp-- = '\0'; } emit_head(r, autoindex_conf->header, autoindex_opts & SUPPRESS_PREAMBLE, autoindex_opts & EMIT_XHTML, title_name); /* * Since we don't know how many dir. entries there are, put them into a * linked list and then arrayificate them so qsort can use them. */ head = NULL; p = make_parent_entry(autoindex_opts, autoindex_conf, r, keyid, direction); if (p != NULL) { p->next = head; head = p; num_ent++; } fullpath = apr_palloc(r->pool, APR_PATH_MAX); dirpathlen = strlen(name); memcpy(fullpath, name, dirpathlen); do { status = apr_dir_read(&dirent, APR_FINFO_MIN | APR_FINFO_NAME, thedir); if (APR_STATUS_IS_INCOMPLETE(status)) { continue; /* ignore un-stat()able files */ } else if (status != APR_SUCCESS) { break; } /* We want to explode symlinks here. */ if (dirent.filetype == APR_LNK) { const char *savename; apr_finfo_t fi; /* We *must* have FNAME. */ savename = dirent.name; apr_cpystrn(fullpath + dirpathlen, dirent.name, APR_PATH_MAX - dirpathlen); status = apr_stat(&fi, fullpath, dirent.valid & ~(APR_FINFO_NAME), r->pool); if (status != APR_SUCCESS) { /* Something bad happened, skip this file. */ continue; } memcpy(&dirent, &fi, sizeof(fi)); dirent.name = savename; dirent.valid |= APR_FINFO_NAME; } p = make_autoindex_entry(&dirent, autoindex_opts, autoindex_conf, r, keyid, direction, pstring); if (p != NULL) { p->next = head; head = p; num_ent++; } } while (1); if (num_ent > 0) { ar = (struct ent **) apr_palloc(r->pool, num_ent * sizeof(struct ent *)); p = head; x = 0; while (p) { ar[x++] = p; p = p->next; } qsort((void *) ar, num_ent, sizeof(struct ent *), (int (*)(const void *, const void *)) dsortf); } output_directories(ar, num_ent, autoindex_conf, r, autoindex_opts, keyid, direction, colargs); apr_dir_close(thedir); emit_tail(r, autoindex_conf->readme, autoindex_opts & SUPPRESS_PREAMBLE); return 0; } /* The formal handler... */ static int handle_autoindex(request_rec *r) { autoindex_config_rec *d; int allow_opts; if (strcmp(r->handler,DIR_MAGIC_TYPE) && !AP_IS_DEFAULT_HANDLER_NAME(r->handler)) { return DECLINED; } if (r->finfo.filetype != APR_DIR) { return DECLINED; } allow_opts = ap_allow_options(r); d = (autoindex_config_rec *) ap_get_module_config(r->per_dir_config, &autoindex_module); r->allowed |= (AP_METHOD_BIT << M_GET); if (r->method_number != M_GET) { return DECLINED; } /* OK, nothing easy. Trot out the heavy artillery... */ if (allow_opts & OPT_INDEXES) { int errstatus; if ((errstatus = ap_discard_request_body(r)) != OK) { return errstatus; } /* KLUDGE --- make the sub_req lookups happen in the right directory. * Fixing this in the sub_req_lookup functions themselves is difficult, * and would probably break virtual includes... */ if (r->filename[strlen(r->filename) - 1] != '/') { r->filename = apr_pstrcat(r->pool, r->filename, "/", NULL); } return index_directory(r, d); } else { const char *index_names = apr_table_get(r->notes, "dir-index-names"); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01276) "Cannot serve directory %s: No matching DirectoryIndex (%s) found, and " "server-generated directory index forbidden by " "Options directive", r->filename, index_names ? index_names : "none"); return HTTP_FORBIDDEN; } } static void register_hooks(apr_pool_t *p) { ap_hook_handler(handle_autoindex,NULL,NULL,APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(autoindex) = { STANDARD20_MODULE_STUFF, create_autoindex_config, /* dir config creater */ merge_autoindex_configs, /* dir merger --- default is to override */ NULL, /* server config */ NULL, /* merge server config */ autoindex_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/generators/mod_cgi.mak���������������������������������������������������������0000644�0000000�0000050�00000022775�12701473373�017174� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_cgi.dsp !IF "$(CFG)" == "" CFG=mod_cgi - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_cgi - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_cgi - Win32 Release" && "$(CFG)" != "mod_cgi - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_cgi.mak" CFG="mod_cgi - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_cgi - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_cgi - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_cgi - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_cgi.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_cgi.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_cgi.obj" -@erase "$(INTDIR)\mod_cgi.res" -@erase "$(INTDIR)\mod_cgi_src.idb" -@erase "$(INTDIR)\mod_cgi_src.pdb" -@erase "$(OUTDIR)\mod_cgi.exp" -@erase "$(OUTDIR)\mod_cgi.lib" -@erase "$(OUTDIR)\mod_cgi.pdb" -@erase "$(OUTDIR)\mod_cgi.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_cgi_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_cgi.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_cgi.so" /d LONG_NAME="cgi_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_cgi.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_cgi.pdb" /debug /out:"$(OUTDIR)\mod_cgi.so" /implib:"$(OUTDIR)\mod_cgi.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_cgi.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_cgi.obj" \ "$(INTDIR)\mod_cgi.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_cgi.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_cgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_cgi.so" if exist .\Release\mod_cgi.so.manifest mt.exe -manifest .\Release\mod_cgi.so.manifest -outputresource:.\Release\mod_cgi.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_cgi - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_cgi.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_cgi.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_cgi.obj" -@erase "$(INTDIR)\mod_cgi.res" -@erase "$(INTDIR)\mod_cgi_src.idb" -@erase "$(INTDIR)\mod_cgi_src.pdb" -@erase "$(OUTDIR)\mod_cgi.exp" -@erase "$(OUTDIR)\mod_cgi.lib" -@erase "$(OUTDIR)\mod_cgi.pdb" -@erase "$(OUTDIR)\mod_cgi.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_cgi_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_cgi.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_cgi.so" /d LONG_NAME="cgi_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_cgi.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_cgi.pdb" /debug /out:"$(OUTDIR)\mod_cgi.so" /implib:"$(OUTDIR)\mod_cgi.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_cgi.so LINK32_OBJS= \ "$(INTDIR)\mod_cgi.obj" \ "$(INTDIR)\mod_cgi.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_cgi.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_cgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_cgi.so" if exist .\Debug\mod_cgi.so.manifest mt.exe -manifest .\Debug\mod_cgi.so.manifest -outputresource:.\Debug\mod_cgi.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_cgi.dep") !INCLUDE "mod_cgi.dep" !ELSE !MESSAGE Warning: cannot find "mod_cgi.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_cgi - Win32 Release" || "$(CFG)" == "mod_cgi - Win32 Debug" !IF "$(CFG)" == "mod_cgi - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\generators" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\generators" !ELSEIF "$(CFG)" == "mod_cgi - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\generators" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\generators" !ENDIF !IF "$(CFG)" == "mod_cgi - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\generators" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\generators" !ELSEIF "$(CFG)" == "mod_cgi - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\generators" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\generators" !ENDIF !IF "$(CFG)" == "mod_cgi - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\generators" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\generators" !ELSEIF "$(CFG)" == "mod_cgi - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\generators" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\generators" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_cgi - Win32 Release" "$(INTDIR)\mod_cgi.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_cgi.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_cgi.so" /d LONG_NAME="cgi_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_cgi - Win32 Debug" "$(INTDIR)\mod_cgi.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_cgi.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_cgi.so" /d LONG_NAME="cgi_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_cgi.c "$(INTDIR)\mod_cgi.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ���httpd-2.4.41/modules/generators/mod_info.mak��������������������������������������������������������0000644�0000000�0000050�00000023125�12701473373�017353� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_info.dsp !IF "$(CFG)" == "" CFG=mod_info - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_info - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_info - Win32 Release" && "$(CFG)" != "mod_info - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_info.mak" CFG="mod_info - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_info - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_info - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_info - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_info.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_info.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_info.obj" -@erase "$(INTDIR)\mod_info.res" -@erase "$(INTDIR)\mod_info_src.idb" -@erase "$(INTDIR)\mod_info_src.pdb" -@erase "$(OUTDIR)\mod_info.exp" -@erase "$(OUTDIR)\mod_info.lib" -@erase "$(OUTDIR)\mod_info.pdb" -@erase "$(OUTDIR)\mod_info.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_info_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_info.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_info.so" /d LONG_NAME="info_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_info.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_info.pdb" /debug /out:"$(OUTDIR)\mod_info.so" /implib:"$(OUTDIR)\mod_info.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_info.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_info.obj" \ "$(INTDIR)\mod_info.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_info.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_info.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_info.so" if exist .\Release\mod_info.so.manifest mt.exe -manifest .\Release\mod_info.so.manifest -outputresource:.\Release\mod_info.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_info - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_info.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_info.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_info.obj" -@erase "$(INTDIR)\mod_info.res" -@erase "$(INTDIR)\mod_info_src.idb" -@erase "$(INTDIR)\mod_info_src.pdb" -@erase "$(OUTDIR)\mod_info.exp" -@erase "$(OUTDIR)\mod_info.lib" -@erase "$(OUTDIR)\mod_info.pdb" -@erase "$(OUTDIR)\mod_info.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_info_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_info.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_info.so" /d LONG_NAME="info_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_info.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_info.pdb" /debug /out:"$(OUTDIR)\mod_info.so" /implib:"$(OUTDIR)\mod_info.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_info.so LINK32_OBJS= \ "$(INTDIR)\mod_info.obj" \ "$(INTDIR)\mod_info.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_info.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_info.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_info.so" if exist .\Debug\mod_info.so.manifest mt.exe -manifest .\Debug\mod_info.so.manifest -outputresource:.\Debug\mod_info.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_info.dep") !INCLUDE "mod_info.dep" !ELSE !MESSAGE Warning: cannot find "mod_info.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_info - Win32 Release" || "$(CFG)" == "mod_info - Win32 Debug" !IF "$(CFG)" == "mod_info - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\generators" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\generators" !ELSEIF "$(CFG)" == "mod_info - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\generators" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\generators" !ENDIF !IF "$(CFG)" == "mod_info - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\generators" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\generators" !ELSEIF "$(CFG)" == "mod_info - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\generators" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\generators" !ENDIF !IF "$(CFG)" == "mod_info - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\generators" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\generators" !ELSEIF "$(CFG)" == "mod_info - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\generators" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\generators" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_info - Win32 Release" "$(INTDIR)\mod_info.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_info.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_info.so" /d LONG_NAME="info_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_info - Win32 Debug" "$(INTDIR)\mod_info.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_info.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_info.so" /d LONG_NAME="info_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_info.c "$(INTDIR)\mod_info.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/generators/mod_info.dep��������������������������������������������������������0000644�0000000�0000050�00000004506�12674411515�017354� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_info.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_info.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mpm_common.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr-util\include\apu_version.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/generators/mod_status.dsp������������������������������������������������������0000644�0000000�0000050�00000010737�10551346420�017757� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_status" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_status - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_status.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_status.mak" CFG="mod_status - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_status - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_status - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_status - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "STATUS_DECLARE_EXPORT" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "STATUS_DECLARE_EXPORT" /Fd"Release\mod_status_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_status.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_status.so" /d LONG_NAME="status_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_status.so" /base:@..\..\os\win32\BaseAddr.ref,mod_status.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_status.so" /base:@..\..\os\win32\BaseAddr.ref,mod_status.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_status.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_status - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /D "STATUS_DECLARE_EXPORT" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "STATUS_DECLARE_EXPORT" /Fd"Debug\mod_status_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_status.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_status.so" /d LONG_NAME="status_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_status.so" /base:@..\..\os\win32\BaseAddr.ref,mod_status.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_status.so" /base:@..\..\os\win32\BaseAddr.ref,mod_status.so # Begin Special Build Tool TargetPath=.\Debug\mod_status.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_status - Win32 Release" # Name "mod_status - Win32 Debug" # Begin Source File SOURCE=.\mod_status.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project ���������������������������������httpd-2.4.41/modules/generators/.indent.pro���������������������������������������������������������0000644�0000000�0000050�00000001275�10150161574�017143� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/generators/mod_asis.mak��������������������������������������������������������0000644�0000000�0000050�00000023125�12701473373�017357� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_asis.dsp !IF "$(CFG)" == "" CFG=mod_asis - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_asis - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_asis - Win32 Release" && "$(CFG)" != "mod_asis - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_asis.mak" CFG="mod_asis - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_asis - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_asis - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_asis - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_asis.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_asis.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_asis.obj" -@erase "$(INTDIR)\mod_asis.res" -@erase "$(INTDIR)\mod_asis_src.idb" -@erase "$(INTDIR)\mod_asis_src.pdb" -@erase "$(OUTDIR)\mod_asis.exp" -@erase "$(OUTDIR)\mod_asis.lib" -@erase "$(OUTDIR)\mod_asis.pdb" -@erase "$(OUTDIR)\mod_asis.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_asis_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_asis.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_asis.so" /d LONG_NAME="asis_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_asis.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_asis.pdb" /debug /out:"$(OUTDIR)\mod_asis.so" /implib:"$(OUTDIR)\mod_asis.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_asis.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_asis.obj" \ "$(INTDIR)\mod_asis.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_asis.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_asis.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_asis.so" if exist .\Release\mod_asis.so.manifest mt.exe -manifest .\Release\mod_asis.so.manifest -outputresource:.\Release\mod_asis.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_asis - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_asis.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_asis.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_asis.obj" -@erase "$(INTDIR)\mod_asis.res" -@erase "$(INTDIR)\mod_asis_src.idb" -@erase "$(INTDIR)\mod_asis_src.pdb" -@erase "$(OUTDIR)\mod_asis.exp" -@erase "$(OUTDIR)\mod_asis.lib" -@erase "$(OUTDIR)\mod_asis.pdb" -@erase "$(OUTDIR)\mod_asis.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_asis_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_asis.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_asis.so" /d LONG_NAME="asis_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_asis.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_asis.pdb" /debug /out:"$(OUTDIR)\mod_asis.so" /implib:"$(OUTDIR)\mod_asis.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_asis.so LINK32_OBJS= \ "$(INTDIR)\mod_asis.obj" \ "$(INTDIR)\mod_asis.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_asis.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_asis.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_asis.so" if exist .\Debug\mod_asis.so.manifest mt.exe -manifest .\Debug\mod_asis.so.manifest -outputresource:.\Debug\mod_asis.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_asis.dep") !INCLUDE "mod_asis.dep" !ELSE !MESSAGE Warning: cannot find "mod_asis.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_asis - Win32 Release" || "$(CFG)" == "mod_asis - Win32 Debug" !IF "$(CFG)" == "mod_asis - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\generators" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\generators" !ELSEIF "$(CFG)" == "mod_asis - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\generators" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\generators" !ENDIF !IF "$(CFG)" == "mod_asis - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\generators" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\generators" !ELSEIF "$(CFG)" == "mod_asis - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\generators" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\generators" !ENDIF !IF "$(CFG)" == "mod_asis - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\generators" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\generators" !ELSEIF "$(CFG)" == "mod_asis - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\generators" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\generators" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_asis - Win32 Release" "$(INTDIR)\mod_asis.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_asis.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_asis.so" /d LONG_NAME="asis_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_asis - Win32 Debug" "$(INTDIR)\mod_asis.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_asis.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_asis.so" /d LONG_NAME="asis_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_asis.c "$(INTDIR)\mod_asis.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/generators/mod_status.h��������������������������������������������������������0000644�0000000�0000050�00000004611�10455005461�017412� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_status.h * @brief Status Report Extension Module to Apache * * @defgroup MOD_STATUS mod_status * @ingroup APACHE_MODS * @{ */ #ifndef MOD_STATUS_H #define MOD_STATUS_H #include "ap_config.h" #include "httpd.h" #define AP_STATUS_SHORT (0x1) /* short, non-HTML report requested */ #define AP_STATUS_NOTABLE (0x2) /* HTML report without tables */ #define AP_STATUS_EXTENDED (0x4) /* detailed report */ #if !defined(WIN32) #define STATUS_DECLARE(type) type #define STATUS_DECLARE_NONSTD(type) type #define STATUS_DECLARE_DATA #elif defined(STATUS_DECLARE_STATIC) #define STATUS_DECLARE(type) type __stdcall #define STATUS_DECLARE_NONSTD(type) type #define STATUS_DECLARE_DATA #elif defined(STATUS_DECLARE_EXPORT) #define STATUS_DECLARE(type) __declspec(dllexport) type __stdcall #define STATUS_DECLARE_NONSTD(type) __declspec(dllexport) type #define STATUS_DECLARE_DATA __declspec(dllexport) #else #define STATUS_DECLARE(type) __declspec(dllimport) type __stdcall #define STATUS_DECLARE_NONSTD(type) __declspec(dllimport) type #define STATUS_DECLARE_DATA __declspec(dllimport) #endif /* Optional hooks which can insert extra content into the mod_status * output. FLAGS will be set to the bitwise OR of any of the * AP_STATUS_* flags. * * Implementations of this hook should generate content using * functions in the ap_rputs/ap_rprintf family; each hook should * return OK or DECLINED. */ APR_DECLARE_EXTERNAL_HOOK(ap, STATUS, int, status_hook, (request_rec *r, int flags)) #endif /** @} */ �����������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/generators/Makefile.in���������������������������������������������������������0000644�0000000�0000050�00000000051�10150161574�017116� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� include $(top_srcdir)/build/special.mk ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/generators/mod_asis.dep��������������������������������������������������������0000644�0000000�0000050�00000003742�12674411515�017361� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_asis.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_asis.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_core.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ������������������������������httpd-2.4.41/modules/md/����������������������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273342�013312� 5����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_json.h�������������������������������������������������������������������0000644�0000000�0000050�00000013257�13511051361�015112� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_json_h #define mod_md_md_json_h #include <apr_file_io.h> struct apr_bucket_brigade; struct apr_file_t; struct md_http_t; struct md_http_response_t; typedef struct md_json_t md_json_t; typedef enum { MD_JSON_TYPE_OBJECT, MD_JSON_TYPE_ARRAY, MD_JSON_TYPE_STRING, MD_JSON_TYPE_REAL, MD_JSON_TYPE_INT, MD_JSON_TYPE_BOOL, MD_JSON_TYPE_NULL, } md_json_type_t; typedef enum { MD_JSON_FMT_COMPACT, MD_JSON_FMT_INDENT, } md_json_fmt_t; md_json_t *md_json_create(apr_pool_t *pool); void md_json_destroy(md_json_t *json); md_json_t *md_json_copy(apr_pool_t *pool, md_json_t *json); md_json_t *md_json_clone(apr_pool_t *pool, md_json_t *json); int md_json_has_key(const md_json_t *json, ...); int md_json_is(const md_json_type_t type, md_json_t *json, ...); /* boolean manipulation */ int md_json_getb(const md_json_t *json, ...); apr_status_t md_json_setb(int value, md_json_t *json, ...); /* number manipulation */ double md_json_getn(const md_json_t *json, ...); apr_status_t md_json_setn(double value, md_json_t *json, ...); /* long manipulation */ long md_json_getl(const md_json_t *json, ...); apr_status_t md_json_setl(long value, md_json_t *json, ...); /* string manipulation */ md_json_t *md_json_create_s(apr_pool_t *pool, const char *s); const char *md_json_gets(const md_json_t *json, ...); const char *md_json_dups(apr_pool_t *p, const md_json_t *json, ...); apr_status_t md_json_sets(const char *s, md_json_t *json, ...); /* json manipulation */ md_json_t *md_json_getj(md_json_t *json, ...); const md_json_t *md_json_getcj(const md_json_t *json, ...); apr_status_t md_json_setj(md_json_t *value, md_json_t *json, ...); apr_status_t md_json_addj(md_json_t *value, md_json_t *json, ...); apr_status_t md_json_insertj(md_json_t *value, size_t index, md_json_t *json, ...); /* Array/Object manipulation */ apr_status_t md_json_clr(md_json_t *json, ...); apr_status_t md_json_del(md_json_t *json, ...); /* conversion function from and to json */ typedef apr_status_t md_json_to_cb(void *value, md_json_t *json, apr_pool_t *p, void *baton); typedef apr_status_t md_json_from_cb(void **pvalue, md_json_t *json, apr_pool_t *p, void *baton); /* identity pass through from json to json */ apr_status_t md_json_pass_to(void *value, md_json_t *json, apr_pool_t *p, void *baton); apr_status_t md_json_pass_from(void **pvalue, md_json_t *json, apr_pool_t *p, void *baton); /* conversions from json to json in specified pool */ apr_status_t md_json_clone_to(void *value, md_json_t *json, apr_pool_t *p, void *baton); apr_status_t md_json_clone_from(void **pvalue, md_json_t *json, apr_pool_t *p, void *baton); /* Manipulating/Iteration on generic Arrays */ apr_status_t md_json_geta(apr_array_header_t *a, md_json_from_cb *cb, void *baton, const md_json_t *json, ...); apr_status_t md_json_seta(apr_array_header_t *a, md_json_to_cb *cb, void *baton, md_json_t *json, ...); /* Called on each array element, aborts iteration when returning 0 */ typedef int md_json_itera_cb(void *baton, size_t index, md_json_t *json); int md_json_itera(md_json_itera_cb *cb, void *baton, md_json_t *json, ...); /* Manipulating Object String values */ apr_status_t md_json_gets_dict(apr_table_t *dict, const md_json_t *json, ...); apr_status_t md_json_sets_dict(apr_table_t *dict, md_json_t *json, ...); /* Manipulating String Arrays */ apr_status_t md_json_getsa(apr_array_header_t *a, const md_json_t *json, ...); apr_status_t md_json_dupsa(apr_array_header_t *a, apr_pool_t *p, md_json_t *json, ...); apr_status_t md_json_setsa(apr_array_header_t *a, md_json_t *json, ...); /* serialization & parsing */ apr_status_t md_json_writeb(md_json_t *json, md_json_fmt_t fmt, struct apr_bucket_brigade *bb); const char *md_json_writep(md_json_t *json, apr_pool_t *p, md_json_fmt_t fmt); apr_status_t md_json_writef(md_json_t *json, apr_pool_t *p, md_json_fmt_t fmt, struct apr_file_t *f); apr_status_t md_json_fcreatex(md_json_t *json, apr_pool_t *p, md_json_fmt_t fmt, const char *fpath, apr_fileperms_t perms); apr_status_t md_json_freplace(md_json_t *json, apr_pool_t *p, md_json_fmt_t fmt, const char *fpath, apr_fileperms_t perms); apr_status_t md_json_readb(md_json_t **pjson, apr_pool_t *pool, struct apr_bucket_brigade *bb); apr_status_t md_json_readd(md_json_t **pjson, apr_pool_t *pool, const char *data, size_t data_len); apr_status_t md_json_readf(md_json_t **pjson, apr_pool_t *pool, const char *fpath); /* http retrieval */ apr_status_t md_json_http_get(md_json_t **pjson, apr_pool_t *pool, struct md_http_t *http, const char *url); apr_status_t md_json_read_http(md_json_t **pjson, apr_pool_t *pool, const struct md_http_response_t *res); apr_status_t md_json_copy_to(md_json_t *dest, const md_json_t *src, ...); #endif /* md_json_h */ �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_log.c��������������������������������������������������������������������0000644�0000000�0000050�00000003674�13234043402�014716� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <apr_lib.h> #include <apr_strings.h> #include <apr_buckets.h> #include "md_log.h" #define LOG_BUFFER_LEN 1024 static const char *level_names[] = { "emergency", "alert", "crit", "err", "warning", "notice", "info", "debug", "trace1", "trace2", "trace3", "trace4", "trace5", "trace6", "trace7", "trace8", }; const char *md_log_level_name(md_log_level_t level) { return level_names[level]; } static md_log_print_cb *log_printv; static md_log_level_cb *log_level; static void *log_baton; void md_log_set(md_log_level_cb *level_cb, md_log_print_cb *print_cb, void *baton) { log_printv = print_cb; log_level = level_cb; log_baton = baton; } int md_log_is_level(apr_pool_t *p, md_log_level_t level) { if (!log_level) { return 0; } return log_level(log_baton, p, level); } void md_log_perror(const char *file, int line, md_log_level_t level, apr_status_t rv, apr_pool_t *p, const char *fmt, ...) { va_list ap; va_start(ap, fmt); if (log_printv) { log_printv(file, line, level, rv, log_baton, p, fmt, ap); } va_end(ap); } ��������������������������������������������������������������������httpd-2.4.41/modules/md/md_jws.h��������������������������������������������������������������������0000644�0000000�0000050�00000002330�13234043402�014731� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_jws_h #define mod_md_md_jws_h struct apr_table_t; struct md_json_t; struct md_pkey_t; apr_status_t md_jws_sign(md_json_t **pmsg, apr_pool_t *p, const char *payload, size_t len, struct apr_table_t *protected, struct md_pkey_t *pkey, const char *key_id); apr_status_t md_jws_pkey_thumb(const char **pthumb, apr_pool_t *p, struct md_pkey_t *pkey); #endif /* md_jws_h */ ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/mod_md.c��������������������������������������������������������������������0000644�0000000�0000050�00000137750�13523026136�014725� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <apr_optional.h> #include <apr_strings.h> #include <mpm_common.h> #include <httpd.h> #include <http_core.h> #include <http_protocol.h> #include <http_request.h> #include <http_log.h> #include <http_vhost.h> #include <ap_listen.h> #include "mod_status.h" #include "md.h" #include "md_curl.h" #include "md_crypt.h" #include "md_http.h" #include "md_json.h" #include "md_store.h" #include "md_store_fs.h" #include "md_log.h" #include "md_result.h" #include "md_reg.h" #include "md_util.h" #include "md_version.h" #include "md_acme.h" #include "md_acme_authz.h" #include "mod_md.h" #include "mod_md_config.h" #include "mod_md_drive.h" #include "mod_md_os.h" #include "mod_md_status.h" #include "mod_ssl_openssl.h" static void md_hooks(apr_pool_t *pool); AP_DECLARE_MODULE(md) = { STANDARD20_MODULE_STUFF, NULL, /* func to create per dir config */ NULL, /* func to merge per dir config */ md_config_create_svr, /* func to create per server config */ md_config_merge_svr, /* func to merge per server config */ md_cmds, /* command handlers */ md_hooks, #if defined(AP_MODULE_FLAG_NONE) AP_MODULE_FLAG_ALWAYS_MERGE #endif }; /**************************************************************************************************/ /* logging setup */ static server_rec *log_server; static int log_is_level(void *baton, apr_pool_t *p, md_log_level_t level) { (void)baton; (void)p; if (log_server) { return APLOG_IS_LEVEL(log_server, (int)level); } return level <= MD_LOG_INFO; } #define LOG_BUF_LEN 16*1024 static void log_print(const char *file, int line, md_log_level_t level, apr_status_t rv, void *baton, apr_pool_t *p, const char *fmt, va_list ap) { if (log_is_level(baton, p, level)) { char buffer[LOG_BUF_LEN]; memset(buffer, 0, sizeof(buffer)); apr_vsnprintf(buffer, LOG_BUF_LEN-1, fmt, ap); buffer[LOG_BUF_LEN-1] = '\0'; if (log_server) { ap_log_error(file, line, APLOG_MODULE_INDEX, (int)level, rv, log_server, "%s",buffer); } else { ap_log_perror(file, line, APLOG_MODULE_INDEX, (int)level, rv, p, "%s", buffer); } } } /**************************************************************************************************/ /* mod_ssl interface */ static APR_OPTIONAL_FN_TYPE(ssl_is_https) *opt_ssl_is_https; static void init_ssl(void) { opt_ssl_is_https = APR_RETRIEVE_OPTIONAL_FN(ssl_is_https); } /**************************************************************************************************/ /* lifecycle */ static apr_status_t cleanup_setups(void *dummy) { (void)dummy; log_server = NULL; return APR_SUCCESS; } static void init_setups(apr_pool_t *p, server_rec *base_server) { log_server = base_server; apr_pool_cleanup_register(p, NULL, cleanup_setups, apr_pool_cleanup_null); } /**************************************************************************************************/ /* store & registry setup */ static apr_status_t store_file_ev(void *baton, struct md_store_t *store, md_store_fs_ev_t ev, unsigned int group, const char *fname, apr_filetype_e ftype, apr_pool_t *p) { server_rec *s = baton; apr_status_t rv; (void)store; ap_log_error(APLOG_MARK, APLOG_TRACE3, 0, s, "store event=%d on %s %s (group %d)", ev, (ftype == APR_DIR)? "dir" : "file", fname, group); /* Directories in group CHALLENGES, STAGING and OCSP are written to * under a different user. Give her ownership. */ if (ftype == APR_DIR) { switch (group) { case MD_SG_CHALLENGES: case MD_SG_STAGING: rv = md_make_worker_accessible(fname, p); if (APR_ENOTIMPL != rv) { return rv; } break; default: break; } } return APR_SUCCESS; } static apr_status_t check_group_dir(md_store_t *store, md_store_group_t group, apr_pool_t *p, server_rec *s) { const char *dir; apr_status_t rv; if (APR_SUCCESS == (rv = md_store_get_fname(&dir, store, group, NULL, NULL, p)) && APR_SUCCESS == (rv = apr_dir_make_recursive(dir, MD_FPROT_D_UALL_GREAD, p))) { rv = store_file_ev(s, store, MD_S_FS_EV_CREATED, group, dir, APR_DIR, p); } return rv; } static apr_status_t setup_store(md_store_t **pstore, md_mod_conf_t *mc, apr_pool_t *p, server_rec *s) { const char *base_dir; apr_status_t rv; base_dir = ap_server_root_relative(p, mc->base_dir); if (APR_SUCCESS != (rv = md_store_fs_init(pstore, p, base_dir))) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(10046)"setup store for %s", base_dir); goto out; } md_store_fs_set_event_cb(*pstore, store_file_ev, s); if (APR_SUCCESS != (rv = check_group_dir(*pstore, MD_SG_CHALLENGES, p, s)) || APR_SUCCESS != (rv = check_group_dir(*pstore, MD_SG_STAGING, p, s)) || APR_SUCCESS != (rv = check_group_dir(*pstore, MD_SG_ACCOUNTS, p, s)) ) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(10047) "setup challenges directory"); } out: return rv; } /**************************************************************************************************/ /* post config handling */ static void merge_srv_config(md_t *md, md_srv_conf_t *base_sc, apr_pool_t *p) { if (!md->sc) { md->sc = base_sc; } if (!md->ca_url) { md->ca_url = md_config_gets(md->sc, MD_CONFIG_CA_URL); } if (!md->ca_proto) { md->ca_proto = md_config_gets(md->sc, MD_CONFIG_CA_PROTO); } if (!md->ca_agreement) { md->ca_agreement = md_config_gets(md->sc, MD_CONFIG_CA_AGREEMENT); } if (md->sc->s->server_admin && strcmp(DEFAULT_ADMIN, md->sc->s->server_admin)) { apr_array_clear(md->contacts); APR_ARRAY_PUSH(md->contacts, const char *) = md_util_schemify(p, md->sc->s->server_admin, "mailto"); } if (md->renew_mode == MD_RENEW_DEFAULT) { md->renew_mode = md_config_geti(md->sc, MD_CONFIG_DRIVE_MODE); } if (!md->renew_window) md_config_get_timespan(&md->renew_window, md->sc, MD_CONFIG_RENEW_WINDOW); if (!md->warn_window) md_config_get_timespan(&md->warn_window, md->sc, MD_CONFIG_WARN_WINDOW); if (md->transitive < 0) { md->transitive = md_config_geti(md->sc, MD_CONFIG_TRANSITIVE); } if (!md->ca_challenges && md->sc->ca_challenges) { md->ca_challenges = apr_array_copy(p, md->sc->ca_challenges); } if (!md->pkey_spec) { md->pkey_spec = md->sc->pkey_spec; } if (md->require_https < 0) { md->require_https = md_config_geti(md->sc, MD_CONFIG_REQUIRE_HTTPS); } if (md->must_staple < 0) { md->must_staple = md_config_geti(md->sc, MD_CONFIG_MUST_STAPLE); } } static apr_status_t check_coverage(md_t *md, const char *domain, server_rec *s, apr_pool_t *p) { if (md_contains(md, domain, 0)) { return APR_SUCCESS; } else if (md->transitive) { APR_ARRAY_PUSH(md->domains, const char*) = apr_pstrdup(p, domain); return APR_SUCCESS; } else { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(10040) "Virtual Host %s:%d matches Managed Domain '%s', but the " "name/alias %s itself is not managed. A requested MD certificate " "will not match ServerName.", s->server_hostname, s->port, md->name, domain); return APR_EINVAL; } } static apr_status_t md_covers_server(md_t *md, server_rec *s, apr_pool_t *p) { apr_status_t rv; const char *name; int i; if (APR_SUCCESS == (rv = check_coverage(md, s->server_hostname, s, p)) && s->names) { for (i = 0; i < s->names->nelts; ++i) { name = APR_ARRAY_IDX(s->names, i, const char*); if (APR_SUCCESS != (rv = check_coverage(md, name, s, p))) { break; } } } return rv; } static int matches_port_somewhere(server_rec *s, int port) { server_addr_rec *sa; for (sa = s->addrs; sa; sa = sa->next) { if (sa->host_port == port) { /* host_addr might be general (0.0.0.0) or specific, we count this as match */ return 1; } if (sa->host_port == 0) { /* wildcard port, answers to all ports. Rare, but may work. */ return 1; } } return 0; } static int uses_port(server_rec *s, int port) { server_addr_rec *sa; int match = 0; for (sa = s->addrs; sa; sa = sa->next) { if (sa->host_port == port) { /* host_addr might be general (0.0.0.0) or specific, we count this as match */ match = 1; } else { /* uses other port/wildcard */ return 0; } } return match; } static apr_status_t detect_supported_ports(md_mod_conf_t *mc, server_rec *s, apr_pool_t *p, int log_level) { ap_listen_rec *lr; apr_sockaddr_t *sa; mc->can_http = 0; mc->can_https = 0; for (lr = ap_listeners; lr; lr = lr->next) { for (sa = lr->bind_addr; sa; sa = sa->next) { if (sa->port == mc->local_80 && (!lr->protocol || !strncmp("http", lr->protocol, 4))) { mc->can_http = 1; } else if (sa->port == mc->local_443 && (!lr->protocol || !strncmp("http", lr->protocol, 4))) { mc->can_https = 1; } } } ap_log_error(APLOG_MARK, log_level, 0, s, APLOGNO(10037) "server seems%s reachable via http: (port 80->%d) " "and%s reachable via https: (port 443->%d) ", mc->can_http? "" : " not", mc->local_80, mc->can_https? "" : " not", mc->local_443); return md_reg_set_props(mc->reg, p, mc->can_http, mc->can_https); } static server_rec *get_https_server(const char *domain, server_rec *base_server) { md_srv_conf_t *sc; md_mod_conf_t *mc; server_rec *s; request_rec r; sc = md_config_get(base_server); mc = sc->mc; memset(&r, 0, sizeof(r)); for (s = base_server; s && (mc->local_443 > 0); s = s->next) { if (!mc->manage_base_server && s == base_server) { /* we shall not assign ourselves to the base server */ continue; } r.server = s; if (ap_matches_request_vhost(&r, domain, s->port) && uses_port(s, mc->local_443)) { return s; } } return NULL; } static void init_acme_tls_1_domains(md_t *md, server_rec *base_server) { server_rec *s; int i; const char *domain; /* Collect those domains that support the "acme-tls/1" protocol. This * is part of the MD (and not tested dynamically), since challenge selection * may be done outside the server, e.g. in the a2md command. */ apr_array_clear(md->acme_tls_1_domains); for (i = 0; i < md->domains->nelts; ++i) { domain = APR_ARRAY_IDX(md->domains, i, const char*); if (NULL == (s = get_https_server(domain, base_server))) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, base_server, APLOGNO(10168) "%s: no https server_rec found for %s", md->name, domain); continue; } if (!ap_is_allowed_protocol(NULL, NULL, s, PROTO_ACME_TLS_1)) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, base_server, APLOGNO(10169) "%s: https server_rec for %s does not have protocol %s enabled", md->name, domain, PROTO_ACME_TLS_1); continue; } APR_ARRAY_PUSH(md->acme_tls_1_domains, const char*) = domain; } } static apr_status_t link_md_to_servers(md_mod_conf_t *mc, md_t *md, server_rec *base_server, apr_pool_t *p, apr_pool_t *ptemp) { server_rec *s, *s_https; request_rec r; md_srv_conf_t *sc; apr_status_t rv = APR_SUCCESS; int i; const char *domain; apr_array_header_t *servers; sc = md_config_get(base_server); /* Assign the MD to all server_rec configs that it matches. If there already * is an assigned MD not equal this one, the configuration is in error. */ memset(&r, 0, sizeof(r)); servers = apr_array_make(ptemp, 5, sizeof(server_rec*)); for (s = base_server; s; s = s->next) { if (!mc->manage_base_server && s == base_server) { /* we shall not assign ourselves to the base server */ continue; } r.server = s; for (i = 0; i < md->domains->nelts; ++i) { domain = APR_ARRAY_IDX(md->domains, i, const char*); if (ap_matches_request_vhost(&r, domain, s->port)) { /* Create a unique md_srv_conf_t record for this server, if there is none yet */ sc = md_config_get_unique(s, p); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, base_server, APLOGNO(10041) "Server %s:%d matches md %s (config %s)", s->server_hostname, s->port, md->name, sc->name); if (sc->assigned == md) { /* already matched via another domain name */ goto next_server; } else if (sc->assigned) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, base_server, APLOGNO(10042) "conflict: MD %s matches server %s, but MD %s also matches.", md->name, s->server_hostname, sc->assigned->name); return APR_EINVAL; } /* If this server_rec is only for http: requests. Defined * alias names do not matter for this MD. * (see gh issue https://github.com/icing/mod_md/issues/57) * Otherwise, if server has name or an alias not covered, * it is by default auto-added (config transitive). * If mode is "manual", a generated certificate will not match * all necessary names. */ if (!mc->local_80 || !uses_port(s, mc->local_80)) { if (APR_SUCCESS != (rv = md_covers_server(md, s, p))) { return rv; } } sc->assigned = md; APR_ARRAY_PUSH(servers, server_rec*) = s; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, base_server, APLOGNO(10043) "Managed Domain %s applies to vhost %s:%d", md->name, s->server_hostname, s->port); goto next_server; } } next_server: continue; } if (APR_SUCCESS == rv) { if (apr_is_empty_array(servers)) { if (md->renew_mode != MD_RENEW_ALWAYS) { /* Not an error, but looks suspicious */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, base_server, APLOGNO(10045) "No VirtualHost matches Managed Domain %s", md->name); APR_ARRAY_PUSH(mc->unused_names, const char*) = md->name; } } else { const char *uri; /* Found matching server_rec's. Collect all 'ServerAdmin's into MD's contact list */ apr_array_clear(md->contacts); for (i = 0; i < servers->nelts; ++i) { s = APR_ARRAY_IDX(servers, i, server_rec*); if (s->server_admin && strcmp(DEFAULT_ADMIN, s->server_admin)) { uri = md_util_schemify(p, s->server_admin, "mailto"); if (md_array_str_index(md->contacts, uri, 0, 0) < 0) { APR_ARRAY_PUSH(md->contacts, const char *) = uri; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, base_server, APLOGNO(10044) "%s: added contact %s", md->name, uri); } } } if (md->require_https > MD_REQUIRE_OFF) { /* We require https for this MD, but do we have port 443 (or a mapped one) * available? */ if (mc->local_443 <= 0) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, base_server, APLOGNO(10105) "MDPortMap says there is no port for https (443), " "but MD %s is configured to require https. This " "only works when a 443 port is available.", md->name); return APR_EINVAL; } /* Ok, we know which local port represents 443, do we have a server_rec * for MD that has addresses with port 443? */ s_https = NULL; for (i = 0; i < servers->nelts; ++i) { s = APR_ARRAY_IDX(servers, i, server_rec*); if (matches_port_somewhere(s, mc->local_443)) { s_https = s; break; } } if (!s_https) { /* Did not find any server_rec that matches this MD *and* has an * s->addrs match for the https port. Suspicious. */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, base_server, APLOGNO(10106) "MD %s is configured to require https, but there seems to be " "no VirtualHost for it that has port %d in its address list. " "This looks as if it will not work.", md->name, mc->local_443); } } } } return rv; } static apr_status_t link_mds_to_servers(md_mod_conf_t *mc, server_rec *s, apr_pool_t *p, apr_pool_t *ptemp) { int i; md_t *md; apr_status_t rv = APR_SUCCESS; apr_array_clear(mc->unused_names); for (i = 0; i < mc->mds->nelts; ++i) { md = APR_ARRAY_IDX(mc->mds, i, md_t*); if (APR_SUCCESS != (rv = link_md_to_servers(mc, md, s, p, ptemp))) { goto leave; } } leave: return rv; } static apr_status_t merge_mds_with_conf(md_mod_conf_t *mc, apr_pool_t *p, server_rec *base_server, int log_level) { md_srv_conf_t *base_conf; md_t *md, *omd; const char *domain; const md_timeslice_t *ts; apr_status_t rv = APR_SUCCESS; int i, j; /* The global module configuration 'mc' keeps a list of all configured MDomains * in the server. This list is collected during configuration processing and, * in the post config phase, get updated from all merged server configurations * before the server starts processing. */ base_conf = md_config_get(base_server); md_config_get_timespan(&ts, base_conf, MD_CONFIG_RENEW_WINDOW); if (ts) md_reg_set_renew_window_default(mc->reg, ts); md_config_get_timespan(&ts, base_conf, MD_CONFIG_WARN_WINDOW); if (ts) md_reg_set_warn_window_default(mc->reg, ts); /* Complete the properties of the MDs, now that we have the complete, merged * server configurations. */ for (i = 0; i < mc->mds->nelts; ++i) { md = APR_ARRAY_IDX(mc->mds, i, md_t*); merge_srv_config(md, base_conf, p); /* Check that we have no overlap with the MDs already completed */ for (j = 0; j < i; ++j) { omd = APR_ARRAY_IDX(mc->mds, j, md_t*); if ((domain = md_common_name(md, omd)) != NULL) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, base_server, APLOGNO(10038) "two Managed Domains have an overlap in domain '%s'" ", first definition in %s(line %d), second in %s(line %d)", domain, md->defn_name, md->defn_line_number, omd->defn_name, omd->defn_line_number); return APR_EINVAL; } } if (md->cert_file && !md->pkey_file) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, base_server, APLOGNO(10170) "The Managed Domain '%s', defined in %s(line %d), " "has a MDCertificateFile but no MDCertificateKeyFile.", md->name, md->defn_name, md->defn_line_number); return APR_EINVAL; } if (!md->cert_file && md->pkey_file) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, base_server, APLOGNO(10171) "The Managed Domain '%s', defined in %s(line %d), " "has a MDCertificateKeyFile but no MDCertificateFile.", md->name, md->defn_name, md->defn_line_number); return APR_EINVAL; } init_acme_tls_1_domains(md, base_server); if (APLOG_IS_LEVEL(base_server, log_level)) { ap_log_error(APLOG_MARK, log_level, 0, base_server, APLOGNO(10039) "Completed MD[%s, CA=%s, Proto=%s, Agreement=%s, renew-mode=%d " "renew_window=%s, warn_window=%s", md->name, md->ca_url, md->ca_proto, md->ca_agreement, md->renew_mode, md->renew_window? md_timeslice_format(md->renew_window, p) : "unset", md->warn_window? md_timeslice_format(md->warn_window, p) : "unset"); } } return rv; } static void load_staged_data(md_mod_conf_t *mc, server_rec *s, apr_pool_t *p) { apr_status_t rv; md_t *md; md_result_t *result; int i; for (i = 0; i < mc->mds->nelts; ++i) { md = APR_ARRAY_IDX(mc->mds, i, md_t *); result = md_result_md_make(p, md); if (APR_SUCCESS == (rv = md_reg_load_staging(mc->reg, md, mc->env, result, p))) { ap_log_error( APLOG_MARK, APLOG_INFO, rv, s, APLOGNO(10068) "%s: staged set activated", md->name); } else if (!APR_STATUS_IS_ENOENT(rv)) { ap_log_error( APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(10069) "%s: error loading staged set", md->name); } } } static apr_status_t reinit_mds(md_mod_conf_t *mc, server_rec *s, apr_pool_t *p) { md_t *md; apr_status_t rv = APR_SUCCESS; int i; for (i = 0; i < mc->mds->nelts; ++i) { md = APR_ARRAY_IDX(mc->mds, i, md_t *); if (APR_SUCCESS != (rv = md_reg_reinit_state(mc->reg, (md_t*)md, p))) { ap_log_error( APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(10172) "%s: error reinitiazing from store", md->name); break; } } return rv; } static void init_watched_names(md_mod_conf_t *mc, apr_pool_t *p, apr_pool_t *ptemp, server_rec *s) { const md_t *md; md_result_t *result; int i; /* Calculate the list of MD names which we need to watch: * - all MDs that are used somewhere * - all MDs in drive mode 'AUTO' that are not in 'unused_names' */ result = md_result_make(ptemp, APR_SUCCESS); apr_array_clear(mc->watched_names); for (i = 0; i < mc->mds->nelts; ++i) { md = APR_ARRAY_IDX(mc->mds, i, const md_t *); md_result_set(result, APR_SUCCESS, NULL); if (md->state == MD_S_ERROR) { md_result_set(result, APR_EGENERAL, "in error state, unable to drive forward. This " "indicates an incomplete or inconsistent configuration. " "Please check the log for warnings in this regard."); continue; } if (md->renew_mode == MD_RENEW_AUTO && md_array_str_index(mc->unused_names, md->name, 0, 0) >= 0) { /* This MD is not used in any virtualhost, do not watch */ continue; } if (md_will_renew_cert(md)) { /* make a test init to detect early errors. */ md_reg_test_init(mc->reg, md, mc->env, result, p); if (APR_SUCCESS != result->status && result->detail) { apr_hash_set(mc->init_errors, md->name, APR_HASH_KEY_STRING, apr_pstrdup(p, result->detail)); ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(10173) "md[%s]: %s", md->name, result->detail); } } APR_ARRAY_PUSH(mc->watched_names, const char *) = md->name; } } static apr_status_t md_post_config_before_ssl(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { void *data = NULL; const char *mod_md_init_key = "mod_md_init_counter"; md_srv_conf_t *sc; md_mod_conf_t *mc; apr_status_t rv = APR_SUCCESS; int dry_run = 0, log_level = APLOG_DEBUG; md_store_t *store; apr_pool_userdata_get(&data, mod_md_init_key, s->process->pool); if (data == NULL) { /* At the first start, httpd makes a config check dry run. It * runs all config hooks to check if it can. If so, it does * this all again and starts serving requests. * * On a dry run, we therefore do all the cheap config things we * need to do to find out if the settings are ok. More expensive * things we delay to the real run. */ dry_run = 1; log_level = APLOG_TRACE1; ap_log_error( APLOG_MARK, log_level, 0, s, APLOGNO(10070) "initializing post config dry run"); apr_pool_userdata_set((const void *)1, mod_md_init_key, apr_pool_cleanup_null, s->process->pool); } else { ap_log_error( APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(10071) "mod_md (v%s), initializing...", MOD_MD_VERSION); } (void)plog; init_setups(p, s); md_log_set(log_is_level, log_print, NULL); md_config_post_config(s, p); sc = md_config_get(s); mc = sc->mc; mc->dry_run = dry_run; if (APR_SUCCESS != (rv = setup_store(&store, mc, p, s)) || APR_SUCCESS != (rv = md_reg_create(&mc->reg, p, store, mc->proxy_url))) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(10072) "setup md registry"); goto leave; } init_ssl(); /* How to bootstrap this module: * 1. find out if we know where http: and https: requests will arrive * 2. apply the now complete configuration setttings to the MDs * 3. Link MDs to the server_recs they are used in. Detect unused MDs. * 4. Update the store with the MDs. Change domain names, create new MDs, etc. * Basically all MD properties that are configured directly. * WARNING: this may change the name of an MD. If an MD loses the first * of its domain names, it first gets the new first one as name. The * store will find the old settings and "recover" the previous name. * 5. Load any staged data from previous driving. * 6. on a dry run, this is all we do * 7. Read back the MD properties that reflect the existance and aspect of * credentials that are in the store (or missing there). * Expiry times, MD state, etc. * 8. Determine the list of MDs that need driving/supervision. * 9. Cleanup any left-overs in registry/store that are no longer needed for * the list of MDs as we know it now. * 10. If this list is non-empty, setup a watchdog to run. */ /*1*/ if (APR_SUCCESS != (rv = detect_supported_ports(mc, s, p, log_level))) goto leave; /*2*/ if (APR_SUCCESS != (rv = merge_mds_with_conf(mc, p, s, log_level))) goto leave; /*3*/ if (APR_SUCCESS != (rv = link_mds_to_servers(mc, s, p, ptemp))) goto leave; /*4*/ if (APR_SUCCESS != (rv = md_reg_sync(mc->reg, p, ptemp, mc->mds))) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(10073) "synching %d mds to registry", mc->mds->nelts); goto leave; } /*5*/ load_staged_data(mc, s, p); /*6*/ if (dry_run) goto leave; /*7*/ if (APR_SUCCESS != (rv = reinit_mds(mc, s, p))) goto leave; /*8*/ init_watched_names(mc, p, ptemp, s); /*9*/ md_reg_cleanup_challenges(mc->reg, p, ptemp, mc->mds); /* From here on, the domains in the registry are readonly * and only staging/challenges may be manipulated */ md_reg_freeze_domains(mc->reg, mc->mds); if (mc->watched_names->nelts > 0) { /*10*/ ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, s, APLOGNO(10074) "%d out of %d mds need watching", mc->watched_names->nelts, mc->mds->nelts); md_http_use_implementation(md_curl_get_impl(p)); rv = md_start_watching(mc, s, p); } else { ap_log_error( APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(10075) "no mds to drive"); } leave: return rv; } /**************************************************************************************************/ /* connection context */ typedef struct { const char *protocol; } md_conn_ctx; static const char *md_protocol_get(const conn_rec *c) { md_conn_ctx *ctx; ctx = (md_conn_ctx*)ap_get_module_config(c->conn_config, &md_module); return ctx? ctx->protocol : NULL; } /**************************************************************************************************/ /* ALPN handling */ static int md_protocol_propose(conn_rec *c, request_rec *r, server_rec *s, const apr_array_header_t *offers, apr_array_header_t *proposals) { (void)s; if (!r && offers && opt_ssl_is_https && opt_ssl_is_https(c) && ap_array_str_contains(offers, PROTO_ACME_TLS_1)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "proposing protocol '%s'", PROTO_ACME_TLS_1); APR_ARRAY_PUSH(proposals, const char*) = PROTO_ACME_TLS_1; return OK; } return DECLINED; } static int md_protocol_switch(conn_rec *c, request_rec *r, server_rec *s, const char *protocol) { md_conn_ctx *ctx; (void)s; if (!r && opt_ssl_is_https && opt_ssl_is_https(c) && !strcmp(PROTO_ACME_TLS_1, protocol)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "switching protocol '%s'", PROTO_ACME_TLS_1); ctx = apr_pcalloc(c->pool, sizeof(*ctx)); ctx->protocol = PROTO_ACME_TLS_1; ap_set_module_config(c->conn_config, &md_module, ctx); c->keepalive = AP_CONN_CLOSE; return OK; } return DECLINED; } /**************************************************************************************************/ /* Access API to other httpd components */ static int md_is_managed(server_rec *s) { md_srv_conf_t *conf = md_config_get(s); if (conf && conf->assigned) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(10076) "%s: manages server %s", conf->assigned->name, s->server_hostname); return 1; } ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, s, "server %s is not managed", s->server_hostname); return 0; } static apr_status_t setup_fallback_cert(md_store_t *store, const md_t *md, server_rec *s, apr_pool_t *p) { md_pkey_t *pkey; md_cert_t *cert; md_pkey_spec_t spec; apr_status_t rv; spec.type = MD_PKEY_TYPE_RSA; spec.params.rsa.bits = MD_PKEY_RSA_BITS_DEF; if (APR_SUCCESS != (rv = md_pkey_gen(&pkey, p, &spec)) || APR_SUCCESS != (rv = md_store_save(store, p, MD_SG_DOMAINS, md->name, MD_FN_FALLBACK_PKEY, MD_SV_PKEY, (void*)pkey, 0)) || APR_SUCCESS != (rv = md_cert_self_sign(&cert, "Apache Managed Domain Fallback", md->domains, pkey, apr_time_from_sec(14 * MD_SECS_PER_DAY), p)) || APR_SUCCESS != (rv = md_store_save(store, p, MD_SG_DOMAINS, md->name, MD_FN_FALLBACK_CERT, MD_SV_CERT, (void*)cert, 0))) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(10174) "%s: setup fallback certificate", md->name); } return rv; } static apr_status_t get_certificate(server_rec *s, apr_pool_t *p, int fallback, const char **pcertfile, const char **pkeyfile) { apr_status_t rv = APR_ENOENT; md_srv_conf_t *sc; md_reg_t *reg; md_store_t *store; const md_t *md; *pkeyfile = NULL; *pcertfile = NULL; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(10113) "get_certificate called for vhost %s.", s->server_hostname); sc = md_config_get(s); if (!sc) { ap_log_error(APLOG_MARK, APLOG_TRACE2, 0, s, "asked for certificate of server %s which has no md config", s->server_hostname); return APR_ENOENT; } if (!sc->assigned) { /* With the new hooks in mod_ssl, we are invoked for all server_rec. It is * therefore normal, when we have nothing to add here. */ return APR_ENOENT; } assert(sc->mc); reg = sc->mc->reg; assert(reg); md = sc->assigned; if (!md) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(10115) "unable to hand out certificates, as registry can no longer " "find MD '%s'.", sc->assigned->name); return APR_ENOENT; } rv = md_reg_get_cred_files(pkeyfile, pcertfile, reg, MD_SG_DOMAINS, md, p); if (APR_STATUS_IS_ENOENT(rv)) { if (fallback) { /* Provide temporary, self-signed certificate as fallback, so that * clients do not get obscure TLS handshake errors or will see a fallback * virtual host that is not intended to be served here. */ store = md_reg_store_get(reg); assert(store); md_store_get_fname(pkeyfile, store, MD_SG_DOMAINS, md->name, MD_FN_FALLBACK_PKEY, p); md_store_get_fname(pcertfile, store, MD_SG_DOMAINS, md->name, MD_FN_FALLBACK_CERT, p); if (!md_file_exists(*pkeyfile, p) || !md_file_exists(*pcertfile, p)) { if (APR_SUCCESS != (rv = setup_fallback_cert(store, md, s, p))) { return rv; } } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(10116) "%s: providing fallback certificate for server %s", md->name, s->server_hostname); return APR_EAGAIN; } } else if (APR_SUCCESS != rv) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(10110) "retrieving credentials for MD %s", md->name); return rv; } ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, s, APLOGNO(10077) "%s[state=%d]: providing certificate for server %s", md->name, md->state, s->server_hostname); return rv; } static apr_status_t md_get_certificate(server_rec *s, apr_pool_t *p, const char **pkeyfile, const char **pcertfile) { return get_certificate(s, p, 1, pcertfile, pkeyfile); } static int md_add_cert_files(server_rec *s, apr_pool_t *p, apr_array_header_t *cert_files, apr_array_header_t *key_files) { const char *certfile, *keyfile; apr_status_t rv; ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, s, "hook ssl_add_cert_files for %s", s->server_hostname); rv = get_certificate(s, p, 0, &certfile, &keyfile); if (APR_SUCCESS == rv) { if (!apr_is_empty_array(cert_files)) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(10084) "host '%s' is covered by a Managed Domain, but " "certificate/key files are already configured " "for it (most likely via SSLCertificateFile).", s->server_hostname); } APR_ARRAY_PUSH(cert_files, const char*) = certfile; APR_ARRAY_PUSH(key_files, const char*) = keyfile; return DONE; } return DECLINED; } static int md_add_fallback_cert_files(server_rec *s, apr_pool_t *p, apr_array_header_t *cert_files, apr_array_header_t *key_files) { const char *certfile, *keyfile; apr_status_t rv; ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, s, "hook ssl_add_fallback_cert_files for %s", s->server_hostname); rv = get_certificate(s, p, 1, &certfile, &keyfile); if (APR_EAGAIN == rv) { APR_ARRAY_PUSH(cert_files, const char*) = certfile; APR_ARRAY_PUSH(key_files, const char*) = keyfile; return DONE; } return DECLINED; } static int md_is_challenge(conn_rec *c, const char *servername, X509 **pcert, EVP_PKEY **pkey) { md_srv_conf_t *sc; const char *protocol, *challenge, *cert_name, *pkey_name; apr_status_t rv; if (!servername) goto out; challenge = NULL; if ((protocol = md_protocol_get(c)) && !strcmp(PROTO_ACME_TLS_1, protocol)) { challenge = "tls-alpn-01"; cert_name = MD_FN_TLSALPN01_CERT; pkey_name = MD_FN_TLSALPN01_PKEY; sc = md_config_get(c->base_server); if (sc && sc->mc->reg) { md_store_t *store = md_reg_store_get(sc->mc->reg); md_cert_t *mdcert; md_pkey_t *mdpkey; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "%s: load certs/keys %s/%s", servername, cert_name, pkey_name); rv = md_store_load(store, MD_SG_CHALLENGES, servername, cert_name, MD_SV_CERT, (void**)&mdcert, c->pool); if (APR_SUCCESS == rv && (*pcert = md_cert_get_X509(mdcert))) { rv = md_store_load(store, MD_SG_CHALLENGES, servername, pkey_name, MD_SV_PKEY, (void**)&mdpkey, c->pool); if (APR_SUCCESS == rv && (*pkey = md_pkey_get_EVP_PKEY(mdpkey))) { ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, c, APLOGNO(10078) "%s: is a %s challenge host", servername, challenge); return 1; } ap_log_cerror(APLOG_MARK, APLOG_WARNING, rv, c, APLOGNO(10079) "%s: challenge data not complete, key unavailable", servername); } else { ap_log_cerror(APLOG_MARK, APLOG_INFO, rv, c, APLOGNO(10080) "%s: unknown %s challenge host", servername, challenge); } } } out: *pcert = NULL; *pkey = NULL; return 0; } static int md_answer_challenge(conn_rec *c, const char *servername, X509 **pcert, EVP_PKEY **pkey) { if (md_is_challenge(c, servername, pcert, pkey)) { return APR_SUCCESS; } return DECLINED; } /**************************************************************************************************/ /* ACME 'http-01' challenge responses */ #define WELL_KNOWN_PREFIX "/.well-known/" #define ACME_CHALLENGE_PREFIX WELL_KNOWN_PREFIX"acme-challenge/" static int md_http_challenge_pr(request_rec *r) { apr_bucket_brigade *bb; const md_srv_conf_t *sc; const char *name, *data; md_reg_t *reg; const md_t *md; apr_status_t rv; if (r->parsed_uri.path && !strncmp(ACME_CHALLENGE_PREFIX, r->parsed_uri.path, sizeof(ACME_CHALLENGE_PREFIX)-1)) { sc = ap_get_module_config(r->server->module_config, &md_module); if (sc && sc->mc) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "access inside /.well-known/acme-challenge for %s%s", r->hostname, r->parsed_uri.path); md = md_get_by_domain(sc->mc->mds, r->hostname); name = r->parsed_uri.path + sizeof(ACME_CHALLENGE_PREFIX)-1; reg = sc && sc->mc? sc->mc->reg : NULL; if (strlen(name) && !ap_strchr_c(name, '/') && reg) { md_store_t *store = md_reg_store_get(reg); rv = md_store_load(store, MD_SG_CHALLENGES, r->hostname, MD_FN_HTTP01, MD_SV_TEXT, (void**)&data, r->pool); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, "loading challenge for %s (%s)", r->hostname, r->uri); if (APR_SUCCESS == rv) { apr_size_t len = strlen(data); if (r->method_number != M_GET) { return HTTP_NOT_IMPLEMENTED; } /* A GET on a challenge resource for a hostname we are * configured for. Let's send the content back */ r->status = HTTP_OK; apr_table_setn(r->headers_out, "Content-Length", apr_ltoa(r->pool, (long)len)); bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); apr_brigade_write(bb, NULL, NULL, data, len); ap_pass_brigade(r->output_filters, bb); apr_brigade_cleanup(bb); return DONE; } else if (!md || md->renew_mode == MD_RENEW_MANUAL || (md->cert_file && md->renew_mode == MD_RENEW_AUTO)) { /* The request hostname is not for a domain - or at least not for * a domain that we renew ourselves. We are not * the sole authority here for /.well-known/acme-challenge (see PR62189). * So, we decline to handle this and give others a chance to provide * the answer. */ return DECLINED; } else if (APR_STATUS_IS_ENOENT(rv)) { return HTTP_NOT_FOUND; } ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(10081) "loading challenge %s from store", name); return HTTP_INTERNAL_SERVER_ERROR; } } } return DECLINED; } /**************************************************************************************************/ /* Require Https hook */ static int md_require_https_maybe(request_rec *r) { const md_srv_conf_t *sc; apr_uri_t uri; const char *s; int status; if (opt_ssl_is_https && r->parsed_uri.path && strncmp(WELL_KNOWN_PREFIX, r->parsed_uri.path, sizeof(WELL_KNOWN_PREFIX)-1)) { sc = ap_get_module_config(r->server->module_config, &md_module); if (sc && sc->assigned && sc->assigned->require_https > MD_REQUIRE_OFF) { if (opt_ssl_is_https(r->connection)) { /* Using https: * if 'permanent' and no one else set a HSTS header already, do it */ if (sc->assigned->require_https == MD_REQUIRE_PERMANENT && sc->mc->hsts_header && !apr_table_get(r->headers_out, MD_HSTS_HEADER)) { apr_table_setn(r->headers_out, MD_HSTS_HEADER, sc->mc->hsts_header); } } else { /* Not using https:, but require it. Redirect. */ if (r->method_number == M_GET) { /* safe to use the old-fashioned codes */ status = ((MD_REQUIRE_PERMANENT == sc->assigned->require_https)? HTTP_MOVED_PERMANENTLY : HTTP_MOVED_TEMPORARILY); } else { /* these should keep the method unchanged on retry */ status = ((MD_REQUIRE_PERMANENT == sc->assigned->require_https)? HTTP_PERMANENT_REDIRECT : HTTP_TEMPORARY_REDIRECT); } s = ap_construct_url(r->pool, r->uri, r); if (APR_SUCCESS == apr_uri_parse(r->pool, s, &uri)) { uri.scheme = (char*)"https"; uri.port = 443; uri.port_str = (char*)"443"; uri.query = r->parsed_uri.query; uri.fragment = r->parsed_uri.fragment; s = apr_uri_unparse(r->pool, &uri, APR_URI_UNP_OMITUSERINFO); if (s && *s) { apr_table_setn(r->headers_out, "Location", s); return status; } } } } } return DECLINED; } /* Runs once per created child process. Perform any process * related initialization here. */ static void md_child_init(apr_pool_t *pool, server_rec *s) { (void)pool; (void)s; } /* Install this module into the apache2 infrastructure. */ static void md_hooks(apr_pool_t *pool) { static const char *const mod_ssl[] = { "mod_ssl.c", NULL}; /* Leave the ssl initialization to mod_ssl or friends. */ md_acme_init(pool, AP_SERVER_BASEVERSION, 0); ap_log_perror(APLOG_MARK, APLOG_TRACE1, 0, pool, "installing hooks"); /* Run once after configuration is set, before mod_ssl. * Run again after mod_ssl is done. */ ap_hook_post_config(md_post_config_before_ssl, NULL, mod_ssl, APR_HOOK_MIDDLE); /* Run once after a child process has been created. */ ap_hook_child_init(md_child_init, NULL, mod_ssl, APR_HOOK_MIDDLE); /* answer challenges *very* early, before any configured authentication may strike */ ap_hook_post_read_request(md_require_https_maybe, mod_ssl, NULL, APR_HOOK_MIDDLE); ap_hook_post_read_request(md_http_challenge_pr, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_protocol_propose(md_protocol_propose, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_protocol_switch(md_protocol_switch, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_protocol_get(md_protocol_get, NULL, NULL, APR_HOOK_MIDDLE); /* Status request handlers and contributors */ ap_hook_post_read_request(md_http_cert_status, NULL, mod_ssl, APR_HOOK_MIDDLE); APR_OPTIONAL_HOOK(ap, status_hook, md_status_hook, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_handler(md_status_handler, NULL, NULL, APR_HOOK_MIDDLE); #ifdef SSL_CERT_HOOKS (void)md_is_managed; (void)md_get_certificate; APR_OPTIONAL_HOOK(ssl, add_cert_files, md_add_cert_files, NULL, NULL, APR_HOOK_MIDDLE); APR_OPTIONAL_HOOK(ssl, add_fallback_cert_files, md_add_fallback_cert_files, NULL, NULL, APR_HOOK_MIDDLE); APR_OPTIONAL_HOOK(ssl, answer_challenge, md_answer_challenge, NULL, NULL, APR_HOOK_MIDDLE); #else (void)md_add_cert_files; (void)md_add_fallback_cert_files; (void)md_answer_challenge; APR_REGISTER_OPTIONAL_FN(md_is_challenge); APR_REGISTER_OPTIONAL_FN(md_is_managed); APR_REGISTER_OPTIONAL_FN(md_get_certificate); #endif } ������������������������httpd-2.4.41/modules/md/md_acme_authz.c�������������������������������������������������������������0000644�0000000�0000050�00000056064�13511051361�016257� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <stdio.h> #include <apr_lib.h> #include <apr_buckets.h> #include <apr_file_info.h> #include <apr_file_io.h> #include <apr_fnmatch.h> #include <apr_hash.h> #include <apr_strings.h> #include <apr_tables.h> #include "md.h" #include "md_crypt.h" #include "md_json.h" #include "md_http.h" #include "md_log.h" #include "md_jws.h" #include "md_result.h" #include "md_store.h" #include "md_util.h" #include "md_acme.h" #include "md_acme_authz.h" md_acme_authz_t *md_acme_authz_create(apr_pool_t *p) { md_acme_authz_t *authz; authz = apr_pcalloc(p, sizeof(*authz)); return authz; } /**************************************************************************************************/ /* Register a new authorization */ typedef struct { size_t index; const char *type; const char *uri; const char *token; const char *key_authz; } md_acme_authz_cha_t; typedef struct { apr_pool_t *p; md_acme_t *acme; const char *domain; md_acme_authz_t *authz; md_acme_authz_cha_t *challenge; } authz_req_ctx; static void authz_req_ctx_init(authz_req_ctx *ctx, md_acme_t *acme, const char *domain, md_acme_authz_t *authz, apr_pool_t *p) { memset(ctx, 0, sizeof(*ctx)); ctx->p = p; ctx->acme = acme; ctx->domain = domain; ctx->authz = authz; } static apr_status_t on_init_authz(md_acme_req_t *req, void *baton) { authz_req_ctx *ctx = baton; md_json_t *jpayload; jpayload = md_json_create(req->p); md_json_sets("new-authz", jpayload, MD_KEY_RESOURCE, NULL); md_json_sets("dns", jpayload, MD_KEY_IDENTIFIER, MD_KEY_TYPE, NULL); md_json_sets(ctx->domain, jpayload, MD_KEY_IDENTIFIER, MD_KEY_VALUE, NULL); return md_acme_req_body_init(req, jpayload); } static apr_status_t authz_created(md_acme_t *acme, apr_pool_t *p, const apr_table_t *hdrs, md_json_t *body, void *baton) { authz_req_ctx *ctx = baton; const char *location = apr_table_get(hdrs, "location"); apr_status_t rv = APR_SUCCESS; (void)acme; (void)p; if (location) { ctx->authz = md_acme_authz_create(ctx->p); ctx->authz->domain = apr_pstrdup(ctx->p, ctx->domain); ctx->authz->url = apr_pstrdup(ctx->p, location); ctx->authz->resource = md_json_clone(ctx->p, body); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, rv, ctx->p, "authz_new at %s", location); } else { rv = APR_EINVAL; md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, rv, ctx->p, "new authz, no location header"); } return rv; } apr_status_t md_acme_authz_register(struct md_acme_authz_t **pauthz, md_acme_t *acme, const char *domain, apr_pool_t *p) { apr_status_t rv; authz_req_ctx ctx; authz_req_ctx_init(&ctx, acme, domain, NULL, p); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, acme->p, "create new authz"); rv = md_acme_POST(acme, acme->api.v1.new_authz, on_init_authz, authz_created, NULL, NULL, &ctx); *pauthz = (APR_SUCCESS == rv)? ctx.authz : NULL; return rv; } /**************************************************************************************************/ /* Update an existing authorization */ apr_status_t md_acme_authz_retrieve(md_acme_t *acme, apr_pool_t *p, const char *url, md_acme_authz_t **pauthz) { md_acme_authz_t *authz; apr_status_t rv; authz = apr_pcalloc(p, sizeof(*authz)); authz->url = apr_pstrdup(p, url); rv = md_acme_authz_update(authz, acme, p); *pauthz = (APR_SUCCESS == rv)? authz : NULL; return rv; } apr_status_t md_acme_authz_update(md_acme_authz_t *authz, md_acme_t *acme, apr_pool_t *p) { md_json_t *json; const char *s, *err; md_log_level_t log_level; apr_status_t rv; assert(acme); assert(acme->http); assert(authz); assert(authz->url); authz->state = MD_ACME_AUTHZ_S_UNKNOWN; json = NULL; err = "unable to parse response"; log_level = MD_LOG_ERR; if (APR_SUCCESS == (rv = md_acme_get_json(&json, acme, authz->url, p)) && (s = md_json_gets(json, MD_KEY_STATUS, NULL))) { authz->domain = md_json_gets(json, MD_KEY_IDENTIFIER, MD_KEY_VALUE, NULL); authz->resource = json; if (!strcmp(s, "pending")) { authz->state = MD_ACME_AUTHZ_S_PENDING; err = "challenge 'pending'"; log_level = MD_LOG_DEBUG; } else if (!strcmp(s, "valid")) { authz->state = MD_ACME_AUTHZ_S_VALID; err = "challenge 'valid'"; log_level = MD_LOG_DEBUG; } else if (!strcmp(s, "invalid")) { authz->state = MD_ACME_AUTHZ_S_INVALID; err = "challenge 'invalid'"; } } if (json && authz->state == MD_ACME_AUTHZ_S_UNKNOWN) { err = "unable to understand response"; rv = APR_EINVAL; } if (md_log_is_level(p, log_level)) { md_log_perror(MD_LOG_MARK, log_level, rv, p, "ACME server authz: %s for %s at %s. " "Exact response was: %s", err? err : "", authz->domain, authz->url, json? md_json_writep(json, p, MD_JSON_FMT_COMPACT) : "not available"); } return rv; } /**************************************************************************************************/ /* response to a challenge */ static md_acme_authz_cha_t *cha_from_json(apr_pool_t *p, size_t index, md_json_t *json) { md_acme_authz_cha_t * cha; cha = apr_pcalloc(p, sizeof(*cha)); cha->index = index; cha->type = md_json_dups(p, json, MD_KEY_TYPE, NULL); if (md_json_has_key(json, MD_KEY_URL, NULL)) { /* ACMEv2 */ cha->uri = md_json_dups(p, json, MD_KEY_URL, NULL); } else { /* ACMEv1 */ cha->uri = md_json_dups(p, json, MD_KEY_URI, NULL); } cha->token = md_json_dups(p, json, MD_KEY_TOKEN, NULL); cha->key_authz = md_json_dups(p, json, MD_KEY_KEYAUTHZ, NULL); return cha; } static apr_status_t on_init_authz_resp(md_acme_req_t *req, void *baton) { authz_req_ctx *ctx = baton; md_json_t *jpayload; jpayload = md_json_create(req->p); if (MD_ACME_VERSION_MAJOR(req->acme->version) <= 1) { md_json_sets(MD_KEY_CHALLENGE, jpayload, MD_KEY_RESOURCE, NULL); } if (ctx->challenge->key_authz) { md_json_sets(ctx->challenge->key_authz, jpayload, MD_KEY_KEYAUTHZ, NULL); } return md_acme_req_body_init(req, jpayload); } static apr_status_t authz_http_set(md_acme_t *acme, apr_pool_t *p, const apr_table_t *hdrs, md_json_t *body, void *baton) { authz_req_ctx *ctx = baton; (void)acme; (void)p; (void)hdrs; (void)body; md_log_perror(MD_LOG_MARK, MD_LOG_INFO, 0, ctx->p, "updated authz %s", ctx->authz->url); return APR_SUCCESS; } static apr_status_t setup_key_authz(md_acme_authz_cha_t *cha, md_acme_authz_t *authz, md_acme_t *acme, apr_pool_t *p, int *pchanged) { const char *thumb64, *key_authz; apr_status_t rv; (void)authz; assert(cha); assert(cha->token); *pchanged = 0; if (APR_SUCCESS == (rv = md_jws_pkey_thumb(&thumb64, p, acme->acct_key))) { key_authz = apr_psprintf(p, "%s.%s", cha->token, thumb64); if (cha->key_authz) { if (strcmp(key_authz, cha->key_authz)) { /* Hu? Did the account change key? */ cha->key_authz = NULL; } } if (!cha->key_authz) { cha->key_authz = key_authz; *pchanged = 1; } } return rv; } static apr_status_t cha_http_01_setup(md_acme_authz_cha_t *cha, md_acme_authz_t *authz, md_acme_t *acme, md_store_t *store, md_pkey_spec_t *key_spec, apr_array_header_t *acme_tls_1_domains, apr_table_t *env, apr_pool_t *p) { const char *data; apr_status_t rv; int notify_server; (void)key_spec; (void)env; (void)acme_tls_1_domains; if (APR_SUCCESS != (rv = setup_key_authz(cha, authz, acme, p, ¬ify_server))) { goto out; } rv = md_store_load(store, MD_SG_CHALLENGES, authz->domain, MD_FN_HTTP01, MD_SV_TEXT, (void**)&data, p); if ((APR_SUCCESS == rv && strcmp(cha->key_authz, data)) || APR_STATUS_IS_ENOENT(rv)) { rv = md_store_save(store, p, MD_SG_CHALLENGES, authz->domain, MD_FN_HTTP01, MD_SV_TEXT, (void*)cha->key_authz, 0); notify_server = 1; } if (APR_SUCCESS == rv && notify_server) { authz_req_ctx ctx; /* challenge is setup or was changed from previous data, tell ACME server * so it may (re)try verification */ authz_req_ctx_init(&ctx, acme, NULL, authz, p); ctx.challenge = cha; rv = md_acme_POST(acme, cha->uri, on_init_authz_resp, authz_http_set, NULL, NULL, &ctx); } out: return rv; } static apr_status_t cha_tls_alpn_01_setup(md_acme_authz_cha_t *cha, md_acme_authz_t *authz, md_acme_t *acme, md_store_t *store, md_pkey_spec_t *key_spec, apr_array_header_t *acme_tls_1_domains, apr_table_t *env, apr_pool_t *p) { md_cert_t *cha_cert; md_pkey_t *cha_key; const char *acme_id, *token; apr_status_t rv; int notify_server; md_data data; (void)env; if (md_array_str_index(acme_tls_1_domains, authz->domain, 0, 0) < 0) { rv = APR_ENOTIMPL; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "%s: protocol 'acme-tls/1' not enabled for this domain.", authz->domain); goto out; } if (APR_SUCCESS != (rv = setup_key_authz(cha, authz, acme, p, ¬ify_server))) { goto out; } rv = md_store_load(store, MD_SG_CHALLENGES, authz->domain, MD_FN_TLSALPN01_CERT, MD_SV_CERT, (void**)&cha_cert, p); if ((APR_SUCCESS == rv && !md_cert_covers_domain(cha_cert, authz->domain)) || APR_STATUS_IS_ENOENT(rv)) { if (APR_SUCCESS != (rv = md_pkey_gen(&cha_key, p, key_spec))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: create tls-alpn-01 challenge key", authz->domain); goto out; } /* Create a "tls-alpn-01" certificate for the domain we want to authenticate. * The server will need to answer a TLS connection with SNI == authz->domain * and ALPN procotol "acme-tls/1" with this certificate. */ MD_DATA_SET_STR(&data, cha->key_authz); rv = md_crypt_sha256_digest_hex(&token, p, &data); if (APR_SUCCESS != rv) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: create tls-alpn-01 cert", authz->domain); goto out; } acme_id = apr_psprintf(p, "critical,DER:04:20:%s", token); if (APR_SUCCESS != (rv = md_cert_make_tls_alpn_01(&cha_cert, authz->domain, acme_id, cha_key, apr_time_from_sec(7 * MD_SECS_PER_DAY), p))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: create tls-alpn-01 cert", authz->domain); goto out; } if (APR_SUCCESS == (rv = md_store_save(store, p, MD_SG_CHALLENGES, authz->domain, MD_FN_TLSALPN01_PKEY, MD_SV_PKEY, (void*)cha_key, 0))) { rv = md_store_save(store, p, MD_SG_CHALLENGES, authz->domain, MD_FN_TLSALPN01_CERT, MD_SV_CERT, (void*)cha_cert, 0); } notify_server = 1; } if (APR_SUCCESS == rv && notify_server) { authz_req_ctx ctx; /* challenge is setup or was changed from previous data, tell ACME server * so it may (re)try verification */ authz_req_ctx_init(&ctx, acme, NULL, authz, p); ctx.challenge = cha; rv = md_acme_POST(acme, cha->uri, on_init_authz_resp, authz_http_set, NULL, NULL, &ctx); } out: return rv; } static apr_status_t cha_dns_01_setup(md_acme_authz_cha_t *cha, md_acme_authz_t *authz, md_acme_t *acme, md_store_t *store, md_pkey_spec_t *key_spec, apr_array_header_t *acme_tls_1_domains, apr_table_t *env, apr_pool_t *p) { const char *token; const char * const *argv; const char *cmdline, *dns01_cmd; apr_status_t rv; int exit_code, notify_server; authz_req_ctx ctx; md_data data; (void)store; (void)key_spec; (void)acme_tls_1_domains; dns01_cmd = apr_table_get(env, MD_KEY_CMD_DNS01); if (!dns01_cmd) { rv = APR_ENOTIMPL; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "%s: dns-01 command not set", authz->domain); goto out; } if (APR_SUCCESS != (rv = setup_key_authz(cha, authz, acme, p, ¬ify_server))) { goto out; } MD_DATA_SET_STR(&data, cha->key_authz); rv = md_crypt_sha256_digest64(&token, p, &data); if (APR_SUCCESS != rv) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: create dns-01 token", authz->domain); goto out; } cmdline = apr_psprintf(p, "%s setup %s %s", dns01_cmd, authz->domain, token); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, p, "%s: dns-01 setup command: %s", authz->domain, cmdline); apr_tokenize_to_argv(cmdline, (char***)&argv, p); if (APR_SUCCESS != (rv = md_util_exec(p, argv[0], argv, &exit_code))) { md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, rv, p, "%s: dns-01 setup command failed to execute", authz->domain); goto out; } if (exit_code) { rv = APR_EGENERAL; md_log_perror(MD_LOG_MARK, MD_LOG_INFO, rv, p, "%s: dns-01 setup command returns %d", authz->domain, exit_code); goto out; } /* challenge is setup, tell ACME server so it may (re)try verification */ md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "%s: dns-01 setup succeeded", authz->domain); authz_req_ctx_init(&ctx, acme, NULL, authz, p); ctx.challenge = cha; rv = md_acme_POST(acme, cha->uri, on_init_authz_resp, authz_http_set, NULL, NULL, &ctx); out: return rv; } static apr_status_t cha_dns_01_teardown(md_store_t *store, const char *domain, apr_table_t *env, apr_pool_t *p) { const char * const *argv; const char *cmdline, *dns01_cmd; apr_status_t rv; int exit_code; (void)store; dns01_cmd = apr_table_get(env, MD_KEY_CMD_DNS01); if (!dns01_cmd) { rv = APR_ENOTIMPL; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, p, "%s: dns-01 command not set", domain); goto out; } cmdline = apr_psprintf(p, "%s teardown %s", dns01_cmd, domain); apr_tokenize_to_argv(cmdline, (char***)&argv, p); if (APR_SUCCESS != (rv = md_util_exec(p, argv[0], argv, &exit_code)) || exit_code) { md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, rv, p, "%s: dns-01 teardown command failed (exit code=%d)", domain, exit_code); } out: return rv; } static apr_status_t cha_teardown_dir(md_store_t *store, const char *domain, apr_table_t *env, apr_pool_t *p) { (void)env; return md_store_purge(store, p, MD_SG_CHALLENGES, domain); } typedef apr_status_t cha_setup(md_acme_authz_cha_t *cha, md_acme_authz_t *authz, md_acme_t *acme, md_store_t *store, md_pkey_spec_t *key_spec, apr_array_header_t *acme_tls_1_domains, apr_table_t *env, apr_pool_t *p); typedef apr_status_t cha_teardown(md_store_t *store, const char *domain, apr_table_t *env, apr_pool_t *p); typedef struct { const char *name; cha_setup *setup; cha_teardown *teardown; } cha_type; static const cha_type CHA_TYPES[] = { { MD_AUTHZ_TYPE_HTTP01, cha_http_01_setup, cha_teardown_dir }, { MD_AUTHZ_TYPE_TLSALPN01, cha_tls_alpn_01_setup, cha_teardown_dir }, { MD_AUTHZ_TYPE_DNS01, cha_dns_01_setup, cha_dns_01_teardown }, }; static const apr_size_t CHA_TYPES_LEN = (sizeof(CHA_TYPES)/sizeof(CHA_TYPES[0])); typedef struct { apr_pool_t *p; const char *type; md_acme_authz_cha_t *accepted; apr_array_header_t *offered; } cha_find_ctx; static apr_status_t collect_offered(void *baton, size_t index, md_json_t *json) { cha_find_ctx *ctx = baton; const char *ctype; (void)index; if ((ctype = md_json_gets(json, MD_KEY_TYPE, NULL))) { APR_ARRAY_PUSH(ctx->offered, const char*) = apr_pstrdup(ctx->p, ctype); } return 1; } static apr_status_t find_type(void *baton, size_t index, md_json_t *json) { cha_find_ctx *ctx = baton; const char *ctype = md_json_gets(json, MD_KEY_TYPE, NULL); if (ctype && !apr_strnatcasecmp(ctx->type, ctype)) { ctx->accepted = cha_from_json(ctx->p, index, json); return 0; } return 1; } apr_status_t md_acme_authz_respond(md_acme_authz_t *authz, md_acme_t *acme, md_store_t *store, apr_array_header_t *challenges, md_pkey_spec_t *key_spec, apr_array_header_t *acme_tls_1_domains, apr_table_t *env, apr_pool_t *p, const char **psetup_token, md_result_t *result) { apr_status_t rv; int i; cha_find_ctx fctx; const char *challenge_setup; assert(acme); assert(authz); assert(authz->resource); fctx.p = p; fctx.accepted = NULL; /* Look in the order challenge types are defined: * - if they are offered by the CA, try to set it up * - if setup was successful, we are done and the CA will evaluate us * - if setup failed, continue to look for another supported challenge type * - if there is no overlap in types, tell the user that she has to configure * either more types (dns, tls-alpn-01), make ports available or refrain * from useing wildcard domains when dns is not available. etc. * - if there was an overlap, but no setup was successfull, report that. We * will retry this, maybe the failure is temporary (e.g. command to setup DNS */ rv = APR_ENOTIMPL; challenge_setup = NULL; for (i = 0; i < challenges->nelts && !fctx.accepted; ++i) { fctx.type = APR_ARRAY_IDX(challenges, i, const char *); md_json_itera(find_type, &fctx, authz->resource, MD_KEY_CHALLENGES, NULL); if (fctx.accepted) { for (i = 0; i < (int)CHA_TYPES_LEN; ++i) { if (!apr_strnatcasecmp(CHA_TYPES[i].name, fctx.accepted->type)) { md_result_activity_printf(result, "Setting up challenge '%s' for domain %s", fctx.accepted->type, authz->domain); rv = CHA_TYPES[i].setup(fctx.accepted, authz, acme, store, key_spec, acme_tls_1_domains, env, p); if (APR_SUCCESS == rv) { md_log_perror(MD_LOG_MARK, MD_LOG_INFO, rv, p, "%s: set up challenge '%s'", authz->domain, fctx.accepted->type); challenge_setup = CHA_TYPES[i].name; goto out; } md_result_printf(result, rv, "error setting up challenge '%s', " "for domain %s, looking for other option", fctx.accepted->type, authz->domain); md_result_log(result, MD_LOG_INFO); } } } } out: *psetup_token = (APR_SUCCESS == rv)? apr_psprintf(p, "%s:%s", challenge_setup, authz->domain) : NULL; if (!fctx.accepted || APR_ENOTIMPL == rv) { rv = APR_EINVAL; fctx.offered = apr_array_make(p, 5, sizeof(const char*)); md_json_itera(collect_offered, &fctx, authz->resource, MD_KEY_CHALLENGES, NULL); md_result_printf(result, rv, "None of offered challenge types for domain %s are supported. " "The server offered '%s' and available are: '%s'.", authz->domain, apr_array_pstrcat(p, fctx.offered, ' '), apr_array_pstrcat(p, challenges, ' ')); result->problem = "challenge-mismatch"; md_result_log(result, MD_LOG_ERR); } else if (APR_SUCCESS != rv) { fctx.offered = apr_array_make(p, 5, sizeof(const char*)); md_json_itera(collect_offered, &fctx, authz->resource, MD_KEY_CHALLENGES, NULL); md_result_printf(result, rv, "None of the offered challenge types %s offered " "for domain %s could be setup successfully. Please check the " "log for errors.", authz->domain, apr_array_pstrcat(p, fctx.offered, ' ')); result->problem = "challenge-setup-failure"; md_result_log(result, MD_LOG_ERR); } return rv; } apr_status_t md_acme_authz_teardown(struct md_store_t *store, const char *token, apr_table_t *env, apr_pool_t *p) { char *challenge, *domain; int i; if (strchr(token, ':')) { challenge = apr_pstrdup(p, token); domain = strchr(challenge, ':'); *domain = '\0'; domain++; for (i = 0; i < (int)CHA_TYPES_LEN; ++i) { if (!apr_strnatcasecmp(CHA_TYPES[i].name, challenge)) { if (CHA_TYPES[i].teardown) { return CHA_TYPES[i].teardown(store, domain, env, p); } break; } } } return APR_SUCCESS; } ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/mod_md_status.h�������������������������������������������������������������0000644�0000000�0000050�00000001771�13511051361�016321� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_status_h #define mod_md_md_status_h int md_http_cert_status(request_rec *r); int md_status_hook(request_rec *r, int flags); int md_status_handler(request_rec *r); #endif /* mod_md_md_status_h */ �������httpd-2.4.41/modules/md/md_reg.c��������������������������������������������������������������������0000644�0000000�0000050�00000120013�13511051361�014676� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <stddef.h> #include <stdio.h> #include <stdlib.h> #include <apr_lib.h> #include <apr_hash.h> #include <apr_strings.h> #include <apr_uri.h> #include "md.h" #include "md_crypt.h" #include "md_log.h" #include "md_json.h" #include "md_result.h" #include "md_reg.h" #include "md_store.h" #include "md_status.h" #include "md_util.h" #include "md_acme.h" #include "md_acme_acct.h" struct md_reg_t { apr_pool_t *p; struct md_store_t *store; struct apr_hash_t *protos; struct apr_hash_t *certs; int can_http; int can_https; const char *proxy_url; int domains_frozen; const md_timeslice_t *renew_window; const md_timeslice_t *warn_window; }; /**************************************************************************************************/ /* life cycle */ static apr_status_t load_props(md_reg_t *reg, apr_pool_t *p) { md_json_t *json; apr_status_t rv; rv = md_store_load(reg->store, MD_SG_NONE, NULL, MD_FN_HTTPD_JSON, MD_SV_JSON, (void**)&json, p); if (APR_SUCCESS == rv) { if (md_json_has_key(json, MD_KEY_PROTO, MD_KEY_HTTP, NULL)) { reg->can_http = md_json_getb(json, MD_KEY_PROTO, MD_KEY_HTTP, NULL); } if (md_json_has_key(json, MD_KEY_PROTO, MD_KEY_HTTPS, NULL)) { reg->can_https = md_json_getb(json, MD_KEY_PROTO, MD_KEY_HTTPS, NULL); } } else if (APR_STATUS_IS_ENOENT(rv)) { rv = APR_SUCCESS; } return rv; } apr_status_t md_reg_create(md_reg_t **preg, apr_pool_t *p, struct md_store_t *store, const char *proxy_url) { md_reg_t *reg; apr_status_t rv; reg = apr_pcalloc(p, sizeof(*reg)); reg->p = p; reg->store = store; reg->protos = apr_hash_make(p); reg->certs = apr_hash_make(p); reg->can_http = 1; reg->can_https = 1; reg->proxy_url = proxy_url? apr_pstrdup(p, proxy_url) : NULL; md_timeslice_create(®->renew_window, p, MD_TIME_LIFE_NORM, MD_TIME_RENEW_WINDOW_DEF); md_timeslice_create(®->warn_window, p, MD_TIME_LIFE_NORM, MD_TIME_WARN_WINDOW_DEF); if (APR_SUCCESS == (rv = md_acme_protos_add(reg->protos, p))) { rv = load_props(reg, p); } *preg = (rv == APR_SUCCESS)? reg : NULL; return rv; } struct md_store_t *md_reg_store_get(md_reg_t *reg) { return reg->store; } /**************************************************************************************************/ /* checks */ static apr_status_t check_values(md_reg_t *reg, apr_pool_t *p, const md_t *md, int fields) { apr_status_t rv = APR_SUCCESS; const char *err = NULL; if (MD_UPD_DOMAINS & fields) { const md_t *other; const char *domain; int i; if (!md->domains || md->domains->nelts <= 0) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, APR_EINVAL, p, "empty domain list: %s", md->name); return APR_EINVAL; } for (i = 0; i < md->domains->nelts; ++i) { domain = APR_ARRAY_IDX(md->domains, i, const char *); if (!md_dns_is_name(p, domain, 1) && !md_dns_is_wildcard(p, domain)) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, APR_EINVAL, p, "md %s with invalid domain name: %s", md->name, domain); return APR_EINVAL; } } if (NULL != (other = md_reg_find_overlap(reg, md, &domain, p))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, APR_EINVAL, p, "md %s shares domain '%s' with md %s", md->name, domain, other->name); return APR_EINVAL; } } if (MD_UPD_CONTACTS & fields) { const char *contact; int i; for (i = 0; i < md->contacts->nelts && !err; ++i) { contact = APR_ARRAY_IDX(md->contacts, i, const char *); rv = md_util_abs_uri_check(p, contact, &err); if (err) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, APR_EINVAL, p, "contact for %s invalid (%s): %s", md->name, err, contact); return APR_EINVAL; } } } if ((MD_UPD_CA_URL & fields) && md->ca_url) { /* setting to empty is ok */ rv = md_util_abs_uri_check(p, md->ca_url, &err); if (err) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, APR_EINVAL, p, "CA url for %s invalid (%s): %s", md->name, err, md->ca_url); return APR_EINVAL; } } if ((MD_UPD_CA_PROTO & fields) && md->ca_proto) { /* setting to empty is ok */ /* Do we want to restrict this to "known" protocols? */ } if ((MD_UPD_CA_ACCOUNT & fields) && md->ca_account) { /* setting to empty is ok */ /* hmm, in case we know the protocol, some checks could be done */ } if ((MD_UPD_AGREEMENT & fields) && md->ca_agreement && strcmp("accepted", md->ca_agreement)) { /* setting to empty is ok */ rv = md_util_abs_uri_check(p, md->ca_agreement, &err); if (err) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, APR_EINVAL, p, "CA url for %s invalid (%s): %s", md->name, err, md->ca_agreement); return APR_EINVAL; } } return rv; } /**************************************************************************************************/ /* state assessment */ static apr_status_t state_init(md_reg_t *reg, apr_pool_t *p, md_t *md) { md_state_t state = MD_S_UNKNOWN; const md_pubcert_t *pub; const md_cert_t *cert; apr_status_t rv; if (md->renew_window == NULL) md->renew_window = reg->renew_window; if (md->warn_window == NULL) md->warn_window = reg->warn_window; if (APR_SUCCESS == (rv = md_reg_get_pubcert(&pub, reg, md, p))) { cert = APR_ARRAY_IDX(pub->certs, 0, const md_cert_t*); if (!md_is_covered_by_alt_names(md, pub->alt_names)) { state = MD_S_INCOMPLETE; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "md{%s}: incomplete, cert no longer covers all domains, " "needs sign up for a new certificate", md->name); goto out; } if (!md->must_staple != !md_cert_must_staple(cert)) { state = MD_S_INCOMPLETE; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "md{%s}: OCSP Stapling is%s requested, but certificate " "has it%s enabled. Need to get a new certificate.", md->name, md->must_staple? "" : " not", !md->must_staple? "" : " not"); goto out; } state = MD_S_COMPLETE; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "md{%s}: is complete", md->name); } else if (APR_STATUS_IS_ENOENT(rv)) { state = MD_S_INCOMPLETE; rv = APR_SUCCESS; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "md{%s}: incomplete, credentials not all there", md->name); } out: if (APR_SUCCESS != rv) { state = MD_S_ERROR; md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, rv, p, "md{%s}: error", md->name); } md->state = state; return rv; } /**************************************************************************************************/ /* iteration */ typedef struct { md_reg_t *reg; md_reg_do_cb *cb; void *baton; const char *exclude; const void *result; } reg_do_ctx; static int reg_md_iter(void *baton, md_store_t *store, md_t *md, apr_pool_t *ptemp) { reg_do_ctx *ctx = baton; (void)store; if (!ctx->exclude || strcmp(ctx->exclude, md->name)) { state_init(ctx->reg, ptemp, (md_t*)md); return ctx->cb(ctx->baton, ctx->reg, md); } return 1; } static int reg_do(md_reg_do_cb *cb, void *baton, md_reg_t *reg, apr_pool_t *p, const char *exclude) { reg_do_ctx ctx; ctx.reg = reg; ctx.cb = cb; ctx.baton = baton; ctx.exclude = exclude; return md_store_md_iter(reg_md_iter, &ctx, reg->store, p, MD_SG_DOMAINS, "*"); } int md_reg_do(md_reg_do_cb *cb, void *baton, md_reg_t *reg, apr_pool_t *p) { return reg_do(cb, baton, reg, p, NULL); } /**************************************************************************************************/ /* lookup */ md_t *md_reg_get(md_reg_t *reg, const char *name, apr_pool_t *p) { md_t *md; if (APR_SUCCESS == md_load(reg->store, MD_SG_DOMAINS, name, &md, p)) { state_init(reg, p, md); return md; } return NULL; } apr_status_t md_reg_reinit_state(md_reg_t *reg, md_t *md, apr_pool_t *p) { return state_init(reg, p, md); } typedef struct { const char *domain; md_t *md; } find_domain_ctx; static int find_domain(void *baton, md_reg_t *reg, md_t *md) { find_domain_ctx *ctx = baton; (void)reg; if (md_contains(md, ctx->domain, 0)) { ctx->md = md; return 0; } return 1; } md_t *md_reg_find(md_reg_t *reg, const char *domain, apr_pool_t *p) { find_domain_ctx ctx; ctx.domain = domain; ctx.md = NULL; md_reg_do(find_domain, &ctx, reg, p); if (ctx.md) { state_init(reg, p, ctx.md); } return ctx.md; } typedef struct { const md_t *md_checked; md_t *md; const char *s; } find_overlap_ctx; static int find_overlap(void *baton, md_reg_t *reg, md_t *md) { find_overlap_ctx *ctx = baton; const char *overlap; (void)reg; if ((overlap = md_common_name(ctx->md_checked, md))) { ctx->md = md; ctx->s = overlap; return 0; } return 1; } md_t *md_reg_find_overlap(md_reg_t *reg, const md_t *md, const char **pdomain, apr_pool_t *p) { find_overlap_ctx ctx; ctx.md_checked = md; ctx.md = NULL; ctx.s = NULL; reg_do(find_overlap, &ctx, reg, p, md->name); if (pdomain && ctx.s) { *pdomain = ctx.s; } if (ctx.md) { state_init(reg, p, ctx.md); } return ctx.md; } /**************************************************************************************************/ /* manipulation */ static apr_status_t p_md_add(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_reg_t *reg = baton; apr_status_t rv = APR_SUCCESS; md_t *md, *mine; int do_check; md = va_arg(ap, md_t *); do_check = va_arg(ap, int); if (reg->domains_frozen) return APR_EACCES; mine = md_clone(ptemp, md); if (do_check && APR_SUCCESS != (rv = check_values(reg, ptemp, md, MD_UPD_ALL))) goto leave; if (APR_SUCCESS != (rv = state_init(reg, ptemp, mine))) goto leave; rv = md_save(reg->store, p, MD_SG_DOMAINS, mine, 1); leave: return rv; } static apr_status_t add_md(md_reg_t *reg, md_t *md, apr_pool_t *p, int do_checks) { return md_util_pool_vdo(p_md_add, reg, p, md, do_checks, NULL); } apr_status_t md_reg_add(md_reg_t *reg, md_t *md, apr_pool_t *p) { return add_md(reg, md, p, 1); } static apr_status_t p_md_update(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_reg_t *reg = baton; apr_status_t rv = APR_SUCCESS; const char *name; const md_t *md, *updates; int fields, do_checks; md_t *nmd; name = va_arg(ap, const char *); updates = va_arg(ap, const md_t *); fields = va_arg(ap, int); do_checks = va_arg(ap, int); if (NULL == (md = md_reg_get(reg, name, ptemp))) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, APR_ENOENT, ptemp, "md %s", name); return APR_ENOENT; } md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, ptemp, "update md %s", name); if (do_checks && APR_SUCCESS != (rv = check_values(reg, ptemp, updates, fields))) { return rv; } if (reg->domains_frozen) return APR_EACCES; nmd = md_copy(ptemp, md); if (MD_UPD_DOMAINS & fields) { nmd->domains = updates->domains; md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update domains: %s", name); } if (MD_UPD_CA_URL & fields) { nmd->ca_url = updates->ca_url; md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update ca url: %s", name); } if (MD_UPD_CA_PROTO & fields) { nmd->ca_proto = updates->ca_proto; md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update ca protocol: %s", name); } if (MD_UPD_CA_ACCOUNT & fields) { nmd->ca_account = updates->ca_account; md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update account: %s", name); } if (MD_UPD_CONTACTS & fields) { nmd->contacts = updates->contacts; md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update contacts: %s", name); } if (MD_UPD_AGREEMENT & fields) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update agreement: %s", name); nmd->ca_agreement = updates->ca_agreement; } if (MD_UPD_DRIVE_MODE & fields) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update drive-mode: %s", name); nmd->renew_mode = updates->renew_mode; } if (MD_UPD_RENEW_WINDOW & fields) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update renew-window: %s", name); nmd->renew_window = updates->renew_window; } if (MD_UPD_WARN_WINDOW & fields) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update warn-window: %s", name); nmd->warn_window = updates->warn_window; } if (MD_UPD_CA_CHALLENGES & fields) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update ca challenges: %s", name); nmd->ca_challenges = (updates->ca_challenges? apr_array_copy(p, updates->ca_challenges) : NULL); } if (MD_UPD_PKEY_SPEC & fields) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update pkey spec: %s", name); nmd->pkey_spec = NULL; if (updates->pkey_spec) { nmd->pkey_spec = apr_pmemdup(p, updates->pkey_spec, sizeof(md_pkey_spec_t)); } } if (MD_UPD_REQUIRE_HTTPS & fields) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update require-https: %s", name); nmd->require_https = updates->require_https; } if (MD_UPD_TRANSITIVE & fields) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update transitive: %s", name); nmd->transitive = updates->transitive; } if (MD_UPD_MUST_STAPLE & fields) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update must-staple: %s", name); nmd->must_staple = updates->must_staple; } if (MD_UPD_PROTO & fields) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "update proto: %s", name); nmd->acme_tls_1_domains = updates->acme_tls_1_domains; } if (fields && APR_SUCCESS == (rv = md_save(reg->store, p, MD_SG_DOMAINS, nmd, 0))) { rv = state_init(reg, ptemp, nmd); } return rv; } static apr_status_t update_md(md_reg_t *reg, apr_pool_t *p, const char *name, const md_t *md, int fields, int do_checks) { return md_util_pool_vdo(p_md_update, reg, p, name, md, fields, do_checks, NULL); } apr_status_t md_reg_update(md_reg_t *reg, apr_pool_t *p, const char *name, const md_t *md, int fields) { return update_md(reg, p, name, md, fields, 1); } apr_status_t md_reg_delete_acct(md_reg_t *reg, apr_pool_t *p, const char *acct_id) { apr_status_t rv = APR_SUCCESS; rv = md_store_remove(reg->store, MD_SG_ACCOUNTS, acct_id, MD_FN_ACCOUNT, p, 1); if (APR_SUCCESS == rv) { md_store_remove(reg->store, MD_SG_ACCOUNTS, acct_id, MD_FN_ACCT_KEY, p, 1); } return rv; } /**************************************************************************************************/ /* certificate related */ static apr_status_t pubcert_load(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_reg_t *reg = baton; apr_array_header_t *certs; md_pubcert_t *pubcert, **ppubcert; const md_t *md; const md_cert_t *cert; md_cert_state_t cert_state; md_store_group_t group; apr_status_t rv; ppubcert = va_arg(ap, md_pubcert_t **); group = (md_store_group_t)va_arg(ap, int); md = va_arg(ap, const md_t *); if (md->cert_file) { rv = md_chain_fload(&certs, p, md->cert_file); } else { rv = md_pubcert_load(reg->store, group, md->name, &certs, p); } if (APR_SUCCESS != rv) goto leave; pubcert = apr_pcalloc(p, sizeof(*pubcert)); pubcert->certs = certs; cert = APR_ARRAY_IDX(certs, 0, const md_cert_t *); if (APR_SUCCESS != (rv = md_cert_get_alt_names(&pubcert->alt_names, cert, p))) goto leave; switch ((cert_state = md_cert_state_get(cert))) { case MD_CERT_VALID: case MD_CERT_EXPIRED: break; default: md_log_perror(MD_LOG_MARK, MD_LOG_ERR, APR_EINVAL, ptemp, "md %s has unexpected cert state: %d", md->name, cert_state); rv = APR_ENOTIMPL; break; } leave: *ppubcert = (APR_SUCCESS == rv)? pubcert : NULL; return rv; } apr_status_t md_reg_get_pubcert(const md_pubcert_t **ppubcert, md_reg_t *reg, const md_t *md, apr_pool_t *p) { apr_status_t rv = APR_SUCCESS; const md_pubcert_t *pubcert; const char *name; pubcert = apr_hash_get(reg->certs, md->name, (apr_ssize_t)strlen(md->name)); if (!pubcert && !reg->domains_frozen) { rv = md_util_pool_vdo(pubcert_load, reg, reg->p, &pubcert, MD_SG_DOMAINS, md, NULL); if (APR_STATUS_IS_ENOENT(rv)) { /* We cache it missing with an empty record */ pubcert = apr_pcalloc(reg->p, sizeof(*pubcert)); } else if (APR_SUCCESS != rv) goto leave; name = (p != reg->p)? apr_pstrdup(reg->p, md->name) : md->name; apr_hash_set(reg->certs, name, (apr_ssize_t)strlen(name), pubcert); } leave: if (APR_SUCCESS == rv && (!pubcert || !pubcert->certs)) { rv = APR_ENOENT; } *ppubcert = (APR_SUCCESS == rv)? pubcert : NULL; return rv; } apr_status_t md_reg_get_cred_files(const char **pkeyfile, const char **pcertfile, md_reg_t *reg, md_store_group_t group, const md_t *md, apr_pool_t *p) { apr_status_t rv; if (md->cert_file) { /* With fixed files configured, we use those without further checking them ourself */ *pcertfile = md->cert_file; *pkeyfile = md->pkey_file; return APR_SUCCESS; } rv = md_store_get_fname(pkeyfile, reg->store, group, md->name, MD_FN_PRIVKEY, p); if (APR_SUCCESS != rv) return rv; if (!md_file_exists(*pkeyfile, p)) return APR_ENOENT; rv = md_store_get_fname(pcertfile, reg->store, group, md->name, MD_FN_PUBCERT, p); if (APR_SUCCESS != rv) return rv; if (!md_file_exists(*pcertfile, p)) return APR_ENOENT; return APR_SUCCESS; } int md_reg_should_renew(md_reg_t *reg, const md_t *md, apr_pool_t *p) { const md_pubcert_t *pub; const md_cert_t *cert; md_timeperiod_t certlife, renewal; apr_status_t rv; if (md->state == MD_S_INCOMPLETE) return 1; rv = md_reg_get_pubcert(&pub, reg, md, p); if (APR_STATUS_IS_ENOENT(rv)) return 1; if (APR_SUCCESS == rv) { cert = APR_ARRAY_IDX(pub->certs, 0, const md_cert_t*); certlife.start = md_cert_get_not_before(cert); certlife.end = md_cert_get_not_after(cert); renewal = md_timeperiod_slice_before_end(&certlife, md->renew_window); if (md_log_is_level(p, MD_LOG_TRACE1)) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, p, "md[%s]: cert-life[%s] renewal[%s]", md->name, md_timeperiod_print(p, &certlife), md_timeperiod_print(p, &renewal)); } return md_timeperiod_has_started(&renewal, apr_time_now()); } return 0; } int md_reg_should_warn(md_reg_t *reg, const md_t *md, apr_pool_t *p) { const md_pubcert_t *pub; const md_cert_t *cert; md_timeperiod_t certlife, warn; apr_status_t rv; if (md->state == MD_S_INCOMPLETE) return 0; rv = md_reg_get_pubcert(&pub, reg, md, p); if (APR_STATUS_IS_ENOENT(rv)) return 0; if (APR_SUCCESS == rv) { cert = APR_ARRAY_IDX(pub->certs, 0, const md_cert_t*); certlife.start = md_cert_get_not_before(cert); certlife.end = md_cert_get_not_after(cert); warn = md_timeperiod_slice_before_end(&certlife, md->warn_window); if (md_log_is_level(p, MD_LOG_TRACE1)) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, p, "md[%s]: cert-life[%s] warn[%s]", md->name, md_timeperiod_print(p, &certlife), md_timeperiod_print(p, &warn)); } return md_timeperiod_has_started(&warn, apr_time_now()); } return 0; } /**************************************************************************************************/ /* synching */ typedef struct { apr_pool_t *p; apr_array_header_t *store_mds; } sync_ctx; static int do_add_md(void *baton, md_store_t *store, md_t *md, apr_pool_t *ptemp) { sync_ctx *ctx = baton; (void)store; (void)ptemp; APR_ARRAY_PUSH(ctx->store_mds, const md_t*) = md_clone(ctx->p, md); return 1; } static apr_status_t read_store_mds(md_reg_t *reg, sync_ctx *ctx) { int rv; apr_array_clear(ctx->store_mds); rv = md_store_md_iter(do_add_md, ctx, reg->store, ctx->p, MD_SG_DOMAINS, "*"); if (APR_STATUS_IS_ENOENT(rv) || APR_STATUS_IS_EINVAL(rv)) { rv = APR_SUCCESS; } return rv; } apr_status_t md_reg_set_props(md_reg_t *reg, apr_pool_t *p, int can_http, int can_https) { if (reg->can_http != can_http || reg->can_https != can_https) { md_json_t *json; if (reg->domains_frozen) return APR_EACCES; reg->can_http = can_http; reg->can_https = can_https; json = md_json_create(p); md_json_setb(can_http, json, MD_KEY_PROTO, MD_KEY_HTTP, NULL); md_json_setb(can_https, json, MD_KEY_PROTO, MD_KEY_HTTPS, NULL); return md_store_save(reg->store, p, MD_SG_NONE, NULL, MD_FN_HTTPD_JSON, MD_SV_JSON, json, 0); } return APR_SUCCESS; } static apr_status_t update_md(md_reg_t *reg, apr_pool_t *p, const char *name, const md_t *md, int fields, int do_checks); /** * Procedure: * 1. Collect all defined "managed domains" (MD). It does not matter where a MD is defined. * All MDs need to be unique and have no overlaps in their domain names. * Fail the config otherwise. Also, if a vhost matches an MD, it * needs to *only* have ServerAliases from that MD. There can be no more than one * matching MD for a vhost. But an MD can apply to several vhosts. * 2. Synchronize with the persistent store. Iterate over all configured MDs and * a. create them in the store if they do not already exist, neither under the * name or with a common domain. * b. compare domain lists from store and config, if * - store has dns name in other MD than from config, remove dns name from store def, * issue WARNING. * - store misses dns name from config, add dns name and update store * c. compare MD acme url/protocol, update if changed */ apr_status_t md_reg_sync(md_reg_t *reg, apr_pool_t *p, apr_pool_t *ptemp, apr_array_header_t *master_mds) { sync_ctx ctx; apr_status_t rv; ctx.p = ptemp; ctx.store_mds = apr_array_make(ptemp, 100, sizeof(md_t *)); rv = read_store_mds(reg, &ctx); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "sync: found %d mds in store", ctx.store_mds->nelts); if (reg->domains_frozen) return APR_EACCES; if (APR_SUCCESS == rv) { int i, fields; md_t *md, *config_md, *smd, *omd; const char *common; for (i = 0; i < master_mds->nelts; ++i) { md = APR_ARRAY_IDX(master_mds, i, md_t *); /* find the store md that is closest match for the configured md */ smd = md_find_closest_match(ctx.store_mds, md); if (smd) { fields = 0; /* Did the name change? This happens when the order of names in configuration * changes or when the first name is removed. Use the name from the store, but * remember the original one. We try to align this later on. */ if (strcmp(md->name, smd->name)) { md->configured_name = md->name; md->name = apr_pstrdup(p, smd->name); } /* Make the stored domain list *exactly* the same, even if * someone only changed upper/lowercase, we'd like to persist that. */ if (!md_equal_domains(md, smd, 1)) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "%s: domains changed", smd->name); smd->domains = md_array_str_clone(ptemp, md->domains); fields |= MD_UPD_DOMAINS; } /* Look for other store mds which have domains now being part of smd */ while (APR_SUCCESS == rv && (omd = md_get_by_dns_overlap(ctx.store_mds, md))) { /* find the name now duplicate */ common = md_common_name(md, omd); assert(common); /* Is this md still configured or has it been abandoned in the config? */ config_md = md_get_by_name(master_mds, omd->name); if (config_md && md_contains(config_md, common, 0)) { /* domain used in two configured mds, not allowed */ rv = APR_EINVAL; md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "domain %s used in md %s and %s", common, md->name, omd->name); } else { /* remove it from the other md and update store, or, if it * is now empty, move it into the archive */ omd->domains = md_array_str_remove(ptemp, omd->domains, common, 0); if (apr_is_empty_array(omd->domains)) { md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, rv, p, "All domains of the MD %s have moved elsewhere, " " moving it to the archive. ", omd->name); md_reg_remove(reg, ptemp, omd->name, 1); /* best effort */ } else { rv = update_md(reg, ptemp, omd->name, omd, MD_UPD_DOMAINS, 0); } } } /* If no CA url/proto is configured for the MD, take the default */ if (!md->ca_url) { md->ca_url = MD_ACME_DEF_URL; md->ca_proto = MD_PROTO_ACME; } if (MD_SVAL_UPDATE(md, smd, ca_url)) { smd->ca_url = md->ca_url; fields |= MD_UPD_CA_URL; } if (MD_SVAL_UPDATE(md, smd, ca_proto)) { smd->ca_proto = md->ca_proto; fields |= MD_UPD_CA_PROTO; } if (MD_SVAL_UPDATE(md, smd, ca_agreement)) { smd->ca_agreement = md->ca_agreement; fields |= MD_UPD_AGREEMENT; } if (MD_VAL_UPDATE(md, smd, transitive)) { smd->transitive = md->transitive; fields |= MD_UPD_TRANSITIVE; } if (MD_VAL_UPDATE(md, smd, renew_mode)) { smd->renew_mode = md->renew_mode; fields |= MD_UPD_DRIVE_MODE; } if (!apr_is_empty_array(md->contacts) && !md_array_str_eq(md->contacts, smd->contacts, 0)) { smd->contacts = md->contacts; fields |= MD_UPD_CONTACTS; } if (!md_timeslice_eq(md->renew_window, smd->renew_window)) { smd->renew_window = md->renew_window; fields |= MD_UPD_RENEW_WINDOW; } if (!md_timeslice_eq(md->warn_window, smd->warn_window)) { smd->warn_window = md->warn_window; fields |= MD_UPD_WARN_WINDOW; } if (md->ca_challenges) { md->ca_challenges = md_array_str_compact(p, md->ca_challenges, 0); if (!smd->ca_challenges || !md_array_str_eq(md->ca_challenges, smd->ca_challenges, 0)) { smd->ca_challenges = apr_array_copy(ptemp, md->ca_challenges); fields |= MD_UPD_CA_CHALLENGES; } } else if (smd->ca_challenges) { smd->ca_challenges = NULL; fields |= MD_UPD_CA_CHALLENGES; } if (!md_pkey_spec_eq(md->pkey_spec, smd->pkey_spec)) { fields |= MD_UPD_PKEY_SPEC; smd->pkey_spec = NULL; if (md->pkey_spec) { smd->pkey_spec = apr_pmemdup(p, md->pkey_spec, sizeof(md_pkey_spec_t)); } } if (MD_VAL_UPDATE(md, smd, require_https)) { smd->require_https = md->require_https; fields |= MD_UPD_REQUIRE_HTTPS; } if (MD_VAL_UPDATE(md, smd, must_staple)) { smd->must_staple = md->must_staple; fields |= MD_UPD_MUST_STAPLE; } if (!md_array_str_eq(md->acme_tls_1_domains, smd->acme_tls_1_domains, 0)) { smd->acme_tls_1_domains = md->acme_tls_1_domains; fields |= MD_UPD_PROTO; } if (fields) { rv = update_md(reg, ptemp, smd->name, smd, fields, 0); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "md %s updated", smd->name); } } else { /* new managed domain */ /* If no CA url/proto is configured for the MD, take the default */ if (!md->ca_url) { md->ca_url = MD_ACME_DEF_URL; md->ca_proto = MD_PROTO_ACME; } rv = add_md(reg, md, ptemp, 0); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "new md %s added", md->name); } } } else { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "loading mds"); } return rv; } apr_status_t md_reg_remove(md_reg_t *reg, apr_pool_t *p, const char *name, int archive) { if (reg->domains_frozen) return APR_EACCES; return md_store_move(reg->store, p, MD_SG_DOMAINS, MD_SG_ARCHIVE, name, archive); } typedef struct { md_reg_t *reg; apr_pool_t *p; apr_array_header_t *mds; } cleanup_challenge_ctx; static apr_status_t cleanup_challenge_inspector(void *baton, const char *dir, const char *name, md_store_vtype_t vtype, void *value, apr_pool_t *ptemp) { cleanup_challenge_ctx *ctx = baton; const md_t *md; int i, used; apr_status_t rv; (void)value; (void)vtype; (void)dir; for (used = 0, i = 0; i < ctx->mds->nelts && !used; ++i) { md = APR_ARRAY_IDX(ctx->mds, i, const md_t *); used = !strcmp(name, md->name); } if (!used) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, ptemp, "challenges/%s: not in use, purging", name); rv = md_store_purge(ctx->reg->store, ctx->p, MD_SG_CHALLENGES, name); if (APR_SUCCESS != rv) { md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, rv, ptemp, "challenges/%s: unable to purge", name); } } return APR_SUCCESS; } apr_status_t md_reg_cleanup_challenges(md_reg_t *reg, apr_pool_t *p, apr_pool_t *ptemp, apr_array_header_t *mds) { apr_status_t rv; cleanup_challenge_ctx ctx; (void)p; ctx.reg = reg; ctx.p = ptemp; ctx.mds = mds; rv = md_store_iter_names(cleanup_challenge_inspector, &ctx, reg->store, ptemp, MD_SG_CHALLENGES, "*"); return rv; } /**************************************************************************************************/ /* driving */ static apr_status_t run_init(void *baton, apr_pool_t *p, ...) { va_list ap; md_reg_t *reg = baton; const md_t *md; md_proto_driver_t *driver, **pdriver; md_result_t *result; apr_table_t *env; (void)p; va_start(ap, p); pdriver = va_arg(ap, md_proto_driver_t **); md = va_arg(ap, const md_t *); env = va_arg(ap, apr_table_t *); result = va_arg(ap, md_result_t *); va_end(ap); *pdriver = driver = apr_pcalloc(p, sizeof(*driver)); driver->p = p; driver->env = env? apr_table_copy(p, env) : apr_table_make(p, 10); driver->reg = reg; driver->store = md_reg_store_get(reg); driver->proxy_url = reg->proxy_url; driver->md = md; driver->can_http = reg->can_http; driver->can_https = reg->can_https; if (!md->ca_proto) { md_result_printf(result, APR_EGENERAL, "CA protocol is not defined"); md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, 0, p, "md[%s]: %s", md->name, result->detail); goto leave; } driver->proto = apr_hash_get(reg->protos, md->ca_proto, (apr_ssize_t)strlen(md->ca_proto)); if (!driver->proto) { md_result_printf(result, APR_EGENERAL, "Unknown CA protocol '%s'", md->ca_proto); goto leave; } result->status = driver->proto->init(driver, result); leave: if (APR_SUCCESS != result->status) { md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, result->status, p, "md[%s]: %s", md->name, result->detail? result->detail : "<see error log for details>"); } else { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, p, "%s: init done", md->name); } return result->status; } static apr_status_t run_test_init(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { const md_t *md; apr_table_t *env; md_result_t *result; md_proto_driver_t *driver; (void)p; md = va_arg(ap, const md_t *); env = va_arg(ap, apr_table_t *); result = va_arg(ap, md_result_t *); return run_init(baton, ptemp, &driver, md, env, result, NULL); } apr_status_t md_reg_test_init(md_reg_t *reg, const md_t *md, struct apr_table_t *env, md_result_t *result, apr_pool_t *p) { return md_util_pool_vdo(run_test_init, reg, p, md, env, result, NULL); } static apr_status_t run_renew(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { const md_t *md; int reset; md_proto_driver_t *driver; apr_table_t *env; apr_status_t rv; md_result_t *result; (void)p; md = va_arg(ap, const md_t *); env = va_arg(ap, apr_table_t *); reset = va_arg(ap, int); result = va_arg(ap, md_result_t *); rv = run_init(baton, ptemp, &driver, md, env, result, NULL); if (APR_SUCCESS == rv) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, ptemp, "%s: run staging", md->name); driver->reset = reset; rv = driver->proto->renew(driver, result); } md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, ptemp, "%s: staging done", md->name); return rv; } apr_status_t md_reg_renew(md_reg_t *reg, const md_t *md, apr_table_t *env, int reset, md_result_t *result, apr_pool_t *p) { return md_util_pool_vdo(run_renew, reg, p, md, env, reset, result, NULL); } static apr_status_t run_load_staging(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_reg_t *reg = baton; const md_t *md; md_proto_driver_t *driver; md_result_t *result; apr_table_t *env; md_job_t *job; apr_status_t rv; /* For the MD, check if something is in the STAGING area. If none is there, * return that status. Otherwise ask the protocol driver to preload it into * a new, temporary area. * If that succeeds, we move the TEMP area over the DOMAINS (causing the * existing one go to ARCHIVE). * Finally, we clean up the data from CHALLENGES and STAGING. */ md = va_arg(ap, const md_t*); env = va_arg(ap, apr_table_t*); result = va_arg(ap, md_result_t*); if (APR_STATUS_IS_ENOENT(rv = md_load(reg->store, MD_SG_STAGING, md->name, NULL, ptemp))) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE2, rv, ptemp, "%s: nothing staged", md->name); goto out; } rv = run_init(baton, ptemp, &driver, md, env, result, NULL); if (APR_SUCCESS != rv) goto out; apr_hash_set(reg->certs, md->name, (apr_ssize_t)strlen(md->name), NULL); md_result_activity_setn(result, "preloading staged to tmp"); rv = driver->proto->preload(driver, MD_SG_TMP, result); if (APR_SUCCESS != rv) goto out; /* If we had a job saved in STAGING, copy it over too */ job = md_job_make(ptemp, md->name); if (APR_SUCCESS == md_job_load(job, reg, MD_SG_STAGING, ptemp)) { md_job_save(job, reg, MD_SG_TMP, NULL, ptemp); } /* swap */ md_result_activity_setn(result, "moving tmp to become new domains"); rv = md_store_move(reg->store, p, MD_SG_TMP, MD_SG_DOMAINS, md->name, 1); if (APR_SUCCESS != rv) { md_result_set(result, rv, NULL); goto out; } md_store_purge(reg->store, p, MD_SG_STAGING, md->name); md_store_purge(reg->store, p, MD_SG_CHALLENGES, md->name); md_result_set(result, APR_SUCCESS, "new certificate successfully saved in domains"); out: md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, ptemp, "%s: load done", md->name); return rv; } apr_status_t md_reg_load_staging(md_reg_t *reg, const md_t *md, apr_table_t *env, md_result_t *result, apr_pool_t *p) { if (reg->domains_frozen) return APR_EACCES; return md_util_pool_vdo(run_load_staging, reg, p, md, env, result, NULL); } apr_status_t md_reg_freeze_domains(md_reg_t *reg, apr_array_header_t *mds) { apr_status_t rv = APR_SUCCESS; md_t *md; const md_pubcert_t *pubcert; int i; assert(!reg->domains_frozen); /* prefill the certs cache for all mds */ for (i = 0; i < mds->nelts; ++i) { md = APR_ARRAY_IDX(mds, i, md_t*); rv = md_reg_get_pubcert(&pubcert, reg, md, reg->p); if (APR_SUCCESS != rv && !APR_STATUS_IS_ENOENT(rv)) goto leave; } reg->domains_frozen = 1; leave: return rv; } void md_reg_set_renew_window_default(md_reg_t *reg, const md_timeslice_t *renew_window) { reg->renew_window = renew_window; } void md_reg_set_warn_window_default(md_reg_t *reg, const md_timeslice_t *warn_window) { reg->warn_window = warn_window; } ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_core.c�������������������������������������������������������������������0000644�0000000�0000050�00000031250�13511051361�015055� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <stdlib.h> #include <apr_lib.h> #include <apr_strings.h> #include <apr_tables.h> #include <apr_time.h> #include <apr_date.h> #include "md_json.h" #include "md.h" #include "md_crypt.h" #include "md_log.h" #include "md_store.h" #include "md_util.h" int md_contains(const md_t *md, const char *domain, int case_sensitive) { return md_array_str_index(md->domains, domain, 0, case_sensitive) >= 0; } const char *md_common_name(const md_t *md1, const md_t *md2) { int i; if (md1 == NULL || md1->domains == NULL || md2 == NULL || md2->domains == NULL) { return NULL; } for (i = 0; i < md1->domains->nelts; ++i) { const char *name1 = APR_ARRAY_IDX(md1->domains, i, const char*); if (md_contains(md2, name1, 0)) { return name1; } } return NULL; } int md_domains_overlap(const md_t *md1, const md_t *md2) { return md_common_name(md1, md2) != NULL; } apr_size_t md_common_name_count(const md_t *md1, const md_t *md2) { int i; apr_size_t hits; if (md1 == NULL || md1->domains == NULL || md2 == NULL || md2->domains == NULL) { return 0; } hits = 0; for (i = 0; i < md1->domains->nelts; ++i) { const char *name1 = APR_ARRAY_IDX(md1->domains, i, const char*); if (md_contains(md2, name1, 0)) { ++hits; } } return hits; } int md_is_covered_by_alt_names(const md_t *md, const struct apr_array_header_t* alt_names) { const char *name; int i; if (alt_names) { for (i = 0; i < md->domains->nelts; ++i) { name = APR_ARRAY_IDX(md->domains, i, const char *); if (!md_dns_domains_match(alt_names, name)) { return 0; } } return 1; } return 0; } md_t *md_create_empty(apr_pool_t *p) { md_t *md = apr_pcalloc(p, sizeof(*md)); if (md) { md->domains = apr_array_make(p, 5, sizeof(const char *)); md->contacts = apr_array_make(p, 5, sizeof(const char *)); md->renew_mode = MD_RENEW_DEFAULT; md->require_https = MD_REQUIRE_UNSET; md->must_staple = -1; md->transitive = -1; md->acme_tls_1_domains = apr_array_make(p, 5, sizeof(const char *)); md->defn_name = "unknown"; md->defn_line_number = 0; } return md; } int md_equal_domains(const md_t *md1, const md_t *md2, int case_sensitive) { int i; if (md1->domains->nelts == md2->domains->nelts) { for (i = 0; i < md1->domains->nelts; ++i) { const char *name1 = APR_ARRAY_IDX(md1->domains, i, const char*); if (!md_contains(md2, name1, case_sensitive)) { return 0; } } return 1; } return 0; } int md_contains_domains(const md_t *md1, const md_t *md2) { int i; if (md1->domains->nelts >= md2->domains->nelts) { for (i = 0; i < md2->domains->nelts; ++i) { const char *name2 = APR_ARRAY_IDX(md2->domains, i, const char*); if (!md_contains(md1, name2, 0)) { return 0; } } return 1; } return 0; } md_t *md_find_closest_match(apr_array_header_t *mds, const md_t *md) { md_t *candidate, *m; apr_size_t cand_n, n; int i; candidate = md_get_by_name(mds, md->name); if (!candidate) { /* try to find an instance that contains all domain names from md */ for (i = 0; i < mds->nelts; ++i) { m = APR_ARRAY_IDX(mds, i, md_t *); if (md_contains_domains(m, md)) { return m; } } /* no matching name and no md in the list has all domains. * We consider that managed domain as closest match that contains at least one * domain name from md, ONLY if there is no other one that also has. */ cand_n = 0; for (i = 0; i < mds->nelts; ++i) { m = APR_ARRAY_IDX(mds, i, md_t *); n = md_common_name_count(md, m); if (n > cand_n) { candidate = m; cand_n = n; } } } return candidate; } md_t *md_get_by_name(struct apr_array_header_t *mds, const char *name) { int i; for (i = 0; i < mds->nelts; ++i) { md_t *md = APR_ARRAY_IDX(mds, i, md_t *); if (!strcmp(name, md->name)) { return md; } } return NULL; } md_t *md_get_by_domain(struct apr_array_header_t *mds, const char *domain) { int i; for (i = 0; i < mds->nelts; ++i) { md_t *md = APR_ARRAY_IDX(mds, i, md_t *); if (md_contains(md, domain, 0)) { return md; } } return NULL; } md_t *md_get_by_dns_overlap(struct apr_array_header_t *mds, const md_t *md) { int i; for (i = 0; i < mds->nelts; ++i) { md_t *o = APR_ARRAY_IDX(mds, i, md_t *); if (strcmp(o->name, md->name) && md_common_name(o, md)) { return o; } } return NULL; } md_t *md_create(apr_pool_t *p, apr_array_header_t *domains) { md_t *md; md = md_create_empty(p); md->domains = md_array_str_compact(p, domains, 0); md->name = APR_ARRAY_IDX(md->domains, 0, const char *); return md; } /**************************************************************************************************/ /* lifetime */ md_t *md_copy(apr_pool_t *p, const md_t *src) { md_t *md; md = apr_pcalloc(p, sizeof(*md)); if (md) { memcpy(md, src, sizeof(*md)); md->domains = apr_array_copy(p, src->domains); md->contacts = apr_array_copy(p, src->contacts); if (src->ca_challenges) { md->ca_challenges = apr_array_copy(p, src->ca_challenges); } md->acme_tls_1_domains = apr_array_copy(p, src->acme_tls_1_domains); } return md; } md_t *md_clone(apr_pool_t *p, const md_t *src) { md_t *md; md = apr_pcalloc(p, sizeof(*md)); if (md) { md->state = src->state; md->name = apr_pstrdup(p, src->name); md->require_https = src->require_https; md->must_staple = src->must_staple; md->renew_mode = src->renew_mode; md->domains = md_array_str_compact(p, src->domains, 0); md->pkey_spec = src->pkey_spec; md->renew_window = src->renew_window; md->warn_window = src->warn_window; md->contacts = md_array_str_clone(p, src->contacts); if (src->ca_url) md->ca_url = apr_pstrdup(p, src->ca_url); if (src->ca_proto) md->ca_proto = apr_pstrdup(p, src->ca_proto); if (src->ca_account) md->ca_account = apr_pstrdup(p, src->ca_account); if (src->ca_agreement) md->ca_agreement = apr_pstrdup(p, src->ca_agreement); if (src->defn_name) md->defn_name = apr_pstrdup(p, src->defn_name); md->defn_line_number = src->defn_line_number; if (src->ca_challenges) { md->ca_challenges = md_array_str_clone(p, src->ca_challenges); } md->acme_tls_1_domains = md_array_str_compact(p, src->acme_tls_1_domains, 0); if (src->cert_file) md->cert_file = apr_pstrdup(p, src->cert_file); if (src->pkey_file) md->pkey_file = apr_pstrdup(p, src->pkey_file); } return md; } /**************************************************************************************************/ /* format conversion */ md_json_t *md_to_json(const md_t *md, apr_pool_t *p) { md_json_t *json = md_json_create(p); if (json) { apr_array_header_t *domains = md_array_str_compact(p, md->domains, 0); md_json_sets(md->name, json, MD_KEY_NAME, NULL); md_json_setsa(domains, json, MD_KEY_DOMAINS, NULL); md_json_setsa(md->contacts, json, MD_KEY_CONTACTS, NULL); md_json_setl(md->transitive, json, MD_KEY_TRANSITIVE, NULL); md_json_sets(md->ca_account, json, MD_KEY_CA, MD_KEY_ACCOUNT, NULL); md_json_sets(md->ca_proto, json, MD_KEY_CA, MD_KEY_PROTO, NULL); md_json_sets(md->ca_url, json, MD_KEY_CA, MD_KEY_URL, NULL); md_json_sets(md->ca_agreement, json, MD_KEY_CA, MD_KEY_AGREEMENT, NULL); if (md->pkey_spec) { md_json_setj(md_pkey_spec_to_json(md->pkey_spec, p), json, MD_KEY_PKEY, NULL); } md_json_setl(md->state, json, MD_KEY_STATE, NULL); md_json_setl(md->renew_mode, json, MD_KEY_RENEW_MODE, NULL); if (md->renew_window) md_json_sets(md_timeslice_format(md->renew_window, p), json, MD_KEY_RENEW_WINDOW, NULL); if (md->warn_window) md_json_sets(md_timeslice_format(md->warn_window, p), json, MD_KEY_WARN_WINDOW, NULL); if (md->ca_challenges && md->ca_challenges->nelts > 0) { apr_array_header_t *na; na = md_array_str_compact(p, md->ca_challenges, 0); md_json_setsa(na, json, MD_KEY_CA, MD_KEY_CHALLENGES, NULL); } switch (md->require_https) { case MD_REQUIRE_TEMPORARY: md_json_sets(MD_KEY_TEMPORARY, json, MD_KEY_REQUIRE_HTTPS, NULL); break; case MD_REQUIRE_PERMANENT: md_json_sets(MD_KEY_PERMANENT, json, MD_KEY_REQUIRE_HTTPS, NULL); break; default: break; } md_json_setb(md->must_staple > 0, json, MD_KEY_MUST_STAPLE, NULL); if (!apr_is_empty_array(md->acme_tls_1_domains)) md_json_setsa(md->acme_tls_1_domains, json, MD_KEY_PROTO, MD_KEY_ACME_TLS_1, NULL); md_json_sets(md->cert_file, json, MD_KEY_CERT_FILE, NULL); md_json_sets(md->pkey_file, json, MD_KEY_PKEY_FILE, NULL); return json; } return NULL; } md_t *md_from_json(md_json_t *json, apr_pool_t *p) { const char *s; md_t *md = md_create_empty(p); if (md) { md->name = md_json_dups(p, json, MD_KEY_NAME, NULL); md_json_dupsa(md->domains, p, json, MD_KEY_DOMAINS, NULL); md_json_dupsa(md->contacts, p, json, MD_KEY_CONTACTS, NULL); md->ca_account = md_json_dups(p, json, MD_KEY_CA, MD_KEY_ACCOUNT, NULL); md->ca_proto = md_json_dups(p, json, MD_KEY_CA, MD_KEY_PROTO, NULL); md->ca_url = md_json_dups(p, json, MD_KEY_CA, MD_KEY_URL, NULL); md->ca_agreement = md_json_dups(p, json, MD_KEY_CA, MD_KEY_AGREEMENT, NULL); if (md_json_has_key(json, MD_KEY_PKEY, MD_KEY_TYPE, NULL)) { md->pkey_spec = md_pkey_spec_from_json(md_json_getj(json, MD_KEY_PKEY, NULL), p); } md->state = (md_state_t)md_json_getl(json, MD_KEY_STATE, NULL); if (MD_S_EXPIRED_DEPRECATED == md->state) md->state = MD_S_COMPLETE; md->renew_mode = (int)md_json_getl(json, MD_KEY_RENEW_MODE, NULL); md->domains = md_array_str_compact(p, md->domains, 0); md->transitive = (int)md_json_getl(json, MD_KEY_TRANSITIVE, NULL); s = md_json_gets(json, MD_KEY_RENEW_WINDOW, NULL); md_timeslice_parse(&md->renew_window, p, s, MD_TIME_LIFE_NORM); s = md_json_gets(json, MD_KEY_WARN_WINDOW, NULL); md_timeslice_parse(&md->warn_window, p, s, MD_TIME_LIFE_NORM); if (md_json_has_key(json, MD_KEY_CA, MD_KEY_CHALLENGES, NULL)) { md->ca_challenges = apr_array_make(p, 5, sizeof(const char*)); md_json_dupsa(md->ca_challenges, p, json, MD_KEY_CA, MD_KEY_CHALLENGES, NULL); } md->require_https = MD_REQUIRE_OFF; s = md_json_gets(json, MD_KEY_REQUIRE_HTTPS, NULL); if (s && !strcmp(MD_KEY_TEMPORARY, s)) { md->require_https = MD_REQUIRE_TEMPORARY; } else if (s && !strcmp(MD_KEY_PERMANENT, s)) { md->require_https = MD_REQUIRE_PERMANENT; } md->must_staple = (int)md_json_getb(json, MD_KEY_MUST_STAPLE, NULL); md_json_dupsa(md->acme_tls_1_domains, p, json, MD_KEY_PROTO, MD_KEY_ACME_TLS_1, NULL); md->cert_file = md_json_dups(p, json, MD_KEY_CERT_FILE, NULL); md->pkey_file = md_json_dups(p, json, MD_KEY_PKEY_FILE, NULL); return md; } return NULL; } ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md.h������������������������������������������������������������������������0000644�0000000�0000050�00000027270�13511614110�014056� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_h #define mod_md_md_h #include "md_time.h" #include "md_version.h" struct apr_array_header_t; struct apr_hash_t; struct md_json_t; struct md_cert_t; struct md_pkey_t; struct md_store_t; struct md_srv_conf_t; struct md_pkey_spec_t; #define MD_PKEY_RSA_BITS_MIN 2048 #define MD_PKEY_RSA_BITS_DEF 2048 /* Minimum age for the HSTS header (RFC 6797), considered appropriate by Mozilla Security */ #define MD_HSTS_HEADER "Strict-Transport-Security" #define MD_HSTS_MAX_AGE_DEFAULT 15768000 #define PROTO_ACME_TLS_1 "acme-tls/1" #define MD_TIME_LIFE_NORM (apr_time_from_sec(100 * MD_SECS_PER_DAY)) #define MD_TIME_RENEW_WINDOW_DEF (apr_time_from_sec(33 * MD_SECS_PER_DAY)) #define MD_TIME_WARN_WINDOW_DEF (apr_time_from_sec(10 * MD_SECS_PER_DAY)) typedef enum { MD_S_UNKNOWN = 0, /* MD has not been analysed yet */ MD_S_INCOMPLETE = 1, /* MD is missing necessary information, cannot go live */ MD_S_COMPLETE = 2, /* MD has all necessary information, can go live */ MD_S_EXPIRED_DEPRECATED = 3, /* deprecated */ MD_S_ERROR = 4, /* MD data is flawed, unable to be processed as is */ MD_S_MISSING_INFORMATION = 5, /* User has not agreed to ToS */ } md_state_t; typedef enum { MD_REQUIRE_UNSET = -1, MD_REQUIRE_OFF, MD_REQUIRE_TEMPORARY, MD_REQUIRE_PERMANENT, } md_require_t; typedef enum { MD_SV_TEXT, MD_SV_JSON, MD_SV_CERT, MD_SV_PKEY, MD_SV_CHAIN, } md_store_vtype_t; typedef enum { MD_SG_NONE, MD_SG_ACCOUNTS, MD_SG_CHALLENGES, MD_SG_DOMAINS, MD_SG_STAGING, MD_SG_ARCHIVE, MD_SG_TMP, MD_SG_COUNT, } md_store_group_t; typedef enum { MD_RENEW_DEFAULT = -1, /* default value */ MD_RENEW_MANUAL, /* manually triggered renewal of certificate */ MD_RENEW_AUTO, /* automatic process performed by httpd */ MD_RENEW_ALWAYS, /* always renewed by httpd, even if not necessary */ } md_renew_mode_t; typedef struct md_t md_t; struct md_t { const char *name; /* unique name of this MD */ struct apr_array_header_t *domains; /* all DNS names this MD includes */ struct apr_array_header_t *contacts; /* list of contact uris, e.g. mailto:xxx */ int transitive; /* != 0 iff VirtualHost names/aliases are auto-added */ md_require_t require_https; /* Iff https: is required for this MD */ int renew_mode; /* mode of obtaining credentials */ struct md_pkey_spec_t *pkey_spec;/* specification for generating new private keys */ int must_staple; /* certificates should set the OCSP Must Staple extension */ const md_timeslice_t *renew_window; /* time before expiration that starts renewal */ const md_timeslice_t *warn_window; /* time before expiration that warnings are sent out */ const char *ca_url; /* url of CA certificate service */ const char *ca_proto; /* protocol used vs CA (e.g. ACME) */ const char *ca_account; /* account used at CA */ const char *ca_agreement; /* accepted agreement uri between CA and user */ struct apr_array_header_t *ca_challenges; /* challenge types configured for this MD */ const char *cert_file; /* != NULL iff pubcert file explicitly configured */ const char *pkey_file; /* != NULL iff privkey file explicitly configured */ md_state_t state; /* state of this MD */ struct apr_array_header_t *acme_tls_1_domains; /* domains supporting "acme-tls/1" protocol */ const struct md_srv_conf_t *sc; /* server config where it was defined or NULL */ const char *defn_name; /* config file this MD was defined */ unsigned defn_line_number; /* line number of definition */ const char *configured_name; /* name this MD was configured with, if different */ }; #define MD_KEY_ACCOUNT "account" #define MD_KEY_ACME_TLS_1 "acme-tls/1" #define MD_KEY_ACTIVITY "activity" #define MD_KEY_AGREEMENT "agreement" #define MD_KEY_AUTHORIZATIONS "authorizations" #define MD_KEY_BITS "bits" #define MD_KEY_CA "ca" #define MD_KEY_CA_URL "ca-url" #define MD_KEY_CERT "cert" #define MD_KEY_CERT_FILE "cert-file" #define MD_KEY_CERTIFICATE "certificate" #define MD_KEY_CHALLENGE "challenge" #define MD_KEY_CHALLENGES "challenges" #define MD_KEY_CMD_DNS01 "cmd-dns-01" #define MD_KEY_COMPLETE "complete" #define MD_KEY_CONTACT "contact" #define MD_KEY_CONTACTS "contacts" #define MD_KEY_CSR "csr" #define MD_KEY_DETAIL "detail" #define MD_KEY_DISABLED "disabled" #define MD_KEY_DIR "dir" #define MD_KEY_DOMAIN "domain" #define MD_KEY_DOMAINS "domains" #define MD_KEY_ENTRIES "entries" #define MD_KEY_ERRORED "errored" #define MD_KEY_ERRORS "errors" #define MD_KEY_EXPIRES "expires" #define MD_KEY_FINALIZE "finalize" #define MD_KEY_FINISHED "finished" #define MD_KEY_HTTP "http" #define MD_KEY_HTTPS "https" #define MD_KEY_ID "id" #define MD_KEY_IDENTIFIER "identifier" #define MD_KEY_KEY "key" #define MD_KEY_KEYAUTHZ "keyAuthorization" #define MD_KEY_LAST "last" #define MD_KEY_LAST_RUN "last-run" #define MD_KEY_LOCATION "location" #define MD_KEY_LOG "log" #define MD_KEY_MDS "managed-domains" #define MD_KEY_MESSAGE "message" #define MD_KEY_MUST_STAPLE "must-staple" #define MD_KEY_NAME "name" #define MD_KEY_NEXT_RUN "next-run" #define MD_KEY_NOTIFIED "notified" #define MD_KEY_ORDERS "orders" #define MD_KEY_PERMANENT "permanent" #define MD_KEY_PKEY "privkey" #define MD_KEY_PKEY_FILE "pkey-file" #define MD_KEY_PROBLEM "problem" #define MD_KEY_PROTO "proto" #define MD_KEY_READY "ready" #define MD_KEY_REGISTRATION "registration" #define MD_KEY_RENEW "renew" #define MD_KEY_RENEW_MODE "renew-mode" #define MD_KEY_RENEWAL "renewal" #define MD_KEY_RENEWING "renewing" #define MD_KEY_RENEW_WINDOW "renew-window" #define MD_KEY_REQUIRE_HTTPS "require-https" #define MD_KEY_RESOURCE "resource" #define MD_KEY_SERIAL "serial" #define MD_KEY_SHA256_FINGERPRINT "sha256-fingerprint" #define MD_KEY_STATE "state" #define MD_KEY_STATUS "status" #define MD_KEY_STORE "store" #define MD_KEY_TEMPORARY "temporary" #define MD_KEY_TOKEN "token" #define MD_KEY_TOTAL "total" #define MD_KEY_TRANSITIVE "transitive" #define MD_KEY_TYPE "type" #define MD_KEY_URL "url" #define MD_KEY_URI "uri" #define MD_KEY_VALID_FROM "valid-from" #define MD_KEY_VALID_UNTIL "valid-until" #define MD_KEY_VALUE "value" #define MD_KEY_VERSION "version" #define MD_KEY_WHEN "when" #define MD_KEY_WARN_WINDOW "warn-window" #define MD_FN_MD "md.json" #define MD_FN_JOB "job.json" #define MD_FN_PRIVKEY "privkey.pem" #define MD_FN_PUBCERT "pubcert.pem" #define MD_FN_CERT "cert.pem" #define MD_FN_HTTPD_JSON "httpd.json" #define MD_FN_FALLBACK_PKEY "fallback-privkey.pem" #define MD_FN_FALLBACK_CERT "fallback-cert.pem" /* Check if a string member of a new MD (n) has * a value and if it differs from the old MD o */ #define MD_VAL_UPDATE(n,o,s) ((n)->s != (o)->s) #define MD_SVAL_UPDATE(n,o,s) ((n)->s && (!(o)->s || strcmp((n)->s, (o)->s))) /** * Determine if the Managed Domain contains a specific domain name. */ int md_contains(const md_t *md, const char *domain, int case_sensitive); /** * Determine if the names of the two managed domains overlap. */ int md_domains_overlap(const md_t *md1, const md_t *md2); /** * Determine if the domain names are equal. */ int md_equal_domains(const md_t *md1, const md_t *md2, int case_sensitive); /** * Determine if the domains in md1 contain all domains of md2. */ int md_contains_domains(const md_t *md1, const md_t *md2); /** * Get one common domain name of the two managed domains or NULL. */ const char *md_common_name(const md_t *md1, const md_t *md2); /** * Get the number of common domains. */ apr_size_t md_common_name_count(const md_t *md1, const md_t *md2); /** * Look up a managed domain by its name. */ md_t *md_get_by_name(struct apr_array_header_t *mds, const char *name); /** * Look up a managed domain by a DNS name it contains. */ md_t *md_get_by_domain(struct apr_array_header_t *mds, const char *domain); /** * Find a managed domain, different from the given one, that has overlaps * in the domain list. */ md_t *md_get_by_dns_overlap(struct apr_array_header_t *mds, const md_t *md); /** * Find the managed domain in the list that, for the given md, * has the same name, or the most number of overlaps in domains */ md_t *md_find_closest_match(struct apr_array_header_t *mds, const md_t *md); /** * Create and empty md record, structures initialized. */ md_t *md_create_empty(apr_pool_t *p); /** * Create a managed domain, given a list of domain names. */ md_t *md_create(apr_pool_t *p, struct apr_array_header_t *domains); /** * Deep copy an md record into another pool. */ md_t *md_clone(apr_pool_t *p, const md_t *src); /** * Shallow copy an md record into another pool. */ md_t *md_copy(apr_pool_t *p, const md_t *src); /** * Convert the managed domain into a JSON representation and vice versa. * * This reads and writes the following information: name, domains, ca_url, ca_proto and state. */ struct md_json_t *md_to_json (const md_t *md, apr_pool_t *p); md_t *md_from_json(struct md_json_t *json, apr_pool_t *p); int md_is_covered_by_alt_names(const md_t *md, const struct apr_array_header_t* alt_names); #define LE_ACMEv1_PROD "https://acme-v01.api.letsencrypt.org/directory" #define LE_ACMEv1_STAGING "https://acme-staging.api.letsencrypt.org/directory" #define LE_ACMEv2_PROD "https://acme-v02.api.letsencrypt.org/directory" #define LE_ACMEv2_STAGING "https://acme-staging-v02.api.letsencrypt.org/directory" /**************************************************************************************************/ /* domain credentials */ typedef struct md_pubcert_t md_pubcert_t; struct md_pubcert_t { struct apr_array_header_t *certs; /* chain of const md_cert*, leaf cert first */ struct apr_array_header_t *alt_names; /* alt-names of leaf cert */ const char *cert_file; /* file path of chain */ const char *key_file; /* file path of key for leaf cert */ }; #define MD_OK(c) (APR_SUCCESS == (rv = c)) #endif /* mod_md_md_h */ ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_reg.h��������������������������������������������������������������������0000644�0000000�0000050�00000021137�13511051361�014712� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_reg_h #define mod_md_md_reg_h struct apr_hash_t; struct apr_array_header_t; struct md_store_t; struct md_pkey_t; struct md_cert_t; struct md_result_t; /** * A registry for managed domains with a md_store_t as persistence. * */ typedef struct md_reg_t md_reg_t; /** * Create the MD registry, using the pool and store. */ apr_status_t md_reg_create(md_reg_t **preg, apr_pool_t *pm, struct md_store_t *store, const char *proxy_url); struct md_store_t *md_reg_store_get(md_reg_t *reg); apr_status_t md_reg_set_props(md_reg_t *reg, apr_pool_t *p, int can_http, int can_https); /** * Add a new md to the registry. This will check the name for uniqueness and * that domain names do not overlap with already existing mds. */ apr_status_t md_reg_add(md_reg_t *reg, md_t *md, apr_pool_t *p); /** * Find the md, if any, that contains the given domain name. * NULL if none found. */ md_t *md_reg_find(md_reg_t *reg, const char *domain, apr_pool_t *p); /** * Find one md, which domain names overlap with the given md and that has a different * name. There may be more than one existing md that overlaps. It is not defined * which one will be returned. */ md_t *md_reg_find_overlap(md_reg_t *reg, const md_t *md, const char **pdomain, apr_pool_t *p); /** * Get the md with the given unique name. NULL if it does not exist. * Will update the md->state. */ md_t *md_reg_get(md_reg_t *reg, const char *name, apr_pool_t *p); /** * Re-compute the state of the MD, given current store contents. */ apr_status_t md_reg_reinit_state(md_reg_t *reg, md_t *md, apr_pool_t *p); /** * Callback invoked for every md in the registry. If 0 is returned, iteration stops. */ typedef int md_reg_do_cb(void *baton, md_reg_t *reg, md_t *md); /** * Invoke callback for all mds in this registry. Order is not guaranteed. * If the callback returns 0, iteration stops. Returns 0 if iteration was * aborted. */ int md_reg_do(md_reg_do_cb *cb, void *baton, md_reg_t *reg, apr_pool_t *p); /** * Bitmask for fields that are updated. */ #define MD_UPD_DOMAINS 0x0001 #define MD_UPD_CA_URL 0x0002 #define MD_UPD_CA_PROTO 0x0004 #define MD_UPD_CA_ACCOUNT 0x0008 #define MD_UPD_CONTACTS 0x0010 #define MD_UPD_AGREEMENT 0x0020 #define MD_UPD_DRIVE_MODE 0x0080 #define MD_UPD_RENEW_WINDOW 0x0100 #define MD_UPD_CA_CHALLENGES 0x0200 #define MD_UPD_PKEY_SPEC 0x0400 #define MD_UPD_REQUIRE_HTTPS 0x0800 #define MD_UPD_TRANSITIVE 0x1000 #define MD_UPD_MUST_STAPLE 0x2000 #define MD_UPD_PROTO 0x4000 #define MD_UPD_WARN_WINDOW 0x8000 #define MD_UPD_ALL 0x7FFFFFFF /** * Update the given fields for the managed domain. Take the new * values from the given md, all other values remain unchanged. */ apr_status_t md_reg_update(md_reg_t *reg, apr_pool_t *p, const char *name, const md_t *md, int fields); /** * Get the chain of public certificates of the managed domain md, starting with the cert * of the domain and going up the issuers. Returns APR_ENOENT when not available. */ apr_status_t md_reg_get_pubcert(const md_pubcert_t **ppubcert, md_reg_t *reg, const md_t *md, apr_pool_t *p); /** * Get the filenames of private key and pubcert of the MD - if they exist. * @return APR_ENOENT if one or both do not exist. */ apr_status_t md_reg_get_cred_files(const char **pkeyfile, const char **pcertfile, md_reg_t *reg, md_store_group_t group, const md_t *md, apr_pool_t *p); /** * Synchronise the give master mds with the store. */ apr_status_t md_reg_sync(md_reg_t *reg, apr_pool_t *p, apr_pool_t *ptemp, apr_array_header_t *master_mds); apr_status_t md_reg_remove(md_reg_t *reg, apr_pool_t *p, const char *name, int archive); /** * Delete the account from the local store. */ apr_status_t md_reg_delete_acct(md_reg_t *reg, apr_pool_t *p, const char *acct_id); /** * Cleanup any challenges that are no longer in use. * * @param reg the registry * @param p pool for permament storage * @param ptemp pool for temporary storage * @param mds the list of configured MDs */ apr_status_t md_reg_cleanup_challenges(md_reg_t *reg, apr_pool_t *p, apr_pool_t *ptemp, apr_array_header_t *mds); /** * Mark all information from group MD_SG_DOMAINS as readonly, deny future modifications * (MD_SG_STAGING and MD_SG_CHALLENGES remain writeable). For the given MDs, cache * the public information (MDs themselves and their pubcerts or lack of). */ apr_status_t md_reg_freeze_domains(md_reg_t *reg, apr_array_header_t *mds); /** * Return if the certificate of the MD shoud be renewed. This includes reaching * the renewal window of an otherwise valid certificate. It return also !0 iff * no certificate has been obtained yet. */ int md_reg_should_renew(md_reg_t *reg, const md_t *md, apr_pool_t *p); /** * Return if a warning should be issued about the certificate expiration. * This applies the configured warn window to the remaining lifetime of the * current certiciate. If no certificate is present, this returns 0. */ int md_reg_should_warn(md_reg_t *reg, const md_t *md, apr_pool_t *p); /**************************************************************************************************/ /* protocol drivers */ typedef struct md_proto_t md_proto_t; typedef struct md_proto_driver_t md_proto_driver_t; /** * Operating environment for a protocol driver. This is valid only for the * duration of one run (init + renew, init + preload). */ struct md_proto_driver_t { const md_proto_t *proto; apr_pool_t *p; void *baton; struct apr_table_t *env; md_reg_t *reg; struct md_store_t *store; const char *proxy_url; const md_t *md; int can_http; int can_https; int reset; }; typedef apr_status_t md_proto_init_cb(md_proto_driver_t *driver, struct md_result_t *result); typedef apr_status_t md_proto_renew_cb(md_proto_driver_t *driver, struct md_result_t *result); typedef apr_status_t md_proto_preload_cb(md_proto_driver_t *driver, md_store_group_t group, struct md_result_t *result); struct md_proto_t { const char *protocol; md_proto_init_cb *init; md_proto_renew_cb *renew; md_proto_preload_cb *preload; }; /** * Run a test intialization of the renew protocol for the given MD. This verifies * basic parameter settings and is expected to return a description of encountered * problems in <pmessage> when != APR_SUCCESS. * A message return is allocated fromt the given pool. */ apr_status_t md_reg_test_init(md_reg_t *reg, const md_t *md, struct apr_table_t *env, struct md_result_t *result, apr_pool_t *p); /** * Obtain new credentials for the given managed domain in STAGING. * * @return APR_SUCCESS if new credentials have been staged successfully */ apr_status_t md_reg_renew(md_reg_t *reg, const md_t *md, struct apr_table_t *env, int reset, struct md_result_t *result, apr_pool_t *p); /** * Load a new set of credentials for the managed domain from STAGING - if it exists. * This will archive any existing credential data and make the staged set the new one * in DOMAINS. * If staging is incomplete or missing, the load will fail and all credentials remain * as they are. * * @return APR_SUCCESS on loading new data, APR_ENOENT when nothing is staged, error otherwise. */ apr_status_t md_reg_load_staging(md_reg_t *reg, const md_t *md, struct apr_table_t *env, struct md_result_t *result, apr_pool_t *p); void md_reg_set_renew_window_default(md_reg_t *reg, const md_timeslice_t *renew_window); void md_reg_set_warn_window_default(md_reg_t *reg, const md_timeslice_t *warn_window); #endif /* mod_md_md_reg_h */ ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/mod_md.mak������������������������������������������������������������������0000644�0000000�0000050�00000037713�13512711534�015252� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_md.dsp !IF "$(CFG)" == "" CFG=mod_md - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_md - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_md - Win32 Release" && "$(CFG)" != "mod_md - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_md.mak" CFG="mod_md - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_md - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_md - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(_HAVE_OSSL110)" == "1" SSLCRP=libcrypto SSLLIB=libssl SSLINC=/I ../../srclib/openssl/include SSLBIN=/libpath:../../srclib/openssl !ELSE SSLCRP=libeay32 SSLLIB=ssleay32 SSLINC=/I ../../srclib/openssl/inc32 SSLBIN=/libpath:../../srclib/openssl/out32dll !ENDIF !IF "$(CFG)" == "mod_md - Win32 Release" OUTDIR=.\Release INTDIR=.\Release # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_md.so" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_md.so" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\md_acme.obj" -@erase "$(INTDIR)\md_acme_acct.obj" -@erase "$(INTDIR)\md_acme_authz.obj" -@erase "$(INTDIR)\md_acme_drive.obj" -@erase "$(INTDIR)\md_acme_order.obj" -@erase "$(INTDIR)\md_acmev1_drive.obj" -@erase "$(INTDIR)\md_acmev2_drive.obj" -@erase "$(INTDIR)\md_core.obj" -@erase "$(INTDIR)\md_crypt.obj" -@erase "$(INTDIR)\md_curl.obj" -@erase "$(INTDIR)\md_http.obj" -@erase "$(INTDIR)\md_json.obj" -@erase "$(INTDIR)\md_jws.obj" -@erase "$(INTDIR)\md_log.obj" -@erase "$(INTDIR)\md_reg.obj" -@erase "$(INTDIR)\md_result.obj" -@erase "$(INTDIR)\md_status.obj" -@erase "$(INTDIR)\md_store.obj" -@erase "$(INTDIR)\md_store_fs.obj" -@erase "$(INTDIR)\md_time.obj" -@erase "$(INTDIR)\md_util.obj" -@erase "$(INTDIR)\mod_md.obj" -@erase "$(INTDIR)\mod_md.res" -@erase "$(INTDIR)\mod_md_config.obj" -@erase "$(INTDIR)\mod_md_drive.obj" -@erase "$(INTDIR)\mod_md_status.obj" -@erase "$(INTDIR)\mod_md_os.obj" -@erase "$(INTDIR)\mod_md_src.idb" -@erase "$(INTDIR)\mod_md_src.pdb" -@erase "$(OUTDIR)\mod_md.exp" -@erase "$(OUTDIR)\mod_md.lib" -@erase "$(OUTDIR)\mod_md.pdb" -@erase "$(OUTDIR)\mod_md.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../server/mpm/winnt" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" $(SSLINC) /I "../../srclib/jansson/include" /I "../../srclib/curl/include" /I "../ssl" /I "../core" /I "../generators" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D ssize_t=long /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_md_src" /FD /I " ../ssl" /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_md.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME=mod_md.so /d LONG_NAME=Letsencrypt module for Apache BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_md.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib libhttpd.lib libapr-1.lib libaprutil-1.lib $(SSLCRP).lib $(SSLLIB).lib jansson.lib libcurl.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_md.pdb" /debug /out:"$(OUTDIR)\mod_md.so" /implib:"$(OUTDIR)\mod_md.lib" /libpath:"../../srclib/apr/Release" /libpath:"../../srclib/apr-util/Release" /libpath:"../../Release/" $(SSLBIN) /libpath:"../../srclib/jansson/lib" /libpath:"../../srclib/curl/lib" /base:@..\..\os\win32\BaseAddr.ref,mod_md.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_md.obj" \ "$(INTDIR)\mod_md_config.obj" \ "$(INTDIR)\mod_md_drive.obj" \ "$(INTDIR)\mod_md_os.obj" \ "$(INTDIR)\mod_md_status.obj" \ "$(INTDIR)\md_core.obj" \ "$(INTDIR)\md_crypt.obj" \ "$(INTDIR)\md_curl.obj" \ "$(INTDIR)\md_http.obj" \ "$(INTDIR)\md_json.obj" \ "$(INTDIR)\md_jws.obj" \ "$(INTDIR)\md_log.obj" \ "$(INTDIR)\md_reg.obj" \ "$(INTDIR)\md_result.obj" \ "$(INTDIR)\md_status.obj" \ "$(INTDIR)\md_store.obj" \ "$(INTDIR)\md_store_fs.obj" \ "$(INTDIR)\md_time.obj" \ "$(INTDIR)\md_util.obj" \ "$(INTDIR)\md_acme.obj" \ "$(INTDIR)\md_acme_acct.obj" \ "$(INTDIR)\md_acme_authz.obj" \ "$(INTDIR)\md_acme_drive.obj" \ "$(INTDIR)\md_acme_order.obj" \ "$(INTDIR)\md_acmev1_drive.obj" \ "$(INTDIR)\md_acmev2_drive.obj" \ "$(INTDIR)\mod_md.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_md.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_md.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep ALL : $(DS_POSTBUILD_DEP) # Begin Custom Macros OutDir=.\Release # End Custom Macros $(DS_POSTBUILD_DEP) : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_md.so" if exist .\Release\mod_md.so.manifest mt.exe -manifest .\Release\mod_md.so.manifest -outputresource:.\Release\mod_md.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_md - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_md.so" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_md.so" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\md_acme.obj" -@erase "$(INTDIR)\md_acme_acct.obj" -@erase "$(INTDIR)\md_acme_authz.obj" -@erase "$(INTDIR)\md_acme_drive.obj" -@erase "$(INTDIR)\md_acme_order.obj" -@erase "$(INTDIR)\md_acmev1_drive.obj" -@erase "$(INTDIR)\md_acmev2_drive.obj" -@erase "$(INTDIR)\md_core.obj" -@erase "$(INTDIR)\md_crypt.obj" -@erase "$(INTDIR)\md_curl.obj" -@erase "$(INTDIR)\md_http.obj" -@erase "$(INTDIR)\md_json.obj" -@erase "$(INTDIR)\md_jws.obj" -@erase "$(INTDIR)\md_log.obj" -@erase "$(INTDIR)\md_reg.obj" -@erase "$(INTDIR)\md_result.obj" -@erase "$(INTDIR)\md_status.obj" -@erase "$(INTDIR)\md_store.obj" -@erase "$(INTDIR)\md_store_fs.obj" -@erase "$(INTDIR)\md_time.obj" -@erase "$(INTDIR)\md_util.obj" -@erase "$(INTDIR)\mod_md.obj" -@erase "$(INTDIR)\mod_md.res" -@erase "$(INTDIR)\mod_md_config.obj" -@erase "$(INTDIR)\mod_md_drive.obj" -@erase "$(INTDIR)\mod_md_status.obj" -@erase "$(INTDIR)\mod_md_os.obj" -@erase "$(INTDIR)\mod_md_src.idb" -@erase "$(INTDIR)\mod_md_src.pdb" -@erase "$(OUTDIR)\mod_md.exp" -@erase "$(OUTDIR)\mod_md.lib" -@erase "$(OUTDIR)\mod_md.pdb" -@erase "$(OUTDIR)\mod_md.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" $(SSLINC) /I "../../srclib/jansson/include" /I "../../srclib/curl/include" /I "../core" /I "../generators" /I "../ssl" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D ssize_t=long /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_md_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_md.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME=mod_md.so /d LONG_NAME=http2_module for Apache BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_md.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib libhttpd.lib libapr-1.lib libaprutil-1.lib $(SSLCRP).lib $(SSLLIB).lib jansson_d.lib libcurl_debug.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_md.pdb" /debug /out:"$(OUTDIR)\mod_md.so" /implib:"$(OUTDIR)\mod_md.lib" $(SSLBIN) /libpath:"../../srclib/jansson/lib" /libpath:"../../srclib/curl/lib" /base:@..\..\os\win32\BaseAddr.ref,mod_md.so LINK32_OBJS= \ "$(INTDIR)\mod_md.obj" \ "$(INTDIR)\mod_md_config.obj" \ "$(INTDIR)\mod_md_drive.obj" \ "$(INTDIR)\mod_md_os.obj" \ "$(INTDIR)\mod_md_status.obj" \ "$(INTDIR)\md_core.obj" \ "$(INTDIR)\md_crypt.obj" \ "$(INTDIR)\md_curl.obj" \ "$(INTDIR)\md_http.obj" \ "$(INTDIR)\md_json.obj" \ "$(INTDIR)\md_jws.obj" \ "$(INTDIR)\md_log.obj" \ "$(INTDIR)\md_reg.obj" \ "$(INTDIR)\md_result.obj" \ "$(INTDIR)\md_status.obj" \ "$(INTDIR)\md_store.obj" \ "$(INTDIR)\md_store_fs.obj" \ "$(INTDIR)\md_time.obj" \ "$(INTDIR)\md_util.obj" \ "$(INTDIR)\md_acme.obj" \ "$(INTDIR)\md_acme_acct.obj" \ "$(INTDIR)\md_acme_authz.obj" \ "$(INTDIR)\md_acme_drive.obj" \ "$(INTDIR)\md_acme_order.obj" \ "$(INTDIR)\md_acmev1_drive.obj" \ "$(INTDIR)\md_acmev2_drive.obj" \ "$(INTDIR)\mod_md.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_md.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_md.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep ALL : $(DS_POSTBUILD_DEP) # Begin Custom Macros OutDir=.\Debug # End Custom Macros $(DS_POSTBUILD_DEP) : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_md.so" if exist .\Debug\mod_md.so.manifest mt.exe -manifest .\Debug\mod_md.so.manifest -outputresource:.\Debug\mod_md.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_md.dep") !INCLUDE "mod_md.dep" !ELSE !MESSAGE Warning: cannot find "mod_md.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_md - Win32 Release" || "$(CFG)" == "mod_md - Win32 Debug" !IF "$(CFG)" == "mod_md - Win32 Release" "libapr - Win32 Release" : cd "..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\md" "libapr - Win32 ReleaseCLEAN" : cd "..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\md" !ELSEIF "$(CFG)" == "mod_md - Win32 Debug" "libapr - Win32 Debug" : cd "..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\md" "libapr - Win32 DebugCLEAN" : cd "..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\md" !ENDIF !IF "$(CFG)" == "mod_md - Win32 Release" "libaprutil - Win32 Release" : cd "..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\md" "libaprutil - Win32 ReleaseCLEAN" : cd "..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\md" !ELSEIF "$(CFG)" == "mod_md - Win32 Debug" "libaprutil - Win32 Debug" : cd "..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\md" "libaprutil - Win32 DebugCLEAN" : cd "..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\md" !ENDIF !IF "$(CFG)" == "mod_md - Win32 Release" "libhttpd - Win32 Release" : cd "..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\md" "libhttpd - Win32 ReleaseCLEAN" : cd "..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\md" !ELSEIF "$(CFG)" == "mod_md - Win32 Debug" "libhttpd - Win32 Debug" : cd "..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\md" "libhttpd - Win32 DebugCLEAN" : cd "..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\md" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_md - Win32 Release" "$(INTDIR)\mod_md.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_md.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_md.so" /d LONG_NAME="md_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_md - Win32 Debug" "$(INTDIR)\mod_md.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_md.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_md.so" /d LONG_NAME="md_module for Apache" $(SOURCE) !ENDIF SOURCE=./md_acme.c "$(INTDIR)\md_acme.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_acme_acct.c "$(INTDIR)\md_acme_acct.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_acme_authz.c "$(INTDIR)\md_acme_authz.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_acme_drive.c "$(INTDIR)\md_acme_drive.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_acme_order.c "$(INTDIR)\md_acme_order.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_acmev1_drive.c "$(INTDIR)\md_acmev1_drive.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_acmev2_drive.c "$(INTDIR)\md_acmev2_drive.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_core.c "$(INTDIR)\md_core.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_crypt.c "$(INTDIR)\md_crypt.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_curl.c "$(INTDIR)\md_curl.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_http.c "$(INTDIR)\md_http.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_json.c "$(INTDIR)\md_json.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_jws.c "$(INTDIR)\md_jws.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_log.c "$(INTDIR)\md_log.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_reg.c "$(INTDIR)\md_reg.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_result.c "$(INTDIR)\md_result.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_status.c "$(INTDIR)\md_status.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_store.c "$(INTDIR)\md_store.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_store_fs.c "$(INTDIR)\md_store_fs.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_time.c "$(INTDIR)\md_time.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./md_util.c "$(INTDIR)\md_util.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./mod_md.c "$(INTDIR)\mod_md.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./mod_md_config.c "$(INTDIR)\mod_md_config.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./mod_md_drive.c "$(INTDIR)\mod_md_drive.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./mod_md_os.c "$(INTDIR)\mod_md_os.obj" : $(SOURCE) "$(INTDIR)" SOURCE=./mod_md_status.c "$(INTDIR)\mod_md_status.obj" : $(SOURCE) "$(INTDIR)" !ENDIF �����������������������������������������������������httpd-2.4.41/modules/md/md_crypt.h������������������������������������������������������������������0000644�0000000�0000050�00000016652�13511051361�015304� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_crypt_h #define mod_md_md_crypt_h #include <apr_file_io.h> struct apr_array_header_t; struct md_t; struct md_http_response_t; struct md_cert_t; struct md_pkey_t; struct md_data; /**************************************************************************************************/ /* random */ apr_status_t md_rand_bytes(unsigned char *buf, apr_size_t len, apr_pool_t *p); /**************************************************************************************************/ /* digests */ apr_status_t md_crypt_sha256_digest64(const char **pdigest64, apr_pool_t *p, const struct md_data *data); apr_status_t md_crypt_sha256_digest_hex(const char **pdigesthex, apr_pool_t *p, const struct md_data *data); #define MD_DATA_SET_STR(d, s) do { (d)->data = (s); (d)->len = strlen(s); } while(0) /**************************************************************************************************/ /* private keys */ typedef struct md_pkey_t md_pkey_t; typedef enum { MD_PKEY_TYPE_DEFAULT, MD_PKEY_TYPE_RSA, } md_pkey_type_t; typedef struct md_pkey_rsa_spec_t { apr_uint32_t bits; } md_pkey_rsa_spec_t; typedef struct md_pkey_spec_t { md_pkey_type_t type; union { md_pkey_rsa_spec_t rsa; } params; } md_pkey_spec_t; apr_status_t md_crypt_init(apr_pool_t *pool); apr_status_t md_pkey_gen(md_pkey_t **ppkey, apr_pool_t *p, md_pkey_spec_t *spec); void md_pkey_free(md_pkey_t *pkey); const char *md_pkey_get_rsa_e64(md_pkey_t *pkey, apr_pool_t *p); const char *md_pkey_get_rsa_n64(md_pkey_t *pkey, apr_pool_t *p); apr_status_t md_pkey_fload(md_pkey_t **ppkey, apr_pool_t *p, const char *pass_phrase, apr_size_t pass_len, const char *fname); apr_status_t md_pkey_fsave(md_pkey_t *pkey, apr_pool_t *p, const char *pass_phrase, apr_size_t pass_len, const char *fname, apr_fileperms_t perms); apr_status_t md_crypt_sign64(const char **psign64, md_pkey_t *pkey, apr_pool_t *p, const char *d, size_t dlen); void *md_pkey_get_EVP_PKEY(struct md_pkey_t *pkey); struct md_json_t *md_pkey_spec_to_json(const md_pkey_spec_t *spec, apr_pool_t *p); md_pkey_spec_t *md_pkey_spec_from_json(struct md_json_t *json, apr_pool_t *p); int md_pkey_spec_eq(md_pkey_spec_t *spec1, md_pkey_spec_t *spec2); /**************************************************************************************************/ /* X509 certificates */ typedef struct md_cert_t md_cert_t; typedef enum { MD_CERT_UNKNOWN, MD_CERT_VALID, MD_CERT_EXPIRED } md_cert_state_t; void md_cert_free(md_cert_t *cert); void *md_cert_get_X509(const md_cert_t *cert); apr_status_t md_cert_fload(md_cert_t **pcert, apr_pool_t *p, const char *fname); apr_status_t md_cert_fsave(md_cert_t *cert, apr_pool_t *p, const char *fname, apr_fileperms_t perms); /** * Read a x509 certificate from a http response. * Will return APR_ENOENT if content-type is not recognized (currently * only "application/pkix-cert" is supported). */ apr_status_t md_cert_read_http(md_cert_t **pcert, apr_pool_t *pool, const struct md_http_response_t *res); /** * Read one or even a chain of certificates from a http response. * Will return APR_ENOENT if content-type is not recognized (currently * supports only "application/pem-certificate-chain" and "application/pkix-cert"). * @param chain must be non-NULL, retrieved certificates will be added. */ apr_status_t md_cert_chain_read_http(struct apr_array_header_t *chain, apr_pool_t *pool, const struct md_http_response_t *res); md_cert_state_t md_cert_state_get(const md_cert_t *cert); int md_cert_is_valid_now(const md_cert_t *cert); int md_cert_has_expired(const md_cert_t *cert); int md_cert_covers_domain(md_cert_t *cert, const char *domain_name); int md_cert_covers_md(md_cert_t *cert, const struct md_t *md); int md_cert_must_staple(const md_cert_t *cert); apr_time_t md_cert_get_not_after(const md_cert_t *cert); apr_time_t md_cert_get_not_before(const md_cert_t *cert); apr_status_t md_cert_get_issuers_uri(const char **puri, const md_cert_t *cert, apr_pool_t *p); apr_status_t md_cert_get_alt_names(apr_array_header_t **pnames, const md_cert_t *cert, apr_pool_t *p); apr_status_t md_cert_to_base64url(const char **ps64, const md_cert_t *cert, apr_pool_t *p); apr_status_t md_cert_from_base64url(md_cert_t **pcert, const char *s64, apr_pool_t *p); apr_status_t md_cert_to_sha256_digest(struct md_data **pdigest, const md_cert_t *cert, apr_pool_t *p); apr_status_t md_cert_to_sha256_fingerprint(const char **pfinger, const md_cert_t *cert, apr_pool_t *p); const char *md_cert_get_serial_number(const md_cert_t *cert, apr_pool_t *p); apr_status_t md_chain_fload(struct apr_array_header_t **pcerts, apr_pool_t *p, const char *fname); apr_status_t md_chain_fsave(struct apr_array_header_t *certs, apr_pool_t *p, const char *fname, apr_fileperms_t perms); apr_status_t md_chain_fappend(struct apr_array_header_t *certs, apr_pool_t *p, const char *fname); apr_status_t md_cert_req_create(const char **pcsr_der_64, const char *name, apr_array_header_t *domains, int must_staple, md_pkey_t *pkey, apr_pool_t *p); /** * Create a self-signed cerftificate with the given cn, key and list * of alternate domain names. */ apr_status_t md_cert_self_sign(md_cert_t **pcert, const char *cn, struct apr_array_header_t *domains, md_pkey_t *pkey, apr_interval_time_t valid_for, apr_pool_t *p); /** * Create a certificate for answering "tls-alpn-01" ACME challenges * (see <https://tools.ietf.org/html/draft-ietf-acme-tls-alpn-01>). */ apr_status_t md_cert_make_tls_alpn_01(md_cert_t **pcert, const char *domain, const char *acme_id, md_pkey_t *pkey, apr_interval_time_t valid_for, apr_pool_t *p); apr_status_t md_cert_get_ct_scts(apr_array_header_t *scts, apr_pool_t *p, const md_cert_t *cert); /**************************************************************************************************/ /* X509 certificate transparency */ const char *md_nid_get_sname(int nid); const char *md_nid_get_lname(int nid); typedef struct md_sct md_sct; struct md_sct { int version; apr_time_t timestamp; struct md_data *logid; int signature_type_nid; struct md_data *signature; }; #endif /* md_crypt_h */ ��������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_http.h�������������������������������������������������������������������0000644�0000000�0000050�00000006463�13511051361�015121� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_http_h #define mod_md_md_http_h struct apr_table_t; struct apr_bucket_brigade; struct apr_bucket_alloc_t; typedef struct md_http_t md_http_t; typedef struct md_http_request_t md_http_request_t; typedef struct md_http_response_t md_http_response_t; typedef apr_status_t md_http_cb(const md_http_response_t *res); struct md_http_request_t { md_http_t *http; apr_pool_t *pool; struct apr_bucket_alloc_t *bucket_alloc; const char *method; const char *url; const char *user_agent; const char *proxy_url; apr_table_t *headers; struct apr_bucket_brigade *body; apr_off_t body_len; apr_off_t resp_limit; md_http_cb *cb; void *baton; void *internals; }; struct md_http_response_t { md_http_request_t *req; apr_status_t rv; int status; apr_table_t *headers; struct apr_bucket_brigade *body; }; apr_status_t md_http_create(md_http_t **phttp, apr_pool_t *p, const char *user_agent, const char *proxy_url); void md_http_set_response_limit(md_http_t *http, apr_off_t resp_limit); apr_status_t md_http_GET(md_http_t *http, const char *url, struct apr_table_t *headers, md_http_cb *cb, void *baton); apr_status_t md_http_HEAD(md_http_t *http, const char *url, struct apr_table_t *headers, md_http_cb *cb, void *baton); apr_status_t md_http_POST(md_http_t *http, const char *url, struct apr_table_t *headers, const char *content_type, struct apr_bucket_brigade *body, md_http_cb *cb, void *baton); apr_status_t md_http_POSTd(md_http_t *http, const char *url, struct apr_table_t *headers, const char *content_type, const char *data, size_t data_len, md_http_cb *cb, void *baton); void md_http_req_destroy(md_http_request_t *req); /**************************************************************************************************/ /* interface to implementation */ typedef apr_status_t md_http_init_cb(void); typedef void md_http_req_cleanup_cb(md_http_request_t *req); typedef apr_status_t md_http_perform_cb(md_http_request_t *req); typedef struct md_http_impl_t md_http_impl_t; struct md_http_impl_t { md_http_init_cb *init; md_http_req_cleanup_cb *req_cleanup; md_http_perform_cb *perform; }; void md_http_use_implementation(md_http_impl_t *impl); #endif /* md_http_h */ �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_util.h�������������������������������������������������������������������0000644�0000000�0000050�00000020374�13511051361�015114� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_util_h #define mod_md_md_util_h #include <stdio.h> #include <apr_file_io.h> struct apr_array_header_t; struct apr_table_t; /**************************************************************************************************/ /* pool utils */ typedef apr_status_t md_util_action(void *baton, apr_pool_t *p, apr_pool_t *ptemp); typedef apr_status_t md_util_vaction(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap); apr_status_t md_util_pool_do(md_util_action *cb, void *baton, apr_pool_t *p); apr_status_t md_util_pool_vdo(md_util_vaction *cb, void *baton, apr_pool_t *p, ...); /**************************************************************************************************/ /* data chunks */ typedef struct md_data md_data; struct md_data { const char *data; apr_size_t len; }; md_data *md_data_create(apr_pool_t *p, const char *data, apr_size_t len); apr_status_t md_data_to_hex(const char **phex, char separator, apr_pool_t *p, const md_data *data); /**************************************************************************************************/ /* string related */ char *md_util_str_tolower(char *s); /** * Return != 0 iff array is either NULL or empty */ int md_array_is_empty(const struct apr_array_header_t *array); int md_array_str_index(const struct apr_array_header_t *array, const char *s, int start, int case_sensitive); int md_array_str_eq(const struct apr_array_header_t *a1, const struct apr_array_header_t *a2, int case_sensitive); struct apr_array_header_t *md_array_str_clone(apr_pool_t *p, struct apr_array_header_t *array); /** * Create a new array with duplicates removed. */ struct apr_array_header_t *md_array_str_compact(apr_pool_t *p, struct apr_array_header_t *src, int case_sensitive); /** * Create a new array with all occurances of <exclude> removed. */ struct apr_array_header_t *md_array_str_remove(apr_pool_t *p, struct apr_array_header_t *src, const char *exclude, int case_sensitive); int md_array_str_add_missing(struct apr_array_header_t *dest, struct apr_array_header_t *src, int case_sensitive); /**************************************************************************************************/ /* process execution */ apr_status_t md_util_exec(apr_pool_t *p, const char *cmd, const char * const *argv, int *exit_code); /**************************************************************************************************/ /* dns name check */ /** * Is a host/domain name using allowed characters. Not a wildcard. * @param domain name to check * @param need_fqdn iff != 0, check that domain contains '.' * @return != 0 iff domain looks like a non-wildcard, legal DNS domain name. */ int md_dns_is_name(apr_pool_t *p, const char *domain, int need_fqdn); /** * Check if the given domain is a valid wildcard DNS name, e.g. *.example.org * @param domain name to check * @return != 0 iff domain is a DNS wildcard. */ int md_dns_is_wildcard(apr_pool_t *p, const char *domain); /** * Determine iff pattern matches domain, including case-ignore and wildcard domains. * It is assumed that both names follow dns syntax. * @return != 0 iff pattern matches domain */ int md_dns_matches(const char *pattern, const char *domain); /** * Create a new array with the minimal set out of the given domain names that match all * of them. If none of the domains is a wildcard, only duplicates are removed. * If domains contain a wildcard, any name matching the wildcard will be removed. */ struct apr_array_header_t *md_dns_make_minimal(apr_pool_t *p, struct apr_array_header_t *domains); /** * Determine if the given domains cover the name, including wildcard matching. * @return != 0 iff name is matched by list of domains */ int md_dns_domains_match(const apr_array_header_t *domains, const char *name); /**************************************************************************************************/ /* file system related */ struct apr_file_t; struct apr_finfo_t; apr_status_t md_util_fopen(FILE **pf, const char *fn, const char *mode); apr_status_t md_util_fcreatex(struct apr_file_t **pf, const char *fn, apr_fileperms_t perms, apr_pool_t *p); apr_status_t md_util_path_merge(const char **ppath, apr_pool_t *p, ...); apr_status_t md_util_is_dir(const char *path, apr_pool_t *pool); apr_status_t md_util_is_file(const char *path, apr_pool_t *pool); int md_file_exists(const char *fname, apr_pool_t *p); typedef apr_status_t md_util_file_cb(void *baton, struct apr_file_t *f, apr_pool_t *p); apr_status_t md_util_freplace(const char *fpath, apr_fileperms_t perms, apr_pool_t *p, md_util_file_cb *write, void *baton); /** * Remove a file/directory and all files/directories contain up to max_level. If max_level == 0, * only an empty directory or a file can be removed. */ apr_status_t md_util_rm_recursive(const char *fpath, apr_pool_t *p, int max_level); typedef apr_status_t md_util_fdo_cb(void *baton, apr_pool_t *p, apr_pool_t *ptemp, const char *dir, const char *name, apr_filetype_e ftype); apr_status_t md_util_files_do(md_util_fdo_cb *cb, void *baton, apr_pool_t *p, const char *path, ...); /** * Depth first traversal of directory tree starting at path. */ apr_status_t md_util_tree_do(md_util_fdo_cb *cb, void *baton, apr_pool_t *p, const char *path, int follow_links); apr_status_t md_util_ftree_remove(const char *path, apr_pool_t *p); apr_status_t md_text_fread8k(const char **ptext, apr_pool_t *p, const char *fpath); apr_status_t md_text_fcreatex(const char *fpath, apr_fileperms_t perms, apr_pool_t *p, const char *text); apr_status_t md_text_freplace(const char *fpath, apr_fileperms_t perms, apr_pool_t *p, const char *text); /**************************************************************************************************/ /* base64 url encodings */ const char *md_util_base64url_encode(const char *data, apr_size_t len, apr_pool_t *pool); apr_size_t md_util_base64url_decode(const char **decoded, const char *encoded, apr_pool_t *pool); /**************************************************************************************************/ /* http/url related */ const char *md_util_schemify(apr_pool_t *p, const char *s, const char *def_scheme); apr_status_t md_util_abs_uri_check(apr_pool_t *p, const char *s, const char **perr); apr_status_t md_util_abs_http_uri_check(apr_pool_t *p, const char *uri, const char **perr); const char *md_link_find_relation(const struct apr_table_t *headers, apr_pool_t *pool, const char *relation); /**************************************************************************************************/ /* retry logic */ typedef apr_status_t md_util_try_fn(void *baton, int i); apr_status_t md_util_try(md_util_try_fn *fn, void *baton, int ignore_errs, apr_interval_time_t timeout, apr_interval_time_t start_delay, apr_interval_time_t max_delay, int backoff); #endif /* md_util_h */ ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/mod_md_config.c�������������������������������������������������������������0000644�0000000�0000050�00000101652�13511614110�016232� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <apr_lib.h> #include <apr_strings.h> #include <httpd.h> #include <http_core.h> #include <http_config.h> #include <http_log.h> #include <http_vhost.h> #include "md.h" #include "md_crypt.h" #include "md_log.h" #include "md_util.h" #include "mod_md_private.h" #include "mod_md_config.h" #define MD_CMD_MD_SECTION "<MDomainSet" #define MD_CMD_MD2_SECTION "<MDomain" #define DEF_VAL (-1) #ifndef MD_DEFAULT_BASE_DIR #define MD_DEFAULT_BASE_DIR "md" #endif /* Default settings for the global conf */ static md_mod_conf_t defmc = { NULL, /* list of mds */ #if AP_MODULE_MAGIC_AT_LEAST(20180906, 2) NULL, /* base dir by default state-dir-relative */ #else MD_DEFAULT_BASE_DIR, #endif NULL, /* proxy url for outgoing http */ NULL, /* md_reg */ 80, /* local http: port */ 443, /* local https: port */ 0, /* can http: */ 0, /* can https: */ 0, /* manage base server */ MD_HSTS_MAX_AGE_DEFAULT, /* hsts max-age */ NULL, /* hsts headers */ NULL, /* unused names */ NULL, /* watched names */ NULL, /* init errors hash */ NULL, /* notify cmd */ NULL, /* message cmd */ NULL, /* env table */ 0, /* dry_run flag */ 1, /* server_status_enabled */ 1, /* certificate_status_enabled */ }; static md_timeslice_t def_renew_window = { MD_TIME_LIFE_NORM, MD_TIME_RENEW_WINDOW_DEF, }; static md_timeslice_t def_warn_window = { MD_TIME_LIFE_NORM, MD_TIME_WARN_WINDOW_DEF, }; /* Default server specific setting */ static md_srv_conf_t defconf = { "default", /* name */ NULL, /* server_rec */ &defmc, /* mc */ 1, /* transitive */ MD_REQUIRE_OFF, /* require https */ MD_RENEW_AUTO, /* renew mode */ 0, /* must staple */ NULL, /* pkey spec */ &def_renew_window, /* renew window */ &def_warn_window, /* warn window */ NULL, /* ca url */ "ACME", /* ca protocol */ NULL, /* ca agreemnent */ NULL, /* ca challenges array */ NULL, /* currently defined md */ NULL, /* assigned md, post config */ }; static md_mod_conf_t *mod_md_config; static apr_status_t cleanup_mod_config(void *dummy) { (void)dummy; mod_md_config = NULL; return APR_SUCCESS; } static md_mod_conf_t *md_mod_conf_get(apr_pool_t *pool, int create) { if (mod_md_config) { return mod_md_config; /* reused for lifetime of the pool */ } if (create) { mod_md_config = apr_pcalloc(pool, sizeof(*mod_md_config)); memcpy(mod_md_config, &defmc, sizeof(*mod_md_config)); mod_md_config->mds = apr_array_make(pool, 5, sizeof(const md_t *)); mod_md_config->unused_names = apr_array_make(pool, 5, sizeof(const md_t *)); mod_md_config->watched_names = apr_array_make(pool, 5, sizeof(const md_t *)); mod_md_config->env = apr_table_make(pool, 10); mod_md_config->init_errors = apr_hash_make(pool); apr_pool_cleanup_register(pool, NULL, cleanup_mod_config, apr_pool_cleanup_null); } return mod_md_config; } #define CONF_S_NAME(s) (s && s->server_hostname? s->server_hostname : "default") static void srv_conf_props_clear(md_srv_conf_t *sc) { sc->transitive = DEF_VAL; sc->require_https = MD_REQUIRE_UNSET; sc->renew_mode = DEF_VAL; sc->must_staple = DEF_VAL; sc->pkey_spec = NULL; sc->renew_window = NULL; sc->warn_window = NULL; sc->ca_url = NULL; sc->ca_proto = NULL; sc->ca_agreement = NULL; sc->ca_challenges = NULL; } static void srv_conf_props_copy(md_srv_conf_t *to, const md_srv_conf_t *from) { to->transitive = from->transitive; to->require_https = from->require_https; to->renew_mode = from->renew_mode; to->must_staple = from->must_staple; to->pkey_spec = from->pkey_spec; to->warn_window = from->warn_window; to->renew_window = from->renew_window; to->ca_url = from->ca_url; to->ca_proto = from->ca_proto; to->ca_agreement = from->ca_agreement; to->ca_challenges = from->ca_challenges; } static void srv_conf_props_apply(md_t *md, const md_srv_conf_t *from, apr_pool_t *p) { if (from->require_https != MD_REQUIRE_UNSET) md->require_https = from->require_https; if (from->transitive != DEF_VAL) md->transitive = from->transitive; if (from->renew_mode != DEF_VAL) md->renew_mode = from->renew_mode; if (from->must_staple != DEF_VAL) md->must_staple = from->must_staple; if (from->pkey_spec) md->pkey_spec = from->pkey_spec; if (from->renew_window) md->renew_window = from->renew_window; if (from->warn_window) md->warn_window = from->warn_window; if (from->ca_url) md->ca_url = from->ca_url; if (from->ca_proto) md->ca_proto = from->ca_proto; if (from->ca_agreement) md->ca_agreement = from->ca_agreement; if (from->ca_challenges) md->ca_challenges = apr_array_copy(p, from->ca_challenges); } void *md_config_create_svr(apr_pool_t *pool, server_rec *s) { md_srv_conf_t *conf = (md_srv_conf_t *)apr_pcalloc(pool, sizeof(md_srv_conf_t)); conf->name = apr_pstrcat(pool, "srv[", CONF_S_NAME(s), "]", NULL); conf->s = s; conf->mc = md_mod_conf_get(pool, 1); srv_conf_props_clear(conf); return conf; } static void *md_config_merge(apr_pool_t *pool, void *basev, void *addv) { md_srv_conf_t *base = (md_srv_conf_t *)basev; md_srv_conf_t *add = (md_srv_conf_t *)addv; md_srv_conf_t *nsc; char *name = apr_pstrcat(pool, "[", CONF_S_NAME(add->s), ", ", CONF_S_NAME(base->s), "]", NULL); nsc = (md_srv_conf_t *)apr_pcalloc(pool, sizeof(md_srv_conf_t)); nsc->name = name; nsc->mc = add->mc? add->mc : base->mc; nsc->assigned = add->assigned? add->assigned : base->assigned; nsc->transitive = (add->transitive != DEF_VAL)? add->transitive : base->transitive; nsc->require_https = (add->require_https != MD_REQUIRE_UNSET)? add->require_https : base->require_https; nsc->renew_mode = (add->renew_mode != DEF_VAL)? add->renew_mode : base->renew_mode; nsc->must_staple = (add->must_staple != DEF_VAL)? add->must_staple : base->must_staple; nsc->pkey_spec = add->pkey_spec? add->pkey_spec : base->pkey_spec; nsc->renew_window = add->renew_window? add->renew_window : base->renew_window; nsc->warn_window = add->warn_window? add->warn_window : base->warn_window; nsc->ca_url = add->ca_url? add->ca_url : base->ca_url; nsc->ca_proto = add->ca_proto? add->ca_proto : base->ca_proto; nsc->ca_agreement = add->ca_agreement? add->ca_agreement : base->ca_agreement; nsc->ca_challenges = (add->ca_challenges? apr_array_copy(pool, add->ca_challenges) : (base->ca_challenges? apr_array_copy(pool, base->ca_challenges) : NULL)); nsc->current = NULL; nsc->assigned = NULL; return nsc; } void *md_config_merge_svr(apr_pool_t *pool, void *basev, void *addv) { return md_config_merge(pool, basev, addv); } static int inside_section(cmd_parms *cmd, const char *section) { ap_directive_t *d; for (d = cmd->directive->parent; d; d = d->parent) { if (!ap_cstr_casecmp(d->directive, section)) { return 1; } } return 0; } static int inside_md_section(cmd_parms *cmd) { return (inside_section(cmd, MD_CMD_MD_SECTION) || inside_section(cmd, MD_CMD_MD2_SECTION)); } static const char *md_section_check(cmd_parms *cmd) { if (!inside_md_section(cmd)) { return apr_pstrcat(cmd->pool, cmd->cmd->name, " is only valid inside a '", MD_CMD_MD_SECTION, "' context, not here", NULL); } return NULL; } static const char *set_on_off(int *pvalue, const char *s, apr_pool_t *p) { if (!apr_strnatcasecmp("off", s)) { *pvalue = 0; } else if (!apr_strnatcasecmp("on", s)) { *pvalue = 1; } else { return apr_pstrcat(p, "unknown '", s, "', supported parameter values are 'on' and 'off'", NULL); } return NULL; } static void add_domain_name(apr_array_header_t *domains, const char *name, apr_pool_t *p) { if (md_array_str_index(domains, name, 0, 0) < 0) { APR_ARRAY_PUSH(domains, char *) = md_util_str_tolower(apr_pstrdup(p, name)); } } static const char *set_transitive(int *ptransitive, const char *value) { if (!apr_strnatcasecmp("auto", value)) { *ptransitive = 1; return NULL; } else if (!apr_strnatcasecmp("manual", value)) { *ptransitive = 0; return NULL; } return "unknown value, use \"auto|manual\""; } static const char *md_config_sec_start(cmd_parms *cmd, void *mconfig, const char *arg) { md_srv_conf_t *sc; md_srv_conf_t save; const char *endp; const char *err, *name; apr_array_header_t *domains; md_t *md; int transitive = -1; (void)mconfig; if ((err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } sc = md_config_get(cmd->server); endp = ap_strrchr_c(arg, '>'); if (endp == NULL) { return MD_CMD_MD_SECTION "> directive missing closing '>'"; } arg = apr_pstrndup(cmd->pool, arg, (apr_size_t)(endp-arg)); if (!arg || !*arg) { return MD_CMD_MD_SECTION " > section must specify a unique domain name"; } name = ap_getword_white(cmd->pool, &arg); domains = apr_array_make(cmd->pool, 5, sizeof(const char *)); add_domain_name(domains, name, cmd->pool); while (*arg != '\0') { name = ap_getword_white(cmd->pool, &arg); if (NULL != set_transitive(&transitive, name)) { add_domain_name(domains, name, cmd->pool); } } if (domains->nelts == 0) { return "needs at least one domain name"; } md = md_create(cmd->pool, domains); if (transitive >= 0) { md->transitive = transitive; } /* Save the current settings in this srv_conf and apply+restore at the * end of this section */ memcpy(&save, sc, sizeof(save)); srv_conf_props_clear(sc); sc->current = md; if (NULL == (err = ap_walk_config(cmd->directive->first_child, cmd, cmd->context))) { srv_conf_props_apply(md, sc, cmd->pool); APR_ARRAY_PUSH(sc->mc->mds, const md_t *) = md; } sc->current = NULL; srv_conf_props_copy(sc, &save); return err; } static const char *md_config_sec_add_members(cmd_parms *cmd, void *dc, int argc, char *const argv[]) { md_srv_conf_t *sc = md_config_get(cmd->server); const char *err; int i; (void)dc; if (NULL != (err = md_section_check(cmd))) { if (argc == 1) { /* only these values are allowed outside a section */ return set_transitive(&sc->transitive, argv[0]); } return err; } assert(sc->current); for (i = 0; i < argc; ++i) { if (NULL != set_transitive(&sc->transitive, argv[i])) { add_domain_name(sc->current->domains, argv[i], cmd->pool); } } return NULL; } static const char *md_config_set_names(cmd_parms *cmd, void *dc, int argc, char *const argv[]) { md_srv_conf_t *sc = md_config_get(cmd->server); apr_array_header_t *domains = apr_array_make(cmd->pool, 5, sizeof(const char *)); const char *err; md_t *md; int i, transitive = -1; (void)dc; err = ap_check_cmd_context(cmd, NOT_IN_DIR_LOC_FILE); if (err) { return err; } for (i = 0; i < argc; ++i) { if (NULL != set_transitive(&transitive, argv[i])) { add_domain_name(domains, argv[i], cmd->pool); } } if (domains->nelts == 0) { return "needs at least one domain name"; } md = md_create(cmd->pool, domains); if (transitive >= 0) { md->transitive = transitive; } if (cmd->config_file) { md->defn_name = cmd->config_file->name; md->defn_line_number = cmd->config_file->line_number; } APR_ARRAY_PUSH(sc->mc->mds, md_t *) = md; return NULL; } static const char *md_config_set_ca(cmd_parms *cmd, void *dc, const char *value) { md_srv_conf_t *sc = md_config_get(cmd->server); const char *err; (void)dc; if (!inside_md_section(cmd) && (err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } sc->ca_url = value; return NULL; } static const char *md_config_set_ca_proto(cmd_parms *cmd, void *dc, const char *value) { md_srv_conf_t *config = md_config_get(cmd->server); const char *err; (void)dc; if (!inside_md_section(cmd) && (err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } config->ca_proto = value; return NULL; } static const char *md_config_set_agreement(cmd_parms *cmd, void *dc, const char *value) { md_srv_conf_t *config = md_config_get(cmd->server); const char *err; (void)dc; if (!inside_md_section(cmd) && (err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } config->ca_agreement = value; return NULL; } static const char *md_config_set_renew_mode(cmd_parms *cmd, void *dc, const char *value) { md_srv_conf_t *config = md_config_get(cmd->server); const char *err; md_renew_mode_t renew_mode; (void)dc; if (!apr_strnatcasecmp("auto", value) || !apr_strnatcasecmp("automatic", value)) { renew_mode = MD_RENEW_AUTO; } else if (!apr_strnatcasecmp("always", value)) { renew_mode = MD_RENEW_ALWAYS; } else if (!apr_strnatcasecmp("manual", value) || !apr_strnatcasecmp("stick", value)) { renew_mode = MD_RENEW_MANUAL; } else { return apr_pstrcat(cmd->pool, "unknown MDDriveMode ", value, NULL); } if (!inside_md_section(cmd) && (err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } config->renew_mode = renew_mode; return NULL; } static const char *md_config_set_must_staple(cmd_parms *cmd, void *dc, const char *value) { md_srv_conf_t *config = md_config_get(cmd->server); const char *err; (void)dc; if (!inside_md_section(cmd) && (err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } return set_on_off(&config->must_staple, value, cmd->pool); } static const char *md_config_set_base_server(cmd_parms *cmd, void *dc, const char *value) { md_srv_conf_t *config = md_config_get(cmd->server); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); (void)dc; if (err) return err; return set_on_off(&config->mc->manage_base_server, value, cmd->pool); } static const char *md_config_set_require_https(cmd_parms *cmd, void *dc, const char *value) { md_srv_conf_t *config = md_config_get(cmd->server); const char *err; (void)dc; if (!inside_md_section(cmd) && (err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } if (!apr_strnatcasecmp("off", value)) { config->require_https = MD_REQUIRE_OFF; } else if (!apr_strnatcasecmp(MD_KEY_TEMPORARY, value)) { config->require_https = MD_REQUIRE_TEMPORARY; } else if (!apr_strnatcasecmp(MD_KEY_PERMANENT, value)) { config->require_https = MD_REQUIRE_PERMANENT; } else { return apr_pstrcat(cmd->pool, "unknown '", value, "', supported parameter values are 'temporary' and 'permanent'", NULL); } return NULL; } static const char *md_config_set_renew_window(cmd_parms *cmd, void *dc, const char *value) { md_srv_conf_t *config = md_config_get(cmd->server); const char *err; (void)dc; if (!inside_md_section(cmd) && (err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } err = md_timeslice_parse(&config->renew_window, cmd->pool, value, MD_TIME_LIFE_NORM); if (!err && config->renew_window->norm && (config->renew_window->len >= config->renew_window->norm)) { err = "a length of 100% or more is not allowed."; } if (err) return apr_psprintf(cmd->pool, "MDRenewWindow %s", err); return NULL; } static const char *md_config_set_warn_window(cmd_parms *cmd, void *dc, const char *value) { md_srv_conf_t *config = md_config_get(cmd->server); const char *err; (void)dc; if (!inside_md_section(cmd) && (err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } err = md_timeslice_parse(&config->warn_window, cmd->pool, value, MD_TIME_LIFE_NORM); if (!err && config->warn_window->norm && (config->warn_window->len >= config->warn_window->norm)) { err = "a length of 100% or more is not allowed."; } if (err) return apr_psprintf(cmd->pool, "MDWarnWindow %s", err); return NULL; } static const char *md_config_set_proxy(cmd_parms *cmd, void *arg, const char *value) { md_srv_conf_t *sc = md_config_get(cmd->server); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err) { return err; } md_util_abs_http_uri_check(cmd->pool, value, &err); if (err) { return err; } sc->mc->proxy_url = value; (void)arg; return NULL; } static const char *md_config_set_store_dir(cmd_parms *cmd, void *arg, const char *value) { md_srv_conf_t *sc = md_config_get(cmd->server); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err) { return err; } sc->mc->base_dir = value; (void)arg; return NULL; } static const char *set_port_map(md_mod_conf_t *mc, const char *value) { int net_port, local_port; const char *endp; if (!strncmp("http:", value, sizeof("http:") - 1)) { net_port = 80; endp = value + sizeof("http") - 1; } else if (!strncmp("https:", value, sizeof("https:") - 1)) { net_port = 443; endp = value + sizeof("https") - 1; } else { net_port = (int)apr_strtoi64(value, (char**)&endp, 10); if (errno) { return "unable to parse first port number"; } } if (!endp || *endp != ':') { return "no ':' after first port number"; } ++endp; if (*endp == '-') { local_port = 0; } else { local_port = (int)apr_strtoi64(endp, (char**)&endp, 10); if (errno) { return "unable to parse second port number"; } if (local_port <= 0 || local_port > 65535) { return "invalid number for port map, must be in ]0,65535]"; } } switch (net_port) { case 80: mc->local_80 = local_port; break; case 443: mc->local_443 = local_port; break; default: return "mapped port number must be 80 or 443"; } return NULL; } static const char *md_config_set_port_map(cmd_parms *cmd, void *arg, const char *v1, const char *v2) { md_srv_conf_t *sc = md_config_get(cmd->server); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); (void)arg; if (!err) { err = set_port_map(sc->mc, v1); } if (!err && v2) { err = set_port_map(sc->mc, v2); } return err; } static const char *md_config_set_cha_tyes(cmd_parms *cmd, void *dc, int argc, char *const argv[]) { md_srv_conf_t *config = md_config_get(cmd->server); apr_array_header_t **pcha, *ca_challenges; const char *err; int i; (void)dc; if (!inside_md_section(cmd) && (err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } pcha = &config->ca_challenges; ca_challenges = *pcha; if (!ca_challenges) { *pcha = ca_challenges = apr_array_make(cmd->pool, 5, sizeof(const char *)); } for (i = 0; i < argc; ++i) { APR_ARRAY_PUSH(ca_challenges, const char *) = argv[i]; } return NULL; } static const char *md_config_set_pkeys(cmd_parms *cmd, void *dc, int argc, char *const argv[]) { md_srv_conf_t *config = md_config_get(cmd->server); const char *err, *ptype; apr_int64_t bits; (void)dc; if (!inside_md_section(cmd) && (err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } if (argc <= 0) { return "needs to specify the private key type"; } ptype = argv[0]; if (!apr_strnatcasecmp("Default", ptype)) { if (argc > 1) { return "type 'Default' takes no parameter"; } if (!config->pkey_spec) { config->pkey_spec = apr_pcalloc(cmd->pool, sizeof(*config->pkey_spec)); } config->pkey_spec->type = MD_PKEY_TYPE_DEFAULT; return NULL; } else if (!apr_strnatcasecmp("RSA", ptype)) { if (argc == 1) { bits = MD_PKEY_RSA_BITS_DEF; } else if (argc == 2) { bits = (int)apr_atoi64(argv[1]); if (bits < MD_PKEY_RSA_BITS_MIN || bits >= INT_MAX) { return apr_psprintf(cmd->pool, "must be %d or higher in order to be considered " "safe. Too large a value will slow down everything. Larger then 4096 probably does " "not make sense unless quantum cryptography really changes spin.", MD_PKEY_RSA_BITS_MIN); } } else { return "key type 'RSA' has only one optional parameter, the number of bits"; } if (!config->pkey_spec) { config->pkey_spec = apr_pcalloc(cmd->pool, sizeof(*config->pkey_spec)); } config->pkey_spec->type = MD_PKEY_TYPE_RSA; config->pkey_spec->params.rsa.bits = (unsigned int)bits; return NULL; } return apr_pstrcat(cmd->pool, "unsupported private key type \"", ptype, "\"", NULL); } static const char *md_config_set_notify_cmd(cmd_parms *cmd, void *mconfig, const char *arg) { md_srv_conf_t *sc = md_config_get(cmd->server); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err) { return err; } sc->mc->notify_cmd = arg; (void)mconfig; return NULL; } static const char *md_config_set_msg_cmd(cmd_parms *cmd, void *mconfig, const char *arg) { md_srv_conf_t *sc = md_config_get(cmd->server); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err) { return err; } sc->mc->message_cmd = arg; (void)mconfig; return NULL; } static const char *md_config_set_dns01_cmd(cmd_parms *cmd, void *mconfig, const char *arg) { md_srv_conf_t *sc = md_config_get(cmd->server); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err) { return err; } apr_table_set(sc->mc->env, MD_KEY_CMD_DNS01, arg); (void)mconfig; return NULL; } static const char *md_config_set_cert_file(cmd_parms *cmd, void *mconfig, const char *arg) { md_srv_conf_t *sc = md_config_get(cmd->server); const char *err; (void)mconfig; if (NULL != (err = md_section_check(cmd))) return err; assert(sc->current); sc->current->cert_file = arg; return NULL; } static const char *md_config_set_key_file(cmd_parms *cmd, void *mconfig, const char *arg) { md_srv_conf_t *sc = md_config_get(cmd->server); const char *err; (void)mconfig; if (NULL != (err = md_section_check(cmd))) return err; assert(sc->current); sc->current->pkey_file = arg; return NULL; } static const char *md_config_set_server_status(cmd_parms *cmd, void *dc, const char *value) { md_srv_conf_t *sc = md_config_get(cmd->server); const char *err; (void)dc; if (!inside_md_section(cmd) && (err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } return set_on_off(&sc->mc->server_status_enabled, value, cmd->pool); } static const char *md_config_set_certificate_status(cmd_parms *cmd, void *dc, const char *value) { md_srv_conf_t *sc = md_config_get(cmd->server); const char *err; (void)dc; if (!inside_md_section(cmd) && (err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } return set_on_off(&sc->mc->certificate_status_enabled, value, cmd->pool); } const command_rec md_cmds[] = { AP_INIT_TAKE1("MDCertificateAuthority", md_config_set_ca, NULL, RSRC_CONF, "URL of CA issuing the certificates"), AP_INIT_TAKE1("MDCertificateAgreement", md_config_set_agreement, NULL, RSRC_CONF, "either 'accepted' or the URL of CA Terms-of-Service agreement you accept"), AP_INIT_TAKE_ARGV("MDCAChallenges", md_config_set_cha_tyes, NULL, RSRC_CONF, "A list of challenge types to be used."), AP_INIT_TAKE1("MDCertificateProtocol", md_config_set_ca_proto, NULL, RSRC_CONF, "Protocol used to obtain/renew certificates"), AP_INIT_TAKE1("MDDriveMode", md_config_set_renew_mode, NULL, RSRC_CONF, "deprecated, older name for MDRenewMode"), AP_INIT_TAKE1("MDRenewMode", md_config_set_renew_mode, NULL, RSRC_CONF, "Controls how renewal of Managed Domain certificates shall be handled."), AP_INIT_TAKE_ARGV("MDomain", md_config_set_names, NULL, RSRC_CONF, "A group of server names with one certificate"), AP_INIT_RAW_ARGS(MD_CMD_MD_SECTION, md_config_sec_start, NULL, RSRC_CONF, "Container for a managed domain with common settings and certificate."), AP_INIT_RAW_ARGS(MD_CMD_MD2_SECTION, md_config_sec_start, NULL, RSRC_CONF, "Short form for <MDomainSet> container."), AP_INIT_TAKE_ARGV("MDMember", md_config_sec_add_members, NULL, RSRC_CONF, "Define domain name(s) part of the Managed Domain. Use 'auto' or " "'manual' to enable/disable auto adding names from virtual hosts."), AP_INIT_TAKE_ARGV("MDMembers", md_config_sec_add_members, NULL, RSRC_CONF, "Define domain name(s) part of the Managed Domain. Use 'auto' or " "'manual' to enable/disable auto adding names from virtual hosts."), AP_INIT_TAKE1("MDMustStaple", md_config_set_must_staple, NULL, RSRC_CONF, "Enable/Disable the Must-Staple flag for new certificates."), AP_INIT_TAKE12("MDPortMap", md_config_set_port_map, NULL, RSRC_CONF, "Declare the mapped ports 80 and 443 on the local server. E.g. 80:8000 " "to indicate that the server port 8000 is reachable as port 80 from the " "internet. Use 80:- to indicate that port 80 is not reachable from " "the outside."), AP_INIT_TAKE_ARGV("MDPrivateKeys", md_config_set_pkeys, NULL, RSRC_CONF, "set the type and parameters for private key generation"), AP_INIT_TAKE1("MDHttpProxy", md_config_set_proxy, NULL, RSRC_CONF, "URL of a HTTP(S) proxy to use for outgoing connections"), AP_INIT_TAKE1("MDStoreDir", md_config_set_store_dir, NULL, RSRC_CONF, "the directory for file system storage of managed domain data."), AP_INIT_TAKE1("MDRenewWindow", md_config_set_renew_window, NULL, RSRC_CONF, "Time length for renewal before certificate expires (defaults to days)"), AP_INIT_TAKE1("MDRequireHttps", md_config_set_require_https, NULL, RSRC_CONF, "Redirect non-secure requests to the https: equivalent."), AP_INIT_RAW_ARGS("MDNotifyCmd", md_config_set_notify_cmd, NULL, RSRC_CONF, "Set the command to run when signup/renew of domain is complete."), AP_INIT_TAKE1("MDBaseServer", md_config_set_base_server, NULL, RSRC_CONF, "Allow managing of base server outside virtual hosts."), AP_INIT_RAW_ARGS("MDChallengeDns01", md_config_set_dns01_cmd, NULL, RSRC_CONF, "Set the command for setup/teardown of dns-01 challenges"), AP_INIT_TAKE1("MDCertificateFile", md_config_set_cert_file, NULL, RSRC_CONF, "set the static certificate (chain) file to use for this domain."), AP_INIT_TAKE1("MDCertificateKeyFile", md_config_set_key_file, NULL, RSRC_CONF, "set the static private key file to use for this domain."), AP_INIT_TAKE1("MDServerStatus", md_config_set_server_status, NULL, RSRC_CONF, "On to see Managed Domains in server-status."), AP_INIT_TAKE1("MDCertificateStatus", md_config_set_certificate_status, NULL, RSRC_CONF, "On to see Managed Domain expose /.httpd/certificate-status."), AP_INIT_TAKE1("MDWarnWindow", md_config_set_warn_window, NULL, RSRC_CONF, "When less time remains for a certificate, send our/log a warning (defaults to days)"), AP_INIT_RAW_ARGS("MDMessageCmd", md_config_set_msg_cmd, NULL, RSRC_CONF, "Set the command run when a message about a domain is issued."), AP_INIT_TAKE1(NULL, NULL, NULL, RSRC_CONF, NULL) }; apr_status_t md_config_post_config(server_rec *s, apr_pool_t *p) { md_srv_conf_t *sc; md_mod_conf_t *mc; sc = md_config_get(s); mc = sc->mc; mc->hsts_header = NULL; if (mc->hsts_max_age > 0) { mc->hsts_header = apr_psprintf(p, "max-age=%d", mc->hsts_max_age); } #if AP_MODULE_MAGIC_AT_LEAST(20180906, 2) if (mc->base_dir == NULL) { mc->base_dir = ap_state_dir_relative(p, MD_DEFAULT_BASE_DIR); } #endif return APR_SUCCESS; } static md_srv_conf_t *config_get_int(server_rec *s, apr_pool_t *p) { md_srv_conf_t *sc = (md_srv_conf_t *)ap_get_module_config(s->module_config, &md_module); ap_assert(sc); if (sc->s != s && p) { sc = md_config_merge(p, &defconf, sc); sc->name = apr_pstrcat(p, CONF_S_NAME(s), sc->name, NULL); sc->mc = md_mod_conf_get(p, 1); ap_set_module_config(s->module_config, &md_module, sc); } return sc; } md_srv_conf_t *md_config_get(server_rec *s) { return config_get_int(s, NULL); } md_srv_conf_t *md_config_get_unique(server_rec *s, apr_pool_t *p) { assert(p); return config_get_int(s, p); } md_srv_conf_t *md_config_cget(conn_rec *c) { return md_config_get(c->base_server); } const char *md_config_gets(const md_srv_conf_t *sc, md_config_var_t var) { switch (var) { case MD_CONFIG_CA_URL: return sc->ca_url? sc->ca_url : defconf.ca_url; case MD_CONFIG_CA_PROTO: return sc->ca_proto? sc->ca_proto : defconf.ca_proto; case MD_CONFIG_BASE_DIR: return sc->mc->base_dir; case MD_CONFIG_PROXY: return sc->mc->proxy_url; case MD_CONFIG_CA_AGREEMENT: return sc->ca_agreement? sc->ca_agreement : defconf.ca_agreement; case MD_CONFIG_NOTIFY_CMD: return sc->mc->notify_cmd; default: return NULL; } } int md_config_geti(const md_srv_conf_t *sc, md_config_var_t var) { switch (var) { case MD_CONFIG_DRIVE_MODE: return (sc->renew_mode != DEF_VAL)? sc->renew_mode : defconf.renew_mode; case MD_CONFIG_LOCAL_80: return sc->mc->local_80; case MD_CONFIG_LOCAL_443: return sc->mc->local_443; case MD_CONFIG_TRANSITIVE: return (sc->transitive != DEF_VAL)? sc->transitive : defconf.transitive; case MD_CONFIG_REQUIRE_HTTPS: return (sc->require_https != MD_REQUIRE_UNSET)? sc->require_https : defconf.require_https; case MD_CONFIG_MUST_STAPLE: return (sc->must_staple != DEF_VAL)? sc->must_staple : defconf.must_staple; default: return 0; } } void md_config_get_timespan(const md_timeslice_t **pspan, const md_srv_conf_t *sc, md_config_var_t var) { switch (var) { case MD_CONFIG_RENEW_WINDOW: *pspan = sc->renew_window? sc->renew_window : defconf.renew_window; break; case MD_CONFIG_WARN_WINDOW: *pspan = sc->warn_window? sc->warn_window : defconf.warn_window; break; default: break; } } ��������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_acme_drive.c�������������������������������������������������������������0000644�0000000�0000050�00000103417�13511051361�016230� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <stdlib.h> #include <apr_lib.h> #include <apr_strings.h> #include <apr_buckets.h> #include <apr_hash.h> #include <apr_uri.h> #include "md.h" #include "md_crypt.h" #include "md_json.h" #include "md_jws.h" #include "md_http.h" #include "md_log.h" #include "md_result.h" #include "md_reg.h" #include "md_store.h" #include "md_util.h" #include "md_acme.h" #include "md_acme_acct.h" #include "md_acme_authz.h" #include "md_acme_order.h" #include "md_acme_drive.h" #include "md_acmev1_drive.h" #include "md_acmev2_drive.h" /**************************************************************************************************/ /* account setup */ static apr_status_t use_staged_acct(md_acme_t *acme, struct md_store_t *store, const char *md_name, apr_pool_t *p) { md_acme_acct_t *acct; md_pkey_t *pkey; apr_status_t rv; if (APR_SUCCESS == (rv = md_acme_acct_load(&acct, &pkey, store, MD_SG_STAGING, md_name, acme->p))) { acme->acct_id = NULL; acme->acct = acct; acme->acct_key = pkey; rv = md_acme_acct_validate(acme, NULL, p); } return rv; } static apr_status_t save_acct_staged(md_acme_t *acme, md_store_t *store, const char *md_name, apr_pool_t *p) { md_json_t *jacct; apr_status_t rv; jacct = md_acme_acct_to_json(acme->acct, p); rv = md_store_save(store, p, MD_SG_STAGING, md_name, MD_FN_ACCOUNT, MD_SV_JSON, jacct, 0); if (APR_SUCCESS == rv) { rv = md_store_save(store, p, MD_SG_STAGING, md_name, MD_FN_ACCT_KEY, MD_SV_PKEY, acme->acct_key, 0); } return rv; } apr_status_t md_acme_drive_set_acct(md_proto_driver_t *d, md_result_t *result) { md_acme_driver_t *ad = d->baton; md_t *md = ad->md; apr_status_t rv = APR_SUCCESS; int update_md = 0, update_acct = 0; md_result_activity_printf(result, "Selecting account to use for %s", d->md->name); md_acme_clear_acct(ad->acme); /* Do we have a staged (modified) account? */ if (APR_SUCCESS == (rv = use_staged_acct(ad->acme, d->store, md->name, d->p))) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "re-using staged account"); } else if (!APR_STATUS_IS_ENOENT(rv)) { goto out; } /* Get an account for the ACME server for this MD */ if (!ad->acme->acct && md->ca_account) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "re-use account '%s'", md->ca_account); rv = md_acme_use_acct(ad->acme, d->store, d->p, md->ca_account); if (APR_STATUS_IS_ENOENT(rv) || APR_STATUS_IS_EINVAL(rv)) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "rejected %s", md->ca_account); md->ca_account = NULL; update_md = 1; } else if (APR_SUCCESS != rv) { goto out; } } if (!ad->acme->acct && !md->ca_account) { /* Find a local account for server, store at MD */ md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "%s: looking at existing accounts", d->proto->protocol); if (APR_SUCCESS == (rv = md_acme_find_acct(ad->acme, d->store))) { md->ca_account = md_acme_acct_id_get(ad->acme); update_md = 1; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "%s: using account %s (id=%s)", d->proto->protocol, ad->acme->acct->url, md->ca_account); } } if (!ad->acme->acct) { /* No account staged, no suitable found in store, register a new one */ md_result_activity_printf(result, "Creating new ACME account for %s", d->md->name); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "%s: creating new account", d->proto->protocol); if (!ad->md->contacts || apr_is_empty_array(md->contacts)) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, APR_EINVAL, d->p, "no contact information for md %s", md->name); rv = APR_EINVAL; goto out; } /* ACMEv1 allowed registration of accounts without accepted Terms-of-Service. * ACMEv2 requires it. Fail early in this case with a meaningful error message. */ if (!md->ca_agreement && MD_ACME_VERSION_MAJOR(ad->acme->version) > 1) { md_result_printf(result, APR_EINVAL, "the CA requires you to accept the terms-of-service " "as specified in <%s>. " "Please read the document that you find at that URL and, " "if you agree to the conditions, configure " "\"MDCertificateAgreement accepted\" " "in your Apache. Then (graceful) restart the server to activate.", ad->acme->ca_agreement); md_result_log(result, MD_LOG_ERR); rv = result->status; goto out; } rv = md_acme_acct_register(ad->acme, d->store, d->p, md->contacts, md->ca_agreement); if (APR_SUCCESS == rv) { md->ca_account = NULL; update_md = 1; update_acct = 1; } } out: /* Persist MD changes in STAGING, so we pick them up on next run */ if (APR_SUCCESS == rv&& update_md) { rv = md_save(d->store, d->p, MD_SG_STAGING, ad->md, 0); } /* Persist account changes in STAGING, so we pick them up on next run */ if (APR_SUCCESS == rv&& update_acct) { rv = save_acct_staged(ad->acme, d->store, md->name, d->p); } return rv; } /**************************************************************************************************/ /* poll cert */ static void get_up_link(md_proto_driver_t *d, apr_table_t *headers) { md_acme_driver_t *ad = d->baton; ad->next_up_link = md_link_find_relation(headers, d->p, "up"); if (ad->next_up_link) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, d->p, "server reports up link as %s", ad->next_up_link); } } static apr_status_t add_http_certs(apr_array_header_t *chain, apr_pool_t *p, const md_http_response_t *res) { apr_status_t rv = APR_SUCCESS; const char *ct; ct = apr_table_get(res->headers, "Content-Type"); if (ct && !strcmp("application/x-pkcs7-mime", ct)) { /* this looks like a root cert and we do not want those in our chain */ goto out; } /* Lets try to read one or more certificates */ if (APR_SUCCESS != (rv = md_cert_chain_read_http(chain, p, res)) && APR_STATUS_IS_ENOENT(rv)) { rv = APR_EAGAIN; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "cert not in response from %s", res->req->url); } out: return rv; } static apr_status_t on_add_cert(md_acme_t *acme, const md_http_response_t *res, void *baton) { md_proto_driver_t *d = baton; md_acme_driver_t *ad = d->baton; apr_status_t rv = APR_SUCCESS; int count; (void)acme; count = ad->certs->nelts; if (APR_SUCCESS == (rv = add_http_certs(ad->certs, d->p, res))) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "%d certs parsed", ad->certs->nelts - count); get_up_link(d, res->headers); } return rv; } static apr_status_t get_cert(void *baton, int attempt) { md_proto_driver_t *d = baton; md_acme_driver_t *ad = d->baton; (void)attempt; md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, d->p, "retrieving cert from %s", ad->order->certificate); return md_acme_GET(ad->acme, ad->order->certificate, NULL, NULL, on_add_cert, NULL, d); } apr_status_t md_acme_drive_cert_poll(md_proto_driver_t *d, int only_once) { md_acme_driver_t *ad = d->baton; apr_status_t rv; assert(ad->md); assert(ad->acme); assert(ad->order); assert(ad->order->certificate); if (only_once) { rv = get_cert(d, 0); } else { rv = md_util_try(get_cert, d, 1, ad->cert_poll_timeout, 0, 0, 1); } md_log_perror(MD_LOG_MARK, MD_LOG_INFO, 0, d->p, "poll for cert at %s", ad->order->certificate); return rv; } /**************************************************************************************************/ /* order finalization */ static apr_status_t on_init_csr_req(md_acme_req_t *req, void *baton) { md_proto_driver_t *d = baton; md_acme_driver_t *ad = d->baton; md_json_t *jpayload; jpayload = md_json_create(req->p); if (MD_ACME_VERSION_MAJOR(req->acme->version) == 1) { md_json_sets("new-cert", jpayload, MD_KEY_RESOURCE, NULL); } md_json_sets(ad->csr_der_64, jpayload, MD_KEY_CSR, NULL); return md_acme_req_body_init(req, jpayload); } static apr_status_t csr_req(md_acme_t *acme, const md_http_response_t *res, void *baton) { md_proto_driver_t *d = baton; md_acme_driver_t *ad = d->baton; const char *location; md_cert_t *cert; apr_status_t rv = APR_SUCCESS; (void)acme; location = apr_table_get(res->headers, "location"); if (!location) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, APR_EINVAL, d->p, "cert created without giving its location header"); return APR_EINVAL; } ad->order->certificate = apr_pstrdup(d->p, location); if (APR_SUCCESS != (rv = md_acme_order_save(d->store, d->p, MD_SG_STAGING, d->md->name, ad->order, 0))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, APR_EINVAL, d->p, "%s: saving cert url %s", d->md->name, location); return rv; } /* Check if it already was sent with this response */ ad->next_up_link = NULL; if (APR_SUCCESS == (rv = md_cert_read_http(&cert, d->p, res))) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "cert parsed"); apr_array_clear(ad->certs); APR_ARRAY_PUSH(ad->certs, md_cert_t*) = cert; get_up_link(d, res->headers); } else if (APR_STATUS_IS_ENOENT(rv)) { rv = APR_SUCCESS; if (location) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "cert not in response, need to poll %s", location); } } return rv; } /** * Pre-Req: all domains have been validated by the ACME server, e.g. all have AUTHZ * resources that have status 'valid' * - Setup private key, if not already there * - Generate a CSR with org, contact, etc * - Optionally enable must-staple OCSP extension * - Submit CSR, expect 201 with location * - POLL location for certificate * - store certificate * - retrieve cert chain information from cert * - GET cert chain * - store cert chain */ apr_status_t md_acme_drive_setup_certificate(md_proto_driver_t *d, md_result_t *result) { md_acme_driver_t *ad = d->baton; md_pkey_t *privkey; apr_status_t rv; md_result_activity_printf(result, "Finalizing order for %s", ad->md->name); rv = md_pkey_load(d->store, MD_SG_STAGING, d->md->name, &privkey, d->p); if (APR_STATUS_IS_ENOENT(rv)) { if (APR_SUCCESS == (rv = md_pkey_gen(&privkey, d->p, d->md->pkey_spec))) { rv = md_pkey_save(d->store, d->p, MD_SG_STAGING, d->md->name, privkey, 1); } md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "%s: generate privkey", d->md->name); } if (APR_SUCCESS != rv) goto leave; md_result_activity_printf(result, "Creating CSR for %s", d->md->name); rv = md_cert_req_create(&ad->csr_der_64, d->md->name, ad->domains, ad->md->must_staple, privkey, d->p); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "%s: create CSR", d->md->name); if (APR_SUCCESS != rv) goto leave; md_result_activity_printf(result, "Submitting CSR to CA for %s", d->md->name); switch (MD_ACME_VERSION_MAJOR(ad->acme->version)) { case 1: rv = md_acme_POST(ad->acme, ad->acme->api.v1.new_cert, on_init_csr_req, NULL, csr_req, NULL, d); break; default: assert(ad->order->finalize); rv = md_acme_POST(ad->acme, ad->order->finalize, on_init_csr_req, NULL, csr_req, NULL, d); break; } leave: md_acme_report_result(ad->acme, rv, result); return rv; } /**************************************************************************************************/ /* cert chain retrieval */ static apr_status_t on_add_chain(md_acme_t *acme, const md_http_response_t *res, void *baton) { md_proto_driver_t *d = baton; md_acme_driver_t *ad = d->baton; apr_status_t rv = APR_SUCCESS; const char *ct; (void)acme; ct = apr_table_get(res->headers, "Content-Type"); if (ct && !strcmp("application/x-pkcs7-mime", ct)) { /* root cert most likely, end it here */ return APR_SUCCESS; } if (APR_SUCCESS == (rv = add_http_certs(ad->certs, d->p, res))) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "chain cert parsed"); get_up_link(d, res->headers); } return rv; } static apr_status_t get_chain(void *baton, int attempt) { md_proto_driver_t *d = baton; md_acme_driver_t *ad = d->baton; const char *prev_link = NULL; apr_status_t rv = APR_SUCCESS; while (APR_SUCCESS == rv && ad->certs->nelts < 10) { int nelts = ad->certs->nelts; if (ad->next_up_link && (!prev_link || strcmp(prev_link, ad->next_up_link))) { prev_link = ad->next_up_link; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "next chain cert at %s", ad->next_up_link); rv = md_acme_GET(ad->acme, ad->next_up_link, NULL, NULL, on_add_chain, NULL, d); if (APR_SUCCESS == rv && nelts == ad->certs->nelts) { break; } } else if (ad->certs->nelts <= 1) { /* This cannot be the complete chain (no one signs new web certs with their root) * and we did not see a "Link: ...rel=up", so we do not know how to continue. */ md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, d->p, "no link header 'up' for new certificate, unable to retrieve chain"); rv = APR_EINVAL; break; } else { rv = APR_SUCCESS; break; } } md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, rv, d->p, "got chain with %d certs (%d. attempt)", ad->certs->nelts, attempt); return rv; } static apr_status_t ad_chain_retrieve(md_proto_driver_t *d) { md_acme_driver_t *ad = d->baton; apr_status_t rv; /* This may be called repeatedly and needs to progress. The relevant state is in * ad->certs the certificate chain, starting with the new cert for the md * ad->order->certificate the url where ACME offers us the new md certificate. This may * be a single one or even the complete chain * ad->next_up_link in case the last certificate retrieval did not end the chain, * the link header with relation "up" gives us the location * for the next cert in the chain */ if (md_array_is_empty(ad->certs)) { /* Need to start at the order */ ad->next_up_link = NULL; if (!ad->order) { rv = APR_EGENERAL; md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, d->p, "%s: asked to retrieve chain, but no order in context", d->md->name); goto out; } if (!ad->order->certificate) { rv = APR_EGENERAL; md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, d->p, "%s: asked to retrieve chain, but no certificate url part of order", d->md->name); goto out; } if (APR_SUCCESS != (rv = md_acme_drive_cert_poll(d, 0))) { goto out; } } rv = md_util_try(get_chain, d, 0, ad->cert_poll_timeout, 0, 0, 0); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "chain retrieved"); out: return rv; } /**************************************************************************************************/ /* ACME driver init */ static apr_status_t acme_driver_init(md_proto_driver_t *d, md_result_t *result) { md_acme_driver_t *ad; int dis_http, dis_https, dis_alpn_acme, dis_dns; const char *challenge; md_result_set(result, APR_SUCCESS, NULL); ad = apr_pcalloc(d->p, sizeof(*ad)); d->baton = ad; ad->driver = d; ad->authz_monitor_timeout = apr_time_from_sec(30); ad->cert_poll_timeout = apr_time_from_sec(30); ad->ca_challenges = apr_array_make(d->p, 3, sizeof(const char*)); ad->certs = apr_array_make(d->p, 5, sizeof(md_cert_t*)); /* We can only support challenges if the server is reachable from the outside * via port 80 and/or 443. These ports might be mapped for httpd to something * else, but a mapping needs to exist. */ challenge = apr_table_get(d->env, MD_KEY_CHALLENGE); if (challenge) { APR_ARRAY_PUSH(ad->ca_challenges, const char*) = apr_pstrdup(d->p, challenge); } else if (d->md->ca_challenges && d->md->ca_challenges->nelts > 0) { /* pre-configured set for this managed domain */ apr_array_cat(ad->ca_challenges, d->md->ca_challenges); } else { /* free to chose. Add all we support and see what we get offered */ APR_ARRAY_PUSH(ad->ca_challenges, const char*) = MD_AUTHZ_TYPE_HTTP01; APR_ARRAY_PUSH(ad->ca_challenges, const char*) = MD_AUTHZ_TYPE_TLSALPN01; APR_ARRAY_PUSH(ad->ca_challenges, const char*) = MD_AUTHZ_TYPE_DNS01; } if (!d->can_http && !d->can_https && md_array_str_index(ad->ca_challenges, MD_AUTHZ_TYPE_DNS01, 0, 0) < 0) { md_result_printf(result, APR_EGENERAL, "the server seems neither reachable via http (port 80) nor https (port 443). " "Please look at the MDPortMap configuration directive on how to correct this. " "The ACME protocol needs at least one of those so the CA can talk to the server " "and verify a domain ownership. Alternatively, you may configure support " "for the %s challenge directive.", MD_AUTHZ_TYPE_DNS01); goto leave; } dis_http = dis_https = dis_alpn_acme = dis_dns = 0; if (!d->can_http && md_array_str_index(ad->ca_challenges, MD_AUTHZ_TYPE_HTTP01, 0, 1) >= 0) { ad->ca_challenges = md_array_str_remove(d->p, ad->ca_challenges, MD_AUTHZ_TYPE_HTTP01, 0); dis_http = 1; } if (!d->can_https && md_array_str_index(ad->ca_challenges, MD_AUTHZ_TYPE_TLSALPN01, 0, 1) >= 0) { ad->ca_challenges = md_array_str_remove(d->p, ad->ca_challenges, MD_AUTHZ_TYPE_TLSALPN01, 0); dis_https = 1; } if (apr_is_empty_array(d->md->acme_tls_1_domains) && md_array_str_index(ad->ca_challenges, MD_AUTHZ_TYPE_TLSALPN01, 0, 1) >= 0) { ad->ca_challenges = md_array_str_remove(d->p, ad->ca_challenges, MD_AUTHZ_TYPE_TLSALPN01, 0); dis_alpn_acme = 1; } if (!apr_table_get(d->env, MD_KEY_CMD_DNS01) && md_array_str_index(ad->ca_challenges, MD_AUTHZ_TYPE_DNS01, 0, 1) >= 0) { ad->ca_challenges = md_array_str_remove(d->p, ad->ca_challenges, MD_AUTHZ_TYPE_DNS01, 0); dis_dns = 1; } if (apr_is_empty_array(ad->ca_challenges)) { md_result_printf(result, APR_EGENERAL, "None of the ACME challenge methods configured for this domain are suitable.%s%s%s%s", dis_http? " The http: challenge 'http-01' is disabled because the server seems not reachable on port 80." : "", dis_https? " The https: challenge 'tls-alpn-01' is disabled because the server seems not reachable on port 443." : "", dis_alpn_acme? "The https: challenge 'tls-alpn-01' is disabled because the Protocols configuration does not include the 'acme-tls/1' protocol." : "", dis_dns? "The DNS challenge 'dns-01' is disabled because the directive 'MDChallengeDns01' is not configured." : "" ); goto leave; } leave: md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, result->status, d->p, "%s: init driver", d->md->name); return result->status; } /**************************************************************************************************/ /* ACME staging */ static apr_status_t acme_renew(md_proto_driver_t *d, md_result_t *result) { md_acme_driver_t *ad = d->baton; int reset_staging = d->reset; apr_status_t rv = APR_SUCCESS; apr_time_t now; apr_array_header_t *staged_certs; char ts[APR_RFC822_DATE_LEN]; if (md_log_is_level(d->p, MD_LOG_DEBUG)) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, d->p, "%s: staging started, " "state=%d, can_http=%d, can_https=%d, challenges='%s'", d->md->name, d->md->state, d->can_http, d->can_https, apr_array_pstrcat(d->p, ad->ca_challenges, ' ')); } /* When not explicitly told to reset, we check the existing data. If * it is incomplete or old, we trigger the reset for a clean start. */ if (!reset_staging) { md_result_activity_setn(result, "Checking staging area"); rv = md_load(d->store, MD_SG_STAGING, d->md->name, &ad->md, d->p); if (APR_SUCCESS == rv) { /* So, we have a copy in staging, but is it a recent or an old one? */ if (md_is_newer(d->store, MD_SG_DOMAINS, MD_SG_STAGING, d->md->name, d->p)) { reset_staging = 1; } } else if (APR_STATUS_IS_ENOENT(rv)) { reset_staging = 1; rv = APR_SUCCESS; } } if (reset_staging) { md_result_activity_setn(result, "Resetting staging area"); /* reset the staging area for this domain */ rv = md_store_purge(d->store, d->p, MD_SG_STAGING, d->md->name); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, rv, d->p, "%s: reset staging area, will", d->md->name); if (APR_SUCCESS != rv && !APR_STATUS_IS_ENOENT(rv)) { md_result_printf(result, rv, "resetting staging area"); goto out; } rv = APR_SUCCESS; ad->md = NULL; ad->order = NULL; } md_result_activity_setn(result, "Assessing current status"); if (ad->md && ad->md->state == MD_S_MISSING_INFORMATION) { /* ToS agreement is missing. It makes no sense to drive this MD further */ md_result_printf(result, APR_INCOMPLETE, "The managed domain %s is missing required information", d->md->name); goto out; } if (ad->md) { const char *keyfile, *certfile; rv = md_reg_get_cred_files(&keyfile, &certfile, d->reg, MD_SG_STAGING, d->md, d->p); if (APR_SUCCESS == rv) { md_log_perror(MD_LOG_MARK, MD_LOG_INFO, 0, d->p, "%s: all data staged", d->md->name); goto ready; } } /* Need to renew */ md_result_activity_printf(result, "Contacting ACME server for %s at %s", d->md->name, d->md->ca_url); if (APR_SUCCESS != (rv = md_acme_create(&ad->acme, d->p, d->md->ca_url, d->proxy_url))) { md_result_printf(result, rv, "setup ACME communications"); md_result_log(result, MD_LOG_ERR); goto out; } if (APR_SUCCESS != (rv = md_acme_setup(ad->acme, result))) { md_result_log(result, MD_LOG_ERR); goto out; } if (!ad->md || strcmp(ad->md->ca_url, d->md->ca_url)) { md_result_activity_printf(result, "Resetting staging for %s", d->md->name); /* re-initialize staging */ md_log_perror(MD_LOG_MARK, MD_LOG_INFO, 0, d->p, "%s: setup staging", d->md->name); md_store_purge(d->store, d->p, MD_SG_STAGING, d->md->name); ad->md = md_copy(d->p, d->md); ad->order = NULL; rv = md_save(d->store, d->p, MD_SG_STAGING, ad->md, 0); if (APR_SUCCESS != rv) { md_result_printf(result, rv, "Saving MD information in staging area."); md_result_log(result, MD_LOG_ERR); goto out; } } if (!ad->domains) { ad->domains = md_dns_make_minimal(d->p, ad->md->domains); } if (md_array_is_empty(ad->certs) && APR_SUCCESS == md_pubcert_load(d->store, MD_SG_STAGING, d->md->name, &staged_certs, d->p)) { apr_array_cat(ad->certs, staged_certs); } if (md_array_is_empty(ad->certs)) { md_result_activity_printf(result, "Driving ACME protocol for renewal of %s", d->md->name); /* The process of setting up challenges and verifying domain * names differs between ACME versions. */ switch (MD_ACME_VERSION_MAJOR(ad->acme->version)) { case 1: rv = md_acmev1_drive_renew(ad, d, result); break; case 2: rv = md_acmev2_drive_renew(ad, d, result); break; default: md_result_printf(result, APR_EINVAL, "ACME server has unknown major version %d (%x)", MD_ACME_VERSION_MAJOR(ad->acme->version), ad->acme->version); rv = result->status; break; } if (APR_SUCCESS != rv) goto out; } if (md_array_is_empty(ad->certs) || ad->next_up_link) { md_result_activity_printf(result, "Retrieving certificate chain for %s", d->md->name); md_log_perror(MD_LOG_MARK, MD_LOG_INFO, 0, d->p, "%s: retrieving certificate chain", d->md->name); rv = ad_chain_retrieve(d); if (APR_SUCCESS != rv) { md_result_printf(result, rv, "Unable to retrive certificate chain."); goto out; } if (!md_array_is_empty(ad->certs)) { rv = md_pubcert_save(d->store, d->p, MD_SG_STAGING, d->md->name, ad->certs, 0); if (APR_SUCCESS != rv) { md_result_printf(result, rv, "Saving new certificate chain."); goto out; } } } /* As last step, cleanup any order we created so that challenge data * may be removed asap. */ md_acme_order_purge(d->store, d->p, MD_SG_STAGING, d->md->name, d->env); ready: md_result_activity_setn(result, NULL); /* we should have the complete cert chain now */ assert(!md_array_is_empty(ad->certs)); assert(ad->certs->nelts > 1); /* determine when it should be activated */ md_result_delay_set(result, md_cert_get_not_before(APR_ARRAY_IDX(ad->certs, 0, md_cert_t*))); /* If the existing MD is complete and un-expired, delay the activation * to 24 hours after new cert is valid (if there is enough time left), so * that cients with skewed clocks do not see a problem. */ now = apr_time_now(); if (d->md->state == MD_S_COMPLETE) { const md_pubcert_t *pub; apr_time_t valid_until, delay_activation; if (APR_SUCCESS == md_reg_get_pubcert(&pub, d->reg, d->md, d->p)) { valid_until = md_cert_get_not_after(APR_ARRAY_IDX(pub->certs, 0, const md_cert_t*)); if (valid_until > now) { delay_activation = apr_time_from_sec(MD_SECS_PER_DAY); if (delay_activation > (valid_until - now)) { delay_activation = (valid_until - now); } md_result_delay_set(result, result->ready_at + delay_activation); } } } /* There is a full set staged, to be loaded */ apr_rfc822_date(ts, result->ready_at); if (result->ready_at > now) { md_result_printf(result, APR_SUCCESS, "The certificate for the managed domain has been renewed successfully and can " "be used from %s on. A graceful server restart in %s is recommended.", ts, md_duration_print(d->p, result->ready_at - now)); } else { md_result_printf(result, APR_SUCCESS, "The certificate for the managed domain has been renewed successfully and can " "be used. A graceful server restart now is recommended."); } out: return rv; } static apr_status_t acme_driver_renew(md_proto_driver_t *d, md_result_t *result) { apr_status_t rv; rv = acme_renew(d, result); md_result_log(result, MD_LOG_DEBUG); return rv; } /**************************************************************************************************/ /* ACME preload */ static apr_status_t acme_preload(md_proto_driver_t *d, md_store_group_t load_group, const char *name, md_result_t *result) { apr_status_t rv; md_pkey_t *privkey, *acct_key; md_t *md; apr_array_header_t *pubcert; struct md_acme_acct_t *acct; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, d->p, "%s: preload start", name); /* Load data from MD_SG_STAGING and save it into "load_group". * This serves several purposes: * 1. It's a format check on the input data. * 2. We write back what we read, creating data with our own access permissions * 3. We ignore any other accumulated data in STAGING * 4. Once "load_group" is complete an ok, we can swap/archive groups with a rename * 5. Reading/Writing the data will apply/remove any group specific data encryption. */ if (APR_SUCCESS != (rv = md_load(d->store, MD_SG_STAGING, name, &md, d->p))) { md_result_set(result, rv, "loading staged md.json"); goto leave; } if (APR_SUCCESS != (rv = md_pkey_load(d->store, MD_SG_STAGING, name, &privkey, d->p))) { md_result_set(result, rv, "loading staged privkey.pem"); goto leave; } if (APR_SUCCESS != (rv = md_pubcert_load(d->store, MD_SG_STAGING, name, &pubcert, d->p))) { md_result_set(result, rv, "loading staged pubcert.pem"); goto leave; } /* See if staging holds a new or modified account data */ rv = md_acme_acct_load(&acct, &acct_key, d->store, MD_SG_STAGING, name, d->p); if (APR_STATUS_IS_ENOENT(rv)) { acct = NULL; acct_key = NULL; rv = APR_SUCCESS; } else if (APR_SUCCESS != rv) { md_result_set(result, rv, "loading staged account"); goto leave; } md_result_activity_setn(result, "purging order information"); md_acme_order_purge(d->store, d->p, MD_SG_STAGING, name, d->env); md_result_activity_setn(result, "purging store tmp space"); rv = md_store_purge(d->store, d->p, load_group, name); if (APR_SUCCESS != rv) { md_result_set(result, rv, NULL); goto leave; } if (acct) { md_acme_t *acme; const char *id = md->ca_account; /* We may have STAGED the same account several times. This happens when * several MDs are renewed at once and need a new account. They will all store * the new account in their own STAGING area. By checking for accounts with * the same url, we save them all into a single one. */ md_result_activity_setn(result, "saving staged account"); if (!id && acct->url) { rv = md_acme_acct_id_for_url(&id, d->store, MD_SG_ACCOUNTS, acct->url, d->p); if (APR_STATUS_IS_ENOENT(rv)) { id = NULL; } else if (APR_SUCCESS != rv) { md_result_set(result, rv, "error searching for existing account by url"); goto leave; } } if (APR_SUCCESS != (rv = md_acme_create(&acme, d->p, md->ca_url, d->proxy_url))) { md_result_set(result, rv, "error setting up acme"); goto leave; } if (APR_SUCCESS != (rv = md_acme_acct_save(d->store, d->p, acme, &id, acct, acct_key))) { md_result_set(result, rv, "error saving account"); goto leave; } md->ca_account = id; } md_result_activity_setn(result, "saving staged md/privkey/pubcert"); if (APR_SUCCESS != (rv = md_save(d->store, d->p, load_group, md, 1))) { md_result_set(result, rv, "writing md.json"); goto leave; } if (APR_SUCCESS != (rv = md_pubcert_save(d->store, d->p, load_group, name, pubcert, 1))) { md_result_set(result, rv, "writing pubcert.pem"); goto leave; } if (APR_SUCCESS != (rv = md_pkey_save(d->store, d->p, load_group, name, privkey, 1))) { md_result_set(result, rv, "writing privkey.pem"); goto leave; } md_result_set(result, APR_SUCCESS, "saved staged data successfully"); leave: md_result_log(result, MD_LOG_DEBUG); return rv; } static apr_status_t acme_driver_preload(md_proto_driver_t *d, md_store_group_t group, md_result_t *result) { apr_status_t rv; rv = acme_preload(d, group, d->md->name, result); md_result_log(result, MD_LOG_DEBUG); return rv; } static md_proto_t ACME_PROTO = { MD_PROTO_ACME, acme_driver_init, acme_driver_renew, acme_driver_preload }; apr_status_t md_acme_protos_add(apr_hash_t *protos, apr_pool_t *p) { (void)p; apr_hash_set(protos, MD_PROTO_ACME, sizeof(MD_PROTO_ACME)-1, &ACME_PROTO); return APR_SUCCESS; } �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_store.h������������������������������������������������������������������0000644�0000000�0000050�00000017224�13511051361�015273� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_store_h #define mod_md_md_store_h struct apr_array_header_t; struct md_cert_t; struct md_pkey_t; typedef struct md_store_t md_store_t; typedef void md_store_destroy_cb(md_store_t *store); const char *md_store_group_name(int group); typedef apr_status_t md_store_load_cb(md_store_t *store, md_store_group_t group, const char *name, const char *aspect, md_store_vtype_t vtype, void **pvalue, apr_pool_t *p); typedef apr_status_t md_store_save_cb(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name, const char *aspect, md_store_vtype_t vtype, void *value, int create); typedef apr_status_t md_store_remove_cb(md_store_t *store, md_store_group_t group, const char *name, const char *aspect, apr_pool_t *p, int force); typedef apr_status_t md_store_purge_cb(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name); typedef int md_store_inspect(void *baton, const char *name, const char *aspect, md_store_vtype_t vtype, void *value, apr_pool_t *ptemp); typedef apr_status_t md_store_iter_cb(md_store_inspect *inspect, void *baton, md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *pattern, const char *aspect, md_store_vtype_t vtype); typedef apr_status_t md_store_names_iter_cb(md_store_inspect *inspect, void *baton, md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *pattern); typedef apr_status_t md_store_move_cb(md_store_t *store, apr_pool_t *p, md_store_group_t from, md_store_group_t to, const char *name, int archive); typedef apr_status_t md_store_get_fname_cb(const char **pfname, md_store_t *store, md_store_group_t group, const char *name, const char *aspect, apr_pool_t *p); typedef int md_store_is_newer_cb(md_store_t *store, md_store_group_t group1, md_store_group_t group2, const char *name, const char *aspect, apr_pool_t *p); struct md_store_t { md_store_destroy_cb *destroy; md_store_save_cb *save; md_store_load_cb *load; md_store_remove_cb *remove; md_store_move_cb *move; md_store_iter_cb *iterate; md_store_names_iter_cb *iterate_names; md_store_purge_cb *purge; md_store_get_fname_cb *get_fname; md_store_is_newer_cb *is_newer; }; void md_store_destroy(md_store_t *store); apr_status_t md_store_load_json(md_store_t *store, md_store_group_t group, const char *name, const char *aspect, struct md_json_t **pdata, apr_pool_t *p); apr_status_t md_store_save_json(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name, const char *aspect, struct md_json_t *data, int create); apr_status_t md_store_load(md_store_t *store, md_store_group_t group, const char *name, const char *aspect, md_store_vtype_t vtype, void **pdata, apr_pool_t *p); apr_status_t md_store_save(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name, const char *aspect, md_store_vtype_t vtype, void *data, int create); apr_status_t md_store_remove(md_store_t *store, md_store_group_t group, const char *name, const char *aspect, apr_pool_t *p, int force); apr_status_t md_store_purge(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name); apr_status_t md_store_iter(md_store_inspect *inspect, void *baton, md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *pattern, const char *aspect, md_store_vtype_t vtype); apr_status_t md_store_move(md_store_t *store, apr_pool_t *p, md_store_group_t from, md_store_group_t to, const char *name, int archive); apr_status_t md_store_get_fname(const char **pfname, md_store_t *store, md_store_group_t group, const char *name, const char *aspect, apr_pool_t *p); int md_store_is_newer(md_store_t *store, md_store_group_t group1, md_store_group_t group2, const char *name, const char *aspect, apr_pool_t *p); apr_status_t md_store_iter_names(md_store_inspect *inspect, void *baton, md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *pattern); /**************************************************************************************************/ /* Storage handling utils */ apr_status_t md_load(md_store_t *store, md_store_group_t group, const char *name, md_t **pmd, apr_pool_t *p); apr_status_t md_save(struct md_store_t *store, apr_pool_t *p, md_store_group_t group, md_t *md, int create); apr_status_t md_remove(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name, int force); int md_is_newer(md_store_t *store, md_store_group_t group1, md_store_group_t group2, const char *name, apr_pool_t *p); typedef int md_store_md_inspect(void *baton, md_store_t *store, md_t *md, apr_pool_t *ptemp); apr_status_t md_store_md_iter(md_store_md_inspect *inspect, void *baton, md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *pattern); apr_status_t md_pkey_load(md_store_t *store, md_store_group_t group, const char *name, struct md_pkey_t **ppkey, apr_pool_t *p); apr_status_t md_pkey_save(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name, struct md_pkey_t *pkey, int create); apr_status_t md_pubcert_load(md_store_t *store, md_store_group_t group, const char *name, struct apr_array_header_t **ppubcert, apr_pool_t *p); apr_status_t md_pubcert_save(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name, struct apr_array_header_t *pubcert, int create); #endif /* mod_md_md_store_h */ ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_version.h����������������������������������������������������������������0000644�0000000�0000050�00000002641�13522005744�015627� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_version_h #define mod_md_md_version_h #undef PACKAGE_VERSION #undef PACKAGE_TARNAME #undef PACKAGE_STRING #undef PACKAGE_NAME #undef PACKAGE_BUGREPORT /** * @macro * Version number of the md module as c string */ #define MOD_MD_VERSION "2.0.10" /** * @macro * Numerical representation of the version number of the md module * release. This is a 24 bit number with 8 bits for major number, 8 bits * for minor and 8 bits for patch. Version 1.2.3 becomes 0x010203. */ #define MOD_MD_VERSION_NUM 0x02000a #define MD_ACME_DEF_URL "https://acme-v02.api.letsencrypt.org/directory" #endif /* mod_md_md_version_h */ �����������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_acme_authz.h�������������������������������������������������������������0000644�0000000�0000050�00000006310�13511051361�016251� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_acme_authz_h #define mod_md_md_acme_authz_h struct apr_array_header_t; struct apr_table_t; struct md_acme_t; struct md_acme_acct_t; struct md_json_t; struct md_store_t; struct md_pkey_spec_t; struct md_result_t; typedef struct md_acme_challenge_t md_acme_challenge_t; /**************************************************************************************************/ /* authorization request for a specific domain name */ #define MD_AUTHZ_TYPE_DNS01 "dns-01" #define MD_AUTHZ_TYPE_HTTP01 "http-01" #define MD_AUTHZ_TYPE_TLSALPN01 "tls-alpn-01" typedef enum { MD_ACME_AUTHZ_S_UNKNOWN, MD_ACME_AUTHZ_S_PENDING, MD_ACME_AUTHZ_S_VALID, MD_ACME_AUTHZ_S_INVALID, } md_acme_authz_state_t; typedef struct md_acme_authz_t md_acme_authz_t; struct md_acme_authz_t { const char *domain; const char *url; md_acme_authz_state_t state; apr_time_t expires; struct md_json_t *resource; }; #define MD_FN_HTTP01 "acme-http-01.txt" #define MD_FN_TLSSNI01_CERT "acme-tls-sni-01.cert.pem" #define MD_FN_TLSSNI01_PKEY "acme-tls-sni-01.key.pem" #define MD_FN_TLSALPN01_CERT "acme-tls-alpn-01.cert.pem" #define MD_FN_TLSALPN01_PKEY "acme-tls-alpn-01.key.pem" md_acme_authz_t *md_acme_authz_create(apr_pool_t *p); /* authz interaction with ACME server */ apr_status_t md_acme_authz_register(struct md_acme_authz_t **pauthz, struct md_acme_t *acme, const char *domain, apr_pool_t *p); apr_status_t md_acme_authz_retrieve(md_acme_t *acme, apr_pool_t *p, const char *url, md_acme_authz_t **pauthz); apr_status_t md_acme_authz_update(md_acme_authz_t *authz, struct md_acme_t *acme, apr_pool_t *p); apr_status_t md_acme_authz_respond(md_acme_authz_t *authz, struct md_acme_t *acme, struct md_store_t *store, apr_array_header_t *challenges, struct md_pkey_spec_t *key_spec, apr_array_header_t *acme_tls_1_domains, struct apr_table_t *env, apr_pool_t *p, const char **setup_token, struct md_result_t *result); apr_status_t md_acme_authz_teardown(struct md_store_t *store, const char *setup_token, struct apr_table_t *env, apr_pool_t *p); #endif /* md_acme_authz_h */ ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_store.c������������������������������������������������������������������0000644�0000000�0000050�00000022570�13511051361�015266� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <stddef.h> #include <stdio.h> #include <stdlib.h> #include <apr_lib.h> #include <apr_file_info.h> #include <apr_file_io.h> #include <apr_fnmatch.h> #include <apr_hash.h> #include <apr_strings.h> #include "md.h" #include "md_crypt.h" #include "md_log.h" #include "md_json.h" #include "md_store.h" #include "md_util.h" /**************************************************************************************************/ /* generic callback handling */ #define ASPECT_MD "md.json" #define ASPECT_CERT "cert.pem" #define ASPECT_PKEY "key.pem" #define ASPECT_CHAIN "chain.pem" #define GNAME_ACCOUNTS #define GNAME_CHALLENGES #define GNAME_DOMAINS #define GNAME_STAGING #define GNAME_ARCHIVE static const char *GROUP_NAME[] = { "none", "accounts", "challenges", "domains", "staging", "archive", "tmp", NULL }; const char *md_store_group_name(int group) { if ((size_t)group < sizeof(GROUP_NAME)/sizeof(GROUP_NAME[0])) { return GROUP_NAME[group]; } return "UNKNOWN"; } void md_store_destroy(md_store_t *store) { if (store->destroy) store->destroy(store); } apr_status_t md_store_load(md_store_t *store, md_store_group_t group, const char *name, const char *aspect, md_store_vtype_t vtype, void **pdata, apr_pool_t *p) { return store->load(store, group, name, aspect, vtype, pdata, p); } apr_status_t md_store_save(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name, const char *aspect, md_store_vtype_t vtype, void *data, int create) { return store->save(store, p, group, name, aspect, vtype, data, create); } apr_status_t md_store_remove(md_store_t *store, md_store_group_t group, const char *name, const char *aspect, apr_pool_t *p, int force) { return store->remove(store, group, name, aspect, p, force); } apr_status_t md_store_purge(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name) { return store->purge(store, p, group, name); } apr_status_t md_store_iter(md_store_inspect *inspect, void *baton, md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *pattern, const char *aspect, md_store_vtype_t vtype) { return store->iterate(inspect, baton, store, p, group, pattern, aspect, vtype); } apr_status_t md_store_load_json(md_store_t *store, md_store_group_t group, const char *name, const char *aspect, struct md_json_t **pdata, apr_pool_t *p) { return md_store_load(store, group, name, aspect, MD_SV_JSON, (void**)pdata, p); } apr_status_t md_store_save_json(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name, const char *aspect, struct md_json_t *data, int create) { return md_store_save(store, p, group, name, aspect, MD_SV_JSON, (void*)data, create); } apr_status_t md_store_move(md_store_t *store, apr_pool_t *p, md_store_group_t from, md_store_group_t to, const char *name, int archive) { return store->move(store, p, from, to, name, archive); } apr_status_t md_store_get_fname(const char **pfname, md_store_t *store, md_store_group_t group, const char *name, const char *aspect, apr_pool_t *p) { if (store->get_fname) { return store->get_fname(pfname, store, group, name, aspect, p); } return APR_ENOTIMPL; } int md_store_is_newer(md_store_t *store, md_store_group_t group1, md_store_group_t group2, const char *name, const char *aspect, apr_pool_t *p) { return store->is_newer(store, group1, group2, name, aspect, p); } apr_status_t md_store_iter_names(md_store_inspect *inspect, void *baton, md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *pattern) { return store->iterate_names(inspect, baton, store, p, group, pattern); } /**************************************************************************************************/ /* convenience */ typedef struct { md_store_t *store; md_store_group_t group; } md_group_ctx; apr_status_t md_load(md_store_t *store, md_store_group_t group, const char *name, md_t **pmd, apr_pool_t *p) { md_json_t *json; apr_status_t rv; rv = md_store_load_json(store, group, name, MD_FN_MD, pmd? &json : NULL, p); if (APR_SUCCESS == rv) { if (pmd) { *pmd = md_from_json(json, p); } return APR_SUCCESS; } return rv; } static apr_status_t p_save(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_group_ctx *ctx = baton; md_json_t *json; md_t *md; int create; md = va_arg(ap, md_t *); create = va_arg(ap, int); json = md_to_json(md, ptemp); assert(json); assert(md->name); return md_store_save_json(ctx->store, p, ctx->group, md->name, MD_FN_MD, json, create); } apr_status_t md_save(md_store_t *store, apr_pool_t *p, md_store_group_t group, md_t *md, int create) { md_group_ctx ctx; ctx.store = store; ctx.group = group; return md_util_pool_vdo(p_save, &ctx, p, md, create, NULL); } static apr_status_t p_remove(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_group_ctx *ctx = baton; const char *name; int force; (void)p; name = va_arg(ap, const char *); force = va_arg(ap, int); assert(name); return md_store_remove(ctx->store, ctx->group, name, MD_FN_MD, ptemp, force); } apr_status_t md_remove(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name, int force) { md_group_ctx ctx; ctx.store = store; ctx.group = group; return md_util_pool_vdo(p_remove, &ctx, p, name, force, NULL); } int md_is_newer(md_store_t *store, md_store_group_t group1, md_store_group_t group2, const char *name, apr_pool_t *p) { return md_store_is_newer(store, group1, group2, name, MD_FN_MD, p); } typedef struct { apr_pool_t *p; apr_array_header_t *mds; } md_load_ctx; apr_status_t md_pkey_load(md_store_t *store, md_store_group_t group, const char *name, md_pkey_t **ppkey, apr_pool_t *p) { return md_store_load(store, group, name, MD_FN_PRIVKEY, MD_SV_PKEY, (void**)ppkey, p); } apr_status_t md_pkey_save(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name, struct md_pkey_t *pkey, int create) { return md_store_save(store, p, group, name, MD_FN_PRIVKEY, MD_SV_PKEY, pkey, create); } apr_status_t md_pubcert_load(md_store_t *store, md_store_group_t group, const char *name, struct apr_array_header_t **ppubcert, apr_pool_t *p) { return md_store_load(store, group, name, MD_FN_PUBCERT, MD_SV_CHAIN, (void**)ppubcert, p); } apr_status_t md_pubcert_save(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name, struct apr_array_header_t *pubcert, int create) { return md_store_save(store, p, group, name, MD_FN_PUBCERT, MD_SV_CHAIN, pubcert, create); } typedef struct { md_store_t *store; md_store_group_t group; const char *pattern; const char *aspect; md_store_md_inspect *inspect; void *baton; } inspect_md_ctx; static int insp_md(void *baton, const char *name, const char *aspect, md_store_vtype_t vtype, void *value, apr_pool_t *ptemp) { inspect_md_ctx *ctx = baton; if (!strcmp(MD_FN_MD, aspect) && vtype == MD_SV_JSON) { md_t *md = md_from_json(value, ptemp); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, 0, ptemp, "inspecting md at: %s", name); return ctx->inspect(ctx->baton, ctx->store, md, ptemp); } return 1; } apr_status_t md_store_md_iter(md_store_md_inspect *inspect, void *baton, md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *pattern) { inspect_md_ctx ctx; ctx.store = store; ctx.group = group; ctx.inspect = inspect; ctx.baton = baton; return md_store_iter(insp_md, &ctx, store, p, group, pattern, MD_FN_MD, MD_SV_JSON); } ����������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_result.c�����������������������������������������������������������������0000644�0000000�0000050�00000016233�13511051361�015447� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <stddef.h> #include <stdio.h> #include <stdlib.h> #include <apr_lib.h> #include <apr_date.h> #include <apr_time.h> #include <apr_strings.h> #include "md.h" #include "md_json.h" #include "md_log.h" #include "md_result.h" static const char *dup_trim(apr_pool_t *p, const char *s) { char *d = apr_pstrdup(p, s); apr_collapse_spaces(d, d); return d; } md_result_t *md_result_make(apr_pool_t *p, apr_status_t status) { md_result_t *result; result = apr_pcalloc(p, sizeof(*result)); result->p = p; result->status = status; return result; } md_result_t *md_result_md_make(apr_pool_t *p, const struct md_t *md) { md_result_t *result = md_result_make(p, APR_SUCCESS); result->md = md; return result; } void md_result_reset(md_result_t *result) { apr_pool_t *p = result->p; memset(result, 0, sizeof(*result)); result->p = p; } static void on_change(md_result_t *result) { if (result->on_change) result->on_change(result, result->on_change_data); } void md_result_activity_set(md_result_t *result, const char *activity) { md_result_activity_setn(result, activity? apr_pstrdup(result->p, activity) : NULL); } void md_result_activity_setn(md_result_t *result, const char *activity) { result->activity = activity; result->problem = result->detail = NULL; on_change(result); } void md_result_activity_printf(md_result_t *result, const char *fmt, ...) { va_list ap; va_start(ap, fmt); md_result_activity_setn(result, apr_pvsprintf(result->p, fmt, ap)); va_end(ap); } void md_result_set(md_result_t *result, apr_status_t status, const char *detail) { result->status = status; result->problem = NULL; result->detail = detail? apr_pstrdup(result->p, detail) : NULL; on_change(result); } void md_result_problem_set(md_result_t *result, apr_status_t status, const char *problem, const char *detail) { result->status = status; result->problem = dup_trim(result->p, problem); result->detail = apr_pstrdup(result->p, detail); on_change(result); } void md_result_problem_printf(md_result_t *result, apr_status_t status, const char *problem, const char *fmt, ...) { va_list ap; result->status = status; result->problem = dup_trim(result->p, problem); va_start(ap, fmt); result->detail = apr_pvsprintf(result->p, fmt, ap); va_end(ap); on_change(result); } void md_result_printf(md_result_t *result, apr_status_t status, const char *fmt, ...) { va_list ap; result->status = status; va_start(ap, fmt); result->detail = apr_pvsprintf(result->p, fmt, ap); va_end(ap); on_change(result); } void md_result_delay_set(md_result_t *result, apr_time_t ready_at) { result->ready_at = ready_at; on_change(result); } md_result_t*md_result_from_json(const struct md_json_t *json, apr_pool_t *p) { md_result_t *result; const char *s; result = md_result_make(p, APR_SUCCESS); result->status = (int)md_json_getl(json, MD_KEY_STATUS, NULL); result->problem = md_json_dups(p, json, MD_KEY_PROBLEM, NULL); result->detail = md_json_dups(p, json, MD_KEY_DETAIL, NULL); result->activity = md_json_dups(p, json, MD_KEY_ACTIVITY, NULL); s = md_json_dups(p, json, MD_KEY_VALID_FROM, NULL); if (s && *s) result->ready_at = apr_date_parse_rfc(s); return result; } struct md_json_t *md_result_to_json(const md_result_t *result, apr_pool_t *p) { md_json_t *json; char ts[APR_RFC822_DATE_LEN]; json = md_json_create(p); md_json_setl(result->status, json, MD_KEY_STATUS, NULL); if (result->status > 0) { char buffer[HUGE_STRING_LEN]; apr_strerror(result->status, buffer, sizeof(buffer)); md_json_sets(buffer, json, "status-description", NULL); } if (result->problem) md_json_sets(result->problem, json, MD_KEY_PROBLEM, NULL); if (result->detail) md_json_sets(result->detail, json, MD_KEY_DETAIL, NULL); if (result->activity) md_json_sets(result->activity, json, MD_KEY_ACTIVITY, NULL); if (result->ready_at > 0) { apr_rfc822_date(ts, result->ready_at); md_json_sets(ts, json, MD_KEY_VALID_FROM, NULL); } return json; } static int str_cmp(const char *s1, const char *s2) { if (s1 == s2) return 0; if (!s1) return -1; if (!s2) return 1; return strcmp(s1, s2); } int md_result_cmp(const md_result_t *r1, const md_result_t *r2) { int n; if (r1 == r2) return 0; if (!r1) return -1; if (!r2) return 1; if ((n = r1->status - r2->status)) return n; if ((n = str_cmp(r1->problem, r2->problem))) return n; if ((n = str_cmp(r1->detail, r2->detail))) return n; if ((n = str_cmp(r1->activity, r2->activity))) return n; return (int)(r1->ready_at - r2->ready_at); } void md_result_assign(md_result_t *dest, const md_result_t *src) { dest->status = src->status; dest->problem = src->problem; dest->detail = src->detail; dest->activity = src->activity; dest->ready_at = src->ready_at; } void md_result_dup(md_result_t *dest, const md_result_t *src) { dest->status = src->status; dest->problem = src->problem? dup_trim(dest->p, src->problem) : NULL; dest->detail = src->detail? apr_pstrdup(dest->p, src->detail) : NULL; dest->activity = src->activity? apr_pstrdup(dest->p, src->activity) : NULL; dest->ready_at = src->ready_at; on_change(dest); } void md_result_log(md_result_t *result, int level) { if (md_log_is_level(result->p, (md_log_level_t)level)) { const char *sep = ""; const char *msg = ""; if (result->md) { msg = apr_psprintf(result->p, "md[%s]", result->md->name); sep = " "; } if (result->activity) { msg = apr_psprintf(result->p, "%s%swhile[%s]", msg, sep, result->activity); sep = " "; } if (result->problem) { msg = apr_psprintf(result->p, "%s%sproblem[%s]", msg, sep, result->problem); sep = " "; } if (result->detail) { msg = apr_psprintf(result->p, "%s%sdetail[%s]", msg, sep, result->detail); sep = " "; } md_log_perror(MD_LOG_MARK, (md_log_level_t)level, result->status, result->p, "%s", msg); } } void md_result_on_change(md_result_t *result, md_result_change_cb *cb, void *data) { result->on_change = cb; result->on_change_data = data; } ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_acme_acct.h��������������������������������������������������������������0000644�0000000�0000050�00000012344�13511051361�016034� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_acme_acct_h #define mod_md_md_acme_acct_h struct md_acme_req; struct md_json_t; struct md_pkey_t; /** * An ACME account at an ACME server. */ typedef struct md_acme_acct_t md_acme_acct_t; typedef enum { MD_ACME_ACCT_ST_UNKNOWN, MD_ACME_ACCT_ST_VALID, MD_ACME_ACCT_ST_DEACTIVATED, MD_ACME_ACCT_ST_REVOKED, } md_acme_acct_st; struct md_acme_acct_t { const char *id; /* short, unique id for the account */ const char *url; /* url of the account, once registered */ const char *ca_url; /* url of the ACME protocol endpoint */ md_acme_acct_st status; /* status of this account */ apr_array_header_t *contacts; /* list of contact uris, e.g. mailto:xxx */ const char *tos_required; /* terms of service asked for by CA */ const char *agreement; /* terms of service agreed to by user */ const char *orders; /* URL where certificate orders are found (ACMEv2) */ struct md_json_t *registration; /* data from server registration */ }; #define MD_FN_ACCOUNT "account.json" #define MD_FN_ACCT_KEY "account.pem" /* ACME account private keys are always RSA and have that many bits. Since accounts * are expected to live long, better err on the safe side. */ #define MD_ACME_ACCT_PKEY_BITS 3072 #define MD_ACME_ACCT_STAGED "staged" /** * Convert an ACME account form/to JSON. */ struct md_json_t *md_acme_acct_to_json(md_acme_acct_t *acct, apr_pool_t *p); apr_status_t md_acme_acct_from_json(md_acme_acct_t **pacct, struct md_json_t *json, apr_pool_t *p); /** * Update the account from the ACME server. * - Will update acme->acct structure from server on success * - Will return error status when request failed or account is not known. */ apr_status_t md_acme_acct_update(md_acme_t *acme); /** * Update the account and persist changes in the store, if given (and not NULL). */ apr_status_t md_acme_acct_validate(md_acme_t *acme, struct md_store_t *store, apr_pool_t *p); /** * Agree to the given Terms-of-Service url for the current account. */ apr_status_t md_acme_agree(md_acme_t *acme, apr_pool_t *p, const char *tos); /** * Confirm with the server that the current account agrees to the Terms-of-Service * given in the agreement url. * If the known agreement is equal to this, nothing is done. * If it differs, the account is re-validated in the hope that the server * announces the Tos URL it wants. If this is equal to the agreement specified, * the server is notified of this. If the server requires a ToS that the account * thinks it has already given, it is resend. * * If an agreement is required, different from the current one, APR_INCOMPLETE is * returned and the agreement url is returned in the parameter. */ apr_status_t md_acme_check_agreement(md_acme_t *acme, apr_pool_t *p, const char *agreement, const char **prequired); /** * Get the ToS agreement for current account. */ const char *md_acme_get_agreement(md_acme_t *acme); /** * Find an existing account in the local store. On APR_SUCCESS, the acme * instance will have a current, validated account to use. */ apr_status_t md_acme_find_acct(md_acme_t *acme, struct md_store_t *store); /** * Find the account id for a given account url. */ apr_status_t md_acme_acct_id_for_url(const char **pid, struct md_store_t *store, md_store_group_t group, const char *url, apr_pool_t *p); /** * Create a new account at the ACME server. The * new account is the one used by the acme instance afterwards, on success. */ apr_status_t md_acme_acct_register(md_acme_t *acme, struct md_store_t *store, apr_pool_t *p, apr_array_header_t *contacts, const char *agreement); apr_status_t md_acme_acct_save(struct md_store_t *store, apr_pool_t *p, md_acme_t *acme, const char **pid, struct md_acme_acct_t *acct, struct md_pkey_t *acct_key); /** * Deactivate the current account at the ACME server. */ apr_status_t md_acme_acct_deactivate(md_acme_t *acme, apr_pool_t *p); apr_status_t md_acme_acct_load(struct md_acme_acct_t **pacct, struct md_pkey_t **ppkey, struct md_store_t *store, md_store_group_t group, const char *name, apr_pool_t *p); #endif /* md_acme_acct_h */ ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/mod_md_os.h�����������������������������������������������������������������0000644�0000000�0000050�00000002644�13234043402�015416� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_os_h #define mod_md_md_os_h /** * Try chown'ing the file/directory. Give id -1 to not change uid/gid. * Will return APR_ENOTIMPL on platforms not supporting this operation. */ apr_status_t md_try_chown(const char *fname, unsigned int uid, int gid, apr_pool_t *p); /** * Make a file or directory read/write(/searchable) by httpd workers. */ apr_status_t md_make_worker_accessible(const char *fname, apr_pool_t *p); /** * Trigger a graceful restart of the server. Depending on the architecture, may * return APR_ENOTIMPL. */ apr_status_t md_server_graceful(apr_pool_t *p, server_rec *s); #endif /* mod_md_md_os_h */ ��������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_acmev1_drive.c�����������������������������������������������������������0000644�0000000�0000050�00000015633�13511051361�016501� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <stdlib.h> #include <apr_lib.h> #include <apr_strings.h> #include <apr_buckets.h> #include <apr_hash.h> #include <apr_uri.h> #include "md.h" #include "md_crypt.h" #include "md_json.h" #include "md_jws.h" #include "md_http.h" #include "md_log.h" #include "md_result.h" #include "md_reg.h" #include "md_store.h" #include "md_util.h" #include "md_acme.h" #include "md_acme_acct.h" #include "md_acme_authz.h" #include "md_acme_order.h" #include "md_acme_drive.h" #include "md_acmev1_drive.h" /**************************************************************************************************/ /* authz/challenge setup */ /** * Pre-Req: we have an account for the ACME server that has accepted the current license agreement * For each domain in MD: * - check if there already is a valid AUTHZ resource * - if ot, create an AUTHZ resource with challenge data */ static apr_status_t ad_setup_order(md_proto_driver_t *d, md_result_t *result) { md_acme_driver_t *ad = d->baton; apr_status_t rv; md_t *md = ad->md; const char *url; md_acme_authz_t *authz; apr_array_header_t *domains_covered; int i; int changed = 0; assert(ad->md); assert(ad->acme); md_result_activity_printf(result, "Setup order resource for %s", ad->md->name); /* For each domain in MD: AUTHZ setup * if an AUTHZ resource is known, check if it is still valid * if known AUTHZ resource is not valid, remove, goto 4.1.1 * if no AUTHZ available, create a new one for the domain, store it */ rv = md_acme_order_load(d->store, MD_SG_STAGING, md->name, &ad->order, d->p); if (!ad->order || APR_STATUS_IS_ENOENT(rv)) { ad->order = md_acme_order_create(d->p); rv = APR_SUCCESS; } else if (APR_SUCCESS != rv) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "%s: loading authz data", md->name); md_acme_order_purge(d->store, d->p, MD_SG_STAGING, md->name, d->env); return APR_EAGAIN; } /* Retrieve all known authz from ACME server and check status etc. */ domains_covered = apr_array_make(d->p, 5, sizeof(const char *)); for (i = 0; i < ad->order->authz_urls->nelts;) { url = APR_ARRAY_IDX(ad->order->authz_urls, i, const char*); rv = md_acme_authz_retrieve(ad->acme, d->p, url, &authz); if (APR_SUCCESS == rv) { if (md_array_str_index(ad->domains, authz->domain, 0, 0) < 0) { md_acme_order_remove(ad->order, url); changed = 1; continue; } APR_ARRAY_PUSH(domains_covered, const char *) = authz->domain; ++i; } else if (APR_STATUS_IS_ENOENT(rv)) { md_acme_order_remove(ad->order, url); changed = 1; continue; } else { goto leave; } } /* Do we have authz urls for all domains? If not, register a new one */ for (i = 0; i < ad->domains->nelts && APR_SUCCESS == rv; ++i) { const char *domain = APR_ARRAY_IDX(ad->domains, i, const char *); if (md_array_str_index(domains_covered, domain, 0, 0) < 0) { md_result_activity_printf(result, "Creating authz resource for %s", domain); rv = md_acme_authz_register(&authz, ad->acme, domain, d->p); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "%s: created authz for %s (last problem: %s)", md->name, domain, ad->acme->last->problem); if (APR_SUCCESS != rv) goto leave; rv = md_acme_order_add(ad->order, authz->url); changed = 1; } } if (changed) { rv = md_acme_order_save(d->store, d->p, MD_SG_STAGING, md->name, ad->order, 0); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, rv, d->p, "%s: saved", md->name); } leave: md_acme_report_result(ad->acme, rv, result); return rv; } apr_status_t md_acmev1_drive_renew(md_acme_driver_t *ad, md_proto_driver_t *d, md_result_t *result) { apr_status_t rv = APR_SUCCESS; const char *required; md_log_perror(MD_LOG_MARK, MD_LOG_INFO, 0, d->p, "%s: (ACMEv1) need certificate", d->md->name); /* Chose (or create) and ACME account to use */ if (APR_SUCCESS != (rv = md_acme_drive_set_acct(d, result))) goto leave; /* Check that the account agreed to the terms-of-service, otherwise * requests for new authorizations are denied. ToS may change during the * lifetime of an account */ md_log_perror(MD_LOG_MARK, MD_LOG_INFO, 0, d->p, "%s: (ACMEv1) check Tems-of-Service agreement", d->md->name); rv = md_acme_check_agreement(ad->acme, d->p, ad->md->ca_agreement, &required); if (APR_STATUS_IS_INCOMPLETE(rv) && required) { /* The CA wants the user to agree to Terms-of-Services. Until the user * has reconfigured and restarted the server, this MD cannot be * driven further */ ad->md->state = MD_S_MISSING_INFORMATION; md_save(d->store, d->p, MD_SG_STAGING, ad->md, 0); md_result_printf(result, rv, "the CA requires you to accept the terms-of-service as specified in <%s>. " "Please read the document that you find at that URL and, if you agree to " "the conditions, configure \"MDCertificateAgreement accepted\" " "in your Apache. Then (graceful) restart the server to activate.", required); goto leave; } else if (APR_SUCCESS != rv) goto leave; if (!md_array_is_empty(ad->certs)) goto leave; rv = ad_setup_order(d, result); if (APR_SUCCESS != rv) goto leave; rv = md_acme_order_start_challenges(ad->order, ad->acme, ad->ca_challenges, d->store, d->md, d->env, result, d->p); if (APR_SUCCESS != rv) goto leave; rv = md_acme_order_monitor_authzs(ad->order, ad->acme, d->md, ad->authz_monitor_timeout, result, d->p); if (APR_SUCCESS != rv) goto leave; rv = md_acme_drive_setup_certificate(d, result); leave: md_result_log(result, MD_LOG_DEBUG); return result->status; } �����������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_status.h�����������������������������������������������������������������0000644�0000000�0000050�00000007204�13511051361�015457� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef md_status_h #define md_status_h struct md_json_t; struct md_reg_t; struct md_result_t; /** * Get a JSON summary of the MD and its status (certificates, jobs, etc.). */ apr_status_t md_status_get_md_json(struct md_json_t **pjson, const md_t *md, struct md_reg_t *reg, apr_pool_t *p); /** * Get a JSON summary of all MDs and their status. */ apr_status_t md_status_get_json(struct md_json_t **pjson, apr_array_header_t *mds, struct md_reg_t *reg, apr_pool_t *p); /** * Take stock of all MDs given for a short overview. The JSON returned * will carry intergers for MD_KEY_COMPLETE, MD_KEY_RENEWING, * MD_KEY_ERRORED, MD_KEY_READY and MD_KEY_TOTAL. */ void md_status_take_stock(struct md_json_t **pjson, apr_array_header_t *mds, struct md_reg_t *reg, apr_pool_t *p); typedef struct md_job_t md_job_t; struct md_job_t { const char *name; /* Name of the MD this job is about */ apr_pool_t *p; apr_time_t next_run; /* Time this job wants to be processed next */ apr_time_t last_run; /* Time this job ran last (or 0) */ struct md_result_t *last_result; /* Result from last run */ int finished; /* true iff the job finished successfully */ apr_time_t valid_from; /* at which time the finished job results become valid, 0 if immediate */ int error_runs; /* Number of errored runs of an unfinished job */ md_json_t *log; /* array of log objects with minimum fields MD_KEY_WHEN (timestamp) and MD_KEY_TYPE (string) */ }; /** * Create a new job instance for the given MD name. Job load/save will work * on the MD_SG_STAGING for the name. */ md_job_t *md_job_make(apr_pool_t *p, const char *name); /** * Update the job from storage in <group>/job->name. */ apr_status_t md_job_load(md_job_t *job, struct md_reg_t *reg, md_store_group_t group, apr_pool_t *p); /** * Update storage from job in <group>/job->name. */ apr_status_t md_job_save(md_job_t *job, struct md_reg_t *reg, md_store_group_t group, struct md_result_t *result, apr_pool_t *p); /** * Append to the job's log. Timestamp is automatically added. * @param type type of log entry * @param status status of entry (maybe NULL) * @param detail description of what happened */ void md_job_log_append(md_job_t *job, const char *type, const char *status, const char *detail); /** * Retrieve the lastest log entry of a certain type. */ md_json_t *md_job_log_get_latest(md_job_t *job, const char *type); /** * Get the time the latest log entry of the given type happened, or 0 if * none is found. */ apr_time_t md_job_log_get_time_of_latest(md_job_t *job, const char *type); #endif /* md_status_h */ ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_acmev2_drive.c�����������������������������������������������������������0000644�0000000�0000050�00000013071�13511051361�016474� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <stdlib.h> #include <apr_lib.h> #include <apr_strings.h> #include <apr_buckets.h> #include <apr_hash.h> #include <apr_uri.h> #include "md.h" #include "md_crypt.h" #include "md_json.h" #include "md_jws.h" #include "md_http.h" #include "md_log.h" #include "md_result.h" #include "md_reg.h" #include "md_store.h" #include "md_util.h" #include "md_acme.h" #include "md_acme_acct.h" #include "md_acme_authz.h" #include "md_acme_order.h" #include "md_acme_drive.h" #include "md_acmev2_drive.h" /**************************************************************************************************/ /* order setup */ /** * Either we have an order stored in the STAGING area, or we need to create a * new one at the ACME server. */ static apr_status_t ad_setup_order(md_proto_driver_t *d, md_result_t *result) { md_acme_driver_t *ad = d->baton; apr_status_t rv; md_t *md = ad->md; assert(ad->md); assert(ad->acme); /* For each domain in MD: AUTHZ setup * if an AUTHZ resource is known, check if it is still valid * if known AUTHZ resource is not valid, remove, goto 4.1.1 * if no AUTHZ available, create a new one for the domain, store it */ rv = md_acme_order_load(d->store, MD_SG_STAGING, md->name, &ad->order, d->p); if (APR_SUCCESS == rv) { md_result_activity_setn(result, "Loaded order from staging"); goto leave; } else if (!APR_STATUS_IS_ENOENT(rv)) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, "%s: loading order", md->name); md_acme_order_purge(d->store, d->p, MD_SG_STAGING, md->name, d->env); } md_result_activity_setn(result, "Creating new order"); rv = md_acme_order_register(&ad->order, ad->acme, d->p, d->md->name, ad->domains); if (APR_SUCCESS !=rv) goto leave; rv = md_acme_order_save(d->store, d->p, MD_SG_STAGING, d->md->name, ad->order, 0); if (APR_SUCCESS != rv) { md_result_set(result, rv, "saving order in staging"); } leave: md_acme_report_result(ad->acme, rv, result); return rv; } /**************************************************************************************************/ /* ACMEv2 renewal */ apr_status_t md_acmev2_drive_renew(md_acme_driver_t *ad, md_proto_driver_t *d, md_result_t *result) { apr_status_t rv = APR_SUCCESS; md_log_perror(MD_LOG_MARK, MD_LOG_INFO, 0, d->p, "%s: (ACMEv2) need certificate", d->md->name); /* Chose (or create) and ACME account to use */ rv = md_acme_drive_set_acct(d, result); if (APR_SUCCESS != rv) goto leave; if (!md_array_is_empty(ad->certs)) goto leave; /* ACMEv2 strategy: * 1. load an md_acme_order_t from STAGING, if present * 2. if no order found, register a new order at ACME server * 3. update the order from the server * 4. Switch order state: * * PENDING: process authz challenges * * READY: finalize the order * * PROCESSING: wait and re-assses later * * VALID: retrieve certificate * * COMPLETE: all done, return success * * INVALID and otherwise: fail renewal, delete local order */ if (APR_SUCCESS != (rv = ad_setup_order(d, result))) { goto leave; } rv = md_acme_order_update(ad->order, ad->acme, result, d->p); if (APR_STATUS_IS_ENOENT(rv)) { /* order is no longer known at the ACME server */ ad->order = NULL; md_acme_order_purge(d->store, d->p, MD_SG_STAGING, d->md->name, d->env); } else if (APR_SUCCESS != rv) { goto leave; } if (!ad->order) { rv = ad_setup_order(d, result); if (APR_SUCCESS != rv) goto leave; } rv = md_acme_order_start_challenges(ad->order, ad->acme, ad->ca_challenges, d->store, d->md, d->env, result, d->p); if (APR_SUCCESS != rv) goto leave; rv = md_acme_order_monitor_authzs(ad->order, ad->acme, d->md, ad->authz_monitor_timeout, result, d->p); if (APR_SUCCESS != rv) goto leave; rv = md_acme_order_await_ready(ad->order, ad->acme, d->md, ad->authz_monitor_timeout, result, d->p); if (APR_SUCCESS != rv) goto leave; rv = md_acme_drive_setup_certificate(d, result); if (APR_SUCCESS != rv) goto leave; md_log_perror(MD_LOG_MARK, MD_LOG_INFO, 0, d->p, "%s: finalized order", d->md->name); rv = md_acme_order_await_valid(ad->order, ad->acme, d->md, ad->authz_monitor_timeout, result, d->p); if (APR_SUCCESS != rv) goto leave; if (ad->order->certificate) goto leave; md_result_set(result, APR_EINVAL, "Order valid, but certifiate url is missing."); leave: md_result_log(result, MD_LOG_DEBUG); return result->status; } �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_store_fs.h���������������������������������������������������������������0000644�0000000�0000050�00000005227�13511051361�015763� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_store_fs_h #define mod_md_md_store_fs_h struct md_store_t; /** * Default file permissions set by the store, user only read/write(/exec), * if so supported by the apr. */ #define MD_FPROT_F_UONLY (APR_FPROT_UREAD|APR_FPROT_UWRITE) #define MD_FPROT_D_UONLY (MD_FPROT_F_UONLY|APR_FPROT_UEXECUTE) /** * User has all permission, group can read, other none */ #define MD_FPROT_F_UALL_GREAD (MD_FPROT_F_UONLY|APR_FPROT_GREAD) #define MD_FPROT_D_UALL_GREAD (MD_FPROT_D_UONLY|APR_FPROT_GREAD|APR_FPROT_GEXECUTE) /** * User has all permission, group and others can read */ #define MD_FPROT_F_UALL_WREAD (MD_FPROT_F_UALL_GREAD|APR_FPROT_WREAD) #define MD_FPROT_D_UALL_WREAD (MD_FPROT_D_UALL_GREAD|APR_FPROT_WREAD|APR_FPROT_WEXECUTE) apr_status_t md_store_fs_init(struct md_store_t **pstore, apr_pool_t *p, const char *path); apr_status_t md_store_fs_default_perms_set(struct md_store_t *store, apr_fileperms_t file_perms, apr_fileperms_t dir_perms); apr_status_t md_store_fs_group_perms_set(struct md_store_t *store, md_store_group_t group, apr_fileperms_t file_perms, apr_fileperms_t dir_perms); typedef enum { MD_S_FS_EV_CREATED, MD_S_FS_EV_MOVED, } md_store_fs_ev_t; typedef apr_status_t md_store_fs_cb(void *baton, struct md_store_t *store, md_store_fs_ev_t ev, unsigned int group, const char *fname, apr_filetype_e ftype, apr_pool_t *p); apr_status_t md_store_fs_set_event_cb(struct md_store_t *store, md_store_fs_cb *cb, void *baton); #endif /* mod_md_md_store_fs_h */ �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/mod_md_config.h�������������������������������������������������������������0000644�0000000�0000050�00000012443�13511051361�016241� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_config_h #define mod_md_md_config_h struct apr_hash_t; struct md_store_t; struct md_reg_t; struct md_pkey_spec_t; typedef enum { MD_CONFIG_CA_URL, MD_CONFIG_CA_PROTO, MD_CONFIG_BASE_DIR, MD_CONFIG_CA_AGREEMENT, MD_CONFIG_DRIVE_MODE, MD_CONFIG_LOCAL_80, MD_CONFIG_LOCAL_443, MD_CONFIG_RENEW_WINDOW, MD_CONFIG_WARN_WINDOW, MD_CONFIG_TRANSITIVE, MD_CONFIG_PROXY, MD_CONFIG_REQUIRE_HTTPS, MD_CONFIG_MUST_STAPLE, MD_CONFIG_NOTIFY_CMD, MD_CONFIG_MESSGE_CMD, } md_config_var_t; typedef struct md_mod_conf_t md_mod_conf_t; struct md_mod_conf_t { apr_array_header_t *mds; /* all md_t* defined in the config, shared */ const char *base_dir; /* base dir for store */ const char *proxy_url; /* proxy url to use (or NULL) */ struct md_reg_t *reg; /* md registry instance, singleton, shared */ int local_80; /* On which port http:80 arrives */ int local_443; /* On which port https:443 arrives */ int can_http; /* Does someone listen to the local port 80 equivalent? */ int can_https; /* Does someone listen to the local port 443 equivalent? */ int manage_base_server; /* If base server outside vhost may be managed */ int hsts_max_age; /* max-age of HSTS (rfc6797) header */ const char *hsts_header; /* computed HTST header to use or NULL */ apr_array_header_t *unused_names; /* post config, names of all MDs not assigned to a vhost */ apr_array_header_t *watched_names; /* post config, names of all MDs that we need to watch */ struct apr_hash_t *init_errors; /* init errors reported with MD name as key */ const char *notify_cmd; /* notification command to execute on signup/renew */ const char *message_cmd; /* message command to execute on signup/renew/warnings */ struct apr_table_t *env; /* environment for operation */ int dry_run; /* != 0 iff config dry run */ int server_status_enabled; /* if module should add to server-status handler */ int certificate_status_enabled; /* if module should expose /.httpd/certificate-status */ }; typedef struct md_srv_conf_t { const char *name; const server_rec *s; /* server this config belongs to */ md_mod_conf_t *mc; /* global config settings */ int transitive; /* != 0 iff VirtualHost names/aliases are auto-added */ md_require_t require_https; /* If MDs require https: access */ int renew_mode; /* mode of obtaining credentials */ int must_staple; /* certificates should set the OCSP Must Staple extension */ struct md_pkey_spec_t *pkey_spec; /* specification for generating private keys */ const md_timeslice_t *renew_window; /* time before expiration that starts renewal */ const md_timeslice_t *warn_window; /* time before expiration that warning are sent out */ const char *ca_url; /* url of CA certificate service */ const char *ca_proto; /* protocol used vs CA (e.g. ACME) */ const char *ca_agreement; /* accepted agreement uri between CA and user */ struct apr_array_header_t *ca_challenges; /* challenge types configured */ md_t *current; /* md currently defined in <MDomainSet xxx> section */ md_t *assigned; /* post_config: MD that applies to this server or NULL */ } md_srv_conf_t; void *md_config_create_svr(apr_pool_t *pool, server_rec *s); void *md_config_merge_svr(apr_pool_t *pool, void *basev, void *addv); extern const command_rec md_cmds[]; apr_status_t md_config_post_config(server_rec *s, apr_pool_t *p); /* Get the effective md configuration for the connection */ md_srv_conf_t *md_config_cget(conn_rec *c); /* Get the effective md configuration for the server */ md_srv_conf_t *md_config_get(server_rec *s); /* Get the effective md configuration for the server, but make it * unique to this server_rec, so that any changes only affect this server */ md_srv_conf_t *md_config_get_unique(server_rec *s, apr_pool_t *p); const char *md_config_gets(const md_srv_conf_t *config, md_config_var_t var); int md_config_geti(const md_srv_conf_t *config, md_config_var_t var); void md_config_get_timespan(const md_timeslice_t **pspan, const md_srv_conf_t *sc, md_config_var_t var); #endif /* md_config_h */ �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_log.h��������������������������������������������������������������������0000644�0000000�0000050�00000003577�13253300673�014734� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_log_h #define mod_md_md_log_h typedef enum { MD_LOG_EMERG, MD_LOG_ALERT, MD_LOG_CRIT, MD_LOG_ERR, MD_LOG_WARNING, MD_LOG_NOTICE, MD_LOG_INFO, MD_LOG_DEBUG, MD_LOG_TRACE1, MD_LOG_TRACE2, MD_LOG_TRACE3, MD_LOG_TRACE4, MD_LOG_TRACE5, MD_LOG_TRACE6, MD_LOG_TRACE7, MD_LOG_TRACE8, } md_log_level_t; #define MD_LOG_MARK __FILE__,__LINE__ const char *md_log_level_name(md_log_level_t level); int md_log_is_level(apr_pool_t *p, md_log_level_t level); void md_log_perror(const char *file, int line, md_log_level_t level, apr_status_t rv, apr_pool_t *p, const char *fmt, ...) __attribute__((format(printf,6,7))); typedef int md_log_level_cb(void *baton, apr_pool_t *p, md_log_level_t level); typedef void md_log_print_cb(const char *file, int line, md_log_level_t level, apr_status_t rv, void *baton, apr_pool_t *p, const char *fmt, va_list ap); void md_log_set(md_log_level_cb *level_cb, md_log_print_cb *print_cb, void *baton); #endif /* md_log_h */ ���������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/mod_md.h��������������������������������������������������������������������0000644�0000000�0000050�00000003146�13511051361�014714� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_mod_md_h #define mod_md_mod_md_h #include <openssl/evp.h> #include <openssl/x509v3.h> struct server_rec; APR_DECLARE_OPTIONAL_FN(int, md_is_managed, (struct server_rec *)); /** * Get the certificate/key for the managed domain (md_is_managed != 0). * * @return APR_EAGAIN if the real certificate is not available yet */ APR_DECLARE_OPTIONAL_FN(apr_status_t, md_get_certificate, (struct server_rec *, apr_pool_t *, const char **pkeyfile, const char **pcertfile)); APR_DECLARE_OPTIONAL_FN(int, md_is_challenge, (struct conn_rec *, const char *, X509 **pcert, EVP_PKEY **pkey)); #endif /* mod_md_mod_md_h */ ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_result.h�����������������������������������������������������������������0000644�0000000�0000050�00000005327�13511051361�015456� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_result_h #define mod_md_md_result_h struct md_json_t; struct md_t; typedef struct md_result_t md_result_t; typedef void md_result_change_cb(md_result_t *result, void *data); struct md_result_t { apr_pool_t *p; const struct md_t *md; apr_status_t status; const char *problem; const char *detail; const char *activity; apr_time_t ready_at; md_result_change_cb *on_change; void *on_change_data; }; md_result_t *md_result_make(apr_pool_t *p, apr_status_t status); md_result_t *md_result_md_make(apr_pool_t *p, const struct md_t *md); void md_result_reset(md_result_t *result); void md_result_activity_set(md_result_t *result, const char *activity); void md_result_activity_setn(md_result_t *result, const char *activity); void md_result_activity_printf(md_result_t *result, const char *fmt, ...); void md_result_set(md_result_t *result, apr_status_t status, const char *detail); void md_result_problem_set(md_result_t *result, apr_status_t status, const char *problem, const char *detail); void md_result_problem_printf(md_result_t *result, apr_status_t status, const char *problem, const char *fmt, ...); #define MD_RESULT_LOG_ID(logno) "urn:org:apache:httpd:log:"logno void md_result_printf(md_result_t *result, apr_status_t status, const char *fmt, ...); void md_result_delay_set(md_result_t *result, apr_time_t ready_at); md_result_t*md_result_from_json(const struct md_json_t *json, apr_pool_t *p); struct md_json_t *md_result_to_json(const md_result_t *result, apr_pool_t *p); int md_result_cmp(const md_result_t *r1, const md_result_t *r2); void md_result_assign(md_result_t *dest, const md_result_t *src); void md_result_dup(md_result_t *dest, const md_result_t *src); void md_result_log(md_result_t *result, int level); void md_result_on_change(md_result_t *result, md_result_change_cb *cb, void *data); #endif /* mod_md_md_result_h */ ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_acme_order.c�������������������������������������������������������������0000644�0000000�0000050�00000043632�13511051361�016234� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <stdio.h> #include <apr_lib.h> #include <apr_buckets.h> #include <apr_file_info.h> #include <apr_file_io.h> #include <apr_fnmatch.h> #include <apr_hash.h> #include <apr_strings.h> #include <apr_tables.h> #include "md.h" #include "md_crypt.h" #include "md_json.h" #include "md_http.h" #include "md_log.h" #include "md_jws.h" #include "md_result.h" #include "md_store.h" #include "md_util.h" #include "md_acme.h" #include "md_acme_authz.h" #include "md_acme_order.h" md_acme_order_t *md_acme_order_create(apr_pool_t *p) { md_acme_order_t *order; order = apr_pcalloc(p, sizeof(*order)); order->p = p; order->authz_urls = apr_array_make(p, 5, sizeof(const char *)); order->challenge_setups = apr_array_make(p, 5, sizeof(const char *)); return order; } /**************************************************************************************************/ /* order conversion */ #define MD_KEY_CHALLENGE_SETUPS "challenge-setups" static md_acme_order_st order_st_from_str(const char *s) { if (s) { if (!strcmp("valid", s)) { return MD_ACME_ORDER_ST_VALID; } else if (!strcmp("invalid", s)) { return MD_ACME_ORDER_ST_INVALID; } else if (!strcmp("ready", s)) { return MD_ACME_ORDER_ST_READY; } else if (!strcmp("pending", s)) { return MD_ACME_ORDER_ST_PENDING; } else if (!strcmp("processing", s)) { return MD_ACME_ORDER_ST_PROCESSING; } } return MD_ACME_ORDER_ST_PENDING; } static const char *order_st_to_str(md_acme_order_st status) { switch (status) { case MD_ACME_ORDER_ST_PENDING: return "pending"; case MD_ACME_ORDER_ST_READY: return "ready"; case MD_ACME_ORDER_ST_PROCESSING: return "processing"; case MD_ACME_ORDER_ST_VALID: return "valid"; case MD_ACME_ORDER_ST_INVALID: return "invalid"; default: return "invalid"; } } md_json_t *md_acme_order_to_json(md_acme_order_t *order, apr_pool_t *p) { md_json_t *json = md_json_create(p); if (order->url) { md_json_sets(order->url, json, MD_KEY_URL, NULL); } md_json_sets(order_st_to_str(order->status), json, MD_KEY_STATUS, NULL); md_json_setsa(order->authz_urls, json, MD_KEY_AUTHORIZATIONS, NULL); md_json_setsa(order->challenge_setups, json, MD_KEY_CHALLENGE_SETUPS, NULL); if (order->finalize) { md_json_sets(order->finalize, json, MD_KEY_FINALIZE, NULL); } if (order->certificate) { md_json_sets(order->certificate, json, MD_KEY_CERTIFICATE, NULL); } return json; } static void order_update_from_json(md_acme_order_t *order, md_json_t *json, apr_pool_t *p) { if (!order->url && md_json_has_key(json, MD_KEY_URL, NULL)) { order->url = md_json_dups(p, json, MD_KEY_URL, NULL); } order->status = order_st_from_str(md_json_gets(json, MD_KEY_STATUS, NULL)); if (md_json_has_key(json, MD_KEY_AUTHORIZATIONS, NULL)) { md_json_dupsa(order->authz_urls, p, json, MD_KEY_AUTHORIZATIONS, NULL); } if (md_json_has_key(json, MD_KEY_CHALLENGE_SETUPS, NULL)) { md_json_dupsa(order->challenge_setups, p, json, MD_KEY_CHALLENGE_SETUPS, NULL); } if (md_json_has_key(json, MD_KEY_FINALIZE, NULL)) { order->finalize = md_json_dups(p, json, MD_KEY_FINALIZE, NULL); } if (md_json_has_key(json, MD_KEY_CERTIFICATE, NULL)) { order->certificate = md_json_dups(p, json, MD_KEY_CERTIFICATE, NULL); } } md_acme_order_t *md_acme_order_from_json(md_json_t *json, apr_pool_t *p) { md_acme_order_t *order = md_acme_order_create(p); order_update_from_json(order, json, p); return order; } apr_status_t md_acme_order_add(md_acme_order_t *order, const char *authz_url) { assert(authz_url); if (md_array_str_index(order->authz_urls, authz_url, 0, 1) < 0) { APR_ARRAY_PUSH(order->authz_urls, const char*) = apr_pstrdup(order->p, authz_url); } return APR_SUCCESS; } apr_status_t md_acme_order_remove(md_acme_order_t *order, const char *authz_url) { int i; assert(authz_url); i = md_array_str_index(order->authz_urls, authz_url, 0, 1); if (i >= 0) { order->authz_urls = md_array_str_remove(order->p, order->authz_urls, authz_url, 1); return APR_SUCCESS; } return APR_ENOENT; } static apr_status_t add_setup_token(md_acme_order_t *order, const char *token) { if (md_array_str_index(order->challenge_setups, token, 0, 1) < 0) { APR_ARRAY_PUSH(order->challenge_setups, const char*) = apr_pstrdup(order->p, token); } return APR_SUCCESS; } /**************************************************************************************************/ /* persistence */ apr_status_t md_acme_order_load(struct md_store_t *store, md_store_group_t group, const char *md_name, md_acme_order_t **pauthz_set, apr_pool_t *p) { apr_status_t rv; md_json_t *json; md_acme_order_t *authz_set; rv = md_store_load_json(store, group, md_name, MD_FN_ORDER, &json, p); if (APR_SUCCESS == rv) { authz_set = md_acme_order_from_json(json, p); } *pauthz_set = (APR_SUCCESS == rv)? authz_set : NULL; return rv; } static apr_status_t p_save(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_store_t *store = baton; md_json_t *json; md_store_group_t group; md_acme_order_t *set; const char *md_name; int create; (void)p; group = (md_store_group_t)va_arg(ap, int); md_name = va_arg(ap, const char *); set = va_arg(ap, md_acme_order_t *); create = va_arg(ap, int); json = md_acme_order_to_json(set, ptemp); assert(json); return md_store_save_json(store, ptemp, group, md_name, MD_FN_ORDER, json, create); } apr_status_t md_acme_order_save(struct md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *md_name, md_acme_order_t *authz_set, int create) { return md_util_pool_vdo(p_save, store, p, group, md_name, authz_set, create, NULL); } static apr_status_t p_purge(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_store_t *store = baton; md_acme_order_t *order; md_store_group_t group; const char *md_name, *setup_token; apr_table_t *env; int i; group = (md_store_group_t)va_arg(ap, int); md_name = va_arg(ap, const char *); env = va_arg(ap, apr_table_t *); if (APR_SUCCESS == md_acme_order_load(store, group, md_name, &order, p)) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, p, "order loaded for %s", md_name); for (i = 0; i < order->challenge_setups->nelts; ++i) { setup_token = APR_ARRAY_IDX(order->challenge_setups, i, const char*); if (setup_token) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, p, "order teardown setup %s", setup_token); md_acme_authz_teardown(store, setup_token, env, p); } } } return md_store_remove(store, group, md_name, MD_FN_ORDER, ptemp, 1); } apr_status_t md_acme_order_purge(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *md_name, apr_table_t *env) { return md_util_pool_vdo(p_purge, store, p, group, md_name, env, NULL); } /**************************************************************************************************/ /* ACMEv2 order requests */ typedef struct { apr_pool_t *p; md_acme_order_t *order; md_acme_t *acme; const char *name; apr_array_header_t *domains; md_result_t *result; } order_ctx_t; #define ORDER_CTX_INIT(ctx, p, o, a, n, d, r) \ (ctx)->p = (p); (ctx)->order = (o); (ctx)->acme = (a); \ (ctx)->name = (n); (ctx)->domains = d; (ctx)->result = r static apr_status_t identifier_to_json(void *value, md_json_t *json, apr_pool_t *p, void *baton) { md_json_t *jid; (void)baton; jid = md_json_create(p); md_json_sets("dns", jid, "type", NULL); md_json_sets(value, jid, "value", NULL); return md_json_setj(jid, json, NULL); } static apr_status_t on_init_order_register(md_acme_req_t *req, void *baton) { order_ctx_t *ctx = baton; md_json_t *jpayload; jpayload = md_json_create(req->p); md_json_seta(ctx->domains, identifier_to_json, NULL, jpayload, "identifiers", NULL); return md_acme_req_body_init(req, jpayload); } static apr_status_t on_order_upd(md_acme_t *acme, apr_pool_t *p, const apr_table_t *hdrs, md_json_t *body, void *baton) { order_ctx_t *ctx = baton; const char *location = apr_table_get(hdrs, "location"); apr_status_t rv = APR_SUCCESS; (void)acme; (void)p; if (!ctx->order) { if (location) { ctx->order = md_acme_order_create(ctx->p); ctx->order->url = apr_pstrdup(ctx->p, location); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, rv, ctx->p, "new order at %s", location); } else { rv = APR_EINVAL; md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, rv, ctx->p, "new order, no location header"); goto out; } } order_update_from_json(ctx->order, body, ctx->p); out: return rv; } apr_status_t md_acme_order_register(md_acme_order_t **porder, md_acme_t *acme, apr_pool_t *p, const char *name, apr_array_header_t *domains) { order_ctx_t ctx; apr_status_t rv; assert(MD_ACME_VERSION_MAJOR(acme->version) > 1); ORDER_CTX_INIT(&ctx, p, NULL, acme, name, domains, NULL); rv = md_acme_POST(acme, acme->api.v2.new_order, on_init_order_register, on_order_upd, NULL, NULL, &ctx); *porder = (APR_SUCCESS == rv)? ctx.order : NULL; return rv; } apr_status_t md_acme_order_update(md_acme_order_t *order, md_acme_t *acme, md_result_t *result, apr_pool_t *p) { order_ctx_t ctx; apr_status_t rv; assert(MD_ACME_VERSION_MAJOR(acme->version) > 1); ORDER_CTX_INIT(&ctx, p, order, acme, NULL, NULL, result); rv = md_acme_GET(acme, order->url, NULL, on_order_upd, NULL, NULL, &ctx); if (APR_SUCCESS != rv && APR_SUCCESS != acme->last->status) { md_result_dup(result, acme->last); } return rv; } static apr_status_t await_ready(void *baton, int attempt) { order_ctx_t *ctx = baton; apr_status_t rv = APR_SUCCESS; (void)attempt; if (APR_SUCCESS != (rv = md_acme_order_update(ctx->order, ctx->acme, ctx->result, ctx->p))) goto out; switch (ctx->order->status) { case MD_ACME_ORDER_ST_READY: case MD_ACME_ORDER_ST_PROCESSING: case MD_ACME_ORDER_ST_VALID: break; case MD_ACME_ORDER_ST_PENDING: rv = APR_EAGAIN; break; default: rv = APR_EINVAL; break; } out: return rv; } apr_status_t md_acme_order_await_ready(md_acme_order_t *order, md_acme_t *acme, const md_t *md, apr_interval_time_t timeout, md_result_t *result, apr_pool_t *p) { order_ctx_t ctx; apr_status_t rv; assert(MD_ACME_VERSION_MAJOR(acme->version) > 1); ORDER_CTX_INIT(&ctx, p, order, acme, md->name, NULL, result); md_result_activity_setn(result, "Waiting for order to become ready"); rv = md_util_try(await_ready, &ctx, 0, timeout, 0, 0, 1); md_result_log(result, MD_LOG_DEBUG); return rv; } static apr_status_t await_valid(void *baton, int attempt) { order_ctx_t *ctx = baton; apr_status_t rv = APR_SUCCESS; (void)attempt; if (APR_SUCCESS != (rv = md_acme_order_update(ctx->order, ctx->acme, ctx->result, ctx->p))) goto out; switch (ctx->order->status) { case MD_ACME_ORDER_ST_VALID: break; case MD_ACME_ORDER_ST_PROCESSING: rv = APR_EAGAIN; break; default: rv = APR_EINVAL; break; } out: return rv; } apr_status_t md_acme_order_await_valid(md_acme_order_t *order, md_acme_t *acme, const md_t *md, apr_interval_time_t timeout, md_result_t *result, apr_pool_t *p) { order_ctx_t ctx; apr_status_t rv; assert(MD_ACME_VERSION_MAJOR(acme->version) > 1); ORDER_CTX_INIT(&ctx, p, order, acme, md->name, NULL, result); md_result_activity_setn(result, "Waiting for finalized order to become valid"); rv = md_util_try(await_valid, &ctx, 0, timeout, 0, 0, 1); md_result_log(result, MD_LOG_DEBUG); return rv; } /**************************************************************************************************/ /* processing */ apr_status_t md_acme_order_start_challenges(md_acme_order_t *order, md_acme_t *acme, apr_array_header_t *challenge_types, md_store_t *store, const md_t *md, apr_table_t *env, md_result_t *result, apr_pool_t *p) { apr_status_t rv = APR_SUCCESS; md_acme_authz_t *authz; const char *url, *setup_token; int i; md_result_activity_printf(result, "Starting challenges for domains"); for (i = 0; i < order->authz_urls->nelts; ++i) { url = APR_ARRAY_IDX(order->authz_urls, i, const char*); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "%s: check AUTHZ at %s", md->name, url); if (APR_SUCCESS != (rv = md_acme_authz_retrieve(acme, p, url, &authz))) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, p, "%s: check authz for %s", md->name, authz->domain); goto out; } switch (authz->state) { case MD_ACME_AUTHZ_S_VALID: break; case MD_ACME_AUTHZ_S_PENDING: rv = md_acme_authz_respond(authz, acme, store, challenge_types, md->pkey_spec, md->acme_tls_1_domains, env, p, &setup_token, result); if (APR_SUCCESS != rv) { goto out; } add_setup_token(order, setup_token); md_acme_order_save(store, p, MD_SG_STAGING, md->name, order, 0); break; default: rv = APR_EINVAL; md_result_printf(result, rv, "unexpected AUTHZ state %d for domain %s", authz->state, authz->domain); md_result_log(result, MD_LOG_ERR); goto out; } } out: return rv; } static apr_status_t check_challenges(void *baton, int attempt) { order_ctx_t *ctx = baton; const char *url; md_acme_authz_t *authz; apr_status_t rv = APR_SUCCESS; int i; for (i = 0; i < ctx->order->authz_urls->nelts; ++i) { url = APR_ARRAY_IDX(ctx->order->authz_urls, i, const char*); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, ctx->p, "%s: check AUTHZ at %s (attempt %d)", ctx->name, url, attempt); rv = md_acme_authz_retrieve(ctx->acme, ctx->p, url, &authz); if (APR_SUCCESS == rv) { switch (authz->state) { case MD_ACME_AUTHZ_S_VALID: md_result_printf(ctx->result, rv, "domain authorization for %s is valid", authz->domain); break; case MD_ACME_AUTHZ_S_PENDING: rv = APR_EAGAIN; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, ctx->p, "%s: status pending at %s", authz->domain, authz->url); goto leave; default: rv = APR_EINVAL; md_result_printf(ctx->result, rv, "domain authorization for %s failed with state %d", authz->domain, authz->state); md_result_log(ctx->result, MD_LOG_ERR); goto leave; } } else { md_result_printf(ctx->result, rv, "authorization retrieval failed for domain %s", authz->domain); } } leave: return rv; } apr_status_t md_acme_order_monitor_authzs(md_acme_order_t *order, md_acme_t *acme, const md_t *md, apr_interval_time_t timeout, md_result_t *result, apr_pool_t *p) { order_ctx_t ctx; apr_status_t rv; ORDER_CTX_INIT(&ctx, p, order, acme, md->name, NULL, result); md_result_activity_printf(result, "Monitoring challenge status for %s", md->name); rv = md_util_try(check_challenges, &ctx, 0, timeout, 0, 0, 1); md_log_perror(MD_LOG_MARK, MD_LOG_INFO, rv, p, "%s: checked authorizations", md->name); return rv; } ������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_store_fs.c���������������������������������������������������������������0000644�0000000�0000050�00000101033�13511071372�015752� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <stddef.h> #include <stdio.h> #include <stdlib.h> #include <apr_lib.h> #include <apr_file_info.h> #include <apr_file_io.h> #include <apr_fnmatch.h> #include <apr_hash.h> #include <apr_strings.h> #include "md.h" #include "md_crypt.h" #include "md_json.h" #include "md_log.h" #include "md_store.h" #include "md_store_fs.h" #include "md_util.h" #include "md_version.h" /**************************************************************************************************/ /* file system based implementation of md_store_t */ #define MD_STORE_VERSION 3 typedef struct { apr_fileperms_t dir; apr_fileperms_t file; } perms_t; typedef struct md_store_fs_t md_store_fs_t; struct md_store_fs_t { md_store_t s; const char *base; /* base directory of store */ perms_t def_perms; perms_t group_perms[MD_SG_COUNT]; md_store_fs_cb *event_cb; void *event_baton; const unsigned char *key; apr_size_t key_len; int plain_pkey[MD_SG_COUNT]; int port_80; int port_443; }; #define FS_STORE(store) (md_store_fs_t*)(((char*)store)-offsetof(md_store_fs_t, s)) #define FS_STORE_JSON "md_store.json" #define FS_STORE_KLEN 48 static apr_status_t fs_load(md_store_t *store, md_store_group_t group, const char *name, const char *aspect, md_store_vtype_t vtype, void **pvalue, apr_pool_t *p); static apr_status_t fs_save(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name, const char *aspect, md_store_vtype_t vtype, void *value, int create); static apr_status_t fs_remove(md_store_t *store, md_store_group_t group, const char *name, const char *aspect, apr_pool_t *p, int force); static apr_status_t fs_purge(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name); static apr_status_t fs_move(md_store_t *store, apr_pool_t *p, md_store_group_t from, md_store_group_t to, const char *name, int archive); static apr_status_t fs_iterate(md_store_inspect *inspect, void *baton, md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *pattern, const char *aspect, md_store_vtype_t vtype); static apr_status_t fs_iterate_names(md_store_inspect *inspect, void *baton, md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *pattern); static apr_status_t fs_get_fname(const char **pfname, md_store_t *store, md_store_group_t group, const char *name, const char *aspect, apr_pool_t *p); static int fs_is_newer(md_store_t *store, md_store_group_t group1, md_store_group_t group2, const char *name, const char *aspect, apr_pool_t *p); static apr_status_t init_store_file(md_store_fs_t *s_fs, const char *fname, apr_pool_t *p, apr_pool_t *ptemp) { md_json_t *json = md_json_create(p); const char *key64; unsigned char *key; apr_status_t rv; md_json_setn(MD_STORE_VERSION, json, MD_KEY_STORE, MD_KEY_VERSION, NULL); s_fs->key_len = FS_STORE_KLEN; s_fs->key = key = apr_pcalloc(p, FS_STORE_KLEN); if (APR_SUCCESS != (rv = md_rand_bytes(key, s_fs->key_len, p))) { return rv; } key64 = md_util_base64url_encode((char *)key, s_fs->key_len, ptemp); md_json_sets(key64, json, MD_KEY_KEY, NULL); rv = md_json_fcreatex(json, ptemp, MD_JSON_FMT_INDENT, fname, MD_FPROT_F_UONLY); memset((char*)key64, 0, strlen(key64)); return rv; } static apr_status_t rename_pkey(void *baton, apr_pool_t *p, apr_pool_t *ptemp, const char *dir, const char *name, apr_filetype_e ftype) { const char *from, *to; apr_status_t rv = APR_SUCCESS; (void)baton; (void)ftype; if ( MD_OK(md_util_path_merge(&from, ptemp, dir, name, NULL)) && MD_OK(md_util_path_merge(&to, ptemp, dir, MD_FN_PRIVKEY, NULL))) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, p, "renaming %s/%s to %s", dir, name, MD_FN_PRIVKEY); return apr_file_rename(from, to, ptemp); } return rv; } static apr_status_t mk_pubcert(void *baton, apr_pool_t *p, apr_pool_t *ptemp, const char *dir, const char *name, apr_filetype_e ftype) { md_cert_t *cert; apr_array_header_t *chain, *pubcert; const char *fname, *fpubcert; apr_status_t rv = APR_SUCCESS; (void)baton; (void)ftype; (void)p; if ( MD_OK(md_util_path_merge(&fpubcert, ptemp, dir, MD_FN_PUBCERT, NULL)) && APR_STATUS_IS_ENOENT(rv = md_chain_fload(&pubcert, ptemp, fpubcert)) && MD_OK(md_util_path_merge(&fname, ptemp, dir, name, NULL)) && MD_OK(md_cert_fload(&cert, ptemp, fname)) && MD_OK(md_util_path_merge(&fname, ptemp, dir, "chain.pem", NULL))) { rv = md_chain_fload(&chain, ptemp, fname); if (APR_STATUS_IS_ENOENT(rv)) { chain = apr_array_make(ptemp, 1, sizeof(md_cert_t*)); rv = APR_SUCCESS; } if (APR_SUCCESS == rv) { pubcert = apr_array_make(ptemp, chain->nelts + 1, sizeof(md_cert_t*)); APR_ARRAY_PUSH(pubcert, md_cert_t *) = cert; apr_array_cat(pubcert, chain); rv = md_chain_fsave(pubcert, ptemp, fpubcert, MD_FPROT_F_UONLY); } } return rv; } static apr_status_t upgrade_from_1_0(md_store_fs_t *s_fs, apr_pool_t *p, apr_pool_t *ptemp) { md_store_group_t g; apr_status_t rv = APR_SUCCESS; (void)ptemp; /* Migrate pkey.pem -> privkey.pem */ for (g = MD_SG_NONE; g < MD_SG_COUNT && APR_SUCCESS == rv; ++g) { rv = md_util_files_do(rename_pkey, s_fs, p, s_fs->base, md_store_group_name(g), "*", "pkey.pem", NULL); } /* Generate fullcert.pem from cert.pem and chain.pem where missing */ rv = md_util_files_do(mk_pubcert, s_fs, p, s_fs->base, md_store_group_name(MD_SG_DOMAINS), "*", MD_FN_CERT, NULL); rv = md_util_files_do(mk_pubcert, s_fs, p, s_fs->base, md_store_group_name(MD_SG_ARCHIVE), "*", MD_FN_CERT, NULL); return rv; } static apr_status_t read_store_file(md_store_fs_t *s_fs, const char *fname, apr_pool_t *p, apr_pool_t *ptemp) { md_json_t *json; const char *key64, *key; apr_status_t rv; double store_version; if (MD_OK(md_json_readf(&json, p, fname))) { store_version = md_json_getn(json, MD_KEY_STORE, MD_KEY_VERSION, NULL); if (store_version <= 0.0) { /* ok, an old one, compatible to 1.0 */ store_version = 1.0; } if (store_version > MD_STORE_VERSION) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "version too new: %f", store_version); return APR_EINVAL; } key64 = md_json_dups(p, json, MD_KEY_KEY, NULL); if (!key64) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "missing key: %s", MD_KEY_KEY); return APR_EINVAL; } s_fs->key_len = md_util_base64url_decode(&key, key64, p); s_fs->key = (const unsigned char*)key; if (s_fs->key_len != FS_STORE_KLEN) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "key length unexpected: %" APR_SIZE_T_FMT, s_fs->key_len); return APR_EINVAL; } /* Need to migrate format? */ if (store_version < MD_STORE_VERSION) { if (store_version <= 1.0) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, p, "migrating store v1 -> v2"); rv = upgrade_from_1_0(s_fs, p, ptemp); } if (store_version <= 2.0) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, p, "migrating store v2 -> v3"); md_json_del(json, MD_KEY_VERSION, NULL); } if (APR_SUCCESS == rv) { md_json_setn(MD_STORE_VERSION, json, MD_KEY_STORE, MD_KEY_VERSION, NULL); rv = md_json_freplace(json, ptemp, MD_JSON_FMT_INDENT, fname, MD_FPROT_F_UONLY); } md_log_perror(MD_LOG_MARK, MD_LOG_INFO, rv, p, "migrated store"); } } return rv; } static apr_status_t setup_store_file(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_store_fs_t *s_fs = baton; const char *fname; apr_status_t rv; (void)ap; s_fs->plain_pkey[MD_SG_DOMAINS] = 1; s_fs->plain_pkey[MD_SG_TMP] = 1; if (!MD_OK(md_util_path_merge(&fname, ptemp, s_fs->base, FS_STORE_JSON, NULL))) { return rv; } read: if (MD_OK(md_util_is_file(fname, ptemp))) { rv = read_store_file(s_fs, fname, p, ptemp); } else if (APR_STATUS_IS_ENOENT(rv) && APR_STATUS_IS_EEXIST(rv = init_store_file(s_fs, fname, p, ptemp))) { goto read; } return rv; } apr_status_t md_store_fs_init(md_store_t **pstore, apr_pool_t *p, const char *path) { md_store_fs_t *s_fs; apr_status_t rv = APR_SUCCESS; s_fs = apr_pcalloc(p, sizeof(*s_fs)); s_fs->s.load = fs_load; s_fs->s.save = fs_save; s_fs->s.remove = fs_remove; s_fs->s.move = fs_move; s_fs->s.purge = fs_purge; s_fs->s.iterate = fs_iterate; s_fs->s.iterate_names = fs_iterate_names; s_fs->s.get_fname = fs_get_fname; s_fs->s.is_newer = fs_is_newer; /* by default, everything is only readable by the current user */ s_fs->def_perms.dir = MD_FPROT_D_UONLY; s_fs->def_perms.file = MD_FPROT_F_UONLY; /* Account information needs to be accessible to httpd child processes. * private keys are, similar to staging, encrypted. */ s_fs->group_perms[MD_SG_ACCOUNTS].dir = MD_FPROT_D_UALL_WREAD; s_fs->group_perms[MD_SG_ACCOUNTS].file = MD_FPROT_F_UALL_WREAD; s_fs->group_perms[MD_SG_STAGING].dir = MD_FPROT_D_UALL_WREAD; s_fs->group_perms[MD_SG_STAGING].file = MD_FPROT_F_UALL_WREAD; /* challenges dir and files are readable by all, no secrets involved */ s_fs->group_perms[MD_SG_CHALLENGES].dir = MD_FPROT_D_UALL_WREAD; s_fs->group_perms[MD_SG_CHALLENGES].file = MD_FPROT_F_UALL_WREAD; s_fs->base = apr_pstrdup(p, path); if (APR_STATUS_IS_ENOENT(rv = md_util_is_dir(s_fs->base, p)) && MD_OK(apr_dir_make_recursive(s_fs->base, s_fs->def_perms.dir, p))) { rv = apr_file_perms_set(s_fs->base, MD_FPROT_D_UALL_WREAD); if (APR_STATUS_IS_ENOTIMPL(rv)) { rv = APR_SUCCESS; } } if ((APR_SUCCESS != rv) || !MD_OK(md_util_pool_vdo(setup_store_file, s_fs, p, NULL))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "init fs store at %s", path); } *pstore = (rv == APR_SUCCESS)? &(s_fs->s) : NULL; return rv; } apr_status_t md_store_fs_default_perms_set(md_store_t *store, apr_fileperms_t file_perms, apr_fileperms_t dir_perms) { md_store_fs_t *s_fs = FS_STORE(store); s_fs->def_perms.file = file_perms; s_fs->def_perms.dir = dir_perms; return APR_SUCCESS; } apr_status_t md_store_fs_group_perms_set(md_store_t *store, md_store_group_t group, apr_fileperms_t file_perms, apr_fileperms_t dir_perms) { md_store_fs_t *s_fs = FS_STORE(store); if (group >= (sizeof(s_fs->group_perms)/sizeof(s_fs->group_perms[0]))) { return APR_ENOTIMPL; } s_fs->group_perms[group].file = file_perms; s_fs->group_perms[group].dir = dir_perms; return APR_SUCCESS; } apr_status_t md_store_fs_set_event_cb(struct md_store_t *store, md_store_fs_cb *cb, void *baton) { md_store_fs_t *s_fs = FS_STORE(store); s_fs->event_cb = cb; s_fs->event_baton = baton; return APR_SUCCESS; } static const perms_t *gperms(md_store_fs_t *s_fs, md_store_group_t group) { if (group >= (sizeof(s_fs->group_perms)/sizeof(s_fs->group_perms[0])) || !s_fs->group_perms[group].dir) { return &s_fs->def_perms; } return &s_fs->group_perms[group]; } static apr_status_t fs_get_fname(const char **pfname, md_store_t *store, md_store_group_t group, const char *name, const char *aspect, apr_pool_t *p) { md_store_fs_t *s_fs = FS_STORE(store); if (group == MD_SG_NONE) { return md_util_path_merge(pfname, p, s_fs->base, aspect, NULL); } return md_util_path_merge(pfname, p, s_fs->base, md_store_group_name(group), name, aspect, NULL); } static apr_status_t fs_get_dname(const char **pdname, md_store_t *store, md_store_group_t group, const char *name, apr_pool_t *p) { md_store_fs_t *s_fs = FS_STORE(store); if (group == MD_SG_NONE) { *pdname = s_fs->base; return APR_SUCCESS; } return md_util_path_merge(pdname, p, s_fs->base, md_store_group_name(group), name, NULL); } static void get_pass(const char **ppass, apr_size_t *plen, md_store_fs_t *s_fs, md_store_group_t group) { if (s_fs->plain_pkey[group]) { *ppass = NULL; *plen = 0; } else { *ppass = (const char *)s_fs->key; *plen = s_fs->key_len; } } static apr_status_t fs_fload(void **pvalue, md_store_fs_t *s_fs, const char *fpath, md_store_group_t group, md_store_vtype_t vtype, apr_pool_t *p, apr_pool_t *ptemp) { apr_status_t rv; const char *pass; apr_size_t pass_len; if (pvalue != NULL) { switch (vtype) { case MD_SV_TEXT: rv = md_text_fread8k((const char **)pvalue, p, fpath); break; case MD_SV_JSON: rv = md_json_readf((md_json_t **)pvalue, p, fpath); break; case MD_SV_CERT: rv = md_cert_fload((md_cert_t **)pvalue, p, fpath); break; case MD_SV_PKEY: get_pass(&pass, &pass_len, s_fs, group); rv = md_pkey_fload((md_pkey_t **)pvalue, p, pass, pass_len, fpath); break; case MD_SV_CHAIN: rv = md_chain_fload((apr_array_header_t **)pvalue, p, fpath); break; default: rv = APR_ENOTIMPL; break; } md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, rv, ptemp, "loading type %d from %s", vtype, fpath); } else { /* check for existence only */ rv = md_util_is_file(fpath, p); } return rv; } static apr_status_t pfs_load(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_store_fs_t *s_fs = baton; const char *fpath, *name, *aspect; md_store_vtype_t vtype; md_store_group_t group; void **pvalue; apr_status_t rv; group = (md_store_group_t)va_arg(ap, int); name = va_arg(ap, const char *); aspect = va_arg(ap, const char *); vtype = (md_store_vtype_t)va_arg(ap, int); pvalue= va_arg(ap, void **); if (MD_OK(fs_get_fname(&fpath, &s_fs->s, group, name, aspect, ptemp))) { rv = fs_fload(pvalue, s_fs, fpath, group, vtype, p, ptemp); } return rv; } static apr_status_t dispatch(md_store_fs_t *s_fs, md_store_fs_ev_t ev, unsigned int group, const char *fname, apr_filetype_e ftype, apr_pool_t *p) { (void)ev; if (s_fs->event_cb) { return s_fs->event_cb(s_fs->event_baton, &s_fs->s, MD_S_FS_EV_CREATED, group, fname, ftype, p); } return APR_SUCCESS; } static apr_status_t mk_group_dir(const char **pdir, md_store_fs_t *s_fs, md_store_group_t group, const char *name, apr_pool_t *p) { const perms_t *perms; apr_status_t rv; perms = gperms(s_fs, group); if (MD_OK(fs_get_dname(pdir, &s_fs->s, group, name, p)) && (MD_SG_NONE != group)) { if ( !MD_OK(md_util_is_dir(*pdir, p)) && MD_OK(apr_dir_make_recursive(*pdir, perms->dir, p))) { rv = dispatch(s_fs, MD_S_FS_EV_CREATED, group, *pdir, APR_DIR, p); } if (APR_SUCCESS == rv) { rv = apr_file_perms_set(*pdir, perms->dir); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, 0, p, "mk_group_dir %s perm set", *pdir); if (APR_STATUS_IS_ENOTIMPL(rv)) { rv = APR_SUCCESS; } } } md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, 0, p, "mk_group_dir %d %s", group, name); return rv; } static apr_status_t pfs_is_newer(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_store_fs_t *s_fs = baton; const char *fname1, *fname2, *name, *aspect; md_store_group_t group1, group2; apr_finfo_t inf1, inf2; int *pnewer; apr_status_t rv; (void)p; group1 = (md_store_group_t)va_arg(ap, int); group2 = (md_store_group_t)va_arg(ap, int); name = va_arg(ap, const char*); aspect = va_arg(ap, const char*); pnewer = va_arg(ap, int*); *pnewer = 0; if ( MD_OK(fs_get_fname(&fname1, &s_fs->s, group1, name, aspect, ptemp)) && MD_OK(fs_get_fname(&fname2, &s_fs->s, group2, name, aspect, ptemp)) && MD_OK(apr_stat(&inf1, fname1, APR_FINFO_MTIME, ptemp)) && MD_OK(apr_stat(&inf2, fname2, APR_FINFO_MTIME, ptemp))) { *pnewer = inf1.mtime > inf2.mtime; } return rv; } static int fs_is_newer(md_store_t *store, md_store_group_t group1, md_store_group_t group2, const char *name, const char *aspect, apr_pool_t *p) { md_store_fs_t *s_fs = FS_STORE(store); int newer = 0; apr_status_t rv; rv = md_util_pool_vdo(pfs_is_newer, s_fs, p, group1, group2, name, aspect, &newer, NULL); if (APR_SUCCESS == rv) { return newer; } return 0; } static apr_status_t pfs_save(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_store_fs_t *s_fs = baton; const char *gdir, *dir, *fpath, *name, *aspect; md_store_vtype_t vtype; md_store_group_t group; void *value; int create; apr_status_t rv; const perms_t *perms; const char *pass; apr_size_t pass_len; group = (md_store_group_t)va_arg(ap, int); name = va_arg(ap, const char*); aspect = va_arg(ap, const char*); vtype = (md_store_vtype_t)va_arg(ap, int); value = va_arg(ap, void *); create = va_arg(ap, int); perms = gperms(s_fs, group); if ( MD_OK(mk_group_dir(&gdir, s_fs, group, NULL, p)) && MD_OK(mk_group_dir(&dir, s_fs, group, name, p)) && MD_OK(md_util_path_merge(&fpath, ptemp, dir, aspect, NULL))) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, 0, ptemp, "storing in %s", fpath); switch (vtype) { case MD_SV_TEXT: rv = (create? md_text_fcreatex(fpath, perms->file, p, value) : md_text_freplace(fpath, perms->file, p, value)); break; case MD_SV_JSON: rv = (create? md_json_fcreatex((md_json_t *)value, p, MD_JSON_FMT_INDENT, fpath, perms->file) : md_json_freplace((md_json_t *)value, p, MD_JSON_FMT_INDENT, fpath, perms->file)); break; case MD_SV_CERT: rv = md_cert_fsave((md_cert_t *)value, ptemp, fpath, perms->file); break; case MD_SV_PKEY: /* Take care that we write private key with access only to the user, * unless we write the key encrypted */ get_pass(&pass, &pass_len, s_fs, group); rv = md_pkey_fsave((md_pkey_t *)value, ptemp, pass, pass_len, fpath, (pass && pass_len)? perms->file : MD_FPROT_F_UONLY); break; case MD_SV_CHAIN: rv = md_chain_fsave((apr_array_header_t*)value, ptemp, fpath, perms->file); break; default: return APR_ENOTIMPL; } if (APR_SUCCESS == rv) { rv = dispatch(s_fs, MD_S_FS_EV_CREATED, group, fpath, APR_REG, p); } } return rv; } static apr_status_t pfs_remove(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_store_fs_t *s_fs = baton; const char *dir, *name, *fpath, *groupname, *aspect; apr_status_t rv; int force; apr_finfo_t info; md_store_group_t group; (void)p; group = (md_store_group_t)va_arg(ap, int); name = va_arg(ap, const char*); aspect = va_arg(ap, const char *); force = va_arg(ap, int); groupname = md_store_group_name(group); if ( MD_OK(md_util_path_merge(&dir, ptemp, s_fs->base, groupname, name, NULL)) && MD_OK(md_util_path_merge(&fpath, ptemp, dir, aspect, NULL))) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, ptemp, "start remove of md %s/%s/%s", groupname, name, aspect); if (!MD_OK(apr_stat(&info, dir, APR_FINFO_TYPE, ptemp))) { if (APR_ENOENT == rv && force) { return APR_SUCCESS; } return rv; } rv = apr_file_remove(fpath, ptemp); if (APR_ENOENT == rv && force) { rv = APR_SUCCESS; } } return rv; } static apr_status_t fs_load(md_store_t *store, md_store_group_t group, const char *name, const char *aspect, md_store_vtype_t vtype, void **pvalue, apr_pool_t *p) { md_store_fs_t *s_fs = FS_STORE(store); return md_util_pool_vdo(pfs_load, s_fs, p, group, name, aspect, vtype, pvalue, NULL); } static apr_status_t fs_save(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name, const char *aspect, md_store_vtype_t vtype, void *value, int create) { md_store_fs_t *s_fs = FS_STORE(store); return md_util_pool_vdo(pfs_save, s_fs, p, group, name, aspect, vtype, value, create, NULL); } static apr_status_t fs_remove(md_store_t *store, md_store_group_t group, const char *name, const char *aspect, apr_pool_t *p, int force) { md_store_fs_t *s_fs = FS_STORE(store); return md_util_pool_vdo(pfs_remove, s_fs, p, group, name, aspect, force, NULL); } static apr_status_t pfs_purge(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_store_fs_t *s_fs = baton; const char *dir, *name, *groupname; md_store_group_t group; apr_status_t rv; (void)p; group = (md_store_group_t)va_arg(ap, int); name = va_arg(ap, const char*); groupname = md_store_group_name(group); if (MD_OK(md_util_path_merge(&dir, ptemp, s_fs->base, groupname, name, NULL))) { /* Remove all files in dir, there should be no sub-dirs */ rv = md_util_rm_recursive(dir, ptemp, 1); } md_log_perror(MD_LOG_MARK, MD_LOG_TRACE2, rv, ptemp, "purge %s/%s (%s)", groupname, name, dir); return APR_SUCCESS; } static apr_status_t fs_purge(md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *name) { md_store_fs_t *s_fs = FS_STORE(store); return md_util_pool_vdo(pfs_purge, s_fs, p, group, name, NULL); } /**************************************************************************************************/ /* iteration */ typedef struct { md_store_fs_t *s_fs; md_store_group_t group; const char *pattern; const char *aspect; md_store_vtype_t vtype; md_store_inspect *inspect; const char *dirname; void *baton; } inspect_ctx; static apr_status_t insp(void *baton, apr_pool_t *p, apr_pool_t *ptemp, const char *dir, const char *name, apr_filetype_e ftype) { inspect_ctx *ctx = baton; apr_status_t rv; void *value; const char *fpath; (void)ftype; md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, 0, ptemp, "inspecting value at: %s/%s", dir, name); if (APR_SUCCESS == (rv = md_util_path_merge(&fpath, ptemp, dir, name, NULL))) { rv = fs_fload(&value, ctx->s_fs, fpath, ctx->group, ctx->vtype, p, ptemp); if (APR_SUCCESS == rv && !ctx->inspect(ctx->baton, ctx->dirname, name, ctx->vtype, value, p)) { return APR_EOF; } else if (APR_STATUS_IS_ENOENT(rv)) { rv = APR_SUCCESS; } } return rv; } static apr_status_t insp_dir(void *baton, apr_pool_t *p, apr_pool_t *ptemp, const char *dir, const char *name, apr_filetype_e ftype) { inspect_ctx *ctx = baton; apr_status_t rv; const char *fpath; (void)ftype; md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, 0, ptemp, "inspecting dir at: %s/%s", dir, name); if (MD_OK(md_util_path_merge(&fpath, p, dir, name, NULL))) { ctx->dirname = name; rv = md_util_files_do(insp, ctx, p, fpath, ctx->aspect, NULL); if (APR_STATUS_IS_ENOENT(rv)) { rv = APR_SUCCESS; } } return rv; } static apr_status_t fs_iterate(md_store_inspect *inspect, void *baton, md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *pattern, const char *aspect, md_store_vtype_t vtype) { const char *groupname; apr_status_t rv; inspect_ctx ctx; ctx.s_fs = FS_STORE(store); ctx.group = group; ctx.pattern = pattern; ctx.aspect = aspect; ctx.vtype = vtype; ctx.inspect = inspect; ctx.baton = baton; groupname = md_store_group_name(group); rv = md_util_files_do(insp_dir, &ctx, p, ctx.s_fs->base, groupname, pattern, NULL); return rv; } static apr_status_t insp_name(void *baton, apr_pool_t *p, apr_pool_t *ptemp, const char *dir, const char *name, apr_filetype_e ftype) { inspect_ctx *ctx = baton; (void)ftype; (void)p; md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, 0, ptemp, "inspecting name at: %s/%s", dir, name); return ctx->inspect(ctx->baton, dir, name, 0, NULL, ptemp); } static apr_status_t fs_iterate_names(md_store_inspect *inspect, void *baton, md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *pattern) { const char *groupname; apr_status_t rv; inspect_ctx ctx; ctx.s_fs = FS_STORE(store); ctx.group = group; ctx.pattern = pattern; ctx.inspect = inspect; ctx.baton = baton; groupname = md_store_group_name(group); rv = md_util_files_do(insp_name, &ctx, p, ctx.s_fs->base, groupname, pattern, NULL); return rv; } /**************************************************************************************************/ /* moving */ static apr_status_t pfs_move(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_store_fs_t *s_fs = baton; const char *name, *from_group, *to_group, *from_dir, *to_dir, *arch_dir, *dir; md_store_group_t from, to; int archive; apr_status_t rv; (void)p; from = (md_store_group_t)va_arg(ap, int); to = (md_store_group_t)va_arg(ap, int); name = va_arg(ap, const char*); archive = va_arg(ap, int); from_group = md_store_group_name(from); to_group = md_store_group_name(to); if (!strcmp(from_group, to_group)) { return APR_EINVAL; } if ( !MD_OK(md_util_path_merge(&from_dir, ptemp, s_fs->base, from_group, name, NULL)) || !MD_OK(md_util_path_merge(&to_dir, ptemp, s_fs->base, to_group, name, NULL))) { goto out; } if (!MD_OK(md_util_is_dir(from_dir, ptemp))) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, ptemp, "source is no dir: %s", from_dir); goto out; } if (MD_OK(archive? md_util_is_dir(to_dir, ptemp) : APR_ENOENT)) { int n = 1; const char *narch_dir; if ( !MD_OK(md_util_path_merge(&dir, ptemp, s_fs->base, md_store_group_name(MD_SG_ARCHIVE), NULL)) || !MD_OK(apr_dir_make_recursive(dir, MD_FPROT_D_UONLY, ptemp)) || !MD_OK(md_util_path_merge(&arch_dir, ptemp, dir, name, NULL))) { goto out; } #ifdef WIN32 /* WIN32 and handling of files/dirs. What can one say? */ while (n < 1000) { narch_dir = apr_psprintf(ptemp, "%s.%d", arch_dir, n); rv = md_util_is_dir(narch_dir, ptemp); if (APR_STATUS_IS_ENOENT(rv)) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, rv, ptemp, "using archive dir: %s", narch_dir); break; } else { ++n; narch_dir = NULL; } } #else /* ifdef WIN32 */ while (n < 1000) { narch_dir = apr_psprintf(ptemp, "%s.%d", arch_dir, n); if (MD_OK(apr_dir_make(narch_dir, MD_FPROT_D_UONLY, ptemp))) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, rv, ptemp, "using archive dir: %s", narch_dir); break; } else if (APR_EEXIST == rv) { ++n; narch_dir = NULL; } else { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, ptemp, "creating archive dir: %s", narch_dir); goto out; } } #endif /* ifdef WIN32 (else part) */ if (!narch_dir) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, ptemp, "ran out of numbers less than 1000 " "while looking for an available one in %s to archive the data " "from %s. Either something is generally wrong or you need to " "clean up some of those directories.", arch_dir, from_dir); rv = APR_EGENERAL; goto out; } if (!MD_OK(apr_file_rename(to_dir, narch_dir, ptemp))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, ptemp, "rename from %s to %s", to_dir, narch_dir); goto out; } if (!MD_OK(apr_file_rename(from_dir, to_dir, ptemp))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, ptemp, "rename from %s to %s", from_dir, to_dir); apr_file_rename(narch_dir, to_dir, ptemp); goto out; } if (MD_OK(dispatch(s_fs, MD_S_FS_EV_MOVED, to, to_dir, APR_DIR, ptemp))) { rv = dispatch(s_fs, MD_S_FS_EV_MOVED, MD_SG_ARCHIVE, narch_dir, APR_DIR, ptemp); } } else if (APR_STATUS_IS_ENOENT(rv)) { if (APR_SUCCESS != (rv = apr_file_rename(from_dir, to_dir, ptemp))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, ptemp, "rename from %s to %s", from_dir, to_dir); goto out; } } else { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, ptemp, "target is no dir: %s", to_dir); goto out; } out: return rv; } static apr_status_t fs_move(md_store_t *store, apr_pool_t *p, md_store_group_t from, md_store_group_t to, const char *name, int archive) { md_store_fs_t *s_fs = FS_STORE(store); return md_util_pool_vdo(pfs_move, s_fs, p, from, to, name, archive, NULL); } �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_curl.c�������������������������������������������������������������������0000644�0000000�0000050�00000021725�13511051361�015100� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <curl/curl.h> #include <apr_lib.h> #include <apr_strings.h> #include <apr_buckets.h> #include "md_http.h" #include "md_log.h" #include "md_curl.h" /**************************************************************************************************/ /* md_http curl implementation */ static apr_status_t curl_status(int curl_code) { switch (curl_code) { case CURLE_OK: return APR_SUCCESS; case CURLE_UNSUPPORTED_PROTOCOL: return APR_ENOTIMPL; case CURLE_NOT_BUILT_IN: return APR_ENOTIMPL; case CURLE_URL_MALFORMAT: return APR_EINVAL; case CURLE_COULDNT_RESOLVE_PROXY:return APR_ECONNREFUSED; case CURLE_COULDNT_RESOLVE_HOST: return APR_ECONNREFUSED; case CURLE_COULDNT_CONNECT: return APR_ECONNREFUSED; case CURLE_REMOTE_ACCESS_DENIED: return APR_EACCES; case CURLE_OUT_OF_MEMORY: return APR_ENOMEM; case CURLE_OPERATION_TIMEDOUT: return APR_TIMEUP; case CURLE_SSL_CONNECT_ERROR: return APR_ECONNABORTED; case CURLE_AGAIN: return APR_EAGAIN; default: return APR_EGENERAL; } } static size_t req_data_cb(void *data, size_t len, size_t nmemb, void *baton) { apr_bucket_brigade *body = baton; size_t blen, read_len = 0, max_len = len * nmemb; const char *bdata; apr_bucket *b; apr_status_t rv; while (body && !APR_BRIGADE_EMPTY(body) && max_len > 0) { b = APR_BRIGADE_FIRST(body); if (APR_BUCKET_IS_METADATA(b)) { if (APR_BUCKET_IS_EOS(b)) { body = NULL; } } else { rv = apr_bucket_read(b, &bdata, &blen, APR_BLOCK_READ); if (rv == APR_SUCCESS) { if (blen > max_len) { apr_bucket_split(b, max_len); blen = max_len; } memcpy(data, bdata, blen); read_len += blen; max_len -= blen; } else { body = NULL; if (!APR_STATUS_IS_EOF(rv)) { /* everything beside EOF is an error */ read_len = CURL_READFUNC_ABORT; } } } apr_bucket_delete(b); } return read_len; } static size_t resp_data_cb(void *data, size_t len, size_t nmemb, void *baton) { md_http_response_t *res = baton; size_t blen = len * nmemb; apr_status_t rv; if (res->body) { if (res->req->resp_limit) { apr_off_t body_len = 0; apr_brigade_length(res->body, 0, &body_len); if (body_len + (apr_off_t)len > res->req->resp_limit) { return 0; /* signal curl failure */ } } rv = apr_brigade_write(res->body, NULL, NULL, (const char *)data, blen); if (rv != APR_SUCCESS) { /* returning anything != blen will make CURL fail this */ return 0; } } return blen; } static size_t header_cb(void *buffer, size_t elen, size_t nmemb, void *baton) { md_http_response_t *res = baton; size_t len, clen = elen * nmemb; const char *name = NULL, *value = "", *b = buffer; apr_size_t i; len = (clen && b[clen-1] == '\n')? clen-1 : clen; len = (len && b[len-1] == '\r')? len-1 : len; for (i = 0; i < len; ++i) { if (b[i] == ':') { name = apr_pstrndup(res->req->pool, b, i); ++i; while (i < len && b[i] == ' ') { ++i; } if (i < len) { value = apr_pstrndup(res->req->pool, b+i, len - i); } break; } } if (name != NULL) { apr_table_add(res->headers, name, value); } return clen; } static apr_status_t curl_init(md_http_request_t *req) { CURL *curl = curl_easy_init(); if (!curl) { return APR_EGENERAL; } curl_easy_setopt(curl, CURLOPT_HEADERFUNCTION, header_cb); curl_easy_setopt(curl, CURLOPT_HEADERDATA, NULL); curl_easy_setopt(curl, CURLOPT_READFUNCTION, req_data_cb); curl_easy_setopt(curl, CURLOPT_READDATA, NULL); curl_easy_setopt(curl, CURLOPT_WRITEFUNCTION, resp_data_cb); curl_easy_setopt(curl, CURLOPT_WRITEDATA, NULL); req->internals = curl; return APR_SUCCESS; } typedef struct { md_http_request_t *req; struct curl_slist *hdrs; apr_status_t rv; } curlify_hdrs_ctx; static int curlify_headers(void *baton, const char *key, const char *value) { curlify_hdrs_ctx *ctx = baton; const char *s; if (strchr(key, '\r') || strchr(key, '\n') || strchr(value, '\r') || strchr(value, '\n')) { ctx->rv = APR_EINVAL; return 0; } s = apr_psprintf(ctx->req->pool, "%s: %s", key, value); ctx->hdrs = curl_slist_append(ctx->hdrs, s); return 1; } static apr_status_t curl_perform(md_http_request_t *req) { apr_status_t rv = APR_SUCCESS; CURLcode curle; md_http_response_t *res; CURL *curl; struct curl_slist *req_hdrs = NULL; rv = curl_init(req); curl = req->internals; res = apr_pcalloc(req->pool, sizeof(*res)); res->req = req; res->rv = APR_SUCCESS; res->status = 400; res->headers = apr_table_make(req->pool, 5); res->body = apr_brigade_create(req->pool, req->bucket_alloc); curl_easy_setopt(curl, CURLOPT_URL, req->url); if (!apr_strnatcasecmp("GET", req->method)) { /* nop */ } else if (!apr_strnatcasecmp("HEAD", req->method)) { curl_easy_setopt(curl, CURLOPT_NOBODY, 1L); } else if (!apr_strnatcasecmp("POST", req->method)) { curl_easy_setopt(curl, CURLOPT_POST, 1L); } else { curl_easy_setopt(curl, CURLOPT_CUSTOMREQUEST, req->method); } curl_easy_setopt(curl, CURLOPT_HEADERDATA, res); curl_easy_setopt(curl, CURLOPT_READDATA, req->body); curl_easy_setopt(curl, CURLOPT_WRITEDATA, res); if (req->user_agent) { curl_easy_setopt(curl, CURLOPT_USERAGENT, req->user_agent); } if (req->proxy_url) { curl_easy_setopt(curl, CURLOPT_PROXY, req->proxy_url); } if (!apr_is_empty_table(req->headers)) { curlify_hdrs_ctx ctx; ctx.req = req; ctx.hdrs = NULL; ctx.rv = APR_SUCCESS; apr_table_do(curlify_headers, &ctx, req->headers, NULL); req_hdrs = ctx.hdrs; if (ctx.rv == APR_SUCCESS) { curl_easy_setopt(curl, CURLOPT_HTTPHEADER, req_hdrs); } } md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, req->pool, "request --> %s %s", req->method, req->url); if (md_log_is_level(req->pool, MD_LOG_TRACE3)) { curl_easy_setopt(curl, CURLOPT_VERBOSE, 1L); } curle = curl_easy_perform(curl); res->rv = curl_status(curle); if (APR_SUCCESS == res->rv) { long l; res->rv = curl_status(curl_easy_getinfo(curl, CURLINFO_RESPONSE_CODE, &l)); if (APR_SUCCESS == res->rv) { res->status = (int)l; } md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, res->rv, req->pool, "request <-- %d", res->status); } else { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, res->rv, req->pool, "request failed(%d): %s", curle, curl_easy_strerror(curle)); } if (req->cb) { res->rv = req->cb(res); } rv = res->rv; md_http_req_destroy(req); if (req_hdrs) { curl_slist_free_all(req_hdrs); } return rv; } static int initialized; static apr_status_t md_curl_init(void) { if (!initialized) { initialized = 1; curl_global_init(CURL_GLOBAL_DEFAULT); } return APR_SUCCESS; } static void curl_req_cleanup(md_http_request_t *req) { if (req->internals) { curl_easy_cleanup(req->internals); req->internals = NULL; } } static md_http_impl_t impl = { md_curl_init, curl_req_cleanup, curl_perform }; md_http_impl_t * md_curl_get_impl(apr_pool_t *p) { /* trigger early global curl init, before we are down a rabbit hole */ (void)p; md_curl_init(); return &impl; } �������������������������������������������httpd-2.4.41/modules/md/mod_md.dep������������������������������������������������������������������0000644�0000000�0000050�00000000225�13210057571�015235� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_md.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/mod_md.dsp������������������������������������������������������������������0000644�0000000�0000050�00000015447�13511051361�015262� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_md" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_md - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_md.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_md.mak" CFG="mod_md - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_md - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_md - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_md - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "ssize_t=long" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../server/mpm/winnt" "/I ../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/openssl/inc32" /I "../../srclib/jansson/include" /I "../../srclib/curl/include" /I "../core" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "ssize_t=long" /Fd"Release\mod_md_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_md.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d "BIN_NAME=mod_md.so" /d "LONG_NAME=Letsencrypt module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_md.so" /base:@..\..\os\win32\BaseAddr.ref,mod_md.so # ADD LINK32 kernel32.lib libhttpd.lib libapr-1.lib libaprutil-1.lib ssleay32.lib libeay32.lib jansson.lib libcurl.lib /libpath:"../../srclib/apr/Release" /libpath:"../../srclib/apr-util/Release" /libpath:"../../Release/" /libpath:"../../srclib/openssl/out32dll" /libpath:"../../srclib/jansson/lib" /libpath:"../../srclib/curl/lib" /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_md.so" /base:@..\..\os\win32\BaseAddr.ref,mod_md.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_md.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_md - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /D "ssize_t=long" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/openssl/inc32" /I "../../srclib/jansson/include" /I "../../srclib/curl/include" /I "../core" /src" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "ssize_t=long" /Fd"Debug\mod_md_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_md.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d "BIN_NAME=mod_md.so" /d "LONG_NAME=md_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_md.so" /base:@..\..\os\win32\BaseAddr.ref,mod_md.so # ADD LINK32 kernel32.lib libhttpd.lib libapr-1.lib libaprutil-1.lib ssleay32.lib libeay32.lib jansson_d.lib libcurl_debug.lib /nologo /subsystem:windows /dll /libpath:"../../srclib/openssl/out32dll" /libpath:"../../srclib/jansson/lib" /libpath:"../../srclib/curl/lib" /incremental:no /debug /out:".\Debug\mod_md.so" /base:@..\..\os\win32\BaseAddr.ref,mod_md.so # Begin Special Build Tool TargetPath=.\Debug\mod_md.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_md - Win32 Release" # Name "mod_md - Win32 Debug" # Begin Source File SOURCE=./mod_md.c # End Source File # Begin Source File SOURCE=./mod_md_config.c # End Source File # Begin Source File SOURCE=./mod_md_drive.c # End Source File # Begin Source File SOURCE=./mod_md_os.c # End Source File # Begin Source File SOURCE=./mod_md_status.c # End Source File # Begin Source File SOURCE=./md_acme.c # End Source File # Begin Source File SOURCE=./md_acme_acct.c # End Source File # Begin Source File SOURCE=./md_acme_authz.c # End Source File # Begin Source File SOURCE=./md_acme_drive.c # End Source File # Begin Source File SOURCE=./md_acme_order.c # End Source File # Begin Source File SOURCE=./md_acmev1_drive.c # End Source File # Begin Source File SOURCE=./md_acmev2_drive.c # End Source File # Begin Source File SOURCE=./md_core.c # End Source File # Begin Source File SOURCE=./md_crypt.c # End Source File # Begin Source File SOURCE=./md_curl.c # End Source File # Begin Source File SOURCE=./md_http.c # End Source File # Begin Source File SOURCE=./md_json.c # End Source File # Begin Source File SOURCE=./md_jws.c # End Source File # Begin Source File SOURCE=./md_log.c # End Source File # Begin Source File SOURCE=./md_reg.c # End Source File # Begin Source File SOURCE=./md_result.c # End Source File # Begin Source File SOURCE=./md_status.c # End Source File # Begin Source File SOURCE=./md_store.c # End Source File # Begin Source File SOURCE=./md_store_fs.c # End Source File # Begin Source File SOURCE=./md_time.c # End Source File # Begin Source File SOURCE=./md_util.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_time.h�������������������������������������������������������������������0000644�0000000�0000050�00000005166�13511051361�015077� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_time_h #define mod_md_md_time_h #include <stdio.h> #define MD_SECS_PER_HOUR (60*60) #define MD_SECS_PER_DAY (24*MD_SECS_PER_HOUR) typedef struct { apr_time_t start; apr_time_t end; } md_timeperiod_t; apr_time_t md_timeperiod_length(const md_timeperiod_t *period); int md_timeperiod_contains(const md_timeperiod_t *period, apr_time_t time); int md_timeperiod_has_started(const md_timeperiod_t *period, apr_time_t time); int md_timeperiod_has_ended(const md_timeperiod_t *period, apr_time_t time); char *md_timeperiod_print(apr_pool_t *p, const md_timeperiod_t *period); /** * Print a human readable form of the give duration in days/hours/min/sec */ const char *md_duration_print(apr_pool_t *p, apr_interval_time_t duration); /** * Parse a machine readable string duration in the form of NN[unit], where * unit is d/h/mi/s/ms with the default given should the unit not be specified. */ apr_status_t md_duration_parse(apr_interval_time_t *ptimeout, const char *value, const char *def_unit); typedef struct { apr_interval_time_t norm; /* if > 0, normalized base length */ apr_interval_time_t len; /* length of the timespan */ } md_timeslice_t; apr_status_t md_timeslice_create(const md_timeslice_t **pts, apr_pool_t *p, apr_interval_time_t norm, apr_interval_time_t len); int md_timeslice_eq(const md_timeslice_t *ts1, const md_timeslice_t *ts2); const char *md_timeslice_parse(const md_timeslice_t **pts, apr_pool_t *p, const char *val, apr_interval_time_t defnorm); const char *md_timeslice_format(const md_timeslice_t *ts, apr_pool_t *p); md_timeperiod_t md_timeperiod_slice_before_end(const md_timeperiod_t *period, const md_timeslice_t *ts); #endif /* md_util_h */ ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_crypt.c������������������������������������������������������������������0000644�0000000�0000050�00000131636�13522005744�015305� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <stdio.h> #include <stdlib.h> #include <apr_lib.h> #include <apr_buckets.h> #include <apr_file_io.h> #include <apr_strings.h> #include <openssl/err.h> #include <openssl/evp.h> #include <openssl/pem.h> #include <openssl/rand.h> #include <openssl/rsa.h> #include <openssl/x509v3.h> #include "md.h" #include "md_crypt.h" #include "md_json.h" #include "md_log.h" #include "md_http.h" #include "md_util.h" /* getpid for *NIX */ #if APR_HAVE_SYS_TYPES_H #include <sys/types.h> #endif #if APR_HAVE_UNISTD_H #include <unistd.h> #endif /* getpid for Windows */ #if APR_HAVE_PROCESS_H #include <process.h> #endif #if defined(LIBRESSL_VERSION_NUMBER) /* Missing from LibreSSL */ #define MD_USE_OPENSSL_PRE_1_1_API (LIBRESSL_VERSION_NUMBER < 0x2070000f) #else /* defined(LIBRESSL_VERSION_NUMBER) */ #define MD_USE_OPENSSL_PRE_1_1_API (OPENSSL_VERSION_NUMBER < 0x10100000L) #endif #if defined(LIBRESSL_VERSION_NUMBER) || (OPENSSL_VERSION_NUMBER < 0x10100000L) /* Missing from LibreSSL and only available since OpenSSL v1.1.x */ #ifndef OPENSSL_NO_CT #define OPENSSL_NO_CT #endif #endif #ifndef OPENSSL_NO_CT #include <openssl/ct.h> #endif static int initialized; struct md_pkey_t { apr_pool_t *pool; EVP_PKEY *pkey; }; #ifdef MD_HAVE_ARC4RANDOM static void seed_RAND(int pid) { char seed[128]; (void)pid; arc4random_buf(seed, sizeof(seed)); RAND_seed(seed, sizeof(seed)); } #else /* ifdef MD_HAVE_ARC4RANDOM */ static int rand_choosenum(int l, int h) { int i; char buf[50]; apr_snprintf(buf, sizeof(buf), "%.0f", (((double)(rand()%RAND_MAX)/RAND_MAX)*(h-l))); i = atoi(buf)+1; if (i < l) i = l; if (i > h) i = h; return i; } static void seed_RAND(int pid) { unsigned char stackdata[256]; /* stolen from mod_ssl/ssl_engine_rand.c */ int n; struct { time_t t; pid_t pid; } my_seed; /* * seed in the current time (usually just 4 bytes) */ my_seed.t = time(NULL); /* * seed in the current process id (usually just 4 bytes) */ my_seed.pid = pid; RAND_seed((unsigned char *)&my_seed, sizeof(my_seed)); /* * seed in some current state of the run-time stack (128 bytes) */ n = rand_choosenum(0, sizeof(stackdata)-128-1); RAND_seed(stackdata+n, 128); } #endif /*ifdef MD_HAVE_ARC4RANDOM (else part) */ apr_status_t md_crypt_init(apr_pool_t *pool) { (void)pool; if (!initialized) { int pid = getpid(); ERR_load_crypto_strings(); OpenSSL_add_all_algorithms(); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE2, 0, pool, "initializing RAND"); while (!RAND_status()) { seed_RAND(pid); } initialized = 1; } return APR_SUCCESS; } static apr_status_t fwrite_buffer(void *baton, apr_file_t *f, apr_pool_t *p) { md_data *buf = baton; apr_size_t wlen; (void)p; return apr_file_write_full(f, buf->data, buf->len, &wlen); } apr_status_t md_rand_bytes(unsigned char *buf, apr_size_t len, apr_pool_t *p) { apr_status_t rv; if (len > INT_MAX) { return APR_ENOTIMPL; } if (APR_SUCCESS == (rv = md_crypt_init(p))) { RAND_bytes((unsigned char*)buf, (int)len); } return rv; } typedef struct { const char *pass_phrase; int pass_len; } passwd_ctx; static int pem_passwd(char *buf, int size, int rwflag, void *baton) { passwd_ctx *ctx = baton; (void)rwflag; if (ctx->pass_len > 0) { if (ctx->pass_len < size) { size = (int)ctx->pass_len; } memcpy(buf, ctx->pass_phrase, (size_t)size); } return ctx->pass_len; } /**************************************************************************************************/ /* date time things */ /* Get the apr time (micro seconds, since 1970) from an ASN1 time, as stored in X509 * certificates. OpenSSL now has a utility function, but other *SSL derivatives have * not caughts up yet or chose to ignore. An alternative is implemented, we prefer * however the *SSL to maintain such things. */ static apr_time_t md_asn1_time_get(const ASN1_TIME* time) { #if OPENSSL_VERSION_NUMBER < 0x10002000L || defined(LIBRESSL_VERSION_NUMBER) /* courtesy: https://stackoverflow.com/questions/10975542/asn1-time-to-time-t-conversion#11263731 * all bugs are mine */ apr_time_exp_t t; apr_time_t ts; const char* str = (const char*) time->data; apr_size_t i = 0; memset(&t, 0, sizeof(t)); if (time->type == V_ASN1_UTCTIME) {/* two digit year */ t.tm_year = (str[i++] - '0') * 10; t.tm_year += (str[i++] - '0'); if (t.tm_year < 70) t.tm_year += 100; } else if (time->type == V_ASN1_GENERALIZEDTIME) {/* four digit year */ t.tm_year = (str[i++] - '0') * 1000; t.tm_year+= (str[i++] - '0') * 100; t.tm_year+= (str[i++] - '0') * 10; t.tm_year+= (str[i++] - '0'); t.tm_year -= 1900; } t.tm_mon = (str[i++] - '0') * 10; t.tm_mon += (str[i++] - '0') - 1; /* -1 since January is 0 not 1. */ t.tm_mday = (str[i++] - '0') * 10; t.tm_mday+= (str[i++] - '0'); t.tm_hour = (str[i++] - '0') * 10; t.tm_hour+= (str[i++] - '0'); t.tm_min = (str[i++] - '0') * 10; t.tm_min += (str[i++] - '0'); t.tm_sec = (str[i++] - '0') * 10; t.tm_sec += (str[i++] - '0'); if (APR_SUCCESS == apr_time_exp_gmt_get(&ts, &t)) { return ts; } return 0; #else int secs, days; apr_time_t ts = apr_time_now(); if (ASN1_TIME_diff(&days, &secs, NULL, time)) { ts += apr_time_from_sec((days * MD_SECS_PER_DAY) + secs); } return ts; #endif } /**************************************************************************************************/ /* private keys */ md_json_t *md_pkey_spec_to_json(const md_pkey_spec_t *spec, apr_pool_t *p) { md_json_t *json = md_json_create(p); if (json) { switch (spec->type) { case MD_PKEY_TYPE_DEFAULT: md_json_sets("Default", json, MD_KEY_TYPE, NULL); break; case MD_PKEY_TYPE_RSA: md_json_sets("RSA", json, MD_KEY_TYPE, NULL); if (spec->params.rsa.bits >= MD_PKEY_RSA_BITS_MIN) { md_json_setl((long)spec->params.rsa.bits, json, MD_KEY_BITS, NULL); } break; default: md_json_sets("Unsupported", json, MD_KEY_TYPE, NULL); break; } } return json; } md_pkey_spec_t *md_pkey_spec_from_json(struct md_json_t *json, apr_pool_t *p) { md_pkey_spec_t *spec = apr_pcalloc(p, sizeof(*spec)); const char *s; long l; if (spec) { s = md_json_gets(json, MD_KEY_TYPE, NULL); if (!s || !apr_strnatcasecmp("Default", s)) { spec->type = MD_PKEY_TYPE_DEFAULT; } else if (!apr_strnatcasecmp("RSA", s)) { spec->type = MD_PKEY_TYPE_RSA; l = md_json_getl(json, MD_KEY_BITS, NULL); if (l >= MD_PKEY_RSA_BITS_MIN) { spec->params.rsa.bits = (unsigned int)l; } else { spec->params.rsa.bits = MD_PKEY_RSA_BITS_DEF; } } } return spec; } int md_pkey_spec_eq(md_pkey_spec_t *spec1, md_pkey_spec_t *spec2) { if (spec1 == spec2) { return 1; } if (spec1 && spec2 && spec1->type == spec2->type) { switch (spec1->type) { case MD_PKEY_TYPE_DEFAULT: return 1; case MD_PKEY_TYPE_RSA: if (spec1->params.rsa.bits == spec2->params.rsa.bits) { return 1; } break; } } return 0; } static md_pkey_t *make_pkey(apr_pool_t *p) { md_pkey_t *pkey = apr_pcalloc(p, sizeof(*pkey)); pkey->pool = p; return pkey; } static apr_status_t pkey_cleanup(void *data) { md_pkey_t *pkey = data; if (pkey->pkey) { EVP_PKEY_free(pkey->pkey); pkey->pkey = NULL; } return APR_SUCCESS; } void md_pkey_free(md_pkey_t *pkey) { pkey_cleanup(pkey); } void *md_pkey_get_EVP_PKEY(struct md_pkey_t *pkey) { return pkey->pkey; } apr_status_t md_pkey_fload(md_pkey_t **ppkey, apr_pool_t *p, const char *key, apr_size_t key_len, const char *fname) { apr_status_t rv = APR_ENOENT; md_pkey_t *pkey; BIO *bf; passwd_ctx ctx; pkey = make_pkey(p); if (NULL != (bf = BIO_new_file(fname, "r"))) { ctx.pass_phrase = key; ctx.pass_len = (int)key_len; ERR_clear_error(); pkey->pkey = PEM_read_bio_PrivateKey(bf, NULL, pem_passwd, &ctx); BIO_free(bf); if (pkey->pkey != NULL) { rv = APR_SUCCESS; apr_pool_cleanup_register(p, pkey, pkey_cleanup, apr_pool_cleanup_null); } else { unsigned long err = ERR_get_error(); rv = APR_EINVAL; md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, rv, p, "error loading pkey %s: %s (pass phrase was %snull)", fname, ERR_error_string(err, NULL), key? "not " : ""); } } *ppkey = (APR_SUCCESS == rv)? pkey : NULL; return rv; } static apr_status_t pkey_to_buffer(md_data *buf, md_pkey_t *pkey, apr_pool_t *p, const char *pass, apr_size_t pass_len) { BIO *bio = BIO_new(BIO_s_mem()); const EVP_CIPHER *cipher = NULL; pem_password_cb *cb = NULL; void *cb_baton = NULL; passwd_ctx ctx; unsigned long err; int i; if (!bio) { return APR_ENOMEM; } if (pass_len > INT_MAX) { return APR_EINVAL; } if (pass && pass_len > 0) { ctx.pass_phrase = pass; ctx.pass_len = (int)pass_len; cb = pem_passwd; cb_baton = &ctx; cipher = EVP_aes_256_cbc(); if (!cipher) { return APR_ENOTIMPL; } } ERR_clear_error(); if (!PEM_write_bio_PrivateKey(bio, pkey->pkey, cipher, NULL, 0, cb, cb_baton)) { BIO_free(bio); err = ERR_get_error(); md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "PEM_write key: %ld %s", err, ERR_error_string(err, NULL)); return APR_EINVAL; } i = BIO_pending(bio); if (i > 0) { buf->data = apr_palloc(p, (apr_size_t)i); i = BIO_read(bio, (char*)buf->data, i); buf->len = (apr_size_t)i; } BIO_free(bio); return APR_SUCCESS; } apr_status_t md_pkey_fsave(md_pkey_t *pkey, apr_pool_t *p, const char *pass_phrase, apr_size_t pass_len, const char *fname, apr_fileperms_t perms) { md_data buffer; apr_status_t rv; if (APR_SUCCESS == (rv = pkey_to_buffer(&buffer, pkey, p, pass_phrase, pass_len))) { return md_util_freplace(fname, perms, p, fwrite_buffer, &buffer); } md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "save pkey %s (%s pass phrase, len=%d)", fname, pass_len > 0? "with" : "without", (int)pass_len); return rv; } static apr_status_t gen_rsa(md_pkey_t **ppkey, apr_pool_t *p, unsigned int bits) { EVP_PKEY_CTX *ctx = NULL; apr_status_t rv; *ppkey = make_pkey(p); ctx = EVP_PKEY_CTX_new_id(EVP_PKEY_RSA, NULL); if (ctx && EVP_PKEY_keygen_init(ctx) >= 0 && EVP_PKEY_CTX_set_rsa_keygen_bits(ctx, (int)bits) >= 0 && EVP_PKEY_keygen(ctx, &(*ppkey)->pkey) >= 0) { rv = APR_SUCCESS; } else { md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, 0, p, "error generate pkey RSA %d", bits); *ppkey = NULL; rv = APR_EGENERAL; } if (ctx != NULL) { EVP_PKEY_CTX_free(ctx); } return rv; } apr_status_t md_pkey_gen(md_pkey_t **ppkey, apr_pool_t *p, md_pkey_spec_t *spec) { md_pkey_type_t ptype = spec? spec->type : MD_PKEY_TYPE_DEFAULT; switch (ptype) { case MD_PKEY_TYPE_DEFAULT: return gen_rsa(ppkey, p, MD_PKEY_RSA_BITS_DEF); case MD_PKEY_TYPE_RSA: return gen_rsa(ppkey, p, spec->params.rsa.bits); default: return APR_ENOTIMPL; } } #if MD_USE_OPENSSL_PRE_1_1_API || (defined(LIBRESSL_VERSION_NUMBER) && \ LIBRESSL_VERSION_NUMBER < 0x2070000f) #ifndef NID_tlsfeature #define NID_tlsfeature 1020 #endif static void RSA_get0_key(const RSA *r, const BIGNUM **n, const BIGNUM **e, const BIGNUM **d) { if (n != NULL) *n = r->n; if (e != NULL) *e = r->e; if (d != NULL) *d = r->d; } #endif static const char *bn64(const BIGNUM *b, apr_pool_t *p) { if (b) { apr_size_t len = (apr_size_t)BN_num_bytes(b); char *buffer = apr_pcalloc(p, len); if (buffer) { BN_bn2bin(b, (unsigned char *)buffer); return md_util_base64url_encode(buffer, len, p); } } return NULL; } const char *md_pkey_get_rsa_e64(md_pkey_t *pkey, apr_pool_t *p) { const BIGNUM *e; RSA *rsa = EVP_PKEY_get1_RSA(pkey->pkey); if (!rsa) { return NULL; } RSA_get0_key(rsa, NULL, &e, NULL); return bn64(e, p); } const char *md_pkey_get_rsa_n64(md_pkey_t *pkey, apr_pool_t *p) { const BIGNUM *n; RSA *rsa = EVP_PKEY_get1_RSA(pkey->pkey); if (!rsa) { return NULL; } RSA_get0_key(rsa, &n, NULL, NULL); return bn64(n, p); } apr_status_t md_crypt_sign64(const char **psign64, md_pkey_t *pkey, apr_pool_t *p, const char *d, size_t dlen) { EVP_MD_CTX *ctx = NULL; char *buffer; unsigned int blen; const char *sign64 = NULL; apr_status_t rv = APR_ENOMEM; buffer = apr_pcalloc(p, (apr_size_t)EVP_PKEY_size(pkey->pkey)); if (buffer) { ctx = EVP_MD_CTX_create(); if (ctx) { rv = APR_ENOTIMPL; if (EVP_SignInit_ex(ctx, EVP_sha256(), NULL)) { rv = APR_EGENERAL; if (EVP_SignUpdate(ctx, d, dlen)) { if (EVP_SignFinal(ctx, (unsigned char*)buffer, &blen, pkey->pkey)) { sign64 = md_util_base64url_encode(buffer, blen, p); if (sign64) { rv = APR_SUCCESS; } } } } } if (ctx) { EVP_MD_CTX_destroy(ctx); } } if (rv != APR_SUCCESS) { md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, rv, p, "signing"); } *psign64 = sign64; return rv; } static apr_status_t sha256_digest(md_data **pdigest, apr_pool_t *p, const md_data *buf) { EVP_MD_CTX *ctx = NULL; md_data *digest; apr_status_t rv = APR_ENOMEM; unsigned int dlen; digest = apr_palloc(p, sizeof(*digest)); if (!digest) goto leave; digest->data = apr_pcalloc(p, EVP_MAX_MD_SIZE); if (!digest->data) goto leave; ctx = EVP_MD_CTX_create(); if (ctx) { rv = APR_ENOTIMPL; if (EVP_DigestInit_ex(ctx, EVP_sha256(), NULL)) { rv = APR_EGENERAL; if (EVP_DigestUpdate(ctx, (unsigned char*)buf->data, buf->len)) { if (EVP_DigestFinal(ctx, (unsigned char*)digest->data, &dlen)) { digest->len = dlen; rv = APR_SUCCESS; } } } } leave: if (ctx) { EVP_MD_CTX_destroy(ctx); } *pdigest = (APR_SUCCESS == rv)? digest : NULL; return rv; } apr_status_t md_crypt_sha256_digest64(const char **pdigest64, apr_pool_t *p, const md_data *d) { const char *digest64 = NULL; md_data *digest; apr_status_t rv; if (APR_SUCCESS == (rv = sha256_digest(&digest, p, d))) { if (NULL == (digest64 = md_util_base64url_encode(digest->data, digest->len, p))) { rv = APR_EGENERAL; } } *pdigest64 = digest64; return rv; } apr_status_t md_crypt_sha256_digest_hex(const char **pdigesthex, apr_pool_t *p, const md_data *data) { md_data *digest; apr_status_t rv; if (APR_SUCCESS == (rv = sha256_digest(&digest, p, data))) { return md_data_to_hex(pdigesthex, 0, p, digest); } *pdigesthex = NULL; return rv; } /**************************************************************************************************/ /* certificates */ struct md_cert_t { apr_pool_t *pool; X509 *x509; apr_array_header_t *alt_names; }; static apr_status_t cert_cleanup(void *data) { md_cert_t *cert = data; if (cert->x509) { X509_free(cert->x509); cert->x509 = NULL; } return APR_SUCCESS; } static md_cert_t *make_cert(apr_pool_t *p, X509 *x509) { md_cert_t *cert = apr_pcalloc(p, sizeof(*cert)); cert->pool = p; cert->x509 = x509; apr_pool_cleanup_register(p, cert, cert_cleanup, apr_pool_cleanup_null); return cert; } void md_cert_free(md_cert_t *cert) { cert_cleanup(cert); } void *md_cert_get_X509(const md_cert_t *cert) { return cert->x509; } const char *md_cert_get_serial_number(const md_cert_t *cert, apr_pool_t *p) { const char *s = ""; const ASN1_INTEGER *ai = X509_get_serialNumber(cert->x509); if (ai) { BIGNUM *bn; const char *hex; bn = ASN1_INTEGER_to_BN(ai, NULL); hex = BN_bn2hex(bn); s = apr_pstrdup(p, hex); OPENSSL_free((void*)bn); OPENSSL_free((void*)hex); } return s; } int md_cert_is_valid_now(const md_cert_t *cert) { return ((X509_cmp_current_time(X509_get_notBefore(cert->x509)) < 0) && (X509_cmp_current_time(X509_get_notAfter(cert->x509)) > 0)); } int md_cert_has_expired(const md_cert_t *cert) { return (X509_cmp_current_time(X509_get_notAfter(cert->x509)) <= 0); } apr_time_t md_cert_get_not_after(const md_cert_t *cert) { return md_asn1_time_get(X509_get_notAfter(cert->x509)); } apr_time_t md_cert_get_not_before(const md_cert_t *cert) { return md_asn1_time_get(X509_get_notBefore(cert->x509)); } int md_cert_covers_domain(md_cert_t *cert, const char *domain_name) { apr_array_header_t *alt_names; md_cert_get_alt_names(&alt_names, cert, cert->pool); if (alt_names) { return md_array_str_index(alt_names, domain_name, 0, 0) >= 0; } return 0; } int md_cert_covers_md(md_cert_t *cert, const md_t *md) { const char *name; int i; if (!cert->alt_names) { md_cert_get_alt_names(&cert->alt_names, cert, cert->pool); } if (cert->alt_names) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE4, 0, cert->pool, "cert has %d alt names", cert->alt_names->nelts); for (i = 0; i < md->domains->nelts; ++i) { name = APR_ARRAY_IDX(md->domains, i, const char *); if (!md_dns_domains_match(cert->alt_names, name)) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, cert->pool, "md domain %s not covered by cert", name); return 0; } } return 1; } else { md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, 0, cert->pool, "cert has NO alt names"); } return 0; } apr_status_t md_cert_get_issuers_uri(const char **puri, const md_cert_t *cert, apr_pool_t *p) { apr_status_t rv = APR_ENOENT; STACK_OF(ACCESS_DESCRIPTION) *xinfos; const char *uri = NULL; unsigned char *buf; int i; xinfos = X509_get_ext_d2i(cert->x509, NID_info_access, NULL, NULL); if (xinfos) { for (i = 0; i < sk_ACCESS_DESCRIPTION_num(xinfos); i++) { ACCESS_DESCRIPTION *val = sk_ACCESS_DESCRIPTION_value(xinfos, i); if (OBJ_obj2nid(val->method) == NID_ad_ca_issuers && val->location && val->location->type == GEN_URI) { ASN1_STRING_to_UTF8(&buf, val->location->d.uniformResourceIdentifier); uri = apr_pstrdup(p, (char *)buf); OPENSSL_free(buf); rv = APR_SUCCESS; break; } } sk_ACCESS_DESCRIPTION_pop_free(xinfos, ACCESS_DESCRIPTION_free); } *puri = (APR_SUCCESS == rv)? uri : NULL; return rv; } apr_status_t md_cert_get_alt_names(apr_array_header_t **pnames, const md_cert_t *cert, apr_pool_t *p) { apr_array_header_t *names; apr_status_t rv = APR_ENOENT; STACK_OF(GENERAL_NAME) *xalt_names; unsigned char *buf; int i; xalt_names = X509_get_ext_d2i(cert->x509, NID_subject_alt_name, NULL, NULL); if (xalt_names) { GENERAL_NAME *cval; names = apr_array_make(p, sk_GENERAL_NAME_num(xalt_names), sizeof(char *)); for (i = 0; i < sk_GENERAL_NAME_num(xalt_names); ++i) { cval = sk_GENERAL_NAME_value(xalt_names, i); switch (cval->type) { case GEN_DNS: case GEN_URI: case GEN_IPADD: ASN1_STRING_to_UTF8(&buf, cval->d.ia5); APR_ARRAY_PUSH(names, const char *) = apr_pstrdup(p, (char*)buf); OPENSSL_free(buf); break; default: break; } } sk_GENERAL_NAME_pop_free(xalt_names, GENERAL_NAME_free); rv = APR_SUCCESS; } *pnames = (APR_SUCCESS == rv)? names : NULL; return rv; } apr_status_t md_cert_fload(md_cert_t **pcert, apr_pool_t *p, const char *fname) { FILE *f; apr_status_t rv; md_cert_t *cert; X509 *x509; rv = md_util_fopen(&f, fname, "r"); if (rv == APR_SUCCESS) { x509 = PEM_read_X509(f, NULL, NULL, NULL); rv = fclose(f); if (x509 != NULL) { cert = make_cert(p, x509); } else { rv = APR_EINVAL; } } *pcert = (APR_SUCCESS == rv)? cert : NULL; return rv; } static apr_status_t cert_to_buffer(md_data *buffer, const md_cert_t *cert, apr_pool_t *p) { BIO *bio = BIO_new(BIO_s_mem()); int i; if (!bio) { return APR_ENOMEM; } ERR_clear_error(); PEM_write_bio_X509(bio, cert->x509); if (ERR_get_error() > 0) { BIO_free(bio); return APR_EINVAL; } i = BIO_pending(bio); if (i > 0) { buffer->data = apr_palloc(p, (apr_size_t)i); i = BIO_read(bio, (char*)buffer->data, i); buffer->len = (apr_size_t)i; } BIO_free(bio); return APR_SUCCESS; } apr_status_t md_cert_fsave(md_cert_t *cert, apr_pool_t *p, const char *fname, apr_fileperms_t perms) { md_data buffer; apr_status_t rv; if (APR_SUCCESS == (rv = cert_to_buffer(&buffer, cert, p))) { return md_util_freplace(fname, perms, p, fwrite_buffer, &buffer); } return rv; } apr_status_t md_cert_to_base64url(const char **ps64, const md_cert_t *cert, apr_pool_t *p) { md_data buffer; apr_status_t rv; if (APR_SUCCESS == (rv = cert_to_buffer(&buffer, cert, p))) { *ps64 = md_util_base64url_encode(buffer.data, buffer.len, p); return APR_SUCCESS; } *ps64 = NULL; return rv; } apr_status_t md_cert_to_sha256_digest(md_data **pdigest, const md_cert_t *cert, apr_pool_t *p) { md_data *digest; unsigned int dlen; apr_status_t rv = APR_ENOMEM; digest = apr_palloc(p, sizeof(*digest)); if (!digest) goto leave; digest->data = apr_pcalloc(p, EVP_MAX_MD_SIZE); if (!digest->data) goto leave; X509_digest(cert->x509, EVP_sha256(), (unsigned char*)digest->data, &dlen); digest->len = dlen; rv = APR_SUCCESS; leave: *pdigest = (APR_SUCCESS == rv)? digest : NULL; return rv; } apr_status_t md_cert_to_sha256_fingerprint(const char **pfinger, const md_cert_t *cert, apr_pool_t *p) { md_data *digest; apr_status_t rv; rv = md_cert_to_sha256_digest(&digest, cert, p); if (APR_SUCCESS == rv) { return md_data_to_hex(pfinger, 0, p, digest); } *pfinger = NULL; return rv; } static int md_cert_read_pem(BIO *bf, apr_pool_t *p, md_cert_t **pcert) { md_cert_t *cert; X509 *x509; apr_status_t rv; ERR_clear_error(); x509 = PEM_read_bio_X509(bf, NULL, NULL, NULL); if (x509 == NULL) { rv = APR_ENOENT; goto out; } cert = make_cert(p, x509); rv = APR_SUCCESS; out: *pcert = (APR_SUCCESS == rv)? cert : NULL; return rv; } apr_status_t md_cert_read_http(md_cert_t **pcert, apr_pool_t *p, const md_http_response_t *res) { const char *ct; apr_off_t data_len; char *der; apr_size_t der_len; md_cert_t *cert = NULL; apr_status_t rv; ct = apr_table_get(res->headers, "Content-Type"); if (!res->body || !ct || strcmp("application/pkix-cert", ct)) { rv = APR_ENOENT; goto out; } if (APR_SUCCESS == (rv = apr_brigade_length(res->body, 1, &data_len))) { if (data_len > 1024*1024) { /* certs usually are <2k each */ return APR_EINVAL; } if (APR_SUCCESS == (rv = apr_brigade_pflatten(res->body, &der, &der_len, res->req->pool))) { const unsigned char *bf = (const unsigned char*)der; X509 *x509; if (NULL == (x509 = d2i_X509(NULL, &bf, (long)der_len))) { rv = APR_EINVAL; goto out; } else { cert = make_cert(p, x509); rv = APR_SUCCESS; md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, rv, p, "cert parsed"); } } } out: *pcert = (APR_SUCCESS == rv)? cert : NULL; return rv; } apr_status_t md_cert_chain_read_http(struct apr_array_header_t *chain, apr_pool_t *p, const struct md_http_response_t *res) { const char *ct; apr_off_t blen; apr_size_t data_len; char *data; BIO *bf = NULL; apr_status_t rv; if (APR_SUCCESS != (rv = apr_brigade_length(res->body, 1, &blen))) goto out; if (blen > 1024*1024) { /* certs usually are <2k each */ rv = APR_EINVAL; goto out; } data_len = (apr_size_t)blen; ct = apr_table_get(res->headers, "Content-Type"); if (!res->body || !ct) { rv = APR_ENOENT; goto out; } else if (!strcmp("application/pem-certificate-chain", ct)) { if (APR_SUCCESS == (rv = apr_brigade_pflatten(res->body, &data, &data_len, res->req->pool))) { int added = 0; md_cert_t *cert; if (NULL == (bf = BIO_new_mem_buf(data, (int)data_len))) { rv = APR_ENOMEM; goto out; } while (APR_SUCCESS == (rv = md_cert_read_pem(bf, p, &cert))) { APR_ARRAY_PUSH(chain, md_cert_t *) = cert; added = 1; } if (APR_ENOENT == rv && added) { rv = APR_SUCCESS; } } md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, rv, p, "cert parsed"); } else if (!strcmp("application/pkix-cert", ct)) { md_cert_t *cert; rv = md_cert_read_http(&cert, p, res); if (APR_SUCCESS == rv) { APR_ARRAY_PUSH(chain, md_cert_t *) = cert; } } else { /* unrecongized content type */ rv = APR_ENOENT; goto out; } out: if (bf) BIO_free(bf); return rv; } md_cert_state_t md_cert_state_get(const md_cert_t *cert) { if (cert->x509) { return md_cert_is_valid_now(cert)? MD_CERT_VALID : MD_CERT_EXPIRED; } return MD_CERT_UNKNOWN; } apr_status_t md_chain_fappend(struct apr_array_header_t *certs, apr_pool_t *p, const char *fname) { FILE *f; apr_status_t rv; X509 *x509; md_cert_t *cert; unsigned long err; rv = md_util_fopen(&f, fname, "r"); if (rv == APR_SUCCESS) { ERR_clear_error(); while (NULL != (x509 = PEM_read_X509(f, NULL, NULL, NULL))) { cert = make_cert(p, x509); APR_ARRAY_PUSH(certs, md_cert_t *) = cert; } fclose(f); if (0 < (err = ERR_get_error()) && !(ERR_GET_LIB(err) == ERR_LIB_PEM && ERR_GET_REASON(err) == PEM_R_NO_START_LINE)) { /* not the expected one when no more PEM encodings are found */ rv = APR_EINVAL; goto out; } if (certs->nelts == 0) { /* Did not find any. This is acceptable unless the file has a certain size * when we no longer accept it as empty chain file. Something seems to be * wrong then. */ apr_finfo_t info; if (APR_SUCCESS == apr_stat(&info, fname, APR_FINFO_SIZE, p) && info.size >= 1024) { /* "Too big for a moon." */ rv = APR_EINVAL; md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "no certificates in non-empty chain %s", fname); goto out; } } } out: md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, rv, p, "read chain file %s, found %d certs", fname, certs? certs->nelts : 0); return rv; } apr_status_t md_chain_fload(apr_array_header_t **pcerts, apr_pool_t *p, const char *fname) { apr_array_header_t *certs; apr_status_t rv; certs = apr_array_make(p, 5, sizeof(md_cert_t *)); rv = md_chain_fappend(certs, p, fname); *pcerts = (APR_SUCCESS == rv)? certs : NULL; return rv; } apr_status_t md_chain_fsave(apr_array_header_t *certs, apr_pool_t *p, const char *fname, apr_fileperms_t perms) { FILE *f; apr_status_t rv; const md_cert_t *cert; unsigned long err = 0; int i; (void)p; rv = md_util_fopen(&f, fname, "w"); if (rv == APR_SUCCESS) { apr_file_perms_set(fname, perms); ERR_clear_error(); for (i = 0; i < certs->nelts; ++i) { cert = APR_ARRAY_IDX(certs, i, const md_cert_t *); assert(cert->x509); PEM_write_X509(f, cert->x509); if (0 < (err = ERR_get_error())) { break; } } rv = fclose(f); if (err) { rv = APR_EINVAL; } } return rv; } /**************************************************************************************************/ /* certificate signing requests */ static const char *alt_names(apr_array_header_t *domains, apr_pool_t *p) { const char *alts = "", *sep = "", *domain; int i; for (i = 0; i < domains->nelts; ++i) { domain = APR_ARRAY_IDX(domains, i, const char *); alts = apr_psprintf(p, "%s%sDNS:%s", alts, sep, domain); sep = ","; } return alts; } static apr_status_t add_ext(X509 *x, int nid, const char *value, apr_pool_t *p) { X509_EXTENSION *ext = NULL; X509V3_CTX ctx; apr_status_t rv; ERR_clear_error(); X509V3_set_ctx_nodb(&ctx); X509V3_set_ctx(&ctx, x, x, NULL, NULL, 0); if (NULL == (ext = X509V3_EXT_conf_nid(NULL, &ctx, nid, (char*)value))) { unsigned long err = ERR_get_error(); md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "add_ext, create, nid=%d value='%s' " "(lib=%d, reason=%d)", nid, value, ERR_GET_LIB(err), ERR_GET_REASON(err)); return APR_EGENERAL; } ERR_clear_error(); rv = X509_add_ext(x, ext, -1)? APR_SUCCESS : APR_EINVAL; if (APR_SUCCESS != rv) { unsigned long err = ERR_get_error(); md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "add_ext, add, nid=%d value='%s' " "(lib=%d, reason=%d)", nid, value, ERR_GET_LIB(err), ERR_GET_REASON(err)); } X509_EXTENSION_free(ext); return rv; } static apr_status_t sk_add_alt_names(STACK_OF(X509_EXTENSION) *exts, apr_array_header_t *domains, apr_pool_t *p) { if (domains->nelts > 0) { X509_EXTENSION *x; x = X509V3_EXT_conf_nid(NULL, NULL, NID_subject_alt_name, (char*)alt_names(domains, p)); if (NULL == x) { return APR_EGENERAL; } sk_X509_EXTENSION_push(exts, x); } return APR_SUCCESS; } #define MD_OID_MUST_STAPLE_NUM "1.3.6.1.5.5.7.1.24" #define MD_OID_MUST_STAPLE_SNAME "tlsfeature" #define MD_OID_MUST_STAPLE_LNAME "TLS Feature" static int get_must_staple_nid(void) { /* Funny API, the OID for must staple might be configured or * might be not. In the second case, we need to add it. But adding * when it already is there is an error... */ int nid = OBJ_txt2nid(MD_OID_MUST_STAPLE_NUM); if (NID_undef == nid) { nid = OBJ_create(MD_OID_MUST_STAPLE_NUM, MD_OID_MUST_STAPLE_SNAME, MD_OID_MUST_STAPLE_LNAME); } return nid; } int md_cert_must_staple(const md_cert_t *cert) { /* In case we do not get the NID for it, we treat this as not set. */ int nid = get_must_staple_nid(); return ((NID_undef != nid)) && X509_get_ext_by_NID(cert->x509, nid, -1) >= 0; } static apr_status_t add_must_staple(STACK_OF(X509_EXTENSION) *exts, const char *name, apr_pool_t *p) { X509_EXTENSION *x; int nid; nid = get_must_staple_nid(); if (NID_undef == nid) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "%s: unable to get NID for v3 must-staple TLS feature", name); return APR_ENOTIMPL; } x = X509V3_EXT_conf_nid(NULL, NULL, nid, (char*)"DER:30:03:02:01:05"); if (NULL == x) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "%s: unable to create x509 extension for must-staple", name); return APR_EGENERAL; } sk_X509_EXTENSION_push(exts, x); return APR_SUCCESS; } apr_status_t md_cert_req_create(const char **pcsr_der_64, const char *name, apr_array_header_t *domains, int must_staple, md_pkey_t *pkey, apr_pool_t *p) { const char *s, *csr_der, *csr_der_64 = NULL; const unsigned char *domain; X509_REQ *csr; X509_NAME *n = NULL; STACK_OF(X509_EXTENSION) *exts = NULL; apr_status_t rv; int csr_der_len; assert(domains->nelts > 0); if (NULL == (csr = X509_REQ_new()) || NULL == (exts = sk_X509_EXTENSION_new_null()) || NULL == (n = X509_NAME_new())) { rv = APR_ENOMEM; md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: openssl alloc X509 things", name); goto out; } /* subject name == first domain */ domain = APR_ARRAY_IDX(domains, 0, const unsigned char *); if (!X509_NAME_add_entry_by_txt(n, "CN", MBSTRING_ASC, domain, -1, -1, 0) || !X509_REQ_set_subject_name(csr, n)) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "%s: REQ name add entry", name); rv = APR_EGENERAL; goto out; } /* collect extensions, such as alt names and must staple */ if (APR_SUCCESS != (rv = sk_add_alt_names(exts, domains, p))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: collecting alt names", name); rv = APR_EGENERAL; goto out; } if (must_staple && APR_SUCCESS != (rv = add_must_staple(exts, name, p))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: you requested that a certificate " "is created with the 'must-staple' extension, however the SSL library was " "unable to initialized that extension. Please file a bug report on which platform " "and with which library this happens. To continue before this problem is resolved, " "configure 'MDMustStaple off' for your domains", name); rv = APR_EGENERAL; goto out; } /* add extensions to csr */ if (sk_X509_EXTENSION_num(exts) > 0 && !X509_REQ_add_extensions(csr, exts)) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: adding exts", name); rv = APR_EGENERAL; goto out; } /* add our key */ if (!X509_REQ_set_pubkey(csr, pkey->pkey)) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: set pkey in csr", name); rv = APR_EGENERAL; goto out; } /* sign, der encode and base64url encode */ if (!X509_REQ_sign(csr, pkey->pkey, EVP_sha256())) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: sign csr", name); rv = APR_EGENERAL; goto out; } if ((csr_der_len = i2d_X509_REQ(csr, NULL)) < 0) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: der length", name); rv = APR_EGENERAL; goto out; } s = csr_der = apr_pcalloc(p, (apr_size_t)csr_der_len + 1); if (i2d_X509_REQ(csr, (unsigned char**)&s) != csr_der_len) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: csr der enc", name); rv = APR_EGENERAL; goto out; } csr_der_64 = md_util_base64url_encode(csr_der, (apr_size_t)csr_der_len, p); rv = APR_SUCCESS; out: if (exts) { sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free); } if (csr) { X509_REQ_free(csr); } if (n) { X509_NAME_free(n); } *pcsr_der_64 = (APR_SUCCESS == rv)? csr_der_64 : NULL; return rv; } static apr_status_t mk_x509(X509 **px, md_pkey_t *pkey, const char *cn, apr_interval_time_t valid_for, apr_pool_t *p) { X509 *x = NULL; X509_NAME *n = NULL; BIGNUM *big_rnd = NULL; ASN1_INTEGER *asn1_rnd = NULL; unsigned char rnd[20]; int days; apr_status_t rv; if (NULL == (x = X509_new()) || NULL == (n = X509_NAME_new())) { rv = APR_ENOMEM; md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "%s: openssl alloc X509 things", cn); goto out; } if (APR_SUCCESS != (rv = md_rand_bytes(rnd, sizeof(rnd), p)) || !(big_rnd = BN_bin2bn(rnd, sizeof(rnd), NULL)) || !(asn1_rnd = BN_to_ASN1_INTEGER(big_rnd, NULL))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "%s: setup random serial", cn); rv = APR_EGENERAL; goto out; } if (!X509_set_serialNumber(x, asn1_rnd)) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "%s: set serial number", cn); rv = APR_EGENERAL; goto out; } if (1 != X509_set_version(x, 2L)) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "%s: setting x.509v3", cn); rv = APR_EGENERAL; goto out; } /* set common name and issuer */ if (!X509_NAME_add_entry_by_txt(n, "CN", MBSTRING_ASC, (const unsigned char*)cn, -1, -1, 0) || !X509_set_subject_name(x, n) || !X509_set_issuer_name(x, n)) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "%s: name add entry", cn); rv = APR_EGENERAL; goto out; } /* cert are unconstrained (but not very trustworthy) */ if (APR_SUCCESS != (rv = add_ext(x, NID_basic_constraints, "CA:FALSE, pathlen:0", p))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: set basic constraints ext", cn); goto out; } /* add our key */ if (!X509_set_pubkey(x, pkey->pkey)) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: set pkey in x509", cn); rv = APR_EGENERAL; goto out; } /* validity */ days = (int)((apr_time_sec(valid_for) + MD_SECS_PER_DAY - 1)/ MD_SECS_PER_DAY); if (!X509_set_notBefore(x, ASN1_TIME_set(NULL, time(NULL)))) { rv = APR_EGENERAL; goto out; } if (!X509_set_notAfter(x, ASN1_TIME_adj(NULL, time(NULL), days, 0))) { rv = APR_EGENERAL; goto out; } out: *px = (APR_SUCCESS == rv)? x : NULL; if (APR_SUCCESS != rv && x) X509_free(x); if (big_rnd) BN_free(big_rnd); if (asn1_rnd) ASN1_INTEGER_free(asn1_rnd); if (n) X509_NAME_free(n); return rv; } apr_status_t md_cert_self_sign(md_cert_t **pcert, const char *cn, apr_array_header_t *domains, md_pkey_t *pkey, apr_interval_time_t valid_for, apr_pool_t *p) { X509 *x; md_cert_t *cert = NULL; apr_status_t rv; assert(domains); if (APR_SUCCESS != (rv = mk_x509(&x, pkey, cn, valid_for, p))) goto out; /* add the domain as alt name */ if (APR_SUCCESS != (rv = add_ext(x, NID_subject_alt_name, alt_names(domains, p), p))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: set alt_name ext", cn); goto out; } /* sign with same key */ if (!X509_sign(x, pkey->pkey, EVP_sha256())) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: sign x509", cn); rv = APR_EGENERAL; goto out; } cert = make_cert(p, x); rv = APR_SUCCESS; out: *pcert = (APR_SUCCESS == rv)? cert : NULL; if (!cert && x) X509_free(x); return rv; } #define MD_OID_ACME_VALIDATION_NUM "1.3.6.1.5.5.7.1.31" #define MD_OID_ACME_VALIDATION_SNAME "pe-acmeIdentifier" #define MD_OID_ACME_VALIDATION_LNAME "ACME Identifier" static int get_acme_validation_nid(void) { int nid = OBJ_txt2nid(MD_OID_ACME_VALIDATION_NUM); if (NID_undef == nid) { nid = OBJ_create(MD_OID_ACME_VALIDATION_NUM, MD_OID_ACME_VALIDATION_SNAME, MD_OID_ACME_VALIDATION_LNAME); } return nid; } apr_status_t md_cert_make_tls_alpn_01(md_cert_t **pcert, const char *domain, const char *acme_id, md_pkey_t *pkey, apr_interval_time_t valid_for, apr_pool_t *p) { X509 *x; md_cert_t *cert = NULL; const char *alts; apr_status_t rv; if (APR_SUCCESS != (rv = mk_x509(&x, pkey, domain, valid_for, p))) goto out; /* add the domain as alt name */ alts = apr_psprintf(p, "DNS:%s", domain); if (APR_SUCCESS != (rv = add_ext(x, NID_subject_alt_name, alts, p))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: set alt_name ext", domain); goto out; } if (APR_SUCCESS != (rv = add_ext(x, get_acme_validation_nid(), acme_id, p))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: set pe-acmeIdentifier", domain); goto out; } /* sign with same key */ if (!X509_sign(x, pkey->pkey, EVP_sha256())) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "%s: sign x509", domain); rv = APR_EGENERAL; goto out; } cert = make_cert(p, x); rv = APR_SUCCESS; out: if (!cert && x) { X509_free(x); } *pcert = (APR_SUCCESS == rv)? cert : NULL; return rv; } #define MD_OID_CT_SCTS_NUM "1.3.6.1.4.1.11129.2.4.2" #define MD_OID_CT_SCTS_SNAME "CT-SCTs" #define MD_OID_CT_SCTS_LNAME "CT Certificate SCTs" #ifndef OPENSSL_NO_CT static int get_ct_scts_nid(void) { int nid = OBJ_txt2nid(MD_OID_CT_SCTS_NUM); if (NID_undef == nid) { nid = OBJ_create(MD_OID_CT_SCTS_NUM, MD_OID_CT_SCTS_SNAME, MD_OID_CT_SCTS_LNAME); } return nid; } #endif const char *md_nid_get_sname(int nid) { return OBJ_nid2sn(nid); } const char *md_nid_get_lname(int nid) { return OBJ_nid2ln(nid); } apr_status_t md_cert_get_ct_scts(apr_array_header_t *scts, apr_pool_t *p, const md_cert_t *cert) { #ifndef OPENSSL_NO_CT int nid, i, idx, critical; STACK_OF(SCT) *sct_list; SCT *sct_handle; md_sct *sct; size_t len; const char *data; nid = get_ct_scts_nid(); if (NID_undef == nid) return APR_ENOTIMPL; idx = -1; while (1) { sct_list = X509_get_ext_d2i(cert->x509, nid, &critical, &idx); if (sct_list) { for (i = 0; i < sk_SCT_num(sct_list); i++) { sct_handle = sk_SCT_value(sct_list, i); if (sct_handle) { sct = apr_pcalloc(p, sizeof(*sct)); sct->version = SCT_get_version(sct_handle); sct->timestamp = apr_time_from_msec(SCT_get_timestamp(sct_handle)); len = SCT_get0_log_id(sct_handle, (unsigned char**)&data); sct->logid = md_data_create(p, data, len); sct->signature_type_nid = SCT_get_signature_nid(sct_handle); len = SCT_get0_signature(sct_handle, (unsigned char**)&data); sct->signature = md_data_create(p, data, len); APR_ARRAY_PUSH(scts, md_sct*) = sct; } } } if (idx < 0) break; } md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, 0, p, "ct_sct, found %d SCT extensions", scts->nelts); return APR_SUCCESS; #else (void)scts; (void)p; (void)cert; return APR_ENOTIMPL; #endif } ��������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_status.c�����������������������������������������������������������������0000644�0000000�0000050�00000030027�13511051361�015451� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <stdlib.h> #include <apr_lib.h> #include <apr_strings.h> #include <apr_tables.h> #include <apr_time.h> #include <apr_date.h> #include "md_json.h" #include "md.h" #include "md_crypt.h" #include "md_log.h" #include "md_store.h" #include "md_result.h" #include "md_reg.h" #include "md_util.h" #include "md_status.h" #define MD_STATUS_WITH_SCTS 0 /**************************************************************************************************/ /* certificate status information */ static apr_status_t status_get_cert_json(md_json_t **pjson, const md_cert_t *cert, apr_pool_t *p) { char ts[APR_RFC822_DATE_LEN]; const char *finger; apr_status_t rv = APR_SUCCESS; md_json_t *json; json = md_json_create(p); apr_rfc822_date(ts, md_cert_get_not_before(cert)); md_json_sets(ts, json, MD_KEY_VALID_FROM, NULL); apr_rfc822_date(ts, md_cert_get_not_after(cert)); md_json_sets(ts, json, MD_KEY_VALID_UNTIL, NULL); md_json_sets(md_cert_get_serial_number(cert, p), json, MD_KEY_SERIAL, NULL); if (APR_SUCCESS != (rv = md_cert_to_sha256_fingerprint(&finger, cert, p))) goto leave; md_json_sets(finger, json, MD_KEY_SHA256_FINGERPRINT, NULL); #if MD_STATUS_WITH_SCTS do { apr_array_header_t *scts; const char *hex; const md_sct *sct; md_json_t *sctj; int i; scts = apr_array_make(p, 5, sizeof(const md_sct*)); if (APR_SUCCESS == md_cert_get_ct_scts(scts, p, cert)) { for (i = 0; i < scts->nelts; ++i) { sct = APR_ARRAY_IDX(scts, i, const md_sct*); sctj = md_json_create(p); apr_rfc822_date(ts, sct->timestamp); md_json_sets(ts, sctj, "signed", NULL); md_json_setl(sct->version, sctj, MD_KEY_VERSION, NULL); md_data_to_hex(&hex, 0, p, sct->logid); md_json_sets(hex, sctj, "logid", NULL); md_data_to_hex(&hex, 0, p, sct->signature); md_json_sets(hex, sctj, "signature", NULL); md_json_sets(md_nid_get_sname(sct->signature_type_nid), sctj, "signature-type", NULL); md_json_addj(sctj, json, "scts", NULL); } } while (0); #endif leave: *pjson = (APR_SUCCESS == rv)? json : NULL; return rv; } /**************************************************************************************************/ /* md status information */ static apr_status_t get_staging_cert_json(md_json_t **pjson, apr_pool_t *p, md_reg_t *reg, const md_t *md) { md_json_t *json = NULL; apr_array_header_t *certs; md_cert_t *cert; apr_status_t rv = APR_SUCCESS; rv = md_pubcert_load(md_reg_store_get(reg), MD_SG_STAGING, md->name, &certs, p); if (APR_STATUS_IS_ENOENT(rv)) { rv = APR_SUCCESS; goto leave; } else if (APR_SUCCESS != rv) { goto leave; } cert = APR_ARRAY_IDX(certs, 0, md_cert_t *); rv = status_get_cert_json(&json, cert, p); leave: *pjson = (APR_SUCCESS == rv)? json : NULL; return rv; } static apr_status_t job_loadj(md_json_t **pjson, const char *name, struct md_reg_t *reg, apr_pool_t *p) { md_store_t *store = md_reg_store_get(reg); return md_store_load_json(store, MD_SG_STAGING, name, MD_FN_JOB, pjson, p); } apr_status_t md_status_get_md_json(md_json_t **pjson, const md_t *md, md_reg_t *reg, apr_pool_t *p) { md_json_t *mdj, *jobj, *certj; int renew; const md_pubcert_t *pubcert; const md_cert_t *cert; apr_status_t rv = APR_SUCCESS; mdj = md_to_json(md, p); if (APR_SUCCESS == md_reg_get_pubcert(&pubcert, reg, md, p)) { cert = APR_ARRAY_IDX(pubcert->certs, 0, const md_cert_t*); if (APR_SUCCESS != (rv = status_get_cert_json(&certj, cert, p))) goto leave; md_json_setj(certj, mdj, MD_KEY_CERT, NULL); } renew = md_reg_should_renew(reg, md, p); md_json_setb(renew, mdj, MD_KEY_RENEW, NULL); if (renew) { rv = job_loadj(&jobj, md->name, reg, p); if (APR_SUCCESS == rv) { rv = get_staging_cert_json(&certj, p, reg, md); if (APR_SUCCESS != rv) goto leave; if (certj) md_json_setj(certj, jobj, MD_KEY_CERT, NULL); md_json_setj(jobj, mdj, MD_KEY_RENEWAL, NULL); } else if (APR_STATUS_IS_ENOENT(rv)) rv = APR_SUCCESS; else goto leave; } leave: *pjson = (APR_SUCCESS == rv)? mdj : NULL; return rv; } apr_status_t md_status_get_json(md_json_t **pjson, apr_array_header_t *mds, md_reg_t *reg, apr_pool_t *p) { md_json_t *json, *mdj; apr_status_t rv = APR_SUCCESS; const md_t *md; int i; json = md_json_create(p); md_json_sets(MOD_MD_VERSION, json, MD_KEY_VERSION, NULL); for (i = 0; i < mds->nelts; ++i) { md = APR_ARRAY_IDX(mds, i, const md_t *); rv = md_status_get_md_json(&mdj, md, reg, p); if (APR_SUCCESS != rv) goto leave; md_json_addj(mdj, json, MD_KEY_MDS, NULL); } leave: *pjson = (APR_SUCCESS == rv)? json : NULL; return rv; } /**************************************************************************************************/ /* drive job persistence */ md_job_t *md_job_make(apr_pool_t *p, const char *name) { md_job_t *job = apr_pcalloc(p, sizeof(*job)); job->name = apr_pstrdup(p, name); job->p = p; return job; } static void md_job_from_json(md_job_t *job, md_json_t *json, apr_pool_t *p) { const char *s; /* not good, this is malloced from a temp pool */ /*job->name = md_json_gets(json, MD_KEY_NAME, NULL);*/ job->finished = md_json_getb(json, MD_KEY_FINISHED, NULL); s = md_json_dups(p, json, MD_KEY_NEXT_RUN, NULL); if (s && *s) job->next_run = apr_date_parse_rfc(s); s = md_json_dups(p, json, MD_KEY_LAST_RUN, NULL); if (s && *s) job->last_run = apr_date_parse_rfc(s); s = md_json_dups(p, json, MD_KEY_VALID_FROM, NULL); if (s && *s) job->valid_from = apr_date_parse_rfc(s); job->error_runs = (int)md_json_getl(json, MD_KEY_ERRORS, NULL); if (md_json_has_key(json, MD_KEY_LAST, NULL)) { job->last_result = md_result_from_json(md_json_getcj(json, MD_KEY_LAST, NULL), p); } job->log = md_json_getj(json, MD_KEY_LOG, NULL); } static void job_to_json(md_json_t *json, const md_job_t *job, md_result_t *result, apr_pool_t *p) { char ts[APR_RFC822_DATE_LEN]; md_json_sets(job->name, json, MD_KEY_NAME, NULL); md_json_setb(job->finished, json, MD_KEY_FINISHED, NULL); if (job->next_run > 0) { apr_rfc822_date(ts, job->next_run); md_json_sets(ts, json, MD_KEY_NEXT_RUN, NULL); } if (job->last_run > 0) { apr_rfc822_date(ts, job->last_run); md_json_sets(ts, json, MD_KEY_LAST_RUN, NULL); } if (job->valid_from > 0) { apr_rfc822_date(ts, job->valid_from); md_json_sets(ts, json, MD_KEY_VALID_FROM, NULL); } md_json_setl(job->error_runs, json, MD_KEY_ERRORS, NULL); if (!result) result = job->last_result; if (result) { md_json_setj(md_result_to_json(result, p), json, MD_KEY_LAST, NULL); } if (job->log) md_json_setj(job->log, json, MD_KEY_LOG, NULL); } apr_status_t md_job_load(md_job_t *job, md_reg_t *reg, md_store_group_t group, apr_pool_t *p) { md_store_t *store = md_reg_store_get(reg); md_json_t *jprops; apr_status_t rv; rv = md_store_load_json(store, group, job->name, MD_FN_JOB, &jprops, p); if (APR_SUCCESS == rv) { md_job_from_json(job, jprops, p); } return rv; } apr_status_t md_job_save(md_job_t *job, struct md_reg_t *reg, md_store_group_t group, md_result_t *result, apr_pool_t *p) { md_store_t *store = md_reg_store_get(reg); md_json_t *jprops; apr_status_t rv; jprops = md_json_create(p); job_to_json(jprops, job, result, p); rv = md_store_save_json(store, p, group, job->name, MD_FN_JOB, jprops, 0); return rv; } void md_job_log_append(md_job_t *job, const char *type, const char *status, const char *detail) { md_json_t *entry; char ts[APR_RFC822_DATE_LEN]; entry = md_json_create(job->p); apr_rfc822_date(ts, apr_time_now()); md_json_sets(ts, entry, MD_KEY_WHEN, NULL); md_json_sets(type, entry, MD_KEY_TYPE, NULL); if (status) md_json_sets(status, entry, MD_KEY_STATUS, NULL); if (detail) md_json_sets(detail, entry, MD_KEY_DETAIL, NULL); if (!job->log) job->log = md_json_create(job->p); md_json_insertj(entry, 0, job->log, MD_KEY_ENTRIES, NULL); } typedef struct { md_job_t *job; const char *type; md_json_t *entry; size_t index; } log_find_ctx; static int find_first_log_entry(void *baton, size_t index, md_json_t *entry) { log_find_ctx *ctx = baton; const char *etype; etype = md_json_gets(entry, MD_KEY_TYPE, NULL); if (etype == ctx->type || (etype && ctx->type && !strcmp(etype, ctx->type))) { ctx->entry = entry; ctx->index = index; return 0; } return 1; } md_json_t *md_job_log_get_latest(md_job_t *job, const char *type) { log_find_ctx ctx; ctx.job = job; ctx.type = type; memset(&ctx, 0, sizeof(ctx)); if (job->log) md_json_itera(find_first_log_entry, &ctx, job->log, MD_KEY_ENTRIES, NULL); return ctx.entry; } apr_time_t md_job_log_get_time_of_latest(md_job_t *job, const char *type) { md_json_t *entry; const char *s; entry = md_job_log_get_latest(job, type); if (entry) { s = md_json_gets(entry, MD_KEY_WHEN, NULL); if (s) return apr_date_parse_rfc(s); } return 0; } void md_status_take_stock(md_json_t **pjson, apr_array_header_t *mds, md_reg_t *reg, apr_pool_t *p) { const md_t *md; md_job_t job; int i, complete, renewing, errored, ready, total; md_json_t *json; json = md_json_create(p); complete = renewing = errored = ready = total = 0; for (i = 0; i < mds->nelts; ++i) { md = APR_ARRAY_IDX(mds, i, const md_t *); ++total; switch (md->state) { case MD_S_COMPLETE: ++complete; /* fall through */ case MD_S_INCOMPLETE: if (md_reg_should_renew(reg, md, p)) { ++renewing; memset(&job, 0, sizeof(job)); job.name = md->name; if (APR_SUCCESS == md_job_load(&job, reg, MD_SG_STAGING, p)) { if (job.error_runs > 0 || (job.last_result && job.last_result->status != APR_SUCCESS)) { ++errored; } else if (job.finished) { ++ready; } } } break; default: ++errored; break; } } md_json_setl(total, json, MD_KEY_TOTAL, NULL); md_json_setl(complete, json, MD_KEY_COMPLETE, NULL); md_json_setl(renewing, json, MD_KEY_RENEWING, NULL); md_json_setl(errored, json, MD_KEY_ERRORED, NULL); md_json_setl(ready, json, MD_KEY_READY, NULL); *pjson = json; } ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_json.c�������������������������������������������������������������������0000644�0000000�0000050�00000064770�13511051361�015113� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <apr_lib.h> #include <apr_strings.h> #include <apr_buckets.h> #include "md_json.h" #include "md_log.h" #include "md_http.h" #include "md_util.h" /* jansson thinks everyone compiles with the platform's cc in its fullest capabilities * when undefining their INLINEs, we get static, unused functions, arg */ #if defined(__GNUC__) #if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6) #pragma GCC diagnostic push #endif #pragma GCC diagnostic ignored "-Wunused-function" #pragma GCC diagnostic ignored "-Wunreachable-code" #elif defined(__clang__) #pragma clang diagnostic push #pragma clang diagnostic ignored "-Wunused-function" #endif #include <jansson_config.h> #undef JSON_INLINE #define JSON_INLINE #include <jansson.h> #if defined(__GNUC__) #if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6) #pragma GCC diagnostic pop #endif #elif defined(__clang__) #pragma clang diagnostic pop #endif struct md_json_t { apr_pool_t *p; json_t *j; }; /**************************************************************************************************/ /* lifecycle */ static apr_status_t json_pool_cleanup(void *data) { md_json_t *json = data; if (json) { md_json_destroy(json); } return APR_SUCCESS; } static md_json_t *json_create(apr_pool_t *pool, json_t *j) { md_json_t *json; if (!j) { apr_abortfunc_t abfn = apr_pool_abort_get(pool); if (abfn) { abfn(APR_ENOMEM); } assert(j != NULL); /* failsafe in case abort is unset */ } json = apr_pcalloc(pool, sizeof(*json)); json->p = pool; json->j = j; apr_pool_cleanup_register(pool, json, json_pool_cleanup, apr_pool_cleanup_null); return json; } md_json_t *md_json_create(apr_pool_t *pool) { return json_create(pool, json_object()); } md_json_t *md_json_create_s(apr_pool_t *pool, const char *s) { return json_create(pool, json_string(s)); } void md_json_destroy(md_json_t *json) { if (json && json->j) { assert(json->j->refcount > 0); json_decref(json->j); json->j = NULL; } } md_json_t *md_json_copy(apr_pool_t *pool, md_json_t *json) { return json_create(pool, json_copy(json->j)); } md_json_t *md_json_clone(apr_pool_t *pool, md_json_t *json) { return json_create(pool, json_deep_copy(json->j)); } /**************************************************************************************************/ /* selectors */ static json_t *jselect(const md_json_t *json, va_list ap) { json_t *j; const char *key; j = json->j; key = va_arg(ap, char *); while (key && j) { j = json_object_get(j, key); key = va_arg(ap, char *); } return j; } static json_t *jselect_parent(const char **child_key, int create, md_json_t *json, va_list ap) { const char *key, *next; json_t *j, *jn; *child_key = NULL; j = json->j; key = va_arg(ap, char *); while (key && j) { next = va_arg(ap, char *); if (next) { jn = json_object_get(j, key); if (!jn && create) { jn = json_object(); json_object_set_new(j, key, jn); } j = jn; } else { *child_key = key; } key = next; } return j; } static apr_status_t jselect_add(json_t *val, md_json_t *json, va_list ap) { const char *key; json_t *j, *aj; j = jselect_parent(&key, 1, json, ap); if (!j || !json_is_object(j)) { json_decref(val); return APR_EINVAL; } aj = json_object_get(j, key); if (!aj) { aj = json_array(); json_object_set_new(j, key, aj); } if (!json_is_array(aj)) { json_decref(val); return APR_EINVAL; } json_array_append(aj, val); return APR_SUCCESS; } static apr_status_t jselect_insert(json_t *val, size_t index, md_json_t *json, va_list ap) { const char *key; json_t *j, *aj; j = jselect_parent(&key, 1, json, ap); if (!j || !json_is_object(j)) { json_decref(val); return APR_EINVAL; } aj = json_object_get(j, key); if (!aj) { aj = json_array(); json_object_set_new(j, key, aj); } if (!json_is_array(aj)) { json_decref(val); return APR_EINVAL; } if (json_array_size(aj) <= index) { json_array_append(aj, val); } else { json_array_insert(aj, index, val); } return APR_SUCCESS; } static apr_status_t jselect_set(json_t *val, md_json_t *json, va_list ap) { const char *key; json_t *j; j = jselect_parent(&key, 1, json, ap); if (!j) { json_decref(val); return APR_EINVAL; } if (key) { if (!json_is_object(j)) { json_decref(val); return APR_EINVAL; } json_object_set(j, key, val); } else { /* replace */ if (json->j) { json_decref(json->j); } json_incref(val); json->j = val; } return APR_SUCCESS; } static apr_status_t jselect_set_new(json_t *val, md_json_t *json, va_list ap) { const char *key; json_t *j; j = jselect_parent(&key, 1, json, ap); if (!j) { json_decref(val); return APR_EINVAL; } if (key) { if (!json_is_object(j)) { json_decref(val); return APR_EINVAL; } json_object_set_new(j, key, val); } else { /* replace */ if (json->j) { json_decref(json->j); } json->j = val; } return APR_SUCCESS; } int md_json_has_key(const md_json_t *json, ...) { json_t *j; va_list ap; va_start(ap, json); j = jselect(json, ap); va_end(ap); return j != NULL; } /**************************************************************************************************/ /* type things */ int md_json_is(const md_json_type_t jtype, md_json_t *json, ...) { json_t *j; va_list ap; va_start(ap, json); j = jselect(json, ap); va_end(ap); switch (jtype) { case MD_JSON_TYPE_OBJECT: return (j && json_is_object(j)); case MD_JSON_TYPE_ARRAY: return (j && json_is_array(j)); case MD_JSON_TYPE_STRING: return (j && json_is_string(j)); case MD_JSON_TYPE_REAL: return (j && json_is_real(j)); case MD_JSON_TYPE_INT: return (j && json_is_integer(j)); case MD_JSON_TYPE_BOOL: return (j && (json_is_true(j) || json_is_false(j))); case MD_JSON_TYPE_NULL: return (j == NULL); } return 0; } /**************************************************************************************************/ /* booleans */ int md_json_getb(const md_json_t *json, ...) { json_t *j; va_list ap; va_start(ap, json); j = jselect(json, ap); va_end(ap); return j? json_is_true(j) : 0; } apr_status_t md_json_setb(int value, md_json_t *json, ...) { va_list ap; apr_status_t rv; va_start(ap, json); rv = jselect_set_new(json_boolean(value), json, ap); va_end(ap); return rv; } /**************************************************************************************************/ /* numbers */ double md_json_getn(const md_json_t *json, ...) { json_t *j; va_list ap; va_start(ap, json); j = jselect(json, ap); va_end(ap); return (j && json_is_number(j))? json_number_value(j) : 0.0; } apr_status_t md_json_setn(double value, md_json_t *json, ...) { va_list ap; apr_status_t rv; va_start(ap, json); rv = jselect_set_new(json_real(value), json, ap); va_end(ap); return rv; } /**************************************************************************************************/ /* longs */ long md_json_getl(const md_json_t *json, ...) { json_t *j; va_list ap; va_start(ap, json); j = jselect(json, ap); va_end(ap); return (long)((j && json_is_number(j))? json_integer_value(j) : 0L); } apr_status_t md_json_setl(long value, md_json_t *json, ...) { va_list ap; apr_status_t rv; va_start(ap, json); rv = jselect_set_new(json_integer(value), json, ap); va_end(ap); return rv; } /**************************************************************************************************/ /* strings */ const char *md_json_gets(const md_json_t *json, ...) { json_t *j; va_list ap; va_start(ap, json); j = jselect(json, ap); va_end(ap); return (j && json_is_string(j))? json_string_value(j) : NULL; } const char *md_json_dups(apr_pool_t *p, const md_json_t *json, ...) { json_t *j; va_list ap; va_start(ap, json); j = jselect(json, ap); va_end(ap); return (j && json_is_string(j))? apr_pstrdup(p, json_string_value(j)) : NULL; } apr_status_t md_json_sets(const char *value, md_json_t *json, ...) { va_list ap; apr_status_t rv; va_start(ap, json); rv = jselect_set_new(json_string(value), json, ap); va_end(ap); return rv; } /**************************************************************************************************/ /* json itself */ md_json_t *md_json_getj(md_json_t *json, ...) { json_t *j; va_list ap; va_start(ap, json); j = jselect(json, ap); va_end(ap); if (j) { if (j == json->j) { return json; } json_incref(j); return json_create(json->p, j); } return NULL; } const md_json_t *md_json_getcj(const md_json_t *json, ...) { json_t *j; va_list ap; va_start(ap, json); j = jselect(json, ap); va_end(ap); if (j) { if (j == json->j) { return json; } json_incref(j); return json_create(json->p, j); } return NULL; } apr_status_t md_json_setj(md_json_t *value, md_json_t *json, ...) { va_list ap; apr_status_t rv; const char *key; json_t *j; if (value) { va_start(ap, json); rv = jselect_set(value->j, json, ap); va_end(ap); } else { va_start(ap, json); j = jselect_parent(&key, 1, json, ap); va_end(ap); if (key && j && !json_is_object(j)) { json_object_del(j, key); rv = APR_SUCCESS; } else { rv = APR_EINVAL; } } return rv; } apr_status_t md_json_addj(md_json_t *value, md_json_t *json, ...) { va_list ap; apr_status_t rv; va_start(ap, json); rv = jselect_add(value->j, json, ap); va_end(ap); return rv; } apr_status_t md_json_insertj(md_json_t *value, size_t index, md_json_t *json, ...) { va_list ap; apr_status_t rv; va_start(ap, json); rv = jselect_insert(value->j, index, json, ap); va_end(ap); return rv; } /**************************************************************************************************/ /* arrays / objects */ apr_status_t md_json_clr(md_json_t *json, ...) { json_t *j; va_list ap; va_start(ap, json); j = jselect(json, ap); va_end(ap); if (j && json_is_object(j)) { json_object_clear(j); } else if (j && json_is_array(j)) { json_array_clear(j); } return APR_SUCCESS; } apr_status_t md_json_del(md_json_t *json, ...) { const char *key; json_t *j; va_list ap; va_start(ap, json); j = jselect_parent(&key, 0, json, ap); va_end(ap); if (key && j && json_is_object(j)) { json_object_del(j, key); } return APR_SUCCESS; } /**************************************************************************************************/ /* object strings */ apr_status_t md_json_gets_dict(apr_table_t *dict, const md_json_t *json, ...) { json_t *j; va_list ap; va_start(ap, json); j = jselect(json, ap); va_end(ap); if (j && json_is_object(j)) { const char *key; json_t *val; json_object_foreach(j, key, val) { if (json_is_string(val)) { apr_table_set(dict, key, json_string_value(val)); } } return APR_SUCCESS; } return APR_ENOENT; } static int object_set(void *data, const char *key, const char *val) { json_t *j = data, *nj = json_string(val); json_object_set(j, key, nj); json_decref(nj); return 1; } apr_status_t md_json_sets_dict(apr_table_t *dict, md_json_t *json, ...) { json_t *nj, *j; va_list ap; va_start(ap, json); j = jselect(json, ap); va_end(ap); if (!j || !json_is_object(j)) { const char *key; va_start(ap, json); j = jselect_parent(&key, 1, json, ap); va_end(ap); if (!key || !j || !json_is_object(j)) { return APR_EINVAL; } nj = json_object(); json_object_set_new(j, key, nj); j = nj; } apr_table_do(object_set, j, dict, NULL); return APR_SUCCESS; } /**************************************************************************************************/ /* conversions */ apr_status_t md_json_pass_to(void *value, md_json_t *json, apr_pool_t *p, void *baton) { (void)p; (void)baton; return md_json_setj(value, json, NULL); } apr_status_t md_json_pass_from(void **pvalue, md_json_t *json, apr_pool_t *p, void *baton) { (void)p; (void)baton; *pvalue = json; return APR_SUCCESS; } apr_status_t md_json_clone_to(void *value, md_json_t *json, apr_pool_t *p, void *baton) { (void)baton; return md_json_setj(md_json_clone(p, value), json, NULL); } apr_status_t md_json_clone_from(void **pvalue, md_json_t *json, apr_pool_t *p, void *baton) { (void)baton; *pvalue = md_json_clone(p, json); return APR_SUCCESS; } /**************************************************************************************************/ /* array generic */ apr_status_t md_json_geta(apr_array_header_t *a, md_json_from_cb *cb, void *baton, const md_json_t *json, ...) { json_t *j; va_list ap; apr_status_t rv = APR_SUCCESS; size_t index; json_t *val; md_json_t wrap; void *element; va_start(ap, json); j = jselect(json, ap); va_end(ap); if (!j || !json_is_array(j)) { return APR_ENOENT; } wrap.p = a->pool; json_array_foreach(j, index, val) { wrap.j = val; if (APR_SUCCESS == (rv = cb(&element, &wrap, wrap.p, baton))) { if (element) { APR_ARRAY_PUSH(a, void*) = element; } } else if (APR_ENOENT == rv) { rv = APR_SUCCESS; } else { break; } } return rv; } apr_status_t md_json_seta(apr_array_header_t *a, md_json_to_cb *cb, void *baton, md_json_t *json, ...) { json_t *j, *nj; md_json_t wrap; apr_status_t rv = APR_SUCCESS; va_list ap; int i; va_start(ap, json); j = jselect(json, ap); va_end(ap); if (!j || !json_is_array(j)) { const char *key; va_start(ap, json); j = jselect_parent(&key, 1, json, ap); va_end(ap); if (!key || !j || !json_is_object(j)) { return APR_EINVAL; } nj = json_array(); json_object_set_new(j, key, nj); j = nj; } json_array_clear(j); wrap.p = json->p; for (i = 0; i < a->nelts; ++i) { if (!cb) { return APR_EINVAL; } wrap.j = json_string(""); if (APR_SUCCESS == (rv = cb(APR_ARRAY_IDX(a, i, void*), &wrap, json->p, baton))) { json_array_append_new(j, wrap.j); } } return rv; } int md_json_itera(md_json_itera_cb *cb, void *baton, md_json_t *json, ...) { json_t *j; va_list ap; size_t index; json_t *val; md_json_t wrap; va_start(ap, json); j = jselect(json, ap); va_end(ap); if (!j || !json_is_array(j)) { return 0; } wrap.p = json->p; json_array_foreach(j, index, val) { wrap.j = val; if (!cb(baton, index, &wrap)) { return 0; } } return 1; } /**************************************************************************************************/ /* array strings */ apr_status_t md_json_getsa(apr_array_header_t *a, const md_json_t *json, ...) { json_t *j; va_list ap; va_start(ap, json); j = jselect(json, ap); va_end(ap); if (j && json_is_array(j)) { size_t index; json_t *val; json_array_foreach(j, index, val) { if (json_is_string(val)) { APR_ARRAY_PUSH(a, const char *) = json_string_value(val); } } return APR_SUCCESS; } return APR_ENOENT; } apr_status_t md_json_dupsa(apr_array_header_t *a, apr_pool_t *p, md_json_t *json, ...) { json_t *j; va_list ap; va_start(ap, json); j = jselect(json, ap); va_end(ap); if (j && json_is_array(j)) { size_t index; json_t *val; apr_array_clear(a); json_array_foreach(j, index, val) { if (json_is_string(val)) { APR_ARRAY_PUSH(a, const char *) = apr_pstrdup(p, json_string_value(val)); } } return APR_SUCCESS; } return APR_ENOENT; } apr_status_t md_json_setsa(apr_array_header_t *a, md_json_t *json, ...) { json_t *nj, *j; va_list ap; int i; va_start(ap, json); j = jselect(json, ap); va_end(ap); if (!j || !json_is_array(j)) { const char *key; va_start(ap, json); j = jselect_parent(&key, 1, json, ap); va_end(ap); if (!key || !j || !json_is_object(j)) { return APR_EINVAL; } nj = json_array(); json_object_set_new(j, key, nj); j = nj; } json_array_clear(j); for (i = 0; i < a->nelts; ++i) { json_array_append_new(j, json_string(APR_ARRAY_IDX(a, i, const char*))); } return APR_SUCCESS; } /**************************************************************************************************/ /* formatting, parsing */ typedef struct { md_json_t *json; md_json_fmt_t fmt; const char *fname; apr_file_t *f; } j_write_ctx; /* Convert from md_json_fmt_t to the Jansson json_dumpX flags. */ static size_t fmt_to_flags(md_json_fmt_t fmt) { /* NOTE: JSON_PRESERVE_ORDER is off by default before Jansson 2.8. It * doesn't have any semantic effect on the protocol, but it does let the * md_json_writeX unit tests run deterministically. */ return JSON_PRESERVE_ORDER | ((fmt == MD_JSON_FMT_COMPACT) ? JSON_COMPACT : JSON_INDENT(2)); } static int dump_cb(const char *buffer, size_t len, void *baton) { apr_bucket_brigade *bb = baton; apr_status_t rv; rv = apr_brigade_write(bb, NULL, NULL, buffer, len); return (rv == APR_SUCCESS)? 0 : -1; } apr_status_t md_json_writeb(md_json_t *json, md_json_fmt_t fmt, apr_bucket_brigade *bb) { int rv = json_dump_callback(json->j, dump_cb, bb, fmt_to_flags(fmt)); return rv? APR_EGENERAL : APR_SUCCESS; } static int chunk_cb(const char *buffer, size_t len, void *baton) { apr_array_header_t *chunks = baton; char *chunk = apr_pcalloc(chunks->pool, len+1); memcpy(chunk, buffer, len); APR_ARRAY_PUSH(chunks, const char *) = chunk; return 0; } const char *md_json_writep(md_json_t *json, apr_pool_t *p, md_json_fmt_t fmt) { apr_array_header_t *chunks; int rv; chunks = apr_array_make(p, 10, sizeof(char *)); rv = json_dump_callback(json->j, chunk_cb, chunks, fmt_to_flags(fmt)); if (APR_SUCCESS != rv) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "md_json_writep failed to dump JSON"); return NULL; } switch (chunks->nelts) { case 0: return ""; case 1: return APR_ARRAY_IDX(chunks, 0, const char *); default: return apr_array_pstrcat(p, chunks, 0); } } apr_status_t md_json_writef(md_json_t *json, apr_pool_t *p, md_json_fmt_t fmt, apr_file_t *f) { apr_status_t rv; const char *s; if ((s = md_json_writep(json, p, fmt))) { rv = apr_file_write_full(f, s, strlen(s), NULL); if (APR_SUCCESS != rv) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, json->p, "md_json_writef: error writing file"); } } else { rv = APR_EINVAL; md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, json->p, "md_json_writef: error dumping json"); } return rv; } apr_status_t md_json_fcreatex(md_json_t *json, apr_pool_t *p, md_json_fmt_t fmt, const char *fpath, apr_fileperms_t perms) { apr_status_t rv; apr_file_t *f; rv = md_util_fcreatex(&f, fpath, perms, p); if (APR_SUCCESS == rv) { rv = md_json_writef(json, p, fmt, f); apr_file_close(f); } return rv; } static apr_status_t write_json(void *baton, apr_file_t *f, apr_pool_t *p) { j_write_ctx *ctx = baton; apr_status_t rv = md_json_writef(ctx->json, p, ctx->fmt, f); if (APR_SUCCESS != rv) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "freplace json in %s", ctx->fname); } return rv; } apr_status_t md_json_freplace(md_json_t *json, apr_pool_t *p, md_json_fmt_t fmt, const char *fpath, apr_fileperms_t perms) { j_write_ctx ctx; ctx.json = json; ctx.fmt = fmt; ctx.fname = fpath; return md_util_freplace(fpath, perms, p, write_json, &ctx); } apr_status_t md_json_readd(md_json_t **pjson, apr_pool_t *pool, const char *data, size_t data_len) { json_error_t error; json_t *j; j = json_loadb(data, data_len, 0, &error); if (!j) { return APR_EINVAL; } *pjson = json_create(pool, j); return APR_SUCCESS; } static size_t load_cb(void *data, size_t max_len, void *baton) { apr_bucket_brigade *body = baton; size_t blen, read_len = 0; const char *bdata; char *dest = data; apr_bucket *b; apr_status_t rv; while (body && !APR_BRIGADE_EMPTY(body) && max_len > 0) { b = APR_BRIGADE_FIRST(body); if (APR_BUCKET_IS_METADATA(b)) { if (APR_BUCKET_IS_EOS(b)) { body = NULL; } } else { rv = apr_bucket_read(b, &bdata, &blen, APR_BLOCK_READ); if (rv == APR_SUCCESS) { if (blen > max_len) { apr_bucket_split(b, max_len); blen = max_len; } memcpy(dest, bdata, blen); read_len += blen; max_len -= blen; dest += blen; } else { body = NULL; if (!APR_STATUS_IS_EOF(rv)) { /* everything beside EOF is an error */ read_len = (size_t)-1; } } } APR_BUCKET_REMOVE(b); apr_bucket_delete(b); } return read_len; } apr_status_t md_json_readb(md_json_t **pjson, apr_pool_t *pool, apr_bucket_brigade *bb) { json_error_t error; json_t *j; j = json_load_callback(load_cb, bb, 0, &error); if (!j) { return APR_EINVAL; } *pjson = json_create(pool, j); return APR_SUCCESS; } static size_t load_file_cb(void *data, size_t max_len, void *baton) { apr_file_t *f = baton; apr_size_t len = max_len; apr_status_t rv; rv = apr_file_read(f, data, &len); if (APR_SUCCESS == rv) { return len; } else if (APR_EOF == rv) { return 0; } return (size_t)-1; } apr_status_t md_json_readf(md_json_t **pjson, apr_pool_t *p, const char *fpath) { apr_file_t *f; json_t *j; apr_status_t rv; json_error_t error; rv = apr_file_open(&f, fpath, APR_FOPEN_READ, 0, p); if (rv != APR_SUCCESS) { return rv; } j = json_load_callback(load_file_cb, f, 0, &error); if (j) { *pjson = json_create(p, j); } else { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "failed to load JSON file %s: %s (line %d:%d)", fpath, error.text, error.line, error.column); } apr_file_close(f); return (j && *pjson) ? APR_SUCCESS : APR_EINVAL; } /**************************************************************************************************/ /* http get */ apr_status_t md_json_read_http(md_json_t **pjson, apr_pool_t *pool, const md_http_response_t *res) { apr_status_t rv = APR_ENOENT; if (res->rv == APR_SUCCESS) { const char *ctype = apr_table_get(res->headers, "content-type"); if (ctype && res->body && (strstr(ctype, "/json") || strstr(ctype, "+json"))) { rv = md_json_readb(pjson, pool, res->body); } } return rv; } typedef struct { apr_status_t rv; apr_pool_t *pool; md_json_t *json; } resp_data; static apr_status_t json_resp_cb(const md_http_response_t *res) { resp_data *resp = res->req->baton; return md_json_read_http(&resp->json, resp->pool, res); } apr_status_t md_json_http_get(md_json_t **pjson, apr_pool_t *pool, struct md_http_t *http, const char *url) { apr_status_t rv; resp_data resp; memset(&resp, 0, sizeof(resp)); resp.pool = pool; rv = md_http_GET(http, url, NULL, json_resp_cb, &resp); if (rv == APR_SUCCESS) { *pjson = resp.json; return resp.rv; } *pjson = NULL; return rv; } apr_status_t md_json_copy_to(md_json_t *dest, const md_json_t *src, ...) { json_t *j; va_list ap; apr_status_t rv = APR_SUCCESS; va_start(ap, src); j = jselect(src, ap); va_end(ap); if (j) { va_start(ap, src); rv = jselect_set(j, dest, ap); va_end(ap); } return rv; } ��������httpd-2.4.41/modules/md/mod_md_status.c�������������������������������������������������������������0000644�0000000�0000050�00000044704�13511051361�016317� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <apr_optional.h> #include <apr_time.h> #include <apr_date.h> #include <apr_strings.h> #include <httpd.h> #include <http_core.h> #include <http_protocol.h> #include <http_request.h> #include <http_log.h> #include "mod_status.h" #include "md.h" #include "md_curl.h" #include "md_crypt.h" #include "md_http.h" #include "md_json.h" #include "md_status.h" #include "md_store.h" #include "md_store_fs.h" #include "md_log.h" #include "md_reg.h" #include "md_util.h" #include "md_version.h" #include "md_acme.h" #include "md_acme_authz.h" #include "mod_md.h" #include "mod_md_private.h" #include "mod_md_config.h" #include "mod_md_drive.h" #include "mod_md_status.h" /**************************************************************************************************/ /* Certificate status */ #define APACHE_PREFIX "/.httpd/" #define MD_STATUS_RESOURCE APACHE_PREFIX"certificate-status" int md_http_cert_status(request_rec *r) { md_json_t *resp, *j, *mdj, *certj; const md_srv_conf_t *sc; const md_t *md; apr_bucket_brigade *bb; apr_status_t rv; if (!r->parsed_uri.path || strcmp(MD_STATUS_RESOURCE, r->parsed_uri.path)) return DECLINED; ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "requesting status for: %s", r->hostname); /* We are looking for information about a staged certificate */ sc = ap_get_module_config(r->server->module_config, &md_module); if (!sc || !sc->mc || !sc->mc->reg || !sc->mc->certificate_status_enabled) return DECLINED; md = md_get_by_domain(sc->mc->mds, r->hostname); if (!md) return DECLINED; if (r->method_number != M_GET) { ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "md(%s): status supports only GET", md->name); return HTTP_NOT_IMPLEMENTED; } ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "requesting status for MD: %s", md->name); if (APR_SUCCESS != (rv = md_status_get_md_json(&mdj, md, sc->mc->reg, r->pool))) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(10175) "loading md status for %s", md->name); return HTTP_INTERNAL_SERVER_ERROR; } ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "status for MD: %s is %s", md->name, md_json_writep(mdj, r->pool, MD_JSON_FMT_INDENT)); resp = md_json_create(r->pool); if (md_json_has_key(mdj, MD_KEY_CERT, MD_KEY_VALID_UNTIL, NULL)) { md_json_sets(md_json_gets(mdj, MD_KEY_CERT, MD_KEY_VALID_UNTIL, NULL), resp, MD_KEY_VALID_UNTIL, NULL); } if (md_json_has_key(mdj, MD_KEY_CERT, MD_KEY_VALID_FROM, NULL)) { md_json_sets(md_json_gets(mdj, MD_KEY_CERT, MD_KEY_VALID_FROM, NULL), resp, MD_KEY_VALID_FROM, NULL); } if (md_json_has_key(mdj, MD_KEY_CERT, MD_KEY_SERIAL, NULL)) { md_json_sets(md_json_gets(mdj, MD_KEY_CERT, MD_KEY_SERIAL, NULL), resp, MD_KEY_SERIAL, NULL); } if (md_json_has_key(mdj, MD_KEY_CERT, MD_KEY_SHA256_FINGERPRINT, NULL)) { md_json_sets(md_json_gets(mdj, MD_KEY_CERT, MD_KEY_SHA256_FINGERPRINT, NULL), resp, MD_KEY_SHA256_FINGERPRINT, NULL); } if (md_json_has_key(mdj, MD_KEY_RENEWAL, NULL)) { /* copy over the information we want to make public about this: * - when not finished, add an empty object to indicate something is going on * - when a certificate is staged, add the information from that */ certj = md_json_getj(mdj, MD_KEY_RENEWAL, MD_KEY_CERT, NULL); j = certj? certj : md_json_create(r->pool);; md_json_setj(j, resp, MD_KEY_RENEWAL, NULL); } ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "md[%s]: sending status", md->name); apr_table_set(r->headers_out, "Content-Type", "application/json"); bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); md_json_writeb(resp, MD_JSON_FMT_INDENT, bb); ap_pass_brigade(r->output_filters, bb); apr_brigade_cleanup(bb); return DONE; } /**************************************************************************************************/ /* Status hook */ typedef struct { apr_pool_t *p; const md_mod_conf_t *mc; apr_bucket_brigade *bb; const char *separator; } status_ctx; typedef struct status_info status_info; static void add_json_val(status_ctx *ctx, md_json_t *j); typedef void add_status_fn(status_ctx *ctx, md_json_t *mdj, const status_info *info); struct status_info { const char *label; const char *key; add_status_fn *fn; }; static void si_val_status(status_ctx *ctx, md_json_t *mdj, const status_info *info) { const char *s = "unknown"; (void)info; switch (md_json_getl(mdj, MD_KEY_STATE, NULL)) { case MD_S_INCOMPLETE: s = "incomplete"; break; case MD_S_EXPIRED_DEPRECATED: case MD_S_COMPLETE: s = "ok"; break; case MD_S_ERROR: s = "error"; break; case MD_S_MISSING_INFORMATION: s = "missing information"; break; default: break; } apr_brigade_puts(ctx->bb, NULL, NULL, s); } static void si_val_renew_mode(status_ctx *ctx, md_json_t *mdj, const status_info *info) { const char *s; switch (md_json_getl(mdj, info->key, NULL)) { case MD_RENEW_MANUAL: s = "manual"; break; case MD_RENEW_ALWAYS: s = "always"; break; default: s = "auto"; break; } apr_brigade_puts(ctx->bb, NULL, NULL, s); } static void si_val_date(status_ctx *ctx, apr_time_t timestamp) { if (timestamp > 0) { char ts[128]; char ts2[128]; apr_time_exp_t texp; apr_size_t len; apr_time_exp_gmt(&texp, timestamp); apr_strftime(ts, &len, sizeof(ts)-1, "%Y-%m-%dT%H:%M:%SZ", &texp); ts[len] = '\0'; apr_strftime(ts2, &len, sizeof(ts2)-1, "%Y-%m-%d", &texp); ts2[len] = '\0'; apr_brigade_printf(ctx->bb, NULL, NULL, "<span title='%s' style='white-space: nowrap;'>%s</span>", ts, ts2); } else { apr_brigade_puts(ctx->bb, NULL, NULL, "-"); } } static void si_val_time(status_ctx *ctx, apr_time_t timestamp) { if (timestamp > 0) { char ts[128]; char ts2[128]; apr_time_exp_t texp; apr_size_t len; apr_time_exp_gmt(&texp, timestamp); apr_strftime(ts, &len, sizeof(ts)-1, "%Y-%m-%dT%H:%M:%SZ", &texp); ts[len] = '\0'; apr_strftime(ts2, &len, sizeof(ts2)-1, "%H:%M:%SZ", &texp); ts2[len] = '\0'; apr_brigade_printf(ctx->bb, NULL, NULL, "<span title='%s' style='white-space: nowrap;'>%s</span>", ts, ts2); } else { apr_brigade_puts(ctx->bb, NULL, NULL, "-"); } } static void si_val_expires(status_ctx *ctx, md_json_t *mdj, const status_info *info) { const char *s; apr_time_t t; (void)info; s = md_json_dups(ctx->p, mdj, MD_KEY_CERT, MD_KEY_VALID_UNTIL, NULL); if (s) { t = apr_date_parse_rfc(s); si_val_date(ctx, t); } } static void si_val_valid_from(status_ctx *ctx, md_json_t *mdj, const status_info *info) { const char *s; apr_time_t t; (void)info; s = md_json_dups(ctx->p, mdj, MD_KEY_CERT, MD_KEY_VALID_FROM, NULL); if (s) { t = apr_date_parse_rfc(s); si_val_date(ctx, t); } } static void si_val_props(status_ctx *ctx, md_json_t *mdj, const status_info *info) { const char *s, *url; md_pkey_type_t ptype; int i = 0; (void)info; if (md_json_getb(mdj, MD_KEY_MUST_STAPLE, NULL)) { ++i; apr_brigade_puts(ctx->bb, NULL, NULL, "must-staple"); } s = md_json_gets(mdj, MD_KEY_RENEW_WINDOW, NULL); if (s) { if (i++) apr_brigade_puts(ctx->bb, NULL, NULL, " \n"); apr_brigade_printf(ctx->bb, NULL, NULL, "renew-at[%s]", s); } url = s = md_json_gets(mdj, MD_KEY_CA, MD_KEY_URL, NULL); if (s) { if (i++) apr_brigade_puts(ctx->bb, NULL, NULL, " \n"); if (!strcmp(LE_ACMEv2_PROD, s)) s = "letsencrypt(v2)"; else if (!strcmp(LE_ACMEv1_PROD, s)) s = "letsencrypt(v1)"; else if (!strcmp(LE_ACMEv2_STAGING, s)) s = "letsencrypt(Testv2)"; else if (!strcmp(LE_ACMEv1_STAGING, s)) s = "letsencrypt(Testv1)"; apr_brigade_printf(ctx->bb, NULL, NULL, "ca=[<a href=\"%s\">%s</a>]", url, s); } if (md_json_has_key(mdj, MD_KEY_CONTACTS, NULL)) { if (i++) apr_brigade_puts(ctx->bb, NULL, NULL, " \n"); apr_brigade_puts(ctx->bb, NULL, NULL, "contacts=["); add_json_val(ctx, md_json_getj(mdj, MD_KEY_CONTACTS, NULL)); apr_brigade_puts(ctx->bb, NULL, NULL, "]"); } ptype = md_json_has_key(mdj, MD_KEY_PKEY, MD_KEY_TYPE, NULL)? (unsigned)md_json_getl(mdj, MD_KEY_PKEY, MD_KEY_TYPE, NULL) : MD_PKEY_TYPE_DEFAULT; switch (ptype) { case MD_PKEY_TYPE_RSA: if (i++) apr_brigade_puts(ctx->bb, NULL, NULL, " \n"); apr_brigade_printf(ctx->bb, NULL, NULL, "key[RSA(%u)]", (unsigned)md_json_getl(mdj, MD_KEY_PKEY, MD_PKEY_RSA_BITS_MIN, NULL)); default: break; } } static void si_val_renewal(status_ctx *ctx, md_json_t *mdj, const status_info *info) { char buffer[HUGE_STRING_LEN]; apr_status_t rv; int finished, errors; apr_time_t t; const char *s; (void)info; if (!md_json_has_key(mdj, MD_KEY_RENEWAL, NULL)) { return; } finished = (int)md_json_getl(mdj, MD_KEY_RENEWAL, MD_KEY_FINISHED, NULL); errors = (int)md_json_getl(mdj, MD_KEY_RENEWAL, MD_KEY_ERRORS, NULL); rv = (apr_status_t)md_json_getl(mdj, MD_KEY_RENEWAL, MD_KEY_LAST, MD_KEY_STATUS, NULL); if (rv != APR_SUCCESS) { s = md_json_gets(mdj, MD_KEY_RENEWAL, MD_KEY_LAST, MD_KEY_PROBLEM, NULL); apr_brigade_printf(ctx->bb, NULL, NULL, "Error[%s]: %s", apr_strerror(rv, buffer, sizeof(buffer)), s? s : ""); } if (finished) { apr_brigade_puts(ctx->bb, NULL, NULL, "Finished"); if (md_json_has_key(mdj, MD_KEY_RENEWAL, MD_KEY_VALID_FROM, NULL)) { s = md_json_gets(mdj, MD_KEY_RENEWAL, MD_KEY_VALID_FROM, NULL); t = apr_date_parse_rfc(s); apr_brigade_puts(ctx->bb, NULL, NULL, (apr_time_now() >= t)? ", valid since: " : ", activate at: "); si_val_time(ctx, t); } apr_brigade_puts(ctx->bb, NULL, NULL, "."); } s = md_json_gets(mdj, MD_KEY_RENEWAL, MD_KEY_LAST, MD_KEY_DETAIL, NULL); if (s) apr_brigade_puts(ctx->bb, NULL, NULL, s); errors = (int)md_json_getl(mdj, MD_KEY_ERRORS, NULL); if (errors > 0) { apr_brigade_printf(ctx->bb, NULL, NULL, ", Had %d errors.", errors); } s = md_json_gets(mdj, MD_KEY_RENEWAL, MD_KEY_NEXT_RUN, NULL); if (s) { t = apr_date_parse_rfc(s); apr_brigade_puts(ctx->bb, NULL, NULL, "Next attempt: "); si_val_time(ctx, t); apr_brigade_puts(ctx->bb, NULL, NULL, "."); } } static void si_val_remote_check(status_ctx *ctx, md_json_t *mdj, const status_info *info) { const char *fingerprint; (void)info; fingerprint = md_json_gets(mdj, MD_KEY_CERT, MD_KEY_SHA256_FINGERPRINT, NULL); if (fingerprint) { apr_brigade_printf(ctx->bb, NULL, NULL, "<a href=\"https://censys.io/certificates/%s\">censys.io</a> ", fingerprint); apr_brigade_printf(ctx->bb, NULL, NULL, "<a href=\"https://crt.sh?q=%s\">crt.sh</a> ", fingerprint); } } const status_info status_infos[] = { { "Name", MD_KEY_NAME, NULL }, { "Domains", MD_KEY_DOMAINS, NULL }, { "Status", MD_KEY_STATUS, si_val_status }, { "Valid", MD_KEY_VALID_FROM, si_val_valid_from }, { "Expires", MD_KEY_VALID_UNTIL, si_val_expires }, { "Renew", MD_KEY_RENEW_MODE, si_val_renew_mode }, { "Check@", MD_KEY_SHA256_FINGERPRINT, si_val_remote_check }, { "Configuration", MD_KEY_MUST_STAPLE, si_val_props }, { "Renewal", MD_KEY_NOTIFIED, si_val_renewal }, }; static int json_iter_val(void *data, size_t index, md_json_t *json) { status_ctx *ctx = data; if (index) apr_brigade_puts(ctx->bb, NULL, NULL, ctx->separator); add_json_val(ctx, json); return 1; } static void add_json_val(status_ctx *ctx, md_json_t *j) { if (!j) return; else if (md_json_is(MD_JSON_TYPE_ARRAY, j, NULL)) { md_json_itera(json_iter_val, ctx, j, NULL); } else if (md_json_is(MD_JSON_TYPE_INT, j, NULL)) { md_json_writeb(j, MD_JSON_FMT_COMPACT, ctx->bb); } else if (md_json_is(MD_JSON_TYPE_STRING, j, NULL)) { apr_brigade_puts(ctx->bb, NULL, NULL, md_json_gets(j, NULL)); } else if (md_json_is(MD_JSON_TYPE_OBJECT, j, NULL)) { md_json_writeb(j, MD_JSON_FMT_COMPACT, ctx->bb); } } static void add_status_cell(status_ctx *ctx, md_json_t *mdj, const status_info *info) { if (info->fn) { info->fn(ctx, mdj, info); } else { add_json_val(ctx, md_json_getj(mdj, info->key, NULL)); } } static int add_md_row(void *baton, apr_size_t index, md_json_t *mdj) { status_ctx *ctx = baton; int i; apr_brigade_printf(ctx->bb, NULL, NULL, "<tr class=\"%s\">", (index % 2)? "odd" : "even"); for (i = 0; i < (int)(sizeof(status_infos)/sizeof(status_infos[0])); ++i) { apr_brigade_puts(ctx->bb, NULL, NULL, "<td>"); add_status_cell(ctx, mdj, &status_infos[i]); apr_brigade_puts(ctx->bb, NULL, NULL, "</td>"); } apr_brigade_puts(ctx->bb, NULL, NULL, "</tr>"); return 1; } static int md_name_cmp(const void *v1, const void *v2) { return strcmp((*(const md_t**)v1)->name, (*(const md_t**)v2)->name); } int md_status_hook(request_rec *r, int flags) { const md_srv_conf_t *sc; const md_mod_conf_t *mc; int i, html; status_ctx ctx; apr_array_header_t *mds; md_json_t *jstatus, *jstock; sc = ap_get_module_config(r->server->module_config, &md_module); if (!sc) return DECLINED; mc = sc->mc; if (!mc || !mc->server_status_enabled) return DECLINED; html = !(flags & AP_STATUS_SHORT); ctx.p = r->pool; ctx.mc = mc; ctx.bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); ctx.separator = " "; mds = apr_array_copy(r->pool, mc->mds); qsort(mds->elts, (size_t)mds->nelts, sizeof(md_t *), md_name_cmp); if (!html) { apr_brigade_puts(ctx.bb, NULL, NULL, "ManagedDomains: "); if (mc->mds->nelts > 0) { md_status_take_stock(&jstock, mds, mc->reg, r->pool); apr_brigade_printf(ctx.bb, NULL, NULL, "total=%d, ok=%d renew=%d errored=%d ready=%d", (int)md_json_getl(jstock, MD_KEY_TOTAL, NULL), (int)md_json_getl(jstock, MD_KEY_COMPLETE, NULL), (int)md_json_getl(jstock, MD_KEY_RENEWING, NULL), (int)md_json_getl(jstock, MD_KEY_ERRORED, NULL), (int)md_json_getl(jstock, MD_KEY_READY, NULL)); } else { apr_brigade_puts(ctx.bb, NULL, NULL, "[]"); } apr_brigade_puts(ctx.bb, NULL, NULL, "\n"); } else if (mc->mds->nelts > 0) { md_status_get_json(&jstatus, mds, mc->reg, r->pool); apr_brigade_puts(ctx.bb, NULL, NULL, "<hr>\n<h2>Managed Domains</h2>\n<table class='md_status'><thead><tr>\n"); for (i = 0; i < (int)(sizeof(status_infos)/sizeof(status_infos[0])); ++i) { apr_brigade_puts(ctx.bb, NULL, NULL, "<th>"); apr_brigade_puts(ctx.bb, NULL, NULL, status_infos[i].label); apr_brigade_puts(ctx.bb, NULL, NULL, "</th>"); } apr_brigade_puts(ctx.bb, NULL, NULL, "</tr>\n</thead><tbody>"); md_json_itera(add_md_row, &ctx, jstatus, MD_KEY_MDS, NULL); apr_brigade_puts(ctx.bb, NULL, NULL, "</td></tr>\n</tbody>\n</table>\n"); } ap_pass_brigade(r->output_filters, ctx.bb); apr_brigade_cleanup(ctx.bb); return OK; } /**************************************************************************************************/ /* Status handler */ int md_status_handler(request_rec *r) { const md_srv_conf_t *sc; const md_mod_conf_t *mc; apr_array_header_t *mds; md_json_t *jstatus; apr_bucket_brigade *bb; const md_t *md; const char *name; if (strcmp(r->handler, "md-status")) { return DECLINED; } sc = ap_get_module_config(r->server->module_config, &md_module); if (!sc) return DECLINED; mc = sc->mc; if (!mc) return DECLINED; if (r->method_number != M_GET) { ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "md-status supports only GET"); return HTTP_NOT_IMPLEMENTED; } jstatus = NULL; md = NULL; if (r->path_info && r->path_info[0] == '/' && r->path_info[1] != '\0') { name = strrchr(r->path_info, '/') + 1; md = md_get_by_name(mc->mds, name); if (!md) md = md_get_by_domain(mc->mds, name); } if (md) { md_status_get_md_json(&jstatus, md, mc->reg, r->pool); } else { mds = apr_array_copy(r->pool, mc->mds); qsort(mds->elts, (size_t)mds->nelts, sizeof(md_t *), md_name_cmp); md_status_get_json(&jstatus, mds, mc->reg, r->pool); } if (jstatus) { apr_table_set(r->headers_out, "Content-Type", "application/json"); bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); md_json_writeb(jstatus, MD_JSON_FMT_INDENT, bb); ap_pass_brigade(r->output_filters, bb); apr_brigade_cleanup(bb); return DONE; } return DECLINED; } ������������������������������������������������������������httpd-2.4.41/modules/md/md_acmev2_drive.h�����������������������������������������������������������0000644�0000000�0000050�00000001703�13511051361�016500� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Copyright 2019 greenbytes GmbH (https://www.greenbytes.de) * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef md_acmev2_drive_h #define md_acmev2_drive_h struct md_json_t; struct md_proto_driver_t; struct md_result_t; apr_status_t md_acmev2_drive_renew(struct md_acme_driver_t *ad, struct md_proto_driver_t *d, struct md_result_t *result); #endif /* md_acmev2_drive_h */ �������������������������������������������������������������httpd-2.4.41/modules/md/md_acme.c�������������������������������������������������������������������0000644�0000000�0000050�00000065245�13511051361�015045� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <stdlib.h> #include <apr_lib.h> #include <apr_strings.h> #include <apr_buckets.h> #include <apr_hash.h> #include <apr_uri.h> #include "md.h" #include "md_crypt.h" #include "md_json.h" #include "md_jws.h" #include "md_http.h" #include "md_log.h" #include "md_store.h" #include "md_result.h" #include "md_util.h" #include "md_version.h" #include "md_acme.h" #include "md_acme_acct.h" static const char *base_product= "-"; typedef struct acme_problem_status_t acme_problem_status_t; struct acme_problem_status_t { const char *type; apr_status_t rv; }; static acme_problem_status_t Problems[] = { { "acme:error:badCSR", APR_EINVAL }, { "acme:error:badNonce", APR_EAGAIN }, { "acme:error:badSignatureAlgorithm", APR_EINVAL }, { "acme:error:invalidContact", APR_BADARG }, { "acme:error:unsupportedContact", APR_EGENERAL }, { "acme:error:malformed", APR_EINVAL }, { "acme:error:rateLimited", APR_BADARG }, { "acme:error:rejectedIdentifier", APR_BADARG }, { "acme:error:serverInternal", APR_EGENERAL }, { "acme:error:unauthorized", APR_EACCES }, { "acme:error:unsupportedIdentifier", APR_BADARG }, { "acme:error:userActionRequired", APR_EAGAIN }, { "acme:error:badRevocationReason", APR_EINVAL }, { "acme:error:caa", APR_EGENERAL }, { "acme:error:dns", APR_EGENERAL }, { "acme:error:connection", APR_EGENERAL }, { "acme:error:tls", APR_EGENERAL }, { "acme:error:incorrectResponse", APR_EGENERAL }, }; static apr_status_t problem_status_get(const char *type) { size_t i; if (strstr(type, "urn:ietf:params:") == type) { type += strlen("urn:ietf:params:"); } else if (strstr(type, "urn:") == type) { type += strlen("urn:"); } for(i = 0; i < (sizeof(Problems)/sizeof(Problems[0])); ++i) { if (!apr_strnatcasecmp(type, Problems[i].type)) { return Problems[i].rv; } } return APR_EGENERAL; } /**************************************************************************************************/ /* acme requests */ static void req_update_nonce(md_acme_t *acme, apr_table_t *hdrs) { if (hdrs) { const char *nonce = apr_table_get(hdrs, "Replay-Nonce"); if (nonce) { acme->nonce = apr_pstrdup(acme->p, nonce); } } } static apr_status_t http_update_nonce(const md_http_response_t *res) { if (res->headers) { const char *nonce = apr_table_get(res->headers, "Replay-Nonce"); if (nonce) { md_acme_t *acme = res->req->baton; acme->nonce = apr_pstrdup(acme->p, nonce); } } return res->rv; } static md_acme_req_t *md_acme_req_create(md_acme_t *acme, const char *method, const char *url) { apr_pool_t *pool; md_acme_req_t *req; apr_status_t rv; rv = apr_pool_create(&pool, acme->p); if (rv != APR_SUCCESS) { return NULL; } req = apr_pcalloc(pool, sizeof(*req)); if (!req) { apr_pool_destroy(pool); return NULL; } req->acme = acme; req->p = pool; req->method = method; req->url = url; req->prot_hdrs = apr_table_make(pool, 5); if (!req->prot_hdrs) { apr_pool_destroy(pool); return NULL; } req->max_retries = acme->max_retries; req->result = md_result_make(req->p, APR_SUCCESS); return req; } static apr_status_t acmev1_new_nonce(md_acme_t *acme) { return md_http_HEAD(acme->http, acme->api.v1.new_reg, NULL, http_update_nonce, acme); } static apr_status_t acmev2_new_nonce(md_acme_t *acme) { return md_http_HEAD(acme->http, acme->api.v2.new_nonce, NULL, http_update_nonce, acme); } apr_status_t md_acme_init(apr_pool_t *p, const char *base, int init_ssl) { base_product = base; return init_ssl? md_crypt_init(p) : APR_SUCCESS; } static apr_status_t inspect_problem(md_acme_req_t *req, const md_http_response_t *res) { const char *ctype; md_json_t *problem; ctype = apr_table_get(req->resp_hdrs, "content-type"); if (ctype && !strcmp(ctype, "application/problem+json")) { /* RFC 7807 */ md_json_read_http(&problem, req->p, res); if (problem) { const char *ptype, *pdetail; req->resp_json = problem; ptype = md_json_gets(problem, MD_KEY_TYPE, NULL); pdetail = md_json_gets(problem, MD_KEY_DETAIL, NULL); req->rv = problem_status_get(ptype); md_result_problem_set(req->result, req->rv, ptype, pdetail); if (APR_STATUS_IS_EAGAIN(req->rv)) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, req->rv, req->p, "acme reports %s: %s", ptype, pdetail); } else { md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, req->rv, req->p, "acme problem %s: %s", ptype, pdetail); } return req->rv; } } if (APR_SUCCESS == res->rv) { switch (res->status) { case 400: return APR_EINVAL; case 403: return APR_EACCES; case 404: return APR_ENOENT; default: md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, 0, req->p, "acme problem unknown: http status %d", res->status); md_result_printf(req->result, APR_EGENERAL, "unexpected http status: %d", res->status); return req->result->status; } } return res->rv; } /**************************************************************************************************/ /* ACME requests with nonce handling */ static apr_status_t acmev1_req_init(md_acme_req_t *req, md_json_t *jpayload) { const char *payload; size_t payload_len; if (!req->acme->acct) { return APR_EINVAL; } if (jpayload) { payload = md_json_writep(jpayload, req->p, MD_JSON_FMT_COMPACT); if (!payload) { return APR_EINVAL; } } else { payload = ""; } payload_len = strlen(payload); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, req->p, "acme payload(len=%" APR_SIZE_T_FMT "): %s", payload_len, payload); return md_jws_sign(&req->req_json, req->p, payload, payload_len, req->prot_hdrs, req->acme->acct_key, NULL); } static apr_status_t acmev2_req_init(md_acme_req_t *req, md_json_t *jpayload) { const char *payload; size_t payload_len; if (!req->acme->acct) { return APR_EINVAL; } if (jpayload) { payload = md_json_writep(jpayload, req->p, MD_JSON_FMT_COMPACT); if (!payload) { return APR_EINVAL; } } else { payload = ""; } payload_len = strlen(payload); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, req->p, "acme payload(len=%" APR_SIZE_T_FMT "): %s", payload_len, payload); return md_jws_sign(&req->req_json, req->p, payload, payload_len, req->prot_hdrs, req->acme->acct_key, req->acme->acct->url); } apr_status_t md_acme_req_body_init(md_acme_req_t *req, md_json_t *payload) { return req->acme->req_init_fn(req, payload); } static apr_status_t md_acme_req_done(md_acme_req_t *req, apr_status_t rv) { if (req->result->status != APR_SUCCESS) { if (req->on_err) { req->on_err(req, req->result, req->baton); } } /* An error in rv superceeds the result->status */ if (APR_SUCCESS != rv) req->result->status = rv; rv = req->result->status; /* transfer results into the acme's central result for longer life and later inspection */ md_result_dup(req->acme->last, req->result); if (req->p) { apr_pool_destroy(req->p); } return rv; } static apr_status_t on_response(const md_http_response_t *res) { md_acme_req_t *req = res->req->baton; apr_status_t rv = res->rv; if (APR_SUCCESS != rv) { goto out; } req->resp_hdrs = apr_table_clone(req->p, res->headers); req_update_nonce(req->acme, res->headers); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, rv, req->p, "response: %d", res->status); if (res->status >= 200 && res->status < 300) { int processed = 0; if (req->on_json) { processed = 1; rv = md_json_read_http(&req->resp_json, req->p, res); if (APR_SUCCESS == rv) { if (md_log_is_level(req->p, MD_LOG_TRACE2)) { const char *s; s = md_json_writep(req->resp_json, req->p, MD_JSON_FMT_INDENT); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE2, rv, req->p, "response: %s", s ? s : "<failed to serialize!>"); } rv = req->on_json(req->acme, req->p, req->resp_hdrs, req->resp_json, req->baton); } else if (APR_STATUS_IS_ENOENT(rv)) { /* not JSON content, fall through */ processed = 0; } else { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, req->p, "parsing JSON body"); } } if (!processed && req->on_res) { processed = 1; rv = req->on_res(req->acme, res, req->baton); } if (!processed) { rv = APR_EINVAL; md_result_printf(req->result, rv, "unable to process the response: " "http-status=%d, content-type=%s", res->status, apr_table_get(res->headers, "Content-Type")); md_result_log(req->result, MD_LOG_ERR); } } else if (APR_EAGAIN == (rv = inspect_problem(req, res))) { /* leave req alive */ return rv; } out: md_acme_req_done(req, rv); return rv; } static apr_status_t acmev2_GET_as_POST_init(md_acme_req_t *req, void *baton) { (void)baton; return md_acme_req_body_init(req, NULL); } static apr_status_t md_acme_req_send(md_acme_req_t *req) { apr_status_t rv; md_acme_t *acme = req->acme; const char *body = NULL; md_result_t *result; assert(acme->url); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, req->p, "sending req: %s %s", req->method, req->url); md_result_reset(req->acme->last); result = md_result_make(req->p, APR_SUCCESS); /* Whom are we talking to? */ if (acme->version == MD_ACME_VERSION_UNKNOWN) { rv = md_acme_setup(acme, result); if (APR_SUCCESS != rv) goto leave; } if (!strcmp("GET", req->method) && !req->on_init && !req->req_json && MD_ACME_VERSION_MAJOR(acme->version) > 1) { /* See <https://ietf-wg-acme.github.io/acme/draft-ietf-acme-acme.html#rfc.section.6.3> * and <https://mailarchive.ietf.org/arch/msg/acme/sotffSQ0OWV-qQJodLwWYWcEVKI> * and <https://community.letsencrypt.org/t/acme-v2-scheduled-deprecation-of-unauthenticated-resource-gets/74380> * We implement this change in ACMEv2 and higher as keeping the md_acme_GET() methods, * but switching them to POSTs with a empty, JWS signed, body when we call * our HTTP client. */ req->method = "POST"; req->on_init = acmev2_GET_as_POST_init; } /* Besides GET/HEAD, we always need a fresh nonce */ if (strcmp("GET", req->method) && strcmp("HEAD", req->method)) { if (acme->version == MD_ACME_VERSION_UNKNOWN) { rv = md_acme_setup(acme, result); if (APR_SUCCESS != rv) goto leave; } if (!acme->nonce && (APR_SUCCESS != (rv = acme->new_nonce_fn(acme)))) { md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, rv, req->p, "error retrieving new nonce from ACME server"); goto leave; } apr_table_set(req->prot_hdrs, "nonce", acme->nonce); if (MD_ACME_VERSION_MAJOR(acme->version) > 1) { apr_table_set(req->prot_hdrs, "url", req->url); } acme->nonce = NULL; } rv = req->on_init? req->on_init(req, req->baton) : APR_SUCCESS; if (APR_SUCCESS != rv) goto leave; if (req->req_json) { body = md_json_writep(req->req_json, req->p, MD_JSON_FMT_INDENT); if (!body) { rv = APR_EINVAL; goto leave; } } if (body && md_log_is_level(req->p, MD_LOG_TRACE2)) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE2, 0, req->p, "req: %s %s, body:\n%s", req->method, req->url, body); } else { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, req->p, "req: %s %s", req->method, req->url); } if (!strcmp("GET", req->method)) { rv = md_http_GET(req->acme->http, req->url, NULL, on_response, req); } else if (!strcmp("POST", req->method)) { rv = md_http_POSTd(req->acme->http, req->url, NULL, "application/jose+json", body, body? strlen(body) : 0, on_response, req); } else if (!strcmp("HEAD", req->method)) { rv = md_http_HEAD(req->acme->http, req->url, NULL, on_response, req); } else { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, req->p, "HTTP method %s against: %s", req->method, req->url); rv = APR_ENOTIMPL; } md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, req->p, "req sent"); if (APR_EAGAIN == rv && req->max_retries > 0) { --req->max_retries; rv = md_acme_req_send(req); } req = NULL; leave: if (req) md_acme_req_done(req, rv); return rv; } apr_status_t md_acme_POST(md_acme_t *acme, const char *url, md_acme_req_init_cb *on_init, md_acme_req_json_cb *on_json, md_acme_req_res_cb *on_res, md_acme_req_err_cb *on_err, void *baton) { md_acme_req_t *req; assert(url); assert(on_json || on_res); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, acme->p, "add acme POST: %s", url); req = md_acme_req_create(acme, "POST", url); req->on_init = on_init; req->on_json = on_json; req->on_res = on_res; req->on_err = on_err; req->baton = baton; return md_acme_req_send(req); } apr_status_t md_acme_GET(md_acme_t *acme, const char *url, md_acme_req_init_cb *on_init, md_acme_req_json_cb *on_json, md_acme_req_res_cb *on_res, md_acme_req_err_cb *on_err, void *baton) { md_acme_req_t *req; assert(url); assert(on_json || on_res); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, acme->p, "add acme GET: %s", url); req = md_acme_req_create(acme, "GET", url); req->on_init = on_init; req->on_json = on_json; req->on_res = on_res; req->on_err = on_err; req->baton = baton; return md_acme_req_send(req); } void md_acme_report_result(md_acme_t *acme, apr_status_t rv, struct md_result_t *result) { if (acme->last->status == APR_SUCCESS) { md_result_set(result, rv, NULL); } else { md_result_problem_set(result, acme->last->status, acme->last->problem, acme->last->detail); } } /**************************************************************************************************/ /* GET JSON */ typedef struct { apr_pool_t *pool; md_json_t *json; } json_ctx; static apr_status_t on_got_json(md_acme_t *acme, apr_pool_t *p, const apr_table_t *headers, md_json_t *jbody, void *baton) { json_ctx *ctx = baton; (void)acme; (void)p; (void)headers; ctx->json = md_json_clone(ctx->pool, jbody); return APR_SUCCESS; } apr_status_t md_acme_get_json(struct md_json_t **pjson, md_acme_t *acme, const char *url, apr_pool_t *p) { apr_status_t rv; json_ctx ctx; ctx.pool = p; ctx.json = NULL; rv = md_acme_GET(acme, url, NULL, on_got_json, NULL, NULL, &ctx); *pjson = (APR_SUCCESS == rv)? ctx.json : NULL; return rv; } /**************************************************************************************************/ /* Generic ACME operations */ void md_acme_clear_acct(md_acme_t *acme) { acme->acct_id = NULL; acme->acct = NULL; acme->acct_key = NULL; } const char *md_acme_acct_id_get(md_acme_t *acme) { return acme->acct_id; } const char *md_acme_acct_url_get(md_acme_t *acme) { return acme->acct? acme->acct->url : NULL; } apr_status_t md_acme_use_acct(md_acme_t *acme, md_store_t *store, apr_pool_t *p, const char *acct_id) { md_acme_acct_t *acct; md_pkey_t *pkey; apr_status_t rv; if (APR_SUCCESS == (rv = md_acme_acct_load(&acct, &pkey, store, MD_SG_ACCOUNTS, acct_id, acme->p))) { if (acct->ca_url && !strcmp(acct->ca_url, acme->url)) { acme->acct_id = apr_pstrdup(p, acct_id); acme->acct = acct; acme->acct_key = pkey; rv = md_acme_acct_validate(acme, store, p); } else { /* account is from a nother server or, more likely, from another * protocol endpoint on the same server */ rv = APR_ENOENT; } } return rv; } apr_status_t md_acme_save_acct(md_acme_t *acme, apr_pool_t *p, md_store_t *store) { return md_acme_acct_save(store, p, acme, &acme->acct_id, acme->acct, acme->acct_key); } static apr_status_t acmev1_POST_new_account(md_acme_t *acme, md_acme_req_init_cb *on_init, md_acme_req_json_cb *on_json, md_acme_req_res_cb *on_res, md_acme_req_err_cb *on_err, void *baton) { return md_acme_POST(acme, acme->api.v1.new_reg, on_init, on_json, on_res, on_err, baton); } static apr_status_t acmev2_POST_new_account(md_acme_t *acme, md_acme_req_init_cb *on_init, md_acme_req_json_cb *on_json, md_acme_req_res_cb *on_res, md_acme_req_err_cb *on_err, void *baton) { return md_acme_POST(acme, acme->api.v2.new_account, on_init, on_json, on_res, on_err, baton); } apr_status_t md_acme_POST_new_account(md_acme_t *acme, md_acme_req_init_cb *on_init, md_acme_req_json_cb *on_json, md_acme_req_res_cb *on_res, md_acme_req_err_cb *on_err, void *baton) { return acme->post_new_account_fn(acme, on_init, on_json, on_res, on_err, baton); } /**************************************************************************************************/ /* ACME setup */ apr_status_t md_acme_create(md_acme_t **pacme, apr_pool_t *p, const char *url, const char *proxy_url) { md_acme_t *acme; const char *err = NULL; apr_status_t rv; apr_uri_t uri_parsed; size_t len; if (!url) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, APR_EINVAL, p, "create ACME without url"); return APR_EINVAL; } if (APR_SUCCESS != (rv = md_util_abs_uri_check(p, url, &err))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "invalid ACME uri (%s): %s", err, url); return rv; } acme = apr_pcalloc(p, sizeof(*acme)); acme->url = url; acme->p = p; acme->user_agent = apr_psprintf(p, "%s mod_md/%s", base_product, MOD_MD_VERSION); acme->proxy_url = proxy_url? apr_pstrdup(p, proxy_url) : NULL; acme->max_retries = 3; if (APR_SUCCESS != (rv = apr_uri_parse(p, url, &uri_parsed))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "parsing ACME uri: %s", url); return APR_EINVAL; } len = strlen(uri_parsed.hostname); acme->sname = (len <= 16)? uri_parsed.hostname : apr_pstrdup(p, uri_parsed.hostname + len - 16); acme->version = MD_ACME_VERSION_UNKNOWN; acme->last = md_result_make(acme->p, APR_SUCCESS); *pacme = (APR_SUCCESS == rv)? acme : NULL; return rv; } typedef struct { md_acme_t *acme; md_result_t *result; } update_dir_ctx; static apr_status_t update_directory(const md_http_response_t *res) { md_http_request_t *req = res->req; md_acme_t *acme = ((update_dir_ctx *)req->baton)->acme; md_result_t *result = ((update_dir_ctx *)req->baton)->result; apr_status_t rv = res->rv; md_json_t *json; const char *s; if (APR_SUCCESS != rv) goto leave; md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, rv, req->pool, "directory lookup response: %d", res->status); if (res->status == 503) { md_result_printf(result, APR_EAGAIN, "The ACME server at <%s> reports that Service is Unavailable (503). This " "may happen during maintenance for short periods of time.", acme->url); md_result_log(result, MD_LOG_INFO); rv = result->status; goto leave; } else if (res->status < 200 || res->status >= 300) { md_result_printf(result, APR_EAGAIN, "The ACME server at <%s> responded with HTTP status %d. This " "is unusual. Please verify that the URL is correct and that you can indeed " "make request from the server to it by other means, e.g. invoking curl/wget.", acme->url, res->status); goto leave; } rv = md_json_read_http(&json, req->pool, res); if (APR_SUCCESS != rv) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, req->pool, "reading JSON body"); goto leave; } if (md_log_is_level(acme->p, MD_LOG_TRACE2)) { s = md_json_writep(json, req->pool, MD_JSON_FMT_INDENT); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE2, rv, req->pool, "response: %s", s ? s : "<failed to serialize!>"); } /* What have we got? */ if ((s = md_json_dups(acme->p, json, "new-authz", NULL))) { acme->api.v1.new_authz = s; acme->api.v1.new_cert = md_json_dups(acme->p, json, "new-cert", NULL); acme->api.v1.new_reg = md_json_dups(acme->p, json, "new-reg", NULL); acme->api.v1.revoke_cert = md_json_dups(acme->p, json, "revoke-cert", NULL); if (acme->api.v1.new_authz && acme->api.v1.new_cert && acme->api.v1.new_reg && acme->api.v1.revoke_cert) { acme->version = MD_ACME_VERSION_1; } acme->ca_agreement = md_json_dups(acme->p, json, "meta", "terms-of-service", NULL); acme->new_nonce_fn = acmev1_new_nonce; acme->req_init_fn = acmev1_req_init; acme->post_new_account_fn = acmev1_POST_new_account; } else if ((s = md_json_dups(acme->p, json, "newAccount", NULL))) { acme->api.v2.new_account = s; acme->api.v2.new_order = md_json_dups(acme->p, json, "newOrder", NULL); acme->api.v2.revoke_cert = md_json_dups(acme->p, json, "revokeCert", NULL); acme->api.v2.key_change = md_json_dups(acme->p, json, "keyChange", NULL); acme->api.v2.new_nonce = md_json_dups(acme->p, json, "newNonce", NULL); if (acme->api.v2.new_account && acme->api.v2.new_order && acme->api.v2.revoke_cert && acme->api.v2.key_change && acme->api.v2.new_nonce) { acme->version = MD_ACME_VERSION_2; } acme->ca_agreement = md_json_dups(acme->p, json, "meta", "termsOfService", NULL); acme->new_nonce_fn = acmev2_new_nonce; acme->req_init_fn = acmev2_req_init; acme->post_new_account_fn = acmev2_POST_new_account; } if (MD_ACME_VERSION_UNKNOWN == acme->version) { md_result_printf(result, APR_EINVAL, "Unable to understand ACME server response from <%s>. " "Wrong ACME protocol version or link?", acme->url); md_result_log(result, MD_LOG_WARNING); rv = result->status; } leave: return rv; } apr_status_t md_acme_setup(md_acme_t *acme, md_result_t *result) { apr_status_t rv; update_dir_ctx ctx; assert(acme->url); acme->version = MD_ACME_VERSION_UNKNOWN; if (!acme->http && APR_SUCCESS != (rv = md_http_create(&acme->http, acme->p, acme->user_agent, acme->proxy_url))) { return rv; } md_http_set_response_limit(acme->http, 1024*1024); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, acme->p, "get directory from %s", acme->url); ctx.acme = acme; ctx.result = result; rv = md_http_GET(acme->http, acme->url, NULL, update_directory, &ctx); if (APR_SUCCESS != rv && APR_SUCCESS == result->status) { /* If the result reports no error, we never got a response from the server */ md_result_printf(result, rv, "Unsuccessful in contacting ACME server at <%s>. If this problem persists, " "please check your network connectivity from your Apache server to the " "ACME server. Also, older servers might have trouble verifying the certificates " "of the ACME server. You can check if you are able to contact it manually via the " "curl command. Sometimes, the ACME server might be down for maintenance, " "so failing to contact it is not an immediate problem. Apache will " "continue retrying this.", acme->url); md_result_log(result, MD_LOG_WARNING); } return rv; } �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_acme.h�������������������������������������������������������������������0000644�0000000�0000050�00000026447�13511051361�015053� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_acme_h #define mod_md_md_acme_h struct apr_array_header_t; struct apr_bucket_brigade; struct md_http_response_t; struct apr_hash_t; struct md_http_t; struct md_json_t; struct md_pkey_t; struct md_t; struct md_acme_acct_t; struct md_acmev2_acct_t; struct md_store_t; struct md_result_t; #define MD_PROTO_ACME "ACME" #define MD_AUTHZ_CHA_HTTP_01 "http-01" #define MD_AUTHZ_CHA_SNI_01 "tls-sni-01" #define MD_ACME_VERSION_UNKNOWN 0x0 #define MD_ACME_VERSION_1 0x010000 #define MD_ACME_VERSION_2 0x020000 #define MD_ACME_VERSION_MAJOR(i) (((i)&0xFF0000) >> 16) typedef enum { MD_ACME_S_UNKNOWN, /* MD has not been analysed yet */ MD_ACME_S_REGISTERED, /* MD is registered at CA, but not more */ MD_ACME_S_TOS_ACCEPTED, /* Terms of Service were accepted by account holder */ MD_ACME_S_CHALLENGED, /* MD challenge information for all domains is known */ MD_ACME_S_VALIDATED, /* MD domains have been validated */ MD_ACME_S_CERTIFIED, /* MD has valid certificate */ MD_ACME_S_DENIED, /* MD domains (at least one) have been denied by CA */ } md_acme_state_t; typedef struct md_acme_t md_acme_t; typedef struct md_acme_req_t md_acme_req_t; /** * Request callback on a successful HTTP response (status 2xx). */ typedef apr_status_t md_acme_req_res_cb(md_acme_t *acme, const struct md_http_response_t *res, void *baton); /** * Request callback to initialize before sending. May be invoked more than once in * case of retries. */ typedef apr_status_t md_acme_req_init_cb(md_acme_req_t *req, void *baton); /** * Request callback on a successful response (HTTP response code 2xx) and content * type matching application/.*json. */ typedef apr_status_t md_acme_req_json_cb(md_acme_t *acme, apr_pool_t *p, const apr_table_t *headers, struct md_json_t *jbody, void *baton); /** * Request callback on detected errors. */ typedef apr_status_t md_acme_req_err_cb(md_acme_req_t *req, const struct md_result_t *result, void *baton); typedef apr_status_t md_acme_new_nonce_fn(md_acme_t *acme); typedef apr_status_t md_acme_req_init_fn(md_acme_req_t *req, struct md_json_t *jpayload); typedef apr_status_t md_acme_post_fn(md_acme_t *acme, md_acme_req_init_cb *on_init, md_acme_req_json_cb *on_json, md_acme_req_res_cb *on_res, md_acme_req_err_cb *on_err, void *baton); struct md_acme_t { const char *url; /* directory url of the ACME service */ const char *sname; /* short name for the service, not necessarily unique */ apr_pool_t *p; const char *user_agent; const char *proxy_url; const char *acct_id; /* local storage id account was loaded from or NULL */ struct md_acme_acct_t *acct; /* account at ACME server to use for requests */ struct md_pkey_t *acct_key; /* private RSA key belonging to account */ int version; /* as detected from the server */ union { struct { const char *new_authz; const char *new_cert; const char *new_reg; const char *revoke_cert; } v1; struct { const char *new_account; const char *new_order; const char *key_change; const char *revoke_cert; const char *new_nonce; } v2; } api; const char *ca_agreement; const char *acct_name; md_acme_new_nonce_fn *new_nonce_fn; md_acme_req_init_fn *req_init_fn; md_acme_post_fn *post_new_account_fn; struct md_http_t *http; const char *nonce; int max_retries; struct md_result_t *last; /* result of last request */ }; /** * Global init, call once at start up. */ apr_status_t md_acme_init(apr_pool_t *pool, const char *base_version, int init_ssl); /** * Create a new ACME server instance. If path is not NULL, will use that directory * for persisting information. Will load any information persisted in earlier session. * url needs only be specified for instances where this has never been persisted before. * * @param pacme will hold the ACME server instance on success * @param p pool to used * @param url url of the server, optional if known at path * @param proxy_url optional url of a HTTP(S) proxy to use */ apr_status_t md_acme_create(md_acme_t **pacme, apr_pool_t *p, const char *url, const char *proxy_url); /** * Contact the ACME server and retrieve its directory information. * * @param acme the ACME server to contact */ apr_status_t md_acme_setup(md_acme_t *acme, struct md_result_t *result); void md_acme_report_result(md_acme_t *acme, apr_status_t rv, struct md_result_t *result); /**************************************************************************************************/ /* account handling */ /** * Clear any existing account data from acme instance. */ void md_acme_clear_acct(md_acme_t *acme); apr_status_t md_acme_POST_new_account(md_acme_t *acme, md_acme_req_init_cb *on_init, md_acme_req_json_cb *on_json, md_acme_req_res_cb *on_res, md_acme_req_err_cb *on_err, void *baton); /** * Get the local name of the account currently used by the acme instance. * Will be NULL if no account has been setup successfully. */ const char *md_acme_acct_id_get(md_acme_t *acme); const char *md_acme_acct_url_get(md_acme_t *acme); /** * Specify the account to use by name in local store. On success, the account * the "current" one used by the acme instance. */ apr_status_t md_acme_use_acct(md_acme_t *acme, struct md_store_t *store, apr_pool_t *p, const char *acct_id); /** * Get the local name of the account currently used by the acme instance. * Will be NULL if no account has been setup successfully. */ const char *md_acme_acct_id_get(md_acme_t *acme); /** * Agree to the given Terms-of-Service url for the current account. */ apr_status_t md_acme_agree(md_acme_t *acme, apr_pool_t *p, const char *tos); /** * Confirm with the server that the current account agrees to the Terms-of-Service * given in the agreement url. * If the known agreement is equal to this, nothing is done. * If it differs, the account is re-validated in the hope that the server * announces the Tos URL it wants. If this is equal to the agreement specified, * the server is notified of this. If the server requires a ToS that the account * thinks it has already given, it is resend. * * If an agreement is required, different from the current one, APR_INCOMPLETE is * returned and the agreement url is returned in the parameter. */ apr_status_t md_acme_check_agreement(md_acme_t *acme, apr_pool_t *p, const char *agreement, const char **prequired); apr_status_t md_acme_save_acct(md_acme_t *acme, apr_pool_t *p, struct md_store_t *store); /** * Deactivate the current account at the ACME server.. */ apr_status_t md_acme_acct_deactivate(md_acme_t *acme, apr_pool_t *p); /**************************************************************************************************/ /* request handling */ struct md_acme_req_t { md_acme_t *acme; /* the ACME server to talk to */ apr_pool_t *p; /* pool for the request duration */ const char *url; /* url to POST the request to */ const char *method; /* HTTP method to use */ apr_table_t *prot_hdrs; /* JWS headers needing protection (nonce) */ struct md_json_t *req_json; /* JSON to be POSTed in request body */ apr_table_t *resp_hdrs; /* HTTP response headers */ struct md_json_t *resp_json; /* JSON response body received */ apr_status_t rv; /* status of request */ md_acme_req_init_cb *on_init; /* callback to initialize the request before submit */ md_acme_req_json_cb *on_json; /* callback on successful JSON response */ md_acme_req_res_cb *on_res; /* callback on generic HTTP response */ md_acme_req_err_cb *on_err; /* callback on encountered error */ int max_retries; /* how often this might be retried */ void *baton; /* userdata for callbacks */ struct md_result_t *result; /* result of this request */ }; apr_status_t md_acme_req_body_init(md_acme_req_t *req, struct md_json_t *payload); apr_status_t md_acme_GET(md_acme_t *acme, const char *url, md_acme_req_init_cb *on_init, md_acme_req_json_cb *on_json, md_acme_req_res_cb *on_res, md_acme_req_err_cb *on_err, void *baton); /** * Perform a POST against the ACME url. If a on_json callback is given and * the HTTP response is JSON, only this callback is invoked. Otherwise, on HTTP status * 2xx, the on_res callback is invoked. If no on_res is given, it is considered a * response error, since only JSON was expected. * At least one callback needs to be non-NULL. * * @param acme the ACME server to talk to * @param url the url to send the request to * @param on_init callback to initialize the request data * @param on_json callback on successful JSON response * @param on_res callback on successful HTTP response * @param baton userdata for callbacks */ apr_status_t md_acme_POST(md_acme_t *acme, const char *url, md_acme_req_init_cb *on_init, md_acme_req_json_cb *on_json, md_acme_req_res_cb *on_res, md_acme_req_err_cb *on_err, void *baton); /** * Retrieve a JSON resource from the ACME server */ apr_status_t md_acme_get_json(struct md_json_t **pjson, md_acme_t *acme, const char *url, apr_pool_t *p); apr_status_t md_acme_req_body_init(md_acme_req_t *req, struct md_json_t *jpayload); apr_status_t md_acme_protos_add(struct apr_hash_t *protos, apr_pool_t *p); #endif /* md_acme_h */ �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_http.c�������������������������������������������������������������������0000644�0000000�0000050�00000014340�13511051361�015105� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <apr_lib.h> #include <apr_strings.h> #include <apr_buckets.h> #include "md_http.h" #include "md_log.h" struct md_http_t { apr_pool_t *pool; apr_bucket_alloc_t *bucket_alloc; apr_off_t resp_limit; md_http_impl_t *impl; const char *user_agent; const char *proxy_url; }; static md_http_impl_t *cur_impl; static int cur_init_done; void md_http_use_implementation(md_http_impl_t *impl) { if (cur_impl != impl) { cur_impl = impl; cur_init_done = 0; } } apr_status_t md_http_create(md_http_t **phttp, apr_pool_t *p, const char *user_agent, const char *proxy_url) { md_http_t *http; apr_status_t rv = APR_SUCCESS; if (!cur_impl) { *phttp = NULL; return APR_ENOTIMPL; } if (!cur_init_done) { if (APR_SUCCESS == (rv = cur_impl->init())) { cur_init_done = 1; } else { return rv; } } http = apr_pcalloc(p, sizeof(*http)); http->pool = p; http->impl = cur_impl; http->user_agent = apr_pstrdup(p, user_agent); http->proxy_url = proxy_url? apr_pstrdup(p, proxy_url) : NULL; http->bucket_alloc = apr_bucket_alloc_create(p); if (!http->bucket_alloc) { return APR_EGENERAL; } *phttp = http; return APR_SUCCESS; } void md_http_set_response_limit(md_http_t *http, apr_off_t resp_limit) { http->resp_limit = resp_limit; } static apr_status_t req_create(md_http_request_t **preq, md_http_t *http, const char *method, const char *url, struct apr_table_t *headers, md_http_cb *cb, void *baton) { md_http_request_t *req; apr_pool_t *pool; apr_status_t rv; rv = apr_pool_create(&pool, http->pool); if (rv != APR_SUCCESS) { return rv; } req = apr_pcalloc(pool, sizeof(*req)); req->pool = pool; req->bucket_alloc = http->bucket_alloc; req->http = http; req->method = method; req->url = url; req->headers = headers? apr_table_copy(req->pool, headers) : apr_table_make(req->pool, 5); req->resp_limit = http->resp_limit; req->cb = cb; req->baton = baton; req->user_agent = http->user_agent; req->proxy_url = http->proxy_url; *preq = req; return rv; } void md_http_req_destroy(md_http_request_t *req) { if (req->internals) { req->http->impl->req_cleanup(req); req->internals = NULL; } apr_pool_destroy(req->pool); } static apr_status_t schedule(md_http_request_t *req, apr_bucket_brigade *body, int detect_clen) { apr_status_t rv; req->body = body; req->body_len = body? -1 : 0; if (req->body && detect_clen) { rv = apr_brigade_length(req->body, 1, &req->body_len); if (rv != APR_SUCCESS) { md_http_req_destroy(req); return rv; } } if (req->body_len == 0 && apr_strnatcasecmp("GET", req->method)) { apr_table_setn(req->headers, "Content-Length", "0"); } else if (req->body_len > 0) { apr_table_setn(req->headers, "Content-Length", apr_off_t_toa(req->pool, req->body_len)); } return req->http->impl->perform(req); } apr_status_t md_http_GET(struct md_http_t *http, const char *url, struct apr_table_t *headers, md_http_cb *cb, void *baton) { md_http_request_t *req; apr_status_t rv; rv = req_create(&req, http, "GET", url, headers, cb, baton); if (rv != APR_SUCCESS) { return rv; } return schedule(req, NULL, 0); } apr_status_t md_http_HEAD(struct md_http_t *http, const char *url, struct apr_table_t *headers, md_http_cb *cb, void *baton) { md_http_request_t *req; apr_status_t rv; rv = req_create(&req, http, "HEAD", url, headers, cb, baton); if (rv != APR_SUCCESS) { return rv; } return schedule(req, NULL, 0); } apr_status_t md_http_POST(struct md_http_t *http, const char *url, struct apr_table_t *headers, const char *content_type, apr_bucket_brigade *body, md_http_cb *cb, void *baton) { md_http_request_t *req; apr_status_t rv; rv = req_create(&req, http, "POST", url, headers, cb, baton); if (rv != APR_SUCCESS) { return rv; } if (content_type) { apr_table_set(req->headers, "Content-Type", content_type); } return schedule(req, body, 1); } apr_status_t md_http_POSTd(md_http_t *http, const char *url, struct apr_table_t *headers, const char *content_type, const char *data, size_t data_len, md_http_cb *cb, void *baton) { md_http_request_t *req; apr_status_t rv; apr_bucket_brigade *body = NULL; rv = req_create(&req, http, "POST", url, headers, cb, baton); if (rv != APR_SUCCESS) { return rv; } if (data && data_len > 0) { body = apr_brigade_create(req->pool, req->http->bucket_alloc); rv = apr_brigade_write(body, NULL, NULL, data, data_len); if (rv != APR_SUCCESS) { md_http_req_destroy(req); return rv; } } if (content_type) { apr_table_set(req->headers, "Content-Type", content_type); } return schedule(req, body, 1); } ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/mod_md_drive.h��������������������������������������������������������������0000644�0000000�0000050�00000002256�13511051361�016106� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_drive_h #define mod_md_md_drive_h struct md_mod_conf_t; struct md_reg_t; typedef struct md_drive_ctx md_drive_ctx; int md_will_renew_cert(const md_t *md); /** * Start driving the certificate procotol for the domains mentioned in mc->watched_names. */ apr_status_t md_start_watching(struct md_mod_conf_t *mc, server_rec *s, apr_pool_t *p); #endif /* mod_md_md_drive_h */ ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/mod_md_private.h������������������������������������������������������������0000644�0000000�0000050�00000001650�13234043402�016443� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef mod_md_md_private_h #define mod_md_md_private_h extern module AP_MODULE_DECLARE_DATA md_module; APLOG_USE_MODULE(md); #endif ����������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_acmev1_drive.h�����������������������������������������������������������0000644�0000000�0000050�00000001713�13511051361�016500� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Copyright 2019 greenbytes GmbH (https://www.greenbytes.de) * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef md_acmev1_drive_h #define md_acmev1_drive_h struct md_acme_driver_t; struct md_proto_driver_t; struct md_result_t; apr_status_t md_acmev1_drive_renew(struct md_acme_driver_t *ad, struct md_proto_driver_t *d, struct md_result_t *result); #endif /* md_acmev1_drive_h */ �����������������������������������������������������httpd-2.4.41/modules/md/config2.m4������������������������������������������������������������������0000644�0000000�0000050�00000026066�13511051361�015103� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������dnl Licensed to the Apache Software Foundation (ASF) under one or more dnl contributor license agreements. See the NOTICE file distributed with dnl this work for additional information regarding copyright ownership. dnl The ASF licenses this file to You under the Apache License, Version 2.0 dnl (the "License"); you may not use this file except in compliance with dnl the License. You may obtain a copy of the License at dnl dnl http://www.apache.org/licenses/LICENSE-2.0 dnl dnl Unless required by applicable law or agreed to in writing, software dnl distributed under the License is distributed on an "AS IS" BASIS, dnl WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. dnl See the License for the specific language governing permissions and dnl limitations under the License. dnl dnl APACHE_CHECK_CURL dnl dnl Configure for libcurl, giving preference to dnl "--with-curl=<path>" if it was specified. dnl AC_DEFUN([APACHE_CHECK_CURL],[ AC_CACHE_CHECK([for curl], [ac_cv_curl], [ dnl initialise the variables we use ac_cv_curl=no ap_curl_found="" ap_curl_base="" ap_curl_libs="" dnl Determine the curl base directory, if any AC_MSG_CHECKING([for user-provided curl base directory]) AC_ARG_WITH(curl, APACHE_HELP_STRING(--with-curl=PATH, curl installation directory), [ dnl If --with-curl specifies a directory, we use that directory if test "x$withval" != "xyes" -a "x$withval" != "x"; then dnl This ensures $withval is actually a directory and that it is absolute ap_curl_base="`cd $withval ; pwd`" fi ]) if test "x$ap_curl_base" = "x"; then AC_MSG_RESULT(none) else AC_MSG_RESULT($ap_curl_base) fi dnl Run header and version checks saved_CPPFLAGS="$CPPFLAGS" saved_LIBS="$LIBS" saved_LDFLAGS="$LDFLAGS" dnl Before doing anything else, load in pkg-config variables if test -n "$PKGCONFIG"; then saved_PKG_CONFIG_PATH="$PKG_CONFIG_PATH" AC_MSG_CHECKING([for pkg-config along $PKG_CONFIG_PATH]) if test "x$ap_curl_base" != "x" ; then if test -f "${ap_curl_base}/lib/pkgconfig/libcurl.pc"; then dnl Ensure that the given path is used by pkg-config too, otherwise dnl the system libcurl.pc might be picked up instead. PKG_CONFIG_PATH="${ap_curl_base}/lib/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH elif test -f "${ap_curl_base}/lib64/pkgconfig/libcurl.pc"; then dnl Ensure that the given path is used by pkg-config too, otherwise dnl the system libcurl.pc might be picked up instead. PKG_CONFIG_PATH="${ap_curl_base}/lib64/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH fi fi AC_ARG_ENABLE(curl-staticlib-deps,APACHE_HELP_STRING(--enable-curl-staticlib-deps,[link mod_md with dependencies of libcurl's static libraries (as indicated by "pkg-config --static"). Must be specified in addition to --enable-md.]), [ if test "$enableval" = "yes"; then PKGCONFIG_LIBOPTS="--static" fi ]) ap_curl_libs="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-l --silence-errors libcurl`" if test $? -eq 0; then ap_curl_found="yes" pkglookup="`$PKGCONFIG --cflags-only-I libcurl`" APR_ADDTO(CPPFLAGS, [$pkglookup]) APR_ADDTO(MOD_CFLAGS, [$pkglookup]) pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-L libcurl`" APR_ADDTO(LDFLAGS, [$pkglookup]) APR_ADDTO(MOD_LDFLAGS, [$pkglookup]) pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-other libcurl`" APR_ADDTO(LDFLAGS, [$pkglookup]) APR_ADDTO(MOD_LDFLAGS, [$pkglookup]) fi PKG_CONFIG_PATH="$saved_PKG_CONFIG_PATH" fi dnl fall back to the user-supplied directory if not found via pkg-config if test "x$ap_curl_base" != "x" -a "x$ap_curl_found" = "x"; then APR_ADDTO(CPPFLAGS, [-I$ap_curl_base/include]) APR_ADDTO(MOD_CFLAGS, [-I$ap_curl_base/include]) APR_ADDTO(LDFLAGS, [-L$ap_curl_base/lib]) APR_ADDTO(MOD_LDFLAGS, [-L$ap_curl_base/lib]) if test "x$ap_platform_runtime_link_flag" != "x"; then APR_ADDTO(LDFLAGS, [$ap_platform_runtime_link_flag$ap_curl_base/lib]) APR_ADDTO(MOD_LDFLAGS, [$ap_platform_runtime_link_flag$ap_curl_base/lib]) fi fi AC_CHECK_HEADERS([curl/curl.h]) AC_MSG_CHECKING([for curl version >= 7.50]) AC_TRY_COMPILE([#include <curl/curlver.h>],[ #if !defined(LIBCURL_VERSION_MAJOR) #error "Missing libcurl version" #endif #if LIBCURL_VERSION_MAJOR < 7 #error "Unsupported libcurl version " LIBCURL_VERSION #endif #if LIBCURL_VERSION_MAJOR == 7 && LIBCURL_VERSION_MINOR < 50 #error "Unsupported libcurl version " LIBCURL_VERSION #endif], [AC_MSG_RESULT(OK) ac_cv_curl=yes], [AC_MSG_RESULT(FAILED)]) if test "x$ac_cv_curl" = "xyes"; then ap_curl_libs="${ap_curl_libs:--lcurl} `$apr_config --libs`" APR_ADDTO(MOD_LDFLAGS, [$ap_curl_libs]) APR_ADDTO(LIBS, [$ap_curl_libs]) fi dnl restore CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" ]) if test "x$ac_cv_curl" = "xyes"; then AC_DEFINE(HAVE_CURL, 1, [Define if curl is available]) fi ]) dnl dnl APACHE_CHECK_JANSSON dnl dnl Configure for libjansson, giving preference to dnl "--with-jansson=<path>" if it was specified. dnl AC_DEFUN([APACHE_CHECK_JANSSON],[ AC_CACHE_CHECK([for jansson], [ac_cv_jansson], [ dnl initialise the variables we use ac_cv_jansson=no ap_jansson_found="" ap_jansson_base="" ap_jansson_libs="" dnl Determine the jansson base directory, if any AC_MSG_CHECKING([for user-provided jansson base directory]) AC_ARG_WITH(jansson, APACHE_HELP_STRING(--with-jansson=PATH, jansson installation directory), [ dnl If --with-jansson specifies a directory, we use that directory if test "x$withval" != "xyes" -a "x$withval" != "x"; then dnl This ensures $withval is actually a directory and that it is absolute ap_jansson_base="`cd $withval ; pwd`" fi ]) if test "x$ap_jansson_base" = "x"; then AC_MSG_RESULT(none) else AC_MSG_RESULT($ap_jansson_base) fi dnl Run header and version checks saved_CPPFLAGS="$CPPFLAGS" saved_LIBS="$LIBS" saved_LDFLAGS="$LDFLAGS" dnl Before doing anything else, load in pkg-config variables if test -n "$PKGCONFIG"; then saved_PKG_CONFIG_PATH="$PKG_CONFIG_PATH" AC_MSG_CHECKING([for pkg-config along $PKG_CONFIG_PATH]) if test "x$ap_jansson_base" != "x" ; then if test -f "${ap_jansson_base}/lib/pkgconfig/libjansson.pc"; then dnl Ensure that the given path is used by pkg-config too, otherwise dnl the system libjansson.pc might be picked up instead. PKG_CONFIG_PATH="${ap_jansson_base}/lib/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH elif test -f "${ap_jansson_base}/lib64/pkgconfig/libjansson.pc"; then dnl Ensure that the given path is used by pkg-config too, otherwise dnl the system libjansson.pc might be picked up instead. PKG_CONFIG_PATH="${ap_jansson_base}/lib64/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}" export PKG_CONFIG_PATH fi fi AC_ARG_ENABLE(jansson-staticlib-deps,APACHE_HELP_STRING(--enable-jansson-staticlib-deps,[link mod_md with dependencies of libjansson's static libraries (as indicated by "pkg-config --static"). Must be specified in addition to --enable-md.]), [ if test "$enableval" = "yes"; then PKGCONFIG_LIBOPTS="--static" fi ]) ap_jansson_libs="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-l --silence-errors libjansson`" if test $? -eq 0; then ap_jansson_found="yes" pkglookup="`$PKGCONFIG --cflags-only-I libjansson`" APR_ADDTO(CPPFLAGS, [$pkglookup]) APR_ADDTO(MOD_CFLAGS, [$pkglookup]) pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-L libjansson`" APR_ADDTO(LDFLAGS, [$pkglookup]) APR_ADDTO(MOD_LDFLAGS, [$pkglookup]) pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-other libjansson`" APR_ADDTO(LDFLAGS, [$pkglookup]) APR_ADDTO(MOD_LDFLAGS, [$pkglookup]) fi PKG_CONFIG_PATH="$saved_PKG_CONFIG_PATH" fi dnl fall back to the user-supplied directory if not found via pkg-config if test "x$ap_jansson_base" != "x" -a "x$ap_jansson_found" = "x"; then APR_ADDTO(CPPFLAGS, [-I$ap_jansson_base/include]) APR_ADDTO(MOD_CFLAGS, [-I$ap_jansson_base/include]) APR_ADDTO(LDFLAGS, [-L$ap_jansson_base/lib]) APR_ADDTO(MOD_LDFLAGS, [-L$ap_jansson_base/lib]) if test "x$ap_platform_runtime_link_flag" != "x"; then APR_ADDTO(LDFLAGS, [$ap_platform_runtime_link_flag$ap_jansson_base/lib]) APR_ADDTO(MOD_LDFLAGS, [$ap_platform_runtime_link_flag$ap_jansson_base/lib]) fi fi # attempts to include jansson.h fail me. So lets make sure we can at least # include its other header file AC_TRY_COMPILE([#include <jansson_config.h>],[], [AC_MSG_RESULT(OK) ac_cv_jansson=yes], [AC_MSG_RESULT(FAILED)]) if test "x$ac_cv_jansson" = "xyes"; then ap_jansson_libs="${ap_jansson_libs:--ljansson} `$apr_config --libs`" APR_ADDTO(MOD_LDFLAGS, [$ap_jansson_libs]) APR_ADDTO(LIBS, [$ap_jansson_libs]) fi dnl restore CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" ]) if test "x$ac_cv_jansson" = "xyes"; then AC_DEFINE(HAVE_JANSSON, 1, [Define if jansson is available]) fi ]) dnl # start of module specific part APACHE_MODPATH_INIT(md) dnl # list of module object files md_objs="dnl md_acme.lo dnl md_acme_acct.lo dnl md_acme_authz.lo dnl md_acme_drive.lo dnl md_acmev1_drive.lo dnl md_acmev2_drive.lo dnl md_acme_order.lo dnl md_core.lo dnl md_curl.lo dnl md_crypt.lo dnl md_http.lo dnl md_json.lo dnl md_jws.lo dnl md_log.lo dnl md_result.lo dnl md_reg.lo dnl md_status.lo dnl md_store.lo dnl md_store_fs.lo dnl md_time.lo dnl md_util.lo dnl mod_md.lo dnl mod_md_config.lo dnl mod_md_drive.lo dnl mod_md_os.lo dnl mod_md_status.lo dnl " # Ensure that other modules can pick up mod_md.h APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) dnl # hook module into the Autoconf mechanism (--enable-md) APACHE_MODULE(md, [Managed Domain handling], $md_objs, , most, [ APACHE_CHECK_OPENSSL if test "x$ac_cv_openssl" = "xno" ; then AC_MSG_WARN([libssl (or compatible) not found]) enable_md=no fi APACHE_CHECK_JANSSON if test "x$ac_cv_jansson" != "xyes" ; then AC_MSG_WARN([libjansson not found]) enable_md=no fi APACHE_CHECK_CURL if test "x$ac_cv_curl" != "xyes" ; then AC_MSG_WARN([libcurl not found]) enable_md=no fi AC_CHECK_FUNCS([arc4random_buf], [APR_ADDTO(MOD_CPPFLAGS, ["-DMD_HAVE_ARC4RANDOM"])], []) if test "x$enable_md" = "xshared"; then APR_ADDTO(MOD_MD_LDADD, [-export-symbols-regex md_module]) fi ]) dnl # end of module specific part APACHE_MODPATH_FINISH ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_jws.c��������������������������������������������������������������������0000644�0000000�0000050�00000007073�13511051361�014736� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <apr_lib.h> #include <apr_strings.h> #include <apr_tables.h> #include <apr_buckets.h> #include "md_crypt.h" #include "md_json.h" #include "md_jws.h" #include "md_log.h" #include "md_util.h" static int header_set(void *data, const char *key, const char *val) { md_json_sets(val, (md_json_t *)data, key, NULL); return 1; } apr_status_t md_jws_sign(md_json_t **pmsg, apr_pool_t *p, const char *payload, size_t len, struct apr_table_t *protected, struct md_pkey_t *pkey, const char *key_id) { md_json_t *msg, *jprotected; const char *prot64, *pay64, *sign64, *sign, *prot; apr_status_t rv = APR_SUCCESS; *pmsg = NULL; msg = md_json_create(p); jprotected = md_json_create(p); md_json_sets("RS256", jprotected, "alg", NULL); if (key_id) { md_json_sets(key_id, jprotected, "kid", NULL); } else { md_json_sets(md_pkey_get_rsa_e64(pkey, p), jprotected, "jwk", "e", NULL); md_json_sets("RSA", jprotected, "jwk", "kty", NULL); md_json_sets(md_pkey_get_rsa_n64(pkey, p), jprotected, "jwk", "n", NULL); } apr_table_do(header_set, jprotected, protected, NULL); prot = md_json_writep(jprotected, p, MD_JSON_FMT_COMPACT); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE4, 0, p, "protected: %s", prot ? prot : "<failed to serialize!>"); if (!prot) { rv = APR_EINVAL; } if (rv == APR_SUCCESS) { prot64 = md_util_base64url_encode(prot, strlen(prot), p); md_json_sets(prot64, msg, "protected", NULL); pay64 = md_util_base64url_encode(payload, len, p); md_json_sets(pay64, msg, "payload", NULL); sign = apr_psprintf(p, "%s.%s", prot64, pay64); rv = md_crypt_sign64(&sign64, pkey, p, sign, strlen(sign)); } if (rv == APR_SUCCESS) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, 0, p, "jws pay64=%s\nprot64=%s\nsign64=%s", pay64, prot64, sign64); md_json_sets(sign64, msg, "signature", NULL); } else { md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, rv, p, "jwk signed message"); } *pmsg = (APR_SUCCESS == rv)? msg : NULL; return rv; } apr_status_t md_jws_pkey_thumb(const char **pthumb, apr_pool_t *p, struct md_pkey_t *pkey) { const char *e64, *n64, *s; md_data data; apr_status_t rv; e64 = md_pkey_get_rsa_e64(pkey, p); n64 = md_pkey_get_rsa_n64(pkey, p); if (!e64 || !n64) { return APR_EINVAL; } /* whitespace and order is relevant, since we hand out a digest of this */ s = apr_psprintf(p, "{\"e\":\"%s\",\"kty\":\"RSA\",\"n\":\"%s\"}", e64, n64); MD_DATA_SET_STR(&data, s); rv = md_crypt_sha256_digest64(pthumb, p, &data); return rv; } ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_curl.h�������������������������������������������������������������������0000644�0000000�0000050�00000001654�13234043402�015103� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef md_curl_h #define md_curl_h struct md_http_impl; struct md_http_impl_t * md_curl_get_impl(apr_pool_t *p); #endif /* md_curl_h */ ������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_time.c�������������������������������������������������������������������0000644�0000000�0000050�00000017760�13522005744�015103� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <stdio.h> #include <apr_lib.h> #include <apr_strings.h> #include <apr_time.h> #include "md.h" #include "md_time.h" apr_time_t md_timeperiod_length(const md_timeperiod_t *period) { return (period->start < period->end)? (period->end - period->start) : 0; } int md_timeperiod_contains(const md_timeperiod_t *period, apr_time_t time) { return md_timeperiod_has_started(period, time) && !md_timeperiod_has_ended(period, time); } int md_timeperiod_has_started(const md_timeperiod_t *period, apr_time_t time) { return (time >= period->start); } int md_timeperiod_has_ended(const md_timeperiod_t *period, apr_time_t time) { return (time >= period->start) && (time <= period->end); } char *md_timeperiod_print(apr_pool_t *p, const md_timeperiod_t *period) { char tstart[APR_RFC822_DATE_LEN]; char tend[APR_RFC822_DATE_LEN]; apr_rfc822_date(tstart, period->start); apr_rfc822_date(tend, period->end); return apr_pstrcat(p, tstart, " - ", tend, NULL); } const char *md_duration_print(apr_pool_t *p, apr_interval_time_t duration) { const char *s = "", *sep = ""; long days = (long)(apr_time_sec(duration) / MD_SECS_PER_DAY); int rem = (int)(apr_time_sec(duration) % MD_SECS_PER_DAY); if (days > 0) { s = apr_psprintf(p, "%ld days", days); sep = " "; } if (rem > 0) { int hours = (rem / MD_SECS_PER_HOUR); rem = (rem % MD_SECS_PER_HOUR); if (hours > 0) { s = apr_psprintf(p, "%s%s%02d hours", s, sep, hours); sep = " "; } if (rem > 0) { int minutes = (rem / 60); rem = (rem % 60); if (minutes > 0) { s = apr_psprintf(p, "%s%s%02d minutes", s, sep, minutes); } if (rem > 0) { s = apr_psprintf(p, "%s%s%02d seconds", s, sep, rem); } } } else if (days == 0) { s = "0 seconds"; if (duration != 0) { s = apr_psprintf(p, "%d ms", (int)apr_time_msec(duration)); } } return s; } static const char *duration_format(apr_pool_t *p, apr_interval_time_t duration) { const char *s = "0"; int units = (int)(apr_time_sec(duration) / MD_SECS_PER_DAY); int rem = (int)(apr_time_sec(duration) % MD_SECS_PER_DAY); if (rem == 0) { s = apr_psprintf(p, "%dd", units); } else { units = (int)(apr_time_sec(duration) / MD_SECS_PER_HOUR); rem = (int)(apr_time_sec(duration) % MD_SECS_PER_HOUR); if (rem == 0) { s = apr_psprintf(p, "%dh", units); } else { units = (int)(apr_time_sec(duration) / 60); rem = (int)(apr_time_sec(duration) % 60); if (rem == 0) { s = apr_psprintf(p, "%dmi", units); } else { units = (int)(apr_time_sec(duration)); rem = (int)(apr_time_msec(duration) % 1000); if (rem == 0) { s = apr_psprintf(p, "%ds", units); } else { s = apr_psprintf(p, "%dms", (int)(apr_time_msec(duration))); } } } } return s; } apr_status_t md_duration_parse(apr_interval_time_t *ptimeout, const char *value, const char *def_unit) { char *endp; apr_int64_t n; n = apr_strtoi64(value, &endp, 10); if (errno) { return errno; } if (!endp || !*endp) { if (!def_unit) def_unit = "s"; } else if (endp == value) { return APR_EINVAL; } else { def_unit = endp; } switch (*def_unit) { case 'D': case 'd': *ptimeout = apr_time_from_sec(n * MD_SECS_PER_DAY); break; case 's': case 'S': *ptimeout = (apr_interval_time_t) apr_time_from_sec(n); break; case 'h': case 'H': /* Time is in hours */ *ptimeout = (apr_interval_time_t) apr_time_from_sec(n * MD_SECS_PER_HOUR); break; case 'm': case 'M': switch (*(++def_unit)) { /* Time is in milliseconds */ case 's': case 'S': *ptimeout = (apr_interval_time_t) n * 1000; break; /* Time is in minutes */ case 'i': case 'I': *ptimeout = (apr_interval_time_t) apr_time_from_sec(n * 60); break; default: return APR_EGENERAL; } break; default: return APR_EGENERAL; } return APR_SUCCESS; } static apr_status_t percentage_parse(const char *value, int *ppercent) { char *endp; apr_int64_t n; n = apr_strtoi64(value, &endp, 10); if (errno) { return errno; } if (*endp == '%') { if (n < 0) { return APR_BADARG; } *ppercent = (int)n; return APR_SUCCESS; } return APR_EINVAL; } apr_status_t md_timeslice_create(const md_timeslice_t **pts, apr_pool_t *p, apr_interval_time_t norm, apr_interval_time_t len) { md_timeslice_t *ts; ts = apr_pcalloc(p, sizeof(*ts)); ts->norm = norm; ts->len = len; *pts = ts; return APR_SUCCESS; } const char *md_timeslice_parse(const md_timeslice_t **pts, apr_pool_t *p, const char *val, apr_interval_time_t norm) { md_timeslice_t *ts; int percent = 0; *pts = NULL; if (!val) { return "cannot parse NULL value"; } ts = apr_pcalloc(p, sizeof(*ts)); if (md_duration_parse(&ts->len, val, "d") == APR_SUCCESS) { *pts = ts; return NULL; } else { switch (percentage_parse(val, &percent)) { case APR_SUCCESS: ts->norm = norm; ts->len = apr_time_from_sec((apr_time_sec(norm) * percent / 100L)); *pts = ts; return NULL; case APR_BADARG: return "percent must be less than 100"; } } return "has unrecognized format"; } const char *md_timeslice_format(const md_timeslice_t *ts, apr_pool_t *p) { if (ts->norm > 0) { int percent = (int)(((long)apr_time_sec(ts->len)) * 100L / ((long)apr_time_sec(ts->norm))); return apr_psprintf(p, "%d%%", percent); } return duration_format(p, ts->len); } md_timeperiod_t md_timeperiod_slice_before_end(const md_timeperiod_t *period, const md_timeslice_t *ts) { md_timeperiod_t r; apr_time_t duration = ts->len; if (ts->norm > 0) { int percent = (int)(((long)apr_time_sec(ts->len)) * 100L / ((long)apr_time_sec(ts->norm))); apr_time_t plen = md_timeperiod_length(period); if (apr_time_sec(plen) > 100) { duration = apr_time_from_sec(apr_time_sec(plen) * percent / 100); } else { duration = plen * percent / 100; } } r.start = period->end - duration; r.end = period->end; return r; } int md_timeslice_eq(const md_timeslice_t *ts1, const md_timeslice_t *ts2) { if (ts1 == ts2) return 1; if (!ts1 || !ts2) return 0; return (ts1->norm == ts2->norm) && (ts1->len == ts2->len); } ����������������httpd-2.4.41/modules/md/md_util.c�������������������������������������������������������������������0000644�0000000�0000050�00000124617�13511051361�015114� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <stdio.h> #include <apr_lib.h> #include <apr_strings.h> #include <apr_portable.h> #include <apr_file_info.h> #include <apr_fnmatch.h> #include <apr_tables.h> #include <apr_uri.h> #include "md.h" #include "md_log.h" #include "md_util.h" /**************************************************************************************************/ /* pool utils */ apr_status_t md_util_pool_do(md_util_action *cb, void *baton, apr_pool_t *p) { apr_pool_t *ptemp; apr_status_t rv = apr_pool_create(&ptemp, p); if (APR_SUCCESS == rv) { rv = cb(baton, p, ptemp); apr_pool_destroy(ptemp); } return rv; } static apr_status_t pool_vado(md_util_vaction *cb, void *baton, apr_pool_t *p, va_list ap) { apr_pool_t *ptemp; apr_status_t rv; rv = apr_pool_create(&ptemp, p); if (APR_SUCCESS == rv) { rv = cb(baton, p, ptemp, ap); apr_pool_destroy(ptemp); } return rv; } apr_status_t md_util_pool_vdo(md_util_vaction *cb, void *baton, apr_pool_t *p, ...) { va_list ap; apr_status_t rv; va_start(ap, p); rv = pool_vado(cb, baton, p, ap); va_end(ap); return rv; } /**************************************************************************************************/ /* data chunks */ md_data *md_data_create(apr_pool_t *p, const char *data, apr_size_t len) { md_data *d; d = apr_palloc(p, sizeof(*d)); d->len = len; d->data = len? apr_pstrndup(p, data, len) : NULL; return d; } static const char * const hex_const[] = { "00", "01", "02", "03", "04", "05", "06", "07", "08", "09", "0a", "0b", "0c", "0d", "0e", "0f", "10", "11", "12", "13", "14", "15", "16", "17", "18", "19", "1a", "1b", "1c", "1d", "1e", "1f", "20", "21", "22", "23", "24", "25", "26", "27", "28", "29", "2a", "2b", "2c", "2d", "2e", "2f", "30", "31", "32", "33", "34", "35", "36", "37", "38", "39", "3a", "3b", "3c", "3d", "3e", "3f", "40", "41", "42", "43", "44", "45", "46", "47", "48", "49", "4a", "4b", "4c", "4d", "4e", "4f", "50", "51", "52", "53", "54", "55", "56", "57", "58", "59", "5a", "5b", "5c", "5d", "5e", "5f", "60", "61", "62", "63", "64", "65", "66", "67", "68", "69", "6a", "6b", "6c", "6d", "6e", "6f", "70", "71", "72", "73", "74", "75", "76", "77", "78", "79", "7a", "7b", "7c", "7d", "7e", "7f", "80", "81", "82", "83", "84", "85", "86", "87", "88", "89", "8a", "8b", "8c", "8d", "8e", "8f", "90", "91", "92", "93", "94", "95", "96", "97", "98", "99", "9a", "9b", "9c", "9d", "9e", "9f", "a0", "a1", "a2", "a3", "a4", "a5", "a6", "a7", "a8", "a9", "aa", "ab", "ac", "ad", "ae", "af", "b0", "b1", "b2", "b3", "b4", "b5", "b6", "b7", "b8", "b9", "ba", "bb", "bc", "bd", "be", "bf", "c0", "c1", "c2", "c3", "c4", "c5", "c6", "c7", "c8", "c9", "ca", "cb", "cc", "cd", "ce", "cf", "d0", "d1", "d2", "d3", "d4", "d5", "d6", "d7", "d8", "d9", "da", "db", "dc", "dd", "de", "df", "e0", "e1", "e2", "e3", "e4", "e5", "e6", "e7", "e8", "e9", "ea", "eb", "ec", "ed", "ee", "ef", "f0", "f1", "f2", "f3", "f4", "f5", "f6", "f7", "f8", "f9", "fa", "fb", "fc", "fd", "fe", "ff", }; apr_status_t md_data_to_hex(const char **phex, char separator, apr_pool_t *p, const md_data *data) { char *hex, *cp; const char * x; unsigned int i; cp = hex = apr_pcalloc(p, ((separator? 3 : 2) * data->len) + 1); if (!hex) { *phex = NULL; return APR_ENOMEM; } for (i = 0; i < data->len; ++i) { x = hex_const[(unsigned char)data->data[i]]; if (i && separator) *cp++ = separator; *cp++ = x[0]; *cp++ = x[1]; } *phex = hex; return APR_SUCCESS; } /**************************************************************************************************/ /* string related */ int md_array_is_empty(const struct apr_array_header_t *array) { return (array == NULL) || (array->nelts == 0); } char *md_util_str_tolower(char *s) { char *orig = s; while (*s) { *s = (char)apr_tolower(*s); ++s; } return orig; } int md_array_str_index(const apr_array_header_t *array, const char *s, int start, int case_sensitive) { if (start >= 0) { int i; for (i = start; i < array->nelts; i++) { const char *p = APR_ARRAY_IDX(array, i, const char *); if ((case_sensitive && !strcmp(p, s)) || (!case_sensitive && !apr_strnatcasecmp(p, s))) { return i; } } } return -1; } int md_array_str_eq(const struct apr_array_header_t *a1, const struct apr_array_header_t *a2, int case_sensitive) { int i; const char *s1, *s2; if (a1 == a2) return 1; if (!a1) return 0; if (a1->nelts != a2->nelts) return 0; for (i = 0; i < a1->nelts; ++i) { s1 = APR_ARRAY_IDX(a1, i, const char *); s2 = APR_ARRAY_IDX(a2, i, const char *); if ((case_sensitive && strcmp(s1, s2)) || (!case_sensitive && apr_strnatcasecmp(s1, s2))) { return 0; } } return 1; } apr_array_header_t *md_array_str_clone(apr_pool_t *p, apr_array_header_t *src) { apr_array_header_t *dest = apr_array_make(p, src->nelts, sizeof(const char*)); if (dest) { int i; for (i = 0; i < src->nelts; i++) { const char *s = APR_ARRAY_IDX(src, i, const char *); APR_ARRAY_PUSH(dest, const char *) = apr_pstrdup(p, s); } } return dest; } struct apr_array_header_t *md_array_str_compact(apr_pool_t *p, struct apr_array_header_t *src, int case_sensitive) { apr_array_header_t *dest = apr_array_make(p, src->nelts, sizeof(const char*)); if (dest) { const char *s; int i; for (i = 0; i < src->nelts; ++i) { s = APR_ARRAY_IDX(src, i, const char *); if (md_array_str_index(dest, s, 0, case_sensitive) < 0) { APR_ARRAY_PUSH(dest, char *) = md_util_str_tolower(apr_pstrdup(p, s)); } } } return dest; } apr_array_header_t *md_array_str_remove(apr_pool_t *p, apr_array_header_t *src, const char *exclude, int case_sensitive) { apr_array_header_t *dest = apr_array_make(p, src->nelts, sizeof(const char*)); if (dest) { int i; for (i = 0; i < src->nelts; i++) { const char *s = APR_ARRAY_IDX(src, i, const char *); if (!exclude || (case_sensitive && strcmp(exclude, s)) || (!case_sensitive && apr_strnatcasecmp(exclude, s))) { APR_ARRAY_PUSH(dest, const char *) = apr_pstrdup(p, s); } } } return dest; } int md_array_str_add_missing(apr_array_header_t *dest, apr_array_header_t *src, int case_sensitive) { int i, added = 0; for (i = 0; i < src->nelts; i++) { const char *s = APR_ARRAY_IDX(src, i, const char *); if (md_array_str_index(dest, s, 0, case_sensitive) < 0) { APR_ARRAY_PUSH(dest, const char *) = s; ++added; } } return added; } /**************************************************************************************************/ /* file system related */ apr_status_t md_util_fopen(FILE **pf, const char *fn, const char *mode) { *pf = fopen(fn, mode); if (*pf == NULL) { return errno; } return APR_SUCCESS; } apr_status_t md_util_fcreatex(apr_file_t **pf, const char *fn, apr_fileperms_t perms, apr_pool_t *p) { apr_status_t rv; rv = apr_file_open(pf, fn, (APR_FOPEN_WRITE|APR_FOPEN_CREATE|APR_FOPEN_EXCL), perms, p); if (APR_SUCCESS == rv) { /* See <https://github.com/icing/mod_md/issues/117> * Some people set umask 007 to deny all world read/writability to files * created by apache. While this is a noble effort, we need the store files * to have the permissions as specified. */ rv = apr_file_perms_set(fn, perms); if (APR_STATUS_IS_ENOTIMPL(rv)) { rv = APR_SUCCESS; } } return rv; } apr_status_t md_util_is_dir(const char *path, apr_pool_t *pool) { apr_finfo_t info; apr_status_t rv = apr_stat(&info, path, APR_FINFO_TYPE, pool); if (rv == APR_SUCCESS) { rv = (info.filetype == APR_DIR)? APR_SUCCESS : APR_EINVAL; } return rv; } apr_status_t md_util_is_file(const char *path, apr_pool_t *pool) { apr_finfo_t info; apr_status_t rv = apr_stat(&info, path, APR_FINFO_TYPE, pool); if (rv == APR_SUCCESS) { rv = (info.filetype == APR_REG)? APR_SUCCESS : APR_EINVAL; } return rv; } int md_file_exists(const char *fname, apr_pool_t *p) { return (fname && *fname && APR_SUCCESS == md_util_is_file(fname, p)); } apr_status_t md_util_path_merge(const char **ppath, apr_pool_t *p, ...) { const char *segment, *path; va_list ap; apr_status_t rv = APR_SUCCESS; va_start(ap, p); path = va_arg(ap, char *); while (path && APR_SUCCESS == rv && (segment = va_arg(ap, char *))) { rv = apr_filepath_merge((char **)&path, path, segment, APR_FILEPATH_SECUREROOT , p); } va_end(ap); *ppath = (APR_SUCCESS == rv)? (path? path : "") : NULL; return rv; } apr_status_t md_util_freplace(const char *fpath, apr_fileperms_t perms, apr_pool_t *p, md_util_file_cb *write_cb, void *baton) { apr_status_t rv = APR_EEXIST; apr_file_t *f; const char *tmp; int i, max; tmp = apr_psprintf(p, "%s.tmp", fpath); i = 0; max = 20; creat: while (i < max && APR_EEXIST == (rv = md_util_fcreatex(&f, tmp, perms, p))) { ++i; apr_sleep(apr_time_msec(50)); } if (APR_EEXIST == rv && APR_SUCCESS == (rv = apr_file_remove(tmp, p)) && max <= 20) { max *= 2; goto creat; } if (APR_SUCCESS == rv) { rv = write_cb(baton, f, p); apr_file_close(f); if (APR_SUCCESS == rv) { rv = apr_file_rename(tmp, fpath, p); if (APR_SUCCESS != rv) { apr_file_remove(tmp, p); } } } return rv; } /**************************************************************************************************/ /* text files */ apr_status_t md_text_fread8k(const char **ptext, apr_pool_t *p, const char *fpath) { apr_status_t rv; apr_file_t *f; char buffer[8 * 1024]; *ptext = NULL; if (APR_SUCCESS == (rv = apr_file_open(&f, fpath, APR_FOPEN_READ, 0, p))) { apr_size_t blen = sizeof(buffer)/sizeof(buffer[0]) - 1; rv = apr_file_read_full(f, buffer, blen, &blen); if (APR_SUCCESS == rv || APR_STATUS_IS_EOF(rv)) { *ptext = apr_pstrndup(p, buffer, blen); rv = APR_SUCCESS; } apr_file_close(f); } return rv; } static apr_status_t write_text(void *baton, struct apr_file_t *f, apr_pool_t *p) { const char *text = baton; apr_size_t len = strlen(text); (void)p; return apr_file_write_full(f, text, len, &len); } apr_status_t md_text_fcreatex(const char *fpath, apr_fileperms_t perms, apr_pool_t *p, const char *text) { apr_status_t rv; apr_file_t *f; rv = md_util_fcreatex(&f, fpath, perms, p); if (APR_SUCCESS == rv) { rv = write_text((void*)text, f, p); apr_file_close(f); /* See <https://github.com/icing/mod_md/issues/117>: when a umask * is set, files need to be assigned permissions explicitly. * Otherwise, as in the issues reported, it will break our access model. */ rv = apr_file_perms_set(fpath, perms); if (APR_STATUS_IS_ENOTIMPL(rv)) { rv = APR_SUCCESS; } } return rv; } apr_status_t md_text_freplace(const char *fpath, apr_fileperms_t perms, apr_pool_t *p, const char *text) { return md_util_freplace(fpath, perms, p, write_text, (void*)text); } typedef struct { const char *path; apr_array_header_t *patterns; int follow_links; void *baton; md_util_fdo_cb *cb; } md_util_fwalk_t; static apr_status_t rm_recursive(const char *fpath, apr_pool_t *p, int max_level) { apr_finfo_t info; apr_status_t rv; const char *npath; if (APR_SUCCESS != (rv = apr_stat(&info, fpath, (APR_FINFO_TYPE|APR_FINFO_LINK), p))) { return rv; } if (info.filetype == APR_DIR) { if (max_level > 0) { apr_dir_t *d; if (APR_SUCCESS == (rv = apr_dir_open(&d, fpath, p))) { while (APR_SUCCESS == rv && APR_SUCCESS == (rv = apr_dir_read(&info, APR_FINFO_TYPE, d))) { if (!strcmp(".", info.name) || !strcmp("..", info.name)) { continue; } rv = md_util_path_merge(&npath, p, fpath, info.name, NULL); if (APR_SUCCESS == rv) { rv = rm_recursive(npath, p, max_level - 1); } } apr_dir_close(d); if (APR_STATUS_IS_ENOENT(rv)) { rv = APR_SUCCESS; } } } if (APR_SUCCESS == rv) { rv = apr_dir_remove(fpath, p); } } else { rv = apr_file_remove(fpath, p); } return rv; } static apr_status_t prm_recursive(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { int max_level = va_arg(ap, int); (void)p; return rm_recursive(baton, ptemp, max_level); } apr_status_t md_util_rm_recursive(const char *fpath, apr_pool_t *p, int max_level) { return md_util_pool_vdo(prm_recursive, (void*)fpath, p, max_level, NULL); } static apr_status_t match_and_do(md_util_fwalk_t *ctx, const char *path, int depth, apr_pool_t *p, apr_pool_t *ptemp) { apr_status_t rv = APR_SUCCESS; const char *pattern, *npath; apr_dir_t *d; apr_finfo_t finfo; int ndepth = depth + 1; apr_int32_t wanted = (APR_FINFO_TYPE); if (depth >= ctx->patterns->nelts) { return APR_SUCCESS; } pattern = APR_ARRAY_IDX(ctx->patterns, depth, const char *); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE4, 0, ptemp, "match_and_do " "path=%s depth=%d pattern=%s", path, depth, pattern); rv = apr_dir_open(&d, path, ptemp); if (APR_SUCCESS != rv) { return rv; } while (APR_SUCCESS == (rv = apr_dir_read(&finfo, wanted, d))) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE4, 0, ptemp, "match_and_do " "candidate=%s", finfo.name); if (!strcmp(".", finfo.name) || !strcmp("..", finfo.name)) { continue; } if (APR_SUCCESS == apr_fnmatch(pattern, finfo.name, 0)) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE4, 0, ptemp, "match_and_do " "candidate=%s matches pattern", finfo.name); if (ndepth < ctx->patterns->nelts) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE4, 0, ptemp, "match_and_do " "need to go deepter"); if (APR_DIR == finfo.filetype) { /* deeper and deeper, irgendwo in der tiefe leuchtet ein licht */ rv = md_util_path_merge(&npath, ptemp, path, finfo.name, NULL); if (APR_SUCCESS == rv) { rv = match_and_do(ctx, npath, ndepth, p, ptemp); } } } else { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE4, 0, ptemp, "match_and_do " "invoking inspector on name=%s", finfo.name); rv = ctx->cb(ctx->baton, p, ptemp, path, finfo.name, finfo.filetype); } } if (APR_SUCCESS != rv) { break; } } if (APR_STATUS_IS_ENOENT(rv)) { rv = APR_SUCCESS; } apr_dir_close(d); return rv; } static apr_status_t files_do_start(void *baton, apr_pool_t *p, apr_pool_t *ptemp, va_list ap) { md_util_fwalk_t *ctx = baton; const char *segment; ctx->patterns = apr_array_make(ptemp, 5, sizeof(const char*)); segment = va_arg(ap, char *); while (segment) { APR_ARRAY_PUSH(ctx->patterns, const char *) = segment; segment = va_arg(ap, char *); } return match_and_do(ctx, ctx->path, 0, p, ptemp); } apr_status_t md_util_files_do(md_util_fdo_cb *cb, void *baton, apr_pool_t *p, const char *path, ...) { apr_status_t rv; va_list ap; md_util_fwalk_t ctx; memset(&ctx, 0, sizeof(ctx)); ctx.path = path; ctx.follow_links = 1; ctx.cb = cb; ctx.baton = baton; va_start(ap, path); rv = pool_vado(files_do_start, &ctx, p, ap); va_end(ap); return rv; } static apr_status_t tree_do(void *baton, apr_pool_t *p, apr_pool_t *ptemp, const char *path) { md_util_fwalk_t *ctx = baton; apr_status_t rv = APR_SUCCESS; const char *name, *fpath; apr_filetype_e ftype; apr_dir_t *d; apr_int32_t wanted = APR_FINFO_TYPE; apr_finfo_t finfo; if (APR_SUCCESS == (rv = apr_dir_open(&d, path, ptemp))) { while (APR_SUCCESS == (rv = apr_dir_read(&finfo, wanted, d))) { name = finfo.name; if (!strcmp(".", name) || !strcmp("..", name)) { continue; } fpath = NULL; ftype = finfo.filetype; if (APR_LNK == ftype && ctx->follow_links) { rv = md_util_path_merge(&fpath, ptemp, path, name, NULL); if (APR_SUCCESS == rv) { rv = apr_stat(&finfo, ctx->path, wanted, ptemp); } } if (APR_DIR == finfo.filetype) { if (!fpath) { rv = md_util_path_merge(&fpath, ptemp, path, name, NULL); } if (APR_SUCCESS == rv) { rv = tree_do(ctx, p, ptemp, fpath); md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, rv, ptemp, "dir cb(%s/%s)", path, name); rv = ctx->cb(ctx->baton, p, ptemp, path, name, ftype); } } else { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, rv, ptemp, "file cb(%s/%s)", path, name); rv = ctx->cb(ctx->baton, p, ptemp, path, name, finfo.filetype); } } apr_dir_close(d); if (APR_STATUS_IS_ENOENT(rv)) { rv = APR_SUCCESS; } } return rv; } static apr_status_t tree_start_do(void *baton, apr_pool_t *p, apr_pool_t *ptemp) { md_util_fwalk_t *ctx = baton; apr_finfo_t info; apr_status_t rv; apr_int32_t wanted = ctx->follow_links? APR_FINFO_TYPE : (APR_FINFO_TYPE|APR_FINFO_LINK); rv = apr_stat(&info, ctx->path, wanted, ptemp); if (rv == APR_SUCCESS) { switch (info.filetype) { case APR_DIR: rv = tree_do(ctx, p, ptemp, ctx->path); break; default: rv = APR_EINVAL; } } return rv; } apr_status_t md_util_tree_do(md_util_fdo_cb *cb, void *baton, apr_pool_t *p, const char *path, int follow_links) { apr_status_t rv; md_util_fwalk_t ctx; memset(&ctx, 0, sizeof(ctx)); ctx.path = path; ctx.follow_links = follow_links; ctx.cb = cb; ctx.baton = baton; rv = md_util_pool_do(tree_start_do, &ctx, p); return rv; } static apr_status_t rm_cb(void *baton, apr_pool_t *p, apr_pool_t *ptemp, const char *path, const char *name, apr_filetype_e ftype) { apr_status_t rv; const char *fpath; (void)baton; (void)p; rv = md_util_path_merge(&fpath, ptemp, path, name, NULL); if (APR_SUCCESS == rv) { if (APR_DIR == ftype) { rv = apr_dir_remove(fpath, ptemp); } else { rv = apr_file_remove(fpath, ptemp); } } return rv; } apr_status_t md_util_ftree_remove(const char *path, apr_pool_t *p) { apr_status_t rv = md_util_tree_do(rm_cb, NULL, p, path, 0); if (APR_SUCCESS == rv) { rv = apr_dir_remove(path, p); } return rv; } /* DNS name checks ********************************************************************************/ int md_dns_is_name(apr_pool_t *p, const char *hostname, int need_fqdn) { char c, last = 0; const char *cp = hostname; int dots = 0; /* Since we use the names in certificates, we need pure ASCII domain names * and IDN need to be converted to unicode. */ while ((c = *cp++)) { switch (c) { case '.': if (last == '.') { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, 0, p, "dns name with ..: %s", hostname); return 0; } ++dots; break; case '-': break; default: if (!apr_isalnum(c)) { md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, 0, p, "dns invalid char %c: %s", c, hostname); return 0; } break; } last = c; } if (last == '.') { /* DNS names may end with '.' */ --dots; } if (need_fqdn && dots <= 0) { /* do not accept just top level domains */ md_log_perror(MD_LOG_MARK, MD_LOG_TRACE3, 0, p, "not a FQDN: %s", hostname); return 0; } return 1; /* empty string not allowed */ } int md_dns_is_wildcard(apr_pool_t *p, const char *domain) { if (domain[0] != '*' || domain[1] != '.') return 0; return md_dns_is_name(p, domain+2, 1); } int md_dns_matches(const char *pattern, const char *domain) { const char *s; if (!apr_strnatcasecmp(pattern, domain)) return 1; if (pattern[0] == '*' && pattern[1] == '.') { s = strchr(domain, '.'); if (s && !apr_strnatcasecmp(pattern+1, s)) return 1; } return 0; } apr_array_header_t *md_dns_make_minimal(apr_pool_t *p, apr_array_header_t *domains) { apr_array_header_t *minimal; const char *domain, *pattern; int i, j, duplicate; minimal = apr_array_make(p, domains->nelts, sizeof(const char *)); for (i = 0; i < domains->nelts; ++i) { domain = APR_ARRAY_IDX(domains, i, const char*); duplicate = 0; /* is it matched in minimal already? */ for (j = 0; j < minimal->nelts; ++j) { pattern = APR_ARRAY_IDX(minimal, j, const char*); if (md_dns_matches(pattern, domain)) { duplicate = 1; break; } } if (!duplicate) { if (!md_dns_is_wildcard(p, domain)) { /* plain name, will we see a wildcard that replaces it? */ for (j = i+1; j < domains->nelts; ++j) { pattern = APR_ARRAY_IDX(domains, j, const char*); if (md_dns_is_wildcard(p, pattern) && md_dns_matches(pattern, domain)) { duplicate = 1; break; } } } if (!duplicate) { APR_ARRAY_PUSH(minimal, const char *) = domain; } } } return minimal; } int md_dns_domains_match(const apr_array_header_t *domains, const char *name) { const char *domain; int i; for (i = 0; i < domains->nelts; ++i) { domain = APR_ARRAY_IDX(domains, i, const char*); if (md_dns_matches(domain, name)) return 1; } return 0; } const char *md_util_schemify(apr_pool_t *p, const char *s, const char *def_scheme) { const char *cp = s; while (*cp) { if (*cp == ':') { /* could be an url scheme, leave unchanged */ return s; } else if (!apr_isalnum(*cp)) { break; } ++cp; } return apr_psprintf(p, "%s:%s", def_scheme, s); } static apr_status_t uri_check(apr_uri_t *uri_parsed, apr_pool_t *p, const char *uri, const char **perr) { const char *s, *err = NULL; apr_status_t rv; if (APR_SUCCESS != (rv = apr_uri_parse(p, uri, uri_parsed))) { err = "not an uri"; } else if (uri_parsed->scheme) { if (strlen(uri_parsed->scheme) + 1 >= strlen(uri)) { err = "missing uri identifier"; } else if (!strncmp("http", uri_parsed->scheme, 4)) { if (!uri_parsed->hostname) { err = "missing hostname"; } else if (!md_dns_is_name(p, uri_parsed->hostname, 0)) { err = "invalid hostname"; } if (uri_parsed->port_str && (!apr_isdigit(uri_parsed->port_str[0]) || uri_parsed->port == 0 || uri_parsed->port > 65353)) { err = "invalid port"; } } else if (!strcmp("mailto", uri_parsed->scheme)) { s = strchr(uri, '@'); if (!s) { err = "missing @"; } else if (strchr(s+1, '@')) { err = "duplicate @"; } else if (s == uri + strlen(uri_parsed->scheme) + 1) { err = "missing local part"; } else if (s == (uri + strlen(uri)-1)) { err = "missing hostname"; } else if (strstr(uri, "..")) { err = "double period"; } } } if (strchr(uri, ' ') || strchr(uri, '\t') ) { err = "whitespace in uri"; } if (err) { rv = APR_EINVAL; } *perr = err; return rv; } apr_status_t md_util_abs_uri_check(apr_pool_t *p, const char *uri, const char **perr) { apr_uri_t uri_parsed; apr_status_t rv; if (APR_SUCCESS == (rv = uri_check(&uri_parsed, p, uri, perr))) { if (!uri_parsed.scheme) { *perr = "missing uri scheme"; return APR_EINVAL; } } return rv; } apr_status_t md_util_abs_http_uri_check(apr_pool_t *p, const char *uri, const char **perr) { apr_uri_t uri_parsed; apr_status_t rv; if (APR_SUCCESS == (rv = uri_check(&uri_parsed, p, uri, perr))) { if (!uri_parsed.scheme) { *perr = "missing uri scheme"; return APR_EINVAL; } if (apr_strnatcasecmp("http", uri_parsed.scheme) && apr_strnatcasecmp("https", uri_parsed.scheme)) { *perr = "uri scheme must be http or https"; return APR_EINVAL; } } return rv; } /* try and retry for a while **********************************************************************/ apr_status_t md_util_try(md_util_try_fn *fn, void *baton, int ignore_errs, apr_interval_time_t timeout, apr_interval_time_t start_delay, apr_interval_time_t max_delay, int backoff) { apr_status_t rv; apr_time_t now = apr_time_now(); apr_time_t giveup = now + timeout; apr_interval_time_t nap_duration = start_delay? start_delay : apr_time_from_msec(100); apr_interval_time_t nap_max = max_delay? max_delay : apr_time_from_sec(10); apr_interval_time_t left; int i = 0; while (1) { if (APR_SUCCESS == (rv = fn(baton, i++))) { break; } else if (!APR_STATUS_IS_EAGAIN(rv) && !ignore_errs) { break; } now = apr_time_now(); if (now > giveup) { rv = APR_TIMEUP; break; } left = giveup - now; if (nap_duration > left) { nap_duration = left; } if (nap_duration > nap_max) { nap_duration = nap_max; } apr_sleep(nap_duration); if (backoff) { nap_duration *= 2; } } return rv; } /* execute process ********************************************************************************/ apr_status_t md_util_exec(apr_pool_t *p, const char *cmd, const char * const *argv, int *exit_code) { apr_status_t rv; apr_procattr_t *procattr; apr_proc_t *proc; apr_exit_why_e ewhy; char buffer[1024]; *exit_code = 0; if (!(proc = apr_pcalloc(p, sizeof(*proc)))) { return APR_ENOMEM; } if ( APR_SUCCESS == (rv = apr_procattr_create(&procattr, p)) && APR_SUCCESS == (rv = apr_procattr_io_set(procattr, APR_NO_FILE, APR_NO_PIPE, APR_FULL_BLOCK)) && APR_SUCCESS == (rv = apr_procattr_cmdtype_set(procattr, APR_PROGRAM)) && APR_SUCCESS == (rv = apr_proc_create(proc, cmd, argv, NULL, procattr, p))) { /* read stderr and log on INFO for possible fault analysis. */ while(APR_SUCCESS == (rv = apr_file_gets(buffer, sizeof(buffer)-1, proc->err))) { md_log_perror(MD_LOG_MARK, MD_LOG_INFO, 0, p, "cmd(%s) stderr: %s", cmd, buffer); } if (!APR_STATUS_IS_EOF(rv)) goto out; apr_file_close(proc->err); if (APR_CHILD_DONE == (rv = apr_proc_wait(proc, exit_code, &ewhy, APR_WAIT))) { /* let's not dwell on exit stati, but core should signal something's bad */ if (*exit_code > 127 || APR_PROC_SIGNAL_CORE == ewhy) { return APR_EINCOMPLETE; } return APR_SUCCESS; } } out: return rv; } /* base64 url encoding ****************************************************************************/ #define N6 (unsigned int)-1 static const unsigned int BASE64URL_UINT6[] = { /* 0 1 2 3 4 5 6 7 8 9 a b c d e f */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* 0 */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* 1 */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, 62, N6, N6, /* 2 */ 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, N6, N6, N6, N6, N6, N6, /* 3 */ N6, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, /* 4 */ 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, N6, N6, N6, N6, 63, /* 5 */ N6, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, /* 6 */ 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, N6, N6, N6, N6, N6, /* 7 */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* 8 */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* 9 */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* a */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* b */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* c */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* d */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, /* e */ N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6, N6 /* f */ }; static const unsigned char BASE64URL_CHARS[] = { 'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', 'I', 'J', /* 0 - 9 */ 'K', 'L', 'M', 'N', 'O', 'P', 'Q', 'R', 'S', 'T', /* 10 - 19 */ 'U', 'V', 'W', 'X', 'Y', 'Z', 'a', 'b', 'c', 'd', /* 20 - 29 */ 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', /* 30 - 39 */ 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x', /* 40 - 49 */ 'y', 'z', '0', '1', '2', '3', '4', '5', '6', '7', /* 50 - 59 */ '8', '9', '-', '_', ' ', ' ', ' ', ' ', ' ', ' ', /* 60 - 69 */ }; #define BASE64URL_CHAR(x) BASE64URL_CHARS[ (unsigned int)(x) & 0x3fu ] apr_size_t md_util_base64url_decode(const char **decoded, const char *encoded, apr_pool_t *pool) { const unsigned char *e = (const unsigned char *)encoded; const unsigned char *p = e; unsigned char *d; unsigned int n; long len, mlen, remain, i; while (*p && BASE64URL_UINT6[ *p ] != N6) { ++p; } len = (int)(p - e); mlen = (len/4)*4; *decoded = apr_pcalloc(pool, (apr_size_t)len + 1); i = 0; d = (unsigned char*)*decoded; for (; i < mlen; i += 4) { n = ((BASE64URL_UINT6[ e[i+0] ] << 18) + (BASE64URL_UINT6[ e[i+1] ] << 12) + (BASE64URL_UINT6[ e[i+2] ] << 6) + (BASE64URL_UINT6[ e[i+3] ])); *d++ = (unsigned char)(n >> 16); *d++ = (unsigned char)(n >> 8 & 0xffu); *d++ = (unsigned char)(n & 0xffu); } remain = len - mlen; switch (remain) { case 2: n = ((BASE64URL_UINT6[ e[mlen+0] ] << 18) + (BASE64URL_UINT6[ e[mlen+1] ] << 12)); *d++ = (unsigned char)(n >> 16); remain = 1; break; case 3: n = ((BASE64URL_UINT6[ e[mlen+0] ] << 18) + (BASE64URL_UINT6[ e[mlen+1] ] << 12) + (BASE64URL_UINT6[ e[mlen+2] ] << 6)); *d++ = (unsigned char)(n >> 16); *d++ = (unsigned char)(n >> 8 & 0xffu); remain = 2; break; default: /* do nothing */ break; } return (apr_size_t)(mlen/4*3 + remain); } const char *md_util_base64url_encode(const char *data, apr_size_t dlen, apr_pool_t *pool) { int i, len = (int)dlen; apr_size_t slen = ((dlen+2)/3)*4 + 1; /* 0 terminated */ const unsigned char *udata = (const unsigned char*)data; unsigned char *enc, *p = apr_pcalloc(pool, slen); enc = p; for (i = 0; i < len-2; i+= 3) { *p++ = BASE64URL_CHAR( (udata[i] >> 2) ); *p++ = BASE64URL_CHAR( (udata[i] << 4) + (udata[i+1] >> 4) ); *p++ = BASE64URL_CHAR( (udata[i+1] << 2) + (udata[i+2] >> 6) ); *p++ = BASE64URL_CHAR( (udata[i+2]) ); } if (i < len) { *p++ = BASE64URL_CHAR( (udata[i] >> 2) ); if (i == (len - 1)) { *p++ = BASE64URL_CHARS[ ((unsigned int)udata[i] << 4) & 0x3fu ]; } else { *p++ = BASE64URL_CHAR( (udata[i] << 4) + (udata[i+1] >> 4) ); *p++ = BASE64URL_CHAR( (udata[i+1] << 2) ); } } *p++ = '\0'; return (char *)enc; } /******************************************************************************* * link header handling ******************************************************************************/ typedef struct { const char *s; apr_size_t slen; apr_size_t i; apr_size_t link_start; apr_size_t link_len; apr_size_t pn_start; apr_size_t pn_len; apr_size_t pv_start; apr_size_t pv_len; } link_ctx; static int attr_char(char c) { switch (c) { case '!': case '#': case '$': case '&': case '+': case '-': case '.': case '^': case '_': case '`': case '|': case '~': return 1; default: return apr_isalnum(c); } } static int ptoken_char(char c) { switch (c) { case '!': case '#': case '$': case '&': case '\'': case '(': case ')': case '*': case '+': case '-': case '.': case '/': case ':': case '<': case '=': case '>': case '?': case '@': case '[': case ']': case '^': case '_': case '`': case '{': case '|': case '}': case '~': return 1; default: return apr_isalnum(c); } } static int skip_ws(link_ctx *ctx) { char c; while (ctx->i < ctx->slen && (((c = ctx->s[ctx->i]) == ' ') || (c == '\t'))) { ++ctx->i; } return (ctx->i < ctx->slen); } static int skip_nonws(link_ctx *ctx) { char c; while (ctx->i < ctx->slen && (((c = ctx->s[ctx->i]) != ' ') && (c != '\t'))) { ++ctx->i; } return (ctx->i < ctx->slen); } static unsigned int find_chr(link_ctx *ctx, char c, apr_size_t *pidx) { apr_size_t j; for (j = ctx->i; j < ctx->slen; ++j) { if (ctx->s[j] == c) { *pidx = j; return 1; } } return 0; } static int read_chr(link_ctx *ctx, char c) { if (ctx->i < ctx->slen && ctx->s[ctx->i] == c) { ++ctx->i; return 1; } return 0; } static int skip_qstring(link_ctx *ctx) { if (skip_ws(ctx) && read_chr(ctx, '\"')) { apr_size_t end; if (find_chr(ctx, '\"', &end)) { ctx->i = end + 1; return 1; } } return 0; } static int skip_ptoken(link_ctx *ctx) { if (skip_ws(ctx)) { apr_size_t i; for (i = ctx->i; i < ctx->slen && ptoken_char(ctx->s[i]); ++i) { /* nop */ } if (i > ctx->i) { ctx->i = i; return 1; } } return 0; } static int read_link(link_ctx *ctx) { ctx->link_start = ctx->link_len = 0; if (skip_ws(ctx) && read_chr(ctx, '<')) { apr_size_t end; if (find_chr(ctx, '>', &end)) { ctx->link_start = ctx->i; ctx->link_len = end - ctx->link_start; ctx->i = end + 1; return 1; } } return 0; } static int skip_pname(link_ctx *ctx) { if (skip_ws(ctx)) { apr_size_t i; for (i = ctx->i; i < ctx->slen && attr_char(ctx->s[i]); ++i) { /* nop */ } if (i > ctx->i) { ctx->i = i; return 1; } } return 0; } static int skip_pvalue(link_ctx *ctx) { if (skip_ws(ctx) && read_chr(ctx, '=')) { ctx->pv_start = ctx->i; if (skip_qstring(ctx) || skip_ptoken(ctx)) { ctx->pv_len = ctx->i - ctx->pv_start; return 1; } } return 0; } static int skip_param(link_ctx *ctx) { if (skip_ws(ctx) && read_chr(ctx, ';')) { ctx->pn_start = ctx->i; ctx->pn_len = 0; if (skip_pname(ctx)) { ctx->pn_len = ctx->i - ctx->pn_start; ctx->pv_len = 0; skip_pvalue(ctx); /* value is optional */ return 1; } } return 0; } static int pv_contains(link_ctx *ctx, const char *s) { apr_size_t pvstart = ctx->pv_start; apr_size_t pvlen = ctx->pv_len; if (ctx->s[pvstart] == '\"' && pvlen > 1) { ++pvstart; pvlen -= 2; } if (pvlen > 0) { apr_size_t slen = strlen(s); link_ctx pvctx; apr_size_t i; memset(&pvctx, 0, sizeof(pvctx)); pvctx.s = ctx->s + pvstart; pvctx.slen = pvlen; for (i = 0; i < pvctx.slen; i = pvctx.i) { skip_nonws(&pvctx); if ((pvctx.i - i) == slen && !strncmp(s, pvctx.s + i, slen)) { return 1; } skip_ws(&pvctx); } } return 0; } /* RFC 5988 <https://tools.ietf.org/html/rfc5988#section-6.2.1> Link = "Link" ":" #link-value link-value = "<" URI-Reference ">" *( ";" link-param ) link-param = ( ( "rel" "=" relation-types ) | ( "anchor" "=" <"> URI-Reference <"> ) | ( "rev" "=" relation-types ) | ( "hreflang" "=" Language-Tag ) | ( "media" "=" ( MediaDesc | ( <"> MediaDesc <"> ) ) ) | ( "title" "=" quoted-string ) | ( "title*" "=" ext-value ) | ( "type" "=" ( media-type | quoted-mt ) ) | ( link-extension ) ) link-extension = ( parmname [ "=" ( ptoken | quoted-string ) ] ) | ( ext-name-star "=" ext-value ) ext-name-star = parmname "*" ; reserved for RFC2231-profiled ; extensions. Whitespace NOT ; allowed in between. ptoken = 1*ptokenchar ptokenchar = "!" | "#" | "$" | "%" | "&" | "'" | "(" | ")" | "*" | "+" | "-" | "." | "/" | DIGIT | ":" | "<" | "=" | ">" | "?" | "@" | ALPHA | "[" | "]" | "^" | "_" | "`" | "{" | "|" | "}" | "~" media-type = type-name "/" subtype-name quoted-mt = <"> media-type <"> relation-types = relation-type | <"> relation-type *( 1*SP relation-type ) <"> relation-type = reg-rel-type | ext-rel-type reg-rel-type = LOALPHA *( LOALPHA | DIGIT | "." | "-" ) ext-rel-type = URI and from <https://tools.ietf.org/html/rfc5987> parmname = 1*attr-char attr-char = ALPHA / DIGIT / "!" / "#" / "$" / "&" / "+" / "-" / "." / "^" / "_" / "`" / "|" / "~" */ typedef struct { apr_pool_t *pool; const char *relation; const char *url; } find_ctx; static int find_url(void *baton, const char *key, const char *value) { find_ctx *outer = baton; if (!apr_strnatcasecmp("link", key)) { link_ctx ctx; memset(&ctx, 0, sizeof(ctx)); ctx.s = value; ctx.slen = strlen(value); while (read_link(&ctx)) { while (skip_param(&ctx)) { if (ctx.pn_len == 3 && !strncmp("rel", ctx.s + ctx.pn_start, 3) && pv_contains(&ctx, outer->relation)) { /* this is the link relation we are looking for */ outer->url = apr_pstrndup(outer->pool, ctx.s + ctx.link_start, ctx.link_len); return 0; } } } } return 1; } const char *md_link_find_relation(const apr_table_t *headers, apr_pool_t *pool, const char *relation) { find_ctx ctx; memset(&ctx, 0, sizeof(ctx)); ctx.pool = pool; ctx.relation = relation; apr_table_do(find_url, &ctx, headers, NULL); return ctx.url; } �����������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/mod_md_os.c�����������������������������������������������������������������0000644�0000000�0000050�00000004775�13520571613�015430� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <apr_strings.h> #include <mpm_common.h> #include <httpd.h> #include <http_log.h> #include <ap_mpm.h> #if APR_HAVE_UNISTD_H #include <unistd.h> #endif #ifdef WIN32 #include "mpm_winnt.h" #endif #if AP_NEED_SET_MUTEX_PERMS #include "unixd.h" #endif #include "md_util.h" #include "mod_md_os.h" apr_status_t md_try_chown(const char *fname, unsigned int uid, int gid, apr_pool_t *p) { #if AP_NEED_SET_MUTEX_PERMS && HAVE_UNISTD_H /* Since we only switch user when running as root, we only need to chown directories * in that case. Otherwise, the server will ignore any "user/group" directives and * child processes have the same privileges as the parent. */ if (!geteuid()) { if (-1 == chown(fname, (uid_t)uid, (gid_t)gid)) { apr_status_t rv = APR_FROM_OS_ERROR(errno); if (!APR_STATUS_IS_ENOENT(rv)) { ap_log_perror(APLOG_MARK, APLOG_ERR, rv, p, APLOGNO(10082) "Can't change owner of %s", fname); } return rv; } } return APR_SUCCESS; #else return APR_ENOTIMPL; #endif } apr_status_t md_make_worker_accessible(const char *fname, apr_pool_t *p) { #ifdef WIN32 return APR_ENOTIMPL; #else return md_try_chown(fname, ap_unixd_config.user_id, -1, p); #endif } #ifdef WIN32 apr_status_t md_server_graceful(apr_pool_t *p, server_rec *s) { return APR_ENOTIMPL; } #else apr_status_t md_server_graceful(apr_pool_t *p, server_rec *s) { apr_status_t rv; (void)p; (void)s; rv = (kill(getppid(), AP_SIG_GRACEFUL) < 0)? APR_ENOTIMPL : APR_SUCCESS; ap_log_error(APLOG_MARK, APLOG_TRACE1, errno, NULL, "sent signal to parent"); return rv; } #endif ���httpd-2.4.41/modules/md/md_acme_order.h�������������������������������������������������������������0000644�0000000�0000050�00000007700�13511051361�016235� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Copyright 2019 greenbytes GmbH (https://www.greenbytes.de) * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef md_acme_order_h #define md_acme_order_h struct md_json_t; struct md_result_t; typedef struct md_acme_order_t md_acme_order_t; typedef enum { MD_ACME_ORDER_ST_PENDING, MD_ACME_ORDER_ST_READY, MD_ACME_ORDER_ST_PROCESSING, MD_ACME_ORDER_ST_VALID, MD_ACME_ORDER_ST_INVALID, } md_acme_order_st; struct md_acme_order_t { apr_pool_t *p; const char *url; md_acme_order_st status; struct apr_array_header_t *authz_urls; struct apr_array_header_t *challenge_setups; struct md_json_t *json; const char *finalize; const char *certificate; }; #define MD_FN_ORDER "order.json" /**************************************************************************************************/ md_acme_order_t *md_acme_order_create(apr_pool_t *p); apr_status_t md_acme_order_add(md_acme_order_t *order, const char *authz_url); apr_status_t md_acme_order_remove(md_acme_order_t *order, const char *authz_url); struct md_json_t *md_acme_order_to_json(md_acme_order_t *set, apr_pool_t *p); md_acme_order_t *md_acme_order_from_json(struct md_json_t *json, apr_pool_t *p); apr_status_t md_acme_order_load(struct md_store_t *store, md_store_group_t group, const char *md_name, md_acme_order_t **pauthz_set, apr_pool_t *p); apr_status_t md_acme_order_save(struct md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *md_name, md_acme_order_t *authz_set, int create); apr_status_t md_acme_order_purge(struct md_store_t *store, apr_pool_t *p, md_store_group_t group, const char *md_name, apr_table_t *env); apr_status_t md_acme_order_start_challenges(md_acme_order_t *order, md_acme_t *acme, apr_array_header_t *challenge_types, md_store_t *store, const md_t *md, apr_table_t *env, struct md_result_t *result, apr_pool_t *p); apr_status_t md_acme_order_monitor_authzs(md_acme_order_t *order, md_acme_t *acme, const md_t *md, apr_interval_time_t timeout, struct md_result_t *result, apr_pool_t *p); /* ACMEv2 only ************************************************************************************/ apr_status_t md_acme_order_register(md_acme_order_t **porder, md_acme_t *acme, apr_pool_t *p, const char *name, struct apr_array_header_t *domains); apr_status_t md_acme_order_update(md_acme_order_t *order, md_acme_t *acme, struct md_result_t *result, apr_pool_t *p); apr_status_t md_acme_order_await_ready(md_acme_order_t *order, md_acme_t *acme, const md_t *md, apr_interval_time_t timeout, struct md_result_t *result, apr_pool_t *p); apr_status_t md_acme_order_await_valid(md_acme_order_t *order, md_acme_t *acme, const md_t *md, apr_interval_time_t timeout, struct md_result_t *result, apr_pool_t *p); #endif /* md_acme_order_h */ ����������������������������������������������������������������httpd-2.4.41/modules/md/Makefile.in�����������������������������������������������������������������0000644�0000000�0000050�00000001515�13206766250�015362� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # standard stuff # include $(top_srcdir)/build/special.mk �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_acme_drive.h�������������������������������������������������������������0000644�0000000�0000050�00000003364�13511051361�016235� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Copyright 2019 greenbytes GmbH (https://www.greenbytes.de) * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef md_acme_drive_h #define md_acme_drive_h struct apr_array_header_t; struct md_acme_order_t; struct md_result_t; typedef struct md_acme_driver_t { md_proto_driver_t *driver; void *sub_driver; int complete; md_pkey_t *privkey; /* the new private key */ apr_array_header_t *certs; /* the certifiacte chain, starting with the new one */ const char *next_up_link; /* where the next chain cert is */ md_acme_t *acme; md_t *md; struct apr_array_header_t *domains; apr_array_header_t *ca_challenges; struct md_acme_order_t *order; apr_interval_time_t authz_monitor_timeout; const char *csr_der_64; apr_interval_time_t cert_poll_timeout; } md_acme_driver_t; apr_status_t md_acme_drive_set_acct(struct md_proto_driver_t *d, struct md_result_t *result); apr_status_t md_acme_drive_setup_certificate(struct md_proto_driver_t *d, struct md_result_t *result); apr_status_t md_acme_drive_cert_poll(struct md_proto_driver_t *d, int only_once); #endif /* md_acme_drive_h */ ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/md_acme_acct.c��������������������������������������������������������������0000644�0000000�0000050�00000055123�13511614110�016026� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <stdio.h> #include <apr_lib.h> #include <apr_file_info.h> #include <apr_file_io.h> #include <apr_fnmatch.h> #include <apr_hash.h> #include <apr_strings.h> #include <apr_tables.h> #include "md.h" #include "md_crypt.h" #include "md_json.h" #include "md_jws.h" #include "md_log.h" #include "md_store.h" #include "md_util.h" #include "md_version.h" #include "md_acme.h" #include "md_acme_acct.h" static apr_status_t acct_make(md_acme_acct_t **pacct, apr_pool_t *p, const char *ca_url, apr_array_header_t *contacts) { md_acme_acct_t *acct; acct = apr_pcalloc(p, sizeof(*acct)); acct->ca_url = ca_url; if (!contacts || apr_is_empty_array(contacts)) { acct->contacts = apr_array_make(p, 5, sizeof(const char *)); } else { acct->contacts = apr_array_copy(p, contacts); } *pacct = acct; return APR_SUCCESS; } static const char *mk_acct_id(apr_pool_t *p, md_acme_t *acme, int i) { return apr_psprintf(p, "ACME-%s-%04d", acme->sname, i); } static const char *mk_acct_pattern(apr_pool_t *p, md_acme_t *acme) { return apr_psprintf(p, "ACME-%s-*", acme->sname); } /**************************************************************************************************/ /* json load/save */ static md_acme_acct_st acct_st_from_str(const char *s) { if (s) { if (!strcmp("valid", s)) { return MD_ACME_ACCT_ST_VALID; } else if (!strcmp("deactivated", s)) { return MD_ACME_ACCT_ST_DEACTIVATED; } else if (!strcmp("revoked", s)) { return MD_ACME_ACCT_ST_REVOKED; } } return MD_ACME_ACCT_ST_UNKNOWN; } md_json_t *md_acme_acct_to_json(md_acme_acct_t *acct, apr_pool_t *p) { md_json_t *jacct; const char *s; assert(acct); jacct = md_json_create(p); switch (acct->status) { case MD_ACME_ACCT_ST_VALID: s = "valid"; break; case MD_ACME_ACCT_ST_DEACTIVATED: s = "deactivated"; break; case MD_ACME_ACCT_ST_REVOKED: s = "revoked"; break; default: s = NULL; break; } if (s) { md_json_sets(s, jacct, MD_KEY_STATUS, NULL); } md_json_sets(acct->url, jacct, MD_KEY_URL, NULL); md_json_sets(acct->ca_url, jacct, MD_KEY_CA_URL, NULL); md_json_setsa(acct->contacts, jacct, MD_KEY_CONTACT, NULL); md_json_setj(acct->registration, jacct, MD_KEY_REGISTRATION, NULL); if (acct->agreement) { md_json_sets(acct->agreement, jacct, MD_KEY_AGREEMENT, NULL); } if (acct->orders) { md_json_sets(acct->orders, jacct, MD_KEY_ORDERS, NULL); } return jacct; } apr_status_t md_acme_acct_from_json(md_acme_acct_t **pacct, md_json_t *json, apr_pool_t *p) { apr_status_t rv = APR_EINVAL; md_acme_acct_t *acct; md_acme_acct_st status = MD_ACME_ACCT_ST_UNKNOWN; const char *ca_url, *url; apr_array_header_t *contacts; if (md_json_has_key(json, MD_KEY_STATUS, NULL)) { status = acct_st_from_str(md_json_gets(json, MD_KEY_STATUS, NULL)); } else { /* old accounts only had disabled boolean field */ status = md_json_getb(json, MD_KEY_DISABLED, NULL)? MD_ACME_ACCT_ST_DEACTIVATED : MD_ACME_ACCT_ST_VALID; } url = md_json_gets(json, MD_KEY_URL, NULL); if (!url) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, p, "account has no url"); goto out; } ca_url = md_json_gets(json, MD_KEY_CA_URL, NULL); if (!ca_url) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, p, "account has no CA url: %s", url); goto out; } contacts = apr_array_make(p, 5, sizeof(const char *)); if (md_json_has_key(json, MD_KEY_CONTACT, NULL)) { md_json_getsa(contacts, json, MD_KEY_CONTACT, NULL); } else { md_json_getsa(contacts, json, MD_KEY_REGISTRATION, MD_KEY_CONTACT, NULL); } rv = acct_make(&acct, p, ca_url, contacts); if (APR_SUCCESS == rv) { acct->status = status; acct->url = url; acct->agreement = md_json_gets(json, "terms-of-service", NULL); acct->orders = md_json_gets(json, MD_KEY_ORDERS, NULL); } out: *pacct = (APR_SUCCESS == rv)? acct : NULL; return rv; } apr_status_t md_acme_acct_save(md_store_t *store, apr_pool_t *p, md_acme_t *acme, const char **pid, md_acme_acct_t *acct, md_pkey_t *acct_key) { md_json_t *jacct; apr_status_t rv; int i; const char *id = pid? *pid : NULL; jacct = md_acme_acct_to_json(acct, p); if (id) { rv = md_store_save(store, p, MD_SG_ACCOUNTS, id, MD_FN_ACCOUNT, MD_SV_JSON, jacct, 0); } else { rv = APR_EAGAIN; for (i = 0; i < 1000 && APR_SUCCESS != rv; ++i) { id = mk_acct_id(p, acme, i); rv = md_store_save(store, p, MD_SG_ACCOUNTS, id, MD_FN_ACCOUNT, MD_SV_JSON, jacct, 1); } } if (APR_SUCCESS == rv) { if (pid) *pid = id; rv = md_store_save(store, p, MD_SG_ACCOUNTS, id, MD_FN_ACCT_KEY, MD_SV_PKEY, acct_key, 0); } return rv; } apr_status_t md_acme_acct_load(md_acme_acct_t **pacct, md_pkey_t **ppkey, md_store_t *store, md_store_group_t group, const char *name, apr_pool_t *p) { md_json_t *json; apr_status_t rv; rv = md_store_load_json(store, group, name, MD_FN_ACCOUNT, &json, p); if (APR_STATUS_IS_ENOENT(rv)) { goto out; } if (APR_SUCCESS != rv) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "error reading account: %s", name); goto out; } rv = md_acme_acct_from_json(pacct, json, p); if (APR_SUCCESS == rv) { rv = md_store_load(store, group, name, MD_FN_ACCT_KEY, MD_SV_PKEY, (void**)ppkey, p); if (APR_SUCCESS != rv) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "loading key: %s", name); goto out; } } out: if (APR_SUCCESS != rv) { *pacct = NULL; *ppkey = NULL; } return rv; } /**************************************************************************************************/ /* Lookup */ typedef struct { apr_pool_t *p; md_acme_t *acme; int url_match; const char *id; } find_ctx; static int find_acct(void *baton, const char *name, const char *aspect, md_store_vtype_t vtype, void *value, apr_pool_t *ptemp) { find_ctx *ctx = baton; int disabled; const char *ca_url, *status; (void)aspect; (void)ptemp; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, ctx->p, "account candidate %s/%s", name, aspect); if (MD_SV_JSON == vtype) { md_json_t *json = value; status = md_json_gets(json, MD_KEY_STATUS, NULL); disabled = md_json_getb(json, MD_KEY_DISABLED, NULL); ca_url = md_json_gets(json, MD_KEY_CA_URL, NULL); if ((!status || !strcmp("valid", status)) && !disabled && (!ctx->url_match || (ca_url && !strcmp(ctx->acme->url, ca_url)))) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, ctx->p, "found account %s for %s: %s, status=%s, disabled=%d, ca-url=%s", name, ctx->acme->url, aspect, status, disabled, ca_url); ctx->id = apr_pstrdup(ctx->p, name); return 0; } } return 1; } static apr_status_t acct_find(const char **pid, md_acme_acct_t **pacct, md_pkey_t **ppkey, md_store_t *store, md_store_group_t group, const char *name_pattern, int url_match, md_acme_t *acme, apr_pool_t *p) { apr_status_t rv; find_ctx ctx; ctx.p = p; ctx.acme = acme; ctx.id = NULL; ctx.url_match = url_match; *pid = NULL; rv = md_store_iter(find_acct, &ctx, store, p, group, name_pattern, MD_FN_ACCOUNT, MD_SV_JSON); if (ctx.id) { *pid = ctx.id; rv = md_acme_acct_load(pacct, ppkey, store, group, ctx.id, p); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "loading account %s", ctx.id); } else { *pacct = NULL; rv = APR_ENOENT; md_log_perror(MD_LOG_MARK, MD_LOG_TRACE1, 0, p, "acct_find: none found"); } return rv; } static apr_status_t acct_find_and_verify(md_store_t *store, md_store_group_t group, const char *name_pattern, md_acme_t *acme, apr_pool_t *p) { md_acme_acct_t *acct; md_pkey_t *pkey; const char *id; apr_status_t rv; if (APR_SUCCESS == (rv = acct_find(&id, &acct, &pkey, store, group, name_pattern, 1, acme, p))) { acme->acct_id = (MD_SG_STAGING == group)? NULL : id; acme->acct = acct; acme->acct_key = pkey; rv = md_acme_acct_validate(acme, NULL, p); if (APR_SUCCESS != rv) { acme->acct_id = NULL; acme->acct = NULL; acme->acct_key = NULL; if (APR_STATUS_IS_ENOENT(rv)) { /* verification failed and account has been disabled. Indicate to caller that he may try again. */ rv = APR_EAGAIN; } } } return rv; } apr_status_t md_acme_find_acct(md_acme_t *acme, md_store_t *store) { apr_status_t rv; while (APR_EAGAIN == (rv = acct_find_and_verify(store, MD_SG_ACCOUNTS, mk_acct_pattern(acme->p, acme), acme, acme->p))) { /* nop */ } if (APR_STATUS_IS_ENOENT(rv)) { /* No suitable account found in MD_SG_ACCOUNTS. Maybe a new account * can already be found in MD_SG_STAGING? */ md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, acme->p, "no account found, looking in STAGING"); while (APR_EAGAIN == (rv = acct_find_and_verify(store, MD_SG_STAGING, "*", acme, acme->p))) { /* nop */ } } return rv; } typedef struct { apr_pool_t *p; const char *url; const char *id; } load_ctx; static int id_by_url(void *baton, const char *name, const char *aspect, md_store_vtype_t vtype, void *value, apr_pool_t *ptemp) { load_ctx *ctx = baton; int disabled; const char *acct_url, *status; (void)aspect; (void)ptemp; if (MD_SV_JSON == vtype) { md_json_t *json = value; status = md_json_gets(json, MD_KEY_STATUS, NULL); disabled = md_json_getb(json, MD_KEY_DISABLED, NULL); acct_url = md_json_gets(json, MD_KEY_URL, NULL); if ((!status || !strcmp("valid", status)) && !disabled && acct_url && !strcmp(ctx->url, acct_url)) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, ctx->p, "found account %s for url %s: %s, status=%s, disabled=%d", name, ctx->url, aspect, status, disabled); ctx->id = apr_pstrdup(ctx->p, name); return 0; } } return 1; } apr_status_t md_acme_acct_id_for_url(const char **pid, md_store_t *store, md_store_group_t group, const char *url, apr_pool_t *p) { apr_status_t rv; load_ctx ctx; ctx.p = p; ctx.url = url; ctx.id = NULL; rv = md_store_iter(id_by_url, &ctx, store, p, group, "*", MD_FN_ACCOUNT, MD_SV_JSON); *pid = (APR_SUCCESS == rv)? ctx.id : NULL; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "acct_id_by_url %s -> %s", url, *pid); return rv; } /**************************************************************************************************/ /* acct operation context */ typedef struct { md_acme_t *acme; apr_pool_t *p; const char *agreement; } acct_ctx_t; /**************************************************************************************************/ /* acct update */ static apr_status_t on_init_acct_upd(md_acme_req_t *req, void *baton) { md_json_t *jpayload; (void)baton; jpayload = md_json_create(req->p); switch (MD_ACME_VERSION_MAJOR(req->acme->version)) { case 1: md_json_sets("reg", jpayload, MD_KEY_RESOURCE, NULL); break; default: break; } return md_acme_req_body_init(req, jpayload); } static apr_status_t acct_upd(md_acme_t *acme, apr_pool_t *p, const apr_table_t *hdrs, md_json_t *body, void *baton) { acct_ctx_t *ctx = baton; apr_status_t rv = APR_SUCCESS; md_acme_acct_t *acct = acme->acct; if (!acct->url) { const char *location = apr_table_get(hdrs, "location"); if (!location) { md_log_perror(MD_LOG_MARK, MD_LOG_WARNING, APR_EINVAL, p, "new acct without location"); return APR_EINVAL; } acct->url = apr_pstrdup(ctx->p, location); } apr_array_clear(acct->contacts); md_json_dupsa(acct->contacts, acme->p, body, MD_KEY_CONTACT, NULL); if (md_json_has_key(body, MD_KEY_STATUS, NULL)) { acct->status = acct_st_from_str(md_json_gets(body, MD_KEY_STATUS, NULL)); } if (md_json_has_key(body, MD_KEY_AGREEMENT, NULL)) { acct->agreement = md_json_dups(acme->p, body, MD_KEY_AGREEMENT, NULL); } if (md_json_has_key(body, MD_KEY_ORDERS, NULL)) { acct->orders = md_json_dups(acme->p, body, MD_KEY_ORDERS, NULL); } acct->registration = md_json_clone(ctx->p, body); md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "updated acct %s", acct->url); return rv; } apr_status_t md_acme_acct_update(md_acme_t *acme) { acct_ctx_t ctx; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, acme->p, "acct update"); if (!acme->acct) { return APR_EINVAL; } ctx.acme = acme; ctx.p = acme->p; return md_acme_POST(acme, acme->acct->url, on_init_acct_upd, acct_upd, NULL, NULL, &ctx); } apr_status_t md_acme_acct_validate(md_acme_t *acme, md_store_t *store, apr_pool_t *p) { apr_status_t rv; if (APR_SUCCESS != (rv = md_acme_acct_update(acme))) { if (acme->acct && (APR_ENOENT == rv || APR_EACCES == rv)) { if (MD_ACME_ACCT_ST_VALID == acme->acct->status) { acme->acct->status = MD_ACME_ACCT_ST_UNKNOWN; if (store) { md_acme_acct_save(store, p, acme, &acme->acct_id, acme->acct, acme->acct_key); } } acme->acct = NULL; acme->acct_key = NULL; rv = APR_ENOENT; } } return rv; } /**************************************************************************************************/ /* Register a new account */ static apr_status_t on_init_acct_new(md_acme_req_t *req, void *baton) { acct_ctx_t *ctx = baton; md_json_t *jpayload; jpayload = md_json_create(req->p); switch (MD_ACME_VERSION_MAJOR(req->acme->version)) { case 1: md_json_sets("new-reg", jpayload, MD_KEY_RESOURCE, NULL); md_json_setsa(ctx->acme->acct->contacts, jpayload, MD_KEY_CONTACT, NULL); if (ctx->agreement) { md_json_sets(ctx->agreement, jpayload, MD_KEY_AGREEMENT, NULL); } break; default: md_json_setsa(ctx->acme->acct->contacts, jpayload, MD_KEY_CONTACT, NULL); if (ctx->agreement) { md_json_setb(1, jpayload, "termsOfServiceAgreed", NULL); } break; } return md_acme_req_body_init(req, jpayload); } apr_status_t md_acme_acct_register(md_acme_t *acme, md_store_t *store, apr_pool_t *p, apr_array_header_t *contacts, const char *agreement) { apr_status_t rv; md_pkey_t *pkey; const char *err = NULL, *uri; md_pkey_spec_t spec; int i; acct_ctx_t ctx; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, p, "create new account"); ctx.acme = acme; ctx.p = p; /* The agreement URL is submitted when the ACME server announces Terms-of-Service * in its directory meta data. The magic value "accepted" will always use the * advertised URL. */ ctx.agreement = NULL; if (acme->ca_agreement && agreement) { ctx.agreement = !strcmp("accepted", agreement)? acme->ca_agreement : agreement; } if (ctx.agreement) { if (APR_SUCCESS != (rv = md_util_abs_uri_check(acme->p, ctx.agreement, &err))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "invalid agreement uri (%s): %s", err, ctx.agreement); goto out; } } for (i = 0; i < contacts->nelts; ++i) { uri = APR_ARRAY_IDX(contacts, i, const char *); if (APR_SUCCESS != (rv = md_util_abs_uri_check(acme->p, uri, &err))) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "invalid contact uri (%s): %s", err, uri); goto out; } } /* If there is no key selected yet, try to find an existing one for the same host. * Let's Encrypt identifies accounts by their key for their ACMEv1 and v2 services. * Although the account appears on both services with different urls, it is * internally the same one. * I think this is beneficial if someone migrates from ACMEv1 to v2 and not a leak * of identifying information. */ if (!acme->acct_key) { find_ctx fctx; fctx.p = p; fctx.acme = acme; fctx.id = NULL; fctx.url_match = 0; md_store_iter(find_acct, &fctx, store, p, MD_SG_ACCOUNTS, mk_acct_pattern(p, acme), MD_FN_ACCOUNT, MD_SV_JSON); if (fctx.id) { rv = md_store_load(store, MD_SG_ACCOUNTS, fctx.id, MD_FN_ACCT_KEY, MD_SV_PKEY, (void**)&acme->acct_key, p); if (APR_SUCCESS == rv) { md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "reusing key from account %s", fctx.id); } else { acme->acct_key = NULL; } } } /* If we still have no key, generate a new one */ if (!acme->acct_key) { spec.type = MD_PKEY_TYPE_RSA; spec.params.rsa.bits = MD_ACME_ACCT_PKEY_BITS; if (APR_SUCCESS != (rv = md_pkey_gen(&pkey, acme->p, &spec))) goto out; acme->acct_key = pkey; md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, p, "created new account key"); } if (APR_SUCCESS != (rv = acct_make(&acme->acct, p, acme->url, contacts))) goto out; rv = md_acme_POST_new_account(acme, on_init_acct_new, acct_upd, NULL, NULL, &ctx); if (APR_SUCCESS == rv) { md_log_perror(MD_LOG_MARK, MD_LOG_INFO, 0, p, "registered new account %s", acme->acct->url); } out: if (APR_SUCCESS != rv && acme->acct) { acme->acct = NULL; } return rv; } /**************************************************************************************************/ /* Deactivate the account */ static apr_status_t on_init_acct_del(md_acme_req_t *req, void *baton) { md_json_t *jpayload; (void)baton; jpayload = md_json_create(req->p); switch (MD_ACME_VERSION_MAJOR(req->acme->version)) { case 1: md_json_sets("reg", jpayload, MD_KEY_RESOURCE, NULL); md_json_setb(1, jpayload, "delete", NULL); break; default: md_json_sets("deactivated", jpayload, MD_KEY_STATUS, NULL); break; } return md_acme_req_body_init(req, jpayload); } apr_status_t md_acme_acct_deactivate(md_acme_t *acme, apr_pool_t *p) { md_acme_acct_t *acct = acme->acct; acct_ctx_t ctx; (void)p; if (!acct) { return APR_EINVAL; } md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, acme->p, "delete account %s from %s", acct->url, acct->ca_url); ctx.acme = acme; ctx.p = p; return md_acme_POST(acme, acct->url, on_init_acct_del, acct_upd, NULL, NULL, &ctx); } /**************************************************************************************************/ /* terms-of-service */ static apr_status_t on_init_agree_tos(md_acme_req_t *req, void *baton) { acct_ctx_t *ctx = baton; md_json_t *jpayload; jpayload = md_json_create(req->p); switch (MD_ACME_VERSION_MAJOR(req->acme->version)) { case 1: md_json_sets("reg", jpayload, MD_KEY_RESOURCE, NULL); md_json_sets(ctx->acme->acct->agreement, jpayload, MD_KEY_AGREEMENT, NULL); break; default: if (ctx->acme->acct->agreement) { md_json_setb(1, jpayload, "termsOfServiceAgreed", NULL); } break; } return md_acme_req_body_init(req, jpayload); } apr_status_t md_acme_agree(md_acme_t *acme, apr_pool_t *p, const char *agreement) { acct_ctx_t ctx; acme->acct->agreement = agreement; if (!strcmp("accepted", agreement) && acme->ca_agreement) { acme->acct->agreement = acme->ca_agreement; } ctx.acme = acme; ctx.p = p; return md_acme_POST(acme, acme->acct->url, on_init_agree_tos, acct_upd, NULL, NULL, &ctx); } apr_status_t md_acme_check_agreement(md_acme_t *acme, apr_pool_t *p, const char *agreement, const char **prequired) { apr_status_t rv = APR_SUCCESS; /* We used to really check if the account agreement and the one indicated in meta * are the very same. However, LE is happy if the account has agreed to a ToS in * the past and does not require a renewed acceptance. */ *prequired = NULL; if (!acme->acct->agreement && acme->ca_agreement) { if (agreement) { rv = md_acme_agree(acme, p, acme->ca_agreement); } else { *prequired = acme->ca_agreement; rv = APR_INCOMPLETE; } } return rv; } ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/md/mod_md_drive.c��������������������������������������������������������������0000644�0000000�0000050�00000045163�13522005744�016113� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <assert.h> #include <apr_optional.h> #include <apr_hash.h> #include <apr_strings.h> #include <apr_date.h> #include <httpd.h> #include <http_core.h> #include <http_protocol.h> #include <http_request.h> #include <http_log.h> #include "mod_watchdog.h" #include "md.h" #include "md_curl.h" #include "md_crypt.h" #include "md_http.h" #include "md_json.h" #include "md_status.h" #include "md_store.h" #include "md_store_fs.h" #include "md_log.h" #include "md_result.h" #include "md_reg.h" #include "md_util.h" #include "md_version.h" #include "md_acme.h" #include "md_acme_authz.h" #include "mod_md.h" #include "mod_md_private.h" #include "mod_md_config.h" #include "mod_md_status.h" #include "mod_md_drive.h" /**************************************************************************************************/ /* watchdog based impl. */ #define MD_WATCHDOG_NAME "_md_" static APR_OPTIONAL_FN_TYPE(ap_watchdog_get_instance) *wd_get_instance; static APR_OPTIONAL_FN_TYPE(ap_watchdog_register_callback) *wd_register_callback; static APR_OPTIONAL_FN_TYPE(ap_watchdog_set_callback_interval) *wd_set_interval; struct md_drive_ctx { apr_pool_t *p; server_rec *s; md_mod_conf_t *mc; ap_watchdog_t *watchdog; apr_array_header_t *jobs; }; typedef struct { apr_pool_t *p; md_job_t *job; md_reg_t *reg; md_result_t *last; apr_time_t last_save; } md_job_result_ctx; static void job_result_update(md_result_t *result, void *data) { md_job_result_ctx *ctx = data; apr_time_t now; const char *msg, *sep; if (md_result_cmp(ctx->last, result)) { now = apr_time_now(); md_result_assign(ctx->last, result); if (result->activity || result->problem || result->detail) { msg = sep = ""; if (result->activity) { msg = apr_psprintf(result->p, "%s", result->activity); sep = ": "; } if (result->detail) { msg = apr_psprintf(result->p, "%s%s%s", msg, sep, result->detail); sep = ", "; } if (result->problem) { msg = apr_psprintf(result->p, "%s%sproblem: %s", msg, sep, result->problem); sep = " "; } md_job_log_append(ctx->job, "progress", NULL, msg); if (apr_time_msec(now - ctx->last_save) > 500) { md_job_save(ctx->job, ctx->reg, MD_SG_STAGING, result, ctx->p); ctx->last_save = now; } } } } static void job_result_observation_start(md_job_t *job, md_result_t *result, md_reg_t *reg, apr_pool_t *p) { md_job_result_ctx *ctx; ctx = apr_pcalloc(p, sizeof(*ctx)); ctx->p = p; ctx->job = job; ctx->reg = reg; ctx->last = md_result_md_make(p, APR_SUCCESS); md_result_assign(ctx->last, result); md_result_on_change(result, job_result_update, ctx); } static void job_result_observation_end(md_job_t *job, md_result_t *result) { (void)job; md_result_on_change(result, NULL, NULL); } static apr_time_t calc_err_delay(int err_count) { apr_time_t delay = 0; if (err_count > 0) { /* back off duration, depending on the errors we encounter in a row */ delay = apr_time_from_sec(5 << (err_count - 1)); if (delay > apr_time_from_sec(60*60)) { delay = apr_time_from_sec(60*60); } } return delay; } static apr_status_t send_notification(md_drive_ctx *dctx, md_job_t *job, const md_t *md, const char *reason, md_result_t *result, apr_pool_t *ptemp) { const char * const *argv; const char *cmdline; int exit_code; apr_status_t rv = APR_SUCCESS; if (!strcmp("renewed", reason)) { if (dctx->mc->notify_cmd) { cmdline = apr_psprintf(ptemp, "%s %s", dctx->mc->notify_cmd, md->name); apr_tokenize_to_argv(cmdline, (char***)&argv, ptemp); rv = md_util_exec(ptemp, argv[0], argv, &exit_code); if (APR_SUCCESS == rv && exit_code) rv = APR_EGENERAL; if (APR_SUCCESS != rv) { if (!result) result = md_result_make(ptemp, rv); md_result_problem_printf(result, rv, MD_RESULT_LOG_ID(APLOGNO(10108)), "MDNotifyCmd %s failed with exit code %d.", dctx->mc->notify_cmd, exit_code); md_result_log(result, MD_LOG_ERR); md_job_log_append(job, "notify-error", result->problem, result->detail); goto leave; } } ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, dctx->s, APLOGNO(10059) "The Managed Domain %s has been setup and changes " "will be activated on next (graceful) server restart.", md->name); } if (dctx->mc->message_cmd) { cmdline = apr_psprintf(ptemp, "%s %s %s", dctx->mc->message_cmd, reason, md->name); ap_log_error(APLOG_MARK, APLOG_TRACE2, 0, dctx->s, "Message command: %s", cmdline); apr_tokenize_to_argv(cmdline, (char***)&argv, ptemp); rv = md_util_exec(ptemp, argv[0], argv, &exit_code); if (APR_SUCCESS == rv && exit_code) rv = APR_EGENERAL; if (APR_SUCCESS != rv) { if (!result) result = md_result_make(ptemp, rv); md_result_problem_printf(result, rv, MD_RESULT_LOG_ID(APLOGNO(10109)), "MDMessageCmd %s failed with exit code %d.", dctx->mc->notify_cmd, exit_code); md_result_log(result, MD_LOG_ERR); md_job_log_append(job, "message-error", reason, result->detail); goto leave; } } leave: return rv; } static void check_expiration(md_drive_ctx *dctx, md_job_t *job, const md_t *md, apr_pool_t *ptemp) { md_timeperiod_t since_last; ap_log_error( APLOG_MARK, APLOG_TRACE1, 0, dctx->s, "md(%s): check expiration", md->name); if (!md_reg_should_warn(dctx->mc->reg, md, dctx->p)) return; /* Sends these out at most once per day */ since_last.start = md_job_log_get_time_of_latest(job, "message-expiring"); since_last.end = apr_time_now(); if (md_timeperiod_length(&since_last) >= apr_time_from_sec(MD_SECS_PER_DAY)) { ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, dctx->s, "md(%s): message expiration warning", md->name); send_notification(dctx, job, md, "expiring", NULL, ptemp); } } static void process_drive_job(md_drive_ctx *dctx, md_job_t *job, apr_pool_t *ptemp) { const md_t *md; md_result_t *result; int error_run = 0, fatal_run = 0, save = 0; apr_status_t rv; md_job_load(job, dctx->mc->reg, MD_SG_STAGING, ptemp); /* Evaluate again on loaded value. Values will change when watchdog switches child process */ if (apr_time_now() < job->next_run) return; md = md_get_by_name(dctx->mc->mds, job->name); AP_DEBUG_ASSERT(md); result = md_result_md_make(ptemp, md); if (job->last_result) md_result_assign(result, job->last_result); if (md->state == MD_S_MISSING_INFORMATION) { /* Missing information, this will not change until configuration * is changed and server reloaded. */ fatal_run = 1; goto leave; } while (md_will_renew_cert(md)) { if (job->finished) { job->next_run = 0; /* Finished jobs might take a while before the results become valid. * If that is in the future, request to run then */ if (apr_time_now() < job->valid_from) { job->next_run = job->valid_from; } else if (md_job_log_get_time_of_latest(job, "notified") == 0) { rv = send_notification(dctx, job, md, "renewed", result, ptemp); if (APR_SUCCESS == rv) { md_job_log_append(job, "notified", NULL, NULL); save = 1; } else { /* we treat this as an error that triggers retries */ error_run = 1; } } goto leave; } if (!md_reg_should_renew(dctx->mc->reg, md, dctx->p)) { ap_log_error( APLOG_MARK, APLOG_DEBUG, 0, dctx->s, APLOGNO(10053) "md(%s): no need to renew yet", job->name); job->next_run = 0; goto leave; } /* Renew the MDs credentials in a STAGING area. Might be invoked repeatedly * without discarding previous/intermediate results. * Only returns SUCCESS when the renewal is complete, e.g. STAGING as a * complete set of new credentials. */ ap_log_error( APLOG_MARK, APLOG_DEBUG, 0, dctx->s, APLOGNO(10052) "md(%s): state=%d, driving", job->name, md->state); md_job_log_append(job, "renewal-start", NULL, NULL); /* observe result changes and persist them with limited frequency */ job_result_observation_start(job, result, dctx->mc->reg, ptemp); md_reg_renew(dctx->mc->reg, md, dctx->mc->env, 0, result, ptemp); job_result_observation_end(job, result); if (APR_SUCCESS != result->status) { ap_log_error( APLOG_MARK, APLOG_ERR, result->status, dctx->s, APLOGNO(10056) "processing %s: %s", job->name, result->detail); error_run = 1; md_job_log_append(job, "renewal-error", result->problem, result->detail); send_notification(dctx, job, md, "errored", result, ptemp); goto leave; } job->finished = 1; job->valid_from = result->ready_at; job->error_runs = 0; md_job_log_append(job, "renewal-finish", NULL, NULL); save = 1; } leave: if (!job->finished) { check_expiration(dctx, job, md, ptemp); } if (fatal_run) { save = 1; job->next_run = 0; } if (error_run) { ++job->error_runs; save = 1; job->next_run = apr_time_now() + calc_err_delay(job->error_runs); ap_log_error(APLOG_MARK, APLOG_INFO, 0, dctx->s, APLOGNO(10057) "%s: encountered error for the %d. time, next run in %s", job->name, job->error_runs, md_duration_print(ptemp, job->next_run - apr_time_now())); } if (save) { apr_status_t rv2 = md_job_save(job, dctx->mc->reg, MD_SG_STAGING, result, ptemp); ap_log_error(APLOG_MARK, APLOG_TRACE1, rv2, dctx->s, "%s: saving job props", job->name); } } int md_will_renew_cert(const md_t *md) { if (md->renew_mode == MD_RENEW_MANUAL) { return 0; } else if (md->renew_mode == MD_RENEW_AUTO && md->cert_file) { return 0; } return 1; } static apr_time_t next_run_default(void) { /* we'd like to run at least twice a day by default */ return apr_time_now() + apr_time_from_sec(MD_SECS_PER_DAY / 2); } static apr_status_t run_watchdog(int state, void *baton, apr_pool_t *ptemp) { md_drive_ctx *dctx = baton; md_job_t *job; apr_time_t next_run, wait_time; int i; /* mod_watchdog invoked us as a single thread inside the whole server (on this machine). * This might be a repeated run inside the same child (mod_watchdog keeps affinity as * long as the child lives) or another/new child. */ switch (state) { case AP_WATCHDOG_STATE_STARTING: ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, dctx->s, APLOGNO(10054) "md watchdog start, auto drive %d mds", dctx->jobs->nelts); break; case AP_WATCHDOG_STATE_RUNNING: ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, dctx->s, APLOGNO(10055) "md watchdog run, auto drive %d mds", dctx->jobs->nelts); /* Process all drive jobs. They will update their next_run property * and we schedule ourself at the earliest of all. A job may specify 0 * as next_run to indicate that it wants to participate in the normal * regular runs. */ next_run = next_run_default(); for (i = 0; i < dctx->jobs->nelts; ++i) { job = APR_ARRAY_IDX(dctx->jobs, i, md_job_t *); if (apr_time_now() >= job->next_run) { process_drive_job(dctx, job, ptemp); } if (job->next_run && job->next_run < next_run) { next_run = job->next_run; } } wait_time = next_run - apr_time_now(); if (APLOGdebug(dctx->s)) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, dctx->s, APLOGNO(10107) "next run in %s", md_duration_print(ptemp, wait_time)); } wd_set_interval(dctx->watchdog, wait_time, dctx, run_watchdog); break; case AP_WATCHDOG_STATE_STOPPING: ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, dctx->s, APLOGNO(10058) "md watchdog stopping"); break; } return APR_SUCCESS; } apr_status_t md_start_watching(md_mod_conf_t *mc, server_rec *s, apr_pool_t *p) { apr_allocator_t *allocator; md_drive_ctx *dctx; apr_pool_t *dctxp; apr_status_t rv; const char *name; md_t *md; md_job_t *job; int i; /* We use mod_watchdog to run a single thread in one of the child processes * to monitor the MDs in mc->watched_names, using the const data in the list * mc->mds of our MD structures. * * The data in mc cannot be changed, as we may spawn copies in new child processes * of the original data at any time. The child which hosts the watchdog thread * may also die or be recycled, which causes a new watchdog thread to run * in another process with the original data. * * Instead, we use our store to persist changes in group STAGING. This is * kept writable to child processes, but the data stored there is not live. * However, mod_watchdog makes sure that we only ever have a single thread in * our server (on this machine) that writes there. Other processes, e.g. informing * the user about progress, only read from there. * * All changes during driving an MD are stored as files in MG_SG_STAGING/<MD.name>. * All will have "md.json" and "job.json". There may be a range of other files used * by the protocol obtaining the certificate/keys. * * */ wd_get_instance = APR_RETRIEVE_OPTIONAL_FN(ap_watchdog_get_instance); wd_register_callback = APR_RETRIEVE_OPTIONAL_FN(ap_watchdog_register_callback); wd_set_interval = APR_RETRIEVE_OPTIONAL_FN(ap_watchdog_set_callback_interval); if (!wd_get_instance || !wd_register_callback || !wd_set_interval) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, s, APLOGNO(10061) "mod_watchdog is required"); return !OK; } /* We want our own pool with own allocator to keep data across watchdog invocations. * Since we'll run in a single watchdog thread, using our own allocator will prevent * any confusion in the parent pool. */ apr_allocator_create(&allocator); apr_allocator_max_free_set(allocator, 1); rv = apr_pool_create_ex(&dctxp, p, NULL, allocator); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(10062) "md_drive_ctx: create pool"); return rv; } apr_allocator_owner_set(allocator, dctxp); apr_pool_tag(dctxp, "md_drive_ctx"); dctx = apr_pcalloc(dctxp, sizeof(*dctx)); dctx->p = dctxp; dctx->s = s; dctx->mc = mc; dctx->jobs = apr_array_make(dctx->p, mc->watched_names->nelts, sizeof(md_job_t *)); for (i = 0; i < mc->watched_names->nelts; ++i) { name = APR_ARRAY_IDX(mc->watched_names, i, const char *); md = md_get_by_name(mc->mds, name); if (!md) continue; job = md_job_make(p, md->name); APR_ARRAY_PUSH(dctx->jobs, md_job_t*) = job; ap_log_error( APLOG_MARK, APLOG_TRACE1, 0, dctx->s, "md(%s): state=%d, created drive job", name, md->state); md_job_load(job, mc->reg, MD_SG_STAGING, dctx->p); if (job->error_runs) { /* Server has just restarted. If we encounter an MD job with errors * on a previous driving, we purge its STAGING area. * This will reset the driving for the MD. It may run into the same * error again, or in case of race/confusion/our error/CA error, it * might allow the MD to succeed by a fresh start. */ ap_log_error( APLOG_MARK, APLOG_NOTICE, 0, dctx->s, APLOGNO(10064) "md(%s): previous drive job showed %d errors, purging STAGING " "area to reset.", name, job->error_runs); md_store_purge(md_reg_store_get(dctx->mc->reg), p, MD_SG_STAGING, md->name); md_store_purge(md_reg_store_get(dctx->mc->reg), p, MD_SG_CHALLENGES, md->name); job->error_runs = 0; } } if (!dctx->jobs->nelts) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(10065) "no managed domain to drive, no watchdog needed."); apr_pool_destroy(dctx->p); return APR_SUCCESS; } if (APR_SUCCESS != (rv = wd_get_instance(&dctx->watchdog, MD_WATCHDOG_NAME, 0, 1, dctx->p))) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(10066) "create md watchdog(%s)", MD_WATCHDOG_NAME); return rv; } rv = wd_register_callback(dctx->watchdog, 0, dctx, run_watchdog); ap_log_error(APLOG_MARK, rv? APLOG_CRIT : APLOG_DEBUG, rv, s, APLOGNO(10067) "register md watchdog(%s)", MD_WATCHDOG_NAME); return rv; } �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/cluster/�����������������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273341�014372� 5����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/cluster/NWGNUmodheartmonitor���������������������������������������������������0000644�0000000�0000050�00000010343�11540546347�020354� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/core \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = modheartmonitor # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Heart Beat Monitor Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = modheartmonitor # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/modheartmonitor.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_heartmonitor.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ heartmonitor_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/cluster/mod_heartbeat.dsp������������������������������������������������������0000644�0000000�0000050�00000011455�11203324224�017672� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_heartbeat" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_heartbeat - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_heartbeat.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_heartbeat.mak" CFG="mod_heartbeat - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_heartbeat - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_heartbeat - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_heartbeat - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../core" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_heartbeat_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_heartbeat.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_heartbeat.so" /d LONG_NAME="heartbeat_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_heartbeat.so" /base:@..\..\os\win32\BaseAddr.ref,mod_heartbeat.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_heartbeat.so" /base:@..\..\os\win32\BaseAddr.ref,mod_heartbeat.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_heartbeat.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_heartbeat - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../core" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_heartbeat_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_heartbeat.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_heartbeat.so" /d LONG_NAME="heartbeat_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_heartbeat.so" /base:@..\..\os\win32\BaseAddr.ref,mod_heartbeat.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_heartbeat.so" /base:@..\..\os\win32\BaseAddr.ref,mod_heartbeat.so # Begin Special Build Tool TargetPath=.\Debug\mod_heartbeat.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_heartbeat - Win32 Release" # Name "mod_heartbeat - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_heartbeat.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=.\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/cluster/mod_heartmonitor.mak���������������������������������������������������0000644�0000000�0000050�00000026417�12701473373�020452� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_heartmonitor.dsp !IF "$(CFG)" == "" CFG=mod_heartmonitor - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_heartmonitor - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_heartmonitor - Win32 Release" && "$(CFG)" != "mod_heartmonitor - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_heartmonitor.mak" CFG="mod_heartmonitor - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_heartmonitor - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_heartmonitor - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_heartmonitor - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_heartmonitor.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_watchdog - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_heartmonitor.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_watchdog - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_heartmonitor.obj" -@erase "$(INTDIR)\mod_heartmonitor.res" -@erase "$(INTDIR)\mod_heartmonitor_src.idb" -@erase "$(INTDIR)\mod_heartmonitor_src.pdb" -@erase "$(OUTDIR)\mod_heartmonitor.exp" -@erase "$(OUTDIR)\mod_heartmonitor.lib" -@erase "$(OUTDIR)\mod_heartmonitor.pdb" -@erase "$(OUTDIR)\mod_heartmonitor.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../core" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_heartmonitor_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_heartmonitor.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_heartmonitor.so" /d LONG_NAME="heartmonitor_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_heartmonitor.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_heartmonitor.pdb" /debug /out:"$(OUTDIR)\mod_heartmonitor.so" /implib:"$(OUTDIR)\mod_heartmonitor.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_heartmonitor.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_heartmonitor.obj" \ "$(INTDIR)\mod_heartmonitor.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "..\core\Release\mod_watchdog.lib" "$(OUTDIR)\mod_heartmonitor.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_heartmonitor.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_heartmonitor.so" if exist .\Release\mod_heartmonitor.so.manifest mt.exe -manifest .\Release\mod_heartmonitor.so.manifest -outputresource:.\Release\mod_heartmonitor.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_heartmonitor - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_heartmonitor.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_watchdog - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_heartmonitor.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_watchdog - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_heartmonitor.obj" -@erase "$(INTDIR)\mod_heartmonitor.res" -@erase "$(INTDIR)\mod_heartmonitor_src.idb" -@erase "$(INTDIR)\mod_heartmonitor_src.pdb" -@erase "$(OUTDIR)\mod_heartmonitor.exp" -@erase "$(OUTDIR)\mod_heartmonitor.lib" -@erase "$(OUTDIR)\mod_heartmonitor.pdb" -@erase "$(OUTDIR)\mod_heartmonitor.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../core" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_heartmonitor_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_heartmonitor.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_heartmonitor.so" /d LONG_NAME="heartmonitor_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_heartmonitor.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_heartmonitor.pdb" /debug /out:"$(OUTDIR)\mod_heartmonitor.so" /implib:"$(OUTDIR)\mod_heartmonitor.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_heartmonitor.so LINK32_OBJS= \ "$(INTDIR)\mod_heartmonitor.obj" \ "$(INTDIR)\mod_heartmonitor.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "..\core\Debug\mod_watchdog.lib" "$(OUTDIR)\mod_heartmonitor.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_heartmonitor.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_heartmonitor.so" if exist .\Debug\mod_heartmonitor.so.manifest mt.exe -manifest .\Debug\mod_heartmonitor.so.manifest -outputresource:.\Debug\mod_heartmonitor.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_heartmonitor.dep") !INCLUDE "mod_heartmonitor.dep" !ELSE !MESSAGE Warning: cannot find "mod_heartmonitor.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_heartmonitor - Win32 Release" || "$(CFG)" == "mod_heartmonitor - Win32 Debug" SOURCE=.\mod_heartmonitor.c "$(INTDIR)\mod_heartmonitor.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_heartmonitor - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\cluster" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cluster" !ELSEIF "$(CFG)" == "mod_heartmonitor - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\cluster" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cluster" !ENDIF !IF "$(CFG)" == "mod_heartmonitor - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\cluster" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cluster" !ELSEIF "$(CFG)" == "mod_heartmonitor - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\cluster" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cluster" !ENDIF !IF "$(CFG)" == "mod_heartmonitor - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\cluster" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\cluster" !ELSEIF "$(CFG)" == "mod_heartmonitor - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\cluster" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\cluster" !ENDIF !IF "$(CFG)" == "mod_heartmonitor - Win32 Release" "mod_watchdog - Win32 Release" : cd ".\..\core" $(MAKE) /$(MAKEFLAGS) /F ".\mod_watchdog.mak" CFG="mod_watchdog - Win32 Release" cd "..\cluster" "mod_watchdog - Win32 ReleaseCLEAN" : cd ".\..\core" $(MAKE) /$(MAKEFLAGS) /F ".\mod_watchdog.mak" CFG="mod_watchdog - Win32 Release" RECURSE=1 CLEAN cd "..\cluster" !ELSEIF "$(CFG)" == "mod_heartmonitor - Win32 Debug" "mod_watchdog - Win32 Debug" : cd ".\..\core" $(MAKE) /$(MAKEFLAGS) /F ".\mod_watchdog.mak" CFG="mod_watchdog - Win32 Debug" cd "..\cluster" "mod_watchdog - Win32 DebugCLEAN" : cd ".\..\core" $(MAKE) /$(MAKEFLAGS) /F ".\mod_watchdog.mak" CFG="mod_watchdog - Win32 Debug" RECURSE=1 CLEAN cd "..\cluster" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_heartmonitor - Win32 Release" "$(INTDIR)\mod_heartmonitor.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_heartmonitor.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_heartmonitor.so" /d LONG_NAME="heartmonitor_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_heartmonitor - Win32 Debug" "$(INTDIR)\mod_heartmonitor.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_heartmonitor.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_heartmonitor.so" /d LONG_NAME="heartmonitor_module for Apache" $(SOURCE) !ENDIF !ENDIF �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/cluster/mod_heartbeat.mak������������������������������������������������������0000644�0000000�0000050�00000026001�12701473373�017663� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_heartbeat.dsp !IF "$(CFG)" == "" CFG=mod_heartbeat - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_heartbeat - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_heartbeat - Win32 Release" && "$(CFG)" != "mod_heartbeat - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_heartbeat.mak" CFG="mod_heartbeat - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_heartbeat - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_heartbeat - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_heartbeat - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_heartbeat.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_watchdog - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_heartbeat.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_watchdog - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_heartbeat.obj" -@erase "$(INTDIR)\mod_heartbeat.res" -@erase "$(INTDIR)\mod_heartbeat_src.idb" -@erase "$(INTDIR)\mod_heartbeat_src.pdb" -@erase "$(OUTDIR)\mod_heartbeat.exp" -@erase "$(OUTDIR)\mod_heartbeat.lib" -@erase "$(OUTDIR)\mod_heartbeat.pdb" -@erase "$(OUTDIR)\mod_heartbeat.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../core" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_heartbeat_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_heartbeat.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_heartbeat.so" /d LONG_NAME="heartbeat_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_heartbeat.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_heartbeat.pdb" /debug /out:"$(OUTDIR)\mod_heartbeat.so" /implib:"$(OUTDIR)\mod_heartbeat.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_heartbeat.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_heartbeat.obj" \ "$(INTDIR)\mod_heartbeat.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "..\core\Release\mod_watchdog.lib" "$(OUTDIR)\mod_heartbeat.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_heartbeat.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_heartbeat.so" if exist .\Release\mod_heartbeat.so.manifest mt.exe -manifest .\Release\mod_heartbeat.so.manifest -outputresource:.\Release\mod_heartbeat.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_heartbeat - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_heartbeat.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_watchdog - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_heartbeat.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_watchdog - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_heartbeat.obj" -@erase "$(INTDIR)\mod_heartbeat.res" -@erase "$(INTDIR)\mod_heartbeat_src.idb" -@erase "$(INTDIR)\mod_heartbeat_src.pdb" -@erase "$(OUTDIR)\mod_heartbeat.exp" -@erase "$(OUTDIR)\mod_heartbeat.lib" -@erase "$(OUTDIR)\mod_heartbeat.pdb" -@erase "$(OUTDIR)\mod_heartbeat.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../core" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_heartbeat_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_heartbeat.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_heartbeat.so" /d LONG_NAME="heartbeat_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_heartbeat.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_heartbeat.pdb" /debug /out:"$(OUTDIR)\mod_heartbeat.so" /implib:"$(OUTDIR)\mod_heartbeat.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_heartbeat.so LINK32_OBJS= \ "$(INTDIR)\mod_heartbeat.obj" \ "$(INTDIR)\mod_heartbeat.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "..\core\Debug\mod_watchdog.lib" "$(OUTDIR)\mod_heartbeat.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_heartbeat.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_heartbeat.so" if exist .\Debug\mod_heartbeat.so.manifest mt.exe -manifest .\Debug\mod_heartbeat.so.manifest -outputresource:.\Debug\mod_heartbeat.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_heartbeat.dep") !INCLUDE "mod_heartbeat.dep" !ELSE !MESSAGE Warning: cannot find "mod_heartbeat.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_heartbeat - Win32 Release" || "$(CFG)" == "mod_heartbeat - Win32 Debug" SOURCE=.\mod_heartbeat.c "$(INTDIR)\mod_heartbeat.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_heartbeat - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\cluster" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cluster" !ELSEIF "$(CFG)" == "mod_heartbeat - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\cluster" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cluster" !ENDIF !IF "$(CFG)" == "mod_heartbeat - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\cluster" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\cluster" !ELSEIF "$(CFG)" == "mod_heartbeat - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\cluster" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\cluster" !ENDIF !IF "$(CFG)" == "mod_heartbeat - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\cluster" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\cluster" !ELSEIF "$(CFG)" == "mod_heartbeat - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\cluster" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\cluster" !ENDIF !IF "$(CFG)" == "mod_heartbeat - Win32 Release" "mod_watchdog - Win32 Release" : cd ".\..\core" $(MAKE) /$(MAKEFLAGS) /F ".\mod_watchdog.mak" CFG="mod_watchdog - Win32 Release" cd "..\cluster" "mod_watchdog - Win32 ReleaseCLEAN" : cd ".\..\core" $(MAKE) /$(MAKEFLAGS) /F ".\mod_watchdog.mak" CFG="mod_watchdog - Win32 Release" RECURSE=1 CLEAN cd "..\cluster" !ELSEIF "$(CFG)" == "mod_heartbeat - Win32 Debug" "mod_watchdog - Win32 Debug" : cd ".\..\core" $(MAKE) /$(MAKEFLAGS) /F ".\mod_watchdog.mak" CFG="mod_watchdog - Win32 Debug" cd "..\cluster" "mod_watchdog - Win32 DebugCLEAN" : cd ".\..\core" $(MAKE) /$(MAKEFLAGS) /F ".\mod_watchdog.mak" CFG="mod_watchdog - Win32 Debug" RECURSE=1 CLEAN cd "..\cluster" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_heartbeat - Win32 Release" "$(INTDIR)\mod_heartbeat.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_heartbeat.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_heartbeat.so" /d LONG_NAME="heartbeat_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_heartbeat - Win32 Debug" "$(INTDIR)\mod_heartbeat.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_heartbeat.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_heartbeat.so" /d LONG_NAME="heartbeat_module for Apache" $(SOURCE) !ENDIF !ENDIF �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/cluster/README.heartbeat�������������������������������������������������������0000644�0000000�0000050�00000001743�12757564422�017226� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������mod_heartbeat Broadcasts the current Apache Connection status over multicast. Example Configuration: HeartbeatAddress 239.0.0.1:27999 Dependencies: mod_status must be either a static module, or if a dynamic module, it must be loaded before mod_heartbeat. Consuming: Every 1 second, this module generates a single multicast UDP packet, containing the number of busy and idle workers. The packet is a simple ASCII format, similar to GET query parameters in UDP. An Example packet: v=1&ready=75&busy=0 Consumers should handle new variables besides busy and ready, separated by '&' being added in the future. Misc: The interval of 1 seconds is controlled by the HEARTBEAT_INTERVAL compile time define. This is not currently tunable at run time. To make this module send the status packet more often, you must add to the CFLAGS used to compile the module to include: -DHEARTBEAT_INTERVAL=3 Would cause the broadcasts to be sent every 3 seconds. �����������������������������httpd-2.4.41/modules/cluster/README.heartmonitor����������������������������������������������������0000644�0000000�0000050�00000001353�11123517417�017763� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������mod_heartmonitor Collects the Apache Connection status data over multicast. Example Configuration: # First parameter is the interface to listen on HeartbeatListen 239.0.0.1:27999 # Absolute path, or relative path to ServerRoot HeartbeatStorage logs/hb.dat Dependencies: Due to a bug in APR's apr_socket_recvfrom, version 1.2.12 or newer must be used: <http://svn.apache.org/viewvc?view=rev&revision=467600> Consuming: This module atomically writes to the configured path, a list of servers, along with metadata about them. Included data about each server: - IP Address - Busy Slots - Open Slots - Last Seen Every 5 seconds, this file will be updated with the current status of the cluster. �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/cluster/mod_heartmonitor.c�����������������������������������������������������0000644�0000000�0000050�00000067707�13441675764�020145� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_core.h" #include "http_protocol.h" #include "apr_strings.h" #include "apr_hash.h" #include "apr_time.h" #include "ap_mpm.h" #include "scoreboard.h" #include "mod_watchdog.h" #include "ap_slotmem.h" #include "heartbeat.h" #ifndef HM_UPDATE_SEC /* How often we update the stats file */ /* TODO: Make a runtime config */ #define HM_UPDATE_SEC (5) #endif #define HM_WATHCHDOG_NAME ("_heartmonitor_") static const ap_slotmem_provider_t *storage = NULL; static ap_slotmem_instance_t *slotmem = NULL; static int maxworkers = 0; module AP_MODULE_DECLARE_DATA heartmonitor_module; typedef struct hm_server_t { const char *ip; int busy; int ready; unsigned int port; apr_time_t seen; } hm_server_t; typedef struct hm_ctx_t { int active; const char *storage_path; ap_watchdog_t *watchdog; apr_interval_time_t interval; apr_sockaddr_t *mcast_addr; apr_status_t status; volatile int keep_running; apr_socket_t *sock; apr_pool_t *p; apr_hash_t *servers; server_rec *s; } hm_ctx_t; typedef struct hm_slot_server_ctx_t { hm_server_t *s; int found; unsigned int item_id; } hm_slot_server_ctx_t; static apr_status_t hm_listen(hm_ctx_t *ctx) { apr_status_t rv; rv = apr_socket_create(&ctx->sock, ctx->mcast_addr->family, SOCK_DGRAM, APR_PROTO_UDP, ctx->p); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02068) "Failed to create listening socket."); return rv; } rv = apr_socket_opt_set(ctx->sock, APR_SO_REUSEADDR, 1); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02069) "Failed to set APR_SO_REUSEADDR to 1 on socket."); return rv; } rv = apr_socket_opt_set(ctx->sock, APR_SO_NONBLOCK, 1); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02070) "Failed to set APR_SO_NONBLOCK to 1 on socket."); return rv; } rv = apr_socket_bind(ctx->sock, ctx->mcast_addr); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02071) "Failed to bind on socket."); return rv; } rv = apr_mcast_join(ctx->sock, ctx->mcast_addr, NULL, NULL); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02072) "Failed to join multicast group"); return rv; } rv = apr_mcast_loopback(ctx->sock, 1); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02073) "Failed to accept localhost mulitcast on socket."); return rv; } return APR_SUCCESS; } /* XXX: The same exists in mod_lbmethod_heartbeat.c where it is named argstr_to_table */ static void qs_to_table(const char *input, apr_table_t *parms, apr_pool_t *p) { char *key; char *value; char *query_string; char *strtok_state; if (input == NULL) { return; } query_string = apr_pstrdup(p, input); key = apr_strtok(query_string, "&", &strtok_state); while (key) { value = strchr(key, '='); if (value) { *value = '\0'; /* Split the string in two */ value++; /* Skip passed the = */ } else { value = "1"; } ap_unescape_url(key); ap_unescape_url(value); apr_table_set(parms, key, value); /* ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03182) "Found query arg: %s = %s", key, value); */ key = apr_strtok(NULL, "&", &strtok_state); } } #define SEEN_TIMEOUT (30) /* Store in the slotmem */ static apr_status_t hm_update(void* mem, void *data, apr_pool_t *p) { hm_slot_server_t *old = (hm_slot_server_t *) mem; hm_slot_server_ctx_t *s = (hm_slot_server_ctx_t *) data; hm_server_t *new = s->s; if (strncmp(old->ip, new->ip, MAXIPSIZE)==0) { s->found = 1; old->busy = new->busy; old->ready = new->ready; old->seen = new->seen; } return APR_SUCCESS; } /* Read the id corresponding to the entry in the slotmem */ static apr_status_t hm_readid(void* mem, void *data, apr_pool_t *p) { hm_slot_server_t *old = (hm_slot_server_t *) mem; hm_slot_server_ctx_t *s = (hm_slot_server_ctx_t *) data; hm_server_t *new = s->s; if (strncmp(old->ip, new->ip, MAXIPSIZE)==0) { s->found = 1; s->item_id = old->id; } return APR_SUCCESS; } /* update the entry or create it if not existing */ static apr_status_t hm_slotmem_update_stat(hm_server_t *s, apr_pool_t *pool) { /* We call do_all (to try to update) otherwise grab + put */ hm_slot_server_ctx_t ctx; ctx.s = s; ctx.found = 0; storage->doall(slotmem, hm_update, &ctx, pool); if (!ctx.found) { unsigned int i; hm_slot_server_t hmserver; memcpy(hmserver.ip, s->ip, MAXIPSIZE); hmserver.busy = s->busy; hmserver.ready = s->ready; hmserver.seen = s->seen; /* XXX locking for grab() / put() */ storage->grab(slotmem, &i); hmserver.id = i; storage->put(slotmem, i, (unsigned char *)&hmserver, sizeof(hmserver)); } return APR_SUCCESS; } static apr_status_t hm_slotmem_remove_stat(hm_server_t *s, apr_pool_t *pool) { hm_slot_server_ctx_t ctx; ctx.s = s; ctx.found = 0; storage->doall(slotmem, hm_readid, &ctx, pool); if (ctx.found) { storage->release(slotmem, ctx.item_id); } return APR_SUCCESS; } static apr_status_t hm_file_update_stat(hm_ctx_t *ctx, hm_server_t *s, apr_pool_t *pool) { apr_status_t rv; apr_file_t *fp; apr_file_t *fpin; apr_time_t now; apr_time_t fage; apr_finfo_t fi; int updated = 0; char *path = apr_pstrcat(pool, ctx->storage_path, ".tmp.XXXXXX", NULL); /* TODO: Update stats file (!) */ rv = apr_file_mktemp(&fp, path, APR_CREATE | APR_WRITE, pool); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02074) "Unable to open tmp file: %s", path); return rv; } rv = apr_file_open(&fpin, ctx->storage_path, APR_READ|APR_BINARY|APR_BUFFERED, APR_OS_DEFAULT, pool); now = apr_time_now(); if (rv == APR_SUCCESS) { char *t; apr_table_t *hbt = apr_table_make(pool, 10); apr_bucket_alloc_t *ba; apr_bucket_brigade *bb; apr_bucket_brigade *tmpbb; rv = apr_file_info_get(&fi, APR_FINFO_SIZE | APR_FINFO_MTIME, fpin); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02075) "Unable to read file: %s", ctx->storage_path); return rv; } /* Read the file and update the line corresponding to the node */ ba = apr_bucket_alloc_create(pool); bb = apr_brigade_create(pool, ba); apr_brigade_insert_file(bb, fpin, 0, fi.size, pool); tmpbb = apr_brigade_create(pool, ba); fage = apr_time_sec(now - fi.mtime); do { char buf[4096]; const char *ip; apr_size_t bsize = sizeof(buf); apr_brigade_cleanup(tmpbb); if (APR_BRIGADE_EMPTY(bb)) { break; } rv = apr_brigade_split_line(tmpbb, bb, APR_BLOCK_READ, sizeof(buf)); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02076) "Unable to read from file: %s", ctx->storage_path); return rv; } apr_brigade_flatten(tmpbb, buf, &bsize); if (bsize == 0) { break; } buf[bsize - 1] = 0; t = strchr(buf, ' '); if (t) { ip = apr_pstrmemdup(pool, buf, t - buf); } else { ip = NULL; } if (!ip || buf[0] == '#') { /* copy things we can't process */ apr_file_printf(fp, "%s\n", buf); } else if (strcmp(ip, s->ip) != 0 ) { hm_server_t node; apr_time_t seen; const char *val; /* Update seen time according to the last file modification */ apr_table_clear(hbt); qs_to_table(apr_pstrdup(pool, t), hbt, pool); if ((val = apr_table_get(hbt, "busy"))) { node.busy = atoi(val); } else { node.busy = 0; } if ((val = apr_table_get(hbt, "ready"))) { node.ready = atoi(val); } else { node.ready = 0; } if ((val = apr_table_get(hbt, "lastseen"))) { node.seen = atoi(val); } else { node.seen = SEEN_TIMEOUT; } seen = fage + node.seen; if ((val = apr_table_get(hbt, "port"))) { node.port = atoi(val); } else { node.port = 80; } apr_file_printf(fp, "%s &ready=%u&busy=%u&lastseen=%u&port=%u\n", ip, node.ready, node.busy, (unsigned int) seen, node.port); } else { apr_time_t seen; seen = apr_time_sec(now - s->seen); apr_file_printf(fp, "%s &ready=%u&busy=%u&lastseen=%u&port=%u\n", s->ip, s->ready, s->busy, (unsigned int) seen, s->port); updated = 1; } } while (1); } if (!updated) { apr_time_t seen; seen = apr_time_sec(now - s->seen); apr_file_printf(fp, "%s &ready=%u&busy=%u&lastseen=%u&port=%u\n", s->ip, s->ready, s->busy, (unsigned int) seen, s->port); } rv = apr_file_flush(fp); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02077) "Unable to flush file: %s", path); return rv; } rv = apr_file_close(fp); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02078) "Unable to close file: %s", path); return rv; } rv = apr_file_perms_set(path, APR_FPROT_UREAD | APR_FPROT_GREAD | APR_FPROT_WREAD); if (rv && rv != APR_INCOMPLETE && rv != APR_ENOTIMPL) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02079) "Unable to set file permissions on %s", path); return rv; } rv = apr_file_rename(path, ctx->storage_path, pool); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02080) "Unable to move file: %s -> %s", path, ctx->storage_path); return rv; } return APR_SUCCESS; } static apr_status_t hm_update_stat(hm_ctx_t *ctx, hm_server_t *s, apr_pool_t *pool) { if (slotmem) return hm_slotmem_update_stat(s, pool); else return hm_file_update_stat(ctx, s, pool); } /* Store in a file */ static apr_status_t hm_file_update_stats(hm_ctx_t *ctx, apr_pool_t *p) { apr_status_t rv; apr_file_t *fp; apr_hash_index_t *hi; apr_time_t now; char *path = apr_pstrcat(p, ctx->storage_path, ".tmp.XXXXXX", NULL); /* TODO: Update stats file (!) */ rv = apr_file_mktemp(&fp, path, APR_CREATE | APR_WRITE, p); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02081) "Unable to open tmp file: %s", path); return rv; } now = apr_time_now(); for (hi = apr_hash_first(p, ctx->servers); hi != NULL; hi = apr_hash_next(hi)) { hm_server_t *s = NULL; apr_time_t seen; apr_hash_this(hi, NULL, NULL, (void **) &s); seen = apr_time_sec(now - s->seen); if (seen > SEEN_TIMEOUT) { /* * Skip this entry from the heartbeat file -- when it comes back, * we will reuse the memory... */ } else { apr_file_printf(fp, "%s &ready=%u&busy=%u&lastseen=%u&port=%u\n", s->ip, s->ready, s->busy, (unsigned int) seen, s->port); } } rv = apr_file_flush(fp); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02082) "Unable to flush file: %s", path); return rv; } rv = apr_file_close(fp); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02083) "Unable to close file: %s", path); return rv; } rv = apr_file_perms_set(path, APR_FPROT_UREAD | APR_FPROT_GREAD | APR_FPROT_WREAD); if (rv && rv != APR_INCOMPLETE && rv != APR_ENOTIMPL) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02084) "Unable to set file permissions on %s", path); return rv; } rv = apr_file_rename(path, ctx->storage_path, p); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02085) "Unable to move file: %s -> %s", path, ctx->storage_path); return rv; } return APR_SUCCESS; } /* Store in a slotmem */ static apr_status_t hm_slotmem_update_stats(hm_ctx_t *ctx, apr_pool_t *p) { apr_status_t rv; apr_time_t now; apr_hash_index_t *hi; now = apr_time_now(); for (hi = apr_hash_first(p, ctx->servers); hi != NULL; hi = apr_hash_next(hi)) { hm_server_t *s = NULL; apr_time_t seen; apr_hash_this(hi, NULL, NULL, (void **) &s); seen = apr_time_sec(now - s->seen); if (seen > SEEN_TIMEOUT) { /* remove it */ rv = hm_slotmem_remove_stat(s, p); } else { /* update it */ rv = hm_slotmem_update_stat(s, p); } if (rv !=APR_SUCCESS) return rv; } return APR_SUCCESS; } /* Store/update the stats */ static apr_status_t hm_update_stats(hm_ctx_t *ctx, apr_pool_t *p) { if (slotmem) return hm_slotmem_update_stats(ctx, p); else return hm_file_update_stats(ctx, p); } static hm_server_t *hm_get_server(hm_ctx_t *ctx, const char *ip, const int port) { hm_server_t *s; s = apr_hash_get(ctx->servers, ip, APR_HASH_KEY_STRING); if (s == NULL) { s = apr_palloc(ctx->p, sizeof(hm_server_t)); s->ip = apr_pstrdup(ctx->p, ip); s->port = port; s->ready = 0; s->busy = 0; s->seen = 0; apr_hash_set(ctx->servers, s->ip, APR_HASH_KEY_STRING, s); } return s; } /* Process a message received from a backend node */ static void hm_processmsg(hm_ctx_t *ctx, apr_pool_t *p, apr_sockaddr_t *from, char *buf, int len) { apr_table_t *tbl; buf[len] = '\0'; tbl = apr_table_make(p, 10); qs_to_table(buf, tbl, p); if (apr_table_get(tbl, "v") != NULL && apr_table_get(tbl, "busy") != NULL && apr_table_get(tbl, "ready") != NULL) { char *ip; int port = 80; hm_server_t *s; /* TODO: REMOVE ME BEFORE PRODUCTION (????) */ ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ctx->s, APLOGNO(02086) "%pI busy=%s ready=%s", from, apr_table_get(tbl, "busy"), apr_table_get(tbl, "ready")); apr_sockaddr_ip_get(&ip, from); if (apr_table_get(tbl, "port") != NULL) port = atoi(apr_table_get(tbl, "port")); s = hm_get_server(ctx, ip, port); s->busy = atoi(apr_table_get(tbl, "busy")); s->ready = atoi(apr_table_get(tbl, "ready")); s->seen = apr_time_now(); } else { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, ctx->s, APLOGNO(02087) "malformed message from %pI", from); } } /* Read message from multicast socket */ #define MAX_MSG_LEN (1000) static apr_status_t hm_recv(hm_ctx_t *ctx, apr_pool_t *p) { char buf[MAX_MSG_LEN + 1]; apr_sockaddr_t from; apr_size_t len = MAX_MSG_LEN; apr_status_t rv; from.pool = p; rv = apr_socket_recvfrom(&from, ctx->sock, 0, buf, &len); if (APR_STATUS_IS_EAGAIN(rv)) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02088) "would block"); return APR_SUCCESS; } else if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02089) "recvfrom failed"); return rv; } hm_processmsg(ctx, p, &from, buf, len); return rv; } static apr_status_t hm_watchdog_callback(int state, void *data, apr_pool_t *pool) { apr_status_t rv = APR_SUCCESS; apr_time_t cur, now; hm_ctx_t *ctx = (hm_ctx_t *)data; if (!ctx->active) { return rv; } switch (state) { case AP_WATCHDOG_STATE_STARTING: rv = hm_listen(ctx); if (rv) { ctx->status = rv; ap_log_error(APLOG_MARK, APLOG_CRIT, rv, ctx->s, APLOGNO(02090) "Unable to listen for connections!"); } else { ctx->keep_running = 1; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ctx->s, APLOGNO(02091) "%s listener started.", HM_WATHCHDOG_NAME); } break; case AP_WATCHDOG_STATE_RUNNING: /* store in the slotmem or in the file depending on configuration */ hm_update_stats(ctx, pool); cur = now = apr_time_sec(apr_time_now()); while ((now - cur) < apr_time_sec(ctx->interval)) { int n; apr_status_t rc; apr_pool_t *p; apr_pollfd_t pfd; apr_interval_time_t timeout; apr_pool_create(&p, pool); pfd.desc_type = APR_POLL_SOCKET; pfd.desc.s = ctx->sock; pfd.p = p; pfd.reqevents = APR_POLLIN; timeout = apr_time_from_sec(1); rc = apr_poll(&pfd, 1, &n, timeout); if (!ctx->keep_running) { apr_pool_destroy(p); break; } if (rc == APR_SUCCESS && (pfd.rtnevents & APR_POLLIN)) { hm_recv(ctx, p); } now = apr_time_sec(apr_time_now()); apr_pool_destroy(p); } break; case AP_WATCHDOG_STATE_STOPPING: ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ctx->s, APLOGNO(02092) "stopping %s listener.", HM_WATHCHDOG_NAME); ctx->keep_running = 0; if (ctx->sock) { apr_socket_close(ctx->sock); ctx->sock = NULL; } break; } return rv; } static int hm_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { apr_status_t rv; hm_ctx_t *ctx = ap_get_module_config(s->module_config, &heartmonitor_module); APR_OPTIONAL_FN_TYPE(ap_watchdog_get_instance) *hm_watchdog_get_instance; APR_OPTIONAL_FN_TYPE(ap_watchdog_register_callback) *hm_watchdog_register_callback; hm_watchdog_get_instance = APR_RETRIEVE_OPTIONAL_FN(ap_watchdog_get_instance); hm_watchdog_register_callback = APR_RETRIEVE_OPTIONAL_FN(ap_watchdog_register_callback); if (!hm_watchdog_get_instance || !hm_watchdog_register_callback) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, s, APLOGNO(02093) "mod_watchdog is required"); return !OK; } /* Create the slotmem */ if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_CONFIG) { /* this is the real thing */ if (maxworkers) { storage = ap_lookup_provider(AP_SLOTMEM_PROVIDER_GROUP, "shm", AP_SLOTMEM_PROVIDER_VERSION); if (!storage) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02284) "failed to lookup provider 'shm' for '%s', " "maybe you need to load mod_slotmem_shm?", AP_SLOTMEM_PROVIDER_GROUP); return !OK; } storage->create(&slotmem, "mod_heartmonitor", sizeof(hm_slot_server_t), maxworkers, AP_SLOTMEM_TYPE_PREGRAB, p); if (!slotmem) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02285) "slotmem_create for status failed"); return !OK; } } } if (!ctx->active) { return OK; } rv = hm_watchdog_get_instance(&ctx->watchdog, HM_WATHCHDOG_NAME, 0, 1, p); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(02094) "Failed to create watchdog instance (%s)", HM_WATHCHDOG_NAME); return !OK; } /* Register a callback with zero interval. */ rv = hm_watchdog_register_callback(ctx->watchdog, 0, ctx, hm_watchdog_callback); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(02095) "Failed to register watchdog callback (%s)", HM_WATHCHDOG_NAME); return !OK; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02096) "wd callback %s", HM_WATHCHDOG_NAME); return OK; } static int hm_handler(request_rec *r) { apr_bucket_brigade *input_brigade; apr_size_t len; char *buf; apr_status_t status; apr_table_t *tbl; hm_server_t hmserver; char *ip; hm_ctx_t *ctx; if (strcmp(r->handler, "heartbeat")) { return DECLINED; } if (r->method_number != M_POST) { return HTTP_METHOD_NOT_ALLOWED; } len = MAX_MSG_LEN; ctx = ap_get_module_config(r->server->module_config, &heartmonitor_module); buf = apr_pcalloc(r->pool, MAX_MSG_LEN); input_brigade = apr_brigade_create(r->connection->pool, r->connection->bucket_alloc); status = ap_get_brigade(r->input_filters, input_brigade, AP_MODE_READBYTES, APR_BLOCK_READ, MAX_MSG_LEN); if (status != APR_SUCCESS) { return ap_map_http_request_error(status, HTTP_BAD_REQUEST); } apr_brigade_flatten(input_brigade, buf, &len); /* we can't use hm_processmsg because it uses hm_get_server() */ buf[len] = '\0'; tbl = apr_table_make(r->pool, 10); qs_to_table(buf, tbl, r->pool); apr_sockaddr_ip_get(&ip, r->connection->client_addr); hmserver.ip = ip; hmserver.port = 80; if (apr_table_get(tbl, "port") != NULL) hmserver.port = atoi(apr_table_get(tbl, "port")); hmserver.busy = atoi(apr_table_get(tbl, "busy")); hmserver.ready = atoi(apr_table_get(tbl, "ready")); hmserver.seen = apr_time_now(); hm_update_stat(ctx, &hmserver, r->pool); ap_set_content_type(r, "text/plain"); ap_set_content_length(r, 2); ap_rputs("OK", r); ap_rflush(r); return OK; } static void hm_register_hooks(apr_pool_t *p) { static const char * const aszSucc[]={ "mod_proxy.c", NULL }; ap_hook_post_config(hm_post_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_handler(hm_handler, NULL, aszSucc, APR_HOOK_FIRST); } static void *hm_create_config(apr_pool_t *p, server_rec *s) { hm_ctx_t *ctx = (hm_ctx_t *) apr_palloc(p, sizeof(hm_ctx_t)); ctx->active = 0; ctx->storage_path = ap_runtime_dir_relative(p, DEFAULT_HEARTBEAT_STORAGE); /* TODO: Add directive for tuning the update interval */ ctx->interval = apr_time_from_sec(HM_UPDATE_SEC); ctx->s = s; apr_pool_create(&ctx->p, p); ctx->servers = apr_hash_make(ctx->p); return ctx; } static const char *cmd_hm_storage(cmd_parms *cmd, void *dconf, const char *path) { apr_pool_t *p = cmd->pool; hm_ctx_t *ctx = (hm_ctx_t *) ap_get_module_config(cmd->server->module_config, &heartmonitor_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ctx->storage_path = ap_runtime_dir_relative(p, path); return NULL; } static const char *cmd_hm_listen(cmd_parms *cmd, void *dconf, const char *mcast_addr) { apr_status_t rv; char *host_str; char *scope_id; apr_port_t port = 0; apr_pool_t *p = cmd->pool; hm_ctx_t *ctx = (hm_ctx_t *) ap_get_module_config(cmd->server->module_config, &heartmonitor_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (!ctx->active) { ctx->active = 1; } else { return "HeartbeatListen: May only be specified once."; } rv = apr_parse_addr_port(&host_str, &scope_id, &port, mcast_addr, cmd->temp_pool); if (rv) { return "HeartbeatListen: Unable to parse multicast address."; } if (host_str == NULL) { return "HeartbeatListen: No host provided in multicast address"; } if (port == 0) { return "HeartbeatListen: No port provided in multicast address"; } rv = apr_sockaddr_info_get(&ctx->mcast_addr, host_str, APR_INET, port, 0, p); if (rv) { return "HeartbeatListen: apr_sockaddr_info_get failed on multicast address"; } return NULL; } static const char *cmd_hm_maxworkers(cmd_parms *cmd, void *dconf, const char *data) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } maxworkers = atoi(data); if (maxworkers <= 10) return "HeartbeatMaxServers: Should be bigger than 10"; return NULL; } static const command_rec hm_cmds[] = { AP_INIT_TAKE1("HeartbeatListen", cmd_hm_listen, NULL, RSRC_CONF, "Address to listen for heartbeat requests"), AP_INIT_TAKE1("HeartbeatStorage", cmd_hm_storage, NULL, RSRC_CONF, "Path to store heartbeat data."), AP_INIT_TAKE1("HeartbeatMaxServers", cmd_hm_maxworkers, NULL, RSRC_CONF, "Max number of servers when using slotmem (instead file) to store heartbeat data."), {NULL} }; AP_DECLARE_MODULE(heartmonitor) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ hm_create_config, /* create per-server config structure */ NULL, /* merge per-server config structures */ hm_cmds, /* command apr_table_t */ hm_register_hooks }; ���������������������������������������������������������httpd-2.4.41/modules/cluster/config5.m4�������������������������������������������������������������0000644�0000000�0000050�00000000666�11707053320�016167� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� APACHE_MODPATH_INIT(cluster) heartbeat_objects='mod_heartbeat.lo' case "$host" in *os2*) # OS/2 DLLs must resolve all symbols at build time # and we need some from the watchdog module heartbeat_objects="$heartbeat_objects ../core/mod_watchdog.la" ;; esac APACHE_MODULE(heartbeat, Generates Heartbeats, $heartbeat_objects, , , , watchdog) APACHE_MODULE(heartmonitor, Collects Heartbeats, , , ) APACHE_MODPATH_FINISH ��������������������������������������������������������������������������httpd-2.4.41/modules/cluster/mod_heartbeat.dep������������������������������������������������������0000644�0000000�0000050�00000003713�12674411515�017667� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_heartbeat.mak .\mod_heartbeat.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\core\mod_watchdog.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ �����������������������������������������������������httpd-2.4.41/modules/cluster/NWGNUmodheartbeat������������������������������������������������������0000644�0000000�0000050�00000010314�11540546347�017576� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/core \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = modheartbeat # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Heart Beat Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = modheartbeat # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/modheartbeat.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_heartbeat.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ heartbeat_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/cluster/NWGNUmakefile����������������������������������������������������������0000644�0000000�0000050�00000007764�11540562746�016734� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/modheartbeat.nlm \ $(OBJDIR)/modheartmonitor.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc ������������httpd-2.4.41/modules/cluster/mod_heartmonitor.dsp���������������������������������������������������0000644�0000000�0000050�00000011607�11203324224�020445� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Project File - Name="mod_heartmonitor" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_heartmonitor - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_heartmonitor.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_heartmonitor.mak" CFG="mod_heartmonitor - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_heartmonitor - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_heartmonitor - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_heartmonitor - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../core" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_heartmonitor_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_heartmonitor.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_heartmonitor.so" /d LONG_NAME="heartmonitor_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_heartmonitor.so" /base:@..\..\os\win32\BaseAddr.ref,mod_heartmonitor.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_heartmonitor.so" /base:@..\..\os\win32\BaseAddr.ref,mod_heartmonitor.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_heartmonitor.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_heartmonitor - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../core" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_heartmonitor_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_heartmonitor.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_heartmonitor.so" /d LONG_NAME="heartmonitor_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_heartmonitor.so" /base:@..\..\os\win32\BaseAddr.ref,mod_heartmonitor.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_heartmonitor.so" /base:@..\..\os\win32\BaseAddr.ref,mod_heartmonitor.so # Begin Special Build Tool TargetPath=.\Debug\mod_heartmonitor.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_heartmonitor - Win32 Release" # Name "mod_heartmonitor - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_heartmonitor.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=.\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project �������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/cluster/mod_heartbeat.c��������������������������������������������������������0000644�0000000�0000050�00000014742�11737125415�017345� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "apr_strings.h" #include "ap_mpm.h" #include "scoreboard.h" #include "mod_watchdog.h" #ifndef HEARTBEAT_INTERVAL #define HEARTBEAT_INTERVAL (1) #endif module AP_MODULE_DECLARE_DATA heartbeat_module; typedef struct hb_ctx_t { int active; apr_sockaddr_t *mcast_addr; int server_limit; int thread_limit; apr_status_t status; } hb_ctx_t; static const char *msg_format = "v=%u&ready=%u&busy=%u"; #define MSG_VERSION (1) static int hb_monitor(hb_ctx_t *ctx, apr_pool_t *p) { apr_size_t len; apr_socket_t *sock = NULL; char buf[256]; int i, j; apr_uint32_t ready = 0; apr_uint32_t busy = 0; ap_generation_t mpm_generation; ap_mpm_query(AP_MPMQ_GENERATION, &mpm_generation); for (i = 0; i < ctx->server_limit; i++) { process_score *ps; ps = ap_get_scoreboard_process(i); for (j = 0; j < ctx->thread_limit; j++) { int res; worker_score *ws = NULL; ws = &ap_scoreboard_image->servers[i][j]; res = ws->status; if (res == SERVER_READY && ps->generation == mpm_generation) { ready++; } else if (res != SERVER_DEAD && res != SERVER_STARTING && res != SERVER_IDLE_KILL && ps->generation == mpm_generation) { busy++; } } } len = apr_snprintf(buf, sizeof(buf), msg_format, MSG_VERSION, ready, busy); do { apr_status_t rv; rv = apr_socket_create(&sock, ctx->mcast_addr->family, SOCK_DGRAM, APR_PROTO_UDP, p); if (rv) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, NULL, APLOGNO(02097) "Heartbeat: apr_socket_create failed"); break; } rv = apr_mcast_loopback(sock, 1); if (rv) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, NULL, APLOGNO(02098) "Heartbeat: apr_mcast_loopback failed"); break; } rv = apr_socket_sendto(sock, ctx->mcast_addr, 0, buf, &len); if (rv) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, NULL, APLOGNO(02099) "Heartbeat: apr_socket_sendto failed"); break; } } while (0); if (sock) { apr_socket_close(sock); } return OK; } static int hb_watchdog_init(server_rec *s, const char *name, apr_pool_t *pool) { hb_ctx_t *ctx = ap_get_module_config(s->module_config, &heartbeat_module); ap_mpm_query(AP_MPMQ_HARD_LIMIT_THREADS, &ctx->thread_limit); ap_mpm_query(AP_MPMQ_HARD_LIMIT_DAEMONS, &ctx->server_limit); return OK; } static int hb_watchdog_exit(server_rec *s, const char *name, apr_pool_t *pool) { return OK; } static int hb_watchdog_step(server_rec *s, const char *name, apr_pool_t *pool) { hb_ctx_t *ctx = ap_get_module_config(s->module_config, &heartbeat_module); if (!ctx->active || strcmp(name, AP_WATCHDOG_SINGLETON)) { return OK; } return hb_monitor(ctx, pool); } static int hb_watchdog_need(server_rec *s, const char *name, int parent, int singleton) { hb_ctx_t *ctx = ap_get_module_config(s->module_config, &heartbeat_module); if (ctx->active && singleton && !strcmp(name, AP_WATCHDOG_SINGLETON)) return OK; else return DECLINED; } static void hb_register_hooks(apr_pool_t *p) { ap_hook_watchdog_need(hb_watchdog_need, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_watchdog_init(hb_watchdog_init, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_watchdog_step(hb_watchdog_step, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_watchdog_exit(hb_watchdog_exit, NULL, NULL, APR_HOOK_MIDDLE); } static void *hb_create_config(apr_pool_t *p, server_rec *s) { hb_ctx_t *cfg = (hb_ctx_t *) apr_pcalloc(p, sizeof(hb_ctx_t)); return cfg; } static const char *cmd_hb_address(cmd_parms *cmd, void *dconf, const char *addr) { apr_status_t rv; char *host_str; char *scope_id; apr_port_t port = 0; apr_pool_t *p = cmd->pool; hb_ctx_t *ctx = (hb_ctx_t *) ap_get_module_config(cmd->server->module_config, &heartbeat_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } if (!ctx->active) { ctx->active = 1; } else { return "HeartbeatAddress: May only be specified once."; } rv = apr_parse_addr_port(&host_str, &scope_id, &port, addr, cmd->temp_pool); if (rv) { return "HeartbeatAddress: Unable to parse address."; } if (host_str == NULL) { return "HeartbeatAddress: No host provided in address"; } if (port == 0) { return "HeartbeatAddress: No port provided in address"; } rv = apr_sockaddr_info_get(&ctx->mcast_addr, host_str, APR_INET, port, 0, p); if (rv) { return "HeartbeatAddress: apr_sockaddr_info_get failed."; } return NULL; } static const command_rec hb_cmds[] = { AP_INIT_TAKE1("HeartbeatAddress", cmd_hb_address, NULL, RSRC_CONF, "Address to send heartbeat requests"), {NULL} }; AP_DECLARE_MODULE(heartbeat) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ hb_create_config, /* create per-server config structure */ NULL, /* merge per-server config structures */ hb_cmds, /* command apr_table_t */ hb_register_hooks }; ������������������������������httpd-2.4.41/modules/cluster/Makefile.in������������������������������������������������������������0000644�0000000�0000050�00000000267�11737125415�016445� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/cluster/mod_heartmonitor.dep���������������������������������������������������0000644�0000000�0000050�00000004344�12674411515�020444� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_heartmonitor.mak .\mod_heartmonitor.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\heartbeat.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\core\mod_watchdog.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/examples/����������������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273343�014531� 5����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/examples/mod_example_ipc.dep���������������������������������������������������0000644�0000000�0000050�00000003765�12674411515�020362� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated Dependency File, included by mod_example_ipc.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_example_ipc.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_protocol.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ �����������httpd-2.4.41/modules/examples/mod_case_filter_in.c��������������������������������������������������0000644�0000000�0000050�00000011201�12604740124�020466� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * An example input filter - this converts input to upper case. Note that * because of the moment it gets inserted it does NOT convert request headers. */ #include "httpd.h" #include "http_config.h" #include "apr_buckets.h" #include "apr_general.h" #include "apr_lib.h" #include "util_filter.h" #include "http_request.h" #include <ctype.h> static const char s_szCaseFilterName[] = "CaseFilterIn"; module AP_MODULE_DECLARE_DATA case_filter_in_module; typedef struct { int bEnabled; } CaseFilterInConfig; typedef struct { apr_bucket_brigade *pbbTmp; } CaseFilterInContext; static void *CaseFilterInCreateServerConfig(apr_pool_t *p, server_rec *s) { CaseFilterInConfig *pConfig = apr_pcalloc(p, sizeof *pConfig); pConfig->bEnabled = 0; return pConfig; } static void CaseFilterInInsertFilter(request_rec *r) { CaseFilterInConfig *pConfig = ap_get_module_config(r->server->module_config, &case_filter_in_module); if (!pConfig->bEnabled) return; ap_add_input_filter(s_szCaseFilterName, NULL, r, r->connection); } static apr_status_t CaseFilterInFilter(ap_filter_t *f, apr_bucket_brigade *pbbOut, ap_input_mode_t eMode, apr_read_type_e eBlock, apr_off_t nBytes) { request_rec *r = f->r; conn_rec *c = r->connection; CaseFilterInContext *pCtx; apr_status_t ret; if (!(pCtx = f->ctx)) { f->ctx = pCtx = apr_palloc(r->pool, sizeof *pCtx); pCtx->pbbTmp = apr_brigade_create(r->pool, c->bucket_alloc); } if (APR_BRIGADE_EMPTY(pCtx->pbbTmp)) { ret = ap_get_brigade(f->next, pCtx->pbbTmp, eMode, eBlock, nBytes); if (eMode == AP_MODE_EATCRLF || ret != APR_SUCCESS) return ret; } while (!APR_BRIGADE_EMPTY(pCtx->pbbTmp)) { apr_bucket *pbktIn = APR_BRIGADE_FIRST(pCtx->pbbTmp); apr_bucket *pbktOut; const char *data; apr_size_t len; char *buf; apr_size_t n; /* It is tempting to do this... * APR_BUCKET_REMOVE(pB); * APR_BRIGADE_INSERT_TAIL(pbbOut,pB); * and change the case of the bucket data, but that would be wrong * for a file or socket buffer, for example... */ if (APR_BUCKET_IS_EOS(pbktIn)) { APR_BUCKET_REMOVE(pbktIn); APR_BRIGADE_INSERT_TAIL(pbbOut, pbktIn); break; } ret=apr_bucket_read(pbktIn, &data, &len, eBlock); if (ret != APR_SUCCESS) return ret; buf = ap_malloc(len); for (n=0 ; n < len ; ++n) { buf[n] = apr_toupper(data[n]); } pbktOut = apr_bucket_heap_create(buf, len, 0, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(pbbOut, pbktOut); apr_bucket_delete(pbktIn); } return APR_SUCCESS; } static const char *CaseFilterInEnable(cmd_parms *cmd, void *dummy, int arg) { CaseFilterInConfig *pConfig = ap_get_module_config(cmd->server->module_config, &case_filter_in_module); pConfig->bEnabled=arg; return NULL; } static const command_rec CaseFilterInCmds[] = { AP_INIT_FLAG("CaseFilterIn", CaseFilterInEnable, NULL, RSRC_CONF, "Run an input case filter on this host"), { NULL } }; static void CaseFilterInRegisterHooks(apr_pool_t *p) { ap_hook_insert_filter(CaseFilterInInsertFilter, NULL, NULL, APR_HOOK_MIDDLE); ap_register_input_filter(s_szCaseFilterName, CaseFilterInFilter, NULL, AP_FTYPE_RESOURCE); } AP_DECLARE_MODULE(case_filter_in) = { STANDARD20_MODULE_STUFF, NULL, NULL, CaseFilterInCreateServerConfig, NULL, CaseFilterInCmds, CaseFilterInRegisterHooks }; �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/examples/mod_example_hooks.mak�������������������������������������������������0000644�0000000�0000050�00000024541�12701473373�020726� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Microsoft Developer Studio Generated NMAKE File, Based on mod_example_hooks.dsp !IF "$(CFG)" == "" CFG=mod_example_hooks - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_example_hooks - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_example_hooks - Win32 Release" && "$(CFG)" != "mod_example_hooks - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_example_hooks.mak" CFG="mod_example_hooks - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_example_hooks - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_example_hooks - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_example_hooks - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_example_hooks.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_example_hooks.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_example_hooks.obj" -@erase "$(INTDIR)\mod_example_hooks.res" -@erase "$(INTDIR)\mod_example_hooks_src.idb" -@erase "$(INTDIR)\mod_example_hooks_src.pdb" -@erase "$(OUTDIR)\mod_example_hooks.exp" -@erase "$(OUTDIR)\mod_example_hooks.lib" -@erase "$(OUTDIR)\mod_example_hooks.pdb" -@erase "$(OUTDIR)\mod_example_hooks.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_example_hooks_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_example_hooks.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_example_hooks.so" /d LONG_NAME="example_hooks_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_example_hooks.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_example_hooks.pdb" /debug /out:"$(OUTDIR)\mod_example_hooks.so" /implib:"$(OUTDIR)\mod_example_hooks.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_example_hooks.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_example_hooks.obj" \ "$(INTDIR)\mod_example_hooks.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_example_hooks.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_example_hooks.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_example_hooks.so" if exist .\Release\mod_example_hooks.so.manifest mt.exe -manifest .\Release\mod_example_hooks.so.manifest -outputresource:.\Release\mod_example_hooks.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_example_hooks - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_example_hooks.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_example_hooks.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_example_hooks.obj" -@erase "$(INTDIR)\mod_example_hooks.res" -@erase "$(INTDIR)\mod_example_hooks_src.idb" -@erase "$(INTDIR)\mod_example_hooks_src.pdb" -@erase "$(OUTDIR)\mod_example_hooks.exp" -@erase "$(OUTDIR)\mod_example_hooks.lib" -@erase "$(OUTDIR)\mod_example_hooks.pdb" -@erase "$(OUTDIR)\mod_example_hooks.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_example_hooks_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_example_hooks.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_example_hooks.so" /d LONG_NAME="example_hooks_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_example_hooks.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_example_hooks.pdb" /debug /out:"$(OUTDIR)\mod_example_hooks.so" /implib:"$(OUTDIR)\mod_example_hooks.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_example_hooks.so LINK32_OBJS= \ "$(INTDIR)\mod_example_hooks.obj" \ "$(INTDIR)\mod_example_hooks.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_example_hooks.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_example_hooks.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_example_hooks.so" if exist .\Debug\mod_example_hooks.so.manifest mt.exe -manifest .\Debug\mod_example_hooks.so.manifest -outputresource:.\Debug\mod_example_hooks.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_example_hooks.dep") !INCLUDE "mod_example_hooks.dep" !ELSE !MESSAGE Warning: cannot find "mod_example_hooks.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_example_hooks - Win32 Release" || "$(CFG)" == "mod_example_hooks - Win32 Debug" !IF "$(CFG)" == "mod_example_hooks - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\examples" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\examples" !ELSEIF "$(CFG)" == "mod_example_hooks - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\examples" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\examples" !ENDIF !IF "$(CFG)" == "mod_example_hooks - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\examples" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\examples" !ELSEIF "$(CFG)" == "mod_example_hooks - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\examples" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\examples" !ENDIF !IF "$(CFG)" == "mod_example_hooks - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\examples" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\examples" !ELSEIF "$(CFG)" == "mod_example_hooks - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\examples" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\examples" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_example_hooks - Win32 Release" "$(INTDIR)\mod_example_hooks.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_example_hooks.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_example_hooks.so" /d LONG_NAME="example_hooks_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_example_hooks - Win32 Debug" "$(INTDIR)\mod_example_hooks.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_example_hooks.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_example_hooks.so" /d LONG_NAME="example_hooks_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_example_hooks.c "$(INTDIR)\mod_example_hooks.obj" : $(SOURCE) "$(INTDIR)" !ENDIF ���������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/examples/NWGNUcase_flt_in������������������������������������������������������0000644�0000000�0000050�00000010301�11540546347�017536� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = case_flt_in # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Case Filter In Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_case_filter_in.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ case_filter_in_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/examples/README����������������������������������������������������������������0000644�0000000�0000050�00000004436�12757564422�015427� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������README for Apache 2.0 Example Module [April, 1997, updated May 2000] The files in the src/modules/examples directory under the Apache distribution directory tree are provided as an example to those that wish to write modules that use the Apache API. The main file is mod_example_hooks.c, which illustrates all the different callback mechanisms and call syntaces. By no means does an add-on module need to include routines for all of the callbacks - quite the contrary! The example module is an actual working module. If you link it into your server, enable the "example-hooks-handler" handler for a location, and then browse to that location, you will see a display of some of the tracing the example module did as the various callbacks were made. To include the example module in your server add --enable-example-hooks to the other ./configure arguments executed from the httpd source tree. After that run 'make'. To add another module of your own: A. cp modules/examples/mod_example_hooks.c modules/examples/mod_myexample.c B. Modify the file C. Add an entry to modules/examples/config.m4, e.g. APACHE_MODULE(myexample, my new module, , , no) The last argument specifies if the module is built by-default D. Build the server with --enable-myexample For windows, the process is slightly different; A. copy modules\examples\mod_example_hooks.c modules\examples\mod_myexample.c B. copy modules\examples\mod_example_hooks.dsp modules\examples\mod_myexample.dsp C. replace the occurrences of 'example_hooks' with your module name. D. add the new .dsp to your Apache.dsw workspace, with dependencies on the libapr, libaprutil and libhttpd projects. With the newer Developer Studio 2002 through 2005, when you add the new .dsp file it will be converted to a .vcproj file. To activate the example module, include a block similar to the following in your httpd.conf file: <Location /example-info> SetHandler example-hooks-handler </Location> As an alternative, you can put the following into a .htaccess file and then request the file "test.example" from that location: AddHandler example-hooks-handler .example After reloading/restarting your server, you should be able to browse to this location and see the brief display mentioned earlier. ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/modules/examples/mod_example_ipc.c�����������������������������������������������������0000644�0000000�0000050�00000030712�12661357032�020023� 0����������������������������������������������������������������������������������������������������ustar �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_example_ipc -- Apache sample module * * This module illustrates the use in an Apache 2.x module of the Interprocess * Communications routines that come with APR. It is example code, and not meant * to be used in a production server. * * To play with this sample module first compile it into a DSO file and install * it into Apache's modules directory by running: * * $ /path/to/apache2/bin/apxs -c -i mod_example_ipc.c * * Then activate it in Apache's httpd.conf file for instance for the URL * /example_ipc in as follows: * * # httpd.conf * LoadModule example_ipc_module modules/mod_example_ipc.so * <Location /example_ipc> * SetHandler example_ipc * </Location> * * Then restart Apache via * * $ /path/to/apache2/bin/apachectl restart * * The module allocates a counter in shared memory, which is incremented by the * request handler under a mutex. After installation, activate the handler by * hitting the URL configured above with ab at various concurrency levels to see * how mutex contention affects server performance. */ #include "apr.h" #include "apr_strings.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_protocol.h" #include "util_mutex.h" #include "ap_config.h" #if APR_HAVE_SYS_TYPES_H #include <sys/types.h> #endif #if APR_HAVE_UNISTD_H #include <unistd.h> #endif #define HTML_HEADER "<html>\n<head>\n<title>Mod_example_IPC Status Page " \ "\n\n\n

    Mod_example_IPC Status

    \n" #define HTML_FOOTER "\n\n" /* Number of microseconds to camp out on the mutex */ #define CAMPOUT 10 /* Maximum number of times we camp out before giving up */ #define MAXCAMP 10 /* Number of microseconds the handler sits on the lock once acquired. */ #define SLEEPYTIME 1000 apr_shm_t *exipc_shm; /* Pointer to shared memory block */ char *shmfilename; /* Shared memory file name, used on some systems */ apr_global_mutex_t *exipc_mutex; /* Lock around shared memory segment access */ static const char *exipc_mutex_type = "example-ipc-shm"; /* Data structure for shared memory block */ typedef struct exipc_data { apr_uint64_t counter; /* More fields if necessary */ } exipc_data; /* * Clean up the shared memory block. This function is registered as * cleanup function for the configuration pool, which gets called * on restarts. It assures that the new children will not talk to a stale * shared memory segment. */ static apr_status_t shm_cleanup_wrapper(void *unused) { if (exipc_shm) return apr_shm_destroy(exipc_shm); return OK; } /* * This routine is called in the parent; we must register our * mutex type before the config is processed so that users can * adjust the mutex settings using the Mutex directive. */ static int exipc_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { ap_mutex_register(pconf, exipc_mutex_type, NULL, APR_LOCK_DEFAULT, 0); return OK; } /* * This routine is called in the parent, so we'll set up the shared * memory segment and mutex here. */ static int exipc_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { apr_status_t rs; exipc_data *base; const char *tempdir; /* * Do nothing if we are not creating the final configuration. * The parent process gets initialized a couple of times as the * server starts up, and we don't want to create any more mutexes * and shared memory segments than we're actually going to use. */ if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) return OK; /* * The shared memory allocation routines take a file name. * Depending on system-specific implementation of these * routines, that file may or may not actually be created. We'd * like to store those files in the operating system's designated * temporary directory, which APR can point us to. */ rs = apr_temp_dir_get(&tempdir, pconf); if (APR_SUCCESS != rs) { ap_log_error(APLOG_MARK, APLOG_ERR, rs, s, APLOGNO(02992) "Failed to find temporary directory"); return HTTP_INTERNAL_SERVER_ERROR; } /* Create the shared memory segment */ /* * Create a unique filename using our pid. This information is * stashed in the global variable so the children inherit it. */ shmfilename = apr_psprintf(pconf, "%s/httpd_shm.%ld", tempdir, (long int)getpid()); /* Now create that segment */ rs = apr_shm_create(&exipc_shm, sizeof(exipc_data), (const char *) shmfilename, pconf); if (APR_SUCCESS != rs) { ap_log_error(APLOG_MARK, APLOG_ERR, rs, s, APLOGNO(02993) "Failed to create shared memory segment on file %s", shmfilename); return HTTP_INTERNAL_SERVER_ERROR; } /* Created it, now let's zero it out */ base = (exipc_data *)apr_shm_baseaddr_get(exipc_shm); base->counter = 0; /* Create global mutex */ rs = ap_global_mutex_create(&exipc_mutex, NULL, exipc_mutex_type, NULL, s, pconf, 0); if (APR_SUCCESS != rs) { return HTTP_INTERNAL_SERVER_ERROR; } /* * Destroy the shm segment when the configuration pool gets destroyed. This * happens on server restarts. The parent will then (above) allocate a new * shm segment that the new children will bind to. */ apr_pool_cleanup_register(pconf, NULL, shm_cleanup_wrapper, apr_pool_cleanup_null); return OK; } /* * This routine gets called when a child inits. We use it to attach * to the shared memory segment, and reinitialize the mutex. */ static void exipc_child_init(apr_pool_t *p, server_rec *s) { apr_status_t rs; /* * Re-open the mutex for the child. Note we're reusing * the mutex pointer global here. */ rs = apr_global_mutex_child_init(&exipc_mutex, apr_global_mutex_lockfile(exipc_mutex), p); if (APR_SUCCESS != rs) { ap_log_error(APLOG_MARK, APLOG_CRIT, rs, s, APLOGNO(02994) "Failed to reopen mutex %s in child", exipc_mutex_type); /* There's really nothing else we can do here, since This * routine doesn't return a status. If this ever goes wrong, * it will turn Apache into a fork bomb. Let's hope it never * will. */ exit(1); /* Ugly, but what else? */ } } /* The sample content handler */ static int exipc_handler(request_rec *r) { int gotlock = 0; int camped; apr_time_t startcamp; apr_int64_t timecamped; apr_status_t rs; exipc_data *base; if (strcmp(r->handler, "example_ipc")) { return DECLINED; } /* * The main function of the handler, aside from sending the * status page to the client, is to increment the counter in * the shared memory segment. This action needs to be mutexed * out using the global mutex. */ /* * First, acquire the lock. This code is a lot more involved than * it usually needs to be, because the process based trylock * routine is not implemented on unix platforms. I left it in to * show how it would work if trylock worked, and for situations * and platforms where trylock works. */ for (camped = 0, timecamped = 0; camped < MAXCAMP; camped++) { rs = apr_global_mutex_trylock(exipc_mutex); if (APR_STATUS_IS_EBUSY(rs)) { apr_sleep(CAMPOUT); } else if (APR_SUCCESS == rs) { gotlock = 1; break; /* Get out of the loop */ } else if (APR_STATUS_IS_ENOTIMPL(rs)) { /* If it's not implemented, just hang in the mutex. */ startcamp = apr_time_now(); rs = apr_global_mutex_lock(exipc_mutex); timecamped = (apr_int64_t) (apr_time_now() - startcamp); if (APR_SUCCESS == rs) { gotlock = 1; break; /* Out of the loop */ } else { /* Some error, log and bail */ ap_log_error(APLOG_MARK, APLOG_ERR, rs, r->server, APLOGNO(02995) "Child %ld failed to acquire lock", (long int)getpid()); break; /* Out of the loop without having the lock */ } } else { /* Some other error, log and bail */ ap_log_error(APLOG_MARK, APLOG_ERR, rs, r->server, APLOGNO(02996) "Child %ld failed to try and acquire lock", (long int)getpid()); break; /* Out of the loop without having the lock */ } /* * The only way to get to this point is if the trylock worked * and returned BUSY. So, bump the time and try again */ timecamped += CAMPOUT; ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, r->server, APLOGNO(03187) "Child %ld camping out on mutex for %" APR_INT64_T_FMT " microseconds", (long int) getpid(), timecamped); } /* Lock acquisition loop */ /* Sleep for a millisecond to make it a little harder for * httpd children to acquire the lock. */ apr_sleep(SLEEPYTIME); r->content_type = "text/html"; if (!r->header_only) { ap_rputs(HTML_HEADER, r); if (gotlock) { /* Increment the counter */ base = (exipc_data *)apr_shm_baseaddr_get(exipc_shm); base->counter++; /* Send a page with our pid and the new value of the counter. */ ap_rprintf(r, "

    Lock acquired after %ld microseoncds.

    \n", (long int) timecamped); ap_rputs("\n", r); ap_rprintf(r, "\n", (int) getpid()); ap_rprintf(r, "\n", (unsigned int)base->counter); ap_rputs("
    Child pid:%d
    Counter:%u
    \n", r); } else { /* * Send a page saying that we couldn't get the lock. Don't say * what the counter is, because without the lock the value could * race. */ ap_rprintf(r, "

    Child %d failed to acquire lock " "after camping out for %d microseconds.

    \n", (int) getpid(), (int) timecamped); } ap_rputs(HTML_FOOTER, r); } /* r->header_only */ /* Release the lock */ if (gotlock) rs = apr_global_mutex_unlock(exipc_mutex); /* Swallowing the result because what are we going to do with it at * this stage? */ return OK; } static void exipc_register_hooks(apr_pool_t *p) { ap_hook_pre_config(exipc_pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(exipc_post_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_child_init(exipc_child_init, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_handler(exipc_handler, NULL, NULL, APR_HOOK_MIDDLE); } /* Dispatch list for API hooks */ AP_DECLARE_MODULE(example_ipc) = { STANDARD20_MODULE_STUFF, NULL, /* create per-dir config structures */ NULL, /* merge per-dir config structures */ NULL, /* create per-server config structures */ NULL, /* merge per-server config structures */ NULL, /* table of config file commands */ exipc_register_hooks /* register hooks */ }; httpd-2.4.41/modules/examples/NWGNUexample_hooks0000644000000000000500000001040711540546347020135 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/server/mpm/netware \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = example_hooks # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Example Hook Callback Handler Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Example Hook Callback Handler Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/example_hooks.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_example_hooks.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ example_hooks_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/examples/mod_case_filter.c0000644000000000000500000001037212533331131020003 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "apr_buckets.h" #include "apr_general.h" #include "apr_lib.h" #include "util_filter.h" #include "http_request.h" #include static const char s_szCaseFilterName[] = "CaseFilter"; module AP_MODULE_DECLARE_DATA case_filter_module; typedef struct { int bEnabled; } CaseFilterConfig; static void *CaseFilterCreateServerConfig(apr_pool_t *p, server_rec *s) { CaseFilterConfig *pConfig = apr_pcalloc(p,sizeof *pConfig); pConfig->bEnabled = 0; return pConfig; } static void CaseFilterInsertFilter(request_rec *r) { CaseFilterConfig *pConfig = ap_get_module_config(r->server->module_config, &case_filter_module); if (!pConfig->bEnabled) return; ap_add_output_filter(s_szCaseFilterName, NULL, r, r->connection); } static apr_status_t CaseFilterOutFilter(ap_filter_t *f, apr_bucket_brigade *pbbIn) { request_rec *r = f->r; conn_rec *c = r->connection; apr_bucket *pbktIn; apr_bucket_brigade *pbbOut; pbbOut = apr_brigade_create(r->pool, c->bucket_alloc); for (pbktIn = APR_BRIGADE_FIRST(pbbIn); pbktIn != APR_BRIGADE_SENTINEL(pbbIn); pbktIn = APR_BUCKET_NEXT(pbktIn)) { const char *data; apr_size_t len; char *buf; apr_size_t n; apr_bucket *pbktOut; if (APR_BUCKET_IS_EOS(pbktIn)) { apr_bucket *pbktEOS = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(pbbOut, pbktEOS); continue; } /* read */ apr_bucket_read(pbktIn, &data, &len, APR_BLOCK_READ); /* write */ buf = apr_bucket_alloc(len, c->bucket_alloc); for (n=0 ; n < len ; ++n) { buf[n] = apr_toupper(data[n]); } pbktOut = apr_bucket_heap_create(buf, len, apr_bucket_free, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(pbbOut, pbktOut); } /* Q: is there any advantage to passing a brigade for each bucket? * A: obviously, it can cut down server resource consumption, if this * experimental module was fed a file of 4MB, it would be using 8MB for * the 'read' buckets and the 'write' buckets. * * Note it is more efficient to consume (destroy) each bucket as it's * processed above than to do a single cleanup down here. In any case, * don't let our caller pass the same buckets to us, twice; */ apr_brigade_cleanup(pbbIn); return ap_pass_brigade(f->next, pbbOut); } static const char *CaseFilterEnable(cmd_parms *cmd, void *dummy, int arg) { CaseFilterConfig *pConfig = ap_get_module_config(cmd->server->module_config, &case_filter_module); pConfig->bEnabled = arg; return NULL; } static const command_rec CaseFilterCmds[] = { AP_INIT_FLAG("CaseFilter", CaseFilterEnable, NULL, RSRC_CONF, "Run a case filter on this host"), { NULL } }; static void CaseFilterRegisterHooks(apr_pool_t *p) { ap_hook_insert_filter(CaseFilterInsertFilter, NULL, NULL, APR_HOOK_MIDDLE); ap_register_output_filter(s_szCaseFilterName, CaseFilterOutFilter, NULL, AP_FTYPE_RESOURCE); } AP_DECLARE_MODULE(case_filter) = { STANDARD20_MODULE_STUFF, NULL, NULL, CaseFilterCreateServerConfig, NULL, CaseFilterCmds, CaseFilterRegisterHooks }; httpd-2.4.41/modules/examples/mod_case_filter_in.dsp0000644000000000000500000001124410720056417021043 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_case_filter_in" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_case_filter_in - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_case_filter_in.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For case_filter_in: !MESSAGE !MESSAGE NMAKE /f "mod_case_filter_in.mak" CFG="mod_case_filter_in - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_case_filter_in - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_case_filter_in - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_case_filter_in - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_case_filter_in_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_case_filter_in.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_case_filter_in.so" /d LONG_NAME="case_filter_in_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_case_filter_in.so" /base:@..\..\os\win32\BaseAddr.ref,mod_case_filter_in.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_case_filter_in.so" /base:@..\..\os\win32\BaseAddr.ref,mod_case_filter_in.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_case_filter_in.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_case_filter_in - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_case_filter_in_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_case_filter_in.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_case_filter_in.so" /d LONG_NAME="case_filter_in_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_case_filter_in.so" /base:@..\..\os\win32\BaseAddr.ref,mod_case_filter_in.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_case_filter_in.so" /base:@..\..\os\win32\BaseAddr.ref,mod_case_filter_in.so # Begin Special Build Tool TargetPath=.\Debug\mod_case_filter_in.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_case_filter_in - Win32 Release" # Name "mod_case_filter_in - Win32 Debug" # Begin Source File SOURCE=.\mod_case_filter_in.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/examples/mod_example_hooks.dep0000644000000000000500000000426612674411515020727 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_example_hooks.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_example_hooks.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\mpm_common.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/examples/NWGNUexample_ipc0000644000000000000500000001037511540546347017571 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/server/mpm/netware \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = example_ipc # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Example IPC Callback Handler Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Example IPC Callback Handler Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/example_ipc.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_example_ipc.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ example_ipc_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/examples/mod_example_hooks.dsp0000644000000000000500000001117710720355073020740 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_example_hooks" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_example_hooks - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_example_hooks.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_example_hooks.mak" CFG="mod_example_hooks - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_example_hooks - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_example_hooks - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_example_hooks - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_example_hooks_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_example_hooks.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_example_hooks.so" /d LONG_NAME="example_hooks_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_example_hooks.so" /base:@..\..\os\win32\BaseAddr.ref,mod_example_hooks.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_example_hooks.so" /base:@..\..\os\win32\BaseAddr.ref,mod_example_hooks.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_example_hooks.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_example_hooks - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_example_hooks_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_example_hooks.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_example_hooks.so" /d LONG_NAME="example_hooks_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_example_hooks.so" /base:@..\..\os\win32\BaseAddr.ref,mod_example_hooks.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_example_hooks.so" /base:@..\..\os\win32\BaseAddr.ref,mod_example_hooks.so # Begin Special Build Tool TargetPath=.\Debug\mod_example_hooks.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_example_hooks - Win32 Release" # Name "mod_example_hooks - Win32 Debug" # Begin Source File SOURCE=.\mod_example_hooks.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/examples/NWGNUmakefile0000644000000000000500000001122611657403725017055 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # # If there is only one element to build it needs to be included twice # in the below target list. # Normally if there is only one element to be built within a # directory, the makefile for the single element would be called NWGNUmakefile. # But if there are multiples, the parent NWGNUmakefile must reference more # than one submakefile. Because the experimental directory might vary in the # number of submakefiles, but for the moment only contains one, we reference # it twice to allow it parent NWGNUmakefile to work properly. If another # submakefile is added, the extra reference to the first NLM should be removed. TARGET_nlm = \ $(OBJDIR)/example_hooks.nlm \ $(OBJDIR)/example_ipc.nlm \ $(OBJDIR)/case_flt.nlm \ $(OBJDIR)/case_flt_in.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/examples/config.m40000644000000000000500000000055010720056417016233 0ustar rootsrc APACHE_MODPATH_INIT(examples) APACHE_MODULE(example_hooks, Example hook callback handler module, , , no) APACHE_MODULE(case_filter, Example uppercase conversion filter, , , no) APACHE_MODULE(case_filter_in, Example uppercase conversion input filter, , , no) APACHE_MODULE(example_ipc, Example of shared memory and mutex usage, , , no) APACHE_MODPATH_FINISH httpd-2.4.41/modules/examples/mod_case_filter.dep0000644000000000000500000000317212674411515020344 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_case_filter.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_case_filter.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/examples/mod_case_filter_in.dep0000644000000000000500000000320012674411515021022 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_case_filter_in.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_case_filter_in.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_request.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/examples/mod_example_ipc.mak0000644000000000000500000002426112701473373020355 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_example_ipc.dsp !IF "$(CFG)" == "" CFG=mod_example_ipc - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_example_ipc - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_example_ipc - Win32 Release" && "$(CFG)" != "mod_example_ipc - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_example_ipc.mak" CFG="mod_example_ipc - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_example_ipc - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_example_ipc - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_example_ipc - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_example_ipc.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_example_ipc.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_example_ipc.obj" -@erase "$(INTDIR)\mod_example_ipc.res" -@erase "$(INTDIR)\mod_example_ipc_src.idb" -@erase "$(INTDIR)\mod_example_ipc_src.pdb" -@erase "$(OUTDIR)\mod_example_ipc.exp" -@erase "$(OUTDIR)\mod_example_ipc.lib" -@erase "$(OUTDIR)\mod_example_ipc.pdb" -@erase "$(OUTDIR)\mod_example_ipc.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_example_ipc_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_example_ipc.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_example_ipc.so" /d LONG_NAME="example_ipc_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_example_ipc.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_example_ipc.pdb" /debug /out:"$(OUTDIR)\mod_example_ipc.so" /implib:"$(OUTDIR)\mod_example_ipc.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_example_ipc.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_example_ipc.obj" \ "$(INTDIR)\mod_example_ipc.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_example_ipc.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_example_ipc.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_example_ipc.so" if exist .\Release\mod_example_ipc.so.manifest mt.exe -manifest .\Release\mod_example_ipc.so.manifest -outputresource:.\Release\mod_example_ipc.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_example_ipc - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_example_ipc.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_example_ipc.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_example_ipc.obj" -@erase "$(INTDIR)\mod_example_ipc.res" -@erase "$(INTDIR)\mod_example_ipc_src.idb" -@erase "$(INTDIR)\mod_example_ipc_src.pdb" -@erase "$(OUTDIR)\mod_example_ipc.exp" -@erase "$(OUTDIR)\mod_example_ipc.lib" -@erase "$(OUTDIR)\mod_example_ipc.pdb" -@erase "$(OUTDIR)\mod_example_ipc.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_example_ipc_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_example_ipc.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_example_ipc.so" /d LONG_NAME="example_ipc_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_example_ipc.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_example_ipc.pdb" /debug /out:"$(OUTDIR)\mod_example_ipc.so" /implib:"$(OUTDIR)\mod_example_ipc.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_example_ipc.so LINK32_OBJS= \ "$(INTDIR)\mod_example_ipc.obj" \ "$(INTDIR)\mod_example_ipc.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_example_ipc.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_example_ipc.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_example_ipc.so" if exist .\Debug\mod_example_ipc.so.manifest mt.exe -manifest .\Debug\mod_example_ipc.so.manifest -outputresource:.\Debug\mod_example_ipc.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_example_ipc.dep") !INCLUDE "mod_example_ipc.dep" !ELSE !MESSAGE Warning: cannot find "mod_example_ipc.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_example_ipc - Win32 Release" || "$(CFG)" == "mod_example_ipc - Win32 Debug" !IF "$(CFG)" == "mod_example_ipc - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\examples" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\examples" !ELSEIF "$(CFG)" == "mod_example_ipc - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\examples" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\examples" !ENDIF !IF "$(CFG)" == "mod_example_ipc - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\examples" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\examples" !ELSEIF "$(CFG)" == "mod_example_ipc - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\examples" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\examples" !ENDIF !IF "$(CFG)" == "mod_example_ipc - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\examples" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\examples" !ELSEIF "$(CFG)" == "mod_example_ipc - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\examples" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\examples" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_example_ipc - Win32 Release" "$(INTDIR)\mod_example_ipc.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_example_ipc.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_example_ipc.so" /d LONG_NAME="example_ipc_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_example_ipc - Win32 Debug" "$(INTDIR)\mod_example_ipc.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_example_ipc.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_example_ipc.so" /d LONG_NAME="example_ipc_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_example_ipc.c "$(INTDIR)\mod_example_ipc.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/examples/mod_example_hooks.c0000644000000000000500000016064212656470644020412 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * Apache example_hooks module. Provide demonstrations of how modules do things. * It is not meant to be used in a production server. Since it participates * in all of the processing phases, it could conceivable interfere with * the proper operation of other modules -- particularly the ones related * to security. * * In the interest of brevity, all functions and structures internal to * this module, but which may have counterparts in *real* modules, are * prefixed with 'x_' instead of 'example_'. * * To use mod_example_hooks, configure the Apache build with * --enable-example-hooks and compile. Set up a block in your * configuration file like so: * * * SetHandler example-hooks-handler * * * When you look at that location on your server, you will see a backtrace of * the callbacks that have been invoked up to that point. See the ErrorLog for * more information on code paths that touch mod_example_hooks. * * IMPORTANT NOTES * =============== * * Do NOT use this module on a production server. It attaches itself to every * phase of the server runtime operations including startup, shutdown and * request processing, and produces copious amounts of logging data. This will * negatively affect server performance. * * Do NOT use mod_example_hooks as the basis for your own code. This module * implements every callback hook offered by the Apache core, and your * module will almost certainly not have to implement this much. If you * want a simple module skeleton to start development, use apxs -g. * * XXX TO DO XXX * ============= * * * Enable HTML backtrace entries for more callbacks that are not directly * associated with a request * * Make sure every callback that posts an HTML backtrace entry does so in the * right category, so nothing gets overwritten * * Implement some logic to show what happens in the parent, and what in the * child(ren) */ #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_main.h" #include "http_protocol.h" #include "http_request.h" #include "util_script.h" #include "http_connection.h" #ifdef HAVE_UNIX_SUEXEC #include "unixd.h" #endif #include "scoreboard.h" #include "mpm_common.h" #include "apr_strings.h" #include /*--------------------------------------------------------------------------*/ /* */ /* Data declarations. */ /* */ /* Here are the static cells and structure declarations private to our */ /* module. */ /* */ /*--------------------------------------------------------------------------*/ /* * Sample configuration record. Used for both per-directory and per-server * configuration data. * * It's perfectly reasonable to have two different structures for the two * different environments. The same command handlers will be called for * both, though, so the handlers need to be able to tell them apart. One * possibility is for both structures to start with an int which is 0 for * one and 1 for the other. * * Note that while the per-directory and per-server configuration records are * available to most of the module handlers, they should be treated as * READ-ONLY by all except the command and merge handlers. Sometimes handlers * are handed a record that applies to the current location by implication or * inheritance, and modifying it will change the rules for other locations. */ typedef struct x_cfg { int cmode; /* Environment to which record applies * (directory, server, or combination). */ #define CONFIG_MODE_SERVER 1 #define CONFIG_MODE_DIRECTORY 2 #define CONFIG_MODE_COMBO 3 /* Shouldn't ever happen. */ int local; /* Boolean: "Example" directive declared * here? */ int congenital; /* Boolean: did we inherit an "Example"? */ char *trace; /* Pointer to trace string. */ char *loc; /* Location to which this record applies. */ } x_cfg; /* * String pointer to hold the startup trace. No harm working with a global until * the server is (may be) multi-threaded. */ static const char *trace = NULL; /* * Declare ourselves so the configuration routines can find and know us. * We'll fill it in at the end of the module. */ module AP_MODULE_DECLARE_DATA example_hooks_module; /*--------------------------------------------------------------------------*/ /* */ /* The following pseudo-prototype declarations illustrate the parameters */ /* passed to command handlers for the different types of directive */ /* syntax. If an argument was specified in the directive definition */ /* (look for "command_rec" below), it's available to the command handler */ /* via the (void *) info field in the cmd_parms argument passed to the */ /* handler (cmd->info for the examples below). */ /* */ /*--------------------------------------------------------------------------*/ /* * Command handler for a NO_ARGS directive. Declared in the command_rec * list with * AP_INIT_NO_ARGS("directive", function, mconfig, where, help) * * static const char *handle_NO_ARGS(cmd_parms *cmd, void *mconfig); */ /* * Command handler for a RAW_ARGS directive. The "args" argument is the text * of the commandline following the directive itself. Declared in the * command_rec list with * AP_INIT_RAW_ARGS("directive", function, mconfig, where, help) * * static const char *handle_RAW_ARGS(cmd_parms *cmd, void *mconfig, * const char *args); */ /* * Command handler for a FLAG directive. The single parameter is passed in * "bool", which is either zero or not for Off or On respectively. * Declared in the command_rec list with * AP_INIT_FLAG("directive", function, mconfig, where, help) * * static const char *handle_FLAG(cmd_parms *cmd, void *mconfig, int bool); */ /* * Command handler for a TAKE1 directive. The single parameter is passed in * "word1". Declared in the command_rec list with * AP_INIT_TAKE1("directive", function, mconfig, where, help) * * static const char *handle_TAKE1(cmd_parms *cmd, void *mconfig, * char *word1); */ /* * Command handler for a TAKE2 directive. TAKE2 commands must always have * exactly two arguments. Declared in the command_rec list with * AP_INIT_TAKE2("directive", function, mconfig, where, help) * * static const char *handle_TAKE2(cmd_parms *cmd, void *mconfig, * char *word1, char *word2); */ /* * Command handler for a TAKE3 directive. Like TAKE2, these must have exactly * three arguments, or the parser complains and doesn't bother calling us. * Declared in the command_rec list with * AP_INIT_TAKE3("directive", function, mconfig, where, help) * * static const char *handle_TAKE3(cmd_parms *cmd, void *mconfig, * char *word1, char *word2, char *word3); */ /* * Command handler for a TAKE12 directive. These can take either one or two * arguments. * - word2 is a NULL pointer if no second argument was specified. * Declared in the command_rec list with * AP_INIT_TAKE12("directive", function, mconfig, where, help) * * static const char *handle_TAKE12(cmd_parms *cmd, void *mconfig, * char *word1, char *word2); */ /* * Command handler for a TAKE123 directive. A TAKE123 directive can be given, * as might be expected, one, two, or three arguments. * - word2 is a NULL pointer if no second argument was specified. * - word3 is a NULL pointer if no third argument was specified. * Declared in the command_rec list with * AP_INIT_TAKE123("directive", function, mconfig, where, help) * * static const char *handle_TAKE123(cmd_parms *cmd, void *mconfig, * char *word1, char *word2, char *word3); */ /* * Command handler for a TAKE13 directive. Either one or three arguments are * permitted - no two-parameters-only syntax is allowed. * - word2 and word3 are NULL pointers if only one argument was specified. * Declared in the command_rec list with * AP_INIT_TAKE13("directive", function, mconfig, where, help) * * static const char *handle_TAKE13(cmd_parms *cmd, void *mconfig, * char *word1, char *word2, char *word3); */ /* * Command handler for a TAKE23 directive. At least two and as many as three * arguments must be specified. * - word3 is a NULL pointer if no third argument was specified. * Declared in the command_rec list with * AP_INIT_TAKE23("directive", function, mconfig, where, help) * * static const char *handle_TAKE23(cmd_parms *cmd, void *mconfig, * char *word1, char *word2, char *word3); */ /* * Command handler for a ITERATE directive. * - Handler is called once for each of n arguments given to the directive. * - word1 points to each argument in turn. * Declared in the command_rec list with * AP_INIT_ITERATE("directive", function, mconfig, where, help) * * static const char *handle_ITERATE(cmd_parms *cmd, void *mconfig, * char *word1); */ /* * Command handler for a ITERATE2 directive. * - Handler is called once for each of the second and subsequent arguments * given to the directive. * - word1 is the same for each call for a particular directive instance (the * first argument). * - word2 points to each of the second and subsequent arguments in turn. * Declared in the command_rec list with * AP_INIT_ITERATE2("directive", function, mconfig, where, help) * * static const char *handle_ITERATE2(cmd_parms *cmd, void *mconfig, * char *word1, char *word2); */ /*--------------------------------------------------------------------------*/ /* */ /* These routines are strictly internal to this module, and support its */ /* operation. They are not referenced by any external portion of the */ /* server. */ /* */ /*--------------------------------------------------------------------------*/ /* * Locate our directory configuration record for the current request. */ static x_cfg *our_dconfig(const request_rec *r) { return (x_cfg *) ap_get_module_config(r->per_dir_config, &example_hooks_module); } /* * The following utility routines are not used in the module. Don't * compile them so -Wall doesn't complain about functions that are * defined but not used. */ #if 0 /* * Locate our server configuration record for the specified server. */ static x_cfg *our_sconfig(const server_rec *s) { return (x_cfg *) ap_get_module_config(s->module_config, &example_hooks_module); } /* * Likewise for our configuration record for the specified request. */ static x_cfg *our_rconfig(const request_rec *r) { return (x_cfg *) ap_get_module_config(r->request_config, &example_hooks_module); } #endif /* if 0 */ /* * Likewise for our configuration record for a connection. */ static x_cfg *our_cconfig(const conn_rec *c) { return (x_cfg *) ap_get_module_config(c->conn_config, &example_hooks_module); } /* * You *could* change the following if you wanted to see the calling * sequence reported in the server's error_log, but beware - almost all of * these co-routines are called for every single request, and the impact * on the size (and readability) of the error_log is considerable. */ #ifndef EXAMPLE_LOG_EACH #define EXAMPLE_LOG_EACH 0 #endif #if EXAMPLE_LOG_EACH static void example_log_each(apr_pool_t *p, server_rec *s, const char *note) { if (s != NULL) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02991) "mod_example_hooks: %s", note); } else { apr_file_t *out = NULL; apr_file_open_stderr(&out, p); apr_file_printf(out, "mod_example_hooks traced in non-loggable " "context: %s\n", note); } } #endif /* * This utility routine traces the hooks called when the server starts up. * It leaves a trace in a global variable, so it should not be called from * a hook handler that runs in a multi-threaded situation. */ static void trace_startup(apr_pool_t *p, server_rec *s, x_cfg *mconfig, const char *note) { const char *sofar; char *where, *addon; #if EXAMPLE_LOG_EACH example_log_each(p, s, note); #endif /* * If we weren't passed a configuration record, we can't figure out to * what location this call applies. This only happens for co-routines * that don't operate in a particular directory or server context. If we * got a valid record, extract the location (directory or server) to which * it applies. */ where = (mconfig != NULL) ? mconfig->loc : "nowhere"; where = (where != NULL) ? where : ""; addon = apr_pstrcat(p, "
  • \n" "
    \n" "
    ", note, "
    \n" "
    [", where, "]
    \n" "
    \n" "
  • \n", NULL); /* * Make sure that we start with a valid string, even if we have never been * called. */ sofar = (trace == NULL) ? "" : trace; trace = apr_pstrcat(p, sofar, addon, NULL); } /* * This utility route traces the hooks called as a request is handled. * It takes the current request as argument */ #define TRACE_NOTE "example-hooks-trace" static void trace_request(const request_rec *r, const char *note) { const char *trace_copy, *sofar; char *addon, *where; x_cfg *cfg; #if EXAMPLE_LOG_EACH example_log_each(r->pool, r->server, note); #endif if ((sofar = apr_table_get(r->notes, TRACE_NOTE)) == NULL) { sofar = ""; } cfg = our_dconfig(r); where = (cfg != NULL) ? cfg->loc : "nowhere"; where = (where != NULL) ? where : ""; addon = apr_pstrcat(r->pool, "
  • \n" "
    \n" "
    ", note, "
    \n" "
    [", where, "]
    \n" "
    \n" "
  • \n", NULL); trace_copy = apr_pstrcat(r->pool, sofar, addon, NULL); apr_table_set(r->notes, TRACE_NOTE, trace_copy); } /* * This utility routine traces the hooks called while processing a * Connection. Its trace is kept in the pool notes of the pool associated * with the Connection. */ /* * Key to get and set the userdata. We should be able to get away * with a constant key, since in prefork mode the process will have * the connection and its pool to itself entirely, and in * multi-threaded mode each connection will have its own pool. */ #define CONN_NOTE "example-hooks-connection" static void trace_connection(conn_rec *c, const char *note) { const char *trace_copy, *sofar; char *addon, *where; void *data; x_cfg *cfg; #if EXAMPLE_LOG_EACH example_log_each(c->pool, c->base_server, note); #endif cfg = our_cconfig(c); where = (cfg != NULL) ? cfg->loc : "nowhere"; where = (where != NULL) ? where : ""; addon = apr_pstrcat(c->pool, "
  • \n" "
    \n" "
    ", note, "
    \n" "
    [", where, "]
    \n" "
    \n" "
  • \n", NULL); /* Find existing notes and copy */ apr_pool_userdata_get(&data, CONN_NOTE, c->pool); sofar = (data == NULL) ? "" : (const char *) data; /* Tack addon onto copy */ trace_copy = apr_pstrcat(c->pool, sofar, addon, NULL); /* * Stash copy back into pool notes. This call has a cleanup * parameter, but we're not using it because the string has been * allocated from that same pool. There is also an unused return * value: we have nowhere to communicate any error that might * occur, and will have to check for the existence of this data on * the other end. */ apr_pool_userdata_set((const void *) trace_copy, CONN_NOTE, NULL, c->pool); } static void trace_nocontext(apr_pool_t *p, const char *file, int line, const char *note) { /* * Since we have no request or connection to trace, or any idea * from where this routine was called, there's really not much we * can do. If we are not logging everything by way of the * EXAMPLE_LOG_EACH constant, do nothing in this routine. */ #ifdef EXAMPLE_LOG_EACH ap_log_perror(file, line, APLOG_MODULE_INDEX, APLOG_NOTICE, 0, p, "%s", note); #endif } /*--------------------------------------------------------------------------*/ /* We prototyped the various syntax for command handlers (routines that */ /* are called when the configuration parser detects a directive declared */ /* by our module) earlier. Now we actually declare a "real" routine that */ /* will be invoked by the parser when our "real" directive is */ /* encountered. */ /* */ /* If a command handler encounters a problem processing the directive, it */ /* signals this fact by returning a non-NULL pointer to a string */ /* describing the problem. */ /* */ /* The magic return value DECLINE_CMD is used to deal with directives */ /* that might be declared by multiple modules. If the command handler */ /* returns NULL, the directive was processed; if it returns DECLINE_CMD, */ /* the next module (if any) that declares the directive is given a chance */ /* at it. If it returns any other value, it's treated as the text of an */ /* error message. */ /*--------------------------------------------------------------------------*/ /* * Command handler for the NO_ARGS "Example" directive. All we do is mark the * call in the trace log, and flag the applicability of the directive to the * current location in that location's configuration record. */ static const char *cmd_example(cmd_parms *cmd, void *mconfig) { x_cfg *cfg = (x_cfg *) mconfig; /* * "Example Wuz Here" */ cfg->local = 1; trace_startup(cmd->pool, cmd->server, cfg, "cmd_example()"); return NULL; } /* * This function gets called to create a per-directory configuration * record. This will be called for the "default" server environment, and for * each directory for which the parser finds any of our directives applicable. * If a directory doesn't have any of our directives involved (i.e., they * aren't in the .htaccess file, or a , , or related * block), this routine will *not* be called - the configuration for the * closest ancestor is used. * * The return value is a pointer to the created module-specific * structure. */ static void *x_create_dir_config(apr_pool_t *p, char *dirspec) { x_cfg *cfg; char *dname = dirspec; char *note; /* * Allocate the space for our record from the pool supplied. */ cfg = (x_cfg *) apr_pcalloc(p, sizeof(x_cfg)); /* * Now fill in the defaults. If there are any `parent' configuration * records, they'll get merged as part of a separate callback. */ cfg->local = 0; cfg->congenital = 0; cfg->cmode = CONFIG_MODE_DIRECTORY; /* * Finally, add our trace to the callback list. */ dname = (dname != NULL) ? dname : ""; cfg->loc = apr_pstrcat(p, "DIR(", dname, ")", NULL); note = apr_psprintf(p, "x_create_dir_config(p == %pp, dirspec == %s)", (void*) p, dirspec); trace_startup(p, NULL, cfg, note); return (void *) cfg; } /* * This function gets called to merge two per-directory configuration * records. This is typically done to cope with things like .htaccess files * or directives for directories that are beneath one for which a * configuration record was already created. The routine has the * responsibility of creating a new record and merging the contents of the * other two into it appropriately. If the module doesn't declare a merge * routine, the record for the closest ancestor location (that has one) is * used exclusively. * * The routine MUST NOT modify any of its arguments! * * The return value is a pointer to the created module-specific structure * containing the merged values. */ static void *x_merge_dir_config(apr_pool_t *p, void *parent_conf, void *newloc_conf) { x_cfg *merged_config = (x_cfg *) apr_pcalloc(p, sizeof(x_cfg)); x_cfg *pconf = (x_cfg *) parent_conf; x_cfg *nconf = (x_cfg *) newloc_conf; char *note; /* * Some things get copied directly from the more-specific record, rather * than getting merged. */ merged_config->local = nconf->local; merged_config->loc = apr_pstrdup(p, nconf->loc); /* * Others, like the setting of the `congenital' flag, get ORed in. The * setting of that particular flag, for instance, is TRUE if it was ever * true anywhere in the upstream configuration. */ merged_config->congenital = (pconf->congenital | pconf->local); /* * If we're merging records for two different types of environment (server * and directory), mark the new record appropriately. Otherwise, inherit * the current value. */ merged_config->cmode = (pconf->cmode == nconf->cmode) ? pconf->cmode : CONFIG_MODE_COMBO; /* * Now just record our being called in the trace list. Include the * locations we were asked to merge. */ note = apr_psprintf(p, "x_merge_dir_config(p == %pp, parent_conf == " "%pp, newloc_conf == %pp)", (void*) p, (void*) parent_conf, (void*) newloc_conf); trace_startup(p, NULL, merged_config, note); return (void *) merged_config; } /* * This function gets called to create a per-server configuration * record. It will always be called for the "default" server. * * The return value is a pointer to the created module-specific * structure. */ static void *x_create_server_config(apr_pool_t *p, server_rec *s) { x_cfg *cfg; char *sname = s->server_hostname; /* * As with the x_create_dir_config() reoutine, we allocate and fill * in an empty record. */ cfg = (x_cfg *) apr_pcalloc(p, sizeof(x_cfg)); cfg->local = 0; cfg->congenital = 0; cfg->cmode = CONFIG_MODE_SERVER; /* * Note that we were called in the trace list. */ sname = (sname != NULL) ? sname : ""; cfg->loc = apr_pstrcat(p, "SVR(", sname, ")", NULL); trace_startup(p, s, cfg, "x_create_server_config()"); return (void *) cfg; } /* * This function gets called to merge two per-server configuration * records. This is typically done to cope with things like virtual hosts and * the default server configuration The routine has the responsibility of * creating a new record and merging the contents of the other two into it * appropriately. If the module doesn't declare a merge routine, the more * specific existing record is used exclusively. * * The routine MUST NOT modify any of its arguments! * * The return value is a pointer to the created module-specific structure * containing the merged values. */ static void *x_merge_server_config(apr_pool_t *p, void *server1_conf, void *server2_conf) { x_cfg *merged_config = (x_cfg *) apr_pcalloc(p, sizeof(x_cfg)); x_cfg *s1conf = (x_cfg *) server1_conf; x_cfg *s2conf = (x_cfg *) server2_conf; char *note; /* * Our inheritance rules are our own, and part of our module's semantics. * Basically, just note whence we came. */ merged_config->cmode = (s1conf->cmode == s2conf->cmode) ? s1conf->cmode : CONFIG_MODE_COMBO; merged_config->local = s2conf->local; merged_config->congenital = (s1conf->congenital | s1conf->local); merged_config->loc = apr_pstrdup(p, s2conf->loc); /* * Trace our call, including what we were asked to merge. */ note = apr_pstrcat(p, "x_merge_server_config(\"", s1conf->loc, "\",\"", s2conf->loc, "\")", NULL); trace_startup(p, NULL, merged_config, note); return (void *) merged_config; } /*--------------------------------------------------------------------------* * * * Now let's declare routines for each of the callback hooks in order. * * (That's the order in which they're listed in the callback list, *not * * the order in which the server calls them! See the command_rec * * declaration near the bottom of this file.) Note that these may be * * called for situations that don't relate primarily to our function - in * * other words, the fixup handler shouldn't assume that the request has * * to do with "example_hooks" stuff. * * * * With the exception of the content handler, all of our routines will be * * called for each request, unless an earlier handler from another module * * aborted the sequence. * * * * There are three types of hooks (see include/ap_config.h): * * * * VOID : No return code, run all handlers declared by any module * * RUN_FIRST : Run all handlers until one returns something other * * than DECLINED. Hook runner result is result of last callback * * RUN_ALL : Run all handlers until one returns something other than OK * * or DECLINED. The hook runner returns that other value. If * * all hooks run, the hook runner returns OK. * * * * Handlers that are declared as "int" can return the following: * * * * OK Handler accepted the request and did its thing with it. * * DECLINED Handler took no action. * * HTTP_mumble Handler looked at request and found it wanting. * * * * See include/httpd.h for a list of HTTP_mumble status codes. Handlers * * that are not declared as int return a valid pointer, or NULL if they * * DECLINE to handle their phase for that specific request. Exceptions, if * * any, are noted with each routine. * *--------------------------------------------------------------------------*/ /* * This routine is called before the server processes the configuration * files. There is no return value. */ static int x_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { /* * Log the call and exit. */ trace_startup(ptemp, NULL, NULL, "x_pre_config()"); return OK; } /* * This routine is called after the server processes the configuration * files. At this point the module may review and adjust its configuration * settings in relation to one another and report any problems. On restart, * this routine will be called twice, once in the startup process (which * exits shortly after this phase) and once in the running server process. * * The return value is OK, DECLINED, or HTTP_mumble. If we return OK, the * server will still call any remaining modules with an handler for this * phase. */ static int x_check_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { /* * Log the call and exit. */ trace_startup(ptemp, s, NULL, "x_check_config()"); return OK; } /* * This routine is called when the -t command-line option is supplied. * It executes only once, in the startup process, after the check_config * phase and just before the process exits. At this point the module * may output any information useful in configuration testing. * * This is a VOID hook: all defined handlers get called. */ static void x_test_config(apr_pool_t *pconf, server_rec *s) { apr_file_t *out = NULL; apr_file_open_stderr(&out, pconf); apr_file_printf(out, "Example module configuration test routine\n"); trace_startup(pconf, s, NULL, "x_test_config()"); } /* * This routine is called to perform any module-specific log file * openings. It is invoked just before the post_config phase * * The return value is OK, DECLINED, or HTTP_mumble. If we return OK, the * server will still call any remaining modules with an handler for this * phase. */ static int x_open_logs(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { /* * Log the call and exit. */ trace_startup(ptemp, s, NULL, "x_open_logs()"); return OK; } /* * This routine is called after the server finishes the configuration * process. At this point the module may review and adjust its configuration * settings in relation to one another and report any problems. On restart, * this routine will be called only once, in the running server process. * * The return value is OK, DECLINED, or HTTP_mumble. If we return OK, the * server will still call any remaining modules with an handler for this * phase. */ static int x_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { /* * Log the call and exit. */ trace_startup(ptemp, s, NULL, "x_post_config()"); return OK; } /* * All our process-death routine does is add its trace to the log. */ static apr_status_t x_child_exit(void *data) { char *note; server_rec *s = data; char *sname = s->server_hostname; /* * The arbitrary text we add to our trace entry indicates for which server * we're being called. */ sname = (sname != NULL) ? sname : ""; note = apr_pstrcat(s->process->pool, "x_child_exit(", sname, ")", NULL); trace_startup(s->process->pool, s, NULL, note); return APR_SUCCESS; } /* * All our process initialiser does is add its trace to the log. * * This is a VOID hook: all defined handlers get called. */ static void x_child_init(apr_pool_t *p, server_rec *s) { char *note; char *sname = s->server_hostname; /* * The arbitrary text we add to our trace entry indicates for which server * we're being called. */ sname = (sname != NULL) ? sname : ""; note = apr_pstrcat(p, "x_child_init(", sname, ")", NULL); trace_startup(p, s, NULL, note); apr_pool_cleanup_register(p, s, x_child_exit, x_child_exit); } /* * The hook runner for ap_hook_http_scheme is aliased to ap_http_scheme(), * a routine that the core and other modules call when they need to know * the URL scheme for the request. For instance, mod_ssl returns "https" * if the server_rec associated with the request has SSL enabled. * * This hook was named 'ap_hook_http_method' in httpd 2.0. * * This is a RUN_FIRST hook: the first handler to return a non NULL * value aborts the handler chain. The http_core module inserts a * fallback handler (with APR_HOOK_REALLY_LAST preference) that returns * "http". */ static const char *x_http_scheme(const request_rec *r) { /* * Log the call and exit. */ trace_request(r, "x_http_scheme()"); /* We have no claims to make about the request scheme */ return NULL; } /* * The runner for this hook is aliased to ap_default_port(), which the * core and other modules call when they need to know the default port * for a particular server. This is used for instance to omit the * port number from a Redirect response Location header URL if the port * number is equal to the default port for the service (like 80 for http). * * This is a RUN_FIRST hook: the first handler to return a non-zero * value is the last one executed. The http_core module inserts a * fallback handler (with APR_HOOK_REALLY_LAST order specifier) that * returns 80. */ static apr_port_t x_default_port(const request_rec *r) { /* * Log the call and exit. */ trace_request(r, "x_default_port()"); return 0; } /* * This routine is called just before the handler gets invoked. It allows * a module to insert a previously defined filter into the filter chain. * * No filter has been defined by this module, so we just log the call * and exit. * * This is a VOID hook: all defined handlers get called. */ static void x_insert_filter(request_rec *r) { /* * Log the call and exit. */ trace_request(r, "x_insert_filter()"); } /* * This routine is called to insert a previously defined error filter into * the filter chain as the request is being processed. * * For the purpose of this example, we don't have a filter to insert, * so just add to the trace and exit. * * This is a VOID hook: all defined handlers get called. */ static void x_insert_error_filter(request_rec *r) { trace_request(r, "x_insert_error_filter()"); } /*--------------------------------------------------------------------------*/ /* */ /* Now we declare our content handlers, which are invoked when the server */ /* encounters a document which our module is supposed to have a chance to */ /* see. (See mod_mime's SetHandler and AddHandler directives, and the */ /* mod_info and mod_status examples, for more details.) */ /* */ /* Since content handlers are dumping data directly into the connection */ /* (using the r*() routines, such as rputs() and rprintf()) without */ /* intervention by other parts of the server, they need to make */ /* sure any accumulated HTTP headers are sent first. This is done by */ /* calling send_http_header(). Otherwise, no header will be sent at all, */ /* and the output sent to the client will actually be HTTP-uncompliant. */ /*--------------------------------------------------------------------------*/ /* * Sample content handler. All this does is display the call list that has * been built up so far. * * This routine gets called for every request, unless another handler earlier * in the callback chain has already handled the request. It is up to us to * test the request_rec->handler field and see whether we are meant to handle * this request. * * The content handler gets to write directly to the client using calls like * ap_rputs() and ap_rprintf() * * This is a RUN_FIRST hook. */ static int x_handler(request_rec *r) { x_cfg *dcfg; char *note; void *conn_data; apr_status_t status; dcfg = our_dconfig(r); /* * Add our trace to the log, and whether we get to write * content for this request. */ note = apr_pstrcat(r->pool, "x_handler(), handler is \"", r->handler, "\"", NULL); trace_request(r, note); /* If it's not for us, get out as soon as possible. */ if (strcmp(r->handler, "example-hooks-handler")) { return DECLINED; } /* * Set the Content-type header. Note that we do not actually have to send * the headers: this is done by the http core. */ ap_set_content_type(r, "text/html"); /* * If we're only supposed to send header information (HEAD request), we're * already there. */ if (r->header_only) { return OK; } /* * Now send our actual output. Since we tagged this as being * "text/html", we need to embed any HTML. */ ap_rputs(DOCTYPE_HTML_3_2, r); ap_rputs("\n", r); ap_rputs(" \n", r); ap_rputs(" mod_example_hooks Module Content-Handler Output\n", r); ap_rputs(" \n", r); ap_rputs(" \n", r); ap_rputs(" \n", r); ap_rputs("

    mod_example_hooks Module Content-Handler Output\n", r); ap_rputs("

    \n", r); ap_rputs("

    \n", r); ap_rprintf(r, " Apache HTTP Server version: \"%s\"\n", ap_get_server_banner()); ap_rputs("
    \n", r); ap_rprintf(r, " Server built: \"%s\"\n", ap_get_server_built()); ap_rputs("

    \n", r); ap_rputs("

    \n", r); ap_rputs(" The format for the callback trace is:\n", r); ap_rputs("

    \n", r); ap_rputs("
    \n", r); ap_rputs("
    n.<routine-name>", r); ap_rputs("(<routine-data>)\n", r); ap_rputs("
    \n", r); ap_rputs("
    [<applies-to>]\n", r); ap_rputs("
    \n", r); ap_rputs("
    \n", r); ap_rputs("

    \n", r); ap_rputs(" The <routine-data> is supplied by\n", r); ap_rputs(" the routine when it requests the trace,\n", r); ap_rputs(" and the <applies-to> is extracted\n", r); ap_rputs(" from the configuration record at the time of the trace.\n", r); ap_rputs(" SVR() indicates a server environment\n", r); ap_rputs(" (blank means the main or default server, otherwise it's\n", r); ap_rputs(" the name of the VirtualHost); DIR()\n", r); ap_rputs(" indicates a location in the URL or filesystem\n", r); ap_rputs(" namespace.\n", r); ap_rputs("

    \n", r); ap_rprintf(r, "

    Startup callbacks so far:

    \n
      \n%s
    \n", trace); ap_rputs("

    Connection-specific callbacks so far:

    \n", r); status = apr_pool_userdata_get(&conn_data, CONN_NOTE, r->connection->pool); if ((status == APR_SUCCESS) && conn_data) { ap_rprintf(r, "
      \n%s
    \n", (char *) conn_data); } else { ap_rputs("

    No connection-specific callback information was " "retrieved.

    \n", r); } ap_rputs("

    Request-specific callbacks so far:

    \n", r); ap_rprintf(r, "
      \n%s
    \n", apr_table_get(r->notes, TRACE_NOTE)); ap_rputs("

    Environment for this call:

    \n", r); ap_rputs("
      \n", r); ap_rprintf(r, "
    • Applies-to: %s\n
    • \n", dcfg->loc); ap_rprintf(r, "
    • \"Example\" directive declared here: %s\n
    • \n", (dcfg->local ? "YES" : "NO")); ap_rprintf(r, "
    • \"Example\" inherited: %s\n
    • \n", (dcfg->congenital ? "YES" : "NO")); ap_rputs("
    \n", r); ap_rputs(" \n", r); ap_rputs("\n", r); /* * We're all done, so cancel the timeout we set. Since this is probably * the end of the request we *could* assume this would be done during * post-processing - but it's possible that another handler might be * called and inherit our outstanding timer. Not good; to each its own. */ /* * We did what we wanted to do, so tell the rest of the server we * succeeded. */ return OK; } /* * The quick_handler hook presents modules with a very powerful opportunity to * serve their content in a very early request phase. Note that this handler * can not serve any requests from the file system because hooks like * map_to_storage have not run. The quick_handler hook also runs before any * authentication and access control. * * This hook is used by mod_cache to serve cached content. * * This is a RUN_FIRST hook. Return OK if you have served the request, * DECLINED if you want processing to continue, or a HTTP_* error code to stop * processing the request. */ static int x_quick_handler(request_rec *r, int lookup_uri) { /* * Log the call and exit. */ trace_request(r, "x_quick_handler()"); return DECLINED; } /* * This routine is called just after the server accepts the connection, * but before it is handed off to a protocol module to be served. The point * of this hook is to allow modules an opportunity to modify the connection * as soon as possible. The core server uses this phase to setup the * connection record based on the type of connection that is being used. * * This is a RUN_ALL hook. */ static int x_pre_connection(conn_rec *c, void *csd) { char *note; /* * Log the call and exit. */ note = apr_psprintf(c->pool, "x_pre_connection(c = %pp, p = %pp)", (void*) c, (void*) c->pool); trace_connection(c, note); return OK; } /* This routine is used to actually process the connection that was received. * Only protocol modules should implement this hook, as it gives them an * opportunity to replace the standard HTTP processing with processing for * some other protocol. Both echo and POP3 modules are available as * examples. * * This is a RUN_FIRST hook. */ static int x_process_connection(conn_rec *c) { trace_connection(c, "x_process_connection()"); return DECLINED; } /* * This routine is called after the request has been read but before any other * phases have been processed. This allows us to make decisions based upon * the input header fields. * * This is a HOOK_VOID hook. */ static void x_pre_read_request(request_rec *r, conn_rec *c) { /* * We don't actually *do* anything here, except note the fact that we were * called. */ trace_request(r, "x_pre_read_request()"); } /* * This routine is called after the request has been read but before any other * phases have been processed. This allows us to make decisions based upon * the input header fields. * * This is a RUN_ALL hook. */ static int x_post_read_request(request_rec *r) { /* * We don't actually *do* anything here, except note the fact that we were * called. */ trace_request(r, "x_post_read_request()"); return DECLINED; } /* * This routine gives our module an opportunity to translate the URI into an * actual filename. If we don't do anything special, the server's default * rules (Alias directives and the like) will continue to be followed. * * This is a RUN_FIRST hook. */ static int x_translate_name(request_rec *r) { /* * We don't actually *do* anything here, except note the fact that we were * called. */ trace_request(r, "x_translate_name()"); return DECLINED; } /* * This routine maps r->filename to a physical file on disk. Useful for * overriding default core behavior, including skipping mapping for * requests that are not file based. * * This is a RUN_FIRST hook. */ static int x_map_to_storage(request_rec *r) { /* * We don't actually *do* anything here, except note the fact that we were * called. */ trace_request(r, "x_map_to_storage()"); return DECLINED; } /* * this routine gives our module another chance to examine the request * headers and to take special action. This is the first phase whose * hooks' configuration directives can appear inside the * and similar sections, because at this stage the URI has been mapped * to the filename. For example this phase can be used to block evil * clients, while little resources were wasted on these. * * This is a RUN_ALL hook. */ static int x_header_parser(request_rec *r) { /* * We don't actually *do* anything here, except note the fact that we were * called. */ trace_request(r, "x_header_parser()"); return DECLINED; } /* * This routine is called to check for any module-specific restrictions placed * upon the requested resource. (See the mod_access_compat module for an * example.) * * This is a RUN_ALL hook. The first handler to return a status other than OK * or DECLINED (for instance, HTTP_FORBIDDEN) aborts the callback chain. */ static int x_check_access(request_rec *r) { trace_request(r, "x_check_access()"); return DECLINED; } /* * This routine is called to check the authentication information sent with * the request (such as looking up the user in a database and verifying that * the [encrypted] password sent matches the one in the database). * * This is a RUN_FIRST hook. The return value is OK, DECLINED, or some * HTTP_mumble error (typically HTTP_UNAUTHORIZED). */ static int x_check_authn(request_rec *r) { /* * Don't do anything except log the call. */ trace_request(r, "x_check_authn()"); return DECLINED; } /* * This routine is called to check to see if the resource being requested * requires authorisation. * * This is a RUN_FIRST hook. The return value is OK, DECLINED, or * HTTP_mumble. If we return OK, no other modules are called during this * phase. * * If *all* modules return DECLINED, the request is aborted with a server * error. */ static int x_check_authz(request_rec *r) { /* * Log the call and return OK, or access will be denied (even though we * didn't actually do anything). */ trace_request(r, "x_check_authz()"); return DECLINED; } /* * This routine is called to determine and/or set the various document type * information bits, like Content-type (via r->content_type), language, et * cetera. * * This is a RUN_FIRST hook. */ static int x_type_checker(request_rec *r) { /* * Log the call, but don't do anything else - and report truthfully that * we didn't do anything. */ trace_request(r, "x_type_checker()"); return DECLINED; } /* * This routine is called to perform any module-specific fixing of header * fields, et cetera. It is invoked just before any content-handler. * * This is a RUN_ALL HOOK. */ static int x_fixups(request_rec *r) { /* * Log the call and exit. */ trace_request(r, "x_fixups()"); return DECLINED; } /* * This routine is called to perform any module-specific logging activities * over and above the normal server things. * * This is a RUN_ALL hook. */ static int x_log_transaction(request_rec *r) { trace_request(r, "x_log_transaction()"); return DECLINED; } #ifdef HAVE_UNIX_SUEXEC /* * This routine is called to find out under which user id to run suexec * Unless our module runs CGI programs, there is no reason for us to * mess with this information. * * This is a RUN_FIRST hook. The return value is a pointer to an * ap_unix_identity_t or NULL. */ static ap_unix_identity_t *x_get_suexec_identity(const request_rec *r) { trace_request(r, "x_get_suexec_identity()"); return NULL; } #endif /* * This routine is called to create a connection. This hook is implemented * by the Apache core: there is no known reason a module should override * it. * * This is a RUN_FIRST hook. * * Return NULL to decline, a valid conn_rec pointer to accept. */ static conn_rec *x_create_connection(apr_pool_t *p, server_rec *server, apr_socket_t *csd, long conn_id, void *sbh, apr_bucket_alloc_t *alloc) { trace_nocontext(p, __FILE__, __LINE__, "x_create_connection()"); return NULL; } /* * This hook is defined in server/core.c, but it is not actually called * or documented. * * This is a RUN_ALL hook. */ static int x_get_mgmt_items(apr_pool_t *p, const char *val, apr_hash_t *ht) { /* We have nothing to do here but trace the call, and no context * in which to trace it. */ trace_nocontext(p, __FILE__, __LINE__, "x_check_config()"); return DECLINED; } /* * This routine gets called shortly after the request_rec structure * is created. It provides the opportunity to manipulae the request * at a very early stage. * * This is a RUN_ALL hook. */ static int x_create_request(request_rec *r) { /* * We have a request_rec, but it is not filled in enough to give * us a usable configuration. So, add a trace without context. */ trace_nocontext( r->pool, __FILE__, __LINE__, "x_create_request()"); return DECLINED; } /* * This routine gets called during the startup of the MPM. * No known existing module implements this hook. * * This is a RUN_ALL hook. */ static int x_pre_mpm(apr_pool_t *p, ap_scoreboard_e sb_type) { trace_nocontext(p, __FILE__, __LINE__, "x_pre_mpm()"); return DECLINED; } /* * This hook gets run periodically by a maintenance function inside * the MPM. Its exact purpose is unknown and undocumented at this time. * * This is a RUN_ALL hook. */ static int x_monitor(apr_pool_t *p, server_rec *s) { trace_nocontext(p, __FILE__, __LINE__, "x_monitor()"); return DECLINED; } /*--------------------------------------------------------------------------*/ /* */ /* Which functions are responsible for which hooks in the server. */ /* */ /*--------------------------------------------------------------------------*/ /* * Each function our module provides to handle a particular hook is * specified here. The functions are registered using * ap_hook_foo(name, predecessors, successors, position) * where foo is the name of the hook. * * The args are as follows: * name -> the name of the function to call. * predecessors -> a list of modules whose calls to this hook must be * invoked before this module. * successors -> a list of modules whose calls to this hook must be * invoked after this module. * position -> The relative position of this module. One of * APR_HOOK_FIRST, APR_HOOK_MIDDLE, or APR_HOOK_LAST. * Most modules will use APR_HOOK_MIDDLE. If multiple * modules use the same relative position, Apache will * determine which to call first. * If your module relies on another module to run first, * or another module running after yours, use the * predecessors and/or successors. * * The number in brackets indicates the order in which the routine is called * during request processing. Note that not all routines are necessarily * called (such as if a resource doesn't have access restrictions). * The actual delivery of content to the browser [9] is not handled by * a hook; see the handler declarations below. */ static void x_register_hooks(apr_pool_t *p) { ap_hook_pre_config(x_pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_check_config(x_check_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_test_config(x_test_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_open_logs(x_open_logs, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(x_post_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_child_init(x_child_init, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_handler(x_handler, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_quick_handler(x_quick_handler, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_pre_connection(x_pre_connection, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_process_connection(x_process_connection, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_pre_read_request(x_pre_read_request, NULL, NULL, APR_HOOK_MIDDLE); /* [1] post read_request handling */ ap_hook_post_read_request(x_post_read_request, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_log_transaction(x_log_transaction, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_http_scheme(x_http_scheme, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_default_port(x_default_port, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_translate_name(x_translate_name, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_map_to_storage(x_map_to_storage, NULL,NULL, APR_HOOK_MIDDLE); ap_hook_header_parser(x_header_parser, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_fixups(x_fixups, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_type_checker(x_type_checker, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_check_access(x_check_access, NULL, NULL, APR_HOOK_MIDDLE, AP_AUTH_INTERNAL_PER_CONF); ap_hook_check_authn(x_check_authn, NULL, NULL, APR_HOOK_MIDDLE, AP_AUTH_INTERNAL_PER_CONF); ap_hook_check_authz(x_check_authz, NULL, NULL, APR_HOOK_MIDDLE, AP_AUTH_INTERNAL_PER_CONF); ap_hook_insert_filter(x_insert_filter, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_insert_error_filter(x_insert_error_filter, NULL, NULL, APR_HOOK_MIDDLE); #ifdef HAVE_UNIX_SUEXEC ap_hook_get_suexec_identity(x_get_suexec_identity, NULL, NULL, APR_HOOK_MIDDLE); #endif ap_hook_create_connection(x_create_connection, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_get_mgmt_items(x_get_mgmt_items, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_create_request(x_create_request, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_pre_mpm(x_pre_mpm, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_monitor(x_monitor, NULL, NULL, APR_HOOK_MIDDLE); } /*--------------------------------------------------------------------------*/ /* */ /* All of the routines have been declared now. Here's the list of */ /* directives specific to our module, and information about where they */ /* may appear and how the command parser should pass them to us for */ /* processing. Note that care must be taken to ensure that there are NO */ /* collisions of directive names between modules. */ /* */ /*--------------------------------------------------------------------------*/ /* * List of directives specific to our module. */ static const command_rec x_cmds[] = { AP_INIT_NO_ARGS( "Example", /* directive name */ cmd_example, /* config action routine */ NULL, /* argument to include in call */ OR_OPTIONS, /* where available */ "Example directive - no arguments" /* directive description */ ), {NULL} }; /*--------------------------------------------------------------------------*/ /* */ /* Finally, the list of callback routines and data structures that provide */ /* the static hooks into our module from the other parts of the server. */ /* */ /*--------------------------------------------------------------------------*/ /* * Module definition for configuration. If a particular callback is not * needed, replace its routine name below with the word NULL. */ AP_DECLARE_MODULE(example_hooks) = { STANDARD20_MODULE_STUFF, x_create_dir_config, /* per-directory config creator */ x_merge_dir_config, /* dir config merger */ x_create_server_config, /* server config creator */ x_merge_server_config, /* server config merger */ x_cmds, /* command table */ x_register_hooks, /* set up other request processing hooks */ }; httpd-2.4.41/modules/examples/mod_case_filter_in.mak0000644000000000000500000002467112701473373021042 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_case_filter_in.dsp !IF "$(CFG)" == "" CFG=mod_case_filter_in - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_case_filter_in - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_case_filter_in - Win32 Release" && "$(CFG)" != "mod_case_filter_in - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_case_filter_in.mak" CFG="mod_case_filter_in - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_case_filter_in - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_case_filter_in - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_case_filter_in - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_case_filter_in.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_case_filter_in.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_case_filter_in.obj" -@erase "$(INTDIR)\mod_case_filter_in.res" -@erase "$(INTDIR)\mod_case_filter_in_src.idb" -@erase "$(INTDIR)\mod_case_filter_in_src.pdb" -@erase "$(OUTDIR)\mod_case_filter_in.exp" -@erase "$(OUTDIR)\mod_case_filter_in.lib" -@erase "$(OUTDIR)\mod_case_filter_in.pdb" -@erase "$(OUTDIR)\mod_case_filter_in.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_case_filter_in_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_case_filter_in.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_case_filter_in.so" /d LONG_NAME="case_filter_in_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_case_filter_in.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_case_filter_in.pdb" /debug /out:"$(OUTDIR)\mod_case_filter_in.so" /implib:"$(OUTDIR)\mod_case_filter_in.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_case_filter_in.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_case_filter_in.obj" \ "$(INTDIR)\mod_case_filter_in.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_case_filter_in.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_case_filter_in.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_case_filter_in.so" if exist .\Release\mod_case_filter_in.so.manifest mt.exe -manifest .\Release\mod_case_filter_in.so.manifest -outputresource:.\Release\mod_case_filter_in.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_case_filter_in - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_case_filter_in.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_case_filter_in.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_case_filter_in.obj" -@erase "$(INTDIR)\mod_case_filter_in.res" -@erase "$(INTDIR)\mod_case_filter_in_src.idb" -@erase "$(INTDIR)\mod_case_filter_in_src.pdb" -@erase "$(OUTDIR)\mod_case_filter_in.exp" -@erase "$(OUTDIR)\mod_case_filter_in.lib" -@erase "$(OUTDIR)\mod_case_filter_in.pdb" -@erase "$(OUTDIR)\mod_case_filter_in.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_case_filter_in_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_case_filter_in.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_case_filter_in.so" /d LONG_NAME="case_filter_in_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_case_filter_in.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_case_filter_in.pdb" /debug /out:"$(OUTDIR)\mod_case_filter_in.so" /implib:"$(OUTDIR)\mod_case_filter_in.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_case_filter_in.so LINK32_OBJS= \ "$(INTDIR)\mod_case_filter_in.obj" \ "$(INTDIR)\mod_case_filter_in.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_case_filter_in.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_case_filter_in.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_case_filter_in.so" if exist .\Debug\mod_case_filter_in.so.manifest mt.exe -manifest .\Debug\mod_case_filter_in.so.manifest -outputresource:.\Debug\mod_case_filter_in.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_case_filter_in.dep") !INCLUDE "mod_case_filter_in.dep" !ELSE !MESSAGE Warning: cannot find "mod_case_filter_in.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_case_filter_in - Win32 Release" || "$(CFG)" == "mod_case_filter_in - Win32 Debug" !IF "$(CFG)" == "mod_case_filter_in - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\examples" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\examples" !ELSEIF "$(CFG)" == "mod_case_filter_in - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\examples" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\examples" !ENDIF !IF "$(CFG)" == "mod_case_filter_in - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\examples" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\examples" !ELSEIF "$(CFG)" == "mod_case_filter_in - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\examples" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\examples" !ENDIF !IF "$(CFG)" == "mod_case_filter_in - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\examples" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\examples" !ELSEIF "$(CFG)" == "mod_case_filter_in - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\examples" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\examples" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_case_filter_in - Win32 Release" "$(INTDIR)\mod_case_filter_in.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_case_filter_in.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_case_filter_in.so" /d LONG_NAME="case_filter_in_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_case_filter_in - Win32 Debug" "$(INTDIR)\mod_case_filter_in.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_case_filter_in.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_case_filter_in.so" /d LONG_NAME="case_filter_in_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_case_filter_in.c "$(INTDIR)\mod_case_filter_in.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/examples/NWGNUcase_flt0000644000000000000500000001026511540546347017061 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = case_flt # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Case Filter Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_case_filter.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ case_filter_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/examples/mod_case_filter.dsp0000644000000000000500000001110710720056417020353 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_case_filter" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_case_filter - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_case_filter.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For case_filter: !MESSAGE !MESSAGE NMAKE /f "mod_case_filter.mak" CFG="mod_case_filter - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_case_filter - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_case_filter - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_case_filter - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_case_filter_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_case_filter.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_case_filter.so" /d LONG_NAME="case_filter_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_case_filter.so" /base:@..\..\os\win32\BaseAddr.ref,mod_case_filter.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_case_filter.so" /base:@..\..\os\win32\BaseAddr.ref,mod_case_filter.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_case_filter.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_case_filter - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_case_filter_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_case_filter.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_case_filter.so" /d LONG_NAME="case_filter_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_case_filter.so" /base:@..\..\os\win32\BaseAddr.ref,mod_case_filter.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_case_filter.so" /base:@..\..\os\win32\BaseAddr.ref,mod_case_filter.so # Begin Special Build Tool TargetPath=.\Debug\mod_case_filter.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_case_filter - Win32 Release" # Name "mod_case_filter - Win32 Debug" # Begin Source File SOURCE=.\mod_case_filter.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/examples/mod_case_filter.mak0000644000000000000500000002426112701473373020347 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_case_filter.dsp !IF "$(CFG)" == "" CFG=mod_case_filter - Win32 Debug !MESSAGE No configuration specified. Defaulting to mod_case_filter - Win32 Debug. !ENDIF !IF "$(CFG)" != "mod_case_filter - Win32 Release" && "$(CFG)" != "mod_case_filter - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_case_filter.mak" CFG="mod_case_filter - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_case_filter - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_case_filter - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_case_filter - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_case_filter.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_case_filter.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_case_filter.obj" -@erase "$(INTDIR)\mod_case_filter.res" -@erase "$(INTDIR)\mod_case_filter_src.idb" -@erase "$(INTDIR)\mod_case_filter_src.pdb" -@erase "$(OUTDIR)\mod_case_filter.exp" -@erase "$(OUTDIR)\mod_case_filter.lib" -@erase "$(OUTDIR)\mod_case_filter.pdb" -@erase "$(OUTDIR)\mod_case_filter.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_case_filter_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_case_filter.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_case_filter.so" /d LONG_NAME="case_filter_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_case_filter.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_case_filter.pdb" /debug /out:"$(OUTDIR)\mod_case_filter.so" /implib:"$(OUTDIR)\mod_case_filter.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_case_filter.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_case_filter.obj" \ "$(INTDIR)\mod_case_filter.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_case_filter.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_case_filter.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_case_filter.so" if exist .\Release\mod_case_filter.so.manifest mt.exe -manifest .\Release\mod_case_filter.so.manifest -outputresource:.\Release\mod_case_filter.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_case_filter - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_case_filter.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_case_filter.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_case_filter.obj" -@erase "$(INTDIR)\mod_case_filter.res" -@erase "$(INTDIR)\mod_case_filter_src.idb" -@erase "$(INTDIR)\mod_case_filter_src.pdb" -@erase "$(OUTDIR)\mod_case_filter.exp" -@erase "$(OUTDIR)\mod_case_filter.lib" -@erase "$(OUTDIR)\mod_case_filter.pdb" -@erase "$(OUTDIR)\mod_case_filter.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_case_filter_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_case_filter.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_case_filter.so" /d LONG_NAME="case_filter_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_case_filter.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_case_filter.pdb" /debug /out:"$(OUTDIR)\mod_case_filter.so" /implib:"$(OUTDIR)\mod_case_filter.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_case_filter.so LINK32_OBJS= \ "$(INTDIR)\mod_case_filter.obj" \ "$(INTDIR)\mod_case_filter.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_case_filter.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_case_filter.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_case_filter.so" if exist .\Debug\mod_case_filter.so.manifest mt.exe -manifest .\Debug\mod_case_filter.so.manifest -outputresource:.\Debug\mod_case_filter.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_case_filter.dep") !INCLUDE "mod_case_filter.dep" !ELSE !MESSAGE Warning: cannot find "mod_case_filter.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_case_filter - Win32 Release" || "$(CFG)" == "mod_case_filter - Win32 Debug" !IF "$(CFG)" == "mod_case_filter - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\examples" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\examples" !ELSEIF "$(CFG)" == "mod_case_filter - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\examples" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\examples" !ENDIF !IF "$(CFG)" == "mod_case_filter - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\examples" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\examples" !ELSEIF "$(CFG)" == "mod_case_filter - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\examples" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\examples" !ENDIF !IF "$(CFG)" == "mod_case_filter - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\examples" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\examples" !ELSEIF "$(CFG)" == "mod_case_filter - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\examples" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\examples" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_case_filter - Win32 Release" "$(INTDIR)\mod_case_filter.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_case_filter.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_case_filter.so" /d LONG_NAME="case_filter_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_case_filter - Win32 Debug" "$(INTDIR)\mod_case_filter.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_case_filter.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_case_filter.so" /d LONG_NAME="case_filter_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_case_filter.c "$(INTDIR)\mod_case_filter.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/examples/Makefile.in0000644000000000000500000000026710720056417016576 0ustar rootsrc# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/examples/mod_example_ipc.dsp0000644000000000000500000001110311022367030020345 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_example_ipc" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_example_ipc - Win32 Debug !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_example_ipc.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_example_ipc.mak" CFG="mod_example_ipc - Win32 Debug" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_example_ipc - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_example_ipc - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_example_ipc - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_example_ipc_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_example_ipc.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_example_ipc.so" /d LONG_NAME="example_ipc_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_example_ipc.so" /base:@..\..\os\win32\BaseAddr.ref,mod_example_ipc.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_example_ipc.so" /base:@..\..\os\win32\BaseAddr.ref,mod_example_ipc.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_example_ipc.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_example_ipc - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_example_ipc_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /o /win32 "NUL" # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_example_ipc.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_example_ipc.so" /d LONG_NAME="example_ipc_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_example_ipc.so" /base:@..\..\os\win32\BaseAddr.ref,mod_example_ipc.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_example_ipc.so" /base:@..\..\os\win32\BaseAddr.ref,mod_example_ipc.so # Begin Special Build Tool TargetPath=.\Debug\mod_example_ipc.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_example_ipc - Win32 Release" # Name "mod_example_ipc - Win32 Debug" # Begin Source File SOURCE=.\mod_example_ipc.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/Makefile.in0000644000000000000500000000014710150161574014753 0ustar rootsrc SUBDIRS = $(MODULE_DIRS) CLEAN_SUBDIRS = $(MODULE_CLEANDIRS) include $(top_builddir)/build/rules.mk httpd-2.4.41/modules/proxy/0002755000000000000500000000000013523273342014073 5ustar rootsrchttpd-2.4.41/modules/proxy/NWGNUproxylbm_hb0000644000000000000500000001036612010715741017160 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/proxy \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxylbm_hb # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy LoadBalance by Heartbeat Sub-Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = LBM Heart Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = $(OBJDIR)/$(NLM_NAME).nlm # # If there is an LIB target, put it here # TARGET_lib = # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_lbmethod_heartbeat.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ libc \ aprlib \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ @$(OBJDIR)/mod_proxy.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ lbmethod_heartbeat_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c balancers # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/mod_proxy_ftp.dep0000644000000000000500000000522712674411515017464 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_proxy_ftp.mak .\mod_proxy_ftp.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_proxy.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/NWGNUproxybalancer0000644000000000000500000001061111546111464017502 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxybalancer # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy Balancer Sub-Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Prxy Blncr Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/proxybalancer.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_proxy_balancer.o \ $(OBJDIR)/libprews.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @$(OBJDIR)/mod_proxy.imp \ @libc.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ proxy_balancer_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/mod_proxy_uwsgi.dsp0000644000000000000500000001151713240664370020045 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_proxy_uwsgi" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_proxy_uwsgi - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_proxy_uwsgi.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_uwsgi.mak" CFG="mod_proxy_uwsgi - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_uwsgi - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_uwsgi - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_proxy_uwsgi - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_proxy_uwsgi_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_proxy_uwsgi.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_uwsgi.so" /d LONG_NAME="proxy_uwsgi_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_proxy_uwsgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_uwsgi.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_proxy_uwsgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_uwsgi.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_proxy_uwsgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_proxy_uwsgi - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_proxy_uwsgi_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_proxy_uwsgi.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_uwsgi.so" /d LONG_NAME="proxy_uwsgi_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_uwsgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_uwsgi.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_uwsgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_uwsgi.so # Begin Special Build Tool TargetPath=.\Debug\mod_proxy_uwsgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_proxy_uwsgi - Win32 Release" # Name "mod_proxy_uwsgi - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_proxy_uwsgi.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=.\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/ajp_link.c0000644000000000000500000000660111667005541016030 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ajp.h" APLOG_USE_MODULE(proxy_ajp); apr_status_t ajp_ilink_send(apr_socket_t *sock, ajp_msg_t *msg) { char *buf; apr_status_t status; apr_size_t length; ajp_msg_end(msg); length = msg->len; buf = (char *)msg->buf; do { apr_size_t written = length; status = apr_socket_send(sock, buf, &written); if (status != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, status, NULL, APLOGNO(01029) "ajp_ilink_send(): send failed"); return status; } length -= written; buf += written; } while (length); return APR_SUCCESS; } static apr_status_t ilink_read(apr_socket_t *sock, apr_byte_t *buf, apr_size_t len) { apr_size_t length = len; apr_size_t rdlen = 0; apr_status_t status; while (rdlen < len) { status = apr_socket_recv(sock, (char *)(buf + rdlen), &length); if (status == APR_EOF) return status; /* socket closed. */ else if (APR_STATUS_IS_EAGAIN(status)) continue; else if (status != APR_SUCCESS) return status; /* any error. */ rdlen += length; length = len - rdlen; } return APR_SUCCESS; } apr_status_t ajp_ilink_receive(apr_socket_t *sock, ajp_msg_t *msg) { apr_status_t status; apr_size_t hlen; apr_size_t blen; hlen = msg->header_len; status = ilink_read(sock, msg->buf, hlen); if (status != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, status, NULL, APLOGNO(01030) "ajp_ilink_receive() can't receive header"); return (APR_STATUS_IS_TIMEUP(status) ? APR_TIMEUP : AJP_ENO_HEADER); } status = ajp_msg_check_header(msg, &blen); if (status != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(01031) "ajp_ilink_receive() received bad header"); return AJP_EBAD_HEADER; } status = ilink_read(sock, msg->buf + hlen, blen); if (status != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, status, NULL, APLOGNO(01032) "ajp_ilink_receive() error while receiving message body " "of length %" APR_SIZE_T_FMT, hlen); return AJP_EBAD_MESSAGE; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, NULL, APLOGNO(01033) "ajp_ilink_receive() received packet len=%" APR_SIZE_T_FMT "type=%d", blen, (int)msg->buf[hlen]); return APR_SUCCESS; } httpd-2.4.41/modules/proxy/mod_proxy_ajp.mak0000644000000000000500000002714712701473373017453 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_proxy_ajp.dsp !IF "$(CFG)" == "" CFG=mod_proxy_ajp - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_proxy_ajp - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_proxy_ajp - Win32 Release" && "$(CFG)" != "mod_proxy_ajp - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_ajp.mak" CFG="mod_proxy_ajp - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_ajp - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_ajp - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_proxy_ajp - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_ajp.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_proxy_ajp.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\ajp_header.obj" -@erase "$(INTDIR)\ajp_link.obj" -@erase "$(INTDIR)\ajp_msg.obj" -@erase "$(INTDIR)\ajp_utils.obj" -@erase "$(INTDIR)\mod_proxy_ajp.obj" -@erase "$(INTDIR)\mod_proxy_ajp.res" -@erase "$(INTDIR)\mod_proxy_ajp_src.idb" -@erase "$(INTDIR)\mod_proxy_ajp_src.pdb" -@erase "$(OUTDIR)\mod_proxy_ajp.exp" -@erase "$(OUTDIR)\mod_proxy_ajp.lib" -@erase "$(OUTDIR)\mod_proxy_ajp.pdb" -@erase "$(OUTDIR)\mod_proxy_ajp.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_ajp_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_ajp.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_ajp.so" /d LONG_NAME="proxy_ajp_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_ajp.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_ajp.pdb" /debug /out:"$(OUTDIR)\mod_proxy_ajp.so" /implib:"$(OUTDIR)\mod_proxy_ajp.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_ajp.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_proxy_ajp.obj" \ "$(INTDIR)\ajp_header.obj" \ "$(INTDIR)\ajp_link.obj" \ "$(INTDIR)\ajp_msg.obj" \ "$(INTDIR)\ajp_utils.obj" \ "$(INTDIR)\mod_proxy_ajp.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_ajp.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_proxy_ajp.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_ajp.so" if exist .\Release\mod_proxy_ajp.so.manifest mt.exe -manifest .\Release\mod_proxy_ajp.so.manifest -outputresource:.\Release\mod_proxy_ajp.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_proxy_ajp - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_ajp.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_proxy_ajp.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\ajp_header.obj" -@erase "$(INTDIR)\ajp_link.obj" -@erase "$(INTDIR)\ajp_msg.obj" -@erase "$(INTDIR)\ajp_utils.obj" -@erase "$(INTDIR)\mod_proxy_ajp.obj" -@erase "$(INTDIR)\mod_proxy_ajp.res" -@erase "$(INTDIR)\mod_proxy_ajp_src.idb" -@erase "$(INTDIR)\mod_proxy_ajp_src.pdb" -@erase "$(OUTDIR)\mod_proxy_ajp.exp" -@erase "$(OUTDIR)\mod_proxy_ajp.lib" -@erase "$(OUTDIR)\mod_proxy_ajp.pdb" -@erase "$(OUTDIR)\mod_proxy_ajp.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_ajp_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_ajp.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_ajp.so" /d LONG_NAME="proxy_ajp_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_ajp.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_ajp.pdb" /debug /out:"$(OUTDIR)\mod_proxy_ajp.so" /implib:"$(OUTDIR)\mod_proxy_ajp.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_ajp.so LINK32_OBJS= \ "$(INTDIR)\mod_proxy_ajp.obj" \ "$(INTDIR)\ajp_header.obj" \ "$(INTDIR)\ajp_link.obj" \ "$(INTDIR)\ajp_msg.obj" \ "$(INTDIR)\ajp_utils.obj" \ "$(INTDIR)\mod_proxy_ajp.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_ajp.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_proxy_ajp.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_ajp.so" if exist .\Debug\mod_proxy_ajp.so.manifest mt.exe -manifest .\Debug\mod_proxy_ajp.so.manifest -outputresource:.\Debug\mod_proxy_ajp.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_proxy_ajp.dep") !INCLUDE "mod_proxy_ajp.dep" !ELSE !MESSAGE Warning: cannot find "mod_proxy_ajp.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_proxy_ajp - Win32 Release" || "$(CFG)" == "mod_proxy_ajp - Win32 Debug" SOURCE=.\mod_proxy_ajp.c "$(INTDIR)\mod_proxy_ajp.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ajp_header.c "$(INTDIR)\ajp_header.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ajp_link.c "$(INTDIR)\ajp_link.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ajp_msg.c "$(INTDIR)\ajp_msg.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ajp_utils.c "$(INTDIR)\ajp_utils.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_proxy_ajp - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_ajp - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_ajp - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_ajp - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_ajp - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_ajp - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_ajp - Win32 Release" "mod_proxy - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd "." "mod_proxy - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_proxy_ajp - Win32 Debug" "mod_proxy - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd "." "mod_proxy - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_proxy_ajp - Win32 Release" "$(INTDIR)\mod_proxy_ajp.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_ajp.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_proxy_ajp.so" /d LONG_NAME="proxy_ajp_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_proxy_ajp - Win32 Debug" "$(INTDIR)\mod_proxy_ajp.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_ajp.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_proxy_ajp.so" /d LONG_NAME="proxy_ajp_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/mod_proxy_connect.mak0000644000000000000500000002626312701473373020330 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_proxy_connect.dsp !IF "$(CFG)" == "" CFG=mod_proxy_connect - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_proxy_connect - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_proxy_connect - Win32 Release" && "$(CFG)" != "mod_proxy_connect - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_connect.mak" CFG="mod_proxy_connect - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_connect - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_connect - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_proxy_connect - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_connect.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_proxy_connect.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_connect.obj" -@erase "$(INTDIR)\mod_proxy_connect.res" -@erase "$(INTDIR)\mod_proxy_connect_src.idb" -@erase "$(INTDIR)\mod_proxy_connect_src.pdb" -@erase "$(OUTDIR)\mod_proxy_connect.exp" -@erase "$(OUTDIR)\mod_proxy_connect.lib" -@erase "$(OUTDIR)\mod_proxy_connect.pdb" -@erase "$(OUTDIR)\mod_proxy_connect.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_connect_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_connect.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_connect.so" /d LONG_NAME="proxy_connect_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_connect.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_connect.pdb" /debug /out:"$(OUTDIR)\mod_proxy_connect.so" /implib:"$(OUTDIR)\mod_proxy_connect.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_connect.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_proxy_connect.obj" \ "$(INTDIR)\mod_proxy_connect.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_connect.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_proxy_connect.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_connect.so" if exist .\Release\mod_proxy_connect.so.manifest mt.exe -manifest .\Release\mod_proxy_connect.so.manifest -outputresource:.\Release\mod_proxy_connect.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_proxy_connect - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_connect.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_proxy_connect.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_connect.obj" -@erase "$(INTDIR)\mod_proxy_connect.res" -@erase "$(INTDIR)\mod_proxy_connect_src.idb" -@erase "$(INTDIR)\mod_proxy_connect_src.pdb" -@erase "$(OUTDIR)\mod_proxy_connect.exp" -@erase "$(OUTDIR)\mod_proxy_connect.lib" -@erase "$(OUTDIR)\mod_proxy_connect.pdb" -@erase "$(OUTDIR)\mod_proxy_connect.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_connect_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_connect.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_connect.so" /d LONG_NAME="proxy_connect_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_connect.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_connect.pdb" /debug /out:"$(OUTDIR)\mod_proxy_connect.so" /implib:"$(OUTDIR)\mod_proxy_connect.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_connect.so LINK32_OBJS= \ "$(INTDIR)\mod_proxy_connect.obj" \ "$(INTDIR)\mod_proxy_connect.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_connect.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_proxy_connect.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_connect.so" if exist .\Debug\mod_proxy_connect.so.manifest mt.exe -manifest .\Debug\mod_proxy_connect.so.manifest -outputresource:.\Debug\mod_proxy_connect.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_proxy_connect.dep") !INCLUDE "mod_proxy_connect.dep" !ELSE !MESSAGE Warning: cannot find "mod_proxy_connect.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_proxy_connect - Win32 Release" || "$(CFG)" == "mod_proxy_connect - Win32 Debug" SOURCE=.\mod_proxy_connect.c "$(INTDIR)\mod_proxy_connect.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_proxy_connect - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_connect - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_connect - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_connect - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_connect - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_connect - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_connect - Win32 Release" "mod_proxy - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd "." "mod_proxy - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_proxy_connect - Win32 Debug" "mod_proxy - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd "." "mod_proxy - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_proxy_connect - Win32 Release" "$(INTDIR)\mod_proxy_connect.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_connect.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_proxy_connect.so" /d LONG_NAME="proxy_connect_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_proxy_connect - Win32 Debug" "$(INTDIR)\mod_proxy_connect.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_connect.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_proxy_connect.so" /d LONG_NAME="proxy_connect_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/mod_proxy_balancer.dep0000644000000000000500000000533312674411515020440 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_proxy_balancer.mak .\mod_proxy_balancer.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_proxy.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/mod_proxy_ajp.dep0000644000000000000500000003132412674411515017442 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_proxy_ajp.mak .\mod_proxy_ajp.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ajp.h"\ ".\mod_proxy.h"\ .\ajp_header.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ajp.h"\ ".\ajp_header.h"\ ".\mod_proxy.h"\ .\ajp_link.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ajp.h"\ ".\mod_proxy.h"\ .\ajp_msg.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ajp.h"\ ".\mod_proxy.h"\ .\ajp_utils.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ajp.h"\ ".\mod_proxy.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/balancers/0002755000000000000500000000000013523273342016025 5ustar rootsrchttpd-2.4.41/modules/proxy/balancers/mod_lbmethod_bytraffic.dep0000644000000000000500000000566312674411515023217 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_lbmethod_bytraffic.mak .\mod_lbmethod_bytraffic.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_expr.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_mpm.h"\ "..\..\..\include\ap_provider.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\ap_slotmem.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\http_connection.h"\ "..\..\..\include\http_core.h"\ "..\..\..\include\http_log.h"\ "..\..\..\include\http_main.h"\ "..\..\..\include\http_protocol.h"\ "..\..\..\include\http_request.h"\ "..\..\..\include\http_vhost.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\os.h"\ "..\..\..\include\scoreboard.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_charset.h"\ "..\..\..\include\util_ebcdic.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_mutex.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_date.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_dso.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_lib.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_portable.h"\ "..\..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_shm.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_version.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ "..\mod_proxy.h"\ ..\..\..\build\win32\httpd.rc : \ "..\..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_bytraffic.dsp0000644000000000000500000001213711177743604023233 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_lbmethod_bytraffic" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_lbmethod_bytraffic - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_lbmethod_bytraffic.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_lbmethod_bytraffic.mak" CFG="mod_lbmethod_bytraffic - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_lbmethod_bytraffic - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_lbmethod_bytraffic - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_lbmethod_bytraffic_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_lbmethod_bytraffic.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_lbmethod_bytraffic.so" /d LONG_NAME="lbmethod_bytraffic_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_lbmethod_bytraffic.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_bytraffic.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_lbmethod_bytraffic.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_bytraffic.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_lbmethod_bytraffic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_lbmethod_bytraffic_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_lbmethod_bytraffic.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_lbmethod_bytraffic.so" /d LONG_NAME="lbmethod_bytraffic_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_lbmethod_bytraffic.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_bytraffic.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_lbmethod_bytraffic.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_bytraffic.so # Begin Special Build Tool TargetPath=.\Debug\mod_lbmethod_bytraffic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_lbmethod_bytraffic - Win32 Release" # Name "mod_lbmethod_bytraffic - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_lbmethod_bytraffic.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=..\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_bybusyness.dep0000644000000000000500000000566512674411515023456 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_lbmethod_bybusyness.mak .\mod_lbmethod_bybusyness.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_expr.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_mpm.h"\ "..\..\..\include\ap_provider.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\ap_slotmem.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\http_connection.h"\ "..\..\..\include\http_core.h"\ "..\..\..\include\http_log.h"\ "..\..\..\include\http_main.h"\ "..\..\..\include\http_protocol.h"\ "..\..\..\include\http_request.h"\ "..\..\..\include\http_vhost.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\os.h"\ "..\..\..\include\scoreboard.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_charset.h"\ "..\..\..\include\util_ebcdic.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_mutex.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_date.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_dso.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_lib.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_portable.h"\ "..\..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_shm.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_version.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ "..\mod_proxy.h"\ ..\..\..\build\win32\httpd.rc : \ "..\..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_heartbeat.c0000644000000000000500000003220313345726637022657 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_proxy.h" #include "scoreboard.h" #include "ap_mpm.h" #include "apr_version.h" #include "ap_hooks.h" #include "ap_slotmem.h" #include "heartbeat.h" #ifndef LBM_HEARTBEAT_MAX_LASTSEEN /* If we haven't seen a heartbeat in the last N seconds, don't count this IP * as allive. */ #define LBM_HEARTBEAT_MAX_LASTSEEN (10) #endif module AP_MODULE_DECLARE_DATA lbmethod_heartbeat_module; static int (*ap_proxy_retry_worker_fn)(const char *proxy_function, proxy_worker *worker, server_rec *s) = NULL; static const ap_slotmem_provider_t *storage = NULL; static ap_slotmem_instance_t *hm_serversmem = NULL; /* * configuration structure * path: path of the file where the heartbeat information is stored. */ typedef struct lb_hb_ctx_t { const char *path; } lb_hb_ctx_t; typedef struct hb_server_t { const char *ip; int busy; int ready; int port; int id; apr_time_t seen; proxy_worker *worker; } hb_server_t; typedef struct ctx_servers { apr_time_t now; apr_hash_t *servers; } ctx_servers_t; static void argstr_to_table(apr_pool_t *p, char *str, apr_table_t *parms) { char *key; char *value; char *strtok_state; key = apr_strtok(str, "&", &strtok_state); while (key) { value = strchr(key, '='); if (value) { *value = '\0'; /* Split the string in two */ value++; /* Skip passed the = */ } else { value = "1"; } ap_unescape_url(key); ap_unescape_url(value); apr_table_set(parms, key, value); /* ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03230) "Found query arg: %s = %s", key, value); */ key = apr_strtok(NULL, "&", &strtok_state); } } static apr_status_t readfile_heartbeats(const char *path, apr_hash_t *servers, apr_pool_t *pool) { apr_finfo_t fi; apr_status_t rv; apr_file_t *fp; if (!path) { return APR_SUCCESS; } rv = apr_file_open(&fp, path, APR_READ|APR_BINARY|APR_BUFFERED, APR_OS_DEFAULT, pool); if (rv) { return rv; } rv = apr_file_info_get(&fi, APR_FINFO_SIZE, fp); if (rv) { return rv; } { char *t; int lineno = 0; apr_bucket_alloc_t *ba = apr_bucket_alloc_create(pool); apr_bucket_brigade *bb = apr_brigade_create(pool, ba); apr_bucket_brigade *tmpbb = apr_brigade_create(pool, ba); apr_table_t *hbt = apr_table_make(pool, 10); apr_brigade_insert_file(bb, fp, 0, fi.size, pool); do { hb_server_t *server; char buf[4096]; apr_size_t bsize = sizeof(buf); const char *ip, *val; apr_brigade_cleanup(tmpbb); if (APR_BRIGADE_EMPTY(bb)) { break; } rv = apr_brigade_split_line(tmpbb, bb, APR_BLOCK_READ, sizeof(buf)); lineno++; if (rv) { return rv; } apr_brigade_flatten(tmpbb, buf, &bsize); if (bsize == 0) { break; } buf[bsize - 1] = 0; /* comment */ if (buf[0] == '#') { continue; } /* line format: \n */ t = strchr(buf, ' '); if (!t) { continue; } ip = apr_pstrmemdup(pool, buf, t - buf); t++; server = apr_hash_get(servers, ip, APR_HASH_KEY_STRING); if (server == NULL) { server = apr_pcalloc(pool, sizeof(hb_server_t)); server->ip = ip; server->port = 80; server->seen = -1; apr_hash_set(servers, server->ip, APR_HASH_KEY_STRING, server); } apr_table_clear(hbt); argstr_to_table(pool, apr_pstrdup(pool, t), hbt); if ((val = apr_table_get(hbt, "busy"))) { server->busy = atoi(val); } if ((val = apr_table_get(hbt, "ready"))) { server->ready = atoi(val); } if ((val = apr_table_get(hbt, "lastseen"))) { server->seen = atoi(val); } if ((val = apr_table_get(hbt, "port"))) { server->port = atoi(val); } if (server->busy == 0 && server->ready != 0) { /* Server has zero threads active, but lots of them ready, * it likely just started up, so lets /4 the number ready, * to prevent us from completely flooding it with all new * requests. */ server->ready = server->ready / 4; } } while (1); } return APR_SUCCESS; } static apr_status_t hm_read(void* mem, void *data, apr_pool_t *pool) { hm_slot_server_t *slotserver = (hm_slot_server_t *) mem; ctx_servers_t *ctx = (ctx_servers_t *) data; apr_hash_t *servers = (apr_hash_t *) ctx->servers; hb_server_t *server = apr_hash_get(servers, slotserver->ip, APR_HASH_KEY_STRING); if (server == NULL) { server = apr_pcalloc(pool, sizeof(hb_server_t)); server->ip = apr_pstrdup(pool, slotserver->ip); server->seen = -1; apr_hash_set(servers, server->ip, APR_HASH_KEY_STRING, server); } server->busy = slotserver->busy; server->ready = slotserver->ready; server->seen = apr_time_sec(ctx->now - slotserver->seen); server->id = slotserver->id; if (server->busy == 0 && server->ready != 0) { server->ready = server->ready / 4; } return APR_SUCCESS; } static apr_status_t readslot_heartbeats(ctx_servers_t *ctx, apr_pool_t *pool) { storage->doall(hm_serversmem, hm_read, ctx, pool); return APR_SUCCESS; } static apr_status_t read_heartbeats(const char *path, apr_hash_t *servers, apr_pool_t *pool) { apr_status_t rv; if (hm_serversmem) { ctx_servers_t ctx; ctx.now = apr_time_now(); ctx.servers = servers; rv = readslot_heartbeats(&ctx, pool); } else rv = readfile_heartbeats(path, servers, pool); return rv; } static proxy_worker *find_best_hb(proxy_balancer *balancer, request_rec *r) { apr_status_t rv; int i; apr_uint32_t openslots = 0; proxy_worker **worker; hb_server_t *server; apr_array_header_t *up_servers; proxy_worker *mycandidate = NULL; apr_pool_t *tpool; apr_hash_t *servers; lb_hb_ctx_t *ctx = ap_get_module_config(r->server->module_config, &lbmethod_heartbeat_module); ap_proxy_retry_worker_fn = APR_RETRIEVE_OPTIONAL_FN(ap_proxy_retry_worker); if (!ap_proxy_retry_worker_fn) { /* can only happen if mod_proxy isn't loaded */ return NULL; } apr_pool_create(&tpool, r->pool); servers = apr_hash_make(tpool); rv = read_heartbeats(ctx->path, servers, tpool); if (rv) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01213) "lb_heartbeat: Unable to read heartbeats at '%s'", ctx->path); apr_pool_destroy(tpool); return NULL; } up_servers = apr_array_make(tpool, apr_hash_count(servers), sizeof(hb_server_t *)); for (i = 0; i < balancer->workers->nelts; i++) { worker = &APR_ARRAY_IDX(balancer->workers, i, proxy_worker *); server = apr_hash_get(servers, (*worker)->s->hostname_ex, APR_HASH_KEY_STRING); if (!server) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(01214) "lb_heartbeat: No server for worker %s", (*worker)->s->name); continue; } if (!PROXY_WORKER_IS_USABLE(*worker)) { ap_proxy_retry_worker_fn("BALANCER", *worker, r->server); } if (PROXY_WORKER_IS_USABLE(*worker)) { server->worker = *worker; if (server->seen < LBM_HEARTBEAT_MAX_LASTSEEN) { openslots += server->ready; APR_ARRAY_PUSH(up_servers, hb_server_t *) = server; } } } if (openslots > 0) { apr_uint32_t c = 0; apr_uint32_t pick = 0; pick = ap_random_pick(0, openslots); for (i = 0; i < up_servers->nelts; i++) { server = APR_ARRAY_IDX(up_servers, i, hb_server_t *); if (pick >= c && pick <= c + server->ready) { mycandidate = server->worker; } c += server->ready; } } apr_pool_destroy(tpool); return mycandidate; } static apr_status_t reset(proxy_balancer *balancer, server_rec *s) { return APR_SUCCESS; } static apr_status_t age(proxy_balancer *balancer, server_rec *s) { return APR_SUCCESS; } static const proxy_balancer_method heartbeat = { "heartbeat", &find_best_hb, NULL, &reset, &age, NULL }; static int lb_hb_init(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { apr_size_t size; unsigned int num; lb_hb_ctx_t *ctx = ap_get_module_config(s->module_config, &lbmethod_heartbeat_module); /* do nothing on first call */ if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) return OK; storage = ap_lookup_provider(AP_SLOTMEM_PROVIDER_GROUP, "shm", AP_SLOTMEM_PROVIDER_VERSION); if (!storage) { ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, s, APLOGNO(02281) "Failed to lookup provider 'shm' for '%s'. Maybe you " "need to load mod_slotmem_shm?", AP_SLOTMEM_PROVIDER_GROUP); return OK; } /* Try to use a slotmem created by mod_heartmonitor */ storage->attach(&hm_serversmem, "mod_heartmonitor", &size, &num, p); if (!hm_serversmem) ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, s, APLOGNO(02282) "No slotmem from mod_heartmonitor"); else ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, s, APLOGNO(02283) "Using slotmem from mod_heartmonitor"); if (hm_serversmem) ctx->path = "(slotmem)"; return OK; } static void register_hooks(apr_pool_t *p) { static const char * const aszPred[]={ "mod_heartmonitor.c", NULL }; ap_register_provider(p, PROXY_LBMETHOD, "heartbeat", "0", &heartbeat); ap_hook_post_config(lb_hb_init, aszPred, NULL, APR_HOOK_MIDDLE); } static void *lb_hb_create_config(apr_pool_t *p, server_rec *s) { lb_hb_ctx_t *ctx = (lb_hb_ctx_t *) apr_palloc(p, sizeof(lb_hb_ctx_t)); ctx->path = ap_runtime_dir_relative(p, DEFAULT_HEARTBEAT_STORAGE); return ctx; } static void *lb_hb_merge_config(apr_pool_t *p, void *basev, void *overridesv) { lb_hb_ctx_t *ps = apr_pcalloc(p, sizeof(lb_hb_ctx_t)); lb_hb_ctx_t *base = (lb_hb_ctx_t *) basev; lb_hb_ctx_t *overrides = (lb_hb_ctx_t *) overridesv; if (overrides->path) { ps->path = apr_pstrdup(p, overrides->path); } else { ps->path = apr_pstrdup(p, base->path); } return ps; } static const char *cmd_lb_hb_storage(cmd_parms *cmd, void *dconf, const char *path) { apr_pool_t *p = cmd->pool; lb_hb_ctx_t *ctx = (lb_hb_ctx_t *) ap_get_module_config(cmd->server->module_config, &lbmethod_heartbeat_module); const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err != NULL) { return err; } ctx->path = ap_runtime_dir_relative(p, path); return NULL; } static const command_rec cmds[] = { AP_INIT_TAKE1("HeartbeatStorage", cmd_lb_hb_storage, NULL, RSRC_CONF, "Path to read heartbeat data."), {NULL} }; AP_DECLARE_MODULE(lbmethod_heartbeat) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ lb_hb_create_config, /* create per-server config structure */ lb_hb_merge_config, /* merge per-server config structures */ cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_heartbeat.dep0000644000000000000500000000572412674411515023203 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_lbmethod_heartbeat.mak .\mod_lbmethod_heartbeat.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_expr.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_mpm.h"\ "..\..\..\include\ap_provider.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\ap_slotmem.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\heartbeat.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\http_connection.h"\ "..\..\..\include\http_core.h"\ "..\..\..\include\http_log.h"\ "..\..\..\include\http_main.h"\ "..\..\..\include\http_protocol.h"\ "..\..\..\include\http_request.h"\ "..\..\..\include\http_vhost.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\os.h"\ "..\..\..\include\scoreboard.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_charset.h"\ "..\..\..\include\util_ebcdic.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_mutex.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_date.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_dso.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_lib.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_portable.h"\ "..\..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_shm.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_version.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ "..\mod_proxy.h"\ ..\..\..\build\win32\httpd.rc : \ "..\..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_bytraffic.c0000644000000000000500000001061513345726637022674 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_proxy.h" #include "scoreboard.h" #include "ap_mpm.h" #include "apr_version.h" #include "ap_hooks.h" module AP_MODULE_DECLARE_DATA lbmethod_bytraffic_module; static APR_OPTIONAL_FN_TYPE(proxy_balancer_get_best_worker) *ap_proxy_balancer_get_best_worker_fn = NULL; static int is_best_bytraffic(proxy_worker *current, proxy_worker *prev_best, void *baton) { apr_off_t *min_traffic = (apr_off_t *)baton; apr_off_t traffic = (current->s->transferred / current->s->lbfactor) + (current->s->read / current->s->lbfactor); if (!prev_best || (traffic < *min_traffic)) { *min_traffic = traffic; return TRUE; } return FALSE; } /* * The idea behind the find_best_bytraffic scheduler is the following: * * We know the amount of traffic (bytes in and out) handled by each * worker. We normalize that traffic by each workers' weight. So assuming * a setup as below: * * worker a b c * lbfactor 1 1 3 * * the scheduler will allow worker c to handle 3 times the * traffic of a and b. If each request/response results in the * same amount of traffic, then c would be accessed 3 times as * often as a or b. If, for example, a handled a request that * resulted in a large i/o bytecount, then b and c would be * chosen more often, to even things out. */ static proxy_worker *find_best_bytraffic(proxy_balancer *balancer, request_rec *r) { apr_off_t min_traffic = 0; return ap_proxy_balancer_get_best_worker_fn(balancer, r, is_best_bytraffic, &min_traffic); } /* assumed to be mutex protected by caller */ static apr_status_t reset(proxy_balancer *balancer, server_rec *s) { int i; proxy_worker **worker; worker = (proxy_worker **)balancer->workers->elts; for (i = 0; i < balancer->workers->nelts; i++, worker++) { (*worker)->s->lbstatus = 0; (*worker)->s->busy = 0; (*worker)->s->transferred = 0; (*worker)->s->read = 0; } return APR_SUCCESS; } static apr_status_t age(proxy_balancer *balancer, server_rec *s) { return APR_SUCCESS; } static const proxy_balancer_method bytraffic = { "bytraffic", &find_best_bytraffic, NULL, &reset, &age, NULL }; /* post_config hook: */ static int lbmethod_bytraffic_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { /* lbmethod_bytraffic_post_config() will be called twice during startup. So, don't * set up the static data the 1st time through. */ if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) { return OK; } ap_proxy_balancer_get_best_worker_fn = APR_RETRIEVE_OPTIONAL_FN(proxy_balancer_get_best_worker); if (!ap_proxy_balancer_get_best_worker_fn) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(10150) "mod_proxy must be loaded for mod_lbmethod_bytraffic"); return !OK; } return OK; } static void register_hook(apr_pool_t *p) { ap_register_provider(p, PROXY_LBMETHOD, "bytraffic", "0", &bytraffic); ap_hook_post_config(lbmethod_bytraffic_post_config, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(lbmethod_bytraffic) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ NULL, /* command apr_table_t */ register_hook /* register hooks */ }; httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_byrequests.mak0000644000000000000500000003206112701473373023445 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_lbmethod_byrequests.dsp !IF "$(CFG)" == "" CFG=mod_lbmethod_byrequests - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_lbmethod_byrequests - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_lbmethod_byrequests - Win32 Release" && "$(CFG)" != "mod_lbmethod_byrequests - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_lbmethod_byrequests.mak" CFG="mod_lbmethod_byrequests - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_lbmethod_byrequests - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_lbmethod_byrequests - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_lbmethod_byrequests.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy_balancer - Win32 Release" "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_lbmethod_byrequests.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" "mod_proxy_balancer - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_lbmethod_byrequests.obj" -@erase "$(INTDIR)\mod_lbmethod_byrequests.res" -@erase "$(INTDIR)\mod_lbmethod_byrequests_src.idb" -@erase "$(INTDIR)\mod_lbmethod_byrequests_src.pdb" -@erase "$(OUTDIR)\mod_lbmethod_byrequests.exp" -@erase "$(OUTDIR)\mod_lbmethod_byrequests.lib" -@erase "$(OUTDIR)\mod_lbmethod_byrequests.pdb" -@erase "$(OUTDIR)\mod_lbmethod_byrequests.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_lbmethod_byrequests_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_lbmethod_byrequests.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_lbmethod_byrequests.so" /d LONG_NAME="lbmethod_byrequests_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_lbmethod_byrequests.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_lbmethod_byrequests.pdb" /debug /out:"$(OUTDIR)\mod_lbmethod_byrequests.so" /implib:"$(OUTDIR)\mod_lbmethod_byrequests.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_byrequests.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_lbmethod_byrequests.obj" \ "$(INTDIR)\mod_lbmethod_byrequests.res" \ "..\..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\..\Release\libhttpd.lib" \ "..\Release\mod_proxy.lib" \ "..\Release\mod_proxy_balancer.lib" "$(OUTDIR)\mod_lbmethod_byrequests.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_lbmethod_byrequests.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_lbmethod_byrequests.so" if exist .\Release\mod_lbmethod_byrequests.so.manifest mt.exe -manifest .\Release\mod_lbmethod_byrequests.so.manifest -outputresource:.\Release\mod_lbmethod_byrequests.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_lbmethod_byrequests.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy_balancer - Win32 Debug" "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_lbmethod_byrequests.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" "mod_proxy_balancer - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_lbmethod_byrequests.obj" -@erase "$(INTDIR)\mod_lbmethod_byrequests.res" -@erase "$(INTDIR)\mod_lbmethod_byrequests_src.idb" -@erase "$(INTDIR)\mod_lbmethod_byrequests_src.pdb" -@erase "$(OUTDIR)\mod_lbmethod_byrequests.exp" -@erase "$(OUTDIR)\mod_lbmethod_byrequests.lib" -@erase "$(OUTDIR)\mod_lbmethod_byrequests.pdb" -@erase "$(OUTDIR)\mod_lbmethod_byrequests.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_lbmethod_byrequests_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_lbmethod_byrequests.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_lbmethod_byrequests.so" /d LONG_NAME="lbmethod_byrequests_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_lbmethod_byrequests.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_lbmethod_byrequests.pdb" /debug /out:"$(OUTDIR)\mod_lbmethod_byrequests.so" /implib:"$(OUTDIR)\mod_lbmethod_byrequests.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_byrequests.so LINK32_OBJS= \ "$(INTDIR)\mod_lbmethod_byrequests.obj" \ "$(INTDIR)\mod_lbmethod_byrequests.res" \ "..\..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\..\Debug\libhttpd.lib" \ "..\Debug\mod_proxy.lib" \ "..\Debug\mod_proxy_balancer.lib" "$(OUTDIR)\mod_lbmethod_byrequests.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_lbmethod_byrequests.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_lbmethod_byrequests.so" if exist .\Debug\mod_lbmethod_byrequests.so.manifest mt.exe -manifest .\Debug\mod_lbmethod_byrequests.so.manifest -outputresource:.\Debug\mod_lbmethod_byrequests.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_lbmethod_byrequests.dep") !INCLUDE "mod_lbmethod_byrequests.dep" !ELSE !MESSAGE Warning: cannot find "mod_lbmethod_byrequests.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Release" || "$(CFG)" == "mod_lbmethod_byrequests - Win32 Debug" SOURCE=.\mod_lbmethod_byrequests.c "$(INTDIR)\mod_lbmethod_byrequests.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy\balancers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy\balancers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy\balancers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy\balancers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy\balancers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy\balancers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Release" "mod_proxy - Win32 Release" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd ".\balancers" "mod_proxy - Win32 ReleaseCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd ".\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Debug" "mod_proxy - Win32 Debug" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd ".\balancers" "mod_proxy - Win32 DebugCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd ".\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Release" "mod_proxy_balancer - Win32 Release" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Release" cd ".\balancers" "mod_proxy_balancer - Win32 ReleaseCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Release" RECURSE=1 CLEAN cd ".\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Debug" "mod_proxy_balancer - Win32 Debug" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Debug" cd ".\balancers" "mod_proxy_balancer - Win32 DebugCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Debug" RECURSE=1 CLEAN cd ".\balancers" !ENDIF SOURCE=..\..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Release" "$(INTDIR)\mod_lbmethod_byrequests.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_lbmethod_byrequests.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_lbmethod_byrequests.so" /d LONG_NAME="lbmethod_byrequests_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Debug" "$(INTDIR)\mod_lbmethod_byrequests.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_lbmethod_byrequests.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_lbmethod_byrequests.so" /d LONG_NAME="lbmethod_byrequests_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_byrequests.c0000644000000000000500000001213013345726637023123 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_proxy.h" #include "scoreboard.h" #include "ap_mpm.h" #include "apr_version.h" #include "ap_hooks.h" module AP_MODULE_DECLARE_DATA lbmethod_byrequests_module; static APR_OPTIONAL_FN_TYPE(proxy_balancer_get_best_worker) *ap_proxy_balancer_get_best_worker_fn = NULL; static int is_best_byrequests(proxy_worker *current, proxy_worker *prev_best, void *baton) { int *total_factor = (int *)baton; current->s->lbstatus += current->s->lbfactor; *total_factor += current->s->lbfactor; return (!prev_best || (current->s->lbstatus > prev_best->s->lbstatus)); } /* * The idea behind the find_best_byrequests scheduler is the following: * * lbfactor is "how much we expect this worker to work", or "the worker's * normalized work quota". * * lbstatus is "how urgent this worker has to work to fulfill its quota * of work". * * We distribute each worker's work quota to the worker, and then look * which of them needs to work most urgently (biggest lbstatus). This * worker is then selected for work, and its lbstatus reduced by the * total work quota we distributed to all workers. Thus the sum of all * lbstatus does not change.(*) * * If some workers are disabled, the others will * still be scheduled correctly. * * If a balancer is configured as follows: * * worker a b c d * lbfactor 25 25 25 25 * * And b gets disabled, the following schedule is produced: * * a c d a c d a c d ... * * Note that the above lbfactor setting is the *exact* same as: * * worker a b c d * lbfactor 1 1 1 1 * * Asymmetric configurations work as one would expect. For * example: * * worker a b c d * lbfactor 1 1 1 2 * * would have a, b and c all handling about the same * amount of load with d handling twice what a or b * or c handles individually. So we could see: * * b a d c d a c d b d ... * */ static proxy_worker *find_best_byrequests(proxy_balancer *balancer, request_rec *r) { int total_factor = 0; proxy_worker *worker = ap_proxy_balancer_get_best_worker_fn(balancer, r, is_best_byrequests, &total_factor); if (worker) { worker->s->lbstatus -= total_factor; } return worker; } /* assumed to be mutex protected by caller */ static apr_status_t reset(proxy_balancer *balancer, server_rec *s) { int i; proxy_worker **worker; worker = (proxy_worker **)balancer->workers->elts; for (i = 0; i < balancer->workers->nelts; i++, worker++) { (*worker)->s->lbstatus = 0; } return APR_SUCCESS; } static apr_status_t age(proxy_balancer *balancer, server_rec *s) { return APR_SUCCESS; } /* * How to add additional lbmethods: * 1. Create func which determines "best" candidate worker * (eg: find_best_bytraffic, above) * 2. Register it as a provider. */ static const proxy_balancer_method byrequests = { "byrequests", &find_best_byrequests, NULL, &reset, &age, NULL }; /* post_config hook: */ static int lbmethod_byrequests_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { /* lbmethod_byrequests_post_config() will be called twice during startup. So, don't * set up the static data the 1st time through. */ if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) { return OK; } ap_proxy_balancer_get_best_worker_fn = APR_RETRIEVE_OPTIONAL_FN(proxy_balancer_get_best_worker); if (!ap_proxy_balancer_get_best_worker_fn) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(10152) "mod_proxy must be loaded for mod_lbmethod_byrequests"); return !OK; } return OK; } static void register_hook(apr_pool_t *p) { ap_register_provider(p, PROXY_LBMETHOD, "byrequests", "0", &byrequests); ap_hook_post_config(lbmethod_byrequests_post_config, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(lbmethod_byrequests) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ NULL, /* command apr_table_t */ register_hook /* register hooks */ }; httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_bybusyness.mak0000644000000000000500000003206112701473373023445 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_lbmethod_bybusyness.dsp !IF "$(CFG)" == "" CFG=mod_lbmethod_bybusyness - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_lbmethod_bybusyness - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_lbmethod_bybusyness - Win32 Release" && "$(CFG)" != "mod_lbmethod_bybusyness - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_lbmethod_bybusyness.mak" CFG="mod_lbmethod_bybusyness - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_lbmethod_bybusyness - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_lbmethod_bybusyness - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_lbmethod_bybusyness.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy_balancer - Win32 Release" "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_lbmethod_bybusyness.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" "mod_proxy_balancer - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_lbmethod_bybusyness.obj" -@erase "$(INTDIR)\mod_lbmethod_bybusyness.res" -@erase "$(INTDIR)\mod_lbmethod_bybusyness_src.idb" -@erase "$(INTDIR)\mod_lbmethod_bybusyness_src.pdb" -@erase "$(OUTDIR)\mod_lbmethod_bybusyness.exp" -@erase "$(OUTDIR)\mod_lbmethod_bybusyness.lib" -@erase "$(OUTDIR)\mod_lbmethod_bybusyness.pdb" -@erase "$(OUTDIR)\mod_lbmethod_bybusyness.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_lbmethod_bybusyness_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_lbmethod_bybusyness.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_lbmethod_bybusyness.so" /d LONG_NAME="lbmethod_bybusyness_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_lbmethod_bybusyness.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_lbmethod_bybusyness.pdb" /debug /out:"$(OUTDIR)\mod_lbmethod_bybusyness.so" /implib:"$(OUTDIR)\mod_lbmethod_bybusyness.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_bybusyness.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_lbmethod_bybusyness.obj" \ "$(INTDIR)\mod_lbmethod_bybusyness.res" \ "..\..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\..\Release\libhttpd.lib" \ "..\Release\mod_proxy.lib" \ "..\Release\mod_proxy_balancer.lib" "$(OUTDIR)\mod_lbmethod_bybusyness.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_lbmethod_bybusyness.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_lbmethod_bybusyness.so" if exist .\Release\mod_lbmethod_bybusyness.so.manifest mt.exe -manifest .\Release\mod_lbmethod_bybusyness.so.manifest -outputresource:.\Release\mod_lbmethod_bybusyness.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_lbmethod_bybusyness.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy_balancer - Win32 Debug" "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_lbmethod_bybusyness.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" "mod_proxy_balancer - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_lbmethod_bybusyness.obj" -@erase "$(INTDIR)\mod_lbmethod_bybusyness.res" -@erase "$(INTDIR)\mod_lbmethod_bybusyness_src.idb" -@erase "$(INTDIR)\mod_lbmethod_bybusyness_src.pdb" -@erase "$(OUTDIR)\mod_lbmethod_bybusyness.exp" -@erase "$(OUTDIR)\mod_lbmethod_bybusyness.lib" -@erase "$(OUTDIR)\mod_lbmethod_bybusyness.pdb" -@erase "$(OUTDIR)\mod_lbmethod_bybusyness.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_lbmethod_bybusyness_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_lbmethod_bybusyness.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_lbmethod_bybusyness.so" /d LONG_NAME="lbmethod_bybusyness_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_lbmethod_bybusyness.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_lbmethod_bybusyness.pdb" /debug /out:"$(OUTDIR)\mod_lbmethod_bybusyness.so" /implib:"$(OUTDIR)\mod_lbmethod_bybusyness.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_bybusyness.so LINK32_OBJS= \ "$(INTDIR)\mod_lbmethod_bybusyness.obj" \ "$(INTDIR)\mod_lbmethod_bybusyness.res" \ "..\..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\..\Debug\libhttpd.lib" \ "..\Debug\mod_proxy.lib" \ "..\Debug\mod_proxy_balancer.lib" "$(OUTDIR)\mod_lbmethod_bybusyness.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_lbmethod_bybusyness.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_lbmethod_bybusyness.so" if exist .\Debug\mod_lbmethod_bybusyness.so.manifest mt.exe -manifest .\Debug\mod_lbmethod_bybusyness.so.manifest -outputresource:.\Debug\mod_lbmethod_bybusyness.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_lbmethod_bybusyness.dep") !INCLUDE "mod_lbmethod_bybusyness.dep" !ELSE !MESSAGE Warning: cannot find "mod_lbmethod_bybusyness.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Release" || "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Debug" SOURCE=.\mod_lbmethod_bybusyness.c "$(INTDIR)\mod_lbmethod_bybusyness.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy\balancers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy\balancers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy\balancers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy\balancers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy\balancers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy\balancers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Release" "mod_proxy - Win32 Release" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd ".\balancers" "mod_proxy - Win32 ReleaseCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd ".\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Debug" "mod_proxy - Win32 Debug" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd ".\balancers" "mod_proxy - Win32 DebugCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd ".\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Release" "mod_proxy_balancer - Win32 Release" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Release" cd ".\balancers" "mod_proxy_balancer - Win32 ReleaseCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Release" RECURSE=1 CLEAN cd ".\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Debug" "mod_proxy_balancer - Win32 Debug" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Debug" cd ".\balancers" "mod_proxy_balancer - Win32 DebugCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Debug" RECURSE=1 CLEAN cd ".\balancers" !ENDIF SOURCE=..\..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Release" "$(INTDIR)\mod_lbmethod_bybusyness.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_lbmethod_bybusyness.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_lbmethod_bybusyness.so" /d LONG_NAME="lbmethod_bybusyness_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Debug" "$(INTDIR)\mod_lbmethod_bybusyness.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_lbmethod_bybusyness.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_lbmethod_bybusyness.so" /d LONG_NAME="lbmethod_bybusyness_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_heartbeat.dsp0000644000000000000500000001213711177743604023221 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_lbmethod_heartbeat" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_lbmethod_heartbeat - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_lbmethod_heartbeat.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_lbmethod_heartbeat.mak" CFG="mod_lbmethod_heartbeat - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_lbmethod_heartbeat - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_lbmethod_heartbeat - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_lbmethod_heartbeat_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_lbmethod_heartbeat.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_lbmethod_heartbeat.so" /d LONG_NAME="lbmethod_heartbeat_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_lbmethod_heartbeat.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_heartbeat.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_lbmethod_heartbeat.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_heartbeat.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_lbmethod_heartbeat.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_lbmethod_heartbeat_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_lbmethod_heartbeat.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_lbmethod_heartbeat.so" /d LONG_NAME="lbmethod_heartbeat_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_lbmethod_heartbeat.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_heartbeat.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_lbmethod_heartbeat.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_heartbeat.so # Begin Special Build Tool TargetPath=.\Debug\mod_lbmethod_heartbeat.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_lbmethod_heartbeat - Win32 Release" # Name "mod_lbmethod_heartbeat - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_lbmethod_heartbeat.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=..\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_heartbeat.mak0000644000000000000500000003172512701473373023204 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_lbmethod_heartbeat.dsp !IF "$(CFG)" == "" CFG=mod_lbmethod_heartbeat - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_lbmethod_heartbeat - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_lbmethod_heartbeat - Win32 Release" && "$(CFG)" != "mod_lbmethod_heartbeat - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_lbmethod_heartbeat.mak" CFG="mod_lbmethod_heartbeat - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_lbmethod_heartbeat - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_lbmethod_heartbeat - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_lbmethod_heartbeat.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy_balancer - Win32 Release" "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_lbmethod_heartbeat.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" "mod_proxy_balancer - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_lbmethod_heartbeat.obj" -@erase "$(INTDIR)\mod_lbmethod_heartbeat.res" -@erase "$(INTDIR)\mod_lbmethod_heartbeat_src.idb" -@erase "$(INTDIR)\mod_lbmethod_heartbeat_src.pdb" -@erase "$(OUTDIR)\mod_lbmethod_heartbeat.exp" -@erase "$(OUTDIR)\mod_lbmethod_heartbeat.lib" -@erase "$(OUTDIR)\mod_lbmethod_heartbeat.pdb" -@erase "$(OUTDIR)\mod_lbmethod_heartbeat.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_lbmethod_heartbeat_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_lbmethod_heartbeat.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_lbmethod_heartbeat.so" /d LONG_NAME="lbmethod_heartbeat_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_lbmethod_heartbeat.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_lbmethod_heartbeat.pdb" /debug /out:"$(OUTDIR)\mod_lbmethod_heartbeat.so" /implib:"$(OUTDIR)\mod_lbmethod_heartbeat.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_heartbeat.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_lbmethod_heartbeat.obj" \ "$(INTDIR)\mod_lbmethod_heartbeat.res" \ "..\..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\..\Release\libhttpd.lib" \ "..\Release\mod_proxy.lib" \ "..\Release\mod_proxy_balancer.lib" "$(OUTDIR)\mod_lbmethod_heartbeat.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_lbmethod_heartbeat.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_lbmethod_heartbeat.so" if exist .\Release\mod_lbmethod_heartbeat.so.manifest mt.exe -manifest .\Release\mod_lbmethod_heartbeat.so.manifest -outputresource:.\Release\mod_lbmethod_heartbeat.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_lbmethod_heartbeat.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy_balancer - Win32 Debug" "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_lbmethod_heartbeat.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" "mod_proxy_balancer - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_lbmethod_heartbeat.obj" -@erase "$(INTDIR)\mod_lbmethod_heartbeat.res" -@erase "$(INTDIR)\mod_lbmethod_heartbeat_src.idb" -@erase "$(INTDIR)\mod_lbmethod_heartbeat_src.pdb" -@erase "$(OUTDIR)\mod_lbmethod_heartbeat.exp" -@erase "$(OUTDIR)\mod_lbmethod_heartbeat.lib" -@erase "$(OUTDIR)\mod_lbmethod_heartbeat.pdb" -@erase "$(OUTDIR)\mod_lbmethod_heartbeat.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_lbmethod_heartbeat_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_lbmethod_heartbeat.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_lbmethod_heartbeat.so" /d LONG_NAME="lbmethod_heartbeat_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_lbmethod_heartbeat.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_lbmethod_heartbeat.pdb" /debug /out:"$(OUTDIR)\mod_lbmethod_heartbeat.so" /implib:"$(OUTDIR)\mod_lbmethod_heartbeat.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_heartbeat.so LINK32_OBJS= \ "$(INTDIR)\mod_lbmethod_heartbeat.obj" \ "$(INTDIR)\mod_lbmethod_heartbeat.res" \ "..\..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\..\Debug\libhttpd.lib" \ "..\Debug\mod_proxy.lib" \ "..\Debug\mod_proxy_balancer.lib" "$(OUTDIR)\mod_lbmethod_heartbeat.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_lbmethod_heartbeat.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_lbmethod_heartbeat.so" if exist .\Debug\mod_lbmethod_heartbeat.so.manifest mt.exe -manifest .\Debug\mod_lbmethod_heartbeat.so.manifest -outputresource:.\Debug\mod_lbmethod_heartbeat.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_lbmethod_heartbeat.dep") !INCLUDE "mod_lbmethod_heartbeat.dep" !ELSE !MESSAGE Warning: cannot find "mod_lbmethod_heartbeat.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Release" || "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Debug" SOURCE=.\mod_lbmethod_heartbeat.c "$(INTDIR)\mod_lbmethod_heartbeat.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy\balancers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy\balancers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy\balancers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy\balancers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy\balancers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy\balancers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Release" "mod_proxy - Win32 Release" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd ".\balancers" "mod_proxy - Win32 ReleaseCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd ".\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Debug" "mod_proxy - Win32 Debug" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd ".\balancers" "mod_proxy - Win32 DebugCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd ".\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Release" "mod_proxy_balancer - Win32 Release" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Release" cd ".\balancers" "mod_proxy_balancer - Win32 ReleaseCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Release" RECURSE=1 CLEAN cd ".\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Debug" "mod_proxy_balancer - Win32 Debug" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Debug" cd ".\balancers" "mod_proxy_balancer - Win32 DebugCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Debug" RECURSE=1 CLEAN cd ".\balancers" !ENDIF SOURCE=..\..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Release" "$(INTDIR)\mod_lbmethod_heartbeat.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_lbmethod_heartbeat.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_lbmethod_heartbeat.so" /d LONG_NAME="lbmethod_heartbeat_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_lbmethod_heartbeat - Win32 Debug" "$(INTDIR)\mod_lbmethod_heartbeat.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_lbmethod_heartbeat.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_lbmethod_heartbeat.so" /d LONG_NAME="lbmethod_heartbeat_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_byrequests.dep0000644000000000000500000000566512674411515023456 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_lbmethod_byrequests.mak .\mod_lbmethod_byrequests.c : \ "..\..\..\include\ap_config.h"\ "..\..\..\include\ap_config_layout.h"\ "..\..\..\include\ap_expr.h"\ "..\..\..\include\ap_hooks.h"\ "..\..\..\include\ap_mmn.h"\ "..\..\..\include\ap_mpm.h"\ "..\..\..\include\ap_provider.h"\ "..\..\..\include\ap_regex.h"\ "..\..\..\include\ap_release.h"\ "..\..\..\include\ap_slotmem.h"\ "..\..\..\include\apache_noprobes.h"\ "..\..\..\include\http_config.h"\ "..\..\..\include\http_connection.h"\ "..\..\..\include\http_core.h"\ "..\..\..\include\http_log.h"\ "..\..\..\include\http_main.h"\ "..\..\..\include\http_protocol.h"\ "..\..\..\include\http_request.h"\ "..\..\..\include\http_vhost.h"\ "..\..\..\include\httpd.h"\ "..\..\..\include\os.h"\ "..\..\..\include\scoreboard.h"\ "..\..\..\include\util_cfgtree.h"\ "..\..\..\include\util_charset.h"\ "..\..\..\include\util_ebcdic.h"\ "..\..\..\include\util_filter.h"\ "..\..\..\include\util_mutex.h"\ "..\..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\..\srclib\apr-util\include\apr_date.h"\ "..\..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\..\srclib\apr-util\include\apu.h"\ "..\..\..\srclib\apr\include\apr.h"\ "..\..\..\srclib\apr\include\apr_allocator.h"\ "..\..\..\srclib\apr\include\apr_dso.h"\ "..\..\..\srclib\apr\include\apr_errno.h"\ "..\..\..\srclib\apr\include\apr_file_info.h"\ "..\..\..\srclib\apr\include\apr_file_io.h"\ "..\..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\..\srclib\apr\include\apr_general.h"\ "..\..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\..\srclib\apr\include\apr_hash.h"\ "..\..\..\srclib\apr\include\apr_inherit.h"\ "..\..\..\srclib\apr\include\apr_lib.h"\ "..\..\..\srclib\apr\include\apr_mmap.h"\ "..\..\..\srclib\apr\include\apr_network_io.h"\ "..\..\..\srclib\apr\include\apr_poll.h"\ "..\..\..\srclib\apr\include\apr_pools.h"\ "..\..\..\srclib\apr\include\apr_portable.h"\ "..\..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\..\srclib\apr\include\apr_ring.h"\ "..\..\..\srclib\apr\include\apr_shm.h"\ "..\..\..\srclib\apr\include\apr_strings.h"\ "..\..\..\srclib\apr\include\apr_tables.h"\ "..\..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\..\srclib\apr\include\apr_time.h"\ "..\..\..\srclib\apr\include\apr_user.h"\ "..\..\..\srclib\apr\include\apr_version.h"\ "..\..\..\srclib\apr\include\apr_want.h"\ "..\mod_proxy.h"\ ..\..\..\build\win32\httpd.rc : \ "..\..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_byrequests.dsp0000644000000000000500000001217511177743604023472 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_lbmethod_byrequests" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_lbmethod_byrequests - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_lbmethod_byrequests.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_lbmethod_byrequests.mak" CFG="mod_lbmethod_byrequests - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_lbmethod_byrequests - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_lbmethod_byrequests - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_lbmethod_byrequests_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_lbmethod_byrequests.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_lbmethod_byrequests.so" /d LONG_NAME="lbmethod_byrequests_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_lbmethod_byrequests.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_byrequests.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_lbmethod_byrequests.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_byrequests.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_lbmethod_byrequests.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_lbmethod_byrequests - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_lbmethod_byrequests_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_lbmethod_byrequests.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_lbmethod_byrequests.so" /d LONG_NAME="lbmethod_byrequests_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_lbmethod_byrequests.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_byrequests.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_lbmethod_byrequests.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_byrequests.so # Begin Special Build Tool TargetPath=.\Debug\mod_lbmethod_byrequests.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_lbmethod_byrequests - Win32 Release" # Name "mod_lbmethod_byrequests - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_lbmethod_byrequests.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=..\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_bybusyness.dsp0000644000000000000500000001217511177743604023472 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_lbmethod_bybusyness" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_lbmethod_bybusyness - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_lbmethod_bybusyness.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_lbmethod_bybusyness.mak" CFG="mod_lbmethod_bybusyness - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_lbmethod_bybusyness - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_lbmethod_bybusyness - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_lbmethod_bybusyness_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_lbmethod_bybusyness.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_lbmethod_bybusyness.so" /d LONG_NAME="lbmethod_bybusyness_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_lbmethod_bybusyness.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_bybusyness.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_lbmethod_bybusyness.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_bybusyness.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_lbmethod_bybusyness.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_lbmethod_bybusyness - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_lbmethod_bybusyness_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_lbmethod_bybusyness.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_lbmethod_bybusyness.so" /d LONG_NAME="lbmethod_bybusyness_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_lbmethod_bybusyness.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_bybusyness.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_lbmethod_bybusyness.so" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_bybusyness.so # Begin Special Build Tool TargetPath=.\Debug\mod_lbmethod_bybusyness.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_lbmethod_bybusyness - Win32 Release" # Name "mod_lbmethod_bybusyness - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_lbmethod_bybusyness.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=..\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_bytraffic.mak0000644000000000000500000003172512701473373023216 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_lbmethod_bytraffic.dsp !IF "$(CFG)" == "" CFG=mod_lbmethod_bytraffic - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_lbmethod_bytraffic - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_lbmethod_bytraffic - Win32 Release" && "$(CFG)" != "mod_lbmethod_bytraffic - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_lbmethod_bytraffic.mak" CFG="mod_lbmethod_bytraffic - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_lbmethod_bytraffic - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_lbmethod_bytraffic - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_lbmethod_bytraffic.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy_balancer - Win32 Release" "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_lbmethod_bytraffic.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" "mod_proxy_balancer - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_lbmethod_bytraffic.obj" -@erase "$(INTDIR)\mod_lbmethod_bytraffic.res" -@erase "$(INTDIR)\mod_lbmethod_bytraffic_src.idb" -@erase "$(INTDIR)\mod_lbmethod_bytraffic_src.pdb" -@erase "$(OUTDIR)\mod_lbmethod_bytraffic.exp" -@erase "$(OUTDIR)\mod_lbmethod_bytraffic.lib" -@erase "$(OUTDIR)\mod_lbmethod_bytraffic.pdb" -@erase "$(OUTDIR)\mod_lbmethod_bytraffic.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_lbmethod_bytraffic_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_lbmethod_bytraffic.res" /i "../../../include" /i "../../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_lbmethod_bytraffic.so" /d LONG_NAME="lbmethod_bytraffic_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_lbmethod_bytraffic.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_lbmethod_bytraffic.pdb" /debug /out:"$(OUTDIR)\mod_lbmethod_bytraffic.so" /implib:"$(OUTDIR)\mod_lbmethod_bytraffic.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_bytraffic.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_lbmethod_bytraffic.obj" \ "$(INTDIR)\mod_lbmethod_bytraffic.res" \ "..\..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\..\Release\libhttpd.lib" \ "..\Release\mod_proxy.lib" \ "..\Release\mod_proxy_balancer.lib" "$(OUTDIR)\mod_lbmethod_bytraffic.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_lbmethod_bytraffic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_lbmethod_bytraffic.so" if exist .\Release\mod_lbmethod_bytraffic.so.manifest mt.exe -manifest .\Release\mod_lbmethod_bytraffic.so.manifest -outputresource:.\Release\mod_lbmethod_bytraffic.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_lbmethod_bytraffic.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy_balancer - Win32 Debug" "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_lbmethod_bytraffic.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" "mod_proxy_balancer - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_lbmethod_bytraffic.obj" -@erase "$(INTDIR)\mod_lbmethod_bytraffic.res" -@erase "$(INTDIR)\mod_lbmethod_bytraffic_src.idb" -@erase "$(INTDIR)\mod_lbmethod_bytraffic_src.pdb" -@erase "$(OUTDIR)\mod_lbmethod_bytraffic.exp" -@erase "$(OUTDIR)\mod_lbmethod_bytraffic.lib" -@erase "$(OUTDIR)\mod_lbmethod_bytraffic.pdb" -@erase "$(OUTDIR)\mod_lbmethod_bytraffic.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I ".." /I "../../../include" /I "../../../srclib/apr/include" /I "../../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_lbmethod_bytraffic_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_lbmethod_bytraffic.res" /i "../../../include" /i "../../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_lbmethod_bytraffic.so" /d LONG_NAME="lbmethod_bytraffic_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_lbmethod_bytraffic.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_lbmethod_bytraffic.pdb" /debug /out:"$(OUTDIR)\mod_lbmethod_bytraffic.so" /implib:"$(OUTDIR)\mod_lbmethod_bytraffic.lib" /base:@..\..\..\os\win32\BaseAddr.ref,mod_lbmethod_bytraffic.so LINK32_OBJS= \ "$(INTDIR)\mod_lbmethod_bytraffic.obj" \ "$(INTDIR)\mod_lbmethod_bytraffic.res" \ "..\..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\..\Debug\libhttpd.lib" \ "..\Debug\mod_proxy.lib" \ "..\Debug\mod_proxy_balancer.lib" "$(OUTDIR)\mod_lbmethod_bytraffic.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_lbmethod_bytraffic.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_lbmethod_bytraffic.so" if exist .\Debug\mod_lbmethod_bytraffic.so.manifest mt.exe -manifest .\Debug\mod_lbmethod_bytraffic.so.manifest -outputresource:.\Debug\mod_lbmethod_bytraffic.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_lbmethod_bytraffic.dep") !INCLUDE "mod_lbmethod_bytraffic.dep" !ELSE !MESSAGE Warning: cannot find "mod_lbmethod_bytraffic.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Release" || "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Debug" SOURCE=.\mod_lbmethod_bytraffic.c "$(INTDIR)\mod_lbmethod_bytraffic.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy\balancers" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy\balancers" "libapr - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy\balancers" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy\balancers" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy\balancers" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy\balancers" "libhttpd - Win32 DebugCLEAN" : cd ".\..\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Release" "mod_proxy - Win32 Release" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd ".\balancers" "mod_proxy - Win32 ReleaseCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd ".\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Debug" "mod_proxy - Win32 Debug" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd ".\balancers" "mod_proxy - Win32 DebugCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd ".\balancers" !ENDIF !IF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Release" "mod_proxy_balancer - Win32 Release" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Release" cd ".\balancers" "mod_proxy_balancer - Win32 ReleaseCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Release" RECURSE=1 CLEAN cd ".\balancers" !ELSEIF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Debug" "mod_proxy_balancer - Win32 Debug" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Debug" cd ".\balancers" "mod_proxy_balancer - Win32 DebugCLEAN" : cd ".\.." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Debug" RECURSE=1 CLEAN cd ".\balancers" !ENDIF SOURCE=..\..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Release" "$(INTDIR)\mod_lbmethod_bytraffic.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_lbmethod_bytraffic.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_lbmethod_bytraffic.so" /d LONG_NAME="lbmethod_bytraffic_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_lbmethod_bytraffic - Win32 Debug" "$(INTDIR)\mod_lbmethod_bytraffic.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_lbmethod_bytraffic.res" /i "../../../include" /i "../../../srclib/apr/include" /i "../../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_lbmethod_bytraffic.so" /d LONG_NAME="lbmethod_bytraffic_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/balancers/config2.m40000644000000000000500000000106712735002637017621 0ustar rootsrcAPACHE_MODPATH_INIT(proxy/balancers) APACHE_MODULE(lbmethod_byrequests, Apache proxy Load balancing by request counting, , , $enable_proxy_balancer, , proxy_balancer) APACHE_MODULE(lbmethod_bytraffic, Apache proxy Load balancing by traffic counting, , , $enable_proxy_balancer, , proxy_balancer) APACHE_MODULE(lbmethod_bybusyness, Apache proxy Load balancing by busyness, , , $enable_proxy_balancer, , proxy_balancer) APACHE_MODULE(lbmethod_heartbeat, Apache proxy Load balancing from Heartbeats, , , $enable_proxy_balancer, , proxy_balancer) APACHE_MODPATH_FINISH httpd-2.4.41/modules/proxy/balancers/Makefile.in0000644000000000000500000000026711115517761020076 0ustar rootsrc# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/proxy/balancers/mod_lbmethod_bybusyness.c0000644000000000000500000000753513345726637023140 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_proxy.h" #include "scoreboard.h" #include "ap_mpm.h" #include "apr_version.h" #include "ap_hooks.h" module AP_MODULE_DECLARE_DATA lbmethod_bybusyness_module; static APR_OPTIONAL_FN_TYPE(proxy_balancer_get_best_worker) *ap_proxy_balancer_get_best_worker_fn = NULL; static int is_best_bybusyness(proxy_worker *current, proxy_worker *prev_best, void *baton) { int *total_factor = (int *)baton; current->s->lbstatus += current->s->lbfactor; *total_factor += current->s->lbfactor; return ( !prev_best || (current->s->busy < prev_best->s->busy) || ( (current->s->busy == prev_best->s->busy) && (current->s->lbstatus > prev_best->s->lbstatus) ) ); } static proxy_worker *find_best_bybusyness(proxy_balancer *balancer, request_rec *r) { int total_factor = 0; proxy_worker *worker = ap_proxy_balancer_get_best_worker_fn(balancer, r, is_best_bybusyness, &total_factor); if (worker) { worker->s->lbstatus -= total_factor; } return worker; } /* assumed to be mutex protected by caller */ static apr_status_t reset(proxy_balancer *balancer, server_rec *s) { int i; proxy_worker **worker; worker = (proxy_worker **)balancer->workers->elts; for (i = 0; i < balancer->workers->nelts; i++, worker++) { (*worker)->s->lbstatus = 0; (*worker)->s->busy = 0; } return APR_SUCCESS; } static apr_status_t age(proxy_balancer *balancer, server_rec *s) { return APR_SUCCESS; } static const proxy_balancer_method bybusyness = { "bybusyness", &find_best_bybusyness, NULL, &reset, &age, NULL }; /* post_config hook: */ static int lbmethod_bybusyness_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { /* lbmethod_bybusyness_post_config() will be called twice during startup. So, don't * set up the static data the 1st time through. */ if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) { return OK; } ap_proxy_balancer_get_best_worker_fn = APR_RETRIEVE_OPTIONAL_FN(proxy_balancer_get_best_worker); if (!ap_proxy_balancer_get_best_worker_fn) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(10151) "mod_proxy must be loaded for mod_lbmethod_bybusyness"); return !OK; } return OK; } static void register_hook(apr_pool_t *p) { ap_register_provider(p, PROXY_LBMETHOD, "bybusyness", "0", &bybusyness); ap_hook_post_config(lbmethod_bybusyness_post_config, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(lbmethod_bybusyness) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ NULL, /* command apr_table_t */ register_hook /* register hooks */ }; httpd-2.4.41/modules/proxy/ajp.h0000644000000000000500000003701612473142031015014 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ajp.h * @brief Apache Jserv Protocol * * @defgroup AJP_defines mod_proxy AJP definitions * @ingroup APACHE_INTERNAL * @{ */ #ifndef AJP_H #define AJP_H #include "apr_version.h" #include "apr.h" #include "apr_hooks.h" #include "apr_lib.h" #include "apr_strings.h" #include "apr_buckets.h" #include "apr_md5.h" #include "apr_network_io.h" #include "apr_poll.h" #include "apr_pools.h" #include "apr_strings.h" #include "apr_uri.h" #include "apr_date.h" #include "apr_fnmatch.h" #define APR_WANT_STRFUNC #include "apr_want.h" #if APR_HAVE_NETINET_IN_H #include #endif #if APR_HAVE_ARPA_INET_H #include #endif #define AJP13_DEF_HOST "127.0.0.1" #ifdef NETWARE #define AJP13_DEF_PORT 9009 /* default to 9009 since 8009 is used by OS */ #else #define AJP13_DEF_PORT 8009 #endif /* The following environment variables match mod_ssl! */ #define AJP13_HTTPS_INDICATOR "HTTPS" #define AJP13_SSL_PROTOCOL_INDICATOR "SSL_PROTOCOL" #define AJP13_SSL_CLIENT_CERT_INDICATOR "SSL_CLIENT_CERT" #define AJP13_SSL_CIPHER_INDICATOR "SSL_CIPHER" #define AJP13_SSL_SESSION_INDICATOR "SSL_SESSION_ID" #define AJP13_SSL_KEY_SIZE_INDICATOR "SSL_CIPHER_USEKEYSIZE" #ifdef AJP_USE_HTTPD_WRAP #include "httpd_wrap.h" #else #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_core.h" #include "http_protocol.h" #include "http_main.h" #include "http_log.h" #endif #include "mod_proxy.h" #include "util_ebcdic.h" /** AJP Specific error codes */ /** Buffer overflow exception */ #define AJP_EOVERFLOW (APR_OS_START_USERERR + 1) /** Destination Buffer is to small */ #define AJP_ETOSMALL (APR_OS_START_USERERR + 2) /** Invalid input parameters */ #define AJP_EINVAL (APR_OS_START_USERERR + 3) /** Bad message signature */ #define AJP_EBAD_SIGNATURE (APR_OS_START_USERERR + 4) /** Incoming message too bg */ #define AJP_ETOBIG (APR_OS_START_USERERR + 5) /** Missing message header */ #define AJP_ENO_HEADER (APR_OS_START_USERERR + 6) /** Bad message header */ #define AJP_EBAD_HEADER (APR_OS_START_USERERR + 7) /** Bad message */ #define AJP_EBAD_MESSAGE (APR_OS_START_USERERR + 8) /** Cant log via AJP14 */ #define AJP_ELOGFAIL (APR_OS_START_USERERR + 9) /** Bad request method */ #define AJP_EBAD_METHOD (APR_OS_START_USERERR + 10) /** A structure that represents ajp message */ typedef struct ajp_msg ajp_msg_t; /** A structure that represents ajp message */ struct ajp_msg { /** The buffer holding a AJP message */ apr_byte_t *buf; /** The length of AJP message header (defaults to AJP_HEADER_LEN) */ apr_size_t header_len; /** The length of AJP message */ apr_size_t len; /** The current read position */ apr_size_t pos; /** Flag indicating the origing of the message */ int server_side; /** The size of the buffer */ apr_size_t max_size; }; /** * Signature for the messages sent from Apache to tomcat */ #define AJP13_WS_HEADER 0x1234 #define AJP_HEADER_LEN 4 #define AJP_HEADER_SZ_LEN 2 #define AJP_HEADER_SZ 6 #define AJP_MSG_BUFFER_SZ 8192 #define AJP_MAX_BUFFER_SZ 65536 #define AJP13_MAX_SEND_BODY_SZ (AJP_MAX_BUFFER_SZ - AJP_HEADER_SZ) #define AJP_PING_PONG_SZ 128 /** Send a request from web server to container*/ #define CMD_AJP13_FORWARD_REQUEST (unsigned char)2 /** Write a body chunk from the servlet container to the web server */ #define CMD_AJP13_SEND_BODY_CHUNK (unsigned char)3 /** Send response headers from the servlet container to the web server. */ #define CMD_AJP13_SEND_HEADERS (unsigned char)4 /** Marks the end of response. */ #define CMD_AJP13_END_RESPONSE (unsigned char)5 /** Get further data from the web server if it hasn't all been transferred yet. */ #define CMD_AJP13_GET_BODY_CHUNK (unsigned char)6 /** The web server asks the container to shut itself down. */ #define CMD_AJP13_SHUTDOWN (unsigned char)7 /** Webserver ask container to take control (logon phase) */ #define CMD_AJP13_PING (unsigned char)8 /** Container response to cping request */ #define CMD_AJP13_CPONG (unsigned char)9 /** Webserver check if container is alive, since container should respond by cpong */ #define CMD_AJP13_CPING (unsigned char)10 /** @} */ /** * @defgroup AJP_api AJP API functions * @ingroup MOD_PROXY * @{ */ /** * Check a new AJP Message by looking at signature and return its size * * @param msg AJP Message to check * @param len Pointer to returned len * @return APR_SUCCESS or error */ apr_status_t ajp_msg_check_header(ajp_msg_t *msg, apr_size_t *len); /** * Reset an AJP Message * * @param msg AJP Message to reset * @return APR_SUCCESS or error */ apr_status_t ajp_msg_reset(ajp_msg_t *msg); /** * Reuse an AJP Message * * @param msg AJP Message to reuse * @return APR_SUCCESS or error */ apr_status_t ajp_msg_reuse(ajp_msg_t *msg); /** * Mark the end of an AJP Message * * @param msg AJP Message to end * @return APR_SUCCESS or error */ apr_status_t ajp_msg_end(ajp_msg_t *msg); /** * Add an unsigned 32bits value to AJP Message * * @param msg AJP Message to get value from * @param value value to add to AJP Message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_append_uint32(ajp_msg_t *msg, apr_uint32_t value); /** * Add an unsigned 16bits value to AJP Message * * @param msg AJP Message to get value from * @param value value to add to AJP Message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_append_uint16(ajp_msg_t *msg, apr_uint16_t value); /** * Add an unsigned 8bits value to AJP Message * * @param msg AJP Message to get value from * @param value value to add to AJP Message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_append_uint8(ajp_msg_t *msg, apr_byte_t value); /** * Add a String in AJP message, and transform the String in ASCII * if convert is set and we're on an EBCDIC machine * * @param msg AJP Message to get value from * @param value Pointer to String * @param convert When set told to convert String to ASCII * @return APR_SUCCESS or error */ apr_status_t ajp_msg_append_string_ex(ajp_msg_t *msg, const char *value, int convert); /** * Add a String in AJP message, and transform * the String in ASCII if we're on an EBCDIC machine */ #define ajp_msg_append_string(m, v) ajp_msg_append_string_ex(m, v, 1) /** * Add a String in AJP message. */ #define ajp_msg_append_string_ascii(m, v) ajp_msg_append_string_ex(m, v, 0) /** * Add a Byte array to AJP Message * * @param msg AJP Message to get value from * @param value Pointer to Byte array * @param valuelen Byte array len * @return APR_SUCCESS or error */ apr_status_t ajp_msg_append_bytes(ajp_msg_t *msg, const apr_byte_t *value, apr_size_t valuelen); /** * Get a 32bits unsigned value from AJP Message * * @param msg AJP Message to get value from * @param rvalue Pointer where value will be returned * @return APR_SUCCESS or error */ apr_status_t ajp_msg_get_uint32(ajp_msg_t *msg, apr_uint32_t *rvalue); /** * Get a 16bits unsigned value from AJP Message * * @param msg AJP Message to get value from * @param rvalue Pointer where value will be returned * @return APR_SUCCESS or error */ apr_status_t ajp_msg_get_uint16(ajp_msg_t *msg, apr_uint16_t *rvalue); /** * Peek a 16bits unsigned value from AJP Message, position in message * is not updated * * @param msg AJP Message to get value from * @param rvalue Pointer where value will be returned * @return APR_SUCCESS or error */ apr_status_t ajp_msg_peek_uint16(ajp_msg_t *msg, apr_uint16_t *rvalue); /** * Get a 8bits unsigned value from AJP Message * * @param msg AJP Message to get value from * @param rvalue Pointer where value will be returned * @return APR_SUCCESS or error */ apr_status_t ajp_msg_get_uint8(ajp_msg_t *msg, apr_byte_t *rvalue); /** * Peek a 8bits unsigned value from AJP Message, position in message * is not updated * * @param msg AJP Message to get value from * @param rvalue Pointer where value will be returned * @return APR_SUCCESS or error */ apr_status_t ajp_msg_peek_uint8(ajp_msg_t *msg, apr_byte_t *rvalue); /** * Get a String value from AJP Message * * @param msg AJP Message to get value from * @param rvalue Pointer where value will be returned * @return APR_SUCCESS or error */ apr_status_t ajp_msg_get_string(ajp_msg_t *msg, const char **rvalue); /** * Get a Byte array from AJP Message * * @param msg AJP Message to get value from * @param rvalue Pointer where value will be returned * @param rvalue_len Pointer where Byte array len will be returned * @return APR_SUCCESS or error */ apr_status_t ajp_msg_get_bytes(ajp_msg_t *msg, apr_byte_t **rvalue, apr_size_t *rvalue_len); /** * Create an AJP Message from pool * * @param pool memory pool to allocate AJP message from * @param size size of the buffer to create * @param rmsg Pointer to newly created AJP message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_create(apr_pool_t *pool, apr_size_t size, ajp_msg_t **rmsg); /** * Recopy an AJP Message to another * * @param smsg source AJP message * @param dmsg destination AJP message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_copy(ajp_msg_t *smsg, ajp_msg_t *dmsg); /** * Serialize in an AJP Message a PING command * * +-----------------------+ * | PING CMD (1 byte) | * +-----------------------+ * * @param msg AJP message to put serialized message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_serialize_ping(ajp_msg_t *msg); /** * Serialize in an AJP Message a CPING command * * +-----------------------+ * | CPING CMD (1 byte) | * +-----------------------+ * * @param msg AJP message to put serialized message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_serialize_cping(ajp_msg_t *msg); /** * Dump up to the first 1024 bytes on an AJP Message * * @param pool pool to allocate from * @param msg AJP Message to dump * @param err error string to display * @param count the number of bytes to dump * @param buf buffer pointer for dump message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_dump(apr_pool_t *pool, ajp_msg_t *msg, char *err, apr_size_t count, char **buf); /** * Log an AJP message * * @param r The current request * @param msg AJP Message to dump * @param err error string to display * @return APR_SUCCESS or error */ apr_status_t ajp_msg_log(request_rec *r, ajp_msg_t *msg, char *err); /** * Send an AJP message to backend * * @param sock backend socket * @param msg AJP message to put serialized message * @return APR_SUCCESS or error */ apr_status_t ajp_ilink_send(apr_socket_t *sock, ajp_msg_t *msg); /** * Receive an AJP message from backend * * @param sock backend socket * @param msg AJP message to put serialized message * @return APR_SUCCESS or error */ apr_status_t ajp_ilink_receive(apr_socket_t *sock, ajp_msg_t *msg); /** * Build the ajp header message and send it * @param sock backend socket * @param r current request * @param buffsize max size of the AJP packet. * @param uri requested uri * @return APR_SUCCESS or error */ apr_status_t ajp_send_header(apr_socket_t *sock, request_rec *r, apr_size_t buffsize, apr_uri_t *uri); /** * Read the ajp message and return the type of the message. * @param sock backend socket * @param r current request * @param buffsize size of the buffer. * @param msg returned AJP message * @return APR_SUCCESS or error */ apr_status_t ajp_read_header(apr_socket_t *sock, request_rec *r, apr_size_t buffsize, ajp_msg_t **msg); /** * Allocate a msg to send data * @param pool pool to allocate from * @param ptr data buffer * @param len the length of allocated data buffer * @param msg returned AJP message * @return APR_SUCCESS or error */ apr_status_t ajp_alloc_data_msg(apr_pool_t *pool, char **ptr, apr_size_t *len, ajp_msg_t **msg); /** * Send the data message * @param sock backend socket * @param msg AJP message to send * @param len AJP message length * @return APR_SUCCESS or error */ apr_status_t ajp_send_data_msg(apr_socket_t *sock, ajp_msg_t *msg, apr_size_t len); /** * Parse the message type * @param r current request * @param msg AJP message * @return AJP message type. */ int ajp_parse_type(request_rec *r, ajp_msg_t *msg); /** * Parse the header message from container * @param r current request * @param conf proxy config * @param msg AJP message * @return APR_SUCCESS or error */ apr_status_t ajp_parse_header(request_rec *r, proxy_dir_conf *conf, ajp_msg_t *msg); /** * Parse the message body and return data address and length * @param r current request * @param msg AJP message * @param len returned AJP message length * @param ptr returned data * @return APR_SUCCESS or error */ apr_status_t ajp_parse_data(request_rec *r, ajp_msg_t *msg, apr_uint16_t *len, char **ptr); /** * Check the reuse flag in CMD_AJP13_END_RESPONSE * @param r current request * @param msg AJP message * @param reuse returned reuse flag * @return APR_SUCCESS or error */ apr_status_t ajp_parse_reuse(request_rec *r, ajp_msg_t *msg, apr_byte_t *reuse); /** * Handle the CPING/CPONG messages * @param sock backend socket * @param r current request * @param timeout time window for receiving cpong reply * @return APR_SUCCESS or error */ apr_status_t ajp_handle_cping_cpong(apr_socket_t *sock, request_rec *r, apr_interval_time_t timeout); /** * Convert numeric message type into string * @param type AJP message type * @return AJP message type as a string */ const char *ajp_type_str(int type); /** @} */ #endif /* AJP_H */ httpd-2.4.41/modules/proxy/NWGNUproxyhcheck0000644000000000000500000001046513163000600017151 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(SRC)/include \ $(STDMOD)/core \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxyhcheck # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy Health Check Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Proxy Health Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = $(OBJDIR)/$(NLM_NAME).nlm # # If there is an LIB target, put it here # TARGET_lib = # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_proxy_hcheck.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ libc \ aprlib \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ @mod_proxy.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ proxy_hcheck_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/mod_proxy_hcheck.c0000644000000000000500000012650013520037641017563 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_proxy.h" #include "mod_watchdog.h" #include "ap_slotmem.h" #include "ap_expr.h" #if APR_HAS_THREADS #include "apr_thread_pool.h" #endif module AP_MODULE_DECLARE_DATA proxy_hcheck_module; #define HCHECK_WATHCHDOG_NAME ("_proxy_hcheck_") #define HC_THREADPOOL_SIZE (16) /* Why? So we can easily set/clear HC_USE_THREADS during dev testing */ #if APR_HAS_THREADS #ifndef HC_USE_THREADS #define HC_USE_THREADS 1 #endif #else #define HC_USE_THREADS 0 typedef void apr_thread_pool_t; #endif typedef struct { char *name; hcmethod_t method; int passes; int fails; apr_interval_time_t interval; char *hurl; char *hcexpr; } hc_template_t; typedef struct { char *expr; ap_expr_info_t *pexpr; /* parsed expression */ } hc_condition_t; typedef struct { apr_pool_t *p; apr_array_header_t *templates; apr_table_t *conditions; apr_hash_t *hcworkers; server_rec *s; } sctx_t; /* Used in the HC worker via the context field */ typedef struct { const char *path; /* The path of the original worker URL */ const char *method; /* Method string for the HTTP/AJP request */ const char *req; /* pre-formatted HTTP/AJP request */ proxy_worker *w; /* Pointer to the actual worker */ } wctx_t; typedef struct { apr_pool_t *ptemp; sctx_t *ctx; proxy_balancer *balancer; proxy_worker *worker; proxy_worker *hc; apr_time_t now; } baton_t; static void *hc_create_config(apr_pool_t *p, server_rec *s) { sctx_t *ctx = apr_pcalloc(p, sizeof(sctx_t)); ctx->s = s; apr_pool_create(&ctx->p, p); apr_pool_tag(ctx->p, "proxy_hcheck"); ctx->templates = apr_array_make(p, 10, sizeof(hc_template_t)); ctx->conditions = apr_table_make(p, 10); ctx->hcworkers = apr_hash_make(p); return ctx; } static ap_watchdog_t *watchdog; static int tpsize = HC_THREADPOOL_SIZE; /* * This serves double duty by not only validating (and creating) * the health-check template, but also ties into set_worker_param() * which does the actual setting of worker params in shm. */ static const char *set_worker_hc_param(apr_pool_t *p, server_rec *s, proxy_worker *worker, const char *key, const char *val, void *v) { int ival; hc_template_t *temp; sctx_t *ctx = (sctx_t *) ap_get_module_config(s->module_config, &proxy_hcheck_module); if (!worker && !v) { return "Bad call to set_worker_hc_param()"; } if (!ctx) { ctx = hc_create_config(p, s); ap_set_module_config(s->module_config, &proxy_hcheck_module, ctx); } temp = (hc_template_t *)v; if (!strcasecmp(key, "hctemplate")) { hc_template_t *template; template = (hc_template_t *)ctx->templates->elts; for (ival = 0; ival < ctx->templates->nelts; ival++, template++) { if (!ap_cstr_casecmp(template->name, val)) { if (worker) { worker->s->method = template->method; worker->s->interval = template->interval; worker->s->passes = template->passes; worker->s->fails = template->fails; PROXY_STRNCPY(worker->s->hcuri, template->hurl); PROXY_STRNCPY(worker->s->hcexpr, template->hcexpr); } else { temp->method = template->method; temp->interval = template->interval; temp->passes = template->passes; temp->fails = template->fails; temp->hurl = apr_pstrdup(p, template->hurl); temp->hcexpr = apr_pstrdup(p, template->hcexpr); } return NULL; } } return apr_psprintf(p, "Unknown ProxyHCTemplate name: %s", val); } else if (!strcasecmp(key, "hcmethod")) { proxy_hcmethods_t *method = proxy_hcmethods; for (; method->name; method++) { if (!ap_cstr_casecmp(val, method->name)) { if (!method->implemented) { return apr_psprintf(p, "Health check method %s not (yet) implemented", val); } if (worker) { worker->s->method = method->method; } else { temp->method = method->method; } return NULL; } } return "Unknown method"; } else if (!strcasecmp(key, "hcinterval")) { apr_interval_time_t hci; apr_status_t rv; rv = ap_timeout_parameter_parse(val, &hci, "s"); if (rv != APR_SUCCESS) return "Unparse-able hcinterval setting"; if (hci < AP_WD_TM_SLICE) return apr_psprintf(p, "Interval must be a positive value greater than %" APR_TIME_T_FMT "ms", apr_time_as_msec(AP_WD_TM_SLICE)); if (worker) { worker->s->interval = hci; } else { temp->interval = hci; } } else if (!strcasecmp(key, "hcpasses")) { ival = atoi(val); if (ival < 0) return "Passes must be a positive value"; if (worker) { worker->s->passes = ival; } else { temp->passes = ival; } } else if (!strcasecmp(key, "hcfails")) { ival = atoi(val); if (ival < 0) return "Fails must be a positive value"; if (worker) { worker->s->fails = ival; } else { temp->fails = ival; } } else if (!strcasecmp(key, "hcuri")) { if (strlen(val) >= sizeof(worker->s->hcuri)) return apr_psprintf(p, "Health check uri length must be < %d characters", (int)sizeof(worker->s->hcuri)); if (worker) { PROXY_STRNCPY(worker->s->hcuri, val); } else { temp->hurl = apr_pstrdup(p, val); } } else if (!strcasecmp(key, "hcexpr")) { hc_condition_t *cond; cond = (hc_condition_t *)apr_table_get(ctx->conditions, val); if (!cond) { return apr_psprintf(p, "Unknown health check condition expr: %s", val); } /* This check is wonky... a known expr can't be this big. Check anyway */ if (strlen(val) >= sizeof(worker->s->hcexpr)) return apr_psprintf(p, "Health check uri length must be < %d characters", (int)sizeof(worker->s->hcexpr)); if (worker) { PROXY_STRNCPY(worker->s->hcexpr, val); } else { temp->hcexpr = apr_pstrdup(p, val); } } else { return "unknown Worker hcheck parameter"; } return NULL; } static const char *set_hc_condition(cmd_parms *cmd, void *dummy, const char *arg) { char *name = NULL; char *expr; sctx_t *ctx; hc_condition_t *cond; const char *err = ap_check_cmd_context(cmd, NOT_IN_HTACCESS); if (err) return err; ctx = (sctx_t *) ap_get_module_config(cmd->server->module_config, &proxy_hcheck_module); name = ap_getword_conf(cmd->pool, &arg); if (!*name) { return apr_pstrcat(cmd->temp_pool, "Missing expression name for ", cmd->cmd->name, NULL); } if (strlen(name) > (PROXY_WORKER_MAX_SCHEME_SIZE - 1)) { return apr_psprintf(cmd->temp_pool, "Expression name limited to %d characters", (PROXY_WORKER_MAX_SCHEME_SIZE - 1)); } /* get expr. Allow fancy new {...} quoting style */ expr = ap_getword_conf2(cmd->temp_pool, &arg); if (!*expr) { return apr_pstrcat(cmd->temp_pool, "Missing expression for ", cmd->cmd->name, NULL); } cond = apr_palloc(cmd->pool, sizeof(hc_condition_t)); cond->pexpr = ap_expr_parse_cmd(cmd, expr, 0, &err, NULL); if (err) { return apr_psprintf(cmd->temp_pool, "Could not parse expression \"%s\": %s", expr, err); } cond->expr = apr_pstrdup(cmd->pool, expr); apr_table_setn(ctx->conditions, name, (void *)cond); expr = ap_getword_conf(cmd->temp_pool, &arg); if (*expr) { return "error: extra parameter(s)"; } return NULL; } static const char *set_hc_template(cmd_parms *cmd, void *dummy, const char *arg) { char *name = NULL; char *word, *val; hc_template_t *template; sctx_t *ctx; const char *err = ap_check_cmd_context(cmd, NOT_IN_HTACCESS); if (err) return err; ctx = (sctx_t *) ap_get_module_config(cmd->server->module_config, &proxy_hcheck_module); name = ap_getword_conf(cmd->temp_pool, &arg); if (!*name) { return apr_pstrcat(cmd->temp_pool, "Missing template name for ", cmd->cmd->name, NULL); } template = (hc_template_t *)apr_array_push(ctx->templates); template->name = apr_pstrdup(cmd->pool, name); template->method = template->passes = template->fails = 1; template->interval = apr_time_from_sec(HCHECK_WATHCHDOG_DEFAULT_INTERVAL); template->hurl = NULL; template->hcexpr = NULL; while (*arg) { word = ap_getword_conf(cmd->pool, &arg); val = strchr(word, '='); if (!val) { return "Invalid ProxyHCTemplate parameter. Parameter must be " "in the form 'key=value'"; } else *val++ = '\0'; err = set_worker_hc_param(cmd->pool, ctx->s, NULL, word, val, template); if (err) { /* get rid of recently pushed (bad) template */ apr_array_pop(ctx->templates); return apr_pstrcat(cmd->temp_pool, "ProxyHCTemplate: ", err, " ", word, "=", val, "; ", name, NULL); } /* No error means we have a valid template */ } return NULL; } #if HC_USE_THREADS static const char *set_hc_tpsize (cmd_parms *cmd, void *dummy, const char *arg) { const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err) return err; tpsize = atoi(arg); if (tpsize < 0) return "Invalid ProxyHCTPsize parameter. Parameter must be " ">= 0"; return NULL; } #endif /* * Create a dummy request rec, simply so we can use ap_expr. * Use our short-lived pool for bucket_alloc so that we can simply move * buckets and use them after the backend connection is released. */ static request_rec *create_request_rec(apr_pool_t *p, server_rec *s, proxy_balancer *balancer, const char *method) { request_rec *r; r = apr_pcalloc(p, sizeof(request_rec)); r->pool = p; r->server = s; r->per_dir_config = r->server->lookup_defaults; if (balancer->section_config) { r->per_dir_config = ap_merge_per_dir_configs(r->pool, r->per_dir_config, balancer->section_config); } r->proxyreq = PROXYREQ_RESPONSE; r->user = NULL; r->ap_auth_type = NULL; r->allowed_methods = ap_make_method_list(p, 2); r->headers_in = apr_table_make(r->pool, 1); r->trailers_in = apr_table_make(r->pool, 1); r->subprocess_env = apr_table_make(r->pool, 25); r->headers_out = apr_table_make(r->pool, 12); r->err_headers_out = apr_table_make(r->pool, 5); r->trailers_out = apr_table_make(r->pool, 1); r->notes = apr_table_make(r->pool, 5); r->request_config = ap_create_request_config(r->pool); /* Must be set before we run create request hook */ r->sent_bodyct = 0; /* bytect isn't for body */ r->read_length = 0; r->read_body = REQUEST_NO_BODY; r->status = HTTP_OK; /* Until further notice */ r->the_request = NULL; /* Begin by presuming any module can make its own path_info assumptions, * until some module interjects and changes the value. */ r->used_path_info = AP_REQ_DEFAULT_PATH_INFO; /* Time to populate r with the data we have. */ r->method = method; /* Provide quick information about the request method as soon as known */ r->method_number = ap_method_number_of(r->method); if (r->method_number == M_OPTIONS || (r->method_number == M_GET && r->method[0] == 'H')) { r->header_only = 1; } else { r->header_only = 0; } r->protocol = "HTTP/1.0"; r->proto_num = HTTP_VERSION(1, 0); r->hostname = NULL; return r; } static void set_request_connection(request_rec *r, conn_rec *conn) { conn->bucket_alloc = apr_bucket_alloc_create(r->pool); r->connection = conn; r->kept_body = apr_brigade_create(r->pool, conn->bucket_alloc); r->output_filters = r->proto_output_filters = conn->output_filters; r->input_filters = r->proto_input_filters = conn->input_filters; r->useragent_addr = conn->client_addr; r->useragent_ip = conn->client_ip; } static void create_hcheck_req(wctx_t *wctx, proxy_worker *hc, apr_pool_t *p) { char *req = NULL; const char *method = NULL; switch (hc->s->method) { case OPTIONS: method = "OPTIONS"; req = apr_psprintf(p, "OPTIONS * HTTP/1.0\r\n" "Host: %s:%d\r\n" "\r\n", hc->s->hostname_ex, (int)hc->s->port); break; case HEAD: method = "HEAD"; /* fallthru */ case GET: if (!method) { /* did we fall thru? If not, we are GET */ method = "GET"; } req = apr_psprintf(p, "%s %s%s%s HTTP/1.0\r\n" "Host: %s:%d\r\n" "\r\n", method, (wctx->path ? wctx->path : ""), (wctx->path && *hc->s->hcuri ? "/" : "" ), (*hc->s->hcuri ? hc->s->hcuri : ""), hc->s->hostname_ex, (int)hc->s->port); break; default: break; } wctx->req = req; wctx->method = method; } static proxy_worker *hc_get_hcworker(sctx_t *ctx, proxy_worker *worker, apr_pool_t *p) { proxy_worker *hc = NULL; apr_port_t port; hc = (proxy_worker *)apr_hash_get(ctx->hcworkers, &worker, sizeof worker); if (!hc) { apr_uri_t uri; apr_status_t rv; const char *url = worker->s->name; wctx_t *wctx = apr_pcalloc(ctx->p, sizeof(wctx_t)); port = (worker->s->port ? worker->s->port : ap_proxy_port_of_scheme(worker->s->scheme)); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ctx->s, APLOGNO(03248) "Creating hc worker %pp for %s://%s:%d", worker, worker->s->scheme, worker->s->hostname_ex, (int)port); ap_proxy_define_worker(ctx->p, &hc, NULL, NULL, worker->s->name, 0); apr_snprintf(hc->s->name, sizeof hc->s->name, "%pp", worker); PROXY_STRNCPY(hc->s->hostname, worker->s->hostname); /* for compatibility */ PROXY_STRNCPY(hc->s->hostname_ex, worker->s->hostname_ex); PROXY_STRNCPY(hc->s->scheme, worker->s->scheme); PROXY_STRNCPY(hc->s->hcuri, worker->s->hcuri); PROXY_STRNCPY(hc->s->hcexpr, worker->s->hcexpr); hc->hash.def = hc->s->hash.def = ap_proxy_hashfunc(hc->s->name, PROXY_HASHFUNC_DEFAULT); hc->hash.fnv = hc->s->hash.fnv = ap_proxy_hashfunc(hc->s->name, PROXY_HASHFUNC_FNV); hc->s->port = port; if (worker->s->conn_timeout_set) { hc->s->conn_timeout_set = worker->s->conn_timeout_set; hc->s->conn_timeout = worker->s->conn_timeout; } /* Do not disable worker in case of errors */ hc->s->status |= PROXY_WORKER_IGNORE_ERRORS; /* Mark as the "generic" worker */ hc->s->status |= PROXY_WORKER_GENERIC; ap_proxy_initialize_worker(hc, ctx->s, ctx->p); hc->s->is_address_reusable = worker->s->is_address_reusable; hc->s->disablereuse = worker->s->disablereuse; hc->s->method = worker->s->method; rv = apr_uri_parse(p, url, &uri); if (rv == APR_SUCCESS) { wctx->path = apr_pstrdup(ctx->p, uri.path); } wctx->w = worker; create_hcheck_req(wctx, hc, ctx->p); hc->context = wctx; apr_hash_set(ctx->hcworkers, &worker, sizeof worker, hc); } /* This *could* have changed via the Balancer Manager */ /* TODO */ if (hc->s->method != worker->s->method) { wctx_t *wctx = hc->context; port = (worker->s->port ? worker->s->port : ap_proxy_port_of_scheme(worker->s->scheme)); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ctx->s, APLOGNO(03311) "Updating hc worker %pp for %s://%s:%d", worker, worker->s->scheme, worker->s->hostname_ex, (int)port); hc->s->method = worker->s->method; create_hcheck_req(wctx, hc, ctx->p); } return hc; } static int hc_determine_connection(sctx_t *ctx, proxy_worker *worker, apr_sockaddr_t **addr, apr_pool_t *p) { apr_status_t rv = APR_SUCCESS; /* * normally, this is done in ap_proxy_determine_connection(). * TODO: Look at using ap_proxy_determine_connection() with a * fake request_rec */ if (worker->cp->addr) { *addr = worker->cp->addr; } else { rv = apr_sockaddr_info_get(addr, worker->s->hostname_ex, APR_UNSPEC, worker->s->port, 0, p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ctx->s, APLOGNO(03249) "DNS lookup failure for: %s:%d", worker->s->hostname_ex, (int)worker->s->port); } } return (rv == APR_SUCCESS ? OK : !OK); } static apr_status_t hc_init_worker(sctx_t *ctx, proxy_worker *worker) { apr_status_t rv = APR_SUCCESS; /* * Since this is the watchdog, workers never actually handle a * request here, and so the local data isn't initialized (of * course, the shared memory is). So we need to bootstrap * worker->cp. Note, we only need do this once. */ if (!worker->cp) { rv = ap_proxy_initialize_worker(worker, ctx->s, ctx->p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, ctx->s, APLOGNO(03250) "Cannot init worker"); return rv; } if (worker->s->is_address_reusable && !worker->s->disablereuse && hc_determine_connection(ctx, worker, &worker->cp->addr, worker->cp->pool) != OK) { rv = APR_EGENERAL; } } return rv; } static apr_status_t backend_cleanup(const char *proxy_function, proxy_conn_rec *backend, server_rec *s, int status) { if (backend) { backend->close = 1; ap_proxy_release_connection(proxy_function, backend, s); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(03251) "Health check %s Status (%d) for %s.", ap_proxy_show_hcmethod(backend->worker->s->method), status, backend->worker->s->name); } if (status != OK) { return APR_EGENERAL; } return APR_SUCCESS; } static int hc_get_backend(const char *proxy_function, proxy_conn_rec **backend, proxy_worker *hc, sctx_t *ctx, apr_pool_t *ptemp) { int status; status = ap_proxy_acquire_connection(proxy_function, backend, hc, ctx->s); if (status == OK) { (*backend)->addr = hc->cp->addr; (*backend)->hostname = hc->s->hostname_ex; if (strcmp(hc->s->scheme, "https") == 0) { if (!ap_proxy_ssl_enable(NULL)) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, ctx->s, APLOGNO(03252) "mod_ssl not configured?"); return !OK; } (*backend)->is_ssl = 1; } } return hc_determine_connection(ctx, hc, &(*backend)->addr, ptemp); } static apr_status_t hc_check_tcp(baton_t *baton) { int status; sctx_t *ctx = baton->ctx; proxy_worker *hc = baton->hc; proxy_conn_rec *backend = NULL; status = hc_get_backend("HCTCP", &backend, hc, ctx, baton->ptemp); if (status == OK) { status = ap_proxy_connect_backend("HCTCP", backend, hc, ctx->s); /* does an unconditional ap_proxy_is_socket_connected() */ } return backend_cleanup("HCTCP", backend, ctx->s, status); } static int hc_send(request_rec *r, const char *out, apr_bucket_brigade *bb) { apr_status_t rv; conn_rec *c = r->connection; apr_bucket_alloc_t *ba = c->bucket_alloc; ap_log_error(APLOG_MARK, APLOG_TRACE7, 0, r->server, "%s", out); APR_BRIGADE_INSERT_TAIL(bb, apr_bucket_pool_create(out, strlen(out), r->pool, ba)); APR_BRIGADE_INSERT_TAIL(bb, apr_bucket_flush_create(ba)); rv = ap_pass_brigade(c->output_filters, bb); apr_brigade_cleanup(bb); return (rv) ? !OK : OK; } static int hc_read_headers(request_rec *r) { char buffer[HUGE_STRING_LEN]; int len; len = ap_getline(buffer, sizeof(buffer), r, 1); if (len <= 0) { return !OK; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, r->server, APLOGNO(03254) "%.*s", len, buffer); /* for the below, see ap_proxy_http_process_response() */ if (apr_date_checkmask(buffer, "HTTP/#.# ###*")) { int major; char keepchar; int proxy_status = OK; const char *proxy_status_line = NULL; major = buffer[5] - '0'; if ((major != 1) || (len >= sizeof(buffer)-1)) { return !OK; } keepchar = buffer[12]; buffer[12] = '\0'; proxy_status = atoi(&buffer[9]); if (keepchar != '\0') { buffer[12] = keepchar; } else { buffer[12] = ' '; buffer[13] = '\0'; } proxy_status_line = apr_pstrdup(r->pool, &buffer[9]); r->status = proxy_status; r->status_line = proxy_status_line; } else { return !OK; } /* OK, 1st line is OK... scarf in the headers */ while ((len = ap_getline(buffer, sizeof(buffer), r, 1)) > 0) { char *value, *end; ap_log_error(APLOG_MARK, APLOG_TRACE7, 0, r->server, "%.*s", len, buffer); if (!(value = strchr(buffer, ':'))) { return !OK; } *value = '\0'; ++value; while (apr_isspace(*value)) ++value; /* Skip to start of value */ for (end = &value[strlen(value)-1]; end > value && apr_isspace(*end); --end) *end = '\0'; apr_table_add(r->headers_out, buffer, value); } return OK; } static int hc_read_body(request_rec *r, apr_bucket_brigade *bb) { apr_status_t rv = APR_SUCCESS; int seen_eos = 0; do { apr_size_t len = HUGE_STRING_LEN; apr_brigade_cleanup(bb); rv = ap_get_brigade(r->proto_input_filters, bb, AP_MODE_READBYTES, APR_BLOCK_READ, len); if (rv != APR_SUCCESS) { if (APR_STATUS_IS_EOF(rv)) { rv = APR_SUCCESS; break; } ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, r->server, APLOGNO(03300) "Error reading response body"); break; } while (!APR_BRIGADE_EMPTY(bb)) { apr_bucket *bucket = APR_BRIGADE_FIRST(bb); if (APR_BUCKET_IS_EOS(bucket)) { seen_eos = 1; break; } if (APR_BUCKET_IS_FLUSH(bucket)) { apr_bucket_delete(bucket); continue; } APR_BUCKET_REMOVE(bucket); APR_BRIGADE_INSERT_TAIL(r->kept_body, bucket); } } while (!seen_eos); apr_brigade_cleanup(bb); return (rv == APR_SUCCESS ? OK : !OK); } /* * Send the HTTP OPTIONS, HEAD or GET request to the backend * server associated w/ worker. If we have Conditions, * then apply those to the resulting response, otherwise * any status code 2xx or 3xx is considered "passing" */ static apr_status_t hc_check_http(baton_t *baton) { int status; proxy_conn_rec *backend = NULL; sctx_t *ctx = baton->ctx; proxy_worker *hc = baton->hc; proxy_worker *worker = baton->worker; apr_pool_t *ptemp = baton->ptemp; request_rec *r; wctx_t *wctx; hc_condition_t *cond; apr_bucket_brigade *bb; wctx = (wctx_t *)hc->context; if (!wctx->req || !wctx->method) { return APR_ENOTIMPL; } if ((status = hc_get_backend("HCOH", &backend, hc, ctx, ptemp)) != OK) { return backend_cleanup("HCOH", backend, ctx->s, status); } if ((status = ap_proxy_connect_backend("HCOH", backend, hc, ctx->s)) != OK) { return backend_cleanup("HCOH", backend, ctx->s, status); } r = create_request_rec(ptemp, ctx->s, baton->balancer, wctx->method); if ((status = ap_proxy_connection_create_ex("HCOH", backend, r)) != OK) { return backend_cleanup("HCOH", backend, ctx->s, status); } set_request_connection(r, backend->connection); bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); if ((status = hc_send(r, wctx->req, bb)) != OK) { return backend_cleanup("HCOH", backend, ctx->s, status); } if ((status = hc_read_headers(r)) != OK) { return backend_cleanup("HCOH", backend, ctx->s, status); } if (!r->header_only) { apr_table_t *saved_headers_in = r->headers_in; r->headers_in = apr_table_copy(r->pool, r->headers_out); ap_proxy_pre_http_request(backend->connection, r); status = hc_read_body(r, bb); r->headers_in = saved_headers_in; if (status != OK) { return backend_cleanup("HCOH", backend, ctx->s, status); } r->trailers_out = apr_table_copy(r->pool, r->trailers_in); } if (*worker->s->hcexpr && (cond = (hc_condition_t *)apr_table_get(ctx->conditions, worker->s->hcexpr)) != NULL) { const char *err; int ok = ap_expr_exec(r, cond->pexpr, &err); if (ok > 0) { ap_log_error(APLOG_MARK, APLOG_TRACE2, 0, ctx->s, "Condition %s for %s (%s): passed", worker->s->hcexpr, hc->s->name, worker->s->name); } else if (ok < 0 || err) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, ctx->s, APLOGNO(03301) "Error on checking condition %s for %s (%s): %s", worker->s->hcexpr, hc->s->name, worker->s->name, err); status = !OK; } else { ap_log_error(APLOG_MARK, APLOG_TRACE2, 0, ctx->s, "Condition %s for %s (%s) : failed", worker->s->hcexpr, hc->s->name, worker->s->name); status = !OK; } } else if (r->status < 200 || r->status > 399) { ap_log_error(APLOG_MARK, APLOG_TRACE2, 0, ctx->s, "Response status %i for %s (%s): failed", r->status, hc->s->name, worker->s->name); status = !OK; } return backend_cleanup("HCOH", backend, ctx->s, status); } static void * APR_THREAD_FUNC hc_check(apr_thread_t *thread, void *b) { baton_t *baton = (baton_t *)b; server_rec *s = baton->ctx->s; proxy_worker *worker = baton->worker; proxy_worker *hc = baton->hc; apr_time_t now = baton->now; apr_status_t rv; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(03256) "%sHealth checking %s", (thread ? "Threaded " : ""), worker->s->name); worker->s->updated = now; if (hc->s->method == TCP) { rv = hc_check_tcp(baton); } else { rv = hc_check_http(baton); } if (rv == APR_ENOTIMPL) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(03257) "Somehow tried to use unimplemented hcheck method: %d", (int)hc->s->method); apr_pool_destroy(baton->ptemp); return NULL; } /* what state are we in ? */ if (PROXY_WORKER_IS_HCFAILED(worker)) { if (rv == APR_SUCCESS) { worker->s->pcount += 1; if (worker->s->pcount >= worker->s->passes) { ap_proxy_set_wstatus(PROXY_WORKER_HC_FAIL_FLAG, 0, worker); ap_proxy_set_wstatus(PROXY_WORKER_IN_ERROR_FLAG, 0, worker); worker->s->pcount = 0; ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(03302) "%sHealth check ENABLING %s", (thread ? "Threaded " : ""), worker->s->name); } } } else { if (rv != APR_SUCCESS) { worker->s->error_time = now; worker->s->fcount += 1; if (worker->s->fcount >= worker->s->fails) { ap_proxy_set_wstatus(PROXY_WORKER_HC_FAIL_FLAG, 1, worker); worker->s->fcount = 0; ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(03303) "%sHealth check DISABLING %s", (thread ? "Threaded " : ""), worker->s->name); } } } apr_pool_destroy(baton->ptemp); return NULL; } static apr_status_t hc_watchdog_callback(int state, void *data, apr_pool_t *pool) { apr_status_t rv = APR_SUCCESS; apr_time_t now = apr_time_now(); proxy_balancer *balancer; sctx_t *ctx = (sctx_t *)data; server_rec *s = ctx->s; proxy_server_conf *conf; static apr_thread_pool_t *hctp = NULL; switch (state) { case AP_WATCHDOG_STATE_STARTING: ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(03258) "%s watchdog started.", HCHECK_WATHCHDOG_NAME); #if HC_USE_THREADS if (tpsize && hctp == NULL) { rv = apr_thread_pool_create(&hctp, tpsize, tpsize, ctx->p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_INFO, rv, s, APLOGNO(03312) "apr_thread_pool_create() with %d threads failed", tpsize); /* we can continue on without the threadpools */ hctp = NULL; } else { ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, s, APLOGNO(03313) "apr_thread_pool_create() with %d threads succeeded", tpsize); } } else { ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, s, APLOGNO(03314) "Skipping apr_thread_pool_create()"); hctp = NULL; } #endif break; case AP_WATCHDOG_STATE_RUNNING: /* loop thru all workers */ if (s) { int i; conf = (proxy_server_conf *) ap_get_module_config(s->module_config, &proxy_module); balancer = (proxy_balancer *)conf->balancers->elts; ctx->s = s; for (i = 0; i < conf->balancers->nelts; i++, balancer++) { int n; proxy_worker **workers; proxy_worker *worker; /* Have any new balancers or workers been added dynamically? */ ap_proxy_sync_balancer(balancer, s, conf); workers = (proxy_worker **)balancer->workers->elts; for (n = 0; n < balancer->workers->nelts; n++) { worker = *workers; if (!PROXY_WORKER_IS(worker, PROXY_WORKER_STOPPED) && (worker->s->method != NONE) && (now > worker->s->updated + worker->s->interval)) { baton_t *baton; apr_pool_t *ptemp; ap_log_error(APLOG_MARK, APLOG_TRACE3, 0, s, "Checking %s worker: %s [%d] (%pp)", balancer->s->name, worker->s->name, worker->s->method, worker); if ((rv = hc_init_worker(ctx, worker)) != APR_SUCCESS) { return rv; } /* This pool must last the lifetime of the (possible) thread */ apr_pool_create(&ptemp, ctx->p); apr_pool_tag(ptemp, "hc_request"); baton = apr_palloc(ptemp, sizeof(baton_t)); baton->ctx = ctx; baton->now = now; baton->balancer = balancer; baton->worker = worker; baton->ptemp = ptemp; baton->hc = hc_get_hcworker(ctx, worker, ptemp); if (!hctp) { hc_check(NULL, baton); } #if HC_USE_THREADS else { rv = apr_thread_pool_push(hctp, hc_check, (void *)baton, APR_THREAD_TASK_PRIORITY_NORMAL, NULL); } #endif } workers++; } } } break; case AP_WATCHDOG_STATE_STOPPING: ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(03261) "stopping %s watchdog.", HCHECK_WATHCHDOG_NAME); #if HC_USE_THREADS if (hctp) { rv = apr_thread_pool_destroy(hctp); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_INFO, rv, s, APLOGNO(03315) "apr_thread_pool_destroy() failed"); } } #endif hctp = NULL; break; } return rv; } static int hc_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { tpsize = HC_THREADPOOL_SIZE; return OK; } static int hc_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *main_s) { apr_status_t rv; server_rec *s = main_s; APR_OPTIONAL_FN_TYPE(ap_watchdog_get_instance) *hc_watchdog_get_instance; APR_OPTIONAL_FN_TYPE(ap_watchdog_register_callback) *hc_watchdog_register_callback; if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) { return OK; } hc_watchdog_get_instance = APR_RETRIEVE_OPTIONAL_FN(ap_watchdog_get_instance); hc_watchdog_register_callback = APR_RETRIEVE_OPTIONAL_FN(ap_watchdog_register_callback); if (!hc_watchdog_get_instance || !hc_watchdog_register_callback) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, s, APLOGNO(03262) "mod_watchdog is required"); return !OK; } rv = hc_watchdog_get_instance(&watchdog, HCHECK_WATHCHDOG_NAME, 0, 1, p); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(03263) "Failed to create watchdog instance (%s)", HCHECK_WATHCHDOG_NAME); return !OK; } while (s) { sctx_t *ctx = ap_get_module_config(s->module_config, &proxy_hcheck_module); if (s != ctx->s) { ap_log_error(APLOG_MARK, APLOG_TRACE4, 0, s, APLOGNO(10019) "Missing unique per-server context: %s (%pp:%pp) (no hchecks)", s->server_hostname, s, ctx->s); s = s->next; continue; } rv = hc_watchdog_register_callback(watchdog, AP_WD_TM_SLICE, ctx, hc_watchdog_callback); if (rv) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(03264) "Failed to register watchdog callback (%s)", HCHECK_WATHCHDOG_NAME); return !OK; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(03265) "watchdog callback registered (%s for %s)", HCHECK_WATHCHDOG_NAME, s->server_hostname); s = s->next; } return OK; } static void hc_show_exprs(request_rec *r) { const apr_table_entry_t *elts; const apr_array_header_t *hdr; int i; sctx_t *ctx = (sctx_t *) ap_get_module_config(r->server->module_config, &proxy_hcheck_module); if (!ctx) return; if (apr_is_empty_table(ctx->conditions)) return; ap_rputs("\n\n" "\n" "\n", r); hdr = apr_table_elts(ctx->conditions); elts = (const apr_table_entry_t *) hdr->elts; for (i = 0; i < hdr->nelts; ++i) { hc_condition_t *cond; if (!elts[i].key) { continue; } cond = (hc_condition_t *)elts[i].val; ap_rprintf(r, "\n", ap_escape_html(r->pool, elts[i].key), ap_escape_html(r->pool, cond->expr)); } ap_rputs("
    Health check cond. expressions:
    Expr nameExpression
    %s%s

    \n", r); } static void hc_select_exprs(request_rec *r, const char *expr) { const apr_table_entry_t *elts; const apr_array_header_t *hdr; int i; sctx_t *ctx = (sctx_t *) ap_get_module_config(r->server->module_config, &proxy_hcheck_module); if (!ctx) return; if (apr_is_empty_table(ctx->conditions)) return; hdr = apr_table_elts(ctx->conditions); elts = (const apr_table_entry_t *) hdr->elts; for (i = 0; i < hdr->nelts; ++i) { if (!elts[i].key) { continue; } ap_rprintf(r, "\n", ap_escape_html(r->pool, elts[i].key), (!strcmp(elts[i].key, expr)) ? "selected" : "", ap_escape_html(r->pool, elts[i].key)); } } static int hc_valid_expr(request_rec *r, const char *expr) { const apr_table_entry_t *elts; const apr_array_header_t *hdr; int i; sctx_t *ctx = (sctx_t *) ap_get_module_config(r->server->module_config, &proxy_hcheck_module); if (!ctx) return 0; if (apr_is_empty_table(ctx->conditions)) return 0; hdr = apr_table_elts(ctx->conditions); elts = (const apr_table_entry_t *) hdr->elts; for (i = 0; i < hdr->nelts; ++i) { if (!elts[i].key) { continue; } if (!strcmp(elts[i].key, expr)) return 1; } return 0; } static const char *hc_get_body(request_rec *r) { apr_off_t length; apr_size_t len; apr_status_t rv; char *buf; if (!r || !r->kept_body) return ""; rv = apr_brigade_length(r->kept_body, 1, &length); len = (apr_size_t)length; if (rv != APR_SUCCESS || len == 0) return ""; buf = apr_palloc(r->pool, len + 1); rv = apr_brigade_flatten(r->kept_body, buf, &len); if (rv != APR_SUCCESS) return ""; buf[len] = '\0'; /* ensure */ return (const char*)buf; } static const char *hc_expr_var_fn(ap_expr_eval_ctx_t *ctx, const void *data) { char *var = (char *)data; if (var && *var && ctx->r && ap_cstr_casecmp(var, "BODY") == 0) { return hc_get_body(ctx->r); } return NULL; } static const char *hc_expr_func_fn(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { char *var = (char *)arg; if (var && *var && ctx->r && ap_cstr_casecmp(var, "BODY") == 0) { return hc_get_body(ctx->r); } return NULL; } static int hc_expr_lookup(ap_expr_lookup_parms *parms) { switch (parms->type) { case AP_EXPR_FUNC_VAR: /* for now, we just handle everything that starts with HC_. */ if (strncasecmp(parms->name, "HC_", 3) == 0) { *parms->func = hc_expr_var_fn; *parms->data = parms->name + 3; return OK; } break; case AP_EXPR_FUNC_STRING: /* Function HC() is implemented by us. */ if (strcasecmp(parms->name, "HC") == 0) { *parms->func = hc_expr_func_fn; *parms->data = parms->arg; return OK; } break; } return DECLINED; } static const command_rec command_table[] = { AP_INIT_RAW_ARGS("ProxyHCTemplate", set_hc_template, NULL, OR_FILEINFO, "Health check template"), AP_INIT_RAW_ARGS("ProxyHCExpr", set_hc_condition, NULL, OR_FILEINFO, "Define a health check condition ruleset expression"), #if HC_USE_THREADS AP_INIT_TAKE1("ProxyHCTPsize", set_hc_tpsize, NULL, RSRC_CONF, "Set size of health check thread pool"), #endif { NULL } }; static void hc_register_hooks(apr_pool_t *p) { static const char *const aszPre[] = { "mod_proxy_balancer.c", "mod_proxy.c", NULL}; static const char *const aszSucc[] = { "mod_watchdog.c", NULL}; APR_REGISTER_OPTIONAL_FN(set_worker_hc_param); APR_REGISTER_OPTIONAL_FN(hc_show_exprs); APR_REGISTER_OPTIONAL_FN(hc_select_exprs); APR_REGISTER_OPTIONAL_FN(hc_valid_expr); ap_hook_pre_config(hc_pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_post_config(hc_post_config, aszPre, aszSucc, APR_HOOK_LAST); ap_hook_expr_lookup(hc_expr_lookup, NULL, NULL, APR_HOOK_MIDDLE); } /* the main config structure */ AP_DECLARE_MODULE(proxy_hcheck) = { STANDARD20_MODULE_STUFF, NULL, /* create per-dir config structures */ NULL, /* merge per-dir config structures */ hc_create_config, /* create per-server config structures */ NULL, /* merge per-server config structures */ command_table, /* table of config file commands */ hc_register_hooks /* register hooks */ }; httpd-2.4.41/modules/proxy/mod_proxy_fcgi.mak0000644000000000000500000002564512701473373017612 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_proxy_fcgi.dsp !IF "$(CFG)" == "" CFG=mod_proxy_fcgi - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_proxy_fcgi - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_proxy_fcgi - Win32 Release" && "$(CFG)" != "mod_proxy_fcgi - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_fcgi.mak" CFG="mod_proxy_fcgi - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_fcgi - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_fcgi - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_proxy_fcgi - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_fcgi.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_proxy_fcgi.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_fcgi.obj" -@erase "$(INTDIR)\mod_proxy_fcgi.res" -@erase "$(INTDIR)\mod_proxy_fcgi_src.idb" -@erase "$(INTDIR)\mod_proxy_fcgi_src.pdb" -@erase "$(OUTDIR)\mod_proxy_fcgi.exp" -@erase "$(OUTDIR)\mod_proxy_fcgi.lib" -@erase "$(OUTDIR)\mod_proxy_fcgi.pdb" -@erase "$(OUTDIR)\mod_proxy_fcgi.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_fcgi_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_fcgi.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_fcgi.so" /d LONG_NAME="proxy_fcgi_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_fcgi.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_fcgi.pdb" /debug /out:"$(OUTDIR)\mod_proxy_fcgi.so" /implib:"$(OUTDIR)\mod_proxy_fcgi.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_fcgi.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_proxy_fcgi.obj" \ "$(INTDIR)\mod_proxy_fcgi.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_fcgi.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_proxy_fcgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_fcgi.so" if exist .\Release\mod_proxy_fcgi.so.manifest mt.exe -manifest .\Release\mod_proxy_fcgi.so.manifest -outputresource:.\Release\mod_proxy_fcgi.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_proxy_fcgi - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_fcgi.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_proxy_fcgi.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_fcgi.obj" -@erase "$(INTDIR)\mod_proxy_fcgi.res" -@erase "$(INTDIR)\mod_proxy_fcgi_src.idb" -@erase "$(INTDIR)\mod_proxy_fcgi_src.pdb" -@erase "$(OUTDIR)\mod_proxy_fcgi.exp" -@erase "$(OUTDIR)\mod_proxy_fcgi.lib" -@erase "$(OUTDIR)\mod_proxy_fcgi.pdb" -@erase "$(OUTDIR)\mod_proxy_fcgi.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_fcgi_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_fcgi.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_fcgi.so" /d LONG_NAME="proxy_fcgi_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_fcgi.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_fcgi.pdb" /debug /out:"$(OUTDIR)\mod_proxy_fcgi.so" /implib:"$(OUTDIR)\mod_proxy_fcgi.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_fcgi.so LINK32_OBJS= \ "$(INTDIR)\mod_proxy_fcgi.obj" \ "$(INTDIR)\mod_proxy_fcgi.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_fcgi.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_proxy_fcgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_fcgi.so" if exist .\Debug\mod_proxy_fcgi.so.manifest mt.exe -manifest .\Debug\mod_proxy_fcgi.so.manifest -outputresource:.\Debug\mod_proxy_fcgi.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_proxy_fcgi.dep") !INCLUDE "mod_proxy_fcgi.dep" !ELSE !MESSAGE Warning: cannot find "mod_proxy_fcgi.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_proxy_fcgi - Win32 Release" || "$(CFG)" == "mod_proxy_fcgi - Win32 Debug" SOURCE=.\mod_proxy_fcgi.c "$(INTDIR)\mod_proxy_fcgi.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_proxy_fcgi - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_fcgi - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_fcgi - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_fcgi - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_fcgi - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_fcgi - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_fcgi - Win32 Release" "mod_proxy - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd "." "mod_proxy - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_proxy_fcgi - Win32 Debug" "mod_proxy - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd "." "mod_proxy - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_proxy_fcgi - Win32 Release" "$(INTDIR)\mod_proxy_fcgi.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_fcgi.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_proxy_fcgi.so" /d LONG_NAME="proxy_fcgi_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_proxy_fcgi - Win32 Debug" "$(INTDIR)\mod_proxy_fcgi.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_fcgi.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_proxy_fcgi.so" /d LONG_NAME="proxy_fcgi_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/mod_proxy_express.dep0000644000000000000500000000524012674411515020357 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_proxy_express.mak .\mod_proxy_express.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_dbm.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_proxy.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/mod_proxy_wstunnel.dsp0000644000000000000500000001165112505340507020561 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_proxy_wstunnel" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_proxy_wstunnel - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_proxy_wstunnel.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_wstunnel.mak" CFG="mod_proxy_wstunnel - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_wstunnel - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_wstunnel - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_proxy_wstunnel - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_proxy_wstunnel_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_proxy_wstunnel.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_wstunnel.so" /d LONG_NAME="proxy_wstunnel_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_proxy_wstunnel.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_wstunnel.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_proxy_wstunnel.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_wstunnel.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_proxy_wstunnel.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_proxy_wstunnel - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_proxy_wstunnel_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_proxy_wstunnel.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_wstunnel.so" /d LONG_NAME="proxy_wstunnel_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_wstunnel.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_wstunnel.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_wstunnel.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_wstunnel.so # Begin Special Build Tool TargetPath=.\Debug\mod_proxy_wstunnel.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_proxy_wstunnel - Win32 Release" # Name "mod_proxy_wstunnel - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_proxy_wstunnel.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=.\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/NWGNUproxylbm_req0000644000000000000500000001037312010715741017354 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/proxy \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxylbm_req # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy LoadBalance by Requests Sub-Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = LBM Requests Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = $(OBJDIR)/$(NLM_NAME).nlm # # If there is an LIB target, put it here # TARGET_lib = # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_lbmethod_byrequests.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ libc \ aprlib \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ @$(OBJDIR)/mod_proxy.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ lbmethod_byrequests_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c balancers # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/mod_proxy_fcgi.dep0000644000000000000500000000525412674411515017603 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_proxy_fcgi.mak .\mod_proxy_fcgi.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_fcgi.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_proxy.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/mod_proxy_fdpass.h0000644000000000000500000000232611737125415017627 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_proxy_fdpass.h * @brief FD Passing interfaces * * @ingroup APACHE_INTERNAL * @{ */ #include "mod_proxy.h" #ifndef _PROXY_FDPASS_H_ #define _PROXY_FDPASS_H_ #define PROXY_FDPASS_FLUSHER "proxy_fdpass_flusher" typedef struct proxy_fdpass_flush proxy_fdpass_flush; struct proxy_fdpass_flush { const char *name; int (*flusher)(request_rec *r); void *context; }; #endif /* _PROXY_FDPASS_H_ */ /** @} */ httpd-2.4.41/modules/proxy/NWGNUproxyfcgi0000644000000000000500000001061611546111464016650 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ -relax_pointers \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxyfcgi # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy Fast CGI Sub-Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Proxy FCGI Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/proxyfcgi.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_proxy_fcgi.o \ $(OBJDIR)/libprews.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @$(OBJDIR)/mod_proxy.imp \ @libc.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ proxy_fcgi_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/proxy_util.h0000644000000000000500000000323612030026303016445 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef PROXY_UTIL_H_ #define PROXY_UTIL_H_ /** * @file proxy_util.h * @brief Internal interfaces private to mod_proxy. * * @defgroup MOD_PROXY_PRIVATE Private * @ingroup MOD_PROXY * @{ */ PROXY_DECLARE(int) ap_proxy_is_ipaddr(struct dirconn_entry *This, apr_pool_t *p); PROXY_DECLARE(int) ap_proxy_is_domainname(struct dirconn_entry *This, apr_pool_t *p); PROXY_DECLARE(int) ap_proxy_is_hostname(struct dirconn_entry *This, apr_pool_t *p); PROXY_DECLARE(int) ap_proxy_is_word(struct dirconn_entry *This, apr_pool_t *p); PROXY_DECLARE_DATA extern int proxy_lb_workers; PROXY_DECLARE_DATA extern const apr_strmatch_pattern *ap_proxy_strmatch_path; PROXY_DECLARE_DATA extern const apr_strmatch_pattern *ap_proxy_strmatch_domain; /** * Register optional functions declared within proxy_util.c. */ void proxy_util_register_hooks(apr_pool_t *p); /** @} */ #endif /* PROXY_UTIL_H_ */ httpd-2.4.41/modules/proxy/mod_proxy_ftp.c0000644000000000000500000023725313523017366017144 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* FTP routines for Apache proxy */ #define APR_WANT_BYTEFUNC #include "mod_proxy.h" #if APR_HAVE_TIME_H #include #endif #include "apr_version.h" #if (APR_MAJOR_VERSION < 1) #undef apr_socket_create #define apr_socket_create apr_socket_create_ex #endif #define AUTODETECT_PWD /* Automatic timestamping (Last-Modified header) based on MDTM is used if: * 1) the FTP server supports the MDTM command and * 2) HAVE_TIMEGM (preferred) or HAVE_GMTOFF is available at compile time */ #define USE_MDTM module AP_MODULE_DECLARE_DATA proxy_ftp_module; typedef struct { int ftp_list_on_wildcard; int ftp_list_on_wildcard_set; int ftp_escape_wildcards; int ftp_escape_wildcards_set; const char *ftp_directory_charset; } proxy_ftp_dir_conf; static void *create_proxy_ftp_dir_config(apr_pool_t *p, char *dummy) { proxy_ftp_dir_conf *new = (proxy_ftp_dir_conf *) apr_pcalloc(p, sizeof(proxy_ftp_dir_conf)); /* Put these in the dir config so they work inside */ new->ftp_list_on_wildcard = 1; new->ftp_escape_wildcards = 1; return (void *) new; } static void *merge_proxy_ftp_dir_config(apr_pool_t *p, void *basev, void *addv) { proxy_ftp_dir_conf *new = (proxy_ftp_dir_conf *) apr_pcalloc(p, sizeof(proxy_ftp_dir_conf)); proxy_ftp_dir_conf *add = (proxy_ftp_dir_conf *) addv; proxy_ftp_dir_conf *base = (proxy_ftp_dir_conf *) basev; /* Put these in the dir config so they work inside */ new->ftp_list_on_wildcard = add->ftp_list_on_wildcard_set ? add->ftp_list_on_wildcard : base->ftp_list_on_wildcard; new->ftp_list_on_wildcard_set = add->ftp_list_on_wildcard_set ? 1 : base->ftp_list_on_wildcard_set; new->ftp_escape_wildcards = add->ftp_escape_wildcards_set ? add->ftp_escape_wildcards : base->ftp_escape_wildcards; new->ftp_escape_wildcards_set = add->ftp_escape_wildcards_set ? 1 : base->ftp_escape_wildcards_set; new->ftp_directory_charset = add->ftp_directory_charset ? add->ftp_directory_charset : base->ftp_directory_charset; return new; } static const char *set_ftp_list_on_wildcard(cmd_parms *cmd, void *dconf, int flag) { proxy_ftp_dir_conf *conf = dconf; conf->ftp_list_on_wildcard = flag; conf->ftp_list_on_wildcard_set = 1; return NULL; } static const char *set_ftp_escape_wildcards(cmd_parms *cmd, void *dconf, int flag) { proxy_ftp_dir_conf *conf = dconf; conf->ftp_escape_wildcards = flag; conf->ftp_escape_wildcards_set = 1; return NULL; } static const char *set_ftp_directory_charset(cmd_parms *cmd, void *dconf, const char *arg) { proxy_ftp_dir_conf *conf = dconf; conf->ftp_directory_charset = arg; return NULL; } /* * Decodes a '%' escaped string, and returns the number of characters */ static int decodeenc(char *x) { int i, j, ch; if (x[0] == '\0') return 0; /* special case for no characters */ for (i = 0, j = 0; x[i] != '\0'; i++, j++) { /* decode it if not already done */ ch = x[i]; if (ch == '%' && apr_isxdigit(x[i + 1]) && apr_isxdigit(x[i + 2])) { ch = ap_proxy_hex2c(&x[i + 1]); i += 2; } x[j] = ch; } x[j] = '\0'; return j; } /* * Escape the globbing characters in a path used as argument to * the FTP commands (SIZE, CWD, RETR, MDTM, ...). * ftpd assumes '\\' as a quoting character to escape special characters. * Just returns the original string if ProxyFtpEscapeWildcards has been * configured "off". * Returns: escaped string */ #define FTP_GLOBBING_CHARS "*?[{~" static const char *ftp_escape_globbingchars(apr_pool_t *p, const char *path, proxy_ftp_dir_conf *dconf) { char *ret; char *d; if (!dconf->ftp_escape_wildcards) { return path; } ret = apr_palloc(p, 2*strlen(path)+sizeof("")); for (d = ret; *path; ++path) { if (strchr(FTP_GLOBBING_CHARS, *path) != NULL) *d++ = '\\'; *d++ = *path; } *d = '\0'; return ret; } /* * Check for globbing characters in a path used as argument to * the FTP commands (SIZE, CWD, RETR, MDTM, ...). * ftpd assumes '\\' as a quoting character to escape special characters. * Returns: 0 (no globbing chars, or all globbing chars escaped), 1 (globbing chars) */ static int ftp_check_globbingchars(const char *path) { for ( ; *path; ++path) { if (*path == '\\') ++path; if (*path != '\0' && strchr(FTP_GLOBBING_CHARS, *path) != NULL) return TRUE; } return FALSE; } /* * checks an encoded ftp string for bad characters, namely, CR, LF or * non-ascii character */ static int ftp_check_string(const char *x) { int i, ch = 0; #if APR_CHARSET_EBCDIC char buf[1]; #endif for (i = 0; x[i] != '\0'; i++) { ch = x[i]; if (ch == '%' && apr_isxdigit(x[i + 1]) && apr_isxdigit(x[i + 2])) { ch = ap_proxy_hex2c(&x[i + 1]); i += 2; } #if !APR_CHARSET_EBCDIC if (ch == '\015' || ch == '\012' || (ch & 0x80)) #else /* APR_CHARSET_EBCDIC */ if (ch == '\r' || ch == '\n') return 0; buf[0] = ch; ap_xlate_proto_to_ascii(buf, 1); if (buf[0] & 0x80) #endif /* APR_CHARSET_EBCDIC */ return 0; } return 1; } /* * converts a series of buckets into a string * XXX: BillS says this function performs essentially the same function as * ap_rgetline() in protocol.c. Deprecate this function and use ap_rgetline() * instead? I think ftp_string_read() will not work properly on non ASCII * (EBCDIC) machines either. */ static apr_status_t ftp_string_read(conn_rec *c, apr_bucket_brigade *bb, char *buff, apr_size_t bufflen, int *eos) { apr_bucket *e; apr_status_t rv; char *pos = buff; char *response; int found = 0; apr_size_t len; /* start with an empty string */ buff[0] = 0; *eos = 0; /* loop through each brigade */ while (!found) { /* get brigade from network one line at a time */ if (APR_SUCCESS != (rv = ap_get_brigade(c->input_filters, bb, AP_MODE_GETLINE, APR_BLOCK_READ, 0))) { return rv; } /* loop through each bucket */ while (!found) { if (*eos || APR_BRIGADE_EMPTY(bb)) { /* The connection aborted or timed out */ return APR_ECONNABORTED; } e = APR_BRIGADE_FIRST(bb); if (APR_BUCKET_IS_EOS(e)) { *eos = 1; } else { if (APR_SUCCESS != (rv = apr_bucket_read(e, (const char **)&response, &len, APR_BLOCK_READ))) { return rv; } /* * is string LF terminated? * XXX: This check can be made more efficient by simply checking * if the last character in the 'response' buffer is an ASCII_LF. * See ap_rgetline() for an example. */ if (memchr(response, APR_ASCII_LF, len)) { found = 1; } /* concat strings until buff is full - then throw the data away */ if (len > ((bufflen-1)-(pos-buff))) { len = (bufflen-1)-(pos-buff); } if (len > 0) { memcpy(pos, response, len); pos += len; } } apr_bucket_delete(e); } *pos = '\0'; } return APR_SUCCESS; } /* * Canonicalise ftp URLs. */ static int proxy_ftp_canon(request_rec *r, char *url) { char *user, *password, *host, *path, *parms, *strp, sport[7]; apr_pool_t *p = r->pool; const char *err; apr_port_t port, def_port; /* */ if (strncasecmp(url, "ftp:", 4) == 0) { url += 4; } else { return DECLINED; } def_port = apr_uri_port_of_scheme("ftp"); ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "canonicalising URL %s", url); port = def_port; err = ap_proxy_canon_netloc(p, &url, &user, &password, &host, &port); if (err) return HTTP_BAD_REQUEST; if (user != NULL && !ftp_check_string(user)) return HTTP_BAD_REQUEST; if (password != NULL && !ftp_check_string(password)) return HTTP_BAD_REQUEST; /* now parse path/parameters args, according to rfc1738 */ /* * N.B. if this isn't a true proxy request, then the URL path (but not * query args) has already been decoded. This gives rise to the problem * of a ; being decoded into the path. */ strp = strchr(url, ';'); if (strp != NULL) { *(strp++) = '\0'; parms = ap_proxy_canonenc(p, strp, strlen(strp), enc_parm, 0, r->proxyreq); if (parms == NULL) return HTTP_BAD_REQUEST; } else parms = ""; path = ap_proxy_canonenc(p, url, strlen(url), enc_path, 0, r->proxyreq); if (path == NULL) return HTTP_BAD_REQUEST; if (!ftp_check_string(path)) return HTTP_BAD_REQUEST; if (r->proxyreq && r->args != NULL) { if (strp != NULL) { strp = ap_proxy_canonenc(p, r->args, strlen(r->args), enc_parm, 1, r->proxyreq); if (strp == NULL) return HTTP_BAD_REQUEST; parms = apr_pstrcat(p, parms, "?", strp, NULL); } else { strp = ap_proxy_canonenc(p, r->args, strlen(r->args), enc_fpath, 1, r->proxyreq); if (strp == NULL) return HTTP_BAD_REQUEST; path = apr_pstrcat(p, path, "?", strp, NULL); } r->args = NULL; } /* now, rebuild URL */ if (port != def_port) apr_snprintf(sport, sizeof(sport), ":%d", port); else sport[0] = '\0'; if (ap_strchr_c(host, ':')) { /* if literal IPv6 address */ host = apr_pstrcat(p, "[", host, "]", NULL); } r->filename = apr_pstrcat(p, "proxy:ftp://", (user != NULL) ? user : "", (password != NULL) ? ":" : "", (password != NULL) ? password : "", (user != NULL) ? "@" : "", host, sport, "/", path, (parms[0] != '\0') ? ";" : "", parms, NULL); return OK; } /* we chop lines longer than 80 characters */ #define MAX_LINE_LEN 80 /* * Reads response lines, returns both the ftp status code and * remembers the response message in the supplied buffer */ static int ftp_getrc_msg(conn_rec *ftp_ctrl, apr_bucket_brigade *bb, char *msgbuf, int msglen) { int status; char response[MAX_LINE_LEN]; char buff[5]; char *mb = msgbuf, *me = &msgbuf[msglen]; apr_status_t rv; int eos; if (APR_SUCCESS != (rv = ftp_string_read(ftp_ctrl, bb, response, sizeof(response), &eos))) { return -1; } /* ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, NULL, APLOGNO(03233) "<%s", response); */ if (!apr_isdigit(response[0]) || !apr_isdigit(response[1]) || !apr_isdigit(response[2]) || (response[3] != ' ' && response[3] != '-')) status = 0; else status = 100 * response[0] + 10 * response[1] + response[2] - 111 * '0'; mb = apr_cpystrn(mb, response + 4, me - mb); if (response[3] == '-') { memcpy(buff, response, 3); buff[3] = ' '; do { if (APR_SUCCESS != (rv = ftp_string_read(ftp_ctrl, bb, response, sizeof(response), &eos))) { return -1; } mb = apr_cpystrn(mb, response + (' ' == response[0] ? 1 : 4), me - mb); } while (memcmp(response, buff, 4) != 0); } return status; } /* this is a filter that turns a raw ASCII directory listing into pretty HTML */ /* ideally, mod_proxy should simply send the raw directory list up the filter * stack to mod_autoindex, which in theory should turn the raw ascii into * pretty html along with all the bells and whistles it provides... * * all in good time...! :) */ typedef struct { apr_bucket_brigade *in; char buffer[MAX_STRING_LEN]; enum { HEADER, BODY, FOOTER } state; } proxy_dir_ctx_t; /* fallback regex for ls -s1; ($0..$2) == 3 */ #define LS_REG_PATTERN "^ *([0-9]+) +([^ ]+)$" #define LS_REG_MATCH 3 static ap_regex_t *ls_regex; static apr_status_t proxy_send_dir_filter(ap_filter_t *f, apr_bucket_brigade *in) { request_rec *r = f->r; conn_rec *c = r->connection; apr_pool_t *p = r->pool; apr_bucket_brigade *out = apr_brigade_create(p, c->bucket_alloc); apr_status_t rv; int n; char *dir, *path, *reldir, *site, *str, *type; const char *pwd = apr_table_get(r->notes, "Directory-PWD"); const char *readme = apr_table_get(r->notes, "Directory-README"); proxy_dir_ctx_t *ctx = f->ctx; if (!ctx) { f->ctx = ctx = apr_pcalloc(p, sizeof(*ctx)); ctx->in = apr_brigade_create(p, c->bucket_alloc); ctx->buffer[0] = 0; ctx->state = HEADER; } /* combine the stored and the new */ APR_BRIGADE_CONCAT(ctx->in, in); if (HEADER == ctx->state) { /* basedir is either "", or "/%2f" for the "squid %2f hack" */ const char *basedir = ""; /* By default, path is relative to the $HOME dir */ char *wildcard = NULL; const char *escpath; /* * In the reverse proxy case we need to construct our site string * via ap_construct_url. For non anonymous sites apr_uri_unparse would * only supply us with 'username@' which leads to the construction of * an invalid base href later on. Losing the username part of the URL * is no problem in the reverse proxy case as the browser sents the * credentials anyway once entered. */ if (r->proxyreq == PROXYREQ_REVERSE) { site = ap_construct_url(p, "", r); } else { /* Save "scheme://site" prefix without password */ site = apr_uri_unparse(p, &f->r->parsed_uri, APR_URI_UNP_OMITPASSWORD | APR_URI_UNP_OMITPATHINFO); } /* ... and path without query args */ path = apr_uri_unparse(p, &f->r->parsed_uri, APR_URI_UNP_OMITSITEPART | APR_URI_UNP_OMITQUERY); /* If path began with /%2f, change the basedir */ if (strncasecmp(path, "/%2f", 4) == 0) { basedir = "/%2f"; } /* Strip off a type qualifier. It is ignored for dir listings */ if ((type = strstr(path, ";type=")) != NULL) *type++ = '\0'; (void)decodeenc(path); while (path[1] == '/') /* collapse multiple leading slashes to one */ ++path; reldir = strrchr(path, '/'); if (reldir != NULL && ftp_check_globbingchars(reldir)) { wildcard = &reldir[1]; reldir[0] = '\0'; /* strip off the wildcard suffix */ } /* Copy path, strip (all except the last) trailing slashes */ /* (the trailing slash is needed for the dir component loop below) */ path = dir = apr_pstrcat(p, path, "/", NULL); for (n = strlen(path); n > 1 && path[n - 1] == '/' && path[n - 2] == '/'; --n) path[n - 1] = '\0'; /* Add a link to the root directory (if %2f hack was used) */ str = (basedir[0] != '\0') ? "%2f/" : ""; /* print "ftp://host/" */ escpath = ap_escape_html(p, path); str = apr_psprintf(p, DOCTYPE_HTML_3_2 "\n \n %s%s%s\n" "\n" " \n" " \n

    Directory of " "%s/%s", ap_escape_html(p, site), basedir, escpath, ap_escape_uri(p, site), basedir, escpath, ap_escape_uri(p, site), str); APR_BRIGADE_INSERT_TAIL(out, apr_bucket_pool_create(str, strlen(str), p, c->bucket_alloc)); for (dir = path+1; (dir = strchr(dir, '/')) != NULL; ) { *dir = '\0'; if ((reldir = strrchr(path+1, '/'))==NULL) { reldir = path+1; } else ++reldir; /* print "path/" component */ str = apr_psprintf(p, "%s/", basedir, ap_escape_uri(p, path), ap_escape_html(p, reldir)); *dir = '/'; while (*dir == '/') ++dir; APR_BRIGADE_INSERT_TAIL(out, apr_bucket_pool_create(str, strlen(str), p, c->bucket_alloc)); } if (wildcard != NULL) { wildcard = ap_escape_html(p, wildcard); APR_BRIGADE_INSERT_TAIL(out, apr_bucket_pool_create(wildcard, strlen(wildcard), p, c->bucket_alloc)); } /* If the caller has determined the current directory, and it differs */ /* from what the client requested, then show the real name */ if (pwd == NULL || strncmp(pwd, path, strlen(pwd)) == 0) { str = apr_psprintf(p, "

    \n\n
    \n\n
    ");
            }
            else {
                str = apr_psprintf(p, "\n\n(%s)\n\n  
    \n\n
    ",
                                   ap_escape_html(p, pwd));
            }
            APR_BRIGADE_INSERT_TAIL(out, apr_bucket_pool_create(str, strlen(str),
                                                               p, c->bucket_alloc));
    
            /* print README */
            if (readme) {
                str = apr_psprintf(p, "%s\n
    \n\n
    \n\n
    \n",
                                   ap_escape_html(p, readme));
    
                APR_BRIGADE_INSERT_TAIL(out, apr_bucket_pool_create(str,
                                                               strlen(str), p,
                                                               c->bucket_alloc));
            }
    
            /* make sure page intro gets sent out */
            APR_BRIGADE_INSERT_TAIL(out, apr_bucket_flush_create(c->bucket_alloc));
            if (APR_SUCCESS != (rv = ap_pass_brigade(f->next, out))) {
                return rv;
            }
            apr_brigade_cleanup(out);
    
            ctx->state = BODY;
        }
    
        /* loop through each line of directory */
        while (BODY == ctx->state) {
            char *filename;
            int found = 0;
            int eos = 0;
            ap_regmatch_t re_result[LS_REG_MATCH];
    
            /* get a complete line */
            /* if the buffer overruns - throw data away */
            while (!found && !APR_BRIGADE_EMPTY(ctx->in)) {
                char *pos, *response;
                apr_size_t len, max;
                apr_bucket *e;
    
                e = APR_BRIGADE_FIRST(ctx->in);
                if (APR_BUCKET_IS_EOS(e)) {
                    eos = 1;
                    break;
                }
                if (APR_SUCCESS != (rv = apr_bucket_read(e, (const char **)&response, &len, APR_BLOCK_READ))) {
                    return rv;
                }
                pos = memchr(response, APR_ASCII_LF, len);
                if (pos != NULL) {
                    if ((response + len) != (pos + 1)) {
                        len = pos - response + 1;
                        apr_bucket_split(e, pos - response + 1);
                    }
                    found = 1;
                }
                max = sizeof(ctx->buffer) - strlen(ctx->buffer) - 1;
                if (len > max) {
                    len = max;
                }
    
                /* len+1 to leave space for the trailing nil char */
                apr_cpystrn(ctx->buffer+strlen(ctx->buffer), response, len+1);
    
                apr_bucket_delete(e);
            }
    
            /* EOS? jump to footer */
            if (eos) {
                ctx->state = FOOTER;
                break;
            }
    
            /* not complete? leave and try get some more */
            if (!found) {
                return APR_SUCCESS;
            }
    
            {
                apr_size_t n = strlen(ctx->buffer);
                if (ctx->buffer[n-1] == CRLF[1])  /* strip trailing '\n' */
                    ctx->buffer[--n] = '\0';
                if (ctx->buffer[n-1] == CRLF[0])  /* strip trailing '\r' if present */
                    ctx->buffer[--n] = '\0';
            }
    
            /* a symlink? */
            if (ctx->buffer[0] == 'l' && (filename = strstr(ctx->buffer, " -> ")) != NULL) {
                char *link_ptr = filename;
    
                do {
                    filename--;
                } while (filename[0] != ' ' && filename > ctx->buffer);
                if (filename > ctx->buffer)
                    *(filename++) = '\0';
                *(link_ptr++) = '\0';
                str = apr_psprintf(p, "%s %s %s\n",
                                   ap_escape_html(p, ctx->buffer),
                                   ap_escape_uri(p, filename),
                                   ap_escape_html(p, filename),
                                   ap_escape_html(p, link_ptr));
            }
    
            /* a directory/file? */
            else if (ctx->buffer[0] == 'd' || ctx->buffer[0] == '-' || ctx->buffer[0] == 'l' || apr_isdigit(ctx->buffer[0])) {
                int searchidx = 0;
                char *searchptr = NULL;
                int firstfile = 1;
                if (apr_isdigit(ctx->buffer[0])) {  /* handle DOS dir */
                    searchptr = strchr(ctx->buffer, '<');
                    if (searchptr != NULL)
                        *searchptr = '[';
                    searchptr = strchr(ctx->buffer, '>');
                    if (searchptr != NULL)
                        *searchptr = ']';
                }
    
                filename = strrchr(ctx->buffer, ' ');
                if (filename == NULL) {
                    /* Line is broken.  Ignore it. */
                    ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01034)
                                  "proxy_ftp: could not parse line %s",
                                  ctx->buffer);
                    /* erase buffer for next time around */
                    ctx->buffer[0] = 0;
                    continue;  /* while state is BODY */
                }
                *(filename++) = '\0';
    
                /* handle filenames with spaces in 'em */
                if (!strcmp(filename, ".") || !strcmp(filename, "..") || firstfile) {
                    firstfile = 0;
                    searchidx = filename - ctx->buffer;
                }
                else if (searchidx != 0 && ctx->buffer[searchidx] != 0) {
                    *(--filename) = ' ';
                    ctx->buffer[searchidx - 1] = '\0';
                    filename = &ctx->buffer[searchidx];
                }
    
                /* Append a slash to the HREF link for directories */
                if (!strcmp(filename, ".") || !strcmp(filename, "..") || ctx->buffer[0] == 'd') {
                    str = apr_psprintf(p, "%s %s\n",
                                       ap_escape_html(p, ctx->buffer),
                                       ap_escape_uri(p, filename),
                                       ap_escape_html(p, filename));
                }
                else {
                    str = apr_psprintf(p, "%s %s\n",
                                       ap_escape_html(p, ctx->buffer),
                                       ap_escape_uri(p, filename),
                                       ap_escape_html(p, filename));
                }
            }
            /* Try a fallback for listings in the format of "ls -s1" */
            else if (0 == ap_regexec(ls_regex, ctx->buffer, LS_REG_MATCH, re_result, 0)) {
                /*
                 * We don't need to check for rm_eo == rm_so == -1 here since ls_regex
                 * is such that $2 cannot be unset if we have a match.
                 */
                filename = apr_pstrndup(p, &ctx->buffer[re_result[2].rm_so], re_result[2].rm_eo - re_result[2].rm_so);
    
                str = apr_pstrcat(p, ap_escape_html(p, apr_pstrndup(p, ctx->buffer, re_result[2].rm_so)),
                                  "",
                                  ap_escape_html(p, filename), "\n", NULL);
            }
            else {
                strcat(ctx->buffer, "\n"); /* re-append the newline */
                str = ap_escape_html(p, ctx->buffer);
            }
    
            /* erase buffer for next time around */
            ctx->buffer[0] = 0;
    
            APR_BRIGADE_INSERT_TAIL(out, apr_bucket_pool_create(str, strlen(str), p,
                                                                c->bucket_alloc));
            APR_BRIGADE_INSERT_TAIL(out, apr_bucket_flush_create(c->bucket_alloc));
            if (APR_SUCCESS != (rv = ap_pass_brigade(f->next, out))) {
                return rv;
            }
            apr_brigade_cleanup(out);
    
        }
    
        if (FOOTER == ctx->state) {
            str = apr_psprintf(p, "
    \n\n
    \n\n %s\n\n \n\n", ap_psignature("", r)); APR_BRIGADE_INSERT_TAIL(out, apr_bucket_pool_create(str, strlen(str), p, c->bucket_alloc)); APR_BRIGADE_INSERT_TAIL(out, apr_bucket_flush_create(c->bucket_alloc)); APR_BRIGADE_INSERT_TAIL(out, apr_bucket_eos_create(c->bucket_alloc)); if (APR_SUCCESS != (rv = ap_pass_brigade(f->next, out))) { return rv; } apr_brigade_destroy(out); } return APR_SUCCESS; } /* Parse EPSV reply and return port, or zero on error. */ static apr_port_t parse_epsv_reply(const char *reply) { const char *p; char *ep; long port; /* Reply syntax per RFC 2428: "229 blah blah (|||port|)" where '|' * can be any character in ASCII from 33-126, obscurely. Verify * the syntax. */ p = ap_strchr_c(reply, '('); if (p == NULL || !p[1] || p[1] != p[2] || p[1] != p[3] || p[4] == p[1]) { return 0; } errno = 0; port = strtol(p + 4, &ep, 10); if (errno || port < 1 || port > 65535 || ep[0] != p[1] || ep[1] != ')') { return 0; } return (apr_port_t)port; } /* * Generic "send FTP command to server" routine, using the control socket. * Returns the FTP returncode (3 digit code) * Allows for tracing the FTP protocol (in LogLevel debug) */ static int proxy_ftp_command(const char *cmd, request_rec *r, conn_rec *ftp_ctrl, apr_bucket_brigade *bb, char **pmessage) { char *crlf; int rc; char message[HUGE_STRING_LEN]; /* If cmd == NULL, we retrieve the next ftp response line */ if (cmd != NULL) { conn_rec *c = r->connection; APR_BRIGADE_INSERT_TAIL(bb, apr_bucket_pool_create(cmd, strlen(cmd), r->pool, c->bucket_alloc)); APR_BRIGADE_INSERT_TAIL(bb, apr_bucket_flush_create(c->bucket_alloc)); ap_pass_brigade(ftp_ctrl->output_filters, bb); if (APLOGrtrace2(r)) { /* strip off the CRLF for logging */ apr_cpystrn(message, cmd, sizeof(message)); if ((crlf = strchr(message, '\r')) != NULL || (crlf = strchr(message, '\n')) != NULL) *crlf = '\0'; if (strncmp(message,"PASS ", 5) == 0) strcpy(&message[5], "****"); ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, ">%s", message); } } rc = ftp_getrc_msg(ftp_ctrl, bb, message, sizeof(message)); if (rc == -1 || rc == 421) strcpy(message,""); if ((crlf = strchr(message, '\r')) != NULL || (crlf = strchr(message, '\n')) != NULL) *crlf = '\0'; ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "<%3.3u %s", rc, message); if (pmessage != NULL) *pmessage = apr_pstrdup(r->pool, message); return rc; } /* Set ftp server to TYPE {A,I,E} before transfer of a directory or file */ static int ftp_set_TYPE(char xfer_type, request_rec *r, conn_rec *ftp_ctrl, apr_bucket_brigade *bb, char **pmessage) { char old_type[2] = { 'A', '\0' }; /* After logon, mode is ASCII */ int ret = HTTP_OK; int rc; /* set desired type */ old_type[0] = xfer_type; rc = proxy_ftp_command(apr_pstrcat(r->pool, "TYPE ", old_type, CRLF, NULL), r, ftp_ctrl, bb, pmessage); /* responses: 200, 421, 500, 501, 504, 530 */ /* 200 Command okay. */ /* 421 Service not available, closing control connection. */ /* 500 Syntax error, command unrecognized. */ /* 501 Syntax error in parameters or arguments. */ /* 504 Command not implemented for that parameter. */ /* 530 Not logged in. */ if (rc == -1 || rc == 421) { ret = ap_proxyerror(r, HTTP_BAD_GATEWAY, "Error reading from remote server"); } else if (rc != 200 && rc != 504) { ret = ap_proxyerror(r, HTTP_BAD_GATEWAY, "Unable to set transfer type"); } /* Allow not implemented */ else if (rc == 504) { /* ignore it silently */ } return ret; } /* Return the current directory which we have selected on the FTP server, or NULL */ static char *ftp_get_PWD(request_rec *r, conn_rec *ftp_ctrl, apr_bucket_brigade *bb) { char *cwd = NULL; char *ftpmessage = NULL; /* responses: 257, 500, 501, 502, 421, 550 */ /* 257 "" */ /* 421 Service not available, closing control connection. */ /* 500 Syntax error, command unrecognized. */ /* 501 Syntax error in parameters or arguments. */ /* 502 Command not implemented. */ /* 550 Requested action not taken. */ switch (proxy_ftp_command("PWD" CRLF, r, ftp_ctrl, bb, &ftpmessage)) { case -1: case 421: case 550: ap_proxyerror(r, HTTP_BAD_GATEWAY, "Failed to read PWD on ftp server"); break; case 257: { const char *dirp = ftpmessage; cwd = ap_getword_conf(r->pool, &dirp); } } return cwd; } /* Common routine for failed authorization (i.e., missing or wrong password) * to an ftp service. This causes most browsers to retry the request * with username and password (which was presumably queried from the user) * supplied in the Authorization: header. * Note that we "invent" a realm name which consists of the * ftp://user@host part of the reqest (sans password -if supplied but invalid-) */ static int ftp_unauthorized(request_rec *r, int log_it) { r->proxyreq = PROXYREQ_NONE; /* * Log failed requests if they supplied a password (log username/password * guessing attempts) */ if (log_it) ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01035) "missing or failed auth to %s", apr_uri_unparse(r->pool, &r->parsed_uri, APR_URI_UNP_OMITPATHINFO)); apr_table_setn(r->err_headers_out, "WWW-Authenticate", apr_pstrcat(r->pool, "Basic realm=\"", apr_uri_unparse(r->pool, &r->parsed_uri, APR_URI_UNP_OMITPASSWORD | APR_URI_UNP_OMITPATHINFO), "\"", NULL)); return HTTP_UNAUTHORIZED; } static apr_status_t proxy_ftp_cleanup(request_rec *r, proxy_conn_rec *backend) { backend->close = 1; ap_set_module_config(r->connection->conn_config, &proxy_ftp_module, NULL); ap_proxy_release_connection("FTP", backend, r->server); return OK; } static int ftp_proxyerror(request_rec *r, proxy_conn_rec *conn, int statuscode, const char *message) { proxy_ftp_cleanup(r, conn); return ap_proxyerror(r, statuscode, message); } /* * Handles direct access of ftp:// URLs * Original (Non-PASV) version from * Troy Morrison * PASV added by Chuck * Filters by [Graham Leggett ] */ static int proxy_ftp_handler(request_rec *r, proxy_worker *worker, proxy_server_conf *conf, char *url, const char *proxyhost, apr_port_t proxyport) { apr_pool_t *p = r->pool; conn_rec *c = r->connection; proxy_conn_rec *backend; apr_socket_t *sock, *local_sock, *data_sock = NULL; apr_sockaddr_t *connect_addr = NULL; apr_status_t rv; conn_rec *origin, *data = NULL; apr_status_t err = APR_SUCCESS; apr_status_t uerr = APR_SUCCESS; apr_bucket_brigade *bb = apr_brigade_create(p, c->bucket_alloc); char *buf, *connectname; apr_port_t connectport; char *ftpmessage = NULL; char *path, *strp, *type_suffix, *cwd = NULL; apr_uri_t uri; char *user = NULL; /* char *account = NULL; how to supply an account in a URL? */ const char *password = NULL; int len, rc; int one = 1; char *size = NULL; char xfer_type = 'A'; /* after ftp login, the default is ASCII */ int dirlisting = 0; #if defined(USE_MDTM) && (defined(HAVE_TIMEGM) || defined(HAVE_GMTOFF)) apr_time_t mtime = 0L; #endif proxy_ftp_dir_conf *fdconf = ap_get_module_config(r->per_dir_config, &proxy_ftp_module); /* stuff for PASV mode */ int connect = 0, use_port = 0; char dates[APR_RFC822_DATE_LEN]; int status; apr_pool_t *address_pool; /* is this for us? */ if (proxyhost) { ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "declining URL %s - proxyhost %s specified:", url, proxyhost); return DECLINED; /* proxy connections are via HTTP */ } if (strncasecmp(url, "ftp:", 4)) { ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "declining URL %s - not ftp:", url); return DECLINED; /* only interested in FTP */ } ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "serving URL %s", url); /* * I: Who Do I Connect To? ----------------------- * * Break up the URL to determine the host to connect to */ /* we only support GET and HEAD */ if (r->method_number != M_GET) return HTTP_NOT_IMPLEMENTED; /* We break the URL into host, port, path-search */ if (r->parsed_uri.hostname == NULL) { if (APR_SUCCESS != apr_uri_parse(p, url, &uri)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(10189) "URI cannot be parsed: %s", url); return ap_proxyerror(r, HTTP_BAD_REQUEST, "URI cannot be parsed"); } connectname = uri.hostname; connectport = uri.port; path = apr_pstrdup(p, uri.path); } else { connectname = r->parsed_uri.hostname; connectport = r->parsed_uri.port; path = apr_pstrdup(p, r->parsed_uri.path); } if (connectport == 0) { connectport = apr_uri_port_of_scheme("ftp"); } path = (path != NULL && path[0] != '\0') ? &path[1] : ""; type_suffix = strchr(path, ';'); if (type_suffix != NULL) *(type_suffix++) = '\0'; if (type_suffix != NULL && strncmp(type_suffix, "type=", 5) == 0 && apr_isalpha(type_suffix[5])) { /* "type=d" forces a dir listing. * The other types (i|a|e) are directly used for the ftp TYPE command */ if ( ! (dirlisting = (apr_tolower(type_suffix[5]) == 'd'))) xfer_type = apr_toupper(type_suffix[5]); /* Check valid types, rather than ignoring invalid types silently: */ if (strchr("AEI", xfer_type) == NULL) return ap_proxyerror(r, HTTP_BAD_REQUEST, apr_pstrcat(r->pool, "ftp proxy supports only types 'a', 'i', or 'e': \"", type_suffix, "\" is invalid.", NULL)); } else { /* make binary transfers the default */ xfer_type = 'I'; } /* * The "Authorization:" header must be checked first. We allow the user * to "override" the URL-coded user [ & password ] in the Browsers' * User&Password Dialog. NOTE that this is only marginally more secure * than having the password travel in plain as part of the URL, because * Basic Auth simply uuencodes the plain text password. But chances are * still smaller that the URL is logged regularly. */ if ((password = apr_table_get(r->headers_in, "Authorization")) != NULL && strcasecmp(ap_getword(r->pool, &password, ' '), "Basic") == 0 && (password = ap_pbase64decode(r->pool, password))[0] != ':') { /* Check the decoded string for special characters. */ if (!ftp_check_string(password)) { return ap_proxyerror(r, HTTP_BAD_REQUEST, "user credentials contained invalid character"); } /* * Note that this allocation has to be made from r->connection->pool * because it has the lifetime of the connection. The other * allocations are temporary and can be tossed away any time. */ user = ap_getword_nulls(r->connection->pool, &password, ':'); r->ap_auth_type = "Basic"; r->user = r->parsed_uri.user = user; } else if ((user = r->parsed_uri.user) != NULL) { user = apr_pstrdup(p, user); decodeenc(user); if ((password = r->parsed_uri.password) != NULL) { char *tmp = apr_pstrdup(p, password); decodeenc(tmp); password = tmp; } } else { user = "anonymous"; password = "apache-proxy@"; } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01036) "connecting %s to %s:%d", url, connectname, connectport); if (worker->s->is_address_reusable) { if (!worker->cp->addr) { if ((err = PROXY_THREAD_LOCK(worker->balancer)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, err, r, APLOGNO(01037) "lock"); return HTTP_INTERNAL_SERVER_ERROR; } } connect_addr = worker->cp->addr; address_pool = worker->cp->pool; } else address_pool = r->pool; /* do a DNS lookup for the destination host */ if (!connect_addr) err = apr_sockaddr_info_get(&(connect_addr), connectname, APR_UNSPEC, connectport, 0, address_pool); if (worker->s->is_address_reusable && !worker->cp->addr) { worker->cp->addr = connect_addr; if ((uerr = PROXY_THREAD_UNLOCK(worker->balancer)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, uerr, r, APLOGNO(01038) "unlock"); } } /* * get all the possible IP addresses for the destname and loop through * them until we get a successful connection */ if (APR_SUCCESS != err) { return ap_proxyerror(r, HTTP_BAD_GATEWAY, apr_pstrcat(p, "DNS lookup failure for: ", connectname, NULL)); } /* check if ProxyBlock directive on this host */ if (OK != ap_proxy_checkproxyblock2(r, conf, connectname, connect_addr)) { return ap_proxyerror(r, HTTP_FORBIDDEN, "Connect to remote machine blocked"); } /* create space for state information */ backend = (proxy_conn_rec *) ap_get_module_config(c->conn_config, &proxy_ftp_module); if (!backend) { status = ap_proxy_acquire_connection("FTP", &backend, worker, r->server); if (status != OK) { if (backend) { backend->close = 1; ap_proxy_release_connection("FTP", backend, r->server); } return status; } /* TODO: see if ftp could use determine_connection */ backend->addr = connect_addr; ap_set_module_config(c->conn_config, &proxy_ftp_module, backend); } /* * II: Make the Connection ----------------------- * * We have determined who to connect to. Now make the connection. */ if (ap_proxy_connect_backend("FTP", backend, worker, r->server)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01039) "an error occurred creating a new connection to %pI (%s)", connect_addr, connectname); proxy_ftp_cleanup(r, backend); return HTTP_SERVICE_UNAVAILABLE; } status = ap_proxy_connection_create_ex("FTP", backend, r); if (status != OK) { proxy_ftp_cleanup(r, backend); return status; } /* Use old naming */ origin = backend->connection; sock = backend->sock; ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "control connection complete"); /* * III: Send Control Request ------------------------- * * Log into the ftp server, send the username & password, change to the * correct directory... */ /* possible results: */ /* 120 Service ready in nnn minutes. */ /* 220 Service ready for new user. */ /* 421 Service not available, closing control connection. */ rc = proxy_ftp_command(NULL, r, origin, bb, &ftpmessage); if (rc == -1 || rc == 421) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, "Error reading from remote server"); } if (rc == 120) { /* * RFC2616 states: 14.37 Retry-After * * The Retry-After response-header field can be used with a 503 (Service * Unavailable) response to indicate how long the service is expected * to be unavailable to the requesting client. [...] The value of * this field can be either an HTTP-date or an integer number of * seconds (in decimal) after the time of the response. Retry-After * = "Retry-After" ":" ( HTTP-date | delta-seconds ) */ char *secs_str = ftpmessage; time_t secs; /* Look for a number, preceded by whitespace */ while (*secs_str) if ((secs_str==ftpmessage || apr_isspace(secs_str[-1])) && apr_isdigit(secs_str[0])) break; if (*secs_str != '\0') { secs = atol(secs_str); apr_table_addn(r->headers_out, "Retry-After", apr_psprintf(p, "%lu", (unsigned long)(60 * secs))); } return ftp_proxyerror(r, backend, HTTP_SERVICE_UNAVAILABLE, ftpmessage); } if (rc != 220) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, ftpmessage); } rc = proxy_ftp_command(apr_pstrcat(p, "USER ", user, CRLF, NULL), r, origin, bb, &ftpmessage); /* possible results; 230, 331, 332, 421, 500, 501, 530 */ /* states: 1 - error, 2 - success; 3 - send password, 4,5 fail */ /* 230 User logged in, proceed. */ /* 331 User name okay, need password. */ /* 332 Need account for login. */ /* 421 Service not available, closing control connection. */ /* 500 Syntax error, command unrecognized. */ /* (This may include errors such as command line too long.) */ /* 501 Syntax error in parameters or arguments. */ /* 530 Not logged in. */ if (rc == -1 || rc == 421) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, "Error reading from remote server"); } if (rc == 530) { proxy_ftp_cleanup(r, backend); return ftp_unauthorized(r, 1); /* log it: user name guessing * attempt? */ } if (rc != 230 && rc != 331) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, ftpmessage); } if (rc == 331) { /* send password */ if (password == NULL) { proxy_ftp_cleanup(r, backend); return ftp_unauthorized(r, 0); } rc = proxy_ftp_command(apr_pstrcat(p, "PASS ", password, CRLF, NULL), r, origin, bb, &ftpmessage); /* possible results 202, 230, 332, 421, 500, 501, 503, 530 */ /* 230 User logged in, proceed. */ /* 332 Need account for login. */ /* 421 Service not available, closing control connection. */ /* 500 Syntax error, command unrecognized. */ /* 501 Syntax error in parameters or arguments. */ /* 503 Bad sequence of commands. */ /* 530 Not logged in. */ if (rc == -1 || rc == 421) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, "Error reading from remote server"); } if (rc == 332) { return ftp_proxyerror(r, backend, HTTP_UNAUTHORIZED, apr_pstrcat(p, "Need account for login: ", ftpmessage, NULL)); } /* @@@ questionable -- we might as well return a 403 Forbidden here */ if (rc == 530) { proxy_ftp_cleanup(r, backend); return ftp_unauthorized(r, 1); /* log it: passwd guessing * attempt? */ } if (rc != 230 && rc != 202) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, ftpmessage); } } apr_table_set(r->notes, "Directory-README", ftpmessage); /* Special handling for leading "%2f": this enforces a "cwd /" * out of the $HOME directory which was the starting point after login */ if (strncasecmp(path, "%2f", 3) == 0) { path += 3; while (*path == '/') /* skip leading '/' (after root %2f) */ ++path; rc = proxy_ftp_command("CWD /" CRLF, r, origin, bb, &ftpmessage); if (rc == -1 || rc == 421) return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, "Error reading from remote server"); } /* * set the directory (walk directory component by component): this is * what we must do if we don't know the OS type of the remote machine */ for (;;) { strp = strchr(path, '/'); if (strp == NULL) break; *strp = '\0'; decodeenc(path); /* Note! This decodes a %2f -> "/" */ if (strchr(path, '/')) { /* are there now any '/' characters? */ return ftp_proxyerror(r, backend, HTTP_BAD_REQUEST, "Use of /%2f is only allowed at the base directory"); } /* NOTE: FTP servers do globbing on the path. * So we need to escape the URI metacharacters. * We use a special glob-escaping routine to escape globbing chars. * We could also have extended gen_test_char.c with a special T_ESCAPE_FTP_PATH */ rc = proxy_ftp_command(apr_pstrcat(p, "CWD ", ftp_escape_globbingchars(p, path, fdconf), CRLF, NULL), r, origin, bb, &ftpmessage); *strp = '/'; /* responses: 250, 421, 500, 501, 502, 530, 550 */ /* 250 Requested file action okay, completed. */ /* 421 Service not available, closing control connection. */ /* 500 Syntax error, command unrecognized. */ /* 501 Syntax error in parameters or arguments. */ /* 502 Command not implemented. */ /* 530 Not logged in. */ /* 550 Requested action not taken. */ if (rc == -1 || rc == 421) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, "Error reading from remote server"); } if (rc == 550) { return ftp_proxyerror(r, backend, HTTP_NOT_FOUND, ftpmessage); } if (rc != 250) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, ftpmessage); } path = strp + 1; } /* * IV: Make Data Connection? ------------------------- * * Try EPSV, if that fails... try PASV, if that fails... try PORT. */ /* this temporarily switches off EPSV/PASV */ /*goto bypass;*/ /* set up data connection - EPSV */ { apr_port_t data_port; /* * The EPSV command replaces PASV where both IPV4 and IPV6 is * supported. Only the port is returned, the IP address is always the * same as that on the control connection. Example: Entering Extended * Passive Mode (|||6446|) */ rc = proxy_ftp_command("EPSV" CRLF, r, origin, bb, &ftpmessage); /* possible results: 227, 421, 500, 501, 502, 530 */ /* 227 Entering Passive Mode (h1,h2,h3,h4,p1,p2). */ /* 421 Service not available, closing control connection. */ /* 500 Syntax error, command unrecognized. */ /* 501 Syntax error in parameters or arguments. */ /* 502 Command not implemented. */ /* 530 Not logged in. */ if (rc == -1 || rc == 421) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, "Error reading from remote server"); } if (rc != 229 && rc != 500 && rc != 501 && rc != 502) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, ftpmessage); } else if (rc == 229) { /* Parse the port out of the EPSV reply. */ data_port = parse_epsv_reply(ftpmessage); if (data_port) { apr_sockaddr_t *remote_addr, epsv_addr; ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "EPSV contacting remote host on port %d", data_port); /* Retrieve the client's address. */ rv = apr_socket_addr_get(&remote_addr, APR_REMOTE, sock); if (rv == APR_SUCCESS) { /* Take a shallow copy of the server address to * modify; the _addr_get function gives back a * pointer to the socket's internal structure. * This is awkward given current APR network * interfaces. */ epsv_addr = *remote_addr; epsv_addr.port = data_port; #if APR_HAVE_IPV6 if (epsv_addr.family == APR_INET6) { epsv_addr.sa.sin6.sin6_port = htons(data_port); } else #endif { epsv_addr.sa.sin.sin_port = htons(data_port); } rv = apr_socket_create(&data_sock, epsv_addr.family, SOCK_STREAM, 0, r->pool); } if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01040) "could not establish socket for client data connection"); proxy_ftp_cleanup(r, backend); return HTTP_INTERNAL_SERVER_ERROR; } if (conf->recv_buffer_size > 0 && (rv = apr_socket_opt_set(data_sock, APR_SO_RCVBUF, conf->recv_buffer_size))) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01041) "apr_socket_opt_set(SO_RCVBUF): Failed to " "set ProxyReceiveBufferSize, using default"); } rv = apr_socket_opt_set(data_sock, APR_TCP_NODELAY, 1); if (rv != APR_SUCCESS && rv != APR_ENOTIMPL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01042) "apr_socket_opt_set(APR_TCP_NODELAY): " "Failed to set"); } rv = apr_socket_connect(data_sock, &epsv_addr); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01043) "EPSV attempt to connect to %pI failed - " "Firewall/NAT?", &epsv_addr); return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, apr_psprintf(r->pool, "EPSV attempt to connect to %pI failed - firewall/NAT?", &epsv_addr)); } else { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "connected data socket to %pI", &epsv_addr); connect = 1; } } } } /* set up data connection - PASV */ if (!connect) { rc = proxy_ftp_command("PASV" CRLF, r, origin, bb, &ftpmessage); /* possible results: 227, 421, 500, 501, 502, 530 */ /* 227 Entering Passive Mode (h1,h2,h3,h4,p1,p2). */ /* 421 Service not available, closing control connection. */ /* 500 Syntax error, command unrecognized. */ /* 501 Syntax error in parameters or arguments. */ /* 502 Command not implemented. */ /* 530 Not logged in. */ if (rc == -1 || rc == 421) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, "Error reading from remote server"); } if (rc != 227 && rc != 502) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, ftpmessage); } else if (rc == 227) { unsigned int h0, h1, h2, h3, p0, p1; char *pstr; char *tok_cntx; /* FIXME: Check PASV against RFC1123 */ pstr = ftpmessage; pstr = apr_strtok(pstr, " ", &tok_cntx); /* separate result code */ if (pstr != NULL) { if (*(pstr + strlen(pstr) + 1) == '=') { pstr += strlen(pstr) + 2; } else { pstr = apr_strtok(NULL, "(", &tok_cntx); /* separate address & * port params */ if (pstr != NULL) pstr = apr_strtok(NULL, ")", &tok_cntx); } } /* FIXME: Only supports IPV4 - fix in RFC2428 */ if (pstr != NULL && (sscanf(pstr, "%d,%d,%d,%d,%d,%d", &h3, &h2, &h1, &h0, &p1, &p0) == 6)) { apr_sockaddr_t *pasv_addr; apr_port_t pasvport = (p1 << 8) + p0; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01044) "PASV contacting host %d.%d.%d.%d:%d", h3, h2, h1, h0, pasvport); if ((rv = apr_socket_create(&data_sock, connect_addr->family, SOCK_STREAM, 0, r->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01045) "error creating PASV socket"); proxy_ftp_cleanup(r, backend); return HTTP_INTERNAL_SERVER_ERROR; } if (conf->recv_buffer_size > 0 && (rv = apr_socket_opt_set(data_sock, APR_SO_RCVBUF, conf->recv_buffer_size))) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01046) "apr_socket_opt_set(SO_RCVBUF): Failed to set ProxyReceiveBufferSize, using default"); } rv = apr_socket_opt_set(data_sock, APR_TCP_NODELAY, 1); if (rv != APR_SUCCESS && rv != APR_ENOTIMPL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01047) "apr_socket_opt_set(APR_TCP_NODELAY): " "Failed to set"); } /* make the connection */ apr_sockaddr_info_get(&pasv_addr, apr_psprintf(p, "%d.%d.%d.%d", h3, h2, h1, h0), connect_addr->family, pasvport, 0, p); rv = apr_socket_connect(data_sock, pasv_addr); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01048) "PASV attempt to connect to %pI failed - Firewall/NAT?", pasv_addr); return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, apr_psprintf(r->pool, "PASV attempt to connect to %pI failed - firewall/NAT?", pasv_addr)); } else { connect = 1; } } } } /*bypass:*/ /* set up data connection - PORT */ if (!connect) { apr_sockaddr_t *local_addr; char *local_ip; apr_port_t local_port; unsigned int h0, h1, h2, h3, p0, p1; if ((rv = apr_socket_create(&local_sock, connect_addr->family, SOCK_STREAM, 0, r->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01049) "error creating local socket"); proxy_ftp_cleanup(r, backend); return HTTP_INTERNAL_SERVER_ERROR; } apr_socket_addr_get(&local_addr, APR_LOCAL, sock); local_port = local_addr->port; apr_sockaddr_ip_get(&local_ip, local_addr); if ((rv = apr_socket_opt_set(local_sock, APR_SO_REUSEADDR, one)) != APR_SUCCESS) { #ifndef _OSD_POSIX /* BS2000 has this option "always on" */ ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01050) "error setting reuseaddr option"); proxy_ftp_cleanup(r, backend); return HTTP_INTERNAL_SERVER_ERROR; #endif /* _OSD_POSIX */ } apr_sockaddr_info_get(&local_addr, local_ip, APR_UNSPEC, local_port, 0, r->pool); if ((rv = apr_socket_bind(local_sock, local_addr)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01051) "error binding to ftp data socket %pI", local_addr); proxy_ftp_cleanup(r, backend); return HTTP_INTERNAL_SERVER_ERROR; } /* only need a short queue */ if ((rv = apr_socket_listen(local_sock, 2)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01052) "error listening to ftp data socket %pI", local_addr); proxy_ftp_cleanup(r, backend); return HTTP_INTERNAL_SERVER_ERROR; } /* FIXME: Sent PORT here */ if (local_ip && (sscanf(local_ip, "%d.%d.%d.%d", &h3, &h2, &h1, &h0) == 4)) { p1 = (local_port >> 8); p0 = (local_port & 0xFF); rc = proxy_ftp_command(apr_psprintf(p, "PORT %d,%d,%d,%d,%d,%d" CRLF, h3, h2, h1, h0, p1, p0), r, origin, bb, &ftpmessage); /* possible results: 200, 421, 500, 501, 502, 530 */ /* 200 Command okay. */ /* 421 Service not available, closing control connection. */ /* 500 Syntax error, command unrecognized. */ /* 501 Syntax error in parameters or arguments. */ /* 502 Command not implemented. */ /* 530 Not logged in. */ if (rc == -1 || rc == 421) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, "Error reading from remote server"); } if (rc != 200) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, ftpmessage); } /* signal that we must use the EPRT/PORT loop */ use_port = 1; } else { /* IPV6 FIXME: * The EPRT command replaces PORT where both IPV4 and IPV6 is supported. The first * number (1,2) indicates the protocol type. Examples: * EPRT |1|132.235.1.2|6275| * EPRT |2|1080::8:800:200C:417A|5282| */ return ftp_proxyerror(r, backend, HTTP_NOT_IMPLEMENTED, "Connect to IPV6 ftp server using EPRT not supported. Enable EPSV."); } } /* * V: Set The Headers ------------------- * * Get the size of the request, set up the environment for HTTP. */ /* set request; "path" holds last path component */ len = decodeenc(path); if (strchr(path, '/')) { /* are there now any '/' characters? */ return ftp_proxyerror(r, backend, HTTP_BAD_REQUEST, "Use of /%2f is only allowed at the base directory"); } /* If len == 0 then it must be a directory (you can't RETR nothing) * Also, don't allow to RETR by wildcard. Instead, create a dirlisting, * unless ProxyFtpListOnWildcard is off. */ if (len == 0 || (ftp_check_globbingchars(path) && fdconf->ftp_list_on_wildcard)) { dirlisting = 1; } else { /* (from FreeBSD ftpd): * SIZE is not in RFC959, but Postel has blessed it and * it will be in the updated RFC. * * Return size of file in a format suitable for * using with RESTART (we just count bytes). */ /* from draft-ietf-ftpext-mlst-14.txt: * This value will * change depending on the current STRUcture, MODE and TYPE of the data * connection, or a data connection which would be created were one * created now. Thus, the result of the SIZE command is dependent on * the currently established STRU, MODE and TYPE parameters. */ /* Therefore: switch to binary if the user did not specify ";type=a" */ ftp_set_TYPE(xfer_type, r, origin, bb, &ftpmessage); rc = proxy_ftp_command(apr_pstrcat(p, "SIZE ", ftp_escape_globbingchars(p, path, fdconf), CRLF, NULL), r, origin, bb, &ftpmessage); if (rc == -1 || rc == 421) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, "Error reading from remote server"); } else if (rc == 213) {/* Size command ok */ int j; for (j = 0; apr_isdigit(ftpmessage[j]); j++) ; ftpmessage[j] = '\0'; if (ftpmessage[0] != '\0') size = ftpmessage; /* already pstrdup'ed: no copy necessary */ } else if (rc == 550) { /* Not a regular file */ ap_log_rerror(APLOG_MARK, APLOG_TRACE4, 0, r, "SIZE shows this is a directory"); dirlisting = 1; rc = proxy_ftp_command(apr_pstrcat(p, "CWD ", ftp_escape_globbingchars(p, path, fdconf), CRLF, NULL), r, origin, bb, &ftpmessage); /* possible results: 250, 421, 500, 501, 502, 530, 550 */ /* 250 Requested file action okay, completed. */ /* 421 Service not available, closing control connection. */ /* 500 Syntax error, command unrecognized. */ /* 501 Syntax error in parameters or arguments. */ /* 502 Command not implemented. */ /* 530 Not logged in. */ /* 550 Requested action not taken. */ if (rc == -1 || rc == 421) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, "Error reading from remote server"); } if (rc == 550) { return ftp_proxyerror(r, backend, HTTP_NOT_FOUND, ftpmessage); } if (rc != 250) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, ftpmessage); } path = ""; len = 0; } } cwd = ftp_get_PWD(r, origin, bb); if (cwd != NULL) { apr_table_set(r->notes, "Directory-PWD", cwd); } if (dirlisting) { ftp_set_TYPE('A', r, origin, bb, NULL); /* If the current directory contains no slash, we are talking to * a non-unix ftp system. Try LIST instead of "LIST -lag", it * should return a long listing anyway (unlike NLST). * Some exotic FTP servers might choke on the "-lag" switch. */ /* Note that we do not escape the path here, to allow for * queries like: ftp://user@host/apache/src/server/http_*.c */ if (len != 0) buf = apr_pstrcat(p, "LIST ", path, CRLF, NULL); else if (cwd == NULL || strchr(cwd, '/') != NULL) buf = "LIST -lag" CRLF; else buf = "LIST" CRLF; } else { /* switch to binary if the user did not specify ";type=a" */ ftp_set_TYPE(xfer_type, r, origin, bb, &ftpmessage); #if defined(USE_MDTM) && (defined(HAVE_TIMEGM) || defined(HAVE_GMTOFF)) /* from draft-ietf-ftpext-mlst-14.txt: * The FTP command, MODIFICATION TIME (MDTM), can be used to determine * when a file in the server NVFS was last modified. <..> * The syntax of a time value is: * time-val = 14DIGIT [ "." 1*DIGIT ] <..> * Symbolically, a time-val may be viewed as * YYYYMMDDHHMMSS.sss * The "." and subsequent digits ("sss") are optional. <..> * Time values are always represented in UTC (GMT) */ rc = proxy_ftp_command(apr_pstrcat(p, "MDTM ", ftp_escape_globbingchars(p, path, fdconf), CRLF, NULL), r, origin, bb, &ftpmessage); /* then extract the Last-Modified time from it (YYYYMMDDhhmmss or YYYYMMDDhhmmss.xxx GMT). */ if (rc == 213) { struct { char YYYY[4+1]; char MM[2+1]; char DD[2+1]; char hh[2+1]; char mm[2+1]; char ss[2+1]; } time_val; if (6 == sscanf(ftpmessage, "%4[0-9]%2[0-9]%2[0-9]%2[0-9]%2[0-9]%2[0-9]", time_val.YYYY, time_val.MM, time_val.DD, time_val.hh, time_val.mm, time_val.ss)) { struct tm tms; memset (&tms, '\0', sizeof tms); tms.tm_year = atoi(time_val.YYYY) - 1900; tms.tm_mon = atoi(time_val.MM) - 1; tms.tm_mday = atoi(time_val.DD); tms.tm_hour = atoi(time_val.hh); tms.tm_min = atoi(time_val.mm); tms.tm_sec = atoi(time_val.ss); #ifdef HAVE_TIMEGM /* Does system have timegm()? */ mtime = timegm(&tms); mtime *= APR_USEC_PER_SEC; #elif HAVE_GMTOFF /* does struct tm have a member tm_gmtoff? */ /* mktime will subtract the local timezone, which is not what we want. * Add it again because the MDTM string is GMT */ mtime = mktime(&tms); mtime += tms.tm_gmtoff; mtime *= APR_USEC_PER_SEC; #else mtime = 0L; #endif } } #endif /* USE_MDTM */ /* FIXME: Handle range requests - send REST */ buf = apr_pstrcat(p, "RETR ", ftp_escape_globbingchars(p, path, fdconf), CRLF, NULL); } rc = proxy_ftp_command(buf, r, origin, bb, &ftpmessage); /* rc is an intermediate response for the LIST or RETR commands */ /* * RETR: 110, 125, 150, 226, 250, 421, 425, 426, 450, 451, 500, 501, 530, * 550 NLST: 125, 150, 226, 250, 421, 425, 426, 450, 451, 500, 501, 502, * 530 */ /* 110 Restart marker reply. */ /* 125 Data connection already open; transfer starting. */ /* 150 File status okay; about to open data connection. */ /* 226 Closing data connection. */ /* 250 Requested file action okay, completed. */ /* 421 Service not available, closing control connection. */ /* 425 Can't open data connection. */ /* 426 Connection closed; transfer aborted. */ /* 450 Requested file action not taken. */ /* 451 Requested action aborted. Local error in processing. */ /* 500 Syntax error, command unrecognized. */ /* 501 Syntax error in parameters or arguments. */ /* 530 Not logged in. */ /* 550 Requested action not taken. */ if (rc == -1 || rc == 421) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, "Error reading from remote server"); } if (rc == 550) { ap_log_rerror(APLOG_MARK, APLOG_TRACE4, 0, r, "RETR failed, trying LIST instead"); /* Directory Listings should always be fetched in ASCII mode */ dirlisting = 1; ftp_set_TYPE('A', r, origin, bb, NULL); rc = proxy_ftp_command(apr_pstrcat(p, "CWD ", ftp_escape_globbingchars(p, path, fdconf), CRLF, NULL), r, origin, bb, &ftpmessage); /* possible results: 250, 421, 500, 501, 502, 530, 550 */ /* 250 Requested file action okay, completed. */ /* 421 Service not available, closing control connection. */ /* 500 Syntax error, command unrecognized. */ /* 501 Syntax error in parameters or arguments. */ /* 502 Command not implemented. */ /* 530 Not logged in. */ /* 550 Requested action not taken. */ if (rc == -1 || rc == 421) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, "Error reading from remote server"); } if (rc == 550) { return ftp_proxyerror(r, backend, HTTP_NOT_FOUND, ftpmessage); } if (rc != 250) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, ftpmessage); } /* Update current directory after CWD */ cwd = ftp_get_PWD(r, origin, bb); if (cwd != NULL) { apr_table_set(r->notes, "Directory-PWD", cwd); } /* See above for the "LIST" vs. "LIST -lag" discussion. */ rc = proxy_ftp_command((cwd == NULL || strchr(cwd, '/') != NULL) ? "LIST -lag" CRLF : "LIST" CRLF, r, origin, bb, &ftpmessage); /* rc is an intermediate response for the LIST command (125 transfer starting, 150 opening data connection) */ if (rc == -1 || rc == 421) return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, "Error reading from remote server"); } if (rc != 125 && rc != 150 && rc != 226 && rc != 250) { return ftp_proxyerror(r, backend, HTTP_BAD_GATEWAY, ftpmessage); } r->status = HTTP_OK; r->status_line = "200 OK"; apr_rfc822_date(dates, r->request_time); apr_table_setn(r->headers_out, "Date", dates); apr_table_setn(r->headers_out, "Server", ap_get_server_description()); /* set content-type */ if (dirlisting) { ap_set_content_type(r, apr_pstrcat(p, "text/html;charset=", fdconf->ftp_directory_charset ? fdconf->ftp_directory_charset : "ISO-8859-1", NULL)); } else { if (xfer_type != 'A' && size != NULL) { /* We "trust" the ftp server to really serve (size) bytes... */ apr_table_setn(r->headers_out, "Content-Length", size); ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "Content-Length set to %s", size); } } if (r->content_type) { apr_table_setn(r->headers_out, "Content-Type", r->content_type); ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "Content-Type set to %s", r->content_type); } #if defined(USE_MDTM) && (defined(HAVE_TIMEGM) || defined(HAVE_GMTOFF)) if (mtime != 0L) { char datestr[APR_RFC822_DATE_LEN]; apr_rfc822_date(datestr, mtime); apr_table_set(r->headers_out, "Last-Modified", datestr); ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "Last-Modified set to %s", datestr); } #endif /* USE_MDTM */ /* If an encoding has been set by mistake, delete it. * @@@ FIXME (e.g., for ftp://user@host/file*.tar.gz, * @@@ the encoding is currently set to x-gzip) */ if (dirlisting && r->content_encoding != NULL) r->content_encoding = NULL; /* set content-encoding (not for dir listings, they are uncompressed)*/ if (r->content_encoding != NULL && r->content_encoding[0] != '\0') { ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "Content-Encoding set to %s", r->content_encoding); apr_table_setn(r->headers_out, "Content-Encoding", r->content_encoding); } /* wait for connection */ if (use_port) { for (;;) { rv = apr_socket_accept(&data_sock, local_sock, r->pool); if (APR_STATUS_IS_EINTR(rv)) { continue; } else if (rv == APR_SUCCESS) { break; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01053) "failed to accept data connection"); proxy_ftp_cleanup(r, backend); return HTTP_BAD_GATEWAY; } } } /* the transfer socket is now open, create a new connection */ data = ap_run_create_connection(p, r->server, data_sock, r->connection->id, r->connection->sbh, c->bucket_alloc); if (!data) { /* * the peer reset the connection already; ap_run_create_connection() closed * the socket */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01054) "an error occurred creating the transfer connection"); proxy_ftp_cleanup(r, backend); return HTTP_INTERNAL_SERVER_ERROR; } /* * We do not do SSL over the data connection, even if the virtual host we * are in might have SSL enabled */ ap_proxy_ssl_engine(data, r->per_dir_config, 0); /* set up the connection filters */ rc = ap_run_pre_connection(data, data_sock); if (rc != OK && rc != DONE) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01055) "pre_connection setup failed (%d)", rc); data->aborted = 1; proxy_ftp_cleanup(r, backend); return rc; } /* * VI: Receive the Response ------------------------ * * Get response from the remote ftp socket, and pass it up the filter chain. */ /* send response */ r->sent_bodyct = 1; if (dirlisting) { /* insert directory filter */ ap_add_output_filter("PROXY_SEND_DIR", NULL, r, r->connection); } /* send body */ if (!r->header_only) { apr_bucket *e; int finish = FALSE; ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "start body send"); /* read the body, pass it to the output filters */ while (ap_get_brigade(data->input_filters, bb, AP_MODE_READBYTES, APR_BLOCK_READ, conf->io_buffer_size) == APR_SUCCESS) { #if DEBUGGING { apr_off_t readbytes; apr_brigade_length(bb, 0, &readbytes); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, r->server, APLOGNO(01056) "proxy: readbytes: %#x", readbytes); } #endif /* sanity check */ if (APR_BRIGADE_EMPTY(bb)) { break; } /* found the last brigade? */ if (APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(bb))) { /* if this is the last brigade, cleanup the * backend connection first to prevent the * backend server from hanging around waiting * for a slow client to eat these bytes */ ap_flush_conn(data); if (data_sock) { apr_socket_close(data_sock); } data_sock = NULL; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01057) "data connection closed"); /* signal that we must leave */ finish = TRUE; } /* if no EOS yet, then we must flush */ if (FALSE == finish) { e = apr_bucket_flush_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); } /* try send what we read */ if (ap_pass_brigade(r->output_filters, bb) != APR_SUCCESS || c->aborted) { /* Ack! Phbtt! Die! User aborted! */ finish = TRUE; } /* make sure we always clean up after ourselves */ apr_brigade_cleanup(bb); /* if we are done, leave */ if (TRUE == finish) { break; } } ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "end body send"); } if (data_sock) { ap_flush_conn(data); apr_socket_close(data_sock); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01058) "data connection closed"); } /* Retrieve the final response for the RETR or LIST commands */ proxy_ftp_command(NULL, r, origin, bb, &ftpmessage); apr_brigade_cleanup(bb); /* * VII: Clean Up ------------- * * If there are no KeepAlives, or if the connection has been signalled to * close, close the socket and clean up */ /* finish */ proxy_ftp_command("QUIT" CRLF, r, origin, bb, &ftpmessage); /* responses: 221, 500 */ /* 221 Service closing control connection. */ /* 500 Syntax error, command unrecognized. */ ap_flush_conn(origin); proxy_ftp_cleanup(r, backend); apr_brigade_destroy(bb); return OK; } static void ap_proxy_ftp_register_hook(apr_pool_t *p) { /* hooks */ proxy_hook_scheme_handler(proxy_ftp_handler, NULL, NULL, APR_HOOK_MIDDLE); proxy_hook_canon_handler(proxy_ftp_canon, NULL, NULL, APR_HOOK_MIDDLE); /* filters */ ap_register_output_filter("PROXY_SEND_DIR", proxy_send_dir_filter, NULL, AP_FTYPE_RESOURCE); /* Compile the output format of "ls -s1" as a fallback for non-unix ftp listings */ ls_regex = ap_pregcomp(p, LS_REG_PATTERN, AP_REG_EXTENDED); ap_assert(ls_regex != NULL); } static const command_rec proxy_ftp_cmds[] = { AP_INIT_FLAG("ProxyFtpListOnWildcard", set_ftp_list_on_wildcard, NULL, RSRC_CONF|ACCESS_CONF, "Whether wildcard characters in a path cause mod_proxy_ftp to list the files instead of trying to get them. Defaults to on."), AP_INIT_FLAG("ProxyFtpEscapeWildcards", set_ftp_escape_wildcards, NULL, RSRC_CONF|ACCESS_CONF, "Whether the proxy should escape wildcards in paths before sending them to the FTP server. Defaults to on, but most FTP servers will need it turned off if you need to manage paths that contain wildcard characters."), AP_INIT_TAKE1("ProxyFtpDirCharset", set_ftp_directory_charset, NULL, RSRC_CONF|ACCESS_CONF, "Define the character set for proxied FTP listings"), {NULL} }; AP_DECLARE_MODULE(proxy_ftp) = { STANDARD20_MODULE_STUFF, create_proxy_ftp_dir_config,/* create per-directory config structure */ merge_proxy_ftp_dir_config, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ proxy_ftp_cmds, /* command apr_table_t */ ap_proxy_ftp_register_hook /* register hooks */ }; httpd-2.4.41/modules/proxy/NWGNUproxylbm_busy0000644000000000000500000001037012010715741017544 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/proxy \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxylbm_busy # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy LoadBalance by Busyness Sub-Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = LBM Busy Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = $(OBJDIR)/$(NLM_NAME).nlm # # If there is an LIB target, put it here # TARGET_lib = # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_lbmethod_bybusyness.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ libc \ aprlib \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ @$(OBJDIR)/mod_proxy.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ lbmethod_bybusyness_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c balancers # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/ajp_msg.c0000644000000000000500000004215412661357032015664 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ajp.h" APLOG_USE_MODULE(proxy_ajp); #define AJP_MSG_DUMP_BYTES_PER_LINE 16 /* 2 hex digits plus space plus one char per dumped byte */ /* plus prefix plus separator plus '\0' */ #define AJP_MSG_DUMP_PREFIX_LENGTH strlen("XXXX ") #define AJP_MSG_DUMP_LINE_LENGTH ((AJP_MSG_DUMP_BYTES_PER_LINE * \ strlen("XX .")) + \ AJP_MSG_DUMP_PREFIX_LENGTH + \ strlen(" - ") + 1) static char *hex_table = "0123456789ABCDEF"; /** * Dump the given number of bytes on an AJP Message * * @param pool pool to allocate from * @param msg AJP Message to dump * @param err error string to display * @param count the number of bytes to dump * @param buf buffer pointer for dump message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_dump(apr_pool_t *pool, ajp_msg_t *msg, char *err, apr_size_t count, char **buf) { apr_size_t i, j; char *current; apr_size_t bl, rl; apr_byte_t x; apr_size_t len = msg->len; apr_size_t line_len; /* Display only first "count" bytes */ if (len > count) len = count; /* First the space needed for the first line */ bl = strlen(err) + 3 * (strlen(" XXX=") + 20) + 1 + /* Now for the data lines */ (len + 15) / 16 * AJP_MSG_DUMP_LINE_LENGTH; *buf = apr_palloc(pool, bl); if (!*buf) return APR_ENOMEM; apr_snprintf(*buf, bl, "%s pos=%" APR_SIZE_T_FMT " len=%" APR_SIZE_T_FMT " max=%" APR_SIZE_T_FMT "\n", err, msg->pos, msg->len, msg->max_size); current = *buf + strlen(*buf); for (i = 0; i < len; i += AJP_MSG_DUMP_BYTES_PER_LINE) { /* Safety check: do we have enough buffer for another line? */ rl = bl - (current - *buf); if (AJP_MSG_DUMP_LINE_LENGTH > rl) { *(current - 1) = '\0'; return APR_ENOMEM; } apr_snprintf(current, rl, "%.4lx ", (unsigned long)i); current += AJP_MSG_DUMP_PREFIX_LENGTH; line_len = len - i; if (line_len > AJP_MSG_DUMP_BYTES_PER_LINE) { line_len = AJP_MSG_DUMP_BYTES_PER_LINE; } for (j = 0; j < line_len; j++) { x = msg->buf[i + j]; *current++ = hex_table[x >> 4]; *current++ = hex_table[x & 0x0f]; *current++ = ' '; } *current++ = ' '; *current++ = '-'; *current++ = ' '; for (j = 0; j < line_len; j++) { x = msg->buf[i + j]; if (x > 0x20 && x < 0x7F) { *current++ = x; } else { *current++ = '.'; } } *current++ = '\n'; } *(current - 1) = '\0'; return APR_SUCCESS; } /** * Log an AJP message * * @param request The current request * @param msg AJP Message to dump * @param err error string to display * @return APR_SUCCESS or error */ apr_status_t ajp_msg_log(request_rec *r, ajp_msg_t *msg, char *err) { int level; apr_size_t count; char *buf, *next; apr_status_t rc = APR_SUCCESS; if (APLOGrtrace7(r)) { level = APLOG_TRACE7; count = 1024; if (APLOGrtrace8(r)) { level = APLOG_TRACE8; count = AJP_MAX_BUFFER_SZ; } rc = ajp_msg_dump(r->pool, msg, err, count, &buf); if (rc == APR_SUCCESS) { while ((next = ap_strchr(buf, '\n'))) { *next = '\0'; /* Intentional no APLOGNO */ ap_log_rerror(APLOG_MARK, level, 0, r, "%s", buf); buf = next + 1; } /* Intentional no APLOGNO */ ap_log_rerror(APLOG_MARK, level, 0, r, "%s", buf); } } return rc; } /** * Check a new AJP Message by looking at signature and return its size * * @param msg AJP Message to check * @param len Pointer to returned len * @return APR_SUCCESS or error */ apr_status_t ajp_msg_check_header(ajp_msg_t *msg, apr_size_t *len) { apr_byte_t *head = msg->buf; apr_size_t msglen; if (!((head[0] == 0x41 && head[1] == 0x42) || (head[0] == 0x12 && head[1] == 0x34))) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(01080) "ajp_msg_check_header() got bad signature %02x%02x", head[0], head[1]); return AJP_EBAD_SIGNATURE; } msglen = ((head[2] & 0xff) << 8); msglen += (head[3] & 0xFF); if (msglen > msg->max_size) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(01081) "ajp_msg_check_header() incoming message is " "too big %" APR_SIZE_T_FMT ", max is %" APR_SIZE_T_FMT, msglen, msg->max_size); return AJP_ETOBIG; } msg->len = msglen + AJP_HEADER_LEN; msg->pos = AJP_HEADER_LEN; *len = msglen; return APR_SUCCESS; } /** * Reset an AJP Message * * @param msg AJP Message to reset * @return APR_SUCCESS or error */ apr_status_t ajp_msg_reset(ajp_msg_t *msg) { msg->len = AJP_HEADER_LEN; msg->pos = AJP_HEADER_LEN; return APR_SUCCESS; } /** * Reuse an AJP Message * * @param msg AJP Message to reuse * @return APR_SUCCESS or error */ apr_status_t ajp_msg_reuse(ajp_msg_t *msg) { apr_byte_t *buf; apr_size_t max_size; buf = msg->buf; max_size = msg->max_size; memset(msg, 0, sizeof(ajp_msg_t)); msg->buf = buf; msg->max_size = max_size; msg->header_len = AJP_HEADER_LEN; ajp_msg_reset(msg); return APR_SUCCESS; } /** * Mark the end of an AJP Message * * @param msg AJP Message to end * @return APR_SUCCESS or error */ apr_status_t ajp_msg_end(ajp_msg_t *msg) { apr_size_t len = msg->len - AJP_HEADER_LEN; if (msg->server_side) { msg->buf[0] = 0x41; msg->buf[1] = 0x42; } else { msg->buf[0] = 0x12; msg->buf[1] = 0x34; } msg->buf[2] = (apr_byte_t)((len >> 8) & 0xFF); msg->buf[3] = (apr_byte_t)(len & 0xFF); return APR_SUCCESS; } static APR_INLINE int ajp_log_overflow(ajp_msg_t *msg, const char *context) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(03229) "%s(): BufferOverflowException %" APR_SIZE_T_FMT " %" APR_SIZE_T_FMT, context, msg->pos, msg->len); return AJP_EOVERFLOW; } /** * Add an unsigned 32bits value to AJP Message * * @param msg AJP Message to get value from * @param value value to add to AJP Message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_append_uint32(ajp_msg_t *msg, apr_uint32_t value) { apr_size_t len = msg->len; if ((len + 4) > msg->max_size) { return ajp_log_overflow(msg, "ajp_msg_append_uint32"); } msg->buf[len] = (apr_byte_t)((value >> 24) & 0xFF); msg->buf[len + 1] = (apr_byte_t)((value >> 16) & 0xFF); msg->buf[len + 2] = (apr_byte_t)((value >> 8) & 0xFF); msg->buf[len + 3] = (apr_byte_t)(value & 0xFF); msg->len += 4; return APR_SUCCESS; } /** * Add an unsigned 16bits value to AJP Message * * @param msg AJP Message to get value from * @param value value to add to AJP Message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_append_uint16(ajp_msg_t *msg, apr_uint16_t value) { apr_size_t len = msg->len; if ((len + 2) > msg->max_size) { return ajp_log_overflow(msg, "ajp_msg_append_uint16"); } msg->buf[len] = (apr_byte_t)((value >> 8) & 0xFF); msg->buf[len + 1] = (apr_byte_t)(value & 0xFF); msg->len += 2; return APR_SUCCESS; } /** * Add an unsigned 8bits value to AJP Message * * @param msg AJP Message to get value from * @param value value to add to AJP Message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_append_uint8(ajp_msg_t *msg, apr_byte_t value) { apr_size_t len = msg->len; if ((len + 1) > msg->max_size) { return ajp_log_overflow(msg, "ajp_msg_append_uint8"); } msg->buf[len] = value; msg->len += 1; return APR_SUCCESS; } /** * Add a String in AJP message, and transform the String in ASCII * if convert is set and we're on an EBCDIC machine * * @param msg AJP Message to get value from * @param value Pointer to String * @param convert When set told to convert String to ASCII * @return APR_SUCCESS or error */ apr_status_t ajp_msg_append_string_ex(ajp_msg_t *msg, const char *value, int convert) { apr_size_t len; if (value == NULL) { return(ajp_msg_append_uint16(msg, 0xFFFF)); } len = strlen(value); if ((msg->len + len + 3) > msg->max_size) { return ajp_log_overflow(msg, "ajp_msg_append_cvt_string"); } /* ignore error - we checked once */ ajp_msg_append_uint16(msg, (apr_uint16_t)len); /* We checked for space !! */ memcpy(msg->buf + msg->len, value, len + 1); /* including \0 */ if (convert) { /* convert from EBCDIC if needed */ ap_xlate_proto_to_ascii((char *)msg->buf + msg->len, len + 1); } msg->len += len + 1; return APR_SUCCESS; } /** * Add a Byte array to AJP Message * * @param msg AJP Message to get value from * @param value Pointer to Byte array * @param valuelen Byte array len * @return APR_SUCCESS or error */ apr_status_t ajp_msg_append_bytes(ajp_msg_t *msg, const apr_byte_t *value, apr_size_t valuelen) { if (! valuelen) { return APR_SUCCESS; /* Shouldn't we indicate an error ? */ } if ((msg->len + valuelen) > msg->max_size) { return ajp_log_overflow(msg, "ajp_msg_append_bytes"); } /* We checked for space !! */ memcpy(msg->buf + msg->len, value, valuelen); msg->len += valuelen; return APR_SUCCESS; } /** * Get a 32bits unsigned value from AJP Message * * @param msg AJP Message to get value from * @param rvalue Pointer where value will be returned * @return APR_SUCCESS or error */ apr_status_t ajp_msg_get_uint32(ajp_msg_t *msg, apr_uint32_t *rvalue) { apr_uint32_t value; if ((msg->pos + 3) > msg->len) { return ajp_log_overflow(msg, "ajp_msg_get_uint32"); } value = ((msg->buf[(msg->pos++)] & 0xFF) << 24); value |= ((msg->buf[(msg->pos++)] & 0xFF) << 16); value |= ((msg->buf[(msg->pos++)] & 0xFF) << 8); value |= ((msg->buf[(msg->pos++)] & 0xFF)); *rvalue = value; return APR_SUCCESS; } /** * Get a 16bits unsigned value from AJP Message * * @param msg AJP Message to get value from * @param rvalue Pointer where value will be returned * @return APR_SUCCESS or error */ apr_status_t ajp_msg_get_uint16(ajp_msg_t *msg, apr_uint16_t *rvalue) { apr_uint16_t value; if ((msg->pos + 1) > msg->len) { return ajp_log_overflow(msg, "ajp_msg_get_uint16"); } value = ((msg->buf[(msg->pos++)] & 0xFF) << 8); value += ((msg->buf[(msg->pos++)] & 0xFF)); *rvalue = value; return APR_SUCCESS; } /** * Peek a 16bits unsigned value from AJP Message, position in message * is not updated * * @param msg AJP Message to get value from * @param rvalue Pointer where value will be returned * @return APR_SUCCESS or error */ apr_status_t ajp_msg_peek_uint16(ajp_msg_t *msg, apr_uint16_t *rvalue) { apr_uint16_t value; if ((msg->pos + 1) > msg->len) { return ajp_log_overflow(msg, "ajp_msg_peek_uint16"); } value = ((msg->buf[(msg->pos)] & 0xFF) << 8); value += ((msg->buf[(msg->pos + 1)] & 0xFF)); *rvalue = value; return APR_SUCCESS; } /** * Peek a 8bits unsigned value from AJP Message, position in message * is not updated * * @param msg AJP Message to get value from * @param rvalue Pointer where value will be returned * @return APR_SUCCESS or error */ apr_status_t ajp_msg_peek_uint8(ajp_msg_t *msg, apr_byte_t *rvalue) { if (msg->pos > msg->len) { return ajp_log_overflow(msg, "ajp_msg_peek_uint8"); } *rvalue = msg->buf[msg->pos]; return APR_SUCCESS; } /** * Get a 8bits unsigned value from AJP Message * * @param msg AJP Message to get value from * @param rvalue Pointer where value will be returned * @return APR_SUCCESS or error */ apr_status_t ajp_msg_get_uint8(ajp_msg_t *msg, apr_byte_t *rvalue) { if (msg->pos > msg->len) { return ajp_log_overflow(msg, "ajp_msg_get_uint8"); } *rvalue = msg->buf[msg->pos++]; return APR_SUCCESS; } /** * Get a String value from AJP Message * * @param msg AJP Message to get value from * @param rvalue Pointer where value will be returned * @return APR_SUCCESS or error */ apr_status_t ajp_msg_get_string(ajp_msg_t *msg, const char **rvalue) { apr_uint16_t size; apr_size_t start; apr_status_t status; status = ajp_msg_get_uint16(msg, &size); start = msg->pos; if ((status != APR_SUCCESS) || (size + start > msg->max_size)) { return ajp_log_overflow(msg, "ajp_msg_get_string"); } msg->pos += (apr_size_t)size; msg->pos++; /* a String in AJP is NULL terminated */ *rvalue = (const char *)(msg->buf + start); return APR_SUCCESS; } /** * Get a Byte array from AJP Message * * @param msg AJP Message to get value from * @param rvalue Pointer where value will be returned * @param rvalueLen Pointer where Byte array len will be returned * @return APR_SUCCESS or error */ apr_status_t ajp_msg_get_bytes(ajp_msg_t *msg, apr_byte_t **rvalue, apr_size_t *rvalue_len) { apr_uint16_t size; apr_size_t start; apr_status_t status; status = ajp_msg_get_uint16(msg, &size); /* save the current position */ start = msg->pos; if ((status != APR_SUCCESS) || (size + start > msg->max_size)) { return ajp_log_overflow(msg, "ajp_msg_get_bytes"); } msg->pos += (apr_size_t)size; /* only bytes, no trailer */ *rvalue = msg->buf + start; *rvalue_len = size; return APR_SUCCESS; } /** * Create an AJP Message from pool * * @param pool memory pool to allocate AJP message from * @param size size of the buffer to create * @param rmsg Pointer to newly created AJP message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_create(apr_pool_t *pool, apr_size_t size, ajp_msg_t **rmsg) { ajp_msg_t *msg = (ajp_msg_t *)apr_pcalloc(pool, sizeof(ajp_msg_t)); msg->server_side = 0; msg->buf = (apr_byte_t *)apr_palloc(pool, size); msg->len = 0; msg->header_len = AJP_HEADER_LEN; msg->max_size = size; *rmsg = msg; return APR_SUCCESS; } /** * Recopy an AJP Message to another * * @param smsg source AJP message * @param dmsg destination AJP message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_copy(ajp_msg_t *smsg, ajp_msg_t *dmsg) { if (smsg->len > smsg->max_size) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, NULL, APLOGNO(01082) "ajp_msg_copy(): destination buffer too " "small %" APR_SIZE_T_FMT ", max size is %" APR_SIZE_T_FMT, smsg->len, smsg->max_size); return AJP_ETOSMALL; } memcpy(dmsg->buf, smsg->buf, smsg->len); dmsg->len = smsg->len; dmsg->pos = smsg->pos; return APR_SUCCESS; } /** * Serialize in an AJP Message a PING command * * +-----------------------+ * | PING CMD (1 byte) | * +-----------------------+ * * @param smsg AJP message to put serialized message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_serialize_ping(ajp_msg_t *msg) { apr_status_t rc; ajp_msg_reset(msg); if ((rc = ajp_msg_append_uint8(msg, CMD_AJP13_PING)) != APR_SUCCESS) return rc; return APR_SUCCESS; } /** * Serialize in an AJP Message a CPING command * * +-----------------------+ * | CPING CMD (1 byte) | * +-----------------------+ * * @param smsg AJP message to put serialized message * @return APR_SUCCESS or error */ apr_status_t ajp_msg_serialize_cping(ajp_msg_t *msg) { apr_status_t rc; ajp_msg_reset(msg); if ((rc = ajp_msg_append_uint8(msg, CMD_AJP13_CPING)) != APR_SUCCESS) return rc; return APR_SUCCESS; } httpd-2.4.41/modules/proxy/CHANGES0000644000000000000500000001767010562624646015106 0ustar rootsrc****************************************** * PLEASE NOTE: Now that development for * * mod_proxy has been folded back into * * the httpd-2.1 tree, this file has * * been deprecated. Proxy changes should * * be noted in httpd-2.x's CHANGES file. * * This file exists for historical * * purposes. * ****************************************** mod_proxy changes for httpd 2.0.29-dev *) don't do keepalives for sub-requests. [Ian Holsman] *) fix up proxypass handling [Ian Holsman] *) don't send If-Modified-Since, Cache-Control, or If-None-Match on a subrequest [Ian Holsman] mod_proxy changes for httpd 2.0.26-dev *) Add New option 'HTTPProxyOverrideReturnedErrors'. By Turning the Flag on, you will mask the error pages returned by the proxied server, and will it will be handled as if your server generated the error. This change was put in so that a 404 on a included r-proxied component will act in the same manner as a 404 on a included file. [Ian Holsman ] mod_proxy changes for httpd 2.0.25-dev *) Split proxy: space using directive blocks from the and blocks. Mod_proxy now bypasses the directory and files testing phase (and skips the http TRACE default handler on it's own, as well). Note that blocks continue to be processed for proxy: requests. [William Rowe ] *) apr_uri type/function namespace changes in apr_uri functions [Doug MacEachern ] mod_proxy changes for httpd 2.0.23-dev *) break the proxy_http_handler into multiple smaller functions. [John Barbee ] *) Fix the proxy when the origin server sends back a 100 Continue response. [John Barbee ] *) Change 'readbytes' from apr_size_t to apr_off_t due to change in ap_get_brigade's parameters [John Barbee ] mod_proxy changes for httpd 2.0.20-dev *) Timeout added for backend connections. [Victor Orlikowski ] *) Fix abort code path in proxy_http.c, similar to FTP fix. [Chuck Murcko ] *) Fix FTP ABOR command execution path. [Victor Orlikowski ] *) FTP return code variable cleanup; fixed problem in login [Chuck Murcko ] *) Get PORT working again in the ftp proxy. [Victor Orlikowski ] *) Return result code check for FTP QUIT, after fixing problems with passive connection handling. [Victor Orlikowski ] *) Reorganize ap_proxy_string_read() internally to not process eos buckets. [Chuck Murcko ] [Victor Orlikowski ] *) Remove result code check for FTP QUIT command. Some servers send nothing at all back in response to QUIT. [Chuck Murcko ] [Victor Orlikowski ] mod_proxy changes for httpd 2.0.19 *) Reverse previous patch since the core reverted. [Chuck Murcko ] *) Remove indirection on number of bytes to read for input filters. [Chuck Murcko ] *) Fixed a problem with directory listing corruption in the PROXY_DIR filter. [Graham Leggett ] *) mod_proxy and the proxy submodules now build properly as DSOs. [Graham Leggett ] *) Stopped the HTTP proxy from trying to read entity bodies when there wasn't one (response was 1xx, 204, 205 or 304). [Graham Leggett ] *) Made sure dates were canonicalised correctly when passed to the client browser through the HTTP proxy. [Graham Leggett ] *) Split each individual proxy protocol into separate modules. [Graham Leggett ] *) Added Max-Forwards support for all request types so as to prevent loops. [Graham Leggett ] *) Fix warnings about byte count type on Darwin (connect handler). [Chuck Murcko ] mod_proxy changes for httpd 2.0.18 *) IPV6 EPSV support for IPV6 in FTP proxy. [Graham Leggett ] *) FTP directory filter works now. [Graham Leggett ] *) Fixed some thread-safety issues with the HTTP proxy in mod_proxy. [Graham Leggett ] *) PASV FTP works now. [Graham Leggett ] *) Reworked the line-at-a-time read from the control connection to workaround a stray empty bucket returned by the HTTP_IN filter. [Graham Leggett ] *) Stopped the CORE filter from sending off an HTTP response when a CONNECT tunnel was closed. [Graham Leggett ] *) Fixed the poll() loop in proxy_connect.c -> it works now!!! [Graham Leggett ] *) Converted send_dir() to ap_proxy_send_dir_filter() in proxy_ftp.c. [Graham Leggett ] mod_proxy changes for httpd 2.0.17 *) Major rework of ap_proxy_ftp_handler() to use filters (begone foul BUFF!!!). It compiles, but is untested, and the build environment needs to be fixed to include proxy_ftp.c. [Graham Leggett ] *) Cleanup of dead functions within proxy_util.c. [Graham Leggett ] *) Reworked the storage of the client socket between keepalive connections to fix some nasty problems with the socket lasting longer than the memory pool it was allocated from. [Graham Leggett ] *) Fixed bug where a hostname without a "." in it (such as "localhost") would not trigger an IP address check with ProxyBlock. [Graham Leggett ] mod_proxy changes for httpd 2.0.16 *) Fixed ProxyBlock bugs with ap_proxy_http_handler() and ap_proxy_connect_handler(). [Graham Leggett ] *) Updated ap_proxy_connect_handler() to support APR, while moving some common code between http_handler and connect_handler to proxy_util.c. [Graham Leggett ] *) Updated mod_proxy.html docs to include v2.0 configuration. [Graham Leggett ] *) Fixed problem where responses without entity bodies would cause the directly following proxy keepalive request to fail. [Graham Leggett ] mod_proxy changes for httpd 2.0.15 *) Added support for downstream keepalives in mod_proxy. [Graham Leggett ] *) Changed mod_proxy ap_proxy_http_handler() to support APR properly. [Graham Leggett ] *) Fix problem where incoming response headers were not being returned to the client in mod_proxy. [Graham Leggett ] *) Added X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server to reverse proxied request headers in mod_proxy. [Graham Leggett ] *) replace INADDR_NONE with APR_INADDR_NONE [Ian Holsman ] *) Fix problem with proxy configuration where globally set configuration options were overridden inside virtual hosts. [Graham Leggett ] *) Fix ProxyReceiveBufferSize where default value was left uninitialised. [Graham Leggett ] *) Some small changes: - Ensured hop-by-hop headers were stripped as per RFC2616 13.5.1. - Upgraded version code to HTTP/1.1. - Added Connection: close until Keepalives come. - Some cosmetic fixes and commenting. [Graham Leggett ] mod_proxy changes for httpd 2.0.14 *) removed ProxyNoCache and ProxyCacheForceCompletion config directives, since we no longer directly cache from this module [Chuck Murcko ] *) removed cache [Chuck Murcko ] *) initial rerebuild for 2.0 [Chuck Murcko ] httpd-2.4.41/modules/proxy/mod_proxy_uwsgi.c0000644000000000000500000004007613471722156017506 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* *** mod_proxy_uwsgi *** Copyright 2009-2017 Unbit S.a.s. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */ #define APR_WANT_MEMFUNC #define APR_WANT_STRFUNC #include "apr_strings.h" #include "apr_hooks.h" #include "apr_optional_hooks.h" #include "apr_buckets.h" #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "util_script.h" #include "mod_proxy.h" #define UWSGI_SCHEME "uwsgi" #define UWSGI_DEFAULT_PORT 3031 module AP_MODULE_DECLARE_DATA proxy_uwsgi_module; static int uwsgi_canon(request_rec *r, char *url) { char *host, sport[sizeof(":65535")]; const char *err, *path; apr_port_t port = UWSGI_DEFAULT_PORT; if (ap_cstr_casecmpn(url, UWSGI_SCHEME "://", sizeof(UWSGI_SCHEME) + 2)) { return DECLINED; } url += sizeof(UWSGI_SCHEME); /* Keep slashes */ err = ap_proxy_canon_netloc(r->pool, &url, NULL, NULL, &host, &port); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(10097) "error parsing URL %s: %s", url, err); return HTTP_BAD_REQUEST; } if (port != UWSGI_DEFAULT_PORT) apr_snprintf(sport, sizeof(sport), ":%u", port); else sport[0] = '\0'; if (ap_strchr(host, ':')) { /* if literal IPv6 address */ host = apr_pstrcat(r->pool, "[", host, "]", NULL); } path = ap_proxy_canonenc(r->pool, url, strlen(url), enc_path, 0, r->proxyreq); if (!path) { return HTTP_BAD_REQUEST; } r->filename = apr_pstrcat(r->pool, "proxy:" UWSGI_SCHEME "://", host, sport, "/", path, NULL); return OK; } static int uwsgi_send(proxy_conn_rec * conn, const char *buf, apr_size_t length, request_rec *r) { apr_status_t rv; apr_size_t written; while (length > 0) { written = length; if ((rv = apr_socket_send(conn->sock, buf, &written)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(10098) "sending data to %s:%u failed", conn->hostname, conn->port); return HTTP_SERVICE_UNAVAILABLE; } /* count for stats */ conn->worker->s->transferred += written; buf += written; length -= written; } return OK; } /* * Send uwsgi header block */ static int uwsgi_send_headers(request_rec *r, proxy_conn_rec * conn) { char *buf, *ptr; const apr_array_header_t *env_table; const apr_table_entry_t *env; int j; apr_size_t headerlen = 4; apr_uint16_t pktsize, keylen, vallen; const char *script_name; const char *path_info; const char *auth; ap_add_common_vars(r); ap_add_cgi_vars(r); /* this is not a security problem (in Linux) as uWSGI destroy the env memory area readable in /proc and generally if you host untrusted apps in your server and allows them to read others uid /proc/ files you have higher problems... */ auth = apr_table_get(r->headers_in, "Authorization"); if (auth) { apr_table_setn(r->subprocess_env, "HTTP_AUTHORIZATION", auth); } script_name = apr_table_get(r->subprocess_env, "SCRIPT_NAME"); path_info = apr_table_get(r->subprocess_env, "PATH_INFO"); if (script_name && path_info) { if (strcmp(path_info, "/")) { apr_table_set(r->subprocess_env, "SCRIPT_NAME", apr_pstrndup(r->pool, script_name, strlen(script_name) - strlen(path_info))); } else { if (!strcmp(script_name, "/")) { apr_table_setn(r->subprocess_env, "SCRIPT_NAME", ""); } } } env_table = apr_table_elts(r->subprocess_env); env = (apr_table_entry_t *) env_table->elts; for (j = 0; j < env_table->nelts; ++j) { headerlen += 2 + strlen(env[j].key) + 2 + strlen(env[j].val); } ptr = buf = apr_palloc(r->pool, headerlen); ptr += 4; for (j = 0; j < env_table->nelts; ++j) { keylen = strlen(env[j].key); *ptr++ = (apr_byte_t) (keylen & 0xff); *ptr++ = (apr_byte_t) ((keylen >> 8) & 0xff); memcpy(ptr, env[j].key, keylen); ptr += keylen; vallen = strlen(env[j].val); *ptr++ = (apr_byte_t) (vallen & 0xff); *ptr++ = (apr_byte_t) ((vallen >> 8) & 0xff); memcpy(ptr, env[j].val, vallen); ptr += vallen; } pktsize = headerlen - 4; buf[0] = 0; buf[1] = (apr_byte_t) (pktsize & 0xff); buf[2] = (apr_byte_t) ((pktsize >> 8) & 0xff); buf[3] = 0; return uwsgi_send(conn, buf, headerlen, r); } static int uwsgi_send_body(request_rec *r, proxy_conn_rec * conn) { if (ap_should_client_block(r)) { char *buf = apr_palloc(r->pool, AP_IOBUFSIZE); int status; long readlen; readlen = ap_get_client_block(r, buf, AP_IOBUFSIZE); while (readlen > 0) { status = uwsgi_send(conn, buf, (apr_size_t)readlen, r); if (status != OK) { return HTTP_SERVICE_UNAVAILABLE; } readlen = ap_get_client_block(r, buf, AP_IOBUFSIZE); } if (readlen == -1) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(10099) "receiving request body failed"); return HTTP_INTERNAL_SERVER_ERROR; } } return OK; } static request_rec *make_fake_req(conn_rec *c, request_rec *r) { apr_pool_t *pool; request_rec *rp; apr_pool_create(&pool, c->pool); rp = apr_pcalloc(pool, sizeof(*r)); rp->pool = pool; rp->status = HTTP_OK; rp->headers_in = apr_table_make(pool, 50); rp->subprocess_env = apr_table_make(pool, 50); rp->headers_out = apr_table_make(pool, 12); rp->err_headers_out = apr_table_make(pool, 5); rp->notes = apr_table_make(pool, 5); rp->server = r->server; rp->log = r->log; rp->proxyreq = r->proxyreq; rp->request_time = r->request_time; rp->connection = c; rp->output_filters = c->output_filters; rp->input_filters = c->input_filters; rp->proto_output_filters = c->output_filters; rp->proto_input_filters = c->input_filters; rp->useragent_ip = c->client_ip; rp->useragent_addr = c->client_addr; rp->request_config = ap_create_request_config(pool); proxy_run_create_req(r, rp); return rp; } static int uwsgi_response(request_rec *r, proxy_conn_rec * backend, proxy_server_conf * conf) { char buffer[HUGE_STRING_LEN]; const char *buf; char *value, *end; char keepchar; int len; int backend_broke = 0; int status_start; int status_end; int finish = 0; conn_rec *c = r->connection; apr_off_t readbytes; apr_status_t rv; apr_bucket *e; apr_read_type_e mode = APR_NONBLOCK_READ; apr_bucket_brigade *pass_bb; apr_bucket_brigade *bb; proxy_dir_conf *dconf; request_rec *rp = make_fake_req(backend->connection, r); rp->proxyreq = PROXYREQ_RESPONSE; bb = apr_brigade_create(r->pool, c->bucket_alloc); pass_bb = apr_brigade_create(r->pool, c->bucket_alloc); len = ap_getline(buffer, sizeof(buffer), rp, 1); if (len <= 0) { /* oops */ return HTTP_INTERNAL_SERVER_ERROR; } backend->worker->s->read += len; if (len >= sizeof(buffer) - 1) { /* oops */ return HTTP_INTERNAL_SERVER_ERROR; } /* Position of http status code */ if (apr_date_checkmask(buffer, "HTTP/#.# ###*")) { status_start = 9; } else if (apr_date_checkmask(buffer, "HTTP/# ###*")) { status_start = 7; } else { /* oops */ return HTTP_INTERNAL_SERVER_ERROR; } status_end = status_start + 3; keepchar = buffer[status_end]; buffer[status_end] = '\0'; r->status = atoi(&buffer[status_start]); if (keepchar != '\0') { buffer[status_end] = keepchar; } else { /* 2616 requires the space in Status-Line; the origin * server may have sent one but ap_rgetline_core will * have stripped it. */ buffer[status_end] = ' '; buffer[status_end + 1] = '\0'; } r->status_line = apr_pstrdup(r->pool, &buffer[status_start]); /* start parsing headers */ while ((len = ap_getline(buffer, sizeof(buffer), rp, 1)) > 0) { value = strchr(buffer, ':'); /* invalid header skip */ if (!value) continue; *value = '\0'; ++value; while (apr_isspace(*value)) ++value; for (end = &value[strlen(value) - 1]; end > value && apr_isspace(*end); --end) *end = '\0'; apr_table_add(r->headers_out, buffer, value); } if ((buf = apr_table_get(r->headers_out, "Content-Type"))) { ap_set_content_type(r, apr_pstrdup(r->pool, buf)); } /* honor ProxyErrorOverride and ErrorDocument */ #if AP_MODULE_MAGIC_AT_LEAST(20101106,0) dconf = ap_get_module_config(r->per_dir_config, &proxy_module); if (dconf->error_override && ap_is_HTTP_ERROR(r->status)) { #else if (conf->error_override && ap_is_HTTP_ERROR(r->status)) { #endif int status = r->status; r->status = HTTP_OK; r->status_line = NULL; apr_brigade_cleanup(bb); apr_brigade_cleanup(pass_bb); return status; } while (!finish) { rv = ap_get_brigade(rp->input_filters, bb, AP_MODE_READBYTES, mode, conf->io_buffer_size); if (APR_STATUS_IS_EAGAIN(rv) || (rv == APR_SUCCESS && APR_BRIGADE_EMPTY(bb))) { e = apr_bucket_flush_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); if (ap_pass_brigade(r->output_filters, bb) || c->aborted) { break; } apr_brigade_cleanup(bb); mode = APR_BLOCK_READ; continue; } else if (rv == APR_EOF) { break; } else if (rv != APR_SUCCESS) { ap_proxy_backend_broke(r, bb); ap_pass_brigade(r->output_filters, bb); backend_broke = 1; break; } mode = APR_NONBLOCK_READ; apr_brigade_length(bb, 0, &readbytes); backend->worker->s->read += readbytes; if (APR_BRIGADE_EMPTY(bb)) { apr_brigade_cleanup(bb); break; } ap_proxy_buckets_lifetime_transform(r, bb, pass_bb); /* found the last brigade? */ if (APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(bb))) finish = 1; /* do not pass chunk if it is zero_sized */ apr_brigade_length(pass_bb, 0, &readbytes); if ((readbytes > 0 && ap_pass_brigade(r->output_filters, pass_bb) != APR_SUCCESS) || c->aborted) { finish = 1; } apr_brigade_cleanup(bb); apr_brigade_cleanup(pass_bb); } e = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); ap_pass_brigade(r->output_filters, bb); apr_brigade_cleanup(bb); if (c->aborted || backend_broke) { return DONE; } return OK; } static int uwsgi_handler(request_rec *r, proxy_worker * worker, proxy_server_conf * conf, char *url, const char *proxyname, apr_port_t proxyport) { int status; int delta = 0; int decode_status; proxy_conn_rec *backend = NULL; apr_pool_t *p = r->pool; size_t w_len; char server_portstr[32]; char *u_path_info; apr_uri_t *uri; if (ap_cstr_casecmpn(url, UWSGI_SCHEME "://", sizeof(UWSGI_SCHEME) + 2)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, "declining URL %s", url); return DECLINED; } uri = apr_palloc(r->pool, sizeof(*uri)); /* ADD PATH_INFO */ #if AP_MODULE_MAGIC_AT_LEAST(20111130,0) w_len = strlen(worker->s->name); #else w_len = strlen(worker->name); #endif u_path_info = r->filename + 6 + w_len; if (u_path_info[0] != '/') { delta = 1; } decode_status = ap_unescape_url(url + w_len - delta); if (decode_status) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(10100) "unable to decode uri: %s", url + w_len - delta); return HTTP_INTERNAL_SERVER_ERROR; } apr_table_add(r->subprocess_env, "PATH_INFO", url + w_len - delta); /* Create space for state information */ status = ap_proxy_acquire_connection(UWSGI_SCHEME, &backend, worker, r->server); if (status != OK) { goto cleanup; } backend->is_ssl = 0; /* Step One: Determine Who To Connect To */ status = ap_proxy_determine_connection(p, r, conf, worker, backend, uri, &url, proxyname, proxyport, server_portstr, sizeof(server_portstr)); if (status != OK) { goto cleanup; } /* Step Two: Make the Connection */ if (ap_proxy_connect_backend(UWSGI_SCHEME, backend, worker, r->server)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(10101) "failed to make connection to backend: %s:%u", backend->hostname, backend->port); status = HTTP_SERVICE_UNAVAILABLE; goto cleanup; } /* Step Three: Create conn_rec */ if ((status = ap_proxy_connection_create(UWSGI_SCHEME, backend, r->connection, r->server)) != OK) goto cleanup; /* Step Four: Process the Request */ if (((status = ap_setup_client_block(r, REQUEST_CHUNKED_ERROR)) != OK) || ((status = uwsgi_send_headers(r, backend)) != OK) || ((status = uwsgi_send_body(r, backend)) != OK) || ((status = uwsgi_response(r, backend, conf)) != OK)) { goto cleanup; } cleanup: if (backend) { backend->close = 1; /* always close the socket */ ap_proxy_release_connection(UWSGI_SCHEME, backend, r->server); } return status; } static void register_hooks(apr_pool_t * p) { proxy_hook_scheme_handler(uwsgi_handler, NULL, NULL, APR_HOOK_FIRST); proxy_hook_canon_handler(uwsgi_canon, NULL, NULL, APR_HOOK_FIRST); } module AP_MODULE_DECLARE_DATA proxy_uwsgi_module = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ NULL, /* command table */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/proxy/mod_proxy.dsp0000644000000000000500000001155213303340351016614 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_proxy" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_proxy - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_proxy.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy.mak" CFG="mod_proxy - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_proxy - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../ssl" /I "../http2" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../generators" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "PROXY_DECLARE_EXPORT" /Fd"Release\mod_proxy_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_proxy.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy.so" /d LONG_NAME="proxy_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_proxy.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /debug /out:".\Release\mod_proxy.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_proxy.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_proxy - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../ssl" /I "../http2" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../generators" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "PROXY_DECLARE_EXPORT" /Fd"Debug\mod_proxy_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_proxy.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy.so" /d LONG_NAME="proxy_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy.so # Begin Special Build Tool TargetPath=.\Debug\mod_proxy.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_proxy - Win32 Release" # Name "mod_proxy - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_proxy.c # End Source File # Begin Source File SOURCE=.\proxy_util.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter "h;hpp;hxx;hm;inl;fi;fd" # Begin Source File SOURCE=.\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/mod_proxy_scgi.dsp0000644000000000000500000001146111305077137017631 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_proxy_scgi" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_proxy_scgi - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_proxy_scgi.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_scgi.mak" CFG="mod_proxy_scgi - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_scgi - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_scgi - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_proxy_scgi - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_proxy_scgi_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_proxy_scgi.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_scgi.so" /d LONG_NAME="proxy_scgi_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_proxy_scgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_scgi.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_proxy_scgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_scgi.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_proxy_scgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_proxy_scgi - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_proxy_scgi_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_proxy_scgi.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_scgi.so" /d LONG_NAME="proxy_scgi_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_scgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_scgi.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_scgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_scgi.so # Begin Special Build Tool TargetPath=.\Debug\mod_proxy_scgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_proxy_scgi - Win32 Release" # Name "mod_proxy_scgi - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_proxy_scgi.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=.\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/mod_proxy_ftp.dsp0000644000000000000500000001142310551346420017467 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_proxy_ftp" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_proxy_ftp - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_proxy_ftp.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_ftp.mak" CFG="mod_proxy_ftp - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_ftp - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_ftp - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_proxy_ftp - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_proxy_ftp_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_proxy_ftp.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_ftp.so" /d LONG_NAME="proxy_ftp_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_proxy_ftp.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_ftp.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_proxy_ftp.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_ftp.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_proxy_ftp.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_proxy_ftp - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_proxy_ftp_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_proxy_ftp.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_ftp.so" /d LONG_NAME="proxy_ftp_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_ftp.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_ftp.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_ftp.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_ftp.so # Begin Special Build Tool TargetPath=.\Debug\mod_proxy_ftp.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_proxy_ftp - Win32 Release" # Name "mod_proxy_ftp - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_proxy_ftp.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=.\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/NWGNUproxyexpress0000644000000000000500000001051311611546631017426 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxyexpress # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy Express Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Prxy Xpress Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = $(OBJDIR)/$(NLM_NAME).nlm # # If there is an LIB target, put it here # TARGET_lib = # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_proxy_express.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ libc \ aprlib \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ @$(OBJDIR)/mod_proxy.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ proxy_express_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/mod_proxy_wstunnel.c0000644000000000000500000003366513473070160020226 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_proxy.h" module AP_MODULE_DECLARE_DATA proxy_wstunnel_module; /* * Canonicalise http-like URLs. * scheme is the scheme for the URL * url is the URL starting with the first '/' * def_port is the default port for this scheme. */ static int proxy_wstunnel_canon(request_rec *r, char *url) { char *host, *path, sport[7]; char *search = NULL; const char *err; char *scheme; apr_port_t port, def_port; /* ap_port_of_scheme() */ if (strncasecmp(url, "ws:", 3) == 0) { url += 3; scheme = "ws:"; def_port = apr_uri_port_of_scheme("http"); } else if (strncasecmp(url, "wss:", 4) == 0) { url += 4; scheme = "wss:"; def_port = apr_uri_port_of_scheme("https"); } else { return DECLINED; } port = def_port; ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "canonicalising URL %s", url); /* * do syntactic check. * We break the URL into host, port, path, search */ err = ap_proxy_canon_netloc(r->pool, &url, NULL, NULL, &host, &port); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02439) "error parsing URL %s: %s", url, err); return HTTP_BAD_REQUEST; } /* * now parse path/search args, according to rfc1738: * process the path. With proxy-nocanon set (by * mod_proxy) we use the raw, unparsed uri */ if (apr_table_get(r->notes, "proxy-nocanon")) { path = url; /* this is the raw path */ } else { path = ap_proxy_canonenc(r->pool, url, strlen(url), enc_path, 0, r->proxyreq); search = r->args; } if (path == NULL) return HTTP_BAD_REQUEST; if (port != def_port) apr_snprintf(sport, sizeof(sport), ":%d", port); else sport[0] = '\0'; if (ap_strchr_c(host, ':')) { /* if literal IPv6 address */ host = apr_pstrcat(r->pool, "[", host, "]", NULL); } r->filename = apr_pstrcat(r->pool, "proxy:", scheme, "//", host, sport, "/", path, (search) ? "?" : "", (search) ? search : "", NULL); return OK; } /* * process the request and write the response. */ static int proxy_wstunnel_request(apr_pool_t *p, request_rec *r, proxy_conn_rec *conn, proxy_worker *worker, proxy_server_conf *conf, apr_uri_t *uri, char *url, char *server_portstr) { apr_status_t rv; apr_pollset_t *pollset; apr_pollfd_t pollfd; const apr_pollfd_t *signalled; apr_int32_t pollcnt, pi; apr_int16_t pollevent; conn_rec *c = r->connection; apr_socket_t *sock = conn->sock; conn_rec *backconn = conn->connection; char *buf; apr_bucket_brigade *header_brigade; apr_bucket *e; char *old_cl_val = NULL; char *old_te_val = NULL; apr_bucket_brigade *bb = apr_brigade_create(p, c->bucket_alloc); apr_socket_t *client_socket = ap_get_conn_socket(c); int done = 0, replied = 0; const char *upgrade_method = *worker->s->upgrade ? worker->s->upgrade : "WebSocket"; header_brigade = apr_brigade_create(p, backconn->bucket_alloc); ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "sending request"); rv = ap_proxy_create_hdrbrgd(p, header_brigade, r, conn, worker, conf, uri, url, server_portstr, &old_cl_val, &old_te_val); if (rv != OK) { return rv; } if (ap_cstr_casecmp(upgrade_method, "NONE") == 0) { buf = apr_pstrdup(p, "Upgrade: WebSocket" CRLF "Connection: Upgrade" CRLF CRLF); } else if (ap_cstr_casecmp(upgrade_method, "ANY") == 0) { const char *upgrade; upgrade = apr_table_get(r->headers_in, "Upgrade"); buf = apr_pstrcat(p, "Upgrade: ", upgrade, CRLF "Connection: Upgrade" CRLF CRLF, NULL); } else { buf = apr_pstrcat(p, "Upgrade: ", upgrade_method, CRLF "Connection: Upgrade" CRLF CRLF, NULL); } ap_xlate_proto_to_ascii(buf, strlen(buf)); e = apr_bucket_pool_create(buf, strlen(buf), p, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(header_brigade, e); if ((rv = ap_proxy_pass_brigade(backconn->bucket_alloc, r, conn, backconn, header_brigade, 1)) != OK) return rv; apr_brigade_cleanup(header_brigade); ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "setting up poll()"); if ((rv = apr_pollset_create(&pollset, 2, p, 0)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02443) "error apr_pollset_create()"); return HTTP_INTERNAL_SERVER_ERROR; } #if 0 apr_socket_opt_set(sock, APR_SO_NONBLOCK, 1); apr_socket_opt_set(sock, APR_SO_KEEPALIVE, 1); apr_socket_opt_set(client_socket, APR_SO_NONBLOCK, 1); apr_socket_opt_set(client_socket, APR_SO_KEEPALIVE, 1); #endif pollfd.p = p; pollfd.desc_type = APR_POLL_SOCKET; pollfd.reqevents = APR_POLLIN | APR_POLLHUP; pollfd.desc.s = sock; pollfd.client_data = NULL; apr_pollset_add(pollset, &pollfd); pollfd.desc.s = client_socket; apr_pollset_add(pollset, &pollfd); ap_remove_input_filter_byhandle(c->input_filters, "reqtimeout"); r->output_filters = c->output_filters; r->proto_output_filters = c->output_filters; r->input_filters = c->input_filters; r->proto_input_filters = c->input_filters; /* This handler should take care of the entire connection; make it so that * nothing else is attempted on the connection after returning. */ c->keepalive = AP_CONN_CLOSE; do { /* Loop until done (one side closes the connection, or an error) */ rv = apr_pollset_poll(pollset, -1, &pollcnt, &signalled); if (rv != APR_SUCCESS) { if (APR_STATUS_IS_EINTR(rv)) { continue; } ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02444) "error apr_poll()"); return HTTP_INTERNAL_SERVER_ERROR; } ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, APLOGNO(02445) "woke from poll(), i=%d", pollcnt); for (pi = 0; pi < pollcnt; pi++) { const apr_pollfd_t *cur = &signalled[pi]; if (cur->desc.s == sock) { pollevent = cur->rtnevents; if (pollevent & (APR_POLLIN | APR_POLLHUP)) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, APLOGNO(02446) "sock was readable"); done |= ap_proxy_transfer_between_connections(r, backconn, c, header_brigade, bb, "sock", &replied, AP_IOBUFSIZE, 0) != APR_SUCCESS; } else if (pollevent & APR_POLLERR) { ap_log_rerror(APLOG_MARK, APLOG_NOTICE, 0, r, APLOGNO(02447) "error on backconn"); backconn->aborted = 1; done = 1; } else { ap_log_rerror(APLOG_MARK, APLOG_NOTICE, 0, r, APLOGNO(02605) "unknown event on backconn %d", pollevent); done = 1; } } else if (cur->desc.s == client_socket) { pollevent = cur->rtnevents; if (pollevent & (APR_POLLIN | APR_POLLHUP)) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, APLOGNO(02448) "client was readable"); done |= ap_proxy_transfer_between_connections(r, c, backconn, bb, header_brigade, "client", NULL, AP_IOBUFSIZE, 0) != APR_SUCCESS; } else if (pollevent & APR_POLLERR) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, APLOGNO(02607) "error on client conn"); c->aborted = 1; done = 1; } else { ap_log_rerror(APLOG_MARK, APLOG_NOTICE, 0, r, APLOGNO(02606) "unknown event on client conn %d", pollevent); done = 1; } } else { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02449) "unknown socket in pollset"); done = 1; } } } while (!done); ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "finished with poll() - cleaning up"); if (!replied) { return HTTP_BAD_GATEWAY; } else { return OK; } return OK; } /* */ static int proxy_wstunnel_handler(request_rec *r, proxy_worker *worker, proxy_server_conf *conf, char *url, const char *proxyname, apr_port_t proxyport) { int status; char server_portstr[32]; proxy_conn_rec *backend = NULL; char *scheme; apr_pool_t *p = r->pool; char *locurl = url; apr_uri_t *uri; int is_ssl = 0; const char *upgrade_method = *worker->s->upgrade ? worker->s->upgrade : "WebSocket"; if (strncasecmp(url, "wss:", 4) == 0) { scheme = "WSS"; is_ssl = 1; } else if (strncasecmp(url, "ws:", 3) == 0) { scheme = "WS"; } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02450) "declining URL %s", url); return DECLINED; } if (ap_cstr_casecmp(upgrade_method, "NONE") != 0) { const char *upgrade; upgrade = apr_table_get(r->headers_in, "Upgrade"); if (!upgrade || (ap_cstr_casecmp(upgrade, upgrade_method) != 0 && ap_cstr_casecmp(upgrade_method, "ANY") !=0)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02900) "declining URL %s (not %s, Upgrade: header is %s)", url, upgrade_method, upgrade ? upgrade : "missing"); return DECLINED; } } uri = apr_palloc(p, sizeof(*uri)); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02451) "serving URL %s", url); /* create space for state information */ status = ap_proxy_acquire_connection(scheme, &backend, worker, r->server); if (status != OK) { goto cleanup; } backend->is_ssl = is_ssl; backend->close = 0; /* Step One: Determine Who To Connect To */ status = ap_proxy_determine_connection(p, r, conf, worker, backend, uri, &locurl, proxyname, proxyport, server_portstr, sizeof(server_portstr)); if (status != OK) { goto cleanup; } /* Step Two: Make the Connection */ if (ap_proxy_connect_backend(scheme, backend, worker, r->server)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02452) "failed to make connection to backend: %s", backend->hostname); status = HTTP_SERVICE_UNAVAILABLE; goto cleanup; } /* Step Three: Create conn_rec */ status = ap_proxy_connection_create_ex(scheme, backend, r); if (status != OK) { goto cleanup; } /* Step Four: Process the Request */ status = proxy_wstunnel_request(p, r, backend, worker, conf, uri, locurl, server_portstr); cleanup: /* Do not close the socket */ if (backend) { backend->close = 1; ap_proxy_release_connection(scheme, backend, r->server); } return status; } static void ap_proxy_http_register_hook(apr_pool_t *p) { proxy_hook_scheme_handler(proxy_wstunnel_handler, NULL, NULL, APR_HOOK_FIRST); proxy_hook_canon_handler(proxy_wstunnel_canon, NULL, NULL, APR_HOOK_FIRST); } AP_DECLARE_MODULE(proxy_wstunnel) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ NULL, /* command apr_table_t */ ap_proxy_http_register_hook /* register hooks */ }; httpd-2.4.41/modules/proxy/mod_proxy_http.dep0000644000000000000500000000515612674411515017653 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_proxy_http.mak .\mod_proxy_http.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_proxy.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/NWGNUproxycon0000644000000000000500000001030311546111464016510 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxycon # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy Connection Sub-Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Proxy Conn Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/proxycon.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_proxy_connect.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @$(OBJDIR)/mod_proxy.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ proxy_connect_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/mod_proxy.h0000644000000000000500000015301713473070160016266 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef MOD_PROXY_H #define MOD_PROXY_H /** * @file mod_proxy.h * @brief Proxy Extension Module for Apache * * @defgroup MOD_PROXY mod_proxy * @ingroup APACHE_MODS * @{ */ #include "apr_hooks.h" #include "apr_optional.h" #include "apr.h" #include "apr_lib.h" #include "apr_strings.h" #include "apr_buckets.h" #include "apr_md5.h" #include "apr_network_io.h" #include "apr_pools.h" #include "apr_strings.h" #include "apr_uri.h" #include "apr_date.h" #include "apr_strmatch.h" #include "apr_fnmatch.h" #include "apr_reslist.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "apr_uuid.h" #include "util_mutex.h" #include "apr_global_mutex.h" #include "apr_thread_mutex.h" #include "httpd.h" #include "http_config.h" #include "ap_config.h" #include "http_core.h" #include "http_protocol.h" #include "http_request.h" #include "http_vhost.h" #include "http_main.h" #include "http_log.h" #include "http_connection.h" #include "util_filter.h" #include "util_ebcdic.h" #include "ap_provider.h" #include "ap_slotmem.h" #if APR_HAVE_NETINET_IN_H #include #endif #if APR_HAVE_ARPA_INET_H #include #endif /* for proxy_canonenc() */ enum enctype { enc_path, enc_search, enc_user, enc_fpath, enc_parm }; typedef enum { NONE, TCP, OPTIONS, HEAD, GET, CPING, PROVIDER, EOT } hcmethod_t; typedef struct { hcmethod_t method; char *name; int implemented; } proxy_hcmethods_t; typedef struct { unsigned int bit; char flag; const char *name; } proxy_wstat_t; #define BALANCER_PREFIX "balancer://" #if APR_CHARSET_EBCDIC #define CRLF "\r\n" #else /*APR_CHARSET_EBCDIC*/ #define CRLF "\015\012" #endif /*APR_CHARSET_EBCDIC*/ /* default Max-Forwards header setting */ /* Set this to -1, which complies with RFC2616 by not setting * max-forwards if the client didn't send it to us. */ #define DEFAULT_MAX_FORWARDS -1 typedef struct proxy_balancer proxy_balancer; typedef struct proxy_worker proxy_worker; typedef struct proxy_conn_pool proxy_conn_pool; typedef struct proxy_balancer_method proxy_balancer_method; /* static information about a remote proxy */ struct proxy_remote { const char *scheme; /* the schemes handled by this proxy, or '*' */ const char *protocol; /* the scheme used to talk to this proxy */ const char *hostname; /* the hostname of this proxy */ ap_regex_t *regexp; /* compiled regex (if any) for the remote */ int use_regex; /* simple boolean. True if we have a regex pattern */ apr_port_t port; /* the port for this proxy */ }; #define PROXYPASS_NOCANON 0x01 #define PROXYPASS_INTERPOLATE 0x02 #define PROXYPASS_NOQUERY 0x04 struct proxy_alias { const char *real; const char *fake; ap_regex_t *regex; unsigned int flags; proxy_balancer *balancer; /* only valid for reverse-proxys */ }; struct dirconn_entry { char *name; struct in_addr addr, mask; struct apr_sockaddr_t *hostaddr; int (*matcher) (struct dirconn_entry * This, request_rec *r); }; struct noproxy_entry { const char *name; struct apr_sockaddr_t *addr; }; typedef struct { apr_array_header_t *proxies; apr_array_header_t *sec_proxy; apr_array_header_t *aliases; apr_array_header_t *noproxies; apr_array_header_t *dirconn; apr_array_header_t *workers; /* non-balancer workers, eg ProxyPass http://example.com */ apr_array_header_t *balancers; /* list of balancers @ config time */ proxy_worker *forward; /* forward proxy worker */ proxy_worker *reverse; /* reverse "module-driven" proxy worker */ const char *domain; /* domain name to use in absence of a domain name in the request */ const char *id; apr_pool_t *pool; /* Pool used for allocating this struct's elements */ int req; /* true if proxy requests are enabled */ int max_balancers; /* maximum number of allowed balancers */ int bgrowth; /* number of post-config balancers can added */ enum { via_off, via_on, via_block, via_full } viaopt; /* how to deal with proxy Via: headers */ apr_size_t recv_buffer_size; apr_size_t io_buffer_size; long maxfwd; apr_interval_time_t timeout; enum { bad_error, bad_ignore, bad_body } badopt; /* how to deal with bad headers */ enum { status_off, status_on, status_full } proxy_status; /* Status display options */ apr_sockaddr_t *source_address; apr_global_mutex_t *mutex; /* global lock, for pool, etc */ ap_slotmem_instance_t *bslot; /* balancers shm data - runtime */ ap_slotmem_provider_t *storage; unsigned int req_set:1; unsigned int viaopt_set:1; unsigned int recv_buffer_size_set:1; unsigned int io_buffer_size_set:1; unsigned int maxfwd_set:1; unsigned int timeout_set:1; unsigned int badopt_set:1; unsigned int proxy_status_set:1; unsigned int source_address_set:1; unsigned int bgrowth_set:1; unsigned int bal_persist:1; unsigned int inherit:1; unsigned int inherit_set:1; unsigned int ppinherit:1; unsigned int ppinherit_set:1; } proxy_server_conf; typedef struct { const char *p; /* The path */ ap_regex_t *r; /* Is this a regex? */ /* FIXME * ProxyPassReverse and friends are documented as working inside * . But in fact they never have done in the case of * more than one , because the server_conf can't see it. * We need to move them to the per-dir config. * Discussed in February 2005: * http://marc.theaimsgroup.com/?l=apache-httpd-dev&m=110726027118798&w=2 */ apr_array_header_t *raliases; apr_array_header_t* cookie_paths; apr_array_header_t* cookie_domains; signed char p_is_fnmatch; /* Is the path an fnmatch candidate? */ signed char interpolate_env; struct proxy_alias *alias; /** * the following setting masks the error page * returned from the 'proxied server' and just * forwards the status code upwards. * This allows the main server (us) to generate * the error page, (so it will look like a error * returned from the rest of the system */ unsigned int error_override:1; unsigned int preserve_host:1; unsigned int preserve_host_set:1; unsigned int error_override_set:1; unsigned int alias_set:1; unsigned int add_forwarded_headers:1; unsigned int add_forwarded_headers_set:1; /** Named back references */ apr_array_header_t *refs; unsigned int forward_100_continue:1; unsigned int forward_100_continue_set:1; } proxy_dir_conf; /* if we interpolate env vars per-request, we'll need a per-request * copy of the reverse proxy config */ typedef struct { apr_array_header_t *raliases; apr_array_header_t* cookie_paths; apr_array_header_t* cookie_domains; } proxy_req_conf; typedef struct { conn_rec *connection; request_rec *r; /* Request record of the backend request * that is used over the backend connection. */ proxy_worker *worker; /* Connection pool this connection belongs to */ apr_pool_t *pool; /* Subpool for hostname and addr data */ const char *hostname; apr_sockaddr_t *addr; /* Preparsed remote address info */ apr_pool_t *scpool; /* Subpool used for socket and connection data */ apr_socket_t *sock; /* Connection socket */ void *data; /* per scheme connection data */ void *forward; /* opaque forward proxy data */ apr_uint32_t flags; /* Connection flags */ apr_port_t port; unsigned int is_ssl:1; unsigned int close:1; /* Close 'this' connection */ unsigned int need_flush:1; /* Flag to decide whether we need to flush the * filter chain or not */ unsigned int inreslist:1; /* connection in apr_reslist? */ const char *uds_path; /* Unix domain socket path */ const char *ssl_hostname;/* Hostname (SNI) in use by SSL connection */ apr_bucket_brigade *tmp_bb;/* Temporary brigade created with the connection * and its scpool/bucket_alloc (NULL before), * must be left cleaned when used (locally). */ } proxy_conn_rec; typedef struct { float cache_completion; /* completion percentage */ int content_length; /* length of the content */ } proxy_completion; /* Connection pool */ struct proxy_conn_pool { apr_pool_t *pool; /* The pool used in constructor and destructor calls */ apr_sockaddr_t *addr; /* Preparsed remote address info */ apr_reslist_t *res; /* Connection resource list */ proxy_conn_rec *conn; /* Single connection for prefork mpm */ }; /* worker status bits */ /* * NOTE: Keep up-to-date w/ proxy_wstat_tbl[] * in mod_proxy.c ! */ #define PROXY_WORKER_INITIALIZED 0x0001 #define PROXY_WORKER_IGNORE_ERRORS 0x0002 #define PROXY_WORKER_DRAIN 0x0004 #define PROXY_WORKER_GENERIC 0x0008 #define PROXY_WORKER_IN_SHUTDOWN 0x0010 #define PROXY_WORKER_DISABLED 0x0020 #define PROXY_WORKER_STOPPED 0x0040 #define PROXY_WORKER_IN_ERROR 0x0080 #define PROXY_WORKER_HOT_STANDBY 0x0100 #define PROXY_WORKER_FREE 0x0200 #define PROXY_WORKER_HC_FAIL 0x0400 #define PROXY_WORKER_HOT_SPARE 0x0800 /* worker status flags */ #define PROXY_WORKER_INITIALIZED_FLAG 'O' #define PROXY_WORKER_IGNORE_ERRORS_FLAG 'I' #define PROXY_WORKER_DRAIN_FLAG 'N' #define PROXY_WORKER_GENERIC_FLAG 'G' #define PROXY_WORKER_IN_SHUTDOWN_FLAG 'U' #define PROXY_WORKER_DISABLED_FLAG 'D' #define PROXY_WORKER_STOPPED_FLAG 'S' #define PROXY_WORKER_IN_ERROR_FLAG 'E' #define PROXY_WORKER_HOT_STANDBY_FLAG 'H' #define PROXY_WORKER_FREE_FLAG 'F' #define PROXY_WORKER_HC_FAIL_FLAG 'C' #define PROXY_WORKER_HOT_SPARE_FLAG 'R' #define PROXY_WORKER_NOT_USABLE_BITMAP ( PROXY_WORKER_IN_SHUTDOWN | \ PROXY_WORKER_DISABLED | PROXY_WORKER_STOPPED | PROXY_WORKER_IN_ERROR | \ PROXY_WORKER_HC_FAIL ) /* NOTE: these check the shared status */ #define PROXY_WORKER_IS_INITIALIZED(f) ( (f)->s->status & PROXY_WORKER_INITIALIZED ) #define PROXY_WORKER_IS_STANDBY(f) ( (f)->s->status & PROXY_WORKER_HOT_STANDBY ) #define PROXY_WORKER_IS_SPARE(f) ( (f)->s->status & PROXY_WORKER_HOT_SPARE ) #define PROXY_WORKER_IS_USABLE(f) ( ( !( (f)->s->status & PROXY_WORKER_NOT_USABLE_BITMAP) ) && \ PROXY_WORKER_IS_INITIALIZED(f) ) #define PROXY_WORKER_IS_DRAINING(f) ( (f)->s->status & PROXY_WORKER_DRAIN ) #define PROXY_WORKER_IS_GENERIC(f) ( (f)->s->status & PROXY_WORKER_GENERIC ) #define PROXY_WORKER_IS_HCFAILED(f) ( (f)->s->status & PROXY_WORKER_HC_FAIL ) #define PROXY_WORKER_IS(f, b) ( (f)->s->status & (b) ) /* default worker retry timeout in seconds */ #define PROXY_WORKER_DEFAULT_RETRY 60 /* Some max char string sizes, for shm fields */ #define PROXY_WORKER_MAX_SCHEME_SIZE 16 #define PROXY_WORKER_MAX_ROUTE_SIZE 64 #define PROXY_BALANCER_MAX_ROUTE_SIZE PROXY_WORKER_MAX_ROUTE_SIZE #define PROXY_WORKER_MAX_NAME_SIZE 96 #define PROXY_BALANCER_MAX_NAME_SIZE PROXY_WORKER_MAX_NAME_SIZE #define PROXY_WORKER_MAX_HOSTNAME_SIZE 64 #define PROXY_BALANCER_MAX_HOSTNAME_SIZE PROXY_WORKER_MAX_HOSTNAME_SIZE #define PROXY_BALANCER_MAX_STICKY_SIZE 64 #define PROXY_RFC1035_HOSTNAME_SIZE 256 /* RFC-1035 mentions limits of 255 for host-names and 253 for domain-names, * dotted together(?) this would fit the below size (+ trailing NUL). */ #define PROXY_WORKER_RFC1035_NAME_SIZE 512 #define PROXY_MAX_PROVIDER_NAME_SIZE 16 #define PROXY_STRNCPY(dst, src) ap_proxy_strncpy((dst), (src), (sizeof(dst))) #define PROXY_COPY_CONF_PARAMS(w, c) \ do { \ (w)->s->timeout = (c)->timeout; \ (w)->s->timeout_set = (c)->timeout_set; \ (w)->s->recv_buffer_size = (c)->recv_buffer_size; \ (w)->s->recv_buffer_size_set = (c)->recv_buffer_size_set; \ (w)->s->io_buffer_size = (c)->io_buffer_size; \ (w)->s->io_buffer_size_set = (c)->io_buffer_size_set; \ } while (0) #define PROXY_DO_100_CONTINUE(w, r) \ ((w)->s->ping_timeout_set \ && (PROXYREQ_REVERSE == (r)->proxyreq) \ && !(apr_table_get((r)->subprocess_env, "force-proxy-request-1.0")) \ && ap_request_has_body((r))) /* use 2 hashes */ typedef struct { unsigned int def; unsigned int fnv; } proxy_hashes ; /* Runtime worker status information. Shared in scoreboard */ /* The addition of member uds_path in 2.4.7 was an incompatible API change. */ typedef struct { char name[PROXY_WORKER_MAX_NAME_SIZE]; char scheme[PROXY_WORKER_MAX_SCHEME_SIZE]; /* scheme to use ajp|http|https */ char hostname[PROXY_WORKER_MAX_HOSTNAME_SIZE]; /* remote backend address (deprecated, use hostname_ex below) */ char route[PROXY_WORKER_MAX_ROUTE_SIZE]; /* balancing route */ char redirect[PROXY_WORKER_MAX_ROUTE_SIZE]; /* temporary balancing redirection route */ char flusher[PROXY_WORKER_MAX_SCHEME_SIZE]; /* flush provider used by mod_proxy_fdpass */ char uds_path[PROXY_WORKER_MAX_NAME_SIZE]; /* path to worker's unix domain socket if applicable */ int lbset; /* load balancer cluster set */ int retries; /* number of retries on this worker */ int lbstatus; /* Current lbstatus */ int lbfactor; /* dynamic lbfactor */ int min; /* Desired minimum number of available connections */ int smax; /* Soft maximum on the total number of connections */ int hmax; /* Hard maximum on the total number of connections */ int flush_wait; /* poll wait time in microseconds if flush_auto */ int index; /* shm array index */ proxy_hashes hash; /* hash of worker name */ unsigned int status; /* worker status bitfield */ enum { flush_off, flush_on, flush_auto } flush_packets; /* control AJP flushing */ apr_time_t updated; /* timestamp of last update for dynamic workers, or queue-time of HC workers */ apr_time_t error_time; /* time of the last error */ apr_interval_time_t ttl; /* maximum amount of time in seconds a connection * may be available while exceeding the soft limit */ apr_interval_time_t retry; /* retry interval */ apr_interval_time_t timeout; /* connection timeout */ apr_interval_time_t acquire; /* acquire timeout when the maximum number of connections is exceeded */ apr_interval_time_t ping_timeout; apr_interval_time_t conn_timeout; apr_size_t recv_buffer_size; apr_size_t io_buffer_size; apr_size_t elected; /* Number of times the worker was elected */ apr_size_t busy; /* busyness factor */ apr_port_t port; apr_off_t transferred;/* Number of bytes transferred to remote */ apr_off_t read; /* Number of bytes read from remote */ void *context; /* general purpose storage */ unsigned int keepalive:1; unsigned int disablereuse:1; unsigned int is_address_reusable:1; unsigned int retry_set:1; unsigned int timeout_set:1; unsigned int acquire_set:1; unsigned int ping_timeout_set:1; unsigned int conn_timeout_set:1; unsigned int recv_buffer_size_set:1; unsigned int io_buffer_size_set:1; unsigned int keepalive_set:1; unsigned int disablereuse_set:1; unsigned int was_malloced:1; char hcuri[PROXY_WORKER_MAX_ROUTE_SIZE]; /* health check uri */ char hcexpr[PROXY_WORKER_MAX_SCHEME_SIZE]; /* name of condition expr for health check */ int passes; /* number of successes for check to pass */ int pcount; /* current count of passes */ int fails; /* number of failures for check to fail */ int fcount; /* current count of failures */ hcmethod_t method; /* method to use for health check */ apr_interval_time_t interval; char upgrade[PROXY_WORKER_MAX_SCHEME_SIZE];/* upgrade protocol used by mod_proxy_wstunnel */ char hostname_ex[PROXY_RFC1035_HOSTNAME_SIZE]; /* RFC1035 compliant version of the remote backend address */ apr_size_t response_field_size; /* Size of proxy response buffer in bytes. */ unsigned int response_field_size_set:1; } proxy_worker_shared; #define ALIGNED_PROXY_WORKER_SHARED_SIZE (APR_ALIGN_DEFAULT(sizeof(proxy_worker_shared))) /* Worker configuration */ struct proxy_worker { proxy_hashes hash; /* hash of worker name */ unsigned int local_status; /* status of per-process worker */ proxy_conn_pool *cp; /* Connection pool to use */ proxy_worker_shared *s; /* Shared data */ proxy_balancer *balancer; /* which balancer am I in? */ apr_thread_mutex_t *tmutex; /* Thread lock for updating address cache */ void *context; /* general purpose storage */ ap_conf_vector_t *section_config; /* -section wherein defined */ }; /* default to health check every 30 seconds */ #define HCHECK_WATHCHDOG_DEFAULT_INTERVAL (30) /* The watchdog runs every 2 seconds, which is also the minimal check */ #define HCHECK_WATHCHDOG_INTERVAL (2) /* * Time to wait (in microseconds) to find out if more data is currently * available at the backend. */ #define PROXY_FLUSH_WAIT 10000 typedef struct { char sticky_path[PROXY_BALANCER_MAX_STICKY_SIZE]; /* URL sticky session identifier */ char sticky[PROXY_BALANCER_MAX_STICKY_SIZE]; /* sticky session identifier */ char lbpname[PROXY_MAX_PROVIDER_NAME_SIZE]; /* lbmethod provider name */ char nonce[APR_UUID_FORMATTED_LENGTH + 1]; char name[PROXY_BALANCER_MAX_NAME_SIZE]; char sname[PROXY_BALANCER_MAX_NAME_SIZE]; char vpath[PROXY_BALANCER_MAX_ROUTE_SIZE]; char vhost[PROXY_BALANCER_MAX_HOSTNAME_SIZE]; apr_interval_time_t timeout; /* Timeout for waiting on free connection */ apr_time_t wupdated; /* timestamp of last change to workers list */ int max_attempts; /* Number of attempts before failing */ int index; /* shm array index */ proxy_hashes hash; unsigned int sticky_force:1; /* Disable failover for sticky sessions */ unsigned int scolonsep:1; /* true if ';' seps sticky session paths */ unsigned int max_attempts_set:1; unsigned int was_malloced:1; unsigned int need_reset:1; unsigned int vhosted:1; unsigned int inactive:1; unsigned int forcerecovery:1; char sticky_separator; /* separator for sessionid/route */ unsigned int forcerecovery_set:1; unsigned int scolonsep_set:1; unsigned int sticky_force_set:1; unsigned int nonce_set:1; unsigned int sticky_separator_set:1; } proxy_balancer_shared; #define ALIGNED_PROXY_BALANCER_SHARED_SIZE (APR_ALIGN_DEFAULT(sizeof(proxy_balancer_shared))) struct proxy_balancer { apr_array_header_t *workers; /* initially configured workers */ apr_array_header_t *errstatuses; /* statuses to force members into error */ ap_slotmem_instance_t *wslot; /* worker shm data - runtime */ ap_slotmem_provider_t *storage; int growth; /* number of post-config workers can added */ int max_workers; /* maximum number of allowed workers */ proxy_hashes hash; apr_time_t wupdated; /* timestamp of last change to workers list */ proxy_balancer_method *lbmethod; apr_global_mutex_t *gmutex; /* global lock for updating list of workers */ apr_thread_mutex_t *tmutex; /* Thread lock for updating shm */ proxy_server_conf *sconf; void *context; /* general purpose storage */ proxy_balancer_shared *s; /* Shared data */ int failontimeout; /* Whether to mark a member in Err if IO timeout occurs */ unsigned int failontimeout_set:1; unsigned int growth_set:1; unsigned int lbmethod_set:1; ap_conf_vector_t *section_config; /* -section wherein defined */ }; struct proxy_balancer_method { const char *name; /* name of the load balancer method*/ proxy_worker *(*finder)(proxy_balancer *balancer, request_rec *r); void *context; /* general purpose storage */ apr_status_t (*reset)(proxy_balancer *balancer, server_rec *s); apr_status_t (*age)(proxy_balancer *balancer, server_rec *s); apr_status_t (*updatelbstatus)(proxy_balancer *balancer, proxy_worker *elected, server_rec *s); }; #define PROXY_THREAD_LOCK(x) ( (x) && (x)->tmutex ? apr_thread_mutex_lock((x)->tmutex) : APR_SUCCESS) #define PROXY_THREAD_UNLOCK(x) ( (x) && (x)->tmutex ? apr_thread_mutex_unlock((x)->tmutex) : APR_SUCCESS) #define PROXY_GLOBAL_LOCK(x) ( (x) && (x)->gmutex ? apr_global_mutex_lock((x)->gmutex) : APR_SUCCESS) #define PROXY_GLOBAL_UNLOCK(x) ( (x) && (x)->gmutex ? apr_global_mutex_unlock((x)->gmutex) : APR_SUCCESS) /* hooks */ /* Create a set of PROXY_DECLARE(type), PROXY_DECLARE_NONSTD(type) and * PROXY_DECLARE_DATA with appropriate export and import tags for the platform */ #if !defined(WIN32) #define PROXY_DECLARE(type) type #define PROXY_DECLARE_NONSTD(type) type #define PROXY_DECLARE_DATA #elif defined(PROXY_DECLARE_STATIC) #define PROXY_DECLARE(type) type __stdcall #define PROXY_DECLARE_NONSTD(type) type #define PROXY_DECLARE_DATA #elif defined(PROXY_DECLARE_EXPORT) #define PROXY_DECLARE(type) __declspec(dllexport) type __stdcall #define PROXY_DECLARE_NONSTD(type) __declspec(dllexport) type #define PROXY_DECLARE_DATA __declspec(dllexport) #else #define PROXY_DECLARE(type) __declspec(dllimport) type __stdcall #define PROXY_DECLARE_NONSTD(type) __declspec(dllimport) type #define PROXY_DECLARE_DATA __declspec(dllimport) #endif /* Using PROXY_DECLARE_OPTIONAL_HOOK instead of * APR_DECLARE_EXTERNAL_HOOK allows build/make_nw_export.awk * to distinguish between hooks that implement * proxy_hook_xx and proxy_hook_get_xx in mod_proxy.c and * those which don't. */ #define PROXY_DECLARE_OPTIONAL_HOOK APR_DECLARE_EXTERNAL_HOOK /* These 2 are in mod_proxy.c */ extern PROXY_DECLARE_DATA proxy_hcmethods_t proxy_hcmethods[]; extern PROXY_DECLARE_DATA proxy_wstat_t proxy_wstat_tbl[]; /* Following 4 from health check */ APR_DECLARE_OPTIONAL_FN(void, hc_show_exprs, (request_rec *)); APR_DECLARE_OPTIONAL_FN(void, hc_select_exprs, (request_rec *, const char *)); APR_DECLARE_OPTIONAL_FN(int, hc_valid_expr, (request_rec *, const char *)); APR_DECLARE_OPTIONAL_FN(const char *, set_worker_hc_param, (apr_pool_t *, server_rec *, proxy_worker *, const char *, const char *, void *)); APR_DECLARE_EXTERNAL_HOOK(proxy, PROXY, int, section_post_config, (apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s, ap_conf_vector_t *section_config)) APR_DECLARE_EXTERNAL_HOOK(proxy, PROXY, int, scheme_handler, (request_rec *r, proxy_worker *worker, proxy_server_conf *conf, char *url, const char *proxyhost, apr_port_t proxyport)) APR_DECLARE_EXTERNAL_HOOK(proxy, PROXY, int, canon_handler, (request_rec *r, char *url)) APR_DECLARE_EXTERNAL_HOOK(proxy, PROXY, int, create_req, (request_rec *r, request_rec *pr)) APR_DECLARE_EXTERNAL_HOOK(proxy, PROXY, int, fixups, (request_rec *r)) /** * pre request hook. * It will return the most suitable worker at the moment * and corresponding balancer. * The url is rewritten from balancer://cluster/uri to scheme://host:port/uri * and then the scheme_handler is called. * */ APR_DECLARE_EXTERNAL_HOOK(proxy, PROXY, int, pre_request, (proxy_worker **worker, proxy_balancer **balancer, request_rec *r, proxy_server_conf *conf, char **url)) /** * post request hook. * It is called after request for updating runtime balancer status. */ APR_DECLARE_EXTERNAL_HOOK(proxy, PROXY, int, post_request, (proxy_worker *worker, proxy_balancer *balancer, request_rec *r, proxy_server_conf *conf)) /** * request status hook * It is called after all proxy processing has been done. This gives other * modules a chance to create default content on failure, for example */ APR_DECLARE_EXTERNAL_HOOK(proxy, PROXY, int, request_status, (int *status, request_rec *r)) /* proxy_util.c */ PROXY_DECLARE(apr_status_t) ap_proxy_strncpy(char *dst, const char *src, apr_size_t dlen); PROXY_DECLARE(int) ap_proxy_hex2c(const char *x); PROXY_DECLARE(void) ap_proxy_c2hex(int ch, char *x); PROXY_DECLARE(char *)ap_proxy_canonenc(apr_pool_t *p, const char *x, int len, enum enctype t, int forcedec, int proxyreq); PROXY_DECLARE(char *)ap_proxy_canon_netloc(apr_pool_t *p, char **const urlp, char **userp, char **passwordp, char **hostp, apr_port_t *port); PROXY_DECLARE(int) ap_proxyerror(request_rec *r, int statuscode, const char *message); PROXY_DECLARE(int) ap_proxy_checkproxyblock(request_rec *r, proxy_server_conf *conf, apr_sockaddr_t *uri_addr); /** Test whether the hostname/address of the request are blocked by the ProxyBlock * configuration. * @param r request * @param conf server configuration * @param hostname hostname from request URI * @param addr resolved address of hostname, or NULL if not known * @return OK on success, or else an errro */ PROXY_DECLARE(int) ap_proxy_checkproxyblock2(request_rec *r, proxy_server_conf *conf, const char *hostname, apr_sockaddr_t *addr); PROXY_DECLARE(int) ap_proxy_pre_http_request(conn_rec *c, request_rec *r); /* DEPRECATED (will be replaced with ap_proxy_connect_backend */ PROXY_DECLARE(int) ap_proxy_connect_to_backend(apr_socket_t **, const char *, apr_sockaddr_t *, const char *, proxy_server_conf *, request_rec *); /* DEPRECATED (will be replaced with ap_proxy_check_connection */ PROXY_DECLARE(apr_status_t) ap_proxy_ssl_connection_cleanup(proxy_conn_rec *conn, request_rec *r); PROXY_DECLARE(int) ap_proxy_ssl_enable(conn_rec *c); PROXY_DECLARE(int) ap_proxy_ssl_disable(conn_rec *c); PROXY_DECLARE(int) ap_proxy_ssl_engine(conn_rec *c, ap_conf_vector_t *per_dir_config, int enable); PROXY_DECLARE(int) ap_proxy_conn_is_https(conn_rec *c); PROXY_DECLARE(const char *) ap_proxy_ssl_val(apr_pool_t *p, server_rec *s, conn_rec *c, request_rec *r, const char *var); /* Header mapping functions, and a typedef of their signature */ PROXY_DECLARE(const char *) ap_proxy_location_reverse_map(request_rec *r, proxy_dir_conf *conf, const char *url); PROXY_DECLARE(const char *) ap_proxy_cookie_reverse_map(request_rec *r, proxy_dir_conf *conf, const char *str); #if !defined(WIN32) typedef const char *(*ap_proxy_header_reverse_map_fn)(request_rec *, proxy_dir_conf *, const char *); #elif defined(PROXY_DECLARE_STATIC) typedef const char *(__stdcall *ap_proxy_header_reverse_map_fn)(request_rec *, proxy_dir_conf *, const char *); #elif defined(PROXY_DECLARE_EXPORT) typedef __declspec(dllexport) const char * (__stdcall *ap_proxy_header_reverse_map_fn)(request_rec *, proxy_dir_conf *, const char *); #else typedef __declspec(dllimport) const char * (__stdcall *ap_proxy_header_reverse_map_fn)(request_rec *, proxy_dir_conf *, const char *); #endif /* Connection pool API */ /** * Return the user-land, UDS aware worker name * @param p memory pool used for displaying worker name * @param worker the worker * @return name */ PROXY_DECLARE(char *) ap_proxy_worker_name(apr_pool_t *p, proxy_worker *worker); /** * Get the worker from proxy configuration * @param p memory pool used for finding worker * @param balancer the balancer that the worker belongs to * @param conf current proxy server configuration * @param url url to find the worker from * @return proxy_worker or NULL if not found */ PROXY_DECLARE(proxy_worker *) ap_proxy_get_worker(apr_pool_t *p, proxy_balancer *balancer, proxy_server_conf *conf, const char *url); /** * Define and Allocate space for the worker to proxy configuration * @param p memory pool to allocate worker from * @param worker the new worker * @param balancer the balancer that the worker belongs to * @param conf current proxy server configuration * @param url url containing worker name * @param do_malloc true if shared struct should be malloced * @return error message or NULL if successful (*worker is new worker) */ PROXY_DECLARE(char *) ap_proxy_define_worker(apr_pool_t *p, proxy_worker **worker, proxy_balancer *balancer, proxy_server_conf *conf, const char *url, int do_malloc); /** * Share a defined proxy worker via shm * @param worker worker to be shared * @param shm location of shared info * @param i index into shm * @return APR_SUCCESS or error code */ PROXY_DECLARE(apr_status_t) ap_proxy_share_worker(proxy_worker *worker, proxy_worker_shared *shm, int i); /** * Initialize the worker by setting up worker connection pool and mutex * @param worker worker to initialize * @param s current server record * @param p memory pool used for mutex and connection pool * @return APR_SUCCESS or error code */ PROXY_DECLARE(apr_status_t) ap_proxy_initialize_worker(proxy_worker *worker, server_rec *s, apr_pool_t *p); /** * Verifies valid balancer name (eg: balancer://foo) * @param name name to test * @param i number of chars to test; 0 for all. * @return true/false */ PROXY_DECLARE(int) ap_proxy_valid_balancer_name(char *name, int i); /** * Get the balancer from proxy configuration * @param p memory pool used for temporary storage while finding balancer * @param conf current proxy server configuration * @param url url to find the worker from; must have balancer:// prefix * @param careactive true if we care if the balancer is active or not * @return proxy_balancer or NULL if not found */ PROXY_DECLARE(proxy_balancer *) ap_proxy_get_balancer(apr_pool_t *p, proxy_server_conf *conf, const char *url, int careactive); /** * Update the balancer's vhost related fields * @param p memory pool used for temporary storage while finding balancer * @param balancer balancer to be updated * @param url url to find vhost info * @return error string or NULL if OK */ PROXY_DECLARE(char *) ap_proxy_update_balancer(apr_pool_t *p, proxy_balancer *balancer, const char *url); /** * Define and Allocate space for the balancer to proxy configuration * @param p memory pool to allocate balancer from * @param balancer the new balancer * @param conf current proxy server configuration * @param url url containing balancer name * @param alias alias/fake-path to this balancer * @param do_malloc true if shared struct should be malloced * @return error message or NULL if successful */ PROXY_DECLARE(char *) ap_proxy_define_balancer(apr_pool_t *p, proxy_balancer **balancer, proxy_server_conf *conf, const char *url, const char *alias, int do_malloc); /** * Share a defined proxy balancer via shm * @param balancer balancer to be shared * @param shm location of shared info * @param i index into shm * @return APR_SUCCESS or error code */ PROXY_DECLARE(apr_status_t) ap_proxy_share_balancer(proxy_balancer *balancer, proxy_balancer_shared *shm, int i); /** * Initialize the balancer as needed * @param balancer balancer to initialize * @param s current server record * @param p memory pool used for mutex and connection pool * @return APR_SUCCESS or error code */ PROXY_DECLARE(apr_status_t) ap_proxy_initialize_balancer(proxy_balancer *balancer, server_rec *s, apr_pool_t *p); typedef int (proxy_is_best_callback_fn_t)(proxy_worker *current, proxy_worker *prev_best, void *baton); /** * Retrieve the best worker in a balancer for the current request * @param balancer balancer for which to find the best worker * @param r current request record * @param is_best a callback function provide by the lbmethod * that determines if the current worker is best * @param baton an lbmethod-specific context pointer (baton) * passed to the is_best callback * @return the best worker to be used for the request */ PROXY_DECLARE(proxy_worker *) ap_proxy_balancer_get_best_worker(proxy_balancer *balancer, request_rec *r, proxy_is_best_callback_fn_t *is_best, void *baton); /* * Needed by the lb modules. */ APR_DECLARE_OPTIONAL_FN(proxy_worker *, proxy_balancer_get_best_worker, (proxy_balancer *balancer, request_rec *r, proxy_is_best_callback_fn_t *is_best, void *baton)); /** * Find the shm of the worker as needed * @param storage slotmem provider * @param slot slotmem instance * @param worker worker to find * @param index pointer to index within slotmem of worker * @return pointer to shm of worker, or NULL */ PROXY_DECLARE(proxy_worker_shared *) ap_proxy_find_workershm(ap_slotmem_provider_t *storage, ap_slotmem_instance_t *slot, proxy_worker *worker, unsigned int *index); /** * Find the shm of the balancer as needed * @param storage slotmem provider * @param slot slotmem instance * @param balancer balancer of shm to find * @param index pointer to index within slotmem of balancer * @return pointer to shm of balancer, or NULL */ PROXY_DECLARE(proxy_balancer_shared *) ap_proxy_find_balancershm(ap_slotmem_provider_t *storage, ap_slotmem_instance_t *slot, proxy_balancer *balancer, unsigned int *index); /** * Get the most suitable worker and/or balancer for the request * @param worker worker used for processing request * @param balancer balancer used for processing request * @param r current request * @param conf current proxy server configuration * @param url request url that balancer can rewrite. * @return OK or HTTP_XXX error * @note It calls balancer pre_request hook if the url starts with balancer:// * The balancer then rewrites the url to particular worker, like http://host:port */ PROXY_DECLARE(int) ap_proxy_pre_request(proxy_worker **worker, proxy_balancer **balancer, request_rec *r, proxy_server_conf *conf, char **url); /** * Post request worker and balancer cleanup * @param worker worker used for processing request * @param balancer balancer used for processing request * @param r current request * @param conf current proxy server configuration * @return OK or HTTP_XXX error * @note Whenever the pre_request is called, the post_request has to be * called too. */ PROXY_DECLARE(int) ap_proxy_post_request(proxy_worker *worker, proxy_balancer *balancer, request_rec *r, proxy_server_conf *conf); /** * Determine backend hostname and port * @param p memory pool used for processing * @param r current request * @param conf current proxy server configuration * @param worker worker used for processing request * @param conn proxy connection struct * @param uri processed uri * @param url request url * @param proxyname are we connecting directly or via a proxy * @param proxyport proxy host port * @param server_portstr Via headers server port, must be non-NULL * @param server_portstr_size size of the server_portstr buffer; must * be at least one, even if the protocol doesn't use this * @return OK or HTTP_XXX error */ PROXY_DECLARE(int) ap_proxy_determine_connection(apr_pool_t *p, request_rec *r, proxy_server_conf *conf, proxy_worker *worker, proxy_conn_rec *conn, apr_uri_t *uri, char **url, const char *proxyname, apr_port_t proxyport, char *server_portstr, int server_portstr_size); /** * Mark a worker for retry * @param proxy_function calling proxy scheme (http, ajp, ...) * @param worker worker used for retrying * @param s current server record * @return OK if marked for retry, DECLINED otherwise * @note The error status of the worker will cleared if the retry interval has * elapsed since the last error. */ APR_DECLARE_OPTIONAL_FN(int, ap_proxy_retry_worker, (const char *proxy_function, proxy_worker *worker, server_rec *s)); /** * Acquire a connection from worker connection pool * @param proxy_function calling proxy scheme (http, ajp, ...) * @param conn acquired connection * @param worker worker used for obtaining connection * @param s current server record * @return OK or HTTP_XXX error * @note If the connection limit has been reached, the function will * block until a connection becomes available or the timeout has * elapsed. */ PROXY_DECLARE(int) ap_proxy_acquire_connection(const char *proxy_function, proxy_conn_rec **conn, proxy_worker *worker, server_rec *s); /** * Release a connection back to worker connection pool * @param proxy_function calling proxy scheme (http, ajp, ...) * @param conn acquired connection * @param s current server record * @return OK or HTTP_XXX error * @note The connection will be closed if conn->close_on_release is set */ PROXY_DECLARE(int) ap_proxy_release_connection(const char *proxy_function, proxy_conn_rec *conn, server_rec *s); #define PROXY_CHECK_CONN_EMPTY (1 << 0) /** * Check a connection to the backend * @param scheme calling proxy scheme (http, ajp, ...) * @param conn acquired connection * @param server current server record * @param max_blank_lines how many blank lines to consume, * or zero for none (considered data) * @param flags PROXY_CHECK_* bitmask * @return APR_SUCCESS: connection established, * APR_ENOTEMPTY: connection established with data, * APR_ENOSOCKET: not connected, * APR_EINVAL: worker in error state (unusable), * other: connection closed/aborted (remotely) */ PROXY_DECLARE(apr_status_t) ap_proxy_check_connection(const char *scheme, proxy_conn_rec *conn, server_rec *server, unsigned max_blank_lines, int flags); /** * Make a connection to the backend * @param proxy_function calling proxy scheme (http, ajp, ...) * @param conn acquired connection * @param worker connection worker * @param s current server record * @return OK or HTTP_XXX error * @note In case the socket already exists for conn, just check the link * status. */ PROXY_DECLARE(int) ap_proxy_connect_backend(const char *proxy_function, proxy_conn_rec *conn, proxy_worker *worker, server_rec *s); /** * Make a connection to a Unix Domain Socket (UDS) path * @param sock UDS to connect * @param uds_path UDS path to connect to * @param p pool to make the sock addr * @return APR_SUCCESS or error status */ PROXY_DECLARE(apr_status_t) ap_proxy_connect_uds(apr_socket_t *sock, const char *uds_path, apr_pool_t *p); /** * Make a connection record for backend connection * @param proxy_function calling proxy scheme (http, ajp, ...) * @param conn acquired connection * @param c client connection record (unused, deprecated) * @param s current server record * @return OK or HTTP_XXX error * @note The function will return immediately if conn->connection * is already set, */ PROXY_DECLARE(int) ap_proxy_connection_create(const char *proxy_function, proxy_conn_rec *conn, conn_rec *c, server_rec *s); /** * Make a connection record for backend connection, using request dir config * @param proxy_function calling proxy scheme (http, ajp, ...) * @param conn acquired connection * @param r current request record * @return OK or HTTP_XXX error * @note The function will return immediately if conn->connection * is already set, */ PROXY_DECLARE(int) ap_proxy_connection_create_ex(const char *proxy_function, proxy_conn_rec *conn, request_rec *r); /** * Determine if proxy connection can potentially be reused at the * end of this request. * @param conn proxy connection * @return non-zero if reusable, 0 otherwise * @note Even if this function returns non-zero, the connection may * be subsequently marked for closure. */ PROXY_DECLARE(int) ap_proxy_connection_reusable(proxy_conn_rec *conn); /** * Signal the upstream chain that the connection to the backend broke in the * middle of the response. This is done by sending an error bucket with * status HTTP_BAD_GATEWAY and an EOS bucket up the filter chain. * @param r current request record of client request * @param brigade The brigade that is sent through the output filter chain */ PROXY_DECLARE(void) ap_proxy_backend_broke(request_rec *r, apr_bucket_brigade *brigade); /** * Return a hash based on the passed string * @param str string to produce hash from * @param method hashing method to use * @return hash as unsigned int */ typedef enum { PROXY_HASHFUNC_DEFAULT, PROXY_HASHFUNC_APR, PROXY_HASHFUNC_FNV } proxy_hash_t; PROXY_DECLARE(unsigned int) ap_proxy_hashfunc(const char *str, proxy_hash_t method); /** * Set/unset the worker status bitfield depending on flag * @param c flag * @param set set or unset bit * @param w worker to use * @return APR_SUCCESS if valid flag */ PROXY_DECLARE(apr_status_t) ap_proxy_set_wstatus(char c, int set, proxy_worker *w); /** * Create readable representation of worker status bitfield * @param p pool * @param w worker to use * @return string representation of status */ PROXY_DECLARE(char *) ap_proxy_parse_wstatus(apr_pool_t *p, proxy_worker *w); /** * Sync balancer and workers based on any updates w/i shm * @param b balancer to check/update member list of * @param s server rec * @param conf config * @return APR_SUCCESS if all goes well */ PROXY_DECLARE(apr_status_t) ap_proxy_sync_balancer(proxy_balancer *b, server_rec *s, proxy_server_conf *conf); /** * Find the matched alias for this request and setup for proxy handler * @param r request * @param ent proxy_alias record * @param dconf per-dir config or NULL * @return DECLINED, DONE or OK if matched */ PROXY_DECLARE(int) ap_proxy_trans_match(request_rec *r, struct proxy_alias *ent, proxy_dir_conf *dconf); /** * Create a HTTP request header brigade, old_cl_val and old_te_val as required. * @param p pool * @param header_brigade header brigade to use/fill * @param r request * @param p_conn proxy connection rec * @param worker selected worker * @param conf per-server proxy config * @param uri uri * @param url url * @param server_portstr port as string * @param old_cl_val stored old content-len val * @param old_te_val stored old TE val * @return OK or HTTP_EXPECTATION_FAILED */ PROXY_DECLARE(int) ap_proxy_create_hdrbrgd(apr_pool_t *p, apr_bucket_brigade *header_brigade, request_rec *r, proxy_conn_rec *p_conn, proxy_worker *worker, proxy_server_conf *conf, apr_uri_t *uri, char *url, char *server_portstr, char **old_cl_val, char **old_te_val); /** * @param bucket_alloc bucket allocator * @param r request * @param p_conn proxy connection * @param origin connection rec of origin * @param bb brigade to send to origin * @param flush flush * @return status (OK) */ PROXY_DECLARE(int) ap_proxy_pass_brigade(apr_bucket_alloc_t *bucket_alloc, request_rec *r, proxy_conn_rec *p_conn, conn_rec *origin, apr_bucket_brigade *bb, int flush); /** * Clear the headers referenced by the Connection header from the given * table, and remove the Connection header. * @param r request * @param headers table of headers to clear * @return 1 if "close" was present, 0 otherwise. */ APR_DECLARE_OPTIONAL_FN(int, ap_proxy_clear_connection, (request_rec *r, apr_table_t *headers)); /** * @param socket socket to test * @return TRUE if socket is connected/active */ PROXY_DECLARE(int) ap_proxy_is_socket_connected(apr_socket_t *socket); #define PROXY_LBMETHOD "proxylbmethod" /* The number of dynamic workers that can be added when reconfiguring. * If this limit is reached you must stop and restart the server. */ #define PROXY_DYNAMIC_BALANCER_LIMIT 16 /** * Calculate maximum number of workers in scoreboard. * @return number of workers to allocate in the scoreboard */ int ap_proxy_lb_workers(void); /** * Return the port number of a known scheme (eg: http -> 80). * @param scheme scheme to test * @return port number or 0 if unknown */ PROXY_DECLARE(apr_port_t) ap_proxy_port_of_scheme(const char *scheme); /** * Return the name of the health check method (eg: "OPTIONS"). * @param method method enum * @return name of method */ PROXY_DECLARE (const char *) ap_proxy_show_hcmethod(hcmethod_t method); /** * Strip a unix domain socket (UDS) prefix from the input URL * @param p pool to allocate result from * @param url a URL potentially prefixed with a UDS path * @return URL with the UDS prefix removed */ PROXY_DECLARE(const char *) ap_proxy_de_socketfy(apr_pool_t *p, const char *url); /* * Transform buckets from one bucket allocator to another one by creating a * transient bucket for each data bucket and let it use the data read from * the old bucket. Metabuckets are transformed by just recreating them. * Attention: Currently only the following bucket types are handled: * * All data buckets * FLUSH * EOS * * If an other bucket type is found its type is logged as a debug message * and APR_EGENERAL is returned. * * @param r request_rec of the actual request. Used for logging purposes * @param from the bucket brigade to take the buckets from * @param to the bucket brigade to store the transformed buckets * @return apr_status_t of the operation. Either APR_SUCCESS or * APR_EGENERAL */ PROXY_DECLARE(apr_status_t) ap_proxy_buckets_lifetime_transform(request_rec *r, apr_bucket_brigade *from, apr_bucket_brigade *to); /* * Sends all data that can be read non blocking from the input filter chain of * c_i and send it down the output filter chain of c_o. For reading it uses * the bucket brigade bb_i which should be created from the bucket allocator * associated with c_i. For sending through the output filter chain it uses * the bucket brigade bb_o which should be created from the bucket allocator * associated with c_o. In order to get the buckets from bb_i to bb_o * ap_proxy_buckets_lifetime_transform is used. * * @param r request_rec of the actual request. Used for logging purposes * @param c_i inbound connection conn_rec * @param c_o outbound connection conn_rec * @param bb_i bucket brigade for pulling data from the inbound connection * @param bb_o bucket brigade for sending data through the outbound connection * @param name string for logging from where data was pulled * @param sent if not NULL will be set to 1 if data was sent through c_o * @param bsize maximum amount of data pulled in one iteration from c_i * @param after if set flush data on c_o only once after the loop * @return apr_status_t of the operation. Could be any error returned from * either the input filter chain of c_i or the output filter chain * of c_o. APR_EPIPE if the outgoing connection was aborted. */ PROXY_DECLARE(apr_status_t) ap_proxy_transfer_between_connections( request_rec *r, conn_rec *c_i, conn_rec *c_o, apr_bucket_brigade *bb_i, apr_bucket_brigade *bb_o, const char *name, int *sent, apr_off_t bsize, int after); extern module PROXY_DECLARE_DATA proxy_module; #endif /*MOD_PROXY_H*/ /** @} */ httpd-2.4.41/modules/proxy/NWGNUproxylbm_traf0000644000000000000500000001036512010715741017522 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/proxy \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxylbm_traf # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy LoadBalance by Traffic Sub-Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = LBM Traf Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = $(OBJDIR)/$(NLM_NAME).nlm # # If there is an LIB target, put it here # TARGET_lib = # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_lbmethod_bytraffic.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ libc \ aprlib \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ @$(OBJDIR)/mod_proxy.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ lbmethod_bytraffic_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c balancers # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/mod_proxy_connect.dep0000644000000000000500000000516412674411515020324 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_proxy_connect.mak .\mod_proxy_connect.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_proxy.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/scgi.h0000644000000000000500000000220512343342550015163 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file scgi.h * @brief Shared SCGI-related definitions * * @ingroup APACHE_INTERNAL * @{ */ #ifndef SCGI_H #define SCGI_H /* This is not defined by the protocol. It is a convention * of mod_proxy_scgi, and mod_proxy utility routines must * use the same value as mod_proxy_scgi. */ #define SCGI_DEF_PORT 4000 /** @} */ #endif /* SCGI_H */ httpd-2.4.41/modules/proxy/mod_proxy_uwsgi.mak0000644000000000000500000002577713242652000020031 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_proxy_uwsgi.dsp !IF "$(CFG)" == "" CFG=mod_proxy_uwsgi - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_proxy_uwsgi - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_proxy_uwsgi - Win32 Release" && "$(CFG)" != "mod_proxy_uwsgi - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_uwsgi.mak" CFG="mod_proxy_uwsgi - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_uwsgi - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_uwsgi - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_proxy_uwsgi - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_uwsgi.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_proxy_uwsgi.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_uwsgi.obj" -@erase "$(INTDIR)\mod_proxy_uwsgi.res" -@erase "$(INTDIR)\mod_proxy_uwsgi_src.idb" -@erase "$(INTDIR)\mod_proxy_uwsgi_src.pdb" -@erase "$(OUTDIR)\mod_proxy_uwsgi.exp" -@erase "$(OUTDIR)\mod_proxy_uwsgi.lib" -@erase "$(OUTDIR)\mod_proxy_uwsgi.pdb" -@erase "$(OUTDIR)\mod_proxy_uwsgi.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_uwsgi_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_uwsgi.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_uwsgi.so" /d LONG_NAME="proxy_uwsgi_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_uwsgi.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_uwsgi.pdb" /debug /out:"$(OUTDIR)\mod_proxy_uwsgi.so" /implib:"$(OUTDIR)\mod_proxy_uwsgi.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_uwsgi.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_proxy_uwsgi.obj" \ "$(INTDIR)\mod_proxy_uwsgi.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_uwsgi.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_proxy_uwsgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_uwsgi.so" if exist .\Release\mod_proxy_uwsgi.so.manifest mt.exe -manifest .\Release\mod_proxy_uwsgi.so.manifest -outputresource:.\Release\mod_proxy_uwsgi.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_proxy_uwsgi - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_uwsgi.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_proxy_uwsgi.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_uwsgi.obj" -@erase "$(INTDIR)\mod_proxy_uwsgi.res" -@erase "$(INTDIR)\mod_proxy_uwsgi_src.idb" -@erase "$(INTDIR)\mod_proxy_uwsgi_src.pdb" -@erase "$(OUTDIR)\mod_proxy_uwsgi.exp" -@erase "$(OUTDIR)\mod_proxy_uwsgi.lib" -@erase "$(OUTDIR)\mod_proxy_uwsgi.pdb" -@erase "$(OUTDIR)\mod_proxy_uwsgi.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_uwsgi_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_uwsgi.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_uwsgi.so" /d LONG_NAME="proxy_uwsgi_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_uwsgi.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_uwsgi.pdb" /debug /out:"$(OUTDIR)\mod_proxy_uwsgi.so" /implib:"$(OUTDIR)\mod_proxy_uwsgi.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_uwsgi.so LINK32_OBJS= \ "$(INTDIR)\mod_proxy_uwsgi.obj" \ "$(INTDIR)\mod_proxy_uwsgi.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_uwsgi.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_proxy_uwsgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_uwsgi.so" if exist .\Debug\mod_proxy_uwsgi.so.manifest mt.exe -manifest .\Debug\mod_proxy_uwsgi.so.manifest -outputresource:.\Debug\mod_proxy_uwsgi.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_proxy_uwsgi.dep") !INCLUDE "mod_proxy_uwsgi.dep" !ELSE !MESSAGE Warning: cannot find "mod_proxy_uwsgi.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_proxy_uwsgi - Win32 Release" || "$(CFG)" == "mod_proxy_uwsgi - Win32 Debug" SOURCE=.\mod_proxy_uwsgi.c "$(INTDIR)\mod_proxy_uwsgi.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_proxy_uwsgi - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_uwsgi - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_uwsgi - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_uwsgi - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_uwsgi - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_uwsgi - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_uwsgi - Win32 Release" "mod_proxy - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd "." "mod_proxy - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_proxy_uwsgi - Win32 Debug" "mod_proxy - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd "." "mod_proxy - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_proxy_uwsgi - Win32 Release" "$(INTDIR)\mod_proxy_uwsgi.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_uwsgi.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_proxy_uwsgi.so" /d LONG_NAME="proxy_uwsgi_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_proxy_uwsgi - Win32 Debug" "$(INTDIR)\mod_proxy_uwsgi.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_uwsgi.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_proxy_uwsgi.so" /d LONG_NAME="proxy_uwsgi_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/ajp_utils.c0000644000000000000500000001062612167341565016242 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ajp.h" APLOG_USE_MODULE(proxy_ajp); /* * Handle the CPING/CPONG */ apr_status_t ajp_handle_cping_cpong(apr_socket_t *sock, request_rec *r, apr_interval_time_t timeout) { ajp_msg_t *msg; apr_status_t rc, rv; apr_interval_time_t org; apr_byte_t result; ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, r, "Into ajp_handle_cping_cpong"); rc = ajp_msg_create(r->pool, AJP_PING_PONG_SZ, &msg); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01007) "ajp_handle_cping_cpong: ajp_msg_create failed"); return rc; } rc = ajp_msg_serialize_cping(msg); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01008) "ajp_handle_cping_cpong: ajp_marshal_into_msgb failed"); return rc; } rc = ajp_ilink_send(sock, msg); ajp_msg_log(r, msg, "ajp_handle_cping_cpong: ajp_ilink_send packet dump"); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01009) "ajp_handle_cping_cpong: ajp_ilink_send failed"); return rc; } rc = apr_socket_timeout_get(sock, &org); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01010) "ajp_handle_cping_cpong: apr_socket_timeout_get failed"); return rc; } /* Set CPING/CPONG response timeout */ rc = apr_socket_timeout_set(sock, timeout); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01011) "ajp_handle_cping_cpong: apr_socket_timeout_set failed"); return rc; } ajp_msg_reuse(msg); /* Read CPONG reply */ rv = ajp_ilink_receive(sock, msg); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01012) "ajp_handle_cping_cpong: ajp_ilink_receive failed"); goto cleanup; } ajp_msg_log(r, msg, "ajp_handle_cping_cpong: ajp_ilink_receive packet dump"); rv = ajp_msg_get_uint8(msg, &result); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01013) "ajp_handle_cping_cpong: invalid CPONG message"); goto cleanup; } if (result != CMD_AJP13_CPONG) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01014) "ajp_handle_cping_cpong: awaited CPONG, received %d ", result); rv = APR_EGENERAL; goto cleanup; } cleanup: /* Restore original socket timeout */ rc = apr_socket_timeout_set(sock, org); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01015) "ajp_handle_cping_cpong: apr_socket_timeout_set failed"); return rc; } ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, r, "ajp_handle_cping_cpong: Done"); return rv; } #define case_to_str(x) case CMD_AJP13_##x:\ return #x;\ break; /** * Convert numeric message type into string * @param type AJP message type * @return AJP message type as a string */ const char *ajp_type_str(int type) { switch (type) { case_to_str(FORWARD_REQUEST) case_to_str(SEND_BODY_CHUNK) case_to_str(SEND_HEADERS) case_to_str(END_RESPONSE) case_to_str(GET_BODY_CHUNK) case_to_str(SHUTDOWN) case_to_str(PING) case_to_str(CPONG) case_to_str(CPING) default: return "CMD_AJP13_UNKNOWN"; } } httpd-2.4.41/modules/proxy/libproxy.exp0000644000000000000500000000001510150161574016447 0ustar rootsrcproxy_module httpd-2.4.41/modules/proxy/NWGNUmakefile0000644000000000000500000001053412720075454016415 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/proxy.nlm \ $(OBJDIR)/proxycon.nlm \ $(OBJDIR)/proxyftp.nlm \ $(OBJDIR)/proxyhtp.nlm \ $(OBJDIR)/proxybalancer.nlm \ $(OBJDIR)/proxyajp.nlm \ $(OBJDIR)/proxyfcgi.nlm \ $(OBJDIR)/proxyscgi.nlm \ $(OBJDIR)/proxyexpress.nlm \ $(OBJDIR)/proxyhcheck.nlm \ $(OBJDIR)/proxylbm_busy.nlm \ $(OBJDIR)/proxylbm_hb.nlm \ $(OBJDIR)/proxylbm_req.nlm \ $(OBJDIR)/proxylbm_traf.nlm \ $(OBJDIR)/proxywstunnel.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/NWGNUproxyajp0000644000000000000500000001074611546111464016516 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxyajp # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy AJP Sub-Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Proxy AJP Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/proxyajp.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_proxy_ajp.o \ $(OBJDIR)/ajp_header.o \ $(OBJDIR)/ajp_msg.o \ $(OBJDIR)/ajp_link.o \ $(OBJDIR)/ajp_utils.o \ $(OBJDIR)/libprews.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @$(OBJDIR)/mod_proxy.imp \ @libc.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ proxy_ajp_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/mod_proxy_balancer.mak0000644000000000000500000002641512701473373020445 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_proxy_balancer.dsp !IF "$(CFG)" == "" CFG=mod_proxy_balancer - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_proxy_balancer - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_proxy_balancer - Win32 Release" && "$(CFG)" != "mod_proxy_balancer - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_balancer - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_balancer - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_proxy_balancer - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_balancer.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_proxy_balancer.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_balancer.obj" -@erase "$(INTDIR)\mod_proxy_balancer.res" -@erase "$(INTDIR)\mod_proxy_balancer_src.idb" -@erase "$(INTDIR)\mod_proxy_balancer_src.pdb" -@erase "$(OUTDIR)\mod_proxy_balancer.exp" -@erase "$(OUTDIR)\mod_proxy_balancer.lib" -@erase "$(OUTDIR)\mod_proxy_balancer.pdb" -@erase "$(OUTDIR)\mod_proxy_balancer.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_balancer_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_balancer.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_balancer.so" /d LONG_NAME="proxy_balancer_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_balancer.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_balancer.pdb" /debug /out:"$(OUTDIR)\mod_proxy_balancer.so" /implib:"$(OUTDIR)\mod_proxy_balancer.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_balancer.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_proxy_balancer.obj" \ "$(INTDIR)\mod_proxy_balancer.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_balancer.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_proxy_balancer.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_balancer.so" if exist .\Release\mod_proxy_balancer.so.manifest mt.exe -manifest .\Release\mod_proxy_balancer.so.manifest -outputresource:.\Release\mod_proxy_balancer.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_proxy_balancer - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_balancer.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_proxy_balancer.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_balancer.obj" -@erase "$(INTDIR)\mod_proxy_balancer.res" -@erase "$(INTDIR)\mod_proxy_balancer_src.idb" -@erase "$(INTDIR)\mod_proxy_balancer_src.pdb" -@erase "$(OUTDIR)\mod_proxy_balancer.exp" -@erase "$(OUTDIR)\mod_proxy_balancer.lib" -@erase "$(OUTDIR)\mod_proxy_balancer.pdb" -@erase "$(OUTDIR)\mod_proxy_balancer.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_balancer_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_balancer.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_balancer.so" /d LONG_NAME="proxy_balancer_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_balancer.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_balancer.pdb" /debug /out:"$(OUTDIR)\mod_proxy_balancer.so" /implib:"$(OUTDIR)\mod_proxy_balancer.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_balancer.so LINK32_OBJS= \ "$(INTDIR)\mod_proxy_balancer.obj" \ "$(INTDIR)\mod_proxy_balancer.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_balancer.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_proxy_balancer.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_balancer.so" if exist .\Debug\mod_proxy_balancer.so.manifest mt.exe -manifest .\Debug\mod_proxy_balancer.so.manifest -outputresource:.\Debug\mod_proxy_balancer.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_proxy_balancer.dep") !INCLUDE "mod_proxy_balancer.dep" !ELSE !MESSAGE Warning: cannot find "mod_proxy_balancer.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_proxy_balancer - Win32 Release" || "$(CFG)" == "mod_proxy_balancer - Win32 Debug" SOURCE=.\mod_proxy_balancer.c "$(INTDIR)\mod_proxy_balancer.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_proxy_balancer - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_balancer - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_balancer - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_balancer - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_balancer - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_balancer - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_balancer - Win32 Release" "mod_proxy - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd "." "mod_proxy - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_proxy_balancer - Win32 Debug" "mod_proxy - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd "." "mod_proxy - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_proxy_balancer - Win32 Release" "$(INTDIR)\mod_proxy_balancer.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_balancer.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_proxy_balancer.so" /d LONG_NAME="proxy_balancer_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_proxy_balancer - Win32 Debug" "$(INTDIR)\mod_proxy_balancer.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_balancer.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_proxy_balancer.so" /d LONG_NAME="proxy_balancer_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/mod_proxy_connect.c0000644000000000000500000004114613240674050017771 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* CONNECT method for Apache proxy */ #include "mod_proxy.h" #include "apr_poll.h" #define CONN_BLKSZ AP_IOBUFSIZE module AP_MODULE_DECLARE_DATA proxy_connect_module; /* * This handles Netscape CONNECT method secure proxy requests. * A connection is opened to the specified host and data is * passed through between the WWW site and the browser. * * This code is based on the INTERNET-DRAFT document * "Tunneling SSL Through a WWW Proxy" currently at * http://www.mcom.com/newsref/std/tunneling_ssl.html. * * If proxyhost and proxyport are set, we send a CONNECT to * the specified proxy.. * * FIXME: this doesn't log the number of bytes sent, but * that may be okay, since the data is supposed to * be transparent. In fact, this doesn't log at all * yet. 8^) * FIXME: doesn't check any headers initally sent from the * client. * FIXME: should allow authentication, but hopefully the * generic proxy authentication is good enough. * FIXME: no check for r->assbackwards, whatever that is. */ typedef struct { apr_array_header_t *allowed_connect_ports; } connect_conf; typedef struct { int first; int last; } port_range; static void *create_config(apr_pool_t *p, server_rec *s) { connect_conf *c = apr_pcalloc(p, sizeof(connect_conf)); c->allowed_connect_ports = apr_array_make(p, 10, sizeof(port_range)); return c; } static void *merge_config(apr_pool_t *p, void *basev, void *overridesv) { connect_conf *c = apr_pcalloc(p, sizeof(connect_conf)); connect_conf *base = (connect_conf *) basev; connect_conf *overrides = (connect_conf *) overridesv; c->allowed_connect_ports = apr_array_append(p, base->allowed_connect_ports, overrides->allowed_connect_ports); return c; } /* * Set the ports CONNECT can use */ static const char * set_allowed_ports(cmd_parms *parms, void *dummy, const char *arg) { server_rec *s = parms->server; int first, last; connect_conf *conf = ap_get_module_config(s->module_config, &proxy_connect_module); port_range *New; char *endptr; const char *p = arg; if (!apr_isdigit(arg[0])) return "AllowCONNECT: port numbers must be numeric"; first = strtol(p, &endptr, 10); if (*endptr == '-') { p = endptr + 1; last = strtol(p, &endptr, 10); } else { last = first; } if (endptr == p || *endptr != '\0') { return apr_psprintf(parms->temp_pool, "Cannot parse '%s' as port number", p); } New = apr_array_push(conf->allowed_connect_ports); New->first = first; New->last = last; return NULL; } static int allowed_port(connect_conf *conf, int port) { int i; port_range *list = (port_range *) conf->allowed_connect_ports->elts; if (apr_is_empty_array(conf->allowed_connect_ports)) { return port == APR_URI_HTTPS_DEFAULT_PORT || port == APR_URI_SNEWS_DEFAULT_PORT; } for (i = 0; i < conf->allowed_connect_ports->nelts; i++) { if (port >= list[i].first && port <= list[i].last) return 1; } return 0; } /* canonicalise CONNECT URLs. */ static int proxy_connect_canon(request_rec *r, char *url) { if (r->method_number != M_CONNECT) { return DECLINED; } ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "canonicalising URL %s", url); return OK; } /* CONNECT handler */ static int proxy_connect_handler(request_rec *r, proxy_worker *worker, proxy_server_conf *conf, char *url, const char *proxyname, apr_port_t proxyport) { connect_conf *c_conf = ap_get_module_config(r->server->module_config, &proxy_connect_module); apr_pool_t *p = r->pool; apr_socket_t *sock; conn_rec *c = r->connection; conn_rec *backconn; int done = 0; apr_bucket_brigade *bb_front; apr_bucket_brigade *bb_back; apr_status_t rv; apr_size_t nbytes; char buffer[HUGE_STRING_LEN]; apr_socket_t *client_socket = ap_get_conn_socket(c); int failed, rc; apr_pollset_t *pollset; apr_pollfd_t pollfd; const apr_pollfd_t *signalled; apr_int32_t pollcnt, pi; apr_int16_t pollevent; apr_sockaddr_t *nexthop; apr_uri_t uri; const char *connectname; apr_port_t connectport = 0; /* is this for us? */ if (r->method_number != M_CONNECT) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "declining URL %s", url); return DECLINED; } ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "serving URL %s", url); /* * Step One: Determine Who To Connect To * * Break up the URL to determine the host to connect to */ /* we break the URL into host, port, uri */ if (APR_SUCCESS != apr_uri_parse_hostinfo(p, url, &uri)) { return ap_proxyerror(r, HTTP_BAD_REQUEST, apr_pstrcat(p, "URI cannot be parsed: ", url, NULL)); } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01019) "connecting %s to %s:%d", url, uri.hostname, uri.port); /* Determine host/port of next hop; from request URI or of a proxy. */ connectname = proxyname ? proxyname : uri.hostname; connectport = proxyname ? proxyport : uri.port; /* Do a DNS lookup for the next hop */ rv = apr_sockaddr_info_get(&nexthop, connectname, APR_UNSPEC, connectport, 0, p); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02327) "failed to resolve hostname '%s'", connectname); return ap_proxyerror(r, HTTP_BAD_GATEWAY, apr_pstrcat(p, "DNS lookup failure for: ", connectname, NULL)); } /* Check ProxyBlock directive on the hostname/address. */ if (ap_proxy_checkproxyblock2(r, conf, uri.hostname, proxyname ? NULL : nexthop) != OK) { return ap_proxyerror(r, HTTP_FORBIDDEN, "Connect to remote machine blocked"); } ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "connecting to remote proxy %s on port %d", connectname, connectport); /* Check if it is an allowed port */ if (!allowed_port(c_conf, uri.port)) { return ap_proxyerror(r, HTTP_FORBIDDEN, "Connect to remote machine blocked"); } /* * Step Two: Make the Connection * * We have determined who to connect to. Now make the connection. */ /* * At this point we have a list of one or more IP addresses of * the machine to connect to. If configured, reorder this * list so that the "best candidate" is first try. "best * candidate" could mean the least loaded server, the fastest * responding server, whatever. * * For now we do nothing, ie we get DNS round robin. * XXX FIXME */ failed = ap_proxy_connect_to_backend(&sock, "CONNECT", nexthop, connectname, conf, r); /* handle a permanent error from the above loop */ if (failed) { if (proxyname) { return DECLINED; } else { return HTTP_SERVICE_UNAVAILABLE; } } /* setup polling for connection */ ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "setting up poll()"); if ((rv = apr_pollset_create(&pollset, 2, r->pool, 0)) != APR_SUCCESS) { apr_socket_close(sock); ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01020) "error apr_pollset_create()"); return HTTP_INTERNAL_SERVER_ERROR; } /* Add client side to the poll */ pollfd.p = r->pool; pollfd.desc_type = APR_POLL_SOCKET; pollfd.reqevents = APR_POLLIN | APR_POLLHUP; pollfd.desc.s = client_socket; pollfd.client_data = NULL; apr_pollset_add(pollset, &pollfd); /* Add the server side to the poll */ pollfd.desc.s = sock; apr_pollset_add(pollset, &pollfd); /* * Step Three: Send the Request * * Send the HTTP/1.1 CONNECT request to the remote server */ backconn = ap_run_create_connection(c->pool, r->server, sock, c->id, c->sbh, c->bucket_alloc); if (!backconn) { /* peer reset */ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01021) "an error occurred creating a new connection " "to %pI (%s)", nexthop, connectname); apr_socket_close(sock); return HTTP_INTERNAL_SERVER_ERROR; } ap_proxy_ssl_engine(backconn, r->per_dir_config, 0); rc = ap_run_pre_connection(backconn, sock); if (rc != OK && rc != DONE) { backconn->aborted = 1; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01022) "pre_connection setup failed (%d)", rc); return HTTP_INTERNAL_SERVER_ERROR; } ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "connection complete to %pI (%s)", nexthop, connectname); apr_table_setn(r->notes, "proxy-source-port", apr_psprintf(r->pool, "%hu", backconn->local_addr->port)); bb_front = apr_brigade_create(p, c->bucket_alloc); bb_back = apr_brigade_create(p, backconn->bucket_alloc); /* If we are connecting through a remote proxy, we need to pass * the CONNECT request on to it. */ if (proxyport) { /* FIXME: Error checking ignored. */ ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "sending the CONNECT request to the remote proxy"); ap_fprintf(backconn->output_filters, bb_back, "CONNECT %s HTTP/1.0" CRLF, r->uri); ap_fprintf(backconn->output_filters, bb_back, "Proxy-agent: %s" CRLF CRLF, ap_get_server_banner()); ap_fflush(backconn->output_filters, bb_back); } else { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Returning 200 OK"); nbytes = apr_snprintf(buffer, sizeof(buffer), "HTTP/1.0 200 Connection Established" CRLF); ap_xlate_proto_to_ascii(buffer, nbytes); ap_fwrite(c->output_filters, bb_front, buffer, nbytes); nbytes = apr_snprintf(buffer, sizeof(buffer), "Proxy-agent: %s" CRLF CRLF, ap_get_server_banner()); ap_xlate_proto_to_ascii(buffer, nbytes); ap_fwrite(c->output_filters, bb_front, buffer, nbytes); ap_fflush(c->output_filters, bb_front); #if 0 /* This is safer code, but it doesn't work yet. I'm leaving it * here so that I can fix it later. */ r->status = HTTP_OK; r->header_only = 1; apr_table_set(r->headers_out, "Proxy-agent: %s", ap_get_server_banner()); ap_rflush(r); #endif } ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "setting up poll()"); /* * Step Four: Handle Data Transfer * * Handle two way transfer of data over the socket (this is a tunnel). */ /* we are now acting as a tunnel - the input/output filter stacks should * not contain any non-connection filters. */ r->output_filters = c->output_filters; r->proto_output_filters = c->output_filters; r->input_filters = c->input_filters; r->proto_input_filters = c->input_filters; /* r->sent_bodyct = 1;*/ do { /* Loop until done (one side closes the connection, or an error) */ rv = apr_pollset_poll(pollset, -1, &pollcnt, &signalled); if (rv != APR_SUCCESS) { if (APR_STATUS_IS_EINTR(rv)) { continue; } apr_socket_close(sock); ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01023) "error apr_poll()"); return HTTP_INTERNAL_SERVER_ERROR; } #ifdef DEBUGGING ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01024) "woke from poll(), i=%d", pollcnt); #endif for (pi = 0; pi < pollcnt; pi++) { const apr_pollfd_t *cur = &signalled[pi]; if (cur->desc.s == sock) { pollevent = cur->rtnevents; if (pollevent & (APR_POLLIN | APR_POLLHUP)) { #ifdef DEBUGGING ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01025) "sock was readable"); #endif done |= ap_proxy_transfer_between_connections(r, backconn, c, bb_back, bb_front, "sock", NULL, CONN_BLKSZ, 1) != APR_SUCCESS; } else if (pollevent & APR_POLLERR) { ap_log_rerror(APLOG_MARK, APLOG_NOTICE, 0, r, APLOGNO(01026) "err on backconn"); backconn->aborted = 1; done = 1; } } else if (cur->desc.s == client_socket) { pollevent = cur->rtnevents; if (pollevent & (APR_POLLIN | APR_POLLHUP)) { #ifdef DEBUGGING ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01027) "client was readable"); #endif done |= ap_proxy_transfer_between_connections(r, c, backconn, bb_front, bb_back, "client", NULL, CONN_BLKSZ, 1) != APR_SUCCESS; } else if (pollevent & APR_POLLERR) { ap_log_rerror(APLOG_MARK, APLOG_NOTICE, 0, r, APLOGNO(02827) "err on client"); c->aborted = 1; done = 1; } } else { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01028) "unknown socket in pollset"); done = 1; } } } while (!done); ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "finished with poll() - cleaning up"); /* * Step Five: Clean Up * * Close the socket and clean up */ if (backconn->aborted) apr_socket_close(sock); else ap_lingering_close(backconn); c->keepalive = AP_CONN_CLOSE; return OK; } static void ap_proxy_connect_register_hook(apr_pool_t *p) { proxy_hook_scheme_handler(proxy_connect_handler, NULL, NULL, APR_HOOK_MIDDLE); proxy_hook_canon_handler(proxy_connect_canon, NULL, NULL, APR_HOOK_MIDDLE); } static const command_rec cmds[] = { AP_INIT_ITERATE("AllowCONNECT", set_allowed_ports, NULL, RSRC_CONF, "A list of ports or port ranges which CONNECT may connect to"), {NULL} }; AP_DECLARE_MODULE(proxy_connect) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ create_config, /* create per-server config structure */ merge_config, /* merge per-server config structures */ cmds, /* command apr_table_t */ ap_proxy_connect_register_hook /* register hooks */ }; httpd-2.4.41/modules/proxy/mod_proxy_wstunnel.dep0000644000000000000500000000516612674411515020554 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_proxy_wstunnel.mak .\mod_proxy_wstunnel.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_proxy.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/mod_proxy_ajp.dsp0000644000000000000500000001224410551346420017452 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_proxy_ajp" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_proxy_ajp - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_proxy_ajp.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_ajp.mak" CFG="mod_proxy_ajp - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_ajp - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_ajp - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_proxy_ajp - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_proxy_ajp_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_proxy_ajp.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_ajp.so" /d LONG_NAME="proxy_ajp_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_proxy_ajp.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_ajp.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /debug /out:".\Release\mod_proxy_ajp.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_ajp.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_proxy_ajp.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_proxy_ajp - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_proxy_ajp_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_proxy_ajp.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_ajp.so" /d LONG_NAME="proxy_ajp_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_ajp.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_ajp.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_ajp.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_ajp.so # Begin Special Build Tool TargetPath=.\Debug\mod_proxy_ajp.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_proxy_ajp - Win32 Release" # Name "mod_proxy_ajp - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_proxy_ajp.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=.\mod_proxy.h # End Source File # End Group # Begin Group "Ajp Files" # PROP Default_Filter "" # Begin Source File SOURCE=.\ajp.h # End Source File # Begin Source File SOURCE=.\ajp_header.c # End Source File # Begin Source File SOURCE=.\ajp_header.h # End Source File # Begin Source File SOURCE=.\ajp_link.c # End Source File # Begin Source File SOURCE=.\ajp_msg.c # End Source File # Begin Source File SOURCE=.\ajp_utils.c # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/mod_proxy_scgi.dep0000644000000000000500000000523312674411515017615 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_proxy_scgi.mak .\mod_proxy_scgi.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_proxy.h"\ ".\scgi.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/mod_proxy.dep0000644000000000000500000001256512674411515016616 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_proxy.mak .\mod_proxy.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_core.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\generators\mod_status.h"\ "..\ssl\mod_ssl.h"\ ".\mod_proxy.h"\ ".\proxy_util.h"\ .\proxy_util.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_support.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_version.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ajp.h"\ ".\mod_proxy.h"\ ".\proxy_util.h"\ ".\scgi.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/proxy_util.c0000644000000000000500000043275413523260023016462 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* Utility routines for Apache proxy */ #include "mod_proxy.h" #include "ap_mpm.h" #include "scoreboard.h" #include "apr_version.h" #include "apr_hash.h" #include "proxy_util.h" #include "ajp.h" #include "scgi.h" #include "mod_http2.h" /* for http2_get_num_workers() */ #if APR_HAVE_UNISTD_H #include /* for getpid() */ #endif #if (APR_MAJOR_VERSION < 1) #undef apr_socket_create #define apr_socket_create apr_socket_create_ex #endif #if APR_HAVE_SYS_UN_H #include #endif #if (APR_MAJOR_VERSION < 2) #include "apr_support.h" /* for apr_wait_for_io_or_timeout() */ #endif APLOG_USE_MODULE(proxy); /* * Opaque structure containing target server info when * using a forward proxy. * Up to now only used in combination with HTTP CONNECT. */ typedef struct { int use_http_connect; /* Use SSL Tunneling via HTTP CONNECT */ const char *target_host; /* Target hostname */ apr_port_t target_port; /* Target port */ const char *proxy_auth; /* Proxy authorization */ } forward_info; /* Global balancer counter */ int PROXY_DECLARE_DATA proxy_lb_workers = 0; static int lb_workers_limit = 0; const apr_strmatch_pattern PROXY_DECLARE_DATA *ap_proxy_strmatch_path; const apr_strmatch_pattern PROXY_DECLARE_DATA *ap_proxy_strmatch_domain; extern apr_global_mutex_t *proxy_mutex; static int proxy_match_ipaddr(struct dirconn_entry *This, request_rec *r); static int proxy_match_domainname(struct dirconn_entry *This, request_rec *r); static int proxy_match_hostname(struct dirconn_entry *This, request_rec *r); static int proxy_match_word(struct dirconn_entry *This, request_rec *r); static int ap_proxy_retry_worker(const char *proxy_function, proxy_worker *worker, server_rec *s); static proxy_worker *proxy_balancer_get_best_worker(proxy_balancer *balancer, request_rec *r, proxy_is_best_callback_fn_t *is_best, void *baton); APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(proxy, PROXY, int, create_req, (request_rec *r, request_rec *pr), (r, pr), OK, DECLINED) PROXY_DECLARE(apr_status_t) ap_proxy_strncpy(char *dst, const char *src, apr_size_t dlen) { char *thenil; apr_size_t thelen; /* special case handling */ if (!dlen) { /* XXX: APR_ENOSPACE would be better */ return APR_EGENERAL; } if (!src) { *dst = '\0'; return APR_SUCCESS; } thenil = apr_cpystrn(dst, src, dlen); thelen = thenil - dst; if (src[thelen] == '\0') { return APR_SUCCESS; } return APR_EGENERAL; } /* already called in the knowledge that the characters are hex digits */ PROXY_DECLARE(int) ap_proxy_hex2c(const char *x) { int i; #if !APR_CHARSET_EBCDIC int ch = x[0]; if (apr_isdigit(ch)) { i = ch - '0'; } else if (apr_isupper(ch)) { i = ch - ('A' - 10); } else { i = ch - ('a' - 10); } i <<= 4; ch = x[1]; if (apr_isdigit(ch)) { i += ch - '0'; } else if (apr_isupper(ch)) { i += ch - ('A' - 10); } else { i += ch - ('a' - 10); } return i; #else /*APR_CHARSET_EBCDIC*/ /* * we assume that the hex value refers to an ASCII character * so convert to EBCDIC so that it makes sense locally; * * example: * * client specifies %20 in URL to refer to a space char; * at this point we're called with EBCDIC "20"; after turning * EBCDIC "20" into binary 0x20, we then need to assume that 0x20 * represents an ASCII char and convert 0x20 to EBCDIC, yielding * 0x40 */ char buf[1]; if (1 == sscanf(x, "%2x", &i)) { buf[0] = i & 0xFF; ap_xlate_proto_from_ascii(buf, 1); return buf[0]; } else { return 0; } #endif /*APR_CHARSET_EBCDIC*/ } PROXY_DECLARE(void) ap_proxy_c2hex(int ch, char *x) { #if !APR_CHARSET_EBCDIC int i; x[0] = '%'; i = (ch & 0xF0) >> 4; if (i >= 10) { x[1] = ('A' - 10) + i; } else { x[1] = '0' + i; } i = ch & 0x0F; if (i >= 10) { x[2] = ('A' - 10) + i; } else { x[2] = '0' + i; } #else /*APR_CHARSET_EBCDIC*/ static const char ntoa[] = { "0123456789ABCDEF" }; char buf[1]; ch &= 0xFF; buf[0] = ch; ap_xlate_proto_to_ascii(buf, 1); x[0] = '%'; x[1] = ntoa[(buf[0] >> 4) & 0x0F]; x[2] = ntoa[buf[0] & 0x0F]; x[3] = '\0'; #endif /*APR_CHARSET_EBCDIC*/ } /* * canonicalise a URL-encoded string */ /* * Convert a URL-encoded string to canonical form. * It decodes characters which need not be encoded, * and encodes those which must be encoded, and does not touch * those which must not be touched. */ PROXY_DECLARE(char *)ap_proxy_canonenc(apr_pool_t *p, const char *x, int len, enum enctype t, int forcedec, int proxyreq) { int i, j, ch; char *y; char *allowed; /* characters which should not be encoded */ char *reserved; /* characters which much not be en/de-coded */ /* * N.B. in addition to :@&=, this allows ';' in an http path * and '?' in an ftp path -- this may be revised * * Also, it makes a '+' character in a search string reserved, as * it may be form-encoded. (Although RFC 1738 doesn't allow this - * it only permits ; / ? : @ = & as reserved chars.) */ if (t == enc_path) { allowed = "~$-_.+!*'(),;:@&="; } else if (t == enc_search) { allowed = "$-_.!*'(),;:@&="; } else if (t == enc_user) { allowed = "$-_.+!*'(),;@&="; } else if (t == enc_fpath) { allowed = "$-_.+!*'(),?:@&="; } else { /* if (t == enc_parm) */ allowed = "$-_.+!*'(),?/:@&="; } if (t == enc_path) { reserved = "/"; } else if (t == enc_search) { reserved = "+"; } else { reserved = ""; } y = apr_palloc(p, 3 * len + 1); for (i = 0, j = 0; i < len; i++, j++) { /* always handle '/' first */ ch = x[i]; if (strchr(reserved, ch)) { y[j] = ch; continue; } /* * decode it if not already done. do not decode reverse proxied URLs * unless specifically forced */ if ((forcedec || (proxyreq && proxyreq != PROXYREQ_REVERSE)) && ch == '%') { if (!apr_isxdigit(x[i + 1]) || !apr_isxdigit(x[i + 2])) { return NULL; } ch = ap_proxy_hex2c(&x[i + 1]); i += 2; if (ch != 0 && strchr(reserved, ch)) { /* keep it encoded */ ap_proxy_c2hex(ch, &y[j]); j += 2; continue; } } /* recode it, if necessary */ if (!apr_isalnum(ch) && !strchr(allowed, ch)) { ap_proxy_c2hex(ch, &y[j]); j += 2; } else { y[j] = ch; } } y[j] = '\0'; return y; } /* * Parses network-location. * urlp on input the URL; on output the path, after the leading / * user NULL if no user/password permitted * password holder for password * host holder for host * port port number; only set if one is supplied. * * Returns an error string. */ PROXY_DECLARE(char *) ap_proxy_canon_netloc(apr_pool_t *p, char **const urlp, char **userp, char **passwordp, char **hostp, apr_port_t *port) { char *addr, *scope_id, *strp, *host, *url = *urlp; char *user = NULL, *password = NULL; apr_port_t tmp_port; apr_status_t rv; if (url[0] != '/' || url[1] != '/') { return "Malformed URL"; } host = url + 2; url = strchr(host, '/'); if (url == NULL) { url = ""; } else { *(url++) = '\0'; /* skip separating '/' */ } /* find _last_ '@' since it might occur in user/password part */ strp = strrchr(host, '@'); if (strp != NULL) { *strp = '\0'; user = host; host = strp + 1; /* find password */ strp = strchr(user, ':'); if (strp != NULL) { *strp = '\0'; password = ap_proxy_canonenc(p, strp + 1, strlen(strp + 1), enc_user, 1, 0); if (password == NULL) { return "Bad %-escape in URL (password)"; } } user = ap_proxy_canonenc(p, user, strlen(user), enc_user, 1, 0); if (user == NULL) { return "Bad %-escape in URL (username)"; } } if (userp != NULL) { *userp = user; } if (passwordp != NULL) { *passwordp = password; } /* * Parse the host string to separate host portion from optional port. * Perform range checking on port. */ rv = apr_parse_addr_port(&addr, &scope_id, &tmp_port, host, p); if (rv != APR_SUCCESS || addr == NULL || scope_id != NULL) { return "Invalid host/port"; } if (tmp_port != 0) { /* only update caller's port if port was specified */ *port = tmp_port; } ap_str_tolower(addr); /* DNS names are case-insensitive */ *urlp = url; *hostp = addr; return NULL; } PROXY_DECLARE(int) ap_proxyerror(request_rec *r, int statuscode, const char *message) { apr_table_setn(r->notes, "error-notes", apr_pstrcat(r->pool, "The proxy server could not handle the request

    " "Reason: ", ap_escape_html(r->pool, message), "

    ", NULL)); /* Allow "error-notes" string to be printed by ap_send_error_response() */ apr_table_setn(r->notes, "verbose-error-to", "*"); r->status_line = apr_psprintf(r->pool, "%3.3u Proxy Error", statuscode); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00898) "%s returned by %s", message, r->uri); return statuscode; } static const char * proxy_get_host_of_request(request_rec *r) { char *url, *user = NULL, *password = NULL, *err, *host = NULL; apr_port_t port; if (r->hostname != NULL) { return r->hostname; } /* Set url to the first char after "scheme://" */ if ((url = strchr(r->uri, ':')) == NULL || url[1] != '/' || url[2] != '/') { return NULL; } url = apr_pstrdup(r->pool, &url[1]); /* make it point to "//", which is what proxy_canon_netloc expects */ err = ap_proxy_canon_netloc(r->pool, &url, &user, &password, &host, &port); if (err != NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00899) "%s", err); } r->hostname = host; return host; /* ought to return the port, too */ } /* Return TRUE if addr represents an IP address (or an IP network address) */ PROXY_DECLARE(int) ap_proxy_is_ipaddr(struct dirconn_entry *This, apr_pool_t *p) { const char *addr = This->name; long ip_addr[4]; int i, quads; long bits; /* * if the address is given with an explicit netmask, use that * Due to a deficiency in apr_inet_addr(), it is impossible to parse * "partial" addresses (with less than 4 quads) correctly, i.e. * 192.168.123 is parsed as 192.168.0.123, which is not what I want. * I therefore have to parse the IP address manually: * if (proxy_readmask(This->name, &This->addr.s_addr, &This->mask.s_addr) == 0) * addr and mask were set by proxy_readmask() * return 1; */ /* * Parse IP addr manually, optionally allowing * abbreviated net addresses like 192.168. */ /* Iterate over up to 4 (dotted) quads. */ for (quads = 0; quads < 4 && *addr != '\0'; ++quads) { char *tmp; if (*addr == '/' && quads > 0) { /* netmask starts here. */ break; } if (!apr_isdigit(*addr)) { return 0; /* no digit at start of quad */ } ip_addr[quads] = strtol(addr, &tmp, 0); if (tmp == addr) { /* expected a digit, found something else */ return 0; } if (ip_addr[quads] < 0 || ip_addr[quads] > 255) { /* invalid octet */ return 0; } addr = tmp; if (*addr == '.' && quads != 3) { ++addr; /* after the 4th quad, a dot would be illegal */ } } for (This->addr.s_addr = 0, i = 0; i < quads; ++i) { This->addr.s_addr |= htonl(ip_addr[i] << (24 - 8 * i)); } if (addr[0] == '/' && apr_isdigit(addr[1])) { /* net mask follows: */ char *tmp; ++addr; bits = strtol(addr, &tmp, 0); if (tmp == addr) { /* expected a digit, found something else */ return 0; } addr = tmp; if (bits < 0 || bits > 32) { /* netmask must be between 0 and 32 */ return 0; } } else { /* * Determine (i.e., "guess") netmask by counting the * number of trailing .0's; reduce #quads appropriately * (so that 192.168.0.0 is equivalent to 192.168.) */ while (quads > 0 && ip_addr[quads - 1] == 0) { --quads; } /* "IP Address should be given in dotted-quad form, optionally followed by a netmask (e.g., 192.168.111.0/24)"; */ if (quads < 1) { return 0; } /* every zero-byte counts as 8 zero-bits */ bits = 8 * quads; if (bits != 32) { /* no warning for fully qualified IP address */ ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00900) "Warning: NetMask not supplied with IP-Addr; guessing: %s/%ld", inet_ntoa(This->addr), bits); } } This->mask.s_addr = htonl(APR_INADDR_NONE << (32 - bits)); if (*addr == '\0' && (This->addr.s_addr & ~This->mask.s_addr) != 0) { ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00901) "Warning: NetMask and IP-Addr disagree in %s/%ld", inet_ntoa(This->addr), bits); This->addr.s_addr &= This->mask.s_addr; ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00902) " Set to %s/%ld", inet_ntoa(This->addr), bits); } if (*addr == '\0') { This->matcher = proxy_match_ipaddr; return 1; } else { return (*addr == '\0'); /* okay iff we've parsed the whole string */ } } /* Return TRUE if addr represents an IP address (or an IP network address) */ static int proxy_match_ipaddr(struct dirconn_entry *This, request_rec *r) { int i, ip_addr[4]; struct in_addr addr, *ip; const char *host = proxy_get_host_of_request(r); if (host == NULL) { /* oops! */ return 0; } memset(&addr, '\0', sizeof addr); memset(ip_addr, '\0', sizeof ip_addr); if (4 == sscanf(host, "%d.%d.%d.%d", &ip_addr[0], &ip_addr[1], &ip_addr[2], &ip_addr[3])) { for (addr.s_addr = 0, i = 0; i < 4; ++i) { /* ap_proxy_is_ipaddr() already confirmed that we have * a valid octet in ip_addr[i] */ addr.s_addr |= htonl(ip_addr[i] << (24 - 8 * i)); } if (This->addr.s_addr == (addr.s_addr & This->mask.s_addr)) { #if DEBUGGING ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00903) "1)IP-Match: %s[%s] <-> ", host, inet_ntoa(addr)); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00904) "%s/", inet_ntoa(This->addr)); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00905) "%s", inet_ntoa(This->mask)); #endif return 1; } #if DEBUGGING else { ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00906) "1)IP-NoMatch: %s[%s] <-> ", host, inet_ntoa(addr)); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00907) "%s/", inet_ntoa(This->addr)); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00908) "%s", inet_ntoa(This->mask)); } #endif } else { struct apr_sockaddr_t *reqaddr; if (apr_sockaddr_info_get(&reqaddr, host, APR_UNSPEC, 0, 0, r->pool) != APR_SUCCESS) { #if DEBUGGING ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00909) "2)IP-NoMatch: hostname=%s msg=Host not found", host); #endif return 0; } /* Try to deal with multiple IP addr's for a host */ /* FIXME: This needs to be able to deal with IPv6 */ while (reqaddr) { ip = (struct in_addr *) reqaddr->ipaddr_ptr; if (This->addr.s_addr == (ip->s_addr & This->mask.s_addr)) { #if DEBUGGING ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00910) "3)IP-Match: %s[%s] <-> ", host, inet_ntoa(*ip)); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00911) "%s/", inet_ntoa(This->addr)); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00912) "%s", inet_ntoa(This->mask)); #endif return 1; } #if DEBUGGING else { ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00913) "3)IP-NoMatch: %s[%s] <-> ", host, inet_ntoa(*ip)); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00914) "%s/", inet_ntoa(This->addr)); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(00915) "%s", inet_ntoa(This->mask)); } #endif reqaddr = reqaddr->next; } } return 0; } /* Return TRUE if addr represents a domain name */ PROXY_DECLARE(int) ap_proxy_is_domainname(struct dirconn_entry *This, apr_pool_t *p) { char *addr = This->name; int i; /* Domain name must start with a '.' */ if (addr[0] != '.') { return 0; } /* rfc1035 says DNS names must consist of "[-a-zA-Z0-9]" and '.' */ for (i = 0; apr_isalnum(addr[i]) || addr[i] == '-' || addr[i] == '.'; ++i) { continue; } #if 0 if (addr[i] == ':') { ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(03234) "@@@@ handle optional port in proxy_is_domainname()"); /* @@@@ handle optional port */ } #endif if (addr[i] != '\0') { return 0; } /* Strip trailing dots */ for (i = strlen(addr) - 1; i > 0 && addr[i] == '.'; --i) { addr[i] = '\0'; } This->matcher = proxy_match_domainname; return 1; } /* Return TRUE if host "host" is in domain "domain" */ static int proxy_match_domainname(struct dirconn_entry *This, request_rec *r) { const char *host = proxy_get_host_of_request(r); int d_len = strlen(This->name), h_len; if (host == NULL) { /* some error was logged already */ return 0; } h_len = strlen(host); /* @@@ do this within the setup? */ /* Ignore trailing dots in domain comparison: */ while (d_len > 0 && This->name[d_len - 1] == '.') { --d_len; } while (h_len > 0 && host[h_len - 1] == '.') { --h_len; } return h_len > d_len && strncasecmp(&host[h_len - d_len], This->name, d_len) == 0; } /* Return TRUE if host represents a host name */ PROXY_DECLARE(int) ap_proxy_is_hostname(struct dirconn_entry *This, apr_pool_t *p) { struct apr_sockaddr_t *addr; char *host = This->name; int i; /* Host names must not start with a '.' */ if (host[0] == '.') { return 0; } /* rfc1035 says DNS names must consist of "[-a-zA-Z0-9]" and '.' */ for (i = 0; apr_isalnum(host[i]) || host[i] == '-' || host[i] == '.'; ++i); if (host[i] != '\0' || apr_sockaddr_info_get(&addr, host, APR_UNSPEC, 0, 0, p) != APR_SUCCESS) { return 0; } This->hostaddr = addr; /* Strip trailing dots */ for (i = strlen(host) - 1; i > 0 && host[i] == '.'; --i) { host[i] = '\0'; } This->matcher = proxy_match_hostname; return 1; } /* Return TRUE if host "host" is equal to host2 "host2" */ static int proxy_match_hostname(struct dirconn_entry *This, request_rec *r) { char *host = This->name; const char *host2 = proxy_get_host_of_request(r); int h2_len; int h1_len; if (host == NULL || host2 == NULL) { return 0; /* oops! */ } h2_len = strlen(host2); h1_len = strlen(host); #if 0 struct apr_sockaddr_t *addr = *This->hostaddr; /* Try to deal with multiple IP addr's for a host */ while (addr) { if (addr->ipaddr_ptr == ? ? ? ? ? ? ? ? ? ? ? ? ?) return 1; addr = addr->next; } #endif /* Ignore trailing dots in host2 comparison: */ while (h2_len > 0 && host2[h2_len - 1] == '.') { --h2_len; } while (h1_len > 0 && host[h1_len - 1] == '.') { --h1_len; } return h1_len == h2_len && strncasecmp(host, host2, h1_len) == 0; } /* Return TRUE if addr is to be matched as a word */ PROXY_DECLARE(int) ap_proxy_is_word(struct dirconn_entry *This, apr_pool_t *p) { This->matcher = proxy_match_word; return 1; } /* Return TRUE if string "str2" occurs literally in "str1" */ static int proxy_match_word(struct dirconn_entry *This, request_rec *r) { const char *host = proxy_get_host_of_request(r); return host != NULL && ap_strstr_c(host, This->name) != NULL; } /* Backwards-compatible interface. */ PROXY_DECLARE(int) ap_proxy_checkproxyblock(request_rec *r, proxy_server_conf *conf, apr_sockaddr_t *uri_addr) { return ap_proxy_checkproxyblock2(r, conf, uri_addr->hostname, uri_addr); } #define MAX_IP_STR_LEN (46) PROXY_DECLARE(int) ap_proxy_checkproxyblock2(request_rec *r, proxy_server_conf *conf, const char *hostname, apr_sockaddr_t *addr) { int j; /* XXX FIXME: conf->noproxies->elts is part of an opaque structure */ for (j = 0; j < conf->noproxies->nelts; j++) { struct noproxy_entry *npent = (struct noproxy_entry *) conf->noproxies->elts; struct apr_sockaddr_t *conf_addr; ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "checking remote machine [%s] against [%s]", hostname, npent[j].name); if (ap_strstr_c(hostname, npent[j].name) || npent[j].name[0] == '*') { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(00916) "connect to remote machine %s blocked: name %s " "matched", hostname, npent[j].name); return HTTP_FORBIDDEN; } /* No IP address checks if no IP address was passed in, * i.e. the forward address proxy case, where this server does * not resolve the hostname. */ if (!addr) continue; for (conf_addr = npent[j].addr; conf_addr; conf_addr = conf_addr->next) { char caddr[MAX_IP_STR_LEN], uaddr[MAX_IP_STR_LEN]; apr_sockaddr_t *uri_addr; if (apr_sockaddr_ip_getbuf(caddr, sizeof caddr, conf_addr)) continue; for (uri_addr = addr; uri_addr; uri_addr = uri_addr->next) { if (apr_sockaddr_ip_getbuf(uaddr, sizeof uaddr, uri_addr)) continue; ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "ProxyBlock comparing %s and %s", caddr, uaddr); if (!strcmp(caddr, uaddr)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(00917) "connect to remote machine %s blocked: " "IP %s matched", hostname, caddr); return HTTP_FORBIDDEN; } } } } return OK; } /* set up the minimal filter set */ PROXY_DECLARE(int) ap_proxy_pre_http_request(conn_rec *c, request_rec *r) { ap_add_input_filter("HTTP_IN", NULL, r, c); return OK; } PROXY_DECLARE(const char *) ap_proxy_location_reverse_map(request_rec *r, proxy_dir_conf *conf, const char *url) { proxy_req_conf *rconf; struct proxy_alias *ent; int i, l1, l1_orig, l2; char *u; /* * XXX FIXME: Make sure this handled the ambiguous case of the : * after the hostname * XXX FIXME: Ensure the /uri component is a case sensitive match */ if (r->proxyreq != PROXYREQ_REVERSE) { return url; } l1_orig = strlen(url); if (conf->interpolate_env == 1) { rconf = ap_get_module_config(r->request_config, &proxy_module); ent = (struct proxy_alias *)rconf->raliases->elts; } else { ent = (struct proxy_alias *)conf->raliases->elts; } for (i = 0; i < conf->raliases->nelts; i++) { proxy_server_conf *sconf = (proxy_server_conf *) ap_get_module_config(r->server->module_config, &proxy_module); proxy_balancer *balancer; const char *real = ent[i].real; /* Restore the url length, if it had been changed by the code below */ l1 = l1_orig; /* * First check if mapping against a balancer and see * if we have such a entity. If so, then we need to * find the particulars of the actual worker which may * or may not be the right one... basically, we need * to find which member actually handled this request. */ if (ap_proxy_valid_balancer_name((char *)real, 0) && (balancer = ap_proxy_get_balancer(r->pool, sconf, real, 1))) { int n, l3 = 0; proxy_worker **worker = (proxy_worker **)balancer->workers->elts; const char *urlpart = ap_strchr_c(real + sizeof(BALANCER_PREFIX) - 1, '/'); if (urlpart) { if (!urlpart[1]) urlpart = NULL; else l3 = strlen(urlpart); } /* The balancer comparison is a bit trickier. Given the context * BalancerMember balancer://alias http://example.com/foo * ProxyPassReverse /bash balancer://alias/bar * translate url http://example.com/foo/bar/that to /bash/that */ for (n = 0; n < balancer->workers->nelts; n++) { l2 = strlen((*worker)->s->name); if (urlpart) { /* urlpart (l3) assuredly starts with its own '/' */ if ((*worker)->s->name[l2 - 1] == '/') --l2; if (l1 >= l2 + l3 && strncasecmp((*worker)->s->name, url, l2) == 0 && strncmp(urlpart, url + l2, l3) == 0) { u = apr_pstrcat(r->pool, ent[i].fake, &url[l2 + l3], NULL); return ap_is_url(u) ? u : ap_construct_url(r->pool, u, r); } } else if (l1 >= l2 && strncasecmp((*worker)->s->name, url, l2) == 0) { /* edge case where fake is just "/"... avoid double slash */ if ((ent[i].fake[0] == '/') && (ent[i].fake[1] == 0) && (url[l2] == '/')) { u = apr_pstrdup(r->pool, &url[l2]); } else { u = apr_pstrcat(r->pool, ent[i].fake, &url[l2], NULL); } return ap_is_url(u) ? u : ap_construct_url(r->pool, u, r); } worker++; } } else { const char *part = url; l2 = strlen(real); if (real[0] == '/') { part = ap_strstr_c(url, "://"); if (part) { part = ap_strchr_c(part+3, '/'); if (part) { l1 = strlen(part); } else { part = url; } } else { part = url; } } if (l2 > 0 && l1 >= l2 && strncasecmp(real, part, l2) == 0) { u = apr_pstrcat(r->pool, ent[i].fake, &part[l2], NULL); return ap_is_url(u) ? u : ap_construct_url(r->pool, u, r); } } } return url; } /* * Cookies are a bit trickier to match: we've got two substrings to worry * about, and we can't just find them with strstr 'cos of case. Regexp * matching would be an easy fix, but for better consistency with all the * other matches we'll refrain and use apr_strmatch to find path=/domain= * and stick to plain strings for the config values. */ PROXY_DECLARE(const char *) ap_proxy_cookie_reverse_map(request_rec *r, proxy_dir_conf *conf, const char *str) { proxy_req_conf *rconf = ap_get_module_config(r->request_config, &proxy_module); struct proxy_alias *ent; apr_size_t len = strlen(str); const char *newpath = NULL; const char *newdomain = NULL; const char *pathp; const char *domainp; const char *pathe = NULL; const char *domaine = NULL; apr_size_t l1, l2, poffs = 0, doffs = 0; int i; int ddiff = 0; int pdiff = 0; char *tmpstr, *tmpstr_orig, *token, *last, *ret; if (r->proxyreq != PROXYREQ_REVERSE) { return str; } /* * Find the match and replacement, but save replacing until we've done * both path and domain so we know the new strlen */ tmpstr_orig = tmpstr = apr_pstrdup(r->pool, str); while ((token = apr_strtok(tmpstr, ";", &last))) { /* skip leading spaces */ while (apr_isspace(*token)) { ++token; } if (ap_cstr_casecmpn("path=", token, 5) == 0) { pathp = token + 5; poffs = pathp - tmpstr_orig; l1 = strlen(pathp); pathe = str + poffs + l1; if (conf->interpolate_env == 1) { ent = (struct proxy_alias *)rconf->cookie_paths->elts; } else { ent = (struct proxy_alias *)conf->cookie_paths->elts; } for (i = 0; i < conf->cookie_paths->nelts; i++) { l2 = strlen(ent[i].fake); if (l1 >= l2 && strncmp(ent[i].fake, pathp, l2) == 0) { newpath = ent[i].real; pdiff = strlen(newpath) - l1; break; } } } else if (ap_cstr_casecmpn("domain=", token, 7) == 0) { domainp = token + 7; doffs = domainp - tmpstr_orig; l1 = strlen(domainp); domaine = str + doffs + l1; if (conf->interpolate_env == 1) { ent = (struct proxy_alias *)rconf->cookie_domains->elts; } else { ent = (struct proxy_alias *)conf->cookie_domains->elts; } for (i = 0; i < conf->cookie_domains->nelts; i++) { l2 = strlen(ent[i].fake); if (l1 >= l2 && strncasecmp(ent[i].fake, domainp, l2) == 0) { newdomain = ent[i].real; ddiff = strlen(newdomain) - l1; break; } } } /* Iterate the remaining tokens using apr_strtok(NULL, ...) */ tmpstr = NULL; } if (newpath) { ret = apr_palloc(r->pool, len + pdiff + ddiff + 1); l1 = strlen(newpath); if (newdomain) { l2 = strlen(newdomain); if (doffs > poffs) { memcpy(ret, str, poffs); memcpy(ret + poffs, newpath, l1); memcpy(ret + poffs + l1, pathe, str + doffs - pathe); memcpy(ret + doffs + pdiff, newdomain, l2); strcpy(ret + doffs + pdiff + l2, domaine); } else { memcpy(ret, str, doffs) ; memcpy(ret + doffs, newdomain, l2); memcpy(ret + doffs + l2, domaine, str + poffs - domaine); memcpy(ret + poffs + ddiff, newpath, l1); strcpy(ret + poffs + ddiff + l1, pathe); } } else { memcpy(ret, str, poffs); memcpy(ret + poffs, newpath, l1); strcpy(ret + poffs + l1, pathe); } } else if (newdomain) { ret = apr_palloc(r->pool, len + ddiff + 1); l2 = strlen(newdomain); memcpy(ret, str, doffs); memcpy(ret + doffs, newdomain, l2); strcpy(ret + doffs + l2, domaine); } else { ret = (char *)str; /* no change */ } return ret; } /* * BALANCER related... */ /* * verifies that the balancer name conforms to standards. */ PROXY_DECLARE(int) ap_proxy_valid_balancer_name(char *name, int i) { if (!i) i = sizeof(BALANCER_PREFIX)-1; return (!strncasecmp(name, BALANCER_PREFIX, i)); } PROXY_DECLARE(proxy_balancer *) ap_proxy_get_balancer(apr_pool_t *p, proxy_server_conf *conf, const char *url, int care) { proxy_balancer *balancer; char *c, *uri = apr_pstrdup(p, url); int i; proxy_hashes hash; c = strchr(uri, ':'); if (c == NULL || c[1] != '/' || c[2] != '/' || c[3] == '\0') { return NULL; } /* remove path from uri */ if ((c = strchr(c + 3, '/'))) { *c = '\0'; } ap_str_tolower(uri); hash.def = ap_proxy_hashfunc(uri, PROXY_HASHFUNC_DEFAULT); hash.fnv = ap_proxy_hashfunc(uri, PROXY_HASHFUNC_FNV); balancer = (proxy_balancer *)conf->balancers->elts; for (i = 0; i < conf->balancers->nelts; i++) { if (balancer->hash.def == hash.def && balancer->hash.fnv == hash.fnv) { if (!care || !balancer->s->inactive) { return balancer; } } balancer++; } return NULL; } PROXY_DECLARE(char *) ap_proxy_update_balancer(apr_pool_t *p, proxy_balancer *balancer, const char *url) { apr_uri_t puri; if (!url) { return NULL; } if (apr_uri_parse(p, url, &puri) != APR_SUCCESS) { return apr_psprintf(p, "unable to parse: %s", url); } if (puri.path && PROXY_STRNCPY(balancer->s->vpath, puri.path) != APR_SUCCESS) { return apr_psprintf(p, "balancer %s front-end virtual-path (%s) too long", balancer->s->name, puri.path); } if (puri.hostname && PROXY_STRNCPY(balancer->s->vhost, puri.hostname) != APR_SUCCESS) { return apr_psprintf(p, "balancer %s front-end vhost name (%s) too long", balancer->s->name, puri.hostname); } return NULL; } #define PROXY_UNSET_NONCE '\n' PROXY_DECLARE(char *) ap_proxy_define_balancer(apr_pool_t *p, proxy_balancer **balancer, proxy_server_conf *conf, const char *url, const char *alias, int do_malloc) { proxy_balancer_method *lbmethod; proxy_balancer_shared *bshared; char *c, *q, *uri = apr_pstrdup(p, url); const char *sname; /* We should never get here without a valid BALANCER_PREFIX... */ c = strchr(uri, ':'); if (c == NULL || c[1] != '/' || c[2] != '/' || c[3] == '\0') return apr_psprintf(p, "Bad syntax for a balancer name (%s)", uri); /* remove path from uri */ if ((q = strchr(c + 3, '/'))) *q = '\0'; ap_str_tolower(uri); *balancer = apr_array_push(conf->balancers); memset(*balancer, 0, sizeof(proxy_balancer)); /* * NOTE: The default method is byrequests - if it doesn't * exist, that's OK at this time. We check when we share and sync */ lbmethod = ap_lookup_provider(PROXY_LBMETHOD, "byrequests", "0"); (*balancer)->lbmethod = lbmethod; (*balancer)->workers = apr_array_make(p, 5, sizeof(proxy_worker *)); (*balancer)->gmutex = NULL; (*balancer)->tmutex = NULL; if (do_malloc) bshared = ap_malloc(sizeof(proxy_balancer_shared)); else bshared = apr_palloc(p, sizeof(proxy_balancer_shared)); memset(bshared, 0, sizeof(proxy_balancer_shared)); bshared->was_malloced = (do_malloc != 0); PROXY_STRNCPY(bshared->lbpname, "byrequests"); if (PROXY_STRNCPY(bshared->name, uri) != APR_SUCCESS) { return apr_psprintf(p, "balancer name (%s) too long", uri); } (*balancer)->lbmethod_set = 1; /* * We do the below for verification. The real sname will be * done post_config */ ap_pstr2_alnum(p, bshared->name + sizeof(BALANCER_PREFIX) - 1, &sname); sname = apr_pstrcat(p, conf->id, "_", sname, NULL); if (PROXY_STRNCPY(bshared->sname, sname) != APR_SUCCESS) { return apr_psprintf(p, "balancer safe-name (%s) too long", sname); } bshared->hash.def = ap_proxy_hashfunc(bshared->name, PROXY_HASHFUNC_DEFAULT); bshared->hash.fnv = ap_proxy_hashfunc(bshared->name, PROXY_HASHFUNC_FNV); (*balancer)->hash = bshared->hash; bshared->forcerecovery = 1; bshared->sticky_separator = '.'; *bshared->nonce = PROXY_UNSET_NONCE; /* impossible valid input */ (*balancer)->s = bshared; (*balancer)->sconf = conf; return ap_proxy_update_balancer(p, *balancer, alias); } /* * Create an already defined balancer and free up memory. */ PROXY_DECLARE(apr_status_t) ap_proxy_share_balancer(proxy_balancer *balancer, proxy_balancer_shared *shm, int i) { apr_status_t rv = APR_SUCCESS; proxy_balancer_method *lbmethod; char *action = "copying"; if (!shm || !balancer->s) return APR_EINVAL; if ((balancer->s->hash.def != shm->hash.def) || (balancer->s->hash.fnv != shm->hash.fnv)) { memcpy(shm, balancer->s, sizeof(proxy_balancer_shared)); if (balancer->s->was_malloced) free(balancer->s); } else { action = "re-using"; } balancer->s = shm; balancer->s->index = i; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02337) "%s shm[%d] (0x%pp) for %s", action, i, (void *)shm, balancer->s->name); /* the below should always succeed */ lbmethod = ap_lookup_provider(PROXY_LBMETHOD, balancer->s->lbpname, "0"); if (lbmethod) { balancer->lbmethod = lbmethod; balancer->lbmethod_set = 1; } else { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, ap_server_conf, APLOGNO(02432) "Cannot find LB Method: %s", balancer->s->lbpname); return APR_EINVAL; } if (*balancer->s->nonce == PROXY_UNSET_NONCE) { char nonce[APR_UUID_FORMATTED_LENGTH + 1]; apr_uuid_t uuid; /* Generate a pseudo-UUID from the PRNG to use as a nonce for * the lifetime of the process. uuid.data is a char array so * this is an adequate substitute for apr_uuid_get(). */ ap_random_insecure_bytes(uuid.data, sizeof uuid.data); apr_uuid_format(nonce, &uuid); rv = PROXY_STRNCPY(balancer->s->nonce, nonce); } return rv; } PROXY_DECLARE(apr_status_t) ap_proxy_initialize_balancer(proxy_balancer *balancer, server_rec *s, apr_pool_t *p) { apr_status_t rv = APR_SUCCESS; ap_slotmem_provider_t *storage = balancer->storage; apr_size_t size; unsigned int num; if (!storage) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, s, APLOGNO(00918) "no provider for %s", balancer->s->name); return APR_EGENERAL; } /* * for each balancer we need to init the global * mutex and then attach to the shared worker shm */ if (!balancer->gmutex) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, s, APLOGNO(00919) "no mutex %s", balancer->s->name); return APR_EGENERAL; } /* Re-open the mutex for the child. */ rv = apr_global_mutex_child_init(&(balancer->gmutex), apr_global_mutex_lockfile(balancer->gmutex), p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(00920) "Failed to reopen mutex %s in child", balancer->s->name); return rv; } /* now attach */ storage->attach(&(balancer->wslot), balancer->s->sname, &size, &num, p); if (!balancer->wslot) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, s, APLOGNO(00921) "slotmem_attach failed"); return APR_EGENERAL; } if (balancer->lbmethod && balancer->lbmethod->reset) balancer->lbmethod->reset(balancer, s); if (balancer->tmutex == NULL) { rv = apr_thread_mutex_create(&(balancer->tmutex), APR_THREAD_MUTEX_DEFAULT, p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, s, APLOGNO(00922) "can not create balancer thread mutex"); return rv; } } return APR_SUCCESS; } static proxy_worker *proxy_balancer_get_best_worker(proxy_balancer *balancer, request_rec *r, proxy_is_best_callback_fn_t *is_best, void *baton) { int i = 0; int cur_lbset = 0; int max_lbset = 0; int unusable_workers = 0; apr_pool_t *tpool = NULL; apr_array_header_t *spares = NULL; apr_array_header_t *standbys = NULL; proxy_worker *worker = NULL; proxy_worker *best_worker = NULL; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, r->server, APLOGNO(10122) "proxy: Entering %s for BALANCER (%s)", balancer->lbmethod->name, balancer->s->name); apr_pool_create(&tpool, r->pool); spares = apr_array_make(tpool, 1, sizeof(proxy_worker*)); standbys = apr_array_make(tpool, 1, sizeof(proxy_worker*)); /* Process lbsets in order, only replacing unusable workers in a given lbset * with available spares from the same lbset. Hot standbys will be used as a * last resort when all other workers and spares are unavailable. */ for (cur_lbset = 0; !best_worker && (cur_lbset <= max_lbset); cur_lbset++) { unusable_workers = 0; apr_array_clear(spares); apr_array_clear(standbys); for (i = 0; i < balancer->workers->nelts; i++) { worker = APR_ARRAY_IDX(balancer->workers, i, proxy_worker *); if (worker->s->lbset > max_lbset) { max_lbset = worker->s->lbset; } if (worker->s->lbset != cur_lbset) { continue; } /* A draining worker that is neither a spare nor a standby should be * considered unusable to be replaced by spares. */ if (PROXY_WORKER_IS_DRAINING(worker)) { if (!PROXY_WORKER_IS_SPARE(worker) && !PROXY_WORKER_IS_STANDBY(worker)) { unusable_workers++; } continue; } /* If the worker is in error state run retry on that worker. It will * be marked as operational if the retry timeout is elapsed. The * worker might still be unusable, but we try anyway. */ if (!PROXY_WORKER_IS_USABLE(worker)) { ap_proxy_retry_worker("BALANCER", worker, r->server); } if (PROXY_WORKER_IS_SPARE(worker)) { if (PROXY_WORKER_IS_USABLE(worker)) { APR_ARRAY_PUSH(spares, proxy_worker *) = worker; } } else if (PROXY_WORKER_IS_STANDBY(worker)) { if (PROXY_WORKER_IS_USABLE(worker)) { APR_ARRAY_PUSH(standbys, proxy_worker *) = worker; } } else if (PROXY_WORKER_IS_USABLE(worker)) { if (is_best(worker, best_worker, baton)) { best_worker = worker; } } else { unusable_workers++; } } /* Check if any spares are best. */ for (i = 0; (i < spares->nelts) && (i < unusable_workers); i++) { worker = APR_ARRAY_IDX(spares, i, proxy_worker *); if (is_best(worker, best_worker, baton)) { best_worker = worker; } } /* If no workers are available, use the standbys. */ if (!best_worker) { for (i = 0; i < standbys->nelts; i++) { worker = APR_ARRAY_IDX(standbys, i, proxy_worker *); if (is_best(worker, best_worker, baton)) { best_worker = worker; } } } } apr_pool_destroy(tpool); if (best_worker) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, r->server, APLOGNO(10123) "proxy: %s selected worker \"%s\" : busy %" APR_SIZE_T_FMT " : lbstatus %d", balancer->lbmethod->name, best_worker->s->name, best_worker->s->busy, best_worker->s->lbstatus); } return best_worker; } PROXY_DECLARE(proxy_worker *) ap_proxy_balancer_get_best_worker(proxy_balancer *balancer, request_rec *r, proxy_is_best_callback_fn_t *is_best, void *baton) { return proxy_balancer_get_best_worker(balancer, r, is_best, baton); } /* * CONNECTION related... */ static void socket_cleanup(proxy_conn_rec *conn) { conn->sock = NULL; conn->tmp_bb = NULL; conn->connection = NULL; conn->ssl_hostname = NULL; apr_pool_clear(conn->scpool); } static apr_status_t conn_pool_cleanup(void *theworker) { proxy_worker *worker = (proxy_worker *)theworker; if (worker->cp->res) { worker->cp->pool = NULL; } return APR_SUCCESS; } static void init_conn_pool(apr_pool_t *p, proxy_worker *worker) { apr_pool_t *pool; proxy_conn_pool *cp; /* * Create a connection pool's subpool. * This pool is used for connection recycling. * Once the worker is added it is never removed but * it can be disabled. */ apr_pool_create(&pool, p); apr_pool_tag(pool, "proxy_worker_cp"); /* * Alloc from the same pool as worker. * proxy_conn_pool is permanently attached to the worker. */ cp = (proxy_conn_pool *)apr_pcalloc(p, sizeof(proxy_conn_pool)); cp->pool = pool; worker->cp = cp; } PROXY_DECLARE(int) ap_proxy_connection_reusable(proxy_conn_rec *conn) { proxy_worker *worker = conn->worker; return ! (conn->close || !worker->s->is_address_reusable || worker->s->disablereuse); } static apr_status_t connection_cleanup(void *theconn) { proxy_conn_rec *conn = (proxy_conn_rec *)theconn; proxy_worker *worker = conn->worker; /* * If the connection pool is NULL the worker * cleanup has been run. Just return. */ if (!worker->cp->pool) { return APR_SUCCESS; } if (conn->r) { apr_pool_destroy(conn->r->pool); conn->r = NULL; } /* Sanity check: Did we already return the pooled connection? */ if (conn->inreslist) { ap_log_perror(APLOG_MARK, APLOG_ERR, 0, conn->pool, APLOGNO(00923) "Pooled connection 0x%pp for worker %s has been" " already returned to the connection pool.", conn, ap_proxy_worker_name(conn->pool, worker)); return APR_SUCCESS; } /* determine if the connection need to be closed */ if (!worker->s->is_address_reusable || worker->s->disablereuse) { apr_pool_t *p = conn->pool; apr_pool_clear(p); conn = apr_pcalloc(p, sizeof(proxy_conn_rec)); conn->pool = p; conn->worker = worker; apr_pool_create(&(conn->scpool), p); apr_pool_tag(conn->scpool, "proxy_conn_scpool"); } else if (conn->close || (conn->connection && conn->connection->keepalive == AP_CONN_CLOSE)) { socket_cleanup(conn); conn->close = 0; } else if (conn->is_ssl) { /* Unbind/reset the SSL connection dir config (sslconn->dc) from * r->per_dir_config, r will likely get destroyed before this proxy * conn is reused. */ ap_proxy_ssl_engine(conn->connection, worker->section_config, 1); } if (worker->s->hmax && worker->cp->res) { conn->inreslist = 1; apr_reslist_release(worker->cp->res, (void *)conn); } else { worker->cp->conn = conn; } /* Always return the SUCCESS */ return APR_SUCCESS; } /* DEPRECATED */ PROXY_DECLARE(apr_status_t) ap_proxy_ssl_connection_cleanup(proxy_conn_rec *conn, request_rec *r) { apr_status_t rv; /* * If we have an existing SSL connection it might be possible that the * server sent some SSL message we have not read so far (e.g. an SSL * shutdown message if the server closed the keepalive connection while * the connection was held unused in our pool). * So ensure that if present (=> APR_NONBLOCK_READ) it is read and * processed. We don't expect any data to be in the returned brigade. */ if (conn->sock && conn->connection) { rv = ap_get_brigade(conn->connection->input_filters, conn->tmp_bb, AP_MODE_READBYTES, APR_NONBLOCK_READ, HUGE_STRING_LEN); if (!APR_BRIGADE_EMPTY(conn->tmp_bb)) { apr_off_t len; rv = apr_brigade_length(conn->tmp_bb, 0, &len); ap_log_rerror(APLOG_MARK, APLOG_TRACE3, rv, r, "SSL cleanup brigade contained %" APR_OFF_T_FMT " bytes of data.", len); apr_brigade_cleanup(conn->tmp_bb); } if ((rv != APR_SUCCESS) && !APR_STATUS_IS_EAGAIN(rv)) { socket_cleanup(conn); } } return APR_SUCCESS; } /* reslist constructor */ static apr_status_t connection_constructor(void **resource, void *params, apr_pool_t *pool) { apr_pool_t *ctx; apr_pool_t *scpool; proxy_conn_rec *conn; proxy_worker *worker = (proxy_worker *)params; /* * Create the subpool for each connection * This keeps the memory consumption constant * when disconnecting from backend. */ apr_pool_create(&ctx, pool); apr_pool_tag(ctx, "proxy_conn_pool"); /* * Create another subpool that manages the data for the * socket and the connection member of the proxy_conn_rec struct as we * destroy this data more frequently than other data in the proxy_conn_rec * struct like hostname and addr (at least in the case where we have * keepalive connections that timed out). */ apr_pool_create(&scpool, ctx); apr_pool_tag(scpool, "proxy_conn_scpool"); conn = apr_pcalloc(ctx, sizeof(proxy_conn_rec)); conn->pool = ctx; conn->scpool = scpool; conn->worker = worker; conn->inreslist = 1; *resource = conn; return APR_SUCCESS; } /* reslist destructor */ static apr_status_t connection_destructor(void *resource, void *params, apr_pool_t *pool) { proxy_worker *worker = params; /* Destroy the pool only if not called from reslist_destroy */ if (worker->cp->pool) { proxy_conn_rec *conn = resource; apr_pool_destroy(conn->pool); } return APR_SUCCESS; } /* * WORKER related... */ PROXY_DECLARE(char *) ap_proxy_worker_name(apr_pool_t *p, proxy_worker *worker) { if (!(*worker->s->uds_path) || !p) { /* just in case */ return worker->s->name; } return apr_pstrcat(p, "unix:", worker->s->uds_path, "|", worker->s->name, NULL); } PROXY_DECLARE(proxy_worker *) ap_proxy_get_worker(apr_pool_t *p, proxy_balancer *balancer, proxy_server_conf *conf, const char *url) { proxy_worker *worker; proxy_worker *max_worker = NULL; int max_match = 0; int url_length; int min_match; int worker_name_length; const char *c; char *url_copy; int i; if (!url) { return NULL; } url = ap_proxy_de_socketfy(p, url); c = ap_strchr_c(url, ':'); if (c == NULL || c[1] != '/' || c[2] != '/' || c[3] == '\0') { return NULL; } url_length = strlen(url); url_copy = apr_pstrmemdup(p, url, url_length); /* * We need to find the start of the path and * therefore we know the length of the scheme://hostname/ * part to we can force-lowercase everything up to * the start of the path. */ c = ap_strchr_c(c+3, '/'); if (c) { char *pathstart; pathstart = url_copy + (c - url); *pathstart = '\0'; ap_str_tolower(url_copy); min_match = strlen(url_copy); *pathstart = '/'; } else { ap_str_tolower(url_copy); min_match = strlen(url_copy); } /* * Do a "longest match" on the worker name to find the worker that * fits best to the URL, but keep in mind that we must have at least * a minimum matching of length min_match such that * scheme://hostname[:port] matches between worker and url. */ if (balancer) { proxy_worker **workers = (proxy_worker **)balancer->workers->elts; for (i = 0; i < balancer->workers->nelts; i++, workers++) { worker = *workers; if ( ((worker_name_length = strlen(worker->s->name)) <= url_length) && (worker_name_length >= min_match) && (worker_name_length > max_match) && (strncmp(url_copy, worker->s->name, worker_name_length) == 0) ) { max_worker = worker; max_match = worker_name_length; } } } else { worker = (proxy_worker *)conf->workers->elts; for (i = 0; i < conf->workers->nelts; i++, worker++) { if ( ((worker_name_length = strlen(worker->s->name)) <= url_length) && (worker_name_length >= min_match) && (worker_name_length > max_match) && (strncmp(url_copy, worker->s->name, worker_name_length) == 0) ) { max_worker = worker; max_match = worker_name_length; } } } return max_worker; } /* * To create a worker from scratch first we define the * specifics of the worker; this is all local data. * We then allocate space for it if data needs to be * shared. This allows for dynamic addition during * config and runtime. */ PROXY_DECLARE(char *) ap_proxy_define_worker(apr_pool_t *p, proxy_worker **worker, proxy_balancer *balancer, proxy_server_conf *conf, const char *url, int do_malloc) { int rv; apr_uri_t uri, urisock; proxy_worker_shared *wshared; char *ptr, *sockpath = NULL; /* * Look to see if we are using UDS: * require format: unix:/path/foo/bar.sock|http://ignored/path2/ * This results in talking http to the socket at /path/foo/bar.sock */ ptr = ap_strchr((char *)url, '|'); if (ptr) { *ptr = '\0'; rv = apr_uri_parse(p, url, &urisock); if (rv == APR_SUCCESS && !strcasecmp(urisock.scheme, "unix")) { sockpath = ap_runtime_dir_relative(p, urisock.path);; url = ptr+1; /* so we get the scheme for the uds */ } else { *ptr = '|'; } } rv = apr_uri_parse(p, url, &uri); if (rv != APR_SUCCESS) { return apr_pstrcat(p, "Unable to parse URL: ", url, NULL); } if (!uri.scheme) { return apr_pstrcat(p, "URL must be absolute!: ", url, NULL); } /* allow for unix:/path|http: */ if (!uri.hostname) { if (sockpath) { uri.hostname = "localhost"; } else { return apr_pstrcat(p, "URL must be absolute!: ", url, NULL); } } else { ap_str_tolower(uri.hostname); } ap_str_tolower(uri.scheme); /* * Workers can be associated w/ balancers or on their * own; ie: the generic reverse-proxy or a worker * in a simple ProxyPass statement. eg: * * ProxyPass / http://www.example.com * * in which case the worker goes in the conf slot. */ if (balancer) { proxy_worker **runtime; /* recall that we get a ptr to the ptr here */ runtime = apr_array_push(balancer->workers); *worker = *runtime = apr_palloc(p, sizeof(proxy_worker)); /* right to left baby */ /* we've updated the list of workers associated with * this balancer *locally* */ balancer->wupdated = apr_time_now(); } else if (conf) { *worker = apr_array_push(conf->workers); } else { /* we need to allocate space here */ *worker = apr_palloc(p, sizeof(proxy_worker)); } memset(*worker, 0, sizeof(proxy_worker)); /* right here we just want to tuck away the worker info. * if called during config, we don't have shm setup yet, * so just note the info for later. */ if (do_malloc) wshared = ap_malloc(sizeof(proxy_worker_shared)); /* will be freed ap_proxy_share_worker */ else wshared = apr_palloc(p, sizeof(proxy_worker_shared)); memset(wshared, 0, sizeof(proxy_worker_shared)); wshared->port = (uri.port ? uri.port : ap_proxy_port_of_scheme(uri.scheme)); if (uri.port && uri.port == ap_proxy_port_of_scheme(uri.scheme)) { uri.port = 0; } ptr = apr_uri_unparse(p, &uri, APR_URI_UNP_REVEALPASSWORD); if (PROXY_STRNCPY(wshared->name, ptr) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(02808) "Alert! worker name (%s) too long; truncated to: %s", ptr, wshared->name); } if (PROXY_STRNCPY(wshared->scheme, uri.scheme) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, APLOGNO(010117) "Alert! worker scheme (%s) too long; truncated to: %s", uri.scheme, wshared->scheme); } if (PROXY_STRNCPY(wshared->hostname_ex, uri.hostname) != APR_SUCCESS) { return apr_psprintf(p, "worker hostname (%s) too long", uri.hostname); } if (PROXY_STRNCPY(wshared->hostname, uri.hostname) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, ap_server_conf, APLOGNO(010118) "worker hostname (%s) too long; truncated for legacy modules that do not use " "proxy_worker_shared->hostname_ex: %s", uri.hostname, wshared->hostname); } wshared->flush_packets = flush_off; wshared->flush_wait = PROXY_FLUSH_WAIT; wshared->is_address_reusable = 1; wshared->lbfactor = 100; wshared->passes = 1; wshared->fails = 1; wshared->interval = apr_time_from_sec(HCHECK_WATHCHDOG_DEFAULT_INTERVAL); wshared->smax = -1; wshared->hash.def = ap_proxy_hashfunc(wshared->name, PROXY_HASHFUNC_DEFAULT); wshared->hash.fnv = ap_proxy_hashfunc(wshared->name, PROXY_HASHFUNC_FNV); wshared->was_malloced = (do_malloc != 0); if (sockpath) { if (PROXY_STRNCPY(wshared->uds_path, sockpath) != APR_SUCCESS) { return apr_psprintf(p, "worker uds path (%s) too long", sockpath); } } else { *wshared->uds_path = '\0'; } if (!balancer) { wshared->status |= PROXY_WORKER_IGNORE_ERRORS; } (*worker)->hash = wshared->hash; (*worker)->context = NULL; (*worker)->cp = NULL; (*worker)->balancer = balancer; (*worker)->s = wshared; return NULL; } /* * Create an already defined worker and free up memory */ PROXY_DECLARE(apr_status_t) ap_proxy_share_worker(proxy_worker *worker, proxy_worker_shared *shm, int i) { char *action = "copying"; if (!shm || !worker->s) return APR_EINVAL; if ((worker->s->hash.def != shm->hash.def) || (worker->s->hash.fnv != shm->hash.fnv)) { memcpy(shm, worker->s, sizeof(proxy_worker_shared)); if (worker->s->was_malloced) free(worker->s); /* was malloced in ap_proxy_define_worker */ } else { action = "re-using"; } worker->s = shm; worker->s->index = i; if (APLOGdebug(ap_server_conf)) { apr_pool_t *pool; apr_pool_create(&pool, ap_server_conf->process->pool); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, APLOGNO(02338) "%s shm[%d] (0x%pp) for worker: %s", action, i, (void *)shm, ap_proxy_worker_name(pool, worker)); if (pool) { apr_pool_destroy(pool); } } return APR_SUCCESS; } PROXY_DECLARE(apr_status_t) ap_proxy_initialize_worker(proxy_worker *worker, server_rec *s, apr_pool_t *p) { APR_OPTIONAL_FN_TYPE(http2_get_num_workers) *get_h2_num_workers; apr_status_t rv = APR_SUCCESS; int max_threads, minw, maxw; if (worker->s->status & PROXY_WORKER_INITIALIZED) { /* The worker is already initialized */ ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00924) "worker %s shared already initialized", ap_proxy_worker_name(p, worker)); } else { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00925) "initializing worker %s shared", ap_proxy_worker_name(p, worker)); /* Set default parameters */ if (!worker->s->retry_set) { worker->s->retry = apr_time_from_sec(PROXY_WORKER_DEFAULT_RETRY); } /* By default address is reusable unless DisableReuse is set */ if (worker->s->disablereuse) { worker->s->is_address_reusable = 0; } else { worker->s->is_address_reusable = 1; } /* * When mod_http2 is loaded we might have more threads since it has * its own pool of processing threads. */ ap_mpm_query(AP_MPMQ_MAX_THREADS, &max_threads); get_h2_num_workers = APR_RETRIEVE_OPTIONAL_FN(http2_get_num_workers); if (get_h2_num_workers) { get_h2_num_workers(s, &minw, &maxw); /* So now the max is: * max_threads-1 threads for HTTP/1 each requiring one connection * + one thread for HTTP/2 requiring maxw connections */ max_threads = max_threads - 1 + maxw; } if (max_threads > 1) { /* Default hmax is max_threads to scale with the load and never * wait for an idle connection to proceed. */ if (worker->s->hmax == 0) { worker->s->hmax = max_threads; } if (worker->s->smax == -1 || worker->s->smax > worker->s->hmax) { worker->s->smax = worker->s->hmax; } /* Set min to be lower than smax */ if (worker->s->min > worker->s->smax) { worker->s->min = worker->s->smax; } } else { /* This will suppress the apr_reslist creation */ worker->s->min = worker->s->smax = worker->s->hmax = 0; } } /* What if local is init'ed and shm isn't?? Even possible? */ if (worker->local_status & PROXY_WORKER_INITIALIZED) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00926) "worker %s local already initialized", ap_proxy_worker_name(p, worker)); } else { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00927) "initializing worker %s local", ap_proxy_worker_name(p, worker)); apr_global_mutex_lock(proxy_mutex); /* Now init local worker data */ if (worker->tmutex == NULL) { rv = apr_thread_mutex_create(&(worker->tmutex), APR_THREAD_MUTEX_DEFAULT, p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00928) "can not create worker thread mutex"); apr_global_mutex_unlock(proxy_mutex); return rv; } } if (worker->cp == NULL) init_conn_pool(p, worker); if (worker->cp == NULL) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00929) "can not create connection pool"); apr_global_mutex_unlock(proxy_mutex); return APR_EGENERAL; } if (worker->s->hmax) { rv = apr_reslist_create(&(worker->cp->res), worker->s->min, worker->s->smax, worker->s->hmax, worker->s->ttl, connection_constructor, connection_destructor, worker, worker->cp->pool); apr_pool_cleanup_register(worker->cp->pool, (void *)worker, conn_pool_cleanup, apr_pool_cleanup_null); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00930) "initialized pool in child %" APR_PID_T_FMT " for (%s) min=%d max=%d smax=%d", getpid(), worker->s->hostname_ex, worker->s->min, worker->s->hmax, worker->s->smax); /* Set the acquire timeout */ if (rv == APR_SUCCESS && worker->s->acquire_set) { apr_reslist_timeout_set(worker->cp->res, worker->s->acquire); } } else { void *conn; rv = connection_constructor(&conn, worker, worker->cp->pool); worker->cp->conn = conn; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00931) "initialized single connection worker in child %" APR_PID_T_FMT " for (%s)", getpid(), worker->s->hostname_ex); } apr_global_mutex_unlock(proxy_mutex); } if (rv == APR_SUCCESS) { worker->s->status |= (PROXY_WORKER_INITIALIZED); worker->local_status |= (PROXY_WORKER_INITIALIZED); } return rv; } static int ap_proxy_retry_worker(const char *proxy_function, proxy_worker *worker, server_rec *s) { if (worker->s->status & PROXY_WORKER_IN_ERROR) { if (PROXY_WORKER_IS(worker, PROXY_WORKER_STOPPED)) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(3305) "%s: Won't retry worker (%s): stopped", proxy_function, worker->s->hostname_ex); return DECLINED; } if ((worker->s->status & PROXY_WORKER_IGNORE_ERRORS) || apr_time_now() > worker->s->error_time + worker->s->retry) { ++worker->s->retries; worker->s->status &= ~PROXY_WORKER_IN_ERROR; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00932) "%s: worker for (%s) has been marked for retry", proxy_function, worker->s->hostname_ex); return OK; } else { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00933) "%s: too soon to retry worker for (%s)", proxy_function, worker->s->hostname_ex); return DECLINED; } } else { return OK; } } /* * In the case of the reverse proxy, we need to see if we * were passed a UDS url (eg: from mod_proxy) and adjust uds_path * as required. */ static void fix_uds_filename(request_rec *r, char **url) { char *ptr, *ptr2; if (!r || !r->filename) return; if (!strncmp(r->filename, "proxy:", 6) && (ptr2 = ap_strcasestr(r->filename, "unix:")) && (ptr = ap_strchr(ptr2, '|'))) { apr_uri_t urisock; apr_status_t rv; *ptr = '\0'; rv = apr_uri_parse(r->pool, ptr2, &urisock); if (rv == APR_SUCCESS) { char *rurl = ptr+1; char *sockpath = ap_runtime_dir_relative(r->pool, urisock.path); apr_table_setn(r->notes, "uds_path", sockpath); *url = apr_pstrdup(r->pool, rurl); /* so we get the scheme for the uds */ /* r->filename starts w/ "proxy:", so add after that */ memmove(r->filename+6, rurl, strlen(rurl)+1); ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "*: rewrite of url due to UDS(%s): %s (%s)", sockpath, *url, r->filename); } else { *ptr = '|'; } } } PROXY_DECLARE(int) ap_proxy_pre_request(proxy_worker **worker, proxy_balancer **balancer, request_rec *r, proxy_server_conf *conf, char **url) { int access_status; access_status = proxy_run_pre_request(worker, balancer, r, conf, url); if (access_status == DECLINED && *balancer == NULL) { *worker = ap_proxy_get_worker(r->pool, NULL, conf, *url); if (*worker) { ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "%s: found worker %s for %s", (*worker)->s->scheme, (*worker)->s->name, *url); *balancer = NULL; fix_uds_filename(r, url); access_status = OK; } else if (r->proxyreq == PROXYREQ_PROXY) { if (conf->forward) { ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "*: found forward proxy worker for %s", *url); *balancer = NULL; *worker = conf->forward; access_status = OK; /* * The forward worker does not keep connections alive, so * ensure that mod_proxy_http does the correct thing * regarding the Connection header in the request. */ apr_table_setn(r->subprocess_env, "proxy-nokeepalive", "1"); } } else if (r->proxyreq == PROXYREQ_REVERSE) { if (conf->reverse) { ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "*: using default reverse proxy worker for %s (no keepalive)", *url); *balancer = NULL; *worker = conf->reverse; access_status = OK; /* * The reverse worker does not keep connections alive, so * ensure that mod_proxy_http does the correct thing * regarding the Connection header in the request. */ apr_table_setn(r->subprocess_env, "proxy-nokeepalive", "1"); fix_uds_filename(r, url); } } } else if (access_status == DECLINED && *balancer != NULL) { /* All the workers are busy */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00934) "all workers are busy. Unable to serve %s", *url); access_status = HTTP_SERVICE_UNAVAILABLE; } return access_status; } PROXY_DECLARE(int) ap_proxy_post_request(proxy_worker *worker, proxy_balancer *balancer, request_rec *r, proxy_server_conf *conf) { int access_status = OK; if (balancer) { access_status = proxy_run_post_request(worker, balancer, r, conf); if (access_status == DECLINED) { access_status = OK; /* no post_request handler available */ /* TODO: recycle direct worker */ } } return access_status; } /* DEPRECATED */ PROXY_DECLARE(int) ap_proxy_connect_to_backend(apr_socket_t **newsock, const char *proxy_function, apr_sockaddr_t *backend_addr, const char *backend_name, proxy_server_conf *conf, request_rec *r) { apr_status_t rv; int connected = 0; int loglevel; while (backend_addr && !connected) { if ((rv = apr_socket_create(newsock, backend_addr->family, SOCK_STREAM, 0, r->pool)) != APR_SUCCESS) { loglevel = backend_addr->next ? APLOG_DEBUG : APLOG_ERR; ap_log_rerror(APLOG_MARK, loglevel, rv, r, APLOGNO(00935) "%s: error creating fam %d socket for target %s", proxy_function, backend_addr->family, backend_name); /* * this could be an IPv6 address from the DNS but the * local machine won't give us an IPv6 socket; hopefully the * DNS returned an additional address to try */ backend_addr = backend_addr->next; continue; } if (conf->recv_buffer_size > 0 && (rv = apr_socket_opt_set(*newsock, APR_SO_RCVBUF, conf->recv_buffer_size))) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00936) "apr_socket_opt_set(SO_RCVBUF): Failed to set " "ProxyReceiveBufferSize, using default"); } rv = apr_socket_opt_set(*newsock, APR_TCP_NODELAY, 1); if (rv != APR_SUCCESS && rv != APR_ENOTIMPL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00937) "apr_socket_opt_set(APR_TCP_NODELAY): " "Failed to set"); } /* Set a timeout on the socket */ if (conf->timeout_set) { apr_socket_timeout_set(*newsock, conf->timeout); } else { apr_socket_timeout_set(*newsock, r->server->timeout); } ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "%s: fam %d socket created to connect to %s", proxy_function, backend_addr->family, backend_name); if (conf->source_address) { apr_sockaddr_t *local_addr; /* Make a copy since apr_socket_bind() could change * conf->source_address, which we don't want. */ local_addr = apr_pmemdup(r->pool, conf->source_address, sizeof(apr_sockaddr_t)); local_addr->pool = r->pool; rv = apr_socket_bind(*newsock, local_addr); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00938) "%s: failed to bind socket to local address", proxy_function); } } /* make the connection out of the socket */ rv = apr_socket_connect(*newsock, backend_addr); /* if an error occurred, loop round and try again */ if (rv != APR_SUCCESS) { apr_socket_close(*newsock); loglevel = backend_addr->next ? APLOG_DEBUG : APLOG_ERR; ap_log_rerror(APLOG_MARK, loglevel, rv, r, APLOGNO(00939) "%s: attempt to connect to %pI (%s) failed", proxy_function, backend_addr, backend_name); backend_addr = backend_addr->next; continue; } connected = 1; } return connected ? 0 : 1; } PROXY_DECLARE(int) ap_proxy_acquire_connection(const char *proxy_function, proxy_conn_rec **conn, proxy_worker *worker, server_rec *s) { apr_status_t rv; if (!PROXY_WORKER_IS_USABLE(worker)) { /* Retry the worker */ ap_proxy_retry_worker(proxy_function, worker, s); if (!PROXY_WORKER_IS_USABLE(worker)) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00940) "%s: disabled connection for (%s)", proxy_function, worker->s->hostname_ex); return HTTP_SERVICE_UNAVAILABLE; } } if (worker->s->hmax && worker->cp->res) { rv = apr_reslist_acquire(worker->cp->res, (void **)conn); } else { /* create the new connection if the previous was destroyed */ if (!worker->cp->conn) { connection_constructor((void **)conn, worker, worker->cp->pool); } else { *conn = worker->cp->conn; worker->cp->conn = NULL; } rv = APR_SUCCESS; } if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00941) "%s: failed to acquire connection for (%s)", proxy_function, worker->s->hostname_ex); return HTTP_SERVICE_UNAVAILABLE; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00942) "%s: has acquired connection for (%s)", proxy_function, worker->s->hostname_ex); (*conn)->worker = worker; (*conn)->close = 0; (*conn)->inreslist = 0; return OK; } PROXY_DECLARE(int) ap_proxy_release_connection(const char *proxy_function, proxy_conn_rec *conn, server_rec *s) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00943) "%s: has released connection for (%s)", proxy_function, conn->worker->s->hostname_ex); connection_cleanup(conn); return OK; } PROXY_DECLARE(int) ap_proxy_determine_connection(apr_pool_t *p, request_rec *r, proxy_server_conf *conf, proxy_worker *worker, proxy_conn_rec *conn, apr_uri_t *uri, char **url, const char *proxyname, apr_port_t proxyport, char *server_portstr, int server_portstr_size) { int server_port; apr_status_t err = APR_SUCCESS; apr_status_t uerr = APR_SUCCESS; const char *uds_path; /* * Break up the URL to determine the host to connect to */ /* we break the URL into host, port, uri */ if (APR_SUCCESS != apr_uri_parse(p, *url, uri)) { return ap_proxyerror(r, HTTP_BAD_REQUEST, apr_pstrcat(p,"URI cannot be parsed: ", *url, NULL)); } if (!uri->port) { uri->port = ap_proxy_port_of_scheme(uri->scheme); } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00944) "connecting %s to %s:%d", *url, uri->hostname, uri->port); /* * allocate these out of the specified connection pool * The scheme handler decides if this is permanent or * short living pool. */ /* Unless we are connecting the backend via a (forward Proxy)Remote, we * have to use the original form of the URI (non absolute), but this is * also the case via a remote proxy using the CONNECT method since the * original request (and URI) is to be embedded in the body. */ if (!proxyname || conn->is_ssl) { *url = apr_pstrcat(p, uri->path, uri->query ? "?" : "", uri->query ? uri->query : "", uri->fragment ? "#" : "", uri->fragment ? uri->fragment : "", NULL); } /* * Figure out if our passed in proxy_conn_rec has a usable * address cached. * * TODO: Handle this much better... * * XXX: If generic workers are ever address-reusable, we need * to check host and port on the conn and be careful about * spilling the cached addr from the worker. */ uds_path = (*worker->s->uds_path ? worker->s->uds_path : apr_table_get(r->notes, "uds_path")); if (uds_path) { if (conn->uds_path == NULL) { /* use (*conn)->pool instead of worker->cp->pool to match lifetime */ conn->uds_path = apr_pstrdup(conn->pool, uds_path); } if (conn->uds_path) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02545) "%s: has determined UDS as %s", uri->scheme, conn->uds_path); } else { /* should never happen */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02546) "%s: cannot determine UDS (%s)", uri->scheme, uds_path); } /* * In UDS cases, some structs are NULL. Protect from de-refs * and provide info for logging at the same time. */ if (!conn->addr) { apr_sockaddr_t *sa; apr_sockaddr_info_get(&sa, NULL, APR_UNSPEC, 0, 0, conn->pool); conn->addr = sa; } conn->hostname = "httpd-UDS"; conn->port = 0; } else { int will_reuse = worker->s->is_address_reusable && !worker->s->disablereuse; if (!conn->hostname || !will_reuse) { if (proxyname) { conn->hostname = apr_pstrdup(conn->pool, proxyname); conn->port = proxyport; /* * If we have a forward proxy and the protocol is HTTPS, * then we need to prepend a HTTP CONNECT request before * sending our actual HTTPS requests. * Save our real backend data for using it later during HTTP CONNECT. */ if (conn->is_ssl) { const char *proxy_auth; forward_info *forward = apr_pcalloc(conn->pool, sizeof(forward_info)); conn->forward = forward; forward->use_http_connect = 1; forward->target_host = apr_pstrdup(conn->pool, uri->hostname); forward->target_port = uri->port; /* Do we want to pass Proxy-Authorization along? * If we haven't used it, then YES * If we have used it then MAYBE: RFC2616 says we MAY propagate it. * So let's make it configurable by env. * The logic here is the same used in mod_proxy_http. */ proxy_auth = apr_table_get(r->headers_in, "Proxy-Authorization"); if (proxy_auth != NULL && proxy_auth[0] != '\0' && r->user == NULL && /* we haven't yet authenticated */ apr_table_get(r->subprocess_env, "Proxy-Chain-Auth")) { forward->proxy_auth = apr_pstrdup(conn->pool, proxy_auth); } } } else { conn->hostname = apr_pstrdup(conn->pool, uri->hostname); conn->port = uri->port; } if (!will_reuse) { /* * Only do a lookup if we should not reuse the backend address. * Otherwise we will look it up once for the worker. */ err = apr_sockaddr_info_get(&(conn->addr), conn->hostname, APR_UNSPEC, conn->port, 0, conn->pool); } socket_cleanup(conn); conn->close = 0; } if (will_reuse) { /* * Looking up the backend address for the worker only makes sense if * we can reuse the address. */ if (!worker->cp->addr) { if ((err = PROXY_THREAD_LOCK(worker)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, err, r, APLOGNO(00945) "lock"); return HTTP_INTERNAL_SERVER_ERROR; } /* * Worker can have the single constant backend address. * The single DNS lookup is used once per worker. * If dynamic change is needed then set the addr to NULL * inside dynamic config to force the lookup. */ err = apr_sockaddr_info_get(&(worker->cp->addr), conn->hostname, APR_UNSPEC, conn->port, 0, worker->cp->pool); conn->addr = worker->cp->addr; if ((uerr = PROXY_THREAD_UNLOCK(worker)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, uerr, r, APLOGNO(00946) "unlock"); } } else { conn->addr = worker->cp->addr; } } } /* Close a possible existing socket if we are told to do so */ if (conn->close) { socket_cleanup(conn); conn->close = 0; } if (err != APR_SUCCESS) { return ap_proxyerror(r, HTTP_BAD_GATEWAY, apr_pstrcat(p, "DNS lookup failure for: ", conn->hostname, NULL)); } /* Get the server port for the Via headers */ server_port = ap_get_server_port(r); AP_DEBUG_ASSERT(server_portstr_size > 0); if (ap_is_default_port(server_port, r)) { server_portstr[0] = '\0'; } else { apr_snprintf(server_portstr, server_portstr_size, ":%d", server_port); } /* check if ProxyBlock directive on this host */ if (OK != ap_proxy_checkproxyblock2(r, conf, uri->hostname, proxyname ? NULL : conn->addr)) { return ap_proxyerror(r, HTTP_FORBIDDEN, "Connect to remote machine blocked"); } /* * When SSL is configured, determine the hostname (SNI) for the request * and save it in conn->ssl_hostname. Close any reused connection whose * SNI differs. */ if (conn->is_ssl) { proxy_dir_conf *dconf; const char *ssl_hostname; /* * In the case of ProxyPreserveHost on use the hostname of * the request if present otherwise use the one from the * backend request URI. */ dconf = ap_get_module_config(r->per_dir_config, &proxy_module); if (dconf->preserve_host) { ssl_hostname = r->hostname; } else if (conn->forward && ((forward_info *)(conn->forward))->use_http_connect) { ssl_hostname = ((forward_info *)conn->forward)->target_host; } else { ssl_hostname = conn->hostname; } /* * Close if a SNI is in use but this request requires no or * a different one, or no SNI is in use but one is required. */ if ((conn->ssl_hostname && (!ssl_hostname || strcasecmp(conn->ssl_hostname, ssl_hostname) != 0)) || (!conn->ssl_hostname && ssl_hostname && conn->sock)) { socket_cleanup(conn); } if (conn->ssl_hostname == NULL) { conn->ssl_hostname = apr_pstrdup(conn->scpool, ssl_hostname); } } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00947) "connected %s to %s:%d", *url, conn->hostname, conn->port); return OK; } #define USE_ALTERNATE_IS_CONNECTED 1 #if !defined(APR_MSG_PEEK) && defined(MSG_PEEK) #define APR_MSG_PEEK MSG_PEEK #endif #if USE_ALTERNATE_IS_CONNECTED && defined(APR_MSG_PEEK) PROXY_DECLARE(int) ap_proxy_is_socket_connected(apr_socket_t *socket) { apr_pollfd_t pfds[1]; apr_status_t status; apr_int32_t nfds; pfds[0].reqevents = APR_POLLIN; pfds[0].desc_type = APR_POLL_SOCKET; pfds[0].desc.s = socket; do { status = apr_poll(&pfds[0], 1, &nfds, 0); } while (APR_STATUS_IS_EINTR(status)); if (status == APR_SUCCESS && nfds == 1 && pfds[0].rtnevents == APR_POLLIN) { apr_sockaddr_t unused; apr_size_t len = 1; char buf[1]; /* The socket might be closed in which case * the poll will return POLLIN. * If there is no data available the socket * is closed. */ status = apr_socket_recvfrom(&unused, socket, APR_MSG_PEEK, &buf[0], &len); if (status == APR_SUCCESS && len) return 1; else return 0; } else if (APR_STATUS_IS_EAGAIN(status) || APR_STATUS_IS_TIMEUP(status)) { return 1; } return 0; } #else PROXY_DECLARE(int) ap_proxy_is_socket_connected(apr_socket_t *sock) { apr_size_t buffer_len = 1; char test_buffer[1]; apr_status_t socket_status; apr_interval_time_t current_timeout; /* save timeout */ apr_socket_timeout_get(sock, ¤t_timeout); /* set no timeout */ apr_socket_timeout_set(sock, 0); socket_status = apr_socket_recv(sock, test_buffer, &buffer_len); /* put back old timeout */ apr_socket_timeout_set(sock, current_timeout); if (APR_STATUS_IS_EOF(socket_status) || APR_STATUS_IS_ECONNRESET(socket_status)) { return 0; } else { return 1; } } #endif /* USE_ALTERNATE_IS_CONNECTED */ /* * Send a HTTP CONNECT request to a forward proxy. * The proxy is given by "backend", the target server * is contained in the "forward" member of "backend". */ static apr_status_t send_http_connect(proxy_conn_rec *backend, server_rec *s) { int status; apr_size_t nbytes; apr_size_t left; int complete = 0; char buffer[HUGE_STRING_LEN]; char drain_buffer[HUGE_STRING_LEN]; forward_info *forward = (forward_info *)backend->forward; int len = 0; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00948) "CONNECT: sending the CONNECT request for %s:%d " "to the remote proxy %pI (%s)", forward->target_host, forward->target_port, backend->addr, backend->hostname); /* Create the CONNECT request */ nbytes = apr_snprintf(buffer, sizeof(buffer), "CONNECT %s:%d HTTP/1.0" CRLF, forward->target_host, forward->target_port); /* Add proxy authorization from the initial request if necessary */ if (forward->proxy_auth != NULL) { nbytes += apr_snprintf(buffer + nbytes, sizeof(buffer) - nbytes, "Proxy-Authorization: %s" CRLF, forward->proxy_auth); } /* Set a reasonable agent and send everything */ nbytes += apr_snprintf(buffer + nbytes, sizeof(buffer) - nbytes, "Proxy-agent: %s" CRLF CRLF, ap_get_server_banner()); ap_xlate_proto_to_ascii(buffer, nbytes); apr_socket_send(backend->sock, buffer, &nbytes); /* Receive the whole CONNECT response */ left = sizeof(buffer) - 1; /* Read until we find the end of the headers or run out of buffer */ do { nbytes = left; status = apr_socket_recv(backend->sock, buffer + len, &nbytes); len += nbytes; left -= nbytes; buffer[len] = '\0'; if (strstr(buffer + len - nbytes, CRLF_ASCII CRLF_ASCII) != NULL) { ap_xlate_proto_from_ascii(buffer, len); complete = 1; break; } } while (status == APR_SUCCESS && left > 0); /* Drain what's left */ if (!complete) { nbytes = sizeof(drain_buffer) - 1; while (status == APR_SUCCESS && nbytes) { status = apr_socket_recv(backend->sock, drain_buffer, &nbytes); drain_buffer[nbytes] = '\0'; nbytes = sizeof(drain_buffer) - 1; if (strstr(drain_buffer, CRLF_ASCII CRLF_ASCII) != NULL) { break; } } } /* Check for HTTP_OK response status */ if (status == APR_SUCCESS) { unsigned int major, minor; /* Only scan for three character status code */ char code_str[4]; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00949) "send_http_connect: response from the forward proxy: %s", buffer); /* Extract the returned code */ if (sscanf(buffer, "HTTP/%u.%u %3s", &major, &minor, code_str) == 3) { status = atoi(code_str); if (status == HTTP_OK) { status = APR_SUCCESS; } else { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00950) "send_http_connect: the forward proxy returned code is '%s'", code_str); status = APR_INCOMPLETE; } } } return(status); } /* TODO: In APR 2.x: Extend apr_sockaddr_t to possibly be a path !!! */ PROXY_DECLARE(apr_status_t) ap_proxy_connect_uds(apr_socket_t *sock, const char *uds_path, apr_pool_t *p) { #if APR_HAVE_SYS_UN_H apr_status_t rv; apr_os_sock_t rawsock; apr_interval_time_t t; struct sockaddr_un *sa; apr_socklen_t addrlen, pathlen; rv = apr_os_sock_get(&rawsock, sock); if (rv != APR_SUCCESS) { return rv; } rv = apr_socket_timeout_get(sock, &t); if (rv != APR_SUCCESS) { return rv; } pathlen = strlen(uds_path); /* copy the UDS path (including NUL) to the sockaddr_un */ addrlen = APR_OFFSETOF(struct sockaddr_un, sun_path) + pathlen; sa = (struct sockaddr_un *)apr_palloc(p, addrlen + 1); memcpy(sa->sun_path, uds_path, pathlen + 1); sa->sun_family = AF_UNIX; do { rv = connect(rawsock, (struct sockaddr*)sa, addrlen); } while (rv == -1 && (rv = errno) == EINTR); if (rv && rv != EISCONN) { if ((rv == EINPROGRESS || rv == EALREADY) && (t > 0)) { #if APR_MAJOR_VERSION < 2 rv = apr_wait_for_io_or_timeout(NULL, sock, 0); #else rv = apr_socket_wait(sock, APR_WAIT_WRITE); #endif } if (rv != APR_SUCCESS) { return rv; } } return APR_SUCCESS; #else return APR_ENOTIMPL; #endif } PROXY_DECLARE(apr_status_t) ap_proxy_check_connection(const char *scheme, proxy_conn_rec *conn, server_rec *server, unsigned max_blank_lines, int flags) { apr_status_t rv = APR_SUCCESS; proxy_worker *worker = conn->worker; if (!PROXY_WORKER_IS_USABLE(worker)) { /* * The worker is in error likely done by a different thread / process * e.g. for a timeout or bad status. We should respect this and should * not continue with a connection via this worker even if we got one. */ rv = APR_EINVAL; } else if (conn->connection) { /* We have a conn_rec, check the full filter stack for things like * SSL alert/shutdown, filters aside data... */ rv = ap_check_pipeline(conn->connection, conn->tmp_bb, max_blank_lines); apr_brigade_cleanup(conn->tmp_bb); if (rv == APR_SUCCESS) { /* Some data available, the caller might not want them. */ if (flags & PROXY_CHECK_CONN_EMPTY) { rv = APR_ENOTEMPTY; } } else if (APR_STATUS_IS_EAGAIN(rv)) { /* Filter chain is OK and empty, yet we can't determine from * ap_check_pipeline (actually ap_core_input_filter) whether * an empty non-blocking read is EAGAIN or EOF on the socket * side (it's always SUCCESS), so check it explicitely here. */ if (ap_proxy_is_socket_connected(conn->sock)) { rv = APR_SUCCESS; } else { rv = APR_EPIPE; } } } else if (conn->sock) { /* For modules working with sockets directly, check it. */ if (!ap_proxy_is_socket_connected(conn->sock)) { rv = APR_EPIPE; } } else { rv = APR_ENOSOCKET; } if (rv == APR_SUCCESS) { if (APLOGtrace2(server)) { apr_sockaddr_t *local_addr = NULL; apr_socket_addr_get(&local_addr, APR_LOCAL, conn->sock); ap_log_error(APLOG_MARK, APLOG_TRACE2, 0, server, "%s: reusing backend connection %pI<>%pI", scheme, local_addr, conn->addr); } } else if (conn->sock) { /* This clears conn->scpool (and associated data), so backup and * restore any ssl_hostname for this connection set earlier by * ap_proxy_determine_connection(). */ char ssl_hostname[PROXY_WORKER_RFC1035_NAME_SIZE]; if (rv == APR_EINVAL || !conn->ssl_hostname || PROXY_STRNCPY(ssl_hostname, conn->ssl_hostname)) { ssl_hostname[0] = '\0'; } socket_cleanup(conn); if (rv != APR_ENOTEMPTY) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, server, APLOGNO(00951) "%s: backend socket is disconnected.", scheme); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, server, APLOGNO(03408) "%s: reusable backend connection is not empty: " "forcibly closed", scheme); } if (ssl_hostname[0]) { conn->ssl_hostname = apr_pstrdup(conn->scpool, ssl_hostname); } } return rv; } PROXY_DECLARE(int) ap_proxy_connect_backend(const char *proxy_function, proxy_conn_rec *conn, proxy_worker *worker, server_rec *s) { apr_status_t rv; int loglevel; apr_sockaddr_t *backend_addr = conn->addr; /* the local address to use for the outgoing connection */ apr_sockaddr_t *local_addr; apr_socket_t *newsock; void *sconf = s->module_config; proxy_server_conf *conf = (proxy_server_conf *) ap_get_module_config(sconf, &proxy_module); rv = ap_proxy_check_connection(proxy_function, conn, s, 0, 0); if (rv == APR_EINVAL) { return DECLINED; } while (rv != APR_SUCCESS && (backend_addr || conn->uds_path)) { #if APR_HAVE_SYS_UN_H if (conn->uds_path) { rv = apr_socket_create(&newsock, AF_UNIX, SOCK_STREAM, 0, conn->scpool); if (rv != APR_SUCCESS) { loglevel = APLOG_ERR; ap_log_error(APLOG_MARK, loglevel, rv, s, APLOGNO(02453) "%s: error creating Unix domain socket for " "target %s", proxy_function, worker->s->hostname_ex); break; } conn->connection = NULL; rv = ap_proxy_connect_uds(newsock, conn->uds_path, conn->scpool); if (rv != APR_SUCCESS) { apr_socket_close(newsock); ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(02454) "%s: attempt to connect to Unix domain socket " "%s (%s) failed", proxy_function, conn->uds_path, worker->s->hostname_ex); break; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02823) "%s: connection established with Unix domain socket " "%s (%s)", proxy_function, conn->uds_path, worker->s->hostname_ex); } else #endif { if ((rv = apr_socket_create(&newsock, backend_addr->family, SOCK_STREAM, APR_PROTO_TCP, conn->scpool)) != APR_SUCCESS) { loglevel = backend_addr->next ? APLOG_DEBUG : APLOG_ERR; ap_log_error(APLOG_MARK, loglevel, rv, s, APLOGNO(00952) "%s: error creating fam %d socket for " "target %s", proxy_function, backend_addr->family, worker->s->hostname_ex); /* * this could be an IPv6 address from the DNS but the * local machine won't give us an IPv6 socket; hopefully the * DNS returned an additional address to try */ backend_addr = backend_addr->next; continue; } conn->connection = NULL; if (worker->s->recv_buffer_size > 0 && (rv = apr_socket_opt_set(newsock, APR_SO_RCVBUF, worker->s->recv_buffer_size))) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00953) "apr_socket_opt_set(SO_RCVBUF): Failed to set " "ProxyReceiveBufferSize, using default"); } rv = apr_socket_opt_set(newsock, APR_TCP_NODELAY, 1); if (rv != APR_SUCCESS && rv != APR_ENOTIMPL) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00954) "apr_socket_opt_set(APR_TCP_NODELAY): " "Failed to set"); } /* Set a timeout for connecting to the backend on the socket */ if (worker->s->conn_timeout_set) { apr_socket_timeout_set(newsock, worker->s->conn_timeout); } else if (worker->s->timeout_set) { apr_socket_timeout_set(newsock, worker->s->timeout); } else if (conf->timeout_set) { apr_socket_timeout_set(newsock, conf->timeout); } else { apr_socket_timeout_set(newsock, s->timeout); } /* Set a keepalive option */ if (worker->s->keepalive) { if ((rv = apr_socket_opt_set(newsock, APR_SO_KEEPALIVE, 1)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00955) "apr_socket_opt_set(SO_KEEPALIVE): Failed to set" " Keepalive"); } } ap_log_error(APLOG_MARK, APLOG_TRACE2, 0, s, "%s: fam %d socket created to connect to %s", proxy_function, backend_addr->family, worker->s->hostname_ex); if (conf->source_address_set) { local_addr = apr_pmemdup(conn->scpool, conf->source_address, sizeof(apr_sockaddr_t)); local_addr->pool = conn->scpool; rv = apr_socket_bind(newsock, local_addr); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(00956) "%s: failed to bind socket to local address", proxy_function); } } /* make the connection out of the socket */ rv = apr_socket_connect(newsock, backend_addr); /* if an error occurred, loop round and try again */ if (rv != APR_SUCCESS) { apr_socket_close(newsock); loglevel = backend_addr->next ? APLOG_DEBUG : APLOG_ERR; ap_log_error(APLOG_MARK, loglevel, rv, s, APLOGNO(00957) "%s: attempt to connect to %pI (%s) failed", proxy_function, backend_addr, worker->s->hostname_ex); backend_addr = backend_addr->next; continue; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02824) "%s: connection established with %pI (%s)", proxy_function, backend_addr, worker->s->hostname_ex); } /* Set a timeout on the socket */ if (worker->s->timeout_set) { apr_socket_timeout_set(newsock, worker->s->timeout); } else if (conf->timeout_set) { apr_socket_timeout_set(newsock, conf->timeout); } else { apr_socket_timeout_set(newsock, s->timeout); } conn->sock = newsock; if (!conn->uds_path && conn->forward) { forward_info *forward = (forward_info *)conn->forward; /* * For HTTP CONNECT we need to prepend CONNECT request before * sending our actual HTTPS requests. */ if (forward->use_http_connect) { rv = send_http_connect(conn, s); /* If an error occurred, loop round and try again */ if (rv != APR_SUCCESS) { conn->sock = NULL; apr_socket_close(newsock); loglevel = backend_addr->next ? APLOG_DEBUG : APLOG_ERR; ap_log_error(APLOG_MARK, loglevel, rv, s, APLOGNO(00958) "%s: attempt to connect to %s:%d " "via http CONNECT through %pI (%s) failed", proxy_function, forward->target_host, forward->target_port, backend_addr, worker->s->hostname_ex); backend_addr = backend_addr->next; continue; } } } } if (PROXY_WORKER_IS_USABLE(worker)) { /* * Put the entire worker to error state if * the PROXY_WORKER_IGNORE_ERRORS flag is not set. * Although some connections may be alive * no further connections to the worker could be made */ if (rv != APR_SUCCESS) { if (!(worker->s->status & PROXY_WORKER_IGNORE_ERRORS)) { worker->s->error_time = apr_time_now(); worker->s->status |= PROXY_WORKER_IN_ERROR; ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00959) "ap_proxy_connect_backend disabling worker for (%s) for %" APR_TIME_T_FMT "s", worker->s->hostname_ex, apr_time_sec(worker->s->retry)); } } else { if (worker->s->retries) { /* * A worker came back. So here is where we need to * either reset all params to initial conditions or * apply some sort of aging */ } worker->s->error_time = 0; worker->s->retries = 0; } } else { /* * The worker is in error likely done by a different thread / process * e.g. for a timeout or bad status. We should respect this and should * not continue with a connection via this worker even if we got one. */ if (rv == APR_SUCCESS) { socket_cleanup(conn); } rv = APR_EINVAL; } return rv == APR_SUCCESS ? OK : DECLINED; } static apr_status_t connection_shutdown(void *theconn) { proxy_conn_rec *conn = (proxy_conn_rec *)theconn; conn_rec *c = conn->connection; if (c) { if (!c->aborted) { apr_interval_time_t saved_timeout = 0; apr_socket_timeout_get(conn->sock, &saved_timeout); if (saved_timeout) { apr_socket_timeout_set(conn->sock, 0); } (void)ap_shutdown_conn(c, 0); c->aborted = 1; if (saved_timeout) { apr_socket_timeout_set(conn->sock, saved_timeout); } } ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(02642) "proxy: connection shutdown"); } return APR_SUCCESS; } static int proxy_connection_create(const char *proxy_function, proxy_conn_rec *conn, request_rec *r, server_rec *s) { ap_conf_vector_t *per_dir_config = (r) ? r->per_dir_config : conn->worker->section_config; apr_sockaddr_t *backend_addr = conn->addr; int rc; apr_interval_time_t current_timeout; apr_bucket_alloc_t *bucket_alloc; if (conn->connection) { if (conn->is_ssl) { /* on reuse, reinit the SSL connection dir config with the current * r->per_dir_config, the previous one was reset on release. */ ap_proxy_ssl_engine(conn->connection, per_dir_config, 1); } return OK; } bucket_alloc = apr_bucket_alloc_create(conn->scpool); conn->tmp_bb = apr_brigade_create(conn->scpool, bucket_alloc); /* * The socket is now open, create a new backend server connection */ conn->connection = ap_run_create_connection(conn->scpool, s, conn->sock, 0, NULL, bucket_alloc); if (!conn->connection) { /* * the peer reset the connection already; ap_run_create_connection() * closed the socket */ ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00960) "%s: an error occurred creating a " "new connection to %pI (%s)", proxy_function, backend_addr, conn->hostname); /* XXX: Will be closed when proxy_conn is closed */ socket_cleanup(conn); return HTTP_INTERNAL_SERVER_ERROR; } /* For ssl connection to backend */ if (conn->is_ssl) { if (!ap_proxy_ssl_engine(conn->connection, per_dir_config, 1)) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00961) "%s: failed to enable ssl support " "for %pI (%s)", proxy_function, backend_addr, conn->hostname); return HTTP_INTERNAL_SERVER_ERROR; } if (conn->ssl_hostname) { /* Set a note on the connection about what CN is requested, * such that mod_ssl can check if it is requested to do so. */ ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, conn->connection, "%s: set SNI to %s for (%s)", proxy_function, conn->ssl_hostname, conn->hostname); apr_table_setn(conn->connection->notes, "proxy-request-hostname", conn->ssl_hostname); } } else { /* TODO: See if this will break FTP */ ap_proxy_ssl_engine(conn->connection, per_dir_config, 0); } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00962) "%s: connection complete to %pI (%s)", proxy_function, backend_addr, conn->hostname); /* * save the timeout of the socket because core_pre_connection * will set it to base_server->timeout * (core TimeOut directive). */ apr_socket_timeout_get(conn->sock, ¤t_timeout); /* set up the connection filters */ rc = ap_run_pre_connection(conn->connection, conn->sock); if (rc != OK && rc != DONE) { conn->connection->aborted = 1; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00963) "%s: pre_connection setup failed (%d)", proxy_function, rc); return rc; } apr_socket_timeout_set(conn->sock, current_timeout); /* Shutdown the connection before closing it (eg. SSL connections * need to be close-notify-ed). */ apr_pool_pre_cleanup_register(conn->scpool, conn, connection_shutdown); return OK; } PROXY_DECLARE(int) ap_proxy_connection_create_ex(const char *proxy_function, proxy_conn_rec *conn, request_rec *r) { return proxy_connection_create(proxy_function, conn, r, r->server); } PROXY_DECLARE(int) ap_proxy_connection_create(const char *proxy_function, proxy_conn_rec *conn, conn_rec *c, server_rec *s) { (void) c; /* unused */ return proxy_connection_create(proxy_function, conn, NULL, s); } int ap_proxy_lb_workers(void) { /* * Since we can't resize the scoreboard when reconfiguring, we * have to impose a limit on the number of workers, we are * able to reconfigure to. */ if (!lb_workers_limit) lb_workers_limit = proxy_lb_workers + PROXY_DYNAMIC_BALANCER_LIMIT; return lb_workers_limit; } PROXY_DECLARE(void) ap_proxy_backend_broke(request_rec *r, apr_bucket_brigade *brigade) { apr_bucket *e; conn_rec *c = r->connection; r->no_cache = 1; /* * If this is a subrequest, then prevent also caching of the main * request. */ if (r->main) r->main->no_cache = 1; e = ap_bucket_error_create(HTTP_BAD_GATEWAY, NULL, c->pool, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(brigade, e); e = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(brigade, e); } /* * Provide a string hashing function for the proxy. * We offer 2 methods: one is the APR model but we * also provide our own, based on either FNV or SDBM. * The reason is in case we want to use both to ensure no * collisions. */ PROXY_DECLARE(unsigned int) ap_proxy_hashfunc(const char *str, proxy_hash_t method) { if (method == PROXY_HASHFUNC_APR) { apr_ssize_t slen = strlen(str); return apr_hashfunc_default(str, &slen); } else if (method == PROXY_HASHFUNC_FNV) { /* FNV model */ unsigned int hash; const unsigned int fnv_prime = 0x811C9DC5; for (hash = 0; *str; str++) { hash *= fnv_prime; hash ^= (*str); } return hash; } else { /* method == PROXY_HASHFUNC_DEFAULT */ /* SDBM model */ unsigned int hash; for (hash = 0; *str; str++) { hash = (*str) + (hash << 6) + (hash << 16) - hash; } return hash; } } PROXY_DECLARE(apr_status_t) ap_proxy_set_wstatus(char c, int set, proxy_worker *w) { unsigned int *status = &w->s->status; char flag = toupper(c); proxy_wstat_t *pwt = proxy_wstat_tbl; while (pwt->bit) { if (flag == pwt->flag) { if (set) *status |= pwt->bit; else *status &= ~(pwt->bit); return APR_SUCCESS; } pwt++; } return APR_EINVAL; } PROXY_DECLARE(char *) ap_proxy_parse_wstatus(apr_pool_t *p, proxy_worker *w) { char *ret = ""; unsigned int status = w->s->status; proxy_wstat_t *pwt = proxy_wstat_tbl; while (pwt->bit) { if (status & pwt->bit) ret = apr_pstrcat(p, ret, pwt->name, NULL); pwt++; } if (!*ret) { ret = "??? "; } if (PROXY_WORKER_IS_USABLE(w)) ret = apr_pstrcat(p, ret, "Ok ", NULL); return ret; } PROXY_DECLARE(apr_status_t) ap_proxy_sync_balancer(proxy_balancer *b, server_rec *s, proxy_server_conf *conf) { proxy_worker **workers; int i; int index; proxy_worker_shared *shm; proxy_balancer_method *lbmethod; ap_slotmem_provider_t *storage = b->storage; if (b->s->wupdated <= b->wupdated) return APR_SUCCESS; /* balancer sync */ lbmethod = ap_lookup_provider(PROXY_LBMETHOD, b->s->lbpname, "0"); if (lbmethod) { b->lbmethod = lbmethod; } else { ap_log_error(APLOG_MARK, APLOG_CRIT, 0, s, APLOGNO(02433) "Cannot find LB Method: %s", b->s->lbpname); return APR_EINVAL; } /* worker sync */ /* * Look thru the list of workers in shm * and see which one(s) we are lacking... * again, the cast to unsigned int is safe * since our upper limit is always max_workers * which is int. */ for (index = 0; index < b->max_workers; index++) { int found; apr_status_t rv; if ((rv = storage->dptr(b->wslot, (unsigned int)index, (void *)&shm)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(00965) "worker slotmem_dptr failed"); return APR_EGENERAL; } /* account for possible "holes" in the slotmem * (eg: slots 0-2 are used, but 3 isn't, but 4-5 is) */ if (!shm->hash.def || !shm->hash.fnv) continue; found = 0; workers = (proxy_worker **)b->workers->elts; for (i = 0; i < b->workers->nelts; i++, workers++) { proxy_worker *worker = *workers; if (worker->hash.def == shm->hash.def && worker->hash.fnv == shm->hash.fnv) { found = 1; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02402) "re-grabbing shm[%d] (0x%pp) for worker: %s", i, (void *)shm, ap_proxy_worker_name(conf->pool, worker)); break; } } if (!found) { proxy_worker **runtime; apr_global_mutex_lock(proxy_mutex); runtime = apr_array_push(b->workers); *runtime = apr_palloc(conf->pool, sizeof(proxy_worker)); apr_global_mutex_unlock(proxy_mutex); (*runtime)->hash = shm->hash; (*runtime)->context = NULL; (*runtime)->cp = NULL; (*runtime)->balancer = b; (*runtime)->s = shm; (*runtime)->tmutex = NULL; rv = ap_proxy_initialize_worker(*runtime, s, conf->pool); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(00966) "Cannot init worker"); return rv; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02403) "grabbing shm[%d] (0x%pp) for worker: %s", i, (void *)shm, (*runtime)->s->name); } } if (b->s->need_reset) { if (b->lbmethod && b->lbmethod->reset) b->lbmethod->reset(b, s); b->s->need_reset = 0; } b->wupdated = b->s->wupdated; return APR_SUCCESS; } PROXY_DECLARE(proxy_worker_shared *) ap_proxy_find_workershm(ap_slotmem_provider_t *storage, ap_slotmem_instance_t *slot, proxy_worker *worker, unsigned int *index) { proxy_worker_shared *shm; unsigned int i, limit; limit = storage->num_slots(slot); for (i = 0; i < limit; i++) { if (storage->dptr(slot, i, (void *)&shm) != APR_SUCCESS) { return NULL; } if ((worker->s->hash.def == shm->hash.def) && (worker->s->hash.fnv == shm->hash.fnv)) { *index = i; return shm; } } return NULL; } PROXY_DECLARE(proxy_balancer_shared *) ap_proxy_find_balancershm(ap_slotmem_provider_t *storage, ap_slotmem_instance_t *slot, proxy_balancer *balancer, unsigned int *index) { proxy_balancer_shared *shm; unsigned int i, limit; limit = storage->num_slots(slot); for (i = 0; i < limit; i++) { if (storage->dptr(slot, i, (void *)&shm) != APR_SUCCESS) { return NULL; } if ((balancer->s->hash.def == shm->hash.def) && (balancer->s->hash.fnv == shm->hash.fnv)) { *index = i; return shm; } } return NULL; } typedef struct header_connection { apr_pool_t *pool; apr_array_header_t *array; const char *first; unsigned int closed:1; } header_connection; static int find_conn_headers(void *data, const char *key, const char *val) { header_connection *x = data; const char *name; do { while (*val == ',' || *val == ';') { val++; } name = ap_get_token(x->pool, &val, 0); if (!strcasecmp(name, "close")) { x->closed = 1; } if (!x->first) { x->first = name; } else { const char **elt; if (!x->array) { x->array = apr_array_make(x->pool, 4, sizeof(char *)); } elt = apr_array_push(x->array); *elt = name; } } while (*val); return 1; } /** * Remove all headers referred to by the Connection header. */ static int ap_proxy_clear_connection(request_rec *r, apr_table_t *headers) { const char **name; header_connection x; x.pool = r->pool; x.array = NULL; x.first = NULL; x.closed = 0; apr_table_unset(headers, "Proxy-Connection"); apr_table_do(find_conn_headers, &x, headers, "Connection", NULL); if (x.first) { /* fast path - no memory allocated for one header */ apr_table_unset(headers, "Connection"); apr_table_unset(headers, x.first); } if (x.array) { /* two or more headers */ while ((name = apr_array_pop(x.array))) { apr_table_unset(headers, *name); } } return x.closed; } PROXY_DECLARE(int) ap_proxy_create_hdrbrgd(apr_pool_t *p, apr_bucket_brigade *header_brigade, request_rec *r, proxy_conn_rec *p_conn, proxy_worker *worker, proxy_server_conf *conf, apr_uri_t *uri, char *url, char *server_portstr, char **old_cl_val, char **old_te_val) { conn_rec *c = r->connection; int counter; char *buf; const apr_array_header_t *headers_in_array; const apr_table_entry_t *headers_in; apr_table_t *saved_headers_in; apr_bucket *e; int do_100_continue; conn_rec *origin = p_conn->connection; proxy_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &proxy_module); /* * To be compliant, we only use 100-Continue for requests with bodies. * We also make sure we won't be talking HTTP/1.0 as well. */ do_100_continue = PROXY_DO_100_CONTINUE(worker, r); if (apr_table_get(r->subprocess_env, "force-proxy-request-1.0")) { /* * According to RFC 2616 8.2.3 we are not allowed to forward an * Expect: 100-continue to an HTTP/1.0 server. Instead we MUST return * a HTTP_EXPECTATION_FAILED */ if (r->expecting_100) { return HTTP_EXPECTATION_FAILED; } buf = apr_pstrcat(p, r->method, " ", url, " HTTP/1.0" CRLF, NULL); p_conn->close = 1; } else { buf = apr_pstrcat(p, r->method, " ", url, " HTTP/1.1" CRLF, NULL); } if (apr_table_get(r->subprocess_env, "proxy-nokeepalive")) { if (origin) { origin->keepalive = AP_CONN_CLOSE; } p_conn->close = 1; } ap_xlate_proto_to_ascii(buf, strlen(buf)); e = apr_bucket_pool_create(buf, strlen(buf), p, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(header_brigade, e); if (dconf->preserve_host == 0) { if (ap_strchr_c(uri->hostname, ':')) { /* if literal IPv6 address */ if (uri->port_str && uri->port != DEFAULT_HTTP_PORT) { buf = apr_pstrcat(p, "Host: [", uri->hostname, "]:", uri->port_str, CRLF, NULL); } else { buf = apr_pstrcat(p, "Host: [", uri->hostname, "]", CRLF, NULL); } } else { if (uri->port_str && uri->port != DEFAULT_HTTP_PORT) { buf = apr_pstrcat(p, "Host: ", uri->hostname, ":", uri->port_str, CRLF, NULL); } else { buf = apr_pstrcat(p, "Host: ", uri->hostname, CRLF, NULL); } } } else { /* don't want to use r->hostname, as the incoming header might have a * port attached */ const char* hostname = apr_table_get(r->headers_in,"Host"); if (!hostname) { hostname = r->server->server_hostname; ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01092) "no HTTP 0.9 request (with no host line) " "on incoming request and preserve host set " "forcing hostname to be %s for uri %s", hostname, r->uri); } buf = apr_pstrcat(p, "Host: ", hostname, CRLF, NULL); } ap_xlate_proto_to_ascii(buf, strlen(buf)); e = apr_bucket_pool_create(buf, strlen(buf), p, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(header_brigade, e); /* * Save the original headers in here and restore them when leaving, since * we will apply proxy purpose only modifications (eg. clearing hop-by-hop * headers, add Via or X-Forwarded-* or Expect...), whereas the originals * will be needed later to prepare the correct response and logging. * * Note: We need to take r->pool for apr_table_copy as the key / value * pairs in r->headers_in have been created out of r->pool and * p might be (and actually is) a longer living pool. * This would trigger the bad pool ancestry abort in apr_table_copy if * apr is compiled with APR_POOL_DEBUG. */ saved_headers_in = r->headers_in; r->headers_in = apr_table_copy(r->pool, saved_headers_in); /* handle Via */ if (conf->viaopt == via_block) { /* Block all outgoing Via: headers */ apr_table_unset(r->headers_in, "Via"); } else if (conf->viaopt != via_off) { const char *server_name = ap_get_server_name(r); /* If USE_CANONICAL_NAME_OFF was configured for the proxy virtual host, * then the server name returned by ap_get_server_name() is the * origin server name (which does make too much sense with Via: headers) * so we use the proxy vhost's name instead. */ if (server_name == r->hostname) server_name = r->server->server_hostname; /* Create a "Via:" request header entry and merge it */ /* Generate outgoing Via: header with/without server comment: */ apr_table_mergen(r->headers_in, "Via", (conf->viaopt == via_full) ? apr_psprintf(p, "%d.%d %s%s (%s)", HTTP_VERSION_MAJOR(r->proto_num), HTTP_VERSION_MINOR(r->proto_num), server_name, server_portstr, AP_SERVER_BASEVERSION) : apr_psprintf(p, "%d.%d %s%s", HTTP_VERSION_MAJOR(r->proto_num), HTTP_VERSION_MINOR(r->proto_num), server_name, server_portstr) ); } /* Use HTTP/1.1 100-Continue as quick "HTTP ping" test * to backend */ if (do_100_continue) { const char *val; /* Add the Expect header if not already there. */ if (((val = apr_table_get(r->headers_in, "Expect")) == NULL) || (strcasecmp(val, "100-Continue") != 0 /* fast path */ && !ap_find_token(r->pool, val, "100-Continue"))) { apr_table_mergen(r->headers_in, "Expect", "100-Continue"); } } /* X-Forwarded-*: handling * * XXX Privacy Note: * ----------------- * * These request headers are only really useful when the mod_proxy * is used in a reverse proxy configuration, so that useful info * about the client can be passed through the reverse proxy and on * to the backend server, which may require the information to * function properly. * * In a forward proxy situation, these options are a potential * privacy violation, as information about clients behind the proxy * are revealed to arbitrary servers out there on the internet. * * The HTTP/1.1 Via: header is designed for passing client * information through proxies to a server, and should be used in * a forward proxy configuration instead of X-Forwarded-*. See the * ProxyVia option for details. */ if (dconf->add_forwarded_headers) { if (PROXYREQ_REVERSE == r->proxyreq) { const char *buf; /* Add X-Forwarded-For: so that the upstream has a chance to * determine, where the original request came from. */ apr_table_mergen(r->headers_in, "X-Forwarded-For", r->useragent_ip); /* Add X-Forwarded-Host: so that upstream knows what the * original request hostname was. */ if ((buf = apr_table_get(r->headers_in, "Host"))) { apr_table_mergen(r->headers_in, "X-Forwarded-Host", buf); } /* Add X-Forwarded-Server: so that upstream knows what the * name of this proxy server is (if there are more than one) * XXX: This duplicates Via: - do we strictly need it? */ apr_table_mergen(r->headers_in, "X-Forwarded-Server", r->server->server_hostname); } } proxy_run_fixups(r); if (ap_proxy_clear_connection(r, r->headers_in) < 0) { return HTTP_BAD_REQUEST; } /* send request headers */ headers_in_array = apr_table_elts(r->headers_in); headers_in = (const apr_table_entry_t *) headers_in_array->elts; for (counter = 0; counter < headers_in_array->nelts; counter++) { if (headers_in[counter].key == NULL || headers_in[counter].val == NULL /* Already sent */ || !strcasecmp(headers_in[counter].key, "Host") /* Clear out hop-by-hop request headers not to send * RFC2616 13.5.1 says we should strip these headers */ || !strcasecmp(headers_in[counter].key, "Keep-Alive") || !strcasecmp(headers_in[counter].key, "TE") || !strcasecmp(headers_in[counter].key, "Trailer") || !strcasecmp(headers_in[counter].key, "Upgrade") ) { continue; } /* Do we want to strip Proxy-Authorization ? * If we haven't used it, then NO * If we have used it then MAYBE: RFC2616 says we MAY propagate it. * So let's make it configurable by env. */ if (!strcasecmp(headers_in[counter].key,"Proxy-Authorization")) { if (r->user != NULL) { /* we've authenticated */ if (!apr_table_get(r->subprocess_env, "Proxy-Chain-Auth")) { continue; } } } /* Skip Transfer-Encoding and Content-Length for now. */ if (!strcasecmp(headers_in[counter].key, "Transfer-Encoding")) { *old_te_val = headers_in[counter].val; continue; } if (!strcasecmp(headers_in[counter].key, "Content-Length")) { *old_cl_val = headers_in[counter].val; continue; } /* for sub-requests, ignore freshness/expiry headers */ if (r->main) { if ( !strcasecmp(headers_in[counter].key, "If-Match") || !strcasecmp(headers_in[counter].key, "If-Modified-Since") || !strcasecmp(headers_in[counter].key, "If-Range") || !strcasecmp(headers_in[counter].key, "If-Unmodified-Since") || !strcasecmp(headers_in[counter].key, "If-None-Match")) { continue; } } buf = apr_pstrcat(p, headers_in[counter].key, ": ", headers_in[counter].val, CRLF, NULL); ap_xlate_proto_to_ascii(buf, strlen(buf)); e = apr_bucket_pool_create(buf, strlen(buf), p, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(header_brigade, e); } /* Restore the original headers in (see comment above), * we won't modify them anymore. */ r->headers_in = saved_headers_in; return OK; } PROXY_DECLARE(int) ap_proxy_pass_brigade(apr_bucket_alloc_t *bucket_alloc, request_rec *r, proxy_conn_rec *p_conn, conn_rec *origin, apr_bucket_brigade *bb, int flush) { apr_status_t status; apr_off_t transferred; if (flush) { apr_bucket *e = apr_bucket_flush_create(bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); } apr_brigade_length(bb, 0, &transferred); if (transferred != -1) p_conn->worker->s->transferred += transferred; status = ap_pass_brigade(origin->output_filters, bb); /* Cleanup the brigade now to avoid buckets lifetime * issues in case of error returned below. */ apr_brigade_cleanup(bb); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01084) "pass request body failed to %pI (%s)", p_conn->addr, p_conn->hostname); if (origin->aborted) { const char *ssl_note; if (((ssl_note = apr_table_get(origin->notes, "SSL_connect_rv")) != NULL) && (strcmp(ssl_note, "err") == 0)) { return ap_proxyerror(r, HTTP_INTERNAL_SERVER_ERROR, "Error during SSL Handshake with" " remote server"); } return APR_STATUS_IS_TIMEUP(status) ? HTTP_GATEWAY_TIME_OUT : HTTP_BAD_GATEWAY; } else { return HTTP_BAD_REQUEST; } } return OK; } /* Fill in unknown schemes from apr_uri_port_of_scheme() */ typedef struct proxy_schemes_t { const char *name; apr_port_t default_port; } proxy_schemes_t ; static proxy_schemes_t pschemes[] = { {"fcgi", 8000}, {"ajp", AJP13_DEF_PORT}, {"scgi", SCGI_DEF_PORT}, {"h2c", DEFAULT_HTTP_PORT}, {"h2", DEFAULT_HTTPS_PORT}, {"ws", DEFAULT_HTTP_PORT}, {"wss", DEFAULT_HTTPS_PORT}, { NULL, 0xFFFF } /* unknown port */ }; PROXY_DECLARE(apr_port_t) ap_proxy_port_of_scheme(const char *scheme) { if (scheme) { apr_port_t port; if ((port = apr_uri_port_of_scheme(scheme)) != 0) { return port; } else { proxy_schemes_t *pscheme; for (pscheme = pschemes; pscheme->name != NULL; ++pscheme) { if (strcasecmp(scheme, pscheme->name) == 0) { return pscheme->default_port; } } } } return 0; } PROXY_DECLARE(apr_status_t) ap_proxy_buckets_lifetime_transform(request_rec *r, apr_bucket_brigade *from, apr_bucket_brigade *to) { apr_bucket *e; apr_bucket *new; const char *data; apr_size_t bytes; apr_status_t rv = APR_SUCCESS; apr_bucket_alloc_t *bucket_alloc = to->bucket_alloc; apr_brigade_cleanup(to); for (e = APR_BRIGADE_FIRST(from); e != APR_BRIGADE_SENTINEL(from); e = APR_BUCKET_NEXT(e)) { if (!APR_BUCKET_IS_METADATA(e)) { apr_bucket_read(e, &data, &bytes, APR_BLOCK_READ); new = apr_bucket_transient_create(data, bytes, bucket_alloc); APR_BRIGADE_INSERT_TAIL(to, new); } else if (APR_BUCKET_IS_FLUSH(e)) { new = apr_bucket_flush_create(bucket_alloc); APR_BRIGADE_INSERT_TAIL(to, new); } else if (APR_BUCKET_IS_EOS(e)) { new = apr_bucket_eos_create(bucket_alloc); APR_BRIGADE_INSERT_TAIL(to, new); } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(03304) "Unhandled bucket type of type %s in" " ap_proxy_buckets_lifetime_transform", e->type->name); rv = APR_EGENERAL; } } return rv; } PROXY_DECLARE(apr_status_t) ap_proxy_transfer_between_connections( request_rec *r, conn_rec *c_i, conn_rec *c_o, apr_bucket_brigade *bb_i, apr_bucket_brigade *bb_o, const char *name, int *sent, apr_off_t bsize, int after) { apr_status_t rv; #ifdef DEBUGGING apr_off_t len; #endif do { apr_brigade_cleanup(bb_i); rv = ap_get_brigade(c_i->input_filters, bb_i, AP_MODE_READBYTES, APR_NONBLOCK_READ, bsize); if (rv == APR_SUCCESS) { if (c_o->aborted) { return APR_EPIPE; } if (APR_BRIGADE_EMPTY(bb_i)) { break; } #ifdef DEBUGGING len = -1; apr_brigade_length(bb_i, 0, &len); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(03306) "ap_proxy_transfer_between_connections: " "read %" APR_OFF_T_FMT " bytes from %s", len, name); #endif if (sent) { *sent = 1; } ap_proxy_buckets_lifetime_transform(r, bb_i, bb_o); if (!after) { apr_bucket *b; /* * Do not use ap_fflush here since this would cause the flush * bucket to be sent in a separate brigade afterwards which * causes some filters to set aside the buckets from the first * brigade and process them when the flush arrives in the second * brigade. As set asides of our transformed buckets involve * memory copying we try to avoid this. If we have the flush * bucket in the first brigade they directly process the * buckets without setting them aside. */ b = apr_bucket_flush_create(bb_o->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb_o, b); } rv = ap_pass_brigade(c_o->output_filters, bb_o); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(03307) "ap_proxy_transfer_between_connections: " "error on %s - ap_pass_brigade", name); } } else if (!APR_STATUS_IS_EAGAIN(rv) && !APR_STATUS_IS_EOF(rv)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(03308) "ap_proxy_transfer_between_connections: " "error on %s - ap_get_brigade", name); } } while (rv == APR_SUCCESS); if (after) { ap_fflush(c_o->output_filters, bb_o); } ap_log_rerror(APLOG_MARK, APLOG_TRACE2, rv, r, "ap_proxy_transfer_between_connections complete"); if (APR_STATUS_IS_EAGAIN(rv)) { rv = APR_SUCCESS; } return rv; } PROXY_DECLARE (const char *) ap_proxy_show_hcmethod(hcmethod_t method) { proxy_hcmethods_t *m = proxy_hcmethods; for (; m->name; m++) { if (m->method == method) { return m->name; } } return "???"; } void proxy_util_register_hooks(apr_pool_t *p) { APR_REGISTER_OPTIONAL_FN(ap_proxy_retry_worker); APR_REGISTER_OPTIONAL_FN(ap_proxy_clear_connection); APR_REGISTER_OPTIONAL_FN(proxy_balancer_get_best_worker); } httpd-2.4.41/modules/proxy/mod_proxy.c0000644000000000000500000034417413523017366016274 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_proxy.h" #include "mod_core.h" #include "apr_optional.h" #include "scoreboard.h" #include "mod_status.h" #include "proxy_util.h" #if (MODULE_MAGIC_NUMBER_MAJOR > 20020903) #include "mod_ssl.h" #else APR_DECLARE_OPTIONAL_FN(int, ssl_proxy_enable, (conn_rec *)); APR_DECLARE_OPTIONAL_FN(int, ssl_engine_disable, (conn_rec *)); APR_DECLARE_OPTIONAL_FN(int, ssl_engine_set, (conn_rec *, ap_conf_vector_t *, int proxy, int enable)); APR_DECLARE_OPTIONAL_FN(int, ssl_is_https, (conn_rec *)); APR_DECLARE_OPTIONAL_FN(char *, ssl_var_lookup, (apr_pool_t *, server_rec *, conn_rec *, request_rec *, char *)); #endif #ifndef MAX #define MAX(x,y) ((x) >= (y) ? (x) : (y)) #endif /* * We do health-checks only if that (sub)module is loaded in. This * allows for us to continue as is w/o requiring mod_watchdog for * those implementations which aren't using health checks */ static APR_OPTIONAL_FN_TYPE(set_worker_hc_param) *set_worker_hc_param_f = NULL; /* Externals */ proxy_hcmethods_t PROXY_DECLARE_DATA proxy_hcmethods[] = { {NONE, "NONE", 1}, {TCP, "TCP", 1}, {OPTIONS, "OPTIONS", 1}, {HEAD, "HEAD", 1}, {GET, "GET", 1}, {CPING, "CPING", 0}, {PROVIDER, "PROVIDER", 0}, {EOT, NULL, 1} }; proxy_wstat_t PROXY_DECLARE_DATA proxy_wstat_tbl[] = { {PROXY_WORKER_INITIALIZED, PROXY_WORKER_INITIALIZED_FLAG, "Init "}, {PROXY_WORKER_IGNORE_ERRORS, PROXY_WORKER_IGNORE_ERRORS_FLAG, "Ign "}, {PROXY_WORKER_DRAIN, PROXY_WORKER_DRAIN_FLAG, "Drn "}, {PROXY_WORKER_GENERIC, PROXY_WORKER_GENERIC_FLAG, "Gen "}, {PROXY_WORKER_IN_SHUTDOWN, PROXY_WORKER_IN_SHUTDOWN_FLAG, "Shut "}, {PROXY_WORKER_DISABLED, PROXY_WORKER_DISABLED_FLAG, "Dis "}, {PROXY_WORKER_STOPPED, PROXY_WORKER_STOPPED_FLAG, "Stop "}, {PROXY_WORKER_IN_ERROR, PROXY_WORKER_IN_ERROR_FLAG, "Err "}, {PROXY_WORKER_HOT_STANDBY, PROXY_WORKER_HOT_STANDBY_FLAG, "Stby "}, {PROXY_WORKER_HOT_SPARE, PROXY_WORKER_HOT_SPARE_FLAG, "Spar "}, {PROXY_WORKER_FREE, PROXY_WORKER_FREE_FLAG, "Free "}, {PROXY_WORKER_HC_FAIL, PROXY_WORKER_HC_FAIL_FLAG, "HcFl "}, {0x0, '\0', NULL} }; static const char * const proxy_id = "proxy"; apr_global_mutex_t *proxy_mutex = NULL; /* * A Web proxy module. Stages: * * translate_name: set filename to proxy: * map_to_storage: run proxy_walk (rather than directory_walk/file_walk) * can't trust directory_walk/file_walk since these are * not in our filesystem. Prevents mod_http from serving * the TRACE request we will set aside to handle later. * fix_ups: convert the URL stored in the filename to the * canonical form. * handler: handle proxy requests */ /* -------------------------------------------------------------- */ /* Translate the URL into a 'filename' */ static const char *set_worker_param(apr_pool_t *p, server_rec *s, proxy_worker *worker, const char *key, const char *val) { int ival; apr_interval_time_t timeout; if (!strcasecmp(key, "loadfactor")) { /* Normalized load factor. Used with BalancerMember, * it is a number between 1 and 100. */ double fval = atof(val); ival = fval * 100.0; if (ival < 100 || ival > 10000) return "LoadFactor must be a number between 1..100"; worker->s->lbfactor = ival; } else if (!strcasecmp(key, "retry")) { /* If set it will give the retry timeout for the worker * The default value is 60 seconds, meaning that if * in error state, it will be retried after that timeout. */ ival = atoi(val); if (ival < 0) return "Retry must be a positive value"; worker->s->retry = apr_time_from_sec(ival); worker->s->retry_set = 1; } else if (!strcasecmp(key, "ttl")) { /* Time in seconds that will destroy all the connections * that exceed the smax */ ival = atoi(val); if (ival < 1) return "TTL must be at least one second"; worker->s->ttl = apr_time_from_sec(ival); } else if (!strcasecmp(key, "min")) { /* Initial number of connections to remote */ ival = atoi(val); if (ival < 0) return "Min must be a positive number"; worker->s->min = ival; } else if (!strcasecmp(key, "max")) { /* Maximum number of connections to remote */ ival = atoi(val); if (ival < 0) return "Max must be a positive number"; worker->s->hmax = ival; } /* XXX: More inteligent naming needed */ else if (!strcasecmp(key, "smax")) { /* Maximum number of connections to remote that * will not be destroyed */ ival = atoi(val); if (ival < 0) return "Smax must be a positive number"; worker->s->smax = ival; } else if (!strcasecmp(key, "acquire")) { /* Acquire timeout in given unit (default is milliseconds). * If set this will be the maximum time to * wait for a free connection. */ if (ap_timeout_parameter_parse(val, &timeout, "ms") != APR_SUCCESS) return "Acquire timeout has wrong format"; if (timeout < 1000) return "Acquire must be at least one millisecond"; worker->s->acquire = timeout; worker->s->acquire_set = 1; } else if (!strcasecmp(key, "timeout")) { /* Connection timeout in seconds. * Defaults to server timeout. */ ival = atoi(val); if (ival < 1) return "Timeout must be at least one second"; worker->s->timeout = apr_time_from_sec(ival); worker->s->timeout_set = 1; } else if (!strcasecmp(key, "iobuffersize")) { long s = atol(val); if (s < 512 && s) { return "IOBufferSize must be >= 512 bytes, or 0 for system default."; } worker->s->io_buffer_size = (s ? s : AP_IOBUFSIZE); worker->s->io_buffer_size_set = 1; } else if (!strcasecmp(key, "receivebuffersize")) { ival = atoi(val); if (ival < 512 && ival != 0) { return "ReceiveBufferSize must be >= 512 bytes, or 0 for system default."; } worker->s->recv_buffer_size = ival; worker->s->recv_buffer_size_set = 1; } else if (!strcasecmp(key, "keepalive")) { if (!strcasecmp(val, "on")) worker->s->keepalive = 1; else if (!strcasecmp(val, "off")) worker->s->keepalive = 0; else return "KeepAlive must be On|Off"; worker->s->keepalive_set = 1; } else if (!strcasecmp(key, "disablereuse")) { if (!strcasecmp(val, "on")) worker->s->disablereuse = 1; else if (!strcasecmp(val, "off")) worker->s->disablereuse = 0; else return "DisableReuse must be On|Off"; worker->s->disablereuse_set = 1; } else if (!strcasecmp(key, "enablereuse")) { if (!strcasecmp(val, "on")) worker->s->disablereuse = 0; else if (!strcasecmp(val, "off")) worker->s->disablereuse = 1; else return "EnableReuse must be On|Off"; worker->s->disablereuse_set = 1; } else if (!strcasecmp(key, "route")) { /* Worker route. */ if (strlen(val) >= sizeof(worker->s->route)) return apr_psprintf(p, "Route length must be < %d characters", (int)sizeof(worker->s->route)); PROXY_STRNCPY(worker->s->route, val); } else if (!strcasecmp(key, "redirect")) { /* Worker redirection route. */ if (strlen(val) >= sizeof(worker->s->redirect)) return apr_psprintf(p, "Redirect length must be < %d characters", (int)sizeof(worker->s->redirect)); PROXY_STRNCPY(worker->s->redirect, val); } else if (!strcasecmp(key, "status")) { const char *v; int mode = 1; apr_status_t rv; /* Worker status. */ for (v = val; *v; v++) { if (*v == '+') { mode = 1; v++; } else if (*v == '-') { mode = 0; v++; } rv = ap_proxy_set_wstatus(*v, mode, worker); if (rv != APR_SUCCESS) return "Unknown status parameter option"; } } else if (!strcasecmp(key, "flushpackets")) { if (!strcasecmp(val, "on")) worker->s->flush_packets = flush_on; else if (!strcasecmp(val, "off")) worker->s->flush_packets = flush_off; else if (!strcasecmp(val, "auto")) worker->s->flush_packets = flush_auto; else return "flushpackets must be on|off|auto"; } else if (!strcasecmp(key, "flushwait")) { ival = atoi(val); if (ival > 1000 || ival < 0) { return "flushwait must be <= 1000, or 0 for system default of 10 millseconds."; } if (ival == 0) worker->s->flush_wait = PROXY_FLUSH_WAIT; else worker->s->flush_wait = ival * 1000; /* change to microseconds */ } else if (!strcasecmp(key, "ping")) { /* Ping/Pong timeout in given unit (default is second). */ if (ap_timeout_parameter_parse(val, &timeout, "s") != APR_SUCCESS) return "Ping/Pong timeout has wrong format"; if (timeout < 1000) return "Ping/Pong timeout must be at least one millisecond"; worker->s->ping_timeout = timeout; worker->s->ping_timeout_set = 1; } else if (!strcasecmp(key, "lbset")) { ival = atoi(val); if (ival < 0 || ival > 99) return "lbset must be between 0 and 99"; worker->s->lbset = ival; } else if (!strcasecmp(key, "connectiontimeout")) { /* Request timeout in given unit (default is second). * Defaults to connection timeout */ if (ap_timeout_parameter_parse(val, &timeout, "s") != APR_SUCCESS) return "Connectiontimeout has wrong format"; if (timeout < 1000) return "Connectiontimeout must be at least one millisecond."; worker->s->conn_timeout = timeout; worker->s->conn_timeout_set = 1; } else if (!strcasecmp(key, "flusher")) { if (strlen(val) >= sizeof(worker->s->flusher)) apr_psprintf(p, "flusher name length must be < %d characters", (int)sizeof(worker->s->flusher)); PROXY_STRNCPY(worker->s->flusher, val); } else if (!strcasecmp(key, "upgrade")) { if (PROXY_STRNCPY(worker->s->upgrade, val) != APR_SUCCESS) { return apr_psprintf(p, "upgrade protocol length must be < %d characters", (int)sizeof(worker->s->upgrade)); } } else if (!strcasecmp(key, "responsefieldsize")) { long s = atol(val); if (s < 0) { return "ResponseFieldSize must be greater than 0 bytes, or 0 for system default."; } worker->s->response_field_size = (s ? s : HUGE_STRING_LEN); worker->s->response_field_size_set = 1; } else { if (set_worker_hc_param_f) { return set_worker_hc_param_f(p, s, worker, key, val, NULL); } else { return "unknown Worker parameter"; } } return NULL; } static const char *set_balancer_param(proxy_server_conf *conf, apr_pool_t *p, proxy_balancer *balancer, const char *key, const char *val) { int ival; if (!strcasecmp(key, "stickysession")) { char *path; /* Balancer sticky session name. * Set to something like JSESSIONID or * PHPSESSIONID, etc.., */ if (strlen(val) >= sizeof(balancer->s->sticky_path)) apr_psprintf(p, "stickysession length must be < %d characters", (int)sizeof(balancer->s->sticky_path)); PROXY_STRNCPY(balancer->s->sticky_path, val); PROXY_STRNCPY(balancer->s->sticky, val); if ((path = strchr((char *)balancer->s->sticky, '|'))) { *path++ = '\0'; PROXY_STRNCPY(balancer->s->sticky_path, path); } } else if (!strcasecmp(key, "stickysessionsep")) { /* separator/delimiter for sessionid and route, * normally '.' */ if (strlen(val) != 1) { if (!strcasecmp(val, "off")) balancer->s->sticky_separator = 0; else return "stickysessionsep must be a single character or Off"; } else balancer->s->sticky_separator = *val; balancer->s->sticky_separator_set = 1; } else if (!strcasecmp(key, "nofailover")) { /* If set to 'on' the session will break * if the worker is in error state or * disabled. */ if (!strcasecmp(val, "on")) balancer->s->sticky_force = 1; else if (!strcasecmp(val, "off")) balancer->s->sticky_force = 0; else return "failover must be On|Off"; balancer->s->sticky_force_set = 1; } else if (!strcasecmp(key, "timeout")) { /* Balancer timeout in seconds. * If set this will be the maximum time to * wait for a free worker. * Default is not to wait. */ ival = atoi(val); if (ival < 1) return "timeout must be at least one second"; balancer->s->timeout = apr_time_from_sec(ival); } else if (!strcasecmp(key, "maxattempts")) { /* Maximum number of failover attempts before * giving up. */ ival = atoi(val); if (ival < 0) return "maximum number of attempts must be a positive number"; balancer->s->max_attempts = ival; balancer->s->max_attempts_set = 1; } else if (!strcasecmp(key, "lbmethod")) { proxy_balancer_method *provider; if (strlen(val) > (sizeof(balancer->s->lbpname)-1)) return "unknown lbmethod"; provider = ap_lookup_provider(PROXY_LBMETHOD, val, "0"); if (provider) { balancer->lbmethod = provider; if (PROXY_STRNCPY(balancer->s->lbpname, val) == APR_SUCCESS) { balancer->lbmethod_set = 1; return NULL; } else { return "lbmethod name too large"; } } return "unknown lbmethod"; } else if (!strcasecmp(key, "scolonpathdelim")) { /* If set to 'on' then ';' will also be * used as a session path separator/delim (ala * mod_jk) */ if (!strcasecmp(val, "on")) balancer->s->scolonsep = 1; else if (!strcasecmp(val, "off")) balancer->s->scolonsep = 0; else return "scolonpathdelim must be On|Off"; balancer->s->scolonsep_set = 1; } else if (!strcasecmp(key, "failonstatus")) { char *val_split; char *status; char *tok_state; val_split = apr_pstrdup(p, val); balancer->errstatuses = apr_array_make(p, 1, sizeof(int)); status = apr_strtok(val_split, ", ", &tok_state); while (status != NULL) { ival = atoi(status); if (ap_is_HTTP_VALID_RESPONSE(ival)) { *(int *)apr_array_push(balancer->errstatuses) = ival; } else { return "failonstatus must be one or more HTTP response codes"; } status = apr_strtok(NULL, ", ", &tok_state); } } else if (!strcasecmp(key, "failontimeout")) { if (!strcasecmp(val, "on")) balancer->failontimeout = 1; else if (!strcasecmp(val, "off")) balancer->failontimeout = 0; else return "failontimeout must be On|Off"; balancer->failontimeout_set = 1; } else if (!strcasecmp(key, "nonce")) { if (!strcasecmp(val, "None")) { *balancer->s->nonce = '\0'; } else { if (PROXY_STRNCPY(balancer->s->nonce, val) != APR_SUCCESS) { return "Provided nonce is too large"; } } balancer->s->nonce_set = 1; } else if (!strcasecmp(key, "growth")) { ival = atoi(val); if (ival < 1 || ival > 100) /* arbitrary limit here */ return "growth must be between 1 and 100"; balancer->growth = ival; balancer->growth_set = 1; } else if (!strcasecmp(key, "forcerecovery")) { if (!strcasecmp(val, "on")) balancer->s->forcerecovery = 1; else if (!strcasecmp(val, "off")) balancer->s->forcerecovery = 0; else return "forcerecovery must be On|Off"; balancer->s->forcerecovery_set = 1; } else { return "unknown Balancer parameter"; } return NULL; } static int alias_match(const char *uri, const char *alias_fakename) { const char *end_fakename = alias_fakename + strlen(alias_fakename); const char *aliasp = alias_fakename, *urip = uri; const char *end_uri = uri + strlen(uri); while (aliasp < end_fakename && urip < end_uri) { if (*aliasp == '/') { /* any number of '/' in the alias matches any number in * the supplied URI, but there must be at least one... */ if (*urip != '/') return 0; while (*aliasp == '/') ++aliasp; while (*urip == '/') ++urip; } else { /* Other characters are compared literally */ if (*urip++ != *aliasp++) return 0; } } /* fixup badly encoded stuff (e.g. % as last character) */ if (aliasp > end_fakename) { aliasp = end_fakename; } if (urip > end_uri) { urip = end_uri; } /* We reach the end of the uri before the end of "alias_fakename" * for example uri is "/" and alias_fakename "/examples" */ if (urip == end_uri && aliasp != end_fakename) { return 0; } /* Check last alias path component matched all the way */ if (aliasp[-1] != '/' && *urip != '\0' && *urip != '/') return 0; /* Return number of characters from URI which matched (may be * greater than length of alias, since we may have matched * doubled slashes) */ return urip - uri; } /* Detect if an absoluteURI should be proxied or not. Note that we * have to do this during this phase because later phases are * "short-circuiting"... i.e. translate_names will end when the first * module returns OK. So for example, if the request is something like: * * GET http://othervhost/cgi-bin/printenv HTTP/1.0 * * mod_alias will notice the /cgi-bin part and ScriptAlias it and * short-circuit the proxy... just because of the ordering in the * configuration file. */ static int proxy_detect(request_rec *r) { void *sconf = r->server->module_config; proxy_server_conf *conf = (proxy_server_conf *) ap_get_module_config(sconf, &proxy_module); /* Ick... msvc (perhaps others) promotes ternary short results to int */ if (conf->req && r->parsed_uri.scheme) { /* but it might be something vhosted */ if (!(r->parsed_uri.hostname && !strcasecmp(r->parsed_uri.scheme, ap_http_scheme(r)) && ap_matches_request_vhost(r, r->parsed_uri.hostname, (apr_port_t)(r->parsed_uri.port_str ? r->parsed_uri.port : ap_default_port(r))))) { r->proxyreq = PROXYREQ_PROXY; r->uri = r->unparsed_uri; r->filename = apr_pstrcat(r->pool, "proxy:", r->uri, NULL); r->handler = "proxy-server"; } } /* We need special treatment for CONNECT proxying: it has no scheme part */ else if (conf->req && r->method_number == M_CONNECT && r->parsed_uri.hostname && r->parsed_uri.port_str) { r->proxyreq = PROXYREQ_PROXY; r->uri = r->unparsed_uri; r->filename = apr_pstrcat(r->pool, "proxy:", r->uri, NULL); r->handler = "proxy-server"; } return DECLINED; } static const char *proxy_interpolate(request_rec *r, const char *str) { /* Interpolate an env str in a configuration string * Syntax ${var} --> value_of(var) * Method: replace one var, and recurse on remainder of string * Nothing clever here, and crap like nested vars may do silly things * but we'll at least avoid sending the unwary into a loop */ const char *start; const char *end; const char *var; const char *val; const char *firstpart; start = ap_strstr_c(str, "${"); if (start == NULL) { return str; } end = ap_strchr_c(start+2, '}'); if (end == NULL) { return str; } /* OK, this is syntax we want to interpolate. Is there such a var ? */ var = apr_pstrmemdup(r->pool, start+2, end-(start+2)); val = apr_table_get(r->subprocess_env, var); firstpart = apr_pstrmemdup(r->pool, str, (start-str)); if (val == NULL) { return apr_pstrcat(r->pool, firstpart, proxy_interpolate(r, end+1), NULL); } else { return apr_pstrcat(r->pool, firstpart, val, proxy_interpolate(r, end+1), NULL); } } static apr_array_header_t *proxy_vars(request_rec *r, apr_array_header_t *hdr) { int i; apr_array_header_t *ret = apr_array_make(r->pool, hdr->nelts, sizeof (struct proxy_alias)); struct proxy_alias *old = (struct proxy_alias *) hdr->elts; for (i = 0; i < hdr->nelts; ++i) { struct proxy_alias *newcopy = apr_array_push(ret); newcopy->fake = (old[i].flags & PROXYPASS_INTERPOLATE) ? proxy_interpolate(r, old[i].fake) : old[i].fake; newcopy->real = (old[i].flags & PROXYPASS_INTERPOLATE) ? proxy_interpolate(r, old[i].real) : old[i].real; } return ret; } PROXY_DECLARE(int) ap_proxy_trans_match(request_rec *r, struct proxy_alias *ent, proxy_dir_conf *dconf) { int len; const char *fake; const char *real; ap_regmatch_t regm[AP_MAX_REG_MATCH]; ap_regmatch_t reg1[AP_MAX_REG_MATCH]; char *found = NULL; int mismatch = 0; unsigned int nocanon = ent->flags & PROXYPASS_NOCANON; const char *use_uri = nocanon ? r->unparsed_uri : r->uri; if (dconf && (dconf->interpolate_env == 1) && (ent->flags & PROXYPASS_INTERPOLATE)) { fake = proxy_interpolate(r, ent->fake); real = proxy_interpolate(r, ent->real); } else { fake = ent->fake; real = ent->real; } ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, APLOGNO(03461) "attempting to match URI path '%s' against %s '%s' for " "proxying", r->uri, (ent->regex ? "pattern" : "prefix"), fake); if (ent->regex) { if (!ap_regexec(ent->regex, r->uri, AP_MAX_REG_MATCH, regm, 0)) { if ((real[0] == '!') && (real[1] == '\0')) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, APLOGNO(03462) "proxying is explicitly disabled for URI path " "'%s'; declining", r->uri); return DECLINED; } /* test that we haven't reduced the URI */ if (nocanon && ap_regexec(ent->regex, r->unparsed_uri, AP_MAX_REG_MATCH, reg1, 0)) { mismatch = 1; use_uri = r->uri; } found = ap_pregsub(r->pool, real, use_uri, AP_MAX_REG_MATCH, (use_uri == r->uri) ? regm : reg1); if (!found) { ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(01135) "Substitution in regular expression failed. " "Replacement too long?"); return HTTP_INTERNAL_SERVER_ERROR; } /* Note: The strcmp() below catches cases where there * was no regex substitution. This is so cases like: * * ProxyPassMatch \.gif balancer://foo * * will work "as expected". The upshot is that the 2 * directives below act the exact same way (ie: $1 is implied): * * ProxyPassMatch ^(/.*\.gif)$ balancer://foo * ProxyPassMatch ^(/.*\.gif)$ balancer://foo$1 * * which may be confusing. */ if (strcmp(found, real) != 0) { found = apr_pstrcat(r->pool, "proxy:", found, NULL); } else { found = apr_pstrcat(r->pool, "proxy:", real, use_uri, NULL); } } } else { len = alias_match(r->uri, fake); if (len != 0) { if ((real[0] == '!') && (real[1] == '\0')) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, APLOGNO(03463) "proxying is explicitly disabled for URI path " "'%s'; declining", r->uri); return DECLINED; } if (nocanon && len != alias_match(r->unparsed_uri, ent->fake)) { mismatch = 1; use_uri = r->uri; } found = apr_pstrcat(r->pool, "proxy:", real, use_uri + len, NULL); } } if (mismatch) { /* We made a reducing transformation, so we can't safely use * unparsed_uri. Safe fallback is to ignore nocanon. */ ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01136) "Unescaped URL path matched ProxyPass; ignoring unsafe nocanon"); } if (found) { r->filename = found; r->handler = "proxy-server"; r->proxyreq = PROXYREQ_REVERSE; if (nocanon && !mismatch) { /* mod_proxy_http needs to be told. Different module. */ apr_table_setn(r->notes, "proxy-nocanon", "1"); } if (ent->flags & PROXYPASS_NOQUERY) { apr_table_setn(r->notes, "proxy-noquery", "1"); } ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, APLOGNO(03464) "URI path '%s' matches proxy handler '%s'", r->uri, found); return OK; } return DONE; } static int proxy_trans(request_rec *r) { int i; struct proxy_alias *ent; proxy_dir_conf *dconf; proxy_server_conf *conf; if (r->proxyreq) { /* someone has already set up the proxy, it was possibly ourselves * in proxy_detect */ return OK; } if ((r->unparsed_uri[0] == '*' && r->unparsed_uri[1] == '\0') || !r->uri || r->uri[0] != '/') { return DECLINED; } if (apr_table_get(r->subprocess_env, "no-proxy")) { return DECLINED; } /* XXX: since r->uri has been manipulated already we're not really * compliant with RFC1945 at this point. But this probably isn't * an issue because this is a hybrid proxy/origin server. */ dconf = ap_get_module_config(r->per_dir_config, &proxy_module); /* short way - this location is reverse proxied? */ if (dconf->alias) { int rv = ap_proxy_trans_match(r, dconf->alias, dconf); if (DONE != rv) { return rv; } } conf = (proxy_server_conf *) ap_get_module_config(r->server->module_config, &proxy_module); /* long way - walk the list of aliases, find a match */ if (conf->aliases->nelts) { ent = (struct proxy_alias *) conf->aliases->elts; for (i = 0; i < conf->aliases->nelts; i++) { int rv = ap_proxy_trans_match(r, &ent[i], dconf); if (DONE != rv) { return rv; } } } return DECLINED; } static int proxy_walk(request_rec *r) { proxy_server_conf *sconf = ap_get_module_config(r->server->module_config, &proxy_module); ap_conf_vector_t *per_dir_defaults = r->per_dir_config; ap_conf_vector_t **sec_proxy = (ap_conf_vector_t **) sconf->sec_proxy->elts; ap_conf_vector_t *entry_config; proxy_dir_conf *entry_proxy; int num_sec = sconf->sec_proxy->nelts; /* XXX: shouldn't we use URI here? Canonicalize it first? * Pass over "proxy:" prefix */ const char *proxyname = r->filename + 6; int j; apr_pool_t *rxpool = NULL; for (j = 0; j < num_sec; ++j) { int nmatch = 0; int i; ap_regmatch_t *pmatch = NULL; entry_config = sec_proxy[j]; entry_proxy = ap_get_module_config(entry_config, &proxy_module); if (entry_proxy->r) { if (entry_proxy->refs && entry_proxy->refs->nelts) { if (!rxpool) { apr_pool_create(&rxpool, r->pool); } nmatch = entry_proxy->refs->nelts; pmatch = apr_palloc(rxpool, nmatch*sizeof(ap_regmatch_t)); } if (ap_regexec(entry_proxy->r, proxyname, nmatch, pmatch, 0)) { continue; } for (i = 0; i < nmatch; i++) { if (pmatch[i].rm_so >= 0 && pmatch[i].rm_eo >= 0 && ((const char **)entry_proxy->refs->elts)[i]) { apr_table_setn(r->subprocess_env, ((const char **)entry_proxy->refs->elts)[i], apr_pstrndup(r->pool, proxyname + pmatch[i].rm_so, pmatch[i].rm_eo - pmatch[i].rm_so)); } } } else if ( /* XXX: What about case insensitive matching ??? * Compare regex, fnmatch or string as appropriate * If the entry doesn't relate, then continue */ entry_proxy->p_is_fnmatch ? apr_fnmatch(entry_proxy->p, proxyname, 0) : strncmp(proxyname, entry_proxy->p, strlen(entry_proxy->p))) { continue; } per_dir_defaults = ap_merge_per_dir_configs(r->pool, per_dir_defaults, entry_config); } r->per_dir_config = per_dir_defaults; if (rxpool) { apr_pool_destroy(rxpool); } return OK; } static int proxy_map_location(request_rec *r) { int access_status; if (!r->proxyreq || !r->filename || strncmp(r->filename, "proxy:", 6) != 0) return DECLINED; /* Don't let the core or mod_http map_to_storage hooks handle this, * We don't need directory/file_walk, and we want to TRACE on our own. */ if ((access_status = proxy_walk(r))) { ap_die(access_status, r); return access_status; } return OK; } /* -------------------------------------------------------------- */ /* Fixup the filename */ /* * Canonicalise the URL */ static int proxy_fixup(request_rec *r) { char *url, *p; int access_status; proxy_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &proxy_module); if (!r->proxyreq || !r->filename || strncmp(r->filename, "proxy:", 6) != 0) return DECLINED; /* XXX: Shouldn't we try this before we run the proxy_walk? */ url = &r->filename[6]; if ((dconf->interpolate_env == 1) && (r->proxyreq == PROXYREQ_REVERSE)) { /* create per-request copy of reverse proxy conf, * and interpolate vars in it */ proxy_req_conf *rconf = apr_palloc(r->pool, sizeof(proxy_req_conf)); ap_set_module_config(r->request_config, &proxy_module, rconf); rconf->raliases = proxy_vars(r, dconf->raliases); rconf->cookie_paths = proxy_vars(r, dconf->cookie_paths); rconf->cookie_domains = proxy_vars(r, dconf->cookie_domains); } /* canonicalise each specific scheme */ if ((access_status = proxy_run_canon_handler(r, url))) { return access_status; } p = strchr(url, ':'); if (p == NULL || p == url) return HTTP_BAD_REQUEST; return OK; /* otherwise; we've done the best we can */ } /* Send a redirection if the request contains a hostname which is not */ /* fully qualified, i.e. doesn't have a domain name appended. Some proxy */ /* servers like Netscape's allow this and access hosts from the local */ /* domain in this case. I think it is better to redirect to a FQDN, since */ /* these will later be found in the bookmarks files. */ /* The "ProxyDomain" directive determines what domain will be appended */ static int proxy_needsdomain(request_rec *r, const char *url, const char *domain) { char *nuri; const char *ref; /* We only want to worry about GETs */ if (!r->proxyreq || r->method_number != M_GET || !r->parsed_uri.hostname) return DECLINED; /* If host does contain a dot already, or it is "localhost", decline */ if (strchr(r->parsed_uri.hostname, '.') != NULL /* has domain, or IPv4 literal */ || strchr(r->parsed_uri.hostname, ':') != NULL /* IPv6 literal */ || strcasecmp(r->parsed_uri.hostname, "localhost") == 0) return DECLINED; /* host name has a dot already */ ref = apr_table_get(r->headers_in, "Referer"); /* Reassemble the request, but insert the domain after the host name */ /* Note that the domain name always starts with a dot */ r->parsed_uri.hostname = apr_pstrcat(r->pool, r->parsed_uri.hostname, domain, NULL); nuri = apr_uri_unparse(r->pool, &r->parsed_uri, APR_URI_UNP_REVEALPASSWORD); apr_table_setn(r->headers_out, "Location", nuri); ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01138) "Domain missing: %s sent to %s%s%s", r->uri, apr_uri_unparse(r->pool, &r->parsed_uri, APR_URI_UNP_OMITUSERINFO), ref ? " from " : "", ref ? ref : ""); return HTTP_MOVED_PERMANENTLY; } /* -------------------------------------------------------------- */ /* Invoke handler */ static int proxy_handler(request_rec *r) { char *uri, *scheme, *p; const char *p2; void *sconf = r->server->module_config; proxy_server_conf *conf = (proxy_server_conf *) ap_get_module_config(sconf, &proxy_module); apr_array_header_t *proxies = conf->proxies; struct proxy_remote *ents = (struct proxy_remote *) proxies->elts; int i, rc, access_status; int direct_connect = 0; const char *str; apr_int64_t maxfwd; proxy_balancer *balancer = NULL; proxy_worker *worker = NULL; int attempts = 0, max_attempts = 0; struct dirconn_entry *list = (struct dirconn_entry *)conf->dirconn->elts; int saved_status; /* is this for us? */ if (!r->filename) { return DECLINED; } if (!r->proxyreq) { /* We may have forced the proxy handler via config or .htaccess */ if (r->handler && strncmp(r->handler, "proxy:", 6) == 0 && strncmp(r->filename, "proxy:", 6) != 0) { r->proxyreq = PROXYREQ_REVERSE; r->filename = apr_pstrcat(r->pool, r->handler, r->filename, NULL); } else { return DECLINED; } } else if (strncmp(r->filename, "proxy:", 6) != 0) { return DECLINED; } /* handle max-forwards / OPTIONS / TRACE */ if ((str = apr_table_get(r->headers_in, "Max-Forwards"))) { char *end; maxfwd = apr_strtoi64(str, &end, 10); if (maxfwd < 0 || maxfwd == APR_INT64_MAX || *end) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(10188) "Max-Forwards value '%s' could not be parsed", str); return ap_proxyerror(r, HTTP_BAD_REQUEST, "Max-Forwards request header could not be parsed"); } else if (maxfwd == 0) { switch (r->method_number) { case M_TRACE: { int access_status; r->proxyreq = PROXYREQ_NONE; access_status = ap_send_http_trace(r); ap_die(access_status, r); return OK; } case M_OPTIONS: { int access_status; r->proxyreq = PROXYREQ_NONE; access_status = ap_send_http_options(r); ap_die(access_status, r); return OK; } default: { return ap_proxyerror(r, HTTP_BAD_REQUEST, "Max-Forwards has reached zero - proxy loop?"); } } } maxfwd = (maxfwd > 0) ? maxfwd - 1 : 0; } else { /* set configured max-forwards */ maxfwd = conf->maxfwd; } if (maxfwd >= 0) { apr_table_setn(r->headers_in, "Max-Forwards", apr_psprintf(r->pool, "%" APR_INT64_T_FMT, maxfwd)); } if (r->method_number == M_TRACE) { core_server_config *coreconf = (core_server_config *) ap_get_core_module_config(sconf); if (coreconf->trace_enable == AP_TRACE_DISABLE) { /* Allow "error-notes" string to be printed by ap_send_error_response() * Note; this goes nowhere, canned error response need an overhaul. */ apr_table_setn(r->notes, "error-notes", "TRACE forbidden by server configuration"); apr_table_setn(r->notes, "verbose-error-to", "*"); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01139) "TRACE forbidden by server configuration"); return HTTP_METHOD_NOT_ALLOWED; } /* Can't test ap_should_client_block, we aren't ready to send * the client a 100 Continue response till the connection has * been established */ if (coreconf->trace_enable != AP_TRACE_EXTENDED && (r->read_length || r->read_chunked || r->remaining)) { /* Allow "error-notes" string to be printed by ap_send_error_response() * Note; this goes nowhere, canned error response need an overhaul. */ apr_table_setn(r->notes, "error-notes", "TRACE with request body is not allowed"); apr_table_setn(r->notes, "verbose-error-to", "*"); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01140) "TRACE with request body is not allowed"); return HTTP_REQUEST_ENTITY_TOO_LARGE; } } uri = r->filename + 6; p = strchr(uri, ':'); if (p == NULL) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01141) "proxy_handler no URL in %s", r->filename); return HTTP_BAD_REQUEST; } /* If the host doesn't have a domain name, add one and redirect. */ if (conf->domain != NULL) { rc = proxy_needsdomain(r, uri, conf->domain); if (ap_is_HTTP_REDIRECT(rc)) return HTTP_MOVED_PERMANENTLY; } scheme = apr_pstrmemdup(r->pool, uri, p - uri); /* Check URI's destination host against NoProxy hosts */ /* Bypass ProxyRemote server lookup if configured as NoProxy */ for (direct_connect = i = 0; i < conf->dirconn->nelts && !direct_connect; i++) { direct_connect = list[i].matcher(&list[i], r); } #if DEBUGGING ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, (direct_connect) ? APLOGNO(03231) "NoProxy for %s" : APLOGNO(03232) "UseProxy for %s", r->uri); #endif do { char *url = uri; /* Try to obtain the most suitable worker */ access_status = ap_proxy_pre_request(&worker, &balancer, r, conf, &url); if (access_status != OK) { /* * Only return if access_status is not HTTP_SERVICE_UNAVAILABLE * This gives other modules the chance to hook into the * request_status hook and decide what to do in this situation. */ if (access_status != HTTP_SERVICE_UNAVAILABLE) return access_status; /* * Ensure that balancer is NULL if worker is NULL to prevent * potential problems in the post_request hook. */ if (!worker) balancer = NULL; goto cleanup; } /* Initialise worker if needed, note the shared area must be initialized by the balancer logic */ if (balancer) { ap_proxy_initialize_worker(worker, r->server, conf->pool); } if (balancer && balancer->s->max_attempts_set && !max_attempts) max_attempts = balancer->s->max_attempts; /* firstly, try a proxy, unless a NoProxy directive is active */ if (!direct_connect) { for (i = 0; i < proxies->nelts; i++) { p2 = ap_strchr_c(ents[i].scheme, ':'); /* is it a partial URL? */ if (strcmp(ents[i].scheme, "*") == 0 || (ents[i].use_regex && ap_regexec(ents[i].regexp, url, 0, NULL, 0) == 0) || (p2 == NULL && strcasecmp(scheme, ents[i].scheme) == 0) || (p2 != NULL && strncasecmp(url, ents[i].scheme, strlen(ents[i].scheme)) == 0)) { /* handle the scheme */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01142) "Trying to run scheme_handler against proxy"); access_status = proxy_run_scheme_handler(r, worker, conf, url, ents[i].hostname, ents[i].port); /* Did the scheme handler process the request? */ if (access_status != DECLINED) { const char *cl_a; char *end; apr_off_t cl; /* * An fatal error or success, so no point in * retrying with a direct connection. */ if (access_status != HTTP_BAD_GATEWAY) { goto cleanup; } cl_a = apr_table_get(r->headers_in, "Content-Length"); if (cl_a) { apr_strtoff(&cl, cl_a, &end, 10); /* * The request body is of length > 0. We cannot * retry with a direct connection since we already * sent (parts of) the request body to the proxy * and do not have any longer. */ if (cl > 0) { goto cleanup; } } /* * Transfer-Encoding was set as input header, so we had * a request body. We cannot retry with a direct * connection for the same reason as above. */ if (apr_table_get(r->headers_in, "Transfer-Encoding")) { goto cleanup; } } } } } /* otherwise, try it direct */ /* N.B. what if we're behind a firewall, where we must use a proxy or * give up?? */ /* handle the scheme */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01143) "Running scheme %s handler (attempt %d)", scheme, attempts); AP_PROXY_RUN(r, worker, conf, url, attempts); access_status = proxy_run_scheme_handler(r, worker, conf, url, NULL, 0); if (access_status == OK || apr_table_get(r->notes, "proxy-error-override")) break; else if (access_status == HTTP_INTERNAL_SERVER_ERROR) { /* Unrecoverable server error. * We can not failover to another worker. * Mark the worker as unusable if member of load balancer */ if (balancer && !(worker->s->status & PROXY_WORKER_IGNORE_ERRORS)) { worker->s->status |= PROXY_WORKER_IN_ERROR; worker->s->error_time = apr_time_now(); } break; } else if (access_status == HTTP_SERVICE_UNAVAILABLE) { /* Recoverable server error. * We can failover to another worker * Mark the worker as unusable if member of load balancer */ if (balancer && !(worker->s->status & PROXY_WORKER_IGNORE_ERRORS)) { worker->s->status |= PROXY_WORKER_IN_ERROR; worker->s->error_time = apr_time_now(); } } else { /* Unrecoverable error. * Return the origin status code to the client. */ break; } /* Try again if the worker is unusable and the service is * unavailable. */ } while (!PROXY_WORKER_IS_USABLE(worker) && max_attempts > attempts++); if (DECLINED == access_status) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01144) "No protocol handler was valid for the URL %s " "(scheme '%s'). " "If you are using a DSO version of mod_proxy, make sure " "the proxy submodules are included in the configuration " "using LoadModule.", r->uri, scheme); access_status = HTTP_INTERNAL_SERVER_ERROR; goto cleanup; } cleanup: /* * Save current r->status and set it to the value of access_status which * might be different (e.g. r->status could be HTTP_OK if e.g. we override * the error page on the proxy or if the error was not generated by the * backend itself but by the proxy e.g. a bad gateway) in order to give * ap_proxy_post_request a chance to act correctly on the status code. * But only do the above if access_status is not OK and not DONE, because * in this case r->status might contain the true status and overwriting * it with OK or DONE would be wrong. */ if ((access_status != OK) && (access_status != DONE)) { saved_status = r->status; r->status = access_status; ap_proxy_post_request(worker, balancer, r, conf); /* * Only restore r->status if it has not been changed by * ap_proxy_post_request as we assume that this change was intentional. */ if (r->status == access_status) { r->status = saved_status; } } else { ap_proxy_post_request(worker, balancer, r, conf); } proxy_run_request_status(&access_status, r); AP_PROXY_RUN_FINISHED(r, attempts, access_status); return access_status; } /* -------------------------------------------------------------- */ /* Setup configurable data */ static void * create_proxy_config(apr_pool_t *p, server_rec *s) { proxy_server_conf *ps = apr_pcalloc(p, sizeof(proxy_server_conf)); ps->sec_proxy = apr_array_make(p, 10, sizeof(ap_conf_vector_t *)); ps->proxies = apr_array_make(p, 10, sizeof(struct proxy_remote)); ps->aliases = apr_array_make(p, 10, sizeof(struct proxy_alias)); ps->noproxies = apr_array_make(p, 10, sizeof(struct noproxy_entry)); ps->dirconn = apr_array_make(p, 10, sizeof(struct dirconn_entry)); ps->workers = apr_array_make(p, 10, sizeof(proxy_worker)); ps->balancers = apr_array_make(p, 10, sizeof(proxy_balancer)); ps->forward = NULL; ps->reverse = NULL; ps->domain = NULL; ps->id = apr_psprintf(p, "p%x", 1); /* simply for storage size */ ps->viaopt = via_off; /* initially backward compatible with 1.3.1 */ ps->viaopt_set = 0; /* 0 means default */ ps->req = 0; ps->max_balancers = 0; ps->bal_persist = 0; ps->inherit = 1; ps->inherit_set = 0; ps->ppinherit = 1; ps->ppinherit_set = 0; ps->bgrowth = 5; ps->bgrowth_set = 0; ps->req_set = 0; ps->recv_buffer_size = 0; /* this default was left unset for some reason */ ps->recv_buffer_size_set = 0; ps->io_buffer_size = AP_IOBUFSIZE; ps->io_buffer_size_set = 0; ps->maxfwd = DEFAULT_MAX_FORWARDS; ps->maxfwd_set = 0; ps->timeout = 0; ps->timeout_set = 0; ps->badopt = bad_error; ps->badopt_set = 0; ps->source_address = NULL; ps->source_address_set = 0; apr_pool_create_ex(&ps->pool, p, NULL, NULL); return ps; } static apr_array_header_t *merge_balancers(apr_pool_t *p, apr_array_header_t *base, apr_array_header_t *overrides) { proxy_balancer *b1; proxy_balancer *b2; proxy_balancer tmp; int x, y, found; apr_array_header_t *tocopy = apr_array_make(p, 1, sizeof(proxy_balancer)); /* Check if the balancer is defined in both override and base configs: * a) If it is, Create copy of base balancer and change the configuration * which can be changed by ProxyPass. * b) Otherwise, copy the balancer to tocopy array and merge it later. */ b1 = (proxy_balancer *) base->elts; for (y = 0; y < base->nelts; y++) { b2 = (proxy_balancer *) overrides->elts; for (x = 0, found = 0; x < overrides->nelts; x++) { if (b1->hash.def == b2->hash.def && b1->hash.fnv == b2->hash.fnv) { tmp = *b2; *b2 = *b1; b2->s = tmp.s; /* For shared memory entries, b2->s belongs to override * balancer, so if some entry is not set there, we have to * update it according to the base balancer. */ if (*b2->s->sticky == 0 && *b1->s->sticky) { PROXY_STRNCPY(b2->s->sticky_path, b1->s->sticky_path); PROXY_STRNCPY(b2->s->sticky, b1->s->sticky); } if (!b2->s->sticky_separator_set && b1->s->sticky_separator_set) { b2->s->sticky_separator_set = b1->s->sticky_separator_set; b2->s->sticky_separator = b1->s->sticky_separator; } if (!b2->s->timeout && b1->s->timeout) { b2->s->timeout = b1->s->timeout; } if (!b2->s->max_attempts_set && b1->s->max_attempts_set) { b2->s->max_attempts_set = b1->s->max_attempts_set; b2->s->max_attempts = b1->s->max_attempts; } if (!b2->s->nonce_set && b1->s->nonce_set) { b2->s->nonce_set = b1->s->nonce_set; PROXY_STRNCPY(b2->s->nonce, b1->s->nonce); } if (!b2->s->sticky_force_set && b1->s->sticky_force_set) { b2->s->sticky_force_set = b1->s->sticky_force_set; b2->s->sticky_force = b1->s->sticky_force; } if (!b2->s->scolonsep_set && b1->s->scolonsep_set) { b2->s->scolonsep_set = b1->s->scolonsep_set; b2->s->scolonsep = b1->s->scolonsep; } if (!b2->s->forcerecovery_set && b1->s->forcerecovery_set) { b2->s->forcerecovery_set = b1->s->forcerecovery_set; b2->s->forcerecovery = b1->s->forcerecovery; } /* For non-shared memory entries, b2 is copy of b1, so we have * to use tmp copy of b1 to detect changes done in override. */ if (tmp.lbmethod_set) { b2->lbmethod_set = tmp.lbmethod_set; b2->lbmethod = tmp.lbmethod; } if (tmp.growth_set) { b2->growth_set = tmp.growth_set; b2->growth = tmp.growth; } if (tmp.failontimeout_set) { b2->failontimeout_set = tmp.failontimeout_set; b2->failontimeout = tmp.failontimeout; } if (!apr_is_empty_array(tmp.errstatuses)) { apr_array_cat(tmp.errstatuses, b2->errstatuses); b2->errstatuses = tmp.errstatuses; } found = 1; break; } b2++; } if (!found) { *(proxy_balancer *)apr_array_push(tocopy) = *b1; } b1++; } return apr_array_append(p, tocopy, overrides); } static void * merge_proxy_config(apr_pool_t *p, void *basev, void *overridesv) { proxy_server_conf *ps = apr_pcalloc(p, sizeof(proxy_server_conf)); proxy_server_conf *base = (proxy_server_conf *) basev; proxy_server_conf *overrides = (proxy_server_conf *) overridesv; ps->inherit = (overrides->inherit_set == 0) ? base->inherit : overrides->inherit; ps->inherit_set = overrides->inherit_set || base->inherit_set; ps->ppinherit = (overrides->ppinherit_set == 0) ? base->ppinherit : overrides->ppinherit; ps->ppinherit_set = overrides->ppinherit_set || base->ppinherit_set; if (ps->ppinherit) { ps->proxies = apr_array_append(p, base->proxies, overrides->proxies); } else { ps->proxies = overrides->proxies; } ps->sec_proxy = apr_array_append(p, base->sec_proxy, overrides->sec_proxy); ps->aliases = apr_array_append(p, base->aliases, overrides->aliases); ps->noproxies = apr_array_append(p, base->noproxies, overrides->noproxies); ps->dirconn = apr_array_append(p, base->dirconn, overrides->dirconn); if (ps->inherit || ps->ppinherit) { ps->workers = apr_array_append(p, base->workers, overrides->workers); ps->balancers = merge_balancers(p, base->balancers, overrides->balancers); } else { ps->workers = overrides->workers; ps->balancers = overrides->balancers; } ps->forward = overrides->forward ? overrides->forward : base->forward; ps->reverse = overrides->reverse ? overrides->reverse : base->reverse; ps->domain = (overrides->domain == NULL) ? base->domain : overrides->domain; ps->id = (overrides->id == NULL) ? base->id : overrides->id; ps->viaopt = (overrides->viaopt_set == 0) ? base->viaopt : overrides->viaopt; ps->viaopt_set = overrides->viaopt_set || base->viaopt_set; ps->req = (overrides->req_set == 0) ? base->req : overrides->req; ps->req_set = overrides->req_set || base->req_set; ps->bgrowth = (overrides->bgrowth_set == 0) ? base->bgrowth : overrides->bgrowth; ps->bgrowth_set = overrides->bgrowth_set || base->bgrowth_set; ps->max_balancers = overrides->max_balancers || base->max_balancers; ps->bal_persist = overrides->bal_persist; ps->recv_buffer_size = (overrides->recv_buffer_size_set == 0) ? base->recv_buffer_size : overrides->recv_buffer_size; ps->recv_buffer_size_set = overrides->recv_buffer_size_set || base->recv_buffer_size_set; ps->io_buffer_size = (overrides->io_buffer_size_set == 0) ? base->io_buffer_size : overrides->io_buffer_size; ps->io_buffer_size_set = overrides->io_buffer_size_set || base->io_buffer_size_set; ps->maxfwd = (overrides->maxfwd_set == 0) ? base->maxfwd : overrides->maxfwd; ps->maxfwd_set = overrides->maxfwd_set || base->maxfwd_set; ps->timeout = (overrides->timeout_set == 0) ? base->timeout : overrides->timeout; ps->timeout_set = overrides->timeout_set || base->timeout_set; ps->badopt = (overrides->badopt_set == 0) ? base->badopt : overrides->badopt; ps->badopt_set = overrides->badopt_set || base->badopt_set; ps->proxy_status = (overrides->proxy_status_set == 0) ? base->proxy_status : overrides->proxy_status; ps->proxy_status_set = overrides->proxy_status_set || base->proxy_status_set; ps->source_address = (overrides->source_address_set == 0) ? base->source_address : overrides->source_address; ps->source_address_set = overrides->source_address_set || base->source_address_set; ps->pool = base->pool; return ps; } static const char *set_source_address(cmd_parms *parms, void *dummy, const char *arg) { proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module); struct apr_sockaddr_t *addr; if (APR_SUCCESS == apr_sockaddr_info_get(&addr, arg, APR_UNSPEC, 0, 0, psf->pool)) { psf->source_address = addr; psf->source_address_set = 1; } else { return "ProxySourceAddress invalid value"; } return NULL; } static void *create_proxy_dir_config(apr_pool_t *p, char *dummy) { proxy_dir_conf *new = (proxy_dir_conf *) apr_pcalloc(p, sizeof(proxy_dir_conf)); /* Filled in by proxysection, when applicable */ /* Put these in the dir config so they work inside */ new->raliases = apr_array_make(p, 10, sizeof(struct proxy_alias)); new->cookie_paths = apr_array_make(p, 10, sizeof(struct proxy_alias)); new->cookie_domains = apr_array_make(p, 10, sizeof(struct proxy_alias)); new->preserve_host_set = 0; new->preserve_host = 0; new->interpolate_env = -1; /* unset */ new->error_override = 0; new->error_override_set = 0; new->add_forwarded_headers = 1; new->add_forwarded_headers_set = 0; new->forward_100_continue = 1; new->forward_100_continue_set = 0; return (void *) new; } static void *merge_proxy_dir_config(apr_pool_t *p, void *basev, void *addv) { proxy_dir_conf *new = (proxy_dir_conf *) apr_pcalloc(p, sizeof(proxy_dir_conf)); proxy_dir_conf *add = (proxy_dir_conf *) addv; proxy_dir_conf *base = (proxy_dir_conf *) basev; new->p = add->p; new->p_is_fnmatch = add->p_is_fnmatch; new->r = add->r; new->refs = add->refs; /* Put these in the dir config so they work inside */ new->raliases = apr_array_append(p, base->raliases, add->raliases); new->cookie_paths = apr_array_append(p, base->cookie_paths, add->cookie_paths); new->cookie_domains = apr_array_append(p, base->cookie_domains, add->cookie_domains); new->interpolate_env = (add->interpolate_env == -1) ? base->interpolate_env : add->interpolate_env; new->preserve_host = (add->preserve_host_set == 0) ? base->preserve_host : add->preserve_host; new->preserve_host_set = add->preserve_host_set || base->preserve_host_set; new->error_override = (add->error_override_set == 0) ? base->error_override : add->error_override; new->error_override_set = add->error_override_set || base->error_override_set; new->alias = (add->alias_set == 0) ? base->alias : add->alias; new->alias_set = add->alias_set || base->alias_set; new->add_forwarded_headers = (add->add_forwarded_headers_set == 0) ? base->add_forwarded_headers : add->add_forwarded_headers; new->add_forwarded_headers_set = add->add_forwarded_headers_set || base->add_forwarded_headers_set; new->forward_100_continue = (add->forward_100_continue_set == 0) ? base->forward_100_continue : add->forward_100_continue; new->forward_100_continue_set = add->forward_100_continue_set || base->forward_100_continue_set; return new; } static const char * add_proxy(cmd_parms *cmd, void *dummy, const char *f1, const char *r1, int regex) { server_rec *s = cmd->server; proxy_server_conf *conf = (proxy_server_conf *) ap_get_module_config(s->module_config, &proxy_module); struct proxy_remote *new; char *p, *q; char *r, *f, *scheme; ap_regex_t *reg = NULL; int port; r = apr_pstrdup(cmd->pool, r1); scheme = apr_pstrdup(cmd->pool, r1); f = apr_pstrdup(cmd->pool, f1); p = strchr(r, ':'); if (p == NULL || p[1] != '/' || p[2] != '/' || p[3] == '\0') { if (regex) return "ProxyRemoteMatch: Bad syntax for a remote proxy server"; else return "ProxyRemote: Bad syntax for a remote proxy server"; } else { scheme[p-r] = 0; } q = strchr(p + 3, ':'); if (q != NULL) { if (sscanf(q + 1, "%u", &port) != 1 || port > 65535) { if (regex) return "ProxyRemoteMatch: Bad syntax for a remote proxy server (bad port number)"; else return "ProxyRemote: Bad syntax for a remote proxy server (bad port number)"; } *q = '\0'; } else port = -1; *p = '\0'; if (regex) { reg = ap_pregcomp(cmd->pool, f, AP_REG_EXTENDED); if (!reg) return "Regular expression for ProxyRemoteMatch could not be compiled."; } else if (strchr(f, ':') == NULL) ap_str_tolower(f); /* lowercase scheme */ ap_str_tolower(p + 3); /* lowercase hostname */ if (port == -1) { port = apr_uri_port_of_scheme(scheme); } new = apr_array_push(conf->proxies); new->scheme = f; new->protocol = r; new->hostname = p + 3; new->port = port; new->regexp = reg; new->use_regex = regex; return NULL; } static const char * add_proxy_noregex(cmd_parms *cmd, void *dummy, const char *f1, const char *r1) { return add_proxy(cmd, dummy, f1, r1, 0); } static const char * add_proxy_regex(cmd_parms *cmd, void *dummy, const char *f1, const char *r1) { return add_proxy(cmd, dummy, f1, r1, 1); } PROXY_DECLARE(const char *) ap_proxy_de_socketfy(apr_pool_t *p, const char *url) { const char *ptr; /* * We could be passed a URL during the config stage that contains * the UDS path... ignore it */ if (!strncasecmp(url, "unix:", 5) && ((ptr = ap_strchr_c(url, '|')) != NULL)) { /* move past the 'unix:...|' UDS path info */ const char *ret, *c; ret = ptr + 1; /* special case: "unix:....|scheme:" is OK, expand * to "unix:....|scheme://localhost" * */ c = ap_strchr_c(ret, ':'); if (c == NULL) { return NULL; } if (c[1] == '\0') { return apr_pstrcat(p, ret, "//localhost", NULL); } else { return ret; } } return url; } static const char * add_pass(cmd_parms *cmd, void *dummy, const char *arg, int is_regex) { proxy_dir_conf *dconf = (proxy_dir_conf *)dummy; server_rec *s = cmd->server; proxy_server_conf *conf = (proxy_server_conf *) ap_get_module_config(s->module_config, &proxy_module); struct proxy_alias *new; char *f = cmd->path; char *r = NULL; char *word; apr_table_t *params = apr_table_make(cmd->pool, 5); const apr_array_header_t *arr; const apr_table_entry_t *elts; int i; int use_regex = is_regex; unsigned int flags = 0; const char *err; err = ap_check_cmd_context(cmd, NOT_IN_DIRECTORY|NOT_IN_FILES); if (err) { return err; } while (*arg) { word = ap_getword_conf(cmd->pool, &arg); if (!f) { if (!strcmp(word, "~")) { if (is_regex) { return "ProxyPassMatch invalid syntax ('~' usage)."; } use_regex = 1; continue; } f = word; } else if (!r) { r = word; } else if (!strcasecmp(word,"nocanon")) { flags |= PROXYPASS_NOCANON; } else if (!strcasecmp(word,"interpolate")) { flags |= PROXYPASS_INTERPOLATE; } else if (!strcasecmp(word,"noquery")) { flags |= PROXYPASS_NOQUERY; } else { char *val = strchr(word, '='); if (!val) { if (cmd->path) { if (*r == '/') { return "ProxyPass|ProxyPassMatch can not have a path when defined in " "a location."; } else { return "Invalid ProxyPass|ProxyPassMatch parameter. Parameter must " "be in the form 'key=value'."; } } else { return "Invalid ProxyPass|ProxyPassMatch parameter. Parameter must be " "in the form 'key=value'."; } } else *val++ = '\0'; apr_table_setn(params, word, val); } }; if (r == NULL) { return "ProxyPass|ProxyPassMatch needs a path when not defined in a location"; } /* if per directory, save away the single alias */ if (cmd->path) { dconf->alias = apr_pcalloc(cmd->pool, sizeof(struct proxy_alias)); dconf->alias_set = 1; new = dconf->alias; if (apr_fnmatch_test(f)) { use_regex = 1; } } /* if per server, add to the alias array */ else { new = apr_array_push(conf->aliases); } new->fake = apr_pstrdup(cmd->pool, f); new->real = apr_pstrdup(cmd->pool, ap_proxy_de_socketfy(cmd->pool, r)); new->flags = flags; if (use_regex) { new->regex = ap_pregcomp(cmd->pool, f, AP_REG_EXTENDED); if (new->regex == NULL) return "Regular expression could not be compiled."; } else { new->regex = NULL; } if (r[0] == '!' && r[1] == '\0') return NULL; arr = apr_table_elts(params); elts = (const apr_table_entry_t *)arr->elts; /* Distinguish the balancer from worker */ if (ap_proxy_valid_balancer_name(r, 9)) { proxy_balancer *balancer = ap_proxy_get_balancer(cmd->pool, conf, r, 0); char *fake_copy; /* * In the regex case supplying a fake URL doesn't make sense as it * cannot be parsed anyway with apr_uri_parse later on in * ap_proxy_define_balancer / ap_proxy_update_balancer */ if (use_regex) { fake_copy = NULL; } else { fake_copy = f; } if (!balancer) { const char *err = ap_proxy_define_balancer(cmd->pool, &balancer, conf, r, fake_copy, 0); if (err) return apr_pstrcat(cmd->temp_pool, "ProxyPass ", err, NULL); } else { ap_proxy_update_balancer(cmd->pool, balancer, fake_copy); } for (i = 0; i < arr->nelts; i++) { const char *err = set_balancer_param(conf, cmd->pool, balancer, elts[i].key, elts[i].val); if (err) return apr_pstrcat(cmd->temp_pool, "ProxyPass ", err, NULL); } new->balancer = balancer; } else { proxy_worker *worker = ap_proxy_get_worker(cmd->temp_pool, NULL, conf, ap_proxy_de_socketfy(cmd->pool, r)); int reuse = 0; if (!worker) { const char *err = ap_proxy_define_worker(cmd->pool, &worker, NULL, conf, r, 0); if (err) return apr_pstrcat(cmd->temp_pool, "ProxyPass ", err, NULL); PROXY_COPY_CONF_PARAMS(worker, conf); } else { reuse = 1; ap_log_error(APLOG_MARK, APLOG_INFO, 0, cmd->server, APLOGNO(01145) "Sharing worker '%s' instead of creating new worker '%s'", ap_proxy_worker_name(cmd->pool, worker), new->real); } for (i = 0; i < arr->nelts; i++) { if (reuse) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(01146) "Ignoring parameter '%s=%s' for worker '%s' because of worker sharing", elts[i].key, elts[i].val, ap_proxy_worker_name(cmd->pool, worker)); } else { const char *err = set_worker_param(cmd->pool, s, worker, elts[i].key, elts[i].val); if (err) return apr_pstrcat(cmd->temp_pool, "ProxyPass ", err, NULL); } } } return NULL; } static const char * add_pass_noregex(cmd_parms *cmd, void *dummy, const char *arg) { return add_pass(cmd, dummy, arg, 0); } static const char * add_pass_regex(cmd_parms *cmd, void *dummy, const char *arg) { return add_pass(cmd, dummy, arg, 1); } static const char * add_pass_reverse(cmd_parms *cmd, void *dconf, const char *f, const char *r, const char *i) { proxy_dir_conf *conf = dconf; struct proxy_alias *new; const char *fake; const char *real; const char *interp; const char *err; err = ap_check_cmd_context(cmd, NOT_IN_DIRECTORY|NOT_IN_FILES); if (err) { return err; } if (cmd->path == NULL) { if (r == NULL || !strcasecmp(r, "interpolate")) { return "ProxyPassReverse needs a path when not defined in a location"; } fake = f; real = r; interp = i; } else { if (r && strcasecmp(r, "interpolate")) { return "ProxyPassReverse can not have a path when defined in a location"; } fake = cmd->path; real = f; interp = r; } new = apr_array_push(conf->raliases); new->fake = fake; new->real = real; new->flags = interp ? PROXYPASS_INTERPOLATE : 0; return NULL; } static const char* cookie_path(cmd_parms *cmd, void *dconf, const char *f, const char *r, const char *interp) { proxy_dir_conf *conf = dconf; struct proxy_alias *new; new = apr_array_push(conf->cookie_paths); new->fake = f; new->real = r; new->flags = interp ? PROXYPASS_INTERPOLATE : 0; return NULL; } static const char* cookie_domain(cmd_parms *cmd, void *dconf, const char *f, const char *r, const char *interp) { proxy_dir_conf *conf = dconf; struct proxy_alias *new; new = apr_array_push(conf->cookie_domains); new->fake = f; new->real = r; new->flags = interp ? PROXYPASS_INTERPOLATE : 0; return NULL; } static const char * set_proxy_exclude(cmd_parms *parms, void *dummy, const char *arg) { server_rec *s = parms->server; proxy_server_conf *conf = ap_get_module_config(s->module_config, &proxy_module); struct noproxy_entry *new; struct noproxy_entry *list = (struct noproxy_entry *) conf->noproxies->elts; struct apr_sockaddr_t *addr; int found = 0; int i; /* Don't duplicate entries */ for (i = 0; i < conf->noproxies->nelts; i++) { if (strcasecmp(arg, list[i].name) == 0) { /* ignore case for host names */ found = 1; break; } } if (!found) { new = apr_array_push(conf->noproxies); new->name = arg; if (APR_SUCCESS == apr_sockaddr_info_get(&addr, new->name, APR_UNSPEC, 0, 0, parms->pool)) { new->addr = addr; } else { new->addr = NULL; } } return NULL; } /* Similar to set_proxy_exclude(), but defining directly connected hosts, * which should never be accessed via the configured ProxyRemote servers */ static const char * set_proxy_dirconn(cmd_parms *parms, void *dummy, const char *arg) { server_rec *s = parms->server; proxy_server_conf *conf = ap_get_module_config(s->module_config, &proxy_module); struct dirconn_entry *New; struct dirconn_entry *list = (struct dirconn_entry *) conf->dirconn->elts; int found = 0; int i; /* Don't duplicate entries */ for (i = 0; i < conf->dirconn->nelts; i++) { if (strcasecmp(arg, list[i].name) == 0) { found = 1; break; } } if (!found) { New = apr_array_push(conf->dirconn); New->name = apr_pstrdup(parms->pool, arg); New->hostaddr = NULL; if (ap_proxy_is_ipaddr(New, parms->pool)) { #if DEBUGGING ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(03018) "Parsed addr %s", inet_ntoa(New->addr)); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(03019) "Parsed mask %s", inet_ntoa(New->mask)); #endif } else if (ap_proxy_is_domainname(New, parms->pool)) { ap_str_tolower(New->name); #if DEBUGGING ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(03020) "Parsed domain %s", New->name); #endif } else if (ap_proxy_is_hostname(New, parms->pool)) { ap_str_tolower(New->name); #if DEBUGGING ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, NULL, APLOGNO(03021) "Parsed host %s", New->name); #endif } else { ap_proxy_is_word(New, parms->pool); #if DEBUGGING fprintf(stderr, "Parsed word %s\n", New->name); #endif } } return NULL; } static const char * set_proxy_domain(cmd_parms *parms, void *dummy, const char *arg) { proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module); if (arg[0] != '.') return "ProxyDomain: domain name must start with a dot."; psf->domain = arg; return NULL; } static const char * set_proxy_req(cmd_parms *parms, void *dummy, int flag) { proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module); psf->req = flag; psf->req_set = 1; return NULL; } static const char * set_proxy_error_override(cmd_parms *parms, void *dconf, int flag) { proxy_dir_conf *conf = dconf; conf->error_override = flag; conf->error_override_set = 1; return NULL; } static const char * add_proxy_http_headers(cmd_parms *parms, void *dconf, int flag) { proxy_dir_conf *conf = dconf; conf->add_forwarded_headers = flag; conf->add_forwarded_headers_set = 1; return NULL; } static const char * set_preserve_host(cmd_parms *parms, void *dconf, int flag) { proxy_dir_conf *conf = dconf; conf->preserve_host = flag; conf->preserve_host_set = 1; return NULL; } static const char * forward_100_continue(cmd_parms *parms, void *dconf, int flag) { proxy_dir_conf *conf = dconf; conf->forward_100_continue = flag; conf->forward_100_continue_set = 1; return NULL; } static const char * set_recv_buffer_size(cmd_parms *parms, void *dummy, const char *arg) { proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module); int s = atoi(arg); if (s < 512 && s != 0) { return "ProxyReceiveBufferSize must be >= 512 bytes, or 0 for system default."; } psf->recv_buffer_size = s; psf->recv_buffer_size_set = 1; return NULL; } static const char * set_io_buffer_size(cmd_parms *parms, void *dummy, const char *arg) { proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module); long s = atol(arg); if (s < 512 && s) { return "ProxyIOBufferSize must be >= 512 bytes, or 0 for system default."; } psf->io_buffer_size = (s ? s : AP_IOBUFSIZE); psf->io_buffer_size_set = 1; return NULL; } static const char * set_max_forwards(cmd_parms *parms, void *dummy, const char *arg) { proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module); long s = atol(arg); psf->maxfwd = s; psf->maxfwd_set = 1; return NULL; } static const char* set_proxy_timeout(cmd_parms *parms, void *dummy, const char *arg) { proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module); int timeout; timeout = atoi(arg); if (timeout<1) { return "Proxy Timeout must be at least 1 second."; } psf->timeout_set = 1; psf->timeout = apr_time_from_sec(timeout); return NULL; } static const char* set_via_opt(cmd_parms *parms, void *dummy, const char *arg) { proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module); if (strcasecmp(arg, "Off") == 0) psf->viaopt = via_off; else if (strcasecmp(arg, "On") == 0) psf->viaopt = via_on; else if (strcasecmp(arg, "Block") == 0) psf->viaopt = via_block; else if (strcasecmp(arg, "Full") == 0) psf->viaopt = via_full; else { return "ProxyVia must be one of: " "off | on | full | block"; } psf->viaopt_set = 1; return NULL; } static const char* set_bad_opt(cmd_parms *parms, void *dummy, const char *arg) { proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module); if (strcasecmp(arg, "IsError") == 0) psf->badopt = bad_error; else if (strcasecmp(arg, "Ignore") == 0) psf->badopt = bad_ignore; else if (strcasecmp(arg, "StartBody") == 0) psf->badopt = bad_body; else { return "ProxyBadHeader must be one of: " "IsError | Ignore | StartBody"; } psf->badopt_set = 1; return NULL; } static const char* set_status_opt(cmd_parms *parms, void *dummy, const char *arg) { proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module); if (strcasecmp(arg, "Off") == 0) psf->proxy_status = status_off; else if (strcasecmp(arg, "On") == 0) psf->proxy_status = status_on; else if (strcasecmp(arg, "Full") == 0) psf->proxy_status = status_full; else { return "ProxyStatus must be one of: " "off | on | full"; } psf->proxy_status_set = 1; return NULL; } static const char *set_bgrowth(cmd_parms *parms, void *dummy, const char *arg) { proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module); int growth = atoi(arg); if (growth < 0 || growth > 1000) { return "BalancerGrowth must be between 0 and 1000"; } psf->bgrowth = growth; psf->bgrowth_set = 1; return NULL; } static const char *set_persist(cmd_parms *parms, void *dummy, int flag) { proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module); psf->bal_persist = flag; return NULL; } static const char *set_inherit(cmd_parms *parms, void *dummy, int flag) { proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module); psf->inherit = flag; psf->inherit_set = 1; return NULL; } static const char *set_ppinherit(cmd_parms *parms, void *dummy, int flag) { proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module); psf->ppinherit = flag; psf->ppinherit_set = 1; return NULL; } static const char *add_member(cmd_parms *cmd, void *dummy, const char *arg) { server_rec *s = cmd->server; proxy_server_conf *conf = ap_get_module_config(s->module_config, &proxy_module); proxy_balancer *balancer; proxy_worker *worker; char *path = cmd->path; char *name = NULL; char *word; apr_table_t *params = apr_table_make(cmd->pool, 5); const apr_array_header_t *arr; const apr_table_entry_t *elts; int reuse = 0; int i; /* XXX: Should this be NOT_IN_DIRECTORY|NOT_IN_FILES? */ const char *err = ap_check_cmd_context(cmd, NOT_IN_HTACCESS); if (err) return err; if (cmd->path) path = apr_pstrdup(cmd->pool, cmd->path); while (*arg) { char *val; word = ap_getword_conf(cmd->pool, &arg); val = strchr(word, '='); if (!val) { if (!path) path = word; else if (!name) name = word; else { if (cmd->path) return "BalancerMember can not have a balancer name when defined in a location"; else return "Invalid BalancerMember parameter. Parameter must " "be in the form 'key=value'"; } } else { *val++ = '\0'; apr_table_setn(params, word, val); } } if (!path) return "BalancerMember must define balancer name when outside section"; if (!name) return "BalancerMember must define remote proxy server"; ap_str_tolower(path); /* lowercase scheme://hostname */ /* Try to find the balancer */ balancer = ap_proxy_get_balancer(cmd->temp_pool, conf, path, 0); if (!balancer) { err = ap_proxy_define_balancer(cmd->pool, &balancer, conf, path, "/", 0); if (err) return apr_pstrcat(cmd->temp_pool, "BalancerMember ", err, NULL); } /* Try to find existing worker */ worker = ap_proxy_get_worker(cmd->temp_pool, balancer, conf, ap_proxy_de_socketfy(cmd->temp_pool, name)); if (!worker) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01147) "Defining worker '%s' for balancer '%s'", name, balancer->s->name); if ((err = ap_proxy_define_worker(cmd->pool, &worker, balancer, conf, name, 0)) != NULL) return apr_pstrcat(cmd->temp_pool, "BalancerMember ", err, NULL); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, cmd->server, APLOGNO(01148) "Defined worker '%s' for balancer '%s'", ap_proxy_worker_name(cmd->pool, worker), balancer->s->name); PROXY_COPY_CONF_PARAMS(worker, conf); } else { reuse = 1; ap_log_error(APLOG_MARK, APLOG_INFO, 0, cmd->server, APLOGNO(01149) "Sharing worker '%s' instead of creating new worker '%s'", ap_proxy_worker_name(cmd->pool, worker), name); } if (!worker->section_config) { worker->section_config = balancer->section_config; } arr = apr_table_elts(params); elts = (const apr_table_entry_t *)arr->elts; for (i = 0; i < arr->nelts; i++) { if (reuse) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, cmd->server, APLOGNO(01150) "Ignoring parameter '%s=%s' for worker '%s' because of worker sharing", elts[i].key, elts[i].val, ap_proxy_worker_name(cmd->pool, worker)); } else { err = set_worker_param(cmd->pool, cmd->server, worker, elts[i].key, elts[i].val); if (err) return apr_pstrcat(cmd->temp_pool, "BalancerMember ", err, NULL); } } return NULL; } static const char * set_proxy_param(cmd_parms *cmd, void *dummy, const char *arg) { server_rec *s = cmd->server; proxy_server_conf *conf = (proxy_server_conf *) ap_get_module_config(s->module_config, &proxy_module); char *name = NULL; char *word, *val; proxy_balancer *balancer = NULL; proxy_worker *worker = NULL; int in_proxy_section = 0; /* XXX: Should this be NOT_IN_DIRECTORY|NOT_IN_FILES? */ const char *err = ap_check_cmd_context(cmd, NOT_IN_HTACCESS); if (err) return err; if (cmd->directive->parent && strncasecmp(cmd->directive->parent->directive, "directive->parent->args; /* Directive inside temp_pool, &pargs); if ((word = ap_strchr(name, '>'))) *word = '\0'; in_proxy_section = 1; } else { /* Standard set directive with worker/balancer * name as first param. */ name = ap_getword_conf(cmd->temp_pool, &arg); } if (ap_proxy_valid_balancer_name(name, 9)) { balancer = ap_proxy_get_balancer(cmd->pool, conf, name, 0); if (!balancer) { if (in_proxy_section) { err = ap_proxy_define_balancer(cmd->pool, &balancer, conf, name, "/", 0); if (err) return apr_pstrcat(cmd->temp_pool, "ProxySet ", err, NULL); } else return apr_pstrcat(cmd->temp_pool, "ProxySet can not find '", name, "' Balancer.", NULL); } } else { worker = ap_proxy_get_worker(cmd->temp_pool, NULL, conf, ap_proxy_de_socketfy(cmd->temp_pool, name)); if (!worker) { if (in_proxy_section) { err = ap_proxy_define_worker(cmd->pool, &worker, NULL, conf, name, 0); if (err) return apr_pstrcat(cmd->temp_pool, "ProxySet ", err, NULL); } else return apr_pstrcat(cmd->temp_pool, "ProxySet can not find '", name, "' Worker.", NULL); } } while (*arg) { word = ap_getword_conf(cmd->pool, &arg); val = strchr(word, '='); if (!val) { return "Invalid ProxySet parameter. Parameter must be " "in the form 'key=value'"; } else *val++ = '\0'; if (worker) err = set_worker_param(cmd->pool, cmd->server, worker, word, val); else err = set_balancer_param(conf, cmd->pool, balancer, word, val); if (err) return apr_pstrcat(cmd->temp_pool, "ProxySet: ", err, " ", word, "=", val, "; ", name, NULL); } return NULL; } static void ap_add_per_proxy_conf(server_rec *s, ap_conf_vector_t *dir_config) { proxy_server_conf *sconf = ap_get_module_config(s->module_config, &proxy_module); void **new_space = (void **)apr_array_push(sconf->sec_proxy); *new_space = dir_config; } static const char *proxysection(cmd_parms *cmd, void *mconfig, const char *arg) { const char *errmsg; const char *endp = ap_strrchr_c(arg, '>'); int old_overrides = cmd->override; char *old_path = cmd->path; proxy_dir_conf *conf; ap_conf_vector_t *new_dir_conf = ap_create_per_dir_config(cmd->pool); ap_regex_t *r = NULL; const command_rec *thiscmd = cmd->cmd; char *word, *val; proxy_balancer *balancer = NULL; proxy_worker *worker = NULL; const char *err = ap_check_cmd_context(cmd, NOT_IN_DIR_CONTEXT); proxy_server_conf *sconf = (proxy_server_conf *) ap_get_module_config(cmd->server->module_config, &proxy_module); if (err != NULL) { return err; } if (endp == NULL) { return apr_pstrcat(cmd->pool, cmd->cmd->name, "> directive missing closing '>'", NULL); } arg = apr_pstrndup(cmd->pool, arg, endp-arg); if (!arg) { if (thiscmd->cmd_data) return " block must specify a path"; else return " block must specify a path"; } cmd->path = ap_getword_conf(cmd->pool, &arg); cmd->override = OR_ALL|ACCESS_CONF|PROXY_CONF; if (!strncasecmp(cmd->path, "proxy:", 6)) cmd->path += 6; /* XXX Ignore case? What if we proxy a case-insensitive server?!? * While we are at it, shouldn't we also canonicalize the entire * scheme? See proxy_fixup() */ if (thiscmd->cmd_data) { /* */ r = ap_pregcomp(cmd->pool, cmd->path, AP_REG_EXTENDED); if (!r) { return "Regex could not be compiled"; } } /* initialize our config and fetch it */ conf = ap_set_config_vectors(cmd->server, new_dir_conf, cmd->path, &proxy_module, cmd->pool); errmsg = ap_walk_config(cmd->directive->first_child, cmd, new_dir_conf); if (errmsg != NULL) return errmsg; conf->r = r; conf->p = cmd->path; conf->p_is_fnmatch = apr_fnmatch_test(conf->p); if (r) { conf->refs = apr_array_make(cmd->pool, 8, sizeof(char *)); ap_regname(r, conf->refs, AP_REG_MATCH, 1); } ap_add_per_proxy_conf(cmd->server, new_dir_conf); if (*arg != '\0') { if (thiscmd->cmd_data) return "Multiple arguments not (yet) supported."; if (conf->p_is_fnmatch) return apr_pstrcat(cmd->pool, thiscmd->name, "> arguments are not supported for wildchar url.", NULL); if (!ap_strchr_c(conf->p, ':')) return apr_pstrcat(cmd->pool, thiscmd->name, "> arguments are not supported for non url.", NULL); if (ap_proxy_valid_balancer_name((char *)conf->p, 9)) { balancer = ap_proxy_get_balancer(cmd->pool, sconf, conf->p, 0); if (!balancer) { err = ap_proxy_define_balancer(cmd->pool, &balancer, sconf, conf->p, "/", 0); if (err) return apr_pstrcat(cmd->temp_pool, thiscmd->name, " ", err, NULL); } if (!balancer->section_config) { balancer->section_config = new_dir_conf; } } else { worker = ap_proxy_get_worker(cmd->temp_pool, NULL, sconf, ap_proxy_de_socketfy(cmd->temp_pool, (char*)conf->p)); if (!worker) { err = ap_proxy_define_worker(cmd->pool, &worker, NULL, sconf, conf->p, 0); if (err) return apr_pstrcat(cmd->temp_pool, thiscmd->name, " ", err, NULL); } if (!worker->section_config) { worker->section_config = new_dir_conf; } } if (worker == NULL && balancer == NULL) { return apr_pstrcat(cmd->pool, thiscmd->name, "> arguments are supported only for workers.", NULL); } while (*arg) { word = ap_getword_conf(cmd->pool, &arg); val = strchr(word, '='); if (!val) { return "Invalid Proxy parameter. Parameter must be " "in the form 'key=value'"; } else *val++ = '\0'; if (worker) err = set_worker_param(cmd->pool, cmd->server, worker, word, val); else err = set_balancer_param(sconf, cmd->pool, balancer, word, val); if (err) return apr_pstrcat(cmd->temp_pool, thiscmd->name, " ", err, " ", word, "=", val, "; ", conf->p, NULL); } } cmd->path = old_path; cmd->override = old_overrides; return NULL; } static const command_rec proxy_cmds[] = { AP_INIT_RAW_ARGS("\n

    Proxy LoadBalancer Status for ", r); ap_rvputs(r, balancer->s->name, "

    \n\n", NULL); ap_rputs("\n\n" "" "\n", r); if (*balancer->s->sticky) { if (strcmp(balancer->s->sticky, balancer->s->sticky_path)) { ap_rvputs(r, "", apr_time_sec(balancer->s->timeout)); ap_rprintf(r, "\n", balancer->lbmethod->name); ap_rputs("
    SSesTimeoutMethod
    ", balancer->s->sticky, " | ", balancer->s->sticky_path, NULL); } else { ap_rvputs(r, "", balancer->s->sticky, NULL); } } else { ap_rputs(" - ", r); } ap_rprintf(r, "%" APR_TIME_T_FMT "%s
    \n", r); ap_rputs("\n\n" "" "" "" "\n", r); } else { ap_rprintf(r, "ProxyBalancer[%d]Name: %s\n", i, balancer->s->name); } worker = (proxy_worker **)balancer->workers->elts; for (n = 0; n < balancer->workers->nelts; n++) { char fbuf[50]; if (!(flags & AP_STATUS_SHORT)) { ap_rvputs(r, "\n", NULL); ap_rvputs(r, "", (float)((*worker)->s->lbfactor)/100.0); ap_rprintf(r, "", (*worker)->s->lbset); ap_rprintf(r, "", (*worker)->s->elected); ap_rprintf(r, "\n", r); /* TODO: Add the rest of dynamic worker data */ ap_rputs("\n", r); } else { ap_rprintf(r, "ProxyBalancer[%d]Worker[%d]Name: %s\n", i, n, (*worker)->s->name); ap_rprintf(r, "ProxyBalancer[%d]Worker[%d]Status: %s\n", i, n, ap_proxy_parse_wstatus(r->pool, *worker)); ap_rprintf(r, "ProxyBalancer[%d]Worker[%d]Elected: %" APR_SIZE_T_FMT "\n", i, n, (*worker)->s->elected); ap_rprintf(r, "ProxyBalancer[%d]Worker[%d]Busy: %" APR_SIZE_T_FMT "\n", i, n, (*worker)->s->busy); ap_rprintf(r, "ProxyBalancer[%d]Worker[%d]Sent: %" APR_OFF_T_FMT "K\n", i, n, (*worker)->s->transferred >> 10); ap_rprintf(r, "ProxyBalancer[%d]Worker[%d]Rcvd: %" APR_OFF_T_FMT "K\n", i, n, (*worker)->s->read >> 10); /* TODO: Add the rest of dynamic worker data */ } ++worker; } if (!(flags & AP_STATUS_SHORT)) { ap_rputs("
    SchHostStatRouteRedirFSetAccBusyWrRd
    ", (*worker)->s->scheme, "", (*worker)->s->hostname_ex, "", NULL); ap_rvputs(r, ap_proxy_parse_wstatus(r->pool, *worker), NULL); ap_rvputs(r, "", (*worker)->s->route, NULL); ap_rvputs(r, "", (*worker)->s->redirect, NULL); ap_rprintf(r, "%.2f%d%" APR_SIZE_T_FMT "%" APR_SIZE_T_FMT "", (*worker)->s->busy); ap_rputs(apr_strfsize((*worker)->s->transferred, fbuf), r); ap_rputs("", r); ap_rputs(apr_strfsize((*worker)->s->read, fbuf), r); ap_rputs("
    \n", r); } ++balancer; } if (!(flags & AP_STATUS_SHORT)) { ap_rputs("
    \n" "\n" "\n" "\n" "\n" "\n" "\n" "\n" "\n" "\n" "\n" "\n" "
    SSesSticky session name
    TimeoutBalancer Timeout
    SchConnection scheme
    HostBackend Hostname
    StatWorker status
    RouteSession Route
    RedirSession Route Redirection
    FLoad Balancer Factor
    AccNumber of uses
    WrNumber of bytes transferred
    RdNumber of bytes read
    ", r); } return OK; } static void child_init(apr_pool_t *p, server_rec *s) { proxy_worker *reverse = NULL; apr_status_t rv = apr_global_mutex_child_init(&proxy_mutex, apr_global_mutex_lockfile(proxy_mutex), p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(02479) "could not init proxy_mutex in child"); exit(1); /* Ugly, but what else? */ } /* TODO */ while (s) { void *sconf = s->module_config; proxy_server_conf *conf; proxy_worker *worker; int i; conf = (proxy_server_conf *)ap_get_module_config(sconf, &proxy_module); /* * NOTE: non-balancer members don't use shm at all... * after all, why should they? */ worker = (proxy_worker *)conf->workers->elts; for (i = 0; i < conf->workers->nelts; i++, worker++) { ap_proxy_initialize_worker(worker, s, conf->pool); } /* Create and initialize forward worker if defined */ if (conf->req_set && conf->req) { proxy_worker *forward; ap_proxy_define_worker(p, &forward, NULL, NULL, "http://www.apache.org", 0); conf->forward = forward; PROXY_STRNCPY(conf->forward->s->name, "proxy:forward"); PROXY_STRNCPY(conf->forward->s->hostname, "*"); /* for compatibility */ PROXY_STRNCPY(conf->forward->s->hostname_ex, "*"); PROXY_STRNCPY(conf->forward->s->scheme, "*"); conf->forward->hash.def = conf->forward->s->hash.def = ap_proxy_hashfunc(conf->forward->s->name, PROXY_HASHFUNC_DEFAULT); conf->forward->hash.fnv = conf->forward->s->hash.fnv = ap_proxy_hashfunc(conf->forward->s->name, PROXY_HASHFUNC_FNV); /* Do not disable worker in case of errors */ conf->forward->s->status |= PROXY_WORKER_IGNORE_ERRORS; /* Mark as the "generic" worker */ conf->forward->s->status |= PROXY_WORKER_GENERIC; ap_proxy_initialize_worker(conf->forward, s, conf->pool); /* Disable address cache for generic forward worker */ conf->forward->s->is_address_reusable = 0; } if (!reverse) { ap_proxy_define_worker(p, &reverse, NULL, NULL, "http://www.apache.org", 0); PROXY_STRNCPY(reverse->s->name, "proxy:reverse"); PROXY_STRNCPY(reverse->s->hostname, "*"); /* for compatibility */ PROXY_STRNCPY(reverse->s->hostname_ex, "*"); PROXY_STRNCPY(reverse->s->scheme, "*"); reverse->hash.def = reverse->s->hash.def = ap_proxy_hashfunc(reverse->s->name, PROXY_HASHFUNC_DEFAULT); reverse->hash.fnv = reverse->s->hash.fnv = ap_proxy_hashfunc(reverse->s->name, PROXY_HASHFUNC_FNV); /* Do not disable worker in case of errors */ reverse->s->status |= PROXY_WORKER_IGNORE_ERRORS; /* Mark as the "generic" worker */ reverse->s->status |= PROXY_WORKER_GENERIC; conf->reverse = reverse; ap_proxy_initialize_worker(conf->reverse, s, conf->pool); /* Disable address cache for generic reverse worker */ reverse->s->is_address_reusable = 0; } conf->reverse = reverse; s = s->next; } } /* * This routine is called before the server processes the configuration * files. */ static int proxy_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { apr_status_t rv = ap_mutex_register(pconf, proxy_id, NULL, APR_LOCK_DEFAULT, 0); if (rv != APR_SUCCESS) { ap_log_perror(APLOG_MARK, APLOG_CRIT, rv, plog, APLOGNO(02480) "failed to register %s mutex", proxy_id); return 500; /* An HTTP status would be a misnomer! */ } APR_OPTIONAL_HOOK(ap, status_hook, proxy_status_hook, NULL, NULL, APR_HOOK_MIDDLE); /* Reset workers count on gracefull restart */ proxy_lb_workers = 0; set_worker_hc_param_f = APR_RETRIEVE_OPTIONAL_FN(set_worker_hc_param); return OK; } static void register_hooks(apr_pool_t *p) { /* fixup before mod_rewrite, so that the proxied url will not * escaped accidentally by our fixup. */ static const char * const aszSucc[] = { "mod_rewrite.c", NULL}; /* Only the mpm_winnt has child init hook handler. * make sure that we are called after the mpm * initializes. */ static const char *const aszPred[] = { "mpm_winnt.c", "mod_proxy_balancer.c", "mod_proxy_hcheck.c", NULL}; /* handler */ ap_hook_handler(proxy_handler, NULL, NULL, APR_HOOK_FIRST); /* filename-to-URI translation */ ap_hook_translate_name(proxy_trans, aszSucc, NULL, APR_HOOK_FIRST); /* walk entries and suppress default TRACE behavior */ ap_hook_map_to_storage(proxy_map_location, NULL,NULL, APR_HOOK_FIRST); /* fixups */ ap_hook_fixups(proxy_fixup, NULL, aszSucc, APR_HOOK_FIRST); /* post read_request handling */ ap_hook_post_read_request(proxy_detect, NULL, NULL, APR_HOOK_FIRST); /* pre config handling */ ap_hook_pre_config(proxy_pre_config, NULL, NULL, APR_HOOK_MIDDLE); /* post config handling */ ap_hook_post_config(proxy_post_config, NULL, NULL, APR_HOOK_MIDDLE); /* child init handling */ ap_hook_child_init(child_init, aszPred, NULL, APR_HOOK_MIDDLE); /* register optional functions within proxy_util.c */ proxy_util_register_hooks(p); } AP_DECLARE_MODULE(proxy) = { STANDARD20_MODULE_STUFF, create_proxy_dir_config, /* create per-directory config structure */ merge_proxy_dir_config, /* merge per-directory config structures */ create_proxy_config, /* create per-server config structure */ merge_proxy_config, /* merge per-server config structures */ proxy_cmds, /* command table */ register_hooks }; APR_HOOK_STRUCT( APR_HOOK_LINK(scheme_handler) APR_HOOK_LINK(canon_handler) APR_HOOK_LINK(pre_request) APR_HOOK_LINK(post_request) APR_HOOK_LINK(request_status) ) APR_IMPLEMENT_EXTERNAL_HOOK_RUN_FIRST(proxy, PROXY, int, scheme_handler, (request_rec *r, proxy_worker *worker, proxy_server_conf *conf, char *url, const char *proxyhost, apr_port_t proxyport),(r,worker,conf, url,proxyhost,proxyport),DECLINED) APR_IMPLEMENT_EXTERNAL_HOOK_RUN_FIRST(proxy, PROXY, int, canon_handler, (request_rec *r, char *url),(r, url),DECLINED) APR_IMPLEMENT_EXTERNAL_HOOK_RUN_FIRST(proxy, PROXY, int, pre_request, ( proxy_worker **worker, proxy_balancer **balancer, request_rec *r, proxy_server_conf *conf, char **url),(worker,balancer, r,conf,url),DECLINED) APR_IMPLEMENT_EXTERNAL_HOOK_RUN_FIRST(proxy, PROXY, int, post_request, (proxy_worker *worker, proxy_balancer *balancer, request_rec *r, proxy_server_conf *conf),(worker, balancer,r,conf),DECLINED) APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(proxy, PROXY, int, section_post_config, (apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s, ap_conf_vector_t *section_config), (p, ptemp, plog, s, section_config), OK, DECLINED) APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(proxy, PROXY, int, fixups, (request_rec *r), (r), OK, DECLINED) APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(proxy, PROXY, int, request_status, (int *status, request_rec *r), (status, r), OK, DECLINED) httpd-2.4.41/modules/proxy/mod_proxy_express.c0000644000000000000500000001605013027214604020023 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_proxy.h" #include "apr_dbm.h" module AP_MODULE_DECLARE_DATA proxy_express_module; static int proxy_available = 0; typedef struct { const char *dbmfile; const char *dbmtype; int enabled; } express_server_conf; static const char *set_dbmfile(cmd_parms *cmd, void *dconf, const char *arg) { express_server_conf *sconf; sconf = ap_get_module_config(cmd->server->module_config, &proxy_express_module); if ((sconf->dbmfile = ap_server_root_relative(cmd->pool, arg)) == NULL) { return apr_pstrcat(cmd->pool, "ProxyExpressDBMFile: bad path to file: ", arg, NULL); } return NULL; } static const char *set_dbmtype(cmd_parms *cmd, void *dconf, const char *arg) { express_server_conf *sconf; sconf = ap_get_module_config(cmd->server->module_config, &proxy_express_module); sconf->dbmtype = arg; return NULL; } static const char *set_enabled(cmd_parms *cmd, void *dconf, int flag) { express_server_conf *sconf; sconf = ap_get_module_config(cmd->server->module_config, &proxy_express_module); sconf->enabled = flag; return NULL; } static void *server_create(apr_pool_t *p, server_rec *s) { express_server_conf *a; a = (express_server_conf *)apr_pcalloc(p, sizeof(express_server_conf)); a->dbmfile = NULL; a->dbmtype = "default"; a->enabled = 0; return (void *)a; } static void *server_merge(apr_pool_t *p, void *basev, void *overridesv) { express_server_conf *a, *base, *overrides; a = (express_server_conf *)apr_pcalloc(p, sizeof(express_server_conf)); base = (express_server_conf *)basev; overrides = (express_server_conf *)overridesv; a->dbmfile = (overrides->dbmfile) ? overrides->dbmfile : base->dbmfile; a->dbmtype = (overrides->dbmtype) ? overrides->dbmtype : base->dbmtype; a->enabled = (overrides->enabled) ? overrides->enabled : base->enabled; return (void *)a; } static int post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { proxy_available = (ap_find_linked_module("mod_proxy.c") != NULL); return OK; } static int xlate_name(request_rec *r) { int i; const char *name; char *backend = NULL; apr_dbm_t *db; apr_status_t rv; apr_datum_t key, val; struct proxy_alias *ralias; proxy_dir_conf *dconf; express_server_conf *sconf; sconf = ap_get_module_config(r->server->module_config, &proxy_express_module); dconf = ap_get_module_config(r->per_dir_config, &proxy_module); if (!sconf->enabled) { return DECLINED; } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01001) "proxy_express: Enabled"); if (!sconf->dbmfile || (r->filename && strncmp(r->filename, "proxy:", 6) == 0)) { /* it should be go on as an internal proxy request */ return DECLINED; } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01002) "proxy_express: Opening DBM file: %s (%s)", sconf->dbmfile, sconf->dbmtype); rv = apr_dbm_open_ex(&db, sconf->dbmtype, sconf->dbmfile, APR_DBM_READONLY, APR_OS_DEFAULT, r->pool); if (rv != APR_SUCCESS) { return DECLINED; } name = ap_get_server_name(r); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01003) "proxy_express: looking for %s", name); key.dptr = (char *)name; key.dsize = strlen(key.dptr); rv = apr_dbm_fetch(db, key, &val); if (rv == APR_SUCCESS) { backend = apr_pstrmemdup(r->pool, val.dptr, val.dsize); } apr_dbm_close(db); if (rv != APR_SUCCESS || !backend) { return DECLINED; } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01004) "proxy_express: found %s -> %s", name, backend); r->filename = apr_pstrcat(r->pool, "proxy:", backend, r->uri, NULL); r->handler = "proxy-server"; r->proxyreq = PROXYREQ_REVERSE; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01005) "proxy_express: rewritten as: %s", r->filename); ralias = (struct proxy_alias *)dconf->raliases->elts; /* * See if we have already added a ProxyPassReverse entry * for this host... If so, don't do it again. */ /* * NOTE: dconf is process specific so this will only * work as long as we maintain that this process * or thread is handling the backend */ for (i = 0; i < dconf->raliases->nelts; i++, ralias++) { if (strcasecmp(backend, ralias->real) == 0) { ralias = NULL; break; } } /* Didn't find one... add it */ if (!ralias) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01006) "proxy_express: adding PPR entry"); ralias = apr_array_push(dconf->raliases); ralias->fake = "/"; ralias->real = apr_pstrdup(dconf->raliases->pool, backend); ralias->flags = 0; } return OK; } static const command_rec command_table[] = { AP_INIT_FLAG("ProxyExpressEnable", set_enabled, NULL, OR_FILEINFO, "Enable the ProxyExpress functionality"), AP_INIT_TAKE1("ProxyExpressDBMFile", set_dbmfile, NULL, OR_FILEINFO, "Location of ProxyExpressDBMFile file"), AP_INIT_TAKE1("ProxyExpressDBMType", set_dbmtype, NULL, OR_FILEINFO, "Type of ProxyExpressDBMFile file"), { NULL } }; static void register_hooks(apr_pool_t *p) { ap_hook_post_config(post_config, NULL, NULL, APR_HOOK_LAST); ap_hook_translate_name(xlate_name, NULL, NULL, APR_HOOK_FIRST); } /* the main config structure */ AP_DECLARE_MODULE(proxy_express) = { STANDARD20_MODULE_STUFF, NULL, /* create per-dir config structures */ NULL, /* merge per-dir config structures */ server_create, /* create per-server config structures */ server_merge, /* merge per-server config structures */ command_table, /* table of config file commands */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/proxy/NWGNUproxy0000644000000000000500000001757213004502175016021 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(AP_WORK)/modules/generators \ $(AP_WORK)/modules/ssl \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxy # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Proxy Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/proxy.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_proxy.o \ $(OBJDIR)/proxy_util.o \ $(OBJDIR)/libprews.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ @$(OBJDIR)/mod_proxy.imp \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(OBJDIR)/mod_proxy.imp $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware $(OBJDIR)/mod_proxy.imp: NWGNUproxy @echo $(DL)GEN $@$(DL) @echo $(DL)# Exports of mod_proxy$(DL)> $@ @echo $(DL) (AP$(VERSION_MAJMIN))$(DL)>> $@ @echo $(DL) proxy_module,$(DL)>> $@ @echo $(DL) proxy_hcmethods,$(DL)>> $@ @echo $(DL) proxy_hook_canon_handler,$(DL)>> $@ @echo $(DL) proxy_hook_get_canon_handler,$(DL)>> $@ @echo $(DL) proxy_hook_get_post_request,$(DL)>> $@ @echo $(DL) proxy_hook_get_pre_request,$(DL)>> $@ @echo $(DL) proxy_hook_get_scheme_handler,$(DL)>> $@ @echo $(DL) proxy_hook_post_request,$(DL)>> $@ @echo $(DL) proxy_hook_pre_request,$(DL)>> $@ @echo $(DL) proxy_hook_scheme_handler,$(DL)>> $@ @echo $(DL) proxy_run_canon_handler,$(DL)>> $@ @echo $(DL) proxy_run_create_req,$(DL)>> $@ @echo $(DL) proxy_run_fixups,$(DL)>> $@ @echo $(DL) proxy_run_post_request,$(DL)>> $@ @echo $(DL) proxy_run_pre_request,$(DL)>> $@ @echo $(DL) proxy_run_request_status,$(DL)>> $@ @echo $(DL) proxy_run_scheme_handler,$(DL)>> $@ @echo $(DL) ap_proxy_acquire_connection,$(DL)>> $@ @echo $(DL) ap_proxy_backend_broke,$(DL)>> $@ @echo $(DL) ap_proxy_buckets_lifetime_transform,$(DL)>> $@ @echo $(DL) ap_proxy_c2hex,$(DL)>> $@ @echo $(DL) ap_proxy_canon_netloc,$(DL)>> $@ @echo $(DL) ap_proxy_canonenc,$(DL)>> $@ @echo $(DL) ap_proxy_check_connection,$(DL)>> $@ @echo $(DL) ap_proxy_checkproxyblock,$(DL)>> $@ @echo $(DL) ap_proxy_checkproxyblock2,$(DL)>> $@ @echo $(DL) ap_proxy_conn_is_https,$(DL)>> $@ @echo $(DL) ap_proxy_connect_backend,$(DL)>> $@ @echo $(DL) ap_proxy_connect_to_backend,$(DL)>> $@ @echo $(DL) ap_proxy_connection_create,$(DL)>> $@ @echo $(DL) ap_proxy_connection_reusable,$(DL)>> $@ @echo $(DL) ap_proxy_cookie_reverse_map,$(DL)>> $@ @echo $(DL) ap_proxy_create_hdrbrgd,$(DL)>> $@ @echo $(DL) ap_proxy_define_balancer,$(DL)>> $@ @echo $(DL) ap_proxy_define_worker,$(DL)>> $@ @echo $(DL) ap_proxy_determine_connection,$(DL)>> $@ @echo $(DL) ap_proxy_find_balancershm,$(DL)>> $@ @echo $(DL) ap_proxy_find_workershm,$(DL)>> $@ @echo $(DL) ap_proxy_get_balancer,$(DL)>> $@ @echo $(DL) ap_proxy_get_worker,$(DL)>> $@ @echo $(DL) ap_proxy_hashfunc,$(DL)>> $@ @echo $(DL) ap_proxy_hex2c,$(DL)>> $@ @echo $(DL) ap_proxy_initialize_balancer,$(DL)>> $@ @echo $(DL) ap_proxy_initialize_worker,$(DL)>> $@ @echo $(DL) ap_proxy_is_domainname,$(DL)>> $@ @echo $(DL) ap_proxy_is_hostname,$(DL)>> $@ @echo $(DL) ap_proxy_is_ipaddr,$(DL)>> $@ @echo $(DL) ap_proxy_is_word,$(DL)>> $@ @echo $(DL) ap_proxy_location_reverse_map,$(DL)>> $@ @echo $(DL) ap_proxy_parse_wstatus,$(DL)>> $@ @echo $(DL) ap_proxy_pass_brigade,$(DL)>> $@ @echo $(DL) ap_proxy_port_of_scheme,$(DL)>> $@ @echo $(DL) ap_proxy_post_request,$(DL)>> $@ @echo $(DL) ap_proxy_pre_http_request,$(DL)>> $@ @echo $(DL) ap_proxy_pre_request,$(DL)>> $@ @echo $(DL) ap_proxy_release_connection,$(DL)>> $@ @echo $(DL) ap_proxy_set_wstatus,$(DL)>> $@ @echo $(DL) ap_proxy_share_balancer,$(DL)>> $@ @echo $(DL) ap_proxy_share_worker,$(DL)>> $@ @echo $(DL) ap_proxy_show_hcmethod,$(DL)>> $@ @echo $(DL) ap_proxy_ssl_connection_cleanup,$(DL)>> $@ @echo $(DL) ap_proxy_ssl_disable,$(DL)>> $@ @echo $(DL) ap_proxy_ssl_enable,$(DL)>> $@ @echo $(DL) ap_proxy_ssl_val,$(DL)>> $@ @echo $(DL) ap_proxy_strncpy,$(DL)>> $@ @echo $(DL) ap_proxy_sync_balancer,$(DL)>> $@ @echo $(DL) ap_proxy_trans_match,$(DL)>> $@ @echo $(DL) ap_proxy_transfer_between_connections,$(DL)>> $@ @echo $(DL) ap_proxy_valid_balancer_name,$(DL)>> $@ @echo $(DL) ap_proxy_worker_name,$(DL)>> $@ @echo $(DL) ap_proxyerror$(DL)>> $@ # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/mod_proxy_http.c0000644000000000000500000025165113514075127017327 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* HTTP routines for Apache proxy */ #include "mod_proxy.h" #include "ap_regex.h" module AP_MODULE_DECLARE_DATA proxy_http_module; static int (*ap_proxy_clear_connection_fn)(request_rec *r, apr_table_t *headers) = NULL; static apr_status_t ap_proxy_http_cleanup(const char *scheme, request_rec *r, proxy_conn_rec *backend); static apr_status_t ap_proxygetline(apr_bucket_brigade *bb, char *s, int n, request_rec *r, int flags, int *read); /* * Canonicalise http-like URLs. * scheme is the scheme for the URL * url is the URL starting with the first '/' * def_port is the default port for this scheme. */ static int proxy_http_canon(request_rec *r, char *url) { char *host, *path, sport[7]; char *search = NULL; const char *err; const char *scheme; apr_port_t port, def_port; /* ap_port_of_scheme() */ if (strncasecmp(url, "http:", 5) == 0) { url += 5; scheme = "http"; } else if (strncasecmp(url, "https:", 6) == 0) { url += 6; scheme = "https"; } else { return DECLINED; } port = def_port = ap_proxy_port_of_scheme(scheme); ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "HTTP: canonicalising URL %s", url); /* do syntatic check. * We break the URL into host, port, path, search */ err = ap_proxy_canon_netloc(r->pool, &url, NULL, NULL, &host, &port); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01083) "error parsing URL %s: %s", url, err); return HTTP_BAD_REQUEST; } /* * now parse path/search args, according to rfc1738: * process the path. * * In a reverse proxy, our URL has been processed, so canonicalise * unless proxy-nocanon is set to say it's raw * In a forward proxy, we have and MUST NOT MANGLE the original. */ switch (r->proxyreq) { default: /* wtf are we doing here? */ case PROXYREQ_REVERSE: if (apr_table_get(r->notes, "proxy-nocanon")) { path = url; /* this is the raw path */ } else { path = ap_proxy_canonenc(r->pool, url, strlen(url), enc_path, 0, r->proxyreq); search = r->args; } break; case PROXYREQ_PROXY: path = url; break; } if (path == NULL) return HTTP_BAD_REQUEST; if (port != def_port) apr_snprintf(sport, sizeof(sport), ":%d", port); else sport[0] = '\0'; if (ap_strchr_c(host, ':')) { /* if literal IPv6 address */ host = apr_pstrcat(r->pool, "[", host, "]", NULL); } r->filename = apr_pstrcat(r->pool, "proxy:", scheme, "://", host, sport, "/", path, (search) ? "?" : "", (search) ? search : "", NULL); return OK; } /* Clear all connection-based headers from the incoming headers table */ typedef struct header_dptr { apr_pool_t *pool; apr_table_t *table; apr_time_t time; } header_dptr; static ap_regex_t *warn_rx; static int clean_warning_headers(void *data, const char *key, const char *val) { apr_table_t *headers = ((header_dptr*)data)->table; apr_pool_t *pool = ((header_dptr*)data)->pool; char *warning; char *date; apr_time_t warn_time; const int nmatch = 3; ap_regmatch_t pmatch[3]; if (headers == NULL) { ((header_dptr*)data)->table = headers = apr_table_make(pool, 2); } /* * Parse this, suckers! * * Warning = "Warning" ":" 1#warning-value * * warning-value = warn-code SP warn-agent SP warn-text * [SP warn-date] * * warn-code = 3DIGIT * warn-agent = ( host [ ":" port ] ) | pseudonym * ; the name or pseudonym of the server adding * ; the Warning header, for use in debugging * warn-text = quoted-string * warn-date = <"> HTTP-date <"> * * Buggrit, use a bloomin' regexp! * (\d{3}\s+\S+\s+\".*?\"(\s+\"(.*?)\")?) --> whole in $1, date in $3 */ while (!ap_regexec(warn_rx, val, nmatch, pmatch, 0)) { warning = apr_pstrndup(pool, val+pmatch[0].rm_so, pmatch[0].rm_eo - pmatch[0].rm_so); warn_time = 0; if (pmatch[2].rm_eo > pmatch[2].rm_so) { /* OK, we have a date here */ date = apr_pstrndup(pool, val+pmatch[2].rm_so, pmatch[2].rm_eo - pmatch[2].rm_so); warn_time = apr_date_parse_http(date); } if (!warn_time || (warn_time == ((header_dptr*)data)->time)) { apr_table_addn(headers, key, warning); } val += pmatch[0].rm_eo; } return 1; } static apr_table_t *ap_proxy_clean_warnings(apr_pool_t *p, apr_table_t *headers) { header_dptr x; x.pool = p; x.table = NULL; x.time = apr_date_parse_http(apr_table_get(headers, "Date")); apr_table_do(clean_warning_headers, &x, headers, "Warning", NULL); if (x.table != NULL) { apr_table_unset(headers, "Warning"); return apr_table_overlay(p, headers, x.table); } else { return headers; } } static void add_te_chunked(apr_pool_t *p, apr_bucket_alloc_t *bucket_alloc, apr_bucket_brigade *header_brigade) { apr_bucket *e; char *buf; const char te_hdr[] = "Transfer-Encoding: chunked" CRLF; buf = apr_pmemdup(p, te_hdr, sizeof(te_hdr)-1); ap_xlate_proto_to_ascii(buf, sizeof(te_hdr)-1); e = apr_bucket_pool_create(buf, sizeof(te_hdr)-1, p, bucket_alloc); APR_BRIGADE_INSERT_TAIL(header_brigade, e); } static void add_cl(apr_pool_t *p, apr_bucket_alloc_t *bucket_alloc, apr_bucket_brigade *header_brigade, const char *cl_val) { apr_bucket *e; char *buf; buf = apr_pstrcat(p, "Content-Length: ", cl_val, CRLF, NULL); ap_xlate_proto_to_ascii(buf, strlen(buf)); e = apr_bucket_pool_create(buf, strlen(buf), p, bucket_alloc); APR_BRIGADE_INSERT_TAIL(header_brigade, e); } #ifndef CRLF_ASCII #define CRLF_ASCII "\015\012" #endif #ifndef ZERO_ASCII #define ZERO_ASCII "\060" #endif static void terminate_headers(apr_bucket_alloc_t *bucket_alloc, apr_bucket_brigade *header_brigade) { apr_bucket *e; /* add empty line at the end of the headers */ e = apr_bucket_immortal_create(CRLF_ASCII, 2, bucket_alloc); APR_BRIGADE_INSERT_TAIL(header_brigade, e); } #define MAX_MEM_SPOOL 16384 typedef enum { RB_INIT = 0, RB_STREAM_CL, RB_STREAM_CHUNKED, RB_SPOOL_CL } rb_methods; typedef struct { apr_pool_t *p; request_rec *r; proxy_worker *worker; proxy_server_conf *sconf; char server_portstr[32]; proxy_conn_rec *backend; conn_rec *origin; apr_bucket_alloc_t *bucket_alloc; apr_bucket_brigade *header_brigade; apr_bucket_brigade *input_brigade; char *old_cl_val, *old_te_val; apr_off_t cl_val; rb_methods rb_method; int expecting_100; unsigned int do_100_continue:1, prefetch_nonblocking:1; } proxy_http_req_t; /* Read what's in the client pipe. If nonblocking is set and read is EAGAIN, * pass a FLUSH bucket to the backend and read again in blocking mode. */ static int stream_reqbody_read(proxy_http_req_t *req, apr_bucket_brigade *bb, int nonblocking) { request_rec *r = req->r; proxy_conn_rec *p_conn = req->backend; apr_bucket_alloc_t *bucket_alloc = req->bucket_alloc; apr_read_type_e block = nonblocking ? APR_NONBLOCK_READ : APR_BLOCK_READ; apr_status_t status; int rv; for (;;) { status = ap_get_brigade(r->input_filters, bb, AP_MODE_READBYTES, block, HUGE_STRING_LEN); if (block == APR_BLOCK_READ || (!APR_STATUS_IS_EAGAIN(status) && (status != APR_SUCCESS || !APR_BRIGADE_EMPTY(bb)))) { break; } /* Flush and retry (blocking) */ apr_brigade_cleanup(bb); rv = ap_proxy_pass_brigade(bucket_alloc, r, p_conn, req->origin, bb, 1); if (rv != OK) { return rv; } block = APR_BLOCK_READ; } if (status != APR_SUCCESS) { conn_rec *c = r->connection; ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(02608) "read request body failed to %pI (%s)" " from %s (%s)", p_conn->addr, p_conn->hostname ? p_conn->hostname: "", c->client_ip, c->remote_host ? c->remote_host: ""); return ap_map_http_request_error(status, HTTP_BAD_REQUEST); } return OK; } static int stream_reqbody(proxy_http_req_t *req, rb_methods rb_method) { request_rec *r = req->r; int seen_eos = 0, rv = OK; apr_size_t hdr_len; char chunk_hdr[20]; /* must be here due to transient bucket. */ proxy_conn_rec *p_conn = req->backend; apr_bucket_alloc_t *bucket_alloc = req->bucket_alloc; apr_bucket_brigade *header_brigade = req->header_brigade; apr_bucket_brigade *input_brigade = req->input_brigade; apr_off_t bytes, bytes_streamed = 0; apr_bucket *e; do { if (APR_BRIGADE_EMPTY(input_brigade) && APR_BRIGADE_EMPTY(header_brigade)) { rv = stream_reqbody_read(req, input_brigade, 1); if (rv != OK) { return rv; } } if (!APR_BRIGADE_EMPTY(input_brigade)) { /* If this brigade contains EOS, either stop or remove it. */ if (APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(input_brigade))) { seen_eos = 1; /* We can't pass this EOS to the output_filters. */ e = APR_BRIGADE_LAST(input_brigade); apr_bucket_delete(e); } apr_brigade_length(input_brigade, 1, &bytes); bytes_streamed += bytes; if (rb_method == RB_STREAM_CHUNKED) { if (bytes) { /* * Prepend the size of the chunk */ hdr_len = apr_snprintf(chunk_hdr, sizeof(chunk_hdr), "%" APR_UINT64_T_HEX_FMT CRLF, (apr_uint64_t)bytes); ap_xlate_proto_to_ascii(chunk_hdr, hdr_len); e = apr_bucket_transient_create(chunk_hdr, hdr_len, bucket_alloc); APR_BRIGADE_INSERT_HEAD(input_brigade, e); /* * Append the end-of-chunk CRLF */ e = apr_bucket_immortal_create(CRLF_ASCII, 2, bucket_alloc); APR_BRIGADE_INSERT_TAIL(input_brigade, e); } if (seen_eos) { /* * Append the tailing 0-size chunk */ e = apr_bucket_immortal_create(ZERO_ASCII CRLF_ASCII /* */ CRLF_ASCII, 5, bucket_alloc); APR_BRIGADE_INSERT_TAIL(input_brigade, e); } } else if (bytes_streamed > req->cl_val) { /* C-L < bytes streamed?!? * We will error out after the body is completely * consumed, but we can't stream more bytes at the * back end since they would in part be interpreted * as another request! If nothing is sent, then * just send nothing. * * Prevents HTTP Response Splitting. */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01086) "read more bytes of request body than expected " "(got %" APR_OFF_T_FMT ", expected " "%" APR_OFF_T_FMT ")", bytes_streamed, req->cl_val); return HTTP_INTERNAL_SERVER_ERROR; } if (seen_eos && apr_table_get(r->subprocess_env, "proxy-sendextracrlf")) { e = apr_bucket_immortal_create(CRLF_ASCII, 2, bucket_alloc); APR_BRIGADE_INSERT_TAIL(input_brigade, e); } } /* If we never sent the header brigade, go ahead and take care of * that now by prepending it (once only since header_brigade will be * empty afterward). */ APR_BRIGADE_PREPEND(input_brigade, header_brigade); /* Flush here on EOS because we won't stream_reqbody_read() again */ rv = ap_proxy_pass_brigade(bucket_alloc, r, p_conn, req->origin, input_brigade, seen_eos); if (rv != OK) { return rv; } } while (!seen_eos); if (rb_method == RB_STREAM_CL && bytes_streamed != req->cl_val) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01087) "client %s given Content-Length did not match" " number of body bytes read", r->connection->client_ip); return HTTP_BAD_REQUEST; } return OK; } static int spool_reqbody_cl(proxy_http_req_t *req, apr_off_t *bytes_spooled) { apr_pool_t *p = req->p; request_rec *r = req->r; int seen_eos = 0, rv = OK; apr_status_t status = APR_SUCCESS; apr_bucket_alloc_t *bucket_alloc = req->bucket_alloc; apr_bucket_brigade *input_brigade = req->input_brigade; apr_bucket_brigade *body_brigade; apr_bucket *e; apr_off_t bytes, fsize = 0; apr_file_t *tmpfile = NULL; apr_off_t limit; body_brigade = apr_brigade_create(p, bucket_alloc); *bytes_spooled = 0; limit = ap_get_limit_req_body(r); do { if (APR_BRIGADE_EMPTY(input_brigade)) { rv = stream_reqbody_read(req, input_brigade, 0); if (rv != OK) { return rv; } } /* If this brigade contains EOS, either stop or remove it. */ if (APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(input_brigade))) { seen_eos = 1; /* We can't pass this EOS to the output_filters. */ e = APR_BRIGADE_LAST(input_brigade); apr_bucket_delete(e); } apr_brigade_length(input_brigade, 1, &bytes); if (*bytes_spooled + bytes > MAX_MEM_SPOOL) { /* * LimitRequestBody does not affect Proxy requests (Should it?). * Let it take effect if we decide to store the body in a * temporary file on disk. */ if (limit && (*bytes_spooled + bytes > limit)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01088) "Request body is larger than the configured " "limit of %" APR_OFF_T_FMT, limit); return HTTP_REQUEST_ENTITY_TOO_LARGE; } /* can't spool any more in memory; write latest brigade to disk */ if (tmpfile == NULL) { const char *temp_dir; char *template; status = apr_temp_dir_get(&temp_dir, p); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01089) "search for temporary directory failed"); return HTTP_INTERNAL_SERVER_ERROR; } apr_filepath_merge(&template, temp_dir, "modproxy.tmp.XXXXXX", APR_FILEPATH_NATIVE, p); status = apr_file_mktemp(&tmpfile, template, 0, p); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01090) "creation of temporary file in directory " "%s failed", temp_dir); return HTTP_INTERNAL_SERVER_ERROR; } } for (e = APR_BRIGADE_FIRST(input_brigade); e != APR_BRIGADE_SENTINEL(input_brigade); e = APR_BUCKET_NEXT(e)) { const char *data; apr_size_t bytes_read, bytes_written; apr_bucket_read(e, &data, &bytes_read, APR_BLOCK_READ); status = apr_file_write_full(tmpfile, data, bytes_read, &bytes_written); if (status != APR_SUCCESS) { const char *tmpfile_name; if (apr_file_name_get(&tmpfile_name, tmpfile) != APR_SUCCESS) { tmpfile_name = "(unknown)"; } ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01091) "write to temporary file %s failed", tmpfile_name); return HTTP_INTERNAL_SERVER_ERROR; } AP_DEBUG_ASSERT(bytes_read == bytes_written); fsize += bytes_written; } apr_brigade_cleanup(input_brigade); } else { /* * Save input_brigade in body_brigade. (At least) in the SSL case * input_brigade contains transient buckets whose data would get * overwritten during the next call of ap_get_brigade in the loop. * ap_save_brigade ensures these buckets to be set aside. * Calling ap_save_brigade with NULL as filter is OK, because * body_brigade already has been created and does not need to get * created by ap_save_brigade. */ status = ap_save_brigade(NULL, &body_brigade, &input_brigade, p); if (status != APR_SUCCESS) { return HTTP_INTERNAL_SERVER_ERROR; } } *bytes_spooled += bytes; } while (!seen_eos); APR_BRIGADE_CONCAT(input_brigade, body_brigade); if (tmpfile) { apr_brigade_insert_file(input_brigade, tmpfile, 0, fsize, p); } if (apr_table_get(r->subprocess_env, "proxy-sendextracrlf")) { e = apr_bucket_immortal_create(CRLF_ASCII, 2, bucket_alloc); APR_BRIGADE_INSERT_TAIL(input_brigade, e); } return OK; } static int ap_proxy_http_prefetch(proxy_http_req_t *req, apr_uri_t *uri, char *url) { apr_pool_t *p = req->p; request_rec *r = req->r; conn_rec *c = r->connection; proxy_conn_rec *p_conn = req->backend; apr_bucket_alloc_t *bucket_alloc = req->bucket_alloc; apr_bucket_brigade *header_brigade = req->header_brigade; apr_bucket_brigade *input_brigade = req->input_brigade; apr_bucket_brigade *temp_brigade; apr_bucket *e; char *buf; apr_status_t status; apr_off_t bytes_read = 0; apr_off_t bytes; int force10, rv; apr_read_type_e block; conn_rec *origin = p_conn->connection; if (apr_table_get(r->subprocess_env, "force-proxy-request-1.0")) { if (req->expecting_100) { return HTTP_EXPECTATION_FAILED; } force10 = 1; } else { force10 = 0; } rv = ap_proxy_create_hdrbrgd(p, header_brigade, r, p_conn, req->worker, req->sconf, uri, url, req->server_portstr, &req->old_cl_val, &req->old_te_val); if (rv != OK) { return rv; } /* sub-requests never use keepalives, and mustn't pass request bodies. * Because the new logic looks at input_brigade, we will self-terminate * input_brigade and jump past all of the request body logic... * Reading anything with ap_get_brigade is likely to consume the * main request's body or read beyond EOS - which would be unplesant. * * An exception: when a kept_body is present, then subrequest CAN use * pass request bodies, and we DONT skip the body. */ if (!r->kept_body && r->main) { /* XXX: Why DON'T sub-requests use keepalives? */ p_conn->close = 1; req->old_te_val = NULL; req->old_cl_val = NULL; req->rb_method = RB_STREAM_CL; e = apr_bucket_eos_create(input_brigade->bucket_alloc); APR_BRIGADE_INSERT_TAIL(input_brigade, e); goto skip_body; } /* WE only understand chunked. Other modules might inject * (and therefore, decode) other flavors but we don't know * that the can and have done so unless they remove * their decoding from the headers_in T-E list. * XXX: Make this extensible, but in doing so, presume the * encoding has been done by the extensions' handler, and * do not modify add_te_chunked's logic */ if (req->old_te_val && ap_cstr_casecmp(req->old_te_val, "chunked") != 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01093) "%s Transfer-Encoding is not supported", req->old_te_val); return HTTP_INTERNAL_SERVER_ERROR; } if (req->old_cl_val && req->old_te_val) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01094) "client %s (%s) requested Transfer-Encoding " "chunked body with Content-Length (C-L ignored)", c->client_ip, c->remote_host ? c->remote_host: ""); req->old_cl_val = NULL; origin->keepalive = AP_CONN_CLOSE; p_conn->close = 1; } /* Prefetch MAX_MEM_SPOOL bytes * * This helps us avoid any election of C-L v.s. T-E * request bodies, since we are willing to keep in * memory this much data, in any case. This gives * us an instant C-L election if the body is of some * reasonable size. */ temp_brigade = apr_brigade_create(p, bucket_alloc); block = req->prefetch_nonblocking ? APR_NONBLOCK_READ : APR_BLOCK_READ; do { status = ap_get_brigade(r->input_filters, temp_brigade, AP_MODE_READBYTES, block, MAX_MEM_SPOOL - bytes_read); /* ap_get_brigade may return success with an empty brigade * for a non-blocking read which would block */ if (block == APR_NONBLOCK_READ && ((status == APR_SUCCESS && APR_BRIGADE_EMPTY(temp_brigade)) || APR_STATUS_IS_EAGAIN(status))) { break; } if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01095) "prefetch request body failed to %pI (%s)" " from %s (%s)", p_conn->addr, p_conn->hostname ? p_conn->hostname: "", c->client_ip, c->remote_host ? c->remote_host: ""); return ap_map_http_request_error(status, HTTP_BAD_REQUEST); } apr_brigade_length(temp_brigade, 1, &bytes); bytes_read += bytes; /* * Save temp_brigade in input_brigade. (At least) in the SSL case * temp_brigade contains transient buckets whose data would get * overwritten during the next call of ap_get_brigade in the loop. * ap_save_brigade ensures these buckets to be set aside. * Calling ap_save_brigade with NULL as filter is OK, because * input_brigade already has been created and does not need to get * created by ap_save_brigade. */ status = ap_save_brigade(NULL, &input_brigade, &temp_brigade, p); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01096) "processing prefetched request body failed" " to %pI (%s) from %s (%s)", p_conn->addr, p_conn->hostname ? p_conn->hostname: "", c->client_ip, c->remote_host ? c->remote_host: ""); return HTTP_INTERNAL_SERVER_ERROR; } /* Ensure we don't hit a wall where we have a buffer too small * for ap_get_brigade's filters to fetch us another bucket, * surrender once we hit 80 bytes less than MAX_MEM_SPOOL * (an arbitrary value.) */ } while ((bytes_read < MAX_MEM_SPOOL - 80) && !APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(input_brigade)) && !req->prefetch_nonblocking); /* Use chunked request body encoding or send a content-length body? * * Prefer C-L when: * * We have no request body (handled by RB_STREAM_CL) * * We have a request body length <= MAX_MEM_SPOOL * * The administrator has setenv force-proxy-request-1.0 * * The client sent a C-L body, and the administrator has * not setenv proxy-sendchunked or has set setenv proxy-sendcl * * The client sent a T-E body, and the administrator has * setenv proxy-sendcl, and not setenv proxy-sendchunked * * If both proxy-sendcl and proxy-sendchunked are set, the * behavior is the same as if neither were set, large bodies * that can't be read will be forwarded in their original * form of C-L, or T-E. * * To ensure maximum compatibility, setenv proxy-sendcl * To reduce server resource use, setenv proxy-sendchunked * * Then address specific servers with conditional setenv * options to restore the default behavior where desireable. * * We have to compute content length by reading the entire request * body; if request body is not small, we'll spool the remaining * input to a temporary file. Chunked is always preferable. * * We can only trust the client-provided C-L if the T-E header * is absent, and the filters are unchanged (the body won't * be resized by another content filter). */ if (!APR_BRIGADE_EMPTY(input_brigade) && APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(input_brigade))) { /* The whole thing fit, so our decision is trivial, use * the filtered bytes read from the client for the request * body Content-Length. * * If we expected no body, and read no body, do not set * the Content-Length. */ if (req->old_cl_val || req->old_te_val || bytes_read) { req->old_cl_val = apr_off_t_toa(r->pool, bytes_read); req->cl_val = bytes_read; } req->rb_method = RB_STREAM_CL; } else if (req->old_te_val) { if (force10 || (apr_table_get(r->subprocess_env, "proxy-sendcl") && !apr_table_get(r->subprocess_env, "proxy-sendchunks") && !apr_table_get(r->subprocess_env, "proxy-sendchunked"))) { req->rb_method = RB_SPOOL_CL; } else { req->rb_method = RB_STREAM_CHUNKED; } } else if (req->old_cl_val) { if (r->input_filters == r->proto_input_filters) { char *endstr; status = apr_strtoff(&req->cl_val, req->old_cl_val, &endstr, 10); if (status != APR_SUCCESS || *endstr || req->cl_val < 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01085) "could not parse request Content-Length (%s)", req->old_cl_val); return HTTP_BAD_REQUEST; } req->rb_method = RB_STREAM_CL; } else if (!force10 && (apr_table_get(r->subprocess_env, "proxy-sendchunks") || apr_table_get(r->subprocess_env, "proxy-sendchunked")) && !apr_table_get(r->subprocess_env, "proxy-sendcl")) { req->rb_method = RB_STREAM_CHUNKED; } else { req->rb_method = RB_SPOOL_CL; } } else { /* This is an appropriate default; very efficient for no-body * requests, and has the behavior that it will not add any C-L * when the old_cl_val is NULL. */ req->rb_method = RB_SPOOL_CL; } switch (req->rb_method) { case RB_STREAM_CHUNKED: add_te_chunked(req->p, bucket_alloc, header_brigade); break; case RB_STREAM_CL: if (req->old_cl_val) { add_cl(req->p, bucket_alloc, header_brigade, req->old_cl_val); } break; default: /* => RB_SPOOL_CL */ /* If we have to spool the body, do it now, before connecting or * reusing the backend connection. */ rv = spool_reqbody_cl(req, &bytes); if (rv != OK) { return rv; } if (bytes || req->old_te_val || req->old_cl_val) { add_cl(p, bucket_alloc, header_brigade, apr_off_t_toa(p, bytes)); } } /* Yes I hate gotos. This is the subrequest shortcut */ skip_body: /* * Handle Connection: header if we do HTTP/1.1 request: * If we plan to close the backend connection sent Connection: close * otherwise sent Connection: Keep-Alive. */ if (!force10) { if (!ap_proxy_connection_reusable(p_conn)) { buf = apr_pstrdup(p, "Connection: close" CRLF); } else { buf = apr_pstrdup(p, "Connection: Keep-Alive" CRLF); } ap_xlate_proto_to_ascii(buf, strlen(buf)); e = apr_bucket_pool_create(buf, strlen(buf), p, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(header_brigade, e); } terminate_headers(bucket_alloc, header_brigade); return OK; } static int ap_proxy_http_request(proxy_http_req_t *req) { int rv; request_rec *r = req->r; apr_bucket_alloc_t *bucket_alloc = req->bucket_alloc; apr_bucket_brigade *header_brigade = req->header_brigade; apr_bucket_brigade *input_brigade = req->input_brigade; /* send the request header/body, if any. */ switch (req->rb_method) { case RB_STREAM_CL: case RB_STREAM_CHUNKED: if (req->do_100_continue) { rv = ap_proxy_pass_brigade(bucket_alloc, r, req->backend, req->origin, header_brigade, 1); } else { rv = stream_reqbody(req, req->rb_method); } break; case RB_SPOOL_CL: /* Prefetch has built the header and spooled the whole body; * if we don't expect 100-continue we can flush both all at once, * otherwise flush the header only. */ if (!req->do_100_continue) { APR_BRIGADE_CONCAT(header_brigade, input_brigade); } rv = ap_proxy_pass_brigade(bucket_alloc, r, req->backend, req->origin, header_brigade, 1); break; default: /* shouldn't be possible */ rv = HTTP_INTERNAL_SERVER_ERROR; break; } if (rv != OK) { conn_rec *c = r->connection; /* apr_status_t value has been logged in lower level method */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01097) "pass request body failed to %pI (%s) from %s (%s)", req->backend->addr, req->backend->hostname ? req->backend->hostname: "", c->client_ip, c->remote_host ? c->remote_host: ""); return rv; } return OK; } /* * If the date is a valid RFC 850 date or asctime() date, then it * is converted to the RFC 1123 format. */ static const char *date_canon(apr_pool_t *p, const char *date) { apr_status_t rv; char* ndate; apr_time_t time = apr_date_parse_http(date); if (!time) { return date; } ndate = apr_palloc(p, APR_RFC822_DATE_LEN); rv = apr_rfc822_date(ndate, time); if (rv != APR_SUCCESS) { return date; } return ndate; } static request_rec *make_fake_req(conn_rec *c, request_rec *r) { apr_pool_t *pool; request_rec *rp; apr_pool_create(&pool, c->pool); rp = apr_pcalloc(pool, sizeof(*r)); rp->pool = pool; rp->status = HTTP_OK; rp->headers_in = apr_table_make(pool, 50); rp->trailers_in = apr_table_make(pool, 5); rp->subprocess_env = apr_table_make(pool, 50); rp->headers_out = apr_table_make(pool, 12); rp->trailers_out = apr_table_make(pool, 5); rp->err_headers_out = apr_table_make(pool, 5); rp->notes = apr_table_make(pool, 5); rp->server = r->server; rp->log = r->log; rp->proxyreq = r->proxyreq; rp->request_time = r->request_time; rp->connection = c; rp->output_filters = c->output_filters; rp->input_filters = c->input_filters; rp->proto_output_filters = c->output_filters; rp->proto_input_filters = c->input_filters; rp->useragent_ip = c->client_ip; rp->useragent_addr = c->client_addr; rp->request_config = ap_create_request_config(pool); proxy_run_create_req(r, rp); return rp; } static void process_proxy_header(request_rec *r, proxy_dir_conf *c, const char *key, const char *value) { static const char *date_hdrs[] = { "Date", "Expires", "Last-Modified", NULL }; static const struct { const char *name; ap_proxy_header_reverse_map_fn func; } transform_hdrs[] = { { "Location", ap_proxy_location_reverse_map }, { "Content-Location", ap_proxy_location_reverse_map }, { "URI", ap_proxy_location_reverse_map }, { "Destination", ap_proxy_location_reverse_map }, { "Set-Cookie", ap_proxy_cookie_reverse_map }, { NULL, NULL } }; int i; for (i = 0; date_hdrs[i]; ++i) { if (!strcasecmp(date_hdrs[i], key)) { apr_table_add(r->headers_out, key, date_canon(r->pool, value)); return; } } for (i = 0; transform_hdrs[i].name; ++i) { if (!strcasecmp(transform_hdrs[i].name, key)) { apr_table_add(r->headers_out, key, (*transform_hdrs[i].func)(r, c, value)); return; } } apr_table_add(r->headers_out, key, value); } /* * Note: pread_len is the length of the response that we've mistakenly * read (assuming that we don't consider that an error via * ProxyBadHeader StartBody). This depends on buffer actually being * local storage to the calling code in order for pread_len to make * any sense at all, since we depend on buffer still containing * what was read by ap_getline() upon return. */ static void ap_proxy_read_headers(request_rec *r, request_rec *rr, char *buffer, int size, conn_rec *c, int *pread_len) { int len; char *value, *end; int saw_headers = 0; void *sconf = r->server->module_config; proxy_server_conf *psc; proxy_dir_conf *dconf; apr_status_t rc; apr_bucket_brigade *tmp_bb; dconf = ap_get_module_config(r->per_dir_config, &proxy_module); psc = (proxy_server_conf *) ap_get_module_config(sconf, &proxy_module); r->headers_out = apr_table_make(r->pool, 20); r->trailers_out = apr_table_make(r->pool, 5); *pread_len = 0; /* * Read header lines until we get the empty separator line, a read error, * the connection closes (EOF), or we timeout. */ ap_log_rerror(APLOG_MARK, APLOG_TRACE4, 0, r, "Headers received from backend:"); tmp_bb = apr_brigade_create(r->pool, c->bucket_alloc); while (1) { rc = ap_proxygetline(tmp_bb, buffer, size, rr, AP_GETLINE_FOLD | AP_GETLINE_NOSPC_EOL, &len); if (len <= 0) break; if (APR_STATUS_IS_ENOSPC(rc)) { /* The header could not fit in the provided buffer, warn. * XXX: falls through with the truncated header, 5xx instead? */ int trunc = (len > 128 ? 128 : len) / 2; ap_log_rerror(APLOG_MARK, APLOG_WARNING, rc, r, APLOGNO(10124) "header size is over the limit allowed by " "ResponseFieldSize (%d bytes). " "Bad response header: '%.*s[...]%s'", size, trunc, buffer, buffer + len - trunc); } else { ap_log_rerror(APLOG_MARK, APLOG_TRACE4, 0, r, "%s", buffer); } if (!(value = strchr(buffer, ':'))) { /* Find the colon separator */ /* We may encounter invalid headers, usually from buggy * MS IIS servers, so we need to determine just how to handle * them. We can either ignore them, assume that they mark the * start-of-body (eg: a missing CRLF) or (the default) mark * the headers as totally bogus and return a 500. The sole * exception is an extra "HTTP/1.0 200, OK" line sprinkled * in between the usual MIME headers, which is a favorite * IIS bug. */ /* XXX: The mask check is buggy if we ever see an HTTP/1.10 */ if (!apr_date_checkmask(buffer, "HTTP/#.# ###*")) { if (psc->badopt == bad_error) { /* Nope, it wasn't even an extra HTTP header. Give up. */ r->headers_out = NULL; return; } else if (psc->badopt == bad_body) { /* if we've already started loading headers_out, then * return what we've accumulated so far, in the hopes * that they are useful; also note that we likely pre-read * the first line of the response. */ if (saw_headers) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01098) "Starting body due to bogus non-header " "in headers returned by %s (%s)", r->uri, r->method); *pread_len = len; return; } else { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01099) "No HTTP headers returned by %s (%s)", r->uri, r->method); return; } } } /* this is the psc->badopt == bad_ignore case */ ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01100) "Ignoring bogus HTTP header returned by %s (%s)", r->uri, r->method); continue; } *value = '\0'; ++value; /* XXX: RFC2068 defines only SP and HT as whitespace, this test is * wrong... and so are many others probably. */ while (apr_isspace(*value)) ++value; /* Skip to start of value */ /* should strip trailing whitespace as well */ for (end = &value[strlen(value)-1]; end > value && apr_isspace(*end); --end) *end = '\0'; /* make sure we add so as not to destroy duplicated headers * Modify headers requiring canonicalisation and/or affected * by ProxyPassReverse and family with process_proxy_header */ process_proxy_header(r, dconf, buffer, value); saw_headers = 1; } } static int addit_dammit(void *v, const char *key, const char *val) { apr_table_addn(v, key, val); return 1; } static apr_status_t ap_proxygetline(apr_bucket_brigade *bb, char *s, int n, request_rec *r, int flags, int *read) { apr_status_t rv; apr_size_t len; rv = ap_rgetline(&s, n, &len, r, flags, bb); apr_brigade_cleanup(bb); if (rv == APR_SUCCESS || APR_STATUS_IS_ENOSPC(rv)) { *read = (int)len; } else { *read = -1; } return rv; } /* * Limit the number of interim responses we sent back to the client. Otherwise * we suffer from a memory build up. Besides there is NO sense in sending back * an unlimited number of interim responses to the client. Thus if we cross * this limit send back a 502 (Bad Gateway). */ #ifndef AP_MAX_INTERIM_RESPONSES #define AP_MAX_INTERIM_RESPONSES 10 #endif static int add_trailers(void *data, const char *key, const char *val) { if (val) { apr_table_add((apr_table_t*)data, key, val); } return 1; } static int ap_proxy_http_process_response(proxy_http_req_t *req) { apr_pool_t *p = req->p; request_rec *r = req->r; conn_rec *c = r->connection; proxy_worker *worker = req->worker; proxy_conn_rec *backend = req->backend; conn_rec *origin = req->origin; int do_100_continue = req->do_100_continue; char *buffer; char fixed_buffer[HUGE_STRING_LEN]; const char *buf; char keepchar; apr_bucket *e; apr_bucket_brigade *bb; apr_bucket_brigade *pass_bb; int len, backasswards; int interim_response = 0; /* non-zero whilst interim 1xx responses * are being read. */ apr_size_t response_field_size = 0; int pread_len = 0; apr_table_t *save_table; int backend_broke = 0; static const char *hop_by_hop_hdrs[] = {"Keep-Alive", "Proxy-Authenticate", "TE", "Trailer", "Upgrade", NULL}; int i; const char *te = NULL; int original_status = r->status; int proxy_status = OK; const char *original_status_line = r->status_line; const char *proxy_status_line = NULL; apr_interval_time_t old_timeout = 0; proxy_dir_conf *dconf; dconf = ap_get_module_config(r->per_dir_config, &proxy_module); bb = apr_brigade_create(p, c->bucket_alloc); pass_bb = apr_brigade_create(p, c->bucket_alloc); /* Only use dynamically sized buffer if user specifies ResponseFieldSize */ if(backend->worker->s->response_field_size_set) { response_field_size = backend->worker->s->response_field_size; if (response_field_size != HUGE_STRING_LEN) buffer = apr_pcalloc(p, response_field_size); else buffer = fixed_buffer; } else { response_field_size = HUGE_STRING_LEN; buffer = fixed_buffer; } /* Setup for 100-Continue timeout if appropriate */ if (do_100_continue && worker->s->ping_timeout_set) { apr_socket_timeout_get(backend->sock, &old_timeout); if (worker->s->ping_timeout != old_timeout) { apr_status_t rc; rc = apr_socket_timeout_set(backend->sock, worker->s->ping_timeout); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, r, APLOGNO(01101) "could not set 100-Continue timeout"); } } } /* Get response from the remote server, and pass it up the * filter chain */ backend->r = make_fake_req(origin, r); /* In case anyone needs to know, this is a fake request that is really a * response. */ backend->r->proxyreq = PROXYREQ_RESPONSE; apr_table_setn(r->notes, "proxy-source-port", apr_psprintf(r->pool, "%hu", origin->local_addr->port)); do { apr_status_t rc; int major = 0, minor = 0; int toclose = 0; apr_brigade_cleanup(bb); rc = ap_proxygetline(backend->tmp_bb, buffer, response_field_size, backend->r, 0, &len); if (len == 0) { /* handle one potential stray CRLF */ rc = ap_proxygetline(backend->tmp_bb, buffer, response_field_size, backend->r, 0, &len); } if (len <= 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, r, APLOGNO(01102) "error reading status line from remote " "server %s:%d", backend->hostname, backend->port); if (APR_STATUS_IS_TIMEUP(rc)) { apr_table_setn(r->notes, "proxy_timedout", "1"); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01103) "read timeout"); if (do_100_continue) { return ap_proxyerror(r, HTTP_SERVICE_UNAVAILABLE, "Timeout on 100-Continue"); } } /* * If we are a reverse proxy request shutdown the connection * WITHOUT ANY response to trigger a retry by the client * if allowed (as for idempotent requests). * BUT currently we should not do this if the request is the * first request on a keepalive connection as browsers like * seamonkey only display an empty page in this case and do * not do a retry. We should also not do this on a * connection which times out; instead handle as * we normally would handle timeouts */ if (r->proxyreq == PROXYREQ_REVERSE && c->keepalives && !APR_STATUS_IS_TIMEUP(rc)) { apr_bucket *eos; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01104) "Closing connection to client because" " reading from backend server %s:%d failed." " Number of keepalives %i", backend->hostname, backend->port, c->keepalives); ap_proxy_backend_broke(r, bb); /* * Add an EOC bucket to signal the ap_http_header_filter * that it should get out of our way, BUT ensure that the * EOC bucket is inserted BEFORE an EOS bucket in bb as * some resource filters like mod_deflate pass everything * up to the EOS down the chain immediately and sent the * remainder of the brigade later (or even never). But in * this case the ap_http_header_filter does not get out of * our way soon enough. */ e = ap_bucket_eoc_create(c->bucket_alloc); eos = APR_BRIGADE_LAST(bb); while ((APR_BRIGADE_SENTINEL(bb) != eos) && !APR_BUCKET_IS_EOS(eos)) { eos = APR_BUCKET_PREV(eos); } if (eos == APR_BRIGADE_SENTINEL(bb)) { APR_BRIGADE_INSERT_TAIL(bb, e); } else { APR_BUCKET_INSERT_BEFORE(eos, e); } ap_pass_brigade(r->output_filters, bb); /* Mark the backend connection for closing */ backend->close = 1; /* Need to return OK to avoid sending an error message */ return OK; } else if (!c->keepalives) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01105) "NOT Closing connection to client" " although reading from backend server %s:%d" " failed.", backend->hostname, backend->port); } return ap_proxyerror(r, HTTP_BAD_GATEWAY, "Error reading from remote server"); } /* XXX: Is this a real headers length send from remote? */ backend->worker->s->read += len; /* Is it an HTTP/1 response? * This is buggy if we ever see an HTTP/1.10 */ if (apr_date_checkmask(buffer, "HTTP/#.# ###*")) { major = buffer[5] - '0'; minor = buffer[7] - '0'; /* If not an HTTP/1 message or * if the status line was > 8192 bytes */ if ((major != 1) || (len >= response_field_size - 1)) { return ap_proxyerror(r, HTTP_BAD_GATEWAY, apr_pstrcat(p, "Corrupt status line returned by remote " "server: ", buffer, NULL)); } backasswards = 0; keepchar = buffer[12]; buffer[12] = '\0'; proxy_status = atoi(&buffer[9]); apr_table_setn(r->notes, "proxy-status", apr_pstrdup(r->pool, &buffer[9])); if (keepchar != '\0') { buffer[12] = keepchar; } else { /* 2616 requires the space in Status-Line; the origin * server may have sent one but ap_rgetline_core will * have stripped it. */ buffer[12] = ' '; buffer[13] = '\0'; } proxy_status_line = apr_pstrdup(p, &buffer[9]); /* The status out of the front is the same as the status coming in * from the back, until further notice. */ r->status = proxy_status; r->status_line = proxy_status_line; ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "Status from backend: %d", proxy_status); /* read the headers. */ /* N.B. for HTTP/1.0 clients, we have to fold line-wrapped headers*/ /* Also, take care with headers with multiple occurences. */ /* First, tuck away all already existing cookies */ save_table = apr_table_make(r->pool, 2); apr_table_do(addit_dammit, save_table, r->headers_out, "Set-Cookie", NULL); /* shove the headers direct into r->headers_out */ ap_proxy_read_headers(r, backend->r, buffer, response_field_size, origin, &pread_len); if (r->headers_out == NULL) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01106) "bad HTTP/%d.%d header returned by %s (%s)", major, minor, r->uri, r->method); backend->close = 1; /* * ap_send_error relies on a headers_out to be present. we * are in a bad position here.. so force everything we send out * to have nothing to do with the incoming packet */ r->headers_out = apr_table_make(r->pool,1); r->status = HTTP_BAD_GATEWAY; r->status_line = "bad gateway"; return r->status; } /* Now, add in the just read cookies */ apr_table_do(addit_dammit, save_table, r->headers_out, "Set-Cookie", NULL); /* and now load 'em all in */ if (!apr_is_empty_table(save_table)) { apr_table_unset(r->headers_out, "Set-Cookie"); r->headers_out = apr_table_overlay(r->pool, r->headers_out, save_table); } /* can't have both Content-Length and Transfer-Encoding */ if (apr_table_get(r->headers_out, "Transfer-Encoding") && apr_table_get(r->headers_out, "Content-Length")) { /* * 2616 section 4.4, point 3: "if both Transfer-Encoding * and Content-Length are received, the latter MUST be * ignored"; * * To help mitigate HTTP Splitting, unset Content-Length * and shut down the backend server connection * XXX: We aught to treat such a response as uncachable */ apr_table_unset(r->headers_out, "Content-Length"); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01107) "server %s:%d returned Transfer-Encoding" " and Content-Length", backend->hostname, backend->port); backend->close = 1; } /* * Save a possible Transfer-Encoding header as we need it later for * ap_http_filter to know where to end. */ te = apr_table_get(r->headers_out, "Transfer-Encoding"); /* strip connection listed hop-by-hop headers from response */ toclose = ap_proxy_clear_connection_fn(r, r->headers_out); if (toclose) { backend->close = 1; } if ((buf = apr_table_get(r->headers_out, "Content-Type"))) { ap_set_content_type(r, apr_pstrdup(p, buf)); } if (!ap_is_HTTP_INFO(proxy_status)) { ap_proxy_pre_http_request(origin, backend->r); } /* Clear hop-by-hop headers */ for (i=0; hop_by_hop_hdrs[i]; ++i) { apr_table_unset(r->headers_out, hop_by_hop_hdrs[i]); } /* Delete warnings with wrong date */ r->headers_out = ap_proxy_clean_warnings(p, r->headers_out); /* handle Via header in response */ if (req->sconf->viaopt != via_off && req->sconf->viaopt != via_block) { const char *server_name = ap_get_server_name(r); /* If USE_CANONICAL_NAME_OFF was configured for the proxy virtual host, * then the server name returned by ap_get_server_name() is the * origin server name (which does make too much sense with Via: headers) * so we use the proxy vhost's name instead. */ if (server_name == r->hostname) server_name = r->server->server_hostname; /* create a "Via:" response header entry and merge it */ apr_table_addn(r->headers_out, "Via", (req->sconf->viaopt == via_full) ? apr_psprintf(p, "%d.%d %s%s (%s)", HTTP_VERSION_MAJOR(r->proto_num), HTTP_VERSION_MINOR(r->proto_num), server_name, req->server_portstr, AP_SERVER_BASEVERSION) : apr_psprintf(p, "%d.%d %s%s", HTTP_VERSION_MAJOR(r->proto_num), HTTP_VERSION_MINOR(r->proto_num), server_name, req->server_portstr) ); } /* cancel keepalive if HTTP/1.0 or less */ if ((major < 1) || (minor < 1)) { backend->close = 1; origin->keepalive = AP_CONN_CLOSE; } } else { /* an http/0.9 response */ backasswards = 1; r->status = 200; r->status_line = "200 OK"; backend->close = 1; } if (ap_is_HTTP_INFO(proxy_status)) { /* RFC2616 tells us to forward this. * * OTOH, an interim response here may mean the backend * is playing sillybuggers. The Client didn't ask for * it within the defined HTTP/1.1 mechanisms, and if * it's an extension, it may also be unsupported by us. * * There's also the possibility that changing existing * behaviour here might break something. * * So let's make it configurable. * * We need to set "r->expecting_100 = 1" otherwise origin * server behaviour will apply. */ const char *policy = apr_table_get(r->subprocess_env, "proxy-interim-response"); ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "HTTP: received interim %d response", r->status); if (!policy || (!strcasecmp(policy, "RFC") && (proxy_status != HTTP_CONTINUE || (req->expecting_100 = 1)))) { if (proxy_status == HTTP_CONTINUE) { r->expecting_100 = req->expecting_100; req->expecting_100 = 0; } ap_send_interim_response(r, 1); } /* FIXME: refine this to be able to specify per-response-status * policies and maybe also add option to bail out with 502 */ else if (strcasecmp(policy, "Suppress")) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01108) "undefined proxy interim response policy"); } interim_response++; } else { interim_response = 0; } /* If we still do 100-continue (end-to-end or ping), either the * current response is the expected "100 Continue" and we are done * with this mode, or this is another interim response and we'll wait * for the next one, or this is a final response and hence the backend * did not honor our expectation. */ if (do_100_continue && (!interim_response || proxy_status == HTTP_CONTINUE)) { /* RFC 7231 - Section 5.1.1 - Expect - Requirement for servers * A server that responds with a final status code before * reading the entire message body SHOULD indicate in that * response whether it intends to close the connection or * continue reading and discarding the request message. * * So, if this response is not an interim 100 Continue, we can * avoid sending the request body if the backend responded with * "Connection: close" or HTTP < 1.1, and either let the core * discard it or the caller try another balancer member with the * same body (given status 503, though not implemented yet). */ int do_send_body = (proxy_status == HTTP_CONTINUE || (!toclose && major > 0 && minor > 0)); /* Reset to old timeout iff we've adjusted it. */ if (worker->s->ping_timeout_set) { apr_socket_timeout_set(backend->sock, old_timeout); } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(10153) "HTTP: %s100 continue sent by %pI (%s): " "%ssending body (response: HTTP/%i.%i %s)", proxy_status != HTTP_CONTINUE ? "no " : "", backend->addr, backend->hostname ? backend->hostname : "", do_send_body ? "" : "not ", major, minor, proxy_status_line); if (do_send_body) { int status; /* Send the request body (fully). */ switch(req->rb_method) { case RB_STREAM_CL: case RB_STREAM_CHUNKED: status = stream_reqbody(req, req->rb_method); break; case RB_SPOOL_CL: /* Prefetch has spooled the whole body, flush it. */ status = ap_proxy_pass_brigade(req->bucket_alloc, r, backend, origin, req->input_brigade, 1); break; default: /* Shouldn't happen */ status = HTTP_INTERNAL_SERVER_ERROR; break; } if (status != OK) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(10154) "pass request body failed " "to %pI (%s) from %s (%s) with status %i", backend->addr, backend->hostname ? backend->hostname : "", c->client_ip, c->remote_host ? c->remote_host : "", status); backend->close = 1; return status; } } else { /* If we don't read the client connection any further, since * there are pending data it should be "Connection: close"d to * prevent reuse. We don't exactly c->keepalive = AP_CONN_CLOSE * here though, because error_override or a potential retry on * another backend could finally read that data and finalize * the request processing, making keep-alive possible. So what * we do is restoring r->expecting_100 for ap_set_keepalive() * to do the right thing according to the final response and * any later update of r->expecting_100. */ r->expecting_100 = req->expecting_100; req->expecting_100 = 0; } /* Once only! */ do_100_continue = 0; } if (interim_response) { /* Already forwarded above, read next response */ continue; } /* Moved the fixups of Date headers and those affected by * ProxyPassReverse/etc from here to ap_proxy_read_headers */ if ((proxy_status == 401) && (dconf->error_override)) { const char *buf; const char *wa = "WWW-Authenticate"; if ((buf = apr_table_get(r->headers_out, wa))) { apr_table_set(r->err_headers_out, wa, buf); } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01109) "origin server sent 401 without " "WWW-Authenticate header"); } } r->sent_bodyct = 1; /* * Is it an HTTP/0.9 response or did we maybe preread the 1st line of * the response? If so, load the extra data. These are 2 mutually * exclusive possibilities, that just happen to require very * similar behavior. */ if (backasswards || pread_len) { apr_ssize_t cntr = (apr_ssize_t)pread_len; if (backasswards) { /*@@@FIXME: * At this point in response processing of a 0.9 response, * we don't know yet whether data is binary or not. * mod_charset_lite will get control later on, so it cannot * decide on the conversion of this buffer full of data. * However, chances are that we are not really talking to an * HTTP/0.9 server, but to some different protocol, therefore * the best guess IMHO is to always treat the buffer as "text/x": */ ap_xlate_proto_to_ascii(buffer, len); cntr = (apr_ssize_t)len; } e = apr_bucket_heap_create(buffer, cntr, NULL, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); } /* PR 41646: get HEAD right with ProxyErrorOverride */ if (ap_is_HTTP_ERROR(r->status) && dconf->error_override) { /* clear r->status for override error, otherwise ErrorDocument * thinks that this is a recursive error, and doesn't find the * custom error page */ r->status = HTTP_OK; /* Discard body, if one is expected */ if (!r->header_only && !AP_STATUS_IS_HEADER_ONLY(proxy_status)) { const char *tmp; /* Add minimal headers needed to allow http_in filter * detecting end of body without waiting for a timeout. */ if ((tmp = apr_table_get(r->headers_out, "Transfer-Encoding"))) { apr_table_set(backend->r->headers_in, "Transfer-Encoding", tmp); } else if ((tmp = apr_table_get(r->headers_out, "Content-Length"))) { apr_table_set(backend->r->headers_in, "Content-Length", tmp); } else if (te) { apr_table_set(backend->r->headers_in, "Transfer-Encoding", te); } ap_discard_request_body(backend->r); } /* * prevent proxy_handler() from treating this as an * internal error. */ apr_table_setn(r->notes, "proxy-error-override", "1"); return proxy_status; } /* send body - but only if a body is expected */ if ((!r->header_only) && /* not HEAD request */ (proxy_status != HTTP_NO_CONTENT) && /* not 204 */ (proxy_status != HTTP_NOT_MODIFIED)) { /* not 304 */ /* We need to copy the output headers and treat them as input * headers as well. BUT, we need to do this before we remove * TE, so that they are preserved accordingly for * ap_http_filter to know where to end. */ backend->r->headers_in = apr_table_clone(backend->r->pool, r->headers_out); /* * Restore Transfer-Encoding header from response if we saved * one before and there is none left. We need it for the * ap_http_filter. See above. */ if (te && !apr_table_get(backend->r->headers_in, "Transfer-Encoding")) { apr_table_add(backend->r->headers_in, "Transfer-Encoding", te); } apr_table_unset(r->headers_out,"Transfer-Encoding"); ap_log_rerror(APLOG_MARK, APLOG_TRACE3, 0, r, "start body send"); /* * if we are overriding the errors, we can't put the content * of the page into the brigade */ if (!dconf->error_override || !ap_is_HTTP_ERROR(proxy_status)) { /* read the body, pass it to the output filters */ apr_read_type_e mode = APR_NONBLOCK_READ; int finish = FALSE; /* Handle the case where the error document is itself reverse * proxied and was successful. We must maintain any previous * error status so that an underlying error (eg HTTP_NOT_FOUND) * doesn't become an HTTP_OK. */ if (dconf->error_override && !ap_is_HTTP_ERROR(proxy_status) && ap_is_HTTP_ERROR(original_status)) { r->status = original_status; r->status_line = original_status_line; } do { apr_off_t readbytes; apr_status_t rv; rv = ap_get_brigade(backend->r->input_filters, bb, AP_MODE_READBYTES, mode, req->sconf->io_buffer_size); /* ap_get_brigade will return success with an empty brigade * for a non-blocking read which would block: */ if (mode == APR_NONBLOCK_READ && (APR_STATUS_IS_EAGAIN(rv) || (rv == APR_SUCCESS && APR_BRIGADE_EMPTY(bb)))) { /* flush to the client and switch to blocking mode */ e = apr_bucket_flush_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); if (ap_pass_brigade(r->output_filters, bb) || c->aborted) { backend->close = 1; break; } apr_brigade_cleanup(bb); mode = APR_BLOCK_READ; continue; } else if (rv == APR_EOF) { backend->close = 1; break; } else if (rv != APR_SUCCESS) { /* In this case, we are in real trouble because * our backend bailed on us. Pass along a 502 error * error bucket */ ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01110) "error reading response"); ap_proxy_backend_broke(r, bb); ap_pass_brigade(r->output_filters, bb); backend_broke = 1; backend->close = 1; break; } /* next time try a non-blocking read */ mode = APR_NONBLOCK_READ; if (!apr_is_empty_table(backend->r->trailers_in)) { apr_table_do(add_trailers, r->trailers_out, backend->r->trailers_in, NULL); apr_table_clear(backend->r->trailers_in); } apr_brigade_length(bb, 0, &readbytes); backend->worker->s->read += readbytes; #if DEBUGGING { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01111) "readbytes: %#x", readbytes); } #endif /* sanity check */ if (APR_BRIGADE_EMPTY(bb)) { break; } /* Switch the allocator lifetime of the buckets */ ap_proxy_buckets_lifetime_transform(r, bb, pass_bb); /* found the last brigade? */ if (APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(pass_bb))) { /* signal that we must leave */ finish = TRUE; /* the brigade may contain transient buckets that contain * data that lives only as long as the backend connection. * Force a setaside so these transient buckets become heap * buckets that live as long as the request. */ for (e = APR_BRIGADE_FIRST(pass_bb); e != APR_BRIGADE_SENTINEL(pass_bb); e = APR_BUCKET_NEXT(e)) { apr_bucket_setaside(e, r->pool); } /* finally it is safe to clean up the brigade from the * connection pool, as we have forced a setaside on all * buckets. */ apr_brigade_cleanup(bb); /* make sure we release the backend connection as soon * as we know we are done, so that the backend isn't * left waiting for a slow client to eventually * acknowledge the data. */ ap_proxy_release_connection(backend->worker->s->scheme, backend, r->server); /* Ensure that the backend is not reused */ req->backend = NULL; } /* try send what we read */ if (ap_pass_brigade(r->output_filters, pass_bb) != APR_SUCCESS || c->aborted) { /* Ack! Phbtt! Die! User aborted! */ /* Only close backend if we haven't got all from the * backend. Furthermore if req->backend is NULL it is no * longer safe to fiddle around with backend as it might * be already in use by another thread. */ if (req->backend) { /* this causes socket close below */ req->backend->close = 1; } finish = TRUE; } /* make sure we always clean up after ourselves */ apr_brigade_cleanup(pass_bb); apr_brigade_cleanup(bb); } while (!finish); } ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "end body send"); } else { ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "header only"); /* make sure we release the backend connection as soon * as we know we are done, so that the backend isn't * left waiting for a slow client to eventually * acknowledge the data. */ ap_proxy_release_connection(backend->worker->s->scheme, backend, r->server); req->backend = NULL; /* Pass EOS bucket down the filter chain. */ e = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); ap_pass_brigade(r->output_filters, bb); apr_brigade_cleanup(bb); } } while (interim_response && (interim_response < AP_MAX_INTERIM_RESPONSES)); /* We have to cleanup bb brigade, because buckets inserted to it could be * created from scpool and this pool can be freed before this brigade. */ apr_brigade_cleanup(bb); /* See define of AP_MAX_INTERIM_RESPONSES for why */ if (interim_response >= AP_MAX_INTERIM_RESPONSES) { return ap_proxyerror(r, HTTP_BAD_GATEWAY, apr_psprintf(p, "Too many (%d) interim responses from origin server", interim_response)); } /* If our connection with the client is to be aborted, return DONE. */ if (c->aborted || backend_broke) { return DONE; } return OK; } static apr_status_t ap_proxy_http_cleanup(const char *scheme, request_rec *r, proxy_conn_rec *backend) { ap_proxy_release_connection(scheme, backend, r->server); return OK; } /* * This handles http:// URLs, and other URLs using a remote proxy over http * If proxyhost is NULL, then contact the server directly, otherwise * go via the proxy. * Note that if a proxy is used, then URLs other than http: can be accessed, * also, if we have trouble which is clearly specific to the proxy, then * we return DECLINED so that we can try another proxy. (Or the direct * route.) */ static int proxy_http_handler(request_rec *r, proxy_worker *worker, proxy_server_conf *conf, char *url, const char *proxyname, apr_port_t proxyport) { int status; char *scheme; const char *proxy_function; const char *u; proxy_http_req_t *req = NULL; proxy_conn_rec *backend = NULL; int is_ssl = 0; conn_rec *c = r->connection; proxy_dir_conf *dconf; int retry = 0; char *locurl = url; int toclose = 0; /* * Use a shorter-lived pool to reduce memory usage * and avoid a memory leak */ apr_pool_t *p = r->pool; apr_uri_t *uri; /* find the scheme */ u = strchr(url, ':'); if (u == NULL || u[1] != '/' || u[2] != '/' || u[3] == '\0') return DECLINED; if ((u - url) > 14) return HTTP_BAD_REQUEST; scheme = apr_pstrmemdup(p, url, u - url); /* scheme is lowercase */ ap_str_tolower(scheme); /* is it for us? */ if (strcmp(scheme, "https") == 0) { if (!ap_proxy_ssl_enable(NULL)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01112) "HTTPS: declining URL %s (mod_ssl not configured?)", url); return DECLINED; } is_ssl = 1; proxy_function = "HTTPS"; } else if (!(strcmp(scheme, "http") == 0 || (strcmp(scheme, "ftp") == 0 && proxyname))) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01113) "HTTP: declining URL %s", url); return DECLINED; /* only interested in HTTP, or FTP via proxy */ } else { if (*scheme == 'h') proxy_function = "HTTP"; else proxy_function = "FTP"; } ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "HTTP: serving URL %s", url); /* create space for state information */ if ((status = ap_proxy_acquire_connection(proxy_function, &backend, worker, r->server)) != OK) { return status; } backend->is_ssl = is_ssl; req = apr_pcalloc(p, sizeof(*req)); req->p = p; req->r = r; req->sconf = conf; req->worker = worker; req->backend = backend; req->bucket_alloc = c->bucket_alloc; req->rb_method = RB_INIT; dconf = ap_get_module_config(r->per_dir_config, &proxy_module); /* Should we handle end-to-end or ping 100-continue? */ if ((r->expecting_100 && dconf->forward_100_continue) || PROXY_DO_100_CONTINUE(worker, r)) { /* We need to reset r->expecting_100 or prefetching will cause * ap_http_filter() to send "100 Continue" response by itself. So * we'll use req->expecting_100 in mod_proxy_http to determine whether * the client should be forwarded "100 continue", and r->expecting_100 * will be restored at the end of the function with the actual value of * req->expecting_100 (i.e. cleared only if mod_proxy_http sent the * "100 Continue" according to its policy). */ req->do_100_continue = req->prefetch_nonblocking = 1; req->expecting_100 = r->expecting_100; r->expecting_100 = 0; } /* Should we block while prefetching the body or try nonblocking and flush * data to the backend ASAP? */ else if (apr_table_get(r->subprocess_env, "proxy-prefetch-nonblocking")) { req->prefetch_nonblocking = 1; } /* * In the case that we are handling a reverse proxy connection and this * is not a request that is coming over an already kept alive connection * with the client, do NOT reuse the connection to the backend, because * we cannot forward a failure to the client in this case as the client * does NOT expect this in this situation. * Yes, this creates a performance penalty. */ if ((r->proxyreq == PROXYREQ_REVERSE) && (!c->keepalives) && (apr_table_get(r->subprocess_env, "proxy-initial-not-pooled"))) { backend->close = 1; } /* Step One: Determine Who To Connect To */ uri = apr_palloc(p, sizeof(*uri)); if ((status = ap_proxy_determine_connection(p, r, conf, worker, backend, uri, &locurl, proxyname, proxyport, req->server_portstr, sizeof(req->server_portstr)))) goto cleanup; /* Prefetch (nonlocking) the request body so to increase the chance to get * the whole (or enough) body and determine Content-Length vs chunked or * spooled. By doing this before connecting or reusing the backend, we want * to minimize the delay between this connection is considered alive and * the first bytes sent (should the client's link be slow or some input * filter retain the data). This is a best effort to prevent the backend * from closing (from under us) what it thinks is an idle connection, hence * to reduce to the minimum the unavoidable local is_socket_connected() vs * remote keepalive race condition. */ req->input_brigade = apr_brigade_create(p, req->bucket_alloc); req->header_brigade = apr_brigade_create(p, req->bucket_alloc); if ((status = ap_proxy_http_prefetch(req, uri, locurl)) != OK) goto cleanup; /* We need to reset backend->close now, since ap_proxy_http_prefetch() set * it to disable the reuse of the connection *after* this request (no keep- * alive), not to close any reusable connection before this request. However * assure what is expected later by using a local flag and do the right thing * when ap_proxy_connect_backend() below provides the connection to close. */ toclose = backend->close; backend->close = 0; while (retry < 2) { if (retry) { char *newurl = url; /* Step One (again): (Re)Determine Who To Connect To */ if ((status = ap_proxy_determine_connection(p, r, conf, worker, backend, uri, &newurl, proxyname, proxyport, req->server_portstr, sizeof(req->server_portstr)))) break; /* The code assumes locurl is not changed during the loop, or * ap_proxy_http_prefetch() would have to be called every time, * and header_brigade be changed accordingly... */ AP_DEBUG_ASSERT(strcmp(newurl, locurl) == 0); } /* Step Two: Make the Connection */ if (ap_proxy_check_connection(proxy_function, backend, r->server, 1, PROXY_CHECK_CONN_EMPTY) && ap_proxy_connect_backend(proxy_function, backend, worker, r->server)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01114) "HTTP: failed to make connection to backend: %s", backend->hostname); status = HTTP_SERVICE_UNAVAILABLE; break; } /* Step Three: Create conn_rec */ if ((status = ap_proxy_connection_create_ex(proxy_function, backend, r)) != OK) break; req->origin = backend->connection; /* Don't recycle the connection if prefetch (above) told not to do so */ if (toclose) { backend->close = 1; req->origin->keepalive = AP_CONN_CLOSE; } /* Step Four: Send the Request * On the off-chance that we forced a 100-Continue as a * kinda HTTP ping test, allow for retries */ status = ap_proxy_http_request(req); if (status != OK) { if (req->do_100_continue && status == HTTP_SERVICE_UNAVAILABLE) { ap_log_rerror(APLOG_MARK, APLOG_INFO, status, r, APLOGNO(01115) "HTTP: 100-Continue failed to %pI (%s)", worker->cp->addr, worker->s->hostname_ex); backend->close = 1; retry++; continue; } break; } /* Step Five: Receive the Response... Fall thru to cleanup */ status = ap_proxy_http_process_response(req); break; } /* Step Six: Clean Up */ cleanup: if (req->backend) { if (status != OK) req->backend->close = 1; ap_proxy_http_cleanup(proxy_function, r, req->backend); } if (req->expecting_100) { /* Restore r->expecting_100 if we didn't touch it */ r->expecting_100 = req->expecting_100; } return status; } /* post_config hook: */ static int proxy_http_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { /* proxy_http_post_config() will be called twice during startup. So, don't * set up the static data the 1st time through. */ if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) { return OK; } ap_proxy_clear_connection_fn = APR_RETRIEVE_OPTIONAL_FN(ap_proxy_clear_connection); if (!ap_proxy_clear_connection_fn) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02477) "mod_proxy must be loaded for mod_proxy_http"); return !OK; } return OK; } static void ap_proxy_http_register_hook(apr_pool_t *p) { ap_hook_post_config(proxy_http_post_config, NULL, NULL, APR_HOOK_MIDDLE); proxy_hook_scheme_handler(proxy_http_handler, NULL, NULL, APR_HOOK_FIRST); proxy_hook_canon_handler(proxy_http_canon, NULL, NULL, APR_HOOK_FIRST); warn_rx = ap_pregcomp(p, "[0-9]{3}[ \t]+[^ \t]+[ \t]+\"[^\"]*\"([ \t]+\"([^\"]+)\")?", 0); } AP_DECLARE_MODULE(proxy_http) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ NULL, /* command apr_table_t */ ap_proxy_http_register_hook/* register hooks */ }; httpd-2.4.41/modules/proxy/config.m40000644000000000000500000000734113303340351015574 0ustar rootsrcdnl modules enabled in this directory by default APACHE_MODPATH_INIT(proxy) proxy_objs="mod_proxy.lo proxy_util.lo" APACHE_MODULE(proxy, Apache proxy module, $proxy_objs, , most) dnl set aside module selections and default, and set the module default to the dnl same scope (shared|static) as selected for mod proxy, along with setting dnl the default selection to "most" for remaining proxy modules, mirroring the dnl behavior of 2.4.1 and later, but failing ./configure only if an explicitly dnl enabled module is missing its prereqs save_module_selection=$module_selection save_module_default=$module_default if test "$enable_proxy" != "no"; then module_selection=most if test "$enable_proxy" = "shared" -o "$enable_proxy" = "static"; then module_default=$enable_proxy fi fi proxy_connect_objs="mod_proxy_connect.lo" proxy_ftp_objs="mod_proxy_ftp.lo" proxy_http_objs="mod_proxy_http.lo" proxy_fcgi_objs="mod_proxy_fcgi.lo" proxy_scgi_objs="mod_proxy_scgi.lo" proxy_uwsgi_objs="mod_proxy_uwsgi.lo" proxy_fdpass_objs="mod_proxy_fdpass.lo" proxy_ajp_objs="mod_proxy_ajp.lo ajp_header.lo ajp_link.lo ajp_msg.lo ajp_utils.lo" proxy_wstunnel_objs="mod_proxy_wstunnel.lo" proxy_balancer_objs="mod_proxy_balancer.lo" case "$host" in *os2*) # OS/2 DLLs must resolve all symbols at build time and # these sub-modules need some from the main proxy module proxy_connect_objs="$proxy_connect_objs mod_proxy.la" proxy_ftp_objs="$proxy_ftp_objs mod_proxy.la" proxy_http_objs="$proxy_http_objs mod_proxy.la" proxy_fcgi_objs="$proxy_fcgi_objs mod_proxy.la" proxy_scgi_objs="$proxy_scgi_objs mod_proxy.la" proxy_uwsgi_objs="$proxy_uwsgi_objs mod_proxy.la" proxy_fdpass_objs="$proxy_fdpass_objs mod_proxy.la" proxy_ajp_objs="$proxy_ajp_objs mod_proxy.la" proxy_wstunnel_objs="$proxy_wstunnel_objs mod_proxy.la" proxy_balancer_objs="$proxy_balancer_objs mod_proxy.la" ;; esac APACHE_MODULE(proxy_connect, Apache proxy CONNECT module. Requires --enable-proxy., $proxy_connect_objs, , most, , proxy) APACHE_MODULE(proxy_ftp, Apache proxy FTP module. Requires --enable-proxy., $proxy_ftp_objs, , most, , proxy) APACHE_MODULE(proxy_http, Apache proxy HTTP module. Requires --enable-proxy., $proxy_http_objs, , most, , proxy) APACHE_MODULE(proxy_fcgi, Apache proxy FastCGI module. Requires --enable-proxy., $proxy_fcgi_objs, , most, , proxy) APACHE_MODULE(proxy_scgi, Apache proxy SCGI module. Requires --enable-proxy., $proxy_scgi_objs, , most, , proxy) APACHE_MODULE(proxy_uwsgi, Apache proxy UWSGI module. Requires --enable-proxy., $proxy_uwsgi_objs, , most, , proxy) APACHE_MODULE(proxy_fdpass, Apache proxy to Unix Daemon Socket module. Requires --enable-proxy., $proxy_fdpass_objs, , most, [ AC_CHECK_DECL(CMSG_DATA,,, [ #include #include ]) if test $ac_cv_have_decl_CMSG_DATA = "no"; then AC_MSG_WARN([Your system does not support CMSG_DATA.]) enable_proxy_fdpass=no fi ],proxy) APACHE_MODULE(proxy_wstunnel, Apache proxy Websocket Tunnel module. Requires --enable-proxy., $proxy_wstunnel_objs, , most, , proxy) APACHE_MODULE(proxy_ajp, Apache proxy AJP module. Requires --enable-proxy., $proxy_ajp_objs, , most, , proxy) APACHE_MODULE(proxy_balancer, Apache proxy BALANCER module. Requires --enable-proxy., $proxy_balancer_objs, , most, , proxy) APACHE_MODULE(proxy_express, mass reverse-proxy module. Requires --enable-proxy., , , most, , proxy) APACHE_MODULE(proxy_hcheck, [reverse-proxy health-check module. Requires --enable-proxy and --enable-watchdog.], , , most, , [proxy,watchdog]) APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current -I\$(top_srcdir)/modules/http2]) module_selection=$save_module_selection module_default=$save_module_default APACHE_MODPATH_FINISH httpd-2.4.41/modules/proxy/ajp_header.c0000644000000000000500000007315313472755016016336 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ajp_header.h" #include "ajp.h" APLOG_USE_MODULE(proxy_ajp); static const char *response_trans_headers[] = { "Content-Type", "Content-Language", "Content-Length", "Date", "Last-Modified", "Location", "Set-Cookie", "Set-Cookie2", "Servlet-Engine", "Status", "WWW-Authenticate" }; static const char *long_res_header_for_sc(int sc) { const char *rc = NULL; sc = sc & 0X00FF; if (sc <= SC_RES_HEADERS_NUM && sc > 0) { rc = response_trans_headers[sc - 1]; } return rc; } #define UNKNOWN_METHOD (-1) static int sc_for_req_header(const char *header_name) { char header[16]; apr_size_t len = strlen(header_name); const char *p = header_name; int i = 0; /* ACCEPT-LANGUAGE is the longest header * that is of interest. */ if (len < 4 || len > 15) return UNKNOWN_METHOD; memset(header, 0, sizeof header); while (*p) header[i++] = apr_toupper(*p++); header[i] = '\0'; p = &header[1]; switch (header[0]) { case 'A': if (memcmp(p, "CCEPT", 5) == 0) { if (!header[6]) return SC_ACCEPT; else if (header[6] == '-') { p += 6; if (strcmp(p, "CHARSET") == 0) return SC_ACCEPT_CHARSET; else if (strcmp(p, "ENCODING") == 0) return SC_ACCEPT_ENCODING; else if (strcmp(p, "LANGUAGE") == 0) return SC_ACCEPT_LANGUAGE; else return UNKNOWN_METHOD; } else return UNKNOWN_METHOD; } else if (strcmp(p, "UTHORIZATION") == 0) return SC_AUTHORIZATION; else return UNKNOWN_METHOD; break; case 'C': if (strcmp(p, "OOKIE2") == 0) return SC_COOKIE2; else if (strcmp(p, "OOKIE") == 0) return SC_COOKIE; else if (strcmp(p, "ONNECTION") == 0) return SC_CONNECTION; else if (strcmp(p, "ONTENT-TYPE") == 0) return SC_CONTENT_TYPE; else if (strcmp(p, "ONTENT-LENGTH") == 0) return SC_CONTENT_LENGTH; else return UNKNOWN_METHOD; break; case 'H': if (strcmp(p, "OST") == 0) return SC_HOST; else return UNKNOWN_METHOD; break; case 'P': if (strcmp(p, "RAGMA") == 0) return SC_PRAGMA; else return UNKNOWN_METHOD; break; case 'R': if (strcmp(p, "EFERER") == 0) return SC_REFERER; else return UNKNOWN_METHOD; break; case 'U': if (strcmp(p, "SER-AGENT") == 0) return SC_USER_AGENT; else return UNKNOWN_METHOD; break; default: return UNKNOWN_METHOD; } /* NOTREACHED */ } /* Apache method number to SC methods transform table */ static const unsigned char sc_for_req_method_table[] = { SC_M_GET, SC_M_PUT, SC_M_POST, SC_M_DELETE, 0, /* M_CONNECT */ SC_M_OPTIONS, SC_M_TRACE, 0, /* M_PATCH */ SC_M_PROPFIND, SC_M_PROPPATCH, SC_M_MKCOL, SC_M_COPY, SC_M_MOVE, SC_M_LOCK, SC_M_UNLOCK, SC_M_VERSION_CONTROL, SC_M_CHECKOUT, SC_M_UNCHECKOUT, SC_M_CHECKIN, SC_M_UPDATE, SC_M_LABEL, SC_M_REPORT, SC_M_MKWORKSPACE, SC_M_MKACTIVITY, SC_M_BASELINE_CONTROL, SC_M_MERGE, 0 /* M_INVALID */ }; static int sc_for_req_method_by_id(request_rec *r) { int method_id = r->method_number; if (method_id < 0 || method_id > M_INVALID) { return UNKNOWN_METHOD; } else if (r->header_only) { return SC_M_HEAD; } else { return sc_for_req_method_table[method_id] ? sc_for_req_method_table[method_id] : UNKNOWN_METHOD; } } /* * Message structure * * AJPV13_REQUEST/AJPV14_REQUEST= request_prefix (1) (byte) method (byte) protocol (string) req_uri (string) remote_addr (string) remote_host (string) server_name (string) server_port (short) is_ssl (boolean) num_headers (short) num_headers*(req_header_name header_value) ?context (byte)(string) ?servlet_path (byte)(string) ?remote_user (byte)(string) ?auth_type (byte)(string) ?query_string (byte)(string) ?jvm_route (byte)(string) ?ssl_cert (byte)(string) ?ssl_cipher (byte)(string) ?ssl_session (byte)(string) ?ssl_key_size (byte)(int) via JkOptions +ForwardKeySize request_terminator (byte) ?body content_length*(var binary) */ static apr_status_t ajp_marshal_into_msgb(ajp_msg_t *msg, request_rec *r, apr_uri_t *uri) { int method; apr_uint32_t i, num_headers = 0; apr_byte_t is_ssl; char *remote_host; const char *session_route, *envvar; const apr_array_header_t *arr = apr_table_elts(r->subprocess_env); const apr_table_entry_t *elts = (const apr_table_entry_t *)arr->elts; ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, r, "Into ajp_marshal_into_msgb"); if ((method = sc_for_req_method_by_id(r)) == UNKNOWN_METHOD) { ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, r, APLOGNO(02437) "ajp_marshal_into_msgb - Sending unknown method %s as request attribute", r->method); method = SC_M_JK_STORED; } is_ssl = (apr_byte_t) ap_proxy_conn_is_https(r->connection); if (r->headers_in && apr_table_elts(r->headers_in)) { const apr_array_header_t *t = apr_table_elts(r->headers_in); num_headers = t->nelts; } remote_host = (char *)ap_get_useragent_host(r, REMOTE_HOST, NULL); ajp_msg_reset(msg); if (ajp_msg_append_uint8(msg, CMD_AJP13_FORWARD_REQUEST) || ajp_msg_append_uint8(msg, (apr_byte_t) method) || ajp_msg_append_string(msg, r->protocol) || ajp_msg_append_string(msg, uri->path) || ajp_msg_append_string(msg, r->useragent_ip) || ajp_msg_append_string(msg, remote_host) || ajp_msg_append_string(msg, ap_get_server_name(r)) || ajp_msg_append_uint16(msg, (apr_uint16_t)r->connection->local_addr->port) || ajp_msg_append_uint8(msg, is_ssl) || ajp_msg_append_uint16(msg, (apr_uint16_t) num_headers)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00968) "ajp_marshal_into_msgb: " "Error appending the message beginning"); return APR_EGENERAL; } for (i = 0 ; i < num_headers ; i++) { int sc; const apr_array_header_t *t = apr_table_elts(r->headers_in); const apr_table_entry_t *elts = (apr_table_entry_t *)t->elts; if ((sc = sc_for_req_header(elts[i].key)) != UNKNOWN_METHOD) { if (ajp_msg_append_uint16(msg, (apr_uint16_t)sc)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00969) "ajp_marshal_into_msgb: " "Error appending the header name"); return AJP_EOVERFLOW; } } else { if (ajp_msg_append_string(msg, elts[i].key)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00970) "ajp_marshal_into_msgb: " "Error appending the header name"); return AJP_EOVERFLOW; } } if (ajp_msg_append_string(msg, elts[i].val)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00971) "ajp_marshal_into_msgb: " "Error appending the header value"); return AJP_EOVERFLOW; } ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "ajp_marshal_into_msgb: Header[%d] [%s] = [%s]", i, elts[i].key, elts[i].val); } /* XXXX need to figure out how to do this if (s->secret) { if (ajp_msg_append_uint8(msg, SC_A_SECRET) || ajp_msg_append_string(msg, s->secret)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(03228) "Error ajp_marshal_into_msgb - " "Error appending secret"); return APR_EGENERAL; } } */ if (r->user) { if (ajp_msg_append_uint8(msg, SC_A_REMOTE_USER) || ajp_msg_append_string(msg, r->user)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00972) "ajp_marshal_into_msgb: " "Error appending the remote user"); return AJP_EOVERFLOW; } } if (r->ap_auth_type) { if (ajp_msg_append_uint8(msg, SC_A_AUTH_TYPE) || ajp_msg_append_string(msg, r->ap_auth_type)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00973) "ajp_marshal_into_msgb: " "Error appending the auth type"); return AJP_EOVERFLOW; } } /* XXXX ebcdic (args converted?) */ if (uri->query) { if (ajp_msg_append_uint8(msg, SC_A_QUERY_STRING) || ajp_msg_append_string(msg, uri->query)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00974) "ajp_marshal_into_msgb: " "Error appending the query string"); return AJP_EOVERFLOW; } } if ((session_route = apr_table_get(r->notes, "session-route"))) { if (ajp_msg_append_uint8(msg, SC_A_JVM_ROUTE) || ajp_msg_append_string(msg, session_route)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00975) "ajp_marshal_into_msgb: " "Error appending the jvm route"); return AJP_EOVERFLOW; } } /* XXX: Is the subprocess_env a right place? * * ProxyPass ajp://remote:8009/servlets-examples * SetEnv SSL_SESSION_ID CUSTOM_SSL_SESSION_ID * */ /* * Only lookup SSL variables if we are currently running HTTPS. * Furthermore ensure that only variables get set in the AJP message * that are not NULL and not empty. */ if (is_ssl) { if ((envvar = ap_proxy_ssl_val(r->pool, r->server, r->connection, r, AJP13_SSL_CLIENT_CERT_INDICATOR)) && envvar[0]) { if (ajp_msg_append_uint8(msg, SC_A_SSL_CERT) || ajp_msg_append_string(msg, envvar)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00976) "ajp_marshal_into_msgb: " "Error appending the SSL certificates"); return AJP_EOVERFLOW; } } if ((envvar = ap_proxy_ssl_val(r->pool, r->server, r->connection, r, AJP13_SSL_CIPHER_INDICATOR)) && envvar[0]) { if (ajp_msg_append_uint8(msg, SC_A_SSL_CIPHER) || ajp_msg_append_string(msg, envvar)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00977) "ajp_marshal_into_msgb: " "Error appending the SSL ciphers"); return AJP_EOVERFLOW; } } if ((envvar = ap_proxy_ssl_val(r->pool, r->server, r->connection, r, AJP13_SSL_SESSION_INDICATOR)) && envvar[0]) { if (ajp_msg_append_uint8(msg, SC_A_SSL_SESSION) || ajp_msg_append_string(msg, envvar)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00978) "ajp_marshal_into_msgb: " "Error appending the SSL session"); return AJP_EOVERFLOW; } } /* ssl_key_size is required by Servlet 2.3 API */ if ((envvar = ap_proxy_ssl_val(r->pool, r->server, r->connection, r, AJP13_SSL_KEY_SIZE_INDICATOR)) && envvar[0]) { if (ajp_msg_append_uint8(msg, SC_A_SSL_KEY_SIZE) || ajp_msg_append_uint16(msg, (unsigned short) atoi(envvar))) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00979) "ajp_marshal_into_msgb: " "Error appending the SSL key size"); return APR_EGENERAL; } } } /* If the method was unrecognized, encode it as an attribute */ if (method == SC_M_JK_STORED) { if (ajp_msg_append_uint8(msg, SC_A_STORED_METHOD) || ajp_msg_append_string(msg, r->method)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02438) "ajp_marshal_into_msgb: " "Error appending the method '%s' as request attribute", r->method); return AJP_EOVERFLOW; } } /* Forward the SSL protocol name. * Modern Tomcat versions know how to retrieve * the protocol name from this attribute. */ if (is_ssl) { if ((envvar = ap_proxy_ssl_val(r->pool, r->server, r->connection, r, AJP13_SSL_PROTOCOL_INDICATOR)) && envvar[0]) { const char *key = SC_A_SSL_PROTOCOL; if (ajp_msg_append_uint8(msg, SC_A_REQ_ATTRIBUTE) || ajp_msg_append_string(msg, key) || ajp_msg_append_string(msg, envvar)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02830) "ajp_marshal_into_msgb: " "Error appending attribute %s=%s", key, envvar); return AJP_EOVERFLOW; } } } /* Forward the remote port information, which was forgotten * from the builtin data of the AJP 13 protocol. * Since the servlet spec allows to retrieve it via getRemotePort(), * we provide the port to the Tomcat connector as a request * attribute. Modern Tomcat versions know how to retrieve * the remote port from this attribute. */ { const char *key = SC_A_REQ_REMOTE_PORT; char *val = apr_itoa(r->pool, r->useragent_addr->port); if (ajp_msg_append_uint8(msg, SC_A_REQ_ATTRIBUTE) || ajp_msg_append_string(msg, key) || ajp_msg_append_string(msg, val)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00980) "ajp_marshal_into_msgb: " "Error appending attribute %s=%s", key, val); return AJP_EOVERFLOW; } } /* Forward the local ip address information, which was forgotten * from the builtin data of the AJP 13 protocol. * Since the servlet spec allows to retrieve it via getLocalAddr(), * we provide the address to the Tomcat connector as a request * attribute. Modern Tomcat versions know how to retrieve * the local address from this attribute. */ { const char *key = SC_A_REQ_LOCAL_ADDR; char *val = r->connection->local_ip; if (ajp_msg_append_uint8(msg, SC_A_REQ_ATTRIBUTE) || ajp_msg_append_string(msg, key) || ajp_msg_append_string(msg, val)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02646) "ajp_marshal_into_msgb: " "Error appending attribute %s=%s", key, val); return AJP_EOVERFLOW; } } /* Use the environment vars prefixed with AJP_ * and pass it to the header striping that prefix. */ for (i = 0; i < (apr_uint32_t)arr->nelts; i++) { if (!strncmp(elts[i].key, "AJP_", 4)) { if (ajp_msg_append_uint8(msg, SC_A_REQ_ATTRIBUTE) || ajp_msg_append_string(msg, elts[i].key + 4) || ajp_msg_append_string(msg, elts[i].val)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00981) "ajp_marshal_into_msgb: " "Error appending attribute %s=%s", elts[i].key, elts[i].val); return AJP_EOVERFLOW; } } } if (ajp_msg_append_uint8(msg, SC_A_ARE_DONE)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00982) "ajp_marshal_into_msgb: " "Error appending the message end"); return AJP_EOVERFLOW; } ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, r, "ajp_marshal_into_msgb: Done"); return APR_SUCCESS; } /* AJPV13_RESPONSE/AJPV14_RESPONSE:= response_prefix (2) status (short) status_msg (short) num_headers (short) num_headers*(res_header_name header_value) *body_chunk terminator boolean req_header_name := sc_req_header_name | (string) res_header_name := sc_res_header_name | (string) header_value := (string) body_chunk := length (short) body length*(var binary) */ static int addit_dammit(void *v, const char *key, const char *val) { apr_table_addn(v, key, val); return 1; } static apr_status_t ajp_unmarshal_response(ajp_msg_t *msg, request_rec *r, proxy_dir_conf *dconf) { apr_uint16_t status; apr_status_t rc; const char *ptr; apr_uint16_t num_headers; int i; rc = ajp_msg_get_uint16(msg, &status); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00983) "ajp_unmarshal_response: Null status"); return rc; } r->status = status; rc = ajp_msg_get_string(msg, &ptr); if (rc == APR_SUCCESS) { #if APR_CHARSET_EBCDIC /* copy only if we have to */ ptr = apr_pstrdup(r->pool, ptr); ap_xlate_proto_from_ascii(ptr, strlen(ptr)); #endif r->status_line = apr_psprintf(r->pool, "%d %s", status, ptr); } else { r->status_line = NULL; } ap_log_rerror(APLOG_MARK, APLOG_TRACE4, 0, r, "ajp_unmarshal_response: status = %d", status); rc = ajp_msg_get_uint16(msg, &num_headers); if (rc == APR_SUCCESS) { apr_table_t *save_table; /* First, tuck away all already existing cookies */ /* * Could optimize here, but just in case we want to * also save other headers, keep this logic. */ save_table = apr_table_make(r->pool, num_headers + 2); apr_table_do(addit_dammit, save_table, r->headers_out, "Set-Cookie", NULL); r->headers_out = save_table; } else { r->headers_out = NULL; num_headers = 0; } ap_log_rerror(APLOG_MARK, APLOG_TRACE4, 0, r, "ajp_unmarshal_response: Number of headers is = %d", num_headers); for (i = 0; i < (int)num_headers; i++) { apr_uint16_t name; const char *stringname; const char *value; rc = ajp_msg_peek_uint16(msg, &name); if (rc != APR_SUCCESS) { return rc; } if ((name & 0XFF00) == 0XA000) { ajp_msg_get_uint16(msg, &name); stringname = long_res_header_for_sc(name); if (stringname == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00984) "ajp_unmarshal_response: " "No such sc (%08x)", name); return AJP_EBAD_HEADER; } } else { name = 0; rc = ajp_msg_get_string(msg, &stringname); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00985) "ajp_unmarshal_response: " "Null header name"); return rc; } ap_xlate_proto_from_ascii(stringname, strlen(stringname)); } rc = ajp_msg_get_string(msg, &value); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00986) "ajp_unmarshal_response: " "Null header value"); return rc; } /* Set-Cookie need additional processing */ if (!strcasecmp(stringname, "Set-Cookie")) { value = ap_proxy_cookie_reverse_map(r, dconf, value); } /* Location, Content-Location, URI and Destination need additional * processing */ else if (!strcasecmp(stringname, "Location") || !strcasecmp(stringname, "Content-Location") || !strcasecmp(stringname, "URI") || !strcasecmp(stringname, "Destination")) { value = ap_proxy_location_reverse_map(r, dconf, value); } ap_xlate_proto_from_ascii(value, strlen(value)); ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "ajp_unmarshal_response: Header[%d] [%s] = [%s]", i, stringname, value); apr_table_add(r->headers_out, stringname, value); /* Content-type needs an additional handling */ if (strcasecmp(stringname, "Content-Type") == 0) { /* add corresponding filter */ ap_set_content_type(r, apr_pstrdup(r->pool, value)); ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "ajp_unmarshal_response: ap_set_content_type to '%s'", value); } } return APR_SUCCESS; } /* * Build the ajp header message and send it */ apr_status_t ajp_send_header(apr_socket_t *sock, request_rec *r, apr_size_t buffsize, apr_uri_t *uri) { ajp_msg_t *msg; apr_status_t rc; rc = ajp_msg_create(r->pool, buffsize, &msg); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00987) "ajp_send_header: ajp_msg_create failed"); return rc; } rc = ajp_marshal_into_msgb(msg, r, uri); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00988) "ajp_send_header: ajp_marshal_into_msgb failed"); return rc; } rc = ajp_ilink_send(sock, msg); ajp_msg_log(r, msg, "ajp_send_header: ajp_ilink_send packet dump"); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00989) "ajp_send_header: ajp_ilink_send failed"); return rc; } return APR_SUCCESS; } /* * Read the ajp message and return the type of the message. */ apr_status_t ajp_read_header(apr_socket_t *sock, request_rec *r, apr_size_t buffsize, ajp_msg_t **msg) { apr_byte_t result; apr_status_t rc; if (*msg) { rc = ajp_msg_reuse(*msg); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00990) "ajp_read_header: ajp_msg_reuse failed"); return rc; } } else { rc = ajp_msg_create(r->pool, buffsize, msg); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00991) "ajp_read_header: ajp_msg_create failed"); return rc; } } ajp_msg_reset(*msg); rc = ajp_ilink_receive(sock, *msg); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00992) "ajp_read_header: ajp_ilink_receive failed"); return rc; } ajp_msg_log(r, *msg, "ajp_read_header: ajp_ilink_receive packet dump"); rc = ajp_msg_peek_uint8(*msg, &result); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00993) "ajp_read_header: ajp_msg_peek_uint8 failed"); return rc; } ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "ajp_read_header: ajp_ilink_received %s (0x%02x)", ajp_type_str(result), result); return APR_SUCCESS; } /* parse the msg to read the type */ int ajp_parse_type(request_rec *r, ajp_msg_t *msg) { apr_byte_t result; ajp_msg_peek_uint8(msg, &result); ap_log_rerror(APLOG_MARK, APLOG_TRACE6, 0, r, "ajp_parse_type: got %s (0x%02x)", ajp_type_str(result), result); return (int) result; } /* parse the header */ apr_status_t ajp_parse_header(request_rec *r, proxy_dir_conf *conf, ajp_msg_t *msg) { apr_byte_t result; apr_status_t rc; rc = ajp_msg_get_uint8(msg, &result); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00994) "ajp_parse_headers: ajp_msg_get_byte failed"); return rc; } if (result != CMD_AJP13_SEND_HEADERS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00995) "ajp_parse_headers: wrong type %s (0x%02x) expecting %s (0x%02x)", ajp_type_str(result), result, ajp_type_str(CMD_AJP13_SEND_HEADERS), CMD_AJP13_SEND_HEADERS); return AJP_EBAD_HEADER; } return ajp_unmarshal_response(msg, r, conf); } /* parse the body and return data address and length */ apr_status_t ajp_parse_data(request_rec *r, ajp_msg_t *msg, apr_uint16_t *len, char **ptr) { apr_byte_t result; apr_status_t rc; apr_uint16_t expected_len; rc = ajp_msg_get_uint8(msg, &result); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00996) "ajp_parse_data: ajp_msg_get_byte failed"); return rc; } if (result != CMD_AJP13_SEND_BODY_CHUNK) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00997) "ajp_parse_data: wrong type %s (0x%02x) expecting %s (0x%02x)", ajp_type_str(result), result, ajp_type_str(CMD_AJP13_SEND_BODY_CHUNK), CMD_AJP13_SEND_BODY_CHUNK); return AJP_EBAD_HEADER; } rc = ajp_msg_get_uint16(msg, len); if (rc != APR_SUCCESS) { return rc; } /* * msg->len contains the complete length of the message including all * headers. So the expected length for a CMD_AJP13_SEND_BODY_CHUNK is * msg->len minus the sum of * AJP_HEADER_LEN : The length of the header to every AJP message. * AJP_HEADER_SZ_LEN : The header giving the size of the chunk. * 1 : The CMD_AJP13_SEND_BODY_CHUNK indicator byte (0x03). * 1 : The last byte of this message always seems to be * 0x00 and is not part of the chunk. */ expected_len = msg->len - (AJP_HEADER_LEN + AJP_HEADER_SZ_LEN + 1 + 1); if (*len != expected_len) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00998) "ajp_parse_data: Wrong chunk length. Length of chunk is %i," " expected length is %i.", *len, expected_len); return AJP_EBAD_HEADER; } *ptr = (char *)&(msg->buf[msg->pos]); return APR_SUCCESS; } /* Check the reuse flag in CMD_AJP13_END_RESPONSE */ apr_status_t ajp_parse_reuse(request_rec *r, ajp_msg_t *msg, apr_byte_t *reuse) { apr_byte_t result; apr_status_t rc; rc = ajp_msg_get_uint8(msg, &result); if (rc != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00999) "ajp_parse_reuse: ajp_msg_get_byte failed"); return rc; } if (result != CMD_AJP13_END_RESPONSE) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01000) "ajp_parse_reuse: wrong type %s (0x%02x) expecting %s (0x%02x)", ajp_type_str(result), result, ajp_type_str(CMD_AJP13_END_RESPONSE), CMD_AJP13_END_RESPONSE); return AJP_EBAD_HEADER; } return ajp_msg_get_uint8(msg, reuse); } /* * Allocate a msg to send data */ apr_status_t ajp_alloc_data_msg(apr_pool_t *pool, char **ptr, apr_size_t *len, ajp_msg_t **msg) { apr_status_t rc; if ((rc = ajp_msg_create(pool, *len, msg)) != APR_SUCCESS) return rc; ajp_msg_reset(*msg); *ptr = (char *)&((*msg)->buf[6]); *len = *len - 6; return APR_SUCCESS; } /* * Send the data message */ apr_status_t ajp_send_data_msg(apr_socket_t *sock, ajp_msg_t *msg, apr_size_t len) { msg->buf[4] = (apr_byte_t)((len >> 8) & 0xFF); msg->buf[5] = (apr_byte_t)(len & 0xFF); msg->len += len + 2; /* + 1 XXXX where is '\0' */ return ajp_ilink_send(sock, msg); } httpd-2.4.41/modules/proxy/mod_proxy_scgi.c0000644000000000000500000005072713357416274017305 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * mod_proxy_scgi.c * Proxy backend module for the SCGI protocol * (http://python.ca/scgi/protocol.txt) * * Andr� Malo (nd/perlig.de), August 2007 */ #define APR_WANT_MEMFUNC #define APR_WANT_STRFUNC #include "apr_strings.h" #include "ap_hooks.h" #include "apr_optional_hooks.h" #include "apr_buckets.h" #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_protocol.h" #include "http_request.h" #include "util_script.h" #include "mod_proxy.h" #include "scgi.h" #define SCHEME "scgi" #define PROXY_FUNCTION "SCGI" #define SCGI_MAGIC "SCGI" #define SCGI_PROTOCOL_VERSION "1" /* just protect from typos */ #define CONTENT_LENGTH "CONTENT_LENGTH" #define GATEWAY_INTERFACE "GATEWAY_INTERFACE" module AP_MODULE_DECLARE_DATA proxy_scgi_module; typedef enum { scgi_internal_redirect, scgi_sendfile } scgi_request_type; typedef struct { const char *location; /* target URL */ scgi_request_type type; /* type of request */ } scgi_request_config; const char *scgi_sendfile_off = "off"; const char *scgi_sendfile_on = "X-Sendfile"; const char *scgi_internal_redirect_off = "off"; const char *scgi_internal_redirect_on = "Location"; typedef struct { const char *sendfile; const char *internal_redirect; } scgi_config; /* * We create our own bucket type, which is actually derived (c&p) from the * socket bucket. * Maybe some time this should be made more abstract (like passing an * interception function to read or something) and go into the ap_ or * even apr_ namespace. */ typedef struct { apr_socket_t *sock; apr_off_t *counter; } socket_ex_data; static apr_bucket *bucket_socket_ex_create(socket_ex_data *data, apr_bucket_alloc_t *list); static apr_status_t bucket_socket_ex_read(apr_bucket *a, const char **str, apr_size_t *len, apr_read_type_e block) { socket_ex_data *data = a->data; apr_socket_t *p = data->sock; char *buf; apr_status_t rv; apr_interval_time_t timeout; if (block == APR_NONBLOCK_READ) { apr_socket_timeout_get(p, &timeout); apr_socket_timeout_set(p, 0); } *str = NULL; *len = APR_BUCKET_BUFF_SIZE; buf = apr_bucket_alloc(*len, a->list); rv = apr_socket_recv(p, buf, len); if (block == APR_NONBLOCK_READ) { apr_socket_timeout_set(p, timeout); } if (rv != APR_SUCCESS && rv != APR_EOF) { apr_bucket_free(buf); return rv; } if (*len > 0) { apr_bucket_heap *h; /* count for stats */ *data->counter += *len; /* Change the current bucket to refer to what we read */ a = apr_bucket_heap_make(a, buf, *len, apr_bucket_free); h = a->data; h->alloc_len = APR_BUCKET_BUFF_SIZE; /* note the real buffer size */ *str = buf; APR_BUCKET_INSERT_AFTER(a, bucket_socket_ex_create(data, a->list)); } else { apr_bucket_free(buf); a = apr_bucket_immortal_make(a, "", 0); *str = a->data; } return APR_SUCCESS; } static const apr_bucket_type_t bucket_type_socket_ex = { "SOCKET_EX", 5, APR_BUCKET_DATA, apr_bucket_destroy_noop, bucket_socket_ex_read, apr_bucket_setaside_notimpl, apr_bucket_split_notimpl, apr_bucket_copy_notimpl }; static apr_bucket *bucket_socket_ex_make(apr_bucket *b, socket_ex_data *data) { b->type = &bucket_type_socket_ex; b->length = (apr_size_t)(-1); b->start = -1; b->data = data; return b; } static apr_bucket *bucket_socket_ex_create(socket_ex_data *data, apr_bucket_alloc_t *list) { apr_bucket *b = apr_bucket_alloc(sizeof(*b), list); APR_BUCKET_INIT(b); b->free = apr_bucket_free; b->list = list; return bucket_socket_ex_make(b, data); } /* * Canonicalize scgi-like URLs. */ static int scgi_canon(request_rec *r, char *url) { char *host, sport[sizeof(":65535")]; const char *err, *path; apr_port_t port, def_port; if (strncasecmp(url, SCHEME "://", sizeof(SCHEME) + 2)) { return DECLINED; } url += sizeof(SCHEME); /* Keep slashes */ port = def_port = SCGI_DEF_PORT; err = ap_proxy_canon_netloc(r->pool, &url, NULL, NULL, &host, &port); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00857) "error parsing URL %s: %s", url, err); return HTTP_BAD_REQUEST; } if (port != def_port) { apr_snprintf(sport, sizeof(sport), ":%u", port); } else { sport[0] = '\0'; } if (ap_strchr(host, ':')) { /* if literal IPv6 address */ host = apr_pstrcat(r->pool, "[", host, "]", NULL); } path = ap_proxy_canonenc(r->pool, url, strlen(url), enc_path, 0, r->proxyreq); if (!path) { return HTTP_BAD_REQUEST; } r->filename = apr_pstrcat(r->pool, "proxy:" SCHEME "://", host, sport, "/", path, NULL); if (apr_table_get(r->subprocess_env, "proxy-scgi-pathinfo")) { r->path_info = apr_pstrcat(r->pool, "/", path, NULL); } return OK; } /* * Send a block of data, ensure, everything is sent */ static int sendall(proxy_conn_rec *conn, const char *buf, apr_size_t length, request_rec *r) { apr_status_t rv; apr_size_t written; while (length > 0) { written = length; if ((rv = apr_socket_send(conn->sock, buf, &written)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00858) "sending data to %s:%u failed", conn->hostname, conn->port); return HTTP_SERVICE_UNAVAILABLE; } /* count for stats */ conn->worker->s->transferred += written; buf += written; length -= written; } return OK; } /* * Send SCGI header block */ static int send_headers(request_rec *r, proxy_conn_rec *conn) { char *buf, *cp, *bodylen; const char *ns_len; const apr_array_header_t *env_table; const apr_table_entry_t *env; int j; apr_size_t len, bodylen_size; apr_size_t headerlen = sizeof(CONTENT_LENGTH) + sizeof(SCGI_MAGIC) + sizeof(SCGI_PROTOCOL_VERSION); ap_add_common_vars(r); ap_add_cgi_vars(r); /* * The header blob basically takes the environment and concatenates * keys and values using 0 bytes. There are special treatments here: * - GATEWAY_INTERFACE and SCGI_MAGIC are dropped * - CONTENT_LENGTH is always set and must be sent as the very first * variable * * Additionally it's wrapped into a so-called netstring (see SCGI spec) */ env_table = apr_table_elts(r->subprocess_env); env = (apr_table_entry_t *)env_table->elts; for (j = 0; j < env_table->nelts; ++j) { if ( (!strcmp(env[j].key, GATEWAY_INTERFACE)) || (!strcmp(env[j].key, CONTENT_LENGTH)) || (!strcmp(env[j].key, SCGI_MAGIC))) { continue; } headerlen += strlen(env[j].key) + strlen(env[j].val) + 2; } bodylen = apr_psprintf(r->pool, "%" APR_OFF_T_FMT, r->remaining); bodylen_size = strlen(bodylen) + 1; headerlen += bodylen_size; ns_len = apr_psprintf(r->pool, "%" APR_SIZE_T_FMT ":", headerlen); len = strlen(ns_len); headerlen += len + 1; /* 1 == , */ cp = buf = apr_palloc(r->pool, headerlen); memcpy(cp, ns_len, len); cp += len; memcpy(cp, CONTENT_LENGTH, sizeof(CONTENT_LENGTH)); cp += sizeof(CONTENT_LENGTH); memcpy(cp, bodylen, bodylen_size); cp += bodylen_size; memcpy(cp, SCGI_MAGIC, sizeof(SCGI_MAGIC)); cp += sizeof(SCGI_MAGIC); memcpy(cp, SCGI_PROTOCOL_VERSION, sizeof(SCGI_PROTOCOL_VERSION)); cp += sizeof(SCGI_PROTOCOL_VERSION); for (j = 0; j < env_table->nelts; ++j) { if ( (!strcmp(env[j].key, GATEWAY_INTERFACE)) || (!strcmp(env[j].key, CONTENT_LENGTH)) || (!strcmp(env[j].key, SCGI_MAGIC))) { continue; } len = strlen(env[j].key) + 1; memcpy(cp, env[j].key, len); cp += len; len = strlen(env[j].val) + 1; memcpy(cp, env[j].val, len); cp += len; } *cp++ = ','; return sendall(conn, buf, headerlen, r); } /* * Send request body (if any) */ static int send_request_body(request_rec *r, proxy_conn_rec *conn) { if (ap_should_client_block(r)) { char *buf = apr_palloc(r->pool, AP_IOBUFSIZE); int status; long readlen; readlen = ap_get_client_block(r, buf, AP_IOBUFSIZE); while (readlen > 0) { status = sendall(conn, buf, (apr_size_t)readlen, r); if (status != OK) { return HTTP_SERVICE_UNAVAILABLE; } readlen = ap_get_client_block(r, buf, AP_IOBUFSIZE); } if (readlen == -1) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00859) "receiving request body failed"); return HTTP_INTERNAL_SERVER_ERROR; } } return OK; } /* * Fetch response from backend and pass back to the front */ static int pass_response(request_rec *r, proxy_conn_rec *conn) { apr_bucket_brigade *bb; apr_bucket *b; const char *location; scgi_config *conf; socket_ex_data *sock_data; int status; sock_data = apr_palloc(r->pool, sizeof(*sock_data)); sock_data->sock = conn->sock; sock_data->counter = &conn->worker->s->read; bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); b = bucket_socket_ex_create(sock_data, r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); b = apr_bucket_eos_create(r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, b); status = ap_scan_script_header_err_brigade_ex(r, bb, NULL, APLOG_MODULE_INDEX); if (status != OK) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00860) "error reading response headers from %s:%u", conn->hostname, conn->port); r->status_line = NULL; apr_brigade_destroy(bb); return status; } conf = ap_get_module_config(r->per_dir_config, &proxy_scgi_module); if (conf->sendfile && conf->sendfile != scgi_sendfile_off) { short err = 1; location = apr_table_get(r->err_headers_out, conf->sendfile); if (!location) { err = 0; location = apr_table_get(r->headers_out, conf->sendfile); } if (location) { scgi_request_config *req_conf = apr_palloc(r->pool, sizeof(*req_conf)); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00861) "Found %s: %s - preparing subrequest.", conf->sendfile, location); if (err) { apr_table_unset(r->err_headers_out, conf->sendfile); } else { apr_table_unset(r->headers_out, conf->sendfile); } req_conf->location = location; req_conf->type = scgi_sendfile; ap_set_module_config(r->request_config, &proxy_scgi_module, req_conf); apr_brigade_destroy(bb); return OK; } } if (r->status == HTTP_OK && (!conf->internal_redirect /* default === On */ || conf->internal_redirect != scgi_internal_redirect_off)) { short err = 1; const char *location_header = conf->internal_redirect ? conf->internal_redirect : scgi_internal_redirect_on; location = apr_table_get(r->err_headers_out, location_header); if (!location) { err = 0; location = apr_table_get(r->headers_out, location_header); } if (location && *location == '/') { scgi_request_config *req_conf = apr_palloc(r->pool, sizeof(*req_conf)); if (strcasecmp(location_header, "Location")) { if (err) { apr_table_unset(r->err_headers_out, location_header); } else { apr_table_unset(r->headers_out, location_header); } } req_conf->location = location; req_conf->type = scgi_internal_redirect; ap_set_module_config(r->request_config, &proxy_scgi_module, req_conf); apr_brigade_destroy(bb); return OK; } } if (ap_pass_brigade(r->output_filters, bb)) { return AP_FILTER_ERROR; } return OK; } /* * Internal redirect / subrequest handler, working on request_status hook */ static int scgi_request_status(int *status, request_rec *r) { scgi_request_config *req_conf; if ( (*status == OK) && (req_conf = ap_get_module_config(r->request_config, &proxy_scgi_module))) { switch (req_conf->type) { case scgi_internal_redirect: ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00862) "Internal redirect to %s", req_conf->location); r->status_line = NULL; if (r->method_number != M_GET) { /* keep HEAD, which is passed around as M_GET, too */ r->method = "GET"; r->method_number = M_GET; } apr_table_unset(r->headers_in, "Content-Length"); ap_internal_redirect_handler(req_conf->location, r); return OK; /* break; */ case scgi_sendfile: ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00863) "File subrequest to %s", req_conf->location); do { request_rec *rr; rr = ap_sub_req_lookup_file(req_conf->location, r, r->output_filters); if (rr->status == HTTP_OK && rr->finfo.filetype != APR_NOFILE) { /* * We don't touch Content-Length here. It might be * borked (there's plenty of room for a race condition). * Either the backend sets it or it's gonna be chunked. */ ap_run_sub_req(rr); } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00864) "Subrequest to file '%s' not possible. " "(rr->status=%d, rr->finfo.filetype=%d)", req_conf->location, rr->status, rr->finfo.filetype); *status = HTTP_INTERNAL_SERVER_ERROR; return *status; } } while (0); return OK; /* break; */ } } return DECLINED; } /* * This handles scgi:(dest) URLs */ static int scgi_handler(request_rec *r, proxy_worker *worker, proxy_server_conf *conf, char *url, const char *proxyname, apr_port_t proxyport) { int status; proxy_conn_rec *backend = NULL; apr_pool_t *p = r->pool; apr_uri_t *uri; char dummy; if (strncasecmp(url, SCHEME "://", sizeof(SCHEME) + 2)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00865) "declining URL %s", url); return DECLINED; } /* Create space for state information */ status = ap_proxy_acquire_connection(PROXY_FUNCTION, &backend, worker, r->server); if (status != OK) { goto cleanup; } backend->is_ssl = 0; /* Step One: Determine Who To Connect To */ uri = apr_palloc(p, sizeof(*uri)); status = ap_proxy_determine_connection(p, r, conf, worker, backend, uri, &url, proxyname, proxyport, &dummy, 1); if (status != OK) { goto cleanup; } /* Step Two: Make the Connection */ if (ap_proxy_connect_backend(PROXY_FUNCTION, backend, worker, r->server)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00866) "failed to make connection to backend: %s:%u", backend->hostname, backend->port); status = HTTP_SERVICE_UNAVAILABLE; goto cleanup; } /* Step Three: Process the Request */ if ( ((status = ap_setup_client_block(r, REQUEST_CHUNKED_ERROR)) != OK) || ((status = send_headers(r, backend)) != OK) || ((status = send_request_body(r, backend)) != OK) || ((status = pass_response(r, backend)) != OK)) { goto cleanup; } cleanup: if (backend) { backend->close = 1; /* always close the socket */ ap_proxy_release_connection(PROXY_FUNCTION, backend, r->server); } return status; } static void *create_scgi_config(apr_pool_t *p, char *dummy) { scgi_config *conf=apr_palloc(p, sizeof(*conf)); conf->sendfile = NULL; /* === default (off) */ conf->internal_redirect = NULL; /* === default (on) */ return conf; } static void *merge_scgi_config(apr_pool_t *p, void *base_, void *add_) { scgi_config *base=base_, *add=add_, *conf=apr_palloc(p, sizeof(*conf)); conf->sendfile = add->sendfile ? add->sendfile: base->sendfile; conf->internal_redirect = add->internal_redirect ? add->internal_redirect : base->internal_redirect; return conf; } static const char *scgi_set_send_file(cmd_parms *cmd, void *mconfig, const char *arg) { scgi_config *conf=mconfig; if (!strcasecmp(arg, "Off")) { conf->sendfile = scgi_sendfile_off; } else if (!strcasecmp(arg, "On")) { conf->sendfile = scgi_sendfile_on; } else { conf->sendfile = arg; } return NULL; } static const char *scgi_set_internal_redirect(cmd_parms *cmd, void *mconfig, const char *arg) { scgi_config *conf = mconfig; if (!strcasecmp(arg, "Off")) { conf->internal_redirect = scgi_internal_redirect_off; } else if (!strcasecmp(arg, "On")) { conf->internal_redirect = scgi_internal_redirect_on; } else { conf->internal_redirect = arg; } return NULL; } static const command_rec scgi_cmds[] = { AP_INIT_TAKE1("ProxySCGISendfile", scgi_set_send_file, NULL, RSRC_CONF|ACCESS_CONF, "The name of the X-Sendfile pseudo response header or " "On or Off"), AP_INIT_TAKE1("ProxySCGIInternalRedirect", scgi_set_internal_redirect, NULL, RSRC_CONF|ACCESS_CONF, "The name of the pseudo response header or On or Off"), {NULL} }; static void register_hooks(apr_pool_t *p) { proxy_hook_scheme_handler(scgi_handler, NULL, NULL, APR_HOOK_FIRST); proxy_hook_canon_handler(scgi_canon, NULL, NULL, APR_HOOK_FIRST); APR_OPTIONAL_HOOK(proxy, request_status, scgi_request_status, NULL, NULL, APR_HOOK_MIDDLE); } AP_DECLARE_MODULE(proxy_scgi) = { STANDARD20_MODULE_STUFF, create_scgi_config, /* create per-directory config structure */ merge_scgi_config, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ scgi_cmds, /* command table */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/proxy/mod_proxy_hcheck.dsp0000644000000000000500000001160713017652517020136 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_proxy_hcheck" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_proxy_hcheck - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_proxy_hcheck.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_hcheck.mak" CFG="mod_proxy_hcheck - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_hcheck - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_hcheck - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_proxy_hcheck - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../core" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_proxy_hcheck_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_proxy_hcheck.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_hcheck.so" /d LONG_NAME="proxy_hcheck_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_proxy_hcheck.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_hcheck.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_proxy_hcheck.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_hcheck.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_proxy_hcheck.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_proxy_hcheck - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../core" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_proxy_hcheck_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_proxy_hcheck.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_hcheck.so" /d LONG_NAME="proxy_hcheck_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_hcheck.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_hcheck.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_hcheck.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_hcheck.so # Begin Special Build Tool TargetPath=.\Debug\mod_proxy_hcheck.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_proxy_hcheck - Win32 Release" # Name "mod_proxy_hcheck - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_proxy_hcheck.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=.\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/mod_proxy_balancer.c0000644000000000000500000024246513523260023020111 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* Load balancer module for Apache proxy */ #include "mod_proxy.h" #include "scoreboard.h" #include "ap_mpm.h" #include "apr_version.h" #include "ap_hooks.h" #include "apr_date.h" #include "util_md5.h" #include "mod_watchdog.h" static const char *balancer_mutex_type = "proxy-balancer-shm"; ap_slotmem_provider_t *storage = NULL; module AP_MODULE_DECLARE_DATA proxy_balancer_module; static APR_OPTIONAL_FN_TYPE(set_worker_hc_param) *set_worker_hc_param_f = NULL; static int (*ap_proxy_retry_worker_fn)(const char *proxy_function, proxy_worker *worker, server_rec *s) = NULL; static APR_OPTIONAL_FN_TYPE(hc_show_exprs) *hc_show_exprs_f = NULL; static APR_OPTIONAL_FN_TYPE(hc_select_exprs) *hc_select_exprs_f = NULL; static APR_OPTIONAL_FN_TYPE(hc_valid_expr) *hc_valid_expr_f = NULL; /* * Register our mutex type before the config is read so we * can adjust the mutex settings using the Mutex directive. */ static int balancer_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { apr_status_t rv; rv = ap_mutex_register(pconf, balancer_mutex_type, NULL, APR_LOCK_DEFAULT, 0); if (rv != APR_SUCCESS) { return rv; } set_worker_hc_param_f = APR_RETRIEVE_OPTIONAL_FN(set_worker_hc_param); hc_show_exprs_f = APR_RETRIEVE_OPTIONAL_FN(hc_show_exprs); hc_select_exprs_f = APR_RETRIEVE_OPTIONAL_FN(hc_select_exprs); hc_valid_expr_f = APR_RETRIEVE_OPTIONAL_FN(hc_valid_expr); return OK; } #if 0 extern void proxy_update_members(proxy_balancer **balancer, request_rec *r, proxy_server_conf *conf); #endif static int proxy_balancer_canon(request_rec *r, char *url) { char *host, *path; char *search = NULL; const char *err; apr_port_t port = 0; /* TODO: offset of BALANCER_PREFIX ?? */ if (strncasecmp(url, "balancer:", 9) == 0) { url += 9; } else { return DECLINED; } ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "canonicalising URL %s", url); /* do syntatic check. * We break the URL into host, port, path, search */ err = ap_proxy_canon_netloc(r->pool, &url, NULL, NULL, &host, &port); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01157) "error parsing URL %s: %s", url, err); return HTTP_BAD_REQUEST; } /* * now parse path/search args, according to rfc1738: * process the path. With proxy-noncanon set (by * mod_proxy) we use the raw, unparsed uri */ if (apr_table_get(r->notes, "proxy-nocanon")) { path = url; /* this is the raw path */ } else { path = ap_proxy_canonenc(r->pool, url, strlen(url), enc_path, 0, r->proxyreq); search = r->args; } if (path == NULL) return HTTP_BAD_REQUEST; r->filename = apr_pstrcat(r->pool, "proxy:" BALANCER_PREFIX, host, "/", path, (search) ? "?" : "", (search) ? search : "", NULL); r->path_info = apr_pstrcat(r->pool, "/", path, NULL); return OK; } static void init_balancer_members(apr_pool_t *p, server_rec *s, proxy_balancer *balancer) { int i; proxy_worker **workers; workers = (proxy_worker **)balancer->workers->elts; for (i = 0; i < balancer->workers->nelts; i++) { int worker_is_initialized; proxy_worker *worker = *workers; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01158) "Looking at %s -> %s initialized?", balancer->s->name, ap_proxy_worker_name(p, worker)); worker_is_initialized = PROXY_WORKER_IS_INITIALIZED(worker); if (!worker_is_initialized) { ap_proxy_initialize_worker(worker, s, p); } ++workers; } /* Set default number of attempts to the number of * workers. */ if (!balancer->s->max_attempts_set && balancer->workers->nelts > 1) { balancer->s->max_attempts = balancer->workers->nelts - 1; balancer->s->max_attempts_set = 1; } } /* Retrieve the parameter with the given name * Something like 'JSESSIONID=12345...N' */ static char *get_path_param(apr_pool_t *pool, char *url, const char *name, int scolon_sep) { char *path = NULL; char *pathdelims = "?&"; if (scolon_sep) { pathdelims = ";?&"; } for (path = strstr(url, name); path; path = strstr(path + 1, name)) { path += strlen(name); if (*path == '=') { /* * Session path was found, get its value */ ++path; if (*path) { char *q; path = apr_strtok(apr_pstrdup(pool, path), pathdelims, &q); return path; } } } return NULL; } static char *get_cookie_param(request_rec *r, const char *name) { const char *cookies; const char *start_cookie; if ((cookies = apr_table_get(r->headers_in, "Cookie"))) { for (start_cookie = ap_strstr_c(cookies, name); start_cookie; start_cookie = ap_strstr_c(start_cookie + 1, name)) { if (start_cookie == cookies || start_cookie[-1] == ';' || start_cookie[-1] == ',' || isspace(start_cookie[-1])) { start_cookie += strlen(name); while(*start_cookie && isspace(*start_cookie)) ++start_cookie; if (*start_cookie++ == '=' && *start_cookie) { /* * Session cookie was found, get its value */ char *end_cookie, *cookie; cookie = apr_pstrdup(r->pool, start_cookie); if ((end_cookie = strchr(cookie, ';')) != NULL) *end_cookie = '\0'; if((end_cookie = strchr(cookie, ',')) != NULL) *end_cookie = '\0'; return cookie; } } } } return NULL; } /* Find the worker that has the 'route' defined */ static proxy_worker *find_route_worker(proxy_balancer *balancer, const char *route, request_rec *r, int recursion) { int i; int checking_standby; int checked_standby; proxy_worker **workers; checking_standby = checked_standby = 0; while (!checked_standby) { workers = (proxy_worker **)balancer->workers->elts; for (i = 0; i < balancer->workers->nelts; i++, workers++) { proxy_worker *worker = *workers; if ( (checking_standby ? !PROXY_WORKER_IS_STANDBY(worker) : PROXY_WORKER_IS_STANDBY(worker)) ) continue; if (*(worker->s->route) && strcmp(worker->s->route, route) == 0) { if (PROXY_WORKER_IS_USABLE(worker)) { return worker; } else { /* * If the worker is in error state run * retry on that worker. It will be marked as * operational if the retry timeout is elapsed. * The worker might still be unusable, but we try * anyway. */ ap_proxy_retry_worker_fn("BALANCER", worker, r->server); if (PROXY_WORKER_IS_USABLE(worker)) { return worker; } else { /* * We have a worker that is unusable. * It can be in error or disabled, but in case * it has a redirection set use that redirection worker. * This enables to safely remove the member from the * balancer. Of course you will need some kind of * session replication between those two remote. * Also check that we haven't gone thru all the * balancer members by means of redirects. * This should avoid redirect cycles. */ if ((*worker->s->redirect) && (recursion < balancer->workers->nelts)) { proxy_worker *rworker = NULL; rworker = find_route_worker(balancer, worker->s->redirect, r, recursion + 1); /* Check if the redirect worker is usable */ if (rworker && !PROXY_WORKER_IS_USABLE(rworker)) { /* * If the worker is in error state run * retry on that worker. It will be marked as * operational if the retry timeout is elapsed. * The worker might still be unusable, but we try * anyway. */ ap_proxy_retry_worker_fn("BALANCER", rworker, r->server); } if (rworker && PROXY_WORKER_IS_USABLE(rworker)) return rworker; } } } } } checked_standby = checking_standby++; } return NULL; } static proxy_worker *find_session_route(proxy_balancer *balancer, request_rec *r, char **route, const char **sticky_used, char **url) { proxy_worker *worker = NULL; if (!*balancer->s->sticky) return NULL; /* Try to find the sticky route inside url */ *route = get_path_param(r->pool, *url, balancer->s->sticky_path, balancer->s->scolonsep); if (*route) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01159) "Found value %s for stickysession %s", *route, balancer->s->sticky_path); *sticky_used = balancer->s->sticky_path; } else { *route = get_cookie_param(r, balancer->s->sticky); if (*route) { *sticky_used = balancer->s->sticky; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01160) "Found value %s for stickysession %s", *route, balancer->s->sticky); } } /* * If we found a value for stickysession, find the first '.' (or whatever * sticky_separator is set to) within. Everything after '.' (if present) * is our route. */ if ((*route) && (balancer->s->sticky_separator != 0) && ((*route = strchr(*route, balancer->s->sticky_separator)) != NULL )) (*route)++; if ((*route) && (**route)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01161) "Found route %s", *route); /* We have a route in path or in cookie * Find the worker that has this route defined. */ worker = find_route_worker(balancer, *route, r, 1); if (worker && strcmp(*route, worker->s->route)) { /* * Notice that the route of the worker chosen is different from * the route supplied by the client. */ apr_table_setn(r->subprocess_env, "BALANCER_ROUTE_CHANGED", "1"); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01162) "Route changed from %s to %s", *route, worker->s->route); } return worker; } else return NULL; } static proxy_worker *find_best_worker(proxy_balancer *balancer, request_rec *r) { proxy_worker *candidate = NULL; apr_status_t rv; if ((rv = PROXY_THREAD_LOCK(balancer)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01163) "%s: Lock failed for find_best_worker()", balancer->s->name); return NULL; } candidate = (*balancer->lbmethod->finder)(balancer, r); if (candidate) candidate->s->elected++; if ((rv = PROXY_THREAD_UNLOCK(balancer)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01164) "%s: Unlock failed for find_best_worker()", balancer->s->name); } if (candidate == NULL) { /* All the workers are in error state or disabled. * If the balancer has a timeout sleep for a while * and try again to find the worker. The chances are * that some other thread will release a connection. * By default the timeout is not set, and the server * returns SERVER_BUSY. */ if (balancer->s->timeout) { /* XXX: This can perhaps be build using some * smarter mechanism, like tread_cond. * But since the statuses can came from * different childs, use the provided algo. */ apr_interval_time_t timeout = balancer->s->timeout; apr_interval_time_t step, tval = 0; /* Set the timeout to 0 so that we don't * end in infinite loop */ balancer->s->timeout = 0; step = timeout / 100; while (tval < timeout) { apr_sleep(step); /* Try again */ if ((candidate = find_best_worker(balancer, r))) break; tval += step; } /* restore the timeout */ balancer->s->timeout = timeout; } } return candidate; } static int rewrite_url(request_rec *r, proxy_worker *worker, char **url) { const char *scheme = strstr(*url, "://"); const char *path = NULL; if (scheme) path = ap_strchr_c(scheme + 3, '/'); /* we break the URL into host, port, uri */ if (!worker) { return ap_proxyerror(r, HTTP_BAD_REQUEST, apr_pstrcat(r->pool, "missing worker. URI cannot be parsed: ", *url, NULL)); } *url = apr_pstrcat(r->pool, worker->s->name, path, NULL); return OK; } static void force_recovery(proxy_balancer *balancer, server_rec *s) { int i; int ok = 0; proxy_worker **worker; worker = (proxy_worker **)balancer->workers->elts; for (i = 0; i < balancer->workers->nelts; i++, worker++) { if (!((*worker)->s->status & PROXY_WORKER_IN_ERROR)) { ok = 1; break; } else { /* Try if we can recover */ ap_proxy_retry_worker_fn("BALANCER", *worker, s); if (!((*worker)->s->status & PROXY_WORKER_IN_ERROR)) { ok = 1; break; } } } if (!ok && balancer->s->forcerecovery) { /* If all workers are in error state force the recovery. */ worker = (proxy_worker **)balancer->workers->elts; for (i = 0; i < balancer->workers->nelts; i++, worker++) { ++(*worker)->s->retries; (*worker)->s->status &= ~PROXY_WORKER_IN_ERROR; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01165) "%s: Forcing recovery for worker (%s)", balancer->s->name, (*worker)->s->hostname_ex); } } } static apr_status_t decrement_busy_count(void *worker_) { proxy_worker *worker = worker_; if (worker->s->busy) { worker->s->busy--; } return APR_SUCCESS; } static int proxy_balancer_pre_request(proxy_worker **worker, proxy_balancer **balancer, request_rec *r, proxy_server_conf *conf, char **url) { int access_status; proxy_worker *runtime; char *route = NULL; const char *sticky = NULL; apr_status_t rv; *worker = NULL; /* Step 1: check if the url is for us * The url we can handle starts with 'balancer://' * If balancer is already provided skip the search * for balancer, because this is failover attempt. */ if (!*balancer && !(*balancer = ap_proxy_get_balancer(r->pool, conf, *url, 1))) return DECLINED; /* Step 2: Lock the LoadBalancer * XXX: perhaps we need the process lock here */ if ((rv = PROXY_THREAD_LOCK(*balancer)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01166) "%s: Lock failed for pre_request", (*balancer)->s->name); return DECLINED; } /* Step 3: force recovery */ force_recovery(*balancer, r->server); /* Step 3.5: Update member list for the balancer */ /* TODO: Implement as provider! */ ap_proxy_sync_balancer(*balancer, r->server, conf); /* Step 4: find the session route */ runtime = find_session_route(*balancer, r, &route, &sticky, url); if (runtime) { if ((*balancer)->lbmethod && (*balancer)->lbmethod->updatelbstatus) { /* Call the LB implementation */ (*balancer)->lbmethod->updatelbstatus(*balancer, runtime, r->server); } else { /* Use the default one */ int i, total_factor = 0; proxy_worker **workers; /* We have a sticky load balancer * Update the workers status * so that even session routes get * into account. */ workers = (proxy_worker **)(*balancer)->workers->elts; for (i = 0; i < (*balancer)->workers->nelts; i++) { /* Take into calculation only the workers that are * not in error state or not disabled. */ if (PROXY_WORKER_IS_USABLE(*workers)) { (*workers)->s->lbstatus += (*workers)->s->lbfactor; total_factor += (*workers)->s->lbfactor; } workers++; } runtime->s->lbstatus -= total_factor; } runtime->s->elected++; *worker = runtime; } else if (route && (*balancer)->s->sticky_force) { int i, member_of = 0; proxy_worker **workers; /* * We have a route provided that doesn't match the * balancer name. See if the provider route is the * member of the same balancer in which case return 503 */ workers = (proxy_worker **)(*balancer)->workers->elts; for (i = 0; i < (*balancer)->workers->nelts; i++) { if (*((*workers)->s->route) && strcmp((*workers)->s->route, route) == 0) { member_of = 1; break; } workers++; } if (member_of) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01167) "%s: All workers are in error state for route (%s)", (*balancer)->s->name, route); if ((rv = PROXY_THREAD_UNLOCK(*balancer)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01168) "%s: Unlock failed for pre_request", (*balancer)->s->name); } return HTTP_SERVICE_UNAVAILABLE; } } if ((rv = PROXY_THREAD_UNLOCK(*balancer)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01169) "%s: Unlock failed for pre_request", (*balancer)->s->name); } if (!*worker) { runtime = find_best_worker(*balancer, r); if (!runtime) { if ((*balancer)->workers->nelts) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01170) "%s: All workers are in error state", (*balancer)->s->name); } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01171) "%s: No workers in balancer", (*balancer)->s->name); } return HTTP_SERVICE_UNAVAILABLE; } if (*(*balancer)->s->sticky && runtime) { /* * This balancer has sticky sessions and the client either has not * supplied any routing information or all workers for this route * including possible redirect and hotstandby workers are in error * state, but we have found another working worker for this * balancer where we can send the request. Thus notice that we have * changed the route to the backend. */ apr_table_setn(r->subprocess_env, "BALANCER_ROUTE_CHANGED", "1"); } *worker = runtime; } (*worker)->s->busy++; apr_pool_cleanup_register(r->pool, *worker, decrement_busy_count, apr_pool_cleanup_null); /* Add balancer/worker info to env. */ apr_table_setn(r->subprocess_env, "BALANCER_NAME", (*balancer)->s->name); apr_table_setn(r->subprocess_env, "BALANCER_WORKER_NAME", (*worker)->s->name); apr_table_setn(r->subprocess_env, "BALANCER_WORKER_ROUTE", (*worker)->s->route); /* Rewrite the url from 'balancer://url' * to the 'worker_scheme://worker_hostname[:worker_port]/url' * This replaces the balancers fictional name with the * real hostname of the elected worker. */ access_status = rewrite_url(r, *worker, url); /* Add the session route to request notes if present */ if (route) { apr_table_setn(r->notes, "session-sticky", sticky); apr_table_setn(r->notes, "session-route", route); /* Add session info to env. */ apr_table_setn(r->subprocess_env, "BALANCER_SESSION_STICKY", sticky); apr_table_setn(r->subprocess_env, "BALANCER_SESSION_ROUTE", route); } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01172) "%s: worker (%s) rewritten to %s", (*balancer)->s->name, (*worker)->s->name, *url); return access_status; } static int proxy_balancer_post_request(proxy_worker *worker, proxy_balancer *balancer, request_rec *r, proxy_server_conf *conf) { apr_status_t rv; if ((rv = PROXY_THREAD_LOCK(balancer)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01173) "%s: Lock failed for post_request", balancer->s->name); return HTTP_INTERNAL_SERVER_ERROR; } if (!apr_is_empty_array(balancer->errstatuses) && !(worker->s->status & PROXY_WORKER_IGNORE_ERRORS)) { int i; for (i = 0; i < balancer->errstatuses->nelts; i++) { int val = ((int *)balancer->errstatuses->elts)[i]; if (r->status == val) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01174) "%s: Forcing worker (%s) into error state " "due to status code %d matching 'failonstatus' " "balancer parameter", balancer->s->name, ap_proxy_worker_name(r->pool, worker), val); worker->s->status |= PROXY_WORKER_IN_ERROR; worker->s->error_time = apr_time_now(); break; } } } if (balancer->failontimeout && !(worker->s->status & PROXY_WORKER_IGNORE_ERRORS) && (apr_table_get(r->notes, "proxy_timedout")) != NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02460) "%s: Forcing worker (%s) into error state " "due to timeout and 'failontimeout' parameter being set", balancer->s->name, ap_proxy_worker_name(r->pool, worker)); worker->s->status |= PROXY_WORKER_IN_ERROR; worker->s->error_time = apr_time_now(); } if ((rv = PROXY_THREAD_UNLOCK(balancer)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01175) "%s: Unlock failed for post_request", balancer->s->name); } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01176) "proxy_balancer_post_request for (%s)", balancer->s->name); return OK; } static void recalc_factors(proxy_balancer *balancer) { int i; proxy_worker **workers; /* Recalculate lbfactors */ workers = (proxy_worker **)balancer->workers->elts; /* Special case if there is only one worker its * load factor will always be 100 */ if (balancer->workers->nelts == 1) { (*workers)->s->lbstatus = (*workers)->s->lbfactor = 100; return; } for (i = 0; i < balancer->workers->nelts; i++) { /* Update the status entries */ workers[i]->s->lbstatus = workers[i]->s->lbfactor; } } static apr_status_t lock_remove(void *data) { int i; proxy_balancer *balancer; server_rec *s = data; void *sconf = s->module_config; proxy_server_conf *conf = (proxy_server_conf *) ap_get_module_config(sconf, &proxy_module); balancer = (proxy_balancer *)conf->balancers->elts; for (i = 0; i < conf->balancers->nelts; i++, balancer++) { if (balancer->gmutex) { apr_global_mutex_destroy(balancer->gmutex); balancer->gmutex = NULL; } } return(0); } /* * Compute an ID for a vhost based on what makes it selected by requests. * The second and more Host(s)/IP(s):port(s), and the ServerAlias(es) are * optional (see make_servers_ids() below). */ static const char *make_server_id(server_rec *s, apr_pool_t *p, int full) { apr_md5_ctx_t md5_ctx; unsigned char md5[APR_MD5_DIGESTSIZE]; char id[2 * APR_MD5_DIGESTSIZE + 1]; char host_ip[64]; /* for any IPv[46] string */ server_addr_rec *sar; int i; apr_md5_init(&md5_ctx); for (sar = s->addrs; sar; sar = sar->next) { host_ip[0] = '\0'; apr_sockaddr_ip_getbuf(host_ip, sizeof host_ip, sar->host_addr); apr_md5_update(&md5_ctx, (void *)sar->virthost, strlen(sar->virthost)); apr_md5_update(&md5_ctx, (void *)host_ip, strlen(host_ip)); apr_md5_update(&md5_ctx, (void *)&sar->host_port, sizeof(sar->host_port)); if (!full) { break; } } if (s->server_hostname) { apr_md5_update(&md5_ctx, (void *)s->server_hostname, strlen(s->server_hostname)); } if (full) { if (s->names) { for (i = 0; i < s->names->nelts; ++i) { const char *name = APR_ARRAY_IDX(s->names, i, char *); apr_md5_update(&md5_ctx, (void *)name, strlen(name)); } } if (s->wild_names) { for (i = 0; i < s->wild_names->nelts; ++i) { const char *name = APR_ARRAY_IDX(s->wild_names, i, char *); apr_md5_update(&md5_ctx, (void *)name, strlen(name)); } } } apr_md5_final(md5, &md5_ctx); ap_bin2hex(md5, APR_MD5_DIGESTSIZE, id); return apr_pstrmemdup(p, id, sizeof(id) - 1); } /* * First try to compute an unique ID for each vhost with minimal criteria, * that is the first Host/IP:port and ServerName. For most cases this should * be enough and avoids changing the ID unnecessarily accross restart (or * stop/start w.r.t. persisted files) for things that this module does not * care about. * * But if it's not enough (collisions) do a second pass for the full monty, * that is additionally the other Host(s)/IP(s):port(s) and ServerAlias(es). * * Finally, for pathological configs where this is still not enough, let's * append a counter to duplicates, because we really want that ID to be unique * even if the vhost will never be selected to handle requests at run time, at * load time a duplicate may steal the original slotmems (depending on its * balancers' configurations), see how mod_slotmem_shm reuses slots/files based * solely on this ID and resets them if the sizes don't match. */ static apr_array_header_t *make_servers_ids(server_rec *main_s, apr_pool_t *p) { server_rec *s = main_s; apr_array_header_t *ids = apr_array_make(p, 10, sizeof(const char *)); apr_hash_t *dups = apr_hash_make(p); int idx, *dup, full_monty = 0; const char *id; for (idx = 0, s = main_s; s; s = s->next, ++idx) { id = make_server_id(s, p, 0); dup = apr_hash_get(dups, id, APR_HASH_KEY_STRING); apr_hash_set(dups, id, APR_HASH_KEY_STRING, apr_pmemdup(p, &idx, sizeof(int))); if (dup) { full_monty = 1; APR_ARRAY_IDX(ids, *dup, const char *) = NULL; APR_ARRAY_PUSH(ids, const char *) = NULL; } else { APR_ARRAY_PUSH(ids, const char *) = id; } } if (full_monty) { apr_hash_clear(dups); for (idx = 0, s = main_s; s; s = s->next, ++idx) { id = APR_ARRAY_IDX(ids, idx, const char *); if (id) { /* Preserve non-duplicates */ continue; } id = make_server_id(s, p, 1); if (apr_hash_get(dups, id, APR_HASH_KEY_STRING)) { id = apr_psprintf(p, "%s_%x", id, idx); } else { apr_hash_set(dups, id, APR_HASH_KEY_STRING, (void *)-1); } APR_ARRAY_IDX(ids, idx, const char *) = id; } } return ids; } /* post_config hook: */ static int balancer_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { apr_status_t rv; proxy_server_conf *conf; ap_slotmem_instance_t *new = NULL; apr_time_t tstamp; apr_array_header_t *ids; int idx; /* balancer_post_config() will be called twice during startup. So, don't * set up the static data the 1st time through. */ if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) { return OK; } ap_proxy_retry_worker_fn = APR_RETRIEVE_OPTIONAL_FN(ap_proxy_retry_worker); if (!ap_proxy_retry_worker_fn) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02230) "mod_proxy must be loaded for mod_proxy_balancer"); return !OK; } /* * Get slotmem setups */ storage = ap_lookup_provider(AP_SLOTMEM_PROVIDER_GROUP, "shm", AP_SLOTMEM_PROVIDER_VERSION); if (!storage) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01177) "Failed to lookup provider 'shm' for '%s': is " "mod_slotmem_shm loaded??", AP_SLOTMEM_PROVIDER_GROUP); return !OK; } ids = make_servers_ids(s, ptemp); tstamp = apr_time_now(); /* * Go thru each Vhost and create the shared mem slotmem for * each balancer's workers */ for (idx = 0; s; ++idx) { int i,j; const char *id; proxy_balancer *balancer; ap_slotmem_type_t type; void *sconf = s->module_config; conf = (proxy_server_conf *)ap_get_module_config(sconf, &proxy_module); /* * During create_proxy_config() we created a dummy id. Now that * we have identifying info, we can create the real id */ id = APR_ARRAY_IDX(ids, idx, const char *); conf->id = apr_psprintf(pconf, "p%x", ap_proxy_hashfunc(id, PROXY_HASHFUNC_DEFAULT)); if (conf->bslot) { /* Shared memory already created for this proxy_server_conf. */ s = s->next; continue; } if (conf->bal_persist) { type = AP_SLOTMEM_TYPE_PERSIST | AP_SLOTMEM_TYPE_CLEARINUSE; } else { type = 0; } if (conf->balancers->nelts) { conf->max_balancers = conf->balancers->nelts + conf->bgrowth; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01178) "Doing balancers create: %d, %d (%d)", (int)ALIGNED_PROXY_BALANCER_SHARED_SIZE, (int)conf->balancers->nelts, conf->max_balancers); rv = storage->create(&new, conf->id, ALIGNED_PROXY_BALANCER_SHARED_SIZE, conf->max_balancers, type, pconf); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(01179) "balancer slotmem_create failed"); return !OK; } conf->bslot = new; } conf->storage = storage; /* Initialize shared scoreboard data */ balancer = (proxy_balancer *)conf->balancers->elts; for (i = 0; i < conf->balancers->nelts; i++, balancer++) { proxy_worker **workers; proxy_worker *worker; proxy_balancer_shared *bshm; const char *sname; unsigned int index; /* now that we have the right id, we need to redo the sname field */ ap_pstr2_alnum(pconf, balancer->s->name + sizeof(BALANCER_PREFIX) - 1, &sname); sname = apr_pstrcat(pconf, conf->id, "_", sname, NULL); PROXY_STRNCPY(balancer->s->sname, sname); /* We know this will succeed */ balancer->max_workers = balancer->workers->nelts + balancer->growth; /* Create global mutex */ rv = ap_global_mutex_create(&(balancer->gmutex), NULL, balancer_mutex_type, balancer->s->sname, s, pconf, 0); if (rv != APR_SUCCESS || !balancer->gmutex) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(01180) "mutex creation of %s : %s failed", balancer_mutex_type, balancer->s->sname); return HTTP_INTERNAL_SERVER_ERROR; } apr_pool_cleanup_register(pconf, (void *)s, lock_remove, apr_pool_cleanup_null); /* setup shm for balancers */ bshm = ap_proxy_find_balancershm(storage, conf->bslot, balancer, &index); if (bshm) { if ((rv = storage->fgrab(conf->bslot, index)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(02408) "balancer slotmem_fgrab failed"); return !OK; } } else { if ((rv = storage->grab(conf->bslot, &index)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(01181) "balancer slotmem_grab failed"); return !OK; } if ((rv = storage->dptr(conf->bslot, index, (void *)&bshm)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(01182) "balancer slotmem_dptr failed"); return !OK; } } if ((rv = ap_proxy_share_balancer(balancer, bshm, index)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(01183) "Cannot share balancer"); return !OK; } /* create slotmem slots for workers */ ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01184) "Doing workers create: %s (%s), %d, %d [%u]", balancer->s->name, balancer->s->sname, (int)ALIGNED_PROXY_WORKER_SHARED_SIZE, (int)balancer->max_workers, i); rv = storage->create(&new, balancer->s->sname, ALIGNED_PROXY_WORKER_SHARED_SIZE, balancer->max_workers, type, pconf); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(01185) "worker slotmem_create failed"); return !OK; } balancer->wslot = new; balancer->storage = storage; /* sync all timestamps */ balancer->wupdated = balancer->s->wupdated = tstamp; /* now go thru each worker */ workers = (proxy_worker **)balancer->workers->elts; for (j = 0; j < balancer->workers->nelts; j++, workers++) { proxy_worker_shared *shm; worker = *workers; shm = ap_proxy_find_workershm(storage, balancer->wslot, worker, &index); if (shm) { if ((rv = storage->fgrab(balancer->wslot, index)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(02409) "worker slotmem_fgrab failed"); return !OK; } } else { if ((rv = storage->grab(balancer->wslot, &index)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(01186) "worker slotmem_grab failed"); return !OK; } if ((rv = storage->dptr(balancer->wslot, index, (void *)&shm)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(01187) "worker slotmem_dptr failed"); return !OK; } } if ((rv = ap_proxy_share_worker(worker, shm, index)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(01188) "Cannot share worker"); return !OK; } worker->s->updated = tstamp; } if (conf->bal_persist) { /* We could have just read-in a persisted config. Force a sync. */ balancer->wupdated--; ap_proxy_sync_balancer(balancer, s, conf); } } s = s->next; } return OK; } static void create_radio(const char *name, unsigned int flag, request_rec *r) { ap_rvputs(r, "
    \n", r); } static void push2table(const char *input, apr_table_t *params, const char *allowed[], apr_pool_t *p) { char *args; char *tok, *val; char *key; if (input == NULL) { return; } args = apr_pstrdup(p, input); key = apr_strtok(args, "&", &tok); while (key) { val = strchr(key, '='); if (val) { *val++ = '\0'; } else { val = ""; } ap_unescape_url(key); ap_unescape_url(val); if (allowed == NULL) { /* allow all */ apr_table_set(params, key, val); } else { const char **ok = allowed; while (*ok) { if (strcmp(*ok, key) == 0) { apr_table_set(params, key, val); break; } ok++; } } key = apr_strtok(NULL, "&", &tok); } } /* Returns non-zero if the Referer: header value passed matches the * host of the request. */ static int safe_referer(request_rec *r, const char *ref) { apr_uri_t uri; if (apr_uri_parse(r->pool, ref, &uri) || !uri.hostname) return 0; return strcmp(uri.hostname, ap_get_server_name(r)) == 0; } /* Manages the loadfactors and member status * The balancer, worker and nonce are obtained from * the request args (?b=...&w=...&nonce=....). * All other params are pulled from any POST * data that exists. * TODO: * /...//balancer/worker/nonce */ static int balancer_handler(request_rec *r) { void *sconf; proxy_server_conf *conf; proxy_balancer *balancer, *bsel = NULL; proxy_worker *worker, *wsel = NULL; proxy_worker **workers = NULL; apr_table_t *params; int i, n; int ok2change = 1; const char *name, *ref; const char *action; apr_status_t rv; /* is this for us? */ if (strcmp(r->handler, "balancer-manager")) { return DECLINED; } r->allowed = 0 | (AP_METHOD_BIT << M_GET) | (AP_METHOD_BIT << M_POST); if ((r->method_number != M_GET) && (r->method_number != M_POST)) { return DECLINED; } sconf = r->server->module_config; conf = (proxy_server_conf *) ap_get_module_config(sconf, &proxy_module); params = apr_table_make(r->pool, 10); balancer = (proxy_balancer *)conf->balancers->elts; for (i = 0; i < conf->balancers->nelts; i++, balancer++) { if ((rv = PROXY_THREAD_LOCK(balancer)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01189) "%s: Lock failed for balancer_handler", balancer->s->name); } ap_proxy_sync_balancer(balancer, r->server, conf); if ((rv = PROXY_THREAD_UNLOCK(balancer)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01190) "%s: Unlock failed for balancer_handler", balancer->s->name); } } if (r->args && (r->method_number == M_GET)) { const char *allowed[] = { "w", "b", "nonce", "xml", NULL }; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01191) "parsing r->args"); push2table(r->args, params, allowed, r->pool); } if (r->method_number == M_POST) { apr_bucket_brigade *ib; apr_size_t len = 1024; char *buf = apr_pcalloc(r->pool, len+1); ib = apr_brigade_create(r->connection->pool, r->connection->bucket_alloc); rv = ap_get_brigade(r->input_filters, ib, AP_MODE_READBYTES, APR_BLOCK_READ, len); if (rv != APR_SUCCESS) { return ap_map_http_request_error(rv, HTTP_BAD_REQUEST); } apr_brigade_flatten(ib, buf, &len); buf[len] = '\0'; push2table(buf, params, NULL, r->pool); } /* Ignore parameters if this looks like XSRF */ ref = apr_table_get(r->headers_in, "Referer"); if (apr_table_elts(params) && (!ref || !safe_referer(r, ref))) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(10187) "ignoring params in balancer-manager cross-site access"); apr_table_clear(params); } if ((name = apr_table_get(params, "b"))) bsel = ap_proxy_get_balancer(r->pool, conf, apr_pstrcat(r->pool, BALANCER_PREFIX, name, NULL), 0); if ((name = apr_table_get(params, "w"))) { wsel = ap_proxy_get_worker(r->pool, bsel, conf, name); } /* Check that the supplied nonce matches this server's nonce; * otherwise ignore all parameters, to prevent a CSRF attack. */ if (!bsel || (*bsel->s->nonce && ( (name = apr_table_get(params, "nonce")) == NULL || strcmp(bsel->s->nonce, name) != 0 ) ) ) { apr_table_clear(params); ok2change = 0; } /* First set the params */ if (wsel && ok2change) { const char *val; int was_usable = PROXY_WORKER_IS_USABLE(wsel); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01192) "settings worker params"); if ((val = apr_table_get(params, "w_lf"))) { int ival; double fval = atof(val); ival = fval * 100.0; if (ival >= 100 && ival <= 10000) { wsel->s->lbfactor = ival; if (bsel) recalc_factors(bsel); } } if ((val = apr_table_get(params, "w_wr"))) { if (strlen(val) && strlen(val) < sizeof(wsel->s->route)) strcpy(wsel->s->route, val); else *wsel->s->route = '\0'; } if ((val = apr_table_get(params, "w_rr"))) { if (strlen(val) && strlen(val) < sizeof(wsel->s->redirect)) strcpy(wsel->s->redirect, val); else *wsel->s->redirect = '\0'; } /* * TODO: Look for all 'w_status_#' keys and then loop thru * on that # character, since the character == the flag */ if ((val = apr_table_get(params, "w_status_I"))) { ap_proxy_set_wstatus(PROXY_WORKER_IGNORE_ERRORS_FLAG, atoi(val), wsel); } if ((val = apr_table_get(params, "w_status_N"))) { ap_proxy_set_wstatus(PROXY_WORKER_DRAIN_FLAG, atoi(val), wsel); } if ((val = apr_table_get(params, "w_status_D"))) { ap_proxy_set_wstatus(PROXY_WORKER_DISABLED_FLAG, atoi(val), wsel); } if ((val = apr_table_get(params, "w_status_H"))) { ap_proxy_set_wstatus(PROXY_WORKER_HOT_STANDBY_FLAG, atoi(val), wsel); } if ((val = apr_table_get(params, "w_status_R"))) { ap_proxy_set_wstatus(PROXY_WORKER_HOT_SPARE_FLAG, atoi(val), wsel); } if ((val = apr_table_get(params, "w_status_S"))) { ap_proxy_set_wstatus(PROXY_WORKER_STOPPED_FLAG, atoi(val), wsel); } if ((val = apr_table_get(params, "w_status_C"))) { ap_proxy_set_wstatus(PROXY_WORKER_HC_FAIL_FLAG, atoi(val), wsel); } if ((val = apr_table_get(params, "w_ls"))) { int ival = atoi(val); if (ival >= 0 && ival <= 99) { wsel->s->lbset = ival; } } if ((val = apr_table_get(params, "w_hi"))) { apr_interval_time_t hci; if (ap_timeout_parameter_parse(val, &hci, "ms") == APR_SUCCESS) { if (hci >= AP_WD_TM_SLICE) { wsel->s->interval = hci; } } } if ((val = apr_table_get(params, "w_hp"))) { int ival = atoi(val); if (ival >= 1) { wsel->s->passes = ival; } } if ((val = apr_table_get(params, "w_hf"))) { int ival = atoi(val); if (ival >= 1) { wsel->s->fails = ival; } } if ((val = apr_table_get(params, "w_hm"))) { proxy_hcmethods_t *method = proxy_hcmethods; for (; method->name; method++) { if (!strcasecmp(method->name, val) && method->implemented) wsel->s->method = method->method; } } if ((val = apr_table_get(params, "w_hu"))) { if (strlen(val) && strlen(val) < sizeof(wsel->s->hcuri)) strcpy(wsel->s->hcuri, val); else *wsel->s->hcuri = '\0'; } if (hc_valid_expr_f && (val = apr_table_get(params, "w_he"))) { if (strlen(val) && hc_valid_expr_f(r, val) && strlen(val) < sizeof(wsel->s->hcexpr)) strcpy(wsel->s->hcexpr, val); else *wsel->s->hcexpr = '\0'; } /* If the health check method doesn't support an expr, then null it */ if (wsel->s->method == NONE || wsel->s->method == TCP) { *wsel->s->hcexpr = '\0'; } /* if enabling, we need to reset all lb params */ if (bsel && !was_usable && PROXY_WORKER_IS_USABLE(wsel)) { bsel->s->need_reset = 1; } } if (bsel && ok2change) { const char *val; int ival; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01193) "settings balancer params"); if ((val = apr_table_get(params, "b_lbm"))) { if ((strlen(val) < (sizeof(bsel->s->lbpname)-1)) && strcmp(val, bsel->s->lbpname)) { proxy_balancer_method *lbmethod; lbmethod = ap_lookup_provider(PROXY_LBMETHOD, val, "0"); if (lbmethod) { PROXY_STRNCPY(bsel->s->lbpname, val); bsel->lbmethod = lbmethod; bsel->s->wupdated = apr_time_now(); bsel->s->need_reset = 1; } } } if ((val = apr_table_get(params, "b_tmo"))) { ival = atoi(val); if (ival >= 0 && ival <= 7200) { /* 2 hrs enuff? */ bsel->s->timeout = apr_time_from_sec(ival); } } if ((val = apr_table_get(params, "b_max"))) { ival = atoi(val); if (ival >= 0 && ival <= 99) { bsel->s->max_attempts = ival; } } if ((val = apr_table_get(params, "b_sforce"))) { ival = atoi(val); bsel->s->sticky_force = (ival != 0); } if ((val = apr_table_get(params, "b_ss")) && *val) { if (strlen(val) < (sizeof(bsel->s->sticky_path)-1)) { if (*val == '-' && *(val+1) == '\0') *bsel->s->sticky_path = *bsel->s->sticky = '\0'; else { char *path; PROXY_STRNCPY(bsel->s->sticky_path, val); PROXY_STRNCPY(bsel->s->sticky, val); if ((path = strchr((char *)bsel->s->sticky, '|'))) { *path++ = '\0'; PROXY_STRNCPY(bsel->s->sticky_path, path); } } } } if ((val = apr_table_get(params, "b_wyes")) && (*val == '1' && *(val+1) == '\0') && (val = apr_table_get(params, "b_nwrkr"))) { char *ret; proxy_worker *nworker; nworker = ap_proxy_get_worker(r->pool, bsel, conf, val); if (!nworker && storage->num_free_slots(bsel->wslot)) { if ((rv = PROXY_GLOBAL_LOCK(bsel)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01194) "%s: Lock failed for adding worker", bsel->s->name); } ret = ap_proxy_define_worker(conf->pool, &nworker, bsel, conf, val, 0); if (!ret) { unsigned int index; proxy_worker_shared *shm; PROXY_COPY_CONF_PARAMS(nworker, conf); if ((rv = storage->grab(bsel->wslot, &index)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_EMERG, rv, r, APLOGNO(01195) "worker slotmem_grab failed"); if ((rv = PROXY_GLOBAL_UNLOCK(bsel)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01196) "%s: Unlock failed for adding worker", bsel->s->name); } return HTTP_BAD_REQUEST; } if ((rv = storage->dptr(bsel->wslot, index, (void *)&shm)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_EMERG, rv, r, APLOGNO(01197) "worker slotmem_dptr failed"); if ((rv = PROXY_GLOBAL_UNLOCK(bsel)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01198) "%s: Unlock failed for adding worker", bsel->s->name); } return HTTP_BAD_REQUEST; } if ((rv = ap_proxy_share_worker(nworker, shm, index)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_EMERG, rv, r, APLOGNO(01199) "Cannot share worker"); if ((rv = PROXY_GLOBAL_UNLOCK(bsel)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01200) "%s: Unlock failed for adding worker", bsel->s->name); } return HTTP_BAD_REQUEST; } if ((rv = ap_proxy_initialize_worker(nworker, r->server, conf->pool)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_EMERG, rv, r, APLOGNO(01201) "Cannot init worker"); if ((rv = PROXY_GLOBAL_UNLOCK(bsel)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01202) "%s: Unlock failed for adding worker", bsel->s->name); } return HTTP_BAD_REQUEST; } /* sync all timestamps */ bsel->wupdated = bsel->s->wupdated = nworker->s->updated = apr_time_now(); /* by default, all new workers are disabled */ ap_proxy_set_wstatus(PROXY_WORKER_DISABLED_FLAG, 1, nworker); } if ((rv = PROXY_GLOBAL_UNLOCK(bsel)) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01203) "%s: Unlock failed for adding worker", bsel->s->name); } } } } action = ap_construct_url(r->pool, r->uri, r); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01204) "genning page"); if (apr_table_get(params, "xml")) { char date[APR_RFC822_DATE_LEN]; ap_set_content_type(r, "text/xml"); ap_rputs("\n", r); ap_rputs("\n", r); ap_rputs(" \n", r); balancer = (proxy_balancer *)conf->balancers->elts; for (i = 0; i < conf->balancers->nelts; i++) { ap_rputs(" \n", r); /* Start proxy_balancer */ ap_rvputs(r, " ", balancer->s->name, "\n", NULL); if (*balancer->s->sticky) { ap_rvputs(r, " ", ap_escape_html(r->pool, balancer->s->sticky), "\n", NULL); ap_rprintf(r, " %s\n", (balancer->s->sticky_force ? "On" : "Off")); } ap_rprintf(r, " %" APR_TIME_T_FMT "", apr_time_sec(balancer->s->timeout)); if (balancer->s->max_attempts_set) { ap_rprintf(r, " %d\n", balancer->s->max_attempts); } ap_rvputs(r, " ", balancer->lbmethod->name, "\n", NULL); if (*balancer->s->sticky) { ap_rprintf(r, " %s\n", (balancer->s->scolonsep ? "On" : "Off")); } /* End proxy_balancer */ ap_rputs(" \n", r); workers = (proxy_worker **)balancer->workers->elts; for (n = 0; n < balancer->workers->nelts; n++) { worker = *workers; /* Start proxy_worker */ ap_rputs(" \n", r); ap_rvputs(r, " ", ap_proxy_worker_name(r->pool, worker), "\n", NULL); ap_rvputs(r, " ", worker->s->scheme, "\n", NULL); ap_rvputs(r, " ", worker->s->hostname_ex, "\n", NULL); ap_rprintf(r, " %.2f\n", (float)(worker->s->lbfactor)/100.0); ap_rprintf(r, " %d\n", worker->s->port); ap_rprintf(r, " %d\n", worker->s->min); ap_rprintf(r, " %d\n", worker->s->smax); ap_rprintf(r, " %d\n", worker->s->hmax); ap_rprintf(r, " %" APR_TIME_T_FMT "\n", apr_time_sec(worker->s->ttl)); if (worker->s->timeout_set) { ap_rprintf(r, " %" APR_TIME_T_FMT "\n", apr_time_sec(worker->s->timeout)); } if (worker->s->acquire_set) { ap_rprintf(r, " %" APR_TIME_T_FMT "\n", apr_time_msec(worker->s->acquire)); } if (worker->s->recv_buffer_size_set) { ap_rprintf(r, " %" APR_SIZE_T_FMT "\n", worker->s->recv_buffer_size); } if (worker->s->io_buffer_size_set) { ap_rprintf(r, " %" APR_SIZE_T_FMT "\n", worker->s->io_buffer_size); } if (worker->s->keepalive_set) { ap_rprintf(r, " %s\n", (worker->s->keepalive ? "On" : "Off")); } /* Begin proxy_worker_stat */ ap_rputs(" ", r); ap_rputs(ap_proxy_parse_wstatus(r->pool, worker), r); ap_rputs("\n", r); if ((worker->s->error_time > 0) && apr_rfc822_date(date, worker->s->error_time) == APR_SUCCESS) { ap_rvputs(r, " ", date, "\n", NULL); } ap_rprintf(r, " %d\n", worker->s->retries); ap_rprintf(r, " %d\n", worker->s->lbstatus); ap_rprintf(r, " %.2f\n", (float)(worker->s->lbfactor)/100.0); ap_rprintf(r, " %" APR_OFF_T_FMT "\n", worker->s->transferred); ap_rprintf(r, " %" APR_OFF_T_FMT "\n", worker->s->read); ap_rprintf(r, " %" APR_SIZE_T_FMT "\n", worker->s->elected); ap_rvputs(r, " ", ap_escape_html(r->pool, worker->s->route), "\n", NULL); ap_rvputs(r, " ", ap_escape_html(r->pool, worker->s->redirect), "\n", NULL); ap_rprintf(r, " %" APR_SIZE_T_FMT "\n", worker->s->busy); ap_rprintf(r, " %d\n", worker->s->lbset); /* End proxy_worker_stat */ if (!strcasecmp(worker->s->scheme, "ajp")) { ap_rputs(" ", r); switch (worker->s->flush_packets) { case flush_off: ap_rputs("Off", r); break; case flush_on: ap_rputs("On", r); break; case flush_auto: ap_rputs("Auto", r); break; } ap_rputs("\n", r); if (worker->s->flush_packets == flush_auto) { ap_rprintf(r, " %d\n", worker->s->flush_wait); } if (worker->s->ping_timeout_set) { ap_rprintf(r, " %" APR_TIME_T_FMT "", apr_time_msec(worker->s->ping_timeout)); } } if (worker->s->disablereuse_set) { ap_rprintf(r, " %s\n", (worker->s->disablereuse ? "On" : "Off")); } if (worker->s->conn_timeout_set) { ap_rprintf(r, " %" APR_TIME_T_FMT "\n", apr_time_msec(worker->s->conn_timeout)); } if (worker->s->retry_set) { ap_rprintf(r, " %" APR_TIME_T_FMT "\n", apr_time_sec(worker->s->retry)); } ap_rputs(" \n", r); ++workers; } ap_rputs(" \n", r); ap_rputs(" \n", r); ++balancer; } ap_rputs(" \n", r); ap_rputs("", r); } else { ap_set_content_type(r, "text/html; charset=ISO-8859-1"); ap_rputs(DOCTYPE_HTML_3_2 "Balancer Manager\n", r); ap_rputs("\n\n", r); ap_rputs("

    Load Balancer Manager for ", r); ap_rvputs(r, ap_escape_html(r->pool, ap_get_server_name(r)), "

    \n\n", NULL); ap_rvputs(r, "
    Server Version: ", ap_get_server_description(), "
    \n", NULL); ap_rvputs(r, "
    Server Built: ", ap_get_server_built(), "
    \n", NULL); ap_rvputs(r, "
    Balancer changes will ", conf->bal_persist ? "" : "NOT ", "be persisted on restart.
    ", NULL); ap_rvputs(r, "
    Balancers are ", conf->inherit ? "" : "NOT ", "inherited from main server.
    ", NULL); ap_rvputs(r, "
    ProxyPass settings are ", conf->ppinherit ? "" : "NOT ", "inherited from main server.
    ", NULL); ap_rputs("
    \n", r); balancer = (proxy_balancer *)conf->balancers->elts; for (i = 0; i < conf->balancers->nelts; i++) { ap_rputs("
    \n

    LoadBalancer Status for ", r); ap_rvputs(r, "pool, r->uri), "?b=", balancer->s->name + sizeof(BALANCER_PREFIX) - 1, "&nonce=", balancer->s->nonce, "\">", NULL); ap_rvputs(r, balancer->s->name, " [",balancer->s->sname, "]

    \n", NULL); ap_rputs("\n\n" "" "\n", r); /* the below is a safe cast, since the number of slots total will * never be more than max_workers, which is restricted to int */ ap_rprintf(r, "\n", balancer->max_workers, balancer->max_workers - (int)storage->num_free_slots(balancer->wslot)); if (*balancer->s->sticky) { if (strcmp(balancer->s->sticky, balancer->s->sticky_path)) { ap_rvputs(r, "\n", balancer->s->sticky_force ? "On" : "Off"); ap_rprintf(r, "", apr_time_sec(balancer->s->timeout)); ap_rprintf(r, "\n", balancer->s->max_attempts); ap_rprintf(r, "\n", balancer->s->lbpname); ap_rputs("\n", NULL); ap_rprintf(r, "\n", !balancer->s->inactive ? "Yes" : "No"); ap_rputs("
    MaxMembersStickySessionDisableFailoverTimeoutFailoverAttemptsMethodPathActive
    %d [%d Used]", ap_escape_html(r->pool, balancer->s->sticky), " | ", ap_escape_html(r->pool, balancer->s->sticky_path), NULL); } else { ap_rvputs(r, "", ap_escape_html(r->pool, balancer->s->sticky), NULL); } } else { ap_rputs(" (None) ", r); } ap_rprintf(r, "%s%" APR_TIME_T_FMT "%d%s", r); if (*balancer->s->vhost) { ap_rvputs(r, balancer->s->vhost, " -> ", NULL); } ap_rvputs(r, balancer->s->vpath, "%s
    \n
    ", r); ap_rputs("\n\n" "" "" "" "", r); if (set_worker_hc_param_f) { ap_rputs("", r); } ap_rputs("\n", r); workers = (proxy_worker **)balancer->workers->elts; for (n = 0; n < balancer->workers->nelts; n++) { char fbuf[50]; worker = *workers; ap_rvputs(r, "\n", NULL); ap_rvputs(r, "", (float)(worker->s->lbfactor)/100.0); ap_rprintf(r, "", r); ap_rprintf(r, "", worker->s->elected); ap_rprintf(r, "", worker->s->busy); ap_rprintf(r, "", ap_proxy_show_hcmethod(worker->s->method)); ap_rprintf(r, "", apr_time_as_msec(worker->s->interval)); ap_rprintf(r, "", worker->s->passes,worker->s->pcount); ap_rprintf(r, "", worker->s->fails, worker->s->fcount); ap_rprintf(r, "", ap_escape_html(r->pool, worker->s->hcuri)); ap_rprintf(r, "\n", r); ++workers; } ap_rputs("
    Worker URLRouteRouteRedirFactorSetStatusElectedBusyLoadToFromHC MethodHC IntervalPassesFailsHC uriHC Expr
    pool, r->uri), "?b=", balancer->s->name + sizeof(BALANCER_PREFIX) - 1, "&w=", ap_escape_uri(r->pool, worker->s->name), "&nonce=", balancer->s->nonce, "\">", NULL); ap_rvputs(r, (*worker->s->uds_path ? "" : ""), ap_proxy_worker_name(r->pool, worker), (*worker->s->uds_path ? "" : ""), "", ap_escape_html(r->pool, worker->s->route), NULL); ap_rvputs(r, "", ap_escape_html(r->pool, worker->s->redirect), NULL); ap_rprintf(r, "%.2f%d", worker->s->lbset); ap_rvputs(r, ap_proxy_parse_wstatus(r->pool, worker), NULL); ap_rputs("%" APR_SIZE_T_FMT "%" APR_SIZE_T_FMT "%d", worker->s->lbstatus); ap_rputs(apr_strfsize(worker->s->transferred, fbuf), r); ap_rputs("", r); ap_rputs(apr_strfsize(worker->s->read, fbuf), r); if (set_worker_hc_param_f) { ap_rprintf(r, "%s%" APR_TIME_T_FMT "ms%d (%d)%d (%d)%s%s", worker->s->hcexpr); } ap_rputs("
    \n", r); ++balancer; } ap_rputs("
    \n", r); if (hc_show_exprs_f) { hc_show_exprs_f(r); } if (wsel && bsel) { ap_rputs("

    Edit worker settings for ", r); ap_rvputs(r, (*wsel->s->uds_path?"":""), ap_proxy_worker_name(r->pool, wsel), (*wsel->s->uds_path?"":""), "

    \n", NULL); ap_rputs("
    pool, action), "\">\n", NULL); ap_rputs("\n", (float)(wsel->s->lbfactor)/100.0); ap_rputs("\n", wsel->s->lbset); ap_rputs("\n", r); ap_rputs("\n", r); ap_rputs("", r); ap_rputs("\n", r); if (hc_select_exprs_f) { proxy_hcmethods_t *method = proxy_hcmethods; ap_rputs("\n", r); } ap_rputs("\n", r); ap_rvputs(r, "
    Load factor:
    LB Set:
    Route:pool, wsel->s->route), NULL); ap_rputs("\">
    Route Redirect:pool, wsel->s->redirect), NULL); ap_rputs("\">
    Status:" "" "" "" "" "", r); if (hc_show_exprs_f) { ap_rputs("", r); } ap_rputs("\n", r); create_radio("w_status_I", (PROXY_WORKER_IS(wsel, PROXY_WORKER_IGNORE_ERRORS)), r); create_radio("w_status_N", (PROXY_WORKER_IS(wsel, PROXY_WORKER_DRAIN)), r); create_radio("w_status_D", (PROXY_WORKER_IS(wsel, PROXY_WORKER_DISABLED)), r); create_radio("w_status_H", (PROXY_WORKER_IS(wsel, PROXY_WORKER_HOT_STANDBY)), r); create_radio("w_status_R", (PROXY_WORKER_IS(wsel, PROXY_WORKER_HOT_SPARE)), r); if (hc_show_exprs_f) { create_radio("w_status_C", (PROXY_WORKER_IS(wsel, PROXY_WORKER_HC_FAIL)), r); } create_radio("w_status_S", (PROXY_WORKER_IS(wsel, PROXY_WORKER_STOPPED)), r); ap_rputs("
    Ignore ErrorsDraining ModeDisabledHot StandbyHot SpareHC FailStopped
    \n\n", r); ap_rputs("\n", r); ap_rputs("\n", r); ap_rprintf(r, "\n", apr_time_as_msec(wsel->s->interval)); ap_rprintf(r, "\n", wsel->s->passes); ap_rprintf(r, "\n", wsel->s->fails); ap_rprintf(r, "\n", ap_escape_html(r->pool, wsel->s->hcuri)); ap_rputs("
    Health Check paramValue
    Method\n
    Expr\n
    Interval (ms)
    Passes trigger
    Fails trigger)
    HC uri
    \n
    \npool, wsel->s->name), "\">\n", NULL); ap_rvputs(r, "pool, bsel->s->name + sizeof(BALANCER_PREFIX) - 1), "\">\n", NULL); ap_rvputs(r, "\n", NULL); ap_rputs("
    \n", r); ap_rputs("
    \n", r); } else if (bsel) { const apr_array_header_t *provs; const ap_list_provider_names_t *pname; int i; ap_rputs("

    Edit balancer settings for ", r); ap_rvputs(r, ap_escape_html(r->pool, bsel->s->name), "

    \n", NULL); ap_rputs("
    pool, action), "\">\n", NULL); ap_rputs("\n", r); provs = ap_list_provider_names(r->pool, PROXY_LBMETHOD, "0"); if (provs) { ap_rputs("", r); ap_rputs("\n", r); } ap_rputs("\n", apr_time_sec(bsel->s->timeout)); ap_rputs("\n", bsel->s->max_attempts); ap_rputs("", r); create_radio("b_sforce", bsel->s->sticky_force, r); ap_rputs("\n", r); ap_rputs("\n", r); if (storage->num_free_slots(bsel->wslot) != 0) { ap_rputs("", r); } ap_rputs("\n", r); ap_rvputs(r, "
    LBmethod:\n\n
    Timeout:
    Failover Attempts:
    Disable Failover:
    Sticky Session:s->sticky, bsel->s->sticky_path)) { ap_rvputs(r, "value =\"", ap_escape_html(r->pool, bsel->s->sticky), " | ", ap_escape_html(r->pool, bsel->s->sticky_path), NULL); } else { ap_rvputs(r, "value =\"", ap_escape_html(r->pool, bsel->s->sticky), NULL); } ap_rputs("\">    (Use '-' to delete)
    Add New Worker:" "    Are you sure? " "
    \npool, bsel->s->name + sizeof(BALANCER_PREFIX) - 1), "\">\n", NULL); ap_rvputs(r, "\n", NULL); ap_rputs("
    \n", r); ap_rputs("
    \n", r); } ap_rputs(ap_psignature("",r), r); ap_rputs("\n", r); ap_rflush(r); } return DONE; } static void balancer_child_init(apr_pool_t *p, server_rec *s) { while (s) { proxy_balancer *balancer; int i; void *sconf = s->module_config; proxy_server_conf *conf = (proxy_server_conf *)ap_get_module_config(sconf, &proxy_module); apr_status_t rv; if (conf->balancers->nelts) { apr_size_t size; unsigned int num; storage->attach(&(conf->bslot), conf->id, &size, &num, p); if (!conf->bslot) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01205) "slotmem_attach failed"); exit(1); /* Ugly, but what else? */ } } balancer = (proxy_balancer *)conf->balancers->elts; for (i = 0; i < conf->balancers->nelts; i++, balancer++) { rv = ap_proxy_initialize_balancer(balancer, s, p); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(01206) "Failed to init balancer %s in child", balancer->s->name); exit(1); /* Ugly, but what else? */ } init_balancer_members(conf->pool, s, balancer); } s = s->next; } } static void ap_proxy_balancer_register_hook(apr_pool_t *p) { /* Only the mpm_winnt has child init hook handler. * make sure that we are called after the mpm * initializes */ static const char *const aszPred[] = { "mpm_winnt.c", "mod_slotmem_shm.c", NULL}; static const char *const aszPred2[] = { "mod_proxy.c", NULL}; /* manager handler */ ap_hook_post_config(balancer_post_config, aszPred2, NULL, APR_HOOK_MIDDLE); ap_hook_pre_config(balancer_pre_config, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_handler(balancer_handler, NULL, NULL, APR_HOOK_FIRST); ap_hook_child_init(balancer_child_init, aszPred, NULL, APR_HOOK_MIDDLE); proxy_hook_pre_request(proxy_balancer_pre_request, NULL, NULL, APR_HOOK_FIRST); proxy_hook_post_request(proxy_balancer_post_request, NULL, NULL, APR_HOOK_FIRST); proxy_hook_canon_handler(proxy_balancer_canon, NULL, NULL, APR_HOOK_FIRST); } AP_DECLARE_MODULE(proxy_balancer) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ NULL, /* command apr_table_t */ ap_proxy_balancer_register_hook /* register hooks */ }; httpd-2.4.41/modules/proxy/mod_proxy.mak0000644000000000000500000002377413304313421016606 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_proxy.dsp !IF "$(CFG)" == "" CFG=mod_proxy - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_proxy - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_proxy - Win32 Release" && "$(CFG)" != "mod_proxy - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy.mak" CFG="mod_proxy - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_proxy - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_proxy.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy.obj" -@erase "$(INTDIR)\mod_proxy.res" -@erase "$(INTDIR)\mod_proxy_src.idb" -@erase "$(INTDIR)\mod_proxy_src.pdb" -@erase "$(INTDIR)\proxy_util.obj" -@erase "$(OUTDIR)\mod_proxy.exp" -@erase "$(OUTDIR)\mod_proxy.lib" -@erase "$(OUTDIR)\mod_proxy.pdb" -@erase "$(OUTDIR)\mod_proxy.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../generators" /I "../http2" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "PROXY_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy.so" /d LONG_NAME="proxy_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy.pdb" /debug /out:"$(OUTDIR)\mod_proxy.so" /implib:"$(OUTDIR)\mod_proxy.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_proxy.obj" \ "$(INTDIR)\proxy_util.obj" \ "$(INTDIR)\mod_proxy.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_proxy.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_proxy.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy.so" if exist .\Release\mod_proxy.so.manifest mt.exe -manifest .\Release\mod_proxy.so.manifest -outputresource:.\Release\mod_proxy.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_proxy - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_proxy.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy.obj" -@erase "$(INTDIR)\mod_proxy.res" -@erase "$(INTDIR)\mod_proxy_src.idb" -@erase "$(INTDIR)\mod_proxy_src.pdb" -@erase "$(INTDIR)\proxy_util.obj" -@erase "$(OUTDIR)\mod_proxy.exp" -@erase "$(OUTDIR)\mod_proxy.lib" -@erase "$(OUTDIR)\mod_proxy.pdb" -@erase "$(OUTDIR)\mod_proxy.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../ssl" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../generators" /I "../http2" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "PROXY_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy.so" /d LONG_NAME="proxy_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy.pdb" /debug /out:"$(OUTDIR)\mod_proxy.so" /implib:"$(OUTDIR)\mod_proxy.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy.so LINK32_OBJS= \ "$(INTDIR)\mod_proxy.obj" \ "$(INTDIR)\proxy_util.obj" \ "$(INTDIR)\mod_proxy.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_proxy.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_proxy.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy.so" if exist .\Debug\mod_proxy.so.manifest mt.exe -manifest .\Debug\mod_proxy.so.manifest -outputresource:.\Debug\mod_proxy.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_proxy.dep") !INCLUDE "mod_proxy.dep" !ELSE !MESSAGE Warning: cannot find "mod_proxy.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_proxy - Win32 Release" || "$(CFG)" == "mod_proxy - Win32 Debug" SOURCE=.\mod_proxy.c "$(INTDIR)\mod_proxy.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\proxy_util.c "$(INTDIR)\proxy_util.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_proxy - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_proxy - Win32 Release" "$(INTDIR)\mod_proxy.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_proxy.so" /d LONG_NAME="proxy_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_proxy - Win32 Debug" "$(INTDIR)\mod_proxy.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_proxy.so" /d LONG_NAME="proxy_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/NWGNUproxyscgi0000644000000000000500000001060311546111464016661 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxyscgi # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy SCGI Sub-Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Proxy SCGI Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/proxyscgi.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_proxy_scgi.o \ $(OBJDIR)/libprews.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @$(OBJDIR)/mod_proxy.imp \ @libc.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ proxy_scgi_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/mod_proxy_ftp.mak0000644000000000000500000002551312701473373017465 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_proxy_ftp.dsp !IF "$(CFG)" == "" CFG=mod_proxy_ftp - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_proxy_ftp - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_proxy_ftp - Win32 Release" && "$(CFG)" != "mod_proxy_ftp - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_ftp.mak" CFG="mod_proxy_ftp - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_ftp - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_ftp - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_proxy_ftp - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_ftp.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_proxy_ftp.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_ftp.obj" -@erase "$(INTDIR)\mod_proxy_ftp.res" -@erase "$(INTDIR)\mod_proxy_ftp_src.idb" -@erase "$(INTDIR)\mod_proxy_ftp_src.pdb" -@erase "$(OUTDIR)\mod_proxy_ftp.exp" -@erase "$(OUTDIR)\mod_proxy_ftp.lib" -@erase "$(OUTDIR)\mod_proxy_ftp.pdb" -@erase "$(OUTDIR)\mod_proxy_ftp.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_ftp_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_ftp.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_ftp.so" /d LONG_NAME="proxy_ftp_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_ftp.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_ftp.pdb" /debug /out:"$(OUTDIR)\mod_proxy_ftp.so" /implib:"$(OUTDIR)\mod_proxy_ftp.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_ftp.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_proxy_ftp.obj" \ "$(INTDIR)\mod_proxy_ftp.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_ftp.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_proxy_ftp.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_ftp.so" if exist .\Release\mod_proxy_ftp.so.manifest mt.exe -manifest .\Release\mod_proxy_ftp.so.manifest -outputresource:.\Release\mod_proxy_ftp.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_proxy_ftp - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_ftp.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_proxy_ftp.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_ftp.obj" -@erase "$(INTDIR)\mod_proxy_ftp.res" -@erase "$(INTDIR)\mod_proxy_ftp_src.idb" -@erase "$(INTDIR)\mod_proxy_ftp_src.pdb" -@erase "$(OUTDIR)\mod_proxy_ftp.exp" -@erase "$(OUTDIR)\mod_proxy_ftp.lib" -@erase "$(OUTDIR)\mod_proxy_ftp.pdb" -@erase "$(OUTDIR)\mod_proxy_ftp.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_ftp_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_ftp.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_ftp.so" /d LONG_NAME="proxy_ftp_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_ftp.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_ftp.pdb" /debug /out:"$(OUTDIR)\mod_proxy_ftp.so" /implib:"$(OUTDIR)\mod_proxy_ftp.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_ftp.so LINK32_OBJS= \ "$(INTDIR)\mod_proxy_ftp.obj" \ "$(INTDIR)\mod_proxy_ftp.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_ftp.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_proxy_ftp.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_ftp.so" if exist .\Debug\mod_proxy_ftp.so.manifest mt.exe -manifest .\Debug\mod_proxy_ftp.so.manifest -outputresource:.\Debug\mod_proxy_ftp.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_proxy_ftp.dep") !INCLUDE "mod_proxy_ftp.dep" !ELSE !MESSAGE Warning: cannot find "mod_proxy_ftp.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_proxy_ftp - Win32 Release" || "$(CFG)" == "mod_proxy_ftp - Win32 Debug" SOURCE=.\mod_proxy_ftp.c "$(INTDIR)\mod_proxy_ftp.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_proxy_ftp - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_ftp - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_ftp - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_ftp - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_ftp - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_ftp - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_ftp - Win32 Release" "mod_proxy - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd "." "mod_proxy - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_proxy_ftp - Win32 Debug" "mod_proxy - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd "." "mod_proxy - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_proxy_ftp - Win32 Release" "$(INTDIR)\mod_proxy_ftp.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_ftp.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_proxy_ftp.so" /d LONG_NAME="proxy_ftp_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_proxy_ftp - Win32 Debug" "$(INTDIR)\mod_proxy_ftp.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_ftp.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_proxy_ftp.so" /d LONG_NAME="proxy_ftp_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/mod_proxy_balancer.dsp0000644000000000000500000001165110551346420020450 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_proxy_balancer" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_proxy_balancer - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_proxy_balancer.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_balancer.mak" CFG="mod_proxy_balancer - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_balancer - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_balancer - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_proxy_balancer - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_proxy_balancer_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_proxy_balancer.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_balancer.so" /d LONG_NAME="proxy_balancer_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_proxy_balancer.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_balancer.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_proxy_balancer.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_balancer.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_proxy_balancer.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_proxy_balancer - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_proxy_balancer_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_proxy_balancer.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_balancer.so" /d LONG_NAME="proxy_balancer_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_balancer.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_balancer.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_balancer.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_balancer.so # Begin Special Build Tool TargetPath=.\Debug\mod_proxy_balancer.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_proxy_balancer - Win32 Release" # Name "mod_proxy_balancer - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_proxy_balancer.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=.\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/mod_proxy_fcgi.dsp0000644000000000000500000001146112243521372017611 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_proxy_fcgi" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_proxy_fcgi - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_proxy_fcgi.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_fcgi.mak" CFG="mod_proxy_fcgi - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_fcgi - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_fcgi - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_proxy_fcgi - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_proxy_fcgi_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_proxy_fcgi.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_fcgi.so" /d LONG_NAME="proxy_fcgi_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_proxy_fcgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_fcgi.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_proxy_fcgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_fcgi.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_proxy_fcgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_proxy_fcgi - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_proxy_fcgi_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_proxy_fcgi.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_fcgi.so" /d LONG_NAME="proxy_fcgi_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_fcgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_fcgi.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_fcgi.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_fcgi.so # Begin Special Build Tool TargetPath=.\Debug\mod_proxy_fcgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_proxy_fcgi - Win32 Release" # Name "mod_proxy_fcgi - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_proxy_fcgi.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=.\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/ajp_header.h0000644000000000000500000001536212473142031016324 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file ajp_header.h * @brief AJP defines * * @addtogroup AJP_defines * @{ */ #ifndef AJP_HEADER_H #define AJP_HEADER_H /* * Conditional request attributes * */ #define SC_A_CONTEXT (unsigned char)1 #define SC_A_SERVLET_PATH (unsigned char)2 #define SC_A_REMOTE_USER (unsigned char)3 #define SC_A_AUTH_TYPE (unsigned char)4 #define SC_A_QUERY_STRING (unsigned char)5 #define SC_A_JVM_ROUTE (unsigned char)6 #define SC_A_SSL_CERT (unsigned char)7 #define SC_A_SSL_CIPHER (unsigned char)8 #define SC_A_SSL_SESSION (unsigned char)9 #define SC_A_REQ_ATTRIBUTE (unsigned char)10 #define SC_A_SSL_KEY_SIZE (unsigned char)11 /* only in if JkOptions +ForwardKeySize */ #define SC_A_SECRET (unsigned char)12 #define SC_A_STORED_METHOD (unsigned char)13 #define SC_A_ARE_DONE (unsigned char)0xFF /* * AJP private request attributes * * The following request attribute is recognized by Tomcat * to contain the SSL protocol name */ #define SC_A_SSL_PROTOCOL ("AJP_SSL_PROTOCOL") /* * The following request attribute is recognized by Tomcat * to contain the forwarded remote port. */ #define SC_A_REQ_REMOTE_PORT ("AJP_REMOTE_PORT") /* * The following request attribute is recognized by Tomcat * to contain the forwarded local ip address. */ #define SC_A_REQ_LOCAL_ADDR ("AJP_LOCAL_ADDR") /* * Request methods, coded as numbers instead of strings. * The list of methods was taken from Section 5.1.1 of RFC 2616, * RFC 2518, the ACL IETF draft, and the DeltaV IESG Proposed Standard. * Method = "OPTIONS" * | "GET" * | "HEAD" * | "POST" * | "PUT" * | "DELETE" * | "TRACE" * | "PROPFIND" * | "PROPPATCH" * | "MKCOL" * | "COPY" * | "MOVE" * | "LOCK" * | "UNLOCK" * | "ACL" * | "REPORT" * | "VERSION-CONTROL" * | "CHECKIN" * | "CHECKOUT" * | "UNCHECKOUT" * | "SEARCH" * | "MKWORKSPACE" * | "UPDATE" * | "LABEL" * | "MERGE" * | "BASELINE-CONTROL" * | "MKACTIVITY" * */ #define SC_M_OPTIONS (unsigned char)1 #define SC_M_GET (unsigned char)2 #define SC_M_HEAD (unsigned char)3 #define SC_M_POST (unsigned char)4 #define SC_M_PUT (unsigned char)5 #define SC_M_DELETE (unsigned char)6 #define SC_M_TRACE (unsigned char)7 #define SC_M_PROPFIND (unsigned char)8 #define SC_M_PROPPATCH (unsigned char)9 #define SC_M_MKCOL (unsigned char)10 #define SC_M_COPY (unsigned char)11 #define SC_M_MOVE (unsigned char)12 #define SC_M_LOCK (unsigned char)13 #define SC_M_UNLOCK (unsigned char)14 #define SC_M_ACL (unsigned char)15 #define SC_M_REPORT (unsigned char)16 #define SC_M_VERSION_CONTROL (unsigned char)17 #define SC_M_CHECKIN (unsigned char)18 #define SC_M_CHECKOUT (unsigned char)19 #define SC_M_UNCHECKOUT (unsigned char)20 #define SC_M_SEARCH (unsigned char)21 #define SC_M_MKWORKSPACE (unsigned char)22 #define SC_M_UPDATE (unsigned char)23 #define SC_M_LABEL (unsigned char)24 #define SC_M_MERGE (unsigned char)25 #define SC_M_BASELINE_CONTROL (unsigned char)26 #define SC_M_MKACTIVITY (unsigned char)27 #define SC_M_JK_STORED (unsigned char)0xFF /* * Frequent request headers, these headers are coded as numbers * instead of strings. * * Accept * Accept-Charset * Accept-Encoding * Accept-Language * Authorization * Connection * Content-Type * Content-Length * Cookie * Cookie2 * Host * Pragma * Referer * User-Agent * */ #define SC_ACCEPT (unsigned short)0xA001 #define SC_ACCEPT_CHARSET (unsigned short)0xA002 #define SC_ACCEPT_ENCODING (unsigned short)0xA003 #define SC_ACCEPT_LANGUAGE (unsigned short)0xA004 #define SC_AUTHORIZATION (unsigned short)0xA005 #define SC_CONNECTION (unsigned short)0xA006 #define SC_CONTENT_TYPE (unsigned short)0xA007 #define SC_CONTENT_LENGTH (unsigned short)0xA008 #define SC_COOKIE (unsigned short)0xA009 #define SC_COOKIE2 (unsigned short)0xA00A #define SC_HOST (unsigned short)0xA00B #define SC_PRAGMA (unsigned short)0xA00C #define SC_REFERER (unsigned short)0xA00D #define SC_USER_AGENT (unsigned short)0xA00E /* * Frequent response headers, these headers are coded as numbers * instead of strings. * * Content-Type * Content-Language * Content-Length * Date * Last-Modified * Location * Set-Cookie * Servlet-Engine * Status * WWW-Authenticate * */ #define SC_RESP_CONTENT_TYPE (unsigned short)0xA001 #define SC_RESP_CONTENT_LANGUAGE (unsigned short)0xA002 #define SC_RESP_CONTENT_LENGTH (unsigned short)0xA003 #define SC_RESP_DATE (unsigned short)0xA004 #define SC_RESP_LAST_MODIFIED (unsigned short)0xA005 #define SC_RESP_LOCATION (unsigned short)0xA006 #define SC_RESP_SET_COOKIE (unsigned short)0xA007 #define SC_RESP_SET_COOKIE2 (unsigned short)0xA008 #define SC_RESP_SERVLET_ENGINE (unsigned short)0xA009 #define SC_RESP_STATUS (unsigned short)0xA00A #define SC_RESP_WWW_AUTHENTICATE (unsigned short)0xA00B #define SC_RES_HEADERS_NUM 11 #endif /* AJP_HEADER_H */ /** @} */ httpd-2.4.41/modules/proxy/mod_proxy_ajp.c0000644000000000000500000010107513335040064017105 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* AJP routines for Apache proxy */ #include "mod_proxy.h" #include "ajp.h" module AP_MODULE_DECLARE_DATA proxy_ajp_module; /* * Canonicalise http-like URLs. * scheme is the scheme for the URL * url is the URL starting with the first '/' * def_port is the default port for this scheme. */ static int proxy_ajp_canon(request_rec *r, char *url) { char *host, *path, sport[7]; char *search = NULL; const char *err; apr_port_t port, def_port; /* ap_port_of_scheme() */ if (strncasecmp(url, "ajp:", 4) == 0) { url += 4; } else { return DECLINED; } ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "canonicalising URL %s", url); /* * do syntactic check. * We break the URL into host, port, path, search */ port = def_port = ap_proxy_port_of_scheme("ajp"); err = ap_proxy_canon_netloc(r->pool, &url, NULL, NULL, &host, &port); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00867) "error parsing URL %s: %s", url, err); return HTTP_BAD_REQUEST; } /* * now parse path/search args, according to rfc1738: * process the path. With proxy-nocanon set (by * mod_proxy) we use the raw, unparsed uri */ if (apr_table_get(r->notes, "proxy-nocanon")) { path = url; /* this is the raw path */ } else { path = ap_proxy_canonenc(r->pool, url, strlen(url), enc_path, 0, r->proxyreq); search = r->args; } if (path == NULL) return HTTP_BAD_REQUEST; if (port != def_port) apr_snprintf(sport, sizeof(sport), ":%d", port); else sport[0] = '\0'; if (ap_strchr_c(host, ':')) { /* if literal IPv6 address */ host = apr_pstrcat(r->pool, "[", host, "]", NULL); } r->filename = apr_pstrcat(r->pool, "proxy:ajp://", host, sport, "/", path, (search) ? "?" : "", (search) ? search : "", NULL); return OK; } #define METHOD_NON_IDEMPOTENT 0 #define METHOD_IDEMPOTENT 1 #define METHOD_IDEMPOTENT_WITH_ARGS 2 static int is_idempotent(request_rec *r) { /* * RFC2616 (9.1.2): GET, HEAD, PUT, DELETE, OPTIONS, TRACE are considered * idempotent. Hint: HEAD requests use M_GET as method number as well. */ switch (r->method_number) { case M_GET: case M_DELETE: case M_PUT: case M_OPTIONS: case M_TRACE: /* * If the request has arguments it might have side-effects and thus * it might be undesirable to resend it to a backend again * automatically. */ if (r->args) { return METHOD_IDEMPOTENT_WITH_ARGS; } return METHOD_IDEMPOTENT; /* Everything else is not considered idempotent. */ default: return METHOD_NON_IDEMPOTENT; } } static apr_off_t get_content_length(request_rec * r) { apr_off_t len = 0; if (r->main == NULL) { const char *clp = apr_table_get(r->headers_in, "Content-Length"); if (clp) { char *errp; if (apr_strtoff(&len, clp, &errp, 10) || *errp || len < 0) { len = 0; /* parse error */ } } } return len; } /* * XXX: AJP Auto Flushing * * When processing CMD_AJP13_SEND_BODY_CHUNK AJP messages we will do a poll * with FLUSH_WAIT milliseconds timeout to determine if more data is currently * available at the backend. If there is no more data available, we flush * the data to the client by adding a flush bucket to the brigade we pass * up the filter chain. * This is only a bandaid to fix the AJP/1.3 protocol shortcoming of not * sending (actually not having defined) a flush message, when the data * should be flushed to the client. As soon as this protocol shortcoming is * fixed this code should be removed. * * For further discussion see PR37100. * http://issues.apache.org/bugzilla/show_bug.cgi?id=37100 */ /* * process the request and write the response. */ static int ap_proxy_ajp_request(apr_pool_t *p, request_rec *r, proxy_conn_rec *conn, conn_rec *origin, proxy_dir_conf *conf, apr_uri_t *uri, char *url, char *server_portstr) { apr_status_t status; int result; apr_bucket *e; apr_bucket_brigade *input_brigade; apr_bucket_brigade *output_brigade; ajp_msg_t *msg; apr_size_t bufsiz = 0; char *buff; char *send_body_chunk_buff; apr_uint16_t size; apr_byte_t conn_reuse = 0; const char *tenc; int havebody = 1; int client_failed = 0; int backend_failed = 0; apr_off_t bb_len; int data_sent = 0; int request_ended = 0; int headers_sent = 0; int rv = OK; apr_int32_t conn_poll_fd; apr_pollfd_t *conn_poll; proxy_server_conf *psf = ap_get_module_config(r->server->module_config, &proxy_module); apr_size_t maxsize = AJP_MSG_BUFFER_SZ; int send_body = 0; apr_off_t content_length = 0; int original_status = r->status; const char *original_status_line = r->status_line; if (psf->io_buffer_size_set) maxsize = psf->io_buffer_size; if (maxsize > AJP_MAX_BUFFER_SZ) maxsize = AJP_MAX_BUFFER_SZ; else if (maxsize < AJP_MSG_BUFFER_SZ) maxsize = AJP_MSG_BUFFER_SZ; maxsize = APR_ALIGN(maxsize, 1024); /* * Send the AJP request to the remote server */ /* send request headers */ status = ajp_send_header(conn->sock, r, maxsize, uri); if (status != APR_SUCCESS) { conn->close = 1; ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(00868) "request failed to %pI (%s)", conn->worker->cp->addr, conn->worker->s->hostname_ex); if (status == AJP_EOVERFLOW) return HTTP_BAD_REQUEST; else if (status == AJP_EBAD_METHOD) { return HTTP_NOT_IMPLEMENTED; } else { /* * This is only non fatal when the method is idempotent. In this * case we can dare to retry it with a different worker if we are * a balancer member. */ if (is_idempotent(r) == METHOD_IDEMPOTENT) { return HTTP_SERVICE_UNAVAILABLE; } return HTTP_INTERNAL_SERVER_ERROR; } } /* allocate an AJP message to store the data of the buckets */ bufsiz = maxsize; status = ajp_alloc_data_msg(r->pool, &buff, &bufsiz, &msg); if (status != APR_SUCCESS) { /* We had a failure: Close connection to backend */ conn->close = 1; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00869) "ajp_alloc_data_msg failed"); return HTTP_INTERNAL_SERVER_ERROR; } /* read the first bloc of data */ input_brigade = apr_brigade_create(p, r->connection->bucket_alloc); tenc = apr_table_get(r->headers_in, "Transfer-Encoding"); if (tenc && (strcasecmp(tenc, "chunked") == 0)) { /* The AJP protocol does not want body data yet */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00870) "request is chunked"); } else { /* Get client provided Content-Length header */ content_length = get_content_length(r); status = ap_get_brigade(r->input_filters, input_brigade, AP_MODE_READBYTES, APR_BLOCK_READ, maxsize - AJP_HEADER_SZ); if (status != APR_SUCCESS) { /* We had a failure: Close connection to backend */ conn->close = 1; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, r, APLOGNO(00871) "ap_get_brigade failed"); apr_brigade_destroy(input_brigade); return ap_map_http_request_error(status, HTTP_BAD_REQUEST); } /* have something */ if (APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(input_brigade))) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00872) "APR_BUCKET_IS_EOS"); } /* Try to send something */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00873) "data to read (max %" APR_SIZE_T_FMT " at %" APR_SIZE_T_FMT ")", bufsiz, msg->pos); status = apr_brigade_flatten(input_brigade, buff, &bufsiz); if (status != APR_SUCCESS) { /* We had a failure: Close connection to backend */ conn->close = 1; apr_brigade_destroy(input_brigade); ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(00874) "apr_brigade_flatten"); return HTTP_INTERNAL_SERVER_ERROR; } apr_brigade_cleanup(input_brigade); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00875) "got %" APR_SIZE_T_FMT " bytes of data", bufsiz); if (bufsiz > 0) { status = ajp_send_data_msg(conn->sock, msg, bufsiz); ajp_msg_log(r, msg, "First ajp_send_data_msg: ajp_ilink_send packet dump"); if (status != APR_SUCCESS) { /* We had a failure: Close connection to backend */ conn->close = 1; apr_brigade_destroy(input_brigade); ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(00876) "send failed to %pI (%s)", conn->worker->cp->addr, conn->worker->s->hostname_ex); /* * It is fatal when we failed to send a (part) of the request * body. */ return HTTP_INTERNAL_SERVER_ERROR; } conn->worker->s->transferred += bufsiz; send_body = 1; } else if (content_length > 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(00877) "read zero bytes, expecting" " %" APR_OFF_T_FMT " bytes", content_length); /* * We can only get here if the client closed the connection * to us without sending the body. * Now the connection is in the wrong state on the backend. * Sending an empty data msg doesn't help either as it does * not move this connection to the correct state on the backend * for later resusage by the next request again. * Close it to clean things up. */ conn->close = 1; apr_brigade_destroy(input_brigade); return HTTP_BAD_REQUEST; } } /* read the response */ conn->data = NULL; status = ajp_read_header(conn->sock, r, maxsize, (ajp_msg_t **)&(conn->data)); if (status != APR_SUCCESS) { /* We had a failure: Close connection to backend */ conn->close = 1; apr_brigade_destroy(input_brigade); ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(00878) "read response failed from %pI (%s)", conn->worker->cp->addr, conn->worker->s->hostname_ex); /* If we had a successful cping/cpong and then a timeout * we assume it is a request that cause a back-end timeout, * but doesn't affect the whole worker. */ if (APR_STATUS_IS_TIMEUP(status) && conn->worker->s->ping_timeout_set) { return HTTP_GATEWAY_TIME_OUT; } /* * This is only non fatal when we have not sent (parts) of a possible * request body so far (we do not store it and thus cannot send it * again) and the method is idempotent. In this case we can dare to * retry it with a different worker if we are a balancer member. */ if (!send_body && (is_idempotent(r) == METHOD_IDEMPOTENT)) { return HTTP_SERVICE_UNAVAILABLE; } return HTTP_INTERNAL_SERVER_ERROR; } /* parse the response */ result = ajp_parse_type(r, conn->data); output_brigade = apr_brigade_create(p, r->connection->bucket_alloc); /* * Prepare apr_pollfd_t struct for possible later check if there is currently * data available from the backend (do not flush response to client) * or not (flush response to client) */ conn_poll = apr_pcalloc(p, sizeof(apr_pollfd_t)); conn_poll->reqevents = APR_POLLIN; conn_poll->desc_type = APR_POLL_SOCKET; conn_poll->desc.s = conn->sock; bufsiz = maxsize; for (;;) { switch (result) { case CMD_AJP13_GET_BODY_CHUNK: if (havebody) { if (APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(input_brigade))) { /* This is the end */ bufsiz = 0; havebody = 0; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, r, APLOGNO(00879) "APR_BUCKET_IS_EOS"); } else { status = ap_get_brigade(r->input_filters, input_brigade, AP_MODE_READBYTES, APR_BLOCK_READ, maxsize - AJP_HEADER_SZ); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, r, APLOGNO(00880) "ap_get_brigade failed"); if (APR_STATUS_IS_TIMEUP(status)) { rv = HTTP_REQUEST_TIME_OUT; } else if (status == AP_FILTER_ERROR) { rv = AP_FILTER_ERROR; } client_failed = 1; break; } bufsiz = maxsize; status = apr_brigade_flatten(input_brigade, buff, &bufsiz); apr_brigade_cleanup(input_brigade); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, r, APLOGNO(00881) "apr_brigade_flatten failed"); rv = HTTP_INTERNAL_SERVER_ERROR; client_failed = 1; break; } } ajp_msg_reset(msg); /* will go in ajp_send_data_msg */ status = ajp_send_data_msg(conn->sock, msg, bufsiz); ajp_msg_log(r, msg, "ajp_send_data_msg after CMD_AJP13_GET_BODY_CHUNK: ajp_ilink_send packet dump"); if (status != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, r, APLOGNO(00882) "ajp_send_data_msg failed"); backend_failed = 1; break; } conn->worker->s->transferred += bufsiz; } else { /* * something is wrong TC asks for more body but we are * already at the end of the body data */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00883) "ap_proxy_ajp_request error read after end"); backend_failed = 1; } break; case CMD_AJP13_SEND_HEADERS: if (headers_sent) { /* Do not send anything to the client. * Backend already send us the headers. */ backend_failed = 1; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00884) "Backend sent headers twice."); break; } /* AJP13_SEND_HEADERS: process them */ status = ajp_parse_header(r, conf, conn->data); if (status != APR_SUCCESS) { backend_failed = 1; } else if ((r->status == 401) && conf->error_override) { const char *buf; const char *wa = "WWW-Authenticate"; if ((buf = apr_table_get(r->headers_out, wa))) { apr_table_set(r->err_headers_out, wa, buf); } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00885) "ap_proxy_ajp_request: origin server " "sent 401 without WWW-Authenticate header"); } } headers_sent = 1; break; case CMD_AJP13_SEND_BODY_CHUNK: /* AJP13_SEND_BODY_CHUNK: piece of data */ status = ajp_parse_data(r, conn->data, &size, &send_body_chunk_buff); if (status == APR_SUCCESS) { /* If we are overriding the errors, we can't put the content * of the page into the brigade. */ if (!conf->error_override || !ap_is_HTTP_ERROR(r->status)) { /* AJP13_SEND_BODY_CHUNK with zero length * is explicit flush message */ if (size == 0) { if (headers_sent) { e = apr_bucket_flush_create(r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(output_brigade, e); } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00886) "Ignoring flush message " "received before headers"); } } else { apr_status_t rv; /* Handle the case where the error document is itself reverse * proxied and was successful. We must maintain any previous * error status so that an underlying error (eg HTTP_NOT_FOUND) * doesn't become an HTTP_OK. */ if (conf->error_override && !ap_is_HTTP_ERROR(r->status) && ap_is_HTTP_ERROR(original_status)) { r->status = original_status; r->status_line = original_status_line; } e = apr_bucket_transient_create(send_body_chunk_buff, size, r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(output_brigade, e); if ((conn->worker->s->flush_packets == flush_on) || ((conn->worker->s->flush_packets == flush_auto) && ((rv = apr_poll(conn_poll, 1, &conn_poll_fd, conn->worker->s->flush_wait)) != APR_SUCCESS) && APR_STATUS_IS_TIMEUP(rv))) { e = apr_bucket_flush_create(r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(output_brigade, e); } apr_brigade_length(output_brigade, 0, &bb_len); if (bb_len != -1) conn->worker->s->read += bb_len; } if (headers_sent) { if (ap_pass_brigade(r->output_filters, output_brigade) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00887) "error processing body.%s", r->connection->aborted ? " Client aborted connection." : ""); client_failed = 1; } data_sent = 1; apr_brigade_cleanup(output_brigade); } } } else { backend_failed = 1; } break; case CMD_AJP13_END_RESPONSE: /* If we are overriding the errors, we must not send anything to * the client, especially as the brigade already contains headers. * So do nothing here, and it will be cleaned up below. */ status = ajp_parse_reuse(r, conn->data, &conn_reuse); if (status != APR_SUCCESS) { backend_failed = 1; } if (!conf->error_override || !ap_is_HTTP_ERROR(r->status)) { e = apr_bucket_eos_create(r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(output_brigade, e); if (ap_pass_brigade(r->output_filters, output_brigade) != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00888) "error processing end"); client_failed = 1; } /* XXX: what about flush here? See mod_jk */ data_sent = 1; } request_ended = 1; break; default: backend_failed = 1; break; } /* * If connection has been aborted by client: Stop working. * Pretend we are done (data_sent) to avoid further processing. */ if (r->connection->aborted) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02821) "client connection aborted"); /* no response yet (or ever), set status for access log */ if (!headers_sent) { r->status = HTTP_BAD_REQUEST; } client_failed = 1; /* return DONE */ data_sent = 1; break; } /* * We either have finished successfully or we failed. * So bail out */ if ((result == CMD_AJP13_END_RESPONSE) || backend_failed || client_failed) break; /* read the response */ status = ajp_read_header(conn->sock, r, maxsize, (ajp_msg_t **)&(conn->data)); if (status != APR_SUCCESS) { backend_failed = 1; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, r, APLOGNO(00889) "ajp_read_header failed"); break; } result = ajp_parse_type(r, conn->data); } apr_brigade_destroy(input_brigade); /* * Clear output_brigade to remove possible buckets that remained there * after an error. */ apr_brigade_cleanup(output_brigade); if (backend_failed || client_failed) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00890) "Processing of request failed backend: %i, client: %i", backend_failed, client_failed); /* We had a failure: Close connection to backend */ conn->close = 1; if (data_sent) { /* Return DONE to avoid error messages being added to the stream */ rv = DONE; } } else if (!request_ended) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00891) "Processing of request didn't terminate cleanly"); /* We had a failure: Close connection to backend */ conn->close = 1; backend_failed = 1; if (data_sent) { /* Return DONE to avoid error messages being added to the stream */ rv = DONE; } } else if (!conn_reuse) { /* Our backend signalled connection close */ conn->close = 1; } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00892) "got response from %pI (%s)", conn->worker->cp->addr, conn->worker->s->hostname_ex); if (conf->error_override && ap_is_HTTP_ERROR(r->status)) { /* clear r->status for override error, otherwise ErrorDocument * thinks that this is a recursive error, and doesn't find the * custom error page */ rv = r->status; r->status = HTTP_OK; /* * prevent proxy_handler() from treating this as an * internal error. */ apr_table_setn(r->notes, "proxy-error-override", "1"); } else { rv = OK; } } if (backend_failed) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(00893) "dialog to %pI (%s) failed", conn->worker->cp->addr, conn->worker->s->hostname_ex); /* * If we already send data, signal a broken backend connection * upwards in the chain. */ if (data_sent) { ap_proxy_backend_broke(r, output_brigade); } else if (!send_body && (is_idempotent(r) == METHOD_IDEMPOTENT)) { /* * This is only non fatal when we have not send (parts) of a possible * request body so far (we do not store it and thus cannot send it * again) and the method is idempotent. In this case we can dare to * retry it with a different worker if we are a balancer member. */ rv = HTTP_SERVICE_UNAVAILABLE; } else { rv = HTTP_INTERNAL_SERVER_ERROR; } } else if (client_failed) { int level = (r->connection->aborted) ? APLOG_DEBUG : APLOG_ERR; ap_log_rerror(APLOG_MARK, level, status, r, APLOGNO(02822) "dialog with client %pI failed", r->connection->client_addr); if (rv == OK) { rv = HTTP_BAD_REQUEST; } } /* * Ensure that we sent an EOS bucket thru the filter chain, if we already * have sent some data. Maybe ap_proxy_backend_broke was called and added * one to the brigade already (no longer making it empty). So we should * not do this in this case. */ if (data_sent && !r->eos_sent && !r->connection->aborted && APR_BRIGADE_EMPTY(output_brigade)) { e = apr_bucket_eos_create(r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(output_brigade, e); } /* If we have added something to the brigade above, send it */ if (!APR_BRIGADE_EMPTY(output_brigade) && ap_pass_brigade(r->output_filters, output_brigade) != APR_SUCCESS) { rv = AP_FILTER_ERROR; } apr_brigade_destroy(output_brigade); if (apr_table_get(r->subprocess_env, "proxy-nokeepalive")) { conn->close = 1; } return rv; } /* * This handles ajp:// URLs */ static int proxy_ajp_handler(request_rec *r, proxy_worker *worker, proxy_server_conf *conf, char *url, const char *proxyname, apr_port_t proxyport) { int status; char server_portstr[32]; conn_rec *origin = NULL; proxy_conn_rec *backend = NULL; const char *scheme = "AJP"; int retry; proxy_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &proxy_module); apr_pool_t *p = r->pool; apr_uri_t *uri; if (strncasecmp(url, "ajp:", 4) != 0) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00894) "declining URL %s", url); return DECLINED; } uri = apr_palloc(p, sizeof(*uri)); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00895) "serving URL %s", url); /* create space for state information */ status = ap_proxy_acquire_connection(scheme, &backend, worker, r->server); if (status != OK) { if (backend) { backend->close = 1; ap_proxy_release_connection(scheme, backend, r->server); } return status; } backend->is_ssl = 0; backend->close = 0; retry = 0; while (retry < 2) { char *locurl = url; /* Step One: Determine Who To Connect To */ status = ap_proxy_determine_connection(p, r, conf, worker, backend, uri, &locurl, proxyname, proxyport, server_portstr, sizeof(server_portstr)); if (status != OK) break; /* Step Two: Make the Connection */ if (ap_proxy_check_connection(scheme, backend, r->server, 0, PROXY_CHECK_CONN_EMPTY) && ap_proxy_connect_backend(scheme, backend, worker, r->server)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00896) "failed to make connection to backend: %s", backend->hostname); status = HTTP_SERVICE_UNAVAILABLE; break; } /* Handle CPING/CPONG */ if (worker->s->ping_timeout_set) { status = ajp_handle_cping_cpong(backend->sock, r, worker->s->ping_timeout); /* * In case the CPING / CPONG failed for the first time we might be * just out of luck and got a faulty backend connection, but the * backend might be healthy nevertheless. So ensure that the backend * TCP connection gets closed and try it once again. */ if (status != APR_SUCCESS) { backend->close = 1; ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(00897) "cping/cpong failed to %pI (%s)", worker->cp->addr, worker->s->hostname_ex); status = HTTP_SERVICE_UNAVAILABLE; retry++; continue; } } /* Step Three: Process the Request */ status = ap_proxy_ajp_request(p, r, backend, origin, dconf, uri, locurl, server_portstr); break; } /* Do not close the socket */ ap_proxy_release_connection(scheme, backend, r->server); return status; } static void ap_proxy_http_register_hook(apr_pool_t *p) { proxy_hook_scheme_handler(proxy_ajp_handler, NULL, NULL, APR_HOOK_FIRST); proxy_hook_canon_handler(proxy_ajp_canon, NULL, NULL, APR_HOOK_FIRST); } AP_DECLARE_MODULE(proxy_ajp) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ NULL, /* command apr_table_t */ ap_proxy_http_register_hook /* register hooks */ }; httpd-2.4.41/modules/proxy/mod_proxy_express.dsp0000644000000000000500000001161511611132050020360 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_proxy_express" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_proxy_express - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_proxy_express.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_express.mak" CFG="mod_proxy_express - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_express - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_express - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_proxy_express - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_proxy_express_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_proxy_express.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_express.so" /d LONG_NAME="proxy_balancer_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_proxy_express.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_express.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_proxy_express.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_express.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_proxy_express.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_proxy_express - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_proxy_express_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_proxy_express.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_express.so" /d LONG_NAME="proxy_balancer_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_express.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_express.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_express.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_express.so # Begin Special Build Tool TargetPath=.\Debug\mod_proxy_express.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_proxy_express - Win32 Release" # Name "mod_proxy_express - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_proxy_express.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=.\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/.indent.pro0000644000000000000500000000140110150161574016142 0ustar rootsrc-i4 -npsl -di0 -br -nce -d0 -cli0 -npcs -nfc1 -TBUFF -TFILE -TTRANS -TUINT4 -T_trans -Tallow_options_t -Tapache_sfio -Tarray_header -Tbool_int -Tapr_bucket_brigade -Tapr_pool_t -Tap_filter_t -Tbuf_area -Tbuff_struct -Tbuffy -Tcmd_how -Tcmd_parms -Tcommand_rec -Tcommand_struct -Tconn_rec -Tcore_dir_config -Tcore_server_config -Tdir_maker_func -Tevent -Tglobals_s -Thandler_func -Thandler_rec -Tjoblist_s -Tlisten_rec -Tmerger_func -Tmode_t -Tmodule -Tmodule_struct -Tmutex -Tn_long -Tother_child_rec -Toverrides_t -Tparent_score -Tpid_t -Tpiped_log -Tpool -Trequest_rec -Trequire_line -Trlim_t -Tscoreboard -Tsemaphore -Tserver_addr_rec -Tserver_rec -Tserver_rec_chain -Tshort_score -Ttable -Ttable_entry -Tthread -Tu_wide_int -Tvtime_t -Twide_int -Tproxy_server_conf httpd-2.4.41/modules/proxy/mod_proxy_wstunnel.mak0000644000000000000500000002641512701473373020555 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_proxy_wstunnel.dsp !IF "$(CFG)" == "" CFG=mod_proxy_wstunnel - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_proxy_wstunnel - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_proxy_wstunnel - Win32 Release" && "$(CFG)" != "mod_proxy_wstunnel - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_wstunnel.mak" CFG="mod_proxy_wstunnel - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_wstunnel - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_wstunnel - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_proxy_wstunnel - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_wstunnel.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_proxy_wstunnel.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_wstunnel.obj" -@erase "$(INTDIR)\mod_proxy_wstunnel.res" -@erase "$(INTDIR)\mod_proxy_wstunnel_src.idb" -@erase "$(INTDIR)\mod_proxy_wstunnel_src.pdb" -@erase "$(OUTDIR)\mod_proxy_wstunnel.exp" -@erase "$(OUTDIR)\mod_proxy_wstunnel.lib" -@erase "$(OUTDIR)\mod_proxy_wstunnel.pdb" -@erase "$(OUTDIR)\mod_proxy_wstunnel.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_wstunnel_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_wstunnel.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_wstunnel.so" /d LONG_NAME="proxy_wstunnel_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_wstunnel.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_wstunnel.pdb" /debug /out:"$(OUTDIR)\mod_proxy_wstunnel.so" /implib:"$(OUTDIR)\mod_proxy_wstunnel.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_wstunnel.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_proxy_wstunnel.obj" \ "$(INTDIR)\mod_proxy_wstunnel.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_wstunnel.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_proxy_wstunnel.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_wstunnel.so" if exist .\Release\mod_proxy_wstunnel.so.manifest mt.exe -manifest .\Release\mod_proxy_wstunnel.so.manifest -outputresource:.\Release\mod_proxy_wstunnel.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_proxy_wstunnel - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_wstunnel.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_proxy_wstunnel.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_wstunnel.obj" -@erase "$(INTDIR)\mod_proxy_wstunnel.res" -@erase "$(INTDIR)\mod_proxy_wstunnel_src.idb" -@erase "$(INTDIR)\mod_proxy_wstunnel_src.pdb" -@erase "$(OUTDIR)\mod_proxy_wstunnel.exp" -@erase "$(OUTDIR)\mod_proxy_wstunnel.lib" -@erase "$(OUTDIR)\mod_proxy_wstunnel.pdb" -@erase "$(OUTDIR)\mod_proxy_wstunnel.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_wstunnel_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_wstunnel.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_wstunnel.so" /d LONG_NAME="proxy_wstunnel_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_wstunnel.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_wstunnel.pdb" /debug /out:"$(OUTDIR)\mod_proxy_wstunnel.so" /implib:"$(OUTDIR)\mod_proxy_wstunnel.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_wstunnel.so LINK32_OBJS= \ "$(INTDIR)\mod_proxy_wstunnel.obj" \ "$(INTDIR)\mod_proxy_wstunnel.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_wstunnel.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_proxy_wstunnel.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_wstunnel.so" if exist .\Debug\mod_proxy_wstunnel.so.manifest mt.exe -manifest .\Debug\mod_proxy_wstunnel.so.manifest -outputresource:.\Debug\mod_proxy_wstunnel.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_proxy_wstunnel.dep") !INCLUDE "mod_proxy_wstunnel.dep" !ELSE !MESSAGE Warning: cannot find "mod_proxy_wstunnel.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_proxy_wstunnel - Win32 Release" || "$(CFG)" == "mod_proxy_wstunnel - Win32 Debug" SOURCE=.\mod_proxy_wstunnel.c "$(INTDIR)\mod_proxy_wstunnel.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_proxy_wstunnel - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_wstunnel - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_wstunnel - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_wstunnel - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_wstunnel - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_wstunnel - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_wstunnel - Win32 Release" "mod_proxy - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd "." "mod_proxy - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_proxy_wstunnel - Win32 Debug" "mod_proxy - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd "." "mod_proxy - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_proxy_wstunnel - Win32 Release" "$(INTDIR)\mod_proxy_wstunnel.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_wstunnel.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_proxy_wstunnel.so" /d LONG_NAME="proxy_wstunnel_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_proxy_wstunnel - Win32 Debug" "$(INTDIR)\mod_proxy_wstunnel.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_wstunnel.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_proxy_wstunnel.so" /d LONG_NAME="proxy_wstunnel_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/mod_proxy_http.mak0000644000000000000500000002564512701473373017661 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_proxy_http.dsp !IF "$(CFG)" == "" CFG=mod_proxy_http - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_proxy_http - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_proxy_http - Win32 Release" && "$(CFG)" != "mod_proxy_http - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_http.mak" CFG="mod_proxy_http - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_http - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_http - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_proxy_http - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_http.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_proxy_http.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_http.obj" -@erase "$(INTDIR)\mod_proxy_http.res" -@erase "$(INTDIR)\mod_proxy_http_src.idb" -@erase "$(INTDIR)\mod_proxy_http_src.pdb" -@erase "$(OUTDIR)\mod_proxy_http.exp" -@erase "$(OUTDIR)\mod_proxy_http.lib" -@erase "$(OUTDIR)\mod_proxy_http.pdb" -@erase "$(OUTDIR)\mod_proxy_http.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_http_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_http.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_http.so" /d LONG_NAME="proxy_http_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_http.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_http.pdb" /debug /out:"$(OUTDIR)\mod_proxy_http.so" /implib:"$(OUTDIR)\mod_proxy_http.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_http.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_proxy_http.obj" \ "$(INTDIR)\mod_proxy_http.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_http.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_proxy_http.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_http.so" if exist .\Release\mod_proxy_http.so.manifest mt.exe -manifest .\Release\mod_proxy_http.so.manifest -outputresource:.\Release\mod_proxy_http.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_proxy_http - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_http.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_proxy_http.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_http.obj" -@erase "$(INTDIR)\mod_proxy_http.res" -@erase "$(INTDIR)\mod_proxy_http_src.idb" -@erase "$(INTDIR)\mod_proxy_http_src.pdb" -@erase "$(OUTDIR)\mod_proxy_http.exp" -@erase "$(OUTDIR)\mod_proxy_http.lib" -@erase "$(OUTDIR)\mod_proxy_http.pdb" -@erase "$(OUTDIR)\mod_proxy_http.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_http_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_http.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_http.so" /d LONG_NAME="proxy_http_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_http.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_http.pdb" /debug /out:"$(OUTDIR)\mod_proxy_http.so" /implib:"$(OUTDIR)\mod_proxy_http.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_http.so LINK32_OBJS= \ "$(INTDIR)\mod_proxy_http.obj" \ "$(INTDIR)\mod_proxy_http.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_http.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_proxy_http.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_http.so" if exist .\Debug\mod_proxy_http.so.manifest mt.exe -manifest .\Debug\mod_proxy_http.so.manifest -outputresource:.\Debug\mod_proxy_http.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_proxy_http.dep") !INCLUDE "mod_proxy_http.dep" !ELSE !MESSAGE Warning: cannot find "mod_proxy_http.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_proxy_http - Win32 Release" || "$(CFG)" == "mod_proxy_http - Win32 Debug" SOURCE=.\mod_proxy_http.c "$(INTDIR)\mod_proxy_http.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_proxy_http - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_http - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_http - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_http - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_http - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_http - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_http - Win32 Release" "mod_proxy - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd "." "mod_proxy - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_proxy_http - Win32 Debug" "mod_proxy - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd "." "mod_proxy - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_proxy_http - Win32 Release" "$(INTDIR)\mod_proxy_http.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_http.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_proxy_http.so" /d LONG_NAME="proxy_http_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_proxy_http - Win32 Debug" "$(INTDIR)\mod_proxy_http.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_http.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_proxy_http.so" /d LONG_NAME="proxy_http_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/mod_proxy_hcheck.dep0000644000000000000500000000023213017652517020110 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_proxy_hcheck.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/mod_proxy_fcgi.c0000644000000000000500000012226513246511235017253 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_proxy.h" #include "util_fcgi.h" #include "util_script.h" #include "ap_expr.h" module AP_MODULE_DECLARE_DATA proxy_fcgi_module; typedef struct { ap_expr_info_t *cond; ap_expr_info_t *subst; const char *envname; } sei_entry; typedef struct { int need_dirwalk; } fcgi_req_config_t; /* We will assume FPM, but still differentiate */ typedef enum { BACKEND_DEFAULT_UNKNOWN = 0, BACKEND_FPM, BACKEND_GENERIC, } fcgi_backend_t; #define FCGI_MAY_BE_FPM(dconf) \ (dconf && \ ((dconf->backend_type == BACKEND_DEFAULT_UNKNOWN) || \ (dconf->backend_type == BACKEND_FPM))) typedef struct { fcgi_backend_t backend_type; apr_array_header_t *env_fixups; } fcgi_dirconf_t; /* * Canonicalise http-like URLs. * scheme is the scheme for the URL * url is the URL starting with the first '/' * def_port is the default port for this scheme. */ static int proxy_fcgi_canon(request_rec *r, char *url) { char *host, sport[7]; const char *err; char *path; apr_port_t port, def_port; fcgi_req_config_t *rconf = NULL; const char *pathinfo_type = NULL; if (ap_cstr_casecmpn(url, "fcgi:", 5) == 0) { url += 5; } else { return DECLINED; } port = def_port = ap_proxy_port_of_scheme("fcgi"); ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "canonicalising URL %s", url); err = ap_proxy_canon_netloc(r->pool, &url, NULL, NULL, &host, &port); if (err) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01059) "error parsing URL %s: %s", url, err); return HTTP_BAD_REQUEST; } if (port != def_port) apr_snprintf(sport, sizeof(sport), ":%d", port); else sport[0] = '\0'; if (ap_strchr_c(host, ':')) { /* if literal IPv6 address */ host = apr_pstrcat(r->pool, "[", host, "]", NULL); } if (apr_table_get(r->notes, "proxy-nocanon")) { path = url; /* this is the raw path */ } else { path = ap_proxy_canonenc(r->pool, url, strlen(url), enc_path, 0, r->proxyreq); } if (path == NULL) return HTTP_BAD_REQUEST; r->filename = apr_pstrcat(r->pool, "proxy:fcgi://", host, sport, "/", path, NULL); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01060) "set r->filename to %s", r->filename); rconf = ap_get_module_config(r->request_config, &proxy_fcgi_module); if (rconf == NULL) { rconf = apr_pcalloc(r->pool, sizeof(fcgi_req_config_t)); ap_set_module_config(r->request_config, &proxy_fcgi_module, rconf); } if (NULL != (pathinfo_type = apr_table_get(r->subprocess_env, "proxy-fcgi-pathinfo"))) { /* It has to be on disk for this to work */ if (!strcasecmp(pathinfo_type, "full")) { rconf->need_dirwalk = 1; ap_unescape_url_keep2f(path, 0); } else if (!strcasecmp(pathinfo_type, "first-dot")) { char *split = ap_strchr(path, '.'); if (split) { char *slash = ap_strchr(split, '/'); if (slash) { r->path_info = apr_pstrdup(r->pool, slash); ap_unescape_url_keep2f(r->path_info, 0); *slash = '\0'; /* truncate path */ } } } else if (!strcasecmp(pathinfo_type, "last-dot")) { char *split = ap_strrchr(path, '.'); if (split) { char *slash = ap_strchr(split, '/'); if (slash) { r->path_info = apr_pstrdup(r->pool, slash); ap_unescape_url_keep2f(r->path_info, 0); *slash = '\0'; /* truncate path */ } } } else { /* before proxy-fcgi-pathinfo had multi-values. This requires the * the FCGI server to fixup PATH_INFO because it's the entire path */ r->path_info = apr_pstrcat(r->pool, "/", path, NULL); if (!strcasecmp(pathinfo_type, "unescape")) { ap_unescape_url_keep2f(r->path_info, 0); } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01061) "set r->path_info to %s", r->path_info); } } return OK; } /* ProxyFCGISetEnvIf "reqenv('PATH_INFO') =~ m#/foo(\d+)\.php$#" COVENV1 "$1" ProxyFCGISetEnvIf "reqenv('PATH_INFO') =~ m#/foo(\d+)\.php$#" PATH_INFO "/foo.php" ProxyFCGISetEnvIf "reqenv('PATH_TRANSLATED') =~ m#(/.*foo)(\d+)(.*)#" PATH_TRANSLATED "$1$3" */ static void fix_cgivars(request_rec *r, fcgi_dirconf_t *dconf) { sei_entry *entries; const char *err, *src; int i = 0, rc = 0; ap_regmatch_t regm[AP_MAX_REG_MATCH]; entries = (sei_entry *) dconf->env_fixups->elts; for (i = 0; i < dconf->env_fixups->nelts; i++) { sei_entry *entry = &entries[i]; if (entry->envname[0] == '!') { apr_table_unset(r->subprocess_env, entry->envname+1); } else if (0 < (rc = ap_expr_exec_re(r, entry->cond, AP_MAX_REG_MATCH, regm, &src, &err))) { const char *val = ap_expr_str_exec_re(r, entry->subst, AP_MAX_REG_MATCH, regm, &src, &err); if (err) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(03514) "Error evaluating expression for replacement of %s: '%s'", entry->envname, err); continue; } if (APLOGrtrace4(r)) { const char *oldval = apr_table_get(r->subprocess_env, entry->envname); ap_log_rerror(APLOG_MARK, APLOG_TRACE4, 0, r, "fix_cgivars: override %s from '%s' to '%s'", entry->envname, oldval, val); } apr_table_setn(r->subprocess_env, entry->envname, val); } else { ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, r, "fix_cgivars: Condition returned %d", rc); } } } /* Wrapper for apr_socket_sendv that handles updating the worker stats. */ static apr_status_t send_data(proxy_conn_rec *conn, struct iovec *vec, int nvec, apr_size_t *len) { apr_status_t rv = APR_SUCCESS; apr_size_t written = 0, to_write = 0; int i, offset; apr_socket_t *s = conn->sock; for (i = 0; i < nvec; i++) { to_write += vec[i].iov_len; } offset = 0; while (to_write) { apr_size_t n = 0; rv = apr_socket_sendv(s, vec + offset, nvec - offset, &n); if (rv != APR_SUCCESS) { break; } if (n > 0) { written += n; if (written >= to_write) break; /* short circuit out */ for (i = offset; i < nvec; ) { if (n >= vec[i].iov_len) { offset++; n -= vec[i++].iov_len; } else { vec[i].iov_len -= n; vec[i].iov_base = (char *) vec[i].iov_base + n; break; } } } } conn->worker->s->transferred += written; *len = written; return rv; } /* Wrapper for apr_socket_recv that handles updating the worker stats. */ static apr_status_t get_data(proxy_conn_rec *conn, char *buffer, apr_size_t *buflen) { apr_status_t rv = apr_socket_recv(conn->sock, buffer, buflen); if (rv == APR_SUCCESS) { conn->worker->s->read += *buflen; } return rv; } static apr_status_t get_data_full(proxy_conn_rec *conn, char *buffer, apr_size_t buflen) { apr_size_t readlen; apr_size_t cumulative_len = 0; apr_status_t rv; do { readlen = buflen - cumulative_len; rv = get_data(conn, buffer + cumulative_len, &readlen); if (rv != APR_SUCCESS) { return rv; } cumulative_len += readlen; } while (cumulative_len < buflen); return APR_SUCCESS; } static apr_status_t send_begin_request(proxy_conn_rec *conn, apr_uint16_t request_id) { struct iovec vec[2]; ap_fcgi_header header; unsigned char farray[AP_FCGI_HEADER_LEN]; ap_fcgi_begin_request_body brb; unsigned char abrb[AP_FCGI_HEADER_LEN]; apr_size_t len; ap_fcgi_fill_in_header(&header, AP_FCGI_BEGIN_REQUEST, request_id, sizeof(abrb), 0); ap_fcgi_fill_in_request_body(&brb, AP_FCGI_RESPONDER, ap_proxy_connection_reusable(conn) ? AP_FCGI_KEEP_CONN : 0); ap_fcgi_header_to_array(&header, farray); ap_fcgi_begin_request_body_to_array(&brb, abrb); vec[0].iov_base = (void *)farray; vec[0].iov_len = sizeof(farray); vec[1].iov_base = (void *)abrb; vec[1].iov_len = sizeof(abrb); return send_data(conn, vec, 2, &len); } static apr_status_t send_environment(proxy_conn_rec *conn, request_rec *r, apr_pool_t *temp_pool, apr_uint16_t request_id) { const apr_array_header_t *envarr; const apr_table_entry_t *elts; struct iovec vec[2]; ap_fcgi_header header; unsigned char farray[AP_FCGI_HEADER_LEN]; char *body; apr_status_t rv; apr_size_t avail_len, len, required_len; int next_elem, starting_elem; fcgi_req_config_t *rconf = ap_get_module_config(r->request_config, &proxy_fcgi_module); fcgi_dirconf_t *dconf = ap_get_module_config(r->per_dir_config, &proxy_fcgi_module); if (rconf) { if (rconf->need_dirwalk) { ap_directory_walk(r); } } /* Strip proxy: prefixes */ if (r->filename) { char *newfname = NULL; if (!strncmp(r->filename, "proxy:balancer://", 17)) { newfname = apr_pstrdup(r->pool, r->filename+17); } if (!FCGI_MAY_BE_FPM(dconf)) { if (!strncmp(r->filename, "proxy:fcgi://", 13)) { /* If we strip this under FPM, and any internal redirect occurs * on PATH_INFO, FPM may use PATH_TRANSLATED instead of * SCRIPT_FILENAME (a la mod_fastcgi + Action). */ newfname = apr_pstrdup(r->pool, r->filename+13); } /* Query string in environment only */ if (newfname && r->args && *r->args) { char *qs = strrchr(newfname, '?'); if (qs && !strcmp(qs+1, r->args)) { *qs = '\0'; } } } if (newfname) { newfname = ap_strchr(newfname, '/'); r->filename = newfname; } } ap_add_common_vars(r); ap_add_cgi_vars(r); /* XXX are there any FastCGI specific env vars we need to send? */ /* Give admins final option to fine-tune env vars */ fix_cgivars(r, dconf); /* XXX mod_cgi/mod_cgid use ap_create_environment here, which fills in * the TZ value specially. We could use that, but it would mean * parsing the key/value pairs back OUT of the allocated env array, * not to mention allocating a totally useless array in the first * place, which would suck. */ envarr = apr_table_elts(r->subprocess_env); elts = (const apr_table_entry_t *) envarr->elts; if (APLOGrtrace8(r)) { int i; for (i = 0; i < envarr->nelts; ++i) { ap_log_rerror(APLOG_MARK, APLOG_TRACE8, 0, r, APLOGNO(01062) "sending env var '%s' value '%s'", elts[i].key, elts[i].val); } } /* Send envvars over in as many FastCGI records as it takes, */ next_elem = 0; /* starting with the first one */ avail_len = 16 * 1024; /* our limit per record, which could have been up * to AP_FCGI_MAX_CONTENT_LEN */ while (next_elem < envarr->nelts) { starting_elem = next_elem; required_len = ap_fcgi_encoded_env_len(r->subprocess_env, avail_len, &next_elem); if (!required_len) { if (next_elem < envarr->nelts) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02536) "couldn't encode envvar '%s' in %" APR_SIZE_T_FMT " bytes", elts[next_elem].key, avail_len); /* skip this envvar and continue */ ++next_elem; continue; } /* only an unused element at the end of the array */ break; } body = apr_palloc(temp_pool, required_len); rv = ap_fcgi_encode_env(r, r->subprocess_env, body, required_len, &starting_elem); /* we pre-compute, so we can't run out of space */ ap_assert(rv == APR_SUCCESS); /* compute and encode must be in sync */ ap_assert(starting_elem == next_elem); ap_fcgi_fill_in_header(&header, AP_FCGI_PARAMS, request_id, (apr_uint16_t)required_len, 0); ap_fcgi_header_to_array(&header, farray); vec[0].iov_base = (void *)farray; vec[0].iov_len = sizeof(farray); vec[1].iov_base = body; vec[1].iov_len = required_len; rv = send_data(conn, vec, 2, &len); apr_pool_clear(temp_pool); if (rv) { return rv; } } /* Envvars sent, so say we're done */ ap_fcgi_fill_in_header(&header, AP_FCGI_PARAMS, request_id, 0, 0); ap_fcgi_header_to_array(&header, farray); vec[0].iov_base = (void *)farray; vec[0].iov_len = sizeof(farray); return send_data(conn, vec, 1, &len); } enum { HDR_STATE_READING_HEADERS, HDR_STATE_GOT_CR, HDR_STATE_GOT_CRLF, HDR_STATE_GOT_CRLFCR, HDR_STATE_GOT_LF, HDR_STATE_DONE_WITH_HEADERS }; /* Try to find the end of the script headers in the response from the back * end fastcgi server. STATE holds the current header parsing state for this * request. * * Returns 0 if it can't find the end of the headers, and 1 if it found the * end of the headers. */ static int handle_headers(request_rec *r, int *state, const char *readbuf, apr_size_t readlen) { const char *itr = readbuf; while (readlen--) { if (*itr == '\r') { switch (*state) { case HDR_STATE_GOT_CRLF: *state = HDR_STATE_GOT_CRLFCR; break; default: *state = HDR_STATE_GOT_CR; break; } } else if (*itr == '\n') { switch (*state) { case HDR_STATE_GOT_LF: *state = HDR_STATE_DONE_WITH_HEADERS; break; case HDR_STATE_GOT_CR: *state = HDR_STATE_GOT_CRLF; break; case HDR_STATE_GOT_CRLFCR: *state = HDR_STATE_DONE_WITH_HEADERS; break; default: *state = HDR_STATE_GOT_LF; break; } } else { *state = HDR_STATE_READING_HEADERS; } if (*state == HDR_STATE_DONE_WITH_HEADERS) break; ++itr; } if (*state == HDR_STATE_DONE_WITH_HEADERS) { return 1; } return 0; } static apr_status_t dispatch(proxy_conn_rec *conn, proxy_dir_conf *conf, request_rec *r, apr_pool_t *setaside_pool, apr_uint16_t request_id, const char **err, int *bad_request, int *has_responded) { apr_bucket_brigade *ib, *ob; int seen_end_of_headers = 0, done = 0, ignore_body = 0; apr_status_t rv = APR_SUCCESS; int script_error_status = HTTP_OK; conn_rec *c = r->connection; struct iovec vec[2]; ap_fcgi_header header; unsigned char farray[AP_FCGI_HEADER_LEN]; apr_pollfd_t pfd; apr_pollfd_t *flushpoll = NULL; apr_int32_t flushpoll_fd; int header_state = HDR_STATE_READING_HEADERS; char stack_iobuf[AP_IOBUFSIZE]; apr_size_t iobuf_size = AP_IOBUFSIZE; char *iobuf = stack_iobuf; *err = NULL; if (conn->worker->s->io_buffer_size_set) { iobuf_size = conn->worker->s->io_buffer_size; iobuf = apr_palloc(r->pool, iobuf_size); } pfd.desc_type = APR_POLL_SOCKET; pfd.desc.s = conn->sock; pfd.p = r->pool; pfd.reqevents = APR_POLLIN | APR_POLLOUT; if (conn->worker->s->flush_packets == flush_auto) { flushpoll = apr_pcalloc(r->pool, sizeof(apr_pollfd_t)); flushpoll->reqevents = APR_POLLIN; flushpoll->desc_type = APR_POLL_SOCKET; flushpoll->desc.s = conn->sock; } ib = apr_brigade_create(r->pool, c->bucket_alloc); ob = apr_brigade_create(r->pool, c->bucket_alloc); while (! done) { apr_interval_time_t timeout; apr_size_t len; int n; /* We need SOME kind of timeout here, or virtually anything will * cause timeout errors. */ apr_socket_timeout_get(conn->sock, &timeout); rv = apr_poll(&pfd, 1, &n, timeout); if (rv != APR_SUCCESS) { if (APR_STATUS_IS_EINTR(rv)) { continue; } *err = "polling"; break; } if (pfd.rtnevents & APR_POLLOUT) { apr_size_t to_send, writebuflen; int last_stdin = 0; char *iobuf_cursor; rv = ap_get_brigade(r->input_filters, ib, AP_MODE_READBYTES, APR_BLOCK_READ, iobuf_size); if (rv != APR_SUCCESS) { *err = "reading input brigade"; *bad_request = 1; break; } if (APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(ib))) { last_stdin = 1; } writebuflen = iobuf_size; rv = apr_brigade_flatten(ib, iobuf, &writebuflen); apr_brigade_cleanup(ib); if (rv != APR_SUCCESS) { *err = "flattening brigade"; break; } to_send = writebuflen; iobuf_cursor = iobuf; while (to_send > 0) { int nvec = 0; apr_size_t write_this_time; write_this_time = to_send < AP_FCGI_MAX_CONTENT_LEN ? to_send : AP_FCGI_MAX_CONTENT_LEN; ap_fcgi_fill_in_header(&header, AP_FCGI_STDIN, request_id, (apr_uint16_t)write_this_time, 0); ap_fcgi_header_to_array(&header, farray); vec[nvec].iov_base = (void *)farray; vec[nvec].iov_len = sizeof(farray); ++nvec; if (writebuflen) { vec[nvec].iov_base = iobuf_cursor; vec[nvec].iov_len = write_this_time; ++nvec; } rv = send_data(conn, vec, nvec, &len); if (rv != APR_SUCCESS) { *err = "sending stdin"; break; } to_send -= write_this_time; iobuf_cursor += write_this_time; } if (rv != APR_SUCCESS) { break; } if (last_stdin) { pfd.reqevents = APR_POLLIN; /* Done with input data */ /* signal EOF (empty FCGI_STDIN) */ ap_fcgi_fill_in_header(&header, AP_FCGI_STDIN, request_id, 0, 0); ap_fcgi_header_to_array(&header, farray); vec[0].iov_base = (void *)farray; vec[0].iov_len = sizeof(farray); rv = send_data(conn, vec, 1, &len); if (rv != APR_SUCCESS) { *err = "sending empty stdin"; break; } } } if (pfd.rtnevents & APR_POLLIN) { apr_size_t readbuflen; apr_uint16_t clen, rid; apr_bucket *b; unsigned char plen; unsigned char type, version; int mayflush = 0; /* First, we grab the header... */ rv = get_data_full(conn, (char *) farray, AP_FCGI_HEADER_LEN); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01067) "Failed to read FastCGI header"); break; } ap_log_rdata(APLOG_MARK, APLOG_TRACE8, r, "FastCGI header", farray, AP_FCGI_HEADER_LEN, 0); ap_fcgi_header_fields_from_array(&version, &type, &rid, &clen, &plen, farray); if (version != AP_FCGI_VERSION_1) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01068) "Got bogus version %d", (int)version); rv = APR_EINVAL; break; } if (rid != request_id) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01069) "Got bogus rid %d, expected %d", rid, request_id); rv = APR_EINVAL; break; } recv_again: if (clen > iobuf_size) { readbuflen = iobuf_size; } else { readbuflen = clen; } /* Now get the actual data. Yes it sucks to do this in a second * recv call, this will eventually change when we move to real * nonblocking recv calls. */ if (readbuflen != 0) { rv = get_data(conn, iobuf, &readbuflen); if (rv != APR_SUCCESS) { *err = "reading response body"; break; } } switch (type) { case AP_FCGI_STDOUT: if (clen != 0) { b = apr_bucket_transient_create(iobuf, readbuflen, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ob, b); if (! seen_end_of_headers) { int st = handle_headers(r, &header_state, iobuf, readbuflen); if (st == 1) { int status; seen_end_of_headers = 1; status = ap_scan_script_header_err_brigade_ex(r, ob, NULL, APLOG_MODULE_INDEX); /* suck in all the rest */ if (status != OK) { apr_bucket *tmp_b; apr_brigade_cleanup(ob); tmp_b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ob, tmp_b); *has_responded = 1; r->status = status; rv = ap_pass_brigade(r->output_filters, ob); if (rv != APR_SUCCESS) { *err = "passing headers brigade to output filters"; break; } else if (status == HTTP_NOT_MODIFIED || status == HTTP_PRECONDITION_FAILED) { /* Special 'status' cases handled: * 1) HTTP 304 response MUST NOT contain * a message-body, ignore it. * 2) HTTP 412 response. * The break is not added since there might * be more bytes to read from the FCGI * connection. Even if the message-body is * ignored (and the EOS bucket has already * been sent) we want to avoid subsequent * bogus reads. */ ignore_body = 1; } else { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01070) "Error parsing script headers"); rv = APR_EINVAL; break; } } if (conf->error_override && ap_is_HTTP_ERROR(r->status) && ap_is_initial_req(r)) { /* * set script_error_status to discard * everything after the headers */ script_error_status = r->status; /* * prevent ap_die() from treating this as a * recursive error, initially: */ r->status = HTTP_OK; } if (script_error_status == HTTP_OK && !APR_BRIGADE_EMPTY(ob) && !ignore_body) { /* Send the part of the body that we read while * reading the headers. */ *has_responded = 1; rv = ap_pass_brigade(r->output_filters, ob); if (rv != APR_SUCCESS) { *err = "passing brigade to output filters"; break; } mayflush = 1; } apr_brigade_cleanup(ob); apr_pool_clear(setaside_pool); } else { /* We're still looking for the end of the * headers, so this part of the data will need * to persist. */ apr_bucket_setaside(b, setaside_pool); } } else { /* we've already passed along the headers, so now pass * through the content. we could simply continue to * setaside the content and not pass until we see the * 0 content-length (below, where we append the EOS), * but that could be a huge amount of data; so we pass * along smaller chunks */ if (script_error_status == HTTP_OK && !ignore_body) { *has_responded = 1; rv = ap_pass_brigade(r->output_filters, ob); if (rv != APR_SUCCESS) { *err = "passing brigade to output filters"; break; } mayflush = 1; } apr_brigade_cleanup(ob); } /* If we didn't read all the data, go back and get the * rest of it. */ if (clen > readbuflen) { clen -= readbuflen; goto recv_again; } } else { /* XXX what if we haven't seen end of the headers yet? */ if (script_error_status == HTTP_OK) { b = apr_bucket_eos_create(c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ob, b); *has_responded = 1; rv = ap_pass_brigade(r->output_filters, ob); if (rv != APR_SUCCESS) { *err = "passing brigade to output filters"; break; } } /* XXX Why don't we cleanup here? (logic from AJP) */ } break; case AP_FCGI_STDERR: /* TODO: Should probably clean up this logging a bit... */ if (clen) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01071) "Got error '%.*s'", (int)readbuflen, iobuf); } if (clen > readbuflen) { clen -= readbuflen; goto recv_again; } break; case AP_FCGI_END_REQUEST: done = 1; break; default: ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01072) "Got bogus record %d", type); break; } /* Leave on above switch's inner error. */ if (rv != APR_SUCCESS) { break; } if (plen) { rv = get_data_full(conn, iobuf, plen); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02537) "Error occurred reading padding"); break; } } if (mayflush && ((conn->worker->s->flush_packets == flush_on) || ((conn->worker->s->flush_packets == flush_auto) && (apr_poll(flushpoll, 1, &flushpoll_fd, conn->worker->s->flush_wait) == APR_TIMEUP)))) { apr_bucket* flush_b = apr_bucket_flush_create(r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(ob, flush_b); rv = ap_pass_brigade(r->output_filters, ob); if (rv != APR_SUCCESS) { *err = "passing headers brigade to output filters"; break; } mayflush = 0; } } } apr_brigade_destroy(ib); apr_brigade_destroy(ob); if (script_error_status != HTTP_OK) { ap_die(script_error_status, r); /* send ErrorDocument */ *has_responded = 1; } return rv; } /* * process the request and write the response. */ static int fcgi_do_request(apr_pool_t *p, request_rec *r, proxy_conn_rec *conn, conn_rec *origin, proxy_dir_conf *conf, apr_uri_t *uri, char *url, char *server_portstr) { /* Request IDs are arbitrary numbers that we assign to a * single request. This would allow multiplex/pipelining of * multiple requests to the same FastCGI connection, but * we don't support that, and always use a value of '1' to * keep things simple. */ apr_uint16_t request_id = 1; apr_status_t rv; apr_pool_t *temp_pool; const char *err; int bad_request = 0, has_responded = 0; /* Step 1: Send AP_FCGI_BEGIN_REQUEST */ rv = send_begin_request(conn, request_id); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01073) "Failed Writing Request to %s:", server_portstr); conn->close = 1; return HTTP_SERVICE_UNAVAILABLE; } apr_pool_create(&temp_pool, r->pool); /* Step 2: Send Environment via FCGI_PARAMS */ rv = send_environment(conn, r, temp_pool, request_id); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01074) "Failed writing Environment to %s:", server_portstr); conn->close = 1; return HTTP_SERVICE_UNAVAILABLE; } /* Step 3: Read records from the back end server and handle them. */ rv = dispatch(conn, conf, r, temp_pool, request_id, &err, &bad_request, &has_responded); if (rv != APR_SUCCESS) { /* If the client aborted the connection during retrieval or (partially) * sending the response, don't return a HTTP_SERVICE_UNAVAILABLE, since * this is not a backend problem. */ if (r->connection->aborted) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, rv, r, "The client aborted the connection."); conn->close = 1; return OK; } ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01075) "Error dispatching request to %s: %s%s%s", server_portstr, err ? "(" : "", err ? err : "", err ? ")" : ""); conn->close = 1; if (has_responded) { return AP_FILTER_ERROR; } if (bad_request) { return ap_map_http_request_error(rv, HTTP_BAD_REQUEST); } if (APR_STATUS_IS_TIMEUP(rv)) { return HTTP_GATEWAY_TIME_OUT; } return HTTP_SERVICE_UNAVAILABLE; } return OK; } #define FCGI_SCHEME "FCGI" /* * This handles fcgi:(dest) URLs */ static int proxy_fcgi_handler(request_rec *r, proxy_worker *worker, proxy_server_conf *conf, char *url, const char *proxyname, apr_port_t proxyport) { int status; char server_portstr[32]; conn_rec *origin = NULL; proxy_conn_rec *backend = NULL; apr_uri_t *uri; proxy_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &proxy_module); apr_pool_t *p = r->pool; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01076) "url: %s proxyname: %s proxyport: %d", url, proxyname, proxyport); if (ap_cstr_casecmpn(url, "fcgi:", 5) != 0) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01077) "declining URL %s", url); return DECLINED; } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01078) "serving URL %s", url); /* Create space for state information */ status = ap_proxy_acquire_connection(FCGI_SCHEME, &backend, worker, r->server); if (status != OK) { if (backend) { backend->close = 1; ap_proxy_release_connection(FCGI_SCHEME, backend, r->server); } return status; } backend->is_ssl = 0; /* Step One: Determine Who To Connect To */ uri = apr_palloc(p, sizeof(*uri)); status = ap_proxy_determine_connection(p, r, conf, worker, backend, uri, &url, proxyname, proxyport, server_portstr, sizeof(server_portstr)); if (status != OK) { goto cleanup; } /* This scheme handler does not reuse connections by default, to * avoid tying up a fastcgi that isn't expecting to work on * parallel requests. But if the user went out of their way to * type the default value of disablereuse=off, we'll allow it. */ backend->close = 1; if (worker->s->disablereuse_set && !worker->s->disablereuse) { backend->close = 0; } /* Step Two: Make the Connection */ if (ap_proxy_check_connection(FCGI_SCHEME, backend, r->server, 0, PROXY_CHECK_CONN_EMPTY) && ap_proxy_connect_backend(FCGI_SCHEME, backend, worker, r->server)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01079) "failed to make connection to backend: %s", backend->hostname); status = HTTP_SERVICE_UNAVAILABLE; goto cleanup; } /* Step Three: Process the Request */ status = fcgi_do_request(p, r, backend, origin, dconf, uri, url, server_portstr); cleanup: ap_proxy_release_connection(FCGI_SCHEME, backend, r->server); return status; } static void *fcgi_create_dconf(apr_pool_t *p, char *path) { fcgi_dirconf_t *a; a = (fcgi_dirconf_t *)apr_pcalloc(p, sizeof(fcgi_dirconf_t)); a->backend_type = BACKEND_DEFAULT_UNKNOWN; a->env_fixups = apr_array_make(p, 20, sizeof(sei_entry)); return a; } static void *fcgi_merge_dconf(apr_pool_t *p, void *basev, void *overridesv) { fcgi_dirconf_t *a, *base, *over; a = (fcgi_dirconf_t *)apr_pcalloc(p, sizeof(fcgi_dirconf_t)); base = (fcgi_dirconf_t *)basev; over = (fcgi_dirconf_t *)overridesv; a->backend_type = (over->backend_type != BACKEND_DEFAULT_UNKNOWN) ? over->backend_type : base->backend_type; a->env_fixups = apr_array_append(p, base->env_fixups, over->env_fixups); return a; } static const char *cmd_servertype(cmd_parms *cmd, void *in_dconf, const char *val) { fcgi_dirconf_t *dconf = in_dconf; if (!strcasecmp(val, "GENERIC")) { dconf->backend_type = BACKEND_GENERIC; } else if (!strcasecmp(val, "FPM")) { dconf->backend_type = BACKEND_FPM; } else { return "ProxyFCGIBackendType requires one of the following arguments: " "'GENERIC', 'FPM'"; } return NULL; } static const char *cmd_setenv(cmd_parms *cmd, void *in_dconf, const char *arg1, const char *arg2, const char *arg3) { fcgi_dirconf_t *dconf = in_dconf; const char *err; sei_entry *new; const char *envvar = arg2; new = apr_array_push(dconf->env_fixups); new->cond = ap_expr_parse_cmd(cmd, arg1, 0, &err, NULL); if (err) { return apr_psprintf(cmd->pool, "Could not parse expression \"%s\": %s", arg1, err); } if (envvar[0] == '!') { /* Unset mode. */ if (arg3) { return apr_psprintf(cmd->pool, "Third argument (\"%s\") is not " "allowed when using ProxyFCGISetEnvIf's unset " "mode (%s)", arg3, envvar); } else if (!envvar[1]) { /* i.e. someone tried to give us a name of just "!" */ return "ProxyFCGISetEnvIf: \"!\" is not a valid variable name"; } new->subst = NULL; } else { /* Set mode. */ if (!arg3) { /* A missing expr-value should be treated as empty. */ arg3 = ""; } new->subst = ap_expr_parse_cmd(cmd, arg3, AP_EXPR_FLAG_STRING_RESULT, &err, NULL); if (err) { return apr_psprintf(cmd->pool, "Could not parse expression \"%s\": %s", arg3, err); } } new->envname = envvar; return NULL; } static void register_hooks(apr_pool_t *p) { proxy_hook_scheme_handler(proxy_fcgi_handler, NULL, NULL, APR_HOOK_FIRST); proxy_hook_canon_handler(proxy_fcgi_canon, NULL, NULL, APR_HOOK_FIRST); } static const command_rec command_table[] = { AP_INIT_TAKE1("ProxyFCGIBackendType", cmd_servertype, NULL, OR_FILEINFO, "Specify the type of FastCGI server: 'Generic', 'FPM'"), AP_INIT_TAKE23("ProxyFCGISetEnvIf", cmd_setenv, NULL, OR_FILEINFO, "expr-condition env-name expr-value"), { NULL } }; AP_DECLARE_MODULE(proxy_fcgi) = { STANDARD20_MODULE_STUFF, fcgi_create_dconf, /* create per-directory config structure */ fcgi_merge_dconf, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ command_table, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/proxy/mod_proxy_hcheck.mak0000644000000000000500000002615513017652517020124 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_proxy_hcheck.dsp !IF "$(CFG)" == "" CFG=mod_proxy_hcheck - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_proxy_hcheck - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_proxy_hcheck - Win32 Release" && "$(CFG)" != "mod_proxy_hcheck - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_hcheck.mak" CFG="mod_proxy_hcheck - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_hcheck - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_hcheck - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_proxy_hcheck - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_hcheck.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_proxy_hcheck.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_hcheck.obj" -@erase "$(INTDIR)\mod_proxy_hcheck.res" -@erase "$(INTDIR)\mod_proxy_hcheck_src.idb" -@erase "$(INTDIR)\mod_proxy_hcheck_src.pdb" -@erase "$(OUTDIR)\mod_proxy_hcheck.exp" -@erase "$(OUTDIR)\mod_proxy_hcheck.lib" -@erase "$(OUTDIR)\mod_proxy_hcheck.pdb" -@erase "$(OUTDIR)\mod_proxy_hcheck.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../core" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_hcheck_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_hcheck.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_hcheck.so" /d LONG_NAME="proxy_hcheck_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_hcheck.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_hcheck.pdb" /debug /out:"$(OUTDIR)\mod_proxy_hcheck.so" /implib:"$(OUTDIR)\mod_proxy_hcheck.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_hcheck.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_proxy_hcheck.obj" \ "$(INTDIR)\mod_proxy_hcheck.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_hcheck.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_proxy_hcheck.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_hcheck.so" if exist .\Release\mod_proxy_hcheck.so.manifest mt.exe -manifest .\Release\mod_proxy_hcheck.so.manifest -outputresource:.\Release\mod_proxy_hcheck.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_proxy_hcheck - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_hcheck.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_proxy_hcheck.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_hcheck.obj" -@erase "$(INTDIR)\mod_proxy_hcheck.res" -@erase "$(INTDIR)\mod_proxy_hcheck_src.idb" -@erase "$(INTDIR)\mod_proxy_hcheck_src.pdb" -@erase "$(OUTDIR)\mod_proxy_hcheck.exp" -@erase "$(OUTDIR)\mod_proxy_hcheck.lib" -@erase "$(OUTDIR)\mod_proxy_hcheck.pdb" -@erase "$(OUTDIR)\mod_proxy_hcheck.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../core" /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_hcheck_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_hcheck.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_hcheck.so" /d LONG_NAME="proxy_hcheck_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_hcheck.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_hcheck.pdb" /debug /out:"$(OUTDIR)\mod_proxy_hcheck.so" /implib:"$(OUTDIR)\mod_proxy_hcheck.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_hcheck.so LINK32_OBJS= \ "$(INTDIR)\mod_proxy_hcheck.obj" \ "$(INTDIR)\mod_proxy_hcheck.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_hcheck.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_proxy_hcheck.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_hcheck.so" if exist .\Debug\mod_proxy_hcheck.so.manifest mt.exe -manifest .\Debug\mod_proxy_hcheck.so.manifest -outputresource:.\Debug\mod_proxy_hcheck.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_proxy_hcheck.dep") !INCLUDE "mod_proxy_hcheck.dep" !ELSE !MESSAGE Warning: cannot find "mod_proxy_hcheck.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_proxy_hcheck - Win32 Release" || "$(CFG)" == "mod_proxy_hcheck - Win32 Debug" SOURCE=.\mod_proxy_hcheck.c "$(INTDIR)\mod_proxy_hcheck.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_proxy_hcheck - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F .\libapr.mak CFG="libapr - Win32 Release" cd "..\..\modules\proxy" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F .\libapr.mak CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_hcheck - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F .\libapr.mak CFG="libapr - Win32 Debug" cd "..\..\modules\proxy" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F .\libapr.mak CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_hcheck - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_hcheck - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_hcheck - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F .\libhttpd.mak CFG="libhttpd - Win32 Release" cd ".\modules\proxy" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F .\libhttpd.mak CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_hcheck - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F .\libhttpd.mak CFG="libhttpd - Win32 Debug" cd ".\modules\proxy" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F .\libhttpd.mak CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_hcheck - Win32 Release" "mod_proxy - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F .\mod_proxy.mak CFG="mod_proxy - Win32 Release" cd "." "mod_proxy - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F .\mod_proxy.mak CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_proxy_hcheck - Win32 Debug" "mod_proxy - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F .\mod_proxy.mak CFG="mod_proxy - Win32 Debug" cd "." "mod_proxy - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F .\mod_proxy.mak CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_proxy_hcheck - Win32 Release" "$(INTDIR)\mod_proxy_hcheck.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_hcheck.res" /i "../../include" /i "../../srclib/apr/include" /i "\build6\hcheck\build\win32" /d "NDEBUG" /d BIN_NAME="mod_proxy_hcheck.so" /d LONG_NAME="proxy_hcheck_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_proxy_hcheck - Win32 Debug" "$(INTDIR)\mod_proxy_hcheck.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_hcheck.res" /i "../../include" /i "../../srclib/apr/include" /i "\build6\hcheck\build\win32" /d "_DEBUG" /d BIN_NAME="mod_proxy_hcheck.so" /d LONG_NAME="proxy_hcheck_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/mod_proxy_http.dsp0000644000000000000500000001146110551346420017657 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_proxy_http" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_proxy_http - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_proxy_http.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_http.mak" CFG="mod_proxy_http - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_http - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_http - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_proxy_http - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_proxy_http_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_proxy_http.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_http.so" /d LONG_NAME="proxy_http_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_proxy_http.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_http.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_proxy_http.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_http.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_proxy_http.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_proxy_http - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_proxy_http_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_proxy_http.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_http.so" /d LONG_NAME="proxy_http_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_http.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_http.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_http.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_http.so # Begin Special Build Tool TargetPath=.\Debug\mod_proxy_http.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_proxy_http - Win32 Release" # Name "mod_proxy_http - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_proxy_http.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=.\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/mod_proxy_connect.dsp0000644000000000000500000001161310551346420020330 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_proxy_connect" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_proxy_connect - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_proxy_connect.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_connect.mak" CFG="mod_proxy_connect - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_connect - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_connect - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_proxy_connect - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_proxy_connect_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_proxy_connect.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_connect.so" /d LONG_NAME="proxy_connect_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /out:".\Release\mod_proxy_connect.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_connect.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_proxy_connect.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_connect.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_proxy_connect.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_proxy_connect - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_proxy_connect_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x809 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_proxy_connect.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_connect.so" /d LONG_NAME="proxy_connect_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_connect.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_connect.so # ADD LINK32 kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_proxy_connect.so" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_connect.so # Begin Special Build Tool TargetPath=.\Debug\mod_proxy_connect.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_proxy_connect - Win32 Release" # Name "mod_proxy_connect - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;hpj;bat;for;f90" # Begin Source File SOURCE=.\mod_proxy_connect.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter ".h" # Begin Source File SOURCE=.\mod_proxy.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/proxy/Makefile.in0000644000000000000500000000031411120510723016120 0ustar rootsrc# a modules Makefile has no explicit targets -- they will be defined by # whatever modules are enabled. just grab special.mk to deal with this. #SUBDIRS = balancers include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/proxy/mod_proxy_uwsgi.dep0000644000000000000500000000523413242652000020013 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_proxy_scgi.mak .\mod_proxy_uwsgi.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_slotmem.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_reslist.h"\ "..\..\srclib\apr-util\include\apr_strmatch.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_uuid.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_proxy.h"\ ".\scgi.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/proxy/NWGNUproxyhtp0000644000000000000500000001056311546111464016534 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxyhtp # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy HTTP Sub-Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Proxy HTTP Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/proxyhtp.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_proxy_http.o \ $(OBJDIR)/libprews.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @$(OBJDIR)/mod_proxy.imp \ @libc.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ proxy_http_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/mod_proxy_scgi.mak0000644000000000000500000002564512701473373017627 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_proxy_scgi.dsp !IF "$(CFG)" == "" CFG=mod_proxy_scgi - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_proxy_scgi - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_proxy_scgi - Win32 Release" && "$(CFG)" != "mod_proxy_scgi - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_scgi.mak" CFG="mod_proxy_scgi - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_scgi - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_scgi - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_proxy_scgi - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_scgi.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_proxy_scgi.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_scgi.obj" -@erase "$(INTDIR)\mod_proxy_scgi.res" -@erase "$(INTDIR)\mod_proxy_scgi_src.idb" -@erase "$(INTDIR)\mod_proxy_scgi_src.pdb" -@erase "$(OUTDIR)\mod_proxy_scgi.exp" -@erase "$(OUTDIR)\mod_proxy_scgi.lib" -@erase "$(OUTDIR)\mod_proxy_scgi.pdb" -@erase "$(OUTDIR)\mod_proxy_scgi.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_scgi_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_scgi.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_scgi.so" /d LONG_NAME="proxy_scgi_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_scgi.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_scgi.pdb" /debug /out:"$(OUTDIR)\mod_proxy_scgi.so" /implib:"$(OUTDIR)\mod_proxy_scgi.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_scgi.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_proxy_scgi.obj" \ "$(INTDIR)\mod_proxy_scgi.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_scgi.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_proxy_scgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_scgi.so" if exist .\Release\mod_proxy_scgi.so.manifest mt.exe -manifest .\Release\mod_proxy_scgi.so.manifest -outputresource:.\Release\mod_proxy_scgi.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_proxy_scgi - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_scgi.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_proxy_scgi.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_scgi.obj" -@erase "$(INTDIR)\mod_proxy_scgi.res" -@erase "$(INTDIR)\mod_proxy_scgi_src.idb" -@erase "$(INTDIR)\mod_proxy_scgi_src.pdb" -@erase "$(OUTDIR)\mod_proxy_scgi.exp" -@erase "$(OUTDIR)\mod_proxy_scgi.lib" -@erase "$(OUTDIR)\mod_proxy_scgi.pdb" -@erase "$(OUTDIR)\mod_proxy_scgi.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_scgi_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_scgi.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_scgi.so" /d LONG_NAME="proxy_scgi_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_scgi.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_scgi.pdb" /debug /out:"$(OUTDIR)\mod_proxy_scgi.so" /implib:"$(OUTDIR)\mod_proxy_scgi.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_scgi.so LINK32_OBJS= \ "$(INTDIR)\mod_proxy_scgi.obj" \ "$(INTDIR)\mod_proxy_scgi.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_scgi.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_proxy_scgi.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_scgi.so" if exist .\Debug\mod_proxy_scgi.so.manifest mt.exe -manifest .\Debug\mod_proxy_scgi.so.manifest -outputresource:.\Debug\mod_proxy_scgi.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_proxy_scgi.dep") !INCLUDE "mod_proxy_scgi.dep" !ELSE !MESSAGE Warning: cannot find "mod_proxy_scgi.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_proxy_scgi - Win32 Release" || "$(CFG)" == "mod_proxy_scgi - Win32 Debug" SOURCE=.\mod_proxy_scgi.c "$(INTDIR)\mod_proxy_scgi.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_proxy_scgi - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_scgi - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_scgi - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_scgi - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_scgi - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_scgi - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_scgi - Win32 Release" "mod_proxy - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd "." "mod_proxy - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_proxy_scgi - Win32 Debug" "mod_proxy - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd "." "mod_proxy - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_proxy_scgi - Win32 Release" "$(INTDIR)\mod_proxy_scgi.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_scgi.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_proxy_scgi.so" /d LONG_NAME="proxy_scgi_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_proxy_scgi - Win32 Debug" "$(INTDIR)\mod_proxy_scgi.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_scgi.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_proxy_scgi.so" /d LONG_NAME="proxy_scgi_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/mod_proxy_fdpass.c0000644000000000000500000001524612631274337017631 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "mod_proxy.h" #include #include #include #ifndef CMSG_DATA #error This module only works on unix platforms with the correct OS support #endif #include "mod_proxy_fdpass.h" module AP_MODULE_DECLARE_DATA proxy_fdpass_module; static int proxy_fdpass_canon(request_rec *r, char *url) { const char *path; if (strncasecmp(url, "fd://", 5) == 0) { url += 5; } else { return DECLINED; } path = ap_server_root_relative(r->pool, url); r->filename = apr_pstrcat(r->pool, "proxy:fd://", path, NULL); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01151) "set r->filename to %s", r->filename); return OK; } static apr_status_t get_socket_from_path(apr_pool_t *p, const char* path, apr_socket_t **out_sock) { apr_socket_t *s; apr_status_t rv; *out_sock = NULL; rv = apr_socket_create(&s, AF_UNIX, SOCK_STREAM, 0, p); if (rv != APR_SUCCESS) { return rv; } rv = ap_proxy_connect_uds(s, path, p); if (rv != APR_SUCCESS) { return rv; } *out_sock = s; return APR_SUCCESS; } static apr_status_t send_socket(apr_pool_t *p, apr_socket_t *s, apr_socket_t *outbound) { apr_status_t rv; apr_os_sock_t rawsock; apr_os_sock_t srawsock; struct msghdr msg; struct cmsghdr *cmsg; struct iovec iov; char b = '\0'; rv = apr_os_sock_get(&rawsock, outbound); if (rv != APR_SUCCESS) { return rv; } rv = apr_os_sock_get(&srawsock, s); if (rv != APR_SUCCESS) { return rv; } memset(&msg, 0, sizeof(msg)); msg.msg_iov = &iov; msg.msg_iovlen = 1; iov.iov_base = &b; iov.iov_len = 1; cmsg = apr_palloc(p, sizeof(*cmsg) + sizeof(rawsock)); cmsg->cmsg_len = sizeof(*cmsg) + sizeof(rawsock); cmsg->cmsg_level = SOL_SOCKET; cmsg->cmsg_type = SCM_RIGHTS; memcpy(CMSG_DATA(cmsg), &rawsock, sizeof(rawsock)); msg.msg_control = cmsg; msg.msg_controllen = cmsg->cmsg_len; rv = sendmsg(srawsock, &msg, 0); if (rv == -1) { return errno; } return APR_SUCCESS; } static int proxy_fdpass_handler(request_rec *r, proxy_worker *worker, proxy_server_conf *conf, char *url, const char *proxyname, apr_port_t proxyport) { apr_status_t rv; apr_socket_t *sock; apr_socket_t *clientsock; if (strncasecmp(url, "fd://", 5) == 0) { url += 5; } else { return DECLINED; } rv = get_socket_from_path(r->pool, url, &sock); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01152) "Failed to connect to '%s'", url); return HTTP_INTERNAL_SERVER_ERROR; } { int status; const char *flush_method = *worker->s->flusher ? worker->s->flusher : "flush"; proxy_fdpass_flush *flush = ap_lookup_provider(PROXY_FDPASS_FLUSHER, flush_method, "0"); if (!flush) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01153) "Unable to find configured flush provider '%s'", flush_method); return HTTP_INTERNAL_SERVER_ERROR; } status = flush->flusher(r); if (status) { return status; } } clientsock = ap_get_conn_socket(r->connection); rv = send_socket(r->pool, sock, clientsock); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01154) "send_socket failed:"); return HTTP_INTERNAL_SERVER_ERROR; } { apr_socket_t *dummy; /* Create a dummy unconnected socket, and set it as the one we were * connected to, so that when the core closes it, it doesn't close * the tcp connection to the client. */ rv = apr_socket_create(&dummy, APR_INET, SOCK_STREAM, APR_PROTO_TCP, r->connection->pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01155) "failed to create dummy socket"); return HTTP_INTERNAL_SERVER_ERROR; } ap_set_core_module_config(r->connection->conn_config, dummy); } return OK; } static int standard_flush(request_rec *r) { int status; apr_bucket_brigade *bb; apr_bucket *e; r->connection->keepalive = AP_CONN_CLOSE; bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); e = apr_bucket_flush_create(r->connection->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); status = ap_pass_brigade(r->output_filters, bb); if (status != OK) { ap_log_rerror(APLOG_MARK, APLOG_ERR, status, r, APLOGNO(01156) "ap_pass_brigade failed:"); return status; } return OK; } static const proxy_fdpass_flush builtin_flush = { "flush", &standard_flush, NULL }; static void register_hooks(apr_pool_t *p) { ap_register_provider(p, PROXY_FDPASS_FLUSHER, "flush", "0", &builtin_flush); proxy_hook_scheme_handler(proxy_fdpass_handler, NULL, NULL, APR_HOOK_FIRST); proxy_hook_canon_handler(proxy_fdpass_canon, NULL, NULL, APR_HOOK_FIRST); } AP_DECLARE_MODULE(proxy_fdpass) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ NULL, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/proxy/NWGNUproxyftp0000644000000000000500000001055711546111464016535 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/http \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxyftp # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy FTP Sub-Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Proxy FTP Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/proxyftp.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_proxy_ftp.o \ $(OBJDIR)/libprews.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @$(OBJDIR)/mod_proxy.imp \ @libc.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifndef USE_STDSOCKETS FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ proxy_ftp_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c ../arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/proxy/mod_proxy_express.mak0000644000000000000500000002626712701473373020374 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_proxy_express.dsp !IF "$(CFG)" == "" CFG=mod_proxy_express - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_proxy_express - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_proxy_express - Win32 Release" && "$(CFG)" != "mod_proxy_express - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_proxy_express.mak" CFG="mod_proxy_express - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_proxy_express - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_proxy_express - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_proxy_express - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_express.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Release" "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_proxy_express.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" "mod_proxy - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_express.obj" -@erase "$(INTDIR)\mod_proxy_express.res" -@erase "$(INTDIR)\mod_proxy_express_src.idb" -@erase "$(INTDIR)\mod_proxy_express_src.pdb" -@erase "$(OUTDIR)\mod_proxy_express.exp" -@erase "$(OUTDIR)\mod_proxy_express.lib" -@erase "$(OUTDIR)\mod_proxy_express.pdb" -@erase "$(OUTDIR)\mod_proxy_express.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_express_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_express.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_proxy_express.so" /d LONG_NAME="proxy_balancer_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_express.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_express.pdb" /debug /out:"$(OUTDIR)\mod_proxy_express.so" /implib:"$(OUTDIR)\mod_proxy_express.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_express.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_proxy_express.obj" \ "$(INTDIR)\mod_proxy_express.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_express.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_proxy_express.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_express.so" if exist .\Release\mod_proxy_express.so.manifest mt.exe -manifest .\Release\mod_proxy_express.so.manifest -outputresource:.\Release\mod_proxy_express.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_proxy_express - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_proxy_express.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "mod_proxy - Win32 Debug" "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_proxy_express.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" "mod_proxy - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_proxy_express.obj" -@erase "$(INTDIR)\mod_proxy_express.res" -@erase "$(INTDIR)\mod_proxy_express_src.idb" -@erase "$(INTDIR)\mod_proxy_express_src.pdb" -@erase "$(OUTDIR)\mod_proxy_express.exp" -@erase "$(OUTDIR)\mod_proxy_express.lib" -@erase "$(OUTDIR)\mod_proxy_express.pdb" -@erase "$(OUTDIR)\mod_proxy_express.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_proxy_express_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_proxy_express.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_proxy_express.so" /d LONG_NAME="proxy_balancer_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_proxy_express.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib ws2_32.lib mswsock.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_proxy_express.pdb" /debug /out:"$(OUTDIR)\mod_proxy_express.so" /implib:"$(OUTDIR)\mod_proxy_express.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_proxy_express.so LINK32_OBJS= \ "$(INTDIR)\mod_proxy_express.obj" \ "$(INTDIR)\mod_proxy_express.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" \ "$(OUTDIR)\mod_proxy.lib" "$(OUTDIR)\mod_proxy_express.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_proxy_express.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_proxy_express.so" if exist .\Debug\mod_proxy_express.so.manifest mt.exe -manifest .\Debug\mod_proxy_express.so.manifest -outputresource:.\Debug\mod_proxy_express.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_proxy_express.dep") !INCLUDE "mod_proxy_express.dep" !ELSE !MESSAGE Warning: cannot find "mod_proxy_express.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_proxy_express - Win32 Release" || "$(CFG)" == "mod_proxy_express - Win32 Debug" SOURCE=.\mod_proxy_express.c "$(INTDIR)\mod_proxy_express.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_proxy_express - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\proxy" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_express - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\proxy" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_express - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\proxy" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_express - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\proxy" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_express - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\proxy" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\proxy" !ELSEIF "$(CFG)" == "mod_proxy_express - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\proxy" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\proxy" !ENDIF !IF "$(CFG)" == "mod_proxy_express - Win32 Release" "mod_proxy - Win32 Release" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" cd "." "mod_proxy - Win32 ReleaseCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Release" RECURSE=1 CLEAN cd "." !ELSEIF "$(CFG)" == "mod_proxy_express - Win32 Debug" "mod_proxy - Win32 Debug" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" cd "." "mod_proxy - Win32 DebugCLEAN" : cd "." $(MAKE) /$(MAKEFLAGS) /F ".\mod_proxy.mak" CFG="mod_proxy - Win32 Debug" RECURSE=1 CLEAN cd "." !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_proxy_express - Win32 Release" "$(INTDIR)\mod_proxy_express.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_express.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_proxy_express.so" /d LONG_NAME="proxy_balancer_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_proxy_express - Win32 Debug" "$(INTDIR)\mod_proxy_express.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_proxy_express.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_proxy_express.so" /d LONG_NAME="proxy_balancer_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/proxy/NWGNUproxywstunnel0000644000000000000500000001032012161135207017602 0ustar rootsrc# # Make sure all needed macro's are defined # # # Get the 'head' of the build environment if necessary. This includes default # targets and paths to tools # ifndef EnvironmentDefined include $(AP_WORK)/build/NWGNUhead.inc endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(SRC)/include \ $(STDMOD)/http \ $(STDMOD)/proxy \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = proxywstunnel # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Proxy Web Socket Tunnel Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Prxy WbSkt Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = $(OBJDIR)/$(NLM_NAME).nlm # # If there is an LIB target, put it here # TARGET_lib = # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_proxy_wstunnel.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ libc \ aprlib \ proxy \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ @$(OBJDIR)/mod_proxy.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ proxy_wstunnel_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE # # Any specialized rules here # vpath %.c balancers # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/ssl/0002755000000000000500000000000013523273342013513 5ustar rootsrchttpd-2.4.41/modules/ssl/ssl_engine_init.c0000644000000000000500000021625313522267616017045 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * _ __ ___ ___ __| | ___ ___| | mod_ssl * | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL * | | | | | | (_) | (_| | \__ \__ \ | * |_| |_| |_|\___/ \__,_|___|___/___/_| * |_____| * ssl_engine_init.c * Initialization of Servers */ /* ``Recursive, adj.; see Recursive.'' -- Unknown */ #include "ssl_private.h" #include "mod_ssl.h" #include "mod_ssl_openssl.h" #include "mpm_common.h" #include "mod_md.h" APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(ssl, SSL, int, init_server, (server_rec *s,apr_pool_t *p,int is_proxy,SSL_CTX *ctx), (s,p,is_proxy,ctx), OK, DECLINED) APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(ssl, SSL, int, add_cert_files, (server_rec *s, apr_pool_t *p, apr_array_header_t *cert_files, apr_array_header_t *key_files), (s, p, cert_files, key_files), OK, DECLINED) APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(ssl, SSL, int, add_fallback_cert_files, (server_rec *s, apr_pool_t *p, apr_array_header_t *cert_files, apr_array_header_t *key_files), (s, p, cert_files, key_files), OK, DECLINED) APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(ssl, SSL, int, answer_challenge, (conn_rec *c, const char *server_name, X509 **pcert, EVP_PKEY **pkey), (c, server_name, pcert, pkey), DECLINED, DECLINED) /* _________________________________________________________________ ** ** Module Initialization ** _________________________________________________________________ */ #ifdef HAVE_ECC #define KEYTYPES "RSA, DSA or ECC" #else #define KEYTYPES "RSA or DSA" #endif #if MODSSL_USE_OPENSSL_PRE_1_1_API /* OpenSSL Pre-1.1.0 compatibility */ /* Taken from OpenSSL 1.1.0 snapshot 20160410 */ static int DH_set0_pqg(DH *dh, BIGNUM *p, BIGNUM *q, BIGNUM *g) { /* q is optional */ if (p == NULL || g == NULL) return 0; BN_free(dh->p); BN_free(dh->q); BN_free(dh->g); dh->p = p; dh->q = q; dh->g = g; if (q != NULL) { dh->length = BN_num_bits(q); } return 1; } #endif /* * Grab well-defined DH parameters from OpenSSL, see the BN_get_rfc* * functions in for all available primes. */ static DH *make_dh_params(BIGNUM *(*prime)(BIGNUM *)) { DH *dh = DH_new(); BIGNUM *p, *g; if (!dh) { return NULL; } p = prime(NULL); g = BN_new(); if (g != NULL) { BN_set_word(g, 2); } if (!p || !g || !DH_set0_pqg(dh, p, NULL, g)) { DH_free(dh); BN_free(p); BN_free(g); return NULL; } return dh; } /* Storage and initialization for DH parameters. */ static struct dhparam { BIGNUM *(*const prime)(BIGNUM *); /* function to generate... */ DH *dh; /* ...this, used for keys.... */ const unsigned int min; /* ...of length >= this. */ } dhparams[] = { { BN_get_rfc3526_prime_8192, NULL, 6145 }, { BN_get_rfc3526_prime_6144, NULL, 4097 }, { BN_get_rfc3526_prime_4096, NULL, 3073 }, { BN_get_rfc3526_prime_3072, NULL, 2049 }, { BN_get_rfc3526_prime_2048, NULL, 1025 }, { BN_get_rfc2409_prime_1024, NULL, 0 } }; static void init_dh_params(void) { unsigned n; for (n = 0; n < sizeof(dhparams)/sizeof(dhparams[0]); n++) dhparams[n].dh = make_dh_params(dhparams[n].prime); } static void free_dh_params(void) { unsigned n; /* DH_free() is a noop for a NULL parameter, so these are harmless * in the (unexpected) case where these variables are already * NULL. */ for (n = 0; n < sizeof(dhparams)/sizeof(dhparams[0]); n++) { DH_free(dhparams[n].dh); dhparams[n].dh = NULL; } } /* Hand out the same DH structure though once generated as we leak * memory otherwise and freeing the structure up after use would be * hard to track and in fact is not needed at all as it is safe to * use the same parameters over and over again security wise (in * contrast to the keys itself) and code safe as the returned structure * is duplicated by OpenSSL anyway. Hence no modification happens * to our copy. */ DH *modssl_get_dh_params(unsigned keylen) { unsigned n; for (n = 0; n < sizeof(dhparams)/sizeof(dhparams[0]); n++) if (keylen >= dhparams[n].min) return dhparams[n].dh; return NULL; /* impossible to reach. */ } static void ssl_add_version_components(apr_pool_t *p, server_rec *s) { char *modver = ssl_var_lookup(p, s, NULL, NULL, "SSL_VERSION_INTERFACE"); char *libver = ssl_var_lookup(p, s, NULL, NULL, "SSL_VERSION_LIBRARY"); char *incver = ssl_var_lookup(p, s, NULL, NULL, "SSL_VERSION_LIBRARY_INTERFACE"); ap_add_version_component(p, libver); ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(01876) "%s compiled against Server: %s, Library: %s", modver, AP_SERVER_BASEVERSION, incver); } /* _________________________________________________________________ ** ** Let other answer special connection attempts. ** Used in ACME challenge handling by mod_md. ** _________________________________________________________________ */ int ssl_is_challenge(conn_rec *c, const char *servername, X509 **pcert, EVP_PKEY **pkey) { if (APR_SUCCESS == ssl_run_answer_challenge(c, servername, pcert, pkey)) { return 1; } *pcert = NULL; *pkey = NULL; return 0; } #ifdef HAVE_FIPS static apr_status_t modssl_fips_cleanup(void *data) { FIPS_mode_set(0); return APR_SUCCESS; } #endif /* * Per-module initialization */ apr_status_t ssl_init_Module(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *base_server) { SSLModConfigRec *mc = myModConfig(base_server); SSLSrvConfigRec *sc; server_rec *s; apr_status_t rv; apr_array_header_t *pphrases; if (SSLeay() < MODSSL_LIBRARY_VERSION) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, base_server, APLOGNO(01882) "Init: this version of mod_ssl was compiled against " "a newer library (%s, version currently loaded is %s)" " - may result in undefined or erroneous behavior", MODSSL_LIBRARY_TEXT, MODSSL_LIBRARY_DYNTEXT); } /* We initialize mc->pid per-process in the child init, * but it should be initialized for startup before we * call ssl_rand_seed() below. */ mc->pid = getpid(); /* * Let us cleanup on restarts and exits */ apr_pool_cleanup_register(p, base_server, ssl_init_ModuleKill, apr_pool_cleanup_null); /* * Any init round fixes the global config */ ssl_config_global_create(base_server); /* just to avoid problems */ ssl_config_global_fix(mc); /* * try to fix the configuration and open the dedicated SSL * logfile as early as possible */ for (s = base_server; s; s = s->next) { sc = mySrvConfig(s); if (sc->server) { sc->server->sc = sc; } /* * Create the server host:port string because we need it a lot */ if (sc->vhost_id) { /* already set. This should only happen if this config rec is * shared with another server. Argh! */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(10104) "%s, SSLSrvConfigRec shared from %s", ssl_util_vhostid(p, s), sc->vhost_id); } sc->vhost_id = ssl_util_vhostid(p, s); sc->vhost_id_len = strlen(sc->vhost_id); /* Default to enabled if SSLEngine is not set explicitly, and * the protocol is https. */ if (ap_get_server_protocol(s) && strcmp("https", ap_get_server_protocol(s)) == 0 && sc->enabled == SSL_ENABLED_UNSET && (!apr_is_empty_array(sc->server->pks->cert_files))) { sc->enabled = SSL_ENABLED_TRUE; } /* Fix up stuff that may not have been set. If sc->enabled is * UNSET, then SSL is disabled on this vhost. */ if (sc->enabled == SSL_ENABLED_UNSET) { sc->enabled = SSL_ENABLED_FALSE; } if (sc->session_cache_timeout == UNSET) { sc->session_cache_timeout = SSL_SESSION_CACHE_TIMEOUT; } if (sc->server && sc->server->pphrase_dialog_type == SSL_PPTYPE_UNSET) { sc->server->pphrase_dialog_type = SSL_PPTYPE_BUILTIN; } #ifdef HAVE_FIPS if (sc->fips == UNSET) { sc->fips = FALSE; } #endif } #if APR_HAS_THREADS && MODSSL_USE_OPENSSL_PRE_1_1_API ssl_util_thread_setup(p); #endif /* * SSL external crypto device ("engine") support */ #if defined(HAVE_OPENSSL_ENGINE_H) && defined(HAVE_ENGINE_INIT) if ((rv = ssl_init_Engine(base_server, p)) != APR_SUCCESS) { return rv; } #endif ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(01883) "Init: Initialized %s library", MODSSL_LIBRARY_NAME); /* * Seed the Pseudo Random Number Generator (PRNG) * only need ptemp here; nothing inside allocated from the pool * needs to live once we return from ssl_rand_seed(). */ ssl_rand_seed(base_server, ptemp, SSL_RSCTX_STARTUP, "Init: "); #ifdef HAVE_FIPS if (sc->fips) { if (!FIPS_mode()) { if (FIPS_mode_set(1)) { ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, s, APLOGNO(01884) "Operating in SSL FIPS mode"); apr_pool_cleanup_register(p, NULL, modssl_fips_cleanup, apr_pool_cleanup_null); } else { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01885) "FIPS mode failed"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } } } else { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01886) "SSL FIPS mode disabled"); } #endif /* * initialize the mutex handling */ if (!ssl_mutex_init(base_server, p)) { return HTTP_INTERNAL_SERVER_ERROR; } #ifdef HAVE_OCSP_STAPLING ssl_stapling_certinfo_hash_init(p); #endif /* * initialize session caching */ if ((rv = ssl_scache_init(base_server, p)) != APR_SUCCESS) { return rv; } pphrases = apr_array_make(ptemp, 2, sizeof(char *)); /* * initialize servers */ ap_log_error(APLOG_MARK, APLOG_INFO, 0, base_server, APLOGNO(01887) "Init: Initializing (virtual) servers for SSL"); for (s = base_server; s; s = s->next) { sc = mySrvConfig(s); /* * Either now skip this server when SSL is disabled for * it or give out some information about what we're * configuring. */ /* * Read the server certificate and key */ if ((rv = ssl_init_ConfigureServer(s, p, ptemp, sc, pphrases)) != APR_SUCCESS) { return rv; } } if (pphrases->nelts > 0) { memset(pphrases->elts, 0, pphrases->elt_size * pphrases->nelts); pphrases->nelts = 0; ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(02560) "Init: Wiped out the queried pass phrases from memory"); } /* * Configuration consistency checks */ if ((rv = ssl_init_CheckServers(base_server, ptemp)) != APR_SUCCESS) { return rv; } for (s = base_server; s; s = s->next) { SSLDirConfigRec *sdc = ap_get_module_config(s->lookup_defaults, &ssl_module); sc = mySrvConfig(s); if (sc->enabled == SSL_ENABLED_TRUE || sc->enabled == SSL_ENABLED_OPTIONAL) { if ((rv = ssl_run_init_server(s, p, 0, sc->server->ssl_ctx)) != APR_SUCCESS) { return rv; } } if (sdc->proxy_enabled) { rv = ssl_run_init_server(s, p, 1, sdc->proxy->ssl_ctx); if (rv != APR_SUCCESS) { return rv; } } } /* * Announce mod_ssl and SSL library in HTTP Server field * as ``mod_ssl/X.X.X OpenSSL/X.X.X'' */ ssl_add_version_components(p, base_server); modssl_init_app_data2_idx(); /* for modssl_get_app_data2() at request time */ init_dh_params(); #if !MODSSL_USE_OPENSSL_PRE_1_1_API init_bio_methods(); #endif return OK; } /* * Support for external a Crypto Device ("engine"), usually * a hardware accellerator card for crypto operations. */ #if defined(HAVE_OPENSSL_ENGINE_H) && defined(HAVE_ENGINE_INIT) apr_status_t ssl_init_Engine(server_rec *s, apr_pool_t *p) { SSLModConfigRec *mc = myModConfig(s); ENGINE *e; if (mc->szCryptoDevice) { if (!(e = ENGINE_by_id(mc->szCryptoDevice))) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01888) "Init: Failed to load Crypto Device API `%s'", mc->szCryptoDevice); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } #ifdef ENGINE_CTRL_CHIL_SET_FORKCHECK if (strEQ(mc->szCryptoDevice, "chil")) { ENGINE_ctrl(e, ENGINE_CTRL_CHIL_SET_FORKCHECK, 1, 0, 0); } #endif if (!ENGINE_set_default(e, ENGINE_METHOD_ALL)) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01889) "Init: Failed to enable Crypto Device API `%s'", mc->szCryptoDevice); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(01890) "Init: loaded Crypto Device API `%s'", mc->szCryptoDevice); ENGINE_free(e); } return APR_SUCCESS; } #endif #ifdef HAVE_TLSEXT static apr_status_t ssl_init_ctx_tls_extensions(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *mctx) { apr_status_t rv; /* * Configure TLS extensions support */ ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01893) "Configuring TLS extension handling"); /* * Server name indication (SNI) */ if (!SSL_CTX_set_tlsext_servername_callback(mctx->ssl_ctx, ssl_callback_ServerNameIndication) || !SSL_CTX_set_tlsext_servername_arg(mctx->ssl_ctx, mctx)) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01894) "Unable to initialize TLS servername extension " "callback (incompatible OpenSSL version?)"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } #ifdef HAVE_OCSP_STAPLING /* * OCSP Stapling support, status_request extension */ if ((mctx->pkp == FALSE) && (mctx->stapling_enabled == TRUE)) { if ((rv = modssl_init_stapling(s, p, ptemp, mctx)) != APR_SUCCESS) { return rv; } } #endif #ifdef HAVE_SRP /* * TLS-SRP support */ if (mctx->srp_vfile != NULL) { int err; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02308) "Using SRP verifier file [%s]", mctx->srp_vfile); if (!(mctx->srp_vbase = SRP_VBASE_new(mctx->srp_unknown_user_seed))) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02309) "Unable to initialize SRP verifier structure " "[%s seed]", mctx->srp_unknown_user_seed ? "with" : "without"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } err = SRP_VBASE_init(mctx->srp_vbase, mctx->srp_vfile); if (err != SRP_NO_ERROR) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02310) "Unable to load SRP verifier file [error %d]", err); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } SSL_CTX_set_srp_username_callback(mctx->ssl_ctx, ssl_callback_SRPServerParams); SSL_CTX_set_srp_cb_arg(mctx->ssl_ctx, mctx); } #endif return APR_SUCCESS; } #endif static apr_status_t ssl_init_ctx_protocol(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *mctx) { SSL_CTX *ctx = NULL; MODSSL_SSL_METHOD_CONST SSL_METHOD *method = NULL; char *cp; int protocol = mctx->protocol; SSLSrvConfigRec *sc = mySrvConfig(s); #if OPENSSL_VERSION_NUMBER >= 0x10100000L int prot; #endif /* * Create the new per-server SSL context */ if (protocol == SSL_PROTOCOL_NONE) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02231) "No SSL protocols available [hint: SSLProtocol]"); return ssl_die(s); } cp = apr_pstrcat(p, #ifndef OPENSSL_NO_SSL3 (protocol & SSL_PROTOCOL_SSLV3 ? "SSLv3, " : ""), #endif (protocol & SSL_PROTOCOL_TLSV1 ? "TLSv1, " : ""), #ifdef HAVE_TLSV1_X (protocol & SSL_PROTOCOL_TLSV1_1 ? "TLSv1.1, " : ""), (protocol & SSL_PROTOCOL_TLSV1_2 ? "TLSv1.2, " : ""), #if SSL_HAVE_PROTOCOL_TLSV1_3 (protocol & SSL_PROTOCOL_TLSV1_3 ? "TLSv1.3, " : ""), #endif #endif NULL); cp[strlen(cp)-2] = NUL; ap_log_error(APLOG_MARK, APLOG_TRACE3, 0, s, "Creating new SSL context (protocols: %s)", cp); #if OPENSSL_VERSION_NUMBER < 0x10100000L #ifndef OPENSSL_NO_SSL3 if (protocol == SSL_PROTOCOL_SSLV3) { method = mctx->pkp ? SSLv3_client_method() : /* proxy */ SSLv3_server_method(); /* server */ } else #endif if (protocol == SSL_PROTOCOL_TLSV1) { method = mctx->pkp ? TLSv1_client_method() : /* proxy */ TLSv1_server_method(); /* server */ } #ifdef HAVE_TLSV1_X else if (protocol == SSL_PROTOCOL_TLSV1_1) { method = mctx->pkp ? TLSv1_1_client_method() : /* proxy */ TLSv1_1_server_method(); /* server */ } else if (protocol == SSL_PROTOCOL_TLSV1_2) { method = mctx->pkp ? TLSv1_2_client_method() : /* proxy */ TLSv1_2_server_method(); /* server */ } #if SSL_HAVE_PROTOCOL_TLSV1_3 else if (protocol == SSL_PROTOCOL_TLSV1_3) { method = mctx->pkp ? TLSv1_3_client_method() : /* proxy */ TLSv1_3_server_method(); /* server */ } #endif #endif else { /* For multiple protocols, we need a flexible method */ method = mctx->pkp ? SSLv23_client_method() : /* proxy */ SSLv23_server_method(); /* server */ } #else method = mctx->pkp ? TLS_client_method() : /* proxy */ TLS_server_method(); /* server */ #endif ctx = SSL_CTX_new(method); mctx->ssl_ctx = ctx; SSL_CTX_set_options(ctx, SSL_OP_ALL); #if OPENSSL_VERSION_NUMBER < 0x10100000L || \ (defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 0x20800000L) /* always disable SSLv2, as per RFC 6176 */ SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2); #ifndef OPENSSL_NO_SSL3 if (!(protocol & SSL_PROTOCOL_SSLV3)) { SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv3); } #endif if (!(protocol & SSL_PROTOCOL_TLSV1)) { SSL_CTX_set_options(ctx, SSL_OP_NO_TLSv1); } #ifdef HAVE_TLSV1_X if (!(protocol & SSL_PROTOCOL_TLSV1_1)) { SSL_CTX_set_options(ctx, SSL_OP_NO_TLSv1_1); } if (!(protocol & SSL_PROTOCOL_TLSV1_2)) { SSL_CTX_set_options(ctx, SSL_OP_NO_TLSv1_2); } #if SSL_HAVE_PROTOCOL_TLSV1_3 ssl_set_ctx_protocol_option(s, ctx, SSL_OP_NO_TLSv1_3, protocol & SSL_PROTOCOL_TLSV1_3, "TLSv1.3"); #endif #endif #else /* #if OPENSSL_VERSION_NUMBER < 0x10100000L */ /* We first determine the maximum protocol version we should provide */ #if SSL_HAVE_PROTOCOL_TLSV1_3 if (SSL_HAVE_PROTOCOL_TLSV1_3 && (protocol & SSL_PROTOCOL_TLSV1_3)) { prot = TLS1_3_VERSION; } else #endif if (protocol & SSL_PROTOCOL_TLSV1_2) { prot = TLS1_2_VERSION; } else if (protocol & SSL_PROTOCOL_TLSV1_1) { prot = TLS1_1_VERSION; } else if (protocol & SSL_PROTOCOL_TLSV1) { prot = TLS1_VERSION; #ifndef OPENSSL_NO_SSL3 } else if (protocol & SSL_PROTOCOL_SSLV3) { prot = SSL3_VERSION; #endif } else { SSL_CTX_free(ctx); mctx->ssl_ctx = NULL; ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(03378) "No SSL protocols available [hint: SSLProtocol]"); return ssl_die(s); } SSL_CTX_set_max_proto_version(ctx, prot); /* Next we scan for the minimal protocol version we should provide, * but we do not allow holes between max and min */ #if SSL_HAVE_PROTOCOL_TLSV1_3 if (prot == TLS1_3_VERSION && protocol & SSL_PROTOCOL_TLSV1_2) { prot = TLS1_2_VERSION; } #endif if (prot == TLS1_2_VERSION && protocol & SSL_PROTOCOL_TLSV1_1) { prot = TLS1_1_VERSION; } if (prot == TLS1_1_VERSION && protocol & SSL_PROTOCOL_TLSV1) { prot = TLS1_VERSION; } #ifndef OPENSSL_NO_SSL3 if (prot == TLS1_VERSION && protocol & SSL_PROTOCOL_SSLV3) { prot = SSL3_VERSION; } #endif SSL_CTX_set_min_proto_version(ctx, prot); #endif /* if OPENSSL_VERSION_NUMBER < 0x10100000L */ #ifdef SSL_OP_CIPHER_SERVER_PREFERENCE if (sc->cipher_server_pref == TRUE) { SSL_CTX_set_options(ctx, SSL_OP_CIPHER_SERVER_PREFERENCE); } #endif #ifndef OPENSSL_NO_COMP if (sc->compression != TRUE) { #ifdef SSL_OP_NO_COMPRESSION /* OpenSSL >= 1.0 only */ SSL_CTX_set_options(ctx, SSL_OP_NO_COMPRESSION); #else sk_SSL_COMP_zero(SSL_COMP_get_compression_methods()); #endif } #endif #ifdef SSL_OP_NO_TICKET /* * Configure using RFC 5077 TLS session tickets * for session resumption. */ if (sc->session_tickets == FALSE) { SSL_CTX_set_options(ctx, SSL_OP_NO_TICKET); } #endif #ifdef SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION if (sc->insecure_reneg == TRUE) { SSL_CTX_set_options(ctx, SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION); } #endif SSL_CTX_set_app_data(ctx, s); /* * Configure additional context ingredients */ SSL_CTX_set_options(ctx, SSL_OP_SINGLE_DH_USE); #ifdef HAVE_ECC SSL_CTX_set_options(ctx, SSL_OP_SINGLE_ECDH_USE); #endif #ifdef SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION /* * Disallow a session from being resumed during a renegotiation, * so that an acceptable cipher suite can be negotiated. */ SSL_CTX_set_options(ctx, SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION); #endif #ifdef SSL_MODE_RELEASE_BUFFERS /* If httpd is configured to reduce mem usage, ask openssl to do so, too */ if (ap_max_mem_free != APR_ALLOCATOR_MAX_FREE_UNLIMITED) SSL_CTX_set_mode(ctx, SSL_MODE_RELEASE_BUFFERS); #endif #if OPENSSL_VERSION_NUMBER >= 0x1010100fL /* For OpenSSL >=1.1.1, disable auto-retry mode so it's possible * to consume handshake records without blocking for app-data. * https://github.com/openssl/openssl/issues/7178 */ SSL_CTX_clear_mode(ctx, SSL_MODE_AUTO_RETRY); #endif return APR_SUCCESS; } static void ssl_init_ctx_session_cache(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *mctx) { SSL_CTX *ctx = mctx->ssl_ctx; SSLModConfigRec *mc = myModConfig(s); SSL_CTX_set_session_cache_mode(ctx, mc->sesscache_mode); if (mc->sesscache) { SSL_CTX_sess_set_new_cb(ctx, ssl_callback_NewSessionCacheEntry); SSL_CTX_sess_set_get_cb(ctx, ssl_callback_GetSessionCacheEntry); SSL_CTX_sess_set_remove_cb(ctx, ssl_callback_DelSessionCacheEntry); } } static void ssl_init_ctx_callbacks(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *mctx) { SSL_CTX *ctx = mctx->ssl_ctx; SSL_CTX_set_tmp_dh_callback(ctx, ssl_callback_TmpDH); SSL_CTX_set_info_callback(ctx, ssl_callback_Info); #ifdef HAVE_TLS_ALPN SSL_CTX_set_alpn_select_cb(ctx, ssl_callback_alpn_select, NULL); #endif } static apr_status_t ssl_init_ctx_verify(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *mctx) { SSL_CTX *ctx = mctx->ssl_ctx; int verify = SSL_VERIFY_NONE; STACK_OF(X509_NAME) *ca_list; if (mctx->auth.verify_mode == SSL_CVERIFY_UNSET) { mctx->auth.verify_mode = SSL_CVERIFY_NONE; } if (mctx->auth.verify_depth == UNSET) { mctx->auth.verify_depth = 1; } /* * Configure callbacks for SSL context */ if (mctx->auth.verify_mode == SSL_CVERIFY_REQUIRE) { verify |= SSL_VERIFY_PEER_STRICT; } if ((mctx->auth.verify_mode == SSL_CVERIFY_OPTIONAL) || (mctx->auth.verify_mode == SSL_CVERIFY_OPTIONAL_NO_CA)) { verify |= SSL_VERIFY_PEER; } SSL_CTX_set_verify(ctx, verify, ssl_callback_SSLVerify); /* * Configure Client Authentication details */ if (mctx->auth.ca_cert_file || mctx->auth.ca_cert_path) { ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, s, "Configuring client authentication"); if (!SSL_CTX_load_verify_locations(ctx, mctx->auth.ca_cert_file, mctx->auth.ca_cert_path)) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01895) "Unable to configure verify locations " "for client authentication"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } if (mctx->pks && (mctx->pks->ca_name_file || mctx->pks->ca_name_path)) { ca_list = ssl_init_FindCAList(s, ptemp, mctx->pks->ca_name_file, mctx->pks->ca_name_path); } else ca_list = ssl_init_FindCAList(s, ptemp, mctx->auth.ca_cert_file, mctx->auth.ca_cert_path); if (sk_X509_NAME_num(ca_list) <= 0) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01896) "Unable to determine list of acceptable " "CA certificates for client authentication"); return ssl_die(s); } SSL_CTX_set_client_CA_list(ctx, ca_list); } /* * Give a warning when no CAs were configured but client authentication * should take place. This cannot work. */ if (mctx->auth.verify_mode == SSL_CVERIFY_REQUIRE) { ca_list = SSL_CTX_get_client_CA_list(ctx); if (sk_X509_NAME_num(ca_list) == 0) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(01897) "Init: Oops, you want to request client " "authentication, but no CAs are known for " "verification!? [Hint: SSLCACertificate*]"); } } return APR_SUCCESS; } static apr_status_t ssl_init_ctx_cipher_suite(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *mctx) { SSL_CTX *ctx = mctx->ssl_ctx; const char *suite; /* * Configure SSL Cipher Suite. Always disable NULL and export ciphers, * see also ssl_engine_config.c:ssl_cmd_SSLCipherSuite(). * OpenSSL's SSL_DEFAULT_CIPHER_LIST includes !aNULL:!eNULL from 0.9.8f, * and !EXP from 0.9.8zf/1.0.1m/1.0.2a, so append them while we support * earlier versions. */ suite = mctx->auth.cipher_suite ? mctx->auth.cipher_suite : apr_pstrcat(ptemp, SSL_DEFAULT_CIPHER_LIST, ":!aNULL:!eNULL:!EXP", NULL); ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, s, "Configuring permitted SSL ciphers [%s]", suite); if (!SSL_CTX_set_cipher_list(ctx, suite)) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01898) "Unable to configure permitted SSL ciphers"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } #if SSL_HAVE_PROTOCOL_TLSV1_3 if (mctx->auth.tls13_ciphers && !SSL_CTX_set_ciphersuites(ctx, mctx->auth.tls13_ciphers)) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(10127) "Unable to configure permitted TLSv1.3 ciphers"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } #endif return APR_SUCCESS; } static apr_status_t ssl_init_ctx_crl(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *mctx) { X509_STORE *store = SSL_CTX_get_cert_store(mctx->ssl_ctx); unsigned long crlflags = 0; char *cfgp = mctx->pkp ? "SSLProxy" : "SSL"; int crl_check_mode; if (mctx->ocsp_mask == UNSET) { mctx->ocsp_mask = SSL_OCSPCHECK_NONE; } if (mctx->crl_check_mask == UNSET) { mctx->crl_check_mask = SSL_CRLCHECK_NONE; } crl_check_mode = mctx->crl_check_mask & ~SSL_CRLCHECK_FLAGS; /* * Configure Certificate Revocation List (CRL) Details */ if (!(mctx->crl_file || mctx->crl_path)) { if (crl_check_mode == SSL_CRLCHECK_LEAF || crl_check_mode == SSL_CRLCHECK_CHAIN) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01899) "Host %s: CRL checking has been enabled, but " "neither %sCARevocationFile nor %sCARevocationPath " "is configured", mctx->sc->vhost_id, cfgp, cfgp); return ssl_die(s); } return APR_SUCCESS; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01900) "Configuring certificate revocation facility"); if (!store || !X509_STORE_load_locations(store, mctx->crl_file, mctx->crl_path)) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01901) "Host %s: unable to configure X.509 CRL storage " "for certificate revocation", mctx->sc->vhost_id); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } switch (crl_check_mode) { case SSL_CRLCHECK_LEAF: crlflags = X509_V_FLAG_CRL_CHECK; break; case SSL_CRLCHECK_CHAIN: crlflags = X509_V_FLAG_CRL_CHECK|X509_V_FLAG_CRL_CHECK_ALL; break; default: crlflags = 0; } if (crlflags) { X509_STORE_set_flags(store, crlflags); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(01902) "Host %s: X.509 CRL storage locations configured, " "but CRL checking (%sCARevocationCheck) is not " "enabled", mctx->sc->vhost_id, cfgp); } return APR_SUCCESS; } /* * Read a file that optionally contains the server certificate in PEM * format, possibly followed by a sequence of CA certificates that * should be sent to the peer in the SSL Certificate message. */ static int use_certificate_chain( SSL_CTX *ctx, char *file, int skipfirst, pem_password_cb *cb) { BIO *bio; X509 *x509; unsigned long err; int n; if ((bio = BIO_new(BIO_s_file())) == NULL) return -1; if (BIO_read_filename(bio, file) <= 0) { BIO_free(bio); return -1; } /* optionally skip a leading server certificate */ if (skipfirst) { if ((x509 = PEM_read_bio_X509(bio, NULL, cb, NULL)) == NULL) { BIO_free(bio); return -1; } X509_free(x509); } /* free a perhaps already configured extra chain */ #ifdef OPENSSL_NO_SSL_INTERN SSL_CTX_clear_extra_chain_certs(ctx); #else if (ctx->extra_certs != NULL) { sk_X509_pop_free((STACK_OF(X509) *)ctx->extra_certs, X509_free); ctx->extra_certs = NULL; } #endif /* create new extra chain by loading the certs */ n = 0; ERR_clear_error(); while ((x509 = PEM_read_bio_X509(bio, NULL, cb, NULL)) != NULL) { if (!SSL_CTX_add_extra_chain_cert(ctx, x509)) { X509_free(x509); BIO_free(bio); return -1; } n++; } /* Make sure that only the error is just an EOF */ if ((err = ERR_peek_error()) > 0) { if (!( ERR_GET_LIB(err) == ERR_LIB_PEM && ERR_GET_REASON(err) == PEM_R_NO_START_LINE)) { BIO_free(bio); return -1; } while (ERR_get_error() > 0) ; } BIO_free(bio); return n; } static apr_status_t ssl_init_ctx_cert_chain(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *mctx) { BOOL skip_first = FALSE; int i, n; const char *chain = mctx->cert_chain; /* * Optionally configure extra server certificate chain certificates. * This is usually done by OpenSSL automatically when one of the * server cert issuers are found under SSLCACertificatePath or in * SSLCACertificateFile. But because these are intended for client * authentication it can conflict. For instance when you use a * Global ID server certificate you've to send out the intermediate * CA certificate, too. When you would just configure this with * SSLCACertificateFile and also use client authentication mod_ssl * would accept all clients also issued by this CA. Obviously this * isn't what we want in this situation. So this feature here exists * to allow one to explicitly configure CA certificates which are * used only for the server certificate chain. */ if (!chain) { return APR_SUCCESS; } for (i = 0; (i < mctx->pks->cert_files->nelts) && APR_ARRAY_IDX(mctx->pks->cert_files, i, const char *); i++) { if (strEQ(APR_ARRAY_IDX(mctx->pks->cert_files, i, const char *), chain)) { skip_first = TRUE; break; } } n = use_certificate_chain(mctx->ssl_ctx, (char *)chain, skip_first, NULL); if (n < 0) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01903) "Failed to configure CA certificate chain!"); return ssl_die(s); } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01904) "Configuring server certificate chain " "(%d CA certificate%s)", n, n == 1 ? "" : "s"); return APR_SUCCESS; } static apr_status_t ssl_init_ctx(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *mctx) { apr_status_t rv; if ((rv = ssl_init_ctx_protocol(s, p, ptemp, mctx)) != APR_SUCCESS) { return rv; } ssl_init_ctx_session_cache(s, p, ptemp, mctx); ssl_init_ctx_callbacks(s, p, ptemp, mctx); if ((rv = ssl_init_ctx_verify(s, p, ptemp, mctx)) != APR_SUCCESS) { return rv; } if ((rv = ssl_init_ctx_cipher_suite(s, p, ptemp, mctx)) != APR_SUCCESS) { return rv; } if ((rv = ssl_init_ctx_crl(s, p, ptemp, mctx)) != APR_SUCCESS) { return rv; } if (mctx->pks) { /* XXX: proxy support? */ if ((rv = ssl_init_ctx_cert_chain(s, p, ptemp, mctx)) != APR_SUCCESS) { return rv; } #ifdef HAVE_TLSEXT if ((rv = ssl_init_ctx_tls_extensions(s, p, ptemp, mctx)) != APR_SUCCESS) { return rv; } #endif } return APR_SUCCESS; } static void ssl_check_public_cert(server_rec *s, apr_pool_t *ptemp, X509 *cert, const char *key_id) { int is_ca, pathlen; if (!cert) { return; } /* * Some information about the certificate(s) */ if (modssl_X509_getBC(cert, &is_ca, &pathlen)) { if (is_ca) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(01906) "%s server certificate is a CA certificate " "(BasicConstraints: CA == TRUE !?)", key_id); } if (pathlen > 0) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(01907) "%s server certificate is not a leaf certificate " "(BasicConstraints: pathlen == %d > 0 !?)", key_id, pathlen); } } if (modssl_X509_match_name(ptemp, cert, (const char *)s->server_hostname, TRUE, s) == FALSE) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(01909) "%s server certificate does NOT include an ID " "which matches the server name", key_id); } } /* prevent OpenSSL from showing its "Enter PEM pass phrase:" prompt */ static int ssl_no_passwd_prompt_cb(char *buf, int size, int rwflag, void *userdata) { return 0; } static apr_status_t ssl_init_server_certs(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *mctx, apr_array_header_t *pphrases) { SSLModConfigRec *mc = myModConfig(s); const char *vhost_id = mctx->sc->vhost_id, *key_id, *certfile, *keyfile; int i; X509 *cert; DH *dhparams; #ifdef HAVE_ECC EC_GROUP *ecparams = NULL; int nid; EC_KEY *eckey = NULL; #endif #ifndef HAVE_SSL_CONF_CMD SSL *ssl; #endif /* no OpenSSL default prompts for any of the SSL_CTX_use_* calls, please */ SSL_CTX_set_default_passwd_cb(mctx->ssl_ctx, ssl_no_passwd_prompt_cb); /* Iterate over the SSLCertificateFile array */ for (i = 0; (i < mctx->pks->cert_files->nelts) && (certfile = APR_ARRAY_IDX(mctx->pks->cert_files, i, const char *)); i++) { key_id = apr_psprintf(ptemp, "%s:%d", vhost_id, i); ERR_clear_error(); /* first the certificate (public key) */ if (mctx->cert_chain) { if ((SSL_CTX_use_certificate_file(mctx->ssl_ctx, certfile, SSL_FILETYPE_PEM) < 1)) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02561) "Failed to configure certificate %s, check %s", key_id, certfile); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return APR_EGENERAL; } } else { if ((SSL_CTX_use_certificate_chain_file(mctx->ssl_ctx, certfile) < 1)) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02562) "Failed to configure certificate %s (with chain)," " check %s", key_id, certfile); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return APR_EGENERAL; } } /* and second, the private key */ if (i < mctx->pks->key_files->nelts) { keyfile = APR_ARRAY_IDX(mctx->pks->key_files, i, const char *); } else { keyfile = certfile; } ERR_clear_error(); if ((SSL_CTX_use_PrivateKey_file(mctx->ssl_ctx, keyfile, SSL_FILETYPE_PEM) < 1) && (ERR_GET_FUNC(ERR_peek_last_error()) != X509_F_X509_CHECK_PRIVATE_KEY)) { ssl_asn1_t *asn1; EVP_PKEY *pkey; const unsigned char *ptr; ERR_clear_error(); /* perhaps it's an encrypted private key, so try again */ ssl_load_encrypted_pkey(s, ptemp, i, keyfile, &pphrases); if (!(asn1 = ssl_asn1_table_get(mc->tPrivateKey, key_id)) || !(ptr = asn1->cpData) || !(pkey = d2i_AutoPrivateKey(NULL, &ptr, asn1->nData)) || (SSL_CTX_use_PrivateKey(mctx->ssl_ctx, pkey) < 1)) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02564) "Failed to configure encrypted (?) private key %s," " check %s", key_id, keyfile); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return APR_EGENERAL; } } if (SSL_CTX_check_private_key(mctx->ssl_ctx) < 1) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02565) "Certificate and private key %s from %s and %s " "do not match", key_id, certfile, keyfile); return APR_EGENERAL; } #ifdef HAVE_SSL_CONF_CMD /* * workaround for those OpenSSL versions where SSL_CTX_get0_certificate * is not yet available: create an SSL struct which we dispose of * as soon as we no longer need access to the cert. (Strictly speaking, * SSL_CTX_get0_certificate does not depend on the SSL_CONF stuff, * but there's no reliable way to check for its existence, so we * assume that if SSL_CONF is available, it's OpenSSL 1.0.2 or later, * and SSL_CTX_get0_certificate is implemented.) */ if (!(cert = SSL_CTX_get0_certificate(mctx->ssl_ctx))) { #else ssl = SSL_new(mctx->ssl_ctx); if (ssl) { /* Workaround bug in SSL_get_certificate in OpenSSL 0.9.8y */ SSL_set_connect_state(ssl); cert = SSL_get_certificate(ssl); } if (!ssl || !cert) { #endif ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(02566) "Unable to retrieve certificate %s", key_id); #ifndef HAVE_SSL_CONF_CMD if (ssl) SSL_free(ssl); #endif return APR_EGENERAL; } /* warn about potential cert issues */ ssl_check_public_cert(s, ptemp, cert, key_id); #if defined(HAVE_OCSP_STAPLING) && !defined(SSL_CTRL_SET_CURRENT_CERT) /* * OpenSSL up to 1.0.1: configure stapling as we go. In 1.0.2 * and later, there's SSL_CTX_set_current_cert, which allows * iterating over all certs in an SSL_CTX (including those possibly * loaded via SSLOpenSSLConfCmd Certificate), so for 1.0.2 and * later, we defer to the code in ssl_init_server_ctx. */ if (!ssl_stapling_init_cert(s, p, ptemp, mctx, cert)) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(02567) "Unable to configure certificate %s for stapling", key_id); } #endif #ifndef HAVE_SSL_CONF_CMD SSL_free(ssl); #endif ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(02568) "Certificate and private key %s configured from %s and %s", key_id, certfile, keyfile); } /* * Try to read DH parameters from the (first) SSLCertificateFile */ if ((certfile = APR_ARRAY_IDX(mctx->pks->cert_files, 0, const char *)) && (dhparams = ssl_dh_GetParamFromFile(certfile))) { SSL_CTX_set_tmp_dh(mctx->ssl_ctx, dhparams); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02540) "Custom DH parameters (%d bits) for %s loaded from %s", DH_bits(dhparams), vhost_id, certfile); DH_free(dhparams); } #ifdef HAVE_ECC /* * Similarly, try to read the ECDH curve name from SSLCertificateFile... */ if ((certfile != NULL) && (ecparams = ssl_ec_GetParamFromFile(certfile)) && (nid = EC_GROUP_get_curve_name(ecparams)) && (eckey = EC_KEY_new_by_curve_name(nid))) { SSL_CTX_set_tmp_ecdh(mctx->ssl_ctx, eckey); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02541) "ECDH curve %s for %s specified in %s", OBJ_nid2sn(nid), vhost_id, certfile); } /* * ...otherwise, enable auto curve selection (OpenSSL 1.0.2) * or configure NIST P-256 (required to enable ECDHE for earlier versions) * ECDH is always enabled in 1.1.0 unless excluded from SSLCipherList */ #if MODSSL_USE_OPENSSL_PRE_1_1_API else { #if defined(SSL_CTX_set_ecdh_auto) SSL_CTX_set_ecdh_auto(mctx->ssl_ctx, 1); #else eckey = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1); SSL_CTX_set_tmp_ecdh(mctx->ssl_ctx, eckey); #endif } #endif /* OpenSSL assures us that _free() is NULL-safe */ EC_KEY_free(eckey); EC_GROUP_free(ecparams); #endif return APR_SUCCESS; } #ifdef HAVE_TLS_SESSION_TICKETS static apr_status_t ssl_init_ticket_key(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *mctx) { apr_status_t rv; apr_file_t *fp; apr_size_t len; char buf[TLSEXT_TICKET_KEY_LEN]; char *path; modssl_ticket_key_t *ticket_key = mctx->ticket_key; if (!ticket_key->file_path) { return APR_SUCCESS; } path = ap_server_root_relative(p, ticket_key->file_path); rv = apr_file_open(&fp, path, APR_READ|APR_BINARY, APR_OS_DEFAULT, ptemp); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02286) "Failed to open ticket key file %s: (%d) %pm", path, rv, &rv); return ssl_die(s); } rv = apr_file_read_full(fp, &buf[0], TLSEXT_TICKET_KEY_LEN, &len); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02287) "Failed to read %d bytes from %s: (%d) %pm", TLSEXT_TICKET_KEY_LEN, path, rv, &rv); return ssl_die(s); } memcpy(ticket_key->key_name, buf, 16); memcpy(ticket_key->hmac_secret, buf + 16, 16); memcpy(ticket_key->aes_key, buf + 32, 16); if (!SSL_CTX_set_tlsext_ticket_key_cb(mctx->ssl_ctx, ssl_callback_SessionTicket)) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01913) "Unable to initialize TLS session ticket key callback " "(incompatible OpenSSL version?)"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(02288) "TLS session ticket key for %s successfully loaded from %s", (mySrvConfig(s))->vhost_id, path); return APR_SUCCESS; } #endif static BOOL load_x509_info(apr_pool_t *ptemp, STACK_OF(X509_INFO) *sk, const char *filename) { BIO *in; if (!(in = BIO_new(BIO_s_file()))) { return FALSE; } if (BIO_read_filename(in, filename) <= 0) { BIO_free(in); return FALSE; } ERR_clear_error(); PEM_X509_INFO_read_bio(in, sk, NULL, NULL); BIO_free(in); return TRUE; } static apr_status_t ssl_init_proxy_certs(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *mctx) { int n, ncerts = 0; STACK_OF(X509_INFO) *sk; modssl_pk_proxy_t *pkp = mctx->pkp; STACK_OF(X509) *chain; X509_STORE_CTX *sctx; X509_STORE *store = SSL_CTX_get_cert_store(mctx->ssl_ctx); #if OPENSSL_VERSION_NUMBER >= 0x1010100fL /* For OpenSSL >=1.1.1, turn on client cert support which is * otherwise turned off by default (by design). * https://github.com/openssl/openssl/issues/6933 */ SSL_CTX_set_post_handshake_auth(mctx->ssl_ctx, 1); #endif SSL_CTX_set_client_cert_cb(mctx->ssl_ctx, ssl_callback_proxy_cert); if (!(pkp->cert_file || pkp->cert_path)) { return APR_SUCCESS; } sk = sk_X509_INFO_new_null(); if (pkp->cert_file) { load_x509_info(ptemp, sk, pkp->cert_file); } if (pkp->cert_path) { apr_dir_t *dir; apr_finfo_t dirent; apr_int32_t finfo_flags = APR_FINFO_TYPE|APR_FINFO_NAME; if (apr_dir_open(&dir, pkp->cert_path, ptemp) == APR_SUCCESS) { while ((apr_dir_read(&dirent, finfo_flags, dir)) == APR_SUCCESS) { const char *fullname; if (dirent.filetype == APR_DIR) { continue; /* don't try to load directories */ } fullname = apr_pstrcat(ptemp, pkp->cert_path, "/", dirent.name, NULL); load_x509_info(ptemp, sk, fullname); } apr_dir_close(dir); } } if ((ncerts = sk_X509_INFO_num(sk)) <= 0) { sk_X509_INFO_free(sk); ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(02206) "no client certs found for SSL proxy"); return APR_SUCCESS; } /* Check that all client certs have got certificates and private * keys. */ for (n = 0; n < ncerts; n++) { X509_INFO *inf = sk_X509_INFO_value(sk, n); if (!inf->x509 || !inf->x_pkey || !inf->x_pkey->dec_pkey || inf->enc_data) { sk_X509_INFO_free(sk); ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, s, APLOGNO(02252) "incomplete client cert configured for SSL proxy " "(missing or encrypted private key?)"); return ssl_die(s); } if (X509_check_private_key(inf->x509, inf->x_pkey->dec_pkey) != 1) { ssl_log_xerror(SSLLOG_MARK, APLOG_STARTUP, 0, ptemp, s, inf->x509, APLOGNO(02326) "proxy client certificate and " "private key do not match"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, s); return ssl_die(s); } } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02207) "loaded %d client certs for SSL proxy", ncerts); pkp->certs = sk; if (!pkp->ca_cert_file || !store) { return APR_SUCCESS; } /* If SSLProxyMachineCertificateChainFile is configured, load all * the CA certs and have OpenSSL attempt to construct a full chain * from each configured end-entity cert up to a root. This will * allow selection of the correct cert given a list of root CA * names in the certificate request from the server. */ pkp->ca_certs = (STACK_OF(X509) **) apr_pcalloc(p, ncerts * sizeof(sk)); sctx = X509_STORE_CTX_new(); if (!sctx) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02208) "SSL proxy client cert initialization failed"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } X509_STORE_load_locations(store, pkp->ca_cert_file, NULL); for (n = 0; n < ncerts; n++) { int i; X509_INFO *inf = sk_X509_INFO_value(pkp->certs, n); X509_STORE_CTX_init(sctx, store, inf->x509, NULL); /* Attempt to verify the client cert */ if (X509_verify_cert(sctx) != 1) { int err = X509_STORE_CTX_get_error(sctx); ssl_log_xerror(SSLLOG_MARK, APLOG_WARNING, 0, ptemp, s, inf->x509, APLOGNO(02270) "SSL proxy client cert chain " "verification failed: %s :", X509_verify_cert_error_string(err)); } /* Clear X509_verify_cert errors */ ERR_clear_error(); /* Obtain a copy of the verified chain */ chain = X509_STORE_CTX_get1_chain(sctx); if (chain != NULL) { /* Discard end entity cert from the chain */ X509_free(sk_X509_shift(chain)); if ((i = sk_X509_num(chain)) > 0) { /* Store the chain for later use */ pkp->ca_certs[n] = chain; } else { /* Discard empty chain */ sk_X509_pop_free(chain, X509_free); pkp->ca_certs[n] = NULL; } ssl_log_xerror(SSLLOG_MARK, APLOG_DEBUG, 0, ptemp, s, inf->x509, APLOGNO(02271) "loaded %i intermediate CA%s for cert %i: ", i, i == 1 ? "" : "s", n); if (i > 0) { int j; for (j = 0; j < i; j++) { ssl_log_xerror(SSLLOG_MARK, APLOG_DEBUG, 0, ptemp, s, sk_X509_value(chain, j), APLOGNO(03039) "%i:", j); } } } /* get ready for next X509_STORE_CTX_init */ X509_STORE_CTX_cleanup(sctx); } X509_STORE_CTX_free(sctx); return APR_SUCCESS; } #define MODSSL_CFG_ITEM_FREE(func, item) \ if (item) { \ func(item); \ item = NULL; \ } static void ssl_init_ctx_cleanup(modssl_ctx_t *mctx) { MODSSL_CFG_ITEM_FREE(SSL_CTX_free, mctx->ssl_ctx); #ifdef HAVE_SRP if (mctx->srp_vbase != NULL) { SRP_VBASE_free(mctx->srp_vbase); mctx->srp_vbase = NULL; } #endif } static apr_status_t ssl_cleanup_proxy_ctx(void *data) { modssl_ctx_t *mctx = data; ssl_init_ctx_cleanup(mctx); if (mctx->pkp->certs) { int i = 0; int ncerts = sk_X509_INFO_num(mctx->pkp->certs); if (mctx->pkp->ca_certs) { for (i = 0; i < ncerts; i++) { if (mctx->pkp->ca_certs[i] != NULL) { sk_X509_pop_free(mctx->pkp->ca_certs[i], X509_free); } } } sk_X509_INFO_pop_free(mctx->pkp->certs, X509_INFO_free); mctx->pkp->certs = NULL; } return APR_SUCCESS; } static apr_status_t ssl_init_proxy_ctx(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *proxy) { apr_status_t rv; if (proxy->ssl_ctx) { /* Merged/initialized already */ return APR_SUCCESS; } apr_pool_cleanup_register(p, proxy, ssl_cleanup_proxy_ctx, apr_pool_cleanup_null); if ((rv = ssl_init_ctx(s, p, ptemp, proxy)) != APR_SUCCESS) { return rv; } if ((rv = ssl_init_proxy_certs(s, p, ptemp, proxy)) != APR_SUCCESS) { return rv; } return APR_SUCCESS; } static apr_status_t ssl_init_server_ctx(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, SSLSrvConfigRec *sc, apr_array_header_t *pphrases) { apr_status_t rv; modssl_pk_server_t *pks; #ifdef HAVE_SSL_CONF_CMD ssl_ctx_param_t *param = (ssl_ctx_param_t *)sc->server->ssl_ctx_param->elts; SSL_CONF_CTX *cctx = sc->server->ssl_ctx_config; int i; #endif int n; /* * Check for problematic re-initializations */ if (sc->server->ssl_ctx) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02569) "Illegal attempt to re-initialise SSL for server " "(SSLEngine On should go in the VirtualHost, not in global scope.)"); return APR_EGENERAL; } /* Allow others to provide certificate files */ pks = sc->server->pks; n = pks->cert_files->nelts; ssl_run_add_cert_files(s, p, pks->cert_files, pks->key_files); if (apr_is_empty_array(pks->cert_files)) { /* does someone propose a certiciate to fall back on here? */ ssl_run_add_fallback_cert_files(s, p, pks->cert_files, pks->key_files); if (n < pks->cert_files->nelts) { pks->service_unavailable = 1; ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(10085) "Init: %s will respond with '503 Service Unavailable' for now. There " "are no SSL certificates configured and no other module contributed any.", ssl_util_vhostid(p, s)); } } if (n < pks->cert_files->nelts) { /* additionally installed certs overrides any old chain configuration */ sc->server->cert_chain = NULL; } if ((rv = ssl_init_ctx(s, p, ptemp, sc->server)) != APR_SUCCESS) { return rv; } if ((rv = ssl_init_server_certs(s, p, ptemp, sc->server, pphrases)) != APR_SUCCESS) { return rv; } #ifdef HAVE_SSL_CONF_CMD SSL_CONF_CTX_set_ssl_ctx(cctx, sc->server->ssl_ctx); for (i = 0; i < sc->server->ssl_ctx_param->nelts; i++, param++) { ERR_clear_error(); if (SSL_CONF_cmd(cctx, param->name, param->value) <= 0) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02407) "\"SSLOpenSSLConfCmd %s %s\" failed for %s", param->name, param->value, sc->vhost_id); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } else { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02556) "\"SSLOpenSSLConfCmd %s %s\" applied to %s", param->name, param->value, sc->vhost_id); } } if (SSL_CONF_CTX_finish(cctx) == 0) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02547) "SSL_CONF_CTX_finish() failed"); SSL_CONF_CTX_free(cctx); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } #endif if (SSL_CTX_check_private_key(sc->server->ssl_ctx) != 1) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02572) "Failed to configure at least one certificate and key " "for %s", sc->vhost_id); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } #if defined(HAVE_OCSP_STAPLING) && defined(SSL_CTRL_SET_CURRENT_CERT) /* * OpenSSL 1.0.2 and later allows iterating over all SSL_CTX certs * by means of SSL_CTX_set_current_cert. Enabling stapling at this * (late) point makes sure that we catch both certificates loaded * via SSLCertificateFile and SSLOpenSSLConfCmd Certificate. */ do { X509 *cert; int i = 0; int ret = SSL_CTX_set_current_cert(sc->server->ssl_ctx, SSL_CERT_SET_FIRST); while (ret) { cert = SSL_CTX_get0_certificate(sc->server->ssl_ctx); if (!cert || !ssl_stapling_init_cert(s, p, ptemp, sc->server, cert)) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(02604) "Unable to configure certificate %s:%d " "for stapling", sc->vhost_id, i); } ret = SSL_CTX_set_current_cert(sc->server->ssl_ctx, SSL_CERT_SET_NEXT); i++; } } while(0); #endif #ifdef HAVE_TLS_SESSION_TICKETS if ((rv = ssl_init_ticket_key(s, p, ptemp, sc->server)) != APR_SUCCESS) { return rv; } #endif SSL_CTX_set_timeout(sc->server->ssl_ctx, sc->session_cache_timeout == UNSET ? SSL_SESSION_CACHE_TIMEOUT : sc->session_cache_timeout); return APR_SUCCESS; } /* * Configure a particular server */ apr_status_t ssl_init_ConfigureServer(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, SSLSrvConfigRec *sc, apr_array_header_t *pphrases) { SSLDirConfigRec *sdc = ap_get_module_config(s->lookup_defaults, &ssl_module); apr_status_t rv; /* Initialize the server if SSL is enabled or optional. */ if ((sc->enabled == SSL_ENABLED_TRUE) || (sc->enabled == SSL_ENABLED_OPTIONAL)) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(01914) "Configuring server %s for SSL protocol", sc->vhost_id); if ((rv = ssl_init_server_ctx(s, p, ptemp, sc, pphrases)) != APR_SUCCESS) { return rv; } /* Initialize OCSP Responder certificate if OCSP enabled */ #ifndef OPENSSL_NO_OCSP ssl_init_ocsp_certificates(s, sc->server); #endif } sdc->proxy->sc = sc; if (sdc->proxy_enabled == TRUE) { rv = ssl_init_proxy_ctx(s, p, ptemp, sdc->proxy); if (rv != APR_SUCCESS) { return rv; } } else { sdc->proxy_enabled = FALSE; } sdc->proxy_post_config = 1; return APR_SUCCESS; } apr_status_t ssl_init_CheckServers(server_rec *base_server, apr_pool_t *p) { server_rec *s; SSLSrvConfigRec *sc; #ifndef HAVE_TLSEXT server_rec *ps; apr_hash_t *table; const char *key; apr_ssize_t klen; BOOL conflict = FALSE; #endif /* * Give out warnings when a server has HTTPS configured * for the HTTP port or vice versa */ for (s = base_server; s; s = s->next) { sc = mySrvConfig(s); if ((sc->enabled == SSL_ENABLED_TRUE) && (s->port == DEFAULT_HTTP_PORT)) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, base_server, APLOGNO(01915) "Init: (%s) You configured HTTPS(%d) " "on the standard HTTP(%d) port!", ssl_util_vhostid(p, s), DEFAULT_HTTPS_PORT, DEFAULT_HTTP_PORT); } if ((sc->enabled == SSL_ENABLED_FALSE) && (s->port == DEFAULT_HTTPS_PORT)) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, base_server, APLOGNO(01916) "Init: (%s) You configured HTTP(%d) " "on the standard HTTPS(%d) port!", ssl_util_vhostid(p, s), DEFAULT_HTTP_PORT, DEFAULT_HTTPS_PORT); } } #ifndef HAVE_TLSEXT /* * Give out warnings when more than one SSL-aware virtual server uses the * same IP:port and an OpenSSL version without support for TLS extensions * (SNI in particular) is used. */ table = apr_hash_make(p); for (s = base_server; s; s = s->next) { char *addr; sc = mySrvConfig(s); if (!((sc->enabled == SSL_ENABLED_TRUE) && s->addrs)) { continue; } apr_sockaddr_ip_get(&addr, s->addrs->host_addr); key = apr_psprintf(p, "%s:%u", addr, s->addrs->host_port); klen = strlen(key); if ((ps = (server_rec *)apr_hash_get(table, key, klen))) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, base_server, APLOGNO(02662) "Init: SSL server IP/port conflict: " "%s (%s:%d) vs. %s (%s:%d)", ssl_util_vhostid(p, s), (s->defn_name ? s->defn_name : "unknown"), s->defn_line_number, ssl_util_vhostid(p, ps), (ps->defn_name ? ps->defn_name : "unknown"), ps->defn_line_number); conflict = TRUE; continue; } apr_hash_set(table, key, klen, s); } if (conflict) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, base_server, APLOGNO(01917) "Init: Name-based SSL virtual hosts require " "an OpenSSL version with support for TLS extensions " "(RFC 6066 - Server Name Indication / SNI), " "but the currently used library version (%s) is " "lacking this feature", MODSSL_LIBRARY_DYNTEXT); } #endif return APR_SUCCESS; } int ssl_proxy_section_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s, ap_conf_vector_t *section_config) { SSLDirConfigRec *sdc = ap_get_module_config(s->lookup_defaults, &ssl_module); SSLDirConfigRec *pdc = ap_get_module_config(section_config, &ssl_module); if (pdc) { pdc->proxy->sc = mySrvConfig(s); ssl_config_proxy_merge(p, sdc, pdc); if (pdc->proxy_enabled) { apr_status_t rv; rv = ssl_init_proxy_ctx(s, p, ptemp, pdc->proxy); if (rv != APR_SUCCESS) { return !OK; } rv = ssl_run_init_server(s, p, 1, pdc->proxy->ssl_ctx); if (rv != APR_SUCCESS) { return !OK; } } pdc->proxy_post_config = 1; } return OK; } static int ssl_init_FindCAList_X509NameCmp(const X509_NAME * const *a, const X509_NAME * const *b) { return(X509_NAME_cmp(*a, *b)); } static void ssl_init_PushCAList(STACK_OF(X509_NAME) *ca_list, server_rec *s, apr_pool_t *ptemp, const char *file) { int n; STACK_OF(X509_NAME) *sk; sk = (STACK_OF(X509_NAME) *) SSL_load_client_CA_file(file); if (!sk) { return; } for (n = 0; n < sk_X509_NAME_num(sk); n++) { X509_NAME *name = sk_X509_NAME_value(sk, n); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02209) "CA certificate: %s", modssl_X509_NAME_to_string(ptemp, name, 0)); /* * note that SSL_load_client_CA_file() checks for duplicates, * but since we call it multiple times when reading a directory * we must also check for duplicates ourselves. */ if (sk_X509_NAME_find(ca_list, name) < 0) { /* this will be freed when ca_list is */ sk_X509_NAME_push(ca_list, name); } else { /* need to free this ourselves, else it will leak */ X509_NAME_free(name); } } sk_X509_NAME_free(sk); } STACK_OF(X509_NAME) *ssl_init_FindCAList(server_rec *s, apr_pool_t *ptemp, const char *ca_file, const char *ca_path) { STACK_OF(X509_NAME) *ca_list; /* * Start with a empty stack/list where new * entries get added in sorted order. */ ca_list = sk_X509_NAME_new(ssl_init_FindCAList_X509NameCmp); /* * Process CA certificate bundle file */ if (ca_file) { ssl_init_PushCAList(ca_list, s, ptemp, ca_file); /* * If ca_list is still empty after trying to load ca_file * then the file failed to load, and users should hear about that. */ if (sk_X509_NAME_num(ca_list) == 0) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(02210) "Failed to load SSLCACertificateFile: %s", ca_file); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, s); } } /* * Process CA certificate path files */ if (ca_path) { apr_dir_t *dir; apr_finfo_t direntry; apr_int32_t finfo_flags = APR_FINFO_TYPE|APR_FINFO_NAME; apr_status_t rv; if ((rv = apr_dir_open(&dir, ca_path, ptemp)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(02211) "Failed to open Certificate Path `%s'", ca_path); sk_X509_NAME_pop_free(ca_list, X509_NAME_free); return NULL; } while ((apr_dir_read(&direntry, finfo_flags, dir)) == APR_SUCCESS) { const char *file; if (direntry.filetype == APR_DIR) { continue; /* don't try to load directories */ } file = apr_pstrcat(ptemp, ca_path, "/", direntry.name, NULL); ssl_init_PushCAList(ca_list, s, ptemp, file); } apr_dir_close(dir); } /* * Cleanup */ (void) sk_X509_NAME_set_cmp_func(ca_list, NULL); return ca_list; } void ssl_init_Child(apr_pool_t *p, server_rec *s) { SSLModConfigRec *mc = myModConfig(s); mc->pid = getpid(); /* only call getpid() once per-process */ /* XXX: there should be an ap_srand() function */ srand((unsigned int)time(NULL)); /* open the mutex lockfile */ ssl_mutex_reinit(s, p); #ifdef HAVE_OCSP_STAPLING ssl_stapling_mutex_reinit(s, p); #endif } apr_status_t ssl_init_ModuleKill(void *data) { SSLSrvConfigRec *sc; server_rec *base_server = (server_rec *)data; server_rec *s; /* * Drop the session cache and mutex */ ssl_scache_kill(base_server); /* * Free the non-pool allocated structures * in the per-server configurations */ for (s = base_server; s; s = s->next) { sc = mySrvConfig(s); ssl_init_ctx_cleanup(sc->server); /* Not Sure but possibly clear X509 trusted cert file */ #ifndef OPENSSL_NO_OCSP sk_X509_pop_free(sc->server->ocsp_certs, X509_free); #endif } #if !MODSSL_USE_OPENSSL_PRE_1_1_API free_bio_methods(); #endif free_dh_params(); return APR_SUCCESS; } httpd-2.4.41/modules/ssl/mod_ssl.c0000644000000000000500000006727613471722156015343 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * _ __ ___ ___ __| | ___ ___| | mod_ssl * | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL * | | | | | | (_) | (_| | \__ \__ \ | * |_| |_| |_|\___/ \__,_|___|___/___/_| * |_____| * mod_ssl.c * Apache API interface structures */ #include "ssl_private.h" #include "mod_ssl.h" #include "mod_ssl_openssl.h" #include "util_md5.h" #include "util_mutex.h" #include "ap_provider.h" #include "http_config.h" #include "mod_proxy.h" /* for proxy_hook_section_post_config() */ #include static int modssl_running_statically = 0; APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(ssl, SSL, int, pre_handshake, (conn_rec *c,SSL *ssl,int is_proxy), (c,ssl,is_proxy), OK, DECLINED); /* * the table of configuration directives we provide */ #define SSL_CMD_ALL(name, args, desc) \ AP_INIT_##args("SSL"#name, ssl_cmd_SSL##name, \ NULL, RSRC_CONF|OR_AUTHCFG, desc), #define SSL_CMD_SRV(name, args, desc) \ AP_INIT_##args("SSL"#name, ssl_cmd_SSL##name, \ NULL, RSRC_CONF, desc), #define SSL_CMD_PXY(name, args, desc) \ AP_INIT_##args("SSL"#name, ssl_cmd_SSL##name, \ NULL, RSRC_CONF|PROXY_CONF, desc), #define SSL_CMD_DIR(name, type, args, desc) \ AP_INIT_##args("SSL"#name, ssl_cmd_SSL##name, \ NULL, OR_##type, desc), #define AP_END_CMD { NULL } static const command_rec ssl_config_cmds[] = { /* * Global (main-server) context configuration directives */ SSL_CMD_SRV(PassPhraseDialog, TAKE1, "SSL dialog mechanism for the pass phrase query " "('builtin', '|/path/to/pipe_program', " "or 'exec:/path/to/cgi_program')") SSL_CMD_SRV(SessionCache, TAKE1, "SSL Session Cache storage " "('none', 'nonenotnull', 'dbm:/path/to/file')") #if defined(HAVE_OPENSSL_ENGINE_H) && defined(HAVE_ENGINE_INIT) SSL_CMD_SRV(CryptoDevice, TAKE1, "SSL external Crypto Device usage " "('builtin', '...')") #endif SSL_CMD_SRV(RandomSeed, TAKE23, "SSL Pseudo Random Number Generator (PRNG) seeding source " "('startup|connect builtin|file:/path|exec:/path [bytes]')") /* * Per-server context configuration directives */ SSL_CMD_SRV(Engine, TAKE1, "SSL switch for the protocol engine " "('on', 'off')") SSL_CMD_SRV(FIPS, FLAG, "Enable FIPS-140 mode " "(`on', `off')") SSL_CMD_ALL(CipherSuite, TAKE12, "Colon-delimited list of permitted SSL Ciphers, optional preceeded " "by protocol identifier ('XXX:...:XXX' - see manual)") SSL_CMD_SRV(CertificateFile, TAKE1, "SSL Server Certificate file " "('/path/to/file' - PEM or DER encoded)") SSL_CMD_SRV(CertificateKeyFile, TAKE1, "SSL Server Private Key file " "('/path/to/file' - PEM or DER encoded)") SSL_CMD_SRV(CertificateChainFile, TAKE1, "SSL Server CA Certificate Chain file " "('/path/to/file' - PEM encoded)") #ifdef HAVE_TLS_SESSION_TICKETS SSL_CMD_SRV(SessionTicketKeyFile, TAKE1, "TLS session ticket encryption/decryption key file (RFC 5077) " "('/path/to/file' - file with 48 bytes of random data)") #endif SSL_CMD_ALL(CACertificatePath, TAKE1, "SSL CA Certificate path " "('/path/to/dir' - contains PEM encoded files)") SSL_CMD_ALL(CACertificateFile, TAKE1, "SSL CA Certificate file " "('/path/to/file' - PEM encoded)") SSL_CMD_SRV(CADNRequestPath, TAKE1, "SSL CA Distinguished Name path " "('/path/to/dir' - symlink hashes to PEM of acceptable CA names to request)") SSL_CMD_SRV(CADNRequestFile, TAKE1, "SSL CA Distinguished Name file " "('/path/to/file' - PEM encoded to derive acceptable CA names to request)") SSL_CMD_SRV(CARevocationPath, TAKE1, "SSL CA Certificate Revocation List (CRL) path " "('/path/to/dir' - contains PEM encoded files)") SSL_CMD_SRV(CARevocationFile, TAKE1, "SSL CA Certificate Revocation List (CRL) file " "('/path/to/file' - PEM encoded)") SSL_CMD_SRV(CARevocationCheck, RAW_ARGS, "SSL CA Certificate Revocation List (CRL) checking mode") SSL_CMD_ALL(VerifyClient, TAKE1, "SSL Client verify type " "('none', 'optional', 'require', 'optional_no_ca')") SSL_CMD_ALL(VerifyDepth, TAKE1, "SSL Client verify depth " "('N' - number of intermediate certificates)") SSL_CMD_SRV(SessionCacheTimeout, TAKE1, "SSL Session Cache object lifetime " "('N' - number of seconds)") #ifdef OPENSSL_NO_SSL3 #define SSLv3_PROTO_PREFIX "" #else #define SSLv3_PROTO_PREFIX "SSLv3|" #endif #ifdef HAVE_TLSV1_X #define SSL_PROTOCOLS SSLv3_PROTO_PREFIX "TLSv1|TLSv1.1|TLSv1.2" #else #define SSL_PROTOCOLS SSLv3_PROTO_PREFIX "TLSv1" #endif SSL_CMD_SRV(Protocol, RAW_ARGS, "Enable or disable various SSL protocols " "('[+-][" SSL_PROTOCOLS "] ...' - see manual)") SSL_CMD_SRV(HonorCipherOrder, FLAG, "Use the server's cipher ordering preference") SSL_CMD_SRV(Compression, FLAG, "Enable SSL level compression " "(`on', `off')") SSL_CMD_SRV(SessionTickets, FLAG, "Enable or disable TLS session tickets" "(`on', `off')") SSL_CMD_SRV(InsecureRenegotiation, FLAG, "Enable support for insecure renegotiation") SSL_CMD_ALL(UserName, TAKE1, "Set user name to SSL variable value") SSL_CMD_SRV(StrictSNIVHostCheck, FLAG, "Strict SNI virtual host checking") #ifdef HAVE_SRP SSL_CMD_SRV(SRPVerifierFile, TAKE1, "SRP verifier file " "('/path/to/file' - created by srptool)") SSL_CMD_SRV(SRPUnknownUserSeed, TAKE1, "SRP seed for unknown users (to avoid leaking a user's existence) " "('some secret text')") #endif /* * Proxy configuration for remote SSL connections */ SSL_CMD_PXY(ProxyEngine, FLAG, "SSL switch for the proxy protocol engine " "('on', 'off')") SSL_CMD_PXY(ProxyProtocol, RAW_ARGS, "SSL Proxy: enable or disable SSL protocol flavors " "('[+-][" SSL_PROTOCOLS "] ...' - see manual)") SSL_CMD_PXY(ProxyCipherSuite, TAKE12, "SSL Proxy: colon-delimited list of permitted SSL ciphers " ", optionally preceeded by protocol specifier ('XXX:...:XXX' - see manual)") SSL_CMD_PXY(ProxyVerify, TAKE1, "SSL Proxy: whether to verify the remote certificate " "('on' or 'off')") SSL_CMD_PXY(ProxyVerifyDepth, TAKE1, "SSL Proxy: maximum certificate verification depth " "('N' - number of intermediate certificates)") SSL_CMD_PXY(ProxyCACertificateFile, TAKE1, "SSL Proxy: file containing server certificates " "('/path/to/file' - PEM encoded certificates)") SSL_CMD_PXY(ProxyCACertificatePath, TAKE1, "SSL Proxy: directory containing server certificates " "('/path/to/dir' - contains PEM encoded certificates)") SSL_CMD_PXY(ProxyCARevocationPath, TAKE1, "SSL Proxy: CA Certificate Revocation List (CRL) path " "('/path/to/dir' - contains PEM encoded files)") SSL_CMD_PXY(ProxyCARevocationFile, TAKE1, "SSL Proxy: CA Certificate Revocation List (CRL) file " "('/path/to/file' - PEM encoded)") SSL_CMD_PXY(ProxyCARevocationCheck, RAW_ARGS, "SSL Proxy: CA Certificate Revocation List (CRL) checking mode") SSL_CMD_PXY(ProxyMachineCertificateFile, TAKE1, "SSL Proxy: file containing client certificates " "('/path/to/file' - PEM encoded certificates)") SSL_CMD_PXY(ProxyMachineCertificatePath, TAKE1, "SSL Proxy: directory containing client certificates " "('/path/to/dir' - contains PEM encoded certificates)") SSL_CMD_PXY(ProxyMachineCertificateChainFile, TAKE1, "SSL Proxy: file containing issuing certificates " "of the client certificate " "(`/path/to/file' - PEM encoded certificates)") SSL_CMD_PXY(ProxyCheckPeerExpire, FLAG, "SSL Proxy: check the peer certificate's expiration date") SSL_CMD_PXY(ProxyCheckPeerCN, FLAG, "SSL Proxy: check the peer certificate's CN") SSL_CMD_PXY(ProxyCheckPeerName, FLAG, "SSL Proxy: check the peer certificate's name " "(must be present in subjectAltName extension or CN") /* * Per-directory context configuration directives */ SSL_CMD_DIR(Options, OPTIONS, RAW_ARGS, "Set one or more options to configure the SSL engine" "('[+-]option[=value] ...' - see manual)") SSL_CMD_DIR(RequireSSL, AUTHCFG, NO_ARGS, "Require the SSL protocol for the per-directory context " "(no arguments)") SSL_CMD_DIR(Require, AUTHCFG, RAW_ARGS, "Require a boolean expression to evaluate to true for granting access" "(arbitrary complex boolean expression - see manual)") SSL_CMD_DIR(RenegBufferSize, AUTHCFG, TAKE1, "Configure the amount of memory that will be used for buffering the " "request body if a per-location SSL renegotiation is required due to " "changed access control requirements") SSL_CMD_SRV(OCSPEnable, RAW_ARGS, "Enable use of OCSP to verify certificate revocation mode ('on', 'leaf', 'off')") SSL_CMD_SRV(OCSPDefaultResponder, TAKE1, "URL of the default OCSP Responder") SSL_CMD_SRV(OCSPOverrideResponder, FLAG, "Force use of the default responder URL ('on', 'off')") SSL_CMD_SRV(OCSPResponseTimeSkew, TAKE1, "Maximum time difference in OCSP responses") SSL_CMD_SRV(OCSPResponseMaxAge, TAKE1, "Maximum age of OCSP responses") SSL_CMD_SRV(OCSPResponderTimeout, TAKE1, "OCSP responder query timeout") SSL_CMD_SRV(OCSPUseRequestNonce, FLAG, "Whether OCSP queries use a nonce or not ('on', 'off')") SSL_CMD_SRV(OCSPProxyURL, TAKE1, "Proxy URL to use for OCSP requests") /* Define OCSP Responder Certificate Verification Directive */ SSL_CMD_SRV(OCSPNoVerify, FLAG, "Do not verify OCSP Responder certificate ('on', 'off')") /* Define OCSP Responder File Configuration Directive */ SSL_CMD_SRV(OCSPResponderCertificateFile, TAKE1, "Trusted OCSP responder certificates" "(`/path/to/file' - PEM encoded certificates)") #ifdef HAVE_OCSP_STAPLING /* * OCSP Stapling options */ SSL_CMD_SRV(StaplingCache, TAKE1, "SSL Stapling Response Cache storage " "(`dbm:/path/to/file')") SSL_CMD_SRV(UseStapling, FLAG, "SSL switch for the OCSP Stapling protocol " "(`on', `off')") SSL_CMD_SRV(StaplingResponseTimeSkew, TAKE1, "SSL stapling option for maximum time difference in OCSP responses") SSL_CMD_SRV(StaplingResponderTimeout, TAKE1, "SSL stapling option for OCSP responder timeout") SSL_CMD_SRV(StaplingResponseMaxAge, TAKE1, "SSL stapling option for maximum age of OCSP responses") SSL_CMD_SRV(StaplingStandardCacheTimeout, TAKE1, "SSL stapling option for normal OCSP Response Cache Lifetime") SSL_CMD_SRV(StaplingReturnResponderErrors, FLAG, "SSL stapling switch to return Status Errors Back to Client" "(`on', `off')") SSL_CMD_SRV(StaplingFakeTryLater, FLAG, "SSL stapling switch to send tryLater response to client on error " "(`on', `off')") SSL_CMD_SRV(StaplingErrorCacheTimeout, TAKE1, "SSL stapling option for OCSP Response Error Cache Lifetime") SSL_CMD_SRV(StaplingForceURL, TAKE1, "SSL stapling option to Force the OCSP Stapling URL") #endif #ifdef HAVE_SSL_CONF_CMD SSL_CMD_SRV(OpenSSLConfCmd, TAKE2, "OpenSSL configuration command") #endif /* Deprecated directives. */ AP_INIT_RAW_ARGS("SSLLog", ap_set_deprecated, NULL, OR_ALL, "SSLLog directive is no longer supported - use ErrorLog."), AP_INIT_RAW_ARGS("SSLLogLevel", ap_set_deprecated, NULL, OR_ALL, "SSLLogLevel directive is no longer supported - use LogLevel."), AP_END_CMD }; /* * the various processing hooks */ static int modssl_is_prelinked(void) { apr_size_t i = 0; const module *mod; while ((mod = ap_prelinked_modules[i++])) { if (strcmp(mod->name, "mod_ssl.c") == 0) { return 1; } } return 0; } static apr_status_t ssl_cleanup_pre_config(void *data) { /* * Try to kill the internals of the SSL library. */ /* Corresponds to OBJ_create()s */ OBJ_cleanup(); /* Corresponds to OPENSSL_load_builtin_modules() */ CONF_modules_free(); /* Corresponds to SSL_library_init: */ EVP_cleanup(); #if HAVE_ENGINE_LOAD_BUILTIN_ENGINES ENGINE_cleanup(); #endif #if OPENSSL_VERSION_NUMBER >= 0x1000200fL #ifndef OPENSSL_NO_COMP SSL_COMP_free_compression_methods(); #endif #endif /* Usually needed per thread, but this parent process is single-threaded */ #if MODSSL_USE_OPENSSL_PRE_1_1_API #if OPENSSL_VERSION_NUMBER >= 0x1000000fL ERR_remove_thread_state(NULL); #else ERR_remove_state(0); #endif #endif /* Don't call ERR_free_strings in earlier versions, ERR_load_*_strings only * actually loaded the error strings once per process due to static * variable abuse in OpenSSL. */ #if (OPENSSL_VERSION_NUMBER >= 0x00090805f) ERR_free_strings(); #endif /* Also don't call CRYPTO_cleanup_all_ex_data when linked statically here; * any registered ex_data indices may have been cached in static variables * in OpenSSL; removing them may cause havoc. Notably, with OpenSSL * versions >= 0.9.8f, COMP_CTX cleanups would not be run, which * could result in a per-connection memory leak (!). */ if (!modssl_running_statically) { CRYPTO_cleanup_all_ex_data(); } /* * TODO: determine somewhere we can safely shove out diagnostics * (when enabled) at this late stage in the game: * CRYPTO_mem_leaks_fp(stderr); */ return APR_SUCCESS; } static int ssl_hook_pre_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { modssl_running_statically = modssl_is_prelinked(); /* Some OpenSSL internals are allocated per-thread, make sure they * are associated to the/our same thread-id until cleaned up. */ #if APR_HAS_THREADS && MODSSL_USE_OPENSSL_PRE_1_1_API ssl_util_thread_id_setup(pconf); #endif /* We must register the library in full, to ensure our configuration * code can successfully test the SSL environment. */ #if MODSSL_USE_OPENSSL_PRE_1_1_API || defined(LIBRESSL_VERSION_NUMBER) (void)CRYPTO_malloc_init(); #else OPENSSL_malloc_init(); #endif ERR_load_crypto_strings(); SSL_load_error_strings(); SSL_library_init(); #if HAVE_ENGINE_LOAD_BUILTIN_ENGINES ENGINE_load_builtin_engines(); #endif OpenSSL_add_all_algorithms(); OPENSSL_load_builtin_modules(); if (OBJ_txt2nid("id-on-dnsSRV") == NID_undef) { (void)OBJ_create("1.3.6.1.5.5.7.8.7", "id-on-dnsSRV", "SRVName otherName form"); } /* Start w/o errors (e.g. OBJ_txt2nid() above) */ ERR_clear_error(); /* * Let us cleanup the ssl library when the module is unloaded */ apr_pool_cleanup_register(pconf, NULL, ssl_cleanup_pre_config, apr_pool_cleanup_null); /* Register us to handle mod_log_config %c/%x variables */ ssl_var_log_config_register(pconf); /* Register to handle mod_status status page generation */ ssl_scache_status_register(pconf); /* Register mutex type names so they can be configured with Mutex */ ap_mutex_register(pconf, SSL_CACHE_MUTEX_TYPE, NULL, APR_LOCK_DEFAULT, 0); #ifdef HAVE_OCSP_STAPLING ap_mutex_register(pconf, SSL_STAPLING_CACHE_MUTEX_TYPE, NULL, APR_LOCK_DEFAULT, 0); ap_mutex_register(pconf, SSL_STAPLING_REFRESH_MUTEX_TYPE, NULL, APR_LOCK_DEFAULT, 0); #endif return OK; } static SSLConnRec *ssl_init_connection_ctx(conn_rec *c, ap_conf_vector_t *per_dir_config, int new_proxy) { SSLConnRec *sslconn = myConnConfig(c); int need_setup = 0; /* mod_proxy's (r->)per_dir_config has the lifetime of the request, thus * it uses ssl_engine_set() to reset sslconn->dc when reusing SSL backend * connections, so we must fall through here. But in the case where we are * called from ssl_init_ssl_connection() with no per_dir_config (which also * includes mod_proxy's later run_pre_connection call), sslconn->dc should * be preserved if it's already set. */ if (!sslconn) { sslconn = apr_pcalloc(c->pool, sizeof(*sslconn)); need_setup = 1; } else if (!new_proxy) { return sslconn; } /* Reinit dc in any case because it may be r->per_dir_config scoped * and thus a caller like mod_proxy needs to update it per request. */ if (per_dir_config) { sslconn->dc = ap_get_module_config(per_dir_config, &ssl_module); } else { sslconn->dc = ap_get_module_config(c->base_server->lookup_defaults, &ssl_module); } if (need_setup) { sslconn->server = c->base_server; sslconn->verify_depth = UNSET; if (new_proxy) { sslconn->is_proxy = 1; sslconn->cipher_suite = sslconn->dc->proxy->auth.cipher_suite; } else { SSLSrvConfigRec *sc = mySrvConfig(c->base_server); sslconn->cipher_suite = sc->server->auth.cipher_suite; } myConnConfigSet(c, sslconn); } return sslconn; } static int ssl_engine_status(conn_rec *c, SSLConnRec *sslconn) { if (c->master) { return DECLINED; } if (sslconn) { if (sslconn->disabled) { return SUSPENDED; } if (sslconn->is_proxy) { if (!sslconn->dc->proxy_enabled) { return DECLINED; } } else { if (mySrvConfig(sslconn->server)->enabled != SSL_ENABLED_TRUE) { return DECLINED; } } } else { if (mySrvConfig(c->base_server)->enabled != SSL_ENABLED_TRUE) { return DECLINED; } } return OK; } static int ssl_engine_set(conn_rec *c, ap_conf_vector_t *per_dir_config, int proxy, int enable) { SSLConnRec *sslconn; int status; if (proxy) { sslconn = ssl_init_connection_ctx(c, per_dir_config, 1); } else { sslconn = myConnConfig(c); } status = ssl_engine_status(c, sslconn); if (proxy && status == DECLINED) { if (enable) { SSLSrvConfigRec *sc = mySrvConfig(sslconn->server); ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(01961) "SSL Proxy requested for %s but not enabled " "[Hint: SSLProxyEngine]", sc->vhost_id); } sslconn->disabled = 1; } else if (sslconn) { sslconn->disabled = !enable; } return status != DECLINED; } static int ssl_proxy_enable(conn_rec *c) { return ssl_engine_set(c, NULL, 1, 1); } static int ssl_engine_disable(conn_rec *c) { return ssl_engine_set(c, NULL, 0, 0); } int ssl_init_ssl_connection(conn_rec *c, request_rec *r) { SSLSrvConfigRec *sc; SSL *ssl; SSLConnRec *sslconn; char *vhost_md5; int rc; modssl_ctx_t *mctx; server_rec *server; /* * Create or retrieve SSL context */ sslconn = ssl_init_connection_ctx(c, r ? r->per_dir_config : NULL, 0); server = sslconn->server; sc = mySrvConfig(server); /* * Seed the Pseudo Random Number Generator (PRNG) */ ssl_rand_seed(server, c->pool, SSL_RSCTX_CONNECT, sslconn->is_proxy ? "Proxy: " : "Server: "); mctx = myCtxConfig(sslconn, sc); /* * Create a new SSL connection with the configured server SSL context and * attach this to the socket. Additionally we register this attachment * so we can detach later. */ if (!(sslconn->ssl = ssl = SSL_new(mctx->ssl_ctx))) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(01962) "Unable to create a new SSL connection from the SSL " "context"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, server); c->aborted = 1; return DECLINED; /* XXX */ } rc = ssl_run_pre_handshake(c, ssl, sslconn->is_proxy ? 1 : 0); if (rc != OK && rc != DECLINED) { return rc; } vhost_md5 = ap_md5_binary(c->pool, (unsigned char *)sc->vhost_id, sc->vhost_id_len); if (!SSL_set_session_id_context(ssl, (unsigned char *)vhost_md5, APR_MD5_DIGESTSIZE*2)) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(01963) "Unable to set session id context to '%s'", vhost_md5); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, server); c->aborted = 1; return DECLINED; /* XXX */ } SSL_set_app_data(ssl, c); modssl_set_app_data2(ssl, NULL); /* will be request_rec */ SSL_set_verify_result(ssl, X509_V_OK); ssl_io_filter_init(c, r, ssl); return APR_SUCCESS; } static const char *ssl_hook_http_scheme(const request_rec *r) { return modssl_request_is_tls(r, NULL) ? "https" : NULL; } static apr_port_t ssl_hook_default_port(const request_rec *r) { return modssl_request_is_tls(r, NULL) ? 443 : 0; } static int ssl_hook_pre_connection(conn_rec *c, void *csd) { SSLSrvConfigRec *sc; SSLConnRec *sslconn = myConnConfig(c); /* * Immediately stop processing if SSL is disabled for this connection */ if (ssl_engine_status(c, sslconn) != OK) { return DECLINED; } if (sslconn) { sc = mySrvConfig(sslconn->server); } else { sc = mySrvConfig(c->base_server); } /* * Remember the connection information for * later access inside callback functions */ ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, c, APLOGNO(01964) "Connection to child %ld established " "(server %s)", c->id, sc->vhost_id); return ssl_init_ssl_connection(c, NULL); } static int ssl_hook_process_connection(conn_rec* c) { SSLConnRec *sslconn = myConnConfig(c); if (sslconn && !sslconn->disabled) { /* On an active SSL connection, let the input filters initialize * themselves which triggers the handshake, which again triggers * all kinds of useful things such as SNI and ALPN. */ apr_bucket_brigade* temp; temp = apr_brigade_create(c->pool, c->bucket_alloc); ap_get_brigade(c->input_filters, temp, AP_MODE_INIT, APR_BLOCK_READ, 0); apr_brigade_destroy(temp); } return DECLINED; } /* * the module registration phase */ static void ssl_register_hooks(apr_pool_t *p) { /* ssl_hook_ReadReq needs to use the BrowserMatch settings so must * run after mod_setenvif's post_read_request hook. */ static const char *pre_prr[] = { "mod_setenvif.c", NULL }; /* The ssl_init_Module post_config hook should run before mod_proxy's * for the ssl proxy main configs to be merged with vhosts' before being * themselves merged with mod_proxy's in proxy_hook_section_post_config. */ static const char *b_pc[] = { "mod_proxy.c", NULL}; ssl_io_filter_register(p); ap_hook_pre_connection(ssl_hook_pre_connection,NULL,NULL, APR_HOOK_MIDDLE); ap_hook_process_connection(ssl_hook_process_connection, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_test_config (ssl_hook_ConfigTest, NULL,NULL, APR_HOOK_MIDDLE); ap_hook_post_config (ssl_init_Module, NULL,b_pc, APR_HOOK_MIDDLE); ap_hook_http_scheme (ssl_hook_http_scheme, NULL,NULL, APR_HOOK_MIDDLE); ap_hook_default_port (ssl_hook_default_port, NULL,NULL, APR_HOOK_MIDDLE); ap_hook_pre_config (ssl_hook_pre_config, NULL,NULL, APR_HOOK_MIDDLE); ap_hook_child_init (ssl_init_Child, NULL,NULL, APR_HOOK_MIDDLE); ap_hook_check_authn (ssl_hook_UserCheck, NULL,NULL, APR_HOOK_FIRST, AP_AUTH_INTERNAL_PER_CONF); ap_hook_fixups (ssl_hook_Fixup, NULL,NULL, APR_HOOK_MIDDLE); ap_hook_check_access (ssl_hook_Access, NULL,NULL, APR_HOOK_MIDDLE, AP_AUTH_INTERNAL_PER_CONF); ap_hook_check_authz (ssl_hook_Auth, NULL,NULL, APR_HOOK_MIDDLE, AP_AUTH_INTERNAL_PER_CONF); ap_hook_post_read_request(ssl_hook_ReadReq, pre_prr,NULL, APR_HOOK_MIDDLE); APR_OPTIONAL_HOOK(proxy, section_post_config, ssl_proxy_section_post_config, NULL, NULL, APR_HOOK_MIDDLE); ssl_var_register(p); APR_REGISTER_OPTIONAL_FN(ssl_proxy_enable); APR_REGISTER_OPTIONAL_FN(ssl_engine_disable); APR_REGISTER_OPTIONAL_FN(ssl_engine_set); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "ssl", AUTHZ_PROVIDER_VERSION, &ssl_authz_provider_require_ssl, AP_AUTH_INTERNAL_PER_CONF); ap_register_auth_provider(p, AUTHZ_PROVIDER_GROUP, "ssl-verify-client", AUTHZ_PROVIDER_VERSION, &ssl_authz_provider_verify_client, AP_AUTH_INTERNAL_PER_CONF); } module AP_MODULE_DECLARE_DATA ssl_module = { STANDARD20_MODULE_STUFF, ssl_config_perdir_create, /* create per-dir config structures */ ssl_config_perdir_merge, /* merge per-dir config structures */ ssl_config_server_create, /* create per-server config structures */ ssl_config_server_merge, /* merge per-server config structures */ ssl_config_cmds, /* table of configuration directives */ ssl_register_hooks /* register hooks */ #if defined(AP_MODULE_HAS_FLAGS) ,AP_MODULE_FLAG_ALWAYS_MERGE /* flags */ #endif }; httpd-2.4.41/modules/ssl/README.dsov.fig0000644000000000000500000003201212602744037016106 0ustar rootsrc#FIG 3.2 Landscape Center Metric Letter 100.00 Single -2 1200 2 0 32 #616561 0 33 #b6b2b6 0 34 #f7f3f7 0 35 #cfcfcf 0 36 #ffffff 6 6345 2835 7155 3150 6 6345 2970 7110 3150 4 0 0 200 0 20 8 0.0000 4 120 585 6345 3105 "ssl_module")\001 -6 4 0 0 200 0 20 8 0.0000 4 120 660 6345 2970 ap_ctx_get(...,\001 -6 6 10800 2610 12240 3060 4 0 0 200 0 20 8 0.0000 4 120 1170 10800 2745 ap_get_module_config(...\001 4 0 0 200 0 20 8 0.0000 4 120 795 10800 2880 ->per_dir_config,\001 4 0 0 200 0 20 8 0.0000 4 120 585 10800 3015 &ssl_module)\001 -6 6 7920 4770 9135 4995 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 9135 4995 7920 4995 7920 4770 9135 4770 9135 4995 4 0 0 100 0 18 12 0.0000 4 180 1065 8010 4950 request_rec\001 -6 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 6975 3330 7425 2520 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 7200 4230 9450 2520 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 7875 4905 7200 5220 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 6750 5130 6750 4545 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 6705 5445 7155 6120 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 7875 4815 7200 4590 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 9585 2565 11475 4230 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 10170 5130 11835 4545 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 7920 6075 9855 5400 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 9990 5445 10935 5625 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 10215 5310 10935 5310 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 11925 4590 11925 5085 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 9810 5490 9810 6840 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 9945 5445 10935 6030 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 8865 4725 10800 2565 2 1 0 3 0 34 200 0 20 0.000 0 0 -1 0 0 2 675 6075 5850 6075 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 675 6525 675 6075 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 0 1.00 60.00 120.00 5850 6075 5850 6525 2 1 0 3 0 34 200 0 20 0.000 0 0 -1 0 0 2 900 5625 5625 5625 2 1 0 3 0 34 200 0 20 0.000 0 0 -1 0 0 2 1125 5175 5400 5175 2 1 0 3 0 34 200 0 20 0.000 0 0 -1 0 0 2 1350 4725 5175 4725 2 1 0 3 0 34 200 0 20 0.000 0 0 -1 0 0 2 1575 4275 4950 4275 2 1 0 3 0 34 200 0 20 0.000 0 0 -1 0 0 2 1800 3825 4725 3825 2 1 0 3 0 34 200 0 20 0.000 0 0 -1 0 0 2 2025 3375 4500 3375 2 1 0 3 0 34 200 0 20 0.000 0 0 -1 0 0 2 2250 2925 4275 2925 2 1 0 3 0 34 200 0 20 0.000 0 0 -1 0 0 2 2475 2475 4050 2475 2 1 0 3 0 34 200 0 20 0.000 0 0 -1 0 0 2 2700 2025 3825 2025 2 1 0 3 0 34 200 0 20 0.000 0 0 -1 0 0 2 2925 1575 3600 1575 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 900 6075 900 5625 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 1125 6525 1125 5175 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 1350 5175 1350 4725 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 1575 4725 1575 4275 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 1800 6525 1800 3825 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 2025 3825 2025 3375 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 2250 3375 2250 2925 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 2475 2925 2475 2475 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 0 1.00 60.00 120.00 5625 5625 5625 6075 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 0 1.00 60.00 120.00 5400 5175 5400 6525 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 0 1.00 60.00 120.00 5175 4725 5175 5175 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 0 1.00 60.00 120.00 4950 4275 4950 4725 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 0 1.00 60.00 120.00 4725 3825 4725 6525 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 0 1.00 60.00 120.00 4500 3375 4500 3825 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 0 1.00 60.00 120.00 4275 2925 4275 3375 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 0 1.00 60.00 120.00 4050 2475 4050 2925 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 2700 6525 2700 2025 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 0 1.00 60.00 120.00 3825 2025 3825 6525 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 0 1.00 60.00 120.00 3600 1575 3600 2025 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 2925 2025 2925 1575 2 1 0 4 0 0 200 0 20 0.000 0 0 -1 1 0 2 1 1 4.00 60.00 120.00 540 6525 6300 6525 2 3 0 1 7 7 800 0 20 0.000 0 0 -1 0 0 9 675 6525 5850 6525 5850 6075 5625 6075 5625 5625 900 5625 900 6075 675 6075 675 6525 2 3 0 1 34 34 700 0 20 0.000 0 0 -1 0 0 13 1125 6525 5355 6525 5400 5175 5175 5175 5175 4725 4950 4725 4950 4275 1575 4275 1575 4725 1350 4725 1350 5175 1125 5175 1125 6525 2 3 0 1 35 35 500 0 20 0.000 0 0 -1 0 0 17 1800 6525 4725 6525 4725 3825 4500 3825 4500 3375 4275 3375 4275 2925 4050 2925 4050 2475 2475 2475 2475 2925 2250 2925 2250 3375 2025 3375 2025 3825 1800 3825 1800 6525 2 3 0 1 33 33 400 0 20 0.000 0 0 -1 0 0 9 2700 6525 3825 6525 3825 2025 3600 2025 3600 1575 2925 1575 2925 2025 2700 2025 2700 6525 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 1 2 2 0 1.00 60.00 120.00 2 0 1.00 60.00 120.00 2700 6750 3825 6750 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 1 2 2 0 1.00 60.00 120.00 2 0 1.00 60.00 120.00 1125 7200 5400 7200 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 1 2 2 0 1.00 60.00 120.00 2 0 1.00 60.00 120.00 1800 6975 4725 6975 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 1 2 2 0 1.00 60.00 120.00 2 0 1.00 60.00 120.00 675 7425 5850 7425 2 1 2 1 0 34 200 0 20 3.000 0 1 -1 0 0 2 675 6570 675 7650 2 1 2 1 0 34 200 0 20 3.000 0 1 -1 0 0 2 1125 6570 1125 7650 2 1 2 1 0 34 200 0 20 3.000 0 1 -1 0 0 2 1800 6570 1800 7650 2 1 2 1 0 34 200 0 20 3.000 0 1 -1 0 0 2 2700 6570 2700 7650 2 1 2 1 0 34 200 0 20 3.000 0 1 -1 0 0 2 3825 6570 3825 7650 2 1 2 1 0 34 200 0 20 3.000 0 1 -1 0 0 2 4725 6570 4725 7650 2 1 2 1 0 34 200 0 20 3.000 0 1 -1 0 0 2 5400 6570 5400 7650 2 1 2 1 0 34 200 0 20 3.000 0 1 -1 0 0 2 5850 6570 5850 7650 2 4 0 2 0 7 100 0 -1 0.000 0 0 20 0 0 5 12600 8550 450 8550 450 225 12600 225 12600 8550 2 4 0 1 0 34 200 0 20 0.000 0 0 20 0 0 5 12600 1350 450 1350 450 225 12600 225 12600 1350 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 10170 2475 8775 2475 8775 2250 10170 2250 10170 2475 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 11925 2475 10575 2475 10575 2250 11925 2250 11925 2475 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 12375 4500 11430 4500 11430 4275 12375 4275 12375 4500 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 12375 5400 10980 5400 10980 5175 12375 5175 12375 5400 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 10170 5400 9675 5400 9675 5175 10170 5175 10170 5400 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 7875 6300 7200 6300 7200 6075 7875 6075 7875 6300 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 8190 2475 6750 2475 6750 2250 8190 2250 8190 2475 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 7605 3600 6300 3600 6300 3375 7605 3375 7605 3600 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 7335 4500 6300 4500 6300 4275 7335 4275 7335 4500 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 7200 5400 6300 5400 6300 5175 7200 5175 7200 5400 2 1 0 6 7 7 600 0 -1 0.000 0 0 -1 0 0 2 9450 4500 6075 1935 2 1 0 6 7 7 600 0 -1 0.000 0 0 4 0 0 2 9450 4500 12465 2205 2 1 0 6 7 7 600 0 -1 0.000 0 0 4 0 0 2 9450 4500 9450 7785 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 9630 5310 7245 5310 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 11385 4365 7380 4365 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 12240 5805 10980 5805 10980 5580 12240 5580 12240 5805 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 12375 6210 10980 6210 10980 5985 12375 5985 12375 6210 2 1 0 1 0 34 200 0 20 0.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 11205 6885 9900 5445 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 12285 7155 10530 7155 10530 6930 12285 6930 12285 7155 2 4 0 1 35 35 200 0 20 0.000 0 0 4 0 0 5 10170 7155 9630 7155 9630 6930 10170 6930 10170 7155 2 1 0 6 7 7 600 0 -1 0.000 0 0 4 0 0 2 12510 6435 9450 6435 2 1 0 1 0 34 300 0 20 0.000 0 0 7 1 0 4 1 1 1.00 60.00 120.00 12375 4455 12510 4635 12510 6210 11970 6885 2 1 2 1 0 34 200 0 20 1.000 0 0 -1 1 0 2 1 1 1.00 60.00 120.00 9850 5143 9175 4918 3 1 0 1 34 34 800 0 20 0.000 0 0 0 41 7380 1710 6390 2115 5535 2115 6075 3015 5670 3465 6165 3915 5715 4410 6030 5040 6030 5310 6480 5715 6390 6255 6975 6300 7065 6975 7965 6750 8100 7560 8955 7290 9360 7740 9720 7560 10755 8145 12060 8280 12375 7650 12420 7200 12510 7065 12330 6660 12510 6390 12420 5940 12375 5400 12510 5220 12510 4725 12600 4275 12375 3645 12105 3240 12150 2745 12375 2700 12330 1980 11790 1575 11250 1935 10125 1485 8955 2070 7785 1620 7695 1575 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 1.000 4 0 0 100 0 0 12 0.0000 4 180 1440 10575 675 Ralf S. Engelschall\001 4 0 0 100 0 18 20 0.0000 4 270 3840 4275 675 Apache+mod_ssl+OpenSSL\001 4 0 0 100 0 0 10 0.0000 4 135 1320 10575 855 rse@engelschall.com\001 4 0 0 100 0 0 10 0.0000 4 135 1410 10575 1035 www.engelschall.com\001 4 0 0 100 0 0 12 0.0000 4 135 870 900 675 Version 1.3\001 4 0 0 100 0 0 12 0.0000 4 180 1035 900 855 12-Apr-1999\001 4 0 0 200 0 20 8 0.0000 4 60 390 6210 4680 ->server\001 4 0 0 200 0 20 8 0.0000 4 120 855 8280 6120 ap_ctx_get(...,"ssl")\001 4 0 0 200 0 20 8 0.0000 4 120 1170 7740 2700 ap_get_module_config(...\001 4 0 0 200 0 20 8 0.0000 4 120 810 7740 2835 ->module_config,\001 4 0 0 200 0 20 8 0.0000 4 120 585 7740 2970 &ssl_module)\001 4 0 0 100 0 18 20 0.0000 4 270 1200 9000 8100 Chaining\001 4 0 0 100 0 18 20 0.0000 4 210 1095 2745 8100 Lifetime\001 4 0 0 100 0 18 12 0.0000 4 180 1215 810 6255 ap_global_ctx\001 4 0 0 100 0 18 12 0.0000 4 180 1305 990 5805 SSLModConfig\001 4 0 0 100 0 18 12 0.0000 4 180 840 4050 4455 SSL_CTX\001 4 0 0 100 0 18 12 0.0000 4 150 975 4455 5355 server_rec\001 4 0 0 100 0 18 12 0.0000 4 180 1260 3870 4905 SSLSrvConfig\001 4 0 0 100 0 18 12 0.0000 4 135 480 1845 4005 BUFF\001 4 0 0 100 0 18 12 0.0000 4 150 810 2070 3555 conn_rec\001 4 0 0 100 0 18 12 0.0000 4 135 345 2295 3105 BIO\001 4 0 0 100 0 18 12 0.0000 4 135 375 2565 2655 SSL\001 4 0 0 100 0 18 12 0.0000 4 180 1185 3645 1620 SSLDirConfig\001 4 0 0 100 0 18 12 0.0000 4 180 1065 3915 2070 request_rec\001 4 0 0 200 0 0 8 0.0000 4 120 1440 900 7560 Startup, Runtime, Shutdown\001 4 0 0 200 0 0 8 0.0000 4 105 975 1350 7335 Configuration Time\001 4 0 0 200 0 0 8 0.0000 4 90 1050 2025 7110 Connection Duration\001 4 0 0 200 0 0 8 0.0000 4 120 885 2835 6885 Request Duration\001 4 0 0 200 0 18 20 0.0000 4 195 90 6345 6795 t\001 4 0 0 200 0 20 8 0.0000 4 90 345 7110 5985 ->client\001 4 0 0 100 0 18 12 0.0000 4 180 1305 6795 2430 SSLModConfig\001 4 0 0 100 0 18 12 0.0000 4 180 1260 8865 2430 SSLSrvConfig\001 4 0 0 100 0 18 12 0.0000 4 180 1215 6345 3555 ap_global_ctx\001 4 0 0 100 0 18 12 0.0000 4 150 975 6345 4455 server_rec\001 4 0 0 100 0 18 12 0.0000 4 150 810 6345 5355 conn_rec\001 4 0 0 100 0 18 12 0.0000 4 135 375 9720 5355 SSL\001 4 0 0 100 0 18 12 0.0000 4 180 1185 10665 2430 SSLDirConfig\001 4 0 0 100 0 18 12 0.0000 4 135 480 7290 6255 BUFF\001 4 0 0 100 0 18 12 0.0000 4 180 1305 11025 5355 SSL_METHOD\001 4 0 0 100 0 18 12 0.0000 4 180 840 11475 4455 SSL_CTX\001 4 0 0 100 0 18 24 0.0000 4 285 4365 3915 1080 Data Structure Overview\001 4 0 0 200 0 20 8 0.0000 4 90 615 7065 5085 ->connection\001 4 0 0 200 0 20 8 0.0000 4 60 390 7065 4770 ->server\001 4 0 0 200 0 20 8 0.0000 4 120 960 8010 5445 SSL_get_app_data()\001 4 0 0 200 0 20 8 0.0000 4 120 510 10530 4050 ->pSSLCtx\001 4 0 0 200 0 20 8 0.0000 4 120 1215 7875 4275 SSL_CTX_get_app_data()\001 4 0 0 200 0 20 8 0.0000 4 120 1155 10305 5535 SSL_get_current_cipher()\001 4 0 0 100 0 18 12 0.0000 4 180 1170 11025 5760 SSL_CIPHER\001 4 0 0 100 0 18 12 0.0000 4 180 1350 10980 6165 SSL_SESSION\001 4 0 0 200 0 20 8 0.0000 4 120 840 10440 5940 SSL_get_session()\001 4 0 0 100 0 18 12 0.0000 4 180 1665 10575 7110 X509_STORE_CTX\001 4 0 0 100 0 18 12 0.0000 4 135 345 9720 7110 BIO\001 4 0 0 200 0 20 8 0.0000 4 120 840 9540 7335 SSL_get_{r,w}bio()\001 4 0 0 100 0 18 20 0.0000 4 270 1170 8730 3465 mod_ssl\001 4 0 0 100 0 18 20 0.0000 4 270 1050 8145 6750 Apache\001 4 0 0 200 0 20 8 0.0000 4 120 945 10125 4680 SSL_get_SSL_CTX()\001 4 0 0 200 0 20 8 0.0000 4 120 1170 10350 5175 SSL_get_SSL_METHOD()\001 4 0 0 200 0 20 8 0.0000 4 90 465 11745 4770 ->method\001 4 0 0 200 0 20 8 0.0000 4 120 1665 9945 6480 X509_STORE_CTX_get_app_data()\001 4 0 0 200 0 20 8 0.0000 4 120 1215 10980 6705 SSL_CTX_get_cert_store()\001 4 0 0 200 0 20 8 0.0000 4 120 1020 8280 5130 modssl_get_app_data2()\001 4 0 0 100 0 18 20 0.0000 4 270 1290 10710 7605 OpenSSL\001 4 0 0 100 0 18 12 0.0000 4 180 720 10710 7785 [Crypto]\001 4 0 0 100 0 18 20 0.0000 4 270 1290 10935 3645 OpenSSL\001 4 0 0 100 0 18 12 0.0000 4 180 495 10935 3825 [SSL]\001 httpd-2.4.41/modules/ssl/ssl_engine_rand.c0000644000000000000500000001317412524644015017014 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * _ __ ___ ___ __| | ___ ___| | mod_ssl * | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL * | | | | | | (_) | (_| | \__ \__ \ | * |_| |_| |_|\___/ \__,_|___|___/___/_| * |_____| * ssl_engine_rand.c * Random Number Generator Seeding */ /* ``The generation of random numbers is too important to be left to chance.'' */ #include "ssl_private.h" /* _________________________________________________________________ ** ** Support for better seeding of SSL library's RNG ** _________________________________________________________________ */ static int ssl_rand_choosenum(int, int); static int ssl_rand_feedfp(apr_pool_t *, apr_file_t *, int); int ssl_rand_seed(server_rec *s, apr_pool_t *p, ssl_rsctx_t nCtx, char *prefix) { SSLModConfigRec *mc; apr_array_header_t *apRandSeed; ssl_randseed_t *pRandSeeds; ssl_randseed_t *pRandSeed; unsigned char stackdata[256]; int nDone; apr_file_t *fp; int i, n, l; mc = myModConfig(s); nDone = 0; apRandSeed = mc->aRandSeed; pRandSeeds = (ssl_randseed_t *)apRandSeed->elts; for (i = 0; i < apRandSeed->nelts; i++) { pRandSeed = &pRandSeeds[i]; if (pRandSeed->nCtx == nCtx) { if (pRandSeed->nSrc == SSL_RSSRC_FILE) { /* * seed in contents of an external file */ if (apr_file_open(&fp, pRandSeed->cpPath, APR_READ, APR_OS_DEFAULT, p) != APR_SUCCESS) continue; nDone += ssl_rand_feedfp(p, fp, pRandSeed->nBytes); apr_file_close(fp); } else if (pRandSeed->nSrc == SSL_RSSRC_EXEC) { const char *cmd = pRandSeed->cpPath; const char **argv = apr_palloc(p, sizeof(char *) * 3); /* * seed in contents generated by an external program */ argv[0] = cmd; argv[1] = apr_itoa(p, pRandSeed->nBytes); argv[2] = NULL; if ((fp = ssl_util_ppopen(s, p, cmd, argv)) == NULL) continue; nDone += ssl_rand_feedfp(p, fp, pRandSeed->nBytes); ssl_util_ppclose(s, p, fp); } #ifdef HAVE_RAND_EGD else if (pRandSeed->nSrc == SSL_RSSRC_EGD) { /* * seed in contents provided by the external * Entropy Gathering Daemon (EGD) */ if ((n = RAND_egd(pRandSeed->cpPath)) == -1) continue; nDone += n; } #endif else if (pRandSeed->nSrc == SSL_RSSRC_BUILTIN) { struct { time_t t; pid_t pid; } my_seed; /* * seed in the current time (usually just 4 bytes) */ my_seed.t = time(NULL); /* * seed in the current process id (usually just 4 bytes) */ my_seed.pid = mc->pid; l = sizeof(my_seed); RAND_seed((unsigned char *)&my_seed, l); nDone += l; /* * seed in some current state of the run-time stack (128 bytes) */ n = ssl_rand_choosenum(0, sizeof(stackdata)-128-1); RAND_seed(stackdata+n, 128); nDone += 128; } } } ap_log_error(APLOG_MARK, APLOG_TRACE2, 0, s, "%sSeeding PRNG with %d bytes of entropy", prefix, nDone); if (RAND_status() == 0) ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(01990) "%sPRNG still contains insufficient entropy!", prefix); return nDone; } #define BUFSIZE 8192 static int ssl_rand_feedfp(apr_pool_t *p, apr_file_t *fp, int nReq) { apr_size_t nDone; unsigned char caBuf[BUFSIZE]; apr_size_t nBuf; apr_size_t nRead; apr_size_t nTodo; nDone = 0; nRead = BUFSIZE; nTodo = nReq; while (1) { if (nReq > 0) nRead = (nTodo < BUFSIZE ? nTodo : BUFSIZE); nBuf = nRead; if (apr_file_read(fp, caBuf, &nBuf) != APR_SUCCESS) break; RAND_seed(caBuf, nBuf); nDone += nBuf; if (nReq > 0) { nTodo -= nBuf; if (nTodo <= 0) break; } } return nDone; } static int ssl_rand_choosenum(int l, int h) { int i; char buf[50]; apr_snprintf(buf, sizeof(buf), "%.0f", (((double)(rand()%RAND_MAX)/RAND_MAX)*(h-l))); i = atoi(buf)+1; if (i < l) i = l; if (i > h) i = h; return i; } httpd-2.4.41/modules/ssl/README0000644000000000000500000001126312757564422014406 0ustar rootsrcSYNOPSIS This Apache module provides strong cryptography for the Apache 2 webserver via the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols by the help of the SSL/TLS implementation library OpenSSL which is based on SSLeay from Eric A. Young and Tim J. Hudson. The mod_ssl package was created in April 1998 by Ralf S. Engelschall and was originally derived from software developed by Ben Laurie for use in the Apache-SSL HTTP server project. The mod_ssl implementation for Apache 1.3 continues to be supported by the modssl project . SOURCES See the top-level LAYOUT file for file descriptions. The source files are written in clean ANSI C and pass the ``gcc -O -g -ggdb3 -Wall -Wshadow -Wpointer-arith -Wcast-align -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -Winline'' compiler test (assuming `gcc' is GCC 2.95.2 or newer) without any complains. When you make changes or additions make sure the source still passes this compiler test. FUNCTIONS Inside the source code you will be confronted with the following types of functions which can be identified by their prefixes: ap_xxxx() ............... Apache API function ssl_xxxx() .............. mod_ssl function SSL_xxxx() .............. OpenSSL function (SSL library) OpenSSL_xxxx() .......... OpenSSL function (SSL library) X509_xxxx() ............. OpenSSL function (Crypto library) PEM_xxxx() .............. OpenSSL function (Crypto library) EVP_xxxx() .............. OpenSSL function (Crypto library) RSA_xxxx() .............. OpenSSL function (Crypto library) DATA STRUCTURES Inside the source code you will be confronted with the following data structures: server_rec .............. Apache (Virtual) Server conn_rec ................ Apache Connection request_rec ............. Apache Request SSLModConfig ............ mod_ssl (Global) Module Configuration SSLSrvConfig ............ mod_ssl (Virtual) Server Configuration SSLDirConfig ............ mod_ssl Directory Configuration SSLConnConfig ........... mod_ssl Connection Configuration SSLFilterRec ............ mod_ssl Filter Context SSL_CTX ................. OpenSSL Context SSL_METHOD .............. OpenSSL Protocol Method SSL_CIPHER .............. OpenSSL Cipher SSL_SESSION ............. OpenSSL Session SSL ..................... OpenSSL Connection BIO ..................... OpenSSL Connection Buffer For an overview how these are related and chained together have a look at the page in README.dsov.{fig,ps}. It contains overview diagrams for those data structures. It's designed for DIN A4 paper size, but you can easily generate a smaller version inside XFig by specifying a magnification on the Export panel. INCOMPATIBILITIES The following intentional incompatibilities exist between mod_ssl 2.x from Apache 1.3 and this mod_ssl version for Apache 2: o The complete EAPI-based SSL_VENDOR stuff was removed. o The complete EAPI-based SSL_COMPAT stuff was removed. o The variable MOD_SSL is no longer provided automatically MAJOR CHANGES For a complete history of changes for Apache 2 mod_ssl, see the CHANGES file in the top-level directory. The following is a condensed summary of the major changes were made between mod_ssl 2.x from Apache 1.3 and this mod_ssl version for Apache 2: o The DBM based session cache is now based on APR's DBM API only. o The shared memory based session cache is now based on APR's APIs. o SSL I/O is now implemented in terms of filters rather than BUFF o Eliminated ap_global_ctx. Storing Persistent information in process_rec->pool->user_data. The ssl_pphrase_Handle_CB() and ssl_config_global_* () functions have an extra parameter now - "server_rec *" - which is used to retrieve the SSLModConfigRec. o Properly support restarts, allowing mod_ssl to be added to a server that is already running and to change server certs/keys on restart o Various performance enhancements o proxy support is no longer an "extension", much of the mod_ssl core was re-written (ssl_engine_{init,kernel,config}.c) to be generic so it could be re-used in proxy mode. - the optional function ssl_proxy_enable is provide for mod_proxy to enable proxy support - proxy support now requires 'SSLProxyEngine on' to be configured - proxy now supports SSLProxyCARevocation{Path,File} in addition to the original SSLProxy* directives o per-directory SSLCACertificate{File,Path} is now thread-safe but requires SSL_set_cert_store patch to OpenSSL o the ssl_engine_{ds,ext}.c source files are obsolete and no longer exist TODO See the top-level STATUS file for current efforts and goals. httpd-2.4.41/modules/ssl/ssl_engine_pphrase.c0000644000000000000500000005371413403743120017530 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * _ __ ___ ___ __| | ___ ___| | mod_ssl * | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL * | | | | | | (_) | (_| | \__ \__ \ | * |_| |_| |_|\___/ \__,_|___|___/___/_| * |_____| * ssl_engine_pphrase.c * Pass Phrase Dialog */ /* ``Treat your password like your toothbrush. Don't let anybody else use it, and get a new one every six months.'' -- Clifford Stoll */ #include "ssl_private.h" typedef struct { server_rec *s; apr_pool_t *p; apr_array_header_t *aPassPhrase; int nPassPhraseCur; char *cpPassPhraseCur; int nPassPhraseDialog; int nPassPhraseDialogCur; BOOL bPassPhraseDialogOnce; const char *key_id; const char *pkey_file; } pphrase_cb_arg_t; #ifdef HAVE_ECC static const char *key_types[] = {"RSA", "DSA", "ECC"}; #else static const char *key_types[] = {"RSA", "DSA"}; #endif /* * Return true if the named file exists and is readable */ static apr_status_t exists_and_readable(const char *fname, apr_pool_t *pool, apr_time_t *mtime) { apr_status_t stat; apr_finfo_t sbuf; apr_file_t *fd; if ((stat = apr_stat(&sbuf, fname, APR_FINFO_MIN, pool)) != APR_SUCCESS) return stat; if (sbuf.filetype != APR_REG) return APR_EGENERAL; if ((stat = apr_file_open(&fd, fname, APR_READ, 0, pool)) != APR_SUCCESS) return stat; if (mtime) { *mtime = sbuf.mtime; } apr_file_close(fd); return APR_SUCCESS; } /* * reuse vhost keys for asn1 tables where keys are allocated out * of s->process->pool to prevent "leaking" each time we format * a vhost key. since the key is stored in a table with lifetime * of s->process->pool, the key needs to have the same lifetime. * * XXX: probably seems silly to use a hash table with keys and values * being the same, but it is easier than doing a linear search * and will make it easier to remove keys if needed in the future. * also have the problem with apr_array_header_t that if we * underestimate the number of vhost keys when we apr_array_make(), * the array will get resized when we push past the initial number * of elts. this resizing in the s->process->pool means "leaking" * since apr_array_push() will apr_alloc arr->nalloc * 2 elts, * leaving the original arr->elts to waste. */ static const char *asn1_table_vhost_key(SSLModConfigRec *mc, apr_pool_t *p, const char *id, int i) { /* 'p' pool used here is cleared on restarts (or sooner) */ char *key = apr_psprintf(p, "%s:%d", id, i); void *keyptr = apr_hash_get(mc->tVHostKeys, key, APR_HASH_KEY_STRING); if (!keyptr) { /* make a copy out of s->process->pool */ keyptr = apr_pstrdup(mc->pPool, key); apr_hash_set(mc->tVHostKeys, keyptr, APR_HASH_KEY_STRING, keyptr); } return (char *)keyptr; } /* _________________________________________________________________ ** ** Pass Phrase and Private Key Handling ** _________________________________________________________________ */ #define BUILTIN_DIALOG_BACKOFF 2 #define BUILTIN_DIALOG_RETRIES 5 static apr_file_t *writetty = NULL; static apr_file_t *readtty = NULL; int ssl_pphrase_Handle_CB(char *, int, int, void *); static char *pphrase_array_get(apr_array_header_t *arr, int idx) { if ((idx < 0) || (idx >= arr->nelts)) { return NULL; } return ((char **)arr->elts)[idx]; } apr_status_t ssl_load_encrypted_pkey(server_rec *s, apr_pool_t *p, int idx, const char *pkey_file, apr_array_header_t **pphrases) { SSLModConfigRec *mc = myModConfig(s); SSLSrvConfigRec *sc = mySrvConfig(s); const char *key_id = asn1_table_vhost_key(mc, p, sc->vhost_id, idx); EVP_PKEY *pPrivateKey = NULL; ssl_asn1_t *asn1; unsigned char *ucp; long int length; int nPassPhrase = (*pphrases)->nelts; int nPassPhraseRetry = 0; apr_time_t pkey_mtime = 0; apr_status_t rv; pphrase_cb_arg_t ppcb_arg; if (!pkey_file) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02573) "Init: No private key specified for %s", key_id); return ssl_die(s); } else if ((rv = exists_and_readable(pkey_file, p, &pkey_mtime)) != APR_SUCCESS ) { ap_log_error(APLOG_MARK, APLOG_EMERG, rv, s, APLOGNO(02574) "Init: Can't open server private key file %s", pkey_file); return ssl_die(s); } ppcb_arg.s = s; ppcb_arg.p = p; ppcb_arg.aPassPhrase = *pphrases; ppcb_arg.nPassPhraseCur = 0; ppcb_arg.cpPassPhraseCur = NULL; ppcb_arg.nPassPhraseDialog = 0; ppcb_arg.nPassPhraseDialogCur = 0; ppcb_arg.bPassPhraseDialogOnce = TRUE; ppcb_arg.key_id = key_id; ppcb_arg.pkey_file = pkey_file; /* * if the private key is encrypted and SSLPassPhraseDialog * is configured to "builtin" it isn't possible to prompt for * a password after httpd has detached from the tty. * in this case if we already have a private key and the * file name/mtime hasn't changed, then reuse the existing key. * we also reuse existing private keys that were encrypted for * exec: and pipe: dialogs to minimize chances to snoop the * password. that and pipe: dialogs might prompt the user * for password, which on win32 for example could happen 4 * times at startup. twice for each child and twice within * each since apache "restarts itself" on startup. * of course this will not work for the builtin dialog if * the server was started without LoadModule ssl_module * configured, then restarted with it configured. * but we fall through with a chance of success if the key * is not encrypted or can be handled via exec or pipe dialog. * and in the case of fallthrough, pkey_mtime and isatty() * are used to give a better idea as to what failed. */ if (pkey_mtime) { ssl_asn1_t *asn1 = ssl_asn1_table_get(mc->tPrivateKey, key_id); if (asn1 && (asn1->source_mtime == pkey_mtime)) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(02575) "Reusing existing private key from %s on restart", ppcb_arg.pkey_file); return APR_SUCCESS; } } ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(02576) "Attempting to load encrypted (?) private key %s", key_id); for (;;) { /* * Try to read the private key file with the help of * the callback function which serves the pass * phrases to OpenSSL */ ppcb_arg.cpPassPhraseCur = NULL; /* Ensure that the error stack is empty; some SSL * functions will fail spuriously if the error stack * is not empty. */ ERR_clear_error(); pPrivateKey = modssl_read_privatekey(ppcb_arg.pkey_file, NULL, ssl_pphrase_Handle_CB, &ppcb_arg); /* If the private key was successfully read, nothing more to do here. */ if (pPrivateKey != NULL) break; /* * when we have more remembered pass phrases * try to reuse these first. */ if (ppcb_arg.nPassPhraseCur < nPassPhrase) { ppcb_arg.nPassPhraseCur++; continue; } /* * else it's not readable and we have no more * remembered pass phrases. Then this has to mean * that the callback function popped up the dialog * but a wrong pass phrase was entered. We give the * user (but not the dialog program) a few more * chances... */ #ifndef WIN32 if ((sc->server->pphrase_dialog_type == SSL_PPTYPE_BUILTIN || sc->server->pphrase_dialog_type == SSL_PPTYPE_PIPE) #else if (sc->server->pphrase_dialog_type == SSL_PPTYPE_PIPE #endif && ppcb_arg.cpPassPhraseCur != NULL && nPassPhraseRetry < BUILTIN_DIALOG_RETRIES ) { apr_file_printf(writetty, "Apache:mod_ssl:Error: Pass phrase incorrect " "(%d more retr%s permitted).\n", (BUILTIN_DIALOG_RETRIES-nPassPhraseRetry), (BUILTIN_DIALOG_RETRIES-nPassPhraseRetry) == 1 ? "y" : "ies"); nPassPhraseRetry++; if (nPassPhraseRetry > BUILTIN_DIALOG_BACKOFF) apr_sleep((nPassPhraseRetry-BUILTIN_DIALOG_BACKOFF) * 5 * APR_USEC_PER_SEC); continue; } #ifdef WIN32 if (sc->server->pphrase_dialog_type == SSL_PPTYPE_BUILTIN) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02577) "Init: SSLPassPhraseDialog builtin is not " "supported on Win32 (key file " "%s)", ppcb_arg.pkey_file); return ssl_die(s); } #endif /* WIN32 */ /* * Ok, anything else now means a fatal error. */ if (ppcb_arg.cpPassPhraseCur == NULL) { if (ppcb_arg.nPassPhraseDialogCur && pkey_mtime && !isatty(fileno(stdout))) /* XXX: apr_isatty() */ { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(02578) "Init: Unable to read pass phrase " "[Hint: key introduced or changed " "before restart?]"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, s); } else { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(02579) "Init: Private key not found"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, s); } if (writetty) { apr_file_printf(writetty, "Apache:mod_ssl:Error: Private key not found.\n"); apr_file_printf(writetty, "**Stopped\n"); } } else { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02580) "Init: Pass phrase incorrect for key %s", key_id); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); if (writetty) { apr_file_printf(writetty, "Apache:mod_ssl:Error: Pass phrase incorrect.\n"); apr_file_printf(writetty, "**Stopped\n"); } } return ssl_die(s); } if (pPrivateKey == NULL) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(02581) "Init: Unable to read server private key from file %s", ppcb_arg.pkey_file); ssl_log_ssl_error(SSLLOG_MARK, APLOG_EMERG, s); return ssl_die(s); } /* * Log the type of reading */ if (ppcb_arg.nPassPhraseDialogCur == 0) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02582) "unencrypted %s private key - pass phrase not " "required", key_id); } else { if (ppcb_arg.cpPassPhraseCur != NULL) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02583) "encrypted %s private key - pass phrase " "requested", key_id); } else { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02584) "encrypted %s private key - pass phrase" " reused", key_id); } } /* * Ok, when we have one more pass phrase store it */ if (ppcb_arg.cpPassPhraseCur != NULL) { *(const char **)apr_array_push(ppcb_arg.aPassPhrase) = ppcb_arg.cpPassPhraseCur; nPassPhrase++; } /* * Insert private key into the global module configuration * (we convert it to a stand-alone DER byte sequence * because the SSL library uses static variables inside a * RSA structure which do not survive DSO reloads!) */ length = i2d_PrivateKey(pPrivateKey, NULL); ucp = ssl_asn1_table_set(mc->tPrivateKey, key_id, length); (void)i2d_PrivateKey(pPrivateKey, &ucp); /* 2nd arg increments */ if (ppcb_arg.nPassPhraseDialogCur != 0) { /* remember mtime of encrypted keys */ asn1 = ssl_asn1_table_get(mc->tPrivateKey, key_id); asn1->source_mtime = pkey_mtime; } /* * Free the private key structure */ EVP_PKEY_free(pPrivateKey); /* * Let the user know when we're successful. */ if ((ppcb_arg.nPassPhraseDialog > 0) && (ppcb_arg.cpPassPhraseCur != NULL)) { if (writetty) { apr_file_printf(writetty, "\n" "OK: Pass Phrase Dialog successful.\n"); } } /* Close the pipes if they were opened */ if (readtty) { apr_file_close(readtty); apr_file_close(writetty); readtty = writetty = NULL; } return APR_SUCCESS; } static apr_status_t ssl_pipe_child_create(apr_pool_t *p, const char *progname) { /* Child process code for 'ErrorLog "|..."'; * may want a common framework for this, since I expect it will * be common for other foo-loggers to want this sort of thing... */ apr_status_t rc; apr_procattr_t *procattr; apr_proc_t *procnew; if (((rc = apr_procattr_create(&procattr, p)) == APR_SUCCESS) && ((rc = apr_procattr_io_set(procattr, APR_FULL_BLOCK, APR_FULL_BLOCK, APR_NO_PIPE)) == APR_SUCCESS)) { char **args; apr_tokenize_to_argv(progname, &args, p); procnew = (apr_proc_t *)apr_pcalloc(p, sizeof(*procnew)); rc = apr_proc_create(procnew, args[0], (const char * const *)args, NULL, procattr, p); if (rc == APR_SUCCESS) { /* XXX: not sure if we aught to... * apr_pool_note_subprocess(p, procnew, APR_KILL_AFTER_TIMEOUT); */ writetty = procnew->in; readtty = procnew->out; } } return rc; } static int pipe_get_passwd_cb(char *buf, int length, char *prompt, int verify) { apr_status_t rc; char *p; apr_file_puts(prompt, writetty); buf[0]='\0'; rc = apr_file_gets(buf, length, readtty); apr_file_puts(APR_EOL_STR, writetty); if (rc != APR_SUCCESS || apr_file_eof(readtty)) { memset(buf, 0, length); return 1; /* failure */ } if ((p = strchr(buf, '\n')) != NULL) { *p = '\0'; } #ifdef WIN32 /* XXX: apr_sometest */ if ((p = strchr(buf, '\r')) != NULL) { *p = '\0'; } #endif return 0; } int ssl_pphrase_Handle_CB(char *buf, int bufsize, int verify, void *srv) { pphrase_cb_arg_t *ppcb_arg = (pphrase_cb_arg_t *)srv; SSLSrvConfigRec *sc = mySrvConfig(ppcb_arg->s); char *cpp; int len = -1; ppcb_arg->nPassPhraseDialog++; ppcb_arg->nPassPhraseDialogCur++; /* * When remembered pass phrases are available use them... */ if ((cpp = pphrase_array_get(ppcb_arg->aPassPhrase, ppcb_arg->nPassPhraseCur)) != NULL) { apr_cpystrn(buf, cpp, bufsize); len = strlen(buf); return len; } /* * Builtin or Pipe dialog */ if (sc->server->pphrase_dialog_type == SSL_PPTYPE_BUILTIN || sc->server->pphrase_dialog_type == SSL_PPTYPE_PIPE) { char *prompt; int i; if (sc->server->pphrase_dialog_type == SSL_PPTYPE_PIPE) { if (!readtty) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, ppcb_arg->s, APLOGNO(01965) "Init: Creating pass phrase dialog pipe child " "'%s'", sc->server->pphrase_dialog_path); if (ssl_pipe_child_create(ppcb_arg->p, sc->server->pphrase_dialog_path) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ppcb_arg->s, APLOGNO(01966) "Init: Failed to create pass phrase pipe '%s'", sc->server->pphrase_dialog_path); PEMerr(PEM_F_PEM_DEF_CALLBACK, PEM_R_PROBLEMS_GETTING_PASSWORD); memset(buf, 0, (unsigned int)bufsize); return (-1); } } ap_log_error(APLOG_MARK, APLOG_INFO, 0, ppcb_arg->s, APLOGNO(01967) "Init: Requesting pass phrase via piped dialog"); } else { /* sc->server->pphrase_dialog_type == SSL_PPTYPE_BUILTIN */ #ifdef WIN32 PEMerr(PEM_F_PEM_DEF_CALLBACK, PEM_R_PROBLEMS_GETTING_PASSWORD); memset(buf, 0, (unsigned int)bufsize); return (-1); #else /* * stderr has already been redirected to the error_log. * rather than attempting to temporarily rehook it to the terminal, * we print the prompt to stdout before EVP_read_pw_string turns * off tty echo */ apr_file_open_stdout(&writetty, ppcb_arg->p); ap_log_error(APLOG_MARK, APLOG_INFO, 0, ppcb_arg->s, APLOGNO(01968) "Init: Requesting pass phrase via builtin terminal " "dialog"); #endif } /* * The first time display a header to inform the user about what * program he actually speaks to, which module is responsible for * this terminal dialog and why to the hell he has to enter * something... */ if (ppcb_arg->nPassPhraseDialog == 1) { apr_file_printf(writetty, "%s mod_ssl (Pass Phrase Dialog)\n", AP_SERVER_BASEVERSION); apr_file_printf(writetty, "Some of your private key files are encrypted for security reasons.\n"); apr_file_printf(writetty, "In order to read them you have to provide the pass phrases.\n"); } if (ppcb_arg->bPassPhraseDialogOnce) { ppcb_arg->bPassPhraseDialogOnce = FALSE; apr_file_printf(writetty, "\n"); apr_file_printf(writetty, "Private key %s (%s)\n", ppcb_arg->key_id, ppcb_arg->pkey_file); } /* * Emulate the OpenSSL internal pass phrase dialog * (see crypto/pem/pem_lib.c:def_callback() for details) */ prompt = "Enter pass phrase:"; for (;;) { apr_file_puts(prompt, writetty); if (sc->server->pphrase_dialog_type == SSL_PPTYPE_PIPE) { i = pipe_get_passwd_cb(buf, bufsize, "", FALSE); } else { /* sc->server->pphrase_dialog_type == SSL_PPTYPE_BUILTIN */ i = EVP_read_pw_string(buf, bufsize, "", FALSE); } if (i != 0) { PEMerr(PEM_F_PEM_DEF_CALLBACK,PEM_R_PROBLEMS_GETTING_PASSWORD); memset(buf, 0, (unsigned int)bufsize); return (-1); } len = strlen(buf); if (len < 1) apr_file_printf(writetty, "Apache:mod_ssl:Error: Pass phrase empty (needs to be at least 1 character).\n"); else break; } } /* * Filter program */ else if (sc->server->pphrase_dialog_type == SSL_PPTYPE_FILTER) { const char *cmd = sc->server->pphrase_dialog_path; const char **argv = apr_palloc(ppcb_arg->p, sizeof(char *) * 4); const char *idx = ap_strrchr_c(ppcb_arg->key_id, ':') + 1; char *result; int i; ap_log_error(APLOG_MARK, APLOG_INFO, 0, ppcb_arg->s, APLOGNO(01969) "Init: Requesting pass phrase from dialog filter " "program (%s)", cmd); argv[0] = cmd; argv[1] = apr_pstrndup(ppcb_arg->p, ppcb_arg->key_id, idx-1 - ppcb_arg->key_id); if ((i = atoi(idx)) < CERTKEYS_IDX_MAX+1) { /* * For compatibility with existing 2.4.x configurations, use * "RSA", "DSA" and "ECC" strings for the first two/three keys */ argv[2] = key_types[i]; } else { /* Four and above: use the integer index */ argv[2] = apr_pstrdup(ppcb_arg->p, idx); } argv[3] = NULL; result = ssl_util_readfilter(ppcb_arg->s, ppcb_arg->p, cmd, argv); apr_cpystrn(buf, result, bufsize); len = strlen(buf); } /* * Ok, we now have the pass phrase, so give it back */ ppcb_arg->cpPassPhraseCur = apr_pstrdup(ppcb_arg->p, buf); /* * And return its length to OpenSSL... */ return (len); } httpd-2.4.41/modules/ssl/ssl_engine_mutex.c0000644000000000000500000000716411667005541017236 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * _ __ ___ ___ __| | ___ ___| | mod_ssl * | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL * | | | | | | (_) | (_| | \__ \__ \ | * |_| |_| |_|\___/ \__,_|___|___/___/_| * |_____| * ssl_engine_mutex.c * Semaphore for Mutual Exclusion */ /* ``Real programmers confuse Christmas and Halloween because DEC 25 = OCT 31.'' -- Unknown */ #include "ssl_private.h" int ssl_mutex_init(server_rec *s, apr_pool_t *p) { SSLModConfigRec *mc = myModConfig(s); apr_status_t rv; /* A mutex is only needed if a session cache is configured, and * the provider used is not internally multi-process/thread * safe. */ if (!mc->sesscache || (mc->sesscache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) == 0) { return TRUE; } if (mc->pMutex) { return TRUE; } if ((rv = ap_global_mutex_create(&mc->pMutex, NULL, SSL_CACHE_MUTEX_TYPE, NULL, s, s->process->pool, 0)) != APR_SUCCESS) { return FALSE; } return TRUE; } int ssl_mutex_reinit(server_rec *s, apr_pool_t *p) { SSLModConfigRec *mc = myModConfig(s); apr_status_t rv; const char *lockfile; if (mc->pMutex == NULL || !mc->sesscache || (mc->sesscache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) == 0) { return TRUE; } lockfile = apr_global_mutex_lockfile(mc->pMutex); if ((rv = apr_global_mutex_child_init(&mc->pMutex, lockfile, p)) != APR_SUCCESS) { if (lockfile) ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(02024) "Cannot reinit %s mutex with file `%s'", SSL_CACHE_MUTEX_TYPE, lockfile); else ap_log_error(APLOG_MARK, APLOG_WARNING, rv, s, APLOGNO(02025) "Cannot reinit %s mutex", SSL_CACHE_MUTEX_TYPE); return FALSE; } return TRUE; } int ssl_mutex_on(server_rec *s) { SSLModConfigRec *mc = myModConfig(s); apr_status_t rv; if ((rv = apr_global_mutex_lock(mc->pMutex)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, s, APLOGNO(02026) "Failed to acquire SSL session cache lock"); return FALSE; } return TRUE; } int ssl_mutex_off(server_rec *s) { SSLModConfigRec *mc = myModConfig(s); apr_status_t rv; if ((rv = apr_global_mutex_unlock(mc->pMutex)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, s, APLOGNO(02027) "Failed to release SSL session cache lock"); return FALSE; } return TRUE; } httpd-2.4.41/modules/ssl/ssl_util_stapling.c0000644000000000000500000007711513523025457017431 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * _ __ ___ ___ __| | ___ ___| | mod_ssl * | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL * | | | | | | (_) | (_| | \__ \__ \ | * |_| |_| |_|\___/ \__,_|___|___/___/_| * |_____| * ssl_stapling.c * OCSP Stapling Support */ /* ``Where's the spoons? Where's the spoons? Where's the bloody spoons?'' -- Alexei Sayle */ #include "ssl_private.h" #include "ap_mpm.h" #include "apr_thread_mutex.h" #include "mod_ssl_openssl.h" APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(ssl, SSL, int, init_stapling_status, (server_rec *s, apr_pool_t *p, X509 *cert, X509 *issuer), (s, p, cert, issuer), DECLINED, DECLINED) APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(ssl, SSL, int, get_stapling_status, (unsigned char **pder, int *pderlen, conn_rec *c, server_rec *s, X509 *cert), (pder, pderlen, c, s, cert), DECLINED, DECLINED) #ifdef HAVE_OCSP_STAPLING static int stapling_cache_mutex_on(server_rec *s); static int stapling_cache_mutex_off(server_rec *s); static int stapling_cb(SSL *ssl, void *arg); /** * Maxiumum OCSP stapling response size. This should be the response for a * single certificate and will typically include the responder certificate chain * so 10K should be more than enough. * */ #define MAX_STAPLING_DER 10240 /* Cached info stored in the global stapling_certinfo hash. */ typedef struct { /* Index in session cache (SHA-1 digest of DER encoded certificate) */ UCHAR idx[SHA_DIGEST_LENGTH]; /* Certificate ID for OCSP request */ OCSP_CERTID *cid; /* URI of the OCSP responder */ char *uri; } certinfo; static apr_status_t ssl_stapling_certid_free(void *data) { OCSP_CERTID *cid = data; if (cid) { OCSP_CERTID_free(cid); } return APR_SUCCESS; } static apr_hash_t *stapling_certinfo; void ssl_stapling_certinfo_hash_init(apr_pool_t *p) { stapling_certinfo = apr_hash_make(p); } static X509 *stapling_get_issuer(modssl_ctx_t *mctx, X509 *x) { X509 *issuer = NULL; int i; X509_STORE *st = SSL_CTX_get_cert_store(mctx->ssl_ctx); X509_STORE_CTX *inctx; STACK_OF(X509) *extra_certs = NULL; #ifdef OPENSSL_NO_SSL_INTERN SSL_CTX_get_extra_chain_certs(mctx->ssl_ctx, &extra_certs); #else extra_certs = mctx->ssl_ctx->extra_certs; #endif for (i = 0; i < sk_X509_num(extra_certs); i++) { issuer = sk_X509_value(extra_certs, i); if (X509_check_issued(issuer, x) == X509_V_OK) { #if OPENSSL_VERSION_NUMBER < 0x10100000L CRYPTO_add(&issuer->references, 1, CRYPTO_LOCK_X509); #else X509_up_ref(issuer); #endif return issuer; } } inctx = X509_STORE_CTX_new(); if (!X509_STORE_CTX_init(inctx, st, NULL, NULL)) return 0; if (X509_STORE_CTX_get1_issuer(&issuer, inctx, x) <= 0) issuer = NULL; X509_STORE_CTX_cleanup(inctx); X509_STORE_CTX_free(inctx); return issuer; } int ssl_stapling_init_cert(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *mctx, X509 *x) { UCHAR idx[SHA_DIGEST_LENGTH]; certinfo *cinf = NULL; X509 *issuer = NULL; OCSP_CERTID *cid = NULL; STACK_OF(OPENSSL_STRING) *aia = NULL; if (x == NULL) return 0; if (!(issuer = stapling_get_issuer(mctx, x))) { /* In Apache pre 2.4.40, we use to come here only when mod_ssl stapling * was enabled. With the new hooks, we give other modules the chance * to provide stapling status. However, we do not want to log ssl errors * where we did not do so in the past. */ if (mctx->stapling_enabled == TRUE) { ssl_log_xerror(SSLLOG_MARK, APLOG_ERR, 0, ptemp, s, x, APLOGNO(02217) "ssl_stapling_init_cert: can't retrieve issuer " "certificate!"); return 0; } return 1; } if (ssl_run_init_stapling_status(s, p, x, issuer) == APR_SUCCESS) { /* Someone's taken over or mod_ssl's own implementation is not enabled */ if (mctx->stapling_enabled != TRUE) { SSL_CTX_set_tlsext_status_cb(mctx->ssl_ctx, stapling_cb); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(10177) "OCSP stapling added via hook"); } return 1; } if (mctx->stapling_enabled != TRUE) { /* mod_ssl's own implementation is not enabled */ return 1; } if (X509_digest(x, EVP_sha1(), idx, NULL) != 1) return 0; cinf = apr_hash_get(stapling_certinfo, idx, sizeof(idx)); if (cinf) { /* * We already parsed the certificate, and no OCSP URI was found. * The certificate might be used for multiple vhosts, though, * so we check for a ForceURL for this vhost. */ if (!cinf->uri && !mctx->stapling_force_url) { ssl_log_xerror(SSLLOG_MARK, APLOG_ERR, 0, ptemp, s, x, APLOGNO(02814) "ssl_stapling_init_cert: no OCSP URI " "in certificate and no SSLStaplingForceURL " "configured for server %s", mctx->sc->vhost_id); return 0; } return 1; } cid = OCSP_cert_to_id(NULL, x, issuer); X509_free(issuer); if (!cid) { ssl_log_xerror(SSLLOG_MARK, APLOG_ERR, 0, ptemp, s, x, APLOGNO(02815) "ssl_stapling_init_cert: can't create CertID " "for OCSP request"); return 0; } aia = X509_get1_ocsp(x); if (!aia && !mctx->stapling_force_url) { OCSP_CERTID_free(cid); ssl_log_xerror(SSLLOG_MARK, APLOG_ERR, 0, ptemp, s, x, APLOGNO(02218) "ssl_stapling_init_cert: no OCSP URI " "in certificate and no SSLStaplingForceURL set"); return 0; } /* At this point, we have determined that there's something to store */ cinf = apr_pcalloc(p, sizeof(certinfo)); memcpy (cinf->idx, idx, sizeof(idx)); cinf->cid = cid; /* make sure cid is also freed at pool cleanup */ apr_pool_cleanup_register(p, cid, ssl_stapling_certid_free, apr_pool_cleanup_null); if (aia) { /* allocate uri from the pconf pool */ cinf->uri = apr_pstrdup(p, sk_OPENSSL_STRING_value(aia, 0)); X509_email_free(aia); } ssl_log_xerror(SSLLOG_MARK, APLOG_TRACE1, 0, ptemp, s, x, "ssl_stapling_init_cert: storing certinfo for server %s", mctx->sc->vhost_id); apr_hash_set(stapling_certinfo, cinf->idx, sizeof(cinf->idx), cinf); return 1; } static certinfo *stapling_get_certinfo(server_rec *s, X509 *x, modssl_ctx_t *mctx, SSL *ssl) { certinfo *cinf; UCHAR idx[SHA_DIGEST_LENGTH]; if (X509_digest(x, EVP_sha1(), idx, NULL) != 1) return NULL; cinf = apr_hash_get(stapling_certinfo, idx, sizeof(idx)); if (cinf && cinf->cid) return cinf; ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(01926) "stapling_get_certinfo: stapling not supported for certificate"); return NULL; } /* * OCSP response caching code. The response is preceded by a flag value * which indicates whether the response was invalid when it was stored. * the purpose of this flag is to avoid repeated queries to a server * which has given an invalid response while allowing a response which * has subsequently become invalid to be retried immediately. * * The key for the cache is the hash of the certificate the response * is for. */ static BOOL stapling_cache_response(server_rec *s, modssl_ctx_t *mctx, OCSP_RESPONSE *rsp, certinfo *cinf, BOOL ok, apr_pool_t *pool) { SSLModConfigRec *mc = myModConfig(s); unsigned char resp_der[MAX_STAPLING_DER]; /* includes one-byte flag + response */ unsigned char *p; int resp_derlen, stored_len; BOOL rv; apr_time_t expiry; resp_derlen = i2d_OCSP_RESPONSE(rsp, NULL); if (resp_derlen <= 0) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01927) "OCSP stapling response encode error??"); return FALSE; } stored_len = resp_derlen + 1; /* response + ok flag */ if (stored_len > sizeof resp_der) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01928) "OCSP stapling response too big (%u bytes)", resp_derlen); return FALSE; } p = resp_der; /* TODO: potential optimization; _timeout members as apr_interval_time_t */ if (ok == TRUE) { *p++ = 1; expiry = apr_time_from_sec(mctx->stapling_cache_timeout); } else { *p++ = 0; expiry = apr_time_from_sec(mctx->stapling_errcache_timeout); } expiry += apr_time_now(); i2d_OCSP_RESPONSE(rsp, &p); if (mc->stapling_cache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) stapling_cache_mutex_on(s); rv = mc->stapling_cache->store(mc->stapling_cache_context, s, cinf->idx, sizeof(cinf->idx), expiry, resp_der, stored_len, pool); if (mc->stapling_cache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) stapling_cache_mutex_off(s); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01929) "stapling_cache_response: OCSP response session store error!"); return FALSE; } return TRUE; } static void stapling_get_cached_response(server_rec *s, OCSP_RESPONSE **prsp, BOOL *pok, certinfo *cinf, apr_pool_t *pool) { SSLModConfigRec *mc = myModConfig(s); apr_status_t rv; OCSP_RESPONSE *rsp; unsigned char resp_der[MAX_STAPLING_DER]; const unsigned char *p; unsigned int resp_derlen = MAX_STAPLING_DER; if (mc->stapling_cache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) stapling_cache_mutex_on(s); rv = mc->stapling_cache->retrieve(mc->stapling_cache_context, s, cinf->idx, sizeof(cinf->idx), resp_der, &resp_derlen, pool); if (mc->stapling_cache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) stapling_cache_mutex_off(s); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01930) "stapling_get_cached_response: cache miss"); return; } if (resp_derlen <= 1) { /* should-not-occur; must have at least valid-when-stored flag + * OCSPResponseStatus */ ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01931) "stapling_get_cached_response: response length invalid??"); return; } p = resp_der; if (*p) /* valid when stored */ *pok = TRUE; else *pok = FALSE; p++; resp_derlen--; rsp = d2i_OCSP_RESPONSE(NULL, &p, resp_derlen); if (!rsp) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01932) "stapling_get_cached_response: response parse error??"); return; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01933) "stapling_get_cached_response: cache hit"); *prsp = rsp; } static int stapling_set_response(SSL *ssl, OCSP_RESPONSE *rsp) { int rspderlen; unsigned char *rspder = NULL; rspderlen = i2d_OCSP_RESPONSE(rsp, &rspder); if (rspderlen <= 0) return 0; SSL_set_tlsext_status_ocsp_resp(ssl, rspder, rspderlen); return 1; } static int stapling_check_response(server_rec *s, modssl_ctx_t *mctx, certinfo *cinf, OCSP_RESPONSE *rsp, BOOL *pok) { int status = V_OCSP_CERTSTATUS_UNKNOWN; int reason = OCSP_REVOKED_STATUS_NOSTATUS; OCSP_BASICRESP *bs = NULL; ASN1_GENERALIZEDTIME *rev, *thisupd, *nextupd; int response_status = OCSP_response_status(rsp); int rv = SSL_TLSEXT_ERR_OK; if (pok) *pok = FALSE; /* Check to see if response is an error. If so we automatically accept * it because it would have expired from the cache if it was time to * retry. */ if (response_status != OCSP_RESPONSE_STATUS_SUCCESSFUL) { if (mctx->stapling_return_errors) return SSL_TLSEXT_ERR_OK; else return SSL_TLSEXT_ERR_NOACK; } bs = OCSP_response_get1_basic(rsp); if (bs == NULL) { /* If we can't parse response just pass it to client */ ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01934) "stapling_check_response: Error Parsing Response!"); return SSL_TLSEXT_ERR_OK; } if (!OCSP_resp_find_status(bs, cinf->cid, &status, &reason, &rev, &thisupd, &nextupd)) { /* If ID not present pass back to client (if configured so) */ ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01935) "stapling_check_response: certificate ID not present in response!"); if (mctx->stapling_return_errors == FALSE) rv = SSL_TLSEXT_ERR_NOACK; } else { if (OCSP_check_validity(thisupd, nextupd, mctx->stapling_resptime_skew, mctx->stapling_resp_maxage)) { if (pok) *pok = TRUE; } else { /* If pok is not NULL response was direct from a responder and * the times should be valide. If pok is NULL the response was * retrieved from cache and it is expected to subsequently expire */ if (pok) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01936) "stapling_check_response: response times invalid"); } else { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01937) "stapling_check_response: cached response expired"); } rv = SSL_TLSEXT_ERR_NOACK; } if (status != V_OCSP_CERTSTATUS_GOOD) { char snum[MAX_STRING_LEN] = { '\0' }; BIO *bio = BIO_new(BIO_s_mem()); if (bio) { int n; ASN1_INTEGER *pserial; OCSP_id_get0_info(NULL, NULL, NULL, &pserial, cinf->cid); if ((i2a_ASN1_INTEGER(bio, pserial) != -1) && ((n = BIO_read(bio, snum, sizeof snum - 1)) > 0)) snum[n] = '\0'; BIO_free(bio); } ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(02969) "stapling_check_response: response has certificate " "status %s (reason: %s) for serial number %s", OCSP_cert_status_str(status), (reason != OCSP_REVOKED_STATUS_NOSTATUS) ? OCSP_crl_reason_str(reason) : "n/a", snum[0] ? snum : "[n/a]"); if (mctx->stapling_return_errors == FALSE) { if (pok) *pok = FALSE; rv = SSL_TLSEXT_ERR_NOACK; } } } OCSP_BASICRESP_free(bs); return rv; } static BOOL stapling_renew_response(server_rec *s, modssl_ctx_t *mctx, SSL *ssl, certinfo *cinf, OCSP_RESPONSE **prsp, BOOL *pok, apr_pool_t *pool) { conn_rec *conn = (conn_rec *)SSL_get_app_data(ssl); apr_pool_t *vpool; OCSP_REQUEST *req = NULL; OCSP_CERTID *id = NULL; STACK_OF(X509_EXTENSION) *exts; int i; BOOL rv = TRUE; const char *ocspuri; apr_uri_t uri; *prsp = NULL; /* Build up OCSP query from server certificate info */ ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01938) "stapling_renew_response: querying responder"); req = OCSP_REQUEST_new(); if (!req) goto err; id = OCSP_CERTID_dup(cinf->cid); if (!id) goto err; if (!OCSP_request_add0_id(req, id)) goto err; id = NULL; /* Add any extensions to the request */ SSL_get_tlsext_status_exts(ssl, &exts); for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) { X509_EXTENSION *ext = sk_X509_EXTENSION_value(exts, i); if (!OCSP_REQUEST_add_ext(req, ext, -1)) goto err; } if (mctx->stapling_force_url) ocspuri = mctx->stapling_force_url; else ocspuri = cinf->uri; if (!ocspuri) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(02621) "stapling_renew_response: no uri for responder"); rv = FALSE; goto done; } /* Create a temporary pool to constrain memory use */ apr_pool_create(&vpool, conn->pool); if (apr_uri_parse(vpool, ocspuri, &uri) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01939) "stapling_renew_response: Error parsing uri %s", ocspuri); rv = FALSE; goto done; } else if (strcmp(uri.scheme, "http")) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01940) "stapling_renew_response: Unsupported uri %s", ocspuri); rv = FALSE; goto done; } if (!uri.port) { uri.port = apr_uri_port_of_scheme(uri.scheme); } *prsp = modssl_dispatch_ocsp_request(&uri, mctx->stapling_responder_timeout, req, conn, vpool); apr_pool_destroy(vpool); if (!*prsp) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01941) "stapling_renew_response: responder error"); if (mctx->stapling_fake_trylater) { *prsp = OCSP_response_create(OCSP_RESPONSE_STATUS_TRYLATER, NULL); } else { goto done; } } else { int response_status = OCSP_response_status(*prsp); if (response_status == OCSP_RESPONSE_STATUS_SUCCESSFUL) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01942) "stapling_renew_response: query response received"); stapling_check_response(s, mctx, cinf, *prsp, pok); if (*pok == FALSE) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01943) "stapling_renew_response: error in retrieved response!"); } } else { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01944) "stapling_renew_response: responder error %s", OCSP_response_status_str(response_status)); *pok = FALSE; } } if (stapling_cache_response(s, mctx, *prsp, cinf, *pok, pool) == FALSE) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01945) "stapling_renew_response: error caching response!"); } done: if (id) OCSP_CERTID_free(id); if (req) OCSP_REQUEST_free(req); return rv; err: rv = FALSE; goto done; } /* * SSL stapling mutex operations. Similar to SSL mutex except mutexes are * mandatory if stapling is enabled. */ static int ssl_stapling_mutex_init(server_rec *s, apr_pool_t *p) { SSLModConfigRec *mc = myModConfig(s); SSLSrvConfigRec *sc = mySrvConfig(s); apr_status_t rv; /* already init or stapling not enabled? */ if (mc->stapling_refresh_mutex || sc->server->stapling_enabled != TRUE) { return TRUE; } /* need a cache mutex? */ if (mc->stapling_cache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) { if ((rv = ap_global_mutex_create(&mc->stapling_cache_mutex, NULL, SSL_STAPLING_CACHE_MUTEX_TYPE, NULL, s, s->process->pool, 0)) != APR_SUCCESS) { return FALSE; } } /* always need stapling_refresh_mutex */ if ((rv = ap_global_mutex_create(&mc->stapling_refresh_mutex, NULL, SSL_STAPLING_REFRESH_MUTEX_TYPE, NULL, s, s->process->pool, 0)) != APR_SUCCESS) { return FALSE; } return TRUE; } static int stapling_mutex_reinit_helper(server_rec *s, apr_pool_t *p, apr_global_mutex_t **mutex, const char *type) { apr_status_t rv; const char *lockfile; lockfile = apr_global_mutex_lockfile(*mutex); if ((rv = apr_global_mutex_child_init(mutex, lockfile, p)) != APR_SUCCESS) { if (lockfile) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(01946) "Cannot reinit %s mutex with file `%s'", type, lockfile); } else { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, s, APLOGNO(01947) "Cannot reinit %s mutex", type); } return FALSE; } return TRUE; } int ssl_stapling_mutex_reinit(server_rec *s, apr_pool_t *p) { SSLModConfigRec *mc = myModConfig(s); if (mc->stapling_cache_mutex != NULL && stapling_mutex_reinit_helper(s, p, &mc->stapling_cache_mutex, SSL_STAPLING_CACHE_MUTEX_TYPE) == FALSE) { return FALSE; } if (mc->stapling_refresh_mutex != NULL && stapling_mutex_reinit_helper(s, p, &mc->stapling_refresh_mutex, SSL_STAPLING_REFRESH_MUTEX_TYPE) == FALSE) { return FALSE; } return TRUE; } static int stapling_mutex_on(server_rec *s, apr_global_mutex_t *mutex, const char *name) { apr_status_t rv; if ((rv = apr_global_mutex_lock(mutex)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, s, APLOGNO(01948) "Failed to acquire OCSP %s lock", name); return FALSE; } return TRUE; } static int stapling_mutex_off(server_rec *s, apr_global_mutex_t *mutex, const char *name) { apr_status_t rv; if ((rv = apr_global_mutex_unlock(mutex)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_WARNING, rv, s, APLOGNO(01949) "Failed to release OCSP %s lock", name); return FALSE; } return TRUE; } static int stapling_cache_mutex_on(server_rec *s) { SSLModConfigRec *mc = myModConfig(s); return stapling_mutex_on(s, mc->stapling_cache_mutex, SSL_STAPLING_CACHE_MUTEX_TYPE); } static int stapling_cache_mutex_off(server_rec *s) { SSLModConfigRec *mc = myModConfig(s); return stapling_mutex_off(s, mc->stapling_cache_mutex, SSL_STAPLING_CACHE_MUTEX_TYPE); } static int stapling_refresh_mutex_on(server_rec *s) { SSLModConfigRec *mc = myModConfig(s); return stapling_mutex_on(s, mc->stapling_refresh_mutex, SSL_STAPLING_REFRESH_MUTEX_TYPE); } static int stapling_refresh_mutex_off(server_rec *s) { SSLModConfigRec *mc = myModConfig(s); return stapling_mutex_off(s, mc->stapling_refresh_mutex, SSL_STAPLING_REFRESH_MUTEX_TYPE); } static int get_and_check_cached_response(server_rec *s, modssl_ctx_t *mctx, OCSP_RESPONSE **rsp, BOOL *pok, certinfo *cinf, apr_pool_t *p) { BOOL ok = FALSE; int rv; AP_DEBUG_ASSERT(*rsp == NULL); /* Check to see if we already have a response for this certificate */ stapling_get_cached_response(s, rsp, &ok, cinf, p); if (*rsp) { /* see if response is acceptable */ ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01953) "stapling_cb: retrieved cached response"); rv = stapling_check_response(s, mctx, cinf, *rsp, NULL); if (rv == SSL_TLSEXT_ERR_ALERT_FATAL) { OCSP_RESPONSE_free(*rsp); *rsp = NULL; return SSL_TLSEXT_ERR_ALERT_FATAL; } else if (rv == SSL_TLSEXT_ERR_NOACK) { /* Error in response. If this error was not present when it was * stored (i.e. response no longer valid) then it can be * renewed straight away. * * If the error *was* present at the time it was stored then we * don't renew the response straight away; we just wait for the * cached response to expire. */ if (ok) { OCSP_RESPONSE_free(*rsp); *rsp = NULL; } else if (!mctx->stapling_return_errors) { OCSP_RESPONSE_free(*rsp); *rsp = NULL; *pok = FALSE; return SSL_TLSEXT_ERR_NOACK; } } } return 0; } /* Certificate Status callback. This is called when a client includes a * certificate status request extension. * * Check for cached responses in session cache. If valid send back to * client. If absent or no longer valid, query responder and update * cache. */ static int stapling_cb(SSL *ssl, void *arg) { conn_rec *conn = (conn_rec *)SSL_get_app_data(ssl); server_rec *s = mySrvFromConn(conn); SSLSrvConfigRec *sc = mySrvConfig(s); SSLConnRec *sslconn = myConnConfig(conn); modssl_ctx_t *mctx = myCtxConfig(sslconn, sc); certinfo *cinf = NULL; OCSP_RESPONSE *rsp = NULL; int rv; BOOL ok = TRUE; X509 *x; unsigned char *rspder = NULL; int rspderlen; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01951) "stapling_cb: OCSP Stapling callback called"); x = SSL_get_certificate(ssl); if (x == NULL) { return SSL_TLSEXT_ERR_NOACK; } if (ssl_run_get_stapling_status(&rspder, &rspderlen, conn, s, x) == APR_SUCCESS) { /* a hook handles stapling for this certicate and determines the response */ if (rspder == NULL || rspderlen <= 0) { return SSL_TLSEXT_ERR_NOACK; } SSL_set_tlsext_status_ocsp_resp(ssl, rspder, rspderlen); return SSL_TLSEXT_ERR_OK; } if (sc->server->stapling_enabled != TRUE) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01950) "stapling_cb: OCSP Stapling disabled"); return SSL_TLSEXT_ERR_NOACK; } if ((cinf = stapling_get_certinfo(s, x, mctx, ssl)) == NULL) { return SSL_TLSEXT_ERR_NOACK; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01952) "stapling_cb: retrieved cached certificate data"); rv = get_and_check_cached_response(s, mctx, &rsp, &ok, cinf, conn->pool); if (rv != 0) { return rv; } if (rsp == NULL) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01954) "stapling_cb: renewing cached response"); stapling_refresh_mutex_on(s); /* Maybe another request refreshed the OCSP response while this * thread waited for the mutex. Check again. */ rv = get_and_check_cached_response(s, mctx, &rsp, &ok, cinf, conn->pool); if (rv != 0) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(03236) "stapling_cb: error checking for cached response " "after obtaining refresh mutex"); stapling_refresh_mutex_off(s); return rv; } else if (rsp) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(03237) "stapling_cb: don't need to refresh cached response " "after obtaining refresh mutex"); stapling_refresh_mutex_off(s); } else { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(03238) "stapling_cb: still must refresh cached response " "after obtaining refresh mutex"); rv = stapling_renew_response(s, mctx, ssl, cinf, &rsp, &ok, conn->pool); stapling_refresh_mutex_off(s); if (rv == TRUE) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(03040) "stapling_cb: success renewing response"); } else { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01955) "stapling_cb: fatal error renewing response"); return SSL_TLSEXT_ERR_ALERT_FATAL; } } } if (rsp && ((ok == TRUE) || (mctx->stapling_return_errors == TRUE))) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01956) "stapling_cb: setting response"); if (!stapling_set_response(ssl, rsp)) return SSL_TLSEXT_ERR_ALERT_FATAL; return SSL_TLSEXT_ERR_OK; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01957) "stapling_cb: no suitable response available"); return SSL_TLSEXT_ERR_NOACK; } apr_status_t modssl_init_stapling(server_rec *s, apr_pool_t *p, apr_pool_t *ptemp, modssl_ctx_t *mctx) { SSL_CTX *ctx = mctx->ssl_ctx; SSLModConfigRec *mc = myModConfig(s); if (mc->stapling_cache == NULL) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01958) "SSLStapling: no stapling cache available"); return ssl_die(s); } if (ssl_stapling_mutex_init(s, ptemp) == FALSE) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01959) "SSLStapling: cannot initialise stapling mutex"); return ssl_die(s); } /* Set some default values for parameters if they are not set */ if (mctx->stapling_resptime_skew == UNSET) { mctx->stapling_resptime_skew = 60 * 5; } if (mctx->stapling_cache_timeout == UNSET) { mctx->stapling_cache_timeout = 3600; } if (mctx->stapling_return_errors == UNSET) { mctx->stapling_return_errors = TRUE; } if (mctx->stapling_fake_trylater == UNSET) { mctx->stapling_fake_trylater = TRUE; } if (mctx->stapling_errcache_timeout == UNSET) { mctx->stapling_errcache_timeout = 600; } if (mctx->stapling_responder_timeout == UNSET) { mctx->stapling_responder_timeout = 10 * APR_USEC_PER_SEC; } SSL_CTX_set_tlsext_status_cb(ctx, stapling_cb); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01960) "OCSP stapling initialized"); return APR_SUCCESS; } #endif httpd-2.4.41/modules/ssl/ssl_engine_vars.c0000644000000000000500000011744713262704500017047 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * _ __ ___ ___ __| | ___ ___| | mod_ssl * | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL * | | | | | | (_) | (_| | \__ \__ \ | * |_| |_| |_|\___/ \__,_|___|___/___/_| * |_____| * ssl_engine_vars.c * Variable Lookup Facility */ /* ``Those of you who think they know everything are very annoying to those of us who do.'' -- Unknown */ #include "ssl_private.h" #include "mod_ssl.h" #include "ap_expr.h" #include "apr_time.h" /* _________________________________________________________________ ** ** Variable Lookup ** _________________________________________________________________ */ static char *ssl_var_lookup_ssl(apr_pool_t *p, SSLConnRec *sslconn, request_rec *r, char *var); static char *ssl_var_lookup_ssl_cert(apr_pool_t *p, request_rec *r, X509 *xs, char *var); static char *ssl_var_lookup_ssl_cert_dn(apr_pool_t *p, X509_NAME *xsname, const char *var); static char *ssl_var_lookup_ssl_cert_san(apr_pool_t *p, X509 *xs, char *var); static char *ssl_var_lookup_ssl_cert_valid(apr_pool_t *p, ASN1_TIME *tm); static char *ssl_var_lookup_ssl_cert_remain(apr_pool_t *p, ASN1_TIME *tm); static char *ssl_var_lookup_ssl_cert_serial(apr_pool_t *p, X509 *xs); static char *ssl_var_lookup_ssl_cert_chain(apr_pool_t *p, STACK_OF(X509) *sk, char *var); static char *ssl_var_lookup_ssl_cert_rfc4523_cea(apr_pool_t *p, SSL *ssl); static char *ssl_var_lookup_ssl_cert_PEM(apr_pool_t *p, X509 *xs); static char *ssl_var_lookup_ssl_cert_verify(apr_pool_t *p, SSLConnRec *sslconn); static char *ssl_var_lookup_ssl_cipher(apr_pool_t *p, SSLConnRec *sslconn, char *var); static void ssl_var_lookup_ssl_cipher_bits(SSL *ssl, int *usekeysize, int *algkeysize); static char *ssl_var_lookup_ssl_version(apr_pool_t *p, char *var); static char *ssl_var_lookup_ssl_compress_meth(SSL *ssl); static SSLConnRec *ssl_get_effective_config(conn_rec *c) { SSLConnRec *sslconn = myConnConfig(c); if (!(sslconn && sslconn->ssl) && c->master) { /* use master connection if no SSL defined here */ sslconn = myConnConfig(c->master); } return sslconn; } static int ssl_is_https(conn_rec *c) { SSLConnRec *sslconn = ssl_get_effective_config(c); return sslconn && sslconn->ssl; } static const char var_interface[] = "mod_ssl/" AP_SERVER_BASEREVISION; static char var_library_interface[] = MODSSL_LIBRARY_TEXT; static char *var_library = NULL; static apr_array_header_t *expr_peer_ext_list_fn(ap_expr_eval_ctx_t *ctx, const void *dummy, const char *arg) { return ssl_ext_list(ctx->p, ctx->c, 1, arg); } static const char *expr_var_fn(ap_expr_eval_ctx_t *ctx, const void *data) { char *var = (char *)data; SSLConnRec *sslconn = ssl_get_effective_config(ctx->c); return sslconn ? ssl_var_lookup_ssl(ctx->p, sslconn, ctx->r, var) : NULL; } static const char *expr_func_fn(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { char *var = (char *)arg; return var ? ssl_var_lookup(ctx->p, ctx->s, ctx->c, ctx->r, var) : NULL; } static int ssl_expr_lookup(ap_expr_lookup_parms *parms) { switch (parms->type) { case AP_EXPR_FUNC_VAR: /* for now, we just handle everything that starts with SSL_, but * register our hook as APR_HOOK_LAST * XXX: This can be optimized */ if (strcEQn(parms->name, "SSL_", 4)) { *parms->func = expr_var_fn; *parms->data = parms->name + 4; return OK; } break; case AP_EXPR_FUNC_STRING: /* Function SSL() is implemented by us. */ if (strcEQ(parms->name, "SSL")) { *parms->func = expr_func_fn; *parms->data = NULL; return OK; } break; case AP_EXPR_FUNC_LIST: if (strcEQ(parms->name, "PeerExtList")) { *parms->func = expr_peer_ext_list_fn; *parms->data = "PeerExtList"; return OK; } break; } return DECLINED; } void ssl_var_register(apr_pool_t *p) { char *cp, *cp2; APR_REGISTER_OPTIONAL_FN(ssl_is_https); APR_REGISTER_OPTIONAL_FN(ssl_var_lookup); APR_REGISTER_OPTIONAL_FN(ssl_ext_list); /* Perform once-per-process library version determination: */ var_library = apr_pstrdup(p, MODSSL_LIBRARY_DYNTEXT); if ((cp = strchr(var_library, ' ')) != NULL) { *cp = '/'; if ((cp2 = strchr(cp, ' ')) != NULL) *cp2 = NUL; } if ((cp = strchr(var_library_interface, ' ')) != NULL) { *cp = '/'; if ((cp2 = strchr(cp, ' ')) != NULL) *cp2 = NUL; } ap_hook_expr_lookup(ssl_expr_lookup, NULL, NULL, APR_HOOK_MIDDLE); } /* This function must remain safe to use for a non-SSL connection. */ char *ssl_var_lookup(apr_pool_t *p, server_rec *s, conn_rec *c, request_rec *r, char *var) { SSLModConfigRec *mc = myModConfig(s); const char *result; BOOL resdup; apr_time_exp_t tm; result = NULL; resdup = TRUE; /* * When no pool is given try to find one */ if (p == NULL) { if (r != NULL) p = r->pool; else if (c != NULL) p = c->pool; else p = mc->pPool; } /* * Request dependent stuff */ if (r != NULL) { switch (var[0]) { case 'H': case 'h': if (strcEQ(var, "HTTP_USER_AGENT")) result = apr_table_get(r->headers_in, "User-Agent"); else if (strcEQ(var, "HTTP_REFERER")) result = apr_table_get(r->headers_in, "Referer"); else if (strcEQ(var, "HTTP_COOKIE")) result = apr_table_get(r->headers_in, "Cookie"); else if (strcEQ(var, "HTTP_FORWARDED")) result = apr_table_get(r->headers_in, "Forwarded"); else if (strcEQ(var, "HTTP_HOST")) result = apr_table_get(r->headers_in, "Host"); else if (strcEQ(var, "HTTP_PROXY_CONNECTION")) result = apr_table_get(r->headers_in, "Proxy-Connection"); else if (strcEQ(var, "HTTP_ACCEPT")) result = apr_table_get(r->headers_in, "Accept"); else if (strlen(var) > 5 && strcEQn(var, "HTTP:", 5)) /* all other headers from which we are still not know about */ result = apr_table_get(r->headers_in, var+5); break; case 'R': case 'r': if (strcEQ(var, "REQUEST_METHOD")) result = r->method; else if (strcEQ(var, "REQUEST_SCHEME")) result = ap_http_scheme(r); else if (strcEQ(var, "REQUEST_URI")) result = r->uri; else if (strcEQ(var, "REQUEST_FILENAME")) result = r->filename; else if (strcEQ(var, "REMOTE_ADDR")) result = r->useragent_ip; else if (strcEQ(var, "REMOTE_HOST")) result = ap_get_useragent_host(r, REMOTE_NAME, NULL); else if (strcEQ(var, "REMOTE_IDENT")) result = ap_get_remote_logname(r); else if (strcEQ(var, "REMOTE_USER")) result = r->user; break; case 'S': case 's': if (strcEQn(var, "SSL", 3)) break; /* shortcut common case */ if (strcEQ(var, "SERVER_ADMIN")) result = r->server->server_admin; else if (strcEQ(var, "SERVER_NAME")) result = ap_get_server_name_for_url(r); else if (strcEQ(var, "SERVER_PORT")) result = apr_psprintf(p, "%u", ap_get_server_port(r)); else if (strcEQ(var, "SERVER_PROTOCOL")) result = r->protocol; else if (strcEQ(var, "SCRIPT_FILENAME")) result = r->filename; break; default: if (strcEQ(var, "PATH_INFO")) result = r->path_info; else if (strcEQ(var, "QUERY_STRING")) result = r->args; else if (strcEQ(var, "IS_SUBREQ")) result = (r->main != NULL ? "true" : "false"); else if (strcEQ(var, "DOCUMENT_ROOT")) result = ap_document_root(r); else if (strcEQ(var, "AUTH_TYPE")) result = r->ap_auth_type; else if (strcEQ(var, "THE_REQUEST")) result = r->the_request; else if (strlen(var) > 4 && strcEQn(var, "ENV:", 4)) { result = apr_table_get(r->notes, var+4); if (result == NULL) result = apr_table_get(r->subprocess_env, var+4); } break; } } /* * Connection stuff */ if (result == NULL && c != NULL) { SSLConnRec *sslconn = ssl_get_effective_config(c); if (strlen(var) > 4 && strcEQn(var, "SSL_", 4) && sslconn && sslconn->ssl) result = ssl_var_lookup_ssl(p, sslconn, r, var+4); else if (strcEQ(var, "HTTPS")) { if (sslconn && sslconn->ssl) result = "on"; else result = "off"; } } /* * Totally independent stuff */ if (result == NULL) { if (strlen(var) > 12 && strcEQn(var, "SSL_VERSION_", 12)) result = ssl_var_lookup_ssl_version(p, var+12); else if (strcEQ(var, "SERVER_SOFTWARE")) result = ap_get_server_banner(); else if (strcEQ(var, "API_VERSION")) { result = apr_itoa(p, MODULE_MAGIC_NUMBER_MAJOR); resdup = FALSE; } else if (strcEQ(var, "TIME_YEAR")) { apr_time_exp_lt(&tm, apr_time_now()); result = apr_psprintf(p, "%02d%02d", (tm.tm_year / 100) + 19, tm.tm_year % 100); resdup = FALSE; } #define MKTIMESTR(format, tmfield) \ apr_time_exp_lt(&tm, apr_time_now()); \ result = apr_psprintf(p, format, tm.tmfield); \ resdup = FALSE; else if (strcEQ(var, "TIME_MON")) { MKTIMESTR("%02d", tm_mon+1) } else if (strcEQ(var, "TIME_DAY")) { MKTIMESTR("%02d", tm_mday) } else if (strcEQ(var, "TIME_HOUR")) { MKTIMESTR("%02d", tm_hour) } else if (strcEQ(var, "TIME_MIN")) { MKTIMESTR("%02d", tm_min) } else if (strcEQ(var, "TIME_SEC")) { MKTIMESTR("%02d", tm_sec) } else if (strcEQ(var, "TIME_WDAY")) { MKTIMESTR("%d", tm_wday) } else if (strcEQ(var, "TIME")) { apr_time_exp_lt(&tm, apr_time_now()); result = apr_psprintf(p, "%02d%02d%02d%02d%02d%02d%02d", (tm.tm_year / 100) + 19, (tm.tm_year % 100), tm.tm_mon+1, tm.tm_mday, tm.tm_hour, tm.tm_min, tm.tm_sec); resdup = FALSE; } /* all other env-variables from the parent Apache process */ else if (strlen(var) > 4 && strcEQn(var, "ENV:", 4)) { result = getenv(var+4); } } if (result != NULL && resdup) result = apr_pstrdup(p, result); if (result == NULL) result = ""; return (char *)result; } static char *ssl_var_lookup_ssl(apr_pool_t *p, SSLConnRec *sslconn, request_rec *r, char *var) { char *result; X509 *xs; STACK_OF(X509) *sk; SSL *ssl; result = NULL; ssl = sslconn->ssl; if (strlen(var) > 8 && strcEQn(var, "VERSION_", 8)) { result = ssl_var_lookup_ssl_version(p, var+8); } else if (ssl != NULL && strcEQ(var, "PROTOCOL")) { result = (char *)SSL_get_version(ssl); } else if (ssl != NULL && strcEQ(var, "SESSION_ID")) { char buf[MODSSL_SESSION_ID_STRING_LEN]; SSL_SESSION *pSession = SSL_get_session(ssl); if (pSession) { IDCONST unsigned char *id; unsigned int idlen; #ifdef OPENSSL_NO_SSL_INTERN id = (unsigned char *)SSL_SESSION_get_id(pSession, &idlen); #else id = pSession->session_id; idlen = pSession->session_id_length; #endif result = apr_pstrdup(p, modssl_SSL_SESSION_id2sz(id, idlen, buf, sizeof(buf))); } } else if(ssl != NULL && strcEQ(var, "SESSION_RESUMED")) { if (SSL_session_reused(ssl) == 1) result = "Resumed"; else result = "Initial"; } else if (ssl != NULL && strlen(var) >= 6 && strcEQn(var, "CIPHER", 6)) { result = ssl_var_lookup_ssl_cipher(p, sslconn, var+6); } else if (ssl != NULL && strlen(var) > 18 && strcEQn(var, "CLIENT_CERT_CHAIN_", 18)) { sk = SSL_get_peer_cert_chain(ssl); result = ssl_var_lookup_ssl_cert_chain(p, sk, var+18); } else if (ssl != NULL && strcEQ(var, "CLIENT_CERT_RFC4523_CEA")) { result = ssl_var_lookup_ssl_cert_rfc4523_cea(p, ssl); } else if (ssl != NULL && strcEQ(var, "CLIENT_VERIFY")) { result = ssl_var_lookup_ssl_cert_verify(p, sslconn); } else if (ssl != NULL && strlen(var) > 7 && strcEQn(var, "CLIENT_", 7)) { if ((xs = SSL_get_peer_certificate(ssl)) != NULL) { result = ssl_var_lookup_ssl_cert(p, r, xs, var+7); X509_free(xs); } } else if (ssl != NULL && strlen(var) > 7 && strcEQn(var, "SERVER_", 7)) { if ((xs = SSL_get_certificate(ssl)) != NULL) { result = ssl_var_lookup_ssl_cert(p, r, xs, var+7); /* SSL_get_certificate is different from SSL_get_peer_certificate. * No need to X509_free(xs). */ } } else if (ssl != NULL && strcEQ(var, "COMPRESS_METHOD")) { result = ssl_var_lookup_ssl_compress_meth(ssl); } #ifdef HAVE_TLSEXT else if (ssl != NULL && strcEQ(var, "TLS_SNI")) { result = apr_pstrdup(p, SSL_get_servername(ssl, TLSEXT_NAMETYPE_host_name)); } #endif else if (ssl != NULL && strcEQ(var, "SECURE_RENEG")) { int flag = 0; #ifdef SSL_get_secure_renegotiation_support flag = SSL_get_secure_renegotiation_support(ssl); #endif result = apr_pstrdup(p, flag ? "true" : "false"); } #ifdef HAVE_SRP else if (ssl != NULL && strcEQ(var, "SRP_USER")) { if ((result = SSL_get_srp_username(ssl)) != NULL) { result = apr_pstrdup(p, result); } } else if (ssl != NULL && strcEQ(var, "SRP_USERINFO")) { if ((result = SSL_get_srp_userinfo(ssl)) != NULL) { result = apr_pstrdup(p, result); } } #endif return result; } static char *ssl_var_lookup_ssl_cert_dn_oneline(apr_pool_t *p, request_rec *r, X509_NAME *xsname) { char *result = NULL; SSLDirConfigRec *dc; int legacy_format = 0; if (r) { dc = myDirConfig(r); legacy_format = dc->nOptions & SSL_OPT_LEGACYDNFORMAT; } if (legacy_format) { char *cp = X509_NAME_oneline(xsname, NULL, 0); result = apr_pstrdup(p, cp); OPENSSL_free(cp); } else { BIO* bio; int n; unsigned long flags = XN_FLAG_RFC2253 & ~ASN1_STRFLGS_ESC_MSB; if ((bio = BIO_new(BIO_s_mem())) == NULL) return NULL; X509_NAME_print_ex(bio, xsname, 0, flags); n = BIO_pending(bio); if (n > 0) { result = apr_palloc(p, n+1); n = BIO_read(bio, result, n); result[n] = NUL; } BIO_free(bio); } return result; } static char *ssl_var_lookup_ssl_cert(apr_pool_t *p, request_rec *r, X509 *xs, char *var) { char *result; BOOL resdup; X509_NAME *xsname; int nid; result = NULL; resdup = TRUE; if (strcEQ(var, "M_VERSION")) { result = apr_psprintf(p, "%lu", X509_get_version(xs)+1); resdup = FALSE; } else if (strcEQ(var, "M_SERIAL")) { result = ssl_var_lookup_ssl_cert_serial(p, xs); } else if (strcEQ(var, "V_START")) { result = ssl_var_lookup_ssl_cert_valid(p, X509_get_notBefore(xs)); } else if (strcEQ(var, "V_END")) { result = ssl_var_lookup_ssl_cert_valid(p, X509_get_notAfter(xs)); } else if (strcEQ(var, "V_REMAIN")) { result = ssl_var_lookup_ssl_cert_remain(p, X509_get_notAfter(xs)); resdup = FALSE; } else if (*var && strcEQ(var+1, "_DN")) { if (*var == 'S') xsname = X509_get_subject_name(xs); else if (*var == 'I') xsname = X509_get_issuer_name(xs); else return NULL; result = ssl_var_lookup_ssl_cert_dn_oneline(p, r, xsname); resdup = FALSE; } else if (strlen(var) > 5 && strcEQn(var+1, "_DN_", 4)) { if (*var == 'S') xsname = X509_get_subject_name(xs); else if (*var == 'I') xsname = X509_get_issuer_name(xs); else return NULL; result = ssl_var_lookup_ssl_cert_dn(p, xsname, var+5); resdup = FALSE; } else if (strlen(var) > 4 && strcEQn(var, "SAN_", 4)) { result = ssl_var_lookup_ssl_cert_san(p, xs, var+4); resdup = FALSE; } else if (strcEQ(var, "A_SIG")) { #if MODSSL_USE_OPENSSL_PRE_1_1_API nid = OBJ_obj2nid((ASN1_OBJECT *)(xs->cert_info->signature->algorithm)); #else const ASN1_OBJECT *paobj; X509_ALGOR_get0(&paobj, NULL, NULL, X509_get0_tbs_sigalg(xs)); nid = OBJ_obj2nid(paobj); #endif result = apr_pstrdup(p, (nid == NID_undef) ? "UNKNOWN" : OBJ_nid2ln(nid)); resdup = FALSE; } else if (strcEQ(var, "A_KEY")) { #if OPENSSL_VERSION_NUMBER < 0x10100000L nid = OBJ_obj2nid((ASN1_OBJECT *)(xs->cert_info->key->algor->algorithm)); #else ASN1_OBJECT *paobj; X509_PUBKEY_get0_param(&paobj, NULL, 0, NULL, X509_get_X509_PUBKEY(xs)); nid = OBJ_obj2nid(paobj); #endif result = apr_pstrdup(p, (nid == NID_undef) ? "UNKNOWN" : OBJ_nid2ln(nid)); resdup = FALSE; } else if (strcEQ(var, "CERT")) { result = ssl_var_lookup_ssl_cert_PEM(p, xs); } if (resdup) result = apr_pstrdup(p, result); return result; } /* In this table, .extract is non-zero if RDNs using the NID should be * extracted to for the SSL_{CLIENT,SERVER}_{I,S}_DN_* environment * variables. */ static const struct { char *name; int nid; int extract; } ssl_var_lookup_ssl_cert_dn_rec[] = { { "C", NID_countryName, 1 }, { "ST", NID_stateOrProvinceName, 1 }, /* officially (RFC2156) */ { "SP", NID_stateOrProvinceName, 0 }, /* compatibility (SSLeay) */ { "L", NID_localityName, 1 }, { "O", NID_organizationName, 1 }, { "OU", NID_organizationalUnitName, 1 }, { "CN", NID_commonName, 1 }, { "T", NID_title, 1 }, { "I", NID_initials, 1 }, { "G", NID_givenName, 1 }, { "S", NID_surname, 1 }, { "D", NID_description, 1 }, #ifdef NID_userId { "UID", NID_userId, 1 }, #endif { "Email", NID_pkcs9_emailAddress, 1 }, { NULL, 0, 0 } }; static char *ssl_var_lookup_ssl_cert_dn(apr_pool_t *p, X509_NAME *xsname, const char *var) { const char *ptr; char *result; X509_NAME_ENTRY *xsne; int i, j, n, idx = 0, raw = 0; apr_size_t varlen; ptr = ap_strrchr_c(var, '_'); if (ptr && ptr > var && strcmp(ptr + 1, "RAW") == 0) { var = apr_pstrmemdup(p, var, ptr - var); raw = 1; } /* if an _N suffix is used, find the Nth attribute of given name */ ptr = ap_strchr_c(var, '_'); if (ptr != NULL && strspn(ptr + 1, "0123456789") == strlen(ptr + 1)) { idx = atoi(ptr + 1); varlen = ptr - var; } else { varlen = strlen(var); } result = NULL; for (i = 0; ssl_var_lookup_ssl_cert_dn_rec[i].name != NULL; i++) { if (strEQn(var, ssl_var_lookup_ssl_cert_dn_rec[i].name, varlen) && strlen(ssl_var_lookup_ssl_cert_dn_rec[i].name) == varlen) { for (j = 0; j < X509_NAME_entry_count(xsname); j++) { xsne = X509_NAME_get_entry(xsname, j); n =OBJ_obj2nid((ASN1_OBJECT *)X509_NAME_ENTRY_get_object(xsne)); if (n == ssl_var_lookup_ssl_cert_dn_rec[i].nid && idx-- == 0) { result = modssl_X509_NAME_ENTRY_to_string(p, xsne, raw); break; } } break; } } return result; } static char *ssl_var_lookup_ssl_cert_san(apr_pool_t *p, X509 *xs, char *var) { int type, numlen; const char *onf = NULL; apr_array_header_t *entries; if (strcEQn(var, "Email_", 6)) { type = GEN_EMAIL; var += 6; } else if (strcEQn(var, "DNS_", 4)) { type = GEN_DNS; var += 4; } else if (strcEQn(var, "OTHER_", 6)) { type = GEN_OTHERNAME; var += 6; if (strEQn(var, "msUPN_", 6)) { var += 6; onf = "msUPN"; } else if (strEQn(var, "dnsSRV_", 7)) { var += 7; onf = "id-on-dnsSRV"; } else return NULL; } else return NULL; /* sanity check: number must be between 1 and 4 digits */ numlen = strspn(var, "0123456789"); if ((numlen < 1) || (numlen > 4) || (numlen != strlen(var))) return NULL; if (modssl_X509_getSAN(p, xs, type, onf, atoi(var), &entries)) /* return the first entry from this 1-element array */ return APR_ARRAY_IDX(entries, 0, char *); else return NULL; } static char *ssl_var_lookup_ssl_cert_valid(apr_pool_t *p, ASN1_TIME *tm) { char *result; BIO* bio; int n; if ((bio = BIO_new(BIO_s_mem())) == NULL) return NULL; ASN1_TIME_print(bio, tm); n = BIO_pending(bio); result = apr_pcalloc(p, n+1); n = BIO_read(bio, result, n); result[n] = NUL; BIO_free(bio); return result; } #define DIGIT2NUM(x) (((x)[0] - '0') * 10 + (x)[1] - '0') /* Return a string giving the number of days remaining until 'tm', or * "0" if this can't be determined. */ static char *ssl_var_lookup_ssl_cert_remain(apr_pool_t *p, ASN1_TIME *tm) { apr_time_t then, now = apr_time_now(); apr_time_exp_t exp = {0}; long diff; unsigned char *dp; /* Fail if the time isn't a valid ASN.1 TIME; RFC3280 mandates * that the seconds digits are present even though ASN.1 * doesn't. */ if ((tm->type == V_ASN1_UTCTIME && tm->length < 11) || (tm->type == V_ASN1_GENERALIZEDTIME && tm->length < 13) || !ASN1_TIME_check(tm)) { return apr_pstrdup(p, "0"); } if (tm->type == V_ASN1_UTCTIME) { exp.tm_year = DIGIT2NUM(tm->data); if (exp.tm_year <= 50) exp.tm_year += 100; dp = tm->data + 2; } else { exp.tm_year = DIGIT2NUM(tm->data) * 100 + DIGIT2NUM(tm->data + 2) - 1900; dp = tm->data + 4; } exp.tm_mon = DIGIT2NUM(dp) - 1; exp.tm_mday = DIGIT2NUM(dp + 2) + 1; exp.tm_hour = DIGIT2NUM(dp + 4); exp.tm_min = DIGIT2NUM(dp + 6); exp.tm_sec = DIGIT2NUM(dp + 8); if (apr_time_exp_gmt_get(&then, &exp) != APR_SUCCESS) { return apr_pstrdup(p, "0"); } diff = (long)((apr_time_sec(then) - apr_time_sec(now)) / (60*60*24)); return diff > 0 ? apr_ltoa(p, diff) : apr_pstrdup(p, "0"); } static char *ssl_var_lookup_ssl_cert_serial(apr_pool_t *p, X509 *xs) { char *result; BIO *bio; int n; if ((bio = BIO_new(BIO_s_mem())) == NULL) return NULL; i2a_ASN1_INTEGER(bio, X509_get_serialNumber(xs)); n = BIO_pending(bio); result = apr_pcalloc(p, n+1); n = BIO_read(bio, result, n); result[n] = NUL; BIO_free(bio); return result; } static char *ssl_var_lookup_ssl_cert_chain(apr_pool_t *p, STACK_OF(X509) *sk, char *var) { char *result; X509 *xs; int n; result = NULL; if (strspn(var, "0123456789") == strlen(var)) { n = atoi(var); if (n < sk_X509_num(sk)) { xs = sk_X509_value(sk, n); result = ssl_var_lookup_ssl_cert_PEM(p, xs); } } return result; } static char *ssl_var_lookup_ssl_cert_rfc4523_cea(apr_pool_t *p, SSL *ssl) { char *result; X509 *xs; ASN1_INTEGER *serialNumber; if (!(xs = SSL_get_peer_certificate(ssl))) { return NULL; } result = NULL; serialNumber = X509_get_serialNumber(xs); if (serialNumber) { X509_NAME *issuer = X509_get_issuer_name(xs); if (issuer) { BIGNUM *bn = ASN1_INTEGER_to_BN(serialNumber, NULL); char *decimal = BN_bn2dec(bn); result = apr_pstrcat(p, "{ serialNumber ", decimal, ", issuer rdnSequence:\"", modssl_X509_NAME_to_string(p, issuer, 0), "\" }", NULL); OPENSSL_free(decimal); BN_free(bn); } } X509_free(xs); return result; } static char *ssl_var_lookup_ssl_cert_PEM(apr_pool_t *p, X509 *xs) { char *result; BIO *bio; int n; if ((bio = BIO_new(BIO_s_mem())) == NULL) return NULL; PEM_write_bio_X509(bio, xs); n = BIO_pending(bio); result = apr_pcalloc(p, n+1); n = BIO_read(bio, result, n); result[n] = NUL; BIO_free(bio); return result; } static char *ssl_var_lookup_ssl_cert_verify(apr_pool_t *p, SSLConnRec *sslconn) { char *result; long vrc; const char *verr; const char *vinfo; SSL *ssl; X509 *xs; result = NULL; ssl = sslconn->ssl; verr = sslconn->verify_error; vinfo = sslconn->verify_info; vrc = SSL_get_verify_result(ssl); xs = SSL_get_peer_certificate(ssl); if (vrc == X509_V_OK && verr == NULL && xs == NULL) /* no client verification done at all */ result = "NONE"; else if (vrc == X509_V_OK && verr == NULL && vinfo == NULL && xs != NULL) /* client verification done successful */ result = "SUCCESS"; else if (vrc == X509_V_OK && vinfo != NULL && strEQ(vinfo, "GENEROUS")) /* client verification done in generous way */ result = "GENEROUS"; else /* client verification failed */ result = apr_psprintf(p, "FAILED:%s", verr ? verr : X509_verify_cert_error_string(vrc)); if (xs) X509_free(xs); return result; } static char *ssl_var_lookup_ssl_cipher(apr_pool_t *p, SSLConnRec *sslconn, char *var) { char *result; BOOL resdup; int usekeysize, algkeysize; SSL *ssl; result = NULL; resdup = TRUE; ssl = sslconn->ssl; ssl_var_lookup_ssl_cipher_bits(ssl, &usekeysize, &algkeysize); if (ssl && strEQ(var, "")) { MODSSL_SSL_CIPHER_CONST SSL_CIPHER *cipher = SSL_get_current_cipher(ssl); result = (cipher != NULL ? (char *)SSL_CIPHER_get_name(cipher) : NULL); } else if (strcEQ(var, "_EXPORT")) result = (usekeysize < 56 ? "true" : "false"); else if (strcEQ(var, "_USEKEYSIZE")) { result = apr_itoa(p, usekeysize); resdup = FALSE; } else if (strcEQ(var, "_ALGKEYSIZE")) { result = apr_itoa(p, algkeysize); resdup = FALSE; } if (result != NULL && resdup) result = apr_pstrdup(p, result); return result; } static void ssl_var_lookup_ssl_cipher_bits(SSL *ssl, int *usekeysize, int *algkeysize) { MODSSL_SSL_CIPHER_CONST SSL_CIPHER *cipher; *usekeysize = 0; *algkeysize = 0; if (ssl != NULL) if ((cipher = SSL_get_current_cipher(ssl)) != NULL) *usekeysize = SSL_CIPHER_get_bits(cipher, algkeysize); return; } static char *ssl_var_lookup_ssl_version(apr_pool_t *p, char *var) { if (strEQ(var, "INTERFACE")) { return apr_pstrdup(p, var_interface); } else if (strEQ(var, "LIBRARY_INTERFACE")) { return apr_pstrdup(p, var_library_interface); } else if (strEQ(var, "LIBRARY")) { return apr_pstrdup(p, var_library); } return NULL; } /* Add each RDN in 'xn' to the table 't' where the NID is present in * 'nids', using key prefix 'pfx'. */ static void extract_dn(apr_table_t *t, apr_hash_t *nids, const char *pfx, X509_NAME *xn, apr_pool_t *p) { X509_NAME_ENTRY *xsne; apr_hash_t *count; int i, nid; /* Hash of (int) NID -> (int *) counter to count each time an RDN * with the given NID has been seen. */ count = apr_hash_make(p); /* For each RDN... */ for (i = 0; i < X509_NAME_entry_count(xn); i++) { const char *tag; xsne = X509_NAME_get_entry(xn, i); /* Retrieve the nid, and check whether this is one of the nids * which are to be extracted. */ nid = OBJ_obj2nid((ASN1_OBJECT *)X509_NAME_ENTRY_get_object(xsne)); tag = apr_hash_get(nids, &nid, sizeof nid); if (tag) { const char *key; int *dup; char *value; /* Check whether a variable with this nid was already * been used; if so, use the foo_N=bar syntax. */ dup = apr_hash_get(count, &nid, sizeof nid); if (dup) { key = apr_psprintf(p, "%s%s_%d", pfx, tag, ++(*dup)); } else { /* Otherwise, use the plain foo=bar syntax. */ dup = apr_pcalloc(p, sizeof *dup); apr_hash_set(count, &nid, sizeof nid, dup); key = apr_pstrcat(p, pfx, tag, NULL); } value = modssl_X509_NAME_ENTRY_to_string(p, xsne, 0); apr_table_setn(t, key, value); } } } void modssl_var_extract_dns(apr_table_t *t, SSL *ssl, apr_pool_t *p) { apr_hash_t *nids; unsigned n; X509 *xs; /* Build up a hash table of (int *)NID->(char *)short-name for all * the tags which are to be extracted: */ nids = apr_hash_make(p); for (n = 0; ssl_var_lookup_ssl_cert_dn_rec[n].name; n++) { if (ssl_var_lookup_ssl_cert_dn_rec[n].extract) { apr_hash_set(nids, &ssl_var_lookup_ssl_cert_dn_rec[n].nid, sizeof(ssl_var_lookup_ssl_cert_dn_rec[0].nid), ssl_var_lookup_ssl_cert_dn_rec[n].name); } } /* Extract the server cert DNS -- note that the refcount does NOT * increase: */ xs = SSL_get_certificate(ssl); if (xs) { extract_dn(t, nids, "SSL_SERVER_S_DN_", X509_get_subject_name(xs), p); extract_dn(t, nids, "SSL_SERVER_I_DN_", X509_get_issuer_name(xs), p); } /* Extract the client cert DNs -- note that the refcount DOES * increase: */ xs = SSL_get_peer_certificate(ssl); if (xs) { extract_dn(t, nids, "SSL_CLIENT_S_DN_", X509_get_subject_name(xs), p); extract_dn(t, nids, "SSL_CLIENT_I_DN_", X509_get_issuer_name(xs), p); X509_free(xs); } } static void extract_san_array(apr_table_t *t, const char *pfx, apr_array_header_t *entries, apr_pool_t *p) { int i; for (i = 0; i < entries->nelts; i++) { const char *key = apr_psprintf(p, "%s_%d", pfx, i); apr_table_setn(t, key, APR_ARRAY_IDX(entries, i, const char *)); } } void modssl_var_extract_san_entries(apr_table_t *t, SSL *ssl, apr_pool_t *p) { X509 *xs; apr_array_header_t *entries; /* subjectAltName entries of the server certificate */ xs = SSL_get_certificate(ssl); if (xs) { if (modssl_X509_getSAN(p, xs, GEN_EMAIL, NULL, -1, &entries)) { extract_san_array(t, "SSL_SERVER_SAN_Email", entries, p); } if (modssl_X509_getSAN(p, xs, GEN_DNS, NULL, -1, &entries)) { extract_san_array(t, "SSL_SERVER_SAN_DNS", entries, p); } if (modssl_X509_getSAN(p, xs, GEN_OTHERNAME, "id-on-dnsSRV", -1, &entries)) { extract_san_array(t, "SSL_SERVER_SAN_OTHER_dnsSRV", entries, p); } /* no need to free xs (refcount does not increase) */ } /* subjectAltName entries of the client certificate */ xs = SSL_get_peer_certificate(ssl); if (xs) { if (modssl_X509_getSAN(p, xs, GEN_EMAIL, NULL, -1, &entries)) { extract_san_array(t, "SSL_CLIENT_SAN_Email", entries, p); } if (modssl_X509_getSAN(p, xs, GEN_DNS, NULL, -1, &entries)) { extract_san_array(t, "SSL_CLIENT_SAN_DNS", entries, p); } if (modssl_X509_getSAN(p, xs, GEN_OTHERNAME, "msUPN", -1, &entries)) { extract_san_array(t, "SSL_CLIENT_SAN_OTHER_msUPN", entries, p); } X509_free(xs); } } /* For an extension type which OpenSSL does not recognize, attempt to * parse the extension type as a primitive string. This will fail for * any structured extension type per the docs. Returns non-zero on * success and writes the string to the given bio. */ static int dump_extn_value(BIO *bio, ASN1_OCTET_STRING *str) { const unsigned char *pp = str->data; ASN1_STRING *ret = ASN1_STRING_new(); int rv = 0; /* This allows UTF8String, IA5String, VisibleString, or BMPString; * conversion to UTF-8 is forced. */ if (d2i_DISPLAYTEXT(&ret, &pp, str->length)) { ASN1_STRING_print_ex(bio, ret, ASN1_STRFLGS_UTF8_CONVERT); rv = 1; } ASN1_STRING_free(ret); return rv; } apr_array_header_t *ssl_ext_list(apr_pool_t *p, conn_rec *c, int peer, const char *extension) { SSLConnRec *sslconn = ssl_get_effective_config(c); SSL *ssl = NULL; apr_array_header_t *array = NULL; X509 *xs = NULL; ASN1_OBJECT *oid = NULL; int count = 0, j; if (!sslconn || !sslconn->ssl || !extension) { return NULL; } ssl = sslconn->ssl; /* We accept the "extension" string to be converted as * a long name (nsComment), short name (DN) or * numeric OID (1.2.3.4). */ oid = OBJ_txt2obj(extension, 0); if (!oid) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(01970) "could not parse OID '%s'", extension); ERR_clear_error(); return NULL; } xs = peer ? SSL_get_peer_certificate(ssl) : SSL_get_certificate(ssl); if (xs == NULL) { return NULL; } count = X509_get_ext_count(xs); /* Create an array large enough to accommodate every extension. This is * likely overkill, but safe. */ array = apr_array_make(p, count, sizeof(char *)); for (j = 0; j < count; j++) { X509_EXTENSION *ext = X509_get_ext(xs, j); if (OBJ_cmp(X509_EXTENSION_get_object(ext), oid) == 0) { BIO *bio = BIO_new(BIO_s_mem()); /* We want to obtain a string representation of the extensions * value and add it to the array we're building. * X509V3_EXT_print() doesn't know about all the possible * data types, but the value is stored as an ASN1_OCTET_STRING * allowing us a fallback in case of X509V3_EXT_print * not knowing how to handle the data. */ if (X509V3_EXT_print(bio, ext, 0, 0) == 1 || dump_extn_value(bio, X509_EXTENSION_get_data(ext)) == 1) { BUF_MEM *buf; char **ptr = apr_array_push(array); BIO_get_mem_ptr(bio, &buf); *ptr = apr_pstrmemdup(p, buf->data, buf->length); } else { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(01971) "Found an extension '%s', but failed to " "create a string from it", extension); } BIO_vfree(bio); } } if (array->nelts == 0) array = NULL; if (peer) { /* only SSL_get_peer_certificate raises the refcount */ X509_free(xs); } ASN1_OBJECT_free(oid); ERR_clear_error(); return array; } static char *ssl_var_lookup_ssl_compress_meth(SSL *ssl) { char *result = "NULL"; #ifndef OPENSSL_NO_COMP SSL_SESSION *pSession = SSL_get_session(ssl); if (pSession) { #ifdef OPENSSL_NO_SSL_INTERN switch (SSL_SESSION_get_compress_id(pSession)) { #else switch (pSession->compress_meth) { #endif case 0: /* default "NULL" already set */ break; /* Defined by RFC 3749, deflate is coded by "1" */ case 1: result = "DEFLATE"; break; /* IANA assigned compression number for LZS */ case 0x40: result = "LZS"; break; default: result = "UNKNOWN"; break; } } #endif return result; } /* _________________________________________________________________ ** ** SSL Extension to mod_log_config ** _________________________________________________________________ */ #include "../../modules/loggers/mod_log_config.h" static const char *ssl_var_log_handler_c(request_rec *r, char *a); static const char *ssl_var_log_handler_x(request_rec *r, char *a); /* * register us for the mod_log_config function registering phase * to establish %{...}c and to be able to expand %{...}x variables. */ void ssl_var_log_config_register(apr_pool_t *p) { APR_OPTIONAL_FN_TYPE(ap_register_log_handler) *log_pfn_register; log_pfn_register = APR_RETRIEVE_OPTIONAL_FN(ap_register_log_handler); if (log_pfn_register) { log_pfn_register(p, "c", ssl_var_log_handler_c, 0); log_pfn_register(p, "x", ssl_var_log_handler_x, 0); } return; } /* * implement the %{..}c log function * (we are the only function) */ static const char *ssl_var_log_handler_c(request_rec *r, char *a) { SSLConnRec *sslconn = ssl_get_effective_config(r->connection); char *result; if (sslconn == NULL || sslconn->ssl == NULL) return NULL; result = NULL; if (strEQ(a, "version")) result = ssl_var_lookup(r->pool, r->server, r->connection, r, "SSL_PROTOCOL"); else if (strEQ(a, "cipher")) result = ssl_var_lookup(r->pool, r->server, r->connection, r, "SSL_CIPHER"); else if (strEQ(a, "subjectdn") || strEQ(a, "clientcert")) result = ssl_var_lookup(r->pool, r->server, r->connection, r, "SSL_CLIENT_S_DN"); else if (strEQ(a, "issuerdn") || strEQ(a, "cacert")) result = ssl_var_lookup(r->pool, r->server, r->connection, r, "SSL_CLIENT_I_DN"); else if (strEQ(a, "errcode")) result = "-"; else if (strEQ(a, "errstr")) result = (char *)sslconn->verify_error; if (result != NULL && result[0] == NUL) result = NULL; return result; } /* * extend the implementation of the %{..}x log function * (there can be more functions) */ static const char *ssl_var_log_handler_x(request_rec *r, char *a) { char *result; result = ssl_var_lookup(r->pool, r->server, r->connection, r, a); if (result != NULL && result[0] == NUL) result = NULL; return result; } httpd-2.4.41/modules/ssl/ssl_util_ssl.h0000644000000000000500000000570513250436757016420 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @verbatim _ _ _ __ ___ ___ __| | ___ ___| | mod_ssl | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL | | | | | | (_) | (_| | \__ \__ \ | |_| |_| |_|\___/ \__,_|___|___/___/_| |_____| @endverbatim * @file ssl_util_ssl.h * @brief Additional Utility Functions for OpenSSL * * @defgroup MOD_SSL_UTIL Utilities * @ingroup MOD_SSL * @{ */ #ifndef __SSL_UTIL_SSL_H__ #define __SSL_UTIL_SSL_H__ /** * SSL library version number */ #define MODSSL_LIBRARY_VERSION OPENSSL_VERSION_NUMBER #define MODSSL_LIBRARY_NAME "OpenSSL" #define MODSSL_LIBRARY_TEXT OPENSSL_VERSION_TEXT #if MODSSL_USE_OPENSSL_PRE_1_1_API #define MODSSL_LIBRARY_DYNTEXT SSLeay_version(SSLEAY_VERSION) #else #define MODSSL_LIBRARY_DYNTEXT OpenSSL_version(OPENSSL_VERSION) #endif /** * Maximum length of a DER encoded session. * FIXME: There is no define in OpenSSL, but OpenSSL uses 1024*10, * so this value should be ok. Although we have no warm feeling. */ #define MODSSL_SESSION_MAX_DER 1024*10 /** max length for modssl_SSL_SESSION_id2sz */ #define MODSSL_SESSION_ID_STRING_LEN \ ((SSL_MAX_SSL_SESSION_ID_LENGTH + 1) * 2) /** * Additional Functions */ void modssl_init_app_data2_idx(void); void *modssl_get_app_data2(SSL *); void modssl_set_app_data2(SSL *, void *); EVP_PKEY *modssl_read_privatekey(const char *, EVP_PKEY **, pem_password_cb *, void *); EVP_PKEY *modssl_read_encrypted_pkey(const char *, EVP_PKEY **, const char *, apr_size_t); int modssl_smart_shutdown(SSL *ssl); BOOL modssl_X509_getBC(X509 *, int *, int *); char *modssl_X509_NAME_ENTRY_to_string(apr_pool_t *p, X509_NAME_ENTRY *xsne, int raw); char *modssl_X509_NAME_to_string(apr_pool_t *, X509_NAME *, int); BOOL modssl_X509_getSAN(apr_pool_t *, X509 *, int, const char *, int, apr_array_header_t **); BOOL modssl_X509_match_name(apr_pool_t *, X509 *, const char *, BOOL, server_rec *); char *modssl_SSL_SESSION_id2sz(IDCONST unsigned char *, int, char *, int); #endif /* __SSL_UTIL_SSL_H__ */ /** @} */ httpd-2.4.41/modules/ssl/ssl_scache.c0000644000000000000500000001646713063742214016000 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * _ __ ___ ___ __| | ___ ___| | mod_ssl * | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL * | | | | | | (_) | (_| | \__ \__ \ | * |_| |_| |_|\___/ \__,_|___|___/___/_| * |_____| * ssl_scache.c * Session Cache Abstraction */ /* ``Open-Source Software: generous programmers from around the world all join forces to help you shoot yourself in the foot for free.'' -- Unknown */ #include "ssl_private.h" #include "mod_status.h" /* _________________________________________________________________ ** ** Session Cache: Common Abstraction Layer ** _________________________________________________________________ */ apr_status_t ssl_scache_init(server_rec *s, apr_pool_t *p) { SSLModConfigRec *mc = myModConfig(s); apr_status_t rv; struct ap_socache_hints hints; /* The very first invocation of this function will be the * post_config invocation during server startup; do nothing for * this first (and only the first) time through, since the pool * will be immediately cleared anyway. For every subsequent * invocation, initialize the configured cache. */ if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) return APR_SUCCESS; #ifdef HAVE_OCSP_STAPLING if (mc->stapling_cache) { memset(&hints, 0, sizeof hints); hints.avg_obj_size = 1500; hints.avg_id_len = 20; hints.expiry_interval = 300; rv = mc->stapling_cache->init(mc->stapling_cache_context, "mod_ssl-stapling", &hints, s, p); if (rv) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01872) "Could not initialize stapling cache. Exiting."); return ssl_die(s); } } #endif /* * Warn the user that he should use the session cache. * But we can operate without it, of course. */ if (mc->sesscache == NULL) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(01873) "Init: Session Cache is not configured " "[hint: SSLSessionCache]"); return APR_SUCCESS; } memset(&hints, 0, sizeof hints); hints.avg_obj_size = 150; hints.avg_id_len = 30; hints.expiry_interval = 30; rv = mc->sesscache->init(mc->sesscache_context, "mod_ssl-session", &hints, s, p); if (rv) { ap_log_error(APLOG_MARK, APLOG_EMERG, 0, s, APLOGNO(01874) "Could not initialize session cache. Exiting."); return ssl_die(s); } return APR_SUCCESS; } void ssl_scache_kill(server_rec *s) { SSLModConfigRec *mc = myModConfig(s); if (mc->sesscache) { mc->sesscache->destroy(mc->sesscache_context, s); } #ifdef HAVE_OCSP_STAPLING if (mc->stapling_cache) { mc->stapling_cache->destroy(mc->stapling_cache_context, s); } #endif } BOOL ssl_scache_store(server_rec *s, IDCONST UCHAR *id, int idlen, apr_time_t expiry, SSL_SESSION *sess, apr_pool_t *p) { SSLModConfigRec *mc = myModConfig(s); unsigned char encoded[MODSSL_SESSION_MAX_DER], *ptr; unsigned int len; apr_status_t rv; /* Serialise the session. */ len = i2d_SSL_SESSION(sess, NULL); if (len > sizeof encoded) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01875) "session is too big (%u bytes)", len); return FALSE; } ptr = encoded; len = i2d_SSL_SESSION(sess, &ptr); if (mc->sesscache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) { ssl_mutex_on(s); } rv = mc->sesscache->store(mc->sesscache_context, s, id, idlen, expiry, encoded, len, p); if (mc->sesscache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) { ssl_mutex_off(s); } return rv == APR_SUCCESS ? TRUE : FALSE; } SSL_SESSION *ssl_scache_retrieve(server_rec *s, IDCONST UCHAR *id, int idlen, apr_pool_t *p) { SSLModConfigRec *mc = myModConfig(s); unsigned char dest[MODSSL_SESSION_MAX_DER]; unsigned int destlen = MODSSL_SESSION_MAX_DER; const unsigned char *ptr; apr_status_t rv; if (mc->sesscache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) { ssl_mutex_on(s); } rv = mc->sesscache->retrieve(mc->sesscache_context, s, id, idlen, dest, &destlen, p); if (mc->sesscache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) { ssl_mutex_off(s); } if (rv != APR_SUCCESS) { return NULL; } ptr = dest; return d2i_SSL_SESSION(NULL, &ptr, destlen); } void ssl_scache_remove(server_rec *s, IDCONST UCHAR *id, int idlen, apr_pool_t *p) { SSLModConfigRec *mc = myModConfig(s); if (mc->sesscache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) { ssl_mutex_on(s); } mc->sesscache->remove(mc->sesscache_context, s, id, idlen, p); if (mc->sesscache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) { ssl_mutex_off(s); } } /* _________________________________________________________________ ** ** SSL Extension to mod_status ** _________________________________________________________________ */ static int ssl_ext_status_hook(request_rec *r, int flags) { SSLModConfigRec *mc = myModConfig(r->server); if (mc == NULL || mc->sesscache == NULL) return OK; if (!(flags & AP_STATUS_SHORT)) { ap_rputs("
    \n", r); ap_rputs("\n", r); ap_rputs("\n", r); ap_rputs("\n", r); ap_rputs("
    \n", r); ap_rputs("SSL/TLS Session Cache Status:\r", r); ap_rputs("
    \n", r); } else { ap_rputs("TLSSessionCacheStatus\n", r); } if (mc->sesscache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) { ssl_mutex_on(r->server); } mc->sesscache->status(mc->sesscache_context, r, flags); if (mc->sesscache->flags & AP_SOCACHE_FLAG_NOTMPSAFE) { ssl_mutex_off(r->server); } if (!(flags & AP_STATUS_SHORT)) { ap_rputs("
    \n", r); } return OK; } void ssl_scache_status_register(apr_pool_t *p) { APR_OPTIONAL_HOOK(ap, status_hook, ssl_ext_status_hook, NULL, NULL, APR_HOOK_MIDDLE); } httpd-2.4.41/modules/ssl/mod_ssl.dsp0000644000000000000500000001530013226637151015662 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_ssl" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_ssl - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_ssl.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_ssl.mak" CFG="mod_ssl - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_ssl - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_ssl - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_ssl - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../generators" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/openssl/inc32" /I "../md" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "WIN32_LEAN_AND_MEAN" /D "NO_IDEA" /D "NO_RC5" /D "NO_MDC2" /D "OPENSSL_NO_IDEA" /D "OPENSSL_NO_RC5" /D "OPENSSL_NO_MDC2" /D "HAVE_OPENSSL" /D "HAVE_SSL_SET_STATE" /D "HAVE_OPENSSL_ENGINE_H" /D "HAVE_ENGINE_INIT" /D "HAVE_ENGINE_LOAD_BUILTIN_ENGINES" /D "SSL_DECLARE_EXPORT" /Fd"Release\mod_ssl_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_ssl.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_ssl.so" /d LONG_NAME="proxy_ssl_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_ssl.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ssl.so # ADD LINK32 kernel32.lib user32.lib wsock32.lib ws2_32.lib advapi32.lib gdi32.lib libeay32.lib ssleay32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_ssl.so" /libpath:"../../srclib/openssl/out32dll" /libpath:"../../srclib/openssl/out32" /base:@..\..\os\win32\BaseAddr.ref,mod_ssl.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_ssl.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_ssl - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../generators" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../../srclib/openssl/inc32" /I "../md" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "WIN32_LEAN_AND_MEAN" /D "NO_IDEA" /D "NO_RC5" /D "NO_MDC2" /D "OPENSSL_NO_IDEA" /D "OPENSSL_NO_RC5" /D "OPENSSL_NO_MDC2" /D "HAVE_OPENSSL" /D "HAVE_SSL_SET_STATE" /D "HAVE_OPENSSL_ENGINE_H" /D "HAVE_ENGINE_INIT" /D "HAVE_ENGINE_LOAD_BUILTIN_ENGINES" /D "SSL_DECLARE_EXPORT" /Fd"Debug\mod_ssl_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_ssl.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_ssl.so" /d LONG_NAME="proxy_ssl_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_ssl.so" /base:@..\..\os\win32\BaseAddr.ref,mod_ssl.so # ADD LINK32 kernel32.lib user32.lib wsock32.lib ws2_32.lib advapi32.lib gdi32.lib libeay32.lib ssleay32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_ssl.so" /libpath:"../../srclib/openssl/out32dll.dbg" /libpath:"../../srclib/openssl/out32.dbg" /libpath:"../../srclib/openssl/out32dll" /libpath:"../../srclib/openssl/out32" /base:@..\..\os\win32\BaseAddr.ref,mod_ssl.so # Begin Special Build Tool TargetPath=.\Debug\mod_ssl.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_ssl - Win32 Release" # Name "mod_ssl - Win32 Debug" # Begin Group "Source Files" # PROP Default_Filter "*.c" # Begin Source File SOURCE=.\mod_ssl.c # End Source File # Begin Source File SOURCE=.\ssl_engine_config.c # End Source File # Begin Source File SOURCE=.\ssl_engine_init.c # End Source File # Begin Source File SOURCE=.\ssl_engine_io.c # End Source File # Begin Source File SOURCE=.\ssl_engine_kernel.c # End Source File # Begin Source File SOURCE=.\ssl_engine_log.c # End Source File # Begin Source File SOURCE=.\ssl_engine_mutex.c # End Source File # Begin Source File SOURCE=.\ssl_engine_pphrase.c # End Source File # Begin Source File SOURCE=.\ssl_engine_rand.c # End Source File # Begin Source File SOURCE=.\ssl_engine_vars.c # End Source File # Begin Source File SOURCE=.\ssl_engine_ocsp.c # End Source File # Begin Source File SOURCE=.\ssl_util_ocsp.c # End Source File # Begin Source File SOURCE=.\ssl_scache.c # End Source File # Begin Source File SOURCE=.\ssl_util_stapling.c # End Source File # Begin Source File SOURCE=.\ssl_util.c # End Source File # Begin Source File SOURCE=.\ssl_util_ssl.c # End Source File # End Group # Begin Group "Header Files" # PROP Default_Filter "*.h" # Begin Source File SOURCE=.\mod_ssl.h # End Source File # Begin Source File SOURCE=.\ssl_private.h # End Source File # Begin Source File SOURCE=.\ssl_util_ssl.h # End Source File # Begin Source File SOURCE=.\ssl_util_table.h # End Source File # End Group # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/ssl/ssl_engine_log.c0000644000000000000500000002070012602744037016644 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * _ __ ___ ___ __| | ___ ___| | mod_ssl * | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL * | | | | | | (_) | (_| | \__ \__ \ | * |_| |_| |_|\___/ \__,_|___|___/___/_| * |_____| * ssl_engine_log.c * Logging Facility */ /* ``The difference between a computer industry job and open-source software hacking is about 30 hours a week.'' -- Ralf S. Engelschall */ #include "ssl_private.h" /* _________________________________________________________________ ** ** Logfile Support ** _________________________________________________________________ */ static const struct { const char *cpPattern; const char *cpAnnotation; } ssl_log_annotate[] = { { "*envelope*bad*decrypt*", "wrong pass phrase!?" }, { "*CLIENT_HELLO*unknown*protocol*", "speaking not SSL to HTTPS port!?" }, { "*CLIENT_HELLO*http*request*", "speaking HTTP to HTTPS port!?" }, { "*SSL3_READ_BYTES:sslv3*alert*bad*certificate*", "Subject CN in certificate not server name or identical to CA!?" }, { "*self signed certificate in certificate chain*", "Client certificate signed by CA not known to server?" }, { "*peer did not return a certificate*", "No CAs known to server for verification?" }, { "*no shared cipher*", "Too restrictive SSLCipherSuite or using DSA server certificate?" }, { "*no start line*", "Bad file contents or format - or even just a forgotten SSLCertificateKeyFile?" }, { "*bad password read*", "You entered an incorrect pass phrase!?" }, { "*bad mac decode*", "Browser still remembered details of a re-created server certificate?" }, { NULL, NULL } }; static const char *ssl_log_annotation(const char *error) { int i = 0; while (ssl_log_annotate[i].cpPattern != NULL && ap_strcmp_match(error, ssl_log_annotate[i].cpPattern) != 0) i++; return ssl_log_annotate[i].cpAnnotation; } apr_status_t ssl_die(server_rec *s) { if (s != NULL && s->is_virtual && s->error_fname != NULL) ap_log_error(APLOG_MARK, APLOG_EMERG, 0, NULL, APLOGNO(02311) "Fatal error initialising mod_ssl, exiting. " "See %s for more information", ap_server_root_relative(s->process->pool, s->error_fname)); else ap_log_error(APLOG_MARK, APLOG_EMERG, 0, NULL, APLOGNO(02312) "Fatal error initialising mod_ssl, exiting."); return APR_EGENERAL; } /* * Prints the SSL library error information. */ void ssl_log_ssl_error(const char *file, int line, int level, server_rec *s) { unsigned long e; const char *data; int flags; while ((e = ERR_peek_error_line_data(NULL, NULL, &data, &flags))) { const char *annotation; char err[256]; if (!(flags & ERR_TXT_STRING)) { data = NULL; } ERR_error_string_n(e, err, sizeof err); annotation = ssl_log_annotation(err); ap_log_error(file, line, APLOG_MODULE_INDEX, level, 0, s, "SSL Library Error: %s%s%s%s%s%s", /* %s */ err, /* %s%s%s */ data ? " (" : "", data ? data : "", data ? ")" : "", /* %s%s */ annotation ? " -- " : "", annotation ? annotation : ""); /* Pop the error off the stack: */ ERR_get_error(); } } static void ssl_log_cert_error(const char *file, int line, int level, apr_status_t rv, const server_rec *s, const conn_rec *c, const request_rec *r, apr_pool_t *p, X509 *cert, const char *format, va_list ap) { char buf[HUGE_STRING_LEN]; int msglen, n; char *name; apr_vsnprintf(buf, sizeof buf, format, ap); msglen = strlen(buf); if (cert) { BIO *bio = BIO_new(BIO_s_mem()); if (bio) { /* * Limit the maximum length of the subject and issuer DN strings * in the log message. 300 characters should always be sufficient * for holding both the timestamp, module name, pid etc. stuff * at the beginning of the line and the trailing information about * serial, notbefore and notafter. */ int maxdnlen = (HUGE_STRING_LEN - msglen - 300) / 2; BIO_puts(bio, " [subject: "); name = modssl_X509_NAME_to_string(p, X509_get_subject_name(cert), maxdnlen); if (!strIsEmpty(name)) { BIO_puts(bio, name); } else { BIO_puts(bio, "-empty-"); } BIO_puts(bio, " / issuer: "); name = modssl_X509_NAME_to_string(p, X509_get_issuer_name(cert), maxdnlen); if (!strIsEmpty(name)) { BIO_puts(bio, name); } else { BIO_puts(bio, "-empty-"); } BIO_puts(bio, " / serial: "); if (i2a_ASN1_INTEGER(bio, X509_get_serialNumber(cert)) == -1) BIO_puts(bio, "(ERROR)"); BIO_puts(bio, " / notbefore: "); ASN1_TIME_print(bio, X509_get_notBefore(cert)); BIO_puts(bio, " / notafter: "); ASN1_TIME_print(bio, X509_get_notAfter(cert)); BIO_puts(bio, "]"); n = BIO_read(bio, buf + msglen, sizeof buf - msglen - 1); if (n > 0) buf[msglen + n] = '\0'; BIO_free(bio); } } else { apr_snprintf(buf + msglen, sizeof buf - msglen, " [certificate: -not available-]"); } if (r) { ap_log_rerror(file, line, APLOG_MODULE_INDEX, level, rv, r, "%s", buf); } else if (c) { ap_log_cerror(file, line, APLOG_MODULE_INDEX, level, rv, c, "%s", buf); } else if (s) { ap_log_error(file, line, APLOG_MODULE_INDEX, level, rv, s, "%s", buf); } } /* * Wrappers for ap_log_error/ap_log_cerror/ap_log_rerror which log additional * details of the X509 cert. For ssl_log_xerror, a pool needs to be passed in * as well (for temporary allocation of the cert's subject/issuer name strings, * in the other cases we use the connection and request pool, respectively). */ void ssl_log_xerror(const char *file, int line, int level, apr_status_t rv, apr_pool_t *ptemp, server_rec *s, X509 *cert, const char *fmt, ...) { if (APLOG_IS_LEVEL(s,level)) { va_list ap; va_start(ap, fmt); ssl_log_cert_error(file, line, level, rv, s, NULL, NULL, ptemp, cert, fmt, ap); va_end(ap); } } void ssl_log_cxerror(const char *file, int line, int level, apr_status_t rv, conn_rec *c, X509 *cert, const char *fmt, ...) { if (APLOG_IS_LEVEL(mySrvFromConn(c),level)) { va_list ap; va_start(ap, fmt); ssl_log_cert_error(file, line, level, rv, NULL, c, NULL, c->pool, cert, fmt, ap); va_end(ap); } } void ssl_log_rxerror(const char *file, int line, int level, apr_status_t rv, request_rec *r, X509 *cert, const char *fmt, ...) { if (APLOG_R_IS_LEVEL(r,level)) { va_list ap; va_start(ap, fmt); ssl_log_cert_error(file, line, level, rv, NULL, NULL, r, r->pool, cert, fmt, ap); va_end(ap); } } httpd-2.4.41/modules/ssl/NWGNUmakefile0000644000000000000500000001374611640464273016046 0ustar rootsrc# # This Makefile requires the environment var OSSLSDK # pointing to the base directory of your OpenSSL SDK. # If you want to use the Novell NTLS SDK instead then # define NTLSSDK pointing to the base directory of the # SDK, and also set USE_NTLS=1 # # # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # ifeq "$(USE_NTLS)" "1" SSL_INC = $(NTLSSDK)/inc SSL_LIB = $(NTLSSDK)/imp SSL_BIN = $(NTLSSDK)/bin SSL_APP = $(NTLSSDK)/apps ifneq "$(wildcard $(SSL_INC)/openssl/opensslv.h)" "$(SSL_INC)/openssl/opensslv.h" $(error '$(NTLSSDK)' does NOT point to a valid NTLS SDK!) endif else SSL_INC = $(OSSLSDK)/outinc_nw_libc SSL_LIB = $(OSSLSDK)/out_nw_libc SSL_BIN = $(OSSLSDK)/out_nw_libc SSL_APP = $(OSSLSDK)/apps ifneq "$(wildcard $(SSL_INC)/openssl/opensslv.h)" "$(SSL_INC)/openssl/opensslv.h" $(error '$(OSSLSDK)' does NOT point to a valid OpenSSL SDK!) endif endif # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(SSL_INC) \ $(APR)/include \ $(APRUTIL)/include \ $(AP_WORK)/include \ $(AP_WORK)/modules/cache \ $(AP_WORK)/modules/generators \ $(AP_WORK)/server/mpm/NetWare \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ -DHAVE_OPENSSL \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ -l $(SSL_LIB) \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = mod_ssl # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # ifeq "$(USE_NTLS)" "1" NLM_DESCRIPTION = Apache $(VERSION_STR) SSL module (NTLS) else NLM_DESCRIPTION = Apache $(VERSION_STR) SSL module (OpenSSL) endif # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = $(NLM_NAME) # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If this is specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # Declare all target files (you must add your files here) # # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/$(NLM_NAME).nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs := $(patsubst %.c,$(OBJDIR)/%.o,$(wildcard *.c)) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) ifneq "$(USE_NTLS)" "1" FILES_nlm_libs += \ $(SSL_LIB)/crypto.lib \ $(SSL_LIB)/ssl.lib \ $(EOLIST) endif # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ Apache2 \ Libc \ $(EOLIST) ifeq "$(USE_NTLS)" "1" FILES_nlm_modules += ntls \ $(EOLIST) endif # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @libc.imp \ @aprlib.imp \ @httpd.imp \ $(EOLIST) # Don't link with Winsock if standard sockets are being used ifneq "$(USE_STDSOCKETS)" "1" FILES_nlm_Ximports += @ws2nlm.imp \ $(EOLIST) endif ifeq "$(USE_NTLS)" "1" FILES_nlm_Ximports += @ntls.imp \ $(EOLIST) else FILES_nlm_Ximports += \ GetProcessSwitchCount \ RunningProcess \ GetSuperHighResolutionTimer \ $(EOLIST) endif # # Any symbols exported to here # FILES_nlm_exports = \ ssl_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) $(call COPY,$(SSL_BIN)/openssl.nlm, $(INSTALLBASE)/bin/) $(call COPY,$(SSL_APP)/openssl.cnf, $(INSTALLBASE)/bin/) # # Any specialized rules here # vpath %.c $(AP_WORK)/modules/arch/netware # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/ssl/mod_ssl.dep0000644000000000000500000011361712674411515015656 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_ssl.mak .\mod_ssl.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_md5.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_ssl.h"\ ".\mod_ssl_openssl.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_engine_config.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_engine_init.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\mpm_common.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_ssl.h"\ ".\mod_ssl_openssl.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_engine_io.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_date.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_ssl.h"\ ".\mod_ssl_openssl.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_engine_kernel.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_md5.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_md5.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_ssl.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_engine_log.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_engine_mutex.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_engine_ocsp.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_base64.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_engine_pphrase.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_engine_rand.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_engine_vars.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\loggers\mod_log_config.h"\ ".\mod_ssl.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_scache.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ "..\generators\mod_status.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_util.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_util_ocsp.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_util_ssl.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ .\ssl_util_stapling.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\ap_socache.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_connection.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\http_main.h"\ "..\..\include\http_protocol.h"\ "..\..\include\http_request.h"\ "..\..\include\http_vhost.h"\ "..\..\include\httpd.h"\ "..\..\include\mod_auth.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_charset.h"\ "..\..\include\util_ebcdic.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\include\util_script.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apr_xlate.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_fnmatch.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_lib.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\ssl_private.h"\ ".\ssl_util_ssl.h"\ ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ httpd-2.4.41/modules/ssl/config.m40000644000000000000500000000364412241452212015216 0ustar rootsrcdnl Licensed to the Apache Software Foundation (ASF) under one or more dnl contributor license agreements. See the NOTICE file distributed with dnl this work for additional information regarding copyright ownership. dnl The ASF licenses this file to You under the Apache License, Version 2.0 dnl (the "License"); you may not use this file except in compliance with dnl the License. You may obtain a copy of the License at dnl dnl http://www.apache.org/licenses/LICENSE-2.0 dnl dnl Unless required by applicable law or agreed to in writing, software dnl distributed under the License is distributed on an "AS IS" BASIS, dnl WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. dnl See the License for the specific language governing permissions and dnl limitations under the License. dnl # start of module specific part APACHE_MODPATH_INIT(ssl) dnl # list of module object files ssl_objs="dnl mod_ssl.lo dnl ssl_engine_config.lo dnl ssl_engine_init.lo dnl ssl_engine_io.lo dnl ssl_engine_kernel.lo dnl ssl_engine_log.lo dnl ssl_engine_mutex.lo dnl ssl_engine_pphrase.lo dnl ssl_engine_rand.lo dnl ssl_engine_vars.lo dnl ssl_scache.lo dnl ssl_util_stapling.lo dnl ssl_util.lo dnl ssl_util_ssl.lo dnl ssl_engine_ocsp.lo dnl ssl_util_ocsp.lo dnl " dnl # hook module into the Autoconf mechanism (--enable-ssl option) APACHE_MODULE(ssl, [SSL/TLS support (mod_ssl)], $ssl_objs, , most, [ APACHE_CHECK_OPENSSL if test "$ac_cv_openssl" = "yes" ; then if test "x$enable_ssl" = "xshared"; then # The only symbol which needs to be exported is the module # structure, so ask libtool to hide everything else: APR_ADDTO(MOD_SSL_LDADD, [-export-symbols-regex ssl_module]) fi else enable_ssl=no fi ]) # Ensure that other modules can pick up mod_ssl.h APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) dnl # end of module specific part APACHE_MODPATH_FINISH httpd-2.4.41/modules/ssl/ssl_util.c0000644000000000000500000003361013376014140015511 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * _ __ ___ ___ __| | ___ ___| | mod_ssl * | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL * | | | | | | (_) | (_| | \__ \__ \ | * |_| |_| |_|\___/ \__,_|___|___/___/_| * |_____| * ssl_util.c * Utility Functions */ /* ``Every day of my life I am forced to add another name to the list of people who piss me off!'' -- Calvin */ #include "ssl_private.h" #include "ap_mpm.h" #include "apr_thread_mutex.h" /* _________________________________________________________________ ** ** Utility Functions ** _________________________________________________________________ */ char *ssl_util_vhostid(apr_pool_t *p, server_rec *s) { SSLSrvConfigRec *sc; apr_port_t port; if (s->port != 0) port = s->port; else { sc = mySrvConfig(s); port = sc->enabled == TRUE ? DEFAULT_HTTPS_PORT : DEFAULT_HTTP_PORT; } return apr_psprintf(p, "%s:%lu", s->server_hostname, (unsigned long)port); } /* * Return TRUE iff the given servername matches the server record when * selecting virtual hosts. */ BOOL ssl_util_vhost_matches(const char *servername, server_rec *s) { apr_array_header_t *names; int i; /* check ServerName */ if (!strcasecmp(servername, s->server_hostname)) { return TRUE; } /* * if not matched yet, check ServerAlias entries * (adapted from vhost.c:matches_aliases()) */ names = s->names; if (names) { char **name = (char **)names->elts; for (i = 0; i < names->nelts; ++i) { if (!name[i]) continue; if (!strcasecmp(servername, name[i])) { return TRUE; } } } /* if still no match, check ServerAlias entries with wildcards */ names = s->wild_names; if (names) { char **name = (char **)names->elts; for (i = 0; i < names->nelts; ++i) { if (!name[i]) continue; if (!ap_strcasecmp_match(servername, name[i])) { return TRUE; } } } return FALSE; } int modssl_request_is_tls(const request_rec *r, SSLConnRec **scout) { SSLConnRec *sslconn = myConnConfig(r->connection); SSLSrvConfigRec *sc = mySrvConfig(r->server); if (!(sslconn && sslconn->ssl) && r->connection->master) { sslconn = myConnConfig(r->connection->master); } if (sc->enabled == SSL_ENABLED_FALSE || !sslconn || !sslconn->ssl) return 0; if (scout) *scout = sslconn; return 1; } apr_file_t *ssl_util_ppopen(server_rec *s, apr_pool_t *p, const char *cmd, const char * const *argv) { apr_procattr_t *procattr; apr_proc_t *proc; if (apr_procattr_create(&procattr, p) != APR_SUCCESS) return NULL; if (apr_procattr_io_set(procattr, APR_FULL_BLOCK, APR_FULL_BLOCK, APR_FULL_BLOCK) != APR_SUCCESS) return NULL; if (apr_procattr_dir_set(procattr, ap_make_dirstr_parent(p, cmd)) != APR_SUCCESS) return NULL; if (apr_procattr_cmdtype_set(procattr, APR_PROGRAM) != APR_SUCCESS) return NULL; proc = apr_pcalloc(p, sizeof(apr_proc_t)); if (apr_proc_create(proc, cmd, argv, NULL, procattr, p) != APR_SUCCESS) return NULL; return proc->out; } void ssl_util_ppclose(server_rec *s, apr_pool_t *p, apr_file_t *fp) { apr_file_close(fp); return; } /* * Run a filter program and read the first line of its stdout output */ char *ssl_util_readfilter(server_rec *s, apr_pool_t *p, const char *cmd, const char * const *argv) { static char buf[MAX_STRING_LEN]; apr_file_t *fp; apr_size_t nbytes = 1; char c; int k; if ((fp = ssl_util_ppopen(s, p, cmd, argv)) == NULL) return NULL; /* XXX: we are reading 1 byte at a time here */ for (k = 0; apr_file_read(fp, &c, &nbytes) == APR_SUCCESS && nbytes == 1 && (k < MAX_STRING_LEN-1) ; ) { if (c == '\n' || c == '\r') break; buf[k++] = c; } buf[k] = NUL; ssl_util_ppclose(s, p, fp); return buf; } BOOL ssl_util_path_check(ssl_pathcheck_t pcm, const char *path, apr_pool_t *p) { apr_finfo_t finfo; if (path == NULL) return FALSE; if (pcm & SSL_PCM_EXISTS && apr_stat(&finfo, path, APR_FINFO_TYPE|APR_FINFO_SIZE, p) != 0) return FALSE; AP_DEBUG_ASSERT((pcm & SSL_PCM_EXISTS) || !(pcm & (SSL_PCM_ISREG|SSL_PCM_ISDIR|SSL_PCM_ISNONZERO))); if (pcm & SSL_PCM_ISREG && finfo.filetype != APR_REG) return FALSE; if (pcm & SSL_PCM_ISDIR && finfo.filetype != APR_DIR) return FALSE; if (pcm & SSL_PCM_ISNONZERO && finfo.size <= 0) return FALSE; return TRUE; } /* * certain key data needs to survive restarts, * which are stored in the user data table of s->process->pool. * to prevent "leaking" of this data, we use malloc/free * rather than apr_palloc and these wrappers to help make sure * we do not leak the malloc-ed data. */ unsigned char *ssl_asn1_table_set(apr_hash_t *table, const char *key, long int length) { apr_ssize_t klen = strlen(key); ssl_asn1_t *asn1 = apr_hash_get(table, key, klen); /* * if a value for this key already exists, * reuse as much of the already malloc-ed data * as possible. */ if (asn1) { if (asn1->nData != length) { free(asn1->cpData); /* XXX: realloc? */ asn1->cpData = NULL; } } else { asn1 = ap_malloc(sizeof(*asn1)); asn1->source_mtime = 0; /* used as a note for encrypted private keys */ asn1->cpData = NULL; } asn1->nData = length; if (!asn1->cpData) { asn1->cpData = ap_malloc(length); } apr_hash_set(table, key, klen, asn1); return asn1->cpData; /* caller will assign a value to this */ } ssl_asn1_t *ssl_asn1_table_get(apr_hash_t *table, const char *key) { return (ssl_asn1_t *)apr_hash_get(table, key, APR_HASH_KEY_STRING); } void ssl_asn1_table_unset(apr_hash_t *table, const char *key) { apr_ssize_t klen = strlen(key); ssl_asn1_t *asn1 = apr_hash_get(table, key, klen); if (!asn1) { return; } if (asn1->cpData) { free(asn1->cpData); } free(asn1); apr_hash_set(table, key, klen, NULL); } #if APR_HAS_THREADS && MODSSL_USE_OPENSSL_PRE_1_1_API /* * To ensure thread-safetyness in OpenSSL - work in progress */ static apr_thread_mutex_t **lock_cs; static int lock_num_locks; static void ssl_util_thr_lock(int mode, int type, const char *file, int line) { if (type < lock_num_locks) { if (mode & CRYPTO_LOCK) { apr_thread_mutex_lock(lock_cs[type]); } else { apr_thread_mutex_unlock(lock_cs[type]); } } } /* Dynamic lock structure */ struct CRYPTO_dynlock_value { apr_pool_t *pool; const char* file; int line; apr_thread_mutex_t *mutex; }; /* Global reference to the pool passed into ssl_util_thread_setup() */ apr_pool_t *dynlockpool = NULL; /* * Dynamic lock creation callback */ static struct CRYPTO_dynlock_value *ssl_dyn_create_function(const char *file, int line) { struct CRYPTO_dynlock_value *value; apr_pool_t *p; apr_status_t rv; /* * We need a pool to allocate our mutex. Since we can't clear * allocated memory from a pool, create a subpool that we can blow * away in the destruction callback. */ apr_pool_create(&p, dynlockpool); ap_log_perror(file, line, APLOG_MODULE_INDEX, APLOG_TRACE1, 0, p, "Creating dynamic lock"); value = apr_palloc(p, sizeof(struct CRYPTO_dynlock_value)); value->pool = p; /* Keep our own copy of the place from which we were created, using our own pool. */ value->file = apr_pstrdup(p, file); value->line = line; rv = apr_thread_mutex_create(&(value->mutex), APR_THREAD_MUTEX_DEFAULT, p); if (rv != APR_SUCCESS) { ap_log_perror(file, line, APLOG_MODULE_INDEX, APLOG_ERR, rv, p, APLOGNO(02186) "Failed to create thread mutex for dynamic lock"); apr_pool_destroy(p); return NULL; } return value; } /* * Dynamic locking and unlocking function */ static void ssl_dyn_lock_function(int mode, struct CRYPTO_dynlock_value *l, const char *file, int line) { apr_status_t rv; if (mode & CRYPTO_LOCK) { ap_log_perror(file, line, APLOG_MODULE_INDEX, APLOG_TRACE3, 0, l->pool, "Acquiring mutex %s:%d", l->file, l->line); rv = apr_thread_mutex_lock(l->mutex); ap_log_perror(file, line, APLOG_MODULE_INDEX, APLOG_TRACE3, rv, l->pool, "Mutex %s:%d acquired!", l->file, l->line); } else { ap_log_perror(file, line, APLOG_MODULE_INDEX, APLOG_TRACE3, 0, l->pool, "Releasing mutex %s:%d", l->file, l->line); rv = apr_thread_mutex_unlock(l->mutex); ap_log_perror(file, line, APLOG_MODULE_INDEX, APLOG_TRACE3, rv, l->pool, "Mutex %s:%d released!", l->file, l->line); } } /* * Dynamic lock destruction callback */ static void ssl_dyn_destroy_function(struct CRYPTO_dynlock_value *l, const char *file, int line) { apr_status_t rv; ap_log_perror(file, line, APLOG_MODULE_INDEX, APLOG_TRACE1, 0, l->pool, "Destroying dynamic lock %s:%d", l->file, l->line); rv = apr_thread_mutex_destroy(l->mutex); if (rv != APR_SUCCESS) { ap_log_perror(file, line, APLOG_MODULE_INDEX, APLOG_ERR, rv, l->pool, APLOGNO(02192) "Failed to destroy mutex for dynamic " "lock %s:%d", l->file, l->line); } /* Trust that whomever owned the CRYPTO_dynlock_value we were * passed has no future use for it... */ apr_pool_destroy(l->pool); } #if OPENSSL_VERSION_NUMBER >= 0x10000000L static void ssl_util_thr_id(CRYPTO_THREADID *id) { /* OpenSSL needs this to return an unsigned long. On OS/390, the pthread * id is a structure twice that big. Use the TCB pointer instead as a * unique unsigned long. */ #ifdef __MVS__ struct PSA { char unmapped[540]; /* PSATOLD is at offset 540 in the PSA */ unsigned long PSATOLD; } *psaptr = 0; /* PSA is at address 0 */ CRYPTO_THREADID_set_numeric(id, psaptr->PSATOLD); #else CRYPTO_THREADID_set_numeric(id, (unsigned long) apr_os_thread_current()); #endif } static apr_status_t ssl_util_thr_id_cleanup(void *old) { CRYPTO_THREADID_set_callback(old); return APR_SUCCESS; } #else static unsigned long ssl_util_thr_id(void) { /* OpenSSL needs this to return an unsigned long. On OS/390, the pthread * id is a structure twice that big. Use the TCB pointer instead as a * unique unsigned long. */ #ifdef __MVS__ struct PSA { char unmapped[540]; unsigned long PSATOLD; } *psaptr = 0; return psaptr->PSATOLD; #else return (unsigned long) apr_os_thread_current(); #endif } static apr_status_t ssl_util_thr_id_cleanup(void *old) { CRYPTO_set_id_callback(old); return APR_SUCCESS; } #endif static apr_status_t ssl_util_thread_cleanup(void *data) { CRYPTO_set_locking_callback(NULL); CRYPTO_set_dynlock_create_callback(NULL); CRYPTO_set_dynlock_lock_callback(NULL); CRYPTO_set_dynlock_destroy_callback(NULL); dynlockpool = NULL; /* Let the registered mutex cleanups do their own thing */ return APR_SUCCESS; } void ssl_util_thread_setup(apr_pool_t *p) { int i; lock_num_locks = CRYPTO_num_locks(); lock_cs = apr_palloc(p, lock_num_locks * sizeof(*lock_cs)); for (i = 0; i < lock_num_locks; i++) { apr_thread_mutex_create(&(lock_cs[i]), APR_THREAD_MUTEX_DEFAULT, p); } CRYPTO_set_locking_callback(ssl_util_thr_lock); /* Set up dynamic locking scaffolding for OpenSSL to use at its * convenience. */ dynlockpool = p; CRYPTO_set_dynlock_create_callback(ssl_dyn_create_function); CRYPTO_set_dynlock_lock_callback(ssl_dyn_lock_function); CRYPTO_set_dynlock_destroy_callback(ssl_dyn_destroy_function); apr_pool_cleanup_register(p, NULL, ssl_util_thread_cleanup, apr_pool_cleanup_null); } void ssl_util_thread_id_setup(apr_pool_t *p) { #if OPENSSL_VERSION_NUMBER >= 0x10000000L CRYPTO_THREADID_set_callback(ssl_util_thr_id); #else CRYPTO_set_id_callback(ssl_util_thr_id); #endif apr_pool_cleanup_register(p, NULL, ssl_util_thr_id_cleanup, apr_pool_cleanup_null); } #endif /* #if APR_HAS_THREADS && MODSSL_USE_OPENSSL_PRE_1_1_API */ httpd-2.4.41/modules/ssl/ssl_engine_io.c0000644000000000000500000023215513471722156016506 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * _ __ ___ ___ __| | ___ ___| | mod_ssl * | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL * | | | | | | (_) | (_| | \__ \__ \ | * |_| |_| |_|\___/ \__,_|___|___/___/_| * |_____| * ssl_engine_io.c * I/O Functions */ /* ``MY HACK: This universe. Just one little problem: core keeps dumping.'' -- Unknown */ #include "ssl_private.h" #include "mod_ssl.h" #include "mod_ssl_openssl.h" #include "apr_date.h" APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(ssl, SSL, int, proxy_post_handshake, (conn_rec *c,SSL *ssl), (c,ssl),OK,DECLINED); /* _________________________________________________________________ ** ** I/O Hooks ** _________________________________________________________________ */ /* This file is designed to be the bridge between OpenSSL and httpd. * However, we really don't expect anyone (let alone ourselves) to * remember what is in this file. So, first, a quick overview. * * In this file, you will find: * - ssl_io_filter_input (Apache input filter) * - ssl_io_filter_output (Apache output filter) * * - bio_filter_in_* (OpenSSL input filter) * - bio_filter_out_* (OpenSSL output filter) * * The input chain is roughly: * * ssl_io_filter_input->ssl_io_input_read->SSL_read->... * ...->bio_filter_in_read->ap_get_brigade/next-httpd-filter * * In mortal terminology, we do the following: * - Receive a request for data to the SSL input filter * - Call a helper function once we know we should perform a read * - Call OpenSSL's SSL_read() * - SSL_read() will then call bio_filter_in_read * - bio_filter_in_read will then try to fetch data from the next httpd filter * - bio_filter_in_read will flatten that data and return it to SSL_read * - SSL_read will then decrypt the data * - ssl_io_input_read will then receive decrypted data as a char* and * ensure that there were no read errors * - The char* is placed in a brigade and returned * * Since connection-level input filters in httpd need to be able to * handle AP_MODE_GETLINE calls (namely identifying LF-terminated strings), * ssl_io_input_getline which will handle this special case. * * Due to AP_MODE_GETLINE and AP_MODE_SPECULATIVE, we may sometimes have * 'leftover' decoded data which must be setaside for the next read. That * is currently handled by the char_buffer_{read|write} functions. So, * ssl_io_input_read may be able to fulfill reads without invoking * SSL_read(). * * Note that the filter context of ssl_io_filter_input and bio_filter_in_* * are shared as bio_filter_in_ctx_t. * * Note that the filter is by choice limited to reading at most * AP_IOBUFSIZE (8192 bytes) per call. * */ /* this custom BIO allows us to hook SSL_write directly into * an apr_bucket_brigade and use transient buckets with the SSL * malloc-ed buffer, rather than copying into a mem BIO. * also allows us to pass the brigade as data is being written * rather than buffering up the entire response in the mem BIO. * * when SSL needs to flush (e.g. SSL_accept()), it will call BIO_flush() * which will trigger a call to bio_filter_out_ctrl() -> bio_filter_out_flush(). * so we only need to flush the output ourselves if we receive an * EOS or FLUSH bucket. this was not possible with the mem BIO where we * had to flush all over the place not really knowing when it was required * to do so. */ typedef struct { SSL *pssl; BIO *pbioRead; BIO *pbioWrite; ap_filter_t *pInputFilter; ap_filter_t *pOutputFilter; SSLConnRec *config; } ssl_filter_ctx_t; typedef struct { ssl_filter_ctx_t *filter_ctx; conn_rec *c; apr_bucket_brigade *bb; /* Brigade used as a buffer. */ apr_status_t rc; } bio_filter_out_ctx_t; static bio_filter_out_ctx_t *bio_filter_out_ctx_new(ssl_filter_ctx_t *filter_ctx, conn_rec *c) { bio_filter_out_ctx_t *outctx = apr_palloc(c->pool, sizeof(*outctx)); outctx->filter_ctx = filter_ctx; outctx->c = c; outctx->bb = apr_brigade_create(c->pool, c->bucket_alloc); return outctx; } /* Pass an output brigade down the filter stack; returns 1 on success * or -1 on failure. */ static int bio_filter_out_pass(bio_filter_out_ctx_t *outctx) { AP_DEBUG_ASSERT(!APR_BRIGADE_EMPTY(outctx->bb)); outctx->rc = ap_pass_brigade(outctx->filter_ctx->pOutputFilter->next, outctx->bb); /* Fail if the connection was reset: */ if (outctx->rc == APR_SUCCESS && outctx->c->aborted) { outctx->rc = APR_ECONNRESET; } return (outctx->rc == APR_SUCCESS) ? 1 : -1; } /* Send a FLUSH bucket down the output filter stack; returns 1 on * success, -1 on failure. */ static int bio_filter_out_flush(BIO *bio) { bio_filter_out_ctx_t *outctx = (bio_filter_out_ctx_t *)BIO_get_data(bio); apr_bucket *e; AP_DEBUG_ASSERT(APR_BRIGADE_EMPTY(outctx->bb)); e = apr_bucket_flush_create(outctx->bb->bucket_alloc); APR_BRIGADE_INSERT_TAIL(outctx->bb, e); return bio_filter_out_pass(outctx); } static int bio_filter_create(BIO *bio) { BIO_set_shutdown(bio, 1); BIO_set_init(bio, 1); #if MODSSL_USE_OPENSSL_PRE_1_1_API /* No setter method for OpenSSL 1.1.0 available, * but I can't find any functional use of the * "num" field there either. */ bio->num = -1; #endif BIO_set_data(bio, NULL); return 1; } static int bio_filter_destroy(BIO *bio) { if (bio == NULL) { return 0; } /* nothing to free here. * apache will destroy the bucket brigade for us */ return 1; } static int bio_filter_out_read(BIO *bio, char *out, int outl) { /* this is never called */ return -1; } static int bio_filter_out_write(BIO *bio, const char *in, int inl) { bio_filter_out_ctx_t *outctx = (bio_filter_out_ctx_t *)BIO_get_data(bio); apr_bucket *e; int need_flush; BIO_clear_retry_flags(bio); /* Abort early if the client has initiated a renegotiation. */ if (outctx->filter_ctx->config->reneg_state == RENEG_ABORT) { outctx->rc = APR_ECONNABORTED; return -1; } /* Use a transient bucket for the output data - any downstream * filter must setaside if necessary. */ e = apr_bucket_transient_create(in, inl, outctx->bb->bucket_alloc); APR_BRIGADE_INSERT_TAIL(outctx->bb, e); /* In theory, OpenSSL should flush as necessary, but it is known * not to do so correctly in some cases (< 0.9.8m; see PR 46952), * or on the proxy/client side (after ssl23_client_hello(), e.g. * ssl/proxy.t test suite). * * Historically, this flush call was performed only for an SSLv2 * connection or for a proxy connection. Calling _out_flush can * be expensive in cases where requests/responses are pipelined, * so limit the performance impact to handshake time. */ #if OPENSSL_VERSION_NUMBER < 0x0009080df need_flush = !SSL_is_init_finished(outctx->filter_ctx->pssl); #else need_flush = SSL_in_connect_init(outctx->filter_ctx->pssl); #endif if (need_flush) { e = apr_bucket_flush_create(outctx->bb->bucket_alloc); APR_BRIGADE_INSERT_TAIL(outctx->bb, e); } if (bio_filter_out_pass(outctx) < 0) { return -1; } return inl; } static long bio_filter_out_ctrl(BIO *bio, int cmd, long num, void *ptr) { long ret = 1; bio_filter_out_ctx_t *outctx = (bio_filter_out_ctx_t *)BIO_get_data(bio); switch (cmd) { case BIO_CTRL_RESET: case BIO_CTRL_EOF: case BIO_C_SET_BUF_MEM_EOF_RETURN: ap_log_cerror(APLOG_MARK, APLOG_TRACE4, 0, outctx->c, "output bio: unhandled control %d", cmd); ret = 0; break; case BIO_CTRL_WPENDING: case BIO_CTRL_PENDING: case BIO_CTRL_INFO: ret = 0; break; case BIO_CTRL_GET_CLOSE: ret = (long)BIO_get_shutdown(bio); break; case BIO_CTRL_SET_CLOSE: BIO_set_shutdown(bio, (int)num); break; case BIO_CTRL_FLUSH: ret = bio_filter_out_flush(bio); break; case BIO_CTRL_DUP: ret = 1; break; /* N/A */ case BIO_C_SET_BUF_MEM: case BIO_C_GET_BUF_MEM_PTR: /* we don't care */ case BIO_CTRL_PUSH: case BIO_CTRL_POP: default: ret = 0; break; } return ret; } static int bio_filter_out_gets(BIO *bio, char *buf, int size) { /* this is never called */ return -1; } static int bio_filter_out_puts(BIO *bio, const char *str) { /* this is never called */ return -1; } typedef struct { int length; char *value; } char_buffer_t; typedef struct { SSL *ssl; BIO *bio_out; ap_filter_t *f; apr_status_t rc; ap_input_mode_t mode; apr_read_type_e block; apr_bucket_brigade *bb; char_buffer_t cbuf; apr_pool_t *pool; char buffer[AP_IOBUFSIZE]; ssl_filter_ctx_t *filter_ctx; } bio_filter_in_ctx_t; /* * this char_buffer api might seem silly, but we don't need to copy * any of this data and we need to remember the length. */ /* Copy up to INL bytes from the char_buffer BUFFER into IN. Note * that due to the strange way this API is designed/used, the * char_buffer object is used to cache a segment of inctx->buffer, and * then this function called to copy (part of) that segment to the * beginning of inctx->buffer. So the segments to copy cannot be * presumed to be non-overlapping, and memmove must be used. */ static int char_buffer_read(char_buffer_t *buffer, char *in, int inl) { if (!buffer->length) { return 0; } if (buffer->length > inl) { /* we have enough to fill the caller's buffer */ memmove(in, buffer->value, inl); buffer->value += inl; buffer->length -= inl; } else { /* swallow remainder of the buffer */ memmove(in, buffer->value, buffer->length); inl = buffer->length; buffer->value = NULL; buffer->length = 0; } return inl; } static int char_buffer_write(char_buffer_t *buffer, char *in, int inl) { buffer->value = in; buffer->length = inl; return inl; } /* This function will read from a brigade and discard the read buckets as it * proceeds. It will read at most *len bytes. */ static apr_status_t brigade_consume(apr_bucket_brigade *bb, apr_read_type_e block, char *c, apr_size_t *len) { apr_size_t actual = 0; apr_status_t status = APR_SUCCESS; while (!APR_BRIGADE_EMPTY(bb)) { apr_bucket *b = APR_BRIGADE_FIRST(bb); const char *str; apr_size_t str_len; apr_size_t consume; /* Justin points out this is an http-ism that might * not fit if brigade_consume is added to APR. Perhaps * apr_bucket_read(eos_bucket) should return APR_EOF? * Then this becomes mainline instead of a one-off. */ if (APR_BUCKET_IS_EOS(b)) { status = APR_EOF; break; } /* The reason I'm not offering brigade_consume yet * across to apr-util is that the following call * illustrates how borked that API really is. For * this sort of case (caller provided buffer) it * would be much more trivial for apr_bucket_consume * to do all the work that follows, based on the * particular characteristics of the bucket we are * consuming here. */ status = apr_bucket_read(b, &str, &str_len, block); if (status != APR_SUCCESS) { if (APR_STATUS_IS_EOF(status)) { /* This stream bucket was consumed */ apr_bucket_delete(b); continue; } break; } if (str_len > 0) { /* Do not block once some data has been consumed */ block = APR_NONBLOCK_READ; /* Assure we don't overflow. */ consume = (str_len + actual > *len) ? *len - actual : str_len; memcpy(c, str, consume); c += consume; actual += consume; if (consume >= b->length) { /* This physical bucket was consumed */ apr_bucket_delete(b); } else { /* Only part of this physical bucket was consumed */ b->start += consume; b->length -= consume; } } else if (b->length == 0) { apr_bucket_delete(b); } /* This could probably be actual == *len, but be safe from stray * photons. */ if (actual >= *len) { break; } } *len = actual; return status; } /* * this is the function called by SSL_read() */ static int bio_filter_in_read(BIO *bio, char *in, int inlen) { apr_size_t inl = inlen; bio_filter_in_ctx_t *inctx = (bio_filter_in_ctx_t *)BIO_get_data(bio); apr_read_type_e block = inctx->block; inctx->rc = APR_SUCCESS; /* OpenSSL catches this case, so should we. */ if (!in) return 0; BIO_clear_retry_flags(bio); /* Abort early if the client has initiated a renegotiation. */ if (inctx->filter_ctx->config->reneg_state == RENEG_ABORT) { inctx->rc = APR_ECONNABORTED; return -1; } if (!inctx->bb) { inctx->rc = APR_EOF; return -1; } if (APR_BRIGADE_EMPTY(inctx->bb)) { inctx->rc = ap_get_brigade(inctx->f->next, inctx->bb, AP_MODE_READBYTES, block, inl); /* If the read returns EAGAIN or success with an empty * brigade, return an error after setting the retry flag; * SSL_read() will then return -1, and SSL_get_error() will * indicate SSL_ERROR_WANT_READ. */ if (APR_STATUS_IS_EAGAIN(inctx->rc) || APR_STATUS_IS_EINTR(inctx->rc) || (inctx->rc == APR_SUCCESS && APR_BRIGADE_EMPTY(inctx->bb))) { BIO_set_retry_read(bio); return -1; } if (block == APR_BLOCK_READ && APR_STATUS_IS_TIMEUP(inctx->rc) && APR_BRIGADE_EMPTY(inctx->bb)) { /* don't give up, just return the timeout */ return -1; } if (inctx->rc != APR_SUCCESS) { /* Unexpected errors discard the brigade */ apr_brigade_cleanup(inctx->bb); inctx->bb = NULL; return -1; } } inctx->rc = brigade_consume(inctx->bb, block, in, &inl); if (inctx->rc == APR_SUCCESS) { return (int)inl; } if (APR_STATUS_IS_EAGAIN(inctx->rc) || APR_STATUS_IS_EINTR(inctx->rc)) { BIO_set_retry_read(bio); return (int)inl; } /* Unexpected errors and APR_EOF clean out the brigade. * Subsequent calls will return APR_EOF. */ apr_brigade_cleanup(inctx->bb); inctx->bb = NULL; if (APR_STATUS_IS_EOF(inctx->rc) && inl) { /* Provide the results of this read pass, * without resetting the BIO retry_read flag */ return (int)inl; } return -1; } static int bio_filter_in_write(BIO *bio, const char *in, int inl) { return -1; } static int bio_filter_in_puts(BIO *bio, const char *str) { return -1; } static int bio_filter_in_gets(BIO *bio, char *buf, int size) { return -1; } static long bio_filter_in_ctrl(BIO *bio, int cmd, long num, void *ptr) { return -1; } #if MODSSL_USE_OPENSSL_PRE_1_1_API static BIO_METHOD bio_filter_out_method = { BIO_TYPE_MEM, "APR output filter", bio_filter_out_write, bio_filter_out_read, /* read is never called */ bio_filter_out_puts, /* puts is never called */ bio_filter_out_gets, /* gets is never called */ bio_filter_out_ctrl, bio_filter_create, bio_filter_destroy, NULL }; static BIO_METHOD bio_filter_in_method = { BIO_TYPE_MEM, "APR input filter", bio_filter_in_write, /* write is never called */ bio_filter_in_read, bio_filter_in_puts, /* puts is never called */ bio_filter_in_gets, /* gets is never called */ bio_filter_in_ctrl, /* ctrl is never called */ bio_filter_create, bio_filter_destroy, NULL }; #else static BIO_METHOD *bio_filter_out_method = NULL; static BIO_METHOD *bio_filter_in_method = NULL; void init_bio_methods(void) { bio_filter_out_method = BIO_meth_new(BIO_TYPE_MEM, "APR output filter"); BIO_meth_set_write(bio_filter_out_method, &bio_filter_out_write); BIO_meth_set_read(bio_filter_out_method, &bio_filter_out_read); /* read is never called */ BIO_meth_set_puts(bio_filter_out_method, &bio_filter_out_puts); /* puts is never called */ BIO_meth_set_gets(bio_filter_out_method, &bio_filter_out_gets); /* gets is never called */ BIO_meth_set_ctrl(bio_filter_out_method, &bio_filter_out_ctrl); BIO_meth_set_create(bio_filter_out_method, &bio_filter_create); BIO_meth_set_destroy(bio_filter_out_method, &bio_filter_destroy); bio_filter_in_method = BIO_meth_new(BIO_TYPE_MEM, "APR input filter"); BIO_meth_set_write(bio_filter_in_method, &bio_filter_in_write); /* write is never called */ BIO_meth_set_read(bio_filter_in_method, &bio_filter_in_read); BIO_meth_set_puts(bio_filter_in_method, &bio_filter_in_puts); /* puts is never called */ BIO_meth_set_gets(bio_filter_in_method, &bio_filter_in_gets); /* gets is never called */ BIO_meth_set_ctrl(bio_filter_in_method, &bio_filter_in_ctrl); /* ctrl is never called */ BIO_meth_set_create(bio_filter_in_method, &bio_filter_create); BIO_meth_set_destroy(bio_filter_in_method, &bio_filter_destroy); } void free_bio_methods(void) { BIO_meth_free(bio_filter_out_method); BIO_meth_free(bio_filter_in_method); } #endif static apr_status_t ssl_io_input_read(bio_filter_in_ctx_t *inctx, char *buf, apr_size_t *len) { apr_size_t wanted = *len; apr_size_t bytes = 0; int rc; *len = 0; /* If we have something leftover from last time, try that first. */ if ((bytes = char_buffer_read(&inctx->cbuf, buf, wanted))) { *len = bytes; if (inctx->mode == AP_MODE_SPECULATIVE) { /* We want to rollback this read. */ if (inctx->cbuf.length > 0) { inctx->cbuf.value -= bytes; inctx->cbuf.length += bytes; } else { char_buffer_write(&inctx->cbuf, buf, (int)bytes); } return APR_SUCCESS; } /* This could probably be *len == wanted, but be safe from stray * photons. */ if (*len >= wanted) { return APR_SUCCESS; } if (inctx->mode == AP_MODE_GETLINE) { if (memchr(buf, APR_ASCII_LF, *len)) { return APR_SUCCESS; } } else { /* Down to a nonblock pattern as we have some data already */ inctx->block = APR_NONBLOCK_READ; } } while (1) { if (!inctx->filter_ctx->pssl) { /* Ensure a non-zero error code is returned */ if (inctx->rc == APR_SUCCESS) { inctx->rc = APR_EGENERAL; } break; } /* We rely on SSL_get_error() after the read, which requires an empty * error queue before the read in order to work properly. */ ERR_clear_error(); /* SSL_read may not read because we haven't taken enough data * from the stack. This is where we want to consider all of * the blocking and SPECULATIVE semantics */ rc = SSL_read(inctx->filter_ctx->pssl, buf + bytes, wanted - bytes); if (rc > 0) { *len += rc; if (inctx->mode == AP_MODE_SPECULATIVE) { /* We want to rollback this read. */ char_buffer_write(&inctx->cbuf, buf, rc); } return inctx->rc; } else /* (rc <= 0) */ { int ssl_err; conn_rec *c; if (rc == 0) { /* If EAGAIN, we will loop given a blocking read, * otherwise consider ourselves at EOF. */ if (APR_STATUS_IS_EAGAIN(inctx->rc) || APR_STATUS_IS_EINTR(inctx->rc)) { /* Already read something, return APR_SUCCESS instead. * On win32 in particular, but perhaps on other kernels, * a blocking call isn't 'always' blocking. */ if (*len > 0) { inctx->rc = APR_SUCCESS; break; } if (inctx->block == APR_NONBLOCK_READ) { break; } } else { if (*len > 0) { inctx->rc = APR_SUCCESS; break; } } } ssl_err = SSL_get_error(inctx->filter_ctx->pssl, rc); c = (conn_rec*)SSL_get_app_data(inctx->filter_ctx->pssl); if (ssl_err == SSL_ERROR_WANT_READ) { /* * If OpenSSL wants to read more, and we were nonblocking, * report as an EAGAIN. Otherwise loop, pulling more * data from network filter. * * (This is usually the case when the client forces an SSL * renegotiation which is handled implicitly by OpenSSL.) */ inctx->rc = APR_EAGAIN; if (*len > 0) { inctx->rc = APR_SUCCESS; break; } if (inctx->block == APR_NONBLOCK_READ) { break; } continue; /* Blocking and nothing yet? Try again. */ } else if (ssl_err == SSL_ERROR_SYSCALL) { if (APR_STATUS_IS_EAGAIN(inctx->rc) || APR_STATUS_IS_EINTR(inctx->rc)) { /* Already read something, return APR_SUCCESS instead. */ if (*len > 0) { inctx->rc = APR_SUCCESS; break; } if (inctx->block == APR_NONBLOCK_READ) { break; } continue; /* Blocking and nothing yet? Try again. */ } else if (APR_STATUS_IS_TIMEUP(inctx->rc)) { /* just return it, the calling layer might be fine with it, and we do not want to bloat the log. */ } else { ap_log_cerror(APLOG_MARK, APLOG_INFO, inctx->rc, c, APLOGNO(01991) "SSL input filter read failed."); } } else if (rc == 0 && ssl_err == SSL_ERROR_ZERO_RETURN) { inctx->rc = APR_EOF; break; } else /* if (ssl_err == SSL_ERROR_SSL) */ { /* * Log SSL errors and any unexpected conditions. */ ap_log_cerror(APLOG_MARK, APLOG_INFO, inctx->rc, c, APLOGNO(01992) "SSL library error %d reading data", ssl_err); ssl_log_ssl_error(SSLLOG_MARK, APLOG_INFO, mySrvFromConn(c)); } if (rc == 0) { inctx->rc = APR_EOF; break; } if (inctx->rc == APR_SUCCESS) { inctx->rc = APR_EGENERAL; } break; } } return inctx->rc; } /* Read a line of input from the SSL input layer into buffer BUF of * length *LEN; updating *len to reflect the length of the line * including the LF character. */ static apr_status_t ssl_io_input_getline(bio_filter_in_ctx_t *inctx, char *buf, apr_size_t *len) { const char *pos = NULL; apr_status_t status; apr_size_t tmplen = *len, buflen = *len, offset = 0; *len = 0; /* * in most cases we get all the headers on the first SSL_read. * however, in certain cases SSL_read will only get a partial * chunk of the headers, so we try to read until LF is seen. */ while (tmplen > 0) { status = ssl_io_input_read(inctx, buf + offset, &tmplen); if (status != APR_SUCCESS) { if (APR_STATUS_IS_EAGAIN(status) && (*len > 0)) { /* Save the part of the line we already got */ char_buffer_write(&inctx->cbuf, buf, *len); } return status; } *len += tmplen; if ((pos = memchr(buf, APR_ASCII_LF, *len))) { break; } offset += tmplen; tmplen = buflen - offset; } if (pos) { char *value; int length; apr_size_t bytes = pos - buf; bytes += 1; value = buf + bytes; length = *len - bytes; char_buffer_write(&inctx->cbuf, value, length); *len = bytes; } return APR_SUCCESS; } static apr_status_t ssl_filter_write(ap_filter_t *f, const char *data, apr_size_t len) { ssl_filter_ctx_t *filter_ctx = f->ctx; bio_filter_out_ctx_t *outctx; int res; /* write SSL */ if (filter_ctx->pssl == NULL) { return APR_EGENERAL; } /* We rely on SSL_get_error() after the write, which requires an empty error * queue before the write in order to work properly. */ ERR_clear_error(); outctx = (bio_filter_out_ctx_t *)BIO_get_data(filter_ctx->pbioWrite); res = SSL_write(filter_ctx->pssl, (unsigned char *)data, len); if (res < 0) { int ssl_err = SSL_get_error(filter_ctx->pssl, res); conn_rec *c = (conn_rec*)SSL_get_app_data(outctx->filter_ctx->pssl); if (ssl_err == SSL_ERROR_WANT_WRITE) { /* * If OpenSSL wants to write more, and we were nonblocking, * report as an EAGAIN. Otherwise loop, pushing more * data at the network filter. * * (This is usually the case when the client forces an SSL * renegotiation which is handled implicitly by OpenSSL.) */ outctx->rc = APR_EAGAIN; } else if (ssl_err == SSL_ERROR_WANT_READ) { /* * If OpenSSL wants to read during write, and we were * nonblocking, set the sense explicitly to read and * report as an EAGAIN. * * (This is usually the case when the client forces an SSL * renegotiation which is handled implicitly by OpenSSL.) */ outctx->c->cs->sense = CONN_SENSE_WANT_READ; outctx->rc = APR_EAGAIN; ap_log_cerror(APLOG_MARK, APLOG_TRACE6, 0, outctx->c, "Want read during nonblocking write"); } else if (ssl_err == SSL_ERROR_SYSCALL) { ap_log_cerror(APLOG_MARK, APLOG_INFO, outctx->rc, c, APLOGNO(01993) "SSL output filter write failed."); } else /* if (ssl_err == SSL_ERROR_SSL) */ { /* * Log SSL errors */ ap_log_cerror(APLOG_MARK, APLOG_INFO, outctx->rc, c, APLOGNO(01994) "SSL library error %d writing data", ssl_err); ssl_log_ssl_error(SSLLOG_MARK, APLOG_INFO, mySrvFromConn(c)); } if (outctx->rc == APR_SUCCESS) { outctx->rc = APR_EGENERAL; } } else if ((apr_size_t)res != len) { conn_rec *c = f->c; char *reason = "reason unknown"; /* XXX: probably a better way to determine this */ if (SSL_total_renegotiations(filter_ctx->pssl)) { reason = "likely due to failed renegotiation"; } ap_log_cerror(APLOG_MARK, APLOG_INFO, outctx->rc, c, APLOGNO(01995) "failed to write %" APR_SSIZE_T_FMT " of %" APR_SIZE_T_FMT " bytes (%s)", len - (apr_size_t)res, len, reason); outctx->rc = APR_EGENERAL; } return outctx->rc; } /* Just use a simple request. Any request will work for this, because * we use a flag in the conn_rec->conn_vector now. The fake request just * gets the request back to the Apache core so that a response can be sent. * Since we use an HTTP/1.x request, we also have to inject the empty line * that terminates the headers, or the core will read more data from the * socket. */ #define HTTP_ON_HTTPS_PORT \ "GET / HTTP/1.0" CRLF #define HTTP_ON_HTTPS_PORT_BUCKET(alloc) \ apr_bucket_immortal_create(HTTP_ON_HTTPS_PORT, \ sizeof(HTTP_ON_HTTPS_PORT) - 1, \ alloc) /* Custom apr_status_t error code, used when a plain HTTP request is * recevied on an SSL port. */ #define MODSSL_ERROR_HTTP_ON_HTTPS (APR_OS_START_USERERR + 0) /* Custom apr_status_t error code, used when the proxy cannot * establish an outgoing SSL connection. */ #define MODSSL_ERROR_BAD_GATEWAY (APR_OS_START_USERERR + 1) static void ssl_io_filter_disable(SSLConnRec *sslconn, bio_filter_in_ctx_t *inctx) { SSL_free(inctx->ssl); sslconn->ssl = NULL; inctx->ssl = NULL; inctx->filter_ctx->pssl = NULL; } static apr_status_t ssl_io_filter_error(bio_filter_in_ctx_t *inctx, apr_bucket_brigade *bb, apr_status_t status, int is_init) { ap_filter_t *f = inctx->f; SSLConnRec *sslconn = myConnConfig(f->c); apr_bucket *bucket; int send_eos = 1; switch (status) { case MODSSL_ERROR_HTTP_ON_HTTPS: /* log the situation */ ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, f->c, APLOGNO(01996) "SSL handshake failed: HTTP spoken on HTTPS port; " "trying to send HTML error page"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_INFO, sslconn->server); ssl_io_filter_disable(sslconn, inctx); f->c->keepalive = AP_CONN_CLOSE; if (is_init) { sslconn->non_ssl_request = NON_SSL_SEND_REQLINE; return APR_EGENERAL; } sslconn->non_ssl_request = NON_SSL_SEND_HDR_SEP; /* fake the request line */ bucket = HTTP_ON_HTTPS_PORT_BUCKET(f->c->bucket_alloc); send_eos = 0; break; case MODSSL_ERROR_BAD_GATEWAY: ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, f->c, APLOGNO(01997) "SSL handshake failed: sending 502"); f->c->aborted = 1; return APR_EGENERAL; default: return status; } APR_BRIGADE_INSERT_TAIL(bb, bucket); if (send_eos) { bucket = apr_bucket_eos_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, bucket); } return APR_SUCCESS; } static const char ssl_io_filter[] = "SSL/TLS Filter"; static const char ssl_io_buffer[] = "SSL/TLS Buffer"; static const char ssl_io_coalesce[] = "SSL/TLS Coalescing Filter"; /* * Close the SSL part of the socket connection * (called immediately _before_ the socket is closed) * or called with */ static void ssl_filter_io_shutdown(ssl_filter_ctx_t *filter_ctx, conn_rec *c, int abortive) { SSL *ssl = filter_ctx->pssl; const char *type = ""; SSLConnRec *sslconn = myConnConfig(c); int shutdown_type; int loglevel = APLOG_DEBUG; const char *logno; if (!ssl) { return; } /* * Now close the SSL layer of the connection. We've to take * the TLSv1 standard into account here: * * | 7.2.1. Closure alerts * | * | The client and the server must share knowledge that the connection is * | ending in order to avoid a truncation attack. Either party may * | initiate the exchange of closing messages. * | * | close_notify * | This message notifies the recipient that the sender will not send * | any more messages on this connection. The session becomes * | unresumable if any connection is terminated without proper * | close_notify messages with level equal to warning. * | * | Either party may initiate a close by sending a close_notify alert. * | Any data received after a closure alert is ignored. * | * | Each party is required to send a close_notify alert before closing * | the write side of the connection. It is required that the other party * | respond with a close_notify alert of its own and close down the * | connection immediately, discarding any pending writes. It is not * | required for the initiator of the close to wait for the responding * | close_notify alert before closing the read side of the connection. * * This means we've to send a close notify message, but haven't to wait * for the close notify of the client. Actually we cannot wait for the * close notify of the client because some clients (including Netscape * 4.x) don't send one, so we would hang. */ /* * exchange close notify messages, but allow the user * to force the type of handshake via SetEnvIf directive */ if (abortive) { shutdown_type = SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN; type = "abortive"; logno = APLOGNO(01998); loglevel = APLOG_INFO; } else switch (sslconn->shutdown_type) { case SSL_SHUTDOWN_TYPE_UNCLEAN: /* perform no close notify handshake at all (violates the SSL/TLS standard!) */ shutdown_type = SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN; type = "unclean"; logno = APLOGNO(01999); break; case SSL_SHUTDOWN_TYPE_ACCURATE: /* send close notify and wait for clients close notify (standard compliant, but usually causes connection hangs) */ shutdown_type = 0; type = "accurate"; logno = APLOGNO(02000); break; default: /* * case SSL_SHUTDOWN_TYPE_UNSET: * case SSL_SHUTDOWN_TYPE_STANDARD: */ /* send close notify, but don't wait for clients close notify (standard compliant and safe, so it's the DEFAULT!) */ shutdown_type = SSL_RECEIVED_SHUTDOWN; type = "standard"; logno = APLOGNO(02001); break; } SSL_set_shutdown(ssl, shutdown_type); modssl_smart_shutdown(ssl); /* and finally log the fact that we've closed the connection */ if (APLOG_CS_IS_LEVEL(c, mySrvFromConn(c), loglevel)) { /* Intentional no APLOGNO */ /* logno provides APLOGNO */ ap_log_cserror(APLOG_MARK, loglevel, 0, c, mySrvFromConn(c), "%sConnection closed to child %ld with %s shutdown " "(server %s)", logno, c->id, type, ssl_util_vhostid(c->pool, mySrvFromConn(c))); } /* deallocate the SSL connection */ if (sslconn->client_cert) { X509_free(sslconn->client_cert); sslconn->client_cert = NULL; } SSL_free(ssl); sslconn->ssl = NULL; filter_ctx->pssl = NULL; /* so filters know we've been shutdown */ if (abortive) { /* prevent any further I/O */ c->aborted = 1; } } static apr_status_t ssl_io_filter_cleanup(void *data) { ssl_filter_ctx_t *filter_ctx = data; if (filter_ctx->pssl) { conn_rec *c = (conn_rec *)SSL_get_app_data(filter_ctx->pssl); SSLConnRec *sslconn = myConnConfig(c); SSL_free(filter_ctx->pssl); sslconn->ssl = filter_ctx->pssl = NULL; } return APR_SUCCESS; } /* * The hook is NOT registered with ap_hook_process_connection. Instead, it is * called manually from the churn () before it tries to read any data. * There is some problem if I accept conn_rec *. Still investigating.. * Adv. if conn_rec * can be accepted is we can hook this function using the * ap_hook_process_connection hook. */ /* Perform the SSL handshake (whether in client or server mode), if * necessary, for the given connection. */ static apr_status_t ssl_io_filter_handshake(ssl_filter_ctx_t *filter_ctx) { conn_rec *c = (conn_rec *)SSL_get_app_data(filter_ctx->pssl); SSLConnRec *sslconn = myConnConfig(c); SSLSrvConfigRec *sc; X509 *cert; int n; int ssl_err; long verify_result; server_rec *server; if (SSL_is_init_finished(filter_ctx->pssl)) { return APR_SUCCESS; } server = sslconn->server; if (sslconn->is_proxy) { #ifdef HAVE_TLSEXT apr_ipsubnet_t *ip; #ifdef HAVE_TLS_ALPN const char *alpn_note; #endif #endif const char *hostname_note = apr_table_get(c->notes, "proxy-request-hostname"); BOOL proxy_ssl_check_peer_ok = TRUE; int post_handshake_rc = OK; SSLDirConfigRec *dc; dc = sslconn->dc; sc = mySrvConfig(server); #ifdef HAVE_TLSEXT #ifdef HAVE_TLS_ALPN alpn_note = apr_table_get(c->notes, "proxy-request-alpn-protos"); if (alpn_note) { char *protos, *s, *p, *last; apr_size_t len; s = protos = apr_pcalloc(c->pool, strlen(alpn_note)+1); p = apr_pstrdup(c->pool, alpn_note); while ((p = apr_strtok(p, ", ", &last))) { len = last - p - (*last? 1 : 0); if (len > 255) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(03309) "ALPN proxy protocol identifier too long: %s", p); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, server); return APR_EGENERAL; } *s++ = (unsigned char)len; while (len--) { *s++ = *p++; } p = NULL; } ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, "setting alpn protos from '%s', protolen=%d", alpn_note, (int)(s - protos)); if (protos != s && SSL_set_alpn_protos(filter_ctx->pssl, (unsigned char *)protos, s - protos)) { ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, c, APLOGNO(03310) "error setting alpn protos from '%s'", alpn_note); ssl_log_ssl_error(SSLLOG_MARK, APLOG_WARNING, server); } } #endif /* defined HAVE_TLS_ALPN */ /* * Enable SNI for backend requests. Make sure we don't do it for * pure SSLv3 connections, and also prevent IP addresses * from being included in the SNI extension. (OpenSSL would simply * pass them on, but RFC 6066 is quite clear on this: "Literal * IPv4 and IPv6 addresses are not permitted".) */ if (hostname_note && #ifndef OPENSSL_NO_SSL3 dc->proxy->protocol != SSL_PROTOCOL_SSLV3 && #endif apr_ipsubnet_create(&ip, hostname_note, NULL, c->pool) != APR_SUCCESS) { if (SSL_set_tlsext_host_name(filter_ctx->pssl, hostname_note)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, c, "SNI extension for SSL Proxy request set to '%s'", hostname_note); } else { ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, c, APLOGNO(02002) "Failed to set SNI extension for SSL Proxy " "request to '%s'", hostname_note); ssl_log_ssl_error(SSLLOG_MARK, APLOG_WARNING, server); } } #endif /* defined HAVE_TLSEXT */ if ((n = SSL_connect(filter_ctx->pssl)) <= 0) { ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, c, APLOGNO(02003) "SSL Proxy connect failed"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_INFO, server); /* ensure that the SSL structures etc are freed, etc: */ ssl_filter_io_shutdown(filter_ctx, c, 1); apr_table_setn(c->notes, "SSL_connect_rv", "err"); return MODSSL_ERROR_BAD_GATEWAY; } cert = SSL_get_peer_certificate(filter_ctx->pssl); if (dc->proxy->ssl_check_peer_expire != FALSE) { if (!cert || (X509_cmp_current_time( X509_get_notBefore(cert)) >= 0) || (X509_cmp_current_time( X509_get_notAfter(cert)) <= 0)) { proxy_ssl_check_peer_ok = FALSE; ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, c, APLOGNO(02004) "SSL Proxy: Peer certificate is expired"); } } if ((dc->proxy->ssl_check_peer_name != FALSE) && ((dc->proxy->ssl_check_peer_cn != FALSE) || (dc->proxy->ssl_check_peer_name == TRUE)) && hostname_note) { if (!cert || modssl_X509_match_name(c->pool, cert, hostname_note, TRUE, server) == FALSE) { proxy_ssl_check_peer_ok = FALSE; ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, c, APLOGNO(02411) "SSL Proxy: Peer certificate does not match " "for hostname %s", hostname_note); } } else if ((dc->proxy->ssl_check_peer_cn == TRUE) && hostname_note) { const char *hostname; int match = 0; hostname = ssl_var_lookup(NULL, server, c, NULL, "SSL_CLIENT_S_DN_CN"); /* Do string match or simplest wildcard match if that * fails. */ match = strcasecmp(hostname, hostname_note) == 0; if (!match && strncmp(hostname, "*.", 2) == 0) { const char *p = ap_strchr_c(hostname_note, '.'); match = p && strcasecmp(p, hostname + 1) == 0; } if (!match) { proxy_ssl_check_peer_ok = FALSE; ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, c, APLOGNO(02005) "SSL Proxy: Peer certificate CN mismatch:" " Certificate CN: %s Requested hostname: %s", hostname, hostname_note); } } if (proxy_ssl_check_peer_ok == TRUE) { /* another chance to fail */ post_handshake_rc = ssl_run_proxy_post_handshake(c, filter_ctx->pssl); } if (cert) { X509_free(cert); } if (proxy_ssl_check_peer_ok != TRUE || (post_handshake_rc != OK && post_handshake_rc != DECLINED)) { /* ensure that the SSL structures etc are freed, etc: */ ssl_filter_io_shutdown(filter_ctx, c, 1); apr_table_setn(c->notes, "SSL_connect_rv", "err"); return MODSSL_ERROR_BAD_GATEWAY; } apr_table_setn(c->notes, "SSL_connect_rv", "ok"); return APR_SUCCESS; } /* We rely on SSL_get_error() after the accept, which requires an empty * error queue before the accept in order to work properly. */ ERR_clear_error(); if ((n = SSL_accept(filter_ctx->pssl)) <= 0) { bio_filter_in_ctx_t *inctx = (bio_filter_in_ctx_t *) BIO_get_data(filter_ctx->pbioRead); bio_filter_out_ctx_t *outctx = (bio_filter_out_ctx_t *) BIO_get_data(filter_ctx->pbioWrite); apr_status_t rc = inctx->rc ? inctx->rc : outctx->rc ; ssl_err = SSL_get_error(filter_ctx->pssl, n); if (ssl_err == SSL_ERROR_ZERO_RETURN) { /* * The case where the connection was closed before any data * was transferred. That's not a real error and can occur * sporadically with some clients. */ ap_log_cerror(APLOG_MARK, APLOG_INFO, rc, c, APLOGNO(02006) "SSL handshake stopped: connection was closed"); } else if (ssl_err == SSL_ERROR_WANT_READ) { /* * This is in addition to what was present earlier. It is * borrowed from openssl_state_machine.c [mod_tls]. * TBD. */ outctx->rc = APR_EAGAIN; return APR_EAGAIN; } else if (ERR_GET_LIB(ERR_peek_error()) == ERR_LIB_SSL && ERR_GET_REASON(ERR_peek_error()) == SSL_R_HTTP_REQUEST) { /* * The case where OpenSSL has recognized a HTTP request: * This means the client speaks plain HTTP on our HTTPS port. * ssl_io_filter_error will disable the ssl filters when it * sees this status code. */ return MODSSL_ERROR_HTTP_ON_HTTPS; } else if (ssl_err == SSL_ERROR_SYSCALL) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, rc, c, APLOGNO(02007) "SSL handshake interrupted by system " "[Hint: Stop button pressed in browser?!]"); } else /* if (ssl_err == SSL_ERROR_SSL) */ { /* * Log SSL errors and any unexpected conditions. */ ap_log_cerror(APLOG_MARK, APLOG_INFO, rc, c, APLOGNO(02008) "SSL library error %d in handshake " "(server %s)", ssl_err, ssl_util_vhostid(c->pool, server)); ssl_log_ssl_error(SSLLOG_MARK, APLOG_INFO, server); } if (inctx->rc == APR_SUCCESS) { inctx->rc = APR_EGENERAL; } ssl_filter_io_shutdown(filter_ctx, c, 1); return inctx->rc; } sc = mySrvConfig(sslconn->server); /* * Check for failed client authentication */ verify_result = SSL_get_verify_result(filter_ctx->pssl); if ((verify_result != X509_V_OK) || sslconn->verify_error) { if (ssl_verify_error_is_optional(verify_result) && (sc->server->auth.verify_mode == SSL_CVERIFY_OPTIONAL_NO_CA)) { /* leaving this log message as an error for the moment, * according to the mod_ssl docs: * "level optional_no_ca is actually against the idea * of authentication (but can be used to establish * SSL test pages, etc.)" * optional_no_ca doesn't appear to work as advertised * in 1.x */ ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, c, APLOGNO(02009) "SSL client authentication failed, " "accepting certificate based on " "\"SSLVerifyClient optional_no_ca\" " "configuration"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_INFO, server); } else { const char *error = sslconn->verify_error ? sslconn->verify_error : X509_verify_cert_error_string(verify_result); ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, c, APLOGNO(02010) "SSL client authentication failed: %s", error ? error : "unknown"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_INFO, server); ssl_filter_io_shutdown(filter_ctx, c, 1); return APR_ECONNABORTED; } } /* * Remember the peer certificate's DN */ if ((cert = SSL_get_peer_certificate(filter_ctx->pssl))) { if (sslconn->client_cert) { X509_free(sslconn->client_cert); } sslconn->client_cert = cert; sslconn->client_dn = NULL; } /* * Make really sure that when a peer certificate * is required we really got one... (be paranoid) */ if ((sc->server->auth.verify_mode == SSL_CVERIFY_REQUIRE) && !sslconn->client_cert) { ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, c, APLOGNO(02011) "No acceptable peer certificate available"); ssl_filter_io_shutdown(filter_ctx, c, 1); return APR_ECONNABORTED; } return APR_SUCCESS; } static apr_status_t ssl_io_filter_input(ap_filter_t *f, apr_bucket_brigade *bb, ap_input_mode_t mode, apr_read_type_e block, apr_off_t readbytes) { apr_status_t status; bio_filter_in_ctx_t *inctx = f->ctx; const char *start = inctx->buffer; /* start of block to return */ apr_size_t len = sizeof(inctx->buffer); /* length of block to return */ int is_init = (mode == AP_MODE_INIT); apr_bucket *bucket; if (f->c->aborted) { /* XXX: Ok, if we aborted, we ARE at the EOS. We also have * aborted. This 'double protection' is probably redundant, * but also effective against just about anything. */ bucket = apr_bucket_eos_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, bucket); return APR_ECONNABORTED; } if (!inctx->ssl) { SSLConnRec *sslconn = myConnConfig(f->c); if (sslconn->non_ssl_request == NON_SSL_SEND_REQLINE) { bucket = HTTP_ON_HTTPS_PORT_BUCKET(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, bucket); if (mode != AP_MODE_SPECULATIVE) { sslconn->non_ssl_request = NON_SSL_SEND_HDR_SEP; } return APR_SUCCESS; } if (sslconn->non_ssl_request == NON_SSL_SEND_HDR_SEP) { bucket = apr_bucket_immortal_create(CRLF, 2, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, bucket); if (mode != AP_MODE_SPECULATIVE) { sslconn->non_ssl_request = NON_SSL_SET_ERROR_MSG; } return APR_SUCCESS; } return ap_get_brigade(f->next, bb, mode, block, readbytes); } /* XXX: we don't currently support anything other than these modes. */ if (mode != AP_MODE_READBYTES && mode != AP_MODE_GETLINE && mode != AP_MODE_SPECULATIVE && mode != AP_MODE_INIT) { return APR_ENOTIMPL; } inctx->mode = mode; inctx->block = block; /* XXX: we could actually move ssl_io_filter_handshake to an * ap_hook_process_connection but would still need to call it for * AP_MODE_INIT for protocols that may upgrade the connection * rather than have SSLEngine On configured. */ if ((status = ssl_io_filter_handshake(inctx->filter_ctx)) != APR_SUCCESS) { return ssl_io_filter_error(inctx, bb, status, is_init); } if (is_init) { /* protocol module needs to handshake before sending * data to client (e.g. NNTP or FTP) */ return APR_SUCCESS; } if (inctx->mode == AP_MODE_READBYTES || inctx->mode == AP_MODE_SPECULATIVE) { /* Protected from truncation, readbytes < MAX_SIZE_T * FIXME: No, it's *not* protected. -- jre */ if (readbytes < len) { len = (apr_size_t)readbytes; } status = ssl_io_input_read(inctx, inctx->buffer, &len); } else if (inctx->mode == AP_MODE_GETLINE) { const char *pos; /* Satisfy the read directly out of the buffer if possible; * invoking ssl_io_input_getline will mean the entire buffer * is copied once (unnecessarily) for each GETLINE call. */ if (inctx->cbuf.length && (pos = memchr(inctx->cbuf.value, APR_ASCII_LF, inctx->cbuf.length)) != NULL) { start = inctx->cbuf.value; len = 1 + pos - start; /* +1 to include LF */ /* Buffer contents now consumed. */ inctx->cbuf.value += len; inctx->cbuf.length -= len; status = APR_SUCCESS; } else { /* Otherwise fall back to the hard way. */ status = ssl_io_input_getline(inctx, inctx->buffer, &len); } } else { /* We have no idea what you are talking about, so return an error. */ status = APR_ENOTIMPL; } /* It is possible for mod_ssl's BIO to be used outside of the * direct control of mod_ssl's input or output filter -- notably, * when mod_ssl initiates a renegotiation. Switching the BIO mode * back to "blocking" here ensures such operations don't fail with * SSL_ERROR_WANT_READ. */ inctx->block = APR_BLOCK_READ; /* Handle custom errors. */ if (status != APR_SUCCESS) { return ssl_io_filter_error(inctx, bb, status, 0); } /* Create a transient bucket out of the decrypted data. */ if (len > 0) { bucket = apr_bucket_transient_create(start, len, f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, bucket); } return APR_SUCCESS; } /* ssl_io_filter_output() produces one SSL/TLS message per bucket * passed down the output filter stack. This results in a high * overhead (network packets) for any output comprising many small * buckets. SSI page applied through the HTTP chunk filter, for * example, may produce many brigades containing small buckets - * [chunk-size CRLF] [chunk-data] [CRLF]. * * The coalescing filter merges many small buckets into larger buckets * where possible, allowing the SSL I/O output filter to handle them * more efficiently. */ #define COALESCE_BYTES (2048) struct coalesce_ctx { char buffer[COALESCE_BYTES]; apr_size_t bytes; /* number of bytes of buffer used. */ }; static apr_status_t ssl_io_filter_coalesce(ap_filter_t *f, apr_bucket_brigade *bb) { apr_bucket *e, *upto; apr_size_t bytes = 0; struct coalesce_ctx *ctx = f->ctx; unsigned count = 0; /* The brigade consists of zero-or-more small data buckets which * can be coalesced (the prefix), followed by the remainder of the * brigade. * * Find the last bucket - if any - of that prefix. count gives * the number of buckets in the prefix. The "prefix" must contain * only data buckets with known length, and must be of a total * size which fits into the buffer. * * N.B.: The process here could be repeated throughout the brigade * (coalesce any run of consecutive data buckets) but this would * add significant complexity, particularly to memory * management. */ for (e = APR_BRIGADE_FIRST(bb); e != APR_BRIGADE_SENTINEL(bb) && !APR_BUCKET_IS_METADATA(e) && e->length != (apr_size_t)-1 && e->length < COALESCE_BYTES && (bytes + e->length) < COALESCE_BYTES && (ctx == NULL || bytes + ctx->bytes + e->length < COALESCE_BYTES); e = APR_BUCKET_NEXT(e)) { if (e->length) count++; /* don't count zero-length buckets */ bytes += e->length; } upto = e; /* Coalesce the prefix, if: * a) more than one bucket is found to coalesce, or * b) the brigade contains only a single data bucket, or * c) the data bucket is not last but we have buffered data already. */ if (bytes > 0 && (count > 1 || (upto == APR_BRIGADE_SENTINEL(bb)) || (ctx && ctx->bytes > 0))) { /* If coalescing some bytes, ensure a context has been * created. */ if (!ctx) { f->ctx = ctx = apr_palloc(f->c->pool, sizeof *ctx); ctx->bytes = 0; } ap_log_cerror(APLOG_MARK, APLOG_TRACE4, 0, f->c, "coalesce: have %" APR_SIZE_T_FMT " bytes, " "adding %" APR_SIZE_T_FMT " more", ctx->bytes, bytes); /* Iterate through the prefix segment. For non-fatal errors * in this loop it is safe to break out and fall back to the * normal path of sending the buffer + remaining buckets in * brigade. */ e = APR_BRIGADE_FIRST(bb); while (e != upto) { apr_size_t len; const char *data; apr_bucket *next; if (APR_BUCKET_IS_METADATA(e) || e->length == (apr_size_t)-1) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, f->c, APLOGNO(02012) "unexpected bucket type during coalesce"); break; /* non-fatal error; break out */ } if (e->length) { apr_status_t rv; /* A blocking read should be fine here for a * known-length data bucket, rather than the usual * non-block/flush/block. */ rv = apr_bucket_read(e, &data, &len, APR_BLOCK_READ); if (rv) { ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, f->c, APLOGNO(02013) "coalesce failed to read from data bucket"); return AP_FILTER_ERROR; } /* Be paranoid. */ if (len > sizeof ctx->buffer || (len + ctx->bytes > sizeof ctx->buffer)) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, f->c, APLOGNO(02014) "unexpected coalesced bucket data length"); break; /* non-fatal error; break out */ } memcpy(ctx->buffer + ctx->bytes, data, len); ctx->bytes += len; } next = APR_BUCKET_NEXT(e); apr_bucket_delete(e); e = next; } } if (APR_BRIGADE_EMPTY(bb)) { /* If the brigade is now empty, our work here is done. */ return APR_SUCCESS; } /* If anything remains in the brigade, it must now be passed down * the filter stack, first prepending anything that has been * coalesced. */ if (ctx && ctx->bytes) { ap_log_cerror(APLOG_MARK, APLOG_TRACE4, 0, f->c, "coalesce: passing on %" APR_SIZE_T_FMT " bytes", ctx->bytes); e = apr_bucket_transient_create(ctx->buffer, ctx->bytes, bb->bucket_alloc); APR_BRIGADE_INSERT_HEAD(bb, e); ctx->bytes = 0; /* buffer now emptied. */ } return ap_pass_brigade(f->next, bb); } static apr_status_t ssl_io_filter_output(ap_filter_t *f, apr_bucket_brigade *bb) { apr_status_t status = APR_SUCCESS; ssl_filter_ctx_t *filter_ctx = f->ctx; bio_filter_in_ctx_t *inctx; bio_filter_out_ctx_t *outctx; apr_read_type_e rblock = APR_NONBLOCK_READ; if (f->c->aborted) { apr_brigade_cleanup(bb); return APR_ECONNABORTED; } if (!filter_ctx->pssl) { /* ssl_filter_io_shutdown was called */ return ap_pass_brigade(f->next, bb); } inctx = (bio_filter_in_ctx_t *)BIO_get_data(filter_ctx->pbioRead); outctx = (bio_filter_out_ctx_t *)BIO_get_data(filter_ctx->pbioWrite); /* When we are the writer, we must initialize the inctx * mode so that we block for any required ssl input, because * output filtering is always nonblocking. */ inctx->mode = AP_MODE_READBYTES; inctx->block = APR_BLOCK_READ; if ((status = ssl_io_filter_handshake(filter_ctx)) != APR_SUCCESS) { return ssl_io_filter_error(inctx, bb, status, 0); } while (!APR_BRIGADE_EMPTY(bb) && status == APR_SUCCESS) { apr_bucket *bucket = APR_BRIGADE_FIRST(bb); if (APR_BUCKET_IS_METADATA(bucket)) { /* Pass through metadata buckets untouched. EOC is * special; terminate the SSL layer first. */ if (AP_BUCKET_IS_EOC(bucket)) { ssl_filter_io_shutdown(filter_ctx, f->c, 0); } AP_DEBUG_ASSERT(APR_BRIGADE_EMPTY(outctx->bb)); /* Metadata buckets are passed one per brigade; it might * be more efficient (but also more complex) to use * outctx->bb as a true buffer and interleave these with * data buckets. */ APR_BUCKET_REMOVE(bucket); APR_BRIGADE_INSERT_HEAD(outctx->bb, bucket); status = ap_pass_brigade(f->next, outctx->bb); if (status == APR_SUCCESS && f->c->aborted) status = APR_ECONNRESET; apr_brigade_cleanup(outctx->bb); } else { /* Filter a data bucket. */ const char *data; apr_size_t len; status = apr_bucket_read(bucket, &data, &len, rblock); if (APR_STATUS_IS_EAGAIN(status)) { /* No data available: flush... */ if (bio_filter_out_flush(filter_ctx->pbioWrite) < 0) { status = outctx->rc; break; } rblock = APR_BLOCK_READ; /* and try again with a blocking read. */ status = APR_SUCCESS; continue; } rblock = APR_NONBLOCK_READ; if (!APR_STATUS_IS_EOF(status) && (status != APR_SUCCESS)) { break; } status = ssl_filter_write(f, data, len); apr_bucket_delete(bucket); } } return status; } struct modssl_buffer_ctx { apr_bucket_brigade *bb; }; int ssl_io_buffer_fill(request_rec *r, apr_size_t maxlen) { conn_rec *c = r->connection; struct modssl_buffer_ctx *ctx; apr_bucket_brigade *tempb; apr_off_t total = 0; /* total length buffered */ int eos = 0; /* non-zero once EOS is seen */ /* Create the context which will be passed to the input filter; * containing a setaside pool and a brigade which constrain the * lifetime of the buffered data. */ ctx = apr_palloc(r->pool, sizeof *ctx); ctx->bb = apr_brigade_create(r->pool, c->bucket_alloc); /* ... and a temporary brigade. */ tempb = apr_brigade_create(r->pool, c->bucket_alloc); ap_log_cerror(APLOG_MARK, APLOG_TRACE4, 0, c, "filling buffer, max size " "%" APR_SIZE_T_FMT " bytes", maxlen); do { apr_status_t rv; apr_bucket *e, *next; /* The request body is read from the protocol-level input * filters; the buffering filter will reinject it from that * level, allowing content/resource filters to run later, if * necessary. */ rv = ap_get_brigade(r->proto_input_filters, tempb, AP_MODE_READBYTES, APR_BLOCK_READ, 8192); if (rv) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02015) "could not read request body for SSL buffer"); return ap_map_http_request_error(rv, HTTP_INTERNAL_SERVER_ERROR); } /* Iterate through the returned brigade: setaside each bucket * into the context's pool and move it into the brigade. */ for (e = APR_BRIGADE_FIRST(tempb); e != APR_BRIGADE_SENTINEL(tempb) && !eos; e = next) { const char *data; apr_size_t len; next = APR_BUCKET_NEXT(e); if (APR_BUCKET_IS_EOS(e)) { eos = 1; } else if (!APR_BUCKET_IS_METADATA(e)) { rv = apr_bucket_read(e, &data, &len, APR_BLOCK_READ); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02016) "could not read bucket for SSL buffer"); return HTTP_INTERNAL_SERVER_ERROR; } total += len; } rv = apr_bucket_setaside(e, r->pool); if (rv != APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02017) "could not setaside bucket for SSL buffer"); return HTTP_INTERNAL_SERVER_ERROR; } APR_BUCKET_REMOVE(e); APR_BRIGADE_INSERT_TAIL(ctx->bb, e); } ap_log_cerror(APLOG_MARK, APLOG_TRACE4, 0, c, "total of %" APR_OFF_T_FMT " bytes in buffer, eos=%d", total, eos); /* Fail if this exceeds the maximum buffer size. */ if (total > maxlen) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02018) "request body exceeds maximum size (%" APR_SIZE_T_FMT ") for SSL buffer", maxlen); return HTTP_REQUEST_ENTITY_TOO_LARGE; } } while (!eos); apr_brigade_destroy(tempb); /* After consuming all protocol-level input, remove all protocol-level * filters. It should strictly only be necessary to remove filters * at exactly ftype == AP_FTYPE_PROTOCOL, since this filter will * precede all > AP_FTYPE_PROTOCOL anyway. */ while (r->proto_input_filters->frec->ftype < AP_FTYPE_CONNECTION) { ap_remove_input_filter(r->proto_input_filters); } /* Insert the filter which will supply the buffered content. */ ap_add_input_filter(ssl_io_buffer, ctx, r, c); return 0; } /* This input filter supplies the buffered request body to the caller * from the brigade stored in f->ctx. Note that the placement of this * filter in the filter stack is important; it must be the first * r->proto_input_filter; lower-typed filters will not be preserved * across internal redirects (see PR 43738). */ static apr_status_t ssl_io_filter_buffer(ap_filter_t *f, apr_bucket_brigade *bb, ap_input_mode_t mode, apr_read_type_e block, apr_off_t bytes) { struct modssl_buffer_ctx *ctx = f->ctx; apr_status_t rv; apr_bucket *e, *d; ap_log_cerror(APLOG_MARK, APLOG_TRACE4, 0, f->c, "read from buffered SSL brigade, mode %d, " "%" APR_OFF_T_FMT " bytes", mode, bytes); if (mode != AP_MODE_READBYTES && mode != AP_MODE_GETLINE) { return APR_ENOTIMPL; } if (APR_BRIGADE_EMPTY(ctx->bb)) { /* Suprisingly (and perhaps, wrongly), the request body can be * pulled from the input filter stack more than once; a * handler may read it, and ap_discard_request_body() will * attempt to do so again after *every* request. So input * filters must be prepared to give up an EOS if invoked after * initially reading the request. The HTTP_IN filter does this * with its ->eos_sent flag. */ APR_BRIGADE_INSERT_TAIL(bb, apr_bucket_eos_create(f->c->bucket_alloc)); return APR_SUCCESS; } if (mode == AP_MODE_READBYTES) { /* Partition the buffered brigade. */ rv = apr_brigade_partition(ctx->bb, bytes, &e); if (rv && rv != APR_INCOMPLETE) { ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, f->c, APLOGNO(02019) "could not partition buffered SSL brigade"); ap_remove_input_filter(f); return rv; } /* If the buffered brigade contains less then the requested * length, just pass it all back. */ if (rv == APR_INCOMPLETE) { APR_BRIGADE_CONCAT(bb, ctx->bb); } else { d = APR_BRIGADE_FIRST(ctx->bb); e = APR_BUCKET_PREV(e); /* Unsplice the partitioned segment and move it into the * passed-in brigade; no convenient way to do this with * the APR_BRIGADE_* macros. */ APR_RING_UNSPLICE(d, e, link); APR_RING_SPLICE_HEAD(&bb->list, d, e, apr_bucket, link); APR_BRIGADE_CHECK_CONSISTENCY(bb); APR_BRIGADE_CHECK_CONSISTENCY(ctx->bb); } } else { /* Split a line into the passed-in brigade. */ rv = apr_brigade_split_line(bb, ctx->bb, block, bytes); if (rv) { ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, f->c, APLOGNO(02020) "could not split line from buffered SSL brigade"); ap_remove_input_filter(f); return rv; } } if (APR_BRIGADE_EMPTY(ctx->bb)) { e = APR_BRIGADE_LAST(bb); /* Ensure that the brigade is terminated by an EOS if the * buffered request body has been entirely consumed. */ if (e == APR_BRIGADE_SENTINEL(bb) || !APR_BUCKET_IS_EOS(e)) { e = apr_bucket_eos_create(f->c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, e); } ap_log_cerror(APLOG_MARK, APLOG_TRACE4, 0, f->c, "buffered SSL brigade exhausted"); /* Note that the filter must *not* be removed here; it may be * invoked again, see comment above. */ } return APR_SUCCESS; } /* The request_rec pointer is passed in here only to ensure that the * filter chain is modified correctly when doing a TLS upgrade. It * must *not* be used otherwise. */ static void ssl_io_input_add_filter(ssl_filter_ctx_t *filter_ctx, conn_rec *c, request_rec *r, SSL *ssl) { bio_filter_in_ctx_t *inctx; inctx = apr_palloc(c->pool, sizeof(*inctx)); filter_ctx->pInputFilter = ap_add_input_filter(ssl_io_filter, inctx, r, c); #if MODSSL_USE_OPENSSL_PRE_1_1_API filter_ctx->pbioRead = BIO_new(&bio_filter_in_method); #else filter_ctx->pbioRead = BIO_new(bio_filter_in_method); #endif BIO_set_data(filter_ctx->pbioRead, (void *)inctx); inctx->ssl = ssl; inctx->bio_out = filter_ctx->pbioWrite; inctx->f = filter_ctx->pInputFilter; inctx->rc = APR_SUCCESS; inctx->mode = AP_MODE_READBYTES; inctx->cbuf.length = 0; inctx->bb = apr_brigade_create(c->pool, c->bucket_alloc); inctx->block = APR_BLOCK_READ; inctx->pool = c->pool; inctx->filter_ctx = filter_ctx; } /* The request_rec pointer is passed in here only to ensure that the * filter chain is modified correctly when doing a TLS upgrade. It * must *not* be used otherwise. */ void ssl_io_filter_init(conn_rec *c, request_rec *r, SSL *ssl) { ssl_filter_ctx_t *filter_ctx; filter_ctx = apr_palloc(c->pool, sizeof(ssl_filter_ctx_t)); filter_ctx->config = myConnConfig(c); ap_add_output_filter(ssl_io_coalesce, NULL, r, c); filter_ctx->pOutputFilter = ap_add_output_filter(ssl_io_filter, filter_ctx, r, c); #if MODSSL_USE_OPENSSL_PRE_1_1_API filter_ctx->pbioWrite = BIO_new(&bio_filter_out_method); #else filter_ctx->pbioWrite = BIO_new(bio_filter_out_method); #endif BIO_set_data(filter_ctx->pbioWrite, (void *)bio_filter_out_ctx_new(filter_ctx, c)); /* write is non blocking for the benefit of async mpm */ if (c->cs) { BIO_set_nbio(filter_ctx->pbioWrite, 1); ap_log_cerror(APLOG_MARK, APLOG_TRACE6, 0, c, "Enabling non-blocking writes"); } ssl_io_input_add_filter(filter_ctx, c, r, ssl); SSL_set_bio(ssl, filter_ctx->pbioRead, filter_ctx->pbioWrite); filter_ctx->pssl = ssl; apr_pool_cleanup_register(c->pool, (void*)filter_ctx, ssl_io_filter_cleanup, apr_pool_cleanup_null); if (APLOG_CS_IS_LEVEL(c, mySrvFromConn(c), APLOG_TRACE4)) { BIO *rbio = SSL_get_rbio(ssl), *wbio = SSL_get_wbio(ssl); BIO_set_callback(rbio, ssl_io_data_cb); BIO_set_callback_arg(rbio, (void *)ssl); if (wbio && wbio != rbio) { BIO_set_callback(wbio, ssl_io_data_cb); BIO_set_callback_arg(wbio, (void *)ssl); } } return; } void ssl_io_filter_register(apr_pool_t *p) { ap_register_input_filter (ssl_io_filter, ssl_io_filter_input, NULL, AP_FTYPE_CONNECTION + 5); ap_register_output_filter (ssl_io_coalesce, ssl_io_filter_coalesce, NULL, AP_FTYPE_CONNECTION + 4); ap_register_output_filter (ssl_io_filter, ssl_io_filter_output, NULL, AP_FTYPE_CONNECTION + 5); ap_register_input_filter (ssl_io_buffer, ssl_io_filter_buffer, NULL, AP_FTYPE_PROTOCOL); return; } /* _________________________________________________________________ ** ** I/O Data Debugging ** _________________________________________________________________ */ #define DUMP_WIDTH 16 static void ssl_io_data_dump(conn_rec *c, server_rec *s, const char *b, long len) { char buf[256]; char tmp[64]; int i, j, rows, trunc; unsigned char ch; trunc = 0; for(; (len > 0) && ((b[len-1] == ' ') || (b[len-1] == '\0')); len--) trunc++; rows = (len / DUMP_WIDTH); if ((rows * DUMP_WIDTH) < len) rows++; ap_log_cserror(APLOG_MARK, APLOG_TRACE7, 0, c, s, "+-------------------------------------------------------------------------+"); for(i = 0 ; i< rows; i++) { #if APR_CHARSET_EBCDIC char ebcdic_text[DUMP_WIDTH]; j = DUMP_WIDTH; if ((i * DUMP_WIDTH + j) > len) j = len % DUMP_WIDTH; if (j == 0) j = DUMP_WIDTH; memcpy(ebcdic_text,(char *)(b) + i * DUMP_WIDTH, j); ap_xlate_proto_from_ascii(ebcdic_text, j); #endif /* APR_CHARSET_EBCDIC */ apr_snprintf(tmp, sizeof(tmp), "| %04x: ", i * DUMP_WIDTH); apr_cpystrn(buf, tmp, sizeof(buf)); for (j = 0; j < DUMP_WIDTH; j++) { if (((i * DUMP_WIDTH) + j) >= len) apr_cpystrn(buf+strlen(buf), " ", sizeof(buf)-strlen(buf)); else { ch = ((unsigned char)*((char *)(b) + i * DUMP_WIDTH + j)) & 0xff; apr_snprintf(tmp, sizeof(tmp), "%02x%c", ch , j==7 ? '-' : ' '); apr_cpystrn(buf+strlen(buf), tmp, sizeof(buf)-strlen(buf)); } } apr_cpystrn(buf+strlen(buf), " ", sizeof(buf)-strlen(buf)); for (j = 0; j < DUMP_WIDTH; j++) { if (((i * DUMP_WIDTH) + j) >= len) apr_cpystrn(buf+strlen(buf), " ", sizeof(buf)-strlen(buf)); else { ch = ((unsigned char)*((char *)(b) + i * DUMP_WIDTH + j)) & 0xff; #if APR_CHARSET_EBCDIC apr_snprintf(tmp, sizeof(tmp), "%c", (ch >= 0x20 && ch <= 0x7F) ? ebcdic_text[j] : '.'); #else /* APR_CHARSET_EBCDIC */ apr_snprintf(tmp, sizeof(tmp), "%c", ((ch >= ' ') && (ch <= '~')) ? ch : '.'); #endif /* APR_CHARSET_EBCDIC */ apr_cpystrn(buf+strlen(buf), tmp, sizeof(buf)-strlen(buf)); } } apr_cpystrn(buf+strlen(buf), " |", sizeof(buf)-strlen(buf)); ap_log_cserror(APLOG_MARK, APLOG_TRACE7, 0, c, s, "%s", buf); } if (trunc > 0) ap_log_cserror(APLOG_MARK, APLOG_TRACE7, 0, c, s, "| %04ld - ", len + trunc); ap_log_cserror(APLOG_MARK, APLOG_TRACE7, 0, c, s, "+-------------------------------------------------------------------------+"); return; } long ssl_io_data_cb(BIO *bio, int cmd, const char *argp, int argi, long argl, long rc) { SSL *ssl; conn_rec *c; server_rec *s; if ((ssl = (SSL *)BIO_get_callback_arg(bio)) == NULL) return rc; if ((c = (conn_rec *)SSL_get_app_data(ssl)) == NULL) return rc; s = mySrvFromConn(c); if ( cmd == (BIO_CB_WRITE|BIO_CB_RETURN) || cmd == (BIO_CB_READ |BIO_CB_RETURN) ) { if (rc >= 0) { const char *dump = ""; if (APLOG_CS_IS_LEVEL(c, s, APLOG_TRACE7)) { if (argp != NULL) dump = "(BIO dump follows)"; else dump = "(Oops, no memory buffer?)"; } ap_log_cserror(APLOG_MARK, APLOG_TRACE4, 0, c, s, "%s: %s %ld/%d bytes %s BIO#%pp [mem: %pp] %s", MODSSL_LIBRARY_NAME, (cmd == (BIO_CB_WRITE|BIO_CB_RETURN) ? "write" : "read"), rc, argi, (cmd == (BIO_CB_WRITE|BIO_CB_RETURN) ? "to" : "from"), bio, argp, dump); if (*dump != '\0' && argp != NULL) ssl_io_data_dump(c, s, argp, rc); } else { ap_log_cserror(APLOG_MARK, APLOG_TRACE4, 0, c, s, "%s: I/O error, %d bytes expected to %s on BIO#%pp [mem: %pp]", MODSSL_LIBRARY_NAME, argi, (cmd == (BIO_CB_WRITE|BIO_CB_RETURN) ? "write" : "read"), bio, argp); } } return rc; } httpd-2.4.41/modules/ssl/mod_ssl_openssl.h0000644000000000000500000001126313520024310017052 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_ssl_openssl.h * @brief Interface to OpenSSL-specific APIs provided by mod_ssl * * @defgroup MOD_SSL mod_ssl_openssl * @ingroup APACHE_MODS * @{ */ #ifndef __MOD_SSL_OPENSSL_H__ #define __MOD_SSL_OPENSSL_H__ #include "mod_ssl.h" /* OpenSSL headers */ #ifndef SSL_PRIVATE_H #include #if (OPENSSL_VERSION_NUMBER >= 0x10001000) /* must be defined before including ssl.h */ #define OPENSSL_NO_SSL_INTERN #endif #include #endif /** * init_server hook -- allow SSL_CTX-specific initialization to be performed by * a module for each SSL-enabled server (one at a time) * @param s SSL-enabled [virtual] server * @param p pconf pool * @param is_proxy 1 if this server supports backend connections * over SSL/TLS, 0 if it supports client connections over SSL/TLS * @param ctx OpenSSL SSL Context for the server */ APR_DECLARE_EXTERNAL_HOOK(ssl, SSL, int, init_server, (server_rec *s, apr_pool_t *p, int is_proxy, SSL_CTX *ctx)) /** * pre_handshake hook * @param c conn_rec for new connection from client or to backend server * @param ssl OpenSSL SSL Connection for the client or backend server * @param is_proxy 1 if this handshake is for a backend connection, 0 otherwise */ APR_DECLARE_EXTERNAL_HOOK(ssl, SSL, int, pre_handshake, (conn_rec *c, SSL *ssl, int is_proxy)) /** * proxy_post_handshake hook -- allow module to abort after successful * handshake with backend server and subsequent peer checks * @param c conn_rec for connection to backend server * @param ssl OpenSSL SSL Connection for the client or backend server */ APR_DECLARE_EXTERNAL_HOOK(ssl, SSL, int, proxy_post_handshake, (conn_rec *c, SSL *ssl)) /** On TLS connections that do not relate to a configured virtual host, * allow other modules to provide a X509 certificate and EVP_PKEY to * be used on the connection. This first hook which does not * return DECLINED will determine the outcome. */ APR_DECLARE_EXTERNAL_HOOK(ssl, SSL, int, answer_challenge, (conn_rec *c, const char *server_name, X509 **pcert, EVP_PKEY **pkey)) /** During post_config phase, ask around if someone wants to provide * OCSP stapling status information for the given cert (with the also * provided issuer certificate). The first hook which does not * return DECLINED promises to take responsibility (and respond * in later calls via hook ssl_get_stapling_status). * If no hook takes over, mod_ssl's own stapling implementation will * be applied (if configured). */ APR_DECLARE_EXTERNAL_HOOK(ssl, SSL, int, init_stapling_status, (server_rec *s, apr_pool_t *p, X509 *cert, X509 *issuer)) /** Anyone answering positive to ssl_init_stapling_status for a * certificate, needs to register here and supply the actual OCSP stapling * status data (OCSP_RESP) for a new connection. * A hook supplying the response data must return APR_SUCCESS. * The data is returned in DER encoded bytes via pder and pderlen. The * returned pointer may be NULL, which indicates that data is (currently) * unavailable. * If DER data is returned, it MUST come from a response with * status OCSP_RESPONSE_STATUS_SUCCESSFUL and V_OCSP_CERTSTATUS_GOOD * or V_OCSP_CERTSTATUS_REVOKED, not V_OCSP_CERTSTATUS_UNKNOWN. This means * errors in OCSP retrieval are to be handled/logged by the hook and * are not done by mod_ssl. * Any DER bytes returned MUST be allocated via malloc() and ownership * passes to mod_ssl. Meaning, the hook must return a malloced copy of * the data it has. mod_ssl (or OpenSSL) will free it. */ APR_DECLARE_EXTERNAL_HOOK(ssl, SSL, int, get_stapling_status, (unsigned char **pder, int *pderlen, conn_rec *c, server_rec *s, X509 *cert)) #endif /* __MOD_SSL_OPENSSL_H__ */ /** @} */ httpd-2.4.41/modules/ssl/README.dsov.ps0000644000000000000500000012671412602744037016000 0ustar rootsrc%!PS-Adobe-2.0 %%Title: README.dsov.ps %%Creator: fig2dev Version 3.2 Patchlevel 1 %%CreationDate: Mon Apr 12 17:09:11 1999 %%For: rse@en1.engelschall.com (Ralf S. Engelschall) %%Orientation: Landscape %%BoundingBox: 59 37 553 755 %%Pages: 1 %%BeginSetup %%IncludeFeature: *PageSize Letter %%EndSetup %%Magnification: 0.9340 %%EndComments /$F2psDict 200 dict def $F2psDict begin $F2psDict /mtrx matrix put /col-1 {0 setgray} bind def /col0 {0.000 0.000 0.000 srgb} bind def /col1 {0.000 0.000 1.000 srgb} bind def /col2 {0.000 1.000 0.000 srgb} bind def /col3 {0.000 1.000 1.000 srgb} bind def /col4 {1.000 0.000 0.000 srgb} bind def /col5 {1.000 0.000 1.000 srgb} bind def /col6 {1.000 1.000 0.000 srgb} bind def /col7 {1.000 1.000 1.000 srgb} bind def /col8 {0.000 0.000 0.560 srgb} bind def /col9 {0.000 0.000 0.690 srgb} bind def /col10 {0.000 0.000 0.820 srgb} bind def /col11 {0.530 0.810 1.000 srgb} bind def /col12 {0.000 0.560 0.000 srgb} bind def /col13 {0.000 0.690 0.000 srgb} bind def /col14 {0.000 0.820 0.000 srgb} bind def /col15 {0.000 0.560 0.560 srgb} bind def /col16 {0.000 0.690 0.690 srgb} bind def /col17 {0.000 0.820 0.820 srgb} bind def /col18 {0.560 0.000 0.000 srgb} bind def /col19 {0.690 0.000 0.000 srgb} bind def /col20 {0.820 0.000 0.000 srgb} bind def /col21 {0.560 0.000 0.560 srgb} bind def /col22 {0.690 0.000 0.690 srgb} bind def /col23 {0.820 0.000 0.820 srgb} bind def /col24 {0.500 0.190 0.000 srgb} bind def /col25 {0.630 0.250 0.000 srgb} bind def /col26 {0.750 0.380 0.000 srgb} bind def /col27 {1.000 0.500 0.500 srgb} bind def /col28 {1.000 0.630 0.630 srgb} bind def /col29 {1.000 0.750 0.750 srgb} bind def /col30 {1.000 0.880 0.880 srgb} bind def /col31 {1.000 0.840 0.000 srgb} bind def /col32 {0.380 0.396 0.380 srgb} bind def /col33 {0.714 0.698 0.714 srgb} bind def /col34 {0.969 0.953 0.969 srgb} bind def /col35 {0.812 0.812 0.812 srgb} bind def /col36 {1.000 1.000 1.000 srgb} bind def end save 48.0 12.0 translate 90 rotate 1 -1 scale /cp {closepath} bind def /ef {eofill} bind def /gr {grestore} bind def /gs {gsave} bind def /sa {save} bind def /rs {restore} bind def /l {lineto} bind def /m {moveto} bind def /rm {rmoveto} bind def /n {newpath} bind def /s {stroke} bind def /sh {show} bind def /slc {setlinecap} bind def /slj {setlinejoin} bind def /slw {setlinewidth} bind def /srgb {setrgbcolor} bind def /rot {rotate} bind def /sc {scale} bind def /sd {setdash} bind def /ff {findfont} bind def /sf {setfont} bind def /scf {scalefont} bind def /sw {stringwidth} bind def /tr {translate} bind def /tnt {dup dup currentrgbcolor 4 -2 roll dup 1 exch sub 3 -1 roll mul add 4 -2 roll dup 1 exch sub 3 -1 roll mul add 4 -2 roll dup 1 exch sub 3 -1 roll mul add srgb} bind def /shd {dup dup currentrgbcolor 4 -2 roll mul 4 -2 roll mul 4 -2 roll mul srgb} bind def /reencdict 12 dict def /ReEncode { reencdict begin /newcodesandnames exch def /newfontname exch def /basefontname exch def /basefontdict basefontname findfont def /newfont basefontdict maxlength dict def basefontdict { exch dup /FID ne { dup /Encoding eq { exch dup length array copy newfont 3 1 roll put } { exch newfont 3 1 roll put } ifelse } { pop pop } ifelse } forall newfont /FontName newfontname put newcodesandnames aload pop 128 1 255 { newfont /Encoding get exch /.notdef put } for newcodesandnames length 2 idiv { newfont /Encoding get 3 1 roll put } repeat newfontname newfont definefont pop end } def /isovec [ 8#200 /grave 8#201 /acute 8#202 /circumflex 8#203 /tilde 8#204 /macron 8#205 /breve 8#206 /dotaccent 8#207 /dieresis 8#210 /ring 8#211 /cedilla 8#212 /hungarumlaut 8#213 /ogonek 8#214 /caron 8#220 /dotlessi 8#230 /oe 8#231 /OE 8#240 /space 8#241 /exclamdown 8#242 /cent 8#243 /sterling 8#244 /currency 8#245 /yen 8#246 /brokenbar 8#247 /section 8#250 /dieresis 8#251 /copyright 8#252 /ordfeminine 8#253 /guillemotleft 8#254 /logicalnot 8#255 /endash 8#256 /registered 8#257 /macron 8#260 /degree 8#261 /plusminus 8#262 /twosuperior 8#263 /threesuperior 8#264 /acute 8#265 /mu 8#266 /paragraph 8#267 /periodcentered 8#270 /cedilla 8#271 /onesuperior 8#272 /ordmasculine 8#273 /guillemotright 8#274 /onequarter 8#275 /onehalf 8#276 /threequarters 8#277 /questiondown 8#300 /Agrave 8#301 /Aacute 8#302 /Acircumflex 8#303 /Atilde 8#304 /Adieresis 8#305 /Aring 8#306 /AE 8#307 /Ccedilla 8#310 /Egrave 8#311 /Eacute 8#312 /Ecircumflex 8#313 /Edieresis 8#314 /Igrave 8#315 /Iacute 8#316 /Icircumflex 8#317 /Idieresis 8#320 /Eth 8#321 /Ntilde 8#322 /Ograve 8#323 /Oacute 8#324 /Ocircumflex 8#325 /Otilde 8#326 /Odieresis 8#327 /multiply 8#330 /Oslash 8#331 /Ugrave 8#332 /Uacute 8#333 /Ucircumflex 8#334 /Udieresis 8#335 /Yacute 8#336 /Thorn 8#337 /germandbls 8#340 /agrave 8#341 /aacute 8#342 /acircumflex 8#343 /atilde 8#344 /adieresis 8#345 /aring 8#346 /ae 8#347 /ccedilla 8#350 /egrave 8#351 /eacute 8#352 /ecircumflex 8#353 /edieresis 8#354 /igrave 8#355 /iacute 8#356 /icircumflex 8#357 /idieresis 8#360 /eth 8#361 /ntilde 8#362 /ograve 8#363 /oacute 8#364 /ocircumflex 8#365 /otilde 8#366 /odieresis 8#367 /divide 8#370 /oslash 8#371 /ugrave 8#372 /uacute 8#373 /ucircumflex 8#374 /udieresis 8#375 /yacute 8#376 /thorn 8#377 /ydieresis] def /Times-Roman /Times-Roman-iso isovec ReEncode /Helvetica-Bold /Helvetica-Bold-iso isovec ReEncode /Helvetica-Narrow /Helvetica-Narrow-iso isovec ReEncode /$F2psBegin {$F2psDict begin /$F2psEnteredState save def} def /$F2psEnd {$F2psEnteredState restore end} def %%EndProlog $F2psBegin 10 setmiterlimit n -1000 9572 m -1000 -1000 l 13622 -1000 l 13622 9572 l cp clip 0.05883 0.05883 sc %%Page: 1 1 % Polyline 7.500 slw n 6413 2048 m 6380 2054 l 6348 2061 l 6315 2067 l 6283 2073 l 6250 2079 l 6217 2084 l 6185 2090 l 6152 2095 l 6120 2101 l 6088 2107 l 6057 2113 l 6027 2120 l 5998 2126 l 5970 2134 l 5943 2141 l 5918 2149 l 5894 2158 l 5873 2167 l 5853 2177 l 5835 2187 l 5819 2198 l 5805 2210 l 5793 2222 l 5782 2235 l 5774 2250 l 5768 2265 l 5763 2281 l 5760 2299 l 5759 2318 l 5759 2339 l 5761 2360 l 5764 2383 l 5768 2408 l 5774 2433 l 5780 2460 l 5788 2488 l 5797 2516 l 5806 2546 l 5815 2575 l 5825 2606 l 5836 2636 l 5846 2666 l 5856 2696 l 5866 2726 l 5875 2755 l 5884 2784 l 5892 2812 l 5899 2839 l 5905 2866 l 5910 2891 l 5915 2916 l 5918 2940 l 5919 2968 l 5920 2995 l 5919 3022 l 5916 3048 l 5912 3075 l 5908 3101 l 5902 3127 l 5895 3153 l 5887 3179 l 5880 3205 l 5871 3230 l 5863 3254 l 5855 3278 l 5848 3302 l 5841 3324 l 5834 3346 l 5829 3367 l 5824 3388 l 5821 3408 l 5819 3427 l 5819 3446 l 5820 3465 l 5823 3484 l 5827 3503 l 5833 3522 l 5840 3542 l 5848 3562 l 5858 3582 l 5868 3603 l 5880 3625 l 5891 3647 l 5904 3669 l 5916 3691 l 5929 3713 l 5941 3736 l 5953 3758 l 5964 3779 l 5974 3801 l 5983 3822 l 5991 3843 l 5997 3863 l 6002 3883 l 6006 3903 l 6008 3923 l 6008 3942 l 6006 3962 l 6003 3983 l 5998 4004 l 5992 4025 l 5985 4048 l 5977 4070 l 5968 4094 l 5958 4118 l 5947 4142 l 5936 4167 l 5925 4192 l 5913 4216 l 5902 4241 l 5892 4266 l 5882 4291 l 5872 4315 l 5864 4339 l 5857 4362 l 5851 4386 l 5846 4409 l 5843 4433 l 5840 4456 l 5840 4480 l 5840 4505 l 5842 4530 l 5845 4556 l 5849 4582 l 5854 4609 l 5860 4636 l 5867 4664 l 5875 4692 l 5883 4720 l 5892 4747 l 5901 4774 l 5910 4801 l 5920 4827 l 5929 4852 l 5938 4875 l 5947 4898 l 5955 4920 l 5963 4941 l 5971 4961 l 5978 4980 l 5985 5002 l 5992 5024 l 5999 5046 l 6005 5067 l 6010 5088 l 6016 5109 l 6022 5129 l 6027 5150 l 6033 5170 l 6039 5190 l 6045 5209 l 6052 5228 l 6059 5246 l 6067 5264 l 6075 5281 l 6084 5298 l 6094 5315 l 6105 5333 l 6115 5347 l 6125 5361 l 6137 5376 l 6149 5392 l 6162 5408 l 6176 5425 l 6191 5443 l 6206 5461 l 6221 5480 l 6237 5499 l 6253 5519 l 6269 5539 l 6284 5559 l 6299 5579 l 6313 5599 l 6327 5619 l 6340 5639 l 6352 5659 l 6363 5679 l 6373 5698 l 6382 5718 l 6390 5738 l 6398 5759 l 6404 5782 l 6410 5805 l 6415 5828 l 6420 5852 l 6424 5877 l 6428 5902 l 6431 5927 l 6435 5952 l 6438 5977 l 6442 6001 l 6446 6025 l 6450 6048 l 6455 6069 l 6461 6090 l 6467 6109 l 6474 6127 l 6483 6143 l 6492 6159 l 6503 6173 l 6515 6185 l 6528 6197 l 6543 6209 l 6560 6220 l 6578 6230 l 6598 6240 l 6619 6250 l 6641 6260 l 6663 6270 l 6687 6281 l 6710 6291 l 6733 6302 l 6757 6312 l 6779 6324 l 6801 6335 l 6821 6348 l 6841 6361 l 6859 6374 l 6876 6389 l 6893 6405 l 6906 6421 l 6919 6437 l 6932 6455 l 6944 6475 l 6955 6495 l 6967 6516 l 6979 6538 l 6991 6561 l 7003 6584 l 7015 6608 l 7027 6631 l 7040 6654 l 7053 6677 l 7067 6699 l 7081 6720 l 7096 6739 l 7111 6758 l 7127 6774 l 7144 6789 l 7161 6803 l 7180 6815 l 7200 6825 l 7220 6833 l 7240 6840 l 7263 6845 l 7286 6850 l 7311 6854 l 7338 6857 l 7365 6859 l 7394 6861 l 7424 6862 l 7454 6864 l 7485 6865 l 7516 6866 l 7547 6867 l 7578 6868 l 7609 6870 l 7639 6872 l 7668 6875 l 7696 6879 l 7723 6883 l 7748 6889 l 7773 6895 l 7795 6903 l 7817 6912 l 7838 6923 l 7857 6934 l 7875 6948 l 7892 6963 l 7909 6980 l 7926 6998 l 7941 7017 l 7957 7038 l 7972 7060 l 7987 7083 l 8002 7106 l 8017 7130 l 8031 7154 l 8046 7178 l 8061 7202 l 8075 7225 l 8090 7247 l 8105 7269 l 8120 7289 l 8135 7308 l 8151 7326 l 8167 7342 l 8184 7356 l 8202 7369 l 8220 7380 l 8239 7390 l 8260 7397 l 8282 7404 l 8305 7409 l 8330 7413 l 8356 7416 l 8383 7418 l 8412 7420 l 8441 7420 l 8471 7419 l 8502 7418 l 8534 7417 l 8565 7415 l 8597 7413 l 8629 7411 l 8660 7409 l 8690 7407 l 8720 7405 l 8749 7404 l 8777 7404 l 8804 7404 l 8830 7405 l 8856 7407 l 8880 7410 l 8906 7414 l 8931 7420 l 8956 7427 l 8981 7435 l 9005 7444 l 9029 7455 l 9053 7466 l 9077 7478 l 9100 7491 l 9123 7504 l 9146 7517 l 9168 7531 l 9190 7544 l 9210 7557 l 9230 7570 l 9250 7582 l 9268 7593 l 9286 7604 l 9304 7613 l 9320 7621 l 9336 7629 l 9353 7635 l 9370 7641 l 9388 7645 l 9406 7648 l 9425 7650 l 9444 7652 l 9464 7653 l 9485 7653 l 9508 7653 l 9531 7653 l 9555 7653 l 9579 7653 l 9605 7654 l 9631 7655 l 9658 7656 l 9685 7659 l 9713 7662 l 9742 7666 l 9771 7672 l 9801 7679 l 9833 7688 l 9853 7694 l 9874 7700 l 9895 7708 l 9918 7716 l 9941 7725 l 9966 7734 l 9991 7745 l 10017 7755 l 10045 7767 l 10073 7779 l 10102 7791 l 10132 7804 l 10163 7818 l 10194 7831 l 10227 7845 l 10259 7860 l 10293 7874 l 10326 7889 l 10360 7903 l 10394 7918 l 10429 7932 l 10463 7947 l 10497 7961 l 10531 7974 l 10565 7988 l 10599 8001 l 10633 8013 l 10667 8025 l 10700 8037 l 10733 8049 l 10767 8059 l 10800 8070 l 10834 8080 l 10868 8090 l 10902 8099 l 10937 8108 l 10973 8117 l 11009 8125 l 11045 8133 l 11083 8141 l 11120 8148 l 11158 8155 l 11197 8161 l 11236 8167 l 11275 8172 l 11313 8177 l 11352 8181 l 11391 8184 l 11429 8187 l 11467 8190 l 11504 8191 l 11540 8192 l 11576 8192 l 11610 8192 l 11644 8191 l 11676 8189 l 11707 8187 l 11738 8184 l 11767 8180 l 11794 8176 l 11821 8171 l 11847 8165 l 11871 8159 l 11895 8153 l 11923 8143 l 11950 8133 l 11976 8122 l 12001 8109 l 12025 8096 l 12048 8081 l 12071 8065 l 12092 8048 l 12113 8031 l 12133 8012 l 12153 7992 l 12171 7972 l 12188 7951 l 12205 7930 l 12220 7909 l 12235 7887 l 12248 7865 l 12260 7843 l 12272 7822 l 12282 7800 l 12292 7779 l 12301 7759 l 12309 7739 l 12316 7719 l 12323 7699 l 12330 7680 l 12338 7655 l 12345 7631 l 12352 7607 l 12359 7582 l 12365 7558 l 12371 7533 l 12377 7508 l 12382 7484 l 12388 7460 l 12392 7436 l 12397 7414 l 12401 7391 l 12405 7370 l 12409 7350 l 12412 7331 l 12415 7313 l 12418 7297 l 12421 7281 l 12424 7266 l 12428 7253 l 12432 7234 l 12437 7216 l 12442 7199 l 12446 7183 l 12451 7166 l 12456 7150 l 12460 7134 l 12463 7117 l 12466 7101 l 12468 7086 l 12469 7070 l 12469 7054 l 12467 7037 l 12465 7020 l 12462 7006 l 12459 6991 l 12455 6975 l 12450 6958 l 12445 6940 l 12440 6921 l 12434 6901 l 12428 6880 l 12422 6859 l 12416 6838 l 12411 6817 l 12406 6796 l 12401 6776 l 12397 6756 l 12394 6736 l 12392 6718 l 12390 6700 l 12390 6683 l 12390 6665 l 12392 6649 l 12394 6631 l 12397 6614 l 12401 6597 l 12406 6579 l 12411 6561 l 12416 6542 l 12422 6524 l 12428 6505 l 12434 6487 l 12440 6468 l 12445 6450 l 12450 6432 l 12455 6414 l 12459 6396 l 12462 6378 l 12465 6360 l 12467 6343 l 12468 6326 l 12469 6308 l 12469 6289 l 12468 6269 l 12468 6249 l 12466 6227 l 12464 6205 l 12462 6182 l 12460 6159 l 12457 6135 l 12454 6111 l 12451 6087 l 12447 6063 l 12444 6040 l 12441 6016 l 12437 5993 l 12434 5970 l 12431 5948 l 12428 5925 l 12424 5902 l 12421 5879 l 12419 5855 l 12416 5831 l 12413 5806 l 12411 5781 l 12408 5755 l 12406 5729 l 12404 5702 l 12403 5676 l 12401 5651 l 12400 5625 l 12400 5601 l 12399 5578 l 12399 5555 l 12400 5534 l 12401 5514 l 12402 5495 l 12403 5477 l 12405 5460 l 12408 5440 l 12411 5421 l 12416 5402 l 12420 5384 l 12426 5365 l 12431 5347 l 12437 5329 l 12444 5311 l 12450 5293 l 12456 5275 l 12462 5258 l 12468 5240 l 12474 5222 l 12479 5205 l 12483 5186 l 12488 5168 l 12490 5152 l 12493 5135 l 12496 5117 l 12498 5099 l 12500 5079 l 12502 5058 l 12504 5036 l 12506 5014 l 12507 4990 l 12509 4966 l 12510 4942 l 12512 4918 l 12513 4893 l 12515 4869 l 12516 4845 l 12518 4822 l 12520 4799 l 12521 4776 l 12523 4754 l 12525 4733 l 12527 4713 l 12529 4693 l 12531 4673 l 12534 4653 l 12536 4632 l 12539 4610 l 12541 4588 l 12543 4566 l 12546 4543 l 12548 4520 l 12550 4497 l 12552 4473 l 12553 4450 l 12554 4426 l 12555 4403 l 12555 4380 l 12555 4357 l 12555 4334 l 12554 4312 l 12552 4290 l 12550 4267 l 12548 4245 l 12545 4224 l 12541 4203 l 12537 4181 l 12533 4159 l 12528 4136 l 12523 4112 l 12517 4088 l 12510 4064 l 12503 4038 l 12496 4013 l 12488 3987 l 12479 3961 l 12471 3935 l 12462 3909 l 12452 3884 l 12443 3859 l 12434 3835 l 12424 3811 l 12415 3788 l 12405 3766 l 12396 3744 l 12386 3723 l 12377 3702 l 12368 3683 l 12357 3661 l 12347 3640 l 12336 3619 l 12325 3598 l 12314 3576 l 12303 3555 l 12291 3533 l 12280 3511 l 12269 3489 l 12257 3467 l 12246 3446 l 12235 3424 l 12225 3402 l 12215 3381 l 12206 3360 l 12197 3340 l 12189 3320 l 12181 3301 l 12174 3281 l 12168 3262 l 12162 3244 l 12158 3225 l 12153 3204 l 12149 3183 l 12145 3162 l 12142 3139 l 12140 3117 l 12138 3094 l 12137 3071 l 12137 3047 l 12138 3024 l 12139 3001 l 12141 2978 l 12143 2956 l 12146 2935 l 12150 2915 l 12154 2896 l 12158 2879 l 12163 2862 l 12168 2847 l 12174 2833 l 12180 2820 l 12188 2805 l 12197 2792 l 12206 2779 l 12216 2766 l 12227 2754 l 12238 2742 l 12249 2730 l 12260 2717 l 12272 2704 l 12282 2691 l 12292 2676 l 12302 2661 l 12310 2645 l 12318 2627 l 12324 2608 l 12330 2588 l 12334 2571 l 12336 2553 l 12339 2534 l 12341 2513 l 12342 2491 l 12343 2467 l 12343 2442 l 12342 2416 l 12340 2389 l 12338 2360 l 12335 2332 l 12331 2303 l 12326 2273 l 12320 2244 l 12314 2215 l 12307 2187 l 12299 2159 l 12290 2132 l 12280 2106 l 12270 2081 l 12259 2056 l 12248 2033 l 12236 2011 l 12224 1990 l 12210 1970 l 12196 1949 l 12181 1929 l 12164 1910 l 12147 1890 l 12129 1871 l 12110 1853 l 12090 1835 l 12070 1818 l 12049 1802 l 12027 1787 l 12005 1773 l 11983 1761 l 11961 1749 l 11939 1739 l 11917 1730 l 11895 1722 l 11874 1716 l 11852 1710 l 11831 1707 l 11811 1704 l 11790 1703 l 11769 1702 l 11748 1703 l 11727 1705 l 11706 1708 l 11683 1711 l 11660 1716 l 11636 1721 l 11612 1727 l 11587 1733 l 11560 1740 l 11534 1747 l 11506 1754 l 11479 1761 l 11450 1768 l 11422 1774 l 11393 1780 l 11364 1786 l 11334 1791 l 11305 1795 l 11275 1798 l 11245 1800 l 11215 1801 l 11184 1801 l 11153 1800 l 11128 1798 l 11104 1796 l 11078 1793 l 11052 1790 l 11025 1785 l 10997 1781 l 10968 1776 l 10939 1770 l 10908 1764 l 10877 1758 l 10844 1751 l 10811 1744 l 10778 1737 l 10743 1730 l 10708 1722 l 10673 1715 l 10637 1708 l 10601 1701 l 10565 1695 l 10530 1688 l 10494 1682 l 10458 1677 l 10422 1672 l 10387 1668 l 10352 1664 l 10318 1661 l 10284 1658 l 10250 1657 l 10216 1656 l 10183 1655 l 10150 1656 l 10118 1658 l 10087 1660 l 10055 1663 l 10024 1666 l 9992 1671 l 9960 1676 l 9927 1682 l 9894 1688 l 9861 1695 l 9827 1703 l 9792 1711 l 9757 1720 l 9721 1729 l 9685 1738 l 9649 1748 l 9613 1757 l 9576 1767 l 9539 1778 l 9502 1788 l 9465 1798 l 9429 1807 l 9392 1817 l 9356 1826 l 9320 1835 l 9285 1844 l 9250 1852 l 9216 1860 l 9182 1867 l 9148 1873 l 9115 1879 l 9082 1884 l 9050 1889 l 9018 1892 l 8987 1895 l 8955 1898 l 8919 1899 l 8883 1900 l 8847 1899 l 8811 1898 l 8774 1896 l 8737 1893 l 8699 1889 l 8661 1884 l 8623 1878 l 8585 1872 l 8546 1865 l 8508 1857 l 8470 1849 l 8432 1840 l 8395 1830 l 8358 1821 l 8322 1811 l 8287 1801 l 8254 1790 l 8221 1780 l 8189 1770 l 8159 1760 l 8130 1750 l 8102 1740 l 8076 1730 l 8051 1721 l 8028 1712 l 8006 1703 l 7985 1695 l 7965 1688 l 7931 1674 l 7899 1662 l 7871 1650 l 7844 1640 l 7820 1631 l 7798 1623 l 7778 1617 l 7760 1611 l 7743 1607 l 7728 1603 l 7715 1601 l 7702 1600 l 7691 1600 l 7680 1601 l 7669 1603 l 7658 1605 l 7648 1607 l 7638 1610 l 7627 1613 l 7615 1617 l 7601 1621 l 7587 1626 l 7571 1632 l 7554 1638 l 7536 1645 l 7517 1653 l 7496 1661 l 7474 1670 l 7452 1679 l 7428 1689 l 7403 1699 l 7378 1709 l 7352 1720 l 7325 1731 l 7297 1743 l 7268 1755 l 7247 1763 l 7226 1772 l 7204 1781 l 7182 1790 l 7158 1800 l 7133 1810 l 7108 1820 l 7081 1831 l 7053 1842 l 7025 1853 l 6996 1864 l 6966 1875 l 6935 1886 l 6904 1898 l 6873 1909 l 6841 1921 l 6809 1932 l 6776 1943 l 6744 1954 l 6712 1964 l 6680 1974 l 6649 1984 l 6618 1994 l 6587 2003 l 6557 2011 l 6527 2019 l 6498 2027 l 6469 2034 l 6441 2041 l cp gs col34 1.00 shd ef gr gs col34 s gr % Polyline n 675 6525 m 5850 6525 l 5850 6075 l 5625 6075 l 5625 5625 l 900 5625 l 900 6075 l 675 6075 l cp gs col7 1.00 shd ef gr gs col7 s gr % Polyline n 1125 6525 m 5355 6525 l 5400 5175 l 5175 5175 l 5175 4725 l 4950 4725 l 4950 4275 l 1575 4275 l 1575 4725 l 1350 4725 l 1350 5175 l 1125 5175 l cp gs col34 1.00 shd ef gr gs col34 s gr % Polyline 75.000 slw n 9450 4500 m 12465 2205 l gs col7 s gr % Polyline n 9450 4500 m 9450 7785 l gs col7 s gr % Polyline n 9450 4500 m 6075 1935 l gs col7 s gr % Polyline n 12510 6435 m 9450 6435 l gs col7 s gr % Polyline 7.500 slw n 1800 6525 m 4725 6525 l 4725 3825 l 4500 3825 l 4500 3375 l 4275 3375 l 4275 2925 l 4050 2925 l 4050 2475 l 2475 2475 l 2475 2925 l 2250 2925 l 2250 3375 l 2025 3375 l 2025 3825 l 1800 3825 l cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline n 2700 6525 m 3825 6525 l 3825 2025 l 3600 2025 l 3600 1575 l 2925 1575 l 2925 2025 l 2700 2025 l cp gs col33 1.00 shd ef gr gs col33 s gr % Polyline gs clippath 12068 6810 m 11970 6885 l 12022 6773 l 11937 6878 l 11984 6915 l cp clip n 12375 4455 m 12510 4635 l 12510 6210 l 11970 6885 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 12068 6810 m 11970 6885 l 12022 6773 l 12045 6791 l 12068 6810 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 7113 6004 m 7155 6120 l 7063 6037 l 7138 6149 l 7188 6116 l cp clip n 6705 5445 m 7155 6120 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 7113 6004 m 7155 6120 l 7063 6037 l 7088 6020 l 7113 6004 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 7304 4656 m 7200 4590 l 7323 4599 l 7195 4557 l 7176 4614 l cp clip n 7875 4815 m 7200 4590 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 7304 4656 m 7200 4590 l 7323 4599 l 7314 4628 l 7304 4656 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 11405 4128 m 11475 4230 l 11365 4173 l 11466 4262 l 11506 4217 l cp clip n 9585 2565 m 11475 4230 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 11405 4128 m 11475 4230 l 11365 4173 l 11385 4151 l 11405 4128 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 11712 4556 m 11835 4545 l 11732 4613 l 11859 4568 l 11839 4512 l cp clip n 10170 5130 m 11835 4545 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 11712 4556 m 11835 4545 l 11732 4613 l 11722 4585 l 11712 4556 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 9732 5411 m 9855 5400 l 9752 5468 l 9879 5423 l 9859 5367 l cp clip n 7920 6075 m 9855 5400 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 9732 5411 m 9855 5400 l 9752 5468 l 9742 5440 l 9732 5411 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 10823 5573 m 10935 5625 l 10812 5632 l 10944 5657 l 10955 5598 l cp clip n 9990 5445 m 10935 5625 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 10823 5573 m 10935 5625 l 10812 5632 l 10817 5603 l 10823 5573 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 10815 5280 m 10935 5310 l 10815 5340 l 10950 5340 l 10950 5280 l cp clip n 10215 5310 m 10935 5310 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 10815 5280 m 10935 5310 l 10815 5340 l 10815 5310 l 10815 5280 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 11955 4965 m 11925 5085 l 11895 4965 l 11895 5100 l 11955 5100 l cp clip n 11925 4590 m 11925 5085 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 11955 4965 m 11925 5085 l 11895 4965 l 11925 4965 l 11955 4965 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 9840 6720 m 9810 6840 l 9780 6720 l 9780 6855 l 9840 6855 l cp clip n 9810 5490 m 9810 6840 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 9840 6720 m 9810 6840 l 9780 6720 l 9810 6720 l 9840 6720 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 10847 5943 m 10935 6030 l 10816 5995 l 10933 6063 l 10963 6012 l cp clip n 9945 5445 m 10935 6030 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 10847 5943 m 10935 6030 l 10816 5995 l 10832 5969 l 10847 5943 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 10698 2634 m 10800 2565 l 10742 2674 l 10832 2574 l 10788 2534 l cp clip n 8865 4725 m 10800 2565 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 10698 2634 m 10800 2565 l 10742 2674 l 10720 2654 l 10698 2634 l cp gs 0.00 setgray ef gr col0 s % Polyline 30.000 slw n 675 6075 m 5850 6075 l gs col34 1.00 shd ef gr gs col0 s gr % Polyline 7.500 slw [15 15] 15 sd gs clippath 645 6195 m 675 6075 l 705 6195 l 705 6060 l 645 6060 l cp clip n 675 6525 m 675 6075 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 645 6195 m 675 6075 l 705 6195 l 675 6195 l 645 6195 l cp gs 0.00 setgray ef gr col0 s % Polyline [15 15] 15 sd gs clippath 5880 6405 m 5850 6525 l 5820 6405 l 5820 6540 l 5880 6540 l cp clip n 5850 6075 m 5850 6525 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 5880 6405 m 5850 6525 l 5820 6405 l 5850 6405 l 5880 6405 l cp gs col7 1.00 shd ef gr col0 s % Polyline 30.000 slw n 900 5625 m 5625 5625 l gs col34 1.00 shd ef gr gs col0 s gr % Polyline n 1125 5175 m 5400 5175 l gs col34 1.00 shd ef gr gs col0 s gr % Polyline n 1350 4725 m 5175 4725 l gs col34 1.00 shd ef gr gs col0 s gr % Polyline n 1575 4275 m 4950 4275 l gs col34 1.00 shd ef gr gs col0 s gr % Polyline n 1800 3825 m 4725 3825 l gs col34 1.00 shd ef gr gs col0 s gr % Polyline n 2025 3375 m 4500 3375 l gs col34 1.00 shd ef gr gs col0 s gr % Polyline n 2250 2925 m 4275 2925 l gs col34 1.00 shd ef gr gs col0 s gr % Polyline n 2475 2475 m 4050 2475 l gs col34 1.00 shd ef gr gs col0 s gr % Polyline n 2700 2025 m 3825 2025 l gs col34 1.00 shd ef gr gs col0 s gr % Polyline n 2925 1575 m 3600 1575 l gs col34 1.00 shd ef gr gs col0 s gr % Polyline 7.500 slw [15 15] 15 sd gs clippath 870 5745 m 900 5625 l 930 5745 l 930 5610 l 870 5610 l cp clip n 900 6075 m 900 5625 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 870 5745 m 900 5625 l 930 5745 l 900 5745 l 870 5745 l cp gs 0.00 setgray ef gr col0 s % Polyline [15 15] 15 sd gs clippath 1095 5295 m 1125 5175 l 1155 5295 l 1155 5160 l 1095 5160 l cp clip n 1125 6525 m 1125 5175 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 1095 5295 m 1125 5175 l 1155 5295 l 1125 5295 l 1095 5295 l cp gs 0.00 setgray ef gr col0 s % Polyline [15 15] 15 sd gs clippath 1320 4845 m 1350 4725 l 1380 4845 l 1380 4710 l 1320 4710 l cp clip n 1350 5175 m 1350 4725 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 1320 4845 m 1350 4725 l 1380 4845 l 1350 4845 l 1320 4845 l cp gs 0.00 setgray ef gr col0 s % Polyline [15 15] 15 sd gs clippath 1545 4395 m 1575 4275 l 1605 4395 l 1605 4260 l 1545 4260 l cp clip n 1575 4725 m 1575 4275 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 1545 4395 m 1575 4275 l 1605 4395 l 1575 4395 l 1545 4395 l cp gs 0.00 setgray ef gr col0 s % Polyline [15 15] 15 sd gs clippath 1770 3945 m 1800 3825 l 1830 3945 l 1830 3810 l 1770 3810 l cp clip n 1800 6525 m 1800 3825 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 1770 3945 m 1800 3825 l 1830 3945 l 1800 3945 l 1770 3945 l cp gs 0.00 setgray ef gr col0 s % Polyline [15 15] 15 sd gs clippath 1995 3495 m 2025 3375 l 2055 3495 l 2055 3360 l 1995 3360 l cp clip n 2025 3825 m 2025 3375 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 1995 3495 m 2025 3375 l 2055 3495 l 2025 3495 l 1995 3495 l cp gs 0.00 setgray ef gr col0 s % Polyline [15 15] 15 sd gs clippath 2220 3045 m 2250 2925 l 2280 3045 l 2280 2910 l 2220 2910 l cp clip n 2250 3375 m 2250 2925 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 2220 3045 m 2250 2925 l 2280 3045 l 2250 3045 l 2220 3045 l cp gs 0.00 setgray ef gr col0 s % Polyline [15 15] 15 sd gs clippath 2445 2595 m 2475 2475 l 2505 2595 l 2505 2460 l 2445 2460 l cp clip n 2475 2925 m 2475 2475 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 2445 2595 m 2475 2475 l 2505 2595 l 2475 2595 l 2445 2595 l cp gs 0.00 setgray ef gr col0 s % Polyline [15 15] 15 sd gs clippath 5655 5955 m 5625 6075 l 5595 5955 l 5595 6090 l 5655 6090 l cp clip n 5625 5625 m 5625 6075 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 5655 5955 m 5625 6075 l 5595 5955 l 5625 5955 l 5655 5955 l cp gs col7 1.00 shd ef gr col0 s % Polyline [15 15] 15 sd gs clippath 5430 6405 m 5400 6525 l 5370 6405 l 5370 6540 l 5430 6540 l cp clip n 5400 5175 m 5400 6525 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 5430 6405 m 5400 6525 l 5370 6405 l 5400 6405 l 5430 6405 l cp gs col7 1.00 shd ef gr col0 s % Polyline [15 15] 15 sd gs clippath 5205 5055 m 5175 5175 l 5145 5055 l 5145 5190 l 5205 5190 l cp clip n 5175 4725 m 5175 5175 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 5205 5055 m 5175 5175 l 5145 5055 l 5175 5055 l 5205 5055 l cp gs col7 1.00 shd ef gr col0 s % Polyline [15 15] 15 sd gs clippath 4980 4605 m 4950 4725 l 4920 4605 l 4920 4740 l 4980 4740 l cp clip n 4950 4275 m 4950 4725 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 4980 4605 m 4950 4725 l 4920 4605 l 4950 4605 l 4980 4605 l cp gs col7 1.00 shd ef gr col0 s % Polyline [15 15] 15 sd gs clippath 4755 6405 m 4725 6525 l 4695 6405 l 4695 6540 l 4755 6540 l cp clip n 4725 3825 m 4725 6525 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 4755 6405 m 4725 6525 l 4695 6405 l 4725 6405 l 4755 6405 l cp gs col7 1.00 shd ef gr col0 s % Polyline [15 15] 15 sd gs clippath 4530 3705 m 4500 3825 l 4470 3705 l 4470 3840 l 4530 3840 l cp clip n 4500 3375 m 4500 3825 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 4530 3705 m 4500 3825 l 4470 3705 l 4500 3705 l 4530 3705 l cp gs col7 1.00 shd ef gr col0 s % Polyline [15 15] 15 sd gs clippath 4305 3255 m 4275 3375 l 4245 3255 l 4245 3390 l 4305 3390 l cp clip n 4275 2925 m 4275 3375 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 4305 3255 m 4275 3375 l 4245 3255 l 4275 3255 l 4305 3255 l cp gs col7 1.00 shd ef gr col0 s % Polyline [15 15] 15 sd gs clippath 4080 2805 m 4050 2925 l 4020 2805 l 4020 2940 l 4080 2940 l cp clip n 4050 2475 m 4050 2925 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 4080 2805 m 4050 2925 l 4020 2805 l 4050 2805 l 4080 2805 l cp gs col7 1.00 shd ef gr col0 s % Polyline [15 15] 15 sd gs clippath 2670 2145 m 2700 2025 l 2730 2145 l 2730 2010 l 2670 2010 l cp clip n 2700 6525 m 2700 2025 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 2670 2145 m 2700 2025 l 2730 2145 l 2700 2145 l 2670 2145 l cp gs 0.00 setgray ef gr col0 s % Polyline [15 15] 15 sd gs clippath 3855 6405 m 3825 6525 l 3795 6405 l 3795 6540 l 3855 6540 l cp clip n 3825 2025 m 3825 6525 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 3855 6405 m 3825 6525 l 3795 6405 l 3825 6405 l 3855 6405 l cp gs col7 1.00 shd ef gr col0 s % Polyline [15 15] 15 sd gs clippath 3630 1905 m 3600 2025 l 3570 1905 l 3570 2040 l 3630 2040 l cp clip n 3600 1575 m 3600 2025 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 3630 1905 m 3600 2025 l 3570 1905 l 3600 1905 l 3630 1905 l cp gs col7 1.00 shd ef gr col0 s % Polyline [15 15] 15 sd gs clippath 2895 1695 m 2925 1575 l 2955 1695 l 2955 1560 l 2895 1560 l cp clip n 2925 2025 m 2925 1575 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 2895 1695 m 2925 1575 l 2955 1695 l 2925 1695 l 2895 1695 l cp gs 0.00 setgray ef gr col0 s % Polyline 45.000 slw gs clippath 6087 6495 m 6207 6525 l 6087 6555 l 6360 6555 l 6360 6495 l cp clip n 540 6525 m 6300 6525 l gs 0.00 setgray ef gr gs col0 s gr gr % arrowhead n 6087 6495 m 6207 6525 l 6087 6555 l 6087 6525 l 6087 6495 l cp gs 0.00 setgray ef gr col0 s % Polyline 7.500 slw gs clippath 3681 6720 m 3825 6750 l 3681 6780 l 3840 6780 l 3840 6720 l cp 2844 6780 m 2700 6750 l 2844 6720 l 2685 6720 l 2685 6780 l cp clip n 2700 6750 m 3825 6750 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 2844 6780 m 2700 6750 l 2844 6720 l 2820 6750 l 2844 6780 l cp gs col7 1.00 shd ef gr col0 s % arrowhead n 3681 6720 m 3825 6750 l 3681 6780 l 3705 6750 l 3681 6720 l cp gs col7 1.00 shd ef gr col0 s % Polyline gs clippath 5256 7170 m 5400 7200 l 5256 7230 l 5415 7230 l 5415 7170 l cp 1269 7230 m 1125 7200 l 1269 7170 l 1110 7170 l 1110 7230 l cp clip n 1125 7200 m 5400 7200 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 1269 7230 m 1125 7200 l 1269 7170 l 1245 7200 l 1269 7230 l cp gs col7 1.00 shd ef gr col0 s % arrowhead n 5256 7170 m 5400 7200 l 5256 7230 l 5280 7200 l 5256 7170 l cp gs col7 1.00 shd ef gr col0 s % Polyline gs clippath 4581 6945 m 4725 6975 l 4581 7005 l 4740 7005 l 4740 6945 l cp 1944 7005 m 1800 6975 l 1944 6945 l 1785 6945 l 1785 7005 l cp clip n 1800 6975 m 4725 6975 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 1944 7005 m 1800 6975 l 1944 6945 l 1920 6975 l 1944 7005 l cp gs col7 1.00 shd ef gr col0 s % arrowhead n 4581 6945 m 4725 6975 l 4581 7005 l 4605 6975 l 4581 6945 l cp gs col7 1.00 shd ef gr col0 s % Polyline gs clippath 5706 7395 m 5850 7425 l 5706 7455 l 5865 7455 l 5865 7395 l cp 819 7455 m 675 7425 l 819 7395 l 660 7395 l 660 7455 l cp clip n 675 7425 m 5850 7425 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 819 7455 m 675 7425 l 819 7395 l 795 7425 l 819 7455 l cp gs col7 1.00 shd ef gr col0 s % arrowhead n 5706 7395 m 5850 7425 l 5706 7455 l 5730 7425 l 5706 7395 l cp gs col7 1.00 shd ef gr col0 s % Polyline 1 slc [15 45] 45 sd n 675 6570 m 675 7650 l gs col34 1.00 shd ef gr gs col0 s gr [] 0 sd % Polyline [15 45] 45 sd n 1125 6570 m 1125 7650 l gs col34 1.00 shd ef gr gs col0 s gr [] 0 sd % Polyline [15 45] 45 sd n 1800 6570 m 1800 7650 l gs col34 1.00 shd ef gr gs col0 s gr [] 0 sd % Polyline [15 45] 45 sd n 2700 6570 m 2700 7650 l gs col34 1.00 shd ef gr gs col0 s gr [] 0 sd % Polyline [15 45] 45 sd n 3825 6570 m 3825 7650 l gs col34 1.00 shd ef gr gs col0 s gr [] 0 sd % Polyline [15 45] 45 sd n 4725 6570 m 4725 7650 l gs col34 1.00 shd ef gr gs col0 s gr [] 0 sd % Polyline [15 45] 45 sd n 5400 6570 m 5400 7650 l gs col34 1.00 shd ef gr gs col0 s gr [] 0 sd % Polyline [15 45] 45 sd n 5850 6570 m 5850 7650 l gs col34 1.00 shd ef gr gs col0 s gr [] 0 sd % Polyline 0 slc n 750 225 m 450 225 450 1050 300 arcto 4 {pop} repeat 450 1350 12300 1350 300 arcto 4 {pop} repeat 12600 1350 12600 525 300 arcto 4 {pop} repeat 12600 225 750 225 300 arcto 4 {pop} repeat cp gs col34 1.00 shd ef gr gs col0 s gr % Polyline n 8835 2250 m 8775 2250 8775 2415 60 arcto 4 {pop} repeat 8775 2475 10110 2475 60 arcto 4 {pop} repeat 10170 2475 10170 2310 60 arcto 4 {pop} repeat 10170 2250 8835 2250 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline n 10635 2250 m 10575 2250 10575 2415 60 arcto 4 {pop} repeat 10575 2475 11865 2475 60 arcto 4 {pop} repeat 11925 2475 11925 2310 60 arcto 4 {pop} repeat 11925 2250 10635 2250 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline n 11490 4275 m 11430 4275 11430 4440 60 arcto 4 {pop} repeat 11430 4500 12315 4500 60 arcto 4 {pop} repeat 12375 4500 12375 4335 60 arcto 4 {pop} repeat 12375 4275 11490 4275 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline n 11040 5175 m 10980 5175 10980 5340 60 arcto 4 {pop} repeat 10980 5400 12315 5400 60 arcto 4 {pop} repeat 12375 5400 12375 5235 60 arcto 4 {pop} repeat 12375 5175 11040 5175 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline n 9735 5175 m 9675 5175 9675 5340 60 arcto 4 {pop} repeat 9675 5400 10110 5400 60 arcto 4 {pop} repeat 10170 5400 10170 5235 60 arcto 4 {pop} repeat 10170 5175 9735 5175 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline n 7260 6075 m 7200 6075 7200 6240 60 arcto 4 {pop} repeat 7200 6300 7815 6300 60 arcto 4 {pop} repeat 7875 6300 7875 6135 60 arcto 4 {pop} repeat 7875 6075 7260 6075 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline n 6810 2250 m 6750 2250 6750 2415 60 arcto 4 {pop} repeat 6750 2475 8130 2475 60 arcto 4 {pop} repeat 8190 2475 8190 2310 60 arcto 4 {pop} repeat 8190 2250 6810 2250 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline n 6360 3375 m 6300 3375 6300 3540 60 arcto 4 {pop} repeat 6300 3600 7545 3600 60 arcto 4 {pop} repeat 7605 3600 7605 3435 60 arcto 4 {pop} repeat 7605 3375 6360 3375 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline n 6360 4275 m 6300 4275 6300 4440 60 arcto 4 {pop} repeat 6300 4500 7275 4500 60 arcto 4 {pop} repeat 7335 4500 7335 4335 60 arcto 4 {pop} repeat 7335 4275 6360 4275 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline n 6360 5175 m 6300 5175 6300 5340 60 arcto 4 {pop} repeat 6300 5400 7140 5400 60 arcto 4 {pop} repeat 7200 5400 7200 5235 60 arcto 4 {pop} repeat 7200 5175 6360 5175 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline gs clippath 7365 5340 m 7245 5310 l 7365 5280 l 7230 5280 l 7230 5340 l cp clip n 9630 5310 m 7245 5310 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 7365 5340 m 7245 5310 l 7365 5280 l 7365 5310 l 7365 5340 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 7500 4395 m 7380 4365 l 7500 4335 l 7365 4335 l 7365 4395 l cp clip n 11385 4365 m 7380 4365 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 7500 4395 m 7380 4365 l 7500 4335 l 7500 4365 l 7500 4395 l cp gs 0.00 setgray ef gr col0 s % Polyline n 11040 5580 m 10980 5580 10980 5745 60 arcto 4 {pop} repeat 10980 5805 12180 5805 60 arcto 4 {pop} repeat 12240 5805 12240 5640 60 arcto 4 {pop} repeat 12240 5580 11040 5580 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline n 11040 5985 m 10980 5985 10980 6150 60 arcto 4 {pop} repeat 10980 6210 12315 6210 60 arcto 4 {pop} repeat 12375 6210 12375 6045 60 arcto 4 {pop} repeat 12375 5985 11040 5985 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline gs clippath 9958 5554 m 9900 5445 l 10003 5514 l 9912 5414 l 9868 5454 l cp clip n 11205 6885 m 9900 5445 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 9958 5554 m 9900 5445 l 10003 5514 l 9981 5534 l 9958 5554 l cp gs 0.00 setgray ef gr col0 s % Polyline n 10590 6930 m 10530 6930 10530 7095 60 arcto 4 {pop} repeat 10530 7155 12225 7155 60 arcto 4 {pop} repeat 12285 7155 12285 6990 60 arcto 4 {pop} repeat 12285 6930 10590 6930 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline n 9690 6930 m 9630 6930 9630 7095 60 arcto 4 {pop} repeat 9630 7155 10110 7155 60 arcto 4 {pop} repeat 10170 7155 10170 6990 60 arcto 4 {pop} repeat 10170 6930 9690 6930 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr /Times-Roman-iso ff 120.00 scf sf 900 7560 m gs 1 -1 sc (Startup, Runtime, Shutdown) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 6345 2970 m gs 1 -1 sc (ap_ctx_get\(...,) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 10800 2745 m gs 1 -1 sc (ap_get_module_config\(...) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 10800 2880 m gs 1 -1 sc (->per_dir_config,) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 10800 3015 m gs 1 -1 sc (&ssl_module\)) col0 sh gr % Polyline n 7980 4770 m 7920 4770 7920 4935 60 arcto 4 {pop} repeat 7920 4995 9075 4995 60 arcto 4 {pop} repeat 9135 4995 9135 4830 60 arcto 4 {pop} repeat 9135 4770 7980 4770 60 arcto 4 {pop} repeat cp gs col35 1.00 shd ef gr gs col35 s gr % Polyline gs clippath 7340 2610 m 7425 2520 l 7393 2639 l 7459 2521 l 7406 2492 l cp clip n 6975 3330 m 7425 2520 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 7340 2610 m 7425 2520 l 7393 2639 l 7367 2625 l 7340 2610 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 9336 2569 m 9450 2520 l 9373 2616 l 9480 2535 l 9444 2487 l cp clip n 7200 4230 m 9450 2520 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 9336 2569 m 9450 2520 l 9373 2616 l 9354 2593 l 9336 2569 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 7321 5196 m 7200 5220 l 7296 5142 l 7174 5199 l 7199 5254 l cp clip n 7875 4905 m 7200 5220 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 7321 5196 m 7200 5220 l 7296 5142 l 7309 5169 l 7321 5196 l cp gs 0.00 setgray ef gr col0 s % Polyline gs clippath 6720 4665 m 6750 4545 l 6780 4665 l 6780 4530 l 6720 4530 l cp clip n 6750 5130 m 6750 4545 l gs col34 1.00 shd ef gr gs col0 s gr gr % arrowhead n 6720 4665 m 6750 4545 l 6780 4665 l 6750 4665 l 6720 4665 l cp gs 0.00 setgray ef gr col0 s % Polyline [15 15] 15 sd gs clippath 9279 4984 m 9175 4918 l 9298 4927 l 9170 4885 l 9151 4942 l cp clip n 9850 5143 m 9175 4918 l gs col34 1.00 shd ef gr gs col0 s gr gr [] 0 sd % arrowhead n 9279 4984 m 9175 4918 l 9298 4927 l 9289 4956 l 9279 4984 l cp gs 0.00 setgray ef gr col0 s /Helvetica-Narrow-iso ff 120.00 scf sf 6210 4680 m gs 1 -1 sc (->server) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 8280 6120 m gs 1 -1 sc (ap_ctx_get\(...,"ssl"\)) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 7740 2700 m gs 1 -1 sc (ap_get_module_config\(...) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 7740 2835 m gs 1 -1 sc (->module_config,) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 7740 2970 m gs 1 -1 sc (&ssl_module\)) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 6345 3105 m gs 1 -1 sc ("ssl_module"\)) col0 sh gr /Times-Roman-iso ff 120.00 scf sf 1350 7335 m gs 1 -1 sc (Configuration Time) col0 sh gr /Times-Roman-iso ff 120.00 scf sf 2025 7110 m gs 1 -1 sc (Connection Duration) col0 sh gr /Times-Roman-iso ff 120.00 scf sf 2835 6885 m gs 1 -1 sc (Request Duration) col0 sh gr /Helvetica-Bold-iso ff 300.00 scf sf 6345 6795 m gs 1 -1 sc (t) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 7110 5985 m gs 1 -1 sc (->client) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 7065 5085 m gs 1 -1 sc (->connection) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 7065 4770 m gs 1 -1 sc (->server) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 8010 5445 m gs 1 -1 sc (SSL_get_app_data\(\)) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 10530 4050 m gs 1 -1 sc (->pSSLCtx) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 7875 4275 m gs 1 -1 sc (SSL_CTX_get_app_data\(\)) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 10305 5535 m gs 1 -1 sc (SSL_get_current_cipher\(\)) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 10440 5940 m gs 1 -1 sc (SSL_get_session\(\)) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 9540 7335 m gs 1 -1 sc (SSL_get_{r,w}bio\(\)) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 10125 4680 m gs 1 -1 sc (SSL_get_SSL_CTX\(\)) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 10350 5175 m gs 1 -1 sc (SSL_get_SSL_METHOD\(\)) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 11745 4770 m gs 1 -1 sc (->method) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 9945 6480 m gs 1 -1 sc (X509_STORE_CTX_get_app_data\(\)) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 10980 6705 m gs 1 -1 sc (SSL_CTX_get_cert_store\(\)) col0 sh gr /Helvetica-Narrow-iso ff 120.00 scf sf 8280 5130 m gs 1 -1 sc (modssl_get_app_data2\(\)) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 3645 1620 m gs 1 -1 sc (SSLDirConfig) col0 sh gr /Helvetica-Bold-iso ff 300.00 scf sf 10935 3645 m gs 1 -1 sc (OpenSSL) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 10935 3825 m gs 1 -1 sc ([SSL]) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 11025 5760 m gs 1 -1 sc (SSL_CIPHER) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 10980 6165 m gs 1 -1 sc (SSL_SESSION) col0 sh gr /Helvetica-Bold-iso ff 300.00 scf sf 10710 7605 m gs 1 -1 sc (OpenSSL) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 10575 7110 m gs 1 -1 sc (X509_STORE_CTX) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 6795 2430 m gs 1 -1 sc (SSLModConfig) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 8865 2430 m gs 1 -1 sc (SSLSrvConfig) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 6345 3555 m gs 1 -1 sc (ap_global_ctx) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 6345 4455 m gs 1 -1 sc (server_rec) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 6345 5355 m gs 1 -1 sc (conn_rec) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 9720 5355 m gs 1 -1 sc (SSL) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 10665 2430 m gs 1 -1 sc (SSLDirConfig) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 7290 6255 m gs 1 -1 sc (BUFF) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 11025 5355 m gs 1 -1 sc (SSL_METHOD) col0 sh gr % Polyline 15.000 slw n 750 225 m 450 225 450 8250 300 arcto 4 {pop} repeat 450 8550 12300 8550 300 arcto 4 {pop} repeat 12600 8550 12600 525 300 arcto 4 {pop} repeat 12600 225 750 225 300 arcto 4 {pop} repeat cp gs col0 s gr /Helvetica-Bold-iso ff 180.00 scf sf 11475 4455 m gs 1 -1 sc (SSL_CTX) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 8010 4950 m gs 1 -1 sc (request_rec) col0 sh gr /Times-Roman-iso ff 180.00 scf sf 10575 675 m gs 1 -1 sc (Ralf S. Engelschall) col0 sh gr /Helvetica-Bold-iso ff 300.00 scf sf 4275 675 m gs 1 -1 sc (Apache+mod_ssl+OpenSSL) col0 sh gr /Times-Roman-iso ff 150.00 scf sf 10575 855 m gs 1 -1 sc (rse@engelschall.com) col0 sh gr /Times-Roman-iso ff 150.00 scf sf 10575 1035 m gs 1 -1 sc (www.engelschall.com) col0 sh gr /Times-Roman-iso ff 180.00 scf sf 900 675 m gs 1 -1 sc (Version 1.3) col0 sh gr /Times-Roman-iso ff 180.00 scf sf 900 855 m gs 1 -1 sc (12-Apr-1999) col0 sh gr /Helvetica-Bold-iso ff 360.00 scf sf 3915 1080 m gs 1 -1 sc (Data Structure Overview) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 9720 7110 m gs 1 -1 sc (BIO) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 10710 7785 m gs 1 -1 sc ([Crypto]) col0 sh gr /Helvetica-Bold-iso ff 300.00 scf sf 8730 3465 m gs 1 -1 sc (mod_ssl) col0 sh gr /Helvetica-Bold-iso ff 300.00 scf sf 8145 6750 m gs 1 -1 sc (Apache) col0 sh gr /Helvetica-Bold-iso ff 300.00 scf sf 9000 8100 m gs 1 -1 sc (Chaining) col0 sh gr /Helvetica-Bold-iso ff 300.00 scf sf 2745 8100 m gs 1 -1 sc (Lifetime) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 810 6255 m gs 1 -1 sc (ap_global_ctx) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 990 5805 m gs 1 -1 sc (SSLModConfig) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 4050 4455 m gs 1 -1 sc (SSL_CTX) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 4455 5355 m gs 1 -1 sc (server_rec) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 3870 4905 m gs 1 -1 sc (SSLSrvConfig) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 1845 4005 m gs 1 -1 sc (BUFF) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 2070 3555 m gs 1 -1 sc (conn_rec) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 2295 3105 m gs 1 -1 sc (BIO) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 2565 2655 m gs 1 -1 sc (SSL) col0 sh gr /Helvetica-Bold-iso ff 180.00 scf sf 3915 2070 m gs 1 -1 sc (request_rec) col0 sh gr $F2psEnd rs showpage httpd-2.4.41/modules/ssl/mod_ssl.mak0000644000000000000500000003414413226637151015653 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_ssl.dsp !IF "$(CFG)" == "" CFG=mod_ssl - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_ssl - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_ssl - Win32 Release" && "$(CFG)" != "mod_ssl - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_ssl.mak" CFG="mod_ssl - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_ssl - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_ssl - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(_HAVE_OSSL110)" == "1" SSLCRP=libcrypto SSLLIB=libssl SSLINC=/I ../../srclib/openssl/include SSLBIN=../../srclib/openssl !ELSE SSLCRP=libeay32 SSLLIB=ssleay32 SSLINC=/I ../../srclib/openssl/inc32 SSLBIN=../../srclib/openssl/out32dll !ENDIF !IF "$(CFG)" == "mod_ssl - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_ssl.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_ssl.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_ssl.obj" -@erase "$(INTDIR)\mod_ssl.res" -@erase "$(INTDIR)\mod_ssl_src.idb" -@erase "$(INTDIR)\mod_ssl_src.pdb" -@erase "$(INTDIR)\ssl_engine_config.obj" -@erase "$(INTDIR)\ssl_engine_init.obj" -@erase "$(INTDIR)\ssl_engine_io.obj" -@erase "$(INTDIR)\ssl_engine_kernel.obj" -@erase "$(INTDIR)\ssl_engine_log.obj" -@erase "$(INTDIR)\ssl_engine_mutex.obj" -@erase "$(INTDIR)\ssl_engine_ocsp.obj" -@erase "$(INTDIR)\ssl_engine_pphrase.obj" -@erase "$(INTDIR)\ssl_engine_rand.obj" -@erase "$(INTDIR)\ssl_engine_vars.obj" -@erase "$(INTDIR)\ssl_scache.obj" -@erase "$(INTDIR)\ssl_util.obj" -@erase "$(INTDIR)\ssl_util_ocsp.obj" -@erase "$(INTDIR)\ssl_util_ssl.obj" -@erase "$(INTDIR)\ssl_util_stapling.obj" -@erase "$(OUTDIR)\mod_ssl.exp" -@erase "$(OUTDIR)\mod_ssl.lib" -@erase "$(OUTDIR)\mod_ssl.pdb" -@erase "$(OUTDIR)\mod_ssl.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../generators" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../md" $(SSLINC) /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /D "WIN32_LEAN_AND_MEAN" /D "NO_IDEA" /D "NO_RC5" /D "NO_MDC2" /D "OPENSSL_NO_IDEA" /D "OPENSSL_NO_RC5" /D "OPENSSL_NO_MDC2" /D "HAVE_OPENSSL" /D "HAVE_SSL_SET_STATE" /D "HAVE_OPENSSL_ENGINE_H" /D "HAVE_ENGINE_INIT" /D "HAVE_ENGINE_LOAD_BUILTIN_ENGINES" /D "SSL_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_ssl_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_ssl.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_ssl.so" /d LONG_NAME="proxy_ssl_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_ssl.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib user32.lib wsock32.lib ws2_32.lib advapi32.lib gdi32.lib $(SSLCRP).lib $(SSLLIB).lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_ssl.pdb" /debug /out:"$(OUTDIR)\mod_ssl.so" /implib:"$(OUTDIR)\mod_ssl.lib" /libpath:"$(SSLBIN)" /libpath:"../../srclib/openssl/out32" /base:@..\..\os\win32\BaseAddr.ref,mod_ssl.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_ssl.obj" \ "$(INTDIR)\ssl_engine_config.obj" \ "$(INTDIR)\ssl_engine_init.obj" \ "$(INTDIR)\ssl_engine_io.obj" \ "$(INTDIR)\ssl_engine_kernel.obj" \ "$(INTDIR)\ssl_engine_log.obj" \ "$(INTDIR)\ssl_engine_mutex.obj" \ "$(INTDIR)\ssl_engine_pphrase.obj" \ "$(INTDIR)\ssl_engine_rand.obj" \ "$(INTDIR)\ssl_engine_vars.obj" \ "$(INTDIR)\ssl_engine_ocsp.obj" \ "$(INTDIR)\ssl_util_ocsp.obj" \ "$(INTDIR)\ssl_scache.obj" \ "$(INTDIR)\ssl_util_stapling.obj" \ "$(INTDIR)\ssl_util.obj" \ "$(INTDIR)\ssl_util_ssl.obj" \ "$(INTDIR)\mod_ssl.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_ssl.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_ssl.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_ssl.so" if exist .\Release\mod_ssl.so.manifest mt.exe -manifest .\Release\mod_ssl.so.manifest -outputresource:.\Release\mod_ssl.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_ssl - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_ssl.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_ssl.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_ssl.obj" -@erase "$(INTDIR)\mod_ssl.res" -@erase "$(INTDIR)\mod_ssl_src.idb" -@erase "$(INTDIR)\mod_ssl_src.pdb" -@erase "$(INTDIR)\ssl_engine_config.obj" -@erase "$(INTDIR)\ssl_engine_init.obj" -@erase "$(INTDIR)\ssl_engine_io.obj" -@erase "$(INTDIR)\ssl_engine_kernel.obj" -@erase "$(INTDIR)\ssl_engine_log.obj" -@erase "$(INTDIR)\ssl_engine_mutex.obj" -@erase "$(INTDIR)\ssl_engine_ocsp.obj" -@erase "$(INTDIR)\ssl_engine_pphrase.obj" -@erase "$(INTDIR)\ssl_engine_rand.obj" -@erase "$(INTDIR)\ssl_engine_vars.obj" -@erase "$(INTDIR)\ssl_scache.obj" -@erase "$(INTDIR)\ssl_util.obj" -@erase "$(INTDIR)\ssl_util_ocsp.obj" -@erase "$(INTDIR)\ssl_util_ssl.obj" -@erase "$(INTDIR)\ssl_util_stapling.obj" -@erase "$(OUTDIR)\mod_ssl.exp" -@erase "$(OUTDIR)\mod_ssl.lib" -@erase "$(OUTDIR)\mod_ssl.pdb" -@erase "$(OUTDIR)\mod_ssl.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../generators" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /I "../md" $(SSLINC) /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /D "WIN32_LEAN_AND_MEAN" /D "NO_IDEA" /D "NO_RC5" /D "NO_MDC2" /D "OPENSSL_NO_IDEA" /D "OPENSSL_NO_RC5" /D "OPENSSL_NO_MDC2" /D "HAVE_OPENSSL" /D "HAVE_SSL_SET_STATE" /D "HAVE_OPENSSL_ENGINE_H" /D "HAVE_ENGINE_INIT" /D "HAVE_ENGINE_LOAD_BUILTIN_ENGINES" /D "SSL_DECLARE_EXPORT" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_ssl_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_ssl.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_ssl.so" /d LONG_NAME="proxy_ssl_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_ssl.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib user32.lib wsock32.lib ws2_32.lib advapi32.lib gdi32.lib $(SSLCRP).lib $(SSLLIB).lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_ssl.pdb" /debug /out:"$(OUTDIR)\mod_ssl.so" /implib:"$(OUTDIR)\mod_ssl.lib" /libpath:"../../srclib/openssl/out32dll.dbg" /libpath:"../../srclib/openssl/out32.dbg" /libpath:"$(SSLBIN)" /libpath:"../../srclib/openssl/out32" /base:@..\..\os\win32\BaseAddr.ref,mod_ssl.so LINK32_OBJS= \ "$(INTDIR)\mod_ssl.obj" \ "$(INTDIR)\ssl_engine_config.obj" \ "$(INTDIR)\ssl_engine_init.obj" \ "$(INTDIR)\ssl_engine_io.obj" \ "$(INTDIR)\ssl_engine_kernel.obj" \ "$(INTDIR)\ssl_engine_log.obj" \ "$(INTDIR)\ssl_engine_mutex.obj" \ "$(INTDIR)\ssl_engine_pphrase.obj" \ "$(INTDIR)\ssl_engine_rand.obj" \ "$(INTDIR)\ssl_engine_vars.obj" \ "$(INTDIR)\ssl_engine_ocsp.obj" \ "$(INTDIR)\ssl_util_ocsp.obj" \ "$(INTDIR)\ssl_scache.obj" \ "$(INTDIR)\ssl_util_stapling.obj" \ "$(INTDIR)\ssl_util.obj" \ "$(INTDIR)\ssl_util_ssl.obj" \ "$(INTDIR)\mod_ssl.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_ssl.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_ssl.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_ssl.so" if exist .\Debug\mod_ssl.so.manifest mt.exe -manifest .\Debug\mod_ssl.so.manifest -outputresource:.\Debug\mod_ssl.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_ssl.dep") !INCLUDE "mod_ssl.dep" !ELSE !MESSAGE Warning: cannot find "mod_ssl.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_ssl - Win32 Release" || "$(CFG)" == "mod_ssl - Win32 Debug" SOURCE=.\mod_ssl.c "$(INTDIR)\mod_ssl.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_engine_config.c "$(INTDIR)\ssl_engine_config.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_engine_init.c "$(INTDIR)\ssl_engine_init.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_engine_io.c "$(INTDIR)\ssl_engine_io.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_engine_kernel.c "$(INTDIR)\ssl_engine_kernel.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_engine_log.c "$(INTDIR)\ssl_engine_log.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_engine_mutex.c "$(INTDIR)\ssl_engine_mutex.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_engine_ocsp.c "$(INTDIR)\ssl_engine_ocsp.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_engine_pphrase.c "$(INTDIR)\ssl_engine_pphrase.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_engine_rand.c "$(INTDIR)\ssl_engine_rand.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_engine_vars.c "$(INTDIR)\ssl_engine_vars.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_scache.c "$(INTDIR)\ssl_scache.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_util.c "$(INTDIR)\ssl_util.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_util_ocsp.c "$(INTDIR)\ssl_util_ocsp.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_util_ssl.c "$(INTDIR)\ssl_util_ssl.obj" : $(SOURCE) "$(INTDIR)" SOURCE=.\ssl_util_stapling.c "$(INTDIR)\ssl_util_stapling.obj" : $(SOURCE) "$(INTDIR)" !IF "$(CFG)" == "mod_ssl - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\ssl" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\ssl" !ELSEIF "$(CFG)" == "mod_ssl - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\ssl" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\ssl" !ENDIF !IF "$(CFG)" == "mod_ssl - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\ssl" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\ssl" !ELSEIF "$(CFG)" == "mod_ssl - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\ssl" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\ssl" !ENDIF !IF "$(CFG)" == "mod_ssl - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\ssl" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\ssl" !ELSEIF "$(CFG)" == "mod_ssl - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\ssl" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\ssl" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_ssl - Win32 Release" "$(INTDIR)\mod_ssl.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_ssl.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_ssl.so" /d LONG_NAME="proxy_ssl_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_ssl - Win32 Debug" "$(INTDIR)\mod_ssl.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_ssl.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_ssl.so" /d LONG_NAME="proxy_ssl_module for Apache" $(SOURCE) !ENDIF !ENDIF httpd-2.4.41/modules/ssl/ssl_util_ssl.c0000644000000000000500000004071013250436757016406 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * _ __ ___ ___ __| | ___ ___| | mod_ssl * | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL * | | | | | | (_) | (_| | \__ \__ \ | * |_| |_| |_|\___/ \__,_|___|___/___/_| * |_____| * ssl_util_ssl.c * Additional Utility Functions for OpenSSL */ #include "ssl_private.h" /* _________________________________________________________________ ** ** Additional High-Level Functions for OpenSSL ** _________________________________________________________________ */ /* we initialize this index at startup time * and never write to it at request time, * so this static is thread safe. * also note that OpenSSL increments at static variable when * SSL_get_ex_new_index() is called, so we _must_ do this at startup. */ static int app_data2_idx = -1; void modssl_init_app_data2_idx(void) { int i; if (app_data2_idx > -1) { return; } /* we _do_ need to call this twice */ for (i = 0; i <= 1; i++) { app_data2_idx = SSL_get_ex_new_index(0, "Second Application Data for SSL", NULL, NULL, NULL); } } void *modssl_get_app_data2(SSL *ssl) { return (void *)SSL_get_ex_data(ssl, app_data2_idx); } void modssl_set_app_data2(SSL *ssl, void *arg) { SSL_set_ex_data(ssl, app_data2_idx, (char *)arg); return; } /* _________________________________________________________________ ** ** High-Level Private Key Loading ** _________________________________________________________________ */ EVP_PKEY *modssl_read_privatekey(const char* filename, EVP_PKEY **key, pem_password_cb *cb, void *s) { EVP_PKEY *rc; BIO *bioS; BIO *bioF; /* 1. try PEM (= DER+Base64+headers) */ if ((bioS=BIO_new_file(filename, "r")) == NULL) return NULL; rc = PEM_read_bio_PrivateKey(bioS, key, cb, s); BIO_free(bioS); if (rc == NULL) { /* 2. try DER+Base64 */ if ((bioS = BIO_new_file(filename, "r")) == NULL) return NULL; if ((bioF = BIO_new(BIO_f_base64())) == NULL) { BIO_free(bioS); return NULL; } bioS = BIO_push(bioF, bioS); rc = d2i_PrivateKey_bio(bioS, NULL); BIO_free_all(bioS); if (rc == NULL) { /* 3. try plain DER */ if ((bioS = BIO_new_file(filename, "r")) == NULL) return NULL; rc = d2i_PrivateKey_bio(bioS, NULL); BIO_free(bioS); } } if (rc != NULL && key != NULL) { if (*key != NULL) EVP_PKEY_free(*key); *key = rc; } return rc; } typedef struct { const char *pass; int pass_len; } pass_ctx; static int provide_pass(char *buf, int size, int rwflag, void *baton) { pass_ctx *ctx = baton; if (ctx->pass_len > 0) { if (ctx->pass_len < size) { size = (int)ctx->pass_len; } memcpy(buf, ctx->pass, size); } return ctx->pass_len; } EVP_PKEY *modssl_read_encrypted_pkey(const char *filename, EVP_PKEY **key, const char *pass, apr_size_t pass_len) { pass_ctx ctx; ctx.pass = pass; ctx.pass_len = pass_len; return modssl_read_privatekey(filename, key, provide_pass, &ctx); } /* _________________________________________________________________ ** ** Smart shutdown ** _________________________________________________________________ */ int modssl_smart_shutdown(SSL *ssl) { int i; int rc; int flush; /* * Repeat the calls, because SSL_shutdown internally dispatches through a * little state machine. Usually only one or two interation should be * needed, so we restrict the total number of restrictions in order to * avoid process hangs in case the client played bad with the socket * connection and OpenSSL cannot recognize it. */ rc = 0; flush = !(SSL_get_shutdown(ssl) & SSL_SENT_SHUTDOWN); for (i = 0; i < 4 /* max 2x pending + 2x data = 4 */; i++) { rc = SSL_shutdown(ssl); if (rc >= 0 && flush && (SSL_get_shutdown(ssl) & SSL_SENT_SHUTDOWN)) { /* Once the close notity is sent through the output filters, * ensure it is flushed through the socket. */ if (BIO_flush(SSL_get_wbio(ssl)) <= 0) { rc = -1; break; } flush = 0; } if (rc != 0) break; } return rc; } /* _________________________________________________________________ ** ** Certificate Checks ** _________________________________________________________________ */ /* retrieve basic constraints ingredients */ BOOL modssl_X509_getBC(X509 *cert, int *ca, int *pathlen) { BASIC_CONSTRAINTS *bc; BIGNUM *bn = NULL; char *cp; bc = X509_get_ext_d2i(cert, NID_basic_constraints, NULL, NULL); if (bc == NULL) return FALSE; *ca = bc->ca; *pathlen = -1 /* unlimited */; if (bc->pathlen != NULL) { if ((bn = ASN1_INTEGER_to_BN(bc->pathlen, NULL)) == NULL) { BASIC_CONSTRAINTS_free(bc); return FALSE; } if ((cp = BN_bn2dec(bn)) == NULL) { BN_free(bn); BASIC_CONSTRAINTS_free(bc); return FALSE; } *pathlen = atoi(cp); OPENSSL_free(cp); BN_free(bn); } BASIC_CONSTRAINTS_free(bc); return TRUE; } /* Convert ASN.1 string to a pool-allocated char * string, escaping * control characters. If raw is zero, convert to UTF-8, otherwise * unchanged from the character set. */ static char *asn1_string_convert(apr_pool_t *p, ASN1_STRING *asn1str, int raw) { char *result = NULL; BIO *bio; int len, flags = ASN1_STRFLGS_ESC_CTRL; if ((bio = BIO_new(BIO_s_mem())) == NULL) return NULL; if (!raw) flags |= ASN1_STRFLGS_UTF8_CONVERT; ASN1_STRING_print_ex(bio, asn1str, flags); len = BIO_pending(bio); if (len > 0) { result = apr_palloc(p, len+1); len = BIO_read(bio, result, len); result[len] = NUL; } BIO_free(bio); return result; } #define asn1_string_to_utf8(p, a) asn1_string_convert(p, a, 0) /* convert a NAME_ENTRY to UTF8 string */ char *modssl_X509_NAME_ENTRY_to_string(apr_pool_t *p, X509_NAME_ENTRY *xsne, int raw) { char *result = asn1_string_convert(p, X509_NAME_ENTRY_get_data(xsne), raw); ap_xlate_proto_from_ascii(result, len); return result; } /* * convert an X509_NAME to an RFC 2253 formatted string, optionally truncated * to maxlen characters (specify a maxlen of 0 for no length limit) */ char *modssl_X509_NAME_to_string(apr_pool_t *p, X509_NAME *dn, int maxlen) { char *result = NULL; BIO *bio; int len; if ((bio = BIO_new(BIO_s_mem())) == NULL) return NULL; X509_NAME_print_ex(bio, dn, 0, XN_FLAG_RFC2253); len = BIO_pending(bio); if (len > 0) { result = apr_palloc(p, (maxlen > 0) ? maxlen+1 : len+1); if (maxlen > 0 && maxlen < len) { len = BIO_read(bio, result, maxlen); if (maxlen > 2) { /* insert trailing ellipsis if there's enough space */ apr_snprintf(result + maxlen - 3, 4, "..."); } } else { len = BIO_read(bio, result, len); } result[len] = NUL; } BIO_free(bio); return result; } static void parse_otherName_value(apr_pool_t *p, ASN1_TYPE *value, const char *onf, apr_array_header_t **entries) { const char *str; int nid = onf ? OBJ_txt2nid(onf) : NID_undef; if (!value || (nid == NID_undef) || !*entries) return; /* * Currently supported otherName forms (values for "onf"): * "msUPN" (1.3.6.1.4.1.311.20.2.3): Microsoft User Principal Name * "id-on-dnsSRV" (1.3.6.1.5.5.7.8.7): SRVName, as specified in RFC 4985 */ if ((nid == NID_ms_upn) && (value->type == V_ASN1_UTF8STRING) && (str = asn1_string_to_utf8(p, value->value.utf8string))) { APR_ARRAY_PUSH(*entries, const char *) = str; } else if (strEQ(onf, "id-on-dnsSRV") && (value->type == V_ASN1_IA5STRING) && (str = asn1_string_to_utf8(p, value->value.ia5string))) { APR_ARRAY_PUSH(*entries, const char *) = str; } } /* * Return an array of subjectAltName entries of type "type". If idx is -1, * return all entries of the given type, otherwise return an array consisting * of the n-th occurrence of that type only. Currently supported types: * GEN_EMAIL (rfc822Name) * GEN_DNS (dNSName) * GEN_OTHERNAME (requires the otherName form ["onf"] argument to be supplied, * see parse_otherName_value for the currently supported forms) */ BOOL modssl_X509_getSAN(apr_pool_t *p, X509 *x509, int type, const char *onf, int idx, apr_array_header_t **entries) { STACK_OF(GENERAL_NAME) *names; int nid = onf ? OBJ_txt2nid(onf) : NID_undef; if (!x509 || (type < GEN_OTHERNAME) || ((type == GEN_OTHERNAME) && (nid == NID_undef)) || (type > GEN_RID) || (idx < -1) || !(*entries = apr_array_make(p, 0, sizeof(char *)))) { *entries = NULL; return FALSE; } if ((names = X509_get_ext_d2i(x509, NID_subject_alt_name, NULL, NULL))) { int i, n = 0; GENERAL_NAME *name; const char *utf8str; for (i = 0; i < sk_GENERAL_NAME_num(names); i++) { name = sk_GENERAL_NAME_value(names, i); if (name->type != type) continue; switch (type) { case GEN_EMAIL: case GEN_DNS: if (((idx == -1) || (n == idx)) && (utf8str = asn1_string_to_utf8(p, name->d.ia5))) { APR_ARRAY_PUSH(*entries, const char *) = utf8str; } n++; break; case GEN_OTHERNAME: if (OBJ_obj2nid(name->d.otherName->type_id) == nid) { if (((idx == -1) || (n == idx))) { parse_otherName_value(p, name->d.otherName->value, onf, entries); } n++; } break; default: /* * Not implemented right now: * GEN_X400 (x400Address) * GEN_DIRNAME (directoryName) * GEN_EDIPARTY (ediPartyName) * GEN_URI (uniformResourceIdentifier) * GEN_IPADD (iPAddress) * GEN_RID (registeredID) */ break; } if ((idx != -1) && (n > idx)) break; } sk_GENERAL_NAME_pop_free(names, GENERAL_NAME_free); } return apr_is_empty_array(*entries) ? FALSE : TRUE; } /* return an array of (RFC 6125 coined) DNS-IDs and CN-IDs in a certificate */ static BOOL getIDs(apr_pool_t *p, X509 *x509, apr_array_header_t **ids) { X509_NAME *subj; int i = -1; /* First, the DNS-IDs (dNSName entries in the subjectAltName extension) */ if (!x509 || (modssl_X509_getSAN(p, x509, GEN_DNS, NULL, -1, ids) == FALSE && !*ids)) { *ids = NULL; return FALSE; } /* Second, the CN-IDs (commonName attributes in the subject DN) */ subj = X509_get_subject_name(x509); while ((i = X509_NAME_get_index_by_NID(subj, NID_commonName, i)) != -1) { APR_ARRAY_PUSH(*ids, const char *) = modssl_X509_NAME_ENTRY_to_string(p, X509_NAME_get_entry(subj, i), 0); } return apr_is_empty_array(*ids) ? FALSE : TRUE; } /* * Check if a certificate matches for a particular name, by iterating over its * DNS-IDs and CN-IDs (RFC 6125), optionally with basic wildcard matching. * If server_rec is non-NULL, some (debug/trace) logging is enabled. */ BOOL modssl_X509_match_name(apr_pool_t *p, X509 *x509, const char *name, BOOL allow_wildcard, server_rec *s) { BOOL matched = FALSE; apr_array_header_t *ids; /* * At some day in the future, this might be replaced with X509_check_host() * (available in OpenSSL 1.0.2 and later), but two points should be noted: * 1) wildcard matching in X509_check_host() might yield different * results (by default, it supports a broader set of patterns, e.g. * wildcards in non-initial positions); * 2) we lose the option of logging each DNS- and CN-ID (until a match * is found). */ if (getIDs(p, x509, &ids)) { const char *cp; int i; char **id = (char **)ids->elts; BOOL is_wildcard; for (i = 0; i < ids->nelts; i++) { if (!id[i]) continue; /* * Determine if it is a wildcard ID - we're restrictive * in the sense that we require the wildcard character to be * THE left-most label (i.e., the ID must start with "*.") */ is_wildcard = (*id[i] == '*' && *(id[i]+1) == '.') ? TRUE : FALSE; /* * If the ID includes a wildcard character (and the caller is * allowing wildcards), check if it matches for the left-most * DNS label - i.e., the wildcard character is not allowed * to match a dot. Otherwise, try a simple string compare. */ if ((allow_wildcard == TRUE && is_wildcard == TRUE && (cp = ap_strchr_c(name, '.')) && !strcasecmp(id[i]+1, cp)) || !strcasecmp(id[i], name)) { matched = TRUE; } if (s) { ap_log_error(APLOG_MARK, APLOG_TRACE3, 0, s, "[%s] modssl_X509_match_name: expecting name '%s', " "%smatched by ID '%s'", (mySrvConfig(s))->vhost_id, name, matched == TRUE ? "" : "NOT ", id[i]); } if (matched == TRUE) { break; } } } if (s) { ssl_log_xerror(SSLLOG_MARK, APLOG_DEBUG, 0, p, s, x509, APLOGNO(02412) "[%s] Cert %s for name '%s'", (mySrvConfig(s))->vhost_id, matched == TRUE ? "matches" : "does not match", name); } return matched; } /* _________________________________________________________________ ** ** Custom (EC)DH parameter support ** _________________________________________________________________ */ DH *ssl_dh_GetParamFromFile(const char *file) { DH *dh = NULL; BIO *bio; if ((bio = BIO_new_file(file, "r")) == NULL) return NULL; dh = PEM_read_bio_DHparams(bio, NULL, NULL, NULL); BIO_free(bio); return (dh); } #ifdef HAVE_ECC EC_GROUP *ssl_ec_GetParamFromFile(const char *file) { EC_GROUP *group = NULL; BIO *bio; if ((bio = BIO_new_file(file, "r")) == NULL) return NULL; group = PEM_read_bio_ECPKParameters(bio, NULL, NULL, NULL); BIO_free(bio); return (group); } #endif /* _________________________________________________________________ ** ** Session Stuff ** _________________________________________________________________ */ char *modssl_SSL_SESSION_id2sz(IDCONST unsigned char *id, int idlen, char *str, int strsize) { if (idlen > SSL_MAX_SSL_SESSION_ID_LENGTH) idlen = SSL_MAX_SSL_SESSION_ID_LENGTH; /* We must ensure not to process more than what would fit in the * destination buffer, including terminating NULL */ if (idlen > (strsize-1) / 2) idlen = (strsize-1) / 2; ap_bin2hex(id, idlen, str); return str; } httpd-2.4.41/modules/ssl/ssl_util_ocsp.c0000644000000000000500000003241313376012522016537 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* This file implements an OCSP client including a toy HTTP/1.0 * client. Once httpd depends on a real HTTP client library, most of * this can be thrown away. */ #include "ssl_private.h" #ifndef OPENSSL_NO_OCSP #include "apr_buckets.h" #include "apr_uri.h" /* Serialize an OCSP request which will be sent to the responder at * given URI to a memory BIO object, which is returned. */ static BIO *serialize_request(OCSP_REQUEST *req, const apr_uri_t *uri, const apr_uri_t *proxy_uri) { BIO *bio; int len; len = i2d_OCSP_REQUEST(req, NULL); bio = BIO_new(BIO_s_mem()); BIO_printf(bio, "POST "); /* Use full URL instead of URI in case of a request through a proxy */ if (proxy_uri) { BIO_printf(bio, "http://%s:%d", uri->hostname, uri->port); } BIO_printf(bio, "%s%s%s HTTP/1.0\r\n" "Host: %s:%d\r\n" "Content-Type: application/ocsp-request\r\n" "Content-Length: %d\r\n" "\r\n", uri->path ? uri->path : "/", uri->query ? "?" : "", uri->query ? uri->query : "", uri->hostname, uri->port, len); if (i2d_OCSP_REQUEST_bio(bio, req) != 1) { BIO_free(bio); return NULL; } return bio; } /* Send the OCSP request serialized into BIO 'request' to the * responder at given server given by URI. Returns socket object or * NULL on error. */ static apr_socket_t *send_request(BIO *request, const apr_uri_t *uri, apr_interval_time_t timeout, conn_rec *c, apr_pool_t *p, const apr_uri_t *proxy_uri) { apr_status_t rv; apr_sockaddr_t *sa; apr_socket_t *sd; char buf[HUGE_STRING_LEN]; int len; const apr_uri_t *next_hop_uri; if (proxy_uri) { next_hop_uri = proxy_uri; } else { next_hop_uri = uri; } rv = apr_sockaddr_info_get(&sa, next_hop_uri->hostname, APR_UNSPEC, next_hop_uri->port, 0, p); if (rv) { ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, c, APLOGNO(01972) "could not resolve address of %s %s", proxy_uri ? "proxy" : "OCSP responder", next_hop_uri->hostinfo); return NULL; } /* establish a connection to the OCSP responder */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(01973) "connecting to %s '%s'", proxy_uri ? "proxy" : "OCSP responder", uri->hostinfo); /* Cycle through address until a connect() succeeds. */ for (; sa; sa = sa->next) { rv = apr_socket_create(&sd, sa->family, SOCK_STREAM, APR_PROTO_TCP, p); if (rv == APR_SUCCESS) { apr_socket_timeout_set(sd, timeout); rv = apr_socket_connect(sd, sa); if (rv == APR_SUCCESS) { break; } apr_socket_close(sd); } } if (sa == NULL) { ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, c, APLOGNO(01974) "could not connect to %s '%s'", proxy_uri ? "proxy" : "OCSP responder", next_hop_uri->hostinfo); return NULL; } /* send the request and get a response */ ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(01975) "sending request to OCSP responder"); while ((len = BIO_read(request, buf, sizeof buf)) > 0) { char *wbuf = buf; apr_size_t remain = len; do { apr_size_t wlen = remain; rv = apr_socket_send(sd, wbuf, &wlen); wbuf += remain; remain -= wlen; } while (rv == APR_SUCCESS && remain > 0); if (rv) { apr_socket_close(sd); ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, c, APLOGNO(01976) "failed to send request to OCSP responder '%s'", uri->hostinfo); return NULL; } } return sd; } /* Return a pool-allocated NUL-terminated line, with CRLF stripped, * read from brigade 'bbin' using 'bbout' as temporary storage. */ static char *get_line(apr_bucket_brigade *bbout, apr_bucket_brigade *bbin, conn_rec *c, apr_pool_t *p) { apr_status_t rv; apr_size_t len; char *line; apr_brigade_cleanup(bbout); rv = apr_brigade_split_line(bbout, bbin, APR_BLOCK_READ, 8192); if (rv) { ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, c, APLOGNO(01977) "failed reading line from OCSP server"); return NULL; } rv = apr_brigade_pflatten(bbout, &line, &len, p); if (rv) { ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, c, APLOGNO(01978) "failed reading line from OCSP server"); return NULL; } if (len == 0) { ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, c, APLOGNO(02321) "empty response from OCSP server"); return NULL; } if (line[len-1] != APR_ASCII_LF) { ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, c, APLOGNO(01979) "response header line too long from OCSP server"); return NULL; } line[len-1] = '\0'; if (len > 1 && line[len-2] == APR_ASCII_CR) { line[len-2] = '\0'; } return line; } /* Maximum values to prevent eating RAM forever. */ #define MAX_HEADERS (256) #define MAX_CONTENT (2048 * 1024) /* Read the OCSP response from the socket 'sd', using temporary memory * BIO 'bio', and return the decoded OCSP response object, or NULL on * error. */ static OCSP_RESPONSE *read_response(apr_socket_t *sd, BIO *bio, conn_rec *c, apr_pool_t *p) { apr_bucket_brigade *bb, *tmpbb; OCSP_RESPONSE *response; char *line; apr_size_t count; apr_int64_t code; /* Using brigades for response parsing is much simpler than using * apr_socket_* directly. */ bb = apr_brigade_create(p, c->bucket_alloc); tmpbb = apr_brigade_create(p, c->bucket_alloc); APR_BRIGADE_INSERT_TAIL(bb, apr_bucket_socket_create(sd, c->bucket_alloc)); line = get_line(tmpbb, bb, c, p); if (!line || strncmp(line, "HTTP/", 5) || (line = ap_strchr(line, ' ')) == NULL || (code = apr_atoi64(++line)) < 200 || code > 299) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(01980) "bad response from OCSP server: %s", line ? line : "(none)"); return NULL; } /* Read till end of headers; don't have to even bother parsing the * Content-Length since the server is obliged to close the * connection after the response anyway for HTTP/1.0. */ count = 0; while ((line = get_line(tmpbb, bb, c, p)) != NULL && line[0] && ++count < MAX_HEADERS) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(01981) "OCSP response header: %s", line); } if (count == MAX_HEADERS) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(01982) "could not read response headers from OCSP server, " "exceeded maximum count (%u)", MAX_HEADERS); return NULL; } else if (!line) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(01983) "could not read response header from OCSP server"); return NULL; } /* Read the response body into the memory BIO. */ count = 0; while (!APR_BRIGADE_EMPTY(bb)) { const char *data; apr_size_t len; apr_status_t rv; apr_bucket *e = APR_BRIGADE_FIRST(bb); rv = apr_bucket_read(e, &data, &len, APR_BLOCK_READ); if (rv == APR_EOF) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(01984) "OCSP response: got EOF"); break; } if (rv != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, c, APLOGNO(01985) "error reading response from OCSP server"); return NULL; } if (len == 0) { /* Ignore zero-length buckets (possible side-effect of * line splitting). */ apr_bucket_delete(e); continue; } count += len; if (count > MAX_CONTENT) { ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, c, APLOGNO(01986) "OCSP response size exceeds %u byte limit", MAX_CONTENT); return NULL; } ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(01987) "OCSP response: got %" APR_SIZE_T_FMT " bytes, %" APR_SIZE_T_FMT " total", len, count); BIO_write(bio, data, (int)len); apr_bucket_delete(e); } apr_brigade_destroy(bb); apr_brigade_destroy(tmpbb); /* Finally decode the OCSP response from what's stored in the * bio. */ response = d2i_OCSP_RESPONSE_bio(bio, NULL); if (response == NULL) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(01988) "failed to decode OCSP response data"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, mySrvFromConn(c)); } return response; } OCSP_RESPONSE *modssl_dispatch_ocsp_request(const apr_uri_t *uri, apr_interval_time_t timeout, OCSP_REQUEST *request, conn_rec *c, apr_pool_t *p) { OCSP_RESPONSE *response = NULL; apr_socket_t *sd; BIO *bio; const apr_uri_t *proxy_uri; proxy_uri = (mySrvConfigFromConn(c))->server->proxy_uri; bio = serialize_request(request, uri, proxy_uri); if (bio == NULL) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(01989) "could not serialize OCSP request"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, mySrvFromConn(c)); return NULL; } sd = send_request(bio, uri, timeout, c, p, proxy_uri); if (sd == NULL) { /* Errors already logged. */ BIO_free(bio); return NULL; } /* Clear the BIO contents, ready for the response. */ (void)BIO_reset(bio); response = read_response(sd, bio, c, p); apr_socket_close(sd); BIO_free(bio); return response; } /* _________________________________________________________________ ** ** OCSP other certificate support ** _________________________________________________________________ */ /* * Read a file that contains certificates in PEM format and * return as a STACK. */ static STACK_OF(X509) *modssl_read_ocsp_certificates(const char *file) { BIO *bio; X509 *x509; unsigned long err; STACK_OF(X509) *other_certs = NULL; if ((bio = BIO_new(BIO_s_file())) == NULL) return NULL; if (BIO_read_filename(bio, file) <= 0) { BIO_free(bio); return NULL; } /* create new extra chain by loading the certs */ ERR_clear_error(); while ((x509 = PEM_read_bio_X509(bio, NULL, NULL, NULL)) != NULL) { if (!other_certs) { other_certs = sk_X509_new_null(); if (!other_certs) return NULL; } if (!sk_X509_push(other_certs, x509)) { X509_free(x509); sk_X509_pop_free(other_certs, X509_free); BIO_free(bio); return NULL; } } /* Make sure that only the error is just an EOF */ if ((err = ERR_peek_error()) > 0) { if (!( ERR_GET_LIB(err) == ERR_LIB_PEM && ERR_GET_REASON(err) == PEM_R_NO_START_LINE)) { BIO_free(bio); sk_X509_pop_free(other_certs, X509_free); return NULL; } while (ERR_get_error() > 0) ; } BIO_free(bio); return other_certs; } void ssl_init_ocsp_certificates(server_rec *s, modssl_ctx_t *mctx) { /* * Configure Trusted OCSP certificates. */ if (!mctx->ocsp_certs_file) { return; } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, "Configuring Trusted OCSP certificates"); mctx->ocsp_certs = modssl_read_ocsp_certificates(mctx->ocsp_certs_file); if (!mctx->ocsp_certs) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, "Unable to configure OCSP Trusted Certificates"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, s); ssl_die(s); } mctx->ocsp_verify_flags |= OCSP_TRUSTOTHER; } #endif /* HAVE_OCSP */ httpd-2.4.41/modules/ssl/ssl_engine_config.c0000644000000000000500000017365013362055455017350 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * _ __ ___ ___ __| | ___ ___| | mod_ssl * | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL * | | | | | | (_) | (_| | \__ \__ \ | * |_| |_| |_|\___/ \__,_|___|___/___/_| * |_____| * ssl_engine_config.c * Apache Configuration Directives */ /* ``Damned if you do, damned if you don't.'' -- Unknown */ #include "ssl_private.h" #include "util_mutex.h" #include "ap_provider.h" /* _________________________________________________________________ ** ** Support for Global Configuration ** _________________________________________________________________ */ #define SSL_MOD_CONFIG_KEY "ssl_module" SSLModConfigRec *ssl_config_global_create(server_rec *s) { apr_pool_t *pool = s->process->pool; SSLModConfigRec *mc; void *vmc; apr_pool_userdata_get(&vmc, SSL_MOD_CONFIG_KEY, pool); if (vmc) { return vmc; /* reused for lifetime of the server */ } /* * allocate an own subpool which survives server restarts */ mc = (SSLModConfigRec *)apr_palloc(pool, sizeof(*mc)); mc->pPool = pool; mc->bFixed = FALSE; /* * initialize per-module configuration */ mc->sesscache_mode = SSL_SESS_CACHE_OFF; mc->sesscache = NULL; mc->pMutex = NULL; mc->aRandSeed = apr_array_make(pool, 4, sizeof(ssl_randseed_t)); mc->tVHostKeys = apr_hash_make(pool); mc->tPrivateKey = apr_hash_make(pool); #if defined(HAVE_OPENSSL_ENGINE_H) && defined(HAVE_ENGINE_INIT) mc->szCryptoDevice = NULL; #endif #ifdef HAVE_OCSP_STAPLING mc->stapling_cache = NULL; mc->stapling_cache_mutex = NULL; mc->stapling_refresh_mutex = NULL; #endif apr_pool_userdata_set(mc, SSL_MOD_CONFIG_KEY, apr_pool_cleanup_null, pool); return mc; } void ssl_config_global_fix(SSLModConfigRec *mc) { mc->bFixed = TRUE; } BOOL ssl_config_global_isfixed(SSLModConfigRec *mc) { return mc->bFixed; } /* _________________________________________________________________ ** ** Configuration handling ** _________________________________________________________________ */ #ifdef HAVE_SSL_CONF_CMD static apr_status_t modssl_ctx_config_cleanup(void *ctx) { SSL_CONF_CTX_free(ctx); return APR_SUCCESS; } #endif static void modssl_ctx_init(modssl_ctx_t *mctx, apr_pool_t *p) { mctx->sc = NULL; /* set during module init */ mctx->ssl_ctx = NULL; /* set during module init */ mctx->pks = NULL; mctx->pkp = NULL; #ifdef HAVE_TLS_SESSION_TICKETS mctx->ticket_key = NULL; #endif mctx->protocol = SSL_PROTOCOL_DEFAULT; mctx->protocol_set = 0; mctx->pphrase_dialog_type = SSL_PPTYPE_UNSET; mctx->pphrase_dialog_path = NULL; mctx->cert_chain = NULL; mctx->crl_path = NULL; mctx->crl_file = NULL; mctx->crl_check_mask = UNSET; mctx->auth.ca_cert_path = NULL; mctx->auth.ca_cert_file = NULL; mctx->auth.cipher_suite = NULL; mctx->auth.verify_depth = UNSET; mctx->auth.verify_mode = SSL_CVERIFY_UNSET; mctx->auth.tls13_ciphers = NULL; mctx->ocsp_mask = UNSET; mctx->ocsp_force_default = UNSET; mctx->ocsp_responder = NULL; mctx->ocsp_resptime_skew = UNSET; mctx->ocsp_resp_maxage = UNSET; mctx->ocsp_responder_timeout = UNSET; mctx->ocsp_use_request_nonce = UNSET; mctx->proxy_uri = NULL; /* Set OCSP Responder Certificate Verification variable */ mctx->ocsp_noverify = UNSET; /* Set OCSP Responder File variables */ mctx->ocsp_verify_flags = 0; mctx->ocsp_certs_file = NULL; mctx->ocsp_certs = NULL; #ifdef HAVE_OCSP_STAPLING mctx->stapling_enabled = UNSET; mctx->stapling_resptime_skew = UNSET; mctx->stapling_resp_maxage = UNSET; mctx->stapling_cache_timeout = UNSET; mctx->stapling_return_errors = UNSET; mctx->stapling_fake_trylater = UNSET; mctx->stapling_errcache_timeout = UNSET; mctx->stapling_responder_timeout = UNSET; mctx->stapling_force_url = NULL; #endif #ifdef HAVE_SRP mctx->srp_vfile = NULL; mctx->srp_unknown_user_seed = NULL; mctx->srp_vbase = NULL; #endif #ifdef HAVE_SSL_CONF_CMD mctx->ssl_ctx_config = SSL_CONF_CTX_new(); apr_pool_cleanup_register(p, mctx->ssl_ctx_config, modssl_ctx_config_cleanup, apr_pool_cleanup_null); SSL_CONF_CTX_set_flags(mctx->ssl_ctx_config, SSL_CONF_FLAG_FILE); SSL_CONF_CTX_set_flags(mctx->ssl_ctx_config, SSL_CONF_FLAG_SERVER); SSL_CONF_CTX_set_flags(mctx->ssl_ctx_config, SSL_CONF_FLAG_CERTIFICATE); mctx->ssl_ctx_param = apr_array_make(p, 5, sizeof(ssl_ctx_param_t)); #endif mctx->ssl_check_peer_cn = UNSET; mctx->ssl_check_peer_name = UNSET; mctx->ssl_check_peer_expire = UNSET; } static void modssl_ctx_init_server(SSLSrvConfigRec *sc, apr_pool_t *p) { modssl_ctx_t *mctx; mctx = sc->server = apr_palloc(p, sizeof(*sc->server)); modssl_ctx_init(mctx, p); mctx->pks = apr_pcalloc(p, sizeof(*mctx->pks)); mctx->pks->cert_files = apr_array_make(p, 3, sizeof(char *)); mctx->pks->key_files = apr_array_make(p, 3, sizeof(char *)); #ifdef HAVE_TLS_SESSION_TICKETS mctx->ticket_key = apr_pcalloc(p, sizeof(*mctx->ticket_key)); #endif } static SSLSrvConfigRec *ssl_config_server_new(apr_pool_t *p) { SSLSrvConfigRec *sc = apr_palloc(p, sizeof(*sc)); sc->mc = NULL; sc->enabled = SSL_ENABLED_UNSET; sc->vhost_id = NULL; /* set during module init */ sc->vhost_id_len = 0; /* set during module init */ sc->session_cache_timeout = UNSET; sc->cipher_server_pref = UNSET; sc->insecure_reneg = UNSET; #ifdef HAVE_TLSEXT sc->strict_sni_vhost_check = SSL_ENABLED_UNSET; #endif #ifdef HAVE_FIPS sc->fips = UNSET; #endif #ifndef OPENSSL_NO_COMP sc->compression = UNSET; #endif sc->session_tickets = UNSET; modssl_ctx_init_server(sc, p); return sc; } /* * Create per-server SSL configuration */ void *ssl_config_server_create(apr_pool_t *p, server_rec *s) { SSLSrvConfigRec *sc = ssl_config_server_new(p); sc->mc = ssl_config_global_create(s); return sc; } #define cfgMerge(el,unset) mrg->el = (add->el == (unset)) ? base->el : add->el #define cfgMergeArray(el) mrg->el = apr_array_append(p, base->el, add->el) #define cfgMergeString(el) cfgMerge(el, NULL) #define cfgMergeBool(el) cfgMerge(el, UNSET) #define cfgMergeInt(el) cfgMerge(el, UNSET) /* * Merge per-server SSL configurations */ static void modssl_ctx_cfg_merge(apr_pool_t *p, modssl_ctx_t *base, modssl_ctx_t *add, modssl_ctx_t *mrg) { if (add->protocol_set) { mrg->protocol = add->protocol; } else { mrg->protocol = base->protocol; } cfgMerge(pphrase_dialog_type, SSL_PPTYPE_UNSET); cfgMergeString(pphrase_dialog_path); cfgMergeString(cert_chain); cfgMerge(crl_path, NULL); cfgMerge(crl_file, NULL); cfgMergeInt(crl_check_mask); cfgMergeString(auth.ca_cert_path); cfgMergeString(auth.ca_cert_file); cfgMergeString(auth.cipher_suite); cfgMergeInt(auth.verify_depth); cfgMerge(auth.verify_mode, SSL_CVERIFY_UNSET); cfgMergeString(auth.tls13_ciphers); cfgMergeInt(ocsp_mask); cfgMergeBool(ocsp_force_default); cfgMerge(ocsp_responder, NULL); cfgMergeInt(ocsp_resptime_skew); cfgMergeInt(ocsp_resp_maxage); cfgMergeInt(ocsp_responder_timeout); cfgMergeBool(ocsp_use_request_nonce); cfgMerge(proxy_uri, NULL); /* Set OCSP Responder Certificate Verification directive */ cfgMergeBool(ocsp_noverify); /* Set OCSP Responder File directive for importing */ cfgMerge(ocsp_certs_file, NULL); #ifdef HAVE_OCSP_STAPLING cfgMergeBool(stapling_enabled); cfgMergeInt(stapling_resptime_skew); cfgMergeInt(stapling_resp_maxage); cfgMergeInt(stapling_cache_timeout); cfgMergeBool(stapling_return_errors); cfgMergeBool(stapling_fake_trylater); cfgMergeInt(stapling_errcache_timeout); cfgMergeInt(stapling_responder_timeout); cfgMerge(stapling_force_url, NULL); #endif #ifdef HAVE_SRP cfgMergeString(srp_vfile); cfgMergeString(srp_unknown_user_seed); #endif #ifdef HAVE_SSL_CONF_CMD cfgMergeArray(ssl_ctx_param); #endif cfgMergeBool(ssl_check_peer_cn); cfgMergeBool(ssl_check_peer_name); cfgMergeBool(ssl_check_peer_expire); } static void modssl_ctx_cfg_merge_certkeys_array(apr_pool_t *p, apr_array_header_t *base, apr_array_header_t *add, apr_array_header_t *mrg) { int i; /* * pick up to CERTKEYS_IDX_MAX+1 entries from "add" (in which case they * they "knock out" their corresponding entries in "base", emulating * the behavior with cfgMergeString in releases up to 2.4.7) */ for (i = 0; i < add->nelts && i <= CERTKEYS_IDX_MAX; i++) { APR_ARRAY_PUSH(mrg, const char *) = APR_ARRAY_IDX(add, i, const char *); } /* add remaining ones from "base" */ while (i < base->nelts) { APR_ARRAY_PUSH(mrg, const char *) = APR_ARRAY_IDX(base, i, const char *); i++; } /* and finally, append the rest of "add" (if there are any) */ for (i = CERTKEYS_IDX_MAX+1; i < add->nelts; i++) { APR_ARRAY_PUSH(mrg, const char *) = APR_ARRAY_IDX(add, i, const char *); } } static void modssl_ctx_cfg_merge_server(apr_pool_t *p, modssl_ctx_t *base, modssl_ctx_t *add, modssl_ctx_t *mrg) { modssl_ctx_cfg_merge(p, base, add, mrg); /* * For better backwards compatibility with releases up to 2.4.7, * merging global and vhost-level SSLCertificateFile and * SSLCertificateKeyFile directives needs special treatment. * See also PR 56306 and 56353. */ modssl_ctx_cfg_merge_certkeys_array(p, base->pks->cert_files, add->pks->cert_files, mrg->pks->cert_files); modssl_ctx_cfg_merge_certkeys_array(p, base->pks->key_files, add->pks->key_files, mrg->pks->key_files); cfgMergeString(pks->ca_name_path); cfgMergeString(pks->ca_name_file); #ifdef HAVE_TLS_SESSION_TICKETS cfgMergeString(ticket_key->file_path); #endif } void *ssl_config_server_merge(apr_pool_t *p, void *basev, void *addv) { SSLSrvConfigRec *base = (SSLSrvConfigRec *)basev; SSLSrvConfigRec *add = (SSLSrvConfigRec *)addv; SSLSrvConfigRec *mrg = ssl_config_server_new(p); cfgMerge(mc, NULL); cfgMerge(enabled, SSL_ENABLED_UNSET); cfgMergeInt(session_cache_timeout); cfgMergeBool(cipher_server_pref); cfgMergeBool(insecure_reneg); #ifdef HAVE_TLSEXT cfgMerge(strict_sni_vhost_check, SSL_ENABLED_UNSET); #endif #ifdef HAVE_FIPS cfgMergeBool(fips); #endif #ifndef OPENSSL_NO_COMP cfgMergeBool(compression); #endif cfgMergeBool(session_tickets); modssl_ctx_cfg_merge_server(p, base->server, add->server, mrg->server); return mrg; } /* * Create per-directory SSL configuration */ static void modssl_ctx_init_proxy(SSLDirConfigRec *dc, apr_pool_t *p) { modssl_ctx_t *mctx; mctx = dc->proxy = apr_palloc(p, sizeof(*dc->proxy)); modssl_ctx_init(mctx, p); mctx->pkp = apr_palloc(p, sizeof(*mctx->pkp)); mctx->pkp->cert_file = NULL; mctx->pkp->cert_path = NULL; mctx->pkp->ca_cert_file = NULL; mctx->pkp->certs = NULL; mctx->pkp->ca_certs = NULL; } void *ssl_config_perdir_create(apr_pool_t *p, char *dir) { SSLDirConfigRec *dc = apr_palloc(p, sizeof(*dc)); dc->bSSLRequired = FALSE; dc->aRequirement = apr_array_make(p, 4, sizeof(ssl_require_t)); dc->nOptions = SSL_OPT_NONE|SSL_OPT_RELSET; dc->nOptionsAdd = SSL_OPT_NONE; dc->nOptionsDel = SSL_OPT_NONE; dc->szCipherSuite = NULL; dc->nVerifyClient = SSL_CVERIFY_UNSET; dc->nVerifyDepth = UNSET; dc->szUserName = NULL; dc->nRenegBufferSize = UNSET; dc->proxy_enabled = UNSET; modssl_ctx_init_proxy(dc, p); dc->proxy_post_config = FALSE; return dc; } /* * Merge per-directory SSL configurations */ static void modssl_ctx_cfg_merge_proxy(apr_pool_t *p, modssl_ctx_t *base, modssl_ctx_t *add, modssl_ctx_t *mrg) { modssl_ctx_cfg_merge(p, base, add, mrg); cfgMergeString(pkp->cert_file); cfgMergeString(pkp->cert_path); cfgMergeString(pkp->ca_cert_file); cfgMergeString(pkp->certs); cfgMergeString(pkp->ca_certs); } void *ssl_config_perdir_merge(apr_pool_t *p, void *basev, void *addv) { SSLDirConfigRec *base = (SSLDirConfigRec *)basev; SSLDirConfigRec *add = (SSLDirConfigRec *)addv; SSLDirConfigRec *mrg = (SSLDirConfigRec *)apr_palloc(p, sizeof(*mrg)); cfgMerge(bSSLRequired, FALSE); cfgMergeArray(aRequirement); if (add->nOptions & SSL_OPT_RELSET) { mrg->nOptionsAdd = (base->nOptionsAdd & ~(add->nOptionsDel)) | add->nOptionsAdd; mrg->nOptionsDel = (base->nOptionsDel & ~(add->nOptionsAdd)) | add->nOptionsDel; mrg->nOptions = (base->nOptions & ~(mrg->nOptionsDel)) | mrg->nOptionsAdd; } else { mrg->nOptions = add->nOptions; mrg->nOptionsAdd = add->nOptionsAdd; mrg->nOptionsDel = add->nOptionsDel; } cfgMergeString(szCipherSuite); cfgMerge(nVerifyClient, SSL_CVERIFY_UNSET); cfgMergeInt(nVerifyDepth); cfgMergeString(szUserName); cfgMergeInt(nRenegBufferSize); mrg->proxy_post_config = add->proxy_post_config; if (!mrg->proxy_post_config) { cfgMergeBool(proxy_enabled); modssl_ctx_init_proxy(mrg, p); modssl_ctx_cfg_merge_proxy(p, base->proxy, add->proxy, mrg->proxy); /* Since ssl_proxy_section_post_config() hook won't be called if there * is no SSLProxy* in this dir config, the ssl_ctx may still be NULL * here at runtime. Merging it is either a no-op (NULL => NULL) because * we are still before post config, or we really want to reuse the one * from the upper/server context (outside of sections). */ cfgMerge(proxy->ssl_ctx, NULL); } else { /* The post_config hook has already merged and initialized the * proxy context, use it. */ mrg->proxy_enabled = add->proxy_enabled; mrg->proxy = add->proxy; } return mrg; } /* Simply merge conf with base into conf, no third party. */ void ssl_config_proxy_merge(apr_pool_t *p, SSLDirConfigRec *base, SSLDirConfigRec *conf) { if (conf->proxy_enabled == UNSET) { conf->proxy_enabled = base->proxy_enabled; } modssl_ctx_cfg_merge_proxy(p, base->proxy, conf->proxy, conf->proxy); } /* * Configuration functions for particular directives */ const char *ssl_cmd_SSLPassPhraseDialog(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); const char *err; int arglen = strlen(arg); if ((err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } if (strcEQ(arg, "builtin")) { sc->server->pphrase_dialog_type = SSL_PPTYPE_BUILTIN; sc->server->pphrase_dialog_path = NULL; } else if ((arglen > 5) && strEQn(arg, "exec:", 5)) { sc->server->pphrase_dialog_type = SSL_PPTYPE_FILTER; sc->server->pphrase_dialog_path = ap_server_root_relative(cmd->pool, arg+5); if (!sc->server->pphrase_dialog_path) { return apr_pstrcat(cmd->pool, "Invalid SSLPassPhraseDialog exec: path ", arg+5, NULL); } if (!ssl_util_path_check(SSL_PCM_EXISTS, sc->server->pphrase_dialog_path, cmd->pool)) { return apr_pstrcat(cmd->pool, "SSLPassPhraseDialog: file '", sc->server->pphrase_dialog_path, "' does not exist", NULL); } } else if ((arglen > 1) && (arg[0] == '|')) { sc->server->pphrase_dialog_type = SSL_PPTYPE_PIPE; sc->server->pphrase_dialog_path = arg + 1; } else { return "SSLPassPhraseDialog: Invalid argument"; } return NULL; } #if defined(HAVE_OPENSSL_ENGINE_H) && defined(HAVE_ENGINE_INIT) const char *ssl_cmd_SSLCryptoDevice(cmd_parms *cmd, void *dcfg, const char *arg) { SSLModConfigRec *mc = myModConfig(cmd->server); const char *err; ENGINE *e; if ((err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } if (strcEQ(arg, "builtin")) { mc->szCryptoDevice = NULL; } else if ((e = ENGINE_by_id(arg))) { mc->szCryptoDevice = arg; ENGINE_free(e); } else { err = "SSLCryptoDevice: Invalid argument; must be one of: " "'builtin' (none)"; e = ENGINE_get_first(); while (e) { err = apr_pstrcat(cmd->pool, err, ", '", ENGINE_get_id(e), "' (", ENGINE_get_name(e), ")", NULL); /* Iterate; this call implicitly decrements the refcount * on the 'old' e, per the docs in engine.h. */ e = ENGINE_get_next(e); } return err; } return NULL; } #endif const char *ssl_cmd_SSLRandomSeed(cmd_parms *cmd, void *dcfg, const char *arg1, const char *arg2, const char *arg3) { SSLModConfigRec *mc = myModConfig(cmd->server); const char *err; ssl_randseed_t *seed; int arg2len = strlen(arg2); if ((err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } if (ssl_config_global_isfixed(mc)) { return NULL; } seed = apr_array_push(mc->aRandSeed); if (strcEQ(arg1, "startup")) { seed->nCtx = SSL_RSCTX_STARTUP; } else if (strcEQ(arg1, "connect")) { seed->nCtx = SSL_RSCTX_CONNECT; } else { return apr_pstrcat(cmd->pool, "SSLRandomSeed: " "invalid context: `", arg1, "'", NULL); } if ((arg2len > 5) && strEQn(arg2, "file:", 5)) { seed->nSrc = SSL_RSSRC_FILE; seed->cpPath = ap_server_root_relative(mc->pPool, arg2+5); } else if ((arg2len > 5) && strEQn(arg2, "exec:", 5)) { seed->nSrc = SSL_RSSRC_EXEC; seed->cpPath = ap_server_root_relative(mc->pPool, arg2+5); } else if ((arg2len > 4) && strEQn(arg2, "egd:", 4)) { #ifdef HAVE_RAND_EGD seed->nSrc = SSL_RSSRC_EGD; seed->cpPath = ap_server_root_relative(mc->pPool, arg2+4); #else return apr_pstrcat(cmd->pool, "Invalid SSLRandomSeed entropy source `", arg2, "': This version of " MODSSL_LIBRARY_NAME " does not support the Entropy Gathering Daemon " "(EGD).", NULL); #endif } else if (strcEQ(arg2, "builtin")) { seed->nSrc = SSL_RSSRC_BUILTIN; seed->cpPath = NULL; } else { seed->nSrc = SSL_RSSRC_FILE; seed->cpPath = ap_server_root_relative(mc->pPool, arg2); } if (seed->nSrc != SSL_RSSRC_BUILTIN) { if (!seed->cpPath) { return apr_pstrcat(cmd->pool, "Invalid SSLRandomSeed path ", arg2, NULL); } if (!ssl_util_path_check(SSL_PCM_EXISTS, seed->cpPath, cmd->pool)) { return apr_pstrcat(cmd->pool, "SSLRandomSeed: source path '", seed->cpPath, "' does not exist", NULL); } } if (!arg3) { seed->nBytes = 0; /* read whole file */ } else { if (seed->nSrc == SSL_RSSRC_BUILTIN) { return "SSLRandomSeed: byte specification not " "allowed for builtin seed source"; } seed->nBytes = atoi(arg3); if (seed->nBytes < 0) { return "SSLRandomSeed: invalid number of bytes specified"; } } return NULL; } const char *ssl_cmd_SSLEngine(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); if (!strcasecmp(arg, "On")) { sc->enabled = SSL_ENABLED_TRUE; return NULL; } else if (!strcasecmp(arg, "Off")) { sc->enabled = SSL_ENABLED_FALSE; return NULL; } else if (!strcasecmp(arg, "Optional")) { sc->enabled = SSL_ENABLED_OPTIONAL; return NULL; } return "Argument must be On, Off, or Optional"; } const char *ssl_cmd_SSLFIPS(cmd_parms *cmd, void *dcfg, int flag) { #ifdef HAVE_FIPS SSLSrvConfigRec *sc = mySrvConfig(cmd->server); #endif const char *err; if ((err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } #ifdef HAVE_FIPS if ((sc->fips != UNSET) && (sc->fips != (BOOL)(flag ? TRUE : FALSE))) return "Conflicting SSLFIPS options, cannot be both On and Off"; sc->fips = flag ? TRUE : FALSE; #else if (flag) return "SSLFIPS invalid, rebuild httpd and openssl compiled for FIPS"; #endif return NULL; } const char *ssl_cmd_SSLCipherSuite(cmd_parms *cmd, void *dcfg, const char *arg1, const char *arg2) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; if (arg2 == NULL) { arg2 = arg1; arg1 = "SSL"; } if (!strcmp("SSL", arg1)) { /* always disable null and export ciphers */ arg2 = apr_pstrcat(cmd->pool, arg2, ":!aNULL:!eNULL:!EXP", NULL); if (cmd->path) { dc->szCipherSuite = arg2; } else { sc->server->auth.cipher_suite = arg2; } return NULL; } #if SSL_HAVE_PROTOCOL_TLSV1_3 else if (!strcmp("TLSv1.3", arg1)) { if (cmd->path) { return "TLSv1.3 ciphers cannot be set inside a directory context"; } sc->server->auth.tls13_ciphers = arg2; return NULL; } #endif return apr_pstrcat(cmd->pool, "procotol '", arg1, "' not supported", NULL); } #define SSL_FLAGS_CHECK_FILE \ (SSL_PCM_EXISTS|SSL_PCM_ISREG|SSL_PCM_ISNONZERO) #define SSL_FLAGS_CHECK_DIR \ (SSL_PCM_EXISTS|SSL_PCM_ISDIR) static const char *ssl_cmd_check_file(cmd_parms *parms, const char **file) { const char *filepath = ap_server_root_relative(parms->pool, *file); if (!filepath) { return apr_pstrcat(parms->pool, parms->cmd->name, ": Invalid file path ", *file, NULL); } *file = filepath; if (ssl_util_path_check(SSL_FLAGS_CHECK_FILE, *file, parms->pool)) { return NULL; } return apr_pstrcat(parms->pool, parms->cmd->name, ": file '", *file, "' does not exist or is empty", NULL); } const char *ssl_cmd_SSLCompression(cmd_parms *cmd, void *dcfg, int flag) { #if !defined(OPENSSL_NO_COMP) SSLSrvConfigRec *sc = mySrvConfig(cmd->server); #ifndef SSL_OP_NO_COMPRESSION const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (err) return "This version of OpenSSL does not support enabling " "SSLCompression within sections."; #endif if (flag) { /* Some (packaged) versions of OpenSSL do not support * compression by default. Enabling this directive would not * have the desired effect, so fail with an error. */ STACK_OF(SSL_COMP) *meths = SSL_COMP_get_compression_methods(); if (sk_SSL_COMP_num(meths) == 0) { return "This version of OpenSSL does not have any compression methods " "available, cannot enable SSLCompression."; } } sc->compression = flag ? TRUE : FALSE; return NULL; #else return "Setting Compression mode unsupported; not implemented by the SSL library"; #endif } const char *ssl_cmd_SSLHonorCipherOrder(cmd_parms *cmd, void *dcfg, int flag) { #ifdef SSL_OP_CIPHER_SERVER_PREFERENCE SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->cipher_server_pref = flag?TRUE:FALSE; return NULL; #else return "SSLHonorCipherOrder unsupported; not implemented by the SSL library"; #endif } const char *ssl_cmd_SSLSessionTickets(cmd_parms *cmd, void *dcfg, int flag) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); #ifndef SSL_OP_NO_TICKET return "This version of OpenSSL does not support using " "SSLSessionTickets."; #endif sc->session_tickets = flag ? TRUE : FALSE; return NULL; } const char *ssl_cmd_SSLInsecureRenegotiation(cmd_parms *cmd, void *dcfg, int flag) { #ifdef SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->insecure_reneg = flag?TRUE:FALSE; return NULL; #else return "The SSLInsecureRenegotiation directive is not available " "with this SSL library"; #endif } static const char *ssl_cmd_check_dir(cmd_parms *parms, const char **dir) { const char *dirpath = ap_server_root_relative(parms->pool, *dir); if (!dirpath) { return apr_pstrcat(parms->pool, parms->cmd->name, ": Invalid dir path ", *dir, NULL); } *dir = dirpath; if (ssl_util_path_check(SSL_FLAGS_CHECK_DIR, *dir, parms->pool)) { return NULL; } return apr_pstrcat(parms->pool, parms->cmd->name, ": directory '", *dir, "' does not exist", NULL); } const char *ssl_cmd_SSLCertificateFile(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); const char *err; if ((err = ssl_cmd_check_file(cmd, &arg))) { return err; } *(const char **)apr_array_push(sc->server->pks->cert_files) = arg; return NULL; } const char *ssl_cmd_SSLCertificateKeyFile(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); const char *err; if ((err = ssl_cmd_check_file(cmd, &arg))) { return err; } *(const char **)apr_array_push(sc->server->pks->key_files) = arg; return NULL; } const char *ssl_cmd_SSLCertificateChainFile(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); const char *err; if ((err = ssl_cmd_check_file(cmd, &arg))) { return err; } sc->server->cert_chain = arg; return NULL; } #ifdef HAVE_TLS_SESSION_TICKETS const char *ssl_cmd_SSLSessionTicketKeyFile(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); const char *err; if ((err = ssl_cmd_check_file(cmd, &arg))) { return err; } sc->server->ticket_key->file_path = arg; return NULL; } #endif #define NO_PER_DIR_SSL_CA \ "Your SSL library does not have support for per-directory CA" const char *ssl_cmd_SSLCACertificatePath(cmd_parms *cmd, void *dcfg, const char *arg) { /*SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg;*/ SSLSrvConfigRec *sc = mySrvConfig(cmd->server); const char *err; if ((err = ssl_cmd_check_dir(cmd, &arg))) { return err; } if (cmd->path) { return NO_PER_DIR_SSL_CA; } /* XXX: bring back per-dir */ sc->server->auth.ca_cert_path = arg; return NULL; } const char *ssl_cmd_SSLCACertificateFile(cmd_parms *cmd, void *dcfg, const char *arg) { /*SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg;*/ SSLSrvConfigRec *sc = mySrvConfig(cmd->server); const char *err; if ((err = ssl_cmd_check_file(cmd, &arg))) { return err; } if (cmd->path) { return NO_PER_DIR_SSL_CA; } /* XXX: bring back per-dir */ sc->server->auth.ca_cert_file = arg; return NULL; } const char *ssl_cmd_SSLCADNRequestPath(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); const char *err; if ((err = ssl_cmd_check_dir(cmd, &arg))) { return err; } sc->server->pks->ca_name_path = arg; return NULL; } const char *ssl_cmd_SSLCADNRequestFile(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); const char *err; if ((err = ssl_cmd_check_file(cmd, &arg))) { return err; } sc->server->pks->ca_name_file = arg; return NULL; } const char *ssl_cmd_SSLCARevocationPath(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); const char *err; if ((err = ssl_cmd_check_dir(cmd, &arg))) { return err; } sc->server->crl_path = arg; return NULL; } const char *ssl_cmd_SSLCARevocationFile(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); const char *err; if ((err = ssl_cmd_check_file(cmd, &arg))) { return err; } sc->server->crl_file = arg; return NULL; } static const char *ssl_cmd_crlcheck_parse(cmd_parms *parms, const char *arg, int *mask) { const char *w; w = ap_getword_conf(parms->temp_pool, &arg); if (strcEQ(w, "none")) { *mask = SSL_CRLCHECK_NONE; } else if (strcEQ(w, "leaf")) { *mask = SSL_CRLCHECK_LEAF; } else if (strcEQ(w, "chain")) { *mask = SSL_CRLCHECK_CHAIN; } else { return apr_pstrcat(parms->temp_pool, parms->cmd->name, ": Invalid argument '", w, "'", NULL); } while (*arg) { w = ap_getword_conf(parms->temp_pool, &arg); if (strcEQ(w, "no_crl_for_cert_ok")) { *mask |= SSL_CRLCHECK_NO_CRL_FOR_CERT_OK; } else { return apr_pstrcat(parms->temp_pool, parms->cmd->name, ": Invalid argument '", w, "'", NULL); } } return NULL; } const char *ssl_cmd_SSLCARevocationCheck(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); return ssl_cmd_crlcheck_parse(cmd, arg, &sc->server->crl_check_mask); } static const char *ssl_cmd_verify_parse(cmd_parms *parms, const char *arg, ssl_verify_t *id) { if (strcEQ(arg, "none") || strcEQ(arg, "off")) { *id = SSL_CVERIFY_NONE; } else if (strcEQ(arg, "optional")) { *id = SSL_CVERIFY_OPTIONAL; } else if (strcEQ(arg, "require") || strcEQ(arg, "on")) { *id = SSL_CVERIFY_REQUIRE; } else if (strcEQ(arg, "optional_no_ca")) { *id = SSL_CVERIFY_OPTIONAL_NO_CA; } else { return apr_pstrcat(parms->temp_pool, parms->cmd->name, ": Invalid argument '", arg, "'", NULL); } return NULL; } const char *ssl_cmd_SSLVerifyClient(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; SSLSrvConfigRec *sc = mySrvConfig(cmd->server); ssl_verify_t mode = SSL_CVERIFY_NONE; const char *err; if ((err = ssl_cmd_verify_parse(cmd, arg, &mode))) { return err; } if (cmd->path) { dc->nVerifyClient = mode; } else { sc->server->auth.verify_mode = mode; } return NULL; } static const char *ssl_cmd_verify_depth_parse(cmd_parms *parms, const char *arg, int *depth) { if ((*depth = atoi(arg)) >= 0) { return NULL; } return apr_pstrcat(parms->temp_pool, parms->cmd->name, ": Invalid argument '", arg, "'", NULL); } const char *ssl_cmd_SSLVerifyDepth(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; SSLSrvConfigRec *sc = mySrvConfig(cmd->server); int depth; const char *err; if ((err = ssl_cmd_verify_depth_parse(cmd, arg, &depth))) { return err; } if (cmd->path) { dc->nVerifyDepth = depth; } else { sc->server->auth.verify_depth = depth; } return NULL; } const char *ssl_cmd_SSLSessionCache(cmd_parms *cmd, void *dcfg, const char *arg) { SSLModConfigRec *mc = myModConfig(cmd->server); const char *err, *sep, *name; long enabled_flags; if ((err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } /* The OpenSSL session cache mode must have both the flags * SSL_SESS_CACHE_SERVER and SSL_SESS_CACHE_NO_INTERNAL set if a * session cache is configured; NO_INTERNAL prevents the * OpenSSL-internal session cache being used in addition to the * "external" (mod_ssl-provided) cache, which otherwise causes * additional memory consumption. */ enabled_flags = SSL_SESS_CACHE_SERVER | SSL_SESS_CACHE_NO_INTERNAL; if (strcEQ(arg, "none")) { /* Nothing to do; session cache will be off. */ } else if (strcEQ(arg, "nonenotnull")) { /* ### Having a separate mode for this seems logically * unnecessary; the stated purpose of sending non-empty * session IDs would be better fixed in OpenSSL or simply * doing it by default if "none" is used. */ mc->sesscache_mode = enabled_flags; } else { /* Argument is of form 'name:args' or just 'name'. */ sep = ap_strchr_c(arg, ':'); if (sep) { name = apr_pstrmemdup(cmd->pool, arg, sep - arg); sep++; } else { name = arg; } /* Find the provider of given name. */ mc->sesscache = ap_lookup_provider(AP_SOCACHE_PROVIDER_GROUP, name, AP_SOCACHE_PROVIDER_VERSION); if (mc->sesscache) { /* Cache found; create it, passing anything beyond the colon. */ mc->sesscache_mode = enabled_flags; err = mc->sesscache->create(&mc->sesscache_context, sep, cmd->temp_pool, cmd->pool); } else { apr_array_header_t *name_list; const char *all_names; /* Build a comma-separated list of all registered provider * names: */ name_list = ap_list_provider_names(cmd->pool, AP_SOCACHE_PROVIDER_GROUP, AP_SOCACHE_PROVIDER_VERSION); all_names = apr_array_pstrcat(cmd->pool, name_list, ','); err = apr_psprintf(cmd->pool, "'%s' session cache not supported " "(known names: %s). Maybe you need to load the " "appropriate socache module (mod_socache_%s?).", name, all_names, name); } } if (err) { return apr_psprintf(cmd->pool, "SSLSessionCache: %s", err); } return NULL; } const char *ssl_cmd_SSLSessionCacheTimeout(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->session_cache_timeout = atoi(arg); if (sc->session_cache_timeout < 0) { return "SSLSessionCacheTimeout: Invalid argument"; } return NULL; } const char *ssl_cmd_SSLOptions(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; ssl_opt_t opt; int first = TRUE; char action, *w; while (*arg) { w = ap_getword_conf(cmd->temp_pool, &arg); action = NUL; if ((*w == '+') || (*w == '-')) { action = *(w++); } else if (first) { dc->nOptions = SSL_OPT_NONE; first = FALSE; } if (strcEQ(w, "StdEnvVars")) { opt = SSL_OPT_STDENVVARS; } else if (strcEQ(w, "ExportCertData")) { opt = SSL_OPT_EXPORTCERTDATA; } else if (strcEQ(w, "FakeBasicAuth")) { opt = SSL_OPT_FAKEBASICAUTH; } else if (strcEQ(w, "StrictRequire")) { opt = SSL_OPT_STRICTREQUIRE; } else if (strcEQ(w, "OptRenegotiate")) { opt = SSL_OPT_OPTRENEGOTIATE; } else if (strcEQ(w, "LegacyDNStringFormat")) { opt = SSL_OPT_LEGACYDNFORMAT; } else { return apr_pstrcat(cmd->pool, "SSLOptions: Illegal option '", w, "'", NULL); } if (action == '-') { dc->nOptionsAdd &= ~opt; dc->nOptionsDel |= opt; dc->nOptions &= ~opt; } else if (action == '+') { dc->nOptionsAdd |= opt; dc->nOptionsDel &= ~opt; dc->nOptions |= opt; } else { dc->nOptions = opt; dc->nOptionsAdd = opt; dc->nOptionsDel = SSL_OPT_NONE; } } return NULL; } const char *ssl_cmd_SSLRequireSSL(cmd_parms *cmd, void *dcfg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; dc->bSSLRequired = TRUE; return NULL; } const char *ssl_cmd_SSLRequire(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; ap_expr_info_t *info = apr_pcalloc(cmd->pool, sizeof(ap_expr_info_t)); ssl_require_t *require; const char *errstring; info->flags = AP_EXPR_FLAG_SSL_EXPR_COMPAT; info->filename = cmd->directive->filename; info->line_number = cmd->directive->line_num; info->module_index = APLOG_MODULE_INDEX; errstring = ap_expr_parse(cmd->pool, cmd->temp_pool, info, arg, NULL); if (errstring) { return apr_pstrcat(cmd->pool, "SSLRequire: ", errstring, NULL); } require = apr_array_push(dc->aRequirement); require->cpExpr = arg; require->mpExpr = info; return NULL; } const char *ssl_cmd_SSLRenegBufferSize(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = dcfg; int val; val = atoi(arg); if (val < 0) { return apr_pstrcat(cmd->pool, "Invalid size for SSLRenegBufferSize: ", arg, NULL); } dc->nRenegBufferSize = val; return NULL; } static const char *ssl_cmd_protocol_parse(cmd_parms *parms, const char *arg, ssl_proto_t *options) { ssl_proto_t thisopt; *options = SSL_PROTOCOL_NONE; while (*arg) { char *w = ap_getword_conf(parms->temp_pool, &arg); char action = '\0'; if ((*w == '+') || (*w == '-')) { action = *(w++); } if (strcEQ(w, "SSLv2")) { if (action == '-') { continue; } else { return "SSLProtocol: SSLv2 is no longer supported"; } } else if (strcEQ(w, "SSLv3")) { #ifdef OPENSSL_NO_SSL3 if (action != '-') { return "SSLv3 not supported by this version of OpenSSL"; } /* Nothing to do, the flag is not present to be toggled */ continue; #else thisopt = SSL_PROTOCOL_SSLV3; #endif } else if (strcEQ(w, "TLSv1")) { thisopt = SSL_PROTOCOL_TLSV1; } #ifdef HAVE_TLSV1_X else if (strcEQ(w, "TLSv1.1")) { thisopt = SSL_PROTOCOL_TLSV1_1; } else if (strcEQ(w, "TLSv1.2")) { thisopt = SSL_PROTOCOL_TLSV1_2; } else if (SSL_HAVE_PROTOCOL_TLSV1_3 && strcEQ(w, "TLSv1.3")) { thisopt = SSL_PROTOCOL_TLSV1_3; } #endif else if (strcEQ(w, "all")) { thisopt = SSL_PROTOCOL_ALL; } else { return apr_pstrcat(parms->temp_pool, parms->cmd->name, ": Illegal protocol '", w, "'", NULL); } if (action == '-') { *options &= ~thisopt; } else if (action == '+') { *options |= thisopt; } else { if (*options != SSL_PROTOCOL_NONE) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, parms->server, APLOGNO(02532) "%s: Protocol '%s' overrides already set parameter(s). " "Check if a +/- prefix is missing.", parms->cmd->name, w); } *options = thisopt; } } return NULL; } const char *ssl_cmd_SSLProtocol(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->protocol_set = 1; return ssl_cmd_protocol_parse(cmd, arg, &sc->server->protocol); } const char *ssl_cmd_SSLProxyEngine(cmd_parms *cmd, void *dcfg, int flag) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; dc->proxy_enabled = flag ? TRUE : FALSE; return NULL; } const char *ssl_cmd_SSLProxyProtocol(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; dc->proxy->protocol_set = 1; return ssl_cmd_protocol_parse(cmd, arg, &dc->proxy->protocol); } const char *ssl_cmd_SSLProxyCipherSuite(cmd_parms *cmd, void *dcfg, const char *arg1, const char *arg2) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; if (arg2 == NULL) { arg2 = arg1; arg1 = "SSL"; } if (!strcmp("SSL", arg1)) { /* always disable null and export ciphers */ arg2 = apr_pstrcat(cmd->pool, arg2, ":!aNULL:!eNULL:!EXP", NULL); dc->proxy->auth.cipher_suite = arg2; return NULL; } #if SSL_HAVE_PROTOCOL_TLSV1_3 else if (!strcmp("TLSv1.3", arg1)) { dc->proxy->auth.tls13_ciphers = arg2; return NULL; } #endif return apr_pstrcat(cmd->pool, "procotol '", arg1, "' not supported", NULL); } const char *ssl_cmd_SSLProxyVerify(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; ssl_verify_t mode = SSL_CVERIFY_NONE; const char *err; if ((err = ssl_cmd_verify_parse(cmd, arg, &mode))) { return err; } dc->proxy->auth.verify_mode = mode; return NULL; } const char *ssl_cmd_SSLProxyVerifyDepth(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; int depth; const char *err; if ((err = ssl_cmd_verify_depth_parse(cmd, arg, &depth))) { return err; } dc->proxy->auth.verify_depth = depth; return NULL; } const char *ssl_cmd_SSLProxyCACertificateFile(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; const char *err; if ((err = ssl_cmd_check_file(cmd, &arg))) { return err; } dc->proxy->auth.ca_cert_file = arg; return NULL; } const char *ssl_cmd_SSLProxyCACertificatePath(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; const char *err; if ((err = ssl_cmd_check_dir(cmd, &arg))) { return err; } dc->proxy->auth.ca_cert_path = arg; return NULL; } const char *ssl_cmd_SSLProxyCARevocationPath(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; const char *err; if ((err = ssl_cmd_check_dir(cmd, &arg))) { return err; } dc->proxy->crl_path = arg; return NULL; } const char *ssl_cmd_SSLProxyCARevocationFile(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; const char *err; if ((err = ssl_cmd_check_file(cmd, &arg))) { return err; } dc->proxy->crl_file = arg; return NULL; } const char *ssl_cmd_SSLProxyCARevocationCheck(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; return ssl_cmd_crlcheck_parse(cmd, arg, &dc->proxy->crl_check_mask); } const char *ssl_cmd_SSLProxyMachineCertificateFile(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; const char *err; if ((err = ssl_cmd_check_file(cmd, &arg))) { return err; } dc->proxy->pkp->cert_file = arg; return NULL; } const char *ssl_cmd_SSLProxyMachineCertificatePath(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; const char *err; if ((err = ssl_cmd_check_dir(cmd, &arg))) { return err; } dc->proxy->pkp->cert_path = arg; return NULL; } const char *ssl_cmd_SSLProxyMachineCertificateChainFile(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; const char *err; if ((err = ssl_cmd_check_file(cmd, &arg))) { return err; } dc->proxy->pkp->ca_cert_file = arg; return NULL; } const char *ssl_cmd_SSLUserName(cmd_parms *cmd, void *dcfg, const char *arg) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; dc->szUserName = arg; return NULL; } static const char *ssl_cmd_ocspcheck_parse(cmd_parms *parms, const char *arg, int *mask) { const char *w; w = ap_getword_conf(parms->temp_pool, &arg); if (strcEQ(w, "off")) { *mask = SSL_OCSPCHECK_NONE; } else if (strcEQ(w, "leaf")) { *mask = SSL_OCSPCHECK_LEAF; } else if (strcEQ(w, "on")) { *mask = SSL_OCSPCHECK_CHAIN; } else { return apr_pstrcat(parms->temp_pool, parms->cmd->name, ": Invalid argument '", w, "'", NULL); } while (*arg) { w = ap_getword_conf(parms->temp_pool, &arg); if (strcEQ(w, "no_ocsp_for_cert_ok")) { *mask |= SSL_OCSPCHECK_NO_OCSP_FOR_CERT_OK; } else { return apr_pstrcat(parms->temp_pool, parms->cmd->name, ": Invalid argument '", w, "'", NULL); } } return NULL; } const char *ssl_cmd_SSLOCSPEnable(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); #ifdef OPENSSL_NO_OCSP if (flag) { return "OCSP support disabled in SSL library; cannot enable " "OCSP validation"; } #endif return ssl_cmd_ocspcheck_parse(cmd, arg, &sc->server->ocsp_mask); } const char *ssl_cmd_SSLOCSPOverrideResponder(cmd_parms *cmd, void *dcfg, int flag) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->ocsp_force_default = flag ? TRUE : FALSE; return NULL; } const char *ssl_cmd_SSLOCSPDefaultResponder(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->ocsp_responder = arg; return NULL; } const char *ssl_cmd_SSLOCSPResponseTimeSkew(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->ocsp_resptime_skew = atoi(arg); if (sc->server->ocsp_resptime_skew < 0) { return "SSLOCSPResponseTimeSkew: invalid argument"; } return NULL; } const char *ssl_cmd_SSLOCSPResponseMaxAge(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->ocsp_resp_maxage = atoi(arg); if (sc->server->ocsp_resp_maxage < 0) { return "SSLOCSPResponseMaxAge: invalid argument"; } return NULL; } const char *ssl_cmd_SSLOCSPResponderTimeout(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->ocsp_responder_timeout = apr_time_from_sec(atoi(arg)); if (sc->server->ocsp_responder_timeout < 0) { return "SSLOCSPResponderTimeout: invalid argument"; } return NULL; } const char *ssl_cmd_SSLOCSPUseRequestNonce(cmd_parms *cmd, void *dcfg, int flag) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->ocsp_use_request_nonce = flag ? TRUE : FALSE; return NULL; } const char *ssl_cmd_SSLOCSPProxyURL(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->proxy_uri = apr_palloc(cmd->pool, sizeof(apr_uri_t)); if (apr_uri_parse(cmd->pool, arg, sc->server->proxy_uri) != APR_SUCCESS) { return apr_psprintf(cmd->pool, "SSLOCSPProxyURL: Cannot parse URL %s", arg); } return NULL; } /* Set OCSP responder certificate verification directive */ const char *ssl_cmd_SSLOCSPNoVerify(cmd_parms *cmd, void *dcfg, int flag) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->ocsp_noverify = flag ? TRUE : FALSE; return NULL; } const char *ssl_cmd_SSLProxyCheckPeerExpire(cmd_parms *cmd, void *dcfg, int flag) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; dc->proxy->ssl_check_peer_expire = flag ? TRUE : FALSE; return NULL; } const char *ssl_cmd_SSLProxyCheckPeerCN(cmd_parms *cmd, void *dcfg, int flag) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; dc->proxy->ssl_check_peer_cn = flag ? TRUE : FALSE; return NULL; } const char *ssl_cmd_SSLProxyCheckPeerName(cmd_parms *cmd, void *dcfg, int flag) { SSLDirConfigRec *dc = (SSLDirConfigRec *)dcfg; dc->proxy->ssl_check_peer_name = flag ? TRUE : FALSE; return NULL; } const char *ssl_cmd_SSLStrictSNIVHostCheck(cmd_parms *cmd, void *dcfg, int flag) { #ifdef HAVE_TLSEXT SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->strict_sni_vhost_check = flag ? SSL_ENABLED_TRUE : SSL_ENABLED_FALSE; return NULL; #else return "SSLStrictSNIVHostCheck failed; OpenSSL is not built with support " "for TLS extensions and SNI indication. Refer to the " "documentation, and build a compatible version of OpenSSL."; #endif } #ifdef HAVE_OCSP_STAPLING const char *ssl_cmd_SSLStaplingCache(cmd_parms *cmd, void *dcfg, const char *arg) { SSLModConfigRec *mc = myModConfig(cmd->server); const char *err, *sep, *name; if ((err = ap_check_cmd_context(cmd, GLOBAL_ONLY))) { return err; } /* Argument is of form 'name:args' or just 'name'. */ sep = ap_strchr_c(arg, ':'); if (sep) { name = apr_pstrmemdup(cmd->pool, arg, sep - arg); sep++; } else { name = arg; } /* Find the provider of given name. */ mc->stapling_cache = ap_lookup_provider(AP_SOCACHE_PROVIDER_GROUP, name, AP_SOCACHE_PROVIDER_VERSION); if (mc->stapling_cache) { /* Cache found; create it, passing anything beyond the colon. */ err = mc->stapling_cache->create(&mc->stapling_cache_context, sep, cmd->temp_pool, cmd->pool); } else { apr_array_header_t *name_list; const char *all_names; /* Build a comma-separated list of all registered provider * names: */ name_list = ap_list_provider_names(cmd->pool, AP_SOCACHE_PROVIDER_GROUP, AP_SOCACHE_PROVIDER_VERSION); all_names = apr_array_pstrcat(cmd->pool, name_list, ','); err = apr_psprintf(cmd->pool, "'%s' stapling cache not supported " "(known names: %s) Maybe you need to load the " "appropriate socache module (mod_socache_%s?)", name, all_names, name); } if (err) { return apr_psprintf(cmd->pool, "SSLStaplingCache: %s", err); } return NULL; } const char *ssl_cmd_SSLUseStapling(cmd_parms *cmd, void *dcfg, int flag) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->stapling_enabled = flag ? TRUE : FALSE; return NULL; } const char *ssl_cmd_SSLStaplingResponseTimeSkew(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->stapling_resptime_skew = atoi(arg); if (sc->server->stapling_resptime_skew < 0) { return "SSLStaplingResponseTimeSkew: invalid argument"; } return NULL; } const char *ssl_cmd_SSLStaplingResponseMaxAge(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->stapling_resp_maxage = atoi(arg); if (sc->server->stapling_resp_maxage < 0) { return "SSLStaplingResponseMaxAge: invalid argument"; } return NULL; } const char *ssl_cmd_SSLStaplingStandardCacheTimeout(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->stapling_cache_timeout = atoi(arg); if (sc->server->stapling_cache_timeout < 0) { return "SSLStaplingStandardCacheTimeout: invalid argument"; } return NULL; } const char *ssl_cmd_SSLStaplingErrorCacheTimeout(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->stapling_errcache_timeout = atoi(arg); if (sc->server->stapling_errcache_timeout < 0) { return "SSLStaplingErrorCacheTimeout: invalid argument"; } return NULL; } const char *ssl_cmd_SSLStaplingReturnResponderErrors(cmd_parms *cmd, void *dcfg, int flag) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->stapling_return_errors = flag ? TRUE : FALSE; return NULL; } const char *ssl_cmd_SSLStaplingFakeTryLater(cmd_parms *cmd, void *dcfg, int flag) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->stapling_fake_trylater = flag ? TRUE : FALSE; return NULL; } const char *ssl_cmd_SSLStaplingResponderTimeout(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->stapling_responder_timeout = atoi(arg); sc->server->stapling_responder_timeout *= APR_USEC_PER_SEC; if (sc->server->stapling_responder_timeout < 0) { return "SSLStaplingResponderTimeout: invalid argument"; } return NULL; } const char *ssl_cmd_SSLStaplingForceURL(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); sc->server->stapling_force_url = arg; return NULL; } #endif /* HAVE_OCSP_STAPLING */ #ifdef HAVE_SSL_CONF_CMD const char *ssl_cmd_SSLOpenSSLConfCmd(cmd_parms *cmd, void *dcfg, const char *arg1, const char *arg2) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); SSL_CONF_CTX *cctx = sc->server->ssl_ctx_config; int value_type = SSL_CONF_cmd_value_type(cctx, arg1); const char *err; ssl_ctx_param_t *param; if (value_type == SSL_CONF_TYPE_UNKNOWN) { return apr_psprintf(cmd->pool, "'%s': invalid OpenSSL configuration command", arg1); } if (value_type == SSL_CONF_TYPE_FILE) { if ((err = ssl_cmd_check_file(cmd, &arg2))) return err; } else if (value_type == SSL_CONF_TYPE_DIR) { if ((err = ssl_cmd_check_dir(cmd, &arg2))) return err; } if (strcEQ(arg1, "CipherString")) { /* always disable null and export ciphers */ arg2 = apr_pstrcat(cmd->pool, arg2, ":!aNULL:!eNULL:!EXP", NULL); } param = apr_array_push(sc->server->ssl_ctx_param); param->name = arg1; param->value = arg2; return NULL; } #endif #ifdef HAVE_SRP const char *ssl_cmd_SSLSRPVerifierFile(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); const char *err; if ((err = ssl_cmd_check_file(cmd, &arg))) return err; /* SRP_VBASE_init takes char*, not const char* */ sc->server->srp_vfile = apr_pstrdup(cmd->pool, arg); return NULL; } const char *ssl_cmd_SSLSRPUnknownUserSeed(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); /* SRP_VBASE_new takes char*, not const char* */ sc->server->srp_unknown_user_seed = apr_pstrdup(cmd->pool, arg); return NULL; } #endif /* HAVE_SRP */ /* OCSP Responder File Function to read in value */ const char *ssl_cmd_SSLOCSPResponderCertificateFile(cmd_parms *cmd, void *dcfg, const char *arg) { SSLSrvConfigRec *sc = mySrvConfig(cmd->server); const char *err; if ((err = ssl_cmd_check_file(cmd, &arg))) { return err; } sc->server->ocsp_certs_file = arg; return NULL; } void ssl_hook_ConfigTest(apr_pool_t *pconf, server_rec *s) { apr_file_t *out = NULL; if (!ap_exists_config_define("DUMP_CERTS")) { return; } apr_file_open_stdout(&out, pconf); apr_file_printf(out, "Server certificates:\n"); /* Dump the filenames of all configured server certificates to * stdout. */ while (s) { SSLSrvConfigRec *sc = mySrvConfig(s); if (sc && sc->server && sc->server->pks) { modssl_pk_server_t *const pks = sc->server->pks; int i; for (i = 0; (i < pks->cert_files->nelts) && APR_ARRAY_IDX(pks->cert_files, i, const char *); i++) { apr_file_printf(out, " %s\n", APR_ARRAY_IDX(pks->cert_files, i, const char *)); } } s = s->next; } } httpd-2.4.41/modules/ssl/ssl_private.h0000644000000000000500000011476213376014140016223 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef SSL_PRIVATE_H #define SSL_PRIVATE_H /** * @file ssl_private.h * @brief Internal interfaces private to mod_ssl. * * @defgroup MOD_SSL_PRIVATE Private * @ingroup MOD_SSL * @{ */ /** Apache headers */ #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_main.h" #include "http_connection.h" #include "http_request.h" #include "http_protocol.h" #include "http_vhost.h" #include "util_script.h" #include "util_filter.h" #include "util_ebcdic.h" #include "util_mutex.h" #include "apr.h" #include "apr_strings.h" #define APR_WANT_STRFUNC #define APR_WANT_MEMFUNC #include "apr_want.h" #include "apr_tables.h" #include "apr_lib.h" #include "apr_fnmatch.h" #include "apr_strings.h" #include "apr_global_mutex.h" #include "apr_optional.h" #include "ap_socache.h" #include "mod_auth.h" /* The #ifdef macros are only defined AFTER including the above * therefore we cannot include these system files at the top :-( */ #if APR_HAVE_STDLIB_H #include #endif #if APR_HAVE_SYS_TIME_H #include #endif #if APR_HAVE_UNISTD_H #include /* needed for STDIN_FILENO et.al., at least on FreeBSD */ #endif #ifndef FALSE #define FALSE 0 #endif #ifndef TRUE #define TRUE !FALSE #endif #ifndef BOOL #define BOOL unsigned int #endif #include "ap_expr.h" /* OpenSSL headers */ #include #if (OPENSSL_VERSION_NUMBER >= 0x10001000) /* must be defined before including ssl.h */ #define OPENSSL_NO_SSL_INTERN #endif #include #include #include #include #include #include #include #include #include #include /* Avoid tripping over an engine build installed globally and detected * when the user points at an explicit non-engine flavor of OpenSSL */ #if defined(HAVE_OPENSSL_ENGINE_H) && defined(HAVE_ENGINE_INIT) #include #endif #if (OPENSSL_VERSION_NUMBER < 0x0090801f) #error mod_ssl requires OpenSSL 0.9.8a or later #endif /** * ...shifting sands of OpenSSL... * Note: when adding support for new OpenSSL features, avoid explicit * version number checks whenever possible, and use "feature-based" * detection instead (check for definitions of constants or functions) */ #if (OPENSSL_VERSION_NUMBER >= 0x10000000) #define MODSSL_SSL_CIPHER_CONST const #define MODSSL_SSL_METHOD_CONST const #else #define MODSSL_SSL_CIPHER_CONST #define MODSSL_SSL_METHOD_CONST #endif #if defined(LIBRESSL_VERSION_NUMBER) /* Missing from LibreSSL */ #if LIBRESSL_VERSION_NUMBER < 0x2060000f #define SSL_CTRL_SET_MIN_PROTO_VERSION 123 #define SSL_CTRL_SET_MAX_PROTO_VERSION 124 #define SSL_CTX_set_min_proto_version(ctx, version) \ SSL_CTX_ctrl(ctx, SSL_CTRL_SET_MIN_PROTO_VERSION, version, NULL) #define SSL_CTX_set_max_proto_version(ctx, version) \ SSL_CTX_ctrl(ctx, SSL_CTRL_SET_MAX_PROTO_VERSION, version, NULL) #elif LIBRESSL_VERSION_NUMBER < 0x2070000f /* LibreSSL before 2.7 declares OPENSSL_VERSION_NUMBER == 2.0 but does not * include most changes from OpenSSL >= 1.1 (new functions, macros, * deprecations, ...), so we have to work around this... */ #define MODSSL_USE_OPENSSL_PRE_1_1_API (1) #endif /* LIBRESSL_VERSION_NUMBER < 0x2060000f */ #else /* defined(LIBRESSL_VERSION_NUMBER) */ #define MODSSL_USE_OPENSSL_PRE_1_1_API (OPENSSL_VERSION_NUMBER < 0x10100000L) #endif #if defined(OPENSSL_FIPS) #define HAVE_FIPS #endif #if defined(SSL_OP_NO_TLSv1_2) #define HAVE_TLSV1_X #endif #if defined(SSL_CONF_FLAG_FILE) #define HAVE_SSL_CONF_CMD #endif /* session id constness */ #if MODSSL_USE_OPENSSL_PRE_1_1_API #define IDCONST #else #define IDCONST const #endif /** * The following features all depend on TLS extension support. * Within this block, check again for features (not version numbers). */ #if !defined(OPENSSL_NO_TLSEXT) && defined(SSL_set_tlsext_host_name) #define HAVE_TLSEXT /* ECC: make sure we have at least 1.0.0 */ #if !defined(OPENSSL_NO_EC) && defined(TLSEXT_ECPOINTFORMAT_uncompressed) #define HAVE_ECC #endif /* OCSP stapling */ #if !defined(OPENSSL_NO_OCSP) && defined(SSL_CTX_set_tlsext_status_cb) #define HAVE_OCSP_STAPLING /* All exist but are no longer macros since OpenSSL 1.1.0 */ #if OPENSSL_VERSION_NUMBER < 0x10100000L /* backward compatibility with OpenSSL < 1.0 */ #ifndef sk_OPENSSL_STRING_num #define sk_OPENSSL_STRING_num sk_num #endif #ifndef sk_OPENSSL_STRING_value #define sk_OPENSSL_STRING_value sk_value #endif #ifndef sk_OPENSSL_STRING_pop #define sk_OPENSSL_STRING_pop sk_pop #endif #endif /* if OPENSSL_VERSION_NUMBER < 0x10100000L */ #endif /* if !defined(OPENSSL_NO_OCSP) && defined(SSL_CTX_set_tlsext_status_cb) */ /* TLS session tickets */ #if defined(SSL_CTX_set_tlsext_ticket_key_cb) #define HAVE_TLS_SESSION_TICKETS #define TLSEXT_TICKET_KEY_LEN 48 #ifndef tlsext_tick_md #ifdef OPENSSL_NO_SHA256 #define tlsext_tick_md EVP_sha1 #else #define tlsext_tick_md EVP_sha256 #endif #endif #endif /* Secure Remote Password */ #if !defined(OPENSSL_NO_SRP) && defined(SSL_CTRL_SET_TLS_EXT_SRP_USERNAME_CB) #define HAVE_SRP #include #endif /* ALPN Protocol Negotiation */ #if defined(TLSEXT_TYPE_application_layer_protocol_negotiation) #define HAVE_TLS_ALPN #endif #endif /* !defined(OPENSSL_NO_TLSEXT) && defined(SSL_set_tlsext_host_name) */ #if MODSSL_USE_OPENSSL_PRE_1_1_API #define BN_get_rfc2409_prime_768 get_rfc2409_prime_768 #define BN_get_rfc2409_prime_1024 get_rfc2409_prime_1024 #define BN_get_rfc3526_prime_1536 get_rfc3526_prime_1536 #define BN_get_rfc3526_prime_2048 get_rfc3526_prime_2048 #define BN_get_rfc3526_prime_3072 get_rfc3526_prime_3072 #define BN_get_rfc3526_prime_4096 get_rfc3526_prime_4096 #define BN_get_rfc3526_prime_6144 get_rfc3526_prime_6144 #define BN_get_rfc3526_prime_8192 get_rfc3526_prime_8192 #define BIO_set_init(x,v) (x->init=v) #define BIO_get_data(x) (x->ptr) #define BIO_set_data(x,v) (x->ptr=v) #define BIO_get_shutdown(x) (x->shutdown) #define BIO_set_shutdown(x,v) (x->shutdown=v) #define DH_bits(x) (BN_num_bits(x->p)) #else void init_bio_methods(void); void free_bio_methods(void); #endif #if OPENSSL_VERSION_NUMBER < 0x10002000L || \ (defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 0x2070000f) #define X509_STORE_CTX_get0_store(x) (x->ctx) #endif #if OPENSSL_VERSION_NUMBER < 0x10000000L #ifndef X509_STORE_CTX_get0_current_issuer #define X509_STORE_CTX_get0_current_issuer(x) (x->current_issuer) #endif #endif /* mod_ssl headers */ #include "ssl_util_ssl.h" APLOG_USE_MODULE(ssl); /* * Provide reasonable default for some defines */ #ifndef PFALSE #define PFALSE ((void *)FALSE) #endif #ifndef PTRUE #define PTRUE ((void *)TRUE) #endif #ifndef UNSET #define UNSET (-1) #endif #ifndef NUL #define NUL '\0' #endif #ifndef RAND_MAX #include #define RAND_MAX INT_MAX #endif /** * Provide reasonable defines for some types */ #ifndef UCHAR #define UCHAR unsigned char #endif /** * Provide useful shorthands */ #define strEQ(s1,s2) (strcmp(s1,s2) == 0) #define strNE(s1,s2) (strcmp(s1,s2) != 0) #define strEQn(s1,s2,n) (strncmp(s1,s2,n) == 0) #define strNEn(s1,s2,n) (strncmp(s1,s2,n) != 0) #define strcEQ(s1,s2) (strcasecmp(s1,s2) == 0) #define strcNE(s1,s2) (strcasecmp(s1,s2) != 0) #define strcEQn(s1,s2,n) (strncasecmp(s1,s2,n) == 0) #define strcNEn(s1,s2,n) (strncasecmp(s1,s2,n) != 0) #define strIsEmpty(s) (s == NULL || s[0] == NUL) #define myConnConfig(c) \ ((SSLConnRec *)ap_get_module_config(c->conn_config, &ssl_module)) #define myConnConfigSet(c, val) \ ap_set_module_config(c->conn_config, &ssl_module, val) #define mySrvConfig(srv) \ ((SSLSrvConfigRec *)ap_get_module_config(srv->module_config, &ssl_module)) #define myDirConfig(req) \ ((SSLDirConfigRec *)ap_get_module_config(req->per_dir_config, &ssl_module)) #define myCtxConfig(sslconn, sc) \ (sslconn->is_proxy ? sslconn->dc->proxy : sc->server) #define myModConfig(srv) mySrvConfig((srv))->mc #define mySrvFromConn(c) myConnConfig(c)->server #define myDirConfigFromConn(c) myConnConfig(c)->dc #define mySrvConfigFromConn(c) mySrvConfig(mySrvFromConn(c)) #define myModConfigFromConn(c) myModConfig(mySrvFromConn(c)) /** * Defaults for the configuration */ #ifndef SSL_SESSION_CACHE_TIMEOUT #define SSL_SESSION_CACHE_TIMEOUT 300 #endif /* Default setting for per-dir reneg buffer. */ #ifndef DEFAULT_RENEG_BUFFER_SIZE #define DEFAULT_RENEG_BUFFER_SIZE (128 * 1024) #endif /* Default for OCSP response validity */ #ifndef DEFAULT_OCSP_MAX_SKEW #define DEFAULT_OCSP_MAX_SKEW (60 * 5) #endif /* Default timeout for OCSP queries */ #ifndef DEFAULT_OCSP_TIMEOUT #define DEFAULT_OCSP_TIMEOUT 10 #endif /* * For better backwards compatibility with the SSLCertificate[Key]File * and SSLPassPhraseDialog ("exec" type) directives in 2.4.7 and earlier */ #ifdef HAVE_ECC #define CERTKEYS_IDX_MAX 2 #else #define CERTKEYS_IDX_MAX 1 #endif /** * Define the SSL options */ #define SSL_OPT_NONE (0) #define SSL_OPT_RELSET (1<<0) #define SSL_OPT_STDENVVARS (1<<1) #define SSL_OPT_EXPORTCERTDATA (1<<3) #define SSL_OPT_FAKEBASICAUTH (1<<4) #define SSL_OPT_STRICTREQUIRE (1<<5) #define SSL_OPT_OPTRENEGOTIATE (1<<6) #define SSL_OPT_LEGACYDNFORMAT (1<<7) typedef int ssl_opt_t; /** * Define the SSL Protocol options */ #define SSL_PROTOCOL_NONE (0) #ifndef OPENSSL_NO_SSL3 #define SSL_PROTOCOL_SSLV3 (1<<1) #endif #define SSL_PROTOCOL_TLSV1 (1<<2) #ifndef OPENSSL_NO_SSL3 #define SSL_PROTOCOL_BASIC (SSL_PROTOCOL_SSLV3|SSL_PROTOCOL_TLSV1) #else #define SSL_PROTOCOL_BASIC (SSL_PROTOCOL_TLSV1) #endif #ifdef HAVE_TLSV1_X #define SSL_PROTOCOL_TLSV1_1 (1<<3) #define SSL_PROTOCOL_TLSV1_2 (1<<4) #define SSL_PROTOCOL_TLSV1_3 (1<<5) #ifdef SSL_OP_NO_TLSv1_3 #define SSL_HAVE_PROTOCOL_TLSV1_3 (1) #define SSL_PROTOCOL_ALL (SSL_PROTOCOL_BASIC| \ SSL_PROTOCOL_TLSV1_1|SSL_PROTOCOL_TLSV1_2|SSL_PROTOCOL_TLSV1_3) #else #define SSL_HAVE_PROTOCOL_TLSV1_3 (0) #define SSL_PROTOCOL_ALL (SSL_PROTOCOL_BASIC| \ SSL_PROTOCOL_TLSV1_1|SSL_PROTOCOL_TLSV1_2) #endif #else #define SSL_PROTOCOL_ALL (SSL_PROTOCOL_BASIC) #endif #ifndef OPENSSL_NO_SSL3 #define SSL_PROTOCOL_DEFAULT (SSL_PROTOCOL_ALL & ~SSL_PROTOCOL_SSLV3) #else #define SSL_PROTOCOL_DEFAULT (SSL_PROTOCOL_ALL) #endif typedef int ssl_proto_t; /** * Define the SSL verify levels */ typedef enum { SSL_CVERIFY_UNSET = UNSET, SSL_CVERIFY_NONE = 0, SSL_CVERIFY_OPTIONAL = 1, SSL_CVERIFY_REQUIRE = 2, SSL_CVERIFY_OPTIONAL_NO_CA = 3 } ssl_verify_t; #define SSL_VERIFY_PEER_STRICT \ (SSL_VERIFY_PEER|SSL_VERIFY_FAIL_IF_NO_PEER_CERT) #define ssl_verify_error_is_optional(errnum) \ ((errnum == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT) \ || (errnum == X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN) \ || (errnum == X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY) \ || (errnum == X509_V_ERR_CERT_UNTRUSTED) \ || (errnum == X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE)) /** * CRL checking mask (mode | flags) */ typedef enum { SSL_CRLCHECK_NONE = (0), SSL_CRLCHECK_LEAF = (1 << 0), SSL_CRLCHECK_CHAIN = (1 << 1), #define SSL_CRLCHECK_FLAGS (~0x3) SSL_CRLCHECK_NO_CRL_FOR_CERT_OK = (1 << 2) } ssl_crlcheck_t; /** * OCSP checking mask (mode | flags) */ typedef enum { SSL_OCSPCHECK_NONE = (0), SSL_OCSPCHECK_LEAF = (1 << 0), SSL_OCSPCHECK_CHAIN = (1 << 1), SSL_OCSPCHECK_NO_OCSP_FOR_CERT_OK = (1 << 2) } ssl_ocspcheck_t; /** * Define the SSL pass phrase dialog types */ typedef enum { SSL_PPTYPE_UNSET = UNSET, SSL_PPTYPE_BUILTIN = 0, SSL_PPTYPE_FILTER = 1, SSL_PPTYPE_PIPE = 2 } ssl_pphrase_t; /** * Define the Path Checking modes */ #define SSL_PCM_EXISTS 1 #define SSL_PCM_ISREG 2 #define SSL_PCM_ISDIR 4 #define SSL_PCM_ISNONZERO 8 typedef unsigned int ssl_pathcheck_t; /** * Define the SSL enabled state */ typedef enum { SSL_ENABLED_UNSET = UNSET, SSL_ENABLED_FALSE = 0, SSL_ENABLED_TRUE = 1, SSL_ENABLED_OPTIONAL = 3 } ssl_enabled_t; /** * Define the SSL requirement structure */ typedef struct { const char *cpExpr; ap_expr_info_t *mpExpr; } ssl_require_t; /** * Define the SSL random number generator seeding source */ typedef enum { SSL_RSCTX_STARTUP = 1, SSL_RSCTX_CONNECT = 2 } ssl_rsctx_t; typedef enum { SSL_RSSRC_BUILTIN = 1, SSL_RSSRC_FILE = 2, SSL_RSSRC_EXEC = 3, SSL_RSSRC_EGD = 4 } ssl_rssrc_t; typedef struct { ssl_rsctx_t nCtx; ssl_rssrc_t nSrc; char *cpPath; int nBytes; } ssl_randseed_t; /** * Define the structure of an ASN.1 anything */ typedef struct { long int nData; unsigned char *cpData; apr_time_t source_mtime; } ssl_asn1_t; /** * Define the mod_ssl per-module configuration structure * (i.e. the global configuration for each httpd process) */ typedef struct SSLSrvConfigRec SSLSrvConfigRec; typedef struct SSLDirConfigRec SSLDirConfigRec; typedef enum { SSL_SHUTDOWN_TYPE_UNSET, SSL_SHUTDOWN_TYPE_STANDARD, SSL_SHUTDOWN_TYPE_UNCLEAN, SSL_SHUTDOWN_TYPE_ACCURATE } ssl_shutdown_type_e; typedef struct { SSL *ssl; const char *client_dn; X509 *client_cert; ssl_shutdown_type_e shutdown_type; const char *verify_info; const char *verify_error; int verify_depth; int is_proxy; int disabled; enum { NON_SSL_OK = 0, /* is SSL request, or error handling completed */ NON_SSL_SEND_REQLINE, /* Need to send the fake request line */ NON_SSL_SEND_HDR_SEP, /* Need to send the header separator */ NON_SSL_SET_ERROR_MSG /* Need to set the error message */ } non_ssl_request; /* Track the handshake/renegotiation state for the connection so * that all client-initiated renegotiations can be rejected, as a * partial fix for CVE-2009-3555. */ enum { RENEG_INIT = 0, /* Before initial handshake */ RENEG_REJECT, /* After initial handshake; any client-initiated * renegotiation should be rejected */ RENEG_ALLOW, /* A server-initiated renegotiation is taking * place (as dictated by configuration) */ RENEG_ABORT /* Renegotiation initiated by client, abort the * connection */ } reneg_state; server_rec *server; SSLDirConfigRec *dc; const char *cipher_suite; /* cipher suite used in last reneg */ int service_unavailable; /* thouugh we negotiate SSL, no requests will be served */ } SSLConnRec; /* BIG FAT WARNING: SSLModConfigRec has unusual memory lifetime: it is * allocated out of the "process" pool and only a single such * structure is created and used for the lifetime of the process. * (The process pool is s->process->pool and is stored in the .pPool * field.) Most members of this structure are likewise allocated out * of the process pool, but notably sesscache and sesscache_context * are not. * * The structure is treated as mostly immutable after a single config * parse has completed; the post_config hook (ssl_init_Module) flips * the bFixed flag to true and subsequent invocations of the config * callbacks hence do nothing. * * This odd lifetime strategy is used so that encrypted private keys * can be decrypted once at startup and continue to be used across * subsequent server reloads where the interactive password prompt is * not possible. * It is really an ABI nightmare waiting to happen since DSOs are * reloaded across restarts, and nothing prevents the struct type * changing across such reloads, yet the cached structure will be * assumed to match regardless. * * This should really be fixed using a smaller structure which only * stores that which is absolutely necessary (the private keys, maybe * the random seed), and have that structure be strictly ABI-versioned * for safety. */ typedef struct { pid_t pid; apr_pool_t *pPool; BOOL bFixed; /* OpenSSL SSL_SESS_CACHE_* flags: */ long sesscache_mode; /* The configured provider, and associated private data * structure. */ const ap_socache_provider_t *sesscache; ap_socache_instance_t *sesscache_context; apr_global_mutex_t *pMutex; apr_array_header_t *aRandSeed; apr_hash_t *tVHostKeys; /* A hash table of pointers to ssl_asn1_t structures. The structures * are used to store private keys in raw DER format (serialized OpenSSL * PrivateKey structures). The table is indexed by (vhost-id, * index), for example the string "vhost.example.com:443:0". */ apr_hash_t *tPrivateKey; #if defined(HAVE_OPENSSL_ENGINE_H) && defined(HAVE_ENGINE_INIT) const char *szCryptoDevice; #endif #ifdef HAVE_OCSP_STAPLING const ap_socache_provider_t *stapling_cache; ap_socache_instance_t *stapling_cache_context; apr_global_mutex_t *stapling_cache_mutex; apr_global_mutex_t *stapling_refresh_mutex; #endif } SSLModConfigRec; /** Structure representing configured filenames for certs and keys for * a given vhost */ typedef struct { /* Lists of configured certs and keys for this server */ apr_array_header_t *cert_files; apr_array_header_t *key_files; /** Certificates which specify the set of CA names which should be * sent in the CertificateRequest message: */ const char *ca_name_path; const char *ca_name_file; /* TLS service for this server is suspended */ int service_unavailable; } modssl_pk_server_t; typedef struct { /** proxy can have any number of cert/key pairs */ const char *cert_file; const char *cert_path; const char *ca_cert_file; STACK_OF(X509_INFO) *certs; /* Contains End Entity certs */ STACK_OF(X509) **ca_certs; /* Contains ONLY chain certs for * each item in certs. * (ptr to array of ptrs) */ } modssl_pk_proxy_t; /** stuff related to authentication that can also be per-dir */ typedef struct { /** known/trusted CAs */ const char *ca_cert_path; const char *ca_cert_file; const char *cipher_suite; /** for client or downstream server authentication */ int verify_depth; ssl_verify_t verify_mode; /** TLSv1.3 has its separate cipher list, separate from the settings for older TLS protocol versions. Since which one takes effect is a matter of negotiation, we need separate settings */ const char *tls13_ciphers; } modssl_auth_ctx_t; #ifdef HAVE_TLS_SESSION_TICKETS typedef struct { const char *file_path; unsigned char key_name[16]; unsigned char hmac_secret[16]; unsigned char aes_key[16]; } modssl_ticket_key_t; #endif #ifdef HAVE_SSL_CONF_CMD typedef struct { const char *name; const char *value; } ssl_ctx_param_t; #endif typedef struct { SSLSrvConfigRec *sc; /** pointer back to server config */ SSL_CTX *ssl_ctx; /** we are one or the other */ modssl_pk_server_t *pks; modssl_pk_proxy_t *pkp; #ifdef HAVE_TLS_SESSION_TICKETS modssl_ticket_key_t *ticket_key; #endif ssl_proto_t protocol; int protocol_set; /** config for handling encrypted keys */ ssl_pphrase_t pphrase_dialog_type; const char *pphrase_dialog_path; const char *cert_chain; /** certificate revocation list */ const char *crl_path; const char *crl_file; int crl_check_mask; #ifdef HAVE_OCSP_STAPLING /** OCSP stapling options */ BOOL stapling_enabled; long stapling_resptime_skew; long stapling_resp_maxage; int stapling_cache_timeout; BOOL stapling_return_errors; BOOL stapling_fake_trylater; int stapling_errcache_timeout; apr_interval_time_t stapling_responder_timeout; const char *stapling_force_url; #endif #ifdef HAVE_SRP char *srp_vfile; char *srp_unknown_user_seed; SRP_VBASE *srp_vbase; #endif modssl_auth_ctx_t auth; int ocsp_mask; BOOL ocsp_force_default; /* true if the default responder URL is * used regardless of per-cert URL */ const char *ocsp_responder; /* default responder URL */ long ocsp_resptime_skew; long ocsp_resp_maxage; apr_interval_time_t ocsp_responder_timeout; BOOL ocsp_use_request_nonce; apr_uri_t *proxy_uri; BOOL ocsp_noverify; /* true if skipping OCSP certification verification like openssl -noverify */ /* Declare variables for using OCSP Responder Certs for OCSP verification */ int ocsp_verify_flags; /* Flags to use when verifying OCSP response */ const char *ocsp_certs_file; /* OCSP other certificates filename */ STACK_OF(X509) *ocsp_certs; /* OCSP other certificates */ #ifdef HAVE_SSL_CONF_CMD SSL_CONF_CTX *ssl_ctx_config; /* Configuration context */ apr_array_header_t *ssl_ctx_param; /* parameters to pass to SSL_CTX */ #endif BOOL ssl_check_peer_cn; BOOL ssl_check_peer_name; BOOL ssl_check_peer_expire; } modssl_ctx_t; struct SSLSrvConfigRec { SSLModConfigRec *mc; ssl_enabled_t enabled; const char *vhost_id; int vhost_id_len; int session_cache_timeout; BOOL cipher_server_pref; BOOL insecure_reneg; modssl_ctx_t *server; #ifdef HAVE_TLSEXT ssl_enabled_t strict_sni_vhost_check; #endif #ifdef HAVE_FIPS BOOL fips; #endif #ifndef OPENSSL_NO_COMP BOOL compression; #endif BOOL session_tickets; }; /** * Define the mod_ssl per-directory configuration structure * (i.e. the local configuration for all <Directory> * and .htaccess contexts) */ struct SSLDirConfigRec { BOOL bSSLRequired; apr_array_header_t *aRequirement; ssl_opt_t nOptions; ssl_opt_t nOptionsAdd; ssl_opt_t nOptionsDel; const char *szCipherSuite; ssl_verify_t nVerifyClient; int nVerifyDepth; const char *szUserName; apr_size_t nRenegBufferSize; modssl_ctx_t *proxy; BOOL proxy_enabled; BOOL proxy_post_config; }; /** * function prototypes */ /** API glue structures */ extern module AP_MODULE_DECLARE_DATA ssl_module; /** configuration handling */ SSLModConfigRec *ssl_config_global_create(server_rec *); void ssl_config_global_fix(SSLModConfigRec *); BOOL ssl_config_global_isfixed(SSLModConfigRec *); void *ssl_config_server_create(apr_pool_t *, server_rec *); void *ssl_config_server_merge(apr_pool_t *, void *, void *); void *ssl_config_perdir_create(apr_pool_t *, char *); void *ssl_config_perdir_merge(apr_pool_t *, void *, void *); void ssl_config_proxy_merge(apr_pool_t *, SSLDirConfigRec *, SSLDirConfigRec *); const char *ssl_cmd_SSLPassPhraseDialog(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLCryptoDevice(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLRandomSeed(cmd_parms *, void *, const char *, const char *, const char *); const char *ssl_cmd_SSLEngine(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLCipherSuite(cmd_parms *, void *, const char *, const char *); const char *ssl_cmd_SSLCertificateFile(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLCertificateKeyFile(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLCertificateChainFile(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLCACertificatePath(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLCACertificateFile(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLCADNRequestPath(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLCADNRequestFile(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLCARevocationPath(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLCARevocationFile(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLCARevocationCheck(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLHonorCipherOrder(cmd_parms *cmd, void *dcfg, int flag); const char *ssl_cmd_SSLCompression(cmd_parms *, void *, int flag); const char *ssl_cmd_SSLSessionTickets(cmd_parms *, void *, int flag); const char *ssl_cmd_SSLVerifyClient(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLVerifyDepth(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLSessionCache(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLSessionCacheTimeout(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLProtocol(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLOptions(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLRequireSSL(cmd_parms *, void *); const char *ssl_cmd_SSLRequire(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLUserName(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLRenegBufferSize(cmd_parms *cmd, void *dcfg, const char *arg); const char *ssl_cmd_SSLStrictSNIVHostCheck(cmd_parms *cmd, void *dcfg, int flag); const char *ssl_cmd_SSLInsecureRenegotiation(cmd_parms *cmd, void *dcfg, int flag); const char *ssl_cmd_SSLProxyEngine(cmd_parms *cmd, void *dcfg, int flag); const char *ssl_cmd_SSLProxyProtocol(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLProxyCipherSuite(cmd_parms *, void *, const char *, const char *); const char *ssl_cmd_SSLProxyVerify(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLProxyVerifyDepth(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLProxyCACertificatePath(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLProxyCACertificateFile(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLProxyCARevocationPath(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLProxyCARevocationFile(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLProxyCARevocationCheck(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLProxyMachineCertificatePath(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLProxyMachineCertificateFile(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLProxyMachineCertificateChainFile(cmd_parms *, void *, const char *); #ifdef HAVE_TLS_SESSION_TICKETS const char *ssl_cmd_SSLSessionTicketKeyFile(cmd_parms *cmd, void *dcfg, const char *arg); #endif const char *ssl_cmd_SSLProxyCheckPeerExpire(cmd_parms *cmd, void *dcfg, int flag); const char *ssl_cmd_SSLProxyCheckPeerCN(cmd_parms *cmd, void *dcfg, int flag); const char *ssl_cmd_SSLProxyCheckPeerName(cmd_parms *cmd, void *dcfg, int flag); const char *ssl_cmd_SSLOCSPOverrideResponder(cmd_parms *cmd, void *dcfg, int flag); const char *ssl_cmd_SSLOCSPDefaultResponder(cmd_parms *cmd, void *dcfg, const char *arg); const char *ssl_cmd_SSLOCSPResponseTimeSkew(cmd_parms *cmd, void *dcfg, const char *arg); const char *ssl_cmd_SSLOCSPResponseMaxAge(cmd_parms *cmd, void *dcfg, const char *arg); const char *ssl_cmd_SSLOCSPResponderTimeout(cmd_parms *cmd, void *dcfg, const char *arg); const char *ssl_cmd_SSLOCSPUseRequestNonce(cmd_parms *cmd, void *dcfg, int flag); const char *ssl_cmd_SSLOCSPEnable(cmd_parms *cmd, void *dcfg, const char *arg); const char *ssl_cmd_SSLOCSPProxyURL(cmd_parms *cmd, void *dcfg, const char *arg); /* Declare OCSP Responder Certificate Verification Directive */ const char *ssl_cmd_SSLOCSPNoVerify(cmd_parms *cmd, void *dcfg, int flag); /* Declare OCSP Responder Certificate File Directive */ const char *ssl_cmd_SSLOCSPResponderCertificateFile(cmd_parms *cmd, void *dcfg, const char *arg); #ifdef HAVE_SSL_CONF_CMD const char *ssl_cmd_SSLOpenSSLConfCmd(cmd_parms *cmd, void *dcfg, const char *arg1, const char *arg2); #endif #ifdef HAVE_SRP const char *ssl_cmd_SSLSRPVerifierFile(cmd_parms *cmd, void *dcfg, const char *arg); const char *ssl_cmd_SSLSRPUnknownUserSeed(cmd_parms *cmd, void *dcfg, const char *arg); #endif const char *ssl_cmd_SSLFIPS(cmd_parms *cmd, void *dcfg, int flag); /** module initialization */ apr_status_t ssl_init_Module(apr_pool_t *, apr_pool_t *, apr_pool_t *, server_rec *); apr_status_t ssl_init_Engine(server_rec *, apr_pool_t *); apr_status_t ssl_init_ConfigureServer(server_rec *, apr_pool_t *, apr_pool_t *, SSLSrvConfigRec *, apr_array_header_t *); apr_status_t ssl_init_CheckServers(server_rec *, apr_pool_t *); int ssl_proxy_section_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s, ap_conf_vector_t *section_config); STACK_OF(X509_NAME) *ssl_init_FindCAList(server_rec *, apr_pool_t *, const char *, const char *); void ssl_init_Child(apr_pool_t *, server_rec *); apr_status_t ssl_init_ModuleKill(void *data); /** Apache API hooks */ int ssl_hook_Auth(request_rec *); int ssl_hook_UserCheck(request_rec *); int ssl_hook_Access(request_rec *); int ssl_hook_Fixup(request_rec *); int ssl_hook_ReadReq(request_rec *); int ssl_hook_Upgrade(request_rec *); void ssl_hook_ConfigTest(apr_pool_t *pconf, server_rec *s); /** Apache authz provisders */ extern const authz_provider ssl_authz_provider_require_ssl; extern const authz_provider ssl_authz_provider_verify_client; /** OpenSSL callbacks */ DH *ssl_callback_TmpDH(SSL *, int, int); int ssl_callback_SSLVerify(int, X509_STORE_CTX *); int ssl_callback_SSLVerify_CRL(int, X509_STORE_CTX *, conn_rec *); int ssl_callback_proxy_cert(SSL *ssl, X509 **x509, EVP_PKEY **pkey); int ssl_callback_NewSessionCacheEntry(SSL *, SSL_SESSION *); SSL_SESSION *ssl_callback_GetSessionCacheEntry(SSL *, IDCONST unsigned char *, int, int *); void ssl_callback_DelSessionCacheEntry(SSL_CTX *, SSL_SESSION *); void ssl_callback_Info(const SSL *, int, int); #ifdef HAVE_TLSEXT int ssl_callback_ServerNameIndication(SSL *, int *, modssl_ctx_t *); #endif #ifdef HAVE_TLS_SESSION_TICKETS int ssl_callback_SessionTicket(SSL *, unsigned char *, unsigned char *, EVP_CIPHER_CTX *, HMAC_CTX *, int); #endif #ifdef HAVE_TLS_ALPN int ssl_callback_alpn_select(SSL *ssl, const unsigned char **out, unsigned char *outlen, const unsigned char *in, unsigned int inlen, void *arg); #endif /** Session Cache Support */ apr_status_t ssl_scache_init(server_rec *, apr_pool_t *); void ssl_scache_status_register(apr_pool_t *p); void ssl_scache_kill(server_rec *); BOOL ssl_scache_store(server_rec *, IDCONST UCHAR *, int, apr_time_t, SSL_SESSION *, apr_pool_t *); SSL_SESSION *ssl_scache_retrieve(server_rec *, IDCONST UCHAR *, int, apr_pool_t *); void ssl_scache_remove(server_rec *, IDCONST UCHAR *, int, apr_pool_t *); /** OCSP Stapling Support */ #ifdef HAVE_OCSP_STAPLING const char *ssl_cmd_SSLStaplingCache(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLUseStapling(cmd_parms *, void *, int); const char *ssl_cmd_SSLStaplingResponseTimeSkew(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLStaplingResponseMaxAge(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLStaplingStandardCacheTimeout(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLStaplingErrorCacheTimeout(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLStaplingReturnResponderErrors(cmd_parms *, void *, int); const char *ssl_cmd_SSLStaplingFakeTryLater(cmd_parms *, void *, int); const char *ssl_cmd_SSLStaplingResponderTimeout(cmd_parms *, void *, const char *); const char *ssl_cmd_SSLStaplingForceURL(cmd_parms *, void *, const char *); apr_status_t modssl_init_stapling(server_rec *, apr_pool_t *, apr_pool_t *, modssl_ctx_t *); void ssl_stapling_certinfo_hash_init(apr_pool_t *); int ssl_stapling_init_cert(server_rec *, apr_pool_t *, apr_pool_t *, modssl_ctx_t *, X509 *); #endif #ifdef HAVE_SRP int ssl_callback_SRPServerParams(SSL *, int *, void *); #endif /** I/O */ void ssl_io_filter_init(conn_rec *, request_rec *r, SSL *); void ssl_io_filter_register(apr_pool_t *); long ssl_io_data_cb(BIO *, int, const char *, int, long, long); /* ssl_io_buffer_fill fills the setaside buffering of the HTTP request * to allow an SSL renegotiation to take place. */ int ssl_io_buffer_fill(request_rec *r, apr_size_t maxlen); /** PRNG */ int ssl_rand_seed(server_rec *, apr_pool_t *, ssl_rsctx_t, char *); /** Utility Functions */ char *ssl_util_vhostid(apr_pool_t *, server_rec *); apr_file_t *ssl_util_ppopen(server_rec *, apr_pool_t *, const char *, const char * const *); void ssl_util_ppclose(server_rec *, apr_pool_t *, apr_file_t *); char *ssl_util_readfilter(server_rec *, apr_pool_t *, const char *, const char * const *); BOOL ssl_util_path_check(ssl_pathcheck_t, const char *, apr_pool_t *); #if APR_HAS_THREADS && MODSSL_USE_OPENSSL_PRE_1_1_API void ssl_util_thread_setup(apr_pool_t *); void ssl_util_thread_id_setup(apr_pool_t *); #endif int ssl_init_ssl_connection(conn_rec *c, request_rec *r); BOOL ssl_util_vhost_matches(const char *servername, server_rec *s); /** Pass Phrase Support */ apr_status_t ssl_load_encrypted_pkey(server_rec *, apr_pool_t *, int, const char *, apr_array_header_t **); /** Diffie-Hellman Parameter Support */ DH *ssl_dh_GetParamFromFile(const char *); #ifdef HAVE_ECC EC_GROUP *ssl_ec_GetParamFromFile(const char *); #endif unsigned char *ssl_asn1_table_set(apr_hash_t *table, const char *key, long int length); ssl_asn1_t *ssl_asn1_table_get(apr_hash_t *table, const char *key); void ssl_asn1_table_unset(apr_hash_t *table, const char *key); /** Mutex Support */ int ssl_mutex_init(server_rec *, apr_pool_t *); int ssl_mutex_reinit(server_rec *, apr_pool_t *); int ssl_mutex_on(server_rec *); int ssl_mutex_off(server_rec *); int ssl_stapling_mutex_reinit(server_rec *, apr_pool_t *); /* mutex type names for Mutex directive */ #define SSL_CACHE_MUTEX_TYPE "ssl-cache" #define SSL_STAPLING_CACHE_MUTEX_TYPE "ssl-stapling" #define SSL_STAPLING_REFRESH_MUTEX_TYPE "ssl-stapling-refresh" apr_status_t ssl_die(server_rec *); /** Logfile Support */ void ssl_log_ssl_error(const char *, int, int, server_rec *); /* ssl_log_xerror, ssl_log_cxerror and ssl_log_rxerror are wrappers for the * respective ap_log_*error functions and take a certificate as an * additional argument (whose details are appended to the log message). * The other arguments are interpreted exactly as with their ap_log_*error * counterparts. */ void ssl_log_xerror(const char *file, int line, int level, apr_status_t rv, apr_pool_t *p, server_rec *s, X509 *cert, const char *format, ...) __attribute__((format(printf,8,9))); void ssl_log_cxerror(const char *file, int line, int level, apr_status_t rv, conn_rec *c, X509 *cert, const char *format, ...) __attribute__((format(printf,7,8))); void ssl_log_rxerror(const char *file, int line, int level, apr_status_t rv, request_rec *r, X509 *cert, const char *format, ...) __attribute__((format(printf,7,8))); #define SSLLOG_MARK __FILE__,__LINE__ /** Variables */ /* Register variables for the lifetime of the process pool 'p'. */ void ssl_var_register(apr_pool_t *p); char *ssl_var_lookup(apr_pool_t *, server_rec *, conn_rec *, request_rec *, char *); apr_array_header_t *ssl_ext_list(apr_pool_t *p, conn_rec *c, int peer, const char *extension); void ssl_var_log_config_register(apr_pool_t *p); /* Extract SSL_*_DN_* variables into table 't' from SSL object 'ssl', * allocating from 'p': */ void modssl_var_extract_dns(apr_table_t *t, SSL *ssl, apr_pool_t *p); /* Extract SSL_*_SAN_* variables (subjectAltName entries) into table 't' * from SSL object 'ssl', allocating from 'p'. */ void modssl_var_extract_san_entries(apr_table_t *t, SSL *ssl, apr_pool_t *p); #ifndef OPENSSL_NO_OCSP /* Perform OCSP validation of the current cert in the given context. * Returns non-zero on success or zero on failure. On failure, the * context error code is set. */ int modssl_verify_ocsp(X509_STORE_CTX *ctx, SSLSrvConfigRec *sc, server_rec *s, conn_rec *c, apr_pool_t *pool); /* OCSP helper interface; dispatches the given OCSP request to the * responder at the given URI. Returns the decoded OCSP response * object, or NULL on error (in which case, errors will have been * logged). Pool 'p' is used for temporary allocations. */ OCSP_RESPONSE *modssl_dispatch_ocsp_request(const apr_uri_t *uri, apr_interval_time_t timeout, OCSP_REQUEST *request, conn_rec *c, apr_pool_t *p); /* Initialize OCSP trusted certificate list */ void ssl_init_ocsp_certificates(server_rec *s, modssl_ctx_t *mctx); #endif /* Retrieve DH parameters for given key length. Return value should * be treated as unmutable, since it is stored in process-global * memory. */ DH *modssl_get_dh_params(unsigned keylen); /* Returns non-zero if the request was made over SSL/TLS. If sslconn * is non-NULL and the request is using SSL/TLS, sets *sslconn to the * corresponding SSLConnRec structure for the connection. */ int modssl_request_is_tls(const request_rec *r, SSLConnRec **sslconn); int ssl_is_challenge(conn_rec *c, const char *servername, X509 **pcert, EVP_PKEY **pkey); #endif /* SSL_PRIVATE_H */ /** @} */ httpd-2.4.41/modules/ssl/mod_ssl.h0000644000000000000500000001157513520024310015315 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_ssl.h * @brief SSL extension module for Apache * * @defgroup MOD_SSL mod_ssl * @ingroup APACHE_MODS * @{ */ #ifndef __MOD_SSL_H__ #define __MOD_SSL_H__ #include "httpd.h" #include "http_config.h" #include "apr_optional.h" #include "apr_tables.h" /* for apr_array_header_t */ /* Create a set of SSL_DECLARE(type), SSL_DECLARE_NONSTD(type) and * SSL_DECLARE_DATA with appropriate export and import tags for the platform */ #if !defined(WIN32) #define SSL_DECLARE(type) type #define SSL_DECLARE_NONSTD(type) type #define SSL_DECLARE_DATA #elif defined(SSL_DECLARE_STATIC) #define SSL_DECLARE(type) type __stdcall #define SSL_DECLARE_NONSTD(type) type #define SSL_DECLARE_DATA #elif defined(SSL_DECLARE_EXPORT) #define SSL_DECLARE(type) __declspec(dllexport) type __stdcall #define SSL_DECLARE_NONSTD(type) __declspec(dllexport) type #define SSL_DECLARE_DATA __declspec(dllexport) #else #define SSL_DECLARE(type) __declspec(dllimport) type __stdcall #define SSL_DECLARE_NONSTD(type) __declspec(dllimport) type #define SSL_DECLARE_DATA __declspec(dllimport) #endif /** The ssl_var_lookup() optional function retrieves SSL environment * variables. */ APR_DECLARE_OPTIONAL_FN(char *, ssl_var_lookup, (apr_pool_t *, server_rec *, conn_rec *, request_rec *, char *)); /** The ssl_ext_list() optional function attempts to build an array * of all the values contained in the named X.509 extension. The * returned array will be created in the supplied pool. * The client certificate is used if peer is non-zero; the server * certificate is used otherwise. * Extension specifies the extensions to use as a string. This can be * one of the "known" long or short names, or a numeric OID, * e.g. "1.2.3.4", 'nsComment' and 'DN' are all valid. * A pointer to an apr_array_header_t structure is returned if at * least one matching extension is found, NULL otherwise. */ APR_DECLARE_OPTIONAL_FN(apr_array_header_t *, ssl_ext_list, (apr_pool_t *p, conn_rec *c, int peer, const char *extension)); /** An optional function which returns non-zero if the given connection * is using SSL/TLS. */ APR_DECLARE_OPTIONAL_FN(int, ssl_is_https, (conn_rec *)); /** The ssl_proxy_enable() and ssl_engine_{set,disable}() optional * functions are used by mod_proxy to enable use of SSL for outgoing * connections. */ APR_DECLARE_OPTIONAL_FN(int, ssl_proxy_enable, (conn_rec *)); APR_DECLARE_OPTIONAL_FN(int, ssl_engine_disable, (conn_rec *)); APR_DECLARE_OPTIONAL_FN(int, ssl_engine_set, (conn_rec *, ap_conf_vector_t *, int proxy, int enable)); /* Check for availability of new hooks */ #define SSL_CERT_HOOKS #ifdef SSL_CERT_HOOKS /** Lets others add certificate and key files to the given server. * For each cert a key must also be added. * @param cert_file and array of const char* with the path to the certificate chain * @param key_file and array of const char* with the path to the private key file */ APR_DECLARE_EXTERNAL_HOOK(ssl, SSL, int, add_cert_files, (server_rec *s, apr_pool_t *p, apr_array_header_t *cert_files, apr_array_header_t *key_files)) /** In case no certificates are available for a server, this * lets other modules add a fallback certificate for the time * being. Regular requests against this server will be answered * with a 503. * @param cert_file and array of const char* with the path to the certificate chain * @param key_file and array of const char* with the path to the private key file */ APR_DECLARE_EXTERNAL_HOOK(ssl, SSL, int, add_fallback_cert_files, (server_rec *s, apr_pool_t *p, apr_array_header_t *cert_files, apr_array_header_t *key_files)) #endif /* SSL_CERT_HOOKS */ #endif /* __MOD_SSL_H__ */ /** @} */ httpd-2.4.41/modules/ssl/ssl_engine_ocsp.c0000644000000000000500000002637213325313705017037 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "ssl_private.h" #ifndef OPENSSL_NO_OCSP #include "apr_base64.h" /* Return the responder URI specified in the given certificate, or * NULL if none specified. */ static const char *extract_responder_uri(X509 *cert, apr_pool_t *pool) { STACK_OF(ACCESS_DESCRIPTION) *values; char *result = NULL; int j; values = X509_get_ext_d2i(cert, NID_info_access, NULL, NULL); if (!values) { return NULL; } for (j = 0; j < sk_ACCESS_DESCRIPTION_num(values) && !result; j++) { ACCESS_DESCRIPTION *value = sk_ACCESS_DESCRIPTION_value(values, j); /* Name found in extension, and is a URI: */ if (OBJ_obj2nid(value->method) == NID_ad_OCSP && value->location->type == GEN_URI) { result = apr_pstrdup(pool, (char *)value->location->d.uniformResourceIdentifier->data); } } AUTHORITY_INFO_ACCESS_free(values); return result; } /* Return the responder URI object which should be used in the given * configuration for the given certificate, or NULL if none can be * determined. */ static apr_uri_t *determine_responder_uri(SSLSrvConfigRec *sc, X509 *cert, conn_rec *c, apr_pool_t *p) { apr_uri_t *u = apr_palloc(p, sizeof *u); const char *s; apr_status_t rv; /* Use default responder URL if forced by configuration, else use * certificate-specified responder, falling back to default if * necessary and possible. */ if (sc->server->ocsp_force_default == TRUE) { s = sc->server->ocsp_responder; } else { s = extract_responder_uri(cert, p); if (s == NULL && sc->server->ocsp_responder) { s = sc->server->ocsp_responder; } } if (s == NULL) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(01918) "no OCSP responder specified in certificate and " "no default configured"); return NULL; } rv = apr_uri_parse(p, s, u); if (rv || !u->hostname) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, rv, c, APLOGNO(01919) "failed to parse OCSP responder URI '%s'", s); return NULL; } if (strcasecmp(u->scheme, "http") != 0) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, rv, c, APLOGNO(01920) "cannot handle OCSP responder URI '%s'", s); return NULL; } if (!u->port) { u->port = apr_uri_port_of_scheme(u->scheme); } return u; } /* Create an OCSP request for the given certificate; returning the * certificate ID in *certid and *issuer on success. Returns the * request object on success, or NULL on error. */ static OCSP_REQUEST *create_request(X509_STORE_CTX *ctx, X509 *cert, OCSP_CERTID **certid, server_rec *s, apr_pool_t *p, SSLSrvConfigRec *sc) { OCSP_REQUEST *req = OCSP_REQUEST_new(); *certid = OCSP_cert_to_id(NULL, cert, X509_STORE_CTX_get0_current_issuer(ctx)); if (!*certid || !OCSP_request_add0_id(req, *certid)) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01921) "could not retrieve certificate id"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, s); return NULL; } if (sc->server->ocsp_use_request_nonce != FALSE) { OCSP_request_add1_nonce(req, 0, -1); } return req; } /* Verify the OCSP status of given certificate. Returns * V_OCSP_CERTSTATUS_* result code. */ static int verify_ocsp_status(X509 *cert, X509_STORE_CTX *ctx, conn_rec *c, SSLSrvConfigRec *sc, server_rec *s, apr_pool_t *pool) { int rc = V_OCSP_CERTSTATUS_GOOD; OCSP_RESPONSE *response = NULL; OCSP_BASICRESP *basicResponse = NULL; OCSP_REQUEST *request = NULL; OCSP_CERTID *certID = NULL; apr_uri_t *ruri; ruri = determine_responder_uri(sc, cert, c, pool); if (!ruri) { if (sc->server->ocsp_mask & SSL_OCSPCHECK_NO_OCSP_FOR_CERT_OK) { ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, c, "Skipping OCSP check for certificate cos no OCSP URL" " found and no_ocsp_for_cert_ok is set"); return V_OCSP_CERTSTATUS_GOOD; } else { return V_OCSP_CERTSTATUS_UNKNOWN; } } request = create_request(ctx, cert, &certID, s, pool, sc); if (request) { apr_interval_time_t to = sc->server->ocsp_responder_timeout == UNSET ? apr_time_from_sec(DEFAULT_OCSP_TIMEOUT) : sc->server->ocsp_responder_timeout; response = modssl_dispatch_ocsp_request(ruri, to, request, c, pool); } if (!request || !response) { rc = V_OCSP_CERTSTATUS_UNKNOWN; } if (rc == V_OCSP_CERTSTATUS_GOOD) { int r = OCSP_response_status(response); if (r != OCSP_RESPONSE_STATUS_SUCCESSFUL) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01922) "OCSP response not successful: %d", r); rc = V_OCSP_CERTSTATUS_UNKNOWN; } } if (rc == V_OCSP_CERTSTATUS_GOOD) { basicResponse = OCSP_response_get1_basic(response); if (!basicResponse) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(01923) "could not retrieve OCSP basic response"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, s); rc = V_OCSP_CERTSTATUS_UNKNOWN; } } if (rc == V_OCSP_CERTSTATUS_GOOD && sc->server->ocsp_use_request_nonce != FALSE && OCSP_check_nonce(request, basicResponse) != 1) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01924) "Bad OCSP responder answer (bad nonce)"); rc = V_OCSP_CERTSTATUS_UNKNOWN; } if (rc == V_OCSP_CERTSTATUS_GOOD) { /* Check if OCSP certificate verification required */ if (sc->server->ocsp_noverify != TRUE) { /* Modify OCSP response verification to include OCSP Responder cert */ if (OCSP_basic_verify(basicResponse, sc->server->ocsp_certs, X509_STORE_CTX_get0_store(ctx), sc->server->ocsp_verify_flags) != 1) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01925) "failed to verify the OCSP response"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, s); rc = V_OCSP_CERTSTATUS_UNKNOWN; } } } if (rc == V_OCSP_CERTSTATUS_GOOD) { int reason = -1, status; ASN1_GENERALIZEDTIME *thisup = NULL, *nextup = NULL; rc = OCSP_resp_find_status(basicResponse, certID, &status, &reason, NULL, &thisup, &nextup); if (rc != 1) { ssl_log_cxerror(SSLLOG_MARK, APLOG_ERR, 0, c, cert, APLOGNO(02272) "failed to retrieve OCSP response status"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, s); rc = V_OCSP_CERTSTATUS_UNKNOWN; } else { rc = status; } /* Check whether the response is inside the defined validity * period; otherwise fail. */ if (rc != V_OCSP_CERTSTATUS_UNKNOWN) { long resptime_skew = sc->server->ocsp_resptime_skew == UNSET ? DEFAULT_OCSP_MAX_SKEW : sc->server->ocsp_resptime_skew; /* oscp_resp_maxage can be passed verbatim - UNSET (-1) means * that responses can be of any age as long as nextup is in the * future. */ int vrc = OCSP_check_validity(thisup, nextup, resptime_skew, sc->server->ocsp_resp_maxage); if (vrc != 1) { ssl_log_cxerror(SSLLOG_MARK, APLOG_ERR, 0, c, cert, APLOGNO(02273) "OCSP response outside validity period"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, s); rc = V_OCSP_CERTSTATUS_UNKNOWN; } } { int level = (status == V_OCSP_CERTSTATUS_GOOD) ? APLOG_INFO : APLOG_ERR; const char *result = status == V_OCSP_CERTSTATUS_GOOD ? "good" : (status == V_OCSP_CERTSTATUS_REVOKED ? "revoked" : "unknown"); ssl_log_cxerror(SSLLOG_MARK, level, 0, c, cert, APLOGNO(03239) "OCSP validation completed, " "certificate status: %s (%d, %d)", result, status, reason); } } if (request) OCSP_REQUEST_free(request); if (response) OCSP_RESPONSE_free(response); if (basicResponse) OCSP_BASICRESP_free(basicResponse); /* certID is freed when the request is freed */ return rc; } int modssl_verify_ocsp(X509_STORE_CTX *ctx, SSLSrvConfigRec *sc, server_rec *s, conn_rec *c, apr_pool_t *pool) { X509 *cert = X509_STORE_CTX_get_current_cert(ctx); apr_pool_t *vpool; int rv; if (!cert) { /* starting with OpenSSL 1.0, X509_STORE_CTX_get_current_cert() * may yield NULL. Return early, but leave the ctx error as is. */ ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, c, "No cert available to check with OCSP"); return 1; } else if (X509_check_issued(cert,cert) == X509_V_OK) { /* don't do OCSP checking for valid self-issued certs */ ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, c, "Skipping OCSP check for valid self-issued cert"); X509_STORE_CTX_set_error(ctx, X509_V_OK); return 1; } /* Create a temporary pool to constrain memory use (the passed-in * pool may be e.g. a connection pool). */ apr_pool_create(&vpool, pool); rv = verify_ocsp_status(cert, ctx, c, sc, s, vpool); apr_pool_destroy(vpool); /* Propagate the verification status back to the passed-in * context. */ switch (rv) { case V_OCSP_CERTSTATUS_GOOD: X509_STORE_CTX_set_error(ctx, X509_V_OK); break; case V_OCSP_CERTSTATUS_REVOKED: X509_STORE_CTX_set_error(ctx, X509_V_ERR_CERT_REVOKED); break; case V_OCSP_CERTSTATUS_UNKNOWN: /* correct error code for application errors? */ X509_STORE_CTX_set_error(ctx, X509_V_ERR_APPLICATION_VERIFICATION); break; } return rv == V_OCSP_CERTSTATUS_GOOD; } #endif /* HAVE_OCSP */ httpd-2.4.41/modules/ssl/Makefile.in0000644000000000000500000000151511465263264015565 0ustar rootsrc# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # standard stuff # include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/ssl/ssl_engine_kernel.c0000644000000000000500000030373013520024310017333 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* _ _ * _ __ ___ ___ __| | ___ ___| | mod_ssl * | '_ ` _ \ / _ \ / _` | / __/ __| | Apache Interface to OpenSSL * | | | | | | (_) | (_| | \__ \__ \ | * |_| |_| |_|\___/ \__,_|___|___/___/_| * |_____| * ssl_engine_kernel.c * The SSL engine kernel */ /* ``It took me fifteen years to discover I had no talent for programming, but I couldn't give it up because by that time I was too famous.'' -- Unknown */ #include "ssl_private.h" #include "mod_ssl.h" #include "util_md5.h" #include "scoreboard.h" static void ssl_configure_env(request_rec *r, SSLConnRec *sslconn); #ifdef HAVE_TLSEXT static int ssl_find_vhost(void *servername, conn_rec *c, server_rec *s); #endif #define SWITCH_STATUS_LINE "HTTP/1.1 101 Switching Protocols" #define UPGRADE_HEADER "Upgrade: TLS/1.0, HTTP/1.1" #define CONNECTION_HEADER "Connection: Upgrade" /* Perform an upgrade-to-TLS for the given request, per RFC 2817. */ static apr_status_t upgrade_connection(request_rec *r) { struct conn_rec *conn = r->connection; apr_bucket_brigade *bb; SSLConnRec *sslconn; apr_status_t rv; SSL *ssl; ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02028) "upgrading connection to TLS"); bb = apr_brigade_create(r->pool, conn->bucket_alloc); rv = ap_fputs(conn->output_filters, bb, SWITCH_STATUS_LINE CRLF UPGRADE_HEADER CRLF CONNECTION_HEADER CRLF CRLF); if (rv == APR_SUCCESS) { APR_BRIGADE_INSERT_TAIL(bb, apr_bucket_flush_create(conn->bucket_alloc)); rv = ap_pass_brigade(conn->output_filters, bb); } if (rv) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02029) "failed to send 101 interim response for connection " "upgrade"); return rv; } ssl_init_ssl_connection(conn, r); sslconn = myConnConfig(conn); ssl = sslconn->ssl; /* Perform initial SSL handshake. */ SSL_set_accept_state(ssl); SSL_do_handshake(ssl); if (!SSL_is_init_finished(ssl)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02030) "TLS upgrade handshake failed"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, r->server); return APR_ECONNABORTED; } return APR_SUCCESS; } /* Perform a speculative (and non-blocking) read from the connection * filters for the given request, to determine whether there is any * pending data to read. Return non-zero if there is, else zero. */ static int has_buffered_data(request_rec *r) { apr_bucket_brigade *bb; apr_off_t len; apr_status_t rv; int result; bb = apr_brigade_create(r->pool, r->connection->bucket_alloc); rv = ap_get_brigade(r->connection->input_filters, bb, AP_MODE_SPECULATIVE, APR_NONBLOCK_READ, 1); result = rv == APR_SUCCESS && apr_brigade_length(bb, 1, &len) == APR_SUCCESS && len > 0; apr_brigade_destroy(bb); return result; } #ifdef HAVE_TLSEXT static int ap_array_same_str_set(apr_array_header_t *s1, apr_array_header_t *s2) { int i; const char *c; if (s1 == s2) { return 1; } else if (!s1 || !s2 || (s1->nelts != s2->nelts)) { return 0; } for (i = 0; i < s1->nelts; i++) { c = APR_ARRAY_IDX(s1, i, const char *); if (!c || !ap_array_str_contains(s2, c)) { return 0; } } return 1; } static int ssl_pk_server_compatible(modssl_pk_server_t *pks1, modssl_pk_server_t *pks2) { if (!pks1 || !pks2) { return 0; } /* both have the same certificates? */ if ((pks1->ca_name_path != pks2->ca_name_path) && (!pks1->ca_name_path || !pks2->ca_name_path || strcmp(pks1->ca_name_path, pks2->ca_name_path))) { return 0; } if ((pks1->ca_name_file != pks2->ca_name_file) && (!pks1->ca_name_file || !pks2->ca_name_file || strcmp(pks1->ca_name_file, pks2->ca_name_file))) { return 0; } if (!ap_array_same_str_set(pks1->cert_files, pks2->cert_files) || !ap_array_same_str_set(pks1->key_files, pks2->key_files)) { return 0; } return 1; } static int ssl_auth_compatible(modssl_auth_ctx_t *a1, modssl_auth_ctx_t *a2) { if (!a1 || !a2) { return 0; } /* both have the same verification */ if ((a1->verify_depth != a2->verify_depth) || (a1->verify_mode != a2->verify_mode)) { return 0; } /* both have the same ca path/file */ if ((a1->ca_cert_path != a2->ca_cert_path) && (!a1->ca_cert_path || !a2->ca_cert_path || strcmp(a1->ca_cert_path, a2->ca_cert_path))) { return 0; } if ((a1->ca_cert_file != a2->ca_cert_file) && (!a1->ca_cert_file || !a2->ca_cert_file || strcmp(a1->ca_cert_file, a2->ca_cert_file))) { return 0; } /* both have the same ca cipher suite string */ if ((a1->cipher_suite != a2->cipher_suite) && (!a1->cipher_suite || !a2->cipher_suite || strcmp(a1->cipher_suite, a2->cipher_suite))) { return 0; } /* both have the same ca cipher suite string */ if ((a1->tls13_ciphers != a2->tls13_ciphers) && (!a1->tls13_ciphers || !a2->tls13_ciphers || strcmp(a1->tls13_ciphers, a2->tls13_ciphers))) { return 0; } return 1; } static int ssl_ctx_compatible(modssl_ctx_t *ctx1, modssl_ctx_t *ctx2) { if (!ctx1 || !ctx2 || (ctx1->protocol != ctx2->protocol) || !ssl_auth_compatible(&ctx1->auth, &ctx2->auth) || !ssl_pk_server_compatible(ctx1->pks, ctx2->pks)) { return 0; } return 1; } static int ssl_server_compatible(server_rec *s1, server_rec *s2) { SSLSrvConfigRec *sc1 = s1? mySrvConfig(s1) : NULL; SSLSrvConfigRec *sc2 = s2? mySrvConfig(s2) : NULL; /* both use the same TLS protocol? */ if (!sc1 || !sc2 || !ssl_ctx_compatible(sc1->server, sc2->server)) { return 0; } return 1; } #endif /* * Post Read Request Handler */ int ssl_hook_ReadReq(request_rec *r) { SSLSrvConfigRec *sc = mySrvConfig(r->server); SSLConnRec *sslconn; const char *upgrade; #ifdef HAVE_TLSEXT const char *servername; #endif SSL *ssl; /* Perform TLS upgrade here if "SSLEngine optional" is configured, * SSL is not already set up for this connection, and the client * has sent a suitable Upgrade header. */ if (sc->enabled == SSL_ENABLED_OPTIONAL && !myConnConfig(r->connection) && (upgrade = apr_table_get(r->headers_in, "Upgrade")) != NULL && ap_find_token(r->pool, upgrade, "TLS/1.0")) { if (upgrade_connection(r)) { return AP_FILTER_ERROR; } } /* If we are on a slave connection, we do not expect to have an SSLConnRec, * but our master connection might. */ sslconn = myConnConfig(r->connection); if (!(sslconn && sslconn->ssl) && r->connection->master) { sslconn = myConnConfig(r->connection->master); } /* If "SSLEngine optional" is configured, this is not an SSL * connection, and this isn't a subrequest, send an Upgrade * response header. Note this must happen before map_to_storage * and OPTIONS * request processing is completed. */ if (sc->enabled == SSL_ENABLED_OPTIONAL && !(sslconn && sslconn->ssl) && !r->main) { apr_table_setn(r->headers_out, "Upgrade", "TLS/1.0, HTTP/1.1"); apr_table_mergen(r->headers_out, "Connection", "upgrade"); } if (!sslconn) { return DECLINED; } if (sslconn->service_unavailable) { /* This is set when the SSL properties of this connection are * incomplete or if this connection was made to challenge a * particular hostname (ACME). We never serve any request on * such a connection. */ /* TODO: a retry-after indicator would be nice here */ return HTTP_SERVICE_UNAVAILABLE; } if (sslconn->non_ssl_request == NON_SSL_SET_ERROR_MSG) { apr_table_setn(r->notes, "error-notes", "Reason: You're speaking plain HTTP to an SSL-enabled " "server port.
    \n Instead use the HTTPS scheme to " "access this URL, please.
    \n"); /* Now that we have caught this error, forget it. we are done * with using SSL on this request. */ sslconn->non_ssl_request = NON_SSL_OK; return HTTP_BAD_REQUEST; } /* * Get the SSL connection structure and perform the * delayed interlinking from SSL back to request_rec */ ssl = sslconn->ssl; if (!ssl) { return DECLINED; } #ifdef HAVE_TLSEXT /* * Perform SNI checks only on the initial request. In particular, * if these checks detect a problem, the checks shouldn't return an * error again when processing an ErrorDocument redirect for the * original problem. */ if (r->proxyreq != PROXYREQ_PROXY && ap_is_initial_req(r)) { server_rec *handshakeserver = sslconn->server; SSLSrvConfigRec *hssc = mySrvConfig(handshakeserver); if ((servername = SSL_get_servername(ssl, TLSEXT_NAMETYPE_host_name))) { /* * The SNI extension supplied a hostname. So don't accept requests * with either no hostname or a hostname that selected a different * virtual host than the one used for the handshake, causing * different SSL parameters to be applied, such as SSLProtocol, * SSLCACertificateFile/Path and SSLCADNRequestFile/Path which * cannot be renegotiated (SSLCA* due to current limitations in * OpenSSL, see: * http://mail-archives.apache.org/mod_mbox/httpd-dev/200806.mbox/%3C48592955.2090303@velox.ch%3E * and * http://mail-archives.apache.org/mod_mbox/httpd-dev/201312.mbox/%3CCAKQ1sVNpOrdiBm-UPw1hEdSN7YQXRRjeaT-MCWbW_7mN%3DuFiOw%40mail.gmail.com%3E * ) */ if (!r->hostname) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02031) "Hostname %s provided via SNI, but no hostname" " provided in HTTP request", servername); return HTTP_BAD_REQUEST; } if (r->server != handshakeserver && !ssl_server_compatible(sslconn->server, r->server)) { /* * The request does not select the virtual host that was * selected by the SNI and its SSL parameters are different */ ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02032) "Hostname %s provided via SNI and hostname %s provided" " via HTTP have no compatible SSL setup", servername, r->hostname); return HTTP_MISDIRECTED_REQUEST; } } else if (((sc->strict_sni_vhost_check == SSL_ENABLED_TRUE) || hssc->strict_sni_vhost_check == SSL_ENABLED_TRUE) && r->connection->vhost_lookup_data) { /* * We are using a name based configuration here, but no hostname was * provided via SNI. Don't allow that if are requested to do strict * checking. Check whether this strict checking was set up either in the * server config we used for handshaking or in our current server. * This should avoid insecure configuration by accident. */ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02033) "No hostname was provided via SNI for a name based" " virtual host"); apr_table_setn(r->notes, "error-notes", "Reason: The client software did not provide a " "hostname using Server Name Indication (SNI), " "which is required to access this server.
    \n"); return HTTP_FORBIDDEN; } } #endif modssl_set_app_data2(ssl, r); /* * Log information about incoming HTTPS requests */ if (APLOGrinfo(r) && ap_is_initial_req(r)) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02034) "%s HTTPS request received for child %ld (server %s)", (r->connection->keepalives <= 0 ? "Initial (No.1)" : apr_psprintf(r->pool, "Subsequent (No.%d)", r->connection->keepalives+1)), r->connection->id, ssl_util_vhostid(r->pool, r->server)); } /* SetEnvIf ssl-*-shutdown flags can only be per-server, * so they won't change across keepalive requests */ if (sslconn->shutdown_type == SSL_SHUTDOWN_TYPE_UNSET) { ssl_configure_env(r, sslconn); } return DECLINED; } /* * Move SetEnvIf information from request_rec to conn_rec/BUFF * to allow the close connection handler to use them. */ static void ssl_configure_env(request_rec *r, SSLConnRec *sslconn) { int i; const apr_array_header_t *arr = apr_table_elts(r->subprocess_env); const apr_table_entry_t *elts = (const apr_table_entry_t *)arr->elts; sslconn->shutdown_type = SSL_SHUTDOWN_TYPE_STANDARD; for (i = 0; i < arr->nelts; i++) { const char *key = elts[i].key; switch (*key) { case 's': /* being case-sensitive here. * and not checking for the -shutdown since these are the only * SetEnvIf "flags" we support */ if (!strncmp(key+1, "sl-", 3)) { key += 4; if (!strncmp(key, "unclean", 7)) { sslconn->shutdown_type = SSL_SHUTDOWN_TYPE_UNCLEAN; } else if (!strncmp(key, "accurate", 8)) { sslconn->shutdown_type = SSL_SHUTDOWN_TYPE_ACCURATE; } return; /* should only ever be one ssl-*-shutdown */ } break; } } } static int ssl_check_post_client_verify(request_rec *r, SSLSrvConfigRec *sc, SSLDirConfigRec *dc, SSLConnRec *sslconn, SSL *ssl) { X509 *cert; /* * Remember the peer certificate's DN */ if ((cert = SSL_get_peer_certificate(ssl))) { if (sslconn->client_cert) { X509_free(sslconn->client_cert); } sslconn->client_cert = cert; sslconn->client_dn = NULL; } /* * Finally check for acceptable renegotiation results */ if ((dc->nVerifyClient != SSL_CVERIFY_NONE) || (sc->server->auth.verify_mode != SSL_CVERIFY_NONE)) { BOOL do_verify = ((dc->nVerifyClient == SSL_CVERIFY_REQUIRE) || (sc->server->auth.verify_mode == SSL_CVERIFY_REQUIRE)); if (do_verify && (SSL_get_verify_result(ssl) != X509_V_OK)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02262) "Re-negotiation handshake failed: " "Client verification failed"); return HTTP_FORBIDDEN; } if (do_verify) { if (cert == NULL) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02263) "Re-negotiation handshake failed: " "Client certificate missing"); return HTTP_FORBIDDEN; } } } return OK; } /* * Access Handler, classic flavour, for SSL/TLS up to v1.2 * where everything can be renegotiated and no one is happy. */ static int ssl_hook_Access_classic(request_rec *r, SSLSrvConfigRec *sc, SSLDirConfigRec *dc, SSLConnRec *sslconn, SSL *ssl) { server_rec *handshakeserver = sslconn ? sslconn->server : NULL; SSLSrvConfigRec *hssc = handshakeserver? mySrvConfig(handshakeserver) : NULL; SSL_CTX *ctx = ssl ? SSL_get_SSL_CTX(ssl) : NULL; BOOL renegotiate = FALSE, renegotiate_quick = FALSE; X509 *peercert; X509_STORE *cert_store = NULL; X509_STORE_CTX *cert_store_ctx; STACK_OF(SSL_CIPHER) *cipher_list_old = NULL, *cipher_list = NULL; const SSL_CIPHER *cipher = NULL; int depth, verify_old, verify, n, rc; const char *ncipher_suite; #ifdef HAVE_SRP /* * Support for per-directory reconfigured SSL connection parameters * * We do not force any renegotiation if the user is already authenticated * via SRP. * */ if (SSL_get_srp_username(ssl)) { return DECLINED; } #endif /* * Support for per-directory reconfigured SSL connection parameters. * * This is implemented by forcing an SSL renegotiation with the * reconfigured parameter suite. But Apache's internal API processing * makes our life very hard here, because when internal sub-requests occur * we nevertheless should avoid multiple unnecessary SSL handshakes (they * require extra network I/O and especially time to perform). * * But the optimization for filtering out the unnecessary handshakes isn't * obvious and trivial. Especially because while Apache is in its * sub-request processing the client could force additional handshakes, * too. And these take place perhaps without our notice. So the only * possibility is to explicitly _ask_ OpenSSL whether the renegotiation * has to be performed or not. It has to performed when some parameters * which were previously known (by us) are not those we've now * reconfigured (as known by OpenSSL) or (in optimized way) at least when * the reconfigured parameter suite is stronger (more restrictions) than * the currently active one. */ /* * Override of SSLCipherSuite * * We provide two options here: * * o The paranoid and default approach where we force a renegotiation when * the cipher suite changed in _any_ way (which is straight-forward but * often forces renegotiations too often and is perhaps not what the * user actually wanted). * * o The optimized and still secure way where we force a renegotiation * only if the currently active cipher is no longer contained in the * reconfigured/new cipher suite. Any other changes are not important * because it's the servers choice to select a cipher from the ones the * client supports. So as long as the current cipher is still in the new * cipher suite we're happy. Because we can assume we would have * selected it again even when other (better) ciphers exists now in the * new cipher suite. This approach is fine because the user explicitly * has to enable this via ``SSLOptions +OptRenegotiate''. So we do no * implicit optimizations. */ ncipher_suite = (dc->szCipherSuite? dc->szCipherSuite : (r->server != handshakeserver)? sc->server->auth.cipher_suite : NULL); if (ncipher_suite && (!sslconn->cipher_suite || strcmp(ncipher_suite, sslconn->cipher_suite))) { /* remember old state */ if (dc->nOptions & SSL_OPT_OPTRENEGOTIATE) { cipher = SSL_get_current_cipher(ssl); } else { cipher_list_old = (STACK_OF(SSL_CIPHER) *)SSL_get_ciphers(ssl); if (cipher_list_old) { cipher_list_old = sk_SSL_CIPHER_dup(cipher_list_old); } } /* configure new state */ if (r->connection->master) { /* TODO: this categorically fails changed cipher suite settings * on slave connections. We could do better by * - create a new SSL* from our SSL_CTX and set cipher suite there, * and retrieve ciphers, free afterwards * Modifying the SSL on a slave connection is no good. */ apr_table_setn(r->notes, "ssl-renegotiate-forbidden", "cipher-suite"); return HTTP_FORBIDDEN; } if (!SSL_set_cipher_list(ssl, ncipher_suite)) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02253) "Unable to reconfigure (per-directory) " "permitted SSL ciphers"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, r->server); if (cipher_list_old) { sk_SSL_CIPHER_free(cipher_list_old); } return HTTP_FORBIDDEN; } /* determine whether a renegotiation has to be forced */ cipher_list = (STACK_OF(SSL_CIPHER) *)SSL_get_ciphers(ssl); if (dc->nOptions & SSL_OPT_OPTRENEGOTIATE) { /* optimized way */ if ((!cipher && cipher_list) || (cipher && !cipher_list)) { renegotiate = TRUE; } else if (cipher && cipher_list && (sk_SSL_CIPHER_find(cipher_list, cipher) < 0)) { renegotiate = TRUE; } } else { /* paranoid way */ if ((!cipher_list_old && cipher_list) || (cipher_list_old && !cipher_list)) { renegotiate = TRUE; } else if (cipher_list_old && cipher_list) { for (n = 0; !renegotiate && (n < sk_SSL_CIPHER_num(cipher_list)); n++) { const SSL_CIPHER *value = sk_SSL_CIPHER_value(cipher_list, n); if (sk_SSL_CIPHER_find(cipher_list_old, value) < 0) { renegotiate = TRUE; } } for (n = 0; !renegotiate && (n < sk_SSL_CIPHER_num(cipher_list_old)); n++) { const SSL_CIPHER *value = sk_SSL_CIPHER_value(cipher_list_old, n); if (sk_SSL_CIPHER_find(cipher_list, value) < 0) { renegotiate = TRUE; } } } } /* cleanup */ if (cipher_list_old) { sk_SSL_CIPHER_free(cipher_list_old); } if (renegotiate) { if (r->connection->master) { /* The request causes renegotiation on a slave connection. * This is not allowed since we might have concurrent requests * on this connection. */ apr_table_setn(r->notes, "ssl-renegotiate-forbidden", "cipher-suite"); return HTTP_FORBIDDEN; } #ifdef SSL_OP_CIPHER_SERVER_PREFERENCE if (sc->cipher_server_pref == TRUE) { SSL_set_options(ssl, SSL_OP_CIPHER_SERVER_PREFERENCE); } #endif /* tracing */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02220) "Reconfigured cipher suite will force renegotiation"); } } /* * override of SSLVerifyClient * * We force a renegotiation if the reconfigured/new verify type is * stronger than the currently active verify type. * * The order is: none << optional_no_ca << optional << require * * Additionally the following optimization is possible here: When the * currently active verify type is "none" but a client certificate is * already known/present, it's enough to manually force a client * verification but at least skip the I/O-intensive renegotiation * handshake. */ if ((dc->nVerifyClient != SSL_CVERIFY_UNSET) || (sc->server->auth.verify_mode != SSL_CVERIFY_UNSET)) { /* remember old state */ verify_old = SSL_get_verify_mode(ssl); /* configure new state */ verify = SSL_VERIFY_NONE; if ((dc->nVerifyClient == SSL_CVERIFY_REQUIRE) || (sc->server->auth.verify_mode == SSL_CVERIFY_REQUIRE)) { verify |= SSL_VERIFY_PEER_STRICT; } if ((dc->nVerifyClient == SSL_CVERIFY_OPTIONAL) || (dc->nVerifyClient == SSL_CVERIFY_OPTIONAL_NO_CA) || (sc->server->auth.verify_mode == SSL_CVERIFY_OPTIONAL) || (sc->server->auth.verify_mode == SSL_CVERIFY_OPTIONAL_NO_CA)) { verify |= SSL_VERIFY_PEER; } /* TODO: this seems premature since we do not know if there * are any changes required. */ SSL_set_verify(ssl, verify, ssl_callback_SSLVerify); SSL_set_verify_result(ssl, X509_V_OK); /* determine whether we've to force a renegotiation */ if (!renegotiate && verify != verify_old) { if (((verify_old == SSL_VERIFY_NONE) && (verify != SSL_VERIFY_NONE)) || (!(verify_old & SSL_VERIFY_PEER) && (verify & SSL_VERIFY_PEER)) || (!(verify_old & SSL_VERIFY_FAIL_IF_NO_PEER_CERT) && (verify & SSL_VERIFY_FAIL_IF_NO_PEER_CERT))) { renegotiate = TRUE; if (r->connection->master) { /* The request causes renegotiation on a slave connection. * This is not allowed since we might have concurrent requests * on this connection. */ apr_table_setn(r->notes, "ssl-renegotiate-forbidden", "verify-client"); SSL_set_verify(ssl, verify_old, ssl_callback_SSLVerify); return HTTP_FORBIDDEN; } /* optimization */ if ((dc->nOptions & SSL_OPT_OPTRENEGOTIATE) && (verify_old == SSL_VERIFY_NONE) && ((peercert = SSL_get_peer_certificate(ssl)) != NULL)) { renegotiate_quick = TRUE; X509_free(peercert); } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02255) "Changed client verification type will force " "%srenegotiation", renegotiate_quick ? "quick " : ""); } else if (verify != SSL_VERIFY_NONE) { /* * override of SSLVerifyDepth * * The depth checks are handled by us manually inside the * verify callback function and not by OpenSSL internally * (and our function is aware of both the per-server and * per-directory contexts). So we cannot ask OpenSSL about * the currently verify depth. Instead we remember it in our * SSLConnRec attached to the SSL* of OpenSSL. We've to force * the renegotiation if the reconfigured/new verify depth is * less than the currently active/remembered verify depth * (because this means more restriction on the certificate * chain). */ n = (sslconn->verify_depth != UNSET) ? sslconn->verify_depth : hssc->server->auth.verify_depth; /* determine the new depth */ sslconn->verify_depth = (dc->nVerifyDepth != UNSET) ? dc->nVerifyDepth : sc->server->auth.verify_depth; if (sslconn->verify_depth < n) { renegotiate = TRUE; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02254) "Reduced client verification depth will " "force renegotiation"); } } } /* If we're handling a request for a vhost other than the default one, * then we need to make sure that client authentication is properly * enforced. For clients supplying an SNI extension, the peer * certificate verification has happened in the handshake already * (and r->server == handshakeserver). For non-SNI requests, * an additional check is needed here. If client authentication * is configured as mandatory, then we can only proceed if the * CA list doesn't have to be changed (OpenSSL doesn't provide * an option to change the list for an existing session). */ if ((r->server != handshakeserver) && renegotiate && ((verify & SSL_VERIFY_PEER) || (verify & SSL_VERIFY_FAIL_IF_NO_PEER_CERT))) { #define MODSSL_CFG_CA_NE(f, sc1, sc2) \ (sc1->server->auth.f && \ (!sc2->server->auth.f || \ strNE(sc1->server->auth.f, sc2->server->auth.f))) if (MODSSL_CFG_CA_NE(ca_cert_file, sc, hssc) || MODSSL_CFG_CA_NE(ca_cert_path, sc, hssc)) { if (verify & SSL_VERIFY_FAIL_IF_NO_PEER_CERT) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02256) "Non-default virtual host with SSLVerify set to " "'require' and VirtualHost-specific CA certificate " "list is only available to clients with TLS server " "name indication (SNI) support"); SSL_set_verify(ssl, verify_old, NULL); return HTTP_FORBIDDEN; } else /* let it pass, possibly with an "incorrect" peer cert, * so make sure the SSL_CLIENT_VERIFY environment variable * will indicate partial success only, later on. */ sslconn->verify_info = "GENEROUS"; } } } /* If a renegotiation is now required for this location, and the * request includes a message body (and the client has not * requested a "100 Continue" response), then the client will be * streaming the request body over the wire already. In that * case, it is not possible to stop and perform a new SSL * handshake immediately; once the SSL library moves to the * "accept" state, it will reject the SSL packets which the client * is sending for the request body. * * To allow authentication to complete in this auth hook, the * solution used here is to fill a (bounded) buffer with the * request body, and then to reinject that request body later. */ if (renegotiate && !renegotiate_quick && !r->expecting_100 && ap_request_has_body(r)) { int rv; apr_size_t rsize; rsize = dc->nRenegBufferSize == UNSET ? DEFAULT_RENEG_BUFFER_SIZE : dc->nRenegBufferSize; if (rsize > 0) { /* Fill the I/O buffer with the request body if possible. */ rv = ssl_io_buffer_fill(r, rsize); } else { /* If the reneg buffer size is set to zero, just fail. */ rv = HTTP_REQUEST_ENTITY_TOO_LARGE; } if (rv) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02257) "could not buffer message body to allow " "SSL renegotiation to proceed"); return rv; } } /* * now do the renegotiation if anything was actually reconfigured */ if (renegotiate) { /* * Now we force the SSL renegotiation by sending the Hello Request * message to the client. Here we have to do a workaround: Actually * OpenSSL returns immediately after sending the Hello Request (the * intent AFAIK is because the SSL/TLS protocol says it's not a must * that the client replies to a Hello Request). But because we insist * on a reply (anything else is an error for us) we have to go to the * ACCEPT state manually. Using SSL_set_accept_state() doesn't work * here because it resets too much of the connection. So we set the * state explicitly and continue the handshake manually. */ ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02221) "Requesting connection re-negotiation"); if (renegotiate_quick) { STACK_OF(X509) *cert_stack; X509 *cert; /* perform just a manual re-verification of the peer */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02258) "Performing quick renegotiation: " "just re-verifying the peer"); cert_stack = (STACK_OF(X509) *)SSL_get_peer_cert_chain(ssl); cert = SSL_get_peer_certificate(ssl); if (!cert_stack || (sk_X509_num(cert_stack) == 0)) { if (!cert) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02222) "Cannot find peer certificate chain"); return HTTP_FORBIDDEN; } /* client cert is in the session cache, but there is * no chain, since ssl3_get_client_certificate() * sk_X509_shift-ed the peer cert out of the chain. * we put it back here for the purpose of quick_renegotiation. */ cert_stack = sk_X509_new_null(); sk_X509_push(cert_stack, cert); } if (!(cert_store || (cert_store = SSL_CTX_get_cert_store(ctx)))) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02223) "Cannot find certificate storage"); return HTTP_FORBIDDEN; } if (!cert) { cert = sk_X509_value(cert_stack, 0); } cert_store_ctx = X509_STORE_CTX_new(); X509_STORE_CTX_init(cert_store_ctx, cert_store, cert, cert_stack); depth = SSL_get_verify_depth(ssl); if (depth >= 0) { X509_STORE_CTX_set_depth(cert_store_ctx, depth); } X509_STORE_CTX_set_ex_data(cert_store_ctx, SSL_get_ex_data_X509_STORE_CTX_idx(), (char *)ssl); if (!X509_verify_cert(cert_store_ctx)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02224) "Re-negotiation verification step failed"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, r->server); } SSL_set_verify_result(ssl, X509_STORE_CTX_get_error(cert_store_ctx)); X509_STORE_CTX_cleanup(cert_store_ctx); X509_STORE_CTX_free(cert_store_ctx); if (cert_stack != SSL_get_peer_cert_chain(ssl)) { /* we created this ourselves, so free it */ sk_X509_pop_free(cert_stack, X509_free); } } else { char peekbuf[1]; const char *reneg_support; request_rec *id = r->main ? r->main : r; /* Additional mitigation for CVE-2009-3555: At this point, * before renegotiating, an (entire) request has been read * from the connection. An attacker may have sent further * data to "prefix" any subsequent request by the victim's * client after the renegotiation; this data may already * have been read and buffered. Forcing a connection * closure after the response ensures such data will be * discarded. Legimately pipelined HTTP requests will be * retried anyway with this approach. */ if (has_buffered_data(r)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02259) "insecure SSL re-negotiation required, but " "a pipelined request is present; keepalive " "disabled"); r->connection->keepalive = AP_CONN_CLOSE; } #if defined(SSL_get_secure_renegotiation_support) reneg_support = SSL_get_secure_renegotiation_support(ssl) ? "client does" : "client does not"; #else reneg_support = "server does not"; #endif /* Perform a full renegotiation. */ ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02260) "Performing full renegotiation: complete handshake " "protocol (%s support secure renegotiation)", reneg_support); SSL_set_session_id_context(ssl, (unsigned char *)&id, sizeof(id)); /* Toggle the renegotiation state to allow the new * handshake to proceed. */ sslconn->reneg_state = RENEG_ALLOW; SSL_renegotiate(ssl); SSL_do_handshake(ssl); if (!SSL_is_init_finished(ssl)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02225) "Re-negotiation request failed"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, r->server); r->connection->keepalive = AP_CONN_CLOSE; return HTTP_FORBIDDEN; } ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02226) "Awaiting re-negotiation handshake"); /* XXX: Should replace setting state with SSL_renegotiate(ssl); * However, this causes failures in perl-framework currently, * perhaps pre-test if we have already negotiated? */ /* Need to trigger renegotiation handshake by reading. * Peeking 0 bytes actually works. * See: http://marc.info/?t=145493359200002&r=1&w=2 */ SSL_peek(ssl, peekbuf, 0); sslconn->reneg_state = RENEG_REJECT; if (!SSL_is_init_finished(ssl)) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02261) "Re-negotiation handshake failed"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, r->server); r->connection->keepalive = AP_CONN_CLOSE; return HTTP_FORBIDDEN; } /* Full renegotiation successful, we now have handshaken with * this server's parameters. */ sslconn->server = r->server; } /* * Finally check for acceptable renegotiation results */ if (OK != (rc = ssl_check_post_client_verify(r, sc, dc, sslconn, ssl))) { return rc; } /* * Also check that SSLCipherSuite has been enforced as expected. */ if (cipher_list) { cipher = SSL_get_current_cipher(ssl); if (sk_SSL_CIPHER_find(cipher_list, cipher) < 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02264) "SSL cipher suite not renegotiated: " "access to %s denied using cipher %s", r->filename, SSL_CIPHER_get_name(cipher)); return HTTP_FORBIDDEN; } } /* remember any new cipher suite used in renegotiation */ if (ncipher_suite) { sslconn->cipher_suite = ncipher_suite; } } return DECLINED; } #if SSL_HAVE_PROTOCOL_TLSV1_3 /* * Access Handler, modern flavour, for SSL/TLS v1.3 and onward. * Only client certificates can be requested, everything else stays. */ static int ssl_hook_Access_modern(request_rec *r, SSLSrvConfigRec *sc, SSLDirConfigRec *dc, SSLConnRec *sslconn, SSL *ssl) { if ((dc->nVerifyClient != SSL_CVERIFY_UNSET) || (sc->server->auth.verify_mode != SSL_CVERIFY_UNSET)) { int vmode_inplace, vmode_needed; int change_vmode = FALSE; int old_state, n, rc; vmode_inplace = SSL_get_verify_mode(ssl); vmode_needed = SSL_VERIFY_NONE; if ((dc->nVerifyClient == SSL_CVERIFY_REQUIRE) || (sc->server->auth.verify_mode == SSL_CVERIFY_REQUIRE)) { vmode_needed |= SSL_VERIFY_PEER_STRICT; } if ((dc->nVerifyClient == SSL_CVERIFY_OPTIONAL) || (dc->nVerifyClient == SSL_CVERIFY_OPTIONAL_NO_CA) || (sc->server->auth.verify_mode == SSL_CVERIFY_OPTIONAL) || (sc->server->auth.verify_mode == SSL_CVERIFY_OPTIONAL_NO_CA)) { vmode_needed |= SSL_VERIFY_PEER; } if (vmode_needed == SSL_VERIFY_NONE) { return DECLINED; } vmode_needed |= SSL_VERIFY_CLIENT_ONCE; if (vmode_inplace != vmode_needed) { /* Need to change, if new setting is more restrictive than existing one */ if ((vmode_inplace == SSL_VERIFY_NONE) || (!(vmode_inplace & SSL_VERIFY_PEER) && (vmode_needed & SSL_VERIFY_PEER)) || (!(vmode_inplace & SSL_VERIFY_FAIL_IF_NO_PEER_CERT) && (vmode_needed & SSL_VERIFY_FAIL_IF_NO_PEER_CERT))) { /* need to change the effective verify mode */ change_vmode = TRUE; } else { /* FIXME: does this work with TLSv1.3? Is this more than re-inspecting * the certificate we should already have? */ /* * override of SSLVerifyDepth * * The depth checks are handled by us manually inside the * verify callback function and not by OpenSSL internally * (and our function is aware of both the per-server and * per-directory contexts). So we cannot ask OpenSSL about * the currently verify depth. Instead we remember it in our * SSLConnRec attached to the SSL* of OpenSSL. We've to force * the renegotiation if the reconfigured/new verify depth is * less than the currently active/remembered verify depth * (because this means more restriction on the certificate * chain). */ n = (sslconn->verify_depth != UNSET)? sslconn->verify_depth : sc->server->auth.verify_depth; /* determine the new depth */ sslconn->verify_depth = (dc->nVerifyDepth != UNSET) ? dc->nVerifyDepth : sc->server->auth.verify_depth; if (sslconn->verify_depth < n) { change_vmode = TRUE; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(10128) "Reduced client verification depth will " "force renegotiation"); } } } if (change_vmode) { char peekbuf[1]; if (r->connection->master) { /* FIXME: modifying the SSL on a slave connection is no good. * We would need to push this back to the master connection * somehow. */ apr_table_setn(r->notes, "ssl-renegotiate-forbidden", "verify-client"); return HTTP_FORBIDDEN; } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(10129) "verify client post handshake"); SSL_set_verify(ssl, vmode_needed, ssl_callback_SSLVerify); if (SSL_verify_client_post_handshake(ssl) != 1) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(10158) "cannot perform post-handshake authentication"); ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, r->server); apr_table_setn(r->notes, "error-notes", "Reason: Cannot perform Post-Handshake Authentication.
    "); SSL_set_verify(ssl, vmode_inplace, NULL); return HTTP_FORBIDDEN; } old_state = sslconn->reneg_state; sslconn->reneg_state = RENEG_ALLOW; modssl_set_app_data2(ssl, r); SSL_do_handshake(ssl); /* Need to trigger renegotiation handshake by reading. * Peeking 0 bytes actually works. * See: http://marc.info/?t=145493359200002&r=1&w=2 */ SSL_peek(ssl, peekbuf, 0); sslconn->reneg_state = old_state; modssl_set_app_data2(ssl, NULL); /* * Finally check for acceptable renegotiation results */ if (OK != (rc = ssl_check_post_client_verify(r, sc, dc, sslconn, ssl))) { SSL_set_verify(ssl, vmode_inplace, NULL); return rc; } } } return DECLINED; } #endif int ssl_hook_Access(request_rec *r) { SSLDirConfigRec *dc = myDirConfig(r); SSLSrvConfigRec *sc = mySrvConfig(r->server); SSLConnRec *sslconn = myConnConfig(r->connection); SSL *ssl = sslconn ? sslconn->ssl : NULL; apr_array_header_t *requires; ssl_require_t *ssl_requires; int ok, i, ret; /* On a slave connection, we do not expect to have an SSLConnRec, but * our master connection might have one. */ if (!(sslconn && ssl) && r->connection->master) { sslconn = myConnConfig(r->connection->master); ssl = sslconn ? sslconn->ssl : NULL; } /* * We should have handshaken here, otherwise we are being * redirected (ErrorDocument) from a renegotiation failure below. * The access is still forbidden in the latter case, let ap_die() handle * this recursive (same) error. */ if (ssl && !SSL_is_init_finished(ssl)) { return HTTP_FORBIDDEN; } /* * Support for SSLRequireSSL directive */ if (dc->bSSLRequired && !ssl) { if ((sc->enabled == SSL_ENABLED_OPTIONAL) && !r->connection->master) { /* This vhost was configured for optional SSL, just tell the * client that we need to upgrade. */ apr_table_setn(r->err_headers_out, "Upgrade", "TLS/1.0, HTTP/1.1"); apr_table_setn(r->err_headers_out, "Connection", "Upgrade"); return HTTP_UPGRADE_REQUIRED; } ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02219) "access to %s failed, reason: %s", r->filename, "SSL connection required"); /* remember forbidden access for strict require option */ apr_table_setn(r->notes, "ssl-access-forbidden", "1"); return HTTP_FORBIDDEN; } /* * Check to see whether SSL is in use; if it's not, then no * further access control checks are relevant. (the test for * sc->enabled is probably strictly unnecessary) */ if (sc->enabled == SSL_ENABLED_FALSE || !ssl) { return DECLINED; } #if SSL_HAVE_PROTOCOL_TLSV1_3 /* TLSv1.3+ is less complicated here. Branch off into a new codeline * and avoid messing with the past. */ if (SSL_version(ssl) >= TLS1_3_VERSION) { ret = ssl_hook_Access_modern(r, sc, dc, sslconn, ssl); } else #endif { ret = ssl_hook_Access_classic(r, sc, dc, sslconn, ssl); } if (ret != DECLINED) { return ret; } /* If we're trying to have the user name set from a client * certificate then we need to set it here. This should be safe as * the user name probably isn't important from an auth checking point * of view as the certificate supplied acts in that capacity. * However, if FakeAuth is being used then this isn't the case so * we need to postpone setting the username until later. */ if ((dc->nOptions & SSL_OPT_FAKEBASICAUTH) == 0 && dc->szUserName) { char *val = ssl_var_lookup(r->pool, r->server, r->connection, r, (char *)dc->szUserName); if (val && val[0]) r->user = val; else ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(02227) "Failed to set r->user to '%s'", dc->szUserName); } /* * Check SSLRequire boolean expressions */ requires = dc->aRequirement; ssl_requires = (ssl_require_t *)requires->elts; for (i = 0; i < requires->nelts; i++) { ssl_require_t *req = &ssl_requires[i]; const char *errstring; ok = ap_expr_exec(r, req->mpExpr, &errstring); if (ok < 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02265) "access to %s failed, reason: Failed to execute " "SSL requirement expression: %s", r->filename, errstring); /* remember forbidden access for strict require option */ apr_table_setn(r->notes, "ssl-access-forbidden", "1"); return HTTP_FORBIDDEN; } if (ok != 1) { ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02266) "Access to %s denied for %s " "(requirement expression not fulfilled)", r->filename, r->useragent_ip); ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02228) "Failed expression: %s", req->cpExpr); ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02229) "access to %s failed, reason: %s", r->filename, "SSL requirement expression not fulfilled"); /* remember forbidden access for strict require option */ apr_table_setn(r->notes, "ssl-access-forbidden", "1"); return HTTP_FORBIDDEN; } } /* * Else access is granted from our point of view (except vendor * handlers override). But we have to return DECLINED here instead * of OK, because mod_auth and other modules still might want to * deny access. */ return DECLINED; } /* * Authentication Handler: * Fake a Basic authentication from the X509 client certificate. * * This must be run fairly early on to prevent a real authentication from * occurring, in particular it must be run before anything else that * authenticates a user. This means that the Module statement for this * module should be LAST in the Configuration file. */ int ssl_hook_UserCheck(request_rec *r) { SSLConnRec *sslconn; SSLDirConfigRec *dc = myDirConfig(r); char *clientdn; const char *auth_line, *username, *password; /* * Additionally forbid access (again) * when strict require option is used. */ if ((dc->nOptions & SSL_OPT_STRICTREQUIRE) && (apr_table_get(r->notes, "ssl-access-forbidden"))) { return HTTP_FORBIDDEN; } /* * We decline when we are in a subrequest. The Authorization header * would already be present if it was added in the main request. */ if (!ap_is_initial_req(r)) { return DECLINED; } /* * Make sure the user is not able to fake the client certificate * based authentication by just entering an X.509 Subject DN * ("/XX=YYY/XX=YYY/..") as the username and "password" as the * password. */ if ((auth_line = apr_table_get(r->headers_in, "Authorization"))) { if (strcEQ(ap_getword(r->pool, &auth_line, ' '), "Basic")) { while ((*auth_line == ' ') || (*auth_line == '\t')) { auth_line++; } auth_line = ap_pbase64decode(r->pool, auth_line); username = ap_getword_nulls(r->pool, &auth_line, ':'); password = auth_line; if ((username[0] == '/') && strEQ(password, "password")) { ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02035) "Encountered FakeBasicAuth spoof: %s", username); return HTTP_FORBIDDEN; } } } /* * We decline operation in various situations... * - TLS not enabled * - client did not present a certificate * - SSLOptions +FakeBasicAuth not configured * - r->user already authenticated */ if (!modssl_request_is_tls(r, &sslconn) || !sslconn->client_cert || !(dc->nOptions & SSL_OPT_FAKEBASICAUTH) || r->user) { return DECLINED; } if (!sslconn->client_dn) { X509_NAME *name = X509_get_subject_name(sslconn->client_cert); char *cp = X509_NAME_oneline(name, NULL, 0); sslconn->client_dn = apr_pstrdup(r->connection->pool, cp); OPENSSL_free(cp); } clientdn = (char *)sslconn->client_dn; /* * Fake a password - which one would be immaterial, as, it seems, an empty * password in the users file would match ALL incoming passwords, if only * we were using the standard crypt library routine. Unfortunately, OpenSSL * "fixes" a "bug" in crypt and thus prevents blank passwords from * working. (IMHO what they really fix is a bug in the users of the code * - failing to program correctly for shadow passwords). We need, * therefore, to provide a password. This password can be matched by * adding the string "xxj31ZMTZzkVA" as the password in the user file. * This is just the crypted variant of the word "password" ;-) */ auth_line = apr_pstrcat(r->pool, "Basic ", ap_pbase64encode(r->pool, apr_pstrcat(r->pool, clientdn, ":password", NULL)), NULL); apr_table_setn(r->headers_in, "Authorization", auth_line); ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02036) "Faking HTTP Basic Auth header: \"Authorization: %s\"", auth_line); return DECLINED; } /* authorization phase */ int ssl_hook_Auth(request_rec *r) { SSLDirConfigRec *dc = myDirConfig(r); /* * Additionally forbid access (again) * when strict require option is used. */ if ((dc->nOptions & SSL_OPT_STRICTREQUIRE) && (apr_table_get(r->notes, "ssl-access-forbidden"))) { return HTTP_FORBIDDEN; } return DECLINED; } /* * Fixup Handler */ static const char *const ssl_hook_Fixup_vars[] = { "SSL_VERSION_INTERFACE", "SSL_VERSION_LIBRARY", "SSL_PROTOCOL", "SSL_SECURE_RENEG", "SSL_COMPRESS_METHOD", "SSL_CIPHER", "SSL_CIPHER_EXPORT", "SSL_CIPHER_USEKEYSIZE", "SSL_CIPHER_ALGKEYSIZE", "SSL_CLIENT_VERIFY", "SSL_CLIENT_M_VERSION", "SSL_CLIENT_M_SERIAL", "SSL_CLIENT_V_START", "SSL_CLIENT_V_END", "SSL_CLIENT_V_REMAIN", "SSL_CLIENT_S_DN", "SSL_CLIENT_I_DN", "SSL_CLIENT_A_KEY", "SSL_CLIENT_A_SIG", "SSL_CLIENT_CERT_RFC4523_CEA", "SSL_SERVER_M_VERSION", "SSL_SERVER_M_SERIAL", "SSL_SERVER_V_START", "SSL_SERVER_V_END", "SSL_SERVER_S_DN", "SSL_SERVER_I_DN", "SSL_SERVER_A_KEY", "SSL_SERVER_A_SIG", "SSL_SESSION_ID", "SSL_SESSION_RESUMED", #ifdef HAVE_SRP "SSL_SRP_USER", "SSL_SRP_USERINFO", #endif NULL }; int ssl_hook_Fixup(request_rec *r) { SSLDirConfigRec *dc = myDirConfig(r); apr_table_t *env = r->subprocess_env; char *var, *val = ""; #ifdef HAVE_TLSEXT const char *servername; #endif STACK_OF(X509) *peer_certs; SSLConnRec *sslconn; SSL *ssl; int i; if (!modssl_request_is_tls(r, &sslconn)) { return DECLINED; } ssl = sslconn->ssl; /* * Annotate the SSI/CGI environment with standard SSL information */ /* the always present HTTPS (=HTTP over SSL) flag! */ apr_table_setn(env, "HTTPS", "on"); #ifdef HAVE_TLSEXT /* add content of SNI TLS extension (if supplied with ClientHello) */ if ((servername = SSL_get_servername(ssl, TLSEXT_NAMETYPE_host_name))) { apr_table_set(env, "SSL_TLS_SNI", servername); } #endif /* standard SSL environment variables */ if (dc->nOptions & SSL_OPT_STDENVVARS) { modssl_var_extract_dns(env, ssl, r->pool); modssl_var_extract_san_entries(env, ssl, r->pool); for (i = 0; ssl_hook_Fixup_vars[i]; i++) { var = (char *)ssl_hook_Fixup_vars[i]; val = ssl_var_lookup(r->pool, r->server, r->connection, r, var); if (!strIsEmpty(val)) { apr_table_setn(env, var, val); } } } /* * On-demand bloat up the SSI/CGI environment with certificate data */ if (dc->nOptions & SSL_OPT_EXPORTCERTDATA) { val = ssl_var_lookup(r->pool, r->server, r->connection, r, "SSL_SERVER_CERT"); apr_table_setn(env, "SSL_SERVER_CERT", val); val = ssl_var_lookup(r->pool, r->server, r->connection, r, "SSL_CLIENT_CERT"); apr_table_setn(env, "SSL_CLIENT_CERT", val); if ((peer_certs = (STACK_OF(X509) *)SSL_get_peer_cert_chain(ssl))) { for (i = 0; i < sk_X509_num(peer_certs); i++) { var = apr_psprintf(r->pool, "SSL_CLIENT_CERT_CHAIN_%d", i); val = ssl_var_lookup(r->pool, r->server, r->connection, r, var); if (val) { apr_table_setn(env, var, val); } } } } #ifdef SSL_get_secure_renegotiation_support apr_table_setn(r->notes, "ssl-secure-reneg", SSL_get_secure_renegotiation_support(ssl) ? "1" : "0"); #endif return DECLINED; } /* _________________________________________________________________ ** ** Authz providers for use with mod_authz_core ** _________________________________________________________________ */ static authz_status ssl_authz_require_ssl_check(request_rec *r, const char *require_line, const void *parsed) { if (modssl_request_is_tls(r, NULL)) return AUTHZ_GRANTED; else return AUTHZ_DENIED; } static const char *ssl_authz_require_ssl_parse(cmd_parms *cmd, const char *require_line, const void **parsed) { if (require_line && require_line[0]) return "'Require ssl' does not take arguments"; return NULL; } const authz_provider ssl_authz_provider_require_ssl = { &ssl_authz_require_ssl_check, &ssl_authz_require_ssl_parse, }; static authz_status ssl_authz_verify_client_check(request_rec *r, const char *require_line, const void *parsed) { SSLConnRec *sslconn = myConnConfig(r->connection); SSL *ssl = sslconn ? sslconn->ssl : NULL; if (!ssl) return AUTHZ_DENIED; if (sslconn->verify_error == NULL && sslconn->verify_info == NULL && SSL_get_verify_result(ssl) == X509_V_OK) { X509 *xs = SSL_get_peer_certificate(ssl); if (xs) { X509_free(xs); return AUTHZ_GRANTED; } else { X509_free(xs); } } return AUTHZ_DENIED; } static const char *ssl_authz_verify_client_parse(cmd_parms *cmd, const char *require_line, const void **parsed) { if (require_line && require_line[0]) return "'Require ssl-verify-client' does not take arguments"; return NULL; } const authz_provider ssl_authz_provider_verify_client = { &ssl_authz_verify_client_check, &ssl_authz_verify_client_parse, }; /* _________________________________________________________________ ** ** OpenSSL Callback Functions ** _________________________________________________________________ */ /* * Hand out standard DH parameters, based on the authentication strength */ DH *ssl_callback_TmpDH(SSL *ssl, int export, int keylen) { conn_rec *c = (conn_rec *)SSL_get_app_data(ssl); EVP_PKEY *pkey; int type; #ifdef SSL_CERT_SET_SERVER /* * When multiple certs/keys are configured for the SSL_CTX: make sure * that we get the private key which is indeed used for the current * SSL connection (available in OpenSSL 1.0.2 or later only) */ SSL_set_current_cert(ssl, SSL_CERT_SET_SERVER); #endif pkey = SSL_get_privatekey(ssl); #if OPENSSL_VERSION_NUMBER < 0x10100000L type = pkey ? EVP_PKEY_type(pkey->type) : EVP_PKEY_NONE; #else type = pkey ? EVP_PKEY_base_id(pkey) : EVP_PKEY_NONE; #endif /* * OpenSSL will call us with either keylen == 512 or keylen == 1024 * (see the definition of SSL_EXPORT_PKEYLENGTH in ssl_locl.h). * Adjust the DH parameter length according to the size of the * RSA/DSA private key used for the current connection, and always * use at least 1024-bit parameters. * Note: This may cause interoperability issues with implementations * which limit their DH support to 1024 bit - e.g. Java 7 and earlier. * In this case, SSLCertificateFile can be used to specify fixed * 1024-bit DH parameters (with the effect that OpenSSL skips this * callback). */ if ((type == EVP_PKEY_RSA) || (type == EVP_PKEY_DSA)) { keylen = EVP_PKEY_bits(pkey); } ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, c, "handing out built-in DH parameters for %d-bit authenticated connection", keylen); return modssl_get_dh_params(keylen); } /* * This OpenSSL callback function is called when OpenSSL * does client authentication and verifies the certificate chain. */ int ssl_callback_SSLVerify(int ok, X509_STORE_CTX *ctx) { /* Get Apache context back through OpenSSL context */ SSL *ssl = X509_STORE_CTX_get_ex_data(ctx, SSL_get_ex_data_X509_STORE_CTX_idx()); conn_rec *conn = (conn_rec *)SSL_get_app_data(ssl); request_rec *r = (request_rec *)modssl_get_app_data2(ssl); server_rec *s = r ? r->server : mySrvFromConn(conn); SSLSrvConfigRec *sc = mySrvConfig(s); SSLConnRec *sslconn = myConnConfig(conn); SSLDirConfigRec *dc = r ? myDirConfig(r) : sslconn->dc; modssl_ctx_t *mctx = myCtxConfig(sslconn, sc); int crl_check_mode = mctx->crl_check_mask & ~SSL_CRLCHECK_FLAGS; /* Get verify ingredients */ int errnum = X509_STORE_CTX_get_error(ctx); int errdepth = X509_STORE_CTX_get_error_depth(ctx); int depth = UNSET; int verify = SSL_CVERIFY_UNSET; /* * Log verification information */ ssl_log_cxerror(SSLLOG_MARK, APLOG_DEBUG, 0, conn, X509_STORE_CTX_get_current_cert(ctx), APLOGNO(02275) "Certificate Verification, depth %d, " "CRL checking mode: %s (%x)", errdepth, crl_check_mode == SSL_CRLCHECK_CHAIN ? "chain" : crl_check_mode == SSL_CRLCHECK_LEAF ? "leaf" : "none", mctx->crl_check_mask); /* * Check for optionally acceptable non-verifiable issuer situation */ if (dc) { if (sslconn->is_proxy) { verify = dc->proxy->auth.verify_mode; } else { verify = dc->nVerifyClient; } } if (!dc || (verify == SSL_CVERIFY_UNSET)) { verify = mctx->auth.verify_mode; } if (verify == SSL_CVERIFY_NONE) { /* * SSLProxyVerify is either not configured or set to "none". * (this callback doesn't happen in the server context if SSLVerify * is not configured or set to "none") */ return TRUE; } if (ssl_verify_error_is_optional(errnum) && (verify == SSL_CVERIFY_OPTIONAL_NO_CA)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, conn, APLOGNO(02037) "Certificate Verification: Verifiable Issuer is " "configured as optional, therefore we're accepting " "the certificate"); sslconn->verify_info = "GENEROUS"; ok = TRUE; } /* * Expired certificates vs. "expired" CRLs: by default, OpenSSL * turns X509_V_ERR_CRL_HAS_EXPIRED into a "certificate_expired(45)" * SSL alert, but that's not really the message we should convey to the * peer (at the very least, it's confusing, and in many cases, it's also * inaccurate, as the certificate itself may very well not have expired * yet). We set the X509_STORE_CTX error to something which OpenSSL's * s3_both.c:ssl_verify_alarm_type() maps to SSL_AD_CERTIFICATE_UNKNOWN, * i.e. the peer will receive a "certificate_unknown(46)" alert. * We do not touch errnum, though, so that later on we will still log * the "real" error, as returned by OpenSSL. */ if (!ok && errnum == X509_V_ERR_CRL_HAS_EXPIRED) { X509_STORE_CTX_set_error(ctx, -1); } if (!ok && errnum == X509_V_ERR_UNABLE_TO_GET_CRL && (mctx->crl_check_mask & SSL_CRLCHECK_NO_CRL_FOR_CERT_OK)) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, conn, "Certificate Verification: Temporary error (%d): %s: " "optional therefore we're accepting the certificate", errnum, X509_verify_cert_error_string(errnum)); X509_STORE_CTX_set_error(ctx, X509_V_OK); errnum = X509_V_OK; ok = TRUE; } #ifndef OPENSSL_NO_OCSP /* * Perform OCSP-based revocation checks */ if (ok && ((sc->server->ocsp_mask & SSL_OCSPCHECK_CHAIN) || (errdepth == 0 && (sc->server->ocsp_mask & SSL_OCSPCHECK_LEAF)))) { /* If there was an optional verification error, it's not * possible to perform OCSP validation since the issuer may be * missing/untrusted. Fail in that case. */ if (ssl_verify_error_is_optional(errnum)) { X509_STORE_CTX_set_error(ctx, X509_V_ERR_APPLICATION_VERIFICATION); errnum = X509_V_ERR_APPLICATION_VERIFICATION; ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, conn, APLOGNO(02038) "cannot perform OCSP validation for cert " "if issuer has not been verified " "(optional_no_ca configured)"); ok = FALSE; } else { ok = modssl_verify_ocsp(ctx, sc, s, conn, conn->pool); if (!ok) { errnum = X509_STORE_CTX_get_error(ctx); } } } #endif /* * If we already know it's not ok, log the real reason */ if (!ok) { if (APLOGcinfo(conn)) { ssl_log_cxerror(SSLLOG_MARK, APLOG_INFO, 0, conn, X509_STORE_CTX_get_current_cert(ctx), APLOGNO(02276) "Certificate Verification: Error (%d): %s", errnum, X509_verify_cert_error_string(errnum)); } else { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, conn, APLOGNO(02039) "Certificate Verification: Error (%d): %s", errnum, X509_verify_cert_error_string(errnum)); } if (sslconn->client_cert) { X509_free(sslconn->client_cert); sslconn->client_cert = NULL; } sslconn->client_dn = NULL; sslconn->verify_error = X509_verify_cert_error_string(errnum); } /* * Finally check the depth of the certificate verification */ if (dc) { if (sslconn->is_proxy) { depth = dc->proxy->auth.verify_depth; } else { depth = dc->nVerifyDepth; } } if (!dc || (depth == UNSET)) { depth = mctx->auth.verify_depth; } if (errdepth > depth) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, conn, APLOGNO(02040) "Certificate Verification: Certificate Chain too long " "(chain has %d certificates, but maximum allowed are " "only %d)", errdepth, depth); errnum = X509_V_ERR_CERT_CHAIN_TOO_LONG; sslconn->verify_error = X509_verify_cert_error_string(errnum); ok = FALSE; } /* * And finally signal OpenSSL the (perhaps changed) state */ return ok; } #define SSLPROXY_CERT_CB_LOG_FMT \ "Proxy client certificate callback: (%s) " static void modssl_proxy_info_log(conn_rec *c, X509_INFO *info, const char *msg) { ssl_log_cxerror(SSLLOG_MARK, APLOG_DEBUG, 0, c, info->x509, APLOGNO(02277) SSLPROXY_CERT_CB_LOG_FMT "%s, sending", (mySrvConfigFromConn(c))->vhost_id, msg); } /* * caller will decrement the cert and key reference * so we need to increment here to prevent them from * being freed. */ #if MODSSL_USE_OPENSSL_PRE_1_1_API #define modssl_set_cert_info(info, cert, pkey) \ *cert = info->x509; \ CRYPTO_add(&(*cert)->references, +1, CRYPTO_LOCK_X509); \ *pkey = info->x_pkey->dec_pkey; \ CRYPTO_add(&(*pkey)->references, +1, CRYPTO_LOCK_X509_PKEY) #else #define modssl_set_cert_info(info, cert, pkey) \ *cert = info->x509; \ X509_up_ref(*cert); \ *pkey = info->x_pkey->dec_pkey; \ EVP_PKEY_up_ref(*pkey); #endif int ssl_callback_proxy_cert(SSL *ssl, X509 **x509, EVP_PKEY **pkey) { conn_rec *c = (conn_rec *)SSL_get_app_data(ssl); server_rec *s = mySrvFromConn(c); SSLSrvConfigRec *sc = mySrvConfig(s); SSLDirConfigRec *dc = myDirConfigFromConn(c); X509_NAME *ca_name, *issuer, *ca_issuer; X509_INFO *info; X509 *ca_cert; STACK_OF(X509_NAME) *ca_list; STACK_OF(X509_INFO) *certs; STACK_OF(X509) *ca_certs; STACK_OF(X509) **ca_cert_chains; int i, j, k; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02267) SSLPROXY_CERT_CB_LOG_FMT "entered", sc->vhost_id); certs = (dc && dc->proxy) ? dc->proxy->pkp->certs : NULL; if (!certs || (sk_X509_INFO_num(certs) <= 0)) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s, APLOGNO(02268) SSLPROXY_CERT_CB_LOG_FMT "downstream server wanted client certificate " "but none are configured", sc->vhost_id); return FALSE; } ca_list = SSL_get_client_CA_list(ssl); if (!ca_list || (sk_X509_NAME_num(ca_list) <= 0)) { /* * downstream server didn't send us a list of acceptable CA certs, * so we send the first client cert in the list. */ info = sk_X509_INFO_value(certs, 0); modssl_proxy_info_log(c, info, APLOGNO(02278) "no acceptable CA list"); modssl_set_cert_info(info, x509, pkey); return TRUE; } ca_cert_chains = dc->proxy->pkp->ca_certs; for (i = 0; i < sk_X509_NAME_num(ca_list); i++) { ca_name = sk_X509_NAME_value(ca_list, i); for (j = 0; j < sk_X509_INFO_num(certs); j++) { info = sk_X509_INFO_value(certs, j); issuer = X509_get_issuer_name(info->x509); /* Search certs (by issuer name) one by one*/ if (X509_NAME_cmp(issuer, ca_name) == 0) { modssl_proxy_info_log(c, info, APLOGNO(02279) "found acceptable cert"); modssl_set_cert_info(info, x509, pkey); return TRUE; } if (ca_cert_chains) { /* * Failed to find direct issuer - search intermediates * (by issuer name), if provided. */ ca_certs = ca_cert_chains[j]; for (k = 0; k < sk_X509_num(ca_certs); k++) { ca_cert = sk_X509_value(ca_certs, k); ca_issuer = X509_get_issuer_name(ca_cert); if(X509_NAME_cmp(ca_issuer, ca_name) == 0 ) { modssl_proxy_info_log(c, info, APLOGNO(02280) "found acceptable cert by intermediate CA"); modssl_set_cert_info(info, x509, pkey); return TRUE; } } /* end loop through chained certs */ } } /* end loop through available certs */ } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02269) SSLPROXY_CERT_CB_LOG_FMT "no client certificate found!?", sc->vhost_id); return FALSE; } static void ssl_session_log(server_rec *s, const char *request, IDCONST unsigned char *id, unsigned int idlen, const char *status, const char *result, long timeout) { char buf[MODSSL_SESSION_ID_STRING_LEN]; char timeout_str[56] = {'\0'}; if (!APLOGdebug(s)) { return; } if (timeout) { apr_snprintf(timeout_str, sizeof(timeout_str), "timeout=%lds ", timeout); } ap_log_error(APLOG_MARK, APLOG_TRACE2, 0, s, "Inter-Process Session Cache: " "request=%s status=%s id=%s %s(session %s)", request, status, modssl_SSL_SESSION_id2sz(id, idlen, buf, sizeof(buf)), timeout_str, result); } /* * This callback function is executed by OpenSSL whenever a new SSL_SESSION is * added to the internal OpenSSL session cache. We use this hook to spread the * SSL_SESSION also to the inter-process disk-cache to make share it with our * other Apache pre-forked server processes. */ int ssl_callback_NewSessionCacheEntry(SSL *ssl, SSL_SESSION *session) { /* Get Apache context back through OpenSSL context */ conn_rec *conn = (conn_rec *)SSL_get_app_data(ssl); server_rec *s = mySrvFromConn(conn); SSLSrvConfigRec *sc = mySrvConfig(s); long timeout = sc->session_cache_timeout; BOOL rc; IDCONST unsigned char *id; unsigned int idlen; /* * Set the timeout also for the internal OpenSSL cache, because this way * our inter-process cache is consulted only when it's really necessary. */ SSL_set_timeout(session, timeout); /* * Store the SSL_SESSION in the inter-process cache with the * same expire time, so it expires automatically there, too. */ #ifdef OPENSSL_NO_SSL_INTERN id = (unsigned char *)SSL_SESSION_get_id(session, &idlen); #else id = session->session_id; idlen = session->session_id_length; #endif rc = ssl_scache_store(s, id, idlen, apr_time_from_sec(SSL_SESSION_get_time(session) + timeout), session, conn->pool); ssl_session_log(s, "SET", id, idlen, rc == TRUE ? "OK" : "BAD", "caching", timeout); /* * return 0 which means to OpenSSL that the session is still * valid and was not freed by us with SSL_SESSION_free(). */ return 0; } /* * This callback function is executed by OpenSSL whenever a * SSL_SESSION is looked up in the internal OpenSSL cache and it * was not found. We use this to lookup the SSL_SESSION in the * inter-process disk-cache where it was perhaps stored by one * of our other Apache pre-forked server processes. */ SSL_SESSION *ssl_callback_GetSessionCacheEntry(SSL *ssl, IDCONST unsigned char *id, int idlen, int *do_copy) { /* Get Apache context back through OpenSSL context */ conn_rec *conn = (conn_rec *)SSL_get_app_data(ssl); server_rec *s = mySrvFromConn(conn); SSL_SESSION *session; /* * Try to retrieve the SSL_SESSION from the inter-process cache */ session = ssl_scache_retrieve(s, id, idlen, conn->pool); ssl_session_log(s, "GET", id, idlen, session ? "FOUND" : "MISSED", session ? "reuse" : "renewal", 0); /* * Return NULL or the retrieved SSL_SESSION. But indicate (by * setting do_copy to 0) that the reference count on the * SSL_SESSION should not be incremented by the SSL library, * because we will no longer hold a reference to it ourself. */ *do_copy = 0; return session; } /* * This callback function is executed by OpenSSL whenever a * SSL_SESSION is removed from the internal OpenSSL cache. * We use this to remove the SSL_SESSION in the inter-process * disk-cache, too. */ void ssl_callback_DelSessionCacheEntry(SSL_CTX *ctx, SSL_SESSION *session) { server_rec *s; SSLSrvConfigRec *sc; IDCONST unsigned char *id; unsigned int idlen; /* * Get Apache context back through OpenSSL context */ if (!(s = (server_rec *)SSL_CTX_get_app_data(ctx))) { return; /* on server shutdown Apache is already gone */ } sc = mySrvConfig(s); /* * Remove the SSL_SESSION from the inter-process cache */ #ifdef OPENSSL_NO_SSL_INTERN id = (unsigned char *)SSL_SESSION_get_id(session, &idlen); #else id = session->session_id; idlen = session->session_id_length; #endif /* TODO: Do we need a temp pool here, or are we always shutting down? */ ssl_scache_remove(s, id, idlen, sc->mc->pPool); ssl_session_log(s, "REM", id, idlen, "OK", "dead", 0); return; } /* Dump debugginfo trace to the log file. */ static void log_tracing_state(const SSL *ssl, conn_rec *c, server_rec *s, int where, int rc) { /* * create the various trace messages */ if (where & SSL_CB_HANDSHAKE_START) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, c, "%s: Handshake: start", MODSSL_LIBRARY_NAME); } else if (where & SSL_CB_HANDSHAKE_DONE) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, c, "%s: Handshake: done", MODSSL_LIBRARY_NAME); } else if (where & SSL_CB_LOOP) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, c, "%s: Loop: %s", MODSSL_LIBRARY_NAME, SSL_state_string_long(ssl)); } else if (where & SSL_CB_READ) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, c, "%s: Read: %s", MODSSL_LIBRARY_NAME, SSL_state_string_long(ssl)); } else if (where & SSL_CB_WRITE) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, c, "%s: Write: %s", MODSSL_LIBRARY_NAME, SSL_state_string_long(ssl)); } else if (where & SSL_CB_ALERT) { char *str = (where & SSL_CB_READ) ? "read" : "write"; ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, c, "%s: Alert: %s:%s:%s", MODSSL_LIBRARY_NAME, str, SSL_alert_type_string_long(rc), SSL_alert_desc_string_long(rc)); } else if (where & SSL_CB_EXIT) { if (rc == 0) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, c, "%s: Exit: failed in %s", MODSSL_LIBRARY_NAME, SSL_state_string_long(ssl)); } else if (rc < 0) { ap_log_cerror(APLOG_MARK, APLOG_TRACE3, 0, c, "%s: Exit: error in %s", MODSSL_LIBRARY_NAME, SSL_state_string_long(ssl)); } } /* * Because SSL renegotiations can happen at any time (not only after * SSL_accept()), the best way to log the current connection details is * right after a finished handshake. */ if (where & SSL_CB_HANDSHAKE_DONE) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(02041) "Protocol: %s, Cipher: %s (%s/%s bits)", ssl_var_lookup(NULL, s, c, NULL, "SSL_PROTOCOL"), ssl_var_lookup(NULL, s, c, NULL, "SSL_CIPHER"), ssl_var_lookup(NULL, s, c, NULL, "SSL_CIPHER_USEKEYSIZE"), ssl_var_lookup(NULL, s, c, NULL, "SSL_CIPHER_ALGKEYSIZE")); } } /* * This callback function is executed while OpenSSL processes the SSL * handshake and does SSL record layer stuff. It's used to trap * client-initiated renegotiations, and for dumping everything to the * log. */ void ssl_callback_Info(const SSL *ssl, int where, int rc) { conn_rec *c; server_rec *s; /* Retrieve the conn_rec and the associated SSLConnRec. */ if ((c = (conn_rec *)SSL_get_app_data((SSL *)ssl)) == NULL) { return; } /* With TLS 1.3 this callback may be called multiple times on the first * negotiation, so the below logic to detect renegotiations can't work. * Fortunately renegotiations are forbidden starting with TLS 1.3, and * this is enforced by OpenSSL so there's nothing to be done here. */ #if SSL_HAVE_PROTOCOL_TLSV1_3 if (SSL_version(ssl) < TLS1_3_VERSION) #endif { SSLConnRec *sslconn; if ((sslconn = myConnConfig(c)) == NULL) { return; } /* If the reneg state is to reject renegotiations, check the SSL * state machine and move to ABORT if a Client Hello is being * read. */ if (!sslconn->is_proxy && (where & SSL_CB_HANDSHAKE_START) && sslconn->reneg_state == RENEG_REJECT) { sslconn->reneg_state = RENEG_ABORT; ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(02042) "rejecting client initiated renegotiation"); } /* If the first handshake is complete, change state to reject any * subsequent client-initiated renegotiation. */ else if ((where & SSL_CB_HANDSHAKE_DONE) && sslconn->reneg_state == RENEG_INIT) { sslconn->reneg_state = RENEG_REJECT; } } s = mySrvFromConn(c); if (s && APLOGdebug(s)) { log_tracing_state(ssl, c, s, where, rc); } } #ifdef HAVE_TLSEXT static apr_status_t set_challenge_creds(conn_rec *c, const char *servername, SSL *ssl, X509 *cert, EVP_PKEY *key) { SSLConnRec *sslcon = myConnConfig(c); sslcon->service_unavailable = 1; if ((SSL_use_certificate(ssl, cert) < 1)) { ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, c, APLOGNO(10086) "Failed to configure challenge certificate %s", servername); return APR_EGENERAL; } if (!SSL_use_PrivateKey(ssl, key)) { ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, c, APLOGNO(10087) "error '%s' using Challenge key: %s", ERR_error_string(ERR_peek_last_error(), NULL), servername); return APR_EGENERAL; } if (SSL_check_private_key(ssl) < 1) { ap_log_cerror(APLOG_MARK, APLOG_WARNING, 0, c, APLOGNO(10088) "Challenge certificate and private key %s " "do not match", servername); return APR_EGENERAL; } return APR_SUCCESS; } /* * This function sets the virtual host from an extended * client hello with a server name indication extension ("SNI", cf. RFC 6066). */ static apr_status_t init_vhost(conn_rec *c, SSL *ssl) { const char *servername; X509 *cert; EVP_PKEY *key; if (c) { SSLConnRec *sslcon = myConnConfig(c); if (sslcon->server != c->base_server) { /* already found the vhost */ return APR_SUCCESS; } servername = SSL_get_servername(ssl, TLSEXT_NAMETYPE_host_name); if (servername) { if (ap_vhost_iterate_given_conn(c, ssl_find_vhost, (void *)servername)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(02043) "SSL virtual host for servername %s found", servername); return APR_SUCCESS; } else if (ssl_is_challenge(c, servername, &cert, &key)) { /* With ACMEv1 we can have challenge connections to a unknown domains * that need to be answered with a special certificate and will * otherwise not answer any requests. */ if (set_challenge_creds(c, servername, ssl, cert, key) != APR_SUCCESS) { return APR_EGENERAL; } } else { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(02044) "No matching SSL virtual host for servername " "%s found (using default/first virtual host)", servername); /* * RFC 6066 section 3 says "It is NOT RECOMMENDED to send * a warning-level unrecognized_name(112) alert, because * the client's behavior in response to warning-level alerts * is unpredictable." * * To maintain backwards compatibility in mod_ssl, we * no longer send any alert (neither warning- nor fatal-level), * i.e. we take the second action suggested in RFC 6066: * "If the server understood the ClientHello extension but * does not recognize the server name, the server SHOULD take * one of two actions: either abort the handshake by sending * a fatal-level unrecognized_name(112) alert or continue * the handshake." */ } } else { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(02645) "Server name not provided via TLS extension " "(using default/first virtual host)"); } } return APR_NOTFOUND; } /* * This callback function is executed when OpenSSL encounters an extended * client hello with a server name indication extension ("SNI", cf. RFC 6066). */ int ssl_callback_ServerNameIndication(SSL *ssl, int *al, modssl_ctx_t *mctx) { conn_rec *c = (conn_rec *)SSL_get_app_data(ssl); apr_status_t status = init_vhost(c, ssl); return (status == APR_SUCCESS)? SSL_TLSEXT_ERR_OK : SSL_TLSEXT_ERR_NOACK; } /* * Find a (name-based) SSL virtual host where either the ServerName * or one of the ServerAliases matches the supplied name (to be used * with ap_vhost_iterate_given_conn()) */ static int ssl_find_vhost(void *servername, conn_rec *c, server_rec *s) { SSLSrvConfigRec *sc; SSL *ssl; BOOL found; SSLConnRec *sslcon; found = ssl_util_vhost_matches(servername, s); /* set SSL_CTX (if matched) */ sslcon = myConnConfig(c); if (found && (ssl = sslcon->ssl) && (sc = mySrvConfig(s))) { SSL_CTX *ctx = SSL_set_SSL_CTX(ssl, sc->server->ssl_ctx); /* * SSL_set_SSL_CTX() only deals with the server cert, * so we need to duplicate a few additional settings * from the ctx by hand */ SSL_set_options(ssl, SSL_CTX_get_options(ctx)); if ((SSL_get_verify_mode(ssl) == SSL_VERIFY_NONE) || (SSL_num_renegotiations(ssl) == 0)) { /* * Only initialize the verification settings from the ctx * if they are not yet set, or if we're called when a new * SSL connection is set up (num_renegotiations == 0). * Otherwise, we would possibly reset a per-directory * configuration which was put into effect by ssl_hook_Access. */ SSL_set_verify(ssl, SSL_CTX_get_verify_mode(ctx), SSL_CTX_get_verify_callback(ctx)); } /* * Adjust the session id context. ssl_init_ssl_connection() * always picks the configuration of the first vhost when * calling SSL_new(), but we want to tie the session to the * vhost we have just switched to. Again, we have to make sure * that we're not overwriting a session id context which was * possibly set in ssl_hook_Access(), before triggering * a renegotiation. */ if (SSL_num_renegotiations(ssl) == 0) { unsigned char *sid_ctx = (unsigned char *)ap_md5_binary(c->pool, (unsigned char *)sc->vhost_id, sc->vhost_id_len); SSL_set_session_id_context(ssl, sid_ctx, APR_MD5_DIGESTSIZE*2); } /* * Save the found server into our SSLConnRec for later * retrieval */ sslcon->server = s; sslcon->cipher_suite = sc->server->auth.cipher_suite; sslcon->service_unavailable = sc->server->pks? sc->server->pks->service_unavailable : 0; ap_update_child_status_from_server(c->sbh, SERVER_BUSY_READ, c, s); /* * There is one special filter callback, which is set * very early depending on the base_server's log level. * If this is not the first vhost we're now selecting * (and the first vhost doesn't use APLOG_TRACE4), then * we need to set that callback here. */ if (APLOGtrace4(s)) { BIO *rbio = SSL_get_rbio(ssl), *wbio = SSL_get_wbio(ssl); BIO_set_callback(rbio, ssl_io_data_cb); BIO_set_callback_arg(rbio, (void *)ssl); if (wbio && wbio != rbio) { BIO_set_callback(wbio, ssl_io_data_cb); BIO_set_callback_arg(wbio, (void *)ssl); } } return 1; } return 0; } #endif /* HAVE_TLSEXT */ #ifdef HAVE_TLS_SESSION_TICKETS /* * This callback function is executed when OpenSSL needs a key for encrypting/ * decrypting a TLS session ticket (RFC 5077) and a ticket key file has been * configured through SSLSessionTicketKeyFile. */ int ssl_callback_SessionTicket(SSL *ssl, unsigned char *keyname, unsigned char *iv, EVP_CIPHER_CTX *cipher_ctx, HMAC_CTX *hctx, int mode) { conn_rec *c = (conn_rec *)SSL_get_app_data(ssl); server_rec *s = mySrvFromConn(c); SSLSrvConfigRec *sc = mySrvConfig(s); SSLConnRec *sslconn = myConnConfig(c); modssl_ctx_t *mctx = myCtxConfig(sslconn, sc); modssl_ticket_key_t *ticket_key = mctx->ticket_key; if (mode == 1) { /* * OpenSSL is asking for a key for encrypting a ticket, * see s3_srvr.c:ssl3_send_newsession_ticket() */ if (ticket_key == NULL) { /* should never happen, but better safe than sorry */ return -1; } memcpy(keyname, ticket_key->key_name, 16); if (RAND_bytes(iv, EVP_MAX_IV_LENGTH) != 1) { return -1; } EVP_EncryptInit_ex(cipher_ctx, EVP_aes_128_cbc(), NULL, ticket_key->aes_key, iv); HMAC_Init_ex(hctx, ticket_key->hmac_secret, 16, tlsext_tick_md(), NULL); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(02289) "TLS session ticket key for %s successfully set, " "creating new session ticket", sc->vhost_id); return 1; } else if (mode == 0) { /* * OpenSSL is asking for the decryption key, * see t1_lib.c:tls_decrypt_ticket() */ /* check key name */ if (ticket_key == NULL || memcmp(keyname, ticket_key->key_name, 16)) { return 0; } EVP_DecryptInit_ex(cipher_ctx, EVP_aes_128_cbc(), NULL, ticket_key->aes_key, iv); HMAC_Init_ex(hctx, ticket_key->hmac_secret, 16, tlsext_tick_md(), NULL); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, APLOGNO(02290) "TLS session ticket key for %s successfully set, " "decrypting existing session ticket", sc->vhost_id); return 1; } /* OpenSSL is not expected to call us with modes other than 1 or 0 */ return -1; } #endif /* HAVE_TLS_SESSION_TICKETS */ #ifdef HAVE_TLS_ALPN /* * This callback function is executed when the TLS Application-Layer * Protocol Negotiation Extension (ALPN, RFC 7301) is triggered by the Client * Hello, giving a list of desired protocol names (in descending preference) * to the server. * The callback has to select a protocol name or return an error if none of * the clients preferences is supported. * The selected protocol does not have to be on the client list, according * to RFC 7301, so no checks are performed. * The client protocol list is serialized as length byte followed by ASCII * characters (not null-terminated), followed by the next protocol name. */ int ssl_callback_alpn_select(SSL *ssl, const unsigned char **out, unsigned char *outlen, const unsigned char *in, unsigned int inlen, void *arg) { conn_rec *c = (conn_rec*)SSL_get_app_data(ssl); SSLConnRec *sslconn; apr_array_header_t *client_protos; const char *proposed; size_t len; int i; /* If the connection object is not available, * then there's nothing for us to do. */ if (c == NULL) { return SSL_TLSEXT_ERR_OK; } sslconn = myConnConfig(c); if (inlen == 0) { /* someone tries to trick us? */ ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(02837) "ALPN client protocol list empty"); return SSL_TLSEXT_ERR_ALERT_FATAL; } client_protos = apr_array_make(c->pool, 0, sizeof(char *)); for (i = 0; i < inlen; /**/) { unsigned int plen = in[i++]; if (plen + i > inlen) { /* someone tries to trick us? */ ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(02838) "ALPN protocol identifier too long"); return SSL_TLSEXT_ERR_ALERT_FATAL; } APR_ARRAY_PUSH(client_protos, char *) = apr_pstrndup(c->pool, (const char *)in+i, plen); i += plen; } /* The order the callbacks are invoked from TLS extensions is, unfortunately * not defined and older openssl versions do call ALPN selection before * they callback the SNI. We need to make sure that we know which vhost * we are dealing with so we respect the correct protocols. */ init_vhost(c, ssl); proposed = ap_select_protocol(c, NULL, sslconn->server, client_protos); if (!proposed) { proposed = ap_get_protocol(c); } len = strlen(proposed); if (len > 255) { ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, c, APLOGNO(02840) "ALPN negotiated protocol name too long"); return SSL_TLSEXT_ERR_ALERT_FATAL; } *out = (const unsigned char *)proposed; *outlen = (unsigned char)len; if (strcmp(proposed, ap_get_protocol(c))) { apr_status_t status; status = ap_switch_protocol(c, NULL, sslconn->server, proposed); if (status != APR_SUCCESS) { ap_log_cerror(APLOG_MARK, APLOG_ERR, status, c, APLOGNO(02908) "protocol switch to '%s' failed", proposed); return SSL_TLSEXT_ERR_ALERT_FATAL; } /* protocol was switched, this could be a challenge protocol such as "acme-tls/1". * For that to work, we need to allow overrides to our ssl certificate. * However, exclude challenge checks on our best known traffic protocol. * (http/1.1 is the default, we never switch to it anyway.) */ if (strcmp("h2", proposed)) { const char *servername = SSL_get_servername(ssl, TLSEXT_NAMETYPE_host_name); X509 *cert; EVP_PKEY *key; if (ssl_is_challenge(c, servername, &cert, &key)) { if (set_challenge_creds(c, servername, ssl, cert, key) != APR_SUCCESS) { return SSL_TLSEXT_ERR_ALERT_FATAL; } } } } return SSL_TLSEXT_ERR_OK; } #endif /* HAVE_TLS_ALPN */ #ifdef HAVE_SRP int ssl_callback_SRPServerParams(SSL *ssl, int *ad, void *arg) { modssl_ctx_t *mctx = (modssl_ctx_t *)arg; char *username = SSL_get_srp_username(ssl); SRP_user_pwd *u; if (username == NULL #if OPENSSL_VERSION_NUMBER < 0x10100000L || (u = SRP_VBASE_get_by_user(mctx->srp_vbase, username)) == NULL) { #else || (u = SRP_VBASE_get1_by_user(mctx->srp_vbase, username)) == NULL) { #endif *ad = SSL_AD_UNKNOWN_PSK_IDENTITY; return SSL3_AL_FATAL; } if (SSL_set_srp_server_param(ssl, u->N, u->g, u->s, u->v, u->info) < 0) { #if OPENSSL_VERSION_NUMBER >= 0x10100000L SRP_user_pwd_free(u); #endif *ad = SSL_AD_INTERNAL_ERROR; return SSL3_AL_FATAL; } /* reset all other options */ #if OPENSSL_VERSION_NUMBER >= 0x10100000L SRP_user_pwd_free(u); #endif SSL_set_verify(ssl, SSL_VERIFY_NONE, ssl_callback_SSLVerify); return SSL_ERROR_NONE; } #endif /* HAVE_SRP */ httpd-2.4.41/modules/core/0002755000000000000500000000000013523273342013642 5ustar rootsrchttpd-2.4.41/modules/core/mod_macro.dep0000644000000000000500000000310512674411515016273 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_macro.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_macro.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\util_cfgtree.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ httpd-2.4.41/modules/core/test/0002755000000000000500000000000013523273342014621 5ustar rootsrchttpd-2.4.41/modules/core/test/conf/0002755000000000000500000000000013523273342015546 5ustar rootsrchttpd-2.4.41/modules/core/test/conf/test20.conf0000644000000000000500000000026112553146475017543 0ustar rootsrc# directory in directory through a macro Warning "macro foo $dir" Use foo /tmp httpd-2.4.41/modules/core/test/conf/test05.conf0000644000000000000500000000012212553146475017542 0ustar rootsrc# wrong args Warning "macro foo $premier" Use foo httpd-2.4.41/modules/core/test/conf/test30.conf0000644000000000000500000000035012553146475017543 0ustar rootsrc# name conficts: the longest is chosen # also test a parametric section <$directive $dir> Warning "section $directive $dir" Use foo /unexpected/1 Directory Error "done!" httpd-2.4.41/modules/core/test/conf/test22.conf0000644000000000000500000000020412553146475017542 0ustar rootsrc# simple nesting Warning "macro foo" Use foo Error "done on line 11." httpd-2.4.41/modules/core/test/conf/test08.conf0000644000000000000500000000006012553146475017546 0ustar rootsrc# missing begin macro ServerName hello httpd-2.4.41/modules/core/test/conf/test28.conf0000644000000000000500000000025312553146475017554 0ustar rootsrc# interaction with IfModule Warning "macro foo" Use foo Error "done!" Error "should not get there" httpd-2.4.41/modules/core/test/conf/test11.conf0000644000000000000500000000031112553146475017537 0ustar rootsrc# inner macros... Warning "macro $arg.in line 1" # generate a one.in macro Use foo one # use it! Use one.in # end processing Error "done line 15." httpd-2.4.41/modules/core/test/conf/test19.conf0000644000000000000500000000062512553146475017557 0ustar rootsrc# okay till done # something Warning "macro foo line 2 in $where" Use foo Directory Use foo Location Use foo VirtualHost Use foo "VirtualHost & Directory" Error "done line 26." httpd-2.4.41/modules/core/test/conf/test55.conf0000644000000000000500000000037012553146475017554 0ustar rootsrc# line numbers... Warning "macro foo(:2) line 1 ($where)" Warning "macro bla(:5) line 1 ($where)" Use foo "bla line 2" Use foo "file line 9" Use bla "file line 10" Error "done line 11." httpd-2.4.41/modules/core/test/conf/test26.conf0000644000000000000500000000054212553146475017553 0ustar rootsrc# ok till stop. # test quotes... Warning "funny directory" Warning "funny location" Use funny /unexpected/1 /intra Use funny /unexpected/2 /intranet Error "done!" httpd-2.4.41/modules/core/test/conf/test48.conf0000644000000000000500000000047612553146475017565 0ustar rootsrc# test substitution... Warning %premier Use M 1 Use M 12 Use M 123 Use M 1234 Use M 12345 Use M 123456 Use M 1234567 Use M 12345678 Use M 123456789 Use M 1234567890 Use M 1234567890a Use M 1234567890ab Use M 1234567890abc Use M 1234567890abcd Use M 1234567890abcde Error "done line 23." httpd-2.4.41/modules/core/test/conf/test36.conf0000644000000000000500000000035612553146475017557 0ustar rootsrc Warning "many warnings! $u $u1 $u2" # $n $n1 $n2 # warn about unused arguments Use warnings 1 2 3 4 5 6 # may warn about empty arguments? Use warnings '' '' '' '' '' '' Error "done!" httpd-2.4.41/modules/core/test/conf/test58.conf0000644000000000000500000000011112553146475017550 0ustar rootsrc# bad directive closing httpd-2.4.41/modules/core/test/conf/test02.conf0000644000000000000500000000006312553146475017543 0ustar rootsrc# no macro name and spaces httpd-2.4.41/modules/core/test/conf/test44.conf0000644000000000000500000000032512553146475017552 0ustar rootsrc# working recursion... use bla use foo # foo gonna call bla, bla wont call foo back... use foo Error okay. httpd-2.4.41/modules/core/test/conf/test45.conf0000644000000000000500000000025412553146475017554 0ustar rootsrc# strange chars # hello $1 %2 &3 @4 #5 ~6 *7 .8 ,9 !a -b +c =d :e ;f ?g Error "done on line 7." httpd-2.4.41/modules/core/test/conf/test18.conf0000644000000000000500000000016112553146475017551 0ustar rootsrc# bad but good nesting
    Use foo Error "done on line 10." httpd-2.4.41/modules/core/test/conf/test41.conf0000644000000000000500000000053712553146475017554 0ustar rootsrc# another configuration example without mod_macro DocumentRoot /foo/document/root/directory Warning "location /A" Warning "location /B" Warning "location /C" Error Stop configuration file processing. httpd-2.4.41/modules/core/test/conf/test69.conf0000644000000000000500000000051412553146475017561 0ustar rootsrc# warn if ignored non-blank stuff after closing '>' this stuff is ignored... Warning "Foo" this stuff is ignored as well... Use Foo Warning "Bla" Use Bla # comments are fine Warning "Comments" # comments are fine Use Comments Error "done on line 14." httpd-2.4.41/modules/core/test/conf/test43.conf0000644000000000000500000000053312553146475017552 0ustar rootsrc# non necessarily nested. # hello Use begindir /unexpected/1 Use enddir Use begindir /unexpected/2 Use enddir Use begindir /unexpected/3 Use enddir Use begindir /unexpected/4 Use enddir Error ok! httpd-2.4.41/modules/core/test/conf/test07.conf0000644000000000000500000000005712553146475017553 0ustar rootsrc# missing end macro hello httpd-2.4.41/modules/core/test/conf/test53.conf0000644000000000000500000000006712553146475017555 0ustar rootsrc# use undefined macro without prior definition Use bla httpd-2.4.41/modules/core/test/conf/test65.conf0000644000000000000500000000030612553146475017554 0ustar rootsrc# simple use continuation # first macro line is a comment Warning "Line: $line" Use Line \ "on line 6-7" Use \ Line \ "on line 8-10" Error "done on line 11." httpd-2.4.41/modules/core/test/conf/test29.conf0000644000000000000500000000054212553146475017556 0ustar rootsrc# trigger line overflow during expansion Warning aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa Use toobigaline "cette ligne va etre vraiment trop longue ya pas de doute" Error "should not get there!" httpd-2.4.41/modules/core/test/conf/test56.conf0000644000000000000500000000035412553146475017557 0ustar rootsrc# nesting warnings Warning "Open:2 $dir" Warning "Close:1" # some uses Use Open /tmp Use Close Use Open /etc Use Close Error "done line 18." httpd-2.4.41/modules/core/test/conf/test46.conf0000644000000000000500000000020212553146475017546 0ustar rootsrc# various working prefixes # hello %j @k # not used. Error okay. httpd-2.4.41/modules/core/test/conf/test09.conf0000644000000000000500000000007112553146475017551 0ustar rootsrc# recursion is bad Use foo Use foo httpd-2.4.41/modules/core/test/conf/test15.conf0000644000000000000500000000016212553146475017547 0ustar rootsrc# non nested... use test Error should not reach this point. httpd-2.4.41/modules/core/test/conf/test50.conf0000644000000000000500000000012512553146475017545 0ustar rootsrc# undef non existing macro Warning "foo macro" UndefMacro bla httpd-2.4.41/modules/core/test/conf/test59.conf0000644000000000000500000000010512553146475017554 0ustar rootsrc# empty name Warning "empty quoted name macro" httpd-2.4.41/modules/core/test/conf/test35.conf0000644000000000000500000000027212553146475017553 0ustar rootsrc# unused arguments Warning "macro cannot be used just within a comment u1 u2 u3" # n1 n2 Use warnings 1 2 3 4 5 Error "done on line 10." httpd-2.4.41/modules/core/test/conf/test32.conf0000644000000000000500000000012512553146475017545 0ustar rootsrc# error if same argument name. # bad httpd-2.4.41/modules/core/test/conf/test68.conf0000644000000000000500000000015012553146475017554 0ustar rootsrc# two directives with continuations & no eol at eof Warning \ "line 2-3" Error \ "done on line 4-5."httpd-2.4.41/modules/core/test/conf/test47.conf0000644000000000000500000000021312553146475017551 0ustar rootsrc# empty macro contents... Use foo # some contents... Error okay. httpd-2.4.41/modules/core/test/conf/test14.conf0000644000000000000500000000103612553146475017547 0ustar rootsrc# VirtualHost example Listen $port DocumentRoot $dir Warning "directory $dir" # limit access to intranet subdir. Warning "directory $dir/intranet" Use MyVirtualHost www.apache.org 80 /projects/apache/web Use MyVirtualHost www.perl.com 8080 /projects/perl/web Use MyVirtualHost www.ensmp.fr 1234 /projects/mines/web Error "done line 23." httpd-2.4.41/modules/core/test/conf/test60.conf0000644000000000000500000000056712553146475017560 0ustar rootsrc# @ escaping Warning "macro Foo arg 1: $one" Warning "macro Foo arg 2: $two" Warning Macro Bla arg 1: @first Warning Macro Bla arg 2: @second Use Foo @first 'second' Use Foo 'first' @second Use Foo @first @second Use Foo hello world Use Bla "hello world" "thank you" Error "done on line 17." httpd-2.4.41/modules/core/test/conf/test23.conf0000644000000000000500000000027012553146475017546 0ustar rootsrc# macro defined in a directory Warning "macro foo in /tmp" Use foo Use foo Error "done!" httpd-2.4.41/modules/core/test/conf/test27.conf0000644000000000000500000000050112553146475017547 0ustar rootsrc# define a macro in a macro. Warning "foo.$name $dir" Use foo /unexpected/1 one Use foo /unexpected/2 two Use foo.one Use foo.two Use foo.one UndefMacro foo.one UndefMacro foo.two UndefMacro foo Error "done!" httpd-2.4.41/modules/core/test/conf/test16.conf0000644000000000000500000000012112553146475017543 0ustar rootsrc# bad nesting Use foo stop httpd-2.4.41/modules/core/test/conf/test12.conf0000644000000000000500000000026212553146475017545 0ustar rootsrc# multiply defined generates a warning Warning "macro foo 1, line 1" Warning "macro foo 2, line 1" Use foo Error "done line 12." httpd-2.4.41/modules/core/test/conf/inc63_1.conf0000644000000000000500000000015012553146475017561 0ustar rootsrc# macro for include Warning "Foo macro at $where" Use Foo "inc63_.conf:5" httpd-2.4.41/modules/core/test/conf/test51.conf0000644000000000000500000000032412553146475017547 0ustar rootsrc# undef existing macro, and try to use it Warning "foo macro contents" # expanded, but will not be processed because of error Use foo UndefMacro foo # error, does not exist anymore Use foo httpd-2.4.41/modules/core/test/conf/test66.conf0000644000000000000500000000020512553146475017553 0ustar rootsrc# no double substitution Warning "Foo: x=$x y=$y" Use Foo X Y Use Foo "$y" "$x" Error "done on line 7." httpd-2.4.41/modules/core/test/conf/test01.conf0000644000000000000500000000004112553146475017536 0ustar rootsrc# no macro name httpd-2.4.41/modules/core/test/conf/test25.conf0000644000000000000500000000076512553146475017561 0ustar rootsrc# ok till stop. Warning "restricted access policy $ips" Use RestrictedAccessPolicy 10.0.0.0/8 Use RestrictedAccessPolicy 10.0.0.0/8 Use RestrictedAccessPolicy "192.54.172.0/24 192.54.148.0/24 10.0.0.0/8" Use LocalAccessOnly Use LocalAccessOnly Error "done line 27." httpd-2.4.41/modules/core/test/conf/test33.conf0000644000000000000500000000002612553146475017546 0ustar rootsrc# empty name. Use '' httpd-2.4.41/modules/core/test/conf/test17.conf0000644000000000000500000000015612553146475017554 0ustar rootsrc# bad but good nesting Use foo Error "done on line 10." httpd-2.4.41/modules/core/test/conf/test34.conf0000644000000000000500000000034412553146475017552 0ustar rootsrc# macro parameter prefix conflicts in two orders Warning "macro foo conflict one" Warning "macro bla conflict two" Use foo 1 2 Use bla 1 2 Error "done on line 14." httpd-2.4.41/modules/core/test/conf/test64.conf0000644000000000000500000000014512553146475017554 0ustar rootsrc# just continuations Warning "on line 2" Warning \ "from line 3 to line 4" Error "done on line 5." httpd-2.4.41/modules/core/test/conf/test40.conf0000644000000000000500000000133112553146475017544 0ustar rootsrc# configuration example with mod_macro # DocumentRoot /foo/document/root/directory # access control to subdirs... Warning "location /$subdir" # repeat uses Use SubDirAccessControl A Use SubDirAccessControl B Use SubDirAccessControl C Use SubDirAccessControl D Use SubDirAccessControl E Use SubDirAccessControl G Use SubDirAccessControl H Use SubDirAccessControl J Use SubDirAccessControl K Use SubDirAccessControl L Use SubDirAccessControl M Use SubDirAccessControl N # cleanup UndefMacro SubDirAccessControl Error Stop configuration file processing. httpd-2.4.41/modules/core/test/conf/test13.conf0000644000000000000500000000033612553146475017550 0ustar rootsrc# case insensitive Warning "macro FOO line 1" Warning "macro bla line 1" use foo Warning "redefined macro foo line 1" use FOO Error "done line 18." httpd-2.4.41/modules/core/test/conf/test54.conf0000644000000000000500000000010112553146475017543 0ustar rootsrc# empty macro Use foo Error "done line 6." httpd-2.4.41/modules/core/test/conf/test04.conf0000644000000000000500000000010612553146475017543 0ustar rootsrc# wrong args Warning "macro foo" Use foo hello httpd-2.4.41/modules/core/test/conf/test21.conf0000644000000000000500000000022212553146475017541 0ustar rootsrc# raise an error Error "macro foo dir /tmp" Use foo httpd-2.4.41/modules/core/test/conf/test39.conf0000644000000000000500000000053612553146475017562 0ustar rootsrc# okay till stop. Warning Thanks for using mod_macro! Error Sorry, mod_macro must be installed to run this configuration file. Use ModMacro Warning "macro foo" Use foo Error "done!" httpd-2.4.41/modules/core/test/conf/test67.conf0000644000000000000500000000004212553146475017553 0ustar rootsrcError "done at line 1 without LF."httpd-2.4.41/modules/core/test/conf/test61.conf0000644000000000000500000000042012553146475017545 0ustar rootsrc# deep expansion Warning "F1:1 x=$x" Warning "F2:1 x=$x" Use F1 $x Warning "F3:1 x=$x" Use F2 $x Warning "F4:1 x=$x" Use F3 $x Use F4 "line=17" Error "done line 18." httpd-2.4.41/modules/core/test/conf/test38.conf0000644000000000000500000000030712553146475017555 0ustar rootsrc# ifmodule Warning it is really a good idea to have mod_macro.c installed. Error it seems you do not have mod perl installed. httpd-2.4.41/modules/core/test/conf/test37.conf0000644000000000000500000000013212553146475017550 0ustar rootsrc# empty argument name Warn "macro stupid" Use stupid hello httpd-2.4.41/modules/core/test/conf/test63.conf0000644000000000000500000000030012553146475017544 0ustar rootsrc# include include ${PWD}/inc63_1.conf Use Foo "test63.conf:3" Warning "Bla at $where" include ${PWD}/inc63_2.conf Use Bla "test63.conf:8" Error "done at line 9." httpd-2.4.41/modules/core/test/conf/test24.conf0000644000000000000500000000053612553146475017554 0ustar rootsrc# nesting... Warning "macro bla intra" Warning "macro bla private" # ok location in config Use bla # ok, location in VH Use bla # fails: Location within an Directory Use bla httpd-2.4.41/modules/core/test/conf/test31.conf0000644000000000000500000000043712553146475017552 0ustar rootsrc# parameter name conflicts Warning "argument name conflicts" $d $di $dir $dd Use bla '' '' 8080 Listen Warning "conflicts, but arguments are not used" Use foo '' '' 8080 Listen Error "done on line 16." httpd-2.4.41/modules/core/test/conf/test57.conf0000644000000000000500000000011612553146475017554 0ustar rootsrc# empty argument name Warning "macro foo line 1" httpd-2.4.41/modules/core/test/conf/inc63_2.conf0000644000000000000500000000012012553146475017557 0ustar rootsrc# use macro defined elsewhere Use Foo "inc63_2.conf:2" Use Bla "inc63_2.conf:3" httpd-2.4.41/modules/core/test/conf/test49.conf0000644000000000000500000000005512553146475017557 0ustar rootsrc# undef macro before anything UndefMacro foo httpd-2.4.41/modules/core/test/conf/test52.conf0000644000000000000500000000022212553146475017545 0ustar rootsrc# undef existing macro, and try to use it Warning "foo macro contents line 1" Use foo UndefMacro foo Error "done line 8." httpd-2.4.41/modules/core/test/conf/test03.conf0000644000000000000500000000011112553146475017536 0ustar rootsrc# use undefined macro Warning "macro foo" Use bla httpd-2.4.41/modules/core/test/conf/test42.conf0000644000000000000500000000023112553146475017544 0ustar rootsrc# multiple macro uses Warning "macro foo $p" Use foo '' Use foo '' Use foo '' Use foo '' Use foo '' Error "done on line 13." httpd-2.4.41/modules/core/test/conf/test62.conf0000644000000000000500000000042712553146475017555 0ustar rootsrc# test continuations Warning \ "Line:1-2 start at $start" Warning \ "Line:3-4 stop at $stop" Use Line 11 11 Use Line \ 12 13 Use Line \ 14 \ 16 Use Line 17 \ 18 Use Line \ \ 19 \ \ 23 Error "done line 25." httpd-2.4.41/modules/core/test/conf/test10.conf0000644000000000000500000000014012553146475017536 0ustar rootsrc# indirect recursion is bad Use bla Use foo Use foo httpd-2.4.41/modules/core/test/conf/test06.conf0000644000000000000500000000013312553146475017545 0ustar rootsrc# wrong args Warning "macro foo $premier" Use foo one two httpd-2.4.41/modules/core/test/ref/0002755000000000000500000000000013523273342015375 5ustar rootsrchttpd-2.4.41/modules/core/test/ref/test49.out0000644000000000000500000000020212076740760017257 0ustar rootsrc# testing with conf/test49.conf httpd: Syntax error on line 2 of ./conf/test49.conf: no macro defined before UndefMacro # exit: 1 httpd-2.4.41/modules/core/test/ref/test65.out0000644000000000000500000000075512076740760017272 0ustar rootsrc# testing with conf/test65.conf [core:warn] Line: on line 6-7 on line 1 of macro 'line' (defined on line 2 of "./conf/test65.conf") used on line 7 of "./conf/test65.conf" [core:warn] Line: on line 8-10 on line 1 of macro 'line' (defined on line 2 of "./conf/test65.conf") used on line 10 of "./conf/test65.conf" [core:error] done on line 11. on line 11 of ./conf/test65.conf AH00526: Syntax error on line 11 of ./conf/test65.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test57.out0000644000000000000500000000025712076740760017270 0ustar rootsrc# testing with conf/test57.conf httpd: Syntax error on line 2 of ./conf/test57.conf: macro 'foo' (defined on line 2 of "./conf/test57.conf"): empty argument #2 name # exit: 1 httpd-2.4.41/modules/core/test/ref/test60.out0000644000000000000500000000414012076740760017255 0ustar rootsrc# testing with conf/test60.conf [core:warn] macro Foo arg 1: hello on line 1 of macro 'foo' (defined on line 2 of "./conf/test60.conf") used on line 14 of "./conf/test60.conf" [core:warn] macro Foo arg 2: world on line 2 of macro 'foo' (defined on line 2 of "./conf/test60.conf") used on line 14 of "./conf/test60.conf" [core:warn] Macro Bla arg 1: "hello world" on line 1 of macro 'bla' (defined on line 6 of "./conf/test60.conf") used on line 15 of "./conf/test60.conf" [core:warn] Macro Bla arg 2: "thank you" on line 2 of macro 'bla' (defined on line 6 of "./conf/test60.conf") used on line 15 of "./conf/test60.conf" [core:warn] macro Foo arg 1: hello world on line 1 of macro 'foo' (defined on line 2 of "./conf/test60.conf") used on line 3 of "macro 'bla' (defined on line 6 of "./conf/test60.conf") used on line 15 of "./conf/test60.conf"" [core:warn] macro Foo arg 2: second on line 2 of macro 'foo' (defined on line 2 of "./conf/test60.conf") used on line 3 of "macro 'bla' (defined on line 6 of "./conf/test60.conf") used on line 15 of "./conf/test60.conf"" [core:warn] macro Foo arg 1: first on line 1 of macro 'foo' (defined on line 2 of "./conf/test60.conf") used on line 4 of "macro 'bla' (defined on line 6 of "./conf/test60.conf") used on line 15 of "./conf/test60.conf"" [core:warn] macro Foo arg 2: thank you on line 2 of macro 'foo' (defined on line 2 of "./conf/test60.conf") used on line 4 of "macro 'bla' (defined on line 6 of "./conf/test60.conf") used on line 15 of "./conf/test60.conf"" [core:warn] macro Foo arg 1: hello world on line 1 of macro 'foo' (defined on line 2 of "./conf/test60.conf") used on line 5 of "macro 'bla' (defined on line 6 of "./conf/test60.conf") used on line 15 of "./conf/test60.conf"" [core:warn] macro Foo arg 2: thank you on line 2 of macro 'foo' (defined on line 2 of "./conf/test60.conf") used on line 5 of "macro 'bla' (defined on line 6 of "./conf/test60.conf") used on line 15 of "./conf/test60.conf"" [core:error] done on line 17. on line 17 of ./conf/test60.conf AH00526: Syntax error on line 17 of ./conf/test60.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test23.out0000644000000000000500000000073712076740760017264 0ustar rootsrc# testing with conf/test23.conf [core:warn] macro foo in /tmp on line 1 of macro 'foo' (defined on line 4 of "./conf/test23.conf") used on line 9 of "./conf/test23.conf" [core:warn] macro foo in /tmp on line 1 of macro 'foo' (defined on line 4 of "./conf/test23.conf") used on line 12 of "./conf/test23.conf" [core:error] done! on line 15 of ./conf/test23.conf AH00526: Syntax error on line 15 of ./conf/test23.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test59.out0000644000000000000500000000020712076740760017265 0ustar rootsrc# testing with conf/test59.conf httpd: Syntax error on line 2 of ./conf/test59.conf: without matching section # exit: 1 httpd-2.4.41/modules/core/test/ref/test29.out0000644000000000000500000000102112076740760017255 0ustar rootsrc# testing with conf/test29.conf [macro:warn] macro 'toobigaline' (defined on line 3 of "./conf/test29.conf") argument name 'a' (#1) without expected prefix, better prefix argument names with one of '$%@'. httpd: Syntax error on line 8 of ./conf/test29.conf: macro 'toobigaline' (defined on line 3 of "./conf/test29.conf") used on line 8 of "./conf/test29.conf" error while substituting: while processing line 1 of macro 'toobigaline' (defined on line 3 of "./conf/test29.conf") cannot substitute, buffer size too small # exit: 1 httpd-2.4.41/modules/core/test/ref/test37.out0000644000000000000500000000026212076740760017262 0ustar rootsrc# testing with conf/test37.conf httpd: Syntax error on line 3 of ./conf/test37.conf: macro 'stupid' (defined on line 3 of "./conf/test37.conf"): empty argument #1 name # exit: 1 httpd-2.4.41/modules/core/test/ref/test51.out0000644000000000000500000000016512076740760017260 0ustar rootsrc# testing with conf/test51.conf httpd: Syntax error on line 9 of ./conf/test51.conf: macro 'foo' undefined # exit: 1 httpd-2.4.41/modules/core/test/ref/test50.out0000644000000000000500000000020312076740760017250 0ustar rootsrc# testing with conf/test50.conf httpd: Syntax error on line 5 of ./conf/test50.conf: cannot remove undefined macro 'bla' # exit: 1 httpd-2.4.41/modules/core/test/ref/test55.out0000644000000000000500000000136112076740760017263 0ustar rootsrc# testing with conf/test55.conf [core:warn] macro foo(:2) line 1 (file line 9) on line 1 of macro 'foo' (defined on line 2 of "./conf/test55.conf") used on line 9 of "./conf/test55.conf" [core:warn] macro bla(:5) line 1 (file line 10) on line 1 of macro 'bla' (defined on line 5 of "./conf/test55.conf") used on line 10 of "./conf/test55.conf" [core:warn] macro foo(:2) line 1 (bla line 2) on line 1 of macro 'foo' (defined on line 2 of "./conf/test55.conf") used on line 2 of "macro 'bla' (defined on line 5 of "./conf/test55.conf") used on line 10 of "./conf/test55.conf"" [core:error] done line 11. on line 11 of ./conf/test55.conf AH00526: Syntax error on line 11 of ./conf/test55.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test46.out0000644000000000000500000000123212076740760017260 0ustar rootsrc# testing with conf/test46.conf [macro:warn] macro '$i' (defined on line 3 of "./conf/test46.conf") better prefix a macro name with any of '$%@' [macro:warn] macro '$i' (defined on line 3 of "./conf/test46.conf"): empty contents! [macro:warn] macro 'warnings' (defined on line 7 of "./conf/test46.conf") argument name 'second' (#2) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'warnings' (defined on line 7 of "./conf/test46.conf"): empty contents! [core:error] okay. on line 11 of ./conf/test46.conf AH00526: Syntax error on line 11 of ./conf/test46.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test34.out0000644000000000000500000000230712076740760017261 0ustar rootsrc# testing with conf/test34.conf [macro:warn] macro 'foo' (defined on line 3 of "./conf/test34.conf"): argument name prefix conflict ($d #1 and $dd #2), be careful about your macro definition! [macro:warn] macro 'foo' (defined on line 3 of "./conf/test34.conf"): argument '$d' (#1) never used [macro:warn] macro 'foo' (defined on line 3 of "./conf/test34.conf"): argument '$dd' (#2) never used [macro:warn] macro 'bla' (defined on line 7 of "./conf/test34.conf"): argument name prefix conflict ($dd #1 and $d #2), be careful about your macro definition! [macro:warn] macro 'bla' (defined on line 7 of "./conf/test34.conf"): argument '$dd' (#1) never used [macro:warn] macro 'bla' (defined on line 7 of "./conf/test34.conf"): argument '$d' (#2) never used [core:warn] macro foo conflict one on line 1 of macro 'foo' (defined on line 3 of "./conf/test34.conf") used on line 11 of "./conf/test34.conf" [core:warn] macro bla conflict two on line 1 of macro 'bla' (defined on line 7 of "./conf/test34.conf") used on line 12 of "./conf/test34.conf" [core:error] done on line 14. on line 14 of ./conf/test34.conf AH00526: Syntax error on line 14 of ./conf/test34.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test20.out0000644000000000000500000000031212076740760017246 0ustar rootsrc# testing with conf/test20.conf AH00526: Syntax error on line 1 of macro 'foo' (defined on line 3 of "./conf/test20.conf") used on line 10 of "./conf/test20.conf": without matching section # exit: 1 httpd-2.4.41/modules/core/test/ref/test52.out0000644000000000000500000000054112076740760017257 0ustar rootsrc# testing with conf/test52.conf [core:warn] foo macro contents line 1 on line 1 of macro 'foo' (defined on line 2 of "./conf/test52.conf") used on line 5 of "./conf/test52.conf" [core:error] done line 8. on line 8 of ./conf/test52.conf AH00526: Syntax error on line 8 of ./conf/test52.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test33.out0000644000000000000500000000017312076740760017257 0ustar rootsrc# testing with conf/test33.conf httpd: Syntax error on line 3 of ./conf/test33.conf: no macro defined before Use # exit: 1 httpd-2.4.41/modules/core/test/ref/test09.out0000644000000000000500000000032312076740760017257 0ustar rootsrc# testing with conf/test09.conf httpd: Syntax error on line 1 of macro 'foo' (defined on line 2 of "./conf/test09.conf") used on line 6 of "./conf/test09.conf": recursive use of macro 'foo' is invalid # exit: 1 httpd-2.4.41/modules/core/test/ref/test04.out0000644000000000000500000000027212076740760017255 0ustar rootsrc# testing with conf/test04.conf httpd: Syntax error on line 5 of ./conf/test04.conf: macro 'foo' (defined on line 2 of "./conf/test04.conf") used with 1 arguments instead of 0 # exit: 1 httpd-2.4.41/modules/core/test/ref/test27.out0000644000000000000500000000155212076740760017264 0ustar rootsrc# testing with conf/test27.conf [core:warn] foo.one /unexpected/1 on line 2 of macro 'foo.one' (defined on line 1 of "macro 'foo' (defined on line 3 of "./conf/test27.conf") used on line 11 of "./conf/test27.conf"") used on line 14 of "./conf/test27.conf" [core:warn] foo.two /unexpected/2 on line 2 of macro 'foo.two' (defined on line 1 of "macro 'foo' (defined on line 3 of "./conf/test27.conf") used on line 12 of "./conf/test27.conf"") used on line 15 of "./conf/test27.conf" [core:warn] foo.one /unexpected/1 on line 2 of macro 'foo.one' (defined on line 1 of "macro 'foo' (defined on line 3 of "./conf/test27.conf") used on line 11 of "./conf/test27.conf"") used on line 16 of "./conf/test27.conf" [core:error] done! on line 22 of ./conf/test27.conf AH00526: Syntax error on line 22 of ./conf/test27.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test06.out0000644000000000000500000000027212076740760017257 0ustar rootsrc# testing with conf/test06.conf httpd: Syntax error on line 5 of ./conf/test06.conf: macro 'foo' (defined on line 2 of "./conf/test06.conf") used with 2 arguments instead of 1 # exit: 1 httpd-2.4.41/modules/core/test/ref/test58.out0000644000000000000500000000020512076740760017262 0ustar rootsrc# testing with conf/test58.conf httpd: Syntax error on line 2 of ./conf/test58.conf: directive missing closing '>' # exit: 1 httpd-2.4.41/modules/core/test/ref/test38.out0000644000000000000500000000052312076740760017263 0ustar rootsrc# testing with conf/test38.conf [core:warn] it is really a good idea to have mod_macro.c installed. on line 4 of ./conf/test38.conf [core:error] it seems you do not have mod perl installed. on line 8 of ./conf/test38.conf AH00526: Syntax error on line 8 of ./conf/test38.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test64.out0000644000000000000500000000051212076740760017260 0ustar rootsrc# testing with conf/test64.conf [core:warn] on line 2 on line 2 of ./conf/test64.conf [core:warn] from line 3 to line 4 on line 4 of ./conf/test64.conf [core:error] done on line 5. on line 5 of ./conf/test64.conf AH00526: Syntax error on line 5 of ./conf/test64.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test40.out0000644000000000000500000000406112076740760017255 0ustar rootsrc# testing with conf/test40.conf AH00112: Warning: DocumentRoot [/foo/document/root/directory] does not exist [core:warn] location /A on line 2 of macro 'subdiraccesscontrol' (defined on line 7 of "./conf/test40.conf") used on line 15 of "./conf/test40.conf" [core:warn] location /B on line 2 of macro 'subdiraccesscontrol' (defined on line 7 of "./conf/test40.conf") used on line 16 of "./conf/test40.conf" [core:warn] location /C on line 2 of macro 'subdiraccesscontrol' (defined on line 7 of "./conf/test40.conf") used on line 17 of "./conf/test40.conf" [core:warn] location /D on line 2 of macro 'subdiraccesscontrol' (defined on line 7 of "./conf/test40.conf") used on line 18 of "./conf/test40.conf" [core:warn] location /E on line 2 of macro 'subdiraccesscontrol' (defined on line 7 of "./conf/test40.conf") used on line 19 of "./conf/test40.conf" [core:warn] location /G on line 2 of macro 'subdiraccesscontrol' (defined on line 7 of "./conf/test40.conf") used on line 20 of "./conf/test40.conf" [core:warn] location /H on line 2 of macro 'subdiraccesscontrol' (defined on line 7 of "./conf/test40.conf") used on line 21 of "./conf/test40.conf" [core:warn] location /J on line 2 of macro 'subdiraccesscontrol' (defined on line 7 of "./conf/test40.conf") used on line 22 of "./conf/test40.conf" [core:warn] location /K on line 2 of macro 'subdiraccesscontrol' (defined on line 7 of "./conf/test40.conf") used on line 23 of "./conf/test40.conf" [core:warn] location /L on line 2 of macro 'subdiraccesscontrol' (defined on line 7 of "./conf/test40.conf") used on line 24 of "./conf/test40.conf" [core:warn] location /M on line 2 of macro 'subdiraccesscontrol' (defined on line 7 of "./conf/test40.conf") used on line 25 of "./conf/test40.conf" [core:warn] location /N on line 2 of macro 'subdiraccesscontrol' (defined on line 7 of "./conf/test40.conf") used on line 26 of "./conf/test40.conf" [core:error] Stop configuration file processing. on line 33 of ./conf/test40.conf AH00526: Syntax error on line 33 of ./conf/test40.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test45.out0000644000000000000500000000474312076740760017271 0ustar rootsrc# testing with conf/test45.conf [macro:warn] macro 'warnings' (defined on line 3 of "./conf/test45.conf") argument name '&3' (#3) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'warnings' (defined on line 3 of "./conf/test45.conf") argument name '#5' (#5) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'warnings' (defined on line 3 of "./conf/test45.conf") argument name '~6' (#6) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'warnings' (defined on line 3 of "./conf/test45.conf") argument name '*7' (#7) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'warnings' (defined on line 3 of "./conf/test45.conf") argument name '.8' (#8) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'warnings' (defined on line 3 of "./conf/test45.conf") argument name ',9' (#9) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'warnings' (defined on line 3 of "./conf/test45.conf") argument name '!a' (#10) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'warnings' (defined on line 3 of "./conf/test45.conf") argument name '-b' (#11) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'warnings' (defined on line 3 of "./conf/test45.conf") argument name '+c' (#12) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'warnings' (defined on line 3 of "./conf/test45.conf") argument name '=d' (#13) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'warnings' (defined on line 3 of "./conf/test45.conf") argument name ':e' (#14) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'warnings' (defined on line 3 of "./conf/test45.conf") argument name ';f' (#15) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'warnings' (defined on line 3 of "./conf/test45.conf") argument name '?g' (#16) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'warnings' (defined on line 3 of "./conf/test45.conf"): empty contents! [core:error] done on line 7. on line 7 of ./conf/test45.conf AH00526: Syntax error on line 7 of ./conf/test45.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test69.out0000644000000000000500000000151212076740760017266 0ustar rootsrc# testing with conf/test69.conf [macro:warn] non blank chars found after ' on line 2 of ./conf/test69.conf: this stuff is ignored... [macro:warn] non blank chars found after directive closing on line 4 of ./conf/test69.conf: this stuff is ignored as well... [core:warn] Foo on line 1 of macro 'foo' (defined on line 2 of "./conf/test69.conf") used on line 5 of "./conf/test69.conf" [core:warn] Bla on line 1 of macro 'bla' (defined on line 6 of "./conf/test69.conf") used on line 9 of "./conf/test69.conf" [core:warn] Comments on line 1 of macro 'comments' (defined on line 10 of "./conf/test69.conf") used on line 13 of "./conf/test69.conf" [core:error] done on line 14. on line 14 of ./conf/test69.conf AH00526: Syntax error on line 14 of ./conf/test69.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test32.out0000644000000000000500000000034612076740760017260 0ustar rootsrc# testing with conf/test32.conf httpd: Syntax error on line 3 of ./conf/test32.conf: argument name conflict in macro 'foo' (defined on line 3 of "./conf/test32.conf"): argument '$arg2': #2 and #4, change argument names! # exit: 1 httpd-2.4.41/modules/core/test/ref/test15.out0000644000000000000500000000050312076740760017254 0ustar rootsrc# testing with conf/test15.conf [macro:warn] bad cumulated nesting (+1) in macro 'test' (defined on line 2 of "./conf/test15.conf") [core:error] should not reach this point. on line 9 of ./conf/test15.conf AH00526: Syntax error on line 9 of ./conf/test15.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test07.out0000644000000000000500000000031512076740760017256 0ustar rootsrc# testing with conf/test07.conf httpd: Syntax error on line 2 of ./conf/test07.conf: macro 'foo' (defined on line 2 of "./conf/test07.conf")\n\tcontents error: expected token not found: # exit: 1 httpd-2.4.41/modules/core/test/ref/test11.out0000644000000000000500000000065612076740760017261 0ustar rootsrc# testing with conf/test11.conf [core:warn] macro one.in line 1 on line 1 of macro 'one.in' (defined on line 1 of "macro 'foo' (defined on line 2 of "./conf/test11.conf") used on line 9 of "./conf/test11.conf"") used on line 12 of "./conf/test11.conf" [core:error] done line 15. on line 15 of ./conf/test11.conf AH00526: Syntax error on line 15 of ./conf/test11.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test42.out0000644000000000000500000000274312076740760017264 0ustar rootsrc# testing with conf/test42.conf [macro:warn] macro 'foo' (defined on line 3 of "./conf/test42.conf") used on line 7 of "./conf/test42.conf": empty argument #1 [macro:warn] macro 'foo' (defined on line 3 of "./conf/test42.conf") used on line 8 of "./conf/test42.conf": empty argument #1 [macro:warn] macro 'foo' (defined on line 3 of "./conf/test42.conf") used on line 9 of "./conf/test42.conf": empty argument #1 [macro:warn] macro 'foo' (defined on line 3 of "./conf/test42.conf") used on line 10 of "./conf/test42.conf": empty argument #1 [macro:warn] macro 'foo' (defined on line 3 of "./conf/test42.conf") used on line 11 of "./conf/test42.conf": empty argument #1 [core:warn] macro foo on line 1 of macro 'foo' (defined on line 3 of "./conf/test42.conf") used on line 7 of "./conf/test42.conf" [core:warn] macro foo on line 1 of macro 'foo' (defined on line 3 of "./conf/test42.conf") used on line 8 of "./conf/test42.conf" [core:warn] macro foo on line 1 of macro 'foo' (defined on line 3 of "./conf/test42.conf") used on line 9 of "./conf/test42.conf" [core:warn] macro foo on line 1 of macro 'foo' (defined on line 3 of "./conf/test42.conf") used on line 10 of "./conf/test42.conf" [core:warn] macro foo on line 1 of macro 'foo' (defined on line 3 of "./conf/test42.conf") used on line 11 of "./conf/test42.conf" [core:error] done on line 13. on line 13 of ./conf/test42.conf AH00526: Syntax error on line 13 of ./conf/test42.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test26.out0000644000000000000500000000212712076740760017262 0ustar rootsrc# testing with conf/test26.conf [macro:warn] macro 'funny' (defined on line 4 of "./conf/test26.conf") argument name 'first arg' (#1) without expected prefix, better prefix argument names with one of '$%@'. [macro:warn] macro 'funny' (defined on line 4 of "./conf/test26.conf") argument name 'second ... arg' (#2) without expected prefix, better prefix argument names with one of '$%@'. [core:warn] funny directory on line 2 of macro 'funny' (defined on line 4 of "./conf/test26.conf") used on line 13 of "./conf/test26.conf" [core:warn] funny location on line 5 of macro 'funny' (defined on line 4 of "./conf/test26.conf") used on line 13 of "./conf/test26.conf" [core:warn] funny directory on line 2 of macro 'funny' (defined on line 4 of "./conf/test26.conf") used on line 16 of "./conf/test26.conf" [core:warn] funny location on line 5 of macro 'funny' (defined on line 4 of "./conf/test26.conf") used on line 16 of "./conf/test26.conf" [core:error] done! on line 19 of ./conf/test26.conf AH00526: Syntax error on line 19 of ./conf/test26.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test39.out0000644000000000000500000000075012076740760017266 0ustar rootsrc# testing with conf/test39.conf [core:warn] Thanks for using mod_macro! on line 1 of macro 'modmacro' (defined on line 4 of "./conf/test39.conf") used on line 15 of "./conf/test39.conf" [core:warn] macro foo on line 1 of macro 'foo' (defined on line 17 of "./conf/test39.conf") used on line 21 of "./conf/test39.conf" [core:error] done! on line 23 of ./conf/test39.conf AH00526: Syntax error on line 23 of ./conf/test39.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test41.out0000644000000000000500000000073712076740760017264 0ustar rootsrc# testing with conf/test41.conf AH00112: Warning: DocumentRoot [/foo/document/root/directory] does not exist [core:warn] location /A on line 7 of ./conf/test41.conf [core:warn] location /B on line 11 of ./conf/test41.conf [core:warn] location /C on line 15 of ./conf/test41.conf [core:error] Stop configuration file processing. on line 20 of ./conf/test41.conf AH00526: Syntax error on line 20 of ./conf/test41.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test19.out0000644000000000000500000000147412076740760017270 0ustar rootsrc# testing with conf/test19.conf [core:warn] macro foo line 2 in Directory on line 1 of macro 'foo' (defined on line 3 of "./conf/test19.conf") used on line 9 of "./conf/test19.conf" [core:warn] macro foo line 2 in Location on line 1 of macro 'foo' (defined on line 3 of "./conf/test19.conf") used on line 13 of "./conf/test19.conf" [core:warn] macro foo line 2 in VirtualHost on line 1 of macro 'foo' (defined on line 3 of "./conf/test19.conf") used on line 17 of "./conf/test19.conf" [core:warn] macro foo line 2 in VirtualHost & Directory on line 1 of macro 'foo' (defined on line 3 of "./conf/test19.conf") used on line 22 of "./conf/test19.conf" [core:error] done line 26. on line 26 of ./conf/test19.conf AH00526: Syntax error on line 26 of ./conf/test19.conf: Configuration processing stopped by Error directive # exit: 1 httpd-2.4.41/modules/core/test/ref/test01.out0000644000000000000500000000020312076740760017244 0ustar rootsrc# testing with conf/test01.conf httpd: Syntax error on line 2 of ./conf/test01.conf: &1 ; \ echo "# exit: $$?" ; \ } > $@.tmp ; \ sed -e "s|$$PWD|.|g" \ -e "s|^\[[\.a-zA-Z0-9 :]*\] ||" \ -e "s|\[pid [0-9]*:tid [0-9]*] ||" \ $@.tmp > $@ ; \ $(RM) $@.tmp # cleanup .PHONY: clean clean: $(RM) *~ $(RM) -r out httpd-2.4.41/modules/core/mod_watchdog.mak0000644000000000000500000002364112701473373017002 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_watchdog.dsp !IF "$(CFG)" == "" CFG=mod_watchdog - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_watchdog - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_watchdog - Win32 Release" && "$(CFG)" != "mod_watchdog - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_watchdog.mak" CFG="mod_watchdog - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_watchdog - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_watchdog - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_watchdog - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_watchdog.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_watchdog.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_watchdog.obj" -@erase "$(INTDIR)\mod_watchdog.res" -@erase "$(INTDIR)\mod_watchdog_src.idb" -@erase "$(INTDIR)\mod_watchdog_src.pdb" -@erase "$(OUTDIR)\mod_watchdog.exp" -@erase "$(OUTDIR)\mod_watchdog.lib" -@erase "$(OUTDIR)\mod_watchdog.pdb" -@erase "$(OUTDIR)\mod_watchdog.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "AP_WD_DECLARE_EXPORT" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_watchdog_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_watchdog.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_watchdog.so" /d LONG_NAME="watchdog_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_watchdog.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_watchdog.pdb" /debug /out:"$(OUTDIR)\mod_watchdog.so" /implib:"$(OUTDIR)\mod_watchdog.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_watchdog.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_watchdog.obj" \ "$(INTDIR)\mod_watchdog.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_watchdog.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_watchdog.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_watchdog.so" if exist .\Release\mod_watchdog.so.manifest mt.exe -manifest .\Release\mod_watchdog.so.manifest -outputresource:.\Release\mod_watchdog.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_watchdog - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_watchdog.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_watchdog.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\mod_watchdog.obj" -@erase "$(INTDIR)\mod_watchdog.res" -@erase "$(INTDIR)\mod_watchdog_src.idb" -@erase "$(INTDIR)\mod_watchdog_src.pdb" -@erase "$(OUTDIR)\mod_watchdog.exp" -@erase "$(OUTDIR)\mod_watchdog.lib" -@erase "$(OUTDIR)\mod_watchdog.pdb" -@erase "$(OUTDIR)\mod_watchdog.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "AP_WD_DECLARE_EXPORT" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_watchdog_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\mod_watchdog.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_watchdog.so" /d LONG_NAME="watchdog_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_watchdog.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_watchdog.pdb" /debug /out:"$(OUTDIR)\mod_watchdog.so" /implib:"$(OUTDIR)\mod_watchdog.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_watchdog.so LINK32_OBJS= \ "$(INTDIR)\mod_watchdog.obj" \ "$(INTDIR)\mod_watchdog.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_watchdog.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_watchdog.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_watchdog.so" if exist .\Debug\mod_watchdog.so.manifest mt.exe -manifest .\Debug\mod_watchdog.so.manifest -outputresource:.\Debug\mod_watchdog.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_watchdog.dep") !INCLUDE "mod_watchdog.dep" !ELSE !MESSAGE Warning: cannot find "mod_watchdog.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_watchdog - Win32 Release" || "$(CFG)" == "mod_watchdog - Win32 Debug" !IF "$(CFG)" == "mod_watchdog - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\core" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\core" !ELSEIF "$(CFG)" == "mod_watchdog - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\core" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\core" !ENDIF !IF "$(CFG)" == "mod_watchdog - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\core" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\core" !ELSEIF "$(CFG)" == "mod_watchdog - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\core" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\core" !ENDIF !IF "$(CFG)" == "mod_watchdog - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\core" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\core" !ELSEIF "$(CFG)" == "mod_watchdog - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\core" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\core" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_watchdog - Win32 Release" "$(INTDIR)\mod_watchdog.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_watchdog.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_watchdog.so" /d LONG_NAME="watchdog_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_watchdog - Win32 Debug" "$(INTDIR)\mod_watchdog.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\mod_watchdog.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_watchdog.so" /d LONG_NAME="watchdog_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_watchdog.c "$(INTDIR)\mod_watchdog.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/modules/core/mod_watchdog.dep0000644000000000000500000000407412674411515017000 0ustar rootsrc# Microsoft Developer Studio Generated Dependency File, included by mod_watchdog.mak ..\..\build\win32\httpd.rc : \ "..\..\include\ap_release.h"\ .\mod_watchdog.c : \ "..\..\include\ap_config.h"\ "..\..\include\ap_config_layout.h"\ "..\..\include\ap_expr.h"\ "..\..\include\ap_hooks.h"\ "..\..\include\ap_mmn.h"\ "..\..\include\ap_mpm.h"\ "..\..\include\ap_provider.h"\ "..\..\include\ap_regex.h"\ "..\..\include\ap_release.h"\ "..\..\include\apache_noprobes.h"\ "..\..\include\http_config.h"\ "..\..\include\http_core.h"\ "..\..\include\http_log.h"\ "..\..\include\httpd.h"\ "..\..\include\os.h"\ "..\..\include\scoreboard.h"\ "..\..\include\util_cfgtree.h"\ "..\..\include\util_filter.h"\ "..\..\include\util_mutex.h"\ "..\..\srclib\apr-util\include\apr_buckets.h"\ "..\..\srclib\apr-util\include\apr_hooks.h"\ "..\..\srclib\apr-util\include\apr_optional.h"\ "..\..\srclib\apr-util\include\apr_optional_hooks.h"\ "..\..\srclib\apr-util\include\apr_uri.h"\ "..\..\srclib\apr-util\include\apu.h"\ "..\..\srclib\apr\include\apr.h"\ "..\..\srclib\apr\include\apr_allocator.h"\ "..\..\srclib\apr\include\apr_dso.h"\ "..\..\srclib\apr\include\apr_errno.h"\ "..\..\srclib\apr\include\apr_file_info.h"\ "..\..\srclib\apr\include\apr_file_io.h"\ "..\..\srclib\apr\include\apr_general.h"\ "..\..\srclib\apr\include\apr_global_mutex.h"\ "..\..\srclib\apr\include\apr_hash.h"\ "..\..\srclib\apr\include\apr_inherit.h"\ "..\..\srclib\apr\include\apr_mmap.h"\ "..\..\srclib\apr\include\apr_network_io.h"\ "..\..\srclib\apr\include\apr_poll.h"\ "..\..\srclib\apr\include\apr_pools.h"\ "..\..\srclib\apr\include\apr_portable.h"\ "..\..\srclib\apr\include\apr_proc_mutex.h"\ "..\..\srclib\apr\include\apr_ring.h"\ "..\..\srclib\apr\include\apr_shm.h"\ "..\..\srclib\apr\include\apr_strings.h"\ "..\..\srclib\apr\include\apr_tables.h"\ "..\..\srclib\apr\include\apr_thread_mutex.h"\ "..\..\srclib\apr\include\apr_thread_proc.h"\ "..\..\srclib\apr\include\apr_time.h"\ "..\..\srclib\apr\include\apr_user.h"\ "..\..\srclib\apr\include\apr_want.h"\ ".\mod_watchdog.h"\ httpd-2.4.41/modules/core/mod_so.c0000644000000000000500000003537012757564422015306 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * This module is used to load Apache modules at runtime. This means that the * server functionality can be extended without recompiling and even without * taking the server down at all. Only a HUP or AP_SIG_GRACEFUL signal * needs to be sent to the server to reload the dynamically loaded modules. * * To use, you'll first need to build your module as a shared library, then * update your configuration (httpd.conf) to get the Apache core to load the * module at start-up. * * The easiest way to build a module as a shared library is to use the * `SharedModule' command in the Configuration file, instead of `AddModule'. * You should also change the file extension from `.o' to `.so'. So, for * example, to build the status module as a shared library edit Configuration * and change * AddModule modules/standard/mod_status.o * to * SharedModule modules/standard/mod_status.so * * Run Configure and make. Now Apache's httpd binary will _not_ include * mod_status. Instead a shared object called mod_status.so will be build, in * the modules/standard directory. You can build most of the modules as shared * libraries like this. * * To use the shared module, move the .so file(s) into an appropriate * directory. You might like to create a directory called "modules" under you * server root for this (e.g. /usr/local/httpd/modules). * * Then edit your conf/httpd.conf file, and add LoadModule lines. For * example * LoadModule status_module modules/mod_status.so * * The first argument is the module's structure name (look at the end of the * module source to find this). The second option is the path to the module * file, relative to the server root. Put these directives right at the top * of your httpd.conf file. * * Now you can start Apache. A message will be logged at "debug" level to your * error_log to confirm that the module(s) are loaded (use "LogLevel debug" * directive to get these log messages). * * If you edit the LoadModule directives while the server is live you can get * Apache to re-load the modules by sending it a HUP or AP_SIG_GRACEFUL * signal as normal. You can use this to dynamically change the capability * of your server without bringing it down. * * Because currently there is only limited builtin support in the Configure * script for creating the shared library files (`.so'), please consult your * vendors cc(1), ld(1) and dlopen(3) manpages to find out the appropriate * compiler and linker flags and insert them manually into the Configuration * file under CFLAGS_SHLIB, LDFLAGS_SHLIB and LDFLAGS_SHLIB_EXPORT. * * If you still have problems figuring out the flags both try the paper * http://developer.netscape.com/library/documentation/enterprise * /unix/svrplug.htm#1013807 * or install a Perl 5 interpreter on your platform and then run the command * * $ perl -V:usedl -V:ccdlflags -V:cccdlflags -V:lddlflags * * This gives you what type of dynamic loading Perl 5 uses on your platform * and which compiler and linker flags Perl 5 uses to create the shared object * files. * * Another location where you can find useful hints is the `ltconfig' script * of the GNU libtool 1.2 package. Search for your platform name inside the * various "case" constructs. * */ #include "apr.h" #include "apr_dso.h" #include "apr_strings.h" #include "apr_errno.h" #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "http_core.h" #include "mod_so.h" module AP_MODULE_DECLARE_DATA so_module; /* * Server configuration to keep track of actually * loaded modules and the corresponding module name. */ typedef struct so_server_conf { apr_array_header_t *loaded_modules; } so_server_conf; static void *so_sconf_create(apr_pool_t *p, server_rec *s) { so_server_conf *soc; soc = (so_server_conf *)apr_pcalloc(p, sizeof(so_server_conf)); soc->loaded_modules = apr_array_make(p, DYNAMIC_MODULE_LIMIT, sizeof(ap_module_symbol_t)); return (void *)soc; } #ifndef NO_DLOPEN /* * This is the cleanup for a loaded shared object. It unloads the module. * This is called as a cleanup function from the core. */ static apr_status_t unload_module(void *data) { ap_module_symbol_t *modi = (ap_module_symbol_t*)data; /* only unload if module information is still existing */ if (modi->modp == NULL) return APR_SUCCESS; /* remove the module pointer from the core structure */ ap_remove_loaded_module(modi->modp); /* destroy the module information */ modi->modp = NULL; modi->name = NULL; return APR_SUCCESS; } static const char *dso_load(cmd_parms *cmd, apr_dso_handle_t **modhandlep, const char *filename, const char **used_filename) { int retry = 0; const char *fullname = ap_server_root_relative(cmd->temp_pool, filename); char my_error[256]; if (filename != NULL && ap_strchr_c(filename, '/') == NULL) { /* retry on error without path to use dlopen()'s search path */ retry = 1; } if (fullname == NULL && !retry) { return apr_psprintf(cmd->temp_pool, "Invalid %s path %s", cmd->cmd->name, filename); } *used_filename = fullname; if (apr_dso_load(modhandlep, fullname, cmd->pool) == APR_SUCCESS) { return NULL; } if (retry) { *used_filename = filename; if (apr_dso_load(modhandlep, filename, cmd->pool) == APR_SUCCESS) return NULL; } return apr_pstrcat(cmd->temp_pool, "Cannot load ", filename, " into server: ", apr_dso_error(*modhandlep, my_error, sizeof(my_error)), NULL); } /* * This is called for the directive LoadModule and actually loads * a shared object file into the address space of the server process. */ static const char *load_module(cmd_parms *cmd, void *dummy, const char *modname, const char *filename) { apr_dso_handle_t *modhandle; apr_dso_handle_sym_t modsym; module *modp; const char *module_file; so_server_conf *sconf; ap_module_symbol_t *modi; ap_module_symbol_t *modie; int i; const char *error; /* we need to setup this value for dummy to make sure that we don't try * to add a non-existent tree into the build when we return to * execute_now. */ *(ap_directive_t **)dummy = NULL; /* * check for already existing module * If it already exists, we have nothing to do * Check both dynamically-loaded modules and statically-linked modules. */ sconf = (so_server_conf *)ap_get_module_config(cmd->server->module_config, &so_module); modie = (ap_module_symbol_t *)sconf->loaded_modules->elts; for (i = 0; i < sconf->loaded_modules->nelts; i++) { modi = &modie[i]; if (modi->name != NULL && strcmp(modi->name, modname) == 0) { ap_log_perror(APLOG_MARK, APLOG_WARNING, 0, cmd->pool, APLOGNO(01574) "module %s is already loaded, skipping", modname); return NULL; } } for (i = 0; ap_preloaded_modules[i]; i++) { const char *preload_name; apr_size_t preload_len; apr_size_t thismod_len; modp = ap_preloaded_modules[i]; /* make sure we're comparing apples with apples * make sure name of preloaded module is mod_FOO.c * make sure name of structure being loaded is FOO_module */ if (memcmp(modp->name, "mod_", 4)) { continue; } preload_name = modp->name + strlen("mod_"); preload_len = strlen(preload_name) - 2; if (strlen(modname) <= strlen("_module")) { continue; } thismod_len = strlen(modname) - strlen("_module"); if (strcmp(modname + thismod_len, "_module")) { continue; } if (thismod_len != preload_len) { continue; } if (!memcmp(modname, preload_name, preload_len)) { return apr_pstrcat(cmd->pool, "module ", modname, " is built-in and can't be loaded", NULL); } } modi = apr_array_push(sconf->loaded_modules); modi->name = modname; /* * Load the file into the Apache address space */ error = dso_load(cmd, &modhandle, filename, &module_file); if (error) return error; ap_log_perror(APLOG_MARK, APLOG_DEBUG, 0, cmd->pool, APLOGNO(01575) "loaded module %s from %s", modname, module_file); /* * Retrieve the pointer to the module structure through the module name: * First with the hidden variant (prefix `AP_') and then with the plain * symbol name. */ if (apr_dso_sym(&modsym, modhandle, modname) != APR_SUCCESS) { char my_error[256]; return apr_pstrcat(cmd->pool, "Can't locate API module structure `", modname, "' in file ", module_file, ": ", apr_dso_error(modhandle, my_error, sizeof(my_error)), NULL); } modp = (module*) modsym; modp->dynamic_load_handle = (apr_dso_handle_t *)modhandle; modi->modp = modp; /* * Make sure the found module structure is really a module structure * */ if (modp->magic != MODULE_MAGIC_COOKIE) { return apr_psprintf(cmd->pool, "API module structure '%s' in file %s " "is garbled - expected signature %08lx but saw " "%08lx - perhaps this is not an Apache module DSO, " "or was compiled for a different Apache version?", modname, module_file, MODULE_MAGIC_COOKIE, modp->magic); } /* * Add this module to the Apache core structures */ error = ap_add_loaded_module(modp, cmd->pool, modname); if (error) { return error; } /* * Register a cleanup in the config apr_pool_t (normally pconf). When * we do a restart (or shutdown) this cleanup will cause the * shared object to be unloaded. */ apr_pool_cleanup_register(cmd->pool, modi, unload_module, apr_pool_cleanup_null); /* * Finally we need to run the configuration process for the module */ ap_single_module_configure(cmd->pool, cmd->server, modp); return NULL; } /* * This implements the LoadFile directive and loads an arbitrary * shared object file into the address space of the server process. */ static const char *load_file(cmd_parms *cmd, void *dummy, const char *filename) { apr_dso_handle_t *handle; const char *used_file, *error; error = dso_load(cmd, &handle, filename, &used_file); if (error) return error; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, NULL, APLOGNO(01576) "loaded file %s", used_file); return NULL; } static module *ap_find_loaded_module_symbol(server_rec *s, const char *modname) { so_server_conf *sconf; ap_module_symbol_t *modi; ap_module_symbol_t *modie; int i; sconf = (so_server_conf *)ap_get_module_config(s->module_config, &so_module); modie = (ap_module_symbol_t *)sconf->loaded_modules->elts; for (i = 0; i < sconf->loaded_modules->nelts; i++) { modi = &modie[i]; if (modi->name != NULL && strcmp(modi->name, modname) == 0) { return modi->modp; } } return NULL; } static void dump_loaded_modules(apr_pool_t *p, server_rec *s) { ap_module_symbol_t *modie; ap_module_symbol_t *modi; so_server_conf *sconf; int i; apr_file_t *out = NULL; if (!ap_exists_config_define("DUMP_MODULES")) { return; } apr_file_open_stdout(&out, p); apr_file_printf(out, "Loaded Modules:\n"); sconf = (so_server_conf *)ap_get_module_config(s->module_config, &so_module); for (i = 0; ; i++) { modi = &ap_prelinked_module_symbols[i]; if (modi->name != NULL) { apr_file_printf(out, " %s (static)\n", modi->name); } else { break; } } modie = (ap_module_symbol_t *)sconf->loaded_modules->elts; for (i = 0; i < sconf->loaded_modules->nelts; i++) { modi = &modie[i]; if (modi->name != NULL) { apr_file_printf(out, " %s (shared)\n", modi->name); } } } #else /* not NO_DLOPEN */ static const char *load_file(cmd_parms *cmd, void *dummy, const char *filename) { ap_log_perror(APLOG_MARK, APLOG_STARTUP, 0, cmd->pool, APLOGNO(01577) "WARNING: LoadFile not supported on this platform"); return NULL; } static const char *load_module(cmd_parms *cmd, void *dummy, const char *modname, const char *filename) { ap_log_perror(APLOG_MARK, APLOG_STARTUP, 0, cmd->pool, APLOGNO(01578) "WARNING: LoadModule not supported on this platform"); return NULL; } #endif /* NO_DLOPEN */ static void register_hooks(apr_pool_t *p) { #ifndef NO_DLOPEN APR_REGISTER_OPTIONAL_FN(ap_find_loaded_module_symbol); ap_hook_test_config(dump_loaded_modules, NULL, NULL, APR_HOOK_MIDDLE); #endif } static const command_rec so_cmds[] = { AP_INIT_TAKE2("LoadModule", load_module, NULL, RSRC_CONF | EXEC_ON_READ, "a module name and the name of a shared object file to load it from"), AP_INIT_ITERATE("LoadFile", load_file, NULL, RSRC_CONF | EXEC_ON_READ, "shared object file or library to load into the server at runtime"), { NULL } }; AP_DECLARE_MODULE(so) = { STANDARD20_MODULE_STUFF, NULL, /* create per-dir config */ NULL, /* merge per-dir config */ so_sconf_create, /* server config */ NULL, /* merge server config */ so_cmds, /* command apr_table_t */ register_hooks /* register hooks */ }; httpd-2.4.41/modules/core/mod_macro.c0000644000000000000500000007404113202317432015743 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "apr.h" #include "apr_strings.h" #include "apr_hash.h" /************************************************ COMPILE TIME DEBUG CONTROL */ /* debug: #define MOD_MACRO_DEBUG 1 gdb: run -f ./test/conf/test??.conf */ /* #define MOD_MACRO_DEBUG 1 */ #undef MOD_MACRO_DEBUG #if defined(debug) #undef debug #endif /* debug */ #if defined(MOD_MACRO_DEBUG) #define debug(stmt) stmt #else #define debug(stmt) #endif /* MOD_MACRO_DEBUG */ /******************************************************** MODULE DECLARATION */ module AP_MODULE_DECLARE_DATA macro_module; /********************************************************** MACRO MANAGEMENT */ /* this is a macro: name, arguments, contents, location. */ typedef struct { char *name; /* lower case name of the macro */ apr_array_header_t *arguments; /* of char*, macro parameter names */ apr_array_header_t *contents; /* of char*, macro body */ char *location; /* of macro definition, for error messages */ } ap_macro_t; /* configuration tokens. */ #define BEGIN_MACRO "" #define USE_MACRO "Use" #define UNDEF_MACRO "UndefMacro" /* Macros are kept globally... They are not per-server or per-directory entities. note: they are in a temp_pool, and there is a lazy initialization. ap_macros is reset to NULL in pre_config hook to not depend on static vs dynamic configuration. hash type: (char *) name -> (ap_macro_t *) macro */ static apr_hash_t *ap_macros = NULL; /*************************************************************** PARSE UTILS */ #define empty_string_p(p) (!(p) || *(p) == '\0') #define trim(line) while (*(line) == ' ' || *(line) == '\t') (line)++ /* return configuration-parsed arguments from line as an array. the line is expected not to contain any '\n'? */ static apr_array_header_t *get_arguments(apr_pool_t * pool, const char *line) { apr_array_header_t *args = apr_array_make(pool, 1, sizeof(char *)); trim(line); while (*line) { char *arg = ap_getword_conf(pool, &line); char **new = apr_array_push(args); *new = arg; trim(line); } return args; } /* warn if anything non blank appears, but ignore comments... */ static void warn_if_non_blank(const char * what, char * ptr, ap_configfile_t * cfg) { char * p; for (p=ptr; *p; p++) { if (*p == '#') break; if (*p != ' ' && *p != '\t') { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, NULL, APLOGNO(02989) "%s on line %d of %s: %s", what, cfg->line_number, cfg->name, ptr); break; } } } /* get read lines as an array till end_token. counts nesting for begin_token/end_token. it assumes a line-per-line configuration (thru getline). this function could be exported. begin_token may be NULL. */ static char *get_lines_till_end_token(apr_pool_t * pool, ap_configfile_t * config_file, const char *end_token, const char *begin_token, const char *where, apr_array_header_t ** plines) { apr_array_header_t *lines = apr_array_make(pool, 1, sizeof(char *)); char line[MAX_STRING_LEN]; /* sorry, but this is expected by getline:-( */ int macro_nesting = 1, any_nesting = 1; int line_number_start = config_file->line_number; while (!ap_cfg_getline(line, MAX_STRING_LEN, config_file)) { char *ptr = line; char *first, **new; /* skip comments */ if (*line == '#') continue; first = ap_getword_conf_nc(pool, &ptr); if (first) { /* detect nesting... */ if (!strncmp(first, "line_number - line_number_start, where); } } else if (!strncmp(first, "<", 1)) { any_nesting++; } if (!strcasecmp(first, end_token)) { /* check for proper closing */ char * endp = (char *) ap_strrchr_c(line, '>'); /* this cannot happen if end_token contains '>' */ if (endp == NULL) { return "end directive missing closing '>'"; } warn_if_non_blank( APLOGNO(02794) "non blank chars found after directive closing", endp+1, config_file); macro_nesting--; if (!macro_nesting) { if (any_nesting) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, NULL, APLOGNO(02795) "bad cumulated nesting (%+d) in %s", any_nesting, where); } *plines = lines; return NULL; } } else if (begin_token && !strcasecmp(first, begin_token)) { macro_nesting++; } } new = apr_array_push(lines); *new = apr_psprintf(pool, "%s" APR_EOL_STR, line); /* put EOL back? */ } return apr_psprintf(pool, "expected token not found: %s", end_token); } /* the @* arguments are double-quote escaped when substituted */ #define ESCAPE_ARG '@' /* other $* and %* arguments are simply replaced without escaping */ #define ARG_PREFIX "$%@" /* characters allowed in an argument? not used yet, because that would trigger some backward compatibility. */ #define ARG_CONTENT \ "abcdefghijklmnopqrstuvwxyz" \ "ABCDEFGHIJKLMNOPQRSTUVWXYZ" \ "0123456789_" ARG_PREFIX /* returns whether it looks like an argument, i.e. prefixed by ARG_PREFIX. */ static int looks_like_an_argument(const char *word) { return ap_strchr(ARG_PREFIX, *word) != 0; } /* generates an error on macro with two arguments of the same name. generates an error if a macro argument name is empty. generates a warning if arguments name prefixes conflict. generates a warning if the first char of an argument is not in ARG_PREFIX */ static const char *check_macro_arguments(apr_pool_t * pool, const ap_macro_t * macro) { char **tab = (char **) macro->arguments->elts; int nelts = macro->arguments->nelts; int i; for (i = 0; i < nelts; i++) { size_t ltabi = strlen(tab[i]); int j; if (ltabi == 0) { return apr_psprintf(pool, "macro '%s' (%s): empty argument #%d name", macro->name, macro->location, i + 1); } else if (!looks_like_an_argument(tab[i])) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, NULL, APLOGNO(02796) "macro '%s' (%s) " "argument name '%s' (#%d) without expected prefix, " "better prefix argument names with one of '%s'.", macro->name, macro->location, tab[i], i + 1, ARG_PREFIX); } for (j = i + 1; j < nelts; j++) { size_t ltabj = strlen(tab[j]); /* must not use the same argument name twice */ if (!strcmp(tab[i], tab[j])) { return apr_psprintf(pool, "argument name conflict in macro '%s' (%s): " "argument '%s': #%d and #%d, " "change argument names!", macro->name, macro->location, tab[i], i + 1, j + 1); } /* warn about common prefix, but only if non empty names */ if (ltabi && ltabj && !strncmp(tab[i], tab[j], ltabi < ltabj ? ltabi : ltabj)) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, NULL, APLOGNO(02797) "macro '%s' (%s): " "argument name prefix conflict (%s #%d and %s #%d), " "be careful about your macro definition!", macro->name, macro->location, tab[i], i + 1, tab[j], j + 1); } } } return NULL; } /* warn about empty strings in array. could be legitimate. */ static void check_macro_use_arguments(const char *where, const apr_array_header_t * array) { char **tab = (char **) array->elts; int i; for (i = 0; i < array->nelts; i++) { if (empty_string_p(tab[i])) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, NULL, APLOGNO(02798) "%s: empty argument #%d", where, i + 1); } } } /******************************************************** SUBSTITUTION UTILS */ /* could be switched to '\'' */ #define DELIM '"' #define ESCAPE '\\' /* returns the number of needed escapes for the string */ static int number_of_escapes(const char delim, const char *str) { int nesc = 0; const char *s = str; while (*s) { if (*s == ESCAPE || *s == delim) nesc++; s++; } debug(fprintf(stderr, "escapes: %d ---%s---\n", nesc, str)); return nesc; } /* replace name by replacement at the beginning of buf of bufsize. returns an error message or NULL. C is not really a nice language for processing strings. */ static char *substitute(char *buf, const int bufsize, const char *name, const char *replacement, const int do_esc) { int lbuf = strlen(buf), lname = strlen(name), lrepl = strlen(replacement), lsubs = lrepl + (do_esc ? (2 + number_of_escapes(DELIM, replacement)) : 0), shift = lsubs - lname, size = lbuf + shift, i, j; /* buf must starts with name */ ap_assert(!strncmp(buf, name, lname)); /* hmmm??? */ if (!strcmp(name, replacement)) return NULL; debug(fprintf(stderr, "substitute(%s,%s,%s,%d,sh=%d,lbuf=%d,lrepl=%d,lsubs=%d)\n", buf, name, replacement, do_esc, shift, lbuf, lrepl, lsubs)); if (size >= bufsize) { /* could/should I reallocate? */ return "cannot substitute, buffer size too small"; } /* cannot use strcpy as strings may overlap */ if (shift != 0) { memmove(buf + lname + shift, buf + lname, lbuf - lname + 1); } /* insert the replacement with escapes */ j = 0; if (do_esc) buf[j++] = DELIM; for (i = 0; i < lrepl; i++, j++) { if (do_esc && (replacement[i] == DELIM || replacement[i] == ESCAPE)) buf[j++] = ESCAPE; buf[j] = replacement[i]; } if (do_esc) buf[j++] = DELIM; return NULL; } /* find first occurrence of args in buf. in case of conflict, the LONGEST argument is kept. (could be the FIRST?). returns the pointer and the whichone found, or NULL. */ static char *next_substitution(const char *buf, const apr_array_header_t * args, int *whichone) { char *chosen = NULL, **tab = (char **) args->elts; size_t lchosen = 0; int i; for (i = 0; i < args->nelts; i++) { char *found = ap_strstr((char *) buf, tab[i]); size_t lfound = strlen(tab[i]); if (found && (!chosen || found < chosen || (found == chosen && lchosen < lfound))) { chosen = found; lchosen = lfound; *whichone = i; } } return chosen; } /* substitute macro arguments by replacements in buf of bufsize. returns an error message or NULL. if used is defined, returns the used macro arguments. */ static const char *substitute_macro_args( char *buf, int bufsize, const ap_macro_t * macro, const apr_array_header_t * replacements, apr_array_header_t * used) { char *ptr = buf, **atab = (char **) macro->arguments->elts, **rtab = (char **) replacements->elts; int whichone = -1; if (used) { ap_assert(used->nalloc >= replacements->nelts); } debug(fprintf(stderr, "1# %s", buf)); while ((ptr = next_substitution(ptr, macro->arguments, &whichone))) { const char *errmsg = substitute(ptr, buf - ptr + bufsize, atab[whichone], rtab[whichone], atab[whichone][0] == ESCAPE_ARG); if (errmsg) { return errmsg; } ptr += strlen(rtab[whichone]); if (used) { used->elts[whichone] = 1; } } debug(fprintf(stderr, "2# %s", buf)); return NULL; } /* perform substitutions in a macro contents and return the result as a newly allocated array, if result is defined. may also return an error message. passes used down to substitute_macro_args. */ static const char *process_content(apr_pool_t * pool, const ap_macro_t * macro, const apr_array_header_t * replacements, apr_array_header_t * used, apr_array_header_t ** result) { apr_array_header_t *contents = macro->contents; char line[MAX_STRING_LEN]; int i; if (result) { *result = apr_array_make(pool, contents->nelts, sizeof(char *)); } /* for each line of the macro body */ for (i = 0; i < contents->nelts; i++) { const char *errmsg; /* copy the line and substitute macro parameters */ strncpy(line, ((char **) contents->elts)[i], MAX_STRING_LEN - 1); errmsg = substitute_macro_args(line, MAX_STRING_LEN, macro, replacements, used); if (errmsg) { return apr_psprintf(pool, "while processing line %d of macro '%s' (%s) %s", i + 1, macro->name, macro->location, errmsg); } /* append substituted line to result array */ if (result) { char **new = apr_array_push(*result); *new = apr_pstrdup(pool, line); } } return NULL; } /* warn if some macro arguments are not used. */ static const char *check_macro_contents(apr_pool_t * pool, const ap_macro_t * macro) { int nelts = macro->arguments->nelts; char **names = (char **) macro->arguments->elts; apr_array_header_t *used; int i; const char *errmsg; if (macro->contents->nelts == 0) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, NULL, APLOGNO(02799) "macro '%s' (%s): empty contents!", macro->name, macro->location); return NULL; /* no need to further warnings... */ } used = apr_array_make(pool, nelts, sizeof(char)); for (i = 0; i < nelts; i++) { used->elts[i] = 0; } errmsg = process_content(pool, macro, macro->arguments, used, NULL); if (errmsg) { return errmsg; } for (i = 0; i < nelts; i++) { if (!used->elts[i]) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, NULL, APLOGNO(02800) "macro '%s' (%s): argument '%s' (#%d) never used", macro->name, macro->location, names[i], i + 1); } } return NULL; } /************************************************** MACRO PSEUDO CONFIG FILE */ /* The expanded content of the macro is to be parsed as a ap_configfile_t. This is used to have some kind of old fashionned C object oriented inherited data structure for configs. The following struct stores the contents. This structure holds pointers (next, upper) to the current "file" which was being processed and is interrupted by the macro expansion. At the end of processing the macro, the initial data structure will be put back in place (see function next_one) and the reading will go on from there. If macros are used within macros, there may be a cascade of such temporary arrays used to insert the expanded macro contents before resuming the real file processing. There is some hopus-pocus to deal with line_number when transiting from one config to the other. */ typedef struct { int index; /* current element */ int char_index; /* current char in element */ int length; /* cached length of the current line */ apr_array_header_t *contents; /* array of char * */ ap_configfile_t *next; /* next config once this one is processed */ ap_configfile_t **upper; /* hack: where to update it if needed */ } array_contents_t; /* Get next config if any. this may be called several times if there are continuations. */ static int next_one(array_contents_t * ml) { if (ml->next) { ap_assert(ml->upper); *(ml->upper) = ml->next; return 1; } return 0; } /* returns next char if possible this may involve switching to enclosing config. */ static apr_status_t array_getch(char *ch, void *param) { array_contents_t *ml = (array_contents_t *) param; char **tab = (char **) ml->contents->elts; while (ml->char_index >= ml->length) { if (ml->index >= ml->contents->nelts) { /* maybe update */ if (ml->next && ml->next->getch && next_one(ml)) { apr_status_t rc = ml->next->getch(ch, ml->next->param); if (*ch==LF) ml->next->line_number++; return rc; } return APR_EOF; } ml->index++; ml->char_index = 0; ml->length = ml->index >= ml->contents->nelts ? 0 : strlen(tab[ml->index]); } *ch = tab[ml->index][ml->char_index++]; return APR_SUCCESS; } /* returns a buf a la fgets. no more than a line at a time, otherwise the parsing is too much ahead... NULL at EOF. */ static apr_status_t array_getstr(void *buf, size_t bufsize, void *param) { array_contents_t *ml = (array_contents_t *) param; char *buffer = (char *) buf; char next = '\0'; size_t i = 0; apr_status_t rc = APR_SUCCESS; /* read chars from stream, stop on newline */ while (i < bufsize - 1 && next != LF && ((rc = array_getch(&next, param)) == APR_SUCCESS)) { buffer[i++] = next; } if (rc == APR_EOF) { /* maybe update to next, possibly a recursion */ if (next_one(ml)) { ap_assert(ml->next->getstr); /* keep next line count in sync! the caller will update the current line_number, we need to forward to the next */ ml->next->line_number++; return ml->next->getstr(buf, bufsize, ml->next->param); } /* else that is really all we can do */ return APR_EOF; } buffer[i] = '\0'; return APR_SUCCESS; } /* close the array stream? */ static apr_status_t array_close(void *param) { array_contents_t *ml = (array_contents_t *) param; /* move index at end of stream... */ ml->index = ml->contents->nelts; ml->char_index = ml->length; return APR_SUCCESS; } /* create an array config stream insertion "object". could be exported. */ static ap_configfile_t *make_array_config(apr_pool_t * pool, apr_array_header_t * contents, const char *where, ap_configfile_t * cfg, ap_configfile_t ** upper) { array_contents_t *ls = (array_contents_t *) apr_palloc(pool, sizeof(array_contents_t)); ap_assert(ls!=NULL); ls->index = 0; ls->char_index = 0; ls->contents = contents; ls->length = ls->contents->nelts < 1 ? 0 : strlen(((char **) ls->contents->elts)[0]); ls->next = cfg; ls->upper = upper; return ap_pcfg_open_custom(pool, where, (void *) ls, array_getch, array_getstr, array_close); } /********************************************************** KEYWORD HANDLING */ /* handles: any trash there is ignored... */ static const char *macro_section(cmd_parms * cmd, void *dummy, const char *arg) { apr_pool_t *pool; char *endp, *name, *where; const char *errmsg; ap_macro_t *macro; debug(fprintf(stderr, "macro_section: arg='%s'\n", arg)); /* lazy initialization */ if (ap_macros == NULL) { pool = cmd->pool; ap_macros = apr_hash_make(pool); ap_assert(ap_macros != NULL); apr_pool_cleanup_register(pool, &ap_macros, ap_pool_cleanup_set_null, apr_pool_cleanup_null); } else { pool = apr_hash_pool_get(ap_macros); } endp = (char *) ap_strrchr_c(arg, '>'); if (endp == NULL) { return BEGIN_MACRO "> directive missing closing '>'"; } if (endp == arg) { return BEGIN_MACRO " macro definition: empty name"; } warn_if_non_blank(APLOGNO(02801) "non blank chars found after " BEGIN_MACRO " closing '>'", endp+1, cmd->config_file); /* coldly drop '>[^>]*$' out */ *endp = '\0'; /* get lowercase macro name */ name = ap_getword_conf(pool, &arg); if (empty_string_p(name)) { return BEGIN_MACRO " macro definition: name not found"; } ap_str_tolower(name); macro = apr_hash_get(ap_macros, name, APR_HASH_KEY_STRING); if (macro != NULL) { /* already defined: warn about the redefinition */ ap_log_error(APLOG_MARK, APLOG_WARNING, 0, NULL, APLOGNO(02802) "macro '%s' multiply defined: " "%s, redefined on line %d of \"%s\"", macro->name, macro->location, cmd->config_file->line_number, cmd->config_file->name); } else { /* allocate a new macro */ macro = (ap_macro_t *) apr_palloc(pool, sizeof(ap_macro_t)); macro->name = name; } debug(fprintf(stderr, "macro_section: name=%s\n", name)); /* get macro arguments */ macro->location = apr_psprintf(pool, "defined on line %d of \"%s\"", cmd->config_file->line_number, cmd->config_file->name); debug(fprintf(stderr, "macro_section: location=%s\n", macro->location)); where = apr_psprintf(pool, "macro '%s' (%s)", macro->name, macro->location); if (looks_like_an_argument(name)) { ap_log_error(APLOG_MARK, APLOG_WARNING, 0, NULL, APLOGNO(02803) "%s better prefix a macro name with any of '%s'", where, ARG_PREFIX); } /* get macro parameters */ macro->arguments = get_arguments(pool, arg); errmsg = check_macro_arguments(cmd->temp_pool, macro); if (errmsg) { return errmsg; } errmsg = get_lines_till_end_token(pool, cmd->config_file, END_MACRO, BEGIN_MACRO, where, ¯o->contents); if (errmsg) { return apr_psprintf(cmd->temp_pool, "%s" APR_EOL_STR "\tcontents error: %s", where, errmsg); } errmsg = check_macro_contents(cmd->temp_pool, macro); if (errmsg) { return apr_psprintf(cmd->temp_pool, "%s" APR_EOL_STR "\tcontents checking error: %s", where, errmsg); } /* store the new macro */ apr_hash_set(ap_macros, name, APR_HASH_KEY_STRING, macro); return NULL; } /* handles: Use name value1 value2 ... */ static const char *use_macro(cmd_parms * cmd, void *dummy, const char *arg) { char *name, *recursion, *where; const char *errmsg; ap_macro_t *macro; apr_array_header_t *replacements; apr_array_header_t *contents; debug(fprintf(stderr, "use_macro -%s-\n", arg)); /* must be initialized, or no macros has been defined */ if (ap_macros == NULL) { return "no macro defined before " USE_MACRO; } /* get lowercase macro name */ name = ap_getword_conf(cmd->temp_pool, &arg); ap_str_tolower(name); if (empty_string_p(name)) { return "no macro name specified with " USE_MACRO; } /* get macro definition */ macro = apr_hash_get(ap_macros, name, APR_HASH_KEY_STRING); if (!macro) { return apr_psprintf(cmd->temp_pool, "macro '%s' undefined", name); } /* recursion is detected here by looking at the config file name, * which may already contains "macro 'foo'". Ok, it looks like a hack, * but otherwise it is uneasy to keep this data available somewhere... * the name has just the needed visibility and liveness. */ recursion = apr_pstrcat(cmd->temp_pool, "macro '", macro->name, "'", NULL); if (ap_strstr((char *) cmd->config_file->name, recursion)) { return apr_psprintf(cmd->temp_pool, "recursive use of macro '%s' is invalid", macro->name); } /* get macro arguments */ replacements = get_arguments(cmd->temp_pool, arg); if (macro->arguments->nelts != replacements->nelts) { return apr_psprintf(cmd->temp_pool, "macro '%s' (%s) used " "with %d arguments instead of %d", macro->name, macro->location, replacements->nelts, macro->arguments->nelts); } where = apr_psprintf(cmd->temp_pool, "macro '%s' (%s) used on line %d of \"%s\"", macro->name, macro->location, cmd->config_file->line_number, cmd->config_file->name); check_macro_use_arguments(where, replacements); errmsg = process_content(cmd->temp_pool, macro, replacements, NULL, &contents); if (errmsg) { return apr_psprintf(cmd->temp_pool, "%s error while substituting: %s", where, errmsg); } /* the current "config file" is replaced by a string array... at the end of processing the array, the initial config file will be returned there (see next_one) so as to go on. */ cmd->config_file = make_array_config(cmd->temp_pool, contents, where, cmd->config_file, &cmd->config_file); return NULL; } static const char *undef_macro(cmd_parms * cmd, void *dummy, const char *arg) { char *name; ap_macro_t *macro; /* must be initialized, or no macros has been defined */ if (ap_macros == NULL) { return "no macro defined before " UNDEF_MACRO; } if (empty_string_p(arg)) { return "no macro name specified with " UNDEF_MACRO; } /* check that the macro is defined */ name = apr_pstrdup(cmd->temp_pool, arg); ap_str_tolower(name); macro = apr_hash_get(ap_macros, name, APR_HASH_KEY_STRING); if (macro == NULL) { /* could be a warning? */ return apr_psprintf(cmd->temp_pool, "cannot remove undefined macro '%s'", name); } /* free macro: cannot do that */ /* remove macro from hash table */ apr_hash_set(ap_macros, name, APR_HASH_KEY_STRING, NULL); return NULL; } /************************************************************* EXPORT MODULE */ /* macro module commands. configuration file macro stuff they are processed immediately when found, hence the EXEC_ON_READ. */ static const command_rec macro_cmds[] = { AP_INIT_RAW_ARGS(BEGIN_MACRO, macro_section, NULL, EXEC_ON_READ | OR_ALL, "Beginning of a macro definition section."), AP_INIT_RAW_ARGS(USE_MACRO, use_macro, NULL, EXEC_ON_READ | OR_ALL, "Use of a macro."), AP_INIT_TAKE1(UNDEF_MACRO, undef_macro, NULL, EXEC_ON_READ | OR_ALL, "Remove a macro definition."), {NULL} }; /* Module hooks are request-oriented thus it does not suit configuration file utils a lot. I haven't found any clean hook to apply something before then after configuration file processing. Also what about .htaccess files? Thus I think that server/util.c or server/config.c would be a better place for this stuff. */ AP_DECLARE_MODULE(macro) = { STANDARD20_MODULE_STUFF, /* common stuff */ NULL, /* create per-directory config */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ macro_cmds, /* configuration commands */ NULL /* register hooks */ }; httpd-2.4.41/modules/core/NWGNUmakefile0000644000000000000500000001030612120077420016146 0ustar rootsrc# # Declare the sub-directories to be built here # SUBDIRS = \ $(EOLIST) # # Get the 'head' of the build environment. This includes default targets and # paths to tools # include $(AP_WORK)/build/NWGNUhead.inc # # build this level's files # # Make sure all needed macro's are defined # # # These directories will be at the beginning of the include list, followed by # INCDIRS # XINCDIRS += \ $(APR)/include \ $(APRUTIL)/include \ $(SRC)/include \ $(NWOS) \ $(EOLIST) # # These flags will come after CFLAGS # XCFLAGS += \ $(EOLIST) # # These defines will come after DEFINES # XDEFINES += \ $(EOLIST) # # These flags will be added to the link.opt file # XLFLAGS += \ $(EOLIST) # # These values will be appended to the correct variables based on the value of # RELEASE # ifeq "$(RELEASE)" "debug" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "noopt" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif ifeq "$(RELEASE)" "release" XINCDIRS += \ $(EOLIST) XCFLAGS += \ $(EOLIST) XDEFINES += \ $(EOLIST) XLFLAGS += \ $(EOLIST) endif # # These are used by the link target if an NLM is being generated # This is used by the link 'name' directive to name the nlm. If left blank # TARGET_nlm (see below) will be used. # NLM_NAME = macro # # This is used by the link '-desc ' directive. # If left blank, NLM_NAME will be used. # NLM_DESCRIPTION = Apache $(VERSION_STR) Macro Module # # This is used by the '-threadname' directive. If left blank, # NLM_NAME Thread will be used. # NLM_THREAD_NAME = Echo Module # # If this is specified, it will override VERSION value in # $(AP_WORK)/build/NWGNUenvironment.inc # NLM_VERSION = # # If this is specified, it will override the default of 64K # NLM_STACK_SIZE = 8192 # # If this is specified it will be used by the link '-entry' directive # NLM_ENTRY_SYM = # # If this is specified it will be used by the link '-exit' directive # NLM_EXIT_SYM = # # If this is specified it will be used by the link '-check' directive # NLM_CHECK_SYM = # # If these are specified it will be used by the link '-flags' directive # NLM_FLAGS = # # If this is specified it will be linked in with the XDCData option in the def # file instead of the default of $(NWOS)/apache.xdc. XDCData can be disabled # by setting APACHE_UNIPROC in the environment # XDCDATA = # # If there is an NLM target, put it here # TARGET_nlm = \ $(OBJDIR)/macro.nlm \ $(EOLIST) # # If there is an LIB target, put it here # TARGET_lib = \ $(EOLIST) # # These are the OBJ files needed to create the NLM target above. # Paths must all use the '/' character # FILES_nlm_objs = \ $(OBJDIR)/mod_macro.o \ $(EOLIST) # # These are the LIB files needed to create the NLM target above. # These will be added as a library command in the link.opt file. # FILES_nlm_libs = \ $(PRELUDE) \ $(EOLIST) # # These are the modules that the above NLM target depends on to load. # These will be added as a module command in the link.opt file. # FILES_nlm_modules = \ aprlib \ libc \ $(EOLIST) # # If the nlm has a msg file, put it's path here # FILE_nlm_msg = # # If the nlm has a hlp file put it's path here # FILE_nlm_hlp = # # If this is specified, it will override $(NWOS)\copyright.txt. # FILE_nlm_copyright = # # Any additional imports go here # FILES_nlm_Ximports = \ @aprlib.imp \ @httpd.imp \ @libc.imp \ $(EOLIST) # # Any symbols exported to here # FILES_nlm_exports = \ macro_module \ $(EOLIST) # # These are the OBJ files needed to create the LIB target above. # Paths must all use the '/' character # FILES_lib_objs = \ $(EOLIST) # # implement targets and dependancies (leave this section alone) # libs :: $(OBJDIR) $(TARGET_lib) nlms :: libs $(TARGET_nlm) # # Updated this target to create necessary directories and copy files to the # correct place. (See $(AP_WORK)/build/NWGNUhead.inc for examples) # install :: nlms FORCE $(call COPY,$(OBJDIR)/*.nlm, $(INSTALLBASE)/modules/) # # Any specialized rules here # # # Include the 'tail' makefile that has targets that depend on variables defined # in this makefile # include $(APBUILD)/NWGNUtail.inc httpd-2.4.41/modules/core/mod_so.h0000644000000000000500000000231211665401625015271 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @file mod_so.h * @brief Shared Object Loader Extension Module for Apache * * @defgroup MOD_SO mod_so * @ingroup APACHE_MODS * @{ */ #ifndef MOD_SO_H #define MOD_SO_H 1 #include "apr_optional.h" #include "httpd.h" /* optional function declaration */ APR_DECLARE_OPTIONAL_FN(module *, ap_find_loaded_module_symbol, (server_rec *s, const char *modname)); #endif /* MOD_SO_H */ /** @} */ httpd-2.4.41/modules/core/mod_watchdog.h0000644000000000000500000001653612402343161016453 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef MOD_WATCHDOG_H #define MOD_WATCHDOG_H /** * @file mod_watchdog.h * @brief Watchdog module for Apache * * @defgroup MOD_WATCHDOG mod_watchdog * @ingroup APACHE_MODS * @{ */ #include "httpd.h" #include "http_config.h" #include "http_log.h" #include "ap_provider.h" #include "apr.h" #include "apr_strings.h" #include "apr_pools.h" #include "apr_shm.h" #include "apr_hash.h" #include "apr_hooks.h" #include "apr_optional.h" #include "apr_file_io.h" #include "apr_time.h" #include "apr_thread_proc.h" #include "apr_global_mutex.h" #include "apr_thread_mutex.h" #ifdef __cplusplus extern "C" { #endif /** * Default singleton watchdog instance name. * Singleton watchdog is protected by mutex and * guaranteed to be run inside a single child process * at any time. */ #define AP_WATCHDOG_SINGLETON "_singleton_" /** * Default watchdog instance name */ #define AP_WATCHDOG_DEFAULT "_default_" /** * Default Watchdog interval */ #define AP_WD_TM_INTERVAL APR_TIME_C(1000000) /* 1 second */ /** * Watchdog thread timer resolution */ #define AP_WD_TM_SLICE APR_TIME_C(100000) /* 100 ms */ /* State values for callback */ #define AP_WATCHDOG_STATE_STARTING 1 #define AP_WATCHDOG_STATE_RUNNING 2 #define AP_WATCHDOG_STATE_STOPPING 3 typedef struct ap_watchdog_t ap_watchdog_t; /* Create a set of AP_WD_DECLARE(type), AP_WD_DECLARE_NONSTD(type) and * AP_WD_DECLARE_DATA with appropriate export and import tags for the platform */ #if !defined(AP_WD_DECLARE) #if !defined(WIN32) #define AP_WD_DECLARE(type) type #define AP_WD_DECLARE_NONSTD(type) type #define AP_WD_DECLARE_DATA #elif defined(AP_WD_DECLARE_STATIC) #define AP_WD_DECLARE(type) type __stdcall #define AP_WD_DECLARE_NONSTD(type) type #define AP_WD_DECLARE_DATA #elif defined(AP_WD_DECLARE_EXPORT) #define AP_WD_DECLARE(type) __declspec(dllexport) type __stdcall #define AP_WD_DECLARE_NONSTD(type) __declspec(dllexport) type #define AP_WD_DECLARE_DATA __declspec(dllexport) #else #define AP_WD_DECLARE(type) __declspec(dllimport) type __stdcall #define AP_WD_DECLARE_NONSTD(type) __declspec(dllimport) type #define AP_WD_DECLARE_DATA __declspec(dllimport) #endif #endif /** * Callback function used for watchdog. * @param state Watchdog state function. See @p AP_WATCHDOG_STATE_ . * @param data is what was passed to @p ap_watchdog_register_callback function. * @param pool Temporary callback pool destroyed after the call. * @return APR_SUCCESS to continue calling this callback. */ typedef apr_status_t ap_watchdog_callback_fn_t(int state, void *data, apr_pool_t *pool); /** * Get watchdog instance. * @param watchdog Storage for watchdog instance. * @param name Watchdog name. * @param parent Non-zero to get the parent process watchdog instance. * @param singleton Non-zero to get the singleton watchdog instance. * @param p The pool to use. * @return APR_SUCCESS if all went well * @remark Use @p AP_WATCHDOG_DEFAULT to get default watchdog instance. * If separate watchdog thread is needed provide unique name * and function will create a new watchdog instance. * Note that default client process watchdog works in singleton mode. */ APR_DECLARE_OPTIONAL_FN(apr_status_t, ap_watchdog_get_instance, (ap_watchdog_t **watchdog, const char *name, int parent, int singleton, apr_pool_t *p)); /** * Register watchdog callback. * @param watchdog Watchdog to use * @param interval Interval on which the callback function will execute. * @param callback The function to call on watchdog event. * @param data The data to pass to the callback function. * @return APR_SUCCESS if all went well. APR_EEXIST if already registered. */ APR_DECLARE_OPTIONAL_FN(apr_status_t, ap_watchdog_register_callback, (ap_watchdog_t *watchdog, apr_interval_time_t interval, const void *data, ap_watchdog_callback_fn_t *callback)); /** * Update registered watchdog callback interval. * @param w Watchdog to use * @param interval New interval on which the callback function will execute. * @param callback The function to call on watchdog event. * @param data The data to pass to the callback function. * @return APR_SUCCESS if all went well. APR_EOF if callback was not found. */ APR_DECLARE_OPTIONAL_FN(apr_status_t, ap_watchdog_set_callback_interval, (ap_watchdog_t *w, apr_interval_time_t interval, const void *data, ap_watchdog_callback_fn_t *callback)); /** * Watchdog require hook. * @param s The server record * @param name Watchdog name. * @param parent Non-zero to indicate the parent process watchdog mode. * @param singleton Non-zero to indicate the singleton watchdog mode. * @return OK to enable notifications from this watchdog, DECLINED otherwise. * @remark This is called in post config phase for all watchdog instances * that have no callbacks registered. Modules using this hook * should ensure that their post_config hook is called after watchdog * post_config. */ APR_DECLARE_EXTERNAL_HOOK(ap, AP_WD, int, watchdog_need, (server_rec *s, const char *name, int parent, int singleton)) /** * Watchdog initialize hook. * It is called after the watchdog thread is initialized. * @param s The server record * @param name Watchdog name. * @param pool The pool used to create the watchdog. */ APR_DECLARE_EXTERNAL_HOOK(ap, AP_WD, int, watchdog_init, ( server_rec *s, const char *name, apr_pool_t *pool)) /** * Watchdog terminate hook. * It is called when the watchdog thread is terminated. * @param s The server record * @param name Watchdog name. * @param pool The pool used to create the watchdog. */ APR_DECLARE_EXTERNAL_HOOK(ap, AP_WD, int, watchdog_exit, ( server_rec *s, const char *name, apr_pool_t *pool)) /** * Fixed interval watchdog hook. * It is called regularly on @p AP_WD_TM_INTERVAL interval. * @param s The server record * @param name Watchdog name. * @param pool Temporary pool destroyed after the call. */ APR_DECLARE_EXTERNAL_HOOK(ap, AP_WD, int, watchdog_step, ( server_rec *s, const char *name, apr_pool_t *pool)) #ifdef __cplusplus } #endif #endif /* MOD_WATCHDOG_H */ /** @} */ httpd-2.4.41/modules/core/config.m40000644000000000000500000000336712733773575015377 0ustar rootsrcdnl modules enabled in this directory by default dnl APACHE_MODULE(name, helptext[, objects[, structname[, default[, config]]]]) APACHE_MODPATH_INIT(core) APR_CHECK_APR_DEFINE(APR_HAS_DSO) case "x$enable_so" in "xyes") if test $ac_cv_define_APR_HAS_DSO = "no"; then AC_MSG_ERROR([mod_so has been requested but cannot be built on your system]) fi ;; "xshared") AC_MSG_ERROR([mod_so can not be built as a shared DSO]) ;; "xno") ;; "x") enable_so=$ac_cv_define_APR_HAS_DSO ;; esac dnl mod_so can only be built statically. Override the default here. if test "x$enable_so" = "xyes"; then enable_so="static" fi if test "x$enable_so" = "xstatic"; then APR_ADDTO(HTTPD_LDFLAGS, [-export-dynamic]) INSTALL_DSO=yes else INSTALL_DSO=no fi APACHE_SUBST(INSTALL_DSO) if test "$sharedobjs" = "yes"; then if test $ac_cv_define_APR_HAS_DSO = "no"; then AC_MSG_ERROR([shared objects have been requested but cannot be built since mod_so cannot be built]) elif test $enable_so = "no"; then AC_MSG_ERROR([shared objects have been requested but cannot be built since mod_so was disabled]) fi fi APACHE_MODULE(so, DSO capability. This module will be automatically enabled unless you build all modules statically., , , $enable_so) APACHE_MODULE(watchdog, Watchdog module, , , most, [ APR_CHECK_APR_DEFINE(APR_HAS_THREADS) if test $ac_cv_define_APR_HAS_THREADS = "no"; then AC_MSG_WARN([mod_watchdog requires apr to be built with --enable-threads]) enable_watchdog=no fi ]) APACHE_MODULE(macro, Define and use macros in configuration files, , , most) APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) APACHE_MODPATH_FINISH httpd-2.4.41/modules/core/mod_watchdog.dsp0000644000000000000500000001104211665401625017007 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_watchdog" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_watchdog - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_watchdog.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_watchdog.mak" CFG="mod_watchdog - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_watchdog - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_watchdog - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_watchdog - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "AP_WD_DECLARE_EXPORT" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_watchdog_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /fo"Release/mod_watchdog.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_watchdog.so" /d LONG_NAME="watchdog_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_watchdog.so" /base:@..\..\os\win32\BaseAddr.ref,mod_watchdog.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_watchdog.so" /base:@..\..\os\win32\BaseAddr.ref,mod_watchdog.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_watchdog.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_watchdog - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "AP_WD_DECLARE_EXPORT" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_watchdog_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /fo"Debug/mod_watchdog.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_watchdog.so" /d LONG_NAME="watchdog_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_watchdog.so" /base:@..\..\os\win32\BaseAddr.ref,mod_watchdog.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_watchdog.so" /base:@..\..\os\win32\BaseAddr.ref,mod_watchdog.so # Begin Special Build Tool TargetPath=.\Debug\mod_watchdog.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_watchdog - Win32 Release" # Name "mod_watchdog - Win32 Debug" # Begin Source File SOURCE=.\mod_watchdog.c # End Source File # Begin Source File SOURCE=.\mod_watchdog.h # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/core/mod_macro.dsp0000644000000000000500000001044112553146475016320 0ustar rootsrc# Microsoft Developer Studio Project File - Name="mod_macro" - Package Owner=<4> # Microsoft Developer Studio Generated Build File, Format Version 6.00 # ** DO NOT EDIT ** # TARGTYPE "Win32 (x86) Dynamic-Link Library" 0x0102 CFG=mod_macro - Win32 Release !MESSAGE This is not a valid makefile. To build this project using NMAKE, !MESSAGE use the Export Makefile command and run !MESSAGE !MESSAGE NMAKE /f "mod_macro.mak". !MESSAGE !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_macro.mak" CFG="mod_macro - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_macro - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_macro - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE # Begin Project # PROP AllowPerConfigDependencies 0 # PROP Scc_ProjName "" # PROP Scc_LocalPath "" CPP=cl.exe MTL=midl.exe RSC=rc.exe !IF "$(CFG)" == "mod_macro - Win32 Release" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 0 # PROP BASE Output_Dir "Release" # PROP BASE Intermediate_Dir "Release" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 0 # PROP Output_Dir "Release" # PROP Intermediate_Dir "Release" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MD /W3 /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MD /W3 /O2 /Oy- /Zi /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Release\mod_macro_src" /FD /c # ADD BASE MTL /nologo /D "NDEBUG" /win32 # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "NDEBUG" # ADD RSC /l 0x409 /d "NDEBUG" /i "../../include" /i "../../srclib/apr/include" /d BIN_NAME="mod_macro.so" /d LONG_NAME="macro_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:".\Release\mod_macro.so" /base:@..\..\os\win32\BaseAddr.ref,mod_macro.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Release\mod_macro.so" /base:@..\..\os\win32\BaseAddr.ref,mod_macro.so /opt:ref # Begin Special Build Tool TargetPath=.\Release\mod_macro.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ELSEIF "$(CFG)" == "mod_macro - Win32 Debug" # PROP BASE Use_MFC 0 # PROP BASE Use_Debug_Libraries 1 # PROP BASE Output_Dir "Debug" # PROP BASE Intermediate_Dir "Debug" # PROP BASE Target_Dir "" # PROP Use_MFC 0 # PROP Use_Debug_Libraries 1 # PROP Output_Dir "Debug" # PROP Intermediate_Dir "Debug" # PROP Ignore_Export_Lib 0 # PROP Target_Dir "" # ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c # ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_macro_src" /FD /c # ADD BASE MTL /nologo /D "_DEBUG" /win32 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 # ADD BASE RSC /l 0x409 /d "_DEBUG" # ADD RSC /l 0x409 /d "_DEBUG" /i "../../include" /i "../../srclib/apr/include" /d BIN_NAME="mod_macro.so" /d LONG_NAME="macro_module for Apache" BSC32=bscmake.exe # ADD BASE BSC32 /nologo # ADD BSC32 /nologo LINK32=link.exe # ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_macro.so" /base:@..\..\os\win32\BaseAddr.ref,mod_macro.so # ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:".\Debug\mod_macro.so" /base:@..\..\os\win32\BaseAddr.ref,mod_macro.so # Begin Special Build Tool TargetPath=.\Debug\mod_macro.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest PostBuild_Cmds=if exist $(TargetPath).manifest mt.exe -manifest $(TargetPath).manifest -outputresource:$(TargetPath);2 # End Special Build Tool !ENDIF # Begin Target # Name "mod_macro - Win32 Release" # Name "mod_macro - Win32 Debug" # Begin Source File SOURCE=.\mod_macro.c # End Source File # Begin Source File SOURCE=..\..\build\win32\httpd.rc # End Source File # End Target # End Project httpd-2.4.41/modules/core/mod_watchdog.c0000644000000000000500000006735613335040064016456 0ustar rootsrc/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* Watchdog module. */ #include "apr.h" #include "mod_watchdog.h" #include "ap_provider.h" #include "ap_mpm.h" #include "http_core.h" #include "util_mutex.h" #define AP_WATCHDOG_PGROUP "watchdog" #define AP_WATCHDOG_PVERSION "parent" #define AP_WATCHDOG_CVERSION "child" typedef struct watchdog_list_t watchdog_list_t; struct watchdog_list_t { struct watchdog_list_t *next; ap_watchdog_t *wd; apr_status_t status; apr_interval_time_t interval; apr_interval_time_t step; const void *data; ap_watchdog_callback_fn_t *callback_fn; }; struct ap_watchdog_t { apr_thread_mutex_t *startup; apr_proc_mutex_t *mutex; const char *name; watchdog_list_t *callbacks; int is_running; int singleton; int active; apr_interval_time_t step; apr_thread_t *thread; apr_pool_t *pool; }; typedef struct wd_server_conf_t wd_server_conf_t; struct wd_server_conf_t { int child_workers; int parent_workers; apr_pool_t *pool; server_rec *s; }; static wd_server_conf_t *wd_server_conf = NULL; static apr_interval_time_t wd_interval = AP_WD_TM_INTERVAL; static int mpm_is_forked = AP_MPMQ_NOT_SUPPORTED; static const char *wd_proc_mutex_type = "watchdog-callback"; static apr_status_t wd_worker_cleanup(void *data) { apr_status_t rv; ap_watchdog_t *w = (ap_watchdog_t *)data; if (w->is_running) { watchdog_list_t *wl = w->callbacks; while (wl) { if (wl->status == APR_SUCCESS) { /* Execute watchdog callback with STOPPING state */ (*wl->callback_fn)(AP_WATCHDOG_STATE_STOPPING, (void *)wl->data, w->pool); wl->status = APR_EOF; } wl = wl->next; } } w->is_running = 0; apr_thread_join(&rv, w->thread); return rv; } /*--------------------------------------------------------------------------*/ /* */ /* Main watchdog worker thread. */ /* For singleton workers child thread that first obtains the process */ /* mutex is running. Threads in other child's are locked on mutex. */ /* */ /*--------------------------------------------------------------------------*/ static void* APR_THREAD_FUNC wd_worker(apr_thread_t *thread, void *data) { ap_watchdog_t *w = (ap_watchdog_t *)data; apr_status_t rv; int locked = 0; int probed = 0; int inited = 0; int mpmq_s = 0; w->pool = apr_thread_pool_get(thread); w->is_running = 1; apr_thread_mutex_unlock(w->startup); if (w->mutex) { while (w->is_running) { if (ap_mpm_query(AP_MPMQ_MPM_STATE, &mpmq_s) != APR_SUCCESS) { w->is_running = 0; break; } if (mpmq_s == AP_MPMQ_STOPPING) { w->is_running = 0; break; } rv = apr_proc_mutex_trylock(w->mutex); if (rv == APR_SUCCESS) { if (probed) { /* Sleep after we were locked * up to 1 second. Httpd can be * in the middle of shutdown, and * our child didn't yet received * the shutdown signal. */ probed = 10; while (w->is_running && probed > 0) { apr_sleep(AP_WD_TM_INTERVAL); probed--; if (ap_mpm_query(AP_MPMQ_MPM_STATE, &mpmq_s) != APR_SUCCESS) { w->is_running = 0; break; } if (mpmq_s == AP_MPMQ_STOPPING) { w->is_running = 0; break; } } } locked = 1; break; } probed = 1; apr_sleep(AP_WD_TM_SLICE); } } if (w->is_running) { watchdog_list_t *wl = w->callbacks; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, wd_server_conf->s, APLOGNO(02972) "%sWatchdog (%s) running", w->singleton ? "Singleton " : "", w->name); apr_time_clock_hires(w->pool); if (wl) { apr_pool_t *ctx = NULL; apr_pool_create(&ctx, w->pool); while (wl && w->is_running) { /* Execute watchdog callback */ wl->status = (*wl->callback_fn)(AP_WATCHDOG_STATE_STARTING, (void *)wl->data, ctx); wl = wl->next; } apr_pool_destroy(ctx); } else { ap_run_watchdog_init(wd_server_conf->s, w->name, w->pool); inited = 1; } } /* Main execution loop */ while (w->is_running) { apr_pool_t *ctx = NULL; apr_time_t curr; watchdog_list_t *wl = w->callbacks; apr_sleep(AP_WD_TM_SLICE); if (ap_mpm_query(AP_MPMQ_MPM_STATE, &mpmq_s) != APR_SUCCESS) { w->is_running = 0; } if (mpmq_s == AP_MPMQ_STOPPING) { w->is_running = 0; } if (!w->is_running) { break; } curr = apr_time_now() - AP_WD_TM_SLICE; while (wl && w->is_running) { if (wl->status == APR_SUCCESS) { wl->step += (apr_time_now() - curr); if (wl->step >= wl->interval) { if (!ctx) apr_pool_create(&ctx, w->pool); wl->step = 0; /* Execute watchdog callback */ wl->status = (*wl->callback_fn)(AP_WATCHDOG_STATE_RUNNING, (void *)wl->data, ctx); if (ap_mpm_query(AP_MPMQ_MPM_STATE, &mpmq_s) != APR_SUCCESS) { w->is_running = 0; } if (mpmq_s == AP_MPMQ_STOPPING) { w->is_running = 0; } } } wl = wl->next; } if (w->is_running && w->callbacks == NULL) { /* This is hook mode watchdog * running on WatchogInterval */ w->step += (apr_time_now() - curr); if (w->step >= wd_interval) { if (!ctx) apr_pool_create(&ctx, w->pool); w->step = 0; /* Run watchdog step hook */ ap_run_watchdog_step(wd_server_conf->s, w->name, ctx); } } if (ctx) apr_pool_destroy(ctx); if (!w->is_running) { break; } } if (inited) { /* Run the watchdog exit hooks. * If this was singleton watchdog the init hook * might never been called, so skip the exit hook * in that case as well. */ ap_run_watchdog_exit(wd_server_conf->s, w->name, w->pool); } else { watchdog_list_t *wl = w->callbacks; while (wl) { if (wl->status == APR_SUCCESS) { /* Execute watchdog callback with STOPPING state */ (*wl->callback_fn)(AP_WATCHDOG_STATE_STOPPING, (void *)wl->data, w->pool); } wl = wl->next; } } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, wd_server_conf->s, APLOGNO(02973) "%sWatchdog (%s) stopping", w->singleton ? "Singleton " : "", w->name); if (locked) apr_proc_mutex_unlock(w->mutex); apr_thread_exit(w->thread, APR_SUCCESS); return NULL; } static apr_status_t wd_startup(ap_watchdog_t *w, apr_pool_t *p) { apr_status_t rc; /* Create thread startup mutex */ rc = apr_thread_mutex_create(&w->startup, APR_THREAD_MUTEX_UNNESTED, p); if (rc != APR_SUCCESS) return rc; if (w->singleton) { /* Initialize singleton mutex in child */ rc = apr_proc_mutex_child_init(&w->mutex, apr_proc_mutex_lockfile(w->mutex), p); if (rc != APR_SUCCESS) return rc; } /* This mutex fixes problems with a fast start/fast end, where the pool * cleanup was being invoked before the thread completely spawned. */ apr_thread_mutex_lock(w->startup); apr_pool_pre_cleanup_register(p, w, wd_worker_cleanup); /* Start the newly created watchdog */ rc = apr_thread_create(&w->thread, NULL, wd_worker, w, p); if (rc) { apr_pool_cleanup_kill(p, w, wd_worker_cleanup); } apr_thread_mutex_lock(w->startup); apr_thread_mutex_unlock(w->startup); apr_thread_mutex_destroy(w->startup); return rc; } static apr_status_t ap_watchdog_get_instance(ap_watchdog_t **watchdog, const char *name, int parent, int singleton, apr_pool_t *p) { ap_watchdog_t *w; const char *pver = parent ? AP_WATCHDOG_PVERSION : AP_WATCHDOG_CVERSION; if (parent && mpm_is_forked != AP_MPMQ_NOT_SUPPORTED) { /* Parent threads are not supported for * forked mpm's */ *watchdog = NULL; return APR_ENOTIMPL; } w = ap_lookup_provider(AP_WATCHDOG_PGROUP, name, pver); if (w) { *watchdog = w; return APR_SUCCESS; } w = apr_pcalloc(p, sizeof(ap_watchdog_t)); w->name = name; w->pool = p; w->singleton = parent ? 0 : singleton; *watchdog = w; return ap_register_provider(p, AP_WATCHDOG_PGROUP, name, pver, *watchdog); } static apr_status_t ap_watchdog_set_callback_interval(ap_watchdog_t *w, apr_interval_time_t interval, const void *data, ap_watchdog_callback_fn_t *callback) { watchdog_list_t *c = w->callbacks; apr_status_t rv = APR_EOF; while (c) { if (c->data == data && c->callback_fn == callback) { /* We have existing callback. * Update the interval and reset status, so the * callback and continue execution if stopped earlier. */ c->interval = interval; c->step = 0; c->status = APR_SUCCESS; rv = APR_SUCCESS; break; } c = c->next; } return rv; } static apr_status_t ap_watchdog_register_callback(ap_watchdog_t *w, apr_interval_time_t interval, const void *data, ap_watchdog_callback_fn_t *callback) { watchdog_list_t *c = w->callbacks; while (c) { if (c->data == data && c->callback_fn == callback) { /* We have already registered callback. * Do not allow callbacks that have the same * function and data pointers. */ return APR_EEXIST; } c = c->next; } c = apr_palloc(w->pool, sizeof(watchdog_list_t)); c->data = data; c->callback_fn = callback; c->interval = interval; c->step = 0; c->status = APR_EINIT; c->wd = w; c->next = w->callbacks; w->callbacks = c; w->active++; return APR_SUCCESS; } /*--------------------------------------------------------------------------*/ /* */ /* Pre config hook. */ /* Create default watchdogs for parent and child */ /* Parent watchdog executes inside parent process so it doesn't need the */ /* singleton mutex */ /* */ /*--------------------------------------------------------------------------*/ static int wd_pre_config_hook(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp) { apr_status_t rv; ap_watchdog_t *w; ap_mpm_query(AP_MPMQ_IS_FORKED, &mpm_is_forked); if ((rv = ap_watchdog_get_instance(&w, AP_WATCHDOG_SINGLETON, 0, 1, pconf)) != APR_SUCCESS) { return rv; } if ((rv = ap_watchdog_get_instance(&w, AP_WATCHDOG_DEFAULT, 0, 0, pconf)) != APR_SUCCESS) { return rv; } if (mpm_is_forked == AP_MPMQ_NOT_SUPPORTED) { /* Create parent process watchdog for * non forked mpm's only. */ if ((rv = ap_watchdog_get_instance(&w, AP_WATCHDOG_DEFAULT, 1, 0, pconf)) != APR_SUCCESS) { return rv; } } if ((rv = ap_mutex_register(pconf, wd_proc_mutex_type, NULL, APR_LOCK_DEFAULT, 0)) != APR_SUCCESS) { return rv; } return OK; } /*--------------------------------------------------------------------------*/ /* */ /* Post config hook. */ /* Create watchdog thread in parent and initializes Watchdog module */ /* */ /*--------------------------------------------------------------------------*/ static int wd_post_config_hook(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { apr_status_t rv; const char *pk = "watchdog_init_module_tag"; apr_pool_t *ppconf = pconf; const apr_array_header_t *wl; if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) /* First time config phase -- skip. */ return OK; apr_pool_userdata_get((void *)&wd_server_conf, pk, ppconf); if (!wd_server_conf) { if (!(wd_server_conf = apr_pcalloc(ppconf, sizeof(wd_server_conf_t)))) return APR_ENOMEM; apr_pool_create(&wd_server_conf->pool, ppconf); apr_pool_userdata_set(wd_server_conf, pk, apr_pool_cleanup_null, ppconf); } ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(010033) "Watchdog: Running with WatchdogInterval %" APR_TIME_T_FMT "ms", apr_time_as_msec(wd_interval)); wd_server_conf->s = s; if ((wl = ap_list_provider_names(pconf, AP_WATCHDOG_PGROUP, AP_WATCHDOG_PVERSION))) { const ap_list_provider_names_t *wn; int i; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02974) "Watchdog: found parent providers."); wn = (ap_list_provider_names_t *)wl->elts; for (i = 0; i < wl->nelts; i++) { ap_watchdog_t *w = ap_lookup_provider(AP_WATCHDOG_PGROUP, wn[i].provider_name, AP_WATCHDOG_PVERSION); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02975) "Watchdog: Looking for parent (%s).", wn[i].provider_name); if (w) { if (!w->active) { int status = ap_run_watchdog_need(s, w->name, 1, w->singleton); if (status == OK) { /* One of the modules returned OK to this watchog. * Mark it as active */ w->active = 1; } } if (w->active) { /* We have active watchdog. * Create the watchdog thread */ if ((rv = wd_startup(w, wd_server_conf->pool)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(01571) "Watchdog: Failed to create parent worker thread."); return rv; } ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, s, APLOGNO(02976) "Watchdog: Created parent worker thread (%s).", w->name); wd_server_conf->parent_workers++; } } } } if (wd_server_conf->parent_workers) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01572) "Spawned %d parent worker threads.", wd_server_conf->parent_workers); } if ((wl = ap_list_provider_names(pconf, AP_WATCHDOG_PGROUP, AP_WATCHDOG_CVERSION))) { const ap_list_provider_names_t *wn; int i; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02977) "Watchdog: found child providers."); wn = (ap_list_provider_names_t *)wl->elts; for (i = 0; i < wl->nelts; i++) { ap_watchdog_t *w = ap_lookup_provider(AP_WATCHDOG_PGROUP, wn[i].provider_name, AP_WATCHDOG_CVERSION); ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(02978) "Watchdog: Looking for child (%s).", wn[i].provider_name); if (w) { if (!w->active) { int status = ap_run_watchdog_need(s, w->name, 0, w->singleton); if (status == OK) { /* One of the modules returned OK to this watchog. * Mark it as active */ w->active = 1; } } if (w->active) { /* We have some callbacks registered. * Create mutexes for singleton watchdogs */ if (w->singleton) { rv = ap_proc_mutex_create(&w->mutex, NULL, wd_proc_mutex_type, w->name, s, wd_server_conf->pool, 0); if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(10095) "Watchdog: Failed to create singleton mutex."); return rv; } ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, s, APLOGNO(02979) "Watchdog: Created singleton mutex (%s).", w->name); } wd_server_conf->child_workers++; } } } } return OK; } /*--------------------------------------------------------------------------*/ /* */ /* Child init hook. */ /* Create watchdog threads and initializes Mutexes in child */ /* */ /*--------------------------------------------------------------------------*/ static void wd_child_init_hook(apr_pool_t *p, server_rec *s) { apr_status_t rv = OK; const apr_array_header_t *wl; if (!wd_server_conf->child_workers) { /* We don't have anything configured, bail out. */ ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, s, APLOGNO(02980) "Watchdog: nothing configured?"); return; } if ((wl = ap_list_provider_names(p, AP_WATCHDOG_PGROUP, AP_WATCHDOG_CVERSION))) { const ap_list_provider_names_t *wn; int i; wn = (ap_list_provider_names_t *)wl->elts; for (i = 0; i < wl->nelts; i++) { ap_watchdog_t *w = ap_lookup_provider(AP_WATCHDOG_PGROUP, wn[i].provider_name, AP_WATCHDOG_CVERSION); if (w && w->active) { /* We have some callbacks registered. * Kick of the watchdog */ if ((rv = wd_startup(w, wd_server_conf->pool)) != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_CRIT, rv, s, APLOGNO(01573) "Watchdog: Failed to create child worker thread."); /* No point to continue */ return; } ap_log_error(APLOG_MARK, APLOG_DEBUG, rv, s, APLOGNO(02981) "Watchdog: Created child worker thread (%s).", wn[i].provider_name); } } } } /*--------------------------------------------------------------------------*/ /* */ /* WatchdogInterval directive */ /* */ /*--------------------------------------------------------------------------*/ static const char *wd_cmd_watchdog_int(cmd_parms *cmd, void *dummy, const char *arg) { apr_status_t rv; const char *errs = ap_check_cmd_context(cmd, GLOBAL_ONLY); if (errs != NULL) return errs; rv = ap_timeout_parameter_parse(arg, &wd_interval, "s"); if (rv != APR_SUCCESS) return "Unparse-able WatchdogInterval setting"; if (wd_interval < AP_WD_TM_SLICE) { return apr_psprintf(cmd->pool, "Invalid WatchdogInterval: minimal value %" APR_TIME_T_FMT "ms", apr_time_as_msec(AP_WD_TM_SLICE)); } return NULL; } /*--------------------------------------------------------------------------*/ /* */ /* List of directives specific to our module. */ /* */ /*--------------------------------------------------------------------------*/ static const command_rec wd_directives[] = { AP_INIT_TAKE1( "WatchdogInterval", /* directive name */ wd_cmd_watchdog_int, /* config action routine */ NULL, /* argument to include in call */ RSRC_CONF, /* where available */ "Watchdog interval in seconds" ), {NULL} }; /*--------------------------------------------------------------------------*/ /* */ /* Which functions are responsible for which hooks in the server. */ /* */ /*--------------------------------------------------------------------------*/ static void wd_register_hooks(apr_pool_t *p) { /* Only the mpm_winnt has child init hook handler. * Make sure that we are called after the mpm child init handler * initializes. */ static const char *const after_mpm[] = { "mpm_winnt.c", NULL}; /* Pre config handling */ ap_hook_pre_config(wd_pre_config_hook, NULL, NULL, APR_HOOK_FIRST); /* Post config handling */ ap_hook_post_config(wd_post_config_hook, NULL, NULL, APR_HOOK_LAST); /* Child init hook */ ap_hook_child_init(wd_child_init_hook, after_mpm, NULL, APR_HOOK_MIDDLE); APR_REGISTER_OPTIONAL_FN(ap_watchdog_get_instance); APR_REGISTER_OPTIONAL_FN(ap_watchdog_register_callback); APR_REGISTER_OPTIONAL_FN(ap_watchdog_set_callback_interval); } /*--------------------------------------------------------------------------*/ /* */ /* The list of callback routines and data structures that provide */ /* the static hooks into our module from the other parts of the server. */ /* */ /*--------------------------------------------------------------------------*/ AP_DECLARE_MODULE(watchdog) = { STANDARD20_MODULE_STUFF, NULL, /* create per-directory config structure */ NULL, /* merge per-directory config structures */ NULL, /* create per-server config structure */ NULL, /* merge per-server config structures */ wd_directives, /* command apr_table_t */ wd_register_hooks /* register hooks */ }; /*--------------------------------------------------------------------------*/ /* */ /* The list of optional hooks that we provide */ /* */ /*--------------------------------------------------------------------------*/ APR_HOOK_STRUCT( APR_HOOK_LINK(watchdog_need) APR_HOOK_LINK(watchdog_init) APR_HOOK_LINK(watchdog_exit) APR_HOOK_LINK(watchdog_step) ) APR_IMPLEMENT_EXTERNAL_HOOK_RUN_FIRST(ap, AP_WD, int, watchdog_need, (server_rec *s, const char *name, int parent, int singleton), (s, name, parent, singleton), DECLINED) APR_IMPLEMENT_EXTERNAL_HOOK_RUN_ALL(ap, AP_WD, int, watchdog_init, (server_rec *s, const char *name, apr_pool_t *pool), (s, name, pool), OK, DECLINED) APR_IMPLEMENT_EXTERNAL_HOOK_RUN_ALL(ap, AP_WD, int, watchdog_exit, (server_rec *s, const char *name, apr_pool_t *pool), (s, name, pool), OK, DECLINED) APR_IMPLEMENT_EXTERNAL_HOOK_RUN_ALL(ap, AP_WD, int, watchdog_step, (server_rec *s, const char *name, apr_pool_t *pool), (s, name, pool), OK, DECLINED) httpd-2.4.41/modules/core/Makefile.in0000644000000000000500000000005111665401625015703 0ustar rootsrc include $(top_srcdir)/build/special.mk httpd-2.4.41/modules/core/mod_macro.mak0000644000000000000500000002307512701473373016304 0ustar rootsrc# Microsoft Developer Studio Generated NMAKE File, Based on mod_macro.dsp !IF "$(CFG)" == "" CFG=mod_macro - Win32 Release !MESSAGE No configuration specified. Defaulting to mod_macro - Win32 Release. !ENDIF !IF "$(CFG)" != "mod_macro - Win32 Release" && "$(CFG)" != "mod_macro - Win32 Debug" !MESSAGE Invalid configuration "$(CFG)" specified. !MESSAGE You can specify a configuration when running NMAKE !MESSAGE by defining the macro CFG on the command line. For example: !MESSAGE !MESSAGE NMAKE /f "mod_macro.mak" CFG="mod_macro - Win32 Release" !MESSAGE !MESSAGE Possible choices for configuration are: !MESSAGE !MESSAGE "mod_macro - Win32 Release" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE "mod_macro - Win32 Debug" (based on "Win32 (x86) Dynamic-Link Library") !MESSAGE !ERROR An invalid configuration is specified. !ENDIF !IF "$(OS)" == "Windows_NT" NULL= !ELSE NULL=nul !ENDIF !IF "$(CFG)" == "mod_macro - Win32 Release" OUTDIR=.\Release INTDIR=.\Release DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_macro.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Release" "libaprutil - Win32 Release" "libapr - Win32 Release" "$(OUTDIR)\mod_macro.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 ReleaseCLEAN" "libaprutil - Win32 ReleaseCLEAN" "libhttpd - Win32 ReleaseCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\httpd.res" -@erase "$(INTDIR)\mod_macro.obj" -@erase "$(INTDIR)\mod_macro_src.idb" -@erase "$(INTDIR)\mod_macro_src.pdb" -@erase "$(OUTDIR)\mod_macro.exp" -@erase "$(OUTDIR)\mod_macro.lib" -@erase "$(OUTDIR)\mod_macro.pdb" -@erase "$(OUTDIR)\mod_macro.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MD /W3 /Zi /O2 /Oy- /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "NDEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_macro_src" /FD /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "NDEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\httpd.res" /i "../../include" /i "../../srclib/apr/include" /d "NDEBUG" /d BIN_NAME="mod_macro.so" /d LONG_NAME="macro_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_macro.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_macro.pdb" /debug /out:"$(OUTDIR)\mod_macro.so" /implib:"$(OUTDIR)\mod_macro.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_macro.so /opt:ref LINK32_OBJS= \ "$(INTDIR)\mod_macro.obj" \ "$(INTDIR)\httpd.res" \ "..\..\srclib\apr\Release\libapr-1.lib" \ "..\..\srclib\apr-util\Release\libaprutil-1.lib" \ "..\..\Release\libhttpd.lib" "$(OUTDIR)\mod_macro.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Release\mod_macro.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Release # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_macro.so" if exist .\Release\mod_macro.so.manifest mt.exe -manifest .\Release\mod_macro.so.manifest -outputresource:.\Release\mod_macro.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ELSEIF "$(CFG)" == "mod_macro - Win32 Debug" OUTDIR=.\Debug INTDIR=.\Debug DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros !IF "$(RECURSE)" == "0" ALL : "$(OUTDIR)\mod_macro.so" "$(DS_POSTBUILD_DEP)" !ELSE ALL : "libhttpd - Win32 Debug" "libaprutil - Win32 Debug" "libapr - Win32 Debug" "$(OUTDIR)\mod_macro.so" "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(RECURSE)" == "1" CLEAN :"libapr - Win32 DebugCLEAN" "libaprutil - Win32 DebugCLEAN" "libhttpd - Win32 DebugCLEAN" !ELSE CLEAN : !ENDIF -@erase "$(INTDIR)\httpd.res" -@erase "$(INTDIR)\mod_macro.obj" -@erase "$(INTDIR)\mod_macro_src.idb" -@erase "$(INTDIR)\mod_macro_src.pdb" -@erase "$(OUTDIR)\mod_macro.exp" -@erase "$(OUTDIR)\mod_macro.lib" -@erase "$(OUTDIR)\mod_macro.pdb" -@erase "$(OUTDIR)\mod_macro.so" "$(OUTDIR)" : if not exist "$(OUTDIR)/$(NULL)" mkdir "$(OUTDIR)" CPP=cl.exe CPP_PROJ=/nologo /MDd /W3 /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fo"$(INTDIR)\\" /Fd"$(INTDIR)\mod_macro_src" /FD /EHsc /c .c{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.obj:: $(CPP) @<< $(CPP_PROJ) $< << .c{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cpp{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << .cxx{$(INTDIR)}.sbr:: $(CPP) @<< $(CPP_PROJ) $< << MTL=midl.exe MTL_PROJ=/nologo /D "_DEBUG" /mktyplib203 /win32 RSC=rc.exe RSC_PROJ=/l 0x409 /fo"$(INTDIR)\httpd.res" /i "../../include" /i "../../srclib/apr/include" /d "_DEBUG" /d BIN_NAME="mod_macro.so" /d LONG_NAME="macro_module for Apache" BSC32=bscmake.exe BSC32_FLAGS=/nologo /o"$(OUTDIR)\mod_macro.bsc" BSC32_SBRS= \ LINK32=link.exe LINK32_FLAGS=kernel32.lib /nologo /subsystem:windows /dll /incremental:no /pdb:"$(OUTDIR)\mod_macro.pdb" /debug /out:"$(OUTDIR)\mod_macro.so" /implib:"$(OUTDIR)\mod_macro.lib" /base:@..\..\os\win32\BaseAddr.ref,mod_macro.so LINK32_OBJS= \ "$(INTDIR)\mod_macro.obj" \ "$(INTDIR)\httpd.res" \ "..\..\srclib\apr\Debug\libapr-1.lib" \ "..\..\srclib\apr-util\Debug\libaprutil-1.lib" \ "..\..\Debug\libhttpd.lib" "$(OUTDIR)\mod_macro.so" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS) $(LINK32) @<< $(LINK32_FLAGS) $(LINK32_OBJS) << TargetPath=.\Debug\mod_macro.so SOURCE="$(InputPath)" PostBuild_Desc=Embed .manifest DS_POSTBUILD_DEP=$(INTDIR)\postbld.dep # Begin Custom Macros OutDir=.\Debug # End Custom Macros "$(DS_POSTBUILD_DEP)" : "$(OUTDIR)\mod_macro.so" if exist .\Debug\mod_macro.so.manifest mt.exe -manifest .\Debug\mod_macro.so.manifest -outputresource:.\Debug\mod_macro.so;2 echo Helper for Post-build step > "$(DS_POSTBUILD_DEP)" !ENDIF !IF "$(NO_EXTERNAL_DEPS)" != "1" !IF EXISTS("mod_macro.dep") !INCLUDE "mod_macro.dep" !ELSE !MESSAGE Warning: cannot find "mod_macro.dep" !ENDIF !ENDIF !IF "$(CFG)" == "mod_macro - Win32 Release" || "$(CFG)" == "mod_macro - Win32 Debug" !IF "$(CFG)" == "mod_macro - Win32 Release" "libapr - Win32 Release" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" cd "..\..\modules\core" "libapr - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\core" !ELSEIF "$(CFG)" == "mod_macro - Win32 Debug" "libapr - Win32 Debug" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" cd "..\..\modules\core" "libapr - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr" $(MAKE) /$(MAKEFLAGS) /F ".\libapr.mak" CFG="libapr - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\core" !ENDIF !IF "$(CFG)" == "mod_macro - Win32 Release" "libaprutil - Win32 Release" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" cd "..\..\modules\core" "libaprutil - Win32 ReleaseCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Release" RECURSE=1 CLEAN cd "..\..\modules\core" !ELSEIF "$(CFG)" == "mod_macro - Win32 Debug" "libaprutil - Win32 Debug" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" cd "..\..\modules\core" "libaprutil - Win32 DebugCLEAN" : cd ".\..\..\srclib\apr-util" $(MAKE) /$(MAKEFLAGS) /F ".\libaprutil.mak" CFG="libaprutil - Win32 Debug" RECURSE=1 CLEAN cd "..\..\modules\core" !ENDIF !IF "$(CFG)" == "mod_macro - Win32 Release" "libhttpd - Win32 Release" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" cd ".\modules\core" "libhttpd - Win32 ReleaseCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Release" RECURSE=1 CLEAN cd ".\modules\core" !ELSEIF "$(CFG)" == "mod_macro - Win32 Debug" "libhttpd - Win32 Debug" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" cd ".\modules\core" "libhttpd - Win32 DebugCLEAN" : cd ".\..\.." $(MAKE) /$(MAKEFLAGS) /F ".\libhttpd.mak" CFG="libhttpd - Win32 Debug" RECURSE=1 CLEAN cd ".\modules\core" !ENDIF SOURCE=..\..\build\win32\httpd.rc !IF "$(CFG)" == "mod_macro - Win32 Release" "$(INTDIR)\httpd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\httpd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "NDEBUG" /d BIN_NAME="mod_macro.so" /d LONG_NAME="macro_module for Apache" $(SOURCE) !ELSEIF "$(CFG)" == "mod_macro - Win32 Debug" "$(INTDIR)\httpd.res" : $(SOURCE) "$(INTDIR)" $(RSC) /l 0x409 /fo"$(INTDIR)\httpd.res" /i "../../include" /i "../../srclib/apr/include" /i "../../build\win32" /d "_DEBUG" /d BIN_NAME="mod_macro.so" /d LONG_NAME="macro_module for Apache" $(SOURCE) !ENDIF SOURCE=.\mod_macro.c "$(INTDIR)\mod_macro.obj" : $(SOURCE) "$(INTDIR)" !ENDIF httpd-2.4.41/docs/0002755000000000000500000000000013523273347012177 5ustar rootsrchttpd-2.4.41/docs/cgi-examples/0002755000000000000500000000000013523273347014555 5ustar rootsrchttpd-2.4.41/docs/cgi-examples/printenv0000644000000000000500000000146412063711404016335 0ustar rootsrc# # To permit this cgi, replace # on the first line above with the # appropriate #!/path/to/perl shebang, and on Unix / Linux also # set this script executable with chmod 755. # # ***** !!! WARNING !!! ***** # This script echoes the server environment variables and therefore # leaks information - so NEVER use it in a live server environment! # It is provided only for testing purpose. # Also note that it is subject to cross site scripting attacks on # MS IE and any other browser which fails to honor RFC2616. ## ## printenv -- demo CGI program which just prints its environment ## use strict; use warnings; print "Content-type: text/plain; charset=iso-8859-1\n\n"; foreach my $var (sort(keys(%ENV))) { my $val = $ENV{$var}; $val =~ s|\n|\\n|g; $val =~ s|"|\\"|g; print "${var}=\"${val}\"\n"; } httpd-2.4.41/docs/cgi-examples/test-cgi0000644000000000000500000000235512063711404016207 0ustar rootsrc# # To permit this cgi, replace # on the first line above with the # appropriate #!/path/to/sh shebang, and set this script executable # with chmod 755. # # ***** !!! WARNING !!! ***** # This script echoes the server environment variables and therefore # leaks information - so NEVER use it in a live server environment! # It is provided only for testing purpose. # Also note that it is subject to cross site scripting attacks on # MS IE and any other browser which fails to honor RFC2616. # disable filename globbing set -f echo "Content-type: text/plain; charset=iso-8859-1" echo echo CGI/1.0 test script report: echo echo argc is $#. argv is "$*". echo echo SERVER_SOFTWARE = $SERVER_SOFTWARE echo SERVER_NAME = $SERVER_NAME echo GATEWAY_INTERFACE = $GATEWAY_INTERFACE echo SERVER_PROTOCOL = $SERVER_PROTOCOL echo SERVER_PORT = $SERVER_PORT echo REQUEST_METHOD = $REQUEST_METHOD echo HTTP_ACCEPT = "$HTTP_ACCEPT" echo PATH_INFO = "$PATH_INFO" echo PATH_TRANSLATED = "$PATH_TRANSLATED" echo SCRIPT_NAME = "$SCRIPT_NAME" echo QUERY_STRING = "$QUERY_STRING" echo REMOTE_HOST = $REMOTE_HOST echo REMOTE_ADDR = $REMOTE_ADDR echo REMOTE_USER = $REMOTE_USER echo AUTH_TYPE = $AUTH_TYPE echo CONTENT_TYPE = $CONTENT_TYPE echo CONTENT_LENGTH = $CONTENT_LENGTH httpd-2.4.41/docs/cgi-examples/printenv.vbs0000644000000000000500000000206212063711404017121 0ustar rootsrc' ' To permit this cgi, replace ' on the first line above with the ' appropriate shebang, f.e. '!c:/windows/system32/cscript -nologo ' ' ***** !!! WARNING !!! ***** ' This script echoes the server environment variables and therefore ' leaks information - so NEVER use it in a live server environment! ' It is provided only for testing purpose. ' Also note that it is subject to cross site scripting attacks on ' MS IE and any other browser which fails to honor RFC2616. '' '' printenv -- demo CGI program which just prints its environment '' Option Explicit Dim objShell, objArray, str, envvar, envval Set objShell = CreateObject("WScript.Shell") Set objArray = CreateObject("System.Collections.ArrayList") WScript.StdOut.WriteLine "Content-type: text/plain; charset=iso-8859-1" & vbLF For Each str In objShell.Environment("PROCESS") objArray.Add str Next objArray.Sort() For Each str In objArray envvar = Left(str, InStr(str, "=")) envval = Replace(Mid(str, InStr(str, "=") + 1), vbLF, "\n") WScript.StdOut.WriteLine envvar & Chr(34) & envval & Chr(34) Next httpd-2.4.41/docs/cgi-examples/printenv.wsf0000644000000000000500000000215512063711404017131 0ustar rootsrc' ' To permit this cgi, replace ' on the first line above with the ' appropriate shebang, f.e. '!c:/windows/system32/cscript -nologo ' ' ***** !!! WARNING !!! ***** ' This script echoes the server environment variables and therefore ' leaks information - so NEVER use it in a live server environment! ' It is provided only for testing purpose. ' Also note that it is subject to cross site scripting attacks on ' MS IE and any other browser which fails to honor RFC2616. '' '' printenv -- demo CGI program which just prints its environment '' httpd-2.4.41/docs/icons/0002755000000000000500000000000013523273343013306 5ustar rootsrchttpd-2.4.41/docs/icons/odf6ods.png0000644000000000000500000000171311141176336015356 0ustar rootsrc‰PNG  IHDR÷ŸL4.PLTEÙÙÙ33333™\\¬]\­]]­^^®™™™ÎÎÜÎÏÜÑÐÞÑÑÝÑÑßÒÑàÒÒàÓÓàÓÔàÕÕâר䨨äÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßÞÞèàßßßàßàààßßéààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèææñèççèçèçèèèèçèèèèçñéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííììíìíìíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñððñðñðñððññññðñññññòñòñòòñòòòòòóóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöõööööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿr§UtRNS@æØfbKGDˆH pHYs  šœ)IDATÓc`D PÀ¸sç¶Í!kW.[<Ÿq&L”qÇ66&VÁÅóg1Nê…Š2nfþé“»[ë!¢ŒëÙ˜—Ìçc™ÜÇØR[]eô©›3I³Mˆ A‚ËY™æÍšÆÍÜÔ( ÁÅL¼“¹˜8šÊËòØ,833gMEI^V2Lpú´¾^Õ¦šò¢¼Ì¤è°`ˆà”‰mU%E¹) ‘¡>ÁÞ¶¦šÊâ¼ÌäøØ`wGˆ`‹2°6 •æ¦Ä ø89 ™CËQTêC‹…Ò’ã#‚…Üm,…´!‚¹(*U ‚©BÁ¾.BÖÆ†ºjB Áx•2ÁðoG sc= E9)qˆ #; ƒ``lþMÁ^¡¦šÊâ¼Ìd¡Ø`wGˆ`‹PM9H,N(ÐÇ]È"Ø$TZ˜›,äãä(d,ÊÏLNˆòr²Ò‡ ¥%Ç  µ  iCs…’…„<…ì…Ì…ô„T ‚©BÁ¾.¶ÖƆºjJ Áx!d  ðvq´07ÖÓPQ”“‡2²£pÐ10¡ÇR¾ëˆ³eIEND®B`‚httpd-2.4.41/docs/icons/image3.gif0000644000000000000500000000043610147723030015133 0ustar rootsrcGIF89aãÿÿÿÿ33Ìÿÿ™™™f333™Ì™33f!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,y°ÈI§¸XÀ»ßEvm^I†Yv*:vD,*àªD ïIÑÿ/Nn§K‰ Ç 0ÐAR³ªF§­Ê¤#UàðAÕ¥r¾â0Ë»¿dvÕ* îxüZ‰0øÿ{fv€€ƒ*}ŠˆstJˆQ•–P>H›œS;httpd-2.4.41/docs/icons/burst.png0000644000000000000500000000052510671421551015150 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿÌ3Ìÿÿ™ffff333ÛjgxtRNSÿÿ×Ê AbKGDˆH}IDAT[uÏÁ ! д ø`îÀ%lñ¾Lÿ%Œf\o›Ó#~’HØEÿiE©pˆ“ŸvoföÃHÜ¿ƒœŒfkVVjÇf‰ç`‘+É ÔNò*wýMÈ r&•ÉsÂ#Ó=ø[ôY”^ZÕ÷^ÅÕ÷/0›x¢7$zUÈV4VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/right.gif0000644000000000000500000000025410147723030015101 0ustar rootsrcGIF89a¡ÿÿÿÌÿÿ!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,+Œ©Ë⚀QMZÏÅyóè}RØ…¢ežHªjfõÂ^ölt=ݸ^óÔ;httpd-2.4.41/docs/icons/dvi.gif0000644000000000000500000000035610147723030014551 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,a8º¼ñ0 @«#¾IºïÀjÜç…U•(Rª˜'1Øø´0Ó:‹"(ò‚;“ÅHÐñhãì4\6eO¥PúÊ‚¶×W¬£}­es4<®rÛk$œÈžW¸£~_¼EÌ€W ;httpd-2.4.41/docs/icons/quill.gif0000644000000000000500000000041310147723030015107 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™ÿ™™™ffÌf3™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,~hº¼ñ0@«&¾i;WGxp]……BqHå…êÖR/Êí!¼:¬¬’®çûá,C˜Šb V’…%H@¥@“dØ)Ùð6<Œ‚ÃÙ1 ûE‹©Y!ä~˺†A=é÷v,€ipg‰Š‹ZpŒŠ[y”•–•s"›œ› ;httpd-2.4.41/docs/icons/odf6oth.png0000644000000000000500000000204611141176336015363 0ustar rootsrc‰PNG  IHDR÷ŸL4XPLTEÙÙÙ!!!33344455533™\\¬]\­]]­^^®wwµxx¶yx·yy·zz¸{{¹™™™¥¤¤¥¥¥¦¦¦¦§¦¦§§§§§¨¨¨¨¨©©©ªª©ªÎÎÜÎÏÜÑÐÞÑÑÝÑÑßÒÑàÒÒàÓÓàÓÔàÕÕâר䨨äÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßÞÞèàßßßàßàààßßéààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèææñèççèçèçèèèèçèèèèçñéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííìììíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñðððñððññññðññññòñòòñòòòóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿl.B9tRNS@æØfbKGDˆH pHYs  šœZIDATÓc`Bª ÀÀÀÀtüø‘ƒé»·oÙ¸võŠ%ó%Á‚ÇŽ¨s²r¨l\»rÙÂ9âÌ`ÁÃj¬  ´ŒEj–8³Dp/'«Ê¦µŠì‹$YÄ™EÛ ‚‰ u«–±ÚLgim‚nå`]³r©ÛäI½ÂÌB•Áʬ ‹dY¥'wv42•@×®’gce“éëjk¨-+.„.[:wŽÅä¾Î–†šÒ¼Ì4ˆàâÓ§Mêik©//ÎÉH‰‡Ι6¹¯»µ¡†Ÿ/-)*"8eb_'H è0Þ¨ˆàäžöæúr>VÖäxVn_/ˆ`gGcMY1P0*Œ•Ûà "ØÚPYV”ÍËÔÏål¬¯.ËÍL‰áùÖÑÚ"XQ”–ÀÍÅå`ij ŠÅGE{¹9Ú™›êC³’ãÂC¼bÖ@1]-ˆ “ ` 20¨¢Si꺘IEND®B`‚httpd-2.4.41/docs/icons/odf6odm.png0000644000000000000500000000204411141176336015346 0ustar rootsrc‰PNG  IHDR÷ŸL4[PLTEÙÙÙ---..../////33333™\\¬]\­]]­^^®™™™Ÿžž Ÿ    ¡¡¡¢¢¡¢¢££¢£¤¤¤¤¥¥¦¦¦ÎÎÜÎÏÜÑÐÞÑÑÝÑÑßÒÑàÒÒàÓÓàÓÔàÕÕâר䨨äÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßÞÞèàßßßàßàààßßéààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèææñèççèçèçèèèèçèèèèçñéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííììíìíìíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñððñðñðñððññññðñññññòñòñòòñòòòòòóóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöõööööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿû 3 tRNS@æØfbKGDˆH pHYs  šœUIDATÓc`E PÀzâÄÑCÉ{vlÝ´ŽuL”õøQe.6N…MëV².œe=¢Är˱ΚÒeÝÇŦ°y,Ç¢¹¬“{ºšÁ¢¬± u«—±YLUdCà6N¶µ+—J±Oœ  ÁMòl2‹$ÙÄ'¶µÖrXpÝjiv6v‰îöæÚÊ"˜à²¥sç˜Lìc©­`NM‚.^0}ê„N1Ñâ|!&hˆàœ©»;šXDŠòr’˜ ‚“û»Ûšj‹rӢý!‚;[jŠ3“â£Ý ‚m­uEùL‚qaA>¼ŒvÁ¦ÚÒ¢¼t&þo^F+ˆ`MyQfjB£§#¹1D°$/=)&<ØGÑÉAÑÔP"‹ ñwS´µR4ÐÕ†¦ÅG¸»9ÙšèjªAY¹Q8èуb\ Þ$õIEND®B`‚httpd-2.4.41/docs/icons/generic.sec.png0000644000000000000500000000044710671421551016201 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿ33Ìÿÿ™™™f333·±\tRNSÿÿ×Ê AbKGDˆHOIDAT[c t RRRb`t`eE0‚LV( a²………Á˜iiiP&³±ŒÉ€Äd ;3ÔXPÐÙØØèH¥´·4#ËÕº–VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/blank.png0000644000000000000500000000032710671421551015100 0ustar rootsrc‰PNG  IHDRú.EPLTEÿÿÿÌÿÿsQ®¥tRNSÿå·0JbKGDˆHIDATcüÏð‘‘Yi*·‰pùlVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/world1.gif0000644000000000000500000000034410147723030015174 0ustar rootsrcGIF89a¡ÿÿÿÌÿÿ™3!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,cŒ©:훚˜´ÁØš[4LEeÂfæXžG¸j²*£A(ÆÜŽÂô¸3|9L#ª„"$¬ÙYvœ¥ ”‡Û°rSWvÉ$Ù,mtj»)Á´šVºo¾ððB ǃ¸P;httpd-2.4.41/docs/icons/odf6oti.png0000644000000000000500000000212311141176336015360 0ustar rootsrc‰PNG  IHDR÷ŸL4…PLTEÙÙÙ!!!+++,,,,,----33344455533™\\¬]\­]]­^^®™™™¥¤¤¥¥¥¦¦¦¦§¦¦§§§§§¨¨¨¨¨©©©ªª©ª¸¸¸¹¸¸»»»»»¼¼»»¼¼¼½½½¾½½¾½¾½¾¾¾¾¾¿¾¾¾¿¾ÀÀÀÀÀÁÁÀÁÀÁÁÎÎÜÎÏÜÑÐÞÑÑÝÑÑßÒÑàÒÒàÓÓàÓÔàÕÕâר䨨äÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßÞÞèàßßßàßàààßßéààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèææñèççèçèçèèèèçèèèèçñéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííìììíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñðððñððññññðññññòñòòñòòòóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿF*6ûtRNS@æØfbKGDˆH pHYs  šœZIDATÓc`C& ÀÀÀÀvíÚå e§Ž>°g×öÍëÄÁ‚W/›ñròسcë†Õ¢ì|`ÁK¦œ `¸•Cb¥(»Dð /§ñÁ=ÜÅ9DÙ…§B @êvnåô^*Ê.4e"Dðçî[t¹-œ#È.Ð<`Ä©¿Q‡SkÑŒéýülÍÁ=;õ¸8¹´çΜÚßÓÚÔܺeÍj÷EsgLîïn©­(…nZ¿léÂÙS'÷µ5U—çAW/]4wÖ”þîÖÆúÒÂÌdˆàâsg€Äª”˜å’ã ‚‹fO›Ô§Î¬RªÈ,à œ1}B·‹*³³l¼Ix DpJ¿+³r©<³t\4“”/D°O“U¥¢8;-1&2D’É "ØT–Ÿ•ìïaâl4AvÁʢܴä¨ÈÐ/7gKˆ  ` 20˜ æsv^Å´eEIEND®B`‚httpd-2.4.41/docs/icons/compressed.gif0000644000000000000500000000201610147723030016126 0ustar rootsrcGIF89açÿÿÿÿÿÌÿÿ™ÿÿfÿÿ3ÿÿÿÌÿÿÌÌÿÌ™ÿÌfÿÌ3ÿÌÿ™ÿÿ™Ìÿ™™ÿ™fÿ™3ÿ™ÿfÿÿfÌÿf™ÿffÿf3ÿfÿ3ÿÿ3Ìÿ3™ÿ3fÿ33ÿ3ÿÿÿÌÿ™ÿfÿ3ÿÌÿÿÌÿÌÌÿ™ÌÿfÌÿ3ÌÿÌÌÿÌÌÌÌÌ™ÌÌfÌÌ3ÌÌÌ™ÿÌ™ÌÌ™™Ì™fÌ™3Ì™ÌfÿÌfÌÌf™ÌffÌf3ÌfÌ3ÿÌ3ÌÌ3™Ì3fÌ33Ì3ÌÿÌÌÌ™ÌfÌ3Ì™ÿÿ™ÿÌ™ÿ™™ÿf™ÿ3™ÿ™Ìÿ™Ì̙̙™Ìf™Ì3™Ì™™ÿ™™Ì™™™™™f™™3™™™fÿ™fÌ™f™™ff™f3™f™3ÿ™3Ì™3™™3f™33™3™ÿ™Ì™™™f™3™fÿÿfÿÌfÿ™fÿffÿ3fÿfÌÿfÌÌfÌ™fÌffÌ3fÌf™ÿf™Ìf™™f™ff™3f™ffÿffÌff™fffff3fff3ÿf3Ìf3™f3ff33f3fÿfÌf™fff3f3ÿÿ3ÿÌ3ÿ™3ÿf3ÿ33ÿ3Ìÿ3ÌÌ3Ì™3Ìf3Ì33Ì3™ÿ3™Ì3™™3™f3™33™3fÿ3fÌ3f™3ff3f33f33ÿ33Ì33™33f333333ÿ3Ì3™3f333ÿÿÿÌÿ™ÿfÿ3ÿÌÿÌÌÌ™ÌfÌ3Ì™ÿ™Ì™™™f™3™fÿfÌf™fff3f3ÿ3Ì3™3f333ÿÌ™f3îÝ»ªˆwUD"îÝ»ªˆwUD"îÝ»ªˆwUD"îîîÝÝÝ»»»ªªªˆˆˆwwwUUUDDD"""!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù$,™I$Áª`ÁdCV #lÈСĄ+Z¼(0cCŠ'øÇФIŽÿ©\ùåGVbZi™ð‡Ž/aƤÉá‘@›75¾œI‚CÏŸF9ý83©O@ælh%éQ¨V9LÍú4jÏ©^»: 3ªØžK©þ*ÖgZ˜-mv}ú–(Ô§ëÒ”¨%+™2K†$Á’¥Â€;httpd-2.4.41/docs/icons/link.png0000644000000000000500000000047210671421551014747 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿ33Ìÿÿ™™™f333·±\tRNSÿÿ×Ê AbKGDˆHbIDAT[MÎÍ À †áZ{Vp‚¬ ôl¡AGpÿb|O„ ÷ágŒIi”<¼J)ÂZë$Žp !<- tmçãZ­26¾œóº½‹‹-f#~’êŒ~ èÊçó–VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/xml.png0000644000000000000500000000203511141176336014610 0ustar rootsrc‰PNG  IHDR÷ŸL4RPLTE33™---.-....///0/0/0/000333™™™žžžŸžžŸžŸŸŸŸŸŸ  ŸŸ     ¡¡ ¡¡¡¡¡¢¢¢¢¢£££££¤¤¤¤¤¥¥¥¥¥¦¥¥¥¦¦¦¦¦¦§¦§§§¨¨§¨¨¨ÙÙÙÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßàßßßàßàààààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèèççèçèçèèèèçèèèéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííììíìíìíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñððñðñðñððññññðñññññòñòñòòñòòòòòóóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöõööööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿßÊÍtRNS@æØfbKGDˆH pHYs  šœWIDATÓcà@ PÀqôè¡ý{vnÝ´~5ÇR˜(Ç‘CûvïØºqýêeófBE9îݹmˆõ«Ïç˜>±"ʱ{çÖV¯X6Ç„Îö°(ÇÎ-×­^±xÞÌIœ`ܼaýªe‹æNëëå„àúµ@­³§öõ57UqX¨uþÌI:ZªÊòa‚‹Íš9I™½™E¦4/=)"¸`î”IJlòuÒ,’©‰qQÁ™“úYå«Jó%˜EcBý!‚zY@bY)¢ÌBþ^Á>¹Ê‚ì´„Ø(F>Wˆ`s“,‹TNFrL¨ #¯³-D°¾ªHŠYçå&s¹ˆ.ÌBŒqGã$d@²ôe=öKÛ¤^ íÍ-hò$±VèÝz03–¸,ÑIEND®B`‚httpd-2.4.41/docs/icons/pie6.png0000644000000000000500000000042110671421551014647 0ustar rootsrc‰PNG  IHDR½/T• PLTEÿÿÿÌÿÿ ¶ïtRNSÿå·0JbKGDˆHFIDAT[uÌ¡ €0EÑ7Ïßç6…$‚%:BE*Ì‘'ä×&„»&á©EZJr¤Û+åÜvýxªcÛT‚.BwîÿÿZ/‘œîû¹VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/odf6otg.png0000644000000000000500000000212211141176336015355 0ustar rootsrc‰PNG  IHDR÷ŸL4PLTEÙÙÙ!!!***+**+++++,,,,,,----33344455533™\\¬]\­]]­^^®™™™š›šŸŸ  ŸŸ¡¡¡¢¢¢¢£¢¢£££££¤¤¤¥¤¤¤¥¥¥¥¥¦¦¦¦¦§¦§¦¦§§§§§¨¨¨¨¨©©©ªª©ªÎÎÜÎÏÜÑÐÞÑÑÝÑÑßÒÑàÒÒàÓÓàÓÔàÕÕâר䨨äÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßÞÞèàßßßàßàààßßéààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèææñèççèçèçèèèèçèèèèçñéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííìììíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñðððñððññññðññññòñòòñòòòóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿÐYzÔtRNS@æØfbKGDˆH pHYs  šœ_IDATÓcàDF ÀÀÀÀyåÊÅs%'ŽÜ·kÇÖkTÁ‚—/šððîÛµmóº•*\‚`Á Æ<  ¿™[}¹ —2Dð”áþ]z|ëÕ¸U¸”&Có@ê¶oæñ\¬Â¥8©"xˆŸgç¶MÚ¼ æÏ’ç’kƒî3àÑ]¯Å£±`ÚÔ^ÎFˆà®í:¼<¼š³&÷v57ÔA7oZµÒuÁly¹Î¦ê²bˆà†µKÏŸ9™C–£¡²´0"¸rñ‚Ù3&Éq4³Iç§'BΛ=mR/‡t8[Nzb DpÁÌ)z¤ÙªŠ ØD£Â!‚Ó¦öu6³K”ç§‹²F†úC'õ¶5K±ƒ´²xC{:š«ØÄ2Sâ£Â…Y<\ ‚­õbl)±ÑÁ¾ÌBÁúŠb6#`²–d§$F„ûy¸8ÚY™C9Q'HÁ 00ŒatŸ¶LžIEND®B`‚httpd-2.4.41/docs/icons/uuencoded.png0000644000000000000500000000045010671421551015761 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™333U±3•tRNSÿå·0JbKGDˆHWIDAT[¥Î ! Àðu® @ѺÿL_cŸðᡈÅLUÅ@D„4wÌC'…<D}Û¶÷Îm‹—ðtË „å…ÕZ5øÍÕoâ“ê}Ç,ÜpÕžøVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/icon.sheet.png0000644000000000000500000002147210664777241016070 0ustar rootsrc‰PNG  IHDRà dÃ`PLTEÿÿÿÿÌ™ÿÌ3ÿ™™ÿffÿ33ÌÿÿÌÌÌÌ™3»»»™™ÿ™™™™f3™fˆˆˆfÌÿffÌffff3™fUUU333™Ì™3f™f33f®õBÄtRNSÿÿÿÿÿÿKFbKGDˆH"IDATxÚíb£6³†µI-·%{ò¥,ë¦sÿ÷y@üI Í &y'm³Ýõ ¡ÇBÎê1ñ¥Ã`ñUS÷/1@«¿Aë/X´@Y¾ëE;°}~ã´}f‘vïsi£ ”u¾ë}÷s‰™l¶p±Óàµ×'ß(›H“Ç×N´”鉊%ïØ©?1#w¢®ÓÄ+àîÕ4~³Éû]ëŽ:0[XÏõ)Ú­±äñ£]&;·:§M²9í’Íï­—K‹C¤›[Íõ“lìôÊy¨Xõ;¤yÅ;ŽÝ< k-¬åRøÂõnMHÓǽÏÉkÜë@Øó­v)»·Ö?¶wˆü¾û¹ÞK³’ÍT:ÀÓ{‡Â«óðÖ&ÿÖ°l!–;ýÖàã'OekÃRÎäfôv°wÒ2À4×Ä`RT°w¡¹Lé ‹æz¯N4)*˜–´˜Õ.e÷6^…™Œâ¹Ù<¿©$<¿!ç»éx· ZV4%sçRJtË¿×G¿q¦iÌÈov•n—½ ï£vyÒv»ï~îâêµ™l4hÍ„ûI¤ï)FÒ—ÓƒÖøâã¥Ç& Ï`ýIWv0’òU~2+YXªD0€Œ`#øÛnü`ð¨Ü3F‰±Zl¦h ³å£rÇø°çyo”«mÀÌ–Ê£:Qý7†È\‰è*+"›˜×rŸ;6,É­Ûàçú|Äpÿ`¬|ÀñÜÀ¬–€¹õåráç.*ø„€ùcÕ&n1ÚÜ‚jÚ/`—ÉÏu€Ù¹w, L$ÿTG’ëŒÕTÁÉÜ ÀÕp`Yn˜›{_ÁlÂTUÕ‡ô3å××× I÷÷`ÁXÍ€S¹iÀßö¬+`S‰r`vî}³?|¯Ìõÿ>~É>~5¯—KM\À^ˆÆj;7 ¸¢–°‘6 ÀFx|BdˆNÕ_毰ä¾ÐÖ¯yån¦ò(±Æj¸ºVéÜà–oß¶°(wÌÌ ŽÓ]©‰ ¸»BÿjD€/¯íW;ûçžîÁ‚±š.ÑÉÜàŠN˜Æû°àîîÀ]‹*¸åÛpQÀÃ4X¸ÃëþAª†K‡$·ªW`7¾#]6àWÀ¢ îðÖe7ª î/î O}–äŽÌLËàþåøÊחޝæÌ¿DL÷`>àj¸ñŸð_æcus3ѳw›Û-¿‘jÍ«*+7~®fPâé{ÁÜ{¾Tq)5ò•ª¹Þs°¨‚»EhÅ$Ë{Ú);ÉêÖ¢Ù¹÷|?δ’uÄ,Ú(îÁÌ¢—×çÊ>}èû7B)àá&|ŽÇ¤“Ñ}Š îŧ¸„O÷9îÁ…!)øûU{~üXE~&« ‚õ1ÖA¹þJÖi+“7'Õ<–Ê=c<~¬ðc³_<€Œ`#À`#ÀF0€ÀF0€;¾sê1T€”ütr2—Û.-|ˆÙ¹}ͪ½,5’ùâG‘"2z.”n xã¤hëwÈr ‰Û%›ë÷Ëûƒ-æÄCó0Àþïß48ýz¬Š  çÑ#š•|ïà#kùíZë¦rs}W¡î‡ Ïe78›([›H ÁâZîÊ0/\L«ý7 Ó qDb«2½LÚªƒÝîl§âåÒÒ5—Õsß-g×d~›5+4®œ³÷{Éþ›;oIZ˜cy[Ï%ËÎõµ˜™úÁ¥[Žž pÄAiV¼x§«`²bÀž” 8Ì=¾‚í:`¢ÐžÇP÷BOq›“¼~´;¼{Y}U¶á¹'á» çÛB¦6Q¡ˆœïÁá0/,‘« ˜GMõèÔ=¦§6,îö|”÷‡fcÖ'푺ÇÓåƒ ‹ûü…IÊo+YXªD0€Œ`#€q”ðŒÎÄíîxÿ`évÏØçç,ê5owgâ1cuàCí¿ïaÏW(ÓQû¼Ï6ùã3ÉviÖÓ±ÛÍÙ"ï!ü"ôö|«+é œ‰ò>wÝþ9þÔ ãã„ÞáKÚ%o/R*˜^š×¶Ä?ØÉm®ÂÍì˜:´Ï®ß/?‰~¶”ià~·hÑXM[Fwþ¢\M»‚³¼ìÖîw@¯HÒn(ã”l‚J?_\´_d€%cÕ½Ÿß»hŠnïÁÕ‹ÈÇçß:ÀW’v—w3ì¯û`âFø2»‚x¬ZÀïîn&ãFäÌn_}»ÝZ¾ŸÔo‚Ìjw¸¼+3û<Öî ›WÁìv{ÀïþEÎ?våïbÞ¾]?ÀÜÜþò®Ììó’°0_apà–ï¯ÎÅ{•þ”.ïü\qÃè†BÀ?E³h!àq¬8`úU™ÎÅ{- Ø»¼³¶Ç§f|5í¯™¶—)áé9Xà§Z>&•l:¯sñjk.ïL©–%GÖ¸GÞãÊâý“¡ÔSIHþý÷_o¡£ý¿Â€¯°)–ëÖ'²ì¿úp‹·a_¢IRÁÿ¾‡ñoSð¨je«bh„$ÐÌHsíòïÁÈgÑ$\ATðû¿a”Ü«Zº¶’Lõ&Ëí¦+vúk†í>‘M±N]ÁWêU­W‰ï60*–ë–’Y·8Ä#ÜÌÓèŸn±²XÓGovQpG¸–¸‡?ÅÞCY.ËØ${\i¯Ì?ûë3oµQUÁ–ªà½QÊ›4¾+¯²…_K_bçN|[ÂÜášø¶„S¹)Àï ÀŸþ7øÆ»b æwa3Yø¹ô6ò}c²8YÈ Àï"Àõe°þd/5R?>á7)aÞ²šd À\ïá·!FÎ$ü•|™*¢=Ù 0õ¾£ð›”°ä-sEIwmÿÆÛ[þ|Lᥚ²o{ñ"€/3à pÕ“õ¾ ³'YrÀn€HÓ±vÈzL⾌'{á‹o2²I–¦‚æ”=*˜¦Úú{dpã¤V“ €³Èê„/LÀ }|t‚‹à[çÊð\Nè±CÓÖ"€+±-®û“­™€[¦ŽhøM@X2ë×\¢…î#}oò^øx€ëq j&`;\+ÂolŠ…ŽsUð6߇Tp=O²j&àB´vNº{ðAœÁ7 ˜º¯1x€kÿ1©.X´’uŒTKYÁ9|c³è¬‚ßÂ/à<¾ë€s½x¬L¾…Á™ÍR^ªÉYÕ%æóÊèä;ÍÇ…‡yiù´ÒHsyzÙL/ÞÞ ÇÅaÞCMe5‹›ýâÀŒ`#ÀF0#ÀF0€ ÀF0€ŒØ0Ë‹·Pìe*8vÀDk¬\f(ã¤)šEëñÚ¤¼W{IY§¼~‚†ïÅ£¼Q±iY¡š4Ÿ”‡Ù„DëïQ`f/@×þnÒ¶ÏF=ÁëÉúf;Ú4ýÑyÏ“f%…~¹”²n·=é¥#È7>yʧ»þÇrdäŒiÒPÙðÔIçë ãZ¯UYaºµü܈ÅòÚžôü=8âR¸êG‹äÚ1ßâÀ‹¤ô`™„Ï÷n¶‹w²ÍìyЦ´\ÀÉܨýp+7uÒ ñ™7ƹ€Wry€ÃŽ‹‡7Ž´bïvZu&+xñ+V'r£öíÜÔIGUŸ¹€I[Á Ua.àˆ/¸Þ¯;ƒéå$õ­¸Q1_`'\êø6„~¹t÷ïX[¹‰“^ª 'Åòâ…ký_Ïõî܉3^T°«ß´šSZét‘vì‰b2MÒ;ä}Úã/ŸIw½•-õçÜž‰s³_¾|!±i‰›J¥b% K•F0€Œ`ðA¡Ù¸©öCЮÛùødÎÅ9ØF©©vŽÂXÿ1EýZóÛ¶¹>•sqæÛž5•Ü×`¥Ìé0“p¸8á¶‹#* x¼Æê*˜9Ò!`ápaÂôö¦þ±¤ë 1k¶"œî¢Ê æô0‹ð°‘mÜ(¥óCøå…yžzÝy ùª*˜íôSí¾D€%ÎEû÷ÜðËO`o+bwÞ$á««`öÄ,1Ÿ€ùA ôƒìRÞp¢€#€g§ž;o–SÏîRÁl ¸½H·!Ì÷N>ª|?ÝX5ÏJp¬‚'§^˜ãÔ£±Šwo³ ,ü‡0³Ý¡zÇ=ù»àîsÇjÚ¡ÚpU5ŠK4Ë%@Ô]›E3QÍîé!à±0¯Ýžï›æ^¢Û·ÇqãÝÍÚŽö9 0Ï%@ãþ‚ý=†X‰èyLîl *ÀolÀ#c®$ò„€©­Ü·Þ,y¢íïáoîÞMRÀÆ”®`©æõŒÜë…Ü×ïÛˆXؘ‚ÜNÔ| %Þ¢Þ10 _¦dW{©ÖOxx7ðnæxgèeÌ";ÊÈ÷Ä…Y¯_V0‘o¿ÊN GjÖÚœÃPæëb€SR¾¤Uk‡\Z Ó’Ê3ÿ-LwF°¬|ÿµ¹í€Icvê]O)Gy䲚[¼ðây.¿mÀK§Þf—B9dž‡/¨B9`"5à쮦û ÒÇ^xñî¥{ À+¹Äª`Ë«`Zm#»‚íѼô–«`OíG´%Œ;õ6u|–ìº/1-- +x¶{*ß|¯sÙí­æ¦ú#åý/ef{4Y³è|/Þ¾¹ûM'éAí훚R4gîß-Û¿§És9¤ÌWôQŸÊ9 )šÃJ–*Œ`#Àþö€5Á3æjBÓ®joíÌv×+‚gÌUV´K׫G·ýŸfÿv·3{}ÆÜpÔm±v;¦C àD»€y½>0·¿\)ýƒ¤Ìk·«Ûa+B·µ(ð¸i²ÝàKW¾Ë¯K·‹”äJÝ…Ø——÷÷w¡ps`V»®‚'Àì ÷šM¶›\ó]~pŸ-Ê•º àwXâôjJ ˜Ý®p/äH¶» X²©÷X±!¸$·y‹7%`n»êKô˜½©˜íòë_‚ܾAQ»ÛáZà [Ä€ùÞÃ}.ÑÉvS€om\¹.?°Ëí7Šo*Aî Øˆ“°)x³Ýà›1WGØp!MàüܪeûþÞR®íJw‹—„€ë‹ÀØB\àÙ—háŽï¹v|¯] ·º²ßúnúé»äÍ¡LjÀ6`ÝB‡ p]ß®¤ëRÀ76¤Šªv–Ô®ÜÄç\šÇê À`ÅBG˜îB×é± ¯¿€‡/àvìJx°FÐó_¢‡güK´b-—rôOÎŽïGó›X:Ð=à>h°«`ñ$Ë|1¥gÑ$®àk3ðåþo Ñ%ÚEUR‹§{Lò×%++¸%ÜÆoàß}üWz’u1š .tŒ"Ÿ~Ý *¹Ð¡ª`Çø· ðïS=&)—*ëa]è<<ò•¾æ…Ž*XóaCÝ‹ÓÎsnùŽ·Òr“,o©ò V|\X×¥:ô,‡t®ÜpÔ5K•E:€Á3æjBÓ® °Î]x Cð\Mìõ“sÜŸÚƒ»ÀŒ`#ÀF0#ÀF0€ ÀF0€Œx4`‰ÓÏ{G®7ˈÙäºgŽ›«iWÕg+Î ~€2#׬"Î;Þ6Wxÿ‘æYiÛÅôŒæ¶ËÉ54 õ›^¾)o¶²5€ž ˆ¥-¼ËõßÚü\M»ŠÜÉÎÅÏ%ÿ73rM ›[ÙŠ9†tl-w2€qÔ^~.È·–KGärÇ+È%^»†XyÀ³ôŒÂLåá}n®[nµ]yŸ)WZ¸C»&„tD[E[EgéÔgi[à@ýg‰#æó À\¹žïããÊù‚ÜY#ÌÎÍÐ3>¨Ï–4}æäbÌØ2þ<_ƒ'k¹Ì\C¹Ï9-Fc™ŸÜü\¬da©ÀF0€ŒàoøŒAð ‚)`¶CpÚ!SçD”Ìuú€Aø €ÙþÁnÕ0?9`‘p¨`©CP³Ó$r¹€%þA'\¨„Áa e¡{pè1rs‹Ü…Ò\×çù½Å?ßù-‰ÜMÀµûø½}æùA_æE’ó”Š\úR¹1ÀõÃçu0wçu v1½7†¦Å¹ì‘~îÜà?Æ6fëØðàºøÖuÉ ¦…ˆ@’;6,Ëåô“ç> ‚iYu`À­`…ýdÀ€~>ô}Xî1€©|WÀæÀDå+¸Ÿè6‹>0·ü,zÛæó€çàï Ø”LrÀÞJVQÅœ~%ëÐܲ+Y9:®§rî²}Æ\éZt†ní©Ü…C¯uŸ&1WþiÒfí?™»p>€•ró#¾J0#ÀF0€ ÀF0€Œ`0€Œ`#öìé´¦?y°S/hW⌭Oä7wo¹¡üÒ.]X*r{ýZOÍô†."aóV‚XxºOþÔl†·Ñh¼x —ŸÊÇÇö™49ó1ç²T‹þ¸ õË;y2*òüIYù£UÒ0ò ‰£/tùÉ}|VÖ®ë±WYB0òÔ QÛ²ÝÜæBFBWyW` DhÛ'bžÁ!(l7°Ì0ßħlå€} çh>cÞ)8u€‰WÁ–IçhÀ¡¡Õ›ä~‡ ¨]oÖ0ef¿c3T‹A2͈³q?:ùùãé’wòAi$Žb¾ËOð§‚ç#휔ùÌ“6_Æå—yâ7—ÄÃ}¤#]>û¤±’…¥J#ÀF0€ø„q”oñÙ]_ðA¾Ågw5~MÀ}‹‹vþ¦fšÅÊíÖ¾(àr¾Å°‚‰þþ‡¿w£œoÛꕾàñVXÒ·ènñþïT¡˜ïµJ¼•á©önt€ûýO‹úo+á¿ÿ×ò•& ß´{Ì$Ú=ÊÇ'ÚÄ´,ÛUã[œwx[¾«"‡·"àÃ||ÂmjÀ¶yW*è[l<¾ÿ´|…€E¥ÐÐpÁÖíDþà]Ìã€ÿ|ù³Ìö-VNBлžD€¾ü ЧSæÞ’z´mô˜«†XåäÒ\á ‚%¦˜JfŠiB¾rÀ‚[R;chƒ’W¦£S‹XX*iB¾ À$ì*ØTlÀ*ŸÏ8•çJ'JÃ$KVÁ®„e€›™oaÀM;Ÿ ¦c /ÑUÿ–¬d€»ÇßÈ(K.ÑUÓô€ ð1Ž«`•e¦ñø–›d9Àíc’³ ˜oøÏâ€éï†È(‹–f»KtÕt|¿ àke77•Ü%]èð/ц ØjÌ8Çä6þ”¡(`òù [!`w‰6ßð¶¶pe´€­ðÕM9$€­FmuH•vŸ6`«V—°} `£l倷Û5;?–{”oQíjFn»_æóàã|‹jW£f˜dpÄ× `#ÀF0€ÀF0€Œ`F0€Œ`D ÀLŸàº­B²) A¼>ÓÆo¦òI?^ò1âå›Ì¡¶Œaæ'…¬ìÄëó:¤¼¶I0^Äy£¥_Ãc÷âeȽ\¶’Ï÷M&$_ý´Ýî}n^Ÿ½žÎÆ9O4ÍOæ¦Û ‹Lsâ"—¥=4 /Þ¦›+Ìå ½Bo˜Ÿ°móJä’$—l^Û¹é¶)T´±¼kt§wËÎ7Q/ÙÍ=qLcÉGsóûìë8çSßj;•»Õ6Y™äq%—8âÅ#›1XA.WÉGrÀ‘\FŸïä–þ -žÏÝl›BMª ‚­¨‚c^<ß  /žŸ;ßò”|³Æw~m®1–›ÛgòîGËSOµÊÝn›|G*Óœä²òMÞÑÙóç=”|ô¨\RäÓŽý¦´ ˜$H;ü;Õã!é&‘Oû• ¬da©ÀF0€Œàoø+»üöŽgw&®>½Ë¯ÜvUÏîLܬsùI‡­ûÏå"ÇKÔX8V;85€.?)á¶þ:º2ÂÝ`Ŷ¾G;¹9€ùÀ~Vvî4ÔÝΚBÂï‡0½¾¾^H ˜9V`±31•<Èq.¿qOnvîÄ×ý QK— xÀ{å_¢éÕ¼^.5)‹½‡Bgâ¸ùy2×Ä«°ÛoZæò*X¸9g·Áv{‰¶VPÂ^.à¶~Í«„°˜?VÕ¨[“;7rc€GsiÒɳQÁl`?;êN˜†ú­ù€¯½î øòÚ~Õµ°ë·`¬ÈÓ­ÉÆ™6r#€gs©ðXÁl`ߘ×ÀoÃÜ´½ìøvL `üvæîßÀâ± 7çžÌ¥•ÆäÉÜ}¶Ð@WØ=øó· ^:¼mK„ãý[x6òQoHHb€'séÙë:Àõ¥ã+<ß¿%W;ÏéñˆqŽÞƒ=séCÞY¼øEö@×]ýÖ$©¤éþ]°”<šK«¤6í)+X°’ÕßGëynÈ­`ÿþÍœduËPr­­¼‚si•Ô¦í_ÁM÷¥šd¹ûo÷øÁlÄþàùþ;ÚyU¾‚'-^9ÍLï–l4I`÷xÉ<ÚKd€‡û·äj'Ÿd)+xÖâ«àþC°Ž°h¡c¼2“àÝ?4´q•Ì¢‡ûw%ò«Ì㊠žµx…EQaÉRå|eî–x}n »/™¼WhÌiîÁž¯`„ÇX—çùÊÌü½-q׫¢’ªŒkŠ ö´x…+¸#,ù¸ÄŸQ‹§®àã\~®­•|ÒÀ»2cÀ'tù ®Ì‡Ÿo‰Ü<ð)\~š8£÷îB0€Œ`#ÀŒ`#ÀF0#ÀF0¢ `Zu³qd~ùÙy/ȺÿUôèK±§+“ÞF¢-,˜Ä4.’ŸÅN'E«G¤ HÂ"±æ± ` ¼…“ i¶å%ÿs°®×›OWzØ‹ôP°nbH[zóÇÎ;‰õâ]G +YF0#ÀF0âa€¥îÁ£Ü…ßÍ™¨,tå.Ü¡]Ͷ^O»%X°`¤öqJWžE¬‘ º¹`Òä ˜?RýæÚý¾ ¦ aÐ!2·6ÍýËÅDt½]¯ý¿O‡x 0{¤3•’Ø](,u¶Œn-Ú¾ oíwbæ¶dû¸Þ>é<€EîA°Ô]¨­`A»]ýNŒ p[»ãë©Kf͸;v¥ØŒ”$ÐéÌo—^ï‹cqx§¯êÉ›äd‰ëœÏ>?Ñœ…4P3ñÖ—owvÿ/÷Ú3îþù¬NøR÷#Åõž4óÕRÀ¢Â÷*˜ïLtP{Äý·ü&ǵGÜ~«>??Oñ#;—°15sßõÆÃÛ 60 o rƒ l§ë4£„i`;\§[ÀÕ_|À>ào%,ÜI¼ñDBÀó,‹x˜e}V§|YðÄ— Xºÿ¹²‚o·¡†¹7áaŽ5<V§|¹È k43v¹O½øÌ|›V9ø€oÓ*Çi×K¾µ°Äº"w¨¤˜Žïpyî/ÔÀ×ëø\u€Ï0ɪ{Û¢ ßÜ…2ºv°ãbï9ø6ðíÓÅ)“j’Å᫬`ÍJ–°Cë]¥9€]ùv€«ÊUð9žƒëpm¿<àžð ˜¹TÙͱÜîß³,UÖ#àÚ~Àæ6T1÷ÆŽkwmîži-Zhµ]qÀÝ'ºÓ-˜ÿqáÀ¶Ã{¦ ¿`÷‰°»BË>ðï¯Ð§úÀ¿‘¹rîÐî÷ú‘éšðqîÂ3:Œ`ÄÓÇÿq7"P7?VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/binary.gif0000644000000000000500000000036610147723030015254 0ustar rootsrcGIF89aÂÿÿÿÌÿÿÌÌÌ™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,iHº¼ñ0@«$¾Y ]!©q^¨¥ ¡kêµ®ßjAèüvƒQhè³)ƒä àŠn%Ó–“—¾*Ô‚¥ZUÆîÄ)ô„§´ã9ë!_Ñ8ëÚ³ës˜;¯î‹ J‚I;C‡ˆS ;httpd-2.4.41/docs/icons/folder.sec.gif0000644000000000000500000000036310147723030016011 0ustar rootsrcGIF89aÂÿÿÿÿÌ™ÿ33Ìÿÿ™f3f333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,f8ºÜþ0ÊIÙ¹øÎºï‡ ÷£PËAœ‘;pD®çÁ,¬3Ë.Cp‹Ld²7¢E0hsJY·S­4¹“«Fékýëª~ÇÛn^4Äoö|~f?Zƒ+~ ;httpd-2.4.41/docs/icons/box1.gif0000644000000000000500000000037310147723030014637 0ustar rootsrcGIF89aÂÿÿÿÌÿÿÌÌÌ™™™333™3f3!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,nºÜþ0†#á´²;DÖ\çiS1ˆcu¦à¦q®ìk„'¡@׆Ûi˜áùX¬ pˆÙõ~%®0B¥CÕŠŒ9½mï˜üÆâ1M:ÖÛÇ/<Ý>Üàn'þ€ÏWû€[2L„LŠ‹Œ ;httpd-2.4.41/docs/icons/ball.gray.gif0000644000000000000500000000035110147723030015635 0ustar rootsrcGIF89aãÿÿÿÌÿÿÌÌÌ»»»™™™ˆˆˆfffUUU333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,D0ÈI«½8ëÍ»ŸI˜| a#WBaiVÀàH|•&ñ"9 Ï÷ È_NgI ¸%³ &‚*éT&úx¿à°x,‰;httpd-2.4.41/docs/icons/odf6otf.png0000644000000000000500000000207211141176336015360 0ustar rootsrc‰PNG  IHDR÷ŸL4jPLTEÙÙÙ!!!&&&'''(((33344455533™\\¬]\­]]­^^®™™™žŸŸ  ¡ ¡ ¡¡¡¢¡¡£¢££££¥¤¤¤¥¥¥¥¤¥¥¥¦¦¦¦§¦¦§§§§§¨¨¨¨¨©©©ªª©ªÎÎÜÎÏÜÑÐÞÑÑÝÑÑßÒÑàÒÒàÓÓàÓÔàÕÕâר䨨äÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßÞÞèàßßßàßàààßßéààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèææñèççèçèçèèèèçèèèèçñéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííìììíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñðððñððññññðññññòñòòñòòòóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿ[A´£tRNS@æØfbKGDˆH pHYs  šœ\IDATÓc`EÚ ÀÀÀÀzöì©ã¹÷îÚ¾yãºUKåÁ‚gNéòppkmß¼~ÍòE²l¼`Á“:  ±†]a,› Dð0‡ÖŽÍê\+äÙeÙ¤{ ‚é uÖp8Í‘e“êî€îææØ´~µ çÌ“%Ù$ê!‚Û59ÔV(s(Îìïke­‚nÞ ÊÉÁ©4eBO[sMe9DpÍêÅ‹ìfNéïjkª.ÉÏ®\6wÎŒI`¿hçe¥BÍ™9eb7‹dM…KFBDpÖô)ýÝm’,â…Y© Q¡Á™“z;[k+DYDR££‚ ‚ý}íM5•¥"ÌBaA~Áî¶úšŠÂfÁÐ Oˆ`kcMq~–0³@p€·»£-D°¨,-‘™?ćÉÞÚ"KMˆƒ¸ÓÊÜ"X™àÔjenldåE¬ Am4ÀÀb¢oüxÄ7IEND®B`‚httpd-2.4.41/docs/icons/transfer.png0000644000000000000500000000051610671421551015635 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿ33Ìÿÿ™™™f333·±\tRNSÿÿ×Ê AbKGDˆHvIDAT[MÎÁ ƒ@EÑ ÁìG~^ì` û/S@´„é¿„,1ouvï¢Ç±«Š~§é!ûÃé!ûàû<Ï›½÷A^õs1 ¦ŠK9+–²(K¹6ËP)’C!k‰ÖZ–MÌ2×rS´í>†qüÇ£Ö:"íWä>Ð h\ÍVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/screw1.gif0000644000000000000500000000040210147723030015163 0ustar rootsrcGIF89aÂÿÿÿÌÿÿÌÌÌ™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,uºÜþ0†B‹lhaïB( ]”‰ã@JT¨ªK/9?Ä[ÌÕ\A£ÙŽ@­3$V(Ó؉rR!•v`UÊ©3u|iVf‘àÂÑê*ØÃÚ{ǧï O€~}(„…ˆŠvp_?7 O“” ;httpd-2.4.41/docs/icons/hand.up.png0000644000000000000500000000046010671421551015344 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿÌ™Ìÿÿ™f3Õ$(¢tRNSÿÿ×Ê AbKGDˆH^IDAT[…ÎÑ À0Ьp$„.`Û´î?S5„~կǡœmÖ´/½x\Vì¿t+êm›PI“sÑAÄ-Þ^„ɘ¾Ó!áÁÔÛxÈ©‹ÆŠ¸lS¨³87òÏV Îxò°VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/pie5.png0000644000000000000500000000042510671421551014652 0ustar rootsrc‰PNG  IHDR½/T• PLTEÿÿÿÌÿÿ ¶ïtRNSÿå·0JbKGDˆHJIDAT[u̱ €@ Àˆ’Q²£/)S°#¤ÀS¾-}…„‹«lœøµhÏly狨H"†|–‡ì´›;ÝL[¤¶ õƒ‹½þ'aD+Ó eßVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/hand.up.gif0000644000000000000500000000033710147723030015323 0ustar rootsrcGIF89aÂÿÿÿÿÌ™Ìÿÿ™f3!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,R(ºÜþ0 Bä#cTËHÐ\÷má4–ЧQ¥ê’‘¨#ìÈò÷ŹÔ·Ÿlð#mÃ_q )Ÿ¾æ"‡êOŠ1Ûè ·Â`l›B·å)uÆ’xOŒ;httpd-2.4.41/docs/icons/transfer.gif0000644000000000000500000000036210147723030015610 0ustar rootsrcGIF89aÂÿÿÿÿ33Ìÿÿ™™™f333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,e(*Õ½0®-2³J­Ž]ç}JXqäë’!Ï|C>Ô_@Ü9B ç»U„CI`ù3"“‹¥tJ]F«Ø©â™¥O‚x,–~!Èæ-ªOîØÛè»»1ÿièt-)44 ;httpd-2.4.41/docs/icons/ball.red.gif0000644000000000000500000000031510147723030015445 0ustar rootsrcGIF89aÂÿÿÿÿ™™ÿ33Ìÿÿf!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,@8ºÜþ0ÊI«]%—[‚Õ aÔdy¦O!”%aÃN7›/ÞÈ<ÊÇNCbQˆBU IeLs©Z¯Ø¬V‘;httpd-2.4.41/docs/icons/folder.gif0000644000000000000500000000034110147723030015234 0ustar rootsrcGIF89aÂÿÿÿÿÌ™Ìÿÿ™f3333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,T(ºÜþ0ÊIY¹øÎºïEÄ}d¦)Å@zj‰C,Ç+ŽõWž<œì IEáqg<²‚N"4ÚIRaV˜VÅÝÂx‚Ôl<&€Ãæ´zÍ#,LðŒ;;httpd-2.4.41/docs/icons/alert.black.gif0000644000000000000500000000036210147723030016146 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,e8º¼ñ0 @«#¾i;ÏW$ˆàÖ•¦xB.ÀÊQת5³e>–PHðQfÁaQ²vËÒ5 AçÝ’¶\«Ì´­2Á`³ÔIíêØuóût£ëâ»z0ìû…8<ƒ< ;httpd-2.4.41/docs/icons/odf6otp.png0000644000000000000500000000177111141176336015377 0ustar rootsrc‰PNG  IHDR÷ŸL4FPLTEÙÙÙ!!!33344455533™\\¬]\­]]­^^®™™™¥¤¤¥¥¥¦¦¦¦§¦¦§§§§§¨¨¨¨¨©©©ªª©ªÎÎÜÎÏÜÑÐÞÑÑÝÑÑßÒÑàÒÒàÓÓàÓÔàÕÕâר䨨äÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßÞÞèàßßßàßàààßßéààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèææñèççèçèçèèèèçèèèèçñéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííìììíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñðððñððññññðññññòñòòñòòòóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿÎÚÓötRNS@æØfbKGDˆH pHYs  šœ?IDATÓc`Bò ÀÀÀÀtðà¾Ý‰[7®[½|é¢y3…Á‚ö)r²rÈ­^¾xÁìi‚Ì\`Á½ ¬ ³€EdŠ ³Dp;'«ÜšåÒìs„Y™ù ‚Ñ uK°šMd櫯®ç`]¶x¾[oO;/3O1Dpµ,«ÔqVÑÞæ¦*n¦<ˆàò%’l¬lb- Uå¹ÙÁó§O3êíh®«*ËÏHN€Î5qBO[C]eanZR\$DpÚ„ÞŽÖúª²‚œ¬„˜?ˆ`Ÿ|‡<xB{Ûk+ sÒb#ýýÜ] ‚ÍòÕH*m ‚õUÅ9© ‘!~žn¶ÁJù$•†Á" ²¨Ð@/;+c}]ˆ`Ž|’JMˆ`JlD Ÿ«‹ƒµ©¡ž¶º D‰ 0äÑJa&!IEND®B`‚httpd-2.4.41/docs/icons/ball.gray.png0000644000000000000500000000045210671421551015663 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿÌÌÌ»»»™™™ˆˆˆfffUUU333úÐjtRNSÿå·0JbKGDˆHJIDAT[c„R™3g˜’.n¡Ì)La•¦¤3sXÅDÓÅ%½ÆtKï„2ÓÒ*àÌòŽ™¦àŒŽÎN˜¹ AtÛ €L&àAh™¿·ŸVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/svg.png0000644000000000000500000000176211141176336014615 0ustar rootsrc‰PNG  IHDR÷ŸL4.PLTE33™***+++,,,---333™™™œ››žžžŸžž   ¡¡¡¡¢¢¢¢¢££¢£££££¤¤¤¤¤¥¥¦¦¥¦¦¦§§§ÙÙÙÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßàßßßàßàààààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèèççèçèçèèèèçèèèéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííììíìíìíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñððñðñðñððññññðñññññòñòñòòñòòòòòóóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöõööööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿ ‰ª;tRNS@æØfbKGDˆH pHYs  šœPIDATÓc`E PÀºsç¶ÍÖ®\¶x>ëL˜(ëŽm›Ö¯Y¹tñüY¬“z¡¢¬[7®]µbÉâùÓ'³v·ÖCDYׯ]¹tÉü9³&÷±¶ÔV—€EY×®Xºhþœé“zÛØXÁ$¸|Éây³¦Mìjjdƒàâ…@­ýMMåeyì@jÜÛÖRSQ’—• œ>­¯·­IœE4/3):,"8ebG[c‹(KJBdhD¨¬¦RŒ%“E06$ÀÓ"ØÒPS^Ì"œ,Àäçéllª*-a‰ aæuq¶±„–—åg²Å„ð0Û[›B‹óÒ„™#B€Z™¸Mt!‚¹ÉÌ|AÞnŽ6\LÚÁÔx~f^/7{[SN&5ˆ`|3 0*)@Ã}Ýœ­,MZU•ä¤!‚¬ì(t lh€®´dÑ IEND®B`‚httpd-2.4.41/docs/icons/forward.gif0000644000000000000500000000033310147723030015426 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™fff333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,NºÜþ„„ñ\¼DÔ…ïÜA‡i•èQy‘NšßS¸/ÎE¦H`€ãºmñ+}Cdqùã0Ÿ3… U ¨O)Ûl¶ÔÞwÙk%ËŠ3ú‘;httpd-2.4.41/docs/icons/odf6odg.png0000644000000000000500000000206011141176336015336 0ustar rootsrc‰PNG  IHDR÷ŸL4mPLTEÙÙÙ***+**+++++,,,,,,----33333™\\¬]\­]]­^^®™™™š›šŸŸ  ŸŸ¡¡¡¢¢¢¢£¢¢£££££¤¤¤¤¥¥¥¥¥¦¦¦¦¦§ÎÎÜÎÏÜÑÐÞÑÑÝÑÑßÒÑàÒÒàÓÓàÓÔàÕÕâר䨨äÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßÞÞèàßßßàßàààßßéààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèææñèççèçèçèèèèçèèèèçñéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííììíìíìíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñððñðñðñððññññðñññññòñòñòòñòòòòòóóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöõööööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿaarùtRNS@æØfbKGDˆH pHYs  šœOIDATÓcà@ PÀqîÜ陇öíÞ±…cL”ãìiM^Nµ[Ös,_å8¥Á *kVp,˜5"Êq„—Smçeî‹9fNšÐ åH©Û¸†Ón¶:‚÷ðpn^¿Zkú4u îPåTZ!Ï);½§»™À‚[6*rqrÉM”él®¯€ ®Y½x‘Õô‰ÒìRuåÙÁ•ËæÎžÖßÉ.É^š—•–\4{úľ)ö V±Œ”˜0ˆàÌ©{:šÙ%ŠEXcÂ!‚Óû»Úš$Xó3RYÃü} ‚=Ý-ul¢9)1B,~^.ÁŽæê qÖ VfWˆ`SmE>«p\dˆ¿³­%D°ª$W˜562(ÀÃ͉‰ß"X’›ÁªŒ†ÁœÔ„È0_g[K3c}ˆ  ƒ:``n fj,õ£ŽIEND®B`‚httpd-2.4.41/docs/icons/generic.png0000644000000000000500000000042310671421551015422 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™333U±3•tRNSÿå·0JbKGDˆHBIDAT[½ÆA €@ EÁŠZØ €æWBýkâ@7Es$I wç0›S›Ý33w«ªË±®]>å÷j½Òñjþe T9w~\VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/ps.png0000644000000000000500000000045710671421551014437 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™333U±3•tRNSÿå·0JbKGDˆH^IDAT[­ÎÑ À EїʬÐ0@`ÈÛ¦"ÚvÞ¯#!D´¬ª*.D¥$Ô%ˆ`Œ'Ié½O]â¹/à8-hƒ$édÌ“2^ÒÅ7±ú…í\Å'•;½Ê Ô1¿W—VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/compressed.png0000644000000000000500000000212410664777241016166 0ustar rootsrc‰PNG  IHDR÷ŸL4PLTEÿÿÿÿÿÌÿÿ™ÿÿfÿÿ3ÿÿÿÌÿÿÌÌÿÌ™ÿÌfÿÌ3ÿÌÿ™ÿÿ™Ìÿ™™ÿ™fÿ™3ÿ™ÿfÿÿfÌÿf™ÿffÿf3ÿfÿ3ÿÿ3Ìÿ3™ÿ3fÿ33ÿ3ÿÿÿÌÿ™ÿfÿ3ÿÌÿÿÌÿÌÌÿ™ÌÿfÌÿ3ÌÿÌÌÿÌÌÌÌÌ™ÌÌfÌÌ3ÌÌÌ™ÿÌ™ÌÌ™™Ì™fÌ™3Ì™ÌfÿÌfÌÌf™ÌffÌf3ÌfÌ3ÿÌ3ÌÌ3™Ì3fÌ33Ì3ÌÿÌÌÌ™ÌfÌ3Ì™ÿÿ™ÿÌ™ÿ™™ÿf™ÿ3™ÿ™Ìÿ™Ì̙̙™Ìf™Ì3™Ì™™ÿ™™Ì™™™™™f™™3™™™fÿ™fÌ™f™™ff™f3™f™3ÿ™3Ì™3™™3f™33™3™ÿ™Ì™™™f™3™fÿÿfÿÌfÿ™fÿffÿ3fÿfÌÿfÌÌfÌ™fÌffÌ3fÌf™ÿf™Ìf™™f™ff™3f™ffÿffÌff™fffff3fff3ÿf3Ìf3™f3ff33f3fÿfÌf™fff3f3ÿÿ3ÿÌ3ÿ™3ÿf3ÿ33ÿ3Ìÿ3ÌÌ3Ì™3Ìf3Ì33Ì3™ÿ3™Ì3™™3™f3™33™3fÿ3fÌ3f™3ff3f33f33ÿ33Ì33™33f333333ÿ3Ì3™3f333ÿÿÿÌÿ™ÿfÿ3ÿÌÿÌÌÌ™ÌfÌ3Ì™ÿ™Ì™™™f™3™fÿfÌf™fff3f3ÿ3Ì3™3f333ÿÌ™f3îÝ»ªˆwUD"îÝ»ªˆwUD"îÝ»ªˆwUD"îîîÝÝÝ»»»ªªªˆˆˆwwwUUUDDD"""û‚™%tRNSÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ?ÏBObKGDˆHoIDATÓmÐÁÀ DQ Ù#5ÙÖ6BÆ Hò=ùfÑ•Ýi&Ž"&ö‡E ¦V|4pš¯î:ŠŒU qP6‚Ž8¸x*‘ˆD¢âQ4äFVdg"ó"²>‰©õÞç7ö¿І×F§:Ûè.Ä i5;VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/README0000644000000000000500000001176410664776532014210 0ustar rootsrcPublic Domain Icons These icons were originally made for Mosaic for X and have been included in the NCSA httpd and Apache server distributions in the past. They are in the public domain and may be freely included in any application. The originals were done by Kevin Hughes (kevinh@kevcom.com). Andy Polyakov tuned the icon colors and added a few new images. If you'd like to contribute additions to this set, contact the httpd documentation project . Almost all of these icons are 20x22 pixels in size. There are alternative icons in the "small" directory that are 16x16 in size, provided by Mike Brown (mike@hyperreal.org). Suggested Uses The following are a few suggestions, to serve as a starting point for ideas. Please feel free to tweak and rename the icons as you like. a.gif This might be used to represent PostScript or text layout languages. alert.black.gif, alert.red.gif These can be used to highlight any important items, such as a README file in a directory. back.gif, forward.gif These can be used as links to go to previous and next areas. ball.gray.gif, ball.red.gif These might be used as bullets. binary.gif This can be used to represent binary files. binhex.gif This can represent BinHex-encoded data. blank.gif This can be used as a placeholder or a spacing element. bomb.gif This can be used to represent core files. box1.gif, box2.gif These icons can be used to represent generic 3D applications and related files. broken.gif This can represent corrupted data. burst.gif This can call attention to new and important items. c.gif This might represent C source code. comp.blue.gif, comp.gray.gif These little computer icons can stand for telnet or FTP sessions. compressed.gif This may represent compressed data. continued.gif This can be a link to a continued listing of a directory. down.gif, up.gif, left.gif, right.gif These can be used to scroll up, down, left and right in a listing or may be used to denote items in an outline. dir.gif Identical to folder.gif below. diskimg.gif This can represent floppy disk storage. dvi.gif This can represent DVI files. f.gif This might represent FORTRAN or Forth source code. folder.gif, folder.open.gif, folder.sec.gif The folder can represent directories. There is also a version that can represent secure directories or directories that cannot be viewed. generic.gif, generic.sec.gif, generic.red.gif These can represent generic files, secure files, and important files, respectively. hand.right.gif, hand.up.gif These can point out important items (pun intended). image1.gif, image2.gif, image3.gif These can represent image formats of various types. index.gif This might represent a WAIS index or search facility. layout.gif This might represent files and formats that contain graphics as well as text layout, such as HTML and PDF files. link.gif This might represent files that are symbolic links. movie.gif This can represent various movie formats. p.gif This may stand for Perl or Python source code. pie0.gif ... pie8.gif These icons can be used in applications where a list of documents is returned from a search. The little pie chart images can denote how relevant the documents may be to your search query. patch.gif This may stand for patches and diff files. portal.gif This might be a link to an online service or a 3D world. pdf.gif, ps.gif, quill.gif These may represent PDF and PostScript files. screw1.gif, screw2.gif These may represent CAD or engineering data and formats. script.gif This can represent any of various interpreted languages, such as Perl, python, TCL, and shell scripts, as well as server configuration files. sound1.gif, sound2.gif These can represent sound files. sphere1.gif, sphere2.gif These can represent 3D worlds or rendering applications and formats. tar.gif This can represent TAR archive files. tex.gif This can represent TeX files. text.gif This can represent generic (plain) text files. transfer.gif This can represent FTP transfers or uploads/downloads. unknown.gif This may represent a file of an unknown type. uu.gif, uuencoded.gif This can stand for uuencoded data. world1.gif, world2.gif These can represent 3D worlds or other 3D formats. httpd-2.4.41/docs/icons/layout.png0000644000000000000500000000050310671421551015322 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿÌ3ÿ33Ìÿÿ™™™™f3fÌÿ333—_ãtRNSÿÿÿ@*©ôbKGDˆHdIDAT[c(ƒbccc† `gG0ŠALöòòvv0S0-( dŠ¥%pTTT€˜i@fGGˆÀÀââc2€™ €Æiéh N”‰ƒxQ8³Ü€Ž4î€cw,/“A-¬«VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/script.png0000644000000000000500000000044210671421551015313 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™333U±3•tRNSÿå·0JbKGDˆHQIDAT[­ŽÁ 1—˜l!\ ±ö_ÓyQîy b3cÂ!*Å*¥£ª®ž1»ºˆdõÓ²¢'+üô›˜Þ¯¥{þ$[Â/Ýî<=Ò®<VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/pie7.gif0000644000000000000500000000027110147723030014627 0ustar rootsrcGIF89a¡ÿÿÿÌÿÿ!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,8Œ©Ëí£4¢ÖX°· ­q’âxpÀz¢È¶H»µBjÛx~î<çû¡„–Ñõ2~ޏ(;httpd-2.4.41/docs/icons/pie1.gif0000644000000000000500000000030610147723030014620 0ustar rootsrcGIF89a¡ÿÿÿÌÿÿ!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,EŒ©Ëí£4¢ÖX°· ­qò·‘fhBRò§G=g³üR{þãÝ‚D¡¯ìpHÛ±é|6•Ã)ƒ™sèrT‡Q;httpd-2.4.41/docs/icons/ball.red.png0000644000000000000500000000044110671421551015471 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿ™™ÿ33ÌÿÿfÖ¹utRNSÿÿÿ@*©ôbKGDˆHKIDAT™c0†R™¡¡0¦© P0”Ȩä aš 2 ©C˜ŠŠ*.P¦’+”©¤äg:¹„B˜Æ!.®®0s]Cƒ1m#×½üR,ʘ·*¯VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/world1.png0000644000000000000500000000051410664777241015233 0ustar rootsrc‰PNG  IHDR½/T• PLTEÿÿÿÌÿÿ™3,ЬétRNSÿå·0JbKGDˆH~IDAT×c†ÐðÿWdݪ½¡ á'8¸¯2Ä5­Z´•!¦‹kÅV†ŠEJJº UM ½ :4V3"úÐC‘b€‹fhœq¥cG =¤™¦I“=Rö8Â’¥œ—䘉£fM'8œÙyæÏI€&:”ˆQ£’‚Yº´ˆÓ", ²`± ê‚6XÛÙº•‚W bÀŠá@–l–³Yj¨U+ -þxâþ˜;7‚Ýeò–ÙÀ—ï–¿[lL 0t‡X¼xŠã)&"›`C™MË:`Ù¼™†gyB‹m§té¨W XÁZ‹k×(b£PC[ ƒÛ Zänшoßq‚Ç9@ü@Žã9ž$ò¤‹sç¢Ç˜>½Žuë%²—h½‰ˆï"È„'CF‚yó@Ò+Y¿Þ{7 à+PÀ£>)ø¥|Ù¿ÿ‚ÿ /8H„T†ˆD¡H#D’ÀZò&Ad‰' ˆ2Â(¥œÂ ®ÒÊ+±` Ë,·à‚Ë.Pø¢Ã/À SÌ1É8 Ì2Ï@Í4Õ\“ ÚtÓ7|€3Α|˜þ#C:ì´Ó<óÈcùðÓ? $A\$¤C =$QDéQFqäQH$¥áæI ¨”RKG¼$ÓLxÚ„CN8ñô“PD%A„ DXP¨` ÚÔSQMµUW]…•ZuõUXcUZi¥Å–[páñƒ¨tÝ…^{íµÁ«þeC`„f!ÐÚX™Yd•]–šu†Åg£Kši¨­ÆÚ²¯i![lµá¶o¼ýf„pÇÜrÌ1÷\tàRWÝuÚm×xã‘GÞy¤§{ïÉ7ß|öå‡_üà ‚`‚Œì…#Ná„n2Á…¡hÈ!# ¢ wþPÌJ,%žX‹-ºìÒË‹0 ƒ3&SãÍ8#M V°Üc6Anó‘H’cNK¦ã¤;ôPIe>WP@[Ôe—ù>@MæDfb4šj~t›n–tRqιRu”§MNìÙ§NôôS „•”¢Mñ”TŽBšU¥\Q Ä¥bdjh­ÅV nÅ%*©üp—^ªö¬„Ù kbŠÙŠk®’UFYf¿;,±Ækš ž³¯¡à,´³1`nÔöö[×—mÆ!×msÏunÕÅ@nÚëxê–wž»@(½nPÿÞ¼ôÕ'Å}÷ê—o¾þÿñ+ˆ¿&² ƒORÉ_¢0†¢hXJÄNÜ ,Ó²ñ-ŒÈÉŠŒ1#G;â5`ö#™ ‰H5‡ ’tŽœ­ÃIkp‡<~6%¡ácý(–¶%.i€i_jH˜¤F¦2)MWÈ׺֯Éil-±SLòd€›¤­O~r[Pu”BŠnvcÔTU•6HjR}\àÊbN®-¡R]êb*½ôeU­rÕ`d…Ì1W›sŒd&ó9ЉnX£óLéH“d¡N5ÌZl\­hÍN7Ô2‚ír—-mõN9ÝêðÀEÃÒ–Ú¡Ž§IÖ²ôغ×Í&ZÒª oœâg[?U$tÂåHã!¯\æBêwš·T¦b2^òÊÞ}¤Š¯ªúG|„(å¿1°T®R}J˜&<Ñ0ùѲ~·ÆÖºKþþéB¿ü_Ȇ1W“¡ì˜ d™Ë˜ÙÌ=<0‚6« :.ˆA F‰ AÁÐ@Â,‘ð›a˜Vµržó…Q§Ø9ÚPNòtIvÈCæDŸ=b?E(C)µ5èAØZ®,Ô+›â¦W¸µL”¢£²hó²Q¿„q0–iEz+Îñ ¥)å âØR—Úq5Êj uŸ5›ÞÔiw{zD&2¨ÒidÌ Éì(o½I­$z˜:½ê¹g“œÔž½¾à½PÞW@ã#Ÿ)¶Õ®Fˆ}˜x% \VSœUD#r…‰̱þùoÂ2"êŠá /“ÃÜðð7Šâ$þý•I$æÙ`é´{ˆý‡–¸„¦-ıb’Hd­–N†ÄpÒìfË&“;õŸ{BòNFÛÏÒÎ ‰wÃU¨Bå*[JŠp¨¯8Q¸„¹Të­ä::Æàf®Ín>ir•+,ÒÕù¹ÈJMž›å,gÕ»žÖvÓ]ïnËÐÍY$y©óÈœ×ÑF¤ºØÕ®wÁëzòŠª'9 Êð]€”‡@Ð)áß‚UÂîSõ…2dàˆÑ/D«H+þô·¿^úÒEr%Ù0-|ᔥ¯ÖkÌœYìpH°MR¶Ïæ1%W©h.ö&8Q8NˆØX²ISÖÖyY8-žó$·=Ñ}äuóþsÉÿ4"¢e¼Y剮}-–ÅBÅ,p™¶^¾m·Ø¸1§ÊÌ®®š…{Æ4÷ÍȳœîÜ;Ç”º°±®³hàì”о;ô·=ÔF£Ü;êeïó(íÔ§ÒK{ôå§ÃwÕC$‚¿©T¥Áì¾÷ÅR–­>º-)f±\2¸éPX„áW®6ÂÑ3V¶áÂ,Ø\/öofAvdJdo¶ÙõqØÄ–Ð á´¶ ³ÝÂŠà˜²ÞÖNo‚Y@F':t'8pnF¦¡Õ6>1DþTDsË¢D«Uo ue %[×)‡“8Z¤[]„*‘39”+³rph”p çFÀÒp¤W:þww¤,Z€zÖÕg´!;W-ƒDHÞe‡Ä-â%<#7.äI)iëâ<“6=ð¢IòÁòµiÞó=Ÿ†sò/Zå_ÿõs©æJœKÐ×!µd?÷³`Lç`æ?/â}´k$~w5 YÇ@Á63]÷WKX;ãDXö0Ûm7ðbkÇX×FNÚvcq—NkÂNmR6¤YAF6fSd{ZAô6¤Õd¦U7ÈD•P]¡YÖxW[X”Eºå8E‚‘ƒyU9)Èfi¤F»â9nôFÌu]4xzz´gª·ƒ7U;½a;¸3hßåS¿<³G<ŠÆh&WT¸Ç<ìeIþ¼G=Ö_U|T>ø%j r>É—>^tÍ7`BV³ä!HW1±¦†(ÒV,WÀ$23RL(3~+ókx˜‡Ã¦~džlÔ3'&g×bö§4ø§ˆûÚ¶m“Å(€X€9ÔY÷´€ ¸n£EDrPoõ(¬EQ´xS¤oûf[ fpd†y™Wp!5\#Å‚¼˜RËÅ\Á8ƒªszÍÂgwSÖzWHßõq‰$rÒQ^¶w{èi»çrí/P¥iùAsý¡/åX \¸sÓ ]µ>­4` #K³dtk“1úÃ1N÷1ûHa%c2Æ„@É”uÌ„~ÃÖWGòþu#vÖ4v(6ˆ+vXXrˆjcú·ˆn׈pw9‰íÔ&ádyWn{Çwêæ€@xq3Š2PŒbxM„PЇe©¸e´Q‚ÿ‹E‚_F'H›gF#•‹Çz¿"gt6”w†G2•z:h„S׌ºóŒ…^ˆFµg{X™•Må—_2w`‰…jd¹…ÇÇ_£Ž§†0â|Ïç0f…tr¹`ƒ}ýaÝÇ{© 72~¾–Wçç@i7£3Mò~c'%e÷l)mŠ‘ŠˆmÙpw59–‘àV‰ñd€0an øY}'’Ønrs(HPµD*UYo‰wo°É1ù)®øŠ±(‹eÆ›b„‚kÆ“+XRkô“¡ƒÀøpÂ(]gŒ4…q¹¡qÖ"AøqD(•DrD…è"+ÇZùðsÀ÷•5÷i;httpd-2.4.41/docs/icons/small/comp2.png0000644000000000000500000000032710664777241016155 0ustar rootsrc‰PNG  IHDRíÝâRPLTEÿÿÿ„„„­­­ÀÀÀRZZsÆç†ùktRNSÿÿÿÿû¶SbKGDaˆë\IDAT×cp, ÕÐÐPÃ9DII%ÄUR 3ÜÒR„ÁŒ´40#XÙØ È0 kcPÓ(CÈ0U6J©E@æ;E„AjƒŠ\ÂA Ä.¸©â¦”SIEND®B`‚httpd-2.4.41/docs/icons/small/binary.gif0000644000000000000500000000020610147723030016355 0ustar rootsrcGIF89a¢ÿÿÿÿ999kkkŒŒŒÀÀÀÎÎÎççç!ù,KHºÜ¾ã@k1±ÍJ'Ö\WD¦la ÌDF!¸o ÀƒpS†`ë`Å·˜ä µ¡í›)‹7ŒB<í‚;ªí˜ÔBCœª",—Y‹;httpd-2.4.41/docs/icons/small/transfer.png0000644000000000000500000000032310664777241016755 0ustar rootsrc‰PNG  IHDRíÝâRPLTEÿÿÿkkkœœœÀÀÀï„„ïZZk¹&M^tRNSÿÿÿ@*©ôbKGDaˆëYIDAT×c0†ccC(ÀAÆ`‚2˜„! FÁ$¨”±˜aÈÀ c`H1LC]\BƒŒP02DÃÒÒR Cab1†D¨9 FÛ…€ ·ZK²Š{0IEND®B`‚httpd-2.4.41/docs/icons/small/image.gif0000644000000000000500000000017610147723030016161 0ustar rootsrcGIF89a¢ÿÿÿÿkkkŒŒŒÀÀÀïZZ„c1ïÖ9!ù,C8ºÜÎå<' ‘s•ˆó(Æ!xÃal¤ œ…¼o#LJÍ ”0žm@«{ßÑ–Tîz…€Tp.œË…@Êí¶ ;httpd-2.4.41/docs/icons/small/transfer.gif0000644000000000000500000000017410147723030016721 0ustar rootsrcGIF89a¢ÿÿÿÿkkkœœœÀÀÀï„„ïZZk!ù,A8ºÜ.‚)b›Ô®9&Ô^•…)B@Z…ÑETÜDNÜ5Ãÿ@Fàf(oŸÅP†¡%…̉áyi T+‘«H;httpd-2.4.41/docs/icons/small/generic2.gif0000644000000000000500000000017710147723030016576 0ustar rootsrcGIF89a¢ÿÿÿÿkkkœœœÀÀÀïZZkJ!ù,D8*¢þORT€€YÀ ¦qžwA#å9a¶©@QÕ“vš…¾¸œ.’ï·ú€ŠÛhã-‘窜aGH€V0l¿È;httpd-2.4.41/docs/icons/small/folder.gif0000644000000000000500000000020410653705207016352 0ustar rootsrcGIF89a¢ÿÿÞ­ÿÜ®ÀÀÀ¸ }WK;+%!ù,I(b¦þΔ1˜²Ð€2«v$GQA‘¬y6#Ûvð"ß_­ÝdE輞ᷠút„ïø`$eÌÌP 8 —©õŠ] ¿œn„$;httpd-2.4.41/docs/icons/small/forward.gif0000644000000000000500000000017510147723030016542 0ustar rootsrcGIF89a¢ÿ999kkkŒŒŒÀÀÀÎÎÎ!ù,B8º´þ+XV…»†DÐe$ˆã÷ʼn–C³E‘8Xu_HÛÌGì"ÅâQqI ‘²‚›—›˜. r$;httpd-2.4.41/docs/icons/small/generic.png0000644000000000000500000000022510664777241016546 0ustar rootsrc‰PNG  IHDR:˜ ½tRNSÀí÷ˆbKGDª#2@IDATÓc8€`Œ˜À¹ÿ`pîyšÀ¨\àÜ9ˆ.˜ÀK @øà@6ªÀÿçèÿé)p 'À. .Ó x1‹«IEND®B`‚httpd-2.4.41/docs/icons/small/ps.png0000644000000000000500000000033110664777241015552 0ustar rootsrc‰PNG  IHDRµú7êbKGDÿ‡Ì¿bIDAT(ÏÑÀ CY«3±Š³¹†c¤¢¶–H½k“?xrˆ|U 2žÊ( „0€Ùòp ; òÍ]6UNH¶¸S @tIß;„@?°Iê$ÈÈùÛa Ø[uñüä Àé!‹ù‰k~$tEXtcommentby Martin.Kraemer@Mch.SNI.Deh#ÅéIEND®B`‚httpd-2.4.41/docs/icons/small/compressed.png0000644000000000000500000000032410664777241017276 0ustar rootsrc‰PNG  IHDRíÝâRPLTEÿÿÿkkkœœœÀÀÀïZZkJ:A‚ÆtRNSÿÿÿ@*©ôbKGDaˆëZIDAT×c0†ccC(ÀAÆ`‚2˜„! FÁ ¨”±ˆ!lÀÀ ÔÈd¹‚ ,`† ƒ ˜áÄÀ f00˜‚‰ ÅbsŒ ¶ [åW+íIEND®B`‚httpd-2.4.41/docs/icons/small/generic3.png0000644000000000000500000000025310664777241016632 0ustar rootsrc‰PNG  IHDRíÝâRPLTEkkkÀÀÀïZZkJ—Ð!tRNSÿå·0JbKGDøoéÇ3IDAT×c„% `1Œ”””` „¡a(¹¸@*0†’ Œ¡L6ƒÙL.ßްóàIEND®B`‚httpd-2.4.41/docs/icons/small/binary.png0000644000000000000500000000025410664777241016420 0ustar rootsrc‰PNG  IHDR:˜ ½tRNSÀí÷ˆbKGDª#2WIDATÓÎÁ À0À¬Õ™¼ C1k0†‹*¯út K¯¬¤Á˜1— X2`¶·øD nˆGQ¤ lxüþ@uèþï˜lPA'/}”{ÂNm¹¯IEND®B`‚httpd-2.4.41/docs/icons/small/tar.gif0000644000000000000500000000020410147723030015655 0ustar rootsrcGIF89a¢ÿÿÿÿ999kkkŒŒŒÀÀÀÎÎÎççç!ù,IHºÜ¾ã@k1±Í ÎÄZwŒ^Q™²U¼3‘¥2;´”/3Ò ðSqŽÄG)6ÃŽãœvÃ*’šÛ6x<Ž-;httpd-2.4.41/docs/icons/small/doc.gif0000644000000000000500000000027710147723030015646 0ustar rootsrcGIF89aò999kkkŒŒŒÎÎÎçççÿÿÿ!ù!þby Martin.Kraemer@Mch.SNI.De,Â999kkkŒŒŒÎÎÎçççÿÿÿLxºÜG˜)§ ÖHúYdmWM]6§e)ØÒºV¬Ìté4+@Då#!d t,ÛÃÐ>kL§K ! ƒ™ô#(›ÍËE;httpd-2.4.41/docs/icons/small/index.gif0000644000000000000500000000022110147723030016175 0ustar rootsrcGIF89a¢ÿÿÿÿ!!!ZZZŒŒŒÀÀÀ9B9”Þ÷!ù,VHºÜ¾ã@«¯Z›¦@`ÌGEqx¦Hìpk—B`Db ‰°3 r©BgX< ƒhT Ñ@Ê)X±”Û‚¢-¼Ò¸•n ¦‚¸<ÇH;httpd-2.4.41/docs/icons/small/burst.gif0000644000000000000500000000020010147723030016222 0ustar rootsrcGIF89a¢ÿÀÀÀ)!ZJÿç9œœ¥JJR!ù,EºÜþ0¢‘DhÁ0C”R,)¾Ú¸oýUa­ K¦×‚“ê÷2lQØ[éfLÆ,)*¢ +Çt‘P)G;httpd-2.4.41/docs/icons/small/ps.gif0000644000000000000500000000027010147723030015514 0ustar rootsrcGIF89aò999kkkŒŒŒÎÎÎçççÿÿÿ!ù!þby Martin.Kraemer@Mch.SNI.De,Â999kkkŒŒŒÎÎÎçççÿÿÿExºÜGÆ 0¢ ÚHú™H›-ÚF`MÀ)§òTY?¥î8-WÂöÈ@ˆ$‹v©ž)”kF ÒKc èz½ÊE;httpd-2.4.41/docs/icons/small/forward.png0000644000000000000500000000025610664777241016602 0ustar rootsrc‰PNG  IHDR:˜ ½tRNSÀí÷ˆbKGDª#2YIDATÓ]Q @1±UMµRQS€¦[ØcÜÉ(ØÚø*ìJM›áBS0T8U”É,úž°D¹24q@Æò5–w ˉ6²sÝ¥õå]?û°ÜZ-3Ì©òIEND®B`‚httpd-2.4.41/docs/icons/small/patch.gif0000644000000000000500000000026610147723030016176 0ustar rootsrcGIF89aò999kkkŒŒŒÎÎÎçççÿÿÿ!ù!þby Martin.Kraemer@Mch.SNI.De,Â999kkkŒŒŒÎÎÎçççÿÿÿChºÜ6%Š2c Ú8º™5U¶hÛ@€ ºŠ© A½ÉÏûâŽÂ¶:È ¨!]„€ÓjRS•&•—ÆÊ  ;httpd-2.4.41/docs/icons/small/generic2.png0000644000000000000500000000026310664777241016632 0ustar rootsrc‰PNG  IHDRíÝâRPLTEÿÿÿkkkœœœÀÀÀïZZkJ:A‚ÆtRNSÿÿÿ@*©ôbKGDaˆë9IDAT×c06R6cWcaÀŕ™ Æ`†2Œ †PQ(ƒÙÊ``¤œa(&((hl Éê&e¨nIEND®B`‚httpd-2.4.41/docs/icons/small/rainbow.png0000644000000000000500000000457310664777241016605 0ustar rootsrc‰PNG  IHDR/Ðe Ì€PLTEèøøppøøè°øø°ø(ø  ø(øø(0øøÀøHÀøøøˆˆøøHHøHøøøø€øø€ø˜˜øXøàøøXøàøÀÀøøXXøhøøhÐøøÐøÐÐøàøøà(øø¸¸øøxøøxøðøhðøhø¨øø¨ø ø˜˜ø øø ø@ø€€øø@@ø@øøø øø°ø8°øøø88ø`øø`øøøøøÈøøÈøèØøø`èø`øøØ øø øˆˆøøøøPøPøøPøøøÈøøPøÈøØØø8øø00ø¨øø¨ø0ø¸¸øøpøðpøxøøøøxðøøøÎ¶IDATX홉[“GÆ0ÞBãEŒr‰„Ä(¢(ÈÕªXR¢€TÀŠ$áZ4 |gvwfwöû‚’§ïßð{Þc¦îwÐo¨5ÐÔÈÈHËHKKËgÔ hÔÊ·åóù.T&“éF}¥¿¥Óé«  ×¨§¨æææ/¨iPj:•Jmî¢Aý‹ýýýu CÐëê-(þ6ï€î€P·@¥[¥Ré4è1è=ê:ht5ú:ýº *Þ,Ï¡ž^¢ö÷÷#û‘Hd5 Ú]½ºðJéT4ýˆzx>00p´ šBµƒrí¹\j 4„ª¯¯¯ÔW*•qÔ%Ð:èjôÕØØXn,—Ë·Qó ^Ð'PìS,{‡zúÎúŠjhhH4$‰eTht”<›L&_ þ5ž€²O²Ùì?¨k×®ÝG z@:A…ÎB¡p511ñ'jÔº×ÚÚ: š­¢®€î]¹W‡¸0kÈË›5‹Ëgäey™œ±¸tå —ŒƒËÕ4á‚À<`š‘—f—ó)ÂeËÁ¥x9D^Ž`Ž%̦äóØfƒ€sd`PÌ3F‰€™%`4.Lxùup9¼ì"/S»—Žã²dq¯0.Ì fyy´¢q`Ê·‘—yä¥w^󂸼C^¾¸b%¦€Q £¤yqˆÀ(`&%Ì£yqíeDÓBÀ½ 1ù¼&ÓEö‚ĤÓa/ &…"`”»h`BíÅàÂÀ .Ìs‹€Q¸ 0ï˜ëïƒC`~Œ\N.ŒÂy Àì0 fsvó‚Ƶ—ç˜ Û “Ë)`–:Ø^€˜JEsi<Ì^•¿” Ç^Ð] 0/ Fá‚Àl÷mŸe`.Ló„aƒ`—žÍK'ø0{ â‚À¬0W40ÄËšFã¢âh†€i3¸pe8ŽÒN} ^š)¦§ 0G[G†—C˜GHq e‡iAÒé’$ÌÅÐ@tüå\ѱH´—aH›H Æà‚q´ËÀ´k\l-QUÜ8ºdxY±À/ä/L,fâè¡Ì×ïH ´—eHÛHIí/MÊ_š(²Ú_d õˆ@*X{QÀP Í!0:V188ŽØ_È^ˆ—6âEù 呯æáòÅ«/:Ž\9<ôòˆý…âHò—R­þBq¤ ŒñŽ#]`Œ¿8yDqdýÅØ óÒnxÑþbòˆÑþByÄqDÀp{™þbì%Ô_8Žt1þ’ õ—ìÏý…ãè²ë/GºÀ¿øy´æÖÝÌ#]wónÝíöû‹È#î/"¶ÂênÐ_yDýEåQ)´ð ùAõ…üEæ‘ñ/Lñò(*êî€ 摪»9Qw‡üþ"òhÅõ—²Œ®»±`´¿òÈôGÂ_8„¿Ü7öBþÒé×G2¨¿ø}×ø‹Ì£I?2]ç:á/2rÎý…æ´6º¿¬»ö"ú çQÐ_ªí£å„Ów9^Ðýå¤ûèrAø‹ ¤ÑV§ïúûˆ€‘ýÅôݶÉÀ>êv÷ù‹“GOÙ_R²¿lùý¥ª¿Ä©¿)™¾[Û>*zþáþâú‹¼×Eý…únûT` 9ûˆýÅæÑ ë/å²³”ÁÈþrü>Jxþ’¤¾[Û>òú ï#é/vñ<þòÈÛû‹ö†î/Ú_üû®¸× ù…}dýÅÉ£Ú÷ѳÐ}Äþ"öÍ#á/!sQþbq Là¾+ïu½{ÝñûˆýÅÍ£ÿyYûˆý…ú.ŸwƒûèÍ£«æüRí¾ëÜëD ö]¹œ¾kã¨Të>òî/‘ýˆ×w½}DÀˆþÂ}—λì/CKŽ¿ŒÓý…â(ì¾ëÞëDùÉ>rú®³’µî#ïþÂûˆû®·xOúËäñûHÜw_¿vîu¡ýån•}tTuŽû‹ÚG§kÝGEïþbï»Ã‡#ÝwCûËÔñûHÞw××í½Î»ïšþÒ{Ò}”ðî/âáxò}Tðü…ﻣòáøaNž|àÑWIEND®B`‚httpd-2.4.41/docs/icons/small/binhex.png0000644000000000000500000000026210664777241016410 0ustar rootsrc‰PNG  IHDR:˜ ½tRNSÀí÷ˆbKGDª#2]IDATÓuŽÁ À Y+3e• ¼c¸ A‘êBÇ٢ŕV FØQÀ2¢IÃÒ g« åynH>Þ'$é ˜‹6ß8jd´OEXãÚxeüô™¹Yr¢… IEND®B`‚httpd-2.4.41/docs/icons/small/comp1.gif0000644000000000000500000000020210147723030016104 0ustar rootsrcGIF89a¢ÿÿÿÿ”””ÀÀÀ)!Zcc9¥Îs½Þ!ù,G(ºÜþ0¶@ª%‡½ÅxÕf GàT‚¡¤ÙT…j˜å)pP3Åå³ C¬@,1Š•q‰T:¾Ð‚4KQK`G8 ¾`ð¡™;httpd-2.4.41/docs/icons/small/sound.png0000644000000000000500000000030510664777241016261 0ustar rootsrc‰PNG  IHDRíÝâRPLTEÿÿÿsssÀÀÀÖœœ÷­9JJVÇ;tRNSÿÿ×Ê AbKGDaˆëLIDAT×cP‚d†¢² „‘¦bäb¨3*+1( °™¨¨(1200Šˆˆbe()AŠå…Œ`ÅJJbj`í@ƒa*‰Ã¬@µž œœÞ—¸IEND®B`‚httpd-2.4.41/docs/icons/small/unknown.gif0000644000000000000500000000020310147723030016565 0ustar rootsrcGIF89a¢ÿÿÿÿ999kkkŒŒŒÀÀÀÎÎÎççç!ù,HHºÜ¾ã@k1±ÍJ'Ö\WD¦la Ì6¢ŠÐÅ:T†¼Lu!Ý©C+BJeÎ(›sgiN‡P)òÚî¿°˜µH;httpd-2.4.41/docs/icons/small/uu.png0000644000000000000500000000024610664777241015566 0ustar rootsrc‰PNG  IHDR:˜ ½tRNSÀí÷ˆbKGDª#2QIDATÓ…ÎÁ À0@¯Õ™X…¡˜€52†¥Pò¨_èd°ä  ÎÚ€!¸¿[ |VÀ3 @t†Ô)åÆW¿ëFSÉìO'••Ãâ~éÊIEND®B`‚httpd-2.4.41/docs/icons/small/comp2.gif0000644000000000000500000000020310147723030016106 0ustar rootsrcGIF89a¢ÿÿÿÿ„„„­­­ÀÀÀRZZsÆç!ù,HHºÜþ06Qª-o`Á9ÁVtÔaE¬ACZ´ §ƒ0ìpÄ‹ÜeRŽ:•IR4:ѵŒŠ0¢Ep °x\L;httpd-2.4.41/docs/icons/small/binhex.gif0000644000000000000500000000020310147723030016343 0ustar rootsrcGIF89a¢ÿÿÿÿ999kkkŒŒŒÀÀÀÎÎÎççç!ù,HHºÜ¾ã@k1±•À9˜˜FVQ™²u$À2S%+ü¶B†Hv„IEND®B`‚httpd-2.4.41/docs/icons/small/text.png0000644000000000000500000000024310664777241016116 0ustar rootsrc‰PNG  IHDR:˜ ½tRNSÀí÷ˆbKGDª#2NIDATÓ¥ŽQ ­e&ªŠÔ ÆSPœòë}0v;6šZ.œB¨qØæÕu5Ewbna BOÝ…7OáQ)ì§8,!LI|:Ù¾¶´ ¼š‹IEND®B`‚httpd-2.4.41/docs/icons/small/image2.gif0000644000000000000500000000021210147723030016232 0ustar rootsrcGIF89a¢ÿÿÿÿÀÀÀÿRR{!{µŒŒ”RRZ!ù,OºÜ¾å@«Š®ZŠ™¦ œuÆQžB ¤w¶FQÕ °N-­ø…§X"‘Ê¡Gt@iÄÂf™¡Š÷[úhÀ–zÍL;httpd-2.4.41/docs/icons/small/key.gif0000644000000000000500000000027310147723030015665 0ustar rootsrcGIF89aò999kkkŒŒŒÎÎÎçççÿÿÿ!ù!þby Martin.Kraemer@Mch.SNI.De,Â999kkkŒŒŒÎÎÎçççÿÿÿHxºÜG¦ˆYŒ5‚Ák‰?ƒv—-Ga l(§’œU?y¾;Š–«a %C`É0‰È‚óM ¤ƒéZÝ2“°¸¹H;httpd-2.4.41/docs/icons/small/uu.gif0000644000000000000500000000017510147723030015527 0ustar rootsrcGIF89a¢ÿÿÿÿ999kkkŒŒŒÀÀÀÎÎÎççç!ù,BHºÜ¾ã@k1±ÍJ'Ö\WD¦la Ì4p¥-p„”A/.|s»X{ň<Û$ôŽ•&j(]Rš%v»e-;httpd-2.4.41/docs/icons/small/back.png0000644000000000000500000000026510664777241016036 0ustar rootsrc‰PNG  IHDR:˜ ½tRNSÀí÷ˆbKGDª#2`IDATÓÏÁ À PVaÖùópd(F+‰ÕžJ¢‘(ù á¥zƒŠè •"‰x+‚ùÜël@†;=Ö( «@ÎÜfS‚áíE*5‡¦ öo«†Ñ¯¬‹™]ü‰žIEND®B`‚httpd-2.4.41/docs/icons/small/blank.gif0000644000000000000500000000006710147723030016165 0ustar rootsrcGIF89a€ÿÀÀÀ!ù,„©Ëí£œ´Ú‹³>;httpd-2.4.41/docs/icons/small/comp1.png0000644000000000000500000000033010664777241016146 0ustar rootsrc‰PNG  IHDRíÝâRPLTEÿÿÿ”””ÀÀÀ)!Zcc9¥Îs½Þ)‡9JtRNSÿÿ×Ê AbKGDaˆë_IDAT×cP‚, 0ÃIPPÈÄptq*3ÔÒ‚ Œ°4¡B¨C¨ÉÅÈHM MuRbH  CUP('¤Ä 2_(RRìX¨Äàn æNJ•É2û;sIEND®B`‚httpd-2.4.41/docs/icons/small/broken.png0000644000000000000500000000027010664777241016412 0ustar rootsrc‰PNG  IHDR:˜ ½tRNSÀí÷ˆbKGDª#2cIDATÓ]Î !Pk‘éWù¡H@ bpˆp›27àMÁ¥O¬)8`Qa΢å³ój $ã‚PÅ á^] \Àž¡)€™Ï Í’ÙgÁÙ?Û[¼NÄ»¶A‰‰ú:G¿“cwaIEND®B`‚httpd-2.4.41/docs/icons/small/movie.gif0000644000000000000500000000020610147723030016210 0ustar rootsrcGIF89a¢ÿ999kkkŒŒŒÀÀÀÎÎÎççç!ù,KHºLó/ÈIƒ€# À;€Á^‡iä€"D¶£ ±(Ráû©X$ر„x&У³Úä^GY)·´ iºè²÷+›žÎNW “J˜;httpd-2.4.41/docs/icons/small/patch.png0000644000000000000500000000032310664777241016230 0ustar rootsrc‰PNG  IHDR:˜ ½tRNSv“Í8bKGDÿ‡Ì¿NIDATÓ…ÎÛ À CQ¯Õ™²ŠgËŒá¦@xI¨—tQ€[Ì‹«æ…(%Á½ÿê 'Ú@€í 2q¢43® €ŸçŒìø&´ê¦/Þ„T`•Bè$tEXtcommentby Martin.Kraemer@Mch.SNI.Deh#ÅéIEND®B`‚httpd-2.4.41/docs/icons/small/broken.gif0000644000000000000500000000021310147723030016347 0ustar rootsrcGIF89a¢ÿÿÿÿ999kkkŒŒŒÀÀÀÎÎÎççç!ù,PHºÜ¾ã@k1±ÍJ'Ö\WD¦la  *BrFÌ à¶2 . ²?¢ 0(‘ç¯5<¿ðYlr\Nï:7š‚´:}T$;httpd-2.4.41/docs/icons/small/unknown.png0000644000000000000500000000025410664777241016633 0ustar rootsrc‰PNG  IHDR:˜ ½tRNSÀí÷ˆbKGDª#2WIDATÓ…ÎÑÀ P×r&Va(&ÈŒAS zòÓ|qÃ9¬eÔ ˆ¸6ˆ” À×*ˆÉpK1“p§?‘·%»bóô7ÀãçE&A¥²~úJˆÇ¬0ÌßIEND®B`‚httpd-2.4.41/docs/icons/small/movie.png0000644000000000000500000000023710664777241016254 0ustar rootsrc‰PNG  IHDR:˜ ½tRNSÀí÷ˆbKGDª#2JIDATÓc8‡@€!z ,! §Ç,`™ dö%b0 ¥ç «›†¦â’Šìç €¬ ²éb Ü/=ÙPìl°Æ_ŽÚfãÝIEND®B`‚httpd-2.4.41/docs/icons/small/continued.gif0000644000000000000500000000016210147723030017062 0ustar rootsrcGIF89a¢ÿÿÿÿ999kkkŒŒŒÀÀÀÎÎÎççç!ù,7HºÜþ0ÊIY+„5¶ ÅEà ]ˆ±† ¥i¾åá–bpˆƒÃÓù-HÇ“ÂTi:ŸÐG;httpd-2.4.41/docs/icons/small/text.gif0000644000000000000500000000020010147723030016047 0ustar rootsrcGIF89a¢ÿÿÿÿ999kkkŒŒŒÀÀÀÎÎÎççç!ù,EHºÜ¾ã@k1±ÍJ'Ö\WD¦LAšjÀxFlPŠð²meØ ,ÇÞ ×Z ¾ßìˆ*oJ€I,No!α$èz½®E;httpd-2.4.41/docs/icons/small/image.png0000644000000000000500000000030510664777241016213 0ustar rootsrc‰PNG  IHDRíÝâRPLTEÿÿÿkkkŒŒŒÀÀÀïZZ„c1ïÖ9‰I.ÓtRNSÿÿÿ@*©ôbKGDaˆëKIDAT×c0†aZ e¨ºC¡åPFX„až a( æéLPF1#”Áf(C hŒ@A¨bˆˆ‘ ˆü¾ Á6ÿ‹IEND®B`‚httpd-2.4.41/docs/icons/small/folder2.png0000644000000000000500000000026410664777241016472 0ustar rootsrc‰PNG  IHDRíÝâRPLTEÀÀÀïkcs9!”sJÆ­s¥”k9rartRNS@æØfbKGDaf¸}=IDAT×c` 0°8&..ΆÂ ÊÆÆ&ŽB®`G¡ À4†³±±±¡‘‹Ø:3\é4IEND®B`‚httpd-2.4.41/docs/icons/small/folder2.gif0000644000000000000500000000017210653705265016444 0ustar rootsrcGIF89a¢ÿÀÀÀïkcs9!”sJÆ­s¥”k!ù,?ºÜþ0J9ªU„´‘;©A0‹`YY($ÀyZä ²éÞi@ë6Xn°ã ‹·cÐsüœ,ª@X¯X+1;httpd-2.4.41/docs/icons/small/continued.png0000644000000000000500000000024310664777241017122 0ustar rootsrc‰PNG  IHDR:˜ ½tRNSÀí÷ˆbKGDª#2NIDATÓ­ŽAÀ@ ±…&¬ * bãd´ðlß—l˜ Ìop' ãdÄlÀM"[Ù—ûO˜{lXV8Ta 91 ¶T-•ZªkŸ~ç'[«&iWh­IEND®B`‚httpd-2.4.41/docs/icons/small/image2.png0000644000000000000500000000031310664777241016274 0ustar rootsrc‰PNG  IHDRíÝâRPLTEÿÿÿÀÀÀÿRR{!{µŒŒ”RRZºv'tRNSÿå·0JbKGDaˆëSIDAT×c„b000ŠÂ 0†ˆ¡¤ÎP–e0²é© `F™@z˜!Ìnœf°CŒÅæ.`ƒX ”Áàc0€µ‹¦€  iÏ`õ˜…IEND®B`‚httpd-2.4.41/docs/icons/small/index.png0000644000000000000500000000034110664777241016240 0ustar rootsrc‰PNG  IHDRíÝâRPLTEÿÿÿ!!!ZZZŒŒŒÀÀÀ9B9”Þ÷v3kÃtRNSÿÿÿÿû¶SbKGDaˆëfIDAT×5ÌA@0ÐA9‰}ë„|õí…4Ö6ÝKõþ”šÅä-&ŽA¨!€¡`ø¡?ÀïbÈÎ y€´#¥$@ua½4økú¼X[uÆÊâhßqbJ¤ñçÅ´*¥$ó ¶Üá ‚IEND®B`‚httpd-2.4.41/docs/icons/small/sound2.gif0000644000000000000500000000016710147723030016311 0ustar rootsrcGIF89a¢ÿ999kkkŒŒŒÀÀÀÎÎÎ!ù,<8ºLü/— ƒª°ÎœŒ`•I_(¢ê4%‚§£ýÔà1Eä ú€ÚRÜ(އòÇ‘F« ;httpd-2.4.41/docs/icons/small/sound.gif0000644000000000000500000000020210147723030016215 0ustar rootsrcGIF89a¢ÿÿÿÿsssÀÀÀÖœœ÷­9JJ!ù,G(ºÜþp1‰Â[ï;ÀD ¤ ` W«œ@ŸDPo Ïv °Í—c„z7Éa© °,ÐF`³•Ó ¡AQ¢˜°X;httpd-2.4.41/docs/icons/small/back.gif0000644000000000000500000000020110147723030015764 0ustar rootsrcGIF89a¢ÿ!!!111ZZZ„„„ŒŒŒÀÀÀ!ù,FXºÜ ÀI`L”‹V‹‹Ð tÄf]Qn(i¶Ã ÈÊZD,­˜ž€00ZLƒ¡Ða"* Ѱ·°„EÇq3ÈJ`p#;httpd-2.4.41/docs/icons/small/generic3.gif0000644000000000000500000000016110147723030016570 0ustar rootsrcGIF89a¢ÿkkkÀÀÀïZZkJ!ù,6ºÜ!0BàÂðÒvqßK'‰ …ADJ0"¦²§´†q4ÀµpÓù®´'Ÿ©‡« `Àl:gŠ;httpd-2.4.41/docs/icons/small/generic.gif0000644000000000000500000000016410147723030016510 0ustar rootsrcGIF89a¢ÿÿÿÿ999kkkŒŒŒÀÀÀÎÎÎççç!ù,9HºÜ¾ã@k1±ÍJ'Ö\WD¦la  *BrF¼¸³}ΜNà!°'ãQ„ÆcÑè+ žP(k‘;httpd-2.4.41/docs/icons/tar.gif0000644000000000000500000000033310147723030014550 0ustar rootsrcGIF89aòÿÿÿ¿¿¿»»»VVU777!þDThis icon is in the public domain. 1995 Kevin Hughes, kevinh@eit.com,`(º¬0ª½ôÉy; €A|–È™,‹¦#ж!Ø„FZ÷)ÏÊÌFb‚¿!FqäÔN=Ï 94ydÔ™âÚÜ];Ý䌛UzÂÏô¹<^¯L=Ùùu{ë4þÒ„TÿM ;httpd-2.4.41/docs/icons/sound1.gif0000644000000000000500000000037010147723030015174 0ustar rootsrcGIF89aÂÿÿÿÿ33ÌÿÿÌÌÌ™™™f333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,k(ºÜþ06ÃBêaU±q …Àh~ šržwi4Ü[×AHü¶ÛkwṄ O°4‘8fqz„*§Ò*ò*Í ßoÒÔœÑCT‡Þ´:3Mä*6$>}J{v,{ „‰Š ;httpd-2.4.41/docs/icons/hand.right.gif0000644000000000000500000000033110147723030016006 0ustar rootsrcGIF89aÂÿÿÿÿÌ™Ìÿÿ™f3!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,L(ºÜþ0ÊI¹¸’À;‘W'bä%„b0l)·¶¬8ÌtÌÃXšiœ{Àæòs©VÁc±(t[ªã§ñ’(ëlŠí¹ßVSª˜ÏhJ;httpd-2.4.41/docs/icons/alert.black.png0000644000000000000500000000044510671421551016174 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™333U±3•tRNSÿå·0JbKGDˆHTIDAT[mËÁ €0 ÁNn!JDv¹ÿšxÄ!Hd_ó¸ÃÌ̬«*'€È"}0BEz²¸ûdD$©µM‹ðc»_–kGØÝöül'­Ž\ÑÈôï</„-VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/world2.png0000644000000000000500000000055310671421551015223 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿÌÌÌ™™™™3f3½ƒ»tRNSÿå·0JbKGDˆH”IDAT[]ÏË Ä PZÈ…w€œ&Þm™;I6ý—°Cösˆ%¤'„ÆCšþ“xòyöóáþìƒyƒ@è4Pw×Fnpq™á:ÆzÊTjO‡Ð9éÂë5–‹Ìx©LàÓÁ/!\1Wk ãZæŠCÖR¹bÚ¥–º°ÃnµÄ¨“_Å"Z¿ªïV–~ÿÐoÞØa,Œº4‘lVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/pie2.png0000644000000000000500000000042010671421551014642 0ustar rootsrc‰PNG  IHDR½/T• PLTEÿÿÿÌÿÿ ¶ïtRNSÿå·0JbKGDˆHEIDAT[cœdØ*™¡µH6h­ ecÐZÊ$§BÉ ¹d`P…’@r*” c``™ÃÀ 2“a)Ô|1O!11!æÍVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/sphere1.png0000644000000000000500000000053310671421551015357 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿ™™ÿ33ÌÿÿÌÌÌ™™™f333IÄ„…tRNSÿÿÿ@*©ôbKGDˆH|IDAT[uÎ1 €0 @Ñ\í ìàº8:Ô´èìP2ºˆŽJQrlKSÿô ôü’èa[Éy ™mUÈ&0ëºñ‰Ë(¥ÂÓ æR);Œ‰“'&\˜%Æ!ˆ ÓŘ¢ìxj¬µyAÓ=g©/WÇmñ3Ê镾3š/lqVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/odf6otc.png0000644000000000000500000000202011141176336015346 0ustar rootsrc‰PNG  IHDR÷ŸL4FPLTEÙÙÙ!!!33344455533™\\¬]\­]]­^^®™™™¥¤¤¥¥¥¦¦¦¦§¦¦§§§§§¨¨¨¨¨©©©ªª©ªÎÎÜÎÏÜÑÐÞÑÑÝÑÑßÒÑàÒÒàÓÓàÓÔàÕÕâר䨨äÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßÞÞèàßßßàßàààßßéààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèææñèççèçèçèèèèçèèèèçñéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííìììíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñðððñððññññðññññòñòòñòòòóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿÎÚÓötRNS@æØfbKGDˆH pHYs  šœVIDATÓc`Bò ÀÀÀÀtðà¾Ý‰[7®[½|é¢y3…Á‚ö)r²rÈ­^¾xÁìi‚Ì\`Á½ ¬ ³€EdŠ ³Dp;'«ÜšåÒìs„Y™ù ‚Ñ uK°šMd櫯®ç`]¶x¾[oO;/3O1Dpµ,«ÔqVÑÞæ¦*n¦<ˆàò%’l¬lb- Uå¹ÙÁó§O3êíh®«*ËÏHN€Î5qBO[C]eanZR\$Dpš|oGk}UY|VBLˆD°O¾£$–-"ï ì•o¬­,ÌIOô÷“w6ËW—äfÊÇÈÈ»ÉÛ@ëå‹ rääZåä- ‚•òòÉòaò>ò.òÖò†Á"ùÔ„¨Ð@/;+c}]ˆ`Ž<2Є¦ÄFú¹º8X›êi««@™¸PHA 00ã*c=Wg–ÁIEND®B`‚httpd-2.4.41/docs/icons/sound1.png0000644000000000000500000000051310664777241015233 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿ33ÌÿÿÌÌÌ™™™f333½/ÞÄtRNSÿÿ×Ê AbKGDˆHpIDAT×Á À E³‚n@uƒž=¸€”"zO×o$b¡½4§G ÿ¿­7ž„Vѳ!£Ø-Ú>0Ål‘ øÞ°,´Ap2œþaÎÇ<“°}†Q)סÒV÷U쮡£fõ‘túç·U‘'‡fXÊVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/screw2.gif0000644000000000000500000000040710147723030015171 0ustar rootsrcGIF89aÂÿÿÿÌÿÿÌÌÌ™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,zHº¼ñ0@«$¾i;Ï×U"¸×‰@áTAÈôWüî6,ü‚Aa@,N> ±HÌ‚‚ͬÐyj]Lgå1S%|ˆõÀ;k(Î`öuB‹Àd㬠Ä<ùY7{éõÂ3VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/apache_pb.gif0000644000000000000500000001055712141202160015665 0ustar rootsrcGIF89a÷ÿÿ®Ò”TümG³?ktÊDÓ²­444ƒhÿHHGÉNGìÇZå6·RIÿ{¼Ppÿ¸[®on{{{ñºðÿ©“ÌÌËÿŠ©eeeÖwNÿRR ~’’’«u¶¨WáááͲYÿÙèV%lÿ …M'L¸*GÙ;ͨ‘ÔÔÔÝÝÝÿâëpQÿ‰ fÕ•º²’ÿe=¾hSùùùýüý]]]ò*7ÁÁÁÿ1—ÙHÖð†J''(¿¶]þçòÍ(>æææ×;Ó»ººØÈ“ððð´³³lZ7íííµ¯w¬¬¬ÿÅÔÛÎ[ÿ¤2ñ1éééµ>Ej+`¨'Dÿפƒƒƒÿõù¥ Vÿ5j»AöööV1ÿÿKzÿ¥¼ÿn”¾‹òÁñ4ÿ¹ HÎfmÕ7ÿ—ÁÛÛÛ‹{N¥F(.ØÌÉÆÁ¶ÔËÿd!_•(S KÇX_cky€ÑÍu3w ~OÍ>ZàÚÿUðéé<ÿÂÆÈd1l¢«¯ÿÀßÎÉbov  ÿW,.ÿÿÉ„ÿü÷ÿúøÿœ‚æ‚ãùøÿìëåÑÑТžk0P[`£\WYiu©|q¢BbÎÎΦ¨OOOÖ××ÜÛÑ€r>º“TÈ?b¢/XëåæèäÝíß\ÈÇÇ——˜Ó)ÿÍÀÿÒǰ¹½óóóŒ GÏœh .Lÿüùÿ™§§§×Õ¯ÕÒ´¤¬°¥ŽZÿ½hÅ»Á¿~Pÿÿÿ!ùÿ,ÿÿ H° Áƒ*\Ȱ¡Ã‚(ÖIü ã¡Å‹%;öÁ ”)0Œ±QœH‘6²søí¤Ë—0¸@“f8“1s.”@³cAžȸ”BÂ"1€CˆÈu4“:E8…¸bÿfèÜÊ•áÌf ¸Ðä2µkW > z’裉b (ãXЧQQèÀ–`xÅ$í*)ÃИ]œs&hxƒ.H´ÎÀ€Yà4Vþº‰@;4.³«(t‘{  <’z‡+Ù…KÃm_@×1º\2†¹žAÛ(èVœ„á bW¹E"_Gc2i ñ$\ÿ^>p]jF6¢^ràâïqäè ¢PÄX³êžÃ0&àEŽ ÄMÒÍ@M4€›.è Ð4Iø…ý³àb]p@E3дá1­ÑtL3ƃþöP^ÐLqÚÁa3¦ä– ÆðÏ Êø„ Jð2¨Ô?6 8VTÿ! …3Ä@âÐWGB¼"È9`XaB+&¤RB²¼ÒB ˆ è&BŽù0\s$M\”‘H^ðÁ Çp1“€^ÀÈ?H ø (rUMº°sÏP~`—ÿø€¢@|Ó¢A@…óÁÛý#MF6AÓ5˜þÿ#Ã4ÑàƒiE烊}êò( ‘¤@á>þsÅH|¥Kfñðâ/¼ø‡T°!H˜… ”ÀÄ-=¸!Kh°ö¦›3i¤†4MUÝ?´^€DÛ1rÁ=P] Ô±°ÃŽX¬†¡ºÚÅ 0²yÁ»¾Jyb‘¯„¤’§£dÍd± xn|—@}NöÏW3̬@§";Ð Mˆƒ]Æ@3Ü0óÁ®ü@²É&`”ÀÀ*˜°J#Š0 h±®€íêë Äc†C yò4Ä€¬` ö1Zµ¤.^Àê@D‰1Çÿí§Äà´¡Vÿ³ …ÌÑÔ¼‡<[lÝyy4ÐtëªÅ%AË1G‡:Ì‘€6W<`Œ(<Á¸PJ˜z#V]B'£4ðÊ NÍUm¨â?bYHTæ‹Óz…4´ G)|¼m?Pãͤüòÿ1yŸ.Eÿã¾8Úê[Æ_PxÙ"'^rÇ4É ²‡Õ›,A3‘Â5Œ´ÛŒˆàÿÆ á3*l"h``ê À„Th‚f‚A"`ÜØ&¸+ˆØ&R!2ÒA3*"B]éÍ?¾aƒ9O ‰º¦‚‚ޤÀUEhWöVu…{ˆh HK3ÿÊ"2¸o (Ò… „ •õ9¥WñÂÊ¾Ö Ì|ó+Hý>@$€fÉÄ6 2dÁϰ­F0  &0ÁÈ¥ˆT4À„º.H dj‹ÔB'ÙüC;Í°à ˆÄØ¥%.,H8ÆâH•¨&Ÿú‰ŒœD“%ý#4CÎøŒh¾lERûFMš1—>qò&³MšÑ¡,Ò…¼`†6t±‹pœa–³ÄNAF<€Èth¢µ xƒ 4Ñ N8¡hÚFÆQ„=ò1!–y›Af]è@ b9uaAº8ÔËìŠSç rÿ„zÞ“y²’€t À3GA:¯–xR àƒAìOŸˆÇô¢Á@ÃaÁ{@PÒ)Y=uqBA\˜Ã†c2ƒ @ލC.yÑ?¬Á¿”Q0ÇXÆ ltO ‚ 1 yÀ „B*ÞдF(  pCjà†mt¡]8&¾ÉÕ®.dAÂPŸ²öqèc>—¨Ã%Šñ 6Ž" Á,jrCðÔ§¢[þ 0È#[&xC+Rg‚[ЃÐ4¹0 ( -,èÕÊÚ®€Þà4V˜‚A†h?ð†à‚ÈÃ$Ö ¹:)Á&ʸ5ÿ>á‚(*¨þÐ㨑hÄ*¶Ši*MnàÄ ~q‚L¤Ã²Ð[š!7uö%ñhB1à!Ž= L(Á*41ÍȾ˜­fA³fÔuƒ@æ6°*Èá,€c¨@Ô™  @ `ñ2À °k€7"Q‹Z‰®„-2$áÂIPÁPÀ x“1߈ê’ÈàëÂ=š0 ÔQ\FkÃ$|±džb¶8eP2 aˆø²@Xƒ ßÒPlÀ–0Èô†¤"¸@c €(¢À0…Yø@Œ.wù +ˆ°Bp°Œ2›ùÌgîÅpà/4Dÿ#ˆ³œp‘Œ! UЀž÷¼g[da ZPAAð‚B¿€ ™†¡_ €‚𣎴¤'-i$D¦IŠºà„[”ÀL©°B)ò@€ߘ7ö D¸Ê÷®!O €^Yð‡Ò-™ršZ·ŠùnàŠˆ*ÀpTM4àéÒI5°ð…g8ûÙ¡`î@íj[ûÚÖîÅ‚âÛà&2 ä™ÏèN·ž òg¸ÛˆfÈ4ÞíŒF‰È·¾÷Íï}/A!Z‰‡V|à‰@( ŸnG)P+ŒIäé^×` ¹&CÇÁ´ëôj ŸÎZ›@¯ðD™ ôÿ€$ ž\t AÀÇIðìš;› ™¶µÑlflß¡n>ÈnnpÇ9 QÁ¹ùl‹*d[Ø%ðŒnvÓ;Þ ™÷»í=|ï›Ò`R¿4t àD ÌQ‹U-CF… 0‰lB ;…Öðœ¾òÉx¯Æ_M*,§ Ó| ÀÀTÜBo®`ƒ€b;À† ¬ñ\Ø|5'F0Ælí$DX†µq€8„{D÷ ¦Ø‚é[H‚˜ 2…$X °ú»±®­»›ëñz¾ûÀ˜" " ó …"ЀT8¹¹5`†¢­“ÀÅÿ$Ø0 ðïO N/Πcœaê‡ïÀàk6l©¹…ÂTk@€ÀJp»£jÐlφ3€5‡ª:Gm¦§~°s1E<àmà1·×gHç‚FíönÓ *¸‚,¸‚ö@oÈ÷Ê—ÌÇ2Pdð.@ óppài& T&ði¦`&l@ö%r€L¸ $ jruÉ@32â~gò qà3‡• bà J °°˜ Áeø XP ÿÀe5·Xz 1? ‡gáFgÿE7¡è–/q‚ôÖˆŽÿèˆ18ƒ‰°”X‰–h‰ÑpWp>Рà9 Gã5ð@VP±Pr%`&6&w‚ wQö>ÓSkðrÐc†P…VØ Í qDð ä¬ P °ee ãzÏ&zA6mwÐ ~Žâ(ŽdvmÔPzÀß6{áE§ aèf ‹øˆöh‘ØoúØo™XbñPp ™`J ÐKoÀ”çÖ^ ð@ÀIc%÷_ @Â04eô}µ  ãV®€kTk@ÇHDOº@äP¬ð …@‡ 6ÿ‡sAsÏö:YÞèsBy~P–pê8%(GùzzPòÈgôèŒè °hX¹hƒ!‰ûÈ:!ðž Ý`û þÀo   L MbMn— P° Š ©ÀDx—@`ø%ndr V@˜¼e&ðWT “  å ¬°¬ð .I…¡¡·žù™Öèl_@ |`A9”ÕŽAGîn7°›±'{S)I€nP×h\yo_ ÀœÂ)œf!–\”eÙ°° ‡à €`ØÔüÑ—ŠðƒbÐ4V ÚI4ÚjVÐ ÿЪ&àYN°€†JP €ykˆ œ7Á‡5×løisÎ6‡@Yzà ª»G„Xtš ¤ ˆ||f´Ç!›&xu¼¹u]ùu–uBÐà9H×à 'ð ]Ð ¯àš  PN°40 yÖà­œ0 N0M5pŠüáœÀ $å€l¨žF€ t@ƒôªÀ€÷ùTZ¥VjsПÕ6u¦ŽFG Þ¦`Š ã6z@ èf €–!ÀS <I0[pnÂçnÄ—ÆWoªo}€¨‚:¨ë2ñðM0=ÉC)ÿ€àÐtЯ°œ€@ ŸæþäbТoà° xÐ .pÝð K:Ńð¤ÿš7·<ùl¹@ÞÈ¥¡³ ¦#ˆMitŠH‚궬ëV¡»)o½Ùu_9­‰ÀUîS3pEP>ð¡cɨÒC]€à`.à™@C06à ë`ß@™ =Ê3)À¨cI¯»R 8YsYºËvŸj0½Š®neÊm^zOI*0hʬiJ w oz|}J­ú8at±‰ÿ¢Ú­9ˆéà>` &Û­Ea)³DGY¡ ¡0³4k“ L 4;³»*@ >K Pg0´CkˆoF´C ¡`Q7uUàtfZÒ`µYû áZ›µÐ0¶d[¶fk¶;httpd-2.4.41/docs/icons/index.gif0000644000000000000500000000041410147723030015071 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™fÌÿ333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,Hº¼ñ0@«$¾i;Ï×U"¸×‰hA¸ð‰REmr%ì‚ÎãÝËFè~2K0^Æ#ðChZ €VyR2µVåkX›(›€ëÀÕpIÕÖïg–Õ7¢VÏn§EMOrZR9„DQ‡A†G<Ž9‘”Œ s˜˜/yy ;httpd-2.4.41/docs/icons/burst.gif0000644000000000000500000000035310147723030015123 0ustar rootsrcGIF89aÂÿÿÿÿÌ3Ìÿÿ™ffff333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,^(ºÜþ0Ê© ³Ô l°èlÚö™Ž¬l7\'³4kªuÞBë5¯'ÖPcîöR®H¼¢³Sˆ6§ÃÏL‰ìù€›A·²úÁ| † üñªÙ…ïíÛÄÙªâ¸3;httpd-2.4.41/docs/icons/diskimg.gif0000644000000000000500000000024710147723030015415 0ustar rootsrcGIF89a¢ÿÀÀÀÿÿÿ¿¿¿™™™€€€333!ù,@lhº¼ð!Î)£è3(ùÁ3 ViR^(¡,:¹ÐhÎ,¡*_®ïÆÝ¶/CdõCÍ>ÒE³9Ô’Î_4%*ZmU«`"¾¬ßnÖz0”Ë>­'½dšÏªò8`W¤bý.ÓÇñ‚-|j…*t‹* ;httpd-2.4.41/docs/icons/ps.gif0000644000000000000500000000036410147723030014410 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,g8º¼ñ0 @«#¾IºïÀjÜç…U‰ØhºV&L w¾UÂ'¼¦eH{»ž­óã ;ÒeAJ^X*zõ†ÖÉôÕ¬rYDb8Í^³Õç7\(ßÒë7>ÿ€F85… ;httpd-2.4.41/docs/icons/forward.png0000644000000000000500000000046410671421551015457 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™fff333ž‹šçtRNSÿå·0JbKGDˆH`IDAT[EÍÁ Ä0 DQµð7È6&2ý·²Ù²OO!ý@çäžâV•Vêª]sW#©îú»ÆüÂödÑß…'m;‰w™øuŽsÑÁÝŽwîB YL37?`Q'8¦fLµVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/patch.gif0000644000000000000500000000037310147723030015065 0ustar rootsrcGIF89aÂÿÿÿÿffÌÿÿ™™™f333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,nXº¼òP@«%¾i;Ï×U"¸×‰¨Q¸ð‰RFmòL ü€K@(¬ô~B@É\Z|²€t:}"‡Jª”P@-Õz⊗Ý/ç,%Íb®ñf»“Ë<óú;j:#j=†‡“½,;»Ik·êŒXÝ‚ƒß “{áÄmh˜ÍÚ­uÔOÓ[?‚>28‡ˆV ;httpd-2.4.41/docs/icons/p.png0000644000000000000500000000045210671421551014247 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™333U±3•tRNSÿå·0JbKGDˆHYIDAT[¥ÎÁ À @«°@V@ Pððþ3Õ)A<ú¬_'+$ ¿if†JJ‡hÎÌ)¦EŠªÅIä1Æ&ÉÀUj<]À—>SãÚnµè_{ØËŠ>iŒØe)ÜýAVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/alert.red.png0000644000000000000500000000047210671421551015672 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿ™™ÿ33Ìÿÿ™™™f333 £ ¢tRNSÿÿÿ@*©ôbKGDˆH^IDAT[mÌ» €@EыȘ[Ú´°`.l.,Ì–0íìOÐàñ033KªÊ 2H*ŒQÂëH•KιÑÝ+ álœáÃu?BgŒÿg¯m£…RVÔkúæ!#ìBÉ 'VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/folder.open.png0000644000000000000500000000051410671421551016222 0ustar rootsrc‰PNG  IHDRÃdú¸PLTEÿÿÿÿÌ™Ìÿÿ»»»™f3333n“tRNSÿÿ×Ê AbKGDˆHtIDATW•Ͻ À `W8ÔÁÂ'ˆ#˜:*¹ýGÈýH¼”y…ðùT<lv÷HYŒ‰Ò_fF솼ó¥\˜z•y£¥øKØ€( Êá6Y:s•òò*™¦dš’ˆ¦ä‰MÕO†»JpŽQ¢>Úí8£ôpVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/apache_pb2.gif0000644000000000000500000001021212141202160015733 0ustar rootsrcGIF89a÷ÿh.m’U­›ÿonùtNÿëëÿúôÿ¨ÌLLLMt†††µ@«˜uTUU¼­_˜™™¶’UÔÌ«R'Y|||Ê4Bä6ÿRjjjìÏ[ÿÊ…Öinÿ®™»»»ÃÄÃëˆJþêôZ~þýþèæË”’ÿWƒ±ªŽ²¦ZZ"o¬­­»rsËÌÌî¬ìqRÿÜ:áààÿòàŒ dÿŒÉqPò2Õ.ÑÿÁ±ÿ8lð(7«#FÊÅ•öööÿ\2µµµ°nXÆ©Vµ(Dééé985Ã=ÞÞÞÿ¨6¼Ž–ý÷ýÿŒÅÏ'?‹’gV4sssäzáÿEw£££ÉEîîîÿšµððð###ùùùÿ1—ÙÙÙØ˜U××ס W“&R·qåååi$5‡$Wÿs¸ÆºWŸˆO×ÇÁµ7D½ JÐÐÐu%_ÿn”ËÆÕ·X CÿêÐÿG¢Ä®‹Ç>ľ«Ú¹¸+.·HDþñöÿg²ºC>!JžfÔ:Źÿ¯±²wGÿŠ©“ÿÖ×ÿÀÓ}ZLV„-bÿÚæÊQkž&LØ™p÷ØöÚÒ]ÆAEÿÉàT.ÿ›¦«û¾eÁ¹iñè^ÑAëK>RM^`a³ S•0YöôÿÈG[Æ\LÙFDê3ãÝÿ7 ÿ¹^Kù2Å¡§¥8WÄ:ÿ~÷V@ÚHÖ¡\N×§¨Êɰ1E²}óÁñ·GU¾®ª€eÿù?<³»½¦OálÞ¸4Q÷0ªIޤOVüûü§¨¨Ú¼¬›.Oìëçdrz…4Zanu.ÿ¿¹¥ÿùúïíêLBBA49q‡ß^C<ÿÜU?ÿ€¾#ãããÿá»ÝÖÿÿ” ÿW,ÿÚªÿ®G˜‚ÿÿÃuèèèÜÜÕ{me×Ô´šCtÌ>f¹Jlÿ(aé]@BNVÙYVë1ÇÈÈÌÈÉÉh¯-Nÿ¿¯Á-LÉÃqø÷ÿÂNM¯·ºŒ—žìëëÿ“¯ßaÜÒeEÀÀ¾óóó,,,ÿ{žÔÔÔÛÛÛëåæ®EOåÉÌÖÙÚÝÓËÿÿÿ!ùÿ,ÿÿ H° ÁƒëuX˜e‡#Jü‡â“‚øŽ!˜2±£Ç CŠ)ð {mì]豃!O<>i††Möb’Üið kãȳ¨Ñ£Hê’vÓ&•(£´±©àTˆÙ²q IC“c]é%%é(A¡DǪ]Ëöa{Ç8¹`óÁC7«>‰°Ÿ;(T˜¸CßÄšÒž…[õ_‡ Ç*¡‚Iÿz4¨„b»õ @ÀÄ…À ð}íð¯ “Ñ ®Ö›ùÁÏ 4Úô³Ãfxÿ‚TjÀº­ñã!ÓÖ¤ÑØà-x™ÿÛñ  vpë’õ ÑÿR7Ê[’¨ää:ˆ˜eéŠÑ R÷]»¦ê²OãAºB4 õü3 `ÑÀÁ`iDC%!h“=ô™5PTÐ' =õÐ×Ã?|Ìwr$–(‘6W ÒCUi–=L'Pïx§DF”!  ´pµÀ‘‰éÉAbO ¨à?•ÐÀD>ÙSOüƒÀTL‹ÒàSNnAüGÃ~ó„TB— ƒ4˜Ñ! ·är …-‡Âï]tà^dâ „jÇžMA WÀ(Pù01U•dñO>Àü‘L2YtÀ[”aË, Iê$ ûh0BMIÿ£eBЀÂ?.0eFfSÌ- Ðè1!TydtJ˜¥@s¬=4ðÑ( õpÛY]±ôP°ó% *n‰ñÑ@àAïe™…£Uñ =Ç0ULrùŒ/øœq ‚hj²@ÁK3ŒÇ œ¨Ó Uk¶KßVõLÕÁb¶F›Ÿ.4j tÜ@LLd8ÂÏP:$! KüQ“€3l" R–RžËƒD°KhÁSÀNÌíTÅj1„vlB>xȱO&08¨N³ƒ ”#fp‡´8NÐB´(ƒ1`ýI`LI2$`D%žgÐBƒ-pM–•$$‘=Œ‚[CG jA:”B¸Å7V± Óì Ã(@>P‡»>¤ UPA‚  À£DRÇ .£8!Į̛ kêlQ†}eÕaU+mqˆèµÅ!ö¥\ÌC´H‚!ø±–Wÿ4â¶·e&$²‚øö·À®)L1‹&°b"Ãpƒ–»\7 $Œð œpXàºØ½ îq€Äox'Rñ†×yAÖËÞöº×½ÐxÈXÒެ‚  PG-; .hÖs¨lª°ùA› ÀF—ÈÕÐ]íü:9Á‰/xsèÀ(î ‰Œ‚¡ðG„Žr`˜øÄÁ`DD†»øÅ0~q D;âÆ8&:4X»@2¥@ PãÈGžHL  w /˜†”§Lå*W¹i\=Ö“ W0ƒ8@-'ÎÑÐ-86yhª0 ˜ÿ ••ÆeCYÊ©!Qû €1¶fa$ µø±ˆI”"Ÿh‡ʦpc${@±¤¯ÇøÒ—¦1BãN@"RòuÁ¡ÝéR7ÈDˆ‘™¬d&Sãɉ²•gme,w$ÙˆæÁŒMàÀ´ e Ì|µ2h5`åŸd';ѦÃsF0VÚ>'` ¸ê°Z a3H‚ <àk8`&(A/<Ò‰e ¸’ÞD,íâ:áÞø>BÑ[á Œè´:͈‡ÔA¾ :Dá©Ȫ‘Üj&Ãú²žr pÜãÿ8ÇGìxä#XÿðRÐŽZ, \ƒÂ*а¡—¨frNˆ€{ù©ÃUíêŠ#ùâ—rÚRxôÃo"ÚU¡P¨@-ŠŽZä ¢â…é”z5K|aXý€±‰‡9 =ª)3:2¼`Œ5 ¢_¼ÐC-8ñ‰ü ‘p€ÔpnHpc=aAÚ£ñ±¿{·i{ÞŽé'¢ Ã8Ž÷þºßý¹Ø2ÿ v2ñ#óàüèOú]ø*Áð¿üã¿ø‘ì` ϸB*€@O·aÆ w€ä0C£ÀaA’:¢`l—ÀJT3:ù“`‚pHw?ÈàzòQ sà^°bÐ? ð'ˆj` q€%†b0Ñà (¦bÑcMЃ>؃³ 5c5``@p¶cQ¨F~®…R…íGkV8 ØÀ!PAàf % ŸPtP03ð @3°3PKµä†¦b04wN¢' ¶` *–ÐT„Ї ƒ0ˆKÐK°/±ÇÐbЈ¾ÿg†Q{€ƒ'ö !“¶ƒ˜¶‰-V×GÐiHPÍàiMø„$Q~M¦~¬x~ì—^Wh…€S@Ú :° Þ ‘j€IP$ˆÕƒZèÀ C {D6ˆÕ€\%Càa_  0 _ŸKäað`Š((…¸PÑn’ö îøŽ¯àn(&o!}œèb¦ }E×ivðicHH?v]N@r!¡Š†wdU¨q÷‘j4DDÐq`†€ ðí@›(¥œÐáðmp@ P*œà†pÐC ã¤yCp²ð5©ÿ“Nµ0 9 ªà&€? €a&b  Ád'iP •˰v!}+p•X‰•¬@}á}–bû(¡d$0x1 EVx±d‹TV9s½ð ..  oô>° )´  zÐ@4§†Ìà†ªPy°A²› ì ¤ £À d° “@Oâx”H PýÀ¡|QÙš’fvUéo!‘\bY›aéy–hP0 !PP ]×qÿ qùŠPVeP ÐÒ)l@"¹P;ðã.@ÞIæ FÿP É  µ@20Ÿàt p0n2@0np )° ð«àp ¦ †qðxÏP&‰(f‰¡ '¦ƒ!}^ÙG˜c£¥˜cL8Œp¢ö¡Cö–¬¶œsÙœ±HkYX(U U÷G ]ð zéWЗD#F ÂPoP®à @©à æ q€DàÏ  ÝY£ÞÙDÐðÐ8iïÆv(Fi*›Šw'!w9öiQàc *d7à–„7¢!—‡G—'je)jHU°à]°¤A —Dð ]P¨YÑÙ£½€|!g ¹0Qà¢y‰×P©•J•Á–j©Zú¬ðƒM0©HÐ ¦jªe pª¦Š¢:3Œ÷€$@7p«N°]R|W€°À ¬aÁ ¬€@ʺ¬ÌÚ¬Í ;httpd-2.4.41/docs/icons/f.png0000644000000000000500000000045010671421551014233 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™333U±3•tRNSÿå·0JbKGDˆHWIDAT[¥Î± À ÀWÌ^1@ ÂûÏ”7¹H™¯Ž—eŒ±ÒU7‘$zRœÅŒd,sNçði«¥¯Út_úLÛ_œ–‹þµÉQ#ÁÞ¶¦šÊâ¼ÌäøØ`wGˆ`‹2°6¡šCËËò3“bÂýÝm-Mõ!‚Å@ùx¡`2K!!mˆ`nFrTX §‹½•¹‘ž† D0U(BÈlž!+@ã#‚}Ü]Ìõ´Uåd ‚áÞ.Ž@1  ˜”8D‘€ƒŽA 00MO°ŸÉŸfIEND®B`‚httpd-2.4.41/docs/icons/odf6odf.png0000644000000000000500000000202711141176336015340 0ustar rootsrc‰PNG  IHDR÷ŸL4XPLTEÙÙÙ&&&'''(((33333™\\¬]\­]]­^^®™™™žŸŸ  ¡ ¡ ¡¡¡¢¡¡£¢££££¥¤¤¤¥¥¥¥¤¦¦¦ÎÎÜÎÏÜÑÐÞÑÑÝÑÑßÒÑàÒÒàÓÓàÓÔàÕÕâר䨨äÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßÞÞèàßßßàßàààßßéààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèææñèççèçèçèèèèçèèèèçñéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííììíìíìíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñððñðñðñððññññðñññññòñòñòòñòòòòòóóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöõööööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿó˜ËtRNS@æØfbKGDˆH pHYs  šœKIDATÓc`A PÀrüø‘ƒI»·oÙ¸–e9L”åØ%NVùkW°,˜ e9¬È ²K²ÌœÜ eÙËÉ*¿i­ ûÂ9,“º;›À¢,1 u«–²šOQ`CàVÖ5+–H²MèW€àF9Vé…¬bZ[j¸€,¸v•+›xW[SME!Lpé’9³'tµ6Ô”d¦$BÍŸ6¥¿b\r|Dpö” ]íÌ¢…¹Â̱¡þÁI}]­5¢Ì"iñQ¡þ^Á ÍõÕE¹BÌ‚Qþ®ÁÖ–Úò¼¬TA&~owg[ˆ`cMIanZ¢ Ÿ—»£%D°º¬0#%^€‰×ÃÕÁÆÌ"X TÆÄãéÈÍhb ŠE…CÜ©¯£L‹ òwsujÕ×ÑP…²p¡pÐ10( ”a² &žIEND®B`‚httpd-2.4.41/docs/icons/binhex.gif0000644000000000000500000000036610147723030015245 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™fff333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,iHº¼ñ0@«$¾YºïÀjÜç…U‰˜^+`žQß›<º™[@Š`((äŠ&…h”ôLÁbޤ.›˜]«|”@© s;"›µ".Ͷ¿ÖÚ<ÕÒhŠî,—ÛD‚ƒC6;ˆM ;httpd-2.4.41/docs/icons/tar.png0000644000000000000500000000040510671421551014574 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿ¿¿¿»»»VVU777Ù¡@YIDAT[mŒÁ À ÄN²A…X€Òì?S¯$©Ô/s2A› UÅ"e+F¨¸ ¼êDÀ9ÕìÎ|ÆÚ ­gLå*öŠºÚPõ–æ…o`nç…_UOôá¯jl»‰µLtEXtcommentThis icon is in the public domain. 1995 Kevin Hughes, kevinh@eit.comy'IEND®B`‚httpd-2.4.41/docs/icons/text.png0000644000000000000500000000044010671421551014771 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™333U±3•tRNSÿå·0JbKGDˆHOIDAT[•ȱ À ÑS`¯€d@ñ÷Ÿ)E¹æªÓÃÝÝ}›  µZvm«e«K§GDj—”Ê3f*Œù©t(åVáFÿõñ†)³Ä’"`½_VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/sphere2.png0000644000000000000500000000052310664777241015373 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿ™™ÿ33Ìÿÿ™™™f333 £ ¢tRNSÿÿÿ@*©ôbKGDˆHwIDAT×UÎ1 €0 @Ѹ´³½O t(¸ %«P°³PÉõM¥ø§G†$p¶2"Â’1ƒÍ Œ•¶”ò‘™™cŒÛK;»ÚyMž”vžÜZ•˲¦NçU> lžëBsR"C‚|]¬- õ´5!‚)±~®@1S ˜º D‰ 0äÑô¹`23‹S3IEND®B`‚httpd-2.4.41/docs/icons/README.html0000644000000000000500000010633110664776532015146 0ustar rootsrc

    Public Domain Icons

    These icons were originally made for Mosaic for X and have been included in the NCSA httpd and Apache server distributions in the past. They are in the public domain and may be freely included in any application. The originals were done by Kevin Hughes (kevinh@kevcom.com). Andy Polyakov tuned the icon colors and added few new images.

    If you'd like to contribute additions to this set, contact the httpd documentation project http://httpd.apache.org/docs-project/.

    Almost all of these icons are 20x22 pixels in size. There are alternative icons in the "small" directory that are 16x16 in size, provided by Mike Brown (mike@hyperreal.org).

    Suggested Uses

    The following are a few suggestions, to serve as a starting point for ideas. Please feel free to tweak and rename the icons as you like.

    a.gif
    a.png
    This might be used to represent PostScript or text layout languages.
    alert.black.gif
    alert.black.png
    alert.red.gif
    alert.red.png
    These can be used to highlight any important items, such as a README file in a directory.
    back.gif
    back.png
    forward.gif
    forward.png
    small.gif
    small/back.png
    small/forward.gif
    small/forward.png
    These can be used as links to go to previous and next areas.
    ball.gray.gif
    ball.gray.png
    ball.red.gif
    ball.red.png
    These might be used as bullets.
    binary.gif
    binary.png
    small/binary.gif
    small/binary.png
    This can be used to represent binary files.
    binhex.gif
    binhex.png
    small/binhex.gif
    small/binhex.png
    This can represent BinHex-encoded data.
    blank.gif
    blank.png
    small/blank.gif
    small/blank.png
    This can be used as a placeholder or a spacing element.
    bomb.gif
    bomb.png
    This can be used to represent core files.
    box1.gif
    box1.png
    box2.gif
    box2.png
    These icons can be used to represent generic 3D applications and related files.
    broken.gif
    broken.png
    small/broken.gif
    small/broken.png
    This can represent corrupted data.
    burst.gif
    burst.png
    small/burst.gif
    small/burst.png
    This can call attention to new and important items.
    c.gif
    c.png
    This might represent C source code.
    comp.blue.gif
    comp.blue.png
    comp.gray.gif
    comp.gray.png
    small/comp1.gif
    small/comp1.png
    small/comp2.gif
    small/comp2.png
    These little computer icons can stand for telnet or FTP sessions.
    compressed.gif
    compressed.png
    small/compressed.gif
    small/compressed.png
    This may represent compressed data.
    continued.gif
    continued.png
    small/continued.gif
    small/continued.png
    This can be a link to a continued listing of a directory.
    down.gif
    down.png
    up.gif
    up.png
    left.gif
    left.png
    right.gif
    right.png
    These can be used to scroll up, down, left and right in a listing or may be used to denote items in an outline.
    dir.gif
    dir.png
    Identical to folder.gif (.png) below.
    diskimg.gif
    diskimg.png
    This can represent floppy disk storage.
    small/doc.gif
    small/doc.png
    This can represent document files.
    dvi.gif
    dvi.png
    This can represent DVI files.
    f.gif
    f.png
    This might represent FORTRAN or Forth source code.
    folder.gif
    folder.png
    folder.open.gif
    folder.open.png
    folder.sec.gif
    folder.sec.png
    small/folder.gif
    small/folder.png
    small/folder2.gif
    small/folder2.png
    The folder can represent directories. There is also a version that can represent secure directories or directories that cannot be viewed.
    generic.gif
    generic.png
    generic.sec.gif
    generic.sec.png
    generic.red.gif
    generic.red.png
    small/generic.gif
    small/generic.png
    small/generic2.gif
    small/generic2.png
    small/generic3.gif
    small/generic3.png
    These can represent generic files, secure files, and important files, respectively.
    hand.right.gif
    hand.right.png
    hand.up.gif
    hand.up.png
    These can point out important items (pun intended).
    image1.gif
    image1.png
    image2.gif
    image2.png
    image3.gif
    image3.png
    small/image.gif
    small/image.png
    small/image2.gif
    small/image2.png
    These can represent image formats of various types.
    index.gif
    index.png
    small/index.gif
    small/index.png
    This might represent a WAIS index or search facility.
    small/key.gif
    small/key.png
    This might represent a locked file.
    layout.gif
    layout.png
    This might represent files and formats that contain graphics as well as text layout, such as HTML and PDF files.
    link.gif
    link.png
    This might represent files that are symbolic links.
    movie.gif
    movie.png
    small/movie.gif
    small/movie.png
    This can represent various movie formats.
    p.gif
    p.png
    This may stand for Perl or Python source code.
    pie0.gif
    pie0.png
    pie1.gif
    pie1.png
    pie2.gif
    pie2.png
    pie3.gif
    pie3.png
    pie4.gif
    pie4.png
    pie5.gif
    pie5.png
    pie6.gif
    pie6.png
    pie7.gif
    pie7.png
    pie8.gif
    pie8.png
    These icons can be used in applications where a list of documents is returned from a search. The little pie chart images can denote how relevant the documents may be to your search query.
    patch.gif
    patch.png
    small/patch.gif
    small/patch.png
    This may stand for patches and diff files.
    portal.gif
    portal.png
    This might be a link to an online service or a 3D world.
    pdf.gif
    pdf.png
    ps.gif
    ps.png
    quill.gif
    quill.png
    small/ps.gif
    small/ps.png
    These may represent PDF and PostScript files.
    screw1.gif
    screw1.png
    screw2.gif
    screw2.png
    These may represent CAD or engineering data and formats.
    script.gif
    script.png
    This can represent any of various interpreted languages, such as Perl, python, TCL, and shell scripts, as well as server configuration files.
    sound1.gif
    sound1.png
    sound2.gif
    sound2.png
    small/sound.gif
    small/sound.png
    small/sound2.gif
    small/sound2.png
    These can represent sound files.
    sphere1.gif
    sphere1.png
    sphere2.gif
    sphere2.png
    These can represent 3D worlds or rendering applications and formats.
    tar.gif
    tar.png
    small/tar.gif
    small/tar.png
    This can represent TAR archive files.
    tex.gif
    tex.png
    This can represent TeX files.
    text.gif
    text.png
    small/text.gif
    small/text.png
    This can represent generic (plain) text files.
    transfer.gif
    transfer.png
    small/transfer.gif
    small/transfer.png
    This can represent FTP transfers or uploads/downloads.
    unknown.gif
    unknown.png
    small/unknown.gif
    small/unknown.png
    This may represent a file of an unknown type.
    uu.gif
    uu.png
    uuencoded.gif
    uuencoded.png
    small/uu.gif
    small/uu.png
    This can stand for uuencoded data.
    world1.gif
    world1.png
    world2.gif
    world2.png
    These can represent 3D worlds or other 3D formats.
    httpd-2.4.41/docs/icons/apache_pb2.png0000644000000000000500000002424112033030440015761 0ustar rootsrc‰PNG  IHDR%ð }sBIT|dˆ pHYs++–#W°tEXtSoftwarewww.inkscape.org›î<tEXtTitlePowered By: Apache 2.4ˆ‹*tEXtAuthorDaniel Gruno [humbedooh@apache.org]%ô…tEXtCreation TimeOctober 2nd, 2012ÃÙ£ IDATxœíy|TÕùÿ?Ͻwö%“ÌL¶É¾Ù ìÁ¯ ‚‚Š€(îkŵ.Å«EZµúýZÔú­[k«|AETp/‹” „²ïû6™}»÷žß6Amµýñ~½æ•™óœå9çÌ<9ç9Ë%Æ~,<÷Üsqmmmó€1&GDDt¤¤¤ì¹á†º~hݾ/n¿ýö_ïß¿ÿ¶¬¬¬Öõë×?UþË_þráÇü²Ñhän¾ùæ î¸ãŽªBÏóü¸!¢4÷˜ @'€žfŒµŸC>S¼püã+Œ±w„o«ÔøÂÂԢݻk¿múáèéé)|ñÅ_9ñ™çyÄÅÅõoÚ´é­õë×?ô}–õCÑÝÝÍÊÊÊ¢AèNø²²²èððpˆ¢HÿjýÎó㇈®ðÅ à(¹.#¢Ƙ}ù„X áxÐÇÀŒ˜Â™3¯Z²$uÒ”ÂEç’î\ày_|ñÖ´´´ú¦¦&Ó¦M›¼ë®»î&ê?ãG3’<‡‹s¶t笫 '†qçÃy³@€í.àË’,a>oááïpæÑ"º‘ˆÎøå[pÓmÓf^:ÿWcr&ÌŽ·ÅϼeÙ²E¦L)g*‘fébG¨Ô°ð<¹sç®\µjUÖ¨Q£ƒÁ UWWO=!¿óÎ;o2eÊΜœœÆ‰']ýõ«¶oß.lß¾]½páÂo Š|ðÁëà¶Ûn{¬   ¸   øñÇŸ7ÝtÓo Šo¾ùæ÷à¹çž‹;wîÿåççWäææÖ͘1ãÓŸýìg¯×u×]÷Ç‚‚‚âU«VÝ8cƌϳ³³Ûî»ï¾;`ÅŠãf̘ñynnníØ±c+.¹ä’5+W®L;‘võêÕ1_|ñÇ999“&MÚ—>’6A¬®®¾%??¿2//¯ráÂ…ÏÀºÛjå3Ëô6ö¿¦Ÿÿ´/òýÂ6å‹)õË¿Qú¿ÑÄ.}1/}þŸ.³xAZtä©J˲ŒªªªkgÍšõÁ±cÇrˆ‰‰‰ ¬¬ì.ŸÏÇO›6mËc=–³téÒ×c(**ºáÕW_µEFF€îîîlp8cÆŽ[j³Ùü£×¯_¯éííÃó<²³³÷tttܸgÏžB‹Åâ»ÿþûçÌ›7oìøñãwÖÖÖÚöîÝ{ë`½jjj,‹/~nùòå×$%%}¹cÇŽ***óóókŸ}öÙ1<ðÀ”ÌÌÌÖýû÷OüüóÏýñL,++› .\óÜsÏŦ¤¤l=S‡Àårñ]tÑ wß}÷¸¼¼¼C¢(¢¼¼|þý÷ßß”––¶ ššš&@kkë$HMMÝýøãW$ÿóüçpÜY¸âøÇ÷c»Ï×à=J·âÄ ==ý.ÆØO?ù䓇_~ùeçÚµkãûûûp ýÀ󌱊õë7Ê£ÇȱÙã=DØgŸ}Ù#k¢ï:BÓñK 9¿9¤?¨0“B­‰ ú4›­r Í”öh½•Wøó3»t‘}AH¢Ó_²Ýšu¸S-5I—_Ü¢(âÕW_½Ôjµ ‡#úúúlƒ+77w×{ï½·üÄç .¸ <ò׿þõÆï%IBSSSœF£ÉïììÔp‡ôôô-Z䨏qã×.;[Gk4Œ;ö‹|°vëÖ­Eò½^¯ 222>ݵk×]]]“¿øâ cooïdHIIÙ|¶|ÏóŸÅqƒð €n=s ¼Äïcˆ(ëÔ܉7¿S(—>ðÀ7lØ ½ð ƒ<ÏÇ/d7}P[Qwÿ7íh®9»Ý¯ÛÃ,‘æ4»:"µÑF= òè¸fΈÖèpJ4ðZT•WÒÑWÙ6Ù§ÉŒ“t‘߸åP]¯R¾¦;||VúVe'·pò¾Ú_>…ùóæ}|ÕUWýfÙ²e×mÚ´éÊE‹I’$é¼^¯Ôjµ"##[t:ȃÛí6\yå•_edd4766ZZ[[ât:y«ÕZm0*›››“»ººf‹¢‹ÅR4}út¿ßï7@ à@L ˆÑh4Þüüü£±±±âIÅq'YÕP(d€`0¨<‘Öb±tåçç “‡1N‡ÈÈȺãz»GÒÙ …Dä•JåY–50{öì·GÕT]]wàÀ§kkkcú§L™òÎHò>ÏD4ÀWŒp:^Ìóœ!þ•ÿ˜FDøý (7ÑÇ'-I¦¦¦–¸„ˆyýõ×ïÞ°aCò¦M›¤’’’°@ pukkëeÓ Koºé¦àÑÆNUx˜Qιú2ÿ6þ¨Ú¤`Ìaães«šïŒr"¹…C Ç£9^BJ3ag– …êç´8b”À‘J‘è¢OA8”¤¥iµŽœêÀÀ ÏóxXÃ.üÍéÙx ìîÿû¿îW;;ÿÆëµZ­­­­­i}}})PZZZh·Û¥R‰´´´š‚‚‚Ùl.E1¾££#_dff Úžžž~¿¿bbb€Ùln«Õjúé§ æÌ™i§èõú°Ùl‡wíÚ5ûTùêÕ« U*\.jjjÆ8Ôßß?"'¬ÛíF]]Ýh¥~¿?”Je,Z´(øæ›o~Y^^~gEEÅI’˜˜¸}Ù²e#Õý<ÿÞÑ, ,!j¬pcìlßÝèAï/F>Àèáö)°ôôôçKKK×-X°`õÕW_=³¤¤Ä´víZ¶{÷nêííøòË/#..žLôÆRj@°Pg¿,©ôfÁIJX-J´vÑÏáT0”«¼,¶[¤2@I~Ô†ëÚD;)P•Èc|£Ý‚š¿+ao*ªŒÅ®vZï­Txo˜41âð¾» Ûó,¾C‡€ƒÞ0k֬𦦦i““³?99yØl¶o\µcÇŽ¤”””®Ñ£Goõx<"ÂîÝ»Sôz½œ½’““7ÆÆÆ>T^^žøÒK/­_·nݶ@  ïèè˜zùå—ÿöÑGýÛéZ855õÓ}ûöÝXRRrÑܹs_‹ˆˆ(óz½Qz½þ·ß~û‚ÌÌÌ¢ôôôceee£¶mÛ¶|þüùcJKKG´\$Ë2¶lÙò³9sæ\~èСÙU|Bž››»~×®]wlݺ5²²²ÎOþ?ˆæø€ ÎÂ+-ºc¿!¢|k00#¸À»Q &À çô Þc쌯êêê1•••oTUUU±eË–±¬¬,?Ïó2FDb–u’÷‚¨¥¡y¶‡Å+ô+ÙÂŒGC×èÉ®»›]gzD^–}'{Fw;{Y{ûYÆ5lµöföºv){S¿ˆý>y1ûT}[g™ËÞ›º`J¥’m͹Š5*¦°OmS­)“B]yåO"sk ƒwçM‘9ŽcŒXõwÜqñ ŸþùI:NÀ&Nœ¸•1†5kÖ“’’œØ¸q㎠®ãÒ¥Kïˆo9‘f6›ƒÏ>ûì4ƦNúvÁ¼{jû\}õÕϘÍfçà´“&Mj;!_²dÉááá^L¥RÉ·ß~û—J¥’åçç— ×Þ>úè5ÇëT“]~"ÏÑ£G—¯Zµ*}pÜ &`iii7n4œ­/Ï¿þ3^þ<øû6Ì«ãx¼G…ýü4ye Šóc gÝÑ8gΜ½%¶%:>ñHddïv‡¢-± êQ¹ùÔÓÑ&—³Šîýš ì‡U/g˜'@éÑÈz¤B£‡ç˜ž ŠL"ä†Ë£C€SBËBð§xW 4s*ˆ6?r«¼øßüyp©µà*½ØeÓcz«]© …°=!\šØÇ%”ØøÐõF…ï†Åó´Ûí.‡ÞE®ì‡]óåžûÖ§š¹ÎÝóåG={î½÷Þ{Ýn7g0ª`éÒ¥Î={öÜïõzµ:®up׬YóÆK/½ôÕ±cÇæôôôĨÕjOFFÆ®åË—ï€ &¼•‘‘±Ù`04žÚ>|ðÁÏW¬X±¾­­­ÐétZõz}ï¸qã¾lî 6'‘Û$¢>â%ÍvÁC";îŸ\ïÑ($ ßdP¿!Sp*BÊ@¹»'ÜCœI«F!°9èhö«ä}‰‘ú¶oúœü¤,3_ï ”?¾îÈö³µüzã7òêêêÆ¼óÎ;¿s:Æn¸áÊW^yå˳'=ÏyÎÎÂ’Û~’—ž™ù*/ËGpJ¯RsD<gmr¿¸ñXﱎÑ^«ª<žg¡nUD´Â!ÚÅc½%ÔmïâÀ¢—S"²9§GX:xYŠv@êU3.¤¢¤ôDUùáQ:á&3´A‰1ýHor£Å$#ä7ÀcòгºûA’ØÎôhÊ«r¡Oé“fž¦Š>ú4Î"fsPœ3À;8‘ãz£8žËR"¼Å ‡êT†ÂsjÐHÜöúÞæžÎÀvs„òà–@ÑemGcŽY«¶oß®~øá‡{JKKu¢(bÖ¬Yo|õÕWwþÐzç?‡3N¼Nû%|ÀWfޏVfV§ úÜ.Žx!wTfGã¾’d£-ŠOu´ATše³×Å›£4U{º*-"|ŒµRXm¯ oZ¾(y5’³´"ŒR™ÂÀSG£šyIM¾x¼ua°¦´#¾F…fžÃÑH” ~– NI‹}9VŠ9D…RÉâM2—ÓäÄG™–@ò‘€Š Øœ ’¢džŸÔæ´(˜Œ’>díâ¹én9ãSQðÆöU—v«ŽªØe}>iôýi¶+nN³þqéØò¿}˜/ûººgçW»;~”'3 ƒd³Ù©ÕjwJJÊÞ1cƼôCëtžÿ,Î8R¨®®¾„16¿ähy´B«¿<5ÚʪZ;d…Ru^¼`ÕJSÍÈopÑÞ¬¨à¨—òpª9ÙRì22IÇ·Äy$o£Žï‹lBˆ÷ÉÇì‡X]W5/I»M:  £CV}¢Bò‚i\qcq!¢›à¶yÐßaETLß ‡Æ6!’™<2âûpAµF™9˜•"=AT¥ Ènö"Ü‚ Æ+ß凟IrIb Ë©vò:„Pž¬ôOlrª¢}A*ÊÑ»}a!nj´ZÛ©`/J‚•rã ~©õ˜¾·"áÆðª6O`÷o^/;ô¯ê”óü‹¡ÅJDÂ! (XA!€¾÷ÿ-FŽÿ Î8RE±A¥R½î÷ún‰Œw©ÕêuMµÕSfϘÞþÔükw].¤2µ(Éz1(‚~ÉtÃ$ª¥äKQ"B[0À8f„Á)«ƒz.6!…¼§® Þ ¹Á^ƒÃ;N%­J›+KŒ³& $d`Qýj4rj4Ù,Ö¨SÛ‹[ÚI3Y›UI~¤6Éèõðr!T$㛂¨Pk¥ŠHŸ\çEZ-mznr­]íxù«ŒùÒ#½zNÇa­Í*ó$ ±v17‚¹Ûi¾œaÚ±Ÿ'aG¨ç›7s8/ T¼Ï<âlÙû/è›!r€79 àTz4À‚} §î‰?#hßRnÀK}Î00/ÎñwÐ)Û&`Ê0œÛ%t¿ 0½Pâ0Ò ãZ°×BßFÇ”AË•ãn€B€,‹ ô……;‰^¬Wû4T à(ÀJ cz7´ É{Iî-zíÝ#ùç¬ç‚Qf(…¡[á‰=ue›N û½.„ï÷¬ £åg4 £FªI’ÞcŒ%gdd±ü, vUj·Ö¤H®À5 ]éu4k÷6J ®Ôv—Õ=<*3&Èéáé$94Lo²!F+SOKŠcBèo± ;̇mr<ïƒ+YFZˆ=á*±N+X›$TkCr˜9œË¨w¢I«•ûÍ7­Ö 7§Ä[±‰ØÕ3J¡Êv$¤t`ž3ýç½áÁÄj­%.¤µš„êUî$[4?êéÙ™k:4Øöòƪ݌1ù{í”3 üÀ­§ûÅù€wˆp%;‡%Y0¢CZg‚ à‰ƒØÛ¢ß°É¯Ž/.bh\Y ‰û~Ê=Éá#ºd%==ý›ÊÊÊÇ =5u·Ïç;ñ·ÜöY͸±W´n|Ëämóñ¯‚[ôóJ&c´[DƒÁ‡$¸1YìF­ždc@ÇÕÊ‚Æ<Á£)à%¥K#¥t[y©…q”Of^evê–êû«X[w ·½¥8~¯€F¡Á~s23R é"”bˆ¼‚µßÆÔzF:“uöؼÞ@¬JìTÂÖÊ¢zÎÐBƒQ#sªWÐÌÐÍkñEj$övd!.òc¥³uâ™”ø±1\ÙÃ|h'$'ª‘Ï“J‘&…s¿úª¼ûÆ c3úJ |\¼‚û$䬋œViKÕFuyBU·Þµóv¶¥s —0‡€§Îm~.ðþ±Äô/‡IûÃAÚVÀ¦þö¬ èÉ»Ü~–\ï=Y¶ò/礌uÁOú-N¾Œd0! ,Éuÿë`Ȱ( ÜhtªÂêsÒáߑ޼Ä233+ ==ý³ÇÝŸš;ÖÓb ›¸¢Ï•µ}vŒir(SÌHjp£)Z”,îåZ ©ÒèžNÁïÕòQr$p€ßÇe‹½hô„xQð#URC©®“¢š•ü{áÉR¸+™OIƒ[-x•’ÕºëäfG3Ê;ñŒ•ÿ½ŽŒ> "D«¬ÑkXD0Q¥”ò†õ z,)a¬ý²Å/qi=z´r"*c|c02qyL9ÆÖ»ðlJŠXß“®ˆâ|à]XXÓK­2ðØfÓ‰¢_ɦ6©Rt2ŸrH–Þt£óÖ\ãs¤FÙé…5_mœ}íêç&++kœÛºZB/oø¼zè°s„äR9`-U9Î!§QŸÌ'<Äðé·-J“ ®Ón›5CÐx¡°'°#”6XÎ@«öÒÞ—¦°)¾ÓòÄ€†s”W¯WAO”=uð¬Ê›¯7‚ó­hÞ0Ò*ë~ºß¯áW™  lÈtˆÍè³–ýãà—Ðyÿû[¥lDð[_ÇiiiN÷Q RÆ®ìn8Ыªßl®«ó…âsy…Ç+J†( ‡¼àü„h¿S[œŠV„ˆ.—›‘ÍñøÚ(K¶~ïÕ¥œþ>þ˜A-†;ì|­ÝŒï3(±Ú@d#¯jMÎæÃ{s°/Ý)ŸÐÈÔÉ¡>Ù-ù©Ï×MMîF*ï,ý‡Ð( °:¹He¸h‰4ð‘‚e*¡#DZ…"GY‹ôFlÑRi–@²ñq ¸¼ºœ$ÀÁqøÀ‹è6Y°ü(5©$)%œ›àw…é[Ca½‰mæË8J+*3‰ï÷_9?Iy´Ìaä ]²aÍÌÝ[6·<û‡¿T¶ž¶A‡! ã6«˜‡3 \ ŠÀ+ ¸yˆ°f,aB ÷>Fí‚+0Mr§Æ ü쪋i¯S>9E®PAÓí§•Ñ}€#¼ƒ`[€Î¹@ôf¨ú´²ìÉž3*OþU†¢Wнá>Œtgÿ¨zvxÆfhãˆÒþ‰¸yè}(#å;…dddUU® cêÔ`…dmróã<dæƒ5t1¦ÏÃ×ó¼ô"ÁÕ‚DQ‹ØnQéQÙAÐȉ’ »=$¦ÊjÁí Š6„Z“šîçøJS ßãI‚“TâŽ!1 ÅA…"eädîPx’Ñ´Ó1_;¬‚ÓcG(RÀ_Aø‹ÚÈ´Î^£j …#ñ>>²*B²R±™ÒZPH"zR‰¶¹ùÄ¢nøxÛ–ÆÉÑóL\ƒJV¤iã9~ÛfµÂQÇ!^oHk÷ð³Éqá Û¸?ü®ðÍeíy›ð²ü‰€ìS‚½°¨ˆÁ;žpO˜`Ì y˜|œM˜TÆ0¢S™ß6T?€ 6¼¤»@ô8iŽhø¥`¯…@+–Â!œ|ˆ'ß-¾ìýáÛ+aaw#ù]Ü{ÖÊœ 燽†½[sX–äœû“ûnÞcìNü^?ܧ3Cò&Üã}á{1 ––V  ¸ººz+€è„¼7Äç^•ïèï êÀG^+5‡{Ú¼’©øÈúä6©> G§š$kWJn!ŠhécJo’ º]ªr#!§7ˆý‘:1½½S¥Vj0±7$ØuA\ÔË„ŽH?wJÜx#.j ápRM(©‰î6U1ÎÀímJÕî$¯ÌµÆ+úuÉ›`òEᛨDxÛôõn¨Ã꥔€²’¡TîcLÍÜr($í½ì¯Œ)¼A7œ¾>x}»¦5"»ËHÛ4ê`¤QÍsã4üÄ,Ž«>Ø.æ1p:¸¯ß÷‹…Y Eqm@´Åª0-3tôéôY¡S÷<úä=¹Ë®½,í•uŸÕüùLmšGx”þqÔu0w3”@ƒ7‡°ˆ8K¯û{ÿ£yà/®þ6ýi€jUí;ƒáb*€Â–`Ü©RÊ Ø´ºáÓÆ¬Xá)À–€=9°?„ý¦ôäu¶àäiÓ `ôs6k³œ‚á|Œ¾Ótê[¢úÊ€dK>÷dT|O#…Á¤§§o€íÛ·¯‹‹‹»Ö`Œ;éÒŸü—ÛëÌõpììmŽ˜´°‰+ w±qoµ’WY~ ŠŸÔT׿æÆä¿ÿª8v¡ÕOîoÄñk§‚sY“q_gê䉵!®5^Šêw+šC$FBÑ^ä4qªí)vu­K±+Ù…é„®05“y'®i=Œµ–\Iè5¬7‹O´V†ÒÛ‚Šœ&è%±e<Ÿ•ÜŠ´3vfXåP­Ž ~X£›¤(Çíâì2¸h¡‡#Rø¤Î>Ê|iµ]nlsp<Çø7Õ‚l0h…ŒäˆP”YË8H2!¾Åκc"(¼Û-÷F¹Œf'öej1³–š‡÷‰IDATÚ‰ÏÒ­˜Ví@©E)'ˆŒ³õxààdƲü:í° ˜ÙìGU”|Ÿ‹_›2IÛËÁ§vÉ—rÝ\tí*Æþt{‘§sÉz§Û'š[ ps>Ä„¹Å1ÝAaOŒZ”ÝF^ã•)x;ÉùóyúâÄL^±å`(4qŠ ìÜ鑲£8¡¶Éz¯WªmpsV«š5Ô:å™&È5õžµ?½í–Sk,!IŠ˜‡iËw0ìa*®Á)¾2s1|5\š"Úû €ßc‡ `ýEÿ£Ùô¡Ózb@;1ôKïèm`Ø/#‡ŸÉ©ÿý½› öÔá“Ë ‚eA€S®ù£CèáÆŸvÚñ]X’ûÀ†Þwœû\`qv48úÜ¢[°®ôÏ'…½ªI‚ÄՉ˰¢rõ9—Íúø)óý«ŒÂ`¨ººúÆØ-Œ1/åQ}OOsZÀßÜë,ï3[¿8êkPô+âîáåþ¦{ÓÍÁî—Â*Îßë†ß¡€Â`P)¸¤n\ƒ\­Ÿ• 4åhŽÄ¨™2JE¹ tz$VgF^£“öØT˜ÝäA‰Ms·‹õ´hRÅRx_6Ón'³/„Cj¹S°Â+1±ßN!IÄÁ¥7ùáæBð[f49qØÈ£Ëd•’:ü|M¶ ›‡/6mœ’ßX3r”ܱRQÎßcÁ­ÜïrÀbѱ£G]rîø{ß™:õ’“–ã¦4`†zß¿ vŒ/e2œ?Q8>m9ˆ!æ• wT hè^ÄþG+#¹@ü¹*ên<Ø“}'…ZÞ b/ÿkò­hÿ¨áœKJŸ«B¿f6ˆ³£kýÉ#š›Q ú9–¹Ÿ=ç²O$ÿŒÂITWWObŒMË+ "¢<mŒ±$—Ëîv9:¡æ`°µ¡ÁhÒh¼\@T‡šÈ£¨j1ƒAÊ­éAù ”³ ̽ÉÃÛÞ'‹ãj–$#_熽ÝÏZ2Œ«wÑŽ¦÷xP«ÒÆ€,ªÕÔ×,PF›G’äÄb awˆgæ£2k 7A'2“ékÁ€Ä&³õižY6^6‘ÈèÔ`Ì¡>ÆA¦Ã+’B¡t(R’Ôb0À„€,„^…£WT F´t2ŸÉ:šONû¯~µZ³?33sáàöÈ'¬aÀÒBS—*€)EìäQÆéŒ‚ÍYVF­y €Â’û+ÀÏ{ò›ÈF a`úuêCÃfÛÀX \-ˆsA­s¡ÁB„R>¨´Bæ3Á0 ĦÑ4Z?E÷†“ÿ ÿØŒ£u yÓð‘ Så÷îS8WÒÓÓ÷Ø?8¬´´4R£ÑLT(d4Fq,.)7šãT,Œ1cÌÁqœ‹1¦ès8ͪ¢Ò®Ë.ÞÌyv]Õm /öô››{•›5¤Õ_’T\àâþö§NaæÁ>Ú91 ÆI† Þ¯TvHåN'ű}zÄ´KÝ>â믉Gr¤ÄY6õ‡Žas"å9á×èó b±Ölg•^L„Ïfe¡ÇœÆ¤jŸ7vK²´Bãë¹q”¦±±Å•–‘¡ª© t$$áó5 cÐ ÈqÜN÷ààzçÄðá‡Ù°óðaÉ#܈¡þ…ÜÐÀ™ú%#ÍçûCþo kØr°§žq6ôÄCý 4 ŸðØ?²e ÀÿÀ²pÀÞ!iP„Ùfƒ p; ø\%O8žß¿Ù³xˆ] еß*-O/þà#…s€jkkS}>ŸK¡P˜Ünw^¯ŸÈq\¶,ËFŽã&ˆ‘e9ÀÈqœ‘1– ’ˆ"eYfD$¶mÞaãŠ+úXvšI˜Úâw¶Çôt·û¢Í2|¢.Lô„·j•JnÒeo£ÑhqTW÷˜Ó³¢Ü®F^–½í&K¶]o0©‰HbŒ%¨ÇÀòYcŒx舨 @»,ËE*•ꤤ¤†S+7–0]6c¨ó÷ (¬fçæ´Ê#¼áw >z˜áï[þé#zâz€†»Pöà©+F¼gh%H_ ‚!,[¹~H¨õ À_à2ÍÖO3€r{]ž|wÅm¤ð] /£pÎÔÔԤʲœ¤T*…@ vÜ€¤rw c¬À^"J“eYà8. €1vŒ1¦#"ùc^Ƙ•ˆ<Œ1=EQ)ýOZZZ TVV”J¥6ˆDt%©ÕjõZ¿ßŸž‘‘Q @<£¢Ž¯ yü¹„ñ–aI&¨Ëv' Ÿ *NL#Ši÷d4dMÛ௧³égÕûŒÐbÈz í)_{æ¬Ï;šçJ ߃!Òcn€á¤iÄд"O‡B€¬ÌÇF™10NÀÈb^í`ÔN®…Ì…*p­›†ß4µ8{xºxHøº#¿:çú-ÎÖƒ§G†„Kìc¼ÊIÝÕá&Á‡Äý.p´ïÿóu(êR¾TlIEND®B`‚httpd-2.4.41/docs/icons/folder.sec.png0000644000000000000500000000047110664777241016051 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿÌ™ÿ33Ìÿÿ™f3f333SVÞ<tRNSÿÿÿ@*©ôbKGDˆH]IDAT×c0†ÂÌr €0Í HIÈ,1…”T‹J@L'%Uq ¨ EEŠá \ÒáL‘t*‹ŠDÔd1Ð né ÆeiiiIJªie Ææ ·‡†–'ïê,<ë6ÞVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/pie7.png0000644000000000000500000000042310671421551014652 0ustar rootsrc‰PNG  IHDR½/T• PLTEÿÿÿÌÿÿ ¶ïtRNSÿå·0JbKGDˆHHIDAT[uÌ¡€0ÁWÏïç"R“*h"“¸*1‘`VnȯMG-ÂYigIúUÎô»œ–+C?íêÜ6• a¸öÿù]3EŒ­’!VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/link.gif0000644000000000000500000000037110147723030014721 0ustar rootsrcGIF89aÂÿÿÿÿ33Ìÿÿ™™™f333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,lXº¼òP@«%¾i;Ï×U"¸×‰¨Q¸ð‰RFmòL ü€K:KïDz_®sDV”@TÓ €N¦¬6»#°ÛmÕ ãaÍ^kÑéè¨ +Ǻ}¶NzƒBD=„…³c* {G¥rpý,@ßGŠ|éŽF {Bxyj:6€‚3#Œ‹JH”=/7™š@ ;httpd-2.4.41/docs/icons/tex.gif0000644000000000000500000000037310147723030014566 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,n8º¼ñ0 @«#¾i)!—EÓgša5nÀy¦*Äu_;÷Í ¦`¹–«y–’x$$QD RRùø¢E'ËÔ–p”¨3ý»¬ê8Zn×€xû#ªÅïí»~/÷òÿ}i€{eG‡ˆF:oZ ;httpd-2.4.41/docs/icons/portal.png0000644000000000000500000000047710664777241015334 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿÌ3ÌÿÿÌÌÌÌ™3™™™333|ñ’‹tRNSÿÿ×Ê AbKGDˆHdIDAT×uÎ1 À …áL$Wðz‚àZ,ÕUÐ’ë7Æ@:´ÿô(-#" …à„ì ʹ9 /¢TkU²¦ÜoJÊmïÍ(׋<œ~}¾¶gŒÑ8Ÿ2®~Yh%ŸD¶ðo—6êág£bVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/comp.blue.png0000644000000000000500000000051210664777241015705 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™fÌÿfff333f™B{ÿŸtRNSÿå·0JbKGDˆHpIDAT×uÍ= €0 †áE:wЮ.âŠõ]­àºWÐ^ß&õAßé!„òŒT *P‚)h*Z'ˇú“K*3Kl<¿Ø}¢Î‡Æøœ{MGki9Q®|¡ˆª©©X«Ž+6Ä« õræCÁ+'»„Í0VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/uu.gif0000644000000000000500000000035410147723030014416 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,_8º¼ñ0 @«#¾)ˆÿ0‰Ú‚b•AfhQ#ÌçGŽo@WÓ5Þk((vx¾“ÅHàÕ<Ħ8Œ:ŸÖiõ:N«Uo ¼”ŽÉ1ºk^—…î^;.ß Œø|qyú¥ ;httpd-2.4.41/docs/icons/layout.gif0000644000000000000500000000042410147723030015300 0ustar rootsrcGIF89aãÿÿÿÿÌ3ÿ33Ìÿÿ™™™™f3fÌÿ333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,oðÈIç¸xÀ»ßGvm^I†ÙYq$€Žl4ûaçLrø@˜kW ŽH„ðPh6=„(A©a9ŸÐ(µUê¦Bo\5&Ï2WœÞöÎÉv˜-/sæ8GM/ñ;xpukt}{[R‹ŒQ?p‘H;httpd-2.4.41/docs/icons/screw2.png0000644000000000000500000000051510671421551015215 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿÌÌÌ™™™333‘µË tRNSÿå·0JbKGDˆHyIDAT[EÎ1à …a+‚pƒÊmv$—½‘ÌŽïþW©ñOŸßdÒ»#¥D?²BX¤c1,ÚlŒh±Öz±ÑãÆï.RŒYŠ,çèRª3VØ•/ÒPé&0$;…œ]?yò¥ÉçÃ_=£ŠgO&ÌÒª€!ûijÊVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/image1.gif0000644000000000000500000000042210147723030015124 0ustar rootsrcGIF89aãÿÿÿÿÌ3ÿffÌÿÿÌÌÌ™™™™f333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,mpÈI)º5W$:ÒàåBÜGZª®’Ù/Œ´ŸM… Pxs’`Éd^z@A¥l6/—å4i½fµÔ®3Êܪ€¨:m5WÉâr˜m…ƒ¹ôøý¼´÷ÛsX‚]nz„T@CŠC5‚*;httpd-2.4.41/docs/icons/image1.png0000644000000000000500000000050510671421551015152 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿÌ3ÿffÌÿÿÌÌÌ™™™™f333GHñtRNSÿÿÿ@*©ôbKGDˆHfIDAT[}Ê+€@ „á‘X YÂYË!8C@–WÒc#ºǯ¾Lôì$\¹í‚GðJÁ=½ßÜ7ÁÚXxÕ‰EDdO÷@Ì`Ž/ Aý§ªª³€ÿ«™•qXÅÛZ‰’1+‘r1dVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/bomb.png0000644000000000000500000000056710671421551014736 0ustar rootsrc‰PNG  IHDR2o¡5!PLTEÿÿÿÿÌ3ÌÿÿÌÌÌ»»»™™™ˆˆˆfffUUU333Ù–ô)tRNSÿÿ×Ê AbKGDˆH“IDAT[Eα Â0Ð/!$ìÊ x‚ÔTŒ@c!X #(BÒù*#dnJÎöEüêéë|gÄšÙ{ cþÄ\è’šÚºÒJéõL°DTÚ=`™¹Ìf™Ø†ki % q—‰;TÚËýüV~Ný£«D>öcR†!*—ÛH+‡ÈÊC$Òg›/ë2©×-ÂZ䓞5þx9A0SUˆVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/box2.gif0000644000000000000500000000041410147723030014634 0ustar rootsrcGIF89aÂÿÿÿÌÿÿÌÌÌ™™™333™3f3!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,Hº¼ñ0@«$¾i;Ï×U"¸×‰Ôa,ŸÕ1¸í¡ï4`×`H¼Ñ~À`‘x8†‚(’é|F¥Ë¦¤Uè^ SãÖ×õÀD€˜s(Îèe]+Ãm€<=O~ŸqzZ,d|=|`†‡cŒ€†{Œ“ K—D1;œœ ;httpd-2.4.41/docs/icons/apache_pb.svg0000644000000000000500000101032712033572341015726 0ustar rootsrc Powered By: Apache 2.4 image/svg+xml Powered By: Apache 2.4 October 2nd, 2012 Daniel Gruno [humbedooh@apache.org] Copyright 2012, Apache Software Foundation Apache Software Foun Powered by httpd 2.4 httpd-2.4.41/docs/icons/back.png0000644000000000000500000000046410671421551014713 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™fff333ž‹šçtRNSÿå·0JbKGDˆH`IDAT[EÏÑ À0EQW°à….R^(qÿUÚ—Dõ#.~ÑáÓ¼€ž•Ž TE¯Šª6©\õEíÇC·ÝI×?Mšï ÉøJÈ[Ö[÷î8y¤-Ì{½>dŘO.&Àl‹çVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/blank.gif0000644000000000000500000000022410147723030015050 0ustar rootsrcGIF89a¡ÿÿÿÌÿÿ!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,Œ©Ëí£œ´Ú‹³Þ¼û†I;httpd-2.4.41/docs/icons/broken.png0000644000000000000500000000050010671421551015262 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™333U±3•tRNSÿå·0JbKGDˆHoIDAT[MÍá Å àP] p”7€ÅÀC÷ŸéÅÚb#„ûQï\$Q ¤´‰k3m꼘Ýýåã!Žó÷br¹ˆµÏÕÔÅaÅ‹»i,Ø£GPc £q6,K¦&¢ESOf½µûùb³ž+ÚåxÂ?˜P–Ç”UVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/world2.gif0000644000000000000500000000040510147723030015173 0ustar rootsrcGIF89aÂÿÿÿÌÿÿÌÌÌ™™™™3f3!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,xºÜî&Ê×"¹8Ò(ˆø¨1ÆbXWd×…¨·.åëzx7ÌAiÚ°OaÀªÝN Á®°2þ€:&Ñ|]†C 0ä wÓTrüÍú>§xYüq¯Ì8«—FøòœnËã×{=~q_K<4…„L#~x=’“— ;httpd-2.4.41/docs/icons/quill.png0000644000000000000500000000051110664777241015146 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™ÿ™™™ffÌf3™333 éŒÝtRNSÿå·0JbKGDˆHoIDAT×EÊ;€ „á© Þ;¬Ö&^`h}$Ø*&îõqª/!o!"ÌxgÌO‘¯Js ûrEiÙùAÝt)-Ê7Ê•kŠÊ˜b¦á3m+(\7|¼»Ê •ÇOT†^·HÊèL+$ð†e9VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/movie.gif0000644000000000000500000000036310147723030015104 0ustar rootsrcGIF89aÂÿÿÿÌÿÿÌÌÌ™™™fff333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,fhºÜÐáÚ4%^Â;• 1œè.ch˜é ^íËn»ÀñªÔ^j&Òoª\dh: `…A3¾<"f©¢|[’í¦•zqUÒ 6³•â#ÎxÚ£Ö©"íÒƒ„ ;httpd-2.4.41/docs/icons/pie1.png0000644000000000000500000000042710671421551014650 0ustar rootsrc‰PNG  IHDR½/T• PLTEÿÿÿÌÿÿ ¶ïtRNSÿå·0JbKGDˆHLIDAT[cœdØ*™¡µH6h­ ecÐZÊÁ Õ0D2LeH`Ð`P’ `’Œ’S¡dÈN™ K¡æ(N¡ò¬–ìVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/patch.png0000644000000000000500000000046610671421551015114 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿffÌÿÿ™™™f333´+tRNSÿÿ×Ê AbKGDˆH^IDAT[¥Î± €0 DÑC8ôH™À+D¢¦`)ÁûÀ% =¿zra¥—U7X“È“a’cçVk}ifƒXÓÑ("@§D4.;s^T<ÿL?{ýšÓ#Kòø¤ÚHM*¹@|6VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/pie8.png0000644000000000000500000000040310671421551014651 0ustar rootsrc‰PNG  IHDR½/T• PLTEÿÿÿÌÿÿ ¶ïtRNSÿå·0JbKGDˆH8IDAT[cœdØ*™µj)\µje(CتU«B¢€äT(™$—â$‘UBôBÌš 2Ÿ6§}(+–VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/broken.gif0000644000000000000500000000036710147723030015251 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,j8º¼ñ0 @«#¾i;Ï×U"¸×‰(1¸ð‰RDmòL ¼€K:KïÇ |§âh‚”¼J$À³Y ¸¤×'.f…ľÞßã'wÏV@Ù›6*[uîµ¼i£¦R§7 ‰=‚ƒŒ©Ëí£4¢ÖX°· ­qò›(fˆ¦Hi¶.µ²íÇ2^Ÿ7ÝÛƒ¨WÏ6“Ê“wœ-2: ‡Q;httpd-2.4.41/docs/icons/left.png0000644000000000000500000000040110671421551014734 0ustar rootsrc‰PNG  IHDR½/T• PLTEÿÿÿÌÿÿ ¶ïtRNSÿå·0JbKGDˆH6IDAT[c8™ &—‚È00&³Àä*&£Àd…$ Q Õ…dÄd¨-0{„3,»^•A VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/comp.gray.gif0000644000000000000500000000036610147723030015667 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™fÌÿ333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,iºÜþ0ÊXª½À»™³aHˆ 7¬+a¢˺ÅÙŒòüÞ`ÞîŒaH›Ï§Æ ’0ÄA@­Z¯„дÈíj¯`kV1-ÌÏŠ`¬0+?çPÀ½]Û·€ø\¨ûïy5iƒ']‡\ ;httpd-2.4.41/docs/icons/generic.red.gif0000644000000000000500000000033410147723030016150 0ustar rootsrcGIF89aÂÿÿÿÿ™™ÿffÌÿÿf333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,OHº¼ópA«%Ä7­ÇÙÖyB#)˜§¤VÏÜKxnÔ6Å쮞OL e<¡¯¨,1›«gœJ•Tc/ &±×c±Af€z L;httpd-2.4.41/docs/icons/pie2.gif0000644000000000000500000000030610147723030014621 0ustar rootsrcGIF89a¡ÿÿÿÌÿÿ!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,EŒ©Ëí£4¢ÖX°· ­qò›(fˆ¦Hi¶.µ²íÇ2^Ÿ7ÝëÍrAÐ,@(—Ê#’ e:ŸQ)#¹œ¾ˆ#‡ˆQ;httpd-2.4.41/docs/icons/unknown.png0000644000000000000500000000046310671421551015511 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™333U±3•tRNSÿå·0JbKGDˆHbIDAT[mÎÑ € Ð\€ a `°ûÏäÝ!h¢ýzBŠj)!ìxÿŘÈ^騔z­5áÆn'ã2åñƒ[Ô{ f²ß”2.F,bÒòiÿùz;YÓˆŒ :ÐF^U™.ý+‘VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/movie.png0000644000000000000500000000042010671421551015122 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿÌÌÌ™™™fff333·A¶ðtRNSÿå·0JbKGDˆH9IDAT[cHƒ‚DA†$50K)Ät63-ÍÙØØ˜- , f*¡2‰PÀPôµÎ …Ae™4éŸÜUVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/odf6odp.png0000644000000000000500000000172211141176336015353 0ustar rootsrc‰PNG  IHDR÷ŸL4.PLTEÙÙÙ33333™\\¬]\­]]­^^®™™™ÎÎÜÎÏÜÑÐÞÑÑÝÑÑßÒÑàÒÒàÓÓàÓÔàÕÕâר䨨äÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßÞÞèàßßßàßàààßßéààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèææñèççèçèçèèèèçèèèèçñéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííììíìíìíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñððñðñðñððññññðñññññòñòñòòñòòòòòóóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöõööööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿr§UtRNS@æØfbKGDˆH pHYs  šœ0IDATÓc`D PÀ¸sç¶Í!kW.[<Ÿq&L”qÇ66&VÁÅóg1Nê…Š2nfþé“»[ë!¢ŒëÙ˜—Ìçc™ÜÇØR[]eô©›3I³Mˆ A‚ËY™æÍšÆÍÜÔ( ÁÅL¼“¹˜8šÊËòØ,833gMEI^V2Lpú´¾^Õ¦šò¢¼Ì¤è°`ˆà”‰mU%E¹) ‘¡>ÁÞ¶¦šÊâ¼ÌäøØ`wGˆ`‹PØ@›ªJ sS⣂|œ­Ì!‚åBùH*õ!‚ÅyiÉñÁ>îŽ6–ÆÚÁ\¡d$•*ÁT 2_[kcC]5%ˆ`¼P0’Jˆ`x€·‹£…¹±ž†Š¢œ”8D‘€ƒŽA 00i0P©"7¨ÁIEND®B`‚httpd-2.4.41/docs/icons/odf6odi.png0000644000000000000500000000205311141176336015342 0ustar rootsrc‰PNG  IHDR÷ŸL4mPLTEÙÙÙ+++,,,,,----33333™\\¬]\­]]­^^®™™™¸¸¸¹¸¸»»»»»¼¼»»¼¼¼½½½¾½½¾½¾½¾¾¾¾¾¿¾¾¾¿¾ÀÀÀÀÀÁÁÀÁÀÁÁÎÎÜÎÏÜÑÐÞÑÑÝÑÑßÒÑàÒÒàÓÓàÓÔàÕÕâר䨨äÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßÞÞèàßßßàßàààßßéààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèææñèççèçèçèèèèçèèèèçñéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííììíìíìíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñððñðñðñððññññðñññññòñòñòòñòòòòòóóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöõööööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿz tRNS@æØfbKGDˆH pHYs  šœJIDATÓc`E PÀzîÜ陇öíÞ±…uL”õìiM.6Nµ[Ö³._e=¥Á*kV°.˜5"Êz„‹MmçeŽ‹YgNšÐ eM©Û¸†Ín¶:+‚÷p²m^¿Z}ú4u îPeSZ!Ï&;½§»™À‚[6*²³±ËMìíl®¯€ ®Y½x‘Õô‰=íÍuåÙÁ•ËæÎžÖßÙÞTYš—•–\4{úľ޿ºŠ’¢Œ”˜0ˆàÌ©{@bŹ¢L‚aÁéý]mMRLâ"LüLþ>Ážî–:If &a& u/ˆ`G³4 “X†_ #¯D°I†E<;-.2ÄßLJÑ"XT–àáæd­n ,QG†ÁœÔ„È0_g[K3c}ˆ +7 ƒ:``†fO™ˆIEND®B`‚httpd-2.4.41/docs/icons/pie4.gif0000644000000000000500000000030110147723030014616 0ustar rootsrcGIF89a¡ÿÿÿÌÿÿ!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,@Œ©Ëí£4¢ÖX°· ­qò›(fˆ¦Hi¶.µ²íÇ2^Ÿ7]“Ír á €LîŽIä’©D1rROI„á0 ;httpd-2.4.41/docs/icons/continued.gif0000644000000000000500000000032610147723030015754 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™fff333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,IºÜþ0ÊI«½Ø•ÒvçJ!` ’Ëɉ€²î*´$;Êî;ß§0È£Ÿiä+ ƒ!pL™H%ô©8R§ËjvAØj3à°xL.+;httpd-2.4.41/docs/icons/text.gif0000644000000000000500000000034510147723030014751 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,X8º¼ñ0 @«#¾i;Ï×U"¸×qDëRÄÏ' »n·–à „š­ò Jn»(¬¤À<:{P¤ôÙ¼VEÚé÷Šín—Y2ºëü~ð¸O‘Ú ;httpd-2.4.41/docs/icons/portal.gif0000644000000000000500000000037610147723030015272 0ustar rootsrcGIF89aÂÿÿÿÿÌ3ÌÿÿÌÌÌÌ™3™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,qhº¼òP@«&¾i;Ï×U"¸‘rAeᾇÏ'eG®ïy Ü‚npxá|7B@x `H³y¨%$\Nè¤\[¼îó «^2Ö¦=[Õà-õØïâo…·£¯G€z€pƒ„7FŠF2|: ;httpd-2.4.41/docs/icons/pdf.png0000644000000000000500000000046010671421551014560 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™333U±3•tRNSÿå·0JbKGDˆH_IDAT[mÎÑ À EÑGu¬ PÑмýgjŒ¡)¥÷댈n5Á -%#µ„LvPêx‘ÌcŒÅÊ™õè/à(Õ×€aÆ´’Ó‰Ýw-ˆ|ý1Ö‚½ìô“BOnÌ;HEK2lVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/pdf.gif0000644000000000000500000000037110147723030014535 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,l8º¼ñ0 @«#¾IºïÀjÜç…U‰ØhºV&L w¾UÂ'¼¦eH{»š«h$$•D¤äeYòœS%l(ôL?.–EŒŽ&€zÝEÖìódU·ç¶-üïïå~]G…†F8ZZ ;httpd-2.4.41/docs/icons/icon.sheet.gif0000644000000000000500000002731110147723030016026 0ustar rootsrcGIF89aà „ÿÿÿÿÌ™ÿÌ3ÿ™™ÿffÿ33ÌÿÿÌÌÌÌ™3»»»™™ÿ™™™™f3™fˆˆˆfÌÿffÌffff3™fUUU333™Ì™3f™f33f!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,à ÿ !Ždižhª®lë¾p,Ïtmßx®ï|ïÿÀ pH,ȤrÉl:ŸÐ¨tJ­Ö6£ Ö¹uu _SXœgyfpy•.µE]-:…}Óâövý•ÆÇ¾vk3€dWƒ@Ey$…t^l‘|’”*Šj=z˜?Šš—›(ŸD¢†8¥naZ{¬Lr˜°­°`²p~[€ru´ƒ¹¹j®p±xº³ÂµkÀeÇ™´¶ÆÁ·ÃÕ·ÎlÐÀqÄÍ»µ©Â¼~ÓÜÞäWѲÚÖÒé6ç{ K­ÃУÓgÜŽóž±Ê¬ÜæîžÀS…øåó烙AyÏè«Æ…Cs¾ n"HFP¼ö-xè#Cfó(ÿ’¼ƒO_ª®È¥©1&"•Ñ…›éhçJŽ(‚£62g”à J›Ðè ¤öÜÙÜX“ÐC¡îxd’M¹$’M‰$”L8É£‘?N±ˆDf7£ÀÊ9êX%_}Uf–JX‰£“l"ᦚpžãxNP¦™Rb—V|¹šƒ‚Y炦9è¡mJ¹'ŸrÞH§ŒˆÞ8A˜>§[’(‚*ª•›a%˜=RÚ¨”¬T°««Â¨æ«´Âš„›—fZ+­} é)_U¬‹`[¨«È–‡"¡Š¢™¬­‘¹€¢Ê¾0'ÿ+Ì-Œ¹m2Otš"w ”Aµ—  nèʪ˜ZIm£Ôªh¬7N«E¹å¶Ëµ¨òÛ/¾tû¢ÀÓöê©¿|,¦PÀð0¦LÜ‚›< ¬1 ãè1Áo /ü~|Àƒœ2Á»<ð\F¤„É Ä@˺_\@ÆQ»¼-ˬ² 3êû•Ã0¾|«È&‹Z2Ájæ»t ¸bê­Öа%¸I˜ÌoÄnmQ_œ§ÚL‹j,ÕôRK÷Ô1êë0ª(Ã-ËwoûbÌyûmÊc§Ù„Ù D€vw¯´íuƆêÜ`O´¬á¤Þûò0ÿÞQïÛ¹n ]qæ¯t‘ø¼¯8îxÏ®Vþ”×Cã 9êrÛ{º©4Úͺç/²µÓ¥“Ìwá$gúûõF¿øì´“½8ƹ[O¼ÑH??„ çï½Fž\zÒ£ ^üæÉ“£óÃ#}½¥BÏ!¯Ëå™1ÑQ:ÊüÔPó_úˆ5I¡Ïp!“ý÷¿²ÍZ àNívÇÊQw`âÞø‚ (,-ïjî‹QÖú†5lÅxwÊÓñ@E XÚ‹‚¶¢4·’PsÂk ©&ºŠÐ„:äݼ¶B¶ðUü”.ç»áTì " ز QV@lŸú§EF¯IT"Ízg5ÿ)>ñ[Y¡ú:¦Æ2ЊS|£ív¢0б:ïS}ÐA$ÙŽgd`¯(G’I Лã­%ÈAÆQ€#Â&Y.Ÿ¡N’”D˜%M…ÉLòk“e[¤z4äIMF²”å"ŽxA!°²•Ax¥"EÙY¶Ž•´Ì¥.wÉË^úò—À ¦0‡IÌbó˜ÈL¦2—ÉÌf:ó™ÐŒ¦4§IÍjZóšØÌ¦6·ÉÍnzó›à §8ÇIÎršóœèL§:×ÉÎvºóðŒ§<çIÏzÚóžøÌ§>£“ê@Çfæñu`áXâ&µ&ÒÓœJ‚¡D‘3Qöôd½èS"ꚇÿT/|Êe0j˜~‚Ô¡cÑŽJQ:„Y6´¤‡ …-2Ówæ(í(ŽiT ×ät0âé©OË´$… ‡éÍ@„™o5¤(q B–‡šD1ŸkžÝüè?øµÎy>ôœÓ›Ñ=ï÷%_Õg#ÑvƒN:¸—Hf¡º‡tÊ!ndœUýq7ìôÖ5θ¼[çà;¿üNà:øˆìÉC¢])pµ[ºŽ´yå0@ùRt‡ôÙªGx}Þ\/ÎU¾÷ž^~Y€¯ÊQ6Ç纎ïÁ¯E}z$`àå¸/6b 9É®zƒÂúÁ÷ŒñÐ?[ÒŸ7~íQO•”­ñjŸ»—·=ù\þúØ¿<ï ä{´M°ómGèù¾cáËÒã·wù+W(Ñ‚M·L{ÒÙÎôz ·ÏýËw/s#‹iC´B&æÇÿs²sê·~Xc€ì3€0kïWÈâ*'wg™V9E‡€Jp{p.áC-Ö·}Â1ÿ§Gà÷=G¶¨k¤‚QÄ€—i°vd0ˆ¯}´â`90{ö·|ÐsjJ¦/™ç&x‚z–‚A¨m3HƒJh5çâ*W#"rIXFZ¸%\Ø4: xÓ'yVÈ„eètU’risg"˜u€††ò“…]8‡ZØ7m( ¤„J•tJz86mÒI¥´x@‡z(ˆßc9È„ˆJ†²$}bKf†K“xDñ×B Â`”x+/Ö"%ö‰ Š¢8ФXЦxЍ˜Šª¸Š¬ØŠÿ®øŠ°‹²8‹´X‹¶x‹¸˜‹º¸‹¼Ø‹¾ø‹ÀŒÂ8ŒÄXŒÆxŒÈ˜Œ·ÈzÜñOZ¦pAãÁŒÇÕÔÈB­PòCYÓyF]Þ8^sð§EdþÄR$åŒê(Yã-õQʎݘ/e†CTÐÕU:gEV«À»ÐU±á xvST4%^›Ñ MuzÀÎ7CÅaÙÕ6UU0Ñ þxKó5c5‘™Tüø\ÉøøÎ@X™e]Þø§¡’²5[´õŠ…ZÑZ0‰·åZÈå[±’¤PVó˜_¯e°¥[ÌuG Y€‘“©ÅÃ!””EÄ5,òpÿ…å”7)4)\-¹“Qá”Hù“ÎEQ=É|ˆ¡”¢”>–>±'•+©•]ÙÛ…\t9V͵·Xt‰“‘Z­µ\Qu–v†ÙRÉx¥Q–Õ”bv“} Y#I_çuU´…_[U˜ðð鑱—©¾qSº±V<ÅP»å^䓜K™9”fy]â5›Ó˜¨™¹^襚1µŽò8œõh–ÍÈ|Ç)CÿaçÈQ)õ èø…Â™‘2Ô`.%Ïà؉œ¼¡ŒÞùàžâ9žäYžæyžè™žê¹ž.æ‰ìôb#rb¹ˆ%’NBv‡h@F‹ôYŸç”(|eÿ[¦dªNähKÆdö‰F†âgeXfäEu§ˆ ª ÿ™p ê 6BuV‰ÉÁ&C Z,ø™ŸŸ–xQ6¢'Š? D”v3£2£þµ p£8z£V(3Öpë¶#!JN^˜&{ckãEAJ 3º¤`¤Ð“£PšNZ6Tör?šdضp\Úm›HH#'vž—FYú„®ÁL£hº¤÷¥nŠ£-·¸w¥Hp)ón334X˜>fZZx_zEN³~Î £m+µ8›¶t{@È„†ƒ'w*±Š+¤oÈ´õw¶€›¶UK`l›³•«h4B‡]Ø7s„·)ú¸}‹‚¢K¶‰ ¦‹šºhººª[¸“¸q¸¹[8»[b‡*†Zº1|kº‰à¨À¼iS6Á[¼óêºÞ%K {‹ˆµQæ±™„¼< ½”$½wЉ‰X6/¶Ó‹½Ë‹S¡¯t‰J¾_d¾Éʞ껾ìÛ¾îû¾ð¿ò;¿ô[¿ö{¿ø›¿ú»¿üÛ¿þû¿ÿÀ<À\À|ÀœÀ ¼À ÌXb¦YÚˆPìŽÜ ÿTÁé˜Á¢•›#5_ÜŸ@¥`רœvuÁ#LóíüTKè(˜ÃÉ ôœ Ux8 U ‘Pš¹;©Zw%UAÂ>üii3©I\]Y“ ’·‘ÅyMl&éU&úHÅÍõSUŒ™W5U1ÅUˆ0ļŵĤé~LÁ–†ÀY¦ ^•ÙX’ðX}嘉É_|lÇs\SuYÈ[¹TSéÇléW@©Tr%˜#±Ëõ”ñE…¹Í÷Ç:éZáUÇSÉuìÇaÉ›3YWƒù–ji—ÿp œÅ•õ¥Ê,—L‰U‹õÉ3·Yö5Ë€˜¼…›†\ÊâžYË-ÊÇZAÌ&EÇ_9È`Y\Ê£U«lÊ€ìËý”Ëö(Ì¿%”Ö¼Q¥Ë˜<ɽ|”Ô\΂9ÍâlZù˜z,P¶)]E¼›ÜÅÊRϾyÆ®ÉÃyÏW Ðà ·y›ÝÀ]\К‰•¶Ü1Ä - ÀA“ýÌ=š¨ÙÏ“PÌyÌ­_Î1Á\7CÃA =L”7üŽîXK;*,Á,´–0XjƒT3mÁä˜ ÆÀ@ÔB=ÔD]ÔF}ÔHÔJ½Ô4ÓbN ?P­?ñYÿßêžõ”´""/”cG¶ŸYK`Öb=0´±ò­Kö½ß´aÍœÒ!a„¥]m¡_-ÖvMÖedhd€²ÓÞÖnÝÔ%²ÕrýeZ§v}×ê’×s{ ¡²ŒØ¡p†Fh—¾"q}»†}ؽšØc½ØŒM:½f ʲÀ²¨”ý¯‡v°º¸³"žBØž iÏ’¸¢ÝÖûÓµ’¶×/ZLêÖ÷Š­eÙ'ÜÐú­È"ÝØJ¦Ù?0» Øá{„Ž ´ jfiŠ®¯ÀÚµôÚ¯°¦×ú­MzÒµM¡­Z¨C@ÝÕ ÖúóÛÚ]nìíJƒ»±÷=£Æ-Ü‘ê×ÿ™€ÜôG`‹Z¼`Þû­Ã¾bÕ\¦» îýÞð6g=ßôÝà/0ÜòꨃÅÚ¬=KÔ;-¯o»Ü“£¶ÛˆDSdº«ÛÖü³-{ͬFÀ¦äݤÒíJ4ªºþí2¦ç» ¯n½PÕ*Ïý¹¥ ä=ðà-þâ;ã[lº±3Z£9Žº PذfBîB^â™ëÔbG=]¶+®LáN~EPŽ»GФ6^ã«{àçªßøqæ®h›¦Cnã{†QNiþÞk>Em>ºB ¦Šºø*CW¾¦äMçTkÞR_Ž1&î9ènÚ-ßò1‹p~­¾_ÿ8+çXŽ|TÆ£•Žã$Ž1Q‹r[¾MK}hþé >á¢î²G©KZãV«jjqÛå‡qéC“éGð¦N›ëº^èmwèJN¦>Ù2Œ¯5ŽºÆ^w2¾Ê>³ž¯cª·N†uýéÔNºÙÝëá.àŒ~ÞËQå’=Üùvì{ΤßÊìJpî7~~g¾îMê"ëë#>à’ÎÃÝíß.ƒ¯KX®º>9å.„ÕÃ'ºÈ΃^ÝíŽÝÖÞñE¾ãŠZåÂ>g9Ôéf¼ ÐïÃë¶Ó»$¯¿Û!oæï~ðñ>!ùMÞ3Ÿä5Ï$RÕÙûÂxµDîàQÝôx²ôÖ"IÿßZ½­-Ã{¯ŸunJçJ-ñ½­"‰¥j‰“øõß ù ÞH¨LÝönÿöp÷r?÷t_÷v÷xŸ÷z¿÷|ß÷~ÿ÷€ø‚?ø„_ø†øˆŸø?TÂ&ìÄ ÁO›lÒü…};~ˤåøñÈ_’ßÁ¡ß_Lœ‹PúÍLÒÿ•ë8Ï(Ç oœ©?0L`¯ SkìÃ&åÆi¹_öxT)¬Ä—9WOu˜ÁEÈàÂû •Ð)ü²ù™Fuü¯ùÐ~übý?÷¿ úú HŒÁƒ~2+¨ð!Ĉ'R¬hñ"ÆŒ7rìèñ#È"Gÿ’,iò$Ê”*W²léò%̘2gÒ¬ió&Μ:wòìéó'РB‡-jô(R4–2mÊ£Ó¨K¡JuJµêÓ¤N°6Ÿã+Ø ¹fµXÚ´jÏV¸xV-\¶náÆÐÖ,ݵvµy›×î^‹»ƒð†»ýæ•‹÷/àÀÓ}«x"庒1CŽ|ù#Ãp™õn–8¸p„ÔªS8˜3dËÿúý qtÚÚq£Õ=¹·ÓÞ¹CнÝÙ÷Ä0o¾ õ Ûßî ]ÚxìÚ ˆÜû7Ú âÇO`,}úñµà+ðà½ðáËìN/ß4âåΙ·F|¾uÕÅ÷gÛÿi7Ak$¶ lL`` *¨`ƒyIÈ D–¹÷Þh]H!G;ÌÙ‡¡’ß~ü¹ö=B—V‰Bˆ`X >h`v–ãb½qt_…(âl‚•Ü úíäk:¾xŒGêa¢åœ‰˜øõ —UV‰e…8—˜NVÀšhªUfFRÖ×™˜Íe)‰kJ޹"l_°çžlb·Ý^Ð]œ ÌYo|z¨~- `tÏ- Û™i2 è¤mº ¦Ê™Š)öW‹ï¥§Ì1ÚÆY€îy@ „йªR|bŧ¡°ZÁï=º¤³†Ù©¢¹zÅ#§˜>ˆ©± Hì¥ÿ²ã"±¸ÒúÅYdw° úÖÍ·g‚šëèµ^XVÁï-eí°Õ {‘aé²ZíÅÚË bõâé$ªòŠûP¶â jîÙj0ðX¶",(¼:Úëžîº } 3 VÄ‚6b§7Ð1Du®¦Ú¨Möø"ŸÏ2ŒŸ'|€ ïûDm ë\.ºœ _»‰9u³‰2KôÈr&2•#Ïël’)>m¼Õ¾LyGP5_  ¼ž"]ô¬írì~cÓpjX${,$^L7ýtÉ¡.ùïÊþº­ñ«åºu×^«]ƒ_~øá{£7±Ù†*uØGo´éÒMH÷CuJ²´éÿ­o˜4¸à j@zà(¹]ì¶ûnŸƒ¯­èÈÇ>dÆK“7Þå˜+¤ÜæT\ïê`K3é6›ŽzàÅ·;¯¾*ì×ÏGî<’ÅŒovVú~æ¢â=îõß³Ž)òÉWo*Ÿ§»_sÍØO‹+¤'𠺓{Ö®çíåž¿²ª„?gÙíNþÉñú·2Eqˆ[ßüÊg>ãáª9b«± ˆ$)Ë{ ,Ù ä%¼^Oƒæøœü<'Á Z¯|&$ ?"Fî…áp¿ÀÊnK‘šÔ@´^q?B¼ ‹Øœ#,‰Jü_|èD%2ñwýª—‡øÄ%öÐþ‚[ÿö¾¨=‚ˆ‘Hac½XÆ.¶€,Q©ÈǘÆ9Ò±Žv¼#ó¨Ç=ò±~ü# )ÈA²†<$"©ÈE2²‘Ž|$$#)ÉIR²’–¼$&3©ÉMr²“žü$(C)ÊQ’²”¦<%*S©ÊU²²•®|%,c)ËYÒ²–¶¼%.s©Ë]Σ—r,0ÀŒÌä<øå(¤¡LdÓÆ&=ñ¿90“N½f)úA0Ò!›%ÃfC¢Y xåä¤2Ù¸‡s$ÇœàÜàÔÉ‹kÞP¸FîRqŒhÐ'öÐç4ë9‹uúéȆ7Ç Ðj&m Ý,è>óa„„þb¡öBh0+ÿÑ€Žb¢Á,†EŠ K” ã´f(¨ qÆ€Çt;Ö Dl£2•‚J¡aÓ1à´—ÈOWjÒyò3¨¨ÈéOoX Wl¦q*Rk 1ès:}jKûÙÍ«5«õ©T»š…|Òô¤bU?µ*T¥zu /]ëNSjÕ²Ur¥ëØnJM¼Æ4¨Šà«H[úW°š‚Ý«%ÂjØf¼3e,8 {Ú3›ƒ¸?)늪æÕ£Ùð,f%:‹·ê‚«ØíQŸ‘T›¢Ö¥]-@Z‹ˆc(¶££}ÅmkÛLÃNµ ]Ì’Ú€ ¾d’‘¸Ú4.KQzÜÌÖc!¦¡ÓàBÃÐÿÝ&íwеn;¢{]^r·»Þý.xÃ+Þñ’·¼æ=/zÓ«Þõ²·½î}¯©Üx®À·¾µ~ó›_ǼI¿úå¯}L6ÿþ¿cŸa<#àŽÀ6p}Œ/8Qæáª ta WØÁùQþ8âcq”^fô߉q7ÝÌ¥xr-ÆàÆV t­`j”C’e\ à—›Çêñ‹áÈã È%6Í}¼Cûi{Îo“Módy‚A¿7F§••Œåk99Y²”¹ f˜áAfÖï§t”`(«J0Oî±Wr\*¿@Î].™Çü»<||ÖñŒËL€ ºÐ´a7βf4SÿyÈon›óüáHùÎ~þ3 ùIàÁqÓÓB-jQ3š3cY©·üh:;ZÌV¦´˜-MFO_9s´–µ6o­gö‰gÔ¢”Õ©è¶ùÑ6}ô«½ìéM«ºÒ¸Ž©ƒëÕìX?û ÑæôÊ|=êT÷Èq;V°§ýfy¶úÃÑwŒû m]ïzݘÎô'®ýiÈõZÛÀƯ±l|“{ßpVö¾ûÍnu[{à𦓼k=kƒ ¿Ú&u¸ÕLln;Ëß8²pt§[ãÎnwÁ?r:ˆÐöö^¾—1lÛQÏþöøª9~nŒcÝÒ¦ùaóðP·œoO*7 sqXO™èÿfõ”GrjÜÝ9‡ ¡£nèž“ùçN¹¦‡Þi­Ë<Ù]W:< i4VèÌä7Œ‹ôqÇ™íôŠùÛ“Þv¦ÓYþê/²±®%‹ë=ë3Ÿ;³ÛTtÁ]#­V8Ôn>™)±ŠÓa<599Ë•çòå\ùjÿÛo+£×hx°³¸é‰?xLIßyÓƒõ~=ìc/ûÙÓ¾ö¶¿=îs¯ûÝó¾÷¾ÿ=ðƒ/üá¿øÆ?>ò“¯üå3¿ùÎ>ô£/ýéS¿úÖ¿>ö³ß{>“¢ufqމ4ijOüþ[¦ìÌ_Î#D6¯ïŒ'4gèˋڢœì|naó?Ü÷ó»“«ÿ«þ%WÖ]àC`ÔW©Z]h=ÔF¡žêAÑVD 4•* -¸^frà'(d}  “j}$l` zÓ² Im“ &„^a`90–J%V¶ƒQ¹–Ú JÅiédÝ #áþåû!¡DÁS Uº–gù•[9•oQÕ.ä\a!öU[iá>ÖPáÔZ¡ &¡IáÆ%dàkéÖAáB3¬"Ñ "f )V—e9“!ü-ò u}0.—r V±üÙß8 Ó2¦Ä¡H—ve—ÿùV4Æ–0:D›è¢Ù† ö}#8†£8Ž#9–£9ž#:¦£:®#;š£X‹È—[Èc;ò„…] €ÁØ>ÖãMÜ#>n„AÞé£ÕOÝuc<`íd@¢Ç@$?ÚÅ (€à †~òÕ†Tü†%mØ’ýWEBÀEjŠBVaFßíCj“êÏL’œ¥Èˆ‘ˆM†äc–) dFf×PbC·´dš¹˜‘%t-åJâçE]xÿ›â‘UÚXT&ÚÑeP^äKfVLÆ¢KÊÉS^VÖÃÇ^Uæ¯l¬@aDYÕy˜\ž•q¥xåWžVMÔôȉäáâužÈ‘ØÝq ¯ €¼å`ðXR‡ã ¸=¦“ÝeW^$ÚfXÎ`F Ú,ÑÖ‰«…Snf‚^ƒ´%c6fÄõH=Kk’Oá%ff¦‰ ¦] ÍR Y]^šh~žHâf4‰^jzÛ[Fl $Aɩ٦lnm¶Ú^Ú–p²µEÚØœçµÞœmgéçµåa8Útb “xÛÕ5œE§Ú©duJe‚´$ãÁ\išæ)Æ:Å‘zN¥[Âÿ%y6zž¸9geB'JÖ&Õ!Ù{Â'°,…èŒIy6xžj*è„V¦xúgrúÜ£EèXPæ%ÐÝêõ%70Æ`0Çñ‰¦~žÙYh…’O†ç¦]‚tB ]vã‚ZgU€Kц–èŒrç‘~g’’™¶dKÞhIö(gT€ÜÏ“yè}2å½|Ø£©•(’f~.©’Šé%P‹žß5\b hzºçF h¸ti{ŽiŒÂèZR¨™Êf‡îgÞ±©›¾)‰qc\֩橌zç¢ÎÛ\¾–âÌššÚ¾Eªsª9© †£â©‰Šb§r(¤úiŸâh‘âÿ¦ú›¥r££zjY†êX@^ ›¬¦H`Æã©èSj­‘Bž¥‘‚°º(™Òä…†éžF‘~ú#³6«³>+´F«´N+µV«µ^+¶f«¶n+·v«·~+¸†«¸Ž+¹–«¹ž+º¦«º®+»¶ë¹r”ú!cz`;å_¼&aùÅo]áü!WCõ+1jé1 ¬]Ù`ŃzŸ2“ö_0îC&D¢8¸C@̉ûEl2NÖ.º¢ò¢AâÆ. ’ઘBbi–;…È~ˆ_J# ^ ¦l V×̺ +–ʶ¢ j`ÌÂäÏŠ,Ì-2ªŸ&,aTå¢/ÒlÇ2"¿~ÿ¡d½l"ú’Zá?b8I-”ÕÂÖ2]-ZyíÒ²âlq²TÒV”ÖböàVm8 âÓVm#píJ}-,JC$8Ö6µm2ömUáÖ.6 nÉßBíáª`©­ãª!ãV"b]âIQâ9ÐmI¥íSõ-ÖÆíÞ¾çJ"è2-Œî¦¢áš ØN 4­®OYîã6b!æ®,>ñ¢3ˆÈ/ânâV .š-Ä&gù -Ú-6fTñÒïB”ðúƒkå–îjáòÞCô.• ¬BóRàó¾b/rop9o.ô.J¤Æ:#I\ËøIì5×Iìê¥Ncò¾/üzQoÅâ1j,‹Ñÿ¯»ö¯ÿþ/°0°põ½ã|a…ñ)ð<’ÅWT¼Y?údÁãÙ§MÜ#«Ð“U0ŸúW¦ƒÉFAаDvÄed‡°ŽPdÛ¤œ)Ø ?X ‹ïW ï—£˜°ðŠ@Øœj„CÞð‰vœw(±¾yØ„Y0÷pˆµÆƒ¥°W ±aª†ÓË„q„ qS±k¶ IJ±d…HN:ÿ$È…ÞÔ´ s1§ª†¡ª : @÷tc¢¼±¨> OÞªuÚ!“™£!g«érfÙÿ0 à1’èñW81?…ñr•à ÿè{ÿ¸=2|\ž¥K~&ejLãÛ+i°ŒÀ ñƒ˜Xì1Æp26 òxˆržI ›Â¦,·ÙðÀfo>9©œdgè,“Ñ’L çr.§n~ñb¨J0ˆ€‚&m@²++³kZ15«s3™;+çXªJ:“ê¨&G Bš6ãr%sjVxó¸lÀv 3”ž©ƒòÔ3¥’&“©§Þ€)Dþ¥ªHt<²”šF>À>À6 YY/#JuO•$tÀ¬ê€™óA#´+ï§€^©=Ãtž $E§©M>´MßPFs4?ó´‰Ù@(yl@Bç¨õt8s3éŸ"Т¡ÿtø…nÖtNk¥ªª°ÞFwt~*Æ&·±I7'T7Xk„s ·´©%†5gU/ñU7È&[D³Nµ < ^Kuû4W#É]@‰ã„t£H¢ô@‹Ç8·u -Ú©ê(šÚµ}X“âõdÆôE˨èP²gs?wµ ÌJPó u"“4b¿´b«\–Ét”64\wéƒ6?6•5Å`(š%ç6&+é_µ“̳sÈ d·Ñ‡ uBSÏ1³\c·P}.7$Ï)ìv*ß3TÜ6Ür~‚¶WG‡`oéQ.@¸„·t{p…uV;÷üØÏZÝp“@ ¥¶(ø/Ë z{p]+¤‚pÿä^ç¶—yÛetE…8)aÈ6‡~?*kçãĵ·jKºvkojuÛr%ïv™v·[WªeC¸K8 —j„¸]‚8¯pg‡ÑTÄ餆øx«é[³x}ŸP¯:"OËŒsxœÞ¸®bCQ†üx{Ž7Ú‹º**›Ò²&êÓ!9)ƒê"°”O9•W¹•_9–g¹–o9—w¹—9˜‡¹˜9™—¹™Ÿ9š§¹š¯9›·¹›¿yüžo¦Õ¢¾òÁ£ÃÞë84¬/®/ä«ÂN’‰ :û‚aûªD÷ÑÓÝVÃù  *:% ¢âgéÉbìÇjÒ.•[Ý,;}lÑ‚ºûÞÿ‚ñîl¥lÏâ V–Šº"vía‘U¨W %ílëªz òƒç®m6ÕäN-ìÆÕüÞöÎ"¬{év¯å !Ö–mý+,ïñú!ç~: â!æíêû䲕Š _m¯¶×²?¢¯Ïîâàønn&n((û$.»®_-¯¿Sa®·#¯°¢KÝz¼Ã)à{êÞ.8ð:éæ:'ùañ²:÷z¯ð6å[>-±‹ôy~}ÕãoF`gÛ$ùA•~éÛ½ï÷~ê;ËÁÌê¯þ¸¾,1ÆRÓ5C[Esêíç]5“Ä<¾ï_?·`µ ô=ñëýdƒ'’±Y_GéU>?ŒNpç£úkÓÜ÷¾õc üßw?ë‡ÿKäÿåÛQ÷€ÿÿ?LEa”扦êÊVÀ /ÛL¿2‹çzJ÷Û ž\¾Ìö*W›Ëëâ|:§( ¹Ìš‡´ë½x½‹Læ¦M«×ì¶{T˜_¢‘{é:Ê| ä][Ôó§D´1w€6˜Ó$õ$E…µ¨ÂÖ%uv6Iù zGZJ*º’SÔç‡ÊèóªRXt¨8»5µ å{•«{ù…ÙuV†¬¼ jê\º¬úÒÓã[Äì²çs{ÚdõHþ *ž9V|pÜÉ ÿW÷l:=×ó Ÿˆˆ(Ù+qG"óuáÜ'q`4}AV&ƒBy+æ 7!£ÆŒpîôý8GàÀ~þ‚IéJÁ*½ Fš¸˜ºMfj´ˆ3g‰:ræð„wR_È›:gD)2¤^L«´12 J,Š5ëÎ8‡Dxܖψž§Z?™Ti•(,É‘…*õ@Õcß–½+*cׯ`‹·/Jkül™ß܈fª2¶8òŸ³i_XYò¢Ë!ß™ÁÖeBÏŸ7Эi“´æÕZ(«nÃykT±‡RœAîÊë?3W1;8í ŽWؽ¦ñâÌ‹Jyóé žWÔV;ôí KÊ#)‹{wðÀÅ›?>½úõìÛ»?¾üù¨B;httpd-2.4.41/docs/icons/tex.png0000644000000000000500000000046610671421551014615 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™333U±3•tRNSÿå·0JbKGDˆHeIDAT[mŽÁ À ÄN dƒªb À#ûÏÔ 4-úe6©ªŠ"j‚êjD Ÿr^Aê½S³H<™ÁŽ+SÇ b©¯€+؆.\­ˆ…’Ò{m[·v{áWÛµà'Õô¦€¡)—cVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/right.png0000644000000000000500000000037610671421551015132 0ustar rootsrc‰PNG  IHDR½/T• PLTEÿÿÿÌÿÿ ¶ïtRNSÿå·0JbKGDˆH3IDAT[c( &£ äT0¹L®“« äT0¹L®D"—"É"éZŠd’-{e+£8:VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/pie8.gif0000644000000000000500000000025510147723030014632 0ustar rootsrcGIF89a¡ÿÿÿÌÿÿ!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,,Œ©Ëí£4¢Öhómº³*à˜Œáa’Tê­l†¾°+ Hmßµø~©cÂÌ;httpd-2.4.41/docs/icons/pie0.gif0000644000000000000500000000027410147723030014623 0ustar rootsrcGIF89a¡ÿÿÿÌÿÿ!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,;Œ©Ëí£4¢ÖXÖ·‰ r̆‚B–f’ªÛy´îÏ%È6®Ï¼½ª8ʈ=‘GÖyX¢‰;httpd-2.4.41/docs/icons/pie0.png0000644000000000000500000000040310671421551014641 0ustar rootsrc‰PNG  IHDR½/T• PLTEÿÿÿÌÿÿ ¶ïtRNSÿå·0JbKGDˆH8IDAT[cœdØ*™Á°H60p†2„100…2D000L…’ @R'‰¬¢bÔLùHÇso(ÆVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/continued.png0000644000000000000500000000045010671421551015776 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™fff333ž‹šçtRNSÿå·0JbKGDˆHTIDAT™­Î± À CQ‹ ,A]Ä …îû¯WLÀožKƒ;˜‹,NbΨÔr%ˆ¤i.ÖŠÝ.0ž™¿Öòê“|ÉÜ)N<Ûýç@C9®øVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/apache_pb.png0000644000000000000500000002273312033030440015703 0ustar rootsrc‰PNG  IHDRÊ2`CsBIT|dˆ pHYs++–#W°tEXtSoftwarewww.inkscape.org›î< IDATxœíw|ÔUºÿ?çûïôžI™ÔI!@è(‚ qÕU Ê*E\ÑU]¼.Ëúsõ®{ÕëϺ*͵£(*.WdEŠ”JÒë¤Mf&ÓÛ·œß‘½dÕû»y¿^ó"sžSž9ç;Ï<ç9B)ÅÏ…'žx"ßét^ ÃHƒ¡+77w×üùóûjÝÎ7ß|ó‡ÕÕÕÓG½gÆ 7 –/Z´èñƒ.ÉËËs|ôÑGc Gøß‹ì\ N˜>=»lÏž¦ó©ŒÓé¼äùçŸùø{™L†ŒŒ ç§Ÿ~úÒûï¿ÿØùlë§¢££ƒ­ªªJÒëõìpr—Ë…ªªª$–eý?¶n#ŒÀBLgS`ê¬Y¶o¼±pòÔ ®ýW)¥Ñh0cÆŒÏ333íMMM–-[¶¬\ºtéuÃd%ç¹é3­o¸|ßW–!äl]²óýGá”0æBöBn'„œöá»uñÒK/¿z8uvj’uö­Kï¾¹tÊ”ÒóŒ%D3‹h“~ˆRZ­?üð¢åË——¦§§÷ƒA®££cæqù¢E‹~;yòä½ÅÅÅí“&MÚûí·/€7Þx#û²Ë.«œ8qbŪU«.€ <[ZZZ1cÆŒCÏ?ÿ|>Ì›7ïÕÒÒÒŠÛo¿ýøãÿ8zÖ¬YŸŒ3¦¡¤¤¤~öìÙ~ÿûßo鍊nÚrñÅ—=ùä“WN:uϸqãz^~ùå©pï½÷þrúôé;‹‹‹Û&L˜pdîܹ/=÷ÜsÆãez衉ßÉ;f̘ñybb¢âLú@&“…¯¿þúW‹ŠŠZÇhÉ’% `áÂ…/”––V\wÝu_Ï»páÂ_—––V\tÑE•/¼ðBé©ka„Ó#klll}òÉ'{Ö¯_ÿï”Òe„Mž£”Fgæª,“1îú¾îî·#ŒXaËzþ¿½ï‚¹$5îz6nµ ‘¤—˜â‘ Æ/˜‚ÚÊ&nƒïij&>ŸJ >ÙÙ¹…žEÐ"..ίR©BL’$¸õÖ[Þ¸qã_xžGrrr¸««+õСC“xž—¿ûî»yñÅ™òòò1999SlkllœÚÖÖVìr¹dEEE—¨khh¸èðáÃ999{å•WL›6mú¤ºº:§¨¨¨C„ð¶mÛnr»Ý¹ãÆ›:oÞ¼Xcc£µ¢¢bœÇãY]YY™"—Ë‹Åd+V¬˜þÁ¼ãñx4ÅÅÅ5N§ÓR^^~O86?ðÀó¿þúkÙ—_~¹öСCcd2’““ÍMMg6ËêééɱÛíy‚ Àår¥wvv¾´jÕªæ`eeåoêêê¤?þñÓÿô§?íinnžUQQ1n„ •÷Ýw_ù™öï# †ÉÎÎÞ»bÅ ç¦M›ø¬¬¬$O¨$„ùÄèp8 gÏž]%—ËÑÚÚZðÌ3ÏŒiooÏ5™L|iié;v츧ºº:gôèÑ=>øà˜åË—O(((h)//¿k×®›OÔ«»»[uë­·þ~ùòå7ëõúêÜÛ××§™:uêÎk®¹¦xþüù× þèÑ£×½÷Þ{‰›7o¾áÈ‘#cd2–-[öï÷ÜsOŽÙln=“ñù|ò ܸxñâkl6›Ûápè:tÛE]ô~aaaC0dª««/Û¸q#ëv»'@JJÊös|FÀwAż¼¼%üûßÿ¾ü¹çžó}ðÁiçA7B¶xŠRZÿùÖí‘´ì\š’;z‚¿ßI¤X”~ñÅ5P'=\Á24!"OßgciQkDwÐÀÓd(5‰‘°fk""…¥M+H™ûTÁÚÛ¢²²{4qÝʋḲ …Õí*±Y¸òâ0X{ýõ×W€Z­.¿üò·_yå•w6nܘùâ‹/f€ÕjÝþë_ÿºµ¶¶ö óÛÛÛmN§³8;;ûàöíÛy½Þ½{÷ÎniiÑOœ8q[fffºÇã)¬ªªº¤¿¿Ÿ7nÜá+VÔÍœ93"‘}õÕW7@8VQJÑÕÕ•vbg}úöÛo?yüý_ÿú×|ðz½ÖÏ?ÿü à8NêêêRÖÖÖNêììL—$ ÁÉ“'ÿçüùóû¿øâ‹ÝF}ßÀØl¶®§Ÿ~ú3عsgCkkëd¿ßo›7o^ìõ×_ßZ]]ÛÝÝ=¥²²rv}}}†Ñhä'NœøázFø_sü¼¼¼ÿ”Ëå³|ðÁò>ø@}á…Æ†I°À·„šëªãï]tÛž¶†Z¸]n„~š’’Rìæâl]©q¤]P"Ö¯$vF‡>‹~99%£ÒKÕäË¢xzAX]$¨ãö„s8”äF—yj–S¶ÐØEožXÞú èõzÌ™3çík¯½öñ»îºkîǼúúú,¡PH:Î ƒÁ%“ɇ‰ÛíN4iÒæ””” ÝnÏöù|RJ‘pÌ`0Ôù|¾<§ÓY&“éð>>:qâă¡¦­­-E£ÑŒ€ÜÜÜ ×ëÛ 55µ¾²²²èÄ׺uëþ|bÿ°,{RÐU¡PØ ##ã¿—}ôÑG7ÇÅÅ9¾ÓÕºzõê"ˆD"Ég20>Ÿ/~õêÕ„çùLÐh4xôÑG¿)**ÚßÚÚjEñ °Ùl#Ó…~0ÃíC ùùùÿÑÒÒ²áúë¯ÿ¿7ÜpÃÅeee† 6H{öìa].פ—^zipãȳÏ>›åÌèq3"§6±¢€ÙÀ¢£G„–‰!Hx5>šÙ%¢‹ÑB"èÔha뉢‡¨Ë”aRKN™ õfÕ?•èl„"¡YÏÿí°*|çEÓ͇•ï­tÙ¬}õõõæo¿ývÙ•W^™USSs dggï¼îºë`±XRJ§íÞ½;'==½nÁ‚-Û·o?ÈÑ£G l6›oÊ”)ÀèÑ£·ìÝ»÷ÎòòòiW]uÕëf³¹2 ÆËåò™7ÝtÓÕ×^{­çT—““óeYYÙŒ²²²ùsçÎ ètºv·Ûm3™o½õÖÜœœœ¯âããý}}}ºõëׯݼysYUUÕg20­­­ºwÞyçÝwß}—?tèP6Ã0ÈÈÈøö¸Üf³}¾ÿþé;vìÈLLL Mš4iÙ ù#œšSnLÊÌÌl0·¶¶¶xüøñ”––Îòù|™ëׯǎ;" ©­MvìHåÃù–IB’0 Ú¨Yb¡a~%ï&rŽ˜{ÀÙµTg“ˆ«IB”Q 3C‹Ä6:$. ¤èdœ† ±ÿöÐûåFKDŽ/SIlÇ“ƒô¢ª]ORM²¢p<}¯¦"¡³³óW0f̘ªâââ•ÇËæççïÛºuëýõõõš3f€‚‚‚}†;vL7eÊ”¯î¸ã<óÌ3_´µµýeçοݲeË’§B¡N×yK—.ýs0µcÇŽë?þøã‡Ž§Ïš5k<òÈ#5eeeë>ûì³û÷ïß?Él6Í™3gï;ï¼sé÷ Ì´iÓö566–vuu™¿«sÛe—]öî ò·víÚõ»®®.ÃÌ™3w>ðÀǾ¯ÎFø>È÷­Bä%Ófü>)5mL‚%q¼ßïOtvu(,&#qtۥÇI@@ êt)×2žáx]LïÏ’‹xx«Ð%û$maXƇ°V½…šòˆåG‘\'BEyÀF¾;УɂLIÇh‰‹àŠv/b4†Ãii\gˆÙŸÅŬÉ21–bPítøúÍ~kwÙY™ÐSÇÅŽ¾uvÁ’ßÔvttÜ.5 åÏ=÷Ü~äž{î¹; A«ÕÖ¾øâ‹;Nüœ?þxqkkë ŸÏ¯Ñh¼ùùù_<òÈ#5pÿý÷/ðù|ºøøøÃO=õÔžÁ}´jÕª‹[[[KÂá°Áb±tOž<ù£… ö—?ðÀó:;;s333÷$''×>|ø:FÓþÒK/ý}p]Ë—/ŸÔßß?Ál6«×ëiMMÍN×7vìØ·~ó›ßœ´§5Kî{p\j†í%ð|=…ôKpJaå +—Ñ’ kkÿSÖ;›3|fEU:CE§‘Ô»Ñ/ôñ5}‡·×É@‚&CÊŠ+f8I ƒ7,•ƒMëß©¥ŒÄ‘¬¬^$4ÅЯ€ÆAÁD‘kô"³;ˆ†DέF ),þ¢ÃÍ9*KOfr=èR¥D#ËK1|–láKŽ8ÙĈÈ8d¢Ô¨gû U¨XC†¸TRï” SvŸJâ÷4¸;ÂîØVm"Wõ‰Ï¹oCM_¥4ð£õú`ÅŠ7­Y³fƒ×ë˲¸å–[î~óÍ7_ý©õáÿN{¸ÉÙÛ5Ó–œØ¢ÑnÔ™-D¥RÅ‚?Ë€°y9Yí]äiÓdY®.„ˆ^JXk‚.Jº Yq©§ªi#ß(6ö×’}íÞ±R¦F–y t!3 l6eõénÓщϬC̯Gjv/¢uJ´3õj=þ 4©_b]Toó­LrMGUrZ à™ÜŽ Þ/Œ=–SI‰¿gɤ,¿ÈLp…9I«<–m‡:UŒeeƒÙÝ‚ê"k¯RšËŠ˜úr2Ÿ|bê(íó79䔸÷Ž­ÿ²¢÷ëݵ}?ËÃE …¢/;;{¿N§³çåå}óÚk¯ƒÎ§õêëëç0 seÙ¡£©*ƒñ [‚µm]’š¥\Ý'[o]¼n×eÙf:®5@våY¢EÍ!EY†>–b‡üë8"¨C%²öÔ iW³.s;xEX:檤͎FV’$]"Òô…1£2QN‚*‰ ™t]Œš<„x3#ðµÆ#3£ £›Cè6òð†ÍÔÀSb´öaZ»Gâ9ÊtÄåq,W†ÒÆt¢D´)0¥=» bk‚•·xÈ´=]ÞàTª%å%zÕÆäS“ÕÊj‘÷ï>$51=¢\$õÕZØtÈÙö⛇[~´QáÇ…Äë…ˆJ€<¨ý  C¶îÿoà´¥´™çù×}~Ï¢Äxs@¥R½ÙÑÚ4ó—]ÒøÔÚ·÷/dÓ©JD­“©øˆ” À"rRB“¨’qD€“Ñ'DY+ *ªa’¬™¸@.À§éC‹¿Vjéo •;äß5Éh•´Fó„´ÄLNŒH`e,µvrhc ¤%^ ±YIzM]˜ÓI`'jÔ(âIB?P•+ ·1ÕÁÅÆÐœÅaRSûLÞ®LàlíaÓ)DeœŽÛäRvk”bg¼œ¹´²_Ot,^rªcgŠÆŒ–(å.pW–ä^ñÍþ¾_ì§÷$EŒÑŠèB?ãë¬ýÆfËL<ð1Œƒeøv ÅÝg[ç:‚—L?u(¼è!@/:Dàã¥g$ž¬›à5 {²“¼ºhÝ9è7¨š- » W4 fqL€ŒD |$€Xû´´@5@öÊ} -C7–'ÛX¥®G}á¬õ,%+A1oPj*è•Cò>Aþ‚3ZÆ>CŽœÖ äçç×Çq I’âóòòÝÒòŒL&+ßEÝí_®xÈýê ší#àDJI€ ¢däC0…x˜Z 2"+AN¿;äÇШÒgP(}Äg%1B—ÕÞÊI´+Ô&¶yÑà*çêœ2ÈI½!CÌ1å°1·JÒ“™,½Ýnê3€hWMƒìFÛ“T±N1Ažèˆ¡ÆÄKI #ki÷£Î¨ eK[Ãð3žNËÇ1{¶Ü(ñÉtnV˜Œë&¿½]-l°¤˜i,ÅÀEáÒúÓ ÉØÇ®½ºCˆíZû_ •çq0NËcLx '§ÀØÅ ë(ž=›z Msºˆåø·÷¸ÉO¯#Ø-Ëï¤8xf•¼špH>ý+ÈÚjÐ%ûÎ^AÂÖÅ€tÀΨüdÍOKüÀ‹Løï¤H€r˜¼E¥Ñ´!P¤aèx ù؆É{îDÎè‚”œœœýÇŽûädeíU(_@Ú’¥Ÿ×•_îüü=³ØcF‰ŒœJÈô ·F&¸0ž UOD]@Ë6‚•Œ4,ºx‰JZNÓñ‰ÝN«RȦaœˆJÑ.¶xêi—ÃζÛ€ïvVjš—Eô¼j³Läd¥T*3ˆQc„¡Ø‘‰õ»¬ræà·ÓTÞÀÄz#¨SIÚX”㔡UãíüÔ¶fP~ÎEš2¶Â?çä ©m*EF³-ˆÜ$*X5g–öiñì7‡úê·¤êOMQQš®äßôö6¿,©Ã˜¬1w¸»ï¾wïÆó6PìÀã˜}º<xj1Aå:НÎgÛgÉ °mÁÅ‹)No0Éc2 u#Ni r€|ò·RÐ;Î|%…$%Öwzéi €@çÀ‹pÕаPÊFG×ÿ's¦7&I£Fj€ÜÜÜMÿL”¤{GMšþ—&£ü¶è·g:нHi÷+zS(hãH¼_2…Bd|´ŒZ/ä¹l8ªg’$ D0à¢<ÉzpÔå⤒C’I=E°U3šæDÒØ¬ì"„™$y/D9¥M±ÃÛNŽve£À–c‰0Å,¢R§$–p–\ÆÙc!E¿\ïÍ j^‰¨U É.žIˆÐÉ(ÏҠΞ BY0ò n15 £=Š•ÅbÈž"?T¶~\_ÝÍ1 YlI3ðFpQj”J°[ '›/®›7Cm3¾X0¦P^¼móìåe•n©ÍØT^Ù»¶¬Ìí=×AZLpFt@É ïY¼¿ˆ t=Eǹ¶` \~*¡ ^@O+ÌðGœüËi¤À*sOßLê3f JŒhBZ2 nY}1èRþ{µ')Ó² ÖAÀ6€¼ ð›AO8&„m)0 Æ8ë{ÛþéñBÀ¹ÞG"ójPPPàp§$I 9¥+;›¾õ¨Ûv޶D…kJúeþ/²m¢Ìx$ e¨5ÂØ?!hDî ÏŒ‹…ÇåFÐÌKh|T,ì ȺҺƒ]Æ´¢‘$—FNàxS›ŒëµËt®bì΋€&ðL+eYFjåû¤ !îHéò:IuøM@«4"¡ßD, o4p&FŽ …ºGLäfrvÄÛ ÖdÙ${W&KÀ¢ ­³kˆ2rø asr²#œVŒâ[‹\P¦Ùé1¿…kÑìIí3Í1×èDK¾N믺"ƒÚ;úk.O»ùu3?{y]ÓÓ{÷v„Ϧï$E€70ôgî]XÌûp²ÛÏ›\ø:Ť ¤;¾¿l@/€Ck ²ÉÀ!¸B€ O[𬽠÷#¸wL9í ‚ öY¿9}½Išc€ÁÆÀ«@»v¶üq(•4÷ðöHò„ÓùÙð(=§qÎ`cÒ™RWW7eÙ[$IZ.ŠâÑîªMÅÝ•û¢%©Eds'Òì^8$9òÛ‚Ø–’ î1ÇØ¦cƒ`GnJÌfÈ“½¼É¥Ø’m‰ØºeÊ.FõPÎdU$»]TMB,¿W&?’$òɽz®)!&Žv0ìa+pdÂ'¡Ð7 EÒa/ãÔL*õð.ôÆ|$$…I ÚÏø‚^*‰j#•«ãˆVnæu2 w#Ò$žzQâþ!S¡Ø“3‰PeF˜ÌjêC|8†^-hý™È˜¥$Ý>иžÚlJf÷—|4ÏÊpOŒFY€2‡Ãhjµ‡^~äÑýCv(Çmz%p'ÿZ‚µJ`âË¥y0øË[K±ðûÚXO°•šŠP`犙g¢ãF¹ØŽ¡àÐbŠqÃ"kJ² ªA’·A/ȳn>€w†)}èâ7N©±Þàõ¡z hÏg§,÷COz04† bÀ#9[døÎë=6TPÛœÿN6¸iH»»Ï¡]@ÄåçÍ §¾¾~"®wRJs¼ž®øº}Ÿ†.dÚõ-Qq,Ù£uQ!s[X¦‰Q4LVÒñî(ÙJU‘‰ÍQe™™ —ÈDY¯ R !I>eé‰úÂRF˜“ÙêX!1T|"šô°:%Ô¤(„ÔnFæb8’h4¿SRìË1ÄH‹Eî6QXýí ¨Ôe"ìä ȃ0èšÅT^ ‰“P&õSOÃR7Q‰qÇÞ œOÎÆ œ;T?hÊ0yyyŸ@ccã‚ Üb2§ŽtÅÝ3ÜþqÄ[ÖÿµÓn™rC;[¡õbú†8­œ@eäŠ[CŠþÕQÌèãeûïJÁ4}”Ôï‘ļ=NV‹ÂeNAþužšNhŽ’½y2qrC= dÅÒ¾ÛÀ@Œ—(›â ‹†Áè~.;‘צ™¥_ÖÙå³Ý˜Õ´Z8jty,yéf}1å|:6æÍbŠT-bR¯ ›¨àè?“$Þae'$ôÂìˆcöÚR%©MÎÄ”ýÈÐ:%UŒ’]ŒW"²TY/ CŠôˆí=AÔ´˜#u©­ËÃê5Õª8I§S)êšâb5'KÔqŒ? snV¢î¶«ôY{+»Ÿ%„L¡®é– C,;ÑÀ:Šwî$˜E¹íž[Bpx-ÅóßC†~©Î†·ìÀCRÉc ºCA`n8Éô÷¾)ˆâG H›@VO]ê¦íá¦d, üØ—ÕžOáGã¼{§€©««»‹r+!Äàvµñ‘ýŽmîDëæCá®eFÕ¬kYT¼â–Æ<ÕÃ4g*…„u™2¹¥îÛ{IZ›Í)¨\~IÒë1%šMwq$Gé>|‘©M>ìOUÑ1®±ø£°+@ÛS“Þé'ÕÉ Lé£Ã û*x¼?\@E_ #êfÒ×(º‡+w á\`À£yc1°C,²n¸_o¨pй=ÍÈp§C¿ô³Aç‰'·aý€a¦dô~О³ßp& ï!ü*è¿C]¯¸kPêÙx>È8ëvàQêù± ‰0õõõ „ÜFñJ’4@‡ÃÑb“„ž^ÿ!WbÜ燃 –°*gi<‚m]H|ÓÏxü&2Œ+#Ê>P7'€1ú#8v“61Bí ßàÁþl’Õ9m4  ýf=»ý¤ÝªÆä?¾N×bL‡å)& ‰>$¡7)‚+;œÐZ05LIDATˆߤ¨àÓÀe1»µ´è9j7Ä“´ž(œ²(tZ‘Nè ‘]ñJP¢“=<[}‰BLX¦#àY:µ„c·}+ðcÆAVw˜ˆ“ «næ%hpyÂÔ cÐܪŒ–L¼ç &¯9±s–ä8ˆS­=ŸØ+f¾F1$B ƒP àßS'eôŠ@ïݧÿÏtÈÚ¾ öOž]ü»“Û!H:`pPð }ñœv!’”t@º´û™!²Ÿ—Aðb%=çgç§0'ÑÐÐ0Cű Ãd` Z®0žÒ ßãqºB^ŸEV¿ß×ÒÒnIÒiüᯑ·o¸±Ã¤ˆÆ¤ÂzsôúxIYª ü§¦t·“º2Ò974vĨtPDjoT•špQWe:5’tÚÆiפ¹"ØW Ã%f =C±5¦À¨Š ­ÍR™ˆÂÃPf ÈjòQm8FŽM5¡Ø$Ш ‘†n-9â„ÃÀ ãÏ™RÔ¦(Ÿ“:»Fg$’Ûf£!yT¥Œ#õ-ÑHzöd!;gz„a˜Wsss?Þ¿"ÐÈV ŠNÑ]?„WÖR,œøCƒŠgY3`öahàó<@o]r²×D’æm€^6L'€”Ìa}€Ü´új@Ò4ò2ËŽ÷`Òî¡SŸ—A ™:ž1?¹AŽŽŽŽäh4Z*I’ŒRZ ÀJ™ˆ+Ÿ L‰J’ÄBô—[¨¨òxú½f´Zô6ÛMIUa§¡»_[c ).5…b½N…þM'™Rçe¾º4q ^“8x>ÃÄpm{€ÔJ—äÎT1¸:™–=V’ü_n¡=_%³M×H6Ä4{ìi’‹Ùic‚ýJ¢×ås>“FUUxÕž ÜnWVOJŽšfÄ«=¾ '9)CÓÙMé¶±*«5W$„8$I 1 óÙ‰Æî$xŸ7î ܾŽâÍ3í¿Åë †®0`Ñzrþ_nÈjÀ;HèDÐ%gv± Y­Øýj,ƒ;ôŽ£'ç' ´À£8ŸsòŸ¿AøAü, Â)`êëëó8Žë§”²²²šëêê.$„Œ’$IÏ0Ì$ñ”Ra¥ÔB‰§”6BÒ(¥^Qµ=›ÿadëÛ}˜2ÆDsLmAOOZ$Ôï‰3ˆ _D§•E v•R‘@ ¹ˆp‹FiÎð77ôšò ­¡@³È |§5uB€ãä* ìt“SJS´B21ðð5b /`)¥½ Ãô‚ð%¥tSaaáwKðô0Ÿ{íZŠ;Ϧ£n$Pé<1ƒDQ \°ŽâŸwAüK Öo8?0Dxè¢á–OSßú|€–a¨§Ñ°@ïzÝIɤ_¸ À4œ»qØÚ=ôìÀˆAø©©©EIQ*•E1‰Rš/IÒ¨!„K‘SJ³tB$IÒ}wÓ1O) HÐG)M"„¨ìáéÂÂÂÔÖÖÆÉårAÅ8Jé–e]±Xl'¥4±°°ðNÌœ’»Ô"°œ Ý9Ê ÀžË£%9¸mp:Ú×R¬?þ~-ÁmrNÌí‹(þv¶m¬ÉÈüavÐÅkÏ­Î×/Ä †‘|ºdÇ0é'”Í0ÑË’ Å ü b6<V)¼:Ú0µS tVÒáW Æ‘‡À 2R»QAÏþâÛRr†Æ?<(§Ï Éû¹çyzùÿ?Ûż„ IEND®B`‚httpd-2.4.41/docs/icons/image2.png0000644000000000000500000000056310671421551015157 0ustar rootsrc‰PNG  IHDR2o¡5$PLTEÿÿÿÿ33ÌÿÿÌÌÌ™™™ffff333™Ì™33fÌ·YtRNSÿÿ×Ê AbKGDˆHŒIDAT[EÎ; Â@…áWÄjiï ´ñU§s®Á.Äb"³`‹»…la6çG’¿ú8ÕKuÌŒš1+Ñ­4‘ÖÚÊ@çÄýÎ{?3„PˆMsO¬å‹Â‘ä€ÈcM"-EžžWå-[y}ȯϤ·<†Lœ]?4,¼,¤I+kLéšœžäPâ?àY:KªrîäVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/comp.blue.gif0000644000000000000500000000037310147723030015652 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™fÌÿfff333f™!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,nºÜþ0Êxª½À»™³aXˆ 7¬ka¢˺ÇÙŒòüÞ`ÞîŒQaH›Ï§Æ08I§aaðYW[UÊíJµWkVQ=ÌÐÊ`¬8”Aù.ìøû ϸyz.ri‡'E‹ŒD ;httpd-2.4.41/docs/icons/image3.png0000644000000000000500000000052210671421551015153 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿ33Ìÿÿ™™™f333™Ì™33f¾ý{DtRNSÿÿ×Ê AbKGDˆHqIDAT[MÎ1€ …á.€ÑµW`r4âNLˆasbvcu2^ÛZÛ*üÓ——4‘[PÆ4ÂÚh˜Þûh&NÖ)¥µV&5»QÏ„ï˜[)¥ã¡¤t•˜7u ¯œsÇ]IéÚýŒN¢ObÕð‡4.45(¸£VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/box1.png0000644000000000000500000000050510664777241014674 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿÌÌÌ™™™333™3f3ÓÊtRNSÿå·0JbKGDˆHkIDAT×uΡ €0…áÓ–—Ö´Ê&¬ ve¯ Õ!âë{õ^7 þéã¤×)Ó„ÌÝ%¡ñ®~9;›„ÑÙgFâdWï[NÅXsùcSˆ›8ˆ SÁıl/Bl…`žéÙ)é SZ$ªfþAVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/folder.open.gif0000644000000000000500000000036210147723030016177 0ustar rootsrcGIF89aÂÿÿÿÿÌ™Ìÿÿ»»»™f3333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,e(ºÜþ0ÊI«m&ë|—`Ý'ž™g’뺰#£sÊÝoÀ ¡ uÂa¡ˆJ:Ÿ„¥à|ZQ˜¬zuf=½®W pÅÁ/ãsF«×mñC¨Ûï÷9¦ïûý*:ƒ5 ;httpd-2.4.41/docs/icons/up.png0000644000000000000500000000037710671421551014442 0ustar rootsrc‰PNG  IHDR½/T• PLTEÿÿÿÌÿÿ ¶ïtRNSÿå·0JbKGDˆH4IDAT[Ì1À0 0ùÏ< ¢ü©BºhT}ÂK”mÄh±J ›ÆdÐõoƧt=C›VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/a.png0000644000000000000500000000046210671421551014231 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™333U±3•tRNSÿå·0JbKGDˆHaIDAT[EËÑ ! DÑK´tðXRÀ“XÀ"ÓMûÑûu233‡»óhí’qÙ.›]sn†¤¢i=QŒx7mõ—bÆR»~¦¢ öŠÁ¹Ñuh—˜±K'Ÿj:®F`)u~~VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/bomb.gif0000644000000000000500000000046410147723030014706 0ustar rootsrcGIF89aãÿÿÿÿÌ3ÌÿÿÌÌÌ»»»™™™ˆˆˆfffUUU333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,0ÉI§¸X$À»ßIvm^I†Ù °v$€ŽÝû}ئIÐvŠDpHã %…r© ­[§@-45áoJ½Æ¨V1˜z=bõ@æX‹¥`8„Ëo,º@ Û…y_,U€‚IŠJgh‹ŽˆABx–CJepŸf¢%§‚ U«¬TBL±²W;httpd-2.4.41/docs/icons/index.png0000644000000000000500000000051410671421551015116 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™fÌÿ333ßVRLtRNSÿå·0JbKGDˆHxIDAT[UÎí Ä €aÒz°ACϤôC¸Èþ«`Û÷×£ Ôè@DØÁJiŽÁ4hǹ©ªA"˜(;¿ª'§¶YÀ™.æm渴¦j䙹Õ*NëG”ýs±¹úzöÖWtú⛑±RÏ>‰>ÇÃ??A2;þ¼þVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/sound2.gif0000644000000000000500000000033510147723030015176 0ustar rootsrcGIF89aÂÿÿÿÌÿÿÌÌÌ™™™fff333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,PºÜþÎHø¤-tYC$¦!zP( WÉ›ñEz‘U[Ü4ìÝJÞ쯀1ºT/²g ŠÌOó9T7A‰3‡Ín}7ÑšaîÊŒpÍ^$;httpd-2.4.41/docs/icons/pie6.gif0000644000000000000500000000027210147723030014627 0ustar rootsrcGIF89a¡ÿÿÿÌÿÿ!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,9Œ©Ëí£4¢ÖX°· ­qò›(fˆ¦Hi¶.µ²íÇ2.ïTûE¯¡%a<"Œ¡£‡á0 ;httpd-2.4.41/docs/icons/odf6odb.png0000644000000000000500000000202711141176336015334 0ustar rootsrc‰PNG  IHDR÷ŸL4UPLTEÙÙÙ&&&'''('''((((()))33333™\\¬]\­]]­^^®™™™šššœ››ŸŸŸ¢¡¢¡¢¢¦¦¥§§§ÎÎÜÎÏÜÑÐÞÑÑÝÑÑßÒÑàÒÒàÓÓàÓÔàÕÕâר䨨äÚÚÚÛÚÛÛÛÛÜÛÜÛÜÛÜÜÛÜÜÜÜÝÜÝÝÜÝÝÝÝÞÞÞÞÝÞÞÞÞßÞÞßßßßßÞÞèàßßßàßàààßßéààááààáàáááàáááááââáááââââáâââãââãâãâãâãããããääããäãäãäääääääååäääåääåååååååææååæåæåæååæææææææççæçæçææçççççççèææñèççèçèçèèèèçèèèèçñéèéèééééèéééééêêééêéêéêééêêêêéêêêêêëëêëêëëëëëëëììëëìëìëìëëìììììììííììíìíìíííííîíííîííîîîîíîîîîîïïîïïïîïïïïïððïðïðïïðððððñððñðñðñððññññðñññññòñòñòòñòòòòòóóòòóòóòóòòóóóóòóóóóóôôóôóôóôôóôôôõôôõôõôõôôõõõõõõõööõõöõöõööööööö÷÷ö÷÷÷÷ø÷ø÷ø÷÷øøøøøøøùùùùùùúúùùúùúúúúûúúûúûúûûûûûüûûüüüýüüüýüýýüýýýþýýþýþþþþþþÿÿþÿÿÿÿö0¼ÚtRNS@æØfbKGDˆH pHYs  šœNIDATÓc`G PÀ~ìØá‰»¶mÞ°†}L”ýèaEn¹ k–³ÏŸe?¤À2K°Ï˜ÔeßÃÃ!·q4ׂÙì»:Á¢ìÑ u+—p˜M–gCànŽÕËKpö÷ÉCHpƒ,‡ÔqÑþ–æj^ ®Y)ÉÉÁ)ÖÙÚX]^\²xö,£~6NV¡ˆàÂyS'÷µ³ Wæ¦ ²DBgMîïlkg©d–÷ƒNìíli¨–/ÈN‹ ‘÷„ö·7ÕUʧ'ÄFúûÉ»@[škÊ råSbB¼Üäm ‚ ÕÅ9©ò‘!~žnòÁªÒ‚ôä8ù@w{kyCˆ`QNjBT(“€‡ƒ?£.D($Àr#Ÿ&D0%6"ÐÏÕÅÁÚÔPO[]"È΋ÀAÇÀ  »`™{ˆÖëIEND®B`‚httpd-2.4.41/docs/icons/pie3.png0000644000000000000500000000042410671421551014647 0ustar rootsrc‰PNG  IHDR½/T• PLTEÿÿÿÌÿÿ ¶ïtRNSÿå·0JbKGDˆHIIDAT[cœdØ*™¡µH6h­ ecÐZÊ$§BÉ ¹ä“L@2‚¬’Ak*P/ÈN™ K¡æ«÷$mœ¸ä°VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/back.gif0000644000000000000500000000033010147723030014657 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™fff333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,KºÜþ#òj3S»¢ÎÜõiœ7Nv‚t7*EnXm/û’ë5FPñêxƤ‘¦l(N§ ÚŒÀ¨:‚@ÕV’ÞÐUüè‘Ï‹;httpd-2.4.41/docs/icons/generic.gif0000644000000000000500000000033510147723030015400 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,P8º¼ñ0 @«#¾i;Ï×U"¸×‰(1¸ð‰RDmòL ¼€K:KïÇ |9㑨¬ ÍeÒø,«Q)´‰v¹L/qÐ+›y¯ÈmÍþ%;httpd-2.4.41/docs/icons/script.gif0000644000000000000500000000036210147723030015270 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,e8º¼ñ0 @«#¾i;Ï×U"¸U’Ä0ŒMŸTºæqŒ÷;Š`( àTÈÑ(9…LÑÓRü{€lµ™íz¿Û×5Ö Ï^³j,ÓFÑp5» PÃÁï;~3 úÿC7sc ;httpd-2.4.41/docs/icons/pie5.gif0000644000000000000500000000027510147723030014631 0ustar rootsrcGIF89a¡ÿÿÿÌÿÿ!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,<Œ©Ëí£4¢ÖX°· ­qò›(fˆ¦Hi¶.µ²íÇ2^Ÿ7½’r¾Ïf< -¤å(át1F;httpd-2.4.41/docs/icons/c.gif0000644000000000000500000000036210147723030014206 0ustar rootsrcGIF89aÂÿÿÿÌÿÿ™™™333!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,e8º¼ñ0 @«#¾i;ÏäUE®çqe©M§#‘WkË€`( ütÀ Ñ(Q!uA!Ö‹Jq9h•RÄZ-Ýf¶ÇâN¿Á0•\¾ŠÑÊó˜÷ÂÕpðt@ìû‡7lƒ+ ;httpd-2.4.41/docs/icons/down.gif0000644000000000000500000000024310147723030014731 0ustar rootsrcGIF89a¡ÿÿÿÌÿÿ!þNThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995!ù,"Œ©Ëí£œ4‰‹³Æg{Ž|Û"‚¤ø|Ñ(eÕUÅòL×P;httpd-2.4.41/docs/icons/dir.png0000644000000000000500000000044710671421551014572 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿÌ™Ìÿÿ™f3333Âú¨tRNSÿÿ×Ê AbKGDˆHRIDAT[cP‚ÂÌP €0U Ì 1ECCƒ”‚ALC (j @žpD»Â™Â®T†WUc0qeP q€%ÕPp~ ÅyÏM™VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/pie4.png0000644000000000000500000000040210671421551014644 0ustar rootsrc‰PNG  IHDR½/T• PLTEÿÿÿÌÿÿ ¶ïtRNSÿå·0JbKGDˆH7IDAT[cœdØ*™¡µH6h­ ecÐZÊ$§BÉ ¹'‰¬¢bÔLùë)'GꊡøVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/hand.right.png0000644000000000000500000000046710671421551016044 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÿÌ™Ìÿÿ™f3Õ$(¢tRNSÿÿ×Ê AbKGDˆHeIDAT™± C1Yáä7ú Xö~aÿ™ÒXiR$TWœÈŸèLrñÚ¶õ IZ6Àp`¬µ5©$-(´­ªÌÕ¶X“IÙVclÛÚ\Õ Wµ|˜·Øcõײ/ÞPOM…‹™VtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/icons/comp.gray.png0000644000000000000500000000047610671421551015715 0ustar rootsrc‰PNG  IHDR2o¡5PLTEÿÿÿÌÿÿ™™™fÌÿ333ßVRLtRNSÿå·0JbKGDˆHjIDAT[uÍQ € €áayAß#ôv€Œ]@Ñû_¥mZÔÿô1ÆæþظÌtÀi¡æ©NBˆqœÆO"ÕÙ-Ê‹ŠÄµç3X½üš†x™hŠ\PÍ€[nÊì%U¡]Uz1J'.#!ÛHöÉtVtEXtcommentThis art is in the public domain. Kevin Hughes, kevinh@eit.com, September 1995vöïœIEND®B`‚httpd-2.4.41/docs/conf/0002755000000000000500000000000013523273343013120 5ustar rootsrchttpd-2.4.41/docs/conf/extra/0002755000000000000500000000000013523273343014243 5ustar rootsrchttpd-2.4.41/docs/conf/extra/httpd-manual.conf.in0000644000000000000500000000253713076415352020123 0ustar rootsrc# # Provide access to the documentation on your server as # http://yourserver.example.com/manual/ # The documentation is always available at # http://httpd.apache.org/docs/2.4/ # # Required modules: mod_alias, mod_authz_core, mod_authz_host, # mod_setenvif, mod_negotiation # AliasMatch ^/manual(?:/(?:da|de|en|es|fr|ja|ko|pt-br|ru|tr|zh-cn))?(/.*)?$ "@exp_manualdir@$1" Options Indexes AllowOverride None Require all granted SetHandler type-map # .tr is text/troff in mime.types! RemoveType tr # Traditionally, used .dk filename extension for da language AddLanguage da .da SetEnvIf Request_URI ^/manual/(da|de|en|es|fr|ja|ko|pt-br|ru|tr|zh-cn)/ prefer-language=$1 RedirectMatch 301 ^/manual(?:/(da|de|en|es|fr|ja|ko|pt-br|ru|tr|zh-cn)){2,}(/.*)?$ /manual/$1$2 # Reflect the greatest effort in translation (most content available), # inferring greater attention to detail (potentially false assumption, # counting translations presently in-sync would be more helpful.) # Use caution counting; safest pattern is '*.xml.XX'. Recent .xml source # document count: 266 214 110 94 82 25 22 18 4 1 1 LanguagePriority en fr ko ja tr es de zh-cn pt-br da ru ForceLanguagePriority Prefer Fallback httpd-2.4.41/docs/conf/extra/httpd-vhosts.conf.in0000644000000000000500000000275711720462450020173 0ustar rootsrc# Virtual Hosts # # Required modules: mod_log_config # If you want to maintain multiple domains/hostnames on your # machine you can setup VirtualHost containers for them. Most configurations # use only name-based virtual hosts so the server doesn't need to worry about # IP addresses. This is indicated by the asterisks in the directives below. # # Please see the documentation at # # for further details before you try to setup virtual hosts. # # You may use the command line option '-S' to verify your virtual host # configuration. # # VirtualHost example: # Almost any Apache directive may go into a VirtualHost container. # The first VirtualHost section is used for all requests that do not # match a ServerName or ServerAlias in any block. # ServerAdmin webmaster@dummy-host.example.com DocumentRoot "@@ServerRoot@@/docs/dummy-host.example.com" ServerName dummy-host.example.com ServerAlias www.dummy-host.example.com ErrorLog "@rel_logfiledir@/dummy-host.example.com-error_log" CustomLog "@rel_logfiledir@/dummy-host.example.com-access_log" common ServerAdmin webmaster@dummy-host2.example.com DocumentRoot "@@ServerRoot@@/docs/dummy-host2.example.com" ServerName dummy-host2.example.com ErrorLog "@rel_logfiledir@/dummy-host2.example.com-error_log" CustomLog "@rel_logfiledir@/dummy-host2.example.com-access_log" common httpd-2.4.41/docs/conf/extra/httpd-default.conf.in0000644000000000000500000000557612003240052020256 0ustar rootsrc# # This configuration file reflects default settings for Apache HTTP Server. # # You may change these, but chances are that you may not need to. # # # Timeout: The number of seconds before receives and sends time out. # Timeout 60 # # KeepAlive: Whether or not to allow persistent connections (more than # one request per connection). Set to "Off" to deactivate. # KeepAlive On # # MaxKeepAliveRequests: The maximum number of requests to allow # during a persistent connection. Set to 0 to allow an unlimited amount. # We recommend you leave this number high, for maximum performance. # MaxKeepAliveRequests 100 # # KeepAliveTimeout: Number of seconds to wait for the next request from the # same client on the same connection. # KeepAliveTimeout 5 # # UseCanonicalName: Determines how Apache constructs self-referencing # URLs and the SERVER_NAME and SERVER_PORT variables. # When set "Off", Apache will use the Hostname and Port supplied # by the client. When set "On", Apache will use the value of the # ServerName directive. # UseCanonicalName Off # # AccessFileName: The name of the file to look for in each directory # for additional configuration directives. See also the AllowOverride # directive. # AccessFileName .htaccess # # ServerTokens # This directive configures what you return as the Server HTTP response # Header. The default is 'Full' which sends information about the OS-Type # and compiled in modules. # Set to one of: Full | OS | Minor | Minimal | Major | Prod # where Full conveys the most information, and Prod the least. # ServerTokens Full # # Optionally add a line containing the server version and virtual host # name to server-generated pages (internal error documents, FTP directory # listings, mod_status and mod_info output etc., but not CGI generated # documents or custom error documents). # Set to "EMail" to also include a mailto: link to the ServerAdmin. # Set to one of: On | Off | EMail # ServerSignature Off # # HostnameLookups: Log the names of clients or just their IP addresses # e.g., www.apache.org (on) or 204.62.129.132 (off). # The default is off because it'd be overall better for the net if people # had to knowingly turn this feature on, since enabling it means that # each client request will result in AT LEAST one lookup request to the # nameserver. # HostnameLookups Off # # Set a timeout for how long the client may take to send the request header # and body. # The default for the headers is header=20-40,MinRate=500, which means wait # for the first byte of headers for 20 seconds. If some data arrives, # increase the timeout corresponding to a data rate of 500 bytes/s, but not # above 40 seconds. # The default for the request body is body=20,MinRate=500, which is the same # but has no upper limit for the timeout. # To disable, set to header=0 body=0 # RequestReadTimeout header=20-40,MinRate=500 body=20,MinRate=500 httpd-2.4.41/docs/conf/extra/httpd-multilang-errordoc.conf.in0000644000000000000500000000422011405657151022445 0ustar rootsrc# # The configuration below implements multi-language error documents through # content-negotiation. # # Required modules: mod_alias, mod_authz_core, mod_authz_host, # mod_include, mod_negotiation # # We use Alias to redirect any /error/HTTP_.html.var response to # our collection of by-error message multi-language collections. We use # includes to substitute the appropriate text. # # You can modify the messages' appearance without changing any of the # default HTTP_.html.var files by adding the line: # # Alias /error/include/ "/your/include/path/" # # which allows you to create your own set of files by starting with the # @exp_errordir@/include/ files and copying them to /your/include/path/, # even on a per-VirtualHost basis. The default include files will display # your Apache version number and your ServerAdmin email address regardless # of the setting of ServerSignature. Alias /error/ "@exp_errordir@/" AllowOverride None Options IncludesNoExec AddOutputFilter Includes html AddHandler type-map var Require all granted LanguagePriority en cs de es fr it ja ko nl pl pt-br ro sv tr ForceLanguagePriority Prefer Fallback ErrorDocument 400 /error/HTTP_BAD_REQUEST.html.var ErrorDocument 401 /error/HTTP_UNAUTHORIZED.html.var ErrorDocument 403 /error/HTTP_FORBIDDEN.html.var ErrorDocument 404 /error/HTTP_NOT_FOUND.html.var ErrorDocument 405 /error/HTTP_METHOD_NOT_ALLOWED.html.var ErrorDocument 408 /error/HTTP_REQUEST_TIME_OUT.html.var ErrorDocument 410 /error/HTTP_GONE.html.var ErrorDocument 411 /error/HTTP_LENGTH_REQUIRED.html.var ErrorDocument 412 /error/HTTP_PRECONDITION_FAILED.html.var ErrorDocument 413 /error/HTTP_REQUEST_ENTITY_TOO_LARGE.html.var ErrorDocument 414 /error/HTTP_REQUEST_URI_TOO_LARGE.html.var ErrorDocument 415 /error/HTTP_UNSUPPORTED_MEDIA_TYPE.html.var ErrorDocument 500 /error/HTTP_INTERNAL_SERVER_ERROR.html.var ErrorDocument 501 /error/HTTP_NOT_IMPLEMENTED.html.var ErrorDocument 502 /error/HTTP_BAD_GATEWAY.html.var ErrorDocument 503 /error/HTTP_SERVICE_UNAVAILABLE.html.var ErrorDocument 506 /error/HTTP_VARIANT_ALSO_VARIES.html.var httpd-2.4.41/docs/conf/extra/httpd-info.conf.in0000644000000000000500000000213711405657151017574 0ustar rootsrc# # Get information about the requests being processed by the server # and the configuration of the server. # # Required modules: mod_authz_core, mod_authz_host, # mod_info (for the server-info handler), # mod_status (for the server-status handler) # # Allow server status reports generated by mod_status, # with the URL of http://servername/server-status # Change the ".example.com" to match your domain to enable. SetHandler server-status Require host .example.com Require ip 127 # # ExtendedStatus controls whether Apache will generate "full" status # information (ExtendedStatus On) or just basic information (ExtendedStatus # Off) when the "server-status" handler is called. The default is Off. # #ExtendedStatus On # # Allow remote server configuration reports, with the URL of # http://servername/server-info (requires that mod_info.c be loaded). # Change the ".example.com" to match your domain to enable. # SetHandler server-info Require host .example.com Require ip 127 httpd-2.4.41/docs/conf/extra/httpd-userdir.conf.in0000644000000000000500000000126611573244531020320 0ustar rootsrc# Settings for user home directories # # Required module: mod_authz_core, mod_authz_host, mod_userdir # # UserDir: The name of the directory that is appended onto a user's home # directory if a ~user request is received. Note that you must also set # the default access control for these directories, as in the example below. # UserDir public_html # # Control access to UserDir directories. The following is an example # for a site where these directories are restricted to read-only. # AllowOverride FileInfo AuthConfig Limit Indexes Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec Require method GET POST OPTIONS httpd-2.4.41/docs/conf/extra/httpd-dav.conf.in0000644000000000000500000000340511575476544017427 0ustar rootsrc# # Distributed authoring and versioning (WebDAV) # # Required modules: mod_alias, mod_auth_digest, mod_authn_core, mod_authn_file, # mod_authz_core, mod_authz_user, mod_dav, mod_dav_fs, # mod_setenvif # The following example gives DAV write access to a directory called # "uploads" under the ServerRoot directory. # # The User/Group specified in httpd.conf needs to have write permissions # on the directory where the DavLockDB is placed and on any directory where # "Dav On" is specified. DavLockDB "@@ServerRoot@@/var/DavLock" Alias /uploads "@@ServerRoot@@/uploads" Dav On AuthType Digest AuthName DAV-upload # You can use the htdigest program to create the password database: # htdigest -c "@@ServerRoot@@/user.passwd" DAV-upload admin AuthUserFile "@@ServerRoot@@/user.passwd" AuthDigestProvider file # Allow universal read-access, but writes are restricted # to the admin user. Require method GET POST OPTIONS Require user admin # # The following directives disable redirects on non-GET requests for # a directory that does not include the trailing slash. This fixes a # problem with several clients that do not appropriately handle # redirects for folders with DAV methods. # BrowserMatch "Microsoft Data Access Internet Publishing Provider" redirect-carefully BrowserMatch "MS FrontPage" redirect-carefully BrowserMatch "^WebDrive" redirect-carefully BrowserMatch "^WebDAVFS/1.[01234]" redirect-carefully BrowserMatch "^gnome-vfs/1.0" redirect-carefully BrowserMatch "^XML Spy" redirect-carefully BrowserMatch "^Dreamweaver-WebDAV-SCM1" redirect-carefully BrowserMatch " Konqueror/4" redirect-carefully httpd-2.4.41/docs/conf/extra/httpd-languages.conf.in0000644000000000000500000001172610764234743020620 0ustar rootsrc# # Settings for hosting different languages. # # Required modules: mod_mime, mod_negotiation # DefaultLanguage and AddLanguage allows you to specify the language of # a document. You can then use content negotiation to give a browser a # file in a language the user can understand. # # Specify a default language. This means that all data # going out without a specific language tag (see below) will # be marked with this one. You probably do NOT want to set # this unless you are sure it is correct for all cases. # # * It is generally better to not mark a page as # * being a certain language than marking it with the wrong # * language! # # DefaultLanguage nl # # Note 1: The suffix does not have to be the same as the language # keyword --- those with documents in Polish (whose net-standard # language code is pl) may wish to use "AddLanguage pl .po" to # avoid the ambiguity with the common suffix for perl scripts. # # Note 2: The example entries below illustrate that in some cases # the two character 'Language' abbreviation is not identical to # the two character 'Country' code for its country, # E.g. 'Danmark/dk' versus 'Danish/da'. # # Note 3: In the case of 'ltz' we violate the RFC by using a three char # specifier. There is 'work in progress' to fix this and get # the reference data for rfc1766 cleaned up. # # Catalan (ca) - Croatian (hr) - Czech (cs) - Danish (da) - Dutch (nl) # English (en) - Esperanto (eo) - Estonian (et) - French (fr) - German (de) # Greek-Modern (el) - Hebrew (he) - Italian (it) - Japanese (ja) # Korean (ko) - Luxembourgeois* (ltz) - Norwegian Nynorsk (nn) # Norwegian (no) - Polish (pl) - Portugese (pt) # Brazilian Portuguese (pt-BR) - Russian (ru) - Swedish (sv) # Turkish (tr) - Simplified Chinese (zh-CN) - Spanish (es) # Traditional Chinese (zh-TW) # AddLanguage ca .ca AddLanguage cs .cz .cs AddLanguage da .dk AddLanguage de .de AddLanguage el .el AddLanguage en .en AddLanguage eo .eo AddLanguage es .es AddLanguage et .et AddLanguage fr .fr AddLanguage he .he AddLanguage hr .hr AddLanguage it .it AddLanguage ja .ja AddLanguage ko .ko AddLanguage ltz .ltz AddLanguage nl .nl AddLanguage nn .nn AddLanguage no .no AddLanguage pl .po AddLanguage pt .pt AddLanguage pt-BR .pt-br AddLanguage ru .ru AddLanguage sv .sv AddLanguage tr .tr AddLanguage zh-CN .zh-cn AddLanguage zh-TW .zh-tw # LanguagePriority allows you to give precedence to some languages # in case of a tie during content negotiation. # # Just list the languages in decreasing order of preference. We have # more or less alphabetized them here. You probably want to change this. # LanguagePriority en ca cs da de el eo es et fr he hr it ja ko ltz nl nn no pl pt pt-BR ru sv tr zh-CN zh-TW # # ForceLanguagePriority allows you to serve a result page rather than # MULTIPLE CHOICES (Prefer) [in case of a tie] or NOT ACCEPTABLE (Fallback) # [in case no accepted languages matched the available variants] # ForceLanguagePriority Prefer Fallback # # Commonly used filename extensions to character sets. You probably # want to avoid clashes with the language extensions, unless you # are good at carefully testing your setup after each change. # See http://www.iana.org/assignments/character-sets for the # official list of charset names and their respective RFCs. # AddCharset us-ascii.ascii .us-ascii AddCharset ISO-8859-1 .iso8859-1 .latin1 AddCharset ISO-8859-2 .iso8859-2 .latin2 .cen AddCharset ISO-8859-3 .iso8859-3 .latin3 AddCharset ISO-8859-4 .iso8859-4 .latin4 AddCharset ISO-8859-5 .iso8859-5 .cyr .iso-ru AddCharset ISO-8859-6 .iso8859-6 .arb .arabic AddCharset ISO-8859-7 .iso8859-7 .grk .greek AddCharset ISO-8859-8 .iso8859-8 .heb .hebrew AddCharset ISO-8859-9 .iso8859-9 .latin5 .trk AddCharset ISO-8859-10 .iso8859-10 .latin6 AddCharset ISO-8859-13 .iso8859-13 AddCharset ISO-8859-14 .iso8859-14 .latin8 AddCharset ISO-8859-15 .iso8859-15 .latin9 AddCharset ISO-8859-16 .iso8859-16 .latin10 AddCharset ISO-2022-JP .iso2022-jp .jis AddCharset ISO-2022-KR .iso2022-kr .kis AddCharset ISO-2022-CN .iso2022-cn .cis AddCharset Big5.Big5 .big5 .b5 AddCharset cn-Big5 .cn-big5 # For russian, more than one charset is used (depends on client, mostly): AddCharset WINDOWS-1251 .cp-1251 .win-1251 AddCharset CP866 .cp866 AddCharset KOI8 .koi8 AddCharset KOI8-E .koi8-e AddCharset KOI8-r .koi8-r .koi8-ru AddCharset KOI8-U .koi8-u AddCharset KOI8-ru .koi8-uk .ua AddCharset ISO-10646-UCS-2 .ucs2 AddCharset ISO-10646-UCS-4 .ucs4 AddCharset UTF-7 .utf7 AddCharset UTF-8 .utf8 AddCharset UTF-16 .utf16 AddCharset UTF-16BE .utf16be AddCharset UTF-16LE .utf16le AddCharset UTF-32 .utf32 AddCharset UTF-32BE .utf32be AddCharset UTF-32LE .utf32le AddCharset euc-cn .euc-cn AddCharset euc-gb .euc-gb AddCharset euc-jp .euc-jp AddCharset euc-kr .euc-kr #Not sure how euc-tw got in - IANA doesn't list it??? AddCharset EUC-TW .euc-tw AddCharset gb2312 .gb2312 .gb AddCharset iso-10646-ucs-2 .ucs-2 .iso-10646-ucs-2 AddCharset iso-10646-ucs-4 .ucs-4 .iso-10646-ucs-4 AddCharset shift_jis .shift_jis .sjis httpd-2.4.41/docs/conf/extra/proxy-html.conf.in0000644000000000000500000000613112006245256017636 0ustar rootsrc# Configuration example. # # For detailed information about these directives see # # and for mod_xml2enc see # # # First, to load the module with its prerequisites. Note: mod_xml2enc # is not always necessary, but without it mod_proxy_html is likely to # mangle pages in encodings other than ASCII or Unicode (utf-8). # # For Unix-family systems: # LoadFile /usr/lib/libxml2.so # LoadModule proxy_html_module modules/mod_proxy_html.so # LoadModule xml2enc_module modules/mod_xml2enc.so # # For Windows (I don't know if there's a standard path for the libraries) # LoadFile C:/path/zlib.dll # LoadFile C:/path/iconv.dll # LoadFile C:/path/libxml2.dll # LoadModule proxy_html_module modules/mod_proxy_html.so # LoadModule xml2enc_module modules/mod_xml2enc.so # # All knowledge of HTML links has been removed from the mod_proxy_html # code itself, and is instead read from httpd.conf (or included file) # at server startup. So you MUST declare it. This will normally be # at top level, but can also be used in a . # # Here's the declaration for W3C HTML 4.01 and XHTML 1.0 ProxyHTMLLinks a href ProxyHTMLLinks area href ProxyHTMLLinks link href ProxyHTMLLinks img src longdesc usemap ProxyHTMLLinks object classid codebase data usemap ProxyHTMLLinks q cite ProxyHTMLLinks blockquote cite ProxyHTMLLinks ins cite ProxyHTMLLinks del cite ProxyHTMLLinks form action ProxyHTMLLinks input src usemap ProxyHTMLLinks head profile ProxyHTMLLinks base href ProxyHTMLLinks script src for # To support scripting events (with ProxyHTMLExtended On), # you'll need to declare them too. ProxyHTMLEvents onclick ondblclick onmousedown onmouseup \ onmouseover onmousemove onmouseout onkeypress \ onkeydown onkeyup onfocus onblur onload \ onunload onsubmit onreset onselect onchange # If you need to support legacy (pre-1998, aka "transitional") HTML or XHTML, # you'll need to uncomment the following deprecated link attributes. # Note that these are enabled in earlier mod_proxy_html versions # # ProxyHTMLLinks frame src longdesc # ProxyHTMLLinks iframe src longdesc # ProxyHTMLLinks body background # ProxyHTMLLinks applet codebase # # If you're dealing with proprietary HTML variants, # declare your own URL attributes here as required. # # ProxyHTMLLinks myelement myattr otherattr # ########### # EXAMPLE # ########### # # To define the URL /my-gateway/ as a gateway to an appserver with address # http://some.app.intranet/ on a private network, after loading the # modules and including this configuration file: # # ProxyRequests Off <-- this is an important security setting # ProxyPass /my-gateway/ http://some.app.intranet/ # # ProxyPassReverse / # ProxyHTMLEnable On # ProxyHTMLURLMap http://some.app.intranet/ /my-gateway/ # ProxyHTMLURLMap / /my-gateway/ # # # Many (though not all) real-life setups are more complex. # # See the documentation at # http://apache.webthing.com/mod_proxy_html/ # and the tutorial at # http://www.apachetutor.org/admin/reverseproxies httpd-2.4.41/docs/conf/extra/httpd-autoindex.conf.in0000644000000000000500000000545511405657151020647 0ustar rootsrc# # Directives controlling the display of server-generated directory listings. # # Required modules: mod_authz_core, mod_authz_host, # mod_autoindex, mod_alias # # To see the listing of a directory, the Options directive for the # directory must include "Indexes", and the directory must not contain # a file matching those listed in the DirectoryIndex directive. # # # IndexOptions: Controls the appearance of server-generated directory # listings. # IndexOptions FancyIndexing HTMLTable VersionSort # We include the /icons/ alias for FancyIndexed directory listings. If # you do not use FancyIndexing, you may comment this out. # Alias /icons/ "@exp_iconsdir@/" Options Indexes MultiViews AllowOverride None Require all granted # # AddIcon* directives tell the server which icon to show for different # files or filename extensions. These are only displayed for # FancyIndexed directories. # AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip AddIconByType (TXT,/icons/text.gif) text/* AddIconByType (IMG,/icons/image2.gif) image/* AddIconByType (SND,/icons/sound2.gif) audio/* AddIconByType (VID,/icons/movie.gif) video/* AddIcon /icons/binary.gif .bin .exe AddIcon /icons/binhex.gif .hqx AddIcon /icons/tar.gif .tar AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip AddIcon /icons/a.gif .ps .ai .eps AddIcon /icons/layout.gif .html .shtml .htm .pdf AddIcon /icons/text.gif .txt AddIcon /icons/c.gif .c AddIcon /icons/p.gif .pl .py AddIcon /icons/f.gif .for AddIcon /icons/dvi.gif .dvi AddIcon /icons/uuencoded.gif .uu AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl AddIcon /icons/tex.gif .tex AddIcon /icons/bomb.gif core AddIcon /icons/back.gif .. AddIcon /icons/hand.right.gif README AddIcon /icons/folder.gif ^^DIRECTORY^^ AddIcon /icons/blank.gif ^^BLANKICON^^ # # DefaultIcon is which icon to show for files which do not have an icon # explicitly set. # DefaultIcon /icons/unknown.gif # # AddDescription allows you to place a short description after a file in # server-generated indexes. These are only displayed for FancyIndexed # directories. # Format: AddDescription "description" filename # #AddDescription "GZIP compressed document" .gz #AddDescription "tar archive" .tar #AddDescription "GZIP compressed tar archive" .tgz # # ReadmeName is the name of the README file the server will look for by # default, and append to directory listings. # # HeaderName is the name of a file which should be prepended to # directory indexes. ReadmeName README.html HeaderName HEADER.html # # IndexIgnore is a set of filenames which directory indexing should ignore # and not include in the listing. Shell-style wildcarding is permitted. # IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t httpd-2.4.41/docs/conf/extra/httpd-mpm.conf.in0000644000000000000500000001055012012563134017420 0ustar rootsrc# # Server-Pool Management (MPM specific) # # # PidFile: The file in which the server should record its process # identification number when it starts. # # Note that this is the default PidFile for most MPMs. # PidFile "@rel_runtimedir@/httpd.pid" # # Only one of the below sections will be relevant on your # installed httpd. Use "apachectl -l" to find out the # active mpm. # # prefork MPM # StartServers: number of server processes to start # MinSpareServers: minimum number of server processes which are kept spare # MaxSpareServers: maximum number of server processes which are kept spare # MaxRequestWorkers: maximum number of server processes allowed to start # MaxConnectionsPerChild: maximum number of connections a server process serves # before terminating StartServers 5 MinSpareServers 5 MaxSpareServers 10 MaxRequestWorkers 250 MaxConnectionsPerChild 0 # worker MPM # StartServers: initial number of server processes to start # MinSpareThreads: minimum number of worker threads which are kept spare # MaxSpareThreads: maximum number of worker threads which are kept spare # ThreadsPerChild: constant number of worker threads in each server process # MaxRequestWorkers: maximum number of worker threads # MaxConnectionsPerChild: maximum number of connections a server process serves # before terminating StartServers 3 MinSpareThreads 75 MaxSpareThreads 250 ThreadsPerChild 25 MaxRequestWorkers 400 MaxConnectionsPerChild 0 # event MPM # StartServers: initial number of server processes to start # MinSpareThreads: minimum number of worker threads which are kept spare # MaxSpareThreads: maximum number of worker threads which are kept spare # ThreadsPerChild: constant number of worker threads in each server process # MaxRequestWorkers: maximum number of worker threads # MaxConnectionsPerChild: maximum number of connections a server process serves # before terminating StartServers 3 MinSpareThreads 75 MaxSpareThreads 250 ThreadsPerChild 25 MaxRequestWorkers 400 MaxConnectionsPerChild 0 # NetWare MPM # ThreadStackSize: Stack size allocated for each worker thread # StartThreads: Number of worker threads launched at server startup # MinSpareThreads: Minimum number of idle threads, to handle request spikes # MaxSpareThreads: Maximum number of idle threads # MaxThreads: Maximum number of worker threads alive at the same time # MaxConnectionsPerChild: Maximum number of connections a thread serves. It # is recommended that the default value of 0 be set # for this directive on NetWare. This will allow the # thread to continue to service requests indefinitely. ThreadStackSize 65536 StartThreads 250 MinSpareThreads 25 MaxSpareThreads 250 MaxThreads 1000 MaxConnectionsPerChild 0 # OS/2 MPM # StartServers: Number of server processes to maintain # MinSpareThreads: Minimum number of idle threads per process, # to handle request spikes # MaxSpareThreads: Maximum number of idle threads per process # MaxConnectionsPerChild: Maximum number of connections per server process StartServers 2 MinSpareThreads 5 MaxSpareThreads 10 MaxConnectionsPerChild 0 # WinNT MPM # ThreadsPerChild: constant number of worker threads in the server process # MaxConnectionsPerChild: maximum number of connections a server process serves ThreadsPerChild 150 MaxConnectionsPerChild 0 # The maximum number of free Kbytes that every allocator is allowed # to hold without calling free(). In threaded MPMs, every thread has its own # allocator. When not set, or when set to zero, the threshold will be set to # unlimited. MaxMemFree 2048 MaxMemFree 100 httpd-2.4.41/docs/conf/extra/httpd-ssl.conf.in0000644000000000000500000003166613106652031017443 0ustar rootsrc# # This is the Apache server configuration file providing SSL support. # It contains the configuration directives to instruct the server how to # serve pages over an https connection. For detailed information about these # directives see # # Do NOT simply read the instructions in here without understanding # what they do. They're here only as hints or reminders. If you are unsure # consult the online docs. You have been warned. # # Required modules: mod_log_config, mod_setenvif, mod_ssl, # socache_shmcb_module (for default value of SSLSessionCache) # # Pseudo Random Number Generator (PRNG): # Configure one or more sources to seed the PRNG of the SSL library. # The seed data should be of good random quality. # WARNING! On some platforms /dev/random blocks if not enough entropy # is available. This means you then cannot use the /dev/random device # because it would lead to very long connection times (as long as # it requires to make more entropy available). But usually those # platforms additionally provide a /dev/urandom device which doesn't # block. So, if available, use this one instead. Read the mod_ssl User # Manual for more details. # #SSLRandomSeed startup file:/dev/random 512 #SSLRandomSeed startup file:/dev/urandom 512 #SSLRandomSeed connect file:/dev/random 512 #SSLRandomSeed connect file:/dev/urandom 512 # # When we also provide SSL we have to listen to the # standard HTTP port (see above) and to the HTTPS port # Listen @@SSLPort@@ ## ## SSL Global Context ## ## All SSL configuration in this context applies both to ## the main server and all SSL-enabled virtual hosts. ## # SSL Cipher Suite: # List the ciphers that the client is permitted to negotiate, # and that httpd will negotiate as the client of a proxied server. # See the OpenSSL documentation for a complete list of ciphers, and # ensure these follow appropriate best practices for this deployment. # httpd 2.2.30, 2.4.13 and later force-disable aNULL, eNULL and EXP ciphers, # while OpenSSL disabled these by default in 0.9.8zf/1.0.0r/1.0.1m/1.0.2a. SSLCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES SSLProxyCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES # By the end of 2016, only TLSv1.2 ciphers should remain in use. # Older ciphers should be disallowed as soon as possible, while the # kRSA ciphers do not offer forward secrecy. These changes inhibit # older clients (such as IE6 SP2 or IE8 on Windows XP, or other legacy # non-browser tooling) from successfully connecting. # # To restrict mod_ssl to use only TLSv1.2 ciphers, and disable # those protocols which do not support forward secrecy, replace # the SSLCipherSuite and SSLProxyCipherSuite directives above with # the following two directives, as soon as practical. # SSLCipherSuite HIGH:MEDIUM:!SSLv3:!kRSA # SSLProxyCipherSuite HIGH:MEDIUM:!SSLv3:!kRSA # User agents such as web browsers are not configured for the user's # own preference of either security or performance, therefore this # must be the prerogative of the web server administrator who manages # cpu load versus confidentiality, so enforce the server's cipher order. SSLHonorCipherOrder on # SSL Protocol support: # List the protocol versions which clients are allowed to connect with. # Disable SSLv3 by default (cf. RFC 7525 3.1.1). TLSv1 (1.0) should be # disabled as quickly as practical. By the end of 2016, only the TLSv1.2 # protocol or later should remain in use. SSLProtocol all -SSLv3 SSLProxyProtocol all -SSLv3 # Pass Phrase Dialog: # Configure the pass phrase gathering process. # The filtering dialog program (`builtin' is an internal # terminal dialog) has to provide the pass phrase on stdout. SSLPassPhraseDialog builtin # Inter-Process Session Cache: # Configure the SSL Session Cache: First the mechanism # to use and second the expiring timeout (in seconds). #SSLSessionCache "dbm:@exp_runtimedir@/ssl_scache" SSLSessionCache "shmcb:@exp_runtimedir@/ssl_scache(512000)" SSLSessionCacheTimeout 300 # OCSP Stapling (requires OpenSSL 0.9.8h or later) # # This feature is disabled by default and requires at least # the two directives SSLUseStapling and SSLStaplingCache. # Refer to the documentation on OCSP Stapling in the SSL/TLS # How-To for more information. # # Enable stapling for all SSL-enabled servers: #SSLUseStapling On # Define a relatively small cache for OCSP Stapling using # the same mechanism that is used for the SSL session cache # above. If stapling is used with more than a few certificates, # the size may need to be increased. (AH01929 will be logged.) #SSLStaplingCache "shmcb:@exp_runtimedir@/ssl_stapling(32768)" # Seconds before valid OCSP responses are expired from the cache #SSLStaplingStandardCacheTimeout 3600 # Seconds before invalid OCSP responses are expired from the cache #SSLStaplingErrorCacheTimeout 600 ## ## SSL Virtual Host Context ## # General setup for the virtual host DocumentRoot "@exp_htdocsdir@" ServerName www.example.com:@@SSLPort@@ ServerAdmin you@example.com ErrorLog "@exp_logfiledir@/error_log" TransferLog "@exp_logfiledir@/access_log" # SSL Engine Switch: # Enable/Disable SSL for this virtual host. SSLEngine on # Server Certificate: # Point SSLCertificateFile at a PEM encoded certificate. If # the certificate is encrypted, then you will be prompted for a # pass phrase. Note that a kill -HUP will prompt again. Keep # in mind that if you have both an RSA and a DSA certificate you # can configure both in parallel (to also allow the use of DSA # ciphers, etc.) # Some ECC cipher suites (http://www.ietf.org/rfc/rfc4492.txt) # require an ECC certificate which can also be configured in # parallel. SSLCertificateFile "@exp_sysconfdir@/server.crt" #SSLCertificateFile "@exp_sysconfdir@/server-dsa.crt" #SSLCertificateFile "@exp_sysconfdir@/server-ecc.crt" # Server Private Key: # If the key is not combined with the certificate, use this # directive to point at the key file. Keep in mind that if # you've both a RSA and a DSA private key you can configure # both in parallel (to also allow the use of DSA ciphers, etc.) # ECC keys, when in use, can also be configured in parallel SSLCertificateKeyFile "@exp_sysconfdir@/server.key" #SSLCertificateKeyFile "@exp_sysconfdir@/server-dsa.key" #SSLCertificateKeyFile "@exp_sysconfdir@/server-ecc.key" # Server Certificate Chain: # Point SSLCertificateChainFile at a file containing the # concatenation of PEM encoded CA certificates which form the # certificate chain for the server certificate. Alternatively # the referenced file can be the same as SSLCertificateFile # when the CA certificates are directly appended to the server # certificate for convenience. #SSLCertificateChainFile "@exp_sysconfdir@/server-ca.crt" # Certificate Authority (CA): # Set the CA certificate verification path where to find CA # certificates for client authentication or alternatively one # huge file containing all of them (file must be PEM encoded) # Note: Inside SSLCACertificatePath you need hash symlinks # to point to the certificate files. Use the provided # Makefile to update the hash symlinks after changes. #SSLCACertificatePath "@exp_sysconfdir@/ssl.crt" #SSLCACertificateFile "@exp_sysconfdir@/ssl.crt/ca-bundle.crt" # Certificate Revocation Lists (CRL): # Set the CA revocation path where to find CA CRLs for client # authentication or alternatively one huge file containing all # of them (file must be PEM encoded). # The CRL checking mode needs to be configured explicitly # through SSLCARevocationCheck (defaults to "none" otherwise). # Note: Inside SSLCARevocationPath you need hash symlinks # to point to the certificate files. Use the provided # Makefile to update the hash symlinks after changes. #SSLCARevocationPath "@exp_sysconfdir@/ssl.crl" #SSLCARevocationFile "@exp_sysconfdir@/ssl.crl/ca-bundle.crl" #SSLCARevocationCheck chain # Client Authentication (Type): # Client certificate verification type and depth. Types are # none, optional, require and optional_no_ca. Depth is a # number which specifies how deeply to verify the certificate # issuer chain before deciding the certificate is not valid. #SSLVerifyClient require #SSLVerifyDepth 10 # TLS-SRP mutual authentication: # Enable TLS-SRP and set the path to the OpenSSL SRP verifier # file (containing login information for SRP user accounts). # Requires OpenSSL 1.0.1 or newer. See the mod_ssl FAQ for # detailed instructions on creating this file. Example: # "openssl srp -srpvfile @exp_sysconfdir@/passwd.srpv -add username" #SSLSRPVerifierFile "@exp_sysconfdir@/passwd.srpv" # Access Control: # With SSLRequire you can do per-directory access control based # on arbitrary complex boolean expressions containing server # variable checks and other lookup directives. The syntax is a # mixture between C and Perl. See the mod_ssl documentation # for more details. # #SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \ # and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \ # and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} \ # and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \ # and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 ) \ # or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/ # # SSL Engine Options: # Set various options for the SSL engine. # o FakeBasicAuth: # Translate the client X.509 into a Basic Authorisation. This means that # the standard Auth/DBMAuth methods can be used for access control. The # user name is the `one line' version of the client's X.509 certificate. # Note that no password is obtained from the user. Every entry in the user # file needs this password: `xxj31ZMTZzkVA'. # o ExportCertData: # This exports two additional environment variables: SSL_CLIENT_CERT and # SSL_SERVER_CERT. These contain the PEM-encoded certificates of the # server (always existing) and the client (only existing when client # authentication is used). This can be used to import the certificates # into CGI scripts. # o StdEnvVars: # This exports the standard SSL/TLS related `SSL_*' environment variables. # Per default this exportation is switched off for performance reasons, # because the extraction step is an expensive operation and is usually # useless for serving static content. So one usually enables the # exportation for CGI and SSI requests only. # o StrictRequire: # This denies access when "SSLRequireSSL" or "SSLRequire" applied even # under a "Satisfy any" situation, i.e. when it applies access is denied # and no other module can change it. # o OptRenegotiate: # This enables optimized SSL connection renegotiation handling when SSL # directives are used in per-directory context. #SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire SSLOptions +StdEnvVars SSLOptions +StdEnvVars # SSL Protocol Adjustments: # The safe and default but still SSL/TLS standard compliant shutdown # approach is that mod_ssl sends the close notify alert but doesn't wait for # the close notify alert from client. When you need a different shutdown # approach you can use one of the following variables: # o ssl-unclean-shutdown: # This forces an unclean shutdown when the connection is closed, i.e. no # SSL close notify alert is sent or allowed to be received. This violates # the SSL/TLS standard but is needed for some brain-dead browsers. Use # this when you receive I/O errors because of the standard approach where # mod_ssl sends the close notify alert. # o ssl-accurate-shutdown: # This forces an accurate shutdown when the connection is closed, i.e. a # SSL close notify alert is send and mod_ssl waits for the close notify # alert of the client. This is 100% SSL/TLS standard compliant, but in # practice often causes hanging connections with brain-dead browsers. Use # this only for browsers where you know that their SSL implementation # works correctly. # Notice: Most problems of broken clients are also related to the HTTP # keep-alive facility, so you usually additionally want to disable # keep-alive for those clients, too. Use variable "nokeepalive" for this. # Similarly, one has to force some clients to use HTTP/1.0 to workaround # their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and # "force-response-1.0" for this. BrowserMatch "MSIE [2-5]" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 # Per-Server Logging: # The home of a custom SSL log file. Use this when you want a # compact non-error SSL logfile on a virtual host basis. CustomLog "@exp_logfiledir@/ssl_request_log" \ "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" httpd-2.4.41/docs/conf/magic0000644000000000000500000003141013507631724014123 0ustar rootsrc# Magic data for mod_mime_magic Apache module (originally for file(1) command) # The module is described in /manual/mod/mod_mime_magic.html # # The format is 4-5 columns: # Column #1: byte number to begin checking from, ">" indicates continuation # Column #2: type of data to match # Column #3: contents of data to match # Column #4: MIME type of result # Column #5: MIME encoding of result (optional) #------------------------------------------------------------------------------ # Localstuff: file(1) magic for locally observed files # Add any locally observed files here. #------------------------------------------------------------------------------ # end local stuff #------------------------------------------------------------------------------ #------------------------------------------------------------------------------ # Java 0 short 0xcafe >2 short 0xbabe application/java #------------------------------------------------------------------------------ # audio: file(1) magic for sound formats # # from Jan Nicolai Langfeldt , # # Sun/NeXT audio data 0 string .snd >12 belong 1 audio/basic >12 belong 2 audio/basic >12 belong 3 audio/basic >12 belong 4 audio/basic >12 belong 5 audio/basic >12 belong 6 audio/basic >12 belong 7 audio/basic >12 belong 23 audio/x-adpcm # DEC systems (e.g. DECstation 5000) use a variant of the Sun/NeXT format # that uses little-endian encoding and has a different magic number # (0x0064732E in little-endian encoding). 0 lelong 0x0064732E >12 lelong 1 audio/x-dec-basic >12 lelong 2 audio/x-dec-basic >12 lelong 3 audio/x-dec-basic >12 lelong 4 audio/x-dec-basic >12 lelong 5 audio/x-dec-basic >12 lelong 6 audio/x-dec-basic >12 lelong 7 audio/x-dec-basic # compressed (G.721 ADPCM) >12 lelong 23 audio/x-dec-adpcm # Bytes 0-3 of AIFF, AIFF-C, & 8SVX audio files are "FORM" # AIFF audio data 8 string AIFF audio/x-aiff # AIFF-C audio data 8 string AIFC audio/x-aiff # IFF/8SVX audio data 8 string 8SVX audio/x-aiff # Creative Labs AUDIO stuff # Standard MIDI data 0 string MThd audio/unknown #>9 byte >0 (format %d) #>11 byte >1 using %d channels # Creative Music (CMF) data 0 string CTMF audio/unknown # SoundBlaster instrument data 0 string SBI audio/unknown # Creative Labs voice data 0 string Creative\ Voice\ File audio/unknown ## is this next line right? it came this way... #>19 byte 0x1A #>23 byte >0 - version %d #>22 byte >0 \b.%d # [GRR 950115: is this also Creative Labs? Guessing that first line # should be string instead of unknown-endian long...] #0 long 0x4e54524b MultiTrack sound data #0 string NTRK MultiTrack sound data #>4 long x - version %ld # Microsoft WAVE format (*.wav) # [GRR 950115: probably all of the shorts and longs should be leshort/lelong] # Microsoft RIFF 0 string RIFF # - WAVE format >8 string WAVE audio/x-wav # MPEG audio. 0 beshort&0xfff0 0xfff0 audio/mpeg # C64 SID Music files, from Linus Walleij 0 string PSID audio/prs.sid #------------------------------------------------------------------------------ # c-lang: file(1) magic for C programs or various scripts # # XPM icons (Greg Roelofs, newt@uchicago.edu) # ideally should go into "images", but entries below would tag XPM as C source 0 string /*\ XPM image/x-xbm 7bit # this first will upset you if you're a PL/1 shop... (are there any left?) # in which case rm it; ascmagic will catch real C programs # C or REXX program text 0 string /* text/plain # C++ program text 0 string // text/plain #------------------------------------------------------------------------------ # compress: file(1) magic for pure-compression formats (no archives) # # compress, gzip, pack, compact, huf, squeeze, crunch, freeze, yabba, whap, etc. # # Formats for various forms of compressed data # Formats for "compress" proper have been moved into "compress.c", # because it tries to uncompress it to figure out what's inside. # standard unix compress 0 string \037\235 application/octet-stream x-compress # gzip (GNU zip, not to be confused with [Info-ZIP/PKWARE] zip archiver) 0 string \037\213 application/octet-stream x-gzip # According to gzip.h, this is the correct byte order for packed data. 0 string \037\036 application/octet-stream # # This magic number is byte-order-independent. # 0 short 017437 application/octet-stream # XXX - why *two* entries for "compacted data", one of which is # byte-order independent, and one of which is byte-order dependent? # # compacted data 0 short 0x1fff application/octet-stream 0 string \377\037 application/octet-stream # huf output 0 short 0145405 application/octet-stream # Squeeze and Crunch... # These numbers were gleaned from the Unix versions of the programs to # handle these formats. Note that I can only uncrunch, not crunch, and # I didn't have a crunched file handy, so the crunch number is untested. # Keith Waclena #0 leshort 0x76FF squeezed data (CP/M, DOS) #0 leshort 0x76FE crunched data (CP/M, DOS) # Freeze #0 string \037\237 Frozen file 2.1 #0 string \037\236 Frozen file 1.0 (or gzip 0.5) # lzh? #0 string \037\240 LZH compressed data #------------------------------------------------------------------------------ # frame: file(1) magic for FrameMaker files # # This stuff came on a FrameMaker demo tape, most of which is # copyright, but this file is "published" as witness the following: # 0 string \ # and Anna Shergold # 0 string \ 0 string \14 byte 12 (OS/2 1.x format) #>14 byte 64 (OS/2 2.x format) #>14 byte 40 (Windows 3.x format) #0 string IC icon #0 string PI pointer #0 string CI color icon #0 string CP color pointer #0 string BA bitmap array 0 string \x89PNG image/png 0 string FWS application/x-shockwave-flash 0 string CWS application/x-shockwave-flash #------------------------------------------------------------------------------ # lisp: file(1) magic for lisp programs # # various lisp types, from Daniel Quinlan (quinlan@yggdrasil.com) 0 string ;; text/plain 8bit # Emacs 18 - this is always correct, but not very magical. 0 string \012( application/x-elc # Emacs 19 0 string ;ELC\023\000\000\000 application/x-elc #------------------------------------------------------------------------------ # mail.news: file(1) magic for mail and news # # There are tests to ascmagic.c to cope with mail and news. 0 string Relay-Version: message/rfc822 7bit 0 string #!\ rnews message/rfc822 7bit 0 string N#!\ rnews message/rfc822 7bit 0 string Forward\ to message/rfc822 7bit 0 string Pipe\ to message/rfc822 7bit 0 string Return-Path: message/rfc822 7bit 0 string Path: message/news 8bit 0 string Xref: message/news 8bit 0 string From: message/rfc822 7bit 0 string Article message/news 8bit #------------------------------------------------------------------------------ # msword: file(1) magic for MS Word files # # Contributor claims: # Reversed-engineered MS Word magic numbers # 0 string \376\067\0\043 application/msword 0 string \333\245-\0\0\0 application/msword # disable this one because it applies also to other # Office/OLE documents for which msword is not correct. See PR#2608. #0 string \320\317\021\340\241\261 application/msword #------------------------------------------------------------------------------ # printer: file(1) magic for printer-formatted files # # PostScript 0 string %! application/postscript 0 string \004%! application/postscript # Acrobat # (due to clamen@cs.cmu.edu) 0 string %PDF- application/pdf #------------------------------------------------------------------------------ # sc: file(1) magic for "sc" spreadsheet # 38 string Spreadsheet application/x-sc #------------------------------------------------------------------------------ # tex: file(1) magic for TeX files # # XXX - needs byte-endian stuff (big-endian and little-endian DVI?) # # From # Although we may know the offset of certain text fields in TeX DVI # and font files, we can't use them reliably because they are not # zero terminated. [but we do anyway, christos] 0 string \367\002 application/x-dvi #0 string \367\203 TeX generic font data #0 string \367\131 TeX packed font data #0 string \367\312 TeX virtual font data #0 string This\ is\ TeX, TeX transcript text #0 string This\ is\ METAFONT, METAFONT transcript text # There is no way to detect TeX Font Metric (*.tfm) files without # breaking them apart and reading the data. The following patterns # match most *.tfm files generated by METAFONT or afm2tfm. #2 string \000\021 TeX font metric data #2 string \000\022 TeX font metric data #>34 string >\0 (%s) # Texinfo and GNU Info, from Daniel Quinlan (quinlan@yggdrasil.com) #0 string \\input\ texinfo Texinfo source text #0 string This\ is\ Info\ file GNU Info text # correct TeX magic for Linux (and maybe more) # from Peter Tobias (tobias@server.et-inf.fho-emden.de) # 0 leshort 0x02f7 application/x-dvi # RTF - Rich Text Format 0 string {\\rtf application/rtf #------------------------------------------------------------------------------ # animation: file(1) magic for animation/movie formats # # animation formats, originally from vax@ccwf.cc.utexas.edu (VaX#n8) # MPEG file 0 string \000\000\001\263 video/mpeg # # The contributor claims: # I couldn't find a real magic number for these, however, this # -appears- to work. Note that it might catch other files, too, # so BE CAREFUL! # # Note that title and author appear in the two 20-byte chunks # at decimal offsets 2 and 22, respectively, but they are XOR'ed with # 255 (hex FF)! DL format SUCKS BIG ROCKS. # # DL file version 1 , medium format (160x100, 4 images/screen) 0 byte 1 video/unknown 0 byte 2 video/unknown # Quicktime video, from Linus Walleij # from Apple quicktime file format documentation. 4 string moov video/quicktime 4 string mdat video/quicktime httpd-2.4.41/docs/conf/charset.conv0000644000000000000500000000334410147723030015432 0ustar rootsrc # Lang-abbv Charset Language #--------------------------------- en ISO-8859-1 English UTF-8 utf8 UTF-8 Unicode ucs Unicode th Cp874 Thai ja SJIS Japanese ko Cp949 Korean zh Cp950 Chinese-Traditional zh-cn GB2312 Chinese-Simplified zh-tw Cp950 Chinese cs ISO-8859-2 Czech hu ISO-8859-2 Hungarian hr ISO-8859-2 Croation pl ISO-8859-2 Polish ro ISO-8859-2 Romanian sr ISO-8859-2 Serbian sk ISO-8859-2 Slovak sl ISO-8859-2 Slovenian sq ISO-8859-2 Albanian bg ISO-8859-5 Bulgarian be ISO-8859-5 Byelorussian mk ISO-8859-5 Macedonian ru ISO-8859-5 Russian uk ISO-8859-5 Ukrainian ca ISO-8859-1 Catalan de ISO-8859-1 German da ISO-8859-1 Danish fi ISO-8859-1 Finnish fr ISO-8859-1 French es ISO-8859-1 Spanish is ISO-8859-1 Icelandic it ISO-8859-1 Italian nl ISO-8859-1 Dutch no ISO-8859-1 Norwegian pt ISO-8859-1 Portuguese sv ISO-8859-1 Swedish af ISO-8859-1 Afrikaans eu ISO-8859-1 Basque fo ISO-8859-1 Faroese gl ISO-8859-1 Galician ga ISO-8859-1 Irish gd ISO-8859-1 Scottish mt ISO-8859-3 Maltese eo ISO-8859-3 Esperanto el ISO-8859-7 Greek tr ISO-8859-9 Turkish he ISO-8859-8 Hebrew iw ISO-8859-8 Hebrew ar ISO-8859-6 Arabic et ISO-8859-1 Estonian lv ISO-8859-2 Latvian lt ISO-8859-2 Lithuanian httpd-2.4.41/docs/conf/httpd.conf.in0000644000000000000500000003303612754716707015535 0ustar rootsrc# # This is the main Apache HTTP server configuration file. It contains the # configuration directives that give the server its instructions. # See for detailed information. # In particular, see # # for a discussion of each configuration directive. # # Do NOT simply read the instructions in here without understanding # what they do. They're here only as hints or reminders. If you are unsure # consult the online docs. You have been warned. # # Configuration and logfile names: If the filenames you specify for many # of the server's control files begin with "/" (or "drive:/" for Win32), the # server will use that explicit path. If the filenames do *not* begin # with "/", the value of ServerRoot is prepended -- so "logs/access_log" # with ServerRoot set to "/usr/local/apache2" will be interpreted by the # server as "/usr/local/apache2/logs/access_log", whereas "/logs/access_log" # will be interpreted as '/logs/access_log'. # # ServerRoot: The top of the directory tree under which the server's # configuration, error, and log files are kept. # # Do not add a slash at the end of the directory path. If you point # ServerRoot at a non-local disk, be sure to specify a local disk on the # Mutex directive, if file-based mutexes are used. If you wish to share the # same ServerRoot for multiple httpd daemons, you will need to change at # least PidFile. # ServerRoot "@@ServerRoot@@" # # Mutex: Allows you to set the mutex mechanism and mutex file directory # for individual mutexes, or change the global defaults # # Uncomment and change the directory if mutexes are file-based and the default # mutex file directory is not on a local disk or is not appropriate for some # other reason. # # Mutex default:@rel_runtimedir@ # # Listen: Allows you to bind Apache to specific IP addresses and/or # ports, instead of the default. See also the # directive. # # Change this to Listen on specific IP addresses as shown below to # prevent Apache from glomming onto all bound IP addresses. # #Listen 12.34.56.78:80 Listen @@Port@@ # # Dynamic Shared Object (DSO) Support # # To be able to use the functionality of a module which was built as a DSO you # have to place corresponding `LoadModule' lines at this location so the # directives contained in it are actually available _before_ they are used. # Statically compiled modules (those listed by `httpd -l') do not need # to be loaded here. # # Example: # LoadModule foo_module modules/mod_foo.so # @@LoadModule@@ # # If you wish httpd to run as a different user or group, you must run # httpd as root initially and it will switch. # # User/Group: The name (or #number) of the user/group to run httpd as. # It is usually good practice to create a dedicated user and group for # running httpd, as with most system services. # User daemon Group daemon # 'Main' server configuration # # The directives in this section set up the values used by the 'main' # server, which responds to any requests that aren't handled by a # definition. These values also provide defaults for # any containers you may define later in the file. # # All of these directives may appear inside containers, # in which case these default settings will be overridden for the # virtual host being defined. # # # ServerAdmin: Your address, where problems with the server should be # e-mailed. This address appears on some server-generated pages, such # as error documents. e.g. admin@your-domain.com # ServerAdmin you@example.com # # ServerName gives the name and port that the server uses to identify itself. # This can often be determined automatically, but we recommend you specify # it explicitly to prevent problems during startup. # # If your host doesn't have a registered DNS name, enter its IP address here. # #ServerName www.example.com:@@Port@@ # # Deny access to the entirety of your server's filesystem. You must # explicitly permit access to web content directories in other # blocks below. # AllowOverride none Require all denied # # Note that from this point forward you must specifically allow # particular features to be enabled - so if something's not working as # you might expect, make sure that you have specifically enabled it # below. # # # DocumentRoot: The directory out of which you will serve your # documents. By default, all requests are taken from this directory, but # symbolic links and aliases may be used to point to other locations. # DocumentRoot "@exp_htdocsdir@" # # Possible values for the Options directive are "None", "All", # or any combination of: # Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews # # Note that "MultiViews" must be named *explicitly* --- "Options All" # doesn't give it to you. # # The Options directive is both complicated and important. Please see # http://httpd.apache.org/docs/2.4/mod/core.html#options # for more information. # Options Indexes FollowSymLinks # # AllowOverride controls what directives may be placed in .htaccess files. # It can be "All", "None", or any combination of the keywords: # AllowOverride FileInfo AuthConfig Limit # AllowOverride None # # Controls who can get stuff from this server. # Require all granted # # DirectoryIndex: sets the file that Apache will serve if a directory # is requested. # DirectoryIndex index.html # # The following lines prevent .htaccess and .htpasswd files from being # viewed by Web clients. # Require all denied # # ErrorLog: The location of the error log file. # If you do not specify an ErrorLog directive within a # container, error messages relating to that virtual host will be # logged here. If you *do* define an error logfile for a # container, that host's errors will be logged there and not here. # ErrorLog "@rel_logfiledir@/error_log" # # LogLevel: Control the number of messages logged to the error_log. # Possible values include: debug, info, notice, warn, error, crit, # alert, emerg. # LogLevel warn # # The following directives define some format nicknames for use with # a CustomLog directive (see below). # LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined LogFormat "%h %l %u %t \"%r\" %>s %b" common # You need to enable mod_logio.c to use %I and %O LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio # # The location and format of the access logfile (Common Logfile Format). # If you do not define any access logfiles within a # container, they will be logged here. Contrariwise, if you *do* # define per- access logfiles, transactions will be # logged therein and *not* in this file. # CustomLog "@rel_logfiledir@/access_log" common # # If you prefer a logfile with access, agent, and referer information # (Combined Logfile Format) you can use the following directive. # #CustomLog "@rel_logfiledir@/access_log" combined # # Redirect: Allows you to tell clients about documents that used to # exist in your server's namespace, but do not anymore. The client # will make a new request for the document at its new location. # Example: # Redirect permanent /foo http://www.example.com/bar # # Alias: Maps web paths into filesystem paths and is used to # access content that does not live under the DocumentRoot. # Example: # Alias /webpath /full/filesystem/path # # If you include a trailing / on /webpath then the server will # require it to be present in the URL. You will also likely # need to provide a section to allow access to # the filesystem path. # # ScriptAlias: This controls which directories contain server scripts. # ScriptAliases are essentially the same as Aliases, except that # documents in the target directory are treated as applications and # run by the server when requested rather than as documents sent to the # client. The same rules about trailing "/" apply to ScriptAlias # directives as to Alias. # ScriptAlias /cgi-bin/ "@exp_cgidir@/" # # ScriptSock: On threaded servers, designate the path to the UNIX # socket used to communicate with the CGI daemon of mod_cgid. # #Scriptsock cgisock # # "@exp_cgidir@" should be changed to whatever your ScriptAliased # CGI directory exists, if you have that configured. # AllowOverride None Options None Require all granted # # Avoid passing HTTP_PROXY environment to CGI's on this or any proxied # backend servers which have lingering "httpoxy" defects. # 'Proxy' request header is undefined by the IETF, not listed by IANA # RequestHeader unset Proxy early # # TypesConfig points to the file containing the list of mappings from # filename extension to MIME-type. # TypesConfig @rel_sysconfdir@/mime.types # # AddType allows you to add to or override the MIME configuration # file specified in TypesConfig for specific file types. # #AddType application/x-gzip .tgz # # AddEncoding allows you to have certain browsers uncompress # information on the fly. Note: Not all browsers support this. # #AddEncoding x-compress .Z #AddEncoding x-gzip .gz .tgz # # If the AddEncoding directives above are commented-out, then you # probably should define those extensions to indicate media types: # AddType application/x-compress .Z AddType application/x-gzip .gz .tgz # # AddHandler allows you to map certain file extensions to "handlers": # actions unrelated to filetype. These can be either built into the server # or added with the Action directive (see below) # # To use CGI scripts outside of ScriptAliased directories: # (You will also need to add "ExecCGI" to the "Options" directive.) # #AddHandler cgi-script .cgi # For type maps (negotiated resources): #AddHandler type-map var # # Filters allow you to process content before it is sent to the client. # # To parse .shtml files for server-side includes (SSI): # (You will also need to add "Includes" to the "Options" directive.) # #AddType text/html .shtml #AddOutputFilter INCLUDES .shtml # # The mod_mime_magic module allows the server to use various hints from the # contents of the file itself to determine its type. The MIMEMagicFile # directive tells the module where the hint definitions are located. # #MIMEMagicFile @rel_sysconfdir@/magic # # Customizable error responses come in three flavors: # 1) plain text 2) local redirects 3) external redirects # # Some examples: #ErrorDocument 500 "The server made a boo boo." #ErrorDocument 404 /missing.html #ErrorDocument 404 "/cgi-bin/missing_handler.pl" #ErrorDocument 402 http://www.example.com/subscription_info.html # # # MaxRanges: Maximum number of Ranges in a request before # returning the entire resource, or one of the special # values 'default', 'none' or 'unlimited'. # Default setting is to accept 200 Ranges. #MaxRanges unlimited # # EnableMMAP and EnableSendfile: On systems that support it, # memory-mapping or the sendfile syscall may be used to deliver # files. This usually improves server performance, but must # be turned off when serving from networked-mounted # filesystems or if support for these functions is otherwise # broken on your system. # Defaults: EnableMMAP On, EnableSendfile Off # #EnableMMAP off #EnableSendfile on # Supplemental configuration # # The configuration files in the @rel_sysconfdir@/extra/ directory can be # included to add extra features or to modify the default configuration of # the server, or you may simply copy their contents here and change as # necessary. # Server-pool management (MPM specific) #Include @rel_sysconfdir@/extra/httpd-mpm.conf # Multi-language error messages #Include @rel_sysconfdir@/extra/httpd-multilang-errordoc.conf # Fancy directory listings #Include @rel_sysconfdir@/extra/httpd-autoindex.conf # Language settings #Include @rel_sysconfdir@/extra/httpd-languages.conf # User home directories #Include @rel_sysconfdir@/extra/httpd-userdir.conf # Real-time info on requests and configuration #Include @rel_sysconfdir@/extra/httpd-info.conf # Virtual hosts #Include @rel_sysconfdir@/extra/httpd-vhosts.conf # Local access to the Apache HTTP Server Manual #Include @rel_sysconfdir@/extra/httpd-manual.conf # Distributed authoring and versioning (WebDAV) #Include @rel_sysconfdir@/extra/httpd-dav.conf # Various default settings #Include @rel_sysconfdir@/extra/httpd-default.conf # Configure mod_proxy_html to understand HTML4/XHTML1 Include @rel_sysconfdir@/extra/proxy-html.conf # Secure (SSL/TLS) connections #Include @rel_sysconfdir@/extra/httpd-ssl.conf # # Note: The following must must be present to support # starting without SSL on platforms with no /dev/random equivalent # but a statically compiled-in mod_ssl. # SSLRandomSeed startup builtin SSLRandomSeed connect builtin httpd-2.4.41/docs/conf/mime.types0000644000000000000500000016665713163461173015160 0ustar rootsrc# This file maps Internet media types to unique file extension(s). # Although created for httpd, this file is used by many software systems # and has been placed in the public domain for unlimited redisribution. # # The table below contains both registered and (common) unregistered types. # A type that has no unique extension can be ignored -- they are listed # here to guide configurations toward known types and to make it easier to # identify "new" types. File extensions are also commonly used to indicate # content languages and encodings, so choose them carefully. # # Internet media types should be registered as described in RFC 4288. # The registry is at . # # MIME type (lowercased) Extensions # ============================================ ========== # application/1d-interleaved-parityfec # application/3gpdash-qoe-report+xml # application/3gpp-ims+xml # application/a2l # application/activemessage # application/alto-costmap+json # application/alto-costmapfilter+json # application/alto-directory+json # application/alto-endpointcost+json # application/alto-endpointcostparams+json # application/alto-endpointprop+json # application/alto-endpointpropparams+json # application/alto-error+json # application/alto-networkmap+json # application/alto-networkmapfilter+json # application/aml application/andrew-inset ez # application/applefile application/applixware aw # application/atf # application/atfx application/atom+xml atom application/atomcat+xml atomcat # application/atomdeleted+xml # application/atomicmail application/atomsvc+xml atomsvc # application/atxml # application/auth-policy+xml # application/bacnet-xdd+zip # application/batch-smtp # application/beep+xml # application/calendar+json # application/calendar+xml # application/call-completion # application/cals-1840 # application/cbor # application/ccmp+xml application/ccxml+xml ccxml # application/cdfx+xml application/cdmi-capability cdmia application/cdmi-container cdmic application/cdmi-domain cdmid application/cdmi-object cdmio application/cdmi-queue cdmiq # application/cdni # application/cea # application/cea-2018+xml # application/cellml+xml # application/cfw # application/cms # application/cnrp+xml # application/coap-group+json # application/commonground # application/conference-info+xml # application/cpl+xml # application/csrattrs # application/csta+xml # application/cstadata+xml # application/csvm+json application/cu-seeme cu # application/cybercash # application/dash+xml # application/dashdelta application/davmount+xml davmount # application/dca-rft # application/dcd # application/dec-dx # application/dialog-info+xml # application/dicom # application/dii # application/dit # application/dns application/docbook+xml dbk # application/dskpp+xml application/dssc+der dssc application/dssc+xml xdssc # application/dvcs application/ecmascript ecma # application/edi-consent # application/edi-x12 # application/edifact # application/efi # application/emergencycalldata.comment+xml # application/emergencycalldata.deviceinfo+xml # application/emergencycalldata.providerinfo+xml # application/emergencycalldata.serviceinfo+xml # application/emergencycalldata.subscriberinfo+xml application/emma+xml emma # application/emotionml+xml # application/encaprtp # application/epp+xml application/epub+zip epub # application/eshop # application/example application/exi exi # application/fastinfoset # application/fastsoap # application/fdt+xml # application/fits application/font-tdpfr pfr # application/framework-attributes+xml # application/geo+json application/gml+xml gml application/gpx+xml gpx application/gxf gxf # application/gzip # application/h224 # application/held+xml # application/http application/hyperstudio stk # application/ibe-key-request+xml # application/ibe-pkg-reply+xml # application/ibe-pp-data # application/iges # application/im-iscomposing+xml # application/index # application/index.cmd # application/index.obj # application/index.response # application/index.vnd application/inkml+xml ink inkml # application/iotp application/ipfix ipfix # application/ipp # application/isup # application/its+xml application/java-archive jar application/java-serialized-object ser application/java-vm class application/javascript js # application/jose # application/jose+json # application/jrd+json application/json json # application/json-patch+json # application/json-seq application/jsonml+json jsonml # application/jwk+json # application/jwk-set+json # application/jwt # application/kpml-request+xml # application/kpml-response+xml # application/ld+json # application/lgr+xml # application/link-format # application/load-control+xml application/lost+xml lostxml # application/lostsync+xml # application/lxf application/mac-binhex40 hqx application/mac-compactpro cpt # application/macwriteii application/mads+xml mads application/marc mrc application/marcxml+xml mrcx application/mathematica ma nb mb application/mathml+xml mathml # application/mathml-content+xml # application/mathml-presentation+xml # application/mbms-associated-procedure-description+xml # application/mbms-deregister+xml # application/mbms-envelope+xml # application/mbms-msk+xml # application/mbms-msk-response+xml # application/mbms-protection-description+xml # application/mbms-reception-report+xml # application/mbms-register+xml # application/mbms-register-response+xml # application/mbms-schedule+xml # application/mbms-user-service-description+xml application/mbox mbox # application/media-policy-dataset+xml # application/media_control+xml application/mediaservercontrol+xml mscml # application/merge-patch+json application/metalink+xml metalink application/metalink4+xml meta4 application/mets+xml mets # application/mf4 # application/mikey application/mods+xml mods # application/moss-keys # application/moss-signature # application/mosskey-data # application/mosskey-request application/mp21 m21 mp21 application/mp4 mp4s # application/mpeg4-generic # application/mpeg4-iod # application/mpeg4-iod-xmt # application/mrb-consumer+xml # application/mrb-publish+xml # application/msc-ivr+xml # application/msc-mixer+xml application/msword doc dot application/mxf mxf # application/nasdata # application/news-checkgroups # application/news-groupinfo # application/news-transmission # application/nlsml+xml # application/nss # application/ocsp-request # application/ocsp-response application/octet-stream bin dms lrf mar so dist distz pkg bpk dump elc deploy application/oda oda # application/odx application/oebps-package+xml opf application/ogg ogx application/omdoc+xml omdoc application/onenote onetoc onetoc2 onetmp onepkg application/oxps oxps # application/p2p-overlay+xml # application/parityfec application/patch-ops-error+xml xer application/pdf pdf # application/pdx application/pgp-encrypted pgp # application/pgp-keys application/pgp-signature asc sig application/pics-rules prf # application/pidf+xml # application/pidf-diff+xml application/pkcs10 p10 # application/pkcs12 application/pkcs7-mime p7m p7c application/pkcs7-signature p7s application/pkcs8 p8 application/pkix-attr-cert ac application/pkix-cert cer application/pkix-crl crl application/pkix-pkipath pkipath application/pkixcmp pki application/pls+xml pls # application/poc-settings+xml application/postscript ai eps ps # application/ppsp-tracker+json # application/problem+json # application/problem+xml # application/provenance+xml # application/prs.alvestrand.titrax-sheet application/prs.cww cww # application/prs.hpub+zip # application/prs.nprend # application/prs.plucker # application/prs.rdf-xml-crypt # application/prs.xsf+xml application/pskc+xml pskcxml # application/qsig # application/raptorfec # application/rdap+json application/rdf+xml rdf application/reginfo+xml rif application/relax-ng-compact-syntax rnc # application/remote-printing # application/reputon+json application/resource-lists+xml rl application/resource-lists-diff+xml rld # application/rfc+xml # application/riscos # application/rlmi+xml application/rls-services+xml rs application/rpki-ghostbusters gbr application/rpki-manifest mft application/rpki-roa roa # application/rpki-updown application/rsd+xml rsd application/rss+xml rss application/rtf rtf # application/rtploopback # application/rtx # application/samlassertion+xml # application/samlmetadata+xml application/sbml+xml sbml # application/scaip+xml # application/scim+json application/scvp-cv-request scq application/scvp-cv-response scs application/scvp-vp-request spq application/scvp-vp-response spp application/sdp sdp # application/sep+xml # application/sep-exi # application/session-info # application/set-payment application/set-payment-initiation setpay # application/set-registration application/set-registration-initiation setreg # application/sgml # application/sgml-open-catalog application/shf+xml shf # application/sieve # application/simple-filter+xml # application/simple-message-summary # application/simplesymbolcontainer # application/slate # application/smil application/smil+xml smi smil # application/smpte336m # application/soap+fastinfoset # application/soap+xml application/sparql-query rq application/sparql-results+xml srx # application/spirits-event+xml # application/sql application/srgs gram application/srgs+xml grxml application/sru+xml sru application/ssdl+xml ssdl application/ssml+xml ssml # application/tamp-apex-update # application/tamp-apex-update-confirm # application/tamp-community-update # application/tamp-community-update-confirm # application/tamp-error # application/tamp-sequence-adjust # application/tamp-sequence-adjust-confirm # application/tamp-status-query # application/tamp-status-response # application/tamp-update # application/tamp-update-confirm application/tei+xml tei teicorpus application/thraud+xml tfi # application/timestamp-query # application/timestamp-reply application/timestamped-data tsd # application/ttml+xml # application/tve-trigger # application/ulpfec # application/urc-grpsheet+xml # application/urc-ressheet+xml # application/urc-targetdesc+xml # application/urc-uisocketdesc+xml # application/vcard+json # application/vcard+xml # application/vemmi # application/vividence.scriptfile # application/vnd.3gpp-prose+xml # application/vnd.3gpp-prose-pc3ch+xml # application/vnd.3gpp.access-transfer-events+xml # application/vnd.3gpp.bsf+xml # application/vnd.3gpp.mid-call+xml application/vnd.3gpp.pic-bw-large plb application/vnd.3gpp.pic-bw-small psb application/vnd.3gpp.pic-bw-var pvb # application/vnd.3gpp.sms # application/vnd.3gpp.sms+xml # application/vnd.3gpp.srvcc-ext+xml # application/vnd.3gpp.srvcc-info+xml # application/vnd.3gpp.state-and-event-info+xml # application/vnd.3gpp.ussd+xml # application/vnd.3gpp2.bcmcsinfo+xml # application/vnd.3gpp2.sms application/vnd.3gpp2.tcap tcap # application/vnd.3lightssoftware.imagescal application/vnd.3m.post-it-notes pwn application/vnd.accpac.simply.aso aso application/vnd.accpac.simply.imp imp application/vnd.acucobol acu application/vnd.acucorp atc acutc application/vnd.adobe.air-application-installer-package+zip air # application/vnd.adobe.flash.movie application/vnd.adobe.formscentral.fcdt fcdt application/vnd.adobe.fxp fxp fxpl # application/vnd.adobe.partial-upload application/vnd.adobe.xdp+xml xdp application/vnd.adobe.xfdf xfdf # application/vnd.aether.imp # application/vnd.ah-barcode application/vnd.ahead.space ahead application/vnd.airzip.filesecure.azf azf application/vnd.airzip.filesecure.azs azs application/vnd.amazon.ebook azw # application/vnd.amazon.mobi8-ebook application/vnd.americandynamics.acc acc application/vnd.amiga.ami ami # application/vnd.amundsen.maze+xml application/vnd.android.package-archive apk # application/vnd.anki application/vnd.anser-web-certificate-issue-initiation cii application/vnd.anser-web-funds-transfer-initiation fti application/vnd.antix.game-component atx # application/vnd.apache.thrift.binary # application/vnd.apache.thrift.compact # application/vnd.apache.thrift.json # application/vnd.api+json application/vnd.apple.installer+xml mpkg application/vnd.apple.mpegurl m3u8 # application/vnd.arastra.swi application/vnd.aristanetworks.swi swi # application/vnd.artsquare application/vnd.astraea-software.iota iota application/vnd.audiograph aep # application/vnd.autopackage # application/vnd.avistar+xml # application/vnd.balsamiq.bmml+xml # application/vnd.balsamiq.bmpr # application/vnd.bekitzur-stech+json # application/vnd.biopax.rdf+xml application/vnd.blueice.multipass mpm # application/vnd.bluetooth.ep.oob # application/vnd.bluetooth.le.oob application/vnd.bmi bmi application/vnd.businessobjects rep # application/vnd.cab-jscript # application/vnd.canon-cpdl # application/vnd.canon-lips # application/vnd.cendio.thinlinc.clientconf # application/vnd.century-systems.tcp_stream application/vnd.chemdraw+xml cdxml # application/vnd.chess-pgn application/vnd.chipnuts.karaoke-mmd mmd application/vnd.cinderella cdy # application/vnd.cirpack.isdn-ext # application/vnd.citationstyles.style+xml application/vnd.claymore cla application/vnd.cloanto.rp9 rp9 application/vnd.clonk.c4group c4g c4d c4f c4p c4u application/vnd.cluetrust.cartomobile-config c11amc application/vnd.cluetrust.cartomobile-config-pkg c11amz # application/vnd.coffeescript # application/vnd.collection+json # application/vnd.collection.doc+json # application/vnd.collection.next+json # application/vnd.comicbook+zip # application/vnd.commerce-battelle application/vnd.commonspace csp application/vnd.contact.cmsg cdbcmsg # application/vnd.coreos.ignition+json application/vnd.cosmocaller cmc application/vnd.crick.clicker clkx application/vnd.crick.clicker.keyboard clkk application/vnd.crick.clicker.palette clkp application/vnd.crick.clicker.template clkt application/vnd.crick.clicker.wordbank clkw application/vnd.criticaltools.wbs+xml wbs application/vnd.ctc-posml pml # application/vnd.ctct.ws+xml # application/vnd.cups-pdf # application/vnd.cups-postscript application/vnd.cups-ppd ppd # application/vnd.cups-raster # application/vnd.cups-raw # application/vnd.curl application/vnd.curl.car car application/vnd.curl.pcurl pcurl # application/vnd.cyan.dean.root+xml # application/vnd.cybank application/vnd.dart dart application/vnd.data-vision.rdz rdz # application/vnd.debian.binary-package application/vnd.dece.data uvf uvvf uvd uvvd application/vnd.dece.ttml+xml uvt uvvt application/vnd.dece.unspecified uvx uvvx application/vnd.dece.zip uvz uvvz application/vnd.denovo.fcselayout-link fe_launch # application/vnd.desmume.movie # application/vnd.dir-bi.plate-dl-nosuffix # application/vnd.dm.delegation+xml application/vnd.dna dna # application/vnd.document+json application/vnd.dolby.mlp mlp # application/vnd.dolby.mobile.1 # application/vnd.dolby.mobile.2 # application/vnd.doremir.scorecloud-binary-document application/vnd.dpgraph dpg application/vnd.dreamfactory dfac # application/vnd.drive+json application/vnd.ds-keypoint kpxx # application/vnd.dtg.local # application/vnd.dtg.local.flash # application/vnd.dtg.local.html application/vnd.dvb.ait ait # application/vnd.dvb.dvbj # application/vnd.dvb.esgcontainer # application/vnd.dvb.ipdcdftnotifaccess # application/vnd.dvb.ipdcesgaccess # application/vnd.dvb.ipdcesgaccess2 # application/vnd.dvb.ipdcesgpdd # application/vnd.dvb.ipdcroaming # application/vnd.dvb.iptv.alfec-base # application/vnd.dvb.iptv.alfec-enhancement # application/vnd.dvb.notif-aggregate-root+xml # application/vnd.dvb.notif-container+xml # application/vnd.dvb.notif-generic+xml # application/vnd.dvb.notif-ia-msglist+xml # application/vnd.dvb.notif-ia-registration-request+xml # application/vnd.dvb.notif-ia-registration-response+xml # application/vnd.dvb.notif-init+xml # application/vnd.dvb.pfr application/vnd.dvb.service svc # application/vnd.dxr application/vnd.dynageo geo # application/vnd.dzr # application/vnd.easykaraoke.cdgdownload # application/vnd.ecdis-update application/vnd.ecowin.chart mag # application/vnd.ecowin.filerequest # application/vnd.ecowin.fileupdate # application/vnd.ecowin.series # application/vnd.ecowin.seriesrequest # application/vnd.ecowin.seriesupdate # application/vnd.emclient.accessrequest+xml application/vnd.enliven nml # application/vnd.enphase.envoy # application/vnd.eprints.data+xml application/vnd.epson.esf esf application/vnd.epson.msf msf application/vnd.epson.quickanime qam application/vnd.epson.salt slt application/vnd.epson.ssf ssf # application/vnd.ericsson.quickcall application/vnd.eszigno3+xml es3 et3 # application/vnd.etsi.aoc+xml # application/vnd.etsi.asic-e+zip # application/vnd.etsi.asic-s+zip # application/vnd.etsi.cug+xml # application/vnd.etsi.iptvcommand+xml # application/vnd.etsi.iptvdiscovery+xml # application/vnd.etsi.iptvprofile+xml # application/vnd.etsi.iptvsad-bc+xml # application/vnd.etsi.iptvsad-cod+xml # application/vnd.etsi.iptvsad-npvr+xml # application/vnd.etsi.iptvservice+xml # application/vnd.etsi.iptvsync+xml # application/vnd.etsi.iptvueprofile+xml # application/vnd.etsi.mcid+xml # application/vnd.etsi.mheg5 # application/vnd.etsi.overload-control-policy-dataset+xml # application/vnd.etsi.pstn+xml # application/vnd.etsi.sci+xml # application/vnd.etsi.simservs+xml # application/vnd.etsi.timestamp-token # application/vnd.etsi.tsl+xml # application/vnd.etsi.tsl.der # application/vnd.eudora.data application/vnd.ezpix-album ez2 application/vnd.ezpix-package ez3 # application/vnd.f-secure.mobile # application/vnd.fastcopy-disk-image application/vnd.fdf fdf application/vnd.fdsn.mseed mseed application/vnd.fdsn.seed seed dataless # application/vnd.ffsns # application/vnd.filmit.zfc # application/vnd.fints # application/vnd.firemonkeys.cloudcell application/vnd.flographit gph application/vnd.fluxtime.clip ftc # application/vnd.font-fontforge-sfd application/vnd.framemaker fm frame maker book application/vnd.frogans.fnc fnc application/vnd.frogans.ltf ltf application/vnd.fsc.weblaunch fsc application/vnd.fujitsu.oasys oas application/vnd.fujitsu.oasys2 oa2 application/vnd.fujitsu.oasys3 oa3 application/vnd.fujitsu.oasysgp fg5 application/vnd.fujitsu.oasysprs bh2 # application/vnd.fujixerox.art-ex # application/vnd.fujixerox.art4 application/vnd.fujixerox.ddd ddd application/vnd.fujixerox.docuworks xdw application/vnd.fujixerox.docuworks.binder xbd # application/vnd.fujixerox.docuworks.container # application/vnd.fujixerox.hbpl # application/vnd.fut-misnet application/vnd.fuzzysheet fzs application/vnd.genomatix.tuxedo txd # application/vnd.geo+json # application/vnd.geocube+xml application/vnd.geogebra.file ggb application/vnd.geogebra.tool ggt application/vnd.geometry-explorer gex gre application/vnd.geonext gxt application/vnd.geoplan g2w application/vnd.geospace g3w # application/vnd.gerber # application/vnd.globalplatform.card-content-mgt # application/vnd.globalplatform.card-content-mgt-response application/vnd.gmx gmx application/vnd.google-earth.kml+xml kml application/vnd.google-earth.kmz kmz # application/vnd.gov.sk.e-form+xml # application/vnd.gov.sk.e-form+zip # application/vnd.gov.sk.xmldatacontainer+xml application/vnd.grafeq gqf gqs # application/vnd.gridmp application/vnd.groove-account gac application/vnd.groove-help ghf application/vnd.groove-identity-message gim application/vnd.groove-injector grv application/vnd.groove-tool-message gtm application/vnd.groove-tool-template tpl application/vnd.groove-vcard vcg # application/vnd.hal+json application/vnd.hal+xml hal application/vnd.handheld-entertainment+xml zmm application/vnd.hbci hbci # application/vnd.hcl-bireports # application/vnd.hdt # application/vnd.heroku+json application/vnd.hhe.lesson-player les application/vnd.hp-hpgl hpgl application/vnd.hp-hpid hpid application/vnd.hp-hps hps application/vnd.hp-jlyt jlt application/vnd.hp-pcl pcl application/vnd.hp-pclxl pclxl # application/vnd.httphone application/vnd.hydrostatix.sof-data sfd-hdstx # application/vnd.hyperdrive+json # application/vnd.hzn-3d-crossword # application/vnd.ibm.afplinedata # application/vnd.ibm.electronic-media application/vnd.ibm.minipay mpy application/vnd.ibm.modcap afp listafp list3820 application/vnd.ibm.rights-management irm application/vnd.ibm.secure-container sc application/vnd.iccprofile icc icm # application/vnd.ieee.1905 application/vnd.igloader igl application/vnd.immervision-ivp ivp application/vnd.immervision-ivu ivu # application/vnd.ims.imsccv1p1 # application/vnd.ims.imsccv1p2 # application/vnd.ims.imsccv1p3 # application/vnd.ims.lis.v2.result+json # application/vnd.ims.lti.v2.toolconsumerprofile+json # application/vnd.ims.lti.v2.toolproxy+json # application/vnd.ims.lti.v2.toolproxy.id+json # application/vnd.ims.lti.v2.toolsettings+json # application/vnd.ims.lti.v2.toolsettings.simple+json # application/vnd.informedcontrol.rms+xml # application/vnd.informix-visionary # application/vnd.infotech.project # application/vnd.infotech.project+xml # application/vnd.innopath.wamp.notification application/vnd.insors.igm igm application/vnd.intercon.formnet xpw xpx application/vnd.intergeo i2g # application/vnd.intertrust.digibox # application/vnd.intertrust.nncp application/vnd.intu.qbo qbo application/vnd.intu.qfx qfx # application/vnd.iptc.g2.catalogitem+xml # application/vnd.iptc.g2.conceptitem+xml # application/vnd.iptc.g2.knowledgeitem+xml # application/vnd.iptc.g2.newsitem+xml # application/vnd.iptc.g2.newsmessage+xml # application/vnd.iptc.g2.packageitem+xml # application/vnd.iptc.g2.planningitem+xml application/vnd.ipunplugged.rcprofile rcprofile application/vnd.irepository.package+xml irp application/vnd.is-xpr xpr application/vnd.isac.fcs fcs application/vnd.jam jam # application/vnd.japannet-directory-service # application/vnd.japannet-jpnstore-wakeup # application/vnd.japannet-payment-wakeup # application/vnd.japannet-registration # application/vnd.japannet-registration-wakeup # application/vnd.japannet-setstore-wakeup # application/vnd.japannet-verification # application/vnd.japannet-verification-wakeup application/vnd.jcp.javame.midlet-rms rms application/vnd.jisp jisp application/vnd.joost.joda-archive joda # application/vnd.jsk.isdn-ngn application/vnd.kahootz ktz ktr application/vnd.kde.karbon karbon application/vnd.kde.kchart chrt application/vnd.kde.kformula kfo application/vnd.kde.kivio flw application/vnd.kde.kontour kon application/vnd.kde.kpresenter kpr kpt application/vnd.kde.kspread ksp application/vnd.kde.kword kwd kwt application/vnd.kenameaapp htke application/vnd.kidspiration kia application/vnd.kinar kne knp application/vnd.koan skp skd skt skm application/vnd.kodak-descriptor sse application/vnd.las.las+xml lasxml # application/vnd.liberty-request+xml application/vnd.llamagraphics.life-balance.desktop lbd application/vnd.llamagraphics.life-balance.exchange+xml lbe application/vnd.lotus-1-2-3 123 application/vnd.lotus-approach apr application/vnd.lotus-freelance pre application/vnd.lotus-notes nsf application/vnd.lotus-organizer org application/vnd.lotus-screencam scm application/vnd.lotus-wordpro lwp application/vnd.macports.portpkg portpkg # application/vnd.mapbox-vector-tile # application/vnd.marlin.drm.actiontoken+xml # application/vnd.marlin.drm.conftoken+xml # application/vnd.marlin.drm.license+xml # application/vnd.marlin.drm.mdcf # application/vnd.mason+json # application/vnd.maxmind.maxmind-db application/vnd.mcd mcd application/vnd.medcalcdata mc1 application/vnd.mediastation.cdkey cdkey # application/vnd.meridian-slingshot application/vnd.mfer mwf application/vnd.mfmp mfm # application/vnd.micro+json application/vnd.micrografx.flo flo application/vnd.micrografx.igx igx # application/vnd.microsoft.portable-executable # application/vnd.miele+json application/vnd.mif mif # application/vnd.minisoft-hp3000-save # application/vnd.mitsubishi.misty-guard.trustweb application/vnd.mobius.daf daf application/vnd.mobius.dis dis application/vnd.mobius.mbk mbk application/vnd.mobius.mqy mqy application/vnd.mobius.msl msl application/vnd.mobius.plc plc application/vnd.mobius.txf txf application/vnd.mophun.application mpn application/vnd.mophun.certificate mpc # application/vnd.motorola.flexsuite # application/vnd.motorola.flexsuite.adsi # application/vnd.motorola.flexsuite.fis # application/vnd.motorola.flexsuite.gotap # application/vnd.motorola.flexsuite.kmr # application/vnd.motorola.flexsuite.ttc # application/vnd.motorola.flexsuite.wem # application/vnd.motorola.iprm application/vnd.mozilla.xul+xml xul # application/vnd.ms-3mfdocument application/vnd.ms-artgalry cil # application/vnd.ms-asf application/vnd.ms-cab-compressed cab # application/vnd.ms-color.iccprofile application/vnd.ms-excel xls xlm xla xlc xlt xlw application/vnd.ms-excel.addin.macroenabled.12 xlam application/vnd.ms-excel.sheet.binary.macroenabled.12 xlsb application/vnd.ms-excel.sheet.macroenabled.12 xlsm application/vnd.ms-excel.template.macroenabled.12 xltm application/vnd.ms-fontobject eot application/vnd.ms-htmlhelp chm application/vnd.ms-ims ims application/vnd.ms-lrm lrm # application/vnd.ms-office.activex+xml application/vnd.ms-officetheme thmx # application/vnd.ms-opentype # application/vnd.ms-package.obfuscated-opentype application/vnd.ms-pki.seccat cat application/vnd.ms-pki.stl stl # application/vnd.ms-playready.initiator+xml application/vnd.ms-powerpoint ppt pps pot application/vnd.ms-powerpoint.addin.macroenabled.12 ppam application/vnd.ms-powerpoint.presentation.macroenabled.12 pptm application/vnd.ms-powerpoint.slide.macroenabled.12 sldm application/vnd.ms-powerpoint.slideshow.macroenabled.12 ppsm application/vnd.ms-powerpoint.template.macroenabled.12 potm # application/vnd.ms-printdevicecapabilities+xml # application/vnd.ms-printing.printticket+xml # application/vnd.ms-printschematicket+xml application/vnd.ms-project mpp mpt # application/vnd.ms-tnef # application/vnd.ms-windows.devicepairing # application/vnd.ms-windows.nwprinting.oob # application/vnd.ms-windows.printerpairing # application/vnd.ms-windows.wsd.oob # application/vnd.ms-wmdrm.lic-chlg-req # application/vnd.ms-wmdrm.lic-resp # application/vnd.ms-wmdrm.meter-chlg-req # application/vnd.ms-wmdrm.meter-resp application/vnd.ms-word.document.macroenabled.12 docm application/vnd.ms-word.template.macroenabled.12 dotm application/vnd.ms-works wps wks wcm wdb application/vnd.ms-wpl wpl application/vnd.ms-xpsdocument xps # application/vnd.msa-disk-image application/vnd.mseq mseq # application/vnd.msign # application/vnd.multiad.creator # application/vnd.multiad.creator.cif # application/vnd.music-niff application/vnd.musician mus application/vnd.muvee.style msty application/vnd.mynfc taglet # application/vnd.ncd.control # application/vnd.ncd.reference # application/vnd.nervana # application/vnd.netfpx application/vnd.neurolanguage.nlu nlu # application/vnd.nintendo.nitro.rom # application/vnd.nintendo.snes.rom application/vnd.nitf ntf nitf application/vnd.noblenet-directory nnd application/vnd.noblenet-sealer nns application/vnd.noblenet-web nnw # application/vnd.nokia.catalogs # application/vnd.nokia.conml+wbxml # application/vnd.nokia.conml+xml # application/vnd.nokia.iptv.config+xml # application/vnd.nokia.isds-radio-presets # application/vnd.nokia.landmark+wbxml # application/vnd.nokia.landmark+xml # application/vnd.nokia.landmarkcollection+xml # application/vnd.nokia.n-gage.ac+xml application/vnd.nokia.n-gage.data ngdat application/vnd.nokia.n-gage.symbian.install n-gage # application/vnd.nokia.ncd # application/vnd.nokia.pcd+wbxml # application/vnd.nokia.pcd+xml application/vnd.nokia.radio-preset rpst application/vnd.nokia.radio-presets rpss application/vnd.novadigm.edm edm application/vnd.novadigm.edx edx application/vnd.novadigm.ext ext # application/vnd.ntt-local.content-share # application/vnd.ntt-local.file-transfer # application/vnd.ntt-local.ogw_remote-access # application/vnd.ntt-local.sip-ta_remote # application/vnd.ntt-local.sip-ta_tcp_stream application/vnd.oasis.opendocument.chart odc application/vnd.oasis.opendocument.chart-template otc application/vnd.oasis.opendocument.database odb application/vnd.oasis.opendocument.formula odf application/vnd.oasis.opendocument.formula-template odft application/vnd.oasis.opendocument.graphics odg application/vnd.oasis.opendocument.graphics-template otg application/vnd.oasis.opendocument.image odi application/vnd.oasis.opendocument.image-template oti application/vnd.oasis.opendocument.presentation odp application/vnd.oasis.opendocument.presentation-template otp application/vnd.oasis.opendocument.spreadsheet ods application/vnd.oasis.opendocument.spreadsheet-template ots application/vnd.oasis.opendocument.text odt application/vnd.oasis.opendocument.text-master odm application/vnd.oasis.opendocument.text-template ott application/vnd.oasis.opendocument.text-web oth # application/vnd.obn # application/vnd.oftn.l10n+json # application/vnd.oipf.contentaccessdownload+xml # application/vnd.oipf.contentaccessstreaming+xml # application/vnd.oipf.cspg-hexbinary # application/vnd.oipf.dae.svg+xml # application/vnd.oipf.dae.xhtml+xml # application/vnd.oipf.mippvcontrolmessage+xml # application/vnd.oipf.pae.gem # application/vnd.oipf.spdiscovery+xml # application/vnd.oipf.spdlist+xml # application/vnd.oipf.ueprofile+xml # application/vnd.oipf.userprofile+xml application/vnd.olpc-sugar xo # application/vnd.oma-scws-config # application/vnd.oma-scws-http-request # application/vnd.oma-scws-http-response # application/vnd.oma.bcast.associated-procedure-parameter+xml # application/vnd.oma.bcast.drm-trigger+xml # application/vnd.oma.bcast.imd+xml # application/vnd.oma.bcast.ltkm # application/vnd.oma.bcast.notification+xml # application/vnd.oma.bcast.provisioningtrigger # application/vnd.oma.bcast.sgboot # application/vnd.oma.bcast.sgdd+xml # application/vnd.oma.bcast.sgdu # application/vnd.oma.bcast.simple-symbol-container # application/vnd.oma.bcast.smartcard-trigger+xml # application/vnd.oma.bcast.sprov+xml # application/vnd.oma.bcast.stkm # application/vnd.oma.cab-address-book+xml # application/vnd.oma.cab-feature-handler+xml # application/vnd.oma.cab-pcc+xml # application/vnd.oma.cab-subs-invite+xml # application/vnd.oma.cab-user-prefs+xml # application/vnd.oma.dcd # application/vnd.oma.dcdc application/vnd.oma.dd2+xml dd2 # application/vnd.oma.drm.risd+xml # application/vnd.oma.group-usage-list+xml # application/vnd.oma.lwm2m+json # application/vnd.oma.lwm2m+tlv # application/vnd.oma.pal+xml # application/vnd.oma.poc.detailed-progress-report+xml # application/vnd.oma.poc.final-report+xml # application/vnd.oma.poc.groups+xml # application/vnd.oma.poc.invocation-descriptor+xml # application/vnd.oma.poc.optimized-progress-report+xml # application/vnd.oma.push # application/vnd.oma.scidm.messages+xml # application/vnd.oma.xcap-directory+xml # application/vnd.omads-email+xml # application/vnd.omads-file+xml # application/vnd.omads-folder+xml # application/vnd.omaloc-supl-init # application/vnd.onepager # application/vnd.openblox.game+xml # application/vnd.openblox.game-binary # application/vnd.openeye.oeb application/vnd.openofficeorg.extension oxt # application/vnd.openxmlformats-officedocument.custom-properties+xml # application/vnd.openxmlformats-officedocument.customxmlproperties+xml # application/vnd.openxmlformats-officedocument.drawing+xml # application/vnd.openxmlformats-officedocument.drawingml.chart+xml # application/vnd.openxmlformats-officedocument.drawingml.chartshapes+xml # application/vnd.openxmlformats-officedocument.drawingml.diagramcolors+xml # application/vnd.openxmlformats-officedocument.drawingml.diagramdata+xml # application/vnd.openxmlformats-officedocument.drawingml.diagramlayout+xml # application/vnd.openxmlformats-officedocument.drawingml.diagramstyle+xml # application/vnd.openxmlformats-officedocument.extended-properties+xml # application/vnd.openxmlformats-officedocument.presentationml.commentauthors+xml # application/vnd.openxmlformats-officedocument.presentationml.comments+xml # application/vnd.openxmlformats-officedocument.presentationml.handoutmaster+xml # application/vnd.openxmlformats-officedocument.presentationml.notesmaster+xml # application/vnd.openxmlformats-officedocument.presentationml.notesslide+xml application/vnd.openxmlformats-officedocument.presentationml.presentation pptx # application/vnd.openxmlformats-officedocument.presentationml.presentation.main+xml # application/vnd.openxmlformats-officedocument.presentationml.presprops+xml application/vnd.openxmlformats-officedocument.presentationml.slide sldx # application/vnd.openxmlformats-officedocument.presentationml.slide+xml # application/vnd.openxmlformats-officedocument.presentationml.slidelayout+xml # application/vnd.openxmlformats-officedocument.presentationml.slidemaster+xml application/vnd.openxmlformats-officedocument.presentationml.slideshow ppsx # application/vnd.openxmlformats-officedocument.presentationml.slideshow.main+xml # application/vnd.openxmlformats-officedocument.presentationml.slideupdateinfo+xml # application/vnd.openxmlformats-officedocument.presentationml.tablestyles+xml # application/vnd.openxmlformats-officedocument.presentationml.tags+xml application/vnd.openxmlformats-officedocument.presentationml.template potx # application/vnd.openxmlformats-officedocument.presentationml.template.main+xml # application/vnd.openxmlformats-officedocument.presentationml.viewprops+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.calcchain+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.chartsheet+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.comments+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.connections+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.dialogsheet+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.externallink+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.pivotcachedefinition+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.pivotcacherecords+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.pivottable+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.querytable+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.revisionheaders+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.revisionlog+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.sharedstrings+xml application/vnd.openxmlformats-officedocument.spreadsheetml.sheet xlsx # application/vnd.openxmlformats-officedocument.spreadsheetml.sheet.main+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.sheetmetadata+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.styles+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.table+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.tablesinglecells+xml application/vnd.openxmlformats-officedocument.spreadsheetml.template xltx # application/vnd.openxmlformats-officedocument.spreadsheetml.template.main+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.usernames+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.volatiledependencies+xml # application/vnd.openxmlformats-officedocument.spreadsheetml.worksheet+xml # application/vnd.openxmlformats-officedocument.theme+xml # application/vnd.openxmlformats-officedocument.themeoverride+xml # application/vnd.openxmlformats-officedocument.vmldrawing # application/vnd.openxmlformats-officedocument.wordprocessingml.comments+xml application/vnd.openxmlformats-officedocument.wordprocessingml.document docx # application/vnd.openxmlformats-officedocument.wordprocessingml.document.glossary+xml # application/vnd.openxmlformats-officedocument.wordprocessingml.document.main+xml # application/vnd.openxmlformats-officedocument.wordprocessingml.endnotes+xml # application/vnd.openxmlformats-officedocument.wordprocessingml.fonttable+xml # application/vnd.openxmlformats-officedocument.wordprocessingml.footer+xml # application/vnd.openxmlformats-officedocument.wordprocessingml.footnotes+xml # application/vnd.openxmlformats-officedocument.wordprocessingml.numbering+xml # application/vnd.openxmlformats-officedocument.wordprocessingml.settings+xml # application/vnd.openxmlformats-officedocument.wordprocessingml.styles+xml application/vnd.openxmlformats-officedocument.wordprocessingml.template dotx # application/vnd.openxmlformats-officedocument.wordprocessingml.template.main+xml # application/vnd.openxmlformats-officedocument.wordprocessingml.websettings+xml # application/vnd.openxmlformats-package.core-properties+xml # application/vnd.openxmlformats-package.digital-signature-xmlsignature+xml # application/vnd.openxmlformats-package.relationships+xml # application/vnd.oracle.resource+json # application/vnd.orange.indata # application/vnd.osa.netdeploy application/vnd.osgeo.mapguide.package mgp # application/vnd.osgi.bundle application/vnd.osgi.dp dp application/vnd.osgi.subsystem esa # application/vnd.otps.ct-kip+xml # application/vnd.oxli.countgraph # application/vnd.pagerduty+json application/vnd.palm pdb pqa oprc # application/vnd.panoply # application/vnd.paos.xml application/vnd.pawaafile paw # application/vnd.pcos application/vnd.pg.format str application/vnd.pg.osasli ei6 # application/vnd.piaccess.application-licence application/vnd.picsel efif application/vnd.pmi.widget wg # application/vnd.poc.group-advertisement+xml application/vnd.pocketlearn plf application/vnd.powerbuilder6 pbd # application/vnd.powerbuilder6-s # application/vnd.powerbuilder7 # application/vnd.powerbuilder7-s # application/vnd.powerbuilder75 # application/vnd.powerbuilder75-s # application/vnd.preminet application/vnd.previewsystems.box box application/vnd.proteus.magazine mgz application/vnd.publishare-delta-tree qps application/vnd.pvi.ptid1 ptid # application/vnd.pwg-multiplexed # application/vnd.pwg-xhtml-print+xml # application/vnd.qualcomm.brew-app-res # application/vnd.quarantainenet application/vnd.quark.quarkxpress qxd qxt qwd qwt qxl qxb # application/vnd.quobject-quoxdocument # application/vnd.radisys.moml+xml # application/vnd.radisys.msml+xml # application/vnd.radisys.msml-audit+xml # application/vnd.radisys.msml-audit-conf+xml # application/vnd.radisys.msml-audit-conn+xml # application/vnd.radisys.msml-audit-dialog+xml # application/vnd.radisys.msml-audit-stream+xml # application/vnd.radisys.msml-conf+xml # application/vnd.radisys.msml-dialog+xml # application/vnd.radisys.msml-dialog-base+xml # application/vnd.radisys.msml-dialog-fax-detect+xml # application/vnd.radisys.msml-dialog-fax-sendrecv+xml # application/vnd.radisys.msml-dialog-group+xml # application/vnd.radisys.msml-dialog-speech+xml # application/vnd.radisys.msml-dialog-transform+xml # application/vnd.rainstor.data # application/vnd.rapid # application/vnd.rar application/vnd.realvnc.bed bed application/vnd.recordare.musicxml mxl application/vnd.recordare.musicxml+xml musicxml # application/vnd.renlearn.rlprint application/vnd.rig.cryptonote cryptonote application/vnd.rim.cod cod application/vnd.rn-realmedia rm application/vnd.rn-realmedia-vbr rmvb application/vnd.route66.link66+xml link66 # application/vnd.rs-274x # application/vnd.ruckus.download # application/vnd.s3sms application/vnd.sailingtracker.track st # application/vnd.sbm.cid # application/vnd.sbm.mid2 # application/vnd.scribus # application/vnd.sealed.3df # application/vnd.sealed.csf # application/vnd.sealed.doc # application/vnd.sealed.eml # application/vnd.sealed.mht # application/vnd.sealed.net # application/vnd.sealed.ppt # application/vnd.sealed.tiff # application/vnd.sealed.xls # application/vnd.sealedmedia.softseal.html # application/vnd.sealedmedia.softseal.pdf application/vnd.seemail see application/vnd.sema sema application/vnd.semd semd application/vnd.semf semf application/vnd.shana.informed.formdata ifm application/vnd.shana.informed.formtemplate itp application/vnd.shana.informed.interchange iif application/vnd.shana.informed.package ipk application/vnd.simtech-mindmapper twd twds # application/vnd.siren+json application/vnd.smaf mmf # application/vnd.smart.notebook application/vnd.smart.teacher teacher # application/vnd.software602.filler.form+xml # application/vnd.software602.filler.form-xml-zip application/vnd.solent.sdkm+xml sdkm sdkd application/vnd.spotfire.dxp dxp application/vnd.spotfire.sfs sfs # application/vnd.sss-cod # application/vnd.sss-dtf # application/vnd.sss-ntf application/vnd.stardivision.calc sdc application/vnd.stardivision.draw sda application/vnd.stardivision.impress sdd application/vnd.stardivision.math smf application/vnd.stardivision.writer sdw vor application/vnd.stardivision.writer-global sgl application/vnd.stepmania.package smzip application/vnd.stepmania.stepchart sm # application/vnd.street-stream # application/vnd.sun.wadl+xml application/vnd.sun.xml.calc sxc application/vnd.sun.xml.calc.template stc application/vnd.sun.xml.draw sxd application/vnd.sun.xml.draw.template std application/vnd.sun.xml.impress sxi application/vnd.sun.xml.impress.template sti application/vnd.sun.xml.math sxm application/vnd.sun.xml.writer sxw application/vnd.sun.xml.writer.global sxg application/vnd.sun.xml.writer.template stw application/vnd.sus-calendar sus susp application/vnd.svd svd # application/vnd.swiftview-ics application/vnd.symbian.install sis sisx application/vnd.syncml+xml xsm application/vnd.syncml.dm+wbxml bdm application/vnd.syncml.dm+xml xdm # application/vnd.syncml.dm.notification # application/vnd.syncml.dmddf+wbxml # application/vnd.syncml.dmddf+xml # application/vnd.syncml.dmtnds+wbxml # application/vnd.syncml.dmtnds+xml # application/vnd.syncml.ds.notification application/vnd.tao.intent-module-archive tao application/vnd.tcpdump.pcap pcap cap dmp # application/vnd.tmd.mediaflex.api+xml # application/vnd.tml application/vnd.tmobile-livetv tmo application/vnd.trid.tpt tpt application/vnd.triscape.mxs mxs application/vnd.trueapp tra # application/vnd.truedoc # application/vnd.ubisoft.webplayer application/vnd.ufdl ufd ufdl application/vnd.uiq.theme utz application/vnd.umajin umj application/vnd.unity unityweb application/vnd.uoml+xml uoml # application/vnd.uplanet.alert # application/vnd.uplanet.alert-wbxml # application/vnd.uplanet.bearer-choice # application/vnd.uplanet.bearer-choice-wbxml # application/vnd.uplanet.cacheop # application/vnd.uplanet.cacheop-wbxml # application/vnd.uplanet.channel # application/vnd.uplanet.channel-wbxml # application/vnd.uplanet.list # application/vnd.uplanet.list-wbxml # application/vnd.uplanet.listcmd # application/vnd.uplanet.listcmd-wbxml # application/vnd.uplanet.signal # application/vnd.uri-map # application/vnd.valve.source.material application/vnd.vcx vcx # application/vnd.vd-study # application/vnd.vectorworks # application/vnd.vel+json # application/vnd.verimatrix.vcas # application/vnd.vidsoft.vidconference application/vnd.visio vsd vst vss vsw application/vnd.visionary vis # application/vnd.vividence.scriptfile application/vnd.vsf vsf # application/vnd.wap.sic # application/vnd.wap.slc application/vnd.wap.wbxml wbxml application/vnd.wap.wmlc wmlc application/vnd.wap.wmlscriptc wmlsc application/vnd.webturbo wtb # application/vnd.wfa.p2p # application/vnd.wfa.wsc # application/vnd.windows.devicepairing # application/vnd.wmc # application/vnd.wmf.bootstrap # application/vnd.wolfram.mathematica # application/vnd.wolfram.mathematica.package application/vnd.wolfram.player nbp application/vnd.wordperfect wpd application/vnd.wqd wqd # application/vnd.wrq-hp3000-labelled application/vnd.wt.stf stf # application/vnd.wv.csp+wbxml # application/vnd.wv.csp+xml # application/vnd.wv.ssp+xml # application/vnd.xacml+json application/vnd.xara xar application/vnd.xfdl xfdl # application/vnd.xfdl.webform # application/vnd.xmi+xml # application/vnd.xmpie.cpkg # application/vnd.xmpie.dpkg # application/vnd.xmpie.plan # application/vnd.xmpie.ppkg # application/vnd.xmpie.xlim application/vnd.yamaha.hv-dic hvd application/vnd.yamaha.hv-script hvs application/vnd.yamaha.hv-voice hvp application/vnd.yamaha.openscoreformat osf application/vnd.yamaha.openscoreformat.osfpvg+xml osfpvg # application/vnd.yamaha.remote-setup application/vnd.yamaha.smaf-audio saf application/vnd.yamaha.smaf-phrase spf # application/vnd.yamaha.through-ngn # application/vnd.yamaha.tunnel-udpencap # application/vnd.yaoweme application/vnd.yellowriver-custom-menu cmp application/vnd.zul zir zirz application/vnd.zzazz.deck+xml zaz application/voicexml+xml vxml # application/vq-rtcpxr # application/watcherinfo+xml # application/whoispp-query # application/whoispp-response application/widget wgt application/winhlp hlp # application/wita # application/wordperfect5.1 application/wsdl+xml wsdl application/wspolicy+xml wspolicy application/x-7z-compressed 7z application/x-abiword abw application/x-ace-compressed ace # application/x-amf application/x-apple-diskimage dmg application/x-authorware-bin aab x32 u32 vox application/x-authorware-map aam application/x-authorware-seg aas application/x-bcpio bcpio application/x-bittorrent torrent application/x-blorb blb blorb application/x-bzip bz application/x-bzip2 bz2 boz application/x-cbr cbr cba cbt cbz cb7 application/x-cdlink vcd application/x-cfs-compressed cfs application/x-chat chat application/x-chess-pgn pgn # application/x-compress application/x-conference nsc application/x-cpio cpio application/x-csh csh application/x-debian-package deb udeb application/x-dgc-compressed dgc application/x-director dir dcr dxr cst cct cxt w3d fgd swa application/x-doom wad application/x-dtbncx+xml ncx application/x-dtbook+xml dtb application/x-dtbresource+xml res application/x-dvi dvi application/x-envoy evy application/x-eva eva application/x-font-bdf bdf # application/x-font-dos # application/x-font-framemaker application/x-font-ghostscript gsf # application/x-font-libgrx application/x-font-linux-psf psf application/x-font-pcf pcf application/x-font-snf snf # application/x-font-speedo # application/x-font-sunos-news application/x-font-type1 pfa pfb pfm afm # application/x-font-vfont application/x-freearc arc application/x-futuresplash spl application/x-gca-compressed gca application/x-glulx ulx application/x-gnumeric gnumeric application/x-gramps-xml gramps application/x-gtar gtar # application/x-gzip application/x-hdf hdf application/x-install-instructions install application/x-iso9660-image iso application/x-java-jnlp-file jnlp application/x-latex latex application/x-lzh-compressed lzh lha application/x-mie mie application/x-mobipocket-ebook prc mobi application/x-ms-application application application/x-ms-shortcut lnk application/x-ms-wmd wmd application/x-ms-wmz wmz application/x-ms-xbap xbap application/x-msaccess mdb application/x-msbinder obd application/x-mscardfile crd application/x-msclip clp application/x-msdownload exe dll com bat msi application/x-msmediaview mvb m13 m14 application/x-msmetafile wmf wmz emf emz application/x-msmoney mny application/x-mspublisher pub application/x-msschedule scd application/x-msterminal trm application/x-mswrite wri application/x-netcdf nc cdf application/x-nzb nzb application/x-pkcs12 p12 pfx application/x-pkcs7-certificates p7b spc application/x-pkcs7-certreqresp p7r application/x-rar-compressed rar application/x-research-info-systems ris application/x-sh sh application/x-shar shar application/x-shockwave-flash swf application/x-silverlight-app xap application/x-sql sql application/x-stuffit sit application/x-stuffitx sitx application/x-subrip srt application/x-sv4cpio sv4cpio application/x-sv4crc sv4crc application/x-t3vm-image t3 application/x-tads gam application/x-tar tar application/x-tcl tcl application/x-tex tex application/x-tex-tfm tfm application/x-texinfo texinfo texi application/x-tgif obj application/x-ustar ustar application/x-wais-source src # application/x-www-form-urlencoded application/x-x509-ca-cert der crt application/x-xfig fig application/x-xliff+xml xlf application/x-xpinstall xpi application/x-xz xz application/x-zmachine z1 z2 z3 z4 z5 z6 z7 z8 # application/x400-bp # application/xacml+xml application/xaml+xml xaml # application/xcap-att+xml # application/xcap-caps+xml application/xcap-diff+xml xdf # application/xcap-el+xml # application/xcap-error+xml # application/xcap-ns+xml # application/xcon-conference-info+xml # application/xcon-conference-info-diff+xml application/xenc+xml xenc application/xhtml+xml xhtml xht # application/xhtml-voice+xml application/xml xml xsl application/xml-dtd dtd # application/xml-external-parsed-entity # application/xml-patch+xml # application/xmpp+xml application/xop+xml xop application/xproc+xml xpl application/xslt+xml xslt application/xspf+xml xspf application/xv+xml mxml xhvml xvml xvm application/yang yang application/yin+xml yin application/zip zip # application/zlib # audio/1d-interleaved-parityfec # audio/32kadpcm # audio/3gpp # audio/3gpp2 # audio/ac3 audio/adpcm adp # audio/amr # audio/amr-wb # audio/amr-wb+ # audio/aptx # audio/asc # audio/atrac-advanced-lossless # audio/atrac-x # audio/atrac3 audio/basic au snd # audio/bv16 # audio/bv32 # audio/clearmode # audio/cn # audio/dat12 # audio/dls # audio/dsr-es201108 # audio/dsr-es202050 # audio/dsr-es202211 # audio/dsr-es202212 # audio/dv # audio/dvi4 # audio/eac3 # audio/encaprtp # audio/evrc # audio/evrc-qcp # audio/evrc0 # audio/evrc1 # audio/evrcb # audio/evrcb0 # audio/evrcb1 # audio/evrcnw # audio/evrcnw0 # audio/evrcnw1 # audio/evrcwb # audio/evrcwb0 # audio/evrcwb1 # audio/evs # audio/example # audio/fwdred # audio/g711-0 # audio/g719 # audio/g722 # audio/g7221 # audio/g723 # audio/g726-16 # audio/g726-24 # audio/g726-32 # audio/g726-40 # audio/g728 # audio/g729 # audio/g7291 # audio/g729d # audio/g729e # audio/gsm # audio/gsm-efr # audio/gsm-hr-08 # audio/ilbc # audio/ip-mr_v2.5 # audio/isac # audio/l16 # audio/l20 # audio/l24 # audio/l8 # audio/lpc audio/midi mid midi kar rmi # audio/mobile-xmf audio/mp4 m4a mp4a # audio/mp4a-latm # audio/mpa # audio/mpa-robust audio/mpeg mpga mp2 mp2a mp3 m2a m3a # audio/mpeg4-generic # audio/musepack audio/ogg oga ogg spx # audio/opus # audio/parityfec # audio/pcma # audio/pcma-wb # audio/pcmu # audio/pcmu-wb # audio/prs.sid # audio/qcelp # audio/raptorfec # audio/red # audio/rtp-enc-aescm128 # audio/rtp-midi # audio/rtploopback # audio/rtx audio/s3m s3m audio/silk sil # audio/smv # audio/smv-qcp # audio/smv0 # audio/sp-midi # audio/speex # audio/t140c # audio/t38 # audio/telephone-event # audio/tone # audio/uemclip # audio/ulpfec # audio/vdvi # audio/vmr-wb # audio/vnd.3gpp.iufp # audio/vnd.4sb # audio/vnd.audiokoz # audio/vnd.celp # audio/vnd.cisco.nse # audio/vnd.cmles.radio-events # audio/vnd.cns.anp1 # audio/vnd.cns.inf1 audio/vnd.dece.audio uva uvva audio/vnd.digital-winds eol # audio/vnd.dlna.adts # audio/vnd.dolby.heaac.1 # audio/vnd.dolby.heaac.2 # audio/vnd.dolby.mlp # audio/vnd.dolby.mps # audio/vnd.dolby.pl2 # audio/vnd.dolby.pl2x # audio/vnd.dolby.pl2z # audio/vnd.dolby.pulse.1 audio/vnd.dra dra audio/vnd.dts dts audio/vnd.dts.hd dtshd # audio/vnd.dvb.file # audio/vnd.everad.plj # audio/vnd.hns.audio audio/vnd.lucent.voice lvp audio/vnd.ms-playready.media.pya pya # audio/vnd.nokia.mobile-xmf # audio/vnd.nortel.vbk audio/vnd.nuera.ecelp4800 ecelp4800 audio/vnd.nuera.ecelp7470 ecelp7470 audio/vnd.nuera.ecelp9600 ecelp9600 # audio/vnd.octel.sbc # audio/vnd.qcelp # audio/vnd.rhetorex.32kadpcm audio/vnd.rip rip # audio/vnd.sealedmedia.softseal.mpeg # audio/vnd.vmx.cvsd # audio/vorbis # audio/vorbis-config audio/webm weba audio/x-aac aac audio/x-aiff aif aiff aifc audio/x-caf caf audio/x-flac flac audio/x-matroska mka audio/x-mpegurl m3u audio/x-ms-wax wax audio/x-ms-wma wma audio/x-pn-realaudio ram ra audio/x-pn-realaudio-plugin rmp # audio/x-tta audio/x-wav wav audio/xm xm chemical/x-cdx cdx chemical/x-cif cif chemical/x-cmdf cmdf chemical/x-cml cml chemical/x-csml csml # chemical/x-pdb chemical/x-xyz xyz font/collection ttc font/otf otf # font/sfnt font/ttf ttf font/woff woff font/woff2 woff2 image/bmp bmp image/cgm cgm # image/dicom-rle # image/emf # image/example # image/fits image/g3fax g3 image/gif gif image/ief ief # image/jls # image/jp2 image/jpeg jpeg jpg jpe # image/jpm # image/jpx image/ktx ktx # image/naplps image/png png image/prs.btif btif # image/prs.pti # image/pwg-raster image/sgi sgi image/svg+xml svg svgz # image/t38 image/tiff tiff tif # image/tiff-fx image/vnd.adobe.photoshop psd # image/vnd.airzip.accelerator.azv # image/vnd.cns.inf2 image/vnd.dece.graphic uvi uvvi uvg uvvg image/vnd.djvu djvu djv image/vnd.dvb.subtitle sub image/vnd.dwg dwg image/vnd.dxf dxf image/vnd.fastbidsheet fbs image/vnd.fpx fpx image/vnd.fst fst image/vnd.fujixerox.edmics-mmr mmr image/vnd.fujixerox.edmics-rlc rlc # image/vnd.globalgraphics.pgb # image/vnd.microsoft.icon # image/vnd.mix # image/vnd.mozilla.apng image/vnd.ms-modi mdi image/vnd.ms-photo wdp image/vnd.net-fpx npx # image/vnd.radiance # image/vnd.sealed.png # image/vnd.sealedmedia.softseal.gif # image/vnd.sealedmedia.softseal.jpg # image/vnd.svf # image/vnd.tencent.tap # image/vnd.valve.source.texture image/vnd.wap.wbmp wbmp image/vnd.xiff xif # image/vnd.zbrush.pcx image/webp webp # image/wmf image/x-3ds 3ds image/x-cmu-raster ras image/x-cmx cmx image/x-freehand fh fhc fh4 fh5 fh7 image/x-icon ico image/x-mrsid-image sid image/x-pcx pcx image/x-pict pic pct image/x-portable-anymap pnm image/x-portable-bitmap pbm image/x-portable-graymap pgm image/x-portable-pixmap ppm image/x-rgb rgb image/x-tga tga image/x-xbitmap xbm image/x-xpixmap xpm image/x-xwindowdump xwd # message/cpim # message/delivery-status # message/disposition-notification # message/example # message/external-body # message/feedback-report # message/global # message/global-delivery-status # message/global-disposition-notification # message/global-headers # message/http # message/imdn+xml # message/news # message/partial message/rfc822 eml mime # message/s-http # message/sip # message/sipfrag # message/tracking-status # message/vnd.si.simp # message/vnd.wfa.wsc # model/example # model/gltf+json model/iges igs iges model/mesh msh mesh silo model/vnd.collada+xml dae model/vnd.dwf dwf # model/vnd.flatland.3dml model/vnd.gdl gdl # model/vnd.gs-gdl # model/vnd.gs.gdl model/vnd.gtw gtw # model/vnd.moml+xml model/vnd.mts mts # model/vnd.opengex # model/vnd.parasolid.transmit.binary # model/vnd.parasolid.transmit.text # model/vnd.rosette.annotated-data-model # model/vnd.valve.source.compiled-map model/vnd.vtu vtu model/vrml wrl vrml model/x3d+binary x3db x3dbz # model/x3d+fastinfoset model/x3d+vrml x3dv x3dvz model/x3d+xml x3d x3dz # model/x3d-vrml # multipart/alternative # multipart/appledouble # multipart/byteranges # multipart/digest # multipart/encrypted # multipart/example # multipart/form-data # multipart/header-set # multipart/mixed # multipart/parallel # multipart/related # multipart/report # multipart/signed # multipart/voice-message # multipart/x-mixed-replace # text/1d-interleaved-parityfec text/cache-manifest appcache text/calendar ics ifb text/css css text/csv csv # text/csv-schema # text/directory # text/dns # text/ecmascript # text/encaprtp # text/enriched # text/example # text/fwdred # text/grammar-ref-list text/html html htm # text/javascript # text/jcr-cnd # text/markdown # text/mizar text/n3 n3 # text/parameters # text/parityfec text/plain txt text conf def list log in # text/provenance-notation # text/prs.fallenstein.rst text/prs.lines.tag dsc # text/prs.prop.logic # text/raptorfec # text/red # text/rfc822-headers text/richtext rtx # text/rtf # text/rtp-enc-aescm128 # text/rtploopback # text/rtx text/sgml sgml sgm # text/t140 text/tab-separated-values tsv text/troff t tr roff man me ms text/turtle ttl # text/ulpfec text/uri-list uri uris urls text/vcard vcard # text/vnd.a # text/vnd.abc text/vnd.curl curl text/vnd.curl.dcurl dcurl text/vnd.curl.mcurl mcurl text/vnd.curl.scurl scurl # text/vnd.debian.copyright # text/vnd.dmclientscript text/vnd.dvb.subtitle sub # text/vnd.esmertec.theme-descriptor text/vnd.fly fly text/vnd.fmi.flexstor flx text/vnd.graphviz gv text/vnd.in3d.3dml 3dml text/vnd.in3d.spot spot # text/vnd.iptc.newsml # text/vnd.iptc.nitf # text/vnd.latex-z # text/vnd.motorola.reflex # text/vnd.ms-mediapackage # text/vnd.net2phone.commcenter.command # text/vnd.radisys.msml-basic-layout # text/vnd.si.uricatalogue text/vnd.sun.j2me.app-descriptor jad # text/vnd.trolltech.linguist # text/vnd.wap.si # text/vnd.wap.sl text/vnd.wap.wml wml text/vnd.wap.wmlscript wmls text/x-asm s asm text/x-c c cc cxx cpp h hh dic text/x-fortran f for f77 f90 text/x-java-source java text/x-nfo nfo text/x-opml opml text/x-pascal p pas text/x-setext etx text/x-sfv sfv text/x-uuencode uu text/x-vcalendar vcs text/x-vcard vcf # text/xml # text/xml-external-parsed-entity # video/1d-interleaved-parityfec video/3gpp 3gp # video/3gpp-tt video/3gpp2 3g2 # video/bmpeg # video/bt656 # video/celb # video/dv # video/encaprtp # video/example video/h261 h261 video/h263 h263 # video/h263-1998 # video/h263-2000 video/h264 h264 # video/h264-rcdo # video/h264-svc # video/h265 # video/iso.segment video/jpeg jpgv # video/jpeg2000 video/jpm jpm jpgm video/mj2 mj2 mjp2 # video/mp1s # video/mp2p # video/mp2t video/mp4 mp4 mp4v mpg4 # video/mp4v-es video/mpeg mpeg mpg mpe m1v m2v # video/mpeg4-generic # video/mpv # video/nv video/ogg ogv # video/parityfec # video/pointer video/quicktime qt mov # video/raptorfec # video/raw # video/rtp-enc-aescm128 # video/rtploopback # video/rtx # video/smpte292m # video/ulpfec # video/vc1 # video/vnd.cctv video/vnd.dece.hd uvh uvvh video/vnd.dece.mobile uvm uvvm # video/vnd.dece.mp4 video/vnd.dece.pd uvp uvvp video/vnd.dece.sd uvs uvvs video/vnd.dece.video uvv uvvv # video/vnd.directv.mpeg # video/vnd.directv.mpeg-tts # video/vnd.dlna.mpeg-tts video/vnd.dvb.file dvb video/vnd.fvt fvt # video/vnd.hns.video # video/vnd.iptvforum.1dparityfec-1010 # video/vnd.iptvforum.1dparityfec-2005 # video/vnd.iptvforum.2dparityfec-1010 # video/vnd.iptvforum.2dparityfec-2005 # video/vnd.iptvforum.ttsavc # video/vnd.iptvforum.ttsmpeg2 # video/vnd.motorola.video # video/vnd.motorola.videop video/vnd.mpegurl mxu m4u video/vnd.ms-playready.media.pyv pyv # video/vnd.nokia.interleaved-multimedia # video/vnd.nokia.videovoip # video/vnd.objectvideo # video/vnd.radgamettools.bink # video/vnd.radgamettools.smacker # video/vnd.sealed.mpeg1 # video/vnd.sealed.mpeg4 # video/vnd.sealed.swf # video/vnd.sealedmedia.softseal.mov video/vnd.uvvu.mp4 uvu uvvu video/vnd.vivo viv # video/vp8 video/webm webm video/x-f4v f4v video/x-fli fli video/x-flv flv video/x-m4v m4v video/x-matroska mkv mk3d mks video/x-mng mng video/x-ms-asf asf asx video/x-ms-vob vob video/x-ms-wm wm video/x-ms-wmv wmv video/x-ms-wmx wmx video/x-ms-wvx wvx video/x-msvideo avi video/x-sgi-movie movie video/x-smv smv x-conference/x-cooltalk ice httpd-2.4.41/docs/man/0002755000000000000500000000000013523273343012746 5ustar rootsrchttpd-2.4.41/docs/man/htdigest.10000644000000000000500000000363613317625777014666 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "HTDIGEST" 1 "2018-07-06" "Apache HTTP Server" "htdigest" .SH NAME htdigest \- manage user files for digest authentication .SH "SYNOPSIS" .PP \fB\fBhtdigest\fR [ -\fBc\fR ] \fIpasswdfile\fR \fIrealm\fR \fIusername\fR\fR .SH "SUMMARY" .PP \fBhtdigest\fR is used to create and update the flat-files used to store usernames, realm and password for digest authentication of HTTP users\&. Resources available from the Apache HTTP server can be restricted to just the users listed in the files created by \fBhtdigest\fR\&. .PP This manual page only lists the command line arguments\&. For details of the directives necessary to configure digest authentication in httpd see the Apache manual, which is part of the Apache distribution or can be found at http://httpd\&.apache\&.org/\&. .SH "OPTIONS" .TP \fB-c\fR Create the \fIpasswdfile\fR\&. If \fIpasswdfile\fR already exists, it is deleted first\&. .TP \fB\fIpasswdfile\fR\fR Name of the file to contain the username, realm and password\&. If \fB-c\fR is given, this file is created if it does not already exist, or deleted and recreated if it does exist\&. .TP \fB\fIrealm\fR\fR The realm name to which the user name belongs\&. See http://tools\&.ietf\&.org/html/rfc2617#section-3\&.2\&.1 for more details\&. .TP \fB\fIusername\fR\fR The user name to create or update in \fIpasswdfile\fR\&. If \fIusername\fR does not exist is this file, an entry is added\&. If it does exist, the password is changed\&. .SH "SECURITY CONSIDERATIONS" .PP This program is not safe as a setuid executable\&. Do \fInot\fR make it setuid\&. httpd-2.4.41/docs/man/tr/0002755000000000000500000000000013523273343013373 5ustar rootsrchttpd-2.4.41/docs/man/tr/htdigest.10000644000000000000500000000426112133545173015270 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "HTDİGEST" 1 "2013-04-17" "Apache HTTP Sunucusu" "htdigest" .nh .SH İSİM htdigest \- Özet kimlik doÄŸrulama dosyalarını yönetir .SH "KULLANIM" .PP \fBhtdigest\fR [ -\fBc\fR ] \fIparola-dosyası\fR \fIbölge\fR \fIkullanıcı\fR .SH "ÖZET" .PP \fBhtdigest\fR, HTTP kullanıcılarının digest türü kimlik doÄŸrulaması için kullanıcı isimlerinin ve parolalarının saklanmasında kullanılacak düz metin dosyalarını oluÅŸturmak ve güncellemek için kullanılır\&. Apache HTTP sunucusunun mevcut özkaynaklarının kullanımı sadece \fBhtdigest\fR tarafından oluÅŸturulan dosyalarda listelenmiÅŸ kullanıcılara tahsis edilebilir\&. .PP Bu kılavuz sayfası sadece komut satırı deÄŸiÅŸtirgelerini listeler\&. Kullanıcı kimlik doÄŸrulamasını \fBhttpd\fR'de yapılandırmak için gerekli yönergelerle ilgili ayrıntılar için Apache dağıtımının bir parçası olan ve http://httpd\&.apache\&.org/ adresinde de bulunan Apache HTTP Sunucusu Belgelerine bakınız\&. .SH "SEÇENEKLER" .TP \fB-c\fR \fIparola-dosyası\fR oluÅŸturur\&. Dosya mevcutsa, dosya silinip yeniden yazılır\&. .TP \fIparola-dosyası\fR Kullanıcı ismi, parola ve bölge bilgilerini içeren dosyanın ismi\&. \fB-c\fR seçeneÄŸi verilmiÅŸse ve dosya mevcut deÄŸilse oluÅŸturulur, dosya mevcutsa silinip yeniden oluÅŸturulur\&. .TP \fIbölge\fR Kullanıcının mensup olduÄŸu bölge ismi\&. Daha fazla bilgi için: http://tools\&.ietf\&.org/html/rfc2617#section-3\&.2\&.1 .TP \fIkullanıcı\fR \fIparola-dosyası\fR'nda oluÅŸturulacak veya güncellenecek kullanıcı ismi\&. \fIkullanıcı\fR bu dosyada mevcut deÄŸilse yeni bir girdi eklenir\&. Girdi mevcutsa parolası deÄŸiÅŸtirilir\&. .SH "GÜVENLİK DEÄžERLENDİRMELERİ" .PP Bu program bir setuid çalıştırılabiliri olarak güvenilir olmadığından \fIsetuid yapılmamalıdır\fR\&. httpd-2.4.41/docs/man/tr/fcgistarter.80000644000000000000500000000173612243525621016003 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "FCGİSTARTER" 8 "2013-11-22" "Apache HTTP Sunucusu" "fcgistarter" .nh .SH İSİM fcgistarter \- Bir FastCGI programını çalıştır .SH "KULLANIM" .PP \fBfcgistarter\fR -\fBc\fR \fIkomut\fR -\fBp\fR \fIport\fR [ -\fBi\fR \fIarabirim\fR ] -\fBN\fR \fIsayı\fR .SH "ÖZET" .PP .SH "BİLGİNİZE" .PP Åžimdilik sadece Unix sistemlerinde çalışmaktadır\&. .SH "SEÇENEKLER" .TP \fB-c\fR \fIkomut\fR Çalıştırılacak FastCGI programı .TP \fB-p\fR \fIport\fR Programın dinleyeceÄŸi port .TP \fB-i\fR \fIarabirim\fR Programın dinleyeceÄŸi arabirim .TP \fB-N\fR \fIsayı\fR Program örneklerinin sayısı httpd-2.4.41/docs/man/tr/logresolve.10000644000000000000500000000273212133545173015637 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "LOGRESOLVE" 1 "2013-04-17" "Apache HTTP Sunucusu" "logresolve" .nh .SH İSİM logresolve \- Apache günlük dosyalarındaki IP adreslerini konak isimlerine dönüştürür .SH "KULLANIM" .PP \fBlogresolve\fR [ -\fBs\fR \fIdosyaismi\fR ] [ -\fBc\fR ] < \fIgünlük_dosyası\fR > \fIyeni_günlük_dosyası\fR .SH "ÖZET" .PP \fBlogresolve\fR, Apache'nin eriÅŸim günlüklerindeki IP adreslerini çözümlemek için bir ardıl iÅŸlem uygulamasıdır\&. İsim sunucunuza bindirdiÄŸi yükü en aza indirmek için \fBlogresolve\fR kendi arabelleÄŸinde oluÅŸturduÄŸu eÅŸleme tablosunu kullanır\&. .PP Apache günlük dosyasını standart girdisinden okur\&. IP adresleri günlük dosyası satırlarında ilk bileÅŸen olmalı ve sonraki bileÅŸenlerden bir boÅŸluk ile ayrılmalıdır\&. .SH "SEÇENEKLER" .TP -s \fIdosyaismi\fR İstatistiklerin kaydedileceÄŸi dosyanın ismi belirtilir\&. .TP -c \fBlogresolve\fR uygulamasının bazı DNS sorguları yapmasına sebep olur: IP adresine karşılık olan konak ismini bulduktan sonra özgün adresle karşılaÅŸtırmak için bu konak ismine karşılık gelen IP adresini sorgular\&. httpd-2.4.41/docs/man/tr/htpasswd.10000644000000000000500000002120312352211121015267 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "HTPASSWD" 1 "2014-06-24" "Apache HTTP Sunucusu" "htpasswd" .nh .SH İSİM htpasswd \- Temel kimlik doÄŸrulama dosyalarını yönetir .SH "KULLANIM" .PP \fBhtpasswd\fR [ -\fBc\fR ] [ -\fBi\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIbedel\fR ] [ -\fBD\fR ] [ -\fBv\fR ] \fIparola-dosyası\fR \fIkullanıcı\fR .PP \fBhtpasswd\fR -\fBb\fR [ -\fBc\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIbedel\fR ] [ -\fBD\fR ] [ -\fBv\fR ] \fIparola-dosyası\fR \fIkullanıcı\fR \fIparola\fR .PP \fBhtpasswd\fR -\fBn\fR [ -\fBi\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIbedel\fR ] \fIkullanıcı\fR .PP \fBhtpasswd\fR -\fBnb\fR [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIbedel\fR ] \fIkullanıcı\fR \fIparola\fR .SH "ÖZET" .PP \fBhtpasswd\fR, HTTP kullanıcılarının temel kimlik doÄŸrulaması için kullanıcı isimlerinin ve parolalarının saklanmasında kullanılacak düz metin dosyalarını oluÅŸturmak ve güncellemek için kullanılır\&. \fBhtpasswd\fR, güncelleme sırasında yazmak veya okumak için bir dosyaya eriÅŸemezse beklenen hiçbir iÅŸlemi yapmaz ve hata vererek çıkar\&. .PP Apache HTTP sunucusunun mevcut özkaynaklarının kullanımı sadece \fBhtpasswd\fR tarafından oluÅŸturulan dosyalarda listelenmiÅŸ kullanıcılara tahsis edilebilir\&. \fBhtpasswd\fR sadece düz metin dosyalarda saklanmış kullanıcı isimlerini ve parolalarını yönetirse de, diÄŸer veri saklama türleri için parolayı ÅŸifreleyip gösterebilir\&. Bir DBM veritabanı kullanmak isterseniz \fBdbmmanage\fR ve \fBhtdbm\fR sayfasına bakınız\&. .PP \fBhtpasswd\fR, parolaları ÅŸifrelemek için bcrypt, Apache'nin kendine özgü MD5 algoritması, SHA1 ya da sistemin crypt() yordamını kullanır\&. Bu bakımdan \fBhtpasswd\fR tarafından yönetilen dosyalar farklı algoritmalarla ÅŸifrelenmiÅŸ parolalar içerebilir\&. .PP Bu kılavuz sayfası sadece komut satırı deÄŸiÅŸtirgelerini listeler\&. Kullanıcı kimlik doÄŸrulamasını \fBhttpd\fR'de yapılandırmak için gerekli yönergelerle ilgili ayrıntılar için Apache dağıtımının bir parçası olan ve http://httpd\&.apache\&.org/ adresinde de bulunan Apache HTTP Sunucusu Belgelerine bakınız\&. .SH "SEÇENEKLER" .TP \fB-b\fR Betik kipi; parola için istek yapmak yerine parola komut satırından verilir\&. \fBParola komut satırında görünür\fR olacağından çok dikkatli kullanmak gerekir\&. Betik kullanımı için \fB-i\fR seçeneÄŸine bakınız\&. 2\&.4\&.4 ve sonraki sürümler içindir\&. .TP \fB-i\fR Parolayı doÄŸrulamaksızın standart girdiden okur (betik kullanımı için)\&. .TP \fB-c\fR \fIparola-dosyası\fR oluÅŸturur\&. Dosya mevcutsa, dosya silinip yeniden yazılır\&. Bu seçenek \fB-n\fR seçeneÄŸi ile birlikte kullanılamaz\&. .TP \fB-n\fR Sonuçları veritabanında güncellemek yerine standart çıktıya gönderir\&. Bu seçenek, Apache'nin metin veriler içermeyen veri depolarına dahil edilebilecek parolaları üretmekte yararlıdır\&. \fIparola-dosyası\fR belirtilmediÄŸinden, bu seçenek komut satırı sözdizimini deÄŸiÅŸtirir\&. Bu seçenek \fB-c\fR seçeneÄŸi ile birlikte kullanılamaz\&. .TP \fB-m\fR Parolalar için MD5 ÅŸifrelemesi kullanılır\&. Bu 2\&.2\&.18 sürümünden beri öntanımlıdır\&. .TP \fB-B\fR Parolalar için bcrypt ÅŸifrelemesi kullanılır\&. Åžu an için çok güvenli kabul edilmektedir\&. .TP \fB-C\fR \fIbedel\fR Bu seçenek sadece \fB-B\fR (bcrypt ÅŸifrelemesi) seçeneÄŸi ile birlikte kullanılabilir\&. Bcrypt algoritmasına hesaplama süresini belirtir (daha yüksek deÄŸerler daha güvenlidir, öntanımlı 5, geçerli deÄŸerler: 4 - 31)\&. .TP \fB-d\fR Parolaları ÅŸifrelemek için crypt() kullanılır\&. \fBhtpasswd\fR tarafından tüm platformlarda destekleniyor olsa da Windows, Netware ve TPF üzerinde httpd sunucusu tarafından desteklenmez\&. Bu algoritma günümüz standartlarında \fBgüvenilmez\fR kabul edilmektedir\&. 2\&.2\&.17 sürümüne kadar öntanımlı algoritma olarak kullanılmıştı\&. .TP \fB-s\fR Parolalar için SHA ÅŸifrelemesi kullanılır\&. LDAP Dizin deÄŸiÅŸim biçemini (ldif) kullanarak Netscape sunucularına/sunucularından göçü kolaylaÅŸtırır\&.Bu algoritma günümüz standartlarında \fBgüvenilmez\fR kabul edilmektedir\&. .TP \fB-p\fR Düz metin parolalar kullanılır\&. \fBhtpasswd\fR tarafından tüm platformlarda destekleniyor olsa da Windows, Netware ve TPF üzerinde httpd sunucusu tarafından sadece düz metin parolalar kabul edilir\&. .TP \fB-D\fR Kullanıcıyı siler\&. Kullanıcı belirtilen dosyada mevcutsa silinir\&. .TP -v Parolayı doÄŸrular\&. Verilen parolayı belitilen htpasswd dosyasında saklanan kullanıcı parolası ile karşılaÅŸtırarak doÄŸrulama yapar\&. 2\&.4\&.5 ve sonraki sürümler içindir\&. .TP \fIparola-dosyası\fR Kullanıcı ismini ve parolasını içeren dosyanın ismi\&. \fB-c\fR seçeneÄŸi verilmiÅŸse ve dosya mevcut deÄŸilse oluÅŸturulur, dosya mevcutsa silinip yeniden oluÅŸturulur\&. .TP \fIkullanıcı\fR \fIparola-dosyası\fR'nda oluÅŸturulacak veya güncellenecek kullanıcı ismi\&. \fIkullanıcı\fR bu dosyada mevcut deÄŸilse yeni bir girdi eklenir\&. Girdi mevcutsa parolası deÄŸiÅŸtirilir\&. .TP \fIparola\fR Åžifrelenip dosyada saklanacak düz metin parola\&. Sadece \fB-b\fR seçeneÄŸi ile kullanılır\&. .SH "ÇIKIÅž DURUMU" .PP \fBhtpasswd\fR, kullanıcı ismi ve parolasını DBM dosyasına baÅŸarıyla eklemiÅŸ veya güncellemiÅŸse 0, dosyalara eriÅŸirken bir sorun çıkmışsa 1, komut satırında bir sözdizimi hatası varsa 2, parola etkileÅŸimli alınmış fakat girdi ile eÅŸleÅŸme saÄŸlanamamışsa 3, iÅŸlem kesintiye uÄŸramışsa 4, bir deÄŸer çok uzunsa 5 (kullanıcı, parola, dosya ismi veya açıklama), kullanıcı ismi kuraldışı karakter içeriyorsa (Kısıtlamalar bölümüne bakınız) 6 ve dosya geçerli bir DBM parola dosyası deÄŸilse 7 deÄŸeriyle döner\&. .SH "ÖRNEKLER" .nf htpasswd /usr/local/etc/apache/\&.htpasswd-users jsmith .fi .PP jsmith kullanıcısı için parolayı ekler veya deÄŸiÅŸtirir\&. Parolayı vermesi için kullanıcıya parola isteÄŸi yapılır\&. Parola takviyeli Apache MD5 algoritması ile ÅŸifrelenir\&. Dosya mevcut deÄŸilse \fBhtpasswd\fR beklenen hiçbir iÅŸlemi yapmadan bir hata vererek çıkar\&. .nf htpasswd -c /home/doe/public_html/\&.htpasswd jane .fi .PP Yeni bir dosya oluÅŸturur ve kullanıcı jane için kaydı bir girdi olarak bu dosyaya yazar\&. Dosya mevcutsa fakat okunamıyor veya yazılamıyorsa dosyada bir deÄŸiÅŸiklik yapılmaz ve \fBhtpasswd\fR bir ileti gösterip bir hata durumu ile çıkar\&. .nf htpasswd -db /usr/web/\&.htpasswd-all jones Pwd4Steve .fi .PP Komut satırından verilen parolayı (Pwd4Steve) crypt() algoritmasıyla ÅŸifreler ve bunu belirtilen dosyada saklar\&. .SH "GÜVENLİK DEÄžERLENDİRMELERİ" .PP \fBhtpasswd\fR tarafından yönetilen parola dosyalarına sunucunun URI uzayından eriÅŸilememelidir; yani dosya bir tarayıcı ile okunabilecek bir yerde bulunmamalıdır\&. .PP Bu program bir setuid çalıştırılabiliri olarak güvenilir olmadığından \fIsetuid yapılmamalıdır\fR\&. .PP Komut satırında parolanın ÅŸifrelenmemiÅŸ olarak görünmesi sebebiyle \fB-b\fR seçeneÄŸinin kullanımından kaçınılmasını öneriyoruz\&. .PP crypt() algoritması kullanılırken, parolayı ÅŸekillendirmek için parolanın ilk 8 baytının kullanılacağına dikkat ediniz\&. EÄŸer parola 8 bayttan uzunsa kalanlar bir uyarı verilmeksizin iptal edilir\&. .PP SHA ÅŸifreleme biçeminde tuz kullanılmaz; yani, bir parolanın sadece bir ÅŸifreli gösterimi olabilir\&. crypt() ve MD5 biçemleri parolanın önüne rasgele üretilmiÅŸ bir tuz dizgesi eklediklerinden sözlük saldırılarına karşı daha dayanıklıdırlar\&. .PP SHA ve crypt() biçimleri günümüz standartlarında \fBgüvenilmez\fR kabul edilmektedir\&. .SH "KISITLAMALAR" .PP Windows platformuda, \fBhtpasswd\fR ile ÅŸifrelenen parolalar 255 karakterden daha uzun olamaz\&. 255 karakterden sonrası kırpılır\&. .PP \fBhtpasswd\fR tarafından kullanılan MD5 algoritması Apache yazılımına özeldir; bu algoritma ile ÅŸifrelenen parolalar baÅŸka HTTP sunucularında kullanılamayabilir\&. .PP Kullanıcı isimleri 255 bayttan uzun olamaz ve iki nokta imi (:) içeremez\&. httpd-2.4.41/docs/man/tr/httpd.80000644000000000000500000001320012352211121014562 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "HTTPD" 8 "2014-06-24" "Apache HTTP Sunucusu" "httpd" .nh .SH İSİM httpd \- Apache Hiper Metin Aktarım Protokolü Sunucusu .SH "KULLANIM" .PP \fBhttpd\fR [ -\fBd\fR \fIsunucu-kök-dizini\fR ] [ -\fBf\fR \fIyapılandırma-dosyası\fR ] [ -\fBC\fR \fIyönerge\fR ] [ -\fBc\fR \fIyönerge\fR ] [ -\fBD\fR \fIparametre\fR ] [ -\fBe\fR \fIseviye\fR ] [ -\fBE\fR \fIdosya\fR ] [ \fB-k\fR start | restart | graceful | stop | graceful-stop ] [ -\fBh\fR ] [ -\fBl\fR ] [ -\fBL\fR ] [ -\fBS\fR ] [ -\fBt\fR ] [ -\fBv\fR ] [ -\fBV\fR ] [ -\fBX\fR ] [ -\fBM\fR ] [ -\fBT\fR ] .PP Windows sistemlerinde, ek olarak ÅŸunlar vardır: .PP \fBhttpd\fR [ -\fBk\fR install | config | uninstall ] [ -\fBn\fR \fIisim\fR ] [ -\fBw\fR ] .SH "ÖZET" .PP \fBhttpd\fR, Apache Hiper Metin Aktarım Protokolü (HTTP) sunucusu programıdır\&. Tek başına çalışan bir artalan süreci olarak tasarlanmıştır\&. Bu tarz kullanıldığında istekleri iÅŸleme sokmak için çocuk süreçlerden ve evrelerden oluÅŸan bir havuz oluÅŸturur\&. .PP Genelde, \fBhttpd\fR'nin doÄŸrudan çaÄŸrılmaması gerekir\&. Unix ve benzerlerinde apachectl aracılığıyla, Windows NT, 2000 ve XP'de bir hizmet olarak, Windows 9x ve ME'de ise bir konsol uygulaması olarak çalıştırılır\&. .SH "SEÇENEKLER" .TP \fB-d\fR \fIsunucu-kök-dizini\fR \fIsunucu-kök-dizini\fR'ni ServerRoot yönergesine ilk deÄŸer olarak atar\&. Yapılandırma dosyasındaki bir ServerRoot yönergesiyle bu atama geçersiz kılınabilir\&. Bu seçenek belirtilmediÄŸi takdirde /usr/local/apache2 dizini öntanımlıdır\&. .TP \fB-f\fR \fIyapılandırma-dosyası\fR BaÅŸlatma sırasında \fIyapılandırma-dosyası\fR'ndaki yönergeler kullanılır\&. EÄŸer \fIyapılandırma-dosyası\fR bir / ile baÅŸlamıyorsa dosyanın ServerRoot yönergesinin deÄŸerine göreli olduÄŸu varsayılır\&. Seçenek belirtilmediÄŸi takdirde conf/httpd\&.conf öntanımlı deÄŸerdir\&. .TP \fB-k\fR start | restart | graceful | stop | graceful-stop \fBhttpd\fR'yi baÅŸlatmak, durdurmak ve yeniden baÅŸlatmak için sinyal gönderir\&. Daha ayrıntılı bilgi edinmek için Apache httpd'nin Durdurulması belgesine bakınız\&. .TP \fB-C\fR \fIyönerge\fR Yapılandırma \fIyönerge\fR'sini yapılandırma dosyalarını okumadan önce iÅŸleme sokar\&. .TP \fB-c\fR \fIyönerge\fR Yapılandırma \fIyönerge\fR'sini yapılandırma dosyalarını okuduktan sonra iÅŸleme sokar\&. .TP \fB-D\fR \fIparametre\fR Sunucu baÅŸlatılırken veya yeniden baÅŸlatılırken komutları ÅŸarta baÄŸlı olarak iÅŸleme sokmak veya atlamak için yapılandırma dosyalarında kullanılan bölümlerinde kullanılmak üzere bir yapılandırma \fIparametre\fR'si tanımlar\&. Ayrıca, -DNO_DETACH (ana sürecin çatallanmasını engellemek için), -DFOREGROUND (ana sürecin setsid() ve benzerlerinden çaÄŸrılmasını engellemek için) gibi daha az bilinen bazı baÅŸlatma parametrelerini atamakta da kullanılabilir\&. .TP \fB-e\fR \fIseviye\fR Hata günlüğü seviyesi olarak LogLevel yönergesine sunucu baÅŸlatılırken \fIseviye\fR deÄŸerini atar\&. Bu seçenek, baÅŸlatma sırasındaki sorunları saptamak amacıyla hata iletilerinin ayrıntı seviyesini geçici olarak arttırmak için kullanılır\&. .TP \fB-E\fR \fIdosya\fR Sunucunun baÅŸlatılması sırasında hata iletilerinin belirtilen \fIdosya\fR'ya gönderilmesini saÄŸlar\&. .TP \fB-h\fR Mevcut komut satırı seçeneklerinin kısa bir özetini çıktılar\&. .TP \fB-l\fR Sunucunun içinde derlenmiÅŸ modüllerin listesini çıktılar\&. Bu liste LoadModule yönergesi kullanılarak devingen olarak yüklenen modülleri içermez\&. .TP \fB-L\fR DuraÄŸan modüllerce saÄŸlanmış yönergeleri olası deÄŸerleriyle geçerli konumlarına yerleÅŸtirerek listeler\&. Paylaşımlı modüllerce saÄŸlanan yönergeleri listelemez\&. .TP \fB-M\fR Yüklü duraÄŸan ve paylaşımlı modülleri listeler\&. .TP \fB-S\fR Yapılandırma dosyasından çözümlenmiÅŸ haliyle ayarları gösterir (ÅŸu an sadece sanal konak ayarları gösterilmektedir)\&. .TP \fB-T\fR (2\&.3\&.8 ve sonrasında kullanılabilmektedir) BaÅŸlatma ve yeniden baÅŸlatma sırasında belge kökü sınanmadan geçilir\&. .TP \fB-t\fR Yapılandırma dosyasını sözdizimi hatalarına karşı denetler\&. Program sözdizimini denetledikten sonra sözdizimi geçerliyse 0 ile, deÄŸilse sıfırdan farklı bir deÄŸerle çıkar\&. \fB-D\fRDUMP_VHOSTS seçeneÄŸi ile birlikte kullanılmışsa ek olarak sanal konak ayrıntıları da basılır\&. \fB-D\fRDUMP_MODULES seçeneÄŸi ile ise ek olarak tüm modüller listelenir\&. .TP \fB-v\fR \fBhttpd\fR sürümünü basar ve çıkar\&. .TP \fB-V\fR Sürümü ve \fBhttpd\fR kurulum parametrelerini basar ve çıkar\&. .TP \fB-X\fR \fBhttpd\fR hata ayıklama kipinde çalışır\&. Tek çocuk süreç baÅŸlatılır ve sunucu konsolu terketmez\&. .PP AÅŸağıdaki seçenekler sadece Windows platformunda geçerlidir: .TP \fB-k\fR install | config | uninstall Parametreler bakımından sırasıyla: Apache httpd bir Windows NT hizmeti haline getirilir; baÅŸlatma seçenekleri Apache httpd hizmeti için deÄŸiÅŸtirilir; ve Apache httpd hizmeti sistemden kaldırılır\&. .TP \fB-n\fR \fIisim\fR Sinyal gönderilecek Apache httpd hizmetinin \fIismi\fR\&. .TP \fB-w\fR Hata durumunda konsol penceresi açık tutularak hata iletilerinin okunması saÄŸlanır\&. httpd-2.4.41/docs/man/tr/rotatelogs.80000644000000000000500000002107112456632712015651 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "ROTATELOGS" 8 "2015-01-18" "Apache HTTP Sunucusu" "rotatelogs" .nh .SH İSİM rotatelogs \- Apache günlüklerini döndürmek için borulu günlük kayıt programı .SH "KULLANIM" .PP \fBrotatelogs\fR [ -\fBl\fR ] [ -\fBL\fR \fIisim\fR ] [ -\fBp\fR \fIprogram\fR ] [ -\fBf\fR ] [ -\fBt\fR ] [ -\fBv\fR ] [ -\fBe\fR ] [ -\fBc\fR ] [ -\fBn\fR \fIdosya_sayısı\fR ] \fIdosyaismi\fR \fIsüre\fR|\fIboyut\fR(B|K|M|G) [ \fIsaat_farkı\fR ] .SH "ÖZET" .PP \fBrotatelogs\fR, Apache'nin borulu günlük dosyaları özelliÄŸi ile birlikte kullanmak için tasarlanmış basit bir programdır\&. Günlük dosyasının azami boyutuna göre veya belli aralıklarla günlük dosyalarını döndürür\&. .SH "SEÇENEKLER" .TP \fB-l\fR GMT yerine yerel zamanın kullanılmasını saÄŸlar\&. .TP \fB-L\fR \fIbagismi\fR Belirtilen baÄŸ dosyası ismine geçerli günlük dosyasından kalıcı bir baÄŸ oluÅŸturulur\&. tail -F bagismi gibi bir komut kullanılarak günlüğün sürekli izlenmesi için kullanılabilir\&. .TP \fB-p\fR \fIprogram\fR BelirtildiÄŸi takdirde, \fBrotatelogs\fR yeni bir günlük dosyasının her açılışında belirtilen programı çalıştırır\&. Yeni açılan dosyanın ismi programa ilk argüman olarak aktarılır\&. Bu iÅŸlem bir döndürme sonrası yapılırsa eski günlük dosyası ikinci argüman olarak aktarılır\&. \fBrotatelogs\fR iÅŸlemini sürdürmek için belirtilen programın sonlanmasını beklemez, dolayısıyla sonlanma soucunda döndürülen hata kodunu günlüğe kaydetmez\&. Çalıştırılan program \fBrotatelogs\fR ile aynı stdin, stdout ve stderr'i kullanır ve ortamı da miras alır\&. .TP \fB-f\fR İlk günlük giridisinin okunmasını beklemeden \fBrotatelogs\fR baÅŸlar baÅŸlamaz günlük dosyasının açılmasını saÄŸlar\&. Çok meÅŸgul sitelerde, sunucu baÅŸlatılıp ilk istek sunuluncaya kadar geçen zamanda günlük dosyasının yokluÄŸu özdevinimli iÅŸlemler yapan bazı günlükleme araçlarında sorunlara yol açabilir\&. Bu seçenek bu gibi durumlarda yararlıdır\&. .TP \fB-t\fR Günlük dosyasının döndürülmek yerine tepeden kırpılmasına sebep olur\&. Günlüğün \fBtail\fR gibi bir araç tarafından gerçek zamanda iÅŸlendiÄŸi ve veriyi saklamanın gerekmediÄŸi durumda kullanışlıdır\&. Dosya ismine bir sonek eklenmez, ancak biçem dizgesi '%' karakteri içeriyorsa buna uyulur\&. .TP \fB-v\fR Standart hataya verilen çıktı daha ayrıntılı olur\&. Çıktı, yapılandırma çözümlemesinin sonuçlarını ve tüm dosya açma/kapama iÅŸlemlerini içerir\&. .TP \fB-e\fR Günlüğü standart çıktıya basar\&. Günlüğün zincirdeki ilgili araç tarafından gerçek zamanda iÅŸlenmesi gerektiÄŸinde kullanışlıdır\&. .TP \fB-c\fR Create log file for each interval, even if empty\&. .TP \fB-n\fR \fIdosya_sayısı\fR Zaman damgalarına bakılmaksızın bir dosya serisi açılır\&. ÖrneÄŸin -n3 belirtilirse "logfile", "logfile\&.1", "logfile\&.2" serisi açılır ve "logfile" üzerine yazılır\&. 2\&.4\&.5 ve sonraki sürümler içindir\&. .TP \fIdosyaismi\fR .PP Günlük dosyasının ismi yoluyla birlikte belirtilir\&. \fIdosyaismi\fR '%' karakterleri içeriyorsa bunlar strftime(3) biçem belirteçleri olarak ele alınır\&. Aksi takdirde, özdevinimli olarak \fI\&.nnnnnnnnnn\fR uzantısı üretilir\&. (\fB-t\fR seçeneÄŸi kullanılmadıkça) Uzantı saniye cinsindendir ve her iki durumda da bu deÄŸer, mevcut döngü diliminin baÅŸlangıcına göre hesaplanır\&. ÖrneÄŸin, döndürmenin 86400 saniyede bir yapılacağı belirtilmiÅŸse, strftime(3) biçeminde oluÅŸturulan saat, dakika ve saniye alanları, 24 saatlik sürenin baÅŸlangıcını (geceyarısı) göstermek üzere sıfırlarla doldurulur\&. .PP strftime(3) dosyaismi biçemlemesi kullanılırken, günlük dosyası biçeminin günlük dosyası döndürülürken her zaman farklı bir dosya ismi üretecek yeterlilikte parçacıklı yapıya sahip olduÄŸundan emin olmalısınız\&. Aks takdirde döndürme iÅŸlemi yeni bir dosya baÅŸlatmak yerine hep aynı dosyanın üzerine yazar\&. ÖrneÄŸin, \fIlogfile\fR için /var/log/errorlog\&.%Y-%m-%d belirtilmiÅŸse 5 mega baytta bir yeni bir günlük dosyasına baÅŸlanacaktır\&. Fakat 5 megabayta gün içinde iki kez ulaşılırsa aynı günlük dosyası üretilir ve günlük hep aynı dosyanın üzerine yazılır\&. .TP \fIsüre\fR Günlük dosyasının yenisinin kaç saniyede bir açılacağı belirtilir\&. ÖrneÄŸin, bu süre 3600 saniye ise günlük dosyası her saat başında yenilenir; 86400 saniye ise her geceyarısı yenilenir\&. (Bu süre zarfında günlüğe kaydedilecek bir olay gerçekleÅŸmemiÅŸse dosya oluÅŸturulmaz\&.) .TP \fIboyut\fR(B|K|M|G) Boyuta göre döndürme için azami dosya boyutu\&. Belirtilenin bir süre deÄŸil de bir boyut deÄŸeri olarak ele alınması için deÄŸerin sonuna ÅŸu karakterlerden biri eklenmelidir: B (Bayt), K (kilobayt), M (megabayt), G (gigabayt)\&. .PP Süre ve boyut birlikte belirtilmiÅŸse boyut süreden sonra belirtilmelidir\&. Dosya yenilemesi, bunlardan hangisi daha önce aşılırsa o zaman gerçekleÅŸir\&. .TP \fIsaat_farkı\fR Koordinatlı evrensel zamana göre "dakika" farkı\&. Belirtilmezse, sıfır öntanımlıdır\&. ÖrneÄŸin, -5 saatlik bir zaman diliminde bulunuyorsanız bu deÄŸer -300 olmalıdır\&. ÇoÄŸu durumda, bunun yerine \fB-l\fR seçeneÄŸini kullanmak gerekir\&. .SH "ÖRNEKLER" .nf CustomLog "|bin/rotatelogs /var/log/logfile 86400" common .fi .PP nnnn, günlük kaydının baÅŸladığı sistem zamanı olmak üzere /var/log/logfile\&.nnnn dosyası oluÅŸturulur\&. Bu zaman, daima döngü süresinin katları olacağından bunu cron betiklerinizi eÅŸzamanlamakta kullanabilirsiniz\&. Her döngü süresinin sonunda (burada 24 saat sonra) yeni bir günlük dosyası açılır\&. .nf CustomLog "|bin/rotatelogs -l /var/log/logfile\&.%Y\&.%m\&.%d 86400" common .fi .PP yyyy, yıl; mm, ay; dd, ayın gününü belirtmek üzere /var/log/logfile\&.yyyy\&.mm\&.dd dosyası oluÅŸturulur\&. Her gün yerel zamanla geceyarısı yeni bir günlük dosyasına geçilecektir\&. .nf CustomLog "|bin/rotatelogs /var/log/logfile 5M" common .fi .PP Günlük dosyası 5 megabaytlık olunca yenisinin oluÅŸturulmasını saÄŸlar\&. .nf ErrorLog "|bin/rotatelogs /var/log/errorlog\&.%Y-%m-%d-%H_%M_%S 5M" .fi .PP Hata günlüğünün 5 megabaytta bir errorlog\&.YYYY-mm-dd-HH_MM_SS biçemli bir isimle oluÅŸturulmasını saÄŸlar\&. .nf CustomLog "|bin/rotatelogs -t /var/log/logfile 86400" common .fi .PP /var/log/logfile dosyasını oluÅŸturur, sunucu baÅŸlatılırken ve günde bir kere dosyanın tepesi kırpılır\&. Bu senaryoda ayrı bir sürecin (tail gibi) dosyayı gerçek zamanlı iÅŸleyeceÄŸi umulur\&. .SH "TAÅžINABİLİRLİK" .PP AÅŸağıdaki günlük dosyası biçem belirteçlerinin tüm strftime(3) gerçeklenimlerince desteklenmesi gerekir\&. Kullandığınız kütüphaneye özgü belirteçler için sisteminizdeki strftime(3) kılavuz sayfasına bakınız\&. .Ip "\(bu \s-1%A\s0 \- tam gün ismi (yerelleÅŸtirilmiÅŸ) .Ip "\(bu \s-1%a\s0 \- 3 harflik gün ismi (yerelleÅŸtirilmiÅŸ) .Ip "\(bu \s-1%B\s0 \- tam ay ismi (yerelleÅŸtirilmiÅŸ) .Ip "\(bu \s-1%b\s0 \- 3 harflik ay ismi (yerelleÅŸtirilmiÅŸ) .Ip "\(bu \s-1%c\s0 \- tarih ve saat (yerelleÅŸtirilmiÅŸ) .Ip "\(bu \s-1%d\s0 \- 2 haneli ay günü numarası .Ip "\(bu \s-1%H\s0 \- 2 haneli saat (24 saatlik) .Ip "\(bu \s-1%I\s0 \- 2 haneli saat (12 saatlik) .Ip "\(bu \s-1%j\s0 \- 3 hanelik yıl günü numarası .Ip "\(bu \s-1%M\s0 \- 2 haneli dakika .Ip "\(bu \s-1%m\s0 \- 2 haneli ay .Ip "\(bu \s-1%p\s0 \- 12 saatlik kip için öö/ös (yerelleÅŸtirilmiÅŸ) .Ip "\(bu \s-1%S\s0 \- 2 haneli saniye .Ip "\(bu \s-1%U\s0 \- 2 haneli yılın hafta numarası (Haftanın ilk gününün Pazar olduÄŸu varsayımıyla) .Ip "\(bu \s-1%W\s0 \- 2 haneli yılın hafta numarası (Haftanın ilk gününün Pazartesi olduÄŸu varsayımıyla) .Ip "\(bu \s-1%w\s0 \- 1 hanelik haftanın gün numarası (Haftanın ilk gününün Pazar olduÄŸu varsayımıyla) .Ip "\(bu \s-1%X\s0 \- saat (yerelleÅŸtirilmiÅŸ) .Ip "\(bu \s-1%x\s0 \- tarih (yerelleÅŸtirilmiÅŸ) .Ip "\(bu \s-1%Y\s0 \- 4 hanelik yıl .Ip "\(bu \s-1%y\s0 \- 2 hanelik yıl .Ip "\(bu \s-1%Z\s0 \- zaman dilimi ismi .Ip "\(bu \s-1%%\s0 \- `%' iminin kendisi httpd-2.4.41/docs/man/tr/suexec.80000644000000000000500000000260112203356434014752 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "SUEXEC" 8 "2013-08-16" "Apache HTTP Sunucusu" "suexec" .nh .SH İSİM suexec \- harici programları çalıştırmadan önce kullanıcıyı deÄŸiÅŸtirir .SH "KULLANIM" .PP \fBsuexec\fR -\fBV\fR .SH "ÖZET" .PP \fBsuexec\fR, CGI programlarını çalıştırmadan önce Apache HTTP Sunucusu tarafından kullanıcı deÄŸiÅŸtirmek için kullanılır\&. Bunu yapabilmek için sunucunun root tarafından çalıştırılmış olması gerekir\&. HTTP artalan süreci normalde root aidiyetinde çalışmadığından \fBsuexec\fR'in çalıştırılabilir dosyasının sahibi root olmalı, setuid biti etkin (u+s) olmalı ve dosyaya root dışında hiç kimse yazamamalıdır\&. .PP \fBsuexec\fR güvenlik modeli ve kavramlar hakkında bilgi edinmek için suexec belgesine (http://httpd\&.apache\&.org/docs/2\&.4/suexec\&.html) bakınız\&. .SH "SEÇENEKLER" .TP \fB-V\fR root iseniz, bu seçenek \fBsuexec\fR derleme seçeneklerini gösterir\&. Güvenlik sebebiyle tüm yapılandırma seçenekleri sadece derleme sırasında deÄŸiÅŸtirilebilir\&. httpd-2.4.41/docs/man/tr/htdbm.10000644000000000000500000002262212133545173014554 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "HTDBM" 1 "2013-04-17" "Apache HTTP Sunucusu" "htdbm" .nh .SH İSİM htdbm \- DBM parola veritabanlarını yönetir .SH "KULLANIM" .PP \fBhtdbm\fR [ -\fBT\fR\fIVTtürü\fR ] [ -\fBi\fR ] [ -\fBc\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIbedel\fR ] [ -\fBt\fR ] [ -\fBv\fR ] \fIparola-dosyası\fR \fIkullanıcı\fR .PP \fBhtdbm\fR -\fBb\fR [ -\fBT\fR\fIVTtürü\fR ] [ -\fBc\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIbedel\fR ] [ -\fBt\fR ] [ -\fBv\fR ] \fIparola-dosyası\fR \fIkullanıcı\fR \fIparola\fR .PP \fBhtdbm\fR -\fBn\fR [ -\fBi\fR ] [ -\fBc\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIbedel\fR ] [ -\fBt\fR ] [ -\fBv\fR ] \fIkullanıcı\fR .PP \fBhtdbm\fR -\fBnb\fR [ -\fBc\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIbedel\fR ] [ -\fBt\fR ] [ -\fBv\fR ] \fIkullanıcı\fR \fIparola\fR .PP \fBhtdbm\fR -\fBv\fR [ -\fBT\fR\fIVTtürü\fR ] [ -\fBi\fR ] [ -\fBc\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIbedel\fR ] [ -\fBt\fR ] [ -\fBv\fR ] \fIparola-dosyası\fR \fIkullanıcı\fR .PP \fBhtdbm\fR -\fBvb\fR [ -\fBT\fR\fIVTtürü\fR ] [ -\fBc\fR ] [ -\fBm\fR | -\fBB\fR -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIbedel\fR ] [ -\fBt\fR ] [ -\fBv\fR ] \fIparola-dosyası\fR \fIkullanıcı\fR \fIparola\fR .PP \fBhtdbm\fR -\fBx\fR [ -\fBT\fR\fIVTtürü\fR ] \fIparola-dosyası\fR \fIkullanıcı\fR .PP \fBhtdbm\fR -\fBl\fR [ -\fBT\fR\fIVTtürü\fR ] .SH "ÖZET" .PP \fBhtdbm\fR, mod_authn_dbm üzerinden HTTP kullanıcılarının temel kimlik doÄŸrulaması için kullanıcı isimlerinin ve parolalarının saklanmasında kullanılacak DBM dosyalarını yönetmek için kullanılır\&. DBM dosyaları hakkında daha ayrıntılı bilgi edinmek için \fBdbmmanage\fR sayfasına bakınız\&. .SH "SEÇENEKLER" .TP \fB-b\fR Betik kipi; parola için istek yapmak yerine parola komut satırından verilir\&. \fBParola komut satırında görünür\fR olacağından çok dikkatli kullanmak gerekir\&. Betik kullanımı için \fB-i\fR seçeneÄŸine bakınız\&. .TP \fB-i\fR Parolayı doÄŸrulamaksızın standart girdiden okur (betik kullanımı için)\&. .TP \fB-c\fR \fIparola-dosyası\fR oluÅŸturur\&. Dosya mevcutsa, dosya silinip yeniden yazılır\&. Bu seçenek \fB-n\fR seçeneÄŸi ile birlikte kullanılamaz\&. .TP \fB-n\fR Sonuçları veritabanında güncellemek yerine standart çıktıya gönderir\&. \fIparola-dosyası\fR belirtilmediÄŸinden, bu seçenek komut satırı sözdizimini deÄŸiÅŸtirir\&. Bu seçenek \fB-c\fR seçeneÄŸi ile birlikte kullanılamaz\&. .TP \fB-m\fR Parolalar için MD5 ÅŸifrelemesi kullanılır\&. Windows ve Netware için bu öntanımlıdır\&. .TP \fB-B\fR Parolalar için bcrypt ÅŸifrelemesi kullanılır\&. Åžu an için çok güvenli kabul edilmektedir\&. .TP \fB-C\fR \fIbedel\fR Bu seçenek sadece \fB-B\fR (bcrypt ÅŸifrelemesi) seçeneÄŸi ile birlikte kullanılabilir\&. Bcrypt algoritmasına hesaplama süresini belirtir (daha yüksek deÄŸerler daha güvenlidir, öntanımlı 5, geçerli deÄŸerler: 4 - 31)\&. .TP \fB-d\fR Parolaları ÅŸifrelemek için crypt() kullanılır\&. Windows, ve Netware dışında öntanımlıdır\&. \fBhtdbm\fR tarafından tüm platformlarda destekleniyor olsa da Windows ve Netware üzerinde httpd sunucusu tarafından desteklenmez\&. Bu algoritma günümüz standartlarında \fBgüvenilmez\fR kabul edilmektedir\&. .TP \fB-s\fR Parolalar için SHA ÅŸifrelemesi kullanılır\&. LDAP Dizin deÄŸiÅŸim biçemini (ldif) kullanarak Netscape sunucularına/sunucularından göçü kolaylaÅŸtırır\&. Bu algoritma günümüz standartlarında \fBgüvenilmez\fR kabul edilmektedir\&. .TP \fB-p\fR Düz metin parolalar kullanılır\&. \fBhtdbm\fR tarafından tüm platformlarda destekleniyor olsa da Windows, Netware ve TPF üzerinde httpd sunucusu tarafından sadece düz metin parolalar kabul edilir\&. .TP \fB-l\fR Veritabanındaki kullanıcıları açıklamalarıyla birlikte standart çıktıya gönderir\&. .TP \fB-v\fR Kullanıcı adını ve parolasını doÄŸrular\&. Program belirtilen parolanın geçerli olup olmadığını belirten bir ileti basar\&. EÄŸer parola geçersizse program hata kodu 3 ile çıkar\&. .TP \fB-x\fR Kullanıcıyı siler\&. Kullanıcı belirtilen DBM dosyasında mevcutsa silinir\&. .TP \fB-t\fR Son deÄŸiÅŸtirgenin bir açıklama olarak yorumlanmasını saÄŸlar\&. Bu seçenek kullanıldığında komut satırının sonuna fazladan bir dizge eklenebilir\&. Bu dizge, veritabanında belirtilen kullanıcının "Comment" alanında saklanır\&. .TP \fIparola-dosyası\fR DBM dosyasının ismi\&. Genellikle, \&.db, \&.pag veya \&.dir eklentisi olmaksızın belirtilir\&. \fB-c\fR seçeneÄŸi ile birlikte verilmiÅŸse ve DBM dosyası mevcut deÄŸilse dosya oluÅŸturulur, mevcutsa dosya güncellenir\&. .TP \fIkullanıcı\fR \fIparola-dosyası\fR'nda oluÅŸturulacak veya güncellenecek kullanıcı ismi\&. \fIkullanıcı\fR bu dosyada mevcut deÄŸilse yeni bir girdi eklenir\&. Girdi mevcutsa parolası deÄŸiÅŸtirilir\&. .TP \fIparola\fR Åžifrelenip DBM dosyasında saklanacak düz metin parola\&. Sadece \fB-b\fR seçeneÄŸi ile kullanılır\&. .TP \fB-T\fR \fIVTtürü\fR DBM dosyasının türü; SDBM, GDBM, DB, veya "default" olabilir\&. .SH "HATALAR" .PP Birden fazla DBM dosya biçemi vardır ve büyük bir olasılıkla da sisteminizde bu birden fazla biçemle ilgili kütüphaneler vardır\&. SDBM, NDBM, GNU'nun GDBM projesi ve Berkeley/Sleepycat DB 2/3/4 bunların baÅŸlıcalarıdır\&. Ne yazık ki, bu kütüphanelerin her birinin dosya biçimleri farklıdır\&. Bu bakımdan, \fIdosyaismi\fR dosyasında kullanılan dosya biçeminin \fBhtdbm\fR tarafından kullanılanla aynı biçemde olduÄŸundan emin olmalısınız\&. \fBhtdbm\fR hangi tür DBM dosyasına baktığını saptayacak yeterliliÄŸe sahip deÄŸildir\&. Yanlış biçemli bir dosya belirtirseniz hiçbir ÅŸey dönmeyebileceÄŸi gibi, baÅŸka isimde bir DBM dosyasının oluÅŸturulması veya daha da kötüsü üzerine yazmaya çalışıyorsanız DBM dosyasının bozulması bile olasıdır\&. .PP Unix sistemlerinde, kullanılan DBM dosyasının biçemini öğrenmek için \fBfile\fR programı kullanılabilir\&. .SH "ÇIKIÅž DURUMU" .PP \fBhtdbm\fR, kullanıcı ismi ve parolasını DBM dosyasına baÅŸarıyla eklemiÅŸ veya güncellemiÅŸse 0, dosyalara eriÅŸirken bir sorun çıkmışsa 1, komut satırında bir sözdizimi hatası varsa 2, parola etkileÅŸimli alınmış fakat girdi ile eÅŸleÅŸme saÄŸlanamamışsa 3, iÅŸlem kesintiye uÄŸramışsa 4, bir deÄŸer çok uzunsa 5 (kullanıcı, parola, dosya ismi veya açıklama), kullanıcı ismi kuraldışı karakter içeriyorsa (Kısıtlamalar bölümüne bakınız) 6 ve dosya geçerli bir DBM parola dosyası deÄŸilse 7 deÄŸeriyle döner\&. .SH "ÖRNEKLER" .nf htdbm /usr/local/etc/apache/\&.htdbm-users jsmith .fi .PP jsmith kullanıcısı için parolayı ekler veya deÄŸiÅŸtirir\&. Parolayı vermesi için kullanıcıya parola isteÄŸi yapılır\&. Windows üzerinde çalıştırılırsa parola Apache MD5 algoritması ile ÅŸifrelenir, aksi takdirde sistemin crypt() yordamı kullanılır\&. Dosya mevcut deÄŸilse \fBhtdbm\fR beklenen hiçbir iÅŸlemi yapmadan bir hata vererek çıkar\&. .nf htdbm -c /home/doe/public_html/\&.htdbm jane .fi .PP Yeni bir dosya oluÅŸturur ve kullanıcı jane için kaydı bir girdi olarak bu dosyaya yazar\&. Dosya mevcutsa fakat okunamıyor veya yazılamıyorsa dosyada bir deÄŸiÅŸiklik yapılmaz ve \fBhtdbm\fR bir ileti gösterip bir hata durumu ile çıkar\&. .nf htdbm -mb /usr/web/\&.htdbm-all jones Pwd4Steve .fi .PP Komut satırından verilen parolayı (Pwd4Steve) MD5 algoritmasıyla ÅŸifreler ve bunu belirtilen dosyada saklar\&. .SH "GÜVENLİK DEÄžERLENDİRMELERİ" .PP \fBhtdbm\fR tarafından yönetilen parola dosyalarına sunucunun URI uzayından eriÅŸilememelidir; yani dosya bir tarayıcı ile okunabilecek bir yerde bulunmamalıdır\&. .PP Komut satırında parolanın ÅŸifrelenmemiÅŸ olarak görünmesi sebebiyle \fB-b\fR seçeneÄŸinin kullanımından kaçınılmasını öneriyoruz\&. .PP crypt() algoritması kullanılırken, parolayı ÅŸekillendirmek için parolanın ilk 8 baytının kullanılacağına dikkat ediniz\&. EÄŸer parola 8 bayttan uzunsa kalanlar bir uyarı verilmeksizin iptal edilir\&. .PP SHA ÅŸifreleme biçeminde tuz kullanılmaz; yani, bir parolanın sadece bir ÅŸifreli gösterimi olabilir\&. crypt() ve MD5 biçemleri parolanın önüne rasgele üretilmiÅŸ bir tuz dizgesi eklediklerinden sözlük saldırılarına karşı daha dayanıklıdır\&. .PP SHA ve crypt() biçimleri günümüz standartlarında \fBgüvenilmez\fR kabul edilmektedir\&. .SH "KISITLAMALAR" .PP Windows platformunda, \fBhtdbm\fR ile ÅŸifrelenen parolalar 255 karakterden daha uzun olamaz\&. 255 karakterden sonrası kırpılır\&. .PP \fBhtdbm\fR tarafından kullanılan MD5 algoritması Apache yazılımına özeldir; bu algoritma ile ÅŸifrelenen parolalar baÅŸka HTTP sunucularında kullanılamayabilir\&. .PP Kullanıcı isimleri 255 bayttan uzun olamaz ve iki nokta imi (:) içeremez\&. httpd-2.4.41/docs/man/tr/apachectl.80000644000000000000500000001177112133545173015414 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "APACHECTL" 8 "2013-04-17" "Apache HTTP Sunucusu" "apachectl" .nh .SH İSİM apachectl \- Apache HTTP Sunucusu Denetim Arayüzü .SH "KULLANIM" .PP \fBapachectl\fR önyüz kipinde çalıştığında \fBhttpd\fR programının bütün komut satırı argümanlarını kabul edebilir\&. .PP \fBapachectl\fR [ \fIhttpd-argümanları\fR ] .PP SysV baÅŸlatma betiÄŸi kipinde ise, \fBapachectl\fR aÅŸağıda tanımlanan basit, tek sözcüklük komutları kabul eder\&. .PP \fBapachectl\fR \fIkomut\fR .SH "ÖZET" .PP \fBapachectl\fR Apache Hiper Metin Aktarım Protokolü (HTTP) sunucusu için bir denetim aracıdır\&. Sistem yöneticisinin Apache \fBhttpd\fR artalan sürecini denetimi altında tutabilmesine yardımcı olmak amacıyla tasarlanmıştır\&. .PP \fBapachectl\fR iki kipte iÅŸleyebilir\&. İlkinde, \fBhttpd\fR komutu için basit bir önyüz gibi davranarak, gerekli ortam deÄŸiÅŸkenlerini atar ve belirtilen komut satırı seçenekleriyle \fBhttpd\fR sürecini baÅŸlatır\&. İkinci kipte ise, \fBapachectl\fR bir SysV baÅŸlatma betiÄŸi olarak \fBstart\fR, \fBrestart\fR, \fBstop\fR gibi tek sözcüklük basit argümanlar alır ve bunları uygun sinyallere dönüştürerek \fBhttpd\fR'ye gönderir\&. .PP EÄŸer Apache kurulumunuzda standart dışı dosya yolları kullanmışsanız, \fBhttpd\fR programına uygun yolları atamak için \fBapachectl\fR betiÄŸini elden geçirmelisiniz\&. Bu arada gerek gördüğünüz \fBhttpd\fR komut satırı argümanlarını da belirtebilirsiniz\&. Ayrıntılar için betik içindeki açıklamalara bakınız\&. .PP \fBapachectl\fR betiÄŸi baÅŸarı durumunda 0 çıkış deÄŸeri ile döner\&. Bir hata durumunda ise sıfırdan farklı bir deÄŸerle döner\&. Daha fazla bilgi için betik içindeki açıklamalara bakınız\&. .SH "SEÇENEKLER" .PP Burada sadece SysV baÅŸlatma betiÄŸine özgü seçeneklere yer verilmiÅŸtir\&. DiÄŸer argümanlar için \fBhttpd\fR kılavuz sayfasına bakınız\&. .TP \fBstart\fR Apache \fBhttpd\fR artalan sürecini baÅŸlatır\&. Zaten çalışmaktaysa bir hata verir\&. \fBapachectl -k start\fR komutuna eÅŸdeÄŸerdir\&. .TP \fBstop\fR Apache \fBhttpd\fR artalan sürecini durdurur\&. \fBapachectl -k stop\fR komutuna eÅŸdeÄŸerdir\&. .TP \fBrestart\fR Apache \fBhttpd\fR artalan sürecini yeniden baÅŸlatır; çalışmıyorsa çalıştırılır\&. Artalan sürecinin ölü olmadığından emin olmak için yeniden baÅŸlatmadan önce \fBconfigtest\fR seçeneÄŸi verilmiÅŸ gibi yapılandırma dosyaları sınanır\&. \fBapachectl -k restart\fR komutuna eÅŸdeÄŸerdir\&. .TP \fBfullstatus\fR \fBmod_status\fR üzerinden tam bir durum raporu gösterir\&. Bunun çalışması için sunucuda \fBmod_status\fR etkinleÅŸtirilmiÅŸ olmalı ve sisteminizde \fBlynx\fR gibi bir metin kipi HTTP tarayıcı kurulu olmalıdır\&. Durum raporuna eriÅŸmek için kullanılacak adres betik içinde STATUSURL deÄŸiÅŸkenine atanabilir\&. .TP \fBstatus\fR Özet halinde bir durum raporu gösterir\&. O an sunulmakta olan isteklerin gösterilmemesi dışında \fBfullstatus\fR seçeneÄŸi gibidir\&. .TP \fBgraceful\fR Apache \fBhttpd\fR artalan sürecini \fInazikçe\fR yeniden baÅŸlatır; çalışmıyorsa çalıştırılır\&. O an hizmet sunmakta olan çocuk süreçleri hemen durdurmaması dışında normal yeniden baÅŸlatma gibidir\&. Bir yan etki olarak eski günlük dosyaları hemen kapatılmaz\&. Yani, günlük dosyalarını döndüren bir betik kullanıyorsanız yenilerini baÅŸlatmadan önce eski dosyaların tamamen kapandığından emin olmak için belli bir süre beklemeniz gerekecektir\&. Artalan sürecinin ölü olmadığından emin olmak için yeniden baÅŸlatmadan önce \fBconfigtest\fR seçeneÄŸi verilmiÅŸ gibi yapılandırma dosyaları sınanır\&. \fBapachectl -k graceful\fR komutuna eÅŸdeÄŸerdir\&. .TP \fBgraceful-stop\fR Apache \fBhttpd\fR artalan sürecini \fInazikçe\fR durdurur\&. O an hizmet sunmakta olan çocuk süreçleri hemen durdurmaması dışında normal durdurma gibidir\&. Bir yan etki olarak eski günlük dosyaları hemen kapatılmaz\&. \fBapachectl -k graceful-stop\fR komutuna eÅŸdeÄŸerdir\&. .TP \fBconfigtest\fR Yapılandırma dosyasında sözdizimi denetimi yapılmasını saÄŸlar\&. Yapılandırma dosyaları çözümlenir ve bir sorun yoksa bir Syntax Ok raporu verilir fakat, bir hata varsa o hataya iliÅŸkin ayrıntılı bilgi verilir\&. \fBapachectl -t\fR komutuna eÅŸdeÄŸerdir\&. .PP AÅŸağıdaki seçenek eski sürümlerde kullanılmaktaydı, fakat artık kullanılmamaktadır\&. .TP startssl \fBhttpd\fR programını SSL destekli baÅŸlatmak için, yapılandırma dosyanızı ilgili yönergeleri içermesi için elden geçirmeli ve normal \fBapachectl start\fR komutunu kullanmalısınız\&. httpd-2.4.41/docs/man/tr/ab.10000644000000000000500000002502512352211121014022 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "AB" 1 "2014-06-24" "Apache HTTP Sunucusu" "ab" .nh .SH İSİM ab \- Apache HTTP sunucusu baÅŸarım ölçme aracı .SH "KULLANIM" .PP \fBab\fR [ -\fBA\fR \fIyetkili-kullanıcı:parola\fR ] [ -\fBb\fR \fItampon-boyu\fR ] [ -\fBB\fR \fIyerel-adres\fR ] [ -\fBc\fR \fIbaÄŸlantı-sayısı\fR ] [ -\fBC\fR \fIçerez-ismi=deÄŸer\fR ] [ -\fBd\fR ] [ -\fBe\fR \fIcsv-dosyası\fR ] [ -\fBf\fR \fIprotokol\fR ] [ -\fBg\fR \fIgnuplot-dosyası\fR ] [ -\fBh\fR ] [ -\fBH\fR \fIözel-baÅŸlık\fR ] [ -\fBi\fR ] [ -\fBk\fR ] [ -\fBl\fR ] [ -\fBm\fR \fIHTTP-yöntemi\fR ] [ -\fBn\fR \fIistek-sayısı\fR ] [ -\fBp\fR \fIPOST-dosyası\fR ] [ -\fBP\fR \fIvekil-yetkilisi:parola\fR ] [ -\fBq\fR ] [ -\fBr\fR ] [ -\fBs\fR \fIzamanasimi\fR ] [ -\fBS\fR ] [ -\fBt\fR \fIsaniye\fR ] [ -\fBT\fR \fIiçerik-türü\fR ] [ -\fBu\fR \fIPUT-dosyası\fR ] [ -\fBv\fR \fIayrıntı-düzeyi\fR] [ -\fBV\fR ] [ -\fBw\fR ] [ -\fBx\fR \fI-öznitelikleri\fR ] [ -\fBX\fR \fIvekil\fR[:\fIport\fR] ] [ -\fBy\fR \fI-öznitelikleri\fR ] [ -\fBz\fR \fI
    -öznitelikleri\fR ] [ -\fBZ\fR \fIşifre-kümesi\fR ] [http[s]://]\fIkonakadı\fR[:\fIport\fR]/\fIdizin\fR .SH "ÖZET" .PP \fBab\fR Apache Hiper Metin Aktarım Protokolü (HTTP) sunucunuzun başarımını ölçmek amacıyla kullanabileceğiniz bir kıyaslama aracıdır\&. Mevcut Apache kurulumunuzun görevini nasıl yerine getirdiği hakkında bir izlenim edinmeniz için tasarlanmıştır\&. Özellikle, Apache kurulumunuzun saniyede kaç isteği sunma yeteneğinde olduğunu gösterir\&. .SH "SEÇENEKLER" .TP \fB-A\fR \fIyetkili-kullanıcı\fR:\fIparola\fR Sunucuya TEMEL Kimlik Doğrulamada kullanılmak üzere kanıt sağlar\&. Kullanıcı adı ile parola arasına sadece : konur ve sunucunun buna ihtiyacı olup olmadığına bakılmaksızın (yani, bir "401 kimlik doğrulaması gerekli" yanıtı beklenmeden) bağlantı üzerinden base64 kodlu olarak sunucuya gönderilir\&. .TP \fB-b\fR \fItampon-boyu\fR TCP gönderme/alma tamponlarının bayt cinsinden uzunluğu\&. .TP \fB-B\fR \fIyerel-adres\fR Uzak bağlantılar yaparken dinlenecek adres\&. .TP \fB-c\fR \fIbağlantı-sayısı\fR Aynı anda işleme sokulacak bağlantı sayısı\&. Aynı anda bir bağlantı öntanımlı değerdir\&. .TP \fB-C\fR \fIçerez-ismi\fR=\fIdeğer\fR İsteğe bir Cookie: satırı ekler\&. Argüman olarak genellikle bir \fIisim=değer\fR çifti kullanılır\&. Bu çiftler birden fazla olabilir\&. .TP \fB-d\fR "percentage served within XX [ms] table" iletisi gösterilmez\&. (Geriye uyumluluk için vardır)\&. .TP \fB-e\fR \fIcsv-dosyası\fR Sunulan isteğin birim zamanda (milisaniye) ne kadarının (yüzde cinsinden) sunulduğunu gösteren virgül ayraçlı değerler (CSV) dosyası\&. Sonuçlar 'bobin haline' getirilmiş olduğundan doğal olarak 'gnuplot' dosyasından daha yararlıdır\&. .TP \fB-f\fR \fIprotokol\fR SSL/TLS protokolü belirtilir (SSL2, SSL3, TLS1, TLS1\&.1, TLS1\&.2 veya ALL)\&. TLS1\&.1 ve TLS1\&.2 desteği 2\&.4\&.4 ve sonraki sürümler içindir\&. .TP \fB-g\fR \fIgnuplot-dosyası\fR Ölçülen değerler bir 'gnuplot' veya TSV (sekme ayraçlı değerler) dosyasına yazılır\&. Bu dosya, Gnuplot, IDL, Mathematica, Igor hatta Excel tarafından veri dosyası olarak kabul edilir\&. Veri sütunlarının başlıkları dosyanın ilk satırında bulunur\&. .TP \fB-h\fR Kullanım bilgisi gösterir\&. .TP \fB-H\fR \fIözel-başlık\fR İsteğe fazladan başlık ekler\&. \fIözel-başlık\fR, aralarında iki nokta imi bulunan bir isim-değer çifti olarak belirtilir\&. Örnek: "Accept-Encoding: zip/zop;8bit" .TP \fB-i\fR GET istekleri yerine HEAD istekleri yapılır\&. .TP \fB-k\fR HTTP KeepAlive (kalıcı bağlantı) özelliğini etkinleştirir, yani tek bir oturum içinde çok sayıda isteğe hizmet sunulabilir\&. Özellik öntanımlı olarak kapalıdır\&. .TP \fB-l\fR Yanıtarın uzunluğu sabit değilse hataları raporlamaz\&. Özdevinimli sayfalarda kullanışlı olabilir\&. 2\&.4\&.7 ve sonraki sürümler içindir\&. .TP \fB-m\fR \fIHTTP-yöntemi\fR İstekler için özel HTTP yöntemi, belirtilir\&. 2\&.4\&.10 ve sonraki sürümler içindir\&. .TP \fB-n\fR \fIistek-sayısı\fR Kıyaslama oturumu sırasında sunucuya uygulanacak istek sayısı\&. Öntanımlı olarak hiçbir başarım ölçütü sağlamayan tek bir istek yapılır\&. .TP \fB-p\fR \fIPOST-dosyası\fR POST isteği ile ilgili verileri içeren dosya\&. Ayrıca \fB-T\fR seçeneğini de belirtmeyi unutmayın\&.\&. .TP \fB-P\fR \fIvekil-yetkilisi\fR:\fIparola\fR Vekil sunucuya TEMEL Kimlik Doğrulamasında kullanılacak kanıtları sağlar\&. Kullanıcı adı ile parola arasına sadece : konur ve vekilin buna ihtiyacı olup olmadığına bakılmaksızın (yani, bir "407 vekilde kimlik doğrulaması gerekiyor" yanıtı beklenmeden) bağlantı üzerinden base64 kodlu olarak sunucuya gönderilir\&. .TP \fB-q\fR İstek sayısı 150'den fazla olduğunda, \fBab\fR her 100 veya %10 istekte bir, standart hataya bir işlenen istek sayacı çıktılar\&. \fB-q\fR seçeneği bu çıktının üretilmemesini sağlar\&. .TP \fB-r\fR Soket hata alsa bile program çıkmaz\&. .TP \fB-s\fR \fIzamanasimi\fR Soket zaman aşımına uğramadan önce beklenecek azami saniye sayısı\&. 30 saniye öntanımlı süredir\&. 2\&.4\&.4 ve sonraki sürümler içindir\&. .TP \fB-S\fR Ortalama ve ortanca değerler arasında bir veya iki standart sapmadan fazlası varsa ne ortalama değer ne standart sapma değeri ne de uyarı/hata iletileri gösterilir\&. Öntanımlı olarak, asgari/ortalama/azami değerler gösterilir\&. (Geriye uyumluluk)\&. .TP \fB-t\fR \fIsaniye\fR Ölçümleme işleminin ne kadar süreyle uygulanacağı belirtilir\&. Dahili olarak \fB-n 50000\fR seçeneği uygulanır\&. Bunu belli bir süreye göre kıyaslama yapmak amacıyla kullanabilirsiniz\&. Öntanımlı olarak bir süre kısıtlaması yoktur\&. .TP \fB-T\fR \fIiçerik-türü\fR POST/PUT verisi için kullanılacak içerik türü belirtilir\&. Örnek: application/x-www-form-urlencoded\&. Öntanımlı değer: text/plain\&. .TP \fB-v\fR \fIayrıntı-düzeyi\fR Çıktının ayrıntı düzeyi belirtilir\&. 4 ve üstü ile başlıklar hakkında bilgi, 3 ve üstü ile yanıt kodları (404, 200, vb\&.), 2 ve üstü ile ise uyarı ve bilgi iletileri gösterilir\&. .TP -u \fIPUT-dosyası\fR PUT verisini içeren dosya\&. Ayrıca, -T seçeneğini belirtmeyi de unutmayın\&. .TP \fB-V\fR Sürüm bilgilerini gösterir ve çıkar\&. .TP \fB-w\fR Sonuçları HTML tabloları olarak basar\&. Öntanımlı tablo, beyaz artalanlı ve iki sütunludur\&. .TP \fB-x\fR \fI-öznitelikleri\fR
    etiketinde kullanılacak öznitelikler belirtilir\&. Belirtilen öznitelikler etiket içine
    biçeminde yerleştirilir\&. .TP \fB-X\fR \fIvekil\fR[:\fIport\fR] İstekler için bir vekil sunucu kullanılır\&. .TP \fB-y\fR \fI-öznitelikleri\fR etiketinde kullanılacak öznitelikler belirtilir\&. .TP \fB-z\fR \fI
    -öznitelikleri\fR etiketinde kullanılacak öznitelikler belirtilir\&. .TP -Z \fIşifre-kümesi\fR SSL/TLS şifre kümesi belirtilir (\fBopenssl\fR(1) şifrelerine bakınız)\&. .SH "ÇIKTI" .PP Aşağıda \fBab\fR tarafından döndürülen değerler açıklanmıştır: .TP Server Software İlk başarılı yanıtın, varsa, \fIserver\fR HTTP başlığında döndürülen değer\&. Bu başlıktaki başlangıçtan 32 ondalık değerli karaktere (genellikle boşluk veya CR/LF karakteri) kadar tüm karakterleri içerir\&. .TP Server Hostname Komut satırında belirtilen DNS veya IP adresi\&. .TP Server Port \fBab\fR'nin bağlandığı port\&. Komut satırında port belirtilmemişse, öntanımlı olarak http için 80, https için 443'tür\&. .TP SSL/TLS Protocol İstemci le sunucu arasında uzlaşılmış protokol değerleri\&. Bu sadece SSL kullanılıyorsa çıktılanır\&. .TP Document Path Komut satırı dizgesinden çözümlenen isteğin URI'si\&. .TP Document Length Başarıyla döndürülen ilk belgenin bayt cinsinden uzunluğu\&. Eğer belge uzunluğu sınama sırasında değişirse yanıt bir hata içerecektir\&. .TP Concurrency Level Sınama sırasında kullanılan eşzamanlı istemcilerin sayısı\&. .TP Time taken for tests İlk soket bağlantısının alındığı andan son yanıtın alındığı ana kadar geçen süre\&. .TP Complete requests Alınan başarılı yanıtların sayısı\&. .TP Failed requests Başarısızlık olarak addedilen isteklerin sayısı\&. Sayı sıfırdan büyükse, diğer satırda, bağlanma, okuma, yanlış içerik uzunluğu, istisnalar gibi sebeplerle başarısız olmuş istekler gösterilir\&. .TP Write errors Başarısız yazma hatalarının (kırık boru) sayısı\&. .TP Non-2xx responses 200 serisi yanıt kodları ile açıklanamayan yanıtların sayısı\&. Tüm yanıtlar 200 olursa bu alan çıktılanmaz\&. .TP Keep-Alive requests Keep-Alive isteklerinde sonuçlanan bağlantı sayısı\&. .TP Total body sent Sınamanın parçası olarak veri gönderimi yapılandırılmışsa, bu sınama sırasında gönderilen toplam bayt sayısıdır\&. Sınama sırasında gövde gönderilmiyorsa bu alan çıktılanmaz\&. .TP Total transferred Sunucudan alınan toplam bayt sayısı\&. Bu sayı aslında hattan gönderilen bayt sayısıdır\&. .TP HTML transferred Sunucudan alınan belge baytlarının sayısı\&. Bu sayı HTTP başlıklarının bayt sayısını içermez\&. .TP Requests per second Saniyedeki istek sayısı\&. İstek sayısının toplam süreye oranıdır\&. .TP Time per request İstek başına harcanan süre\&. İlk değer eşzamanlılık * süre * 1000 / biten formülüyle hesaplanırken ikincisi için süre * 1000 / biten formülü kullanılır\&. .TP Transfer rate okunantoplam / 1024 / süre formülüyle hesaplanan aktarım hızı\&. .SH "BÖRTÜ BÖCEK" .PP Duruk bildirimli sabit uzunlukta çeşitli tamponlar vardır\&. Sunucudan gelen yanıt başlıkları ve diğer harici girdiler, komut satırı argümanları ile birlikte basitçe çözümlenir, bu size can sıkıcı gelebilir\&. .PP HTTP/1\&.x protokolünü tamamen gerçeklemez; sadece yanıtların 'belli başlı' bazı biçimlerini kabul eder\&. Aksi takdirde, \fBstrstr\fR(3) işlevinin yoğun kullanımı nedeniyle sunucu yerine \fBab\fR'nin başarımını ölçerdiniz\&. httpd-2.4.41/docs/man/tr/dbmmanage.10000644000000000000500000001425612133545173015375 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "DBMMANAGE" 1 "2013-04-17" "Apache HTTP Sunucusu" "dbmmanage" .nh .SH İSİM dbmmanage \- DBM biçemli kullanıcı kimlik doğrulama dosyalarını yönetir .SH "KULLANIM" .PP \fBdbmmanage\fR [ \fIkodlama\fR ] \fIdosyaismi\fR add|adduser|check|delete|update \fIkullanıcı\fR [ \fIşifreli_parola\fR [ \fIgrup\fR[,\fIgrup\fR\&.\&.\&.] [ \fIaçıklama\fR ] ] ] .PP \fBdbmmanage\fR \fIdosyaismi\fR view [ \fIkullanıcı\fR ] .PP \fBdbmmanage\fR \fIdosyaismi\fR import .SH "ÖZET" .PP \fBdbmmanage\fR, mod_authn_dbm üzerinden HTTP kullanıcılarının temel kimlik doğrulaması için kullanıcı isimlerinin ve parolalarının saklanmasında kullanılacak DBM dosyalarını oluşturmak ve güncellemek için kullanılır\&. Apache HTTP sunucusunun mevcut özkaynaklarının kullanımı sadece \fBdbmmanage\fR tarafından oluşturulan dosyalarda listelenmiş kullanıcılara tahsis edilebilir\&. Bu program sadece, kullanıcı isimleri bir DBM dosyasında saklanmak istenirse işe yarar\&. Düz metin bir veritabanı kullanmak isterseniz \fBhtpasswd\fR sayfasına bakınız\&. .PP DBM parola veritabanı sağlayan diğer bir araç da \fBhtdbm\fR'dir\&. .PP Bu kılavuz sayfası sadece komut satırı değiştirgelerini listeler\&. Kullanıcı kimlik doğrulamasını \fBhttpd\fR'de yapılandırmak için gerekli yönergelerle ilgili ayrıntılar için Apache dağıtımının bir parçası olan ve http://httpd\&.apache\&.org/ adresinde de bulunan Apache HTTP Sunucusu Belgelerine bakınız\&. .SH "SEÇENEKLER" .TP \fIdosyaismi\fR DBM dosyasının ismi\&. Genellikle, \&.db, \&.pag veya \&.dir eklentisi olmaksızın belirtilir\&. .TP \fIkullanıcı\fR İşlemleri gerçekleştirecek kullanıcı ismi\&. \fIkullanıcı\fR ismi ikinokta imi (:) içeremez\&. .TP \fIşifreli_parola\fR \fBupdate\fR ve \fBadd\fR komutları için kullanılacak şifreli paroladır\&. Parolanın istenmesini sağlamak, fakat hemen ardından alanları doldurmak için bir tire imi (-) kullanabilirsiniz\&. Buna ek olarak, \fBupdate\fR komutunu kullanırken özgün parolaya dokunulmaması için bir nokta imi (\&.) kullanabilirsiniz\&. .TP \fIgrup\fR Kullanıcının üyesi olduğu grup\&. Grup ismi ikinokta imi (:) içeremez\&.Kullanıcıyı bir gruba atamadan açıklama alanını doldurmak istiyorsanız bir tire imi (-) kullanabilirsiniz\&. Buna ek olarak, \fBupdate\fR komutunu kullanırken özgün gruba dokunulmaması için bir nokta imi (\&.) kullanabilirsiniz\&. .TP \fIaçıklama\fR Adı ve soyadı, eposta adresi gibi kullanıcıyla ilgili bir takım bilgiler buraya yazılır\&. Sunucu bu alanı gözardı eder\&. .SS "Kodlamalar" .TP \fB-d\fR CRYPT şifrelemesi (Win32 ve Netware hariç, öntanımlı) .TP \fB-m\fR MD5 şifrelemesi (Win32 ve Netware için öntanımlı) .TP \fB-s\fR SHA1 şifrelemesi .TP \fB-p\fR düz metin (\fIönerilmez\fR) .SS "Komutlar" .TP \fBadd\fR \fIşifreli_parola\fR'yı kullanarak \fIdosyaismi\fR dosyasına \fIkullanıcı\fR için bir girdi ekler\&. dbmmanage passwords\&.dat add rbowen foKntnEF3KSXA .TP \fBadduser\fR Parola sorduktan sonra \fIdosyaismi\fR dosyasına \fIkullanıcı\fR için bir girdi ekler\&. dbmmanage passwords\&.dat adduser krietz .TP \fBcheck\fR Parola sorduktan sonra belirtilen \fIkullanıcı\fR, \fIdosyaismi\fR dosyasında var mı diye bakar; varsa belirtilen parolayı kullanıcınınkiyle eşleştirmeye çalışır\&. dbmmanage passwords\&.dat check rbowen .TP \fBdelete\fR \fIdosyaismi\fR dosyasından \fIkullanıcı\fR girdisini siler\&. dbmmanage passwords\&.dat delete rbowen .TP \fBimport\fR Standart girdiden \fIkullanıcı\fR:\fIparola\fR satırlarını (her satırda bir tane) okur ve bunları \fIdosyaismi\fR dosyasına ekler\&. Parola şifrelenmiş olmalıdır\&. .TP \fBupdate\fR Belirtilen \fIkullanıcı\fR'nın \fIdosyaismi\fR dosyasında mevcut olması dışında \fBadduser\fR komutu gibidir\&. dbmmanage passwords\&.dat update rbowen .TP \fBview\fR Sadece, DBM dosyasının içeriğini gösterir\&. Bir \fIkullanıcı\fR belirtirseniz sadece o kaydı gösterir\&. dbmmanage passwords\&.dat view .SH "HATALAR" .PP Birden fazla DBM dosya biçemi vardır ve büyük bir olasılıkla da sisteminizde bu birden fazla biçemle ilgili kütüphaneler vardır\&. SDBM, NDBM, GNU'nun GDBM projesi ve Berkeley DB 2 bunların başlıcalarıdır\&. Ne yazık ki, bu kütüphanelerin her birinin dosya biçimleri farklıdır\&. Bu bakımdan, \fIdosyaismi\fR dosyasında kullanılan dosya biçeminin \fBdbmmanage\fR tarafından kullanılanla aynı biçemde olduğundan emin olmalısınız\&. \fBdbmmanage\fR hangi tür DBM dosyasına baktığını saptayacak yeterliliğe sahip değildir\&. Yanlış biçemli bir dosya belirtirseniz hiçbir şey dönmeyebileceği gibi, başka isimde bir DBM dosyasının oluşturulması veya daha da kötüsü üzerine yazmaya çalışıyorsanız DBM dosyasının bozulması bile olasıdır\&. .PP \fBdbmmanage\fR programının başlangıcında @AnyDBM::ISA dizisi olarak tanımlanmış DBM biçem tercihlerinin bir listesi vardır\&. Berkeley DB 2 biçemini tercih ettiğimizden \fBdbmmanage\fR sistem kütüphanelerini şu sıraya göre arar: Berkeley DB 2, NDBM, GDBM ve SDBM\&. \fBdbmmanage\fR DBM dosyası hareketleri için bu sıralamaya göre bulduğu ilk kütüphaneyi kullanacaktır\&. Sıralama Perl'deki dbmopen() çağrısının kullandığından faklı olduğu gibi Perl'deki standart @AnyDBM::ISA sıralamasından da oldukça farklıdır\&. Bu bakımdan, DBM dosyalarınızı yönetmek için Perl ile yazılmış başka araçlar kullanıyorsanız, onların da bu tercih sırasını izlemesini sağlamalısınız\&. Benzer şekilde, bu dosyalara erişmek için diğer dillerde (C gibi) yazılmış programlar kullanıyorsanız bunlar için de aynı durum geçerlidir\&. .PP Unix sistemlerinde, kullanılan DBM dosyasının biçemini öğrenmek için \fBfile\fR programı kullanılabilir\&. httpd-2.4.41/docs/man/tr/httxt2dbm.10000644000000000000500000000345212133545173015376 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "HTTXT2DBM" 1 "2013-04-17" "Apache HTTP Sunucusu" "httxt2dbm" .nh .SH İSİM httxt2dbm \- RewriteMap ile kullanmak için DBM dosyaları üretir .SH "KULLANIM" .PP \fBhttxt2dbm\fR [ -\fBv\fR ] [ -\fBf\fR \fIDBM_türü\fR ] -\fBi\fR \fIkaynak_metin\fR -\fBo\fR \fIçıktı_DBM\fR .SH "ÖZET" .PP \fBhttxt2dbm\fR, RewriteMap ile kullanmak için düz metin dosyalardan DBM dosyaları üretir\&. .PP Çıktı dosyası mevcutsa dosya kırpılmaz\&. Yeni anahtarlar eklenir, mevcutlar da güncellenir\&. .SH "SEÇENEKLER" .TP \fB-v\fR Çıktı daha ayrıntılı olur\&. .TP \fB-f\fR \fIDBM_türü\fR Çıktı için kullanılacak DBM türü belirtilir\&. Belirtilmediği takdirde APR öntanımlısı kullanılır\&. Belirtilebilecek DBM türleri: GDBM dosyalar için GDBM, SDBM dosyalar için SDBM, Berkeley DB dosyalar için DB, NDBM dosyalar için NDBM, öntanımlı DBM türü için default .TP \fB-i\fR \fIkaynak_metin\fR DBM dosyasının üretiminde kullanılacak girdi dosyası belirtilir\&. Bu dosya, her satırda bir kayıt bulunmak üzere her satırı şöyle biçemlenmiş olmalıdır: anahtar değer\&. Bu dosyanın biçemi ve manası ile ilgili ayrıntılar için RewriteMap yönergesinin açıklamasına bakınız\&. .TP \fB-o\fR \fIçıktı_DBM\fR Çıktılanacak DBM dosyasının ismi belirtilir\&. .SH "ÖRNEKLER" .nf httxt2dbm -i rewritemap\&.txt -o rewritemap\&.dbm httxt2dbm -f SDBM -i rewritemap\&.txt -o rewritemap\&.dbm .fi httpd-2.4.41/docs/man/tr/htcacheclean.80000644000000000000500000001470712133545173016074 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "HTCACHECLEAN" 8 "2013-04-17" "Apache HTTP Sunucusu" "htcacheclean" .nh .SH İSİM htcacheclean \- Disk arabelleğini temizler .SH "KULLANIM" .PP \fBhtcacheclean\fR [ -\fBD\fR ] [ -\fBv\fR ] [ -\fBt\fR ] [ -\fBr\fR ] [ -\fBn\fR ] [ -\fBR\fR\fIboyut\fR ] -\fBp\fR\fIyol\fR [ -\fBl\fR\fIsınır\fR | -\fBL\fR\fIlimit\fR ] .PP \fBhtcacheclean\fR [ -\fBn\fR ] [ -\fBt\fR ] [ -\fBi\fR ] [ -\fBP\fR\fIpiddosyası\fR ] [ -\fBR\fR\fIboyut\fR ] -\fBd\fR\fIsüre\fR -\fBp\fR\fIyol\fR [ -\fBl\fR\fIsınır\fR | -\fBL\fR\fIlimit\fR ] .PP \fBhtcacheclean\fR [ -\fBv\fR ] [ -\fBR\fR\fIboyut\fR ] -\fBp\fR\fIyol\fR [ -\fBa\fR ] [ -\fBA\fR ] .PP \fBhtcacheclean\fR [ -\fBD\fR ] [ -\fBv\fR ] [ -\fBt\fR ] [ -\fBR\fR\fIboyut\fR ] -\fBp\fR\fIyol\fR \fIurl\fR .SH "ÖZET" .PP \fBhtcacheclean\fR, mod_cache_disk deposunun boyutlarını belli sınırlar içinde veya kullanımdaki dosya düğümlerinin sınırları içinde tutmak için kullanılır\&. Bu araç ya elle ya da bir artalan süreci olarak çalıştırılır\&. Artalan süreci olarak çalıştırıldığında, silinecek arabellek içeriğini tespit etmek için arabellek dizinlerine belli aralıklarla bakmak dışında uykuda olur\&. Artalan sürecini temiz olarak durdurmak için TERM veya INT sinyali göndermeniz yeterlidir\&. Elle çalıştırıldığında, silinecek arabellek içeriğini tespit etmek için arabellek dizinlerine bir kereliğine bakar\&. Bir veya daha fazla URL belirtilmesi durumunda arabellekte olanlar arabellekten silinir\&. .SH "SEÇENEKLER" .TP \fB-d\fR\fI süre\fR Artalanda çalışarak \fIsüre\fR dakikada bir arabelleği temizler\&. Bu seçenek \fB-D\fR, \fB-v\fR ve \fB-r\fR seçenekleri ile birlikte kullanılamaz\&. Artalan sürecini temiz olarak sonlandırmak için SIGTERM veya SIGINT göndermek yeterlidir\&. .TP \fB-D\fR Kuru kuruya çalışıp, hiçbir şeyi silmez\&. \fB-d\fR seçeneği ile birlikte kullanılamaz\&. Kuru çalıştırma sırasında \fB-t\fR seçeneği ile dizinler silinmek istenirse, statlarda silinmiş görünen dosya düğümleri silinmiş dizinler olarak hesaba katılmaz ve tahmini olarak imlenir\&. .TP \fB-v\fR Çıktı daha ayrıntılı olur\&. \fB-d\fR seçeneği ile birlikte kullanılamaz\&. .TP \fB-r\fR İyice temizlik yapılır\&. Bunun için Apache HTTP sunucusunun çalışmadığı varsayılır (aksi takdirde arabellek içeriği bozulabilir)\&. \fB-t\fR seçeneğinin de uygulanmasını sağlar\&. \fB-d\fR seçeneği ile birlikte kullanılamaz\&. .TP \fB-n\fR Nazik olur\&. Diğer süreçlerin yararına daha yavaş çalışır\&. (a) disk G/Ç işlemlerinde gecikmeler olursa ve (b) çekirdek bu arada başka bir süreci öne çekmişse \fBhtcacheclean\fR uyumayı tercih edecektir\&. .TP \fB-t\fR Tüm boş dizinleri siler\&. Öntanımlı olarak, sadece arabellek dosyaları silinirse de bazı yapılandırmalarda büyük miktarda dizin oluşturulması bu seçeneğin kullanılmasını gerektirebilir\&. Yapılandırmanız çok sayıda dizin gerektiriyorsa ve dosya düğümlerinin veya dosya ayırma tablolarının tükenmesi sözkonusu ise bu seçeneğin kullanılması önerilir\&. .TP \fB-p\fR\fI yol\fR \fIyol\fR, disk arabelleğinin kök dizini olarak belirtilir\&. CacheRoot yönergesinde belirtilen dizin olmalıdır\&. .TP \fB-P\fR\fIpiddosyası\fR Artalan süreci olarak çalışmada süreç kimliğinin yazılacağı dosyanın adını belirtmek için kullanılır\&. .TP \fB-R\fR\fIboyut\fR Disk bloklarının boyunu denkleştirmek için yuvarlanacak üst boyutu belirtmekte kullanılır\&. Arabellek bölümünün blok boyutunu belirler\&. .TP \fB-l\fR\fI sınır\fR \fIsınır\fR, disk arabelleğinin toplam boyutu olarak belirtilir\&. Değerin öntanımlı olarak bayt cinsinden belirtileceği varsayılır\&. Değerin sonuna kilobayt için K, megabayt M, bayt için B harfi konulabilir\&. .TP \fB-L\fR\fIlimit\fR Disk arabellek dosyası düğümü toplamının sınırını belirlemekte kullanılır\&. .TP \fB-i\fR Akıllı olup sadece disk arabelleği değiştiği zaman çalışır\&. Bu seçenek \fB-d\fR seçeneği ile birlikte belirtilmek zorundadır\&. .TP \fB-a\fR O an arabellekte saklanmakta olan URL'leri listeler\&. Birden fazla aynı URL varsa yalnız biri listelenir\&. .TP \fB-A\fR O an arabellekte saklanmakta olan URL'leri öznitelikleri ile listeler\&. Öznitelikler şu sırayla verilir: url, header size, body size, status, entity version, date, expiry, request time, response time, body present, head request .SH "BELLİ BİR URL'NİN SİLİNMESİ" .PP \fBhtcacheclean\fR tarafından aktarılan URL'ler arabellekten silinir\&. Bir URL birden fazla mevcutsa hepsi silinir\&. .PP Ters vekilli bir URL silinmişse, etkin URL \fBHost\fR başlığı \fBport\fR, \fByol\fR ve \fBsorgu\fR ile oluşturulur\&. Bir sorgu dizgesi olsun olmasın, URL içinde '?' daima açıkça belirtilmelidir\&. Örneğin, \fBlocalhost\fR sunucusundaki \fB/\fR yolu silinmek istenirse silinecek URL \fBhttp://localhost:80/?\fR olurdu\&. .SH "ARABELLEKTEKİ URL'LERİN LİSTELENMESİ" .PP \fBhtcacheclean\fR'e \fB-a\fR veya \fB-A\fR seçeneğinin aktarılmasıyla, arabellekteki URL'ler bulundukça her satıra bir URL gelecek biçemde listelenir\&. \fB-A\fR seçeneği URL'nin ardından arabellek içeriğini tamamını şu sırayla dökümler: .TP url Öğenin URL'si\&. .TP header size Bayt cinsinden başlık uzunluğu\&. .TP body size Bayt cinsinden gövde uzunluğu\&. .TP status Arabellekteki yanıtın durumu\&. .TP entity version Öğenin silinmeksizin kaç kere doğrulandığı\&. .TP date Yanıt tarihi\&. .TP expiry Yanıtın zaman aşımı tarihi\&. .TP request time İsteğin başlama zamanı\&. .TP response time İsteğin bitiş zamanı\&. .TP body present 0 ise istekle birlikte gövde saklanmaz, 1 ise saklanır\&. .TP head request 1 ise, öğe, gövde olmaksızın arabellekli bir HEAD isteği içerir, 0 ise içermez\&. .SH "ÇIKIŞ DURUMU" .PP \fBhtcacheclean\fR, tüm işlemler başarıyla yerine getirildiğinde 0, aksi takdirde 1 döndürür\&. Bir URL belirtildiğinde, bu URL arablleklenmi ve silinmişse 0, aksi takdirde 2 döndürür\&. URL'nin silinmesi sırasında bir hata oluşursa 1 döndürür\&. httpd-2.4.41/docs/man/tr/apxs.10000644000000000000500000002740012203356434014426 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "APXS" 1 "2013-08-16" "Apache HTTP Sunucusu" "apxs" .nh .SH İSİM apxs \- Apache Eklenti Aracı .SH "KULLANIM" .PP \fBapxs\fR -\fBg\fR [ -\fBS\fR \fIisim=değer\fR ] -\fBn\fR \fImodüladı\fR .PP \fBapxs\fR -\fBq\fR [ -\fBv\fR ] [ -\fBS\fR \fIisim=değer\fR ] \fIsorgu\fR \&.\&.\&. .PP \fBapxs\fR -\fBc\fR [ -\fBS\fR \fIisim=değer\fR ] [ -\fBo\fR \fIdso-dosyası\fR ] [ -\fBI\fR \fIinclude-dizini\fR ] [ -\fBD\fR \fIisim=değer\fR ] [ -\fBL\fR \fIlib-dizini\fR ] [ -\fBl\fR \fIkütüphane-adı\fR ] [ -\fBWc,\fR\fIderleyici-seçenekleri\fR ] [ -\fBWl,\fR\fIilintileyici-seçenekleri\fR ] [ -\fBp\fR ] \fIdosya\fR \&.\&.\&. .PP \fBapxs\fR -\fBi\fR [ -\fBS\fR \fIisim=değer\fR ] [ -\fBn\fR \fImodüladı\fR ] [ -\fBa\fR ] [ -\fBA\fR ] \fIdso-dosyası\fR \&.\&.\&. .PP \fBapxs\fR -\fBe\fR [ -\fBS\fR \fIisim=değer\fR ] [ -\fBn\fR \fImodüladı\fR ] [ -\fBa\fR ] [ -\fBA\fR ] \fIdso-dosyası\fR \&.\&.\&. .SH "ÖZET" .PP \fBapxs\fR, Apache Hiper Metin Aktarım Protokolü (HTTP) sunucusu için ek modül derleme ve kurulum aracıdır\&. Bu araç sayesinde, bir veya daha fazla kaynak veya nesne \fIdosya\fRsından bir devingen paylaşımlı nesne (DSO - "Dynamic Shared Object" kısaltması) derlemek ve bu nesneyi (modülü) Apache sunucusuna çalışma anında \fBmod_so\fR modülünün \fBLoadModule\fR yönergesi üzerinden yüklemek mümkün olmaktadır\&. .PP Bu eklenti mekanizmasını platformunuzda kullanmak için DSO desteğinin olması ve \fBhttpd\fR programının \fBmod_so\fR modülünü içerecek şekilde derlenmiş olması gerekir\&. Eğer bunlar mevcut değilse \fBapxs\fR aracı durumu size bildirecektir\&. Bunu aşağıdaki komutla kendiniz de sınayabilirsiniz: .nf $ httpd -l .fi .PP \fBmod_so\fR modülü gösterilen listede yer almalıdır\&. Bu gereksinimler sağlandığı takdirde \fBapxs\fR aracı sayesinde DSO mekanizması üzerinden kendi modüllerinizi kurmak suretiyle Apache sunucunuzun işlevselliğini kolayca arttırabilirsiniz\&. Örnek bir uygulama: .nf $ apxs -i -a -c mod_foo\&.c gcc -fpic -DSHARED_MODULE -I/dosya/yolu/apache/include -c mod_foo\&.c ld -Bshareable -o mod_foo\&.so mod_foo\&.o cp mod_foo\&.so /dosya/yolu/apache/modules/mod_foo\&.so chmod 755 /dosya/yolu/apache/modules/mod_foo\&.so [`foo' modülü /dosya/yolu/apache/etc/httpd\&.conf'ta etkinleştiriliyor] $ apachectl restart /dosya/yolu/apache/sbin/apachectl restart: httpd not running, trying to start [Tue Mar 31 11:27:55 1998] [debug] mod_so\&.c(303): loaded module foo_module /dosya/yolu/apache/sbin/apachectl restart: httpd started $ _ .fi .PP \fIdosya\fR olarak bir C kaynak dosyası (\&.c), bir nesne dosyası (\&.o) ve hatta bir kütüphane arşivi archive (\&.a) belirtebilirsiniz\&. \fBapxs\fR aracı bu dosya uzantılarını tanıdığından C dosyalarını derleme işleminden, arşiv ve nesne dosyalarını ise doğrudan ilintileme işleminden geçirir\&. Fakat böyle önceden derlenmiş nesne dosyalarını kullanırken, devingen paylaşımlı nesne olarak kullanılmalarını sağlamak üzere konumdan bağımsız kod (PIC) üretecek şekilde derlenmiş olduklarından emin olmalısınız\&. Örneğin GCC'yi bunun için daima \fB-fpic\fR seçeneği ile kullanmalısınız\&. Diğer C derleyiciler için, \fBapxs\fR'in nesne dosyalarını derlerken kullanacağı seçenekleri öğrenmek için o derleyicilerin kılavuz sayfalarına bakınız\&. .PP Apache'deki DSO desteği ile ilgili daha ayrıntılı bilgi edinmek için \fBmod_so\fR belgesini okumakla yetinmeyip src/modules/standard/mod_so\&.c kaynak dosyasını da okuyunuz\&. .SH "SEÇENEKLER" .SS "Ortak Seçenekler" .TP \fB-n\fR \fImodüladı\fR \fB-i\fR (kurulum) ve \fB-g\fR (şablon üretimi) seçenekleri için modül ismi belirtmek amacıyla kullanılır\&. Bir modül ismi belirtmek için bu seçeneği kullanın\&. \fB-g\fR seçeneği için bu gereklidir\&. \fB-i\fR seçeneği için ise araç, modül ismini kaynağın ismine bakarak veya (son çare olarak) dosya isminden tahmin etmeye çalışarak saptamaya çalışır\&. .SS "Sorgu Seçenekleri" .TP \fB-q\fR \fIsorgu\fR httpd'yi derlemekte kullanılacak değişkenler ve ortam ayarları için bir sorgu gerçekleştirir\&. When invoked without \fIsorgu\fR belirtilmeksizin çağrıldığında, bilinen değişkenleri değerleriyle birlikte basar\&. İsteğe bağlı \fB-v\fR seçeneği liste çıktısını biçemler\&. .PP Modülünüzü yükleyecek \fBhttpd\fR'yi derlemek için kullanılacak ayarları elle belirtmek için kullanılır\&. Örneğin, Apache'nin C başlık dosyalarının yerini kendi Makefile dosyalarınızın içinde şöyle belirtebilirsiniz: INC=-I`apxs -q INCLUDEDIR` .SS "Yapılandırma Seçenekleri" .TP \fB-S\fR \fIisim=değer\fR Bu seçenek yukarıda açıklanan \fBapxs\fR ayarlarını değiştirir\&. .SS "Şablon Üretme Seçenekleri" .TP \fB-g\fR \fImodüladı\fR (\fB-n\fR seçeneğine bakınız) adında bir alt dizin oluşturur ve içine iki dosya yerleştirir: Kendi modülünüzü oluşturabilmeniz için veya \fBapxs\fR mekanizmaları ile hemen oynamaya başlayabilmeniz için mod_\fImodüladı\fR\&.c adında bir modül kaynak dosyası örneği ve bu modülü derleyip kurmayı kolaylaştırmak için bir Makefile dosyası\&. .SS "DSO Derleme Seçenekleri" .TP \fB-c\fR Bu seçenek derleme yapılacağını belirtir\&. Önce belirtilen C kaynak \fIdosyalar\fRını (\&.c), nesne dosyalarını (\&.o) elde etmek için derler\&. Sonra bunları kalan nesne dosyaları (\&.o ve \&.a) ile ilintileyerek \fIdso-dosyası\fR adında bir devingen paylaşımlı nesne oluşturur\&. Eğer \fB-o\fR seçeneği ile modül ismi belirtilmemişse \fIdosyalar\fR arasındaki ilk dosyanın ismine bakarak dosya ismi tahmin edilmeye çalışılır ve mod_\fIisim\fR\&.so dosya adı bu isimden elde edilir\&. .TP \fB-o\fR \fIdso-dosyası\fR Oluşturulacak devingen paylaşımlı nesnenin ismini belirtmek için kullanılır\&. Modül ismi bu seçenekle belirtilmez ve \fIdosya\fR listesinden bir isim tahmini de yapılamazsa son çare olarak mod_unknown\&.so ismi kullanılır\&. .TP \fB-D\fR \fIisim=değer\fR Bu seçenek doğrudan derleme komutlarına aktarılır\&. Bu seçeneği derleme işlemine kendi tanımlarınızı belirtmek için kullanın\&. .TP \fB-I\fR \fIinclude-dizini\fR Bu seçenek doğrudan derleme komutlarına aktarılır\&. Bu seçeneği derleme işleminde kullanılmak üzere kendi başlık dosyalarınızı içeren dizinleri arama yollarına eklemek için kullanın\&. .TP \fB-L\fR \fIlib-dizini\fR Bu seçenek doğrudan derleme komutlarına aktarılır\&. Bu seçeneği derleme işleminde kullanılmak üzere kendi kütüphane dizinlerinizi arama yollarına eklemek için kullanın\&. .TP \fB-l\fR \fIkütüphane-adı\fR Bu seçenek doğrudan derleme komutlarına aktarılır\&. Bu seçeneği derleme işleminde kullanılmak üzere kendi kütüphanelerinizi arama yollarına eklemek için kullanın\&. .TP \fB-Wc\fR,\fIderleyici-seçenekleri\fR Bu seçenek libtool --mode=compile komutuna doğrudan seçenek aktarmak için kullanılır\&. Bu seçeneği yerel derleyiciniz için gereken ek seçenekleri belirtmek için kullanın\&. .TP \fB-Wl\fR,\fIilintileyici-seçenekleri\fR Bu seçenek libtool --mode=link komutuna doğrudan seçenek aktarmak için kullanılır\&. Bu seçeneği yerel ilintileyiciniz için gereken ek seçenekleri belirtmek için kullanın\&. .TP \fB-p\fR Bu seçenek apxs'in apr/apr-util kütüphaneleriyle ilintilenmesini sağlar\&. apr/apr-util kütüphanelerini kullanan yardımcı uygulamaları derlerken yararlıdır\&. .SS "DSO Kurulum ve Yapılandırma Seçenekleri" .TP \fB-i\fR Kurulum işlemini belirtir ve devingen olarak paylaşımlı nesneleri sunucunun \fImodules\fR dizinine kurar\&. .TP \fB-a\fR İlgili LoadModule satırını Apache'nin httpd\&.conf yapılandırma dosyasına özdevinimli olarak ekleyerek veya böyle bir satır varsa bunu etkin kılarak modülü etkinleştirir\&. .TP \fB-A\fR \fBLoadModule\fR yönergesini daha sonra etkinleştirmek üzere satırın başına bir diyez imi (#) yerleştirmesi dışında \fB-a\fR seçeneği ile aynıdır\&. .TP \fB-e\fR Modülü kurmaya çalışmaksızın Apache'nin httpd\&.conf yapılandırma dosyasını \fB-i\fR işlemine benzer şekilde \fB-a\fR ve \fB-A\fR seçenekleri ile düzenleme işlemini belirtir\&. .SH "ÖRNEKLER" .PP Apache'nin sunucu işlevselliğini genişletmek amacıyla kullanacağınız mod_foo\&.c adında bir Apache modülünüz olduğunu varsayalım\&. Öncelikle, C kaynak dosyasını, Apache sunucusuna çalışma anında yüklenmeye uygun bir paylaşımlı nesne olarak derlemeniz gerekir\&. Bunu sağlamak için şu komutları vermelisiniz: .nf $ apxs -c mod_foo\&.c /dosya/yolu/libtool --mode=compile gcc \&.\&.\&. -c mod_foo\&.c /dosya/yolu/libtool --mode=link gcc \&.\&.\&. -o mod_foo\&.la mod_foo\&.slo $ _ .fi .PP Bundan sonra, Apache yapılandırmanızın bu paylaşımlı nesneyi yüklemek için bir \fBLoadModule\fR yönergesi içermesini sağlamalısınız\&. \fBapxs\fR bu adımı basitleştirmek amacıyla, paylaşımlı nesneyi sunucunun \fImodules\fR dizinine özdevinimli olarak kurmak ve httpd\&.conf dosyasını buna uygun olarak güncellemek için bir yol sağlar\&. Bu sonuç şöyle elde edilebilir: .nf $ apxs -i -a mod_foo\&.la /dosya/yolu/instdso\&.sh mod_foo\&.la /path/to/apache/modules /dosya/yolu/libtool --mode=install cp mod_foo\&.la /dosya/yolu/apache/modules \&.\&.\&. chmod 755 /dosya/yolu/apache/modules/mod_foo\&.so [`foo' modülü /dosya/yolu/apache/conf/httpd\&.conf'da etkinleştiriliyor] $ _ .fi .PP Yapılandıma dosyasına (eğer yoksa) şu satır eklenir: .nf LoadModule foo_module modules/mod_foo\&.so .fi .PP Bunu öntanımlı olarak iptal etmek isterseniz \fB-A\fR seçeneğini kullanmanız gerekir: .nf $ apxs -i -A mod_foo\&.c .fi .PP \fBapxs\fR mekanizmalarını hızlıca denemek için örnek bir Apache modül şablonunu ve bir Makefile dosyasını şöyle oluşturabilirsiniz: .nf $ apxs -g -n foo Creating [DIR] foo Creating [FILE] foo/Makefile Creating [FILE] foo/modules\&.mk Creating [FILE] foo/mod_foo\&.c Creating [FILE] foo/\&.deps $ _ .fi .PP Ardından bu örnek modülü bir paylaşımlı nesne olarak derleyip Apache sunucusuna yükleyebilirsiniz: .nf $ cd foo $ make all reload apxs -c mod_foo\&.c /dosya/yolu/libtool --mode=compile gcc \&.\&.\&. -c mod_foo\&.c /dosya/yolu/libtool --mode=link gcc \&.\&.\&. -o mod_foo\&.la mod_foo\&.slo apxs -i -a -n "foo" mod_foo\&.la /dosya/yolu/instdso\&.sh mod_foo\&.la /dosya/yolu/apache/modules /dosya/yolu/libtool --mode=install cp mod_foo\&.la /dosya/yolu/apache/modules \&.\&.\&. chmod 755 /dosya/yolu/apache/modules/mod_foo\&.so [`foo' modülü /dosya/yolu/apache/conf/httpd\&.conf'ta etkinleştiriliyor] apachectl restart /dosya/yolu/apache/sbin/apachectl restart: httpd not running, trying to start chmod 755 /dosya/yolu/apache/modules/mod_foo\&.so [`foo' modülü /dosya/yolu/apache/etc/httpd\&.conf'ta etkinleştiriliyor] apachectl restart /dosya/yolu/apache/sbin/apachectl restart: httpd not running, trying to start [Tue Mar 31 11:27:55 1998] [debug] mod_so\&.c(303): loaded module foo_module /dosya/yolu/apache/sbin/apachectl restart: httpd started $ _ .fi httpd-2.4.41/docs/man/fcgistarter.80000644000000000000500000000166713317625777015401 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "FCGISTARTER" 8 "2018-07-06" "Apache HTTP Server" "fcgistarter" .SH NAME fcgistarter \- Start a FastCGI program .SH "SYNOPSIS" .PP \fB\fBfcgistarter\fR -\fBc\fR \fIcommand\fR -\fBp\fR \fIport\fR [ -\fBi\fR \fIinterface\fR ] -\fBN\fR \fInum\fR \fR .SH "SUMMARY" .PP .SH "NOTE" .PP Currently only works on Unix systems\&. .SH "OPTIONS" .TP \fB-c \fIcommand\fR\fR FastCGI program .TP \fB-p \fIport\fR\fR Port which the program will listen on .TP \fB-i \fIinterface\fR\fR Interface which the program will listen on .TP \fB-N \fInum\fR\fR Number of instances of the program httpd-2.4.41/docs/man/logresolve.10000644000000000000500000000263513317625777015232 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "LOGRESOLVE" 1 "2018-07-06" "Apache HTTP Server" "logresolve" .SH NAME logresolve \- Resolve IP-addresses to hostnames in Apache log files .SH "SYNOPSIS" .PP \fB\fBlogresolve\fR [ -\fBs\fR \fIfilename\fR ] [ -\fBc\fR ] < \fIaccess_log\fR > \fIaccess_log\&.new\fR\fR .SH "SUMMARY" .PP \fBlogresolve\fR is a post-processing program to resolve IP-addresses in Apache's access logfiles\&. To minimize impact on your nameserver, logresolve has its very own internal hash-table cache\&. This means that each IP number will only be looked up the first time it is found in the log file\&. .PP Takes an Apache log file on standard input\&. The IP addresses must be the first thing on each line and must be separated from the remainder of the line by a space\&. .SH "OPTIONS" .TP \fB-s \fIfilename\fR\fR Specifies a filename to record statistics\&. .TP \fB-c\fR This causes \fBlogresolve\fR to apply some DNS checks: after finding the hostname from the IP address, it looks up the IP addresses for the hostname and checks that one of these matches the original address\&. httpd-2.4.41/docs/man/htpasswd.10000644000000000000500000002104313523273316014663 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "HTPASSWD" 1 "2019-08-09" "Apache HTTP Server" "htpasswd" .SH NAME htpasswd \- Manage user files for basic authentication .SH "SYNOPSIS" .PP \fB\fBhtpasswd\fR [ -\fBc\fR ] [ -\fBi\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIcost\fR ] [ -\fBD\fR ] [ -\fBv\fR ] \fIpasswdfile\fR \fIusername\fR\fR .PP \fB\fBhtpasswd\fR -\fBb\fR [ -\fBc\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIcost\fR ] [ -\fBD\fR ] [ -\fBv\fR ] \fIpasswdfile\fR \fIusername\fR \fIpassword\fR\fR .PP \fB\fBhtpasswd\fR -\fBn\fR [ -\fBi\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIcost\fR ] \fIusername\fR\fR .PP \fB\fBhtpasswd\fR -\fBnb\fR [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIcost\fR ] \fIusername\fR \fIpassword\fR\fR .SH "SUMMARY" .PP \fBhtpasswd\fR is used to create and update the flat-files used to store usernames and password for basic authentication of HTTP users\&. If \fBhtpasswd\fR cannot access a file, such as not being able to write to the output file or not being able to read the file in order to update it, it returns an error status and makes no changes\&. .PP Resources available from the Apache HTTP server can be restricted to just the users listed in the files created by \fBhtpasswd\fR\&. This program can only manage usernames and passwords stored in a flat-file\&. It can encrypt and display password information for use in other types of data stores, though\&. To use a DBM database see dbmmanage or htdbm\&. .PP \fBhtpasswd\fR encrypts passwords using either bcrypt, a version of MD5 modified for Apache, SHA1, or the system's \fBcrypt()\fR routine\&. Files managed by \fBhtpasswd\fR may contain a mixture of different encoding types of passwords; some user records may have bcrypt or MD5-encrypted passwords while others in the same file may have passwords encrypted with \fBcrypt()\fR\&. .PP This manual page only lists the command line arguments\&. For details of the directives necessary to configure user authentication in httpd see the Apache manual, which is part of the Apache distribution or can be found at http://httpd\&.apache\&.org/\&. .SH "OPTIONS" .TP \fB-b\fR Use batch mode; \fIi\&.e\&.\fR, get the password from the command line rather than prompting for it\&. This option should be used with extreme care, since \fBthe password is clearly visible\fR on the command line\&. For script use see the \fB-i\fR option\&. Available in 2\&.4\&.4 and later\&. .TP \fB-i\fR Read the password from stdin without verification (for script usage)\&. .TP \fB-c\fR Create the \fIpasswdfile\fR\&. If \fIpasswdfile\fR already exists, it is rewritten and truncated\&. This option cannot be combined with the \fB-n\fR option\&. .TP \fB-n\fR Display the results on standard output rather than updating a file\&. This is useful for generating password records acceptable to Apache for inclusion in non-text data stores\&. This option changes the syntax of the command line, since the \fIpasswdfile\fR argument (usually the first one) is omitted\&. It cannot be combined with the \fB-c\fR option\&. .TP \fB-m\fR Use MD5 encryption for passwords\&. This is the default (since version 2\&.2\&.18)\&. .TP \fB-B\fR Use bcrypt encryption for passwords\&. This is currently considered to be very secure\&. .TP \fB-C\fR This flag is only allowed in combination with \fB-B\fR (bcrypt encryption)\&. It sets the computing time used for the bcrypt algorithm (higher is more secure but slower, default: 5, valid: 4 to 17)\&. .TP \fB-d\fR Use \fBcrypt()\fR encryption for passwords\&. This is not supported by the httpd server on Windows and Netware\&. This algorithm limits the password length to 8 characters\&. This algorithm is \fBinsecure\fR by today's standards\&. It used to be the default algorithm until version 2\&.2\&.17\&. .TP \fB-s\fR Use SHA encryption for passwords\&. Facilitates migration from/to Netscape servers using the LDAP Directory Interchange Format (ldif)\&. This algorithm is \fBinsecure\fR by today's standards\&. .TP \fB-p\fR Use plaintext passwords\&. Though \fBhtpasswd\fR will support creation on all platforms, the httpd daemon will only accept plain text passwords on Windows and Netware\&. .TP \fB-D\fR Delete user\&. If the username exists in the specified htpasswd file, it will be deleted\&. .TP \fB-v\fR Verify password\&. Verify that the given password matches the password of the user stored in the specified htpasswd file\&. Available in 2\&.4\&.5 and later\&. .TP \fB\fIpasswdfile\fR\fR Name of the file to contain the user name and password\&. If \fB-c\fR is given, this file is created if it does not already exist, or rewritten and truncated if it does exist\&. .TP \fB\fIusername\fR\fR The username to create or update in \fIpasswdfile\fR\&. If \fIusername\fR does not exist in this file, an entry is added\&. If it does exist, the password is changed\&. .TP \fB\fIpassword\fR\fR The plaintext password to be encrypted and stored in the file\&. Only used with the \fB-b\fR flag\&. .SH "EXIT STATUS" .PP \fBhtpasswd\fR returns a zero status ("true") if the username and password have been successfully added or updated in the \fIpasswdfile\fR\&. \fBhtpasswd\fR returns \fB1\fR if it encounters some problem accessing files, \fB2\fR if there was a syntax problem with the command line, \fB3\fR if the password was entered interactively and the verification entry didn't match, \fB4\fR if its operation was interrupted, \fB5\fR if a value is too long (username, filename, password, or final computed record), \fB6\fR if the username contains illegal characters (see the Restrictions section), and \fB7\fR if the file is not a valid password file\&. .SH "EXAMPLES" .nf htpasswd /usr/local/etc/apache/\&.htpasswd-users jsmith .fi .PP Adds or modifies the password for user \fBjsmith\fR\&. The user is prompted for the password\&. The password will be encrypted using the modified Apache MD5 algorithm\&. If the file does not exist, \fBhtpasswd\fR will do nothing except return an error\&. .nf htpasswd -c /home/doe/public_html/\&.htpasswd jane .fi .PP Creates a new file and stores a record in it for user \fBjane\fR\&. The user is prompted for the password\&. If the file exists and cannot be read, or cannot be written, it is not altered and \fBhtpasswd\fR will display a message and return an error status\&. .nf htpasswd -db /usr/web/\&.htpasswd-all jones Pwd4Steve .fi .PP Encrypts the password from the command line (\fBPwd4Steve\fR) using the \fBcrypt()\fR algorithm, and stores it in the specified file\&. .SH "SECURITY CONSIDERATIONS" .PP Web password files such as those managed by \fBhtpasswd\fR should \fInot\fR be within the Web server's URI space -- that is, they should not be fetchable with a browser\&. .PP This program is not safe as a setuid executable\&. Do \fInot\fR make it setuid\&. .PP The use of the \fB-b\fR option is discouraged, since when it is used the unencrypted password appears on the command line\&. .PP When using the \fBcrypt()\fR algorithm, note that only the first 8 characters of the password are used to form the password\&. If the supplied password is longer, the extra characters will be silently discarded\&. .PP The SHA encryption format does not use salting: for a given password, there is only one encrypted representation\&. The \fBcrypt()\fR and MD5 formats permute the representation by prepending a random salt string, to make dictionary attacks against the passwords more difficult\&. .PP The SHA and \fBcrypt()\fR formats are insecure by today's standards\&. .SH "RESTRICTIONS" .PP On the Windows platform, passwords encrypted with \fBhtpasswd\fR are limited to no more than \fB255\fR characters in length\&. Longer passwords will be truncated to 255 characters\&. .PP The MD5 algorithm used by \fBhtpasswd\fR is specific to the Apache software; passwords encrypted using it will not be usable with other Web servers\&. .PP Usernames are limited to \fB255\fR bytes and may not include the character \fB:\fR\&. .PP The cost of computing a bcrypt password hash value increases with the number of rounds specified by the \fB-C\fR option\&. The \fBapr-util\fR library enforces a maximum number of rounds of 17 in version \fB1\&.6\&.0\fR and later\&. httpd-2.4.41/docs/man/httpd.80000644000000000000500000001147113317625777014201 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "HTTPD" 8 "2018-07-06" "Apache HTTP Server" "httpd" .SH NAME httpd \- Apache Hypertext Transfer Protocol Server .SH "SYNOPSIS" .PP \fB\fBhttpd\fR [ -\fBd\fR \fIserverroot\fR ] [ -\fBf\fR \fIconfig\fR ] [ -\fBC\fR \fIdirective\fR ] [ -\fBc\fR \fIdirective\fR ] [ -\fBD\fR \fIparameter\fR ] [ -\fBe\fR \fIlevel\fR ] [ -\fBE\fR \fIfile\fR ] [ \fB-k\fR start|restart|graceful|stop|graceful-stop ] [ -\fBh\fR ] [ -\fBl\fR ] [ -\fBL\fR ] [ -\fBS\fR ] [ -\fBt\fR ] [ -\fBv\fR ] [ -\fBV\fR ] [ -\fBX\fR ] [ -\fBM\fR ] [ -\fBT\fR ] \fR .PP On Windows systems, the following additional arguments are available: .PP \fB\fBhttpd\fR [ -\fBk\fR install|config|uninstall ] [ -\fBn\fR \fIname\fR ] [ -\fBw\fR ]\fR .SH "SUMMARY" .PP \fBhttpd\fR is the Apache HyperText Transfer Protocol (HTTP) server program\&. It is designed to be run as a standalone daemon process\&. When used like this it will create a pool of child processes or threads to handle requests\&. .PP In general, \fBhttpd\fR should not be invoked directly, but rather should be invoked via apachectl on Unix-based systems or as a service on Windows NT, 2000 and XP and as a console application on Windows 9x and ME\&. .SH "OPTIONS" .TP \fB-d \fIserverroot\fR\fR Set the initial value for the ServerRoot directive to \fIserverroot\fR\&. This can be overridden by the ServerRoot directive in the configuration file\&. The default is \fB/usr/local/apache2\fR\&. .TP \fB-f \fIconfig\fR\fR Uses the directives in the file \fIconfig\fR on startup\&. If \fIconfig\fR does not begin with a /, then it is taken to be a path relative to the ServerRoot\&. The default is \fBconf/httpd\&.conf\fR\&. .TP \fB-k \fBstart|restart|graceful|stop|graceful-stop\fR\fR Signals \fBhttpd\fR to start, restart, or stop\&. See Stopping Apache httpd for more information\&. .TP \fB-C \fIdirective\fR\fR Process the configuration \fIdirective\fR before reading config files\&. .TP \fB-c \fIdirective\fR\fR Process the configuration \fIdirective\fR after reading config files\&. .TP \fB-D \fIparameter\fR\fR Sets a configuration \fIparameter \fRwhich can be used with sections in the configuration files to conditionally skip or process commands at server startup and restart\&. Also can be used to set certain less-common startup parameters including \fB-DNO_DETACH\fR (prevent the parent from forking) and \fB-DFOREGROUND\fR (prevent the parent from calling \fBsetsid()\fR et al)\&. .TP \fB-e \fIlevel\fR\fR Sets the LogLevel to \fIlevel\fR during server startup\&. This is useful for temporarily increasing the verbosity of the error messages to find problems during startup\&. .TP \fB-E \fIfile\fR\fR Send error messages during server startup to \fIfile\fR\&. .TP \fB-h\fR Output a short summary of available command line options\&. .TP \fB-l\fR Output a list of modules compiled into the server\&. This will \fBnot\fR list dynamically loaded modules included using the LoadModule directive\&. .TP \fB-L\fR Output a list of directives provided by static modules, together with expected arguments and places where the directive is valid\&. Directives provided by shared modules are not listed\&. .TP \fB-M\fR Dump a list of loaded Static and Shared Modules\&. .TP \fB-S\fR Show the settings as parsed from the config file (currently only shows the virtualhost settings)\&. .TP \fB-T\fR (Available in 2\&.3\&.8 and later) Skip document root check at startup/restart\&. .TP \fB-t\fR Run syntax tests for configuration files only\&. The program immediately exits after these syntax parsing tests with either a return code of 0 (Syntax OK) or return code not equal to 0 (Syntax Error)\&. If -D \fIDUMP\fR_\fIVHOSTS \fRis also set, details of the virtual host configuration will be printed\&. If -D \fIDUMP\fR_\fIMODULES \fR is set, all loaded modules will be printed\&. .TP \fB-v\fR Print the version of \fBhttpd\fR, and then exit\&. .TP \fB-V\fR Print the version and build parameters of \fBhttpd\fR, and then exit\&. .TP \fB-X\fR Run httpd in debug mode\&. Only one worker will be started and the server will not detach from the console\&. .PP The following arguments are available only on the Windows platform: .TP \fB-k install|config|uninstall\fR Install Apache httpd as a Windows NT service; change startup options for the Apache httpd service; and uninstall the Apache httpd service\&. .TP \fB-n \fIname\fR\fR The \fIname\fR of the Apache httpd service to signal\&. .TP \fB-w\fR Keep the console window open on error so that the error message can be read\&. httpd-2.4.41/docs/man/rotatelogs.80000644000000000000500000002052113317625777015235 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "ROTATELOGS" 8 "2018-07-06" "Apache HTTP Server" "rotatelogs" .SH NAME rotatelogs \- Piped logging program to rotate Apache logs .SH "SYNOPSIS" .PP \fB\fBrotatelogs\fR [ -\fBl\fR ] [ -\fBL\fR \fIlinkname\fR ] [ -\fBp\fR \fIprogram\fR ] [ -\fBf\fR ] [ -\fBD\fR ] [ -\fBt\fR ] [ -\fBv\fR ] [ -\fBe\fR ] [ -\fBc\fR ] [ -\fBn\fR \fInumber-of-files\fR ] \fIlogfile\fR \fIrotationtime\fR|\fIfilesize\fR(B|K|M|G) [ \fIoffset\fR ]\fR .SH "SUMMARY" .PP \fBrotatelogs\fR is a simple program for use in conjunction with Apache's piped logfile feature\&. It supports rotation based on a time interval or maximum size of the log\&. .SH "OPTIONS" .TP \fB-l\fR Causes the use of local time rather than GMT as the base for the interval or for \fBstrftime(3)\fR formatting with size-based rotation\&. .TP \fB-L\fR \fIlinkname\fR Causes a hard link to be made from the current logfile to the specified link name\&. This can be used to watch the log continuously across rotations using a command like \fBtail -F linkname\fR\&. .TP \fB-p\fR \fIprogram\fR If given, \fBrotatelogs\fR will execute the specified program every time a new log file is opened\&. The filename of the newly opened file is passed as the first argument to the program\&. If executing after a rotation, the old log file is passed as the second argument\&. \fBrotatelogs\fR does not wait for the specified program to terminate before continuing to operate, and will not log any error code returned on termination\&. The spawned program uses the same stdin, stdout, and stderr as rotatelogs itself, and also inherits the environment\&. .TP \fB-f\fR Causes the logfile to be opened immediately, as soon as \fBrotatelogs\fR starts, instead of waiting for the first logfile entry to be read (for non-busy sites, there may be a substantial delay between when the server is started and when the first request is handled, meaning that the associated logfile does not "exist" until then, which causes problems from some automated logging tools) .TP \fB-D\fR Creates the parent directories of the path that the log file will be placed in if they do not already exist\&. This allows \fBstrftime(3)\fR formatting to be used in the path and not just the filename\&. .TP \fB-t\fR Causes the logfile to be truncated instead of rotated\&. This is useful when a log is processed in real time by a command like tail, and there is no need for archived data\&. No suffix will be added to the filename, however format strings containing '%' characters will be respected\&. .TP \fB-v\fR Produce verbose output on STDERR\&. The output contains the result of the configuration parsing, and all file open and close actions\&. .TP \fB-e\fR Echo logs through to stdout\&. Useful when logs need to be further processed in real time by a further tool in the chain\&. .TP \fB-c\fR Create log file for each interval, even if empty\&. .TP \fB-n \fInumber-of-files\fR\fR Use a circular list of filenames without timestamps\&. With -n 3, the series of log files opened would be "logfile", "logfile\&.1", "logfile\&.2", then overwriting "logfile"\&. Available in 2\&.4\&.5 and later\&. .TP \fB\fIlogfile\fR\fR .PP The path plus basename of the logfile\&. If \fIlogfile\fR includes any '%' characters, it is treated as a format string for \fBstrftime(3)\fR\&. Otherwise, the suffix \fI\&.nnnnnnnnnn\fR is automatically added and is the time in seconds (unless the -t option is used)\&. Both formats compute the start time from the beginning of the current period\&. For example, if a rotation time of 86400 is specified, the hour, minute, and second fields created from the \fBstrftime(3)\fR format will all be zero, referring to the beginning of the current 24-hour period (midnight)\&. .PP When using \fBstrftime(3)\fR filename formatting, be sure the log file format has enough granularity to produce a different file name each time the logs are rotated\&. Otherwise rotation will overwrite the same file instead of starting a new one\&. For example, if \fIlogfile\fR was \fB/var/log/errorlog\&.%Y-%m-%d\fR with log rotation at 5 megabytes, but 5 megabytes was reached twice in the same day, the same log file name would be produced and log rotation would keep writing to the same file\&. .TP \fB\fIrotationtime\fR\fR The time between log file rotations in seconds\&. The rotation occurs at the beginning of this interval\&. For example, if the rotation time is 3600, the log file will be rotated at the beginning of every hour; if the rotation time is 86400, the log file will be rotated every night at midnight\&. (If no data is logged during an interval, no file will be created\&.) .TP \fB\fIfilesize\fR(B|K|M|G)\fR The maximum file size in followed by exactly one of the letters \fBB\fR (Bytes), \fBK\fR (KBytes), \fBM\fR (MBytes) or \fBG\fR (GBytes)\&. .PP When time and size are specified, the size must be given after the time\&. Rotation will occur whenever either time or size limits are reached\&. .TP \fB\fIoffset\fR\fR The number of minutes offset from UTC\&. If omitted, zero is assumed and UTC is used\&. For example, to use local time in the zone UTC -5 hours, specify a value of \fB-300\fR for this argument\&. In most cases, \fB-l\fR should be used instead of specifying an offset\&. .SH "EXAMPLES" .nf CustomLog "|bin/rotatelogs /var/log/logfile 86400" common .fi .PP This creates the files /var/log/logfile\&.nnnn where nnnn is the system time at which the log nominally starts (this time will always be a multiple of the rotation time, so you can synchronize cron scripts with it)\&. At the end of each rotation time (here after 24 hours) a new log is started\&. .nf CustomLog "|bin/rotatelogs -l /var/log/logfile\&.%Y\&.%m\&.%d 86400" common .fi .PP This creates the files /var/log/logfile\&.yyyy\&.mm\&.dd where yyyy is the year, mm is the month, and dd is the day of the month\&. Logging will switch to a new file every day at midnight, local time\&. .nf CustomLog "|bin/rotatelogs /var/log/logfile 5M" common .fi .PP This configuration will rotate the logfile whenever it reaches a size of 5 megabytes\&. .nf ErrorLog "|bin/rotatelogs /var/log/errorlog\&.%Y-%m-%d-%H_%M_%S 5M" .fi .PP This configuration will rotate the error logfile whenever it reaches a size of 5 megabytes, and the suffix to the logfile name will be created of the form \fBerrorlog\&.YYYY-mm-dd-HH_MM_SS\fR\&. .nf CustomLog "|bin/rotatelogs -t /var/log/logfile 86400" common .fi .PP This creates the file /var/log/logfile, truncating the file at startup and then truncating the file once per day\&. It is expected in this scenario that a separate process (such as tail) would process the file in real time\&. .SH "PORTABILITY" .PP The following logfile format string substitutions should be supported by all \fBstrftime(3)\fR implementations, see the \fBstrftime(3)\fR man page for library-specific extensions\&. .Ip "\(bu \s-1\fB%A\fR\s0 \- full weekday name (localized) .Ip "\(bu \s-1\fB%a\fR\s0 \- 3-character weekday name (localized) .Ip "\(bu \s-1\fB%B\fR\s0 \- full month name (localized) .Ip "\(bu \s-1\fB%b\fR\s0 \- 3-character month name (localized) .Ip "\(bu \s-1\fB%c\fR\s0 \- date and time (localized) .Ip "\(bu \s-1\fB%d\fR\s0 \- 2-digit day of month .Ip "\(bu \s-1\fB%H\fR\s0 \- 2-digit hour (24 hour clock) .Ip "\(bu \s-1\fB%I\fR\s0 \- 2-digit hour (12 hour clock) .Ip "\(bu \s-1\fB%j\fR\s0 \- 3-digit day of year .Ip "\(bu \s-1\fB%M\fR\s0 \- 2-digit minute .Ip "\(bu \s-1\fB%m\fR\s0 \- 2-digit month .Ip "\(bu \s-1\fB%p\fR\s0 \- am/pm of 12 hour clock (localized) .Ip "\(bu \s-1\fB%S\fR\s0 \- 2-digit second .Ip "\(bu \s-1\fB%U\fR\s0 \- 2-digit week of year (Sunday first day of week) .Ip "\(bu \s-1\fB%W\fR\s0 \- 2-digit week of year (Monday first day of week) .Ip "\(bu \s-1\fB%w\fR\s0 \- 1-digit weekday (Sunday first day of week) .Ip "\(bu \s-1\fB%X\fR\s0 \- time (localized) .Ip "\(bu \s-1\fB%x\fR\s0 \- date (localized) .Ip "\(bu \s-1\fB%Y\fR\s0 \- 4-digit year .Ip "\(bu \s-1\fB%y\fR\s0 \- 2-digit year .Ip "\(bu \s-1\fB%Z\fR\s0 \- time zone name .Ip "\(bu \s-1\fB%%\fR\s0 \- literal `%' httpd-2.4.41/docs/man/suexec.80000644000000000000500000000243413317625777014351 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "SUEXEC" 8 "2018-07-06" "Apache HTTP Server" "suexec" .SH NAME suexec \- Switch user before executing external programs .SH "SYNOPSIS" .PP \fB\fBsuexec\fR -\fBV\fR\fR .SH "SUMMARY" .PP \fBsuexec\fR is used by the Apache HTTP Server to switch to another user before executing CGI programs\&. In order to achieve this, it must run as \fBroot\fR\&. Since the HTTP daemon normally doesn't run as \fBroot\fR, the \fBsuexec\fR executable needs the setuid bit set and must be owned by \fBroot\fR\&. It should never be writable for any other person than \fBroot\fR\&. .PP For further information about the concepts and the security model of suexec please refer to the suexec documentation (http://httpd\&.apache\&.org/docs/2\&.4/suexec\&.html)\&. .SH "OPTIONS" .TP \fB-V\fR If you are \fBroot\fR, this option displays the compile options of \fBsuexec\fR\&. For security reasons all configuration options are changeable only at compile time\&. httpd-2.4.41/docs/man/htdbm.10000644000000000000500000002202613317625777014143 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "HTDBM" 1 "2018-07-06" "Apache HTTP Server" "htdbm" .SH NAME htdbm \- Manipulate DBM password databases .SH "SYNOPSIS" .PP \fB\fBhtdbm\fR [ -\fBT\fR\fIDBTYPE\fR ] [ -\fBi\fR ] [ -\fBc\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIcost\fR ] [ -\fBt\fR ] [ -\fBv\fR ] \fIfilename\fR \fIusername\fR\fR .PP \fB\fBhtdbm\fR -\fBb\fR [ -\fBT\fR\fIDBTYPE\fR ] [ -\fBc\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIcost\fR ] [ -\fBt\fR ] [ -\fBv\fR ] \fIfilename\fR \fIusername\fR \fIpassword\fR\fR .PP \fB\fBhtdbm\fR -\fBn\fR [ -\fBi\fR ] [ -\fBc\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIcost\fR ] [ -\fBt\fR ] [ -\fBv\fR ] \fIusername\fR\fR .PP \fB\fBhtdbm\fR -\fBnb\fR [ -\fBc\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIcost\fR ] [ -\fBt\fR ] [ -\fBv\fR ] \fIusername\fR \fIpassword\fR\fR .PP \fB\fBhtdbm\fR -\fBv\fR [ -\fBT\fR\fIDBTYPE\fR ] [ -\fBi\fR ] [ -\fBc\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIcost\fR ] [ -\fBt\fR ] [ -\fBv\fR ] \fIfilename\fR \fIusername\fR\fR .PP \fB\fBhtdbm\fR -\fBvb\fR [ -\fBT\fR\fIDBTYPE\fR ] [ -\fBc\fR ] [ -\fBm\fR | -\fBB\fR | -\fBd\fR | -\fBs\fR | -\fBp\fR ] [ -\fBC\fR \fIcost\fR ] [ -\fBt\fR ] [ -\fBv\fR ] \fIfilename\fR \fIusername\fR \fIpassword\fR\fR .PP \fB\fBhtdbm\fR -\fBx\fR [ -\fBT\fR\fIDBTYPE\fR ] \fIfilename\fR \fIusername\fR\fR .PP \fB\fBhtdbm\fR -\fBl\fR [ -\fBT\fR\fIDBTYPE\fR ] \fR .SH "SUMMARY" .PP \fBhtdbm\fR is used to manipulate the DBM format files used to store usernames and password for basic authentication of HTTP users via mod_authn_dbm\&. See the dbmmanage documentation for more information about these DBM files\&. .SH "OPTIONS" .TP \fB-b\fR Use batch mode; \fIi\&.e\&.\fR, get the password from the command line rather than prompting for it\&. This option should be used with extreme care, since \fBthe password is clearly visible\fR on the command line\&. For script use see the \fB-i\fR option\&. .TP \fB-i\fR Read the password from stdin without verification (for script usage)\&. .TP \fB-c\fR Create the \fIpasswdfile\fR\&. If \fIpasswdfile\fR already exists, it is rewritten and truncated\&. This option cannot be combined with the \fB-n\fR option\&. .TP \fB-n\fR Display the results on standard output rather than updating a database\&. This option changes the syntax of the command line, since the \fIpasswdfile\fR argument (usually the first one) is omitted\&. It cannot be combined with the \fB-c\fR option\&. .TP \fB-m\fR Use MD5 encryption for passwords\&. On Windows and Netware, this is the default\&. .TP \fB-B\fR Use bcrypt encryption for passwords\&. This is currently considered to be very secure\&. .TP \fB-C\fR This flag is only allowed in combination with \fB-B\fR (bcrypt encryption)\&. It sets the computing time used for the bcrypt algorithm (higher is more secure but slower, default: 5, valid: 4 to 31)\&. .TP \fB-d\fR Use \fBcrypt()\fR encryption for passwords\&. The default on all platforms but Windows and Netware\&. Though possibly supported by \fBhtdbm\fR on all platforms, it is not supported by the httpd server on Windows and Netware\&. This algorithm is \fBinsecure\fR by today's standards\&. .TP \fB-s\fR Use SHA encryption for passwords\&. Facilitates migration from/to Netscape servers using the LDAP Directory Interchange Format (ldif)\&. This algorithm is \fBinsecure\fR by today's standards\&. .TP \fB-p\fR Use plaintext passwords\&. Though \fBhtdbm\fR will support creation on all platforms, the httpd daemon will only accept plain text passwords on Windows and Netware\&. .TP \fB-l\fR Print each of the usernames and comments from the database on stdout\&. .TP \fB-v\fR Verify the username and password\&. The program will print a message indicating whether the supplied password is valid\&. If the password is invalid, the program exits with error code 3\&. .TP \fB-x\fR Delete user\&. If the username exists in the specified DBM file, it will be deleted\&. .TP \fB-t\fR Interpret the final parameter as a comment\&. When this option is specified, an additional string can be appended to the command line; this string will be stored in the "Comment" field of the database, associated with the specified username\&. .TP \fB\fIfilename\fR\fR The filename of the DBM format file\&. Usually without the extension \fB\&.db\fR, \fB\&.pag\fR, or \fB\&.dir\fR\&. If \fB-c\fR is given, the DBM file is created if it does not already exist, or updated if it does exist\&. .TP \fB\fIusername\fR\fR The username to create or update in \fIpasswdfile\fR\&. If \fIusername\fR does not exist in this file, an entry is added\&. If it does exist, the password is changed\&. .TP \fB\fIpassword\fR\fR The plaintext password to be encrypted and stored in the DBM file\&. Used only with the \fB-b\fR flag\&. .TP \fB-T\fIDBTYPE\fR\fR Type of DBM file (SDBM, GDBM, DB, or "default")\&. .SH "BUGS" .PP One should be aware that there are a number of different DBM file formats in existence, and with all likelihood, libraries for more than one format may exist on your system\&. The three primary examples are SDBM, NDBM, GNU GDBM, and Berkeley/Sleepycat DB 2/3/4\&. Unfortunately, all these libraries use different file formats, and you must make sure that the file format used by \fIfilename\fR is the same format that \fBhtdbm\fR expects to see\&. \fBhtdbm\fR currently has no way of determining what type of DBM file it is looking at\&. If used against the wrong format, will simply return nothing, or may create a different DBM file with a different name, or at worst, it may corrupt the DBM file if you were attempting to write to it\&. .PP One can usually use the \fBfile\fR program supplied with most Unix systems to see what format a DBM file is in\&. .SH "EXIT STATUS" .PP \fBhtdbm\fR returns a zero status ("true") if the username and password have been successfully added or updated in the DBM File\&. \fBhtdbm\fR returns \fB1\fR if it encounters some problem accessing files, \fB2\fR if there was a syntax problem with the command line, \fB3\fR if the password was entered interactively and the verification entry didn't match, \fB4\fR if its operation was interrupted, \fB5\fR if a value is too long (username, filename, password, or final computed record), \fB6\fR if the username contains illegal characters (see the Restrictions section), and \fB7\fR if the file is not a valid DBM password file\&. .SH "EXAMPLES" .nf htdbm /usr/local/etc/apache/\&.htdbm-users jsmith .fi .PP Adds or modifies the password for user \fBjsmith\fR\&. The user is prompted for the password\&. If executed on a Windows system, the password will be encrypted using the modified Apache MD5 algorithm; otherwise, the system's \fBcrypt()\fR routine will be used\&. If the file does not exist, \fBhtdbm\fR will do nothing except return an error\&. .nf htdbm -c /home/doe/public_html/\&.htdbm jane .fi .PP Creates a new file and stores a record in it for user \fBjane\fR\&. The user is prompted for the password\&. If the file exists and cannot be read, or cannot be written, it is not altered and \fBhtdbm\fR will display a message and return an error status\&. .nf htdbm -mb /usr/web/\&.htdbm-all jones Pwd4Steve .fi .PP Encrypts the password from the command line (\fBPwd4Steve\fR) using the MD5 algorithm, and stores it in the specified file\&. .SH "SECURITY CONSIDERATIONS" .PP Web password files such as those managed by \fBhtdbm\fR should \fInot\fR be within the Web server's URI space -- that is, they should not be fetchable with a browser\&. .PP The use of the \fB-b\fR option is discouraged, since when it is used the unencrypted password appears on the command line\&. .PP When using the \fBcrypt()\fR algorithm, note that only the first 8 characters of the password are used to form the password\&. If the supplied password is longer, the extra characters will be silently discarded\&. .PP The SHA encryption format does not use salting: for a given password, there is only one encrypted representation\&. The \fBcrypt()\fR and MD5 formats permute the representation by prepending a random salt string, to make dictionary attacks against the passwords more difficult\&. .PP The SHA and \fBcrypt()\fR formats are insecure by today's standards\&. .SH "RESTRICTIONS" .PP On the Windows platform, passwords encrypted with \fBhtdbm\fR are limited to no more than \fB255\fR characters in length\&. Longer passwords will be truncated to 255 characters\&. .PP The MD5 algorithm used by \fBhtdbm\fR is specific to the Apache software; passwords encrypted using it will not be usable with other Web servers\&. .PP Usernames are limited to \fB255\fR bytes and may not include the character \fB:\fR\&. httpd-2.4.41/docs/man/apachectl.80000644000000000000500000001055613317625777015005 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "APACHECTL" 8 "2018-07-06" "Apache HTTP Server" "apachectl" .SH NAME apachectl \- Apache HTTP Server Control Interface .SH "SYNOPSIS" .PP When acting in pass-through mode, \fBapachectl\fR can take all the arguments available for the httpd binary\&. .PP \fB\fBapachectl\fR [ \fIhttpd-argument\fR ]\fR .PP When acting in SysV init mode, \fBapachectl\fR takes simple, one-word commands, defined below\&. .PP \fB\fBapachectl\fR \fIcommand\fR\fR .SH "SUMMARY" .PP \fBapachectl\fR is a front end to the Apache HyperText Transfer Protocol (HTTP) server\&. It is designed to help the administrator control the functioning of the Apache httpd daemon\&. .PP The \fBapachectl\fR script can operate in two modes\&. First, it can act as a simple front-end to the httpd command that simply sets any necessary environment variables and then invokes httpd, passing through any command line arguments\&. Second, \fBapachectl\fR can act as a SysV init script, taking simple one-word arguments like \fBstart\fR, \fBrestart\fR, and \fBstop\fR, and translating them into appropriate signals to httpd\&. .PP If your Apache installation uses non-standard paths, you will need to edit the \fBapachectl\fR script to set the appropriate paths to the httpd binary\&. You can also specify any necessary httpd command line arguments\&. See the comments in the script for details\&. .PP The \fBapachectl\fR script returns a 0 exit value on success, and >0 if an error occurs\&. For more details, view the comments in the script\&. .SH "OPTIONS" .PP Only the SysV init-style options are defined here\&. Other arguments are defined on the httpd manual page\&. .TP \fBstart\fR Start the Apache httpd daemon\&. Gives an error if it is already running\&. This is equivalent to \fBapachectl -k start\fR\&. .TP \fBstop\fR Stops the Apache httpd daemon\&. This is equivalent to \fBapachectl -k stop\fR\&. .TP \fBrestart\fR Restarts the Apache httpd daemon\&. If the daemon is not running, it is started\&. This command automatically checks the configuration files as in \fBconfigtest\fR before initiating the restart to make sure the daemon doesn't die\&. This is equivalent to \fBapachectl -k restart\fR\&. .TP \fBfullstatus\fR Displays a full status report from mod_status\&. For this to work, you need to have mod_status enabled on your server and a text-based browser such as \fBlynx\fR available on your system\&. The URL used to access the status report can be set by editing the \fBSTATUSURL\fR variable in the script\&. .TP \fBstatus\fR Displays a brief status report\&. Similar to the \fBfullstatus\fR option, except that the list of requests currently being served is omitted\&. .TP \fBgraceful\fR Gracefully restarts the Apache httpd daemon\&. If the daemon is not running, it is started\&. This differs from a normal restart in that currently open connections are not aborted\&. A side effect is that old log files will not be closed immediately\&. This means that if used in a log rotation script, a substantial delay may be necessary to ensure that the old log files are closed before processing them\&. This command automatically checks the configuration files as in \fBconfigtest\fR before initiating the restart to make sure Apache doesn't die\&. This is equivalent to \fBapachectl -k graceful\fR\&. .TP \fBgraceful-stop\fR Gracefully stops the Apache httpd daemon\&. This differs from a normal stop in that currently open connections are not aborted\&. A side effect is that old log files will not be closed immediately\&. This is equivalent to \fBapachectl -k graceful-stop\fR\&. .TP \fBconfigtest\fR Run a configuration file syntax test\&. It parses the configuration files and either reports \fBSyntax Ok\fR or detailed information about the particular syntax error\&. This is equivalent to \fBapachectl -t\fR\&. .PP The following option was available in earlier versions but has been removed\&. .TP \fBstartssl\fR To start httpd with SSL support, you should edit your configuration file to include the relevant directives and then use the normal \fBapachectl start\fR\&. httpd-2.4.41/docs/man/ab.10000644000000000000500000002446413357447342013431 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "AB" 1 "2018-10-10" "Apache HTTP Server" "ab" .SH NAME ab \- Apache HTTP server benchmarking tool .SH "SYNOPSIS" .PP \fB\fBab\fR [ -\fBA\fR \fIauth-username\fR:\fIpassword\fR ] [ -\fBb\fR \fIwindowsize\fR ] [ -\fBB\fR \fIlocal-address\fR ] [ -\fBc\fR \fIconcurrency\fR ] [ -\fBC\fR \fIcookie-name\fR=\fIvalue\fR ] [ -\fBd\fR ] [ -\fBe\fR \fIcsv-file\fR ] [ -\fBE\fR \fIclient-certificate file\fR ] [ -\fBf\fR \fIprotocol\fR ] [ -\fBg\fR \fIgnuplot-file\fR ] [ -\fBh\fR ] [ -\fBH\fR \fIcustom-header\fR ] [ -\fBi\fR ] [ -\fBk\fR ] [ -\fBl\fR ] [ -\fBm\fR \fIHTTP-method\fR ] [ -\fBn\fR \fIrequests\fR ] [ -\fBp\fR \fIPOST-file\fR ] [ -\fBP\fR \fIproxy-auth-username\fR:\fIpassword\fR ] [ -\fBq\fR ] [ -\fBr\fR ] [ -\fBs\fR \fItimeout\fR ] [ -\fBS\fR ] [ -\fBt\fR \fItimelimit\fR ] [ -\fBT\fR \fIcontent-type\fR ] [ -\fBu\fR \fIPUT-file\fR ] [ -\fBv\fR \fIverbosity\fR] [ -\fBV\fR ] [ -\fBw\fR ] [ -\fBx\fR \fI-attributes\fR ] [ -\fBX\fR \fIproxy\fR[:\fIport\fR] ] [ -\fBy\fR \fI-attributes\fR ] [ -\fBz\fR \fI
    -attributes\fR ] [ -\fBZ\fR \fIciphersuite\fR ] [http[s]://]\fIhostname\fR[:\fIport\fR]/\fIpath\fR\fR .SH "SUMMARY" .PP \fBab\fR is a tool for benchmarking your Apache Hypertext Transfer Protocol (HTTP) server\&. It is designed to give you an impression of how your current Apache installation performs\&. This especially shows you how many requests per second your Apache installation is capable of serving\&. .SH "OPTIONS" .TP \fB-A \fIauth-username\fR:\fIpassword\fR\fR Supply BASIC Authentication credentials to the server\&. The username and password are separated by a single \fB:\fR and sent on the wire base64 encoded\&. The string is sent regardless of whether the server needs it (\fIi\&.e\&.\fR, has sent an 401 authentication needed)\&. .TP \fB-b \fIwindowsize\fR\fR Size of TCP send/receive buffer, in bytes\&. .TP \fB-B \fIlocal-address\fR\fR Address to bind to when making outgoing connections\&. .TP \fB-c \fIconcurrency\fR\fR Number of multiple requests to perform at a time\&. Default is one request at a time\&. .TP \fB-C \fIcookie-name\fR=\fIvalue\fR\fR Add a \fBCookie:\fR line to the request\&. The argument is typically in the form of a \fB\fIname\fR=\fIvalue\fR\fR pair\&. This field is repeatable\&. .TP \fB-d\fR Do not display the "percentage served within XX [ms] table"\&. (legacy support)\&. .TP \fB-e \fIcsv-file\fR\fR Write a Comma separated value (CSV) file which contains for each percentage (from 1% to 100%) the time (in milliseconds) it took to serve that percentage of the requests\&. This is usually more useful than the 'gnuplot' file; as the results are already 'binned'\&. .TP \fB-E \fIclient-certificate-file\fR\fR When connecting to an SSL website, use the provided client certificate in PEM format to authenticate with the server\&. The file is expected to contain the client certificate, followed by intermediate certificates, followed by the private key\&. Available in 2\&.4\&.36 and later\&. .TP \fB-f \fIprotocol\fR\fR Specify SSL/TLS protocol (SSL2, SSL3, TLS1, TLS1\&.1, TLS1\&.2, or ALL)\&. TLS1\&.1 and TLS1\&.2 support available in 2\&.4\&.4 and later\&. .TP \fB-g \fIgnuplot-file\fR\fR Write all measured values out as a 'gnuplot' or TSV (Tab separate values) file\&. This file can easily be imported into packages like Gnuplot, IDL, Mathematica, Igor or even Excel\&. The labels are on the first line of the file\&. .TP \fB-h\fR Display usage information\&. .TP \fB-H \fIcustom-header\fR\fR Append extra headers to the request\&. The argument is typically in the form of a valid header line, containing a colon-separated field-value pair (\fIi\&.e\&.\fR, \fB"Accept-Encoding: zip/zop;8bit"\fR)\&. .TP \fB-i\fR Do \fBHEAD\fR requests instead of \fBGET\fR\&. .TP \fB-k\fR Enable the HTTP KeepAlive feature, \fIi\&.e\&.\fR, perform multiple requests within one HTTP session\&. Default is no KeepAlive\&. .TP \fB-l\fR Do not report errors if the length of the responses is not constant\&. This can be useful for dynamic pages\&. Available in 2\&.4\&.7 and later\&. .TP \fB-m \fIHTTP-method\fR\fR Custom HTTP method for the requests\&. Available in 2\&.4\&.10 and later\&. .TP \fB-n \fIrequests\fR\fR Number of requests to perform for the benchmarking session\&. The default is to just perform a single request which usually leads to non-representative benchmarking results\&. .TP \fB-p \fIPOST-file\fR\fR File containing data to POST\&. Remember to also set \fB-T\fR\&. .TP \fB-P \fIproxy-auth-username\fR:\fIpassword\fR\fR Supply BASIC Authentication credentials to a proxy en-route\&. The username and password are separated by a single \fB:\fR and sent on the wire base64 encoded\&. The string is sent regardless of whether the proxy needs it (\fIi\&.e\&.\fR, has sent an 407 proxy authentication needed)\&. .TP \fB-q\fR When processing more than 150 requests, \fBab\fR outputs a progress count on \fBstderr\fR every 10% or 100 requests or so\&. The \fB-q\fR flag will suppress these messages\&. .TP \fB-r\fR Don't exit on socket receive errors\&. .TP \fB-s \fItimeout\fR\fR Maximum number of seconds to wait before the socket times out\&. Default is 30 seconds\&. Available in 2\&.4\&.4 and later\&. .TP \fB-S\fR Do not display the median and standard deviation values, nor display the warning/error messages when the average and median are more than one or two times the standard deviation apart\&. And default to the min/avg/max values\&. (legacy support)\&. .TP \fB-t \fItimelimit\fR\fR Maximum number of seconds to spend for benchmarking\&. This implies a \fB-n 50000\fR internally\&. Use this to benchmark the server within a fixed total amount of time\&. Per default there is no timelimit\&. .TP \fB-T \fIcontent-type\fR\fR Content-type header to use for POST/PUT data, eg\&. \fBapplication/x-www-form-urlencoded\fR\&. Default is \fBtext/plain\fR\&. .TP \fB-u \fIPUT-file\fR\fR File containing data to PUT\&. Remember to also set \fB-T\fR\&. .TP \fB-v \fIverbosity\fR\fR Set verbosity level - \fB4\fR and above prints information on headers, \fB3\fR and above prints response codes (404, 200, etc\&.), \fB2\fR and above prints warnings and info\&. .TP \fB-V\fR Display version number and exit\&. .TP \fB-w\fR Print out results in HTML tables\&. Default table is two columns wide, with a white background\&. .TP \fB-x \fI-attributes\fR\fR String to use as attributes for \fB
    \fR\&. Attributes are inserted \fB
    \fR\&. .TP \fB-X \fIproxy\fR[:\fIport\fR]\fR Use a proxy server for the requests\&. .TP \fB-y \fI-attributes\fR\fR String to use as attributes for \fB\fR\&. .TP \fB-z \fI
    -attributes\fR\fR String to use as attributes for \fB\fR\&. .TP \fB-Z \fIciphersuite\fR\fR Specify SSL/TLS cipher suite (See openssl ciphers) .SH "OUTPUT" .PP The following list describes the values returned by \fBab\fR: .TP Server Software The value, if any, returned in the \fIserver\fR HTTP header of the first successful response\&. This includes all characters in the header from beginning to the point a character with decimal value of 32 (most notably: a space or CR/LF) is detected\&. .TP Server Hostname The DNS or IP address given on the command line .TP Server Port The port to which ab is connecting\&. If no port is given on the command line, this will default to 80 for http and 443 for https\&. .TP SSL/TLS Protocol The protocol parameters negotiated between the client and server\&. This will only be printed if SSL is used\&. .TP Document Path The request URI parsed from the command line string\&. .TP Document Length This is the size in bytes of the first successfully returned document\&. If the document length changes during testing, the response is considered an error\&. .TP Concurrency Level The number of concurrent clients used during the test .TP Time taken for tests This is the time taken from the moment the first socket connection is created to the moment the last response is received .TP Complete requests The number of successful responses received .TP Failed requests The number of requests that were considered a failure\&. If the number is greater than zero, another line will be printed showing the number of requests that failed due to connecting, reading, incorrect content length, or exceptions\&. .TP Write errors The number of errors that failed during write (broken pipe)\&. .TP Non-2xx responses The number of responses that were not in the 200 series of response codes\&. If all responses were 200, this field is not printed\&. .TP Keep-Alive requests The number of connections that resulted in Keep-Alive requests .TP Total body sent If configured to send data as part of the test, this is the total number of bytes sent during the tests\&. This field is omitted if the test did not include a body to send\&. .TP Total transferred The total number of bytes received from the server\&. This number is essentially the number of bytes sent over the wire\&. .TP HTML transferred The total number of document bytes received from the server\&. This number excludes bytes received in HTTP headers .TP Requests per second This is the number of requests per second\&. This value is the result of dividing the number of requests by the total time taken .TP Time per request The average time spent per request\&. The first value is calculated with the formula \fBconcurrency * timetaken * 1000 / done\fR while the second value is calculated with the formula \fBtimetaken * 1000 / done\fR .TP Transfer rate The rate of transfer as calculated by the formula \fBtotalread / 1024 / timetaken\fR .SH "BUGS" .PP There are various statically declared buffers of fixed length\&. Combined with the lazy parsing of the command line arguments, the response headers from the server and other external inputs, this might bite you\&. .PP It does not implement HTTP/1\&.x fully; only accepts some 'expected' forms of responses\&. The rather heavy use of \fBstrstr(3)\fR shows up top in profile, which might indicate a performance problem; \fIi\&.e\&.\fR, you would measure the \fBab\fR performance rather than the server's\&. httpd-2.4.41/docs/man/dbmmanage.10000644000000000000500000001321513317625777014760 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "DBMMANAGE" 1 "2018-07-06" "Apache HTTP Server" "dbmmanage" .SH NAME dbmmanage \- Manage user authentication files in DBM format .SH "SYNOPSIS" .PP \fB\fBdbmmanage\fR [ \fIencoding\fR ] \fIfilename\fR add|adduser|check|delete|update \fIusername\fR [ \fIencpasswd\fR [ \fIgroup\fR[,\fIgroup\fR\&.\&.\&.] [ \fIcomment\fR ] ] ]\fR .PP \fB\fBdbmmanage\fR \fIfilename\fR view [ \fIusername\fR ]\fR .PP \fB\fBdbmmanage\fR \fIfilename\fR import\fR .SH "SUMMARY" .PP \fBdbmmanage\fR is used to create and update the DBM format files used to store usernames and password for basic authentication of HTTP users via mod_authn_dbm\&. Resources available from the Apache HTTP server can be restricted to just the users listed in the files created by \fBdbmmanage\fR\&. This program can only be used when the usernames are stored in a DBM file\&. To use a flat-file database see htpasswd\&. .PP Another tool to maintain a DBM password database is htdbm\&. .PP This manual page only lists the command line arguments\&. For details of the directives necessary to configure user authentication in httpd see the httpd manual, which is part of the Apache distribution or can be found at http://httpd\&.apache\&.org/\&. .SH "OPTIONS" .TP \fB\fIfilename\fR\fR The filename of the DBM format file\&. Usually without the extension \fB\&.db\fR, \fB\&.pag\fR, or \fB\&.dir\fR\&. .TP \fB\fIusername\fR\fR The user for which the operations are performed\&. The \fIusername\fR may not contain a colon (\fB:\fR)\&. .TP \fB\fIencpasswd\fR\fR This is the already encrypted password to use for the \fBupdate\fR and \fBadd\fR commands\&. You may use a hyphen (\fB-\fR) if you want to get prompted for the password, but fill in the fields afterwards\&. Additionally when using the \fBupdate\fR command, a period (\fB\&.\fR) keeps the original password untouched\&. .TP \fB\fIgroup\fR\fR A group, which the user is member of\&. A groupname may not contain a colon (\fB:\fR)\&. You may use a hyphen (\fB-\fR) if you don't want to assign the user to a group, but fill in the comment field\&. Additionally when using the \fBupdate\fR command, a period (\fB\&.\fR) keeps the original groups untouched\&. .TP \fB\fIcomment\fR\fR This is the place for your opaque comments about the user, like realname, mailaddress or such things\&. The server will ignore this field\&. .SS "Encodings" .TP \fB-d\fR crypt encryption (default, except on Win32, Netware) .TP \fB-m\fR MD5 encryption (default on Win32, Netware) .TP \fB-s\fR SHA1 encryption .TP \fB-p\fR plaintext (\fInot recommended\fR) .SS "Commands" .TP \fBadd\fR Adds an entry for \fIusername\fR to \fIfilename\fR using the encrypted password \fIencpasswd\fR\&. dbmmanage passwords\&.dat add rbowen foKntnEF3KSXA .TP \fBadduser\fR Asks for a password and then adds an entry for \fIusername\fR to \fIfilename\fR\&. dbmmanage passwords\&.dat adduser krietz .TP \fBcheck\fR Asks for a password and then checks if \fIusername\fR is in \fIfilename\fR and if it's password matches the specified one\&. dbmmanage passwords\&.dat check rbowen .TP \fBdelete\fR Deletes the \fIusername\fR entry from \fIfilename\fR\&. dbmmanage passwords\&.dat delete rbowen .TP \fBimport\fR Reads \fB\fIusername\fR:\fIpassword\fR\fR entries (one per line) from \fBSTDIN\fR and adds them to \fIfilename\fR\&. The passwords already have to be crypted\&. .TP \fBupdate\fR Same as the \fBadduser\fR command, except that it makes sure \fIusername\fR already exists in \fIfilename\fR\&. dbmmanage passwords\&.dat update rbowen .TP \fBview\fR Just displays the contents of the DBM file\&. If you specify a \fIusername\fR, it displays the particular record only\&. dbmmanage passwords\&.dat view .SH "BUGS" .PP One should be aware that there are a number of different DBM file formats in existence, and with all likelihood, libraries for more than one format may exist on your system\&. The three primary examples are SDBM, NDBM, the GNU project's GDBM, and Berkeley DB 2\&. Unfortunately, all these libraries use different file formats, and you must make sure that the file format used by \fIfilename\fR is the same format that \fBdbmmanage\fR expects to see\&. \fBdbmmanage\fR currently has no way of determining what type of DBM file it is looking at\&. If used against the wrong format, will simply return nothing, or may create a different DBM file with a different name, or at worst, it may corrupt the DBM file if you were attempting to write to it\&. .PP \fBdbmmanage\fR has a list of DBM format preferences, defined by the \fB@AnyDBM::ISA\fR array near the beginning of the program\&. Since we prefer the Berkeley DB 2 file format, the order in which \fBdbmmanage\fR will look for system libraries is Berkeley DB 2, then NDBM, then GDBM and then SDBM\&. The first library found will be the library \fBdbmmanage\fR will attempt to use for all DBM file transactions\&. This ordering is slightly different than the standard \fB@AnyDBM::ISA\fR ordering in Perl, as well as the ordering used by the simple \fBdbmopen()\fR call in Perl, so if you use any other utilities to manage your DBM files, they must also follow this preference ordering\&. Similar care must be taken if using programs in other languages, like C, to access these files\&. .PP One can usually use the \fBfile\fR program supplied with most Unix systems to see what format a DBM file is in\&. httpd-2.4.41/docs/man/httxt2dbm.10000644000000000000500000000326613317625777014772 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "HTTXT2DBM" 1 "2018-07-06" "Apache HTTP Server" "httxt2dbm" .SH NAME httxt2dbm \- Generate dbm files for use with RewriteMap .SH "SYNOPSIS" .PP \fB\fBhttxt2dbm\fR [ -\fBv\fR ] [ -\fBf\fR \fIDBM_TYPE\fR ] -\fBi\fR \fISOURCE_TXT\fR -\fBo\fR \fIOUTPUT_DBM\fR \fR .SH "SUMMARY" .PP \fBhttxt2dbm\fR is used to generate dbm files from text input, for use in RewriteMap with the \fBdbm\fR map type\&. .PP If the output file already exists, it will not be truncated\&. New keys will be added and existing keys will be updated\&. .SH "OPTIONS" .TP \fB-v\fR More verbose output .TP \fB-f \fIDBM_TYPE\fR\fR Specify the DBM type to be used for the output\&. If not specified, will use the APR Default\&. Available types are: \fBGDBM\fR for GDBM files, \fBSDBM\fR for SDBM files, \fBDB\fR for berkeley DB files, \fBNDBM\fR for NDBM files, \fBdefault\fR for the default DBM type\&. .TP \fB-i \fISOURCE_TXT\fR\fR Input file from which the dbm is to be created\&. The file should be formated with one record per line, of the form: \fBkey value\fR\&. See the documentation for RewriteMap for further details of this file's format and meaning\&. .TP \fB-o \fIOUTPUT_DBM\fR\fR Name of the output dbm files\&. .SH "EXAMPLES" .nf httxt2dbm -i rewritemap\&.txt -o rewritemap\&.dbm httxt2dbm -f SDBM -i rewritemap\&.txt -o rewritemap\&.dbm .fi httpd-2.4.41/docs/man/htcacheclean.80000644000000000000500000001451413523273316015444 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "HTCACHECLEAN" 8 "2019-08-09" "Apache HTTP Server" "htcacheclean" .SH NAME htcacheclean \- Clean up the disk cache .SH "SYNOPSIS" .PP \fB\fBhtcacheclean\fR [ -\fBD\fR ] [ -\fBv\fR ] [ -\fBt\fR ] [ -\fBr\fR ] [ -\fBn\fR ] [ -\fBR\fR\fIround\fR ] -\fBp\fR\fIpath\fR [ -\fBl\fR\fIlimit\fR ] [ -\fBL\fR\fIlimit\fR ]\fR .PP \fB\fBhtcacheclean\fR [ -\fBn\fR ] [ -\fBt\fR ] [ -\fBi\fR ] [ -\fBP\fR\fIpidfile\fR ] [ -\fBR\fR\fIround\fR ] -\fBd\fR\fIinterval\fR -\fBp\fR\fIpath\fR [ -\fBl\fR\fIlimit\fR ] [ -\fBL\fR\fIlimit\fR ]\fR .PP \fB\fBhtcacheclean\fR [ -\fBv\fR ] [ -\fBR\fR\fIround\fR ] -\fBp\fR\fIpath\fR [ -\fBa\fR ] [ -\fBA\fR ]\fR .PP \fB\fBhtcacheclean\fR [ -\fBD\fR ] [ -\fBv\fR ] [ -\fBt\fR ] [ -\fBR\fR\fIround\fR ] -\fBp\fR\fIpath\fR \fIurl\fR\fR .SH "SUMMARY" .PP \fBhtcacheclean\fR is used to keep the size of mod_cache_disk's storage within a given size limit, or limit on inodes in use\&. This tool can run either manually or in daemon mode\&. When running in daemon mode, it sleeps in the background and checks the cache directory at regular intervals for cached content to be removed\&. You can stop the daemon cleanly by sending it a TERM or INT signal\&. When run manually, a once off check of the cache directory is made for cached content to be removed\&. If one or more URLs are specified, each URL will be deleted from the cache, if present\&. .SH "OPTIONS" .TP \fB-d\fIinterval\fR\fR Daemonize and repeat cache cleaning every \fIinterval\fR minutes\&. This option is mutually exclusive with the \fB-D\fR, \fB-v\fR and \fB-r\fR options\&. To shutdown the daemon cleanly, just send it a \fBSIGTERM\fR or \fBSIGINT\fR\&. .TP \fB-D\fR Do a dry run and don't delete anything\&. This option is mutually exclusive with the \fB-d\fR option\&. When doing a dry run and deleting directories with \fB-t\fR, the inodes reported deleted in the stats cannot take into account the directories deleted, and will be marked as an estimate\&. .TP \fB-v\fR Be verbose and print statistics\&. This option is mutually exclusive with the \fB-d\fR option\&. .TP \fB-r\fR Clean thoroughly\&. This assumes that the Apache web server is not running (otherwise you may get garbage in the cache)\&. This option is mutually exclusive with the \fB-d\fR option and implies the \fB-t\fR option\&. .TP \fB-n\fR Be nice\&. This causes slower processing in favour of other processes\&. \fBhtcacheclean\fR will sleep from time to time so that (a) the disk IO will be delayed and (b) the kernel can schedule other processes in the meantime\&. .TP \fB-t\fR Delete all empty directories\&. By default only cache files are removed, however with some configurations the large number of directories created may require attention\&. If your configuration requires a very large number of directories, to the point that inode or file allocation table exhaustion may become an issue, use of this option is advised\&. .TP \fB-p\fIpath\fR\fR Specify \fIpath\fR as the root directory of the disk cache\&. This should be the same value as specified with the CacheRoot directive\&. .TP \fB-P\fIpidfile\fR\fR Specify \fIpidfile\fR as the name of the file to write the process ID to when daemonized\&. .TP \fB-R\fIround\fR\fR Specify \fIround\fR as the amount to round sizes up to, to compensate for disk block sizes\&. Set to the block size of the cache partition\&. .TP \fB-l\fIlimit\fR\fR Specify \fIlimit\fR as the total disk cache size limit\&. The value is expressed in bytes by default (or attaching \fBB\fR to the number)\&. Attach \fBK\fR for Kbytes, \fBM\fR for MBytes or \fBG\fR for Gbytes\&. .TP \fB-L\fIlimit\fR\fR Specify \fIlimit\fR as the total disk cache inode limit\&. \fBK\fR, \fBM\fR or \fBG\fR suffix can also be used\&. .TP \fB-i\fR Be intelligent and run only when there was a modification of the disk cache\&. This option is only possible together with the \fB-d\fR option\&. .TP \fB-a\fR List the URLs currently stored in the cache\&. Variants of the same URL will be listed once for each variant\&. .TP \fB-A\fR List the URLs currently stored in the cache, along with their attributes in the following order: url, header size, body size, status, entity version, date, expiry, request time, response time, body present, head request\&. .SH "DELETING A SPECIFIC URL" .PP If \fBhtcacheclean\fR is passed one or more URLs, each URL will be deleted from the cache\&. If multiple variants of an URL exists, all variants would be deleted\&. .PP When a reverse proxied URL is to be deleted, the effective URL is constructed from the \fBHost\fR header, the \fBport\fR, the \fBpath\fR and the \fBquery\fR\&. Note the '?' in the URL must always be specified explicitly, whether a query string is present or not\&. For example, an attempt to delete the path \fB/\fR from the server \fBlocalhost\fR, the URL to delete would be \fBhttp://localhost:80/?\fR\&. .SH "LISTING URLS IN THE CACHE" .PP By passing the \fB-a\fR or \fB-A\fR options to \fBhtcacheclean\fR, the URLs within the cache will be listed as they are found, one URL per line\&. The \fB-A\fR option dumps the full cache entry after the URL, with fields in the following order: .TP url The URL of the entry\&. .TP header size The size of the header in bytes\&. .TP body size The size of the body in bytes\&. .TP status Status of the cached response\&. .TP entity version The number of times this entry has been revalidated without being deleted\&. .TP date Date of the response\&. .TP expiry Expiry date of the response\&. .TP request time Time of the start of the request\&. .TP response time Time of the end of the request\&. .TP body present If 0, no body is stored with this request, 1 otherwise\&. .TP head request If 1, the entry contains a cached HEAD request with no body, 0 otherwise\&. .SH "EXIT STATUS" .PP \fBhtcacheclean\fR returns a zero status ("true") if all operations were successful, \fB1\fR otherwise\&. If an URL is specified, and the URL was cached and successfully removed, \fB0\fR is returned, \fB2\fR otherwise\&. If an error occurred during URL removal, \fB1\fR is returned\&. httpd-2.4.41/docs/man/apxs.10000644000000000000500000002464413317625777014030 0ustar rootsrc.\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .\" DO NOT EDIT! Generated from XML source. .\" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX .de Sh \" Subsection .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .TH "APXS" 1 "2018-07-06" "Apache HTTP Server" "apxs" .SH NAME apxs \- APache eXtenSion tool .SH "SYNOPSIS" .PP \fB\fBapxs\fR -\fBg\fR [ -\fBS\fR \fIname\fR=\fIvalue\fR ] -\fBn\fR \fImodname\fR\fR .PP \fB\fBapxs\fR -\fBq\fR [ -\fBv\fR ] [ -\fBS\fR \fIname\fR=\fIvalue\fR ] \fIquery\fR \&.\&.\&.\fR .PP \fB\fBapxs\fR -\fBc\fR [ -\fBS\fR \fIname\fR=\fIvalue\fR ] [ -\fBo\fR \fIdsofile\fR ] [ -\fBI\fR \fIincdir\fR ] [ -\fBD\fR \fIname\fR=\fIvalue\fR ] [ -\fBL\fR \fIlibdir\fR ] [ -\fBl\fR \fIlibname\fR ] [ -\fBWc,\fR\fIcompiler-flags\fR ] [ -\fBWl,\fR\fIlinker-flags\fR ] \fIfiles\fR \&.\&.\&.\fR .PP \fB\fBapxs\fR -\fBi\fR [ -\fBS\fR \fIname\fR=\fIvalue\fR ] [ -\fBn\fR \fImodname\fR ] [ -\fBa\fR ] [ -\fBA\fR ] \fIdso-file\fR \&.\&.\&.\fR .PP \fB\fBapxs\fR -\fBe\fR [ -\fBS\fR \fIname\fR=\fIvalue\fR ] [ -\fBn\fR \fImodname\fR ] [ -\fBa\fR ] [ -\fBA\fR ] \fIdso-file\fR \&.\&.\&.\fR .SH "SUMMARY" .PP \fBapxs\fR is a tool for building and installing extension modules for the Apache HyperText Transfer Protocol (HTTP) server\&. This is achieved by building a dynamic shared object (DSO) from one or more source or object \fIfiles\fR which then can be loaded into the Apache server under runtime via the LoadModule directive from mod_so\&. .PP So to use this extension mechanism your platform has to support the DSO feature and your Apache httpd binary has to be built with the mod_so module\&. The \fBapxs\fR tool automatically complains if this is not the case\&. You can check this yourself by manually running the command .nf $ httpd -l .fi .PP The module mod_so should be part of the displayed list\&. If these requirements are fulfilled you can easily extend your Apache server's functionality by installing your own modules with the DSO mechanism by the help of this \fBapxs\fR tool: .nf $ apxs -i -a -c mod_foo\&.c gcc -fpic -DSHARED_MODULE -I/path/to/apache/include -c mod_foo\&.c ld -Bshareable -o mod_foo\&.so mod_foo\&.o cp mod_foo\&.so /path/to/apache/modules/mod_foo\&.so chmod 755 /path/to/apache/modules/mod_foo\&.so [activating module `foo' in /path/to/apache/etc/httpd\&.conf] $ apachectl restart /path/to/apache/sbin/apachectl restart: httpd not running, trying to start [Tue Mar 31 11:27:55 1998] [debug] mod_so\&.c(303): loaded module foo_module /path/to/apache/sbin/apachectl restart: httpd started $ _ .fi .PP The arguments \fIfiles\fR can be any C source file (\&.c), a object file (\&.o) or even a library archive (\&.a)\&. The \fBapxs\fR tool automatically recognizes these extensions and automatically used the C source files for compilation while just using the object and archive files for the linking phase\&. But when using such pre-compiled objects make sure they are compiled for position independent code (PIC) to be able to use them for a dynamically loaded shared object\&. For instance with GCC you always just have to use \fB-fpic\fR\&. For other C compilers consult its manual page or at watch for the flags \fBapxs\fR uses to compile the object files\&. .PP For more details about DSO support in Apache read the documentation of mod_so or perhaps even read the \fBsrc/modules/standard/mod_so\&.c\fR source file\&. .SH "OPTIONS" .SS "Common Options" .TP \fB-n \fImodname\fR\fR This explicitly sets the module name for the \fB-i\fR (install) and \fB-g\fR (template generation) option\&. Use this to explicitly specify the module name\&. For option \fB-g\fR this is required, for option \fB-i\fR the \fBapxs\fR tool tries to determine the name from the source or (as a fallback) at least by guessing it from the filename\&. .SS "Query Options" .TP \fB-q\fR Performs a query for variables and environment settings used to build \fBhttpd\fR\&. When invoked without \fIquery\fR parameters, it prints all known variables and their values\&. The optional \fB-v\fR parameter formats the list output\&. .PP Use this to manually determine settings used to build the \fBhttpd\fR that will load your module\&. For instance use INC=-I`apxs -q INCLUDEDIR` .PP inside your own Makefiles if you need manual access to Apache's C header files\&. .SS "Configuration Options" .TP \fB-S \fIname\fR=\fIvalue\fR\fR This option changes the apxs settings described above\&. .SS "Template Generation Options" .TP \fB-g\fR This generates a subdirectory \fIname\fR (see option \fB-n\fR) and there two files: A sample module source file named \fBmod_\fIname\fR\&.c\fR which can be used as a template for creating your own modules or as a quick start for playing with the apxs mechanism\&. And a corresponding \fBMakefile\fR for even easier build and installing of this module\&. .SS "DSO Compilation Options" .TP \fB-c\fR This indicates the compilation operation\&. It first compiles the C source files (\&.c) of \fIfiles\fR into corresponding object files (\&.o) and then builds a dynamically shared object in \fIdsofile\fR by linking these object files plus the remaining object files (\&.o and \&.a) of \fIfiles\fR\&. If no \fB-o\fR option is specified the output file is guessed from the first filename in \fIfiles\fR and thus usually defaults to \fBmod_\fIname\fR\&.so\fR\&. .TP \fB-o \fIdsofile\fR\fR Explicitly specifies the filename of the created dynamically shared object\&. If not specified and the name cannot be guessed from the \fIfiles\fR list, the fallback name \fBmod_unknown\&.so\fR is used\&. .TP \fB-D \fIname\fR=\fIvalue\fR\fR This option is directly passed through to the compilation command(s)\&. Use this to add your own defines to the build process\&. .TP \fB-I \fIincdir\fR\fR This option is directly passed through to the compilation command(s)\&. Use this to add your own include directories to search to the build process\&. .TP \fB-L \fIlibdir\fR\fR This option is directly passed through to the linker command\&. Use this to add your own library directories to search to the build process\&. .TP \fB-l \fIlibname\fR\fR This option is directly passed through to the linker command\&. Use this to add your own libraries to search to the build process\&. .TP \fB-Wc,\fIcompiler-flags\fR\fR This option passes \fIcompiler-flags\fR as additional flags to the \fBlibtool --mode=compile\fR command\&. Use this to add local compiler-specific options\&. .TP \fB-Wl,\fIlinker-flags\fR\fR This option passes \fIlinker-flags\fR as additional flags to the \fBlibtool --mode=link\fR command\&. Use this to add local linker-specific options\&. .TP \fB-p\fR This option causes apxs to link against the apr/apr-util libraries\&. This is useful when compiling helper programs that use the apr/apr-util libraries\&. .SS "DSO Installation and Configuration Options" .TP \fB-i\fR This indicates the installation operation and installs one or more dynamically shared objects into the server's \fImodules\fR directory\&. .TP \fB-a\fR This activates the module by automatically adding a corresponding LoadModule line to Apache's \fBhttpd\&.conf\fR configuration file, or by enabling it if it already exists\&. .TP \fB-A\fR Same as option \fB-a\fR but the created LoadModule directive is prefixed with a hash sign (\fB#\fR), \fIi\&.e\&.\fR, the module is just prepared for later activation but initially disabled\&. .TP \fB-e\fR This indicates the editing operation, which can be used with the \fB-a\fR and \fB-A\fR options similarly to the \fB-i\fR operation to edit Apache's \fBhttpd\&.conf\fR configuration file without attempting to install the module\&. .SH "EXAMPLES" .PP Assume you have an Apache module named \fBmod_foo\&.c\fR available which should extend Apache's server functionality\&. To accomplish this you first have to compile the C source into a shared object suitable for loading into the Apache server under runtime via the following command: .nf $ apxs -c mod_foo\&.c /path/to/libtool --mode=compile gcc \&.\&.\&. -c mod_foo\&.c /path/to/libtool --mode=link gcc \&.\&.\&. -o mod_foo\&.la mod_foo\&.slo $ _ .fi .PP Then you have to update the Apache configuration by making sure a LoadModule directive is present to load this shared object\&. To simplify this step \fBapxs\fR provides an automatic way to install the shared object in its "modules" directory and updating the \fBhttpd\&.conf\fR file accordingly\&. This can be achieved by running: .nf $ apxs -i -a mod_foo\&.la /path/to/instdso\&.sh mod_foo\&.la /path/to/apache/modules /path/to/libtool --mode=install cp mod_foo\&.la /path/to/apache/modules \&.\&.\&. chmod 755 /path/to/apache/modules/mod_foo\&.so [activating module `foo' in /path/to/apache/conf/httpd\&.conf] $ _ .fi .PP This way a line named .nf LoadModule foo_module modules/mod_foo\&.so .fi .PP is added to the configuration file if still not present\&. If you want to have this disabled per default use the \fB-A\fR option, \fIi\&.e\&.\fR .nf $ apxs -i -A mod_foo\&.c .fi .PP For a quick test of the apxs mechanism you can create a sample Apache module template plus a corresponding Makefile via: .nf $ apxs -g -n foo Creating [DIR] foo Creating [FILE] foo/Makefile Creating [FILE] foo/modules\&.mk Creating [FILE] foo/mod_foo\&.c Creating [FILE] foo/\&.deps $ _ .fi .PP Then you can immediately compile this sample module into a shared object and load it into the Apache server: .nf $ cd foo $ make all reload apxs -c mod_foo\&.c /path/to/libtool --mode=compile gcc \&.\&.\&. -c mod_foo\&.c /path/to/libtool --mode=link gcc \&.\&.\&. -o mod_foo\&.la mod_foo\&.slo apxs -i -a -n "foo" mod_foo\&.la /path/to/instdso\&.sh mod_foo\&.la /path/to/apache/modules /path/to/libtool --mode=install cp mod_foo\&.la /path/to/apache/modules \&.\&.\&. chmod 755 /path/to/apache/modules/mod_foo\&.so [activating module `foo' in /path/to/apache/conf/httpd\&.conf] apachectl restart /path/to/apache/sbin/apachectl restart: httpd not running, trying to start [Tue Mar 31 11:27:55 1998] [debug] mod_so\&.c(303): loaded module foo_module /path/to/apache/sbin/apachectl restart: httpd started $ _ .fi httpd-2.4.41/docs/doxygen.conf0000644000000000000500000000342311711771300014510 0ustar rootsrcPROJECT_NAME=Apache2 # make the generated documentation searchable SEARCHENGINE=YES INPUT=. RECURSIVE=YES FILE_PATTERNS=*.h OUTPUT_DIRECTORY=docs/dox #EXTRACT_STATIC=YES EXTRACT_ALL=YES # add documentation for functions that are declared internal use only INTERNAL_DOCS=YES HAVE_DOT=YES CLASS_GRAPH=YES ENABLE_PREPROCESSING=YES MACRO_EXPANSION=YES QUIET=YES EXPAND_ONLY_PREDEF=YES #EXPAND_AS_DEFINED= # not sure why this doesn't work as EXPAND_AS_DEFINED, it should! PREDEFINED="APR_DECLARE(x)=x" \ "APR_DECLARE_NONSTD(x)=x" \ "AP_DECLARE_HOOK(ret,name,args)=ret name args;" \ "APR_DECLARE_OPTIONAL_FN(ret,name,args)=ret name args;" \ "APR_DECLARE_EXTERNAL_HOOK(ns,link,ret,name,args)= ret ns##_hook_##name args;" \ "AP_DECLARE(x)=x" \ "AP_DECLARE_NONSTD(x)=x" \ AP_CORE_DECLARE(x)=x \ "AP_CORE_DECLARE_NONSTD(x)=x" \ "APR_HAS_THREADS" \ "APR_HAS_MMAP" \ APR_HAS_INLINE \ APR_HAS_FLOCK_SERIALIZE \ APR_HAS_SYSVSEM_SERIALIZE \ APR_HAS_POSIXSEM_SERIALIZE \ APR_HAS_FCNTL_SERIALIZE \ APR_HAS_PROC_PTHREAD_SERIALIZE \ APR_HAS_RWLOCK_SERIALIZE \ APR_HAS_SHARED_MEMORY \ APR_HAS_SENDFILE \ APR_HAS_FORK \ APR_HAS_RANDOM \ APR_HAS_XLATE \ APR_HAS_OTHER_CHILD \ APR_HAS_DSO \ APR_HAS_SO_ACCEPTFILTER \ APR_HAS_UNICODE_FS \ APR_HAS_PROC_INVOKED \ APR_HAS_USER \ APR_HAS_LARGE_FILES \ APR_HAS_XTHREAD_FILES \ DOXYGEN= \ APU_DECLARE_DATA= \ __pre_nw__= \ "APU_DECLARE(x)=x" \ "CACHE_DECLARE(x)=x" \ "PROXY_DECLARE(x)=x" OPTIMIZE_OUTPUT_FOR_C=YES GENERATE_TREEVIEW=YES FULL_PATH_NAMES=YES # some autoconf guru needs to make configure set this correctly... #STRIP_FROM_PATH=/var/www/lxr/source #GENERATE_TAGFILE=docs/dox/httpd.tag #TAGFILES=../apr/docs/dox/apr.tag=/apr ../apr-util/docs/dox/apu.tag=/apr-util httpd-2.4.41/docs/docroot/0002755000000000000500000000000013523273343013644 5ustar rootsrchttpd-2.4.41/docs/docroot/index.html0000644000000000000500000000005510633315032015626 0ustar rootsrc

    It works!

    httpd-2.4.41/docs/server-status/0002755000000000000500000000000013523273343015022 5ustar rootsrchttpd-2.4.41/docs/server-status/feather.png0000644000000000000500000000476513103401117017142 0ustar rootsrc‰PNG  IHDR%@§¾ê pHYs  šœtIMEá,(I|#PtEXtCommentCreated with GIMPW oIDAThÞí™{pUÕÆk© $„€b„P ‚¢ƒZÀAgt¬Ø)ЕiU‘ò(ƒ ÅúªuŠÖÇ Újµ@°¢ / „G‚<40¡` rï9{õsï%P7àÝ3™{îÞ{öþî÷}k­½Oàµý r8° sÓÏä¾t`~— tNîë{gun°wFçä\9€þ» —&ÃW³ÿéÎ-Tå# ÛœàbFc‹;êº7¿ö›Ä|= š _MéÓ/Õ" @DÚIšþ`Ï´kjÔ¿_ž®qDu)P/.Ž!>*ˆÐóë)9éÍÇ®«}PmÚ_ÚÃø3Ð!ÞmÀaÑ8D¥¾F¼çD¾Ë&¯´]å>ç¢Ç•iI C¦T5ì«5P[ïÏ`ט.w#Ü;H`A|@)P7±»( ˆTÖ*¨ˆ6äËüÜæÎÉAËi«#U×H©|ïúÑEΗ©æSÇÅÀù‚ÅäéŸøî|Å‚s‚ùŠ9&¬ËÏI-¨õ·öeˆé4‹éÕÎÌc­ ¤™ùúƒàücà‚@öùQ}êðôî\3s}ê@­ùI7rÞú„õ{\o#B0‚‹i`1>·€¾ÎóóÓªàžË˜½êÀÞ½ÑãÖL‰§V÷ëžî©·A”V’È=…êY‰xô<#1æ&Û~NÖ‚Ï¿ª¾ÞY1UЪkoꉿ/mX•Vdzç/y.—-¦!ƒññÀgtÖ‚Ï¿Ú:¢ë ëž1S·íEÏmËYžÑëÈ¡HSç¼DÄQ{S•tõèKUv¼Ä³ûg‡—WôÝtow:¼øiê@%OYyï7ãáê43ÄãêÑ:2KÔP©*ˆÇF<®«W?Zšùüª“W„³´<#ïCnõËð½¶Hê胮$²ƒ˜¡ØÛGKuaµºW­XuÊuψ©¥mòð<€,º$+>ñÏŠ'ÃÄ£.JÌœùPßV[LZKŠXΗ‡¿Ùudž ©P‘7HTÞ¨V/–Šò "Åa˜ î"^ÒS êF‡ô\ù©;ÕÚ5޾e½Ã_#:«ú˜Ã¦˜É@sà0A%Dda2µ(梼øm€j jiƵô.^ƲŒÞà ZW%Ú°Ù‚N¨*‚3êŠb|úã‚Åÿét#)umñR–´îŽÈœ™`&1)¡Wuw˜%æÙ*çs3Àž²²o?ÕØLž7Ìàb0„$ ò3‹ßªM€Ïdz½·”}œ™GÏ¢‚Ô€z?ã&”Xº¡CÀTÃŹ­ ½%~+O`f»DÄS•FÀwª‘|7ÿ$­c€v Ð8‡î=bHã»P.ÊŠ -1ö€ÿDAfÞé§OgÒâ¶ýé¿m1¾É8Aã²)Còï)IZÚ\ò.…Ù»yÅËÔÄ!§§gõk.NJT ÌÅÓmÆlž s%&qÑSÌn«ÀaçÜ ë¶ì<ݽ¾S¾×[Ýæ ç=l¢„Òy8áDg8—ì Å¡ ^¶!ûjè´ä¼s³ TÃnw7±¶S̵1‘úÎ,ÎÇX€I5 ðÓ2zë&Ú7Àk„·FSœi¡¯g€G &Š“ø8J€G€F­ÞŠeö!¥Lx]«P Ì>Pd¼*BO÷UÜøOÝTü®«ñeö»&¼š1¸®Á aÔ Š`»ö€\,8ÌŒ0*Á‰—H {qúÆ™ûo•ïå6C0ÕˆC{XÜÌŠït¨Ã›sÌàJ` YÊ;¯_ñ{»?¼j@jAݽýU'W;´®K&LÝi*-Ú8ˆƒ ð°ä³›½óø¢ÌܰáR.Ÿï¶*¹Ìþ¤¢ùɳA²&¢ÎÊ@úÜRô)—/|wÓ°Y2÷”R í«0—°·Å£sÄmÅo½™që³O5¶Eþqß+¥Þ’X蕯Ѧ†¦¹xè'> qfÜ?¸èo¯¼–y;ƒŠß:cP'-3·Íï‹‚]š¦^I=w4hèÊ=ÁÍ¡‹@/‘Dù5+ŒXåÝ+µsaF馊_–ýÅÎЊ6õ8¦ò›ÅYrn^dÉqZ_|ß¹ùΤ—Cp‰hs2ú®¢…vjËæÍ­ôž³”´qõžÉWŒâ‘³™Ünô<1®¡cøÖ&˜ßÈ4Å~V ¼~@ÒçÆ´^ƒ4ü‡ÅìŠ1۞șù€ä=yVÀNyJx¬Ý˜Î‚,K 3r[… o—`Qk4s…˜Ý0nÛ¬¯Sñnâ”Ñ7aËŒ5Nd“‰âÏñúÑ0ôi d:hbðÚá£G:¨t%Ó2G¥æiõŽüŒ‡"iiuZNÝ/û{Õ;®o?jP%ÑÝE¥Ÿ¬Øs!°ñœƒ:¡ —Yù‡Þ“pþ=•“=´Q ·oÓŽ—c]Ûþü¼Ù'ÉÔÕY÷"H°`å¶?rޣ/bX&ØÎœvCÏk ŸŒ¦+Öoyáû“ rÚÝ«ü¿¼ýý9ZòëÎIEND®B`‚httpd-2.4.41/docs/server-status/server-status.lua0000644000000000000500000024065113103401117020344 0ustar rootsrc--[[ Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. ]] --[[ mod_lua implementation of the server-status page ]] local ssversion = "0.11" -- verion of this script local redact_ips = true -- whether to replace the last two bits of every IP with 'x.x' local warning_banner = [[

    Don't be alarmed - this page is here for a reason!

    This is an example server status page for the Apache HTTP Server. Nothing on this server is secret, no URL tokens, no sensitive passwords. Everything served from here is static data.

    ]] local show_warning = true -- whether to display the above warning/notice on the page local show_modules = false -- Whether to list loaded modules or not local show_threads = true -- whether to list thread information or not -- pre-declare some variables defined at the bottom of this script: local status_js, status_css, quokka_js -- quick and dirty JSON conversion local function quickJSON(input) if type(input) == "table" then local t = 'array' for k, v in pairs(input) do if type(k) ~= "number" then t = 'hash' break end end if t == 'hash' then local out = "" local tbl = {} for k, v in pairs(input) do local kv = ([["%s": %s]]):format(k, quickJSON(v)) table.insert(tbl, kv) end return "{" .. table.concat(tbl, ", ") .. "}" else local tbl = {} for k, v in pairs(input) do table.insert(tbl, quickJSON(v)) end return "[" .. table.concat(tbl, ", ") .. "]" end elseif type(input) == "string" then return ([["%s"]]):format(input:gsub('"', '\\"'):gsub("[\r\n\t]", " ")) elseif type(input) == "number" then return tostring(input) elseif type(input) == "boolean" then return (input and "true" or "false") else return "null" end end -- Module information callback local function modInfo(r, modname) if modname then r:puts [[ Module information ]] r:puts( ("

    Details for module %s

    \n"):format(r:escape_html(modname)) ) -- Queries the server for information about a module local mod = r.module_info(modname) if mod then for k, v in pairs(mod.commands) do -- print out all directives accepted by this module r:puts( ("%s: %s
    \n"):format(r:escape_html(k), v)) end end -- HTML tail r:puts[[ ]] end end -- Function for generating server stats function getServerState(r, verbose) local state = {} state.mpm = { type = "prefork", -- default to prefork until told otherwise threadsPerChild = 1, threaded = false, maxServers = r.mpm_query(12), activeServers = 0 } if r.mpm_query(14) == 1 then state.mpm.type = "event" -- this is event mpm elseif r.mpm_query(3) >= 1 then state.mpm.type = "worker" -- it's not event, but it's threaded, we'll assume worker mpm (could be motorz??) elseif r.mpm_query(2) == 1 then state.mpm.type = "winnt" -- it's threaded, but not worker nor event, so it's probably winnt end if state.mpm.type ~= "prefork" then state.mpm.threaded = true -- it's threaded state.mpm.threadsPerChild = r.mpm_query(6) -- get threads per child proc end state.processes = {} -- list of child procs state.connections = { -- overall connection info idle = 0, active = 0 } -- overall server stats state.server = { connections = 0, bytes = 0, built = r.server_built, localtime = os.time(), uptime = os.time() - r.started, version = r.banner, host = r.server_name, modules = nil, extended = show_threads, -- whether extended status is available or not } -- if show_modules is true, add list of modules to the JSON if show_modules then state.server.modules = {} for k, module in pairs(r:loaded_modules()) do table.insert(state.server.modules, module) end end -- Fetch process/thread data for i=0,state.mpm.maxServers-1,1 do local server = r.scoreboard_process(r, i); if server then local s = { active = false, pid = nil, bytes = 0, stime = 0, utime = 0, connections = 0, } local tstates = {} if server.pid then state.connections.idle = state.connections.idle + (server.keepalive or 0) s.connections = 0 if server.pid > 0 then state.mpm.activeServers = state.mpm.activeServers + 1 s.active = true s.pid = server.pid end for j = 0, state.mpm.threadsPerChild-1, 1 do local worker = r.scoreboard_worker(r, i, j) if worker then s.stime = s.stime + (worker.stimes or 0); s.utime = s.utime + (worker.utimes or 0); if verbose and show_threads then s.threads = s.threads or {} table.insert(s.threads, { bytes = worker.bytes_served, thread = ("0x%x"):format(worker.tid), client = redact_ips and (worker.client or "???"):gsub("[a-f0-9]+[.:]+[a-f0-9]+$", "x.x") or worker.client or "???", cost = ((worker.utimes or 0) + (worker.stimes or 0)), count = worker.access_count, vhost = worker.vhost:gsub(":%d+", ""), request = worker.request, last_used = math.floor(worker.last_used/1000000) }) end state.server.connections = state.server.connections + worker.access_count s.bytes = s.bytes + worker.bytes_served s.connections = s.connections + worker.access_count if server.pid > 0 then tstates[worker.status] = (tstates[worker.status] or 0) + 1 end end end end s.workerStates = { keepalive = (server.keepalive > 0) and server.keepalive or tstates[5] or 0, closing = tstates[8] or 0, idle = tstates[2] or 0, writing = tstates[4] or 0, reading = tstates[3] or 0, graceful = tstates[9] or 0 } table.insert(state.processes, s) state.server.bytes = state.server.bytes + s.bytes state.connections.active = state.connections.active + (tstates[8] or 0) + (tstates[4] or 0) + (tstates[3] or 0) end end return state end -- Handler function function handle(r) -- Parse GET data, if any, and set content type local GET = r:parseargs() if GET['module'] then modInfo(r, GET['module']) return apache2.OK end -- If we only need the stats feed, compact it and hand it over if GET['view'] and GET['view'] == "json" then local state = getServerState(r, GET['extended'] == 'true') r.content_type = "application/json" r:puts(quickJSON(state)) return apache2.OK end if not GET['resource'] then local state = getServerState(r, show_threads) -- Print out the HTML for the front page r.content_type = "text/html" r:puts ( ([=[ Server status for %s
    Quick Stats
    Charts
    ]=]):format( r.server_name, r.banner, r.server_name, show_warning and warning_banner or "" ) ); -- HTML tail r:puts[[ ]] else -- Resource documents (CSS, JS, PNG) if GET['resource'] == 'js' then r.content_type = "application/javascript" r:puts(quokka_js) r:puts(status_js) elseif GET['resource'] == 'css' then r.content_type = "text/css" r:puts(status_css) elseif GET['resource'] == 'feather' then r.content_type = "image/png" r:write(r:base64_decode('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')) end end return apache2.OK; end ------------------------------------ -- JavaScript and CSS definitions -- ------------------------------------ -- Set up some JavaScripts: status_js = [==[ Number.prototype.pad = function(size) { var str = String(this); while (str.length < size) { str = "0" + str; } return str; } function getAsync(theUrl, xstate, callback) { var xmlHttp = null; if (window.XMLHttpRequest) { xmlHttp = new XMLHttpRequest(); } else { xmlhttp = new ActiveXObject("Microsoft.XMLHTTP"); } xmlHttp.open("GET", theUrl, true); xmlHttp.send(null); xmlHttp.onreadystatechange = function(state) { if (xmlHttp.readyState == 4 && xmlHttp.status == 200) { if (callback) { callback(JSON.parse(xmlHttp.responseText)); } } } } var actionCache = []; var connectionCache = []; var trafficCache = []; var processes = {}; var lastBytes = 0; var lastConnections = 0; var negativeBytes = 0; // cache for proc reloads, which skews traffic var updateSpeed = 5; // How fast do charts update? var maxRecords = 24; // How many records to show per chart var cpumax = 1000000; // random cpu max(?) function refreshCharts(json, state) { if (json && json.processes) { // general server info box var gs = document.getElementById('server_breakdown'); gs.innerHTML = ""; gs.innerHTML += "Server version: " + json.server.version + "
    "; gs.innerHTML += "Server built: " + json.server.built + "
    "; gs.innerHTML += "Server MPM: " + json.mpm.type + "
    "; // Get a timestamp var now = new Date(); var ts = now.getHours().pad(2) + ":" + now.getMinutes().pad(2) + ":" + now.getSeconds().pad(2); var utime = 0; var stime = 0; // Construct state based on proc details var state = { timestamp: ts, closing: 0, idle: 0, writing: 0, reading: 0, keepalive: 0, graceful: 0 } for (var i in json.processes) { var proc = json.processes[i]; if (proc.pid) { state.closing += proc.workerStates.closing||0; state.idle += proc.workerStates.idle||0; state.writing += proc.workerStates.writing||0; state.reading += proc.workerStates.reading||0; state.keepalive += proc.workerStates.keepalive||0; state.graceful += proc.workerStates.graceful||0; utime += proc.utime; stime += proc.stime; } } // Push action state entry into action cache with timestamp // Shift if more than 10 entries in cache actionCache.push(state); if (actionCache.length > maxRecords) { actionCache.shift(); } // construct array for QuokkaLines var arr = []; for (var i in actionCache) { var el = actionCache[i]; if (json.mpm.type == 'event') { arr.push([el.timestamp, el.closing, el.idle, el.writing, el.reading, el.graceful]); } else { arr.push([el.timestamp, el.keepalive, el.closing, el.idle, el.writing, el.reading, el.graceful]); } } var states = ['Keepalive', 'Closing', 'Idle', 'Writing', 'Reading', 'Graceful'] if (json.mpm.type == 'event') { states.shift(); if (document.getElementById('mpminfo')) { document.getElementById('mpminfo').innerHTML = "(" + fn(parseInt(json.connections.idle)) + " connections in idle keepalive)"; } } // Draw action chart quokkaLines("actions_div", states, arr, { lastsum: true, hires: true, nosum: true, stack: true, curve: true, title: "Thread states" } ); // Get traffic, figure out how much it was this time (0 if just started!) var bytesThisTurn = 0; var connectionsThisTurn = 0; for (var i in json.processes) { var proc = json.processes[i]; var pid = proc.pid // if we haven't seen this proc before, ignore its bytes first time if (!processes[pid]) { processes[pid] = { bytes: proc.bytes, connections: proc.connections, } } else { bytesThisTurn += proc.bytes - processes[pid].bytes; if (pid) { x = proc.connections - processes[pid].connections; connectionsThisTurn += (x > 0) ? x : 0; } processes[pid].bytes = proc.bytes; processes[pid].connections = proc.connections; } } if (lastBytes == 0 ) { bytesThisTurn = 0; } lastBytes = 1; // Push a new element into cache, prune cache var el = { timestamp: ts, bytes: bytesThisTurn/updateSpeed }; trafficCache.push(el); if (trafficCache.length > maxRecords) { trafficCache.shift(); } // construct array for QuokkaLines arr = []; for (var i in trafficCache) { var el = trafficCache[i]; arr.push([el.timestamp, el.bytes]); } // Draw action chart quokkaLines("traffic_div", ['Traffic'], arr, { traffic: true, hires: true, nosum: true, stack: true, curve: true, title: "Traffic per second" } ); // Get connections per second // Push a new element into cache, prune cache var el = { timestamp: ts, connections: (connectionsThisTurn+1)/updateSpeed }; connectionCache.push(el); if (connectionCache.length > maxRecords) { connectionCache.shift(); } // construct array for QuokkaLines arr = []; for (var i in connectionCache) { var el = connectionCache[i]; arr.push([el.timestamp, el.connections]); } // Draw connection chart quokkaLines("connection_div", ['Connections/sec'], arr, { traffic: false, hires: true, nosum: true, stack: true, curve: true, title: "Connections per second" } ); // Thread info quokkaCircle("status_div", [ { title: 'Active', value: (json.mpm.threadsPerChild*json.mpm.activeServers)}, { title: 'Reserve', value: (json.mpm.threadsPerChild*(json.mpm.activeServers-json.mpm.maxServers))} ], { title: "Worker pool", hires: true}); // Idle vs active connections var idlecons = json.connections.idle; var activecons = json.connections.active; quokkaCircle("idle_div", [ { title: 'Idle', value: idlecons}, { title: 'Active', value: activecons}, ], { hires: true, title: "Idle vs active connections"}); // CPU info while ( (stime+utime) > cpumax ) { cpumax = cpumax * 2; } quokkaCircle("cpu_div", [ { title: 'Idle', value: (cpumax - stime - utime) / (cpumax/100)}, { title: 'System', value: stime/(cpumax/100)}, { title: 'User', value: utime/(cpumax/100)} ], { hires: true, title: "CPU usage", pct: true}); // General stats infobox var gstats = document.getElementById('general_stats'); gstats.innerHTML = ''; // wipe the box // Days since restart var u_f = Math.floor(json.server.uptime/8640.0) / 10; var u_d = Math.floor(json.server.uptime/86400); var u_h = Math.floor((json.server.uptime%86400)/3600); var u_m = Math.floor((json.server.uptime%3600)/60); var u_s = Math.floor(json.server.uptime %60); var str = u_d + " day" + (u_d != 1 ? "s, " : ", ") + u_h + " hour" + (u_h != 1 ? "s, " : ", ") + u_m + " minute" + (u_m != 1 ? "s" : ""); var ubox = document.createElement('div'); ubox.setAttribute("class", "statsbox"); ubox.innerHTML = "" + u_f + " days
    since last (re)start.
    " + str; gstats.appendChild(ubox); // Bytes transferred in total var MB = fnmb(json.server.bytes); var KB = (json.server.bytes > 0) ? fnmb(json.server.bytes/json.server.connections) : 0; var KBs = fnmb(json.server.bytes/json.server.uptime); var mbbox = document.createElement('div'); mbbox.setAttribute("class", "statsbox"); mbbox.innerHTML = "" + MB + "
    transferred in total.
    " + KBs + "/sec, " + KB + "/request"; gstats.appendChild(mbbox); // connections in total var cons = fn(json.server.connections); var cps = Math.floor(json.server.connections/json.server.uptime*100)/100; var conbox = document.createElement('div'); conbox.setAttribute("class", "statsbox"); conbox.innerHTML = "" + cons + " conns
    since server started.
    " + cps + " requests per second"; gstats.appendChild(conbox); // threads working var tpc = json.mpm.threadsPerChild; var activeThreads = fn(json.mpm.activeServers * json.mpm.threadsPerChild); var maxThreads = json.mpm.maxServers * json.mpm.threadsPerChild; var tbox = document.createElement('div'); tbox.setAttribute("class", "statsbox"); tbox.innerHTML = "" + activeThreads + " threads
    currently at work (" + json.mpm.activeServers + "x" + tpc+" threads).
    " + maxThreads + " (" + json.mpm.maxServers + "x"+tpc+") threads allowed."; gstats.appendChild(tbox); window.setTimeout(waitTwo, updateSpeed*1000); // resize pane document.getElementById('leftpane').style.height = document.getElementById('wrapper').getBoundingClientRect().height + "px"; // Do we have extended info and module lists?? if (json.server.extended) document.getElementById('threads_button').style.display = 'block'; if (json.server.modules && json.server.modules.length > 0) { var panel = document.getElementById('modules_breakdown'); var list = "
      "; for (var i in json.server.modules) { var mod = json.server.modules[i]; list += "
    • " + mod + "
    • "; } list += "
    "; panel.innerHTML = list; document.getElementById('modules_button').style.display = 'block'; } } else if (json === false) { waitTwo(); } } function refreshThreads(json, state) { var box = document.getElementById('threads_breakdown'); box.innerHTML = ""; for (var i in json.processes) { var proc = json.processes[i]; var phtml = '
    '; if (!proc.active) phtml = '
    '; phtml += "

    Process " + i + ":

    "; phtml += "PID: " + (proc.pid||"None (not active)") + "
    "; if (proc.threads && proc.active) { phtml += ""; for (var j in proc.threads) { var thread = proc.threads[j]; thread.request = (thread.request||"(Unknown)").replace(/[<>]+/g, ""); phtml += ""; } phtml += "
    Thread IDAccess countBytes servedLast UsedLast clientLast request
    "+thread.thread+""+thread.count+""+thread.bytes+""+thread.last_used+""+thread.client+""+thread.request+"
    "; } else { phtml += "

    No thread information avaialable

    "; } phtml += "
    "; box.innerHTML += phtml; } } function waitTwo() { getAsync(location.href + "?view=json&rnd=" + Math.random(), null, refreshCharts) } function showPanel(what) { var items = ['dashboard','misc','threads','modules']; for (var i in items) { var item = items[i]; var btn = document.getElementById(item+'_button'); var panel = document.getElementById(item+'_panel'); if (item == what) { btn.setAttribute("class", "btn active"); panel.style.display = 'block'; } else { btn.setAttribute("class", "btn"); panel.style.display = 'none'; } } // special constructors if (what == 'threads') { getAsync(location.href + "?view=json&extended=true&rnd=" + Math.random(), null, refreshThreads) } } function fn(num) { num = num + ""; num = num.replace(/(\d)(\d{9})$/, '$1,$2'); num = num.replace(/(\d)(\d{6})$/, '$1,$2'); num = num.replace(/(\d)(\d{3})$/, '$1,$2'); return num; } function fnmb(num) { var add = "bytes"; var dec = ""; var mul = 1; if (num > 1024) { add = "KB"; mul= 1024; } if (num > (1024*1024)) { add = "MB"; mul= 1024*1024; } if (num > (1024*1024*1024)) { add = "GB"; mul= 1024*1024*1024; } if (num > (1024*1024*1024*1024)) { add = "TB"; mul= 1024*1024*1024*1024; } num = num / mul; if (add != "bytes") { dec = "." + Math.floor( (num - Math.floor(num)) * 100 ); } return ( fn(Math.floor(num)) + dec + " " + add ); } function sort(a,b){ last_col = -1; var sort_reverse = false; var sortWay = a.getAttribute("sort_" + b); if (sortWay && sortWay == "forward") { a.setAttribute("sort_" + b, "reverse"); sort_reverse = true; } else { a.setAttribute("sort_" + b, "forward"); } var c,d,e,f,g,h,i; c=a.rows.length; if(c<1){ return; } d=a.rows[1].cells.length; e=1; var j=new Array(c); f=0; for(h=e;hn[b]) ? true : false; var lt = (m[b] parseInt(n[b], 10) ? true : false; lt = parseInt(m[b], 10) < parseInt(n[b], 10) ? true : false; } if (sort_reverse) {gt = (!gt); lt = (!lt);} if(gt){ j[i+1]=m; j[i]=n; l=true; } } else{ if(lt){ j[i+1]=m; j[i]=n; l=true; } } } if(l===false){ break; } } f=e; for(h=0;h 1024) { add = "KB"; mul= 1024; } if (num > (1024*1024)) { add = "MB"; mul= 1024*1024; } if (num > (1024*1024*1024)) { add = "GB"; mul= 1024*1024*1024; } if (num > (1024*1024*1024*1024)) { add = "TB"; mul= 1024*1024*1024*1024; } num = num / mul; if (add != "b" && num < 10) { dec = "." + Math.floor( (num - Math.floor(num)) * 100 ); } return ( Math.floor(num) + dec + " " + add ); } // Hue, Saturation and Lightness to Red, Green and Blue: function quokka_internal_hsl2rgb (h,s,l) { var min, sv, switcher, fract, vsf; h = h % 1; if (s > 1) s = 1; if (l > 1) l = 1; var v = (l <= 0.5) ? (l * (1 + s)) : (l + s - l * s); if (v === 0) return { r: 0, g: 0, b: 0 }; min = 2 * l - v; sv = (v - min) / v; var sh = (6 * h) % 6; switcher = Math.floor(sh); fract = sh - switcher; vsf = v * sv * fract; switch (switcher) { case 0: return { r: v, g: min + vsf, b: min }; case 1: return { r: v - vsf, g: v, b: min }; case 2: return { r: min, g: v, b: min + vsf }; case 3: return { r: min, g: v - vsf, b: v }; case 4: return { r: min + vsf, g: min, b: v }; case 5: return { r: v, g: min, b: v - vsf }; } return {r:0, g:0, b: 0}; } // RGB to Hex conversion function quokka_internal_rgb2hex(r, g, b) { return "#" + ((1 << 24) + (Math.floor(r) << 16) + (Math.floor(g) << 8) + Math.floor(b)).toString(16).slice(1); } // Generate color list used for charts var colors = []; var rgbs = [] var numColorRows = 6; var numColorColumns = 20; for (var x=0;x 8 ? (Math.random()) : (rnd[0]/255), y > 8 ? (0.75+(y*0.05)) : (rnd[1]/255), y > 8 ? (0.42 + (y*0.05*(x/numColorRows))) : (0.1 + rnd[2]/512)); // Light (primary) color: var hex = quokka_internal_rgb2hex(color.r*255, color.g*255, color.b*255); // Darker variant for gradients: var dhex = quokka_internal_rgb2hex(color.r*131, color.g*131, color.b*131); // Medium variant for legends: var mhex = quokka_internal_rgb2hex(color.r*200, color.g*200, color.b*200); colors.push([hex, dhex, color, mhex]); } } /* Function for drawing pie diagrams * Example usage: * quokkaCircle("canvasName", [ { title: 'ups', value: 30}, { title: 'downs', value: 70} ] ); */ function quokkaCircle(id, tags, opts) { // Get Canvas object and context var canvas = document.getElementById(id); var ctx=canvas.getContext("2d"); // Calculate the total value of the pie var total = 0; var k; for (k in tags) { tags[k].value = Math.abs(tags[k].value); total += tags[k].value; } // Draw the empty pie var begin = 0; var stop = 0; var radius = (canvas.height*0.75)/2; ctx.clearRect(0, 0, canvas.width, canvas.height); ctx.beginPath(); ctx.shadowBlur = 6; ctx.shadowOffsetX = 6; ctx.shadowOffsetY = 6; ctx.shadowColor = "#555"; ctx.lineWidth = (opts && opts.hires) ? 6 : 2; ctx.strokeStyle = "#222"; ctx.arc((canvas.width-140)/2,canvas.height/2,radius, 0, Math.PI * 2); ctx.closePath(); ctx.stroke(); ctx.fill(); ctx.shadowBlur = 0; ctx.shadowOffsetY = 0; ctx.shadowOffsetX = 0; // Draw a title if set: if (opts && opts.title) { ctx.font= (opts && opts.hires) ? "28px Sans-Serif" : "15px Sans-Serif"; ctx.fillStyle = "#000000"; ctx.textAlign = "center"; ctx.fillText(opts.title,(canvas.width-140)/2, (opts && opts.hires) ? 30:15); ctx.textAlign = "left"; } ctx.beginPath(); var posY = 50; var left = 120 + ((canvas.width-140)/2) + ((opts && opts.hires) ? 40 : 25) for (k in tags) { var val = tags[k].value; stop = stop + (2 * Math.PI * (val / total)); // Make a pizza slice ctx.beginPath(); ctx.lineCap = 'round'; ctx.arc((canvas.width-140)/2,canvas.height/2,radius,begin,stop); ctx.lineTo((canvas.width-140)/2,canvas.height/2); ctx.closePath(); ctx.lineWidth = 0; ctx.stroke(); // Add color gradient var grd=ctx.createLinearGradient(0,canvas.height*0.2,0,canvas.height); grd.addColorStop(0,colors[k % colors.length][1]); grd.addColorStop(1,colors[k % colors.length][0]); ctx.fillStyle = grd; ctx.fill(); begin = stop; // Make color legend ctx.fillRect(left, posY-((opts && opts.hires) ? 15 : 10), (opts && opts.hires) ? 14 : 7, (opts && opts.hires) ? 14 : 7); // Add legend text ctx.shadowColor = "rgba(0,0,0,0)" ctx.font= (opts && opts.hires) ? "22px Sans-Serif" : "12px Sans-Serif"; ctx.fillStyle = "#000"; ctx.fillText(tags[k].title + " (" + Math.floor(val) + (opts && opts.pct ? "%" : "") + ")",left+20,posY); posY += (opts && opts.hires) ? 28 : 14; } } /* Function for drawing line charts * Example usage: * quokkaLines("myCanvas", ['Line a', 'Line b', 'Line c'], [ [x1,a1,b1,c1], [x2,a2,b2,c2], [x3,a3,b3,c3] ], { stacked: true, curve: false, title: "Some title" } ); */ function quokkaLines(id, titles, values, options, sums) { var canvas = document.getElementById(id); var ctx=canvas.getContext("2d"); // clear the canvas first ctx.clearRect(0, 0, canvas.width, canvas.height); ctx.lineWidth = 0.25; ctx.strokeStyle = "#000000"; var lwidth = 300; var lheight = 75; wspace = (options && options.hires) ? 110 : 55; var rectwidth = canvas.width - lwidth - wspace; var stack = options ? options.stack : false; var curve = options ? options.curve : false; var title = options ? options.title : null; var spots = options ? options.points : false; var noX = options ? options.nox : false; var verts = options ? options.verts : true; if (noX) { lheight = 0; } // calc rectwidth if titles are large var nlwidth = 0 for (var k in titles) { ctx.font= (options && options.hires) ? "24px Sans-Serif" : "12px Sans-Serif"; ctx.fillStyle = "#00000"; var x = parseInt(k) if (!noX) { x = x + 1; } var sum = 0 for (var y in values) { sum += values[y][x] } var t = titles[k] + (!options.nosum ? " (" + ((sums && sums[k]) ? sums[k] : sum.toFixed(0)) + ")" : ""); var w = ctx.measureText(t).width + 48; if (w > lwidth && w > nlwidth) { nlwidth = w } if (nlwidth > 0) { rectwidth -= nlwidth - lwidth lwidth = nlwidth } } // Draw a border ctx.lineWidth = 0.5; ctx.strokeRect((wspace*0.75), 30, rectwidth, canvas.height - lheight - 40); // Draw a title if set: if (title != null) { ctx.font= (options && options.hires) ? "24px Sans-Serif" : "15px Sans-Serif"; ctx.fillStyle = "#00000"; ctx.textAlign = "center"; ctx.fillText(title,rectwidth/2, 20); } // Draw legend ctx.textAlign = "left"; var posY = 50; for (var k in titles) { var x = parseInt(k) if (!noX) { x = x + 1; } var sum = 0 for (var y in values) { sum += values[y][x] } var title = titles[k] + (!options.nosum ? (" (" + ((sums && sums[k]) ? sums[k] : sum.toFixed(0)) + ")") : ""); if (options && options.lastsum) { title = titles[k] + " (" + values[values.length-1][x].toFixed(0) + ")"; } ctx.fillStyle = colors[k % colors.length][3]; ctx.fillRect(wspace + rectwidth + 75 , posY-((options && options.hires) ? 18:9), (options && options.hires) ? 20:10, (options && options.hires) ?20:10); // Add legend text ctx.font= (options && options.hires) ? "24px Sans-Serif" : "14px Sans-Serif"; ctx.fillStyle = "#00000"; ctx.fillText(title,canvas.width - lwidth + ((options && options.hires) ? 100:60), posY); posY += (options && options.hires) ? 30:15; } // Find max and min var max = null; var min = 0; var stacked = null; for (x in values) { var s = 0; for (y in values[x]) { if (y > 0 || noX) { s += values[x][y]; if (max === null || max < values[x][y]) { max = values[x][y]; } if (min === null || min > values[x][y]) { min = values[x][y]; } } } if (stacked === null || stacked < s) { stacked = s; } } if (min == max) max++; if (stack) { min = 0; max = stacked; } // Set number of lines to draw and each step var numLines = 5; var step = (max-min) / (numLines+1); // Prettify the max value so steps aren't ugly numbers if (step %1 != 0) { step = (Math.round(step+0.5)); max = step * (numLines+1); } // Draw horizontal lines for (x = -1; x <= numLines; x++) { ctx.beginPath(); var y = 30 + (((canvas.height-40-lheight) / (numLines+1)) * (x+1)); ctx.moveTo(wspace*0.75, y); ctx.lineTo(wspace*0.75 + rectwidth, y); ctx.lineWidth = 0.25; ctx.stroke(); // Add values ctx.font= (options && options.hires) ? "20px Sans-Serif" : "12px Sans-Serif"; ctx.fillStyle = "#000000"; var val = Math.round( ((max-min) - (step*(x+1))) ); if (options && options.traffic) { val = quokka_fnmb(val); } ctx.textAlign = "left"; ctx.fillText( val,canvas.width - lwidth - 20, y+8); ctx.textAlign = "right"; ctx.fillText( val,wspace-32, y+8); ctx.closePath(); } // Draw vertical lines var sx = 1 var numLines = values.length-1; var step = (canvas.width - lwidth - wspace*0.75) / values.length; while (step < 24) { step *= 2 sx *= 2 } if (verts) { ctx.beginPath(); for (var x = 1; x < values.length; x++) { if (x % sx == 0) { var y = (wspace*0.75) + (step * (x/sx)); ctx.moveTo(y, 30); ctx.lineTo(y, canvas.height - 10 - lheight); ctx.lineWidth = 0.25; ctx.stroke(); } } ctx.closePath(); } // Some pre-calculations of steps var step = (rectwidth) / (values.length > 1 ? values.length-1:1); // Draw X values if noX isn't set: if (noX != true) { ctx.beginPath(); for (var i = 0; i < values.length; i++) { zz = 1 var x = (wspace*0.75) + ((step) * i); var y = canvas.height - lheight + 5; if (i % sx == 0) { ctx.translate(x, y); ctx.moveTo(0,0); ctx.lineTo(0,-15); ctx.stroke(); ctx.rotate(45*Math.PI/180); ctx.textAlign = "left"; var val = values[i][0]; if (val.constructor.toString().match("Date()")) { val = val.toDateString(); } ctx.fillText(val.toString(), 0, 0); ctx.rotate(-45*Math.PI/180); ctx.translate(-x,-y); } } ctx.closePath(); } // Draw each line var stacks = []; var pstacks = []; for (k in values) { if (k > 0) { stacks[k] = 0; pstacks[k] = canvas.height - 40 - lheight; }} for (k in titles) { var maxY = 0, minY = 99999; ctx.beginPath(); var color = colors[k % colors.length][0]; var f = parseInt(k) + 1; if (noX) { f = parseInt(k); } var value = values[0][f]; var step = rectwidth / numLines; var x = (wspace*0.75); var y = (canvas.height - 10 - lheight) - (((value-min) / (max-min)) * (canvas.height - 40 - lheight)); var py = y; if (stack) { stacks[0] = stacks[0] ? stacks[0] : 0 y -= stacks[0]; pstacks[0] = stacks[0]; stacks[0] += (((value-min) / (max-min)) * (canvas.height - 40 - lheight)); } // Draw line ctx.moveTo(x, y); var pvalY = y; var pvalX = x; for (var i in values) { if (i > 0) { x = (wspace*0.75) + (step*i); var f = parseInt(k) + 1; if (noX == true) { f = parseInt(k); } value = values[i][f]; y = (canvas.height - 10 - lheight) - (((value-min) / (max-min)) * (canvas.height - 40 - lheight)); if (stack) { y -= stacks[i]; pstacks[i] = stacks[i]; stacks[i] += (((value-min) / (max-min)) * (canvas.height - 40- lheight)); } if (y > maxY) maxY = y; if (y < minY) minY = y; // Draw curved lines?? /* We'll do: (x1,y1)-----(x1.5,y1) * | * (x1.5,y2)-----(x2,y2) * with a quadratic beizer thingy */ if (curve) { ctx.bezierCurveTo((pvalX + x) / 2, pvalY, (pvalX + x) / 2, y, x, y); pvalX = x; pvalY = y; } // Nope, just draw straight lines else { ctx.lineTo(x, y); } if (spots) { ctx.fillStyle = color; ctx.translate(x-2, y-2); ctx.rotate(-45*Math.PI/180); ctx.fillRect(-2,1,4,4); ctx.rotate(45*Math.PI/180); ctx.translate(-x+2, -y+2); } } } ctx.lineWidth = 4; ctx.strokeStyle = color; ctx.stroke(); if (minY == maxY) maxY++; // Draw stack area if (stack) { ctx.globalAlpha = 0.65; for (i in values) { if (i > 0) { var f = parseInt(k) + 1; if (noX == true) { f = parseInt(k); } x = (wspace*0.75) + (step*i); value = values[i][f]; y = (canvas.height - 10 - lheight) - (((value-min) / (max-min)) * (canvas.height - 40 - lheight)); y -= stacks[i]; } } var pvalY = y; var pvalX = x; if (y > maxY) maxY = y; if (y < minY) minY = y; for (i in values) { var l = values.length - i - 1; x = (wspace*0.75) + (step*l); y = canvas.height - 10 - lheight - pstacks[l]; if (y > maxY) maxY = y; if (y < minY) minY = y; if (curve) { ctx.bezierCurveTo((pvalX + x) / 2, pvalY, (pvalX + x) / 2, y, x, y); pvalX = x; pvalY = y; } else { ctx.lineTo(x, y); } } ctx.lineTo((wspace*0.75), py - pstacks[0]); ctx.lineWidth = 0; var grad = ctx.createLinearGradient(0, minY, 0, maxY); grad.addColorStop(0.25, colors[k % colors.length][0]) grad.addColorStop(1, colors[k % colors.length][1]) ctx.strokeStyle = colors[k % colors.length][0]; ctx.fillStyle = grad; ctx.fill(); ctx.fillStyle = "#000" ctx.strokeStyle = "#000" ctx.globalAlpha = 1; } ctx.closePath(); } // draw feather base_image = new Image(); base_image.src = 'data:image/png;base64,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'; base_image.onload = function(){ ctx.globalAlpha = 0.15 ctx.drawImage(base_image, (canvas.width/2) - 64 - (lwidth/2), (canvas.height/2) - 128); ctx.globalAlpha = 1 } } /* Function for drawing line charts * Example usage: * quokkaLines("myCanvas", ['Line a', 'Line b', 'Line c'], [ [x1,a1,b1,c1], [x2,a2,b2,c2], [x3,a3,b3,c3] ], { stacked: true, curve: false, title: "Some title" } ); */ function quokkaBars(id, titles, values, options) { var canvas = document.getElementById(id); var ctx=canvas.getContext("2d"); // clear the canvas first ctx.clearRect(0, 0, canvas.width, canvas.height); var lwidth = 150; var lheight = 75; var stack = options ? options.stack : false; var astack = options ? options.astack : false; var curve = options ? options.curve : false; var title = options ? options.title : null; var noX = options ? options.nox : false; var verts = options ? options.verts : true; if (noX) { lheight = 0; } // Draw a border ctx.lineWidth = 0.5; ctx.strokeRect(25, 30, canvas.width - lwidth - 40, canvas.height - lheight - 40); // Draw a title if set: if (title != null) { ctx.font="15px Arial"; ctx.fillStyle = "#000"; ctx.textAlign = "center"; ctx.fillText(title,(canvas.width-lwidth)/2, 15); } // Draw legend ctx.textAlign = "left"; var posY = 50; for (var k in titles) { var x = parseInt(k) if (!noX) { x = x + 1; } var title = titles[k]; if (title && title.length > 0) { ctx.fillStyle = colors[k % colors.length][0]; ctx.fillRect(canvas.width - lwidth + 20, posY-10, 10, 10); // Add legend text ctx.font="12px Arial"; ctx.fillStyle = "#000"; ctx.fillText(title,canvas.width - lwidth + 40, posY); posY += 15; } } // Find max and min var max = null; var min = 0; var stacked = null; for (x in values) { var s = 0; for (y in values[x]) { if (y > 0 || noX) { s += values[x][y]; if (max == null || max < values[x][y]) { max = values[x][y]; } if (min == null || min > values[x][y]) { min = values[x][y]; } } } if (stacked == null || stacked < s) { stacked = s; } } if (min == max) { max++; } if (stack) { min = 0; max = stacked; } // Set number of lines to draw and each step var numLines = 5; var step = (max-min) / (numLines+1); // Prettify the max value so steps aren't ugly numbers if (step %1 != 0) { step = (Math.round(step+0.5)); max = step * (numLines+1); } // Draw horizontal lines for (x = numLines; x >= 0; x--) { var y = 30 + (((canvas.height-40-lheight) / (numLines+1)) * (x+1)); ctx.moveTo(25, y); ctx.lineTo(canvas.width - lwidth - 15, y); ctx.lineWidth = 0.25; ctx.stroke(); // Add values ctx.font="10px Arial"; ctx.fillStyle = "#000"; ctx.textAlign = "right"; ctx.fillText( Math.round( ((max-min) - (step*(x+1))) * 100 ) / 100,canvas.width - lwidth + 12, y-4); ctx.fillText( Math.round( ((max-min) - (step*(x+1))) * 100 ) / 100,20, y-4); } // Draw vertical lines var sx = 1 var numLines = values.length-1; var step = (canvas.width - lwidth - 40) / values.length; while (step < 24) { step *= 2 sx *= 2 } if (verts) { ctx.beginPath(); for (var x = 1; x < values.length; x++) { if (x % sx == 0) { var y = 35 + (step * (x/sx)); ctx.moveTo(y, 30); ctx.lineTo(y, canvas.height - 10 - lheight); ctx.lineWidth = 0.25; ctx.stroke(); } } } // Some pre-calculations of steps var step = (canvas.width - lwidth - 48) / values.length; var smallstep = (step / titles.length) - 2; // Draw X values if noX isn't set: if (noX != true) { ctx.beginPath(); for (var i = 0; i < values.length; i++) { smallstep = (step / (values[i].length-1)) - 2; zz = 1 var x = 35 + ((step) * i); var y = canvas.height - lheight + 5; if (i % sx == 0) { ctx.translate(x, y); ctx.moveTo(0,0); ctx.lineTo(0,-15); ctx.stroke(); ctx.rotate(45*Math.PI/180); ctx.textAlign = "left"; var val = values[i][0]; if (val.constructor.toString().match("Date()")) { val = val.toDateString(); } ctx.fillText(val.toString(), 0, 0); ctx.rotate(-45*Math.PI/180); ctx.translate(-x,-y); } } } // Draw each line var stacks = []; var pstacks = []; for (k in values) { smallstep = (step / (values[k].length)) - 2; stacks[k] = 0; pstacks[k] = canvas.height - 40 - lheight; var beginX = 0; for (i in values[k]) { if (i > 0 || noX) { var z = parseInt(i); var zz = z; if (!noX) { z = parseInt(i) + 1; zz = z - 2; if (z > values[k].length) { break; } } var value = values[k][i]; var title = titles[i]; var color = colors[zz % colors.length][1]; var fcolor = colors[zz % colors.length][2]; if (values[k][2] && values[k][2].toString().match(/^#.+$/)) { color = values[k][2] fcolor = values[k][2] smallstep = (step / (values[k].length-2)) - 2; } var x = ((step) * k) + ((smallstep+2) * zz) + 5; var y = canvas.height - 10 - lheight; var mdiff = (max-min); mdiff = (mdiff == 0) ? 1 : mdiff; var height = ((canvas.height - 40 - lheight) / (mdiff)) * value * -1; var width = smallstep - 2; if (width <= 1) { width = 1 } if (stack) { width = step - 10; y -= stacks[k]; stacks[k] -= height; x = (step * k) + 4; if (astack) { y = canvas.height - 10 - lheight; } } // Draw bar ctx.beginPath(); ctx.lineWidth = 2; ctx.strokeStyle = color; ctx.strokeRect(27 + x, y, width, height); var alpha = 0.75 if (fcolor.r) { ctx.fillStyle = 'rgba('+ [parseInt(fcolor.r*255),parseInt(fcolor.g*255),parseInt(fcolor.b*255),alpha].join(",") + ')'; } else { ctx.fillStyle = fcolor; } ctx.fillRect(27 + x, y, width, height); } } } } ]==] status_css = [[ html { font-size: 14px; position: relative; background: #272B30; } body { background-color: #272B30; color: #000; margin: 0 auto; min-height: 100%; font-family: Arial, Helvetica, sans-serif; font-weight: normal; } .navbarLeft { background: linear-gradient(to bottom, #F8A900 0%,#D88900 100%); width: 200px; height: 30px; padding-top: 2px; font-size: 1.35rem; color: #FFF; border-bottom: 2px solid #000; float: left; text-align: center; } .navbarRight { background: linear-gradient(to bottom, #EFEFEF 0%,#EEE 100%); width: calc(100% - 240px); height: 28px; color: #333; border-bottom: 2px solid #000; float: left; font-size: 1.3rem; padding-top: 4px; text-align: left; padding-left: 40px; } .wrapper { width: 100%; float: left; background: #33363F; min-height: calc(100% - 80px); position: relative; } .serverinfo { float: left; width: 200px; height: calc(100% - 34px); background: #293D4C; } .skey { background: rgba(30,30,30,0.3); color: #C6E7FF; font-weight: bold; padding: 2px; } .sval { padding: 2px; background: rgba(30,30,30,0.3); color: #FFF; font-size: 0.8rem; border-bottom: 1px solid rgba(200,200,200,0.2); } .charts { padding: 0px; width: calc(100% - 220px); max-width: 1000px; min-height: 100%; margin: 0px auto; position: relative; float: left; margin-left: 20px; } pre, code { font-family: "Courier New", Courier, monospace; } strong { font-weight: bold; } q, em, var { font-style: italic; } /* h1 */ /* ====================== */ h1 { padding: 0.2em; margin: 0; border: 1px solid #405871; background-color: inherit; color: #036; text-decoration: none; font-size: 22px; font-weight: bold; } /* h2 */ /* ====================== */ h2 { padding: 0.2em 0 0.2em 0.7em; margin: 0 0 0.5em 0; text-decoration: none; font-size: 18px; font-weight: bold; text-align: center; } #modules { margin-top:20px; display:none; width:400px; } .servers { width: 1244px; background: #EEE; } tr:nth-child(odd) { background: #F6F6F6; } tr:nth-child(even) { background: #EBEBEB; } td { padding: 2px; } table { border: 1px solid #333; padding: 0px; margin: 5px; min-width: 360px; background: #999; font-size: 0.8rem; } canvas { background: #FFF; margin: 3px; text-align: center; padding: 2px; border-radius: 10px; border: 1px solid #999; } .canvas_wide { position: relative; width: 65%; } .canvas_narrow { position: relative; width: 27%; } a { color: #FFA; } .statsbox { border-radius: 3px; background: #3C3E47; min-width: 150px; height: 60px; float: left; margin: 15px; padding: 10px; } .btn { background: linear-gradient(to bottom, #72ca72 0%,#55bf55 100%); border-radius: 5px; color: #FFF; text-decoration: none; padding-top: 6px; padding-bottom: 6px; padding-left: 3px; padding-right: 3px; font-weight: bold; text-shadow: 1px 1px rgba(0,0,0,0.4); margin: 12px; float: left; clear: none; } .infobox_wrapper { float: left; min-width: 200px; margin: 10px; } .infobox_title { border-top-left-radius: 4px; border-top-right-radius: 4px; background: #FAB227; color: #FFF; border: 2px solid #FAB227; border-bottom: none; font-weight: bold; text-align: center; width: 100%; } .infobox { background: #222222; border: 2px solid #FAB227; border-top: none; color: #EFEFEF; border-bottom-left-radius: 4px; border-bottom-right-radius: 4px; float: left; width: 100%; } .serverinfo ul { margin: 0px; padding: 0px; margin-top: 20px; list-style: none; } .serverinfo ul li .btn { width: calc(100% - 8px); margin: 0px; border: 0px; border-radius: 0px; padding: 0px; padding-top: 8px; padding-left: 8px; height: 24px; background: rgba(0,0,0,0.2); border-bottom: 1px solid rgba(100,100,100,0.3); } .serverinfo ul li:nth-child(1) { border-top: 1px solid rgba(100,100,100,0.3); } .serverinfo ul li .btn.active { background: rgba(30,30,50,0.2); border-left: 4px solid #27FAB2; padding-left: 4px; color: #FFE; } .serverinfo ul li .btn:hover { background: rgba(50,50,50,0.15); border-left: 4px solid #FAB227; padding-left: 4px; color: #FFE; } ]]httpd-2.4.41/docs/server-status/README.md0000644000000000000500000000304313103401117016261 0ustar rootsrcserver-status ============= `mod_lua` version of the Apache httpd's mod_status using dynamic charts ## What does it do? ## This script is an extended version of the known mod_status statistics page for httpd. It uses the simple Quokka Chart API to visualize many of the elements that are sometimes hard to properly diagnose using plain text information. Take a look at https://www.apache.org/server-status to see how it works. ## Requirements ## * Apache httpd 2.4.6 or higher * mod_lua (with either Lua 5.1, 5.2 or LuaJIT) * mod_status loaded (for enabling traffic statistics) ## Installing ## First, install mod_lua (you can enable this during configure time with --enable-lua) ### Installing as a handler: To install it as a handler, add the following to your httpd.conf in the appropriate VirtualHost: LuaMapHandler ^/server-status$ /path/to/server-status.lua ### Installing as a web app: To install as a plain web-app, enable .lua scripts to be handled by mod_lua, by adding the following to your appropriate VirtualHost configuration: AddHandler lua-script .lua Then just put the `.lua` script somewhere in your document root and visit the page. ## Configuring There are a few options inside the Lua script that can be set to `true` or `false`: - `show_warning`: Whether or not to show a notice that this page is there on purpose. - `redact_ips`: Whether or not to replace the last few bits of every IP with 'x.x' - `show_modules`: Whether to show the list of loaded modules or not - `show_threads`: Whether to show thread details or not. httpd-2.4.41/docs/error/0002755000000000000500000000000013523273343013324 5ustar rootsrchttpd-2.4.41/docs/error/HTTP_REQUEST_URI_TOO_LARGE.html.var0000644000000000000500000002123213317763731021146 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Délka požadovaného URL pÅ™esahuje kapacitní limit tohoto serveru. Požadavek nemůže být zpracován. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Der bei der Anfrage übermittelte URI überschreitet die maximale Länge. Die Anfrage kann nicht ausgeführt werden. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- The length of the requested URL exceeds the capacity limit for this server. The request cannot be processed. ----------en-- Content-language: es Content-type: text/html Body:----------es-- La longitud de la URL solicitada excede el límite de capacidad para este servidor. No se puede procesar la solicitud. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- La longueur de l'URL demandée excède la limite de capacitè pour ce serveur. Nous ne pouvons donner suite à votre requête. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Tá faid an URL iarraithe breis ar an teorainn cumas don freastalaí seo. Ní féidir an iarratas a phróiseáil. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- La lunghezza dell'indirizzo (URL) trasmesso supera il limite massimo imposto da questo server. La richiesta non può essere soddisfatta. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- リクエスト㮠URL ã®é•·ã•ãŒã€æ‰±ãˆã‚‹é•·ã•ã‚’è¶…ãˆã¦ã„ã¾ã™ã€‚ リクエストã®å‡¦ç†ã‚’ç¶šã‘られã¾ã›ã‚“。 ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- 요청한 URLì´ ë„ˆë¬´ 길어서 ì´ ì„œë²„ê°€ 처리할 수 없습니다. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- De lengte van de aangeboden URL overschreidt het maximum voor deze server. De vraag kan niet verwerkt worden. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- Lengden pÃ¥ adressen som etterspurtes overskrider kapasitetsgrensen for denne serveren. Forespørselen kan ikke prosesseres. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Długość żądanego URL-a przekracza limit ustanowiony dla tego serwera. Żądanie nie może zostać zrealizowane. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- O tamanho do endereço (URL) excede a capacidade limite desse servidor. A requisição não pode ser processada. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- O tamanho do URL pedido excede o limite da capacidade deste servidor. O pedido não pode ser processado. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- Lungimea URL-ului cerut depaseste limita capacitatii pentru acest server. Cererea nu poate fi procesata. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- Длина запрашиваемого URL превышает макÑимально допуÑтимую Ñервером. Ð—Ð°Ð¿Ñ€Ð¾Ñ Ð½Ðµ может быть обработан. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- Дужина захтеваног УРЛ-а премашује ограничења могућноÑти овог Ñервера. Захтев не може бити обрађен. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- Längden på adressen som efterfrågas överskrider kapacitetsgränsen för denna server. Förfrågan kan inte verkställas. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- Talep edilen URI'nin uzunluÄŸu, sunucunun sınırlarını aÅŸtığından istek yerine getirilemiyor. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- 请求 URL 的长度超出了æœåŠ¡å™¨çš„é•¿åº¦é™åˆ¶ã€‚该请求无法处ç†ã€‚ ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 請求 URL 的長度超出了伺æœå™¨çš„長度é™åˆ¶ã€‚該請求無法處ç†ã€‚ ----------zh-tw-- httpd-2.4.41/docs/error/HTTP_REQUEST_ENTITY_TOO_LARGE.html.var0000644000000000000500000002272113317763731021527 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Metoda nedovoluje pÅ™enos dat nebo objem dat pÅ™esahuje kapacitní limit. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Die bei der Anfrage übermittelten Daten sind für die -Methode nicht erlaubt oder die Datenmenge hat das Maximum überschritten. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- The method does not allow the data transmitted, or the data volume exceeds the capacity limit. ----------en-- Content-language: es Content-type: text/html Body:----------es-- El método no permite transmitir la información, o el volumen de la información excede los límites de capacidad del mismo. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- La méthode n'autorise pas le transfert de ces données ou bien le volume des données excède la limite de capacité. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Ní ligeann an modh an tarchur sonraíocht tríd, nó tá an méid sonraíocht breis ar an teoireann cumas. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- Il metodo non consente di trasferire dati, oppure la quantità di dati richiesti è eccessiva. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- メソッドãŒãƒ‡ãƒ¼ã‚¿ã®é€ä¿¡ã‚’許å¯ã—ã¦ã„ãªã„ã‹ã€ データé‡ãŒè¨±å®¹é‡ã‚’è¶…ãˆã¦ã„ã¾ã™ã€‚ ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- ë°©ì‹ì˜ 요청으로는 ë‚´ìš©ì„ ë³´ë‚¼ 수 없거나, ë˜ëŠ” 보내온 ë‚´ìš©ì´ ê·¸ ë°©ì‹ì—서 허용하는 최대 길ì´ë¥¼ 넘었습니다. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- Het type methode laat niet toe data te versturen of het datavolume is groter dan maximaal toegelaten. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- metoden tillater ikke de sendte data eller sÃ¥ overskrider datamengenden kapasitetsbegrensningen. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Metoda nie zezwala na typ przesyłanych danych lub rozmiar danych przekracza ustalony limit. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- O método não permite a transmissão dos dados, ou o volume de dados excede a capacidade limite. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- O método não permite todos os dados que foram transmitidos, ou o volume de dados excede o limite da capacidade. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- Metoda nu permite transmiterea datelor, sau volumul de date depaseste limita capacitatii. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- Тип передаваеиых данных запрещён методом , или размера тела запроÑа Ñлишком велик. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- метод не дозвољава Ð¿Ñ€ÐµÐ½Ð¾Ñ Ð¾Ð²Ð¸Ñ… података, или количина података премашује ограничења могућноÑти. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- metoden tillåter inte den skickade datan eller så överskrider datavolymen kapacitetsnivån. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- yöntemi ya veri aktarımına izin vermiyor ya da veri hacmi iÅŸlenemeyecek kadar büyük. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- 方法ä¸å…许传输数æ®ï¼Œæˆ–æ•°æ®é‡è¶…过容é‡é™åˆ¶ã€‚ ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 方法ä¸å…許傳輸資料,或資料é‡è¶…éŽå®¹é‡é™åˆ¶ã€‚ ----------zh-tw-- httpd-2.4.41/docs/error/HTTP_SERVICE_UNAVAILABLE.html.var0000644000000000000500000002315313317763731020553 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Server doÄasnÄ› nemůže zpracovat Váš požadavek kvůli údržbÄ› nebo kapacitním problémům. Zkuste to, prosím, pozdÄ›ji. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Der Server ist derzeit nicht in der Lage die Anfrage zu bearbeiten. Entweder ist der Server derzeit überlastet oder wegen Wartungsarbeiten nicht verfügbar. Bitte versuchen Sie es später wieder. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later. ----------en-- Content-language: es Content-type: text/html Body:----------es-- El servidor no puede procesar su solicitud en este momento debido a tareas de mantenimiento o a problemas de capacidad. Por favor, inténtelo de nuevo más tarde. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- En raison de travaux de maintenance ou de problèmes de capacité le serveur n'est pas en mesure de répondre à votre requête pour l'instant. Veuillez réessayer plus tard. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Níl an freastalaí seo in ann do chuid iarratais a líonadh ag an am seo, toisc cóthábháil nó fhaidhbeanna cumas. Déan iarracht eile níos déanaí, le do thoil. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- Il server in questo momento non è in grado di soddisfare la richiesta per motivi di manutenzione o di sovraccarico del sistema. Per favore, riprova più tardi. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- メンテナンスã§åœæ­¢ä¸­ã‹ã€ã‚µãƒ¼ãƒã®å‡¦ç†èƒ½åŠ›ã®å•題ã®ãŸã‚〠ç¾åœ¨ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¿œã˜ã‚‹ã“ã¨ãŒã§ãã¾ã›ã‚“。 後ã»ã©å†åº¦ãŠè©¦ã—下ã•ã„。 ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- 관리 작업ì´ë‚˜ 용량 문제로 서버가 잠시ë™ì•ˆ ìš”ì²­ì„ ì²˜ë¦¬í•  수 없습니다. ë‚˜ì¤‘ì— ë‹¤ì‹œ 시ë„해주시기 ë°”ëžë‹ˆë‹¤. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- De server kan tijdelijk uw vraag niet verwerken door onderhoud of problemen met de capaciteit van de server. Gelieve later nog eens opnieuw te proberen. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- Serveren er midlertidig ikke i stand til Ã¥ utføre din forespørsel. Vennligst prøv igjen senere. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Serwer nie może zrealizować twojego żądania ze względu na konserwację lub zbyt duże obciążenie. Prosimy spróbować później. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- O servidor está temporariamente fora de serviço para manutanção ou devido a problemas de capacidade. Por favor tente acessar mais tarde. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- O servidor está temporáriamente incapaz de servir o seu pedido devido a uma interrupção para manutenção ou problemas de capacidade. Por favor tente de novo mais tarde. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- Serverul nu poate, temporar, sa raspunda cererii dumneavoastra datorita intretinerii acestuia sau a unor probleme de capacitate. Va rugam incercati mai tarziu. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- Сервер временно не имеет возможноÑти обработать Ваш Ð·Ð°Ð¿Ñ€Ð¾Ñ Ð¿Ð¾ техничеÑким причинам. ПожалуйÑта, повторите позже. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- Сервер тренутно није у могућноÑти да уÑлужи ваш захтев пошто је затворен због одржавања или има недовољан капацитет. Молимо покушајте поново каÑније. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- Servern är för tillfället oförmögen att utföra din förfrågan på grund av underhåll eller kapacitetsbegränsningar. Vänligen försök igen senare. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- Sunucu, bakım gerektiren çeÅŸitli sorunlardan ötürü, bir süreliÄŸine taleplerinize yanıt veremiyor. Lütfen daha sonra tekrar deneyin. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- 由于æœåŠ¡å™¨ç»´æŠ¤æˆ–è´Ÿè½½é—®é¢˜ï¼ŒæœåŠ¡å™¨æš‚æ—¶æ— æ³•å¤„ç†æ‚¨çš„请求。请ç¨åŽé‡è¯•。 ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 由於伺æœå™¨ç¶­è­·æˆ–負載å•題,伺æœå™¨æš«æ™‚ç„¡æ³•è™•ç†æ‚¨çš„請求。請ç¨å¾Œé‡è©¦ã€‚ ----------zh-tw-- httpd-2.4.41/docs/error/HTTP_METHOD_NOT_ALLOWED.html.var0000644000000000000500000002026413317763731020517 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Metoda není pro požadované URL povolena. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Die -Methode ist für den angeforderten URL nicht erlaubt. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- The method is not allowed for the requested URL. ----------en-- Content-language: es Content-type: text/html Body:----------es-- No se permite el método para la URL solicitada. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- La méthode n'est pas utilisable pour l'URL demandée. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Níl cead an modh a úasáid leis an URL iarraithe. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- Il metodo non è consentito per l'URL richiesto. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- メソッドã¯ã€è¦æ±‚ã•れ㟠URL ã«å¯¾ã—ã¦ã¯è¨±å¯ã•れã¦ã„ã¾ã›ã‚“。 ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- ë°©ì‹ì€ 요청한 URLì— ì‚¬ìš©í•  수 없습니다. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- Het type methode is niet toegelaten voor de gevraagde URL. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- metoden er ikke tillatt for den forespurte adressen. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Metoda jest niedozwolona dla podanego URL-a. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- O método não é permitido para a URL requisitada. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- O método não é permitido para o URL pedido. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- Metoda nu este permisa pentru URL-ul cerut. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- Метод Ð½ÐµÐ»ÑŒÐ·Ñ Ð¿Ñ€Ð¸Ð¼ÐµÐ½Ð¸Ñ‚ÑŒ к запрашиваемому реÑурÑу. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- метод није дозвољен за захтевани УРЛ. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- metoden är inte tillåten för den förfrågade adressen. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- yöntemi istediÄŸiniz URL için kullanılamaz. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- 在请求的 URL 上ä¸å…许使用 方法。 ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 在請求的 URL 上ä¸å…許使用 方法。 ----------zh-tw-- httpd-2.4.41/docs/error/include/0002755000000000000500000000000013523273343014747 5ustar rootsrchttpd-2.4.41/docs/error/include/top.html0000644000000000000500000000147711644657163016456 0ustar rootsrc " xml:lang=""> <!--#echo encoding="none" var="TITLE" --> " />

    httpd-2.4.41/docs/error/include/bottom.html0000644000000000000500000000042110653711064017132 0ustar rootsrc

    Error


    httpd-2.4.41/docs/error/include/spacer.html0000644000000000000500000000001110147723030017070 0ustar rootsrc

    httpd-2.4.41/docs/error/HTTP_BAD_REQUEST.html.var0000644000000000000500000002016513317763731017446 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Váš prohlížeÄ (nebo proxy server) vyslal požadavek, kterému tento server nerozumÄ›l. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Ihr Browser (oder Proxy) hat eine ungültige Anfrage gesendet, die vom Server nicht beantwortet werden kann. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- Your browser (or proxy) sent a request that this server could not understand. ----------en-- Content-language: es Content-type: text/html Body:----------es-- Su navegador (o 'proxy') ha enviado una petición que el servidor no ha podido entender. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- Votre navigateur (ou votre proxy) a envoyé une demande que ce serveur n'a pas comprise. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Seol do chuid brabhsálaí (nó seachfhreastalaí) freagairt nárbh fhéidir leis an fhreastalaí seo a thuisceant. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- Il tuo browser (o il proxy) ha inviato a questo server una richiesta incomprensibile. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- ãŠä½¿ã„ã®ãƒ–ラウザ (ã¾ãŸã¯ãƒ—ロクシ) ãŒã€ã‚µãƒ¼ãƒã®ç†è§£ã§ããªã„リクエストをé€ä¿¡ã—ã¾ã—ãŸã€‚ ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- 브ë¼ìš°ì € ë˜ëŠ” 프ë¡ì‹œê°€ ì´ ì„œë²„ê°€ 처리할 수 없는 ìž˜ëª»ëœ ìš”ì²­ì„ ë³´ëƒˆìŠµë‹ˆë‹¤. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- Uw browser (of proxy) stuurde een vraag die deze server niet kon begrijpen. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- Din nettleser eller proxy sendte en forespørsel som denne serveren ikke kunne forstÃ¥. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Twoja przeglądarka (lub serwer pośredniczący) wysłał żądanie, którego ten serwer nie potrafi obsłużyć. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- Seu "browser" (ou o servidor proxy) enviou uma requisição inválida ao servidor. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- O seu browser ou proxy enviou um pedido que este servidor não compreendeu. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- Browserul (sau proxy-ul) dumneavoastra a trimis serverului o cerere ce nu poate fi procesata. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- ЗапроÑ, поÑланный Вашим браузером (или прокÑи-Ñервером), Ñодержит ошибку и не может быть обработан. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- Ваш читач (или поÑреднички Ñервер) поÑлао је захтев који овај Ñервер није могао да разуме. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- Din webbläsare eller proxy skickade en förfrågan som denna server inte kunde förstå. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- Tarayıcınız (veya vekil sunucunuz) bu sunucunun anlayamadığı bir istekte bulundu. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- 您的æµè§ˆå™¨ï¼ˆæˆ–代ç†ï¼‰å‘é€äº†ä¸€ä¸ªæœåŠ¡å™¨æ— æ³•è§£æžçš„请求。 ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 您的ç€è¦½å™¨ï¼ˆæˆ–代ç†ï¼‰ç™¼é€äº†ä¸€å€‹ä¼ºæœå™¨ç„¡æ³•è§£æžçš„請求。 ----------zh-tw-- httpd-2.4.41/docs/error/HTTP_UNSUPPORTED_MEDIA_TYPE.html.var0000644000000000000500000001723113317763731021240 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Server nepodporuje typ prostÅ™edku (media) pÅ™eneseného v požadavku. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Das bei der Anfrage übermittelte Format (Media Type) wird vom Server nicht unterstützt. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- The server does not support the media type transmitted in the request. ----------en-- Content-language: es Content-type: text/html Body:----------es-- El servidor no soporta el tipo de medio transmitido en la solicitud. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- Le serveur ne supporte pas le type de média utilisé dans votre requête. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Ní tachaíonn an fhreastalaí an cineáil meán a sheoladh san iarratais. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- Il server non è in grado di gestire il tipo del formato dei dati trasmesso nella richiesta. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§æŒ‡å®šã•れãŸãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã¯ã‚µãƒãƒ¼ãƒˆã•れã¦ã„ã¾ã›ã‚“。 ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- 요청으로 보내온 미디어 형ì‹ì„ ì´ ì„œë²„ê°€ ì§€ì›í•˜ì§€ 않습니다. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- De server ondersteunt het gevraagde formaat ( media type ) niet. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- Serveren støtter ikke den mediatypen som ble forespurt. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Serwer nie zna typu danych przesłanych w żądaniu. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- O servidor não suporta o tipo de mídia transmitida nesta requisição. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- O servidor não suporta o media type transmitido no pedido. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- Serverul nu suporta tipul de date trimise in cerere. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- Сервер не поддерживает работу Ñ ÑƒÐºÐ°Ð·Ð°Ð½Ð½Ñ‹Ð¼ типом данных. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- Сервер не подржава врÑту медија пренеÑену у захтеву. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- Servern stödjer inte den mediatyp som skickats i förfrågan. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- Sunucu, istekte belirtilen ortam türünü desteklemiyor. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- æœåС噍䏿”¯æŒè¯·æ±‚中传输的媒体类型。 ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 伺æœå™¨ä¸æ”¯æŒè«‹æ±‚中傳輸的媒體型å¼ã€‚ ----------zh-tw-- httpd-2.4.41/docs/error/README0000644000000000000500000000433313317763731014213 0ustar rootsrc Multi Language Custom Error Documents ------------------------------------- The 'error' directory contains HTTP error messages in multiple languages. If the preferred language of a client is available it is selected automatically via the MultiViews feature. This feature is enabled by default via the Options, Language and ErrorDocument directives. You may configure the design and markup of the documents by modifying the HTML files in the directory 'error/include'. Supported Languages: +-----------------------+------------------------------------------+ | Language | Contributed by | +-----------------------+------------------------------------------+ | Brazilian (pt-br) | Ricardo Leite | | Chinese (zh-cn/zh-tw) | CodeingBoy & popcorner | | Czech (cs) | Marcel Kolaja | | Dutch (nl) | Peter Van Biesen | | English (en) | Lars Eilebrecht | | French (fr) | Cecile de Crecy | | German (de) | Lars Eilebrecht | | Italian (it) | Luigi Rosa | | Japanese (ja) | TAKAHASHI Makoto | | Korean (ko) | Jaeho Shin | | Norwegian BokmÃ¥l (nb) | Tom Fredrik Klaussen | | Polish (pl) | Tomasz Kepczynski | | Romanian (ro) | Andrei Besleaga | | Russian (ru) | Alexander Gaganashvili | | Serbian (sr) | Nikola Smolenski | | Spanish (es) | Karla Quintero | | Swedish (sv) | Thomas Sjögren | | Turkish (tr) | Emre Sokullu & Nilgün Belma Bugüner | | Irish (ga) | Noirin Shirley | +-----------------------+------------------------------------------+ (Please see http://httpd.apache.org/docs-project/ if you would like to contribute the pages in an additional language.) httpd-2.4.41/docs/error/HTTP_LENGTH_REQUIRED.html.var0000644000000000000500000002231713317763731020132 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Požadavek metodou vyžaduje korektní hlaviÄku Content-Length. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Die Anfrage kann nicht beantwortet werden. Bei Verwendung der -Methode muß ein korrekter Content-Length-Header angegeben werden. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- A request with the method requires a valid Content-Length header. ----------en-- Content-language: es Content-type: text/html Body:----------es-- Una petición con el método requiere que el encabezado Content-Length sea válido. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- Une requête utilisant la méthode nécessite un en-tête Content-Length (indiquant la longueur) valable. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Is gá go mbhéadh ceanntáisc Content-Length bhailí do iarratais faoin modh . ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- Una richiesta con il metodo richiede che venga specificato un header Content-Length valido. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- メソッドã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§ã¯ã€ æ­£ã—ã„ Content-Length ヘッダãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- ë°©ì‹ì„ 쓰는 ìš”ì²­ì€ ì˜¬ë°”ë¥¸ Content-Length í—¤ë”ë„ í•¨ê»˜ 보내야만 합니다. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- Een vraag met het type methode heeft een correcte Content-Length lijn nodig. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- En forespørsel med metoden krever en korrekt Content-Length header. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Żądanie wymaga poprawnego nagłówka Content-Length. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- Uma requisição do método requer um cabeçalho Content-Length válido. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- Um pedido com o método necessita de um cabeçalho Content-Length válido. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- O cerere cu metoda necesita un header Content-Length valid. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- Ð—Ð°Ð¿Ñ€Ð¾Ñ Ñ Ð¿Ð¾Ð¼Ð¾Ñ‰ÑŒÑŽ метода должен иметь правильное значение длины в поле Content-Length. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- Захтев Ñа методом мора имати иÑправно Content-Length (дужина Ñадржаја) заглавље. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- En förfrågan med metoden kräver ett korrekt Content-Length huvud. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- yöntemini kullanan bir istek geçerli bir Content-Length (içerik uzunluÄŸu) baÅŸlığı gerektirir. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- 对 方法的请求必须带有有效的 Content-Length 头字段。 ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- å° æ–¹æ³•çš„è«‹æ±‚å¿…é ˆå¸¶æœ‰æœ‰æ•ˆçš„ Content-Length 頭欄ä½ã€‚ ----------zh-tw-- httpd-2.4.41/docs/error/HTTP_NOT_IMPLEMENTED.html.var0000644000000000000500000001726513317763731020142 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Server nepodporuje akci požadovanou prohlížeÄem. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Die vom Browser angeforderte Aktion wird vom Server nicht unterstützt. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- The server does not support the action requested by the browser. ----------en-- Content-language: es Content-type: text/html Body:----------es-- El servidor no soporta la acción solicitada por el navegador. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- Le serveur n'est pas en mesure d'effectuer l'action demandée par le navigateur. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Níl tacaíocht ag an fhreastalaí don gníomh atá á iarraidh ag an mbrabhsálaí. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- Il server non supporta il tipo di azione richiesta dal browser. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- ブラウザã®è¦æ±‚ã—ãŸã‚¢ã‚¯ã‚·ãƒ§ãƒ³ã¯ã€ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã›ã‚“。 ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- 브ë¼ìš°ì €ê°€ 보낸 ìš”ì²­ì„ ì´ ì„œë²„ê°€ ì§€ì›í•˜ì§€ 않습니다. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- De server ondersteunt de actie, gevraagd door de browser, niet. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- Serveren støtter ikke den handlingen som ønskes utført av nettleseren. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Ten serwer nie obsługuje żądania przesłanego przez przeglądarkę. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- O servidor não suporta a ação requisitada pelo seu "browser". -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- O servidor não suporta a acção pedida pelo browser. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- Serverul nu suporta actiunea ceruta de browser. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- Сервер не поддерживает возможноÑтей, необходимых Ð´Ð»Ñ Ð¾Ð±Ñ€Ð°Ð±Ð¾Ñ‚ÐºÐ¸ запроÑа. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- Сервер не подржава акцију коју је читач захтевао. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- Servern stödjer inte den handling som önskades av webbläsaren. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- Sunucu, tarayıcı tarafından istenen eylemi desteklemiyor. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- æœåС噍䏿”¯æŒæµè§ˆå™¨è¯·æ±‚的动作。 ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 伺æœå™¨ä¸æ”¯æ´ç€è¦½å™¨è«‹æ±‚的動作。 ----------zh-tw-- httpd-2.4.41/docs/error/HTTP_VARIANT_ALSO_VARIES.html.var0000644000000000000500000002110413317763731020635 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Varianta požadované entity má sama více variant. Přístup není možný. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Ein Zugriff auf das angeforderte Objekt bzw. einer Variante dieses Objektes ist nicht möglich, da es ebenfalls ein variables Objekt darstellt. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- A variant for the requested entity is itself a negotiable resource. Access not possible. ----------en-- Content-language: es Content-type: text/html Body:----------es-- Una variante de la entidad solicitada es por si misma un recurso negociable. No es posible tener acceso a la entidad. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- Une variante pour l'entité demandée est elle-même une ressource négociable. L'accès est impossible. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Is é ceann de na athraithaí don aonán iarraithe acmhainn intráchta féin. Rochtain dodhéanta. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- Non è possibile accedere all'entità richiesta perché è essa stessa una risorsa negoziabile. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- リクエストã•れãŸã‚‚ã®ã® variant ã¯ãれ自体もã¾ãŸã€ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³å¯èƒ½ãªãƒªã‚½ãƒ¼ã‚¹ã§ã™ã€‚ アクセスã§ãã¾ã›ã‚“ã§ã—ãŸã€‚ ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- 요청한 ê°ì²´ì˜ 형태 ë˜í•œ 여러 형태를 가지고 있어서 ì ‘ê·¼ì´ ë¶ˆê°€ëŠ¥í•©ë‹ˆë‹¤. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- Een variant van het gevraagde object is op zich ook een te onderhandelen variant. Toegang is niet mogelijk. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- En variant av den forespurte enheten er i seg selv en forhandelbar ressurs. Tilgang ikke mulig. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Wariant żądanego zasobu jest również zasobem negocjowalnym. Dostęp jest niemożliwy. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- Uma variante da entidade de requisição é por si mesma um recurso negociável. Acesso não é possível. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- A variante relativa à entidade pedida é ela mesma um recurso negociável. Não é possível ter acesso. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- O varianta pentru entitatea ceruta este ea insasi o resursa negociabila. Accesul nu este posibil. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- Вариант запрашиваемого объекта - и Ñам реÑÑƒÑ€Ñ Ð½ÐµÐ¿Ð¾ÑтоÑнный. ДоÑтуп к объекту невозможен. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- Варијанта захтеваног ентитета је и Ñама реÑÑƒÑ€Ñ ÐºÐ¾Ñ˜Ð¸ поÑтоји у више варијанти. ПриÑтуп није могућ. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- En variant av den förfrågade enheten är i sig själv en giltig resurs. Åtkomst är inte möjlig. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- İstenen gösterim çeÅŸidinin kendisi zaten kendi içinde uzlaşımlı. EriÅŸim mümkün deÄŸil. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- 请求实体的一个å˜å…ƒè‡ªèº«æ˜¯ä¸€ä¸ªå¯è¢«å商的资æºã€‚无法访问。 ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 請求實體的一個變元自身是一個å¯è¢«å”商的資æºã€‚無法訪å•。 ----------zh-tw-- httpd-2.4.41/docs/error/HTTP_BAD_GATEWAY.html.var0000644000000000000500000002651213317763731017421 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Proxy server obdržel od nadÅ™azeného serveru chybnou odpovÄ›Ä. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Der Proxy-Server erhielt eine fehlerhafte Antwort eines übergeordneten Servers oder Proxies. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- The proxy server received an invalid response from an upstream server. ----------en-- Content-language: es Content-type: text/html Body:----------es-- El servidor 'proxy' ha recibido; información no válida del servidor de origen. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- Le serveur proxy a reçu une réponse incorrecte de la part d'un serveur supérieur. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Fuair an seachfhreastalaí freagairt neamhbhailí ó freastalaí thuasthrutha. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- Il server proxy ha ricevuto una risposta non valida dal server precedente. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- プロクシサーãƒã¯ä¸Šæµã‚µãƒ¼ãƒã‹ã‚‰ä¸æ­£ãªå¿œç­”ã‚’å—ä¿¡ã—ã¾ã—ãŸã€‚ ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- 프ë¡ì‹œ 서버가 ë” ìœ—ìª½ì˜ ì„œë²„ë¡œë¶€í„° ìž˜ëª»ëœ ì‘ë‹µì„ ë°›ì•˜ìŠµë‹ˆë‹¤. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- De proxy server heeft een ongeldig antwoord ontvangen van een gecontacteerde server. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- Proxyserveren mottok et ugyldig svar fra en oppstrøms server. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Serwer otrzymał nieprawidłową odpowiedź od kolejnego serwera. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- O servidor proxy recebeu uma resposta inválida do servidor destino. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- O servidor de proxy recebeu uma resposta inválida de um outro servidor externo a ele. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- Serverul proxy a primit un raspuns invalid de la serverul precedent. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- ПрокÑи-Ñервер получил недопуÑтимый ответ от вышеÑтоÑщего Ñервера. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- ПоÑреднички Ñервер је примио неиÑправан одговор од Ñледећег Ñервера у низу. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- Proxyservern mottog ett felaktigt svar från en tidigare server. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- Vekil sunucu üstbirim sunucudan anlamsız bir yanıt aldı. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- ä»£ç†æœåŠ¡å™¨ä»Žä¸Šæ¸¸æœåŠ¡å™¨æ”¶åˆ°äº†æ— æ•ˆçš„å“应。 ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 代ç†ä¼ºæœå™¨å¾žä¸ŠéŠä¼ºæœå™¨æ”¶åˆ°äº†ç„¡æ•ˆçš„響應。 ----------zh-tw-- httpd-2.4.41/docs/error/HTTP_UNAUTHORIZED.html.var0000644000000000000500000004065613317763731017600 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Server nemohl ověřit, že jste autorizován(a) k přístupu k URL "". BuÄ jste dodal(a) neplatné pověření (napÅ™. chybné heslo) nebo Váš prohlížeÄ neumí dodat požadované ověření. V případÄ›, že smíte požadovat tento dokument, zkontrolujte, prosím, VaÅ¡i uživatelskou identifikaci a heslo a zkuste to znovu. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Der Server konnte nicht verifizieren, ob Sie autorisiert sind, auf den URL "" zuzugreifen. Entweder wurden falsche Referenzen (z.B. ein falsches Passwort) angegeben oder ihr Browser versteht nicht, wie die geforderten Referenzen zu übermitteln sind. Sofern Sie für den Zugriff berechtigt sind, überprüfen Sie bitte die eingegebene User-ID und das Passwort und versuchen Sie es erneut. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- This server could not verify that you are authorized to access the URL "". You either supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required. In case you are allowed to request the document, please check your user-id and password and try again. ----------en-- Content-language: es Content-type: text/html Body:----------es-- El servidor no puede certificar que usted esté autorizado para acceder a la URL "". Ha podido suministrar información incorrecta (ej. contraseña no válida) o el navegador no sabe cómo suministrar la información requerida. En caso de que usted tenga permiso para acceder al documento, por favor verifique su nombre de usuario y contraseña y vuélvalo a intentar. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- Ce server n'a pas été en mesure de vérifier que vous êtes autorisé à accéder à cette URL "". Vous avez ou bien fourni des coordonnées erronées (p.ex. mot de passe inexact) ou bien votre navigateur ne parvient pas à fournir les données exactes. Si vous êtes autorisé à requérir le document, veuillez vérifier votre nom d'utilisateur et votre mot de passe et réessayer. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Níorbh fhéidir leis an freastalaí a dheimhniú go bhfuil an údaráis agat rochtain a dheanamh ar an URL "". Is féidir go soláthair tú faisnéis mícheart (m.s., pasfhocail mícheart), nó nach dtuigeann do chuid brabhsálaí conas an faisnéis is gá a soláthair i gceart. Más é gur ceart go mbhéadh cead agat iarratais a dheanamh don doiciméid, deimhnigh go bhfuil do chuid ainm úsáideora agus pasfhocal i gceart, agus dean iarracht eile, le do thoil. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- Questo server non può verificare l'autorizzazione all'accesso a "". Questo errore potrebbe essere causato da credenziali errate (nome utente o password errata) oppure da un browser che non riesce a comunicare il nome utente e la password in modo corretto. Nel caso in cui ritieni di aver diritto ad accedere al documento, controlla il nome utente e la password forniti e riprova. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- URL "" ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ãŒã‚ã‚‹ã“ã¨ã‚’確èªã§ãã¾ã›ã‚“ã§ã—ãŸã€‚ é–“é•ã£ãŸè³‡æ ¼æƒ…å ± (例ãˆã°ã€èª¤ã£ãŸãƒ‘スワード) を入力ã—ãŸã‹ã€ ブラウザãŒå¿…è¦ãªè³‡æ ¼æƒ…報をé€ä¿¡ã™ã‚‹æ–¹æ³•ã‚’ç†è§£ã—ã¦ã„ãªã„ã‹ã§ã™ã€‚ ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’è¦æ±‚ã§ãã‚‹ç­ˆã§ã‚ã‚‹å ´åˆã¯ã€ ユーザ ID ã¨ãƒ‘スワードをå†ç¢ºèªã—ã¦ä¸‹ã•ã„。 ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- ì´ ì„œë²„ê°€ "" URLì„ ì ‘ê·¼í•  수 있는 ê¶Œí•œì´ ìžˆëŠ”ì§€ 확ì¸í•˜ì§€ 못했습니다. ìž˜ëª»ëœ ì¸ì¦ ì •ë³´(가령, ìž˜ëª»ëœ ì•”í˜¸)를 보냈거나 아니면 사용하시는 브ë¼ìš°ì €ê°€ 필요한 ì¸ì¦ 정보를 어떻게 보내는지 모르는 것입니다. ì´ ë¬¸ì„œë¥¼ 사용할 수 있ë„ë¡ í—ˆê°€ë¥¼ 받았는ë°ë„ ì´ëŸ°ë‹¤ë©´, ì‚¬ìš©ìž ID와 암호를 확ì¸í•˜ì‹œê³  다시 시ë„하시기 ë°”ëžë‹ˆë‹¤. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- De server kon niet controleren of u gemachtigd bent om toegang te krijgen tot de URL "". U hebt zich onvoldoende geauthenticeerd ( vb : verkeerd paswoord ), of uw browser is niet in staat de nodige authentificatiegegevens door te geven. Indien u toch gemachtigd bent toegang te krijgen tot het document, controleer uw gebruikersnaam en paswoord en probeer opnieuw. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- Serveren kunne ikke verifisere at du har tillatelse til Ã¥ besøke adressen "". Enten oppga du feil opplysninger (f.eks. feil passord) eller sÃ¥ støtter ikke din nettleser dette autentiseringsystemet. Om du har tillatelse til Ã¥ besøke siden, vennligst kontroler ditt brukernavn og passord og forsøk igjen. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Serwer nie może zweryfikować, że masz uprawnienia dostępu do URL-a "". Nie podałeś prawidłowych danych autoryzacyjnych (np. hasła) lub twoja przeglądarka nie potrafi ich przesłać. Jeśli masz prawo dostępu do żądanego dokumentu, sprawdź podaną nazwę użytkownika i hasło. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- Este servidor não pode autorizar o seu acesso à URL "". Você deve ter fornecido dados incorretos (ex. senha errada), ou o seu "browser" não fornece as credenciais necessárias. No caso de você realmente possuir permissão para este documento, por favor checar seu login e sua senha e tentar novamente. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- Este servidor não conseguiu validar a sua autoridade para aceder ao URL "". Ou forneceu as credenciais erradas (e.g.: senha incorrecta) ou o seu browser não sabe como fornecer as credenciais necessárias. Caso lhe seja permitido aceder ao documento, por favor verifique o seu nome de utilizador e senha e tente de novo. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- Acest server nu a putut verifica daca sunteti autorizat sa accesati URL-ul "". Ati furnizat parametrii de acreditare gresiti (ex: parola gresita), sau browserul dumneavoastra nu poate furniza aceste detalii de acreditare. In cazul in care nu va este permis sa cereti un document, va rugam sa va verificati numele de utilizator si parola si sa incercati din nou. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- Сервер не Ñмог проверить данные аутентификации на доÑтуп к "". Ð’Ñ‹ предоÑтавили неверные учётные данные (например: пароль), или Ваш браузер не знает, как их предоÑтавить. ЕÑли Вам разрешено запрашивать данный документ, пожалуйÑта, проверьте Ñвои учётные данные и повторите запроÑ. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- Овај Ñервер није могао да потврди да Ñте овлашћени да приÑтупите УРЛ-у "". Могуће је или да Ñте навели погрешне личне податке (нпр. нетачну лозинку), или да ваш читач не разуме како да пошаље захтеване личне податке. Уколико вам је дозвољено да преузимате документ, молимо да проверите Ñвоје кориÑничко име и лозинку и пробате поново. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- Servern kunde inte verifiera att du har tillåtelse att besöka adressen "". Antingen angav du felaktiga uppgifter (ex. fel lösenord) eller så stödjer inte din webbläsare detta autentiseringssätt. Om du har tillåtelse att besöka sidan, vänligen kontrollera ditt användarnamn samt lösenord och försök igen. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- Sunucu "" adresine eriÅŸim izninizi doÄŸrulayamadı. Ya saÄŸladığınız kanıtlar yanlış (yanlış parola gibi) ya da tarayıcınız bu kanıtların nasıl saÄŸlanacağını bilmiyor. EÄŸer eriÅŸim izniniz olduÄŸuna eminseniz, lütfen kullanıcı adınızı ve parolanızı gözden geçirip yeniden deneyin. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- æ­¤æœåŠ¡å™¨æ— æ³•éªŒè¯æ‚¨æ˜¯å¦æœ‰æƒè®¿é—® URL ""。 原因å¯èƒ½æ˜¯æ‚¨æä¾›äº†é”™è¯¯çš„凭æ®ï¼ˆä¾‹å¦‚,错误的密ç ï¼‰ï¼Œæˆ–您的æµè§ˆå™¨ä¸çŸ¥é“如何æä¾›æ‰€éœ€çš„凭æ®ã€‚ 如果您有æƒè®¿é—®è¯¥æ–‡æ¡£ï¼Œè¯·æ£€æŸ¥æ‚¨çš„用户å和密ç å¹¶é‡è¯•。 ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 此伺æœå™¨ç„¡æ³•é©—è­‰æ‚¨æ˜¯å¦æœ‰æ¬Šè¨ªå• URL ""。 原因å¯èƒ½æ˜¯æ‚¨æä¾›äº†éŒ¯èª¤çš„æ†‘據(例如,錯誤的密碼),或您的ç€è¦½å™¨ä¸çŸ¥é“如何æä¾›æ‰€éœ€çš„æ†‘據。 如果您有權訪å•該文檔,請檢查您的使用者å和密碼並é‡è©¦ã€‚ ----------zh-tw-- httpd-2.4.41/docs/error/HTTP_REQUEST_TIME_OUT.html.var0000644000000000000500000002112413317763731020341 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Server uzavÅ™el síťové spojení, protože prohlížeÄ nedokonÄil požadavek ve stanoveném Äase. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Der Server konnte nicht mehr länger auf die Beendigung der Browseranfrage warten; die Netzwerkverbindung wurde vom Server geschlossen. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- The server closed the network connection because the browser didn't finish the request within the specified time. ----------en-- Content-language: es Content-type: text/html Body:----------es-- El servidor ha cerrado la conexión de red debido a que el navegador no ha finalizado la solicitud dentro del tiempo permitido. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- Le serveur a fermé la connection car le navigateur n'a pas fini la requête dans le temps spécifié. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Dún an freastalaí an nasc líonra, mar níor chríochnaidh an brabhsálaí leis an iarratais, taobh istigh den am sonraithe. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- Il server ha chiuso la connessione in quanto è stato superato il limite di tempo entro il quale il browser avrebbe dovuto eseguire la richiesta. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- ãƒ–ãƒ©ã‚¦ã‚¶ãŒæŒ‡å®šæ™‚間以内ã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’完了ã—ãªã‹ã£ãŸã®ã§ã€ サーãƒã¯æŽ¥ç¶šã‚’切りã¾ã—ãŸã€‚ ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- 브ë¼ìš°ì €ê°€ 너무 오랫ë™ì•ˆ ìš”ì²­ì„ ëë‚´ì§€ 않아서 서버가 ë„¤íŠ¸ì›Œí¬ ì—°ê²°ì„ ê°•ì œë¡œ ëŠì—ˆìŠµë‹ˆë‹¤. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- De server heeft de netwerkverbinding gesloten omdat de browser de vraag niet heeft beëindigd binnen een gestelde tijd. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- Serveren stengte forbindelsen fordi nettleseren ikke avsluttet forespørselen innen tidsgrensen. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Serwer zamknął połączenie sieciowe, ponieważ przeglądarka nie zakończyła operacji w przewidywanym czasie. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- O servidor encerrou a conexão porque o "browser" não finalizou a requisição dentro do tempo limite. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- O servidor interrompeu a ligação de rede porque o browser não terminou o pedido dentro do tempo limite. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- Serverul a terminat conexiunea cu browserul pentru ca acesta nu a terminat cererea in limita timpului specificat. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- Сервер закрыл Ñоединение из-за иÑÑ‚ÐµÑ‡ÐµÐ½Ð¸Ñ Ð²Ñ€ÐµÐ¼ÐµÐ½Ð¸, отведённого браузеру на выполнение запроÑа. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- Сервер је прекинуо везу Ñа мрежом јер читач није завршио захтев за дозвољено време. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- Servern stängde förbindelsen därför att webbläsaren inte avslutade förfrågan inom förbestämd tid. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- Tarayıcı isteÄŸi zamanında tamamlayamadığından sunucu aÄŸ baÄŸlantısını kapattı. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- 由于æµè§ˆå™¨æœªåœ¨æŒ‡å®šæ—¶é—´å†…完æˆè¯·æ±‚,æœåŠ¡å™¨å…³é—­äº†ç½‘ç»œè¿žæŽ¥ã€‚ ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 由於ç€è¦½å™¨æœªåœ¨æŒ‡å®šæ™‚間內完æˆè«‹æ±‚,伺æœå™¨é—œé–‰äº†ç¶²è·¯é€£æŽ¥ã€‚ ----------zh-tw-- httpd-2.4.41/docs/error/HTTP_INTERNAL_SERVER_ERROR.html.var0000644000000000000500000004077413317763731021133 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Nastala vnitÅ™ní chyba a server nebyl schopen dokonÄit Váš požadavek. Chybová zpráva
    Nastala vnitÅ™ní chyba a server nebyl schopen dokonÄit Váš požadavek. BuÄ je server pÅ™etížen, nebo doÅ¡lo k chybÄ› v CGI skriptu. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Die Anfrage kann nicht beantwortet werden, da im Server ein interner Fehler aufgetreten ist. Fehlermeldung:
    Die Anfrage kann nicht beantwortet werden, da im Server ein interner Fehler aufgetreten ist. Der Server ist entweder überlastet oder ein Fehler in einem CGI-Skript ist aufgetreten. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- The server encountered an internal error and was unable to complete your request. Error message:
    The server encountered an internal error and was unable to complete your request. Either the server is overloaded or there was an error in a CGI script. ----------en-- Content-language: es Content-type: text/html Body:----------es-- Se ha producido un error interno en el servidor y no se ha podido completar su solicitud. Mensaje de error:
    Se ha producido un error interno en el servidor y no se ha podido completar su solicitud. O el servidor está sobrecargado o ha habido un fallo en la ejecución de un programa CGI. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- Le serveur a été victime d'une erreur interne et n'a pas été capable de faire aboutir votre requête. Message d'erreur:
    Le serveur a été victime d'une erreur interne et n'a pas été capable de faire aboutir votre requête. Soit le server est surchargé soit il s'agit d'une erreur dans le script CGI. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Thit an freastalaí ar earráid inmheánach agus theip air do chuid iarratais a comhlíonadh. Teachtaireacht earráide:
    Thit an freastalaí ar earráid inmheánach agus theip air do chuid iarratais a comhlíonadh. Is féidir go bhfuil an freastalaí rólóaidithe, nó go raibh earráid i script CGI éigin. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- Il server ha generato un errore interno e non è in grado di soddisfare la richiesta. Messaggio di errore:
    Il server ha generato un errore interno e non è in grado di soddisfare la richiesta. Il server potrebbe essere sovraccarico oppure si è verificato un errore in uno script CGI. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- サーãƒå†…部ã§éšœå®³ãŒç™ºç”Ÿã—〠リクエストã«å¿œãˆã‚‹ã“ã¨ãŒã§ãã¾ã›ã‚“ã§ã—ãŸã€‚ Error message:
    サーãƒå†…部ã§éšœå®³ãŒç™ºç”Ÿã—〠リクエストã«å¿œãˆã‚‹ã“ã¨ãŒã§ãã¾ã›ã‚“ã§ã—ãŸã€‚ サーãƒãŒéŽè² è·ã§ã‚ã‚‹ã‹ã€ CGI スクリプトã«ã‚¨ãƒ©ãƒ¼ãŒã‚りã¾ã™ã€‚ ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- ì„œë²„ì— ë‚´ë¶€ 오류가 ë°œìƒí•˜ì—¬ ìš”ì²­ì„ ë까지 처리하지 못했습니다. 오류 ë‚´ìš©:
    ì„œë²„ì— ë‚´ë¶€ 오류가 ìƒê²¨ ìš”ì²­ì„ ë까지 처리하지 못했습니다. ì„œë²„ì— ê³¼ë¶€í•˜ê°€ 걸렸거나 아니면 CGI í”„ë¡œê·¸ëž¨ì— ì˜¤ë¥˜ê°€ 있었습니다. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- Foutbericht:
    De server kreeg een interne fout en kon uw vraag niet beantwoorden. De server is overbelast of er was een fout in een CGI script. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- Det inntraff en intern feil hos serveren, og det var ikke mulig å gjennomføre din forespørsel. Feilmelding:
    Det inntraff en intern feil hos serveren, og det var ikke mulig Ã¥ gjennomføre din forespørsel. Serveren er enten overbelastet, eller CGI-skriptet inneholder feil. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Serwer napotkał błąd wewnętrzny i nie jest w stanie zrealizować twojego żądania. Informacja o błędzie:
    Serwer napotkał błąd wewnętrzny i nie jest w stanie zrealizować twojego żądania. Serwer jest przeciążony lub napotkał na błąd w skrypcie CGI. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- O servidor encontrou um erro interno e não pode completar sua requisição. Mensagem de Erro:
    O servidor encontrou um erro interno e não foi possível completar sua requisição. O servidor está sobrecarregado ou existe um erro em um script CGI. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- O servidor encontrou um erro interno e não pode completar o seu pedido. Mensagem de erro:
    O servidor encontrou um erro interno e não pode completar o seu pedido. Ou o servidor está sobrecarregado, ou ocorreu um erro num script CGI. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- Serverul a intalnit o eroare interna si nu a putut rezolva cererea dumneavoastra. Mesajul de eroare :
    Serverul a intalnit o eroare interna si nu a putut rezolva cererea dumneavoastra. Serverul este supraincarcat sau a fost o eroare intr-un script CGI. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- Произошла внутреннÑÑ Ð¾ÑˆÐ¸Ð±ÐºÐ° Ñервера, в результате которой Ñерверу не удалоÑÑŒ завершить обработку Вашего запроÑа. Error message:
    Произошла внутреннÑÑ Ð¾ÑˆÐ¸Ð±ÐºÐ° Ñервера, в результате которой Ñерверу не удалоÑÑŒ завершить обработку Вашего запроÑа. Сервер перегружен, или в CGI-Ñкрипте обнаружена ошибка. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- Сервер је имао унутрашњу грешку и није био у могућноÑти да иÑпуни ваш захтев. Порука о грешци:
    Сервер је имао унутрашњу грешку и није био у могућноÑти да иÑпуни ваш захтев. Могуће је да је Ñервер преоптерећен, или да Ñе деÑила грешка у CGI Ñкрипти. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- Servern råkade ut för ett internt fel och det var inte möjligt att slutföra din begäran. Felmeddelande:
    Servern råkade ut för ett internt fel och det var inte möjligt att slutföra din begäran. Servern är antingen överbelastad eller så innehåller CGI-skriptet fel. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- Sunucuda içsel bir hata oluÅŸtuÄŸundan sunucu isteÄŸinizi yerine getiremiyor. Hata iletisi:
    Sunucuda içsel bir hata oluÅŸtuÄŸundan sunucu isteÄŸinizi yerine getiremiyor. Ya sunucu aşırı yüklü ya da CGI betiÄŸinde bir hata oluÅŸtu. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- æœåС噍å‘ç”Ÿäº†å†…éƒ¨é”™è¯¯ï¼Œæ— æ³•å¤„ç†æ‚¨çš„请求。 错误信æ¯ï¼š
    æœåС噍å‘ç”Ÿäº†å†…éƒ¨é”™è¯¯ï¼Œæ— æ³•å¤„ç†æ‚¨çš„请求。原因å¯èƒ½æ˜¯æœåŠ¡å™¨è¿‡è½½æˆ–åœ¨ CGI 脚本中出错。 ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 伺æœå™¨ç™¼ç”Ÿäº†å…§éƒ¨éŒ¯èª¤ï¼Œç„¡æ³•è™•ç†æ‚¨çš„請求。 錯誤資訊:
    伺æœå™¨ç™¼ç”Ÿäº†å…§éƒ¨éŒ¯èª¤ï¼Œç„¡æ³•è™•ç†æ‚¨çš„請求。原因å¯èƒ½æ˜¯ä¼ºæœå™¨è¶…載或在 CGI 腳本中出錯。 ----------zh-tw-- httpd-2.4.41/docs/error/HTTP_FORBIDDEN.html.var0000644000000000000500000003424713317763731017152 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Nemáte právo pro přístup do požadovaného adresáře. BuÄ neexistuje žádný dokument s obsahem (tzv. index), nebo je adresář chránÄ›n proti Ätení. Nemáte právo pro přístup k požadovanému objektu. BuÄ je chránÄ›n proti Ätení, nebo není serverem Äitelný. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Der Zugriff auf das angeforderte Verzeichnis ist nicht möglich. Entweder ist kein Index-Dokument vorhanden oder das Verzeichnis ist zugriffsgeschützt. Der Zugriff auf das angeforderte Objekt ist nicht möglich. Entweder kann es vom Server nicht gelesen werden oder es ist zugriffsgeschützt. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- You don't have permission to access the requested directory. There is either no index document or the directory is read-protected. You don't have permission to access the requested object. It is either read-protected or not readable by the server. ----------en-- Content-language: es Content-type: text/html Body:----------es-- Usted no tiene permiso para acceder al directorio solicitado. No existe un documento índice, o el directorio está protegido contra lectura. Usted no tiene permiso para acceder al objeto solicitado. El objeto está protegido contra lectura o el servidor no puede leerlo. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- Vous n'avez pas le droit d'accéder au répertoire demandé. Soit il n'y a pas de document index soit le répertoire est protégé. Vous n'avez pas le droit d'accéder à l'objet demandé. Soit celui-ci est protégé, soit il ne peut être lu par le serveur. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Níl cead agat rochtain a dhéanamh ar an comhadlann faoi iarratais. Is féidir nach bhfuil aon doiciméad innéacs, nó go bhfuil cosaint ar lémh an comhadlann. Níl cead agat rochtain a dhéanamh ar an aidhm faoi iarratais. Is féidir go bhfuil cosaint ar lé air, nó go bhfuil sé doléite don freastalaí. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- Non disponi dei permessi necessari per accedere alla directory richiesta oppure non esiste il documento indice. Non disponi dei permessi necessari per accedere all'oggetto richiesto, oppure l'oggetto non può essere letto dal server. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- è¦æ±‚ã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¸ã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ãŒã‚りã¾ã›ã‚“。 インデックスドキュメントãŒå­˜åœ¨ã—ãªã„ã‹ã€ ディレクトリã®èª­ã¿è¾¼ã¿ãŒè¨±å¯ã•れã¦ã„ã¾ã›ã‚“。 è¦æ±‚ã•れãŸã‚ªãƒ–ジェクトã¸ã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©ãŒã‚りã¾ã›ã‚“。 読ã¿è¾¼ã¿ãŒè¨±å¯ã•れã¦ã„ãªã„ã‹ã€ サーãƒãŒèª­ã¿è¾¼ã¿ã«å¤±æ•—ã—ãŸã‹ã§ã—ょã†ã€‚ ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- 요청한 ë””ë ‰í† ë¦¬ì— ì ‘ê·¼í•  수 있는 ê¶Œí•œì´ ì—†ìŠµë‹ˆë‹¤. ë””ë ‰í† ë¦¬ì— ì²« 페ì´ì§€ê°€ 없거나 아니면 ì½ê¸° 보호가 ë˜ì–´ 있습니다. 요청한 ê°ì²´ì— 접근할 수 있는 ê¶Œí•œì´ ì—†ìŠµë‹ˆë‹¤. ì½ê¸° 보호가 ë˜ì–´ 있거나 웹서버가 ì½ì„ 수 ì—†ë„ë¡ ë˜ì–´ 있습니다. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- U hebt niet de toestemming om toegang te krijgen tot de gevraagde map. Er is of wel geen index document of de map is beveiligd tegen lezen. U hebt niet de toestemming om toegang te krijgen tot de gevraagde map. Die is ofwel beveiligd tegen lezen of onleesbaar door de server. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- Du har ikke tilstrekkelige rettigheter for Ã¥ fÃ¥ tilgang til den ønskede katalogen. Det eksisterer ikke et indeksdokument, eller katalogen er lesebeskyttet. Du har ikke tilstrekkelige rettigheter for Ã¥ fÃ¥ adgang til det ønskede dokumentet. Objektet er lesebeskyttet, eller ikke lesbart for serveren. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Nie masz prawa dostępu do żądanego katalogu. W katalogu nie ma indeksu lub katalog jest zabezpieczony przed odczytem. Nie masz dostępu do żądanego obiektu. Jest on zabezpieczony przed odczytem lub nie może być odczytany przez serwer. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- Você não tem permissão para acessar o diretório requisitado. Pode não existir o arquivo de índice ou o diretório pode estar protegido contra leitura. Você não tem permissão para acessar o objeto requisitado. Ele pode estar protegido contra leitura ou não ser legível pelo servidor. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- Não tem permissão para aceder ao directório que deseja. Ou não existe o documento de índice ou o directório está protegido contra leitura. Não tem permissão para aceder ao objecto que deseja. Este está protegido contra leitura ou o servidor não o consegue ler. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- Nu aveti permisiunea sa accesati directorul cerut. Nu este nici un document index sau directorul este protejat la citire. Nu aveti permisiunea sa accesati obiectul cerut. Este protejat la citire sau nu poate fi citit de server. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- У Ð’Ð°Ñ Ð½ÐµÑ‚ прав доÑтупа к Ñтой директории. ОтÑутÑтвует индекÑный файл, или Ð´Ð¸Ñ€ÐµÐºÑ‚Ð¾Ñ€Ð¸Ñ Ð½ÐµÐ´Ð¾Ñтупна Ð´Ð»Ñ Ñ‡Ñ‚ÐµÐ½Ð¸Ñ. У Ð’Ð°Ñ Ð½ÐµÑ‚ прав доÑтупа к Ñтому объекту. Файл недоÑтупен Ð´Ð»Ñ Ñ‡Ñ‚ÐµÐ½Ð¸Ñ, или Ñервер не может его прочитать. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- Ðемате дозволу да приÑтупите захтеваном директоријуму. Могуће је да нема индекÑног документа, или да је директоријум заштићен од читања. Ðемате дозволу да приÑтупите захтеваном објекту. Могуће је да је заштићен од читања, или да га Ñервер не може прочитати. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- Du har inte tillräckliga rättigheter för att få tillgång till den önskade katalogen. Det existerar inget indexdokument eller så är katalogen lässkyddad. Du har inte tillräckliga rättigheter för att få tillgång till det önskade objektet. Objektet är lässkyddat eller inte läsbart för servern. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- Talep ettiÄŸiniz dizine eriÅŸim izniniz yok. Ya dizin içerik dosyası yok, ya da dizin okumaya karşı korumalı. Talep ettiÄŸiniz dizine eriÅŸim izniniz yok. Dizin, ya okumaya karşı korumalı ya da sunucu tarafından okunamıyor. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- 您无æƒè®¿é—®æ‰€è¯·æ±‚的目录。 这是由于没有主页或该目录ä¸å…许被读å–导致的。 您无æƒè®¿é—®æ‰€è¯·æ±‚的对象。 它å¯èƒ½ä¸å…è®¸è¢«è¯»å–æˆ–无法被æœåŠ¡å™¨è¯»å–。 ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- æ‚¨ç„¡æ¬Šè¨ªå•æ‰€è«‹æ±‚的目錄。 é€™æ˜¯ç”±æ–¼æ²’æœ‰ä¸»é æˆ–該目錄ä¸å…許被讀å–導致的。 æ‚¨ç„¡æ¬Šè¨ªå•æ‰€è«‹æ±‚的物件。 它å¯èƒ½ä¸å…è¨±è¢«è®€å–æˆ–無法被伺æœå™¨è®€å–。 ----------zh-tw-- httpd-2.4.41/docs/error/contact.html.var0000644000000000000500000001234513317763731016445 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Pokud si myslíte, že toto je chyba serveru, kontaktujte, prosím, ">webmastera. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Sofern Sie dies für eine Fehlfunktion des Servers halten, informieren Sie bitte den ">Webmaster hierüber. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- If you think this is a server error, please contact the ">webmaster. ----------en-- Content-language: es Content-type: text/html Body:----------es-- Si usted cree que esto es un error del servidor, por favor comuníqueselo al ">administrador del portal. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- Si vous pensez qu'il s'agit d'une erreur du serveur, veuillez contacter le ">webmestre. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Má cheapann tú gur earráid fhreastalaí í seo, téigh i dteagmháil leis an "> stiúrthóir gréasáin, le do thoil. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- Se pensi che questo sia un errore del server, per favore contatta il ">webmaster. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- サーãƒãƒ¼ã®éšœå®³ã¨æ€ã‚れる場åˆã¯ã€" >ウェブ管ç†è€…ã¾ã§ã”連絡ãã ã•ã„。 ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- 만약 ì´ê²ƒì´ 서버 오류ë¼ê³  ìƒê°ë˜ë©´, ">웹 관리ìžì—게 ì—°ë½í•˜ì‹œê¸° ë°”ëžë‹ˆë‹¤. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- Indien u van oordeel bent dat deze server in fout is, gelieve de ">webmaster te contacteren. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- Om du tror dette skyldes en serverfeil, venligst kontakt ">webansvarlig. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Jeśli myślisz, że jest to błąd tego serwera, skontaktuj się z ">administratorem. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- Se você acredita ter encontrado um problema no servidor, por favor entre em contato com o ">webmaster. -------pt-br-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- Va rugam sa il contactati pe ">webmaster in cazul in care credeti ca aceasta este o eroare a serverului. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- ЕÑли Ð’Ñ‹ Ñчитаете, что Ñто ошибка Ñервера, пожалуйÑта, Ñообщите об Ñтом ">веб-маÑтеру. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- Ðко миÑлите да је ово грешка Ñервера, молимо обавеÑтите ">вебмаÑтера. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- Om du tror att detta beror på ett serverfel, vänligen kontakta ">webbansvarig. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- Bunun bir sunucu hatası olduğunu düşÃ¼nüyorsanız, lütfen ">site yöneticisi ile iletişime geçin. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- 如果您认为这是一个æœåŠ¡å™¨é”™è¯¯ï¼Œè¯·è”ç³»">网站管ç†å‘˜ã€‚ ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 如果您èªç‚ºé€™æ˜¯ä¸€å€‹ä¼ºæœå™¨éŒ¯èª¤ï¼Œè«‹è¯ç¹«">網站管ç†å“¡ã€‚ ----------zh-tw-- httpd-2.4.41/docs/error/HTTP_NOT_FOUND.html.var0000644000000000000500000004074413317763731017250 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Požadované URL nebylo na tomto serveru nalezeno. Zdá se, že odkaz na ">odkazující stránce je chybný nebo zastaralý. Informujte, prosím, autora ">této stránky o chybÄ›. Pokud jste zadal(a) URL ruÄnÄ›, zkontrolujte, prosím, zda jste zadal(a) URL správnÄ›, a zkuste to znovu. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Der angeforderte URL konnte auf dem Server nicht gefunden werden. Der Link auf der ">verweisenden Seite scheint falsch oder nicht mehr aktuell zu sein. Bitte informieren Sie den Autor ">dieser Seite über den Fehler. Sofern Sie den URL manuell eingegeben haben, überprüfen Sie bitte die Schreibweise und versuchen Sie es erneut. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- The requested URL was not found on this server. The link on the ">referring page seems to be wrong or outdated. Please inform the author of ">that page about the error. If you entered the URL manually please check your spelling and try again. ----------en-- Content-language: es Content-type: text/html Body:----------es-- No se ha localizado la URL solicitada en este servidor. La URL de la ">página que le ha remitido parece ser errónea o estar obsoleta. Por favor, informe del error al autor de ">esa página. Si usted ha introducido la URL manualmente, por favor revise su ortografía e inténtelo de nuevo. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- L'URL demandée n'a pas pu être trouvée sur ce serveur. La référence sur ">la page citée semble être erronée ou perimée. Nous vous prions d'informer l'auteur de ">cette page de cette erreur. Si vous avez tapé l'URL à la main, veuillez vérifier l'orthographe et réessayer. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Níor aimsigh an URL iarraithe ar an fhreastalaí seo. Is cosúil go bhfuil an nasc ar an ">leathanach thagarthach mícheart nó as dáta. Cur in iúl d'úadar " >an leathanach sin go bhfuil earráid ann, le do thoil. Má chuir tú isteach an URL tú féin, deimhnigh go bhfuil sé litrithe i gceart agat, agus déan iarracht eile le do thoil. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- L'URL richiesto non esiste su questo server. Il link della ">pagina da cui sei arrivato potrebbe essere errato o non essere più valido. Per favore, informa dell'errore l'autore della ">pagina. Se hai scritto l'URL a mano, per favore controlla che non ci siano errori. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- è¦æ±‚ã•れ㟠URL ã¯æœ¬ã‚µãƒ¼ãƒã§ã¯è¦‹ã¤ã‹ã‚Šã¾ã›ã‚“ã§ã—ãŸã€‚ "> å‚照元ページã®ãƒªãƒ³ã‚¯ãŒé–“é•ã£ã¦ã„ã‚‹ã‹ã€å¤ããªã£ã¦ã—ã¾ã£ã¦ã„るよã†ã§ã™ã€‚ " >ページã®è‘—者ã«ã“ã®ã‚¨ãƒ©ãƒ¼ã‚’ãŠçŸ¥ã‚‰ã›ä¸‹ã•ã„。 ã‚‚ã—æ‰‹å…¥åŠ›ã§ URL を入力ã—ãŸå ´åˆã¯ã€ç¶´ã‚Šã‚’確èªã—ã¦å†åº¦ãŠè©¦ã—下ã•ã„。 ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- 요청한 URLì„ ì´ ì„œë²„ì—서 ì°¾ì„ ìˆ˜ 없습니다. ">ì´ì „ 페ì´ì§€ì— 있는 ë§í¬ê°€ 잘못ë˜ì—ˆê±°ë‚˜ 오래ë˜ì–´ 없어진 것 같습니다. ">ê·¸ 페ì´ì§€ë¥¼ 만든ì´ì—게 ì´ ì‚¬ì‹¤ì„ ì•Œë ¤ì£¼ì‹œê¸° ë°”ëžë‹ˆë‹¤. URLì„ ì§ì ‘ 입력하셨다면 바르게 입력하셨는지 확ì¸í•˜ì‹œê³  다시 시ë„하시기 ë°”ëžë‹ˆë‹¤. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- De gevraagde URL was niet gevonden op deze server. De link op ">deze pagina pagina is verkeerd of achterhaald. Gelieve de auteur van ">die pagina in te lichten over deze fout. Indien u de URL manueel hebt ingevuld, gelieve uw spelling te controleren en probeer opnieuw. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- Den etterspurte adressen finnes ikke pÃ¥ denne serveren. Lenken pÃ¥ den ">forrige siden ser ut til Ã¥ være feil eller utdatert. Venligst informer forfatteren av ">siden om feilen. Om du skrev inn adressen manuelt, vennligst kontroller stavingen og forsøk igjen. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Nie znaleziono żądanego URL-a na tym serwerze. Odnośnik na ">referującej stronie wydaje się być nieprawidłowy lub nieaktualny. Poinformuj autora ">tej strony o problemie. Jeśli wpisałeś URL-a ręcznie, sprawdź, czy się nie pomyliłeś. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- A URL requisitada não foi encontrada neste servidor. O link na ">página referida parece estar com algum erro ou desatualizado. Por favor informe o autor ">desta página sobre o erro. Se você digitou o endereço (URL) manualmente, por favor verifique novamente a sintaxe do endereço. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- O método não é permitido para o URL pedido. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- URL-ul cerut nu a fost gasit pe acest server. Link-ul de pe ">pagina de unde ati venit pare a fi gresit sau invechit. Va rugam informati autorul ">acestei pagini despre eroare. Daca ati introdus URL-ul manual, va rugam verificati corectitudinea si incercati din nou. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- Запрашиваемый реÑÑƒÑ€Ñ Ð½Ðµ найден. СÑылка на ">Ñтранице неверна или уÑтарела. ПожалуйÑта, Ñообщите автору ">Ñтой Ñтраницы об ошибке. ЕÑли Ð’Ñ‹ ввели Ð°Ð´Ñ€ÐµÑ Ð´Ð°Ð½Ð½Ð¾Ð³Ð¾ реÑурÑа вручную, пожалуйÑта, удоÑтовертеÑÑŒ, что в напиÑании адреÑа нет ошибок. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- Захтевани УРЛ није пронађен на овом Ñерверу. Изгледа да је веза на ">иÑходишној Ñтраници погрешна или заÑтарела. Молимо обавеÑтите аутора ">те Ñтранице о грешци. Уколико Ñте УРЛ унели ручно, молимо проверите могуће грешке и пробајте поново. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- Den efterfrågade adressen hittades inte på denna server. Länken på den ">tidigare sidan verkar vara felaktig eller inaktuell. Vänligen informera författaren av ">sidan om felet. Om du skrev in adressen manuellt så kontrollera din stavning och försök igen. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- Talep ettiÄŸiniz URL, sunucu üzerinde bulunmuyor. ">İstek yapılan sayfa üzerindeki baÄŸlantı güncel deÄŸil. Lütfen ">sayfa yazarını hata hakkında bilgilendirin. URL'yi elle girdiyseniz, yazdıklarınızı gözden geçirip yeniden deneyin. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- 您请求的 URL 在该æœåŠ¡å™¨ä¸Šæœªæ‰¾åˆ°ã€‚ 您的">æ¥æºé¡µé¢ä¸Šçš„链接å¯èƒ½å‡ºé”™æˆ–过期。 请将错误通知给">该页é¢çš„作者。 如果您是手动输入的 URL ,请检查拼写并é‡è¯•。 ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 您請求的 URL 在該伺æœå™¨ä¸Šæœªæ‰¾åˆ°ã€‚ 您的">來æºé é¢ä¸Šçš„連çµå¯èƒ½å‡ºéŒ¯æˆ–éŽæœŸã€‚ 請將錯誤通知給">該來æºé é¢çš„作者。 如果您是手動輸入的 URL ,請檢查拼寫並é‡è©¦ã€‚ ----------zh-tw-- httpd-2.4.41/docs/error/HTTP_GONE.html.var0000644000000000000500000004027313317763731016402 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Požadované URL již není na tomto serveru k dispozici, ani není k dispozici žádná adresa k pÅ™esmÄ›rování. Informujte, prosím, autora ">odkazující stránky, že odkaz je zastaralý. Pokud jste následovali odkaz z cizí stránky, kontaktujte, prosím, jejího autora. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Der angeforderte URL existiert auf dem Server nicht mehr und wurde dauerhaft entfernt. Eine Weiterleitungsadresse ist nicht verfügbar. Bitte informieren Sie den Autor der ">verweisenden Seite, dass der Link nicht mehr aktuell ist. Falls Sie einem Link von einer anderen Seite gefolgt sind, informieren Sie bitte den Autor dieser Seite hierüber. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- The requested URL is no longer available on this server and there is no forwarding address. Please inform the author of the ">referring page that the link is outdated. If you followed a link from a foreign page, please contact the author of this page. ----------en-- Content-language: es Content-type: text/html Body:----------es-- La URL solicitada ya no está disponible en este servidor y no existe una dirección a la cual remitirle. Por favor, comunique al autor de la ">página que le ha remitido que la URL está obsoleta. Si usted ha seguido un enlace de una página externa, por favor contacte con el autor de esa página. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- L'URL demandée n'est plus accessible sur ce serveur et il n'y a pas d'adresse de redirection. Nous vous prions d'informer l'auteur de ">la page en question que la référence n'est plus valable. Si vous avez suivi une référence issue d'une page autre, veuillez contacter l'auteur de cette page. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Níl an URL iarraithe ar fáil ar an fhreastalaí seo a thuilleadh, agus níl aon seoladh nua ann dó. Cur in úil do úadar an ">leathanach thagarthach go bhfuil an nasc as-dáta, le do thoil. Má leanfá nasc ó leathanach iasachta, téigh i dteaghmháil le úadar an leathanach sin, le do thoil. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- L'URL richiesto non è più disponibile su questo server e non esistono indirizzi verso i quali sia possibile inoltrare la richiesta. Per favore, informa l'autore della ">pagina di provenienza che il link non è più valido. Se sei arrivato da una pagina esterna, informa l'autore della pagina di provenienza che il link non è più valido. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- è¦æ±‚ã•れ㟠URL ã¯æ—¢ã«æœ¬ã‚µãƒ¼ãƒã§ã¯åˆ©ç”¨ã§ãã¾ã›ã‚“ã—〠移動先もã‚ã‹ã‚Šã¾ã›ã‚“。 " >å‚照元ページã®è‘—者ã«ã€ リンクãŒå¤ããªã£ã¦ã„ã‚‹ã“ã¨ã‚’ã”連絡ãã ã•ã„。 ä»–ã®ãƒšãƒ¼ã‚¸ã‹ã‚‰ã®ãƒªãƒ³ã‚¯ã‚’辿ã£ã¦ããŸå ´åˆã¯ã€ ãã®ãƒšãƒ¼ã‚¸ã®è‘—者ã«ã”連絡ãã ã•ã„。 ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- 요청한 URLì€ ë” ì´ìƒ ì´ ì„œë²„ì— ë‚¨ì•„ìžˆì§€ 않으며, ê·¸ ê°ì²´ê°€ 옮겨진 다른 URL 역시 남아있지 않습니다. ">ì´ì „ 페ì´ì§€ì˜ 만든ì´ì—게 주소가 잘못ë˜ì—ˆë‹¤ê³  알려주시기 ë°”ëžë‹ˆë‹¤. 다른 페ì´ì§€ì˜ ë§í¬ë¥¼ ë”°ë¼ì˜¤ì…¨ë‹¤ë©´, ê·¸ 페ì´ì§€ì˜ 만든ì´ì—게 ì—°ë½ì„ 하시기 ë°”ëžë‹ˆë‹¤. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- De gevraagde URL is niet langer beschikbaar op deze server en er is geen doorverwijsadres. Gelieve aan de auteur van ">deze pagina te melden dat deze link niet langer actueel is. Indien u deze link hebt gekregen van een andere pagina, gelieve de auteur van deze pagina te contacteren. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- Den ønskede adressen er ikke lenger tilgjengelig hos denne serveren og det finnes ingen adresse for videresending. Venligst informer forfatteren bak ">den aktuelle siden om at lenken er utdatert. Om du fulgte en lenke fra en ekstern side, venligst kontakt forfatteren bak den siden. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Poszukiwany zasób nie jest już dostępny na tym serwerze i nie podano nowego adresu zasobu. Prosimy poinformować autora ">referującej strony o nieaktualnym linku. Jeśli podążyłeś za linkiem z innej strony, skontaktuj się z jej autorem. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- A URL solicitada não está disponível neste servidor e não existe um endereço alternativo. Por favor informe o autor da ">página referida que a URL está desatualizada. Se você seguiu um "link" de uma página externa, por favor entre em contato com o autor desta página e o informe sobre a mudança do "link". -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- O URL desejado já não está disponível neste servidor e não existe endereço alternativo. Por favor informe o autor da ">página originária que a hiperligação está desactualizada. Se chegou aqui a partir de uma hiperligação externa, por favor contacte o autor dessa página. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- URL-ul cerut nu mai este disponibil pe acest server si nu exista o adresa de inaintare. Va rugam informati autorul ">paginii referite ca link-ul nu mai este de actualitate. Va rugam contactati autorul acestei pagini daca ati urmat un link dintr-o pagina externa. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- Документ удалён, и Ð°Ð´Ñ€ÐµÑ Ð¿ÐµÑ€ÐµÐ½Ð°Ð¿Ñ€Ð°Ð²Ð»ÐµÐ½Ð¸Ñ Ð¾Ñ‚ÑутÑтвует. ПожалуйÑта, Ñообщите автору ">Ñтраницы, ÑÑылающейÑÑ Ð½Ð° документ, что ÑÑылка уÑтарела. ЕÑли Ð’Ñ‹ обратилиÑÑŒ к документу по ÑÑылке Ñ Ð´Ñ€ÑƒÐ³Ð¾Ð¹ Ñтраницы, пожалуйÑта, Ñообщите её автору об ошибке. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- Захтевани УРЛ није више доÑтупан на овом Ñерверу и нема адреÑе на коју биÑте могли бити проÑлеђени. Молимо обавеÑтите аутора ">иÑходишне Ñтранице да је веза заÑтарела. Ðко Ñте пратили везу Ñа Ñпољне Ñтранице, молимо обавеÑтите аутора те Ñтранице. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- Den önskade adressen är inte längre tillgänglig hos denna server och det finns inte någon adress för vidarebefodran. Vänligen informera författaren bakom ">den aktuella sidan att länken är inaktuell. Om du följde en länk från en extern sida, vänligen kontakta författaren av den sidan. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- Talep ettiÄŸiniz URL artık kullanılabilir deÄŸil ve herhangi bir yönlendirme de mevcut deÄŸil. Lütfen ">istenen sayfanın yazarına, bu baÄŸlantının güncel olmadığını bildirin. BaÅŸka bir sunucudaki bir baÄŸlantıyı izleyerek buraya geldiyseniz, lütfen sözkonusu sayfanın yazarına baÄŸlantının güncel olmadığını bildirin. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- 您请求的 URL 在此æœåŠ¡å™¨ä¸Šä¸å†å¯ç”¨ï¼Œä¸”没有设置转å‘的地å€ã€‚ 请通知">æ¥æºé¡µé¢çš„作者,该链接已过期。 如果您从外部页é¢çš„一个链接访问,请è”系该页é¢çš„作者。 ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- 您請求的 URL 在此伺æœå™¨ä¸Šä¸å†å¯ç”¨ï¼Œä¸”沒有設置轉發的ä½å€ã€‚ 請通知">來æºé é¢çš„作者,該連çµå·²éŽæœŸã€‚ 如果您從外部é é¢çš„一個連çµè¨ªå•,請è¯ç¹«æ­¤é é¢çš„作者。 ----------zh-tw-- httpd-2.4.41/docs/error/HTTP_PRECONDITION_FAILED.html.var0000644000000000000500000001755113317763731020556 0ustar rootsrcContent-language: cs Content-type: text/html; charset=UTF-8 Body:----------cs-- Vstupní podmínka pro požadavek o zadané URL nesplnila pozitivní vyhodnocení. ----------cs-- Content-language: de Content-type: text/html; charset=UTF-8 Body:----------de-- Die für den Abruf der angeforderten URL notwendige Vorbedingung wurde nicht erfüllt. ----------de-- Content-language: en Content-type: text/html; charset=UTF-8 Body:----------en-- The precondition on the request for the URL failed positive evaluation. ----------en-- Content-language: es Content-type: text/html Body:----------es-- No se ha evaluado positivamente la pre-condición de la petición para la URL. ----------es-- Content-language: fr Content-type: text/html; charset=UTF-8 Body:----------fr-- La précondition pour l'URL demandé a été évaluée négativement. ----------fr-- Content-language: ga Content-type: text/html; charset=UTF-8 Body:----------ga-- Theip meastóireacht an réamhchoinníoll don iarratais den URL. ----------ga-- Content-language: it Content-type: text/html; charset=UTF-8 Body:----------it-- I criteri di precondizione per consentire l'invio dell'URL richiesto non sono stati soddisfatti. ----------it-- Content-language: ja Content-type: text/html; charset=UTF-8 Body:----------ja-- 指定ã•れ㟠URL ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ãŠã‘ã‚‹äº‹å‰æ¡ä»¶ãŒæº€ãŸã•れã¾ã›ã‚“ã§ã—ãŸã€‚ ----------ja-- Content-language: ko Content-type: text/html; charset=UTF-8 Body:----------ko-- 미리 주어진 ì¡°ê±´ì´ ë§Œì¡±ë˜ì§€ 않아서 URL ìš”ì²­ì„ ì²˜ë¦¬í•  수 없습니다. ----------ko-- Content-language: nl Content-type: text/html; charset=UTF-8 Body:----------nl-- Een startvoorwaarde werd niet voldaan bij verwerking van de vraag naar de URL. ----------nl-- Content-language: nb Content-type: text/html; charset=UTF-8 Body:----------nb-- Den nødvendige forutsetningen for forespørselen passerte ikke vurderingen med positivt resultat. ----------nb-- Content-language: pl Content-type: text/html; charset=UTF-8 Body:----------pl-- Warunek wstępny dla URL-a nie został spełniony. ----------pl-- Content-language: pt-br Content-type: text/html; charset=UTF-8 Body:-------pt-br-- A condição necessária para a requisição da URL foi avaliada como falsa. -------pt-br-- Content-language: pt Content-type: text/html; charset=ISO-8859-1 Body:----------pt-- A condição necessária ao pedido do URL foi avaliada com resultado negativo. ----------pt-- Content-language: ro Content-type: text/html; charset=UTF-8 Body:----------ro-- Preconditionarea pentru cererea URL-ului nu a fost evaluata pozitiv. ----------ro-- Content-language: ru Content-type: text/html; charset=UTF-8 Body:----------ru-- УÑловие в запроÑе к данному реÑурÑу не было выполнено. ----------ru-- Content-language: sr Content-type: text/html; charset=UTF-8 Body:----------sr-- ПредуÑлов за захтев УРЛ-а није иÑпуњен. ----------sr-- Content-language: sv Content-type: text/html; charset=UTF-8 Body:----------sv-- Den nödvändiga förutsättningen för adressförfrågan passerade inte utvärderingen med acceptabelt resultat. ----------sv-- Content-language: tr Content-type: text/html; charset=UTF-8 Body:----------tr-- URL talebinin önkoÅŸulu olumlanamadı. ----------tr-- Content-language: zh-cn Content-type: text/html; charset=UTF-8 Body:----------zh-cn-- 对该 URL å‘é€çš„请求,包å«çš„先决æ¡ä»¶ä¸æˆç«‹ã€‚ ----------zh-cn-- Content-language: zh-tw Content-type: text/html; charset=UTF-8 Body:----------zh-tw-- å°è©² URL 發é€çš„請求,包å«çš„先決æ¢ä»¶ä¸æˆç«‹ã€‚ ----------zh-tw-- httpd-2.4.41/docs/manual/0002755000000000000500000000000013523273357013455 5ustar rootsrchttpd-2.4.41/docs/manual/license.html0000644000000000000500000000017311656337540015764 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: license.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 httpd-2.4.41/docs/manual/index.html.pt-br0000644000000000000500000002133113412755316016470 0ustar rootsrc Documentação do Servidor HTTP Apache Versão 2.4 - Servidor HTTP Apache Versão 2.4

    <-

    Documentação do Servidor HTTP Apache Versão 2.4

    Línguas Disponíveis:  da  |  de  |  en  |  es  |  fr  |  ja  |  ko  |  pt-br  |  tr  |  zh-cn 

    Esta tradução pode estar desatualizada. Confira a versão em Inglês para mudanças recentes.

    Línguas Disponíveis:  da  |  de  |  en  |  es  |  fr  |  ja  |  ko  |  pt-br  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/dso.html.ko.euc-kr0000644000000000000500000004114013412755316016720 0ustar rootsrc µ¿Àû°øÀ¯°´Ã¼ (DSO) Áö¿ø - Apache HTTP Server Version 2.4
    <-

    µ¿Àû°øÀ¯°´Ã¼ (DSO) Áö¿ø

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.

    ¾ÆÆÄÄ¡ À¥¼­¹ö´Â °ü¸®ÀÚ°¡ ¸ðµâµéÀ» ¼±ÅÃÇÏ¿© ¼­¹ö¿¡ Æ÷ÇÔÇÒ ±â´ÉÀ» °áÁ¤ÇÒ ¼ö ÀÖ´Â ¸ðµâÈ­µÈ ÇÁ·Î±×·¥ÀÌ´Ù. ¼­¹ö¸¦ ÄÄÆÄÇÒ¶§ httpd ½ÇÇàÆÄÀÏ¿¡ Á¤ÀûÀ¸·Î ¸ðµâÀ» ÄÄÆÄÀÏÇÒ ¼ö ÀÖ´Ù. ¾Æ´Ï¸é ¸ðµâÀ» httpd ½ÇÇàÆÄÀϰú ºÐ¸®ÇÏ¿© µ¿Àû°øÀ¯°´Ã¼(Dynamic Shared Objects, DSO)·Î ÄÄÆÄÀÏÇÒ ¼ö ÀÖ´Ù. DSO ¸ðµâÀº ¼­¹ö¸¦ ÄÄÆÄÀÏÇÒ¶§ ÄÄÆÄÀÏÇϰųª, Apache Extension Tool (apxs)À» »ç¿ëÇÏ¿© ³ªÁß¿¡ ÄÄÆÄÀÏÇÏ¿© Ãß°¡ÇÒ ¼ö ÀÖ´Ù.

    ÀÌ ¹®¼­´Â DSO ¸ðµâ »ç¿ë¹ý°ú ¹è°æ ÀÌ·ÐÀ» ¼³¸íÇÑ´Ù.

    top

    ±¸Çö

    ¾ÆÆÄÄ¡ Çٽɿ¡ Á¤ÀûÀ¸·Î ÄÄÆÄÀÏÇØ¾ßÇÒ mod_so.c¶ó´Â ¸ðµâÀº ¾ÆÆÄÄ¡ ¸ðµâÀ» ÀоîµéÀ̱âÀ§ÇÑ DSO¸¦ Áö¿øÇÑ´Ù. ÀÌ ¸ðµâÀº core¸¦ Á¦¿ÜÇϰí DSO°¡ µÉ ¼ö ¾ø´Â À¯ÀÏÇÑ ¸ðµâÀÌ´Ù. ½ÇÁ¦·Î ´Ù¸¥ ¸ðµç ¾ÆÆÄÄ¡ ¸ðµâÀº ¼³Ä¡ ¹®¼­¿¡¼­ ¼³¸íÇÑ configureÀÇ --enable-module=shared ¿É¼ÇÀ» »ç¿ëÇÏ¿© DSO·Î ÄÄÆÄÀÏÇÒ ¼ö ÀÖ´Ù. ¸ðµâÀ» mod_foo.so¿Í °°ÀÌ DSO·Î ÄÄÆÄÀÏÇÑÈÄ httpd.conf ÆÄÀÏ¿¡ mod_soÀÇ LoadModule ¸í·É¾î¸¦ »ç¿ëÇÏ¿© ¼­¹ö ½ÃÀ۽à ȤÀº Àç½ÃÀ۽à ±× ¸ðµâÀ» ÀоîµéÀÏ ¼ö ÀÖ´Ù.

    ¾ÆÆÄÄ¡ ¸ðµâ(ƯÈ÷ Á¦»ïÀÚ°¡ ¸¸µç ¸ðµâ)·Î »ç¿ëÇÒ DSO ÆÄÀÏÀ» ½±°Ô ¸¸µé±âÀ§ÇØ apxs (APache eXtenSion)¶ó´Â »õ·Î¿î Áö¿ø ÇÁ·Î±×·¥ÀÌ ÀÖ´Ù. ÀÌ ÇÁ·Î±×·¥Àº ¾ÆÆÄÄ¡ ¼Ò½º Æ®¸® ¹Û¿¡¼­ DSO·Î »ç¿ëÇÒ ¸ðµâÀ» ÄÄÆÄÀÏÇÒ¶§ »ç¿ëÇÑ´Ù. °³³äÀº ½±´Ù. ¾ÆÆÄÄ¡¸¦ ¼³Ä¡ÇÒ¶§ configure¿Í make installÀÌ ¾ÆÆÄÄ¡ C Çì´õÆÄÀÏÀ» ¼³Ä¡Çϰí, DSO ÆÄÀÏÀ» ÄÄÆÄÀÏÇϱâÀ§ÇÑ Ç÷¡Æû ƯÀ¯ÀÇ ÄÄÆÄÀÏ·¯ ¿É¼Ç°ú ¸µÄ¿ ¿É¼ÇÀ» apxs ÇÁ·Î±×·¥¿¡ ±â·ÏÇÑ´Ù. ±×·¡¼­ apxs¸¦ »ç¿ëÇÏ´Â »ç¿ëÀÚ´Â ¾ÆÆÄÄ¡ ¹èÆ÷º» ¼Ò½º Æ®¸®¾øÀÌ, ¶Ç DSO Áö¿øÀ» À§ÇÑ Ç÷¡Æû ƯÀ¯ÀÇ ÄÄÆÄÀÏ·¯ ¿É¼Ç¿Í ¸µÄ¿ ¿É¼Ç¿¡ ½Å°æÀ» ¾²Áö¾Ê°í ÀÚ½ÅÀÇ ¾ÆÆÄÄ¡ ¸ðµâ ¼Ò½º¸¦ ÄÄÆÄÀÏÇÒ ¼ö ÀÖ´Ù.

    top

    »ç¿ë¹ý ¿ä¾à

    Apache 2.2ÀÇ DSO ±â´É¿¡ ´ëÇÑ Âª°í °£·«ÇÑ ¿ä¾àÀÌ´Ù:

    1. ¹èÆ÷º»¿¡ ÀÖ´Â ¾ÆÆÄÄ¡ ¸ðµâÀ» ÄÄÆÄÀÏÇÏ°í ¼³Ä¡ÇÏ´Â °æ¿ì. ¿¹¸¦ µé¾î mod_foo.c¸¦ DSO mod_foo.so·Î:

      $ ./configure --prefix=/path/to/install --enable-foo=shared
      $ make install

    2. Á¦»ïÀÚ°¡ ¸¸µç ¾ÆÆÄÄ¡ ¸ðµâÀ» ÄÄÆÄÀÏÇÏ°í ¼³Ä¡ÇÏ´Â °æ¿ì. ¿¹¸¦ µé¾î mod_foo.c¸¦ DSO mod_foo.so·Î:

      $ ./configure --add-module=module_type:/path/to/3rdparty/mod_foo.c --enable-foo=shared
      $ make install

    3. °øÀ¯ ¸ðµâÀ» ³ªÁß¿¡ »ç¿ëÇϱâÀ§ÇØ ¾ÆÆÄÄ¡¸¦ ±¸¼ºÇÏ´Â °æ¿ì:

      $ ./configure --enable-so
      $ make install

    4. Á¦»ïÀÚ°¡ ¸¸µç ¾ÆÆÄÄ¡ ¸ðµâÀ» ÄÄÆÄÀÏÇÏ°í ¼³Ä¡ÇÏ´Â °æ¿ì. apxs¸¦ »ç¿ëÇÏ¿© ¾ÆÆÄÄ¡ ¼Ò½º Æ®¸® ¹Û¿¡¼­ mod_foo.c¸¦ DSO mod_foo.so·Î:

      $ cd /path/to/3rdparty
      $ apxs -c mod_foo.c
      $ apxs -i -a -n foo mod_foo.la

    ¸ðµç °æ¿ì ÀÏ´Ü °øÀ¯ ¸ðµâÀÌ ÄÄÆÄÀϵǸé, httpd.conf¿¡ LoadModule Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ¾ÆÆÄÄ¡°¡ ±× ¸ðµâÀ» ÀоîµéÀÌ°Ô ¸¸µç´Ù.

    top

    ¹è°æÁö½Ä

    Çö´ëÀûÀÎ À¯´Ð½º·ù¿¡´Â µ¿Àû°øÀ¯°´Ã¼ (DSO)ÀÇ µ¿Àû ¸µÅ·/·Îµù(dynamic linking/loading)À̶ó°í ÇÏ¿©, Ưº°ÇÑ Çü½ÄÀÇ ½ÇÇàÄÚµå Á¶°¢À» ¸¸µé¾î ½ÇÇàÁßÀÎ ½ÇÇàÇÁ·Î±×·¥ÀÇ ÁÖ¼Ò°ø°£¿¡ ÀоîµéÀÌ´Â ¸ÚÁø ±â´ÉÀÌ ÀÖ´Ù.

    º¸Åë µÎ°¡Áö ¹æ¹ýÀ¸·Î ÀоîµéÀÏ ¼ö ÀÖ´Ù. Çϳª´Â ½ÇÇàÇÁ·Î±×·¥ÀÌ ½ÃÀÛÇÒ¶§ ld.so¶ó´Â ½Ã½ºÅÛ ÇÁ·Î±×·¥ÀÌ ÀÚµ¿À¸·Î ÀоîµéÀÌ´Â °æ¿ì°í, ´Ù¸¥ Çϳª´Â ½ÇÇàÁßÀÎ ÇÁ·Î±×·¥ÀÌ dlopen()/dlsym() ½Ã½ºÅÛÈ£Ãâ·Î À¯´Ð½º ·Î´õ(loader)ÀÇ ½Ã½ºÅÛ ÀÎÅÍÆäÀ̽ºÀ» »ç¿ëÇÏ¿© Á÷Á¢ ÀоîµéÀÌ´Â °æ¿ì´Ù.

    ù¹øÂ° °æ¿ì DSO¸¦ º¸Åë °øÀ¯¶óÀ̺귯¸®(shared libraries) ȤÀº DSO ¶óÀ̺귯¸®¶ó°í ºÎ¸£¸ç, ÆÄÀÏÀº libfoo.so³ª libfoo.so.1.2 °°Àº À̸§À» °¡Áø´Ù. À̵éÀº ½Ã½ºÅÛ µð·ºÅ丮(º¸Åë /usr/lib)¿¡ ÀÖ°í, ÄÄÆÄÀϽà ¸µÄ¿ ¸í·É¾î¿¡ -lfoo¸¦ ÁÖ¾î ½ÇÇàÆÄÀϰú ¿¬°áÇÑ´Ù. ÀÌ·¸°Ô Á÷Á¢ ½áÁØ ¶óÀ̺귯¸®´Â ½ÇÇàÆÄÀÏ¿¡ ÂüÁ¶µÇ¿©¼­, ÇÁ·Î±×·¥ÀÌ ½ÃÀÛÇÒ¶§ ¸µÄ¿ ¿É¼Ç -R·Î Á÷Á¢ ÁöÁ¤ÇÑ °æ·Î, ȯ°æº¯¼ö LD_LIBRARY_PATH·Î ÁöÁ¤ÇÑ °æ·Î ȤÀº /usr/lib¿¡¼­ À¯´Ð½º ·Î´õ°¡ libfoo.so¸¦ ãÀ» ¼ö ÀÖ´Ù. ±×·¯¸é ½ÇÇàÇÁ·Î±×·¥ÀÇ (¾ÆÁ÷ ¸øÃ£Àº(unresolved)) ½Éº¼(symbol)À» DSO¿¡¼­ ã°ÔµÈ´Ù.

    DSO´Â º¸Åë ½ÇÇàÇÁ·Î±×·¥ÀÇ ½Éº¼À» ãÁö¾Ê±â ¶§¹®¿¡ (DSO°¡ Àç»ç¿ë°¡´ÉÇÑ ÀϹÝÀûÀÎ ÄÚµå ¶óÀ̺귯¸®À̹ǷÎ) ã±â´Â ¿©±â¼­ ³¡³­´Ù. À¯´Ð½º ·Î´õ°¡ ½Éº¼ ã±â¸¦ ¿ÏÀüÈ÷ ´ã´çÇϹǷΠ½ÇÇàÇÁ·Î±×·¥ÀÌ Á÷Á¢ DSO¿¡¼­ ½Éº¼À» ãÀ» Çʿ䰡 ¾ø´Ù. (»ç½Ç ld.so¸¦ ºÎ¸£´Â ÄÚµå´Â Á¤ÀûÀÌ ¾Æ´Ñ ¸ðµç ½ÇÇàÇÁ·Î±×·¥¿¡ ¸µÅ©µÇ´Â ½ÇÇà½Ã ½ÃÀÛÄÚµåÀÇ ÀϺδÙ.) °øÅëµÈ ¶óÀ̺귯¸® Äڵ带 µ¿ÀûÀ¸·Î ÀоîµéÀÌ´Â ÀåÁ¡Àº ¸íÈ®ÇÏ´Ù. ¶óÀ̺귯¸® Äڵ尡 ¸ðµç ÇÁ·Î±×·¥¿¡ Áߺ¹Çؼ­ ÀúÀåµÇ´Â ´ë½Å libc.so¿Í °°Àº ½Ã½ºÅÛ ¶óÀ̺귯¸®¿¡ Çѹø¸¸ ÀúÀåµÇ±â ¶§¹®¿¡ µð½ºÅ© °ø°£ÀÌ Àý¾àµÈ´Ù.

    µÎ¹øÂ° °æ¿ì DSO¸¦ º¸Åë °øÀ¯°´Ã¼(shared objects) ȤÀº DSO ÆÄÀÏÀ̶ó°í ºÎ¸£°í, (±ÔÄ¢»ó À̸§Àº foo.soÀÌÁö¸¸) ÆÄÀÏÀÇ È®ÀåÀÚ´Â ÀÚÀ¯·Ó´Ù. ÀÌ ÆÄÀϵéÀº º¸Åë ÇÁ·Î±×·¥ ÀÚü µð·ºÅ丮¿¡ À§Ä¡ÇÏ°í ½ÇÇàÇÁ·Î±×·¥¿¡ ÀÚµ¿À¸·Î ¿¬°áµÇÁö ¾Ê´Â´Ù. ´ë½Å ½ÇÇàÇÁ·Î±×·¥Àº ½ÇÇà½Ã dlopen()À» »ç¿ëÇÏ¿© DSO¸¦ ÁÖ¼Ò°ø°£¿¡ Á÷Á¢ Àоîµé¿©¾ß ÇÑ´Ù. À̶§ ½ÇÇàÇÁ·Î±×·¥Àº DSO¿¡¼­ ½Éº¼À» ãÁö ¾Ê´Â´Ù. ´ë½Å ¾Õ¿¡¼­ º» À¯´Ð½º ·Î´õ´Â ÀÚµ¿À¸·Î ½ÇÇàÆÄÀϰú ½ÇÇàÆÄÀÏÀÌ ÀÌ¹Ì ÀоîµéÀÎ DSO ¶óÀ̺귯¸®(ƯÈ÷ Ç×»ó Á¸ÀçÇÏ´Â libc.soÀÇ ¸ðµç ½Éº¼)¿¡¼­ DSOÀÇ (¾ÆÁ÷ ¸øÃ£Àº) ½Éº¼À» ã´Â´Ù. ±×·¡¼­ DSO´Â ¸¶Ä¡ óÀ½ºÎÅÍ ½ÇÇàÇÁ·Î±×·¥¿¡ Á¤ÀûÀ¸·Î ¸µÅ©µÈ°Í°ú °°ÀÌ ½ÇÇàÆÄÀÏÀÇ ½Éº¼À» ¾Ë°ÔµÈ´Ù.

    DSOÀÇ API¸¦ ÀÌ¿ëÇϱâÀ§Çؼ­ ¸¶Áö¸·À¸·Î ½ÇÇàÇÁ·Î±×·¥Àº dlsym()À¸·Î DSO¿¡¼­ ƯÁ¤ ½Éº¼À» ã¾Æ¼­, ¾ÕÀ¸·Î »ç¿ëÇϱâÀ§ÇØ µð½ºÆÐÄ¡(dispatch) Ç¥ µî¿¡ ÀúÀåÇÑ´Ù. ´Ù¸¥ ¸»·Î ½ÇÇàÇÁ·Î±×·¥Àº »ç¿ëÇÒ ¸ðµç ½Çº¼À» Á÷Á¢ ã¾Æ¾ßÇÑ´Ù. ÀÌ·± ±¸Á¶ÀÇ ÀåÁ¡Àº ÇÁ·Î±×·¥ÀÇ ÀϺθ¦ ÇÁ·Î±×·¥ÀÌ ÇÊ¿äÇÒ¶§±îÁö ÀоîµéÀÌÁö ¾Ê¾Æµµ (±×·¡¼­ ¸Þ¸ð¸®¸¦ ³¶ºñÇÏÁö ¾Ê°Ô) µÈ´Ù´Â Á¡ÀÌ´Ù. ±âº» ÇÁ·Î±×·¥ÀÇ ±â´ÉÀ» È®ÀåÇϱâÀ§ÇØ ÇÊ¿äÇÑ °æ¿ì ÀÌ ºÎºÐÀ» µ¿ÀûÀ¸·Î ÀоîµéÀÏ ¼ö ÀÖ´Ù.

    ÀÌ·± DSO ±¸Á¶°¡ ÀÚ¿¬½º·´°Ô º¸ÀÌÁö¸¸, ÃÖ¼ÒÇÑ ¾î·Á¿î Á¡ÀÌ ÇѰ¡ÁöÀÖ´Ù. ÇÁ·Î±×·¥À» È®ÀåÇϱâÀ§ÇØ DSO¸¦ »ç¿ëÇÒ¶§ DSO°¡ ½ÇÇàÇÁ·Î±×·¥ÀÇ ½Éº¼À» ã´Â ÀÏÀÌ´Ù. ¿Ö? DSO°¡ ½ÇÇàÇÁ·Î±×·¥ÀÇ ½Éº¼À» "¿ªÀ¸·Î ã´Â °Í"Àº (¶óÀ̺귯¸®´Â ÀÚ½ÅÀ» »ç¿ëÇÏ´Â ÇÁ·Î±×·¥¿¡ ´ëÇØ ¸ð¸¥´Ù´Â) ¶óÀ̺귯¸® ¼³°è¿¡ ¹ÝÇϸç, ¸ðµç Ç÷¡Æû¿¡¼­ Áö¿øµÇÁö¾Ê°í Ç¥ÁØÈ­µÇÁöµµ ¾Ê¾Ò±â ¶§¹®ÀÌ´Ù. ½ÇÁ¦·Î ½ÇÇàÆÄÀÏÀÇ Àü¿ª½Éº¼(global symbol)Àº º¸Åë ÀͽºÆ÷Æ®(export)µÇÁö ¾Ê±â¶§¹®¿¡ DSO°¡ »ç¿ëÇÒ ¼ö ¾ø´Ù. DSO¸¦ »ç¿ëÇÏ¿© ½ÇÇàÁß ÇÁ·Î±×·¥À» È®ÀåÇÏ·Á¸é ¸µÄ¿¿¡°Ô ¸ðµç Àü¿ª½Éº¼À» ÀͽºÆ÷Æ®Çϵµ·Ï °­Á¦ÇÏ´Â °ÍÀÌ ÁÖµÈ ÇØ°áÃ¥ÀÌ´Ù.

    °øÀ¯¶óÀ̺귯¸®´Â DSO ¹æ½ÄÀÇ ¼³°è¿øÄ¢´ë·Î ÀüÇüÀûÀ̱⶧¹®¿¡ ¿î¿µÃ¼Á¦°¡ Á¦°øÇÏ´Â °ÅÀÇ ¸ðµç Á¾·ùÀÇ ¶óÀ̺귯¸®°¡ »ç¿ëÇÑ´Ù. ¹Ý´ë·Î ¸¹Àº ÇÁ·Î±×·¥Àº ÇÁ·Î±×·¥À» È®ÀåÇϱâÀ§ÇØ °øÀ¯°´Ã¼¸¦ »ç¿ëÇÏÁö ¾Ê´Â´Ù.

    1998³â ½ÇÇàÁß ½ÇÁ¦·Î ±â´ÉÀ» È®ÀåÇϱâÀ§ÇØ DSO ±¸Á¶¸¦ »ç¿ëÇÑ ¼ÒÇÁÆ®¿þ¾î ÆÐŰÁö´Â (XS ±¸Á¶¿Í DynaLoader ¸ðµâÀ» »ç¿ëÇÑ) Perl 5, Netscape Server µîÀ¸·Î µå¹°¾ú´Ù. ¾ÆÆÄÄ¡´Â ÀÌ¹Ì ±â´ÉÀ» È®ÀåÇϱâÀ§ÇØ ¸ðµâ °³³äÀ» »ç¿ëÇß°í ¿ÜºÎ ¸ðµâÀ» ¾ÆÆÄÄ¡ Çٽɱâ´É¿¡ ¿¬°áÇϱâÀ§ÇØ ³»ºÎÀûÀ¸·Î µð½ºÆÐÄ¡¸ñ·ÏÀ» ÀÌ¿ëÇÑ Á¢±Ù¹æ¹ýÀ» »ç¿ëÇ߱⶧¹®¿¡ 1.3 ¹öÀüºÎÅÍ ÀÌ ´ë¿­¿¡ ÇÕ·ùÇß´Ù. ±×·¡¼­ ¾ÆÆÄÄ¡´Â ½ÇÇàÁß ¸ðµâÀ» ÀоîµéÀ̴µ¥ DSO¸¦ »ç¿ëÇϵµ·Ï ¿î¸íÁö¿öÁ³´Ù.

    top

    Àå´ÜÁ¡

    ¾Õ¿¡¼­ ¸»ÇÑ DSO¸¦ »ç¿ëÇÏ¸é ´ÙÀ½°ú °°Àº ÀåÁ¡ÀÌ ÀÖ´Ù:

    • ½ÇÁ¦ ¼­¹ö ÇÁ·Î¼¼½º°¡ ÄÄÆÄÀϽà configure ¿É¼Ç´ë½Å httpd.confÀÇ LoadModuleÀ» »ç¿ëÇÏ¿© ½ÇÇàÁß¿¡ °áÇյǹǷΠ¼­¹ö ÆÐŰÁö ½ÇÇàÀÌ ´õ À¯¿¬ÇÏ´Ù. ¿¹¸¦ µé¾î ÇѹøÀÇ ¾ÆÆÄÄ¡ ¼³Ä¡¸¸À¸·Î ´Ù¸¥ ¼­¹ö(Ç¥ÁØ ¹öÀü°ú SSL ¹öÀü, ÃÖ¼ÒÈ­ ¹öÀü°ú ±â´ÉÃß°¡ ¹öÀü [mod_perl, PHP3] µî)¸¦ ½ÇÇàÇÒ ¼ö ÀÖ´Ù.
    • ¼­¹ö´Â ¼³Ä¡ÈÄ¿¡µµ Á¦»ïÀÚ°¡ ¸¸µç ¸ðµâÀ» »ç¿ëÇÏ¿© ½±°Ô È®ÀåÇÒ ¼ö ÀÖ´Ù. ÃÖ¼ÒÇÑ ±â¾÷ÀÇ ÆÐŰÁö Á¦ÀÛÀÚ´Â ¾ÆÆÄÄ¡ ÇÙ½É ÆÐŰÁö¿Í º°µµ·Î PHP3, mod_perl, mod_fastcgi µîÀ» Ãß°¡ ÆÐŰÁö·Î ¸¸µé ¼ö À־ Å« À̵æÀÌ´Ù.
    • DSO¿Í apxs¸¦ °¡Áö°í ¾ÆÆÄÄ¡ ¼Ò½º Æ®¸® ¹Û¿¡¼­ ÀÛ¾÷Çϰí apxs -i¿Í apachectl restart ¸í·É¾î¸¸À¸·Î ÇöÀç °³¹ßÇÑ ¸ðµâÀÇ »õ ¹öÀüÀ» ½ÇÇàÁßÀÎ ¾ÆÆÄÄ¡ ¼­¹ö¿¡ ¹Ý¿µÇÒ ¼ö À־ ´õ ½±°Ô ¾ÆÆÄÄ¡ ¸ðµâÀ» °³¹ßÇÒ ¼ö ÀÖ´Ù.

    DSO´Â ´ÙÀ½°ú °°Àº ´ÜÁ¡ÀÌ ÀÖ´Ù:

    • ÇÁ·Î±×·¥ÀÇ ÁÖ¼Ò°ø°£¿¡ Äڵ带 µ¿ÀûÀ¸·Î ÀоîµéÀÌ´Â ±â´ÉÀ» Áö¿øÇÏÁö¾Ê´Â ¿î¿µÃ¼Á¦°¡ Àֱ⠶§¹®¿¡ ¸ðµç Ç÷¡Æû¿¡¼­ DSO¸¦ »ç¿ëÇÒ ¼ö ¾ø´Ù.
    • À¯´Ð½º ·Î´õ°¡ ½Éº¼À» ã¾Æ¾ßÇϱ⠶§¹®¿¡ ¼­¹ö ½ÃÀÛÀÌ ¾à 20% Á¤µµ ´Ê¾îÁø´Ù.
    • ¼­¹ö´Â À§Ä¡µ¶¸³ÄÚµå(position independent code, PIC) ¶§¹®¿¡ Àý´ëÁÖ¼ÒÁöÁ¤(absolute addressing)º¸´Ù ´À¸° »ó´ëÁÖ¼ÒÁöÁ¤(relative addressing)ÀÇ º¹ÀâÇÑ ¾î¼Àºí·¯ ±â¹ýÀÌ ÇÊ¿äÇϹǷΠ¾î¶² Ç÷¡Æû¿¡¼­ ½ÇÇà½Ã ¾à 5% Á¤µµ ´Ê´Ù.
    • DSO ¸ðµâÀ» ´Ù¸¥ DSO±â¹Ý ¶óÀ̺귯¸®(ld -lfoo)¿¡ ¸µÅ©ÇÒ ¼ö ¾ø´Â Ç÷¡ÆûÀÌ Àֱ⶧¹®¿¡ (¿¹¸¦ µé¾î ELF±â¹Ý Ç÷¡ÆûÀº Áö¿øÇÏÁö¸¸ a.out±â¹Ý Ç÷¡ÆûÀº º¸Åë ÀÌ ±â´ÉÀ» Áö¿øÇÏÁö ¾Ê´Â´Ù) ¸ðµç Á¾·ùÀÇ ¸ðµâ¿¡ DSO¸¦ »ç¿ëÇÒ ¼ö ¾ø´Ù. ´Ù¸¥ ¸»·Î DSO ÆÄÀÏ·Î ÄÄÆÄÀÏÇÏ´Â ¸ðµâÀº ¾ÆÆÄÄ¡ Çٽɰú ¾ÆÆÄÄ¡ ÇÙ½ÉÀÌ »ç¿ëÇÏ´Â C ¶óÀ̺귯¸®(libc)¿Í ´Ù¸¥ µ¿Àû/Á¤Àû ¶óÀ̺귯¸®, À§Ä¡µ¶¸³Äڵ带 ´ã°í ÀÖ´Â Á¤Àû ¶óÀ̺귯¸® ¾ÆÄ«À̺ê(libfoo.a)ÀÇ ½Éº¼¸¸À» »ç¿ëÇÒ ¼ö ÀÖ´Ù. ´Ù¸¥ Äڵ带 »ç¿ëÇÏ·Á¸é ¾ÆÆÄÄ¡ ÇÙ½ÉÀÌ ±×°ÍÀ» ÂüÁ¶ÇÏ´øÁö, dlopen()À¸·Î Á÷Á¢ Äڵ带 Àоîµé¿©¾ß ÇÑ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/bind.html.ko.euc-kr0000644000000000000500000002571213412755316017056 0ustar rootsrc ÁÖ¼Ò¿Í Æ÷Æ® ÁöÁ¤ (Binding) - Apache HTTP Server Version 2.4
    <-

    ÁÖ¼Ò¿Í Æ÷Æ® ÁöÁ¤ (Binding)

    °¡´ÉÇÑ ¾ð¾î:  de  |  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.

    ¾ÆÆÄÄ¡°¡ ƯÁ¤ ÁÖ¼Ò¿Í Æ÷Æ®¿¡¼­ ¼­ºñ½ºÇϵµ·Ï ¼³Á¤Çϱâ.

    top

    °³¿ä

    ¾ÆÆÄÄ¡¸¦ ½ÃÀÛÇÏ¸é ¾ÆÆÄÄ¡´Â ÄÄÇ»ÅÍÀÇ ¾î¶² Æ÷Æ®¿Í ÁÖ¼Ò¿¡ ¿¬°áÇÏ¿©, µé¾î¿À´Â ¿äûÀ» ±â´Ù¸°´Ù. ±âº»ÀûÀ¸·Î ¾ÆÆÄÄ¡´Â ÄÄÇ»ÅÍÀÇ ¸ðµç ÁÖ¼Ò¿¡¼­ ±â´Ù¸°´Ù. ±×·¯³ª ¾ÆÆÄÄ¡°¡ ƯÁ¤ Æ÷Æ®³ª ¼±ÅÃÇÑ ÁÖ¼Ò¸¸À» ±â´Ù¸®°Ô ÇØ¾ßÇÒ °æ¿ì°¡ ÀÖ´Ù. ¶Ç ÀÌ ¹®Á¦´Â ¾ÆÆÄÄ¡°¡ ¾î¶»°Ô ´Ù¸¥ IP ÁÖ¼Ò, È£½ºÆ®¸í, Æ÷Æ®¿¡ ¹ÝÀÀÇÒÁö¸¦ °áÁ¤ÇÏ´Â °¡»óÈ£½ºÆ® ±â´É°úµµ °ü·ÃµÇÀÖ´Ù.

    Listen Áö½Ã¾î´Â ¼­¹ö°¡ ƯÁ¤ Æ÷Æ®³ª ÁÖ¼Ò¿Í Æ÷Æ® Á¶ÇÕ¿¡¼­¸¸ ¿äûÀ» ¹Þ°Ô ÇÑ´Ù. Listen Áö½Ã¾î¿¡ Æ÷Æ® ¹øÈ£¸¸ ÁöÁ¤Çϸé, ¼­¹ö´Â ¸ðµç ÀÎÅÍÆäÀ̽º¿¡¼­ ÁöÁ¤ÇÑ Æ÷Æ®¸¦ ±â´Ù¸°´Ù. ¿©·¯ Listen Áö½Ã¾î·Î ±â´Ù¸± ¿©·¯ ÁÖ¼Ò¿Í Æ÷Æ®¸¦ ÁöÁ¤ÇÒ ¼öµµ ÀÖ´Ù. ¼­¹ö´Â ¿­°ÅÇÑ ÁÖ¼Ò¿Í Æ÷Æ®·Î ¿äûÀÌ µé¾î¿À¸é ÀÀ´äÇÑ´Ù.

    ¿¹¸¦ µé¾î, ¼­¹ö°¡ 80¹ø°ú 8000¹ø Æ÷Æ® ¸ðµÎ¿¡¼­ ¿¬°áÀ» ¹Þµµ·Ï ÇÏ·Á¸é:

    Listen 80
    Listen 8000

    ¼­¹ö°¡ ÁöÁ¤ÇÑ µÎ ÀÎÅÍÆäÀ̽º¿Í Æ÷Æ®¿¡¼­ ¿¬°áÀ» ±â´Ù¸®µµ·Ï ÇÏ·Á¸é,

    Listen 192.0.2.1:80
    Listen 192.0.2.5:8000

    IPv6 ÁÖ¼Ò´Â ´ÙÀ½°ú °°ÀÌ ´ë°ýÈ£·Î ¹­¾î¾ß ÇÑ´Ù:

    Listen [2001:db8::a00:20ff:fea7:ccea]:80

    top

    IPv6¿¡¼­ Ưº°È÷ °í·ÁÇÒ Á¡

    IPv6¸¦ ±¸ÇöÇÑ Ç÷¡ÆûÀÌ ´Ã°í ÀÖ°í APRÀÌ À̵é Ç÷¡Æû ´ëºÎºÐ¿¡¼­ IPv6¸¦ Áö¿øÇϱ⶧¹®¿¡, ¾ÆÆÄÄ¡´Â IPv6 ¼ÒÄÏÀ» ÇÒ´çÇÏ¿© IPv6·Î ¹ÞÀº ¿äûÀ» ó¸®ÇÒ ¼ö ÀÖ´Ù.

    ¾ÆÆÄÄ¡ °ü¸®ÀÚ¿¡°Ô º¹ÀâÇÑ ºÎºÐÀº IPv6 ¼ÒÄÏÀÌ IPv4 ¿¬°á°ú IPv6 ¿¬°áÀ» ¸ðµÎ ó¸®ÇÒ ¼ö ÀÖ´À³Ä´Â Á¡ÀÌ´Ù. ´ëºÎºÐÀÇ Ç÷¡Æû¿¡¼­´Â IPv4-´ëÀÀ(mapped) IPv6 ÁÖ¼Ò¸¦ »ç¿ëÇÏ¿© IPv6 ¼ÒÄÏ¿¡¼­ IPv4 ¿¬°áÀ» ¹ÞÁö¸¸, FreeBSD¿Í NetBSD¿Í OpenBSDÀº ½Ã½ºÅÛÀüü Á¤Ã¥¶§¹®¿¡ ±âº»ÀûÀ¸·Î Çã¿ëÇÏÁö ¾Ê´Â´Ù. ±×·¯³ª ±âº»ÀûÀ¸·Î Çã¿ëÇÏÁö¾Ê´Â ½Ã½ºÅÛÀÌ¶óµµ ¾ÆÆÄÄ¡¸¦ À§ÇØ Æ¯º°ÇÑ ¼³Á¤ ÆÄ¶ó¹ÌÅÍ·Î º¯°æÇÒ ¼ö ÀÖ´Ù.

    ¹Ý¸é ¸®´ª½º¿Í Tru64 °°Àº ÀϺΠÇ÷¡Æû¿¡¼­ IPv4¿Í IPv6À» ¸ðµÎ ó¸®ÇÏ·Á¸é ´ëÀÀ ÁÖ¼Ò¸¦ »ç¿ëÇØ¾ß¸¸ ÇÑ´Ù. ¾ÆÆÄÄ¡°¡ ÃÖ¼ÒÇÑÀÇ ¼ÒÄÏÀ» »ç¿ëÇÏ¿© IPv4 ¿¬°á°ú IPv6 ¿¬°áÀ» ¸ðµÎ ¹Þµµ·ÏÇÏ·Á¸é, IPv4-´ëÀÀ IPv6 ÁÖ¼Ò¸¦ »ç¿ëÇϰí configure ¿É¼Ç --enable-v4-mapped¸¦ ÁöÁ¤ÇÑ´Ù.

    --enable-v4-mapped´Â FreeBSD, NetBSD, OpenBSD¸¦ Á¦¿ÜÇÑ ¸ðµç Ç÷¡Æû¿¡¼­ ±âº»°ªÀ̰í, ¾Æ¸¶µµ ´ç½ÅÀÇ ¾ÆÆÄÄ¡µµ ¸¶Âù°¡ÁöÀÏ °ÍÀÌ´Ù.

    Ç÷¡Æû°ú APRÀÇ Áö¿ø¿©ºÎ¿Í °ü°è¾øÀÌ ¾ÆÆÄÄ¡°¡ IPv4 ¿¬°á¸¸À» ¹Þµµ·ÏÇÏ·Á¸é, ´ÙÀ½ ¿¹Á¦¿Í °°ÀÌ ¸ðµç Listen Áö½Ã¾î¿¡ IPv4 ÁÖ¼Ò¸¦ »ç¿ëÇÑ´Ù:

    Listen 0.0.0.0:80
    Listen 192.0.2.1:80

    Ç÷¡Æû¿¡¼­ Áö¿øÇÏ¸ç ¾ÆÆÄÄ¡°¡ ¼­·Î ´Ù¸¥ ¼ÒÄÏÀ¸·Î IPv4 ¿¬°á°ú IPv6 ¿¬°áÀ» ¹Þµµ·ÏÇÏ·Á¸é (Áï IPv4-´ëÀÀ ÁÖ¼Ò¸¦ »ç¿ëÇÏÁö ¾ÊÀ¸·Á¸é), configure ¿É¼Ç --disable-v4-mapped¸¦ ÁöÁ¤ÇÑ´Ù. --disable-v4-mapped´Â FreeBSD, NetBSD, OpenBSD¿¡¼­ ±âº»°ªÀÌ´Ù.

    top

    °¡»óÈ£½ºÆ®¿Í ¾î¶»°Ô ¿¬°üµÇ³ª

    ListenÀº °¡»óÈ£½ºÆ®¸¦ ¸¸µéÁö ¾Ê´Â´Ù. ÀÌ´Â ´ÜÁö ÁÖ¼­¹ö°¡ ¾î¶² ÁÖ¼Ò¿Í Æ÷Æ®¸¦ ±â´Ù¸±Áö¸¸ ¾Ë·ÁÁØ´Ù. <VirtualHost> Áö½Ã¾î¸¦ »ç¿ëÇÏÁö ¾ÊÀ¸¸é, ¼­¹ö´Â ¹ÞÀº ¸ðµç ¿äûÀ» ¶È°°ÀÌ Ã³¸®ÇÑ´Ù. ±×·¯³ª <VirtualHost>·Î ¿©·¯ ÁÖ¼Ò¿Í Æ÷Æ®¿¡ ´ëÇØ ´Ù¸¥ ÇൿÀ» ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù. °¡»óÈ£½ºÆ®¸¦ ¸¸µé·Á¸é ¸ÕÀú ¼­¹ö¿¡°Ô »ç¿ëÇÒ ÁÖ¼Ò¿Í Æ÷Æ®¸¦ ¾Ë·ÁÁà¾ß ÇÑ´Ù. ±×¸®°í ƯÁ¤ ÁÖ¼Ò¿Í Æ÷Æ®¿¡ ´ëÇÑ °¡»óÈ£½ºÆ®ÀÇ ÇൿÀ» ÁöÁ¤ÇÒ <VirtualHost> ¼½¼ÇÀÌ ÇÊ¿äÇÏ´Ù. ÁÖ¼­¹ö°¡ ±â´Ù¸®Áö¾Ê´Â ÁÖ¼Ò¿Í Æ÷Æ®¸¦ »ç¿ëÇÏ´Â <VirtualHost>´Â Á¢±ÙÇÒ ¼ö ¾øÀ½À» ÁÖÀÇÇ϶ó.

    °¡´ÉÇÑ ¾ð¾î:  de  |  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/configuring.html0000644000000000000500000000111113362070302016627 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: configuring.html.de Content-Language: de Content-type: text/html; charset=ISO-8859-1 URI: configuring.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: configuring.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: configuring.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: configuring.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: configuring.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/expr.html0000644000000000000500000000031413362070302015277 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: expr.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: expr.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/filter.html0000644000000000000500000000105313362070302015607 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: filter.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: filter.html.es Content-Language: es Content-type: text/html; charset=ISO-8859-1 URI: filter.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: filter.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: filter.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: filter.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/dso.html.tr.utf80000644000000000000500000005276013447004010016430 0ustar rootsrc Devingen Paylaşımlı Nesne Desteği - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Devingen Paylaşımlı Nesne Desteği

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    Apache HTTP Sunucusu modüler bir program olup, yönetici sadece bir grup modül seçerek sunucuya işlevsellik ekleyebilir. Modüller, Devingen Paylaşımlı Nesneler (DSO - Dynamic Shared Object) halinde httpd programından ayrı olarak derlenir. DSO modülleri sunucunun derlenmesi sırasında derlenebileceği gibi ayrı olarak derlenip daha sonra Apache Eklenti Aracı (Apache Extension Tool) apxs programı kullanılarak da sunucuya eklenebilir.

    Bu belgede DSO modüllerinin kullanımının yanında teorisine de değinilecektir.

    top

    Gerçeklenim

    Apache httpd modüllerini yüklemek için DSO desteği, Apache httpd çekirdeğine durağan olarak ilintilenerek derlenmiş olan mod_so adında bir modül tarafından sağlanır. core modülünden başka, bir DSO modülü olamayan tek modül mod_so modülüdür. Apache ile dağıtılan hemen hemen tüm diğer Apache modülleri bir DSO modülüne yerleştirilebilir. Derlenmiş modüller mod_filanca.so biçeminde birer DSO ismi alırlar ve her biri istenirse httpd.conf dosyasında mod_so modülünün LoadModule yönergesiyle belirtilerek sunucu başlatılırken veya yeniden başlatılırken sunucuya yüklenebilir.

    Kurulum belgesinde açıklandığı gibi, her DSO modülü configure programının --enable-mods-static seçeneği ile devredışı bırakılabilir.

    Apache httpd modülleri için (özellikle üçüncü parti modüller için) DSO dosyası üretimini kolaylaştırmak amacıyla apxs (APache eXtenSion) adında yeni bir destek programı kullanılmaktadır. Bu program Apache httpd modüllerini Apache httpd kaynak ağacından ayrı olarak derlemek için kullanılabilir. Fikir basittir: Apache HTTP Sunucusu derlenirken DSO dosyalarını derlemek için platforma bağımlı derleyici ve ilintileyici seçenekleri apxs programının içine konur ve make install ile kurulum sırasında Apache httpd C başlık dosyaları da kurulur. Böylece kullanıcı Apache httpd dağıtımının kaynak ağacına ihtiyaç duymadan ve platforma bağımlı derleyici ve ilintileyici seçeneklerini bilmek zorunda kalmadan istediği Apache httpd modülünü apxs programını kullanarak derleyebilir.

    top

    Kullanım Özeti

    Apache HTTP Sunucusu 2.x’in DSO özelliklerine bir giriş olarak burada kısaca bir bilgi vermekle yetinilecektir:

    1. Kaynak dosyası mod_filanca.c dosyasında dağıtılan bir özgün Apache htpd modülünü mod_filanca.so isminde bir DSO modülü olarak derlemek ve kurmak için şöyle yapılır:

      $ ./configure --prefix=/kurulum/yeri --enable-filanca
      $ make install

    2. Apache HTTP Sunucusunu tüm modüller etkin olarak derleyebilirsiniz. Fakat sunucunun başlatılması sırasında sadece temel modüller yüklenir. Daha sonra httpd.conf içindeki LoadModule yönergelerini etkin veya etkisiz hale getirerek yüklenecek modülleri değiştirebilirsiniz.

      $ ./configure --enable-mods-shared=all
      $ make install

    3. Bazı modüller sadece geliştiriciler içindir ve bunlar tüm modüllerin derlenmesini (all) seçseniz bile derlenmeyecektir. Geliştirici modülleri dehil tüm modülleri derlemek isterseniz reallyall kullanınız. Ek olarak, derlenmiş modüller için kullanılan LoadModule yönergelerinin tamamını --enable-load-all-modules derleme seçeneği ile etkin kılabilirsiniz.

      $ ./configure --enable-mods-shared=reallyall --enable-load-all-modules
      $ make install

    4. Kaynak dosyası mod_filanca.c dosyasında dağıtılan bir üçüncü parti Apache httpd modülü mod_filanca.so isminde bir DSO modülü olarak Apache httpd kaynak ağacının dışında apxs kullanarak derlemek ve kurmak için şöyle yapılır:

      $ cd /bir/kurulum/yeri
      $ apxs -c mod_filanca.c
      $ apxs -aci filanca mod_filanca.la

    Tüm durumlarda derlenen paylaşımlı modülü Apache httpd’nin etkin kılabilmesi için httpd.conf dosyasında o modül için bir LoadModule yönergesi bulunmalıdır.

    Ayrıntılı bilgi için apxs belgelerine bakınız.

    top

    Artalan Bilgisi

    Günümüzün Unix türevlerinde var olan bir mekanizma sayesinde çalıştırılabilir bir programın adres uzayına çalışma anında yüklenmek veya ilintilenmek üzere Devingen Paylaşımlı Nesneler (DSO - Dynamic Shared Object) adı verilen, özel bir biçem kullanarak kodlanmış program parçaları oluşturulabilir.

    Bu yükleme normalde iki yolla yapılabilir: Ya çalıştırılabilir programın başlatılması sırasında yüklenen ld.so adlı bir sistem programınının devingen olarak yüklenmesi ile ya da çalıştırılabilir programın içinden Unix yükleyicisine programsal sistem arayüzü sağlayan dlopen()/dlsym() sistem çağrılarının elle yapılması suretiyle.

    İlk yöntemde kullanılan DSO’lara genelde paylaşımlı kütüphaneler veya DSO kütüphaneleri adı verilir ve bunların dosyaları libfilanca.so veya libfilanca.so.1.2 biçiminde isimlendirilir. Belli bir sistem dizininde (normalde /usr/lib) bulunurlar ve derleme sırasında ilintileyici komutuna -lfilanca şeklinde belirtilerek çalıştırılabilir programla ilintilenirler. Doğrudan çalıştırılabilir koda eklenen bu kodlar Unix yükleyicisinin programın başlatılması sırasında kütüphaneyi /usr/lib altında libfilanca.so adıyla bulabilmesini sağlar. Kütüphanelerin aranacağı yerler ya -R gibi bir ilintileyici seçeneği ile koda eklenir ya da arama yolları LD_LIBRARY_PATH ortam değişkeni aracılığıyla yapılandırılır. Böylece çalıştırılabilir programda henüz çözümlenmemiş simgeler DSO içinde bulunarak çözümlenebilir.

    Çalıştırılabilir program içindeki simgelere normalde DSO içinden atıfta bulunulmaz (genel kod kütüphanesinin başka programlarca da kullanılması nedeniyle). Bu bakımdan DSO tarafında böyle bir çözümleme yapılmaz. Çalıştırılabilir program da DSO’daki simgeleri kendisi çözümlemeye uğraşmaz, bu işlemlerden tamamen Unix yükleyicisi (ld.so) sorumludur. (Aslında, ld.so’yu çağıracak kod, her çalıştırılabilir programın içine ilintilenmiş (durağan değil) başlatma kodunun bir parçasıdır.) Programlar tarafından ortaklaşa kullanılan kütüphanelerin devingen olarak yüklenmesinin sebebi basittir: Kütüphane kodu libc.so gibi bir sistem kütüphanesine bir kere kaydedilip disk alanından yer kazanılmış olur.

    İkinci yöntemde kullanılan DSO’lara yine paylaşımlı kütüphaneler veya DSO kütüphaneleri adı verilir fakat bunların dosyaları geçerli kabule göre filanca.so gibi isimlendirilse de genelde keyfi olarak seçilen bir dosya uzantısı kullanılarak isimlendirilirler. Bu dosyalar genellikle programa özel bir dizinde dururlar ve bu dosyaları kullanacak olan çalıştırılabilir programla aralarında özdevimli olarak bağ kurulmamıştır. Bunun yerine, çalıştırılabilir program DSO’yu çalışma anında dlopen() sayesinde kendi adres uzayına ekler. Çalıştırılabilir program için DSO’daki simgeler bu sırada çözümlenmez. Özdevimli olarak devreye giren Unix yükleyicisi, (varsa) artakalan simgeleri, çalıştırılabilir ihraç edilen simge kümelerini (ve özellikle her yerde hazır ve nazır libc.so içindeki tüm simgeleri) kullanarak çözümler. Bu yolla DSO, çalıştırılabilir programın simge kümesi bilgilerini sanki kendisine baştan durağan olarak ilintilenmiş gibi ulaşabilir.

    Son olarak, DSO’nun programlama arayüzünün getirilerinden yararlanmak amacıyla çalıştırılabilir program, daha sonra dağıtım tabloları vb. yerlerde kullanmak üzere dlsym() üzerinden DSO’daki belli simgeleri çözümlemek zorundadır. Başka bir deyişle: Çalıştırılabilir program ihtiyaç duyduğu her simgeyi kullanmak için kendisi çözümleme yapmak zorundadır. Böyle bir mekanizmanın getirisi, programın isteğe bağlı parçalarının gerekli olana kadar yüklenmemesidir (böylece daha az bellek alanı kullanılır). Gerektiği zaman programın işlevselliğini arttırmak amacıyla bu parçalar devingen olarak programa yüklenebilir.

    DSO mekanizmasının bu basit gibi görünen işleyişinde zorluk içeren bir adım şudur (başkaları da olabilir): Bir programın işlevselliğini genişletmek için DSO kullanılırken (ikinci yöntem) çalıştırılabilir programdan DSO için simgelerin çözümlenmesi. Zorluğun sebebi, "tersine çözümleme" yapılmasıdır; çalıştırılabilir programın simge kümesindeki DSO simgeleri kütüphane tasarımına aykırı bir şekilde çözümlenir ve bu uygulama tüm platformlarda hazır olarak desteklenmediği gibi standartlaşmış da değildir. Geçer uygulamada çalıştırılabilir programın evrensel simgeleri çoğunlukla yeniden dışa verilmez ve bu bakımdan bir DSO içinde kullanılmaları uygun değildir. Esas sorun, çalıştırılabilir bir programın işlevselliğini çalışma anında genişletmek için DSO kullanımı sırasında ilintileyicinin tüm evrensel simgeleri dışa vermesini zorlamanın bir yolunu bulmaktır.

    Paylaşımlı kütüphane yaklaşımı bu bakımdan türünün tek örneğidir, çünkü DSO mekanizması özellikle bunun için tasarlanmıştır, dolayısıyla işletim sisteminin sağladığı hemen hemen tüm kütüphaneler için kullanılabilir.

    top

    Getiriler ve Götürüler

    Yukarıda bahsedilen DSO’ya dayalı özelliklerin getirileri şunlardır:

    • Sunucu paketi çalışma anında daha esnektir çünkü, sunucuyu oluÅŸturan parçalar derleme sırasında configure seçenekleriyle birleÅŸtirilmek yerine httpd.conf içinde LoadModule yönergeleri sayesinde çalışma anında birleÅŸtirilebilmektedir. Bu yolla, örneÄŸin tek bir Apache kurulumuyla birbirinden farklı yapılandırmalara sahip çok sayıda sunucu çalıştırmak mümkündür. (standart veya SSL sürümü; basitleÅŸtirilmiÅŸ veya devingen sürümü [mod_perl, PHP3], vs.)
    • Sunucu paketi kurulumdan sonra bile üçüncü parti modüllerle kolayca geniÅŸletilebilir. Bu özellikle, bir Apache temel paketinin yanında PHP, mod_perl, mod_security gibi ek paketler oluÅŸturan paket dağıtıcılarına büyük yarar saÄŸlar.
    • Yeni Apache httpd modülleri için daha kolay prototip geliÅŸtirilebilir: Modül kaynak kodunu DSO/apxs çifti sayesinde Apache httpd kaynak aÄŸacının dışında derleyip modülün yeni bir sürümünü bir apxs -i komutunun ardından apachectl restart yaparak çalışan bir Apache HTTP Sunucusunda denemek daha kolay hale getirilmiÅŸtir.

    DSO kullanımının götürüleri ise şunlardır:

    • İlk yüklemede %20 yavaÅŸlama: Unix yükleyicisi simgeleri çözümlemek zorunda olduÄŸundan sunucu ilk baÅŸlatılırken yaklaşık %20 daha yavaÅŸ faaliyete geçer.
    • Çalışma sırasında % 5 yavaÅŸlama: Konumdan bağımsız kodun (PIC - Position Independent Code) göreli adresleme için karmaşık oyunlara girmesi ve bunun mutlak adresleme kadar hızlı olmaması nedeniyle sunucu bazı platformlarda çalışma anında yaklaşık %5 daha yavaÅŸ çalışabilir.
    • DSO'nun tüm modüller için uygun olmaması: DSO modülleri bazı platformlarda diÄŸer DSO temelli kütüphanelerle ilintilenemediÄŸinden (ld -lfilanca) DSO mekanizmasını tüm modül türleri için kullanamazsınız (örneÄŸin a.out temelli platformlar bu iÅŸlevselliÄŸi ELF temelli platformlar kadar iyi saÄŸlamaz). BaÅŸka bir deyiÅŸle, DSO dosyaları olarak derlenmiÅŸ modüllerin kullanabileceÄŸi simgeler ya Apache httpd temel kodunda vardır ya Apache httpd temel kodunun kullandığı C kütüphanesinde (libc) ve diÄŸer duraÄŸan ve devingen kütüphanelerde vardır ya da konumdan bağımsız kodu içeren duraÄŸan kütüphane arÅŸivlerinde (libfilanca.a) vardır. DiÄŸer modülleri kullanmak için tek ÅŸansınız ya Apache httpd çekirdeÄŸinin modüle bir atıf içermesini saÄŸlamak ya da modül kodunu dlopen() vasıtasıyla yüklemektir.

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/new_features_2_0.html.ru.koi8-r0000644000000000000500000004217713412755316021235 0ustar rootsrc ïÂÚÏÒ ÎÏ×ÙÈ ×ÏÚÍÏÖÎÏÓÔÅÊ × Apache 2.0 - HTTP ÓÅÒ×ÅÒ Apache ÷ÅÒÓÉÑ 2.4
    <-

    ïÂÚÏÒ ÎÏ×ÙÈ ×ÏÚÍÏÖÎÏÓÔÅÊ × Apache 2.0

    Available Languages:  de  |  en  |  fr  |  ja  |  ko  |  pt-br  |  ru  |  tr 

    This translation may be out of date. Check the English version for recent changes.

    üÔÏÔ ÄÏËÕÍÅÎÔ ÏÐÉÓÙ×ÁÅÔ ÏÓÎÏ×ÎÙÅ ÒÁÚÌÉÞÉÑ ÍÅÖÄÕ ×ÅÒÓÉÑÍÉ 1.3 É 2.0 HTTP ÓÅÒ×ÅÒÁ Apache

    top

    õÌÕÞÛÅÎÉÑ × ÑÄÒÅ ÓÅÒ×ÅÒÁ

    íÎÏÇÏÐÏÔÏÞÎÏÓÔØ × UNIX
    îÁ UNIX ÓÉÓÔÅÍÁÈ, ËÏÔÏÒÙÅ ÐÏÄÄÅÒÖÉ×ÁÀÔ ÐÏÔÏËÉ (ÎÉÔÉ) ÓÔÁÎÄÁÒÔÁ POSIX, Apache ÔÅÐÅÒØ ÍÏÖÅÔ ×ÙÐÏÌÎÑÔØÓÑ × ÇÉÂÒÉÄÎÏÍ ÍÎÏÇÏÐÒÏÃÅÓÓÏ×Ï - ÍÎÏÇÏÐÏÔÏÞÎÏÍ ÒÅÖÉÍÅ. üÔÏ ÓÐÏÓÏÂÓÔ×ÕÅÔ ÒÁÓÛÉÒÑÅÍÏÓÔÉ ÓÉÓÔÅÍÙ ÄÌÑ ÍÎÏÇÉÈ, ÎÏ ÎÅ ÄÌÑ ×ÓÅÈ ÓÐÏÓÏÂÏ× ËÏÎÆÉÇÕÒÉÒÏ×ÁÎÉÑ.
    îÏ×ÁÑ ÓÉÓÔÅÍÁ ÓÂÏÒËÉ
    óÉÓÔÅÍÁ ÓÂÏÒËÉ ÂÙÌÁ ÐÏÌÎÏÓÔØÀ ÉÚÍÅÎÅÎÁ, É ÔÅÐÅÒØ ÏÓÎÏ×Ù×ÁÅÔÓÑ ÎÁ autoconf É libtool. üÔÏ ÄÅÌÁÅÔ ÐÒÏÃÅÓÓ ËÏÎÆÉÇÕÒÉÒÏ×ÁÎÉÑ Apache ÂÏÌÅÅ ÐÏÈÏÖÉÍ ÎÁ ÐÏÄÏÂÎÙÊ ÐÒÏÃÅÓÓ × ÄÒÕÇÉÈ ÐÒÏÇÒÁÍÍÎÙÈ ÐÒÏÄÕËÔÁÈ.
    ðÏÄÄÅÒÖËÁ ÒÁÚÌÉÞÎÙÈ ÐÒÏÔÏËÏÌÏ×
    Apache ÔÅÐÅÒØ ÉÍÅÅÔ ÓÐÅÃÉÁÌØÎÕÀ ÉÎÆÒÁÓÔÒÕËÔÕÒÕ, ÓÐÏÓÏÂÎÕÀ ÏÂÓÌÕÖÉ×ÁÔØ ÒÁÚÌÉÞÎÙÅ ÐÒÏÔÏËÏÌÙ. íÏÄÕÌØ mod_echo ÂÙÌ ÎÁÐÉÓÁÎ × ËÁÞÅÓÔ×Å ÐÒÉÍÅÒÁ ÜÔÏÍÕ.
    õÌÕÞÛÅÎÎÁÑ ÐÏÄÄÅÒÖËÁ ÏÔÌÉÞÎÙÈ ÏÔ UNIX ÐÌÁÔÆÏÒÍ
    Apache 2.0 ÓÔÁÌ ÒÁÂÏÔÁÔØ ÂÙÓÔÒÅÅ É ÎÁÄÅÖÎÅÅ ÎÁ ÏÔÌÉÞÎÙÈ ÏÔ UNIX ÐÌÁÔÆÏÒÍÁÈ, ÔÁËÉÈ ËÁË: BeOS, OS/2 É Windows. ó ××ÅÄÅÎÉÅÍ ÎÏ×ÙÈ ÓÐÅÃÉÆÉÞÎÙÈ ÄÌÑ ËÁÖÄÏÊ ÐÌÁÔÆÏÒÍÙ ÍÕÌØÔÉ-ÐÒÏÃÅÓÓÎÙÈ ÍÏÄÕÌÅÊ (MPMs) É ÂÉÂÌÉÏÔÅËÉ Apache Portable Runtime (APR), ÜÔÉ ÐÌÁÔÆÏÒÍÙ ÔÅÐÅÒØ ÐÏÄÄÅÒÖÉ×ÁÀÔÓÑ Ó ÐÏÍÏÝØÀ ÉÈ ÓÏÂÓÔ×ÅÎÎÙÈ API, ÞÔÏ ÐÏÚ×ÏÌÑÅÔÓÑ ÉÚÂÅÖÁÔØ ××ÅÄÅÎÉÑ ÚÁÞÁÓÔÕÀ ÎÅÐÒÁ×ÉÌØÎÏ ÒÁÂÏÔÁÀÝÉÈ ÉÚ-ÚÁ ÂÏÌØÛÏÇÏ ËÏÌÉÞÅÓÔ×Á ÏÛÉÂÏË POSIX - ÜÍÕÌÉÒÕÀÝÉÈ ÓÌÏÅ×.
    îÏ×ÙÊ API ÄÌÑ Apache
    API ÄÌÑ ÎÁÐÉÓÁÎÉÑ ÍÏÄÕÌÅÊ ÚÎÁÞÉÔÅÌØÎÏ ÉÚÍÅÎÉÌÓÑ × ×ÅÒÓÉÉ 2.0 íÎÏÇÉÅ ÉÚ ÐÒÏÂÌÅÍ ×ÅÒÓÉÉ 1.3, Ó×ÑÚÁÎÎÙÅ Ó ÐÏÒÑÄËÏÍ ÓÌÅÄÏ×ÁÎÉÑ ÍÏÄÕÌÅÊ É ÉÈ ÐÒÉÏÒÉÔÅÔÁÍÉ, ÄÏÌÖÎÙ ÉÓÞÅÚÎÕÔØ. ÷ ×ÅÒÓÉÉ 2.0 ÍÎÏÇÉÅ ÉÚ ÐÏÄÏÂÎÙÈ ×ÅÝÅÊ ÄÅÌÁÀÔÓÑ Á×ÔÏÍÁÔÉÞÅÓËÉ, É ÔÅÐÅÒØ ÐÏÒÑÄÏË ÓÌÅÄÏ×ÁÎÉÑ ÍÏÄÕÌÅÊ ÏÐÒÅÄÅÌÑÅÔÓÑ ÐÏÓÒÅÄÓÔ×ÏÍ ÓÐÅÃÉÁÌØÎÙÈ ÐÒÏÇÒÁÍÍÎÙÈ ËÒÀÞËÏ× (hooks), ÏÔÞÅÇÏ ÎÁÓÔÒÏÊËÁ ÓÅÒ×ÅÒÁ ÓÔÁÎÏ×ÉÔÓÑ ÂÏÌÅÅ ÇÉÂËÏÊ. ôÁËÖÅ ÂÙÌÉ ÄÏÂÁ×ÌÅÎÙ ÎÏ×ÙÅ ÆÕÎËÃÉÉ, ËÏÔÏÒÙÅ ÐÒÅÄÏÓÔÁ×ÌÑÀÔ ÄÏÐÏÌÎÉÔÅÌØÎÙÅ ×ÏÚÍÏÖÎÏÓÔÉ ÉÓÐÏÌØÚÏ×ÁÎÉÑ ÍÏÄÕÌÅÊ, ÉÚÂÁ×ÌÑÑ ÏÔ ÎÅÏÂÈÏÄÉÍÏÓÔÉ ×ÎÅÓÅÎÉÑ ËÁËÉÈ - ÌÉÂÏ ÉÚÍÅÎÅÎÉÊ × ÑÄÒÏ ÓÅÒ×ÅÒÁ.
    ðÏÄÄÅÒÖËÁ ÐÒÏÔÏËÏÌÁ IPv6
    îÁ ÓÉÓÔÅÍÁÈ, ÇÄÅ ÐÒÏÔÏËÏÌ IPv6 ÐÏÄÄÅÒÖÉ×ÁÅÔÓÑ ÂÁÚÏ×ÏÊ ÂÉÂÌÉÏÔÅËÏÊ Apache Portable Runtime, Apache ÐÏ ÕÍÏÌÞÁÎÉÀ ÐÏÌÕÞÁÅÔ ×ÏÚÍÏÖÎÏÓÔØ ÓÌÕÛÁÔØ IPv6 ÓÏËÅÔÙ (sockets). ÷ ÄÏÂÁ×ÏË Ë ÜÔÏÍÕ ÄÉÒÅËÔÉ×Ù Listen, NameVirtualHost É VirtualHost ÍÏÇÕÔ ÒÁÂÏÔÁÔØ Ó ÁÄÒÅÓÎÙÍÉ ÓÔÒÏËÁÍÉ, ÚÁÄÁÎÎÙÍÉ × ÆÏÒÍÁÔÅ IPv6 (Ô.Å. ÎÁÐÒÉÍÅÒ "Listen [2001:db8::1]:8080").
    éÓÐÏÌØÚÏ×ÁÎÉÅ ÆÉÌØÔÒÏ×
    íÏÄÕÌÉ Apache ÔÅÐÅÒØ ÍÏÇÕÔ ÂÙÔØ ÎÁÐÉÓÁÎÙ ËÁË ÆÉÌØÔÒÙ, ÏÂÒÁÂÁÔÙ×ÁÀÝÉÅ ÐÏÔÏËÉ ÄÁÎÎÙÈ, ËÏÔÏÒÙÅ ÐÒÉÈÏÄÑÔ ÉÌÉ ÕÈÏÄÑÔ ÉÚ ÓÅÒ×ÅÒÁ. üÔÏ ÐÏÚ×ÏÌÑÅÔ, Ë ÐÒÉÍÅÒÕ, ÄÁÎÎÙÍ, Ñ×ÌÑÀÝÉÍÓÑ ÒÅÚÕÌØÔÁÔÏÍ ÒÁÂÏÔÙ CGI-ÓËÒÉÐÔÁ, ÂÙÔØ ÏÂÒÁÂÏÔÁÎÎÙÍÉ SSI ÆÉÌØÔÒÏÍ INCLUDES, ÐÒÅÄÏÓÔÁ×ÌÑÅÍÙÍ ÍÏÄÕÌÅÍ mod_include. íÏÄÕÌØ mod_ext_filter ÐÏÚ×ÏÌÑÅÔ ×ÎÅÛÎÉÍ ÐÒÏÇÒÁÍÍÁÍ ÉÓÐÏÌÎÑÔØ ÒÏÌØ ÆÉÌØÔÒÏ× ÔÏÞÎÏ ÔÁË ÖÅ ËÁË É CGI ÐÒÏÇÒÁÍÍÁÍ ÐÏÚ×ÏÌÑÅÔÓÑ ÄÅÊÓÔ×Ï×ÁÔØ × ËÁÞÅÓÔ×Å ÏÂÒÁÂÏÔÞÉËÏ× (handlers).
    óÏÏÂÝÅÎÉÑ ÏÂ ÏÛÉÂËÁÈ ÎÁ ÒÁÚÎÙÈ ÑÚÙËÁÈ
    óÏÏÂÝÅÎÉÑ Ï ÏÛÉÂËÁÈ, ÐÏÓÙÌÁÅÍÙÅ ÂÒÁÕÚÅÒÕ, ÔÅÐÅÒØ ÐÒÅÄÓÔÁ×ÌÅÎÙ ÎÁ ÎÅÓËÏÌØËÉÈ ÑÚÙËÁÈ É ÉÓÐÏÌØÚÕÀÔ SSI ÔÅÈÎÏÌÏÇÉÀ. ïÎÉ ÍÏÇÕÔ ÂÙÔØ ÌÅÇËÏ ÏÔÒÅÄÁËÔÉÒÏ×ÁÎÙ ÁÄÍÉÎÉÓÔÒÁÔÏÒÏÍ ÐÏÄ Ó×ÏÉ ÎÕÖÄÙ.
    õÐÒÏÝÅÎÎÁÑ ËÏÎÆÉÇÕÒÁÃÉÑ
    íÎÏÇÉÅ ÚÁÐÕÔÁÎÎÙÅ ÄÉÒÅËÔÉ×Ù ÂÙÌÉ ÕÐÒÏÝÅÎÙ. îÁÉÂÏÌÅÅ ÓÂÉ×ÁÀÝÉÅ Ó ÔÏÌËÕ Port É BindAddress ÂÙÌÉ ÕÂÒÁÎÙ; ÄÌÑ ÐÒÉ×ÑÚËÉ Ë IP ÁÄÒÅÓÕ ÉÓÐÏÌØÚÕÅÔÓÑ ÔÏÌØËÏ ÄÉÒÅËÔÉ×Á Listen; ÄÉÒÅËÔÉ×Á ServerName ÏÐÒÅÄÅÌÑÅÔ ÉÍÑ ÓÅÒ×ÅÒÁ É ÎÏÍÅÒ ÐÏÒÔÁ ÔÅÐÅÒØ ÔÏÌØËÏ ÄÌÑ ÐÅÒÅÎÁÐÒÁ×ÌÅÎÉÊ É ÒÁÂÏÔÙ Ó ×ÉÒÔÕÁÌØÎÙÍÉ ÈÏÓÔÁÍÉ.
    ðÏÄÄÅÒÖËÁ ÀÎÉËÏÄÁ Windows NT
    Apache 2.0 ÎÁ Windows NT ÔÅÐÅÒØ ÉÓÐÏÌØÚÕÅÔ ËÏÄÉÒÏ×ËÕ utf-8 ÄÌÑ ÒÁÂÏÔÙ Ó ÉÍÅÎÁÍÉ ÆÁÊÌÏ×. üÔÏ ÐÏÚ×ÏÌÑÅÔ ÉÓÐÏÌØÚÏ×ÁÔØ ÎÉÖÅÌÅÖÁÝÕÀ ÆÁÊÌÏ×ÕÀ ÓÉÓÔÅÍÕ, ÒÁÂÏÔÁÀÝÕÀ × ÆÏÒÍÁÔÅ Unicode, ÞÔÏ ÐÒÅÄÏÓÔÁ×ÌÑÅÔ ÐÏÄÄÅÒÖËÕ ÓÅÒ×ÅÒÏÍ ÍÎÏÇÏÑÚÙÞÎÏÓÔÉ ÄÌÑ ×ÓÅÈ NT- ÓÉÓÔÅÍ, ×ËÌÀÞÁÑ Windows 2000 É Windows XP. üÔÏ ÎÅ ÒÁÓÐÒÏÓÔÒÁÎÑÅÔÓÑ ÎÁ ÔÁËÉÅ ÏÐÅÒÁÃÉÏÎÎÙÅ ÓÉÓÔÅÍÙ, ËÁË Windows 95, 98 ÉÌÉ ME, ËÏÔÏÒÙÅ ÄÌÑ ÏÂÒÁÝÅÎÉÑ Ë ÆÁÊÌÏ×ÏÊ ÓÉÓÔÅÍÅ ÉÓÐÏÌØÚÕÀÔ ÌÏËÁÌØÎÙÅ ÍÁÛÉÎÎÙÅ ËÏÄÏ×ÙÅ ÓÔÒÁÎÉÃÙ.
    îÏ×ÁÑ ÂÉÂÌÉÏÔÅËÁ ÄÌÑ ÒÁÂÏÔÙ Ó ÒÅÇÕÌÑÒÎÙÍÉ ×ÙÒÁÖÅÎÑÍÉ
    ÷ ÓÏÓÔÁ× Apache 2.0 ÂÙÌÁ ×ËÌÀÞÅÎÁ ÂÉÂÌÉÏÔÅËÁ ÄÌÑ ÒÁÂÏÔÙ Ó Perl-ÓÏ×ÍÅÓÔÉÍÙÍÉ ÒÅÇÕÌÑÒÎÙÍÉ ×ÙÒÁÖÅÎÑÍÉ (PCRE). ÷ÓÅ ÒÅÇÕÌÑÒÎÙÅ ×ÙÒÁÖÅÎÉÑ ÔÅÐÅÒØ ÉÓÐÏÌØÚÕÀÔ ÂÏÌÅÅ ÍÏÝÎÙÊ ÓÉÎÔÁËÓÉÓ Perl 5.
    top

    õÌÕÞÛÅÎÉÑ × ÍÏÄÕÌÑÈ ÓÅÒ×ÅÒÁ

    mod_ssl
    îÏ×ÙÊ ÍÏÄÕÌØ × Apache 2.0. üÔÏÔ ÍÏÄÕÌØ Ñ×ÌÑÅÔÓÑ ÉÎÔÅÒÆÅÊÓÏÍ Ë ÐÒÏÔÏËÏÌÁÍ ÛÉÆÒÏ×ÁÎÉÑ SSL/TLS, ÐÒÅÄÏÓÔÁ×ÌÑÅÍÙÍÉ OpenSSL.
    mod_dav
    îÏ×ÙÊ ÍÏÄÕÌØ × Apache 2.0. üÔÏÔ ÍÏÄÕÌØ ×ÎÅÄÒÑÅÔ ÓÐÅÃÉÆÉËÁÃÉÀ Distributed Authoring and Versioning (DAV), ÐÏÚ×ÏÌÑÀÝÕÀ ÕÐÒÁ×ÌÑÔØ ÓÏÄÅÒÖÉÍÙÍ ÓÁÊÔÁ ÐÏÓÒÅÄÓÔ×ÏÍ ÒÁÓÛÉÒÅÎÎÏÇÏ ÐÒÏÔÏËÏÌÁ HTTP.
    mod_deflate
    îÏ×ÙÊ ÍÏÄÕÌØ × Apache 2.0. üÔÏÔ ÍÏÄÕÌØ ÐÏÚ×ÏÌÑÅÔ ÂÒÁÕÚÅÒÁÍ, ÐÏÄÄÅÒÖÉ×ÁÀÝÉÍ ÄÁÎÎÕÀ ÔÅÈÎÏÌÏÇÉÀ, ÚÁÐÒÁÛÉ×ÁÔØ ÄÁÎÎÙÅ × ÓÖÁÔÏÍ ×ÉÄÅ, ÞÔÏ ÓÏËÒÁÝÁÅÔ ÎÁÇÒÕÚËÕ ÎÁ ÓÅÔØ.
    mod_auth_ldap
    îÏ×ÙÊ ÍÏÄÕÌØ × Apache 2.0.41. üÔÏÔ ÍÏÄÕÌØ ÐÏÚ×ÏÌÑÅÔ ÉÓÐÏÌØÚÏ×ÁÔØ ÂÁÚÕ ÄÁÎÎÙÈ LDAP ÄÌÑ ÈÒÁÎÅÎÉÑ ÉÍÅÎ É ÐÁÒÏÌÅÊ ÐÏÌØÚÏ×ÁÔÅÌÅÊ, ÎÅÏÂÈÏÄÉÍÙÈ ÐÒÉ ÁÕÔÅÎÔÉÆÉËÁÃÉÉ ÐÏ ÍÅÔÏÄÕ Basic. óÏÐÕÔÓÔ×ÕÀÝÉÊ ÅÍÕ ÍÏÄÕÌØ mod_ldap ÏÂÅÓÐÅÞÉ×ÁÅÔ ×ÏÚÍÏÖÎÏÓÔØ ÓÏÚÄÁÎÉÑ ÏÞÅÒÅÄÅÊ ÐÏÄËÌÀÞÅÎÉÊ (connection pools) É ËÜÛÉÒÏ×ÁÎÉÑ ÒÅÚÕÌØÔÁÔÏ×.
    mod_auth_digest
    ÷ËÌÀÞÁÅÔ ÄÏÐÏÌÎÉÔÅÌØÎÕÀ ÐÏÄÄÅÒÖËÕ ËÜÛÉÒÏ×ÁÎÉÑ ÓÅÓÓÉÊ ÐÒÏÃÅÓÓÁÍÉ, ÂÌÁÇÏÄÁÒÑ ÉÓÐÏÌØÚÏ×ÁÎÉÀ ÏÂÝÅÊ ÏÂÌÁÓÔÉ ÐÁÍÑÔÉ (ÒÁÚÄÅÌÅÎÉÀ ÐÁÍÑÔÉ).
    mod_charset_lite
    îÏ×ÙÊ ÍÏÄÕÌØ × Apache 2.0. üÔÏÔ ÜËÓÐÅÒÉÍÅÎÔÁÌØÎÙÊ ÍÏÄÕÌØ ÐÏÚ×ÏÌÑÅÔ ÏÓÕÝÅÓÔ×ÌÑÔØ ÐÅÒÅ×ÏÄ ÉÚ ÏÄÎÏÇÏ ÎÁÂÏÒÁ ÓÉÍ×ÏÌÏ× (character set) × ÄÒÕÇÏÊ É ÉÚ ÏÄÎÏÊ ËÏÄÉÒÏ×ËÉ × ÄÒÕÇÕÀ.
    mod_file_cache
    îÏ×ÙÊ ÍÏÄÕÌØ × Apache 2.0. üÔÏÔ ÍÏÄÕÌØ ×ËÌÀÞÁÅÔ × ÓÅÂÑ ÆÕÎËÃÉÏÎÁÌØÎÏÓÔØ ÍÏÄÕÌÑ mod_mmap_static ÉÚ Apache 1.3 ÐÌÀÓ ÎÏ×ÙÅ ×ÏÚÍÏÖÎÏÓÔÉ ËÜÛÉÒÏ×ÁÎÉÑ.
    mod_headers
    üÔÏÔ ÍÏÄÕÌØ ÓÔÁÌ ÂÏÌÅÅ ÇÉÂËÉÍ × Apache 2.0. ïÎ ÐÏÚ×ÏÌÑÅÔ ÍÏÄÉÆÉÃÉÒÏ×ÁÔØ ÚÁÇÏÌÏ×ËÉ ÚÁÐÒÏÓÏ×, ÉÓÐÏÌØÚÕÅÍÙÈ ÍÏÄÕÌÅÍ mod_proxy, É ÍÏÖÅÔ ×ËÌÀÞÁÔØ × ÏÔ×ÅÔ ÓÅÒ×ÅÒÁ ÚÁÇÏÌÏ×ËÉ × ÚÁ×ÉÓÉÍÏÓÔÉ ÏÔ ÒÁÚÌÉÞÎÙÈ ÕÓÌÏ×ÉÊ.
    mod_proxy
    ðÒÏËÓÉ ÍÏÄÕÌØ ÂÙÌ ÐÏÌÎÏÓÔØÀ ÐÅÒÅÐÉÓÁÎ, É ÔÅÐÅÒØ ×ËÌÀÞÁÅÔ × ÓÅÂÑ ÐÒÅÉÍÕÝÅÓÔ×Á ÎÏ×ÏÊ ÆÉÌØÔÒÏ×ÏÊ ÉÎÆÒÁÓÔÒÕËÔÕÒÙ É ÉÓÐÏÌØÚÕÅÔ ÂÏÌÅÅ ÎÁÄÅÖÎÕÀ, ÓÏ×ÍÅÓÔÉÍÕÀ Ó HTTP/1.1 ÐÒÏËÓÉ-ÔÅÈÎÏÌÏÇÉÀ. ÷ ÄÏÂÁ×ÏË Ë ÜÔÏÍÕ ÂÙÌÁ ××ÅÄÅÎÁ ÎÏ×ÁÑ ÓÅËÃÉÑ <Proxy>, ËÏÔÏÒÕÀ ÍÏÖÎÏ ÉÓÐÏÌØÚÏ×ÁÔØ × ËÏÎÆÉÇÕÒÁÃÉÏÎÎÙÈ ÆÁÊÌÁÈ, ÞÔÏ ÏÂÅÓÐÅÞÉ×ÁÅÔ ÂÏÌÅÅ ÕÄÏÂÎÙÊ (É ÂÏÌÅÅ ÂÙÓÔÒÙÊ ÄÌÑ ÑÄÒÁ ÓÅÒ×ÅÒÁ) ËÏÎÔÒÏÌØ ÎÁÄ ÓÁÊÔÁÍÉ, ÉÓÐÏÌØÚÕÀÝÉÍÉ proxy-ÔÅÈÎÏÌÏÇÉÀ. ðÅÒÅÇÒÕÖÅÎÎÁÑ ËÏÎÆÉÇÕÒÁÃÉÑ <Directory "proxy:..."> ÂÏÌÅÅ ÎÅ ÐÏÄÄÅÒÖÉ×ÁÅÔÓÑ. íÏÄÕÌØ ÔÅÐÅÒØ ÒÁÚÄÅÌÅÎ ÎÁ ÏÔÄÅÌØÎÙÅ ÓÐÅÃÉÆÉÞÎÙÅ ÍÏÄÕÌÉ, ÐÏÄÄÅÒÖÉ×ÁÀÝÉÅ ÒÁÚÌÉÞÎÙÅ ÐÒÏÔÏËÏÌÙ. üÔÉ ÍÏÄÕÌÉ ×ËÌÀÞÁÀÔ × ÓÅÂÑ proxy_connect, proxy_ftp É proxy_http.
    mod_negotiation
    äÏÂÁ×ÌÅÎÁ ÎÏ×ÁÑ ÄÉÒÅËÔÉ×Á ForceLanguagePriority, ÄÌÑ ÔÏÇÏ ÞÔÏÂÙ ×ÍÅÓÔÏ ÏÔ×ÅÔÏ× ÓÅÒ×ÅÒÁ NOT ACCEPTABLE ÉÌÉ MULTIPLE CHOICES ×ÓÅÇÄÁ ÐÒÅÄÏÓÔÁ×ÌÑÔØ ÐÏÌØÚÏ×ÁÔÅÌÀ ÏÐÒÅÄÅÌÅÎÎÙÊ ÄÏËÕÍÅÎÔ. ÷ ÄÏÐÏÌÎÅÎÉÅ Ë ÜÔÏÍÕ ÁÌÇÏÒÉÔÍÙ ÎÅÇÏÃÉÁÃÉÉ (negotiation) É MultiViews ÂÙÌÉ ×ÙÞÉÝÅÎÙ É ÉÓÐÒÁ×ÌÅÎÙ, ÄÌÑ ÏÂÅÓÐÅÞÅÎÉÑ ÂÏÌÅÅ ÐÏÓÌÅÄÏ×ÁÔÅÌØÎÏÇÏ ÒÅÚÕÌØÔÁÔÁ, Á ÔÁËÖÅ ÐÏÑ×ÉÌÁÓØ ×ÏÚÍÏÖÎÏÓÔØ ×ËÌÀÞÅÎÉÑ ÎÅÐÏÓÒÅÄÓÔ×ÅÎÎÏÇÏ ÓÏÄÅÒÖÉÍÏÇÏ ÄÏËÕÍÅÎÔÏ× × ËÁÒÔÕ ÔÉÐÏ× (type map).
    mod_autoindex
    ìÉÓÔÉÎÇÉ Á×ÔÏÉÎÄÅËÓÉÒÕÅÍÙÈ ËÁÔÁÌÏÇÏ× ÔÅÐÅÒØ ÍÏÇÕÔ ×ÙÄÁ×ÁÔØÓÑ × ×ÉÄÅ HTML-ÔÁÂÌÉÃ. ðÏÑ×ÉÌÁÓØ ×ÏÚÍÏÖÎÏÓÔØ ÂÏÌÅÅ ÇÉÂËÏÊ ÓÏÒÔÉÒÏ×ËÉ, ×ËÌÀÞÁÑ ÓÏÒÔÉÒÏ×ËÕ ÐÏ ×ÅÒÓÉÑÍ É ÓÏÒÔÉÒÏ×ËÕ Ó ÉÓÐÏÌØÚÏ×ÁÎÉÅÍ ÕÎÉ×ÅÒÓÁÌØÎÙÈ ÓÉÍ×ÏÌÏ× (wildcard).
    mod_include
    ÷×ÅÄÅÎÙ ÎÏ×ÙÅ ÄÉÒÅËÔÉ×Ù, ËÏÔÏÒÙÅ ÐÏÚ×ÏÌÑÀÔ ÉÚÍÅÎÉÔØ ÎÁÞÁÌØÎÙÊ É ËÏÎÅÞÎÙÊ ÔÅÇÉ SSI ÜÌÅÍÅÎÔÏ×, ÚÁÄÁ×ÁÅÍÙÅ ÐÏ ÕÍÏÌÞÁÎÉÀ, Á ÔÁËÖÅ ÐÒÅÄÏÓÔÁ×ÌÑÀÔ ×ÏÚÍÏÖÎÏÓÔØ ËÏÎÆÉÇÕÒÉÒÏ×ÁÎÉÑ ÆÏÒÍÁÔÁ ÓÏÏÂÝÅÎÉÊ Ï ÏÛÉÂËÁÈ É ×ÒÅÍÅÎÉ ÎÅÐÏÓÒÅÄÓÔ×ÅÎÎÏ × ÇÌÁ×ÎÏÍ ËÏÎÆÉÇÕÒÁÃÉÏÎÎÏÍ ÆÁÊÌÅ, Á ÎÅ × SSI ÄÏËÕÍÅÎÔÅ. òÅÚÕÌØÔÁÔÙ ÏÂÒÁÂÏÔËÉ ÒÅÇÕÌÑÒÎÙÈ ×ÙÒÁÖÅÎÉÊ (ÔÅÐÅÒØ ÏÓÎÏ×Ù×ÁÀÝÉÈÓÑ ÎÁ ÓÉÎÔÁËÓÉÓÅ ÒÅÇÕÌÑÒÎÙÈ ×ÙÒÁÖÅÎÉÊ ÑÚÙËÁ Perl) ÍÏÇÕÔ ÂÙÔØ ÐÏÌÕÞÅÎÙ ÐÒÉ ÐÏÍÏÝÉ ÐÅÒÅÍÅÎÎÙÈ $0 .. $9 ÍÏÄÕÌÑ mod_include.
    mod_auth_dbm
    ôÅÐÅÒØ ÐÏÄÄÅÒÖÉ×ÁÅÔ ÍÎÏÇÏÞÉÓÌÅÎÎÙÅ ÔÉÐÙ DBM-ÐÏÄÏÂÎÙÈ ÂÁÚ ÄÁÎÎÙÈ ÐÏÓÒÅÄÓÔ×ÏÍ ÄÉÒÅËÔÉ×Ù AuthDBMType.

    Available Languages:  de  |  en  |  fr  |  ja  |  ko  |  pt-br  |  ru  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/new_features_2_2.html.pt-br0000644000000000000500000002452113412755316020516 0ustar rootsrc Descrição das novas funcionalidades do Apache 2.2 - Servidor HTTP Apache Versão 2.4
    <-

    Descrição das novas funcionalidades do Apache 2.2

    Línguas Disponíveis:  en  |  fr  |  ko  |  pt-br  |  tr 

    Esta tradução pode estar desatualizada. Confira a versão em Inglês para mudanças recentes.

    Esse documento descreve algumas das principais mudanças entre as versões 2.0 e 2.2 do Servidor HTTP Apache. Para a lista de mudanças desde a versão 1.3, veja a página de documentação novas funcionalidades do Apache 2.0.

    top

    Principais Melhorias

    Authn/Authz
    ...
    Caching
    ...
    Proxying
    O novo módulo mod_proxy_balancer fornece serviços de carregamento de balenceamento para mod_proxy. O novo módulo mod_proxy_ajp oferece suporte para o Protocolo Apache JServ versão 1.3, usado pelo Apache Tomcat.
    Filtragem Inteligente (Smart Filtering)
    O mod_filter introduz configuração dinâmica para o filtro de saída de dados. Permitindo que os filtros sejam condicionalmente inseridos, baseando-se nos cabeçalhos Request ou Response ou em variáveis do ambiente, ele acaba com os problemas de dependências e pedidos da arquitetura 2.0.
    top

    Melhorias nos Módulos

    mod_authnz_ldap
    Este módulo é uma migração do mod_auth_ldap, da versão 2.0 para a estrutura 2.2 de Authn/Authz. As novas funcionalidades incluem o uso de atributos LDAP e filtros de procura complexos na diretriz Require.
    mod_info
    Adicionado um novo argumento ?config que mostra a configuração das diretrizes analisadas pelo Apache, incluindo o nome do arquivo e o número da linha. Esse módulo também mostra a ordem de todos os ganchos de pedidos (request hooks) e informações adicionais sobre a compilação, similar ao comando httpd -V.
    top

    Mudanças ao Desenvolvedor de Módulos

    API do APR 1.0
    O Apache 2.2 utiliza a API do APR 1.0. Todas as funções e símbolos antigos foram removidos do APR e APR-Util. Para mais detalhes, visite o Website do APR.
    Registros de Erros de Conexão (logs)
    Uma nova função ap_log_cerror, foi adicionada para registrar erros que ocorrem na conexão do cliente. Quando documentado no diário de log, a mensagem inclui o endereço IP do cliente.
    Adicionado Gancho de Teste de Configuração
    Um novo gancho (hook), test_config foi adicionado para auxiliar módulos que querem executar códigos especiais apenas quando o usuário passa o parâmetro -t para o httpd.
    Ajustar o Stacksize dos "Threaded MPM's"
    Uma nova diretriz chamada ThreadStackSize, foi adicionada para ajustar o tamanho das stacks em todos os threadeds MPMs. Essa é uma prática necessário para alguns módulos de terceiros em plataformas com tamanhos de stacks pequenos por padrão.
    Negociação de Protocolo para filtros de saída
    No passado, todo filtro era responsável por garantir a geração de cabeçalhos de resposta correto que os afetava. Os filtros agora podem delegar o gerenciamento de protocolos comuns para mod_filter, usando chamadas de ap_register_output_filter_protocol ou ap_filter_protocol.

    Línguas Disponíveis:  en  |  fr  |  ko  |  pt-br  |  tr 

    top

    Comentários

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/filter.html.es0000644000000000000500000004123313412755316016234 0ustar rootsrc Filtros - Servidor HTTP Apache Versión 2.4
    <-

    Filtros

    Idiomas disponibles:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    Este documento describe cómo usar filtros en Apache.

    top

    Filtros en Apache 2

    La cadena de filtrado está disponible en Apache 2.0 y superiores. Un filtro es un proceso que se aplica a los datos que se reciben o se envían por el servidor. Los datos enviados por los clientes al servidor son procesados por filtros de entrada mientras que los datos enviados por el servidor se procesan por los filtros de salida. A los datos se les pueden aplicar varios filtros, y el orden en que se aplica cada filtro puede especificarse explícitamente. Todo este proceso es independiente de las tradicionales fase de peticiones

    Filters can be chained, in a Data Axis orthogonal to request processing

    Algunos ejemplos de filtrado en la distribución estándar de Apache son:

    Los filtros se usan internamente por Apache para llevar a cabo funciones tales como chunking y servir peticiones de byte-range. Además, los módulos contienen filtros que se pueden seleccionar usando directivas de configuración al iniciar el servidor.

    Una mayor amplitud de aplicaciones son implementadas con módulos de filtros de terceros que estan disponibles en modules.apache.org y en otros lados. algunos de ellos son:

    • Procesamiento y reescritura de HTML y XML.
    • Transformaciones de XSLT y XIncludes.
    • Soporte de espacios de nombres en XML.
    • Manipulación de carga de archivos y decodificación de los formularios HTML.
    • Procesamiento de imágenes.
    • Protección de aplicaciones vulnerables, tales como scripts PHP
    • Edición de texto de búsqueda y remplazo.
    top

    Filtrado Inteligente

    Smart filtering applies different filter providers according to the state of request processing

    mod_filter, incluido en Apache 2.1 y posterior, habilita la cadena de filtrado para ser configurada dinámicamente en tiempo de ejecución. Así, por ejemplo, usted puede configurar un proxy para que reescriba HTML con un filtro de HTML y imágenes JPEG con filtros completos por separado, a pesar de que el proxy no tiene información previa sobre lo que enviará al servidor de origen. Esto funciona usando un engranaje filtros, que envía a diferentes proveedores dependiendo del contenido en tiempo de ejecución. Cualquier filtro puede ser, ya sea insertado directamente en la cadena y ejecutado incondicionalmente, o usado como proveedor y añadido dinámicamente Por ejemplo:

    • Un filtro de procesamiento de HTML sólo se ejecuta si el contenido es text/html o application/xhtml + xml.
    • Un filtro de compresión sólo se ejecuta si la entrada es un tipo compresible y no está ya comprimida.
    • Se insertará un filtro de conversión de juego de caracteres, si un documento de texto no está ya en el juego de caracteres deseado.
    top

    Filtros expuestos como un servicio HTTP

    Los filtros pueden ser usados para procesar contenido originado desde el cliente además de usarse para procesar el contenido originado desde el propio servidor usando el módulo mod_reflector.

    mod_reflector acepta peticiones POST de los clientes, y refleja el cuerpo de la petición POST recibida, dentro del contenido de la respuesta de la petición, pasa a través de la pila del filtro de salida en el camino de vuelta al cliente.

    Esta técnica se puede utilizar como una alternativa a un servicio web que se ejecuta en una pila de de aplicaciones dentro del servidor, en donde el filtro de salida proporciona la transformación requerida en el cuerpo de la petición. Por ejemplo, el módulo mod_deflate puede ser usado para proporcionar un servicio de compresión general, o un filtro de transformación de imagen, puede ser convertido en un servicio de conversión de imágenes.

    top

    Usando los Filtros

    Hay dos formas de usar el filtrado: de forma Simple y Dinámica. Generalmente, deberá usar una forma u otra; ya que mezclarlas puede causar consecuencias inesperadas (a pesar de que reglas de Entrada de tipo simple pueden ser combinadas libremente con reglas de filtrado de Salidas de tipo simple o dinámico).

    La forma más sencilla es la única manera de configurar filtros de Entrada, y es suficiente para filtros de Salida donde se necesita una cadena de filtros estática. Las directivas más relevantes son: SetInputFilter, SetOutputFilter, AddInputFilter, AddOutputFilter, RemoveInputFilter, and RemoveOutputFilter.

    La forma Dinámica habilita ambas configuraciones estática, y dinámica, para los filtros de Salida, como se plantea en la página mod_filter. Las directivas más relevantes son: FilterChain, FilterDeclare, and FilterProvider.

    Una directiva más como es AddOutputFilterByType sigue siendo soportada pero esta obsoleta. Usa en cambio la configuración dinámica.

    Idiomas disponibles:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    top

    Comentarios

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/suexec.html.ko.euc-kr0000644000000000000500000006013313412755316017432 0ustar rootsrc suEXEC Áö¿ø - Apache HTTP Server Version 2.4
    <-

    suEXEC Áö¿ø

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.

    suEXEC ±â´ÉÀº ¾ÆÆÄÄ¡°¡ CGI¿Í SSI ÇÁ·Î±×·¥À» À¥¼­¹ö¸¦ ½ÇÇàÇÑ »ç¿ëÀÚ ID°¡ ¾Æ´Ñ ´Ù¸¥ »ç¿ëÀÚ ID·Î ½ÇÇàÇϵµ·Ï ÇÑ´Ù. º¸Åë CGI³ª SSI ÇÁ·Î±×·¥À» ½ÇÇàÇϸé À¥¼­¹ö¸¦ ½ÇÇàÇÑ »ç¿ëÀÚ¿Í °°Àº »ç¿ëÀÚ·Î ½ÇÇàÇÑ´Ù.

    ÀÌ ±â´ÉÀ» ÀûÀýÈ÷ »ç¿ëÇÏ¸é »ç¿ëÀÚ°¡ Á÷Á¢ CGI³ª SSI ÇÁ·Î±×·¥À» °³¹ßÇÏ°í ½ÇÇàÇÒ¶§ ¹ß»ýÇÒ ¼ö ÀÖ´Â º¸¾ÈÀ§ÇèÀ» »ó´çÈ÷ ÁÙÀÏ ¼ö ÀÖ´Ù. ±×·¯³ª suEXEC°¡ ºÎÀûÀýÇÏ°Ô ¼³Á¤µÇ¸é ¸¹Àº ¹®Á¦¿Í ÄÄÇ»ÅÍ¿¡ »õ·Î¿î º¸¾È ÇãÁ¡À» ¸¸µé ¼ö ÀÖ´Ù. ¸¸¾à setuid root ÇÁ·Î±×·¥°ú ÀÌ·± ÇÁ·Î±×·¥ÀÇ º¸¾È ¹®Á¦¿¡ »ý¼ÒÇÏ´Ù¸é suEXEC¸¦ »ç¿ëÇÏÁö¾Ê±æ Áø½ÉÀ¸·Î ¹Ù¶õ´Ù.

    top

    ½ÃÀÛÇϱâ Àü¿¡

    ½ÃÀÛÇϱâ Àü¿¡ ¿ì¼± ¾ÆÆÄÄ¡±×·ì°ú ÀÌ ¹®¼­ÀÇ °¡Á¤À» ¹àÈù´Ù.

    ¸ÕÀú setuid¿Í setgid ±â´ÉÀÌ °¡´ÉÇÑ À¯´Ð½º·ù ¿î¿µÃ¼Á¦¸¦ »ç¿ëÇÑ´Ù°í °¡Á¤ÇÑ´Ù. ¸ðµç ¸í·É¾î ¿¹µéµµ °°Àº °¡Á¤À» ÇÑ´Ù. suEXEC¸¦ Áö¿øÇÏ´Â ´Ù¸¥ Ç÷¡ÆûÀ» »ç¿ëÇÏ´Ù¸é ¼³Á¤ÀÌ ´Ù¸¦ ¼ö ÀÖ´Ù.

    µÎ¹øÂ°, ´ç½ÅÀÌ ÄÄÇ»ÅÍ º¸¾ÈÀÇ ±âº» °³³ä°ú °ü¸®¿¡ Àͼ÷ÇÏ´Ù°í °¡Á¤ÇÑ´Ù. ¿©±â¿¡´Â setuid/setgid ±â´É°ú À̵éÀÌ ½Ã½ºÅÛ°ú º¸¾È¿¡ ¹ÌÄ¡´Â ¿©·¯ ¿µÇâ¿¡ ´ëÇÑ ÀÌÇØ°¡ Æ÷ÇԵȴÙ.

    ¼¼¹øÂ°, suEXEC ÄÚµåÀÇ ¼öÁ¤ÇÏÁö¾ÊÀº ¹öÀüÀ» »ç¿ëÇÑ´Ù°í °¡Á¤ÇÑ´Ù. °³¹ßÀÚ¿Í ¿©·¯ º£Å¸Å×½ºÅ͵éÀº suEXEC¿Í °ü·ÃµÈ ¸ðµç Äڵ带 Á¶½É½º·´°Ô Á¶»çÇÏ°í °Ë»çÇß´Ù. Äڵ带 °£´ÜÇÏ°Ô Çϰí È®½ÇÇÑ ¾ÈÀüÀ» º¸ÀåÇϱâÀ§ÇØ ¸ðµç ÁÖÀǸ¦ ±â¿ï¿´´Ù. ÀÌ Äڵ带 ¼öÁ¤ÇÏ¸é ¿¹»óÄ¡¸øÇÑ ¹®Á¦¿Í »õ·Î¿î º¸¾È À§ÇèÀÌ ¹ß»ýÇÒ ¼ö ÀÖ´Ù. º¸¾È ÇÁ·Î±×·¡¹Ö¿¡ ´ëÇØ ¸Å¿ì Àß ¾Ë°í Äڵ带 »ìÆìº¸±âÀ§ÇØ ¾ÆÆÄÄ¡±×·ì°ú ÀÛ¾÷À» °øÀ¯ÇÒ Àǻ簡 ¾ø´Ù¸é suEXEC Äڵ带 ¼öÁ¤ÇÏÁö¾Ê±æ °­·ÂÈ÷ ±ÇÇÑ´Ù.

    ³×¹øÂ°ÀÌÀÚ ¸¶Áö¸·À¸·Î, ¾ÆÆÄÄ¡±×·ìÀº suEXEC¸¦ ¾ÆÆÄÄ¡ ±âº»¼³Ä¡¿¡ Æ÷ÇÔÇÏÁö ¾Ê±â·Î °áÁ¤Çß´Ù. °á±¹ °ü¸®ÀÚ°¡ ÁÖÀǸ¦ ±â¿ï¿©¼­ suEXEC¸¦ ¼³Á¤ÇØ¾ß ÇÑ´Ù. suEXECÀÇ ¿©·¯ ¼³Á¤À» Àß °í·ÁÇÑÈÄ °ü¸®ÀÚ´Â ÀϹÝÀûÀÎ ¼³Ä¡¹æ¹ýÀ» suEXEC¸¦ ¼³Ä¡ÇÒ ¼ö ÀÖ´Ù. suEXEC ±â´ÉÀ» »ç¿ëÇÏ´Â ½Ã½ºÅÛÀÇ º¸¾ÈÀ» Ã¥ÀÓÁö´Â °ü¸®ÀÚ´Â ÀÌ ¼³Á¤°ªµéÀ» ÁÖÀÇÀÖ°Ô »ìÆìº¸°í ÁöÁ¤ÇØ¾ß ÇÑ´Ù. ÀÌ·± »ó¼¼ÇÑ °úÁ¤Àº suEXEC¸¦ »ç¿ëÇÒ¸¸Å­ ÁÖÀÇÀÖ°í ´ÜÈ£ÇÑ »ç¶÷¸¸ÀÌ suEXEC¸¦ »ç¿ëÇϵµ·Ï ¾ÆÆÄÄ¡±×·ìÀÌ ¿øÇϱ⠶§¹®ÀÌ´Ù.

    ¾ÆÁ÷µµ »ç¿ëÇÏ±æ ¿øÇϴ°¡? ±×·±°¡? ÁÁ´Ù. ÀÌÁ¦ ½ÃÀÛÇÏÀÚ!

    top

    suEXEC º¸¾È¸ðµ¨

    suEXEC¸¦ ±¸¼ºÇÏ°í ¼³Ä¡Çϱâ Àü¿¡ ¿ì¸®´Â º¸¾È¸ðµ¨À» ¸ÕÀú ¼³¸íÇÑ´Ù. À̸¦ ÅëÇØ Á¤È®È÷ suEXEC ¾È¿¡¼­´Â ¹«½¼ ÀÏÀÌ ÀϾ¸ç ½Ã½ºÅÛÀÇ º¸¾ÈÀ» À§ÇØ ¹«¾ùÀ» Á¶½ÉÇØ¾ß ÇÒÁö ´õ Àß ÀÌÇØÇÒ ¼ö ÀÖ´Ù.

    suEXEC´Â ¾ÆÆÄÄ¡ À¥¼­¹ö°¡ ºÎ¸£´Â setuid "wrapper" ÇÁ·Î±×·¥À» ±â¹ÝÀ¸·Î ÇÑ´Ù. ÀÌ wrapper´Â °ü¸®ÀÚ°¡ ÁÖ¼­¹ö¿Í ´Ù¸¥ userid·Î ½ÇÇàÇϵµ·Ï ¼³Á¤ÇÑ CGI³ª SSI ÇÁ·Î±×·¥¿¡ HTTP ¿äûÀÌ ¿À¸é ºÒ¸°´Ù. ÀÌ·± ¿äûÀÌ ¿À¸é ¾ÆÆÄÄ¡´Â suEXEC wrapper¿¡°Ô ÇÁ·Î±×·¥¸í°ú ÇÁ·Î±×·¥À» ½ÇÇàÇÒ »ç¿ëÀÚ¿Í ±×·ì ID¸¦ Á¦°øÇÑ´Ù.

    ±×·¯¸é wrapper´Â ´ÙÀ½ °úÁ¤À» ÅëÇØ ¼º°ø°ú ½ÇÆÐ¸¦ °áÁ¤ÇÑ´Ù. ÀÌ Á¶°ÇÁß Çϳª¶óµµ ½ÇÆÐÇϸé ÇÁ·Î±×·¥Àº ½ÇÆÐ·Î ±â·ÏµÇ°í ¿À·ù¸¦ ³»¸ç Á¾·áÇÑ´Ù. ½ÇÆÐÇÏÁö ¾ÊÀ¸¸é °úÁ¤À» °è¼ÓÇÑ´Ù:

    1. wrapper¸¦ ½ÇÇàÇÏ´Â »ç¿ëÀÚ°¡ ½Ã½ºÅÛÀÇ Á¤»óÀûÀÎ »ç¿ëÀÚÀΰ¡?

      wrapper¸¦ ½ÇÇàÇÏ´Â »ç¿ëÀÚ°¡ ½ÇÁ¦·Î ½Ã½ºÅÛÀÇ »ç¿ëÀÚÀÎÁö È®ÀÎÇÑ´Ù.

    2. ÀûÀýÇÑ ¼öÀÇ ¾Æ±Ô¸ÕÆ®·Î wrapper¸¦ ½ÇÇàÇϴ°¡?

      wrapper´Â ÀûÀýÇÑ ¼öÀÇ ¾Æ±Ô¸ÕÆ®°¡ ÀÖ¾î¾ß¸¸ ½ÇÇàµÈ´Ù. ¾ÆÆÄÄ¡ À¥¼­¹ö°¡ ÀÌ °³¼ö¸¦ ¾È´Ù. wrapper°¡ ÀûÀýÇÑ ¼öÀÇ ¾Æ±Ô¸ÕÆ®¸¦ ¹ÞÁö¸øÇϸé ÇØÅ·µÇ¾ú°Å³ª ¾ÆÆÄÄ¡ÀÇ suEXEC¿¡ ¹º°¡ ¹®Á¦°¡ ÀÖ´Â °ÍÀÌ´Ù.

    3. ÀÌ »ç¿ëÀÚ°¡ wrapper¸¦ ½ÇÇàÇϵµ·Ï Çã¿ëµÇ¾ú³ª?

      ÀÌ »ç¿ëÀÚ°¡ wrapper¸¦ ½ÇÇàÇϵµ·Ï Çã¿ëµÇ¾ú³ª? ¿ÀÁ÷ ÇÑ »ç¿ëÀÚ(¾ÆÆÄÄ¡ »ç¿ëÀÚ)¸¸ÀÌ ÀÌ ÇÁ·Î±×·¥À» ½ÇÇàÇÒ ¼ö ÀÖ´Ù.

    4. ÁöÁ¤ÇÑ CGI³ª SSI ÇÁ·Î±×·¥ÀÌ ¾ÈÀüÇÏÁö¾ÊÀº °èÃþÂüÁ¶¸¦ °¡Áö´Â°¡?

      ÁöÁ¤ÇÑ CGI³ª SSI ÇÁ·Î±×·¥ÀÌ '/'·Î ½ÃÀÛÇϰųª µÞÂüÁ¶ '..'À» °¡Áö´Â°¡? À̵éÀ» »ç¿ëÇÒ ¼ö ¾ø´Ù. ÁöÁ¤ÇÑ CGI/SSI ÇÁ·Î±×·¥Àº suEXEC ¹®¼­ root (¾Æ·¡ --with-suexec-docroot=DIR Âü°í) ³»¿¡ ÀÖ¾î¾ß ÇÑ´Ù.

    5. ÁöÁ¤ÇÑ »ç¿ëÀÚ¸íÀÌ À¯È¿ÇѰ¡?

      ÁöÁ¤ÇÑ »ç¿ëÀÚ°¡ Á¸ÀçÇϴ°¡?

    6. ÁöÁ¤ÇÑ ±×·ì¸íÀÌ À¯È¿ÇѰ¡?

      ÁöÁ¤ÇÑ ±×·ìÀÌ Á¸ÀçÇϴ°¡?

    7. ÁöÁ¤ÇÑ »ç¿ëÀÚ°¡ superuser°¡ ¾Æ´Ñ°¡?

      ÇöÀç suEXEC´Â root°¡ CGI/SSI ÇÁ·Î±×·¥À» ½ÇÇàÇÒ ¼ö ¾øµµ·Ï ÇÑ´Ù.

    8. ÁöÁ¤ÇÑ userid°¡ ÃÖ¼Ò ID ¼ýÀÚº¸´Ù Å«°¡?

      ¼³Á¤¿¡¼­ ÃÖ¼Ò »ç¿ëÀÚ ID ¼ýÀÚ¸¦ ÁöÁ¤ÇÑ´Ù. ±×·¡¼­ CGI/SSI ÇÁ·Î±×·¥À» ½ÇÇàÇÒ ¼ö ÀÖ´Â useridÀÇ ÃÖ¼ÒÄ¡¸¦ ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù. "½Ã½ºÅÛ¿ë" °èÁ¤À» Á¦¿ÜÇÒ¶§ À¯¿ëÇÏ´Ù.

    9. ÁöÁ¤ÇÑ ±×·ìÀÌ superuser ±×·ìÀÌ ¾Æ´Ñ°¡?

      ÇöÀç suEXEC´Â root ±×·ìÀÌ CGI/SSI ÇÁ·Î±×·¥À» ½ÇÇàÇÒ ¼ö ¾øµµ·Ï ÇÑ´Ù.

    10. ÁöÁ¤ÇÑ groupid°¡ ÃÖ¼Ò ID ¼ýÀÚº¸´Ù Å«°¡?

      ¼³Á¤¿¡¼­ ÃÖ¼Ò ±×·ì ID ¼ýÀÚ¸¦ ÁöÁ¤ÇÑ´Ù. ±×·¡¼­ CGI/SSI ÇÁ·Î±×·¥À» ½ÇÇàÇÒ ¼ö ÀÖ´Â groupidÀÇ ÃÖ¼ÒÄ¡¸¦ ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù. "½Ã½ºÅÛ¿ë" ±×·ìÀ» Á¦¿ÜÇÒ¶§ À¯¿ëÇÏ´Ù.

    11. wrapper°¡ ¼º°øÀûÀ¸·Î ÁöÁ¤ÇÑ »ç¿ëÀÚ¿Í ±×·ìÀÌ µÉ ¼ö Àִ°¡?

      ÀÌ ´Ü°è¿¡¼­ ÇÁ·Î±×·¥Àº setuid¿Í setgid È£ÃâÀ» ÇÏ¿© ÁöÁ¤ÇÑ »ç¿ëÀÚ¿Í ±×·ìÀÌ µÈ´Ù. ¶Ç, ±×·ì Á¢±Ù¸ñ·ÏÀº »ç¿ëÀÚ°¡ ÇØ´çµÈ ¸ðµç ±×·ìÀ¸·Î ÃʱâÈ­µÈ´Ù.

    12. CGI/SSI ÇÁ·Î±×·¥ÀÌ ÀÖ´Â µð·ºÅ丮·Î µð·ºÅ丮¸¦ º¯°æÇÒ ¼ö Àִ°¡?

      µð·ºÅ丮°¡ Á¸ÀçÇÏÁö ¾Ê´Ù¸é ÆÄÀÏÀÌ ÀÖÀ» ¼ö ¾ø´Ù. À̰÷À¸·Î µð·ºÅ丮¸¦ º¯°æÇÒ ¼ö ¾ø´Ù¸é µð·ºÅ丮´Â Á¸ÀçÇÏÁö ¾ÊÀ» °ÍÀÌ´Ù.

    13. µð·ºÅ丮°¡ ¾ÆÆÄÄ¡ À¥°ø°£ ¾È¿¡ Àִ°¡?

      ¼­¹öÀÇ ÀϹÝÀûÀÎ ºÎºÐÀ» ¿äûÇÒ °æ¿ì ¿äûÇÏ´Â µð·ºÅ丮°¡ suEXEC ¹®¼­ root ¾Æ·¡ Àִ°¡? UserDirÀ» ¿äûÇÒ °æ¿ì ¿äûÇÏ´Â µð·ºÅ丮°¡ suEXEC userdir·Î ¼³Á¤ÇÑ (suEXEC ¼³Á¤ ¿É¼Ç Âü°í) µð·ºÅ丮 ¾Æ·¡¿¡ Àִ°¡?

    14. ´Ù¸¥ ´©±¸µµ µð·ºÅ丮¿¡ ¾²±â±ÇÇÑÀÌ ¾ø´Â°¡?

      µð·ºÅ丮¸¦ ´Ù¸¥ »ç¶÷¿¡°Ô ¿­¾îµÎ±æ ¿øÇÏÁö¾Ê´Â´Ù. ¿ÀÁ÷ ¼ÒÀ¯ÀÚ¸¸ÀÌ µð·ºÅ丮 ³»¿ëÀ» º¯°æÇÒ ¼ö ÀÖ´Ù.

    15. ÁöÁ¤ÇÑ CGI/SSI ÇÁ·Î±×·¥ÀÌ Á¸ÀçÇϴ°¡?

      Á¸ÀçÇÏÁö¾Ê´Ù¸é ½ÇÇàÇÒ ¼öµµ ¾ø´Ù.

    16. ´Ù¸¥ ´©±¸µµ ÁöÁ¤ÇÑ CGI/SSI ÇÁ·Î±×·¥¿¡ ¾²±â±ÇÇÑÀÌ ¾ø´Â°¡?

      ¼ÒÀ¯ÀÚ¿Ü ´©±¸µµ CGI/SSI ÇÁ·Î±×·¥À» º¯°æÇÏ±æ ¿øÇÏÁö¾Ê´Â´Ù.

    17. ÁöÁ¤ÇÑ CGI/SSI ÇÁ·Î±×·¥ÀÌ setuid³ª setgid°¡ ¾Æ´Ñ°¡?

      ¿ì¸®´Â ÇÁ·Î±×·¥ÀÌ ´Ù½Ã UID/GID¸¦ º¯°æÇÏ±æ ¿øÇÏÁö¾Ê´Â´Ù.

    18. ÁöÁ¤ÇÑ »ç¿ëÀÚ/±×·ìÀÌ ÇÁ·Î±×·¥ÀÇ »ç¿ëÀÚ/±×·ì°ú °°Àº°¡?

      »ç¿ëÀÚ°¡ ÆÄÀÏÀÇ ¼ÒÀ¯ÀÚÀΰ¡?

    19. ¾ÈÀüÇÑ µ¿ÀÛÀ» À§ÇØ ÇÁ·Î¼¼½ºÀÇ È¯°æº¯¼ö¸¦ û¼ÒÇÒ ¼ö Àִ°¡?

      suEXEC´Â (¼³Á¤¿¡¼­ Á¤ÀÇÇÑ) ¾ÈÀüÇÑ ½ÇÇà PATH¸¦ Àâ°í, (À̰͵µ ¼³Á¤¿¡¼­ Á¤ÀÇ) ¾ÈÀüÇÑ È¯°æº¯¼ö ¸ñ·Ï¿¡ ¿­°ÅµÈ º¯¼ö¸¸ ³²±â°í ÇÁ·Î¼¼½ºÀÇ È¯°æº¯¼ö¸¦ Áö¿î´Ù.

    20. ¼º°øÀûÀ¸·Î ÁöÁ¤ÇÑ CGI/SSI ÇÁ·Î±×·¥À» ½ÇÇàÇÒ ¼ö Àִ°¡?

      ¿©±â¼­ suEXEC°¡ ³¡³ª°í ÁöÁ¤ÇÑ CGI/SSI ÇÁ·Î±×·¥ÀÌ ½ÃÀÛÇÑ´Ù.

    À̰ÍÀÌ suEXEC wrapper º¸¾È¸ðµ¨ÀÇ Ç¥ÁØ µ¿ÀÛÀÌ´Ù. ´Ù¼Ò ¾ö°ÝÇϰí CGI/SSI ¼³°è¿¡ »õ·Î¿î Á¦ÇÑÀÌ µÇÁö¸¸, º¸¾ÈÀ» ¿°µÎ¿¡ µÎ°í ÇѴܰ辿 Á¶½É½º·´°Ô ¸¸µé¾îÁ³´Ù.

    ÀÌ º¸¾È ¸ðµ¨ÀÌ ¼­¹ö ¼³Á¤¿¡ ¾î¶² Á¦ÇÑÀ» ÁÖ´ÂÁö¿Í ÀûÀýÇÑ suEXEC ¼³Á¤À¸·Î ¾î¶² º¸¾È À§ÇèÀ» ÇÇÇÒ ¼ö ÀÖ´ÂÁö¿¡ ´ëÇØ ÀÌ ¹®¼­ÀÇ "´Ù½Ã Çѹø Á¶½ÉÇ϶ó" ÀýÀ» Âü°íÇ϶ó.

    top

    suEXEC ±¸¼º°ú ¼³Ä¡

    ÀÌÁ¦ Àç¹ÌÀÖ´Â ³»¿ëÀÌ ½ÃÀÛÇÑ´Ù.

    suEXEC ±¸¼º ¿É¼Ç

    --enable-suexec
    ÀÌ ¿É¼ÇÀº ±âº»ÀûÀ¸·Î ¼³Ä¡µÇ°Å³ª Ȱ¼ºÈ­µÇÁö¾Ê´Â suEXEC ±â´ÉÀ» Ȱ¼ºÈ­ÇÑ´Ù. APACI°¡ suEXEC¸¦ ¹Þ¾ÆµéÀÌ·Á¸é --enable-suexec ¿É¼Ç¿Ü¿¡ --with-suexec-xxxxx ¿É¼ÇÀÌ ÃÖ¼ÒÇÑ ÇѰ³ ÇÊ¿äÇÏ´Ù.
    --with-suexec-bin=PATH
    suexec ¹ÙÀ̳ʸ® °æ·Î´Â º¸¾È»ó ÀÌÀ¯·Î ¼­¹ö¿¡ ±â·ÏµÇ¾ß ÇÑ´Ù. °æ·Î ±âº»°ªÀ» ¹«½ÃÇÏ·Á¸é ÀÌ ¿É¼ÇÀ» »ç¿ëÇÑ´Ù. ¿¹¸¦ µé¾î --with-suexec-bin=/usr/sbin/suexec
    --with-suexec-caller=UID
    º¸Åë ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÏ´Â »ç¿ëÀÚ¸í. ÇÁ·Î±×·¥À» ½ÇÇàÇÒ ¼ö ÀÖ´Â À¯ÀÏÇÑ »ç¿ëÀÚ´Ù.
    --with-suexec-userdir=DIR
    suEXEC Á¢±ÙÀÌ Çã¿ëµÇ´Â »ç¿ëÀÚ È¨µð·ºÅ丮ÀÇ ÇÏÀ§µð·ºÅ丮¸¦ ÁöÁ¤ÇÑ´Ù. ÀÌ µð·ºÅ丮¿¡ ÀÖ´Â ¸ðµç ½ÇÇàÆÄÀÏÀ» »ç¿ëÀÚÀÇ suEXEC·Î ½ÇÇà¹Ç·Î, ¸ðµç ÇÁ·Î±×·¥ÀÌ "¾ÈÀüÇØ¾ß" ÇÑ´Ù. (¿¹¸¦ µé¾î, °ª¿¡ "*"ÀÌ ¾ø´Â) "°£´ÜÇÑ" UserDir Áö½Ã¾î¸¦ »ç¿ëÇÑ´Ù¸é °°Àº °ªÀ» ¼³Á¤ÇØ¾ß ÇÑ´Ù. UserDir Áö½Ã¾î°¡ passwd ÆÄÀÏ¿¡ ³ª¿Â »ç¿ëÀÚ È¨µð·ºÅ丮¿Í ´Ù¸£¸é suEXEC´Â Á¤»óÀûÀ¸·Î ÀÛµ¿ÇÏÁö ¾Ê´Â´Ù. ±âº»°ªÀº "public_html"ÀÌ´Ù.
    °¡»óÈ£½ºÆ®µéÀÌ °¢°¢ ´Ù¸¥ UserDirÀ» »ç¿ëÇÑ´Ù¸é ¸ðµÎ ÇÑ ºÎ¸ð µð·ºÅ丮 ¾È¿¡ ÀÖµµ·Ï Á¤ÀÇÇØ¾ß Çϰí, ±× ºÎ¸ð µð·ºÅ丮¸íÀ» ¿©±â Àû´Â´Ù. ÀÌ·¸°Ô Á¤ÀÇÇÏÁö ¾ÊÀ¸¸é, "~userdir" cgi ¿äûÀÌ ÀÛµ¿ÇÏÁö ¾Ê´Â´Ù!
    --with-suexec-docroot=DIR
    ¾ÆÆÄÄ¡ÀÇ DocumentRoot¸¦ Á¤ÀÇÇÑ´Ù. ÀÌ´Â suEXEC°¡ »ç¿ëÇÒ ¼ö ÀÖ´Â (UserDirsÀ» Á¦¿ÜÇÑ) À¯ÀÏÇÑ °ø°£ÀÌ´Ù. ±âº» µð·ºÅ丮´Â --datadir °ª¿¡ "/htdocs"À» ºÙÀÎ °ÍÀÌ´Ù. ¿¹¸¦ µé¾î "--datadir=/home/apache"·Î ±¸¼ºÇß´Ù¸é suEXEC wrapper´Â document root·Î "/home/apache/htdocs" µð·ºÅ丮¸¦ »ç¿ëÇÑ´Ù.
    --with-suexec-uidmin=UID
    suEXEC¿¡¼­ ÁöÁ¤°¡´ÉÇÑ »ç¿ëÀÚÀÇ ÃÖ¼Ò UID¸¦ Á¤ÀÇÇÑ´Ù. ´ëºÎºÐÀÇ ½Ã½ºÅÛ¿¡¼­ 500À̳ª 100ÀÌ ÀûÀýÇÏ´Ù. ±âº»°ªÀº 100ÀÌ´Ù.
    --with-suexec-gidmin=GID
    suEXEC¿¡¼­ ÁöÁ¤°¡´ÉÇÑ ±×·ìÀÇ ÃÖ¼Ò GID¸¦ Á¤ÀÇÇÑ´Ù. ´ëºÎºÐÀÇ ½Ã½ºÅÛ¿¡¼­ 100ÀÌ ÀûÀýÇϹǷΠÀÌ °ªÀÌ ±âº»°ªÀÌ´Ù.
    --with-suexec-logfile=FILE
    ¸ðµç suEXEC ÀÛµ¿°ú ¿À·ù¸¦ (°¨½Ã³ª µð¹ö±ë ¸ñÀû¿¡ À¯¿ëÇÑ) ±â·ÏÇÒ ·Î±×ÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù. ±âº»ÀûÀ¸·Î ·Î±×ÆÄÀÏÀÇ À̸§Àº "suexec_log"À̰í Ç¥ÁØ ·Î±×ÆÄÀÏ µð·ºÅ丮¿¡ (--logfiledir) À§Ä¡ÇÑ´Ù.
    --with-suexec-safepath=PATH
    CGI ½ÇÇàÆÄÀÏ¿¡ ³Ñ°ÜÁú ¾ÈÀüÇÑ PATH ȯ°æº¯¼ö¸¦ Á¤ÀÇÇÑ´Ù. ±âº»°ªÀº "/usr/local/bin:/usr/bin:/bin"ÀÌ´Ù.

    suEXEC wrapper¸¦ ÄÄÆÄÀÏÇÏ°í ¼³Ä¡Çϱâ
    --enable-suexec ¿É¼ÇÀ¸·Î suEXEC ±â´ÉÀ» °¡´ÉÇϰÔÇÑ °æ¿ì make ¸í·É¾î¸¦ ½ÇÇàÇϸé suexec ½ÇÇàÆÄÀÏÀÌ (¾ÆÆÄÄ¡¿Í ÇÔ²²) ÀÚµ¿À¸·Î ¸¸µé¾îÁø´Ù.
    ¸ðµç°ÍÀ» ÄÄÆÄÀÏÇÑ ÈÄ make install ¸í·É¾î¸¦ ½ÇÇàÇÏ¿© ¼³Ä¡ÇÒ ¼ö ÀÖ´Ù. ¹ÙÀ̳ʸ®ÆÄÀÏ suexec´Â --sbindir ¿É¼ÇÀ¸·Î ÁöÁ¤ÇÑ µð·ºÅ丮¿¡ ¼³Ä¡µÈ´Ù. ±âº» À§Ä¡´Â "/usr/local/apache2/sbin/suexec"ÀÌ´Ù.
    ¼³Ä¡ °úÁ¤¿¡ root ±ÇÇÑÀÌ ÇÊ¿äÇÔÀ» ÁÖÀÇÇ϶ó. wrapper°¡ »ç¿ëÀÚ ID¸¦ ¼³Á¤ÇϱâÀ§Çؼ­´Â ¼ÒÀ¯ÀÚ°¡ rootÀÌ°í ÆÄÀϸðµå·Î setuserid ½ÇÇàºñÆ®°¡ ¼³Á¤µÇ¾ß ÇÑ´Ù.

    ÆíÁýÁõÀûÀÎ ±ÇÇѼ³Á¤
    suEXEC wrapper´Â ÀÚ½ÅÀ» ½ÇÇàÇÑ »ç¿ëÀÚ°¡ ±¸¼º ¿É¼Ç --with-suexec-caller·Î ÁöÁ¤ÇÑ ¿Ã¹Ù¸¥ »ç¿ëÀÚÀÎÁö È®ÀÎÀ» ÇÏÁö¸¸, ÀÌ °Ë»ç ÀÌÀü¿¡ suEXEC°¡ »ç¿ëÇÏ´Â ½Ã½ºÅÛÈ£Ãâ ȤÀº ¶óÀ̺귯¸® ÇÔ¼ö°¡ Á¶À۵ǾúÀ» ¼ö ÀÖ´Ù. À̸¦ ´ëºñÇϸç ÀϹÝÀûÀ¸·Î ÁÁÀº ½À°üÀ̹ǷΠ¿ÀÁ÷ ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÏ´Â ±×·ì¸¸ÀÌ suEXEC¸¦ ½ÇÇàÇÒ ¼ö ÀÖµµ·Ï ÆÄÀϽýºÅÛ ±ÇÇÑÀ» ÁöÁ¤ÇØ¾ß ÇÑ´Ù.

    ¿¹¸¦ µé¾î, À¥¼­¹ö¸¦ ´ÙÀ½°ú °°ÀÌ ¼³Á¤Çϰí:

    User www
    Group webgroup

    suexec¸¦ "/usr/local/apache2/sbin/suexec"¿¡ ¼³Ä¡ÇÏ¿´´Ù¸é, ´ÙÀ½À» ½ÇÇàÇØ¾ß ÇÑ´Ù:

    chgrp webgroup /usr/local/apache2/bin/suexec
    chmod 4750 /usr/local/apache2/bin/suexec

    ±×·¯¸é ¿ÀÁ÷ ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÏ´Â ±×·ì¸¸ÀÌ suEXEC wrapper¸¦ ½ÇÇàÇÒ ¼ö ÀÖ´Ù.

    top

    suEXEC Ű°í ²ô±â

    ¾ÆÆÄÄ¡´Â ½ÃÀÛÇÒ¶§ --sbindir ¿É¼ÇÀ¸·Î ÁöÁ¤ÇÑ µð·ºÅ丮¿¡¼­ suexec ÆÄÀÏÀ» (±âº»°ª "/usr/local/apache2/sbin/suexec") ã´Â´Ù. ¾ÆÆÄÄ¡°¡ Á¤»óÀûÀ¸·Î ±¸¼ºµÈ suEXEC wrapper¸¦ ¹ß°ßÇÏ¸é ¿À·ù ·Î±×(error log)¿¡ ´ÙÀ½°ú °°ÀÌ Ãâ·ÂÇÑ´Ù:

    [notice] suEXEC mechanism enabled (wrapper: /path/to/suexec)

    ¼­¹ö ½ÃÀÛÁß¿¡ ÀÌ·± ¹®±¸¸¦ ¾ø´Ù¸é ¼­¹ö´Â ±â´ëÇÑ Àå¼Ò¿¡¼­ wrapper ÇÁ·Î±×·¥À» ãÁö ¸øÇ߰ųª, ½ÇÇàÆÄÀÏÀÌ setuid root·Î ¼³Ä¡µÇÁö¾Ê¾Ò±â ¶§¹®ÀÏ °ÍÀÌ´Ù.

    óÀ½À¸·Î suEXEC ±â´ÉÀ» »ç¿ëÇÏ°í ½Í°í ÀÌ¹Ì ¾ÆÆÄÄ¡ ¼­¹ö°¡ ½ÇÇàÁßÀ̶ó¸é, ¾ÆÆÄÄ¡¸¦ Á×ÀÌ°í ´Ù½Ã ½ÃÀÛÇØ¾ß ÇÑ´Ù. °£´ÜÈ÷ HUPÀ̳ª USR1 ½Ã±×³Î·Î Àç½ÃÀÛÇÏ´Â °ÍÀ¸·Î´Â ÃæºÐÇÏÁö ¾Ê´Ù.

    suEXEC¸¦ ¾È»ç¿ëÇÏ·Á¸é suexec ÆÄÀÏÀ» Áö¿îÈÄ ¾ÆÆÄÄ¡¸¦ Á×À̰í Àç½ÃÀÛÇØ¾ß ÇÑ´Ù.

    top

    suEXEC »ç¿ëÇϱâ

    CGI ÇÁ·Î±×·¥ ¿äûÀÇ °æ¿ì SuexecUserGroup Áö½Ã¾î¸¦ »ç¿ëÇÑ °¡»óÈ£½ºÆ®¿¡ ¿äûÀ» ÇÏ¿´°Å³ª mod_userdirÀÌ ¿äûÀ» ó¸®ÇÏ´Â °æ¿ì¿¡¸¸ suEXEC wrapper¸¦ È£ÃâÇÑ´Ù.

    °¡»óÈ£½ºÆ®:
    suEXEC wrapper¸¦ »ç¿ëÇÏ´Â ÇѰ¡Áö ¹æ¹ýÀº VirtualHost Á¤ÀÇ¿¡ SuexecUserGroup Áö½Ã¾î¸¦ »ç¿ëÇÏ´Â °ÍÀÌ´Ù. ÀÌ Áö½Ã¾î¸¦ ÁÖ¼­¹ö »ç¿ëÀÚ ID¿Í ´Ù¸£°Ô ¼³Á¤Çϸé CGI ÀÚ¿øÀÇ ¸ðµç ¿äûÀÌ <VirtualHost>¿¡¼­ ÁöÁ¤ÇÑ User¿Í GroupÀ¸·Î ½ÇÇàµÈ´Ù. ÀÌ Áö½Ã¾îµéÀÌ <VirtualHost>¿¡ ¾øÀ¸¸é ÁÖ¼­¹ö userid¸¦ »ç¿ëÇÑ´Ù.

    »ç¿ëÀÚ µð·ºÅ丮:
    mod_userdirÀÌ ¿äûÀ» ó¸®ÇÑ´Ù¸é suEXEC wrapper¸¦ È£ÃâÇÏ¿©, ¿äûÇÑ »ç¿ëÀÚ µð·ºÅ丮¿¡ ÇØ´çÇÏ´Â »ç¿ëÀÚ ID·Î CGI ÇÁ·Î±×·¥À» ½ÇÇàÇÑ´Ù. ÀÌ ±â´ÉÀÌ µ¿ÀÛÇÏ·Á¸é »ç¿ëÀÚ ID·Î CGI¸¦ ½ÇÇàÇÒ ¼ö ÀÖ°í ½ºÅ©¸³Æ®°¡ À§ÀÇ º¸¾È °Ë»ç Ç׸ñÀ» ¸¸Á·ÇØ¾ß ÇÑ´Ù. ±¸¼º ¿É¼Ç --with-suexec-userdirÀ» Âü°íÇ϶ó.

    top

    suEXEC µð¹ö±ëÇϱâ

    suEXEC wrapper´Â ·Î±× Á¤º¸¸¦ À§¿¡¼­ ´Ù·é --with-suexec-logfile ¿É¼ÇÀ¸·Î ÁöÁ¤ÇÑ ÆÄÀÏ¿¡ ¾´´Ù. wrapper¸¦ ¿Ã¹Ù·Î ±¸¼ºÇÏ°í ¼³Ä¡Çß´Ù¸é ¾îµð¼­ À߸øµÇ¾ú´ÂÁö ÀÌ ·Î±×ÆÄÀÏ¿Í ¼­¹öÀÇ error_log¸¦ »ìÆìºÁ¶ó.

    top

    ´Ù½Ã Çѹø Á¶½ÉÇ϶ó: °æ°í¿Í ¿¹Á¦

    ÁÖÀÇ! ÀÌ ¼½¼ÇÀº ¿ÏÀüÇÏÁö ¾ÊÀ» ¼ö ÀÖ´Ù. ¾ÆÆÄÄ¡±×·ìÀÇ ¿Â¶óÀÎ ¹®¼­¿¡¼­ ÀÌ ¹®¼­ÀÇ ÃֽůÇÀ» Âü°íÇ϶ó.

    wrapper°¡ ¼­¹ö ¼³Á¤À» Á¦¾àÇÏ´Â ¸î°¡Áö Èï¹Ì·Î¿î Á¡ÀÌ ÀÖ´Ù. suEXEC¿Í °ü·ÃµÈ "¹ö±×"¸¦ º¸°íÇϱâ Àü¿¡ À̵éÀ» »ìÆìº¸±æ ¹Ù¶õ´Ù.

    • suEXEC Á¦¾à »çÇ×
    • µð·ºÅ丮 ±¸Á¶ Á¦ÇÑ

      º¸¾È°ú È¿À²¼ºÀ» À§ÇØ ¸ðµç suEXEC ¿äûÀº °¡»óÈ£½ºÆ®ÀÇ °æ¿ì ÃÖ»óÀ§ document root ȤÀº userdir ¿äûÀÇ °æ¿ì ÃÖ»óÀ§ °³ÀÎ document root ¾È¿¡¼­ ¹ß»ýÇØ¾ß ÇÑ´Ù. ¿¹¸¦ µé¾î, °¡»óÈ£½ºÆ® ³×°³¸¦ ¼³Á¤Çß´Ù¸é °¡»óÈ£½ºÆ®¿¡¼­ suEXEC¸¦ ÀÌ¿ëÇϱâÀ§ÇØ °¡»óÈ£½ºÆ®ÀÇ document root¸¦ ÁÖ ¾ÆÆÄÄ¡ ¹®¼­ °èÃþ±¸Á¶ ¹Û¿¡ ¼³Á¤ÇÒ Çʿ䰡 ÀÖ´Ù. (¿¹Á¦´Â ´ÙÀ½¿¡.)

    • suEXECÀÇ PATH ȯ°æº¯¼ö

      º¯°æÇϸé À§ÇèÇÒ ¼ö ÀÖ´Ù. ¿©±â¿¡ Æ÷ÇÔÇÏ´Â ¸ðµç °æ·Î°¡ ¹ÏÀ» ¼ö ÀÖ´Â µð·ºÅ丮ÀÎÁö È®ÀÎÇ϶ó. ÀÌ Áö±¸»óÀÇ ´©±º°¡°¡ ±×°÷¿¡ ÀÖ´Â Æ®·ÎÀ̸ñ¸¶¸¦ ½ÇÇàÇÏ±æ ¿øÇÏÁö ¾ÊÀ» °ÍÀÌ´Ù.

    • suEXEC ÄÚµå ¼öÁ¤Çϱâ

      ¹Ýº¹Çؼ­ ¸»ÇÏÁö¸¸, ´ç½ÅÀÌ ¹«¾ùÀ» ÇÏ´ÂÁö ¸ð¸£°í ½ÃµµÇÑ´Ù¸é Å« ¹®Á¦°¡ ¹ß»ýÇÒ ¼ö ÀÖ´Ù. ¾î¶² °æ¿ì¿¡µµ ¼öÁ¤ÇÏÁö¸¶¶ó.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/invoking.html.de0000644000000000000500000003320413412755316016553 0ustar rootsrc Apache starten - Apache HTTP Server Version 2.4
    <-

    Apache starten

    Verfügbare Sprachen:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr 

    Diese Übersetzung ist möglicherweise nicht mehr aktuell. Bitte prüfen Sie die englische Version auf die neuesten Änderungen.

    Unter Windows läuft der Apache üblicherweise als Dienst (Windows NT, 2000 und XP) oder als Konsolenanwendung (Windows 9x und ME). Für Einzelheiten lesen Sie bitte Apache als Dienst betreiben und Apache als Konsolenanwendung betreiben.

    Unter Unix wird das httpd-Programm als Daemon ausgeführt, der im Hintergrund fortlaufend aktiv ist, um Anfragen zu bearbeiten. Dieses Dokument beschreibt, wie httpd aufgerufen wird.

    top

    Wie der Apache startet

    Wenn die in der Konfigurationsdatei angegebene Listen-Anweisung auf die Voreinstellung von 80 gesetzt ist (oder einen anderen Port unterhalb von 1024), dann müssen Sie root-Berechtigung besitzen, um den Apache starten zu können. Nur dann kann er sich an diesen privilegierten Port binden. Sobald der Server gestartet ist und einige vorbereitende Aktionen wie das Öffnen seiner Log-Dateien ausgeführt hat, startet er mehrere Kind-Prozesse, welche die Arbeit erledigen: das Lauschen auf und Beantworten von Anfragen von Clients. Der Haupt-httpd-Prozess läuft unter dem Benutzer root weiter, die Kind-Prozesse jedoch werden unter weniger privilegierten Benutzerkennungen ausgeführt. Dies wird von dem ausgewählten Multi-Processing-Modul gesteuert.

    Die Verwendung des Steuerskripts apachectl ist die empfohlene Methode, das httpd-Programm zu starten. Dieses Skript setzt verschiedene Umgebungsvariablen, die für die korrekte Funktion von httpd unter einigen Betriebssystemen notwendig sind, und startet dann das httpd-Programm. apachectl reicht alle Kommandozeilenargumente durch, so dass alle httpd-Optionen auch mit apachectl verwendet werden können. Um den korrekten Ablageort des httpd-Programms sowie einige Kommandozeilenargumente anzugeben, die Sie immer verwenden möchten, können Sie auch das Skript apachectl direkt editieren und die Variable HTTPD am Anfang ändern.

    Das Erste was httpd macht, wenn es startet, ist das Suchen und Einlesen der Konfigurationsdatei httpd.conf. Der Ablageort dieser Datei wird zur Kompilierungszeit festgelegt. Es ist aber möglich, den Ablageort zur Laufzeit anzugeben, indem die Kommandozeilenoption -f wie folgt verwendet wird:

    /usr/local/apache2/bin/apachectl -f /usr/local/apache2/conf/httpd.conf

    Wenn während des Starts alles gutgeht, trennt sich der Server vom Terminal ab und die Eingabeaufforderung erscheint gleich darauf wieder. Dies zeigt an, dass der Server hochgefahren ist und läuft. Sie können nun Ihren Browser benutzen, um Verbindung zum Server aufzunehmen und sich die Testseite im DocumentRoot-Verzeichnis anzusehen wie auch die lokale Kopie der Dokumentation, die von dieser Seite aus verlinkt ist.

    top

    Fehler während des Hochfahrens

    Wenn der Apache während des Hochfahrens einen schweren Fehler feststellt, schreibt er entweder eine Nachricht, die das Problem näher schildert, auf die Konsole oder ins ErrorLog, bevor er sich selbst beendet. Eine der häufigsten Fehlermeldungen ist "Unable to bind to Port ..." (Anm.d.Ü.: "Kann nicht an Port ... binden"). Diese Meldung wird üblicherweise verursacht:

    • entweder durch den Versuch, den Server an einem privilegierten Port zu starten, während man nicht als Benutzer root angemeldet ist,
    • oder durch den Versuch, den Server zu starten, wenn bereits eine andere Instanz des Apache oder ein anderer Webserver an den gleichen Port gebunden ist.

    Für weitere Anleitungen zur Fehlerbehebung lesen Sie bitte die Apache-FAQ.

    top

    Beim Bootvorgang starten

    Wenn Sie möchten, dass Ihr Server direkt nach einem System-Neustart weiterläuft, sollten Sie einen Aufruf von apachectl zu den Startdateien Ihres Systems hinzufügen (üblicherweise rc.local oder eine Datei in einem rc.N-Verzeichnis). Dies startet den Apache als root. Stellen Sie zuvor jedoch sicher, dass Ihr Server hinsichtlich Sicherheit und Zugriffsbeschränkungen richtig konfiguriert ist.

    Das apachectl-Skript ist dafür ausgelegt, wie ein Standard-SysV-init-Skript zu arbeiten. Es akzeptiert die Argumente start, restart und stop und übersetzt sie in die entsprechenden Signale für httpd. Daher können Sie oftmals einfach apachectl in das entsprechende init-Verzeichnis linken. Überprüfen Sie bitte auf jeden Fall die genauen Anforderungen Ihres Systems.

    top

    Weitere Informationen

    Weitere Informationen über Kommandozeilenoptionen von httpd und apachectl sowie anderen Hilfsprogrammen, die dem Server beigefügt sind, sind auf der Seite Server und Hilfsprogramme verfügbar. Es existiert außerdem eine Dokumentation aller in der Apache-Distribution enthaltenen Module und der von ihnen bereitgestellten Direktiven.

    Verfügbare Sprachen:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr 

    top

    Kommentare

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/0002755000000000000500000000000013523273357014234 5ustar rootsrchttpd-2.4.41/docs/manual/mod/mod_remoteip.html.en0000644000000000000500000006517113412755316020213 0ustar rootsrc mod_remoteip - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_remoteip

    Available Languages:  en  |  fr 

    Description:Replaces the original client IP address for the connection with the useragent IP address list presented by a proxies or a load balancer via the request headers.
    Status:Base
    Module Identifier:remoteip_module
    Source File:mod_remoteip.c

    Summary

    This module is used to treat the useragent which initiated the request as the originating useragent as identified by httpd for the purposes of authorization and logging, even where that useragent is behind a load balancer, front end server, or proxy server.

    The module overrides the client IP address for the connection with the useragent IP address reported in the request header configured with the RemoteIPHeader directive.

    Additionally, this module implements the server side of HAProxy's PROXY Protocol when using the RemoteIPProxyProtocol directive.

    Once replaced as instructed, this overridden useragent IP address is then used for the mod_authz_host Require ip feature, is reported by mod_status, and is recorded by mod_log_config %a and core %a format strings. The underlying client IP of the connection is available in the %{c}a format string.

    It is critical to only enable this behavior from intermediate hosts (proxies, etc) which are trusted by this server, since it is trivial for the remote useragent to impersonate another useragent.
    top

    Remote IP Processing

    Apache by default identifies the useragent with the connection's client_ip value, and the connection remote_host and remote_logname are derived from this value. These fields play a role in authentication, authorization and logging and other purposes by other loadable modules.

    mod_remoteip overrides the client IP of the connection with the advertised useragent IP as provided by a proxy or load balancer, for the duration of the request. A load balancer might establish a long lived keepalive connection with the server, and each request will have the correct useragent IP, even though the underlying client IP address of the load balancer remains unchanged.

    When multiple, comma delimited useragent IP addresses are listed in the header value, they are processed in Right-to-Left order. Processing halts when a given useragent IP address is not trusted to present the preceding IP address. The header field is updated to this remaining list of unconfirmed IP addresses, or if all IP addresses were trusted, this header is removed from the request altogether.

    In overriding the client IP, the module stores the list of intermediate hosts in a remoteip-proxy-ip-list note, which mod_log_config can record using the %{remoteip-proxy-ip-list}n format token. If the administrator needs to store this as an additional header, this same value can also be recording as a header using the directive RemoteIPProxiesHeader.

    IPv4-over-IPv6 Mapped Addresses

    As with httpd in general, any IPv4-over-IPv6 mapped addresses are recorded in their IPv4 representation.

    Internal (Private) Addresses

    All internal addresses 10/8, 172.16/12, 192.168/16, 169.254/16 and 127/8 blocks (and IPv6 addresses outside of the public 2000::/3 block) are only evaluated by mod_remoteip when RemoteIPInternalProxy internal (intranet) proxies are registered.
    top

    RemoteIPHeader Directive

    Description:Declare the header field which should be parsed for useragent IP addresses
    Syntax:RemoteIPHeader header-field
    Context:server config, virtual host
    Status:Base
    Module:mod_remoteip

    The RemoteIPHeader directive triggers mod_remoteip to treat the value of the specified header-field header as the useragent IP address, or list of intermediate useragent IP addresses, subject to further configuration of the RemoteIPInternalProxy and RemoteIPTrustedProxy directives. Unless these other directives are used, mod_remoteip will trust all hosts presenting a RemoteIPHeader IP value.

    Internal (Load Balancer) Example

    RemoteIPHeader X-Client-IP

    Proxy Example

    RemoteIPHeader X-Forwarded-For
    top

    RemoteIPInternalProxy Directive

    Description:Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    Syntax:RemoteIPInternalProxy proxy-ip|proxy-ip/subnet|hostname ...
    Context:server config, virtual host
    Status:Base
    Module:mod_remoteip

    The RemoteIPInternalProxy directive adds one or more addresses (or address blocks) to trust as presenting a valid RemoteIPHeader value of the useragent IP. Unlike the RemoteIPTrustedProxy directive, any IP address presented in this header, including private intranet addresses, are trusted when passed from these proxies.

    Internal (Load Balancer) Example

    RemoteIPHeader X-Client-IP
    RemoteIPInternalProxy 10.0.2.0/24
    RemoteIPInternalProxy gateway.localdomain
    top

    RemoteIPInternalProxyList Directive

    Description:Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    Syntax:RemoteIPInternalProxyList filename
    Context:server config, virtual host
    Status:Base
    Module:mod_remoteip

    The RemoteIPInternalProxyList directive specifies a file parsed at startup, and builds a list of addresses (or address blocks) to trust as presenting a valid RemoteIPHeader value of the useragent IP.

    The '#' hash character designates a comment line, otherwise each whitespace or newline separated entry is processed identically to the RemoteIPInternalProxy directive.

    Internal (Load Balancer) Example

    RemoteIPHeader X-Client-IP
    RemoteIPInternalProxyList conf/trusted-proxies.lst

    conf/trusted-proxies.lst contents

    # Our internally trusted proxies;
    10.0.2.0/24         #Everyone in the testing group
    gateway.localdomain #The front end balancer
    top

    RemoteIPProxiesHeader Directive

    Description:Declare the header field which will record all intermediate IP addresses
    Syntax:RemoteIPProxiesHeader HeaderFieldName
    Context:server config, virtual host
    Status:Base
    Module:mod_remoteip

    The RemoteIPProxiesHeader directive specifies a header into which mod_remoteip will collect a list of all of the intermediate client IP addresses trusted to resolve the useragent IP of the request. Note that intermediate RemoteIPTrustedProxy addresses are recorded in this header, while any intermediate RemoteIPInternalProxy addresses are discarded.

    Example

    RemoteIPHeader X-Forwarded-For
    RemoteIPProxiesHeader X-Forwarded-By
    top

    RemoteIPProxyProtocol Directive

    Description:Enable or disable PROXY protocol handling
    Syntax:RemoteIPProxyProtocol On|Off
    Context:server config, virtual host
    Status:Base
    Module:mod_remoteip
    Compatibility:RemoteIPProxyProtocol is only available in httpd 2.4.31 and newer

    The RemoteIPProxyProtocol directive enables or disables the reading and handling of the PROXY protocol connection header. If enabled with the On flag, the upstream client must send the header every time it opens a connection or the connection will be aborted unless it is in the list of disabled hosts provided by the RemoteIPProxyProtocolExceptions directive.

    While this directive may be specified in any virtual host, it is important to understand that because the PROXY protocol is connection based and protocol agnostic, the enabling and disabling is actually based on IP address and port. This means that if you have multiple name-based virtual hosts for the same host and port, and you enable it for any one of them, then it is enabled for all of them (with that host and port). It also means that if you attempt to enable the PROXY protocol in one and disable in the other, that won't work; in such a case, the last one wins and a notice will be logged indicating which setting was being overridden.

    Listen 80
    <VirtualHost *:80>
        ServerName www.example.com
        RemoteIPProxyProtocol On
    
        #Requests to this virtual host must have a PROXY protocol
        # header provided. If it is missing, the connection will
        # be aborted
    </VirtualHost>
    
    Listen 8080
    <VirtualHost *:8080>
        ServerName www.example.com
        RemoteIPProxyProtocol On
        RemoteIPProxyProtocolExceptions 127.0.0.1 10.0.0.0/8
    
        #Requests to this virtual host must have a PROXY protocol
        # header provided. If it is missing, the connection will
        # be aborted except when coming from localhost or the
        # 10.x.x.x RFC1918 range
    </VirtualHost>
    top

    RemoteIPProxyProtocolExceptions Directive

    Description:Disable processing of PROXY header for certain hosts or networks
    Syntax:RemoteIPProxyProtocolExceptions host|range [host|range] [host|range]
    Context:server config, virtual host
    Status:Base
    Module:mod_remoteip
    Compatibility:RemoteIPProxyProtocolExceptions is only available in httpd 2.4.31 and newer

    The RemoteIPProxyProtocol directive enables or disables the reading and handling of the PROXY protocol connection header. Sometimes it is desirable to require clients to provide the PROXY header, but permit other clients to connect without it. This directive allows a server administrator to configure a single host or CIDR range of hosts that may do so. This is generally useful for monitoring and administrative traffic to a virtual host direct to the server behind the upstream load balancer.

    top

    RemoteIPTrustedProxy Directive

    Description:Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    Syntax:RemoteIPTrustedProxy proxy-ip|proxy-ip/subnet|hostname ...
    Context:server config, virtual host
    Status:Base
    Module:mod_remoteip

    The RemoteIPTrustedProxy directive adds one or more addresses (or address blocks) to trust as presenting a valid RemoteIPHeader value of the useragent IP. Unlike the RemoteIPInternalProxy directive, any intranet or private IP address reported by such proxies, including the 10/8, 172.16/12, 192.168/16, 169.254/16 and 127/8 blocks (or outside of the IPv6 public 2000::/3 block) are not trusted as the useragent IP, and are left in the RemoteIPHeader header's value.

    Trusted (Load Balancer) Example

    RemoteIPHeader X-Forwarded-For
    RemoteIPTrustedProxy 10.0.2.16/28
    RemoteIPTrustedProxy proxy.example.com
    top

    RemoteIPTrustedProxyList Directive

    Description:Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    Syntax:RemoteIPTrustedProxyList filename
    Context:server config, virtual host
    Status:Base
    Module:mod_remoteip

    The RemoteIPTrustedProxyList directive specifies a file parsed at startup, and builds a list of addresses (or address blocks) to trust as presenting a valid RemoteIPHeader value of the useragent IP.

    The '#' hash character designates a comment line, otherwise each whitespace or newline separated entry is processed identically to the RemoteIPTrustedProxy directive.

    Trusted (Load Balancer) Example

    RemoteIPHeader X-Forwarded-For
    RemoteIPTrustedProxyList conf/trusted-proxies.lst

    conf/trusted-proxies.lst contents

    # Identified external proxies;
    192.0.2.16/28 #wap phone group of proxies
    proxy.isp.example.com #some well known ISP

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_setenvif.html0000644000000000000500000000076313362070302017572 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_setenvif.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_setenvif.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_setenvif.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_setenvif.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: mod_setenvif.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_proxy_hcheck.html.en0000644000000000000500000004170313412755316021050 0ustar rootsrc mod_proxy_hcheck - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy_hcheck

    Available Languages:  en  |  fr 

    Description:Dynamic health check of Balancer members (workers) for mod_proxy
    Status:Extension
    Module Identifier:proxy_hcheck_module
    Source File:mod_proxy_hcheck.c
    Compatibility:Available in Apache 2.4.21 and later

    Summary

    This module provides for dynamic health checking of balancer members (workers). This can be enabled on a worker-by-worker basis. The health check is done independently of the actual reverse proxy requests.

    This module requires the service of mod_watchdog.

    Parameters

    The health check mechanism is enabled via the use of additional BalancerMember parameters, which are configured in the standard way via ProxyPass:

    A new BalancerMember status state (flag) is defined via this module: "C". When the worker is taken offline due to failures as determined by the health check module, this flag is set, and can be seen (and modified) via the balancer-manager.

    Parameter Default Description
    hcmethod None No dynamic health check performed. Choices are:
    MethodDescriptionNote
    NoneNo dynamic health checking done
    TCPCheck that a socket to the backend can be created: e.g. "are you up"
    OPTIONSSend an HTTP OPTIONS request to the backend*
    HEADSend an HTTP HEAD request to the backend*
    GETSend an HTTP GET request to the backend*
    *: Unless hcexpr is used, a 2xx or 3xx HTTP status will be interpreted as passing the health check
    hcpasses 1 Number of successful health check tests before worker is re-enabled
    hcfails 1 Number of failed health check tests before worker is disabled
    hcinterval 30 Period of health checks in seconds (e.g. performed every 30 seconds)
    hcuri   Additional URI to be appended to the worker URL for the health check.
    hctemplate   Name of template, created via ProxyHCTemplate, to use for setting health check parameters for this worker
    hcexpr   Name of expression, created via ProxyHCExpr, used to check response headers for health.
    If not used, 2xx thru 3xx status codes imply success
    top

    Usage examples

    The following example shows how one might configured health checking for various backend servers:

    ProxyHCExpr ok234 {%{REQUEST_STATUS} =~ /^[234]/}
    ProxyHCExpr gdown {%{REQUEST_STATUS} =~ /^[5]/}
    ProxyHCExpr in_maint {hc('body') !~ /Under maintenance/}
    
    <Proxy balancer://foo>
      BalancerMember http://www.example.com/  hcmethod=GET hcexpr=in_maint hcuri=/status.php
      BalancerMember http://www2.example.com/ hcmethod=HEAD hcexpr=ok234 hcinterval=10
      BalancerMember http://www3.example.com/ hcmethod=TCP hcinterval=5 hcpasses=2 hcfails=3
      BalancerMember http://www4.example.com/
    </Proxy>
    
    ProxyPass "/" "balancer://foo"
    ProxyPassReverse "/" "balancer://foo"

    In this scenario, http://www.example.com/ is health checked by sending a GET /status.php request to that server and seeing that the returned page does not include the string Under maintenance. If it does, that server is put in health-check fail mode, and disabled. This dynamic check is performed every 30 seconds, which is the default.

    http://www2.example.com/ is checked by sending a simple HEAD request every 10 seconds and making sure that the response status is 2xx, 3xx or 4xx. http://www3.example.com/ is checked every 5 seconds by simply ensuring that the socket to that server is up. If the backend is marked as "down" and it passes 2 health check, it will be re-enabled and added back into the load balancer. It takes 3 back-to-back health check failures to disable the server and move it out of rotation. Finally, http://www4.example.com/ is not dynamically checked at all.

    top

    ProxyHCExpr Directive

    Description:Creates a named condition expression to use to determine health of the backend based on its response
    Syntax:ProxyHCExpr name {ap_expr expression}
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy_hcheck

    The ProxyHCExpr directive allows for creating a named condition expression that checks the response headers of the backend server to determine its health. This named condition can then be assigned to balancer members via the hcexpr parameter.

    ProxyHCExpr: Allow for 2xx/3xx/4xx as passing

    ProxyHCExpr ok234 {%{REQUEST_STATUS} =~ /^[234]/}
    ProxyPass "/apps"     "balancer://foo"
    
    <Proxy balancer://foo>
      BalancerMember http://www2.example.com/  hcmethod=HEAD hcexpr=ok234 hcinterval=10
    </Proxy>
    The expression can use curly-parens ("{}") as quoting deliminators in addition to normal quotes.

    If using a health check method (eg: GET) which results in a response body, that body itself can be checked via ap_expr using the hc() expression function, which is unique to this module.

    In the following example, we send the backend a GET request and if the response body contains the phrase Under maintenance, we want to disable the backend.

    ProxyHCExpr: Checking response body

    ProxyHCExpr in_maint {hc('body') !~ /Under maintenance/}
    ProxyPass "/apps"     "balancer://foo"
    
    <Proxy balancer://foo>
      BalancerMember http://www.example.com/ hcexpr=in_maint hcmethod=get hcuri=/status.php
    </Proxy>

    NOTE: Since response body can quite large, it is best if used against specific status pages.

    top

    ProxyHCTemplate Directive

    Description:Creates a named template for setting various health check parameters
    Syntax:ProxyHCTemplate name parameter=setting [...]
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy_hcheck

    The ProxyHCTemplate directive allows for creating a named set (template) of health check parameters that can then be assigned to balancer members via the hctemplate parameter.

    ProxyHCTemplate

    ProxyHCTemplate tcp5 hcmethod=tcp hcinterval=5
    ProxyPass "/apps"     "balancer://foo"
    
    <Proxy balancer://foo>
      BalancerMember http://www2.example.com/ hctemplate=tcp5
    </Proxy>
    top

    ProxyHCTPsize Directive

    Description:Sets the total server-wide size of the threadpool used for the health check workers
    Syntax:ProxyHCTPsize size
    Default:ProxyHCTPsize 16
    Context:server config
    Status:Extension
    Module:mod_proxy_hcheck

    If Apache httpd and APR are built with thread support, the health check module will offload the work of the actual checking to a threadpool associated with the Watchdog process, allowing for parallel checks. The ProxyHCTPsize directive determines the size of this threadpool. If set to 0, no threadpool is used at all, resulting in serialized health checks.

    ProxyHCTPsize

    ProxyHCTPsize 32

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_negotiation.html0000644000000000000500000000050113362070302020255 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_negotiation.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_negotiation.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_negotiation.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_proxy_connect.html.ja.utf80000644000000000000500000002232213412755316022125 0ustar rootsrc mod_proxy_connect - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_proxy_connect

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:CONNECT リクエストを扱ㆠmod_proxy ç”¨ã®æ‹¡å¼µ
    ステータス:Extension
    モジュール識別å­:proxy_connect_module
    ソースファイル:mod_proxy_connect.c

    概è¦

    本モジュールã«ã¯ mod_proxy ãŒå¿…è¦ã§ã™ã€‚ CONNECT HTTP メソッドをサãƒãƒ¼ãƒˆã—ã¾ã™ã€‚ ã“ã®ãƒ¡ã‚½ãƒƒãƒ‰ã¯ä¸»ã«ãƒ—ロキシ㫠SSL リクエストを通㙠(訳注: SSLトンãƒãƒªãƒ³ã‚°)ã«ä½¿ã‚れã¾ã™ã€‚

    CONNECT リクエストを扱ãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ã«ã¯ mod_proxy 㨠mod_proxy_connect をサーãƒã«çµ„ã¿è¾¼ã‚€å¿…è¦ãŒã‚りã¾ã™ã€‚

    警告

    安全ãªã‚µãƒ¼ãƒã«ã™ã‚‹ã¾ã§ãƒ—ãƒ­ã‚­ã‚·æ©Ÿèƒ½ã¯æœ‰åйã«ã—ãªã„ã§ãã ã•ã„。 オープンプロキシサーãƒã¯ã‚ãªãŸè‡ªèº«ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«ã¨ã£ã¦ã‚‚〠インターãƒãƒƒãƒˆå…¨ä½“ã«ã¨ã£ã¦ã‚‚å±é™ºã§ã™ã€‚

    Support Apache!

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    AllowCONNECT ディレクティブ

    説明:Ports that are allowed to CONNECT through the proxy
    æ§‹æ–‡:AllowCONNECT port[-port] [port[-port]] ...
    デフォルト:AllowCONNECT 443 563
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy_connect
    äº’æ›æ€§:Moved from mod_proxy in Apache 2.3.5. Port ranges available since Apache 2.3.7.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_mime.html.ja.utf80000644000000000000500000021512013412755316020162 0ustar rootsrc mod_mime - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_mime

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:リクエストã•れãŸãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã¨ãƒ•ã‚¡ã‚¤ãƒ«ã®æŒ¯ã‚‹èˆžã„ (ãƒãƒ³ãƒ‰ãƒ©ã¨ãƒ•ィルタ)ã€å†…容 (MIME タイプã€è¨€èªžã€æ–‡å­—セットã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°) ã¨ã‚’関連付ã‘ã‚‹
    ステータス:
    モジュール識別å­:mime_module
    ソースファイル:mod_mime.c

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯æ‹¡å¼µå­ã‚’使ã£ã¦ã„ã‚ã„ã‚ãªã€Œãƒ¡ã‚¿æƒ…å ±ã€ã‚’ファイル㫠関連付ã‘ã‚‹ãŸã‚ã«ä½¿ç”¨ã•れã¾ã™ã€‚ã“ã®æƒ…å ±ã¯ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®ãƒ•ァイルå㨠MIME タイプã€è¨€èªžã€æ–‡å­—セットã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã¨ã‚’関連付ã‘ã¾ã™ã€‚ ã“ã®æƒ…å ±ã¯ãƒ–ラウザã«é€ã‚‰ã‚Œã¾ã™ã—ã€è¤‡æ•°ã®ãƒ•ァイルã®ä¸­ã‹ã‚‰ãƒ¦ãƒ¼ã‚¶ã®å¥½ã¿ã® ã‚‚ã®ãŒé¸ã°ã‚Œã‚‹ã‚ˆã†ã«ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒˆãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã§ã‚‚使ã‚れã¾ã™ã€‚ コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ ã«é–¢ã™ã‚‹è©³ã—ã„æƒ…報㯠mod_negotiation ã‚’ã”覧下ã•ã„。

    AddCharset ディレクティブ〠AddEncoding ディレクティブ〠AddHandler ディレクティブ〠AddLanguage ディレクティブ〠AddType ディレクティブã¯ã™ã¹ã¦ã€ ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã‚’メタ情報ã«ãƒžãƒƒãƒ—ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã•れã¾ã™ã€‚ ãれãžã‚Œã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®æ–‡å­—セット (訳注: charset)ã€content-encoding, content-language, MIME タイプ (content-type) を設定ã—ã¾ã™ã€‚ TypesConfig ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯æ‹¡å¼µå­ã‚’ MIME タイプã«ãƒžãƒƒãƒ—ã™ã‚‹ãƒ•ァイルを指定ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã•れã¾ã™ã€‚

    ã•らã«ã€mod_mime ã¯ã‚³ãƒ³ãƒ†ãƒ³ãƒ„を作æˆã€å‡¦ç†ã™ã‚‹ ãƒãƒ³ãƒ‰ãƒ© 㨠フィルタ を設定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚AddHandler ディレクティブã€AddOutputFilter ディレクティブã€AddInputFilter ディレクティブ㯠ドキュメントを扱ã†ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚„スクリプトを制御ã—ã¾ã™ã€‚ MultiviewsMatch ディレクティブ㯠ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæŒ‡å®šã—ãŸãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã‚’ mod_negotiation ㌠Multiviews ã®ãƒžãƒƒãƒã‚’ã¨ã‚‹ã¨ã㫠考慮ã™ã‚‹ã‚ˆã†ã«ã§ãã¾ã™ã€‚

    mod_mime ã¯ãƒ¡ã‚¿æƒ…報をファイルåã¨é–¢é€£ä»˜ã‘ã¾ã™ãŒã€ core サーãƒã«ã¯ã‚るコンテナ (ãŸã¨ãˆã°, <Location>, <Directory>, <Files>) ã®ä¸­ã®ã™ã¹ã¦ã®ãƒ•ァイルを特定㮠メタ情報ã¨é–¢é€£ä»˜ã‘るディレクティブãŒã‚りã¾ã™ã€‚ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«ã¯ ForceType, SetHandler, SetInputFilter, SetOutputFilter ãŒã‚りã¾ã™ã€‚ コアã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠mod_mime ã«ã‚ˆã‚Šå®šç¾©ã•れ㟠ファイルåã®æ‹¡å¼µå­ã®ãƒžãƒƒãƒ”ングã™ã¹ã¦ã‚’上書ãã—ã¾ã™ã€‚

    ファイルã®ãƒ¡ã‚¿æƒ…報を変ãˆã¦ã‚‚ Last-Modified ヘッダã®å€¤ã¯å¤‰ã‚らãªã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。ã§ã™ã‹ã‚‰ã€ ãれらを変更ã—ãŸå ´åˆã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚„プロキシã§ä»¥å‰ã«ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã•れ㟠コピーãŒãã®ã¨ãã®ãƒ˜ãƒƒãƒ€ã¨ã¨ã‚‚ã«ä½¿ã‚れるå¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ メタ情報 (言語ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã€æ–‡å­—セットã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°) ã‚’ 変更ã—ãŸã¨ãã¯ã€ã™ã¹ã¦ã®è¨ªå•è€…ãŒæ­£ã—ã„コンテントヘッダを å—ã‘å–るよã†ã«ã€å½±éŸ¿ã‚’å—ã‘るファイル㫠'touch' コマンドを実行ã™ã‚‹ (最終更新日を更新ã™ã‚‹) å¿…è¦ãŒã‚ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。

    top

    è¤‡æ•°ã®æ‹¡å¼µå­ã®ã‚るファイル

    ファイルã¯è¤‡æ•°ã®æ‹¡å¼µå­ã‚’æŒã¤ã“ã¨ãŒã§ãã€æ‹¡å¼µå­ã®é †ç•ªã¯é€šå¸¸ã¯é–¢ä¿‚ã‚りã¾ã›ã‚“。例ãˆã°ã€ãƒ•ァイル welcome.html.fr ãŒã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—㯠text/html ã«ã€è¨€èªžã¯ãƒ•ランス語ã«ãƒžãƒƒãƒ—ã•れる場åˆã€welcome.fr.html ã‚‚ã¾ã£ãŸãåŒã˜æƒ…å ±ã«ãƒžãƒƒãƒ—ã•れã¾ã™ã€‚ åŒã˜ãƒ¡ã‚¿æƒ…å ±ã«ãƒžãƒƒãƒ—ã•れる拡張å­ãŒè¤‡æ•°ã‚ã‚‹ã¨ãã«ã¯ã€è¨€èªžã¨ コンテントエンコーディングを除ã„ã¦ã€ å³å´ã«ã‚ã‚‹ã‚‚ã®ãŒä½¿ç”¨ã•れã¾ã™ã€‚ãŸã¨ãˆã°ã€.gif ㌠MIME タイプ image/gif ã«ãƒžãƒƒãƒ—ã•れã€.html ㌠MIME タイプ text/html ã«ãƒžãƒƒãƒ—ã•れる場åˆã¯ã€ãƒ•ァイル welcome.gif.html 㯠MIME タイプ text/html ã«é–¢é€£ä»˜ã‘られã¾ã™ã€‚

    リソースã«è¤‡æ•°ã®è¨€èªžã‚„エンコーディングを関連付ã‘ã‚‹ã“㨠ãŒã§ãã‚‹ãŸã‚〠言語ã¨ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã¯å‰ã®ã‚‚ã®ã«è¿½åŠ ã•れã¦ã„ãã¾ã™ã€‚ ãŸã¨ãˆã°ã€ãƒ•ァイル welcome.html.en.de 㯠Content-Language: en, de 㨠Content-Type: text/html ã¨ã—ã¦é€ä¿¡ã•れã¾ã™ã€‚

    è¤‡æ•°ã®æ‹¡å¼µå­ã®ã‚るファイル㌠MIME タイプã¨ãƒãƒ³ãƒ‰ãƒ©ã®ä¸¡æ–¹ã«é–¢é€£ä»˜ã‘られã¦ã„ã‚‹ã¨ãã¯æ³¨æ„ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚ ãã®å ´åˆã€æ™®é€šã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒãƒãƒ³ãƒ‰ãƒ©ã«é–¢é€£ä»˜ã‘られ㟠モジュールã«ã‚ˆã£ã¦æ‰±ã‚れるã“ã¨ã«ãªã‚Šã¾ã™ã€‚ãŸã¨ãˆã°ã€æ‹¡å¼µå­ .imap ㌠(mod_imagemap ã®) imap-file ã«ãƒžãƒƒãƒ—ã•れã¦ã„ã¦ã€.html ㌠MIME タイプ text/html ã«ãƒžãƒƒãƒ—ã•れã¦ã„ã‚‹ã¨ãã¯ã€ãƒ•ァイル world.imap.html 㯠imap-file ãƒãƒ³ãƒ‰ãƒ©ã¨ text/html MIME タイプã«é–¢é€£ä»˜ã‘られã¾ã™ã€‚ファイルãŒå‡¦ç†ã•れるã¨ã㯠imap-file ãƒãƒ³ãƒ‰ãƒ©ãŒä½¿ç”¨ã•れã¾ã™ã®ã§ã€ãã®ãƒ•ァイル㯠mod_imagemap ã®ã‚¤ãƒ¡ãƒ¼ã‚¸ãƒžãƒƒãƒ—ファイルã¨ã—ã¦æ‰±ã‚れるã“ã¨ã«ãªã‚Šã¾ã™ã€‚

    ファイルåã®ãƒ‰ãƒƒãƒˆåŒºåˆ‡ã‚Šã§ã®æœ€å¾Œã®éƒ¨åˆ†ã‚’使ã£ã¦ã€ 特定ã®éƒ¨åˆ†ã®ãƒ¡ã‚¿ãƒ‡ãƒ¼ã‚¿ã«ãƒžãƒƒãƒ”ングã—ãŸã„å ´åˆã¯ã€ Add* ディレクティブã¯ä½¿ã‚ãªã„ã§ãã ã•ã„。 ãŸã¨ãˆã° foo.html.cgi ã‚’ CGI スクリプトã¨ã—ã¦å‡¦ç†ã—ãŸã„ã‘れã©ã‚‚〠bar.cgi.html 㯠CGI スクリプトã¨ã—ã¦ã¯å‡¦ç†ã—ãŸããªã„å ´åˆã€ AddHandler cgi-script .cgi ã¨ã™ã‚‹ä»£ã‚り㫠次ã®ã‚ˆã†ã«ã—ã¦ãã ã•ã„

    Configure handler based on final extension only

    <FilesMatch \.cgi$> SetHandler cgi-script </FilesMatch>

    top

    コンテントエンコーディング

    特定㮠MIME タイプ ã®ãƒ•ァイルã¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã§ã®è»¢é€ã‚’ç°¡å˜ã«ã™ã‚‹ãŸã‚ã«ã€ ã•らã«ç¬¦å·åŒ–ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã“れã¯é€šå¸¸ã¯ gzip 㮠よã†ãªåœ§ç¸®ã®ã“ã¨ã‚’指ã—ã¾ã™ãŒã€pgp ã®ã‚ˆã†ãªæš—å·åŒ–や〠ãƒã‚¤ãƒŠãƒªãƒ•ァイルを ASCII (テキスト) å½¢å¼ã§é€ã‚‹ãŸã‚ã«è€ƒæ¡ˆã•れ㟠UUencoding ã®ã“ã¨ã‚’指ã™ã“ã¨ã‚‚ã‚りã¾ã™ã€‚

    HTTP/1.1 RFC 14.11 節ã§ã¯æ¬¡ã®ã‚ˆã†ã«è¨˜è¿°ã•れã¦ã„ã¾ã™ã€‚

    Content-Encoding エンティティヘッダフィールドã¯ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—㮠修飾å­ã¨ã—ã¦ä½¿ã‚れã¾ã™ã€‚ãれãŒå­˜åœ¨ã—ã¦ã„れã°ã€å€¤ã¯ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ãƒœãƒ‡ã‚£ã« ã©ã®è¿½åŠ ã®ç¬¦å·åŒ–ãŒé©ç”¨ã•れãŸã‹ã‚’示ã—ã€Content-Type ヘッダフィールド㫠書ã‹ã‚Œã¦ã„るメディアタイプを得るãŸã‚ã«ã©ã®å¾©å·æ©Ÿæ§‹ã‚’é©ç”¨ã™ã¹ãã‹ã€ã‚‚ 示ã—ã¦ã„ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚Content-Encoding ã¯ä¸»ã«ã€å…ƒã®ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã® åŒä¸€æ€§ã‚’失ã†ã“ã¨ãªãドキュメントを圧縮ã™ã‚‹ã“ã¨ã‚’å¯èƒ½ã«ã™ã‚‹ãŸã‚㫠使用ã•れã¾ã™ã€‚

    複数ã®ãƒ•ã‚¡ã‚¤ãƒ«æ‹¡å¼µå­ (è¤‡æ•°ã®æ‹¡å¼µå­ã«ã¤ã„ã¦ã¯ 上ã®ç¯€ ã‚’å‚ç…§) 使ã†ã“ã¨ã§ã€ ファイルã®ã‚¿ã‚¤ãƒ—やエンコーディングを指定ã™ã‚‹ã“ã¨ãŒ ã§ãã¾ã™ã€‚

    ãŸã¨ãˆã°ã€Microsoft Word ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãŒã‚りã€ã‚µã‚¤ã‚ºã‚’å°ã•ãã™ã‚‹ãŸã‚ã« pkzip ã•れã¦ã„ã‚‹ã¨ã—ã¾ã™ã€‚.doc æ‹¡å¼µå­ãŒ Microsoft Word 㮠ファイルタイプã¨é–¢é€£ä»˜ã‘られã¦ã„ã¦ã€.zip æ‹¡å¼µå­ãŒ pkzip ファイルエンコーディングã¨é–¢é€£ä»˜ã‘られã¦ã„ã‚‹ã¨ã€ãƒ•ァイル Resume.doc.zip 㯠pkzip ã•れ㟠Word ドキュメントã§ã‚ã‚‹ ã¨ã„ã†ã“ã¨ãŒã‚ã‹ã‚Šã¾ã™ã€‚

    クライアントã®ãƒ–ラウザã«ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°æ–¹æ³•を知らã›ã‚‹ãŸã‚ã«ã€ Apache ã¯ãƒªã‚½ãƒ¼ã‚¹ã¨å…±ã« Content-Encoding ヘッダを é€ã‚Šã¾ã™ã€‚

    Content-encoding: pkzip

    top

    文字セットã¨è¨€èªž

    ファイルタイプã¨ãƒ•ァイルエンコーディングã®ä»–ã«é‡è¦ãªæƒ…å ±ã¯ ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®æ›¸ã‹ã‚Œã¦ã„る言語ã¨ã€ã©ã®æ–‡å­—セットã§ãƒ•ァイルãŒè¡¨ç¤º ã•れるã¹ãã‹ã€ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚ãŸã¨ãˆã°ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã¯ãƒ™ãƒˆãƒŠãƒ ã® ã‚¢ãƒ«ãƒ•ã‚¡ãƒ™ãƒƒãƒˆã‚„ã‚­ãƒªãƒ«æ–‡å­—ã§æ›¸ã‹ã‚Œã¦ã„ã¦ã€ãã®ã‚ˆã†ã«è¡¨ç¤ºã•れる å¿…è¦ãŒã‚ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。ã“ã®æƒ…報もã¾ãŸã€HTTP ヘッダ㧠é€ä¿¡ã•れã¾ã™ã€‚

    文字セットã€è¨€èªžã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã€mime タイプã¯ã™ã¹ã¦ コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ (mod_negotiation å‚ç…§) ã®æœ€ä¸­ã«ã€è¤‡æ•°ã®æ–‡å­—セットã€è¨€èªžã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã€MIME タイプã‹ã‚‰ãªã‚‹ 代替物ãŒã‚ã‚‹ã¨ãã«ã©ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’クライアントã«é€ã‚‹ã®ã‹ã‚’ 決定ã™ã‚‹ã¨ãã«ä½¿ã‚れã¾ã™ã€‚AddCharset, AddEncoding, AddLanguage, AddType ã®å„ディレクティブã§ä½œæˆã•れ㟠拡張å­ã®é–¢é€£ä»˜ã‘ (㨠MimeMagicFile ã§ãƒªã‚¹ãƒˆã•れã¦ã„ã‚‹ æ‹¡å¼µå­) ãŒã“ã®é¸æŠžã«å‚加ã—ã¾ã™ã€‚AddHandler, AddInputFilter, AddOutputFilter ã® å„ディレクティブã§ã®ã¿é–¢é€£ä»˜ã‘られã¦ã„ã‚‹æ‹¡å¼µå­ã¯ MultiviewsMatch ディレクティブを 使ã†ã“ã¨ã§ãƒžãƒƒãƒã® 処ç†ã«å«ã‚ã‚‹ã“ã¨ã‚‚外ã™ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    Charset

    ã•ã‚‰ã«æƒ…報をä¼ãˆã‚‹ãŸã‚ã«ã€Apache ã¯æ–‡æ›¸ã®è¨€èªžã‚’ Content-Language ヘッダã§é€ã‚‹ã“ã¨ã‚‚ã‚りã¾ã™ã€‚ ã¾ãŸã€æƒ…報を正ã—ã表示ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã™ã¹ã文字セットを示ã™ãŸã‚ã« Conten-Type ãƒ˜ãƒƒãƒ€ã«æƒ…報を追加ã™ã‚‹ã“ã¨ã‚‚ã‚りã¾ã™ã€‚

    Content-Language: en, fr
    Content-Type: text/plain; charset=ISO-8859-1

    è¨€èªžã®æŒ‡å®šã¯äºŒæ–‡å­—ã®çŸ­ç¸®å½¢ã§è¡Œãªã‚れã¾ã™ã€‚charset ㌠使用ã™ã¹ã文字セットã®åå‰ã§ã™ã€‚

    top

    AddCharset ディレクティブ

    説明:ファイルåã®æ‹¡å¼µå­ã‚’指定ã•ã‚ŒãŸæ–‡å­—セットã«ãƒžãƒƒãƒ—ã™ã‚‹
    æ§‹æ–‡:AddCharset charset extension [extension] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime

    AddCharset ディレクティブã¯ã€ 与ãˆã‚‰ã‚ŒãŸæ‹¡å¼µå­ã‚’指定ã•れ㟠charset ã«ãƒžãƒƒãƒ—ã—ã¾ã™ã€‚charset ã¯ã€æ‹¡å¼µå­ extension ã‚’å«ã‚“ã§ã„るファイルåã® MIME charset パラメータã§ã™ã€‚æ–°ã—ã„ãƒžãƒƒãƒ”ãƒ³ã‚°ã¯æ—¢ã«ã‚ã‚‹ä»–ã®ãƒžãƒƒãƒ”ングã«è¿½åŠ ã•れã€åŒã˜æ‹¡å¼µå­ extension ã®ãŸã‚ã®ãƒžãƒƒãƒ”ングを上書ãã—ã¾ã™ã€‚

    例

    AddLanguage ja .ja
    AddCharset EUC-JP .euc
    AddCharset ISO-2022-JP .jis
    AddCharset SHIFT_JIS .sjis

    ã“ã®å ´åˆã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆ xxxx.ja.jis 㯠charset ㌠ISO-2022-JP ã®æ—¥æœ¬èªžã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã¨ã—ã¦æ‰±ã‚れã¾ã™ (xxxx.jis.ja ã‚‚åŒæ§˜)。AddCharset ディレクティブã¯ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãŒé©åˆ‡ã«è§£é‡ˆã•れ表示ã•れるよã†ã«ã€ ドキュメント㮠charset ã®æƒ…å ±ã‚’ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«æ•™ãˆã‚‹ãŸã‚ã«å½¹ã«ç«‹ã¡ã¾ã™ã€‚ ã¾ãŸã€ã‚µãƒ¼ãƒãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã® charset ã®å„ªå…ˆåº¦ã«åŸºã¥ã„ã¦è¤‡æ•°ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®ä¸­ã‹ã‚‰ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’é¸ã¶ã‚³ãƒ³ãƒ†ãƒ³ãƒˆãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã®ãŸã‚ã«ã‚‚å½¹ã«ç«‹ã¡ã¾ã™ã€‚

    引数 extensionã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã€ 最åˆã®ãƒ‰ãƒƒãƒˆã¯ã‚ã£ã¦ã‚‚ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。 ファイルåã¯è¤‡æ•°ã®æ‹¡å¼µå­ã‚’æŒã¤ã“ã¨ãŒã§ã〠extensionã¯ãれãžã‚Œã¨æ¯”較ã•れã¾ã™ã€‚

    å‚ç…§

    top

    AddEncoding ディレクティブ

    説明:ファイルåã®æ‹¡å¼µå­ã‚’指定ã•れãŸã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚° ã«ãƒžãƒƒãƒ—ã™ã‚‹
    æ§‹æ–‡:AddEncoding MIME-enc extension [extension] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime

    AddEncoding ディレクティブã¯ã€ 与ãˆã‚‰ã‚ŒãŸæ‹¡å¼µå­ã‚’指定ã•れãŸã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã«ãƒžãƒƒãƒ—ã—ã¾ã™ã€‚ MIME-enc ã¯ã€æ‹¡å¼µå­ extension ã‚’å«ã‚“ã ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã«ä½¿ç”¨ã™ã‚‹ MIME エンコーディングã§ã™ã€‚ ã“ã®æ–°ã—ã„ãƒžãƒƒãƒ”ãƒ³ã‚°ã¯æ—¢ã«ã‚ã‚‹ä»–ã®ãƒžãƒƒãƒ”ングã«è¿½åŠ ã•れ〠åŒã˜æ‹¡å¼µå­ extension ã®ãŸã‚ã®ãƒžãƒƒãƒ”ングを上書ãã—ã¾ã™ã€‚

    例

    AddEncoding x-gzip .gz
    AddEncoding x-compress .Z

    ã“れã¯ã€æ‹¡å¼µå­ .gz ã‚’å«ã‚€ãƒ•ァイルå㌠x-gzip エンコーディングを使ã£ã¦ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れã¦ã„ã‚‹ã“ã¨ã¨ã€æ‹¡å¼µå­ .Z ã‚’å«ã‚€ãƒ•ァイルå㌠x-compress ã§ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れã¦ã„ã‚‹ã“ã¨ã‚’指定ã—ã¾ã™ã€‚

    å¤ã„クライアント㯠x-zip 㨠x-compress ãŒè¿”ã£ã¦ãã‚‹ã“ã¨ã‚’期待ã—ã¾ã™ãŒã€æ¨™æº–è¦æ ¼ã§ã¯ãれãžã‚Œ gzip 㨠compress ã¨ç­‰ä¾¡ã§ã‚ã‚‹ã“ã¨ã«ãªã£ã¦ã„ã¾ã™ã€‚Apache ã¯ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã®æ¯”較をã™ã‚‹ã¨ãã«ã¯ã€å…ˆé ­ã«ã‚ã‚‹ x- を無視ã—ã¾ã™ã€‚Apache ãŒã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ä»˜ãã§å¿œç­”ã‚’è¿”ã™ã¨ãã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒè¦æ±‚ã—ãŸå½¢å¼ (ã™ãªã‚ã¡ã€x-foo ã‚„ foo) を使用ã—ã¾ã™ã€‚è¦ã™ã‚‹ã«ã€ã“ã®äºŒã¤ã®ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã®å ´åˆã¯å¸¸ã« x-gzip 㨠x-compress を使ã†ã¹ãã§ã‚ã‚‹ã€ã¨ã„ã†ã“ã¨ã§ã™ã€‚deflate ã®ã‚ˆã†ãªã‚ˆã‚Šæ–°ã—ã„エンコーディングã§ã¯ã€x- ãªã—ã§æŒ‡å®šã—ã¦ãã ã•ã„。

    引数 extension ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã€ 最åˆã®ãƒ‰ãƒƒãƒˆã¯ã‚ã£ã¦ã‚‚ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。 ファイルåã¯è¤‡æ•°ã®æ‹¡å¼µå­ã‚’æŒã¤ã“ã¨ãŒã§ã〠extensionã¯ãれãžã‚Œã¨æ¯”較ã•れã¾ã™ã€‚

    top

    AddHandler ディレクティブ

    説明:ファイルåã®æ‹¡å¼µå­ã‚’指定ã•れãŸãƒãƒ³ãƒ‰ãƒ©ã«ãƒžãƒƒãƒ—ã™ã‚‹
    æ§‹æ–‡:AddHandler handler-name extension [extension] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime

    æ‹¡å¼µå­ extension ãŒåå‰ã«ã‚ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã¯æŒ‡å®šã•れ㟠handler-name ã«æ‰±ã‚れã¾ã™ã€‚ ã“ã®æ–°ã—ã„ãƒžãƒƒãƒ”ãƒ³ã‚°ã¯æ—¢ã«ã‚ã‚‹ä»–ã®ãƒžãƒƒãƒ”ングã«è¿½åŠ ã•れ〠åŒã˜æ‹¡å¼µå­ extension ã®ãŸã‚ã®ãƒžãƒƒãƒ”ングを上書ãã—ã¾ã™ã€‚ãŸã¨ãˆã°ã€æ‹¡å¼µå­ ".cgi" ã§çµ‚ã‚るファイルを CGI スクリプトã¨ã—ã¦æ‰±ã„ãŸã„ã¨ãã¯ã€ä»¥ä¸‹ã®è¨­å®šã‚’ã—ã¾ã™ã€‚

    AddHandler cgi-script .cgi

    ã“れを httpd.conf ファイルã«è¨˜è¿°ã™ã‚‹ã“ã¨ã§ã€æ‹¡å¼µå­ ".cgi" ã®ãƒ•ァイル㯠CGI プログラムã¨ã—ã¦æ‰±ã‚れã¾ã™ã€‚

    引数 extension ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã€ 最åˆã®ãƒ‰ãƒƒãƒˆã¯ã‚ã£ã¦ã‚‚ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。 ファイルåã¯è¤‡æ•°ã®æ‹¡å¼µå­ã‚’æŒã¤ã“ã¨ãŒã§ã〠extensionã¯ãれãžã‚Œã¨æ¯”較ã•れã¾ã™ã€‚

    å‚ç…§

    top

    AddInputFilter ディレクティブ

    説明:ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã‚’クライアントã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’処ç†ã™ã‚‹ フィルタã«ãƒžãƒƒãƒ—ã™ã‚‹
    æ§‹æ–‡:AddInputFilter filter[;filter...] extension [extension] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime
    äº’æ›æ€§:2.0.26 以é™ã§ä½¿ç”¨å¯èƒ½

    AddInputFilter ã¯ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ extension をクライアントã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚„ POST ãŒã‚µãƒ¼ãƒã«æ¥ãŸã¨ã㫠処ç†ã‚’ã™ã‚‹ãƒ•ィルタã«ãƒžãƒƒãƒ—ã—ã¾ã™ã€‚ ã“れã¯ã€SetInputFilter ディレクティブも å«ã‚ã€ä»–ã®å ´æ‰€ã§å®šç¾©ã•れã¦ã„るフィルタã«åŠ ãˆã‚‰ã‚Œã¾ã™ã€‚ ã“ã®ãƒžãƒƒãƒ”ングã¯ã™ã§ã«ã‚ã‚‹ã‚‚ã®ã‚ˆã‚Šå„ªå…ˆã•れã¦ãƒžãƒ¼ã‚¸ã•れ〠åŒã˜ extension ã«å¯¾ã™ã‚‹æ—¢å­˜ã®ãƒžãƒƒãƒ”ングを上書ãã—ã¾ã™ã€‚

    複数ã®filterを指定ã™ã‚‹ã¨ãã¯ã€ãƒ‡ãƒ¼ã‚¿ã‚’処ç†ã™ã‚‹é †ç•ªã«ã‚»ãƒŸã‚³ãƒ­ãƒ³ã§ 繋ã„ã§æ›¸ãå¿…è¦ãŒã‚りã¾ã™ã€‚filter ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã›ã‚“。

    引数 extension ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã€ 最åˆã®ãƒ‰ãƒƒãƒˆã¯ã‚ã£ã¦ã‚‚ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。 ファイルåã¯è¤‡æ•°ã®æ‹¡å¼µå­ã‚’æŒã¤ã“ã¨ãŒã§ã〠extensionã¯ãれãžã‚Œã¨æ¯”較ã•れã¾ã™ã€‚

    å‚ç…§

    top

    AddLanguage ディレクティブ

    説明:ファイルåを指定ã•れãŸè¨€èªžã«ãƒžãƒƒãƒ—
    æ§‹æ–‡:AddLanguage MIME-lang extension [extension] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime

    AddLanguage ディレクティブã¯ã€ä¸Žãˆã‚‰ã‚ŒãŸæ‹¡å¼µå­ã‚’指定ã•れ㟠content language ã«ãƒžãƒƒãƒ—ã—ã¾ã™ã€‚MIME-lang ã¯ã€æ‹¡å¼µå­ extension ã‚’å«ã‚“ã§ã„るファイルåã® MIME ã«ãŠã‘る言語ã§ã™ã€‚ ã“ã®æ–°ã—ã„ãƒžãƒƒãƒ”ãƒ³ã‚°ã¯æ—¢ã«ã‚るマッピングã«è¿½åŠ ã•れã€åŒã˜æ‹¡å¼µå­ extension ã®ãŸã‚ã®ãƒžãƒƒãƒ”ングを上書ãã—ã¾ã™ã€‚

    例

    AddEncoding x-compress .Z
    AddLanguage en .en
    AddLanguage fr .fr

    ã“ã®å ´åˆã€xxxx.en.Z ドキュメント㯠compress ã•れãŸè‹±èªžã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã¨ã—ã¦æ‰±ã‚れã¾ã™ (xxxx.Z.en ã‚‚åŒæ§˜)。content language ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€šçŸ¥ã•れã¾ã™ãŒã€ ブラウザãŒã“ã®æƒ…報を使ã†ã“ã¨ã¯ãŠãらãã‚りã¾ã›ã‚“。 AddLanguage ディレクティブã¯ã€ã‚µãƒ¼ãƒãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®è¨€èªžã®å„ªå…ˆåº¦ã«åŸºã¥ã„ã¦è¤‡æ•°ã® ドキュメントã®ä¸­ã‹ã‚‰ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’é¸ã¶ã‚³ãƒ³ãƒ†ãƒ³ãƒˆãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã®ãŸã‚ã«ã‚ˆã‚Šå½¹ã«ç«‹ã¡ã¾ã™ã€‚

    複数ã®è¨€èªžãŒåŒã˜æ‹¡å¼µå­ã«å‰²ã‚Šå½“ã¦ã‚‰ã‚Œã¦ã„ã‚‹ã¨ãã¯ã€ 最後ã®ã‚‚ã®ãŒä½¿ç”¨ã•れã¾ã™ã€‚ã™ãªã‚ã¡ã€æ¬¡ã®ã‚ˆã†ãªå ´åˆã€

    AddLanguage en .en
    AddLanguage en-gb .en
    AddLanguage en-us .en

    æ‹¡å¼µå­ .en ã®ã‚るドキュメント㯠en-us ã¨ã—ã¦æ‰±ã‚れã¾ã™ã€‚

    引数 extension ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã€ 最åˆã®ãƒ‰ãƒƒãƒˆã¯ã‚ã£ã¦ã‚‚ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。 ファイルåã¯è¤‡æ•°ã®æ‹¡å¼µå­ã‚’æŒã¤ã“ã¨ãŒã§ã〠extensionã¯ãれãžã‚Œã¨æ¯”較ã•れã¾ã™ã€‚

    å‚ç…§

    top

    AddOutputFilter ディレクティブ

    説明:ファイルåã®æ‹¡å¼µå­ã‚’サーãƒã‹ã‚‰ã®å¿œç­”を処ç†ã™ã‚‹ãƒ•ィルタ㫠マップã™ã‚‹
    æ§‹æ–‡:AddOutputFilter filter[;filter...] extension [extension] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime
    äº’æ›æ€§:2.0.26 以é™ã§ä½¿ç”¨å¯èƒ½

    AddOutputFilter ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ æ‹¡å¼µå­ extension をサーãƒã®å¿œç­”ãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚‰ã‚Œã‚‹ å‰ã«å‡¦ç†ã™ã‚‹ãƒ•ィルタを定義ã—ã¾ã™ã€‚ ã“れ㯠SetOutputFilter ディレクティブ㨠AddOutputFilterByType ディレクティブ ã‚’å«ã‚ã€ä»–ã®å ´æ‰€ã§å®šç¾©ã•れã¦ã„るフィルタã«åŠ ãˆã‚‰ã‚Œã¾ã™ã€‚ ã“ã®æ–°ã—ã„ãƒžãƒƒãƒ”ãƒ³ã‚°ã¯æ—¢ã«ã‚るマッピングã«è¿½åŠ ã•れã€åŒã˜æ‹¡å¼µå­ extension ã®ãŸã‚ã®ãƒžãƒƒãƒ”ングを上書ãã—ã¾ã™ã€‚

    例ãˆã°ã€ä»¥ä¸‹ã®è¨­å®šã¯ã™ã¹ã¦ã® .shtml ファイルを SSI ã§å‡¦ç†ã—〠ãã®å‡ºåŠ›ã‚’ mod_deflate を使ã£ã¦åœ§ç¸®ã—ã¾ã™ã€‚

    AddOutputFilter INCLUDES;DEFLATE shtml

    複数ã®ãƒ•ィルタを指定ã™ã‚‹ã¨ãã¯ã€ãƒ‡ãƒ¼ã‚¿ã‚’処ç†ã™ã‚‹é †ç•ªã«ã‚»ãƒŸã‚³ãƒ­ãƒ³ã§ 繋ã„ã§æ›¸ãå¿…è¦ãŒã‚りã¾ã™ã€‚filter ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã›ã‚“。

    引数 extension ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã€ 最åˆã®ãƒ‰ãƒƒãƒˆã¯ã‚ã£ã¦ã‚‚ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。 ファイルåã¯è¤‡æ•°ã®æ‹¡å¼µå­ã‚’æŒã¤ã“ã¨ãŒã§ã〠extensionã¯ãれãžã‚Œã¨æ¯”較ã•れã¾ã™ã€‚

    å‚ç…§

    top

    AddType ディレクティブ

    説明:ファイルåã®æ‹¡å¼µå­ã‚’指定ã•れãŸã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã«ãƒžãƒƒãƒ—
    æ§‹æ–‡:AddType MIME-type extension [extension] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime

    AddType ディレクティブã¯ã€ 与ãˆã‚‰ã‚ŒãŸæ‹¡å¼µå­ã‚’指定ã•れãŸã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã«ãƒžãƒƒãƒ—ã—ã¾ã™ã€‚ MIME-type ã¯æ‹¡å¼µå­ extension ã‚’å«ã‚“ã ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã«ä½¿ç”¨ã™ã‚‹ MIME タイプã§ã™ã€‚ ã“ã®æ–°ã—ã„ãƒžãƒƒãƒ”ãƒ³ã‚°ã¯æ—¢ã«ã‚るマッピングã«è¿½åŠ ã•れã€åŒã˜æ‹¡å¼µå­ extension ã®ãŸã‚ã®ãƒžãƒƒãƒ”ングを上書ãã—ã¾ã™ã€‚ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠MIME タイプファイル (TypesConfig ディレクティブをå‚ç…§) ã«ç„¡ã„マッピングを追加ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    例

    AddType image/gif .gif

    ã‚ã‚‹ã„ã¯ã€ã²ã¨ã¤ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§è¤‡æ•°ã®ãƒ•ァイル拡張å­ã‚’指定ã™ã‚‹å ´åˆ:

    Example

    AddType image/jpeg jpeg jpg jpe

    æ–°ã—ã„ MIME タイプã¯ã€TypesConfig ファイルを変更ã™ã‚‹ã®ã§ã¯ãªãã€AddType ディレクティブを使ã£ã¦è¿½åŠ ã™ã‚‹ã“ã¨ãŒæŽ¨å¥¨ã•れã¦ã„ã¾ã™ã€‚

    引数 extension ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã€ 最åˆã®ãƒ‰ãƒƒãƒˆã¯ã‚ã£ã¦ã‚‚ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。 ファイルåã¯è¤‡æ•°ã®æ‹¡å¼µå­ã‚’æŒã¤ã“ã¨ãŒã§ã〠extensionã¯ãれãžã‚Œã¨æ¯”較ã•れã¾ã™ã€‚

    å‚ç…§

    top

    DefaultLanguage ディレクティブ

    説明:ã‚るスコープã®ã™ã¹ã¦ã®ãƒ•ァイルを指定ã•れãŸè¨€èªžã« 設定ã™ã‚‹
    æ§‹æ–‡:DefaultLanguage MIME-lang
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime

    DefaultLanguage ディレクティブã¯ã€Apache ãŒãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®ã‚¹ã‚³ãƒ¼ãƒ— (例ãˆã°ã€ãã®æ™‚点㮠<Directory> ã®ç¯„囲) ã«ã‚ã‚‹ã€æ˜Žç¤ºçš„ãªè¨€èªžæ‹¡å¼µå­ (AddLanguage ã§è¨­å®šã•れる .fr ã‚„ .de) ã®ãªã„å…¨ã¦ã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ã€æŒ‡å®šã•れ㟠MIME-lang 言語ã§ã‚ã‚‹ã¨ã¿ãªã™ã‚ˆã†ã«ã—ã¾ã™ã€‚ ã“れã«ã‚ˆã‚Šã€ã™ã¹ã¦ã®ãƒ•ァイルåを変ãˆã‚‹ã“ã¨ãªã〠ディレクトリãŒã‚ªãƒ©ãƒ³ãƒ€èªžã®ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚’å«ã‚“ã§ã„る〠ã¨ã„ã†ã‚ˆã†ãªã“ã¨ã‚’指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ æ‹¡å¼µå­ã‚’使用ã—ã¦è¨€èªžã‚’指定ã™ã‚‹æ–¹æ³•ã¨é•ã„〠DefaultLanguage ã¯ä¸€ã¤ã®è¨€èªžã—ã‹æŒ‡å®šã§ããªã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。

    DefaultLanguage ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæœ‰åйã§ãªãã€ãƒ•ァイル㫠AddLanguage ã§è¨­å®šã•れãŸè¨€èªžã®æ‹¡å¼µå­ãŒãªã„ã¨ãã¯ã€ ファイルã«ã¯è¨€èªžå±žæ€§ãŒãªã„ã¨ã¿ãªã•れã¾ã™ã€‚

    例

    DefaultLanguage en

    å‚ç…§

    top

    ModMimeUsePathInfo ディレクティブ

    説明:path_info コンãƒãƒ¼ãƒãƒ³ãƒˆã‚’ファイルåã®ä¸€éƒ¨ã¨ã—ã¦æ‰±ã†ã‚ˆã†ã« mod_mime ã«é€šçŸ¥ã™ã‚‹
    æ§‹æ–‡:ModMimeUsePathInfo On|Off
    デフォルト:ModMimeUsePathInfo Off
    コンテキスト:ディレクトリ
    ステータス:
    モジュール:mod_mime
    äº’æ›æ€§:Apache 2.0.41 以é™

    ModMimeUsePathInfo ディレクティブã¯ã€ mod_mime ã®æŒã¤ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ リクエストã«é©ç”¨ã•ã›ã‚‹ãŸã‚ã«ã€ãƒ•ァイルå㨠path_info URL コンãƒãƒ¼ãƒãƒ³ãƒˆã‚’çµåˆã•ã›ã‚‹ãŸã‚ã«ä½¿ç”¨ã—ã¾ã™ã€‚ デフォルトã§ã¯ã€Œ Off ã€ã§ã€path_info コンãƒãƒ¼ãƒãƒ³ãƒˆã¯ç„¡è¦–ã•れã¾ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ•ァイルシステムを使用ã—ã¦ã„る際㫠推奨ã•れるディレクティブã§ã™ã€‚

    例

    ModMimeUsePathInfo On

    /bar ãŒå­˜åœ¨ã—㦠(foo.shtml ã¯å­˜åœ¨ã—ãªã„) ModMimeUsePathInfo ㌠On ã§ã‚ã‚‹ã¨ã—ã¦ã€ /bar/foo.shtml ã«å¯¾ã™ã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’発行ã—ãŸå ´åˆã€ mod_mime ã¯å…¥ã£ã¦ããŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ /bar/foo.shtml ã¨ã—ã¦æ‰±ã„〠AddOutputFileter INCLUDES .shtml ã®ã‚ˆã†ãªãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠INCLUDES フィルタをリクエストã«ä»˜åŠ ã•ã›ã¾ã™ã€‚ ModMimeUsePathInfo ãŒè¨­å®šã•れãªã‘れã°ã€ INCLUDES フィルタã¯ä»˜åŠ ã•れã¾ã›ã‚“。

    å‚ç…§

    top

    MultiviewsMatch ディレクティブ

    説明:MultiViews ã§ã®ãƒžãƒƒãƒãƒ³ã‚°ã®æ¤œç´¢ã«å«ã¾ã›ã‚‹ ファイルã®ã‚¿ã‚¤ãƒ—を指定ã™ã‚‹
    æ§‹æ–‡:MultiviewsMatch Any|NegotiatedOnly|Filters|Handlers [Handlers|Filters]
    デフォルト:MultiviewsMatch NegotiatedOnly
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime
    äº’æ›æ€§:2.0.26 以é™ã§ä½¿ç”¨å¯èƒ½

    MultiviewsMatch を使用ã™ã‚‹ã“ã¨ã§ã€ mod_negotiation ã® Multiviews ã« 3 種類ã®ç•°ãªã‚‹æŒ™å‹•ã‚’ã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ Multiviews を使用ã™ã‚‹ã¨ã€ãƒ•ァイル (例 index.html) ã«å¯¾ã™ã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—ã¦ã€ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã™ã‚‹æ‹¡å¼µå­ãŒãƒ™ãƒ¼ã‚¹ã«ä»˜ã„ãŸã‚‚ã® (index.html.en, index.html.fr ã‚„ index.html.gz) をマッãƒã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    NegotiatedOnly オプションã§ã¯ã€ãƒ™ãƒ¼ã‚¹åã«ç¶šãæ‹¡å¼µå­å…¨ã¦ãŒ コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã§ mod_mime ãŒèªè­˜ã™ã‚‹æ‹¡å¼µå­ (例 文字セットã€ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã€è¨€èªžã‚„エンコーディング) ã«é–¢é€£ä»˜ã‘られã¦ã„ãªã‘れã°ãªã‚Šã¾ã›ã‚“。ã“れã¯å‰¯ä½œç”¨ã®æœ€ã‚‚å°‘ãªã„ 最も的確ãªå®Ÿè£…ã§ã€ãƒ‡ãƒ•ォルトã«ãªã£ã¦ã„ã¾ã™ã€‚

    ãƒãƒ³ãƒ‰ãƒ©ã¨ãƒ•ィルタã®ä¸¡æ–¹ã‚‚ã—ãã¯ç‰‡æ–¹ã¨é–¢é€£ä»˜ã‘ã‚‰ã‚ŒãŸæ‹¡å¼µå­ã‚’å«ã‚ã‚‹ã«ã¯ã€ MultiviewsMatch ディレクティブ㫠Handlers, Filters ã¾ãŸã¯ãã®ä¸¡æ–¹ã®ã‚ªãƒ—ションをセットã—ã¾ã™ã€‚ ã‚‚ã—ä»–ã®æ¡ä»¶ãŒåŒã˜ã§ã‚れã°ã€æœ€ã‚‚å°ã•ã„ファイルãŒé€ä¿¡ã•れã¾ã™ã€‚ 例ãˆã°ã€500 文字㮠index.html.cgi 㨠1000 ãƒã‚¤ãƒˆã® index.html.pl ã§ã‚れã°ã€.cgi ã®ãƒ•ァイルãŒå„ªå…ˆã•れã¾ã™ã€‚.asis ファイルを利用ã—ã¦ã„るユーザã¯ã€ .asis ファイル㌠asis-handler ã«é–¢é€£ä»˜ã‘られã¦ã„ã‚‹ã¨ãã«ã¯ã€ ãƒãƒ³ãƒ‰ãƒ©ã‚ªãƒ—ションã®ä½¿ç”¨ã‚’好むã§ã—ょã†ã€‚

    最後ã«ã€mod_mime ãŒèªè­˜ã—ãªã„æ‹¡å¼µå­ã§ã‚ã‚ã†ã¨ã‚‚〠ã©ã‚“ãªæ‹¡å¼µå­ã§ã‚‚マッãƒã•ã›ã‚‹ Any ãŒä½¿ç”¨ã§ãã¾ã™ã€‚ ã“ã®æŒ™å‹•㯠Apache 1.3 ã®ã¨ãã¨åŒã˜ã‚‚ã®ã§ã€äºˆæœŸã—ãªã„動作ã€ä¾‹ãˆã° .old ã‚„ .bak ファイルã¨ã„ã£ãŸã‚¦ã‚§ãƒ–マスタãŒé€ä¿¡ã‚’æ„図ã—ã¦ã„ãªã„ ファイルをé€ä¿¡ã™ã‚‹ã€ã¨ã„ã£ãŸå‹•作を行ãªã†å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚

    例ãˆã°æ¬¡ã®è¨­å®šã§ã¯ã€ãƒãƒ³ãƒ‰ãƒ©ã‚„フィルタ㌠Multiviews ã«å‚加ã™ã‚‹ã“ã¨ãŒ ã§ãã¾ã™ã—ã€æœªçŸ¥ã®ãƒ•ァイルã¯é™¤å¤–ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    MultiviewsMatch Handlers Filters

    å‚ç…§

    top

    RemoveCharset ディレクティブ

    説明:ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã«é–¢é€£ä»˜ã‘られãŸã™ã¹ã¦ã®æ–‡å­—セット を解除ã™ã‚‹
    æ§‹æ–‡:RemoveCharset extension [extension] ...
    コンテキスト:ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime
    äº’æ›æ€§:2.0.24 以é™ã§ä½¿ç”¨å¯èƒ½

    RemoveCharset ディレクティブ ã¯ä¸Žãˆã‚‰ã‚ŒãŸæ‹¡å¼µå­ã«é–¢é€£ä»˜ã‘ã‚‰ã‚ŒãŸæ–‡å­—セットをå–り消ã—ã¾ã™ã€‚ ã“れã«ã‚ˆã‚Šã€ã‚µãƒ–ディレクトリã«ã‚ã‚‹ .htaccess ファイルãŒè¦ªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚„サーãƒã®è¨­å®šãƒ•ァイル ã‹ã‚‰ç¶™æ‰¿ã—ãŸé–¢é€£ä»˜ã‘ã‚’å–り消ã™ã“ã¨ãŒã§ãã¾ã™ã€‚例ãˆã°:

    extension ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã›ã‚“。 ã¾ãŸã€æœ€åˆã®ãƒ‰ãƒƒãƒˆã¯ã‚ã£ã¦ã‚‚ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。

    例

    RemoveCharset .html .shtml

    top

    RemoveEncoding ディレクティブ

    説明:ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã«é–¢é€£ä»˜ã‘られãŸã™ã¹ã¦ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚° を解除ã™ã‚‹
    æ§‹æ–‡:RemoveEncoding extension [extension] ...
    コンテキスト:ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime

    RemoveEncoding ディレクティブã¯ã€ 与ãˆã‚‰ã‚ŒãŸæ‹¡å¼µå­ã«é–¢é€£ä»˜ã‘られãŸã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’å–り消ã—ã¾ã™ã€‚ ã“れã«ã‚ˆã‚Šã€ã‚µãƒ–ディレクトリã«ã‚ã‚‹ .htaccess ファイルãŒè¦ªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚„サーãƒã®è¨­å®šãƒ•ァイルã‹ã‚‰ç¶™æ‰¿ã—ãŸé–¢é€£ä»˜ã‘ã‚’ å–り消ã™ã“ã¨ãŒã§ãã¾ã™ã€‚

    /foo/.htaccess:

    AddEncoding x-gzip .gz
    AddType text/plain .asc
    <Files *.gz.asc>
    RemoveEncoding .gz
    </Files>

    ã“れã¯ã€foo.gz 㯠gzip ã§ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れã¦ã„ã‚‹ã“ã¨ã‚’指定ã—ã¾ã™ãŒã€foo.gz.asc ã¯ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れã¦ã„ãªã„プレーンテキスト㮠ファイルã§ã‚ã‚‹ã¨ã„ã†ã“ã¨ã‚’指定ã—ã¾ã™ã€‚

    注æ„

    RemoveEncoding 㯠AddEncoding ディレクティブã®å¾Œã§å‡¦ç†ã•れã¾ã™ã®ã§ã€ åŒã˜ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®è¨­å®šä¸­ã«ä¸¡æ–¹ãŒç¾ã‚Œã‚‹ã¨ã€ 後者ã®åŠ¹æžœãŒæ‰“ã¡æ¶ˆã•れるå¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚

    extension ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã›ã‚“。 ã¾ãŸã€æœ€åˆã®ãƒ‰ãƒƒãƒˆã¯ã‚ã£ã¦ã‚‚ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。

    top

    RemoveHandler ディレクティブ

    説明:ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã«é–¢é€£ä»˜ã‘られãŸã™ã¹ã¦ã®ãƒãƒ³ãƒ‰ãƒ©ã‚’ 解除ã™ã‚‹
    æ§‹æ–‡:RemoveHandler extension [extension] ...
    コンテキスト:ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime

    RemoveHandler ディレクティブ ã¯ä¸Žãˆã‚‰ã‚ŒãŸæ‹¡å¼µå­ã«é–¢é€£ä»˜ã‘られãŸãƒãƒ³ãƒ‰ãƒ©ã‚’å–り消ã—ã¾ã™ã€‚ ã“れã«ã‚ˆã‚Šã€ã‚µãƒ–ディレクトリã«ã‚ã‚‹ .htaccess ファイルãŒè¦ªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚„サーãƒã®è¨­å®šãƒ•ァイル ã‹ã‚‰ç¶™æ‰¿ã—ãŸé–¢é€£ä»˜ã‘ã‚’å–り消ã™ã“ã¨ãŒã§ãã¾ã™ã€‚ãŸã¨ãˆã°:

    /foo/.htaccess:

    AddHandler server-parsed .html

    /foo/bar/.htaccess:

    RemoveHandler .html

    ã“れã¯ã€/foo/bar ディレクトリ㮠.html ファイル㯠SSI (mod_include モジュールå‚ç…§) ã§ã¯ãªã〠普通ã®ãƒ•ァイルã¨ã—ã¦æ‰±ã‚れるよã†ã«ã™ã‚‹åŠ¹æžœãŒã‚りã¾ã™ã€‚

    extension ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã›ã‚“。 ã¾ãŸã€æœ€åˆã®ãƒ‰ãƒƒãƒˆã¯ã‚ã£ã¦ã‚‚ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。

    top

    RemoveInputFilter ディレクティブ

    説明:ファイル拡張å­ã«é–¢é€£ä»˜ã‘られãŸå…¥åŠ›ãƒ•ã‚£ãƒ«ã‚¿ã‚’è§£é™¤ã™ã‚‹
    æ§‹æ–‡:RemoveInputFilter extension [extension] ...
    コンテキスト:ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime
    äº’æ›æ€§:2.0.26 以é™ã§ä½¿ç”¨å¯èƒ½

    RemoveInputFilter ディレクティブ㯠指定ã•れãŸãƒ•ァイル拡張å­ã«é–¢é€£ä»˜ã‘られãŸå…¥åŠ›ãƒ•ã‚£ãƒ«ã‚¿ã‚’è§£é™¤ã—ã¾ã™ã€‚ ã“れを利用ã™ã‚‹ã“ã¨ã§ã€è¦ªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚„サーãƒè¨­å®šãƒ•ァイルã‹ã‚‰ 継承ã—ãŸé–¢é€£ä»˜ã‘ã‚’ サブディレクトリ内ã«ãŠã„㦠.htaccess ファイルã§å–り消ã™ã“ã¨ãŒã§ãã¾ã™ã€‚

    extension 引数ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã›ã‚“。ã¾ãŸã€ 最åˆã®ãƒ‰ãƒƒãƒˆã¯ã‚ã£ã¦ã‚‚ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。

    å‚ç…§

    top

    RemoveLanguage ディレクティブ

    説明:ファイル拡張å­ã«é–¢é€£ä»˜ã‘られãŸè¨€èªžã‚’解除ã™ã‚‹
    æ§‹æ–‡:RemoveLanguage extension [extension] ...
    コンテキスト:ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime
    äº’æ›æ€§:2.0.24 以é™ã§ä½¿ç”¨å¯èƒ½

    RemoveLanguage ディレクティブ㯠指定ã•れãŸãƒ•ァイル拡張å­ã«é–¢é€£ä»˜ã‘られãŸè¨€èªžã‚’解除ã—ã¾ã™ã€‚ ã“れを利用ã™ã‚‹ã“ã¨ã§ã€è¦ªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚„サーãƒè¨­å®šãƒ•ァイルã‹ã‚‰ 継承ã—ãŸé–¢é€£ä»˜ã‘ã‚’ サブディレクトリ内ã«ãŠã„㦠.htaccess ファイルã§å–り消ã™ã“ã¨ãŒã§ãã¾ã™ã€‚

    extension 引数ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã›ã‚“。ã¾ãŸã€ 最åˆã®ãƒ‰ãƒƒãƒˆã¯ã¤ã„ã¦ã‚‚ã¤ã‹ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。

    top

    RemoveOutputFilter ディレクティブ

    説明:ファイル拡張å­ã«é–¢é€£ä»˜ã‘られãŸå‡ºåŠ›ãƒ•ã‚£ãƒ«ã‚¿ã‚’è§£é™¤ã™ã‚‹
    æ§‹æ–‡:RemoveOutputFilter extension [extension] ...
    コンテキスト:ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime
    äº’æ›æ€§:2.0.26 以é™ã§ã®ã¿ä½¿ç”¨å¯èƒ½

    RemoveOutputFilter ディレクティブ㯠指定ã•れãŸãƒ•ァイル拡張å­ã«é–¢é€£ä»˜ã‘られãŸå‡ºåŠ›ãƒ•ã‚£ãƒ«ã‚¿ã‚’è§£é™¤ã—ã¾ã™ã€‚ ã“れを利用ã™ã‚‹ã“ã¨ã§ã€è¦ªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚„サーãƒè¨­å®šãƒ•ァイルã‹ã‚‰ 継承ã—ãŸé–¢é€£ä»˜ã‘ã‚’ サブディレクトリ内ã«ãŠã„㦠.htaccess ファイルã§å–り消ã™ã“ã¨ãŒã§ãã¾ã™ã€‚

    extension ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã›ã‚“。 ã¾ãŸã€æœ€åˆã®ãƒ‰ãƒƒãƒˆã¯ã‚ã£ã¦ã‚‚ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。

    例

    RemoveOutputFilter shtml

    å‚ç…§

    top

    RemoveType ディレクティブ

    説明:ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã¨é–¢é€£ä»˜ã‘られãŸã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã‚’ 解除ã™ã‚‹
    æ§‹æ–‡:RemoveType extension [extension] ...
    コンテキスト:ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:
    モジュール:mod_mime

    RemoveType ディレクティブã¯ä¸Žãˆã‚‰ã‚ŒãŸæ‹¡å¼µå­ã® MIME タイプ ã®é–¢é€£ä»˜ã‘ã‚’å–り消ã—ã¾ã™ã€‚ã“れã«ã‚ˆã‚Šã€ サブディレクトリã«ã‚ã‚‹ .htaccess ファイルãŒè¦ªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚„サーãƒã®è¨­å®šãƒ•ァイルã‹ã‚‰ç¶™æ‰¿ã—㟠関連付ã‘ã‚’å–り消ã™ã“ã¨ãŒã§ãã¾ã™ã€‚ãŸã¨ãˆã°:

    /foo/.htaccess:

    RemoveType .cgi

    ã“れ㯠/foo/ ディレクトリ以下㮠.cgi ファイルã®ç‰¹åˆ¥ãªæ‰±ã„ã‚’å–り消ã—ã¾ã™ã€‚ファイル㯠DefaultType ã¨ã—ã¦æ‰±ã‚れã¾ã™ã€‚

    注æ„

    RemoveType ディレクティブ㯠AddType ディレクティブã®å¾Œã«å‡¦ç†ã•れã¾ã™ã®ã§ã€ 両方ãŒåŒã˜ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®è¨­å®šä¸­ã«ç¾ã‚ŒãŸå ´åˆã€ 後者ã®åŠ¹æžœãŒæ‰“ã¡æ¶ˆã•れるå¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚

    extension ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã›ã‚“。 ã¾ãŸã€æœ€åˆã®ãƒ‰ãƒƒãƒˆã¯ã‚ã£ã¦ã‚‚ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。

    top

    TypesConfig ディレクティブ

    説明:mime.types ファイルã®ä½ç½®
    æ§‹æ–‡:TypesConfig file-path
    デフォルト:TypesConfig conf/mime.types
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:
    モジュール:mod_mime

    TypesConfig ディレクティブã¯ã€ MIME タイプ 設定ファイルã®ä½ç½®ã‚’設定ã—ã¾ã™ã€‚file-path 㯠ServerRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã§ã™ã€‚ ã“ã®ãƒ•ァイルã¯ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã‹ã‚‰ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã¸ã® デフォルトã®ãƒžãƒƒãƒ”ングを設定ã—ã¾ã™ã€‚ ã»ã¨ã‚“ã©ã®ç®¡ç†è€…ã¯ã€ã‚ˆã使ã‚れるファイルåã®æ‹¡å¼µå­ã‚’ IANA ã«ç™»éŒ²ã•れãŸã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã«é–¢é€£ä»˜ã‘ã¦ã„る〠Apache ã® mime.types ファイルを使ã„ã¾ã™ã€‚ ç¾åœ¨ã®ä¸€è¦§ã¯ http://www.iana.org/assignments/media-types/index.html ã§ç®¡ç†ã•れã¦ã„ã¾ã™ã€‚ã“れã¯ã€ä¸»è¦ãªãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã®å®šç¾©ã‚’æä¾›ã—ã¦ã€ å¿…è¦ã¨ã“ã‚ã‚’ AddType 㧠上書ãã™ã‚‹ã€ã¨ã„ã†æ–¹æ³•ã§ httpd.conf ã‚’ç°¡ç•¥ã«ã—ã¾ã™ã€‚ mime.types ã¯ã‚µãƒ¼ãƒã‚’アップグレードã—ãŸã¨ãã« ç½®ãæ›ãˆã‚‰ã‚Œã‚‹ã‹ã‚‚ã—れãªã„ã®ã§ã€ãã®ãƒ•ァイルを直接 編集ã—ãªã„ã§ãã ã•ã„。

    ファイルã¯ã€AddType ディレクティブã®å¼•æ•°ã¨åŒã˜å½¢å¼ã®è¡Œã§æ§‹æˆã•れã¾ã™ã€‚

    MIME-type [extension] ...

    æ‹¡å¼µå­ã®å¤§æ–‡å­—å°æ–‡å­—ã¯åŒºåˆ¥ã•れã¾ã›ã‚“。空行やãƒãƒƒã‚·ãƒ¥ (`#') ã§å§‹ã¾ã‚‹è¡Œã¯ç„¡è¦–ã•れã¾ã™ã€‚

    (1) IANA ã«æ—¢ã«ç™»éŒ²ã•れã¦ã„ã‚‹ã€ã‚ã‚‹ã„㯠(2) 広ãå—ã‘入れられã¦ã„ã¦ãƒ—ラットホーム間ã§ãƒ•ァイル拡張å­ã«è¡çªãŒãªã„〠ã¨ã„ã†å ´åˆã§ãªã‘れã°ã€é…布中㮠mime.types ãƒ•ã‚¡ã‚¤ãƒ«ã«æ–°ãŸãªã‚‚ã®ã‚’登録ã™ã‚‹ã‚ˆã†ã« Apache HTTP Server Project ã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆã—ãªã„ã§ãã ã•ã„。 category/x-subtype ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯è‡ªå‹•çš„ã«å´ä¸‹ã•れã¾ã™ã—〠言語や文字セットã®åå‰ç©ºé–“ã§æ—¢ã«ä½¿ç”¨ã•れã¦ã„ã¦ã€è¡çªã®å¯èƒ½æ€§ã®ã‚ã‚‹ 2 æ–‡å­—ã®æ‹¡å¼µå­ã‚‚å´ä¸‹ã•れã¾ã™ã€‚

    å‚ç…§

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_userdir.html.tr.utf80000644000000000000500000003126213447004010020730 0ustar rootsrc mod_userdir - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_userdir

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    Açıklama:Kullanıcılara özel dizinler
    Durum:Temel
    Modül Betimleyici:userdir_module
    Kaynak Dosyası:mod_userdir.c

    Özet

    Bu modül kullanıcılara özel dizinlere http://example.com/~kullanıcı/ sözdizimi kullanılarak erişilebilmesini mümkün kılar.

    top

    UserDir Yönergesi

    Açıklama:Kullanıcıya özel dizinlerin yeri
    Sözdizimi:UserDir dizin [dizin] ...
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Temel
    Modül:mod_userdir

    UserDir yönergesi, bir kullanıcıya ait bir belge için bir istek yapıldığında, isteğin kullanıcının ev dizininde bulunan belli bir dizinden karşılanmasını sağlar. dizin olarak şunlar belirtilebilir:

    • Dizinin ismi veya aÅŸağıdakiler gibi bir kalıp.
    • disabled anahtar sözcüğü. enabled anahtar sözcüğü ile sonradan etkin kılınmadıkça tüm kullanıcı-dizin dönüşümlerini iptal eder (aÅŸağıya bakınız).
    • disabled anahtar sözcüğünü takibeden boÅŸluk ayraçlı kullanıcı isimleri listesi. Bu listede yer alan kullanıcı isimlerine, sonradan bir enabled listesinde görünse bile, dizin dönüşümleri asla uygulanmaz.
    • enabled anahtar sözcüğünü takibeden boÅŸluk ayraçlı kullanıcı isimleri listesi. Genel bir iptal sözkonusu olsa bile, kullanıcı ismi bir disabled listesinde yer almadıkça, bu listede yer alan dizinlere dönüşüm uygulanır.

    Userdir yönergesinde ne enabled ne de disabled varsa, argüman bir dosya ismi kalıbı olarak ele alınır ve kullanıcı belge kök dizininin yolunu oluşturmakta kullanılır. http://example.com/~ali/bir/iki.html şöyle dönüştürülür:

    Kullanılan UserDir yönergesi     Elde edilen yol
    UserDir public_html ~ali/public_html/bir/iki.html
    UserDir /usr/siteler /usr/siteler/ali/bir/iki.html
    UserDir /home/*/htdocs /home/ali/htdocs/bir/iki.html

    Aşağıdaki yönergelerle istemciye gönderilecek yönlendirmeler:

    Kullanılan UserDir yönergesi     Elde edilen yönlendirme
    UserDir http://example.com/users http://example.com/users/ali/bir/iki.html
    UserDir http://example.com/*/usr http://example.com/ali/usr/bir/iki.html
    UserDir http://example.com/~*/ http://example.com/~ali/bir/iki.html
    Bu yönergeyi kullanırken dikkatli olun; örneğin, "UserDir ./" şeklinde bir atama "/~root" isteklerini "/" dizinine yönlendirir ki bu elbette istenmez. Bu bakımdan yapılandırmanızda mutlaka bir "UserDir disabled root" satırının yer almasını tavsiye ederiz. Daha fazla bilgi için Directory yönergesine ve Güvenlik İpuçları sayfasına bakınız.

    Diğer örnekler:

    Bir kaç kullanıcı hariç kalan herkesin UserDir dizinlerini iptal etmek için şunu yapabilirsiniz:

    UserDir disabled
    UserDir enabled birey1 birey2 birey3

    Bir kaç kullanıcı hariç kalan herkesin UserDir dizinlerini etkin kılmak için şunu yapabilirsiniz:

    UserDir disabled birey4 birey5 birey6

    Birden fazla dizin belirtmek de mümkündür:

    Userdir "public_html" "/usr/siteler" "http://example.com/"

    Bu örneğe göre, http://example.com/~ali/bir/iki.html şeklinde bir istek alındığında sunucu önce http://example.com/~ali/bir/iki.html yönlendirmesini deneyecektir. Onu bulamazsa isteği /usr/siteler/ali/bir/iki.html dosyasını arayacak onu da bulamazsa istemciyi http://example.com/ali/bir/iki.html adresine yönlendirecektir.

    Argüman listesine bir yönlendirme ekleyecekseniz, bu, listenin son elemanı olmalıdır. Apache httpd yönlendirmenin başarılı sonuç verip vermediğini bilemeyecektir. Bu bakımdan, listede bu yönlendirmeden sonra bir yönlendirme daha bulunması daha iyi olacaktır.

    Kullanıcı dizini dönüşümü Apache 2.1.4 sürümü ve sonrasında öntanımlı olarak etkin değildir. Daha önceki sürümlerde bir UserDir yönergesinin yokluğunda UserDir public_html öntanımlıydı.

    Ayrıntıların birleştirilmesi

    Etkinleştirilen ve etkisizleştirilen kullanıcılara özgü listeler küresel etki alanından sanal konak etki alanına aktarılırken yer değiştirme yapılır, mevcutla birleştirilmez.

    Ayrıca bakınız:

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_macro.html.en0000644000000000000500000003623013420146431017451 0ustar rootsrc mod_macro - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_macro

    Available Languages:  en  |  fr 

    Description:Provides macros within apache httpd runtime configuration files
    Status:Base
    Module Identifier:macro_module
    Source File:mod_macro.c
    Compatibility:Available in httpd 2.4.5 and later

    Summary

    Provides macros within Apache httpd runtime configuration files, to ease the process of creating numerous similar configuration blocks. When the server starts up, the macros are expanded using the provided parameters, and the result is processed as along with the rest of the configuration file.

    top

    Usage

    Macros are defined using <Macro> blocks, which contain the portion of your configuration that needs to be repeated, complete with variables for those parts that will need to be substituted.

    For example, you might use a macro to define a <VirtualHost> block, in order to define multiple similar virtual hosts:

    <Macro VHost $name $domain>
    <VirtualHost *:80>
        ServerName $domain
        ServerAlias www.$domain
    
        DocumentRoot "/var/www/vhosts/$name"
        ErrorLog "/var/log/httpd/$name.error_log"
        CustomLog "/var/log/httpd/$name.access_log" combined
    </VirtualHost>
    </Macro>

    Macro names are case-insensitive, like httpd configuration directives. However, variable names are case sensitive.

    You would then invoke this macro several times to create virtual hosts:

    Use VHost example example.com
    Use VHost myhost hostname.org
    Use VHost apache apache.org
    
    UndefMacro VHost

    At server startup time, each of these Use invocations would be expanded into a full virtualhost, as described by the <Macro> definition.

    The UndefMacro directive is used so that later macros using the same variable names don't result in conflicting definitions.

    A more elaborate version of this example may be seen below in the Examples section.

    top

    Tips

    Parameter names should begin with a sigil such as $, %, or @, so that they are clearly identifiable, and also in order to help deal with interactions with other directives, such as the core Define directive. Failure to do so will result in a warning. Nevertheless, you are encouraged to have a good knowledge of your entire server configuration in order to avoid reusing the same variables in different scopes, which can cause confusion.

    Parameters prefixed with either $ or % are not escaped. Parameters prefixes with @ are escaped in quotes.

    Avoid using a parameter which contains another parameter as a prefix, (For example, $win and $winter) as this may cause confusion at expression evaluation time. In the event of such confusion, the longest possible parameter name is used.

    If you want to use a value within another string, it is useful to surround the parameter in braces, to avoid confusion:

    <Macro DocRoot ${docroot}>
        DocumentRoot "/var/www/${docroot}/htdocs"
    </Macro>
    top

    Examples

    Virtual Host Definition

    A common usage of mod_macro is for the creation of dynamically-generated virtual hosts.

    ## Define a VHost Macro for repetitive configurations
    
    <Macro VHost $host $port $dir>
      Listen $port
      <VirtualHost *:$port>
    
        ServerName $host
        DocumentRoot "$dir"
    
        # Public document root
        <Directory "$dir">
            Require all granted
        </Directory>
    
        # limit access to intranet subdir.
        <Directory "$dir/intranet">
          Require ip 10.0.0.0/8
        </Directory>
      </VirtualHost>
    </Macro>
    
    ## Use of VHost with different arguments.
    
    Use VHost www.apache.org 80 /vhosts/apache/htdocs
    Use VHost example.org 8080 /vhosts/example/htdocs
    Use VHost www.example.fr 1234 /vhosts/example.fr/htdocs

    Removal of a macro definition

    It's recommended that you undefine a macro once you've used it. This avoids confusion in a complex configuration file where there may be conflicts in variable names.

    <Macro DirGroup $dir $group>
      <Directory "$dir">
        Require group $group
      </Directory>
    </Macro>
    
    Use DirGroup /www/apache/private private
    Use DirGroup /www/apache/server  admin
    
    UndefMacro DirGroup
    top

    <Macro> Directive

    Description:Define a configuration file macro
    Syntax: <Macro name [par1 .. parN]> ... </Macro>
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_macro

    The <Macro> directive controls the definition of a macro within the server runtime configuration files. The first argument is the name of the macro. Other arguments are parameters to the macro. It is good practice to prefix parameter names with any of '$%@', and not macro names with such characters.

    <Macro LocalAccessPolicy>
        Require ip 10.2.16.0/24
    </Macro>
    
    <Macro RestrictedAccessPolicy $ipnumbers>
        Require ip $ipnumbers
    </Macro>
    top

    UndefMacro Directive

    Description:Undefine a macro
    Syntax:UndefMacro name
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_macro

    The UndefMacro directive undefines a macro which has been defined before hand.

    UndefMacro LocalAccessPolicy
    UndefMacro RestrictedAccessPolicy
    top

    Use Directive

    Description:Use a macro
    Syntax:Use name [value1 ... valueN]
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_macro

    The Use directive controls the use of a macro. The specified macro is expanded. It must be given the same number of arguments as in the macro definition. The provided values are associated to their corresponding initial parameters and are substituted before processing.

    Use LocalAccessPolicy
    ...
    Use RestrictedAccessPolicy "192.54.172.0/24 192.54.148.0/24"

    is equivalent, with the macros defined above, to:

    Require ip 10.2.16.0/24
    ...
    Require ip 192.54.172.0/24 192.54.148.0/24

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_suexec.html0000644000000000000500000000075113362070302017240 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_suexec.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_suexec.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_suexec.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_suexec.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: mod_suexec.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_proxy_scgi.html0000644000000000000500000000034013362070302020124 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy_scgi.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_proxy_scgi.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_dav_lock.html0000644000000000000500000000047013362070302017524 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_dav_lock.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_dav_lock.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_dav_lock.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_proxy_http.html.en0000644000000000000500000002752413412755316020607 0ustar rootsrc mod_proxy_http - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy_http

    Available Languages:  en  |  fr 

    Description:HTTP support module for mod_proxy
    Status:Extension
    Module Identifier:proxy_http_module
    Source File:mod_proxy_http.c

    Summary

    This module requires the service of mod_proxy. It provides the features used for proxying HTTP and HTTPS requests. mod_proxy_http supports HTTP/0.9, HTTP/1.0 and HTTP/1.1. It does not provide any caching abilities. If you want to set up a caching proxy, you might want to use the additional service of the mod_cache module.

    Thus, in order to get the ability of handling HTTP proxy requests, mod_proxy and mod_proxy_http have to be present in the server.

    Warning

    Do not enable proxying until you have secured your server. Open proxy servers are dangerous both to your network and to the Internet at large.

    Support Apache!

    Topics

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    top

    Environment Variables

    In addition to the configuration directives that control the behaviour of mod_proxy, there are a number of environment variables that control the HTTP protocol provider. Environment variables below that don't specify specific values are enabled when set to any value.

    proxy-sendextracrlf
    Causes proxy to send an extra CR-LF newline on the end of a request. This is a workaround for a bug in some browsers.
    force-proxy-request-1.0
    Forces the proxy to send requests to the backend as HTTP/1.0 and disables HTTP/1.1 features.
    proxy-nokeepalive
    Forces the proxy to close the backend connection after each request.
    proxy-chain-auth
    If the proxy requires authentication, it will read and consume the proxy authentication credentials sent by the client. With proxy-chain-auth it will also forward the credentials to the next proxy in the chain. This may be necessary if you have a chain of proxies that share authentication information. Security Warning: Do not set this unless you know you need it, as it forwards sensitive information!
    proxy-sendcl
    HTTP/1.0 required all HTTP requests that include a body (e.g. POST requests) to include a Content-Length header. This environment variable forces the Apache proxy to send this header to the backend server, regardless of what the Client sent to the proxy. It ensures compatibility when proxying for an HTTP/1.0 or unknown backend. However, it may require the entire request to be buffered by the proxy, so it becomes very inefficient for large requests.
    proxy-sendchunks or proxy-sendchunked
    This is the opposite of proxy-sendcl. It allows request bodies to be sent to the backend using chunked transfer encoding. This allows the request to be efficiently streamed, but requires that the backend server supports HTTP/1.1.
    proxy-interim-response
    This variable takes values RFC (the default) or Suppress. Earlier httpd versions would suppress HTTP interim (1xx) responses sent from the backend. This is technically a violation of the HTTP protocol. In practice, if a backend sends an interim response, it may itself be extending the protocol in a manner we know nothing about, or just broken. So this is now configurable: set proxy-interim-response RFC to be fully protocol compliant, or proxy-interim-response Suppress to suppress interim responses.
    proxy-initial-not-pooled
    If this variable is set, no pooled connection will be reused if the client request is the initial request on the frontend connection. This avoids the "proxy: error reading status line from remote server" error message caused by the race condition that the backend server closed the pooled connection after the connection check by the proxy and before data sent by the proxy reached the backend. It has to be kept in mind that setting this variable downgrades performance, especially with HTTP/1.0 clients.
    top

    Request notes

    mod_proxy_http creates the following request notes for logging using the %{VARNAME}n format in LogFormat or ErrorLogFormat:

    proxy-source-port
    The local port used for the connection to the backend server.
    proxy-status
    The HTTP status received from the backend server.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_dbd.html0000644000000000000500000000033613362070302017707 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authz_dbd.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authz_dbd.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/quickreference.html.zh-cn.utf80000644000000000000500000055403113523273316022021 0ustar rootsrc 指令快速索引 - Apache HTTP æœåС噍 版本 2.4
    <-

    指令快速索引

    å¯ç”¨è¯­è¨€:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    此翻译å¯èƒ½è¿‡æœŸã€‚è¦äº†è§£æœ€è¿‘的更改,请阅读英文版。

    指令快速索引显示指令的用法,默认值,状æ€å’Œä¸Šä¸‹æ–‡ã€‚è¦èŽ·å¾—æ›´å¤šä¿¡æ¯ï¼Œè¯·å‚è§ æè¿°æŒ‡ä»¤çš„æœ¯è¯­ã€‚

    第一列给出指令的å称与用法。第二列显示指令的默认值(如果有的è¯)。 如果因为默认值太长而被截断显示,会在最åŽä¸€ä¸ªå­—ç¬¦ä¹‹åŽæ˜¾ç¤ºå­—符 “+â€ã€‚

    第三列显示å…许此指令的上下文,第四列显示指令的状æ€ã€‚

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 
    sæœåС噍é…ç½®
    v虚拟主机
    d目录
    h.htaccess
    C核心
    MMPM
    B基础
    E扩展
    X实验
    AcceptFilter protocol accept_filtersC
    Configures optimizations for a Protocol's Listener Sockets
    AcceptPathInfo On|Off|Default Default svdhC
    Resources accept trailing pathname information
    AccessFileName filename [filename] ... .htaccess svC
    Name of the distributed configuration file
    Action action-type cgi-script [virtual]svdhB
    Activates a CGI script for a particular handler or content-type
    AddAlt string file [file] ...svdhB
    Alternate text to display for a file, instead of an icon selected by filename
    AddAltByEncoding string MIME-encoding [MIME-encoding] ...svdhB
    Alternate text to display for a file instead of an icon selected by MIME-encoding
    AddAltByType string MIME-type [MIME-type] ...svdhB
    Alternate text to display for a file, instead of an icon selected by MIME content-type
    AddCharset charset extension [extension] ...svdhB
    Maps the given filename extensions to the specified content charset
    AddDefaultCharset On|Off|charset Off svdhC
    Default charset parameter to be added when a response content-type is text/plain or text/html
    AddDescription string file [file] ...svdhB
    Description to display for a file
    AddEncoding encoding extension [extension] ...svdhB
    Maps the given filename extensions to the specified encoding type
    AddHandler handler-name extension [extension] ...svdhB
    Maps the filename extensions to the specified handler
    AddIcon icon name [name] ...svdhB
    Icon to display for a file selected by name
    AddIconByEncoding icon MIME-encoding [MIME-encoding] ...svdhB
    Icon to display next to files selected by MIME content-encoding
    AddIconByType icon MIME-type [MIME-type] ...svdhB
    Icon to display next to files selected by MIME content-type
    AddInputFilter filter[;filter...] extension [extension] ...svdhB
    Maps filename extensions to the filters that will process client requests
    AddLanguage language-tag extension [extension] ...svdhB
    Maps the given filename extension to the specified content language
    AddModuleInfo module-name stringsvE
    Adds additional information to the module information displayed by the server-info handler
    AddOutputFilter filter[;filter...] extension [extension] ...svdhB
    Maps filename extensions to the filters that will process responses from the server
    AddOutputFilterByType filter[;filter...] media-type [media-type] ...svdhB
    assigns an output filter to a particular media-type
    AddType media-type extension [extension] ...svdhB
    Maps the given filename extensions onto the specified content type
    Alias [URL-path] file-path|directory-pathsvdB
    Maps URLs to filesystem locations
    AliasMatch regex file-path|directory-pathsvB
    Maps URLs to filesystem locations using regular expressions
    Allow from all|host|env=[!]env-variable [host|env=[!]env-variable] ...dhE
    Controls which hosts can access an area of the server
    AllowCONNECT port[-port] [port[-port]] ... 443 563 svE
    Ports that are allowed to CONNECT through the proxy
    AllowEncodedSlashes On|Off|NoDecode Off svC
    Determines whether encoded path separators in URLs are allowed to be passed through
    AllowMethods reset|HTTP-method [HTTP-method]... reset dX
    Restrict access to the listed HTTP methods
    AllowOverride All|None|directive-type [directive-type] ... None (2.3.9 and lat +dC
    Types of directives that are allowed in .htaccess files
    AllowOverrideList None|directive [directive-type] ... None dC
    Individual directives that are allowed in .htaccess files
    Anonymous user [user] ...dhE
    Specifies userIDs that are allowed access without password verification
    Anonymous_LogEmail On|Off On dhE
    Sets whether the password entered will be logged in the error log
    Anonymous_MustGiveEmail On|Off On dhE
    Specifies whether blank passwords are allowed
    Anonymous_NoUserID On|Off Off dhE
    Sets whether the userID field may be empty
    Anonymous_VerifyEmail On|Off Off dhE
    Sets whether to check the password field for a correctly formatted email address
    AsyncRequestWorkerFactor factorsM
    Limit concurrent connections per process
    AuthBasicAuthoritative On|Off On dhB
    Sets whether authorization and authentication are passed to lower level modules
    AuthBasicFake off|username [password]dhB
    Fake basic authentication using the given expressions for username and password
    AuthBasicProvider provider-name [provider-name] ... file dhB
    Sets the authentication provider(s) for this location
    AuthBasicUseDigestAlgorithm MD5|Off Off dhB
    Check passwords against the authentication providers as if Digest Authentication was in force instead of Basic Authentication.
    AuthDBDUserPWQuery querydE
    SQL query to look up a password for a user
    AuthDBDUserRealmQuery querydE
    SQL query to look up a password hash for a user and realm.
    AuthDBMGroupFile file-pathdhE
    Sets the name of the database file containing the list of user groups for authorization
    AuthDBMType default|SDBM|GDBM|NDBM|DB default dhE
    Sets the type of database file that is used to store passwords
    AuthDBMUserFile file-pathdhE
    Sets the name of a database file containing the list of users and passwords for authentication
    AuthDigestAlgorithm MD5|MD5-sess MD5 dhE
    Selects the algorithm used to calculate the challenge and response hashes in digest authentication
    AuthDigestDomain URI [URI] ...dhE
    URIs that are in the same protection space for digest authentication
    AuthDigestNonceLifetime seconds 300 dhE
    How long the server nonce is valid
    AuthDigestProvider provider-name [provider-name] ... file dhE
    Sets the authentication provider(s) for this location
    AuthDigestQop none|auth|auth-int [auth|auth-int] auth dhE
    Determines the quality-of-protection to use in digest authentication
    AuthDigestShmemSize size 1000 sE
    The amount of shared memory to allocate for keeping track of clients
    AuthFormAuthoritative On|Off On dhB
    Sets whether authorization and authentication are passed to lower level modules
    AuthFormBody fieldnamedB
    The name of a form field carrying the body of the request to attempt on successful login
    AuthFormDisableNoStore On|Off Off dB
    Disable the CacheControl no-store header on the login page
    AuthFormFakeBasicAuth On|Off Off dB
    Fake a Basic Authentication header
    AuthFormLocation fieldnamedB
    The name of a form field carrying a URL to redirect to on successful login
    AuthFormLoginRequiredLocation urldB
    The URL of the page to be redirected to should login be required
    AuthFormLoginSuccessLocation urldB
    The URL of the page to be redirected to should login be successful
    AuthFormLogoutLocation uridB
    The URL to redirect to after a user has logged out
    AuthFormMethod fieldnamedB
    The name of a form field carrying the method of the request to attempt on successful login
    AuthFormMimetype fieldnamedB
    The name of a form field carrying the mimetype of the body of the request to attempt on successful login
    AuthFormPassword fieldnamedB
    The name of a form field carrying the login password
    AuthFormProvider provider-name [provider-name] ... file dhB
    Sets the authentication provider(s) for this location
    AuthFormSitePassphrase secretdB
    Bypass authentication checks for high traffic sites
    AuthFormSize sizedB
    The largest size of the form in bytes that will be parsed for the login details
    AuthFormUsername fieldnamedB
    The name of a form field carrying the login username
    AuthGroupFile file-pathdhB
    Sets the name of a text file containing the list of user groups for authorization
    AuthLDAPAuthorizePrefix prefix AUTHORIZE_ dhE
    Specifies the prefix for environment variables set during authorization
    AuthLDAPBindAuthoritative off|on on dhE
    Determines if other authentication providers are used when a user can be mapped to a DN but the server cannot successfully bind with the user's credentials.
    AuthLDAPBindDN distinguished-namedhE
    Optional DN to use in binding to the LDAP server
    AuthLDAPBindPassword passworddhE
    Password used in conjunction with the bind DN
    AuthLDAPCharsetConfig file-pathsE
    Language to charset conversion configuration file
    AuthLDAPCompareAsUser on|off off dhE
    Use the authenticated user's credentials to perform authorization comparisons
    AuthLDAPCompareDNOnServer on|off on dhE
    Use the LDAP server to compare the DNs
    AuthLDAPDereferenceAliases never|searching|finding|always always dhE
    When will the module de-reference aliases
    AuthLDAPGroupAttribute attribute member uniqueMember +dhE
    LDAP attributes used to identify the user members of groups.
    AuthLDAPGroupAttributeIsDN on|off on dhE
    Use the DN of the client username when checking for group membership
    AuthLDAPInitialBindAsUser off|on off dhE
    Determines if the server does the initial DN lookup using the basic authentication users' own username, instead of anonymously or with hard-coded credentials for the server
    AuthLDAPInitialBindPattern regex substitution (.*) $1 (remote use +dhE
    Specifies the transformation of the basic authentication username to be used when binding to the LDAP server to perform a DN lookup
    AuthLDAPMaxSubGroupDepth Number 10 dhE
    Specifies the maximum sub-group nesting depth that will be evaluated before the user search is discontinued.
    AuthLDAPRemoteUserAttribute uiddhE
    Use the value of the attribute returned during the user query to set the REMOTE_USER environment variable
    AuthLDAPRemoteUserIsDN on|off off dhE
    Use the DN of the client username to set the REMOTE_USER environment variable
    AuthLDAPSearchAsUser on|off off dhE
    Use the authenticated user's credentials to perform authorization searches
    AuthLDAPSubGroupAttribute attribute member uniqueMember +dhE
    Specifies the attribute labels, one value per directive line, used to distinguish the members of the current group that are groups.
    AuthLDAPSubGroupClass LdapObjectClass groupOfNames groupO +dhE
    Specifies which LDAP objectClass values identify directory objects that are groups during sub-group processing.
    AuthLDAPURL url [NONE|SSL|TLS|STARTTLS]dhE
    URL specifying the LDAP search parameters
    AuthMerging Off | And | Or Off dhB
    Controls the manner in which each configuration section's authorization logic is combined with that of preceding configuration sections.
    AuthName auth-domaindhB
    Authorization realm for use in HTTP authentication
    AuthnCacheContext directory|server|custom-stringdB
    Specify a context string for use in the cache key
    AuthnCacheEnablesB
    Enable Authn caching configured anywhere
    AuthnCacheProvideFor authn-provider [...]dhB
    Specify which authn provider(s) to cache for
    AuthnCacheSOCache provider-name[:provider-args]sB
    Select socache backend provider to use
    AuthnCacheTimeout timeout (seconds)dhB
    Set a timeout for cache entries
    <AuthnProviderAlias baseProvider Alias> ... </AuthnProviderAlias>sB
    Enclose a group of directives that represent an extension of a base authentication provider and referenced by the specified alias
    AuthnzFcgiCheckAuthnProvider provider-name|None option ...dE
    Enables a FastCGI application to handle the check_authn authentication hook.
    AuthnzFcgiDefineProvider type provider-name backend-addresssE
    Defines a FastCGI application as a provider for authentication and/or authorization
    AuthType None|Basic|Digest|FormdhB
    Type of user authentication
    AuthUserFile file-pathdhB
    Sets the name of a text file containing the list of users and passwords for authentication
    AuthzDBDLoginToReferer On|Off Off dE
    Determines whether to redirect the Client to the Referring page on successful login or logout if a Referer request header is present
    AuthzDBDQuery querydE
    Specify the SQL Query for the required operation
    AuthzDBDRedirectQuery querydE
    Specify a query to look up a login page for the user
    AuthzDBMType default|SDBM|GDBM|NDBM|DB default dhE
    Sets the type of database file that is used to store list of user groups
    <AuthzProviderAlias baseProvider Alias Require-Parameters> ... </AuthzProviderAlias> sB
    Enclose a group of directives that represent an extension of a base authorization provider and referenced by the specified alias
    AuthzSendForbiddenOnFailure On|Off Off dhB
    Send '403 FORBIDDEN' instead of '401 UNAUTHORIZED' if authentication succeeds but authorization fails
    BalancerGrowth # 5 svE
    Number of additional Balancers that can be added Post-configuration
    BalancerInherit On|Off On svE
    Inherit ProxyPassed Balancers/Workers from the main server
    BalancerMember [balancerurl] url [key=value [key=value ...]]dE
    Add a member to a load balancing group
    BalancerPersist On|Off Off svE
    Attempt to persist changes made by the Balancer Manager across restarts.
    BrotliAlterETag AddSuffix|NoChange|Remove AddSuffix svE
    How the outgoing ETag header should be modified during compression
    BrotliCompressionMaxInputBlock valuesvE
    Maximum input block size
    BrotliCompressionQuality value 5 svE
    Compression quality
    BrotliCompressionWindow value 18 svE
    Brotli sliding compression window size
    BrotliFilterNote [type] notenamesvE
    Places the compression ratio in a note for logging
    BrowserMatch regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables conditional on HTTP User-Agent
    BrowserMatchNoCase regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables conditional on User-Agent without respect to case
    BufferedLogs On|Off Off sB
    Buffer log entries in memory before writing to disk
    BufferSize integer 131072 svdhE
    Maximum size in bytes to buffer by the buffer filter
    CacheDefaultExpire seconds 3600 (one hour) svdhE
    The default duration to cache a document when no expiry date is specified.
    CacheDetailHeader on|off off svdhE
    Add an X-Cache-Detail header to the response.
    CacheDirLength length 2 svE
    The number of characters in subdirectory names
    CacheDirLevels levels 2 svE
    The number of levels of subdirectories in the cache.
    CacheDisable url-string | onsvdhE
    Disable caching of specified URLs
    CacheEnable cache_type [url-string]svdE
    Enable caching of specified URLs using a specified storage manager
    CacheFile file-path [file-path] ...sX
    Cache a list of file handles at startup time
    CacheHeader on|off off svdhE
    Add an X-Cache header to the response.
    CacheIgnoreCacheControl On|Off Off svE
    Ignore request to not serve cached content to client
    CacheIgnoreHeaders header-string [header-string] ... None svE
    Do not store the given HTTP header(s) in the cache.
    CacheIgnoreNoLastMod On|Off Off svdhE
    Ignore the fact that a response has no Last Modified header.
    CacheIgnoreQueryString On|Off Off svE
    Ignore query string when caching
    CacheIgnoreURLSessionIdentifiers identifier [identifier] ... None svE
    Ignore defined session identifiers encoded in the URL when caching
    CacheKeyBaseURL URLsvE
    Override the base URL of reverse proxied cache keys.
    CacheLastModifiedFactor float 0.1 svdhE
    The factor used to compute an expiry date based on the LastModified date.
    CacheLock on|off off svE
    Enable the thundering herd lock.
    CacheLockMaxAge integer 5 svE
    Set the maximum possible age of a cache lock.
    CacheLockPath directory /tmp/mod_cache-lock +svE
    Set the lock path directory.
    CacheMaxExpire seconds 86400 (one day) svdhE
    The maximum time in seconds to cache a document
    CacheMaxFileSize bytes 1000000 svdhE
    The maximum size (in bytes) of a document to be placed in the cache
    CacheMinExpire seconds 0 svdhE
    The minimum time in seconds to cache a document
    CacheMinFileSize bytes 1 svdhE
    The minimum size (in bytes) of a document to be placed in the cache
    CacheNegotiatedDocs On|Off Off svB
    Allows content-negotiated documents to be cached by proxy servers
    CacheQuickHandler on|off on svE
    Run the cache from the quick handler.
    CacheReadSize bytes 0 svdhE
    The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    CacheReadTime milliseconds 0 svdhE
    The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    CacheRoot directorysvE
    The directory root under which cache files are stored
    CacheSocache type[:args]svE
    The shared object cache implementation to use
    CacheSocacheMaxSize bytes 102400 svdhE
    The maximum size (in bytes) of an entry to be placed in the cache
    CacheSocacheMaxTime seconds 86400 svdhE
    The maximum time (in seconds) for a document to be placed in the cache
    CacheSocacheMinTime seconds 600 svdhE
    The minimum time (in seconds) for a document to be placed in the cache
    CacheSocacheReadSize bytes 0 svdhE
    The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    CacheSocacheReadTime milliseconds 0 svdhE
    The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    CacheStaleOnError on|off on svdhE
    Serve stale content in place of 5xx responses.
    CacheStoreExpired On|Off Off svdhE
    Attempt to cache responses that the server reports as expired
    CacheStoreNoStore On|Off Off svdhE
    Attempt to cache requests or responses that have been marked as no-store.
    CacheStorePrivate On|Off Off svdhE
    Attempt to cache responses that the server has marked as private
    CGIDScriptTimeout time[s|ms]svdhB
    The length of time to wait for more output from the CGI program
    CGIMapExtension cgi-path .extensiondhC
    Technique for locating the interpreter for CGI scripts
    CGIPassAuth On|Off Off dhC
    Enables passing HTTP authorization headers to scripts as CGI variables
    CGIVar variable ruledhC
    Controls how some CGI variables are set
    CharsetDefault charsetsvdhE
    Charset to translate into
    CharsetOptions option [option] ... ImplicitAdd svdhE
    Configures charset translation behavior
    CharsetSourceEnc charsetsvdhE
    Source charset of files
    CheckCaseOnly on|off Off svdhE
    Limits the action of the speling module to case corrections
    CheckSpelling on|off Off svdhE
    Enables the spelling module
    ChrootDir /path/to/directorysB
    Directory for apache to run chroot(8) after startup.
    ContentDigest On|Off Off svdhC
    Enables the generation of Content-MD5 HTTP Response headers
    CookieDomain domainsvdhE
    The domain to which the tracking cookie applies
    CookieExpires expiry-periodsvdhE
    Expiry time for the tracking cookie
    CookieName token Apache svdhE
    Name of the tracking cookie
    CookieStyle Netscape|Cookie|Cookie2|RFC2109|RFC2965 Netscape svdhE
    Format of the cookie header field
    CookieTracking on|off off svdhE
    Enables tracking cookie
    CoreDumpDirectory directorysM
    Directory where Apache HTTP Server attempts to switch before dumping core
    CustomLog file|pipe format|nickname [env=[!]environment-variable| expr=expression]svB
    Sets filename and format of log file
    Dav On|Off|provider-name Off dE
    Enable WebDAV HTTP methods
    DavDepthInfinity on|off off svdE
    Allow PROPFIND, Depth: Infinity requests
    DavGenericLockDB file-pathsvdE
    Location of the DAV lock database
    DavLockDB file-pathsvE
    Location of the DAV lock database
    DavMinTimeout seconds 0 svdE
    Minimum amount of time the server holds a lock on a DAV resource
    DBDExptime time-in-seconds 300 svE
    Keepalive time for idle connections
    DBDInitSQL "SQL statement"svE
    Execute an SQL statement after connecting to a database
    DBDKeep number 2 svE
    Maximum sustained number of connections
    DBDMax number 10 svE
    Maximum number of connections
    DBDMin number 1 svE
    Minimum number of connections
    DBDParams param1=value1[,param2=value2]svE
    Parameters for database connection
    DBDPersist On|OffsvE
    Whether to use persistent connections
    DBDPrepareSQL "SQL statement" labelsvE
    Define an SQL prepared statement
    DBDriver namesvE
    Specify an SQL driver
    DefaultIcon url-pathsvdhB
    Icon to display for files when no specific icon is configured
    DefaultLanguage language-tagsvdhB
    Defines a default language-tag to be sent in the Content-Language header field for all resources in the current context that have not been assigned a language-tag by some other means.
    DefaultRuntimeDir directory-path DEFAULT_REL_RUNTIME +sC
    Base directory for the server run-time files
    DefaultType media-type|none none svdhC
    This directive has no effect other than to emit warnings if the value is not none. In prior versions, DefaultType would specify a default media type to assign to response content for which no other media type configuration could be found.
    Define parameter-name [parameter-value]svdC
    Define a variable
    DeflateBufferSize value 8096 svE
    Fragment size to be compressed at one time by zlib
    DeflateCompressionLevel valuesvE
    How much compression do we apply to the output
    DeflateFilterNote [type] notenamesvE
    Places the compression ratio in a note for logging
    DeflateInflateLimitRequestBody valuesvdhE
    Maximum size of inflated request bodies
    DeflateInflateRatioBurst value 3 svdhE
    Maximum number of times the inflation ratio for request bodies can be crossed
    DeflateInflateRatioLimit value 200 svdhE
    Maximum inflation ratio for request bodies
    DeflateMemLevel value 9 svE
    How much memory should be used by zlib for compression
    DeflateWindowSize value 15 svE
    Zlib compression window size
    Deny from all|host|env=[!]env-variable [host|env=[!]env-variable] ...dhE
    Controls which hosts are denied access to the server
    <Directory directory-path> ... </Directory>svC
    Enclose a group of directives that apply only to the named file-system directory, sub-directories, and their contents.
    DirectoryCheckHandler On|Off Off svdhB
    Toggle how this module responds when another handler is configured
    DirectoryIndex disabled | local-url [local-url] ... index.html svdhB
    List of resources to look for when the client requests a directory
    DirectoryIndexRedirect on | off | permanent | temp | seeother | 3xx-code off svdhB
    Configures an external redirect for directory indexes.
    <DirectoryMatch regex> ... </DirectoryMatch>svC
    Enclose directives that apply to the contents of file-system directories matching a regular expression.
    DirectorySlash On|Off On svdhB
    Toggle trailing slash redirects on or off
    DocumentRoot directory-path "/usr/local/apache/ +svC
    Directory that forms the main document tree visible from the web
    DTracePrivileges On|Off Off sX
    Determines whether the privileges required by dtrace are enabled.
    DumpIOInput On|Off Off sE
    Dump all input data to the error log
    DumpIOOutput On|Off Off sE
    Dump all output data to the error log
    <Else> ... </Else>svdhC
    Contains directives that apply only if the condition of a previous <If> or <ElseIf> section is not satisfied by a request at runtime
    <ElseIf expression> ... </ElseIf>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime while the condition of a previous <If> or <ElseIf> section is not satisfied
    EnableExceptionHook On|Off Off sM
    Enables a hook that runs exception handlers after a crash
    EnableMMAP On|Off On svdhC
    Use memory-mapping to read files during delivery
    EnableSendfile On|Off Off svdhC
    Use the kernel sendfile support to deliver files to the client
    Error messagesvdhC
    Abort configuration parsing with a custom error message
    ErrorDocument error-code documentsvdhC
    What the server will return to the client in case of an error
    ErrorLog file-path|syslog[:[facility][:tag]] logs/error_log (Uni +svC
    Location where the server will log errors
    ErrorLogFormat [connection|request] formatsvC
    Format specification for error log entries
    ExamplesvdhX
    Demonstration directive to illustrate the Apache module API
    ExpiresActive On|Off Off svdhE
    Enables generation of Expires headers
    ExpiresByType MIME-type <code>secondssvdhE
    Value of the Expires header configured by MIME type
    ExpiresDefault <code>secondssvdhE
    Default algorithm for calculating expiration time
    ExtendedStatus On|Off Off[*] sC
    Keep track of extended status information for each request
    ExtFilterDefine filtername parameterssE
    Define an external filter
    ExtFilterOptions option [option] ... NoLogStderr dE
    Configure mod_ext_filter options
    FallbackResource disabled | local-urlsvdhB
    Define a default URL for requests that don't map to a file
    FileETag component ... MTime Size svdhC
    File attributes used to create the ETag HTTP response header for static files
    <Files filename> ... </Files>svdhC
    Contains directives that apply to matched filenames
    <FilesMatch regex> ... </FilesMatch>svdhC
    Contains directives that apply to regular-expression matched filenames
    FilterChain [+=-@!]filter-name ...svdhB
    Configure the filter chain
    FilterDeclare filter-name [type]svdhB
    Declare a smart filter
    FilterProtocol filter-name [provider-name] proto-flagssvdhB
    Deal with correct HTTP protocol handling
    FilterProvider filter-name provider-name expressionsvdhB
    Register a content filter
    FilterTrace filter-name levelsvdB
    Get debug/diagnostic information from mod_filter
    ForceLanguagePriority None|Prefer|Fallback [Prefer|Fallback] Prefer svdhB
    Action to take if a single acceptable document is not found
    ForceType media-type|NonedhC
    Forces all matching files to be served with the specified media type in the HTTP Content-Type header field
    ForensicLog filename|pipesvE
    Sets filename of the forensic log
    GlobalLogfile|pipe format|nickname [env=[!]environment-variable| expr=expression]sB
    Sets filename and format of log file
    GprofDir /tmp/gprof/|/tmp/gprof/%svC
    Directory to write gmon.out profiling data to.
    GracefulShutdownTimeout seconds 0 sM
    Specify a timeout after which a gracefully shutdown server will exit.
    Group unix-group #-1 sB
    Group under which the server will answer requests
    H2CopyFiles on|off off svdhE
    Determine file handling in responses
    H2Direct on|off on for h2c, off for +svE
    H2 Direct Protocol Switch
    H2EarlyHints on|off off svE
    Determine sending of 103 status codes
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] svdhE
    Configure HTTP response headers
    HeaderName filenamesvdhB
    Name of the file that will be inserted at the top of the index listing
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending heartbeat requests to this server
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Enables DNS lookups on client IP addresses
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    Enables logging of the RFC 1413 identity of the remote user
    IdentityCheckTimeout seconds 30 svdE
    Determines the timeout duration for ident requests
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime
    <IfDefine [!]parameter-name> ... </IfDefine>svdhC
    Encloses directives that will be processed only if a test is true at startup
    <IfDirective [!]directive-name> ... </IfDirective>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific directive
    <IfFile [!]filename> ... </IfFile>svdhC
    Encloses directives that will be processed only if file exists at startup
    <IfModule [!]module-file|module-identifier> ... </IfModule>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific module
    <IfSection [!]section-name> ... </IfSection>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific section directive
    <IfVersion [[!]operator] version> ... </IfVersion>svdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates that are not explicitly mapped
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling an imagemap
    Include file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IndexHeadInsert "markup ..."svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ... "." svdhB
    Adds to the list of files to hide when listing a directory
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing a directory
    IndexOptions [+|-]option [[+|-]option] ...svdhB
    Various configuration settings for directory indexing
    IndexOrderDefault Ascending|Descending Name|Date|Size|Description Ascending Name svdhB
    Sets the default ordering of the directory index
    IndexStyleSheet url-pathsvdhB
    Adds a CSS stylesheet to the directory index
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field
    ISAPICacheFile file-path [file-path] ...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI extensions
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI extensions
    KeepAlive On|Off On svC
    Enables HTTP persistent connections
    KeepAliveTimeout num[ms] 5 svC
    Amount of time the server will wait for subsequent requests on a persistent connection
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to the specified maximum size, for potential use by filters such as mod_include.
    LanguagePriority MIME-lang [MIME-lang] ...svdhB
    The precedence of language variants for cases where the client does not express a preference
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare operations
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain valid
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted Certificate Authority or global client certificates
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... </Limit>dhC
    Restrict enclosed access controls to only certain HTTP methods
    <LimitExcept method [method] ... > ... </LimitExcept>dhC
    Restrict access controls to all HTTP methods except the named ones
    LimitInternalRecursion number [number] 10 svC
    Determine maximum number of internal redirects and nested subrequests
    LimitRequestBody bytes 0 svdhC
    Restricts the total size of the HTTP request body sent from the client
    LimitRequestFields number 100 svC
    Limits the number of HTTP request header fields that will be accepted from the client
    LimitRequestFieldSize bytes 8190 svC
    Limits the size of the HTTP request header allowed from the client
    LimitRequestLine bytes 8190 svC
    Limit the size of the HTTP request line that will be accepted from the client
    LimitXMLRequestBody bytes 1000000 svdhC
    Limits the size of an XML-based request body
    Listen [IP-address:]portnumber [protocol]sM
    IP addresses and ports that the server listens to
    ListenBackLog backlog 511 sM
    Maximum length of the queue of pending connections
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of listeners' buckets
    LoadFile filename [filename] ...svE
    Link in the named object file or library
    LoadModule module filenamesvE
    Links in the object file or library, and adds to the list of active modules
    <Location URL-path|URL> ... </Location>svC
    Applies the enclosed directives only to matching URLs
    <LocationMatch regex> ... </LocationMatch>svC
    Applies the enclosed directives only to regular-expression matching URLs
    LogFormat format|nickname [nickname] "%h %l %u %t \"%r\" +svB
    Describes a format for use in a log file
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel [module:]level [module:level] ... warn svdC
    Controls the verbosity of the ErrorLog
    LogMessage message [hook=hook] [expr=expression] dX
    Log user-defined message to error log
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    <Macro name [par1 .. parN]> ... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server will handle during its life
    MaxKeepAliveRequests number 100 svC
    Number of requests allowed on a persistent connection
    MaxMemFree KBytes 2048 sM
    Maximum amount of memory that the main allocator is allowed to hold without calling free()
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete resource
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed simultaneously
    MaxSpareServers number 10 sM
    Maximum number of idle child server processes
    MaxSpareThreads numbersM
    Maximum number of idle threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDBaseServer on|off off sE
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sE
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsE
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url https://acme-v02.ap +sE
    The URL of the ACME Certificate Authority service.
    MDCertificateFile path-to-pem-filesE
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesE
    Specify a static private key for for the static cerrtificate.
    MDCertificateProtocol protocol ACME sE
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sE
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsE
    -
    MDDriveMode always|auto|manual auto sE
    former name of MDRenewMode.
    MDHttpProxy urlsE
    Define a proxy for outgoing connections.
    MDMember hostnamesE
    Additional hostname for the managed domain.
    MDMembers auto|manual auto sE
    Control if the alias domain names are automatically added.
    MDMessageCmd path-to-cmd optional-argssE
    Handle events for Manage Domains
    MDMustStaple on|off off sE
    Control if new certificates carry the OCSP Must Staple flag.
    MDNotifyCmd path [ args ]sE
    Run a program when a Managed Domain is ready.
    MDomain dns-name [ other-dns-name... ] [auto|manual]sE
    Define list of domain names that belong to one group.
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sE
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sE
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sE
    Set type and size of the private keys generated.
    MDRenewMode always|auto|manual auto sE
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sE
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sE
    Redirects http: traffic to https: for Managed Domains.
    MDServerStatus on|off on sE
    Control if Managed Domain information is added to server-status.
    MDStoreDir path md sE
    Path on the local file system to store the Managed Domains data.
    MDWarnWindow duration 10% sE
    Define the time window when you want to be warned about an expiring certificate.
    MemcacheConnTTL num[units] 15s svE
    Keepalive time for idle connections
    MergeSlashes ON|OFF ON svC
    Controls whether the server merges consecutive slashes in URLs.
    MergeTrailers [on|off] off svC
    Determines whether trailers are merged into headers
    MetaDir directory .web svdhE
    Name of the directory to find CERN-style meta information files
    MetaFiles on|off off svdhE
    Activates CERN meta-file processing
    MetaSuffix suffix .meta svdhE
    File name suffix for the file containing CERN-style meta information
    MimeMagicFile file-pathsvE
    Enable MIME-type determination based on file contents using the specified magic file
    MinSpareServers number 5 sM
    Minimum number of idle child server processes
    MinSpareThreads numbersM
    Minimum number of idle threads available to handle request spikes
    MMapFile file-path [file-path] ...sX
    Map a list of files into memory at startup time
    ModemStandard V.21|V.26bis|V.32|V.34|V.92dX
    Modem standard to simulate
    ModMimeUsePathInfo On|Off Off dB
    Tells mod_mime to treat path_info components as part of the filename
    MultiviewsMatch Any|NegotiatedOnly|Filters|Handlers [Handlers|Filters] NegotiatedOnly svdhB
    The types of files that will be included when searching for a matching file with MultiViews
    Mutex mechanism [default|mutex-name] ... [OmitPID] default sC
    Configures mutex mechanism and lock file directory for all or specified mutexes
    NameVirtualHost addr[:port]sC
    DEPRECATED: Designates an IP address for name-virtual hosting
    NoProxy host [host] ...svE
    Hosts, domains, or networks that will be connected to directly
    NWSSLTrustedCerts filename [filename] ...sB
    List of additional client certificates
    NWSSLUpgradeable [IP-address:]portnumbersB
    Allows a connection to be upgraded to an SSL connection upon request
    Options [+|-]option [[+|-]option] ... FollowSymlinks svdhC
    Configures what features are available in a particular directory
    Order ordering Deny,Allow dhE
    Controls the default access state and the order in which Allow and Deny are evaluated.
    OutputSed sed-commanddhX
    Sed command for filtering response content
    PassEnv env-variable [env-variable] ...svdhB
    Passes environment variables from the shell
    PidFile filename logs/httpd.pid sM
    File where the server records the process ID of the daemon
    PrivilegesMode FAST|SECURE|SELECTIVE FAST svdX
    Trade off processing speed and efficiency vs security against malicious privileges-aware code.
    Protocol protocolsvC
    Protocol for a listening socket
    ProtocolEcho On|Off Off svX
    Turn the echo server on or off
    Protocols protocol ... http/1.1 svC
    Protocols available for a server/virtual host
    ProtocolsHonorOrder On|Off On svC
    Determines if order of Protocols determines precedence during negotiation
    <Proxy wildcard-url> ...</Proxy>svE
    Container for directives applied to proxied resources
    Proxy100Continue Off|On On svdE
    Forward 100-continue expectation to the origin server
    ProxyAddHeaders Off|On On svdE
    Add proxy information in X-Forwarded-* headers
    ProxyBadHeader IsError|Ignore|StartBody IsError svE
    Determines how to handle bad header lines in a response
    ProxyBlock *|word|host|domain [word|host|domain] ...svE
    Words, hosts, or domains that are banned from being proxied
    ProxyDomain DomainsvE
    Default domain name for proxied requests
    ProxyErrorOverride On|Off Off svdE
    Override error pages for proxied content
    ProxyExpressDBMFile pathnamesvE
    Pathname to DBM file.
    ProxyExpressDBMType type default svE
    DBM type of file.
    ProxyExpressEnable on|off off svE
    Enable the module functionality.
    ProxyFCGIBackendType FPM|GENERIC FPM svdhE
    Specify the type of backend FastCGI application
    ProxyFCGISetEnvIf conditional-expression [!]environment-variable-name [value-expression]svdhE
    Allow variables sent to FastCGI servers to be fixed up
    ProxyFtpDirCharset character_set ISO-8859-1 svdE
    Define the character set for proxied FTP listings
    ProxyFtpEscapeWildcards on|off on svdE
    Whether wildcards in requested filenames are escaped when sent to the FTP server
    ProxyFtpListOnWildcard on|off on svdE
    Whether wildcards in requested filenames trigger a file listing
    ProxyHCExpr name {ap_expr expression}svE
    Creates a named condition expression to use to determine health of the backend based on its response
    ProxyHCTemplate name parameter=setting [...]svE
    Creates a named template for setting various health check parameters
    ProxyHCTPsize size 16 sE
    Sets the total server-wide size of the threadpool used for the health check workers
    ProxyHTMLBufSize bytes 8192 svdB
    Sets the buffer size increment for buffering inline scripts and stylesheets.
    ProxyHTMLCharsetOut Charset | *svdB
    Specify a charset for mod_proxy_html output.
    ProxyHTMLDocType HTML|XHTML [Legacy]
    OR
    ProxyHTMLDocType fpi [SGML|XML]
    svdB
    Sets an HTML or XHTML document type declaration.
    ProxyHTMLEnable On|Off Off svdB
    Turns the proxy_html filter on or off.
    ProxyHTMLEvents attribute [attribute ...]svdB
    Specify attributes to treat as scripting events.
    ProxyHTMLExtended On|Off Off svdB
    Determines whether to fix links in inline scripts, stylesheets, and scripting events.
    ProxyHTMLFixups [lowercase] [dospath] [reset]svdB
    Fixes for simple HTML errors.
    ProxyHTMLInterp On|Off Off svdB
    Enables per-request interpolation of ProxyHTMLURLMap rules.
    ProxyHTMLLinks element attribute [attribute2 ...]svdB
    Specify HTML elements that have URL attributes to be rewritten.
    ProxyHTMLMeta On|Off Off svdB
    Turns on or off extra pre-parsing of metadata in HTML <head> sections.
    ProxyHTMLStripComments On|Off Off svdB
    Determines whether to strip HTML comments.
    ProxyHTMLURLMap from-pattern to-pattern [flags] [cond]svdB
    Defines a rule to rewrite HTML links
    ProxyIOBufferSize bytes 8192 svE
    Determine size of internal data throughput buffer
    <ProxyMatch regex> ...</ProxyMatch>svE
    Container for directives applied to regular-expression-matched proxied resources
    ProxyMaxForwards number -1 svE
    Maximium number of proxies that a request can be forwarded through
    ProxyPass [path] !|url [key=value [key=value ...]] [nocanon] [interpolate] [noquery]svdE
    Maps remote servers into the local server URL-space
    ProxyPassInherit On|Off On svE
    Inherit ProxyPass directives defined from the main server
    ProxyPassInterpolateEnv On|Off Off svdE
    Enable Environment Variable interpolation in Reverse Proxy configurations
    ProxyPassMatch [regex] !|url [key=value [key=value ...]]svdE
    Maps remote servers into the local server URL-space using regular expressions
    ProxyPassReverse [path] url [interpolate]svdE
    Adjusts the URL in HTTP response headers sent from a reverse proxied server
    ProxyPassReverseCookieDomain internal-domain public-domain [interpolate]svdE
    Adjusts the Domain string in Set-Cookie headers from a reverse- proxied server
    ProxyPassReverseCookiePath internal-path public-path [interpolate]svdE
    Adjusts the Path string in Set-Cookie headers from a reverse- proxied server
    ProxyPreserveHost On|Off Off svdE
    Use incoming Host HTTP request header for proxy request
    ProxyReceiveBufferSize bytes 0 svE
    Network buffer size for proxied HTTP and FTP connections
    ProxyRemote match remote-serversvE
    Remote proxy used to handle certain requests
    ProxyRemoteMatch regex remote-serversvE
    Remote proxy used to handle requests matched by regular expressions
    ProxyRequests On|Off Off svE
    Enables forward (standard) proxy requests
    ProxySCGIInternalRedirect On|Off|Headername On svdE
    Enable or disable internal redirect responses from the backend
    ProxySCGISendfile On|Off|Headername Off svdE
    Enable evaluation of X-Sendfile pseudo response header
    ProxySet url key=value [key=value ...]svdE
    Set various Proxy balancer or member parameters
    ProxySourceAddress addresssvE
    Set local IP address for outgoing proxy connections
    ProxyStatus Off|On|Full Off svE
    Show Proxy LoadBalancer status in mod_status
    ProxyTimeout secondssvE
    Network timeout for proxied requests
    ProxyVia On|Off|Full|Block Off svE
    Information provided in the Via HTTP response header for proxied requests
    QualifyRedirectURL ON|OFF OFF svdC
    Controls whether the REDIRECT_URL environment variable is fully qualified
    ReadmeName filenamesvdhB
    Name of the file that will be inserted at the end of the index listing
    ReceiveBufferSize bytes 0 sM
    TCP receive buffer size
    Redirect [status] [URL-path] URLsvdhB
    Sends an external redirect asking the client to fetch a different URL
    RedirectMatch [status] regex URLsvdhB
    Sends an external redirect based on a regular expression match of the current URL
    RedirectPermanent URL-path URLsvdhB
    Sends an external permanent redirect asking the client to fetch a different URL
    RedirectTemp URL-path URLsvdhB
    Sends an external temporary redirect asking the client to fetch a different URL
    RedisConnPoolTTL num[units] 15s svE
    TTL used for the connection pool with the Redis server(s)
    RedisTimeout num[units] 5s svE
    R/W timeout used for the connection with the Redis server(s)
    ReflectorHeader inputheader [outputheader]svdhB
    Reflect an input header to the output headers
    RegexDefaultOptions [none] [+|-]option [[+|-]option] ... DOTALL DOLLAR_ENDON +sC
    Allow to configure global/default options for regexes
    RegisterHttpMethod method [method [...]]sC
    Register non-standard HTTP methods
    RemoteIPHeader header-fieldsvB
    Declare the header field which should be parsed for useragent IP addresses
    RemoteIPInternalProxy proxy-ip|proxy-ip/subnet|hostname ...svB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPInternalProxyList filenamesvB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPProxiesHeader HeaderFieldNamesvB
    Declare the header field which will record all intermediate IP addresses
    RemoteIPProxyProtocol On|OffsvB
    Enable or disable PROXY protocol handling
    RemoteIPProxyProtocolExceptions host|range [host|range] [host|range]svB
    Disable processing of PROXY header for certain hosts or networks
    RemoteIPTrustedProxy proxy-ip|proxy-ip/subnet|hostname ...svB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPTrustedProxyList filenamesvB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoveCharset extension [extension] ...vdhB
    Removes any character set associations for a set of file extensions
    RemoveEncoding extension [extension] ...vdhB
    Removes any content encoding associations for a set of file extensions
    RemoveHandler extension [extension] ...vdhB
    Removes any handler associations for a set of file extensions
    RemoveInputFilter extension [extension] ...vdhB
    Removes any input filter associations for a set of file extensions
    RemoveLanguage extension [extension] ...vdhB
    Removes any language associations for a set of file extensions
    RemoveOutputFilter extension [extension] ...vdhB
    Removes any output filter associations for a set of file extensions
    RemoveType extension [extension] ...vdhB
    Removes any content type associations for a set of file extensions
    RequestHeader add|append|edit|edit*|merge|set|setifempty|unset header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] svdhE
    Configure HTTP request headers
    RequestReadTimeout [handshake=timeout[-maxtimeout][,MinRate=rate] [header=timeout[-maxtimeout][,MinRate=rate] [body=timeout[-maxtimeout][,MinRate=rate] handshake=0 header= +svE
    Set timeout values for completing the TLS handshake, receiving the request headers and/or body from client.
    Require [not] entity-name [entity-name] ...dhB
    Tests whether an authenticated user is authorized by an authorization provider.
    <RequireAll> ... </RequireAll>dhB
    Enclose a group of authorization directives of which none must fail and at least one must succeed for the enclosing directive to succeed.
    <RequireAny> ... </RequireAny>dhB
    Enclose a group of authorization directives of which one must succeed for the enclosing directive to succeed.
    <RequireNone> ... </RequireNone>dhB
    Enclose a group of authorization directives of which none must succeed for the enclosing directive to not fail.
    RewriteBase URL-pathdhE
    Sets the base URL for per-directory rewrites
    RewriteCond TestString CondPattern [flags]svdhE
    Defines a condition under which rewriting will take place
    RewriteEngine on|off off svdhE
    Enables or disables runtime rewriting engine
    RewriteMap MapName MapType:MapSource [MapTypeOptions] svE
    Defines a mapping function for key-lookup
    RewriteOptions OptionssvdhE
    Sets some special options for the rewrite engine
    RewriteRule Pattern Substitution [flags]svdhE
    Defines rules for the rewriting engine
    RLimitCPU seconds|max [seconds|max]svdhC
    Limits the CPU consumption of processes launched by Apache httpd children
    RLimitMEM bytes|max [bytes|max]svdhC
    Limits the memory consumption of processes launched by Apache httpd children
    RLimitNPROC number|max [number|max]svdhC
    Limits the number of processes that can be launched by processes launched by Apache httpd children
    Satisfy Any|All All dhE
    Interaction between host-level access control and user authentication
    ScoreBoardFile file-path logs/apache_runtime +sM
    Location of the file used to store coordination data for the child processes
    Script method cgi-scriptsvdB
    Activates a CGI script for a particular request method.
    ScriptAlias [URL-path] file-path|directory-pathsvdB
    Maps a URL to a filesystem location and designates the target as a CGI script
    ScriptAliasMatch regex file-path|directory-pathsvB
    Maps a URL to a filesystem location using a regular expression and designates the target as a CGI script
    ScriptInterpreterSource Registry|Registry-Strict|Script Script svdhC
    Technique for locating the interpreter for CGI scripts
    ScriptLog file-pathsvB
    Location of the CGI script error logfile
    ScriptLogBuffer bytes 1024 svB
    Maximum amount of PUT or POST requests that will be recorded in the scriptlog
    ScriptLogLength bytes 10385760 svB
    Size limit of the CGI script logfile
    ScriptSock file-path cgisock sB
    The filename prefix of the socket to use for communication with the cgi daemon
    SecureListen [IP-address:]portnumber Certificate-Name [MUTUAL]sB
    Enables SSL encryption for the specified port
    SeeRequestTail On|Off Off sC
    Determine if mod_status displays the first 63 characters of a request or the last 63, assuming the request itself is greater than 63 chars.
    SendBufferSize bytes 0 sM
    TCP buffer size
    ServerAdmin email-address|URLsvC
    Email address that the server includes in error messages sent to the client
    ServerAlias hostname [hostname] ...vC
    Alternate names for a host used when matching requests to name-virtual hosts
    ServerLimit numbersM
    Upper limit on configurable number of processes
    ServerName [scheme://]domain-name|ip-address[:port]svC
    Hostname and port that the server uses to identify itself
    ServerPath URL-pathvC
    Legacy URL pathname for a name-based virtual host that is accessed by an incompatible browser
    ServerRoot directory-path /usr/local/apache sC
    Base directory for the server installation
    ServerSignature On|Off|EMail Off svdhC
    Configures the footer on server-generated documents
    ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full Full sC
    Configures the Server HTTP response header
    Session On|Off Off svdhE
    Enables a session for the current directory or location
    SessionCookieName name attributessvdhE
    Name and attributes for the RFC2109 cookie storing the session
    SessionCookieName2 name attributessvdhE
    Name and attributes for the RFC2965 cookie storing the session
    SessionCookieRemove On|Off Off svdhE
    Control for whether session cookies should be removed from incoming HTTP headers
    SessionCryptoCipher name aes256 svdhX
    The crypto cipher to be used to encrypt the session
    SessionCryptoDriver name [param[=value]]sX
    The crypto driver to be used to encrypt the session
    SessionCryptoPassphrase secret [ secret ... ] svdhX
    The key used to encrypt the session
    SessionCryptoPassphraseFile filenamesvdX
    File containing keys used to encrypt the session
    SessionDBDCookieName name attributessvdhE
    Name and attributes for the RFC2109 cookie storing the session ID
    SessionDBDCookieName2 name attributessvdhE
    Name and attributes for the RFC2965 cookie storing the session ID
    SessionDBDCookieRemove On|Off On svdhE
    Control for whether session ID cookies should be removed from incoming HTTP headers
    SessionDBDDeleteLabel label deletesession svdhE
    The SQL query to use to remove sessions from the database
    SessionDBDInsertLabel label insertsession svdhE
    The SQL query to use to insert sessions into the database
    SessionDBDPerUser On|Off Off svdhE
    Enable a per user session
    SessionDBDSelectLabel label selectsession svdhE
    The SQL query to use to select sessions from the database
    SessionDBDUpdateLabel label updatesession svdhE
    The SQL query to use to update existing sessions in the database
    SessionEnv On|Off Off svdhE
    Control whether the contents of the session are written to the HTTP_SESSION environment variable
    SessionExclude pathsvdhE
    Define URL prefixes for which a session is ignored
    SessionExpiryUpdateInterval interval 0 (always update) svdhE
    Define the number of seconds a session's expiry may change without the session being updated
    SessionHeader headersvdhE
    Import session updates from a given HTTP response header
    SessionInclude pathsvdhE
    Define URL prefixes for which a session is valid
    SessionMaxAge maxage 0 svdhE
    Define a maximum age in seconds for a session
    SetEnv env-variable [value]svdhB
    Sets environment variables
    SetEnvIf attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables based on attributes of the request
    SetEnvIfExpr expr [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables based on an ap_expr expression
    SetEnvIfNoCase attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables based on attributes of the request without respect to case
    SetHandler handler-name|none|expressionsvdhC
    Forces all matching files to be processed by a handler
    SetInputFilter filter[;filter...]svdhC
    Sets the filters that will process client requests and POST input
    SetOutputFilter filter[;filter...]svdhC
    Sets the filters that will process responses from the server
    SSIEndTag tag "-->" svB
    String that ends an include element
    SSIErrorMsg message "[an error occurred +svdhB
    Error message displayed when there is an SSI error
    SSIETag on|off off dhB
    Controls whether ETags are generated by the server.
    SSILastModified on|off off dhB
    Controls whether Last-Modified headers are generated by the server.
    SSILegacyExprParser on|off off dhB
    Enable compatibility mode for conditional expressions.
    SSIStartTag tag "<!--#" svB
    String that starts an include element
    SSITimeFormat formatstring "%A, %d-%b-%Y %H:%M +svdhB
    Configures the format in which date strings are displayed
    SSIUndefinedEcho string "(none)" svdhB
    String displayed when an unset variable is echoed
    SSLCACertificateFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for Client Auth
    SSLCACertificatePath directory-pathsvE
    Directory of PEM-encoded CA Certificates for Client Auth
    SSLCADNRequestFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for defining acceptable CA names
    SSLCADNRequestPath directory-pathsvE
    Directory of PEM-encoded CA Certificates for defining acceptable CA names
    SSLCARevocationCheck chain|leaf|none [flags ...] none svE
    Enable CRL-based revocation checking
    SSLCARevocationFile file-pathsvE
    File of concatenated PEM-encoded CA CRLs for Client Auth
    SSLCARevocationPath directory-pathsvE
    Directory of PEM-encoded CA CRLs for Client Auth
    SSLCertificateChainFile file-pathsvE
    File of PEM-encoded Server CA Certificates
    SSLCertificateFile file-pathsvE
    Server PEM-encoded X.509 certificate data file
    SSLCertificateKeyFile file-pathsvE
    Server PEM-encoded private key file
    SSLCipherSuite [protocol] cipher-spec DEFAULT (depends on +svdhE
    Cipher Suite available for negotiation in SSL handshake
    SSLCompression on|off off svE
    Enable compression on the SSL level
    SSLCryptoDevice engine builtin sE
    Enable use of a cryptographic hardware accelerator
    SSLEngine on|off|optional off svE
    SSL Engine Operation Switch
    SSLFIPS on|off off sE
    SSL FIPS mode Switch
    SSLHonorCipherOrder on|off off svE
    Option to prefer the server's cipher preference order
    SSLInsecureRenegotiation on|off off svE
    Option to enable support for insecure renegotiation
    SSLOCSPDefaultResponder urisvE
    Set the default responder URI for OCSP validation
    SSLOCSPEnable on|leaf|off off svE
    Enable OCSP validation of the client certificate chain
    SSLOCSPNoverify On/Off Off svE
    skip the OCSP responder certificates verification
    SSLOCSPOverrideResponder on|off off svE
    Force use of the default responder URI for OCSP validation
    SSLOCSPProxyURL urlsvE
    Proxy URL to use for OCSP requests
    SSLOCSPResponderCertificateFile filesvE
    Set of trusted PEM encoded OCSP responder certificates
    SSLOCSPResponderTimeout seconds 10 svE
    Timeout for OCSP queries
    SSLOCSPResponseMaxAge seconds -1 svE
    Maximum allowable age for OCSP responses
    SSLOCSPResponseTimeSkew seconds 300 svE
    Maximum allowable time skew for OCSP response validation
    SSLOCSPUseRequestNonce on|off on svE
    Use a nonce within OCSP queries
    SSLOpenSSLConfCmd command-name command-valuesvE
    Configure OpenSSL parameters through its SSL_CONF API
    SSLOptions [+|-]option ...svdhE
    Configure various SSL engine run-time options
    SSLPassPhraseDialog type builtin sE
    Type of pass phrase dialog for encrypted private keys
    SSLProtocol [+|-]protocol ... all -SSLv3 (up to 2 +svE
    Configure usable SSL/TLS protocol versions
    SSLProxyCACertificateFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for Remote Server Auth
    SSLProxyCACertificatePath directory-pathsvE
    Directory of PEM-encoded CA Certificates for Remote Server Auth
    SSLProxyCARevocationCheck chain|leaf|none none svE
    Enable CRL-based revocation checking for Remote Server Auth
    SSLProxyCARevocationFile file-pathsvE
    File of concatenated PEM-encoded CA CRLs for Remote Server Auth
    SSLProxyCARevocationPath directory-pathsvE
    Directory of PEM-encoded CA CRLs for Remote Server Auth
    SSLProxyCheckPeerCN on|off on svE
    Whether to check the remote server certificate's CN field
    SSLProxyCheckPeerExpire on|off on svE
    Whether to check if remote server certificate is expired
    SSLProxyCheckPeerName on|off on svE
    Configure host name checking for remote server certificates
    SSLProxyCipherSuite [protocol] cipher-spec ALL:!ADH:RC4+RSA:+H +svE
    Cipher Suite available for negotiation in SSL proxy handshake
    SSLProxyEngine on|off off svE
    SSL Proxy Engine Operation Switch
    SSLProxyMachineCertificateChainFile filenamesvE
    File of concatenated PEM-encoded CA certificates to be used by the proxy for choosing a certificate
    SSLProxyMachineCertificateFile filenamesvE
    File of concatenated PEM-encoded client certificates and keys to be used by the proxy
    SSLProxyMachineCertificatePath directorysvE
    Directory of PEM-encoded client certificates and keys to be used by the proxy
    SSLProxyProtocol [+|-]protocol ... all -SSLv3 (up to 2 +svE
    Configure usable SSL protocol flavors for proxy usage
    SSLProxyVerify level none svE
    Type of remote server Certificate verification
    SSLProxyVerifyDepth number 1 svE
    Maximum depth of CA Certificates in Remote Server Certificate verification
    SSLRandomSeed context source [bytes]sE
    Pseudo Random Number Generator (PRNG) seeding source
    SSLRenegBufferSize bytes 131072 dhE
    Set the size for the SSL renegotiation buffer
    SSLRequire expressiondhE
    Allow access only when an arbitrarily complex boolean expression is true
    SSLRequireSSLdhE
    Deny access when SSL is not used for the HTTP request
    SSLSessionCache type none sE
    Type of the global/inter-process SSL Session Cache
    SSLSessionCacheTimeout seconds 300 svE
    Number of seconds before an SSL session expires in the Session Cache
    SSLSessionTicketKeyFile file-pathsvE
    Persistent encryption/decryption key for TLS session tickets
    SSLSessionTickets on|off on svE
    Enable or disable use of TLS session tickets
    SSLSRPUnknownUserSeed secret-stringsvE
    SRP unknown user seed
    SSLSRPVerifierFile file-pathsvE
    Path to SRP verifier file
    SSLStaplingCache typesE
    Configures the OCSP stapling cache
    SSLStaplingErrorCacheTimeout seconds 600 svE
    Number of seconds before expiring invalid responses in the OCSP stapling cache
    SSLStaplingFakeTryLater on|off on svE
    Synthesize "tryLater" responses for failed OCSP stapling queries
    SSLStaplingForceURL urisvE
    Override the OCSP responder URI specified in the certificate's AIA extension
    SSLStaplingResponderTimeout seconds 10 svE
    Timeout for OCSP stapling queries
    SSLStaplingResponseMaxAge seconds -1 svE
    Maximum allowable age for OCSP stapling responses
    SSLStaplingResponseTimeSkew seconds 300 svE
    Maximum allowable time skew for OCSP stapling response validation
    SSLStaplingReturnResponderErrors on|off on svE
    Pass stapling related OCSP errors on to client
    SSLStaplingStandardCacheTimeout seconds 3600 svE
    Number of seconds before expiring responses in the OCSP stapling cache
    SSLStrictSNIVHostCheck on|off off svE
    Whether to allow non-SNI clients to access a name-based virtual host.
    SSLUserName varnamesdhE
    Variable name to determine user name
    SSLUseStapling on|off off svE
    Enable stapling of OCSP responses in the TLS handshake
    SSLVerifyClient level none svdhE
    Type of Client Certificate verification
    SSLVerifyDepth number 1 svdhE
    Maximum depth of CA Certificates in Client Certificate verification
    StartServers numbersM
    Number of child server processes created at startup
    StartThreads numbersM
    Number of threads created on startup
    Substitute s/pattern/substitution/[infq]dhE
    Pattern to filter the response content
    SubstituteInheritBefore on|off off dhE
    Change the merge order of inherited patterns
    SubstituteMaxLineLength bytes(b|B|k|K|m|M|g|G) 1m dhE
    Set the maximum line size
    Suexec On|OffsB
    Enable or disable the suEXEC feature
    SuexecUserGroup User GroupsvE
    User and group for CGI programs to run as
    ThreadLimit numbersM
    Sets the upper limit on the configurable number of threads per child process
    ThreadsPerChild numbersM
    Number of threads created by each child process
    ThreadStackSize sizesM
    The size in bytes of the stack used by threads handling client connections
    TimeOut seconds 60 svC
    Amount of time the server will wait for certain events before failing a request
    TraceEnable [on|off|extended] on svC
    Determines the behavior on TRACE requests
    TransferLog file|pipesvB
    Specify location of a log file
    TypesConfig file-path conf/mime.types sB
    The location of the mime.types file
    UnDefine parameter-namesC
    Undefine the existence of a variable
    UndefMacro namesvdB
    Undefine a macro
    UnsetEnv env-variable [env-variable] ...svdhB
    Removes variables from the environment
    Use name [value1 ... valueN] svdB
    Use a macro
    UseCanonicalName On|Off|DNS Off svdC
    Configures how the server determines its own name and port
    UseCanonicalPhysicalPort On|Off Off svdC
    Configures how the server determines its own port
    User unix-userid #-1 sB
    The userid under which the server will answer requests
    UserDir directory-filename [directory-filename] ... svB
    Location of the user-specific directories
    VHostCGIMode On|Off|Secure On vX
    Determines whether the virtualhost can run subprocesses, and the privileges available to subprocesses.
    VHostCGIPrivs [+-]?privilege-name [[+-]?privilege-name] ...vX
    Assign arbitrary privileges to subprocesses created by a virtual host.
    VHostGroup unix-groupidvX
    Sets the Group ID under which a virtual host runs.
    VHostPrivs [+-]?privilege-name [[+-]?privilege-name] ...vX
    Assign arbitrary privileges to a virtual host.
    VHostSecure On|Off On vX
    Determines whether the server runs with enhanced security for the virtualhost.
    VHostUser unix-useridvX
    Sets the User ID under which a virtual host runs.
    VirtualDocumentRoot interpolated-directory|none none svE
    Dynamically configure the location of the document root for a given virtual host
    VirtualDocumentRootIP interpolated-directory|none none svE
    Dynamically configure the location of the document root for a given virtual host
    <VirtualHost addr[:port] [addr[:port]] ...> ... </VirtualHost>sC
    Contains directives that apply only to a specific hostname or IP address
    VirtualScriptAlias interpolated-directory|none none svE
    Dynamically configure the location of the CGI directory for a given virtual host
    VirtualScriptAliasIP interpolated-directory|none none svE
    Dynamically configure the location of the CGI directory for a given virtual host
    WatchdogInterval time-interval[s] 1 sB
    Watchdog interval in seconds
    XBitHack on|off|full off svdhB
    Parse SSI directives in files with the execute bit set
    xml2EncAlias charset alias [alias ...]sB
    Recognise Aliases for encoding values
    xml2EncDefault namesvdhB
    Sets a default encoding to assume when absolutely no information can be automatically detected
    xml2StartParse element [element ...]svdhB
    Advise the parser to skip leading junk.

    å¯ç”¨è¯­è¨€:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    评论

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_fcgi.html.en0000644000000000000500000005450013412755316020532 0ustar rootsrc mod_proxy_fcgi - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy_fcgi

    Available Languages:  en  |  fr 

    Description:FastCGI support module for mod_proxy
    Status:Extension
    Module Identifier:proxy_fcgi_module
    Source File:mod_proxy_fcgi.c
    Compatibility:Available in version 2.3 and later

    Summary

    This module requires the service of mod_proxy. It provides support for the FastCGI protocol.

    Thus, in order to get the ability of handling the FastCGI protocol, mod_proxy and mod_proxy_fcgi have to be present in the server.

    Unlike mod_fcgid and mod_fastcgi, mod_proxy_fcgi has no provision for starting the application process; fcgistarter is provided (on some platforms) for that purpose. Alternatively, external launching or process management may be available in the FastCGI application framework in use.

    Warning

    Do not enable proxying until you have secured your server. Open proxy servers are dangerous both to your network and to the Internet at large.

    top

    Examples

    Remember, in order to make the following examples work, you have to enable mod_proxy and mod_proxy_fcgi.

    Single application instance

    ProxyPass "/myapp/" "fcgi://localhost:4000/"

    mod_proxy_fcgi disables connection reuse by default, so after a request has been completed the connection will NOT be held open by that httpd child process and won't be reused. If the FastCGI application is able to handle concurrent connections from httpd, you can opt-in to connection reuse as shown in the following example:

    Single application instance, connection reuse (2.4.11 and later)

    ProxyPass "/myapp/" "fcgi://localhost:4000/" enablereuse=on

    Enable connection reuse to a FCGI backend like PHP-FPM

    Please keep in mind that PHP-FPM (at the time of writing, February 2018) uses a prefork model, namely each of its worker processes can handle one connection at the time.
    By default mod_proxy (configured with enablereuse=on) allows a connection pool of ThreadsPerChild connections to the backend for each httpd process when using a threaded mpm (like worker or event), so the following use cases should be taken into account:

    • Under HTTP/1.1 load it will likely cause the creation of up to MaxRequestWorkers connections to the FCGI backend.
    • Under HTTP/2 load, due to how mod_http2 is implemented, there are additional h2 worker threads that may force the creation of other backend connections. The overall count of connections in the pools may raise to more than MaxRequestWorkers.

    The maximum number of PHP-FPM worker processes needs to be configured wisely, since there is the chance that they will all end up "busy" handling idle persistent connections, without any room for new ones to be established, and the end user experience will be a pile of HTTP request timeouts.

    The following example passes the request URI as a filesystem path for the PHP-FPM daemon to run. The request URL is implicitly added to the 2nd parameter. The hostname and port following fcgi:// are where PHP-FPM is listening. Connection pooling/reuse is enabled.

    PHP-FPM

    ProxyPassMatch "^/myapp/.*\.php(/.*)?$" "fcgi://localhost:9000/var/www/" enablereuse=on

    The following example passes the request URI as a filesystem path for the PHP-FPM daemon to run. In this case, PHP-FPM is listening on a unix domain socket (UDS). Requires 2.4.9 or later. With this syntax, the hostname and optional port following fcgi:// are ignored.

    PHP-FPM with UDS

    ProxyPassMatch "^/(.*\.php(/.*)?)$" "unix:/var/run/php5-fpm.sock|fcgi://localhost/var/www/"

    The balanced gateway needs mod_proxy_balancer and at least one load balancer algorithm module, such as mod_lbmethod_byrequests, in addition to the proxy modules listed above. mod_lbmethod_byrequests is the default, and will be used for this example configuration.

    Balanced gateway to multiple application instances

    ProxyPass "/myapp/" "balancer://myappcluster/"
    <Proxy "balancer://myappcluster/">
        BalancerMember "fcgi://localhost:4000"
        BalancerMember "fcgi://localhost:4001"
    </Proxy>

    You can also force a request to be handled as a reverse-proxy request, by creating a suitable Handler pass-through. The example configuration below will pass all requests for PHP scripts to the specified FastCGI server using reverse proxy. This feature is available in Apache HTTP Server 2.4.10 and later. For performance reasons, you will want to define a worker representing the same fcgi:// backend. The benefit of this form is that it allows the normal mapping of URI to filename to occur in the server, and the local filesystem result is passed to the backend. When FastCGI is configured this way, the server can calculate the most accurate PATH_INFO.

    Proxy via Handler

    <FilesMatch "\.php$">
        # Note: The only part that varies is /path/to/app.sock
        SetHandler  "proxy:unix:/path/to/app.sock|fcgi://localhost/"
    </FilesMatch>
    
    # Define a matching worker.
    # The part that is matched to the SetHandler is the part that
    # follows the pipe. If you need to distinguish, "localhost; can
    # be anything unique.
    <Proxy "fcgi://localhost/" enablereuse=on max=10>
    </Proxy>
    
    <FilesMatch ...>
        SetHandler  "proxy:fcgi://localhost:9000"
    </FilesMatch>
    
    <FilesMatch ...>
        SetHandler  "proxy:balancer://myappcluster/"
    </FilesMatch>
    top

    Environment Variables

    In addition to the configuration directives that control the behaviour of mod_proxy, there are a number of environment variables that control the FCGI protocol provider:

    proxy-fcgi-pathinfo
    When configured via ProxyPass or ProxyPassMatch, mod_proxy_fcgi will not set the PATH_INFO environment variable. This allows the backend FCGI server to correctly determine SCRIPT_NAME and Script-URI and be compliant with RFC 3875 section 3.3. If instead you need mod_proxy_fcgi to generate a "best guess" for PATH_INFO, set this env-var. This is a workaround for a bug in some FCGI implementations. This variable can be set to multiple values to tweak at how the best guess is chosen (In 2.4.11 and later only):
    first-dot
    PATH_INFO is split from the slash following the first "." in the URL.
    last-dot
    PATH_INFO is split from the slash following the last "." in the URL.
    full
    PATH_INFO is calculated by an attempt to map the URL to the local filesystem.
    unescape
    PATH_INFO is the path component of the URL, unescaped / decoded.
    any other value
    PATH_INFO is the same as the path component of the URL. Originally, this was the only proxy-fcgi-pathinfo option.
    top

    ProxyFCGIBackendType Directive

    Description:Specify the type of backend FastCGI application
    Syntax:ProxyFCGIBackendType FPM|GENERIC
    Default:ProxyFCGIBackendType FPM
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_proxy_fcgi
    Compatibility:Available in version 2.4.26 and later

    This directive allows the type of backend FastCGI application to be specified. Some FastCGI servers, such as PHP-FPM, use historical quirks of environment variables to identify the type of proxy server being used. Set this directive to "GENERIC" if your non PHP-FPM application has trouble interpreting environment variables such as SCRIPT_FILENAME or PATH_TRANSLATED as set by the server.

    One example of values that change based on the setting of this directive is SCRIPT_FILENAME. When using mod_proxy_fcgi historically, SCRIPT_FILENAME was prefixed with the string "proxy:fcgi://". This variable is what some generic FastCGI applications would read as their script input, but PHP-FPM would strip the prefix then remember it was talking to Apache. In 2.4.21 through 2.4.25, this prefix was automatically stripped by the server, breaking the ability of PHP-FPM to detect and interoperate with Apache in some scenarios.

    top

    ProxyFCGISetEnvIf Directive

    Description:Allow variables sent to FastCGI servers to be fixed up
    Syntax:ProxyFCGISetEnvIf conditional-expression [!]environment-variable-name [value-expression]
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_proxy_fcgi
    Compatibility:Available in version 2.4.26 and later

    Just before passing a request to the configured FastCGI server, the core of the web server sets a number of environment variables based on details of the current request. FastCGI programs often uses these environment variables as inputs that determine what underlying scripts they will process, or what output they directly produce.

    Examples of noteworthy environment variables are:

    • SCRIPT_NAME
    • SCRIPT_FILENAME
    • REQUEST_URI
    • PATH_INFO
    • PATH_TRANSLATED

    This directive allows the environment variables above, or any others of interest, to be overridden. This directive is evaluated after the initial values for these variables are set, so they can be used as input into both the condition expressions and value expressions.

    Parameter syntax:

    conditional-expression
    Specifies an expression that controls whether the environment variable that follows will be modified. For information on the expression syntax, see the examples that follow or the full specification at the ap_expr documentation.
    environment-variable-name
    Specifies the CGI environment variable to change, such as PATH_INFO. If preceded by an exclamation point, the variable will be unset.
    value-expression
    Specifies the replacement value for the preceding environment variable. Backreferences, such as "$1", can be included from regular expression captures in conditional-expression. If omitted, the variable is set (or overridden) to an empty string — but see the Note below.
    # A basic, unconditional override
    ProxyFCGISetEnvIf "true" PATH_INFO "/example"
    
    # Use an environment variable in the value
    ProxyFCGISetEnvIf "true" PATH_INFO "%{reqenv:SCRIPT_NAME}"
    
    # Use captures in the conditions and backreferences in the replacement
    ProxyFCGISetEnvIf "reqenv('PATH_TRANSLATED') =~ m|(/.*prefix)(\d+)(.*)|" PATH_TRANSLATED "$1$3"

    Note: Unset vs. Empty

    The following will unset VARIABLE, preventing it from being sent to the FastCGI server:
    ProxyFCGISetEnvIf true !VARIABLE
    Whereas the following will erase any existing value of VARIABLE (by setting it to the empty string), but the empty VARIABLE will still be sent to the server:
    ProxyFCGISetEnvIf true VARIABLE
    The CGI/1.1 specification does not distinguish between a variable with an empty value and a variable that does not exist. However, many CGI and FastCGI implementations distinguish (or allow scripts to distinguish) between the two. The choice of which to use is dependent upon your implementation and your reason for modifying the variable.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_heartmonitor.html.fr.utf80000644000000000000500000002774613412755316022002 0ustar rootsrc mod_heartmonitor - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_heartmonitor

    Langues Disponibles:  en  |  fr 

    Description:Moniteur centralisé pour les serveurs d'origine mod_heartbeat
    Statut:Expérimental
    Identificateur de Module:heartmonitor_module
    Fichier Source:mod_heartmonitor.c
    Compatibilité:Disponible depuis la version 2.3 d'Apache

    Sommaire

    mod_heartmonitor interprète les messages d'état générés par les serveurs d'origine pour lesquels mod_heartbeat est activé et fournit ces informations à mod_lbmethod_heartbeat, ce qui permet d'utiliser la lbmethod "heartbeat" au sein des directives ProxyPass.

    Ce module utilise les services de mod_slotmem_shm, lorsqu'il est disponible, au lieu d'un simple fichier texte. Aucune configuration supplémentaire n'est requise pour utiliser mod_slotmem_shm.

    Pour utiliser mod_heartmonitor, mod_status et mod_watchdog doivent être soit des modules statiques, soit des modules dynamiques, et dans ce dernier cas, ils doivent être chargés avant mod_heartmonitor.
    top

    Directive HeartbeatListen

    Description:Adresse multicast d'écoute des requêtes entrantes heartbeat
    Syntaxe:HeartbeatListen addr:port
    Défaut:disabled
    Contexte:configuration globale
    Statut:Expérimental
    Module:mod_heartmonitor

    La directive HeartbeatListen permet de spécifier l'adresse multicast sur laquelle le serveur va surveiller les informations d'état en provenance de serveurs où mod_heartbeat est activé. Cette adresse correspond en général à la valeur de la directive HeartbeatAddress sur le serveur d'origine.

    HeartbeatListen 239.0.0.1:27999

    Tant que cette directive n'est pas utilisée, le module est désactivé.

    top

    Directive HeartbeatMaxServers

    Description:Spécifie le nombre maximal de serveurs qui pourront envoyer des requêtes heartbeat à ce serveur.
    Syntaxe:HeartbeatMaxServers nombre-de-serveurs
    Défaut:HeartbeatMaxServers 10
    Contexte:configuration globale
    Statut:Expérimental
    Module:mod_heartmonitor

    La directive HeartbeatMaxServers spécifie le nombre maximal de serveurs qui pourront envoyer des requêtes heartbeat à ce serveur de monitoring. Elle permet ainsi de contrôler la quantité de mémoire partagée allouée pour le stockage des données heartbeat lorsqu'on utilise mod_slotmem_shm.

    top

    Directive HeartbeatStorage

    Description:Chemin vers le stockage des données heartbeat
    Syntaxe:HeartbeatStorage chemin fichier
    Défaut:HeartbeatStorage logs/hb.dat
    Contexte:configuration globale
    Statut:Expérimental
    Module:mod_heartmonitor

    La directive HeartbeatStorage permet de spécifier le chemin de stockage des données heartbeat. Ce fichier texte n'est utilisé que si mod_slotmem_shm n'est pas chargé.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_reqtimeout.html.fr.utf80000644000000000000500000003322313443210630021435 0ustar rootsrc mod_reqtimeout - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_reqtimeout

    Langues Disponibles:  en  |  fr 

    Description:Définit le délai maximum et le taux minimum de transfert des données pour la réception des requêtes
    Statut:Extension
    Identificateur de Module:reqtimeout_module
    Fichier Source:mod_reqtimeout.c
    Compatibilité:Disponible depuis la version 2.2.15 du serveur HTTP Apache

    Sommaire

    Ce module permet de définir aisément le délai maximum et le taux de transfert des données minimum pour la réception des requêtes. Si ce délai est dépassé ou ce taux trop faible, la connexion concernée sera fermée par le serveur.

    Cet évènement sera alors enregistré dans le journal au niveau de LogLevel info.

    Au besoin, la directive LogLevel peut être modifiée pour un enregistrement dans le journal plus explicite :

    LogLevel reqtimeout:info
    top

    Exemples

    1. Accorde 5 secondes pour terminer la négociation TLS, 10 secondes pour la réception des en-têtes de la requête et 30 secondes pour la réception du corps :
      RequestReadTimeout handshake=5 header=10 body=30
    2. Accorde au moins 10 secondes pour la réception du corps de la requête. Si le client envoie des données, augmente ce délai d'une seconde pour chaque paquet de 1000 octets reçus, sans limite supérieure (sauf si une limite a été spécifiée via la directive LimitRequestBody) :
      RequestReadTimeout body=10,MinRate=1000
    3. Accorde au moins 10 secondes pour la réception des en-têtes de la requête. Si le client envoie des données, augmente ce délai d'une seconde pour chaque paquet de 500 octets reçus, mais n'alloue que 30 secondes pour les en-têtes de la requête :
      RequestReadTimeout header=10-30,MinRate=500
    4. En général, un serveur doit avoir ses délais d'en-tête et de corps configurés. Si les serveurs virtuels http et https utilisent une configuration commune, les délais ne doivent pas être définis trop bas :
      RequestReadTimeout header=20-40,MinRate=500 body=20,MinRate=500
    top

    Directive RequestReadTimeout

    Description:Définit des délais maximums pour la négociation TLS, la réception des en-têtes et/ou corps des requêtes en provenance du client.
    Syntaxe:RequestReadTimeout [handshake=timeout[-maxtimeout][,MinRate=rate] [header=timeout[-maxtimeout][,MinRate=MinRate] [body=timeout[-maxtimeout][,MinRate=MinRate]
    Défaut:RequestReadTimeout handshake=0 header=20-40,MinRate=500 body=20,MinRate=500
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_reqtimeout
    Compatibilité:Disponible depuis la version 2.2.15 du serveur HTTP Apache ; désactivée par défaut depuis la version 2.3.14. La phase de négociation est prise en compte à partir de la version 2.4.39.

    Cette directive permet de définir différents timeouts pour la négociation TLS, la réception des en-têtes et/ou corps des requêtes en provenance du client. Si le client ne parvient pas à respecter ces timeouts, un code d'erreur 408 REQUEST TIME OUT est envoyé.

    Pour les serveurs virtuels SSL, la valeur de timeout pour la négociation correspond au temps nécessaire pour la négociation SSL initiale. Si le navigateur du client est configuré pour demander des listes de révocations de certificats, et si le serveur correspondant n'est pas disponible, le timeout avant lequel le navigateur va abandonner son attente de CRL au cours de la négociation SSL initiale peut être assez important. Par conséquent, les valeurs de timeouts pour la négociation doivent prendre en compte un temps supplémentaire pour les serveurs virtuels SSL (si nécessaire). Le timeout concernant le corps inclut le temps nécessaire à la renégociation SSL (si elle est nécessaire).

    Lorsqu'une directive AcceptFilter est active (ce qui est en général le cas sous Linux et FreeBSD), la socket n'est envoyée au processus du serveur qu'après la réception du premier octet (ou de l'ensemble de la requête si httpready est défini). Les timeouts configurés pour la négociation et les en-têtes via la directive RequestReadTimeout n'entrent en ligne de compte qu'une fois le socket reçu par le processus du serveur.

    Il existe trois méthodes pour spécifier le timeout pour chacune des trois phases (négociation, en-tête ou corps) :

    • Valeur de timeout fixe:

      phase=timeout

      Le temps en secondes alloué pour terminer l'ensemble de la phase (négociation, lecture de tous les en-têtes de la requête ou du corps de cette dernière). La valeur 0 signifie aucune limite.

    • Désactivation du module pour un serveur virtuel:

      handshake=0 header=0 body=0

      Avec cet exemple, le module mod_reqtimeout est complètement désactivé (notez que handshake=0 correspond à la valeur par défaut et peut donc être omis).

    • La valeur du timeout qui est augmentée lorsque des données sont reçues :

      phase=timeout,MinRate=débit

      Identique à ce qui précède, mais chaque fois que des données sont reçues, la valeur du timeout est augmentée en fonction du MinRate spécifié (en octets par seconde).

    • La valeur du timeout augmente lorsque des données sont reçues, jusqu'à une limite supérieure:

      phase=timeout-maxtimeout,MinRate=débit

      Identique à ce qui précède, mais le timeout n'augmentera pas au delà de la borne supérieure du timeout spécifiée.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_deflate.html.en0000644000000000000500000007045213435243454017771 0ustar rootsrc mod_deflate - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_deflate

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Compress content before it is delivered to the client
    Status:Extension
    Module Identifier:deflate_module
    Source File:mod_deflate.c

    Summary

    The mod_deflate module provides the DEFLATE output filter that allows output from your server to be compressed before being sent to the client over the network.

    top

    Supported Encodings

    The gzip encoding is the only one supported to ensure complete compatibility with old browser implementations. The deflate encoding is not supported, please check the zlib's documentation for a complete explanation.

    top

    Sample Configurations

    Compression and TLS

    Some web applications are vulnerable to an information disclosure attack when a TLS connection carries deflate compressed data. For more information, review the details of the "BREACH" family of attacks.

    This is a simple configuration that compresses common text-based content types.

    Compress only a few types

    AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript
    top

    Enabling Compression

    Compression and TLS

    Some web applications are vulnerable to an information disclosure attack when a TLS connection carries deflate compressed data. For more information, review the details of the "BREACH" family of attacks.

    Output Compression

    Compression is implemented by the DEFLATE filter. The following directive will enable compression for documents in the container where it is placed:

    SetOutputFilter DEFLATE
    SetEnvIfNoCase Request_URI "\.(?:gif|jpe?g|png)$" no-gzip

    If you want to restrict the compression to particular MIME types in general, you may use the AddOutputFilterByType directive. Here is an example of enabling compression only for the html files of the Apache documentation:

    <Directory "/your-server-root/manual">
        AddOutputFilterByType DEFLATE text/html
    </Directory>

    Note

    The DEFLATE filter is always inserted after RESOURCE filters like PHP or SSI. It never touches internal subrequests.

    Note

    There is an environment variable force-gzip, set via SetEnv, which will ignore the accept-encoding setting of your browser and will send compressed output.

    Output Decompression

    The mod_deflate module also provides a filter for inflating/uncompressing a gzip compressed response body. In order to activate this feature you have to insert the INFLATE filter into the output filter chain using SetOutputFilter or AddOutputFilter, for example:

    <Location "/dav-area">
        ProxyPass "http://example.com/"
        SetOutputFilter INFLATE
    </Location>

    This Example will uncompress gzip'ed output from example.com, so other filters can do further processing with it.

    Input Decompression

    The mod_deflate module also provides a filter for decompressing a gzip compressed request body . In order to activate this feature you have to insert the DEFLATE filter into the input filter chain using SetInputFilter or AddInputFilter, for example:

    <Location "/dav-area">
        SetInputFilter DEFLATE
    </Location>

    Now if a request contains a Content-Encoding: gzip header, the body will be automatically decompressed. Few browsers have the ability to gzip request bodies. However, some special applications actually do support request compression, for instance some WebDAV clients.

    Note on Content-Length

    If you evaluate the request body yourself, don't trust the Content-Length header! The Content-Length header reflects the length of the incoming data from the client and not the byte count of the decompressed data stream.

    top

    Dealing with proxy servers

    The mod_deflate module sends a Vary: Accept-Encoding HTTP response header to alert proxies that a cached response should be sent only to clients that send the appropriate Accept-Encoding request header. This prevents compressed content from being sent to a client that will not understand it.

    If you use some special exclusions dependent on, for example, the User-Agent header, you must manually configure an addition to the Vary header to alert proxies of the additional restrictions. For example, in a typical configuration where the addition of the DEFLATE filter depends on the User-Agent, you should add:

    Header append Vary User-Agent

    If your decision about compression depends on other information than request headers (e.g. HTTP version), you have to set the Vary header to the value *. This prevents compliant proxies from caching entirely.

    Example

    Header set Vary *
    top

    Serving pre-compressed content

    Since mod_deflate re-compresses content each time a request is made, some performance benefit can be derived by pre-compressing the content and telling mod_deflate to serve them without re-compressing them. This may be accomplished using a configuration like the following:

    <IfModule mod_headers.c>
        # Serve gzip compressed CSS and JS files if they exist
        # and the client accepts gzip.
        RewriteCond "%{HTTP:Accept-encoding}" "gzip"
        RewriteCond "%{REQUEST_FILENAME}\.gz" -s
        RewriteRule "^(.*)\.(css|js)" "$1\.$2\.gz" [QSA]
    
    
        # Serve correct content types, and prevent mod_deflate double gzip.
        RewriteRule "\.css\.gz$" "-" [T=text/css,E=no-gzip:1]
        RewriteRule "\.js\.gz$"  "-" [T=text/javascript,E=no-gzip:1]
    
    
        <FilesMatch "(\.js\.gz|\.css\.gz)$">
          # Serve correct encoding type.
          Header append Content-Encoding gzip
    
          # Force proxies to cache gzipped &
          # non-gzipped css/js files separately.
          Header append Vary Accept-Encoding
        </FilesMatch>
    </IfModule>
    top

    DeflateBufferSize Directive

    Description:Fragment size to be compressed at one time by zlib
    Syntax:DeflateBufferSize value
    Default:DeflateBufferSize 8096
    Context:server config, virtual host
    Status:Extension
    Module:mod_deflate

    The DeflateBufferSize directive specifies the size in bytes of the fragments that zlib should compress at one time. If the compressed response size is bigger than the one specified by this directive then httpd will switch to chunked encoding (HTTP header Transfer-Encoding set to Chunked), with the side effect of not setting any Content-Length HTTP header. This is particularly important when httpd works behind reverse caching proxies or when httpd is configured with mod_cache and mod_cache_disk because HTTP responses without any Content-Length header might not be cached.

    top

    DeflateCompressionLevel Directive

    Description:How much compression do we apply to the output
    Syntax:DeflateCompressionLevel value
    Default:Zlib's default
    Context:server config, virtual host
    Status:Extension
    Module:mod_deflate

    The DeflateCompressionLevel directive specifies what level of compression should be used, the higher the value, the better the compression, but the more CPU time is required to achieve this.

    The value must between 1 (less compression) and 9 (more compression).

    top

    DeflateFilterNote Directive

    Description:Places the compression ratio in a note for logging
    Syntax:DeflateFilterNote [type] notename
    Context:server config, virtual host
    Status:Extension
    Module:mod_deflate

    The DeflateFilterNote directive specifies that a note about compression ratios should be attached to the request. The name of the note is the value specified for the directive. You can use that note for statistical purposes by adding the value to your access log.

    Example

    DeflateFilterNote ratio
    
    LogFormat '"%r" %b (%{ratio}n) "%{User-agent}i"' deflate
    CustomLog "logs/deflate_log" deflate

    If you want to extract more accurate values from your logs, you can use the type argument to specify the type of data left as a note for logging. type can be one of:

    Input
    Store the byte count of the filter's input stream in the note.
    Output
    Store the byte count of the filter's output stream in the note.
    Ratio
    Store the compression ratio (output/input * 100) in the note. This is the default, if the type argument is omitted.

    Thus you may log it this way:

    Accurate Logging

    DeflateFilterNote Input instream
    DeflateFilterNote Output outstream
    DeflateFilterNote Ratio ratio
    
    LogFormat '"%r" %{outstream}n/%{instream}n (%{ratio}n%%)' deflate
    CustomLog "logs/deflate_log" deflate

    See also

    top

    DeflateInflateLimitRequestBody Directive

    Description:Maximum size of inflated request bodies
    Syntax:DeflateInflateLimitRequestBody value
    Default:None, but LimitRequestBody applies after deflation
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_deflate
    Compatibility:2.4.10 and later

    The DeflateInflateLimitRequestBody directive specifies the maximum size of an inflated request body. If it is unset, LimitRequestBody is applied to the inflated body.

    top

    DeflateInflateRatioBurst Directive

    Description:Maximum number of times the inflation ratio for request bodies can be crossed
    Syntax:DeflateInflateRatioBurst value
    Default:DeflateInflateRatioBurst 3
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_deflate
    Compatibility:2.4.10 and later

    The DeflateInflateRatioBurst directive specifies the maximum number of times the DeflateInflateRatioLimit can be crossed before terminating the request.

    top

    DeflateInflateRatioLimit Directive

    Description:Maximum inflation ratio for request bodies
    Syntax:DeflateInflateRatioLimit value
    Default:DeflateInflateRatioLimit 200
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_deflate
    Compatibility:2.4.10 and later

    The DeflateInflateRatioLimit directive specifies the maximum ratio of deflated to inflated size of an inflated request body. This ratio is checked as the body is streamed in, and if crossed more than DeflateInflateRatioBurst times, the request will be terminated.

    top

    DeflateMemLevel Directive

    Description:How much memory should be used by zlib for compression
    Syntax:DeflateMemLevel value
    Default:DeflateMemLevel 9
    Context:server config, virtual host
    Status:Extension
    Module:mod_deflate

    The DeflateMemLevel directive specifies how much memory should be used by zlib for compression (a value between 1 and 9).

    top

    DeflateWindowSize Directive

    Description:Zlib compression window size
    Syntax:DeflateWindowSize value
    Default:DeflateWindowSize 15
    Context:server config, virtual host
    Status:Extension
    Module:mod_deflate

    The DeflateWindowSize directive specifies the zlib compression window size (a value between 1 and 15). Generally, the higher the window size, the higher can the compression ratio be expected.

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_groupfile.html.fr.utf80000644000000000000500000002567013412755316022470 0ustar rootsrc mod_authz_groupfile - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authz_groupfile

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Autorisation basée sur les groupes à l'aide de fichiers textes
    Statut:Base
    Identificateur de Module:authz_groupfile_module
    Fichier Source:mod_authz_groupfile.c
    Compatibilité:Disponible depuis les versions 2.1 et supérieures d'Apache

    Sommaire

    Ce module permet d'autoriser ou d'interdire l'accès à certaines zones du site web aux utilisateurs authentifiés en fonction de leur appartenance à un groupe spécifié. Le module mod_authz_dbm fournit une fonctionnalité similaire.

    top

    Les directives Require

    Les directives Require d'Apache permettent, au cours de la phase d'autorisation, de s'assurer qu'un utilisateur est bien autorisé à accéder à une ressource. mod_authz_groupfile ajoute les types d'autorisation group et file-group.

    A partir de la version 2.4.8, les directives require groupfile supportent les expressions.

    Require group

    Cette directive permet de spécifier à quel groupe un utilisateur doit appartenir pour obtenir l'autorisation d'accès.

    Require group admin

    Require file-group

    Lorsque cette directive est définie, Les permissions système du fichier auquel on veut accéder sont vérifiées. L'utilisateur doit être un membre d'un groupe de même nom que le groupe qui possède le fichier. Voir mod_authz_owner pour plus de détails.

    Require file-group
    top

    Directive AuthGroupFile

    Description:Définit le nom d'un fichier texte contenant la liste des groupes d'utilisateurs permettant de définir les autorisations des utilisateurs
    Syntaxe:AuthGroupFile chemin-fichier
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_authz_groupfile

    La directive AuthGroupFile permet de définir le nom d'un fichier texte contenant la liste des groupes d'utilisateurs. L'appartenance d'un utilisateur à tel ou tel groupe pourra dès lors être utilisée pour définir les permissions d'accès de l'utilisateur. chemin-fichier est le chemin du fichier de groupes. S'il n'est pas absolu, ce chemin est considéré comme relatif au répertoire défini par la directive ServerRoot.

    Chaque ligne du fichier de groupes contient un nom de groupe suivi du caractère ':' et des noms des utilisateurs membres du groupe séparés par des espaces.

    Exemple :

    mon-groupe : bob joe anne

    Notez que la recherche dans de grands fichiers textes est très inefficace ; la directive AuthDBMGroupFile fournit de bien meilleures performances.

    Sécurité

    Le fichier AuthGroupFile ne doit pas être stocké dans l'arborescence des documents du site web ; ne le placez surtout pas dans le répertoire qu'il protège, faute de quoi les clients pourraient le télécharger.

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/worker.html.tr.utf80000644000000000000500000004020613447004010017723 0ustar rootsrc worker - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache MPM worker

    Mevcut Diller:  de  |  en  |  fr  |  ja  |  tr 

    Açıklama:Çok evreli ve çok süreçli melez bir HTTP sunucusu oluşturan çok süreçlilik modülü.
    Durum:MPM
    Modül Betimleyici:mpm_worker_module
    Kaynak Dosyası:worker.c

    Özet

    Bu çok süreçlilik modülü (MPM) hem çok süreçli hem de çok evreli olabilen melez bir sunucu oluşturur. İstekleri sunmak için evreleri kullanması sebebiyle çok süreçli bir sunucudan daha az sistem kaynağı harcayarak daha çok isteğe hizmet sunabilir. Bununla birlikte, herbiri çok sayıda evreye sahip çok sayıda süreci canlı tutarak bir çok süreçli sunucu kadar kararlı olur.

    Bu MPM’i denetim altında tutmakta kullanılan en önemli yönergeler, her çocuk süreç için konuşlandırılacak evre sayısını belirleyen ThreadsPerChild yönergesi ile devreye sokulacak toplam evre sayısının azamisini belirleyen MaxRequestWorkers yönergesidir.

    top

    Nasıl çalışır?

    Çocuk süreçleri devreye almaktan tek bir süreç (ana süreç) sorumludur. Her çocuk süreç ThreadsPerChild yönergesinde belirtilen sayıda evre konuşlandırır. Bunlardan ayrı olarak, bir dinleyici evre bağlantıları dinleyip gelenleri işlenmek üzere bu sunucu evrelerinden birine aktarır.

    Apache HTTP Sunucusu daima, gelen isteklere hizmet sunmaya hazır yedek veya boştaki sunucu evrelerinden oluşan bir havuzu canlı tutmaya çalışır. Bu suretle, istemcilere isteklerinin sunulması için yeni çocuk süreçlerin çatallanmasını, dolayısıyla yeni evrelerin konuşlandırılmasını beklemek gerekmez. Başlangıçta çalıştırılacak çocuk süreçlerin sayısı StartServers yönergesinde belirtilir. Apache httpd, çalışma süresi boyunca MinSpareThreads ve MaxSpareThreads yönergeleri ile belirtilen sınırlar dahilinde kalmak üzere gerektiğinde süreçleri öldürerek gerektiğinde yenilerini devreye alarak tüm süreçlerdeki toplam evre sayısını sabit tutmaya çalışır. Bu işlem kendiliğinden çok iyi yürüdüğünden bu yönergelere öntanımlı değerlerinden farklı değerlerin atanması nadiren gerekli olur. Aynı anda hizmet sunulabilecek istemcilerin sayısı (yani, tüm süreçlerin toplam evre sayısı) MaxRequestWorkers yönergesi ile belirlenir. Etkin çocuk süreçlerin sayısı ise MaxRequestWorkers yönergesindeki değerin ThreadsPerChild yönergesindeki değere bölünmesi ile elde edilir.

    Bu iki yönerge aynı anda etkin olabilecek çocuk süreçlerin ve her çocuk süreçteki sunucu evreleri sayısının üst sınırını belirler ve bu sınır sadece ana sunucu tamamen durdurulup yeniden başlatılarak değiştirilebilir. ServerLimit yönergesinin değeri etkin çocuk süreç sayısının üst sınırı olup MaxRequestWorkers yönergesindeki değerin ThreadsPerChild yönergesindeki değere bölünmesi ile elde değere eşit veya bundan küçük olması gerekir. ThreadLimit yönergesinin değeri ise sunucu evreleri sayısının üst sınırını belirler ve ThreadsPerChild yönergesindeki değerden büyük veya ona eşit olması gerekir.

    Sonlandırma sırasında etkin çocuk süreçlere ek olarak mevcut istemci bağlantılarını işleme sokmaya çalışan tek bir sunucu evresinden başka fazladan bir çocuk süreç etkin kalabileceği gibi sonlandırılacak süreç sayısının en fazla MaxRequestWorkers olması gerekirse de gerçekte sayı bundan küçük olabilir. Şöyle bir işlemle tek bir çocuk sürecin sonlandırılması iptal edilerek bu gibi durumlara karşı önlem alınabilir:

    worker modülünün öntanımlı süreç-evre yapılandırması genelde şöyledir:

    ServerLimit         16
    StartServers         2
    MaxRequestWorkers  150
    MinSpareThreads     25
    MaxSpareThreads     75
    ThreadsPerChild     25

    Unix altında 80. portu dinleyebilmek için ana sürecin root tarafından çalıştırılmış olması gerekirse de çocuk süreçler ve evreler Apache httpd tarafından daha az yetkili bir kullanıcının aidiyetinde çalıştırılırlar. Apache httpd’nin çocuk süreçlerinin kullanıcı ve gruplarını ayarlamak için User ve Group yönergeleri kullanılır. Çocuk süreçlerin sunacakları içeriği okumaya yetkili olmaları gerekir, fakat bu yetkinin mümkün olduğunca kısıtlı tutulmasına çalışılmalıdır. Bundan başka, suexec kullanılmadığı takdirde, bu yönergeler CGI betikleri tarafından miras alınacak yetkili kullanıcı ve grubu da ayarlarlar.

    MaxConnectionsPerChild yönergesi ana sunucunun eski süreçleri öldürüp yenilerini oluşturmayı ne kadar sıklıkla yapacağını denetler.

    Bu MPM, gürleyen sürü sorunu ortaya çıktığında (genelde çok sayıda dinlenen soket varlığında) gelen bağlantılara erişimi dizgileştirmek için mpm-accept muteksini kullanır. Bu muteksin gerçeklenimle ilgili hususları Mutex yönergesi ile yapılandırılabilir. Bu muteks hakkında ek bilgi için başarımın arttırılması belgesine bakınız.

    Mevcut Diller:  de  |  en  |  fr  |  ja  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mpm_common.html.en0000644000000000000500000020236513455350677017677 0ustar rootsrc mpm_common - Apache HTTP Server Version 2.4
    <-

    Apache MPM Common Directives

    Available Languages:  de  |  en  |  fr  |  ja  |  tr 

    Description:A collection of directives that are implemented by more than one multi-processing module (MPM)
    Status:MPM
    top

    CoreDumpDirectory Directive

    Description:Directory where Apache HTTP Server attempts to switch before dumping core
    Syntax:CoreDumpDirectory directory
    Default:See usage for the default setting
    Context:server config
    Status:MPM
    Module:event, worker, prefork

    This controls the directory to which Apache httpd attempts to switch before dumping core. If your operating system is configured to create core files in the working directory of the crashing process, CoreDumpDirectory is necessary to change working directory from the default ServerRoot directory, which should not be writable by the user the server runs as.

    If you want a core dump for debugging, you can use this directive to place it in a different location. This directive has no effect if your operating system is not configured to write core files to the working directory of the crashing processes.

    Security note for Linux systems

    Using this directive on Linux may allow other processes on the system (if running with similar privileges, such as CGI scripts) to attach to httpd children via the ptrace system call. This may make weaken the protection from certain security attacks. It is not recommended to use this directive on production systems.

    Core Dumps on Linux

    If Apache httpd starts as root and switches to another user, the Linux kernel disables core dumps even if the directory is writable for the process. Apache httpd (2.0.46 and later) reenables core dumps on Linux 2.4 and beyond, but only if you explicitly configure a CoreDumpDirectory.

    Core Dumps on BSD

    To enable core-dumping of suid-executables on BSD-systems (such as FreeBSD), set kern.sugid_coredump to 1.

    Specific signals

    CoreDumpDirectory processing only occurs for a select set of fatal signals: SIGFPE, SIGILL, SIGABORT, SIGSEGV, and SIGBUS.

    On some operating systems, SIGQUIT also results in a core dump but does not go through CoreDumpDirectory or EnableExceptionHook processing, so the core location is dictated entirely by the operating system.

    top

    EnableExceptionHook Directive

    Description:Enables a hook that runs exception handlers after a crash
    Syntax:EnableExceptionHook On|Off
    Default:EnableExceptionHook Off
    Context:server config
    Status:MPM
    Module:event, worker, prefork

    For safety reasons this directive is only available if the server was configured with the --enable-exception-hook option. It enables a hook that allows external modules to plug in and do something after a child crashed.

    There are already two modules, mod_whatkilledus and mod_backtrace that make use of this hook. Please have a look at Jeff Trawick's EnableExceptionHook site for more information about these.

    top

    GracefulShutdownTimeout Directive

    Description:Specify a timeout after which a gracefully shutdown server will exit.
    Syntax:GracefulShutdownTimeout seconds
    Default:GracefulShutdownTimeout 0
    Context:server config
    Status:MPM
    Module:event, worker, prefork
    Compatibility:Available in version 2.2 and later

    The GracefulShutdownTimeout specifies how many seconds after receiving a "graceful-stop" signal, a server should continue to run, handling the existing connections.

    Setting this value to zero means that the server will wait indefinitely until all remaining requests have been fully served.

    top

    Listen Directive

    Description:IP addresses and ports that the server listens to
    Syntax:Listen [IP-address:]portnumber [protocol]
    Context:server config
    Status:MPM
    Module:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2
    Compatibility:The protocol argument was added in 2.1.5

    The Listen directive instructs Apache httpd to listen to only specific IP addresses or ports; by default it responds to requests on all IP interfaces. Listen is now a required directive. If it is not in the config file, the server will fail to start. This is a change from previous versions of Apache httpd.

    The Listen directive tells the server to accept incoming requests on the specified port or address-and-port combination. If only a port number is specified, the server listens to the given port on all interfaces. If an IP address is given as well as a port, the server will listen on the given port and interface.

    Multiple Listen directives may be used to specify a number of addresses and ports to listen to. The server will respond to requests from any of the listed addresses and ports.

    For example, to make the server accept connections on both port 80 and port 8000, use:

    Listen 80
    Listen 8000

    To make the server accept connections on two specified interfaces and port numbers, use

    Listen 192.170.2.1:80
    Listen 192.170.2.5:8000

    IPv6 addresses must be surrounded in square brackets, as in the following example:

    Listen [2001:db8::a00:20ff:fea7:ccea]:80

    The optional protocol argument is not required for most configurations. If not specified, https is the default for port 443 and http the default for all other ports. The protocol is used to determine which module should handle a request, and to apply protocol specific optimizations with the AcceptFilter directive.

    You only need to set the protocol if you are running on non-standard ports. For example, running an https site on port 8443:

    Listen 192.170.2.1:8443 https

    Error condition

    Multiple Listen directives for the same ip address and port will result in an Address already in use error message.

    See also

    top

    ListenBackLog Directive

    Description:Maximum length of the queue of pending connections
    Syntax:ListenBackLog backlog
    Default:ListenBackLog 511
    Context:server config
    Status:MPM
    Module:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2

    The maximum length of the queue of pending connections. Generally no tuning is needed or desired, however on some systems it is desirable to increase this when under a TCP SYN flood attack. See the backlog parameter to the listen(2) system call.

    This will often be limited to a smaller number by the operating system. This varies from OS to OS. Also note that many OSes do not use exactly what is specified as the backlog, but use a number based on (but normally larger than) what is set.

    top

    ListenCoresBucketsRatio Directive

    Description:Ratio between the number of CPU cores (online) and the number of listeners' buckets
    Syntax:ListenCoresBucketsRatio ratio
    Default:ListenCoresBucketsRatio 0 (disabled)
    Context:server config
    Status:MPM
    Module:event, worker, prefork
    Compatibility:Available in Apache HTTP Server 2.4.17, with a kernel supporting the socket option SO_REUSEPORT and distributing new connections evenly across listening processes' (or threads') sockets using it (eg. Linux 3.9 and later, but not the current implementations of SO_REUSEPORT in *BSDs.

    A ratio between the number of (online) CPU cores and the number of listeners' buckets can be used to make Apache HTTP Server create num_cpu_cores / ratio listening buckets, each containing its own Listen-ing socket(s) on the same port(s), and then make each child handle a single bucket (with round-robin distribution of the buckets at children creation time).

    Meaning of "online" CPU core

    On Linux (and also BSD) a CPU core can be turned on/off if Hotplug is configured, therefore ListenCoresBucketsRatio needs to take this parameter into account while calculating the number of buckets to create.

    ListenCoresBucketsRatio can improve the scalability when accepting new connections is/becomes the bottleneck. On systems with a large number of CPU cores, enabling this feature has been tested to show significant performances improvement and shorter responses time.

    There must be at least twice the number of CPU cores than the configured ratio for this to be active. The recommended ratio is 8, hence at least 16 cores should be available at runtime when this value is used. The right ratio to obtain maximum performance needs to be calculated for each target system, testing multiple values and observing the variations in your key performance metrics.

    This directive influences the calculation of the MinSpareThreads and MaxSpareThreads lower bound values. The number of children processes needs to be a multiple of the number of buckets to optimally accept connections.

    Multiple Listeners or Apache HTTP servers on the same IP address and port

    Setting the SO_REUSEPORT option on the listening socket(s) consequently allows multiple processes (sharing the same EUID, e.g. root) to bind to the the same IP address and port, without the binding error raised by the system in the usual case.

    This also means that multiple instances of Apache httpd configured on a same IP:port and with a positive ListenCoresBucketsRatio would start without an error too, and then run with incoming connections evenly distributed accross both instances (this is NOT a recommendation or a sensible usage in any case, but just a notice that it would prevent such possible issues to be detected).

    Within the same instance, Apache httpd will check and fail to start if multiple Listen directives on the exact same IP (or hostname) and port are configured, thus avoiding the creation of some duplicated buckets which would be useless and kill performances. However it can't (and won't try harder to) catch all the possible overlapping cases (like a hostname resolving to an IP used elsewhere).

    top

    MaxConnectionsPerChild Directive

    Description:Limit on the number of connections that an individual child server will handle during its life
    Syntax:MaxConnectionsPerChild number
    Default:MaxConnectionsPerChild 0
    Context:server config
    Status:MPM
    Module:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2
    Compatibility:Available Apache HTTP Server 2.3.9 and later. The old name MaxRequestsPerChild is still supported.

    The MaxConnectionsPerChild directive sets the limit on the number of connections that an individual child server process will handle. After MaxConnectionsPerChild connections, the child process will die. If MaxConnectionsPerChild is 0, then the process will never expire.

    Setting MaxConnectionsPerChild to a non-zero value limits the amount of memory that process can consume by (accidental) memory leakage.

    top

    MaxMemFree Directive

    Description:Maximum amount of memory that the main allocator is allowed to hold without calling free()
    Syntax:MaxMemFree KBytes
    Default:MaxMemFree 2048
    Context:server config
    Status:MPM
    Module:event, worker, prefork, mpm_winnt, mpm_netware

    The MaxMemFree directive sets the maximum number of free Kbytes that every allocator is allowed to hold without calling free(). In threaded MPMs, every thread has its own allocator. When set to zero, the threshold will be set to unlimited.

    top

    MaxRequestWorkers Directive

    Description:Maximum number of connections that will be processed simultaneously
    Syntax:MaxRequestWorkers number
    Default:See usage for details
    Context:server config
    Status:MPM
    Module:event, worker, prefork

    The MaxRequestWorkers directive sets the limit on the number of simultaneous requests that will be served. Any connection attempts over the MaxRequestWorkers limit will normally be queued, up to a number based on the ListenBacklog directive. Once a child process is freed at the end of a different request, the connection will then be serviced.

    For non-threaded servers (i.e., prefork), MaxRequestWorkers translates into the maximum number of child processes that will be launched to serve requests. The default value is 256; to increase it, you must also raise ServerLimit.

    For threaded and hybrid servers (e.g. event or worker) MaxRequestWorkers restricts the total number of threads that will be available to serve clients. For hybrid MPMs the default value is 16 (ServerLimit) multiplied by the value of 25 (ThreadsPerChild). Therefore, to increase MaxRequestWorkers to a value that requires more than 16 processes, you must also raise ServerLimit.

    MaxRequestWorkers was called MaxClients before version 2.3.13. The old name is still supported.

    top

    MaxSpareThreads Directive

    Description:Maximum number of idle threads
    Syntax:MaxSpareThreads number
    Default:See usage for details
    Context:server config
    Status:MPM
    Module:event, worker, mpm_netware, mpmt_os2

    Maximum number of idle threads. Different MPMs deal with this directive differently.

    For worker and event, the default is MaxSpareThreads 250. These MPMs deal with idle threads on a server-wide basis. If there are too many idle threads in the server then child processes are killed until the number of idle threads is less than this number. Additional processes/threads might be created if ListenCoresBucketsRatio is enabled.

    For mpm_netware the default is MaxSpareThreads 100. Since this MPM runs a single-process, the spare thread count is also server-wide.

    mpmt_os2 works similar to mpm_netware. For mpmt_os2 the default value is 10.

    Restrictions

    The range of the MaxSpareThreads value is restricted. Apache httpd will correct the given value automatically according to the following rules:

    See also

    top

    MinSpareThreads Directive

    Description:Minimum number of idle threads available to handle request spikes
    Syntax:MinSpareThreads number
    Default:See usage for details
    Context:server config
    Status:MPM
    Module:event, worker, mpm_netware, mpmt_os2

    Minimum number of idle threads to handle request spikes. Different MPMs deal with this directive differently.

    worker and event use a default of MinSpareThreads 75 and deal with idle threads on a server-wide basis. If there aren't enough idle threads in the server then child processes are created until the number of idle threads is greater than number. Additional processes/threads might be created if ListenCoresBucketsRatio is enabled.

    mpm_netware uses a default of MinSpareThreads 10 and, since it is a single-process MPM, tracks this on a server-wide bases.

    mpmt_os2 works similar to mpm_netware. For mpmt_os2 the default value is 5.

    See also

    top

    PidFile Directive

    Description:File where the server records the process ID of the daemon
    Syntax:PidFile filename
    Default:PidFile logs/httpd.pid
    Context:server config
    Status:MPM
    Module:event, worker, prefork, mpm_winnt, mpmt_os2

    The PidFile directive sets the file to which the server records the process id of the daemon. If the filename is not absolute then it is assumed to be relative to the ServerRoot.

    Example

    PidFile /var/run/apache.pid

    It is often useful to be able to send the server a signal, so that it closes and then re-opens its ErrorLog and TransferLog, and re-reads its configuration files. This is done by sending a SIGHUP (kill -1) signal to the process id listed in the PidFile.

    The PidFile is subject to the same warnings about log file placement and security.

    Note

    As of Apache HTTP Server 2, we recommended that you only use the apachectl script, or the init script that your OS provides, for (re-)starting or stopping the server.

    top

    ReceiveBufferSize Directive

    Description:TCP receive buffer size
    Syntax:ReceiveBufferSize bytes
    Default:ReceiveBufferSize 0
    Context:server config
    Status:MPM
    Module:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2

    The server will set the TCP receive buffer size to the number of bytes specified.

    If set to the value of 0, the server will use the OS default.

    top

    ScoreBoardFile Directive

    Description:Location of the file used to store coordination data for the child processes
    Syntax:ScoreBoardFile file-path
    Default:ScoreBoardFile logs/apache_runtime_status
    Context:server config
    Status:MPM
    Module:event, worker, prefork, mpm_winnt

    Apache HTTP Server uses a scoreboard to communicate between its parent and child processes. Some architectures require a file to facilitate this communication. If the file is left unspecified, Apache httpd first attempts to create the scoreboard entirely in memory (using anonymous shared memory) and, failing that, will attempt to create the file on disk (using file-based shared memory). Specifying this directive causes Apache httpd to always create the file on the disk.

    Example

    ScoreBoardFile /var/run/apache_runtime_status

    File-based shared memory is useful for third-party applications that require direct access to the scoreboard.

    If you use a ScoreBoardFile then you may see improved speed by placing it on a RAM disk. But be careful that you heed the same warnings about log file placement and security.

    See also

    top

    SendBufferSize Directive

    Description:TCP buffer size
    Syntax:SendBufferSize bytes
    Default:SendBufferSize 0
    Context:server config
    Status:MPM
    Module:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2

    Sets the server's TCP send buffer size to the number of bytes specified. It is often useful to set this past the OS's standard default value on high speed, high latency connections (i.e., 100ms or so, such as transcontinental fast pipes).

    If set to the value of 0, the server will use the default value provided by your OS.

    Further configuration of your operating system may be required to elicit better performance on high speed, high latency connections.

    On some operating systems, changes in TCP behavior resulting from a larger SendBufferSize may not be seen unless EnableSendfile is set to OFF. This interaction applies only to static files.

    top

    ServerLimit Directive

    Description:Upper limit on configurable number of processes
    Syntax:ServerLimit number
    Default:See usage for details
    Context:server config
    Status:MPM
    Module:event, worker, prefork

    For the prefork MPM, this directive sets the maximum configured value for MaxRequestWorkers for the lifetime of the Apache httpd process. For the worker and event MPMs, this directive in combination with ThreadLimit sets the maximum configured value for MaxRequestWorkers for the lifetime of the Apache httpd process. For the event MPM, this directive also defines how many old server processes may keep running and finish processing open connections. Any attempts to change this directive during a restart will be ignored, but MaxRequestWorkers can be modified during a restart.

    Special care must be taken when using this directive. If ServerLimit is set to a value much higher than necessary, extra, unused shared memory will be allocated. If both ServerLimit and MaxRequestWorkers are set to values higher than the system can handle, Apache httpd may not start or the system may become unstable.

    With the prefork MPM, use this directive only if you need to set MaxRequestWorkers higher than 256 (default). Do not set the value of this directive any higher than what you might want to set MaxRequestWorkers to.

    With worker, use this directive only if your MaxRequestWorkers and ThreadsPerChild settings require more than 16 server processes (default). Do not set the value of this directive any higher than the number of server processes required by what you may want for MaxRequestWorkers and ThreadsPerChild.

    With event, increase this directive if the process number defined by your MaxRequestWorkers and ThreadsPerChild settings, plus the number of gracefully shutting down processes, is more than 16 server processes (default).

    Note

    There is a hard limit of ServerLimit 20000 compiled into the server (for the prefork MPM 200000). This is intended to avoid nasty effects caused by typos. To increase it even further past this limit, you will need to modify the value of MAX_SERVER_LIMIT in the mpm source file and rebuild the server.

    See also

    top

    StartServers Directive

    Description:Number of child server processes created at startup
    Syntax:StartServers number
    Default:See usage for details
    Context:server config
    Status:MPM
    Module:event, worker, prefork, mpmt_os2

    The StartServers directive sets the number of child server processes created on startup. As the number of processes is dynamically controlled depending on the load, (see MinSpareThreads, MaxSpareThreads, MinSpareServers, MaxSpareServers) there is usually little reason to adjust this parameter.

    The default value differs from MPM to MPM. worker and event default to StartServers 3; prefork defaults to 5; mpmt_os2 defaults to 2.

    top

    StartThreads Directive

    Description:Number of threads created on startup
    Syntax:StartThreads number
    Default:See usage for details
    Context:server config
    Status:MPM
    Module:mpm_netware

    Number of threads created on startup. As the number of threads is dynamically controlled depending on the load, (see MinSpareThreads, MaxSpareThreads, MinSpareServers, MaxSpareServers) there is usually little reason to adjust this parameter.

    For mpm_netware the default is StartThreads 50 and, since there is only a single process, this is the total number of threads created at startup to serve requests.

    top

    ThreadLimit Directive

    Description:Sets the upper limit on the configurable number of threads per child process
    Syntax:ThreadLimit number
    Default:See usage for details
    Context:server config
    Status:MPM
    Module:event, worker, mpm_winnt

    This directive sets the maximum configured value for ThreadsPerChild for the lifetime of the Apache httpd process. Any attempts to change this directive during a restart will be ignored, but ThreadsPerChild can be modified during a restart up to the value of this directive.

    Special care must be taken when using this directive. If ThreadLimit is set to a value much higher than ThreadsPerChild, extra unused shared memory will be allocated. If both ThreadLimit and ThreadsPerChild are set to values higher than the system can handle, Apache httpd may not start or the system may become unstable. Do not set the value of this directive any higher than your greatest predicted setting of ThreadsPerChild for the current run of Apache httpd.

    The default value for ThreadLimit is 1920 when used with mpm_winnt and 64 when used with the others.

    Note

    There is a hard limit of ThreadLimit 20000 (or ThreadLimit 100000 with event, ThreadLimit 15000 with mpm_winnt) compiled into the server. This is intended to avoid nasty effects caused by typos. To increase it even further past this limit, you will need to modify the value of MAX_THREAD_LIMIT in the mpm source file and rebuild the server.

    top

    ThreadsPerChild Directive

    Description:Number of threads created by each child process
    Syntax:ThreadsPerChild number
    Default:See usage for details
    Context:server config
    Status:MPM
    Module:event, worker, mpm_winnt

    This directive sets the number of threads created by each child process. The child creates these threads at startup and never creates more. If using an MPM like mpm_winnt, where there is only one child process, this number should be high enough to handle the entire load of the server. If using an MPM like worker, where there are multiple child processes, the total number of threads should be high enough to handle the common load on the server.

    The default value for ThreadsPerChild is 64 when used with mpm_winnt and 25 when used with the others.

    The value of ThreadsPerChild can not exceed the value of ThreadLimit. If a higher value is configured, it will be automatically reduced at start-up and a warning will be logged. The relationship between these 2 directives is explained in ThreadLimit.

    top

    ThreadStackSize Directive

    Description:The size in bytes of the stack used by threads handling client connections
    Syntax:ThreadStackSize size
    Default:65536 on NetWare; varies on other operating systems
    Context:server config
    Status:MPM
    Module:event, worker, mpm_winnt, mpm_netware, mpmt_os2
    Compatibility:Available in Apache HTTP Server 2.1 and later

    The ThreadStackSize directive sets the size of the stack (for autodata) of threads which handle client connections and call modules to help process those connections. In most cases the operating system default for stack size is reasonable, but there are some conditions where it may need to be adjusted:

    • On platforms with a relatively small default thread stack size (e.g., HP-UX), Apache httpd may crash when using some third-party modules which use a relatively large amount of autodata storage. Those same modules may have worked fine on other platforms where the default thread stack size is larger. This type of crash is resolved by setting ThreadStackSize to a value higher than the operating system default. This type of adjustment is necessary only if the provider of the third-party module specifies that it is required, or if diagnosis of an Apache httpd crash indicates that the thread stack size was too small.
    • On platforms where the default thread stack size is significantly larger than necessary for the web server configuration, a higher number of threads per child process will be achievable if ThreadStackSize is set to a value lower than the operating system default. This type of adjustment should only be made in a test environment which allows the full set of web server processing can be exercised, as there may be infrequent requests which require more stack to process. The minimum required stack size strongly depends on the modules used, but any change in the web server configuration can invalidate the current ThreadStackSize setting.
    • On Linux, this directive can only be used to increase the default stack size, as the underlying system call uses the value as a minimum stack size. The (often large) soft limit for ulimit -s (8MB if unlimited) is used as the default stack size.
    It is recommended to not reduce ThreadStackSize unless a high number of threads per child process is needed. On some platforms (including Linux), a setting of 128000 is already too low and causes crashes with some common modules.

    Available Languages:  de  |  en  |  fr  |  ja  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/module-dict.html.tr.utf80000644000000000000500000002267013447004010020625 0ustar rootsrc Modülleri Tanımlamakta Kullanılan Terimler - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Modülleri Tanımlamakta Kullanılan Terimler

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    Bu belgede Apache modüllerini tanımlarken kullanılan terimler açıklanmıştır.

    top

    Açıklama

    Modülün kullanım amacının kısa bir açıklaması.

    top

    Durum

    Modülün Apache HTTP sunucusuna ne kadar sıkı bağlı olduğunu belirtir. Başka bir deyişle, modüle ve işlevselliğine erişim kazanmak için sunucuyu yeniden derlemek gerekip gerekmediği ile ilgili durumu belirtir. Bu özniteliğin olası değerleri şunlardır:

    MPM
    “MPM†durumlu bir modül bir Çok Süreçlilik Modülüdür. Diğer modül türlerinin aksine, sunucunun kullandığı MPM modülü sayısı birden fazla olamaz. Bu modül türü temelde sunucuya gelen isteklerin ele alınmasından ve öldürülmesinden sorumludur.
    Temel
    “Temel†durumuyla etiketlenmiş bir modül öntanımlı olarak olarak derlenir ve sunucuya öntanımlı olarak yüklenir. Bu bakımdan derleme öncesi paket yapılandırması sırasında modülün derlenmemesi özellikle istenmedikçe bu modül derlenecek ve sunucuya yüklenecektir.
    Eklenti
    “Eklenti†durumundaki bir modül normal olarak derlenmez ve sunucuya yüklenmez. Modülü ve işlevselliğini etkin kılmak için sunucunun derleme öncesi paket yapılandırması sırasında modülün derleneceğini açıkça belirttikten sonra gerekirse yeniden derlemeniz gerekir.
    Deneysel
    “Deneysel†durumu modülün Apache sunucusunun bir parçası olarak kabul edildiğini ancak modülü denemenin tamamen sizin insiyatifinize bırakıldığı anlamına gelir. Böyle bir modül her şeyiyle belgelenmiştir fakat gerektiği gibi desteklenmemiştir.
    Harici
    “Harici†durumu temel Apache dağıtımında bulunmayan (“üçüncü partiâ€) modüller için kullanılır. Böyle modüller için sorumluluk kabul etmediÄŸimiz gibi bunları desteklemiyoruz.
    top

    Kaynak Dosyası

    Karşısına modül kodunu içeren kaynak dosyasının ismi yazılır. Bu isim ayrıca <IfModule> yönergesi tarafından da kullanılır.

    top

    Modül Betimleyici

    Modüller devingen olarak yüklenirken LoadModule yönergesinde kullanmak için modülü betimleyen dizgedir. Aslında, kaynak dosyasında module türündeki harici değişkenin ismidir.

    top

    Uyumluluk

    Eğer modül Apache’nin 2. sürüm dağıtımının özgün parçası değilse söz konusu sürüm burada belirtilir. Ayrıca, modülün kullanımı belli platformlarla sınırlıysa bunun ayrıntıları da burada belirtilir.

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mpm_common.html.fr.utf80000644000000000000500000022035713461053047020556 0ustar rootsrc mpm_common - Serveur HTTP Apache Version 2.4
    <-

    Apache MPM : Directives Communes

    Langues Disponibles:  de  |  en  |  fr  |  ja  |  tr 

    Description:Une série de directives implémentées par plusieurs modules multi-processus (MPM)
    Statut:MPM
    top

    Directive CoreDumpDirectory

    Description:Le répertoire dans lequel le serveur HTTP Apache va tenter de se positionner avant d'effectuer un vidage mémoire
    Syntaxe:CoreDumpDirectory répertoire
    Défaut:Voir ci-dessous pour le répertoire par défaut
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork

    Cette directive permet de définir le répertoire dans lequel Apache httpd va tenter de se positionner avant d'effectuer un vidage mémoire sur disque. Si votre système d'exploitation est configuré pour créer des fichiers de vidage mémoire dans le répertoire de travail des processus qui se sont crashés, CoreDumpDirectory est nécessaire pour définir un répertoire de travail autre que le répertoire par défaut ServerRoot, ce répertoire de travail ne devant pas être accessible en écriture par l'utilisateur sous lequel le serveur s'exécute.

    Si vous avez besoin d'un vidage mémoire pour le débogage, vous pouvez utiliser cette directive pour le placer à un endroit différent. Cette directive n'a aucun effet si votre système d'exploitation n'est pas configuré pour créer des fichiers de vidage mémoire dans le répertoire de travail des processus qui se sont crashés.

    Note de sécurité pour les systèmes de type Linux

    Utiliser cette directive sous Linux peut permettre aux autres processus du système s'exécutant avec les même privilèges (comme les scripts CGI) de se rattacher aux processus httpd enfants via l'appel système ptrace. La protection contre certaines attaques engageant la sécurité peut s'en trouver affectée. Il est par conséquent déconseillé d'utiliser cette directive sur les systèmes en production.

    Vidages mémoire sous Linux

    Si Apache httpd est démarré sous l'utilisateur root puis bascule vers un autre utilisateur, le noyau Linux désactive les vidages mémoire, même si le répertoire est accessible en écriture au processus. Apache httpd (versions 2.0.46 et supérieures) réactive les vidages mémoire sous Linux 2.4 et au delà, mais seulement si vous définissez une directive CoreDumpDirectory.

    Vidages mémoire sous BSD

    Pour activer le vidage mémoire des exécutables suid sur les systèmes de style BSD (comme FreeBSD), définissez kern.sugid_coredump à 1.

    Signaux spécifiques

    CoreDumpDirectory n'est traité qu'à la reception d'un certain nombre de signaux , SIGFPE, SIGILL, SIGABORT, SIGSEGV, et SIGBUS.

    Sur certains systèmes d'exploitation, SIGQUIT provoque aussi un vidage mémoire, mais n'est pas traité par les directives CoreDumpDirectory ou EnableExceptionHook, si bien que la définition du répertoire d'enregistrement du vidage mémoire est entièrement dévolue au système d'exploitation.

    top

    Directive EnableExceptionHook

    Description:Active un hook ("point d'accrochage logiciel") qui exécute des gestionnaires d'exception après un crash
    Syntaxe:EnableExceptionHook On|Off
    Défaut:EnableExceptionHook Off
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork

    Pour des raisons de sécurité, cette directive n'est disponible que si la compilation du serveur a été configurée avec l'option --enable-exception-hook. Elle permet d'activer un hook ("point d'accrochage logiciel") qui autorise certains modules externes à effectuer un branchement et accomplir telle ou telle action après le crash d'un processus enfant.

    Deux modules, mod_whatkilledus et mod_backtrace utilisent ce hook. Veuillez vous référer à la page EnableExceptionHook de Jeff Trawick pour plus d'informations à leur sujet.

    top

    Directive GracefulShutdownTimeout

    Description:Spécifie le délai maximum après lequel le serveur va s'arrêter dans le cas d'un arrêt "en douceur"
    Syntaxe:GracefulShutdownTimeout seconds
    Défaut:GracefulShutdownTimeout 0
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork
    Compatibilité:Disponible dans les versions 2.2 et supérieures

    La directive GracefulShutdownTimeout permet de spécifier le temps, en secondes, pendant lequel le serveur va continuer à fonctionner après avoir reçu un signal "graceful-stop" ("Arrêt en douceur"), afin de terminer le traitement des connexions en cours.

    Définir cette valeur à zéro signifie au serveur d'attendre jusqu'à ce que toutes les requêtes en cours aient été traitées.

    top

    Directive Listen

    Description:Les adresses IP et ports sur lesquels le serveur écoute
    Syntaxe:Listen [adresse IP:]numéro port [protocole]
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2
    Compatibilité:L'argument protocole est supporté depuis la version 2.1.5

    La directive Listen permet de signifier à Apache httpd de ne se mettre à l'écoute que sur les adresses IP et ports spécifiés ; par défaut, le serveur répond aux requêtes en provenance de toutes les interfaces réseau. La directive Listen est dorénavant requise, et si elle est absente du fichier de configuration, le serveur refusera de démarrer. Ceci constitue un changement par rapport aux versions précédentes d'Apache httpd.

    La directive Listen signifie au serveur de n'accepter les requêtes entrantes que vers le port ou le couple adresse-port spécifié. Si seulement un port est spécifié, le serveur se met à l'écoute sur ce port sur toutes les interfaces réseau. Si une adresse IP et un port sont spécifiés, le serveur va se mettre à l'écoute sur ce port sur l'interface réseau correspondant à l'adresse IP.

    On peut utiliser autant de directives Listen que nécessaire pour spécifier plusieurs adresses et/ou ports à écouter. Le serveur répondra aux requêtes vers tous les adresses et ports spécifiés.

    Par exemple, pour que le serveur accepte les connexions sur les ports 80 et 8000, utilisez :

    Listen 80
    Listen 8000

    Pour que le serveur accepte les connexions sur deux interfaces et ports particuliers, spécifiez :

    Listen 192.170.2.1:80
    Listen 192.170.2.5:8000

    Les adressee IPv6 doivent être entourées de crochets, comme dans l'exemple suivant :

    Listen [2001:db8::a00:20ff:fea7:ccea]:80

    L'argument optionnel protocole n'est pas nécessaire dans la plupart des configurations. S'il est absent, https est la valeur par défaut pour le port 443 et http l'est pour tous les autres ports. L'argument protocole sert à déterminer quel module doit traiter une requête, et à appliquer des optimisations spécifiques à certains protocoles à l'aide de la directive AcceptFilter.

    La spécification d'un protocole n'est nécessaire que si vous utilisez des ports non standards. Par exemple, pour configurer un site en https sur le port 8443 :

    Listen 192.170.2.1:8443 https

    Condition d'erreur

    Plusieurs directives Listen pour les mêmes adresse IP/port vont provoquer l'envoi d'un message d'erreur Address already in use.

    Voir aussi

    top

    Directive ListenBackLog

    Description:Longueur maximale de la liste d'attente des connexions
    Syntaxe:ListenBackLog backlog
    Défaut:ListenBackLog 511
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2

    La longueur maximale de la liste d'attente des connexions. En général, aucune modification n'est nécessaire, ni même souhaitable ; cependant, sur certains systèmes, il peut être nécessaire d'en augmenter la valeur en cas d'attaque TCP SYN flood (envoi en masse de requêtes SYN pour saturer le serveur). Voir le paramètre backlog de l'appel système listen(2).

    En fait, l'argument backlog sera souvent limité à une valeur inférieure en fonction du système d'exploitation. Notez aussi que de nombreux systèmes d'exploitation ne tiennent pas vraiment compte de la valeur spécifiée pour l'argument backlog, mais s'en inspirent seulement (et choisissent en général une valeur supérieure).

    top

    Directive ListenCoresBucketsRatio

    Description:Rapport entre le nombre de coeurs de processeur activés et le nombre de segments d'écoute
    Syntaxe:ListenCoresBucketsRatio ratio
    Défaut:ListenCoresBucketsRatio 0 (disabled)
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork
    Compatibilité:Disponible à partir de la version 2.4.13 du serveur HTTP Apache, avec un noyau supportant l'option de socket SO_REUSEPORT, et distribuant uniformément les nouvelles connexions aux sockets d'écoute des processus (ou threads) qui l'utilisent (par exemple Linux versions 3.9 et ultérieures, mais pas l'implémentation courante de SO_REUSEPORT par les plateformes de type BSD.

    Vous pouvez utiliser la directive ListenCoresBucketsRatio pour spécifier un ratio entre le nombre de coeurs de CPU activés et le nombre de segments d'écoute (listeners' buckets) souhaités ; le serveur HTTP Apache va alors créernum_cpu_cores / ratio segments d'écoute, chacun contenant son propre socket d'écoute Listen sur le ou les mêmes ports ; chaque processus enfant sera associé à un seul segment d'écoute (avec une distribution de type round-robin des segments à la création des processus enfants).

    Définition du terme coeur de CPU activé ("online")

    Sous Linux et BSD, un coeur de CPU peut être activé ou désactivé si Hotplug a été configuré ; la directive ListenCoresBucketsRatio doit donc tenir compte de ce paramètre pour calculer le nombre de segments d'écoute à créer.

    La directive ListenCoresBucketsRatio peut améliorer le support de la montée en charge lorsque l'arrivée de nouvelles connexions est/devient un goulot d'étranglement. Le test de cette fonctionnalité avec des machines possédant un nombre de coeurs de CPU important a permit de constater une amélioration des performances significative et des temps de réponse plus courts.

    Pour que cette fonctionnalité soit activée, le nombre de coeurs de CPU doit être égal au moins au double du ratio spécifié. Si vous spécifiez la valeur recommandée pour ratio, à savoir 8, le nombre minimum de coeurs de processeurs disponibles sera alors de 16. La valeur optimale de ratio permettant d'obtenir des performances maximales doit être calculée pour chaque système cible, en testant plusieurs valeurs et en observant les résultats.

    Cette directive influence le calcul des valeurs limites inférieures de MinSpareThreads et MaxSpareThreads. En effet, pour accepter les connexions de manière optimale, le nombre de processus enfants doit être un multiple du nombre de segments d'écoute.

    Cas où plusieurs Listeners ou serveurs HTTP Apache partagent la même adresse IP et port

    La définition de l'option SO_REUSEPORT pour les sockets d'écoute permet à plusieurs processus (partageant le même EUID, par exemple root) de se rattacher à la même adresse IP et port, sans obtenir l'erreur de rattachement que le système génère habituellement lorsque ce cas se produit.

    Cela signifie aussi que plusieurs instances d'Apache httpd configurées avec le même IP:port et avec une valeur ListenCoresBucketsRatio positive pourraient démarrer sans erreur, et fonctionner ensuite avec une répartition uniforme des connexions entrantes sur ces différentes instances (ce n'est PAS une recommandation et ne constitue pas un usage approprié à tous les cas, mais juste un avertissement sur le fait qu'un véritable problème de rattachement multiple à un IP:port pourrait alors être occulté).

    Au sein d'une même instance, Apache httpd vérifie la présence de directives Listen multiples avec la même adresse IP (ou nom d'hôte) et le même port, et refuse de démarrer si c'est le cas, ce qui permet d'éviter la création de segments d'écoute dupliqués qui seraient du coup inutiles et affecteraient les performances. Cependant, il ne peut pas (et n'essaiera pas de le faire) intercepter tous les cas possibles de recouvrement (comme un nom d'hôte correspondant à une adresse IP utilisée quelque part ailleurs).

    top

    Directive MaxConnectionsPerChild

    Description:Limite le nombre de connexions qu'un processus enfant va traiter au cours de son fonctionnement
    Syntaxe:MaxConnectionsPerChild number
    Défaut:MaxConnectionsPerChild 0
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2
    Compatibilité:Disponible depuis la version 2.3.9 du serveur HTTP Apache. L'ancien nom MaxRequestsPerChild est encore supporté.

    La directive MaxConnectionsPerChild permet de définir le nombre maximum de connexions qu'un processus enfant va pouvoir traiter au cours de son fonctionnement. Lorsqu'il a traité MaxConnectionsPerChild connexions, le processus enfant est arrêté. Si MaxConnectionsPerChild est définie à 0, il n'y a plus aucune limite sur le nombre de connexions que le processus pourra traiter.

    Définir MaxConnectionsPerChild à une valeur non nulle limite la quantité de mémoire qu'un processus peut consommer à cause de fuites (accidentelles) de mémoire.

    top

    Directive MaxMemFree

    Description:Quantité maximale de mémoire que l'allocateur principal est autorisé à conserver sans appeler free()
    Syntaxe:MaxMemFree KOctets
    Défaut:MaxMemFree 2048
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork, mpm_winnt, mpm_netware

    La directive MaxMemFree permet de définir le nombre maximum de KOctets libres que tout allocateur est autorisé à conserver sans appeler free(). Dans les MPMs threadés, chaque thread possède son propre allocateur. Si elle est définie à 0, la quantité de mémoire libre que peut conserver un allocateur est illimitée.

    top

    Directive MaxRequestWorkers

    Description:Nombre maximum de connexions pouvant être traitées simultanément
    Syntaxe:MaxRequestWorkers nombre
    Défaut:Voir ci-dessous pour plus de détails
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork

    La directive MaxRequestWorkers permet de fixer le nombre maximum de requêtes pouvant être traitées simultanément. Si la limite MaxRequestWorkers est atteinte, toute tentative de connexion sera normalement mise dans une file d'attente, et ceci jusqu'à un certain nombre dépendant de la directive ListenBacklog. Lorsqu'un processus enfant se libèrera suite à la fin du traitement d'une requête, la connexion en attente pourra être traitée à son tour.

    Pour les serveurs non threadés (c'est à dire utilisant prefork), la directive MaxRequestWorkers définit alors le nombre maximum de processus enfants qui pourront être lancés simultanément pour traiter les requêtes. La valeur par défaut est 256 ; si vous l'augmentez, vous devez aussi augmenter la valeur de la directive ServerLimit.

    Pour les serveur threadés et hybrides (utilisant par exemple event ou worker), MaxRequestWorkers définit alors le nombre total de threads qui seront disponibles pour servir les clients. Dans le cas des MPMs hybrides, la valeur par défaut est 16 (directive ServerLimit) multiplié par la valeur 25 (directive ThreadsPerChild). Par conséquent, pour affecter à la directive MaxRequestWorkers une valeur qui requiert plus de 16 processus, vous devez aussi augmenter la valeur de la directive ServerLimit.

    Le nom de la directive MaxRequestWorkers était MaxClients avant la version 2.3.13. Cet ancien nom est encore supporté.

    top

    Directive MaxSpareThreads

    Description:Nombre maximum de threads inactifs
    Syntaxe:MaxSpareThreads nombre
    Défaut:Voir ci-dessous pour plus de détails
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, mpm_netware, mpmt_os2

    C'est le nombre maximum de threads inactifs. Les MPMs utilisent cette directive de différentes manières.

    Pour worker et event, la définition par défaut est MaxSpareThreads 250. Ce MPM gère les threads inactifs au niveau du serveur. Si le serveur possède trop de threads inactifs, des processus enfants seront arrêtés jusqu'à ce que le nombre de threads inactifs repasse en dessous de cette limite. Des processus/threads supplémentaires sont susceptibles d'être créés si ListenCoresBucketsRatio est activée.

    Pour mpm_netware, la définition par défaut est MaxSpareThreads 100. Comme ce MPM n'exécute qu'un seul processus, le nombre de processus inactifs est surveillé au niveau du serveur.

    mpmt_os2 fonctionne de manière similaire à mpm_netware. Pour mpmt_os2, la valeur par défaut est 10.

    Contraintes

    La gamme de valeurs pour MaxSpareThreads est limitée. Apache httpd corrigera automatiquement cette valeur selon les règles suivantes :

    Voir aussi

    top

    Directive MinSpareThreads

    Description:Nombre minimum de threads inactifs qui seront disponibles pour pouvoir traiter les pics de requêtes
    Syntaxe:MinSpareThreads nombre
    Défaut:Voir ci-dessous pour plus de détails
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, mpm_netware, mpmt_os2

    C'est le nombre minimum de threads inactifs pour être en mesure de traiter les pics de requêtes. Les MPMs utilisent cette directive de différentes manières.

    Avec worker et event, la définition par défaut est MinSpareThreads 75, et le nombre de threads inactifs est surveillé au niveau du serveur. Si le serveur ne possède pas assez de threads inactifs, des processus enfants sont créés jusqu'à ce que le nombre de threads inactifs repasse au dessus de nombre. Des processus/threads supplémentaires peuvent être créés si ListenCoresBucketsRatio est activée.

    Avec mpm_netware, la définition par défaut est MinSpareThreads 10 et, comme ce MPM n'exécute qu'un seul processus, le nombre de threads est surveillé au niveau du serveur.

    mpmt_os2 fonctionne de manière similaire à mpm_netware. Pour mpmt_os2, la valeur par défaut est 5.

    Voir aussi

    top

    Directive PidFile

    Description:Ficher dans lequel le serveur enregistre l'identificateur de processus du démon
    Syntaxe:PidFile nom fichier
    Défaut:PidFile logs/httpd.pid
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork, mpm_winnt, mpmt_os2

    La directive PidFile permet de définir le ficher dans lequel le serveur enregistre l'identificateur de processus du démon. Si le chemin du fichier n'est pas absolu, il est considéré comme relatif au chemin défini par la directive ServerRoot.

    Exemple

    PidFile /var/run/apache.pid

    Il est souvent utile de pouvoir envoyer un signal au serveur afin qu'il ferme et ouvre à nouveau ses journaux d'erreur et de transfert, et recharge son fichier de configuration. Pour ce faire, on envoie un signal SIGHUP (kill -1) à l'identificateur de processus enregistré dans le fichier défini par la directive PidFile.

    La directive PidFile fait l'objet des mêmes avertissements que ceux concernant le chemin d'enregistrement des fichiers journaux et la sécurité.

    Note

    Depuis la version 2 du serveur HTTP Apache, nous recommandons de n'utiliser que le script apachectl, ou le script de démarrage fourni avec votre système d'exploitation pour (re)démarrer ou arrêter le serveur.

    top

    Directive ReceiveBufferSize

    Description:Taille du tampon TCP en entrée
    Syntaxe:ReceiveBufferSize octets
    Défaut:ReceiveBufferSize 0
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2

    Le serveur va fixer la taille du tampon TCP en entrée au nombre d'octets spécifié.

    Si la directive est définie à 0, le serveur va utiliser la valeur par défaut adoptée par le système d'exploitation.

    top

    Directive ScoreBoardFile

    Description:Chemin du fichier où sont stockées les données concernant la coordination des processus enfants
    Syntaxe:ScoreBoardFile chemin fichier
    Défaut:ScoreBoardFile logs/apache_runtime_status
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork, mpm_winnt

    Le serveur HTTP Apache utilise un tableau de bord pour la communication entre le processus parent et les processus enfants. Pour faciliter cette communication, certaines architectures nécessitent un fichier. En l'absence de cette directive, donc si aucun nom de fichier n'est spécifié, Apache httpd tentera tout d'abord de créer un tableau uniquement en mémoire (en utilisant la mémoire partagée anonyme) ; et si il n'y parvient pas, il tentera de créer un fichier sur disque (en utilisant la mémoire partagée à base de fichier). Si cette directive est utilisée, Apache httpd créera systématiquement un fichier sur disque.

    Exemple

    ScoreBoardFile /var/run/apache_runtime_status

    Une mémoire partagée sous forme de fichier est utile pour les applications tierces qui nécessitent un accès direct au tableau de bord des processus.

    Si vous utilisez un ScoreBoardFile, vous pourrez constater une amélioration des performances en le plaçant sur un disque virtuel en RAM. Assurez-vous cependant de tenir compte des mêmes avertissements que ceux concernant le chemin du fichier journal et la sécurité.

    Voir aussi

    top

    Directive SendBufferSize

    Description:Taille du tampon TCP en sortie
    Syntaxe:SendBufferSize octets
    Défaut:SendBufferSize 0
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2

    Définit la taille du tampon TCP en sortie avec le nombre d'octets spécifié. Ceci s'avère souvent très utile pour augmenter les valeurs par défaut standards du passé des systèmes d'exploitation pour les transmissions à grande vitesse et haute densité (c'est à dire de l'ordre de 100ms comme sur les liaisons rapides transcontinentales).

    Si la directive est définie à 0, le serveur va utiliser la valeur par défaut adoptée par le système d'exploitation.

    L'amélioration des performances des connexions à grande vitesse et à temps de latence élevé, peut nécessiter une intervention au niveau de la configuration de votre système d'exploitation.

    Sous certains systèmes d'exploitation, la modification du comportement TCP via une augmentation de la valeur de SendBufferSize risque de ne pas être perceptible, si la directive EnableSendfile n'est pas définie à OFF. Cette interaction ne s'applique qu'aux fichiers statiques.

    top

    Directive ServerLimit

    Description:Limite supérieure de la définition du nombre de processus
    Syntaxe:ServerLimit nombre
    Défaut:Voir ci-dessous pour plus de détails
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork

    Avec le MPM prefork, cette directive définit le nombre maximum que l'on peut affecter à la directive MaxRequestWorkers, et ceci pour la durée de vie du processus Apache httpd. Avec les MPMs worker et event, cette directive, en combinaison avec ThreadLimit, définit le nombre maximum que l'on peut affecter à MaxRequestWorkers, et ceci pour la durée de vie du processus Apache httpd. Avec le MPM event, cette directive permet aussi de définir le nombre de processus anciens du serveur pouvant continuer à s'exécuter pour terminer le traitement des connexions ouvertes. Au cours d'un redémarrage, vous pouvez modifier la valeur de la directive MaxRequestWorkers, alors que toute tentative de modification de la valeur de la directive ServerLimit sera ignorée.

    Cette directive doit être utilisée avec précaution. Si ServerLimit est définie à une valeur beaucoup plus grande que nécessaire, de la mémoire partagée supplémentaire sera inutilement allouée. Si à la fois ServerLimit et MaxRequestWorkers possèdent des valeurs supérieures à ce que le système peut supporter, ce dernier peut devenir instable ou Apache httpd peut tout simplement refuser de démarrer.

    Avec les MPMs prefork et event, n'utilisez cette directive que si vous devez définir MaxRequestWorkers à une valeur supérieure à 256 (valeur par défaut). N'affectez pas à la directive ServerLimit une valeur supérieure à celle que vous avez prévu d'affecter à la directive MaxRequestWorkers.

    Avec worker, n'utilisez cette directive que si la définition de vos directives MaxRequestWorkers et ThreadsPerChild nécessitent plus de 16 processus serveurs (valeur par défaut). N'affectez pas à la directive ServerLimit une valeur supérieure au nombre de processus requis pour la définition des directives MaxRequestWorkers et ThreadsPerChild.

    Note

    Il existe une limite de ServerLimit 20000 codée en dur dans le serveur (200000 pour le MPM prefork). Ceci est censé éviter les effets désastreux que pourrait provoquer une faute de frappe. Pour dépasser cette limite, vous devez modifier la valeur de MAX_SERVER_LIMIT dans le fichier source du mpm et recompiler le serveur.

    Voir aussi

    top

    Directive StartServers

    Description:Nombre de processus enfants du serveur créés au démarrage
    Syntaxe:StartServers nombre
    Défaut:Voir ci-dessous pour plus de détails
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, prefork, mpmt_os2

    La directive StartServers permet de définir le nombre de processus enfants du serveur créés au démarrage. Comme le nombre de processus est contrôlé dynamiquement en fonction de la charge (voir MinSpareThreads, MaxSpareThreads, MinSpareServers, MaxSpareServers), il n'est en général pas nécessaire d'ajuster ce paramètre.

    La valeur par défaut diffère d'un MPM à l'autre. Pour worker et event, la définition par défaut est StartServers 3 ; la valeur par défaut est 5 pour prefork et 2 pour mpmt_os2.

    top

    Directive StartThreads

    Description:Nombre de threads créés au démarrage
    Syntaxe:StartThreads nombre
    Défaut:Voir ci-dessous pour plus de détails
    Contexte:configuration globale
    Statut:MPM
    Module:mpm_netware

    C'est le nombre de threads créés au démarrage du serveur. Comme le nombre de threads est contrôlé dynamiquement en fonction de la charge (voir MinSpareThreads, MaxSpareThreads, MinSpareServers, MaxSpareServers), il n'est en général pas nécessaire d'ajuster ce paramètre.

    Pour mpm_netware, la définition par défaut est StartThreads 50 et, comme il n'y a qu'un processus, il s'agit du nombre total de threads créés au démarrage pour servir les requêtes.

    top

    Directive ThreadLimit

    Description:Le nombre de threads maximum que l'on peut définir par processus enfant
    Syntaxe:ThreadLimit nombre
    Défaut:Voir ci-dessous pour plus de détails
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, mpm_winnt

    Cette directive permet de définir le nombre maximum que l'on peut affecter à la directive ThreadsPerChild pour la durée de vie du processus Apache httpd. La directive ThreadsPerChild peut être modifiée au cours d'un redémarrage jusqu'à la valeur de la directive ThreadLimit, mais toute tentative de modification de la directive ThreadLimit au cours d'un redémarrage sera ignorée.

    L'utilisation de cette directive doit faire l'objet de précautions particulières. Si ThreadLimit est définie à une valeur très supérieure à la directive ThreadsPerChild, de la mémoire partagée supplémentaire sera inutilement allouée. Si les directives ThreadLimit et ThreadsPerChild sont définies à des valeurs supérieures à ce que le système peut supporter, ce dernier peut devenir instable, ou Apache httpd peut tout simplement refuser de démarrer. Ne définissez pas cette directive à une valeur supérieure à la valeur maximale que vous pensez affecter à la directive ThreadsPerChild pour le processus Apache httpd en cours d'exécution.

    La valeur par défaut de la directive ThreadLimit est 1920 avec mpm_winnt, et 64 avec les autres MPMs.

    Note

    Il existe une limite de ThreadLimit 20000 (ou ThreadLimit 100000 avec event, ThreadLimit 15000 avec mpm_winnt) codée en dur dans le serveur. Ceci est censé éviter les effets désastreux que pourrait provoquer une faute de frappe. Pour dépasser cette limite, vous devez modifier la valeur de MAX_THREAD_LIMIT dans le fichier source du mpm et recompiler le serveur.

    top

    Directive ThreadsPerChild

    Description:Nombre de threads créés par chaque processus enfant
    Syntaxe:ThreadsPerChild nombre
    Défaut:Voir ci-dessous pour plus de détails
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, mpm_winnt

    Cette directive permet de définir le nombre de threads que va créer chaque processus enfant. Un processus enfant crée ces threads au démarrage et n'en crée plus d'autres par la suite. Si l'on utilise un MPM comme mpm_winnt qui ne lance qu'un processus enfant, ce nombre doit être suffisamment grand pour supporter la charge du serveur. Avec un MPM comme worker qui lance plusieurs processus enfants, c'est le nombre total de threads qui doit être suffisamment grand pour supporter la charge du serveur.

    La valeur par défaut de la directive ThreadsPerChild est 64 avec mpm_winnt, et 25 avec les autres MPMs.

    La valeur de la directive ThreadsPerChild ne peut pas dépasser la valeur de la directive ThreadLimit. Si on spécifie une valeur supérieure, elle sera automatiquement réduite au démarrage du serveur et un avertissement sera enregistré dans le journal. La relation entre ces deux directives est expliquée dans la documentation de la directive ThreadLimit.

    top

    Directive ThreadStackSize

    Description:La taille en octets de la pile qu'utilisent les threads qui traitent les connexions clients
    Syntaxe:ThreadStackSize taille
    Défaut:65536 sous NetWare; varie en fonction des autres systèmes d'exploitation
    Contexte:configuration globale
    Statut:MPM
    Module:event, worker, mpm_winnt, mpm_netware, mpmt_os2
    Compatibilité:Disponible dans les versions 2.1 et supérieures du serveur HTTP Apache

    La directive ThreadStackSize permet de définir la taille de la pile (pour les données propres) qu'utilisent les threads qui traitent les connexions clients en faisant appel à des modules. Dans la plupart des cas, la valeur par défaut de la taille de la pile du système d'exploitation convient, mais il existe certaines situations où il peut s'avérer nécessaire de l'ajuster :

    • Sur les plates-formes qui possèdent une valeur par défaut de taille de la pile relativement petite (par exemple HP-UX), Apache httpd peut se crasher si l'on utilise certains modules tiers qui possèdent un quantité de données propres stockées relativement importante. Il se peut que ces mêmes modules fonctionnent correctement sur d'autres plate-formes où la valeur par défaut de la taille de la pile est supérieure. Ce type de crash peut être evité en définissant ThreadStackSize à une valeur supérieure à la valeur par défaut du système d'exploitation. Ce type d'ajustement n'est nécessaire que si le fournisseur du module tiers en fait mention, ou si le diagnostic d'un crash d'Apache httpd indique que la taille de la pile était trop petite.
    • Sur les plates-formes où la taille par défaut de la pile des threads est sensiblement supérieure à la taille nécessaire pour la configuration du serveur web, il est possible de disposer d'un plus grand nombre de threads par processus enfant si la directive ThreadStackSize est définie à une valeur inférieure à la valeur par défaut du système d'exploitation. Cependant, ce type d'ajustement ne doit être effectué que dans un environnement de test permettant de qualifier le serveur web au maximum de ses possibilités, car il peut arriver, dans de rares cas, que des requêtes nécessitent une taille de pile supérieure pour pouvoir être traitées. La taille minimale requise pour la pile dépend fortement des modules utilisés, mais toute modification dans la configuration du serveur web peut invalider la définition courante de la directive ThreadStackSize.
    • Sous Linux, cette directive ne peut être utilisée que pour augmenter la valeur par defaut de la taille de la pile, car l'appel système sous-jacent utilise cette valeur comme taille de pile minimale. C'est la limite logicielle (souvent élevée) pour ulimit -s (8Mo si aucune limite) qui est utilisée comme taille de pile par défaut.
    Il est recommandé de ne pas réduire ThreadStackSize, à moins qu'un grand nombre de threads par processus enfant ne soit nécessaire. Sur certaines plates-formes (y compris Linux), une valeur de 128000 est déjà trop basse et provoque des crashes avec certains modules courants.

    Langues Disponibles:  de  |  en  |  fr  |  ja  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_heartmonitor.html.en0000644000000000000500000002721713412755316021101 0ustar rootsrc mod_heartmonitor - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_heartmonitor

    Available Languages:  en  |  fr 

    Description:Centralized monitor for mod_heartbeat origin servers
    Status:Experimental
    Module Identifier:heartmonitor_module
    Source File:mod_heartmonitor.c
    Compatibility:Available in Apache 2.3 and later

    Summary

    mod_heartmonitor listens for server status messages generated by mod_heartbeat enabled origin servers and makes their status available to mod_lbmethod_heartbeat. This allows ProxyPass to use the "heartbeat" lbmethod inside of ProxyPass.

    This module uses the services of mod_slotmem_shm when available instead of flat-file storage. No configuration is required to use mod_slotmem_shm.

    To use mod_heartmonitor, mod_status and mod_watchdog must be either a static modules or, if a dynamic module, it must be loaded before mod_heartmonitor.
    top

    HeartbeatListen Directive

    Description:multicast address to listen for incoming heartbeat requests
    Syntax:HeartbeatListen addr:port
    Default:disabled
    Context:server config
    Status:Experimental
    Module:mod_heartmonitor

    The HeartbeatListen directive specifies the multicast address on which the server will listen for status information from mod_heartbeat-enabled servers. This address will usually correspond to a configured HeartbeatAddress on an origin server.

    HeartbeatListen 239.0.0.1:27999

    This module is inactive until this directive is used.

    top

    HeartbeatMaxServers Directive

    Description:Specifies the maximum number of servers that will be sending heartbeat requests to this server
    Syntax:HeartbeatMaxServers number-of-servers
    Default:HeartbeatMaxServers 10
    Context:server config
    Status:Experimental
    Module:mod_heartmonitor

    The HeartbeatMaxServers directive specifies the maximum number of servers that will be sending requests to this monitor server. It is used to control the size of the shared memory allocated to store the heartbeat info when mod_slotmem_shm is in use.

    top

    HeartbeatStorage Directive

    Description:Path to store heartbeat data
    Syntax:HeartbeatStorage file-path
    Default:HeartbeatStorage logs/hb.dat
    Context:server config
    Status:Experimental
    Module:mod_heartmonitor

    The HeartbeatStorage directive specifies the path to store heartbeat data. This flat-file is used only when mod_slotmem_shm is not loaded.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authnz_ldap.html0000644000000000000500000000034213362070302020251 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authnz_ldap.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authnz_ldap.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_version.html.en0000644000000000000500000002453513412755316020053 0ustar rootsrc mod_version - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_version

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Version dependent configuration
    Status:Extension
    Module Identifier:version_module
    Source File:mod_version.c

    Summary

    This module is designed for the use in test suites and large networks which have to deal with different httpd versions and different configurations. It provides a new container -- <IfVersion>, which allows a flexible version checking including numeric comparisons and regular expressions.

    Examples

    <IfVersion 2.4.2>
        # current httpd version is exactly 2.4.2
    </IfVersion>
    
    <IfVersion >= 2.5>
        # use really new features :-)
    </IfVersion>

    See below for further possibilities.

    top

    <IfVersion> Directive

    Description:contains version dependent configuration
    Syntax:<IfVersion [[!]operator] version> ... </IfVersion>
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_version

    The <IfVersion> section encloses configuration directives which are executed only if the httpd version matches the desired criteria. For normal (numeric) comparisons the version argument has the format major[.minor[.patch]], e.g. 2.1.0 or 2.2. minor and patch are optional. If these numbers are omitted, they are assumed to be zero. The following numerical operators are possible:

    operatordescription
    = or == httpd version is equal
    > httpd version is greater than
    >= httpd version is greater or equal
    < httpd version is less than
    <= httpd version is less or equal

    Example

    <IfVersion >= 2.3>
        # this happens only in versions greater or
        # equal 2.3.0.
    </IfVersion>

    Besides the numerical comparison it is possible to match a regular expression against the httpd version. There are two ways to write it:

    operatordescription
    = or == version has the form /regex/
    ~ version has the form regex

    Example

    <IfVersion = /^2.4.[01234]$/>
        # e.g. workaround for buggy versions
    </IfVersion>

    In order to reverse the meaning, all operators can be preceded by an exclamation mark (!):

    <IfVersion !~ ^2.4.[01234]$>
        # not for those versions
    </IfVersion>

    If the operator is omitted, it is assumed to be =.

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_session_dbd.html0000644000000000000500000000034213362070302020234 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_session_dbd.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_session_dbd.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_dbd.html.en0000644000000000000500000006133213412755316017113 0ustar rootsrc mod_dbd - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_dbd

    Available Languages:  en  |  fr 

    Description:Manages SQL database connections
    Status:Extension
    Module Identifier:dbd_module
    Source File:mod_dbd.c
    Compatibility:Version 2.1 and later

    Summary

    mod_dbd manages SQL database connections using APR. It provides database connections on request to modules requiring SQL database functions, and takes care of managing databases with optimal efficiency and scalability for both threaded and non-threaded MPMs. For details, see the APR website and this overview of the Apache DBD Framework by its original developer.

    top

    Connection Pooling

    This module manages database connections, in a manner optimised for the platform. On non-threaded platforms, it provides a persistent connection in the manner of classic LAMP (Linux, Apache, Mysql, Perl/PHP/Python). On threaded platform, it provides an altogether more scalable and efficient connection pool, as described in this article at ApacheTutor. Note that mod_dbd supersedes the modules presented in that article.

    top

    Connecting

    To connect to your database, you'll need to specify a driver, and connection parameters. These vary from one database engine to another. For example, to connect to mysql, do the following:

    DBDriver mysql
    DBDParams host=localhost,dbname=pony,user=shetland,pass=appaloosa

    You can then use this connection in a variety of other modules, including mod_rewrite, mod_authn_dbd, and mod_lua. Further usage examples appear in each of those modules' documentation.

    See DBDParams for connection string information for each of the supported database drivers.

    top

    Apache DBD API

    mod_dbd exports five functions for other modules to use. The API is as follows:

    typedef struct {
        apr_dbd_t *handle;
        apr_dbd_driver_t *driver;
        apr_hash_t *prepared;
    } ap_dbd_t;
    
    /* Export functions to access the database */
    
    /* acquire a connection that MUST be explicitly closed.
     * Returns NULL on error
     */
    AP_DECLARE(ap_dbd_t*) ap_dbd_open(apr_pool_t*, server_rec*);
    
    /* release a connection acquired with ap_dbd_open */
    AP_DECLARE(void) ap_dbd_close(server_rec*, ap_dbd_t*);
    
    /* acquire a connection that will have the lifetime of a request
     * and MUST NOT be explicitly closed.  Return NULL on error.
     * This is the preferred function for most applications.
     */
    AP_DECLARE(ap_dbd_t*) ap_dbd_acquire(request_rec*);
    
    /* acquire a connection that will have the lifetime of a connection
     * and MUST NOT be explicitly closed.  Return NULL on error.
     */
    AP_DECLARE(ap_dbd_t*) ap_dbd_cacquire(conn_rec*);
    
    /* Prepare a statement for use by a client module */
    AP_DECLARE(void) ap_dbd_prepare(server_rec*, const char*, const char*);
    
    /* Also export them as optional functions for modules that prefer it */
    APR_DECLARE_OPTIONAL_FN(ap_dbd_t*, ap_dbd_open, (apr_pool_t*, server_rec*));
    APR_DECLARE_OPTIONAL_FN(void, ap_dbd_close, (server_rec*, ap_dbd_t*));
    APR_DECLARE_OPTIONAL_FN(ap_dbd_t*, ap_dbd_acquire, (request_rec*));
    APR_DECLARE_OPTIONAL_FN(ap_dbd_t*, ap_dbd_cacquire, (conn_rec*));
    APR_DECLARE_OPTIONAL_FN(void, ap_dbd_prepare, (server_rec*, const char*, const char*));
    top

    SQL Prepared Statements

    mod_dbd supports SQL prepared statements on behalf of modules that may wish to use them. Each prepared statement must be assigned a name (label), and they are stored in a hash: the prepared field of an ap_dbd_t. Hash entries are of type apr_dbd_prepared_t and can be used in any of the apr_dbd prepared statement SQL query or select commands.

    It is up to dbd user modules to use the prepared statements and document what statements can be specified in httpd.conf, or to provide their own directives and use ap_dbd_prepare.

    Caveat

    When using prepared statements with a MySQL database, it is preferred to set reconnect to 0 in the connection string as to avoid errors that arise from the MySQL client reconnecting without properly resetting the prepared statements. If set to 1, any broken connections will be attempted fixed, but as mod_dbd is not informed, the prepared statements will be invalidated.
    top

    SECURITY WARNING

    Any web/database application needs to secure itself against SQL injection attacks. In most cases, Apache DBD is safe, because applications use prepared statements, and untrusted inputs are only ever used as data. Of course, if you use it via third-party modules, you should ascertain what precautions they may require.

    However, the FreeTDS driver is inherently unsafe. The underlying library doesn't support prepared statements, so the driver emulates them, and the untrusted input is merged into the SQL statement.

    It can be made safe by untainting all inputs: a process inspired by Perl's taint checking. Each input is matched against a regexp, and only the match is used, according to the Perl idiom:

      $untrusted =~ /([a-z]+)/;
      $trusted = $1;

    To use this, the untainting regexps must be included in the prepared statements configured. The regexp follows immediately after the % in the prepared statement, and is enclosed in curly brackets {}. For example, if your application expects alphanumeric input, you can use:

    "SELECT foo FROM bar WHERE input = %s"

    with other drivers, and suffer nothing worse than a failed query. But with FreeTDS you'd need:

    "SELECT foo FROM bar WHERE input = %{([A-Za-z0-9]+)}s"

    Now anything that doesn't match the regexp's $1 match is discarded, so the statement is safe.

    An alternative to this may be the third-party ODBC driver, which offers the security of genuine prepared statements.

    top

    DBDExptime Directive

    Description:Keepalive time for idle connections
    Syntax:DBDExptime time-in-seconds
    Default:DBDExptime 300
    Context:server config, virtual host
    Status:Extension
    Module:mod_dbd

    Set the time to keep idle connections alive when the number of connections specified in DBDKeep has been exceeded (threaded platforms only).

    top

    DBDInitSQL Directive

    Description:Execute an SQL statement after connecting to a database
    Syntax:DBDInitSQL "SQL statement"
    Context:server config, virtual host
    Status:Extension
    Module:mod_dbd

    Modules, that wish it, can have one or more SQL statements executed when a connection to a database is created. Example usage could be initializing certain values or adding a log entry when a new connection is made to the database.

    top

    DBDKeep Directive

    Description:Maximum sustained number of connections
    Syntax:DBDKeep number
    Default:DBDKeep 2
    Context:server config, virtual host
    Status:Extension
    Module:mod_dbd

    Set the maximum number of connections per process to be sustained, other than for handling peak demand (threaded platforms only).

    top

    DBDMax Directive

    Description:Maximum number of connections
    Syntax:DBDMax number
    Default:DBDMax 10
    Context:server config, virtual host
    Status:Extension
    Module:mod_dbd

    Set the hard maximum number of connections per process (threaded platforms only).

    top

    DBDMin Directive

    Description:Minimum number of connections
    Syntax:DBDMin number
    Default:DBDMin 1
    Context:server config, virtual host
    Status:Extension
    Module:mod_dbd

    Set the minimum number of connections per process (threaded platforms only).

    top

    DBDParams Directive

    Description:Parameters for database connection
    Syntax:DBDParams param1=value1[,param2=value2]
    Context:server config, virtual host
    Status:Extension
    Module:mod_dbd

    As required by the underlying driver. Typically this will be used to pass whatever cannot be defaulted amongst username, password, database name, hostname and port number for connection.

    Connection string parameters for current drivers include:

    FreeTDS (for MSSQL and SyBase)
    username, password, appname, dbname, host, charset, lang, server
    MySQL
    host, port, user, pass, dbname, sock, flags, fldsz, group, reconnect
    Oracle
    user, pass, dbname, server
    PostgreSQL
    The connection string is passed straight through to PQconnectdb
    SQLite2
    The connection string is split on a colon, and part1:part2 is used as sqlite_open(part1, atoi(part2), NULL)
    SQLite3
    The connection string is passed straight through to sqlite3_open
    ODBC
    datasource, user, password, connect, ctimeout, stimeout, access, txmode, bufsize
    top

    DBDPersist Directive

    Description:Whether to use persistent connections
    Syntax:DBDPersist On|Off
    Context:server config, virtual host
    Status:Extension
    Module:mod_dbd

    If set to Off, persistent and pooled connections are disabled. A new database connection is opened when requested by a client, and closed immediately on release. This option is for debugging and low-usage servers.

    The default is to enable a pool of persistent connections (or a single LAMP-style persistent connection in the case of a non-threaded server), and should almost always be used in operation.

    Prior to version 2.2.2, this directive accepted only the values 0 and 1 instead of Off and On, respectively.

    top

    DBDPrepareSQL Directive

    Description:Define an SQL prepared statement
    Syntax:DBDPrepareSQL "SQL statement" label
    Context:server config, virtual host
    Status:Extension
    Module:mod_dbd

    For modules such as authentication that repeatedly use a single SQL statement, optimum performance is achieved by preparing the statement at startup rather than every time it is used. This directive prepares an SQL statement and assigns it a label.

    top

    DBDriver Directive

    Description:Specify an SQL driver
    Syntax:DBDriver name
    Context:server config, virtual host
    Status:Extension
    Module:mod_dbd

    Selects an apr_dbd driver by name. The driver must be installed on your system (on most systems, it will be a shared object or dll). For example, DBDriver mysql will select the MySQL driver in apr_dbd_mysql.so.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dav_fs.html.fr.utf80000644000000000000500000002336313412755316020520 0ustar rootsrc mod_dav_fs - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_dav_fs

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Implémente le fournisseur filesystem pour mod_dav
    Statut:Extension
    Identificateur de Module:dav_fs_module
    Fichier Source:mod_dav_fs.c

    Sommaire

    L'activation de ce module nécessite l'utilisation de mod_dav. C'est un module de support pour mod_dav et à ce titre, il permet l'accès à des ressources situées dans le système de fichiers du serveur. Le nom formel de ce fournisseur est filesystem. Les fournisseurs supports de mod_dav sont invoqués via la directive Dav :

    Exemple

    Dav filesystem

    Comme filesystem est le fournisseur par défaut de mod_dav, vous pouvez vous contenter d'utiliser la valeur On comme argument de Dav.

    top

    Directive DavLockDB

    Description:Chemin de la base de données des verrous DAV
    Syntaxe:DavLockDB chemin fichier
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_dav_fs

    La directive DavLockDB permet de spécifier le chemin complet de la base de données des verrous, sans extension. Si le chemin n'est pas absolu, il sera considéré comme relatif au répertoire défini par la directive ServerRoot. L'implémentation de mod_dav_fs utilise une base de données SDBM pour surveiller les verrous utilisateurs.

    Exemple

    DavLockDB "var/DavLock"

    Les utilisateur et groupe sous lesquels Apache s'exécute et qui sont respectivement définis par les directives User et Group doivent pouvoir écrire dans le répertoire qui contient le fichier de la base de données des verrous. Pour des raisons de sécurité, il est recommandé de créer un répertoire dédié à la base de données des verrous, plutôt que de modifier les permissions d'un répertoire existant. Dans l'exemple ci-dessus, Apache va créer des fichiers dans le répertoire var/, lui-même sous-répertoire du répertoire défini par la directive ServerRoot, avec le nom de base DavLock suivi d'une extension choisie par le serveur.

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/module-dict.html.ja.utf80000644000000000000500000002444713412755316020614 0ustar rootsrc Apache モジュールã®è§£èª¬ã§ä½¿ç”¨ã™ã‚‹ç”¨èªž - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュールã®è§£èª¬ã§ä½¿ç”¨ã™ã‚‹ç”¨èªž

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ–‡æ›¸ã¯ Apache ã®å„ モジュール を説明ã™ã‚‹ãŸã‚㫠使ã‚れã¦ã„る用語を説明ã—ã¾ã™ã€‚

    top

    説明

    モジュールã®ç›®çš„ã®çŸ­ã„説明。

    top

    ステータス

    ã“れã¯ã€ãã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒ Apache ウェブサーãƒã«ã©ã‚Œãらã„密接ã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹ã‹ã‚’示ã—ã¾ã™ã€‚ è¨€ã„æ›ãˆã‚Œã°ã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’組ã¿è¾¼ã¿ã€ãã®æ©Ÿèƒ½ã‚’利用ã™ã‚‹ãŸã‚ã«ã€ サーãƒã‚’å†ã‚³ãƒ³ãƒ‘イルã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã‹ã‚‚ã—れãªã„ã¨ã„ã†ã“ã¨ã‚’示ã—ã¾ã™ã€‚ ã“ã®å±žæ€§ãŒå–り得る値ã¯ä»¥ä¸‹ã®ã‚‚ã®ã§ã™:

    MPM
    ステータス㌠"MPM" ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ãƒžãƒ«ãƒãƒ—ロセッシングモジュールã§ã™ã€‚ ä»–ã®ç¨®é¡žã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ã¯é•ã£ã¦ã€Apache ã¯å¸¸ã« MPM を一ã¤ã ã‘ 使用ã—ç¶šã‘ã¾ã™ã€‚ã“ã®ç¨®é¡žã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯åŸºæœ¬çš„ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æ‰±ã„㨠ディスパッãƒã‚’行ãªã„ã¾ã™ã€‚
    Base
    ステータス㌠"Base" ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã€ãƒ‡ãƒ•ォルトã§ã‚³ãƒ³ãƒ‘イルã•れã¦ã‚ã–ã‚ã–設定ã‹ã‚‰ モジュールを削除ã—ã¦ã„ãªã„é™ã‚Šã€é€šå¸¸ã¯åˆ©ç”¨å¯èƒ½ã§ã™ã€‚
    Extension
    ステータス㌠"Extension" ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã€ デフォルトã§ã¯ã‚³ãƒ³ãƒ‘イルã•れãšã€ã‚µãƒ¼ãƒã«ã‚‚読ã¿è¾¼ã¾ã‚Œã¾ã›ã‚“。 ãã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ãã®æ©Ÿèƒ½ã‚’有効ã«ã™ã‚‹ã«ã¯ã€ サーãƒã‚’ビルドã™ã‚‹ãŸã‚ã®è¨­å®šã‚’変更ã—ã¦ã€Apache ã‚’å†ã‚³ãƒ³ãƒ‘イルã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
    Experimental
    ステータス㌠"Experimental" ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã€ Apache é…布物ã«åŒæ¢±ã•れã¦ã„ã¾ã™ãŒã€ 使用ã™ã‚‹å ´åˆã¯è‡ªå·±è²¬ä»»ã§è¡Œãªã†å¿…è¦ãŒã‚りã¾ã™ã€‚ ãã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚‚完æˆã«å‘ã‘ã¦ä½œæˆä¸­ã§ã™ã—〠サãƒãƒ¼ãƒˆã•れるã¦ã„ã‚‹ã¨ã¯é™ã‚Šã¾ã›ã‚“。
    External
    ステータス㌠"External" ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã€åŸºæœ¬ Apache é…布ã«åŒæ¢±ã•れã¾ã›ã‚“ ("サードパーティーモジュール")。 ãã®ãŸã‚ã€æˆ‘々ã«è²¬ä»»ã¯ã‚りã¾ã›ã‚“ã—〠ãã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ã‚µãƒãƒ¼ãƒˆã‚‚ã—ã¦ã„ã¾ã›ã‚“。
    top

    ソースファイル

    ã“れã¯å˜ç´”ã«ã€ ãã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«å¿…è¦ãªã‚³ãƒ¼ãƒ‰ã‚’å«ã‚€ã‚½ãƒ¼ã‚¹ãƒ•ァイルã®åå‰ã‚’列挙ã—ãŸã‚‚ã®ã§ã™ã€‚ ã“れã¯ã€<IfModule> ディレクティブã§ä½¿ç”¨ã•れるåå‰ã§ã‚‚ã‚りã¾ã™ã€‚

    top

    モジュール識別å­

    ã“ã®æ–‡å­—列ã¯ã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®å‹•的読ã¿è¾¼ã¿ã‚’行ãªã†ã¨ãã«ä½¿ç”¨ã™ã‚‹ LoadModule ディレクティブã«ãŠã„ã¦ä½¿ç”¨ã•れるモジュールã®è­˜åˆ¥å­ã§ã™ã€‚ 詳ã—ãæ›¸ãã¨ã€ã‚½ãƒ¼ã‚¹ãƒ•ァイル内㮠module タイプã®å¤–部変数ã®åå‰ã§ã™ã€‚

    top

    äº’æ›æ€§

    ã‚るモジュール㌠Apache ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2 ã®é…布ã«å«ã¾ã‚Œã¦ã„ãªã‹ã£ãŸå ´åˆã€ ãã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒå°Žå…¥ã•れãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒã“ã“ã«æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚ ã¾ãŸã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒç‰¹å®šã®ãƒ—ラットフォームã«ã®ã¿å­˜åœ¨ã™ã‚‹ã¨ãã‚‚ 詳細ã¯ã“ã“ã«æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_owner.html.fr.utf80000644000000000000500000002765713412755316021635 0ustar rootsrc mod_authz_owner - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authz_owner

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Autorisation basée sur l'appartenance des fichiers
    Statut:Extension
    Identificateur de Module:authz_owner_module
    Fichier Source:mod_authz_owner.c
    Compatibilité:Disponible depuis les versions 2.1 et supérieures d'Apache

    Sommaire

    Ce module permet de contrôler l'accès aux fichiers en comparant l'identifiant utilisateur ayant servi à l'authentification HTTP (l'identifiant utilisateur web) avec le propriétaire ou le groupe du fichier demandé du point de vue du système de fichiers. Le nom d'utilisateur et le mot de passe doivent déjà avoir été vérifiés par un module d'authentification comme mod_auth_basic ou mod_auth_digest. mod_authz_owner reconnaît deux arguments pour la directive Require : file-owner et file-group :

    file-owner
    Le nom d'utilisateur web utilisé pour l'authentification doit correspondre au nom système du propriétaire du fichier demandé. En d'autres termes, si le système indique jones comme propriétaire du fichier demandé, le nom d'utilisateur fourni pour l'authentification HTTP doit aussi être jones.
    file-group
    Le nom du groupe système du fichier demandé doit être présent dans une base de données de groupes fournie, par exemple, par mod_authz_groupfile ou mod_authz_dbm, et le nom d'utilisateur web fourni pour l'authentification doit être un membre de ce groupe. Par exemple, si le système indique que le groupe (système) du fichier demandé est accounts, le groupe accounts doit apparaître dans la base de données des groupes, et le nom d'utilisateur web utilisé pour l'authentification doit être un membre de ce groupe.

    Note

    Si le module mod_authz_owner est utilisé pour vérifier l'autorisation d'accès à une ressource qui n'est pas vraiment présente dans le système de fichiers (en d'autres termes une ressource virtuelle), il refusera l'accès.

    En particulier, il n'accordera jamais l'accès à une ressource du type "Vues multiples" (MultiViews) d'un contenu négocié.

    Support Apache!

    Sujets

    Directives

    Ce module ne fournit aucune directive.

    Traitement des bugs

    Voir aussi

    top

    Exemples de configuration

    Require file-owner

    Considérons un serveur Web Apache fonctionnant sous un système multi-utilisateurs, où les fichiers de chaque utilisateur sont stockés dans ~/public_html/private. En supposant qu'il n'existe qu'une seule base de données contenant les noms d'utilisateurs web, et que ces noms d'utilisateurs correspondent aux noms d'utilisateurs système qui sont les propriétaires effectifs des fichiers, la configuration de l'exemple suivant n'accordera l'autorisation d'accès aux fichiers qu'à leur propriétaire. L'utilisateur jones ne sera pas autorisé à accéder aux fichiers situés dans /home/smith/public_html/private, à moins que leur propriétaire ne soit jones au lieu de smith.

    <Directory "/home/*/public_html/private">
        AuthType Basic
        AuthName MyPrivateFiles
        AuthBasicProvider dbm
        AuthDBMUserFile "/usr/local/apache2/etc/.htdbm-all"
        Require file-owner
    </Directory>

    Require file-group

    Considérons un système similaire à celui décrit ci-dessus, mais où certains utilisateurs partagent leurs fichiers de projets dans ~/public_html/project-foo. Le groupe système des fichiers est foo, et il n'existe qu'une seule base de données AuthDBMGroupFile qui contient tous les noms d'utilisateurs web et leurs groupes d'appartenance. Ces noms d'utilisateurs web doivent alors appartenir au moins au groupe foo. En d'autres termes, si jones et smith sont tous deux membres du groupe foo, ils seront autorisés à accéder aux répertoires project-foo de chacun d'entre eux.

    <Directory "/home/*/public_html/project-foo">
        AuthType Basic
        AuthName "Project Foo Files"
        AuthBasicProvider dbm
        
        # combined user/group database
        AuthDBMUserFile  "/usr/local/apache2/etc/.htdbm-all"
        AuthDBMGroupFile "/usr/local/apache2/etc/.htdbm-all"
        
        Satisfy All
        Require file-group
    </Directory>

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_log_forensic.html.en0000644000000000000500000003142213412755316021030 0ustar rootsrc mod_log_forensic - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_log_forensic

    Available Languages:  en  |  fr  |  ja  |  tr 

    Description:Forensic Logging of the requests made to the server
    Status:Extension
    Module Identifier:log_forensic_module
    Source File:mod_log_forensic.c
    Compatibility:mod_unique_id is no longer required since version 2.1

    Summary

    This module provides for forensic logging of client requests. Logging is done before and after processing a request, so the forensic log contains two log lines for each request. The forensic logger is very strict, which means:

    • The format is fixed. You cannot modify the logging format at runtime.
    • If it cannot write its data, the child process exits immediately and may dump core (depending on your CoreDumpDirectory configuration).

    The check_forensic script, which can be found in the distribution's support directory, may be helpful in evaluating the forensic log output.

    top

    Forensic Log Format

    Each request is logged two times. The first time is before it's processed further (that is, after receiving the headers). The second log entry is written after the request processing at the same time where normal logging occurs.

    In order to identify each request, a unique request ID is assigned. This forensic ID can be cross logged in the normal transfer log using the %{forensic-id}n format string. If you're using mod_unique_id, its generated ID will be used.

    The first line logs the forensic ID, the request line and all received headers, separated by pipe characters (|). A sample line looks like the following (all on one line):

    +yQtJf8CoAB4AAFNXBIEAAAAA|GET /manual/de/images/down.gif HTTP/1.1|Host:localhost%3a8080|User-Agent:Mozilla/5.0 (X11; U; Linux i686; en-US; rv%3a1.6) Gecko/20040216 Firefox/0.8|Accept:image/png, etc...

    The plus character at the beginning indicates that this is the first log line of this request. The second line just contains a minus character and the ID again:

    -yQtJf8CoAB4AAFNXBIEAAAAA

    The check_forensic script takes as its argument the name of the logfile. It looks for those +/- ID pairs and complains if a request was not completed.

    top

    Security Considerations

    See the security tips document for details on why your security could be compromised if the directory where logfiles are stored is writable by anyone other than the user that starts the server.

    The log files may contain sensitive data such as the contents of Authorization: headers (which can contain passwords), so they should not be readable by anyone except the user that starts the server.

    top

    ForensicLog Directive

    Description:Sets filename of the forensic log
    Syntax:ForensicLog filename|pipe
    Context:server config, virtual host
    Status:Extension
    Module:mod_log_forensic

    The ForensicLog directive is used to log requests to the server for forensic analysis. Each log entry is assigned a unique ID which can be associated with the request using the normal CustomLog directive. mod_log_forensic creates a token called forensic-id, which can be added to the transfer log using the %{forensic-id}n format string.

    The argument, which specifies the location to which the logs will be written, can take one of the following two types of values:

    filename
    A filename, relative to the ServerRoot.
    pipe
    The pipe character "|", followed by the path to a program to receive the log information on its standard input. The program name can be specified relative to the ServerRoot directive.

    Security:

    If a program is used, then it will be run as the user who started httpd. This will be root if the server was started by root; be sure that the program is secure or switches to a less privileged user.

    Note

    When entering a file path on non-Unix platforms, care should be taken to make sure that only forward slashes are used even though the platform may allow the use of back slashes. In general it is a good idea to always use forward slashes throughout the configuration files.

    Available Languages:  en  |  fr  |  ja  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_http2.html0000644000000000000500000000034213362070302020242 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy_http2.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_proxy_http2.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_buffer.html.en0000644000000000000500000002210513412755316017626 0ustar rootsrc mod_buffer - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_buffer

    Available Languages:  en  |  fr 

    Description:Support for request buffering
    Status:Extension
    Module Identifier:buffer_module
    Source File:mod_buffer.c
    Compatibility:Available in Apache 2.3 and later

    Summary

    This module provides the ability to buffer the input and output filter stacks.

    Under certain circumstances, content generators might create content in small chunks. In order to promote memory reuse, in memory chunks are always 8k in size, regardless of the size of the chunk itself. When many small chunks are generated by a request, this can create a large memory footprint while the request is being processed, and an unnecessarily large amount of data on the wire. The addition of a buffer collapses the response into the fewest chunks possible.

    When httpd is used in front of an expensive content generator, buffering the response may allow the backend to complete processing and release resources sooner, depending on how the backend is designed.

    The buffer filter may be added to either the input or the output filter stacks, as appropriate, using the SetInputFilter, SetOutputFilter, AddOutputFilter or AddOutputFilterByType directives.

    Using buffer with mod_include

    AddOutputFilterByType INCLUDES;BUFFER text/html
    The buffer filters read the request/response into RAM and then repack the request/response into the fewest memory buckets possible, at the cost of CPU time. When the request/response is already efficiently packed, buffering the request/response could cause the request/response to be slower than not using a buffer at all. These filters should be used with care, and only where necessary.
    top

    BufferSize Directive

    Description:Maximum size in bytes to buffer by the buffer filter
    Syntax:BufferSize integer
    Default:BufferSize 131072
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_buffer

    The BufferSize directive specifies the amount of data in bytes that will be buffered before being read from or written to each request. The default is 128 kilobytes.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_http2.html0000644000000000000500000000032613362070302017003 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_http2.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_http2.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_dav.html.fr.utf80000644000000000000500000004672213412755316020034 0ustar rootsrc mod_dav - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_dav

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Fonctionnalité de création et gestion de versions de documents via le web (WebDAV)
    Statut:Extension
    Identificateur de Module:dav_module
    Fichier Source:mod_dav.c

    Sommaire

    Ce module ajoute à Apache une fonctionnalité WebDAV de classes 1 et 2 ('Web-based Distributed Authoring and Versioning' ou Création et gestion de versions de documents via le web). Il s'agit d'une extension du protocole HTTP qui permet de créer, déplacer, copier et supprimer des ressources ou collections de ressources sur un serveur web distant.

    top

    Activation de WebDAV

    Pour activer le module mod_dav, ajoutez la ligne suivante à un conteneur de votre fichier httpd.conf :

    Dav On

    Ceci active le fournisseur de système de fichier DAV implémenté par le module mod_dav_fs. Ce dernier doit donc être compilé dans le serveur ou chargé au démarrage à l'aide de la directive LoadModule.

    En outre, vous devez indiquer où se trouve la base de données des verrous DAV via une directive DavLockDB dans la section globale de votre fichier httpd.conf :

    DavLockDB /usr/local/apache2/var/DavLock

    Le répertoire contenant le fichier de la base de données des verrous doit avoir des droits en écriture pour l'utilisateur et le groupe sous lesquels Apache s'exécute et définis respectivement par les directives User et Group.

    Si vous souhaitez limiter l'accès aux répertoires où DAV est activé, vous pouvez ajouter une clause <Limit> dans la section <Location> considérée. Pour définir la quantité maximale de données en octets qu'un client DAV peut envoyer par requête, vous devez utiliser la directive LimitXMLRequestBody, car La directive LimitRequestBody "habituelle" n'a aucune incidence sur les requêtes DAV.

    Exemple complet

    DavLockDB "/usr/local/apache2/var/DavLock"
    
    <Directory "/usr/local/apache2/htdocs/foo">
        Require all granted
        Dav On
    
        AuthType Basic
        AuthName DAV
        AuthUserFile "user.passwd"
    
        <LimitExcept GET POST OPTIONS>
            Require user admin
        </LimitExcept>
    </Directory>
    top

    Problèmes concernant la sécurité

    Etant donné que les méthodes d'accès DAV permettent à des clients distants de manipuler des fichiers sur le serveur, vous devez vous assurer que votre serveur est bien sécurisé avant d'activer mod_dav.

    Tout répertoire du serveur où DAV est activé doit être protégé par une procédure d'authentification. L'utilisation de l'authentification HTTP de base n'est pas recommandée. Vous devez utiliser au moins l'authentification HTTP à base de condensés qu'implémente le module mod_auth_digest. Pratiquement tous les clients WebDAV supportent cette méthode d'authentification. Vous pouvez aussi utiliser l'authentification de base sur une connexion où SSL est activé.

    Pour que mod_dav puisse manipuler des fichiers, il doit avoir des permissions en écriture sur les répertoires et les fichiers qui sont sous son contrôle ; en d'autre termes, c'est l'utilisateur et le groupe sous lesquels Apache s'exécute et définis par les directives User et Group qui doivent avoir les droits en écriture sur ces fichiers et répertoires. Les fichiers nouvellement créés appartiendront aussi à ces utilisateur et groupe. Par conséquent, il est important de contrôler l'accès à ce compte. Les répertoires DAV sont considérés comme privés du point de vue d'Apache, et la modification des fichiers qu'ils contiennent autrement que par l'intermédiaire d'Apache (par exemple par FTP ou par des outils du niveau du système de fichiers) ne doit pas être permise.

    mod_dav peut faire l'objet de plusieurs sortes d'attaques par déni de service. La directive LimitXMLRequestBody permet de limiter la quantité de mémoire consommée pour interpréter des requêtes DAV de grande taille. En outre, la directive DavDepthInfinity permet d'empêcher les requêtes PROPFIND concernant un répertoire de très grande taille de consommer de grandes quantités de mémoire. Un autre type d'attaque par déni de service peut aussi être mené par un client qui remplit simplement tout l'espace disque disponible avec des fichiers de très grande taille. Etant donné qu'il n'existe aucun moyen direct d'éviter ce genre d'attaque dans Apache, vous ne devez accorder des accès DAV qu'à des utilisateurs de confiance.

    top

    Configurations complexes

    Les requêtes ayant pour but de manipuler des fichiers dynamiques (scripts PHP, scripts CGI, etc...) en utilisant mod_dav sont courantes. Ce traitement n'est pas évident car une requête GET va toujours tenter d'exécuter le script, plutôt que de télécharger son contenu. Pour éviter cet inconvénient, une méthode possible consiste à faire correspondre deux URLs différentes au même contenu, l'une d'entre elles servant à lancer le script, alors que l'autre peut être utilisée pour le télécharger et le manipuler avec DAV.

    Alias "/phparea" "/home/gstein/php_files"
    Alias "/php-source" "/home/gstein/php_files"
    <Location "/php-source">
    Dav On
    ForceType text/plain
    </Location>

    Avec cette configuration, on peut utiliser http://example.com/phparea pour afficher le résultat de l'exécution des scripts PHP, et http://example.com/php-source pour les manipuler avec DAV.

    top

    Directive Dav

    Description:Active les méthodes HTTP WebDAV
    Syntaxe:Dav On|Off|nom fournisseur
    Défaut:Dav Off
    Contexte:répertoire
    Statut:Extension
    Module:mod_dav

    La directive Dav permet d'activer les méthodes HTTP WebDAV pour le conteneur condidéré :

    <Location "/foo">
        Dav On
    </Location>

    La valeur On est en fait un alias vers le fournisseur par défaut filesystem implémenté par le module mod_dav_fs. Notez que lorsque DAV est activé pour un conteneur, on ne peut pas le désactiver pour ses sous-conteneurs. Pour un exemple de configuration complet, reportez-vous à la section précédente.

    N'activez pas WebDAV tant que votre serveur n'est pas sécurisé. Si vous passez outre cette recommandation, tout le monde pourra enregistrer des fichiers sur votre système.
    top

    Directive DavDepthInfinity

    Description:Autorise les requêtes PROPFIND avec en-tête Depth: Infinity
    Syntaxe:DavDepthInfinity on|off
    Défaut:DavDepthInfinity off
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_dav

    La directive DavDepthInfinity permet d'autoriser le traitement des requêtes PROPFIND contenant l'en-tête Depth: Infinity. Par défaut, ce type de requête n'est pas autorisé, car il peut favoriser les attaques de type Déni de service.

    top

    Directive DavMinTimeout

    Description:Durée minimale pendant laquelle le serveur maintient un verrou sur une ressource DAV
    Syntaxe:DavMinTimeout secondes
    Défaut:DavMinTimeout 0
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_dav

    Lorsqu'un client demande le verrouillage d'une ressource DAV, il peut aussi spécifier une durée au bout de laquelle le verrou sera automatiquement supprimé par le serveur. Cette valeur ne constitue qu'une demande, et le serveur peut l'ignorer ou informer le client qu'il va utiliser une valeur arbitraire.

    La directive DavMinTimeout permet de spécifier, en secondes, la durée minimale de verrouillage à renvoyer au client. Les Répertoires Web de Microsoft présentent une durée par défaut de 120 secondes ; la directive DavMinTimeout permet de définir une valeur supérieure (par exemple 600 secondes), afin de réduire les risques de perte du verrou par le client suite à une surcharge du réseau.

    Exemple

    <Location "/MSWord">
        DavMinTimeout 600
    </Location>

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/directives.html.de0000644000000000000500000015562013523273316017654 0ustar rootsrc Verzeichnis der Direktiven - Apache HTTP Server Version 2.4
    <-

    Verzeichnis der Direktiven

    Verfügbare Sprachen:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Hier sind alle Apache-Direktiven aufgeführt, die in der Standard-Apache-Distribution verfügbar sind. Sie sind in einem einheitlichen Format beschrieben. Ein Glossar erläutert die in der Beschreibung verwendeten Begriffe.

    Außerdem existiert eine Kurzreferenz der Direktiven, welche zu jeder Direktive eine Zusammenfassung der Details enthält.

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 

    Verfügbare Sprachen:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Kommentare

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_asis.html.fr.utf80000644000000000000500000002227113412755316020212 0ustar rootsrc mod_asis - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_asis

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Envoie des fichiers contenant leurs propres en-têtes HTTP
    Statut:Base
    Identificateur de Module:asis_module
    Fichier Source:mod_asis.c

    Sommaire

    Ce module fournit le gestionnaire send-as-is qui permet au serveur HTTP Apache d'envoyer le document sans ajouter la plupart des en-têtes HTTP habituels.

    On peut l'utiliser pour envoyer tous types de données en provenance du serveur, y compris les redirections et autres réponses HTTP spéciales, sans devoir faire appel à un script CGI ou nph.

    Pour des raisons historiques, ce module traitera aussi tout fichier dont le type MIME est httpd/send-as-is.

    top

    Mode d'emploi

    Dans le fichier de configuration, associez les fichiers asis au gestionnaire send-as-is comme ceci :

    AddHandler send-as-is asis

    Le contenu de tout fichier possédant l'extension .asis sera envoyé par Apache httpd au client pratiquement tel quel. En particulier, les en-têtes HTTP seront déduits du fichier lui-même selon les règles du module mod_cgi, si bien qu'un fichier asis doit inclure des en-têtes valides, et utiliser l'en-tête CGI Status: pour déterminer le code de réponse HTTP. L'en-tête Content-Length: sera automatiquement inséré ou, s'il est déjà présent, corrigé par httpd.

    Voici un exemple de fichier dont le contenu est envoyé tel quel pour informer un client qu'un fichier a été déplacé.

    Status: 301 Ou se trouve cette URL maintenant
    Location: http://xyz.example.com/foo/bar.html
    Content-type: text/html

    <html>
    <head>
    <title>Mauvaises excuses</title>
    </head>
    <body>
    <h1>La merveilleuse page de Fred a été déplacée vers
    <a href="http://xyz.example.com/foo/bar.html">le site de Joe</a>.
    </h1>
    </body>
    </html>

    Notes :

    Le serveur ajoute systématiquement les en-têtes Date: et Server: aux données qu'il envoie au client, si bien qu'ils n'ont pas besoin d'être inclus dans le fichier. Le serveur n'ajoute pas d'en-tête Last-Modified, ce qu'il devrait probablement faire.

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy.html.fr.utf80000644000000000000500000043200513476744503020442 0ustar rootsrc mod_proxy - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_proxy

    Langues Disponibles:  en  |  fr  |  ja 

    Description:Serveur mandataire/passerelle multi-protocole
    Statut:Extension
    Identificateur de Module:proxy_module
    Fichier Source:mod_proxy.c

    Sommaire

    Avertissement

    N'activez pas la fonctionnalité de mandataire avec la directive ProxyRequests avant d'avoir sécurisé votre serveur. Les serveurs mandataires ouverts sont dangereux pour votre réseau, mais aussi pour l'Internet au sens large.

    mod_proxy et ses modules associés implémentent un mandataire/passerelle pour le serveur HTTP Apache, et supportent de nombreux protocoles courants, ainsi que plusieurs algorithmes de répartition de charge. Le support de protocoles et d'algorithmes de répartition de charge supplémentaires peut être assuré par des modules tiers.

    Un jeu de modules chargés dans le serveur permet de fournir les fonctionnalités souhaitées. Ces modules peuvent être inclus statiquement à la compilation, ou dynamiquement via la directive LoadModule. Ce jeu de module doit comporter :

    En outre, d'autres modules fournissent des fonctionnalités étendues. mod_cache et ses modules associés fournissent la mise en cache. Les directives SSLProxy* du module mod_ssl permettent de contacter des serveurs distants en utilisant le protocole SSL/TLS. Ces modules additionnels devront être chargés et configurés pour pouvoir disposer de ces fonctionnalités.

    top

    Mandataires directs et mandataires/passerelles inverses

    Le serveur HTTP Apache peut être configuré dans les deux modes mandataire direct et mandataire inverse (aussi nommé mode passerelle).

    Un mandataire direct standard est un serveur intermédiaire qui s'intercale entre le client et le serveur demandé. Pour obtenir un contenu hébergé par le serveur demandé, le client envoie une requête au mandataire en nommant le serveur demandé comme cible. Le mandataire extrait alors le contenu depuis le serveur demandé et le renvoie enfin au client. Le client doit être configuré de manière appropriée pour pouvoir utiliser le mandataire direct afin d'accéder à d'autres sites.

    L'accès à Internet depuis des clients situés derrière un pare-feu est une utilisation typique du mandataire direct. Le mandataire direct peut aussi utiliser la mise en cache (fournie par mod_cache) pour réduire la charge du réseau.

    La fonctionnalité de mandataire direct est activée via la directive ProxyRequests. Comme les mandataires directs permettent aux clients d'accéder à des sites quelconques via votre serveur et de dissimuler leur véritable origine, il est indispensable de sécuriser votre serveur de façon à ce que seuls les clients autorisés puissent accéder à votre serveur avant d'activer la fonctionnalité de mandataire direct.

    Un mandataire inverse (ou passerelle), quant à lui, apparaît au client comme un serveur web standard. Aucune configuration particulière du client n'est nécessaire. Le client adresse ses demandes de contenus ordinaires dans l'espace de nommage du mandataire inverse. Ce dernier décide alors où envoyer ces requêtes, et renvoie le contenu au client comme s'il l'hébergeait lui-même.

    L'accès d'utilisateurs depuis Internet vers un serveur situé derrière un pare-feu est une utilisation typique du mandataire inverse. On peut aussi utiliser les mandataires inverses pour mettre en oeuvre une répartition de charge entre plusieurs serveurs en arrière-plan, ou fournir un cache pour un serveur d'arrière-plan plus lent. Les mandataires inverses peuvent aussi tout simplement servir à rassembler plusieurs serveurs dans le même espace de nommage d'URLs.

    La fonctionnalité de mandataire inverse est activée via la directive ProxyPass ou le drapeau [P] de la directive RewriteRule. Il n'est pas nécessaire de définir ProxyRequests pour configurer un mandataire inverse.

    top

    Exemples simples

    Les exemples ci-dessous illustrent de manière très basique la mise en oeuvre de la fonctionnalité de mandataire et ne sont là que pour vous aider à démarrer. Reportez-vous à la documentation de chaque directive.

    Si en outre, vous désirez activer la mise en cache, consultez la documentation de mod_cache.

    Mandataire inverse

    ProxyPass "/foo" "http://foo.example.com/bar"
    ProxyPassReverse "/foo" "http://foo.example.com/bar"

    Mandataire direct

    ProxyRequests On
    ProxyVia On
    
    <Proxy "*">
      Require host internal.example.com
    </Proxy>
    top

    Accès via un gestionnaire

    Vous pouvez aussi forcer le traitement d'une requête en tant que requête de mandataire inverse en créant un gestionnaire de transfert approprié. Dans l'exemple suivant, toutes les requêtes pour des scripts PHP seront transmises au serveur FastCGI spécifié via un mandat inverse :

    Scripts PHP et mandataire inverse

    <FilesMatch "\.php$">
        # Les sockets Unix nécessitent une version 2.4.7 ou supérieure du
        # serveur HTTP Apache
        SetHandler  "proxy:unix:/path/to/app.sock|fcgi://localhost/"
    </FilesMatch>

    Cette fonctionnalité est disponible à partir de la version 2.4.10 du serveur HTTP Apache.

    top

    Workers

    Le mandataire gère la configuration et les paramètres de communication des serveurs originaux au sein d'objets nommés workers. Deux types de worker sont fournis : le worker par défaut du mandataire direct et le worker par défaut du mandataire inverse. Il est aussi possible de définir explicitement des workers supplémentaires.

    Les deux workers par défaut possèdent une configuration figée et seront utilisés si aucun autre worker ne correspond à la requête. Ils ne réutilisent pas les connexions et n'utilisent pas les connexions HTTP persistantes (Keep-Alive). En effet, les connexions TCP vers le serveur original sont fermées et ouvertes pour chaque requête.

    Les workers définis explicitement sont identifiés par leur URL. Ils sont en général définis via les directives ProxyPass ou ProxyPassMatch lorsqu'on les utilise dans le cadre d'un mandataire inverse :

    ProxyPass "/example" "http://backend.example.com" connectiontimeout=5 timeout=30

    Cette directive va créer un worker associé à l'URL du serveur original http://backend.example.com qui utilisera les valeurs de timeout données. Lorsqu'ils sont utilisés dans le cadre d'un mandataire direct, les workers sont en général définis via la directive ProxySet,

    ProxySet "http://backend.example.com" connectiontimeout=5 timeout=30

    ou encore via les directives Proxy et ProxySet :

    <Proxy "http://backend.example.com">
      ProxySet connectiontimeout=5 timeout=30
    </Proxy>

    L'utilisation de workers définis explicitement dans le mode mandataire direct n'est pas très courante, car les mandataires directs communiquent en général avec de nombreux serveurs originaux. La création explicite de workers pour certains serveurs originaux peut cependant s'avérer utile si ces serveurs sont très souvent sollicités. A leur niveau, les workers explicitement définis ne possèdent aucune notion de mandataire direct ou inverse. Ils encapsulent un concept de communication commun avec les serveurs originaux. Un worker créé via la directive ProxyPass pour être utilisé dans le cadre d'un mandataire inverse sera aussi utilisé dans le cadre d'un mandataire directe chaque fois que l'URL vers le serveur original correspondra à l'URL du worker, et vice versa.

    L'URL qui identifie un worker correspond à l'URL de son serveur original, y compris un éventuel chemin donné :

    ProxyPass "/examples" "http://backend.example.com/examples"
    ProxyPass "/docs" "http://backend.example.com/docs"

    Dans cet exemple, deux workers différents sont définis, chacun d'eux utilisant des configurations et jeux de connexions séparés.

    Partage de workers

    Le partage de workers intervient lorsque les URLs des workers s'entrecoupent, ce qui arrive lorsque l'URL d'un worker correspond au début de l'URL d'un autre worker défini plus loin dans le fichier de configuration. Dans l'exemple suivant,

    ProxyPass "/apps" "http://backend.example.com/" timeout=60
    ProxyPass "/examples" "http://backend.example.com/examples" timeout=10

    le second worker n'est pas vraiment créé. C'est le premier worker qui est en fait utilisé. L'avantage de ceci réside dans le fait qu'il n'existe qu'un seul jeu de connexions, ces dernières étant donc réutilisées plus souvent. Notez que tous les attributs de configuration définis explicitement pour le deuxième worker seront ignorés, ce qui sera journalisé en tant qu'avertissement. Ainsi, dans l'exemple ci-dessus, la valeur de timeout retenue pour l'URL /exemples sera 60, et non 10 !

    Si vous voulez empêcher le partage de workers, classez vos définitions de workers selon la longueur des URLs, de la plus longue à la plus courte. Si au contraire vous voulez favoriser ce partage, utilisez l'ordre de classement inverse. Voir aussi l'avertissement à propos de l'ordre de classement des directives ProxyPass.

    Les workers définis explicitement sont de deux sortes : workers directs et workers de répartition (de charge). Ils supportent de nombreux attributs de configuration importants décrits dans la directive ProxyPass. Ces mêmes attributs peuvent aussi être définis via la directive ProxySet.

    Le jeu d'options disponibles pour un worker direct dépend du protocole spécifié dans l'URL du serveur original. Les protocoles disponibles comprennent ajp, fcgi, ftp, http et scgi.

    Les workers de répartition sont des workers virtuels qui utilisent les workers directs, connus comme faisant partie de leurs membres, pour le traitement effectif des requêtes. Chaque répartiteur peut comporter plusieurs membres. Lorsqu'il traite une requête, il choisit un de ses membres en fonction de l'algorithme de répartition de charge défini.

    Un worker de répartition est créé si son URL de worker comporte balancer comme indicateur de protocole. L'URL du répartiteur permet d'identifier de manière unique le worker de répartition. La directive BalancerMember permet d'ajouter des membres au répartiteur.

    Résolution DNS pour les domaines originaux

    La résolution DNS s'effectue lorsque le socket vers le domaine original est créé pour la première fois. Lorsque la réutilisation des connexions est activée, chaque domaine d'arrière-plan n'est résolu qu'une seule fois pour chaque processus enfant, et cette résolution est mise en cache pour toutes les connexions ultérieures jusqu'à ce que le processus enfant soit recyclé. Ce comportement doit être pris en considération lorsqu'on planifie des tâches de maintenance du DNS impactant les domaines d'arrière-plan. Veuillez aussi vous reporter aux paramètres de la directive ProxyPass pour plus de détails à propos de la réutilisation des connexions.

    top

    Contrôler l'accès à votre mandataire

    Vous pouvez restreindre l'accès à votre mandataire via le bloc de contrôle <Proxy> comme dans l'exemple suivant :

    <Proxy "*">
      Require ip 192.168.0
    </Proxy>

    Pour plus de détails sur les directives de contrôle d'accès, voir la documentation du module mod_authz_host.

    Restreindre l'accès de manière stricte est essentiel si vous mettez en oeuvre un mandataire direct (en définissant la directive ProxyRequests à "on"). Dans le cas contraire, votre serveur pourrait être utilisé par n'importe quel client pour accéder à des serveurs quelconques, tout en masquant sa véritable identité. Ceci représente un danger non seulement pour votre réseau, mais aussi pour l'Internet au sens large. Dans le cas de la mise en oeuvre d'un mandataire inverse (en utilisant la directive ProxyPass avec ProxyRequests Off), le contrôle d'accès est moins critique car les clients ne peuvent contacter que les serveurs que vous avez spécifiés.

    Voir aussi la variable d'environnement Proxy-Chain-Auth.

    top

    Ralentissement au démarrage

    Si vous utilisez la directive ProxyBlock, les noms d'hôtes sont résolus en adresses IP puis ces dernières mises en cache au cours du démarrage à des fins de tests de comparaisons ultérieurs. Ce processus peut durer plusieurs secondes (ou d'avantage) en fonction de la vitesse à laquelle s'effectue la résolution des noms d'hôtes.

    top

    Mandataire en Intranet

    Un serveur mandataire Apache httpd situé à l'intérieur d'un Intranet doit faire suivre les requêtes destinées à un serveur externe à travers le pare-feu de l'entreprise (pour ce faire, définissez la directive ProxyRemote de façon à ce qu'elle fasse suivre le protocole concerné vers le mandataire du pare-feu). Cependant, lorsqu'il doit accéder à des ressources situées dans l'Intranet, il peut se passer du pare-feu pour accéder aux serveurs. A cet effet, la directive NoProxy permet de spécifier quels hôtes appartiennent à l'Intranet et peuvent donc être accédés directement.

    Les utilisateurs d'un Intranet ont tendance à oublier le nom du domaine local dans leurs requêtes WWW, et demandent par exemple "http://un-serveur/" au lieu de http://un-serveur.example.com/. Certains serveurs mandataires commerciaux acceptent ce genre de requête et les traitent simplement en utilisant un nom de domaine local implicite. Lorsque la directive ProxyDomain est utilisée et si le serveur est configuré comme mandataire, Apache httpd peut renvoyer une réponse de redirection et ainsi fournir au client l'adresse de serveur correcte, entièrement qualifiée. C'est la méthode à privilégier car le fichier des marque-pages de l'utilisateur contiendra alors des noms de serveurs entièrement qualifiés.

    top

    Ajustements relatifs au protocole

    Pour les cas où mod_proxy envoie des requêtes vers un serveur qui n'implémente pas correctement les connexions persistantes ou le protocole HTTP/1.1, il existe deux variables d'environnement qui permettent de forcer les requêtes à utiliser le protocole HTTP/1.0 avec connexions non persistantes. Elles peuvent être définies via la directive SetEnv.

    Il s'agit des variables force-proxy-request-1.0 et proxy-nokeepalive.

    <Location "/buggyappserver/">
      ProxyPass "http://buggyappserver:7001/foo/"
      SetEnv force-proxy-request-1.0 1
      SetEnv proxy-nokeepalive 1
    </Location>

    A partir de la version 2.4.26 du serveur HTTP Apache, la définition de la variable d'environnement "no-proxy" permet de désactiver mod_proxy dans le traitement de la requête courante. Cette variable doit être définie via la directive SetEnvIf car la directive SetEnv n'est pas évaluée assez tôt.

    top

    Corps de requêtes

    Certaines méthodes de requêtes comme POST comportent un corps de requête. Le protocole HTTP stipule que les requêtes qui comportent un corps doivent soit utiliser un codage de transmission fractionnée (chunked transfer encoding), soit envoyer un en-tête de requête Content-Length. Lorsqu'il fait suivre ce genre de requête vers le serveur demandé, mod_proxy_http s'efforce toujours d'envoyer l'en-tête Content-Length. Par contre, si la taille du corps est importante, et si la requête originale utilise un codage à fractionnement, ce dernier peut aussi être utilisé dans la requête montante. Ce comportement peut être contrôlé à l'aide de variables d'environnement. Ainsi, si elle est définie, la variable proxy-sendcl assure une compatibilité maximale avec les serveurs demandés en imposant l'envoi de l'en-tête Content-Length, alors que proxy-sendchunked diminue la consommation de ressources en imposant l'utilisation d'un codage à fractionnement.

    Dans certaines circonstances, le serveur doit mettre en file d'attente sur disque les corps de requêtes afin de satisfaire le traitement demandé des corps de requêtes. Par exemple, cette mise en file d'attente se produira si le corps original a été envoyé selon un codage morcelé (et possède une taille importante), alors que l'administrateur a demandé que les requêtes du serveur d'arrière-plan soient envoyées avec l'en-tête Content-Length ou en HTTP/1.0. Cette mise en file d'attente se produira aussi si le corps de la requête contient déjà un en-tête Content-Length, alors que le serveur est configuré pour filtrer les corps des requêtes entrantes.

    La directive LimitRequestBody ne s'applique qu'aux corps de requêtes que le serveur met en file d'attente sur disque.

    top

    En-têtes de requête du mandataire inverse

    Lorsqu'il est configuré en mode mandataire inverse (en utilisant par exemple la directive ProxyPass), mod_proxy_http ajoute plusieurs en-têtes de requête afin de transmettre des informations au serveur demandé. Ces en-têtes sont les suivants :

    X-Forwarded-For
    L'adresse IP du client.
    X-Forwarded-Host
    L'hôte d'origine demandé par le client dans l'en-tête de requête HTTP Host.
    X-Forwarded-Server
    Le nom d'hôte du serveur mandataire.

    Ces en-têtes doivent être utilisés avec précautions sur le serveur demandé, car ils contiendront plus d'une valeur (séparées par des virgules) si la requête originale contenait déjà un de ces en-têtes. Par exemple, vous pouvez utiliser %{X-Forwarded-For}i dans la chaîne de format du journal du serveur demandé pour enregistrer les adresses IP des clients originaux, mais il est possible que vous obteniez plusieurs adresses si la requête passe à travers plusieurs mandataires.

    Voir aussi les directives ProxyPreserveHost et ProxyVia directives, qui permettent de contrôler d'autres en-têtes de requête.

    Note : Si vous devez ajouter des en-têtes particuliers à la requête mandatée, utilisez la directive RequestHeader.

    top

    Directive BalancerGrowth

    Description:Nombre de membres supplémentaires pouvant être ajoutés après la configuration initiale
    Syntaxe:BalancerGrowth #
    Défaut:BalancerGrowth 5
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy
    Compatibilité:BalancerGrowth est disponible depuis la version 2.3.13 du serveur HTTP Apache

    Cette directive permet de définir le nombre de membres pouvant être ajoutés au groupe de répartition de charge préconfiguré d'un serveur virtuel. Elle n'est active que si le groupe a été préconfiguré avec un membre au minimum.

    top

    Directive BalancerInherit

    Description:Héritage des membres du groupes de répartition de charge du mandataire définis au niveau du serveur principal
    Syntaxe:BalancerInherit On|Off
    Défaut:BalancerInherit On
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy
    Compatibilité:Disponible à partir de la version 2.4.5 du serveur HTTP Apache.

    Cette directive permet d'attribuer au serveur virtuel courant l'héritage des membres de groupes de répartition de charge définis au niveau du serveur principal. Elle ne doit pas être activée si vous utilisez la fonctionnalité de modifications dynamiques du gestionnaire de répartition de charge (Balancer Manager) pour éviter des problèmes et des comportements inattendus.

    Les définitions au niveau du serveur principal constituent les définitions par défaut au niveau des serveurs virtuels.

    top

    Directive BalancerMember

    Description:Ajoute un membre à un groupe de répartition de charge
    Syntaxe:BalancerMember [balancerurl] url [clé=valeur [clé=valeur ...]]
    Contexte:répertoire
    Statut:Extension
    Module:mod_proxy
    Compatibilité:Disponible depuis la version 2.2 du serveur HTTP Apache.

    Cette directive permet d'ajouter un membre à un groupe de répartition de charge. Elle peut se trouver dans un conteneur <Proxy balancer://...>, et accepte tous les paramètres de paires clé/valeur que supporte la directive ProxyPass.

    La directive BalancerMember accepte un paramètre supplémentaire : loadfactor. Il s'agit du facteur de charge du membre - un nombre décimal entre 1.0 (valeur par défaut) et 100.0, qui définit la charge à appliquer au membre en question.

    L'argument balancerurl n'est requis que s'il ne se trouve pas dèjà dans la directive de conteneur <Proxy balancer://...>. Il correspond à l'URL d'un répartiteur de charge défini par une directive ProxyPass.

    La partie chemin de l'URL du répartiteur dans toute directive de conteneur <Proxy balancer://...> est ignorée.

    En particulier, le slash de fin de l'URL d'un BalancerMember doit être supprimé.

    top

    Directive BalancerPersist

    Description:Tente de conserver les changements effectués par le gestionnaire de répartition de charge après un redémarrage du serveur.
    Syntaxe:BalancerPersist On|Off
    Défaut:BalancerPersist Off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy
    Compatibilité:BalancerPersist n'est disponible qu'à partir de la version 2.4.4 du serveur HTTP Apache.

    Cette directive permet de conserver le contenu de l'espace mémoire partagé associé aux répartiteurs de charge et à leurs membres après un redémarrage du serveur. Ces modifications locales ne sont ainsi pas perdues lors des transitions d'état dues à un redémarrage.

    top

    Directive NoProxy

    Description:Serveurs, domaines ou réseaux auquels on se connectera directement
    Syntaxe:NoProxy domaine [domaine] ...
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy

    Cette directive n'a d'utilité que pour les serveurs mandataires Apache httpd au sein d'Intranets. La directive NoProxy permet de spécifier une liste de sous-réseaux, d'adresses IP, de serveurs et/ou de domaines séparés par des espaces. Une requête pour un serveur qui correspond à un ou plusieurs critères sera toujours servie par ce serveur directement, sans être redirigée vers le(s) serveur(s) mandataire(s) défini(s) par la directive ProxyRemote.

    Exemple

    ProxyRemote  "*"  "http://firewall.example.com:81"
    NoProxy         ".example.com" "192.168.112.0/21"

    Le type des arguments serveur de la directive NoProxy appartiennent à la liste suivante :

    Domaine

    Un domaine est ici un nom de domaine DNS partiellement qualifié précédé d'un point. Il représente une liste de serveurs qui appartiennent logiquement au même domaine ou à la même zonz DNS (en d'autres termes, les nom des serveurs se terminent tous par domaine).

    Exemple

    .com .example.org.

    Pour faire la distinction entre domaines et nom d'hôtes (des points de vue à la fois syntaxique et sémantique, un domaine DNS pouvant aussi avoir un enregistrement DNS de type A !), les domaines sont toujours spécifiés en les préfixant par un point.

    Note

    Les comparaisons de noms de domaines s'effectuent sans tenir compte de la casse, et les parties droites des Domaines sont toujours censées correspondre à la racine de l'arborescence DNS, si bien que les domaines .ExEmple.com et .example.com. (notez le point à la fin du nom) sont considérés comme identiques. Comme une comparaison de domaines ne nécessite pas de recherche DNS, elle est beaucoup plus efficace qu'une comparaison de sous-réseaux.

    Sous-réseau

    Un Sous-réseau est une adresse internet partiellement qualifiée sous forme numérique (quatre nombres séparés par des points), optionnellement suivie d'un slash et du masque de sous-réseau spécifiant le nombre de bits significatifs dans le Sous-réseau. Il représente un sous-réseau de serveurs qui peuvent être atteints depuis la même interface réseau. En l'absence de masque de sous-réseau explicite, il est sous-entendu que les digits manquants (ou caractères 0) de fin spécifient le masque de sous-réseau (Dans ce cas, le masque de sous-réseau ne peut être qu'un multiple de 8). Voici quelques exemples :

    192.168 ou 192.168.0.0
    le sous-réseau 192.168.0.0 avec un masque de sous-réseau implicite de 16 bits significatifs (parfois exprimé sous la forme 255.255.0.0)
    192.168.112.0/21
    le sous-réseau 192.168.112.0/21 avec un masque de sous-réseau implicite de 21 bits significatifs (parfois exprimé sous la forme255.255.248.0)

    Comme cas extrêmes, un Sous-réseau avec un masque de sous-réseau de 32 bits significatifs est équivalent à une adresse IP, alors qu'un Sous-réseau avec un masque de sous-réseau de 0 bit significatif (c'est à dire 0.0.0.0/0) est identique à la constante _Default_, et peut correspondre à toute adresse IP.

    Adresse IP

    Une Adresse IP est une adresse internet pleinement qualifiée sous forme numérique (quatre nombres séparés par des points). En général, cette adresse représente un serveur, mais elle ne doit pas nécessairement correspondre à un nom de domaine DNS.

    Exemple

    192.168.123.7

    Note

    Une Adresse IP ne nécessite pas de résolution DNS, et peut ainsi s'avérer plus efficace quant aux performances d'Apache.

    Nom de serveur

    Un Nom de serveur est un nom de domaine DNS pleinement qualifié qui peut être résolu en une ou plusieurs adresses IP par le service de noms de domaines DNS. Il représente un hôte logique (par opposition aux Domaines, voir ci-dessus), et doit pouvoir être résolu en une ou plusieurs adresses IP (ou souvent en une liste d'hôtes avec différentes adresses IP).

    Exemples

    prep.ai.example.edu
    www.example.org

    Note

    Dans de nombreuses situations, il est plus efficace de spécifier une adresse IP qu'un Nom de serveur car cela évite d'avoir à effectuer une recherche DNS. La résolution de nom dans Apache httpd peut prendre un temps très long lorsque la connexion avec le serveur de noms utilise une liaison PPP lente.

    Les comparaisons de Nom de serveur s'effectuent sans tenir compte de la casse, et les parties droites des Noms de serveur sont toujours censées correspondre à la racine de l'arborescence DNS, si bien que les domaines WWW.ExEmple.com et www.example.com. (notez le point à la fin du nom) sont considérés comme identiques.

    Voir aussi

    top

    Directive <Proxy>

    Description:Conteneur de directives s'appliquant à des ressources mandatées
    Syntaxe:<Proxy url-avec-jokers> ...</Proxy>
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy

    Les directives situées dans une section <Proxy> ne s'appliquent qu'au contenu mandaté concerné. Les jokers de style shell sont autorisés.

    Par exemple, les lignes suivantes n'autoriseront à accéder à un contenu via votre serveur mandataire que les hôtes appartenant à votre-reseau.example.com :

    <Proxy "*">
      Require host votre-reseau.example.com
    </Proxy>

    Dans l'exemple suivant, tous les fichiers du répertoire foo de example.com seront traités par le filtre INCLUDES lorsqu'ils seront envoyés par l'intermédiaire du serveur mandataire :

    <Proxy "http://example.com/foo/*">
      SetOutputFilter INCLUDES
    </Proxy>

    Différences avec la section de configuration Location

    Une URL d'arrière-plan sera concernée par le conteneur Proxy si elle commence par la url-avec-jokers, même si le dernier segment de chemin de la directive ne correspond qu'à un préfixe de segment dee chemin de l'URL d'arrière-plan. Par exemple, <Proxy "http://example.com/foo"> correspondra entre autres aux URLs http://example.com/foo, http://example.com/foo/bar, et http://example.com/foobar. La correspondance de l'URL finale diffère du comportement de la section <Location> qui, pour le cas de cette note, traitera le segment de chemin final comme s'il se terminait par un slash.

    Pour un contrôle plus fin de la correspondance des URL, voir la directive <ProxyMatch>.

    Voir aussi

    top

    Directive Proxy100Continue

    Description:Transmission du message "100-continue" au serveur d'origine
    Syntaxe:Proxy100Continue Off|On
    Défaut:Proxy100Continue On
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy
    Compatibilité:Disponible à partir de la version 2.4.39 du serveur HTTP Apache

    Cette directive permet de contrôler le transfert par le mandataire du message "100-continue" (Expect:ation) vers le serveur d'origine. Si elle est définie à "On", le serveur d'origine décidera lui-même si le corps de la requête HTTP doit être lu. Si elle est définie à "Off", le mandataire générera lui-même une réponse intermédiaire 100 Continue avant de transférer le corps de la requête.

    Contexte d'utilisation

    Cette option n'est utilisable qu'avec les mandataires HTTP gérés par mod_proxy_http.

    top

    Directive ProxyAddHeaders

    Description:Ajoute des informations à propos du mandataire aux en-têtes X-Forwarded-*
    Syntaxe:ProxyAddHeaders Off|On
    Défaut:ProxyAddHeaders On
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy
    Compatibilité:Disponible depuis la version 2.3.10

    Cette directive permet de passer au serveur d'arrière-plan des informations à propos du mandataire via les en-têtes HTTP X-Forwarded-For, X-Forwarded-Host et X-Forwarded-Server.

    Utilité

    Cette option n'est utile que dans le cas du mandat HTTP traité par mod_proxy_http.

    top

    Directive ProxyBadHeader

    Description:Détermine la manière de traiter les lignes d'en-tête incorrectes d'une réponse
    Syntaxe:ProxyBadHeader IsError|Ignore|StartBody
    Défaut:ProxyBadHeader IsError
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy

    La directive ProxyBadHeader permet de déterminer le comportement de mod_proxy lorsqu'il reçoit des lignes d'en-tête de réponse dont la syntaxe n'est pas valide (c'est à dire ne contenant pas de caractère ':') en provenance du serveur original. Les arguments disponibles sont :

    IsError
    Annule la requête et renvoie une réponse de code 502 (mauvaise passerelle). C'est le comportement par défaut.
    Ignore
    Traite les lignes d'en-tête incorrectes comme si elles n'avaient pas été envoyées.
    StartBody
    A la réception de la première ligne d'en-tête incorrecte, les autres en-têtes sont lus et ce qui reste est traité en tant que corps. Ceci facilite la prise en compte des serveurs d'arrière-plan bogués qui oublient d'insérer une ligne vide entre les en-têtes et le corps.
    top

    Directive ProxyBlock

    Description:Termes, serveurs ou domaines bloqués par le mandataire
    Syntaxe:ProxyBlock *|terme|serveur|domaine [terme|serveur|domaine] ...
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy

    La directive ProxyBlock permet de spécifier une liste de termes, serveurs et/ou domaines, séparés par des espaces. Les requêtes de documents HTTP, HTTPS, FTP vers des sites dont les noms contiennent des termes, noms de serveur ou domaine correspondants seront bloqués par le serveur mandataire. La module proxy va aussi tenter de déterminer les adresses IP des éléments de la liste qui peuvent correspondre à des noms d'hôtes au cours du démarrage, et les mettra en cache à des fins de comparaisons ultérieures. Ceci peut ralentir le démarrage du serveur.

    Exemple

    ProxyBlock "news.example.com" "auctions.example.com" "friends.example.com"

    Notez qu'example suffirait aussi pour atteindre ces sites.

    Hosts conviendrait aussi s'il était référencé par adresse IP.

    Notez aussi que

    ProxyBlock "*"

    bloque les connexions vers tous les sites.

    top

    Directive ProxyDomain

    Description:Nom de domaine par défaut pour les requêtes mandatées
    Syntaxe:ProxyDomain Domaine
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy

    Cette directive n'a d'utilité que pour les serveurs mandataires Apache httpd au sein d'un Intranet. La directive ProxyDomain permet de spécifier le domaine par défaut auquel le serveur mandataire apache appartient. Si le serveur reçoit une requête pour un hôte sans nom de domaine, il va générer une réponse de redirection vers le même hôte suffixé par le Domaine spécifié.

    Exemple

    ProxyRemote  "*"  "http://firewall.example.com:81"
    NoProxy         ".example.com" "192.168.112.0/21"
    ProxyDomain     ".example.com"
    top

    Directive ProxyErrorOverride

    Description:Outrepasser les pages d'erreur pour les contenus mandatés
    Syntaxe:ProxyErrorOverride On|Off
    Défaut:ProxyErrorOverride Off
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy

    Cette directive est utile pour les configurations de mandataires inverses, lorsque vous souhaitez que les pages d'erreur envoyées aux utilisateurs finaux présentent un aspect homogène. Elle permet aussi l'inclusion de fichiers (via les SSI de mod_include) pour obtenir le code d'erreur et agir en conséquence (le comportement par défaut afficherait la page d'erreur du serveur mandaté, alors que c'est le message d'erreur SSI qui sera affiché si cette directive est à "on").

    Cette directive n'affecte pas le traitement des réponses informatives (1xx), de type succès normal (2xx), ou de redirection (3xx).

    top

    Directive ProxyIOBufferSize

    Description:Détermine la taille du tampon interne de transfert de données
    Syntaxe:ProxyIOBufferSize octets
    Défaut:ProxyIOBufferSize 8192
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy

    La directive ProxyIOBufferSize permet d'ajuster la taille du tampon interne utilisé comme bloc-note pour les transferts de données entre entrée et sortie. La taille minimale est de 512 octets.

    Dans la plupart des cas, il n'y a aucune raison de modifier cette valeur.

    Si elle est utilisée avec AJP, cette directive permet de définir la taille maximale du paquet AJP en octets. Si la valeur spécifiée est supérieure à 65536, elle est corrigée et prend la valeur 65536. Si vous ne conservez pas la valeur par défaut, vous devez aussi modifier l'attribut packetSize de votre connecteur AJP du côté de Tomcat ! L'attribut packetSize n'est disponible que dans Tomcat 5.5.20+ et 6.0.2+.

    Il n'est normalement pas nécessaire de modifier la taille maximale du paquet. Des problèmes ont cependant été rapportés avec la valeur par défaut lors de l'envoi de certificats ou de chaînes de certificats.

    top

    Directive <ProxyMatch>

    Description:Conteneur de directives s'appliquant à des ressources mandatées correspondant à une expression rationnelle
    Syntaxe:<ProxyMatch regex> ...</ProxyMatch>
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy

    La directive <ProxyMatch> est identique à la directive <Proxy>, à l'exception qu'elle définit les URLs auxquelles elle s'applique en utilisant une expression rationnelle.

    A partir de la version 2.4.8, les groupes nommés et les références arrières sont extraits et enregistrés dans l'environnement avec leur nom en majuscules et préfixé par "MATCH_". Ceci permet de référencer des URLs dans des expressions ou au sein de modules comme mod_rewrite. Pour éviter toute confusion, les références arrières numérotées (non nommées) sont ignorées. Vous devez utiliser à la place des groupes nommés.

    <ProxyMatch "^http://(?<sitename>[^/]+)">
        Require ldap-group cn=%{env:MATCH_SITENAME},ou=combined,o=Example
    </ProxyMatch>

    Voir aussi

    top

    Directive ProxyMaxForwards

    Description:Nombre maximum de mandataires à travers lesquelles une requête peut être redirigée
    Syntaxe:ProxyMaxForwards nombre
    Défaut:ProxyMaxForwards -1
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy
    Compatibilité:Comportement par défaut modifié dans 2.2.7

    La directive ProxyMaxForwards permet de spécifier le nombre maximum de mandataires à travers lesquels une requête peut passer dans le cas où la la requête ne contient pas d'en-tête Max-Forwards. Ceci permet de se prémunir contre les boucles infinies de mandataires ou contre les attaques de type déni de service.

    Exemple

    ProxyMaxForwards 15

    Notez que la définition de la directive ProxyMaxForwards constitue une violation du protocole HTTP/1.1 (RFC2616), qui interdit à un mandataire de définir Max-Forwards si le client ne l'a pas fait lui-même. Les versions précédentes d'Apache httpd la définissaient systématiquement. Une valeur négative de ProxyMaxForwards, y compris la valeur par défaut -1, implique un comportement compatible avec le protocole, mais vous expose aux bouclages infinis.

    top

    Directive ProxyPass

    Description:Référencer des serveurs distants depuis l'espace d'URLs du serveur local
    Syntaxe:ProxyPass [chemin] !|url [clé=valeur [clé=valeur ...]] [nocanon] [interpolate] [noquery]
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy
    Compatibilité:Les sockets de style Unix (Unix Domain Socket - UDS) sont supportés à partir de la version 2.4.7 du serveur HTTP Apache

    Cette directive permet de référencer des serveurs distants depuis l'espace d'URLs du serveur local. Le serveur local n'agit pas en tant que mandataire au sens conventionnel, mais plutôt comme miroir du serveur distant. Le serveur local est souvent nommé mandataire inverse ou passerelle. L'argument chemin est le nom d'un chemin virtuel local ; url est une URL partielle pour le serveur distant et ne doit pas contenir de chaîne d'arguments.

    Il est fortement recommandé de revoir le concept de Worker avant d'aller plus loin.
    Cette directive n'est pas supportée au sein des sections <Directory>, <If> et <Files>.
    En général, la directive ProxyRequests doit être définie à off lorsqu'on utilise la directive ProxyPass.

    Les sockets de style Unix sont supportés à partir de la version 2.4.7 du serveur HTTP Apache ; pour utiliser cette fonctionnalité, il suffit d'utiliser une URL cible préfixée par unix:/path/lis.sock|. Par exemple, pour mandater HTTP et cibler l'UDS /home/www.socket, vous devez utiliser unix:/home/www.socket|http://localhost/whatever/.

    Note :Le chemin associé à l'URL unix: tient compte de la directive DefaultRuntimeDir.

    Lorsque cette directive est utilisée dans une section <Location>, le premier argument est omis et le répertoire local est obtenu à partir de l'argument de la directive <Location>. Il en est de même à l'intérieur d'une section <LocationMatch>, mais le résultat ne sera probablement pas celui attendu car ProxyPassReverse va interpréter l'expression rationnelle littéralement comme un chemin ; si besoin est dans ce cas, définissez la directive ProxyPassReverse en dehors de la section, ou dans une section <Location> séparée.

    Supposons que le serveur local a pour adresse http://example.com/ ; alors la ligne

    <Location "/mirror/foo/">
        ProxyPass "http://backend.example.com/"
    </Location>

    va convertir en interne toute requête pour http://example.com/mirror/foo/bar en une requête mandatée pour http://backend.example.com/bar.

    Si vous avez besoin d'un configuration de mandataire inverse plus souple, reportez-vous à la documentaion de la directive RewriteRule et son drapeau [P].

    La syntaxe alternative suivante est valide, bien qu'elle puisse induire une dégradation des performances lorsqu'elle est présente en très grand nombre. Elle possède l'avantage de permettre un contrôle dynamique via l'interface Balancer Manager :

    ProxyPass "/mirror/foo/" "http://backend.example.com/"

    Si le premier argument se termine par un slash /, il doit en être de même pour le second argument et vice versa. Dans le cas contraire, il risque de manquer des slashes nécessaires dans la requête résultante vers le serveur d'arrière-plan et les résulats ne seront pas ceux attendus.

    Le drapeau ! permet de soustraire un sous-répertoire du mandat inverse, comme dans l'exemple suivant :

    <Location "/mirror/foo/">
        ProxyPass "http://backend.example.com/"
    </Location>
    <Location "/mirror/foo/i">
        ProxyPass "!"
    </Location>
    ProxyPass "/mirror/foo/i" "!"
    ProxyPass "/mirror/foo" "http://backend.example.com"

    va mandater toutes les requêtes pour /mirror/foo vers backend.example.com, sauf les requêtes pour /mirror/foo/i.

    Mélanger plusieurs configurations ProxyPass dans différents contextes ne fonctionne pas :

    ProxyPass "/mirror/foo/i" "!"
    <Location "/mirror/foo/">
        ProxyPass "http://backend.example.com/"
    </Location>

    Dans ce cas, une requête pour /mirror/foo/i sera tout de même mandatée car c'est la directive ProxyPass de la section Location qui sera évaluée en premier. Le fait que la directive ProxyPass supporte les deux contextes serveur principal et répertoire ne signifie pas que sa portée et sa position dans le fichier de configuration va garantir une quelconque priorité et/ou chronologie de prise en compte.

    Ordre de classement des directives ProxyPass

    Les directives ProxyPass et ProxyPassMatch sont évaluées dans l'ordre de leur apparition dans le fichier de configuration. La première règle qui correspond s'applique. Vous devez donc en général classer les règles ProxyPass qui entrent en conflit de l'URL la plus longue à la plus courte. Dans le cas contraire, les règles situées après une règle dont l'URL correspond au début de leur propre URL seront ignorées. Notez que tout ceci est en relation avec le partage de workers.

    Chronologie de prise en compte des directives ProxyPass au sein des sections Locations

    On ne peut placer qu'une seule directive ProxyPass dans une section Location, et c'est la section la plus spécifique qui l'emportera.

    Exclusions et variable d'environnement no-proxy

    Les exclusions doivent se situer avant les directives ProxyPass générales. A partir de la version 2.4.26 du serveur HTTP Apache, la variable d'environnement "no-proxy" est une alternative aux exclusions et constitue le seul moyen de configurer une exclusion pour une directive ProxyPass dans le contexte d'une section Location. Cette variable doit être définie via la directive SetEnvIf car la directive SetEnv n'est pas évaluée assez tôt.

    ProxyPass clé=valeur Paramètres

    Depuis la version 2.1 du serveur HTTP Apache, mod_proxy supporte les groupements de connexions vers un serveur d'arrière-plan. Les connexions créées à la demande peuvent être enregistrées dans un groupement pour une utilisation ultérieure. La taille du groupe ainsi que d'autres caractéristiques peuvent être définies via la directive ProxyPass au moyen de paramètres clé=valeur dont la description fait l'objet des tableaux ci-dessous.

    Nombre maximum de connexions vers l'arrière-plan

    Par défaut, mod_proxy permet et met en réserve le nombre maximum de connexions pouvant être utilisées simultanément par le processus enfant concerné du serveur web. Le paramètre max permet de réduire cette valeur par défaut. Le jeu de connexions est maintenu au niveau de chaque processus enfant du serveur web, max et les autres réglages n'étant pas coordonnés entre ces différents processus, sauf bien entendu lorsqu'un seul processus enfant n'est autorisé par la configuration ou le MPM utilisé.

    Le paramètre ttl, quant à lui, permet de définir une durée de vie optionnelle ; les connexions qui n'ont pas été utilisées pendant au moins ttl secondes seront fermées. ttl permet aussi d'empêcher l'utilisation d'une connexion susceptible d'être fermée suite à une fin de vie de connexion persistante sur le serveur d'arrière-plan.

    Exemple

    ProxyPass "/example" "http://backend.example.com" max=20 ttl=120 retry=300
    Paramètres de worker (directive BalancerMember)
    Paramètre Défaut Description
    min 0 Nombre minimum d'entrées dans le pool de connexions, distinct du nombre de connexions effectif. La valeur par défaut ne doit être modifiée que dans des circonstances particulières où la mémoire associée aux connexions avec le serveur d'arrière-plan doit être préallouée ou réservée dans le tas.
    max 1...n Nombre maximum de connexions autorisées vers le serveur d'arrière-plan. La valeur par défaut correspond au nombre de threads par processus pour le MPM (Module Multi Processus) actif. La valeur sera toujours 1 pour le MPM Prefork, alors qu'elle dépendra de la définition de la directive ThreadsPerChild pour les autres MPMs.
    smax max Les entrées du pool de connexions conservées au delà de cette limite sont libérées au cours de certaines opérations si elles n'ont pas été utilisées au cours de leur durée de vie, définie par le paramètre ttl. Si l'entrée du pool de connexions est associée à une connexion, cette dernière sera fermée. La valeur par défaut ne doit être modifiée que dans des circonstances particulières où les entrées du pool de connexions et toutes connexions associées qui ont dépassé leur durée de vie doivent être libérées ou fermées de manière plus autoritaire.
    acquire - Cette clé permet de définir le délai maximum d'attente pour une connexion libre dans le jeu de connexions, en millisecondes. S'il n'y a pas de connexion libre dans le jeu, Apache httpd renverra l'état SERVER_BUSY au client.
    connectiontimeout timeout Délai d'attente d'une connexion en secondes. La durée en secondes pendant laquelle Apache httpd va attendre pour l'établissement d'une connexion vers le serveur d'arrière-plan. Le délai peut être spécifié en millisecondes en ajoutant le suffixe ms.
    disablereuse Off Vous pouvez utiliser cette clé pour forcer mod_proxy à fermer immédiatement une connexion vers le serveur d'arrière-plan après utilisation, et ainsi désactiver le jeu de connexions permanentes vers ce serveur. Ceci peut s'avérer utile dans des situations où un pare-feu situé entre Apache httpd et le serveur d'arrière-plan (quelque soit le protocole) interrompt des connexions de manière silencieuse, ou lorsque le serveur d'arrière-plan lui-même est accessible par rotation de DNS (round-robin DNS). Lorsque la réutilisation des connexions est activée, chaque domaine d'arrière-plan n'est résolu (via une requête DNS) qu'une seule fois par chaque processus enfant et mis en cache pour toutes les connexions ultérieures jusqu'au recyclage du processus concerné. Pour désactiver la réutilisation du jeu de connexions, définissez cette clé à On.
    enablereuse On Ce paramètre est utilisé par les gestionnaires de protocole pour lesquels la réutilisation des connexions est optionnelle (comme mod_proxy_fcgi). C'est le contraire du paramètre 'disablereuse' ci-dessus, et il est supporté par les versions 2.4.11 et supérieures du serveur HTTP Apache.
    flushpackets off Permet de définir si le module mandataire doit vider automatiquement le tampon de sortie après chaque tronçon de données. 'off' signifie que le tampon sera vidé si nécessaire ; 'on' signifie que le tampon sera vidé après chaque envoi d'un tronçon de données, et 'auto' que le tampon sera vidé après un délai de 'flushwait' millisecondes si aucune entrée n'est reçue. Actuellement, cette clé n'est supportée que par mod_proxy_ajp et mod_proxy_fcgi.
    flushwait 10 Le délai d'attente pour une entrée additionnelle, en millisecondes, avant le vidage du tampon en sortie dans le cas où 'flushpackets' est à 'auto'.
    iobuffersize 8192 Permet de définir la taille du tampon d'entrées/sorties du bloc-notes interne. Cette clé vous permet d'outrepasser la directive ProxyIOBufferSize pour un serveur cible spécifique. La valeur doit être au minimum 512 ou définie à 0 pour la valeur par défaut du système de 8192.
    responsefieldsize 8192 Contrôle la taille du tampon pour le champ de la réponse mandatée. Cette taille doit être au moins égale à la taille attendue du plus grand en-tête d'une réponse mandatée. Une valeur de 0 implique l'utilisation de la valeur par défaut du système, à savoir 8192 octets.
    Disponible à partir de la version 2.4.34 du serveur HTTP Apache.
    keepalive Off

    Cette clé doit être utilisée lorsque vous avez un pare-feu entre Apache httpd et le serveur d'arrière-plan, et si ce dernier tend à interrompre les connexions inactives. Cette clé va faire en sorte que le système d'exploitation envoie des messages KEEP_ALIVE sur chacune des connexions inactives et ainsi éviter la fermeture de la connexion par le pare-feu. Pour conserver les connexions persistantes, definissez cette propriété à On.

    La fréquence de vérification des connexions TCP persistantes initiale et subséquentes dépend de la configuration globale de l'OS, et peut atteindre 2 heures. Pour être utile, la fréquence configurée dans l'OS doit être inférieure au seuil utilisé par le pare-feu.

    lbset 0 Définit le groupe de répartition de charge dont le serveur cible est membre. Le répartiteur de charge va essayer tous les membres d'un groupe de répartition de charge de numéro inférieur avant d'essayer ceux dont le groupe possède un numéro supérieur.
    ping 0 Avec la clé Ping, le serveur web va "tester" la connexion vers le serveur d'arrière-plan avant de transmettre la requête. Avec AJP, mod_proxy_ajp envoie une requête CPING sur la connexion ajp13 (implémenté sur Tomcat 3.3.2+, 4.1.28+ et 5.0.13+). Avec HTTP, mod_proxy_http envoie 100-Continue au serveur d'arrière-plan (seulement avecHTTP/1.1 - pour les serveurs d'arrière-plan non HTTP/1.1, cette clé ne produit aucun effet). Dans les deux cas, ce paramètre correspond au délai en secondes pour l'attente de la réponse. Cette fonctionnalité a été ajoutée pour éviter les problèmes avec les serveurs d'arrière-plan bloqués ou surchargés. Le trafic réseau peut s'en trouver augmenté en fonctionnement normal, ce qui peut poser problème, mais peut s'en trouver diminué dans les cas où les noeuds de cluster sont arrêtés ou surchargés. Le délai peut aussi être défini en millisecondes en ajoutant le suffixe ms.
    receivebuffersize 0 Définit la taille du tampon réseau explicite (TCP/IP) pour les connexions mandatées. Cette clé vous permet d'outrepasser la directive ProxyReceiveBufferSize pour un serveur cible spécifique. Sa valeur doit être au minimum 512 ou définie à 0 pour la valeur par défaut du système.
    redirect - Route pour la redirection du serveur cible. Cette valeur est en général définie dynamiquement pour permettre une suppression sécurisée du noeud du cluster. Si cette clé est définie, toutes les requêtes sans identifiant de session seront redirigées vers le membre de groupe de répartition de charge dont la route correspond à la valeur de la clé.
    retry 60 Délai entre deux essais du serveur cible du jeu de connexions en secondes. Si le serveur cible du jeu de connexions vers le serveur d'arrière-plan est dans un état d'erreur, Apache httpd ne redirigera pas de requête vers ce serveur avant l'expiration du délai spécifié. Ceci permet d'arrêter le serveur d'arrière-plan pour maintenance, et de le remettre en ligne plus tard. Une valeur de 0 implique de toujours essayer les serveurs cibles dans un état d'erreur sans délai.
    route - La route du serveur cible lorsqu'il est utilisé au sein d'un répartiteur de charge. La route est une valeur ajoutée à l'identifiant de session.
    status - Valeur constituée d'une simple lettre et définissant l'état initial de ce serveur cible.
    D: le serveur cible est désactivé et n'accepte aucune requête.
    S: le serveur cible est arrêté.
    I: le serveur cible est en mode "erreurs ignorées", et sera toujours considéré comme disponible.
    R: Le serveur cible sert de remplaçant à chaud. Lorsqu'un serveur cible avec un lbset donné est inutilisable (maintenance, arrêt, en erreur, etc...), un serveur de remplacement à chaud libre de même lbset sera utilisé à sa place. Les remplaçants à chaud permettent de s'assurer qu'un nombre déterminé de serveurs cibles sera toujours disponible pour un répartiteur de charge.
    H: le serveur cible est en mode d'attente et ne sera utilisé que si aucun autre serveur ou remplaçant à chaud n'est disponible dans le jeu de serveurs cibles.
    E: le serveur cible est en erreur.
    N: le serveur cible est en mode vidage, n'acceptera que les sessions persistantes qui lui appartiennent, et refusera toutes les autres requêtes.
    Une valeur d'état peut être définie (ce qui correspond au comportement par défaut) en préfixant la valeur par '+', ou annulée en préfixant la valeur par '-'. Ainsi, la valeur 'S-E' définit l'état de ce serveur cible à "arrêté" et supprime le drapeau "en-erreur".
    timeout ProxyTimeout Délai d'attente de la connexion en secondes. Le nombre de secondes pendant lesquelles Apache httpd attend l'envoi de données vers le serveur d'arrière-plan.
    ttl - Durée de vie des connexions inactives et des entrées du pool de connexions associées en secondes. Une fois cette limite atteinte, une connexion ne sera pas réutilisée ; elle sera fermée après un délai variable.
    flusher flush

    Nom du fournisseur utilisé par mod_proxy_fdpass. Voir la documentation de ce module pour plus de détails.

    secret -

    Le mot de passe utilisé par mod_proxy_ajp. Voir la documentation de ce module pour plus de détails.

    upgrade WebSocket

    Le protocol accepté par mod_proxy_wstunnel dans l'en-tête Upgrade. Voir la documentation de ce module pour plus de détails.

    Si l'URL de la directive Proxy débute par balancer:// (par exemple: balancer://cluster, toute information relative au chemin est ignorée), alors un serveur cible virtuel ne communiquant pas réellement avec le serveur d'arrière-plan sera créé. Celui-ci sera en fait responsable de la gestion de plusieurs serveurs cibles "réels". Dans ce cas, un jeu de paramètres particuliers s'applique à ce serveur cible virtuel. Voir mod_proxy_balancer pour plus d'informations à propos du fonctionnement du répartiteur de charge.

    Paramètres du répartiteur
    Paramètre Défaut Description
    lbmethod byrequests Méthode de répartition de charge utilisée. Permet de sélectionner la méthode de planification de la répartition de charge à utiliser. La valeur est soit byrequests, pour effectuer un décompte de requêtes pondérées, soit bytraffic, pour effectuer une répartition en fonction du décompte des octets transmis, soit bybusyness, pour effectuer une répartition en fonction des requêtes en attente. La valeur par défaut est byrequests.
    maxattempts 1 de moins que le nombre de workers, ou 1 avec un seul worker Nombre maximum d'échecs avant abandon.
    nofailover Off Si ce paramètre est défini à On, la session va s'interrompre si le serveur cible est dans un état d'erreur ou désactivé. Définissez ce paramètre à On si le serveur d'arrière-plan ne supporte pas la réplication de session.
    stickysession - Nom de session persistant du répartiteur. La valeur est généralement du style JSESSIONID ou PHPSESSIONID, et dépend du serveur d'application d'arrière-plan qui supporte les sessions. Si le serveur d'application d'arrière-plan utilise un nom différent pour les cookies et les identifiants codés d'URL (comme les conteneurs de servlet), séparez-les par le caractère '|'. La première partie contient le cookie et la seconde le chemin.
    Disponible depuis la version 2.4.4 du serveur HTTP Apache.
    stickysessionsep "." Définit le caractère de séparation dans le cookie de session. Certains serveurs d'application d'arrière-plan n'utilisent pas le caractère '.' comme séparateur. Par exemple le serveur Oracle Weblogic utilise le caractère '!'. Cette option permet d'attribuer au caractère de séparation la valeur appropriée. Si elle est définie à 'Off', aucun caractère de séparation n'est utilisé.
    scolonpathdelim Off Si ce paramètre est défini à On, le caractère ';' sera utilisé comme séparateur de chemin de session persistante additionnel. Ceci permet principalement de simuler le comportement de mod_jk lorsqu'on utilise des chemins du style JSESSIONID=6736bcf34;foo=aabfa.
    timeout 0 Délai du répartiteur en secondes. Si ce paramètre est défini, sa valeur correspond à la durée maximale d'attente pour un serveur cible libre. Le comportement par défaut est de ne pas attendre.
    failonstatus - Une liste de codes d'état HTTP séparés par des virgules. Si ce paramètre est présent, le worker se mettra en erreur si le serveur d'arrière-plan renvoie un des codes d'état spécifiés dans la liste. La récupération du worker s'effectue comme dans le cas des autres erreurs de worker.
    failontimeout Off Si ce paramètre est défini à "On", un délai d'attente dépassé en entrée/sortie après envoi d'une requête au serveur d'arrière-plan va mettre le processus en état d'erreur. La sortie de cet état d'erreur se passe de la même façon que pour les autres erreurs.
    Disponible à partir de la version 2.4.5 du serveur HTTP Apache.
    nonce <auto> Le nombre à usage unique de protection utilisé dans la page de l'application balancer-manager. Par défaut, la protection de la page est assurée par un nombre à usage unique automatique à base d'UUID. Si une valeur est précisée, elle sera utilisée comme nombre à usage unique. La valeur None désactive la vérification du nombre à usage unique.

    Note

    En plus du nombre à usage unique, la page de l'application balancer-manager peut être protégée par une ACL.

    growth 0 Nombre de membres supplémentaires que l'on peut ajouter à ce répartiteur en plus de ceux définis au niveau de la configuration.
    forcerecovery On Force la relance immédiate de tous les membres sans tenir compte de leur paramètre retry dans le cas où ils sont tous en état d'erreur. Il peut cependant arriver qu'un membre déjà surchargé entre dans une situation critique si la relance de tous les membres est forcée sans tenir compte du paramètre retry de chaque membre. Dans ce cas, définissez ce paramètre à Off.
    Disponible depuis la version 2.4.2 du serveur HTTP Apache.

    Exemple de configuration d'un répartiteur de charge

    ProxyPass "/special-area" "http://special.example.com" smax=5 max=10
    ProxyPass "/" "balancer://mycluster/" stickysession=JSESSIONID|jsessionid nofailover=On
    <Proxy "balancer://mycluster">
        BalancerMember "ajp://1.2.3.4:8009"
        BalancerMember "ajp://1.2.3.5:8009" loadfactor=20
        # Less powerful server, don't send as many requests there,
        BalancerMember "ajp://1.2.3.6:8009" loadfactor=5
    </Proxy>

    La définition de remplaçants à chaud permet de s'assurer qu'un nombre déterminé de serveurs sera toujours disponible dans le jeu de serveurs cibles :

    ProxyPass "/" "balancer://sparecluster/"
    <Proxy balancer://sparecluster>
        BalancerMember ajp://1.2.3.4:8009
        BalancerMember ajp://1.2.3.5:8009
        # Les serveurs ci-dessous sont des remplaçants à chaud. Pour chaque serveur
        # ci-dessus qui viendrait à être inutilisable (maintenance, arrêt, non
        # contactable, en erreur, etc...), un de ces remplaçants à chaud prendra sa
        # place. Deux serveurs seront toujours disponibles pour traiter une requête
        # (à moins qu'un ou plusieurs remplaçant à chaud soit lui aussi
        # indisponible).
        BalancerMember ajp://1.2.3.6:8009 status=+R
        BalancerMember ajp://1.2.3.7:8009 status=+R
    </Proxy>

    Configuration d'un serveur cible de réserve qui ne sera utilisé que si aucun autre serveur cible ou remplaçant à chaud n'est disponible dans le jeu de serveurs cibles :

    ProxyPass "/" "balancer://hotcluster/"
    <Proxy "balancer://hotcluster">
        BalancerMember "ajp://1.2.3.4:8009" loadfactor=1
        BalancerMember "ajp://1.2.3.5:8009" loadfactor=2.25
        # The server below is on hot standby
        BalancerMember "ajp://1.2.3.6:8009" status=+H
        ProxySet lbmethod=bytraffic
    </Proxy>

    Mots-clés additionnels de ProxyPass

    Normalement, mod_proxy va mettre sous leur forme canonique les URLs traitées par ProxyPass. Mais ceci peut être incompatible avec certains serveurs d'arrière-plan, et en particulier avec ceux qui utilisent PATH_INFO. Le mot-clé optionnel nocanon modifie ce comportement et permet de transmettre le chemin d'URL sous sa forme brute au serveur d'arrière-plan. Notez que ceci peut affecter la sécurité de votre serveur d'arrière-plan, car la protection limitée contre les attaques à base d'URL que fournit le mandataire est alors supprimée.

    Par défaut, mod_proxy inclut la chaîne de paramètres lors de la génération de la variable d'environnement SCRIPT_FILENAME. Le mot-clé optionnel noquery (disponible à partir de la version 2.4.1) permet d'exclure cette chaîne.

    Lorsque la directive ProxyPass est utilisée à l'intérieur d'une section <Location>, le premier argument est omis et le répertoire local est obtenu à partir de la section <Location>. Il en sera de même dans une section <LocationMatch> ; cependant, ProxyPass n'interprète pas les expressions rationnelles, et il sera ici nécessaire d'utiliser la directive ProxyPassMatch à la place.

    Cette directive ne peut pas être placée dans une section <Directory> ou <Files>.

    Si vous avez besoin d'un configuration de mandataire inverse plus souple, reportez-vous à la documentaion de la directive RewriteRule et son drapeau [P].

    Le mot-clé optionnel interpolate, en combinaison avec la directive ProxyPassInterpolateEnv, permet à ProxyPass d'interpoler les variables d'environnement à l'aide de la syntaxe ${VARNAME}. Notez que de nombreuses variables d'environnement standard dérivées de CGI n'existeront pas lorsque l'interpolation se produit ; vous devrez alors encore avoir avoir recours à mod_rewrite pour des règles complexes. Notez aussi que l'interpolation n'est supportée dans la partie protocole/hostname/port d'une URL que pour les variables qui sont disponibles au moment où la directive est interprétée (comme pour la directive Define). La détermination dynamique de ces champs peut être effectuée à l'aide de mod_rewrite, et l'exemple suivant décrit comment utiliser mod_rewrite pour définir dynamiquement le protocole à http ou https :

    RewriteEngine On
    
    RewriteCond "%{HTTPS}" =off
    RewriteRule "". "-" [E=protocol:http]
    RewriteCond "%{HTTPS}" =on
    RewriteRule "." "-" [E=protocol:https]
    
    RewriteRule "^/mirror/foo/(.*)" "%{ENV:protocol}://backend.example.com/$1" [P]
    ProxyPassReverse  "/mirror/foo/" "http://backend.example.com/"
    ProxyPassReverse  "/mirror/foo/" "https://backend.example.com/"
    top

    Directive ProxyPassInherit

    Description:Héritage des directives ProxyPass définies au niveau du serveur principal
    Syntaxe:ProxyPassInherit On|Off
    Défaut:ProxyPassInherit On
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy
    Compatibilité:Disponible à partir de la version 2.4.5 du serveur HTTP Apache.

    Cette directive permet à un serveur virtuel d'hériter des directives ProxyPass définies au niveau du serveur principal. Si vous utilisez la fonctionnalité de modifications dynamiques du Balancer Manager, cette directive peut causer des problèmes et des comportements inattendus et doit donc être désactivée.

    Les valeurs définies au niveau du serveur principal constituent les valeurs par défaut pour tous les serveurs virtuels.

    La désactivation de ProxyPassInherit désactive aussi la directive BalancerInherit.

    top

    Directive ProxyPassInterpolateEnv

    Description:Active l'interpolation des variables d'environnement dans les configurations de mandataires inverses
    Syntaxe:ProxyPassInterpolateEnv On|Off
    Défaut:ProxyPassInterpolateEnv Off
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy
    Compatibilité:Disponible depuis la version 2.2.9 d'Apache

    Cette directive, ainsi que l'argument interpolate des directives ProxyPass, ProxyPassReverse, ProxyPassReverseCookieDomain et ProxyPassReverseCookiePath, permet de configurer dynamiquement un mandataire inverse à l'aide de variables d'environnement, ces dernières pouvant être définies par un autre module comme mod_rewrite. Elle affecte les directives ProxyPass, ProxyPassReverse, ProxyPassReverseCookieDomain, et ProxyPassReverseCookiePath, en leur indiquant de remplacer la chaîne ${nom_var} dans les directives de configuration par la valeur de la variable d'environnement nom_var (si l'option interpolate est spécifiée).

    La partie protocole/hostname/port de ProxyPass peut contenir des variables, mais seulement celles qui sont accessibles au moment où la directive est interprétée (similairement à la directive Define). Pour tous les autres cas, utilisez plutôt mod_rewrite.

    Avertissement concernant les performances

    Laissez cette directive à off, à moins que vous n'en ayez réellemnt besoin ! Par exemple, ajouter des variables à ProxyPass peut entraîner l'utilisation des serveurs d'arrière-plan de mod_proxy configurés par défaut, et ceux-ci ne permettent pas un réglage fin comme la réutilisation des connexions, entre autres...).

    top

    Directive ProxyPassMatch

    Description:Fait correspondre des serveurs distants dans l'espace d'URL du serveur local en utilisant des expressions rationnelles
    Syntaxe:ProxyPassMatch [regex] !|url [clé=valeur [clé=valeur ...]]
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy

    Cette directive est identique à la directive ProxyPass, mais fait usage des expressions rationnelles, au lieu d'une simple comparaison de préfixes. L'expression rationnelle spécifiée est comparée à l'url, et si elle correspond, le serveur va substituer toute correspondance entre parenthèses dans la chaîne donnée et l'utiliser comme nouvelle url.

    Note : Cette directive ne peut pas être utilisée dans un contexte de niveau répertoire.

    Supposons que le serveur local a pour adresse http://example.com/ ; alors

    ProxyPassMatch "^(/.*\.gif)$" "http://backend.example.com/$1"

    va provoquer la conversion interne de la requête locale http://example.com/foo/bar.gif en une requête mandatée pour http://backend.example.com/foo/bar.gif.

    Note

    L'argument URL doit pouvoir être interprété en tant qu'URL avant les substitutions d'expressions rationnelles (et doit aussi l'être après). Ceci limite les correspondances que vous pouvez utiliser. Par exemple, si l'on avait utilisé

            ProxyPassMatch "^(/.*\.gif)$"
    	"http://backend.example.com:8000$1"

    dans l'exemple précédent, nous aurions provoqué une erreur de syntaxe au démarrage du serveur. C'est une bogue (PR 46665 dans ASF bugzilla), et il est possible de la contourner en reformulant la correspondance :

    ProxyPassMatch "^/(.*\.gif)$" "http://backend.example.com:8000/$1"

    Le drapeau ! vous permet de ne pas mandater un sous-répertoire donné.

    Dans une section <LocationMatch>, le premier argument est omis et l'expression rationnelle est obtenue à partir de la directive <LocationMatch>.

    Si vous avez besoin d'une configuration du mandataire inverse plus flexible, voyez la directive RewriteRule avec le drapeau [P].

    Substitution par défaut

    Lorsque le paramètre URL n'utilise pas de références arrières dans l'expression rationnelle, l'URL originale sera ajoutée au paramètre URL.

    Avertissement à propos de la sécurité

    Lors de la construction de l'URL cible de la règle, il convient de prendre en compte l'impact en matière de sécurité qu'aura le fait de permettre au client d'influencer le jeu d'URLs pour lesquelles votre serveur agira en tant que mandataire. Assurez-vous que la partie protocole://nom-serveur de l'URL soit fixe, ou ne permette pas au client de l'influencer induement.

    top

    Directive ProxyPassReverse

    Description:Ajuste l'URL dans les en-têtes de la réponse HTTP envoyée par un serveur mandaté en inverse
    Syntaxe:ProxyPassReverse [chemin] url [interpolate]
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy

    Cette directive permet de faire en sorte qu'Apache httpd ajuste l'URL dans les en-têtes Location, Content-Location et URI des réponses de redirection HTTP. Ceci est essentiel lorsqu'Apache httpd est utilisé en tant que mandataire inverse (ou passerelle), afin d'éviter de court-circuiter le mandataire inverse suite aux redirections HTTP sur le serveur d'arrière-plan qui restent derrière le mandataire inverse.

    Seuls les en-têtes de réponse HTTP spécialement mentionnés ci-dessus seront réécrits. Apache httpd ne réécrira ni les autres en-têtes de réponse, ni par défaut les références d'URLs dans les pages HTML. Cela signifie que dans le cas où un contenu mandaté contient des références à des URLs absolues, elles court-circuiteront le mandataire. Pour réécrire un contenu HTML afin qu'il corresponde au mandataire, vous devez charger et activer le module mod_proxy_html.

    chemin est le nom d'un chemin virtuel local. url est une URL partielle pour le serveur distant. Ces paramètres s'utilisent de la même façon qu'avec la directive ProxyPass.

    Supposons par exemple que le serveur local a pour adresse http://example.com/ ; alors

    ProxyPass         "/mirror/foo/" "http://backend.example.com/"
    ProxyPassReverse  "/mirror/foo/" "http://backend.example.com/"
    ProxyPassReverseCookieDomain  "backend.example.com" "public.example.com"
    ProxyPassReverseCookiePath  "/"  "/mirror/foo/"

    ne va pas seulement provoquer la conversion interne d'une requête locale pour http://example.com/mirror/foo/bar en une requête mandatée pour http://backend.example.com/bar (la fonctionnalité fournie par ProxyPass). Il va aussi s'occuper des redirections que le serveur backend.example.com envoie lorsqu'il redirige http://backend.example.com/bar vers http://backend.example.com/quux. Apache httpd corrige ceci en http://example.com/mirror/foo/quux avant de faire suivre la redirection HTTP au client. Notez que le nom d'hôte utilisé pour construire l'URL est choisi en respectant la définition de la directive UseCanonicalName.

    Notez que la directive ProxyPassReverse peut aussi être utilisée en conjonction avec la fonctionnalité de mandataire (RewriteRule ... [P]) du module mod_rewrite, car elle ne dépend pas d'une directive ProxyPass correspondante.

    Le mot-clé optionnel interpolate, en combinaison avec la directive ProxyPassInterpolateEnv, permet l'interpolation des variables d'environnement spécifiées en utilisant le format ${VARNAME} Notez que l'interpolation n'est pas supportée dans la partie protocole d'une URL.

    Lorsque cette directive est utilisée dans une section <Location>, le premier argument est omis et le répertoire local est obtenu à partir de l'argument de la directive <Location>. Il en est de même à l'intérieur d'une section <LocationMatch>, mais le résultat ne sera probablement pas celui attendu car ProxyPassReverse va interpréter l'expression rationnelle littéralement comme un chemin ; si besoin est dans ce cas, définissez la directive ProxyPassReverse en dehors de la section, ou dans une section <Location> séparée.

    Cette directive ne peut pas être placée dans une section <Directory> ou <Files>.

    top

    Directive ProxyPassReverseCookieDomain

    Description:Ajuste la chaîne correspondant au domaine dans les en-têtes Set-Cookie en provenance d'un serveur mandaté
    Syntaxe:ProxyPassReverseCookieDomain domaine-interne domaine-public [interpolate]
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy

    L'utilisation de cette directive est similaire à celle de la directive ProxyPassReverse, mais au lieu de réécrire des en-têtes qui contiennent des URLs, elle réécrit la chaîne correspondant au domaine dans les en-têtes Set-Cookie.

    top

    Directive ProxyPassReverseCookiePath

    Description:Ajuste la chaîne correspondant au chemin dans les en-têtes Set-Cookie en provenance d'un serveur mandaté
    Syntaxe:ProxyPassReverseCookiePath chemin-interne chemin-public [interpolate]
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy

    Cette directive s'avère utile en conjonction avec la directive ProxyPassReverse dans les situations où les chemins d'URL d'arrière-plan correspondent à des chemins publics sur le mandataire inverse. Cette directive permet de réécrire la chaîne path dans les en-têtes Set-Cookie. Si le début du chemin du cookie correspond à chemin-interne, le chemin du cookie sera remplacé par chemin-public.

    Dans l'exemple fourni avec la directive ProxyPassReverse, la directive :

    ProxyPassReverseCookiePath  "/"  "/mirror/foo/"

    va réécrire un cookie possédant un chemin d'arrière-plan / (ou /example ou en fait tout chemin) en /mirror/foo/..

    top

    Directive ProxyPreserveHost

    Description:Utilise l'en-tête de requête entrante Host pour la requête du mandataire
    Syntaxe:ProxyPreserveHost On|Off
    Défaut:ProxyPreserveHost Off
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy
    Compatibilité:Utilisable dans un contexte de répertoire depuis la version 2.3.3.

    Lorsqu'elle est activée, cette directive va transmettre l'en-tête Host: de la requête entrante vers le serveur mandaté, au lieu du nom d'hôte spécifié par la directive ProxyPass.

    Cette directive est habituellement définie à Off. Elle est principalement utile dans les configurations particulières comme l'hébergement virtuel mandaté en masse à base de nom, où l'en-tête Host d'origine doit être évalué par le serveur d'arrière-plan.

    top

    Directive ProxyReceiveBufferSize

    Description:Taille du tampon réseau pour les connexions mandatées HTTP et FTP
    Syntaxe:ProxyReceiveBufferSize octets
    Défaut:ProxyReceiveBufferSize 0
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy

    La directive ProxyReceiveBufferSize permet de spécifier une taille de tampon réseau explicite (TCP/IP) pour les connexions mandatées HTTP et FTP, afin d'améliorer le débit de données. Elle doit être supérieure à 512 ou définie à 0 pour indiquer que la taille de tampon par défaut du système doit être utilisée.

    Exemple

    ProxyReceiveBufferSize 2048
    top

    Directive ProxyRemote

    Description:Mandataire distant à utiliser pour traiter certaines requêtes
    Syntaxe:ProxyRemote comparaison serveur-distant
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy

    Cette directive permet de définir des mandataires distants pour ce mandataire. comparaison est soit le nom d'un protocole que supporte le serveur distant, soit une URL partielle pour laquelle le serveur distant devra être utilisé, soit * pour indiquer que le serveur distant doit être utilisé pour toutes les requêtes. serveur-distant est une URL partielle correspondant au serveur distant. Syntaxe :

    serveur-distant = protocole://nom-serveur[:port]

    protocole est effectivement le protocole à utiliser pour communiquer avec le serveur distant ; ce module ne supporte que http et https. Lorsqu'on utilise https, les requêtes sont redirigées par le mandataire distant en utilisant la méthode HTTP CONNECT.

    Exemple

    ProxyRemote "http://goodguys.example.com/" "http://mirrorguys.example.com:8000"
    ProxyRemote "*" "http://cleverproxy.localdomain"
    ProxyRemote "ftp" "http://ftpproxy.mydomain:8080"

    Dans la dernière ligne de l'exemple, le mandataire va faire suivre les requêtes FTP, encapsulées dans une autre requête mandatée HTTP, vers un autre mandataire capable de les traiter.

    Cette directive supporte aussi les configurations de mandataire inverse ; un serveur web d'arrière-plan peut être intégré dans l'espace d'URL d'un serveur virtuel, même si ce serveur est caché par un autre mandataire direct.

    top

    Directive ProxyRemoteMatch

    Description:Le mandataire distant à utiliser pour traiter les requêtes correspondant à une expression rationnelle
    Syntaxe:ProxyRemoteMatch regex serveur-distant
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy

    La directive ProxyRemoteMatch est identique à la directive ProxyRemote, à l'exception du premier argument qui est une expression rationnelle à mettre en correspondance avec l'URL de la requête.

    top

    Directive ProxyRequests

    Description:Active la fonctionnalité (standard) de mandataire direct
    Syntaxe:ProxyRequests On|Off
    Défaut:ProxyRequests Off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy

    Cette directive permet d'activer/désactiver la fonctionnalité de serveur mandataire direct d'Apache httpd. Définir ProxyRequests à Off n'interdit pas l'utilisation de la directive ProxyPass.

    Pour une configuration typique de mandataire inverse ou passerelle, cette directive doit être définie à Off.

    Afin d'activer la fonctionnalité de mandataire pour des sites HTTP et/ou FTP, les modules mod_proxy_http et/ou mod_proxy_ftp doivent également être chargés dans le serveur.

    Pour activer la fonctionnalité de mandataire sur les sites chiffrés en HTTPS, le module mod_proxy_connect doit également être chargé dans le serveur.

    Avertissement

    N'activez pas la fonctionnalité de mandataire avec la directive ProxyRequests avant d'avoir sécurisé votre serveur. Les serveurs mandataires ouverts sont dangereux non seulement pour votre réseau, mais aussi pour l'Internet au sens large.

    Voir aussi

    top

    Directive ProxySet

    Description:Définit différents paramètres relatifs à la répartition de charge des mandataires et aux membres des groupes de répartition de charge
    Syntaxe:ProxySet url clé=valeur [clé=valeur ...]
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy
    Compatibilité:ProxySet n'est disponible que depuis la version 2.2 du serveur HTTP Apache.

    Cette directive propose une méthode alternative pour définir tout paramètre relatif aux répartiteurs de charge et serveurs cibles de mandataires normalement définis via la directive ProxyPass. Si elle se trouve dans un conteneur <Proxy url de répartiteur|url de serveur cible>, l'argument url n'est pas nécessaire. Comme effet de bord, le répartiteur ou serveur cible respectif est créé. Ceci peut s'avérer utile pour la mise en oeuvre d'un mandataire inverse via une directive RewriteRule au lieu de ProxyPass.

    <Proxy "balancer://hotcluster">
        BalancerMember "http://www2.example.com:8080" loadfactor=1
        BalancerMember "http://www3.example.com:8080" loadfactor=2
        ProxySet lbmethod=bytraffic
    </Proxy>
    <Proxy "http://backend">
        ProxySet keepalive=On
    </Proxy>
    ProxySet "balancer://foo" lbmethod=bytraffic timeout=15
    ProxySet "ajp://backend:7001" timeout=15

    Avertissement

    Gardez à l'esprit qu'une même clé de paramètre peut avoir différentes significations selon qu'elle s'applique à un répartiteur ou à un serveur cible, et ceci est illustré par les deux exemples précédents où il est question d'un timeout.

    top

    Directive ProxySourceAddress

    Description:Définit l'adresse IP locale pour les connexions mandatées sortantes
    Syntaxe:ProxySourceAddress adresse
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy
    Compatibilité:Disponible depuis la version 2.3.9

    Cette directive permet de définir une adresse IP locale spécifique à laquelle faire référence lors d'une connexion à un serveur d'arrière-plan.

    top

    Directive ProxyStatus

    Description:Affiche l'état du répartiteur de charge du mandataire dans mod_status
    Syntaxe:ProxyStatus Off|On|Full
    Défaut:ProxyStatus Off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy
    Compatibilité:Disponible depuis la version 2.2 d'Apache

    Cette directive permet de spécifier si les données d'état du répartiteur de charge du mandataire doivent être affichées via la page d'état du serveur du module mod_status.

    Note

    L'argument Full produit le même effet que l'argument On.

    top

    Directive ProxyTimeout

    Description:Délai d'attente réseau pour les requêtes mandatées
    Syntaxe:ProxyTimeout secondes
    Défaut:Valeur de la directive Timeout
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy

    Cette directive permet à l'utilisateur de spécifier un délai pour les requêtes mandatées. Ceci s'avère utile dans le cas d'un serveur d'applications lent et bogué qui a tendance à se bloquer, et si vous préférez simplement renvoyer une erreur timeout et abandonner la connexion en douceur plutôt que d'attendre jusqu'à ce que le serveur veuille bien répondre.

    top

    Directive ProxyVia

    Description:Information fournie dans l'en-tête de réponse HTTP Via pour les requêtes mandatées
    Syntaxe:ProxyVia On|Off|Full|Block
    Défaut:ProxyVia Off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy

    Cette directive permet de contrôler l'utilisation de l'en-tête HTTP Via: par le mandataire. Le but recherché est de contrôler le flux des requêtes mandatées tout au long d'une chaîne de serveurs mandataires. Voir RFC 2616 (HTTP/1.1), section 14.45 pour une description des lignes d'en-tête Via:.

    • Si elle est définie à Off, valeur par défaut, cette directive n'effectue aucun traitement particulier. Si une requête ou une réponse contient un en-tête Via:, il est transmis sans modification.
    • Si elle est définie à On, chaque requête ou réponse se verra ajouter une ligne d'en-tête Via: pour le serveur courant.
    • Si elle est définie à Full, chaque ligne d'en-tête Via: se verra ajouter la version du serveur Apache httpd sous la forme d'un champ de commentaire Via:.
    • Si elle est définie à Block, chaque requête mandatée verra ses lignes d'en-tête Via: supprimées. Aucun nouvel en-tête Via: ne sera généré.

    Langues Disponibles:  en  |  fr  |  ja 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_auth_digest.html.ko.euc-kr0000644000000000000500000005064313412755316022061 0ustar rootsrc mod_auth_digest - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_auth_digest

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:MD5 Digest AuthenticationÀ» »ç¿ëÇÑ »ç¿ëÀÚÀÎÁõ.
    »óÅÂ:Experimental
    ¸ðµâ¸í:auth_digest_module
    ¼Ò½ºÆÄÀÏ:mod_auth_digest.c

    ¿ä¾à

    ÀÌ ¸ðµâÀº HTTP Digest AuthenticationÀ» ±¸ÇöÇÑ´Ù. ±×·¯³ª ¸¹Àº Å×½ºÆ®¸¦ °ÅÄ¡Áö ¾ÊÀº ½ÇÇèÀûÀÎ ¸ðµâÀÌ´Ù.

    top

    Digest Authentication »ç¿ëÇϱâ

    MD5 Digest authenticationÀº ¸Å¿ì ½±°Ô »ç¿ëÇÒ ¼ö ÀÖ´Ù. AuthType Basic°ú AuthBasicProvider ´ë½Å AuthType Digest¿Í AuthDigestProvider¸¦ »ç¿ëÇÏ¿© °£´ÜÈ÷ ÀÎÁõÀ» ¼³Á¤ÇÒ ¼ö ÀÖ´Ù. ±×¸®°í ÃÖ¼ÒÇÑ º¸È£ÇÏ·Á´Â ¿µ¿ªÀÇ ±âº» URIÀ» AuthDigestDomain Áö½Ã¾î¿¡ »ç¿ëÇÑ´Ù.

    htdigest µµ±¸¸¦ »ç¿ëÇÏ¿© »ç¿ëÀÚ (¹®ÀÚ)ÆÄÀÏÀ» ¸¸µé ¼ö ÀÖ´Ù.

    ¿¹Á¦:

    <Location /private/>
    AuthType Digest
    AuthName "private area"
    AuthDigestDomain /private/ http://mirror.my.dom/private2/

    AuthDigestProvider file
    AuthUserFile /web/auth/.digest_pw
    Require valid-user
    </Location>

    ÁÖÀÇ

    Digest authenticationÀº Basic authenticationº¸´Ù ´õ ¾ÈÀüÇÏÁö¸¸, ºê¶ó¿ìÀú°¡ Áö¿øÇØ¾ß ÇÑ´Ù. 2002³â 11¿ù ÇöÀç digest authenticationÀ» Áö¿øÇÏ´Â ºê¶ó¿ìÀú¿¡´Â Amaya, Konqueror, (Windows¿ëÀº ÁúÀǹ®ÀÚ¿­°ú ÇÔ²² »ç¿ëÇÏ¸é ¾ÈµÇÁö¸¸ - ÇØ°á¹æ¹ýÀº ¾Æ·¡ "MS Internet Explorer ¹®Á¦ ÇØ°áÇϱâ"¸¦ Âü°í) Mac OS X¿Í Windows¿ë MS Internet Explorer, Mozilla, Netscape ¹öÀü 7, Opera, Safari µîÀÌ ÀÖ´Ù. lynx´Â digest authenticationÀ» Áö¿øÇÏÁö ¾Ê´Â´Ù. digest authenticationÀÌ basic authentication ¸¸Å­ ³Î¸® ±¸ÇöµÇÁö ¾Ê¾Ò±â¶§¹®¿¡ ¸ðµç »ç¿ëÀÚ°¡ Áö¿øÇÏ´Â ºê¶ó¿ìÀú¸¦ »ç¿ëÇÏ´Â °æ¿ì¿¡¸¸ »ç¿ëÇØ¾ß ÇÑ´Ù.

    top

    MS Internet Explorer ¹®Á¦ ÇØ°áÇϱâ

    ÇöÀç Windows¿ë Internet Explorer´Â Digest authentication »ç¿ë½Ã ÁúÀǹ®ÀÚ¿­ÀÌ ÀÖ´Â GET ¿äûÀ» RFC¿Í ´Ù¸£°Ô ó¸®ÇÏ´Â ¹®Á¦°¡ ÀÖ´Ù. ¸î°¡Áö ¹æ¹ýÀ¸·Î ÀÌ ¹®Á¦¸¦ ÇØ°áÇÒ ¼ö ÀÖ´Ù.

    ù¹øÂ°´Â ÇÁ·Î±×·¥¿¡ ÀڷḦ ³Ñ°ÜÁÖ±âÀ§ÇØ GET ´ë½Å POST ¿äûÀ» »ç¿ëÇÏ´Â ¹æ¹ýÀÌ´Ù. ÀÌ ¹æ¹ýÀÌ °¡´ÉÇÏ´Ù¸é °¡Àå °£´ÜÇÑ ÇØ°áÃ¥ÀÌ´Ù.

    ¶Ç, ¾ÆÆÄÄ¡ 2.0.51ºÎÅÍ AuthDigestEnableQueryStringHack ȯ°æº¯¼ö¸¦ Á¦°øÇÏ¿© ¹®Á¦¸¦ ÇØ°áÇÑ´Ù. ¿äû¿¡ AuthDigestEnableQueryStringHackÀ» ¼³Á¤ÇÏ¸é ¾ÆÆÄÄ¡´Â MSIE ¹ö±×¸¦ ÇÇÇØ°¥ Á¶Ä¡¸¦ ÃëÇÏ°í ¿äû URI¸¦ digest ºñ±³¿¡¼­ Á¦¿ÜÇÑ´Ù. ÀÌ ¹æ¹ýÀº ´ÙÀ½°ú °°ÀÌ »ç¿ëÇÑ´Ù.

    MSIE¿¡¼­ Digest Authentication »ç¿ëÇϱâ:

    BrowserMatch "MSIE" AuthDigestEnableQueryStringHack=On

    ¼±ÅÃÀûÀΠȯ°æº¯¼ö ¼³Á¤¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ³»¿ëÀº BrowserMatch Áö½Ã¾î¸¦ Âü°íÇ϶ó.

    top

    AuthDigestAlgorithm Áö½Ã¾î

    ¼³¸í:digest authentication¿¡¼­ challenge¿Í response hash¸¦ °è»êÇÏ´Â ¾Ë°í¸®ÁòÀ» ¼±ÅÃÇÑ´Ù
    ¹®¹ý:AuthDigestAlgorithm MD5|MD5-sess
    ±âº»°ª:AuthDigestAlgorithm MD5
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Experimental
    ¸ðµâ:mod_auth_digest

    AuthDigestAlgorithm Áö½Ã¾î´Â challenge¿Í response hash¸¦ °è»êÇÏ´Â ¾Ë°í¸®ÁòÀ» ¼±ÅÃÇÑ´Ù.

    MD5-sess´Â ¾ÆÁ÷ ¿ÏÀüÈ÷ ±¸ÇöµÇÁö ¾Ê¾Ò´Ù.
    top

    AuthDigestDomain Áö½Ã¾î

    ¼³¸í:digest authentication¿¡¼­ °°Àº º¸È£¿µ¿ª¿¡ ¼ÓÇÏ´Â URIµé
    ¹®¹ý:AuthDigestDomain URI [URI] ...
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Experimental
    ¸ðµâ:mod_auth_digest

    AuthDigestDomain Áö½Ã¾î´Â °°Àº º¸È£¿µ¿ª¿¡ ÀÖ´Â (¿¹¸¦ µé¾î °°Àº ¿µ¿ª°ú »ç¿ëÀÚ¸í/¾ÏÈ£ Á¤º¸¸¦ »ç¿ëÇÏ´Â) URIµéÀ» ÁöÁ¤ÇÑ´Ù. ÁöÁ¤ÇÑ URI´Â Á¢µÎ»ç·Î »ç¿ëÇÑ´Ù. Ŭ¶óÀÌ¾ðÆ®´Â URI "¾Æ·¡" ¸ðµÎ¸¦ °°Àº »ç¿ëÀÚ¸í/¾ÏÈ£·Î º¸È£ÇÑ´Ù°í °¡Á¤ÇÑ´Ù. URI´Â (Áï, ½ºÅ´(scheme), È£½ºÆ®, Æ÷Æ® µîÀ» Æ÷ÇÔÇÏ´Â) Àý´ë URLÀ̰ųª »ó´ë URIÀÌ´Ù.

    ÀÌ Áö½Ã¾î´Â Ç×»ó ÁöÁ¤ÇØ¾ß Çϸç, ÃÖ¼ÒÇÑ ¿µ¿ªµéÀÇ ±âº» URI(µé)¸¦ Æ÷ÇÔÇØ¾ß ÇÑ´Ù. »ý·«Çϸé Ŭ¶óÀÌ¾ðÆ®´Â ÀÌ ¼­¹ö·Î º¸³»´Â ¸ðµç ¿äû¿¡ Authorization Çì´õ¸¦ Æ÷ÇÔÇÑ´Ù. ±×·¯¸é ¿äûÀÇ Å©±â°¡ Ä¿Áö¸ç, AuthDigestNcCheck¸¦ »ç¿ëÇÑ´Ù¸é ¼º´É¿¡ ³ª»Û ¿µÇâÀ» ÁÙ ¼ö ÀÖ´Ù.

    ´Ù¸¥ ¼­¹öÀÇ URI¸¦ ÁöÁ¤Çϸé, (À̸¦ ÀÌÇØÇÏ´Â) Ŭ¶óÀÌ¾ðÆ®´Â ¿©·¯ ¼­¹ö¸¶´Ù ¸Å¹ø »ç¿ëÀÚ¿¡°Ô ¹¯Áö¾Ê°í °°Àº »ç¿ëÀÚ¸í/¾ÏÈ£¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    top

    AuthDigestNonceLifetime Áö½Ã¾î

    ¼³¸í:¼­¹ö nonce°¡ À¯È¿ÇÑ ±â°£
    ¹®¹ý:AuthDigestNonceLifetime seconds
    ±âº»°ª:AuthDigestNonceLifetime 300
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Experimental
    ¸ðµâ:mod_auth_digest

    AuthDigestNonceLifetime Áö½Ã¾î´Â ¼­¹ö nonce°¡ À¯È¿ÇÑ ±â°£À» Á¶ÀýÇÑ´Ù. Ŭ¶óÀÌ¾ðÆ®°¡ ¸¸±âµÈ nonce¸¦ °¡Áö°í ¼­¹ö¿¡ Á¢±ÙÇÏ¸é ¼­¹ö´Â stale=true¿Í ÇÔ²² 401À» ¹ÝȯÇÑ´Ù. seconds°¡ 0º¸´Ù Å©¸é nonce°¡ À¯È¿ÇÑ ±â°£À» ÁöÁ¤ÇÑ´Ù. ¾Æ¸¶µµ 10 Ãʺ¸´Ù ÀÛ°Ô ¼³Á¤ÇÏ¸é ¾ÈµÈ´Ù. seconds°¡ 0º¸´Ù ÀÛÀ¸¸é nonce´Â ¿µ¿øÈ÷ ¸¸±âµÇÁö ¾Ê´Â´Ù.

    top

    AuthDigestProvider Áö½Ã¾î

    ¼³¸í:ÀÌ À§Ä¡¿¡ ´ëÇÑ ÀÎÁõÁ¦°øÀÚ¸¦ ÁöÁ¤ÇÑ´Ù
    ¹®¹ý:AuthDigestProvider On|Off|provider-name [provider-name] ...
    ±âº»°ª:AuthDigestProvider On
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Experimental
    ¸ðµâ:mod_auth_digest

    AuthDigestProvider Áö½Ã¾î´Â ÀÌ À§Ä¡¿¡¼­ »ç¿ëÀÚ¸¦ ÀÎÁõÇÒ Á¦°øÀÚ¸¦ ÁöÁ¤ÇÑ´Ù. °ªÀÌ OnÀÌ¸é ±âº»Á¦°øÀÚ(file)¸¦ »ç¿ëÇÑ´Ù. mod_authn_file ¸ðµâÀÌ file Á¦°øÀÚ¸¦ ±¸ÇöÇϱ⶧¹®¿¡ ¼­¹ö¿¡ ÀÌ ¸ðµâÀÌ ÀÖ´ÂÁö È®ÀÎÇØ¾ß ÇÑ´Ù.

    Á¦°øÀÚ´Â mod_authn_dbm°ú mod_authn_fileÀ» Âü°íÇ϶ó.

    °ªÀÌ OffÀ̸é Á¦°øÀÚ ¸ñ·ÏÀ» Áö¿ì°í ±âº»»óÅ·Πµ¹¾Æ°£´Ù.

    top

    AuthDigestQop Áö½Ã¾î

    ¼³¸í:digest authentication°¡ »ç¿ëÇÒ º¸È£¼öÁØ(quality-of-protection)À» ÁöÁ¤ÇÑ´Ù.
    ¹®¹ý:AuthDigestQop none|auth|auth-int [auth|auth-int]
    ±âº»°ª:AuthDigestQop auth
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Experimental
    ¸ðµâ:mod_auth_digest

    AuthDigestQop Áö½Ã¾î´Â º¸È£¼öÁØ(quality-of-protection)À» ÁöÁ¤ÇÑ´Ù. auth´Â (»ç¿ëÀÚ¸í/¾ÏÈ£) ÀÎÁõ¸¸ Çϰí, auth-int´Â ÀÎÁõ°ú ¿Ï°á¼º °Ë»ç¸¦ (MD5 ÇØ½¬µµ °è»êÇÏ¿© °Ë»çÇÑ´Ù) ÇÑ´Ù. noneÀº (¿Ï°á¼º °Ë»ç¸¦ ÇÏÁö¾Ê´Â) ¿À·¡µÈ RFC-2069 digest ¾Ë°í¸®ÁòÀ» »ç¿ëÇÑ´Ù. auth¿Í auth-int¸¦ ¸ðµÎ ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù. ÀÌ °æ¿ì ºê¶ó¿ìÀú´Â ¾î¶² °ÍÀ» »ç¿ëÇÒÁö ¼±ÅÃÇÑ´Ù. ºê¶ó¿ìÀú°¡ ¾î´ø ÀÌÀ¯¿¡¼­°Ç challenge¸¦ ÁÁ¾ÆÇÏÁö ¾Ê´Â´Ù¸é noneÀ» »ç¿ëÇØ¾ß ÇÑ´Ù.

    auth-int´Â ¾ÆÁ÷ ±¸ÇöµÇÁö ¾Ê¾Ò´Ù.
    top

    AuthDigestShmemSize Áö½Ã¾î

    ¼³¸í:Ŭ¶óÀÌ¾ðÆ®¸¦ ÃßÀûÇϱâÀ§ÇØ ÇÒ´çÇÏ´Â °øÀ¯¸Þ¸ð¸®·®
    ¹®¹ý:AuthDigestShmemSize size
    ±âº»°ª:AuthDigestShmemSize 1000
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤
    »óÅÂ:Experimental
    ¸ðµâ:mod_auth_digest

    AuthDigestShmemSize Áö½Ã¾î´Â Ŭ¶óÀÌ¾ðÆ®¸¦ ÃßÀûÇϱâÀ§ÇØ ¼­¹ö°¡ ½ÃÀÛÇÒ¶§ ÇÒ´çÇÏ´Â °øÀ¯¸Þ¸ð¸®·®À» Á¤ÀÇÇÑ´Ù. °øÀ¯¸Þ¸ð¸®´Â ÃÖ¼ÒÇÑ ÇϳªÀÇ Å¬¶óÀÌ¾ðÆ®¸¦ ÃßÀûÇϱâÀ§ÇØ ÇÊ¿äÇÑ °ø°£º¸´Ù ÀÛÀ» ¼ö ¾øÀ½À» ÁÖÀÇÇ϶ó. ÀÌ °ªÀº ½Ã½ºÅÛ¿¡ µû¶ó ´Ù¸£´Ù. Á¤È®ÇÑ °ªÀ» ¾Ë·Á¸é AuthDigestShmemSize¸¦ 0À¸·Î ¼³Á¤ÇÏ°í ¼­¹ö¸¦ ½ÃÀÛÇÑÈÄ ¿À·ù¹®À» Âü°íÇ϶ó.

    size´Â º¸Åë ¹ÙÀÌÆ® ´ÜÀ§ÀÌÁö¸¸, µÚ¿¡ K³ª MÀ» »ç¿ëÇÏ¿© KBytes³ª MBytes¸¦ ³ªÅ¸³¾ ¼ö ÀÖ´Ù. ¿¹¸¦ µé¾î, ´ÙÀ½ Áö½Ã¾îµéÀº ¸ðµÎ °°´Ù:

    AuthDigestShmemSize 1048576
    AuthDigestShmemSize 1024K
    AuthDigestShmemSize 1M

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_rewrite.html.fr.utf80000644000000000000500000024641213434266145020742 0ustar rootsrc mod_rewrite - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_rewrite

    Langues Disponibles:  en  |  fr 

    Description:Ce module fournit un moteur de réécriture à base de règles permettant de réécrire les URLs des requêtes à la volée
    Statut:Extension
    Identificateur de Module:rewrite_module
    Fichier Source:mod_rewrite.c

    Sommaire

    Le module mod_rewrite utilise un moteur de réécriture à base de règles, basé sur un interpréteur d'expressions rationnelles PCRE, pour réécrire les URLs à la volée. Par défaut, mod_rewrite met en correspondance une URL avec le système de fichiers. Cependant, on peut aussi l'utiliser pour rediriger une URL vers une autre URL, ou pour invoquer une requête interne à destination du mandataire.

    mod_rewrite fournit une méthode souple et puissante pour manipuler les URLs en utilisant un nombre illimité de règles. Chaque règle peut être associée à un nombre illimité de conditions, afin de vous permettre de réécrire les URLs en fonction de variables du serveur, de variables d'environnement, d'en-têtes HTTP, ou de repères temporels.

    mod_rewrite agit sur la totalité de l'URL, y compris la partie chemin. Une règle de réécriture peut être invoquée dans httpd.conf ou dans un fichier .htaccess. Le chemin généré par une règle de réécriture peut inclure une chaîne de paramètres, ou peut renvoyer vers un traitement secondaire interne, une redirection vers une requête externe ou vers le mandataire interne.

    Vous trouverez d'avantage de détails, discussions et exemples dans la documentation détaillée sur mod_rewrite.

    top

    Journalisation

    mod_rewrite offre une journalisation détaillée de ses actions aux niveaux de journalisation trace1 à trace8. Le niveau de journalisation peut être défini de manière spécifique à mod_rewrite via la directive LogLevel : jusqu'au niveau debug aucune action n'est journalisée, alors qu'elles le sont pratiquement toutes au niveau trace8.

    L'utilisation d'un niveau de journalisation élevé pour mod_rewrite va ralentir votre serveur HTTP Apache de manière dramatique ! N'utilisez un niveau de journalisation supérieur à trace2 qu'à des fins de débogage !

    Exemple

    LogLevel alert rewrite:trace3

    RewriteLog

    Ceux qui sont familiers avec les versions précédentes de mod_rewrite vont probablement rechercher en vain les directives RewriteLog et RewriteLogLevel. Elles ont été en effet remplacées par une configuration de la journalisation par module, comme mentionné plus haut.

    Pour extraire les traces spécifiques à mod_rewrite, affichez le fichier journal en redirigeant la sortie vers grep :

    tail -f error_log|fgrep '[rewrite:'

    top

    Directive RewriteBase

    Description:Définit l'URL de base pour les réécritures au niveau répertoire
    Syntaxe:RewriteBase chemin_URL
    Défaut:Pas de valeur par défaut
    Contexte:répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_rewrite

    La directive RewriteBase permet de spécifier le préfixe d'URL à utiliser dans un contexte de répertoire (htaccess) pour les directives RewriteRule qui réécrivent vers un chemin relatif.

    Cette directive est obligatoire si vous utilisez un chemin relatif dans une substitution, et dans un contexte de répertoire (htaccess), sauf si au moins une de ces conditions est vérifiée :

    • La requête initiale, ainsi que la substitution, se situent par raport à la valeur de la directive DocumentRoot (c'est à dire que pour y accéder, il n'est pas nécessaire d'utiliser une directive telle qu'Alias).
    • Le chemin du système de fichiers vers le répertoire contenant la RewriteRule, suffixé par la substitution relative est aussi valide en tant qu'URL sur le serveur (ce qui est rare).
    • A partir de la version 2.4.16 du serveur HTTP Apache, cette directive peut être omise lorsque la requête est mise en correspondance avec le système de fichiers via la directive Alias ou le module mod_userdir.

    Dans l'exemple ci-dessous, la directive RewriteBase est nécessaire afin d'éviter une réécriture en http://example.com/opt/myapp-1.2.3/welcome.html car la ressource n'était pas relative à la racine des documents. Cette erreur de configuration aurait conduit le serveur à rechercher un répertoire "opt" à la racine des documents.

    DocumentRoot "/var/www/example.com"
    AliasMatch "^/myapp" "/opt/myapp-1.2.3"
    <Directory "/opt/myapp-1.2.3">
     RewriteEngine On
        RewriteBase "/myapp/"
        RewriteRule "^index\.html$"  "welcome.html"
    </Directory>
    top

    Directive RewriteCond

    Description:Définit une condition qui devra être satisfaite pour que la réécriture soit effectuée
    Syntaxe: RewriteCond chaîne_de_test expression_de_comparaison [drapeaux]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_rewrite

    La directive RewriteCond permet de définir une condition d'exécution d'une règle. Une ou plusieurs conditions RewriteCond peuvent précéder une directive RewriteRule. La règle de réécriture correspondante n'est ainsi exécutée que si ces conditions sont satisfaites, et si l'URI correspond au modèle spécifié dans la règle.

    TestString est une chaîne qui peut contenir les extensions suivantes en plus du texte simple :

    • références arrières de règle de réécriture : ce sont des références arrières de la forme $N (0 <= N <= 9). $1 à $9 permettent d'accéder aux parties regroupées (entre parenthèses) du modèle, issues de la RewriteRule concernée par le jeu de conditions RewriteCond courant. $0 donne accès à l'ensemble de la chaîne correspondant au modèle.
    • Références arrières de condition de réécriture : ce sont des références arrières de la forme %N (0 <= N <= 9). %1 à %9 permettent d'accéder aux parties regroupées (entre parenthèses) du modèle, issues de la dernière condition RewriteCond satisfaite du jeu de conditions RewriteCond courant. %0 donne accès à l'ensemble de la chaîne correspondant au modèle.
    • extensions de table de réécriture : ce sont des extensions de la forme ${nomTable:clé|défaut}. Voir la href="#mapfunc">documentation sur RewriteMap pour plus de détails.
    • Variables du serveur : ce sont des variables de la forme %{ NAME_OF_VARIABLE }, où NOM_DE_VARIABLE peut contenir une chaîne issue de la liste suivante :
      En-têtes HTTP : connexion & requête:
      HTTP_ACCEPT
      HTTP_COOKIE
      HTTP_FORWARDED
      HTTP_HOST
      HTTP_PROXY_CONNECTION
      HTTP_REFERER
      HTTP_USER_AGENT
      AUTH_TYPE
      CONN_REMOTE_ADDR
      CONTEXT_PREFIX
      CONTEXT_DOCUMENT_ROOT
      IPV6
      PATH_INFO
      QUERY_STRING
      REMOTE_ADDR
      REMOTE_HOST
      REMOTE_IDENT
      REMOTE_PORT
      REMOTE_USER
      REQUEST_METHOD
      SCRIPT_FILENAME
      variables internes au serveur : date et heure : spéciaux :
      DOCUMENT_ROOT
      SCRIPT_GROUP
      SCRIPT_USER
      SERVER_ADDR
      SERVER_ADMIN
      SERVER_NAME
      SERVER_PORT
      SERVER_PROTOCOL
      SERVER_SOFTWARE
      TIME_YEAR
      TIME_MON
      TIME_DAY
      TIME_HOUR
      TIME_MIN
      TIME_SEC
      TIME_WDAY
      TIME
      API_VERSION
      CONN_REMOTE_ADDR
      HTTPS
      IS_SUBREQ
      REMOTE_ADDR
      REQUEST_FILENAME
      REQUEST_SCHEME
      REQUEST_URI
      THE_REQUEST

      Ces variables correspondent toutes aux en-têtes MIME HTTP de mêmes noms, au variables C du serveur HTTP Apache, ou aux champs struct tm du système Unix. La plupart d'entre elles sont documentées ici, dans la spécification CGI ou ailleurs dans le manuel.

      SERVER_NAME et SERVER_PORT dépendent respectivement des valeurs des directives UseCanonicalName et UseCanonicalPhysicalPort.

      Parmi les variables spécifiques à mod_rewrite, ou trouve les suivantes :

      API_VERSION
      C'est la version de l'API des modules Apache httpd (l'interface interne entre le serveur et les modules) pour la construction courante de httpd, telle qu'elle est définie dans include/ap_mmn.h. La version de l'API des modules correspond à la version du serveur Apache httpd utilisé (par exemple, pour la version 1.3.14 d'Apache httpd, il s'agit de la version 19990320:10), mais intéresse principalement les auteurs de modules.
      CONN_REMOTE_ADDR
      A partir de la version 2.4.8 : l'adresse IP distante de la connexion (voir le module mod_remoteip).
      HTTPS
      Contient le texte "on" si la connexion utilise SSL/TLS, "off" dans le cas contraire (Cette variable peut être utilisée sans problème, que mod_ssl soit chargé ou non).
      IS_SUBREQ
      Contient le texte "true" si la requête en cours de traitement est une sous-requête, "false" dans le cas contraire. Une sous-requête est générée quand un module a besoin de se référer à des fichiers ou URIs addidionnels pour pouvoir mener à bien sa tâche.
      REMOTE_ADDR
      L'adresse IP de l'hôte distant (se référer au module mod_remoteip).
      REQUEST_FILENAME
      Le chemin complet local au système de fichiers du fichier ou du script correspondant à la requête, s'il a déjà été déterminé par le serveur au moment où on y fait référence. Dans le cas contraire, et en particulier dans le cas d'un serveur virtuel, REQUEST_FILENAME contient la valeur de REQUEST_URI. En fonction de la valeur de la directive AcceptPathInfo, le serveur peut n'utiliser que certains éléments de tête du REQUEST_URI pour déterminer à quel fichier correspond la requête.
      REQUEST_SCHEME
      Contient le protocole de la requête (en général "http" ou "https"). La valeur peut être modifiée par la directive ServerName.
      REQUEST_URI
      La partie chemin de l'URI de la requête, comme "/index.html". Ceci exclut en particulier la chaîne de paramètres de la requête qui est contenue dans la variable QUERY_STRING.
      THE_REQUEST
      La ligne de requête HTTP complète envoyée par le navigateur au serveur (par exemple, "GET /index.html HTTP/1.1"), à l'exclusion de tout en-tête ajouté par le navigateur. Cette valeur n'a pas été déséchappée (décodée), à la différence de la plupart des variables suivantes.

    Si la chaîne_de_test contient la valeur spéciale expr, expression_de_comparaison sera traité en tant qu'expression rationnelle de type ap_expr. Si des en-têtes HTTP sont référencés dans l'expression rationnelle, et si le drapeau novary n'est pas activé, ils seront ajoutés à l'en-tête Vary.

    Autres points à connaître ::

    1. Les variables SCRIPT_FILENAME et REQUEST_FILENAME contiennent toutes deux la valeur du champ filename de la structure interne request_recdu serveur HTTP Apache. Le premier nom correspond au nom de variable bien connu CGI, alors que le second est l'équivalent de REQUEST_URI (qui contient la valeur du champ uri de request_rec).

      Si une substitution intervient et si la réécriture se poursuit, la valeur des deux variables sera mise à jour en conséquence.

      Dans le contexte du serveur principal (c'est à dire avant que la requête ne soit mise en correspondance avec le système de fichiers), SCRIPT_FILENAME et REQUEST_FILENAME ne peuvent pas contenir le chemin entier dans le système de fichiers local car ce chemin b'est pas connu à ce stade du traitement. Dans ce cas, les deux variables contiendront la valeur de REQUEST_URI. Pour obtenir le chemin complet de la requête dans le système de fichiers local dans le contexte du serveur principal, utilisez une référence avant à base d'URL %{LA-U:REQUEST_FILENAME} pour déterminer la valeur finale de REQUEST_FILENAME.

    2. %{ENV:variable}, où variable peut correspondre à une variable d'environnement quelconque.
    3. %{ENV:variable} est aussi disponible, où variable peut correspondre à toute variable d'environnement. Peut être consulté via des structures internes d'Apache httpd et (si on ne les trouve pas ici) via la fonction getenv() à partir du processus du serveur Apache httpd.
    4. Que mod_ssl soit chargé ou non, on peut utiliser %{SSL:variable}, où variable peut être remplacé par le nom d'une variable d'environnement SSL . Si mod_ssl n'est pas chargé, cette variable contiendra toujours une chaîne vide. Exemple : %{SSL:SSL_CIPHER_USEKEYSIZE} pourra contenir la valeur 128. Ces variables sont disponibles même si l'option StdEnvVars de la directive SSLOptions n'a pas été définie.
    5. On peut utiliser %{HTTP:en-tête}, où en-tête peut correspondre à tout nom d'en-tête MIME HTTP, pour extraire la valeur d'un en-tête envoyé dans la requête HTTP. Par exemple, %{HTTP:Proxy-Connection} contiendra la valeur de l'en-tête HTTP "Proxy-Connection:". Si on utilise un en-tête HTTP dans une condition, et si cette condition est évaluée à vrai pour la requête, cet en-tête sera ajouté à l'en-tête Vary de la réponse. Il ne le sera pas si la condition est évaluée à faux. L'ajout de l'en-tête HTTP à l'en-tête Vary est nécessaire à une mise en cache appropriée.

      Il faut garder à l'esprit que les conditions suivent une logique de cout-circuit si le drapeau 'ornext|OR' est utilisé, et que de ce fait, certaines d'entre elles ne seront pas évaluées.

    6. A des fins de référence avant, on peut utiliser, %{LA-U:variable}, qui permet d'effectuer une sous-requête interne à base d'URL, afin de déterminer la valeur finale de variable. Ceci permet d'accéder à la valeur d'une variable pour la réécriture inconnue à ce stade du traitement, mais qui sera définie au cours d'une phase ultérieure.

      Par exemple, pour effectuer une réécriture dépendant de la variable REMOTE_USER dans le contexte du serveur principal (fichier httpd.conf), vous devez utiliser %{LA-U:REMOTE_USER} - cette variable est définie par la phase d'autorisation qui intervient après la phase de traduction d'URL (pendant laquelle mod_rewrite opère).

      Par contre, comme mod_rewrite implémente son contexte de répertoire (fichier .htaccess) via la phase Fixup de l'API, et comme la phase d'autorisation intervient avant cette dernière, vous pouvez vous contenter d'utiliser %{REMOTE_USER} dans ce contexte.

    7. %{LA-F:variable} peut être utilisée pour effectuer une sous-requête interne (basée sur le nom de fichier), afin de déterminer la valeur finale de variable. La plupart du temps, elle est identique à LA-U (voir ci-dessus).

    expression_de_comparaison est une expression rationnelle qui est appliquée à l'instance actuelle de chaîne_de_test. chaîne_de_test est d'abord évaluée, puis comparée à l'expression_de_comparaison.

    expression_de_comparaison est en général une expression rationnelle compatible perl, mais vous disposez des syntaxes supplémentaires suivantes pour effectuer d'autres tests utiles sur chaîne_de_test :

    1. Vous pouvez préfixer l'expression avec un caractère '!' (point d'exclamation) pour inverser le résultat de la condition, quelle que soit l'expression de comparaison utilisée.
    2. Vous pouvez effectuer des comparaisons lexicographiques de chaînes :
      <expression
      inférieur au sens lexicographique
      Traite l'expression comme une chaîne de caractères et la compare lexicographiquement à chaîne_de_test. La condition est satisfaite si chaîne_de_test est inférieure au sens lexicographique à l'expression.
      >expression
      supérieur au sens lexicographique
      Traite l'expression comme une chaîne de caractères et la compare lexicographiquement à chaîne_de_test. La condition est satisfaite si chaîne_de_test est supérieure au sens lexicographique à l'expression.
      =expression
      égal au sens lexicographique
      Traite l'expression comme une chaîne de caractères et la compare lexicographiquement à chaîne_de_test. La condition est satisfaite si chaîne_de_test est égale au sens lexicographique à l'expression (les deux chaînes sont exactement identiques, caractère pour caractère). Si expression est "" (deux guillemets), chaîne_de_test est comparée à la chaîne vide.
      <=expression de comparaison
      inférieur ou égal à au sens lexicographique
      Considère l'expression_de_comparaison comme une chaîne de caractères et la compare au sens lexicographique à la chaîne_de_test. Vrai si chaîne_de_test précède lexicographiquement expression_de_comparaison, ou est égale à expression_de_comparaison (les deux chaînes sont identiques, caractère pour caractère).
      >=expression de comparaison
      supérieur ou égal à au sens lexicographique
      Considère l'expression_de_comparaison comme une chaîne de caractères et la compare au sens lexicographique à la chaîne_de_test. Vrai si chaîne_de_test suit lexicographiquement expression_de_comparaison, ou est égale à expression_de_comparaison (les deux chaînes sont identiques, caractère pour caractère).
    3. Vous pouvez effectuer des comparaisons d'entiers :
      -eq
      est numériquement égal à
      La chaîne_de_test est considérée comme un entier, et est comparée numériquement à l'expression de comparaison. Vrai si les deux expressions sont numériquement égales.
      -ge
      est numériquement supérieur ou égal à
      La chaîne_de_test est considérée comme un entier, et est comparée numériquement à l'expression de comparaison. Vrai si chaîne_de_test est numériquement supérieure ou égale à expression_de_comparaison.
      -gt
      est numériquement supérieur à
      La chaîne_de_test est considérée comme un entier, et est comparée numériquement à l'expression de comparaison. Vrai si chaîne_de_test est numériquement supérieure à expression_de_comparaison.
      -le
      est numériquement inférieur ou égal à
      La chaîne_de_test est considérée comme un entier, et est comparée numériquement à l'expression de comparaison. Vrai si chaîne_de_test est numériquement inférieure ou égale à expression_de_comparaison. Attention à la confusion avec le drapeau -l en utilisant la variante the -L ou -h.
      -lt
      est numériquement inférieur à
      La chaîne_de_test est considérée comme un entier, et est comparée numériquement à l'expression de comparaison. Vrai si chaîne_de_test est numériquement inférieure à expression_de_comparaison. Attention à la confusion avec le drapeau -l en utilisant la variante the -L ou -h.
      -ne
      Est numériquement non égal à
      La Chaîne de test est considérée comme un entier et est numériquement comparée à l'expression de comparaison. Vrai si les deux éléments comparés sont numériquement différents. Equivalent à !-eq.
    4. Vous pouvez effectuer différents tests sur les attributs de fichier :
      -d
      est un répertoire
      Traite chaîne_de_test comme un chemin et vérifie s'il existe ou pas, et s'il s'agit d'un répertoire.
      -f
      est un fichier régulier
      Traite chaîne_de_test comme un chemin et vérifie s'il existe ou pas, et s'il s'agit d'un fichier régulier.
      -F
      test de l'existence d'un fichier via une sous-requête
      Vérifie si chaîne_de_test est un fichier valide, accessible à travers tous les contrôles d'accès du serveur actuellement configurés pour ce chemin. C'est une sous-requête interne qui effectue cette vérification - à utiliser avec précautions car les performances du serveur peuvent s'en trouver affectées !
      -h
      est un lien symbolique, selon la convention bash
      Voir -l.
      -l
      est un lien symbolique
      Considère la chaîne_de_test comme un chemin et vérifie son existence et si elle est un lien symbolique. On peut aussi utiliser la convention bash -L ou -h lorsqu'il y a risque de confusion avec les tests -lt ou -le.
      -L
      est un lien symbolique, selon la convention bash
      Voir -l.
      -s
      est un fichier régulier d'une certaine taille
      Considère la chaîne_de_test comme un chemin et vérifie son existence et si elle est un fichier régulier d'une taille supérieure à zéro.
      -U

      test de l'existence d'une URL via une sous-requête
      Vérifie si chaîne_de_test est une URL valide, accessible à travers tous les contrôles d'accès du serveur actuellement configurés pour ce chemin. C'est une sous-requête interne qui effectue cette vérification - à utiliser avec précautions car les performances du serveur peuvent s'en trouver affectées !

      Ce drapeau ne renvoie que des informations concernant le contrôle d'accès, l'authentification et l'autorisation. Il ne renvoie pas d'informations concernant le code d'état que le gestionnaire configuré (static file, CGI, proxy, etc...) aurait, quant à lui, retourné.

      -x
      a l'attribut d'exécution positionné
      Considère la chaîne_de_test comme un chemin et vérifie son existence et si elle a son attribut d'exécution positionné. Ce positionnement est déterminé en fonction de l'OS sous-jacent.
      Par exemple:
      RewriteCond /var/www/%{REQUEST_URI} !-f
      RewriteRule ^(.+) /other/archive/$1 [R]
    5. Si la chaîne_de_test contient la valeur spéciale expr, la chaîne de comparaison sera traitée en tant qu'expression rationnelle de type ap_expr.

      Dans l'exemple ci-dessous, on utilise -strmatch pour comparer le REFERER avec le nom d'hôte du site afin de bloquer le hotlinking (référencement direct) non désiré.

                 RewriteCond expr "! %{HTTP_REFERER} -strmatch '*://%{HTTP_HOST}/*'"
                 RewriteRule "^/images" "-" [F]

    Vous pouvez aussi définir certains drapeaux pour l'expression_de_comparaison en ajoutant ces [drapeaux] comme troisième argument de la directive RewriteCond, où drapeaux est un sous-ensemble séparé par des virgules des drapeaux suivants :

    • 'nocase|NC' (no case)
      Rend le test insensible à la casse - il n'est pas fait de distinction entre majuscules et minuscules, à la fois dans le développement de chaîne_de_test et dans expression_de_comparaison. Ce drapeau n'est pris en compte que lors d'une comparaison entre chaîne_de_test et expression_de_comparaison. Il ne l'est pas pour les vérification par sous-requêtes ou sur le système de fichiers.
    • 'ornext|OR' (ou condition suivante)
      Permet de chaîner les conditions de règles avec un OU au lieu du AND implicite. Exemple typique :
      RewriteCond "%{REMOTE_HOST}"  "^host1"  [OR]
      RewriteCond "%{REMOTE_HOST}"  "^host2"  [OR]
      RewriteCond "%{REMOTE_HOST}"  "^host3"
      RewriteRule ...règles concernant tous ces hôtes...
      Sans ce drapeau, les paires condition/règle devraient être écrites trois fois.
    • 'novary|NV' (no vary)
      Si la condition contient un en-tête HTTP, ce drapeau empêche ce dernier d'être ajouté à l'en-tête Vary de la réponse.
      L'utilisation de ce drapeau peut provoquer une mise en cache incorrecte de la réponse, si la représentation de cette réponse varie avec la valeur de l'en-tête considéré. Ce drapeau ne devrait donc être utilisé que si l'on maîtrise parfaitement le fonctionnement de l'en-tête Vary.

    Exemple :

    Pour réécrire la page d'accueil d'un site en fonction de l'en-tête ``User-Agent:'' de la requête, vous pouvez utiliser ce qui suit :

    RewriteCond  "%{HTTP_USER_AGENT}"  "(iPhone|Blackberry|Android)"
    RewriteRule  "^/$"               "/homepage.mobile.html"  [L]
    
    RewriteRule  "^/$"                 "/homepage.std.html"  [L]

    Explications : si vous utilisez un navigateur qui s'identifie comme un navigateur de plateforme mobile (notez que l'exemple est incomplet car il existe de nombreuses autres plateformes mobiles), c'est la version pour mobile de la page d'accueil qui sera renvoyée. Dans le cas contraire, ce sera la page d'accueil standard.

    top

    Directive RewriteEngine

    Description:Active ou désactive l'exécution du moteur de réécriture
    Syntaxe:RewriteEngine on|off
    Défaut:RewriteEngine off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_rewrite

    La directive RewriteEngine active ou désactive l'exécution du moteur de réécriture. Si sa valeur est off, ce module n'exécutera aucun traitement et ne mettra pas à jour les variables d'environnement SCRIPT_URx.

    Plutôt que de commenter toutes les directives RewriteRule, il est préférable d'utiliser cette directive si l'on souhaite désactiver les règles de réécriture dans un contexte particulier.

    Notez que les hôtes virtuels n'héritent pas des configurations de réécriture. Ceci implique que vous devez insérer une directive RewriteEngine on dans chaque hôte virtuel pour lequel vous souhaitez utiliser des règles de réécriture.

    Les directives RewriteMap du type prg ne sont pas prises en compte au cours de l'initialisation du serveur si elle ont été définies dans un contexte où la directive RewriteEngine n'a pas été définie à on.

    top

    Directive RewriteMap

    Description:Définit une fonction de mise en correspondance pour la recherche de mots-clés
    Syntaxe:RewriteMap MapName MapType:MapSource [MapTypeOptions]
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_rewrite
    Compatibilité:Le troisième paramètre, MapTypeOptions, est disponible à partir de la version 2.4.29 du serveur HTTP Apache

    La directive RewriteMap définit une Table de correspondance pour la réécriture que les fonctions de mise en correspondance peuvent utiliser dans les chaînes de substitution des règles pour insérer/substituer des champs en recherchant des mots-clés. La source utilisée pour cette recherche peut être de plusieurs types.

    MapName est le nom de la table de correspondance et servira à spécifier une fonction de mise en correspondance pour les chaînes de substitution d'une règle de réécriture selon une des constructions suivantes :

    ${ MapName : mot-clé }
    ${ MapName : mot-clé | valeur par défaut }

    Lorsqu'une telle construction est rencontrée, la table de correspondance MapName est consultée et la clé mot-clé recherchée. Si la clé est trouvée, la construction est remplacée par la valeur de remplacement. Si la clé n'est pas trouvée, elle est remplacée par la valeur par défaut, ou par une chaîne vide si aucune valeur par défaut n'est spécifiée. La valeur vide se comporte comme si la clé était absente ; il est donc impossible de distinguer une valeur vide d'une absence de clé.

    Par exemple, vous pouvez définir une directive RewriteMap comme suit

    RewriteMap map-exemple "txt:/chemin/vers/fichier/map.txt"

    Vous pourrez ensuite utiliser cette table dans une directive RewriteRule comme suit :

    RewriteRule "^/ex/(.*)" "${map-exemple:$1}"

    La signification de l'argument MapTypeOptions dépend du MapType spécifié. Veuillez vous référer au document Utiliser RewriteMap pour plus de détails.

    Les combinaisons suivantes pour type de correspondance et MapSource peuvent être utilisées :

    txt
    Un fichier texte contenant des paires clé-valeur séparées par des espaces, une paire par ligne (Détails ...).
    rnd
    Sélection aléatoire d'une entrée depuis un fichier texte (Détails ...).
    dbm
    Recherche une entrée dans un fichier dbm contenant des paires nom-valeur. Le condensé hash est élaboré à partir d'un format de fichier texte via l'utilitaire httxt2dbm (Détails ...).
    int
    Une des quatre fonctions internes disponibles que fournit RewriteMap: toupper, tolower, escape ou unescape (Détails ...).
    prg
    Appelle un programme externe ou un script pour effectuer la réécriture (Détails ...).
    dbd or fastdbd
    Une commande SQL SELECT à exécuter pour rechercher la cible de réécriture (Détails ...).

    Vous trouverez plus de détails et de nombreux exemples dans le RewriteMap HowTo.

    top

    Directive RewriteOptions

    Description:Configure certaines options spéciales pour le moteur de réécriture
    Syntaxe:RewriteOptions Options
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_rewrite

    La directive RewriteOptions définit certaines options spéciales pour la configuration au niveau du serveur ou du répertoire. La chaîne de caractères Option ne peut actuellement prendre qu'une des valeurs suivantes :

    Inherit

    Ceci force la configuration locale à hériter de la configuration du niveau supérieur. Dans le contexte des hôtes virtuels, cela signifie que les correspondances, conditions et règles du serveur principal sont héritées. Dans le contexte des répertoires, cela signifie que les conditions et règles de la configuration .htaccess ou les sections <Directory> du répertoire parent sont héritées. Les règles héritées sont virtuellement copiées dans la section où cette directive est utilisée. Si elles sont utilisées avec des règles locales, les règles héritées sont placées après ces dernières. La place de cette directive - avant ou après les règles locales - n'a aucune influence sur ce comportement. Si des règles locales ont forcé l'arrêt de la réécriture, les règles héritées ne seront pas traitées.

    Les règles héritées du niveau parent sont appliquées after après les règles spécifiées dans le niveau enfant.
    InheritBefore

    Même effet que l'option Inherit ci-dessus, mais les règles spécifiées dans le niveau parent s'appliquent avant les règles spécifiées dans le niveau enfant.
    Disponible depuis la version 2.3.10 du serveur HTTP Apache.

    InheritDown

    Si cette option est activée, toutes les configurations enfants hériteront de la configuration courante. Il en est de même si l'on spécifie RewriteOptions Inherit dans toutes les configurations enfants. Voir l'option Inherit pour plus de détails à propos de la manière dont les relations parent-enfants sont traitées.
    Cette option est disponible à partir de la version 2.4.8 du serveur HTTP Apache.

    InheritDownBefore

    L'effet de cette option est équivalent à celui de l'option InheritDown ci-dessus, mais les règles de la configuration parente s'appliquent avant toute règle de la configuration enfant.
    Cette option est disponible à partir de la version 2.4.8 du serveur HTTP Apache.

    IgnoreInherit

    Si cette option est activée, les configurations courante et enfants ignoreront toute règle héritée d'une configuration parente via les options InheritDown ou InheritDownBefore.
    Cette option est disponible à partir de la version 2.4.8 du serveur HTTP Apache.

    AllowNoSlash

    Par défaut, mod_rewrite ignore les URLs qui correspondent à un répertoire sur disque, mais ne comportent pas de slash final, afin que le module mod_dir redirige le client vers l'URL canonique avec un slash final.

    Lorsque la directive DirectorySlash est définie à off, il est possible de spécifier l'option AllowNoSlash pour s'assurer que les règles de réécriture ne soient plus ignorées. Si on le souhaite, cette option permet de faire s'appliquer des règles de réécriture qui correspondent à un répertoire sans slash final au sein de fichiers .htaccess.
    Elle est disponible à partir de la version 2.4.0 du serveur HTTP Apache.

    AllowAnyURI

    A partir de la version 2.2.22 de httpd, lorsqu'une directive RewriteRule se situe dans un contexte de serveur virtuel ou de serveur principal, mod_rewrite ne traitera les règles de réécriture que si l'URI de la requête respecte la syntaxe d'un chemin URL. Ceci permet d'éviter certains problèmes de sécurité où des règles particulières pourraient permettre des développements de modèles inattendus (voir CVE-2011-3368 et CVE-2011-4317). Pour s'affranchir de la restriction relative à la syntaxe des chemins URL, on peut utiliser l'option AllowAnyURI, afin de permettre à mod_rewrite d'appliquer le jeu de règles à toute chaîne de requête URI, sans vérifier si cette dernière respecte la grammaire des chemins URL définie dans la spécification HTTP.
    Disponible depuis la version 2.4.3 du serveur HTTP Apache.

    Avertissement à propos de la sécurité

    L'utilisation de cette option rendra le serveur vulnérable à certains problèmes de sécurité si les règles de réécritures concernées n'ont pas été rédigées avec soin. Il est par conséquent fortement recommandé de ne pas utiliser cette option. En particulier, prêtez attention aux chaînes en entrée contenant le caractère '@', qui peuvent modifier l'interprétation de l'URI réécrite, comme indiqué dans les liens ci-dessus.

    MergeBase

    Avec cette option, la valeur de la directive RewriteBase est recopiée depuis une valeur explicitement définie dans tout sous-répertoire qui ne définit pas sa propre directive RewriteBase. Il s'agissait du comportement par défaut avec les versions 2.4.0 à 2.4.3, et ce drapeau qui permet de retrouver ce comportement est disponible depuis la version 2.4.4 du serveur HTTP Apache.

    IgnoreContextInfo

    Lors d'une substitution relative dans un contexte de répertoire (htaccess), et si la directive RewriteBase n'a pas été définie, ce module utilise des informations en provenance d'une extension d'URL et du contexte du système de fichiers pour transformer la sustitution relative en URL. Par exemple, les modules mod_userdir et mod_alias utilisent ces informations de contexte étendu. Disponible à partir de la version 2.4.16 du serveur HTTP Apache.

    LegacyPrefixDocRoot

    Avant la version 2.4.26, si une substitution était une URL absolue qui correspondait au serveur virtuel courant, l'URL pouvait être tout d'abord réduite à sa partie chemin, puis enfin en chemin local. Comme l'URL peut être réduite en chemin local, le chemin doit être préfixé par la valeur de la directive DocumentRoot, ce qui permet d'interdire l'accès à un fichier tel que /tmp/myfile suite à une requête pour http://host/file/myfile avec la RewriteRule suivante :

    RewriteRule /file/(.*) http://localhost/tmp/$1

    Cette option permet de restaurer l'ancien comportement lorsqu'un chemin local obtenu à partir de la réduction d'une URL n'est pas préfixé par la valeur de la directive DocumentRoot. Disponible à partir de la version 2.4.26 du serveur HTTP Apache.

    top

    Directive RewriteRule

    Description:Définit les règles pour le moteur de réécriture
    Syntaxe:RewriteRule Modèle Substitution [drapeaux]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_rewrite

    La directive RewriteRule est le véritable cheval de trait de la réécriture. La directive peut apparaître plusieurs fois, chaque instance définissant une règle de réécriture particulière. L'ordre dans lequel ces règles sont définies est important - il s'agit de l'ordre dans lequel les règles seront appliquées au cours du processus de réécriture.

    Modèle est une expression rationnelle compatible perl. Ce avec quoi ce modèle est comparé dépend de l'endroit où la directive RewriteRule est définie.

    Qu'est-ce qui est comparé ?

    • Dans un contexte de serveur virtuel VirtualHost, le modèle est tout d'abord comparé à la portion de l'URL située entre le nom d'hôte éventuellement accompagné du port, et la chaîne de paramètres (par exemple "/app1/index.html"). Il s'agit du URL-path décodé de sa valeur "%xx".

    • Dans un contexte de répertoire (sections Directory et fichiers .htaccess), le Modèle est comparé avec une partie de chemin ; par exemple une requête pour "/app1/index.html" entraînera une comparaison avec "app1/index.html" ou "index.html" selon l'endroit où la directive RewriteRule est définie.

      Le chemin où la règle est défini est supprimé du chemin correspondant du système de fichiers avant comparaison (jusqu'au slash final compris). En conséquence de cette suppression, les règles définies dans ce contexte n'effectuent des comparaisons qu'avec la portion du chemin du système de fichiers "en dessous" de l'endroit où la règle est définie.

      Le chemin correspondant actuel du système de fichiers est déterminé par des directives telles que DocumentRoot et Alias, ou même le résultat de substitutions dans des règles RewriteRule précédentes.

    • Si vous souhaitez faire une comparaison sur le nom d'hôte, le port, ou la chaîne de requête, utilisez une directive RewriteCond comportant respectivement les variables %{HTTP_HOST}, %{SERVER_PORT}, ou %{QUERY_STRING}.

    Réécritures dans un contexte de répertoire

    • L'utilisation du moteur de réécriture dans les fichiers .htaccess et les sections <Directory> est un peu plus complexe.
    • Pour activer le moteur de réécriture dans ces contextes, vous devez définir "RewriteEngine On" et "Options FollowSymLinks". Si l'administrateur a désactivé la possibilité de modifier l'option FollowSymLinks au niveau du répertoire d'un utilisateur, vous ne pouvez pas utiliser le moteur de réécriture. Cette restriction a été instaurée à des fins de sécurité.
    • Voir la directive RewriteBase pour plus de détails à propos de l'ajout du préfixe après les substitutions relatives.
    • Si vous souhaitez effectuer une comparaison en prenant en compte l'intégralité du chemin de l'URL dans un contexte de répertoire (htaccess), vous devez utiliser la variable %{REQUEST_URI} dans la directive RewriteCond.
    • Le prefixe supprimé se termine toujours par un slash, ce qui signifie que la comparaison s'effectue avec une chaîne qui ne comporte jamais de slash de début. Ainsi, un modèle contenant ^/ ne correspondra jamais dans un contexte de répertoire.
    • Bien que les règles de réécriture soient permises du point de vue de la syntaxe dans les sections <Location> et <Files> (y compris leurs versions sous forme d'expression rationnelle), elles n'y sont pas prises en compte, et n'y sont à priori d'aucune utilité. Les substitutions relatives sont une fonctionnalité qui n'est, elle non-plus pas supportée dans ce genre de contexte.
    • Les blocs If suivent les règles du contexte de répertoire.
    • Par défaut, mod_rewrite écrase les règles précédentes au sein de sections combinées appartenant au même contexte. Pour modifier ce comportement, on peut utiliser la directive RewriteOptions pour définir par exemple l'option Inherit.
    • La directive RewriteOptions permet aussi de contrôler le comportement des sections définies au même niveau d'imbrication dans la configuration. Dans l'exemple suivant, par défaut seule la règle RewriteRules définie dans le second bloc If est prise en compte car celle définie dans le premier bloc est écrasée. Définir RewriteOptions Inherit force mod_rewrite à combiner les deux sections en prenant en compte les deux règles et pas seulement la dernière.
    <If "true">
      # Sans RewriteOptions Inherit, cette règle est écrasée par celle de la section
      # suivante et aucune redirection ne sera effectuée pour les URIs contenant
      # 'foo'
      RewriteRule foo http://example.com/foo [R]
    </If>
    <If "true">
      RewriteRule bar http://example.com/bar [R]
    </If>

    Pour quelques conseils à propos des expressions rationnelles, voir le document Introduction à mod_rewrite.

    Dans mod_rewrite, on peut aussi utiliser le caractère NOT ('!') comme préfixe de modèle. Ceci vous permet d'inverser la signification d'un modèle, soit pour dire ``si l'URL considérée ne correspond PAS à ce modèle''. Le caractère NON peut donc être utilisé à titre exceptionnel, lorsqu'il est plus simple d'effectuer une comparaison avec le modèle inversé, ou dans la dernière règle par défaut.

    Note

    Si vous utilisez le caractère NON pour inverser la signification d'un modèle, vous ne pouvez pas inclure de parties génériques groupées dans le modèle. Ceci est dû au fait que, lorsque le modèle ne correspond pas (autrement dit, sa négation correspond), les groupes sont vides. Ainsi, si vous utilisez des modèles inversés, vous ne pouvez pas vous référer aux groupes par $N dans la chaîne de substitution !

    Dans une règle de réécriture, Substitution est la chaîne de caractères qui remplace le chemin de l'URL original qui correspondait au Modèle. Substitution peut être :

    un chemin du système de fichiers
    Il indique alors la localisation dans le système de fichiers de la ressource qui doit être envoyée au client. Les substitutions ne sont traitées en tant que chemins du système de fichiers que si la règle est configurée dans un contexte de serveur (serveur virtuel), et si le premier composant du chemin dans la substitution existe dans le système de fichiers.
    chemin d'URL
    Un chemin relatif à la valeur de DocumentRoot vers la ressource qui doit être servie. Notez que mod_rewrite essaie de deviner si vous avez spécifié un chemin du système de fichiers ou un chemin d'URL en vérifiant si la première partie du chemin existe à la racine du système de fichiers. Par exemple, si vous avez spécifié comme chaîne de Substitution /www/file.html, cette dernière sera traitée comme un chemin d'URL à moins qu'un répertoire nommé www n'existe à la racine de votre système de fichiers (ou dans le cas d'une réécriture au sein d'un fichier .htaccess, relativement à la racine des documents), auquel cas la chaîne de substitution sera traitée comme un chemin du système de fichiers. Si vous désirez que d'autres directives de correspondance d'URL (comme la directive Alias) soient appliquées au chemin d'URL résultant, utilisez le drapeau [PT] comme décrit ci-dessous.
    URL absolue
    Si une URL absolue est spécifiée, mod_rewrite vérifie si le nom d'hôte correspond à celui de l'hôte local. Si c'est le cas, le protocole et le nom d'hôte sont supprimés, et ce qui reste est traité comme un chemin d'URL. Dans le cas contraire, une redirection externe vers l'URL indiquée est effectuée. Pour forcer une redirection externe vers l'hôte local, voir le drapeau [R] ci-dessous.
    - (tiret)
    Un tiret indique qu'aucune substitution ne doit être effectuée (le chemin considéré est transmis sans changement). Ceci est utile quand un drapeau doit être appliqué sans modifier le chemin (voir ci-dessous).

    En plus du texte, la chaîne Substitution peut comporter :

    1. des références arrières ($N) vers le modèle d'une directive RewriteRule
    2. des références arrières (%N) vers le dernier modèle d'une directive RewriteCond qui correspondait
    3. des variables du serveur comme dans les chaînes de test de condition d'une règle (%{VARNAME})
    4. des appels de fonctions de comparaison (${nom correspondance:clé|défaut})

    Les références arrières sont des identificateurs de la forme $N (N=0..9), qui seront remplacés par le contenu du Nème groupe du Modèle qui correspondait. Les variables du serveur sont les mêmes que dans la Chaîne_de_test d'une directive RewriteCond. Les fonctions de comparaison sont issues de la directive RewriteMap dans la section de laquelle elles sont décrites. Ces trois types de variables sont évaluées dans l'ordre ci-dessus.

    Chaque règle de réécriture s'applique au résultat de la règle précédente, selon l'ordre dans lequel elles ont été définies dans le fichier de configuration. Le chemin de l'URL ou du système de fichier (voir ci-dessus Qu'est-ce qui est comparé ?) est intégralement remplacée par la chaîne de Substitution et le processus de réécriture se poursuit jusqu'à ce que toutes les règles aient été appliquées, ou qu'il soit explicitement stoppé par un drapeau L, ou par un autre drapeau qui implique un arrêt immédiat, comme END ou F.

    Modifier la chaîne de requête

    Par défaut, la chaîne de requête est transmise sans modification. Vous pouvez cependant créer dans la chaîne de substitution des URLs dont une partie constitue une chaîne de requête. Pour cela, ajoutez simplement un point d'interrogation dans la chaîne de substitution pour indiquer que le texte qui suit doit être réinjecté dans la chaîne de requête. Pour supprimer une chaîne de requête, terminez simplement la chaîne de substitution par un point d'interrogation. Pour combiner les nouvelles chaînes de requête avec les anciennes, utilisez le drapeau [QSA].

    En outre, vous pouvez spécifier des actions spéciales à effectuer en ajoutant des [drapeaux] comme troisième argument de la directive RewriteRule. Séparés par des virgules au sein d'une liste encadrée par des crochets, les drapeaux peuvent être choisis dans la table suivante. Vous trouverez plus de détails, et des exemples pour chaque drapeau dans le document à propos des drapeaux de réécriture.

    Drapeaux et syntaxe Fonction
    B Echappe les caractères non-alphanumériques dans les références arrières avant d'appliquer la transformation. détails ...
    backrefnoplus|BNP Avec ce drapeau, si les références arrières sont échappées, les espaces seront échappés en %20 au lieu de +. Ceci s'avère utile lorsqu'une référence arrière est utilisée dans la partie chemin, et non dans la chaîne de paramètres de la requête ; pour plus de détails, voir ici.
    chain|C La règle est chaînée avec la règle suivante. Si la règle échoue, la ou les règles avec lesquelles elle est est chaînée seront sautées. détails ...
    cookie|CO=NAME:VAL Définit un cookie au niveau du navigateur client. La syntaxe complète est : CO=NAME:VAL:domain[:lifetime[:path[:secure[:httponly]]]] details ... détails ...
    discardpath|DPI Supprime la partie PATH_INFO de l'URI réécrit. détails ...
    END Stoppe le processus de réécriture immédiatement et n'applique plus aucune règle. Empêche aussi l'application ultérieure de règles de réécriture dans les contextes de répertoire et de fichier .htaccess (disponible à partir de la version 2.3.9 du serveur HTTP Apache). détails ...
    env|E=[!]VAR[:VAL] Définit la variable d'environnement VAR (à la valeur VAL si elle est fournie). La variante !VAR annule la définition de la variable VAR.détails ...
    forbidden|F Renvoie une réponse 403 FORBIDDEN au navigateur client. détails ...
    gone|G Renvoie un message d'erreur 410 GONE au navigateur client. détails ...
    Handler|H=Gestionnaire de contenu L'URI résultant est envoyé au Gestionnaire de contenu pour traitement. détails ...
    last|L Arrête le processus de réécriture immédiatement et n'applique plus aucune règle. Prêtez une attention particulière aux mises en garde concernant les contextes de niveau répertoire et .htaccess (voir aussi le drapeau END). détails ...
    next|N Réexécute le processus de réécriture à partir de la première règle, en utilisant le résultat du jeu de règles, sous réserve qu'il y ait un point de départ. détails ...
    nocase|NC Rend la comparaison entre modèles insensible à la casse. détails ...
    noescape|NE Empêche mod_rewrite d'effectuer un échappement hexadécimal des caractères spéciaux dans le résultat de la réécriture. détails ...
    nosubreq|NS La règle est sautée si la requête courante est une sous-requête interne. détails ...
    proxy|P Force l'envoi en interne de l'URL de substitution en tant que requête mandataire. détails ...
    passthrough|PT L'URI résultant est repassé au moteur de mise en correspondance des URLs pour y être traité par d'autres traducteurs URI-vers-nom de fichier, comme Alias ou Redirect. détails ...
    qsappend|QSA Ajoute toute chaîne de paramètres présente dans l'URL de la requête originale à toute chaîne de paramètres créée dans la cible de réécriture. détails ...
    qsdiscard|QSD Supprime toute chaîne de paramètres de l'URI entrant. détails ...
    qslast|QSL Interprète le dernier (le plus à droite) point d'interrogation comme le délimiteur de la chaîne de paramètres de la requête, au lieu du premier (le plus à gauche) comme c'est le cas habituellement. Disponble à partir de la version 2.4.19 du serveur HTTP Apache. détails ...
    redirect|R[=code] Force une redirection externe, avec un code de statut HTTP optionnel. détails ...
    skip|S=nombre Si la règle courante s'applique, le moteur de réécriture doit sauter les nombre règles suivantes. détails ...
    type|T=MIME-type Force l'attribution du Type-MIME spécifié au fichier cible. détails ...

    Développement du répertoire home

    Quand la chaîne de substitution commence par quelque chose comme "/~user" (de manière explicite ou par références arrières), mod_rewrite développe le répertoire home sans tenir compte de la présence ou de la configuration du module mod_userdir.

    Ce développement n'est pas effectué si le drapeau PT est utilisé dans la directive RewriteRule

    Voici toutes les combinaisons de substitution et leurs significations :

    Dans la configuration au niveau du serveur principal (httpd.conf)
    pour la requête ``GET /chemin/infochemin'':

    Règle Résultat de la substitution
    ^/un_chemin(.*) autre_chemin$1 invalide, non supporté
    ^/un_chemin(.*) autre_chemin$1 [R] invalide, non supporté
    ^/un_chemin(.*) autre_chemin$1 [P] invalide, non supporté
    ^/un_chemin(.*) /autre_chemin$1 /autre_chemin/info_chemin
    ^/un_chemin(.*) /autre_chemin$1 [R] http://cet_hote/autre_chemin/info_chemin via une redirection externe
    ^/un_chemin(.*) /autre_chemin$1 [P] sans objet, non supporté
    ^/un_chemin(.*) http://cet_hote/autre_chemin$1 /autre_chemin/info_chemin
    ^/un_chemin(.*) http://cet_hote/autre_chemin$1 [R] http://cet_hote/autre_chemin/info_chemin via une redirection externe
    ^/un_chemin(.*) http://cet_hote/autre_chemin$1 [P] sans objet, non supporté
    ^/un_chemin(.*) http://autre_hote/autre_chemin$1 http://autre_hote/autre_chemin/info_chemin via une redirection externe
    ^/un_chemin(.*) http://autre_hote/autre_chemin$1 [R] http://autre_hote/autre_chemin/info_chemin (le drapeau [R] est redondant)
    ^/somepath(.*) http://otherhost/otherpath$1 [P] http://otherhost/otherpath/pathinfo via internal proxy

    Dans une configuration de niveau répertoire pour /chemin
    (/chemin/physique/vers/chemin/.htacccess, avec RewriteBase "/chemin")
    pour la requête ``GET /chemin/chemin-local/infochemin'':

    Règle Résultat de la substitution
    ^chemin-local(.*) autre-chemin$1 /chemin/autre-chemin/infochemin
    ^chemin-local(.*) autre-chemin$1 [R] http://cet-hôte/chemin/autre-chemin/infochemin via redirection externe
    ^chemin-local(.*) autre-chemin$1 [P] n'a pas lieu d'être, non supporté
    ^chemin-local(.*) /autre-chemin$1 /autre-chemin/infochemin
    ^chemin-local(.*) /autre-chemin$1 [R] http://cet-hôte/autre-chemin/infochemin via redirection externe
    ^chemin-local(.*) /autre-chemin$1 [P] n'a pas lieu d'être, non supporté
    ^chemin-local(.*) http://cet-hôte/autre-chemin$1 /autre-chemin/infochemin
    ^chemin-local(.*) http://cet-hôte/autre-chemin$1 [R] http://cet-hôte/autre-chemin/infochemin via redirection externe
    ^chemin-local(.*) http://cet-hôte/autre-chemin$1 [P] n'a pas lieu d'être, non supporté
    ^chemin-local(.*) http://autre hôte/autre-chemin$1 http://autre hôte/autre-chemin/infochemin via redirection externe
    ^chemin-local(.*) http://autre hôte/autre-chemin$1 [R] http://autre hôte/autre-chemin/infochemin via redirection externe (le drapeau [R] est redondant)
    ^chemin-local(.*) http://autre hôte/autre-chemin$1 [P] http://autre hôte/autre-chemin/infochemin via un mandataire interne

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_lbmethod_bytraffic.html.en0000644000000000000500000002032613412755316022207 0ustar rootsrc mod_lbmethod_bytraffic - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_lbmethod_bytraffic

    Available Languages:  en  |  fr 

    Description:Weighted Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    Status:Extension
    Module Identifier:lbmethod_bytraffic_module
    Source File:mod_lbmethod_bytraffic.c
    Compatibility:Split off from mod_proxy_balancer in 2.3

    Summary

    This module does not provide any configuration directives of its own. It requires the services of mod_proxy_balancer, and provides the bytraffic load balancing method.

    Support Apache!

    Topics

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    top

    Weighted Traffic Counting Algorithm

    Enabled via lbmethod=bytraffic, the idea behind this scheduler is very similar to the Request Counting method, with the following changes:

    lbfactor is how much traffic, in bytes, we want this worker to handle. This is also a normalized value representing their "share" of the amount of work to be done, but instead of simply counting the number of requests, we take into account the amount of traffic this worker has either seen or produced.

    If a balancer is configured as follows:

    worker a b c
    lbfactor 1 2 1

    Then we mean that we want b to process twice the amount of bytes than a or c should. It does not necessarily mean that b would handle twice as many requests, but it would process twice the I/O. Thus, the size of the request and response are applied to the weighting and selection algorithm.

    Note: input and output bytes are weighted the same.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_info.html0000644000000000000500000000060713362070302016677 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_info.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_info.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_info.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_info.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_authz_owner.html.ja.utf80000644000000000000500000003167013412755316021606 0ustar rootsrc mod_authz_owner - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_authz_owner

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‰€æœ‰è€…ã«åŸºã¥ã„ãŸæ‰¿èª
    ステータス:Extension
    モジュール識別å­:authz_owner_module
    ソースファイル:mod_authz_owner.c
    äº’æ›æ€§:Apache 2.1 以é™ã§ä½¿ç”¨å¯èƒ½

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã•れãŸãƒ•ァイルã®ãƒ•ァイルシステム㮠所有者やグループを HTTP èªè¨¼ã«ä½¿ã‚れãŸãƒ¦ãƒ¼ã‚¶ ID (ウェブユーザ ID) 㨠比較ã™ã‚‹ã“ã¨ã§ã‚¢ã‚¯ã‚»ã‚¹ã‚’承èªã—ã¾ã™ã€‚æä¾›ã•れãŸãƒ¦ãƒ¼ã‚¶åã¨ãƒ‘スワード㯠mod_auth_basic ã‚„ mod_auth_digest ã®ã‚ˆã†ãªèªè¨¼ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§æ—¢ã« é©åˆ‡ã«æ¤œè¨¼ã•れã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚mod_authz_owner ã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ã€Require ディレクティブ㮠file-owner 㨠file-group ã¨ã„ã†äºŒã¤ã®å¼•æ•°ã‚’èªè­˜ã—ã¾ã™:

    file-owner
    æä¾›ã•れãŸã‚¦ã‚§ãƒ–ユーザåã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã•れãŸãƒ•ã‚¡ã‚¤ãƒ«ã®æ‰€æœ‰è€…㮠システムã«ãŠã‘ã‚‹åå‰ã¨ä¸€è‡´ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚ã¤ã¾ã‚Šã€ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚° システムãŒãƒ•ァイル㯠jones ã«ã‚ˆã‚Šæ‰€æœ‰ã•れã¦ã„ã‚‹ ã¨è¨€ã£ãŸã¨ãã¯ã€ã‚¦ã‚§ãƒ–ã‹ã‚‰ã®ã‚¢ã‚¯ã‚»ã‚¹ã«ä½¿ã‚れるユーザåã‚‚ jones ã§ãªã‘れã°ãªã‚Šã¾ã›ã‚“。
    file-group
    ファイルを所有ã™ã‚‹ã‚·ã‚¹ãƒ†ãƒ ã®ã‚°ãƒ«ãƒ¼ãƒ—ã®åå‰ãŒã€ä¾‹ãˆã° mod_authz_groupfile ã‚„ mod_authz_dbm ã«ã‚ˆã‚Šæä¾›ã•れるグループデータベースã«å­˜åœ¨ã—ã¦ã„ã¦ã€ ウェブユーザåãŒãã®ã‚°ãƒ«ãƒ¼ãƒ—ã«å±žã—ã¦ã„ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 例ãˆã°ã€ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ãŒãƒ•ァイル㯠(システムã®) グループ accounts ã«ã‚ˆã‚Šæ‰€æœ‰ã•れã¦ã„ã‚‹ã¨è¨€ã£ãŸã¨ãã¯ã€ accounts ãŒã‚°ãƒ«ãƒ¼ãƒ—データベースã«å­˜åœ¨ã—ã¦ã€ リクエストã«ä½¿ç”¨ã•れãŸã‚¦ã‚§ãƒ–ユーザåãŒãã®ã‚°ãƒ«ãƒ¼ãƒ—ã«å±žã—ã¦ã„ã‚‹ å¿…è¦ãŒã‚りã¾ã™ã€‚

    注

    ファイルシステムã«å®Ÿéš›ã«ã¯å­˜åœ¨ã—ãªã„リソース (ã¤ã¾ã‚Š ãƒãƒ¼ãƒãƒ£ãƒ«ãªãƒªã‚½ãƒ¼ã‚¹) ã®æ‰¿èªã« mod_authz_owner ãŒä½¿ç”¨ã•れãŸã¨ãã¯ã€ ã‚¢ã‚¯ã‚»ã‚¹ã¯æ‹’å¦ã•れã¾ã™ã€‚

    特ã«ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒˆ ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã•れãŸ"MultiViews" ã®ãƒªã‚½ãƒ¼ã‚¹ã¯ 決ã—ã¦æ‰¿èªã—ã¾ã›ã‚“。

    Support Apache!

    トピック

    ディレクティブ

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚りã¾ã›ã‚“。

    Bugfix checklist

    å‚ç…§

    top

    設定例

    Require file-owner

    複数ユーザã®ã‚·ã‚¹ãƒ†ãƒ ã§ Apache ウェブサーãƒãŒå®Ÿè¡Œã•れã¦ã„ã¦ã€ ~/public_html/private ã«å„ユーザãŒãƒ•ァイルを置ã„ã¦ã„ã‚‹ã¨ã—ã¾ã™ã€‚ AuthDBMUserFile データベースãŒä¸€ã¤ã ã‘ã‚りã€ã™ã¹ã¦ã®ã‚¦ã‚§ãƒ–ユーザåãŒåˆ—挙ã•れã¦ãŠã‚Šã€ ã“ã®ãƒ¦ãƒ¼ã‚¶åãŒã‚µãƒ¼ãƒã§å®Ÿéš›ã«ãƒ•ァイルを所有ã—ã¦ã„るユーザåã¨ä¸€è‡´ã—ã¦ã„ã‚‹å ´åˆã€ 次ã®ç¯€ã®ã‚ˆã†ãªè¨­å®šã§ã€ãƒ¦ãƒ¼ã‚¶ãŒè‡ªåˆ†è‡ªèº«ã®ãƒ•ァイルã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ /home/smith/public_html/private ã®ä¸­ã®ãƒ•ァイルã¯ã€æ‰€æœ‰è€…㌠smith ã®ä»£ã‚り㫠jones ã«ãªã£ã¦ã„ãªã„é™ã‚Šã€ jones ã«ã¯ã‚¢ã‚¯ã‚»ã‚¹ã¯è¨±å¯ã•れã¾ã›ã‚“。

    <Directory /home/*/public_html/private>
    AuthType Basic
    AuthName MyPrivateFiles
    AuthBasicProvider dbm
    AuthDBMUserFile /usr/local/apache2/etc/.htdbm-all
    Require file-owner
    </Directory>

    Require file-group

    上記ã®ã‚ˆã†ãªã‚·ã‚¹ãƒ†ãƒ ã§ã€æ•°äººã®ãƒ¦ãƒ¼ã‚¶ãŒãƒ—ロジェクトã®ãƒ•ァイルを ~/public_html/project-foo ã§å…±æœ‰ã—ã¦ã„ã‚‹ã¨ã—ã¾ã™ã€‚ ファイルã¯ã‚·ã‚¹ãƒ†ãƒ ã®ã‚°ãƒ«ãƒ¼ãƒ— foo ã«æ‰€æœ‰ã•れã¦ã„ã¦ã€ AuthDBMGroupFile データベースãŒä¸€ã¤ã ã‘ã‚りã€ãã“ã«ã™ã¹ã¦ã®ã‚¦ã‚§ãƒ–ユーザå㨠グループã®ãƒ¡ãƒ³ãƒãŒåˆ—挙ã•れã¦ã„ã‚‹ã€ã¤ã¾ã‚Šã€ãれら㮠ユーザã¯å°‘ãªãã¨ã‚‚ foo ã¨ã„ã†ã‚°ãƒ«ãƒ¼ãƒ—ã«å±žã—ã¦ã„ã‚‹ã€ã¨ã—ã¾ã™ã€‚ jones ã¨smith ã®äºŒäººå…±ãŒã‚°ãƒ«ãƒ¼ãƒ— foo ã®ãƒ¡ãƒ³ãƒã§ã‚ã‚‹å ´åˆã€ã©ã¡ã‚‰ã®äººã‚‚両方㮠project-foo ã«ã‚¢ã‚¯ã‚»ã‚¹ãŒè¨±å¯ã•れã¾ã™ã€‚

    <Directory /home/*/public_html/project-foo>
    AuthType Basic
    AuthName "Project Foo Files"
    AuthBasicProvider dbm

    # combined user/group database
    AuthDBMUserFile /usr/local/apache2/etc/.htdbm-all
    AuthDBMGroupFile /usr/local/apache2/etc/.htdbm-all

    Satisfy All
    Require file-group
    </Directory>

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_echo.html.ja.utf80000644000000000000500000001761213412755316020157 0ustar rootsrc mod_echo - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_echo

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    説明:ãƒ—ãƒ­ãƒˆã‚³ãƒ«ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æ¦‚è¦ã‚’示ã™ãŸã‚ã®å˜ç´”ãªã‚¨ã‚³ãƒ¼ã‚µãƒ¼ãƒ
    ステータス:Experimental
    モジュール識別å­:echo_module
    ソースファイル:mod_echo.c

    概è¦

    本モジュールã¯ã‚³ãƒ³ã‚»ãƒ—トをä¼ãˆã‚‹ãŸã‚ã®ãƒ—ロトコルモジュール㮠実装例ã¨ãªã£ã¦ã„ã¾ã™ã€‚å˜ç´”ãªã‚¨ã‚³ãƒ¼ã‚µãƒ¼ãƒã‚’æä¾›ã—ã¾ã™ã€‚ Telnet ã§æŽ¥ç¶šã—ã€æ–‡å­—列をé€ä¿¡ã™ã‚‹ã¨ã€ã‚¨ã‚³ãƒ¼ã‚’è¿”ã—ã¾ã™ã€‚

    Support Apache!

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    ProtocolEcho ディレクティブ

    説明:エコーサーãƒã®æœ‰åŠ¹ç„¡åŠ¹ã‚’è¨­å®šã—ã¾ã™ã€‚
    æ§‹æ–‡:ProtocolEcho On|Off
    デフォルト:ProtocolEcho Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Experimental
    モジュール:mod_echo

    ProtocolEcho ディレクティブ㧠エコーサーãƒã®æœ‰åŠ¹ç„¡åŠ¹ã‚’è¨­å®šã—ã¾ã™ã€‚

    例

    ProtocolEcho On

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_usertrack.html0000644000000000000500000000033613362070302017746 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_usertrack.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_usertrack.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_nw_ssl.html.en0000644000000000000500000002301013412755316017656 0ustar rootsrc mod_nw_ssl - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_nw_ssl

    Available Languages:  en  |  fr 

    Description:Enable SSL encryption for NetWare
    Status:Base
    Module Identifier:nwssl_module
    Source File:mod_nw_ssl.c
    Compatibility:NetWare only

    Summary

    This module enables SSL encryption for a specified port. It takes advantage of the SSL encryption functionality that is built into the NetWare operating system.

    top

    NWSSLTrustedCerts Directive

    Description:List of additional client certificates
    Syntax:NWSSLTrustedCerts filename [filename] ...
    Context:server config
    Status:Base
    Module:mod_nw_ssl

    Specifies a list of client certificate files (DER format) that are used when creating a proxied SSL connection. Each client certificate used by a server must be listed separately in its own .der file.

    top

    NWSSLUpgradeable Directive

    Description:Allows a connection to be upgraded to an SSL connection upon request
    Syntax:NWSSLUpgradeable [IP-address:]portnumber
    Context:server config
    Status:Base
    Module:mod_nw_ssl

    Allow a connection that was created on the specified address and/or port to be upgraded to an SSL connection upon request from the client. The address and/or port must have already be defined previously with a Listen directive.

    top

    SecureListen Directive

    Description:Enables SSL encryption for the specified port
    Syntax:SecureListen [IP-address:]portnumber Certificate-Name [MUTUAL]
    Context:server config
    Status:Base
    Module:mod_nw_ssl

    Specifies the port and the eDirectory based certificate name that will be used to enable SSL encryption. An optional third parameter also enables mutual authentication.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/overrides.html0000644000000000000500000000032613514635332017116 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: overrides.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: overrides.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_authz_user.html.fr.utf80000644000000000000500000002057213412755316021446 0ustar rootsrc mod_authz_user - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authz_user

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Autorisation basée sur l'utilisateur
    Statut:Base
    Identificateur de Module:authz_user_module
    Fichier Source:mod_authz_user.c
    Compatibilité:Disponible depuis les versions 2.1 et supérieures d'Apache

    Sommaire

    Ce module permet d'accorder ou de refuser l'accès à certaines zones du site web aux utilisateurs authentifiés. mod_authz_user accorde l'accès si l'utilisateur authentifié fait partie de la liste spécifiée par une directive Require user. On peut aussi utiliser la directive Require valid-user pour accorder l'accès à tous les utilisateurs qui ont été authentifiés avec succès.

    Support Apache!

    Sujets

    Directives

    Ce module ne fournit aucune directive.

    Traitement des bugs

    Voir aussi

    top

    The Require Directives

    Les directives Require d'Apache permettent, au cours de la phase d'autorisation, de s'assurer qu'un utilisateur est bien autorisé à accéder à une ressource. mod_authz_user ajoute les types d'autorisation user et valid-user.

    A partir de la version 2.4.8, les directives require DBM supportent les expressions.

    Require user

    Cette directive permet de spécifier une liste d'utilisateurs autorisés à accéder à la ressource.

    Require user john paul george ringo

    Require valid-user

    Lorsque cette directive est définie, tout utilisateur qui s'est authentifié avec succès aura l'autorisation d'accès à la ressource.

    Require valid-user

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_unixd.html.fr.utf80000644000000000000500000003531013412755316020400 0ustar rootsrc mod_unixd - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_unixd

    Langues Disponibles:  en  |  fr  |  tr 

    Description:Sécurité de base (nécessaire) pour les plates-formes de la famille Unix.
    Statut:Base
    Identificateur de Module:unixd_module
    Fichier Source:mod_unixd.c
    top

    Directive ChrootDir

    Description:Répertoire dans lequel Apache doit se positionner au démarrage après avoir effectué un chroot(8).
    Syntaxe:ChrootDir chemin-répertoire
    Défaut:Non défini
    Contexte:configuration globale
    Statut:Base
    Module:mod_unixd
    Compatibilité:Disponible depuis la version 2.2.10 d'Apache

    Cette directive fait en sorte que le serveur effectue un chroot(8) vers le répertoire spécifié après le démarrage, mais avant d'accepter les requêtes en provenance du réseau.

    Notez que l'exécution du serveur dans un environnement chroot n'est pas simple et nécessite une configuration particulière, en particulier si vous utilisez des scripts CGI ou PHP. Il est conseillé de se familiariser avec l'opération chroot avant d'essayer d'utiliser cette fonctionnalité.

    top

    Directive Group

    Description:Groupe sous lequel le serveur va traiter les requêtes
    Syntaxe:Group groupe unix
    Défaut:Group #-1
    Contexte:configuration globale
    Statut:Base
    Module:mod_unixd

    La directive Group permet de définir le groupe sous lequel le serveur va traiter les requêtes. Pour utiliser cette directive, le serveur doit avoir été démarré par root. Si vous démarrez le serveur en tant qu'utilisateur non root, celui-ci ne pourra pas adopter le groupe spécifié comme groupe d'exécution, et continuera à s'exécuter sous le groupe de l'utilisateur qui l'aura lancé. groupe unix peut se présenter sous la forme :

    d'un nom de groupe
    Référence le groupe spécifié par son nom.
    du caractère # suivi d'un numéro de groupe.
    Référence le groupe spécifié par son numéro.

    Exemple

    Group www-group

    Il est conseillé de créer un groupe dédié à l'exécution du serveur. Certains administrateurs utilisent l'utilisateur nobody, mais ce n'est pas toujours souhaitable ou même possible.

    Sécurité

    Ne définissez pas la directive Group (ou User) à root à moins de savoir exactement ce que vous faites ainsi que les dangers encourus.

    Voir aussi

    top

    Directive Suexec

    Description:Active ou désactive la fonctionnalité suEXEC
    Syntaxe:Suexec On|Off
    Défaut:On si le binaire suexec existe avec les mode et propriétaire appropriés, Off dans le cas contraire
    Contexte:configuration globale
    Statut:Base
    Module:mod_unixd

    Lorsque cette directive est définie à On, le démarrage échouera si le binaire suexec n'existe pas, ou possède un propriétaire ou mode fichier invalide.

    Lorsque cette directive est définie à Off, suEXEC sera désactivé, même si le binaire suexec existe et possède un propriétaire et mode fichier valides.

    top

    Directive User

    Description:L'utilisateur sous lequel le serveur va traiter les requêtes
    Syntaxe:User utilisateur unix
    Défaut:User #-1
    Contexte:configuration globale
    Statut:Base
    Module:mod_unixd

    La directive User permet de définir l'utilisateur sous lequel le serveur va traiter les requêtes. Pour utiliser cette directive, le serveur doit avoir été démarré par root. Si vous démarrez le serveur en tant qu'utilisateur non root, celui-ci ne pourra pas adopter l'utilisateur avec privilèges restreints comme utilisateur d'exécution, et continuera à s'exécuter sous l'utilisateur qui l'aura lancé. Si vous démarrez le serveur en tant que root, il est normal que le processus parent continue à s'exécuter sous root. utilisateur unix peut se présenter sous la forme :

    d'un nom d'utilisateur
    Référence l'utilisateur spécifié par son nom.
    le caractère # suivi d'un numéro d'utilisateur.
    Référence l'utilisateur spécifié par son numéro.

    L'utilisateur ne doit pas posséder de privilèges qui lui permettraient d'accéder à des fichiers non destinés au monde extérieur, et parallèlement, l'utilisateur ne doit pas exécuter de code dont l'usage soit destiné à un usage autre que les requêtes HTTP. Il est conseillé de créer un utilisateur et un groupe dédiés à l'exécution du serveur. Certains administrateurs utilisent l'utilisateur nobody, mais ce n'est pas toujours souhaitable, car l'utilisateur nobody peut avoir diverses utilisations dans le système.

    Sécurité

    Ne définissez pas la directive Group (ou User) à root à moins de savoir exactement ce que vous faites ainsi que les dangers encourus.

    Voir aussi

    Langues Disponibles:  en  |  fr  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_status.html0000644000000000000500000000075113362070302017267 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_status.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_status.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_status.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_status.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: mod_status.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_cgid.html.fr.utf80000644000000000000500000003007313412755316020160 0ustar rootsrc mod_cgid - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_cgid

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Exécution des scripts CGI par l'intermédiaire d'un démon CGI externe
    Statut:Base
    Identificateur de Module:cgid_module
    Fichier Source:mod_cgid.c
    Compatibilité:Uniquement compatible avec les MPMs Unix threadés

    Sommaire

    Exceptées les optimisations et la directive additionnelle ScriptSock décrite ci-dessous, mod_cgid a un comportement similaire à celui de mod_cgi. Voir le résumé de mod_cgi pour plus de détails à propos d'Apache et CGI.

    Sur certains systèmes d'exploitation de type unix, le lancement (forking) d'un processus depuis un serveur multi-threadé est une opération très lourde car le nouveau processus va répliquer tous les threads du processus parent. Pour éviter cette dépense de ressouces pour chaque invocation d'un programme CGI, mod_cgid crée un démon externe qui est responsable du branchement de processus enfants destinés au lancement de scripts CGI. Le serveur principal communique avec ce démon par l'intermédiaire d'une socket de domaine unix.

    Si un MPM multi-threadé a été sélectionné lors du processus de compilation, c'est ce module qui est utilisé par défaut à la place de mod_cgi. Du point de vue de l'utilisateur, ce module est identique à mod_cgi quant à sa configuration et son utilisation. La seule différence est la directive additionnelle ScriptSock qui permet de définir le nom du socket à utiliser pour la communication avec le démon CGI.

    top

    Directive CGIDScriptTimeout

    Description:Durée maximale d'attente de la prochaine sortie du programme CGI
    Syntaxe:CGIDScriptTimeout time[s|ms]
    Défaut:Valeur de la directive Timeout
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Base
    Module:mod_cgid
    Compatibilité:La valeur de CGIDScriptTimeout est 0 dans les versions 2.4 et antérieures

    Cette directive permet de limiter la durée d'attente avant les prochaines données reçues en sortie du programme CGI. Si ce temps est dépassé, la requête et le programme CGI se terminent.

    Exemple

    CGIDScriptTimeout 20
    top

    Directive ScriptSock

    Description:Le préfixe du nom de fichier du socket à utiliser pour communiquer avec le démon CGI
    Syntaxe:ScriptSock chemin fichier
    Défaut:ScriptSock cgisock
    Contexte:configuration globale
    Statut:Base
    Module:mod_cgid

    Cette directive permet de définir le préfixe du nom de fichier de la socket à utiliser pour communiquer avec le démon CGI, préfixe auquel sera ajouté une extension correspondant à l'identifiant processus du serveur. La socket sera ouverte avec les permissions de l'utilisateur qui a démarré Apache (en général root). Afin de préserver la sécurité des communications avec les scripts CGI, il est impératif de n'accorder à aucun autre utilisateur la permission d'écrire dans le répertoire où se trouve la socket.

    Si chemin fichier n'est pas un chemin absolu, il est relatif au chemin défini par la directive DefaultRuntimeDir.

    Exemple

    ScriptSock /var/run/cgid.sock

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_example_hooks.html.ko.euc-kr0000644000000000000500000002541213412755316022413 0ustar rootsrc mod_example_hooks - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_example_hooks

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:¾ÆÆÄÄ¡ ¸ðµâ API¸¦ ¼³¸íÇÑ´Ù
    »óÅÂ:Experimental
    ¸ðµâ¸í:example_hooks_module
    ¼Ò½ºÆÄÀÏ:mod_example_hooks.c

    ¿ä¾à

    ¾ÆÆÄÄ¡ ¹èÆ÷º» modules/examples µð·ºÅ丮¿¡ ÀÖ´Â ÆÄÀϵéÀº ¾ÆÆÄÄ¡ API¸¦ »ç¿ëÇÏ¿© ¸ðµâÀ» ÀÛ¼ºÇÏ·Á´Â »ç¶÷µéÀ» µ½±âÀ§ÇÑ ¿¹Á¦´Ù.

    mod_example_hooks.c´Â ¸ðµç Äݹé(callback) ±¸Á¶¿Í È£Ãâ ¹®¹ýÀ» ¼³¸íÇÏ´Â ÆÄÀÏÀÌ´Ù. ´ç½ÅÀº ¸ðµâ¿¡ ÀÌ ¸ðµç ÄݹéÀ» ±¸ÇöÇÒ Çʿ䰡 ¾ø´Ù. »ç½Ç Á¤¹Ý´ë´Ù!

    example ¸ðµâÀº ½ÇÁ¦·Î µ¿ÀÛÇÏ´Â ¸ðµâÀÌ´Ù. ÀÌ ¸ðµâÀ» ¼­¹ö¿¡ ¿¬°áÇÏ°í Æ¯Á¤ À§Ä¡¿¡ "example-hooks-handler" Çڵ鷯¸¦ ÇÒ´çÇÏ¿© ±×°÷À» ºê¶ó¿ì¡Çϸé example ¸ðµâÀÇ ¿©·¯ ÄݹéÀ» È®ÀÎÇÒ ¼ö ÀÖ´Ù.

    top

    example ¸ðµâ ÄÄÆÄÀÏÇϱâ

    ¼­¹ö¿¡ example ¸ðµâÀ» Æ÷ÇÔÇÏ·Á¸é ´ÙÀ½ °úÁ¤À» °ÅÄ£´Ù:

    1. --enable-example-hooks ¿É¼Ç°ú ÇÔ²² configure¸¦ ½ÇÇàÇÑ´Ù.
    2. ¼­¹ö¸¦ ÄÄÆÄÀÏÇÑ´Ù ("make"¸¦ ½ÇÇàÇÑ´Ù).

    ÀÚ½ÅÀÌ ¸¸µç ¸ðµâÀ» Ãß°¡ÇÏ·Á¸é:

    1. cp modules/examples/mod_example_hooks.c modules/new_module/mod_myexample.c
    2. ÆÄÀÏÀ» ¼öÁ¤ÇÑ´Ù.
    3. modules/new_module/config.m4 ÆÄÀÏÀ» ¸¸µç´Ù.
      1. APACHE_MODPATH_INIT(new_module)À» Ãß°¡ÇÑ´Ù.
      2. modules/examples/config.m4 ÆÄÀÏ¿¡¼­ "example_hooks"ÀÌ ÀÖ´Â APACHE_MODULE ÁÙÀ» º¹»çÇØ¿Â´Ù.
      3. ù¹øÂ° ¾Æ±Ô¸ÕÆ® "example_hooks"À» myexample·Î º¯°æÇÑ´Ù.
      4. µÎ¹øÂ° ¾Æ±Ô¸ÕÆ® ÀÚ¸®¿¡ ÀÚ½ÅÀÌ ¸¸µç ¸ðµâ¿¡ ´ëÇÑ °£´ÜÇÑ ¼³¸íÀ» Àû´Â´Ù. configure --help¸¦ ½ÇÇàÇÏ¸é ¿©±â¿¡ ±â·ÏÇÑ ¼³¸íÀ» º¸¿©ÁØ´Ù.
      5. ¸ðµâÀ» ÄÄÆÄÀÏÇÒ¶§ Ưº°ÇÑ C ÄÄÆÄÀÏ·¯ ¿É¼Ç, ¸µÄ¿ ¿É¼Ç, ¶óÀ̺귯¸®°¡ ÇÊ¿äÇÏ¸é °¢°¢ CFLAGS, LDFLAGS, LIBS¿¡ Ãß°¡ÇÑ´Ù. modules µð·ºÅ丮¿¡ ÀÖ´Â ´Ù¸¥ config.m4 ÆÄÀϵéÀ» Âü°íÇ϶ó.
      6. APACHE_MODPATH_FINISH¸¦ Ãß°¡ÇÑ´Ù.
    4. module/new_module/Makefile.in ÆÄÀÏÀ» ¸¸µç´Ù. ¸ðµâÀ» ÄÄÆÄÀÏÇϴµ¥ Ưº°ÇÑ ¸í·É¾î°¡ ÇÊ¿ä¾ø´Ù¸é, ÆÄÀÏ¿¡ include $(top_srcdir)/build/special.mk¸¸ À־ µÈ´Ù.
    5. ÃÖ»óÀ§ µð·ºÅ丮¿¡¼­ ./buildconf ¸¦ ½ÇÇàÇÑ´Ù.
    6. --enable-myexample ¿É¼ÇÀ» »ç¿ëÇÏ¿© ¼­¹ö¸¦ ÄÄÆÄÀÏÇÑ´Ù
    top

    mod_example_hooks ¸ðµâ »ç¿ëÇϱâ

    example ¸ðµâÀ» »ç¿ëÇÏ·Á¸é httpd.conf ÆÄÀÏ¿¡ ´ÙÀ½°ú °°Àº ¼³Á¤À» Ãß°¡Ç϶ó:

    <Location /example-hooks-info>
    SetHandler example-hooks-handler
    </Location>

    ¾Æ´Ï¸é .htaccess ÆÄÀÏ¿¡ ´ÙÀ½°ú °°Àº ³»¿ëÀ» Ãß°¡Çϰí, ±× À§Ä¡¿¡¼­ "test.example" °°Àº ÆÄÀÏÀ» ¿äûÇ϶ó:

    AddHandler example-hooks-handler .example

    ¼­¹ö¸¦ Àç½ÃÀÛÇÑ ÈÄ ÀÌ À§Ä¡¸¦ ºê¶ó¿ì¡ÇÏ¸é ¾Õ¿¡¼­ ¸»ÇÑ ³»¿ëÀ» º¸°ÔµÉ °ÍÀÌ´Ù.

    top

    Example Áö½Ã¾î

    ¼³¸í:¾ÆÆÄÄ¡ ¸ðµâ API¸¦ ¼³¸íÇϱâÀ§ÇÑ ¿¹Á¦ Áö½Ã¾î
    ¹®¹ý:Example
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Experimental
    ¸ðµâ:mod_example_hooks

    Example Áö½Ã¾î´Â example ¸ðµâÀÇ ³»¿ëÇڵ鷯°¡ °£´ÜÇÑ ¹®±¸¸¦ º¸ÀÏÁö ¿©ºÎ¸¦ ¼³Á¤ÇÑ´Ù. ÀÌ Áö½Ã¾î´Â ¾Æ±Ô¸ÕÆ®¸¦ ¹ÞÁö¾Ê´Â´Ù. example ³»¿ëÇڵ鷯¸¦ Àû¿ëÇÑ URL¿¡ Á¢¼ÓÇÏ¸é ¹®¼­ ¿äûÀ» ¼­ºñ½ºÇϱâÀ§ÇØ ¸ðµâ¾È¿¡ ÇÔ¼öµéÀÌ ¾î¶»°Ô ±×¸®°í ¾î¶² ¼ø¼­·Î ºÒ¸®´ÂÁö ¾Ë ¼ö ÀÖ´Ù. ÀÌ Áö½Ã¾îÀÇ È¿°ú´Â "Example directive declared here: YES/NO"·Î È®ÀÎÇÒ ¼ö ÀÖ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_unixd.html.tr.utf80000644000000000000500000003453713447004010020412 0ustar rootsrc mod_unixd - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_unixd

    Mevcut Diller:  en  |  fr  |  tr 

    Açıklama:Unix ailesi platformlar için temel (gerekli) güvenlik.
    Durum:Temel
    Modül Betimleyici:unixd_module
    Kaynak Dosyası:mod_unixd.c
    top

    ChrootDir Yönergesi

    Açıklama:Sunucunun başlatıldıktan sonra chroot(8) yapacağı dizini belirler.
    Sözdizimi:ChrootDir /dizin/yolu
    Öntanımlı:none
    BaÄŸlam:sunucu geneli
    Durum:Temel
    Modül:mod_unixd
    Uyumluluk:Apache HTTP Sunucusunun 2.2.10 and laterve sonraki sürümlerinde kullanılabilir.

    Bu yönerge sunucuya başlatıldıktan sonra ağdan gelen istekleri kabul etmeden önce belirtilen dizine chroot(8) yapmasını söyler.

    Sunucuyu chroot altında çalıştırmanın basit bir işlem olmadığına ve özellikle CGI veya PHP gibi betikler çalıştırıyorsanız ek ayarlamalar yapmanız gerektiğine dikkat ediniz. Lütfen, bu özelliği kullanmaya çalışmadan önce chroot işlemleri hakkında gerektiği kadar bilgi sahibi olduğunuzdan emin olunuz.

    top

    Group Yönergesi

    Açıklama:İsteklere yanıt verecek sunucunun ait olacağı grubu belirler.
    Sözdizimi:Group unix-grubu
    Öntanımlı:Group #-1
    BaÄŸlam:sunucu geneli
    Durum:Temel
    Modül:mod_unixd

    Group yönergesi, sunucunun hangi grup altında isteklere yanıt vereceğini belirler. Bu yönergenin uygulanabilmesi için sunucunun root olarak çalıştırılmış olması gerekir. Sunucuyu root dışında bir kullanıcı başlattığı takdirde, sunucu belirtilen gruba geçemez ve kullanıcının kendi grubunda çalışmaya devam eder. unix-grubu şunlardan biri olabilir:

    Bir grup adı
    Gruba ismiyle baÅŸvurulur.
    # ardından grup numarası
    Gruba numarası ile başvurulur.
    Group www-group

    Çalışan sunucu için özellikle yeni bir grup atamanız önerilir. Bazı sistem yöneticileri nobody grubunu kullanırlar fakat bu her zaman mümkün olmadığı gibi arzulanan da değildir.

    Güvenlik

    Ne yaptığınızı ve ne tehlikelere yol açacağınızı bilmiyorsanız Group (veya User) yönergesine değer olarak root atamayınız.

    Ayrıca bakınız:

    top

    Suexec Yönergesi

    Açıklama:suEXEC özelliğini etkin veya etkisiz yapar
    Sözdizimi:Suexec On|Off
    Öntanımlı:suexec çalıştırılabiliri uygun sahip ve kip ile mevcutsa On, değilse Off
    BaÄŸlam:sunucu geneli
    Durum:Temel
    Modül:mod_unixd

    On olduğunda, suexec çalıştırılabiliri yoksa veya dosya kipi ve sahibi geçersizse httpd başlatılamaz.

    Off olduğunda, suexec çalıştırılabiliri varsa ve hatta dosya kipi ve sahibi geçerli olsa bile suEXEC özelliği iptal edilir.

    top

    User Yönergesi

    Açıklama:İsteklere yanıt verecek sunucunun ait olacağı kullanıcıyı belirler.
    Sözdizimi:User unix-kullanıcısı
    Öntanımlı:User #-1
    BaÄŸlam:sunucu geneli
    Durum:Temel
    Modül:mod_unixd

    User yönergesi, sunucunun hangi kullanıcı olarak isteklere yanıt vereceğini belirler. Bu yönergenin uygulanabilmesi için sunucunun root olarak çalıştırılmış olması gerekir. Sunucuyu root dışında bir kullanıcı başlattığı takdirde, sunucu belirtilen kullanıcıya geçemez ve mevcut kullanıcıyla çalışmaya devam eder. Eğer sunucuyu root olarak başlatmışsanız ana süreç root olarak çalışmaya devam edecektir. unix-kullanıcısı şunlardan biri olabilir:

    Bir kullanıcı adı
    Gruba ismiyle baÅŸvurulur.
    # ardından kullanıcı numarası
    Kullanıcıya numarası ile başvurulur.

    Bu yönergede belirtilecek kullanıcının, başkaları tarafından üzerinde değişiklik yapılabilecek dosyalardan başkasına erişemeyen bir kullanıcı olmaması gerektiği gibi, HTTP isteklerini işlemek dışında işlemler de yapabilen bir kullanıcı olmamalıdır. Çalışan sunucu için özellikle yeni bir grup atamanız önerilir. Bazı sistem yöneticileri nobody kullanıcısını kullanırlar fakat nobody kullanıcısı sistemde başka amaçlarla kullanılabildiğinden bu her zaman mümkün olmadığı gibi arzulanan da değildir.

    Güvenlik

    Ne yaptığınızı ve ne tehlikelere yol açacağınızı bilmiyorsanız User (veya Group) yönergesine değer olarak root atamayınız.

    Ayrıca bakınız:

    Mevcut Diller:  en  |  fr  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_scgi.html.fr.utf80000644000000000000500000003713713416404674021452 0ustar rootsrc mod_proxy_scgi - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_proxy_scgi

    Langues Disponibles:  en  |  fr 

    Description:Module fournissant le support de la passerelle SCGI à mod_proxy
    Statut:Extension
    Identificateur de Module:proxy_scgi_module
    Fichier Source:mod_proxy_scgi.c
    Compatibilité:Disponible depuis la version 2.2.14 d'Apache

    Sommaire

    Pour pouvoir fonctionner, ce module requiert le chargement de mod_proxy. Il fournit le support du protocole SCGI, version 1.

    Ainsi, pour être en mesure de traiter le protocole SCGI, mod_proxy et mod_proxy_scgi doivent être chargés dans le serveur.

    Avertissement

    N'activez pas la fonctionnalité de mandataire avant d'avoir sécurisé votre serveur. Les serveurs mandataires ouverts sont dangereux non seulement pour votre réseau, mais aussi pour l'Internet au sens large.

    top

    Exemples

    Rappelez-vous, pour que les exemples suivants puissent fonctionner, vous devez activer mod_proxy et mod_proxy_scgi.

    Passerelle simple

    ProxyPass "/scgi-bin/" "scgi://localhost:4000/"

    La passerelle à répartition de charge nécessite le chargement du module mod_proxy_balancer et d'au moins un module fournissant un algorithme de répartition de charge, comme mod_lbmethod_byrequests en plus des modules déjà cités. mod_lbmethod_byrequests est le module par défaut et sera utilisé dans cet exemple de configuration.

    Passerelle à répartition de charge

    ProxyPass "/scgi-bin/" "balancer://somecluster/"
    <Proxy "balancer://somecluster">
        BalancerMember "scgi://localhost:4000"
        BalancerMember "scgi://localhost:4001"
    </Proxy>
    top

    Variables d'environnement

    En plus des directives de configuration qui permettent de contrôler le comportement de mod_proxy, une variable d'environnement peut aussi contrôler le fournisseur de protocole SCGI :

    proxy-scgi-pathinfo
    Par défaut, mod_proxy_scgi ne créera ni exportera jamais la variable d'environnement PATH_INFO. Ceci permet au serveur SCGI d'arrière-plan de déterminer correctement SCRIPT_NAME et Script-URI, et de rester en conformité avec la section 3.3 de la RFC 3875. Si au contraire vous souhaitez que mod_proxy_scgi génère une estimation la plus précise possible de PATH_INFO, définissez cette variable d'environnement. La variable doit être définie avant que la directive SetEnv ne soit effective. Il est possible d'utiliser à la place la directive SetEnvIf : SetEnvIf Request_URI . proxy-scgi-pathinfo
    top

    Directive ProxySCGIInternalRedirect

    Description:Active ou désactive les réponses de redirection interne en provenance du serveur cible.
    Syntaxe:ProxySCGIInternalRedirect On|Off|Headername
    Défaut:ProxySCGIInternalRedirect On
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy_scgi
    Compatibilité:Le paramètre Headername est disponible depuis la version 2.4.13 du serveur HTTP Apache.

    La directive ProxySCGIInternalRedirect permet au serveur cible de rediriger en interne la passerelle vers une URL différente. Cette fonctionnalité trouve son origine dans mod_cgi qui redirige la réponse en interne si l'état de la réponse est OK (200), et si la réponse contient un en-tête Location (ou un autre en-tête défini) dont la valeur débute par un slash (/). Cette valeur est interprétée comme une nouvelle URL locale vers laquelle Apache httpd effectue sa redirection.

    De ce point de vue, mod_proxy_scgi fait la même chose que mod_cgi, mais vous pouvez en plus désactiver la fonctionnalité ou spécifier l'utilisation d'un en-tête autre que Location.

    Exemple

        ProxySCGIInternalRedirect Off
    # Django et certains autres frameworks qualifient pleinement les "URLs
    # locales" définies par l'application ; il faut donc utiliser un autre
    # en-tête.
    <Location /django-app/>
        ProxySCGIInternalRedirect X-Location
    </Location>
    top

    Directive ProxySCGISendfile

    Description:Active l'évaluation du pseudo en-tête de réponse X-Sendfile
    Syntaxe:ProxySCGISendfile On|Off|nom-en-tête
    Défaut:ProxySCGISendfile Off
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy_scgi

    La directive ProxySCGISendfile permet au serveur cible SCGI de faire servir les fichiers directement par la passerelle. Ceci s'avère bénéfique en matière de performances — httpd peut alors utiliser sendfile ou d'autres optimisations, ce qui n'est pas possible si les fichiers passent par la socket du serveur cible. En outre, les fichiers ne sont transmis qu'une seule fois.

    L'argument de la directive ProxySCGISendfile détermine le comportement de la passerelle :

    Off
    Aucun traitement particulier n'est effectué.
    On
    La passerelle recherche un en-tête dans la réponse du serveur cible nommé X-Sendfile, et interprète sa valeur comme le nom du fichier à servir. L'en-tête est ensuite supprimé de la réponse finale. Cet argument produit le même effet que ProxySCGISendfile X-Sendfile.
    toute autre valeur
    Identique à On, mais au lieu de rechercher le nom d'en-tête codé en dur X-Sendfile, c'est la valeur de l'argument qui constitue le nom de l'en-tête à rechercher.

    Exemple

        # Utilise le nom d'en-tête par défaut (X-Sendfile)
        ProxySCGISendfile On
    
        # Utilise un nom d'en-tête différent
        ProxySCGISendfile X-Send-Static

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_request.html.tr.utf80000644000000000000500000002330113447004010020736 0ustar rootsrc mod_request - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_request

    Mevcut Diller:  en  |  fr  |  tr 

    Açıklama:HTTP istek gövdelerini işleme sokup kullanılabilir kılan süzgeçler
    Durum:Temel
    Modül Betimleyici:request_module
    Kaynak Dosyası:mod_request.c
    Uyumluluk:Apache 2.3 ve sonrasında mevcuttur.
    Support Apache!

    Yönergeler

    Bulunan hatalar

    Ayrıca bakınız:

    top

    KeptBodySize Yönergesi

    Açıklama:mod_include gibi süzgeçler tarafından kullanılma olasılığına karşı istek gövdesi iptal edilmek yerine belirtilen azami boyutta tutulur.
    Sözdizimi:KeptBodySize azami_bayt_sayısı
    Öntanımlı:KeptBodySize 0
    BaÄŸlam:dizin
    Durum:Temel
    Modül:mod_request

    Normal şartlar altında, durağan dosyaların öntanımlı eylemcileri gibi istek eylemcileri gerek kalmadığında istek gövdesini iptal ederler. Sonuç olarak, mod_include gibi süzgeçler, özgün istek (süzme işlemi gerçekleştikten sonra artık gerekmediğinden istek gövdesini iptal eden) bir POST isteği olsa bile, GET isteklerinin yapılmasına sadece diğer URL’lerin alt istekler olarak içerilmesi şartıyla izin verir.

    Bu yönergede belirtilen değer sıfırdan büyük olduğunda, istek eylemciler, istek gövdesini iptal etmek yerine süzgeçler tarafından kullanılmak üzere belirtilen azami boyuta ayarlarlar. mod_include süzgecinin kullanılması durumunda, bir durağan shtml dosyası için bir POST isteği, ardından gelen isteklerin, önceki gibi GET istekleri değil, POST istekleri olmasına yol açacaktır.

    Bu özellik, mod_include kullanılarak, karmaşık HTML sayfalarının ve uygulamalarının küçük küçük bileşenlere bölünüp sonra da sayfa yapısıyla birlikte sarmalanarak birleştirilmesini mümkün kılar. Bileşenler, CGI programları veya betik dilleri biçiminde olabileceği gibi, mod_proxy kullanarak başka bir sunucudaki URL uzayına ters vekil URL’ler şeklinde bile olabilir.

    Bilginize: İstekler tamamlanana kadar alınan istekler geçici RAM içinde biriktirilir. Sonuç olarak, bahsi geçen yükü karşılamak için yeterince RAM’in mevcut olması gerekir. Bu yönergeyi kullanmakla, istek gövdesini saklamaya yetecek olası en düşük değerle bile URL uzayınız için gereken yeri kısıtlamış olursunuz.

    Eğer isteğin uzunluğu bu yönerge ile ayrılan azami uzunluğu aşarsa sunucu yanıt olarak 413 Request Entity Too Large (413 İstenen Öğe Çok Büyük) hatasını döndürür.

    İstek gövdesini iptal etmek yerine kendi amaçları doğrultusunda bunları biriktiren mod_cgi gibi eylemciler bu yönergeyi dikkate almazlar.

    Ayrıca bakınız:

    Mevcut Diller:  en  |  fr  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_vhost_alias.html.tr.utf80000644000000000000500000005300413447004010021565 0ustar rootsrc mod_vhost_alias - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_vhost_alias

    Mevcut Diller:  en  |  fr  |  tr 

    Açıklama:Kitlesel sanal konakların devingen olarak yapılandırılmasını sağlar
    Durum:Eklenti
    Modül Betimleyici:vhost_alias_module
    Kaynak Dosyası:mod_vhost_alias.c

    Özet

    Bu modül, hangi dosyaların sunulacağını saptamak için dosya yolunun parçası olarak HTTP isteğinin Host: başlığının ve/veya IP adresinin kullanılmasını mümkün kılarak devingen yapılandırmalı sanal konaklar oluşturur. Böylece benzer yapılandırmaya sahip çok büyük sayıda sanal konak kullanımı kolaşlaşır.

    Bilginize

    URI’leri dosya isimlerine dönüştürmek için mod_alias veya mod_userdir kullanılmışsa bunlar mod_vhost_alias yönergeleri tarafından aşağıda açıklandığı gibi geçersiz kılınırlar. Örneğin, aşağıdaki yapılandırma her durumda /cgi-bin/script.pl betiğini /usr/local/apache2/cgi-bin/script.pl betiğine eşleyecektir:

    ScriptAlias "/cgi-bin/" "/usr/local/apache2/cgi-bin/"
    VirtualScriptAlias "/nerede/bilinmiyor/%0/cgi-bin/"
    top

    Dizin İsimlerinin Elde Edilmesi

    Bu modüldeki tüm yönergeler bir dizgeyi bir dosya yoluna dönüştürerek çalışırlar. Dönüşüm dizgesi (bundan sonra “isim†diyeceğiz) ya sunucu ismi olur (bunun nasıl belirlendiğini öğrenmek için UseCanonicalName yönergesine bakınız) ya da sunucu üzerindeki sanal konağın IP adresi olur. Dönüşümü, printf’inkilerin benzeri birkaç biçem belirteci denetler:

    %% Bir % imi yerleÅŸtirir.
    %p Sanal konağın IP adresini yerleştirir.
    %N.M İsmin parçalarını yerleştirir.

    N ve M ismin alt dizgelerini belirtmek için kullanılır. N, ismin noktalarla ayrılmış bileşenlerinden seçim yaparken M, N ile seçilen parçadan karakter seçmekte kullanılır. M isteğe bağlı olup mevcut olmaması halinde öntanımlı olarak sıfırdır. Noktanın varlığı M’nin varlığına bağlıdır. Dönüşüm şöyle uygulanır:

    0 ismin tamamı
    1 ilk parça
    2 ikinci parça
    -1 son parça
    -2 sondan bir önceki parça
    2+ ikinci parça ve sonraki parçaların hepsi
    -2+ sondan bir önceki parça ve daha önceki parçaların hepsi
    1+ ve -1+ 0 ile aynı

    N veya M parça sayısından büyükse dönüşüm dizgesi sadece alt çizgi karakterini içerir.

    top

    Örnekler

    Sunucu yapılandırma dosyanızda isme dayalı sanal konaklar için aşağıdaki yönergeler kullanılıyor olsun:

    UseCanonicalName    Off
    VirtualDocumentRoot "/usr/local/apache/sankonlar/%0"

    http://example.com/dizin/dosya.html için yapılan bir istek /usr/local/apache/sankonlar/example.com/dizin/dosya.html dosyası ile yerine getirilecektir.

    Çok büyük sayıda sanal konak için sankonlar dizininin boyutlarını küçük tutmak amacıyla dosyalar düzenlenebilir. Bunu yapılandırma dosyanızda şöyle yapabilirsiniz:

    UseCanonicalName    Off
    VirtualDocumentRoot "/usr/local/apache/sankonlar/%3+/%2.1/%2.2/%2.3/%2"

    http://falan.filan.example.com/dizin/dosya.html için yapılan bir istek /usr/local/apache/sankonlar/example.com/f/i/l/filan/dizin/dosya.html ile yerine getirilecektir.

    Bu sefer de parçaları ismin sonundan toplayalım:

    VirtualDocumentRoot "/usr/local/apache/sankonlar/%3+/%2.-1/%2.-2/%2.-3/%2"

    Bu durumda istek /usr/local/apache/sankonlar/example.com/n/a/l/filan/dizin/dosya.html ile karşılanırdı.

    Şöyle bir şey de yapabilirsiniz:

    VirtualDocumentRoot "/usr/local/apache/sankonlar/%3+/%2.1/%2.2/%2.3/%2.4+"

    Bu örnek için istek /usr/local/apache/sankonlar/example.com/f/i/l/an/dizin/dosya.html dosyasından karşılanırdı.

    Kullanıcıların çoğunun ortak isteği, istenen konak adının uzunluğu veya sayısı için endişelenmeksizin çok sayıda belge köküne çok sayıda alan adından erişilebilmesidir. Eğer istenen konak adı www.domain.example.com değil de sub.www.domain.example.com ise %3+ kullanımı, belge kök dizininin düşünüldüğü gibi example.com değil /usr/local/apache/vhosts/domain.example.com/... olmasını sağlar. Böyle durumlarda, daima alan adı ve tld ile sonuçlanan %-2.0.%-1.0 birleşiminin kullanımı daha yararlı olabilir. Böylece, tüm ilk, ikinci ve üçüncü seviye alt alan adlarını aynı dizine yönlendirecek bir yapılandırma yapılabilir:

    VirtualDocumentRoot "/usr/local/apache/vhosts/%-2.0.%-1.0"

    Yukarıdaki örnekte, example.com, www.example.com ve hatta www.sub.example.com bile /usr/local/apache/vhosts/example.com dizinine yönlendirilecektir.

    IP’ye dayalı sanal konaklar için yapılandırma dosyanızda şu satırlar olabilirdi:

    UseCanonicalName DNS
    VirtualDocumentRootIP "/usr/local/apache/sankonlar/%1/%2/%3/%4/belgeler"
    VirtualScriptAliasIP  "/usr/local/apache/sankonlar/%1/%2/%3/%4/cgi-bin"

    http://falan.filan.example.com/dizin/dosya.html için yapılan bir istek eğer falan.filan.example.com’un IP adresi 10.20.30.40 olsaydı, /usr/local/apache/sankonlar/10/20/30/40/belgeler/dizin/dosya.html dosyası ile karşılanırdı. http://falan.filan.example.com/cgi-bin/betik.pl için yapılan bir istek ise /usr/local/apache/sankonlar/10/20/30/40/cgi-bin/betik.pl betiğinin çalıştırılması ile sağlanırdı.

    Bir VirtualDocumentRoot yönergesinin . karakterini içermesini isterseniz, bir biçem belirteci ile karışıklığa sebep olmaksızın bunu şöyle sağlayabilirsiniz:

    VirtualDocumentRoot "/usr/local/apache/sankonlar/%2.0.%3.0"

    Bu durumda http://falan.filan.example.com/dizin/dosya.html için yapılan bir istek /usr/local/apache/sankonlar/filan.mesela/dizin/dosya.html dosyası ile karşılanacaktır.

    LogFormat yönergesinin %V ve %A biçem belirteçleri bu modülle birlikte kullanıldığında çok yararlı olurlar.

    top

    VirtualDocumentRoot Yönergesi

    Açıklama:Bir sanal konağın belge kök dizinini devingen olarak yapılandırır.
    Sözdizimi:VirtualDocumentRoot hesaplanan-dizin|none
    Öntanımlı:VirtualDocumentRoot none
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Eklenti
    Modül:mod_vhost_alias

    VirtualDocumentRoot yönergesi sunucu ismine göre belgelerin bulunacağı yeri Apache HTTP Sunucusunun saptamasını sağlar. hesaplanan-dizin’in dönüşüm sonucu DocumentRoot yönergesinin değeriymiş gibi belge ağacının kök dizini olarak kullanılır. hesaplanan-dizin yerine none belirtilmişse VirtualDocumentRoot iptal edilmiş olur. Bu yönerge VirtualDocumentRootIP yönergesinin kullanıldığı bağlamda yer alamaz.

    Bilginize

    VirtualDocumentRoot yönergesi aynı bağlamda veya alt bağlamlarda da kullanılabilen DocumentRoot yönergelerini geçersiz kılar. Genel sunucu etki alanına bir VirtualDocumentRoot konulması, daha sonra yer alan her sanal konak tanımı içinde VirtualDocumentRoot yönergesine None atamadıkça bu sanal konaklarda yapılmış DocumentRoot atamalarını geçersiz kılacaktır.
    top

    VirtualDocumentRootIP Yönergesi

    Açıklama:Bir sanal konağın belge kök dizinini devingen olarak yapılandırır.
    Sözdizimi:VirtualDocumentRootIP hesaplanan-dizin|none
    Öntanımlı:VirtualDocumentRootIP none
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Eklenti
    Modül:mod_vhost_alias

    VirtualDocumentRootIP yönergesi, dizinin saptanmasında sunucu ismi yerine bağlantının sonlandığı sunucunun IP adresini kullanması dışında VirtualDocumentRoot gibidir.

    top

    VirtualScriptAlias Yönergesi

    Açıklama:Bir sanal konağın CGI dizinini devingen olarak yapılandırır.
    Sözdizimi:VirtualScriptAlias hesaplanan-dizin|none
    Öntanımlı:VirtualScriptAlias none
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Eklenti
    Modül:mod_vhost_alias

    VirtualScriptAlias yönergesi, CGI betiklerinin bulunacağı yeri Apache httpd’nin saptamasını sağlamak bakımından VirtualDocumentRoot yönergesinin yaptığını yapar. /cgi-bin/ ile başlayan istekler için ise ScriptAlias yönergesinin yaptığını yapar.

    top

    VirtualScriptAliasIP Yönergesi

    Açıklama:Bir sanal konağın CGI dizinini devingen olarak yapılandırır.
    Sözdizimi:VirtualScriptAliasIP hesaplanan-dizin|none
    Öntanımlı:VirtualScriptAliasIP none
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Eklenti
    Modül:mod_vhost_alias

    VirtualScriptAliasIP yönergesi, dizinin saptanmasında sunucu ismi yerine bağlantının sonlandığı sunucunun IP adresini kullanması dışında VirtualScriptAlias gibidir.

    Mevcut Diller:  en  |  fr  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_html.html0000644000000000000500000000034013362070302020143 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy_html.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_proxy_html.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_so.html.ko.euc-kr0000644000000000000500000003062513412755316020200 0ustar rootsrc mod_so - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_so

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:½ÃÀÛÇÒ¶§ ȤÀº Àç½ÃÀÛÇÒ¶§ ½ÇÇà°¡´ÉÇÑ ÄÚµå¿Í ¸ðµâÀ» ¼­¹ö·Î ÀоîµéÀδÙ
    »óÅÂ:Extension
    ¸ðµâ¸í:so_module
    ¼Ò½ºÆÄÀÏ:mod_so.c
    Áö¿ø:À©µµ¿ìÁî¿¡¼­ (Ç×»ó Æ÷ÇÔÇÏ´Â) Base ¸ðµâÀÌ´Ù.

    ¿ä¾à

    ¸î¸î ¿î¿µÃ¼Á¦¿¡¼­ ¾ÆÆÄÄ¡´Â µ¿Àû°øÀ¯°´Ã¼ (DSO) ±â¼úÀ» »ç¿ëÇÏ¿© ¼­¹ö¸¦ ´Ù½Ã ÄÄÆÄÀÏÇÏÁö ¾Ê°íµµ ½ÇÇàÁß¿¡ ¸ðµâÀ» ÀоîµéÀÏ ¼ö ÀÖ´Ù.

    ÀоîµéÀÏ ÄÚµå´Â, À¯´Ð½º¿¡¼­´Â (.so È®ÀåÀÚ¸¦ °¡Áø) ÀϹÝÀûÀÎ °øÀ¯°´Ã¼ÆÄÀÏÀ̰í, À©µµ¿ìÁî¿¡¼­´Â .so ȤÀº .dll È®ÀåÀÚ¸¦ °¡Áø´Ù.

    °æ°í

    ¾ÆÆÄÄ¡ 1.3 ¸ðµâÀ» ¾ÆÆÄÄ¡ 2.0¿¡¼­ »ç¿ëÇÒ ¼ö ¾ø´Ù. ¾ÆÆÄÄ¡ 2.0ÀÌ µ¿ÀûÀ¸·Î ÀоîµéÀ̰ųª ¾ÆÆÄÄ¡¿Í °°ÀÌ ÄÄÆÄÀÏÇÏ·Á¸é ¸ðµâÀ» ¼öÁ¤ÇØ¾ß ÇÑ´Ù.

    top

    À©µµ¿ìÁî¿¡¼­ ÀоîµéÀÏ ¸ðµâ ¸¸µé±â

    ÁÖÀÇ

    À©µµ¿ìÁîÀÇ ¸ðµâ¸í Çü½ÄÀº ¾ÆÆÄÄ¡ 1.3.15¿Í 2.0¿¡¼­ º¯°æµÇ¾ú´Ù. ¸ðµâ¸íÀº ÀÌÁ¦ mod_foo.so½ÄÀÌ´Ù.

    mod_so´Â ¾ÆÁ÷µµ ApacheModuleFoo.dll ½ÄÀÇ ¸ðµâÀ» ÀоîµéÀÏ ¼ö ÀÖÁö¸¸, »õ·Î¿î À̸§ ±ÔÄ¢À» ¼±È£ÇÑ´Ù. ¸ðµâÀ» 2.0¿¡ ¸Â°Ô ¼öÁ¤ÇÑ´Ù¸é À̸§À» 2.0 ±ÔÄ¢¿¡ ¾Ë¸Â°Ô °íÄ¡±æ ¹Ù¶õ´Ù.

    ¾ÆÆÄÄ¡ ¸ðµâ API´Â À¯´Ð½º ¹öÀüÀ̰ųª À©µµ¿ìÁî ¹öÀüÀ̰ųª °°´Ù. ¸î¸î API´Â À©µµ¿ìÁî¿¡ ¾ø´Â À¯´Ð½º ±¸Á¶¿¡ ÀÇÁ¸Çϱ⶧¹®¿¡ »ç¿ëÇÒ ¼ö ¾øÁö¸¸, À¯´Ð½º¿¡¼­ ½ÇÇàµÇ´Â ¸¹Àº ¸ðµâÀ» ¼öÁ¤¾øÀÌ È¤Àº Á¶±Ý ¼öÁ¤ÇÏ¿© À©µµ¿ìÁî¿¡¼­ »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    ¸ðµâÀº µÎ°¡Áö ¹æ¹ýÀ¸·Î ¼­¹ö¿¡ Ãß°¡ÇÒ ¼ö ÀÖ´Ù. À¯´Ð½º¿¡¼­´Â ¸ðµâÀ» ¼­¹ö¿Í °°ÀÌ ÄÄÆÄÀÏÇÒ ¼ö ÀÖ´Ù. À©µµ¿ìÁî¿ë ¾ÆÆÄÄ¡´Â À¯´Ð½º¿Í ´Þ¸® Configure ÇÁ·Î±×·¥ÀÌ ¾ø±â¶§¹®¿¡ ¸ðµâÀÇ ¼Ò½ºÆÄÀÏÀ» ApacheCore ÇÁ·ÎÁ§Æ® ÆÄÀÏ¿¡ Ãß°¡Çϰí, ½Éº¼À» os\win32\modules.c ÆÄÀÏ¿¡ Ãß°¡ÇØ¾ß ÇÑ´Ù.

    µÎ¹øÂ° ¹æ¹ýÀº ¸ðµâÀ» ¼­¹ö°¡ LoadModule Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ½ÃÀÛÇÒ¶§ ÀоîµéÀÏ ¼ö ÀÖ´Â °øÀ¯¶óÀ̺귯¸® DLL·Î ¸¸µå´Â °ÍÀÌ´Ù. ÀÌ ¸ðµâ DLLÀ» ¹èÆ÷ÇÏ¸é ¼­¹ö¸¦ ÀçÄÄÆÄÀÏÇÏÁö ¾Ê°í ¾î¶² À©µµ¿ìÁî¿ë ¾ÆÆÄÄ¡¿¡¼­µµ ¸ðµâÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    ¸ðµâ DLLÀ» ¸¸µé±âÀ§Çؼ­´Â ¸ðµâÀÇ ¼Ò½ºÆÄÀÏÀ» Á¶±Ý ¼öÁ¤ÇØ¾ß ÇÑ´Ù. DLLÀº module record¸¦ exportÇØ¾ß ÇÑ´Ù. (¾Æ·¡ Âü°í) À̸¦ À§ÇØ ¸ðµâÀÇ module record Á¤ÀÇ¿¡ (¾ÆÆÄÄ¡ Çì´õÆÄÀÏ¿¡ Á¤ÀǵÈ) AP_MODULE_DECLARE_DATA¸¦ Ãß°¡ÇÑ´Ù. ¿¹¸¦ µé¾î, ´ÙÀ½°ú °°Àº ¸ðµâÀÌ ÀÖ´Ù¸é:

    module foo_module;

    ´ÙÀ½°ú °°ÀÌ ¼öÁ¤ÇÑ´Ù:

    module AP_MODULE_DECLARE_DATA foo_module;

    ÀÌ ºÎºÐÀº À©µµ¿ìÁî¿¡¼­¸¸ »ç¿ëÇϱ⶧¹®¿¡ º¯°æÇÏ¿©µµ À¯´Ð½º¿¡¼­ ¼Ò½º¸¦ ±×´ë·Î »ç¿ëÇÒ ¼ö ÀÖ´Ù. ¶Ç, .DEF ÆÄÀÏ¿¡ Àͼ÷ÇÏ´Ù¸é ´ë½Å ÀÌ ÆÄÀÏÀ» »ç¿ëÇÏ¿© module record¸¦ exportÇÒ ¼öµµ ÀÖ´Ù.

    ÀÌÁ¦ ¸ðµâÀ» Æ÷ÇÔÇÑ DLLÀ» ¸¸µç´Ù. À̸¦ °øÀ¯¶óÀ̺귯¸® libhttpd.dllÀ» ÄÄÆÄÀÏÇÒ¶§ ¸¸µç libhttpd.lib export ¶óÀ̺귯¸®¿Í ¸µÅ©ÇÑ´Ù. ¾ÆÆÄÄ¡ Çì´õÆÄÀÏÀ» ¿Ã¹Ù·Î ãµµ·Ï ÄÄÆÄÀÏ·¯ ¼³Á¤À» ¼öÁ¤ÇØ¾ß ÇÒÁöµµ ¸ð¸¥´Ù. ¼­¹öÀÇ modules µð·ºÅ丮¿¡¼­ ÀÌ ¶óÀ̺귯¸®¸¦ ãÀ» ¼ö ÀÖ´Ù. ÄÄÆÄÀÏȯ°æÀ» ¿Ã¹Ù·Î ¼³Á¤ÇϱâÀ§ÇØ ±âÁ¸ ¸ðµâÀÇ .dsp ÆÄÀÏÀ» °¡Á®´Ù ¾²°Å³ª Á÷Á¢ ¸¸µç .dsp¿Í ÄÄÆÄÀÏ·¯/¸µÄ¿ ¿É¼ÇÀ» ºñ±³ÇÏ´Â °ÍÀÌ ÁÁ´Ù.

    ÀÌÁ¦ ¸ðµâÀ» DLL·Î ¸¸µç´Ù. À̰ÍÀ» ¼­¹öÀÇ modules µð·ºÅ丮¿¡ µÎ°í, LoadModule Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ÀоîµéÀδÙ.

    top

    LoadFile Áö½Ã¾î

    ¼³¸í:ÁöÁ¤ÇÑ ¸ñÀûÆÄÀÏÀ̳ª ¶óÀ̺귯¸®¸¦ ÀоîµéÀδÙ
    ¹®¹ý:LoadFile filename [filename] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤
    »óÅÂ:Extension
    ¸ðµâ:mod_so

    LoadFile Áö½Ã¾î´Â ¼­¹ö°¡ ½ÃÀÛÇϰųª Àç½ÃÀÛÇÒ¶§ ÁöÁ¤ÇÑ ¸ñÀûÆÄÀÏÀ̳ª ¶óÀ̺귯¸®¸¦ ÀоîµéÀδÙ(link in). ÀÌ Áö½Ã¾î´Â ¾î¶² ¸ðµâÀÌ µ¿ÀÛÇϱâÀ§ÇØ ÇÊ¿äÇÑ Äڵ带 Ãß°¡·Î ÀоîµéÀ϶§ »ç¿ëÇÑ´Ù. FilenameÀº Àý´ë°æ·ÎÀ̰ųª ServerRoot¿¡ ´ëÇÑ »ó´ë°æ·ÎÀÌ´Ù.

    ¿¹¸¦ µé¾î:

    LoadFile libexec/libxmlparse.so

    top

    LoadModule Áö½Ã¾î

    ¼³¸í:¸ñÀûÆÄÀÏÀ̳ª ¶óÀ̺귯¸®¸¦ ÀоîµéÀ̰í, »ç¿ë°¡´ÉÇÑ ¸ðµâ ¸ñ·Ï¿¡ Ãß°¡ÇÑ´Ù
    ¹®¹ý:LoadModule module filename
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤
    »óÅÂ:Extension
    ¸ðµâ:mod_so

    LoadModule Áö½Ã¾î´Â ¸ñÀûÆÄÀÏ È¤Àº ¶óÀ̺귯¸® filenameÀ» ÀоîµéÀ̰í, »ç¿ë°¡´ÉÇÑ ¸ðµâ ¸ñ·Ï¿¡ moduleÀ̶ó´Â ¸ðµâ ±¸Á¶Ã¼¸¦ Ãß°¡ÇÑ´Ù. ModuleÀº ÆÄÀÏÀÇ module ÀÚ·áÇü ¿ÜºÎº¯¼ö¸íÀ̸ç, ¸ðµâ ¹®¼­ÀÇ ¸ðµâ¸í¿¡ ³ª¿Â´Ù. ¿¹¸¦ µé¸é:

    LoadModule status_module modules/mod_status.so

    ServerRootÀÇ modules ÇÏÀ§µð·ºÅ丮¿¡¼­ ÁöÁ¤ÇÑ ¸ðµâÀ» ÀоîµéÀδÙ.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_logio.html.en0000644000000000000500000002461213412755316017473 0ustar rootsrc mod_logio - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_logio

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Logging of input and output bytes per request
    Status:Extension
    Module Identifier:logio_module
    Source File:mod_logio.c

    Summary

    This module provides the logging of input and output number of bytes received/sent per request. The numbers reflect the actual bytes as received on the network, which then takes into account the headers and bodies of requests and responses. The counting is done before SSL/TLS on input and after SSL/TLS on output, so the numbers will correctly reflect any changes made by encryption.

    This module requires mod_log_config.

    When KeepAlive connections are used with SSL, the overhead of the SSL handshake is reflected in the byte count of the first request on the connection. When per-directory SSL renegotiation occurs, the bytes are associated with the request that triggered the renegotiation.
    top

    Custom Log Formats

    This module adds three new logging directives. The characteristics of the request itself are logged by placing "%" directives in the format string, which are replaced in the log file by the values as follows:

    Format String Description
    %I Bytes received, including request and headers, cannot be zero.
    %O Bytes sent, including headers, cannot be zero.
    %S Bytes transferred (received and sent), including request and headers, cannot be zero. This is the combination of %I and %O.
    Available in Apache 2.4.7 and later
    %^FB Delay in microseconds between when the request arrived and the first byte of the response headers are written. Only available if LogIOTrackTTFB is set to ON.
    Available in Apache 2.4.13 and later

    Usually, the functionality is used like this:

    Combined I/O log format:
    "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %I %O"
    top

    LogIOTrackTTFB Directive

    Description:Enable tracking of time to first byte (TTFB)
    Syntax:LogIOTrackTTFB ON|OFF
    Default:LogIOTrackTTFB OFF
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_logio
    Compatibility:Apache HTTP Server 2.4.13 and later

    This directive configures whether this module tracks the delay between the request being read and the first byte of the response headers being written. The resulting value may be logged with the %^FB format.

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_logio.html.ja.utf80000644000000000000500000002437713412755316020360 0ustar rootsrc mod_logio - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_logio

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:リクエスト毎ã«å…¥åŠ›ãƒã‚¤ãƒˆæ•°ã¨å‡ºåŠ›ãƒã‚¤ãƒˆæ•°ã¨ã‚’ロギング
    ステータス:Extension
    モジュール識別å­:logio_module
    ソースファイル:mod_logio.c

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã”ã¨ã«å—ã‘å–ã£ãŸãƒã‚¤ãƒˆæ•°ã¨ é€ä¿¡ã—ãŸãƒã‚¤ãƒˆæ•°ã®ãƒ­ã‚®ãƒ³ã‚°ã‚’行ãªã†æ©Ÿèƒ½ã‚’æä¾›ã—ã¾ã™ã€‚ 記録ã•れる数字ã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ˜ãƒƒãƒ€ã¨ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®æœ¬ä½“ã‚’ åæ˜ ã—ãŸã€å®Ÿéš›ã«ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã§å—ã‘å–ã£ãŸãƒã‚¤ãƒˆå€¤ã§ã™ã€‚ 入力ã§ã¯ SSL/TLS ã®å‰ã«ã€å‡ºåŠ›ã§ã¯ SSL/TLS ã®å¾Œã«æ•°ãˆã‚‹ã®ã§ã€ æ•°å­—ã¯æš—å·ã«ã‚ˆã‚‹å¤‰åŒ–ã‚‚æ­£ã—ãåæ˜ ã—ãŸã‚‚ã®ã«ãªã‚Šã¾ã™ã€‚

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ä½¿ç”¨ã«ã¯ mod_log_config モジュール㌠必è¦ã§ã™ã€‚

    top

    カスタムログ書å¼

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯æ–°ã—ã„ロギング用ディレクティブを加ãˆã¾ã™ã€‚ リクエスト自身ã®ç‰¹å¾´ã¯ãƒ•ォーマット文字列ã«ã€ä»¥ä¸‹ã®æ§˜ã«ç½®æ›ã•れる "%" ディレクティブを 入れるã“ã¨ã§ãƒ­ã‚°åŽé›†ã•れã¾ã™:

    フォーマット文字列 説明
    %...I リクエストã¨ãƒ˜ãƒƒãƒ€ã‚’å«ã‚€ã€å—ã‘å–ã£ãŸãƒã‚¤ãƒˆæ•°ã€‚ 0 ã«ã¯ãªã‚‰ãªã„。
    %...O ヘッダをå«ã‚€ã€é€ä¿¡ã—ãŸãƒã‚¤ãƒˆæ•°ã€‚0 ã«ã¯ãªã‚‰ãªã„。

    通常ã€ã“ã®æ©Ÿèƒ½ã¯ä»¥ä¸‹ã®æ§˜ã«ä½¿ç”¨ã•れã¾ã™:

    çµåˆ I/O ログ書å¼:
    "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %I %O"
    top

    LogIOTrackTTFB ディレクティブ

    説明:Enable tracking of time to first byte (TTFB)
    æ§‹æ–‡:LogIOTrackTTFB ON|OFF
    デフォルト:LogIOTrackTTFB OFF
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Extension
    モジュール:mod_logio
    äº’æ›æ€§:Apache HTTP Server 2.4.13 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_suexec.html.tr.utf80000644000000000000500000002051313447004010020544 0ustar rootsrc mod_suexec - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_suexec

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    Açıklama:CGI betiklerinin belli bir kullanıcı ve grubun aidiyetinde çalışmasını mümkün kılar.
    Durum:Eklenti
    Modül Betimleyici:suexec_module
    Kaynak Dosyası:mod_suexec.c

    Özet

    Bu modül suexec programı ile birlikte CGI betiklerinin belli bir kullanıcı ve grubun aidiyetinde çalışmasını mümkün kılar.

    top

    SuexecUserGroup Yönergesi

    Açıklama:CGI betiklerini çalıştıracak kullanıcı ve grup belirtilir.
    Sözdizimi:SuexecUserGroup Kullanıcı Grup
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Eklenti
    Modül:mod_suexec

    SuexecUserGroup yönergesi CGI programlarını çalıştıracak kullanıcı ve grubu belirtmeye yarar. CGI harici istekler hala User yönergesinde belirtilen kullanıcı tarafından yerine getirilir.

    SuexecUserGroup nobody nogroup

    Bu yönerge belirtildiği halde Suexec özelliği etkinleştirilmemişse Apache httpd başlatılamaz.

    Ayrıca bakınız:

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_log_debug.html0000644000000000000500000000033613362070302017672 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_log_debug.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_log_debug.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/index.html.fr.utf80000644000000000000500000006147513447706537017545 0ustar rootsrc Index des modules - Serveur HTTP Apache Version 2.4
    <-

    Index des modules

    Langues Disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Ci-dessous se trouve la liste de tous les modules qui font partie de la distribution du serveur HTTP Apache. Voir aussi la liste alphabétique complète de toutes les directives du serveur HTTP Apache.

    top

    Fonctionalités de Base et Modules Multi-Processus (MPM)

    core
    Fonctionnalités de base du serveur HTTP Apache toujours disponibles
    mpm_common
    Une série de directives implémentées par plusieurs modules multi-processus (MPM)
    event
    Une variante du MPM worker conçue pour ne mobiliser des threads que pour les connexions en cours de traitement
    mpm_netware
    Module multi-processus implémentant un serveur web basé exclusivement sur les threads et optimisé pour Novell NetWare
    mpmt_os2
    MPM hybride multi-processus, multi-thread pour OS/2
    prefork
    Implémente un serveur web avec démarrage anticipé de processus, sans thread
    mpm_winnt
    Module multi-processus optimisé pour Windows NT.
    worker
    Module multi-processus implémentant un serveur web hybride multi-processus multi-thread
    top

    Autres Modules

     A  |  B  |  C  |  D  |  E  |  F  |  H  |  I  |  L  |  M  |  N  |  P  |  R  |  S  |  U  |  V  |  W  |  X 

    mod_access_compat
    Autorisations de groupe à base de nom d'hôte (nom ou adresse IP)
    mod_actions
    Exécution des scripts CGI en fonction du type de média ou de la méthode de requête.
    mod_alias
    Permet d'atteindre différentes parties du système de fichiers depuis l'arborescence des documents du site web, ainsi que la redirection d'URL
    mod_allowmethods
    Ce module permet de restreindre aisément les méthodes HTTP pouvant être utilisées sur le serveur
    mod_asis
    Envoie des fichiers contenant leurs propres en-têtes HTTP
    mod_auth_basic
    Authentification HTTP de base
    mod_auth_digest
    Authentification utilisateur utilisant les condensés MD5
    mod_auth_form
    Authentification à l'aide d'un formulaire
    mod_authn_anon
    Permet un accès "anonyme" à des zones protégées
    mod_authn_core
    Le noyau de l'authentification
    mod_authn_dbd
    Authentification utilisateur à l'aide d'une base de données SQL
    mod_authn_dbm
    Authentification utilisateur utilisant des fichiers DBM
    mod_authn_file
    Authentification utilisateur à l'aide de fichiers texte
    mod_authn_socache
    Gère un cache des données d'authentification pour diminuer la charge des serveurs d'arrière-plan
    mod_authnz_fcgi
    Permet à une application d'autorisation FastCGI de gérer l'authentification et l'autorisation httpd.
    mod_authnz_ldap
    Permet d'utiliser un annuaire LDAP pour l'authentification HTTP de base.
    mod_authz_core
    Autorisation basique
    mod_authz_dbd
    Autorisation en groupe et reconnaissance d'identité avec base SQL
    mod_authz_dbm
    Autorisation basée sur les groupes à l'aide de fichiers DBM
    mod_authz_groupfile
    Autorisation basée sur les groupes à l'aide de fichiers textes
    mod_authz_host
    Autorisations de groupe basées sur l'hôte (nom ou adresse IP)
    mod_authz_owner
    Autorisation basée sur l'appartenance des fichiers
    mod_authz_user
    Autorisation basée sur l'utilisateur
    mod_autoindex
    Génère automatiquement des index de répertoires d'une manière similaire à la commande Unix ls, ou à la commande shell Win32 dir
    mod_brotli
    Compression du contenu via Brotli avant sa livraison au client
    mod_buffer
    Support de la mise en tampon des requêtes
    mod_cache
    Filtre de mise en cache HTTP conforme à la RFC 2616
    mod_cache_disk
    Module de stockage sur disque pour le filtre de mise en cache HTTP.
    mod_cache_socache
    Module de stockage à base de cache d'objets partagés (socache) pour le filtre de mise en cache HTTP.
    mod_cern_meta
    La sémantique des métafichiers du serveur httpd du CERN
    mod_cgi
    Exécution des scripts CGI
    mod_cgid
    Exécution des scripts CGI par l'intermédiaire d'un démon CGI externe
    mod_charset_lite
    Spécifie dans quel jeu de caractère doivent s'effectuer les traductions ou les réencodages
    mod_data
    Convertit un corps de réponse en URL de type données RFC2397
    mod_dav
    Fonctionnalité de création et gestion de versions de documents via le web (WebDAV)
    mod_dav_fs
    Implémente le fournisseur filesystem pour mod_dav
    mod_dav_lock
    Module de verrouillage générique pour mod_dav
    mod_dbd
    Gestion des connexions à une base de données SQL
    mod_deflate
    Comprime le contenu avant de le servir au client
    mod_dialup
    Envoie le contenu statique avec une bande passante limitée définie par les différents standards des anciens modems.
    mod_dir
    Permet la redirection des adresses se terminant par un répertoire sans slash de fin et la mise à disposition des fichiers index de répertoire
    mod_dumpio
    Enregistre toutes les entrées/sorties dans le journal des erreurs de la manière souhaitée.
    mod_echo
    Un simple serveur d'écho pour illustrer les modules de protocole
    mod_env
    Modifie l'environnement transmis aux scripts CGI et aux pages SSI
    mod_example_hooks
    Illustration de l'API des modules Apache
    mod_expires
    Génération des en-têtes HTTP Expires et Cache-Control en fonction de critères spécifiés par l'utilisateur
    mod_ext_filter
    Fait traiter le corps de la réponse par un programme externe avant de l'envoyer au client
    mod_file_cache
    Mise en cache mémoire d'une liste statique de fichiers
    mod_filter
    Module de configuration de filtre intelligent sensible au contexte
    mod_headers
    Personnalisation des en-têtes de requêtes et de réponses HTTP
    mod_heartbeat
    Envoie des messages d'état au mandataire frontal
    mod_heartmonitor
    Moniteur centralisé pour les serveurs d'origine mod_heartbeat
    mod_http2
    Support de la couche transport HTTP/2
    mod_ident
    Recherche d'identité conformément à la RFC 1413
    mod_imagemap
    Traitement des cartes des zones interactives d'une image (imagemaps) au niveau du serveur
    mod_include
    Documents html interprétés par le serveur (Server Side Includes ou SSI)
    mod_info
    Affiche une présentation complète de la configuration du serveur
    mod_isapi
    Extensions ISAPI dans Apache pour Windows
    mod_lbmethod_bybusyness
    Algorithme de planification avec répartition de charge de l'attribution des requêtes en attente pour le module mod_proxy_balancer
    mod_lbmethod_byrequests
    Algorithme de planification avec répartition de charge du traitement des requêtes pour le module mod_proxy_balancer
    mod_lbmethod_bytraffic
    Algorithme de planification avec répartition de charge en fonction d'un niveau de trafic pour le module mod_proxy_balancer
    mod_lbmethod_heartbeat
    Algorithme d'ordonnancement de répartition de charge pour mod_proxy_balancer basé sur le comptage de trafic Heartbeat
    mod_ldap
    Conservation des connexions LDAP et services de mise en cache du résultat à destination des autres modules LDAP
    mod_log_config
    Journalisation des requêtes envoyées au serveur
    mod_log_debug
    Journalisation supplémentaire à des fins de débogage
    mod_log_forensic
    Journalisation légale des requêtes envoyées au serveur
    mod_logio
    Journalisation des octets en entrée et en sortie pour chaque requête
    mod_lua
    Fournit des points d'entrée Lua dans différentes parties du traitement des requêtes httpd
    mod_macro
    Ce module permet d'utiliser des macros dans les fichiers de configuration Apache.
    mod_md
    Managing domains across virtual hosts, certificate provisioning via the ACME protocol
    mod_mime
    Associe les extensions des fichiers demandés avec l'action déclenchée par ces fichiers et avec leur contenu (type MIME, langue, jeu de caractère et codage)
    mod_mime_magic
    Détermine le type MIME d'un fichier à partir de quelques octets de son contenu
    mod_negotiation
    Effectue la négociation de contenu
    mod_nw_ssl
    Active le chiffrement SSL pour Netware
    mod_privileges
    Support des privilèges de Solaris et de l'exécution des serveurs virtuels sous différents identifiants utilisateurs.
    mod_proxy
    Serveur mandataire/passerelle multi-protocole
    mod_proxy_ajp
    Module de support AJP pour mod_proxy
    mod_proxy_balancer
    Extension de mod_proxy pour le support de la répartition de charge
    mod_proxy_connect
    Extension de mod_proxy pour le traitement des requêtes CONNECT
    mod_proxy_express
    Extension à mod_proxy pour le mandatement dynamique inverse de masse
    mod_proxy_fcgi
    Module fournissant le support de FastCGI à mod_proxy
    mod_proxy_fdpass
    Module fournissant le support des processus externes fdpass à mod_proxy
    mod_proxy_ftp
    Module fournissant le support FTP à mod_proxy
    mod_proxy_hcheck
    Check up dynamique des membres du groupe de répartition de charge (équipiers) pour mod_proxy
    mod_proxy_html
    Réécrit les liens HTML afin de s'assurer qu'ils soient bien adressables depuis les réseaux des clients dans un contexte de mandataire.
    mod_proxy_http
    Module fournissant le support HTTP à mod_proxy
    mod_proxy_http2
    Support de HTTP/2 pour mod_proxy
    mod_proxy_scgi
    Module fournissant le support de la passerelle SCGI à mod_proxy
    mod_proxy_uwsgi
    UWSGI gateway module for mod_proxy
    mod_proxy_wstunnel
    Module pour mod_proxy supportant les websockets
    mod_ratelimit
    Limitation de la bande passante pour les clients
    mod_reflector
    Renvoie un corps de requête comme réponse via la pile de filtres en sortie.
    mod_remoteip
    Remplace l'adresse IP du client pour la requête par l'adresse IP présentée par un mandataire ou un répartiteur de charge via les en-têtes de la requête.
    mod_reqtimeout
    Définit le délai maximum et le taux minimum de transfert des données pour la réception des requêtes
    mod_request
    Filtres permettant de traiter et de mettre à disposition les corps de requêtes HTTP
    mod_rewrite
    Ce module fournit un moteur de réécriture à base de règles permettant de réécrire les URLs des requêtes à la volée
    mod_sed
    Filtre les contenus en entrée (requêtes) et en sortie (réponses) en utilisant la syntaxe de sed
    mod_session
    Support des sessions
    mod_session_cookie
    Support des sessions basé sur les cookies
    mod_session_crypto
    Support du chiffrement des sessions
    mod_session_dbd
    Support des session basé sur DBD/SQL
    mod_setenvif
    Permet de définir des variables d'environnement en fonction de certainescaractéristiques de la requête
    mod_slotmem_plain
    Fournisseur de mémoire partagée à base de slots.
    mod_slotmem_shm
    Fournisseur de mémoire partagée basée sur les slots.
    mod_so
    Chargement de modules ou de code exécutable au cours du démarrage ou du redémarrage du serveur
    mod_socache_dbm
    Fournisseur de cache d'objets partagés basé sur DBM.
    mod_socache_dc
    Fournisseur de cache d'objets partagés basé sur dc.
    mod_socache_memcache
    Fournisseur de cache d'objets partagés basé sur Memcache.
    mod_socache_redis
    Redis based shared object cache provider.
    mod_socache_shmcb
    Fournisseur de cache d'objets partagés basé sur shmcb.
    mod_speling
    Tente de corriger les erreurs de casse dans les URLs ou les fautes de frappe mineures.
    mod_ssl
    Chiffrement de haut niveau basé sur les protocoles Secure Sockets Layer (SSL) et Transport Layer Security (TLS)
    mod_status
    Fournit des informations sur les performances et l'activité du serveur
    mod_substitute
    Effectue des opérations de recherche/remplacement sur les corps de réponses
    mod_suexec
    Permet l'exécution des scripts CGI sous l'utilisateur et le groupe spécifiés
    mod_unique_id
    Fournit une variable d'environnement contenant un identifiant unique pour chaque requête
    mod_unixd
    Sécurité de base (nécessaire) pour les plates-formes de la famille Unix.
    mod_userdir
    Répertoires propres à un utilisateur
    mod_usertrack
    Journalisation Clickstream des liens parcourus par un utilisateur sur un site
    mod_version
    Configuration dépendant de la version
    mod_vhost_alias
    Permet de configurer dynamiquement l'hébergement virtuel de masse
    mod_watchdog
    Fournit une infrastructure permettant à d'autres modules d'exécuter des tâches périodiques.
    mod_xml2enc
    Support avancé de l'internationalisation et des jeux de caractères pour les modules de filtrage basés sur libxml2

    Langues Disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/mod/mod_access_compat.html.ja.utf80000644000000000000500000007501313412755316022044 0ustar rootsrc mod_access_compat - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_access_compat

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:ホスト (åå‰ã‚‚ã—ã㯠IP アドレス) ã«åŸºã¥ã„ãŸã‚°ãƒ«ãƒ¼ãƒ—承èª
    ステータス:Extension
    モジュール識別å­:access_compat_module
    ソースファイル:mod_access_compat.c
    äº’æ›æ€§:Apache 2.3 (Apache 2.x ã®ä»¥å‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¨ã®äº’æ›æ€§ã®ãŸã‚ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ã—ã¦)。 ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§æä¾›ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€æ‰¿èªã®ä»•組ã¿ã®ä¸€æ–°ã«ä¼´ã„ã€éžæŽ¨å¥¨ã«ãªã£ãŸã‚‚ã®ã§ã™ã€‚ mod_authz_host も見ã¦ãã ã•ã„。

    概è¦

    mod_access_compat ã«ã‚ˆã‚Šæä¾›ã•れるディレクティブ㯠サーãƒã®ç‰¹å®šã®éƒ¨åˆ†ã¸ã® アクセスを制御ã™ã‚‹ãŸã‚ã« <Directory>, <Files>, <Location> 㨠.htaccess ファイルã§ä½¿ç”¨ã•れã¾ã™ã€‚クライアントã®ãƒ›ã‚¹ãƒˆåã€IP アドレスやã€ç’°å¢ƒå¤‰æ•°ãªã©ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ç‰¹å¾´ã«åŸºã¥ã„㦠アクセス制御を行ãªã†ã“ã¨ãŒã§ãã¾ã™ã€‚Allow 㨠Deny ディレクティブを使ã£ã¦ã€ ã©ã®ã‚ˆã†ãªã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã‚’ 許å¯ã™ã‚‹ã€ã—ãªã„を指定ã—ã¾ã™ã€‚ã¾ãŸ Order ディレクティブを使ã£ã¦ã€ デフォルトã®ã‚¢ã‚¯ã‚»ã‚¹çŠ¶æ…‹ã¨ã€ Allow ディレクティブ㨠Deny ディレクティブã¨ã®ãŠäº’ã„ã¸ã®å½±éŸ¿ã®ä»•方を設定ã—ã¾ã™ã€‚

    ホストã«ã‚ˆã‚‹ã‚¢ã‚¯ã‚»ã‚¹åˆ¶é™ã¨ãƒ‘スワードã«ã‚ˆã‚‹èªè¨¼ã‚’ã€ åŒæ™‚ã«çµ„ã¿åˆã‚ã›ã¦ä½¿ã†ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ ã“ã®å ´åˆã€ãã®äºŒã¤ã®åˆ¶é™ã®é–¢ä¿‚を指定ã™ã‚‹ãŸã‚ã« Satisfy ディレクティブを使用ã—ã¾ã™ã€‚

    Note

    mod_access_compatãŒæä¾›ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ 承èªã®ä»•組ã¿ã®ä¸€æ–°ã«ä¼´ã„ã€éžæŽ¨å¥¨ã«ãªã£ãŸã‚‚ã®ã§ã™ã€‚ mod_authz_host も見ã¦ãã ã•ã„。 ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®æ‰¿èªã®å–ã‚Šæ‰±ã„æ©Ÿèƒ½ã‚’使用ã™ã‚‹ãŸã‚ã« mod_authz_default モジュールもロードã•れãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    一般的ã«ã¯ã€ã‚¢ã‚¯ã‚»ã‚¹åˆ¶é™ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã™ã¹ã¦ã®ã‚¢ã‚¯ã‚»ã‚¹ãƒ¡ã‚½ãƒƒãƒ‰ (GET, PUT, POST ãªã©) ã«é©ç”¨ã•れã¾ã™ã€‚ãã—ã¦ã€ã»ã¨ã‚“ã©ã®å ´åˆã“ã‚ŒãŒæœ›ã¾ã—ã„動作ã§ã™ã€‚ ã—ã‹ã—ã€<Limit> セクションã®ä¸­ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を書ãã“ã¨ã§ã€ 一部ã®ãƒ¡ã‚½ãƒƒãƒ‰ã«ã®ã¿åˆ¶é™ã‚’ã‹ã‘ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    Support Apache!

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    Allow ディレクティブ

    説明:サーãƒã®ã‚る領域ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãるホストを制御ã™ã‚‹
    æ§‹æ–‡: Allow from all|host|env=[!]env-variable [host|env=[!]env-variable] ...
    コンテキスト:ディレクトリ, .htaccess
    上書ã:Limit
    ステータス:Extension
    モジュール:mod_access_compat

    Allow ディレクティブã¯ã€ã©ã®ãƒ›ã‚¹ãƒˆãŒ サーãƒã®ã‚る領域ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹ã‹ã«å½±éŸ¿ã‚’与ãˆã¾ã™ã€‚ アクセスã¯ãƒ›ã‚¹ãƒˆåã€IP アドレスã€IP アドレスã®ç¯„囲や〠環境変数ãªã©ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã® 特徴ã«åŸºã¥ã„ã¦ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æœ€åˆã®å¼•æ•°ã¯å¸¸ã« from ã§ã™ã€‚ ãれã«ç¶šã引数ã¯ä¸‰ã¤ã®é•ã£ãŸå½¢å¼ãŒã‚りã¾ã™ã€‚Allow from all ãŒæŒ‡å®šã•れã¦ã„れã°ã€ã™ã¹ã¦ã®ãƒ›ã‚¹ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã—〠アクセス制é™ã¯ä¸‹ã§èª¬æ˜Žã•れã¦ã„るよã†ã«ã€ Deny ディレクティブ㨠Order ディレクティブã®è¨­å®šã§æ±ºã¾ã‚Šã¾ã™ã€‚ 特定ã®ãƒ›ã‚¹ãƒˆã‚„ホスト群ã«ã®ã¿ã‚µãƒ¼ãƒã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã™ã‚‹ãŸã‚ã«ã¯ã€ 以下ã®ã©ã‚Œã‹ã®å½¢å¼ã§ host を指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™:

    ドメインå (ã®ä¸€éƒ¨)

    例

    Allow from apache.org
    Allow from .net example.edu

    ã“ã®æ–‡å­—列ã«åˆã†ã‹ã€ã“れã§çµ‚ã‚ã‚‹åå‰ã®ãƒ›ã‚¹ãƒˆã®ã‚¢ã‚¯ã‚»ã‚¹ãŒè¨±å¯ã•れã¾ã™ã€‚ å„部分ãŒå®Œå…¨ã«åˆã†ã‚‚ã®ã ã‘ã«é©ç”¨ã•れã¾ã™ã®ã§ã€ä¸Šã®ä¾‹ã¯ foo.apache.org ã«ã¯ãƒžãƒƒãƒã—ã¾ã™ãŒã€ fooapache.org ã«ã¯ãƒžãƒƒãƒã—ã¾ã›ã‚“。 ã“ã®è¨­å®šã‚’ã™ã‚‹ã¨ã€Apache 㯠HostnameLookups ã®è¨­å®šã«é–¢ã‚らãšã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã® IP アドレスã«å¯¾ã—㦠DNS ã® 2 é‡é€†å¼•ãを行ãªã„ã¾ã™ã€‚ ホストåã‹ã‚‰ã‚ªãƒªã‚¸ãƒŠãƒ«ã® IP アドレスを順引ãã—ã¾ã™ã€‚ 順引ãã¨é€†å¼•ããŒä¸€è‡´ã—ã€ãƒ›ã‚¹ãƒˆåãŒè©²å½“ã—ãŸå ´åˆã«ã®ã¿ã€ アクセスãŒè¨±å¯ã•れã¾ã™ã€‚

    完全㪠IP アドレス

    例

    Allow from 10.1.2.3
    Allow from 192.168.1.104 192.168.1.205

    アクセスを許å¯ã™ã‚‹ IP アドレスã§ã™ã€‚

    IP アドレスã®ä¸€éƒ¨

    例

    Allow from 10.1
    Allow from 10 172.20 192.168.2

    サブãƒãƒƒãƒˆã®åˆ¶é™ç”¨ã®ã€IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã®æœ€åˆã®ä¸€ã¤ã‹ã‚‰ä¸‰ã¤ã¾ã§ã®ãƒã‚¤ãƒˆã§ã™ã€‚

    ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯/ãƒãƒƒãƒˆãƒžã‚¹ã‚¯ ã®å¯¾

    例

    Allow from 10.1.0.0/255.255.0.0

    ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ a.b.c.d ã¨ãƒãƒƒãƒˆãƒžã‚¹ã‚¯ w.x.y.z ã§ã™ã€‚ より細粒度ã®ã‚µãƒ–ãƒãƒƒãƒˆåˆ¶é™ç”¨ã§ã™ã€‚

    ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯/nnn CIDR 指定

    例

    Allow from 10.1.0.0/16

    ãƒãƒƒãƒˆãƒžã‚¹ã‚¯ãŒ nnn ã®ä¸Šä½ãƒ“ット㌠1 ã¨ãªã£ã¦ã„ã‚‹ã‚‚ã®ã‹ã‚‰ãªã‚‹ã“ã¨ä»¥å¤–ã¯å‰ã®ã‚‚ã®ã¨åŒã˜ã§ã™ã€‚

    注: 最後ã®ä¸‰ã¤ã®ä¾‹ã¯ã¾ã£ãŸãåŒã˜ãƒ›ã‚¹ãƒˆã«åˆã„ã¾ã™ã€‚

    IPv6 アドレス㨠IPv6 ã®ã‚µãƒ–ãƒãƒƒãƒˆã¯ä»¥ä¸‹ã®ã‚ˆã†ã«æŒ‡å®šã§ãã¾ã™:

    Allow from 2001:db8::a00:20ff:fea7:ccea
    Allow from 2001:db8::a00:20ff:fea7:ccea/10

    Allow ディレクティブã®å¼•æ•°ã®ä¸‰ã¤ç›®ã®å½¢å¼ã¯ã€ 環境変数 ã®å­˜åœ¨ã«ã‚ˆã‚Šã‚¢ã‚¯ã‚»ã‚¹ã®åˆ¶å¾¡ã‚’行ãªãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ Allow from env=env-variable ãŒæŒ‡å®šã•れã¦ã„ã‚‹ã¨ã€ç’°å¢ƒå¤‰æ•° env-variable ãŒå­˜åœ¨ã—ãŸå ´åˆã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã•れã¾ã™ã€‚ Allow from env=!env-variable ãŒæŒ‡å®šã•れã¦ã„ã‚‹ã¨ã€ç’°å¢ƒå¤‰æ•° env-variable ãŒå­˜åœ¨ã—ãªã„å ´åˆã«ã‚¢ã‚¯ã‚»ã‚¹è¨±å¯ã•れã¾ã™ã€‚ サーãƒã¯ mod_setenvif ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«ã‚ˆã‚Šã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆ ã®ç‰¹å¾´ã«åŸºã¥ã„ã¦æŸ”軟ã«ç’°å¢ƒå¤‰æ•°ã‚’設定ã™ã‚‹æ©Ÿèƒ½ã‚’æä¾›ã—ã¾ã™ã€‚ ã§ã™ã‹ã‚‰ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã® User-Agent (ブラウザã®ç¨®é¡ž)ã€Referer ã‚„ä»–ã® HTTP リクエストã®ãƒ˜ãƒƒãƒ€ãƒ•ィールドãªã©ã«åŸºã¥ã„㦠アクセス許å¯ã‚’ã™ã‚‹ãŸã‚ã«ä½¿ã†ã“ã¨ãŒã§ãã¾ã™ã€‚

    Example:

    SetEnvIf User-Agent ^KnockKnock/2\.0 let_me_in
    <Directory /docroot>
    Order Deny,Allow
    Deny from all
    Allow from env=let_me_in
    </Directory>

    ã“ã®å ´åˆã€user-agent ã®æ–‡å­—列㌠KnockKnock/2.0 ã§å§‹ã¾ã‚‹ãƒ–ラウザã®ã¿ãŒã‚¢ã‚¯ã‚»ã‚¹ãŒè¨±å¯ã•れ〠他ã®ã‚‚ã®ã¯ã‚¢ã‚¯ã‚»ã‚¹ãŒæ‹’å¦ã•れã¾ã™ã€‚

    top

    Deny ディレクティブ

    説明:サーãƒãŒã‚¢ã‚¯ã‚»ã‚¹ã‚’æ‹’å¦ã™ã‚‹ãƒ›ã‚¹ãƒˆã‚’制御ã™ã‚‹
    æ§‹æ–‡: Deny from all|host|env=[!]env-variable [host|env=[!]env-variable] ...
    コンテキスト:ディレクトリ, .htaccess
    上書ã:Limit
    ステータス:Extension
    モジュール:mod_access_compat

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãƒ›ã‚¹ãƒˆåã€IP アドレスã€ç’°å¢ƒå¤‰æ•°ã«åŸºã¥ã„ã¦ã‚µãƒ¼ãƒã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’制é™ã—ã¾ã™ã€‚ Deny ディレクティブã®å¼•数㯠Allow ディレクティブã¨ã¾ã£ãŸãåŒã˜ã§ã™ã€‚

    top

    Order ディレクティブ

    説明:デフォルトã®ã‚¢ã‚¯ã‚»ã‚¹å¯èƒ½ãªçŠ¶æ…‹ã¨ã€Allow 㨠Deny ãŒè©•価ã•れる順番を制御ã™ã‚‹
    æ§‹æ–‡: Order ordering
    デフォルト:Order Deny,Allow
    コンテキスト:ディレクトリ, .htaccess
    上書ã:Limit
    ステータス:Extension
    モジュール:mod_access_compat

    Order ディレクティブ㯠Allow ディレクティブã¨Deny ã¨å…±ã«"3段階アクセス制御システム" を制御ã—ã¾ã™ã€‚第1段階目ã§ã¯ Order ディレクティブã§1番目㫠指定ã—ãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–(Allow ã¾ãŸã¯ Deny)ã‚’å…¨ã¦å‡¦ç†ã—ã¾ã™ã€‚ 第2段階目ã§ã€æ®‹ã‚Šã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–(Deny ã¾ãŸã¯ Allow) ã‚’å…¨ã¦å‡¦ç†ã—ã¾ã™ã€‚第3段階目ã§ã€ç¬¬1段階目ã¨ç¬¬2段階目㧠マッãƒã—ãªã‹ã£ãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’処ç†ã—ã¾ã™ã€‚

    å…¨ã¦ã® Allow 㨠Deny ãŒå‡¦ç†ã•れã€çµå±€ã®ã¨ã“ã‚æœ€å¾Œã«ãƒžãƒƒãƒ ã—ãŸæ¡ä»¶ãŒæœ‰åйã¨ãªã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。ã“ã‚Œã¯æœ€åˆã«ãƒžãƒƒãƒã—ãŸæ¡ä»¶ã ã‘ãŒæœ‰åй ã¨ãªã‚‹ã€å…¸åž‹çš„ãªãƒ•ァイアウォールã®å‹•作ã¨ã¯ç•°ãªã£ã¦ã„ã¾ã™ã€‚ ã¾ãŸã€è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ã順番ã«ã¯æ„味ã¯ã‚りã¾ã›ã‚“。Allow 行ã¯å…¨éƒ¨ä¸€ã¤ã®ã‚°ãƒ«ãƒ¼ãƒ—ã¨ã—ã¦æ‰±ã‚れ〠Deny 行ã¯ã‚‚ã†ä¸€ã¤ã®ã‚°ãƒ«ãƒ¼ãƒ—ã¨ã¿ãªã•れã¾ã™ã€‚ ã¾ãŸãƒ‡ãƒ•ォルト状態ã¯å˜ç‹¬ã§ä¸€ã¤ã®ã‚°ãƒ«ãƒ¼ãƒ—ã¨ã¿ãªã•れã¾ã™ã€‚

    Order 設定ã¯ä»¥ä¸‹ã®ã©ã‚Œã‹ã§ã™ã€‚

    Allow,Deny
    ã¾ãš Allow ディレクティブãŒé©ç”¨ã•れã¾ã™ã€‚ã©ã‚Œã«ã‚‚マッãƒã—ãªã‹ã£ãŸå ´åˆã€ã“ã®æ™‚ç‚¹ã§ ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯æ‹’å¦ã•れã¾ã™ã€‚次ã«ã€å…¨ã¦ã® Deny ディレクティブãŒé©ç”¨ã•れã¾ã™ã€‚ã©ã‚Œã‹ä¸€ã¤ã§ã‚‚マッãƒã—ãŸå ´åˆã¯ã€ ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯æ‹’å¦ã•れã¾ã™ã€‚ 最後ã«ã€ Allow ã«ã‚‚ Deny ã«ã‚‚マッãƒã—ãªã‹ã£ãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ デフォルト設定ãŒé©ç”¨ã•れるã®ã§æ‹’å¦ã•れã¾ã™ã€‚
    Deny,Allow
    ã¾ãš Deny ディレクティブãŒé©ç”¨ã•れã¾ã™ã€‚ã©ã‚Œã‹ä¸€ã¤ã§ã‚‚マッãƒã—ãŸå ´åˆã¯ã€ Allow ã®ã©ã‚Œã«ã‚‚ マッãƒã—ãªã‘れã°ã€ã‚¢ã‚¯ã‚»ã‚¹ã¯æ‹’å¦ã•れã¾ã™ã€‚ ã©ã® Allow ã«ã‚‚ Deny ã«ã‚‚マッãƒã—ãªã„リクエスト㯠許å¯ã•れã¾ã™ã€‚
    Mutual-failure
    ã“れ㯠Order Allow,Deny ã¨å…¨ãåŒã˜åŠ¹æžœã‚’æŒã¡ã€ ãã®ãŸã‚éžæŽ¨å¥¨ã¨ãªã£ã¦ã„ã¾ã™ã€‚

    キーワードã®é–“ã«ç½®ã‘ã‚‹ã®ã¯ã‚³ãƒ³ãƒžã ã‘ã§ã™ã€‚ é–“ã«ç©ºç™½ãŒã‚ã£ã¦ã¯ã„ã‘ã¾ã›ã‚“。

    マッムAllow,Deny 時ã®çµæžœ Deny,Allow 時ã®çµæžœ
    Allow ã ã‘ã«ãƒžãƒƒãƒ è¨±å¯ è¨±å¯
    Deny ã ã‘ã«ãƒžãƒƒãƒ æ‹’å¦ æ‹’å¦
    ã©ã¡ã‚‰ã«ã‚‚マッãƒã—ãªã„ 2番目ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒãƒ‡ãƒ•ォルト: æ‹’å¦ 2番目ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒãƒ‡ãƒ•ォルト: 許å¯
    Allow 㨠Deny 両方ã«ãƒžãƒƒãƒ 最後ã«ãƒžãƒƒãƒã—ãŸã»ã†: æ‹’å¦ æœ€å¾Œã«ãƒžãƒƒãƒã—ãŸã»ã†: 許å¯

    以下ã®ä¾‹ã§ã¯ã€apache.org ドメインã®ã™ã¹ã¦ã®ãƒ›ã‚¹ãƒˆã¯ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã•れã¾ã™ã€‚ ä»–ã®ã™ã¹ã¦ã®ãƒ›ã‚¹ãƒˆã¯ã‚¢ã‚¯ã‚»ã‚¹ã‚’æ‹’å¦ã•れã¾ã™ã€‚

    Order Deny,Allow
    Deny from all
    Allow from apache.org

    次ã®ä¾‹ã§ã¯ã€foo.apache.org サブドメインã«ã‚るホスト以外ã®ã€ apache.org ドメインã®ã™ã¹ã¦ã®ãƒ›ã‚¹ãƒˆãŒã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã•れã¾ã™ã€‚ apache.org ドメインã§ãªã„ホストã¯ã€ãƒ‡ãƒ•ォルトã®çŠ¶æ…‹ãŒ Deny ã®ãŸã‚〠サーãƒã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’æ‹’å¦ã•れã¾ã™ã€‚

    Order Allow,Deny
    Allow from apache.org
    Deny from foo.apache.org

    一方ã€ä¸Šã®ä¾‹ã® Order ㌠Deny,Allow ã«å¤‰ã‚ã£ã¦ã„れã°ã€ã™ã¹ã®ãƒ›ã‚¹ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ãŒè¨±å¯ã•れã¾ã™ã€‚ ã“れã¯ã€è¨­å®šãƒ•ァイル中ã®å®Ÿéš›ã®é †ç•ªã«é–¢ã‚らãšã€ Allow from apache.org ãŒæœ€å¾Œã«è©•価ã•れã¦ã€ Deny from foo.apache.org を上書ãã™ã‚‹ã‹ã‚‰ã§ã™ã€‚ apache.org ドメインã«ãªã„ホストもã€ãƒ‡ãƒ•ォルトã®çŠ¶æ…‹ãŒ Allow ãªã®ã§ã€ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã•れã¾ã™ã€‚

    Order ディレクティブã¯ãƒ‡ãƒ•ォルトã®ã‚¢ã‚¯ã‚»ã‚¹ã®çŠ¶æ…‹ã«å½±éŸ¿ã‚’与ãˆã‚‹ã®ã§ã€ Allow ディレクティブ㨠Deny ディレクティブãŒç„¡ãã¦ã‚‚ã€ã‚µãƒ¼ãƒã®ã‚¢ã‚¯ã‚»ã‚¹ã«å½±éŸ¿ã‚’与ãˆã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ãŸã¨ãˆã°ã€

    <Directory /www>
    Order Allow,Deny
    </Directory>

    ã¯ãƒ‡ãƒ•ォルトã®ã‚¢ã‚¯ã‚»ã‚¹çŠ¶æ…‹ãŒ Deny ã«ãªã‚‹ãŸã‚〠/www ディレクトリã¸ã®ã™ã¹ã¦ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’æ‹’å¦ã—ã¾ã™ã€‚

    Order ディレクティブã¯ã‚µãƒ¼ãƒã®è¨­å®šå‡¦ç†ã®å„段階ã§ã ã‘ アクセスディレクティブã®å‡¦ç†ã®é †ç•ªã‚’変更ã—ã¾ã™ã€‚ã“れã¯ã€ãŸã¨ãˆã°ã€ Order ディレクティブã®è¨­å®šã«é–¢ã‚らãšã€ <Location> セクション㮠Allow ディレクティブや Deny ディレクティブã¯ã€ Directory セクションや .htaccess ファイル㮠Allow ディレクティブや Deny ディレクティブよりも常ã«å¾Œã«è©•価ã•れるã¨ã„ã†ã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚ 設定セクションã®ãƒžãƒ¼ã‚¸ã®è©³ç´°ã«ã¤ã„ã¦ã¯ã€ Directory,Location, Files セクションã®å‹•作方法 ã‚’å‚ç…§ã—ã¦ãã ã•ã„。

    top

    Satisfy ディレクティブ

    説明:ホストレベルã®ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã¨ãƒ¦ãƒ¼ã‚¶èªè¨¼ã¨ã®ç›¸äº’作用を指定
    æ§‹æ–‡:Satisfy Any|All
    デフォルト:Satisfy All
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Extension
    モジュール:mod_access_compat
    äº’æ›æ€§:ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.0.51 以é™ã§ã¯ <Limit> ディレクティブ㨠<LimitExcept> ディレクティブã®å½±éŸ¿ã‚’å—ã‘ã‚‹

    Allow 㨠Require ã®ä¸¡æ–¹ãŒä½¿ã‚れã¦ã„ã‚‹ã¨ã㮠アクセスãƒãƒªã‚·ãƒ¼ã‚’設定ã—ã¾ã™ã€‚パラメータ㯠All ã‹ Any ã§ã™ã€‚ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚る場所ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒãƒ¦ãƒ¼ã‚¶å/パスワード ã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ãƒ›ã‚¹ãƒˆã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã§åˆ¶é™ã•れã¦ã„ã‚‹ã¨ãã«ã®ã¿ 役立ã¡ã¾ã™ã€‚デフォルトã®å‹•作 (All) ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒã‚¢ãƒ‰ãƒ¬ã‚¹ã«ã‚ˆã‚‹ アクセス制é™ã‚’満ãŸã—ã€ã‹ã¤æ­£ã—ã„ユーザåã¨ãƒ‘スワードを入力ã™ã‚‹ã“ã¨ã‚’ è¦æ±‚ã—ã¾ã™ã€‚Any ã§ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯ãƒ›ã‚¹ãƒˆã®åˆ¶é™ã‚’満ãŸã™ã‹ã€ æ­£ã—ã„ユーザåã¨ãƒ‘スワードã®å…¥åŠ›ã‚’ã™ã‚‹ã‹ã‚’ã™ã‚Œã°ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã•れã¾ã™ã€‚ ã“れã¯ã€ã‚る場所をパスワードã§ä¿è­·ã™ã‚‹ã‘れã©ã€ç‰¹å®šã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‹ã‚‰ã® クライアントã«ã¯ãƒ‘スワードã®å…¥åŠ›ã‚’è¦æ±‚ã›ãšã«ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã™ã‚‹ã€ ã¨ã„ã†ã‚ˆã†ãªã¨ãã«ä½¿ç”¨ã§ãã¾ã™ã€‚

    例ãˆã°ã€åŒã˜ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã«ã„る人ã«ã¯ã‚¦ã‚§ãƒ–サイトã®ã‚る部分ã«ã¤ã„㦠無制é™ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’許ã—ãŸã„ã‘れã©ã€å¤–ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®äººã«ã¯ パスワードをæä¾›ã•ã›ã‚‹ã‚ˆã†ã«ã™ã‚‹ãŸã‚ã«ã¯ã€æ¬¡ã®ã‚ˆã†ãªè¨­å®šã‚’ã™ã‚‹ã“ã¨ãŒ ã§ãã¾ã™:

    Require valid-user
    Allow from 192.168.1
    Satisfy Any

    ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.0.51 ã‹ã‚‰ã¯ <Limit> セクション㨠<LimitExcept> セクションを使用ã™ã‚‹ã“ã¨ã§ Satisfy ディレクティブ㌠é©ç”¨ã•れるメソッドを制é™ã™ã‚‹ã“ã¨ãŒ ã§ãるよã†ã«ãªã‚Šã¾ã—ãŸã€‚

    å‚ç…§

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_lbmethod_bytraffic.html.fr.utf80000644000000000000500000002114513412755316023101 0ustar rootsrc mod_lbmethod_bytraffic - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_lbmethod_bytraffic

    Langues Disponibles:  en  |  fr 

    Description:Algorithme de planification avec répartition de charge en fonction d'un niveau de trafic pour le module mod_proxy_balancer
    Statut:Extension
    Identificateur de Module:lbmethod_bytraffic_module
    Fichier Source:mod_lbmethod_bytraffic.c
    Compatibilité:Dissocié de mod_proxy_balancer depuis la version 2.3

    Sommaire

    Ce module ne fournit pas lui-même de directive de configuration. Il nécessite les services de mod_proxy_balancer, et fournit la méthode de répartition de charge bytraffic.

    top

    Algorithme de répartition en fonction d'un certain trafic

    Activé via lbmethod=bytraffic, l'idée directrice de ce planificateur est similaire à celle de la méthode reposant sur le nombre de requêtes, avec les différences suivantes :

    lbfactor représente la quantité de trafic, en octets, que nous voulons voir traitée par le processus. Il s'agit là aussi d'une valeur normalisée représentant la part de travail à effectuer par le processus, mais au lieu de se baser sur un nombre de requêtes, on prend en compte la quantité de trafic que ce processus a traité.

    Si un répartiteur est configuré comme suit :

    worker a b c
    lbfactor 1 2 1

    Cela signifie que nous souhaitons que b traite 2 fois plus d'octets que a ou c. Cela n'entraîne pas nécessairement que b va traiter deux fois plus de requêtes, mais qu'il va traiter deux fois plus de trafic en termes d'entrées/sorties. A cet effet, les tailles de la requête et de sa réponse assocciée sont prises en compte par l'algorithme de sélection et d'évaluation du trafic.

    Note : les octets en entrée sont évalués avec la même pondération que les octets en sortie.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_mime.html.en0000644000000000000500000020121413412755316017304 0ustar rootsrc mod_mime - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_mime

    Available Languages:  en  |  fr  |  ja 

    Description:Associates the requested filename's extensions with the file's behavior (handlers and filters) and content (mime-type, language, character set and encoding)
    Status:Base
    Module Identifier:mime_module
    Source File:mod_mime.c

    Summary

    This module is used to assign content metadata to the content selected for an HTTP response by mapping patterns in the URI or filenames to the metadata values. For example, the filename extensions of content files often define the content's Internet media type, language, character set, and content-encoding. This information is sent in HTTP messages containing that content and used in content negotiation when selecting alternatives, such that the user's preferences are respected when choosing one of several possible contents to serve. See mod_negotiation for more information about content negotiation.

    The directives AddCharset, AddEncoding, AddLanguage and AddType are all used to map file extensions onto the metadata for that file. Respectively they set the character set, content-encoding, content-language, and media-type (content-type) of documents. The directive TypesConfig is used to specify a file which also maps extensions onto media types.

    In addition, mod_mime may define the handler and filters that originate and process content. The directives AddHandler, AddOutputFilter, and AddInputFilter control the modules or scripts that serve the document. The MultiviewsMatch directive allows mod_negotiation to consider these file extensions to be included when testing Multiviews matches.

    While mod_mime associates metadata with filename extensions, the core server provides directives that are used to associate all the files in a given container (e.g., <Location>, <Directory>, or <Files>) with particular metadata. These directives include ForceType, SetHandler, SetInputFilter, and SetOutputFilter. The core directives override any filename extension mappings defined in mod_mime.

    Note that changing the metadata for a file does not change the value of the Last-Modified header. Thus, previously cached copies may still be used by a client or proxy, with the previous headers. If you change the metadata (language, content type, character set or encoding) you may need to 'touch' affected files (updating their last modified date) to ensure that all visitors are receive the corrected content headers.

    top

    Files with Multiple Extensions

    Files can have more than one extension; the order of the extensions is normally irrelevant. For example, if the file welcome.html.fr maps onto content type text/html and language French then the file welcome.fr.html will map onto exactly the same information. If more than one extension is given that maps onto the same type of metadata, then the one to the right will be used, except for languages and content encodings. For example, if .gif maps to the media-type image/gif and .html maps to the media-type text/html, then the file welcome.gif.html will be associated with the media-type text/html.

    Languages and content encodings are treated accumulative, because one can assign more than one language or encoding to a particular resource. For example, the file welcome.html.en.de will be delivered with Content-Language: en, de and Content-Type: text/html.

    Care should be taken when a file with multiple extensions gets associated with both a media-type and a handler. This will usually result in the request being handled by the module associated with the handler. For example, if the .imap extension is mapped to the handler imap-file (from mod_imagemap) and the .html extension is mapped to the media-type text/html, then the file world.imap.html will be associated with both the imap-file handler and text/html media-type. When it is processed, the imap-file handler will be used, and so it will be treated as a mod_imagemap imagemap file.

    If you would prefer only the last dot-separated part of the filename to be mapped to a particular piece of meta-data, then do not use the Add* directives. For example, if you wish to have the file foo.html.cgi processed as a CGI script, but not the file bar.cgi.html, then instead of using AddHandler cgi-script .cgi, use

    Configure handler based on final extension only

    <FilesMatch "[^.]+\.cgi$">
      SetHandler cgi-script
    </FilesMatch>
    top

    Content encoding

    A file of a particular media-type can additionally be encoded a particular way to simplify transmission over the Internet. While this usually will refer to compression, such as gzip, it can also refer to encryption, such a pgp or to an encoding such as UUencoding, which is designed for transmitting a binary file in an ASCII (text) format.

    The HTTP/1.1 RFC, section 14.11 puts it this way:

    The Content-Encoding entity-header field is used as a modifier to the media-type. When present, its value indicates what additional content codings have been applied to the entity-body, and thus what decoding mechanisms must be applied in order to obtain the media-type referenced by the Content-Type header field. Content-Encoding is primarily used to allow a document to be compressed without losing the identity of its underlying media type.

    By using more than one file extension (see section above about multiple file extensions), you can indicate that a file is of a particular type, and also has a particular encoding.

    For example, you may have a file which is a Microsoft Word document, which is pkzipped to reduce its size. If the .doc extension is associated with the Microsoft Word file type, and the .zip extension is associated with the pkzip file encoding, then the file Resume.doc.zip would be known to be a pkzip'ed Word document.

    Apache sends a Content-encoding header with the resource, in order to tell the client browser about the encoding method.

    Content-encoding: pkzip
    top

    Character sets and languages

    In addition to file type and the file encoding, another important piece of information is what language a particular document is in, and in what character set the file should be displayed. For example, the document might be written in the Vietnamese alphabet, or in Cyrillic, and should be displayed as such. This information, also, is transmitted in HTTP headers.

    The character set, language, encoding and mime type are all used in the process of content negotiation (See mod_negotiation) to determine which document to give to the client, when there are alternative documents in more than one character set, language, encoding or mime type. All filename extensions associations created with AddCharset, AddEncoding, AddLanguage and AddType directives (and extensions listed in the MimeMagicFile) participate in this select process. Filename extensions that are only associated using the AddHandler, AddInputFilter or AddOutputFilter directives may be included or excluded from matching by using the MultiviewsMatch directive.

    Charset

    To convey this further information, Apache optionally sends a Content-Language header, to specify the language that the document is in, and can append additional information onto the Content-Type header to indicate the particular character set that should be used to correctly render the information.

    Content-Language: en, fr Content-Type: text/plain; charset=ISO-8859-1

    The language specification is the two-letter abbreviation for the language. The charset is the name of the particular character set which should be used.

    top

    AddCharset Directive

    Description:Maps the given filename extensions to the specified content charset
    Syntax:AddCharset charset extension [extension] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    The AddCharset directive maps the given filename extensions to the specified content charset (the Internet registered name for a given character encoding). charset is the media type's charset parameter for resources with filenames containing extension. This mapping is added to any already in force, overriding any mappings that already exist for the same extension.

    Example

    AddLanguage ja .ja
    AddCharset EUC-JP .euc
    AddCharset ISO-2022-JP .jis
    AddCharset SHIFT_JIS .sjis

    Then the document xxxx.ja.jis will be treated as being a Japanese document whose charset is ISO-2022-JP (as will the document xxxx.jis.ja). The AddCharset directive is useful for both to inform the client about the character encoding of the document so that the document can be interpreted and displayed appropriately, and for content negotiation, where the server returns one from several documents based on the client's charset preference.

    The extension argument is case-insensitive and can be specified with or without a leading dot. Filenames may have multiple extensions and the extension argument will be compared against each of them.

    See also

    top

    AddEncoding Directive

    Description:Maps the given filename extensions to the specified encoding type
    Syntax:AddEncoding encoding extension [extension] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    The AddEncoding directive maps the given filename extensions to the specified HTTP content-encoding. encoding is the HTTP content coding to append to the value of the Content-Encoding header field for documents named with the extension. This mapping is added to any already in force, overriding any mappings that already exist for the same extension.

    Example

    AddEncoding x-gzip .gz
    AddEncoding x-compress .Z

    This will cause filenames containing the .gz extension to be marked as encoded using the x-gzip encoding, and filenames containing the .Z extension to be marked as encoded with x-compress.

    Old clients expect x-gzip and x-compress, however the standard dictates that they're equivalent to gzip and compress respectively. Apache does content encoding comparisons by ignoring any leading x-. When responding with an encoding Apache will use whatever form (i.e., x-foo or foo) the client requested. If the client didn't specifically request a particular form Apache will use the form given by the AddEncoding directive. To make this long story short, you should always use x-gzip and x-compress for these two specific encodings. More recent encodings, such as deflate, should be specified without the x-.

    The extension argument is case-insensitive and can be specified with or without a leading dot. Filenames may have multiple extensions and the extension argument will be compared against each of them.

    top

    AddHandler Directive

    Description:Maps the filename extensions to the specified handler
    Syntax:AddHandler handler-name extension [extension] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    Files having the name extension will be served by the specified handler-name. This mapping is added to any already in force, overriding any mappings that already exist for the same extension. For example, to activate CGI scripts with the file extension .cgi, you might use:

    AddHandler cgi-script .cgi

    Once that has been put into your httpd.conf file, any file containing the .cgi extension will be treated as a CGI program.

    The extension argument is case-insensitive and can be specified with or without a leading dot. Filenames may have multiple extensions and the extension argument will be compared against each of them.

    See also

    top

    AddInputFilter Directive

    Description:Maps filename extensions to the filters that will process client requests
    Syntax:AddInputFilter filter[;filter...] extension [extension] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    AddInputFilter maps the filename extension extension to the filters which will process client requests and POST input when they are received by the server. This is in addition to any filters defined elsewhere, including the SetInputFilter directive. This mapping is merged over any already in force, overriding any mappings that already exist for the same extension.

    If more than one filter is specified, they must be separated by semicolons in the order in which they should process the content. The filter is case-insensitive.

    The extension argument is case-insensitive and can be specified with or without a leading dot. Filenames may have multiple extensions and the extension argument will be compared against each of them.

    See also

    top

    AddLanguage Directive

    Description:Maps the given filename extension to the specified content language
    Syntax:AddLanguage language-tag extension [extension] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    The AddLanguage directive maps the given filename extension to the specified content language. Files with the filename extension are assigned an HTTP Content-Language value of language-tag corresponding to the language identifiers defined by RFC 3066. This directive overrides any mappings that already exist for the same extension.

    Example

    AddEncoding x-compress .Z
    AddLanguage en .en
    AddLanguage fr .fr

    Then the document xxxx.en.Z will be treated as being a compressed English document (as will the document xxxx.Z.en). Although the content language is reported to the client, the browser is unlikely to use this information. The AddLanguage directive is more useful for content negotiation, where the server returns one from several documents based on the client's language preference.

    If multiple language assignments are made for the same extension, the last one encountered is the one that is used. That is, for the case of:

    AddLanguage en .en
    AddLanguage en-gb .en
    AddLanguage en-us .en

    documents with the extension .en would be treated as being en-us.

    The extension argument is case-insensitive and can be specified with or without a leading dot. Filenames may have multiple extensions and the extension argument will be compared against each of them.

    See also

    top

    AddOutputFilter Directive

    Description:Maps filename extensions to the filters that will process responses from the server
    Syntax:AddOutputFilter filter[;filter...] extension [extension] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    The AddOutputFilter directive maps the filename extension extension to the filters which will process responses from the server before they are sent to the client. This is in addition to any filters defined elsewhere, including SetOutputFilter and AddOutputFilterByType directive. This mapping is merged over any already in force, overriding any mappings that already exist for the same extension.

    For example, the following configuration will process all .shtml files for server-side includes and will then compress the output using mod_deflate.

    AddOutputFilter INCLUDES;DEFLATE shtml

    If more than one filter is specified, they must be separated by semicolons in the order in which they should process the content. The filter argument is case-insensitive.

    The extension argument is case-insensitive and can be specified with or without a leading dot. Filenames may have multiple extensions and the extension argument will be compared against each of them.

    Note that when defining a set of filters using the AddOutputFilter directive, any definition made will replace any previous definition made by the AddOutputFilter directive.

    # Effective filter "DEFLATE"
    AddOutputFilter DEFLATE shtml
    <Location "/foo">
      # Effective filter "INCLUDES", replacing "DEFLATE"
      AddOutputFilter INCLUDES shtml
    </Location>
    <Location "/bar">
      # Effective filter "INCLUDES;DEFLATE", replacing "DEFLATE"
      AddOutputFilter INCLUDES;DEFLATE shtml
    </Location>
    <Location "/bar/baz">
      # Effective filter "BUFFER", replacing "INCLUDES;DEFLATE"
      AddOutputFilter BUFFER shtml
    </Location>
    <Location "/bar/baz/buz">
      # No effective filter, replacing "BUFFER"
      RemoveOutputFilter shtml
    </Location>

    See also

    top

    AddType Directive

    Description:Maps the given filename extensions onto the specified content type
    Syntax:AddType media-type extension [extension] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    The AddType directive maps the given filename extensions onto the specified content type. media-type is the media type to use for filenames containing extension. This mapping is added to any already in force, overriding any mappings that already exist for the same extension.

    It is recommended that new media types be added using the AddType directive rather than changing the TypesConfig file.

    Example

    AddType image/gif .gif

    Or, to specify multiple file extensions in one directive:

    Example

    AddType image/jpeg jpeg jpg jpe

    The extension argument is case-insensitive and can be specified with or without a leading dot. Filenames may have multiple extensions and the extension argument will be compared against each of them.

    A similar effect to mod_negotiation's LanguagePriority can be achieved by qualifying a media-type with qs:

    Example

    AddType application/rss+xml;qs=0.8 .xml

    This is useful in situations, e.g. when a client requesting Accept: */* can not actually processes the content returned by the server.

    This directive primarily configures the content types generated for static files served out of the filesystem. For resources other than static files, where the generator of the response typically specifies a Content-Type, this directive has no effect.

    Note

    If no handler is explicitly set for a request, the specified content type will also be used as the handler name.

    When explicit directives such as SetHandler or AddHandler do not apply to the current request, the internal handler name normally set by those directives is instead set to the content type specified by this directive.

    This is a historical behavior that may be used by some third-party modules (such as mod_php) for taking responsibility for the matching request.

    Configurations that rely on such "synthetic" types should be avoided. Additionally, configurations that restrict access to SetHandler or AddHandler should restrict access to this directive as well.

    See also

    top

    DefaultLanguage Directive

    Description:Defines a default language-tag to be sent in the Content-Language header field for all resources in the current context that have not been assigned a language-tag by some other means.
    Syntax:DefaultLanguage language-tag
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    The DefaultLanguage directive tells Apache that all resources in the directive's scope (e.g., all resources covered by the current <Directory> container) that don't have an explicit language extension (such as .fr or .de as configured by AddLanguage) should be assigned a Content-Language of language-tag. This allows entire directory trees to be marked as containing Dutch content, for instance, without having to rename each file. Note that unlike using extensions to specify languages, DefaultLanguage can only specify a single language.

    If no DefaultLanguage directive is in force and a file does not have any language extensions as configured by AddLanguage, then no Content-Language header field will be generated.

    Example

    DefaultLanguage en

    See also

    top

    ModMimeUsePathInfo Directive

    Description:Tells mod_mime to treat path_info components as part of the filename
    Syntax:ModMimeUsePathInfo On|Off
    Default:ModMimeUsePathInfo Off
    Context:directory
    Status:Base
    Module:mod_mime

    The ModMimeUsePathInfo directive is used to combine the filename with the path_info URL component to apply mod_mime's directives to the request. The default value is Off - therefore, the path_info component is ignored.

    This directive is recommended when you have a virtual filesystem.

    Example

    ModMimeUsePathInfo On

    If you have a request for /index.php/foo.shtml mod_mime will now treat the incoming request as /index.php/foo.shtml and directives like AddOutputFilter INCLUDES .shtml will add the INCLUDES filter to the request. If ModMimeUsePathInfo is not set, the INCLUDES filter will not be added. This will work analogously for virtual paths, such as those defined by <Location>

    See also

    top

    MultiviewsMatch Directive

    Description:The types of files that will be included when searching for a matching file with MultiViews
    Syntax:MultiviewsMatch Any|NegotiatedOnly|Filters|Handlers [Handlers|Filters]
    Default:MultiviewsMatch NegotiatedOnly
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    MultiviewsMatch permits three different behaviors for mod_negotiation's Multiviews feature. Multiviews allows a request for a file, e.g. index.html, to match any negotiated extensions following the base request, e.g. index.html.en, index.html.fr, or index.html.gz.

    The NegotiatedOnly option provides that every extension following the base name must correlate to a recognized mod_mime extension for content negotiation, e.g. Charset, Content-Type, Language, or Encoding. This is the strictest implementation with the fewest unexpected side effects, and is the default behavior.

    To include extensions associated with Handlers and/or Filters, set the MultiviewsMatch directive to either Handlers, Filters, or both option keywords. If all other factors are equal, the smallest file will be served, e.g. in deciding between index.html.cgi of 500 bytes and index.html.pl of 1000 bytes, the .cgi file would win in this example. Users of .asis files might prefer to use the Handler option, if .asis files are associated with the asis-handler.

    You may finally allow Any extensions to match, even if mod_mime doesn't recognize the extension. This can cause unpredictable results, such as serving .old or .bak files the webmaster never expected to be served.

    For example, the following configuration will allow handlers and filters to participate in Multviews, but will exclude unknown files:

    MultiviewsMatch Handlers Filters

    MultiviewsMatch is not allowed in a <Location> or <LocationMatch> section.

    See also

    top

    RemoveCharset Directive

    Description:Removes any character set associations for a set of file extensions
    Syntax:RemoveCharset extension [extension] ...
    Context:virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    The RemoveCharset directive removes any character set associations for files with the given extensions. This allows .htaccess files in subdirectories to undo any associations inherited from parent directories or the server config files.

    The extension argument is case-insensitive and can be specified with or without a leading dot.

    Example

    RemoveCharset .html .shtml
    top

    RemoveEncoding Directive

    Description:Removes any content encoding associations for a set of file extensions
    Syntax:RemoveEncoding extension [extension] ...
    Context:virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    The RemoveEncoding directive removes any encoding associations for files with the given extensions. This allows .htaccess files in subdirectories to undo any associations inherited from parent directories or the server config files. An example of its use might be:

    /foo/.htaccess:

    AddEncoding x-gzip .gz
    AddType text/plain .asc
    <Files "*.gz.asc">
        RemoveEncoding .gz
    </Files>

    This will cause foo.gz to be marked as being encoded with the gzip method, but foo.gz.asc as an unencoded plaintext file.

    Note

    RemoveEncoding directives are processed after any AddEncoding directives, so it is possible they may undo the effects of the latter if both occur within the same directory configuration.

    The extension argument is case-insensitive and can be specified with or without a leading dot.

    top

    RemoveHandler Directive

    Description:Removes any handler associations for a set of file extensions
    Syntax:RemoveHandler extension [extension] ...
    Context:virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    The RemoveHandler directive removes any handler associations for files with the given extensions. This allows .htaccess files in subdirectories to undo any associations inherited from parent directories or the server config files. An example of its use might be:

    /foo/.htaccess:

    AddHandler server-parsed .html

    /foo/bar/.htaccess:

    RemoveHandler .html

    This has the effect of returning .html files in the /foo/bar directory to being treated as normal files, rather than as candidates for parsing (see the mod_include module).

    The extension argument is case-insensitive and can be specified with or without a leading dot.

    top

    RemoveInputFilter Directive

    Description:Removes any input filter associations for a set of file extensions
    Syntax:RemoveInputFilter extension [extension] ...
    Context:virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    The RemoveInputFilter directive removes any input filter associations for files with the given extensions. This allows .htaccess files in subdirectories to undo any associations inherited from parent directories or the server config files.

    The extension argument is case-insensitive and can be specified with or without a leading dot.

    See also

    top

    RemoveLanguage Directive

    Description:Removes any language associations for a set of file extensions
    Syntax:RemoveLanguage extension [extension] ...
    Context:virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    The RemoveLanguage directive removes any language associations for files with the given extensions. This allows .htaccess files in subdirectories to undo any associations inherited from parent directories or the server config files.

    The extension argument is case-insensitive and can be specified with or without a leading dot.

    top

    RemoveOutputFilter Directive

    Description:Removes any output filter associations for a set of file extensions
    Syntax:RemoveOutputFilter extension [extension] ...
    Context:virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    The RemoveOutputFilter directive removes any output filter associations for files with the given extensions. This allows .htaccess files in subdirectories to undo any associations inherited from parent directories or the server config files.

    The extension argument is case-insensitive and can be specified with or without a leading dot.

    Example

    RemoveOutputFilter shtml

    See also

    top

    RemoveType Directive

    Description:Removes any content type associations for a set of file extensions
    Syntax:RemoveType extension [extension] ...
    Context:virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_mime

    The RemoveType directive removes any media type associations for files with the given extensions. This allows .htaccess files in subdirectories to undo any associations inherited from parent directories or the server config files. An example of its use might be:

    /foo/.htaccess:

    RemoveType .cgi

    This will remove any special handling of .cgi files in the /foo/ directory and any beneath it, causing responses containing those files to omit the HTTP Content-Type header field.

    Note

    RemoveType directives are processed after any AddType directives, so it is possible they may undo the effects of the latter if both occur within the same directory configuration.

    The extension argument is case-insensitive and can be specified with or without a leading dot.

    top

    TypesConfig Directive

    Description:The location of the mime.types file
    Syntax:TypesConfig file-path
    Default:TypesConfig conf/mime.types
    Context:server config
    Status:Base
    Module:mod_mime

    The TypesConfig directive sets the location of the media types configuration file. File-path is relative to the ServerRoot. This file sets the default list of mappings from filename extensions to content types. Most administrators use the mime.types file provided by their OS, which associates common filename extensions with the official list of IANA registered media types maintained at http://www.iana.org/assignments/media-types/index.html as well as a large number of unofficial types. This simplifies the httpd.conf file by providing the majority of media-type definitions, and may be overridden by AddType directives as needed. You should not edit the mime.types file, because it may be replaced when you upgrade your server.

    The file contains lines in the format of the arguments to an AddType directive:

    media-type [extension] ...

    The case of the extension does not matter. Blank lines, and lines beginning with a hash character (#) are ignored. Empty lines are there for completeness (of the mime.types file). Apache httpd can still determine these types with mod_mime_magic.

    Please do not send requests to the Apache HTTP Server Project to add any new entries in the distributed mime.types file unless (1) they are already registered with IANA, and (2) they use widely accepted, non-conflicting filename extensions across platforms. category/x-subtype requests will be automatically rejected, as will any new two-letter extensions as they will likely conflict later with the already crowded language and character set namespace.

    See also

    Available Languages:  en  |  fr  |  ja 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_log_forensic.html.tr.utf80000644000000000000500000003242013447004010021721 0ustar rootsrc mod_log_forensic - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_log_forensic

    Mevcut Diller:  en  |  fr  |  ja  |  tr 

    Açıklama:Sunucuya yapılan isteklerin adli günlük kayıtlarının tutulması
    Durum:Eklenti
    Modül Betimleyici:log_forensic_module
    Kaynak Dosyası:mod_log_forensic.c
    Uyumluluk:2.1 sürümünden beri mod_unique_id gerekmemektedir.

    Özet

    Bu modül istemci isteklerinin adli günlük kayıtlarının tutulmasını sağlar. Günlük kaydı bir istek işlenmeden önce ve sonra olmak üzere iki kere yapılır, böylece günlükte her istek için iki girdi bulunur. Adli günlükleyici çok sıkı kurallara tabidir, yani:

    • Biçem sabittir. Günlük kayıt biçemi çalışma anında deÄŸiÅŸtirilemez.
    • Veriyi yazamadığı takdirde çocuk süreç beklemeksizin çıkar ve (CoreDumpDirectory yapılandırmasına baÄŸlı olarak) bir core dosyası dökümler.

    Dağıtımın support dizininde bulunan check_forensic betiği adli günlük dosyalarının değerlendirilmesinde yardımcı olabilir.

    top

    Adli Günlük Biçemi

    Her istek günlüğe iki defa kaydedilir. İlki, işlemin başlangıcında (yani, başlıklar alındıktan hemen sonra), ikincisi ise istek işlem gördükten sonra normal günlüklemenin yapıldığı sırada yapılır.

    Her isteği betimlemek için eşsiz bir istek kimliği atanır. Bu adli kimliğin normal günlüğe de yazılması istenirse bu %{forensic-id}n biçem dizgesi ile yapılabilir. mod_unique_id kullanılıyorsa, onun ürettiği kimlik kullanılır.

    İlk satır günlüğe, adli kimliği, istek satırını ve alınan tüm başlıkları boru karakterleri (|) ile ayrılmış olarak kaydeder. Aşağıda bir örneğe yer verilmiştir (hepsi bir satırdadır):

    +yQtJf8CoAB4AAFNXBIEAAAAA|GET /manual/de/images/down.gif HTTP/1.1|Host:localhost%3a8080|User-Agent:Mozilla/5.0 (X11; U; Linux i686; en-US; rv%3a1.6) Gecko/20040216 Firefox/0.8|Accept:image/png, etc...

    Başlangıçtaki artı imi bu günlük satırının istekle ilgili ilk günlük kaydı olduğunu belirtir. İkinci satırda bunun yerini bir eksi imi alır:

    -yQtJf8CoAB4AAFNXBIEAAAAA

    check_forensic betiği komut satırı argümanı olarak günlük dosyasının ismini alır. Bu +/- kimlik çiftlerine bakarak tamamlanmamış istekler varsa bunlar hakkında uyarır.

    top

    Güvenlik Kaygıları

    Günlük dosyarının kaydedildiği dizine sunucuyu başlatan kullanıcı dışında diğer kullanıcılar tarafından yazılabiliyor olması halinde güvenliğinizden nasıl feragat etmiş olacağınız güvenlik ipuçları belgesinde açıklanmıştır.

    Günlük dosyaları, Authorization: başlıklarının (parola içerebilen) içerikleri gibi hassas veriler içerebileceğinden bunların sunucuyu başlatan kullanıcıdan başkası tarafından okunamaması sağlanmış olmalıdır.

    top

    ForensicLog Yönergesi

    Açıklama:Adli günlük için dosya ismini belirler.
    Sözdizimi:ForensicLog dosya-adı|borulu-süreç
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Eklenti
    Modül:mod_log_forensic

    ForensicLog yönergesi adli inceleme için sunucuya yapılan istekleri günlüğe kaydetmekte kullanılır. Her günlük girdisine, normal CustomLog yönergesinde kullanılarak istekle ilişkilendirilebilen eşsiz bir kimlik atanır. mod_log_forensic modülü, aktarım günlüğünün biçem dizgesinde %{forensic-id}n şeklinde kullanılmak üzere forensic-id adı verilen bir dizgecik oluşturur.

    Günlüğün yazılacağı yeri belirleyen argüman şu iki değerden birini alabilir:

    dosya-adı
    ServerRoot yönergesinin değerine göreli bir dosya ismi.
    borulu-süreç
    "|" boru karakteri ile öncelenmiş olarak günlük bilgisini standart girdisinden kabul edecek sürecin ismi (veya komut satırı). Program adının ServerRoot yönergesinin değerine göre belirtildiği varsayılır.

    Güvenlik:

    Bir borulu süreç kullanılmışsa, süreç httpd’yi başlatan kullanıcı tarafından başlatılacaktır. Sunucu root tarafından başlatılıyorsa bu root olacaktır; bu bakımdan günlük kaydını alacak programın güvenilir olması veya daha az yetkili bir kullanıcıya geçiş yapması önemlidir.

    Bilginize

    Dosya yolunu belirtirken tersbölü çizgisi kullanılan Unix dışı platformlarda bile yapılandırma dosyasında bu amaçla normal bölü çizgilerini kullanmaya özen gösterilmelidir.

    Mevcut Diller:  en  |  fr  |  ja  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_imagemap.html0000644000000000000500000000047313362070302017525 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_imagemap.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_imagemap.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_imagemap.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_socache_dc.html.en0000644000000000000500000001433313412755316020434 0ustar rootsrc mod_socache_dc - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_socache_dc

    Available Languages:  en  |  fr 

    Description:Distcache based shared object cache provider.
    Status:Extension
    Module Identifier:socache_dc_module
    Source File:mod_socache_dc.c

    Summary

    mod_socache_dc is a shared object cache provider which provides for creation and access to a cache backed by the distcache distributed session caching libraries.

    Details of other shared object cache providers can be found here.

    Support Apache!

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_fdpass.html.fr.utf80000644000000000000500000001735013412755316021776 0ustar rootsrc mod_proxy_fdpass - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_proxy_fdpass

    Langues Disponibles:  en  |  fr 

    Description:Module fournissant le support des processus externes fdpass à mod_proxy
    Statut:Extension
    Identificateur de Module:proxy_fdpass_module
    Fichier Source:mod_proxy_fdpass.c
    Compatibilité:Disponible pour unix depuis la version 2.3 d'Apache

    Sommaire

    Pour fonctionner, ce module nécessite le chargement de mod_proxy. Il permet le passage de la socket du client vers un autre processus.

    mod_proxy_fdpass utilise la capacité des sockets de domaine AF_UNIX à transmettre un descripteur de fichier ouvert afin de permettre à un autre processus de terminer le traitement de la requête.

    Le module possède une interface de fournisseur proxy_fdpass_flusher qui permet éventuellement à un autre module d'envoyer les en-têtes de la réponse, ou même le début du corps de la réponse. Le fournisseur par défaut flush désactive la persistence, et envoie les en-têtes de la réponse, laissant le soin au processus externe d'envoyer le corps de la réponse.

    Pour utiliser un autre fournisseur, vous devez spécifier le paramètre flusher de la directive ProxyPass.

    À l'heure actuelle, la seule donnée transmise au processus externe est la socket du client. Pour recevoir une socket client, appelez recvfrom avec une structure struct cmsghdr allouée. Les versions futures de ce module pourront transmettre d'autres données que le socket client.

    Support Apache!

    Directives

    Ce module ne fournit aucune directive.

    Traitement des bugs

    Voir aussi

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_brotli.html0000644000000000000500000000033013362070302017230 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_brotli.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_brotli.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_auth_form.html.fr.utf80000644000000000000500000015523313412755316021244 0ustar rootsrc mod_auth_form - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_auth_form

    Langues Disponibles:  en  |  fr 

    Description:Authentification à l'aide d'un formulaire
    Statut:Base
    Identificateur de Module:auth_form_module
    Fichier Source:mod_auth_form.c
    Compatibilité:Disponible à partir d'Apache 2.3

    Sommaire

    Avertissement

    L'authentification à base de formulaire dépend des modules mod_session qui utilisent les cookies HTTP, et en tant que tels s'exposent à des attaques de type Cross Site Scripting, ou risquent de divulguer des informations à caractère privé aux clients. Assurez-vous que ces risques ont bien été pris en compte avant d'activer les sessions sur votre serveur.

    Ce module permet de restreindre l'accès en recherchant les utilisateurs dans les fournisseurs spécifiés à l'aide d'un formulaire de connexion HTML. Les formulaires HTML requièrent davantage de configuration que les méthodes d'authentification alternatives, mais ils peuvent s'avérer beaucoup plus conviviaux pour les utilisateurs.

    L'authentification HTTP de base est fournie par le module mod_auth_basic, et l'authentification HTTP à base de condensé par le module mod_auth_digest. Le module mod_auth_form doit être utilisé avec au moins un module d'authentification du style mod_authn_file et un module d'autorisation comme mod_authz_user.

    Lorsque l'utilisateur a été authentifié avec succès, ses informations de connexion sont stockés dans une session fournie par le module mod_session.

    top

    Configuration de base

    Pour protéger une URL particulière avec le module mod_auth_form, vous devez déterminer l'endroit où vous allez stocker votre session, ainsi que la méthode d'authentification. Dans cet exemple simple, les informations de connexion sont stockées dans une session à l'aide du module mod_session_cookie, et l'authentification utilise un fichier en s'appuyant sur le module mod_authn_file. Si l'authentification échoue, l'utilisateur dera redirigé vers la page du formulaire de connexion.

    Exemple simple

    <Location "/admin">
        AuthFormProvider file
        AuthUserFile "conf/passwd"
        AuthType form
        AuthName "/admin"
        AuthFormLoginRequiredLocation "http://example.com/login.html"
    
        Session On
        SessionCookieName session path=/
    
        Require valid-user
    </Location>

    L'authentification mod_auth_form est activée en affectant la valeur form à la directive AuthType. Les directives AuthFormProvider et AuthUserFile spécifient que les noms d'utilisateurs et mots de passe seront vérifiés en utilisant le fichier choisi.

    Les directives Session et SessionCookieName créent une session chiffrée stockée dans un cookie HTTP au niveau du navigateur. Pour plus d'informations à propos des différentes options de configuration des sessions, reportez-vous à la documentation du module mod_session.

    Vous pouvez éventuellement ajouter une directive SessionCryptoPassphrase pour créer un cookie de session chiffré. Pour utiliser cette directive, le module mod_session_crypto doit avoir été préalablement chargé.

    Dans l'exemple simple ci-dessus, une URL a été protégée par mod_auth_form, mais on doit maintenant fournir à l'utilisateur un moyen d'entrer un nom et un mot de passe. À cet effet, on peut soit écrire une page de connexion indépendante dédiée, soit inclure le formulaire de connexion dans la page courante.

    top

    Page de connexion dédiée

    Le formulaire de connexion peut être contenu dans une page indépendante, ou être inclus dans la page courante.

    Lorsque la connexion s'effectue à partir d'une page indépendante et si la tentative d'authentification échoue, l'utilisateur doit être redirigé vers un formulaire de connexion, créé à cet effet sur le site web, en utilisant la directive AuthFormLoginRequiredLocation. En général, la page de connexion contiendra un formulaire HTML demandant à l'utilisateur de fournir un nom et un mot de passe.

    Exemple de formulaire de connexion

    <form method="POST" action="/dologin.html">
      Username: <input type="text" name="httpd_username" value="" />
      Password: <input type="password" name="httpd_password" value="" />
      <input type="submit" name="login" value="Login" />
    </form>

    La partie où s'effectue la connexion proprement dite est traitée par le gestionnaire form-login-handler. L'action de ce formulaire doit pointer vers ce gestionnaire, ce que l'on configure dans Apache httpd comme suit :

    Exemple de configuration du gestionnaire de formulaire de connexion

    <Location "/dologin.html">
        SetHandler form-login-handler
        AuthFormLoginRequiredLocation "http://example.com/login.html"
        AuthFormLoginSuccessLocation "http://example.com/admin/index.html"
        AuthFormProvider file
        AuthUserFile "conf/passwd"
        AuthType form
        AuthName /admin
        Session On
        SessionCookieName session path=/
        SessionCryptoPassphrase secret
    </Location>

    L'URL spécifiée par la directive AuthFormLoginRequiredLocation référencera en général une page expliquant à l'utilisateur que sa tentative de connexion a échoué, et qu'il doit la renouveler. La directive AuthFormLoginSuccessLocation spécifie l'URL vers laquelle l'utilisateur doit être redirigé s'il s'est authentifié avec succès.

    Alternativement, l'URL vers laquelle doit être redirigé l'utilisateur s'il s'est authentifié avec succès peut être intégrée dans le formulaire de connexion, comme dans l'exemple ci-dessous. Il en découle que le même gestionnaire form-login-handler pourra être utilisé pour différentes zones du site web.

    Exemple de formulaire d'authentification multizone

    <form method="POST" action="/dologin.html">
      Username: <input type="text" name="httpd_username" value="" />
      Password: <input type="password" name="httpd_password" value="" />
      <input type="submit" name="login" value="Login" />
      <input type="hidden" name="httpd_location" value="http://example.com/success.html" />
    </form>
    top

    Connexion à la volée

    Avertissement

    Il existe un risque, dans certaines circonstances, que le formulaire de connexion configuré pour une connexion à la volée soit soumis plusieurs fois, révélant de ce fait les paramètres de connexion à l'application sous-jacente. L'administrateur doit s'assurer que cette dernière est correctement sécurisée afin d'éviter les éventuels abus. En cas de doute, utilisez une page de connexion indépendante dédiée.

    Comme alternative à la page de connexion dédiée pour un site web, il est possible de configurer mod_auth_form pour authentifier les utilisateurs à la volée, sans les rediriger vers une autre page, ce qui permet de conserver l'état de la page courante au cours de la tentative de connexion. Ceci peut s'avérer utile dans le cas d'une session limitée dans le temps, si le délai de la session a expiré pendant la requête de l'utilisateur. Ce dernier peut alors se réauthentifier à la même place, et poursuivre son activité à partir du point où il en était resté.

    Si un utilisateur non authentifié tente d'accéder à une page protégée par mod_auth_form, et si ce dernier n'est pas configuré avec une directive AuthFormLoginRequiredLocation, un code de statut HTTP_UNAUTHORIZED est renvoyé vers le navigateur, indiquant à l'utilisateur qu'il n'est pas autorisé à accéder à cette page.

    Pour configurer l'authentification à la volée, l'administrateur remplace le message d'erreur renvoyé par le code de statut HTTP_UNAUTHORIZED par un message d'erreur personnalisé contenant le formulaire de connexion comme suit :

    Exemple simple d'authentification à la volée

    AuthFormProvider file
    ErrorDocument 401 "/login.shtml"
    AuthUserFile "conf/passwd"
    AuthType form
    AuthName realm
    AuthFormLoginRequiredLocation "http://example.com/login.html"
    Session On
    SessionCookieName session path=/

    La page du message d'erreur doit contenir un formulaire de connexion dont la propriété action est vide, comme dans l'exemple ci-dessous. Ceci a pour effet de soumettre le formulaire à l'URL protégée originale, cette dernière n'ayant pas besoin d'être connue de la page en cours.

    Exemple de formulaire de connexion à la volée

    <form method="POST" action="">
      Username: <input type="text" name="httpd_username" value="" />
      Password: <input type="password" name="httpd_password" value="" />
      <input type="submit" name="login" value="Login" />
    </form>

    Lorsque l'utilisateur final a entré ses informations de connexion, le formulaire effectue une requête HTTP POST pour l'URL originale protégée par mot de passe. mod_auth_form va alors intercepter cette requête POST, et dans le cas où des champs HTML Utilisateur et Mot de passe corrects sont présents, l'utilisateur sera connecté, et l'URL originale protégée par mot de passe lui sera retournée en tant que requête GET.

    top

    Connexion à la volée avec conservation du contenu

    Il existe une limite à la technique de connexion à la volée décrite ci-dessus ; si un formulaire HTML POST entraîne une demande d'authentification ou de réauthentification, le contenu du formulaire original envoyé par le navigateur sera perdu. Cela peut s'avérer plus ou moins gênant pour l'utilisateur final selon la fonction du site web.

    Comme solution à ce problème, mod_auth_form permet d'intégrer la méthode et le contenu de la requête originale dans le formulaire de connexion. Si l'authentification réussit, Apache httpd pourra refaire une tentative avec la méthode et le contenu originaux, tout en conservant l'état de la requête originale.

    Pour mettre en oeuvre la conservation du contenu, vous devez ajouter trois champs supplémentaires au formulaire de connexion comme dans l'exemple suivant :

    Exemple de formulaire avec conservation du contenu

    <form method="POST" action="">
      Username: <input type="text" name="httpd_username" value="" />
      Password: <input type="password" name="httpd_password" value="" />
      <input type="submit" name="login" value="Login" />
      
    <input type="hidden" name="httpd_method" value="POST" /> <input type="hidden" name="httpd_mimetype" value="application/x-www-form-urlencoded" /> <input type="hidden" name="httpd_body" value="name1=value1&name2=value2" />
    </form>

    La manière dont la méthode, le type MIME et le contenu de la requête originale seront intégrés dans le formulaire de connexion vont dépendre de la plate-forme et de la technologie utilisées au sein du site web.

    Une option consiste à utiliser le module mod_include en association avec la directive KeptBodySize, ainsi qu'un script CGI adapté pour intégrer les variables dans le formulaire.

    Une autre option consiste à présenter le formulaire de connexion en utilisant un script CGI ou une autre technologie dynamique.

    Exemple avec script CGI

            AuthFormProvider file
            ErrorDocument 401 "/cgi-bin/login.cgi"
            ...
    top

    Déconnexion

    Pour permettre à un utilisateur de se déconnecter d'une session particulière, vous devez configurer une page pour qu'elle soit traitée par le gestionnaire form-logout-handler. Tout accès à cette URL va entraîner la suppression de l'Utilisateur et du Mot de passe de la session courante, ce qui aura pour effet de déconnecter l'utilisateur.

    Vous pouvez spécifier une URL vers laquelle le navigateur sera redirigé en cas de déconnection réussie, en définissant la directive AuthFormLogoutLocation. Cette URL devra expliquer à l'utilisateur qu'il a été déconnecté, et lui donner la possibilité de se connecter à nouveau.

    Exemple simple de configuration de la déconnexion

    SetHandler form-logout-handler
    AuthName realm
    AuthFormLogoutLocation "http://example.com/loggedout.html"
    Session On
    SessionCookieName session path=/

    Notez que la déconnexion d'un utilisateur ne supprime pas la session ; elle supprime seulement l'utilisateur et le mot de passe de la session. Si la session qui en résulte est vide, elle sera probablement supprimée, mais ce n'est pas garanti. Si vous voulez être sûr que la session sera supprimée, affectez une valeur faible à la directive SessionMaxAge, par exemple 1 (affecter à cette directive la valeur zéro signifie une session sans limite d'âge).

    Exemple simple avec durée de validité de session limitée

    SetHandler form-logout-handler
    AuthFormLogoutLocation "http://example.com/loggedout.html"
    Session On
    SessionMaxAge 1
    SessionCookieName session path=/
    top

    Noms d'utilisateurs et mots de passe

    Notez que la soumission d'un formulaire implique l'encodage URL (URLEncoding) des données du formulaire, ici le nom d'utilisateur et le mot de passe. Vous devez donc choisir des noms d'utilisateurs et mots de passe qui ne contiennent pas de caractères susceptibles d'être encodés URL lors de la soumission du formulaire, sous peine d'obtenir des résultats inattendus.

    top

    Directive AuthFormAuthoritative

    Description:Détermine si l'autorisation et l'authentification sont confiés à des modules de plus bas niveau
    Syntaxe:AuthFormAuthoritative On|Off
    Défaut:AuthFormAuthoritative On
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_auth_form

    Normalement, chacun des modules d'autorisation spécifiés par la directive AuthFormProvider va tenter de vérifier l'identité de l'utilisateur, et si ce dernier n'est trouvé dans aucun fournisseur, l'accès sera refusé. En définissant explicitement la directive AuthFormAuthoritative à Off on confie les processus d'authentification et d'autorisation à des modules ne s'appuyant pas sur des fournisseurs, si aucun identifiant utilisateur ou aucune règle ne correspond à l'identifiant utilisateur fourni. Ceci ne peut s'avérer nécessaire que si l'on combine mod_auth_form avec des modules tiers qui ne se configurent pas avec la directive AuthFormProvider. Lorsqu'on utilise de tels modules, la chronologie du processus est déterminée dans leur code source, et n'est pas configurable.

    top

    Directive AuthFormBody

    Description:Le nom du champ de formulaire contenant le corps de la requête à effectuer en cas de connexion réussie
    Syntaxe:AuthFormBody nom du champ
    Défaut:httpd_body
    Contexte:répertoire
    Statut:Base
    Module:mod_auth_form
    Compatibilité:Disponible depuis la version 2.3.0 du serveur HTTP Apache

    La directive AuthFormBody spécifie le nom du champ HTML qui, s'il existe, contiendra le corps de la requête à effectuer en cas de connexion réussie.

    En ajoutant au formulaire les champs décrits dans AuthFormMethod, AuthFormMimetype et AuthFormBody, un site web sera en mesure de relancer une requête qui a été éventuellement interrompue par l'écran de connexion, ou par l'expiration d'un délai de session.

    top

    Directive AuthFormDisableNoStore

    Description:Désactive l'en-tête CacheControl no-store sur la page de connexion
    Syntaxe:AuthFormDisableNoStore On|Off
    Défaut:AuthFormDisableNoStore Off
    Contexte:répertoire
    Statut:Base
    Module:mod_auth_form
    Compatibilité:Disponible depuis la version 2.3.0 du serveur HTTP Apache

    Le drapeau AuthFormDisableNoStore supprime l'envoi d'un en-tête Cache-Control no-store lorsqu'une page avec code d'erreur 401 est renvoyée, si l'utilisateur n'est pas encore connecté. Avec cette en-tête, il est plus difficile pour une application ecmascript de resoumettre un formulaire de connexion, et ainsi révéler le nom d'utilisateur et le mot de passe à l'application sous-jacente. Vous devez être conscient des risques encourus si vous le désactivez.

    top

    Directive AuthFormFakeBasicAuth

    Description:Simule une en-tête d'authentification de base
    Syntaxe:AuthFormFakeBasicAuth On|Off
    Défaut:AuthFormFakeBasicAuth Off
    Contexte:répertoire
    Statut:Base
    Module:mod_auth_form
    Compatibilité:Disponible depuis la version 2.3.0 du serveur HTTP Apache

    Le drapeau AuthFormFakeBasicAuth détermine si une en-tête d'Authentification de base sera ajoutée aux en-têtes de la requête. On peut utiliser cette méthode pour présenter le nom d'utilisateur et le mot de passe à l'application sous-jacente, sans que cette dernière ait besoin de connaître la manière dont le processus de connexion a été mené à bien.

    top

    Directive AuthFormLocation

    Description:Le nom du champ de formulaire qui contiendra l'URL vers laquelle l'utilisateur sera redirigé en cas de connexion réussie
    Syntaxe:AuthFormLocation nom du champ
    Défaut:httpd_location
    Contexte:répertoire
    Statut:Base
    Module:mod_auth_form
    Compatibilité:Disponible depuis la version 2.3.0 du serveur HTTP Apache

    La directive AuthFormLocation spécifie le nom du champ HTML qui, s'il existe, contiendra l'URL vers laquelle rediriger le navigateur en cas de connexion réussie.

    top

    Directive AuthFormLoginRequiredLocation

    Description:L'URL de la page vers laquelle on doit être redirigé si une authentification est requise
    Syntaxe:AuthFormLoginRequiredLocation url
    Défaut:none
    Contexte:répertoire
    Statut:Base
    Module:mod_auth_form
    Compatibilité:Disponible depuis la version 2.3.0 du serveur HTTP Apache. L'interprétation des expressions rationnelles est supportée depuis la version 2.4.4.

    La directive AuthFormLoginRequiredLocation spécifie l'URL vers laquelle l'utilisateur devra être redirigé s'il n'est pas autorisé à accéder à une page. Sa valeur est interprétée via l'interpréteur ap_expr avant d'être envoyée au client. Par défaut, si un utilisateur n'est pas autorisé à accéder à une page, le code de réponse HTTP HTTP_UNAUTHORIZED est renvoyé avec la page spécifiée par la directive ErrorDocument. La directive AuthFormLoginRequiredLocation permet de remplacer cette valeur par défaut.

    Vous pouvez utiliser cette directive si vous voulez présenter une page de connexion personnalisée à vos utilisateurs.

    top

    Directive AuthFormLoginSuccessLocation

    Description:L'URL de la page vers laquelle on doit être redirigé en cas de connexion réussie
    Syntaxe:AuthFormLoginSuccessLocation url
    Défaut:none
    Contexte:répertoire
    Statut:Base
    Module:mod_auth_form
    Compatibilité:Disponible depuis la version 2.3.0 du serveur HTTP Apache. L'interprétation des expressions rationnelles est supportée depuis la version 2.4.4.

    La directive AuthFormLoginSuccessLocation spécifie l'URL vers laquelle l'utilisateur doit être redirigé en cas de connexion réussie. Sa valeur est interprétée via l'interpréteur ap_expr avant d'être envoyée au client. L'effet de cette directive peut être annulé si l'on a défini un champ de formulaire contenant une autre URL à l'aide de la directive AuthFormLocation.

    Vous pouvez utiliser cette directive si vous possédez une URL de connexion personnalisée, et si vous n'avez pas intégré la page de destination dans le formulaire de connexion.

    top

    Directive AuthFormLogoutLocation

    Description:L'URL vers laquelle un utilisateur devra être redirigé après s'être déconnecté
    Syntaxe:AuthFormLogoutLocation uri
    Défaut:none
    Contexte:répertoire
    Statut:Base
    Module:mod_auth_form
    Compatibilité:Disponible depuis la version 2.3.0 du serveur HTTP Apache. L'interprétation des expressions rationnelles est supportée depuis la version 2.4.4.

    La directive AuthFormLogoutLocation spécifie l'URL de la page du serveur vers laquelle l'utilisateur devra être redirigé s'il se déconnecte. Sa valeur est interprétée via l'interpréteur ap_expr avant d'être envoyée au client.

    Lorsqu'un accès est tenté sur un URI traité par le gestionnaire form-logout-handler, la page spécifiée par cette directive sera présentée à l'utilisateur final. Par exemple :

    Exemple

    <Location "/logout">
        SetHandler form-logout-handler
        AuthFormLogoutLocation "http://example.com/loggedout.html"
        Session on
        #...
    </Location>

    Si un utilisateur tente d'accéder à l'URI /logout/, il sera déconnecté, et la page /loggedout.html lui sera présentée. Assurez-vous que la page loggedout.html n'est pas protégée par mot de passe, car dans le cas contraire, elle ne serait pas affichée.

    top

    Directive AuthFormMethod

    Description:Le nom du champ de formulaire contenant la méthode de la requête à effectuer en cas de connexion réussie
    Syntaxe:AuthFormMethod nom du champ
    Défaut:httpd_method
    Contexte:répertoire
    Statut:Base
    Module:mod_auth_form
    Compatibilité:Disponible depuis la version 2.3.0 du serveur HTTP Apache

    La directive AuthFormMethod spécifie le nom du champ HTML qui, s'il existe, contiendra le type MIME de la requête à effectuer en cas de connexion réussie.

    En ajoutant au formulaire les champs décrits dans AuthFormMethod, AuthFormMimetype et AuthFormBody, un site web sera en mesure de relancer une requête qui a été éventuellement interrompue par l'écran de connexion, ou par l'expiration d'un délai de session.

    top

    Directive AuthFormMimetype

    Description:Le nom du champ de formulaire contenant le type MIME du corps de la requête à effectuer en cas de connexion réussie
    Syntaxe:AuthFormMimetype nom du champ
    Défaut:httpd_mimetype
    Contexte:répertoire
    Statut:Base
    Module:mod_auth_form
    Compatibilité:Disponible depuis la version 2.3.0 du serveur HTTP Apache

    La directive AuthFormMimetype spécifie le nom du champ HTML qui, s'il existe, contiendra le type MIME de la requête à effectuer en cas de connexion réussie.

    En ajoutant au formulaire les champs décrits dans AuthFormMethod, AuthFormMimetype et AuthFormBody, un site web sera en mesure de relancer une requête qui a été éventuellement interrompue par l'écran de connexion, ou par l'expiration d'un délai de session.

    top

    Directive AuthFormPassword

    Description:Le nom du champ de formulaire qui contient le mot de passe de connexion
    Syntaxe:AuthFormPassword nom du champ
    Défaut:httpd_password
    Contexte:répertoire
    Statut:Base
    Module:mod_auth_form
    Compatibilité:Disponible depuis la version 2.3.0 du serveur HTTP Apache

    La directive AuthFormPassword permet de spécifier le nom du champ HTML qui, s'il existe, contiendra le mot de passe qui sera utilisé pour la connexion.

    top

    Directive AuthFormProvider

    Description:Définit le(s) fournisseur(s) d'authentification pour la zone concernée
    Syntaxe:AuthFormProvider nom fournisseur [nom fournisseur] ...
    Défaut:AuthFormProvider file
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_auth_form

    La directive AuthFormProvider permet de définir quel fournisseur sera utilisé pour authentifier les utilisateurs pour la zone concernée. Le fournisseur par défaut file est implémenté par le module mod_authn_file. Assurez-vous que le fournisseur choisi soit bien présent dans le serveur.

    Exemple

    <Location "/secure">
        AuthType form
        AuthName "private area"
        AuthFormProvider  dbm
        AuthDBMType        SDBM
        AuthDBMUserFile    "/www/etc/dbmpasswd"
        Require            valid-user
        #...
    </Location>

    Les différents fournisseurs sont implémentés par les modules mod_authn_dbm, mod_authn_file, mod_authn_dbd et mod_authnz_ldap.

    top

    Directive AuthFormSitePassphrase

    Description:Court-circuite l'authentification pour les sites à fort trafic
    Syntaxe:AuthFormSitePassphrase secret
    Défaut:none
    Contexte:répertoire
    Statut:Base
    Module:mod_auth_form
    Compatibilité:Disponible depuis la version 2.3.0 du serveur HTTP Apache

    La directive AuthFormSitePassphrase spécifie un mot de passe qui, s'il est présent dans la session utilisateur, indique à Apache httpd de court-circuiter l'authentification pour l'URL considérée. On peut l'utiliser dans le cas de sites web à fort trafic afin de réduire la charge induite sur l'infrastructure d'authentification.

    On peut insérer le mot de passe dans une session utilisateur en ajoutant cette directive à la configuration concernant le gestionnaire form-login-handler. Le gestionnaire form-login-handler, quant à lui, effectuera toujours les vérifications d'authentification, qu'un mot de passe soit spécifié ou non.

    Avertissement

    Si la session est présentée à l'utilisateur à l'aide du module mod_session_cookie, et si la session n'est pas protégée par le module mod_session_crypto, le mot de passe peut faire l'objet d'une attaque de type dictionnaire. Quelle que soit la configuration de la session, assurez-vous que cette directive n'est pas utilisée dans un espace d'URLs contenant des données privées, ou à partir desquelles des transactions sensibles pourraient être menées. En tout état de cause, vous devez être conscient des risques encourus avant de l'utiliser.

    top

    Directive AuthFormSize

    Description:La taille maximale en octets du formulaire dont seront extraites les informations de connexion
    Syntaxe:AuthFormSize taille
    Défaut:8192
    Contexte:répertoire
    Statut:Base
    Module:mod_auth_form
    Compatibilité:Disponible depuis la version 2.3.0 du serveur HTTP Apache

    La directive AuthFormSize spécifie la taille maximale du corps de la requête qui sera utilisée pour trouver le formulaire de connexion.

    Si une requête de connexion entrante possède une taille supérieure à cette valeur, elle sera rejetée avec le code de réponse HTTP HTTP_REQUEST_TOO_LARGE.

    Si vous avez ajouté au formulaire des champs décrits dans AuthFormMethod, AuthFormMimetype et AuthFormBody, il est recommandé de définir cette directive à une valeur similaire à celle de la directive KeptBodySize.

    top

    Directive AuthFormUsername

    Description:Le nom du champ de formulaire qui contient le nom de connexion
    Syntaxe:AuthFormUsername nom du champ
    Défaut:httpd_username
    Contexte:répertoire
    Statut:Base
    Module:mod_auth_form
    Compatibilité:Disponible depuis la version 2.3.3 du serveur HTTP Apache

    La directive AuthFormUsername permet de spécifier le nom du champ HTML qui, s'il existe, contiendra le nom d'utilisateur qui sera utilisé pour la connexion.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/worker.html.de0000644000000000000500000003705513412755316017027 0ustar rootsrc worker - Apache HTTP Server Version 2.4
    <-

    Apache-MPM worker

    Verfügbare Sprachen:  de  |  en  |  fr  |  ja  |  tr 

    Diese Übersetzung ist möglicherweise nicht mehr aktuell. Bitte prüfen Sie die englische Version auf die neuesten Änderungen.
    Beschreibung:Multi-Processing-Modul, das einen Hybrid-Webserver mit Multi-Thread und Multi-Prozess-Unterstützung implementiert
    Status:MPM
    Modulbezeichner:mpm_worker_module
    Quelltext-Datei:worker.c

    Zusammenfassung

    Dieses Multi-Processing-Modul (MPM) implementiert einen Hybrid-Server mit Multi-Thread und Multi-Prozess-Unterstützung. Durch die Verwendung von Threads für die Bedienung von Anfragen ist er in der Lage, eine große Anzahl von Anfragen mit weniger Systemressourcen als ein Prozess-basierter Server zu bedienen. Er behält jedoch viel von der Stabilität eines Prozess-basierten Servers bei, indem er mehrere Prozesse verfügbar hält, jeden mit etlichen Threads.

    Die wichtigsten Direktiven zur Steuerung des MPMs sind ThreadsPerChild, welche die Anzahl der Threads beeinflusst, die von jedem Kindprozess verwendet werden, und MaxClients, welche die maximale Gesamtzahl an Threads regelt, die gestartet werden können.

    top

    Arbeitsweise

    Ein einzelner Steuerprozess (der Elternprozess) ist für den Start der Kindprozesse verantwortlich. Jeder Kindprozess erstellt eine feste Anzahl von Server-Threads, wie durch die ThreadsPerChild-Direktive angegeben, sowie einen "Listener-Thread", der auf Verbindungen wartet und diese an einen Server-Thread zur Bearbeitung weiterreicht, sobald sie eintreffen.

    Der Apache versucht immer, einen Vorrat von freien oder unbeschäftigten Threads zu verwalten, die zur Bedienung hereinkommender Anfragen bereit stehen. Auf diese Weise brauchen Clients nicht auf die Erstellung eines neuen Threads oder Prozesses zu warten, bevor ihre Anfrage bedient werden kann. Die Anzahl der Prozesse, die anfangs gestartet wird, wird mit der Direktive StartServers festgelegt. Dann, während des Betriebes, berechnet der Apache die Gesamtzahl der unbeschäftigten Threads und forkt oder beendet Prozesse, um diese Anzahl innerhalb der durch MinSpareThreads und MaxSpareThreads angegebenen Grenzen zu halten. Da dieser Prozess sehr selbstregulierend ist, ist es nur selten notwendig, die Voreinstellung dieser Direktiven zu ändern. Die maximale Anzahl Clients, die gleichzeitig bedient werden kann (d.h. die maximale Gesamtzahl der Threads in allen Prozessen), wird mit der Direktive MaxClients festgelegt. Die maximale Anzahl der aktiven Kindprozesse ergibt sich aus MaxClients dividiert durch ThreadsPerChild.

    Zwei Direktiven legen harte Limits für die Anzahl der aktiven Kindprozesse fest und können nur geändert werden, indem der Server komplett gestoppt und dann wieder neu gestartet wird. ServerLimit stellt die obere Grenze für die Anzahl der aktiven Kindprozesse dar und muss größer oder gleich dem Quotienten aus MaxClients und ThreadsPerChild sein. ThreadLimit ist die obere Grenze für die Anzahl der Server-Threads und muss größer oder gleich ThreadsPerChild sein. Sofern für diese Direktiven keine Voreinstellungen verwendet werden, sollten sie vor allen anderen worker-Direktiven platziert werden.

    Neben den normalen aktiven Kindprozessen gibt es möglicherweise noch zusätzliche Kindprozesse, welche gerade beendet werden, wo allerdings zumindest noch ein Server-Thread eine existierende Verbindung bearbeitet. Obwohl die tatsächlich zu erwartende Anzahl deutlich kleiner ist, können bis zu MaxClients solcher Prozesse auftreten. Dieses Verhalten können Sie vermeiden, indem Sie die Terminierung einzelner Kindprozesse wie folgt abschalten:

    Eine typische Konfiguration der Prozess-Thread-Steuerung für das MPM worker könnte wie folgt aussehen:

    ServerLimit 16
    StartServers 2
    MaxClients 150
    MinSpareThreads 25
    MaxSpareThreads 75
    ThreadsPerChild 25

    Während der Elternprozess unter Unix normalerweise als root gestartet wird, um sich an Port 80 binden zu können, werden die Kindprozesse und Threads unter einem weniger privilegierten Benutzer gestartet. Die Direktiven User und Group werden dazu verwendet, die Privilegien der Apache-Kindprozesse festzulegen. Die Kindprozesse müssen in der Lage sein, alle Inhalte zu lesen, die sie ausliefern sollen, sollten darüber hinaus jedoch so wenig wie möglich Rechte besitzen. Zusätzlich, solange nicht suexec verwendet wird, legen diese Direktiven auch die Privilegien fest, die von CGI-Skripts geerbt werden.

    MaxRequestsPerChild bestimmt, wie häufig der Server Prozesse erneuert, indem er alte beendet und neue startet.

    Verfügbare Sprachen:  de  |  en  |  fr  |  ja  |  tr 

    top

    Kommentare

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_dbm.html.fr.utf80000644000000000000500000003313713412755316021217 0ustar rootsrc mod_authn_dbm - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authn_dbm

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Authentification utilisateur utilisant des fichiers DBM
    Statut:Extension
    Identificateur de Module:authn_dbm_module
    Fichier Source:mod_authn_dbm.c
    Compatibilité:Disponible depuis les versions 2.1 et supérieures d'Apache

    Sommaire

    Ce module permet aux frontaux comme mod_auth_digest et mod_auth_basic d'authentifier les utilisateurs en les recherchant dans des fichiers de mots de passe dbm. mod_authn_file fournit une fonctionnalité similaire.

    Lorsqu'on utilise mod_auth_basic ou mod_auth_digest, ce module est invoqué en affectant la valeur dbm à la directive AuthBasicProvider ou AuthDigestProvider.

    top

    Directive AuthDBMType

    Description:Définit le type de fichier de base de données utilisé pour stocker les mots de passe
    Syntaxe:AuthDBMType default|SDBM|GDBM|NDBM|DB
    Défaut:AuthDBMType default
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authn_dbm

    Cette directive permet de définir le type de fichier de base de données utilisé pour stocker les mots de passe. Le type de base de données par défaut est défini à la compilation. La liste des autres types de bases de données disponibles dépend aussi de la configuration de la compilation.

    Par exemple, pour activer le support de Berkeley DB (correspondant au type db), il faut ajouter l'option --with-berkeley-db à la ligne de commande configure de httpd pour générer le DSO approprié.

    Il est impératif que le programme que vous utilisez pour créer vos fichiers de mots de passe soit configuré pour utiliser le même type de base de données.

    top

    Directive AuthDBMUserFile

    Description:Définit le nom d'un fichier de base de données pour l'authentification contenant la liste des utilisateurs et de leurs mots de passe
    Syntaxe:AuthDBMUserFile chemin-fichier
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authn_dbm

    La directive AuthDBMUserFile permet de définir le nom d'un fichier de base de données pour l'authentification contenant la liste des utilisateurs et de leurs mots de passe. chemin-fichier doit être un chemin absolu vers le fichier de base de données.

    La clé du fichier de base de données est le nom de l'utilisateur. La valeur associée est le mot de passe chiffré, éventuellement suivi par un ':' et des données arbitraires. Ce ':' ainsi que les données arbitraires qui suivent seront ignorées par le serveur.

    Sécurité :

    Faites en sorte que le fichier spécifié par la directive AuthDBMUserFile soit stocké en dehors de l'arborescence des documents du serveur web ; en particulier, ne l'enregistrez pas dans le répertoire qu'il protège, faute de quoi, les clients auraient la possibilité de télécharger le fichier des mots de passe.

    Le format de mot de passe chiffré dépend du frontal d'authentification utilisé (par exemple mod_auth_basic ou mod_auth_digest). Voir la documentation sur les Formats de mots de passe pour plus de détails.

    Note importante concernant la compatibilité : l'implémentation de dbmopen dans les modules d'Apache lit la longueur de la chaîne correspondant aux données chiffrées dans la structure des données DBM, plutôt que de calculer cette longueur en se basant sur le caractère nul final. Certaines applications par contre, comme le serveur web Netscape, calculent cette longueur en se basant sur le caractère nul final ; par conséquent, si vous rencontrez des difficultés en échangeant des fichiers DBM entre plusieurs applications, le problème peut éventuellement s'expliquer par cette différence d'implémentation.

    Un script perl nommé dbmmanage est fourni avec Apache. On peut utiliser ce programme pour créer et mettre à jour les fichiers de mots de passe au format DBM que ce module utilise. Il existe également un autre outil pour gérer les fichiers DBM, inclus dans le programme htdbm.

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_isapi.html0000644000000000000500000000046213362070302017050 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_isapi.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_isapi.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_isapi.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/directives.html.en0000644000000000000500000015552713523273316017674 0ustar rootsrc Directive Index - Apache HTTP Server Version 2.4
    <-

    Directive Index

    Available Languages:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Each Apache directive available in the standard Apache distribution is listed here. They are described using a consistent format, and there is a dictionary of the terms used in their descriptions available.

    A Directive Quick-Reference is also available giving details about each directive in a summary form.

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 

    Available Languages:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_dbm.html.fr.utf80000644000000000000500000003340713412755316021233 0ustar rootsrc mod_authz_dbm - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authz_dbm

    Langues Disponibles:  en  |  fr  |  ko 

    Description:Autorisation basée sur les groupes à l'aide de fichiers DBM
    Statut:Extension
    Identificateur de Module:authz_dbm_module
    Fichier Source:mod_authz_dbm.c
    Compatibilité:Disponible depuis les versions 2.1 et supérieures d'Apache

    Sommaire

    Ce module permet d'autoriser ou d'interdire l'accès à certaines zones du site web aux utilisateurs authentifiés en fonction de leur appartenance à un groupe spécifié. Le module mod_authz_groupfile fournit une fonctionnalité similaire.

    top

    The Require Directives

    Les directives Require d'Apache permettent, au cours de la phase d'autorisation, de s'assurer qu'un utilisateur est bien autorisé à accéder à une ressource. mod_authz_dbm ajoute les types d'autorisation dbm-group et dbm-file-group.

    A partir de la version 2.4.8, les directives require DBM supportent les expressions.

    Require dbm-group

    Cette directive permet de spécifier à quel groupe un utilisateur doit appartenir pour obtenir l'autorisation d'accès.

    Require dbm-group admin

    Require dbm-file-group

    Lorsque cette directive est définie, l'utilisateur doit appartenir au groupe du fichier pour pouvoir y accéder.

    Require dbm-file-group
    top

    Exemple d'utilisation

    Notez que si vous utilisez mod_authz_dbm, le mot-clé pour les groupes d'authentification qui était auparavant group est maintenant dbm-group :

    <Directory "/foo/bar">
      AuthType Basic 
      AuthName "Secure Area"
      AuthBasicProvider dbm 
      AuthDBMUserFile "site/data/users"
      AuthDBMGroupFile "site/data/users" 
      Require dbm-group admin 
    </Directory>
    top

    Directive AuthDBMGroupFile

    Description:Définit le nom du fichier de base de données contenant la liste des groupes d'utilisateurs permettant de définir les autorisations des utilisateurs
    Syntaxe:AuthDBMGroupFile chemin-fichier
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authz_dbm

    La directive AuthDBMGroupFile sert à définir le nom d'un fichier DBM contenant la liste des groupes d'utilisateurs. Les utilisateurs peuvent dès lors se voir autoriser ou refuser leurs accès selon l'appartenance à tel ou tel groupe. chemin-fichier est le chemin absolu du fichier de groupes.

    La clé du fichier de groupes est le nom d'utilisateur. La valeur de chaque clé est la liste des groupes, séparés par des virgules, auxquels l'utilisateur appartient. Cette liste ne doit comporter ni espace, ni caractère ':'.

    Sécurité

    Le fichier spécifié par la directive AuthDBMGroupFile doit être situé en dehors de l'arborescence des documents du serveur web. Ne le placez surtout pas dans le répertoire qu'il protège, faute de quoi, les clients pourraient le télécharger, en l'abscence de protection supplémentaire.

    Utilisation combinée de fichiers DBM de groupes et de mots de passe : dans certains cas, il est plus simple de gérer une seule base de données contenant les groupes et mots de passe de chaque utilisateur. L'écriture de programmes de support en est ainsi simplifiée car ils n'ont plus qu'un seul fichier DBM à gérer et à verrouiller. Pour ce faire, on attribue le même nom de fichier DBM aux fichiers de groupes et de mots de passe :

    AuthDBMGroupFile "/www/userbase"
    AuthDBMUserFile "/www/userbase"

    La clé du fichier DBM unique est le nom d'utilisateur. La valeur associée à la clé contient :

    Mot de passe chiffré : Liste de groupes [ : (ignoré) ]

    La partie mot de passe contient comme d'habitude le mot de passe chiffré. Viennent ensuite le caractère ':' et la liste des groupes séparés par des virgules. Il est possible d'ajouter d'autres données en fin de ligne après un autre caractère ':', mais elles seront ignorées par le module d'autorisation. Il s'agit du format utilisé par www.telescope.org pour sa base de données combinée groupes et mots de passe.

    top

    Directive AuthzDBMType

    Description:Définit le type de fichier de base de données contenant la liste des groupes d'utilisateurs
    Syntaxe:AuthzDBMType default|SDBM|GDBM|NDBM|DB
    Défaut:AuthzDBMType default
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authz_dbm

    Définit le type de fichier de base de données contenant la liste des groupes d'utilisateurs. Le type de base de données par défaut est déterminé à la compilation. Les autres types de bases de données disponibles dépendent aussi de la configuration de la compilation.

    Quel que soit le programme que vous utilisez pour créer votre fichier de groupes, il est impératif que celui-ci soit configuré pour utiliser le même type de base de données.

    Langues Disponibles:  en  |  fr  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_headers.html0000644000000000000500000000062313362070302017355 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_headers.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_headers.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_headers.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_headers.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mpm_netware.html0000644000000000000500000000033213362070302017416 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mpm_netware.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mpm_netware.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_status.html.en0000644000000000000500000002767313412755316017717 0ustar rootsrc mod_status - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_status

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Provides information on server activity and performance
    Status:Base
    Module Identifier:status_module
    Source File:mod_status.c

    Summary

    The Status module allows a server administrator to find out how well their server is performing. A HTML page is presented that gives the current server statistics in an easily readable form. If required this page can be made to automatically refresh (given a compatible browser). Another page gives a simple machine-readable list of the current server state.

    The details given are:

    • The number of worker serving requests
    • The number of idle worker
    • The status of each worker, the number of requests that worker has performed and the total number of bytes served by the worker (*)
    • A total number of accesses and byte count served (*)
    • The time the server was started/restarted and the time it has been running for
    • Averages giving the number of requests per second, the number of bytes served per second and the average number of bytes per request (*)
    • The current percentage CPU used by each worker and in total by all workers combined (*)
    • The current hosts and requests being processed (*)

    The lines marked "(*)" are only available if ExtendedStatus is On. In version 2.3.6, loading mod_status will toggle ExtendedStatus On by default.

    top

    Enabling Status Support

    To enable status reports only for browsers from the example.com domain add this code to your httpd.conf configuration file

    <Location "/server-status">
        SetHandler server-status
        Require host example.com
    </Location>

    You can now access server statistics by using a Web browser to access the page http://your.server.name/server-status

    top

    Automatic Updates

    You can get the status page to update itself automatically if you have a browser that supports "refresh". Access the page http://your.server.name/server-status?refresh=N to refresh the page every N seconds.

    top

    Machine Readable Status File

    A machine-readable version of the status file is available by accessing the page http://your.server.name/server-status?auto. This is useful when automatically run, see the Perl program log_server_status, which you will find in the /support directory of your Apache HTTP Server installation.

    It should be noted that if mod_status is loaded into the server, its handler capability is available in all configuration files, including per-directory files (e.g., .htaccess). This may have security-related ramifications for your site.
    top

    Using server-status to troubleshoot

    The server-status page may be used as a starting place for troubleshooting a situation where your server is consuming all available resources (CPU or memory), and you wish to identify which requests or clients are causing the problem.

    First, ensure that you have ExtendedStatus set on, so that you can see the full request and client information for each child or thread.

    Now look in your process list (using top, or similar process viewing utility) to identify the specific processes that are the main culprits. Order the output of top by CPU usage, or memory usage, depending on what problem you're trying to address.

    Reload the server-status page, and look for those process ids, and you'll be able to see what request is being served by that process, for what client. Requests are transient, so you may need to try several times before you catch it in the act, so to speak.

    This process should give you some idea what client, or what type of requests, are primarily responsible for your load problems. Often you will identify a particular web application that is misbehaving, or a particular client that is attacking your site.

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_ext_filter.html.ko.euc-kr0000644000000000000500000004571013412755316021725 0ustar rootsrc mod_ext_filter - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_ext_filter

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:ÀÀ´ä ³»¿ëÀ» ¿ÜºÎ ÇÁ·Î±×·¥À¸·Î ó¸®ÇÑ ÈÄ Å¬¶óÀÌ¾ðÆ®·Î º¸³½´Ù
    »óÅÂ:Extension
    ¸ðµâ¸í:ext_filter_module
    ¼Ò½ºÆÄÀÏ:mod_ext_filter.c

    ¿ä¾à

    mod_ext_filter¸¦ »ç¿ëÇÏ¸é °£´ÜÇϰí Àͼ÷ÇÑ ¹æ¹ýÀ¸·Î ÇÊÅ͸¦ ¸¸µé ¼ö ÀÖ´Ù. Ç¥ÁØÀԷ¿¡¼­ Àаí Ç¥ÁØÃâ·Â¿¡ ¾²´Â ÇÁ·Î±×·¥(Áï, À¯´Ð½º½Ä ÇÊÅÍ ¸í·É¾î)À» ¾ÆÆÄÄ¡ ÇÊÅÍ·Î »ç¿ëÇÒ ¼ö ÀÖ´Ù. ÀÌ·± ÇÊÅÍ´Â ¾ÆÆÄÄ¡ API·Î ¾²¿©Áö°í ¾ÆÆÄÄ¡ ¼­¹ö ÇÁ·Î¼¼½º ¾È¿¡¼­ ½ÇÇàµÇ´Â ÇÊÅÍ¿¡ ºñÇØ ¸Å¿ì ´À¸®Áö¸¸, ´ÙÀ½°ú °°Àº ÀåÁ¡ÀÌ ÀÖ´Ù:

    • ÇÁ·Î±×·¡¹Ö ¸ðµ¨ÀÌ ¸Å¿ì °£´ÜÇÏ´Ù
    • ÇÁ·Î±×·¥ÀÌ Ç¥ÁØÀԷ¿¡¼­ Àаí Ç¥ÁØÃâ·Â¿¡ ¾µ ¼ö¸¸ ÀÖ´Ù¸é ¾î¶² ÇÁ·Î±×·¡¹Ö/½ºÅ©¸³Æ® ¾ð¾î¶óµµ »ç¿ëÇÒ ¼ö ÀÖ´Ù
    • ÀÌ¹Ì ÀÖ´Â ÇÁ·Î±×·¥À» ¼öÁ¤¾øÀÌ ¾ÆÆÄÄ¡ ÇÊÅÍ·Î »ç¿ëÇÒ ¼ö ÀÖ´Ù

    ½ÇÁ¦ »ç¿ëÇϱ⿡´Â ¼º´ÉÀÌ ¶³¾îÁöÁö¸¸, mod_ext_filter¸¦ »ç¿ëÇÏ¿© ÇÊÅ͸¦ »¡¸® ¸¸µé¾îº¼ ¼ö ÀÖ´Ù.

    top

    ¿¹Á¦

    ´Ù¸¥ typeÀÇ ÀÀ´äÀ» HTML·Î ¸¸µç´Ù

    # mod_ext_filter Áö½Ã¾î¸¦ °¡Áö°í
    # ¿ÜºÎ ÇÁ·Î±×·¥ /usr/bin/enscript¸¦ »ç¿ëÇÏ¿©
    # ¹®¼­ÆÄÀϰú text/c ÆÄÀÏÀ» HTML·Î ¸¸µé°í °á°úÀÇ
    # typeÀ» text/html·Î º¯°æÇÏ´Â ÇÊÅ͸¦ Á¤ÀÇÇÑ´Ù
    ExtFilterDefine c-to-html mode=output \
    intype=text/c outtype=text/html \
    cmd="/usr/bin/enscript --color -W html -Ec -o - -"

    <Directory "/export/home/trawick/apacheinst/htdocs/c">
    # Ãâ·Â¿¡ »õ·Î¿î ÇÊÅ͸¦ ½ÇÇàÇÏ´Â core Áö½Ã¾î
    SetOutputFilter c-to-html

    # .c ÆÄÀÏÀÇ typeÀ» text/c·Î ¸¸µå´Â mod_mime
    # Áö½Ã¾î
    AddType text/c .c

    # µð¹ö±× ¼öÁØÀ» ³ô¿©¼­ ¿äû¸¶´Ù ÇöÀç ¼³Á¤À»
    # ¾Ë·ÁÁÖ´Â ·Î±×¹®À» ±â·ÏÇÏ´Â mod_ext_filter
    # Áö½Ã¾î
    ExtFilterOptions DebugLevel=1
    </Directory>

    content ÀÎÄÚµù ÇÊÅÍ ±¸ÇöÇϱâ

    Note: ¾Æ·¡ gzip ¿¹Á¦´Â ´ÜÁö ¼³¸íÀ» ¿¹·Î µç °ÍÀÌ´Ù. ½ÇÁ¦ ¼­ºñ½º¿¡ »ç¿ëÇÏ·Á¸é mod_deflate¸¦ Âü°íÇÏ±æ ¹Ù¶õ´Ù.

    # ¿ÜºÎ ÇÊÅ͸¦ Á¤ÀÇÇÏ´Â mod_ext_filter Áö½Ã¾î
    ExtFilterDefine gzip mode=output cmd=/bin/gzip

    <Location /gzipped>
    # Ãâ·ÂÇÒ¶§ gzip ÇÊÅ͸¦ ½ÇÇàÇÏ´Â core Áö½Ã¾î
    SetOutputFilter gzip

    # "Content-Encoding: gzip" Çì´õ¸¦ Ãß°¡ÇÏ´Â
    # mod_header Áö½Ã¾î
    Header set Content-Encoding gzip
    </Location>

    ¼­¹ö¸¦ ´À¸®°Ô Çϱâ

    # catÀ¸·Î ¸ðµç ³»¿ëÀ» Åë°úÇÏ´Â ÇÊÅ͸¦ Á¤ÀÇÇÏ´Â
    # mod_ext_filter Áö½Ã¾î; catÀº ¾Æ¹«°Íµµ ¼öÁ¤ÇÏÁö
    # ¾Ê´Â´Ù; ´ÜÁö 󸮰æ·Î¸¦ ±æ°Ô ÇÏ¿© ÀÚ¿øÀ» ´õ ¼Ò¸ðÇÑ´Ù
    ExtFilterDefine slowdown mode=output cmd=/bin/cat \
    preservescontentlength

    <Location />
    # Ãâ·ÂÇÒ¶§ slowdown ÇÊÅ͸¦ ¿©·¯¹ø ½ÇÇàÇÏ´Â core Áö½Ã¾î
    #
    SetOutputFilter slowdown;slowdown;slowdown
    </Location>

    sed¸¦ »ç¿ëÇÏ¿© ÀÀ´ä¿¡¼­ ±ÛÀ» ´ëüÇϱâ

    # ÀÀ´ä¿¡¼­ ±ÛÀ» ´ëüÇÏ´Â ÇÊÅ͸¦ Á¤ÀÇÇÏ´Â
    # mod_ext_filter Áö½Ã¾î
    #
    ExtFilterDefine fixtext mode=output intype=text/html \
    cmd="/bin/sed s/verdana/arial/g"

    <Location />
    # Ãâ·ÂÇÒ¶§ fixtext ÇÊÅ͸¦ ½ÇÇàÇÏ´Â core Áö½Ã¾î
    SetOutputFilter fixtext
    </Location>

    ´Ù¸¥ ÇÊÅ͸¦ ÃßÀûÇϱâ

    # ¾ÐÃà ¹®Á¦°¡ Àִ ƯÁ¤ Ŭ¶óÀ̾ðÆ®(IP 192.168.1.31)¿¡
    # ´ëÇØ mod_deflate°¡ ÀÐ°í ¾²´Â ÀڷḦ ÃßÀûÇÑ´Ù.
    # ÀÌ ÇÊÅÍ´Â mod_deflate·Î º¸³»±â Àü ÀڷḦ ÃßÀûÇÑ´Ù.
    ExtFilterDefine tracebefore \
    cmd="/bin/tracefilter.pl /tmp/tracebefore" \
    EnableEnv=trace_this_client

    # ÀÌ ÇÊÅÍ´Â mod_deflate¿¡¼­ ³ª¿À´Â ÀڷḦ ÃßÀûÇÑ´Ù.
    # ftype ÆÄ¶ó¹ÌÅ͸¦ »ç¿ëÇÏÁö¾Ê´Â °æ¿ì, ±âº» ÇÊÅÍÇü
    # AP_FTYPE_RESOURCE´Â ÇÊÅÍ ¼ø¼­¸¦ mod_deflate *ÀÌÀü¿¡*
    # µÐ´Ù. AP_FTYPE_CONTENT_SET º¸´Ù Á¶±Ý ³ôÀº ¼ýÀÚ°ªÀ»
    # ÁöÁ¤Çϸé mod_deflate ÀÌÈÄ¿¡ ½ÇÇàÇÑ´Ù.
    ExtFilterDefine traceafter \
    cmd="/bin/tracefilter.pl /tmp/traceafter" \
    EnableEnv=trace_this_client ftype=21

    <Directory /usr/local/docs>
    SetEnvIf Remote_Addr 192.168.1.31 trace_this_client
    SetOutputFilter tracebefore;deflate;traceafter
    </Directory>

    ´ÙÀ½Àº ÀڷḦ ÃßÀûÇÏ´Â ÇÊÅÍÀÌ´Ù:

    #!/usr/local/bin/perl -w
    use strict;

    open(SAVE, ">$ARGV[0]")
    or die "can't open $ARGV[0]: $?";

    while (<STDIN>) {
    print SAVE $_;
    print $_;
    }

    close(SAVE);

    top

    ExtFilterDefine Áö½Ã¾î

    ¼³¸í:¿ÜºÎ ÇÊÅ͸¦ Á¤ÀÇÇÑ´Ù
    ¹®¹ý:ExtFilterDefine filtername parameters
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤
    »óÅÂ:Extension
    ¸ðµâ:mod_ext_filter

    ExtFilterDefine Áö½Ã¾î´Â ¿ÜºÎ ÇÊÅÍÀÇ ¼ºÁú°ú ½ÇÇàÇÒ ÇÁ·Î±×·¥, ¾Æ±Ô¸ÕÆ®¸¦ Á¤ÀÇÇÑ´Ù.

    filternameÀº Á¤ÀÇÇÒ ÇÊÅÍ À̸§À» ÁöÁ¤ÇÑ´Ù. ÀÌ À̸§À» SetOutputFilter Áö½Ã¾î¿¡¼­ »ç¿ëÇÑ´Ù. µî·ÏÇÑ ¸ðµç ÇÊÅ͵鰣¿¡ À̸§ÀÌ °ãÄ¡¸é ¾ÈµÈ´Ù. ÇöÀç ÇÊÅ͵î·Ï API´Â ¿À·ù¸¦ º¸°íÇÏÁö ¾Ê´Â´Ù. ±×·¡¼­ »ç¿ëÀÚ´Â À̸§ÀÌ °ãÄ¡´Â ¹®Á¦¸¦ ¾ËÁö ¸øÇÑ´Ù.

    ½ÇÇàÇÒ ¿ÜºÎ ¸í·É¾î¿Í ´Ù¸¥ ¼ºÁúÀ» Á¤ÀÇÇÏ´Â ³ª¸ÓÁö ¾Æ±Ô¸ÕÆ®´Â ¾î¶² ¼ø¼­·Î ³ª¿Íµµ °¡´ÉÇÏ´Ù. ´Ü, cmd= ÆÄ¶ó¹ÌÅÍ´Â ¹Ýµå½Ã ÇÊ¿äÇÏ´Ù. »ç¿ëÇÒ ¼ö ÀÖ´Â ÆÄ¶ó¹ÌÅÍ´Â ´ÙÀ½°ú °°´Ù:

    cmd=cmdline
    cmd= Ű¿öµå´Â ½ÇÇàÇÒ ¿ÜºÎ ¸í·É¾î¸¦ ÁöÁ¤ÇÑ´Ù. ÇÁ·Î±×·¥¸í µÚ¿¡ ¾Æ±Ô¸ÕÆ®°¡ ÀÖ´Ù¸é ¸í·ÉÇàÀ» ½Öµû¿ÈÇ¥·Î ¹­¾î¾ß ÇÑ´Ù (¿¹¸¦ µé¾î, cmd="/bin/mypgm arg1 arg2"). ½©À» °ÅÄ¡Áö¾Ê°í Á÷Á¢ ÇÁ·Î±×·¥À» ½ÇÇàÇϱ⶧¹®¿¡ ÀϹÝÀûÀÎ ½© µû¿ÈÇ¥´Â ÇÊ¿ä¾ø´Ù. ÇÁ·Î±×·¥ ¾Æ±Ô¸ÕÆ®µéÀº °ø¹éÀ¸·Î ±¸ºÐÇÑ´Ù. ÇÁ·Î±×·¥ ¾Æ±Ô¸ÕÆ®¿¡ °ø¹éÀÌ ÀÖ´Ù¸é °ø¹é ¾Õ¿¡ ¹é½½·¡½¬·Î »ç¿ëÇØ¾ß ÇÑ´Ù. ¹é½½·¡½¬°¡ ¾Æ±Ô¸ÕÆ®ÀÇ ÀϺζó¸é ¹é½½·¡½¬¸¦ µÎ¹ø »ç¿ëÇØ¾ß ÇÑ´Ù. ÇÁ·Î±×·¥À» ½ÇÇàÇÒ¶§ Ç¥ÁØ CGI ȯ°æº¯¼ö¿Í Ãß°¡·Î DOCUMENT_URI, DOCUMENT_PATH_INFO, QUERY_STRING_UNESCAPED º¯¼ö¸¦ ¼³Á¤ÇÑ´Ù.
    mode=mode
    ÀÀ´äÀ» ó¸®ÇÏ´Â ÇÊÅÍ´Â (±âº»°ªÀÎ) mode=outputÀ» »ç¿ëÇÑ´Ù. ¿äûÀ» ó¸®ÇÏ´Â ÇÊÅÍ´Â mode=inputÀ» »ç¿ëÇÑ´Ù. mode=inputÀº ¾ÆÆÄÄ¡ 2.1¿¡ Ãß°¡µÇ¾ú´Ù.
    intype=imt
    ÀÌ ÆÄ¶ó¹ÌÅÍ´Â ÇÊÅͷΠó¸®ÇÒ ¹®¼­ÀÇ ÀÎÅÍ³Ý media type(Áï, MIME type)À» ÁöÁ¤ÇÑ´Ù. ±âº»ÀûÀ¸·Î ¸ðµç ¹®¼­¸¦ ÇÊÅͷΠó¸®ÇÑ´Ù. intype=À» ÁöÁ¤ÇÏ¸é ´Ù¸¥ typeÀÇ ¹®¼­´Â ÇÊÅͷΠó¸®ÇÏÁö ¾Ê´Â´Ù.
    outtype=imt
    ÀÌ ÆÄ¶ó¹ÌÅÍ´Â ÇÊÅͷΠó¸®ÇÑ ¹®¼­ÀÇ ÀÎÅÍ³Ý media type(Áï, MIME type)À» ÁöÁ¤ÇÑ´Ù. ÇÊÅÍó¸® ÀÛ¾÷Áß¿¡ ÀÎÅÍ³Ý media typeÀ» º¯°æÇÒ¶§ À¯¿ëÇÏ´Ù. ±âº»ÀûÀ¸·Î, ÀÎÅÍ³Ý media typeÀº º¯ÇÏÁö ¾Ê´Â´Ù.
    PreservesContentLength
    PreservesContentLength Ű¿öµå´Â ÇÊÅͰ¡ content length¸¦ À¯ÁöÇϵµ·Ï ÇÑ´Ù. ´ëºÎºÐÀÇ ÇÊÅͰ¡ content length¸¦ º¯°æÇϹǷΠÀÌ Å°¿öµå´Â ±âº»°ªÀÌ ¾Æ´Ï´Ù. ÇÊÅͰ¡ ±æÀ̸¦ À¯ÁöÇÒ¶§¸¸ ÀÌ Å°¿öµå¸¦ »ç¿ëÇØ¾ß ÇÑ´Ù.
    ftype=filtertype
    ÀÌ ÆÄ¶ó¹ÌÅÍ´Â ÇÊÅÍ Á¾·ù¿¡ ´ëÇÑ ¼ýÀÚ°ªÀ» ÁöÁ¤ÇÑ´Ù. ´ëºÎºÐÀÇ °æ¿ì ±âº»°ªÀÎ AP_FTYPE_RESOURCE°¡ Àû´çÇÏ´Ù. ÇÊÅ͸¦ ½ÇÇàÇÏ´Â ¼ø¼­°¡ ÀÚ¿øÇÊÅÍ¿Í ´Þ¶ó¾ßÇÏ´Â °æ¿ì ÀÌ ÆÄ¶ó¹ÌÅͰ¡ ÇÊ¿äÇÏ´Ù. Àû´çÇÑ °ªÀ» ¾Ë·Á¸é util_filter.h¿¡ ÀÖ´Â AP_FTYPE_* Á¤ÀǸ¦ Âü°íÇ϶ó.
    disableenv=env
    ÀÌ ÆÄ¶ó¹ÌÅÍ·Î ¼³Á¤ÇÑ È¯°æº¯¼ö°¡ Á¤ÀǵǾú´Ù¸é ÇÊÅ͸¦ »ç¿ëÇÏÁö ¾Ê´Â´Ù.
    enableenv=env
    ÀÌ ÆÄ¶ó¹ÌÅÍ·Î ¼³Á¤ÇÑ È¯°æº¯¼ö°¡ Á¤ÀÇµÈ °æ¿ì ÇÊÅ͸¦ »ç¿ëÇÑ´Ù.
    top

    ExtFilterOptions Áö½Ã¾î

    ¼³¸í:mod_ext_filter ¿É¼ÇÀ» ¼³Á¤ÇÑ´Ù
    ¹®¹ý:ExtFilterOptions option [option] ...
    ±âº»°ª:ExtFilterOptions DebugLevel=0 NoLogStderr
    »ç¿ëÀå¼Ò:directory
    »óÅÂ:Extension
    ¸ðµâ:mod_ext_filter

    ExtFilterOptions Áö½Ã¾î´Â mod_ext_filterÀÇ Æ¯º°ÇÑ Ã³¸®¿É¼ÇÀ» ÁöÁ¤ÇÑ´Ù. OptionÀº ´ÙÀ½Áß Çϳª´Ù.

    DebugLevel=n
    DebugLevel Ű¿öµå´Â mod_ext_filter°¡ ±â·ÏÇÏ´Â µð¹ö±× ¹®±¸ ¼öÁØÀ» Á¤ÇÑ´Ù. ±âº»°ªÀº µð¹ö±×¹®À» ±â·ÏÇÏÁö ¾Ê´Â´Ù. ÀÌ´Â DebugLevel=0°ú °°´Ù. ³ôÀº ¼ýÀÚ¸¦ »ç¿ëÇÒ¼ö·Ï, ´õ ¸¹Àº µð¹ö±×¹®ÀÌ ±â·ÏµÇ°í ¼­¹ö ¼º´ÉÀÌ ¶³¾îÁø´Ù. ¼ýÀÚ°ªÀÇ ½ÇÁ¦ Àǹ̴ mod_ext_filter.c ¾ÕºÎºÐ¿¡ ÀÖ´Â DBGLVL_ »ó¼ö Á¤ÀÇ¿¡ ¼³¸íµÇÀÖ´Ù.

    ÁÖÀÇ: ÇÊÅÍ ·Î±×¸¦ ±â·ÏÇÏ·Á¸é core Áö½Ã¾î LogLevelÀ» »ç¿ëÇÏ¿© µð¹ö±×¹®À» ¾ÆÆÄÄ¡ ¿À·ù·Î±×¿¡ ±â·ÏÇØ¾ß ÇÑ´Ù.

    LogStderr | NoLogStderr
    LogStderr Ű¿öµå´Â ¿ÜºÎ ÇÊÅÍ ÇÁ·Î±×·¥ÀÌ Ç¥ÁØ¿À·ù·Î Ãâ·ÂÇÏ´Â ¹®±¸¸¦ ¾ÆÆÄÄ¡ ¿À·ù·Î±×¿¡ ±â·ÏÇÑ´Ù. NoLogStderr´Â ÀÌ ±â´ÉÀ» ÇÏÁö ¾Ê´Â´Ù.

    ¿¹Á¦

    ExtFilterOptions LogStderr DebugLevel=0

    À§ÀÇ ¼³Á¤À» »ç¿ëÇϸé ÇÊÅͰ¡ Ç¥ÁØ¿À·ù·Î Ãâ·ÂÇÏ´Â ¹®±¸¸¦ ¾ÆÆÄÄ¡ ¿À·ù·Î±×¿¡ ±â·ÏÇϰí, mod_ext_filter´Â ÀÚü µð¹ö±×¹®À» ±â·ÏÇÏÁö ¾Ê´Â´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_filter.html0000644000000000000500000000033013362070302017222 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_filter.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_filter.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_cgi.html0000644000000000000500000000060313362070302016502 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_cgi.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_cgi.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_cgi.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_cgi.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_reqtimeout.html0000644000000000000500000000034013362070302020134 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_reqtimeout.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_reqtimeout.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_dumpio.html.en0000644000000000000500000002317613412755316017663 0ustar rootsrc mod_dumpio - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_dumpio

    Available Languages:  en  |  fr  |  ja 

    Description:Dumps all I/O to error log as desired.
    Status:Extension
    Module Identifier:dumpio_module
    Source File:mod_dumpio.c

    Summary

    mod_dumpio allows for the logging of all input received by Apache and/or all output sent by Apache to be logged (dumped) to the error.log file.

    The data logging is done right after SSL decoding (for input) and right before SSL encoding (for output). As can be expected, this can produce extreme volumes of data, and should only be used when debugging problems.

    top

    Enabling dumpio Support

    To enable the module, it should be compiled and loaded in to your running Apache configuration. Logging can then be enabled or disabled separately for input and output via the below directives. Additionally, mod_dumpio needs to be configured to LogLevel trace7:

    LogLevel dumpio:trace7
    top

    DumpIOInput Directive

    Description:Dump all input data to the error log
    Syntax:DumpIOInput On|Off
    Default:DumpIOInput Off
    Context:server config
    Status:Extension
    Module:mod_dumpio
    Compatibility:DumpIOInput is only available in Apache 2.1.3 and later.

    Enable dumping of all input.

    Example

    DumpIOInput On
    top

    DumpIOOutput Directive

    Description:Dump all output data to the error log
    Syntax:DumpIOOutput On|Off
    Default:DumpIOOutput Off
    Context:server config
    Status:Extension
    Module:mod_dumpio
    Compatibility:DumpIOOutput is only available in Apache 2.1.3 and later.

    Enable dumping of all output.

    Example

    DumpIOOutput On

    Available Languages:  en  |  fr  |  ja 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_file_cache.html0000644000000000000500000000050113362070302017777 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_file_cache.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_file_cache.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_file_cache.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_authnz_ldap.html.en0000644000000000000500000024755713435243454020712 0ustar rootsrc mod_authnz_ldap - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authnz_ldap

    Available Languages:  en  |  fr 

    Description:Allows an LDAP directory to be used to store the database for HTTP Basic authentication.
    Status:Extension
    Module Identifier:authnz_ldap_module
    Source File:mod_authnz_ldap.c
    Compatibility:Available in version 2.1 and later

    Summary

    This module allows authentication front-ends such as mod_auth_basic to authenticate users through an ldap directory.

    mod_authnz_ldap supports the following features:

    • Known to support the OpenLDAP SDK (both 1.x and 2.x), Novell LDAP SDK and the iPlanet (Netscape) SDK.
    • Complex authorization policies can be implemented by representing the policy with LDAP filters.
    • Uses extensive caching of LDAP operations via mod_ldap.
    • Support for LDAP over SSL (requires the Netscape SDK) or TLS (requires the OpenLDAP 2.x SDK or Novell LDAP SDK).

    When using mod_auth_basic, this module is invoked via the AuthBasicProvider directive with the ldap value.

    top
    top

    General caveats

    This module caches authentication and authorization results based on the configuration of mod_ldap. Changes made to the backing LDAP server will not be immediately reflected on the HTTP Server, including but not limited to user lockouts/revocations, password changes, or changes to group memberships. Consult the directives in mod_ldap for details of the cache tunables.

    top

    Operation

    There are two phases in granting access to a user. The first phase is authentication, in which the mod_authnz_ldap authentication provider verifies that the user's credentials are valid. This is also called the search/bind phase. The second phase is authorization, in which mod_authnz_ldap determines if the authenticated user is allowed access to the resource in question. This is also known as the compare phase.

    mod_authnz_ldap registers both an authn_ldap authentication provider and an authz_ldap authorization handler. The authn_ldap authentication provider can be enabled through the AuthBasicProvider directive using the ldap value. The authz_ldap handler extends the Require directive's authorization types by adding ldap-user, ldap-dn and ldap-group values.

    The Authentication Phase

    During the authentication phase, mod_authnz_ldap searches for an entry in the directory that matches the username that the HTTP client passes. If a single unique match is found, then mod_authnz_ldap attempts to bind to the directory server using the DN of the entry plus the password provided by the HTTP client. Because it does a search, then a bind, it is often referred to as the search/bind phase. Here are the steps taken during the search/bind phase.

    1. Generate a search filter by combining the attribute and filter provided in the AuthLDAPURL directive with the username passed by the HTTP client.
    2. Search the directory using the generated filter. If the search does not return exactly one entry, deny or decline access.
    3. Fetch the distinguished name of the entry retrieved from the search and attempt to bind to the LDAP server using that DN and the password passed by the HTTP client. If the bind is unsuccessful, deny or decline access.

    The following directives are used during the search/bind phase

    AuthLDAPURL Specifies the LDAP server, the base DN, the attribute to use in the search, as well as the extra search filter to use.
    AuthLDAPBindDN An optional DN to bind with during the search phase.
    AuthLDAPBindPassword An optional password to bind with during the search phase.

    The Authorization Phase

    During the authorization phase, mod_authnz_ldap attempts to determine if the user is authorized to access the resource. Many of these checks require mod_authnz_ldap to do a compare operation on the LDAP server. This is why this phase is often referred to as the compare phase. mod_authnz_ldap accepts the following Require directives to determine if the credentials are acceptable:

    • Grant access if there is a Require ldap-user directive, and the username in the directive matches the username passed by the client.
    • Grant access if there is a Require ldap-dn directive, and the DN in the directive matches the DN fetched from the LDAP directory.
    • Grant access if there is a Require ldap-group directive, and the DN fetched from the LDAP directory (or the username passed by the client) occurs in the LDAP group or, potentially, in one of its sub-groups.
    • Grant access if there is a Require ldap-attribute directive, and the attribute fetched from the LDAP directory matches the given value.
    • Grant access if there is a Require ldap-filter directive, and the search filter successfully finds a single user object that matches the dn of the authenticated user.
    • otherwise, deny or decline access

    Other Require values may also be used which may require loading additional authorization modules.

    mod_authnz_ldap uses the following directives during the compare phase:

    AuthLDAPURL The attribute specified in the URL is used in compare operations for the Require ldap-user operation.
    AuthLDAPCompareDNOnServer Determines the behavior of the Require ldap-dn directive.
    AuthLDAPGroupAttribute Determines the attribute to use for comparisons in the Require ldap-group directive.
    AuthLDAPGroupAttributeIsDN Specifies whether to use the user DN or the username when doing comparisons for the Require ldap-group directive.
    AuthLDAPMaxSubGroupDepth Determines the maximum depth of sub-groups that will be evaluated during comparisons in the Require ldap-group directive.
    AuthLDAPSubGroupAttribute Determines the attribute to use when obtaining sub-group members of the current group during comparisons in the Require ldap-group directive.
    AuthLDAPSubGroupClass Specifies the LDAP objectClass values used to identify if queried directory objects really are group objects (as opposed to user objects) during the Require ldap-group directive's sub-group processing.
    top

    The Require Directives

    Apache's Require directives are used during the authorization phase to ensure that a user is allowed to access a resource. mod_authnz_ldap extends the authorization types with ldap-user, ldap-dn, ldap-group, ldap-attribute and ldap-filter. Other authorization types may also be used but may require that additional authorization modules be loaded.

    Since v2.4.8, expressions are supported within the LDAP require directives.

    Require ldap-user

    The Require ldap-user directive specifies what usernames can access the resource. Once mod_authnz_ldap has retrieved a unique DN from the directory, it does an LDAP compare operation using the username specified in the Require ldap-user to see if that username is part of the just-fetched LDAP entry. Multiple users can be granted access by putting multiple usernames on the line, separated with spaces. If a username has a space in it, then it must be surrounded with double quotes. Multiple users can also be granted access by using multiple Require ldap-user directives, with one user per line. For example, with a AuthLDAPURL of ldap://ldap/o=Example?cn (i.e., cn is used for searches), the following Require directives could be used to restrict access:

    Require ldap-user "Barbara Jenson"
    Require ldap-user "Fred User"
    Require ldap-user "Joe Manager"

    Because of the way that mod_authnz_ldap handles this directive, Barbara Jenson could sign on as Barbara Jenson, Babs Jenson or any other cn that she has in her LDAP entry. Only the single Require ldap-user line is needed to support all values of the attribute in the user's entry.

    If the uid attribute was used instead of the cn attribute in the URL above, the above three lines could be condensed to

    Require ldap-user bjenson fuser jmanager

    Require ldap-group

    This directive specifies an LDAP group whose members are allowed access. It takes the distinguished name of the LDAP group. Note: Do not surround the group name with quotes. For example, assume that the following entry existed in the LDAP directory:

    dn: cn=Administrators, o=Example
    objectClass: groupOfUniqueNames
    uniqueMember: cn=Barbara Jenson, o=Example
    uniqueMember: cn=Fred User, o=Example

    The following directive would grant access to both Fred and Barbara:

    Require ldap-group cn=Administrators, o=Example

    Members can also be found within sub-groups of a specified LDAP group if AuthLDAPMaxSubGroupDepth is set to a value greater than 0. For example, assume the following entries exist in the LDAP directory:

    dn: cn=Employees, o=Example
    objectClass: groupOfUniqueNames
    uniqueMember: cn=Managers, o=Example
    uniqueMember: cn=Administrators, o=Example
    uniqueMember: cn=Users, o=Example
    
    dn: cn=Managers, o=Example
    objectClass: groupOfUniqueNames
    uniqueMember: cn=Bob Ellis, o=Example
    uniqueMember: cn=Tom Jackson, o=Example
    
    dn: cn=Administrators, o=Example
    objectClass: groupOfUniqueNames
    uniqueMember: cn=Barbara Jenson, o=Example
    uniqueMember: cn=Fred User, o=Example
    
    dn: cn=Users, o=Example
    objectClass: groupOfUniqueNames
    uniqueMember: cn=Allan Jefferson, o=Example
    uniqueMember: cn=Paul Tilley, o=Example
    uniqueMember: cn=Temporary Employees, o=Example
    
    dn: cn=Temporary Employees, o=Example
    objectClass: groupOfUniqueNames
    uniqueMember: cn=Jim Swenson, o=Example
    uniqueMember: cn=Elliot Rhodes, o=Example

    The following directives would allow access for Bob Ellis, Tom Jackson, Barbara Jenson, Fred User, Allan Jefferson, and Paul Tilley but would not allow access for Jim Swenson, or Elliot Rhodes (since they are at a sub-group depth of 2):

    Require ldap-group cn=Employees, o=Example
    AuthLDAPMaxSubGroupDepth 1

    Behavior of this directive is modified by the AuthLDAPGroupAttribute, AuthLDAPGroupAttributeIsDN, AuthLDAPMaxSubGroupDepth, AuthLDAPSubGroupAttribute, and AuthLDAPSubGroupClass directives.

    Require ldap-dn

    The Require ldap-dn directive allows the administrator to grant access based on distinguished names. It specifies a DN that must match for access to be granted. If the distinguished name that was retrieved from the directory server matches the distinguished name in the Require ldap-dn, then authorization is granted. Note: do not surround the distinguished name with quotes.

    The following directive would grant access to a specific DN:

    Require ldap-dn cn=Barbara Jenson, o=Example

    Behavior of this directive is modified by the AuthLDAPCompareDNOnServer directive.

    Require ldap-attribute

    The Require ldap-attribute directive allows the administrator to grant access based on attributes of the authenticated user in the LDAP directory. If the attribute in the directory matches the value given in the configuration, access is granted.

    The following directive would grant access to anyone with the attribute employeeType = active

    Require ldap-attribute employeeType="active"

    Multiple attribute/value pairs can be specified on the same line separated by spaces or they can be specified in multiple Require ldap-attribute directives. The effect of listing multiple attribute/values pairs is an OR operation. Access will be granted if any of the listed attribute values match the value of the corresponding attribute in the user object. If the value of the attribute contains a space, only the value must be within double quotes.

    The following directive would grant access to anyone with the city attribute equal to "San Jose" or status equal to "Active"

    Require ldap-attribute city="San Jose" status="active"

    Require ldap-filter

    The Require ldap-filter directive allows the administrator to grant access based on a complex LDAP search filter. If the dn returned by the filter search matches the authenticated user dn, access is granted.

    The following directive would grant access to anyone having a cell phone and is in the marketing department

    Require ldap-filter "&(cell=*)(department=marketing)"

    The difference between the Require ldap-filter directive and the Require ldap-attribute directive is that ldap-filter performs a search operation on the LDAP directory using the specified search filter rather than a simple attribute comparison. If a simple attribute comparison is all that is required, the comparison operation performed by ldap-attribute will be faster than the search operation used by ldap-filter especially within a large directory.

    top

    Examples

    • Grant access to anyone who exists in the LDAP directory, using their UID for searches.
      AuthLDAPURL "ldap://ldap1.example.com:389/ou=People, o=Example?uid?sub?(objectClass=*)"
      Require valid-user
    • The next example is the same as above; but with the fields that have useful defaults omitted. Also, note the use of a redundant LDAP server.
      AuthLDAPURL "ldap://ldap1.example.com ldap2.example.com/ou=People, o=Example"
      Require valid-user
    • The next example is similar to the previous one, but it uses the common name instead of the UID. Note that this could be problematical if multiple people in the directory share the same cn, because a search on cn must return exactly one entry. That's why this approach is not recommended: it's a better idea to choose an attribute that is guaranteed unique in your directory, such as uid.
      AuthLDAPURL "ldap://ldap.example.com/ou=People, o=Example?cn"
      Require valid-user
    • Grant access to anybody in the Administrators group. The users must authenticate using their UID.
      AuthLDAPURL ldap://ldap.example.com/o=Example?uid
      Require ldap-group cn=Administrators, o=Example
    • Grant access to anybody in the group whose name matches the hostname of the virtual host. In this example an expression is used to build the filter.
      AuthLDAPURL ldap://ldap.example.com/o=Example?uid
      Require ldap-group cn=%{SERVER_NAME}, o=Example
    • The next example assumes that everyone at Example who carries an alphanumeric pager will have an LDAP attribute of qpagePagerID. The example will grant access only to people (authenticated via their UID) who have alphanumeric pagers:
      AuthLDAPURL ldap://ldap.example.com/o=Example?uid??(qpagePagerID=*)
      Require valid-user
    • The next example demonstrates the power of using filters to accomplish complicated administrative requirements. Without filters, it would have been necessary to create a new LDAP group and ensure that the group's members remain synchronized with the pager users. This becomes trivial with filters. The goal is to grant access to anyone who has a pager, plus grant access to Joe Manager, who doesn't have a pager, but does need to access the same resource:

      AuthLDAPURL ldap://ldap.example.com/o=Example?uid??(|(qpagePagerID=*)(uid=jmanager))
      Require valid-user

      This last may look confusing at first, so it helps to evaluate what the search filter will look like based on who connects, as shown below. If Fred User connects as fuser, the filter would look like

      (&(|(qpagePagerID=*)(uid=jmanager))(uid=fuser))

      The above search will only succeed if fuser has a pager. When Joe Manager connects as jmanager, the filter looks like

      (&(|(qpagePagerID=*)(uid=jmanager))(uid=jmanager))

      The above search will succeed whether jmanager has a pager or not.

    top

    Using TLS

    To use TLS, see the mod_ldap directives LDAPTrustedClientCert, LDAPTrustedGlobalCert and LDAPTrustedMode.

    An optional second parameter can be added to the AuthLDAPURL to override the default connection type set by LDAPTrustedMode. This will allow the connection established by an ldap:// Url to be upgraded to a secure connection on the same port.

    top

    Using SSL

    To use SSL, see the mod_ldap directives LDAPTrustedClientCert, LDAPTrustedGlobalCert and LDAPTrustedMode.

    To specify a secure LDAP server, use ldaps:// in the AuthLDAPURL directive, instead of ldap://.

    top

    Exposing Login Information

    when this module performs authentication, ldap attributes specified in the AuthLDAPURL directive are placed in environment variables with the prefix "AUTHENTICATE_".

    when this module performs authorization, ldap attributes specified in the AuthLDAPURL directive are placed in environment variables with the prefix "AUTHORIZE_".

    If the attribute field contains the username, common name and telephone number of a user, a CGI program will have access to this information without the need to make a second independent LDAP query to gather this additional information.

    This has the potential to dramatically simplify the coding and configuration required in some web applications.

    top

    Using Active Directory

    An Active Directory installation may support multiple domains at the same time. To distinguish users between domains, an identifier called a User Principle Name (UPN) can be added to a user's entry in the directory. This UPN usually takes the form of the user's account name, followed by the domain components of the particular domain, for example somebody@nz.example.com.

    You may wish to configure the mod_authnz_ldap module to authenticate users present in any of the domains making up the Active Directory forest. In this way both somebody@nz.example.com and someone@au.example.com can be authenticated using the same query at the same time.

    To make this practical, Active Directory supports the concept of a Global Catalog. This Global Catalog is a read only copy of selected attributes of all the Active Directory servers within the Active Directory forest. Querying the Global Catalog allows all the domains to be queried in a single query, without the query spanning servers over potentially slow links.

    If enabled, the Global Catalog is an independent directory server that runs on port 3268 (3269 for SSL). To search for a user, do a subtree search for the attribute userPrincipalName, with an empty search root, like so:

    AuthLDAPBindDN apache@example.com
    AuthLDAPBindPassword password
    AuthLDAPURL ldap://10.0.0.1:3268/?userPrincipalName?sub

    Users will need to enter their User Principal Name as a login, in the form somebody@nz.example.com.

    top

    Using Microsoft FrontPage with mod_authnz_ldap

    Normally, FrontPage uses FrontPage-web-specific user/group files (i.e., the mod_authn_file and mod_authz_groupfile modules) to handle all authentication. Unfortunately, it is not possible to just change to LDAP authentication by adding the proper directives, because it will break the Permissions forms in the FrontPage client, which attempt to modify the standard text-based authorization files.

    Once a FrontPage web has been created, adding LDAP authentication to it is a matter of adding the following directives to every .htaccess file that gets created in the web

    AuthLDAPURL       "the url"
    AuthGroupFile     "mygroupfile"
    Require group     "mygroupfile"

    How It Works

    FrontPage restricts access to a web by adding the Require valid-user directive to the .htaccess files. The Require valid-user directive will succeed for any user who is valid as far as LDAP is concerned. This means that anybody who has an entry in the LDAP directory is considered a valid user, whereas FrontPage considers only those people in the local user file to be valid. By substituting the ldap-group with group file authorization, Apache is allowed to consult the local user file (which is managed by FrontPage) - instead of LDAP - when handling authorizing the user.

    Once directives have been added as specified above, FrontPage users will be able to perform all management operations from the FrontPage client.

    Caveats

    • When choosing the LDAP URL, the attribute to use for authentication should be something that will also be valid for putting into a mod_authn_file user file. The user ID is ideal for this.
    • When adding users via FrontPage, FrontPage administrators should choose usernames that already exist in the LDAP directory (for obvious reasons). Also, the password that the administrator enters into the form is ignored, since Apache will actually be authenticating against the password in the LDAP database, and not against the password in the local user file. This could cause confusion for web administrators.
    • Apache must be compiled with mod_auth_basic, mod_authn_file and mod_authz_groupfile in order to use FrontPage support. This is because Apache will still use the mod_authz_groupfile group file for determine the extent of a user's access to the FrontPage web.
    • The directives must be put in the .htaccess files. Attempting to put them inside <Location> or <Directory> directives won't work. This is because mod_authnz_ldap has to be able to grab the AuthGroupFile directive that is found in FrontPage .htaccess files so that it knows where to look for the valid user list. If the mod_authnz_ldap directives aren't in the same .htaccess file as the FrontPage directives, then the hack won't work, because mod_authnz_ldap will never get a chance to process the .htaccess file, and won't be able to find the FrontPage-managed user file.
    top

    AuthLDAPAuthorizePrefix Directive

    Description:Specifies the prefix for environment variables set during authorization
    Syntax:AuthLDAPAuthorizePrefix prefix
    Default:AuthLDAPAuthorizePrefix AUTHORIZE_
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap
    Compatibility:Available in version 2.3.6 and later

    This directive allows you to override the prefix used for environment variables set during LDAP authorization. If AUTHENTICATE_ is specified, consumers of these environment variables see the same information whether LDAP has performed authentication, authorization, or both.

    Note

    No authorization variables are set when a user is authorized on the basis of Require valid-user.
    top

    AuthLDAPBindAuthoritative Directive

    Description:Determines if other authentication providers are used when a user can be mapped to a DN but the server cannot successfully bind with the user's credentials.
    Syntax:AuthLDAPBindAuthoritative off|on
    Default:AuthLDAPBindAuthoritative on
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap

    By default, subsequent authentication providers are only queried if a user cannot be mapped to a DN, but not if the user can be mapped to a DN and their password cannot be verified with an LDAP bind. If AuthLDAPBindAuthoritative is set to off, other configured authentication modules will have a chance to validate the user if the LDAP bind (with the current user's credentials) fails for any reason.

    This allows users present in both LDAP and AuthUserFile to authenticate when the LDAP server is available but the user's account is locked or password is otherwise unusable.

    See also

    top

    AuthLDAPBindDN Directive

    Description:Optional DN to use in binding to the LDAP server
    Syntax:AuthLDAPBindDN distinguished-name
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap

    An optional DN used to bind to the server when searching for entries. If not provided, mod_authnz_ldap will use an anonymous bind.

    top

    AuthLDAPBindPassword Directive

    Description:Password used in conjunction with the bind DN
    Syntax:AuthLDAPBindPassword password
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap
    Compatibility:exec: was added in 2.4.5.

    A bind password to use in conjunction with the bind DN. Note that the bind password is probably sensitive data, and should be properly protected. You should only use the AuthLDAPBindDN and AuthLDAPBindPassword if you absolutely need them to search the directory.

    If the value begins with exec: the resulting command will be executed and the first line returned to standard output by the program will be used as the password.

    #Password used as-is
    AuthLDAPBindPassword secret
    
    #Run /path/to/program to get my password
    AuthLDAPBindPassword exec:/path/to/program
    
    #Run /path/to/otherProgram and provide arguments
    AuthLDAPBindPassword "exec:/path/to/otherProgram argument1"
    top

    AuthLDAPCharsetConfig Directive

    Description:Language to charset conversion configuration file
    Syntax:AuthLDAPCharsetConfig file-path
    Context:server config
    Status:Extension
    Module:mod_authnz_ldap

    The AuthLDAPCharsetConfig directive sets the location of the language to charset conversion configuration file. File-path is relative to the ServerRoot. This file specifies the list of language extensions to character sets. Most administrators use the provided charset.conv file, which associates common language extensions to character sets.

    The file contains lines in the following format:

    Language-Extension charset [Language-String] ...

    The case of the extension does not matter. Blank lines, and lines beginning with a hash character (#) are ignored.

    top

    AuthLDAPCompareAsUser Directive

    Description:Use the authenticated user's credentials to perform authorization comparisons
    Syntax:AuthLDAPCompareAsUser on|off
    Default:AuthLDAPCompareAsUser off
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap
    Compatibility:Available in version 2.3.6 and later

    When set, and mod_authnz_ldap has authenticated the user, LDAP comparisons for authorization use the queried distinguished name (DN) and HTTP basic authentication password of the authenticated user instead of the servers configured credentials.

    The ldap-attribute, ldap-user, and ldap-group (single-level only) authorization checks use comparisons.

    This directive only has effect on the comparisons performed during nested group processing when AuthLDAPSearchAsUser is also enabled.

    This directive should only be used when your LDAP server doesn't accept anonymous comparisons and you cannot use a dedicated AuthLDAPBindDN.

    See also

    top

    AuthLDAPCompareDNOnServer Directive

    Description:Use the LDAP server to compare the DNs
    Syntax:AuthLDAPCompareDNOnServer on|off
    Default:AuthLDAPCompareDNOnServer on
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap

    When set, mod_authnz_ldap will use the LDAP server to compare the DNs. This is the only foolproof way to compare DNs. mod_authnz_ldap will search the directory for the DN specified with the Require dn directive, then, retrieve the DN and compare it with the DN retrieved from the user entry. If this directive is not set, mod_authnz_ldap simply does a string comparison. It is possible to get false negatives with this approach, but it is much faster. Note the mod_ldap cache can speed up DN comparison in most situations.

    top

    AuthLDAPDereferenceAliases Directive

    Description:When will the module de-reference aliases
    Syntax:AuthLDAPDereferenceAliases never|searching|finding|always
    Default:AuthLDAPDereferenceAliases always
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap

    This directive specifies when mod_authnz_ldap will de-reference aliases during LDAP operations. The default is always.

    top

    AuthLDAPGroupAttribute Directive

    Description:LDAP attributes used to identify the user members of groups.
    Syntax:AuthLDAPGroupAttribute attribute
    Default:AuthLDAPGroupAttribute member uniqueMember
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap

    This directive specifies which LDAP attributes are used to check for user members within groups. Multiple attributes can be used by specifying this directive multiple times. If not specified, then mod_authnz_ldap uses the member and uniqueMember attributes.

    top

    AuthLDAPGroupAttributeIsDN Directive

    Description:Use the DN of the client username when checking for group membership
    Syntax:AuthLDAPGroupAttributeIsDN on|off
    Default:AuthLDAPGroupAttributeIsDN on
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap

    When set on, this directive says to use the distinguished name of the client username when checking for group membership. Otherwise, the username will be used. For example, assume that the client sent the username bjenson, which corresponds to the LDAP DN cn=Babs Jenson, o=Example. If this directive is set, mod_authnz_ldap will check if the group has cn=Babs Jenson, o=Example as a member. If this directive is not set, then mod_authnz_ldap will check if the group has bjenson as a member.

    top

    AuthLDAPInitialBindAsUser Directive

    Description:Determines if the server does the initial DN lookup using the basic authentication users' own username, instead of anonymously or with hard-coded credentials for the server
    Syntax:AuthLDAPInitialBindAsUser off|on
    Default:AuthLDAPInitialBindAsUser off
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap
    Compatibility:Available in version 2.3.6 and later

    By default, the server either anonymously, or with a dedicated user and password, converts the basic authentication username into an LDAP distinguished name (DN). This directive forces the server to use the verbatim username and password provided by the incoming user to perform the initial DN search.

    If the verbatim username can't directly bind, but needs some cosmetic transformation, see AuthLDAPInitialBindPattern.

    This directive should only be used when your LDAP server doesn't accept anonymous searches and you cannot use a dedicated AuthLDAPBindDN.

    Not available with authorization-only

    This directive can only be used if this module authenticates the user, and has no effect when this module is used exclusively for authorization.

    See also

    top

    AuthLDAPInitialBindPattern Directive

    Description:Specifies the transformation of the basic authentication username to be used when binding to the LDAP server to perform a DN lookup
    Syntax:AuthLDAPInitialBindPattern regex substitution
    Default:AuthLDAPInitialBindPattern (.*) $1 (remote username used verbatim)
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap
    Compatibility:Available in version 2.3.6 and later

    If AuthLDAPInitialBindAsUser is set to ON, the basic authentication username will be transformed according to the regular expression and substitution arguments.

    The regular expression argument is compared against the current basic authentication username. The substitution argument may contain backreferences, but has no other variable interpolation.

    This directive should only be used when your LDAP server doesn't accept anonymous searches and you cannot use a dedicated AuthLDAPBindDN.

    AuthLDAPInitialBindPattern (.+) $1@example.com
    AuthLDAPInitialBindPattern (.+) cn=$1,dc=example,dc=com

    Not available with authorization-only

    This directive can only be used if this module authenticates the user, and has no effect when this module is used exclusively for authorization.

    debugging

    The substituted DN is recorded in the environment variable LDAP_BINDASUSER. If the regular expression does not match the input, the verbatim username is used.

    See also

    top

    AuthLDAPMaxSubGroupDepth Directive

    Description:Specifies the maximum sub-group nesting depth that will be evaluated before the user search is discontinued.
    Syntax:AuthLDAPMaxSubGroupDepth Number
    Default:AuthLDAPMaxSubGroupDepth 10
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap
    Compatibility:Available in version 2.3.0 and later

    When this directive is set to a non-zero value X combined with use of the Require ldap-group someGroupDN directive, the provided user credentials will be searched for as a member of the someGroupDN directory object or of any group member of the current group up to the maximum nesting level X specified by this directive.

    See the Require ldap-group section for a more detailed example.

    Nested groups performance

    When AuthLDAPSubGroupAttribute overlaps with AuthLDAPGroupAttribute (as it does by default and as required by common LDAP schemas), uncached searching for subgroups in large groups can be very slow. If you use large, non-nested groups, set AuthLDAPMaxSubGroupDepth to zero.

    top

    AuthLDAPRemoteUserAttribute Directive

    Description:Use the value of the attribute returned during the user query to set the REMOTE_USER environment variable
    Syntax:AuthLDAPRemoteUserAttribute uid
    Default:none
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap

    If this directive is set, the value of the REMOTE_USER environment variable will be set to the value of the attribute specified. Make sure that this attribute is included in the list of attributes in the AuthLDAPURL definition, otherwise this directive will have no effect. This directive, if present, takes precedence over AuthLDAPRemoteUserIsDN. This directive is useful should you want people to log into a website using an email address, but a backend application expects the username as a userid.

    top

    AuthLDAPRemoteUserIsDN Directive

    Description:Use the DN of the client username to set the REMOTE_USER environment variable
    Syntax:AuthLDAPRemoteUserIsDN on|off
    Default:AuthLDAPRemoteUserIsDN off
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap

    If this directive is set to on, the value of the REMOTE_USER environment variable will be set to the full distinguished name of the authenticated user, rather than just the username that was passed by the client. It is turned off by default.

    top

    AuthLDAPSearchAsUser Directive

    Description:Use the authenticated user's credentials to perform authorization searches
    Syntax:AuthLDAPSearchAsUser on|off
    Default:AuthLDAPSearchAsUser off
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap
    Compatibility:Available in version 2.3.6 and later

    When set, and mod_authnz_ldap has authenticated the user, LDAP searches for authorization use the queried distinguished name (DN) and HTTP basic authentication password of the authenticated user instead of the servers configured credentials.

    The ldap-filter and ldap-dn authorization checks use searches.

    This directive only has effect on the comparisons performed during nested group processing when AuthLDAPCompareAsUser is also enabled.

    This directive should only be used when your LDAP server doesn't accept anonymous searches and you cannot use a dedicated AuthLDAPBindDN.

    See also

    top

    AuthLDAPSubGroupAttribute Directive

    Description:Specifies the attribute labels, one value per directive line, used to distinguish the members of the current group that are groups.
    Syntax:AuthLDAPSubGroupAttribute attribute
    Default:AuthLDAPSubGroupAttribute member uniqueMember
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap
    Compatibility:Available in version 2.3.0 and later

    An LDAP group object may contain members that are users and members that are groups (called nested or sub groups). The AuthLDAPSubGroupAttribute directive identifies the labels of group members and the AuthLDAPGroupAttribute directive identifies the labels of the user members. Multiple attributes can be used by specifying this directive multiple times. If not specified, then mod_authnz_ldap uses the member and uniqueMember attributes.

    top

    AuthLDAPSubGroupClass Directive

    Description:Specifies which LDAP objectClass values identify directory objects that are groups during sub-group processing.
    Syntax:AuthLDAPSubGroupClass LdapObjectClass
    Default:AuthLDAPSubGroupClass groupOfNames groupOfUniqueNames
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap
    Compatibility:Available in version 2.3.0 and later

    An LDAP group object may contain members that are users and members that are groups (called nested or sub groups). The AuthLDAPSubGroupAttribute directive identifies the labels of members that may be sub-groups of the current group (as opposed to user members). The AuthLDAPSubGroupClass directive specifies the LDAP objectClass values used in verifying that these potential sub-groups are in fact group objects. Verified sub-groups can then be searched for more user or sub-group members. Multiple attributes can be used by specifying this directive multiple times. If not specified, then mod_authnz_ldap uses the groupOfNames and groupOfUniqueNames values.

    top

    AuthLDAPURL Directive

    Description:URL specifying the LDAP search parameters
    Syntax:AuthLDAPURL url [NONE|SSL|TLS|STARTTLS]
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authnz_ldap

    An RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is

    ldap://host:port/basedn?attribute?scope?filter

    If you want to specify more than one LDAP URL that Apache should try in turn, the syntax is:

    AuthLDAPURL "ldap://ldap1.example.com ldap2.example.com/dc=..."

    Caveat: If you specify multiple servers, you need to enclose the entire URL string in quotes; otherwise you will get an error: "AuthLDAPURL takes one argument, URL to define LDAP connection.." You can of course use search parameters on each of these.

    ldap
    For regular ldap, use the string ldap. For secure LDAP, use ldaps instead. Secure LDAP is only available if Apache was linked to an LDAP library with SSL support.
    host:port

    The name/port of the ldap server (defaults to localhost:389 for ldap, and localhost:636 for ldaps). To specify multiple, redundant LDAP servers, just list all servers, separated by spaces. mod_authnz_ldap will try connecting to each server in turn, until it makes a successful connection. If multiple ldap servers are specified, then entire LDAP URL must be encapsulated in double quotes.

    Once a connection has been made to a server, that connection remains active for the life of the httpd process, or until the LDAP server goes down.

    If the LDAP server goes down and breaks an existing connection, mod_authnz_ldap will attempt to re-connect, starting with the primary server, and trying each redundant server in turn. Note that this is different than a true round-robin search.

    basedn
    The DN of the branch of the directory where all searches should start from. At the very least, this must be the top of your directory tree, but could also specify a subtree in the directory.
    attribute
    The attribute to search for. Although RFC 2255 allows a comma-separated list of attributes, only the first attribute will be used, no matter how many are provided. If no attributes are provided, the default is to use uid. It's a good idea to choose an attribute that will be unique across all entries in the subtree you will be using. All attributes listed will be put into the environment with an AUTHENTICATE_ prefix for use by other modules.
    scope
    The scope of the search. Can be either one or sub. Note that a scope of base is also supported by RFC 2255, but is not supported by this module. If the scope is not provided, or if base scope is specified, the default is to use a scope of sub.
    filter
    A valid LDAP search filter. If not provided, defaults to (objectClass=*), which will search for all objects in the tree. Filters are limited to approximately 8000 characters (the definition of MAX_STRING_LEN in the Apache source code). This should be more than sufficient for any application. In 2.4.10 and later, the keyword none disables the use of a filter; this is required by some primitive LDAP servers.

    When doing searches, the attribute, filter and username passed by the HTTP client are combined to create a search filter that looks like (&(filter)(attribute=username)).

    For example, consider an URL of ldap://ldap.example.com/o=Example?cn?sub?(posixid=*). When a client attempts to connect using a username of Babs Jenson, the resulting search filter will be (&(posixid=*)(cn=Babs Jenson)).

    An optional parameter can be added to allow the LDAP Url to override the connection type. This parameter can be one of the following:

    NONE
    Establish an unsecure connection on the default LDAP port. This is the same as ldap:// on port 389.
    SSL
    Establish a secure connection on the default secure LDAP port. This is the same as ldaps://
    TLS | STARTTLS
    Establish an upgraded secure connection on the default LDAP port. This connection will be initiated on port 389 by default and then upgraded to a secure connection on the same port.

    See above for examples of AuthLDAPURL URLs.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/event.html0000644000000000000500000000031613362070302016223 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: event.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: event.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_env.html0000644000000000000500000000073213362070302016533 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_env.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_env.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_env.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_env.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: mod_env.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_auth_form.html.en0000644000000000000500000014456213412755316020355 0ustar rootsrc mod_auth_form - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_auth_form

    Available Languages:  en  |  fr 

    Description:Form authentication
    Status:Base
    Module Identifier:auth_form_module
    Source File:mod_auth_form.c
    Compatibility:Available in Apache 2.3 and later

    Summary

    Warning

    Form authentication depends on the mod_session modules, and these modules make use of HTTP cookies, and as such can fall victim to Cross Site Scripting attacks, or expose potentially private information to clients. Please ensure that the relevant risks have been taken into account before enabling the session functionality on your server.

    This module allows the use of an HTML login form to restrict access by looking up users in the given providers. HTML forms require significantly more configuration than the alternatives, however an HTML login form can provide a much friendlier experience for end users.

    HTTP basic authentication is provided by mod_auth_basic, and HTTP digest authentication is provided by mod_auth_digest. This module should be combined with at least one authentication module such as mod_authn_file and one authorization module such as mod_authz_user.

    Once the user has been successfully authenticated, the user's login details will be stored in a session provided by mod_session.

    top

    Basic Configuration

    To protect a particular URL with mod_auth_form, you need to decide where you will store your session, and you will need to decide what method you will use to authenticate. In this simple example, the login details will be stored in a session based on mod_session_cookie, and authentication will be attempted against a file using mod_authn_file. If authentication is unsuccessful, the user will be redirected to the form login page.

    Basic example

    <Location "/admin">
        AuthFormProvider file
        AuthUserFile "conf/passwd"
        AuthType form
        AuthName "/admin"
        AuthFormLoginRequiredLocation "http://example.com/login.html"
    
        Session On
        SessionCookieName session path=/
    
        Require valid-user
    </Location>

    The directive AuthType will enable the mod_auth_form authentication when set to the value form. The directives AuthFormProvider and AuthUserFile specify that usernames and passwords should be checked against the chosen file.

    The directives Session and SessionCookieName session stored within an HTTP cookie on the browser. For more information on the different options for configuring a session, read the documentation for mod_session.

    You can optionally add a SessionCryptoPassphrase to create an encrypted session cookie. This required the additional module mod_session_crypto be loaded.

    In the simple example above, a URL has been protected by mod_auth_form, but the user has yet to be given an opportunity to enter their username and password. Options for doing so include providing a dedicated standalone login page for this purpose, or for providing the login page inline.

    top

    Standalone Login

    The login form can be hosted as a standalone page, or can be provided inline on the same page.

    When configuring the login as a standalone page, unsuccessful authentication attempts should be redirected to a login form created by the website for this purpose, using the AuthFormLoginRequiredLocation directive. Typically this login page will contain an HTML form, asking the user to provide their usename and password.

    Example login form

    <form method="POST" action="/dologin.html">
      Username: <input type="text" name="httpd_username" value="" />
      Password: <input type="password" name="httpd_password" value="" />
      <input type="submit" name="login" value="Login" />
    </form>

    The part that does the actual login is handled by the form-login-handler. The action of the form should point at this handler, which is configured within Apache httpd as follows:

    Form login handler example

    <Location "/dologin.html">
        SetHandler form-login-handler
        AuthFormLoginRequiredLocation "http://example.com/login.html"
        AuthFormLoginSuccessLocation "http://example.com/admin/index.html"
        AuthFormProvider file
        AuthUserFile "conf/passwd"
        AuthType form
        AuthName /admin
        Session On
        SessionCookieName session path=/
    </Location>

    The URLs specified by the AuthFormLoginRequiredLocation directive will typically point to a page explaining to the user that their login attempt was unsuccessful, and they should try again. The AuthFormLoginSuccessLocation directive specifies the URL the user should be redirected to upon successful login.

    Alternatively, the URL to redirect the user to on success can be embedded within the login form, as in the example below. As a result, the same form-login-handler can be reused for different areas of a website.

    Example login form with location

    <form method="POST" action="/dologin.html">
      Username: <input type="text" name="httpd_username" value="" />
      Password: <input type="password" name="httpd_password" value="" />
      <input type="submit" name="login" value="Login" />
      <input type="hidden" name="httpd_location" value="http://example.com/success.html" />
    </form>
    top

    Inline Login

    Warning

    A risk exists that under certain circumstances, the login form configured using inline login may be submitted more than once, revealing login credentials to the application running underneath. The administrator must ensure that the underlying application is properly secured to prevent abuse. If in doubt, use the standalone login configuration.

    As an alternative to having a dedicated login page for a website, it is possible to configure mod_auth_form to authenticate users inline, without being redirected to another page. This allows the state of the current page to be preserved during the login attempt. This can be useful in a situation where a time limited session is in force, and the session times out in the middle of the user request. The user can be re-authenticated in place, and they can continue where they left off.

    If a non-authenticated user attempts to access a page protected by mod_auth_form that isn't configured with a AuthFormLoginRequiredLocation directive, a HTTP_UNAUTHORIZED status code is returned to the browser indicating to the user that they are not authorized to view the page.

    To configure inline authentication, the administrator overrides the error document returned by the HTTP_UNAUTHORIZED status code with a custom error document containing the login form, as follows:

    Basic inline example

    AuthFormProvider file
    ErrorDocument 401 "/login.shtml"
    AuthUserFile "conf/passwd"
    AuthType form
    AuthName realm
    AuthFormLoginRequiredLocation "http://example.com/login.html"
    Session On
    SessionCookieName session path=/

    The error document page should contain a login form with an empty action property, as per the example below. This has the effect of submitting the form to the original protected URL, without the page having to know what that URL is.

    Example inline login form

    <form method="POST" action="">
      Username: <input type="text" name="httpd_username" value="" />
      Password: <input type="password" name="httpd_password" value="" />
      <input type="submit" name="login" value="Login" />
    </form>

    When the end user has filled in their login details, the form will make an HTTP POST request to the original password protected URL. mod_auth_form will intercept this POST request, and if HTML fields are found present for the username and password, the user will be logged in, and the original password protected URL will be returned to the user as a GET request.

    top

    Inline Login with Body Preservation

    A limitation of the inline login technique described above is that should an HTML form POST have resulted in the request to authenticate or reauthenticate, the contents of the original form posted by the browser will be lost. Depending on the function of the website, this could present significant inconvenience for the end user.

    mod_auth_form addresses this by allowing the method and body of the original request to be embedded in the login form. If authentication is successful, the original method and body will be retried by Apache httpd, preserving the state of the original request.

    To enable body preservation, add three additional fields to the login form as per the example below.

    Example with body preservation

    <form method="POST" action="">
      Username: <input type="text" name="httpd_username" value="" />
      Password: <input type="password" name="httpd_password" value="" />
      <input type="submit" name="login" value="Login" />
      
    <input type="hidden" name="httpd_method" value="POST" /> <input type="hidden" name="httpd_mimetype" value="application/x-www-form-urlencoded" /> <input type="hidden" name="httpd_body" value="name1=value1&name2=value2" />
    </form>

    How the method, mimetype and body of the original request are embedded within the login form will depend on the platform and technology being used within the website.

    One option is to use the mod_include module along with the KeptBodySize directive, along with a suitable CGI script to embed the variables in the form.

    Another option is to render the login form using a CGI script or other dynamic technology.

    CGI example

            AuthFormProvider file
            ErrorDocument 401 "/cgi-bin/login.cgi"
            ...
    top

    Logging Out

    To enable a user to log out of a particular session, configure a page to be handled by the form-logout-handler. Any attempt to access this URL will cause the username and password to be removed from the current session, effectively logging the user out.

    By setting the AuthFormLogoutLocation directive, a URL can be specified that the browser will be redirected to on successful logout. This URL might explain to the user that they have been logged out, and give the user the option to log in again.

    Basic logout example

    SetHandler form-logout-handler
    AuthName realm
    AuthFormLogoutLocation "http://example.com/loggedout.html"
    Session On
    SessionCookieName session path=/

    Note that logging a user out does not delete the session; it merely removes the username and password from the session. If this results in an empty session, the net effect will be the removal of that session, but this is not guaranteed. If you want to guarantee the removal of a session, set the SessionMaxAge directive to a small value, like 1 (setting the directive to zero would mean no session age limit).

    Basic session expiry example

    SetHandler form-logout-handler
    AuthFormLogoutLocation "http://example.com/loggedout.html"
    Session On
    SessionMaxAge 1
    SessionCookieName session path=/
    top

    Usernames and Passwords

    Note that form submission involves URLEncoding the form data: in this case the username and password. You should therefore pick usernames and passwords that avoid characters that are URLencoded in form submission, or you may get unexpected results.

    top

    AuthFormAuthoritative Directive

    Description:Sets whether authorization and authentication are passed to lower level modules
    Syntax:AuthFormAuthoritative On|Off
    Default:AuthFormAuthoritative On
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_auth_form

    Normally, each authorization module listed in AuthFormProvider will attempt to verify the user, and if the user is not found in any provider, access will be denied. Setting the AuthFormAuthoritative directive explicitly to Off allows for both authentication and authorization to be passed on to other non-provider-based modules if there is no userID or rule matching the supplied userID. This should only be necessary when combining mod_auth_form with third-party modules that are not configured with the AuthFormProvider directive. When using such modules, the order of processing is determined in the modules' source code and is not configurable.

    top

    AuthFormBody Directive

    Description:The name of a form field carrying the body of the request to attempt on successful login
    Syntax:AuthFormBody fieldname
    Default:httpd_body
    Context:directory
    Status:Base
    Module:mod_auth_form
    Compatibility:Available in Apache HTTP Server 2.3.0 and later

    The AuthFormMethod directive specifies the name of an HTML field which, if present, will contain the method of the request to to submit should login be successful.

    By populating the form with fields described by AuthFormMethod, AuthFormMimetype and AuthFormBody, a website can retry a request that may have been interrupted by the login screen, or by a session timeout.

    top

    AuthFormDisableNoStore Directive

    Description:Disable the CacheControl no-store header on the login page
    Syntax:AuthFormDisableNoStore On|Off
    Default:AuthFormDisableNoStore Off
    Context:directory
    Status:Base
    Module:mod_auth_form
    Compatibility:Available in Apache HTTP Server 2.3.0 and later

    The AuthFormDisableNoStore flag disables the sending of a Cache-Control no-store header with the error 401 page returned when the user is not yet logged in. The purpose of the header is to make it difficult for an ecmascript application to attempt to resubmit the login form, and reveal the username and password to the backend application. Disable at your own risk.

    top

    AuthFormFakeBasicAuth Directive

    Description:Fake a Basic Authentication header
    Syntax:AuthFormFakeBasicAuth On|Off
    Default:AuthFormFakeBasicAuth Off
    Context:directory
    Status:Base
    Module:mod_auth_form
    Compatibility:Available in Apache HTTP Server 2.3.0 and later

    The AuthFormFakeBasicAuth flag determines whether a Basic Authentication header will be added to the request headers. This can be used to expose the username and password to an underlying application, without the underlying application having to be aware of how the login was achieved.

    top

    AuthFormLocation Directive

    Description:The name of a form field carrying a URL to redirect to on successful login
    Syntax:AuthFormLocation fieldname
    Default:httpd_location
    Context:directory
    Status:Base
    Module:mod_auth_form
    Compatibility:Available in Apache HTTP Server 2.3.0 and later

    The AuthFormLocation directive specifies the name of an HTML field which, if present, will contain a URL to redirect the browser to should login be successful.

    top

    AuthFormLoginRequiredLocation Directive

    Description:The URL of the page to be redirected to should login be required
    Syntax:AuthFormLoginRequiredLocation url
    Default:none
    Context:directory
    Status:Base
    Module:mod_auth_form
    Compatibility:Available in Apache HTTP Server 2.3.0 and later. The use of the expression parser has been added in 2.4.4.

    The AuthFormLoginRequiredLocation directive specifies the URL to redirect to should the user not be authorised to view a page. The value is parsed using the ap_expr parser before being sent to the client. By default, if a user is not authorised to view a page, the HTTP response code HTTP_UNAUTHORIZED will be returned with the page specified by the ErrorDocument directive. This directive overrides this default.

    Use this directive if you have a dedicated login page to redirect users to.

    top

    AuthFormLoginSuccessLocation Directive

    Description:The URL of the page to be redirected to should login be successful
    Syntax:AuthFormLoginSuccessLocation url
    Default:none
    Context:directory
    Status:Base
    Module:mod_auth_form
    Compatibility:Available in Apache HTTP Server 2.3.0 and later. The use of the expression parser has been added in 2.4.4.

    The AuthFormLoginSuccessLocation directive specifies the URL to redirect to should the user have logged in successfully. The value is parsed using the ap_expr parser before being sent to the client. This directive can be overridden if a form field has been defined containing another URL using the AuthFormLocation directive.

    Use this directive if you have a dedicated login URL, and you have not embedded the destination page in the login form.

    top

    AuthFormLogoutLocation Directive

    Description:The URL to redirect to after a user has logged out
    Syntax:AuthFormLogoutLocation uri
    Default:none
    Context:directory
    Status:Base
    Module:mod_auth_form
    Compatibility:Available in Apache HTTP Server 2.3.0 and later. The use of the expression parser has been added in 2.4.4.

    The AuthFormLogoutLocation directive specifies the URL of a page on the server to redirect to should the user attempt to log out. The value is parsed using the ap_expr parser before being sent to the client.

    When a URI is accessed that is served by the handler form-logout-handler, the page specified by this directive will be shown to the end user. For example:

    Example

    <Location "/logout">
        SetHandler form-logout-handler
        AuthFormLogoutLocation "http://example.com/loggedout.html"
        Session on
        #...
    </Location>

    An attempt to access the URI /logout/ will result in the user being logged out, and the page /loggedout.html will be displayed. Make sure that the page loggedout.html is not password protected, otherwise the page will not be displayed.

    top

    AuthFormMethod Directive

    Description:The name of a form field carrying the method of the request to attempt on successful login
    Syntax:AuthFormMethod fieldname
    Default:httpd_method
    Context:directory
    Status:Base
    Module:mod_auth_form
    Compatibility:Available in Apache HTTP Server 2.3.0 and later

    The AuthFormMethod directive specifies the name of an HTML field which, if present, will contain the method of the request to to submit should login be successful.

    By populating the form with fields described by AuthFormMethod, AuthFormMimetype and AuthFormBody, a website can retry a request that may have been interrupted by the login screen, or by a session timeout.

    top

    AuthFormMimetype Directive

    Description:The name of a form field carrying the mimetype of the body of the request to attempt on successful login
    Syntax:AuthFormMimetype fieldname
    Default:httpd_mimetype
    Context:directory
    Status:Base
    Module:mod_auth_form
    Compatibility:Available in Apache HTTP Server 2.3.0 and later

    The AuthFormMethod directive specifies the name of an HTML field which, if present, will contain the mimetype of the request to submit should login be successful.

    By populating the form with fields described by AuthFormMethod, AuthFormMimetype and AuthFormBody, a website can retry a request that may have been interrupted by the login screen, or by a session timeout.

    top

    AuthFormPassword Directive

    Description:The name of a form field carrying the login password
    Syntax:AuthFormPassword fieldname
    Default:httpd_password
    Context:directory
    Status:Base
    Module:mod_auth_form
    Compatibility:Available in Apache HTTP Server 2.3.0 and later

    The AuthFormPassword directive specifies the name of an HTML field which, if present, will contain the password to be used to log in.

    top

    AuthFormProvider Directive

    Description:Sets the authentication provider(s) for this location
    Syntax:AuthFormProvider provider-name [provider-name] ...
    Default:AuthFormProvider file
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_auth_form

    The AuthFormProvider directive sets which provider is used to authenticate the users for this location. The default file provider is implemented by the mod_authn_file module. Make sure that the chosen provider module is present in the server.

    Example

    <Location "/secure">
        AuthType form
        AuthName "private area"
        AuthFormProvider  dbm
        AuthDBMType        SDBM
        AuthDBMUserFile    "/www/etc/dbmpasswd"
        Require            valid-user
        #...
    </Location>

    Providers are implemented by mod_authn_dbm, mod_authn_file, mod_authn_dbd, mod_authnz_ldap and mod_authn_socache.

    top

    AuthFormSitePassphrase Directive

    Description:Bypass authentication checks for high traffic sites
    Syntax:AuthFormSitePassphrase secret
    Default:none
    Context:directory
    Status:Base
    Module:mod_auth_form
    Compatibility:Available in Apache HTTP Server 2.3.0 and later

    The AuthFormSitePassphrase directive specifies a passphrase which, if present in the user session, causes Apache httpd to bypass authentication checks for the given URL. It can be used on high traffic websites to reduce the load induced on authentication infrastructure.

    The passphrase can be inserted into a user session by adding this directive to the configuration for the form-login-handler. The form-login-handler itself will always run the authentication checks, regardless of whether a passphrase is specified or not.

    Warning

    If the session is exposed to the user through the use of mod_session_cookie, and the session is not protected with mod_session_crypto, the passphrase is open to potential exposure through a dictionary attack. Regardless of how the session is configured, ensure that this directive is not used within URL spaces where private user data could be exposed, or sensitive transactions can be conducted. Use at own risk.

    top

    AuthFormSize Directive

    Description:The largest size of the form in bytes that will be parsed for the login details
    Syntax:AuthFormSize size
    Default:8192
    Context:directory
    Status:Base
    Module:mod_auth_form
    Compatibility:Available in Apache HTTP Server 2.3.0 and later

    The AuthFormSize directive specifies the maximum size of the body of the request that will be parsed to find the login form.

    If a login request arrives that exceeds this size, the whole request will be aborted with the HTTP response code HTTP_REQUEST_TOO_LARGE.

    If you have populated the form with fields described by AuthFormMethod, AuthFormMimetype and AuthFormBody, you probably want to set this field to a similar size as the KeptBodySize directive.

    top

    AuthFormUsername Directive

    Description:The name of a form field carrying the login username
    Syntax:AuthFormUsername fieldname
    Default:httpd_username
    Context:directory
    Status:Base
    Module:mod_auth_form
    Compatibility:Available in Apache HTTP Server 2.3.0 and later

    The AuthFormUsername directive specifies the name of an HTML field which, if present, will contain the username to be used to log in.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/prefork.html.de0000644000000000000500000003761613412755316017171 0ustar rootsrc prefork - Apache HTTP Server Version 2.4
    <-

    Apache-MPM prefork

    Verfügbare Sprachen:  de  |  en  |  fr  |  ja  |  tr 

    Diese Übersetzung ist möglicherweise nicht mehr aktuell. Bitte prüfen Sie die englische Version auf die neuesten Änderungen.
    Beschreibung:Implementiert einen im Voraus forkenden Webserver ohne Thread-Unterstützung
    Status:MPM
    Modulbezeichner:mpm_prefork_module
    Quelltext-Datei:prefork.c

    Zusammenfassung

    Dieses Multi-Processing-Modul (MPM) implementiert einen im Voraus forkenden Webserver ohne Thread-Unterstützung, der Anfragen auf ähnliche Weise behandelt wie der Apache 1.3. Es ist für Angebote geeignet, die aus Kompatibilitätsgründen mit nicht-Thread-sicheren Bibliotheken Threading vermeiden müssen. Es ist außerdem das geeignetste MPM, um jede Anfrage isoliert zu bearbeiten, so dass Probleme mit einem einzelnen Prozess keinen anderen beeinflussen.

    Das MPM ist stark selbstregulierend, so dass es selten notwendig ist, seine Konfigurationseinstellungen zu justieren. Das Wichtigste ist, dass MaxClients gross genug ist, so viele gleichzeitige Anfragen zu bedienen, wie Sie erwarten, aber klein genug, um sicherzustellen, dass genug physischer Arbeitsspeicher für alle Prozesse vorhanden ist.

    top

    Arbeitsweise

    Ein einzelner Steuerprozess ist für den Start von Kindprozessen verantwortlich, die auf Verbindungen warten und diese bedienen, sobald sie eintreffen. Der Apache versucht immer, mehrere freie oder unbeschäftigte Serverprozesse vorzuhalten, die zur Bedienung eingehender Anfragen bereit stehen. Auf diese Weise müssen Clients nicht darauf warten, dass neue Kindprozesse geforkt werden, bevor ihre Anfrage bearbeitet werden kann.

    StartServers, MinSpareServers, MaxSpareServers und MaxClients regulieren, wie der Elternprozess Kindprozesse zur Bedienung von Anfragen erstellt. Im Allgemeinen ist der Apache sehr selbstregulierend, so dass die meisten Angebote die Voreinstellung dieser Direktiven nicht verändern müssen. Systeme, die mehr als 256 gleichzeitige Anfragen bedienen müssen, können MaxClients erhöhen, während Systeme mit begrenztem Arbeitsspeicher möglicherweise MaxClients heruntersetzen müssen, um den Server vor Flatterverhalten (Arbeitsspeicherinhalte auf Platte auslagern - und zurück) zu schützen. Weitere Informationen zur Feinabstimmung der Prozesserstellung sind in den Performance-Hinweisen zu finden.

    Währen der Elternprozess unter Unix normalerweise als root gestartet wird, um sich an Port 80 binden zu können, werden die Kindprozesse unter einem weniger privilegierten Benutzer gestartet. Die Direktiven User und Group werden dazu verwendet, die Privilegien der Apache-Kindprozesse festzulegen. Die Kindprozesse müssen in der Lage sein, alle Inhalte zu lesen, die sie ausliefern sollen, sollten darüber hinaus jedoch so wenig wie möglich Rechte besitzen.

    MaxRequestsPerChild bestimmt, wie häufig der Server Prozesse erneuert, indem er alte beendet und neue startet.

    top

    MaxSpareServers-Direktive

    Beschreibung:Maximale Anzahl der unbeschäftigten Kindprozesse des Servers
    Syntax:MaxSpareServers Anzahl
    Voreinstellung:MaxSpareServers 10
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:prefork

    Die Direktive MaxSpareServers bestimmt das gewünschte Maximum an unbeschäftigten Kindprozessen des Servers. Ein unbeschäftiger Prozess ist einer, der keine Anfrage bedient. Wenn mehr als MaxSpareServers Prozesse unbeschäftigt sind, wird der Elternprozess die überschüssigen Prozesse beenden.

    Eine Feineinstellung dieses Parameters sollte nur bei sehr beschäftigten Angeboten notwendig sein. Es ist nahezu immer eine schlechte Idee, den Parameter auf einen hohen Wert zu setzen. Wenn Sie versuchen, den Wert kleiner oder gleich MinSpareServers zu setzen, wird der Apache ihn automatisch auf MinSpareServers + 1 korrigieren.

    Siehe auch

    top

    MinSpareServers-Direktive

    Beschreibung:Minimale Anzahl der unbeschäftigten Kindprozesse des Servers
    Syntax:MinSpareServers Anzahl
    Voreinstellung:MinSpareServers 5
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:prefork

    Die Direktive MinSpareServers bestimmt das gewünschte Minimum der unbeschäftigten Kindprozesse des Servers. Ein unbeschäftigter Prozess ist einer, der keine Anfrage bedient. Wenn weniger als MinSpareServers Prozesse unbeschäftigt sind, dann erstellt der Elternprozess neue mit einer maximalen Rate von 1 pro Sekunde.

    Die Feineinstellung des Parameters sollte nur bei sehr beschäftigten Angeboten notwendig sein. Es ist nahezu immer eine schlechte ide, den Parameter auf einen hohen Wert zu setzen.

    Siehe auch

    Verfügbare Sprachen:  de  |  en  |  fr  |  ja  |  tr 

    top

    Kommentare

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_dbd.html.fr.utf80000644000000000000500000004774513412755316021234 0ustar rootsrc mod_authz_dbd - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authz_dbd

    Langues Disponibles:  en  |  fr 

    Description:Autorisation en groupe et reconnaissance d'identité avec base SQL
    Statut:Extension
    Identificateur de Module:authz_dbd_module
    Fichier Source:mod_authz_dbd.c
    Compatibilité:Disponible dans les versions 2.4 et supérieures d'Apache

    Sommaire

    Ce module fournit des fonctionnalités d'autorisation permettant d'accorder ou de refuser aux utilisateurs authentifiés l'accès à certaines zones du site web en fonction de leur appartenance à tel ou tel groupe. Les modules mod_authz_groupfile et mod_authz_dbm fournissent une fonctionnalité similaire, mais ici le module interroge une base de données SQL pour déterminer si un utilisateur appartient ou non à tel ou tel groupe.

    Ce module propose également des fonctionnalités de connexion utilisateur s'appuyant sur une base de données, ce qui peut se révéler particulièrement utile lorsque le module est utilisé conjointement avec mod_authn_dbd.

    Ce module s'appuie sur mod_dbd pour spécifier le pilote de la base de données sous-jacente et les paramètres de connexion, et gérer les connexions à la base de données.

    top

    Les directives Require

    Les directives Require d'Apache permettent, au cours de la phase d'autorisation, de s'assurer qu'un utilisateur est bien autorisé à accéder à une ressource. mod_authz_dbd ajoute les types d'autorisation dbd-group, dbd-login et dbd-logout.

    A partir de la version 2.4.8, les directives require DBD supportent les expressions.

    Require dbd-group

    Cette directive permet de spécifier à quel groupe un utilisateur doit appartenir pour obtenir l'autorisation d'accès.

    Require dbd-group team
    AuthzDBDQuery "SELECT group FROM authz WHERE user = %s"

    Require dbd-login

    Cette directive permet de spécifier une requête à exécuter pour indiquer que l'utilisateur s'est authentifié.

    Require dbd-login
    AuthzDBDQuery "UPDATE authn SET login = 'true' WHERE user = %s"

    Require dbd-logout

    Cette directive permet de spécifier une requête à exécuter pour indiquer que l'utilisateur s'est déconnecté.

    Require dbd-logout
    AuthzDBDQuery "UPDATE authn SET login = 'false' WHERE user = %s"
    top

    Reconnaissance d'identité s'appuyant sur une base de données

    Outre sa fonction d'autorisation standard consistant à vérifier l'appartenance à des groupes, ce module permet aussi de gérer des sessions utilisateur côté serveur grâce à sa fonctionnalité de connexion utilisateur en s'appuyant sur une base de données. En particulier, il peut mettre à jour le statut de session de l'utilisateur dans la base de données chaque fois que celui-ci visite certaines URLs (sous réserve bien entendu que l'utilisateur fournissent les informations de connexion nécessaires).

    Pour cela, il faut definir deux directives Require spéciales : Require dbd-login et Require dbd-logout. Pour les détails de leur utilisation, voir l'exemple de configuration ci-dessous.

    top

    Reconnaissance d'identité côté client

    Certains administrateurs peuvent vouloir implémenter une gestion de session côté client fonctionnant de concert avec les fonctionnalités de connexion/déconnexion des utilisateurs côté serveur offertes par ce module, en définissant ou en annulant par exemple un cookie HTTP ou un jeton similaire lorsqu'un utilisateur se connecte ou se déconnecte.

    Pour supporter une telle intégration, mod_authz_dbd exporte un programme à déclenchement optionnel (hook) qui sera lancé chaque fois que le statut d'un utilisateur sera mis à jour dans la base de données. D'autres modules de gestion de session pourront alors utiliser ce programme pour implémenter des fonctions permettant d'ouvrir et de fermer des sessions côté client.

    top

    Exemple de configuration

    # configuration de mod_dbd
    DBDriver pgsql
    DBDParams "dbname=apacheauth user=apache pass=xxxxxx"
    
    DBDMin  4
    DBDKeep 8
    DBDMax  20
    DBDExptime 300
    
    <Directory "/usr/www/mon.site/team-private/">
      # configuration de mod_authn_core et mod_auth_basic
      # pour mod_authn_dbd
      AuthType Basic
      AuthName Team
      AuthBasicProvider dbd
    
      # requête SQL de mod_authn_dbd pour authentifier un utilisateur qui se
      # connecte
      AuthDBDUserPWQuery \
        "SELECT password FROM authn WHERE user = %s AND login = 'true'"
    
      # configuration de mod_authz_core pour mod_authz_dbd
      Require dbd-group team
    
      # configuration de mod_authz_dbd
      AuthzDBDQuery "SELECT group FROM authz WHERE user = %s"
    
      # lorsqu'un utilisateur échoue dans sa tentative d'authentification ou
      # d'autorisation, on l'invite à se connecter ; cette page doit
      # contenir un lien vers /team-private/login.html
      ErrorDocument 401 "/login-info.html"
    
      <Files "login.html">
        # il n'est pas nécessaire que l'utilisateur soit déjà connecté !
        AuthDBDUserPWQuery "SELECT password FROM authn WHERE user = %s"
    
        # le processus de connexion dbd exécute une requête pour enregistrer
        # la connexion de l'utilisateur
        Require dbd-login
        AuthzDBDQuery "UPDATE authn SET login = 'true' WHERE user = %s"
    
        # redirige l'utilisateur vers la page d'origine (si elle existe)
        # après une connexion réussie
        AuthzDBDLoginToReferer On
      </Files>
    
      <Files "logout.html">
        # le processus de déconnexion dbd exécute une requête pour
        # enregistrer la déconnexion de l'utilisateur
        Require dbd-logout
        AuthzDBDQuery "UPDATE authn SET login = 'false' WHERE user = %s"
      </Files>
    </Directory>
    top

    Directive AuthzDBDLoginToReferer

    Description:Définit si le client doit être redirigé vers la page d'origine en cas de connexion ou de déconnexion réussie si un en-tête de requête Referer est présent
    Syntaxe:AuthzDBDLoginToReferer On|Off
    Défaut:AuthzDBDLoginToReferer Off
    Contexte:répertoire
    Statut:Extension
    Module:mod_authz_dbd

    Utilisée en conjonction avec Require dbd-login ou Require dbd-logout, cette directive permet de rediriger le client vers la page d'origine (l'URL contenue dans l'en-tête de requête HTTP Referer, s'il est présent). En l'absence d'en-tête Referer, la définition AuthzDBDLoginToReferer On sera ignorée.

    top

    Directive AuthzDBDQuery

    Description:Définit la requête SQL pour l'opération requise
    Syntaxe:AuthzDBDQuery requête
    Contexte:répertoire
    Statut:Extension
    Module:mod_authz_dbd

    La directive AuthzDBDQuery permet de spécifier une requête SQL à exécuter. Le but de cette requête dépend de la directive Require en cours de traitement.

    • Avec la directive Require dbd-group, elle spécifie une requête permettant de rechercher les groupes d'appartenance de l'utilisateur courant. Ceci correspond à la fonctionnalité standard d'autres modules d'autorisation comme mod_authz_groupfile et mod_authz_dbm. La première colonne de chaque enregistrement renvoyé par la requête doit contenir une chaîne de caractères correspondant à un nom de groupe. La requête peut renvoyer zéro, un ou plusieurs enregistrements.
      Require dbd-group
      AuthzDBDQuery "SELECT group FROM groups WHERE user = %s"
    • Avec la directive Require dbd-login ou Require dbd-logout, elle ne refusera jamais l'accès, mais au contraire exécutera une requête SQL permettant d'enregistrer la connexion ou la déconnexion de l'utilisateur. Ce dernier doit être déjà authentifié avec mod_authn_dbd.
      Require dbd-login
      AuthzDBDQuery "UPDATE authn SET login = 'true' WHERE user = %s"

    Dans tous les cas, l'identifiant utilisateur sera transmis comme paramètre sous la forme d'une simple chaîne lorsque la requête SQL sera exécutée. Il y sera fait référence dans la requête en utilisant le spécificateur de format %s.

    top

    Directive AuthzDBDRedirectQuery

    Description:Définit une requête pour rechercher une page vers laquelle rediriger l'utilisateur après une connexion réussie
    Syntaxe:AuthzDBDRedirectQuery requête
    Contexte:répertoire
    Statut:Extension
    Module:mod_authz_dbd

    Spécifie une requête SQL optionnelle à utiliser après une connexion (ou une déconnexion) réussie pour rediriger l'utilisateur vers une URL, qui peut être spécifique à l'utilisateur. L'identifiant utilisateur sera transmis comme paramètre sous la forme d'une simple chaîne lorsque la requête SQL sera exécutée. Il y sera fait référence dans la requête en utilisant le spécificateur de format %s.

    AuthzDBDRedirectQuery "SELECT userpage FROM userpages WHERE user = %s"

    La première colonne du premier enregistrement renvoyé par la requête doit contenir une chaîne de caractères correspondant à une URL vers laquelle rediriger le client. Les enregistrements suivants sont ignorés. Si aucun enregistrement n'est renvoyé, le client ne sera pas redirigé.

    Notez que AuthzDBDLoginToReferer l'emporte sur cette directive si les deux sont définies.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_http2.html.en0000644000000000000500000017230213520523022017406 0ustar rootsrc mod_http2 - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_http2

    Available Languages:  en  |  fr 

    Description:Support for the HTTP/2 transport layer
    Status:Extension
    Module Identifier:http2_module
    Source File:mod_http2.c
    Compatibility:Available in version 2.4.17 and later

    Summary

    This module provides HTTP/2 (RFC 7540) support for the Apache HTTP Server.

    This module relies on libnghttp2 to provide the core http/2 engine.

    You must enable HTTP/2 via Protocols in order to use the functionality described in this document. The HTTP/2 protocol does not require the use of encryption so two schemes are available: h2 (HTTP/2 over TLS) and h2c (HTTP/2 over TCP).

    Two useful configuration schemes are:

    HTTP/2 in a VirtualHost context (TLS only)

    Protocols h2 http/1.1

    Allows HTTP/2 negotiation (h2) via TLS ALPN in a secure <VirtualHost>. HTTP/2 preamble checking (Direct mode, see H2Direct) is disabled by default for h2.

    HTTP/2 in a Server context (TLS and cleartext)

    Protocols h2 h2c http/1.1

    Allows HTTP/2 negotiation (h2) via TLS ALPN for secure <VirtualHost>. Allows HTTP/2 cleartext negotiation (h2c) upgrading from an initial HTTP/1.1 connection or via HTTP/2 preamble checking (Direct mode, see H2Direct).

    Refer to the official HTTP/2 FAQ for any doubt about the protocol.

    top

    How it works

    HTTP/2 Dimensioning

    Enabling HTTP/2 on your Apache Server has impact on the resource consumption and if you have a busy site, you may need to consider carefully the implications.

    The first noticeable thing after enabling HTTP/2 is that your server processes will start additional threads. The reason for this is that HTTP/2 gives all requests that it receives to its own Worker threads for processing, collects the results and streams them out to the client.

    In the current implementation, these workers use a separate thread pool from the MPM workers that you might be familiar with. This is just how things are right now and not intended to be like this forever. (It might be forever for the 2.4.x release line, though.) So, HTTP/2 workers, or shorter H2Workers, will not show up in mod_status. They are also not counted against directives such as ThreadsPerChild. However they take ThreadsPerChild as default if you have not configured something else via H2MinWorkers and H2MaxWorkers.

    Another thing to watch out for is is memory consumption. Since HTTP/2 keeps more state on the server to manage all the open request, priorities for and dependencies between them, it will always need more memory than HTTP/1.1 processing. There are three directives which steer the memory footprint of a HTTP/2 connection: H2MaxSessionStreams, H2WindowSize and H2StreamMaxMemSize.

    H2MaxSessionStreams limits the number of parallel requests that a client can make on a HTTP/2 connection. It depends on your site how many you should allow. The default is 100 which is plenty and unless you run into memory problems, I would keep it this way. Most requests that browsers send are GETs without a body, so they use up only a little bit of memory until the actual processing starts.

    H2WindowSize controls how much the client is allowed to send as body of a request, before it waits for the server to encourage more. Or, the other way around, it is the amount of request body data the server needs to be able to buffer. This is per request.

    And last, but not least, H2StreamMaxMemSize controls how much response data shall be buffered. The request sits in a H2Worker thread and is producing data, the HTTP/2 connection tries to send this to the client. If the client does not read fast enough, the connection will buffer this amount of data and then suspend the H2Worker.

    Multiple Hosts and Misdirected Requests

    Many sites use the same TLS certificate for multiple virtual hosts. The certificate either has a wildcard name, such as '*.example.org' or carries several alternate names. Browsers using HTTP/2 will recognize that and reuse an already opened connection for such hosts.

    While this is great for performance, it comes at a price: such vhosts need more care in their configuration. The problem is that you will have multiple requests for multiple hosts on the same TLS connection. And that makes renegotiation impossible, in face the HTTP/2 standard forbids it.

    So, if you have several virtual hosts using the same certificate and want to use HTTP/2 for them, you need to make sure that all vhosts have exactly the same SSL configuration. You need the same protocol, ciphers and settings for client verification.

    If you mix things, Apache httpd will detect it and return a special response code, 421 Misdirected Request, to the client.

    Environment Variables

    This module can be configured to provide HTTP/2 related information as additional environment variables to the SSI and CGI namespace, as well as in custom log configurations (see %{VAR_NAME}e).

    Variable Name: Value Type: Description:
    HTTP2flagHTTP/2 is being used.
    H2PUSHflagHTTP/2 Server Push is enabled for this connection and also supported by the client.
    H2_PUSHflagalternate name for H2PUSH
    H2_PUSHEDstringempty or PUSHED for a request being pushed by the server.
    H2_PUSHED_ONnumberHTTP/2 stream number that triggered the push of this request.
    H2_STREAM_IDnumberHTTP/2 stream number of this request.
    H2_STREAM_TAGstringHTTP/2 process unique stream identifier, consisting of connection id and stream id separated by -.
    top

    H2CopyFiles Directive

    Description:Determine file handling in responses
    Syntax:H2CopyFiles on|off
    Default:H2CopyFiles off
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_http2
    Compatibility:Available in version 2.4.24 and later.

    This directive influences how file content is handled in responses. When off, which is the default, file handles are passed from the requestion processing down to the main connection, using the usual Apache setaside handling for managing the lifetime of the file.

    When set to on, file content is copied while the request is still being processed and the buffered data is passed on to the main connection. This is better if a third party module is injecting files with different lifetimes into the response.

    An example for such a module is mod_wsgi that may place Python file handles into the response. Those files get close down when Python thinks processing has finished. That may be well before mod_http2 is done with them.

    top

    H2Direct Directive

    Description:H2 Direct Protocol Switch
    Syntax:H2Direct on|off
    Default:H2Direct on for h2c, off for h2 protocol
    Context:server config, virtual host
    Status:Extension
    Module:mod_http2

    This directive toggles the usage of the HTTP/2 Direct Mode. This should be used inside a <VirtualHost> section to enable direct HTTP/2 communication for that virtual host.

    Direct communication means that if the first bytes received by the server on a connection match the HTTP/2 preamble, the HTTP/2 protocol is switched to immediately without further negotiation. This mode is defined in RFC 7540 for the cleartext (h2c) case. Its use on TLS connections not mandated by the standard.

    When a server/vhost does not have h2 or h2c enabled via Protocols, the connection is never inspected for a HTTP/2 preamble. H2Direct does not matter then. This is important for connections that use protocols where an initial read might hang indefinitely, such as NNTP.

    For clients that have out-of-band knowledge about a server supporting h2c, direct HTTP/2 saves the client from having to perform an HTTP/1.1 upgrade, resulting in better performance and avoiding the Upgrade restrictions on request bodies.

    This makes direct h2c attractive for server to server communication as well, when the connection can be trusted or is secured by other means.

    Example

    H2Direct on
    top

    H2EarlyHints Directive

    Description:Determine sending of 103 status codes
    Syntax:H2EarlyHints on|off
    Default:H2EarlyHints off
    Context:server config, virtual host
    Status:Extension
    Module:mod_http2
    Compatibility:Available in version 2.4.24 and later.

    This setting controls if HTTP status 103 interim responses are forwarded to the client or not. By default, this is currently not the case since a range of clients still have trouble with unexpected interim responses.

    When set to on, PUSH resources announced with H2PushResource will trigger an interim 103 response before the final response. The 103 response will carry Link headers that advise the preload of such resources.

    top

    H2MaxSessionStreams Directive

    Description:Maximum number of active streams per HTTP/2 session.
    Syntax:H2MaxSessionStreams n
    Default:H2MaxSessionStreams 100
    Context:server config, virtual host
    Status:Extension
    Module:mod_http2

    This directive sets the maximum number of active streams per HTTP/2 session (e.g. connection) that the server allows. A stream is active if it is not idle or closed according to RFC 7540.

    Example

    H2MaxSessionStreams 20
    top

    H2MaxWorkerIdleSeconds Directive

    Description:Maximum number of seconds h2 workers remain idle until shut down.
    Syntax:H2MaxWorkerIdleSeconds n
    Default:H2MaxWorkerIdleSeconds 600
    Context:server config
    Status:Extension
    Module:mod_http2

    This directive sets the maximum number of seconds a h2 worker may idle until it shuts itself down. This only happens while the number of h2 workers exceeds H2MinWorkers.

    Example

    H2MaxWorkerIdleSeconds 20
    top

    H2MaxWorkers Directive

    Description:Maximum number of worker threads to use per child process.
    Syntax:H2MaxWorkers n
    Context:server config
    Status:Extension
    Module:mod_http2

    This directive sets the maximum number of worker threads to spawn per child process for HTTP/2 processing. If this directive is not used, mod_http2 will chose a value suitable for the mpm module loaded.

    Example

    H2MaxWorkers 20
    top

    H2MinWorkers Directive

    Description:Minimal number of worker threads to use per child process.
    Syntax:H2MinWorkers n
    Context:server config
    Status:Extension
    Module:mod_http2

    This directive sets the minimum number of worker threads to spawn per child process for HTTP/2 processing. If this directive is not used, mod_http2 will chose a value suitable for the mpm module loaded.

    Example

    H2MinWorkers 10
    top

    H2ModernTLSOnly Directive

    Description:Require HTTP/2 connections to be "modern TLS" only
    Syntax:H2ModernTLSOnly on|off
    Default:H2ModernTLSOnly on
    Context:server config, virtual host
    Status:Extension
    Module:mod_http2
    Compatibility:Available in version 2.4.18 and later.

    This directive toggles the security checks on HTTP/2 connections in TLS mode (https:). This can be used server wide or for specific <VirtualHost>s.

    The security checks require that the TSL protocol is at least TLSv1.2 and that none of the ciphers listed in RFC 7540, Appendix A is used. These checks will be extended once new security requirements come into place.

    The name stems from the Security/Server Side TLS definitions at mozilla where "modern compatibility" is defined. Mozilla Firefox and other browsers require modern compatibility for HTTP/2 connections. As everything in OpSec, this is a moving target and can be expected to evolve in the future.

    One purpose of having these checks in mod_http2 is to enforce this security level for all connections, not only those from browsers. The other purpose is to prevent the negotiation of HTTP/2 as a protocol should the requirements not be met.

    Ultimately, the security of the TLS connection is determined by the server configuration directives for mod_ssl.

    Example

    H2ModernTLSOnly off
    top

    H2Padding Directive

    Description:Determine the range of padding bytes added to payload frames
    Syntax:H2Padding numbits
    Default:H2Padding 0
    Context:server config, virtual host
    Status:Extension
    Module:mod_http2
    Compatibility:Available in version 2.4.39 and later.

    With the default 0, no padding bytes are added to any payload frames, e.g. HEADERS, DATA and PUSH_PROMISE. This is the behaviour of previous versions. It means that under certain conditions, an observer of network traffic can see the length of those frames in the TLS stream.

    When configuring numbits of 1-8, a random number in range [0, 2^numbits[ are added to each frame. The random value is chosen independantly for each frame that the module sends back to the client.

    While more padding bytes give better message length obfuscation, they are also additional traffic. The optimal number therefore depends on the kind of web traffic the server carries.

    The default of 0, e.g. no padding, was chosen for maximum backward compatibility. There might be deployments where padding bytes are unwanted or do harm. The most likely cause would be a client that has a faults implementation.

    top

    H2Push Directive

    Description:H2 Server Push Switch
    Syntax:H2Push on|off
    Default:H2Push on
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_http2
    Compatibility:Available in version 2.4.18 and later.

    This directive toggles the usage of the HTTP/2 server push protocol feature.

    The HTTP/2 protocol allows the server to push other resources to a client when it asked for a particular one. This is helpful if those resources are connected in some way and the client can be expected to ask for it anyway. The pushing then saves the time it takes the client to ask for the resources itself. On the other hand, pushing resources the client never needs or already has is a waste of bandwidth.

    Server pushes are detected by inspecting the Link headers of responses (see https://tools.ietf.org/html/rfc5988 for the specification). When a link thus specified has the rel=preload attribute, it is treated as a resource to be pushed.

    Link headers in responses are either set by the application or can be configured via H2PushResource or using mod_headers as:

    mod_headers example

    <Location /index.html>
        Header add Link "</css/site.css>;rel=preload"
        Header add Link "</images/logo.jpg>;rel=preload"
    </Location>

    As the example shows, there can be several link headers added to a response, resulting in several pushes being triggered. There are no checks in the module to avoid pushing the same resource twice or more to one client. Use with care.

    HTTP/2 server pushes are enabled by default. On a server or virtual host, you may enable/disable this feature for any connection to the host. In addition, you may disable PUSH for a set of resources in a Directory/Location. This controls which resources may cause a PUSH, not which resources may be sent via PUSH.

    Example

    H2Push off

    Last but not least, pushes happen only when the client signals its willingness to accept those. Most browsers do, some, like Safari 9, do not. Also, pushes also only happen for resources from the same authority as the original response is for.

    top

    H2PushDiarySize Directive

    Description:H2 Server Push Diary Size
    Syntax:H2PushDiarySize n
    Default:H2PushDiarySize 256
    Context:server config, virtual host
    Status:Extension
    Module:mod_http2
    Compatibility:Available in version 2.4.19 and later.

    This directive toggles the maximum number of HTTP/2 server pushes that are remembered per HTTP/2 connection. This can be used inside the <VirtualHost> section to influence the number for all connections to that virtual host.

    The push diary records a digest (currently using a 64 bit number) of pushed resources (their URL) to avoid duplicate pushes on the same connection. These value are not persisted, so clients opening a new connection will experience known pushes again. There is ongoing work to enable a client to disclose a digest of the resources it already has, so the diary maybe initialized by the client on each connection setup.

    If the maximum size is reached, newer entries replace the oldest ones. A diary entry uses 8 bytes, letting a default diary with 256 entries consume around 2 KB of memory.

    A size of 0 will effectively disable the push diary.

    top

    H2PushPriority Directive

    Description:H2 Server Push Priority
    Syntax:H2PushPriority mime-type [after|before|interleaved] [weight]
    Default:H2PushPriority * After 16
    Context:server config, virtual host
    Status:Extension
    Module:mod_http2
    Compatibility:Available in version 2.4.18 and later. For having an effect, a nghttp2 library version 1.5.0 or newer is necessary.

    This directive defines the priority handling of pushed responses based on the content-type of the response. This is usually defined per server config, but may also appear in a virtual host.

    HTTP/2 server pushes are always related to a client request. Each such request/response pairs, or streams have a dependency and a weight, together defining the priority of a stream.

    When a stream depends on another, say X depends on Y, then Y gets all bandwidth before X gets any. Note that this does not mean that Y will block X. If Y has no data to send, all bandwidth allocated to Y can be used by X.

    When a stream has more than one dependant, say X1 and X2 both depend on Y, the weight determines the bandwidth allocation. If X1 and X2 have the same weight, they both get half of the available bandwidth. If the weight of X1 is twice as large as that for X2, X1 gets twice the bandwidth of X2.

    Ultimately, every stream depends on the root stream which gets all the bandwidth available, but never sends anything. So all its bandwidth is distributed by weight among its children. Which either have data to send or distribute the bandwidth to their own children. And so on. If none of the children have data to send, that bandwidth get distributed somewhere else according to the same rules.

    The purpose of this priority system is to always make use of available bandwidth while allowing precedence and weight to be given to specific streams. Since, normally, all streams are initiated by the client, it is also the one that sets these priorities.

    Only when such a stream results in a PUSH, gets the server to decide what the initial priority of such a pushed stream is. In the examples below, X is the client stream. It depends on Y and the server decides to PUSH streams P1 and P2 onto X.

    The default priority rule is:

    Default Priority Rule

    H2PushPriority * After 16

    which reads as 'Send a pushed stream of any content-type depending on the client stream with weight 16'. And so P1 and P2 will be send after X and, as they have equal weight, share bandwidth equally among themselves.

    Interleaved Priority Rule

    H2PushPriority text/css Interleaved 256

    which reads as 'Send any CSS resource on the same dependency and weight as the client stream'. If P1 has content-type 'text/css', it will depend on Y (as does X) and its effective weight will be calculated as P1ew = Xw * (P1w / 256). With P1w being 256, this will make the effective weight the same as the weight of X. If both X and P1 have data to send, bandwidth will be allocated to both equally.

    With Pw specified as 512, a pushed, interleaved stream would get double the weight of X. With 128 only half as much. Note that effective weights are always capped at 256.

    Before Priority Rule

    H2PushPriority application/json Before

    This says that any pushed stream of content type 'application/json' should be send out before X. This makes P1 dependent on Y and X dependent on P1. So, X will be stalled as long as P1 has data to send. The effective weight is inherited from the client stream. Specifying a weight is not allowed.

    Be aware that the effect of priority specifications is limited by the available server resources. If a server does not have workers available for pushed streams, the data for the stream may only ever arrive when other streams have been finished.

    Last, but not least, there are some specifics of the syntax to be used in this directive:

    1. '*' is the only special content-type that matches all others. 'image/*' will not work.
    2. The default dependency is 'After'.
    3. There are also default weights: for 'After' it is 16, 'interleaved' is 256.

    Shorter Priority Rules

    H2PushPriority application/json 32         # an After rule
    H2PushPriority image/jpeg before           # weight inherited
    H2PushPriority text/css   interleaved      # weight 256 default
    top

    H2PushResource Directive

    Description:Declares resources for early pushing to the client
    Syntax:H2PushResource [add] path [critical]
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_http2
    Compatibility:Available in version 2.4.24 and later.

    When added to a directory/location HTTP/2 PUSHes will be attempted for all paths added via this directive. This directive can be used several times for the same location.

    This directive pushes resources much earlier than adding Link headers via mod_headers. mod_http2 announces these resources in a 103 Early Hints interim response to the client. That means that clients not supporting PUSH will still get early preload hints.

    In contrast to setting Link response headers via mod_headers, this directive will only take effect on HTTP/2 connections.

    By adding critical to such a resource, the server will give processing it more preference and send its data, once available, before the data from the main request.

    top

    H2SerializeHeaders Directive

    Description:Serialize Request/Response Processing Switch
    Syntax:H2SerializeHeaders on|off
    Default:H2SerializeHeaders off
    Context:server config, virtual host
    Status:Extension
    Module:mod_http2

    This directive toggles if HTTP/2 requests shall be serialized in HTTP/1.1 format for processing by httpd core or if received binary data shall be passed into the request_recs directly.

    Serialization will lower performance, but gives more backward compatibility in case custom filters/hooks need it.

    Example

    H2SerializeHeaders on
    top

    H2StreamMaxMemSize Directive

    Description:Maximum amount of output data buffered per stream.
    Syntax:H2StreamMaxMemSize bytes
    Default:H2StreamMaxMemSize 65536
    Context:server config, virtual host
    Status:Extension
    Module:mod_http2

    This directive sets the maximum number of outgoing data bytes buffered in memory for an active streams. This memory is not allocated per stream as such. Allocations are counted against this limit when they are about to be done. Stream processing freezes when the limit has been reached and will only continue when buffered data has been sent out to the client.

    Example

    H2StreamMaxMemSize 128000
    top

    H2TLSCoolDownSecs Directive

    Description:Configure the number of seconds of idle time on TLS before shrinking writes
    Syntax:H2TLSCoolDownSecs seconds
    Default:H2TLSCoolDownSecs 1
    Context:server config, virtual host
    Status:Extension
    Module:mod_http2
    Compatibility:Available in version 2.4.18 and later.

    This directive sets the number of seconds of idle time on a TLS connection before the TLS write size falls back to small (~1300 bytes) length. This can be used server wide or for specific <VirtualHost>s.

    See H2TLSWarmUpSize for a description of TLS warmup. H2TLSCoolDownSecs reflects the fact that connections may deteriorate over time (and TCP flow adjusts) for idle connections as well. It is beneficial to overall performance to fall back to the pre-warmup phase after a number of seconds that no data has been sent.

    In deployments where connections can be considered reliable, this timer can be disabled by setting it to 0.

    The following example sets the seconds to zero, effectively disabling any cool down. Warmed up TLS connections stay on maximum record size.

    Example

    H2TLSCoolDownSecs 0
    top

    H2TLSWarmUpSize Directive

    Description:Configure the number of bytes on TLS connection before doing max writes
    Syntax:H2TLSWarmUpSize amount
    Default:H2TLSWarmUpSize 1048576
    Context:server config, virtual host
    Status:Extension
    Module:mod_http2
    Compatibility:Available in version 2.4.18 and later.

    This directive sets the number of bytes to be sent in small TLS records (~1300 bytes) until doing maximum sized writes (16k) on https: HTTP/2 connections. This can be used server wide or for specific <VirtualHost>s.

    Measurements by google performance labs show that best performance on TLS connections is reached, if initial record sizes stay below the MTU level, to allow a complete record to fit into an IP packet.

    While TCP adjust its flow-control and window sizes, longer TLS records can get stuck in queues or get lost and need retransmission. This is of course true for all packets. TLS however needs the whole record in order to decrypt it. Any missing bytes at the end will stall usage of the received ones.

    After a sufficient number of bytes have been send successfully, the TCP state of the connection is stable and maximum TLS record sizes (16 KB) can be used for optimal performance.

    In deployments where servers are reached locally or over reliable connections only, the value might be decreased with 0 disabling any warmup phase altogether.

    The following example sets the size to zero, effectively disabling any warmup phase.

    Example

    H2TLSWarmUpSize 0
    top

    H2Upgrade Directive

    Description:H2 Upgrade Protocol Switch
    Syntax:H2Upgrade on|off
    Default:H2Upgrade on for h2c, off for h2 protocol
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_http2

    This directive toggles the usage of the HTTP/1.1 Upgrade method for switching to HTTP/2. This should be used inside a <VirtualHost> section to enable Upgrades to HTTP/2 for that virtual host.

    This method of switching protocols is defined in HTTP/1.1 and uses the "Upgrade" header (thus the name) to announce willingness to use another protocol. This may happen on any request of a HTTP/1.1 connection.

    This method of protocol switching is enabled by default on cleartext (potential h2c) connections and disabled on TLS (potential h2), as mandated by RFC 7540.

    Please be aware that Upgrades are only accepted for requests that carry no body. POSTs and PUTs with content will never trigger an upgrade to HTTP/2. See H2Direct for an alternative to Upgrade.

    This mode only has an effect when h2 or h2c is enabled via the Protocols.

    Example

    H2Upgrade on
    top

    H2WindowSize Directive

    Description:Size of Stream Window for upstream data.
    Syntax:H2WindowSize bytes
    Default:H2WindowSize 65535
    Context:server config, virtual host
    Status:Extension
    Module:mod_http2

    This directive sets the size of the window that is used for flow control from client to server and limits the amount of data the server has to buffer. The client will stop sending on a stream once the limit has been reached until the server announces more available space (as it has processed some of the data).

    This limit affects only request bodies, not its meta data such as headers. Also, it has no effect on response bodies as the window size for those are managed by the clients.

    Example

    H2WindowSize 128000

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_socache_shmcb.html0000644000000000000500000000034613362070302020525 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_socache_shmcb.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_socache_shmcb.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_version.html.fr.utf80000644000000000000500000002572313412755316020745 0ustar rootsrc mod_version - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_version

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Configuration dépendant de la version
    Statut:Extension
    Identificateur de Module:version_module
    Fichier Source:mod_version.c

    Sommaire

    Ce module a été conçu pour être utilisé dans les suites de tests et les grands réseaux qui doivent prendre en compte différentes versions de httpd et différentes configurations. Il fournit un nouveau conteneur -- <IfVersion>, qui apporte une grande souplesse dans la vérification de version en permettant une comparaison numérique et l'utilisation d'expressions rationnelles.

    Exemples

    <IfVersion 2.4.2>
        # la version actuelle de httpd est exactement 2.4.2
    </IfVersion>
    
    <IfVersion >= 2.5>
        # utilise vraiment les nouvelles fonctionnalités :-)
    </IfVersion>

    Voir ci-dessous pour d'autres exemples.

    top

    Directive <IfVersion>

    Description:Contient des portions de configuration dépendantes de la version
    Syntaxe:<IfVersion [[!]opérateur] version> ... </IfVersion>
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_version

    La section <IfVersion> rassemble des directives de configuration qui ne sont exécutées que si la version de httpd satisfait aux critères spécifiés. Pour une comparaison normale (numérique), l'argument version doit être spécifié sous le format majeur[.mineur[.patch]], comme par exemple 2.1.0 ou 2.2. mineur et patch sont optionnels. Si ces numéros sont absents, il se voient affectée implicitement la valeur 0. Les opérateurs numériques suivants sont autorisés :

    opérateurdescription
    = ou == La version de httpd est égale à la valeur spécifiée
    > La version de httpd est supérieure à la valeur spécifiée
    >= La version de httpd est supérieure ou égale à la valeur spécifiée
    < La version de httpd est inférieure à la valeur spécifiée
    <= La version de httpd est inférieure ou égale à la valeur spécifiée

    Exemple

    <IfVersion >= 2.3>
        # la condition n'est satisfaite que pour les versions de httpd
    	# supérieures ou égales à 2.3
    </IfVersion>

    En plus d'une comparaison numérique, il est possible de comparer la version de httpd avec une expression rationnelle. Il existe deux méthodes pour spécifier cette dernière :

    opérateurdescription
    = ou == version est de la forme /regex/
    ~ version est de la forme regex

    Exemple

    <IfVersion = /^2.4.[01234]$/>
        # exemple de contournement pour les versions boguées
    </IfVersion>

    Pour inverser la condition, tous les opérateurs peuvent être préfixés par un point d'exclamation (!) :

    <IfVersion !~ ^2.4.[01234]$>
        # pas pour ces versions
    </IfVersion>

    Si opérateur est absent, sa valeur implicite est =.

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/worker.html.ja.utf80000644000000000000500000004120113412755316017702 0ustar rootsrc worker - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache MPM worker

    翻訳済ã¿è¨€èªž:  de  |  en  |  fr  |  ja  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:マルãƒã‚¹ãƒ¬ãƒƒãƒ‰ã¨ãƒžãƒ«ãƒãƒ—ロセスã®ãƒã‚¤ãƒ–リッド型 ウェブサーãƒã‚’実装ã—ãŸãƒžãƒ«ãƒãƒ—ロセッシングモジュール
    ステータス:MPM
    モジュール識別å­:mpm_worker_module
    ソースファイル:worker.c

    概è¦

    ã“ã®ãƒžãƒ«ãƒãƒ—ロセッシングモジュール (MPM) ã¯ã€ãƒžãƒ«ãƒã‚¹ãƒ¬ãƒƒãƒ‰ã¨ãƒžãƒ«ãƒãƒ—ロセスã®ãƒã‚¤ãƒ–リッド型サーãƒã‚’ 実装ã—ã¦ã„ã¾ã™ã€‚リクエストã®å¿œç­”ã«ã‚¹ãƒ¬ãƒƒãƒ‰ã‚’使ã†ã¨ã€ プロセスベースã®ã‚µãƒ¼ãƒã‚ˆã‚Šã‚‚å°‘ãªã„システム資æºã§ã€ 多ãã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¿œç­”ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ãれã«ã‚‚ã‹ã‹ã‚らãšã€å¤šãã®ã‚¹ãƒ¬ãƒƒãƒ‰ã‚’æŒã£ãŸè¤‡æ•°ã®ãƒ—ロセスを ç¶­æŒã™ã‚‹ã“ã¨ã§ã€ プロセスベースã®ã‚µãƒ¼ãƒã®æŒã¤å®‰å®šæ€§ã‚‚ä¿æŒã—ã¦ã„ã¾ã™ã€‚

    ã“ã® MPM を制御ã™ã‚‹ã®ã«ä½¿ã‚れる最もé‡è¦ãªãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ ThreadsPerChild 㨠MaxClients ã§ã™ã€‚ ThreadsPerChild 㯠å„å­ãƒ—ロセスã§ç”¨æ„ã•れるスレッド数を制御ã—ã¦ã€ MaxClients 㯠起動ã•れるスレッドã®ç·æ•°ã®æœ€å¤§å€¤ã‚’制é™ã—ã¾ã™ã€‚

    top

    動作方法

    一ã¤ã®åˆ¶å¾¡ç”¨ãƒ—ロセス (親) ãŒå­ãƒ—ロセスを起動ã—ã¾ã™ã€‚ å­ãƒ—ロセス㯠ThreadsPerChild ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã•れãŸä¸€å®šæ•°ã®ã‚µãƒ¼ãƒã‚¹ãƒ¬ãƒƒãƒ‰ã¨æŽ¥ç¶šã‚’ listen ã™ã‚‹ã‚¹ãƒ¬ãƒƒãƒ‰ã‚’一ã¤ä½œã‚Šã¾ã™ã€‚ Listener ã‚¹ãƒ¬ãƒƒãƒ‰ã¯æŽ¥ç¶šãŒæ¥ãŸã¨ãã«ã‚µãƒ¼ãƒãƒ—ãƒ­ã‚»ã‚¹ã«æ¸¡ã—ã¾ã™ã€‚

    Apache ã¯ã‚¹ãƒšã‚¢ã®ã€ã¤ã¾ã‚Šã‚¢ã‚¤ãƒ‰ãƒ«ãªã‚µãƒ¼ãƒã‚¹ãƒ¬ãƒƒãƒ‰ã® プールを常ã«ç¶­æŒã—ã¦ã„ã¦ã€ãれらã¯å…¥ã£ã¦ãるリクエスト㫠答ãˆã‚‰ã‚Œã‚‹ã‚ˆã†ã«å¾…機ã—ã¦ã„ã¾ã™ã€‚ ã“ã®ã‚ˆã†ã«ã—ã¦ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®å¿œç­”ãŒå¾—られるよã†ã«ãªã‚‹ãŸã‚ã« æ–°ã—ã„スレッドやプロセスãŒç”Ÿæˆã•れるã®ã‚’ å¾…ãŸãªãã¦ã‚‚よã„よã†ã«ãªã£ã¦ã„ã¾ã™ã€‚ èµ·å‹•åˆæœŸæ™‚ã®ãƒ—ãƒ­ã‚»ã‚¹ç·æ•°ã¯ã€ StartServers ディレクティブã§è¨­å®šã•れã¾ã™ã€‚稼åƒä¸­ã«ã€ Apache ã¯å…¨ãƒ—ロセスã®ã‚¢ã‚¤ãƒ‰ãƒ«ã‚¹ãƒ¬ãƒƒãƒ‰ã®åˆè¨ˆæ•°ã‚’見ç©ã‚‚ã£ã¦ã€ MinSpareThreads 㨠MaxSpareThreads ã§æŒ‡å®šã•れãŸç¯„囲ã®ä¸­ã«ã“ã®æ•°ãŒåŽã¾ã‚‹ã‚ˆã†ã« fork ã—ãŸã‚Š kill ã—ãŸã‚Šã—ã¾ã™ã€‚ã“ã®æ“作ã¯éžå¸¸ã«è‡ªå¾‹çš„ãªã®ã§ã€ ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–をデフォルト値ã‹ã‚‰å¤‰æ›´ã™ã‚‹å¿…è¦ã¯ ã‚ã£ãŸã«ãªã„ã§ã—ょã†ã€‚ åŒæ™‚ã«å¿œç­”ã™ã‚‹ã“ã¨ã®ã§ãã‚‹ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆæ•°ã®æœ€å¤§æ•° (ã¤ã¾ã‚Šå…¨ãƒ—ロセス中ã®ç·ã‚¹ãƒ¬ãƒƒãƒ‰æ•°ã®æœ€å¤§å€¤) 㯠MaxClients ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æ±ºå®šã•れã¾ã™ã€‚ 活動中ã®å­ãƒ—ãƒ­ã‚»ã‚¹æ•°ã®æœ€å¤§å€¤ã¯ MaxClients ã‚’ ThreadsPerChild ã§å‰²ã£ãŸ ã‚‚ã®ã«ãªã‚Šã¾ã™ã€‚

    活動中ã®å­ãƒ—ãƒ­ã‚»ã‚¹ã®æ•°ã¨å­ãƒ—ロセス中ã®ã‚µãƒ¼ãƒã‚¹ãƒ¬ãƒƒãƒ‰ã®æ•°ã®è¶Šãˆã‚‰ã‚Œãªã„ 上é™ã‚’設定ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒäºŒã¤ã‚りã¾ã™ã€‚ã“れらã¯ã‚µãƒ¼ãƒã‚’ 完全ã«åœæ­¢ã—ã¦ã€å†èµ·å‹•ã™ã‚‹ã“ã¨ã§ã—ã‹å¤‰æ›´ã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“。 ServerLimit ã¯æ´»å‹•中ã®å­ãƒ—ロセスã®è¶Šãˆã‚‰ã‚Œãªã„上é™ã‚’設定ã—〠MaxClients ディレクティブ ã®å€¤ã‚’ ThreadsPerChild ã®å€¤ã§å‰²ã£ãŸå€¤ä»¥ä¸Šã§ã‚ã‚‹ å¿…è¦ãŒã‚りã¾ã™ã€‚ThreadLimit 㯠サーãƒã‚¹ãƒ¬ãƒƒãƒ‰ã®è¶Šãˆã‚‰ã‚Œãªã„上é™ã§ã€ThreadsPerChild ディレクティブ㮠値以上ã§ã‚ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚

    活動中ã®å­ãƒ—ロセス群ã«åŠ ãˆã¦ã€å°‘ãªãã¨ã‚‚一ã¤ã®ã‚µãƒ¼ãƒã‚¹ãƒ¬ãƒƒãƒ‰ãŒ 既存ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®æŽ¥ç¶šã‚’扱ã£ã¦ã„る終了ã—よã†ã¨ã—ã¦ã„ã‚‹ å­ãƒ—ロセスãŒã‚ã‚‹å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚終了中ã®ãƒ—ロセス㯠MaxClients ã§æŒ‡å®šã•ã‚ŒãŸæ•°ã¾ã§ 存在ã§ãã¾ã™ãŒã€å®Ÿéš›ã«æœŸå¾…ã•れる数ã¯ãšã£ã¨å°‘ãªããªã‚Šã¾ã™ã€‚ã“㮠振舞ã„ã¯å„å­ãƒ—ロセスを終了ã•ã›ãªã„よã†ã«ã™ã‚‹ã“ã¨ã§å›žé¿ã§ãã¾ã™ã€‚ ã“れã¯ä»¥ä¸‹ã®æ§˜ã«ã—ã¦å®Ÿç¾ã§ãã¾ã™ã€‚

    worker MPM ã®å…¸åž‹çš„ãªãƒ—ロセス・スレッド制御㮠設定ã§ã¯ã€æ¬¡ã®ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚

    ServerLimit 16
    StartServers 2
    MaxClients 150
    MinSpareThreads 25
    MaxSpareThreads 75
    ThreadsPerChild 25

    通常 Unix ã§ã¯è¦ªãƒ—ロセス㯠80 番ãƒãƒ¼ãƒˆã«ãƒã‚¤ãƒ³ãƒ‰ã™ã‚‹ãŸã‚ã« root ã§èµ·å‹•ã•れã¾ã™ãŒã€å­ãƒ—ロセスやスレッド㯠もã£ã¨ä½Žã„権é™ã®ãƒ¦ãƒ¼ã‚¶ã§ Apache ã«ã‚ˆã£ã¦èµ·å‹•ã•れã¾ã™ã€‚ User 㨠Group ディレクティブ㯠Apache ã®å­ãƒ—ãƒ­ã‚»ã‚¹ã®æ¨©é™ã‚’設定ã™ã‚‹ã®ã«ç”¨ã„られã¾ã™ã€‚ å­ãƒ—ロセスã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚‹ã‚³ãƒ³ãƒ†ãƒ³ãƒ„å…¨ã¦ã‚’読ã‚ãªã„ã¨ã„ã‘ã¾ã›ã‚“ãŒã€ å¯èƒ½ãªé™ã‚Šå¿…è¦æœ€å°é™ã®æ¨©é™ã®ã¿ã‚’æŒã£ã¦ã„るよã†ã«ã™ã‚‹ã¹ãã§ã™ã€‚ ã•らã«ã€suexec ãŒä½¿ç”¨ã•れã¦ã„ãªã„é™ã‚Šã€ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠CGI スクリプトã§ç¶™æ‰¿ã•れる権é™ã‚‚設定ã—ã¾ã™ã€‚

    MaxRequestsPerChild ã¯ã€å¤ã„ãƒ—ãƒ­ã‚»ã‚¹ã‚’åœæ­¢ã—ã¦æ–°ã—ã„プロセスを起動ã™ã‚‹ã“ã¨ã«ã‚ˆã£ã¦ã€ ã©ã®ç¨‹åº¦ã®é »åº¦ã§ã‚µãƒ¼ãƒãŒãƒ—ロセスをリサイクルã™ã‚‹ã‹ã‚’制御ã—ã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  de  |  en  |  fr  |  ja  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_balancer.html.ja.utf80000644000000000000500000004551013412755316022247 0ustar rootsrc mod_proxy_balancer - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_proxy_balancer

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:è² è·åˆ†æ•£ã®ãŸã‚ã® mod_proxy æ‹¡å¼µ
    ステータス:Extension
    モジュール識別å­:proxy_balancer_module
    ソースファイル:mod_proxy_balancer.c
    äº’æ›æ€§:2.1 以é™

    概è¦

    本モジュールã«ã¯ mod_proxy ãŒå¿…è¦ã§ã™ã€‚ HTTP, FTP 㨠AJP13 プロトコルã®ãƒ­ãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹æ©Ÿèƒ½ã‚’æŒã£ã¦ã„ã¾ã™ã€‚

    ã§ã™ã‹ã‚‰ã€ ロードãƒãƒ©ãƒ³ã‚¹ã‚’有効ã«ã™ã‚‹å ´åˆ mod_proxy 㨠mod_proxy_balancer ãŒã‚µãƒ¼ãƒã«çµ„ã¿è¾¼ã¾ã‚Œã¦ ã„ãªã‘れã°ã„ã‘ã¾ã›ã‚“。

    警告

    安全ãªã‚µãƒ¼ãƒã«ã™ã‚‹ã¾ã§ãƒ—ãƒ­ã‚¯ã‚·æ©Ÿèƒ½ã¯æœ‰åйã«ã—ãªã„ã§ãã ã•ã„。 オープンプロキシサーãƒã¯ã‚ãªãŸè‡ªèº«ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«ã¨ã£ã¦ã‚‚〠インターãƒãƒƒãƒˆå…¨ä½“ã«ã¨ã£ã¦ã‚‚å±é™ºã§ã™ã€‚

    top

    ロードãƒãƒ©ãƒ³ã‚µã®ã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ©ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ 

    ç¾æ™‚点ã§ã¯ 2 種類ã®ãƒ­ãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ©ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‹ã‚‰é¸ã¹ã¾ã™ã€‚ リクエスト回数ã«ã‚ˆã‚‹ã‚‚ã® (訳注: Request Counting) ã¨ã€ãƒˆãƒ©ãƒ•ィックé‡ã«ã‚ˆã‚‹ã‚‚ã® (訳注: Weighted Traffic Counting) ãŒã‚りã¾ã™ã€‚ãƒãƒ©ãƒ³ã‚µã®è¨­å®š lbmethod 値ã§ã€ã©ã¡ã‚‰ã‚’使ã†ã‹æŒ‡å®šã—ã¾ã™ã€‚ 詳細㯠Proxy ディレクティブを å‚ç…§ã—ã¦ãã ã•ã„。

    top

    Request Counting アルゴリズム

    lbmethod=byrequests ã§æœ‰åйã«ãªã‚Šã¾ã™ã€‚ ã“ã®ã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ©ã®èƒŒæ™¯ã«ã‚ã‚‹è€ƒãˆæ–¹ã¯ã€æ§˜ã€…ãªãƒ¯ãƒ¼ã‚«ãƒ¼ãŒãれãžã‚Œã€ 設定ã•れã¦ã„る分担リクエスト数をãã¡ã‚“ã¨å—ã‘å–れるよã†ã«ã€ リクエストを扱ã†ã¨ã„ã†è€ƒãˆæ–¹ã§ã™ã€‚次ã®ã‚ˆã†ã«å‹•作ã—ã¾ã™:

    lbfactor ã¯ã€ã©ã®ç¨‹åº¦ãƒ¯ãƒ¼ã‚«ãƒ¼ã«ä»•事を振る㋠ã¤ã¾ã‚Šãƒ¯ãƒ¼ã‚«ãƒ¼ã®ã‚¯ã‚ªãƒ¼ã‚¿ã‚’指ã—ã¾ã™ã€‚ã“ã®å€¤ã¯ "分担" é‡ã‚’è¡¨ã™æ­£è¦åŒ–ã•れãŸå€¤ã§ã™ã€‚

    lbstatus ã¯ã€ãƒ¯ãƒ¼ã‚«ãƒ¼ã®ã‚¯ã‚ªãƒ¼ã‚¿ã‚’満ãŸã™ãŸã‚ã« ã©ã®ãã‚‰ã„æ€¥ãŽã§åƒã‹ãªã‘れã°ãªã‚‰ãªã„ã‹ã‚’指ã—ã¾ã™ã€‚

    ワーカーã¯ãƒ­ãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µã®ãƒ¡ãƒ³ãƒã§ã€é€šå¸¸ã¯ã€ サãƒãƒ¼ãƒˆã•れるプロトコルã®ã†ã¡ã®ä¸€ã¤ã‚’æä¾›ã—ã¦ã„るリモートホストã§ã™ã€‚

    ã¾ãšå€‹ã€…ã®ãƒ¯ãƒ¼ã‚«ãƒ¼ã«ãƒ¯ãƒ¼ã‚«ãƒ¼ã‚¯ã‚ªãƒ¼ã‚¿ã‚’割り振りã€ã©ã®ãƒ¯ãƒ¼ã‚«ãƒ¼ãŒæœ€ã‚‚急ãŽã§ åƒã‹ãªã‘れã°ãªã‚‰ãªã„ã‹ (lbstatus ãŒæœ€å¤§ã®ã‚‚ã®) を調ã¹ã¾ã™ã€‚ 次ã«ä»•事をã™ã‚‹ã‚ˆã†ã«ã“ã®ãƒ¯ãƒ¼ã‚«ãƒ¼ã‚’é¸æŠžã—ã€é¸æŠžã—ãŸãƒ¯ãƒ¼ã‚«ãƒ¼ã® lbstatus を全体ã«å‰²ã‚ŠæŒ¯ã£ãŸã¶ã‚“ã ã‘å·®ã—引ãã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€lbstatus ã®ç·é‡ã¯ çµæžœçš„ã«å¤‰åŒ–ã—ã¾ã›ã‚“(*)ã—ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯æœŸå¾…通りã«åˆ†æ•£ã•れã¾ã™ã€‚

    ã‚るワーカーãŒç„¡åйã«ãªã£ã¦ã‚‚ã€ä»–ã®ã‚‚ã®ã¯æ­£å¸¸ã«ã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ«ã•れ続ã‘ã¾ã™ã€‚

    for each worker in workers
        worker lbstatus += worker lbfactor
        total factor    += worker lbfactor
        if worker lbstatus > candidate lbstatus
            candidate = worker
    
    candidate lbstatus -= total factor

    ãƒãƒ©ãƒ³ã‚µã‚’次ã®ã‚ˆã†ã«è¨­å®šã—ãŸå ´åˆ:

    worker a b c d
    lbfactor 25 25 25 25
    lbstatus 0 0 0 0

    ãã—㦠b ãŒç„¡åйã«ãªã£ãŸå ´åˆã€æ¬¡ã®ã‚ˆã†ãªã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒ 行ã‚れã¾ã™ã€‚

    worker a b c d
    lbstatus -50 0 25 25
    lbstatus -25 0 -25 50
    lbstatus 0 0 0 0
    (repeat)

    ã¤ã¾ã‚Šã“ã®ã‚ˆã†ã«ã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ«ã•れã¾ã™: a c d a c d a c d ... 次ã®ç‚¹ã«æ³¨æ„ã—ã¦ãã ã•ã„:

    worker a b c d
    lbfactor 25 25 25 25

    ã“ã®æŒ™å‹•ã¯ã€æ¬¡ã®è¨­å®šã¨å…¨ãåŒã˜ã«ãªã‚Šã¾ã™:

    worker a b c d
    lbfactor 1 1 1 1

    This is because all values of lbfactor are normalized with respect to the others. For:

    lbfactor ã¯å…¨ã¦æ­£è¦åŒ–ã•れãŸã‚‚ã®ã§ã€ ä»–ã¨ã®ç›¸å¯¾å€¤ã ã‹ã‚‰ã§ã™ã€‚次ã®è¨­å®šã§ã¯:

    worker a b c
    lbfactor 1 4 1

    ワーカー b ã¯ã€å¹³å‡ã—ã¦ã€a 㨠c ã® 4 å€ã®æ•°ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘æŒã¤ã“ã¨ã«ãªã‚Šã¾ã™ã€‚

    次ã®ã‚ˆã†ãªéžå¯¾ç§°ãªè¨­å®šã§ã¯ã€ã“ã†ãªã‚‹ã¨äºˆæƒ³ã•れるã§ã—ょã†:

    worker a b
    lbfactor 70 30
     
    lbstatus -30 30
    lbstatus 40 -40
    lbstatus 10 -10
    lbstatus -20 20
    lbstatus -50 50
    lbstatus 20 -20
    lbstatus -10 10
    lbstatus -40 40
    lbstatus 30 -30
    lbstatus 0 0
    (repeat)

    スケジュール㯠10 スケジュール後ã«ç¹°ã‚Šè¿”ã•れã€a 7 回㨠b 3 回ã§ã¾ã°ã‚‰ã«é¸ã°ã‚Œã¾ã™ã€‚

    top

    Weighted Traffic Counting アルゴリズム

    lbmethod=bytraffic ã§æœ‰åйã«ãªã‚Šã¾ã™ã€‚ ã“ã®ã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ©ã®èƒŒæ™¯ã«ã‚ã‚‹è€ƒãˆæ–¹ã¯ã€Request Counting ã¨éžå¸¸ã«ä¼¼ã¦ã„ã¾ã™ãŒã€æ¬¡ã®é•ã„ãŒã‚りã¾ã™:

    lbfactor 㯠ã©ã‚Œã ã‘ã®ãƒã‚¤ãƒˆæ•°ã®ãƒˆãƒ©ãƒ•ィックé‡ã‚’〠ã“ã®ãƒ¯ãƒ¼ã‚«ãƒ¼ã«å‡¦ç†ã—ã¦ã‚‚らã„ãŸã„㋠を表ã—ã¾ã™ã€‚ ã“ã®å€¤ã‚‚åŒæ§˜ã«æ­£è¦åŒ–ã•れãŸå€¤ã§ã€ãƒ¯ãƒ¼ã‚«ãƒ¼å…¨ä½“ã®ã†ã¡ã§ã® "分担" é‡ã‚’表ç¾ã—ã¦ã„ã¾ã™ã€‚リクエスト数をå˜ç´”ã«æ•°ãˆã‚‹ä»£ã‚りã«ã€ ã©ã‚Œã ã‘ã®è»¢é€é‡ã‚’処ç†ã—ãŸã‹ã‚’æ•°ãˆã¾ã™ã€‚

    次ã®ã‚ˆã†ã«ãƒãƒ©ãƒ³ã‚µã‚’設定ã—ãŸå ´åˆ:

    worker a b c
    lbfactor 1 2 1

    b ã«ã¯ a ã‚„ c ã® 2 å€ å‡¦ç†ã—ã¦ã»ã—ã„ã¨ã„ã†ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ b 㯠2 å€ã® I/O を処ç†ã™ã‚‹ã¨ã„ã†æ„味ã«ãªã‚Šã€ 2 å€ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆæ•°ã‚’処ç†ã™ã‚‹ã¨ã„ã†ã“ã¨ã«ã¯ãªã‚Šã¾ã›ã‚“。 ã§ã™ã‹ã‚‰ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¨ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®ã‚µã‚¤ã‚ºãŒã€ é‡ã¿ä»˜ã‘ã¨æŒ¯ã‚Šåˆ†ã‘ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã«åйã„ã¦ã„ã¾ã™ã€‚

    top

    ãƒãƒ©ãƒ³ã‚µãƒžãƒãƒ¼ã‚¸ãƒ£ã®ã‚µãƒãƒ¼ãƒˆã‚’有効ã«ã™ã‚‹

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ mod_status ã®ã‚µãƒ¼ãƒ“スを å¿…è¦ã¨ã—ã¾ã™ã€‚ ãƒãƒ©ãƒ³ã‚µãƒžãƒãƒ¼ã‚¸ãƒ£ã‚’使ã†ã¨ã€ãƒãƒ©ãƒ³ã‚µã®ãƒ¡ãƒ³ãƒãƒ¼ã®å‹•çš„ãªæ›´æ–°ãŒ ã§ãã¾ã™ã€‚ãƒãƒ©ãƒ³ã‚µãƒžãƒãƒ¼ã‚¸ãƒ£ã‚’使ã£ã¦ã€ãƒãƒ©ãƒ³ã‚¹ä¿‚æ•° (lbfactor) を変更ã—ãŸã‚Šã€ãƒ¡ãƒ³ãƒãƒ¼ã‚’変更ã—ãŸã‚Šã€ç‰¹å®šã®ãƒ¡ãƒ³ãƒãƒ¼ã‚’ オフラインモードã«ã—ãŸã‚Šã§ãã¾ã™ã€‚

    ã§ã™ã‹ã‚‰ã€ãƒ­ãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µç®¡ç†æ©Ÿèƒ½ã‚’使ã„ãŸã‘れã°ã€ mod_status 㨠mod_proxy_balancer をサーãƒã«çµ„ã¿è¾¼ã¾ãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    foo.com ドメインã®ãƒ–ラウザã‹ã‚‰ãƒ­ãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µç®¡ç†æ©Ÿèƒ½ã‚’ 使ãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ã«ã¯ã€æ¬¡ã®ã‚ˆã†ãªã‚³ãƒ¼ãƒ‰ã‚’ httpd.conf ã«è¿½åŠ ã—ã¾ã™ã€‚

    <Location /balancer-manager>
    SetHandler balancer-manager

    Order Deny,Allow
    Deny from all
    Allow from .foo.com
    </Location>

    ã“ã†ã™ã‚‹ã¨ã€http://your.server.name/balancer-manager ã®ãƒšãƒ¼ã‚¸çµŒç”±ã§ã€ã‚¦ã‚§ãƒ–ブラウザã‹ã‚‰ãƒ­ãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒžãƒãƒ¼ã‚¸ãƒ£ã« アクセスã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_xml2enc.html0000644000000000000500000000033213362070302017307 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_xml2enc.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_xml2enc.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_authnz_fcgi.html0000644000000000000500000000034213362070302020241 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authnz_fcgi.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authnz_fcgi.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_ldap.html.fr.utf80000644000000000000500000016173513412755316020204 0ustar rootsrc mod_ldap - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_ldap

    Langues Disponibles:  en  |  fr 

    Description:Conservation des connexions LDAP et services de mise en cache du résultat à destination des autres modules LDAP
    Statut:Extension
    Identificateur de Module:ldap_module
    Fichier Source:util_ldap.c

    Sommaire

    Ce module a été conçu dans le but d'améliorer les performances des sites web s'appuyant sur des connexions en arrière-plan vers des serveurs LDAP. Il ajoute aux fonctions fournies par les bibliothèques standards LDAP la conservation des connexions LDAP ainsi qu'un cache LDAP partagé en mémoire.

    Pour activer ce module, le support LDAP doit être compilé dans apr-util. Pour ce faire, on ajoute l'option --with-ldap au script configure lorsqu'on construit Apache.

    Le support SSL/TLS est conditionné par le kit de développement LDAP qui a été lié à APR. Au moment où ces lignes sont écrites, APR-util supporte OpenLDAP SDK (version 2.x ou supérieure), Novell LDAP SDK, Mozilla LDAP SDK, le SDK LDAP Solaris natif (basé sur Mozilla) ou le SDK LDAP Microsoft natif. Voir le site web APR pour plus de détails.

    top

    Exemple de configuration

    Ce qui suit est un exemple de configuration qui utilise mod_ldap pour améliorer les performances de l'authentification HTTP de base fournie par mod_authnz_ldap.

    # Active la conservation des connexions LDAP et le cache partagé en
    # mémoire. Active le gestionnaire de statut du cache LDAP.
    # Nécessite le chargement de mod_ldap et de mod_authnz_ldap.
    # Remplacez "votre-domaine.example.com" par le nom de votre
    # domaine.
    
    LDAPSharedCacheSize 500000
    LDAPCacheEntries 1024
    LDAPCacheTTL 600
    LDAPOpCacheEntries 1024
    LDAPOpCacheTTL 600
    
    <Location "/ldap-status">
        SetHandler ldap-status
        
        Require host yourdomain.example.com
        
        Satisfy any
        AuthType Basic
        AuthName "LDAP Protected"
        AuthBasicProvider ldap
        AuthLDAPURL "ldap://127.0.0.1/dc=example,dc=com?uid?one"
        Require valid-user
    </Location>
    top

    Conservation des connexions LDAP

    Les connexions LDAP sont conservées de requête en requête. Ceci permet de rester connecté et identifié au serveur LDAP, ce dernier étant ainsi prêt pour la prochaine requête, sans avoir à se déconnecter, reconnecter et réidentifier. Le gain en performances est similaire à celui des connexions persistantes (keepalives) HTTP.

    Sur un serveur très sollicité, il est possible que de nombreuses requêtes tentent d'accéder simultanément à la même connexion au serveur LDAP. Lorsqu'une connexion LDAP est utilisée, Apache en crée une deuxième en parallèle à la première, ce qui permet d'éviter que le système de conservation des connexions ne devienne un goulot d'étranglement.

    Il n'est pas nécessaire d'activer explicitement la conservation des connexions dans la configuration d'Apache. Tout module utilisant le module ldap pour accéder aux services LDAP partagera le jeu de connexions.

    Les connexions LDAP peuvent garder la trace des données d'identification du client ldap utilisées pour l'identification auprès du serveur LDAP. Ces données peuvent être fournies aux serveurs LDAP qui ne permettent pas les connexions anonymes au cours lors des tentatives de sauts vers des serveurs alternatifs. Pour contrôler cette fonctionnalité, voir les directives LDAPReferrals et LDAPReferralHopLimit. Cette fonctionnalité est activée par défaut.

    top

    Cache LDAP

    Pour améliorer les performances, mod_ldap met en oeuvre une stratégie de mise en cache agressive visant à minimiser le nombre de fois que le serveur LDAP doit être contacté. La mise en cache peut facilement doubler et même tripler le débit d'Apache lorsqu'il sert des pages protégées par mod_authnz_ldap. De plus, le serveur LDAP verra lui-même sa charge sensiblement diminuée.

    mod_ldap supporte deux types de mise en cache LDAP : un cache recherche/identification durant la phase de recherche/identification et deux caches d'opérations durant la phase de comparaison. Chaque URL LDAP utilisée par le serveur a son propre jeu d'instances dans ces trois caches.

    Le cache recherche/identification

    Les processus de recherche et d'identification sont les opérations LDAP les plus consommatrices en temps, en particulier si l'annuaire est de grande taille. Le cache de recherche/identification met en cache toutes les recherches qui ont abouti à une identification positive. Les résultats négatifs (c'est à dire les recherches sans succès, ou les recherches qui n'ont pas abouti à une identification positive) ne sont pas mis en cache. La raison de cette décision réside dans le fait que les connexions avec des données d'identification invalides ne représentent qu'un faible pourcentage du nombre total de connexions, et ainsi, le fait de ne pas mettre en cache les données d'identification invalides réduira d'autant la taille du cache.

    mod_ldap met en cache le nom d'utilisateur, le DN extrait, le mot de passe utilisé pour l'identification, ainsi que l'heure de l'identification. Chaque fois qu'une nouvelle connexion est initialisée avec le même nom d'utilisateur, mod_ldap compare le mot de passe de la nouvelle connexion avec le mot de passe enregistré dans le cache. Si les mots de passe correspondent, et si l'entrée du cache n'est pas trop ancienne, mod_ldap court-circuite la phase de recherche/identification.

    Le cache de recherche/identification est contrôlé par les directives LDAPCacheEntries et LDAPCacheTTL.

    Les caches d'opérations

    Au cours des opérations de comparaison d'attributs et de noms distinctifs (DN), mod_ldap utilise deux caches d'opérations pour mettre en cache les opérations de comparaison. Le premier cache de comparaison sert à mettre en cache les résultats de comparaisons effectuées pour vérifier l'appartenance à un groupe LDAP. Le second cache de comparaison sert à mettre en cache les résultats de comparaisons entre DNs.

    Notez que, lorsque l'appartenance à un groupe est vérifiée, toute comparaison de sous-groupes est mise en cache afin d'accélérer les comparaisons de sous-groupes ultérieures.

    Le comportement de ces deux caches est contrôlé par les directives LDAPOpCacheEntries et LDAPOpCacheTTL.

    Superviser le cache

    mod_ldap possède un gestionnaire de contenu qui permet aux administrateurs de superviser les performances du cache. Le nom du gestionnaire de contenu est ldap-status, et on peut utiliser les directives suivantes pour accéder aux informations du cache de mod_ldap :

    <Location "/server/cache-info">
        SetHandler ldap-status
    </Location>

    En se connectant à l'URL http://nom-serveur/infos-cache, l'administrateur peut obtenir un rapport sur le statut de chaque cache qu'utilise mod_ldap. Notez que si Apache ne supporte pas la mémoire partagée, chaque instance de httpd possèdera son propre cache, et chaque fois que l'URL sera rechargée, un résultat différent pourra être affiché, en fonction de l'instance de httpd qui traitera la requête.

    top

    Utiliser SSL/TLS

    La possibilité de créer des connexions SSL et TLS avec un serveur LDAP est définie par les directives LDAPTrustedGlobalCert, LDAPTrustedClientCert et LDAPTrustedMode. Ces directives permettent de spécifier l'autorité de certification (CA), les certificats clients éventuels, ainsi que le type de chiffrement à utiliser pour la connexion (none, SSL ou TLS/STARTTLS).

    # Etablissement d'une connexion SSL LDAP sur le port 636.
    # Nécessite le chargement de mod_ldap et mod_authnz_ldap.
    # Remplacez "votre-domaine.example.com" par le nom de votre
    # domaine.
    
    LDAPTrustedGlobalCert CA_DER "/certs/certfile.der"
    
    <Location "/ldap-status">
        SetHandler ldap-status
        
        Require host yourdomain.example.com
        
        Satisfy any
        AuthType Basic
        AuthName "LDAP Protected"
        AuthBasicProvider ldap
        AuthLDAPURL "ldaps://127.0.0.1/dc=example,dc=com?uid?one"
        Require valid-user
    </Location>
    # Etablissement d'une connexion TLS LDAP sur le port 389.
    # Nécessite le chargement de mod_ldap et mod_authnz_ldap.
    # Remplacez "votre-domaine.example.com" par le nom de votre
    # domaine.
    
    LDAPTrustedGlobalCert CA_DER "/certs/certfile.der"
    
    <Location "/ldap-status">
        SetHandler ldap-status
        
        Require host yourdomain.example.com
        
        Satisfy any
        AuthType Basic
        AuthName "LDAP Protected"
        AuthBasicProvider ldap
        AuthLDAPURL "ldap://127.0.0.1/dc=example,dc=com?uid?one" TLS
        Require valid-user
    </Location>
    top

    Certificats SSL/TLS

    Les différents SDKs LDAP disposent de nombreuses méthodes pour définir et gérer les certificats des clients et des autorités de certification (CA).

    Si vous avez l'intention d'utiliser SSL ou TLS, lisez cette section ATTENTIVEMENT de façon à bien comprendre les différences de configurations entre les différents SDKs LDAP supportés.

    SDK Netscape/Mozilla/iPlanet

    Les certificat de CA sont enregistrés dans un fichier nommé cert7.db. Le SDK ne dialoguera avec aucun serveur LDAP dont le certificat n'a pas été signé par une CA spécifiée dans ce fichier. Si des certificats clients sont requis, un fichier key3.db ainsi qu'un mot de passe optionnels peuvent être spécifiés. On peut aussi spécifier le fichier secmod si nécessaire. Ces fichiers sont du même format que celui utilisé par les navigateurs web Netscape Communicator ou Mozilla. Le moyen le plus simple pour obtenir ces fichiers consiste à les extraire de l'installation de votre navigateur.

    Les certificats clients sont spécifiés pour chaque connexion en utilisant la directive LDAPTrustedClientCert et en se référant au certificat "nickname". On peut éventuellement spécifier un mot de passe pour déverrouiller la clé privée du certificat.

    Le SDK supporte seulement SSL. Toute tentative d'utilisation de STARTTLS engendrera une erreur lors des tentatives de contacter le serveur LDAP pendant l'exécution.

    # Spécifie un fichier de certificats de CA Netscape
    LDAPTrustedGlobalCert CA_CERT7_DB "/certs/cert7.db"
    # Spécifie un fichier key3db optionnel pour le support des
    # certificats clients
    LDAPTrustedGlobalCert CERT_KEY3_DB "/certs/key3.db"
    # Spécifie le fichier secmod si nécessaire
    LDAPTrustedGlobalCert CA_SECMOD "/certs/secmod"
    <Location "/ldap-status">
        SetHandler ldap-status
    
        Require host yourdomain.example.com
    
        Satisfy any
        AuthType Basic
        AuthName "LDAP Protected"
        AuthBasicProvider ldap
        LDAPTrustedClientCert CERT_NICKNAME <nickname> [password]
        AuthLDAPURL "ldaps://127.0.0.1/dc=example,dc=com?uid?one"
        Require valid-user
    </Location>

    SDK Novell

    Un ou plusieurs certificats de CA doivent être spécifiés pour que le SDK Novell fonctionne correctement. Ces certificats peuvent être spécifiés sous forme de fichiers au format binaire DER ou codés en Base64 (PEM).

    Note: Les certificats clients sont spécifiés globalement plutôt qu'à chaque connexion, et doivent être spécifiés à l'aide de la directive LDAPTrustedGlobalCert comme ci-dessous. Définir des certificats clients via la directive LDAPTrustedClientCert engendrera une erreur qui sera journalisée, au moment de la tentative de connexion avec le serveur LDAP.

    Le SDK supporte SSL et STARTTLS, le choix étant défini par le paramètre de la directive LDAPTrustedMode. Si une URL de type ldaps:// est spécifiée, le mode SSL est forcé, et l'emporte sur cette directive.

    # Spécifie deux fichiers contenant des certificats de CA
    LDAPTrustedGlobalCert CA_DER "/certs/cacert1.der"
    LDAPTrustedGlobalCert CA_BASE64 "/certs/cacert2.pem"
    # Spécifie un fichier contenant des certificats clients
    # ainsi qu'une clé
    LDAPTrustedGlobalCert CERT_BASE64 "/certs/cert1.pem"
    LDAPTrustedGlobalCert KEY_BASE64 "/certs/key1.pem" [password]
    # N'utilisez pas cette directive, sous peine de provoquer
    # une erreur
    #LDAPTrustedClientCert CERT_BASE64 "/certs/cert1.pem"

    SDK OpenLDAP

    Un ou plusieurs certificats de CA doivent être spécifiés pour que le SDK OpenLDAP fonctionne correctement. Ces certificats peuvent être spécifiés sous forme de fichiers au format binaire DER ou codés en Base64 (PEM).

    Les certificats clients sont spécifiés pour chaque connexion à l'aide de la directive LDAPTrustedClientCert.

    La documentation du SDK prétend que SSL et STARTTLS sont supportés ; cependant, STARTTLS semble ne pas fonctionner avec toutes les versions du SDK. Le mode SSL/TLS peut être défini en utilisant le paramètre de la directive LDAPTrustedMode. Si une URL de type ldaps:// est spécifiée, le mode SSL est forcé. La documentation OpenLDAP indique que le support SSL (ldaps://) tend à être remplacé par TLS, bien que le mode SSL fonctionne toujours.

    # Spécifie deux fichiers contenant des certificats de CA
    LDAPTrustedGlobalCert CA_DER "/certs/cacert1.der"
    LDAPTrustedGlobalCert CA_BASE64 "/certs/cacert2.pem"
    <Location /ldap-status>
        SetHandler ldap-status
        
        Require host yourdomain.example.com
        
        LDAPTrustedClientCert CERT_BASE64 "/certs/cert1.pem"
        LDAPTrustedClientCert KEY_BASE64 "/certs/key1.pem"
        # CA certs respecified due to per-directory client certs
        LDAPTrustedClientCert CA_DER "/certs/cacert1.der"
        LDAPTrustedClientCert CA_BASE64 "/certs/cacert2.pem"
        Satisfy any
        AuthType Basic
        AuthName "LDAP Protected"
        AuthBasicProvider ldap
        AuthLDAPURL "ldaps://127.0.0.1/dc=example,dc=com?uid?one"
        Require valid-user
    </Location>

    SDK Solaris

    SSL/TLS pour les bibliothèques LDAP propres à Solaris n'est pas encore supporté. Si nécessaire, installez et utilisez plutôt les bibliothèques OpenLDAP.

    SDK Microsoft

    La configuration des certificats SSL/TLS pour les bibliothèques LDAP propres à Microsoft s'effectue à l'intérieur du registre système, et aucune directive de configuration n'est requise.

    SSL et TLS sont tous deux supportés en utilisant des URLs de type ldaps://, ou en définissant la directive LDAPTrustedMode à cet effet.

    Note: L'état du support des certificats clients n'est pas encore connu pour ce SDK.

    top

    Directive LDAPCacheEntries

    Description:Nombre maximum d'entrées dans le cache LDAP primaire
    Syntaxe:LDAPCacheEntries nombre
    Défaut:LDAPCacheEntries 1024
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ldap

    Cette directive permet de spécifier la taille maximale du cache LDAP primaire. Ce cache contient les résultats de recherche/identification positifs. Définissez-la à 0 pour désactiver la mise en cache des résultats de recherche/identification positifs. La taille par défaut est de 1024 recherches en cache.

    top

    Directive LDAPCacheTTL

    Description:Durée pendant laquelle les entrées du cache restent valides.
    Syntaxe:LDAPCacheTTL secondes
    Défaut:LDAPCacheTTL 600
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ldap

    Cette directive permet de spécifier la durée (en secondes) pendant laquelle une entrée du cache de recherche/identification reste valide. La valeur par défaut est de 600 secondes (10 minutes).

    top

    Directive LDAPConnectionPoolTTL

    Description:Désactive les connexions d'arrière-plan qui sont restées inactives trop longtemps au sein du jeu de connexions.
    Syntaxe:LDAPConnectionPoolTTL n
    Défaut:LDAPConnectionPoolTTL -1
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ldap
    Compatibilité:Disponible à partir de la version 2.3.12 du serveur HTTP Apache

    Cette directive permet de spécifier la durée maximale, en secondes, pendant laquelle une connexion LDAP du jeu de connexions peut demeurer inactive, mais rester quand-même disponible pour une utilisation éventuelle. Le jeu de connexions est nettoyé au fur et à mesure des besoins, de manière non asynchrone.

    Si cette directive est définie à 0, les connexions ne sont jamais sauvegardées dans le jeu de connexions d'arrière-plan. Avec la valeur par défaut -1, ou toute autre valeur négative, les connexions peuvent être réutilisées sans limite de durée.

    Dans le but d'améliorer les performances, le temps de référence qu'utilise cette directive correspond au moment où la connexion LDAP est enregistrée ou remise dans le jeu de connexions, et non au moment du dernier échange réussi avec le serveur LDAP.

    La version 2.4.10 a introduit de nouvelles mesures permettant d'éviter une augmentation excessive du temps de référence due à des correspondances positives dans le cache ou des requêtes lentes. A cet effet, le temps de référence n'est pas réactualisé si aucune connexion LDAP d'arrière-plan n'est requise ; d'autre part, le temps de référence se base sur le moment où la requête HTTP est reçue, et non sur le moment où la requête a été traitée.

    Cette durée de vie s'exprime par défaut en secondes, mais il est possible d'utiliser d'autres unités en ajoutant un suffixe : millisecondes (ms), minutes (min), ou heures (h).

    top

    Directive LDAPConnectionTimeout

    Description:Spécifie le délai d'attente en secondes de la socket de connexion
    Syntaxe:LDAPConnectionTimeout secondes
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ldap

    Cette directive configure l'option LDAP_OPT_NETWORK_TIMEOUT (ou LDAP_OPT_CONNECT_TIMEOUT) dans la bibliothèque client LDAP sous-jacente, si elle est disponible. Cette valeur représente la durée pendant laquelle la bibliothèque client LDAP va attendre que le processus de connexion TCP au serveur LDAP soit achevé.

    Si la connexion n'a pas réussi avant ce délai, une erreur sera renvoyée, ou la bibliothèque client LDAP tentera de se connecter à un second serveur LDAP, s'il en a été défini un (via une liste de noms d'hôtes séparés par des espaces dans la directive AuthLDAPURL).

    La valeur par défaut est 10 secondes, si la bibliothèque client LDAP liée avec le serveur supporte l'option LDAP_OPT_NETWORK_TIMEOUT.

    LDAPConnectionTimeout n'est disponible que si la bibliothèque client LDAP liée avec le serveur supporte l'option LDAP_OPT_NETWORK_TIMEOUT (ou LDAP_OPT_CONNECT_TIMEOUT), et le comportement final est entièrement dicté par la bibliothèque client LDAP.
    top

    Directive LDAPLibraryDebug

    Description:Active le débogage dans le SDK LDAP
    Syntaxe:LDAPLibraryDebug 7
    Défaut:disabled
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ldap

    Active les options de débogage LDAP spécifiques au SDK, qui entraînent en général une journalisation d'informations verbeuses du SDK LDAP dans le journal principal des erreurs d'Apache. Les messages de traces en provenance du SDK LDAP fournissent des informations très détaillées qui peuvent s'avérer utiles lors du débogage des problèmes de connexion avec des serveurs LDAP d'arrière-plan.

    Cette option n'est configurable que lorsque le serveur HTTP Apache est lié avec un SDK LDAP qui implémente LDAP_OPT_DEBUG ou LDAP_OPT_DEBUG_LEVEL, comme OpenLDAP (une valeur de 7 est verbeuse) ou Tivoli Directory Server (une valeur de 65535 est verbeuse).

    Les informations journalisées peuvent contenir des données d'authentification en clair utilisées ou validées lors de l'authentification LDAP ; vous devez donc prendre soin de protéger et de purger le journal des erreurs lorsque cette directive est utilisée.

    top

    Directive LDAPOpCacheEntries

    Description:Nombre d'entrées utilisées pour mettre en cache les opérations de comparaison LDAP
    Syntaxe:LDAPOpCacheEntries nombre
    Défaut:LDAPOpCacheEntries 1024
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ldap

    Cette directive permet de spécifier le nombre d'entrées que mod_ldap va utiliser pour mettre en cache les opérations de comparaison LDAP. La valeur par défaut est de 1024 entrées. Si elle est définie à 0, la mise en cache des opérations de comparaison LDAP est désactivée.

    top

    Directive LDAPOpCacheTTL

    Description:Durée pendant laquelle les entrées du cache d'opérations restent valides
    Syntaxe:LDAPOpCacheTTL secondes
    Défaut:LDAPOpCacheTTL 600
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ldap

    Cette directive permet de spécifier la durée (en secondes) pendant laquelle les entrées du cache d'opérations restent valides. La valeur par défaut est de 600 secondes.

    top

    Directive LDAPReferralHopLimit

    Description:Le nombre maximum de redirections vers des serveurs alternatifs (referrals) avant l'abandon de la requête LDAP.
    Syntaxe:LDAPReferralHopLimit nombre
    Défaut:Dépend du SDK, en général entre 5 et 10
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_ldap

    Si elle est activée par la directive LDAPReferrals, cette directive permet de définir le nombre maximum de sauts vers des serveurs alternatifs (referrals) avant l'abandon de la requête LDAP.

    L'ajustement de ce paramètre n'est pas commun à tous les SDKs LDAP.

    top

    Directive LDAPReferrals

    Description:Active la redirection vers des serveurs alternatifs au cours des requêtes vers le serveur LDAP.
    Syntaxe:LDAPReferrals On|Off|default
    Défaut:LDAPReferrals On
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_ldap
    Compatibilité:Le paramètre default est disponible depuis la version 2.4.7 du serveur HTTP Apache.

    Certains serveurs LDAP partagent leur annuaire en plusieurs domaines et utilisent le système des redirections (referrals) pour aiguiller un client lorsque les limites d'un domaine doivent être franchies. Ce processus est similaire à une redirection HTTP. Les bibliothèques client LDAP ne respectent pas forcément ces redirections par défaut. Cette directive permet de configurer explicitement les redirections LDAP dans le SDK sous-jacent.

    La directive LDAPReferrals accepte les valeurs suivantes :

    "on"

    Avec la valeur "on", la prise en compte des redirections LDAP par le SDK sous-jacent est activée, la directive LDAPReferralHopLimit permet de surcharger la "hop limit" du SDK, et un "LDAP rebind callback" est enregistré.

    "off"

    Avec la valeur "off", la prise en compte des redirections LDAP par le SDK sous-jacent est complètement désactivée.

    "default"

    Avec la valeur "default", la prise en compte des redirections LDAP par le SDK sous-jacent n'est pas modifiée, la directive LDAPReferralHopLimit ne permet pas de surcharger la "hop limit" du SDK, et aucun "LDAP rebind callback" n'est enregistré.

    La directive LDAPReferralHopLimit travaille en conjonction avec cette directive pour limiter le nombre de redirections à suivre pour achever le traitement de la requête LDAP. Lorsque le processus de redirection est activé par la valeur "On", les données d'authentification du client sont transmises via un "rebind callback" à tout serveur LDAP qui en fait la demande.

    top

    Directive LDAPRetries

    Description:Définit le nombre maximum de tentatives de connexions au serveur LDAP.
    Syntaxe:LDAPRetries nombre d'essais
    Défaut:LDAPRetries 3
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ldap

    Suite à des échecs de connexion au serveur LDAP, le serveur tentera de se connecter autant de fois qu'indiqué par la directive LDAPRetries. Si cette directive est définie à 0, le serveur ne tentera pas d'autre connexion après un échec.

    Il est possible d'effectuer une autre tentative de connexion en cas d'erreurs LDAP du type délai dépassé ou connexion refusée.

    top

    Directive LDAPRetryDelay

    Description:Définit le temps d'attente avant un autre essai de connexion au serveur LDAP.
    Syntaxe:LDAPRetryDelay secondes
    Défaut:LDAPRetryDelay 0
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ldap

    Si la directive LDAPRetryDelay est définie à une valeur différente de 0, le serveur attendra pendant la durée spécifiée pour envoyer à nouveau sa requête LDAP. Une valeur de 0 implique une absence de délai pour les essais successifs.

    Il est possible d'effectuer une autre tentative de connexion en cas d'erreurs LDAP du type délai dépassé ou connexion refusée.

    top

    Directive LDAPSharedCacheFile

    Description:Définit le fichier du cache en mémoire partagée
    Syntaxe:LDAPSharedCacheFile chemin/fichier
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ldap

    Cette directive permet de spécifier le chemin du fichier du cache en mémoire partagée. Si elle n'est pas définie, la mémoire partagée anonyme sera utilisée si la plate-forme la supporte.

    top

    Directive LDAPSharedCacheSize

    Description:Taille en octets du cache en mémoire partagée
    Syntaxe:LDAPSharedCacheSize octets
    Défaut:LDAPSharedCacheSize 500000
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ldap

    Cette directive permet de spécifier le nombre d'octets à allouer pour le cache en mémoire partagée. La valeur par défaut est 500kb. Si elle est définie à 0, le cache en mémoire partagée ne sera pas utilisé et chaque processus HTTPD va créer son propre cache.

    top

    Directive LDAPTimeout

    Description:Spécifie le délai d'attente pour les opérations de recherche et d'identification LDAP en secondes
    Syntaxe:LDAPTimeout secondes
    Défaut:LDAPTimeout 60
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ldap
    Compatibilité:Disponible à partir de la version 2.3.5 du serveur HTTP Apache

    Cette directive permet de spécifier le délai d'attente pour les opérations de recherche et d'identification, ainsi que l'option LDAP_OPT_TIMEOUT dans la bibliothèque LDAP client sous-jacente, lorsqu'elle est disponible.

    Lorsque le délai est atteint, httpd va refaire un essai dans le cas où une connexion existante a été silencieusement fermée par un pare-feu. Les performances seront cependant bien meilleures si le pare-feu est configuré pour envoyer des paquets TCP RST au lieu de rejeter silencieusement les paquets.

    Les délais pour les opérations de comparaison LDAP nécessitent un SDK avec LDAP_OPT_TIMEOUT, comme OpenLDAP >= 2.4.4.

    top

    Directive LDAPTrustedClientCert

    Description:Définit le nom de fichier contenant un certificat client ou un alias renvoyant vers un certificat client spécifique à une connexion. Tous les SDK LDAP ne supportent pas les certificats clients par connexion.
    Syntaxe:LDAPTrustedClientCert type chemin/nom-fichier/alias [mot de passe]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_ldap

    Cette directive permet de spécifier le chemin et le nom de fichier ou l'alias d'un certificat client par connexion utilisé lors de l'établissement d'une connexion SSL ou TLS avec un serveur LDAP. Les sections directory ou location peuvent posséder leurs propres configurations de certificats clients. Certains SDK LDAP (en particulier Novell) ne supportent pas les certificats clients par connexion, et renvoient une erreur lors de la connexion au serveur LDAP si vous tenter d'utiliser cette directive (Utilisez à la place la directive LDAPTrustedGlobalCert pour les certificats clients sous Novell - Voir plus haut le guide des certificats SSL/TLS pour plus de détails). Le paramètre type spécifie le type du certificat en cours de définition, en fonction du SDK LDAP utilisé. Les types supportés sont :

    • CA_DER - certificat de CA codé en binaire DER
    • CA_BASE64 - certificat de CA codé en PEM
    • CERT_DER - certificat client codé en binaire DER
    • CERT_BASE64 - certificat client codé en PEM
    • CERT_NICKNAME - certificat client "nickname" (SDK Netscape)
    • KEY_DER - clé privée codée en binaire DER
    • KEY_BASE64 - clé privée codée en PEM
    top

    Directive LDAPTrustedGlobalCert

    Description:Définit le nom de fichier ou la base de données contenant les Autorités de Certification de confiance globales ou les certificats clients globaux
    Syntaxe:LDAPTrustedGlobalCert type chemin/nom-fichier [mot de passe]
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ldap

    Cette directive permet de spécifier le chemin et le nom du fichier contenant les certificats des CA de confiance et/ou les certificats clients du système global que mod_ldap utilisera pour établir une connexion SSL ou TLS avec un serveur LDAP. Notez que toute information relative aux certificats spécifiée en utilisant cette directive s'applique globalement à l'ensemble de l'installation du serveur. Certains SDK LDAP (en particulier Novell) nécessitent la définition globale de tous les certificats clients en utilisant cette directive. La plupart des autres SDK nécessitent la définition des certificats clients dans une section Directory ou Location en utilisant la directive LDAPTrustedClientCert. Si vous ne définissez pas ces directives correctement, une erreur sera générée lors des tentatives de contact avec un serveur LDAP, ou la connexion échouera silencieusement (Voir plus haut le guide des certificats SSL/TLS pour plus de détails). Le paramètre type spécifie le type de certificat en cours de définition, en fonction du SDK LDAP utilisé. Les types supportés sont :

    • CA_DER - certificat de CA codé en binaire DER
    • CA_BASE64 - certificat de CA codé en PEM
    • CA_CERT7_DB - fichier de base de données des certificats de CA de Netscape cert7.db
    • CA_SECMOD - fichier de base de données secmod de Netscape
    • CERT_DER - certificat client codé en binaire DER
    • CERT_BASE64 - certificat client codé en PEM
    • CERT_KEY3_DB - fichier de base de données des certificats clients de Netscape key3.db
    • CERT_NICKNAME - certificat client "nickname" (SDK Netscape)
    • CERT_PFX - certificat client codé en PKCS#12 (SDK Novell)
    • KEY_DER - clé privée codée en binaire DER
    • KEY_BASE64 - clé privée codée en PEM
    • KEY_PFX - clé privée codée en PKCS#12 (SDK Novell)
    top

    Directive LDAPTrustedMode

    Description:Spécifie le mode (SSL ou TLS) à utiliser lors de la connexion à un serveur LDAP.
    Syntaxe:LDAPTrustedMode type
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ldap

    Les modes suivants sont supportés :

    • NONE - aucun chiffrement
    • SSL - chiffrement ldaps:// sur le port par défaut 636
    • TLS - chiffrement STARTTLS sur le port par défaut 389

    Les modes ci-dessus ne sont pas supportés par tous les SDK LDAP. Un message d'erreur sera généré à l'exécution si un mode n'est pas supporté, et la connexion au serveur LDAP échouera.

    Si une URL de type ldaps:// est spécifiée, le mode est forcé à SSL et la définition de LDAPTrustedMode est ignorée.

    top

    Directive LDAPVerifyServerCert

    Description:Force la vérification du certificat du serveur
    Syntaxe:LDAPVerifyServerCert On|Off
    Défaut:LDAPVerifyServerCert On
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ldap

    Cette directive permet de spécifier s'il faut forcer la vérification d'un certificat de serveur lors de l'établissement d'une connexion SSL avec un serveur LDAP.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_unique_id.html.fr.utf80000644000000000000500000004263513412755316021243 0ustar rootsrc mod_unique_id - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_unique_id

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Fournit une variable d'environnement contenant un identifiant unique pour chaque requête
    Statut:Extension
    Identificateur de Module:unique_id_module
    Fichier Source:mod_unique_id.c

    Sommaire

    Ce module fournit un identifiant dont l'unicité est garantie parmi "toutes" les requêtes sous des conditions très précises. L'identifiant unique le sera aussi parmi plusieurs machines appartenant à un cluster correctement configuré. L'identifiant est affecté à la variable d'environnement UNIQUE_ID pour chaque requête. Les identifiants uniques sont utiles pour diverses raisons dont la nature se situe au delà de la portée de ce document.

    Support Apache!

    Sujets

    Directives

    Ce module ne fournit aucune directive.

    Traitement des bugs

    Voir aussi

    top

    Théorie

    Tout d'abord un bref rappel de la manière dont le serveur Apache fonctionne sous Unix (cette fonctionnalité n'étant actuellement pas supportée sous Windows NT). Sous Unix, Apache crée plusieurs processus enfants, ces derniers traitant les requêtes une par une. Chaque processus enfant peut traiter plusieurs requêtes pendant sa durée de vie. Dans le cadre de cette discussion, nous supposerons que les différents processus enfants ne s'échangent pas de données entre eux. Nous nous référerons aux processus enfants sous le nom de processus httpd.

    Votre site web est réparti entre une ou plusieurs machines dont vous êtes l'administrateur, et que nous nommerons cluster de serveurs. Chaque serveur peut exécuter plusieurs instances d'Apache. L'ensemble de ces dernières sera considéré comme "l'Univers", et sous certaines hypothèses, nous montrerons qu'il est possible dans cet univers, de générer des identifiants uniques pour chaque requête, sans pour autant nécessiter une communication importante entre les différents serveurs du cluster.

    Les machines de votre cluster doivent satisfaire ces conditions (même si le cluster ne comporte qu'une machine, vous devez synchroniser son horloge avec NTP) :

    • Les temps des machines sont synchronisés via NTP ou tout autre protocole de synchronisation du temps en réseau.
    • Les nom d'hôtes des machines sont tous différents, de façon à ce que le module puisse recevoir une adresse IP différente pour chaque machine du cluster en effectuant une recherche sur le nom d'hôte.

    Au vu des caractéristiques actuelles du système d'exploitation, nous supposerons que les pids (identifiants processus) sont codés sur 32 bits. Si le système d'exploitation utilise plus de 32 bits pour un pid, la correction est triviale mais doit être effectuée dans le code.

    Ces hypothèses posées, à un instant donné, nous pouvons distinguer tout processus httpd sur toute machine du cluster de tous les autres processus httpd. Pour ce faire, il suffit d'utiliser l'adresse IP de la machine et le pid du processus httpd. Un processus httpd peut traiter plusieurs requêtes simultanément si vous utilisez un module MPM multi-threadé. Pour identifier les threads, Apache httpd utilise en interne un index de threads. Ainsi, afin de générer des identifiants uniques pour chaque requête, il suffit d'effectuer une distinction en fonction du temps.

    Pour déterminer le temps, nous utiliserons un repère de temps Unix (les secondes écoulées depuis le 1er janvier 1970 UTC), et un compteur 16 bits. La précision du repère de temps n'étant que d'une seconde, le compteur va représenter 65536 valeurs par seconde. Le quadruplet (adresse IP, pid, repère de temps, compteur) est en mesure de distinguer 65536 requêtes par seconde par processus httpd. Il peut cependant arriver que le même pid soit réutilisé au cours du temps, et le compteur est là pour pallier cet inconvénient.

    Lorsqu'un processus enfant httpd est créé, le compteur est initialisé avec (nombre de microsecondes actuel divisé par 10) modulo 65536 (cette formule a été choisie pour éliminer certains problème de variance avec les bits de poids faibles du compteur de microsecondes sur certains systèmes). Lorsqu'un identifiant unique est généré, le repère de temps utilisé est le moment où la requête arrive sur le serveur web. Le compteur est incrémenté à chaque création d'identifiant (et peut repasser à 0 lorsqu'il a atteint sa valeur maximale).

    Le noyau génère un pid pour chaque processus lors de sa création, et le compteur de pid est réinitialisé à une certaine valeur lorsqu'il a atteint sa valeur maximale (les pid sont codés sur 16 bits sous de nombreux Unixes, mais les systèmes les plus récents les ont étendus à 32 bits). La même valeur de pid pourra donc être réutilisée au cours du temps. Cependant, tant qu'elle n'est pas réutilisée dans la même seconde, elle ne remet pas en cause l'unicité de notre quadruplet. Nous supposerons donc que le système ne créera pas plus de 65536 processus en une seconde (ce nombre peut être de 32768 sous certains Unixes, mais même dans ce cas, on est en général loin de cette situation).

    Il est possible que le temps se répète pour une raison quelconque. Supposons par exemple que l'horloge système soit retardée et repasse par un temps passé (ou bien, comme elle avançait, elle a été remise à l'heure, et elle repasse par un temps futur). Dans ce cas, il peut être facilement démontré que le couple pid/repère de temps peut être réutilisé. Le choix de la formule d'initialisation du compteur a été effectué dans l'intention de pallier ce problème. Notez qu'un nombre vraiment aléatoire serait souhaitable pour initialiser le compteur, mais il n'existe pas de tel nombre directement lisible sur la plupart des systèmes (c'est à dire que vous ne pouvez pas utiliser rand() car vous devez déclencher le générateur avec une valeur unique, et vous ne pouvez pas utiliser le temps à cet effet car celui-ci , au moins à la seconde près, s'est répété). Il ne s'agit donc pas d'une défense parfaite.

    Même si elle n'est pas parfaite, quel est le degré d'efficacité de cette défense ? Supposons qu'une de vos machines serve au plus 500 requêtes par seconde (ce qui constitue une limite supérieure très raisonnable au moment où ce document est écrit, car les systèmes ne se contentent en général pas de débiter des fichiers statiques). Pour y parvenir, un certain nombre de processus enfants sera nécessaire, qui dépendra du nombre de clients simultanés présents. Mais soyons pessimiste et supposons qu'un seul processus enfant soit capable de servir 500 requêtes par secondes. Il existe 1000 valeurs de démarrage possibles du compteur pour lesquelles deux séquences de 500 requêtes puissent se recouvrir. Il y a donc 1,5% de chance que le processus enfant répète une valeur de compteur si le temps se répète (avec une résolution d'une seconde), et l'unicité sera alors remise en cause. C'est cependant un exemple très pessimiste, et avec les valeurs du monde réel, il y a bien moins de chances que cela ne se produise. Si vous estimez que ceci a tout de même quelque chances de se produire sur votre système, vous pouvez migrer vers un compteur à 32 bits (en modifiant le code).

    On pourrait supposer que ceci a plus de chance de se produire lors du passage à l'heure d'hiver où l'horloge est "retardée". Cela ne constitue cependant pas un problème car les temps pris en compte ici sont des temps UTC, qui vont "toujours" de l'avant. Notez que les Unixes à base de processeur x86 peuvent nécessiter une configuration particulière pour que ceci soit vrai -- il doivent être configurés pour assumer que l'horloge système est en UTC et compenser de manière appropriée. Mais même dans ce cas, si vous utilisez NTP, votre temps UTC sera correct peu après le redémarrage.

    La variable d'environnement UNIQUE_ID est construite par codage du quadruplet de 144 bits (adresse IP sur 32 bits, pid sur 32 bits, repère de temps sur 32 bits, compteur 16 bits et index de threads sur 32 bits) en utilisant l'alphabet [A-Za-z0-9@-] d'une manière similaire à celle du codage MIME base64, et sa valeur se présente sous la forme d'une chaîne de 24 caractères. L'alphabet MIME base64 est en fait [A-Za-z0-9+/] ; cependant, les caractères + et / nécessitent un codage particulier dans les URLs, ce qui rend leur utilisation peu commode. Toutes les valeurs sont codées dans l'ordre des octets d'une adresse réseau de façon à ce que le codage soit comparable entre des architectures où l'ordre des octets est différent. L'ordre réel de codage est : repère de temps, adresse IP, pid, compteur. Cet ordre de codage possède un but précis, mais il faut souligner que les applications n'ont aucun intérêt à entrer dans les détails de ce codage. Les applications doivent se contenter de traiter la variable UNIQUE_ID comme un symbole opaque, qui peut être comparé avec d'autres UNIQUE_IDs en ne testant que leur égalité.

    L'ordre a été choisi de façon à ce qu'il soit possible de modifier le codage dans le futur sans avoir à se préoccuper de conflits éventuels avec une base de données de UNIQUE_IDs existante. Les nouveaux codages doivent conserver le repère de temps comme premier élément, et pour le reste, utiliser les même alphabet et longueur en bits. Comme les repères de temps constituent essentiellement un séquence croissante, il suffit que toutes les machines du cluster arrêtent de traiter toute requête dans la même seconde repère, et n'utilisent alors plus l'ancien format de codage. Ensuite, elles peuvent reprendre le traitement des requêtes en utilisant les nouveaux codages.

    Nous pensons que ceci apporte une solution relativement portable au problème. Les identifiants générés possèdent une durée de vie pratiquement infinie car les identifiants futurs pourront être allongés selon les besoins. Pratiquement aucune communication n'est requise entre les machines du cluster (seule la synchronisation NTP est requise, ce qui représente une charge très faible), et aucune communication entre les processus httpd n'est nécessaire (la communication est implicite et incluse dans le pid assigné par le noyau). Dans des situations très spécifiques, l'identifiant peut être raccourci, mais dans ce cas, d'avantage d'informations doivent être admises (par exemple, les 32 bits de l'adresse IP sont excessifs pour la plupart des sites, mais il n'existe pas de valeur de remplacement portable plus courte).

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_lbmethod_bybusyness.html.en0000644000000000000500000001755613412755316022457 0ustar rootsrc mod_lbmethod_bybusyness - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_lbmethod_bybusyness

    Available Languages:  en  |  fr 

    Description:Pending Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    Status:Extension
    Module Identifier:lbmethod_bybusyness_module
    Source File:mod_lbmethod_bybusyness.c
    Compatibility:Split off from mod_proxy_balancer in 2.3

    Summary

    This module does not provide any configuration directives of its own. It requires the services of mod_proxy_balancer, and provides the bybusyness load balancing method.

    Support Apache!

    Topics

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    top

    Pending Request Counting Algorithm

    Enabled via lbmethod=bybusyness, this scheduler keeps track of how many requests each worker is currently assigned at present. A new request is automatically assigned to the worker with the lowest number of active requests. This is useful in the case of workers that queue incoming requests independently of Apache, to ensure that queue length stays even and a request is always given to the worker most likely to service it the fastest and reduce latency.

    In the case of multiple least-busy workers, the statistics (and weightings) used by the Request Counting method are used to break the tie. Over time, the distribution of work will come to resemble that characteristic of byrequests (as implemented by mod_lbmethod_byrequests).

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_info.html.ko.euc-kr0000644000000000000500000003114513412755316020510 0ustar rootsrc mod_info - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_info

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:¼­¹ö ¼³Á¤¿¡ ´ëÇÑ Á¾ÇÕÀûÀÎ Á¤º¸¸¦ º¸¿©ÁØ´Ù
    »óÅÂ:Extension
    ¸ðµâ¸í:info_module
    ¼Ò½ºÆÄÀÏ:mod_info.c

    ¿ä¾à

    mod_info¸¦ »ç¿ëÇÏ·Á¸é httpd.conf ÆÄÀÏ¿¡ ´ÙÀ½°ú °°ÀÌ Ãß°¡ÇÑ´Ù.

    <Location /server-info>
    SetHandler server-info
    </Location>

    ÀÌ·¸°Ô ¼³Á¤Çϸé http://your.host.example.com/server-info¿¡ Á¢±ÙÇÏ¿© ¼­¹ö¿¡ ´ëÇÑ Á¤º¸¸¦ º¼ ¼ö ÀÖ´Ù.

    top

    º¸¾È ¹®Á¦

    Çѹø ¼­¹ö°¡ mod_info¸¦ ÀоîµéÀ̸é, µð·ºÅ丮º° ¼³Á¤ÆÄÀÏ(¿¹¸¦ µé¾î, .htaccess)À» Æ÷ÇÔÇÑ ¸ðµç ¼³Á¤ÆÄÀÏ¿¡¼­ ÀÌ Çڵ鷯 ±â´ÉÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù. ±×·¡¼­ »çÀÌÆ®¿¡ º¸¾È°ü·Ã ¹®Á¦°¡ µÉ ¼ö ÀÖ´Ù.

    ƯÈ÷ ÀÌ ¸ðµâÀº ½Ã½ºÅÛ °æ·Î, »ç¿ëÀÚ¸í/¾ÏÈ£, µ¥ÀÌÅͺ£À̽º À̸§°ú °°ÀÌ ¿©·¯ ¾ÆÆÄÄ¡ ¸ðµâÀÇ ¼³Á¤Áö½Ã¾î¿¡ ±â·ÏÇÑ ¹Î°¨ÇÑ Á¤º¸¸¦ À¯ÃâÇÒ ¼ö ÀÖ´Ù. ±×·¡¼­ ÀÌ ¸ðµâÀº Ç×»ó ÁÖÀÇÇØ¾ß Çϸç ÅëÁ¦µÈ ȯ°æ¿¡¼­¸¸ »ç¿ëÇØ¾ß ÇÑ´Ù.

    ´ÙÀ½°ú °°ÀÌ mod_authz_host¸¦ »ç¿ëÇÏ¿© ¼­¹ö ¼³Á¤ Á¤º¸¿¡ ´ëÇÑ Á¢±ÙÀ» Á¦ÇÑÇÒ ¼ö ÀÖ´Ù.

    Á¢±Ù Á¦¾î

    <Location /server-info>
    SetHandler server-info
    Order allow,deny
    # ÀÚ½ÅÀ¸·Î ºÎÅÍ Á¢±Ù Çã°¡
    Allow from 127.0.0.1
    # Ãß°¡·Î, ±Ùó¿¡ ÀÖ´Â ¿öÅ©½ºÅ×À̼ÇÀ¸·Î ºÎÅÍ Á¢±Ù Çã°¡
    Allow from 192.168.1.17
    </Location>

    top

    º¸¿©ÁÖ´Â Á¤º¸ ¼±ÅÃÇϱâ

    ±âº»ÀûÀ¸·Î ¼­¹ö Á¤º¸¿¡´Â »ç¿ëÇÏ´Â ¸ðµâ ¸ñ·Ï°ú ¸ðµâº°·Î ¸ðµâÀÌ ÀÌÇØÇÏ´Â Áö½Ã¾î ¼³¸í, ¸ðµâÀÌ ±¸ÇöÇÑ ÈÅ(hook), ÇöÀç ¼³Á¤¿¡¼­ »ç¿ëÇÑ Áö½Ã¾î Á¤º¸°¡ ÀÖ´Ù.

    server-info ¿äû¿¡ ÁúÀǹ®ÀÚ¿­À» ºÙ¿©¼­ ¼³Á¤ Á¤º¸¸¦ ´Ù¸£°Ô º¼ ¼ö ÀÖ´Ù. ¿¹¸¦ µé¾î, http://your.host.example.com/server-info?config´Â ¸ðµç ¼³Á¤Áö½Ã¾î¸¦ º¸¿© ÁØ´Ù.

    ?<module-name>
    ¸í½ÃÇÑ ¸ðµâ¿¡ ´ëÇÑ Á¤º¸¸¸
    ?config
    ¸ðµâº°·Î Á¤·ÄÇÏÁö ¾Ê°í, ¼³Á¤Áö½Ã¾î¸¸
    ?hooks
    ¸ðµâÀÌ µî·ÏÇÑ ÈÅ(hook) ¸ñ·Ï¸¸
    ?list
    »ç¿ëÇÏ´Â ¸ðµâ ¸ñ·Ï¸¸
    ?server
    ±âº» ¼­¹ö Á¤º¸¸¸
    top

    ¾Ë·ÁÁø ÇѰè

    mod_info´Â ¿ø·¡ ¼³Á¤ÆÄÀÏÀ» ÀÐÁö ¾Ê°í ÀÌ¹Ì ÀоîµéÀÎ ¼³Á¤ Á¤º¸¸¦ Âü°íÇÏ¿© Á¤º¸¸¦ º¸¿©ÁØ´Ù. ¼³Á¤À» ÆÄ½ÌÇÏ´Â ¹æ¹ý¶§¹®¿¡ ´ÙÀ½°ú °°Àº ¸î°¡Áö ÇѰ谡 ÀÖ´Ù.

    • ÆÄ½ÌÇÑ ¼³Á¤ Á¤º¸¿¡ ±â·ÏÇÏÁö ¾Ê°í Áï½Ã ½ÇÇàµÇ´Â Áö½Ã¾î¸¦ º¸¿©ÁÖÁö ¸øÇÑ´Ù. ServerRoot, LoadModule, LoadFile°ú °°Àº Áö½Ã¾î°¡ ¿©±â¿¡ ÇØ´çÇÑ´Ù.
    • Include, <IfModule>, <IfDefine>°ú °°ÀÌ ¼³Á¤ÆÄÀÏ ÀÚü¸¦ Á¶Á¤ÇÏ´Â Áö½Ã¾î¸¦ º¸¿©ÁÖÁö ¸øÇÑ´Ù. ±×·¯³ª ¾È¿¡ ÀÖ´Â ¼³Á¤Áö½Ã¾î´Â º¸¿©ÁØ´Ù.
    • ÁÖ¼®À» º¸¿©ÁÖÁö ¸øÇÑ´Ù. (ÇѰè¶ó±â º¸´Ù´Â ±â´ÉÀ̶ó°í »ý°¢ÇÒ ¼ö ÀÖ´Ù.)
    • (Áö¼ÓÀûÀÎ ¼­¹ö¼³Á¤ÀÌ ¾Æ´Ï±â ¶§¹®¿¡) .htaccess ÆÄÀÏ¿¡ ÀÖ´Â ¼³Á¤Áö½Ã¾î¸¦ º¸¿©ÁÖÁö ¸øÇÑ´Ù.
    • º¸Åë <Directory>¿Í °°Àº ¹üÀ§Á¦ÇÑ Áö½Ã¾î´Â º¸¿©ÁÖÁö¸¸, mod_info´Â ¸¶Ä¡´Â </Directory>ÀÇ ÁÙ¹øÈ£¸¦ ¾Ë ¼ö ¾ø´Ù.
    • mod_perl°ú °°ÀÌ Á¦»ïÀÚ°¡ ¸¸µç ¸ðµâÀÇ Áö½Ã¾î¸¦ º¸¿©ÁÖÁö ¸øÇÒ ¼ö ÀÖ´Ù.
    top

    AddModuleInfo Áö½Ã¾î

    ¼³¸í:¸ðµâ¿¡ ´ëÇÑ Ãß°¡ Á¤º¸¸¦ server-info Çڵ鷯°¡ º¸¿©ÁÖµµ·Ï Ãß°¡ÇÑ´Ù
    ¹®¹ý:AddModuleInfo module-name string
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Extension
    ¸ðµâ:mod_info
    Áö¿ø:¾ÆÆÄÄ¡ 1.3 ÀÌÈÄ

    module-name ¸ðµâ¿¡ ´ëÇÑ Ãß°¡ Á¤º¸·Î stringÀÇ ³»¿ëÀ» HTML·Î º¸¿©ÁØ´Ù. ¿¹¸¦ µé¾î,

    AddModuleInfo mod_deflate.c 'See <a \
    href="http://www.apache.org/docs/2.4/mod/mod_deflate.html">\
    http://www.apache.org/docs/docs/2.4/mod/mod_deflate.html</a>'

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_watchdog.html0000644000000000000500000000033413362070302017541 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_watchdog.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_watchdog.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/index.html.en0000644000000000000500000005522013455350677016641 0ustar rootsrc Module Index - Apache HTTP Server Version 2.4
    <-

    Module Index

    Available Languages:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Below is a list of all of the modules that come as part of the Apache HTTP Server distribution. See also the complete alphabetical list of all Apache HTTP Server directives.

    top

    Core Features and Multi-Processing Modules

    core
    Core Apache HTTP Server features that are always available
    mpm_common
    A collection of directives that are implemented by more than one multi-processing module (MPM)
    event
    A variant of the worker MPM with the goal of consuming threads only for connections with active processing
    mpm_netware
    Multi-Processing Module implementing an exclusively threaded web server optimized for Novell NetWare
    mpmt_os2
    Hybrid multi-process, multi-threaded MPM for OS/2
    prefork
    Implements a non-threaded, pre-forking web server
    mpm_winnt
    Multi-Processing Module optimized for Windows NT.
    worker
    Multi-Processing Module implementing a hybrid multi-threaded multi-process web server
    top

    Other Modules

     A  |  B  |  C  |  D  |  E  |  F  |  H  |  I  |  L  |  M  |  N  |  P  |  R  |  S  |  U  |  V  |  W  |  X 

    mod_access_compat
    Group authorizations based on host (name or IP address)
    mod_actions
    Execute CGI scripts based on media type or request method.
    mod_alias
    Provides for mapping different parts of the host filesystem in the document tree and for URL redirection
    mod_allowmethods
    Easily restrict what HTTP methods can be used on the server
    mod_asis
    Sends files that contain their own HTTP headers
    mod_auth_basic
    Basic HTTP authentication
    mod_auth_digest
    User authentication using MD5 Digest Authentication
    mod_auth_form
    Form authentication
    mod_authn_anon
    Allows "anonymous" user access to authenticated areas
    mod_authn_core
    Core Authentication
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    User authentication using DBM files
    mod_authn_file
    User authentication using text files
    mod_authn_socache
    Manages a cache of authentication credentials to relieve the load on backends
    mod_authnz_fcgi
    Allows a FastCGI authorizer application to handle Apache httpd authentication and authorization
    mod_authnz_ldap
    Allows an LDAP directory to be used to store the database for HTTP Basic authentication.
    mod_authz_core
    Core Authorization
    mod_authz_dbd
    Group Authorization and Login using SQL
    mod_authz_dbm
    Group authorization using DBM files
    mod_authz_groupfile
    Group authorization using plaintext files
    mod_authz_host
    Group authorizations based on host (name or IP address)
    mod_authz_owner
    Authorization based on file ownership
    mod_authz_user
    User Authorization
    mod_autoindex
    Generates directory indexes, automatically, similar to the Unix ls command or the Win32 dir shell command
    mod_brotli
    Compress content via Brotli before it is delivered to the client
    mod_buffer
    Support for request buffering
    mod_cache
    RFC 2616 compliant HTTP caching filter.
    mod_cache_disk
    Disk based storage module for the HTTP caching filter.
    mod_cache_socache
    Shared object cache (socache) based storage module for the HTTP caching filter.
    mod_cern_meta
    CERN httpd metafile semantics
    mod_cgi
    Execution of CGI scripts
    mod_cgid
    Execution of CGI scripts using an external CGI daemon
    mod_charset_lite
    Specify character set translation or recoding
    mod_data
    Convert response body into an RFC2397 data URL
    mod_dav
    Distributed Authoring and Versioning (WebDAV) functionality
    mod_dav_fs
    Filesystem provider for mod_dav
    mod_dav_lock
    Generic locking module for mod_dav
    mod_dbd
    Manages SQL database connections
    mod_deflate
    Compress content before it is delivered to the client
    mod_dialup
    Send static content at a bandwidth rate limit, defined by the various old modem standards
    mod_dir
    Provides for "trailing slash" redirects and serving directory index files
    mod_dumpio
    Dumps all I/O to error log as desired.
    mod_echo
    A simple echo server to illustrate protocol modules
    mod_env
    Modifies the environment which is passed to CGI scripts and SSI pages
    mod_example_hooks
    Illustrates the Apache module API
    mod_expires
    Generation of Expires and Cache-Control HTTP headers according to user-specified criteria
    mod_ext_filter
    Pass the response body through an external program before delivery to the client
    mod_file_cache
    Caches a static list of files in memory
    mod_filter
    Context-sensitive smart filter configuration module
    mod_headers
    Customization of HTTP request and response headers
    mod_heartbeat
    Sends messages with server status to frontend proxy
    mod_heartmonitor
    Centralized monitor for mod_heartbeat origin servers
    mod_http2
    Support for the HTTP/2 transport layer
    mod_ident
    RFC 1413 ident lookups
    mod_imagemap
    Server-side imagemap processing
    mod_include
    Server-parsed html documents (Server Side Includes)
    mod_info
    Provides a comprehensive overview of the server configuration
    mod_isapi
    ISAPI Extensions within Apache for Windows
    mod_lbmethod_bybusyness
    Pending Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_byrequests
    Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_bytraffic
    Weighted Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_heartbeat
    Heartbeat Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_ldap
    LDAP connection pooling and result caching services for use by other LDAP modules
    mod_log_config
    Logging of the requests made to the server
    mod_log_debug
    Additional configurable debug logging
    mod_log_forensic
    Forensic Logging of the requests made to the server
    mod_logio
    Logging of input and output bytes per request
    mod_lua
    Provides Lua hooks into various portions of the httpd request processing
    mod_macro
    Provides macros within apache httpd runtime configuration files
    mod_md
    Managing domains across virtual hosts, certificate provisioning via the ACME protocol
    mod_mime
    Associates the requested filename's extensions with the file's behavior (handlers and filters) and content (mime-type, language, character set and encoding)
    mod_mime_magic
    Determines the MIME type of a file by looking at a few bytes of its contents
    mod_negotiation
    Provides for content negotiation
    mod_nw_ssl
    Enable SSL encryption for NetWare
    mod_privileges
    Support for Solaris privileges and for running virtual hosts under different user IDs.
    mod_proxy
    Multi-protocol proxy/gateway server
    mod_proxy_ajp
    AJP support module for mod_proxy
    mod_proxy_balancer
    mod_proxy extension for load balancing
    mod_proxy_connect
    mod_proxy extension for CONNECT request handling
    mod_proxy_express
    Dynamic mass reverse proxy extension for mod_proxy
    mod_proxy_fcgi
    FastCGI support module for mod_proxy
    mod_proxy_fdpass
    fdpass external process support module for mod_proxy
    mod_proxy_ftp
    FTP support module for mod_proxy
    mod_proxy_hcheck
    Dynamic health check of Balancer members (workers) for mod_proxy
    mod_proxy_html
    Rewrite HTML links in to ensure they are addressable from Clients' networks in a proxy context.
    mod_proxy_http
    HTTP support module for mod_proxy
    mod_proxy_http2
    HTTP/2 support module for mod_proxy
    mod_proxy_scgi
    SCGI gateway module for mod_proxy
    mod_proxy_uwsgi
    UWSGI gateway module for mod_proxy
    mod_proxy_wstunnel
    Websockets support module for mod_proxy
    mod_ratelimit
    Bandwidth Rate Limiting for Clients
    mod_reflector
    Reflect a request body as a response via the output filter stack.
    mod_remoteip
    Replaces the original client IP address for the connection with the useragent IP address list presented by a proxies or a load balancer via the request headers.
    mod_reqtimeout
    Set timeout and minimum data rate for receiving requests
    mod_request
    Filters to handle and make available HTTP request bodies
    mod_rewrite
    Provides a rule-based rewriting engine to rewrite requested URLs on the fly
    mod_sed
    Filter Input (request) and Output (response) content using sed syntax
    mod_session
    Session support
    mod_session_cookie
    Cookie based session support
    mod_session_crypto
    Session encryption support
    mod_session_dbd
    DBD/SQL based session support
    mod_setenvif
    Allows the setting of environment variables based on characteristics of the request
    mod_slotmem_plain
    Slot-based shared memory provider.
    mod_slotmem_shm
    Slot-based shared memory provider.
    mod_so
    Loading of executable code and modules into the server at start-up or restart time
    mod_socache_dbm
    DBM based shared object cache provider.
    mod_socache_dc
    Distcache based shared object cache provider.
    mod_socache_memcache
    Memcache based shared object cache provider.
    mod_socache_redis
    Redis based shared object cache provider.
    mod_socache_shmcb
    shmcb based shared object cache provider.
    mod_speling
    Attempts to correct mistaken URLs by ignoring capitalization, or attempting to correct various minor misspellings.
    mod_ssl
    Strong cryptography using the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols
    mod_status
    Provides information on server activity and performance
    mod_substitute
    Perform search and replace operations on response bodies
    mod_suexec
    Allows CGI scripts to run as a specified user and Group
    mod_unique_id
    Provides an environment variable with a unique identifier for each request
    mod_unixd
    Basic (required) security for Unix-family platforms.
    mod_userdir
    User-specific directories
    mod_usertrack
    Clickstream logging of user activity on a site
    mod_version
    Version dependent configuration
    mod_vhost_alias
    Provides for dynamically configured mass virtual hosting
    mod_watchdog
    provides infrastructure for other modules to periodically run tasks
    mod_xml2enc
    Enhanced charset/internationalisation support for libxml2-based filter modules

    Available Languages:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/mod/mod_ident.html.ko.euc-kr0000644000000000000500000002274513412755316020666 0ustar rootsrc mod_ident - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_ident

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ¼³¸í:RFC 1413 ident °Ë»ö
    »óÅÂ:Extension
    ¸ðµâ¸í:ident_module
    ¼Ò½ºÆÄÀÏ:mod_ident.c
    Áö¿ø:¾ÆÆÄÄ¡ 2.1 ÀÌÈĺÎÅÍ

    ¿ä¾à

    ÀÌ ¸ðµâÀº ¿¬°áÀÇ ¼ÒÀ¯ÀÚ¸¦ ã±âÀ§ÇØ ¿ø°Ý È£½ºÆ®¿¡ ÀÖ´Â RFC 1413 ȣȯ µ¥¸óÀ» °Ë»öÇÑ´Ù.

    top

    IdentityCheck Áö½Ã¾î

    ¼³¸í:¿ø°Ý »ç¿ëÀÚÀÇ RFC 1413 ½Å¿øÀ» ·Î±×¿¡ ±â·ÏÇÑ´Ù
    ¹®¹ý:IdentityCheck On|Off
    ±âº»°ª:IdentityCheck Off
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory
    »óÅÂ:Extension
    ¸ðµâ:mod_ident
    Áö¿ø:¾ÆÆÄÄ¡ 2.1ºÎÅÍ core¿¡¼­ ºüÁ® ³ª¿Ô´Ù

    ÀÌ Áö½Ã¾î´Â RFC 1413À» ÀÌ¿ëÇÏ¿© Ŭ¶óÀÌ¾ðÆ® ¸Ó½®ÀÌ identd µîÀ» ½ÇÇàÇÑ´Ù¸é ¿¬°á¿¡ ´ëÇÑ ¿ø°Ý »ç¿ëÀÚ¸íÀ» ·Î±×¿¡ ±â·ÏÇÑ´Ù. Çü½Ä¹®ÀÚ¿­·Î %...lÀ» »ç¿ëÇÏ¿© Á¢±Ù ·Î±×¿¡ ÀÌ Á¤º¸¸¦ ±â·ÏÇÑ´Ù.

    ±âº»ÀûÀÎ »ç¿ëÃßÀû ¿ÜÀÇ ¿ëµµ·Î ÀÌ Á¤º¸¸¦ ½Å·ÚÇÒ ¼ö ¾ø´Ù.

    ¿äû¸¶´Ù °Ë»öÀ» ÇØ¾ß Çϱ⶧¹®¿¡ ¼­¹ö Á¢±ÙÀÌ »ó´çÈ÷ Áö¿¬µÇ´Â ¹®Á¦°¡ ¹ß»ýÇÒ ¼ö ÀÖÀ½À» À¯ÀÇÇ϶ó. Áß°£¿¡ ¹æÈ­º®À̳ª ÇÁ·Ï½Ã¼­¹ö°¡ ÀÖ´Ù¸é, ¾Æ¸¶µµ °Ë»öÀº ½ÇÆÐÇÒ °ÍÀÌ°í ¸Å ¿äû¿¡ IdentityCheckTimeout Áö½Ã¾î·Î ÁöÁ¤ÇѸ¸Å­ Áö¿¬ÀÌ ¹ß»ýÇÑ´Ù. ±×·¡¼­ º¸Åë ÀÎÅͳÝÀÇ °ø°³µÈ ¼­¹ö¿¡¼­´Â À¯¿ëÇÏÁö ¾Ê´Ù.

    top

    IdentityCheckTimeout Áö½Ã¾î

    ¼³¸í:ident ¿äûÀÇ ½Ã°£Á¦ÇÑÀ» ÁöÁ¤ÇÑ´Ù
    ¹®¹ý:IdentityCheckTimeout seconds
    ±âº»°ª:IdentityCheckTimeout 30
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory
    »óÅÂ:Extension
    ¸ðµâ:mod_ident

    ÀÌ Áö½Ã¾î´Â ident ¿äûÀÇ ½Ã°£Á¦ÇÑÀ» ÁöÁ¤ÇÑ´Ù. ±âº»°ªÀº ³×Æ®¿÷ Áö¿¬À» °í·ÁÇÏ¿© RFC 1413ÀÌ ±ÇÇÏ´Â 30 ÃÊÀÌ´Ù. ±×·¯³ª ³×Æ®¿÷ ¼Óµµ »óȲ¿¡ µû¶ó ½Ã°£Á¦ÇѰªÀ» ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cgi.html.ko.euc-kr0000644000000000000500000004050113412755316020313 0ustar rootsrc mod_cgi - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_cgi

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:CGI ½ºÅ©¸³Æ® ½ÇÇà
    »óÅÂ:Base
    ¸ðµâ¸í:cgi_module
    ¼Ò½ºÆÄÀÏ:mod_cgi.c

    ¿ä¾à

    ¼­¹ö´Â mime typeÀÌ application/x-httpd-cgiÀ̰ųª (¾ÆÆÄÄ¡ 1.1 ÀÌÈÄ) Çڵ鷯°¡ cgi-scriptÀÎ ¸ðµç ÆÄÀÏÀ» CGI ½ºÅ©¸³Æ®·Î ÀνÄÇÏ¿©, ½ÇÇàÇϰí, ±× °á°ú¸¦ Ŭ¶óÀÌ¾ðÆ®¿¡°Ô º¸³½´Ù. ÆÄÀÏÀÌ AddType Áö½Ã¾î·Î ÁöÁ¤ÇÑ È®ÀåÀÚ¸¦ °¡Áö°Å³ª, ScriptAlias µð·ºÅ丮 ¾È¿¡ ÀÖÀ¸¸é CGI·Î 󸮵ȴÙ.

    ¼­¹ö´Â CGI ½ºÅ©¸³Æ®¸¦ ºÎ¸¦¶§ DOCUMENT_ROOT¶ó´Â ȯ°æº¯¼ö¸¦ Ãß°¡ÇÑ´Ù. ÀÌ º¯¼ö´Â DocumentRoot ¼³Á¤°ªÀ» °¡Áø´Ù.

    ¾ÆÆÄÄ¡¿¡¼­ CGI ½ºÅ©¸³Æ®¸¦ »ç¿ëÇÏ´Â ¹æ¹ý¿¡ ´ëÇÑ ¼Ò°³´Â CGI·Î µ¿Àû ÆäÀÌÁö »ý¼º ÅõÅ丮¾óÀ» Âü°íÇ϶ó.

    À¯´Ð½º¿¡¼­ ´ÙÁß¾²·¹µå MPMÀ» »ç¿ëÇÑ´Ù¸é ÀÌ ¸ðµâ´ë½Å mod_cgid ¸ðµâÀ» »ç¿ëÇØ¾ß ÇÑ´Ù. »ç¿ëÀÚ ÀÔÀå¿¡¼­ ÀÌ µÎ ¸ðµâÀº ±âº»ÀûÀ¸·Î µ¿ÀÏÇÏ´Ù.

    top

    CGI ȯ°æº¯¼ö

    ¼­¹ö´Â ´ÙÀ½°ú °°Àº ¹æ¹ýÀ¸·Î CGI Ç¥ÁØÀÌ ¼³¸íÇÏ´Â CGI ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù:

    PATH_INFO
    ÀÌ º¯¼ö´Â AcceptPathInfo Áö½Ã¾î¸¦ Á÷Á¢ off·Î ÁöÁ¤ÇÑ °æ¿ì¿¡¸¸ ¼³Á¤ÇÑ´Ù. AcceptPathInfo°¡ ¾ø´Â °æ¿ì ¼­¹ö´Â ±âº»ÀûÀ¸·Î °æ·Î Á¤º¸°¡ ÀÖ´Â ¿äû¿¡ ´ëÇØ 404 NOT FOUND ¿À·ù¸¦ ³»Áö¸¸, mod_cgi´Â °æ·Î Á¤º¸¸¦ (URI¿¡¼­ ½ºÅ©¸³Æ® ÆÄÀÏ¸í µÚ¿¡ ³ª¿À´Â /more/path/info) ¹Þ´Â´Ù. AcceptPathInfo Áö½Ã¾î¸¦ »ý·«Çϸé mod_cgi ¿äû¿¡ ´ëÇØ¼­ AcceptPathInfo¸¦ OnÀ¸·Î ¼³Á¤ÇÑ °Í°ú °°´Ù.
    REMOTE_HOST
    ÀÌ º¯¼ö´Â HostnameLookups°¡ onÀ̰í (±âº»°ªÀº off), Á¢¼ÓÇÑ È£½ºÆ® ÁÖ¼Ò¸¦ ¿ªDNS °Ë»öÇÏ¿© ½ÇÁ¦ È£½ºÆ®¸íÀ» ãÀº °æ¿ì¿¡¸¸ ¼³Á¤ÇÑ´Ù.
    REMOTE_IDENT
    ÀÌ º¯¼ö´Â IdentityCheck°¡ onÀ̰í, Á¢¼ÓÇÑ È£½ºÆ®°¡ ident ÇÁ·ÎÅäÄÝÀ» Áö¿øÇÏ´Â °æ¿ì¿¡¸¸ ¼³Á¤ÇÑ´Ù. ½±°Ô ÀÌ °ªÀ» ¼ÓÀÏ ¼ö Àֱ⶧¹®¿¡ ÀÌ º¯¼öÀÇ ³»¿ëÀ» ¹ÏÀ¸¸é ¾ÈµÇ°í, Ŭ¶óÀÌ¾ðÆ®¿Í ¼­¹ö »çÀÌ¿¡ ÇÁ·Ï½Ã°¡ ÀÖ´Ù¸é º¯¼ö ³»¿ëÀÌ ¿ÏÀüÈ÷ ¹«ÀǹÌÇÔÀ» ÁÖÀÇÇ϶ó.
    REMOTE_USER
    CGI ½ºÅ©¸³Æ®°¡ ÀÎÁõÀ» °ÅÃľßÇÏ´Â °æ¿ì¿¡¸¸ ¼³Á¤ÇÑ´Ù.
    top

    CGI µð¹ö±ë

    ¾îµð¿¡¼­ À߸ø ½ÇÇàµÇ´ÂÁö ½ºÅ©¸³Æ®ÀÇ Ãâ·ÂÀ» (Ç¥ÁØÃâ·Â°ú Ç¥ÁØ¿À·ù) º¼ ¼ö ¾ø±â¶§¹®¿¡ CGI ½ºÅ©¸³Æ®´Â ÀüÅëÀûÀ¸·Î µð¹ö±ëÇϱ⠾î·Á¿ü´Ù. ¾ÆÆÄÄ¡ 1.2 ÀÌÈÄ¿¡ Ãß°¡µÈ Áö½Ã¾î¸¦ »ç¿ëÇÏ¸é ¹ß»ýÇÑ ¿À·ù¸¦ ÀÚ¼¼È÷ ·Î±×¿¡ ³²±æ ¼ö ÀÖ´Ù.

    CGI ·Î±×ÆÄÀÏ Çü½Ä

    CGI ¿À·ù·Î±×´Â Á¤»óÀûÀ¸·Î ½ÇÇàÇÏÁö ¸øÇÑ CGI¸¦ ±â·ÏÇÑ´Ù. ¿À·ù°¡ ¹ß»ýÇÑ CGI ½ºÅ©¸³Æ®´Â ·Î±×¿¡ ¿©·¯ ÁÙÀÇ Á¤º¸¸¦ ³²±ä´Ù. ù¹øÂ° µÎ ÁÙÀº Ç×»ó ¾Æ·¡¿Í °°Àº Çü½ÄÀÌ´Ù:

    %% [½Ã°£] ¿äûÁÙ
    %% HTTP-»óÅ CGI-½ºÅ©¸³Æ®-ÆÄÀϸí

    CGI ½ºÅ©¸³Æ®¸¦ ½ÇÇàÇÒ ¼ö ¾ø´Â ¿À·ùÀÎ °æ¿ì ·Î±×ÆÄÀÏ¿¡ Ãß°¡·Î µÎ ÁÙÀ» ´õ ±â·ÏÇÑ´Ù:

    %%error
    ¿À·ù¹®

    ½ºÅ©¸³Æ®°¡ (º¸Åë ½ºÅ©¸³Æ®ÀÇ ¹ö±×¶§¹®¿¡) À߸øµÈ Çì´õ Á¤º¸¸¦ ¹ÝȯÇÏ´Â °æ¿ì, ´ÙÀ½ ³»¿ëÀ» ·Î±×¿¡ ±â·ÏÇÑ´Ù:

    %request
    ¹ÞÀº ¸ðµç HTTP Çì´õ
    (ÀÖ´Ù¸é) POST³ª PUT ³»¿ë
    %response
    CGI ½ºÅ©¸³Æ® Ãâ·ÂÀÇ ¸ðµç Çì´õ
    %stdout
    CGI Ç¥ÁØÃâ·Â
    %stderr
    CGI Ç¥ÁØ¿À·ù

    (½ºÅ©¸³Æ®°¡ Ç¥ÁØÃâ·ÂÀ̳ª Ç¥ÁØ¿À·ù¿¡ ¾Æ¹« ³»¿ëµµ Ãâ·ÂÇÏÁö ¾Ê¾Ò´Ù¸é %stdout°ú %stderr ºÎºÐÀº »ý·«µÉ ¼ö ÀÖ´Ù).

    top

    ScriptLog Áö½Ã¾î

    ¼³¸í:CGI ½ºÅ©¸³Æ® ¿À·ù·Î±×ÆÄÀÏÀÇ À§Ä¡
    ¹®¹ý:ScriptLog file-path
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Base
    ¸ðµâ:mod_cgi, mod_cgid

    ScriptLog Áö½Ã¾î´Â CGI ½ºÅ©¸³Æ® ¿À·ù·Î±×ÆÄÀÏÀ» ÁöÁ¤ÇÑ´Ù. ScriptLog¸¦ »ç¿ëÇÏÁö¾ÊÀ¸¸é ¿À·ù·Î±×¸¦ ¸¸µéÁö ¾Ê´Â´Ù. »ç¿ëÇÏ¸é ¾Æ±Ô¸ÕÆ®·Î ÁöÁ¤ÇÑ ÆÄÀÏ¿¡ CGI ¿À·ù¸¦ ±â·ÏÇÑ´Ù. »ó´ë°æ·Î¸¦ ÁöÁ¤Çϸé ServerRoot¿¡ »ó´ë°æ·Î·Î ¹Þ¾ÆµéÀδÙ.

    ¿¹Á¦

    ScriptLog logs/cgi_log

    ÀÚ½Ä ÇÁ·Î¼¼½º¸¦ ½ÇÇàÇÏ´Â »ç¿ëÀÚ, Áï User Áö½Ã¾î·Î ÁöÁ¤ÇÑ »ç¿ëÀÚ ±ÇÇÑÀ¸·Î ·Î±×¸¦ ¿¬´Ù. ±×·¡¼­ ±× »ç¿ëÀÚ°¡ ½ºÅ©¸³Æ® ·Î±×°¡ ÀÖ´Â µð·ºÅ丮¿¡ ¾²±â±ÇÇÑÀÌ ÀÖ´øÁö, Á÷Á¢ ¹Ì¸® ÆÄÀÏÀ» ¸¸µé¾î¼­ ±× »ç¿ëÀÚ¿¡°Ô ¾²±â±ÇÇÑÀ» Áà¾ß ÇÑ´Ù. ½ºÅ©¸³Æ® ·Î±×¸¦ ÁÖ ·Î±× µð·ºÅ丮¿¡ µÐ´Ù¸é ÀÚ½Ä ÇÁ·Î¼¼½º¸¦ ½ÇÇàÇÏ´Â »ç¿ëÀÚ¿¡°Ô ¾²±â±ÇÇÑÀ» ÁÖ±âÀ§ÇØ µð·ºÅ丮 ±ÇÇÑÀ» º¯°æÇÏÁö ¸¶¶ó.

    ½ºÅ©¸³Æ® ·Î±×´Â CGI ½ºÅ©¸³Æ®¸¦ ÀÛ¼ºÇÒ¶§ µð¹ö±ëÀ» À§ÇÑ ¿ëµµÀÌÁö ¼­¹ö¸¦ ½ÇÇàÇÏ´Â µ¿¾È °è¼Ó »ç¿ëÇϱâÀ§ÇÔÀÌ ¾Æ´ÔÀ» ÁÖÀÇÇ϶ó. ¼Óµµ¿Í È¿À²¼º¸é¿¡¼­ ÃÖÀûÈ­°¡ ¾ÈµÇÀÖ°í, ¼³°èÇÑ ¸ñÀûÀÌ¿ÜÀÇ ¹æ¹ýÀ¸·Î »ç¿ëÇÏ¸é º¸¾È»ó ¹®Á¦°¡ µÉ ¼ö ÀÖ´Ù.

    top

    ScriptLogBuffer Áö½Ã¾î

    ¼³¸í:½ºÅ©¸³Æ® ·Î±×¿¡ ±â·ÏÇÒ PUT ȤÀº POST ¿äûÀÇ ÃÖ´ë·®
    ¹®¹ý:ScriptLogBuffer bytes
    ±âº»°ª:ScriptLogBuffer 1024
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Base
    ¸ðµâ:mod_cgi, mod_cgid

    Å« ³»¿ëÀ» ¹Þ¾Æ¼­ ·Î±×ÆÄÀÏÀÌ ³Ê¹« »¡¸® Ä¿Áö´Â Çö»óÀ» ¸·±âÀ§ÇØ ÆÄÀÏ¿¡ ±â·ÏÇÒ PUT ȤÀº POST ³»¿ëÀÇ Å©±â¸¦ Á¦ÇÑÇÑ´Ù. ±âº»ÀûÀ¸·Î 1024 ¹ÙÀÌÆ®±îÁö ·Î±×¿¡ ±â·ÏÇÏÁö¸¸, ÀÌ Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù.

    top

    ScriptLogLength Áö½Ã¾î

    ¼³¸í:CGI ½ºÅ©¸³Æ® ·Î±×ÆÄÀÏÀÇ Å©±â Á¦ÇÑ
    ¹®¹ý:ScriptLogLength bytes
    ±âº»°ª:ScriptLogLength 10385760
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Base
    ¸ðµâ:mod_cgi, mod_cgid

    ScriptLogLength´Â CGI ½ºÅ©¸³Æ® ·Î±×ÆÄÀÏÀÇ Å©±â¸¦ Á¦ÇÑÇÑ´Ù. CGI ¿À·ù°¡ ¹ß»ýÇÒ¶§¸¶´Ù (¸ðµç ¿äû Çì´õ, ¸ðµç ½ºÅ©¸³Æ® Ãâ·Â µî) ¸¹Àº Á¤º¸°¡ ·Î±×¿¡ ±â·ÏµÇ±â¶§¹®¿¡ ÆÄÀÏÀÌ ¸Å¿ì Ä¿Áú ¼ö ÀÖ´Ù. ÆÄÀÏÀÌ ¹«ÇÑÈ÷ Ä¿Áö´Â ¹®Á¦¸¦ ¸·±âÀ§ÇØ ÀÌ Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© CGI ·Î±×ÆÄÀÏÀÇ ÃÖ´ë ÆÄÀÏÅ©±â¸¦ ¼³Á¤ÇÑ´Ù. ÆÄÀÏÀÇ Å©±â°¡ ¼³Á¤ÇÑ °ªÀ» ³ÑÀ¸¸é ´õ ÀÌ»ó Á¤º¸¸¦ ±â·ÏÇÏÁö¾Ê´Â´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_example_hooks.html.en0000644000000000000500000002632313412755316021221 0ustar rootsrc mod_example_hooks - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_example_hooks

    Available Languages:  en  |  fr  |  ko 

    Description:Illustrates the Apache module API
    Status:Experimental
    Module Identifier:example_hooks_module
    Source File:mod_example_hooks.c

    Summary

    The files in the modules/examples directory under the Apache distribution directory tree are provided as an example to those that wish to write modules that use the Apache API.

    The main file is mod_example_hooks.c, which illustrates all the different callback mechanisms and call syntaxes. By no means does an add-on module need to include routines for all of the callbacks - quite the contrary!

    The example module is an actual working module. If you link it into your server, enable the "example-hooks-handler" handler for a location, and then browse to that location, you will see a display of some of the tracing the example module did as the various callbacks were made.

    top

    Compiling the example_hooks module

    To include the example_hooks module in your server, follow the steps below:

    1. Run configure with --enable-example-hooks option.
    2. Make the server (run "make").

    To add another module of your own:

    1. cp modules/examples/mod_example_hooks.c modules/new_module/mod_myexample.c
    2. Modify the file.
    3. Create modules/new_module/config.m4.
      1. Add APACHE_MODPATH_INIT(new_module).
      2. Copy APACHE_MODULE line with "example_hooks" from modules/examples/config.m4.
      3. Replace the first argument "example_hooks" with myexample.
      4. Replace the second argument with brief description of your module. It will be used in configure --help.
      5. If your module needs additional C compiler flags, linker flags or libraries, add them to CFLAGS, LDFLAGS and LIBS accordingly. See other config.m4 files in modules directory for examples.
      6. Add APACHE_MODPATH_FINISH.
    4. Create module/new_module/Makefile.in. If your module doesn't need special build instructions, all you need to have in that file is include $(top_srcdir)/build/special.mk.
    5. Run ./buildconf from the top-level directory.
    6. Build the server with --enable-myexample
    top

    Using the mod_example_hooks Module

    To activate the example_hooks module, include a block similar to the following in your httpd.conf file:

    <Location "/example-hooks-info">
       SetHandler example-hooks-handler
    </Location>

    As an alternative, you can put the following into a .htaccess file and then request the file "test.example" from that location:

    AddHandler example-hooks-handler ".example"

    After reloading/restarting your server, you should be able to browse to this location and see the brief display mentioned earlier.

    top

    Example Directive

    Description:Demonstration directive to illustrate the Apache module API
    Syntax:Example
    Context:server config, virtual host, directory, .htaccess
    Status:Experimental
    Module:mod_example_hooks

    The Example directive just sets a demonstration flag which the example module's content handler displays. It takes no arguments. If you browse to an URL to which the example-hooks content-handler applies, you will get a display of the routines within the module and how and in what order they were called to service the document request. The effect of this directive one can observe under the point "Example directive declared here: YES/NO".

    Available Languages:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_setenvif.html.en0000644000000000000500000005254213412755316020210 0ustar rootsrc mod_setenvif - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_setenvif

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Allows the setting of environment variables based on characteristics of the request
    Status:Base
    Module Identifier:setenvif_module
    Source File:mod_setenvif.c

    Summary

    The mod_setenvif module allows you to set internal environment variables according to whether different aspects of the request match regular expressions you specify. These environment variables can be used by other parts of the server to make decisions about actions to be taken, as well as becoming available to CGI scripts and SSI pages.

    The directives are considered in the order they appear in the configuration files. So more complex sequences can be used, such as this example, which sets netscape if the browser is mozilla but not MSIE.

    BrowserMatch ^Mozilla netscape
    BrowserMatch MSIE !netscape

    When the server looks up a path via an internal subrequest such as looking for a DirectoryIndex or generating a directory listing with mod_autoindex, per-request environment variables are not inherited in the subrequest. Additionally, SetEnvIf directives are not separately evaluated in the subrequest due to the API phases mod_setenvif takes action in.

    top

    BrowserMatch Directive

    Description:Sets environment variables conditional on HTTP User-Agent
    Syntax:BrowserMatch regex [!]env-variable[=value] [[!]env-variable[=value]] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_setenvif

    The BrowserMatch is a special cases of the SetEnvIf directive that sets environment variables conditional on the User-Agent HTTP request header. The following two lines have the same effect:

    BrowserMatch Robot is_a_robot
    SetEnvIf User-Agent Robot is_a_robot

    Some additional examples:

    BrowserMatch ^Mozilla forms jpeg=yes browser=netscape
    BrowserMatch "^Mozilla/[2-3]" tables agif frames javascript
    BrowserMatch MSIE !javascript
    top

    BrowserMatchNoCase Directive

    Description:Sets environment variables conditional on User-Agent without respect to case
    Syntax:BrowserMatchNoCase regex [!]env-variable[=value] [[!]env-variable[=value]] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_setenvif

    The BrowserMatchNoCase directive is semantically identical to the BrowserMatch directive. However, it provides for case-insensitive matching. For example:

    BrowserMatchNoCase mac platform=macintosh
    BrowserMatchNoCase win platform=windows

    The BrowserMatch and BrowserMatchNoCase directives are special cases of the SetEnvIf and SetEnvIfNoCase directives. The following two lines have the same effect:

    BrowserMatchNoCase Robot is_a_robot
    SetEnvIfNoCase User-Agent Robot is_a_robot
    top

    SetEnvIf Directive

    Description:Sets environment variables based on attributes of the request
    Syntax:SetEnvIf attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_setenvif

    The SetEnvIf directive defines environment variables based on attributes of the request. The attribute specified in the first argument can be one of four things:

    1. An HTTP request header field (see RFC2616 for more information about these); for example: Host, User-Agent, Referer, and Accept-Language. A regular expression may be used to specify a set of request headers.
    2. One of the following aspects of the request:
      • Remote_Host - the hostname (if available) of the client making the request
      • Remote_Addr - the IP address of the client making the request
      • Server_Addr - the IP address of the server on which the request was received (only with versions later than 2.0.43)
      • Request_Method - the name of the method being used (GET, POST, et cetera)
      • Request_Protocol - the name and version of the protocol with which the request was made (e.g., "HTTP/0.9", "HTTP/1.1", etc.)
      • Request_URI - the resource requested on the HTTP request line -- generally the portion of the URL following the scheme and host portion without the query string. See the RewriteCond directive of mod_rewrite for extra information on how to match your query string.
    3. The name of an environment variable in the list of those associated with the request. This allows SetEnvIf directives to test against the result of prior matches. Only those environment variables defined by earlier SetEnvIf[NoCase] directives are available for testing in this manner. 'Earlier' means that they were defined at a broader scope (such as server-wide) or previously in the current directive's scope. Environment variables will be considered only if there was no match among request characteristics and a regular expression was not used for the attribute.

    The second argument (regex) is a regular expression. If the regex matches against the attribute, then the remainder of the arguments are evaluated.

    The rest of the arguments give the names of variables to set, and optionally values to which they should be set. These take the form of

    1. varname, or
    2. !varname, or
    3. varname=value

    In the first form, the value will be set to "1". The second will remove the given variable if already defined, and the third will set the variable to the literal value given by value. Since version 2.0.51, Apache httpd will recognize occurrences of $1..$9 within value and replace them by parenthesized subexpressions of regex. $0 provides access to the whole string matched by that pattern.

    SetEnvIf Request_URI "\.gif$" object_is_image=gif
    SetEnvIf Request_URI "\.jpg$" object_is_image=jpg
    SetEnvIf Request_URI "\.xbm$" object_is_image=xbm
        
    SetEnvIf Referer www\.mydomain\.example\.com intra_site_referral
        
    SetEnvIf object_is_image xbm XBIT_PROCESSING=1
        
    SetEnvIf Request_URI "\.(.*)$" EXTENSION=$1
    
    SetEnvIf ^TS  ^[a-z]  HAVE_TS

    The first three will set the environment variable object_is_image if the request was for an image file, and the fourth sets intra_site_referral if the referring page was somewhere on the www.mydomain.example.com Web site.

    The last example will set environment variable HAVE_TS if the request contains any headers that begin with "TS" whose values begins with any character in the set [a-z].

    See also

    top

    SetEnvIfExpr Directive

    Description:Sets environment variables based on an ap_expr expression
    Syntax:SetEnvIfExpr expr [!]env-variable[=value] [[!]env-variable[=value]] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_setenvif

    The SetEnvIfExpr directive defines environment variables based on an <If> ap_expr. These expressions will be evaluated at runtime, and applied env-variable in the same fashion as SetEnvIf.

    SetEnvIfExpr "tolower(req('X-Sendfile')) == 'd:\images\very_big.iso')" iso_delivered

    This would set the environment variable iso_delivered every time our application attempts to send it via X-Sendfile

    A more useful example would be to set the variable rfc1918 if the remote IP address is a private address according to RFC 1918:

    SetEnvIfExpr "-R '10.0.0.0/8' || -R '172.16.0.0/12' || -R '192.168.0.0/16'" rfc1918

    See also

    top

    SetEnvIfNoCase Directive

    Description:Sets environment variables based on attributes of the request without respect to case
    Syntax:SetEnvIfNoCase attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_setenvif

    The SetEnvIfNoCase is semantically identical to the SetEnvIf directive, and differs only in that the regular expression matching is performed in a case-insensitive manner. For example:

    SetEnvIfNoCase Host Example\.Org site=example

    This will cause the site environment variable to be set to "example" if the HTTP request header field Host: was included and contained Example.Org, example.org, or any other combination.

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/module-dict.html.en0000644000000000000500000002235313412755316017731 0ustar rootsrc Terms Used to Describe Modules - Apache HTTP Server Version 2.4
    <-

    Terms Used to Describe Modules

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    This document describes the terms that are used to describe each Apache module.

    top

    Description

    A brief description of the purpose of the module.

    top

    Status

    This indicates how tightly bound into the Apache Web server the module is; in other words, you may need to recompile the server in order to gain access to the module and its functionality. Possible values for this attribute are:

    MPM
    A module with status "MPM" is a Multi-Processing Module. Unlike the other types of modules, Apache must have one and only one MPM in use at any time. This type of module is responsible for basic request handling and dispatching.
    Base
    A module labeled as having "Base" status is compiled and loaded into the server by default, and is therefore normally available unless you have taken steps to remove the module from your configuration.
    Extension
    A module with "Extension" status is not normally compiled and loaded into the server. To enable the module and its functionality, you may need to change the server build configuration files and re-compile Apache.
    Experimental
    "Experimental" status indicates that the module is available as part of the Apache kit, but you are on your own if you try to use it. The module is being documented for completeness, and is not necessarily supported.
    External
    Modules which are not included with the base Apache distribution ("third-party modules") may use the "External" status. We are not responsible for, nor do we support such modules.
    top

    Source File

    This quite simply lists the name of the source file which contains the code for the module. This is also the name used by the <IfModule> directive.

    top

    Module Identifier

    This is a string which identifies the module for use in the LoadModule directive when dynamically loading modules. In particular, it is the name of the external variable of type module in the source file.

    top

    Compatibility

    If the module was not part of the original Apache version 2 distribution, the version in which it was introduced should be listed here. In addition, if the module is limited to particular platforms, the details will be listed here.

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_auth_digest.html.en0000644000000000000500000005017413412755316020664 0ustar rootsrc mod_auth_digest - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_auth_digest

    Available Languages:  en  |  fr  |  ko 

    Description:User authentication using MD5 Digest Authentication
    Status:Extension
    Module Identifier:auth_digest_module
    Source File:mod_auth_digest.c

    Summary

    This module implements HTTP Digest Authentication (RFC2617), and provides an alternative to mod_auth_basic where the password is not transmitted as cleartext. However, this does not lead to a significant security advantage over basic authentication. On the other hand, the password storage on the server is much less secure with digest authentication than with basic authentication. Therefore, using basic auth and encrypting the whole connection using mod_ssl is a much better alternative.

    top

    Using Digest Authentication

    To use MD5 Digest authentication, configure the location to be protected as shown in the below example:

    Example:

    <Location "/private/">
        AuthType Digest
        AuthName "private area"
        AuthDigestDomain "/private/" "http://mirror.my.dom/private2/"
        
        AuthDigestProvider file
        AuthUserFile "/web/auth/.digest_pw"
        Require valid-user
    </Location>

    AuthDigestDomain should list the locations that will be protected by this configuration.

    The pasword file referenced in the AuthUserFile directive may be created and managed using the htdigest tool.

    Note

    Digest authentication was intended to be more secure than basic authentication, but no longer fulfills that design goal. A man-in-the-middle attacker can trivially force the browser to downgrade to basic authentication. And even a passive eavesdropper can brute-force the password using today's graphics hardware, because the hashing algorithm used by digest authentication is too fast. Another problem is that the storage of the passwords on the server is insecure. The contents of a stolen htdigest file can be used directly for digest authentication. Therefore using mod_ssl to encrypt the whole connection is strongly recommended.

    mod_auth_digest only works properly on platforms where APR supports shared memory.

    top

    AuthDigestAlgorithm Directive

    Description:Selects the algorithm used to calculate the challenge and response hashes in digest authentication
    Syntax:AuthDigestAlgorithm MD5|MD5-sess
    Default:AuthDigestAlgorithm MD5
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_auth_digest

    The AuthDigestAlgorithm directive selects the algorithm used to calculate the challenge and response hashes.

    MD5-sess is not correctly implemented yet.
    top

    AuthDigestDomain Directive

    Description:URIs that are in the same protection space for digest authentication
    Syntax:AuthDigestDomain URI [URI] ...
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_auth_digest

    The AuthDigestDomain directive allows you to specify one or more URIs which are in the same protection space (i.e. use the same realm and username/password info). The specified URIs are prefixes; the client will assume that all URIs "below" these are also protected by the same username/password. The URIs may be either absolute URIs (i.e. including a scheme, host, port, etc.) or relative URIs.

    This directive should always be specified and contain at least the (set of) root URI(s) for this space. Omitting to do so will cause the client to send the Authorization header for every request sent to this server.

    The URIs specified can also point to different servers, in which case clients (which understand this) will then share username/password info across multiple servers without prompting the user each time.

    top

    AuthDigestNonceLifetime Directive

    Description:How long the server nonce is valid
    Syntax:AuthDigestNonceLifetime seconds
    Default:AuthDigestNonceLifetime 300
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_auth_digest

    The AuthDigestNonceLifetime directive controls how long the server nonce is valid. When the client contacts the server using an expired nonce the server will send back a 401 with stale=true. If seconds is greater than 0 then it specifies the amount of time for which the nonce is valid; this should probably never be set to less than 10 seconds. If seconds is less than 0 then the nonce never expires.

    top

    AuthDigestProvider Directive

    Description:Sets the authentication provider(s) for this location
    Syntax:AuthDigestProvider provider-name [provider-name] ...
    Default:AuthDigestProvider file
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_auth_digest

    The AuthDigestProvider directive sets which provider is used to authenticate the users for this location. The default file provider is implemented by the mod_authn_file module. Make sure that the chosen provider module is present in the server.

    See mod_authn_dbm, mod_authn_file, mod_authn_dbd and mod_authn_socache for providers.

    top

    AuthDigestQop Directive

    Description:Determines the quality-of-protection to use in digest authentication
    Syntax:AuthDigestQop none|auth|auth-int [auth|auth-int]
    Default:AuthDigestQop auth
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_auth_digest

    The AuthDigestQop directive determines the quality-of-protection to use. auth will only do authentication (username/password); auth-int is authentication plus integrity checking (an MD5 hash of the entity is also computed and checked); none will cause the module to use the old RFC-2069 digest algorithm (which does not include integrity checking). Both auth and auth-int may be specified, in which the case the browser will choose which of these to use. none should only be used if the browser for some reason does not like the challenge it receives otherwise.

    auth-int is not implemented yet.
    top

    AuthDigestShmemSize Directive

    Description:The amount of shared memory to allocate for keeping track of clients
    Syntax:AuthDigestShmemSize size
    Default:AuthDigestShmemSize 1000
    Context:server config
    Status:Extension
    Module:mod_auth_digest

    The AuthDigestShmemSize directive defines the amount of shared memory, that will be allocated at the server startup for keeping track of clients. Note that the shared memory segment cannot be set less than the space that is necessary for tracking at least one client. This value is dependent on your system. If you want to find out the exact value, you may simply set AuthDigestShmemSize to the value of 0 and read the error message after trying to start the server.

    The size is normally expressed in Bytes, but you may follow the number with a K or an M to express your value as KBytes or MBytes. For example, the following directives are all equivalent:

    AuthDigestShmemSize 1048576
    AuthDigestShmemSize 1024K
    AuthDigestShmemSize 1M

    Available Languages:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_dbm.html.en0000644000000000000500000003157213412755316020342 0ustar rootsrc mod_authz_dbm - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authz_dbm

    Available Languages:  en  |  fr  |  ko 

    Description:Group authorization using DBM files
    Status:Extension
    Module Identifier:authz_dbm_module
    Source File:mod_authz_dbm.c
    Compatibility:Available in Apache 2.1 and later

    Summary

    This module provides authorization capabilities so that authenticated users can be allowed or denied access to portions of the web site by group membership. Similar functionality is provided by mod_authz_groupfile.

    top

    The Require Directives

    Apache's Require directives are used during the authorization phase to ensure that a user is allowed to access a resource. mod_authz_dbm extends the authorization types with dbm-group.

    Since v2.4.8, expressions are supported within the DBM require directives.

    Require dbm-group

    This directive specifies group membership that is required for the user to gain access.

    Require dbm-group admin

    Require dbm-file-group

    When this directive is specified, the user must be a member of the group assigned to the file being accessed.

    Require dbm-file-group
    top

    Example usage

    Note that using mod_authz_dbm requires you to require dbm-group instead of group:

    <Directory "/foo/bar">
      AuthType Basic
      AuthName "Secure Area"
      AuthBasicProvider dbm
      AuthDBMUserFile "site/data/users"
      AuthDBMGroupFile "site/data/users"
      Require dbm-group admin
    </Directory>
    top

    AuthDBMGroupFile Directive

    Description:Sets the name of the database file containing the list of user groups for authorization
    Syntax:AuthDBMGroupFile file-path
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authz_dbm

    The AuthDBMGroupFile directive sets the name of a DBM file containing the list of user groups for user authorization. File-path is the absolute path to the group file.

    The group file is keyed on the username. The value for a user is a comma-separated list of the groups to which the users belongs. There must be no whitespace within the value, and it must never contain any colons.

    Security

    Make sure that the AuthDBMGroupFile is stored outside the document tree of the web-server. Do not put it in the directory that it protects. Otherwise, clients will be able to download the AuthDBMGroupFile unless otherwise protected.

    Combining Group and Password DBM files: In some cases it is easier to manage a single database which contains both the password and group details for each user. This simplifies any support programs that need to be written: they now only have to deal with writing to and locking a single DBM file. This can be accomplished by first setting the group and password files to point to the same DBM:

    AuthDBMGroupFile "/www/userbase"
    AuthDBMUserFile "/www/userbase"

    The key for the single DBM is the username. The value consists of

    Encrypted Password : List of Groups [ : (ignored) ]

    The password section contains the encrypted password as before. This is followed by a colon and the comma separated list of groups. Other data may optionally be left in the DBM file after another colon; it is ignored by the authorization module. This is what www.telescope.org uses for its combined password and group database.

    top

    AuthzDBMType Directive

    Description:Sets the type of database file that is used to store list of user groups
    Syntax:AuthzDBMType default|SDBM|GDBM|NDBM|DB
    Default:AuthzDBMType default
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authz_dbm

    Sets the type of database file that is used to store the list of user groups. The default database type is determined at compile time. The availability of other types of database files also depends on compile-time settings.

    It is crucial that whatever program you use to create your group files is configured to use the same type of database.

    Available Languages:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_version.html.ja.utf80000644000000000000500000002560413412755316020726 0ustar rootsrc mod_version - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_version

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    説明:ãƒãƒ¼ã‚¸ãƒ§ãƒ³ä¾å­˜ã®è¨­å®š
    ステータス:Extension
    モジュール識別å­:version_module
    ソースファイル:mod_version.c

    概è¦

    様々ãªãƒãƒ¼ã‚¸ãƒ§ãƒ³ã® httpd ã®ç•°ãªã‚‹è¨­å®šã‚’扱ã†ã“ã¨ã«ãªã‚‹ã€ ãƒ†ã‚¹ãƒˆã‚¹ã‚¤ãƒ¼ãƒˆã‚„å¤§è¦æ¨¡ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã§ã®ä½¿ç”¨ã®ãŸã‚ã«è¨­è¨ˆã•れã¦ã„ã¾ã™ã€‚ ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯æ–°ã—ã„コンテナ ― <IfVersion> ã‚’ æä¾›ã—ã¾ã™ã€‚ã“れを使ã†ã¨ã€æ•°å­—ã®æ¯”較や正è¦è¡¨ç¾ã«ã‚ˆã‚‹æŸ”軟㪠ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãƒã‚§ãƒƒã‚¯ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚

    例

    <IfVersion 2.4.2>
        # current httpd version is exactly 2.4.2
    </IfVersion>
    
    <IfVersion >= 2.5>
        # use really new features :-)
    </IfVersion>

    詳細ã¯ä»¥ä¸‹ã‚’読んã§ãã ã•ã„。

    Support Apache!

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    <IfVersion> ディレクティブ

    説明:ãƒãƒ¼ã‚¸ãƒ§ãƒ³ä¾å­˜ã®è¨­å®šã‚’入れる
    æ§‹æ–‡:<IfVersion [[!]operator] version> ... </IfVersion>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Extension
    モジュール:mod_version

    <IfVersion> 㯠httpd ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ ãŒåŸºæº–を満ãŸã—ãŸã¨ãã«ã®ã¿å®Ÿè¡Œã•ã›ãŸã„ディレクティブを囲ã¿ã¾ã™ã€‚ 通常㮠(数値) 比較ã®ã¨ã㯠version 引数㯠major[.minor[.patch]] ã¨ã„ㆠ形å¼ã€ä¾‹ãˆã°ã€2.1.0 ã‚„ 2.2 ã¨ãªã‚Šã¾ã™ã€‚ minor 㨠patch ã¯çœç•¥å¯èƒ½ã§ã™ã€‚çœç•¥ã•れãŸå ´åˆã¯ã€ 0 を指定ã—ãŸã‚‚ã®ã¨ã¿ãªã•れã¾ã™ã€‚比較ã«ã¯æ¬¡ã®æ•°å€¤ operator ã‚’ 指定ã§ãã¾ã™:

    operator説明
    = 㨠== åŒã˜ httpd ãƒãƒ¼ã‚¸ãƒ§ãƒ³
    > より大ãã„ httpd ãƒãƒ¼ã‚¸ãƒ§ãƒ³
    >= 指定以上㮠httpd ãƒãƒ¼ã‚¸ãƒ§ãƒ³
    < 指定未満㮠httpd ãƒãƒ¼ã‚¸ãƒ§ãƒ³
    <= 指定以下㮠httpd ãƒãƒ¼ã‚¸ãƒ§ãƒ³

    例

    <IfVersion >= 2.3>
        # this happens only in versions greater or
        # equal 2.3.0.
    </IfVersion>

    数値比較ã«åŠ ãˆã¦ã€http ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ç•ªå·ã«å¯¾ã—㦠正è¦è¡¨ç¾ã«ã‚ˆã‚‹ マッãƒãƒ³ã‚°ãŒã§ãã¾ã™ã€‚äºŒç¨®é¡žã®æ›¸ãæ–¹ãŒã‚りã¾ã™:

    operator説明
    = or == version 㯠/regex/ å½¢å¼
    ~ version 㯠regex å½¢å¼

    例

    <IfVersion = /^2.4.[01234]$/>
        # e.g. workaround for buggy versions
    </IfVersion>

    マッãƒãƒ³ã‚°ã®å¦å®šã‚’表ç¾ã™ã‚‹ãŸã‚ã«ã€ã™ã¹ã¦ã®ã‚ªãƒšãƒ¬ãƒ¼ã‚¿ã¯å‰ã« 感嘆符 (!)を付ã‘ã‚‹ã“ã¨ãŒã§ãã¾ã™:

    <IfVersion !~ ^2.4.[01234]$>
        # not for those versions
    </IfVersion>

    operator ãŒçœç•¥ã•れãŸã¨ã㯠= 㨠ã¿ãªã•れã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_vhost_alias.html0000644000000000000500000000050113362070302020251 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_vhost_alias.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_vhost_alias.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_vhost_alias.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_slotmem_shm.html.en0000644000000000000500000002132213412755316020704 0ustar rootsrc mod_slotmem_shm - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_slotmem_shm

    Available Languages:  en  |  fr 

    Description:Slot-based shared memory provider.
    Status:Extension
    Module Identifier:slotmem_shm_module
    Source File:mod_slotmem_shm.c

    Summary

    mod_slotmem_shm is a memory provider which provides for creation and access to a shared memory segment in which the datasets are organized in "slots."

    All shared memory is cleared and cleaned with each restart, whether graceful or not. The data itself is stored and restored within a file noted by the name parameter in the create and attach calls. If not specified with an absolute path, the file will be created relative to the path specified by the DefaultRuntimeDir directive.

    mod_slotmem_shm provides the following API functions:

    /* call the callback on all worker slots */
    apr_status_t doall(ap_slotmem_instance_t *s, ap_slotmem_callback_fn_t *func, void *data, apr_pool_t *pool)
    
    /* create a new slotmem with each item size is item_size. 'name' is used to generate a filename for the persistent
       store of the shared memory if configured. Values are:
          "none"                - Anonymous shared memory and no persistent store
          "file-name"           - [DefaultRuntimeDir]/file-name
          "/absolute-file-name" - Absolute file name */
    apr_status_t create(ap_slotmem_instance_t **new, const char *name, apr_size_t item_size, unsigned int item_num, ap_slotmem_type_t type, apr_pool_t *pool)
    
    /* attach to an existing slotmem. See 'create()' for description of 'name' parameter */
    apr_status_t attach(ap_slotmem_instance_t **new, const char *name, apr_size_t *item_size, unsigned int *item_num, apr_pool_t *pool)
    
    /* get the direct pointer to the memory associated with this worker slot */
    apr_status_t dptr(ap_slotmem_instance_t *s, unsigned int item_id, void **mem)
    
    /* get/read the memory from this slot to dest */
    apr_status_t get(ap_slotmem_instance_t *s, unsigned int item_id, unsigned char *dest, apr_size_t dest_len)
    
    /* put/write the data from src to this slot */
    apr_status_t put(ap_slotmem_instance_t *slot, unsigned int item_id, unsigned char *src, apr_size_t src_len)
    
    /* return the total number of slots in the segment */
    unsigned int num_slots(ap_slotmem_instance_t *s)
    
    /* return the total data size, in bytes, of a slot in the segment */
    apr_size_t slot_size(ap_slotmem_instance_t *s)
    
    /* grab or allocate the first free slot and mark as in-use (does not do any data copying) */
    apr_status_t grab(ap_slotmem_instance_t *s, unsigned int *item_id)
    
    /* forced grab or allocate the specified slot and mark as in-use (does not do any data copying) */
    apr_status_t fgrab(ap_slotmem_instance_t *s, unsigned int item_id)
    
    /* release or free a slot and mark as not in-use (does not do any data copying) */
    apr_status_t release(ap_slotmem_instance_t *s, unsigned int item_id)
    Support Apache!

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cache_disk.html.ko.euc-kr0000644000000000000500000003734313412755316021640 0ustar rootsrc mod_cache_disk - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_cache_disk

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:Content cache storage manager keyed to URIs
    »óÅÂ:Experimental
    ¸ðµâ¸í:cache_disk_module
    ¼Ò½ºÆÄÀÏ:mod_cache_disk.c

    ¿ä¾à

    ÀÌ ¸ðµâÀº ½ÇÇèÀûÀÎ »óÅÂÀÌ´Ù. ¹®¼­´Â ¾ÆÁ÷ ÀÛ¾÷ÁßÀÌ´Ù...

    mod_cache_disk´Â µð½ºÅ©±â¹Ý ÀúÀå°ü¸®ÀÚ¸¦ ±¸ÇöÇÑ´Ù. ÀÌ ¸ðµâÀº ±âº»ÀûÀ¸·Î mod_proxy¿Í °°ÀÌ »ç¿ëÇÑ´Ù.

    ³»¿ëÀ» URI¸¦ Åä´ë·Î ¸¸µç Ű·Î ij½¬¿¡ ÀúÀåÇÏ°í °¡Á®¿Â´Ù. Á¢±Ùº¸È£°¡ µÈ ³»¿ëÀº ij½¬ÇÏÁö¾Ê´Â´Ù.

    ÁÖÀÇ:

    mod_cache_disk´Â mod_cache°¡ ÇÊ¿äÇÏ´Ù.

    top

    CacheDirLength Áö½Ã¾î

    ¼³¸í:ÇÏÀ§µð·ºÅ丮¸íÀÇ ¹®ÀÚ°³¼ö
    ¹®¹ý:CacheDirLength length
    ±âº»°ª:CacheDirLength 2
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache_disk

    CacheDirLength Áö½Ã¾î´Â ij½¬ °èÃþ±¸Á¶¿¡¼­ °¢ ÇÏÀ§µð·ºÅ丮¸íÀÇ ¹®ÀÚ¼ö¸¦ ÁöÁ¤ÇÑ´Ù.

    CacheDirLevels¿Í CacheDirLength¸¦ °öÇÏ¿© 20 º¸´Ù Å©¸é ¾ÈµÈ´Ù.

    CacheDirLength 4

    top

    CacheDirLevels Áö½Ã¾î

    ¼³¸í:ij½¬ÀÇ ÇÏÀ§µð·ºÅ丮 ±íÀÌ.
    ¹®¹ý:CacheDirLevels levels
    ±âº»°ª:CacheDirLevels 3
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache_disk

    CacheDirLevels Áö½Ã¾î´Â ij½¬ÀÇ ÇÏÀ§µð·ºÅ丮 ±íÀ̸¦ ÁöÁ¤ÇÑ´Ù. ij½¬µÈ ÀڷḦ CacheRoot µð·ºÅ丮 ¾Æ·¡ ÀÌ ±íÀ̱îÁö ÀúÀåÇÑ´Ù.

    CacheDirLevels¿Í CacheDirLength¸¦ °öÇÏ¿© 20 º¸´Ù Å©¸é ¾ÈµÈ´Ù.

    CacheDirLevels 5

    top

    CacheMaxFileSize Áö½Ã¾î

    ¼³¸í:ij½¬¿¡ ÀúÀåÇÒ ¹®¼­ÀÇ ÃÖ´ëÅ©±â (¹ÙÀÌÆ® ´ÜÀ§)
    ¹®¹ý:CacheMaxFileSize bytes
    ±âº»°ª:CacheMaxFileSize 1000000
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache_disk

    CacheMaxFileSize Áö½Ã¾î´Â ij½¬¿¡ ÀúÀåÇÒ ¹®¼­ÀÇ ÃÖ´ëÅ©±â¸¦ ¹ÙÀÌÆ® ´ÜÀ§·Î ÁöÁ¤ÇÑ´Ù.

    CacheMaxFileSize 64000

    top

    CacheMinFileSize Áö½Ã¾î

    ¼³¸í:ij½¬¿¡ ÀúÀåÇÒ ¹®¼­ÀÇ ÃÖ¼ÒÅ©±â (¹ÙÀÌÆ® ´ÜÀ§)
    ¹®¹ý:CacheMinFileSize bytes
    ±âº»°ª:CacheMinFileSize 1
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache_disk

    CacheMinFileSize Áö½Ã¾î´Â ij½¬¿¡ ÀúÀåÇÒ ¹®¼­ÀÇ ÃÖ¼ÒÅ©±â¸¦ ¹ÙÀÌÆ® ´ÜÀ§·Î ÁöÁ¤ÇÑ´Ù.

    CacheMinFileSize 64

    top

    CacheReadSize Áö½Ã¾î

    ¼³¸í:The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache_disk

    Documentation not yet translated. Please see English version of document.

    top

    CacheReadTime Áö½Ã¾î

    ¼³¸í:The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache_disk

    Documentation not yet translated. Please see English version of document.

    top

    CacheRoot Áö½Ã¾î

    ¼³¸í:ij½¬ ÆÄÀÏÀ» ÀúÀåÇÒ µð·ºÅ丮 root
    ¹®¹ý:CacheRoot directory
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache_disk

    CacheRoot Áö½Ã¾î´Â µð½ºÅ©¿¡¼­ ij½¬ ÆÄÀÏÀ» ÀúÀåÇÒ µð·ºÅ丮¸¦ ÁöÁ¤ÇÑ´Ù. mod_cache_disk ¸ðµâÀ» ¾ÆÆÄÄ¡ ¼­¹ö¿Í °°ÀÌ ÄÄÆÄÀÏÇÏ¿´°Å³ª ÀоîµéÀÎ °æ¿ì ¹Ýµå½Ã ÀÌ Áö½Ã¾î¸¦ Á¤ÀÇÇØ¾ß ÇÑ´Ù. CacheRoot¿¡ °ªÀÌ ¾øÀ¸¸é ¼³Á¤ÆÄÀÏÀ» ó¸®ÇÏÁö ¾Ê´Â´Ù. CacheDirLevels¿Í CacheDirLength Áö½Ã¾î´Â ÀÌ Áö½Ã¾î·Î ÁöÁ¤ÇÑ root µð·ºÅ丮ÀÇ ÇÏÀ§µð·ºÅ丮 ±¸Á¶¸¦ Áö½ÃÇÑ´Ù.

    CacheRoot c:/cacheroot

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_negotiation.html.en0000644000000000000500000005257213412755316020710 0ustar rootsrc mod_negotiation - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_negotiation

    Available Languages:  en  |  fr  |  ja 

    Description:Provides for content negotiation
    Status:Base
    Module Identifier:negotiation_module
    Source File:mod_negotiation.c

    Summary

    Content negotiation, or more accurately content selection, is the selection of the document that best matches the clients capabilities, from one of several available documents. There are two implementations of this.

    • A type map (a file with the handler type-map) which explicitly lists the files containing the variants.
    • A Multiviews search (enabled by the Multiviews Options), where the server does an implicit filename pattern match, and choose from amongst the results.
    top

    Type maps

    A type map has a format similar to RFC822 mail headers. It contains document descriptions separated by blank lines, with lines beginning with a hash character ('#') treated as comments. A document description consists of several header records; records may be continued on multiple lines if the continuation lines start with spaces. The leading space will be deleted and the lines concatenated. A header record consists of a keyword name, which always ends in a colon, followed by a value. Whitespace is allowed between the header name and value, and between the tokens of value. The headers allowed are:

    Content-Encoding:
    The encoding of the file. Apache only recognizes encodings that are defined by an AddEncoding directive. This normally includes the encodings x-compress for compress'd files, and x-gzip for gzip'd files. The x- prefix is ignored for encoding comparisons.
    Content-Language:
    The language(s) of the variant, as an Internet standard language tag (RFC 1766). An example is en, meaning English. If the variant contains more than one language, they are separated by a comma.
    Content-Length:
    The length of the file, in bytes. If this header is not present, then the actual length of the file is used.
    Content-Type:
    The MIME media type of the document, with optional parameters. Parameters are separated from the media type and from one another by a semi-colon, with a syntax of name=value. Common parameters include:
    level
    an integer specifying the version of the media type. For text/html this defaults to 2, otherwise 0.
    qs
    a floating-point number with a value in the range 0[.000] to 1[.000], indicating the relative 'quality' of this variant compared to the other available variants, independent of the client's capabilities. For example, a jpeg file is usually of higher source quality than an ascii file if it is attempting to represent a photograph. However, if the resource being represented is ascii art, then an ascii file would have a higher source quality than a jpeg file. All qs values are therefore specific to a given resource.

    Example

    Content-Type: image/jpeg; qs=0.8

    URI:
    uri of the file containing the variant (of the given media type, encoded with the given content encoding). These are interpreted as URLs relative to the map file; they must be on the same server, and they must refer to files to which the client would be granted access if they were to be requested directly.
    Body:
    The actual content of the resource may be included in the type-map file using the Body header. This header must contain a string that designates a delimiter for the body content. Then all following lines in the type map file will be considered part of the resource body until the delimiter string is found.

    Example:

    Body:----xyz----
    <html>
    <body>
    <p>Content of the page.</p>
    </body>
    </html>
    ----xyz----

    Consider, for example, a resource called document.html which is available in English, French, and German. The files for each of these are called document.html.en, document.html.fr, and document.html.de, respectively. The type map file will be called document.html.var, and will contain the following:

    URI: document.html

    Content-language: en
    Content-type: text/html
    URI: document.html.en

    Content-language: fr
    Content-type: text/html
    URI: document.html.fr

    Content-language: de
    Content-type: text/html
    URI: document.html.de

    All four of these files should be placed in the same directory, and the .var file should be associated with the type-map handler with an AddHandler directive:

    AddHandler type-map .var

    A request for document.html.var in this directory will result in choosing the variant which most closely matches the language preference specified in the user's Accept-Language request header.

    If Multiviews is enabled, and MultiviewsMatch is set to "handlers" or "any", a request to document.html will discover document.html.var and continue negotiating with the explicit type map.

    Other configuration directives, such as Alias can be used to map document.html to document.html.var.

    top

    Multiviews

    A Multiviews search is enabled by the Multiviews Options. If the server receives a request for /some/dir/foo and /some/dir/foo does not exist, then the server reads the directory looking for all files named foo.*, and effectively fakes up a type map which names all those files, assigning them the same media types and content-encodings it would have if the client had asked for one of them by name. It then chooses the best match to the client's requirements, and returns that document.

    The MultiviewsMatch directive configures whether Apache will consider files that do not have content negotiation meta-information assigned to them when choosing files.

    top

    CacheNegotiatedDocs Directive

    Description:Allows content-negotiated documents to be cached by proxy servers
    Syntax:CacheNegotiatedDocs On|Off
    Default:CacheNegotiatedDocs Off
    Context:server config, virtual host
    Status:Base
    Module:mod_negotiation

    If set, this directive allows content-negotiated documents to be cached by proxy servers. This could mean that clients behind those proxys could retrieve versions of the documents that are not the best match for their abilities, but it will make caching more efficient.

    This directive only applies to requests which come from HTTP/1.0 browsers. HTTP/1.1 provides much better control over the caching of negotiated documents, and this directive has no effect in responses to HTTP/1.1 requests.

    top

    ForceLanguagePriority Directive

    Description:Action to take if a single acceptable document is not found
    Syntax:ForceLanguagePriority None|Prefer|Fallback [Prefer|Fallback]
    Default:ForceLanguagePriority Prefer
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_negotiation

    The ForceLanguagePriority directive uses the given LanguagePriority to satisfy negotiation where the server could otherwise not return a single matching document.

    ForceLanguagePriority Prefer uses LanguagePriority to serve a one valid result, rather than returning an HTTP result 300 (MULTIPLE CHOICES) when there are several equally valid choices. If the directives below were given, and the user's Accept-Language header assigned en and de each as quality .500 (equally acceptable) then the first matching variant, en, will be served.

    LanguagePriority en fr de
    ForceLanguagePriority Prefer

    ForceLanguagePriority Fallback uses LanguagePriority to serve a valid result, rather than returning an HTTP result 406 (NOT ACCEPTABLE). If the directives below were given, and the user's Accept-Language only permitted an es language response, but such a variant isn't found, then the first variant from the LanguagePriority list below will be served.

    LanguagePriority en fr de
    ForceLanguagePriority Fallback

    Both options, Prefer and Fallback, may be specified, so either the first matching variant from LanguagePriority will be served if more than one variant is acceptable, or first available document will be served if none of the variants matched the client's acceptable list of languages.

    See also

    top

    LanguagePriority Directive

    Description:The precedence of language variants for cases where the client does not express a preference
    Syntax:LanguagePriority MIME-lang [MIME-lang] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_negotiation

    The LanguagePriority sets the precedence of language variants for the case where the client does not express a preference, when handling a Multiviews request. The list of MIME-lang are in order of decreasing preference.

    LanguagePriority en fr de

    For a request for foo.html, where foo.html.fr and foo.html.de both existed, but the browser did not express a language preference, then foo.html.fr would be returned.

    Note that this directive only has an effect if a 'best' language cannot be determined by any other means or the ForceLanguagePriority directive is not None. In general, the client determines the language preference, not the server.

    See also

    Available Languages:  en  |  fr  |  ja 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_rewrite.html.en0000644000000000000500000023142713430477163020050 0ustar rootsrc mod_rewrite - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_rewrite

    Available Languages:  en  |  fr 

    Description:Provides a rule-based rewriting engine to rewrite requested URLs on the fly
    Status:Extension
    Module Identifier:rewrite_module
    Source File:mod_rewrite.c

    Summary

    The mod_rewrite module uses a rule-based rewriting engine, based on a PCRE regular-expression parser, to rewrite requested URLs on the fly. By default, mod_rewrite maps a URL to a filesystem path. However, it can also be used to redirect one URL to another URL, or to invoke an internal proxy fetch.

    mod_rewrite provides a flexible and powerful way to manipulate URLs using an unlimited number of rules. Each rule can have an unlimited number of attached rule conditions, to allow you to rewrite URL based on server variables, environment variables, HTTP headers, or time stamps.

    mod_rewrite operates on the full URL path, including the path-info section. A rewrite rule can be invoked in httpd.conf or in .htaccess. The path generated by a rewrite rule can include a query string, or can lead to internal sub-processing, external request redirection, or internal proxy throughput.

    Further details, discussion, and examples, are provided in the detailed mod_rewrite documentation.

    top

    Logging

    mod_rewrite offers detailed logging of its actions at the trace1 to trace8 log levels. The log level can be set specifically for mod_rewrite using the LogLevel directive: Up to level debug, no actions are logged, while trace8 means that practically all actions are logged.

    Using a high trace log level for mod_rewrite will slow down your Apache HTTP Server dramatically! Use a log level higher than trace2 only for debugging!

    Example

    LogLevel alert rewrite:trace3

    RewriteLog

    Those familiar with earlier versions of mod_rewrite will no doubt be looking for the RewriteLog and RewriteLogLevel directives. This functionality has been completely replaced by the new per-module logging configuration mentioned above.

    To get just the mod_rewrite-specific log messages, pipe the log file through grep:

    tail -f error_log|fgrep '[rewrite:'

    top

    RewriteBase Directive

    Description:Sets the base URL for per-directory rewrites
    Syntax:RewriteBase URL-path
    Default:None
    Context:directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_rewrite

    The RewriteBase directive specifies the URL prefix to be used for per-directory (htaccess) RewriteRule directives that substitute a relative path.

    This directive is required when you use a relative path in a substitution in per-directory (htaccess) context unless any of the following conditions are true:

    • The original request, and the substitution, are underneath the DocumentRoot (as opposed to reachable by other means, such as Alias).
    • The filesystem path to the directory containing the RewriteRule, suffixed by the relative substitution is also valid as a URL path on the server (this is rare).
    • In Apache HTTP Server 2.4.16 and later, this directive may be omitted when the request is mapped via Alias or mod_userdir.

    In the example below, RewriteBase is necessary to avoid rewriting to http://example.com/opt/myapp-1.2.3/welcome.html since the resource was not relative to the document root. This misconfiguration would normally cause the server to look for an "opt" directory under the document root.

    DocumentRoot "/var/www/example.com"
    AliasMatch "^/myapp" "/opt/myapp-1.2.3"
    <Directory "/opt/myapp-1.2.3">
        RewriteEngine On
        RewriteBase "/myapp/"
        RewriteRule "^index\.html$"  "welcome.html"
    </Directory>
    top

    RewriteCond Directive

    Description:Defines a condition under which rewriting will take place
    Syntax: RewriteCond TestString CondPattern [flags]
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_rewrite

    The RewriteCond directive defines a rule condition. One or more RewriteCond can precede a RewriteRule directive. The following rule is then only used if both the current state of the URI matches its pattern, and if these conditions are met.

    TestString is a string which can contain the following expanded constructs in addition to plain text:

    • RewriteRule backreferences: These are backreferences of the form $N (0 <= N <= 9). $1 to $9 provide access to the grouped parts (in parentheses) of the pattern, from the RewriteRule which is subject to the current set of RewriteCond conditions. $0 provides access to the whole string matched by that pattern.
    • RewriteCond backreferences: These are backreferences of the form %N (0 <= N <= 9). %1 to %9 provide access to the grouped parts (again, in parentheses) of the pattern, from the last matched RewriteCond in the current set of conditions. %0 provides access to the whole string matched by that pattern.
    • RewriteMap expansions: These are expansions of the form ${mapname:key|default}. See the documentation for RewriteMap for more details.
    • Server-Variables: These are variables of the form %{ NAME_OF_VARIABLE } where NAME_OF_VARIABLE can be a string taken from the following list:
      HTTP headers: connection & request:
      HTTP_ACCEPT
      HTTP_COOKIE
      HTTP_FORWARDED
      HTTP_HOST
      HTTP_PROXY_CONNECTION
      HTTP_REFERER
      HTTP_USER_AGENT
      AUTH_TYPE
      CONN_REMOTE_ADDR
      CONTEXT_PREFIX
      CONTEXT_DOCUMENT_ROOT
      IPV6
      PATH_INFO
      QUERY_STRING
      REMOTE_ADDR
      REMOTE_HOST
      REMOTE_IDENT
      REMOTE_PORT
      REMOTE_USER
      REQUEST_METHOD
      SCRIPT_FILENAME
      server internals: date and time: specials:
      DOCUMENT_ROOT
      SCRIPT_GROUP
      SCRIPT_USER
      SERVER_ADDR
      SERVER_ADMIN
      SERVER_NAME
      SERVER_PORT
      SERVER_PROTOCOL
      SERVER_SOFTWARE
      TIME_YEAR
      TIME_MON
      TIME_DAY
      TIME_HOUR
      TIME_MIN
      TIME_SEC
      TIME_WDAY
      TIME
      API_VERSION
      CONN_REMOTE_ADDR
      HTTPS
      IS_SUBREQ
      REMOTE_ADDR
      REQUEST_FILENAME
      REQUEST_SCHEME
      REQUEST_URI
      THE_REQUEST

      These variables all correspond to the similarly named HTTP MIME-headers, C variables of the Apache HTTP Server or struct tm fields of the Unix system. Most are documented here or elsewhere in the Manual or in the CGI specification.

      SERVER_NAME and SERVER_PORT depend on the values of UseCanonicalName and UseCanonicalPhysicalPort respectively.

      Those that are special to mod_rewrite include those below.

      API_VERSION
      This is the version of the Apache httpd module API (the internal interface between server and module) in the current httpd build, as defined in include/ap_mmn.h. The module API version corresponds to the version of Apache httpd in use (in the release version of Apache httpd 1.3.14, for instance, it is 19990320:10), but is mainly of interest to module authors.
      CONN_REMOTE_ADDR
      Since 2.4.8: The peer IP address of the connection (see the mod_remoteip module).
      HTTPS
      Will contain the text "on" if the connection is using SSL/TLS, or "off" otherwise. (This variable can be safely used regardless of whether or not mod_ssl is loaded).
      IS_SUBREQ
      Will contain the text "true" if the request currently being processed is a sub-request, "false" otherwise. Sub-requests may be generated by modules that need to resolve additional files or URIs in order to complete their tasks.
      REMOTE_ADDR
      The IP address of the remote host (see the mod_remoteip module).
      REQUEST_FILENAME
      The full local filesystem path to the file or script matching the request, if this has already been determined by the server at the time REQUEST_FILENAME is referenced. Otherwise, such as when used in virtual host context, the same value as REQUEST_URI. Depending on the value of AcceptPathInfo, the server may have only used some leading components of the REQUEST_URI to map the request to a file.
      REQUEST_SCHEME
      Will contain the scheme of the request (usually "http" or "https"). This value can be influenced with ServerName.
      REQUEST_URI
      The path component of the requested URI, such as "/index.html". This notably excludes the query string which is available as its own variable named QUERY_STRING.
      THE_REQUEST
      The full HTTP request line sent by the browser to the server (e.g., "GET /index.html HTTP/1.1"). This does not include any additional headers sent by the browser. This value has not been unescaped (decoded), unlike most other variables below.

    If the TestString has the special value expr, the CondPattern will be treated as an ap_expr. HTTP headers referenced in the expression will be added to the Vary header if the novary flag is not given.

    Other things you should be aware of:

    1. The variables SCRIPT_FILENAME and REQUEST_FILENAME contain the same value - the value of the filename field of the internal request_rec structure of the Apache HTTP Server. The first name is the commonly known CGI variable name while the second is the appropriate counterpart of REQUEST_URI (which contains the value of the uri field of request_rec).

      If a substitution occurred and the rewriting continues, the value of both variables will be updated accordingly.

      If used in per-server context (i.e., before the request is mapped to the filesystem) SCRIPT_FILENAME and REQUEST_FILENAME cannot contain the full local filesystem path since the path is unknown at this stage of processing. Both variables will initially contain the value of REQUEST_URI in that case. In order to obtain the full local filesystem path of the request in per-server context, use an URL-based look-ahead %{LA-U:REQUEST_FILENAME} to determine the final value of REQUEST_FILENAME.

    2. %{ENV:variable}, where variable can be any environment variable, is also available. This is looked-up via internal Apache httpd structures and (if not found there) via getenv() from the Apache httpd server process.
    3. %{SSL:variable}, where variable is the name of an SSL environment variable, can be used whether or not mod_ssl is loaded, but will always expand to the empty string if it is not. Example: %{SSL:SSL_CIPHER_USEKEYSIZE} may expand to 128. These variables are available even without setting the StdEnvVars option of the SSLOptions directive.
    4. %{HTTP:header}, where header can be any HTTP MIME-header name, can always be used to obtain the value of a header sent in the HTTP request. Example: %{HTTP:Proxy-Connection} is the value of the HTTP header ``Proxy-Connection:''.

      If a HTTP header is used in a condition this header is added to the Vary header of the response in case the condition evaluates to true for the request. It is not added if the condition evaluates to false for the request. Adding the HTTP header to the Vary header of the response is needed for proper caching.

      It has to be kept in mind that conditions follow a short circuit logic in the case of the 'ornext|OR' flag so that certain conditions might not be evaluated at all.

    5. %{LA-U:variable} can be used for look-aheads which perform an internal (URL-based) sub-request to determine the final value of variable. This can be used to access variable for rewriting which is not available at the current stage, but will be set in a later phase.

      For instance, to rewrite according to the REMOTE_USER variable from within the per-server context (httpd.conf file) you must use %{LA-U:REMOTE_USER} - this variable is set by the authorization phases, which come after the URL translation phase (during which mod_rewrite operates).

      On the other hand, because mod_rewrite implements its per-directory context (.htaccess file) via the Fixup phase of the API and because the authorization phases come before this phase, you just can use %{REMOTE_USER} in that context.

    6. %{LA-F:variable} can be used to perform an internal (filename-based) sub-request, to determine the final value of variable. Most of the time, this is the same as LA-U above.

    CondPattern is the condition pattern, a regular expression which is applied to the current instance of the TestString. TestString is first evaluated, before being matched against CondPattern.

    CondPattern is usually a perl compatible regular expression, but there is additional syntax available to perform other useful tests against the Teststring:

    1. You can prefix the pattern string with a '!' character (exclamation mark) to negate the result of the condition, no matter what kind of CondPattern is used.
    2. You can perform lexicographical string comparisons:
      <CondPattern
      Lexicographically precedes
      Treats the CondPattern as a plain string and compares it lexicographically to TestString. True if TestString lexicographically precedes CondPattern.
      >CondPattern
      Lexicographically follows
      Treats the CondPattern as a plain string and compares it lexicographically to TestString. True if TestString lexicographically follows CondPattern.
      =CondPattern
      Lexicographically equal
      Treats the CondPattern as a plain string and compares it lexicographically to TestString. True if TestString is lexicographically equal to CondPattern (the two strings are exactly equal, character for character). If CondPattern is "" (two quotation marks) this compares TestString to the empty string.
      <=CondPattern
      Lexicographically less than or equal to
      Treats the CondPattern as a plain string and compares it lexicographically to TestString. True if TestString lexicographically precedes CondPattern, or is equal to CondPattern (the two strings are equal, character for character).
      >=CondPattern
      Lexicographically greater than or equal to
      Treats the CondPattern as a plain string and compares it lexicographically to TestString. True if TestString lexicographically follows CondPattern, or is equal to CondPattern (the two strings are equal, character for character).
    3. You can perform integer comparisons:
      -eq
      Is numerically equal to
      The TestString is treated as an integer, and is numerically compared to the CondPattern. True if the two are numerically equal.
      -ge
      Is numerically greater than or equal to
      The TestString is treated as an integer, and is numerically compared to the CondPattern. True if the TestString is numerically greater than or equal to the CondPattern.
      -gt
      Is numerically greater than
      The TestString is treated as an integer, and is numerically compared to the CondPattern. True if the TestString is numerically greater than the CondPattern.
      -le
      Is numerically less than or equal to
      The TestString is treated as an integer, and is numerically compared to the CondPattern. True if the TestString is numerically less than or equal to the CondPattern. Avoid confusion with the -l by using the -L or -h variant.
      -lt
      Is numerically less than
      The TestString is treated as an integer, and is numerically compared to the CondPattern. True if the TestString is numerically less than the CondPattern. Avoid confusion with the -l by using the -L or -h variant.
      -ne
      Is numerically not equal to
      The TestString is treated as an integer, and is numerically compared to the CondPattern. True if the two are numerically different. This is equivalent to !-eq.
    4. You can perform various file attribute tests:
      -d
      Is directory.
      Treats the TestString as a pathname and tests whether or not it exists, and is a directory.
      -f
      Is regular file.
      Treats the TestString as a pathname and tests whether or not it exists, and is a regular file.
      -F
      Is existing file, via subrequest.
      Checks whether or not TestString is a valid file, accessible via all the server's currently-configured access controls for that path. This uses an internal subrequest to do the check, so use it with care - it can impact your server's performance!
      -h
      Is symbolic link, bash convention.
      See -l.
      -l
      Is symbolic link.
      Treats the TestString as a pathname and tests whether or not it exists, and is a symbolic link. May also use the bash convention of -L or -h if there's a possibility of confusion such as when using the -lt or -le tests.
      -L
      Is symbolic link, bash convention.
      See -l.
      -s
      Is regular file, with size.
      Treats the TestString as a pathname and tests whether or not it exists, and is a regular file with size greater than zero.
      -U

      Is existing URL, via subrequest.
      Checks whether or not TestString is a valid URL, accessible via all the server's currently-configured access controls for that path. This uses an internal subrequest to do the check, so use it with care - it can impact your server's performance!

      This flag only returns information about things like access control, authentication, and authorization. This flag does not return information about the status code the configured handler (static file, CGI, proxy, etc.) would have returned.

      -x
      Has executable permissions.
      Treats the TestString as a pathname and tests whether or not it exists, and has executable permissions. These permissions are determined according to the underlying OS.
      For example:
      RewriteCond /var/www/%{REQUEST_URI} !-f
      RewriteRule ^(.+) /other/archive/$1 [R]
    5. If the TestString has the special value expr, the CondPattern will be treated as an ap_expr.

      In the below example, -strmatch is used to compare the REFERER against the site hostname, to block unwanted hotlinking.

      RewriteCond expr "! %{HTTP_REFERER} -strmatch '*://%{HTTP_HOST}/*'"
      RewriteRule "^/images" "-" [F]

    You can also set special flags for CondPattern by appending [flags] as the third argument to the RewriteCond directive, where flags is a comma-separated list of any of the following flags:

    • 'nocase|NC' (no case)
      This makes the test case-insensitive - differences between 'A-Z' and 'a-z' are ignored, both in the expanded TestString and the CondPattern. This flag is effective only for comparisons between TestString and CondPattern. It has no effect on filesystem and subrequest checks.
    • 'ornext|OR' (or next condition)
      Use this to combine rule conditions with a local OR instead of the implicit AND. Typical example:
      RewriteCond "%{REMOTE_HOST}"  "^host1"  [OR]
      RewriteCond "%{REMOTE_HOST}"  "^host2"  [OR]
      RewriteCond "%{REMOTE_HOST}"  "^host3"
      RewriteRule ...some special stuff for any of these hosts...
      Without this flag you would have to write the condition/rule pair three times.
    • 'novary|NV' (no vary)
      If a HTTP header is used in the condition, this flag prevents this header from being added to the Vary header of the response.
      Using this flag might break proper caching of the response if the representation of this response varies on the value of this header. So this flag should be only used if the meaning of the Vary header is well understood.

    Example:

    To rewrite the Homepage of a site according to the ``User-Agent:'' header of the request, you can use the following:

    RewriteCond  "%{HTTP_USER_AGENT}"  "(iPhone|Blackberry|Android)"
    RewriteRule  "^/$"                 "/homepage.mobile.html"  [L]
    
    RewriteRule  "^/$"                 "/homepage.std.html"     [L]

    Explanation: If you use a browser which identifies itself as a mobile browser (note that the example is incomplete, as there are many other mobile platforms), the mobile version of the homepage is served. Otherwise, the standard page is served.

    top

    RewriteEngine Directive

    Description:Enables or disables runtime rewriting engine
    Syntax:RewriteEngine on|off
    Default:RewriteEngine off
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_rewrite

    The RewriteEngine directive enables or disables the runtime rewriting engine. If it is set to off this module does no runtime processing at all. It does not even update the SCRIPT_URx environment variables.

    Use this directive to disable rules in a particular context, rather than commenting out all the RewriteRule directives.

    Note that rewrite configurations are not inherited by virtual hosts. This means that you need to have a RewriteEngine on directive for each virtual host in which you wish to use rewrite rules.

    RewriteMap directives of the type prg are not started during server initialization if they're defined in a context that does not have RewriteEngine set to on

    top

    RewriteMap Directive

    Description:Defines a mapping function for key-lookup
    Syntax:RewriteMap MapName MapType:MapSource [MapTypeOptions]
    Context:server config, virtual host
    Status:Extension
    Module:mod_rewrite
    Compatibility:The 3rd parameter, MapTypeOptions, in only available from Apache 2.4.29 and later

    The RewriteMap directive defines a Rewriting Map which can be used inside rule substitution strings by the mapping-functions to insert/substitute fields through a key lookup. The source of this lookup can be of various types.

    The MapName is the name of the map and will be used to specify a mapping-function for the substitution strings of a rewriting rule via one of the following constructs:

    ${ MapName : LookupKey }
    ${ MapName : LookupKey | DefaultValue }

    When such a construct occurs, the map MapName is consulted and the key LookupKey is looked-up. If the key is found, the map-function construct is substituted by SubstValue. If the key is not found then it is substituted by DefaultValue or by the empty string if no DefaultValue was specified. Empty values behave as if the key was absent, therefore it is not possible to distinguish between empty-valued keys and absent keys.

    For example, you might define a RewriteMap as:

    RewriteMap examplemap "txt:/path/to/file/map.txt"

    You would then be able to use this map in a RewriteRule as follows:

    RewriteRule "^/ex/(.*)" "${examplemap:$1}"

    The meaning of the MapTypeOptions argument depends on particular MapType. See the Using RewriteMap for more information.

    The following combinations for MapType and MapSource can be used:

    txt
    A plain text file containing space-separated key-value pairs, one per line. (Details ...)
    rnd
    Randomly selects an entry from a plain text file (Details ...)
    dbm
    Looks up an entry in a dbm file containing name, value pairs. Hash is constructed from a plain text file format using the httxt2dbm utility. (Details ...)
    int
    One of the four available internal functions provided by RewriteMap: toupper, tolower, escape or unescape. (Details ...)
    prg
    Calls an external program or script to process the rewriting. (Details ...)
    dbd or fastdbd
    A SQL SELECT statement to be performed to look up the rewrite target. (Details ...)

    Further details, and numerous examples, may be found in the RewriteMap HowTo

    top

    RewriteOptions Directive

    Description:Sets some special options for the rewrite engine
    Syntax:RewriteOptions Options
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_rewrite

    The RewriteOptions directive sets some special options for the current per-server or per-directory configuration. The Option string can currently only be one of the following:

    Inherit

    This forces the current configuration to inherit the configuration of the parent. In per-virtual-server context, this means that the maps, conditions and rules of the main server are inherited. In per-directory context this means that conditions and rules of the parent directory's .htaccess configuration or <Directory> sections are inherited. The inherited rules are virtually copied to the section where this directive is being used. If used in combination with local rules, the inherited rules are copied behind the local rules. The position of this directive - below or above of local rules - has no influence on this behavior. If local rules forced the rewriting to stop, the inherited rules won't be processed.

    Rules inherited from the parent scope are applied after rules specified in the child scope.
    InheritBefore

    Like Inherit above, but the rules from the parent scope are applied before rules specified in the child scope.
    Available in Apache HTTP Server 2.3.10 and later.

    InheritDown

    If this option is enabled, all child configurations will inherit the configuration of the current configuration. It is equivalent to specifying RewriteOptions Inherit in all child configurations. See the Inherit option for more details on how the parent-child relationships are handled.
    Available in Apache HTTP Server 2.4.8 and later.

    InheritDownBefore

    Like InheritDown above, but the rules from the current scope are applied before rules specified in any child's scope.
    Available in Apache HTTP Server 2.4.8 and later.

    IgnoreInherit

    This option forces the current and child configurations to ignore all rules that would be inherited from a parent specifying InheritDown or InheritDownBefore.
    Available in Apache HTTP Server 2.4.8 and later.

    AllowNoSlash

    By default, mod_rewrite will ignore URLs that map to a directory on disk but lack a trailing slash, in the expectation that the mod_dir module will issue the client with a redirect to the canonical URL with a trailing slash.

    When the DirectorySlash directive is set to off, the AllowNoSlash option can be enabled to ensure that rewrite rules are no longer ignored. This option makes it possible to apply rewrite rules within .htaccess files that match the directory without a trailing slash, if so desired.
    Available in Apache HTTP Server 2.4.0 and later.

    AllowAnyURI

    When RewriteRule is used in VirtualHost or server context with version 2.2.22 or later of httpd, mod_rewrite will only process the rewrite rules if the request URI is a URL-path. This avoids some security issues where particular rules could allow "surprising" pattern expansions (see CVE-2011-3368 and CVE-2011-4317). To lift the restriction on matching a URL-path, the AllowAnyURI option can be enabled, and mod_rewrite will apply the rule set to any request URI string, regardless of whether that string matches the URL-path grammar required by the HTTP specification.
    Available in Apache HTTP Server 2.4.3 and later.

    Security Warning

    Enabling this option will make the server vulnerable to security issues if used with rewrite rules which are not carefully authored. It is strongly recommended that this option is not used. In particular, beware of input strings containing the '@' character which could change the interpretation of the transformed URI, as per the above CVE names.

    MergeBase

    With this option, the value of RewriteBase is copied from where it's explicitly defined into any sub-directory or sub-location that doesn't define its own RewriteBase. This was the default behavior in 2.4.0 through 2.4.3, and the flag to restore it is available Apache HTTP Server 2.4.4 and later.

    IgnoreContextInfo

    When a relative substitution is made in directory (htaccess) context and RewriteBase has not been set, this module uses some extended URL and filesystem context information to change the relative substitution back into a URL. Modules such as mod_userdir and mod_alias supply this extended context info. Available in 2.4.16 and later.

    LegacyPrefixDocRoot

    Prior to 2.4.26, if a substitution was an absolute URL that matched the current virtual host, the URL might first be reduced to a URL-path and then later reduced to a local path. Since the URL can be reduced to a local path, the path should be prefixed with the document root. This prevents a file such as /tmp/myfile from being accessed when a request is made to http://host/file/myfile with the following RewriteRule.

    RewriteRule /file/(.*) http://localhost/tmp/$1

    This option allows the old behavior to be used where the document root is not prefixed to a local path that was reduced from a URL. Available in 2.4.26 and later.

    top

    RewriteRule Directive

    Description:Defines rules for the rewriting engine
    Syntax:RewriteRule Pattern Substitution [flags]
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_rewrite

    The RewriteRule directive is the real rewriting workhorse. The directive can occur more than once, with each instance defining a single rewrite rule. The order in which these rules are defined is important - this is the order in which they will be applied at run-time.

    Pattern is a perl compatible regular expression. What this pattern is compared against varies depending on where the RewriteRule directive is defined.

    What is matched?

    • In VirtualHost context, The Pattern will initially be matched against the part of the URL after the hostname and port, and before the query string (e.g. "/app1/index.html"). This is the (%-decoded) URL-path.

    • In per-directory context (Directory and .htaccess), the Pattern is matched against only a partial path, for example a request of "/app1/index.html" may result in comparison against "app1/index.html" or "index.html" depending on where the RewriteRule is defined.

      The directory path where the rule is defined is stripped from the currently mapped filesystem path before comparison (up to and including a trailing slash). The net result of this per-directory prefix stripping is that rules in this context only match against the portion of the currently mapped filesystem path "below" where the rule is defined.

      Directives such as DocumentRoot and Alias, or even the result of previous RewriteRule substitutions, determine the currently mapped filesystem path.

    • If you wish to match against the hostname, port, or query string, use a RewriteCond with the %{HTTP_HOST}, %{SERVER_PORT}, or %{QUERY_STRING} variables respectively.

    Per-directory Rewrites

    • The rewrite engine may be used in .htaccess files and in <Directory> sections, with some additional complexity.
    • To enable the rewrite engine in this context, you need to set "RewriteEngine On" and "Options FollowSymLinks" must be enabled. If your administrator has disabled override of FollowSymLinks for a user's directory, then you cannot use the rewrite engine. This restriction is required for security reasons.
    • See the RewriteBase directive for more information regarding what prefix will be added back to relative substitutions.
    • If you wish to match against the full URL-path in a per-directory (htaccess) RewriteRule, use the %{REQUEST_URI} variable in a RewriteCond.
    • The removed prefix always ends with a slash, meaning the matching occurs against a string which never has a leading slash. Therefore, a Pattern with ^/ never matches in per-directory context.
    • Although rewrite rules are syntactically permitted in <Location> and <Files> sections (including their regular expression counterparts), this should never be necessary and is unsupported. A likely feature to break in these contexts is relative substitutions.
    • The If blocks follow the rules of the directory context.
    • By default, mod_rewrite overrides rules when merging sections belonging to the same context. The RewriteOptions directive can change this behavior, for example using the Inherit setting.
    • The RewriteOptions also regulates the behavior of sections that are stated at the same nesting level of the configuration. In the following example, by default only the RewriteRules stated in the second If block are considered, since the first ones are overridden. Using RewriteOptions Inherit forces mod_rewrite to merge the two sections and consider both set of statements, rather than only the last one.
    <If "true">
      # Without RewriteOptions Inherit, this rule is overridden by the next
      # section and no redirect will happen for URIs containing 'foo'
      RewriteRule foo http://example.com/foo [R]
    </If>
    <If "true">
      RewriteRule bar http://example.com/bar [R]
    </If>

    For some hints on regular expressions, see the mod_rewrite Introduction.

    In mod_rewrite, the NOT character ('!') is also available as a possible pattern prefix. This enables you to negate a pattern; to say, for instance: ``if the current URL does NOT match this pattern''. This can be used for exceptional cases, where it is easier to match the negative pattern, or as a last default rule.

    Note

    When using the NOT character to negate a pattern, you cannot include grouped wildcard parts in that pattern. This is because, when the pattern does NOT match (ie, the negation matches), there are no contents for the groups. Thus, if negated patterns are used, you cannot use $N in the substitution string!

    The Substitution of a rewrite rule is the string that replaces the original URL-path that was matched by Pattern. The Substitution may be a:

    file-system path
    Designates the location on the file-system of the resource to be delivered to the client. Substitutions are only treated as a file-system path when the rule is configured in server (virtualhost) context and the first component of the path in the substitution exists in the file-system
    URL-path
    A DocumentRoot-relative path to the resource to be served. Note that mod_rewrite tries to guess whether you have specified a file-system path or a URL-path by checking to see if the first segment of the path exists at the root of the file-system. For example, if you specify a Substitution string of /www/file.html, then this will be treated as a URL-path unless a directory named www exists at the root or your file-system (or, in the case of using rewrites in a .htaccess file, relative to your document root), in which case it will be treated as a file-system path. If you wish other URL-mapping directives (such as Alias) to be applied to the resulting URL-path, use the [PT] flag as described below.
    Absolute URL
    If an absolute URL is specified, mod_rewrite checks to see whether the hostname matches the current host. If it does, the scheme and hostname are stripped out and the resulting path is treated as a URL-path. Otherwise, an external redirect is performed for the given URL. To force an external redirect back to the current host, see the [R] flag below.
    - (dash)
    A dash indicates that no substitution should be performed (the existing path is passed through untouched). This is used when a flag (see below) needs to be applied without changing the path.

    In addition to plain text, the Substitution string can include

    1. back-references ($N) to the RewriteRule pattern
    2. back-references (%N) to the last matched RewriteCond pattern
    3. server-variables as in rule condition test-strings (%{VARNAME})
    4. mapping-function calls (${mapname:key|default})

    Back-references are identifiers of the form $N (N=0..9), which will be replaced by the contents of the Nth group of the matched Pattern. The server-variables are the same as for the TestString of a RewriteCond directive. The mapping-functions come from the RewriteMap directive and are explained there. These three types of variables are expanded in the order above.

    Rewrite rules are applied to the results of previous rewrite rules, in the order in which they are defined in the config file. The URL-path or file-system path (see "What is matched?", above) is completely replaced by the Substitution and the rewriting process continues until all rules have been applied, or it is explicitly terminated by an L flag, or other flag which implies immediate termination, such as END or F.

    Modifying the Query String

    By default, the query string is passed through unchanged. You can, however, create URLs in the substitution string containing a query string part. Simply use a question mark inside the substitution string to indicate that the following text should be re-injected into the query string. When you want to erase an existing query string, end the substitution string with just a question mark. To combine new and old query strings, use the [QSA] flag.

    Additionally you can set special actions to be performed by appending [flags] as the third argument to the RewriteRule directive. Flags is a comma-separated list, surround by square brackets, of any of the flags in the following table. More details, and examples, for each flag, are available in the Rewrite Flags document.

    Flag and syntax Function
    B Escape non-alphanumeric characters in backreferences before applying the transformation. details ...
    backrefnoplus|BNP If backreferences are being escaped, spaces should be escaped to %20 instead of +. Useful when the backreference will be used in the path component rather than the query string.details ...
    chain|C Rule is chained to the following rule. If the rule fails, the rule(s) chained to it will be skipped. details ...
    cookie|CO=NAME:VAL Sets a cookie in the client browser. Full syntax is: CO=NAME:VAL:domain[:lifetime[:path[:secure[:httponly]]]] details ...
    discardpath|DPI Causes the PATH_INFO portion of the rewritten URI to be discarded. details ...
    END Stop the rewriting process immediately and don't apply any more rules. Also prevents further execution of rewrite rules in per-directory and .htaccess context. (Available in 2.3.9 and later) details ...
    env|E=[!]VAR[:VAL] Causes an environment variable VAR to be set (to the value VAL if provided). The form !VAR causes the environment variable VAR to be unset. details ...
    forbidden|F Returns a 403 FORBIDDEN response to the client browser. details ...
    gone|G Returns a 410 GONE response to the client browser. details ...
    Handler|H=Content-handler Causes the resulting URI to be sent to the specified Content-handler for processing. details ...
    last|L Stop the rewriting process immediately and don't apply any more rules. Especially note caveats for per-directory and .htaccess context (see also the END flag). details ...
    next|N Re-run the rewriting process, starting again with the first rule, using the result of the ruleset so far as a starting point. details ...
    nocase|NC Makes the pattern comparison case-insensitive. details ...
    noescape|NE Prevent mod_rewrite from applying hexcode escaping of special characters in the result of the rewrite. details ...
    nosubreq|NS Causes a rule to be skipped if the current request is an internal sub-request. details ...
    proxy|P Force the substitution URL to be internally sent as a proxy request. details ...
    passthrough|PT Forces the resulting URI to be passed back to the URL mapping engine for processing of other URI-to-filename translators, such as Alias or Redirect. details ...
    qsappend|QSA Appends any query string from the original request URL to any query string created in the rewrite target.details ...
    qsdiscard|QSD Discard any query string attached to the incoming URI. details ...
    qslast|QSL Interpret the last (right-most) question mark as the query string delimiter, instead of the first (left-most) as normally used. Available in 2.4.19 and later. details ...
    redirect|R[=code] Forces an external redirect, optionally with the specified HTTP status code. details ...
    skip|S=num Tells the rewriting engine to skip the next num rules if the current rule matches. details ...
    type|T=MIME-type Force the MIME-type of the target file to be the specified type. details ...

    Home directory expansion

    When the substitution string begins with a string resembling "/~user" (via explicit text or backreferences), mod_rewrite performs home directory expansion independent of the presence or configuration of mod_userdir.

    This expansion does not occur when the PT flag is used on the RewriteRule directive.

    Here are all possible substitution combinations and their meanings:

    Inside per-server configuration (httpd.conf)
    for request ``GET /somepath/pathinfo'':

    Given Rule Resulting Substitution
    ^/somepath(.*) otherpath$1 invalid, not supported
    ^/somepath(.*) otherpath$1 [R] invalid, not supported
    ^/somepath(.*) otherpath$1 [P] invalid, not supported
    ^/somepath(.*) /otherpath$1 /otherpath/pathinfo
    ^/somepath(.*) /otherpath$1 [R] http://thishost/otherpath/pathinfo via external redirection
    ^/somepath(.*) /otherpath$1 [P] doesn't make sense, not supported
    ^/somepath(.*) http://thishost/otherpath$1 /otherpath/pathinfo
    ^/somepath(.*) http://thishost/otherpath$1 [R] http://thishost/otherpath/pathinfo via external redirection
    ^/somepath(.*) http://thishost/otherpath$1 [P] doesn't make sense, not supported
    ^/somepath(.*) http://otherhost/otherpath$1 http://otherhost/otherpath/pathinfo via external redirection
    ^/somepath(.*) http://otherhost/otherpath$1 [R] http://otherhost/otherpath/pathinfo via external redirection (the [R] flag is redundant)
    ^/somepath(.*) http://otherhost/otherpath$1 [P] http://otherhost/otherpath/pathinfo via internal proxy

    Inside per-directory configuration for /somepath
    (/physical/path/to/somepath/.htaccess, with RewriteBase "/somepath")
    for request ``GET /somepath/localpath/pathinfo'':

    Given Rule Resulting Substitution
    ^localpath(.*) otherpath$1 /somepath/otherpath/pathinfo
    ^localpath(.*) otherpath$1 [R] http://thishost/somepath/otherpath/pathinfo via external redirection
    ^localpath(.*) otherpath$1 [P] doesn't make sense, not supported
    ^localpath(.*) /otherpath$1 /otherpath/pathinfo
    ^localpath(.*) /otherpath$1 [R] http://thishost/otherpath/pathinfo via external redirection
    ^localpath(.*) /otherpath$1 [P] doesn't make sense, not supported
    ^localpath(.*) http://thishost/otherpath$1 /otherpath/pathinfo
    ^localpath(.*) http://thishost/otherpath$1 [R] http://thishost/otherpath/pathinfo via external redirection
    ^localpath(.*) http://thishost/otherpath$1 [P] doesn't make sense, not supported
    ^localpath(.*) http://otherhost/otherpath$1 http://otherhost/otherpath/pathinfo via external redirection
    ^localpath(.*) http://otherhost/otherpath$1 [R] http://otherhost/otherpath/pathinfo via external redirection (the [R] flag is redundant)
    ^localpath(.*) http://otherhost/otherpath$1 [P] http://otherhost/otherpath/pathinfo via internal proxy

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_buffer.html.fr.utf80000644000000000000500000002310513412755316020521 0ustar rootsrc mod_buffer - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_buffer

    Langues Disponibles:  en  |  fr 

    Description:Support de la mise en tampon des requêtes
    Statut:Extension
    Identificateur de Module:buffer_module
    Fichier Source:mod_buffer.c
    Compatibilité:Disponible depuis les versions 2.3 et supérieures d'Apache

    Sommaire

    Ce module fournit la possibilité de mettre en tampon les piles des filtres en entrée et sortie.

    Dans certaines situations, les générateurs de contenu créent des contenus composés de petits tronçons. Afin de permettre la réutilisation de la mémoire, les éléments de mémoire attribués aux tronçons ont toujours une taille de 8k, quelle que soit la taille du tronçon lui-même. Lorsqu'une requête génère de nombreux petits tronçons, une grande quantité de mémoire peut être mobilisée par le traitement de la requête, et une grande quantité de données transmises sans nécessité. Pour y remédier, l'utilisation d'un tampon rassemble la réponse en un nombre de tronçons le plus petit possible.

    Lorsque httpd est utilisé comme frontal d'un générateur de contenu consommant beaucoup de ressources, la mise en tampon de la réponse peut permettre à ce dernier d'effectuer le traitement et de libérer les ressources plus ou moins rapidement, en fonction de la manière dont il a été conçu.

    Le filtre de mise en tampon peut être ajouté aux piles des filtres en entrée ou en sortie, selon les besoins, à l'aide des directives SetInputFilter, SetOutputFilter, AddOutputFilter ou AddOutputFilterByType.

    Utilisation d'un tampon avec mod_include

    AddOutputFilterByType INCLUDES;BUFFER text/html
    Les filtres de mise en tampon lisent la requête/réponse en RAM, puis la reconditionnent sous la forme d'un nombre d'éléments mémoire le plus petit possible, au prix d'une consommation de temps CPU. Lorsque la requête/réponse est déjà conditionnée de manière satisfaisante, sa mise en tampon pourrait s'avérer encore plus lente qu'en l'absence d'utilisation de tampon. C'est pourquoi ces filtres doivent être utilisés avec précautions, et seulement si nécessaire.
    top

    Directive BufferSize

    Description:Taille maximale en octets du filtre par tampon
    Syntaxe:BufferSize entier
    Défaut:BufferSize 131072
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_buffer

    La directive BufferSize permet de spécifier la quantité de données en octets qui sera mise en tampon avant d'être lue depuis ou écrite vers chaque requête. La valeur par défaut est 128 ko.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dav.html.en0000644000000000000500000004365113412755316017140 0ustar rootsrc mod_dav - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_dav

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Distributed Authoring and Versioning (WebDAV) functionality
    Status:Extension
    Module Identifier:dav_module
    Source File:mod_dav.c

    Summary

    This module provides class 1 and class 2 WebDAV ('Web-based Distributed Authoring and Versioning') functionality for Apache. This extension to the HTTP protocol allows creating, moving, copying, and deleting resources and collections on a remote web server.

    top

    Enabling WebDAV

    To enable mod_dav, add the following to a container in your httpd.conf file:

    Dav On

    This enables the DAV file system provider, which is implemented by the mod_dav_fs module. Therefore, that module must be compiled into the server or loaded at runtime using the LoadModule directive.

    In addition, a location for the DAV lock database must be specified in the global section of your httpd.conf file using the DavLockDB directive:

    DavLockDB /usr/local/apache2/var/DavLock

    The directory containing the lock database file must be writable by the User and Group under which Apache is running.

    You may wish to add a <Limit> clause inside the <Location> directive to limit access to DAV-enabled locations. If you want to set the maximum amount of bytes that a DAV client can send at one request, you have to use the LimitXMLRequestBody directive. The "normal" LimitRequestBody directive has no effect on DAV requests.

    Full Example

    DavLockDB "/usr/local/apache2/var/DavLock"
    
    <Directory "/usr/local/apache2/htdocs/foo">
        Require all granted
        Dav On
    
        AuthType Basic
        AuthName DAV
        AuthUserFile "user.passwd"
    
        <LimitExcept GET POST OPTIONS>
            Require user admin
        </LimitExcept>
    </Directory>
    top

    Security Issues

    Since DAV access methods allow remote clients to manipulate files on the server, you must take particular care to assure that your server is secure before enabling mod_dav.

    Any location on the server where DAV is enabled should be protected by authentication. The use of HTTP Basic Authentication is not recommended. You should use at least HTTP Digest Authentication, which is provided by the mod_auth_digest module. Nearly all WebDAV clients support this authentication method. An alternative is Basic Authentication over an SSL enabled connection.

    In order for mod_dav to manage files, it must be able to write to the directories and files under its control using the User and Group under which Apache is running. New files created will also be owned by this User and Group. For this reason, it is important to control access to this account. The DAV repository is considered private to Apache; modifying files outside of Apache (for example using FTP or filesystem-level tools) should not be allowed.

    mod_dav may be subject to various kinds of denial-of-service attacks. The LimitXMLRequestBody directive can be used to limit the amount of memory consumed in parsing large DAV requests. The DavDepthInfinity directive can be used to prevent PROPFIND requests on a very large repository from consuming large amounts of memory. Another possible denial-of-service attack involves a client simply filling up all available disk space with many large files. There is no direct way to prevent this in Apache, so you should avoid giving DAV access to untrusted users.

    top

    Complex Configurations

    One common request is to use mod_dav to manipulate dynamic files (PHP scripts, CGI scripts, etc). This is difficult because a GET request will always run the script, rather than downloading its contents. One way to avoid this is to map two different URLs to the content, one of which will run the script, and one of which will allow it to be downloaded and manipulated with DAV.

    Alias "/phparea" "/home/gstein/php_files"
    Alias "/php-source" "/home/gstein/php_files"
    <Location "/php-source">
        Dav On
        ForceType text/plain
    </Location>

    With this setup, http://example.com/phparea can be used to access the output of the PHP scripts, and http://example.com/php-source can be used with a DAV client to manipulate them.

    top

    Dav Directive

    Description:Enable WebDAV HTTP methods
    Syntax:Dav On|Off|provider-name
    Default:Dav Off
    Context:directory
    Status:Extension
    Module:mod_dav

    Use the Dav directive to enable the WebDAV HTTP methods for the given container:

    <Location "/foo">
        Dav On
    </Location>

    The value On is actually an alias for the default provider filesystem which is served by the mod_dav_fs module. Note, that once you have DAV enabled for some location, it cannot be disabled for sublocations. For a complete configuration example have a look at the section above.

    Do not enable WebDAV until you have secured your server. Otherwise everyone will be able to distribute files on your system.
    top

    DavDepthInfinity Directive

    Description:Allow PROPFIND, Depth: Infinity requests
    Syntax:DavDepthInfinity on|off
    Default:DavDepthInfinity off
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_dav

    Use the DavDepthInfinity directive to allow the processing of PROPFIND requests containing the header 'Depth: Infinity'. Because this type of request could constitute a denial-of-service attack, by default it is not allowed.

    top

    DavMinTimeout Directive

    Description:Minimum amount of time the server holds a lock on a DAV resource
    Syntax:DavMinTimeout seconds
    Default:DavMinTimeout 0
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_dav

    When a client requests a DAV resource lock, it can also specify a time when the lock will be automatically removed by the server. This value is only a request, and the server can ignore it or inform the client of an arbitrary value.

    Use the DavMinTimeout directive to specify, in seconds, the minimum lock timeout to return to a client. Microsoft Web Folders defaults to a timeout of 120 seconds; the DavMinTimeout can override this to a higher value (like 600 seconds) to reduce the chance of the client losing the lock due to network latency.

    Example

    <Location "/MSWord">
        DavMinTimeout 600
    </Location>

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_ajp.html0000644000000000000500000000047313362070302017760 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy_ajp.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_proxy_ajp.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_proxy_ajp.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_file_cache.html.fr.utf80000644000000000000500000004321613412755316021317 0ustar rootsrc mod_file_cache - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_file_cache

    Langues Disponibles:  en  |  fr  |  ko 

    Description:Mise en cache mémoire d'une liste statique de fichiers
    Statut:Expérimental
    Identificateur de Module:file_cache_module
    Fichier Source:mod_file_cache.c

    Sommaire

    Ce module doit être utilisé avec précautions. Il est recommandé de lire attentivement ce document, car l'utilisation de mod_file_cache peut facilement conduire à la création d'un site inopérant.

    La mise en cache de fichiers souvent demandés mais rarement modifiés est une technique permettant de réduire la charge du serveur. mod_file_cache met en oeuvre deux techniques de mise en cache de fichiers statiques fréquemment demandés. Des directives de configuration vous permettent d'indiquer à mod_file_cache soit d'ouvrir et de charger une image en mémoire d'un fichier avec mmap(), soit de préouvrir un fichier et de maintenir en service le gestionnaire du fichier. Les deux techniques permettent de réduire la charge du serveur lors du traitement des requêtes concernant ces fichiers, en accomplissant une partie du travail nécessaire à la mise à disposition de ces fichiers (en particulier les opérations d'entrées/sorties sur les fichiers) au démarrage du serveur, plutôt qu'au cours de chaque requête.

    Note : ces techniques sont inutilisables pour accélérer des programmes CGI ou d'autres fichiers servis par des gestionnaires de contenu spéciaux. Elles ne peuvent être utilisées que pour des fichiers standards, normalement servis par le gestionnaire de contenu de base d'Apache.

    Ce module est une extension du module d'Apache 1.3 mod_mmap_staticet s'en inspire fortement .

    top

    Utilisation de mod_file_cache

    mod_file_cache gère la mise en cache d'une liste de fichiers définie de manière statique via une des directives MMapFile ou CacheFile au niveau de la configuration du serveur principal.

    Les deux directives ne sont pas supportées par toutes les plates-formes. Par exemple, Apache pour Windows ne supporte pas actuellement la directive MMapFile, alors que d'autres plates-formes, comme AIX, supportent les deux. Vous recevrez un message d'erreur dans le journal des erreurs du serveur si vous essayez d'utiliser une directive non supportée. Si vous utilisez une directive non supportée, le serveur démarrera, mais les fichiers ne seront pas mis en cache. Sur les plates-formes qui supportent les deux directives, vous devez faire des essais afin de déterminer quelle directive vous convient le mieux.

    Directive MMapFile

    La directive MMapFile du module mod_file_cache permet de transférer en mémoire une liste statique de fichiers à l'aide de l'appel système mmap(). Cet appel système est disponible sur la plupart des plates-formes de style Unix, mais pas sur toutes. Il existe parfois des limites spécifiques au système quant à la taille et au nombre de fichiers qui peuvent être mmap()és, et l'expérimentation est probablement la méthode la plus simple pour déterminer ces limites.

    Ce mmap()age n'est effectué qu'une seul fois au démarrage ou redémarrage du serveur. Ainsi, chaque fois qu'un des fichiers chargés en mémoire est modifié au niveau du système de fichiers, vous devez redémarrer le serveur (voir la documentation sur l'Arrêt et redémarrage). Pour bien insister sur ce point, si des fichiers sont modifiés sur disque, et si vous ne redémarrez pas le serveur, vous allez finir par servir des contenus complètement obsolètes. Vous devez mettre à jour les fichiers en renommant l'ancienne version et en enregistrant la nouvelle sur disque. Pour y parvenir, on peut utiliser des outils comme rdist et mv. La raison pour laquelle ce module ne prend pas en compte les modifications de fichiers réside dans le fait que cette vérification nécessiterait un appel à stat() à chaque accès, et en fin de compte, l'augmentation de la consommation de ressources finirait par aller contre le but initial de réduire les entrées/sorties.

    Directive CacheFile

    La directive CacheFile du module mod_file_cache permet d'associer un gestionnaire ou descripteur de fichier à chaque fichier énuméré dans la directive de configuration et place ces gestionnaires de fichiers ouverts dans le cache. Lorsqu'un des fichier est demandé, le serveur sélectionne son gestionnaire dans le cache et le transmet à l'API sendfile() (ou TransmitFile() sous Windows).

    Cette mise en cache des gestionnaire n'est effectuée qu'une seule fois au démarrage ou redémarrage du système. Ainsi, chaque fois qu'un des fichiers chargés en mémoire est modifié au niveau du système de fichiers, vous devez redémarrer le serveur (voir la documentation sur l'Arrêt et redémarrage). Pour bien insister sur ce point, si des fichiers sont modifiés sur disque, et si vous ne redémarrez pas le serveur, vous allez finir par servir des contenus complètement obsolètes. Vous devez mettre à jour les fichiers en renommant l'ancienne version et en enregistrant la nouvelle sur disque. Pour y parvenir, on peut utiliser des outils comme rdist et mv.

    Note

    Ne cherchez pas à trouver de directive qui met tous les fichiers d'un répertoire en cache, de manière récursive. Pour y parvenir, vous pouvez vous reporter à la directive Include directive, et considérer cette commande :

    find /www/htdocs -type f -print \
    | sed -e 's/.*/mmapfile &/' > /www/conf/mmap.conf

    top

    Directive CacheFile

    Description:Met en cache une liste de gestionnaires de fichiers au démarrage
    Syntaxe:CacheFile chemin fichier [chemin fichier] ...
    Contexte:configuration globale
    Statut:Expérimental
    Module:mod_file_cache

    La directive CacheFile permet d'associer des gestionnaires à un ou plusieurs fichiers (séparés par des espaces), et de placer ceux-ci dans le cache au démarrage du serveur. Les gestionnaires des fichiers mis en cache sont automatiquement fermés à l'arrêt du serveur. Lorsqu'un ou plusieurs fichiers ont été modifiés sur disque, le serveur doit être redémarré afin que les modifications soient prises en compte par le cache.

    Soyez prudent avec les arguments chemin fichier : ils doivent correspondre exactement au chemin du système de fichier que créent les gestionnaires de traduction URL-vers-nom-fichier d'Apache. On ne peut pas comparer des inodes ou autres identifiants pour mettre en correspondance des chemins à l'aide de liens symboliques (etc...), car là encore, ceci nécessiterait un appel à stat() supplémentaire, ce qui n'est pas acceptable. Il n'est pas garanti que ce module fonctionne avec des noms de fichiers réécrits par mod_alias ou mod_rewrite.

    Exemple

    CacheFile /usr/local/apache/htdocs/index.html
    top

    Directive MMapFile

    Description:Charge au démarrage une liste de fichiers en mémoire
    Syntaxe:MMapFile chemin fichier [chemin fichier] ...
    Contexte:configuration globale
    Statut:Expérimental
    Module:mod_file_cache

    La directive MMapFile permet de charger un ou plusieurs fichiers (séparés par des espaces) en mémoire au démarrage du serveur. Ceux-ci sont automatiquement déchargés de la mémoire à l'arrêt du serveur. Lorsqu'un ou plusieurs fichiers ont été modifiés sur disque, on doit au minimum envoyer un signal HUP ou USR1 au serveur afin de les remmap()er.

    Soyez prudent avec les arguments chemin fichier : ils doivent correspondre exactement au chemin du système de fichier que créent les gestionnaires de traduction URL-vers-nom-fichier d'Apache. On ne peut pas comparer des inodes ou autres identifiants pour mettre en correspondance des chemins à l'aide de liens symboliques (etc...), car là encore, ceci nécessiterait un appel à stat() supplémentaire, ce qui n'est pas acceptable. Il n'est pas garanti que ce module fonctionne avec des noms de fichiers réécrits par mod_alias ou mod_rewrite.

    Exemple

    MMapFile /usr/local/apache/htdocs/index.html

    Langues Disponibles:  en  |  fr  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/event.html.en0000644000000000000500000007153413412755316016651 0ustar rootsrc event - Apache HTTP Server Version 2.4
    <-

    Apache MPM event

    Available Languages:  en  |  fr 

    Description:A variant of the worker MPM with the goal of consuming threads only for connections with active processing
    Status:MPM
    Module Identifier:mpm_event_module
    Source File:event.c

    Summary

    The event Multi-Processing Module (MPM) is designed to allow more requests to be served simultaneously by passing off some processing work to the listeners threads, freeing up the worker threads to serve new requests.

    To use the event MPM, add --with-mpm=event to the configure script's arguments when building the httpd.

    top

    Relationship with the Worker MPM

    event is based on the worker MPM, which implements a hybrid multi-process multi-threaded server. A single control process (the parent) is responsible for launching child processes. Each child process creates a fixed number of server threads as specified in the ThreadsPerChild directive, as well as a listener thread which listens for connections and passes them to a worker thread for processing when they arrive.

    Run-time configuration directives are identical to those provided by worker, with the only addition of the AsyncRequestWorkerFactor.

    top

    How it Works

    This MPM tries to fix the 'keep alive problem' in HTTP. After a client completes the first request, it can keep the connection open, sending further requests using the same socket and saving significant overhead in creating TCP connections. However, Apache HTTP Server traditionally keeps an entire child process/thread waiting for data from the client, which brings its own disadvantages. To solve this problem, this MPM uses a dedicated listener thread for each process to handle both the Listening sockets, all sockets that are in a Keep Alive state, sockets where the handler and protocol filters have done their work and the ones where the only remaining thing to do is send the data to the client.

    This new architecture, leveraging non-blocking sockets and modern kernel features exposed by APR (like Linux's epoll), no longer requires the mpm-accept Mutex configured to avoid the thundering herd problem.

    The total amount of connections that a single process/threads block can handle is regulated by the AsyncRequestWorkerFactor directive.

    Async connections

    Async connections would need a fixed dedicated worker thread with the previous MPMs but not with event. The status page of mod_status shows new columns under the Async connections section:

    Writing
    While sending the response to the client, it might happen that the TCP write buffer fills up because the connection is too slow. Usually in this case a write() to the socket returns EWOULDBLOCK or EAGAIN, to become writable again after an idle time. The worker holding the socket might be able to offload the waiting task to the listener thread, that in turn will re-assign it to the first idle worker thread available once an event will be raised for the socket (for example, "the socket is now writable"). Please check the Limitations section for more information.
    Keep-alive
    Keep Alive handling is the most basic improvement from the worker MPM. Once a worker thread finishes to flush the response to the client, it can offload the socket handling to the listener thread, that in turns will wait for any event from the OS, like "the socket is readable". If any new request comes from the client, then the listener will forward it to the first worker thread available. Conversely, if the KeepAliveTimeout occurs then the socket will be closed by the listener. In this way the worker threads are not responsible for idle sockets and they can be re-used to serve other requests.
    Closing
    Sometimes the MPM needs to perform a lingering close, namely sending back an early error to the client while it is still transmitting data to httpd. Sending the response and then closing the connection immediately is not the correct thing to do since the client (still trying to send the rest of the request) would get a connection reset and could not read the httpd's response. The lingering close is time bounded but it can take relatively long time, so it's offloaded to a worker thread (including the shutdown hooks and real socket close). From 2.4.28 onward this is also the case when connections finally timeout (the listener thread never handles connections besides waiting for and dispatching their events).

    These improvements are valid for both HTTP/HTTPS connections.

    Graceful process termination and Scoreboard usage

    This mpm showed some scalability bottlenecks in the past leading to the following error: "scoreboard is full, not at MaxRequestWorkers". MaxRequestWorkers limits the number of simultaneous requests that will be served at any given time and also the number of allowed processes (MaxRequestWorkers / ThreadsPerChild), meanwhile the Scoreboard is a representation of all the running processes and the status of their worker threads. If the scoreboard is full (so all the threads have a state that is not idle) but the number of active requests served is not MaxRequestWorkers, it means that some of them are blocking new requests that could be served but that are queued instead (up to the limit imposed by ListenBacklog). Most of the times the threads are stuck in the Graceful state, namely they are waiting to finish their work with a TCP connection to safely terminate and free up a scoreboard slot (for example handling long running requests, slow clients or connections with keep-alive enabled). Two scenarios are very common:

    • During a graceful restart. The parent process signals all its children to complete their work and terminate, while it reloads the config and forks new processes. If the old children keep running for a while before stopping, the scoreboard will be partially occupied until their slots are freed.
    • When the server load goes down in a way that causes httpd to stop some processes (for example due to MaxSpareThreads). This is particularly problematic because when the load increases again, httpd will try to start new processes. If the pattern repeats, the number of processes can rise quite a bit, ending up in a mixture of old processes trying to stop and new ones trying to do some work.

    From 2.4.24 onward, mpm-event is smarter and it is able to handle graceful terminations in a much better way. Some of the improvements are:

    • Allow the use of all the scoreboard slots up to ServerLimit. MaxRequestWorkers and ThreadsPerChild are used to limit the amount of active processes, meanwhile ServerLimit takes also into account the ones doing a graceful close to allow extra slots when needed. The idea is to use ServerLimit to instruct httpd about how many overall processes are tolerated before impacting the system resources.
    • Force gracefully finishing processes to close their connections in keep-alive state.
    • During graceful shutdown, if there are more running worker threads than open connections for a given process, terminate these threads to free resources faster (which may be needed for new processes).
    • If the scoreboard is full, prevent more processes to finish gracefully due to reduced load until old processes have terminated (otherwise the situation would get worse once the load increases again).

    The behavior described in the last point is completely observable via mod_status in the connection summary table through two new columns: "Slot" and "Stopping". The former indicates the PID and the latter if the process is stopping or not; the extra state "Yes (old gen)" indicates a process still running after a graceful restart.

    Limitations

    The improved connection handling may not work for certain connection filters that have declared themselves as incompatible with event. In these cases, this MPM will fall back to the behavior of the worker MPM and reserve one worker thread per connection. All modules shipped with the server are compatible with the event MPM.

    A similar restriction is currently present for requests involving an output filter that needs to read and/or modify the whole response body. If the connection to the client blocks while the filter is processing the data, and the amount of data produced by the filter is too big to be buffered in memory, the thread used for the request is not freed while httpd waits until the pending data is sent to the client.
    To illustrate this point we can think about the following two situations: serving a static asset (like a CSS file) versus serving content retrieved from FCGI/CGI or a proxied server. The former is predictable, namely the event MPM has full visibility on the end of the content and it can use events: the worker thread serving the response content can flush the first bytes until EWOULDBLOCK or EAGAIN is returned, delegating the rest to the listener. This one in turn waits for an event on the socket, and delegates the work to flush the rest of the content to the first idle worker thread. Meanwhile in the latter example (FCGI/CGI/proxied content) the MPM can't predict the end of the response and a worker thread has to finish its work before returning the control to the listener. The only alternative is to buffer the response in memory, but it wouldn't be the safest option for the sake of the server's stability and memory footprint.

    Background material

    The event model was made possible by the introduction of new APIs into the supported operating systems:

    • epoll (Linux)
    • kqueue (BSD)
    • event ports (Solaris)

    Before these new APIs where made available, the traditional select and poll APIs had to be used. Those APIs get slow if used to handle many connections or if the set of connections rate of change is high. The new APIs allow to monitor much more connections and they perform way better when the set of connections to monitor changes frequently. So these APIs made it possible to write the event MPM, that scales much better with the typical HTTP pattern of many idle connections.

    The MPM assumes that the underlying apr_pollset implementation is reasonably threadsafe. This enables the MPM to avoid excessive high level locking, or having to wake up the listener thread in order to send it a keep-alive socket. This is currently only compatible with KQueue and EPoll.

    top

    Requirements

    This MPM depends on APR's atomic compare-and-swap operations for thread synchronization. If you are compiling for an x86 target and you don't need to support 386s, or you are compiling for a SPARC and you don't need to run on pre-UltraSPARC chips, add --enable-nonportable-atomics=yes to the configure script's arguments. This will cause APR to implement atomic operations using efficient opcodes not available in older CPUs.

    This MPM does not perform well on older platforms which lack good threading, but the requirement for EPoll or KQueue makes this moot.

    • To use this MPM on FreeBSD, FreeBSD 5.3 or higher is recommended. However, it is possible to run this MPM on FreeBSD 5.2.1, if you use libkse (see man libmap.conf).
    • For NetBSD, at least version 2.0 is recommended.
    • For Linux, a 2.6 kernel is recommended. It is also necessary to ensure that your version of glibc has been compiled with support for EPoll.
    top

    AsyncRequestWorkerFactor Directive

    Description:Limit concurrent connections per process
    Syntax:AsyncRequestWorkerFactor factor
    Default:2
    Context:server config
    Status:MPM
    Module:event
    Compatibility:Available in version 2.3.13 and later

    The event MPM handles some connections in an asynchronous way, where request worker threads are only allocated for short periods of time as needed, and other connections with one request worker thread reserved per connection. This can lead to situations where all workers are tied up and no worker thread is available to handle new work on established async connections.

    To mitigate this problem, the event MPM does two things:

    • it limits the number of connections accepted per process, depending on the number of idle request workers;
    • if all workers are busy, it will close connections in keep-alive state even if the keep-alive timeout has not expired. This allows the respective clients to reconnect to a different process which may still have worker threads available.

    This directive can be used to fine-tune the per-process connection limit. A process will only accept new connections if the current number of connections (not counting connections in the "closing" state) is lower than:

    ThreadsPerChild + (AsyncRequestWorkerFactor * number of idle workers)

    An estimation of the maximum concurrent connections across all the processes given an average value of idle worker threads can be calculated with:

    (ThreadsPerChild + (AsyncRequestWorkerFactor * number of idle workers)) * ServerLimit

    Example

    ThreadsPerChild = 10
    ServerLimit = 4
    AsyncRequestWorkerFactor = 2
    MaxRequestWorkers = 40
    
    idle_workers = 4 (average for all the processes to keep it simple)
    
    max_connections = (ThreadsPerChild + (AsyncRequestWorkerFactor * idle_workers)) * ServerLimit
                    = (10 + (2 * 4)) * 4 = 72

    When all the worker threads are idle, then absolute maximum numbers of concurrent connections can be calculared in a simpler way:

    (AsyncRequestWorkerFactor + 1) * MaxRequestWorkers

    Example

    ThreadsPerChild = 10
    ServerLimit = 4
    MaxRequestWorkers = 40
    AsyncRequestWorkerFactor = 2

    If all the processes have all threads idle then:

    idle_workers = 10

    We can calculate the absolute maximum numbers of concurrent connections in two ways:

    max_connections = (ThreadsPerChild + (AsyncRequestWorkerFactor * idle_workers)) * ServerLimit
                    = (10 + (2 * 10)) * 4 = 120
    
    max_connections = (AsyncRequestWorkerFactor + 1) * MaxRequestWorkers
                    = (2 + 1) * 40 = 120

    Tuning AsyncRequestWorkerFactor requires knowledge about the traffic handled by httpd in each specific use case, so changing the default value requires extensive testing and data gathering from mod_status.

    MaxRequestWorkers was called MaxClients prior to version 2.3.13. The above value shows that the old name did not accurately describe its meaning for the event MPM.

    AsyncRequestWorkerFactor can take non-integer arguments, e.g "1.5".

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_auth_basic.html.ja.utf80000644000000000000500000004051113412755316021335 0ustar rootsrc mod_auth_basic - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_auth_basic

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:基本èªè¨¼
    ステータス:Base
    モジュール識別å­:auth_basic_module
    ソースファイル:mod_auth_basic.c
    äº’æ›æ€§:Apache 2.1 以é™

    概è¦

    与ãˆã‚‰ã‚ŒãŸãƒ—ロãƒã‚¤ãƒ€ (訳注: èªè¨¼ã§ã®ç…§ä¼šã‚’行ã†å•ã„åˆã‚ã›å…ˆ) ã§ãƒ¦ãƒ¼ã‚¶ã‚’検索ã—ã€HTTP 基本èªè¨¼ã§ã‚¢ã‚¯ã‚»ã‚¹åˆ¶é™ã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ HTTP ダイジェストèªè¨¼ã«ã¤ã„ã¦ã¯ mod_auth_digest ã§æä¾›ã•れã¾ã™ã€‚ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’使ã†éš›ã¯ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ã»ã‹ã« mod_authn_file ã¨ã„ã£ãŸèªè¨¼ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ã€ mod_authz_user ã¨ã„ã£ãŸæ‰¿èªãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ã®ä¸¡æ–¹ã‚’〠ãれãžã‚Œã²ã¨ã¤ä»¥ä¸Šçµ„ã¿åˆã‚ã›ã¦ä½¿ã†ã“ã¨ã«ãªã‚Šã¾ã™ã€‚

    top

    AuthBasicAuthoritative ディレクティブ

    説明:èªè¨¼ã¨æ‰¿èªã‚’ã€ã‚ˆã‚Šä½Žã„レベルã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ç§»è¡Œã•ã›ã‚‹ã‹ã‚’ 設定ã—ã¾ã™ã€‚
    æ§‹æ–‡:AuthBasicAuthoritative On|Off
    デフォルト:AuthBasicAuthoritative On
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Base
    モジュール:mod_auth_basic

    通常ã¯ã€AuthBasicProvider ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã—ãŸæ‰¿èªãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’é †ã«ä½¿ã£ã¦ãƒ¦ãƒ¼ã‚¶ã‚’検査ã—よã†ã¨ã—ã¦ã€ ã©ã®ãƒ—ロãƒã‚¤ãƒ€ã§ã‚‚ユーザを検査ã§ããªã‹ã£ãŸå ´åˆã€ã‚¢ã‚¯ã‚»ã‚¹æ‹’å¦ã—ã¾ã™ã€‚ AuthBasicAuthoritative ã‚’ Off ã¨æ˜Žç¤ºçš„ã«è¨­å®šã™ã‚‹ã¨ ユーザ ID ãŒãªã‹ã£ãŸã‚Šã€ ルールãŒãªã‹ã£ãŸã‚Šã™ã‚‹éš›ã«ã€èªè¨¼ã¨æ‰¿èªã®ä¸¡æ–¹ã«ã¤ã„ã¦ã€ プロãƒã‚¤ãƒ€ãƒ¼æ©Ÿæ§‹ã§å®Ÿè£…ã•れã¦ã„ãªã„モジュールã«å‡¦ç†ã‚’移行ã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ AuthBasicProvider ディレクティブã§è¨­å®šã§ããªã„サードパーティ製ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ã€ mod_auth_basic ã¨ã‚’組ã¿åˆã‚ã›ã‚‹ã¨ãã«ã®ã¿å¿…è¦ã«ãªã‚‹ã§ã—ょã†ã€‚ ãã®ã‚ˆã†ãªãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’使ã†å ´åˆã€å‡¦ç†é †åºã¯ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ãŒ ã©ã†ãªã£ã¦ã„ã‚‹ã‹ã«ã‚ˆã£ã¦æ±ºã¾ã‚Šã€å‡¦ç†é †åºã‚’指定ã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“。

    top

    AuthBasicFake ディレクティブ

    説明:Fake basic authentication using the given expressions for username and password
    æ§‹æ–‡:AuthBasicFake off|username [password]
    デフォルト:none
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Base
    モジュール:mod_auth_basic
    äº’æ›æ€§:Apache HTTP Server 2.4.5 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    AuthBasicProvider ディレクティブ

    説明:ã“ã®ä½ç½®ã«å¯¾ã™ã‚‹èªè¨¼ãƒ—ロãƒã‚¤ãƒ€ã‚’設定ã—ã¾ã™ã€‚
    æ§‹æ–‡:AuthBasicProvider provider-name [provider-name] ...
    デフォルト:AuthBasicProvider file
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Base
    モジュール:mod_auth_basic

    AuthBasicProvider ディレクティブã§ã€ ã“ã®ä½ç½®ã«å¯¾ã™ã‚‹ãƒ¦ãƒ¼ã‚¶èªè¨¼ã«ç”¨ã„られるèªè¨¼ãƒ—ロãƒã‚¤ãƒ€ã‚’設定ã—ã¾ã™ã€‚ デフォルトã«ãªã£ã¦ã„ã‚‹ file プロãƒã‚¤ãƒ€ã¯ mod_authn_file モジュールã§å®Ÿè£…ã•れã¦ã„ã¾ã™ã€‚ 指定ã—ãŸãƒ—ロãƒã‚¤ãƒ€ã‚’実装ã—ã¦ã„るモジュールãŒã€ å¿…ãšã‚µãƒ¼ãƒã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„るよã†ã«ã—ã¦ãã ã•ã„。

    Example

    <Location /secure>
    AuthType basic
    AuthName "private area"
    AuthBasicProvider dbm
    AuthDBMType SDBM
    AuthDBMUserFile /www/etc/dbmpasswd
    Require valid-user
    </Location>

    èªè¨¼ãƒ—ロãƒã‚¤ãƒ€ã¯ mod_authn_dbm, mod_authn_file, mod_authn_dbd, mod_authnz_ldap ã§å®Ÿè£…ã•れã¦ã„ã¾ã™ã€‚

    top

    AuthBasicUseDigestAlgorithm ディレクティブ

    説明:Check passwords against the authentication providers as if Digest Authentication was in force instead of Basic Authentication.
    æ§‹æ–‡:AuthBasicUseDigestAlgorithm MD5|Off
    デフォルト:AuthBasicUseDigestAlgorithm Off
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Base
    モジュール:mod_auth_basic
    äº’æ›æ€§:Apache HTTP Server 2.4.7 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_allowmethods.html0000644000000000000500000000034413362070302020444 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_allowmethods.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_allowmethods.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_logio.html.fr.utf80000644000000000000500000002602513412755316020365 0ustar rootsrc mod_logio - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_logio

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Journalisation des octets en entrée et en sortie pour chaque requête
    Statut:Extension
    Identificateur de Module:logio_module
    Fichier Source:mod_logio.c

    Sommaire

    Ce module permet d'enregistrer le nombre d'octets reçus et envoyés pour chaque requête. Ce nombre reflète le nombre réel d'octets transmis sur le réseau, et prend en compte les en-têtes et corps des requêtes et des réponses. Le décompte est effectué avant SSL/TLS en entrée et après SSL/TLS en sortie, si bien que le résultat reflètera toute modification introduite par le chiffrement.

    Pour fonctionner, ce module requiert le chargement du module mod_log_config.

    Lorsqu'on utilise les connexions persistantes avec SSL, le supplément de trafic induit par la négociation SSL est enregistré dans le décompte des octets transmis dans le cadre de la première requête de la connexion. Lors d'une renégociation SSL au niveau d'un répertoire, le décompte d'octets est associé à la requête qui a déclenché la renégociation.
    top

    Formats de journaux personnalisés

    Ce module introduit trois nouvelles directives de journalisation. Les caractéristiques de la requête en elle-même sont journalisées en insérant des directives "%" dans la chaîne de format, qui seront remplacées comme suit dans le fichier journal :

    Chaîne de Format Description
    %I Octets reçus, en-têtes et corps de requête inclus ; ne peut pas être nul.
    %O Octets envoyés, en-têtes inclus ; ne peut pas être nul.
    %S Nombre d'octets transmis (en émission et réception), y compris corps et en-têtes de requête. Ce nombre ne peut pas être nul, et il correspond à la combinaison des formats %I et %O.
    Disponible depuis la version 2.4.7 du serveur HTTP Apache.
    %^FB Délai en microsecondes entre l'arrivée de la requête et l'écriture du premier octet des en-têtes de la réponse. Disponible uniquement si la directive LogIOTrackTTFB a été définie à ON.
    Disponible à partir de la version 2.4.13 du serveur HTTP Apache

    En général, cette fonctionnalité s'utilise comme suit :

    Format de journal d'entrées/sorties combiné :
    "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %I %O"
    top

    Directive LogIOTrackTTFB

    Description:Permet d'enregistrer le délai avant le premier octet (time to first byte - TTFB)
    Syntaxe:LogIOTrackTTFB ON|OFF
    Défaut:LogIOTrackTTFB OFF
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_logio
    Compatibilité:Disponible à partir de la version 2.4.13 du serveur HTTP Apache

    Cette directive permet de définir si ce module mesure le délai entre la lecture de la requête et l'écriture du premier octet des en-têtes de la réponse. La valeur obtenue peut être enregistrée dans le journal via le format %^FB.

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cache_disk.html0000644000000000000500000000063713362070302020024 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_cache_disk.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_cache_disk.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_cache_disk.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_cache_disk.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_cache_disk.html.ja.utf80000644000000000000500000004456713412755316021327 0ustar rootsrc mod_cache_disk - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_cache_disk

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:URI をキーã«ã—ãŸã‚³ãƒ³ãƒ†ãƒ³ãƒ„キャッシュストレージ管ç†
    ステータス:Extension
    モジュール識別å­:cache_disk_module
    ソースファイル:mod_cache_disk.c

    概è¦

    mod_cache_disk ã¯ãƒ‡ã‚£ã‚¹ã‚¯ã‚’使用ã—ãŸã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ ç®¡ç†æ©Ÿæ§‹ã‚’実装ã—ã¦ã„ã¾ã™ã€‚主㫠mod_cache ã¨çµ„ã¿åˆã‚ã›ã¦ä½¿ã‚れã¾ã™ã€‚

    コンテンツã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã¸ã®ä¿å­˜ã¨å–得㯠URI ã«åŸºã¥ã„ãŸã‚­ãƒ¼ãŒä½¿ã‚れã¾ã™ã€‚ アクセスä¿è­·ã®ã‹ã‘られã¦ã„るコンテンツã¯ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã•れã¾ã›ã‚“。

    キャッシュã®å¤§ãã•を最大レベルã§ç¶­æŒã™ã‚‹ãŸã‚ã« htcacheclean を使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚

    注:

    mod_cache_disk 㯠mod_cache ã‚’å¿…è¦ã¨ã—ã¾ã™

    top

    CacheDirLength ディレクティブ

    説明:サブディレクトリåã®æ–‡å­—æ•°
    æ§‹æ–‡:CacheDirLength length
    デフォルト:CacheDirLength 2
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache_disk

    CacheDirLength ディレクティブã¯ã‚­ãƒ£ãƒƒã‚·ãƒ¥ 階層ã®å„ã‚µãƒ–ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®æ–‡å­—数を設定ã—ã¾ã™ã€‚ CacheDirLevels ã¨çµ„ã¿åˆã‚ã›ã¦è¨­å®šã™ã‚‹ã“ã¨ã§ã€ キャッシュ階層ã®ãŠãŠã‚ˆãã®æ§‹é€ ã‚’決ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    CacheDirLength ãŒå¤§ãã㦠CacheDirLevels ãŒå°ã•ã„å ´åˆã€ 比較的浅ã„階層ã«ãªã‚Šã¾ã™ãŒã€ å„階層ã®ã‚µãƒ–ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®æ•°ã¯å¤šããªã‚Šã¾ã™ã€‚

    CacheDirLevels* CacheDirLength ã® çµæžœã¯ 20 以内ã§ãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    top

    CacheDirLevels ディレクティブ

    説明:キャッシュã®ã‚µãƒ–ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®æ·±ã•ã®æ•°
    æ§‹æ–‡:CacheDirLevels levels
    デフォルト:CacheDirLevels 2
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache_disk

    CacheDirLevels ディレクティブã¯ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã® ã‚µãƒ–ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®æ·±ã•を設定ã—ã¾ã™ã€‚キャッシュデータ㯠CacheRoot ディレクトリã‹ã‚‰ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®æ·±ã•分下ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ä¿å­˜ã•れã¾ã™ã€‚

    CacheDirLevels ãŒå¤§ãã㦠CacheDirLength ãŒå°ã•ã„å ´åˆã€ 比較的深ã„階層ã«ãªã‚Šã¾ã™ãŒã€ å„階層ã®ã‚µãƒ–ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®æ•°ã¯å°‘ãªããªã‚Šã¾ã™ã€‚

    CacheDirLevels* CacheDirLength ã® çµæžœã¯ 20 以内ã§ãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    top

    CacheMaxFileSize ディレクティブ

    説明:キャッシュã«ä¿ç®¡ã•ã‚Œã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®æœ€å¤§ã® (ãƒã‚¤ãƒˆã§ã®) サイズ
    æ§‹æ–‡:CacheMaxFileSize bytes
    デフォルト:CacheMaxFileSize 1000000
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache_disk

    CacheMaxFileSize ディレクティブã¯ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’ キャッシュã™ã‚‹ã‹ã©ã†ã‹ã‚’判定ã™ã‚‹ã€æœ€å¤§ã®ã‚µã‚¤ã‚ºã‚’ãƒã‚¤ãƒˆæ•°ã§è¨­å®šã—ã¾ã™ã€‚

    CacheMaxFileSize 64000

    top

    CacheMinFileSize ディレクティブ

    説明:キャッシュã«ä¿ç®¡ã•ã‚Œã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®æœ€å°é™ã® (ãƒã‚¤ãƒˆã§ã®) 大ãã•
    æ§‹æ–‡:CacheMinFileSize bytes
    デフォルト:CacheMinFileSize 1
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache_disk

    CacheMinFileSize ディレクティブã¯ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’ キャッシュã™ã‚‹ã‹ã©ã†ã‹ã‚’判定ã™ã‚‹ã€æœ€å°ã®ã‚µã‚¤ã‚ºã‚’ãƒã‚¤ãƒˆæ•°ã§è¨­å®šã—ã¾ã™ã€‚

    CacheMinFileSize 64

    top

    CacheReadSize ディレクティブ

    説明:The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    æ§‹æ–‡:
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    ステータス:Extension
    モジュール:mod_cache_disk

    Documentation not yet translated. Please see English version of document.

    top

    CacheReadTime ディレクティブ

    説明:The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    æ§‹æ–‡:
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    ステータス:Extension
    モジュール:mod_cache_disk

    Documentation not yet translated. Please see English version of document.

    top

    CacheRoot ディレクティブ

    説明:キャッシュファイルãŒä¿ç®¡ã•れるルートディレクトリ
    æ§‹æ–‡:CacheRoot directory
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache_disk

    CacheRoot ディレクティブã¯ã‚­ãƒ£ãƒƒã‚·ãƒ¥ãƒ•ァイルを ä¿ç®¡ã™ã‚‹ãŸã‚ã®ãƒ‡ã‚£ã‚¹ã‚¯ä¸Šã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’指定ã—ã¾ã™ã€‚mod_cache_disk モジュール㌠Apache サーãƒã«ãƒ­ãƒ¼ãƒ‰ã•れ㦠ã„ã‚‹ã‹ã€çµ„ã¿è¾¼ã¾ã‚Œã¦ã„れã°ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯å¿…㚠定義ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 CacheRoot ã®å€¤ã‚’指定ã—ãªã‘れã°ã€ 設定ファイルã®å‡¦ç†ã§ã‚¨ãƒ©ãƒ¼ã«ãªã‚Šã¾ã™ã€‚CacheDirLevels ディレクティブ㨠CacheDirLength ディレクティブ㌠指定ã•れãŸãƒ«ãƒ¼ãƒˆãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªä¸‹ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæ§‹æˆã‚’定義ã—ã¾ã™ã€‚

    CacheRoot c:/cacheroot

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_ssl.html.fr.utf80000644000000000000500000062120613503452341020050 0ustar rootsrc mod_ssl - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_ssl

    Langues Disponibles:  en  |  fr 

    Description:Chiffrement de haut niveau basé sur les protocoles Secure Sockets Layer (SSL) et Transport Layer Security (TLS)
    Statut:Extension
    Identificateur de Module:ssl_module
    Fichier Source:mod_ssl.c

    Sommaire

    Ce module fournit le support SSL v3 et TLS v1 au serveur HTTP Apache. SSL v2 n'est plus supporté.

    Ce module s'appuie sur OpenSSL pour fournir le moteur de chiffrement.

    D'autres détails, discussions et exemples sont fournis dans la documentation SSL.

    Support Apache!

    Sujets

    Directives

    Traitement des bugs

    Voir aussi

    top

    Variables d'environnement

    Ce module peut être configuré pour fournir aux espaces de nommage SSI et CGI de nombreux éléments d'informations concernant SSL par le biais de variables d'environnement supplémentaires. Par défaut, et pour des raisons de performances, ces informations ne sont pas fournies (Voir la directive SSLOptions StdEnvVars ci-dessous). Les variables générées se trouvent dans la table ci-dessous. Ces informations peuvent également être disponible sous des noms différents à des fins de compatibilité ascendante. Reportez-vous au chapitre Compatibilité pour plus de détails à propos des variables de compatibilité.

    Nom de la variable : Type de valeur : Description :
    HTTPS drapeau HTTPS est utilisé.
    SSL_PROTOCOL chaîne La version du protocole SSL (SSLv3, TLSv1, TLSv1.1, TLSv1.2)
    SSL_SESSION_ID chaîne L'identifiant de session SSL codé en hexadécimal
    SSL_SESSION_RESUMED chaîne Session SSL initiale ou reprise. Note : plusieurs requêtes peuvent être servies dans le cadre de la même session SSL (initiale ou reprise) si les connexions persistantes (HTTP KeepAlive) sont utilisées
    SSL_SECURE_RENEG chaîne true si la renégociation sécurisée est supportée, false dans le cas contraire
    SSL_CIPHER chaîne Le nom de l'algorithme de chiffrement
    SSL_CIPHER_EXPORT chaîne true si l'algorithme de chiffrement est un algorithme exporté
    SSL_CIPHER_USEKEYSIZE nombre Nombre de bits de chiffrement (réellement utilisés)
    SSL_CIPHER_ALGKEYSIZE nombre Nombre de bits de chiffrement (possible)
    SSL_COMPRESS_METHOD chaîne Méthode de compression SSL négociée
    SSL_VERSION_INTERFACE chaîne La version du programme mod_ssl
    SSL_VERSION_LIBRARY chaîne La version du programme OpenSSL
    SSL_CLIENT_M_VERSION chaîne La version du certificat client
    SSL_CLIENT_M_SERIAL chaîne Le numéro de série du certificat client
    SSL_CLIENT_S_DN chaîne Le DN sujet du certificat client
    SSL_CLIENT_S_DN_x509 chaîne Elément du DN sujet du client
    SSL_CLIENT_SAN_Email_n chaîne Les entrées d'extension subjectAltName du certificat client de type rfc822Name
    SSL_CLIENT_SAN_DNS_n chaîne Les entrées d'extension subjectAltName du certificat client de type dNSName
    SSL_CLIENT_SAN_OTHER_msUPN_n chaîne Extensions subjectAltName de type otherName du certificat client, forme Microsoft du nom principal de l'utilisateur (OID 1.3.6.1.4.1.311.20.2.3)
    SSL_CLIENT_I_DN chaîne DN de l'émetteur du certificat du client
    SSL_CLIENT_I_DN_x509 chaîne Elément du DN de l'émetteur du certificat du client
    SSL_CLIENT_V_START chaîne Validité du certificat du client (date de début)
    SSL_CLIENT_V_END chaîne Validité du certificat du client (date de fin)
    SSL_CLIENT_V_REMAIN chaîne Nombre de jours avant expiration du certificat du client
    SSL_CLIENT_A_SIG chaîne Algorithme utilisé pour la signature du certificat du client
    SSL_CLIENT_A_KEY chaîne Algorithme utilisé pour la clé publique du certificat du client
    SSL_CLIENT_CERT chaîne Certificat du client au format PEM
    SSL_CLIENT_CERT_CHAIN_n chaîne Certificats de la chaîne de certification du client au format PEM
    SSL_CLIENT_CERT_RFC4523_CEA chaîne Numéro de série et fournisseur du certificat. le format correspond à celui de la CertificateExactAssertion dans la RFC4523
    SSL_CLIENT_VERIFY chaîne NONE, SUCCESS, GENEROUS ou FAILED:raison
    SSL_SERVER_M_VERSION chaîne La version du certificat du serveur
    SSL_SERVER_M_SERIAL chaîne The serial of the server certificate
    SSL_SERVER_S_DN chaîne DN sujet du certificat du serveur
    SSL_SERVER_S_DN_x509 chaîne Elément du DN sujet du certificat du serveur
    SSL_SERVER_SAN_Email_n chaîne Les entrées d'extension subjectAltName du certificat de serveur de type rfc822Name
    SSL_SERVER_SAN_DNS_n chaîne Les entrées d'extension subjectAltName du certificat de serveur de type dNSName
    SSL_SERVER_SAN_OTHER_dnsSRV_n chaîne Extensions subjectAltName de type otherName du certificat serveur, sous la forme SRVName (OID 1.3.6.1.5.5.7.8.7, RFC 4985)
    SSL_SERVER_I_DN chaîne DN de l'émetteur du certificat du serveur
    SSL_SERVER_I_DN_x509 chaîne Elément du DN de l'émetteur du certificat du serveur
    SSL_SERVER_V_START chaîne Validité du certificat du serveur (date de dédut)
    SSL_SERVER_V_END chaîne Validité du certificat du serveur (date de fin)
    SSL_SERVER_A_SIG chaîne Algorithme utilisé pour la signature du certificat du serveur
    SSL_SERVER_A_KEY chaîne Algorithme utilisé pour la clé publique du certificat du serveur
    SSL_SERVER_CERT chaîne Certificat du serveur au format PEM
    SSL_SRP_USER chaîne nom d'utilisateur SRP
    SSL_SRP_USERINFO chaîne informations sur l'utilisateur SRP
    SSL_TLS_SNI string Contenu de l'extension SNI TLS (si supporté par ClientHello)

    x509 spécifie un élément de DN X.509 parmi C,ST,L,O,OU,CN,T,I,G,S,D,UID,Email. A partir de la version 2.2.0 d'Apache, x509 peut aussi comporter un suffixe numérique _n. Si le DN en question comporte plusieurs attributs de noms identiques, ce suffixe constitue un index débutant à zéro et permettant de sélectionner un attribut particulier. Par exemple, si le DN sujet du certificat du serveur comporte deux champs OU, on peut utiliser SSL_SERVER_S_DN_OU_0 et SSL_SERVER_S_DN_OU_1 pour référencer chacun d'entre eux. Un nom de variable sans suffixe _n est équivalent au même nom avec le suffixe _0, ce qui correspond au premier attribut (ou au seul) caractérisant le DN. Lorsque la table d'environnement est remplie en utilisant l'option StdEnvVars de la directive SSLOptions, le premier attribut (ou le seul) caractérisant le DN est enregistré avec un nom sans suffixe ; autrement dit, aucune entrée possédant comme suffixe _0 n'est enregistrée.

    A partir de la version 2.4.32 de httpd, on peut ajouter le suffixe _RAW à x509 dans un composant DN afin d'empêcher la conversion de la valeur de l'attribut en UTF-8. Il doit être placé après le suffixe index (s'il existe). On utilisera par exemple SSL_SERVER_S_DN_OU_RAW ou SSL_SERVER_S_DN_OU_0_RAW.

    Le format des variables *_DN a changé depuis la version 2.3.11 d'Apache HTTPD. Voir l'option LegacyDNStringFormat de la directive SSLOptions pour plus de détails.

    SSL_CLIENT_V_REMAIN n'est disponible qu'à partir de la version 2.1.

    Plusieurs variables d'environnement additionnelles peuvent être utilisées dans les expressions SSLRequire, ou dans les formats de journalisation personnalisés :

    HTTP_USER_AGENT        PATH_INFO             AUTH_TYPE
    HTTP_REFERER           QUERY_STRING          SERVER_SOFTWARE
    HTTP_COOKIE            REMOTE_HOST           API_VERSION
    HTTP_FORWARDED         REMOTE_IDENT          TIME_YEAR
    HTTP_HOST              IS_SUBREQ             TIME_MON
    HTTP_PROXY_CONNECTION  DOCUMENT_ROOT         TIME_DAY
    HTTP_ACCEPT            SERVER_ADMIN          TIME_HOUR
    THE_REQUEST            SERVER_NAME           TIME_MIN
    REQUEST_FILENAME       SERVER_PORT           TIME_SEC
    REQUEST_METHOD         SERVER_PROTOCOL       TIME_WDAY
    REQUEST_SCHEME         REMOTE_ADDR           TIME
    REQUEST_URI            REMOTE_USER

    Dans ces contextes, deux formats spéciaux peuvent aussi être utilisés :

    ENV:nom_variable
    Correspond à la variable d'environnement standard nom_variable.
    HTTP:nom_en-tête
    Correspond à la valeur de l'en-tête de requête dont le nom est nom_en-tête.
    top

    Formats de journaux personnalisés

    Lorsque mod_ssl est compilé dans le serveur Apache ou même chargé (en mode DSO), des fonctions supplémentaires sont disponibles pour le Format de journal personnalisé du module mod_log_config. A ce titre, la fonction de format d'eXtension ``%{nom-var}x'' peut être utilisée pour présenter en extension toute variable fournie par tout module, et en particulier celles fournies par mod_ssl et que vous trouverez dans la table ci-dessus.

    A des fins de compatibilité ascendante, il existe une fonction de format cryptographique supplémentaire ``%{nom}c''. Vous trouverez toutes les informations à propos de cette fonction dans le chapitre Compatibilité.

    Exemple

    CustomLog "logs/ssl_request_log" "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

    Ces formats sont disponibles même si l'option StdEnvVars de la directive SSLOptions n'a pas été définie.

    top

    Information à propos de la requête

    mod_ssl enregistre des informations à propos de la requête que l'on peut restituer dans les journaux avec la chaîne de format %{nom}n via le module mod_log_config.

    Les informations enregistrées sont les suivantes :

    ssl-access-forbidden
    Cette information contient la valeur 1 si l'accès a été refusé suite à une directive SSLRequire ou SSLRequireSSL.
    ssl-secure-reneg
    Si mod_ssl a été compilé avec une version d'OpenSSL qui supporte la renégociation sécurisée, si SSL est utilisé pour la connexion courante et si le client supporte lui aussi la renégociation sécurisée, cette information contiendra la valeur 1. Si le client ne supporte pas la renégociation sécurisée, l'information contiendra la valeur 0. Si mod_ssl n'a pas été compilé avec une version d'OpenSSL qui supporte la renégociation sécurisée, ou si SSL n'est pas utilisé pour la connexion courante, le contenu de l'information ne sera pas défini.
    top

    Extension pour l'interprétation des expressions

    Lorsque mod_ssl est compilé statiquement avec Apache, ou même chargé dynamiquement (en tant que module DSO), toute variable en provenance de mod_ssl peut être utilisée pour l'interprétation des expression ap_expr. Les variables peuvent être référencées en utilisant la syntaxe ``%{varname}''. A partir de la version 2.4.18, on peut aussi utiliser la syntaxe de style mod_rewrite ``%{SSL:varname}'', ou la syntaxe de style fonction ``ssl(varname)''.

    Exemple (en utilisant mod_headers)

    Header set X-SSL-PROTOCOL "expr=%{SSL_PROTOCOL}"
    Header set X-SSL-CIPHER "expr=%{SSL:SSL_CIPHER}"

    Cette fonctionnalité est disponible même si l'option StdEnvVars de la directive SSLOptions n'a pas été définie.

    top

    Fournisseurs d'autorisation disponibles avec Require

    mod_ssl propose quelques fournisseurs d'autorisation à utiliser avec la directive Require du module mod_authz_core.

    Require ssl

    Le fournisseur ssl refuse l'accès si une connexion n'est pas chiffrée avec SSL. L'effet est similaire à celui de la directive SSLRequireSSL.

    Require ssl

    Require ssl-verify-client

    Le fournisseur ssl autorise l'accès si l'utilisateur est authentifié via un certificat client valide. Ceci n'a un effet que si SSLVerifyClient optional est actif.

    Dans l'exemple suivant, l'accès est autorisé si le client est authentifié via un certificat client ou par nom d'utilisateur/mot de passe :

    Require ssl-verify-client
    Require valid-user
    top

    Directive SSLCACertificateFile

    Description:Fichier contenant une concaténation des certificats de CA codés en PEM pour l'authentification des clients
    Syntaxe:SSLCACertificateFile chemin-fichier
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Cette directive permet de définir le fichier tout-en-un où vous pouvez rassembler les certificats des Autorités de Certification (CAs) pour les clients auxquels vous avez à faire. On les utilise pour l'authentification des clients. Un tel fichier contient la simple concaténation des différents fichiers de certificats codés en PEM, par ordre de préférence. Cette directive peut être utilisée à la place et/ou en complément de la directive SSLCACertificatePath.

    Exemple

    SSLCACertificateFile "/usr/local/apache2/conf/ssl.crt/ca-bundle-client.crt"
    top

    Directive SSLCACertificatePath

    Description:Répertoire des certificats de CA codés en PEM pour l'authentification des clients
    Syntaxe:SSLCACertificatePath chemin-répertoire
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Cette directive permet de définir le répertoire où sont stockés les certificats des Autorités de Certification (CAs) pour les clients auxquels vous avez à faire. On les utilise pour vérifier le certificat du client au cours de l'authentification de ce dernier.

    Les fichiers de ce répertoire doivent être codés en PEM et ils sont accédés via des noms de fichier sous forme de condensés ou hash. Il ne suffit donc pas de placer les fichiers de certificats dans ce répertoire : vous devez aussi créer des liens symboliques nommés valeur-de-hashage.N, et vous devez toujours vous assurer que ce répertoire contient les liens symboliques appropriés.

    Exemple

    SSLCACertificatePath "/usr/local/apache2/conf/ssl.crt/"
    top

    Directive SSLCADNRequestFile

    Description:Fichier contenant la concaténation des certificats de CA codés en PEM pour la définition de noms de CA acceptables
    Syntaxe:SSLCADNRequestFile chemin-fichier
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Lorsque mod_ssl demande un certificat client, une liste de noms d'Autorités de Certification acceptables est envoyée au client au cours de la phase d'initialisation de la connexion SSL. Le client peut alors utiliser cette liste de noms de CA pour sélectionner un certificat client approprié parmi ceux dont il dispose.

    Si aucune des directives SSLCADNRequestPath ou SSLCADNRequestFile n'est définie, la liste de noms de CsA acceptables envoyée au client est la liste des noms de tous les certificats de CA spécifiés par les directives SSLCACertificateFile et SSLCACertificatePath ; en d'autres termes, c'est la liste des noms de CAs qui sera effectivement utilisée pour vérifier le certificat du client.

    Dans certaines situations, il est utile de pouvoir envoyer une liste de noms de CA acceptables qui diffère de la liste des CAs effectivement utilisés pour vérifier le certificat du client ; considérons par exemple le cas où le certificat du client est signé par des CAs intermédiaires. On peut ici utiliser les directives SSLCADNRequestPath et/ou SSLCADNRequestFile, et les noms de CA acceptables seront alors extraits de l'ensemble des certificats contenus dans le répertoire et/ou le fichier définis par cette paire de directives.

    SSLCADNRequestFile doit spécifier un fichier tout-en-un contenant une concaténation des certificats de CA codés en PEM.

    Exemple

    SSLCADNRequestFile "/usr/local/apache2/conf/ca-names.crt"
    top

    Directive SSLCADNRequestPath

    Description:Répertoire contenant des fichiers de certificats de CA codés en PEM pour la définition de noms de CA acceptables
    Syntaxe:SSLCADNRequestPath chemin-répertoire
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Cette directive optionnelle permet de définir la liste de noms de CAs acceptables qui sera envoyée au client lorsqu'un certificat de client est demandé. Voir la directive SSLCADNRequestFile pour plus de détails.

    Les fichiers de ce répertoire doivent être codés en PEM et ils sont accédés via des noms de fichier sous forme de condensés ou hash. Il ne suffit donc pas de placer les fichiers de certificats dans ce répertoire : vous devez aussi créer des liens symboliques nommés valeur-de-hashage.N, et vous devez toujours vous assurer que ce répertoire contient les liens symboliques appropriés.

    Exemple

    SSLCADNRequestPath "/usr/local/apache2/conf/ca-names.crt/"
    top

    Directive SSLCARevocationCheck

    Description:Active la vérification des révocations basée sur les CRL
    Syntaxe:SSLCARevocationCheck chain|leaf|none [flags ...]
    Défaut:SSLCARevocationCheck none
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le drapeau optionnel flags est disponible à partir de la version 2.4.21 du serveur HTTP Apache

    Active la vérification des révocations basée sur les Listes de Révocations de Certificats (CRL). Au moins une des directives SSLCARevocationFile ou SSLCARevocationPath doit être définie. Lorsque cette directive est définie à chain (valeur recommandée), les vérifications CRL sont effectuées sur tous les certificats de la chaîne, alors que la valeur leaf limite la vérification au certificat hors chaîne (la feuille).

    flags peut prendre comme valeurs

    • no_crl_for_cert_ok

      Avant la version 2.3.15, les vérifications CRL dans mod_ssl réussissaient même si aucune CRL n'était trouvée dans les chemins définis par les directives SSLCARevocationFile ou SSLCARevocationPath.

      Le comportement a changé avec l'introduction de la directive SSLCARevocationFile : par défaut avec chain ou leaf, les CRLs doivent être présentes pour que la validation réussisse ; dans le cas contraire, elle échouera avec une erreur "unable to get certificate CRL".

      La valeur no_crl_for_cert_ok du drapeau flag permet de retrouver le comportement précédent.

    Exemple

    SSLCARevocationCheck chain

    Compatibilité avec la branche 2.2

    SSLCARevocationCheck chain no_crl_for_cert_ok
    top

    Directive SSLCARevocationFile

    Description:Fichier contenant la concaténation des CRLs des CA codés en PEM pour l'authentification des clients
    Syntaxe:SSLCARevocationFile chemin-fichier
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Cette directive permet de définir le fichier tout-en-un où sont rassemblées les Listes de Révocation de Certificats (CRLs) des Autorités de certification (CAs) pour les clients auxquels vous avez à faire. On les utilise pour l'authentification des clients. Un tel fichier contient la simple concaténation des différents fichiers de CRLs codés en PEM, dans l'ordre de préférence. Cette directive peut être utilisée à la place et/ou en complément de la directive SSLCARevocationPath.

    Exemple

    SSLCARevocationFile
    "/usr/local/apache2/conf/ssl.crl/ca-bundle-client.crl"
    top

    Directive SSLCARevocationPath

    Description:Répertoire des CRLs de CA codés en PEM pour l'authentification des clients
    Syntaxe:SSLCARevocationPath chemin-répertoire
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Cette directive permet de définir le répertoire où sont stockées les Listes de Révocation de Certificats (CRL) des Autorités de Certification (CAs) pour les clients auxquels vous avez à faire. On les utilise pour révoquer les certificats des clients au cours de l'authentification de ces derniers.

    Les fichiers de ce répertoire doivent être codés en PEM et ils sont accédés via des noms de fichier sous forme de condensés ou hash. Il ne suffit donc pas de placer les fichiers de CRL dans ce répertoire : vous devez aussi créer des liens symboliques nommés valeur-de-hashage.N, et vous devez toujours vous assurer que ce répertoire contient les liens symboliques appropriés.

    Exemple

    SSLCARevocationPath "/usr/local/apache2/conf/ssl.crl/"
    top

    Directive SSLCertificateChainFile

    Description:Fichier contenant les certificats de CA du serveur codés en PEM
    Syntaxe:SSLCertificateChainFile chemin-fichier
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    SSLCertificateChainFile est obsolète

    SSLCertificateChainFile est devenue obsolète avec la version 2.4.8, lorsque la directive SSLCertificateFile a été étendue pour supporter aussi les certificats de CA intermédiaires dans le fichier de certificats du serveur.

    Cette directive permet de définir le fichier optionnel tout-en-un où vous pouvez rassembler les certificats des Autorités de Certification (CA) qui forment la chaîne de certification du certificat du serveur. Cette chaîne débute par le certificat de la CA qui a délivré le certificat du serveur et peut remonter jusqu'au certificat de la CA racine. Un tel fichier contient la simple concaténation des différents certificats de CA codés en PEM, en général dans l'ordre de la chaîne de certification.

    Elle doit être utilisée à la place et/ou en complément de la directive SSLCACertificatePath pour construire explicitement la chaîne de certification du serveur qui est envoyée au navigateur en plus du certificat du serveur. Elle s'avère particulièrement utile pour éviter les conflits avec les certificats de CA lorsqu'on utilise l'authentification du client. Comme le fait de placer un certificat de CA de la chaîne de certification du serveur dans la directive SSLCACertificatePath produit le même effet pour la construction de la chaîne de certification, cette directive a pour effet colatéral de faire accepter les certificats clients fournis par cette même CA, au cours de l'authentification du client.

    Soyez cependant prudent : fournir la chaîne de certification ne fonctionne que si vous utilisez un simple certificat de serveur RSA ou DSA. Si vous utilisez une paire de certificats couplés RSA+DSA , cela ne fonctionnera que si les deux certificats utilisent vraiment la même chaîne de certification. Dans le cas contraire, la confusion risque de s'installer au niveau des navigateurs.

    Exemple

    SSLCertificateChainFile "/usr/local/apache2/conf/ssl.crt/ca.crt"
    top

    Directive SSLCertificateFile

    Description:Fichier de données contenant le certificat X.509 du serveur codé en PEM
    Syntaxe:SSLCertificateFile chemin-fichier
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Cette directive permet de définir le fichier de données contenant les informations de certificat X.509 du serveur codées au format PEM. Ce fichier doit contenir au minimum un certificat d'entité finale (feuille). La directive peut être utilisée plusieurs fois (elle référence des fichiers différents) pour accepter plusieurs algorithmes d'authentification au niveau du serveur - souvent RSA, DSA et ECC. Le nombre d'algorithmes supportés dépend de la version d'OpenSSL utilisée avec mod_ssl : à partir de la version 1.0.0, la commande openssl list-public-key-algorithms affiche la liste des algorithmes supportés. Voir aussi la note ci-dessous à propos des limitations des versions d'OpenSSL antérieures à 1.0.2 et la manière de les contourner.

    Les fichiers peuvent aussi contenir des certificats de CA intermédiaires triés depuis la feuille vers la racine. Cette fonctionnalité est disponible depuis la version 2.4.8 du serveur HTTP Apache, et rend obsolète la directive SSLCertificateChainFile. A partir de la version 1.0.2 d'OpenSSL, il est alors possible de configurer la chaîne de certification en fonction du certificat.

    Depuis la version 2.4.7 du serveur HTTP Apache, on peut aussi ajouter des paramètres DH personnalisés et un nom EC curve pour les clés éphémères à la fin du premier fichier défini par la directive SSLCertificateFile. Ces paramètres peuvent être générés avec les commandes openssl dhparam et openssl ecparam, et ils peuvent être ajoutés tel quel à la fin du premier fichier de certificat. En effet, seul le premier fichier de certificat défini peut être utilisé pour enregistrer des paramètres personnalisés, car ces derniers s'appliquent indépendamment de l'algorithme d'authentification utilisé.

    Enfin, il est aussi possible d'ajouter la clé privée du certificat de l'entité finale au fichier de certificat, ce qui permet de se passer d'une directive SSLCertificateKeyFile séparée. Cette pratique est cependant fortement déconseillée. En effet, les fichiers de certificats qui contiennent de tels clés embarquées doivent être définis avant les certificats en utilisant un fichier de clé séparé. En outre, si la clé est chiffrée, une boîte de dialogue pour entrer le mot de passe de la clé s'ouvre au démarrage du serveur.

    Interopérabilité des paramètres DH avec les nombres premiers de plus de 1024 bits

    Depuis la version 2.4.7, mod_ssl utilise des paramètres DH standardisés avec des nombres premiers de 2048, 3072 et 4096 bits, et avec des nombres premiers de 6144 et 8192 bits depuis la version 2.4.10 (voir RFC 3526), et les fournit aux clients en fonction de la longueur de la clé du certificat RSA/DSA. En particulier avec les clients basés sur Java (versions 7 et antérieures), ceci peut provoquer des erreurs au cours de la négociation - voir cette réponse de la FAQ SSL pour contourner les problèmes de ce genre.

    Paramètres DH par défaut lorsqu'on utilise plusieurs certificats et une version d'OpenSSL antérieure à 1.0.2.

    Lorsqu'on utilise plusieurs certificats pour supporter différents algorithmes d'authentification (comme RSA, DSA, mais principalement ECC) et une version d'OpenSSL antérieure à 1.0.2, il est recommandé soit d'utiliser des paramètres DH spécifiques (solution à privilégier) en les ajoutant au premier fichier certificat (comme décrit ci-dessus), soit d'ordonner les directives SSLCertificateFile de façon à ce que les certificats RSA/DSA soit placés après les certificats ECC.

    Cette limitation est présente dans les anciennes versions d'OpenSSL qui présentent toujours le dernier certificat configuré, au lieu de laisser le serveur HTTP Apache déterminer le certificat sélectionné lors de la phase de négociation de la connexion (lorsque les paramètres DH doivent être envoyés à l'hôte distant). De ce fait, le serveur peut sélectionner des paramètres DH par défaut basés sur la longueur de la clé du mauvais certificat (les clés ECC sont beaucoup plus petites que les clés RSA/DSA et leur longueur n'est pas pertinente pour la sélection des nombres premiers DH).

    Ce problème peut être résolu en créant et configurant des paramètres DH spécifiques (comme décrit ci-dessus), car ils l'emportent toujours sur les paramètres DH par défaut, et vous pourrez ainsi utiliser une longueur spécifique et appropriée.

    Exemple

    SSLCertificateFile "/usr/local/apache2/conf/ssl.crt/server.crt"
    top

    Directive SSLCertificateKeyFile

    Description:Fichier contenant la clé privée du serveur codée en PEM
    Syntaxe:SSLCertificateKeyFile chemin-fichier
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Cette directive permet de définir le fichier contenant la clé privée du serveur codée en PEM. Si la clé privée est chiffrée, une boîte de dialogue demandant le mot de passe s'ouvre au démarrage.

    Cette directive peut être utilisée plusieurs fois pour référencer différents noms de fichiers, afin de supporter plusieurs algorithmes pour l'authentification du serveur. A chaque directive SSLCertificateKeyFile doit être associée une directive SSLCertificateFile correspondante.

    La clé privé peut aussi être ajoutée au fichier défini par la directive SSLCertificateFile, mais cette pratique est fortement déconseillée. En effet, les fichiers de certificats qui comportent une telle clé doivent être définis après les certificats en utilisant un fichier de clé séparé.

    Exemple

    SSLCertificateKeyFile "/usr/local/apache2/conf/ssl.key/server.key"
    top

    Directive SSLCipherSuite

    Description:Algorithmes de chiffrement disponibles pour la négociation au cours de l'initialisation de la connexion SSL
    Syntaxe:SSLCipherSuite [protocol] cipher-spec
    Défaut:SSLCipherSuite DEFAULT (dépend de la version d'OpenSSL installée)
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_ssl

    Cette directive complexe utilise la chaîne cipher-spec contenant la liste des algorithmes de chiffrement OpenSSL que le client peut utiliser au cours de la phase d'initialisation de la connexion SSL. La spécification optionnelle du protocole permet de configurer la suite d'algorithmes de chiffrement pour une version spécifique de SSL. Une des valeurs possibles est "SSL" pour toutes les versions du protocole SSL jusqu'à TLSv1.2 compris.

    Notez que cette directive peut être utilisée aussi bien dans un contexte de serveur que dans un contexte de répertoire. Dans un contexte de serveur, elle s'applique à l'initialisation SSL standard lorsqu'une connexion est établie. Dans un contexte de répertoire, elle force une renégociation SSL avec la liste d'algorithmes de chiffrement spécifiée après la lecture d'une requête HTTP, mais avant l'envoi de la réponse HTTP.

    Si la bibliothèque SSL supporte TLSv1.3 (versions d'OpenSSL 1.1.1 et supérieures), il est possible de spécifier le paramètre "TLSv1.3" pour configurer la suite d'algorithmes de chiffrement pour ce protocole. Comme TLSv1.3 n'autorise pas la renégociation, spécifier pour lui des algorithmes de chiffrement dans un contexte de répertoire n'est pas autorisé

    Pour obtenir la liste des noms d'algorithmes de chiffrement pour TLSv1.3, se référer à la the OpenSSL documentation.

    La liste d'algorithmes de chiffrement SSL spécifiée par l'argument cipher-spec comporte quatre attributs principaux auxquels s'ajoutent quelques attributs secondaires :

    • Algorithme d'échange de clés:
      RSA, Diffie-Hellman, Elliptic Curve Diffie-Hellman, Secure Remote Password.
    • Algorithme d'authentification:
      RSA, Diffie-Hellman, DSS, ECDSA, ou none.
    • Algorithme de chiffrement:
      AES, DES, Triple-DES, RC4, RC2, IDEA, etc...
    • Algorithme de condensé MAC:
      MD5, SHA ou SHA1, SHA256, SHA384.

    L'algorithme de chiffrement peut aussi provenir de l'extérieur. Les algorithmes SSLv2 ne sont plus supportés. Pour définir les algorithmes à utiliser, on peut soit spécifier tous les algorithmes à la fois, soit utiliser des alias pour spécifier une liste d'algorithmes dans leur ordre de préférence (voir Table 1). Les algorithmes et alias effectivement disponibles dépendent de la version d'openssl utilisée. Les versions ultérieures d'openssl sont susceptibles d'inclure des algorithmes supplémentaires.

    Symbole Description
    Algorithme d'échange de clés :
    kRSA Echange de clés RSA
    kDHr Echange de clés Diffie-Hellman avec clé RSA
    kDHd Echange de clés Diffie-Hellman avec clé DSA
    kEDH Echange de clés Diffie-Hellman temporaires (pas de certificat)
    kSRP échange de clés avec mot de passe distant sécurisé (SRP)
    Algorithmes d'authentification :
    aNULL Pas d'authentification
    aRSA Authentification RSA
    aDSS Authentification DSS
    aDH Authentification Diffie-Hellman
    Algorithmes de chiffrement :
    eNULL Pas de chiffrement
    NULL alias pour eNULL
    AES Chiffrement AES
    DES Chiffrement DES
    3DES Chiffrement Triple-DES
    RC4 Chiffrement RC4
    RC2 Chiffrement RC2
    IDEA Chiffrement IDEA
    Algorithmes de condensés MAC :
    MD5 Fonction de hashage MD5
    SHA1 Fonction de hashage SHA1
    SHA alias pour SHA1
    SHA256 Fonction de hashage SHA256
    SHA384 Fonction de hashage SHA384
    Alias :
    SSLv3 tous les algorithmes de chiffrement SSL version 3.0
    TLSv1 tous les algorithmes de chiffrement TLS version 1.0
    EXP tous les algorithmes de chiffrement externes
    EXPORT40 tous les algorithmes de chiffrement externes limités à 40 bits
    EXPORT56 tous les algorithmes de chiffrement externes limités à 56 bits
    LOW tous les algorithmes de chiffrement faibles (non externes, DES simple)
    MEDIUM tous les algorithmes avec chiffrement 128 bits
    HIGH tous les algorithmes utilisant Triple-DES
    RSA tous les algorithmes utilisant l'échange de clés RSA
    DH tous les algorithmes utilisant l'échange de clés Diffie-Hellman
    EDH tous les algorithmes utilisant l'échange de clés Diffie-Hellman temporaires
    ECDH Echange de clés Elliptic Curve Diffie-Hellman
    ADH tous les algorithmes utilisant l'échange de clés Diffie-Hellman anonymes
    AECDH tous les algorithmes utilisant l'échange de clés Elliptic Curve Diffie-Hellman
    SRP tous les algorithmes utilisant l'échange de clés avec mot de passe distant sécurisé (SRP)
    DSS tous les algorithmes utilisant l'authentification DSS
    ECDSA tous les algorithmes utilisant l'authentification ECDSA
    aNULL tous les algorithmes n'utilisant aucune authentification

    Cela devient intéressant lorsque tous ces symboles sont combinés ensemble pour spécifier les algorithmes disponibles et l'ordre dans lequel vous voulez les utiliser. Pour simplifier tout cela, vous disposez aussi d'alias (SSLv3, TLSv1, EXP, LOW, MEDIUM, HIGH) pour certains groupes d'algorithmes. Ces symboles peuvent être reliés par des préfixes pour former la chaîne algorithmes. Les préfixes disponibles sont :

    • none: ajoute l'algorithme à la liste
    • +: déplace les algorithmes qui conviennent à la place courante dans la liste
    • -: supprime l'algorithme de la liste (peut être rajouté plus tard)
    • !: supprime définitivement l'algorithme de la liste (ne peut plus y être rajouté plus tard)

    Les algorithmes aNULL, eNULL et EXP sont toujours désactivés

    Depuis la version 2.4.7, les algorithmes de type null ou destinés à l'exportation sont toujours désactivés car mod_ssl ajoute obligatoirement !aNULL:!eNULL:!EXP à toute chaîne d'algorithme de chiffrement à l'initialisation.

    Pour vous simplifier la vie, vous pouvez utiliser la commande ``openssl ciphers -v'' qui vous fournit un moyen simple de créer la chaîne algorithmes avec succès. La chaîne algorithmes par défaut dépend de la version des bibliothèques SSL installées. Supposons qu'elle contienne ``RC4-SHA:AES128-SHA:HIGH:MEDIUM:!aNULL:!MD5'', ce qui stipule de mettre RC4-SHA et AES128-SHA en premiers, car ces algorithmes présentent un bon compromis entre vitesse et sécurité. Viennent ensuite les algorithmes de sécurité élevée et moyenne. En fin de compte, les algorithmes qui n'offrent aucune authentification sont exclus, comme les algorithmes anonymes Diffie-Hellman pour SSL, ainsi que tous les algorithmes qui utilisent MD5 pour le hashage, car celui-ci est reconnu comme insuffisant.

    $ openssl ciphers -v 'RC4-SHA:AES128-SHA:HIGH:MEDIUM:!aNULL:!MD5'
    RC4-SHA                 SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=SHA1
    AES128-SHA              SSLv3 Kx=RSA      Au=RSA  Enc=AES(128)  Mac=SHA1
    DHE-RSA-AES256-SHA      SSLv3 Kx=DH       Au=RSA  Enc=AES(256)  Mac=SHA1
    ...                     ...               ...     ...           ...
    SEED-SHA                SSLv3 Kx=RSA      Au=RSA  Enc=SEED(128) Mac=SHA1
    PSK-RC4-SHA             SSLv3 Kx=PSK      Au=PSK  Enc=RC4(128)  Mac=SHA1
    KRB5-RC4-SHA            SSLv3 Kx=KRB5     Au=KRB5 Enc=RC4(128)  Mac=SHA1

    Vous trouverez la liste complète des algorithmes RSA & DH spécifiques à SSL dans la Table 2.

    Exemple

    SSLCipherSuite RSA:!EXP:!NULL:+HIGH:+MEDIUM:-LOW
    Symbole algorithme Protocole Echange de clés Authentification Chiffrement Condensé MAC Type
    Algorithmes RSA :
    DES-CBC3-SHA SSLv3 RSA RSA 3DES(168) SHA1
    IDEA-CBC-SHA SSLv3 RSA RSA IDEA(128) SHA1
    RC4-SHA SSLv3 RSA RSA RC4(128) SHA1
    RC4-MD5 SSLv3 RSA RSA RC4(128) MD5
    DES-CBC-SHA SSLv3 RSA RSA DES(56) SHA1
    EXP-DES-CBC-SHA SSLv3 RSA(512) RSA DES(40) SHA1 export
    EXP-RC2-CBC-MD5 SSLv3 RSA(512) RSA RC2(40) MD5 export
    EXP-RC4-MD5 SSLv3 RSA(512) RSA RC4(40) MD5 export
    NULL-SHA SSLv3 RSA RSA None SHA1
    NULL-MD5 SSLv3 RSA RSA None MD5
    Algorithmes Diffie-Hellman :
    ADH-DES-CBC3-SHA SSLv3 DH None 3DES(168) SHA1
    ADH-DES-CBC-SHA SSLv3 DH None DES(56) SHA1
    ADH-RC4-MD5 SSLv3 DH None RC4(128) MD5
    EDH-RSA-DES-CBC3-SHA SSLv3 DH RSA 3DES(168) SHA1
    EDH-DSS-DES-CBC3-SHA SSLv3 DH DSS 3DES(168) SHA1
    EDH-RSA-DES-CBC-SHA SSLv3 DH RSA DES(56) SHA1
    EDH-DSS-DES-CBC-SHA SSLv3 DH DSS DES(56) SHA1
    EXP-EDH-RSA-DES-CBC-SHA SSLv3 DH(512) RSA DES(40) SHA1 export
    EXP-EDH-DSS-DES-CBC-SHA SSLv3 DH(512) DSS DES(40) SHA1 export
    EXP-ADH-DES-CBC-SHA SSLv3 DH(512) None DES(40) SHA1 export
    EXP-ADH-RC4-MD5 SSLv3 DH(512) None RC4(40) MD5 export
    top

    Directive SSLCompression

    Description:Permet d'activer la compression au niveau SSL
    Syntaxe:SSLCompression on|off
    Défaut:SSLCompression off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible à partir de la version 2.4.3 du serveur HTTP Apache, si on utilise une version d'OpenSSL 0.9.8 ou supérieure ; l'utilisation dans un contexte de serveur virtuel n'est disponible que si on utilise une version d'OpenSSL 1.0.0 ou supérieure. La valeur par défaut était on dans la version 2.4.3.

    Cette directive permet d'activer la compression au niveau SSL.

    L'activation de la compression est à l'origine de problèmes de sécurité dans la plupart des configurations (l'attaque nommée CRIME).

    top

    Directive SSLCryptoDevice

    Description:Active l'utilisation d'un accélérateur matériel de chiffrement
    Syntaxe:SSLCryptoDevice moteur
    Défaut:SSLCryptoDevice builtin
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ssl

    Cette directive permet d'activer l'utilisation d'une carte accélératrice de chiffrement qui prendra en compte certaines parties du traitement relatif à SSL. Cette directive n'est utilisable que si la boîte à outils SSL à été compilée avec le support "engine" ; les versions 0.9.7 et supérieures d'OpenSSL possèdent par défaut le support "engine", alors qu'avec la version 0.9.6, il faut utiliser les distributions séparées "-engine".

    Pour déterminer les moteurs supportés, exécutez la commande "openssl engine".

    Exemple

    # Pour un accélérateur Broadcom :
    SSLCryptoDevice ubsec
    top

    Directive SSLEngine

    Description:Interrupteur marche/arrêt du moteur SSL
    Syntaxe:SSLEngine on|off|optional
    Défaut:SSLEngine off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Cette directive permet d'activer/désactiver le moteur du protocole SSL/TLS. Elle doit être utilisée dans une section <VirtualHost> pour activer SSL/TLS pour ce serveur virtuel particulier. Par défaut, le moteur du protocole SSL/TLS est désactivé pour le serveur principal et tous les serveurs virtuels configurés.

    Exemple

    <VirtualHost _default_:443>
    SSLEngine on
    #...
    </VirtualHost>

    Depuis la version 2.1 d'Apache, la directive SSLEngine peut être définie à optional, ce qui active le support de RFC 2817, Upgrading to TLS Within HTTP/1.1. Pour le moment, aucun navigateur web ne supporte RFC 2817.

    top

    Directive SSLFIPS

    Description:Coimmutateur du mode SSL FIPS
    Syntaxe:SSLFIPS on|off
    Défaut:SSLFIPS off
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ssl

    Cette directive permet d'activer/désactiver l'utilisation du drapeau FIPS_mode de la bibliothèque SSL. Elle doit être définie dans le contexte du serveur principal, et n'accepte pas les configurations sources de conflits (SSLFIPS on suivi de SSLFIPS off par exemple). Le mode s'applique à toutes les opérations de la bibliothèque SSL.

    Si httpd a été compilé avec une bibliothèque SSL qui ne supporte pas le drapeau FIPS_mode, la directive SSLFIPS on échouera. Reportez-vous au document sur la politique de sécurité FIPS 140-2 de la bibliothèque du fournisseur SSL, pour les prérequis spécifiques nécessaires à l'utilisation de mod_ssl selon un mode d'opération approuvé par FIPS 140-2 ; notez que mod_ssl en lui-même n'est pas validé, mais peut être décrit comme utilisant un module de chiffrement validé par FIPS 140-2, lorsque tous les composants sont assemblés et mis en oeuvre selon les recommandations de la politique de sécurité applicable.

    top

    Directive SSLHonorCipherOrder

    Description:Option permettant de classer les algorithmes de chiffrement du serveur par ordre de préférence
    Syntaxe:SSLHonorCipherOrder on|off
    Défaut:SSLHonorCipherOrder off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Normalement, ce sont les préférences du client qui sont prises en compte lors du choix d'un algorithme de chiffrement au cours d'une négociation SSLv3 ou TLSv1. Si cette directive est activée, ce sont les préférences du serveur qui seront prises en compte à la place.

    Exemple

    SSLHonorCipherOrder on
    top

    Directive SSLInsecureRenegotiation

    Description:Option permettant d'activer le support de la renégociation non sécurisée
    Syntaxe:SSLInsecureRenegotiation on|off
    Défaut:SSLInsecureRenegotiation off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible depuis httpd 2.2.15, si une version 0.9.8m ou supérieure d'OpenSSL est utilisée

    Comme il a été spécifié, toutes les versions des protocoles SSL et TLS (jusqu'à la version 1.2 de TLS incluse) étaient vulnérables à une attaque de type Man-in-the-Middle (CVE-2009-3555) au cours d'une renégociation. Cette vulnérabilité permettait à un attaquant de préfixer la requête HTTP (telle qu'elle était vue du serveur) avec un texte choisi. Une extension du protocole a été développée pour corriger cette vulnérabilité, sous réserve qu'elle soit supportée par le client et le serveur.

    Si mod_ssl est lié à une version 0.9.8m ou supérieure d'OpenSSL, par défaut, la renégociation n'est accordée qu'aux clients qui supportent la nouvelle extension du protocole. Si cette directive est activée, la renégociation sera accordée aux anciens clients (non patchés), quoique de manière non sécurisée

    Avertissement à propos de la sécurité

    Si cette directive est activée, les connexions SSL seront vulnérables aux attaques de type préfixe Man-in-the-Middle comme décrit dans CVE-2009-3555.

    Exemple

    SSLInsecureRenegotiation on

    La variable d'environnement SSL_SECURE_RENEG peut être utilisée dans un script SSI ou CGI pour déterminer si la renégociation sécurisée est supportée pour une connexion SSL donnée.

    top

    Directive SSLOCSPDefaultResponder

    Description:Définit l'URI du répondeur par défaut pour la validation OCSP
    Syntaxe:SSLOCSPDefaultResponder uri
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Cette directive permet de définir le répondeur OCSP par défaut. Si la directive SSLOCSPOverrideResponder n'est pas activée, l'URI spécifié ne sera utilisé que si aucun URI de répondeur n'est spécifié dans le certificat en cours de vérification.

    top

    Directive SSLOCSPEnable

    Description:Active la validation OCSP de la chaîne de certificats du client
    Syntaxe:SSLOCSPEnable on|leaf|off
    Défaut:SSLOCSPEnable off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le mode leaf est disponible à partir de la version 2.4.34 du serveur HTTP Apache

    Cette directive permet d'activer la validation OCSP de la chaîne de certificats du client. Si elle est activée, les certificats de la chaîne de certificats du client seront validés auprès d'un répondeur OCSP, une fois la vérification normale effectuée (vérification des CRLs incluse). En mode 'leaf', seul le certificat du client sera validé.

    Le répondeur OCSP utilisé est soit extrait du certificat lui-même, soit spécifié dans la configuration ; voir les directives SSLOCSPDefaultResponder et SSLOCSPOverrideResponder.

    Exemple

    SSLVerifyClient on
    SSLOCSPEnable on
    SSLOCSPDefaultResponder "http://responder.example.com:8888/responder"
    SSLOCSPOverrideResponder on
    top

    Directive SSLOCSPNoverify

    Description:Evite la vérification des certificats des répondeurs OCSP
    Syntaxe:SSLOCSPNoverify On/Off
    Défaut:SSLOCSPNoverify Off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible à partir de la version 2.4.26 du serveur HTTP Apache, sous réserve d'utiliser une version 0.9.7 ou supérieure d'OpenSSL

    Cette directive permet d'éviter la vérification des certificats des répondeurs OCSP, ce qui peut s'avérer utile lorsqu'on teste un serveur OCSP.

    top

    Directive SSLOCSPOverrideResponder

    Description:Force l'utilisation de l'URI du répondeur par défaut pour la validation OCSP
    Syntaxe:SSLOCSPOverrideResponder on|off
    Défaut:SSLOCSPOverrideResponder off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Force l'utilisation, au cours d'une validation OCSP de certificat, du répondeur OCSP par défaut spécifié dans la configuration, que le certificat en cours de vérification fasse mention d'un répondeur OCSP ou non.

    top

    Directive SSLOCSPProxyURL

    Description:Adresse de mandataire à utiliser pour les requêtes OCSP
    Syntaxe:SSLOCSPProxyURL url
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible à partir de la version 2.4.19 du serveur HTTP Apache

    Cette directive permet de définir l'URL d'un mandataire HTTP qui devra être utilisé pour toutes les requêtes vers un répondeur OCSP.

    top

    Directive SSLOCSPResponderCertificateFile

    Description:Fournit un jeu de certificats de confiance du répondeur OCSP avec encodage PEM
    Syntaxe:SSLOCSPResponderCertificateFile file
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible à partir de la version 2.4.26 du serveur HTTP Apache, sous réserve d'utiliser une version 0.9.7 ou supérieure d'OpenSSL

    Cette directive permet de définir un fichier contenant une liste de certificats de confiance du répondeur OCSP à utiliser au cours de la validation du certificat du répondeur OCSP. Les certificats fournis peuvent être considérés comme de confiance sans avoir à effectuer de vérifications supplémentaires. Ce processus de validation du certificat du répondeur OCSP intervient en général lorsque ce dernier est autosigné ou tout simplement absent de la réponse OCSP.

    top

    Directive SSLOCSPResponderTimeout

    Description:Délai d'attente pour les requêtes OCSP
    Syntaxe:SSLOCSPResponderTimeout secondes
    Défaut:SSLOCSPResponderTimeout 10
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Cette option permet de définir le délai d'attente pour les requêtes à destination des répondeurs OCSP, lorsque la directive SSLOCSPEnable est à on.

    top

    Directive SSLOCSPResponseMaxAge

    Description:Age maximum autorisé pour les réponses OCSP
    Syntaxe:SSLOCSPResponseMaxAge secondes
    Défaut:SSLOCSPResponseMaxAge -1
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Cette option permet de définir l'âge maximum autorisé (la "fraicheur") des réponses OCSP. La valeur par défault (-1) signifie qu'aucun âge maximum n'est défini ; autrement dit, les réponses OCSP sont considérées comme valides tant que la valeur de leur champ nextUpdate se situe dans le futur.

    top

    Directive SSLOCSPResponseTimeSkew

    Description:Dérive temporelle maximale autorisée pour la validation des réponses OCSP
    Syntaxe:SSLOCSPResponseTimeSkew secondes
    Défaut:SSLOCSPResponseTimeSkew 300
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Cette option permet de définir la dérive temporelle maximale autorisée pour les réponses OCSP (lors de la vérification des champs thisUpdate et nextUpdate).

    top

    Directive SSLOCSPUseRequestNonce

    Description:Use a nonce within OCSP queries
    Syntaxe:SSLOCSPUseRequestNonce on|off
    Défaut:SSLOCSPUseRequestNonce on
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Available in httpd 2.4.10 and later

    La documentation de cette directive n'a pas encore t traduite. Veuillez vous reporter la version en langue anglaise.

    top

    Directive SSLOpenSSLConfCmd

    Description:Configuration des paramètres d'OpenSSL via son API SSL_CONF
    Syntaxe:SSLOpenSSLConfCmd commande valeur
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible depuis la version 2.4.8 du serveur HTTP Apache avec OpenSSL 1.0.2 ou supérieur

    Cette directive permet à mod_ssl d'accéder à l'API SSL_CONF d'OpenSSL. Il n'est ainsi plus nécessaire d'implémenter des directives supplémentaires pour mod_ssl lorsque de nouvelles fonctionnalités sont ajoutées à OpenSSL, ce qui rend la configuration de ce dernier beaucoup plus souple.

    Le jeu de commandes disponibles pour la directive SSLOpenSSLConfCmd dépend de la version d'OpenSSL utilisée pour mod_ssl (la version minimale 1.0.2 est un prérequis). Pour obtenir la liste des commandes supportées, voir la section Supported configuration file commands de la page de manuel d'OpenSSL SSL_CONF_cmd(3).

    Certaines commandes peuvent remplacer des directives existantes (comme SSLCipherSuite ou SSLProtocol) ; notez cependant que la syntaxe et/ou les valeurs possibles peuvent différer.

    Examples

    SSLOpenSSLConfCmd Options -SessionTicket,ServerPreference
    SSLOpenSSLConfCmd ECDHParameters brainpoolP256r1
    SSLOpenSSLConfCmd ServerInfoFile
    "/usr/local/apache2/conf/server-info.pem"
    SSLOpenSSLConfCmd Protocol "-ALL, TLSv1.2"
    SSLOpenSSLConfCmd SignatureAlgorithms RSA+SHA384:ECDSA+SHA256
    top

    Directive SSLOptions

    Description:Configure différentes options d'exécution du moteur SSL
    Syntaxe:SSLOptions [+|-]option ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Options
    Statut:Extension
    Module:mod_ssl

    Cette directive permet de contrôler différentes options d'exécution du moteur SSL dans un contexte de répertoire. Normalement, si plusieurs SSLOptions peuvent s'appliquer à un répertoire, c'est la plus spécifique qui est véritablement prise en compte ; les options ne se combinent pas entre elles. Elles se combinent cependant entre elles si elles sont toutes précédées par un symbole plus (+) ou moins (-). Toute option précédée d'un + est ajoutée aux options actuellement en vigueur, et toute option précédée d'un - est supprimée de ces mêmes options.

    Les options disponibles sont :

    • StdEnvVars

      Lorsque cette option est activée, le jeu standard de variables d'environnement SSL relatives à CGI/SSI est créé. Cette option est désactivée par défaut pour des raisons de performances, car l'extraction des informations constitue une opération assez coûteuse en ressources. On n'active donc en général cette option que pour les requêtes CGI et SSI.

    • ExportCertData

      Lorsque cette option est activée, des variables d'environnement CGI/SSI supplémentaires sont créées : SSL_SERVER_CERT, SSL_CLIENT_CERT et SSL_CLIENT_CERT_CHAIN_n (avec n = 0,1,2,..). Elles contiennent les certificats X.509 codés en PEM du serveur et du client pour la connexion HTTPS courante, et peuvent être utilisées par les scripts CGI pour une vérification de certificat plus élaborée. De plus, tous les autres certificats de la chaîne de certificats du client sont aussi fournis. Tout ceci gonfle un peu l'environnement, et c'est la raison pour laquelle vous ne devez activer cette option qu'à la demande.

    • FakeBasicAuth

      Lorsque cette option est activée, le Nom Distinctif (DN) sujet du certificat client X509 est traduit en un nom d'utilisateur pour l'autorisation HTTP de base. Cela signifie que les méthodes d'authentification standard d'Apache peuvent être utilisées pour le contrôle d'accès. Le nom d'utilisateur est tout simplement le Sujet du certificat X509 du client (il peut être déterminé en utilisant la commande OpenSSL openssl x509 : openssl x509 -noout -subject -in certificat.crt). Notez qu'aucun mot de passe n'est envoyé par l'utilisateur. Chaque entrée du fichier des utilisateurs doit comporter ce mot de passe : ``xxj31ZMTZzkVA'', qui est la version chiffrée en DES du mot ``password''. Ceux qui travaillent avec un chiffrement basé sur MD5 (par exemple sous FreeBSD ou BSD/OS, etc...) doivent utiliser le condensé MD5 suivant pour le même mot : ``$1$OXLyS...$Owx8s2/m9/gfkcRVXzgoE/''.

      Notez que la directive AuthBasicFake implémentée par le module mod_auth_basic peut être utilisée d'une manière plus générale comme simulation d'authentification basique, ce qui permet de contrôler la structure nom utilisateur/mot de passe.

    • StrictRequire

      Cette option force l'interdiction d'accès lorsque SSLRequireSSL ou SSLRequire a décidé que l'accès devait être interdit. Par défaut, dans le cas où une directive ``Satisfy any'' est utilisée, et si d'autres restrictions d'accès ont été franchies, on passe en général outre l'interdiction d'accès due à SSLRequireSSL ou SSLRequire (parce que c'est ainsi que le mécanisme Satisfy d'Apache doit fonctionner). Pour des restrictions d'accès plus strictes, vous pouvez cependant utiliser SSLRequireSSL et/ou SSLRequire en combinaison avec une option ``SSLOptions +StrictRequire''. Une directive ``Satisfy Any'' n'a alors aucune chance d'autoriser l'accès si mod_ssl a décidé de l'interdire.

    • OptRenegotiate

      Cette option active la gestion optimisée de la renégociation des connexions SSL intervenant lorsque les directives SSL sont utilisées dans un contexte de répertoire. Par défaut un schéma strict est appliqué, et chaque reconfiguration des paramètres SSL au niveau du répertoire implique une phase de renégociation SSL complète. Avec cette option, mod_ssl essaie d'éviter les échanges non nécessaires en effectuant des vérifications de paramètres plus granulaires (mais tout de même efficaces). Néanmoins, ces vérifications granulaires peuvent ne pas correspondre à ce qu'attend l'utilisateur, et il est donc recommandé de n'activer cette option que dans un contexte de répertoire.

    • LegacyDNStringFormat

      Cette option permet d'agir sur la manière dont les valeurs des variables SSL_{CLIENT,SERVER}_{I,S}_DN sont formatées. Depuis la version 2.3.11, Apache HTTPD utilise par défaut un format compatible avec la RFC 2253. Ce format utilise des virgules comme délimiteurs entre les attributs, permet l'utilisation de caractères non-ASCII (qui sont alors convertis en UTF8), échappe certains caractères spéciaux avec des slashes inversés, et trie les attributs en plaçant l'attribut "C" en dernière position.

      Si l'option LegacyDNStringFormat est présente, c'est l'ancien format qui sera utilisé : les attributs sont triés avec l'attribut "C" en première position, les séparateurs sont des slashes non inversés, les caractères non-ASCII ne sont pas supportés et le support des caractères spéciaux n'est pas fiable.

    Exemple

    SSLOptions +FakeBasicAuth -StrictRequire
    <Files ~ "\.(cgi|shtml)$">
        SSLOptions +StdEnvVars -ExportCertData
    </Files>
    top

    Directive SSLPassPhraseDialog

    Description:Méthode utilisée pour entrer le mot de passe pour les clés privées chiffrées
    Syntaxe:SSLPassPhraseDialog type
    Défaut:SSLPassPhraseDialog builtin
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ssl

    Lors de son démarrage, Apache doit lire les différents fichiers de certificats (voir la directive SSLCertificateFile) et de clés privées (voir la directive SSLCertificateKeyFile) des serveurs virtuels où SSL est activé. Comme, pour des raisons de sécurité, les fichiers de clés privées sont en général chiffrés, mod_ssl doit demander à l'administrateur un mot de passe pour déchiffrer ces fichiers. L'argument type permet de choisir la manière dont cette demande peut être formulée parmi les trois suivantes :

    • builtin

      C'est la méthode par défaut, et un dialogue interactive de terminal s'ouvre au cours du démarrage juste avant qu'Apache ne se détache du terminal. A ce moment, l'administrateur doit entrer manuellement un mot de passe pour chaque fichier de clé privée chiffré. Etant donné qu'il peut y avoir un grand nombre de serveurs virtuels configurés avec SSL activé, le protocole de réutilisation suivant est utilisé pour minimiser le dialogue : lorsqu'un fichier de clé privée est chiffré, tous les mots de passe connus (au début, il n'y en a aucun, bien entendu) sont essayés. Si l'un de ces mots de passe connus convient, aucun dialogue ne s'ouvrira pour ce fichier de clé privée particulier. Si aucun ne convient, un autre mot de passe sera demandé à partir du terminal et sera mis en mémoire pour le fichier de clé privée suivant (pour lequel il pourra éventuellement être réutilisé).

      Cette méthode confère à mod_ssl une grande souplesse (car pour N fichiers de clé privée chiffrés, vous pouvez utiliser N mots de passe différents - mais vous devrez alors tous les fournir, bien entendu), tout en minimisant le dialogue de terminal (vous pouvez en effet utiliser un seul mot de passe pour les N fichiers de clé privée et vous n'aurez alors à l'entrer qu'une seule fois).

    • |/chemin/vers/programme [arguments...]

      Ce mode permet d'utiliser un programme externe qui va se présenter comme une redirection vers un périphérique d'entrée particulier ; le texte de prompt standard utilisé pour le mode builtin est envoyé au programme sur stdin, et celui-ci doit renvoyer des mots de passe sur stdout. Si plusieurs mots de passe sont requis (ou si un mot de passe incorrect a été entré), un texte de prompt supplémentaire sera écrit après le retour du premier mot de passe, et d'autres mots de passe devront alors être réécrits.

    • exec:/chemin/vers/programme

      Ici, un programme externe est appelé au démarrage du serveur pour chaque fichier de clé privée chiffré.Il est appelé avec deux arguments (le premier est de la forme ``nom-serveur:port'', le second est ``RSA'', ``DSA'', ``ECC'' ou un index entier commençant à 3 si plus de 3 clés ont été configurées), qui indiquent pour quels serveur et algorithme il doit écrire le mot de passe correspondant sur stdout. Avec les versions 2.4.8 (non réalisée) et 2.4.9, il est appelé avec un seul argument, une chaîne de la forme "servername:portnumber:index" (où index est un nombre entier commençant à zéro), qui spécifie le serveur, le port TCP et un numéro de certificat. Le but recherché est l'exécution de vérifications de sécurité préalables permettant de s'assurer que le système n'est pas victime d'une attaque, et de ne fournir le mot de passe que si toutes les vérifications ont été effectuées avec succès.

      Ces vérifications de sécurité, ainsi que la manière dont le mot de passe est déterminé peuvent être aussi sophistiqués que vous le désirez. Mod_ssl ne définit que l'interface : un programme exécutable qui écrit le mot de passe sur stdout. Ni plus, ni moins ! Ainsi, si vous êtes vraiment paranoïaque en matière de sécurité, voici votre interface. Tout le reste doit être confié à l'administrateur à titre d'exercice, car les besoins en sécurité locale sont très différents.

      L'algorithme de réutilisation est utilisé ici aussi. En d'autres termes, le programme externe n'est appelé qu'une fois par mot de passe unique.

    Exemple

    SSLPassPhraseDialog "exec:/usr/local/apache/sbin/pp-filter"
    top

    Directive SSLProtocol

    Description:Indique les versions du protocole SSL/TLS disponibles
    Syntaxe:SSLProtocol [+|-]protocole ...
    Défaut:SSLProtocol all -SSLv3 (jusqu'à la version 2.4.16 : all)
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl

    Cette directive permet de définir quelles versions du protocole SSL/TLS seront acceptées lors de l'initialisation d'une nouvelle connexion.

    Les protocoles disponibles sont les suivants (sensibles à la casse) :

    • SSLv3

      Il s'agit du protocole Secure Sockets Layer (SSL) version 3.0 de Netscape Corporation. C'est le successeur de SSLv2 et le prédécesseur de TLSv1, mais est considéré comme obsolète dans la RFC 7568

    • TLSv1

      Il s'agit du protocole Transport Layer Security (TLS) version 1.0. C'est le successeur de SSLv3, et il est défini dans la RFC2246. Il est supporté par la plupart des clients.

    • TLSv1.1 (à partir de la version 1.0.1 d'OpenSSL)

      Une révision du protocole TLS 1.0 définie dans la RFC 4346.

    • TLSv1.2 (à partir de la version 1.0.1 d'OpenSSL)

      Une révision du protocole TLS 1.1 définie dans la RFC 5246.

    • TLSv1.3 (à partir de la version 1.1.1 d'OpenSSL)

      Une nouvelle version du protocole TLS définie dans la RFC 8446.

    • all

      C'est un raccourci pour ``+SSLv3 +TLSv1'' ou - à partir de la version 1.0.1 d'OpenSSL - ``+SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2'' (sauf si OpenSSL a été compilé avec l'option ``no-ssl3'', auquel cas all n'inclura pas +SSLv3).

    Exemple

    SSLProtocol TLSv1
    top

    Directive SSLProxyCACertificateFile

    Description:Fichier contenant la concaténation des certificats de CA codés en PEM pour l'authentification des serveurs distants
    Syntaxe:SSLProxyCACertificateFile file-path
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Cette directive permet de définir le fichier tout-en-un où sont stockés les certificats des Autorités de Certification (CA) pour les serveurs distants auxquels vous avez à faire. On les utilise lors de l'authentification du serveur distant. Un tel fichier contient la simple concaténation des différents fichiers de certificats codés en PEM, classés par ordre de préférence. On peut utiliser cette directive à la place et/ou en complément de la directive SSLProxyCACertificatePath.

    Exemple

    SSLProxyCACertificateFile
    "/usr/local/apache2/conf/ssl.crt/ca-bundle-serveur.distant.crt"
    top

    Directive SSLProxyCACertificatePath

    Description:Répertoire des certificats de CA codés en PEM pour l'authentification des serveurs distants
    Syntaxe:SSLProxyCACertificatePath chemin-répertoire
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Cette directive permet de spécifier le répertoire où sont stockés les certificats des Autorités de Certification (CAs) pour les serveurs distants auxquels vous avez à faire. On les utilise pour vérifier le certificat du serveur distant lors de l'authentification de ce dernier.

    Les fichiers de ce répertoire doivent être codés en PEM et ils sont accédés via des noms de fichier sous forme de condensés ou hash. Il ne suffit donc pas de placer les fichiers de certificats dans ce répertoire : vous devez aussi créer des liens symboliques nommés valeur-de-hashage.N, et vous devez toujours vous assurer que ce répertoire contient les liens symboliques appropriés.

    Exemple

    SSLProxyCACertificatePath "/usr/local/apache2/conf/ssl.crt/"
    top

    Directive SSLProxyCARevocationCheck

    Description:Active la vérification des révocations basée sur les CRLs pour l'authentification du serveur distant
    Syntaxe:SSLProxyCARevocationCheck chain|leaf|none
    Défaut:SSLProxyCARevocationCheck none
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Active la vérification des révocations basée sur les Listes de révocations de Certificats (CRL) pour les serveurs distants auxquels vous vous connectez. A moins une des directives SSLProxyCARevocationFile ou SSLProxyCARevocationPath doit être définie. Lorsque cette directive est définie à chain (valeur recommandée), les vérifications CRL sont effectuées sur tous les certificats de la chaîne, alors que la valeur leaf limite la vérification au certificat hors chaîne (la feuille).

    Lorsque la directive est définie à chain ou leaf, les CRLs doivent être disponibles pour que la validation réussisse

    Avant la version 2.3.15, les vérifications CRL dans mod_ssl réussissaient même si aucune CRL n'était trouvée dans les chemins définis par les directives SSLProxyCARevocationFile ou SSLProxyCARevocationPath. Le comportement a changé avec l'introduction de cette directive : lorsque la vérification est activée, les CRLs doivent être présentes pour que la validation réussisse ; dans le cas contraire, elle échouera avec une erreur "CRL introuvable".

    Exemple

    SSLProxyCARevocationCheck chain
    top

    Directive SSLProxyCARevocationFile

    Description:Fichier contenant la concaténation des CRLs de CA codés en PEM pour l'authentification des serveurs distants
    Syntaxe:SSLProxyCARevocationFile chemin-fichier
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Cette directive permet de définir le fichier tout-en-un où sont rassemblées les Listes de Révocation de Certificats (CRLs) des Autorités de certification (CAs) pour les serveurs distants auxquels vous avez à faire. On les utilise pour l'authentification des serveurs distants. Un tel fichier contient la simple concaténation des différents fichiers de CRLs codés en PEM, classés par ordre de préférence. Cette directive peut être utilisée à la place et/ou en complément de la directive SSLProxyCARevocationPath.

    Exemple

    SSLProxyCARevocationFile
    "/usr/local/apache2/conf/ssl.crl/ca-bundle-serveur.distant.crl"
    top

    Directive SSLProxyCARevocationPath

    Description:Répertoire des CRLs de CA codés en PEM pour l'authentification des serveurs distants
    Syntaxe:SSLProxyCARevocationPath chemin-répertoire
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Cette directive permet de définir le répertoire où sont stockées les Listes de Révocation de Certificats (CRL) des Autorités de Certification (CAs) pour les serveurs distants auxquels vous avez à faire. On les utilise pour révoquer les certificats des serveurs distants au cours de l'authentification de ces derniers.

    Les fichiers de ce répertoire doivent être codés en PEM et ils sont accédés via des noms de fichier sous forme de condensés ou hash. Il ne suffit donc pas de placer les fichiers de CRL dans ce répertoire : vous devez aussi créer des liens symboliques nommés valeur-de-hashage.rN, et vous devez toujours vous assurer que ce répertoire contient les liens symboliques appropriés.

    Exemple

    SSLProxyCARevocationPath "/usr/local/apache2/conf/ssl.crl/"
    top

    Directive SSLProxyCheckPeerCN

    Description:Configuration de la vérification du champ CN du certificat du serveur distant
    Syntaxe:SSLProxyCheckPeerCN on|off
    Défaut:SSLProxyCheckPeerCN on
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Cette directive permet de définir si le champ CN du certificat du serveur distant doit être comparé au nom de serveur de l'URL de la requête. S'ils ne correspondent pas, un code d'état 502 (Bad Gateway) est envoyé. A partir de la version 2.4.5, SSLProxyCheckPeerCN a été remplacé par SSLProxyCheckPeerName.

    De la version 2.4.5 à la version 2.4.20, spécifier SSLProxyCheckPeerName off était suffisant pour obtenir ce comportement (car la valeur par défaut de SSLProxyCheckPeerCN était on). Avec ces versions, les deux directives doivent être définies à off pour éviter toute validation du nom de certificat du serveur distant, et de nombreux utilisateurs ont signalé ce comportement comme très perturbant.

    A partir de la version 2.4.21, toutes les configurations qui activent au moins une des deux directives SSLProxyCheckPeerName ou SSLProxyCheckPeerCN adopteront le nouveau comportement de la directive SSLProxyCheckPeerName, et toutes les configurations qui désactivent une des deux directives SSLProxyCheckPeerName ou SSLProxyCheckPeerCN éviteront toute validation du nom de certificat du serveur distant. Seule la configuration suivante permettra de retrouver la comparaison de CN traditionnelle pour les versions 2.4.21 et supérieures :

    Exemple

    SSLProxyCheckPeerCN on
    SSLProxyCheckPeerName off
    top

    Directive SSLProxyCheckPeerExpire

    Description:Configuration de la vérification de l'expiration du certificat du serveur distant
    Syntaxe:SSLProxyCheckPeerExpire on|off
    Défaut:SSLProxyCheckPeerExpire on
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Cette directive permet de définir si l'expiration du certificat du serveur distant doit être vérifiée ou non. Si la vérification échoue, un code d'état 502 (Bad Gateway) est envoyé.

    Exemple

    SSLProxyCheckPeerExpire on
    top

    Directive SSLProxyCheckPeerName

    Description:Configure la vérification du nom d'hôte dans les certificats serveur distants
    Syntaxe:SSLProxyCheckPeerName on|off
    Défaut:SSLProxyCheckPeerName on
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible à partir de la version 2.4.5 du serveur HTTP Apache
    Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Cette directive permet de configurer la vérification du nom d'hôte pour les certificats serveur lorsque mod_ssl agit en tant que client SSL. La vérification réussit si le nom d'hôte de l'URI de la requête correspond à un des attributs CN du sujet du certificat, ou à l'extension subjectAltName. Si la vérification échoue, la requête SSL avorte, et un code d'erreur 502 (Bad Gateway) est renvoyé.

    Les caractères génériques sont supportés dans certains cas bien spécifiques : une entrée subjectAltName de type dNSName ou les attributs CN commençant par *. correspondront à tout nom d'hôte comportant le même nombre de champs et le même suffixe ; par exemple, *.example.org correspondra à foo.example.org, mais pas à foo.bar.example.org car le nombre d'éléments dans les nom est différent.

    Cette fonctionnalité a été introduite avec la version 2.4.5 et l'emporte sur la directive SSLProxyCheckPeerCN qui ne comparait que la valeur exacte du premier attribut CN avec le nom d'hôte. Cependant, de nombreux utilisateurs étaient déconcertés par le comportement induit par l'utilisation de ces deux directives individuellement, si bien que ce comportement a été amélioré avec la version 2.4.21. Voir la description de la directive SSLProxyCheckPeerCN pour le comportement original et des détails à propos de ces améliorations.

    top

    Directive SSLProxyCipherSuite

    Description:Algorithmes de chiffrement disponibles pour la négociation lors de l'initialisation d'une connexion SSL de mandataire
    Syntaxe:SSLProxyCipherSuite [protocol] cipher-spec
    Défaut:SSLProxyCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Cette directive est équivalente à la directive SSLCipherSuite, mais s'applique à une connexion de mandataire. Veuillez vous reporter à la directive SSLCipherSuite pour plus d'informations.

    top

    Directive SSLProxyEngine

    Description:Interrupteur marche/arrêt du moteur de mandataire SSL
    Syntaxe:SSLProxyEngine on|off
    Défaut:SSLProxyEngine off
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Cette directive permet d'activer/désactiver l'utilisation du moteur de protocole SSL/TLS pour le mandataire. On l'utilise en général à l'intérieur d'une section <VirtualHost> pour activer le protocole SSL/TLS dans le cadre d'un mandataire pour un serveur virtuel particulier. Par défaut, le moteur de protocole SSL/TLS est désactivé pour la fonction de mandataire du serveur principal et de tous les serveurs virtuels configurés.

    Notez que la directive SSLProxyEngine ne doit généralement pas être utilisée dans le cadre d'un serveur virtuel qui agit en tant que mandataire direct (via les directives <Proxy> ou ProxyRequests). SSLProxyEngine n'est pas nécessaire pour activer un serveur mandataire direct pour les requêtes SSL/TLS.

    Exemple

    <VirtualHost _default_:443>
        SSLProxyEngine on
        #...
    </VirtualHost>
    top

    Directive SSLProxyMachineCertificateChainFile

    Description:Fichier de certificats de CA encodés PEM concaténés permettant au mandataire de choisir un certificat
    Syntaxe:SSLProxyMachineCertificateChainFile nom-fichier
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Cette directive permet de définir le fichier global où est enregistrée la chaîne de certification pour tous les certificats clients utilisés. Elle est nécessaire si le serveur distant présente une liste de certificats de CA qui ne sont pas les signataires directs d'un des certificats clients configurés.

    Ce fichier contient tout simplement la concaténation des différents fichiers de certificats encodés PEM. Au démarrage, chaque certificat client configuré est examiné et une chaîne de certification est construite.

    Avertissement en matière de sécurité

    Si cette directive est définie, tous les certificats contenus dans le fichier spécifié seront considérés comme étant de confiance, comme s'ils étaient aussi désignés dans la directive SSLProxyCACertificateFile.

    Exemple

    SSLProxyMachineCertificateChainFile
    "/usr/local/apache2/conf/ssl.crt/proxyCA.pem"
    top

    Directive SSLProxyMachineCertificateFile

    Description:Fichier contenant la concaténation des clés et certificats clients codés en PEM que le mandataire doit utiliser
    Syntaxe:SSLProxyMachineCertificateFile chemin-fichier
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Cette directive permet de définir le fichier tout-en-un où sont stockés les clés et certificats permettant au serveur mandataire de s'authentifier auprès des serveurs distants.

    Le fichier spécifié est la simple concaténation des différents fichiers de certificats codés en PEM, classés par ordre de préférence. Cette directive s'utilise à la place ou en complément de la directive SSLProxyMachineCertificatePath.

    Actuellement, les clés privées chiffrées ne sont pas supportées.

    Exemple

    SSLProxyMachineCertificateFile
    "/usr/local/apache2/conf/ssl.crt/proxy.pem"
    top

    Directive SSLProxyMachineCertificatePath

    Description:Répertoire des clés et certificats clients codés en PEM que le mandataire doit utiliser
    Syntaxe:SSLProxyMachineCertificatePath chemin-répertoire
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Cette directive permet de définir le répertoire où sont stockés les clés et certificats permettant au serveur mandataire de s'authentifier auprès des serveurs distants.

    Les fichiers de ce répertoire doivent être codés en PEM et ils sont accédés via des noms de fichier sous forme de condensés ou hash. Vous devez donc aussi créer des liens symboliques nommés valeur-de-hashage.N, et vous devez toujours vous assurer que ce répertoire contient les liens symboliques appropriés.

    Actuellement, les clés privées chiffrées ne sont pas supportées.

    Exemple

    SSLProxyMachineCertificatePath "/usr/local/apache2/conf/proxy.crt/"
    top

    Directive SSLProxyProtocol

    Description:Définit les protocoles SSL disponibles pour la fonction de mandataire
    Syntaxe:SSLProxyProtocol [+|-]protocole ...
    Défaut:SSLProxyProtocol all -SSLv3 (jusqu'à la version 2.4.16: all)
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Cette directive permet de définir les protocoles SSL que mod_ssl peut utiliser lors de l'élaboration de son environnement de serveur pour la fonction de mandataire. Il ne se connectera qu'aux serveurs utilisant un des protocoles spécifiés.

    Veuillez vous reporter à la directive SSLProtocol pour plus d'informations.

    top

    Directive SSLProxyVerify

    Description:Niveau de vérification du certificat du serveur distant
    Syntaxe:SSLProxyVerify niveau
    Défaut:SSLProxyVerify none
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Lorsqu'un mandataire est configuré pour faire suivre les requêtes vers un serveur SSL distant, cette directive permet de configurer la vérification du certificat de ce serveur distant.

    Les valeurs de niveaux disponibles sont les suivantes :

    • none: aucun certificat n'est requis pour le serveur distant
    • optional: le serveur distant peut présenter un certificat valide
    • require: le serveur distant doit présenter un certificat valide
    • optional_no_ca: le serveur distant peut présenter un certificat valide
      mais il n'est pas nécessaire qu'il soit vérifiable (avec succès).

    En pratique, seuls les niveaux none et require sont vraiment intéressants, car le niveau optional ne fonctionne pas avec tous les serveurs, et le niveau optional_no_ca va tout à fait à l'encontre de l'idée que l'on peut se faire de l'authentification (mais peut tout de même être utilisé pour établir des pages de test SSL, etc...).

    Exemple

    SSLProxyVerify require
    top

    Directive SSLProxyVerifyDepth

    Description:Niveau de profondeur maximum dans les certificats de CA lors de la vérification du certificat du serveur distant
    Syntaxe:SSLProxyVerifyDepth niveau
    Défaut:SSLProxyVerifyDepth 1
    Contexte:configuration globale, serveur virtuel, section proxy
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Le contexte d'une section proxy est supporté à partir de la version 2.4.30 du serveur HTTP Apache

    Cette directive permet de définir le niveau de profondeur maximum jusqu'auquel mod_ssl doit aller au cours de sa vérification avant de décider que le serveur distant ne possède pas de certificat valide.

    La profondeur correspond en fait au nombre maximum de fournisseurs de certificats intermédiaires, c'est à dire le nombre maximum de certificats de CA que l'on peut consulter lors de la vérification du certificat du serveur distant. Une profondeur de 0 signifie que seuls les certificats de serveurs distants auto-signés sont acceptés, et la profondeur par défaut de 1 que le certificat du serveur distant peut être soit auto-signé, soit signé par une CA connue directement du serveur (en d'autres termes, le certificat de CA est référencé par la directive SSLProxyCACertificatePath), etc...

    Exemple

    SSLProxyVerifyDepth 10
    top

    Directive SSLRandomSeed

    Description:Source de déclenchement du Générateur de Nombres Pseudo-Aléatoires (PRNG)
    Syntaxe:SSLRandomSeed contexte source [nombre]
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ssl

    Cette directive permet de définir une ou plusieurs sources de déclenchement du Générateur de Nombres Pseudo-Aléatoires (PRNG) dans OpenSSL au démarrage du serveur (si contexte a pour valeur startup) et/ou juste avant l'établissement d'une nouvelle connexion SSL (si contexte a pour valeur connect). Cette directive ne peut être utilisée qu'au niveau du serveur global car le PRNG est un service global.

    Les différentes valeurs de source disponibles sont :

    • builtin

      Cette source de déclenchement intégrée est toujours disponible. Son utilisation consomme un minimum de cycles CPU en cours d'exécution, et son utilisation ne présente de ce fait aucun problème. La source utilisée pour déclencher le PRNG contient la date courante, l'identifiant du processus courant et un extrait de 128 octets aléatoirement choisi dans la pile. Ceci présente un inconvénient car le caractère aléatoire de cette source n'est pas vraiment fort, et au démarrage (lorsque la structure d'échanges n'est pas encore disponible), cette source ne produit que quelques octets d'entropie. Vous devez donc toujours utiliser une source de déclenchement additionnelle, au moins pour le démarrage.

    • file:/chemin/vers/source

      Cette variante utilise un fichier externe file:/chemin/vers/source comme source de déclenchement du PRNG. Lorsque nombre est spécifié, seuls les nombre premiers octets du fichier forment l'entropie (et nombre est fourni comme premier argument à /chemin/vers/source). Lorsque nombre n'est pas spécifié, l'ensemble du fichier forme l'entropie (et 0 est fourni comme premier argument à /chemin/vers/source). Utilisez cette source en particulier au démarrage, par exemple avec un fichier de périphérique /dev/random et/ou /dev/urandom (qui sont en général présent sur les plate-formes dérivées d'Unix modernes comme FreeBSD et Linux).

      Soyez cependant prudent : en général, /dev/random ne fournit que l'entropie dont il dispose réellement ; en d'autres termes, lorsque vous demandez 512 octets d'entropie, si le périphérique ne dispose que de 100 octets, deux choses peuvent se produire : sur certaines plates-formes, vous ne recevez que les 100 octets, alors que sur d'autres, la lecture se bloque jusqu'à ce qu'un nombre suffisant d'octets soit disponible (ce qui peut prendre beaucoup de temps). Il est préférable ici d'utiliser le périphérique /dev/urandom, car il ne se bloque jamais et fournit vraiment la quantité de données demandées. Comme inconvénient, les données reçues ne sont pas forcément de la meilleure qualité.

    • exec:/chemin/vers/programme

      Cette variante utilise un exécutable externe /chemin/vers/programme comme source de déclenchement du PRNG. Lorsque nombre est spécifié, seules les nombre premiers octets de son flux stdout forment l'entropie. Lorsque nombre n'est pas spécifié, l'intégralité des données produites sur stdout forment l'entropie. N'utilisez cette variante qu'au démarrage où une source de déclenchement fortement aléatoire est nécessaire, en utilisant un programme externe (comme dans l'exemple ci-dessous avec l'utilitaire truerand basé sur la bibliothèque truerand de AT&T que vous trouverez dans la distribution de mod_ssl). Bien entendu, l'utilisation de cette variante dans un contexte "connection" ralentit le serveur de manière trop importante, et en général, vous devez donc éviter d'utiliser des programmes externes dans ce contexte.

    • egd:/chemin/vers/socket-egd (Unix seulement)

      Cette variante utilise le socket de domaine Unix du Démon Générateur d'Entropie externe ou Entropy Gathering Daemon ou EGD (voir http://www.lothar.com/tech /crypto/) pour déclencher le PRNG. N'utilisez cette variante que si votre plate-forme ne possède pas de périphérique random ou urandom.

    Exemple

    SSLRandomSeed startup builtin
    SSLRandomSeed startup "file:/dev/random"
    SSLRandomSeed startup "file:/dev/urandom" 1024
    SSLRandomSeed startup "exec:/usr/local/bin/truerand" 16
    SSLRandomSeed connect builtin
    SSLRandomSeed connect "file:/dev/random"
    SSLRandomSeed connect "file:/dev/urandom" 1024
    top

    Directive SSLRenegBufferSize

    Description:Définit la taille du tampon de renégociation SSL
    Syntaxe:SSLRenegBufferSize taille
    Défaut:SSLRenegBufferSize 131072
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_ssl

    Si une renégociation SSL est requise dans un contexte de répertoire, par exemple avec l'utilisation de SSLVerifyClient dans un bloc Directory ou Location, mod_ssl doit mettre en tampon en mémoire tout corps de requête HTTP en attendant qu'une nouvelle initialisation de connexion SSL puisse être effectuée. Cette directive permet de définir la quantité de mémoire à allouer pour ce tampon.

    Notez que dans de nombreuses configurations, le client qui envoie un corps de requête n'est pas forcément digne de confiance, et l'on doit par conséquent prendre en considération la possibilité d'une attaque de type déni de service lorsqu'on modifie la valeur de cette directive.

    Exemple

    SSLRenegBufferSize 262144
    top

    Directive SSLRequire

    Description:N'autorise l'accès que lorsqu'une expression booléenne complexe et arbitraire est vraie
    Syntaxe:SSLRequire expression
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_ssl

    SSLRequire est obsolète

    SSLRequire est obsolète et doit en général être remplacée par l'expression Require. La syntaxe ap_expr de l'expression Require est une extension de la syntaxe de SSLRequire, avec les différences suivantes :

    Avec SSLRequire, les opérateurs de comparaison <, <=, ... sont strictement équivalents aux opérateurs lt, le, ... , et fonctionnent selon une méthode qui compare tout d'abord la longueur des deux chaînes, puis l'ordre alphabétique. Les expressions ap_expr, quant à elles, possèdent deux jeux d'opérateurs de comparaison : les opérateurs <, <=, ... effectuent une comparaison alphabétique de chaînes, alors que les opérateurs -lt, -le, ... effectuent une comparaison d'entiers. Ces derniers possèdent aussi des alias sans tiret initial : lt, le, ...

    Cette directive permet de spécifier une condition générale d'accès qui doit être entièrement satisfaite pour que l'accès soit autorisé. C'est une directive très puissante, car la condition d'accès spécifiée est une expression booléenne complexe et arbitraire contenant un nombre quelconque de vérifications quant aux autorisations d'accès.

    L'expression doit respecter la syntaxe suivante (fournie ici sous la forme d'une notation dans le style de la grammaire BNF) :

    expr     ::= "true" | "false"
               | "!" expr
               | expr "&&" expr
               | expr "||" expr
               | "(" expr ")"
               | comp
    
    comp     ::= word "==" word | word "eq" word
               | word "!=" word | word "ne" word
               | word "<"  word | word "lt" word
               | word "<=" word | word "le" word
               | word ">"  word | word "gt" word
               | word ">=" word | word "ge" word
               | word "in" "{" wordlist "}"
               | word "in" "PeerExtList(" word ")"
               | word "=~" regex
               | word "!~" regex
    
    wordlist ::= word
               | wordlist "," word
    
    word     ::= digit
               | cstring
               | variable
               | function
    
    digit    ::= [0-9]+
    cstring  ::= "..."
    variable ::= "%{" varname "}"
    function ::= funcname "(" funcargs ")"

    Pour varname, toute variable décrite dans Variables d'environnement pourra être utilisée. Pour funcname, vous trouverez la liste des fonctions disponibles dans la documentation ap_expr.

    expression est interprétée et traduite sous une forme machine interne lors du chargement de la configuration, puis évaluée lors du traitement de la requête. Dans le contexte des fichiers .htaccess, expression est interprétée et exécutée chaque fois que le fichier .htaccess intervient lors du traitement de la requête.

    Exemple

    SSLRequire (    %{SSL_CIPHER} !~ m/^(EXP|NULL)-/                   \
                and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd."          \
                and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"}    \
                and %{TIME_WDAY} -ge 1 and %{TIME_WDAY} -le 5          \
                and %{TIME_HOUR} -ge 8 and %{TIME_HOUR} -le 20       ) \
               or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/

    La fonction PeerExtList(identifiant objet) recherche une instance d'extension de certificat X.509 identifiée par identifiant objet (OID) dans le certificat client. L'expression est évaluée à true si la partie gauche de la chaîne correspond exactement à la valeur d'une extension identifiée par cet OID (Si plusieurs extensions possèdent le même OID, l'une d'entre elles au moins doit correspondre).

    Exemple

    SSLRequire "foobar" in PeerExtList("1.2.3.4.5.6")

    Notes à propos de la fonction PeerExtList

    • L'identifiant objet peut être spécifié soit comme un nom descriptif reconnu par la bibliothèque SSL, tel que "nsComment", soit comme un OID numérique tel que "1.2.3.4.5.6".

    • Les expressions contenant des types connus de la bibliothèque SSL sont transformées en chaînes avant comparaison. Pour les extensions contenant un type non connu de la bibliothèque SSL, mod_ssl va essayer d'interpréter la valeur s'il s'agit d'un des types ASN.1 primaires UTF8String, IA5String, VisibleString, ou BMPString. Si l'extension correspond à un de ces types, la chaîne sera convertie en UTF-8 si nécessaire, puis comparée avec la partie gauche de l'expression.

    Voir aussi

    top

    Directive SSLRequireSSL

    Description:Interdit l'accès lorsque la requête HTTP n'utilise pas SSL
    Syntaxe:SSLRequireSSL
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_ssl

    Cette directive interdit l'accès si HTTP sur SSL (c'est à dire HTTPS) n'est pas activé pour la connexion courante. Ceci est très pratique dans un serveur virtuel où SSL est activé ou dans un répertoire pour se protéger des erreurs de configuration qui pourraient donner accès à des ressources protégées. Lorsque cette directive est présente, toutes les requêtes qui n'utilisent pas SSL sont rejetées.

    Exemple

    SSLRequireSSL
    top

    Directive SSLSessionCache

    Description:Type du cache de session SSL global et inter-processus
    Syntaxe:SSLSessionCache type
    Défaut:SSLSessionCache none
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ssl

    Cette directive permet de configurer le type de stockage du cache de session SSL global et inter-processus. Ce cache est une fonctionnalité optionnelle qui accélère le traitement parallèle des requêtes. Pour ce qui est des requêtes vers un même processus du serveur (via HTTP keep-alive), OpenSSL met en cache les informations de session SSL en interne. Mais comme les clients modernes demandent des images en ligne et d'autres données via des requêtes parallèles (un nombre de quatre requêtes parallèles est courant), ces requêtes vont être servies par plusieurs processus du serveur pré-déclenchés. Ici, un cache inter-processus permet d'éviter des négociations de session inutiles.

    Les quatre types de stockage suivants sont actuellement supportés :

    • none

      Cette valeur désactive le cache de session global et inter-processus, ce qui va ralentir le serveur de manière sensible et peut poser problème avec certains navigateurs, en particulier si les certificats clients sont activés. Cette configuration n'est pas recommandée.

    • nonenotnull

      Cette valeur désactive tout cache de session global et inter-processus. Cependant, elle force OpenSSL à envoyer un identifiant de session non nul afin de s'adapter aux clients bogués qui en nécessitent un.

    • dbm:/chemin/vers/fichier-données

      Cette valeur utilise un fichier de hashage DBM sur disque local pour synchroniser les caches OpenSSL locaux en mémoire des processus du serveur. Ce cache de session peut être sujet à des problèmes de fiabilité sous forte charge. Pour l'utiliser, le module mod_socache_dbm doit être chargé.

    • shmcb:/chemin/vers/fichier-données[(nombre)]

      Cette valeur utilise un tampon cyclique à hautes performances (d'une taille d'environ nombre octets) dans un segment de mémoire partagée en RAM (établi via /chemin/vers/fichier-données, pour synchroniser les caches OpenSSL locaux en mémoire des processus du serveur. C'est le type de cache de session recommandé. Pour l'utiliser, le module mod_socache_shmcb doit être chargé.

    • dc:UNIX:/chemin/vers/socket

      Cette valeur utilise les bibliothèques de mise en cache de sessions distribuée sur distcache. L'argument doit spécifier le serveur ou mandataire à utiliser en utilisant la syntaxe d'adressage distcache ; par exemple, UNIX:/chemin/vers/socket spécifie une socket de domaine Unix (en général un mandataire de dc_client local) ; IP:serveur.example.com:9001 spécifie une adresse IP. Pour l'utiliser, le module mod_socache_dc doit être chargé.

    Exemples

    SSLSessionCache "dbm:/usr/local/apache/logs/ssl_gcache_data"
    SSLSessionCache "shmcb:/usr/local/apache/logs/ssl_gcache_data(512000)"

    Le mutex ssl-cache permet de sérialiser l'accès au cache de session afin d'éviter toute corruption. Ce mutex peut être configuré via la directive Mutex.

    top

    Directive SSLSessionCacheTimeout

    Description:Nombre de secondes avant l'expiration d'une session SSL dans le cache de sessions
    Syntaxe:SSLSessionCacheTimeout secondes
    Défaut:SSLSessionCacheTimeout 300
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:S'applique aussi à la reprise de session TLS (RFC 5077) à partir de la version 2.4.10 du serveur HTTP Apache

    Cette directive permet de définir la durée de vie en secondes des informations stockées dans le cache de sessions SSL global et inter-processus, dans le cache OpenSSL interne en mémoire et pour les sessions réinitialisées par la reprise de session TLS (RFC 5077). elle peut être définie à une valeur d'environ 15 à des fins de test, mais à une valeur très supérieure comme 300 en production.

    Exemple

    SSLSessionCacheTimeout 600
    top

    Directive SSLSessionTicketKeyFile

    Description:Clé de chiffrement/déchiffrement permanente pour les tickets de session TLS
    Syntaxe:SSLSessionTicketKeyFile chemin-fichier
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible depuis la version 2.4.0 du serveur HTTP Apache, sous réserve que l'on utilise une version 0.9.8h ou supérieure d'OpenSSL

    Cette directive permet de définir une clé secrète pour le chiffrement et le déchiffrement des tickets de session TLS selon les préconisations de la RFC 5077. Elle a été conçue à l'origine pour les environnements de clusters où les données des sessions TLS doivent être partagées entre plusieurs noeuds. Pour les configurations ne comportant qu'une seule instance de httpd, il est préférable d'utiliser les clés (aléatoires) générées par mod_ssl au démarrage du serveur.

    Le fichier doit contenir 48 octets de données aléatoires créées de préférence par une source à haute entropie. Sur un système de type UNIX, il est possible de créer le fichier contenant la clé de la manière suivante :

    dd if=/dev/random of=/chemin/vers/fichier.tkey bs=1 count=48

    Ces clés doivent être renouvelées fréquemment, car il s'agit du seul moyen d'invalider un ticket de session existant - OpenSSL ne permet pas actuellement de spécifier une limite à la durée de vie des tickets. Une nouvelle clé ne peut être utilisée qu'après avoir redémarré le serveur. Tous les tickets de session existants deviennent invalides après le redémarrage du serveur.

    Ce fichier contient des données sensibles et doit donc être protégé par des permissions similaires à celles du fichier spécifié par la directive SSLCertificateKeyFile.

    top

    Directive SSLSessionTickets

    Description:Active ou désactive les tickets de session TLS
    Syntaxe:SSLSessionTickets on|off
    Défaut:SSLSessionTickets on
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible à partir de la version 2.4.11 du serveur HTTP Apache, sous réserve d'utiliser OpenSSL version 0.9.8f ou supérieure.

    Cette directive permet d'activer ou de désactiver l'utilisation des tickets de session TLS (RFC 5077).

    Les tickets de session TLS sont activés par défaut. Les utiliser sans redémarrer le serveur selon une périodicité appropriée (par exemple quotidiennement) compromet cependant le niveau de confidentialité.

    top

    Directive SSLSRPUnknownUserSeed

    Description:Source d'aléa pour utilisateur SRP inconnu
    Syntaxe:SSLSRPUnknownUserSeed secret-string
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible depuis la version 2.4.4 du serveur HTTP Apache, si la version 1.0.1 ou supérieure d'OpenSSL est utilisée.

    Cette directive permet de définir la source d'aléa à utiliser pour les utilisateurs SRP inconnus, ceci afin de combler les manques en cas d'existence d'un tel utilisateur. Elle définit une chaîne secrète. Si cette directive n'est pas définie, Apache renverra une alerte UNKNOWN_PSK_IDENTITY aux clients qui fournissent un nom d'utilisateur inconnu.

    Exemple

    SSLSRPUnknownUserSeed "secret"

    top

    Directive SSLSRPVerifierFile

    Description:Chemin du fichier de vérification SRP
    Syntaxe:SSLSRPVerifierFile file-path
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible depuis la version 2.4.4 du serveur HTTP Apache, si la version 1.0.1 ou supérieure d'OpenSSL est utilisée.

    Cette directive permet d'activer TLS-SRP et de définir le chemin du fichier de vérification OpenSSL SRP (Mot de passe distant sécurisé) contenant les noms d'utilisateurs TLS-SRP, les vérificateurs, les "grains de sel" (salts), ainsi que les paramètres de groupe.

    Exemple

    SSLSRPVerifierFile "/path/to/file.srpv"

    Le fichier de vérification peut être créé via l'utilitaire en ligne de commande openssl :

    Création du fichier de vérification SRP

    openssl srp -srpvfile passwd.srpv -userinfo "some info" -add username

    La valeur affectée au paramètre optionnel -userinfo est enregistrée dans la variable d'environnement SSL_SRP_USERINFO.

    top

    Directive SSLStaplingCache

    Description:Configuration du cache pour l'agrafage OCSP
    Syntaxe:SSLStaplingCache type
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible si on utilise OpenSSL version 0.9.8h ou supérieure

    Si SSLUseStapling est à "on", cette directive permet de configurer le cache destiné à stocker les réponses OCSP incluses dans la négociation TLS. La configuration d'un cache est obligatoire pour pouvoir utiliser l'agrafage OCSP. A l'exception de none et nonenotnull, cette directive supporte les mêmes types de stockage que la directive SSLSessionCache.

    top

    Directive SSLStaplingErrorCacheTimeout

    Description:Durée de vie des réponses invalides dans le cache pour agrafage OCSP
    Syntaxe:SSLStaplingErrorCacheTimeout secondes
    Défaut:SSLStaplingErrorCacheTimeout 600
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible si on utilise OpenSSL version 0.9.8h ou supérieure

    Cette directive permet de définir la durée de vie des réponses invalides dans le cache pour agrafage OCSP configuré via la directive SSLStaplingCache. Pour définir la durée de vie des réponses valides, voir la directive SSLStaplingStandardCacheTimeout.

    top

    Directive SSLStaplingFakeTryLater

    Description:Génère une réponse "tryLater" pour les requêtes OCSP échouées
    Syntaxe:SSLStaplingFakeTryLater on|off
    Défaut:SSLStaplingFakeTryLater on
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible si on utilise OpenSSL version 0.9.8h ou supérieure

    Lorsque cette directive est activée, et si une requête vers un serveur OCSP à des fins d'inclusion dans une négociation TLS échoue, mod_ssl va générer une réponse "tryLater" pour le client (SSLStaplingReturnResponderErrors doit être activée).

    top

    Directive SSLStaplingForceURL

    Description:Remplace l'URI du serveur OCSP spécifié dans l'extension AIA du certificat
    Syntaxe:SSLStaplingForceURL uri
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible si on utilise OpenSSL version 0.9.8h ou supérieure

    Cette directive permet de remplacer l'URI du serveur OCSP extraite de l'extension authorityInfoAccess (AIA) du certificat. Elle peut s'avérer utile lorsqu'on passe par un mandataire

    top

    Directive SSLStaplingResponderTimeout

    Description:Temps d'attente maximum pour les requêtes vers les serveurs OCSP
    Syntaxe:SSLStaplingResponderTimeout secondes
    Défaut:SSLStaplingResponderTimeout 10
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible si on utilise OpenSSL version 0.9.8h ou supérieure

    Cette directive permet de définir le temps d'attente maximum lorsque mod_ssl envoie une requête vers un serveur OCSP afin d'obtenir une réponse destinée à être incluse dans les négociations TLS avec les clients (SSLUseStapling doit avoir été activée au préalable).

    top

    Directive SSLStaplingResponseMaxAge

    Description:Age maximum autorisé des réponses OCSP incluses dans la négociation TLS
    Syntaxe:SSLStaplingResponseMaxAge secondes
    Défaut:SSLStaplingResponseMaxAge -1
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible si on utilise OpenSSL version 0.9.8h ou supérieure

    Cette directive permet de définir l'âge maximum autorisé ("fraîcheur") des réponses OCSP incluses dans la négociation TLS (SSLUseStapling doit avoir été activée au préalable). La valeur par défaut (-1) ne définit aucun âge maximum, ce qui signifie que les réponses OCSP sont considérées comme valides à partir du moment où le contenu de leur champ nextUpdate se trouve dans le futur.

    top

    Directive SSLStaplingResponseTimeSkew

    Description:Durée de vie maximale autorisée des réponses OCSP incluses dans la négociation TLS
    Syntaxe:SSLStaplingResponseTimeSkew secondes
    Défaut:SSLStaplingResponseTimeSkew 300
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible si on utilise OpenSSL version 0.9.8h ou supérieure

    Cette directive permet de spécifier l'intervalle de temps maximum que mod_ssl va calculer en faisant la différence entre les contenus des champs nextUpdate et thisUpdate des réponses OCSP incluses dans la négociation TLS. Pour pouvoir utiliser cette directive, SSLUseStapling doit être à "on".

    top

    Directive SSLStaplingReturnResponderErrors

    Description:Transmet au client les erreurs survenues lors des requêtes OCSP
    Syntaxe:SSLStaplingReturnResponderErrors on|off
    Défaut:SSLStaplingReturnResponderErrors on
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible si on utilise OpenSSL version 0.9.8h ou supérieure

    Lorsque cette directive est activée, mod_ssl va transmettre au client les réponses concernant les requêtes OCSP échouées (comme les réponses avec un statut général autre que "successful", les réponses avec un statut de certificat autre que "good", les réponses arrivées à expiration, etc...). Lorsqu'elle est à off, seules les réponses avec un statut de certificat égal à "good" seront incluses dans la négociation TLS.

    top

    Directive SSLStaplingStandardCacheTimeout

    Description:Durée de vie des réponses OCSP dans le cache
    Syntaxe:SSLStaplingStandardCacheTimeout secondes
    Défaut:SSLStaplingStandardCacheTimeout 3600
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible si on utilise OpenSSL version 0.9.8h ou supérieure

    Cette directive permet de définir la durée de vie des réponses OCSP dans le cache configuré via la directive SSLStaplingCache. Elle ne s'applique qu'aux réponse valides, alors que la directive SSLStaplingErrorCacheTimeout s'applique aux réponses invalides ou non disponibles.

    top

    Directive SSLStrictSNIVHostCheck

    Description:Contrôle de l'accès des clients non-SNI à un serveur virtuel à base de nom.
    Syntaxe:SSLStrictSNIVHostCheck on|off
    Défaut:SSLStrictSNIVHostCheck off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible depuis la version 2.2.12 d'Apache

    Cette directive permet de contrôler l'accès des clients non-SNI à un serveur virtuel à base de nom. Si elle est définie à on dans le serveur virtuel à base de nom par défaut, les clients non-SNI ne seront autorisés à accéder à aucun serveur virtuel appartenant à cette combinaison IP/port. Par contre, si elle est définie à on dans un serveur virtuel quelconque, les clients non-SNI ne se verront interdire l'accès qu'à ce serveur.

    Cette option n'est disponible que si httpd a été compilé avec une version d'OpenSSL supportant SNI.

    Exemple

    SSLStrictSNIVHostCheck on
    top

    Directive SSLUserName

    Description:Nom de la variable servant à déterminer le nom de l'utilisateur
    Syntaxe:SSLUserName nom-var
    Contexte:configuration globale, répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_ssl

    Cette variable permet de définir le champ "user" de l'objet de la requête Apache. Ce champ est utilisé par des modules de plus bas niveau pour identifier l'utilisateur avec une chaîne de caractères. En particulier, l'utilisation de cette directive peut provoquer la définition de la variable d'environnement REMOTE_USER. La valeur de l'argument nom-var peut correspondre à toute variable d'environnement SSL.

    Notez que cette directive est sans effet si l'option FakeBasicAuth est utilisée (voir SSLOptions).

    Exemple

    SSLUserName SSL_CLIENT_S_DN_CN
    top

    Directive SSLUseStapling

    Description:Active l'ajout des réponses OCSP à la négociation TLS
    Syntaxe:SSLUseStapling on|off
    Défaut:SSLUseStapling off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_ssl
    Compatibilité:Disponible si on utilise OpenSSL version 0.9.8h ou supérieure

    Cette directive permet d'activer l'"Agrafage OCSP" (OCSP stapling) selon la définition de l'extension TLS "Certificate Status Request" fournie dans la RFC 6066. Si elle est activée et si le client le demande, mod_ssl va inclure une réponse OCSP à propos de son propre certificat dans la négociation TLS. Pour pouvoir activer l'Agrafage OCSP, il est nécessaire de configurer un SSLStaplingCache.

    L'agrafage OCSP dispense le client de requérir le serveur OCSP directement ; il faut cependant noter que selon les spécifications de la RFC 6066, la réponse CertificateStatus du serveur ne peut inclure une réponse OCSP que pour un seul certificat. Pour les certificats de serveur comportant des certificats de CA intermédiaires dans leur chaîne (c'est un cas typique de nos jours), l'implémentation actuelle de l'agrafage OCSP n'atteint que partiellement l'objectif d' "économie en questions/réponse et en ressources". Pour plus de détails, voir la RFC 6961 (TLS Multiple Certificate Status Extension).

    Lorsque l'agrafage OCSP est activé, le mutex ssl-stapling contrôle l'accès au cache de l'agrafage OCSP afin de prévenir toute corruption, et le mutex sss-stapling-refresh contrôle le raffraîchissement des réponses OCSP. Ces mutex peuvent être configurés via la directive Mutex.

    top

    Directive SSLVerifyClient

    Description:Niveau de vérification du certificat client
    Syntaxe:SSLVerifyClient niveau
    Défaut:SSLVerifyClient none
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_ssl

    Cette directive permet de définir le niveau de vérification du certificat pour l'authentification du client. Notez que cette directive peut être utilisée à la fois dans les contextes du serveur principal et du répertoire. Dans le contexte du serveur principal, elle s'applique au processus d'authentification du client utilisé au cours de la négociation SSL standard lors de l'établissement d'une connexion. Dans un contexte de répertoire, elle force une renégociation SSL avec le niveau de vérification du client spécifié, après la lecture d'une requête HTTP, mais avant l'envoi de la réponse HTTP.

    Les valeurs de niveau disponibles sont les suivantes :

    • none: aucun certificat client n'est requis
    • optional: le client peut présenter un certificat valide
    • require: le client doit présenter un certificat valide
    • optional_no_ca: le client peut présenter un certificat valide, mais il n'est pas nécessaire que ce dernier soit vérifiable (avec succès). Cette option ne peut pas être utilisée lors de l'authentification du client.

    Exemple

    SSLVerifyClient require
    top

    Directive SSLVerifyDepth

    Description:Profondeur maximale des certificats de CA pour la vérification des certificats clients
    Syntaxe:SSLVerifyDepth nombre
    Défaut:SSLVerifyDepth 1
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_ssl

    Cette directive permet de spécifier la profondeur maximale à laquelle mod_ssl va effectuer sa vérification avant de décider que le client ne possède pas de certificat valide. Notez que cette directive peut être utilisée à la fois dans les contextes du serveur principal et de répertoire. Dans le contexte du serveur principal, elle s'applique au processus d'authentification du client utilisé au cours de la négociation SSL standard lors de l'établissement d'une connexion. Dans un contexte de répertoire, elle force une renégociation SSL avec le client selon la nouvelle profondeur spécifiée, après la lecture d'une requête HTTP, mais avant l'envoi de la réponse HTTP.

    La profondeur correspond au nombre maximum de fournisseurs de certificats intermédiaires, c'est à dire le nombre maximum de certificats de CA que l'on est autorisé à suivre lors de la vérification du certificat du client. Une profondeur de 0 signifie que seuls les certificats clients auto-signés sont acceptés ; la profondeur par défaut de 1 signifie que le certificat client peut être soit auto-signé, soit signé par une CA connue directement du serveur (c'est à dire que le certificat de la CA doit être référencé par la directive SSLCACertificatePath), etc...

    Exemple

    SSLVerifyDepth 10

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_auth_basic.html.fr.utf80000644000000000000500000005315113412755316021356 0ustar rootsrc mod_auth_basic - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_auth_basic

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Authentification HTTP de base
    Statut:Base
    Identificateur de Module:auth_basic_module
    Fichier Source:mod_auth_basic.c
    Compatibilité:Disponible depuis la version 2.1 d'Apache

    Sommaire

    Ce module permet d'utiliser l'authentification basique HTTP pour restreindre l'accès en recherchant les utilisateurs dans les fournisseurs d'authentification spécifiés. Il est en général combiné avec au moins un module d'authentification comme mod_authn_file et un module d'autorisation comme mod_authz_user. L'authentification HTTP à base de condensé (digest), quant à elle, est fournie par le module mod_auth_digest.

    top

    Directive AuthBasicAuthoritative

    Description:Définit si les processus d'autorisation et d'authentification peuvent être confiés à des modules de plus bas niveau
    Syntaxe:AuthBasicAuthoritative On|Off
    Défaut:AuthBasicAuthoritative On
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_auth_basic

    Normalement, chaque module d'autorisation énuméré dans la directive AuthBasicProvider va tenter de vérifier l'utilisateur, et si ce dernier n'est trouvé dans aucun des fournisseurs, l'accès sera refusé. Définir explicitement la directive AuthBasicAuthoritative à Off permet de confier l'autorisation et l'authentification à d'autres modules non basés sur les fournisseurs si aucun identifiant utilisateur ou aucune règle ne correspondent à l'identifiant utilisateur spécifié. Ceci ne peut s'avérer nécessaire que lorsque mod_auth_basic est combiné avec des modules tiers qui n'ont pas été configurés à l'aide de la directive AuthBasicProvider. Lorsqu'on utilise de tels modules, l'ordre dans lequel s'effectue le traitement est défini dans le code source des modules et n'est pas configurable.

    top

    Directive AuthBasicFake

    Description:Authentification de base simulée à l'aide des nom d'utilisateur et mot de passe fournis
    Syntaxe:AuthBasicFake off|username [password]
    Défaut:none
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_auth_basic
    Compatibilité:Disponible à partir de la version 2.4.5 du serveur HTTP Apache

    Les nom d'utilisateur et mot de passe spécifiés sont rassemblés dans un en-tête d'autorisation qui est transmis au serveur ou au service sous-jacent au serveur. Ces nom d'utilisateur et mot de passe sont interprétés par l'interpréteur d'expression, ce qui permet de les définir en fonction de paramètres de la requête.

    Si aucun mot de passe n'est spécifié, la valeur par défaut "password" sera utilisée. Pour désactiver l'authentification de base simulée pour un espace d'URL, définissez AuthBasicFake à "off".

    Dans l'exemple suivant, un nom d'utilisateur et un mot de passe prédéfinis sont transmis à un serveur d'arrière-plan :

    Exemple de transmission d'un nom d'utilisateur et d'un mot de passe prédéfinis

    <Location "/demo">
        AuthBasicFake demo demopass
    </Location>

    Dans l'exemple suivant, l'adresse email extraite d'un certificat client est transmise au serveur, étendant par là-même la fonctionnalité de l'option FakeBasicAuth de la directive SSLOptions. Comme avec l'option FakeBasicAuth, le mot de passe se voit attribué le contenu fixe de la chaîne "password".

    Exemple d'utilisation avec un certificat

    <Location "/secure">
        AuthBasicFake "%{SSL_CLIENT_S_DN_Email}"
    </Location>

    Pour compléter l'exemple précédent, il est possible de générer la valeur du mot de passe en procédant à un hashage de l'adresse email à partir d'un mot d'une passphrase initial fixée, puis de transmettre le résultat obtenu au serveur d'arrière-plan. Ceci peut s'avérer utile pour donner accès à des serveurs anciens qui ne supportent pas les certificats clients.

    Exemple de génération de mot de passe par hashage de l'adresse email

    <Location "/secure">
        AuthBasicFake "%{SSL_CLIENT_S_DN_Email}" "%{sha1:passphrase-%{SSL_CLIENT_S_DN_Email}}"
    </Location>

    Désactivation de l'authentification simulée

    <Location "/public">
        AuthBasicFake off
    </Location>
    top

    Directive AuthBasicProvider

    Description:Définit le(les) fournisseur(s) d'authentification pour cette zone du site web
    Syntaxe:AuthBasicProvider nom fournisseur [nom fournisseur] ...
    Défaut:AuthBasicProvider file
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_auth_basic

    La directive AuthBasicProvider permet de définir le fournisseur utilisé pour authentifier les utilisateurs pour la zone du site web concernée. Le fournisseur par défaut file est implémenté par le module mod_authn_file. Assurez-vous que le module implémentant le fournisseur choisi soit bien présent dans le serveur.

    Exemple

    <Location "/secure">
        AuthType basic
        AuthName "private area"
        AuthBasicProvider  dbm
        AuthDBMType        SDBM
        AuthDBMUserFile    "/www/etc/dbmpasswd"
        Require            valid-user
    </Location>

    Les fournisseurs sont sollicités dans l'ordre jusqu'à ce que l'un d'entre eux trouve une correspondance pour le nom d'utilisateur de la requête ; alors, ce dernier fournisseur sera le seul à vérifier le mot de passe. Un échec dans la vérification du mot de passe n'entraîne pas le passage du contrôle au fournisseur suivant.

    Les différents fournisseurs disponibles sont implémentés par les modules mod_authn_dbm, mod_authn_file, mod_authn_dbd, mod_authnz_ldap et mod_authn_socache.

    top

    Directive AuthBasicUseDigestAlgorithm

    Description:Vérifie les mots de passe auprès des fournisseurs d'authentification à la manière de l'authentification de type Digest.
    Syntaxe:AuthBasicUseDigestAlgorithm MD5|Off
    Défaut:AuthBasicUseDigestAlgorithm Off
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_auth_basic
    Compatibilité:Disponible à partir de la version 2.4.7 du serveur HTTP Apache

    Normalement, lorsqu'on utilise l'authentification basique, les fournisseurs spécifiés via la directive AuthBasicProvider tentent de contrôler l'identité d'un utilisateur en recherchant dans leurs bases de données l'existence d'un couple utilisateur/mot de passe correspondant. Les mots de passe enregistrés sont en général chiffrés, mais ce n'est pas systématique ; chaque fournisseur peut choisir son propre mode de stockage des mots de passe.

    Lorsqu'on utilise l'authentification de type Digest, les fournisseurs spécifiés par la directive AuthDigestProvider effectuent une recherche similaire dans leurs bases de données pour trouver un couple utilisateur/mot de passe correspondant. Cependant, à la différence de l'authentification basique, les données associées à chaque utilisateur et comportant le nom d'utilisateur, le domaine de protection (realm) et le mot de passe doivent être contenues dans une chaîne chiffrée (Voir le document RFC 2617, Section 3.2.2.2 pour plus de détails à propos du type de chiffrement utilisé pour cette chaîne).

    A cause de la différence entre les méthodes de stockage des données des authentifications de type basique et digest, le passage d'une méthode d'authentification de type digest à une méthode d'authentification de type basique requiert l'attribution de nouveaux mots de passe à chaque utilisateur, car leur mots de passe existant ne peut pas être extrait à partir du schéma de stockage utilisé par les fournisseurs d'authentification de type digest.

    Si la directive AuthBasicUseDigestAlgorithm est définie à la valeur MD5, le mot de passe d'un utilisateur dans le cas de l'authentification basique sera vérifié en utilisant le même format de chiffrement que dans le cas de l'authentification de type digest. Tout d'abord, une chaîne comportant le nom d'utilisateur, le domaine de protection (realm) et le mot de passe est générée sous forme de condensé (hash) en utilisant l'algorithme MD5 ; puis le nom d'utilisateur et cette chaîne chiffrée sont transmis aux fournisseurs spécifiés via la directive AuthBasicProvider comme si la directive AuthType était définie à Digest et si l'authentification de type Digest était utilisée.

    Grâce à cette directive, un site peut basculer d'une authentification de type digest à basique sans devoir changer les mots de passe des utilisateurs.

    Le processus inverse consistant à passer d'une authentification de type basique à digest sans changer les mots de passe n'est en général pas possible. Les mots de passe enregistrés dans le cas d'une authentification de type basique ne pourront être extraits et chiffrés à nouveau selon le schéma de l'authentification de type digest, que s'ils ont été stockés en clair ou selon un schéma de chiffrement réversible.
    Seuls les fournisseurs qui supportent l'authentification de type digest pourront authentifier les utilisateurs lorsque la directive AuthBasicUseDigestAlgorithm est définie à MD5. L'utilisation d'un autre fournisseur provoquera un message d'erreur et le client se verra refuser l'accès.

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_speling.html.ko.euc-kr0000644000000000000500000002460513412755316021221 0ustar rootsrc mod_speling - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_speling

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:»ç¿ëÀÚ°¡ ´ë¼Ò¹®ÀÚ¸¦ À߸ø »ç¿ëÇϰųª ¸ÂÃã¹ýÀÌ Æ²¸®´Â °ÍÀ» Çѹø±îÁö Çã¿ëÇÏ¿© À߸øµÈ URLÀ» °íÄ¡·Á°í ½ÃµµÇÑ´Ù
    »óÅÂ:Extension
    ¸ðµâ¸í:speling_module
    ¼Ò½ºÆÄÀÏ:mod_speling.c

    ¿ä¾à

    Á¾Á¾ ¸ÂÃã¹ýÀÌ Æ²¸®°Å³ª ´ë¼Ò¹®ÀÚ¸¦ À߸ø »ç¿ëÇÏ¿© ¾ÆÆÄÄ¡°¡ ¹®¼­ ¿äûÀ» ¼­ºñ½ºÇÒ ¼ö ¾ø´Â °æ¿ì°¡ ÀÖ´Ù. ÀÌ ¸ðµâÀº ´Ù¸¥ ¸ðµç ¸ðµâµéÀÌ Æ÷±âÇÑ ¿äû¿¡ ÇØ´çÇÏ´Â ¹®¼­¸¦ ã´Â´Ù. ¸ðµâÀº ¿äûÇÑ µð·ºÅ丮 ¾È¿¡ ÀÖ´Â ¸ðµç ¹®¼­¸¦ ¿äûÇÑ ¹®¼­À̸§°ú ´ë¼Ò¹®ÀÚ ±¸º°¾øÀÌ (¹®ÀÚ Ã·°¡ / »ý·« / ±³Ã¼ ȤÀº À߸øµÈ ¹®ÀÚ ) ¸ÂÃã¹ýÀÌ Çѹø±îÁö Ʋ·Áµµ ºÁÁÖ¸ç ºñ±³ÇÑ´Ù. ÀÌ·± ¹æ¹ýÀ¸·Î ¹®¼­¸ñ·ÏÀ» ¸¸µç´Ù.

    µð·ºÅ丮¸¦ »ìÆìº» ÈÄ¿¡,

    • ¹®¼­¸¦ ãÁö¸øÇϸé, ¾ÆÆÄÄ¡´Â ÀϹÝÀûÀÎ "document not found (¹®¼­¸¦ ãÀ» ¼ö ¾øÀ½)" ¿À·ù¸¦ ¹ÝȯÇÑ´Ù.
    • ¿äû¿¡ "°ÅÀÇ" ÀÏÄ¡ÇÏ´Â ¹®¼­¸¦ Çϳª¸¸ ãÀº °æ¿ì, ±× ¹®¼­·Î ¸®´ÙÀÌ·º¼Ç ÀÀ´äÀ» ÇÑ´Ù.
    • ±ÙÁ¢ÇÑ ¹®¼­¸¦ ¿©·¯°³ ãÀº °æ¿ì, Ŭ¶óÀÌ¾ðÆ®°¡ ¿Ã¹Ù¸¥ ¹®¼­¸¦ ¼±ÅÃÇÒ ¼ö ÀÖµµ·Ï ¹®¼­¸ñ·ÏÀ» º¸³½´Ù.
    top

    CheckCaseOnly Áö½Ã¾î

    ¼³¸í:Limits the action of the speling module to case corrections
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Extension
    ¸ðµâ:mod_speling

    Documentation not yet translated. Please see English version of document.

    top

    CheckSpelling Áö½Ã¾î

    ¼³¸í:¸ÂÃã¹ý ¸ðµâÀ» »ç¿ëÇÑ´Ù
    ¹®¹ý:CheckSpelling on|off
    ±âº»°ª:CheckSpelling Off
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Options
    »óÅÂ:Extension
    ¸ðµâ:mod_speling
    Áö¿ø:¾ÆÆÄÄ¡ 1.1Àº CheckSpellingÀ» º°µµ·Î Á¦°øÇÏ¿´Áö¸¸, ´ë¼Ò¹®ÀÚ°¡ ´Ù¸¥ °æ¿ì¸¸À» ó¸®ÇÒ ¼ö ÀÖ¾ú´Ù. ¾ÆÆÄÄ¡ 1.3¿¡¼­ ¾ÆÆÄÄ¡ ¹èÆ÷º»ÀÇ ÀϺΰ¡ µÇ¾ú´Ù. ¾ÆÆÄÄ¡ 1.3.2 ÀÌÀü¿¡´Â CheckSpelling Áö½Ã¾î¸¦ "ÁÖ¼­¹ö"¿Í "°¡»óÈ£½ºÆ®" »ç¿ëÀå¼Ò¿¡¼­¸¸ »ç¿ëÇÒ ¼ö ÀÖ¾ú´Ù.

    ÀÌ Áö½Ã¾î´Â ¸ÂÃã¹ý ¸ðµâÀÇ »ç¿ë¿©ºÎ¸¦ °áÁ¤ÇÑ´Ù. »ç¿ëÇÑ´Ù¸é ´ÙÀ½À» ÁÖÀÇÇ϶ó

    • ¸ÂÃã¹ý ±³Á¤À» À§ÇØ µð·ºÅ丮¸¦ »ìÆìº¸´Â ÀÛ¾÷À» µ¿½Ã¿¡ ¿©·¯¹ø ÇÒ °æ¿ì ¼­¹ö ¼º´É¿¡ ¿µÇâÀ» ÁØ´Ù.
    • ¹®¼­Áß¿¡ ¸ÂÃã¹ý "±³Á¤"À¸·Î ¿ì¿¬È÷ º¸¿©Áú ¼ö ÀÖ´Â ±â¹Ð¹®¼­°¡ ¾ø¾î¾ß ÇÑ´Ù.
    • ¸ðµâÀº ÆÄÀϸí°ú µð·ºÅ丮¸í¸¸À» ±³Á¤ÇÒ ¼ö ÀÖÀ¸¸ç, (http://my.host/~apahce/¿Í °°ÀÌ) ¸ÂÃã¹ýÀÌ Æ²¸° »ç¿ëÀÚ¸íÀ» ±³Á¤ÇÏÁö ¸øÇÑ´Ù.
    • ¸ÂÃã¹ý ±³Á¤Àº Á¸ÀçÇÏ´Â ÆÄÀÏ¿¡¸¸ Àû¿ëµÈ´Ù. ±×·¡¼­ <Location /status>¿¡ ´ëÇÑ ¿äûÀ» ³»¿ëÇù»óÀ» °ÅÄ£ "/stats.html" ÆÄÀÏ·Î ¿ÀÀÎÇÒ ¼ö ÀÖ´Ù.

    DAV¸¦ »ç¿ëÇÏ´Â µð·ºÅ丮¿¡ mod_spelingÀ» »ç¿ëÇÏ¸é ¾ÈµÈ´Ù. ÀÌÀ¯´Â »õ·Î ¾÷·ÎµåÇÏ·Á´Â doc43.html ¹®¼­¸¦ ¾û¶×ÇÏ°Ô ±âÁ¸ÀÇ doc34.html ÆÄÀÏ·Î ¸®´ÙÀÌ·ºÆ®ÇÏ´Â µî, DAV°¡ »õ·Î ¸¸µå´Â ¸®¼Ò½º¸íÀ» ±âÁ¸ÀÇ ÆÄÀϸíÀ¸·Î "¸ÂÃã¹ý ±³Á¤"À» ½ÃµµÇϱ⠶§¹®ÀÌ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/directives.html.fr.utf80000644000000000000500000015570513523273316020564 0ustar rootsrc Index des directives - Serveur HTTP Apache Version 2.4
    <-

    Index des directives

    Langues Disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Toutes les directives Apache disponibles dans la distribution standard d'Apache sont référencées ici. Elles sont décrites en utilisant un format normalisé, et un dictionnaire des termes utilisés dans leurs descriptions est disponible.

    Un Document de référence rapide des directives est également disponible. Il donne des détails à propos de chaque directive sous une forme abrégée.

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 

    Langues Disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_anon.html.ko.euc-kr0000644000000000000500000004006513412755316021710 0ustar rootsrc mod_authn_anon - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_authn_anon

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:ÀÎÁõ¿µ¿ª¿¡ "À͸í(anonymous)" »ç¿ëÀÚÀÇ Á¢±ÙÀ» Çã¿ëÇÑ´Ù
    »óÅÂ:Extension
    ¸ðµâ¸í:authn_anon_module
    ¼Ò½ºÆÄÀÏ:mod_authn_anon.c
    Áö¿ø:¾ÆÆÄÄ¡ 2.1 ÀÌÈĺÎÅÍ

    ¿ä¾à

    ÀÌ ¸ðµâÀº mod_auth_basic µî ÀÎÁõ¾Õ´Ü¸ðµâÀ» À§ÇØ (¿¹¸¦ µé¾î 'Ưº°ÇÑ' »ç¿ëÀÚ ¾ÆÀ̵ð 'anonymous'¿Í ÀüÀÚ¿ìÆí ÁÖ¼Ò¸¦ ¾ÏÈ£·Î »ç¿ëÇÏ´Â) À͸í-ftp »çÀÌÆ®¿Í À¯»çÇÑ »ç¿ëÀÚ ÀÎÁõÀ» ÇÑ´Ù. ÀüÀÚ¿ìÆí ÁÖ¼Ò¸¦ ·Î±×¿¡ ±â·ÏÇÒ ¼ö ÀÖ´Ù.

    ´Ù¸¥ (µ¥ÀÌÅͺ£À̽º) Á¢±ÙÁ¦¾î ¹æ½Ä°ú ÇÔ²² »ç¿ëÇÏ¿© 'µî·ÏÇÏÁö¾ÊÀº' »ç¿ëÀÚ¿¡°Ô »çÀÌÆ®¸¦ ¿­¾îµÎ¸é¼­ È¿À²ÀûÀÎ »ç¿ëÀÚ ÃßÀû°ú »ç¿ëÀÚÁ¤Àǰ¡ °¡´ÉÇÏ´Ù. ÀÎÁõ±â¹Ý »ç¿ëÀÚ ÃßÀûÀº ÄíŰ³ª ±«»óÇÑ URL Á¢µÎ»ç/Á¢¹Ì»ç¿Í ´Þ¸® ¿ÏÀüÈ÷ ºê¶ó¿ìÀú µ¶¸³ÀûÀÌ°í »ç¿ëÀÚ°¡ URLÀ» °øÀ¯ÇÒ ¼ö ÀÖ´Ù´Â ÀåÁ¡ÀÌ ÀÖ´Ù.

    mod_auth_basicÀ» »ç¿ëÇÒ¶§ AuthBasicProviderÀÇ °ªÀ¸·Î anonÀ» ¼³Á¤Çϸé ÀÌ ¸ðµâÀ» »ç¿ëÇÑ´Ù.

    top

    ¿¹Á¦

    ´ÙÀ½ ¿¹´Â "ÀϹÝÀûÀÎ" htpasswd-ÆÄÀϱâ¹Ý ÀÎÁõ¿¡ Ãß°¡·Î »ç¿ëÀÚ°¡ ´ÙÀ½ Á¶°ÇÀ» ¸¸Á·ÇÑ´Ù¸é '¼Õ´Ô(guest)'À¸·Î Á¢±ÙÇÒ ¼ö ÀÖµµ·Ï ÇÑ´Ù:

    • »ç¿ëÀÚ´Â »ç¿ëÀÚ ¾ÆÀ̵𸦠ÀÔ·ÂÇØ¾ß ÇÑ´Ù. (Anonymous_NoUserID)
    • »ç¿ëÀÚ´Â ¾ÏÈ£¸¦ ÀÔ·ÂÇØ¾ß ÇÑ´Ù. (Anonymous_MustGiveEmail)
    • ¾ÏÈ£·Î À¯È¿ÇÑ ÀüÀÚ¿ìÆí ÁÖ¼Ò¸¦ ÀÔ·ÂÇØ¾ß ÇÑ´Ù. ¿¹¸¦ µé¾î ÃÖ¼ÒÇÑ '@'¿Í '.' ÇѰ³¸¦ Æ÷ÇÔÇØ¾ß ÇÑ´Ù. (Anonymous_VerifyEmail)
    • »ç¿ëÀÚ ¾ÆÀ̵ð´Â anonymous guest www test welcome Áß ÇϳªÀ̸ç, ´ë¼Ò¹®ÀÚ¸¦ ±¸º°ÇÏÁö ¾Ê´Â´Ù. (Anonymous)
    • ±×¸®°í ¾ÏÈ£·Î ÀÔ·ÂÇÑ ÀüÀÚ¿ìÆí ÁÖ¼Ò¸¦ ¿À·ù·Î±×ÆÄÀÏ¿¡ ±â·ÏÇÑ´Ù. (Anonymous_LogEmail)

    ¿¹Á¦

    <Directory /foo> AuthName "¼Õ´ÔÀ¸·Î ¹æ¹®ÇÏ·Á¸é 'anonymous'¿Í ÀüÀÚ¿ìÆí ÁÖ¼Ò¸¦ »ç¿ëÇ϶ó"
    AuthType Basic
    AuthBasicProvider file anon
    AuthUserFile /path/to/your/.htpasswd

    Anonymous_NoUserID off
    Anonymous_MustGiveEmail on
    Anonymous_VerifyEmail on
    Anonymous_LogEmail on
    Anonymous anonymous guest www test welcome

    Order Deny,Allow
    Allow from all

    Require valid-user
    </Directory>

    top

    Anonymous Áö½Ã¾î

    ¼³¸í:¾ÏÈ£°Ë»ç¾øÀÌ Á¢±ÙÀ» Çã¿ëÇÒ »ç¿ëÀÚ ¾ÆÀ̵ðµéÀ» ÁöÁ¤ÇÑ´Ù
    ¹®¹ý:Anonymous user [user] ...
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Extension
    ¸ðµâ:mod_authn_anon

    ¾ÏÈ£°Ë»ç¾øÀÌ Á¢±ÙÀ» Çã¿ëÇÒ 'Ưº°ÇÑ' »ç¿ëÀÚ ¾ÆÀ̵ð ¸ñ·Ï. »ç¿ëÀÚ ¾ÆÀ̵ðµéÀ» °ø¹éÀ¸·Î ±¸ºÐÇÑ´Ù. µû¿ÈÇ¥ '¿Í "³ª Å»Ãâ¹®ÀÚ \¸¦ »ç¿ëÇÏ¿© »ç¿ëÀÚ ¾ÆÀ̵ð ¾È¿¡ °ø¹éÀ» Æ÷ÇÔÇÒ ¼ö ÀÖ´Ù.

    ¾ÆÀ̵ð´Â ´ë¼Ò¹®ÀÚ¸¦ ±¸º°ÇÏÁö¾ÊÀ½À» ÁÖÀÇÇ϶ó.
    Çã¿ëÇÒ »ç¿ëÀÚ ¾ÆÀ̵𿡠Ưº°ÇÑ »ç¿ëÀÚ¸íÀÎ 'anonymous'¸¦ Ç×»ó Æ÷ÇÔÇÏ±æ °­·ÂÈ÷ ±ÇÇÑ´Ù.

    ¿¹Á¦:

    Anonymous anonymous "Not Registered" "I don't know"

    "anonymous", "AnonyMous", "Not Registered", "I Don't Know" µî »ç¿ëÀÚ ¾ÆÀ̵𸦠»ç¿ëÇÏ¸é ¾ÏÈ£°Ë»ç¾øÀÌ »ç¿ëÀÚ¸¦ Çã¿ëÇÑ´Ù.

    ¾ÆÆÄÄ¡ 2.1¿¡¼­´Â »ç¿ëÀÚ ¾ÆÀ̵ð·Î "*"¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù. ±×·¯¸é ¾î¶² »ç¿ëÀÚ ¾ÆÀ̵ð¶óµµ ¹Þ¾ÆµéÀδÙ.

    top

    Anonymous_LogEmail Áö½Ã¾î

    ¼³¸í:ÀÔ·ÂÇÑ ¾ÏÈ£¸¦ ¿À·ù·Î±×¿¡ ±â·ÏÇÒÁö ¿©ºÎ
    ¹®¹ý:Anonymous_LogEmail On|Off
    ±âº»°ª:Anonymous_LogEmail On
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Extension
    ¸ðµâ:mod_authn_anon

    ±âº»°ªÀÎ OnÀ¸·Î ¼³Á¤Çϸé (¾Æ¸¶µµ ÀüÀÚ¿ìÆí ÁÖ¼ÒÀÏ) ÀÔ·ÂÇÑ '¾ÏÈ£'¸¦ ¿À·ù·Î±×¿¡ ±â·ÏÇÑ´Ù.

    top

    Anonymous_MustGiveEmail Áö½Ã¾î

    ¼³¸í:¾ÏÈ£°¡ ¾ø¾îµµ °¡´ÉÇÑÁö ¿©ºÎ
    ¹®¹ý:Anonymous_MustGiveEmail On|Off
    ±âº»°ª:Anonymous_MustGiveEmail On
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Extension
    ¸ðµâ:mod_authn_anon

    »ç¿ëÀÚ°¡ ¾ÏÈ£·Î ÀüÀÚ¿ìÆí ÁÖ¼Ò¸¦ ÀÔ·ÂÇØ¾ß ÇÏ´ÂÁö ¿©ºÎ¸¦ °áÁ¤ÇÑ´Ù. ¾ÏÈ£°¡ ¾øÀ¸¸é °ÅºÎÇÑ´Ù.

    top

    Anonymous_NoUserID Áö½Ã¾î

    ¼³¸í:»ç¿ëÀÚ ¾ÆÀ̵𰡠¾ø¾îµµ °¡´ÉÇÏÁö ¿©ºÎ
    ¹®¹ý:Anonymous_NoUserID On|Off
    ±âº»°ª:Anonymous_NoUserID Off
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Extension
    ¸ðµâ:mod_authn_anon

    OnÀ¸·Î ¼³Á¤ÇÏ¸é »ç¿ëÀÚ´Â »ç¿ëÀÚ ¾ÆÀ̵𸦠(¾Æ¸¶ ¾ÏÈ£µµ) ÀÔ·ÂÇÏÁö ¾Ê¾Æµµ µÈ´Ù. ÀÌ´Â ÀÚ¿¬½º·´°Ô ±×³É returnÀ» Ä¡°Å³ª OK ¹öưÀ» Ŭ¸¯ÇÏ´Â MS-Explorer »ç¿ëÀÚ¿¡°Ô ¸Å¿ì Æí¸®ÇÏ´Ù.

    top

    Anonymous_VerifyEmail Áö½Ã¾î

    ¼³¸í:¾ÏÈ£°¡ ¿Ã¹Ù¸¥ Çü½ÄÀÇ ÀüÀÚ¿ìÆí ÁÖ¼ÒÀÎÁö °Ë»ç ¿©ºÎ
    ¹®¹ý:Anonymous_VerifyEmail On|Off
    ±âº»°ª:Anonymous_VerifyEmail Off
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Extension
    ¸ðµâ:mod_authn_anon

    OnÀ¸·Î ¼³Á¤ÇÏ¸é »ç¿ëÀÚ°¡ ¿Ã¹Ù¸¥ ÀüÀÚ¿ìÆí ÁÖ¼Ò¸¦ ÀÔ·ÂÇϵµ·Ï ÀÔ·ÂÇÑ '¾ÏÈ£'°¡ ÃÖ¼ÒÇÑ '@'¿Í '.'¸¦ ÇѰ³¾¿ Æ÷ÇÔÇÏ´ÂÁö °Ë»çÇÑ´Ù (À§ÀÇ Anonymous_LogEmail Âü°í).

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_core.html.fr.utf80000644000000000000500000011755313412755316021426 0ustar rootsrc mod_authz_core - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authz_core

    Langues Disponibles:  en  |  fr 

    Description:Autorisation basique
    Statut:Base
    Identificateur de Module:authz_core_module
    Fichier Source:mod_authz_core.c
    Compatibilité:Disponible depuis la version 2.3 d'Apache HTTPD

    Sommaire

    Ce module fournit des fonctionnalités d'autorisation basiques permettant d'accorder ou refuser l'accès à certaines zones du site web aux utilisateurs authentifiés. mod_authz_core donne la possibilité d'enregistrer divers fournisseurs d'autorisation. Il est en général utilisé avec un module fournisseur d'authentification comme mod_authn_file, et un module d'autorisation comme mod_authz_user. Il permet aussi l'application d'une logique élaborée au déroulement du processus d'autorisation.

    top

    Conteneurs d'autorisation

    Les directives de conteneur d'autorisation <RequireAll>, <RequireAny> et <RequireNone> peuvent être combinées entre elles et avec la directive Require pour confectionner une logique d'autorisation complexe.

    L'exemple ci-dessous illustre la logique d'autorisation suivante. Pour pouvoir accéder à la ressource, l'utilisateur doit être l'utilisateur superadmin, ou appartenir aux deux groupes LDAP admins et Administrateurs et soit appartenir au groupe ventes ou avoir ventes comme valeur de l'attribut LDAP dept. De plus, pour pouvoir accéder à la ressource, l'utilisateur ne doit appartenir ni au groupe temps, ni au groupe LDAP Employés temporaires.

    <Directory "/www/mydocs">
        <RequireAll>
            <RequireAny>
                Require user superadmin
                <RequireAll>
                Require group admins
                Require ldap-group "cn=Administrators,o=Airius"
                    <RequireAny>
                    Require group sales
                    Require ldap-attribute dept="sales"
                    </RequireAny>
                </RequireAll>
            </RequireAny>
            <RequireNone>
                Require group temps
                Require ldap-group "cn=Temporary Employees,o=Airius"
            </RequireNone>
        </RequireAll>
    </Directory>
    top

    Les directives Require

    Le module mod_authz_core met à disposition des fournisseurs d'autorisation génériques utilisables avec la directive Require.

    Require env

    Le fournisseur env permet de contrôler l'accès au serveur en fonction de l'existence d'une variable d'environnement. Lorsque Require env env-variable est spécifié, la requête se voit autoriser l'accès si la variable d'environnement env-variable existe. Le serveur permet de définir facilement des variables d'environnement en fonction des caractéristiques de la requête du client via les directives fournies par le module mod_setenvif. Cette directive Require env permet donc de contrôler l'accès en fonction des valeurs des en-têtes de la requête HTTP tels que User-Agent (type de navigateur), Referer, entre autres.

    SetEnvIf User-Agent "^KnockKnock/2\.0" let_me_in
    <Directory "/docroot">
        Require env let_me_in
    </Directory>

    Avec cet exemple, les navigateurs dont la chaîne user-agent commence par KnockKnock/2.0 se verront autoriser l'accès, alors que tous les autres seront rejetés.

    Lorsque le serveur cherche un chemin via une sous-requête interne (par exemple la recherche d'un DirectoryIndex), ou lorsqu'il génère un listing du contenu d'un répertoire via le module mod_autoindex, la sous-requête n'hérite pas des variables d'environnement spécifiques à la requête. En outre, à cause des phases de l'API auxquelles mod_setenvif prend part, les directives SetEnvIf ne sont pas évaluées séparément dans la sous-requête.

    Require all

    Le fournisseur all reproduit la fonctionnalité précédemment fournie par les directives 'Allow from all' et 'Deny from all'. Il accepte un argument dont les deux valeurs possibles sont : 'granted' ou 'denied'. Les exemples suivants autorisent ou interdisent l'accès à toutes les requêtes.

    Require all granted
    Require all denied

    Require method

    Le fournisseur method permet d'utiliser la méthode HTTP dans le processus d'autorisation. Les méthodes GET et HEAD sont ici considérées comme équivalentes. La méthode TRACE n'est pas supportée par ce fournisseur ; utilisez à la place la directive TraceEnable.

    Dans l'exemple suivant, seules les méthodes GET, HEAD, POST, et OPTIONS sont autorisées :

    Require method GET POST OPTIONS

    Dans l'exemple suivant, les méthodes GET, HEAD, POST, et OPTIONS sont autorisées sans authentification, alors que toutes les autres méthodes nécessitent un utilisateur valide :

    <RequireAny>
         Require method GET POST OPTIONS
         Require valid-user
    </RequireAny>

    Require expr

    Le fournisseur expr permet d'accorder l'autorisation d'accès de base en fonction d'expressions arbitraires.

    Require expr "%{TIME_HOUR} -ge 9 && %{TIME_HOUR} -le 17"
    <RequireAll>
        Require expr "!(%{QUERY_STRING} =~ /secret/)"
        Require expr "%{REQUEST_URI} in { '/example.cgi', '/other.cgi' }" 
    </RequireAll>
    Require expr "!(%{QUERY_STRING} =~ /secret/) && %{REQUEST_URI} in { '/example.cgi', '/other.cgi' }"

    La syntaxe de l'expression est décrite dans la documentation de ap_expr. Avant la version 2.4.16, les doubles-quotes étaient prohibées

    Normalement, l'expression est évaluée avant l'authentification. Cependant, si l'expression renvoie false et se réfère à la variable %{REMOTE_USER}, le processus d'authentification sera engagé et l'expression réévaluée.

    top

    Création des alias du fournisseur d'autorisation

    Il est possible de créer des fournisseurs d'autorisation étendus dans le fichier de configuration et de leur assigner un nom d'alias. On peut ensuite utiliser ces fournisseurs aliasés dans une directive Require de la même manière qu'on le ferait pour des fournisseurs d'autorisation de base. En plus de la possibilité de créer et d'aliaser un fournisseur étendu, le même fournisseur d'autorisation étendu peut être référencé par plusieurs localisations.

    Exemple

    Dans l'exemple suivant, on crée deux alias de fournisseur d'autorisation ldap différents basés sur le fournisseur d'autorisation ldap-group. Il est ainsi possible pour un seul répertoire de vérifier l'appartenance à un groupe dans plusieurs serveurs ldap :

    <AuthzProviderAlias ldap-group ldap-group-alias1 "cn=my-group,o=ctx">
        AuthLDAPBindDN "cn=youruser,o=ctx"
        AuthLDAPBindPassword yourpassword
        AuthLDAPURL "ldap://ldap.host/o=ctx"
    </AuthzProviderAlias>
    
    <AuthzProviderAlias ldap-group ldap-group-alias2 "cn=my-other-group,o=dev">
        AuthLDAPBindDN "cn=yourotheruser,o=dev"
        AuthLDAPBindPassword yourotherpassword
        AuthLDAPURL "ldap://other.ldap.host/o=dev?cn"
    </AuthzProviderAlias>
    
    Alias "/secure" "/webpages/secure"
    <Directory "/webpages/secure">
        Require all granted
        
        AuthBasicProvider file
        
        AuthType Basic
        AuthName LDAP_Protected_Place
        
        #implied OR operation
        Require ldap-group-alias1
        Require ldap-group-alias2
    </Directory>
    top

    Directive AuthMerging

    Description:Définit la manière dont chaque logique d'autorisation des sections de configuration se combine avec celles des sections de configuration précédentes.
    Syntaxe:AuthMerging Off | And | Or
    Défaut:AuthMerging Off
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_authz_core

    Lorsque l'autorisation est activée, elle est normalement héritée par chaque section de configuration suivante, à moins qu'un jeu de directives d'autorisations différent ne soit spécifié. Il s'agit du comportement par défaut, qui correspond à la définition explicite AuthMerging Off.

    Dans certaines situations cependant, il peut être souhaitable de combiner la logique d'autorisation d'une section de configuration avec celle de la section précédente lorsque les sections de configuration se combinent entre elles. Dans ce cas, deux options sont disponibles, And et Or.

    Lorsqu'une section de configuration contient AuthMerging And ou AuthMerging Or, sa logique d'autorisation se combine avec celle de la section de configuration qui la précède (selon l'ordre général des sections de configuration), et qui contient aussi une logique d'autorisation, comme si les deux sections étaient concaténées respectivement dans une directive <RequireAll> ou <RequireAny>.

    La définition de la directive AuthMerging ne concerne que la section de configuration dans laquelle elle apparaît. Dans l'exemple suivant, seuls les utilisateurs appartenant au groupe alpha sont autorisés à accéder à /www/docs. Les utilisateurs appartenant au groupe alpha ou au groupe beta sont autorisés à accéder à /www/docs/ab. Cependant, la définition implicite à Off de la directive AuthMerging s'applique à la section de configuration <Directory> concernant le répertoire /www/docs/ab/gamma, ce qui implique que les directives d'autorisation de cette section l'emportent sur celles des sections précédentes. Par voie de conséquence, seuls les utilisateurs appartenant au groupe gamma sont autorisés à accéder à /www/docs/ab/gamma.
    <Directory "/www/docs">
        AuthType Basic
        AuthName Documents
        AuthBasicProvider file
        AuthUserFile "/usr/local/apache/passwd/passwords"
        Require group alpha
    </Directory>
    
    <Directory "/www/docs/ab">
        AuthMerging Or
        Require group beta
    </Directory>
    
    <Directory "/www/docs/ab/gamma">
        Require group gamma
    </Directory>
    top

    Directive <AuthzProviderAlias>

    Description:Regroupe des directives représentant une extension d'un fournisseur d'autorisation de base qui pourra être référencée à l'aide de l'alias spécifié
    Syntaxe:<AuthzProviderAlias fournisseur-de-base Alias Paramètres-Require> ... </AuthzProviderAlias>
    Contexte:configuration globale
    Statut:Base
    Module:mod_authz_core

    Les balises <AuthzProviderAlias> et </AuthzProviderAlias> permettent de regrouper des directives d'autorisation auxquelles on pourra faire référence à l'aide de l'alias spécifié dans une directive Require.

    Si Require-Parameters comporte plusieurs paramètres, la liste de ces derniers doit être entourée de guillemets. Dans le cas contraire, seul le premier paramètre de la liste sera pris en compte.

    # Dans cet exemple, pour que les deux adresses IP soient prises en compte, elles
    # DOIVENT être entourées de guillemets
    <AuthzProviderAlias ip blacklisted-ips "XXX.XXX.XXX.XXX YYY.YYY.YYY.YYY">
    </AuthzProviderAlias>
    
    <Directory "/path/to/dir">
        <RequireAll>
            Require not blacklisted-ips
            Require all granted
        </RequireAll>
    </Directory>
    top

    Directive AuthzSendForbiddenOnFailure

    Description:Envoie '403 FORBIDDEN' au lieu de '401 UNAUTHORIZED' si l'authentification réussit et si l'autorisation a été refusée.
    Syntaxe:AuthzSendForbiddenOnFailure On|Off
    Défaut:AuthzSendForbiddenOnFailure Off
    Contexte:répertoire, .htaccess
    Statut:Base
    Module:mod_authz_core
    Compatibilité:Disponible depuis la version 2.3.11 d'Apache HTTPD

    Par défaut, si l'authentification réussit, alors que l'autorisation est refusée, Apache HTTPD renvoie un code de réponse HTTP '401 UNAUTHORIZED'. En général, les navigateurs proposent alors une nouvelle fois à l'utilisateur la boîte de dialogue de saisie du mot de passe, ce qui n'est pas toujours souhaitable. La directive AuthzSendForbiddenOnFailure permet de changer le code de réponse en '403 FORBIDDEN'.

    Avertissement de sécurité

    La modification de la réponse en cas de refus d'autorisation diminue la sécurité du mot de passe, car elle indique à un éventuel attaquant que le mot de passe qu'il a saisi était correct.

    top

    Directive Require

    Description:Vérifie si un utilisateur authentifié a une autorisation d'accès accordée par un fournisseur d'autorisation.
    Syntaxe:Require [not] nom-entité [nom-entité] ...
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_authz_core

    Cette directive permet de vérifier si un utilisateur authentifié a l'autorisation d'accès accordée pour un certain fournisseur d'autorisation et en tenant compte de certaines restrictions. mod_authz_core met à disposition les fournisseurs d'autorisation génériques suivants :

    Require all granted
    L'accès est autorisé sans restriction.
    Require all denied
    L'accès est systématiquement refusé.
    Require env env-var [env-var] ...
    L'accès n'est autorisé que si l'une au moins des variables d'environnement spécifiées est définie.
    Require method http-method [http-method] ...
    L'accès n'est autorisé que pour les méthodes HTTP spécifiées.
    Require expr expression
    L'accès est autorisé si expression est évalué à vrai.

    Voici quelques exemples de syntaxes autorisées par mod_authz_user, mod_authz_host et mod_authz_groupfile :

    Require user identifiant utilisateur [identifiant utilisateur] ...
    Seuls les utilisateurs spécifiés auront accès à la ressource.
    Require group nom groupe [nom groupe] ...
    Seuls les utilisateurs appartenant aux groupes spécifiés auront accès à la ressource.
    Require valid-user
    Tous les utilisateurs valides auront accès à la ressource.
    Require ip 10 172.20 192.168.2
    Les clients dont les adresses IP font partie des tranches spécifiées auront accès à la ressource.

    D'autres modules d'autorisation comme mod_authnz_ldap, mod_authz_dbm, mod_authz_dbd, mod_authz_owner et mod_ssl implémentent des options de la directive Require.

    Pour qu'une configuration d'authentification et d'autorisation fonctionne correctement, la directive Require doit être accompagnée dans la plupart des cas de directives AuthName, AuthType et AuthBasicProvider ou AuthDigestProvider, ainsi que de directives telles que AuthUserFile et AuthGroupFile (pour la définition des utilisateurs et des groupes). Exemple :

    AuthType Basic
    AuthName "Restricted Resource"
    AuthBasicProvider file
    AuthUserFile "/web/users"
    AuthGroupFile "/web/groups"
    Require group admin

    Les contrôles d'accès appliqués de cette manière sont effectifs pour toutes les méthodes. C'est d'ailleurs ce que l'on souhaite en général. Si vous voulez n'appliquer les contrôles d'accès qu'à certaines méthodes, tout en laissant les autres méthodes sans protection, placez la directive Require dans une section <Limit>.

    Le résultat de la directive Require peut être inversé en utilisant l'option not. Comme dans le cas de l'autre directive d'autorisation inversée <RequireNone>, si la directive Require est inversée, elle ne peut qu'échouer ou produire un résultat neutre ; elle ne peut donc alors pas autoriser une requête de manière indépendante.

    Dans l'exemple suivant, tous les utilisateurs appartenant aux groupes alpha et beta ont l'autorisation d'accès, à l'exception de ceux appartenant au groupe reject.

    <Directory "/www/docs">
        <RequireAll>
            Require group alpha beta
            Require not group reject
        </RequireAll>
    </Directory>

    Lorsque plusieurs directives Require sont placées dans une même section de configuration, et ne se trouvent pas dans une autre directive d'autorisation comme <RequireAll>, elles sont implicitement contenues dans une directive <RequireAny>. Ainsi, la première directive Require qui autorise l'accès à un utilisateur autorise l'accès pour l'ensemble de la requête, et les directives Require suivantes sont ignorées.

    Avertissement à propos de la sécurité

    Prettez une attention particulière aux directives d'autorisation définies au sein des sections Location qui se chevauchent avec des contenus servis depuis le système de fichiers. Par défaut, les configurations définies dans ces sections l'emportent sur les configurations d'autorisations définies au sein des sections Directory et Files sections.

    La directive AuthMerging permet de contrôler la manière selon laquelle les configurations d'autorisations sont fusionnées au sein des sections précitées.

    Voir aussi

    top

    Directive <RequireAll>

    Description:Regroupe plusieurs directives d'autorisation dont aucune ne doit échouer et dont au moins une doit retourner un résultat positif pour que la directive globale retourne elle-même un résultat positif.
    Syntaxe:<RequireAll> ... </RequireAll>
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_authz_core

    Les balises <RequireAll> et </RequireAll> permettent de regrouper des directives d'autorisation dont aucune ne doit échouer, et dont au moins une doit retourner un résultat positif pour que la directive <RequireAll> retourne elle-même un résultat positif.

    Si aucune des directives contenues dans la directive <RequireAll> n'échoue, et si au moins une retourne un résultat positif, alors la directive <RequireAll> retourne elle-même un résultat positif. Si aucune ne retourne un résultat positif, et si aucune n'échoue, la directive globale retourne un résultat neutre. Dans tous les autres cas, elle échoue.

    Voir aussi

    top

    Directive <RequireAny>

    Description:Regroupe des directives d'autorisation dont au moins une doit retourner un résultat positif pour que la directive globale retourne elle-même un résultat positif.
    Syntaxe:<RequireAny> ... </RequireAny>
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_authz_core

    Les balises <RequireAny> et </RequireAny> permettent de regrouper des directives d'autorisation dont au moins une doit retourner un résultat positif pour que la directive <RequireAny> retourne elle-même un résultat positif.

    Si une ou plusieurs directives contenues dans la directive <RequireAny> retournent un résultat positif, alors la directive <RequireAny> retourne elle-même un résultat positif. Si aucune ne retourne un résultat positif et aucune n'échoue, la directive globale retourne un résultat neutre. Dans tous les autres cas, elle échoue.

    Comme les directives d'autorisation inversées sont incapables de retourner un résultat positif, elles ne peuvent pas impacter de manière significative le résultat d'une directive <RequireAny> (elles pourraient tout au plus faire échouer la directive dans le cas où elles échoueraient elles-mêmes, et où toutes les autres directives retourneraient un résultat neutre). C'est pourquoi il n'est pas permis d'utiliser les directives d'autorisation inversées dans une directive <RequireAny>.

    Voir aussi

    top

    Directive <RequireNone>

    Description:Regroupe des directives d'autorisation dont aucune ne doit retourner un résultat positif pour que la directive globale n'échoue pas.
    Syntaxe:<RequireNone> ... </RequireNone>
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_authz_core

    Les balises <RequireNone> et </RequireNone> permettent de regrouper des directives d'autorisation dont aucune ne doit retourner un résultat positif pour que la directive <RequireNone> n'échoue pas.

    Si une ou plusieurs directives contenues dans la directive <RequireNone> retournent un résultat positif, la directive <RequireNone> échouera. Dans tous les autres cas, cette dernière retournera un résultat neutre. Ainsi, comme pour la directive d'autorisation inversée Require not, elle ne peut jamais autoriser une requête de manière indépendante car elle ne pourra jamais retourner un résultat positif. Par contre, on peut l'utiliser pour restreindre l'ensemble des utilisateurs autorisés à accéder à une ressource.

    Comme les directives d'autorisation inversées sont incapables de retourner un résultat positif, elles ne peuvent pas impacter de manière significative le résultat d'une directive <RequireNone>. C'est pourquoi il n'est pas permis d'utiliser les directives d'autorisation inversées dans une directive <RequireNone>.

    Voir aussi

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dav_fs.html0000644000000000000500000000061713362070302017207 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_dav_fs.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_dav_fs.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_dav_fs.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_dav_fs.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_actions.html.ko.euc-kr0000644000000000000500000003057213412755316021220 0ustar rootsrc mod_actions - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_actions

    °¡´ÉÇÑ ¾ð¾î:  de  |  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:ÀÌ ¸ðµâÀº ¹Ìµð¾îÁ¾·ù³ª ¿äû¸Þ¼­µå¿¡ µû¶ó CGI ½ºÅ©¸³Æ®¸¦ ½ÇÇàÇÑ´Ù.
    »óÅÂ:Base
    ¸ðµâ¸í:actions_module
    ¼Ò½ºÆÄÀÏ:mod_actions.c

    ¿ä¾à

    ÀÌ ¸ðµâ¿¡´Â µÎ°¡Áö Áö½Ã¾î°¡ ÀÖ´Ù. Action Áö½Ã¾î´Â ¿äûÇÏ´Â ÆÄÀÏÀÇ MIME content type¿¡ µû¶ó CGI ½ºÅ©¸³Æ®¸¦ ½ÇÇàÇÑ´Ù. Script Áö½Ã¾î´Â ¿äûÀÌ Æ¯Á¤ ¸Þ¼­µå¸¦ »ç¿ëÇÒ °æ¿ì CGI ½ºÅ©¸³Æ®¸¦ ½ÇÇàÇÑ´Ù. ±×·¡¼­ ÆÄÀÏÀ» ó¸®ÇÏ´Â ½ºÅ©¸³Æ®¸¦ ¸Å¿ì ½±°Ô ½ÇÇàÇÒ ¼ö ÀÖ´Ù.

    top

    Action Áö½Ã¾î

    ¼³¸í:ƯÁ¤ Çڵ鷯³ª content-type¿¡ ´ëÇØ CGI ½ºÅ©¸³Æ®¸¦ »ç¿ëÇÑ´Ù
    ¹®¹ý:Action action-type cgi-script [virtual]
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_actions
    Áö¿ø:virtual ¼öÁ¤ÀÚ¿Í Çڵ鷯´Â ¾ÆÆÄÄ¡ 2.1¶§ Ãß°¡µÇ¾ú´Ù

    ÀÌ Áö½Ã¾î´Â ¿äûÀÌ action-typeÀ̸é cgi-script¸¦ ½ÇÇàÇÏ´Â ÇൿÀ» ¼­¹ö¿¡ Ãß°¡ÇÑ´Ù. cgi-script´Â ScriptAlias³ª AddHandler¸¦ »ç¿ëÇÏ¿© CGI ½ºÅ©¸³Æ®·Î ÁöÁ¤ÇÑ ¸®¼Ò½ºÀÇ URL°æ·ÎÀÌ´Ù. action-type¿¡´Â Çڵ鷯³ª MIME content typeÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù. ÀÌ Áö½Ã¾î´Â PATH_INFO¿Í PATH_TRANSLATED CGI Ç¥ÁØ È¯°æº¯¼ö·Î ¿äûÇÑ ¹®¼­ÀÇ URL°ú ÆÄÀϰæ·Î¸¦ Àü´ÞÇÑ´Ù. REDIRECT_HANDLER º¯¼ö·Î ƯÁ¤ ¿äû¿¡ »ç¿ëÇÒ Çڵ鷯¸¦ Àü´ÞÇÑ´Ù.

    ¿¹Á¦

    # ƯÁ¤ MIME content typeÀÇ ÆÄÀÏ ¿äû:
    Action image/gif /cgi-bin/images.cgi

    # ƯÁ¤ÇÑ È®ÀåÀÚ¸¦ °¡Áø ÆÄÀÏ
    AddHandler my-file-type .xyz
    Action my-file-type /cgi-bin/program.cgi

    ù¹øÂ° ¿¹¿¡¼­ MIME content typeÀÌ image/gifÀÎ ÆÄÀÏÀ» ¿äûÇϸé ÁöÁ¤ÇÑ cgi ½ºÅ©¸³Æ® /cgi-bin/images.cgi°¡ ó¸®ÇÑ´Ù.

    µÎ¹øÂ° ¿¹¿¡¼­ È®ÀåÀÚ°¡ .xyzÀÎ ÆÄÀÏÀ» ¿äûÇϸé ÁöÁ¤ÇÑ cgi ½ºÅ©¸³Æ® /cgi-bin/program.cgi°¡ ó¸®ÇÑ´Ù.

    In the second example, requests for files with a file extension of .xyz are handled instead by the specified cgi script /cgi-bin/program.cgi.

    ¼±ÅÃÀûÀÎ virtual ¼öÁ¤ÀÚ´Â ¿äûÇÑ ÆÄÀÏÀÌ ½ÇÁ¦·Î Á¸ÀçÇÏ´ÂÁö °Ë»çÇÏÁö ¾Êµµ·Ï ÇÑ´Ù. ¿¹¸¦ µé¾î, °¡»óÀÇ À§Ä¡¿¡ Action Áö½Ã¾î¸¦ »ç¿ëÇÏ·Á´Â °æ¿ì À¯¿ëÇÏ´Ù.

    ¿¹Á¦

    <Location /news>
    SetHandler news-handler
    Action news-handler /cgi-bin/news.cgi virtual
    </Location>

    Âü°í

    top

    Script Áö½Ã¾î

    ¼³¸í:ƯÁ¤ ¿äû¸Þ¼­µå¿¡ ´ëÇØ CGI ½ºÅ©¸³Æ®¸¦ »ç¿ëÇÑ´Ù.
    ¹®¹ý:Script method cgi-script
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory
    »óÅÂ:Base
    ¸ðµâ:mod_actions

    ÀÌ Áö½Ã¾î´Â ÆÄÀÏÀ» method ¸Þ¼­µå¸¦ »ç¿ëÇÏ¿© ¿äûÇϸé cgi-script¸¦ ½ÇÇàÇÏ´Â ÇൿÀ» ¼­¹ö¿¡ Ãß°¡ÇÑ´Ù. cgi-script´Â ScriptAlias³ª AddHandler¸¦ »ç¿ëÇÏ¿© CGI ½ºÅ©¸³Æ®·Î ÁöÁ¤ÇÑ ¸®¼Ò½ºÀÇ URL°æ·ÎÀÌ´Ù. ÀÌ Áö½Ã¾î´Â PATH_INFO¿Í PATH_TRANSLATED CGI Ç¥ÁØ È¯°æº¯¼ö·Î ¿äûÇÑ ¹®¼­ÀÇ URL°ú ÆÄÀϰæ·Î¸¦ Àü´ÞÇÑ´Ù.

    ¾î¶² ¸Þ¼­µå À̸§ÀÌ¶óµµ »ç¿ëÇÒ ¼ö ÀÖ´Ù. ¸Þ¼­µå À̸§Àº ´ë¼Ò¹®ÀÚ¸¦ ±¸º°ÇÑ´Ù. ±×·¡¼­ Script PUT°ú Script putÀº ¿ÏÀüÈ÷ ´Ù¸£´Ù.

    Script ¸í·É¾î´Â ±âº»ÀûÀÎ Çൿ¸¸À» ó¸®ÇÔÀ» ÁÖÀÇÇ϶ó. CGI ½ºÅ©¸³Æ®°¡ ºÒ¸®°Å³ª, ¿äûÇÑ ¸Þ¼­µå¸¦ ¾Ë¾Æ¼­ ó¸®ÇÒ ¼ö ÀÖ´Â ¸®¼Ò½ºÀÇ °æ¿ì ±×´ë·Î ó¸®ÇÑ´Ù. GET ¸Þ¼­µåÀÇ Script´Â ÁúÀÇ¾Æ±Ô¸ÕÆ®°¡ ÀÖÀ»¶§¸¸ (¿¹, foo.html?hi) »ç¿ëÇÔÀ» ÁÖÀÇÇ϶ó. ÁúÀÇ¾Æ±Ô¸ÕÆ®°¡ ¾ø´Ù¸é Á¤»óÀûÀ¸·Î ¿äûÀ» ó¸®ÇÑ´Ù.

    ¿¹Á¦

    # <ISINDEX>½Ä °Ë»öÀ» À§ÇØ
    Script GET /cgi-bin/search

    # CGI PUT Çڵ鷯
    Script PUT /~bob/put.cgi

    °¡´ÉÇÑ ¾ð¾î:  de  |  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_heartmonitor.html0000644000000000000500000000034413362070302020455 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_heartmonitor.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_heartmonitor.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_autoindex.html.en0000644000000000000500000017250713412755316020371 0ustar rootsrc mod_autoindex - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_autoindex

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Generates directory indexes, automatically, similar to the Unix ls command or the Win32 dir shell command
    Status:Base
    Module Identifier:autoindex_module
    Source File:mod_autoindex.c

    Summary

    The index of a directory can come from one of two sources:

    • A file located in that directory, typically called index.html. The DirectoryIndex directive sets the name of the file or files to be used. This is controlled by mod_dir.
    • Otherwise, a listing generated by the server. The other directives control the format of this listing. The AddIcon, AddIconByEncoding and AddIconByType are used to set a list of icons to display for various file types; for each file listed, the first icon listed that matches the file is displayed. These are controlled by mod_autoindex.

    The two functions are separated so that you can completely remove (or replace) automatic index generation should you want to.

    Automatic index generation is enabled with using Options +Indexes. See the Options directive for more details.

    If the FancyIndexing option is given with the IndexOptions directive, the column headers are links that control the order of the display. If you select a header link, the listing will be regenerated, sorted by the values in that column. Selecting the same header repeatedly toggles between ascending and descending order. These column header links are suppressed with the IndexOptions directive's SuppressColumnSorting option.

    Note that when the display is sorted by "Size", it's the actual size of the files that's used, not the displayed value - so a 1010-byte file will always be displayed before a 1011-byte file (if in ascending order) even though they both are shown as "1K".

    top

    Autoindex Request Query Arguments

    Various query string arguments are available to give the client some control over the ordering of the directory listing, as well as what files are listed. If you do not wish to give the client this control, the IndexOptions IgnoreClient option disables that functionality.

    The column sorting headers themselves are self-referencing hyperlinks that add the sort query options shown below. Any option below may be added to any request for the directory resource.

    • C=N sorts the directory by file name
    • C=M sorts the directory by last-modified date, then file name
    • C=S sorts the directory by size, then file name
    • C=D sorts the directory by description, then file name
    • O=A sorts the listing in Ascending Order
    • O=D sorts the listing in Descending Order
    • F=0 formats the listing as a simple list (not FancyIndexed)
    • F=1 formats the listing as a FancyIndexed list
    • F=2 formats the listing as an HTMLTable FancyIndexed list
    • V=0 disables version sorting
    • V=1 enables version sorting
    • P=pattern lists only files matching the given pattern

    Note that the 'P'attern query argument is tested after the usual IndexIgnore directives are processed, and all file names are still subjected to the same criteria as any other autoindex listing. The Query Arguments parser in mod_autoindex will stop abruptly when an unrecognized option is encountered. The Query Arguments must be well formed, according to the table above.

    The simple example below, which can be clipped and saved in a header.html file, illustrates these query options. Note that the unknown "X" argument, for the submit button, is listed last to assure the arguments are all parsed before mod_autoindex encounters the X=Go input.

    <form action="" method="get">
    Show me a <select name="F">
    <option value="0"> Plain list</option>
    <option value="1" selected="selected"> Fancy list</option>
    <option value="2"> Table list</option>
    </select>
    Sorted by <select name="C">
    <option value="N" selected="selected"> Name</option>
    <option value="M"> Date Modified</option>
    <option value="S"> Size</option>
    <option value="D"> Description</option>
    </select>
    <select name="O">
    <option value="A" selected="selected"> Ascending</option>
    <option value="D"> Descending</option>
    </select>
    <select name="V">
    <option value="0" selected="selected"> in Normal order</option>
    <option value="1"> in Version order</option>
    </select>
    Matching <input type="text" name="P" value="*" />
    <input type="submit" name="X" value="Go" />
    </form>

    top

    AddAlt Directive

    Description:Alternate text to display for a file, instead of an icon selected by filename
    Syntax:AddAlt string file [file] ...
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    AddAlt provides the alternate text to display for a file, instead of an icon, for FancyIndexing. File is a file extension, partial filename, wild-card expression or full filename for files to describe. If String contains any whitespace, you have to enclose it in quotes (" or '). This alternate text is displayed if the client is image-incapable, has image loading disabled, or fails to retrieve the icon.

    AddAlt "PDF file" *.pdf
    AddAlt Compressed *.gz *.zip *.Z
    top

    AddAltByEncoding Directive

    Description:Alternate text to display for a file instead of an icon selected by MIME-encoding
    Syntax:AddAltByEncoding string MIME-encoding [MIME-encoding] ...
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    AddAltByEncoding provides the alternate text to display for a file, instead of an icon, for FancyIndexing. MIME-encoding is a valid content-encoding, such as x-compress. If String contains any whitespace, you have to enclose it in quotes (" or '). This alternate text is displayed if the client is image-incapable, has image loading disabled, or fails to retrieve the icon.

    AddAltByEncoding gzip x-gzip
    top

    AddAltByType Directive

    Description:Alternate text to display for a file, instead of an icon selected by MIME content-type
    Syntax:AddAltByType string MIME-type [MIME-type] ...
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    AddAltByType sets the alternate text to display for a file, instead of an icon, for FancyIndexing. MIME-type is a valid content-type, such as text/html. If String contains any whitespace, you have to enclose it in quotes (" or '). This alternate text is displayed if the client is image-incapable, has image loading disabled, or fails to retrieve the icon.

    AddAltByType 'plain text' text/plain
    top

    AddDescription Directive

    Description:Description to display for a file
    Syntax:AddDescription string file [file] ...
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    This sets the description to display for a file, for FancyIndexing. File is a file extension, partial filename, wild-card expression or full filename for files to describe. String is enclosed in double quotes (").

    AddDescription "The planet Mars" mars.gif
    AddDescription "My friend Marshall" friends/mars.gif

    The typical, default description field is 23 bytes wide. 6 more bytes are added by the IndexOptions SuppressIcon option, 7 bytes are added by the IndexOptions SuppressSize option, and 19 bytes are added by the IndexOptions SuppressLastModified option. Therefore, the widest default the description column is ever assigned is 55 bytes.

    Since the File argument may be a partial file name, please remember that a too-short partial filename may match unintended files. For example, le.html will match the file le.html but will also match the file example.html. In the event that there may be ambiguity, use as complete a filename as you can, but keep in mind that the first match encountered will be used, and order your list of AddDescription directives accordingly.

    See the DescriptionWidth IndexOptions keyword for details on overriding the size of this column, or allowing descriptions of unlimited length.

    Caution

    Descriptive text defined with AddDescription may contain HTML markup, such as tags and character entities. If the width of the description column should happen to truncate a tagged element (such as cutting off the end of a bolded phrase), the results may affect the rest of the directory listing.

    Arguments with path information

    Absolute paths are not currently supported and do not match anything at runtime. Arguments with relative path information, which would normally only be used in htaccess context, are implicitly prefixed with '*/' to avoid matching partial directory names.

    top

    AddIcon Directive

    Description:Icon to display for a file selected by name
    Syntax:AddIcon icon name [name] ...
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    This sets the icon to display next to a file ending in name for FancyIndexing. Icon is either a (%-escaped) relative URL to the icon, a fully qualified remote URL, or of the format (alttext,url) where alttext is the text tag given for an icon for non-graphical browsers.

    Name is either ^^DIRECTORY^^ for directories, ^^BLANKICON^^ for blank lines (to format the list correctly), a file extension, a wildcard expression, a partial filename or a complete filename.

    ^^BLANKICON^^ is only used for formatting, and so is unnecessary if you're using IndexOptions HTMLTable.

    #Examples
    AddIcon (IMG,/icons/image.png) .gif .jpg .png
    AddIcon /icons/dir.png ^^DIRECTORY^^
    AddIcon /icons/backup.png *~

    AddIconByType should be used in preference to AddIcon, when possible.

    top

    AddIconByEncoding Directive

    Description:Icon to display next to files selected by MIME content-encoding
    Syntax:AddIconByEncoding icon MIME-encoding [MIME-encoding] ...
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    This sets the icon to display next to files with FancyIndexing. Icon is either a (%-escaped) relative URL to the icon, a fully qualified remote URL, or of the format (alttext,url) where alttext is the text tag given for an icon for non-graphical browsers.

    MIME-encoding is a valid content-encoding, such as x-compress.

    AddIconByEncoding /icons/compress.png x-compress
    top

    AddIconByType Directive

    Description:Icon to display next to files selected by MIME content-type
    Syntax:AddIconByType icon MIME-type [MIME-type] ...
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    This sets the icon to display next to files of type MIME-type for FancyIndexing. Icon is either a (%-escaped) relative URL to the icon, a fully qualified remote URL, or of the format (alttext,url) where alttext is the text tag given for an icon for non-graphical browsers.

    MIME-type is a wildcard expression matching required the mime types.

    AddIconByType (IMG,/icons/image.png) image/*
    top

    DefaultIcon Directive

    Description:Icon to display for files when no specific icon is configured
    Syntax:DefaultIcon url-path
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    The DefaultIcon directive sets the icon to display for files when no specific icon is known, for FancyIndexing. Url-path is a (%-escaped) relative URL to the icon, or a fully qualified remote URL.

    DefaultIcon /icon/unknown.png
    top

    HeaderName Directive

    Description:Name of the file that will be inserted at the top of the index listing
    Syntax:HeaderName filename
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    The HeaderName directive sets the name of the file that will be inserted at the top of the index listing. Filename is the name of the file to include.

    HeaderName HEADER.html

    Both HeaderName and ReadmeName now treat Filename as a URI path relative to the one used to access the directory being indexed. If Filename begins with a slash, it will be taken to be relative to the DocumentRoot.

    HeaderName /include/HEADER.html

    Filename must resolve to a document with a major content type of text/* (e.g., text/html, text/plain, etc.). This means that filename may refer to a CGI script if the script's actual file type (as opposed to its output) is marked as text/html such as with a directive like:

    AddType text/html .cgi

    Content negotiation will be performed if Options MultiViews is in effect. If filename resolves to a static text/html document (not a CGI script) and either one of the options Includes or IncludesNOEXEC is enabled, the file will be processed for server-side includes (see the mod_include documentation).

    If the file specified by HeaderName contains the beginnings of an HTML document (<html>, <head>, etc.) then you will probably want to set IndexOptions +SuppressHTMLPreamble, so that these tags are not repeated.

    See also

    top

    IndexHeadInsert Directive

    Description:Inserts text in the HEAD section of an index page.
    Syntax:IndexHeadInsert "markup ..."
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    The IndexHeadInsert directive specifies a string to insert in the <head> section of the HTML generated for the index page.

    IndexHeadInsert "<link rel=\"sitemap\" href=\"/sitemap.html\">"
    top

    IndexIgnore Directive

    Description:Adds to the list of files to hide when listing a directory
    Syntax:IndexIgnore file [file] ...
    Default:IndexIgnore "."
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    The IndexIgnore directive adds to the list of files to hide when listing a directory. File is a shell-style wildcard expression or full filename. Multiple IndexIgnore directives add to the list, rather than replacing the list of ignored files. By default, the list contains . (the current directory).

    IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t

    Regular Expressions

    This directive does not currently work in configuration sections that have regular expression arguments, such as <DirectoryMatch>

    top

    IndexIgnoreReset Directive

    Description:Empties the list of files to hide when listing a directory
    Syntax:IndexIgnoreReset ON|OFF
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex
    Compatibility:2.3.10 and later

    The IndexIgnoreReset directive removes any files ignored by IndexIgnore otherwise inherited from other configuration sections.

    <Directory "/var/www">
        IndexIgnore *.bak .??* *~ *# HEADER* README* RCS CVS *,v *,t
    </Directory>
    <Directory "/var/www/backups">
        IndexIgnoreReset ON
        IndexIgnore .??* *# HEADER* README* RCS CVS *,v *,t
    </Directory>

    Review the default configuration for a list of patterns that you might want to explicitly ignore after using this directive.

    top

    IndexOptions Directive

    Description:Various configuration settings for directory indexing
    Syntax:IndexOptions [+|-]option [[+|-]option] ...
    Default:By default, no options are enabled.
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    The IndexOptions directive specifies the behavior of the directory indexing. Option can be one of

    AddAltClass
    Adds an additional CSS class declaration to each row of the directory listing table when IndexOptions HTMLTable is in effect and an IndexStyleSheet is defined. Rather than the standard even and odd classes that would otherwise be applied to each row of the table, a class of even-ALT or odd-ALT where ALT is either the standard alt text associated with the file style (eg. snd, txt, img, etc) or the alt text defined by one of the various AddAlt* directives.
    Charset=character-set (Apache HTTP Server 2.0.61 and later)
    The Charset keyword allows you to specify the character set of the generated page. The default is UTF-8 on Windows and Mac OS X, and ISO-8859-1 elsewhere. (It depends on whether the underlying file system uses Unicode filenames or not.)
    IndexOptions Charset=UTF-8
    DescriptionWidth=[n | *]
    The DescriptionWidth keyword allows you to specify the width of the description column in characters.
    -DescriptionWidth (or unset) allows mod_autoindex to calculate the best width.
    DescriptionWidth=n fixes the column width to n bytes wide.
    DescriptionWidth=* grows the column to the width necessary to accommodate the longest description string. See the section on AddDescription for dangers inherent in truncating descriptions.
    FancyIndexing
    This turns on fancy indexing of directories.
    FoldersFirst
    If this option is enabled, subdirectory listings will always appear first, followed by normal files in the directory. The listing is basically broken into two components, the files and the subdirectories, and each is sorted separately and then displayed subdirectories-first. For instance, if the sort order is descending by name, and FoldersFirst is enabled, subdirectory Zed will be listed before subdirectory Beta, which will be listed before normal files Gamma and Alpha. This option only has an effect if FancyIndexing is also enabled.
    HTMLTable
    This option with FancyIndexing constructs a simple table for the fancy directory listing. It is necessary for utf-8 enabled platforms or if file names or description text will alternate between left-to-right and right-to-left reading order.
    IconsAreLinks
    This makes the icons part of the anchor for the filename, for fancy indexing.
    IconHeight[=pixels]
    Presence of this option, when used with IconWidth, will cause the server to include height and width attributes in the img tag for the file icon. This allows browser to precalculate the page layout without having to wait until all the images have been loaded. If no value is given for the option, it defaults to the standard height of the icons supplied with the Apache httpd software. This option only has an effect if FancyIndexing is also enabled.
    IconWidth[=pixels]
    Presence of this option, when used with IconHeight, will cause the server to include height and width attributes in the img tag for the file icon. This allows browser to precalculate the page layout without having to wait until all the images have been loaded. If no value is given for the option, it defaults to the standard width of the icons supplied with the Apache httpd software.
    IgnoreCase
    If this option is enabled, names are sorted in a case-insensitive manner. For instance, if the sort order is ascending by name, and IgnoreCase is enabled, file Zeta will be listed after file alfa (Note: file GAMMA will always be listed before file gamma).
    IgnoreClient
    This option causes mod_autoindex to ignore all query variables from the client, including sort order (implies SuppressColumnSorting.)
    NameWidth=[n | *]
    The NameWidth keyword allows you to specify the width of the filename column in bytes.
    -NameWidth (or unset) allows mod_autoindex to calculate the best width, but only up to 20 bytes wide.
    NameWidth=n fixes the column width to n bytes wide.
    NameWidth=* grows the column to the necessary width.
    ScanHTMLTitles
    This enables the extraction of the title from HTML documents for fancy indexing. If the file does not have a description given by AddDescription then httpd will read the document for the value of the title element. This is CPU and disk intensive.
    ShowForbidden
    If specified, Apache httpd will show files normally hidden because the subrequest returned HTTP_UNAUTHORIZED or HTTP_FORBIDDEN
    SuppressColumnSorting
    If specified, Apache httpd will not make the column headings in a FancyIndexed directory listing into links for sorting. The default behavior is for them to be links; selecting the column heading will sort the directory listing by the values in that column. However, query string arguments which are appended to the URL will still be honored. That behavior is controlled by IndexOptions IgnoreClient.
    SuppressDescription
    This will suppress the file description in fancy indexing listings. By default, no file descriptions are defined, and so the use of this option will regain 23 characters of screen space to use for something else. See AddDescription for information about setting the file description. See also the DescriptionWidth index option to limit the size of the description column. This option only has an effect if FancyIndexing is also enabled.
    SuppressHTMLPreamble
    If the directory actually contains a file specified by the HeaderName directive, the module usually includes the contents of the file after a standard HTML preamble (<html>, <head>, et cetera). The SuppressHTMLPreamble option disables this behaviour, causing the module to start the display with the header file contents. The header file must contain appropriate HTML instructions in this case. If there is no header file, the preamble is generated as usual. If you also specify a ReadmeName, and if that file exists, The closing </body></html> tags are also ommitted from the output, under the assumption that you'll likely put those closing tags in that file.
    SuppressIcon
    This will suppress the icon in fancy indexing listings. Combining both SuppressIcon and SuppressRules yields proper HTML 3.2 output, which by the final specification prohibits img and hr elements from the pre block (used to format FancyIndexed listings.)
    SuppressLastModified
    This will suppress the display of the last modification date, in fancy indexing listings. This option only has an effect if FancyIndexing is also enabled.
    SuppressRules
    This will suppress the horizontal rule lines (hr elements) in directory listings. Combining both SuppressIcon and SuppressRules yields proper HTML 3.2 output, which by the final specification prohibits img and hr elements from the pre block (used to format FancyIndexed listings.) This option only has an effect if FancyIndexing is also enabled.
    SuppressSize
    This will suppress the file size in fancy indexing listings. This option only has an effect if FancyIndexing is also enabled.
    TrackModified
    This returns the Last-Modified and ETag values for the listed directory in the HTTP header. It is only valid if the operating system and file system return appropriate stat() results. Some Unix systems do so, as do OS2's JFS and Win32's NTFS volumes. OS2 and Win32 FAT volumes, for example, do not. Once this feature is enabled, the client or proxy can track changes to the list of files when they perform a HEAD request. Note some operating systems correctly track new and removed files, but do not track changes for sizes or dates of the files within the directory. Changes to the size or date stamp of an existing file will not update the Last-Modified header on all Unix platforms. If this is a concern, leave this option disabled.
    Type=MIME content-type (Apache HTTP Server 2.0.61 and later)
    The Type keyword allows you to specify the MIME content-type of the generated page. The default is text/html.
    IndexOptions Type=text/plain
    UseOldDateFormat (Apache HTTP Server 2.4.26 and later)
    The date format used for the Last Modified field was inadvertently changed to "%Y-%m-%d %H:%M" from "%d-%b-%Y %H:%M" in 2.4.0. Setting this option restores the date format from 2.2 and earlier.
    VersionSort (Apache HTTP Server 2.0a3 and later)
    The VersionSort keyword causes files containing version numbers to sort in a natural way. Strings are sorted as usual, except that substrings of digits in the name and description are compared according to their numeric value.

    Example:

    foo-1.7
    foo-1.7.2
    foo-1.7.12
    foo-1.8.2
    foo-1.8.2a
    foo-1.12

    If the number starts with a zero, then it is considered to be a fraction:

    foo-1.001
    foo-1.002
    foo-1.030
    foo-1.04

    XHTML (Apache HTTP Server 2.0.49 and later)
    The XHTML keyword forces mod_autoindex to emit XHTML 1.0 code instead of HTML 3.2. This option only has an effect if FancyIndexing is also enabled.
    Incremental IndexOptions

    Be aware of how multiple IndexOptions are handled.

    • Multiple IndexOptions directives for a single directory are now merged together. The result of:
      <Directory "/foo">
          IndexOptions HTMLTable
          IndexOptions SuppressColumnsorting
      </Directory>

      will be the equivalent of

      IndexOptions HTMLTable SuppressColumnsorting
    • The addition of the incremental syntax (i.e., prefixing keywords with + or -).

    Whenever a '+' or '-' prefixed keyword is encountered, it is applied to the current IndexOptions settings (which may have been inherited from an upper-level directory). However, whenever an unprefixed keyword is processed, it clears all inherited options and any incremental settings encountered so far. Consider the following example:

    IndexOptions +ScanHTMLTitles -IconsAreLinks FancyIndexing
    IndexOptions +SuppressSize

    The net effect is equivalent to IndexOptions FancyIndexing +SuppressSize, because the unprefixed FancyIndexing discarded the incremental keywords before it, but allowed them to start accumulating again afterward.

    To unconditionally set the IndexOptions for a particular directory, clearing the inherited settings, specify keywords without any + or - prefixes.

    top

    IndexOrderDefault Directive

    Description:Sets the default ordering of the directory index
    Syntax:IndexOrderDefault Ascending|Descending Name|Date|Size|Description
    Default:IndexOrderDefault Ascending Name
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    The IndexOrderDefault directive is used in combination with the FancyIndexing index option. By default, fancyindexed directory listings are displayed in ascending order by filename; the IndexOrderDefault allows you to change this initial display order.

    IndexOrderDefault takes two arguments. The first must be either Ascending or Descending, indicating the direction of the sort. The second argument must be one of the keywords Name, Date, Size, or Description, and identifies the primary key. The secondary key is always the ascending filename.

    You can, if desired, prevent the client from reordering the list by also adding the SuppressColumnSorting index option to remove the sort link from the top of the column, along with the IgnoreClient index option to prevent them from manually adding sort options to the query string in order to override your ordering preferences.

    top

    IndexStyleSheet Directive

    Description:Adds a CSS stylesheet to the directory index
    Syntax:IndexStyleSheet url-path
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    The IndexStyleSheet directive sets the name of the file that will be used as the CSS for the index listing.

    IndexStyleSheet "/css/style.css"

    Using this directive in conjunction with IndexOptions HTMLTable adds a number of CSS classes to the resulting HTML. The entire table is given a CSS id of indexlist and the following classes are associated with the various parts of the listing:

    ClassDefinition
    tr.indexheadHeader row of listing
    th.indexcolicon and td.indexcolicon Icon column
    th.indexcolname and td.indexcolname File name column
    th.indexcollastmod and td.indexcollastmod Last modified column
    th.indexcolsize and td.indexcolsize File size column
    th.indexcoldesc and td.indexcoldesc Description column
    tr.breakrow Horizontal rule at the bottom of the table
    tr.odd and tr.even Alternating even and odd rows
    top

    ReadmeName Directive

    Description:Name of the file that will be inserted at the end of the index listing
    Syntax:ReadmeName filename
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_autoindex

    The ReadmeName directive sets the name of the file that will be appended to the end of the index listing. Filename is the name of the file to include, and is taken to be relative to the location being indexed. If Filename begins with a slash, as in example 2, it will be taken to be relative to the DocumentRoot.

    # Example 1
    ReadmeName FOOTER.html
    # Example 2
    ReadmeName /include/FOOTER.html

    See also HeaderName, where this behavior is described in greater detail.

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_lbmethod_byrequests.html.en0000644000000000000500000003106713412755316022450 0ustar rootsrc mod_lbmethod_byrequests - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_lbmethod_byrequests

    Available Languages:  en  |  fr 

    Description:Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    Status:Extension
    Module Identifier:lbmethod_byrequests_module
    Source File:mod_lbmethod_byrequests.c
    Compatibility:Split off from mod_proxy_balancer in 2.3

    Summary

    This module does not provide any configuration directives of its own. It requires the services of mod_proxy_balancer, and provides the byrequests load balancing method.

    Support Apache!

    Topics

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    top

    Request Counting Algorithm

    Enabled via lbmethod=byrequests, the idea behind this scheduler is that we distribute the requests among the various workers to ensure that each gets their configured share of the number of requests. It works as follows:

    lbfactor is how much we expect this worker to work, or the workers' work quota. This is a normalized value representing their "share" of the amount of work to be done.

    lbstatus is how urgent this worker has to work to fulfill its quota of work.

    The worker is a member of the load balancer, usually a remote host serving one of the supported protocols.

    We distribute each worker's work quota to the worker, and then look which of them needs to work most urgently (biggest lbstatus). This worker is then selected for work, and its lbstatus reduced by the total work quota we distributed to all workers. Thus the sum of all lbstatus does not change(*) and we distribute the requests as desired.

    If some workers are disabled, the others will still be scheduled correctly.

    for each worker in workers
        worker lbstatus += worker lbfactor
        total factor    += worker lbfactor
        if worker lbstatus > candidate lbstatus
            candidate = worker
    
    candidate lbstatus -= total factor

    If a balancer is configured as follows:

    worker a b c d
    lbfactor 25 25 25 25
    lbstatus 0 0 0 0

    And b gets disabled, the following schedule is produced:

    worker a b c d
    lbstatus -50 0 25 25
    lbstatus -25 0 -25 50
    lbstatus 0 0 0 0
    (repeat)

    That is it schedules: a c d a c d a c d ... Please note that:

    worker a b c d
    lbfactor 25 25 25 25

    Has the exact same behavior as:

    worker a b c d
    lbfactor 1 1 1 1

    This is because all values of lbfactor are normalized with respect to the others. For:

    worker a b c
    lbfactor 1 4 1

    worker b will, on average, get 4 times the requests that a and c will.

    The following asymmetric configuration works as one would expect:

    worker a b
    lbfactor 70 30
     
    lbstatus -30 30
    lbstatus 40 -40
    lbstatus 10 -10
    lbstatus -20 20
    lbstatus -50 50
    lbstatus 20 -20
    lbstatus -10 10
    lbstatus -40 40
    lbstatus 30 -30
    lbstatus 0 0
    (repeat)

    That is after 10 schedules, the schedule repeats and 7 a are selected with 3 b interspersed.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/directive-dict.html.fr.utf80000644000000000000500000004617213412755316021321 0ustar rootsrc Termes utilisés pour la description des directives - Serveur HTTP Apache Version 2.4
    <-

    Termes utilisés pour la description des directives

    Langues Disponibles:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    Ce document décrit les termes utilisés pour décrire chaque directive de configuration d'Apache.

    top

    Description

    Une brève description des fonctions de cette directive.

    top

    Syntaxe

    Ce terme introduit le format sous lequel la directive doit apparaître dans le fichier de configuration. Cette syntaxe est très spécifique à la directive et est décrite en détail dans la définition de cette dernière. En général, le nom de la directive est suivi d'un ou plusieurs arguments séparés par des espaces. Si un argument contient un espace, il doit être entouré de guillemets. Les arguments optionnels sont entourés de crochets. Lorsqu'un argument accepte une valeur parmi une liste de valeurs possibles, cette liste est spécifiée en séparant les valeurs par une barre verticale "|". Les textes littéraux sont présentés dans la fonte par défaut, alors que les types d'argument pour lesquels une substitution est nécessaire sont en gras. La syntaxe des directives acceptant un nombre variable d'arguments se termine par "...", ce qui indique que le dernier argument peut être répété.

    Les directives utilisent un grand nombre de types d'arguments différents. Les plus courants sont définis ci-dessous.

    URL
    Un Localisateur de Ressource Uniforme (Uniform Resource Locator) complet comportant un protocole, un nom d'hôte et un nom de chemin optionnel comme dans http://www.example.com/chemin/vers/fichier.html
    chemin-URL
    La partie de l'url qui suit le protocole et le nom d'hôte comme dans /chemin/vers/fichier.html. Le chemin-URL représente la ressource vue du web, et est différente de la représentation de cette même ressource vue du système de fichiers.
    chemin-fichier
    Le chemin d'un fichier dans le système de fichiers local commençant par le répertoire racine comme dans /usr/local/apache/htdocs/chemin/vers/fichier.html. Sauf mention contraire, un chemin-fichier qui ne commence pas par un slash sera considéré comme relatif au répertoire défini par la directive ServerRoot.
    chemin-répertoire
    Le chemin d'un répertoire dans le système de fichiers local commençant par le répertoire racine comme dans /usr/local/apache/htdocs/chemin/vers/.
    nom-fichier
    Le nom d'un fichier sans son chemin comme dans fichier.html.
    regex
    Une expression rationnelle compatible Perl. La définition de la directive spécifiera à quoi regex sera comparée.
    extension
    En général, c'est la partie du nom de fichier qui suit le dernier point. Cependant, Apache reconnaît plusieurs extensions de noms de fichiers ; ainsi, si un nom de fichier contient plusieurs points, chacune des parties du nom de fichier séparées par des points et situées après le premier point est une extension. Par exemple, le nom de fichier fichier.html.en comporte deux extensions : .html et .en. Pour les directives Apache, vous pouvez spécifier les extensions avec ou sans le point initial. Enfin, les extensions ne sont pas sensibles à la casse.
    MIME-type
    Une méthode de description du format d'un fichier consistant en un type de format majeur et un type de format mineur séparés par un slash comme dans text/html.
    env-variable
    Le nom d'une variable d'environnement définie au cours du processus de configuration d'Apache. Notez qu'elle peut être différente d'une variable d'environnement du système d'exploitation. Voir la documentation sur les variables d'environnement pour plus de détails.
    top

    Défaut

    Si la directive possède une valeur par défaut (en d'autres termes, si le serveur Web Apache se comporte comme si vous l'aviez définie à une valeur particulière, alors que vous l'avez omise dans votre configuration), elle est spécifiée ici. Si la directive ne possède pas de valeur par défaut, cette section doit spécifier "Aucune". Notez que la valeur par défaut dont il est question n'est pas nécessairement la même que la valeur attribuée à la directive dans le fichier httpd.conf par défaut distribué avec le serveur.

    top

    Contexte

    Indique les parties des fichiers de configuration du serveur où cette directive est valide. Il s'agit d'une liste d'une ou plusieurs des valeurs suivantes séparées par des virgules :

    configuration du serveur
    Signifie que la directive peut être utilisée dans les fichiers de configuration du serveur (par exemple httpd.conf), mais pas à l'intérieur d'un conteneur <VirtualHost> ou <Directory>. De même, elle n'est pas valide dans les fichiers .htaccess.
    serveur virtuel
    Signifie que la directive peut apparaître à l'intérieur d'un conteneur <VirtualHost> dans les fichiers de configuration du serveur.
    répertoire
    Une directive spécifiée comme valide dans ce contexte peut être utilisée à l'intérieur de conteneurs <Directory>, <Location>, <Files>, <If>, et <Proxy> dans les fichiers de configuration du serveur, en tenant compte des restrictions précisées dans la documentation sur les Sections de configuration.
    .htaccess
    Si une directive est valide dans ce contexte, cela signifie qu'elle peut apparaître à l'intérieur de fichiers de configuration de niveau répertoire .htaccess. Elle sera ou ne sera pas traitée, selon la définition de l'option overrides pour le contexte courant.

    La directive n'est autorisée que dans le contexte désigné ; si vous essayez de l'utiliser ailleurs, vous générerez une erreur de configuration qui va soit empêcher le serveur de traiter les requêtes correctement dans ce contexte, soit tout simplement empêcher le serveur de fonctionner -- en d'autres termes, le serveur refusera de démarrer.

    Les lieux de définition valides pour une directive résultent en fait d'un OU logique de tous les contextes spécifiés. En d'autres termes, une directive spécifiée comme valide dans "configuration du serveur, .htaccess" peut être utilisée dans le fichier httpd.conf et dans les fichiers .htaccess, mais pas dans un conteneur <Directory> ou <VirtualHost>.

    top

    Surcharge/Écrasement

    Ce terme indique quelle autorisation de surcharge ("override") doit être active pour que la directive puisse être traitée lorsqu'elle apparaît dans un fichier .htaccess. Si le context de la directive ne lui permet pas d'apparaître dans un fichier .htaccess, aucun contexte ne sera spécifié.

    Les autorisations de surcharge sont activées via la directive AllowOverride, et possèdent une portée particulière, comme un répertoire et tous ses sous-répertoires, sauf si une autre directive AllowOverride apparaît à un niveau inférieur. La documentation pour cette directive spécifie aussi les noms d'autorisations de surcharge disponibles.

    top

    Statut

    Cet attribut indique le degré de rapprochement de la directive du coeur d'Apache ; en d'autres termes, vous pouvez être amené à recompiler le serveur avec un jeu de modules supplémentaires pour pouvoir utiliser la directive, et ainsi accéder à ses fonctionnalités. Les valeurs possible pour cet attribut sont :

    Core
    Lorsqu'une directive a pour statut "Core", cela signifie qu'elle fait partie du coeur du serveur web Apache, et est de ce fait toujours disponible.
    MPM
    Une directive dont le statut est "MPM" est fournie par un module Multi-Processus. Ce type de directive sera disponible si et seulement si vous utilisez un des MPMs spécifiés dans la ligne Module de la définition de la directive.
    Base
    Une directive dont le statut est "Base" est fournie par un des modules Apache standards qui sont compilés dans le serveur par défaut, et sont de ce fait toujours disponibles, sauf si vous avez fait en sorte de les supprimer de votre configuration.
    Extension
    Une directive dont le statut est "Extension" est fournie par un des modules inclus dans le kit du serveur Apache, mais qui ne sont pas compilés dans le serveur par défaut. Pour activer la directive et accéder à ses fonctionnalités, vous devez modifier les fichiers de configuration de la compilation du serveur, et recompiler Apache.
    Expérimental
    Le statut "Expérimental" indique que la directive fait partie du kit Apache, mais que vous l'utilisez à vos risques et périls. La directive est documentée à titre d'exhaustivité, et n'est pas obligatoirement supportée. Le module qui fournit la directive peut être compilé par défaut dans le serveur ou non ; consultez le haut de la page qui décrit la directive et son module pour vérifier sa disponibilité.
    top

    Module

    Il s'agit d'une simple liste des noms des modules sources qui fournissent la directive.

    top

    Compatibilité

    Si la directive ne faisait pas partie de la distribution originale d'Apache version 2, la version dans laquelle elle a été introduite est indiquée ici. Cette section indique aussi si la directive n'est disponible que sur certaines plates-formes.

    Langues Disponibles:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_allowmethods.html.en0000644000000000000500000002014613412755316021062 0ustar rootsrc mod_allowmethods - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_allowmethods

    Available Languages:  en  |  fr 

    Description:Easily restrict what HTTP methods can be used on the server
    Status:Experimental
    Module Identifier:allowmethods_module
    Source File:mod_allowmethods.c
    Compatibility:Available in Apache 2.3 and later

    Summary

    This module makes it easy to restrict what HTTP methods can be used on a server. The most common configuration would be:

    <Location "/">
       AllowMethods GET POST OPTIONS
    </Location>
    top

    AllowMethods Directive

    Description:Restrict access to the listed HTTP methods
    Syntax:AllowMethods reset|HTTP-method [HTTP-method]...
    Default:AllowMethods reset
    Context:directory
    Status:Experimental
    Module:mod_allowmethods

    The HTTP-methods are case sensitive and are generally, as per RFC, given in upper case. The GET and HEAD methods are treated as equivalent. The reset keyword can be used to turn off mod_allowmethods in a deeper nested context:

    <Location "/svn">
       AllowMethods reset
    </Location>

    Caution

    The TRACE method cannot be denied by this module; use TraceEnable instead.

    mod_allowmethods was written to replace the rather kludgy implementation of Limit and LimitExcept.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_file_cache.html.en0000644000000000000500000003664413412755316020434 0ustar rootsrc mod_file_cache - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_file_cache

    Available Languages:  en  |  fr  |  ko 

    Description:Caches a static list of files in memory
    Status:Experimental
    Module Identifier:file_cache_module
    Source File:mod_file_cache.c

    Summary

    This module should be used with care. You can easily create a broken site using mod_file_cache, so read this document carefully.

    Caching frequently requested files that change very infrequently is a technique for reducing server load. mod_file_cache provides two techniques for caching frequently requested static files. Through configuration directives, you can direct mod_file_cache to either open then mmap() a file, or to pre-open a file and save the file's open file handle. Both techniques reduce server load when processing requests for these files by doing part of the work (specifically, the file I/O) for serving the file when the server is started rather than during each request.

    Notice: You cannot use this for speeding up CGI programs or other files which are served by special content handlers. It can only be used for regular files which are usually served by the Apache core content handler.

    This module is an extension of and borrows heavily from the mod_mmap_static module in Apache 1.3.

    top

    Using mod_file_cache

    mod_file_cache caches a list of statically configured files via MMapFile or CacheFile directives in the main server configuration.

    Not all platforms support both directives. You will receive an error message in the server error log if you attempt to use an unsupported directive. If given an unsupported directive, the server will start but the file will not be cached. On platforms that support both directives, you should experiment with both to see which works best for you.

    MMapFile Directive

    The MMapFile directive of mod_file_cache maps a list of statically configured files into memory through the system call mmap(). This system call is available on most modern Unix derivatives, but not on all. There are sometimes system-specific limits on the size and number of files that can be mmap()ed, experimentation is probably the easiest way to find out.

    This mmap()ing is done once at server start or restart, only. So whenever one of the mapped files changes on the filesystem you have to restart the server (see the Stopping and Restarting documentation). To reiterate that point: if the files are modified in place without restarting the server you may end up serving requests that are completely bogus. You should update files by unlinking the old copy and putting a new copy in place. Most tools such as rdist and mv do this. The reason why this modules doesn't take care of changes to the files is that this check would need an extra stat() every time which is a waste and against the intent of I/O reduction.

    CacheFile Directive

    The CacheFile directive of mod_file_cache opens an active handle or file descriptor to the file (or files) listed in the configuration directive and places these open file handles in the cache. When the file is requested, the server retrieves the handle from the cache and passes it to the sendfile() (or TransmitFile() on Windows), socket API.

    This file handle caching is done once at server start or restart, only. So whenever one of the cached files changes on the filesystem you have to restart the server (see the Stopping and Restarting documentation). To reiterate that point: if the files are modified in place without restarting the server you may end up serving requests that are completely bogus. You should update files by unlinking the old copy and putting a new copy in place. Most tools such as rdist and mv do this.

    Note

    Don't bother asking for a directive which recursively caches all the files in a directory. Try this instead... See the Include directive, and consider this command:

    find /www/htdocs -type f -print \
    | sed -e 's/.*/mmapfile &/' > /www/conf/mmap.conf

    top

    CacheFile Directive

    Description:Cache a list of file handles at startup time
    Syntax:CacheFile file-path [file-path] ...
    Context:server config
    Status:Experimental
    Module:mod_file_cache

    The CacheFile directive opens handles to one or more files (given as whitespace separated arguments) and places these handles into the cache at server startup time. Handles to cached files are automatically closed on a server shutdown. When the files have changed on the filesystem, the server should be restarted to re-cache them.

    Be careful with the file-path arguments: They have to literally match the filesystem path Apache's URL-to-filename translation handlers create. We cannot compare inodes or other stuff to match paths through symbolic links etc. because that again would cost extra stat() system calls which is not acceptable. This module may or may not work with filenames rewritten by mod_alias or mod_rewrite.

    Example

    CacheFile /usr/local/apache/htdocs/index.html
    top

    MMapFile Directive

    Description:Map a list of files into memory at startup time
    Syntax:MMapFile file-path [file-path] ...
    Context:server config
    Status:Experimental
    Module:mod_file_cache

    The MMapFile directive maps one or more files (given as whitespace separated arguments) into memory at server startup time. They are automatically unmapped on a server shutdown. When the files have changed on the filesystem at least a HUP or USR1 signal should be send to the server to re-mmap() them.

    Be careful with the file-path arguments: They have to literally match the filesystem path Apache's URL-to-filename translation handlers create. We cannot compare inodes or other stuff to match paths through symbolic links etc. because that again would cost extra stat() system calls which is not acceptable. This module may or may not work with filenames rewritten by mod_alias or mod_rewrite.

    Example

    MMapFile /usr/local/apache/htdocs/index.html

    Available Languages:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_slotmem_plain.html.fr.utf80000644000000000000500000002071713412755316022121 0ustar rootsrc mod_slotmem_plain - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_slotmem_plain

    Langues Disponibles:  en  |  fr 

    Description:Fournisseur de mémoire partagée à base de slots.
    Statut:Extension
    Identificateur de Module:slotmem_plain_module
    Fichier Source:mod_slotmem_plain.c

    Sommaire

    mod_slotmem_plain est un fournisseur de mémoire qui permet la création et l'utilisation d'un segment de mémoire contigu dans lequel les ensembles de données sont organisés en "slots".

    Si la mémoire doit être partagée entre des threads et des processus, il est préférable d'utiliser le fournisseur mod_slotmem_shm.

    mod_slotmem_plain fournit une API comprenant les fonctions suivantes :

    /* appelle le callback sur tous les slots actifs */
    apr_status_t doall(ap_slotmem_instance_t *s, ap_slotmem_callback_fn_t *func, void *data, apr_pool_t *pool)      
    
    /* crée un nouveau slot de mémoire dont chaque item aura une taille de item_size. */
    apr_status_t create(ap_slotmem_instance_t **new, const char *name, apr_size_t item_size, unsigned int item_num, ap_slotmem_type_t type, apr_pool_t *pool)      
    
    /* rattache à un slot de mémoire existant. */
    apr_status_t attach(ap_slotmem_instance_t **new, const char *name, apr_size_t *item_size, unsigned int *item_num, apr_pool_t *pool)      
    
    /* indique la mémoire associée à ce slot actif. */
    apr_status_t dptr(ap_slotmem_instance_t *s, unsigned int item_id, void **mem)      
    
    /* lit la mémoire depuis ce slot et la transfert vers dest */
    apr_status_t get(ap_slotmem_instance_t *s, unsigned int item_id, unsigned char *dest, apr_size_t dest_len)      
    
    /* écrit dans ce slot la mémoire en provenance de src */
    apr_status_t put(ap_slotmem_instance_t *slot, unsigned int item_id, unsigned char *src, apr_size_t src_len)      
    
    /* renvoie le nombre total de slots contenus dans ce segment */
    unsigned int num_slots(ap_slotmem_instance_t *s)      
    
    /* renvoie la taille totale des données, en octets, contenues dans un slot de ce segment */
    apr_size_t slot_size(ap_slotmem_instance_t *s)      
    
    /* alloue le premier slot libre et le marque comme utilisé (n'effectue aucune copie de données) */
    apr_status_t grab(ap_slotmem_instance_t *s, unsigned int *item_id)      
    
    /* appropriation ou allocation forcée du slot spécifié et marquage comme utilisé (n'effectue aucune copie de données) */
    apr_status_t fgrab(ap_slotmem_instance_t *s, unsigned int item_id)      
            
    /* libère un slot et le marque comme non utilisé (n'effectue aucune copie de données) */
    apr_status_t release(ap_slotmem_instance_t *s, unsigned int item_id)
    Support Apache!

    Directives

    Ce module ne fournit aucune directive.

    Traitement des bugs

    Voir aussi

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cern_meta.html.fr.utf80000644000000000000500000002710113412755316021205 0ustar rootsrc mod_cern_meta - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_cern_meta

    Langues Disponibles:  en  |  fr  |  ko 

    Description:La sémantique des métafichiers du serveur httpd du CERN
    Statut:Extension
    Identificateur de Module:cern_meta_module
    Fichier Source:mod_cern_meta.c

    Sommaire

    Il s'agit d'une émulation de la sémantique des métafichiers du serveur httpd du CERN. Les métafichiers consistent en en-têtes HTTP qui peuvent s'ajouter au jeu d'en-têtes habituels pour chaque fichier accédé. Ils ressemblent beaucoup aux fichiers .asis d'Apache, et permettent d'influencer de manière rudimentaire l'en-tête Expires:, ainsi que d'autres curiosités. Il existe de nombreuses méthodes pour gérer les métainformations, mais le choix s'est porté sur celle-ci car il existe déjà un grand nombre d'utilisateurs du CERN qui peuvent exploiter ce module.

    Pour plus d'information, voir le document sur la sémantique des métafichiers du CERN.

    top

    Directive MetaDir

    Description:Le nom du répertoire où trouver les fichiers de métainformations dans le style du CERN
    Syntaxe:MetaDir répertoire
    Défaut:MetaDir .web
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Extension
    Module:mod_cern_meta

    Spécifie le nom du répertoire dans lequel Apache pourra trouver les fichiers de métainformations. Ce répertoire est en général un sous-répertoire 'caché' du répertoire qui contient le fichier à accéder. Définissez cette directive à "." pour rechercher les métafichiers dans le même répertoire que le fichier à accéder :

    MetaDir .

    Ou, pour rechercher dans un sous-répertoire du répertoire contenant le fichier à accéder :

    MetaDir .meta
    top

    Directive MetaFiles

    Description:Active le traitement des métafichiers du CERN
    Syntaxe:MetaFiles on|off
    Défaut:MetaFiles off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Extension
    Module:mod_cern_meta

    Active ou désactive le traitement des métafichiers pour certains répertoires.

    top

    Directive MetaSuffix

    Description:Suffixe du fichier contenant les métainformations dans le style du CERN
    Syntaxe:MetaSuffix suffixe
    Défaut:MetaSuffix .meta
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Extension
    Module:mod_cern_meta

    Spécifie le suffixe du fichier contenant les métainformations. Par exemple, si on conserve les valeurs par défaut des deux directives précédentes, une requête pour DOCUMENT_ROOT/un-rep/index.html provoquera la recherche du métafichier DOCUMENT_ROOT/un-rep/.web/index.html.meta, et utilisera son contenu pour générer les informations quant aux en-têtes MIME additionnels.

    Exemple :

    MetaSuffix .meta

    Langues Disponibles:  en  |  fr  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_deflate.html0000644000000000000500000000062313362070302017346 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_deflate.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_deflate.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_deflate.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_deflate.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_headers.html.ja.utf80000644000000000000500000006202013412755316020645 0ustar rootsrc mod_headers - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_headers

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:HTTP リクエストã®ãƒ˜ãƒƒãƒ€ã¨å¿œç­”ã®ãƒ˜ãƒƒãƒ€ã®ã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚º
    ステータス:Extension
    モジュール識別å­:headers_module
    ソースファイル:mod_headers.c
    äº’æ›æ€§:RequestHeader 㯠Apache 2.0 以é™ã®ã¿ã§ä½¿ç”¨å¯èƒ½

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ HTTP ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ã¨å¿œç­”ヘッダを制御ã—〠変更ã™ã‚‹ãŸã‚ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’æä¾›ã—ã¾ã™ã€‚ヘッダを追加ã—ãŸã‚Šã€ ç½®ãæ›ãˆãŸã‚Šã€å‰Šé™¤ã—ãŸã‚Šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    top

    処ç†ã®é †ç•ª

    mod_headers ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚µãƒ¼ãƒè¨­å®šã®ã»ã¼ã©ã“ã«ã§ã‚‚ 書ãã“ã¨ãŒã§ãã€å½±éŸ¿ã™ã‚‹ç¯„囲を設定用セクションã§å›²ã‚€ã“ã¨ã§é™å®šã™ã‚‹ ã“ã¨ãŒã§ãã¾ã™ã€‚

    処ç†ã®é †ç•ªã¯é‡è¦ã§ã€è¨­å®šãƒ•ァイル中ã®é †ç•ªã¨ã€è¨­å®šç”¨ã‚»ã‚¯ã‚·ãƒ§ãƒ³å†…ã®ä½ç½®ã¨ã®ä¸¡æ–¹ã« 影響ã•れã¾ã™ã€‚以下ã®äºŒã¤ã®ãƒ˜ãƒƒãƒ€ã¯é †ç•ªãŒé€†ã«ãªã‚‹ã¨ é•ã†çµæžœã«ãªã‚Šã¾ã™:

    RequestHeader append MirrorID "mirror 12"
    RequestHeader unset MirrorID

    ã“ã®é †ç•ªã®å ´åˆã¯ã€MirrorID ヘッダã¯è¨­å®šã•れã¾ã›ã‚“。 逆ã«ãªã£ã¦ã„ã‚‹ã¨ã€MirrorID ヘッダ㯠"mirror 12" ã«è¨­å®šã•れã¾ã™ã€‚

    top

    早期処ç†ã€å¾ŒæœŸå‡¦ç†

    mod_headers ã§ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æ—©æœŸã‹å¾ŒæœŸã‹ã® ã©ã¡ã‚‰ã§é©ç”¨ã™ã‚‹ã‹ã‚’é¸ã¹ã¾ã™ã€‚通常ã¯å¾ŒæœŸãƒ¢ãƒ¼ãƒ‰ã§ã€ コンテンツ生æˆãŒå®Ÿè¡Œã•れる直å‰ã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ãŒã‚»ãƒƒãƒˆã•れ〠レスãƒãƒ³ã‚¹ã¨ã—ã¦é€å‡ºã•れる直å‰ã«ãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ãŒã‚»ãƒƒãƒˆã•れã¾ã™ã€‚ é‹ç”¨ä¸­ã®ã‚µãƒ¼ãƒã§ã¯å¿…ãšå¾ŒæœŸãƒ¢ãƒ¼ãƒ‰ã‚’使ã£ã¦ãã ã•ã„。

    早期モードã¯é–‹ç™ºè€…å‘ã‘ã®ãƒ†ã‚¹ãƒˆ/デãƒãƒƒã‚°ç”¨ã«è¨­è¨ˆã•れã¦ã„ã¾ã™ã€‚ early キーワード指定ã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«ã‚ˆã£ã¦ã€ リクエスト処ç†ã®é–‹å§‹åœ°ç‚¹ã«ãªã‚Šã¾ã™ã€‚ ã¤ã¾ã‚Šã€ç•°ãªã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’試ã—ãŸã‚Šãƒ†ã‚¹ãƒˆã‚±ãƒ¼ã‚¹ã‚’セットアップã™ã‚‹ã®ã« 活用ã§ãる一方ã§ã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’生æˆã™ã‚‹å‰ã«ä»–ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ã‚ˆã£ã¦ ãƒ˜ãƒƒãƒ€ãŒæ›¸ãæ›ãˆã‚‰ã‚Œã¦ã—ã¾ã†ã‹ã‚‚ã—れãªã„ã¨ã„ã†ã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚

    early ディレクティブã§ã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ‘スã®è¨­å®šãŒè§£æ±ºã•れるå‰ã« 処ç†ã•れるã®ã§ã€ãƒ¡ã‚¤ãƒ³ã‚µãƒ¼ãƒã‹ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆã§ã®ã¿ã€ 早期ヘッダをセットã§ãã¾ã™ã€‚early ディレクティブã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ‘ス㫠ä¾å­˜ã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“ã®ã§ã€<Directory> ã‚„ <Location> ã¨ã„ã£ãŸã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆå†…ã§ã¯ä½¿ç”¨ ã§ãã¾ã›ã‚“。

    top

    例

    1. リクエストヘッダ中㮠"TS" ã§å§‹ã¾ã‚‹ãƒ•ィールドをã™ã¹ã¦å¿œç­”ヘッダ㫠コピーã—ã¾ã™:

      Header echo ^TS

    2. リクエストをå—ã‘付ã‘ãŸæ™‚刻ã¨ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’処ç†ã—ãŸæ™‚間を入れãŸãƒ˜ãƒƒãƒ€ã€ MyHeader を応答ã«è¿½åŠ ã—ã¾ã™ã€‚ã“ã®ãƒ˜ãƒƒãƒ€ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒ サーãƒã®è² è·ã‚’直観的ã«çŸ¥ã‚‹ãŸã‚ã‚„ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ-サーãƒé–“㮠ボトルãƒãƒƒã‚¯ã‚’調ã¹ã‚‹ãŸã‚ã«ä½¿ã†ã“ã¨ãŒã§ãã¾ã™ã€‚

      Header add MyHeader "%D %t"

      上記ã®è¨­å®šã§ã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ãªãƒ˜ãƒƒãƒ€ãŒå¿œç­”ã«è¿½åŠ ã•れるã“ã¨ã«ãªã‚Šã¾ã™:

      MyHeader: D=3775428 t=991424704447256

    3. Joe ã«ã‚ã„ã•ã¤ã‚’ã—ã¾ã™:

      Header add MyHeader "Hello Joe. It took %D microseconds for Apache to serve this request."

      以下ã®ã‚ˆã†ãªãƒ˜ãƒƒãƒ€ãŒå¿œç­”ã«è¿½åŠ ã•れるã“ã¨ã«ãªã‚Šã¾ã™

      MyHeader: Hello Joe. It took D=3775428 microseconds for Apache to serve this request.

    4. リクエスト㫠"MyRequestHeader" ãŒã‚ã‚‹ã¨ãã«é™ã‚Š MyHeader を応答㫠付ã‘ã¾ã™ã€‚ã“れã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®è¦æ±‚ã«å¿œãˆã¦ãƒ˜ãƒƒãƒ€ã‚’作æˆã™ã‚‹ã¨ãã« å½¹ã«ç«‹ã¡ã¾ã™ã€‚ã“ã®ä¾‹ã§ã¯ mod_setenvif モジュールãŒå¿…è¦ãªã“ã¨ã« 注æ„ã—ã¦ãã ã•ã„。

      SetEnvIf MyRequestHeader value HAVE_MyRequestHeader
      Header add MyHeader "%D %t mytext" env=HAVE_MyRequestHeader

      ã‚‚ã— HTTP リクエスト㫠MyRequestHeader: value ヘッダ㌠ã‚ã‚‹ã¨ã€å¿œç­”ã«ã¯ä»¥ä¸‹ã®ã‚ˆã†ãªãƒ˜ãƒƒãƒ€ãŒä»˜åŠ ã•れã¾ã™ã€‚

      MyHeader: D=3775428 t=991424704447256 mytext

    top

    Header ディレクティブ

    説明:HTTP 応答ヘッダã®è¨­å®š
    æ§‹æ–‡:Header [condition] set|append|add|unset|echo header [value] [early|env=[!]variable]
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Extension
    モジュール:mod_headers

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠HTTP 応答ヘッダを置æ›ã€è¿½åŠ ã€å‰Šé™¤ã§ãã¾ã™ã€‚ ヘッダã¯ã‚³ãƒ³ãƒ†ãƒ³ãƒˆãƒãƒ³ãƒ‰ãƒ©ã‚„出力フィルタãŒå®Ÿè¡Œã•れãŸç›´å¾Œã«å®Ÿè¡Œã•れ〠出ã¦è¡Œãヘッダを変更ã§ãるよã†ã«ãªã£ã¦ã„ã¾ã™ã€‚

    オプション㮠condition 㯠onsuccess ã‹ always ã®ã©ã¡ã‚‰ã‹ã‚’指定ã§ãã¾ã™ã€‚ã“れã¯å†…部ヘッダテーブルã®ã©ã‚Œã‚’ æ“作ã™ã‚‹ã‹ã‚’決定ã—ã¾ã™ã€‚onsuccess 㯠2xx ステータスコードã®ã€always ã¯å…¨ã¦ã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ (2xx ã‚’å«ã‚€) ã®æ„味ã«ãªã‚Šã¾ã™ã€‚ ã‚るモジュールã§ã‚»ãƒƒãƒˆã•れるヘッダをアンセットã—ãŸã„å ´åˆã¯ç‰¹ã«ã€ ã©ã®ãƒ†ãƒ¼ãƒ–ルãŒå½±éŸ¿ã‚’å—ã‘ã‚‹ã‹ã‚’実際ã«è©¦ã—ãŸã»ã†ãŒã‚ˆã„ã§ã—ょã†ã€‚

    行ãªã†å‡¦ç†ã¯äºŒç•ªç›®ã®ã®å¼•æ•°ã§æ±ºã¾ã‚Šã¾ã™ã€‚ ã“ã®å¼•æ•°ã«ã¯æ¬¡ã®å€¤ã‚’指定ã§ãã¾ã™:

    set
    応答ヘッダを設定ã—ã¾ã™ã€‚åŒã˜åå‰ã®ãƒ˜ãƒƒãƒ€ãŒå­˜åœ¨ã™ã‚‹å ´åˆã¯ãれを ç½®ãæ›ãˆã¾ã™ã€‚value ã«ã¯ãƒ•ォーマット文字列を 指定ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚
    append
    応答ヘッダを既ã«å­˜åœ¨ã™ã‚‹åŒã˜åå‰ã®ãƒ˜ãƒƒãƒ€ã«è¿½åŠ ã—ã¾ã™ã€‚ æ–°ã—ã„å€¤ãŒæ—¢å­˜ã®ãƒ˜ãƒƒãƒ€ã«è¿½åŠ ã•れるã¨ãã«ã¯ã€æ—¢å­˜ã®ãƒ˜ãƒƒãƒ€ã® 後ã«ã‚³ãƒ³ãƒžã§åŒºåˆ‡ã‚‰ã‚Œã¦è¿½åŠ ã•れã¾ã™ã€‚ã“れã¯ãƒ˜ãƒƒãƒ€ã«è¤‡æ•°ã®å€¤ã‚’ 指定ã™ã‚‹ã¨ãã® HTTP ã®æ¨™æº–ã®æ–¹æ³•ã§ã™ã€‚
    add
    ãƒ˜ãƒƒãƒ€ãŒæ—¢ã«å­˜åœ¨ã—ã¦ã„ã‚‹ã¨ãã§ã•ãˆã‚‚ã€å¿œç­”ヘッダを 既存ã®ãƒ˜ãƒƒãƒ€ã«è¿½åŠ ã—ã¾ã™ã€‚ã“れã«ã‚ˆã‚Šã€äºŒã¤ (ã‹ãれ以上) 㮠ヘッダã®åå‰ãŒåŒã˜ã«ãªã‚‹ã“ã¨ãŒã‚りã¾ã™ã€‚ãã®çµæžœã€æƒ³å®šã§ããªã„ ã“ã¨ãŒèµ·ã“ã‚‹å¯èƒ½æ€§ãŒã‚りã¾ã™ã®ã§ã€ä¸€èˆ¬çš„ã«ã¯ append ã®æ–¹ã‚’ ä½¿ã†æ–¹ãŒè‰¯ã„ã§ã—ょã†ã€‚
    unset
    ã‚‚ã—æŒ‡å®šã•れãŸåå‰ã®å¿œç­”ヘッダãŒå­˜åœ¨ã—ã¦ã„れã°ã€å‰Šé™¤ã•れã¾ã™ã€‚ åŒã˜åå‰ã®ãƒ˜ãƒƒãƒ€ãŒè¤‡æ•°ã‚ã‚‹ã¨ãã¯ã€ã™ã¹ã¦å‰Šé™¤ã•れã¾ã™ã€‚ value ã‚’ã¤ã‘ã¦ã¯ã„ã‘ã¾ã›ã‚“。
    echo
    指定ã•れãŸã‚‚ã®ã¨åŒã˜åå‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ã‚’応答ヘッダ㧠ãã®ã¾ã¾è¿”ã—ã¾ã™ã€‚header ã«ã¯æ­£è¦è¡¨ç¾ã‚‚指定ã§ãã¾ã™ã€‚ value ã‚’ã¤ã‘ã¦ã¯ã„ã‘ã¾ã›ã‚“。

    ã“ã®å¼•æ•°ã®å¾Œã«ã¯ãƒ˜ãƒƒãƒ€å (header) ãŒç¶šãã¾ã™ã€‚ ヘッダåã«ã¯æœ€å¾Œã«ã‚³ãƒ­ãƒ³ã‚’å«ã‚ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ãŒã€ç„¡ãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。 set, append, add, unset ã§ã¯å¤§æ–‡å­—å°æ–‡å­—㯠区別ã•れã¾ã›ã‚“。echo ã® header åã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—〠正è¦è¡¨ç¾ã‚’指定ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    add, append, set ã§ã¯ value を三ã¤ç›®ã® 引数ã¨ã—ã¦æŒ‡å®šã—ã¾ã™ã€‚value ã«ç©ºç™½ãŒã‚ã‚‹å ´åˆã¯äºŒé‡å¼•用符㧠囲む必è¦ãŒã‚りã¾ã™ã€‚value ã¯æ–‡å­—ã®ã¿ã‹ã‚‰ãªã‚‹æ–‡å­—列〠フォーマット指示å­ã‚’å«ã‚€æ–‡å­—列ã€ã‚‚ã—ãã¯ä¸¡æ–¹ã‹ã‚‰ãªã‚‹æ–‡å­—列を指定ã§ãã¾ã™ã€‚ value ã¯ä»¥ä¸‹ã®ãƒ•ォーマット指示å­ã‚’サãƒãƒ¼ãƒˆã—ã¾ã™:

    フォーマット解説
    %% パーセント記å·
    %t リクエストをå—ã‘å–ã£ãŸæ™‚刻を〠Universal Coordinated Time ã§ã®å§‹ã¾ã‚Šã®æ™‚刻 (Jan. 1, 1970) ã‹ã‚‰çµŒéŽã—㟠時間をマイクロ秒ã¨ã—ã¦ç¾ã—ãŸã‚‚ã®ã€‚å€¤ã®æœ€åˆã«ã¯ t= ãŒä»˜åŠ ã•れã¾ã™ã€‚
    %D リクエストをå—ã‘å–ã£ãŸæ™‚刻ã¨ã€ãƒ˜ãƒƒãƒ€ã‚’é€ã‚Šå‡ºã—㟠時間ã¨ã®å·®ã€‚ã“れã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒå­˜åœ¨ã—ã¦ã„ãŸæœŸé–“ã‚’ç¾ã—ã¾ã™ã€‚ å€¤ã®æœ€åˆã«ã¯ D= ãŒä»˜åŠ ã•れã¾ã™ã€‚
    %{FOOBAR}e 環境変数 FOOBAR ã®å€¤ã§ã™ã€‚
    %{FOOBAR}s mod_ssl ãŒæœ‰åйãªå ´åˆã€ SSL 環境変数 FOOBAR ã®å†…容

    注

    %s フォーマット指定å­ã¯ 2.1 以é™ã§ã®ã¿åˆ©ç”¨ã§ãã¾ã™ã€‚ SSLOptions +StdEnvVars を有効ã«ã™ã‚‹ã“ã¨ã«ã‚ˆã‚‹ã‚ªãƒ¼ãƒãƒ¼ãƒ˜ãƒƒãƒ‰ã‚’ é¿ã‘ã‚‹ãŸã‚ã€%e ã®ä»£ã‚りã¨ã—ã¦ä½¿ãˆã¾ã™ã€‚ ä»–ã®ç†ç”±ãªã©ãŒã‚ã£ã¦ã€ã©ã†ã—ã¦ã‚‚ SSLOptions +StdEnvVars を有効ã«ã—ãªã‘れã°ãªã‚‰ãªã„å ´åˆã¯ã€%e ã®ã»ã†ãŒ %s よりも処ç†åŠ¹çŽ‡ã¯è‰¯ã„ã§ã™ã€‚

    Header ディレクティブã«ã¯è¿½åŠ ã®å¼•æ•°ã‚’æŒãŸã›ã‚‹ã“ã¨ãŒ ã§ãã¦ã€ã©ã†ã„ã£ãŸã‚¢ã‚¯ã‚·ãƒ§ãƒ³ãŒè¡Œã‚れãŸã‹ã®æ¡ä»¶ã‚’指定ã—ãŸã‚Šã€ æ—©æœŸå‡¦ç† ã‚’æŒ‡å®šã™ã‚‹ early キーワードを 指定ã§ãã¾ã™ã€‚ env=... å¼•æ•°ã§æŒ‡å®šã•れ㟠環境変数 ãŒå­˜åœ¨ã™ã‚‹ (ã‚‚ã—ã㯠env=!... ãŒæŒ‡å®šã•れã¦ã„ã¦ç’°å¢ƒå¤‰æ•°ãŒå­˜åœ¨ã—ãªã„) å ´åˆã¯ã€Header ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã•れãŸå‹•作ãŒè¡Œãªã‚れã¾ã™ã€‚ãã†ã§ãªã„å ´åˆã¯ã€ ディレクティブã¯ãã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ã¯ä½•ã‚‚ã—ã¾ã›ã‚“。

    早期処ç†ãƒ¢ãƒ¼ãƒ‰ã®å ´åˆä»¥å¤–ã§ã¯ã€ Header ディレクティブã¯å¿œç­”ãŒãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«é€ã‚‰ã‚Œã‚‹ç›´å‰ã« 処ç†ã•れã¾ã™ã€‚ã“れã¯ã€ãƒ˜ãƒƒãƒ€ãƒ•ィルタã«ã‚ˆã‚Šè¿½åŠ ã•れるヘッダを 除ãã€ã»ã¨ã‚“ã©ã®ãƒ˜ãƒƒãƒ€ã‚’設定ã—ãŸã‚Šä¸Šæ›¸ãã—ãŸã‚Šã™ã‚‹ã“ã¨ãŒ å¯èƒ½ã€ã¨ã„ã†ã“ã¨ã§ã™ã€‚

    top

    RequestHeader ディレクティブ

    説明:HTTP リクエストヘッダã®è¨­å®š
    æ§‹æ–‡:RequestHeader set|append|add|unset header [value] [early|env=[!]variable]
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Extension
    モジュール:mod_headers

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠HTTP リクエストヘッダを置æ›ã€è¿½åŠ ã€å‰Šé™¤ã§ãã¾ã™ã€‚ ヘッダã¯ã‚³ãƒ³ãƒ†ãƒ³ãƒˆãƒãƒ³ãƒ‰ãƒ©ãŒå®Ÿè¡Œã•れる直å‰ã«å®Ÿè¡Œã•れ〠入ã£ã¦æ¥ã‚‹ãƒ˜ãƒƒãƒ€ã‚’変更ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã£ã¦ã„ã¾ã™ã€‚ 行ãªã†å‡¦ç†ã¯ç¬¬ 1 引数ã«ã‚ˆã‚Šæ±ºã¾ã‚Šã¾ã™ã€‚ã“れã«ã¯ä»¥ä¸‹ã®å€¤ã‚’指定 ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™:

    set
    リクエストヘッダを設定ã—ã¾ã™ã€‚åŒã˜åå‰ã®ãƒ˜ãƒƒãƒ€ãŒå­˜åœ¨ã—ã¦ã„ã‚‹ã¨ã€ ãã‚Œã‚’ç½®ãæ›ãˆã¾ã™ã€‚
    append
    リクエストヘッダã¯ã€æ—¢ã«å­˜åœ¨ã™ã‚‹åŒã˜åå‰ã®ãƒ˜ãƒƒãƒ€ã«è¿½åŠ ã•れã¾ã™ã€‚ æ–°ã—ã„å€¤ãŒæ—¢å­˜ã®ãƒ˜ãƒƒãƒ€ã«è¿½åŠ ã•れるã¨ãã«ã¯ã€æ—¢å­˜ã®ãƒ˜ãƒƒãƒ€ã® 後ã«ã‚³ãƒ³ãƒžã§åŒºåˆ‡ã‚‰ã‚Œã¦è¿½åŠ ã•れã¾ã™ã€‚ã“れã¯ãƒ˜ãƒƒãƒ€ã«è¤‡æ•°ã®å€¤ã‚’ 指定ã™ã‚‹ã¨ãã® HTTP ã®æ¨™æº–ã®æ–¹æ³•ã§ã™ã€‚
    add
    ãƒ˜ãƒƒãƒ€ãŒæ—¢ã«å­˜åœ¨ã—ã¦ã„ã‚‹ã¨ãã§ã•ãˆã‚‚ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ã‚’ 既存ã®ãƒ˜ãƒƒãƒ€ã«è¿½åŠ ã—ã¾ã™ã€‚ã“れã«ã‚ˆã‚Šã€äºŒã¤ (ã‹ãれ以上) 㮠ヘッダã®åå‰ãŒåŒã˜ã«ãªã‚‹ã“ã¨ãŒã‚りã¾ã™ã€‚ãã®çµæžœã€æƒ³å®šã§ããªã„ ã“ã¨ãŒèµ·ã“ã‚‹å¯èƒ½æ€§ãŒã‚りã¾ã™ã®ã§ã€ä¸€èˆ¬çš„ã«ã¯ append ã®æ–¹ã‚’ ä½¿ã†æ–¹ãŒè‰¯ã„ã§ã—ょã†ã€‚
    unset
    ã‚‚ã—æŒ‡å®šã•れãŸåå‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ãŒå­˜åœ¨ã—ã¦ã„れã°ã€å‰Šé™¤ã•れã¾ã™ã€‚ åŒã˜åå‰ã®è¤‡æ•°ã®ãƒ˜ãƒƒãƒ€ãŒã‚ã‚‹ã¨ãã¯ã€ã™ã¹ã¦å‰Šé™¤ã•れã¾ã™ã€‚ value ã‚’ã¤ã‘ã¦ã¯ã„ã‘ã¾ã›ã‚“。

    ã“ã®å¼•æ•°ã®å¾Œã«ã¯ãƒ˜ãƒƒãƒ€å (header) ãŒç¶šãã¾ã™ã€‚ ヘッダåã«ã¯æœ€å¾Œã«ã‚³ãƒ­ãƒ³ã‚’å«ã‚ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ãŒã€ç„¡ãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。 å¤§æ–‡å­—å°æ–‡å­—ã¯åŒºåˆ¥ã•れã¾ã›ã‚“。add, append, set ã®å ´åˆã¯ã€value ãŒä¸‰ã¤ç›®ã® 引数ã¨ã—ã¦æŒ‡å®šã•れã¾ã™ã€‚value ã«ç©ºç™½ãŒã‚ã‚‹å ´åˆã¯äºŒé‡å¼•用符㧠囲む必è¦ãŒã‚りã¾ã™ã€‚unset ã®å ´åˆã¯ã€value ã¯æŒ‡å®šã—ã¾ã›ã‚“。 value ã¯æ–‡å­—列ã€ãƒ•ォーマット指定å­ã€ã‚ã‚‹ã„ã¯ã€ãã®æ··åˆã§ã™ã€‚ 使ã†ã“ã¨ã®ã§ãるフォーマット指定å­ã¯ã€Header ã¨åŒã˜ã§ã™ã®ã§ã€ 詳細ã¯ãã¡ã‚‰ã‚’ã”覧ãã ã•ã„。

    RequestHeader ディレクティブã¯ã€ ã©ã†ã„ã£ãŸæ¡ä»¶ä¸‹ã§ã‚¢ã‚¯ã‚·ãƒ§ãƒ³ã‚’行ã†ã‹ã‚’指定ã™ã‚‹è¿½åŠ å¼•æ•° ã‚ã‚‹ã„ã¯ã€æ—©æœŸå‡¦ç† を指定ã™ã‚‹ early キーワードを設定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ env=... ã®å¼•æ•°ã§è¨­å®šã•れã¦ã„ã‚‹ 環境変数 ãŒå­˜åœ¨ã—ã¦ã„ã‚‹ (ã‚ã‚‹ã„㯠env=!... ã§æŒ‡å®šã•れãŸç’°å¢ƒå¤‰æ•°ãŒ 存在ã—ãªã„) å ´åˆã€RequestHeader ディレクティブ㯠有効ã«ãªã‚Šã¾ã™ã€‚ãれ以外ã®å ´åˆã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯åŠ¹åŠ›ã‚’æŒã¡ã¾ã›ã‚“。

    early モードã§ãªã„å ´åˆã«é™ã‚Šã€ RequestHeader ディレクティブ㯠fixup フェーズã§ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒãƒãƒ³ãƒ‰ãƒ©ã«æ‰±ã‚れる直å‰ã« 処ç†ã•れã¾ã™ã€‚ã“れã«ã‚ˆã‚Šã€ãƒ–ラウザや Apache ã®å…¥åŠ›ãƒ•ã‚£ãƒ«ã‚¿ã«ã‚ˆã‚Š ç”Ÿæˆã•れãŸãƒ˜ãƒƒãƒ€ã‚’上書ãã—ãŸã‚Šä¿®æ­£ã—ãŸã‚Šã§ãるよã†ã«ãªã£ã¦ã„ã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_sed.html0000644000000000000500000000032213362070302016511 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_sed.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_sed.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_proxy_express.html.en0000644000000000000500000003265013425471055021314 0ustar rootsrc mod_proxy_express - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy_express

    Available Languages:  en  |  fr 

    Description:Dynamic mass reverse proxy extension for mod_proxy
    Status:Extension
    Module Identifier:proxy_express_module
    Source File:mod_proxy_express.c
    Compatibility:Available in Apache 2.3.13 and later

    Summary

    This module creates dynamically configured mass reverse proxies, by mapping the Host: header of the HTTP request to a server name and backend URL stored in a DBM file. This allows for easy use of a huge number of reverse proxies with no configuration changes. It is much less feature-full than mod_proxy_balancer, which also provides dynamic growth, but is intended to handle much, much larger numbers of backends. It is ideally suited as a front-end HTTP switch and for micro-services architectures.

    This module requires the service of mod_proxy.

    Warning

    Do not enable proxying until you have secured your server. Open proxy servers are dangerous both to your network and to the Internet at large.

    Limitations

    • This module is not intended to replace the dynamic capability of mod_proxy_balancer. Instead, it is intended to be mostly a lightweight and fast alternative to using mod_rewrite with RewriteMap and the [P] flag for mapped reverse proxying.
    • It does not support regex or pattern matching at all.
    • It emulates:
      <VirtualHost *:80>
         ServerName front.end.server
         ProxyPass        "/" "back.end.server:port"
         ProxyPassReverse "/" "back.end.server:port"
      </VirtualHost>
      That is, the entire URL is appended to the mapped backend URL. This is in keeping with the intent of being a simple but fast reverse proxy switch.
    top

    ProxyExpressDBMFile Directive

    Description:Pathname to DBM file.
    Syntax:ProxyExpressDBMFile pathname
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy_express

    The ProxyExpressDBMFile directive points to the location of the Express map DBM file. This file serves to map the incoming server name, obtained from the Host: header, to a backend URL.

    Note

    The file is constructed from a plain text file format using the httxt2dbm utility.

    ProxyExpress map file

    ##
    ##express-map.txt:
    ##

    www1.example.com http://192.168.211.2:8080
    www2.example.com http://192.168.211.12:8088
    www3.example.com http://192.168.212.10

    Create DBM file

    httxt2dbm -i express-map.txt -o emap

    Configuration

    ProxyExpressEnable on
    ProxyExpressDBMFile emap
    top

    ProxyExpressDBMType Directive

    Description:DBM type of file.
    Syntax:ProxyExpressDBMType type
    Default:ProxyExpressDBMType default
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy_express

    The ProxyExpressDBMType directive controls the DBM type expected by the module. The default is the default DBM type created with httxt2dbm.

    Possible values are (not all may be available at run time):

    ValueDescription
    db Berkeley DB files
    gdbm GDBM files
    ndbm NDBM files
    sdbm SDBM files (always available)
    default default DBM type
    top

    ProxyExpressEnable Directive

    Description:Enable the module functionality.
    Syntax:ProxyExpressEnable on|off
    Default:ProxyExpressEnable off
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy_express

    The ProxyExpressEnable directive controls whether the module will be active.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_md.html.en0000644000000000000500000017650213520523022016753 0ustar rootsrc mod_md - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_md

    Available Languages:  en 

    Description:Managing domains across virtual hosts, certificate provisioning via the ACME protocol
    Status:Extension
    Module Identifier:md_module
    Source File:mod_md.c
    Compatibility:Available in version 2.4.30 and later

    Summary

    This module manages common properties of domains for one or more virtual hosts. Its main feature is the use of the ACME protocol (RFC 8555) to automate certificate provisioning. Certificates will be renewed by the module ahead of their expiration to account for disruption in internet services. There are ways to monitor the status of all Managed Domains and configurations that will run your own notification commands on renewal, expiration and errors.

    The default ACME Certificate Authority is Let's Encrypt, but it is possible to configure another CA that supports the protocol.

    Warning

    This module is experimental. Its behaviors, directives, and defaults are subject to more change from release to release relative to other standard modules. Users are encouraged to consult the "CHANGES" file for potential updates.

    Simple configuration example:

    TLS in a VirtualHost context

    MDomain example.org
    
    <VirtualHost *:443>
        ServerName example.org
        DocumentRoot htdocs/a
    
        SSLEngine on
        # no certificates specification
    </VirtualHost>

    This setup will, on server start, contact Let's Encrypt to request a certificate for the domain. If Let's Encrypt can verify the ownership of the domain, the module will retrieve the certificate and its chain, store it in the local file system (see MDStoreDir) and provide it, on next restart, to mod_ssl.

    This happens while the server is already running. All other hosts will continue to work as before. While a certificate is not available, requests for the managed domain will be answered with a '503 Service Unavailable'.

    Prerequisites

    This module requires mod_watchdog to be loaded as well.

    Certificate sign-up and renewal with Let's Encrypt requires your server to be reachable on port 80 (http:) from the outside. The alternative method over port 443 (https:) is currently disabled for security reasons (status from 2018-01-14).

    The module will select from the methods offered by Let's Encrypt. If LE decides at one point in the future, to re-enable it again, mod_md will use it when suitable.

    But for now, only the port 80 variant is available (termed "http-01"). Only when LE can reach your server on port 80 will mod_md work for you. For now, at least.

    If you do not want to offer any sites on port 80 any more, you may leave it open and redirect all requests to your https: sites instead. Use the MDRequireHttps described below to do that in a convenient fashion. This will continue to answer http: challenges from Let's Encrypt.

    Wildcard Certificates

    Wildcard certificates are possible with version 2.x of `mod_md``. But they are not straight-forward. Let's Encrypt requires the `dns-01` challenge verification for those. No other is considered good enough.

    The difficulty here is that Apache cannot do that on its own. (which is also a security benefit, since corrupting a web server or the communication path to it is the scenario `dns-01` protects against). As the name implies, `dns-01` requires you to show some specific DNS records for your domain that contain some challenge data. So you need to _write_ your domain's DNS records.

    If you know how to do that, you can integrated this with `mod_md`. Let's say you have a script for that in `/usr/bin/acme-setup-dns` you configure Apache with:

    MDChallengeDns01 /usr/bin/acme-setup-dns

    and Apache will call this script when it needs to setup/teardown a DNS challenge record for a domain.

    Assuming you want a certificate for `*.mydomain.com`, mod_md will call:

    /usr/bin/acme-setup-dns setup mydomain.com challenge-data
    # this needs to remove all existing DNS TXT records for 
    # _acme-challenge.mydomain.com and create a new one with 
    # content "challenge-data"

    and afterwards it will call

    /usr/bin/acme-setup-dns teardown mydomain.com
    # this needs to remove all existing DNS TXT records for 
    # _acme-challenge.mydomain.com

    Monitoring

    Apache has a standard module for monitoring: mod_status. mod_md contributes a section and makes monitoring your domains easy.

    You see all your MDs listed alphabetically, the domain names they contain, an overall status, expiration times and specific settings. The settings show your selection of renewal times (or the default), the CA that is used, etc.

    The 'Renewal' column will show activity and error descriptions for certificate renewals. This should make life easier for people to find out if everything is all right or what went wrong.

    If there is an error with an MD it will be shown here as well. This let's you assess problems without digging through your server logs.

    There is also a new 'md-status' handler available to give you the MD information from 'server-status' in JSON format. You configure it as

    <Location "/md-status">
      SetHandler md-status
    </Location>

    on your server. As with 'server-status' you will want to add authorization for this.

    If you just want to check the JSON status of a specific domain, simply append that to your status url:

    > curl https://<yourhost>/md-status/another-domain.org
    {
      "name": "another-domain.org",
      "domains": [
        "another-domain.org",
        "www.another-domain.org"
      ],
      ...

    This JSON status also shows a log of activities when domains are renewed:

    {
    "when": "Wed, 19 Jun 2019 14:45:58 GMT",
    "type": "progress", "detail": "The certificate for the managed domain has been renewed successfully and can be used. A graceful server restart now is recommended."
    },{
    "when": "Wed, 19 Jun 2019 14:45:58 GMT",
    "type": "progress", "detail": "Retrieving certificate chain for test-901-003-1560955549.org"
    },{
    "when": "Wed, 19 Jun 2019 14:45:58 GMT",
    "type": "progress", "detail": "Waiting for finalized order to become valid"
    },{
    "when": "Wed, 19 Jun 2019 14:45:50 GMT",
    "type": "progress", "detail": "Submitting CSR to CA for test-901-003-1560955549.org"
    },
    ...

    You will also find this information in the file `job.json` in your staging and, when activated, domains directory. This allows you to inspect these at any later point in time as well.

    In addition, there is MDCertificateStatus which gives access to relevant certificate information in JSON format.

    top

    MDBaseServer Directive

    Description:Control if base server may be managed or only virtual hosts.
    Syntax:MDBaseServer on|off
    Default:MDBaseServer off
    Context:server config
    Status:Extension
    Module:mod_md

    Controls if the base server, the one outside all VirtualHosts should be managed by mod_md or not. By default, it will not. For the very reason that it may have confusing side-effects. It is recommended that you have virtual hosts for all managed domains and do not rely on the global, fallback server configuration.

    top

    MDCAChallenges Directive

    Description:Type of ACME challenge used to prove domain ownership.
    Syntax:MDCAChallenges name [ name ... ]
    Default:MDCAChallenges tls-alpn-01 http-01 dns-01
    Context:server config
    Status:Extension
    Module:mod_md

    Sets challenge types and their execution order when proving domain ownership. The names are protocol specific. The current ACME protocol version implemented by Let's Encrypt defines three challenge types that are supported by mod_md. By default, it will try the one on port 443 when available.

    top

    MDCertificateAgreement Directive

    Description:You confirm that you accepted the Terms of Service of the Certificate Authority.
    Syntax:MDCertificateAgreement accepted
    Context:server config
    Status:Extension
    Module:mod_md

    When you use mod_md to obtain a certificate, you become a customer of the CA (e.g. Let's Encrypt). That means you need to read and agree to their Terms of Service, so that you understand what they offer and what they might exclude or require from you. mod_md cannot, by itself, agree to such a thing.

    top

    MDCertificateAuthority Directive

    Description:The URL of the ACME Certificate Authority service.
    Syntax:MDCertificateAuthority url
    Default:MDCertificateAuthority https://acme-v02.api.letsencrypt.org/directory
    Context:server config
    Status:Extension
    Module:mod_md

    The URL where the CA offers its service.

    Let's Encrypt offers, right now, four such URLs. Two for the own legacy version of the ACME protocol, commonly named ACMEv1. And two for the RFC 8555 version, named ACMEv2.

    Each version has 2 endpoints, as their is a production endpoint and a "staging" endpoint for testing. The testing endpoint works the same, but will not give you certificates recognized by browsers. However, it also has very relaxed rate limits. This allows testing of the service repeatedly without you blocking yourself.

    LE Staging Setup

    MDCertificateAuthority https://acme-staging-v02.api.letsencrypt.org/directory
    top

    MDCertificateFile Directive

    Description:Specify a static certificate file for the MD.
    Syntax:MDCertificateFile path-to-pem-file
    Context:server config
    Status:Extension
    Module:mod_md

    This is used inside a MDomainSet and specifies the file holding the certificate chain for the Managed Domain. The matching key is specified via MDCertificateKeyFile.

    Example

    <MDomain mydomain.com>
      MDCertificateFile /etc/ssl/my.cert
      MDCertificateKeyFile /etc/ssl/my.key
    </MDomain>

    This is that equivalent of the mod_ssl SSLCertificateFile directive. It has several uses.

    If you want to migrate an existing domain, using static files, to automated Let's Encrypt certificates, for one. You define the MDomainSet, add the files here and remove the SSLCertificateFile from your VirtualHosts.

    This will give you the same as before, with maybe less repeating lines in your configuration. Then you can add MDRenewMode 'always' to it and the module will get a new certificate before the one from the file expires. When it has done so, you remove the MDCertificateFile and reload the server.

    Another use case is that you renew your Let's Encrypt certificates with another ACME clients, for example the excellent certbot. Then let your MDs point to the files from certbot and have both working together.

    top

    MDCertificateKeyFile Directive

    Description:Specify a static private key for for the static cerrtificate.
    Syntax:MDCertificateKeyFile path-to-file
    Context:server config
    Status:Extension
    Module:mod_md

    This is used inside a MDomainSet and specifies the file holding the private key for the Managed Domain. The matching certificate is specified via MDCertificateFile.

    This is that equivalent of the mod_ssl SSLCertificateKeyFile directive.

    top

    MDCertificateProtocol Directive

    Description:The protocol to use with the Certificate Authority.
    Syntax:MDCertificateProtocol protocol
    Default:MDCertificateProtocol ACME
    Context:server config
    Status:Extension
    Module:mod_md

    Specifies the protocol to use. Currently, only ACME is supported.

    top

    MDCertificateStatus Directive

    Description:Exposes public certificate information in JSON.
    Syntax:MDCertificateStatus on|off
    Default:MDCertificateStatus on
    Context:server config
    Status:Extension
    Module:mod_md

    When enabled, a resources is available in Managed Domains at 'https://domain/.httpd/certificate-status' that returns a JSON document list key properties of the current and of a renewed certificate - when available.

    Example

    {
      "valid-until": "Thu, 29 Aug 2019 16:06:35 GMT",
      "valid-from": "Fri, 31 May 2019 16:06:35 GMT",
      "serial": "03039C464D454EDE79FCD2CAE859F668F269",
      "sha256-fingerprint": "1ff3bfd2c7c199489ed04df6e29a9b4ea6c015fe8a1b0ce3deb88afc751e352d"
      "renewal" : { ...renewed cert information... }
    }
    top

    MDChallengeDns01 Directive

    Description:
    Syntax:MDChallengeDns01 path-to-command
    Context:server config
    Status:Extension
    Module:mod_md

    Define a program to be called when the `dns-01` challenge needs to be setup/torn down. The program is given the argument `setup` or `teardown` followed by the domain name. For `setup` the challenge content is additionally given.

    You do not need to specify this, as long as a 'http:' or 'https:' challenge method is possible. However, Let's Encrypt makes 'dns-01' the only challenge available for wildcard certificates. If you require one of those, you need to configure this.

    See the section about wildcard certificates above for more details.

    top

    MDDriveMode Directive

    Description:former name of MDRenewMode.
    Syntax:MDDriveMode always|auto|manual
    Default:MDDriveMode auto
    Context:server config
    Status:Extension
    Module:mod_md

    This directive exists for backward compatibility as the old name for MDRenewMode.

    top

    MDHttpProxy Directive

    Description:Define a proxy for outgoing connections.
    Syntax:MDHttpProxy url
    Context:server config
    Status:Extension
    Module:mod_md

    Use a http proxy to connect to the MDCertificateAuthority. Define this if your webserver can only reach the internet with a forward proxy.

    top

    MDMember Directive

    Description:Additional hostname for the managed domain.
    Syntax:MDMember hostname
    Context:server config
    Status:Extension
    Module:mod_md

    Instead of listing all dns names on the same line, you may use MDMember to add such names to a managed domain.

    Example

    <MDomain example.org>
        MDMember www.example.org
        MDMember mail.example.org
    </MDomain>

    If you use it in the global context, outside a specific MD, you can only specify one value, 'auto' or 'manual' as the default for all other MDs. See MDomain for a description of these special values.

    top

    MDMembers Directive

    Description:Control if the alias domain names are automatically added.
    Syntax:MDMembers auto|manual
    Default:MDMembers auto
    Context:server config
    Status:Extension
    Module:mod_md

    Defines if the ServerName and ServerAlias values of a VirtualHost are automatically added to the members of a Managed Domain or not.

    top

    MDMessageCmd Directive

    Description:Handle events for Manage Domains
    Syntax:MDMessageCmd path-to-cmd optional-args
    Context:server config
    Status:Extension
    Module:mod_md

    This command gets called when one of the following events happen for a Managed Domain: "renewed", "expiring", "errored". The command may be invoked for more than these in the future and ignore events it is not prepared to handle.

    This is the more flexible companion to MDNotifyCmd.

    Example

    MDMessageCmd /etc/apache/md-message # will be invoked when a new certificate for mydomain.org is available as: /etc/apache/md-message renewed mydomain.com

                    

    The program should not block, as the module will wait for it to finish. A return code other than 0 is regarded as an error.

    'errored' is no immediate cause for concern since renewal is attempted early enough to allow the internet to come back.

    'expiring' should be taken serious. It is issued when the MDWarnWindow is reached. By default this is 10% of the certificate lifetime, so for Let's Encrypt this currently means 9 days before it expires. The warning is repeated at most once a day.

    top

    MDMustStaple Directive

    Description:Control if new certificates carry the OCSP Must Staple flag.
    Syntax:MDMustStaple on|off
    Default:MDMustStaple off
    Context:server config
    Status:Extension
    Module:mod_md

    Defines if newly requested certificate should have the OCSP Must Staple flag set or not. If a certificate has this flag, the server is required to send a OCSP stapling response to every client. This only works if you configure mod_ssl to generate this (see SSLUseStapling and friends).

    top

    MDNotifyCmd Directive

    Description:Run a program when a Managed Domain is ready.
    Syntax:MDNotifyCmd path [ args ]
    Context:server config
    Status:Extension
    Module:mod_md

    The configured executable is run when a Managed Domain has signed up or renewed its certificate. It is given the name of the processed MD as additional arguments (after the parameters specified here). It should return status code 0 to indicate that it has run successfully.

    top

    MDomain Directive

    Description:Define list of domain names that belong to one group.
    Syntax:MDomain dns-name [ other-dns-name... ] [auto|manual]
    Context:server config
    Status:Extension
    Module:mod_md

    All the names in the list are managed as one Managed Domain (MD). mod_md will request one single certificate that is valid for all these names. This directive uses the global settings (see other MD directives below). If you need specific settings for one MD, use the <MDomainSet>.

    There are 2 additional settings that are necessary for a Managed Domain: ServerAdmin and MDCertificateAgreement. The mail address of ServerAdmin is used to register at the CA (Let's Encrypt by default). The CA may use it to notify you about changes in its service or status of your certificates.

    The second setting, MDCertificateAgreement, should have the value "accepted". By specifying this, you confirm that your accept the Terms of Service of the CA.

    Example

    ServerAdmin mailto:admin@example.org
    MDCertificateAgreement accepted
    MDomain example.org www.example.org
    
    <VirtualHost *:443>
        ServerName example.org
        DocumentRoot htdocs/root
    
        SSLEngine on
    </VirtualHost>
    
    <VirtualHost *:443>
        ServerName www.example.org
        DocumentRoot htdocs/www
    
        SSLEngine on
    </VirtualHost>

    There are two special names that you may use in this directive: 'manual' and 'auto'. This determines if a Managed Domain shall have exactly the name list as is configured ('manual') or offer more convenience. With 'auto' all names of a virtual host are added to a MD. Conveniently, 'auto' is also the default.

    Example

    MDomain example.org
    
    <VirtualHost *:443>
        ServerName example.org
        ServerAlias www.example.org
        DocumentRoot htdocs/root
    
        SSLEngine on
    </VirtualHost>
    
    MDomain example2.org auto
    
    <VirtualHost *:443>
        ServerName example2.org
        ServerAlias www.example2.org
        ...
    </VirtualHost>

    In this example, the domain 'www.example.org' is automatically added to the MD 'example.org'. Similarly for 'example2.org' where 'auto' is configured explicitly. Whenever you add more ServerAlias names to this virtual host, they will be added as well to the Managed Domain.

    If you prefer to explicitly declare all the domain names, use 'manual' mode. An error will be logged if the names do not match with the expected ones.

    top

    <MDomainSet> Directive

    Description:Container for directives applied to the same managed domains.
    Syntax:<MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>
    Context:server config
    Status:Extension
    Module:mod_md

    This is the directive MDomain with the added possibility to add setting just for this MD. In fact, you may also use "<MDomain ..>" as a shortcut.

    This allows you to configure an MD that uses another Certificate Authority, have other renewal requirements, etc.

    Example

    <MDomain sandbox.example.org>
        MDCertificateAuthority   https://someotherca.com/ACME
    </MDomain>

    A common use case is to configure https: requirements separately for your domains.

    Example

    <MDomain example.org>
        MDRequireHttps temporary
    </MDomain>
    top

    MDPortMap Directive

    Description:Map external to internal ports for domain ownership verification.
    Syntax:MDPortMap map1 [ map2 ]
    Default:MDPortMap http:80 https:443
    Context:server config
    Status:Extension
    Module:mod_md

    The ACME protocol provides two methods to verify domain ownership via HTTP: one that uses 'http:' urls (port 80) and one for 'https:' urls (port 443). If your server is not reachable by at least one of the two, ACME may only work by configuring your DNS server, see MDChallengeDns01.

    On most public facing servers, 'http:' arrives on port 80 and 'https:' on port 443. The module checks the ports your Apache server is listening on and assumes those are available. This means that when your server does not listen on port 80, it assumes that 'http:' requests from the internet will not work.

    This is a good guess, but it may be wrong. For example, your Apache might listen to port 80, but your firewall might block it. 'http:' is only available in your intranet. So, the module will falsely assume that Let's Encrypt can use 'http:' challenges with your server. This will then fail, because your firewall will drop those.

    Example

    MDPortMap http:- https:8433

    The above example shows how you can specify that 'http:' requests from the internet will never arrive. In addition it says that 'https:' requests will arrive on local port 8433.

    This is necessary if you have port forwarding in place, your server may be reachable from the Internet on port 443, but the local port that httpd uses is another one. Your server might only listen on ports 8443 and 8000, but be reached on ports 443 and 80 (from the internet).

    top

    MDPrivateKeys Directive

    Description:Set type and size of the private keys generated.
    Syntax:MDPrivateKeys type [ params... ]
    Default:MDPrivateKeys RSA 2048
    Context:server config
    Status:Extension
    Module:mod_md

    Defines what kind of private keys are generated for a managed domain and with what parameters. The only supported type right now is 'RSA' and the only parameter it takes is the number of bits used for the key.

    The current (2017) recommendation is at least 2048 bits and a smaller number is not accepted here. Higher numbers offer longer security, but are computationally more expensive, e.g. increase the load on your server. That might or might not be an issue for you.

    Other key types will be defined in the future.

    Example

    MDPrivateKeys RSA 3072

    Please note that this setting only has an effect on new keys. Any existing private key you have remains unaffected. Also, this only affects private keys generated for certificates. ACME account keys are unaffected by this.

    top

    MDRenewMode Directive

    Description:Controls if certificates shall be renewed.
    Syntax:MDRenewMode always|auto|manual
    Default:MDRenewMode auto
    Context:server config
    Status:Extension
    Module:mod_md

    In the default 'auto' mode, the module will do what makes most sense of each Managed Domain. For a domain without any certificates, it will obtain them from the Certificate Authority.

    However, if you have defined an MD that is not used by any of Apache's VirtualHosts, it will not bother. And for MDs with static certificate files (see MDCertificateFile), it assumes that you have your own source, and will not renew them either.

    You can override this default in either way. If you specify 'always', the module will renew certificates for an MD, irregardless if the domains are in use or if there are static files.

    For the opposite effect, configure 'manual' and no renewal will be attempted.

    top

    MDRenewWindow Directive

    Description:Control when a certificate will be renewed.
    Syntax:MDRenewWindow duration
    Default:MDRenewWindow 33%
    Context:server config
    Status:Extension
    Module:mod_md

    If the validity of the certificate falls below duration, mod_md will get a new signed certificate.

    Normally, certificates are valid for around 90 days and mod_md will renew them the earliest 33% of their complete lifetime before they expire (so for 90 days validity, 30 days before it expires). If you think this is not what you need, you can specify either the exact time, as in:

    Example

    # 21 days before expiry
    MDRenewWindow 21d 
    # 30 seconds (might be close)
    MDRenewWindow 30s
    # 10% of the cert lifetime
    MDRenewWindow 10%

    When in auto drive mode, the module will check every 12 hours at least what the status of the managed domains is and if it needs to do something. On errors, for example when the CA is unreachable, it will initially retry after some seconds. Should that continue to fail, it will back off to a maximum interval of hourly checks.

    top

    MDRequireHttps Directive

    Description:Redirects http: traffic to https: for Managed Domains.
    Syntax:MDRequireHttps off|temporary|permanent
    Default:MDRequireHttps off
    Context:server config
    Status:Extension
    Module:mod_md

    This is a convenience directive to ease http: to https: migration of your Managed Domains. With:

    Example

    MDRequireHttps temporary

    you announce that you want all traffic via http: URLs to be redirected to the https: ones, for now. This is safe and you can remove this again at any time.

    The following has consequences: if you want client to no longer use the http: URLs, configure:

    Permanent (for at least half a year!)

    MDRequireHttps permanent

    This does two things:

    1. All request to the http: resources are redirected to the same url with the https: scheme using the 301 status code. This tells clients that this is intended to be forever and the should update any links they have accordingly.
    2. All answers to https: requests will carry the header Strict-Transport-Security with a life time of half a year. This tells the browser that it never (for half a year) shall use http: when talking to this domain name. Browsers will, after having seen this, refuse to contact your unencrypted site. This prevents malicious middleware to downgrade connections and listen/manipulate the traffic. Which is good. But you cannot simply take it back again.

    You can achieve the same with mod_alias and some Redirect configuration, basically. If you do it yourself, please make sure to exclude the paths /.well-known/* from your redirection, otherwise mod_md might have trouble signing on new certificates.

    If you set this globally, it applies to all managed domains. If you want it for a specific domain only, use:

    Example

    <MDomain xxx.yyy>
      MDRequireHttps temporary
    </MDomain>
    top

    MDServerStatus Directive

    Description:Control if Managed Domain information is added to server-status.
    Syntax:MDServerStatus on|off
    Default:MDServerStatus on
    Context:server config
    Status:Extension
    Module:mod_md

    Apaches 'server-status' handler allows you configure a resource to monitor what is going on. This includes now a section listing all Managed Domains with the DNS names, renewal status, lifetimes and main properties.

    You can switch that off using this directive.

    top

    MDStoreDir Directive

    Description:Path on the local file system to store the Managed Domains data.
    Syntax:MDStoreDir path
    Default:MDStoreDir md
    Context:server config
    Status:Extension
    Module:mod_md

    Defines where on the local file system the Managed Domain data is stored. This is an absolute path or interpreted relative to the server root. The default will create a directory 'md' in your server root.

    If you move this and have already data, be sure to move/copy the data first to the new location, reconfigure and then restart the server. If you reconfigure and restart first, the server will try to get new certificates that it thinks are missing.

    top

    MDWarnWindow Directive

    Description:Define the time window when you want to be warned about an expiring certificate.
    Syntax:MDWarnWindow duration
    Default:MDWarnWindow 10%
    Context:server config
    Status:Extension
    Module:mod_md

    See MDRenewWindow for a description on how you can specify the time.

    The modules checks the remaining lifetime of certificates and invokes MDMessageCmd when there is less than the warn window left. With the default, this mean 9 days for certificates from Let's Encrypt.

    It also applies to Managed Domains with static certificate files ( see MDCertificateFile).

    Available Languages:  en 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_filter.html.en0000644000000000000500000007634413412755316017660 0ustar rootsrc mod_filter - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_filter

    Available Languages:  en  |  fr 

    Description:Context-sensitive smart filter configuration module
    Status:Base
    Module Identifier:filter_module
    Source File:mod_filter.c
    Compatibility:Version 2.1 and later

    Summary

    This module enables smart, context-sensitive configuration of output content filters. For example, apache can be configured to process different content-types through different filters, even when the content-type is not known in advance (e.g. in a proxy).

    mod_filter works by introducing indirection into the filter chain. Instead of inserting filters in the chain, we insert a filter harness which in turn dispatches conditionally to a filter provider. Any content filter may be used as a provider to mod_filter; no change to existing filter modules is required (although it may be possible to simplify them).

    top

    Smart Filtering

    In the traditional filtering model, filters are inserted unconditionally using AddOutputFilter and family. Each filter then needs to determine whether to run, and there is little flexibility available for server admins to allow the chain to be configured dynamically.

    mod_filter by contrast gives server administrators a great deal of flexibility in configuring the filter chain. In fact, filters can be inserted based on complex boolean expressions This generalises the limited flexibility offered by AddOutputFilterByType.

    top

    Filter Declarations, Providers and Chains

    [This image displays the traditional filter model]
    Figure 1: The traditional filter model

    In the traditional model, output filters are a simple chain from the content generator (handler) to the client. This works well provided the filter chain can be correctly configured, but presents problems when the filters need to be configured dynamically based on the outcome of the handler.

    [This image shows the mod_filter model]
    Figure 2: The mod_filter model

    mod_filter works by introducing indirection into the filter chain. Instead of inserting filters in the chain, we insert a filter harness which in turn dispatches conditionally to a filter provider. Any content filter may be used as a provider to mod_filter; no change to existing filter modules is required (although it may be possible to simplify them). There can be multiple providers for one filter, but no more than one provider will run for any single request.

    A filter chain comprises any number of instances of the filter harness, each of which may have any number of providers. A special case is that of a single provider with unconditional dispatch: this is equivalent to inserting the provider filter directly into the chain.

    top

    Configuring the Chain

    There are three stages to configuring a filter chain with mod_filter. For details of the directives, see below.

    Declare Filters
    The FilterDeclare directive declares a filter, assigning it a name and filter type. Required only if the filter is not the default type AP_FTYPE_RESOURCE.
    Register Providers
    The FilterProvider directive registers a provider with a filter. The filter may have been declared with FilterDeclare; if not, FilterProvider will implicitly declare it with the default type AP_FTYPE_RESOURCE. The provider must have been registered with ap_register_output_filter by some module. The final argument to FilterProvider is an expression: the provider will be selected to run for a request if and only if the expression evaluates to true. The expression may evaluate HTTP request or response headers, environment variables, or the Handler used by this request. Unlike earlier versions, mod_filter now supports complex expressions involving multiple criteria with AND / OR logic (&& / ||) and brackets. The details of the expression syntax are described in the ap_expr documentation.
    Configure the Chain
    The above directives build components of a smart filter chain, but do not configure it to run. The FilterChain directive builds a filter chain from smart filters declared, offering the flexibility to insert filters at the beginning or end of the chain, remove a filter, or clear the chain.
    top

    Filtering and Response Status

    mod_filter normally only runs filters on responses with HTTP status 200 (OK). If you want to filter documents with other response statuses, you can set the filter-errordocs environment variable, and it will work on all responses regardless of status. To refine this further, you can use expression conditions with FilterProvider.

    top

    Upgrading from Apache HTTP Server 2.2 Configuration

    The FilterProvider directive has changed from httpd 2.2: the match and dispatch arguments are replaced with a single but more versatile expression. In general, you can convert a match/dispatch pair to the two sides of an expression, using something like:

    "dispatch = 'match'"

    The Request headers, Response headers and Environment variables are now interpreted from syntax %{req:foo}, %{resp:foo} and %{env:foo} respectively. The variables %{HANDLER} and %{CONTENT_TYPE} are also supported.

    Note that the match no longer support substring matches. They can be replaced by regular expression matches.

    top

    Examples

    Server side Includes (SSI)
    A simple case of replacing AddOutputFilterByType
    FilterDeclare SSI
    FilterProvider SSI INCLUDES "%{CONTENT_TYPE} =~ m|^text/html|"
    FilterChain SSI
    Server side Includes (SSI)
    The same as the above but dispatching on handler (classic SSI behaviour; .shtml files get processed).
    FilterProvider SSI INCLUDES "%{HANDLER} = 'server-parsed'"
    FilterChain SSI
    Emulating mod_gzip with mod_deflate
    Insert INFLATE filter only if "gzip" is NOT in the Accept-Encoding header. This filter runs with ftype CONTENT_SET.
    FilterDeclare gzip CONTENT_SET
    FilterProvider gzip inflate "%{req:Accept-Encoding} !~ /gzip/"
    FilterChain gzip
    Image Downsampling
    Suppose we want to downsample all web images, and have filters for GIF, JPEG and PNG.
    FilterProvider unpack jpeg_unpack "%{CONTENT_TYPE} = 'image/jpeg'"
    FilterProvider unpack gif_unpack  "%{CONTENT_TYPE} = 'image/gif'"
    FilterProvider unpack png_unpack  "%{CONTENT_TYPE} = 'image/png'"
    
    FilterProvider downsample downsample_filter "%{CONTENT_TYPE} = m|^image/(jpeg|gif|png)|"
    FilterProtocol downsample "change=yes"
    
    FilterProvider repack jpeg_pack "%{CONTENT_TYPE} = 'image/jpeg'"
    FilterProvider repack gif_pack  "%{CONTENT_TYPE} = 'image/gif'"
    FilterProvider repack png_pack  "%{CONTENT_TYPE} = 'image/png'"
    <Location "/image-filter">
        FilterChain unpack downsample repack
    </Location>
    top

    Protocol Handling

    Historically, each filter is responsible for ensuring that whatever changes it makes are correctly represented in the HTTP response headers, and that it does not run when it would make an illegal change. This imposes a burden on filter authors to re-implement some common functionality in every filter:

    • Many filters will change the content, invalidating existing content tags, checksums, hashes, and lengths.
    • Filters that require an entire, unbroken response in input need to ensure they don't get byteranges from a backend.
    • Filters that transform output in a filter need to ensure they don't violate a Cache-Control: no-transform header from the backend.
    • Filters may make responses uncacheable.

    mod_filter aims to offer generic handling of these details of filter implementation, reducing the complexity required of content filter modules. This is work-in-progress; the FilterProtocol implements some of this functionality for back-compatibility with Apache 2.0 modules. For httpd 2.1 and later, the ap_register_output_filter_protocol and ap_filter_protocol API enables filter modules to declare their own behaviour.

    At the same time, mod_filter should not interfere with a filter that wants to handle all aspects of the protocol. By default (i.e. in the absence of any FilterProtocol directives), mod_filter will leave the headers untouched.

    At the time of writing, this feature is largely untested, as modules in common use are designed to work with 2.0. Modules using it should test it carefully.

    top

    AddOutputFilterByType Directive

    Description:assigns an output filter to a particular media-type
    Syntax:AddOutputFilterByType filter[;filter...] media-type [media-type] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_filter
    Compatibility:Had severe limitations before being moved to mod_filter in version 2.3.7

    This directive activates a particular output filter for a request depending on the response media-type.

    The following example uses the DEFLATE filter, which is provided by mod_deflate. It will compress all output (either static or dynamic) which is labeled as text/html or text/plain before it is sent to the client.

    AddOutputFilterByType DEFLATE text/html text/plain

    If you want the content to be processed by more than one filter, their names have to be separated by semicolons. It's also possible to use one AddOutputFilterByType directive for each of these filters.

    The configuration below causes all script output labeled as text/html to be processed at first by the INCLUDES filter and then by the DEFLATE filter.

    <Location "/cgi-bin/">
        Options Includes
        AddOutputFilterByType INCLUDES;DEFLATE text/html
    </Location>

    See also

    top

    FilterChain Directive

    Description:Configure the filter chain
    Syntax:FilterChain [+=-@!]filter-name ...
    Context:server config, virtual host, directory, .htaccess
    Override:Options
    Status:Base
    Module:mod_filter

    This configures an actual filter chain, from declared filters. FilterChain takes any number of arguments, each optionally preceded with a single-character control that determines what to do:

    +filter-name
    Add filter-name to the end of the filter chain
    @filter-name
    Insert filter-name at the start of the filter chain
    -filter-name
    Remove filter-name from the filter chain
    =filter-name
    Empty the filter chain and insert filter-name
    !
    Empty the filter chain
    filter-name
    Equivalent to +filter-name
    top

    FilterDeclare Directive

    Description:Declare a smart filter
    Syntax:FilterDeclare filter-name [type]
    Context:server config, virtual host, directory, .htaccess
    Override:Options
    Status:Base
    Module:mod_filter

    This directive declares an output filter together with a header or environment variable that will determine runtime configuration. The first argument is a filter-name for use in FilterProvider, FilterChain and FilterProtocol directives.

    The final (optional) argument is the type of filter, and takes values of ap_filter_type - namely RESOURCE (the default), CONTENT_SET, PROTOCOL, TRANSCODE, CONNECTION or NETWORK.

    top

    FilterProtocol Directive

    Description:Deal with correct HTTP protocol handling
    Syntax:FilterProtocol filter-name [provider-name] proto-flags
    Context:server config, virtual host, directory, .htaccess
    Override:Options
    Status:Base
    Module:mod_filter

    This directs mod_filter to deal with ensuring the filter doesn't run when it shouldn't, and that the HTTP response headers are correctly set taking into account the effects of the filter.

    There are two forms of this directive. With three arguments, it applies specifically to a filter-name and a provider-name for that filter. With two arguments it applies to a filter-name whenever the filter runs any provider.

    Flags specified with this directive are merged with the flags that underlying providers may have registerd with mod_filter. For example, a filter may internally specify the equivalent of change=yes, but a particular configuration of the module can override with change=no.

    proto-flags is one or more of

    change=yes|no
    Specifies whether the filter changes the content, including possibly the content length. The "no" argument is supported in 2.4.7 and later.
    change=1:1
    The filter changes the content, but will not change the content length
    byteranges=no
    The filter cannot work on byteranges and requires complete input
    proxy=no
    The filter should not run in a proxy context
    proxy=transform
    The filter transforms the response in a manner incompatible with the HTTP Cache-Control: no-transform header.
    cache=no
    The filter renders the output uncacheable (eg by introducing randomised content changes)
    top

    FilterProvider Directive

    Description:Register a content filter
    Syntax:FilterProvider filter-name provider-name expression
    Context:server config, virtual host, directory, .htaccess
    Override:Options
    Status:Base
    Module:mod_filter

    This directive registers a provider for the smart filter. The provider will be called if and only if the expression declared evaluates to true when the harness is first called.

    provider-name must have been registered by loading a module that registers the name with ap_register_output_filter.

    expression is an ap_expr.

    See also

    top

    FilterTrace Directive

    Description:Get debug/diagnostic information from mod_filter
    Syntax:FilterTrace filter-name level
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_filter

    This directive generates debug information from mod_filter. It is designed to help test and debug providers (filter modules), although it may also help with mod_filter itself.

    The debug output depends on the level set:

    0 (default)
    No debug information is generated.
    1
    mod_filter will record buckets and brigades passing through the filter to the error log, before the provider has processed them. This is similar to the information generated by mod_diagnostics.
    2 (not yet implemented)
    Will dump the full data passing through to a tempfile before the provider. For single-user debug only; this will not support concurrent hits.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dialup.html0000644000000000000500000000033013362070302017213 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_dialup.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_dialup.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_actions.html.en0000644000000000000500000003135113412755316020020 0ustar rootsrc mod_actions - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_actions

    Available Languages:  de  |  en  |  fr  |  ja  |  ko 

    Description:Execute CGI scripts based on media type or request method.
    Status:Base
    Module Identifier:actions_module
    Source File:mod_actions.c

    Summary

    This module has two directives. The Action directive lets you run CGI scripts whenever a file of a certain MIME content type is requested. The Script directive lets you run CGI scripts whenever a particular method is used in a request. This makes it much easier to execute scripts that process files.

    top

    Action Directive

    Description:Activates a CGI script for a particular handler or content-type
    Syntax:Action action-type cgi-script [virtual]
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_actions
    Compatibility:The virtual modifier and handler passing were introduced in Apache 2.1

    This directive adds an action, which will activate cgi-script when action-type is triggered by the request. The cgi-script is the URL-path to a resource that has been designated as a CGI script using ScriptAlias or AddHandler. The action-type can be either a handler or a MIME content type. It sends the URL and file path of the requested document using the standard CGI PATH_INFO and PATH_TRANSLATED environment variables. The handler used for the particular request is passed using the REDIRECT_HANDLER variable.

    Example: MIME type

    # Requests for files of a particular MIME content type:
    Action image/gif /cgi-bin/images.cgi

    In this example, requests for files with a MIME content type of image/gif will be handled by the specified cgi script /cgi-bin/images.cgi.

    Example: File extension

    # Files of a particular file extension
    AddHandler my-file-type .xyz
    Action my-file-type "/cgi-bin/program.cgi"

    In this example, requests for files with a file extension of .xyz are handled by the specified cgi script /cgi-bin/program.cgi.

    The optional virtual modifier turns off the check whether the requested file really exists. This is useful, for example, if you want to use the Action directive in virtual locations.

    <Location "/news">
        SetHandler news-handler
        Action news-handler "/cgi-bin/news.cgi" virtual
    </Location>

    See also

    top

    Script Directive

    Description:Activates a CGI script for a particular request method.
    Syntax:Script method cgi-script
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_actions

    This directive adds an action, which will activate cgi-script when a file is requested using the method of method. The cgi-script is the URL-path to a resource that has been designated as a CGI script using ScriptAlias or AddHandler. The URL and file path of the requested document is sent using the standard CGI PATH_INFO and PATH_TRANSLATED environment variables.

    Any arbitrary method name may be used. Method names are case-sensitive, so Script PUT and Script put have two entirely different effects.

    Note that the Script command defines default actions only. If a CGI script is called, or some other resource that is capable of handling the requested method internally, it will do so. Also note that Script with a method of GET will only be called if there are query arguments present (e.g., foo.html?hi). Otherwise, the request will proceed normally.

    # All GET requests go here
    Script GET "/cgi-bin/search"
    
    # A CGI PUT handler
    Script PUT "/~bob/put.cgi"

    Available Languages:  de  |  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_status.html.ja.utf80000644000000000000500000002665613412755316020574 0ustar rootsrc mod_status - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_status

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:サーãƒã®æ´»å‹•状æ³ã¨æ€§èƒ½ã«é–¢ã™ã‚‹æƒ…報をæä¾›ã™ã‚‹
    ステータス:Base
    モジュール識別å­:status_module
    ソースファイル:mod_status.c

    概è¦

    ã“ã® Status モジュールã«ã‚ˆã‚Šã‚µãƒ¼ãƒç®¡ç†è€…ã¯ã‚µãƒ¼ãƒãŒã©ã®ãã‚‰ã„ ã®æ€§èƒ½ã§å‹•作ã—ã¦ã„ã‚‹ã‹ã‚’知るã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ ç¾æ™‚点ã§ã®ã‚µãƒ¼ãƒã®çµ±è¨ˆæƒ…報を読ã¿ã‚„ã™ã„å½¢å¼ã§è¡¨ã—㟠HTML ページ㌠表示ã•れã¾ã™ã€‚å¿…è¦ã§ã‚れã°ã€ã“ã®ãƒšãƒ¼ã‚¸ã¯è‡ªå‹•çš„ã«ãƒªãƒ•レッシュã•ã›ã‚‹ ã“ã¨ã‚‚ã§ãã¾ã™ (äº’æ›æ€§ã®ã‚るブラウザを使用ã—ã¦ã„ã‚‹å ´åˆ)。 別ã«ã€ç¾æ™‚点ã§ã®ã‚µãƒ¼ãƒã®çŠ¶æ…‹ã‚’å˜ç´”ãªæ©Ÿæ¢°èª­ã¿å–りå¯èƒ½ãªãƒªã‚¹ãƒˆã§ 表ã™ãƒšãƒ¼ã‚¸ã‚‚ã‚りã¾ã™ã€‚

    表示ã•れる情報ã¯:

    • リクエストを扱ã£ã¦ã„ã‚‹ãƒ¯ãƒ¼ã‚«ãƒ¼ã®æ•°
    • アイドル (訳注: リクエストを扱ã£ã¦ã„ãªã„) ãƒ¯ãƒ¼ã‚«ãƒ¼ã®æ•°
    • å„ワーカーã®çŠ¶æ…‹ã€ãƒ¯ãƒ¼ã‚«ãƒ¼ãŒæ‰±ã£ãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æ•°ã€ ワーカーãŒé€ã£ãŸç·ãƒã‚¤ãƒˆæ•° (*)
    • ç·ã‚¢ã‚¯ã‚»ã‚¹æ•°ã¨ç·ãƒã‚¤ãƒˆæ•° (*)
    • サーãƒãŒèµ·å‹•ã‚‚ã—ãã¯å†èµ·å‹•ã•ã‚ŒãŸæ™‚刻ã¨å‹•作ã—ã¦ã„る時間
    • å¹³å‡ã® 1 ç§’ã‚ãŸã‚Šã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆæ•°ã€1 ç§’ã‚ãŸã‚Šã®é€ã‚‰ã‚ŒãŸãƒã‚¤ãƒˆæ•°ã€ リクエストã‚ãŸã‚Šã®ãƒã‚¤ãƒˆæ•° (*)
    • å„ワーカー㨠Apache 全体ã§ä½¿ç”¨ã•れã¦ã„ã‚‹ CPU ã®å‰²åˆ (*)
    • ç¾æ™‚点ã®ãƒ›ã‚¹ãƒˆã¨å‡¦ç†ã•れã¦ã„るリクエスト (*)

    "(*)" ã®ä»˜ã„ã¦ã„る情報を表示ã™ã‚‹ã«ã¯ ExtendedStatus ㌠On ã«ãªã£ã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚

    Support Apache!

    トピック

    ディレクティブ

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚りã¾ã›ã‚“。

    Bugfix checklist

    å‚ç…§

    top

    Status を使用å¯èƒ½ã«ã™ã‚‹

    example.com ドメインã‹ã‚‰ã®ãƒ–ラウザã®ã¿ã«å¯¾ã—㦠ステータスã®å ±å‘Šã‚’使用å¯èƒ½ã«ã™ã‚‹ã«ã¯ 以下ã®ã‚³ãƒ¼ãƒ‰ã‚’ httpd.conf 設定ファイルã«è¿½åŠ ã—ã¾ã™

    <Location /server-status>
    SetHandler server-status

    Order Deny,Allow
    Deny from all
    Allow from .example.com
    </Location>

    ã“れã§ã€ã‚µãƒ¼ãƒã®çµ±è¨ˆæƒ…報をウェブブラウザを使ã£ã¦ http://your.server.name/server-status をアクセスã™ã‚‹ã“ã¨ã«ã‚ˆã‚Š çŸ¥ã‚‹ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚

    top

    自動更新

    ブラウザãŒã€Œãƒªãƒ•ãƒ¬ãƒƒã‚·ãƒ¥ã€æ©Ÿèƒ½ã‚’サãƒãƒ¼ãƒˆã—ã¦ã„れã°ã€ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ãƒšãƒ¼ã‚¸ã‚’ è‡ªå‹•çš„ã«æ›´æ–°ã™ã‚‹ã‚ˆã†ã«ã§ãã¾ã™ã€‚N ç§’æ¯Žã«æ›´æ–°ã•ã›ã‚‹ãŸã‚ã«ã¯ http://your.server.name/server-status?refresh=N ã¨ã„ã†ãƒšãƒ¼ã‚¸ã‚’アクセスã—ã¦ãã ã•ã„。

    top

    機械読ã¿å–りå¯èƒ½ãªã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ãƒ•ァイル

    http://your.server.name/server-status?auto ã‚’ アクセスã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ãƒ•ã‚¡ã‚¤ãƒ«ã®æ©Ÿæ¢°èª­ã¿å–りå¯èƒ½ãªãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’ å¾—ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã“れã¯è‡ªå‹•çš„ã«å®Ÿè¡Œã•れるã¨ãã«ä¾¿åˆ©ã§ã™ã€‚ Apache ã® /support ディレクトリã«ã‚ã‚‹ Perl プログラム log_server_status を見ã¦ãã ã•ã„。

    mod_status ãŒã‚µãƒ¼ãƒã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹ å ´åˆã€ãƒãƒ³ãƒ‰ãƒ©ã®æ©Ÿèƒ½ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæ¯Žã®ãƒ•ァイル (ã™ãªã‚ã¡ã€.htaccess) ã‚‚å«ã‚€ã™ã¹ã¦ã® 設定ファイルã§ä½¿ç”¨å¯èƒ½ã«ãªã‚‹ã“ã¨ã«ã¯æ³¨æ„ã‚’ã—ã¦ãŠãå¿…è¦ãŒã‚りã¾ã™ã€‚ ã“れã¯ã€ã‚µã‚¤ãƒˆã«ã‚ˆã£ã¦ã¯ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹æœ›ã¾ã—ããªã„çµæžœã‚’ ã‚‚ãŸã‚‰ã™ã“ã¨ãŒã‚ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_ssl.html0000644000000000000500000000032213362070302016537 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_ssl.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_ssl.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_proxy_balancer.html.en0000644000000000000500000005575213412755316021403 0ustar rootsrc mod_proxy_balancer - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy_balancer

    Available Languages:  en  |  fr  |  ja 

    Description:mod_proxy extension for load balancing
    Status:Extension
    Module Identifier:proxy_balancer_module
    Source File:mod_proxy_balancer.c
    Compatibility:Available in version 2.1 and later

    Summary

    This module requires the service of mod_proxy and it provides load balancing for all the supported protocols. The most important ones are:

    The Load balancing scheduler algorithm is not provided by this module but from other ones such as:

    Thus, in order to get the ability of load balancing, mod_proxy, mod_proxy_balancer and at least one of load balancing scheduler algorithm modules have to be present in the server.

    Warning

    Do not enable proxying until you have secured your server. Open proxy servers are dangerous both to your network and to the Internet at large.

    top

    Load balancer scheduler algorithm

    At present, there are 4 load balancer scheduler algorithms available for use: Request Counting (mod_lbmethod_byrequests), Weighted Traffic Counting (mod_lbmethod_bytraffic), Pending Request Counting (mod_lbmethod_bybusyness) and Heartbeat Traffic Counting (mod_lbmethod_heartbeat). These are controlled via the lbmethod value of the Balancer definition. See the ProxyPass directive for more information, especially regarding how to configure the Balancer and BalancerMembers.

    top

    Load balancer stickyness

    The balancer supports stickyness. When a request is proxied to some back-end, then all following requests from the same user should be proxied to the same back-end. Many load balancers implement this feature via a table that maps client IP addresses to back-ends. This approach is transparent to clients and back-ends, but suffers from some problems: unequal load distribution if clients are themselves hidden behind proxies, stickyness errors when a client uses a dynamic IP address that changes during a session and loss of stickyness, if the mapping table overflows.

    The module mod_proxy_balancer implements stickyness on top of two alternative means: cookies and URL encoding. Providing the cookie can be either done by the back-end or by the Apache web server itself. The URL encoding is usually done on the back-end.

    top

    Examples of a balancer configuration

    Before we dive into the technical details, here's an example of how you might use mod_proxy_balancer to provide load balancing between two back-end servers:

    <Proxy "balancer://mycluster">
        BalancerMember "http://192.168.1.50:80"
        BalancerMember "http://192.168.1.51:80"
    </Proxy>
    ProxyPass        "/test" "balancer://mycluster"
    ProxyPassReverse "/test" "balancer://mycluster"

    Another example of how to provide load balancing with stickyness using mod_headers, even if the back-end server does not set a suitable session cookie:

    Header add Set-Cookie "ROUTEID=.%{BALANCER_WORKER_ROUTE}e; path=/" env=BALANCER_ROUTE_CHANGED
    <Proxy "balancer://mycluster">
        BalancerMember "http://192.168.1.50:80" route=1
        BalancerMember "http://192.168.1.51:80" route=2
        ProxySet stickysession=ROUTEID
    </Proxy>
    ProxyPass        "/test" "balancer://mycluster"
    ProxyPassReverse "/test" "balancer://mycluster"
    top

    Exported Environment Variables

    At present there are 6 environment variables exported:

    BALANCER_SESSION_STICKY

    This is assigned the stickysession value used for the current request. It is the name of the cookie or request parameter used for sticky sessions

    BALANCER_SESSION_ROUTE

    This is assigned the route parsed from the current request.

    BALANCER_NAME

    This is assigned the name of the balancer used for the current request. The value is something like balancer://foo.

    BALANCER_WORKER_NAME

    This is assigned the name of the worker used for the current request. The value is something like http://hostA:1234.

    BALANCER_WORKER_ROUTE

    This is assigned the route of the worker that will be used for the current request.

    BALANCER_ROUTE_CHANGED

    This is set to 1 if the session route does not match the worker route (BALANCER_SESSION_ROUTE != BALANCER_WORKER_ROUTE) or the session does not yet have an established route. This can be used to determine when/if the client needs to be sent an updated route when sticky sessions are used.

    top

    Enabling Balancer Manager Support

    This module requires the service of mod_status. Balancer manager enables dynamic update of balancer members. You can use balancer manager to change the balance factor of a particular member, or put it in the off line mode.

    Thus, in order to get the ability of load balancer management, mod_status and mod_proxy_balancer have to be present in the server.

    To enable load balancer management for browsers from the example.com domain add this code to your httpd.conf configuration file

    <Location "/balancer-manager">
        SetHandler balancer-manager
        Require host example.com
    </Location>

    You can now access load balancer manager by using a Web browser to access the page http://your.server.name/balancer-manager. Please note that only Balancers defined outside of <Location ...> containers can be dynamically controlled by the Manager.

    top

    Details on load balancer stickyness

    When using cookie based stickyness, you need to configure the name of the cookie that contains the information about which back-end to use. This is done via the stickysession attribute added to either ProxyPass or ProxySet. The name of the cookie is case-sensitive. The balancer extracts the value of the cookie and looks for a member worker with route equal to that value. The route must also be set in either ProxyPass or ProxySet. The cookie can either be set by the back-end, or as shown in the above example by the Apache web server itself.

    Some back-ends use a slightly different form of stickyness cookie, for instance Apache Tomcat. Tomcat adds the name of the Tomcat instance to the end of its session id cookie, separated with a dot (.) from the session id. Thus if the Apache web server finds a dot in the value of the stickyness cookie, it only uses the part behind the dot to search for the route. In order to let Tomcat know about its instance name, you need to set the attribute jvmRoute inside the Tomcat configuration file conf/server.xml to the value of the route of the worker that connects to the respective Tomcat. The name of the session cookie used by Tomcat (and more generally by Java web applications based on servlets) is JSESSIONID (upper case) but can be configured to something else.

    The second way of implementing stickyness is URL encoding. The web server searches for a query parameter in the URL of the request. The name of the parameter is specified again using stickysession. The value of the parameter is used to lookup a member worker with route equal to that value. Since it is not easy to extract and manipulate all URL links contained in responses, generally the work of adding the parameters to each link is done by the back-end generating the content. In some cases it might be feasible doing this via the web server using mod_substitute or mod_sed. This can have negative impact on performance though.

    The Java standards implement URL encoding slightly different. They use a path info appended to the URL using a semicolon (;) as the separator and add the session id behind. As in the cookie case, Apache Tomcat can include the configured jvmRoute in this path info. To let Apache find this sort of path info, you neet to set scolonpathdelim to On in ProxyPass or ProxySet.

    Finally you can support cookies and URL encoding at the same time, by configuring the name of the cookie and the name of the URL parameter separated by a vertical bar (|) as in the following example:

    ProxyPass "/test" "balancer://mycluster" stickysession=JSESSIONID|jsessionid scolonpathdelim=On
    <Proxy "balancer://mycluster">
        BalancerMember "http://192.168.1.50:80" route=node1
        BalancerMember "http://192.168.1.51:80" route=node2
    </Proxy>

    If the cookie and the request parameter both provide routing information for the same request, the information from the request parameter is used.

    top

    Troubleshooting load balancer stickyness

    If you experience stickyness errors, e.g. users lose their application sessions and need to login again, you first want to check whether this is because the back-ends are sometimes unavailable or whether your configuration is wrong. To find out about possible stability problems with the back-ends, check your Apache error log for proxy error messages.

    To verify your configuration, first check, whether the stickyness is based on a cookie or on URL encoding. Next step would be logging the appropriate data in the access log by using an enhanced LogFormat. The following fields are useful:

    %{MYCOOKIE}C
    The value contained in the cookie with name MYCOOKIE. The name should be the same given in the stickysession attribute.
    %{Set-Cookie}o
    This logs any cookie set by the back-end. You can track, whether the back-end sets the session cookie you expect, and to which value it is set.
    %{BALANCER_SESSION_STICKY}e
    The name of the cookie or request parameter used to lookup the routing information.
    %{BALANCER_SESSION_ROUTE}e
    The route information found in the request.
    %{BALANCER_WORKER_ROUTE}e
    The route of the worker chosen.
    %{BALANCER_ROUTE_CHANGED}e
    Set to 1 if the route in the request is different from the route of the worker, i.e. the request couldn't be handled sticky.

    Common reasons for loss of session are session timeouts, which are usually configurable on the back-end server.

    The balancer also logs detailed information about handling stickyness to the error log, if the log level is set to debug or higher. This is an easy way to troubleshoot stickyness problems, but the log volume might be to high for production servers under high load.

    Available Languages:  en  |  fr  |  ja 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_setenvif.html.tr.utf80000644000000000000500000005426013447004010021101 0ustar rootsrc mod_setenvif - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_setenvif

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    Açıklama:Ortam değişkenlerinin isteğin özelliklerine uygun olarak atanmasını sağlar
    Durum:Temel
    Modül Betimleyici:setenvif_module
    Kaynak Dosyası:mod_setenvif.c

    Özet

    mod_setenvif modülü dahili ortam değişkenlerinin isteğin farklı bileşenlerinin belirttiğiniz düzenli ifade ile eşleşmesine bağlı olarak atanmasını mümkün kılar. Bu ortam değişkenleri sunucunun çeşitli kısımlarında yapılacak eylemlerin yanında CGI betiklerinde ve SSI sayfalarında kullanılabilir hale gelmelerine karar verilirken kullanılır.

    Yönergeler yapılandırma dosyasında yer aldıkları sıraya göre ele alınırlar. Böylece daha karmaşık dizilimler kullanılabilir, bu örnekteki tarayıcı Mozilla ise netscape ortam değişkeni atanmakta, MSIE ise atanmamaktadır.

    BrowserMatch ^Mozilla netscape
    BrowserMatch MSIE !netscape

    mod_autoindex ile dizin listesi oluşturulması veya bir DirectoryIndex için yol aranması gibi bir dahili alt istek için sunucu yol araması yaparken isteklere özgü ortam değişkenleri alt istekler tarafından miras alınMAZ. Buna ek olarak, mod_setenvif modülünün devreye girdiği API fazlarından dolayı yapılan alt isteklerde SetEnvIf yönergeleri ayrı ayrı değerlendirilMEZ.

    top

    BrowserMatch Yönergesi

    Açıklama:Ortam değişkenlerini HTTP kullanıcı arayüzüne göre belirler.
    Sözdizimi:BrowserMatch düzifd [!]ort-değişkeni[=değer] [[!]ort-değişkeni[=değer]] ...
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Temel
    Modül:mod_setenvif

    BrowserMatch yönergesi SetEnvIf yönergesinin özel bir halidir ve ortam değişkenlerine User-Agent HTTP istek başlığının değerine göre atama yapar. Aşağıdaki iki satır aynı etkiye sahiptir:

    BrowserMatch Robot is_a_robot
    SetEnvIf User-Agent Robot is_a_robot

    Başka örnekler:

    BrowserMatch ^Mozilla forms jpeg=yes browser=netscape
    BrowserMatch "^Mozilla/[2-3]" tables agif frames javascript
    BrowserMatch MSIE !javascript
    top

    BrowserMatchNoCase Yönergesi

    Açıklama:Ortam değişkenlerini HTTP kullanıcı arayüzünün harf büyüklüğüne duyarsız eşleşmelerine bağlı olarak belirler.
    Sözdizimi:BrowserMatchNoCase düzifd [!]ort-değişkeni[=değer] [[!]ort-değişkeni[=değer]] ...
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Temel
    Modül:mod_setenvif

    BrowserMatchNoCase yönergesi sözdizimsel ve anlamsal olarak BrowserMatch yönergesinin eşdeğeridir. Ancak, eşleşmelerde harf büyüklüğüne duyarsızdır. Örnek:

    BrowserMatchNoCase mac platform=macintosh
    BrowserMatchNoCase win platform=windows

    BrowserMatch ve BrowserMatchNoCase yönergeleri SetEnvIf ve SetEnvIfNoCase yönergelerinin özel halleridir. Bu bakımda aşağıdaki iki satır aynı etkiye sahiptir:

    BrowserMatchNoCase Robot is_a_robot
    SetEnvIfNoCase User-Agent Robot is_a_robot
    top

    SetEnvIf Yönergesi

    Açıklama:Ortam değişkenlerini isteğin özniteliklerine göre atar.
    Sözdizimi:SetEnvIf öznitelik düzifd [!]ort-değişkeni[=değer] [[!]ort-değişkeni[=değer]] ...
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Temel
    Modül:mod_setenvif

    SetEnvIf yönergesi ortam değişkenlerini isteğin özniteliklerine göre tanımlar. İlk bileşen olarak belirtilen öznitelik şu dört şeyden biri olabilir:

    1. Bir HTTP istek başlığı alanı (ayrıntılı bilgi için bak: RFC2616); örneğin: Host, User-Agent, Referer ve Accept-Language. Bir düzenli ifade kullanılarak birden fazla istek başlığı belirtilebilir.
    2. İsteğin aşağıdaki bileşenlerinden biri:
      • Remote_Host - isteÄŸi yapan istemcinin konak ismi (varsa)
      • Remote_Addr -isteÄŸi yapan istemcinin IP adresi
      • Server_Addr - isteÄŸi alan sunucunun IP adresi (sadece 2.0.43 sonrası sürümler için)
      • Request_Method - kullanılan yöntemin ismi (GET, POST, vs.)
      • Request_Protocol - İsteÄŸin yapıldığı protokolün ismi ve numarası ("HTTP/0.9", "HTTP/1.1" gibi)
      • Request_URI - HTTP istek satırında belirtilen özkaynak; genellikle sorgu dizgesi olmaksızın ÅŸema ve konak ismini içeren bir URL parçasıdır. Sorgu dizgeleriyle eÅŸleÅŸmeler hakkında ayrıntılı bilgi edinmek için mod_rewrite modülünün RewriteCond yönergesinin açıklamasına bakınız.
    3. İstek ile evvelce ilişkilendirilmiş bir ortam değişkeninin ismi. Bu sayede önceki bir eşleşmenin sonucuna karşı yeni bir sınama yapma imkanı ortaya çıkar. Böyle bir sınama için sadece evvelce SetEnvIf[NoCase] yönergeleri ile yapılmış atamalardaki ortam değişkenleri kullanılabilir. ‘Evvelce’ derken, sunucu genelinde veya bölüm içinde bu yönergeden önce yer alan SetEnvIf[NoCase] yönerge satırları kastedilmektedir. Ortam değişkenlerinin dikkate alınabilmesi için istek öznitelikleri arasında hiçbir eşleşme olmaması ve öznitelik olarak bir düzenli ifade belirtilmemiş olması gerekir.

    İkinci bileşen (düzifd) bir düzenli ifadedir. düzifd ile öznitelik eşleştiği takdirde yönergenin kalan bileşenleri değerlendirmeye alınır.

    Kalan bileşenler atanacak ortam değişkenlerinin isimleri ve isteğe bağlı olarak bunlara atanacak değerlerden oluşur. Bunlar şöyle belirtilebilir:

    1. değişken-adı veya
    2. !değişken-adı ya da
    3. değişken-adı=değer

    İlk biçemde değişkene "1" değeri atanır. İkincisinde atanmış bir değişken atanmamış yapılır. Üçüncüsünde ise değişkene belirtilen değer bire bir atanır. 2.0.51 sürümünden itibaren Apache httpd parantezli düzenli ifadelerin sonuçları ile değiştirilmek üzere value içinde $1..$9 gösterimleri tanınmaktadır. $0 bu kalıp ile eşleşen tüm dizgeye erişir.

    SetEnvIf Request_URI "\.gif$" nesne_bir_resim=gif
    SetEnvIf Request_URI "\.jpg$" nesne_bir_resim=jpg
    SetEnvIf Request_URI "\.xbm$" nesne_bir_resim=xbm
    
    SetEnvIf Referer belgeler\.alanismi\.example\.com dahili_site_istendi
    
    SetEnvIf object_is_image xbm XBIT_PROCESSING=1
    
    SetEnvIf Request_URI "\.(.*)$" EXTENSION=$1
    
    SetEnvIf ^TS  ^[a-z]  TS_VAR

    İlk üçünde istek bir resim dosyası için yapılmışsa nesne_bir_resim ortam değişkeni atanmakta, dördüncüsünde istenen sayfa belgeler.alanismi.example.com adlı sitede bulunuyorsa dahili_site_istendi ortam değişkeni atanmaktadır.

    Son örnekte ise istekte "TS" ile başlayıp [a-z] arasındaki karakterlerle devam eden bir başlık alanı varsa TS_VAR ortam değişkeni atanmaktadır.

    Ayrıca bakınız:

    top

    SetEnvIfExpr Yönergesi

    Açıklama:Bir ap_expr ifadesine dayanarak ortam değişkenlerine değer atar
    Sözdizimi:SetEnvIfExpr ifade [!]ort-değişkeni[=değer] [[!]ort-değişkeni[=değer]] ...
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Temel
    Modül:mod_setenvif

    SetEnvIfExpr yönergesi bir <If> ap_expr ifadesine dayanarak ortam değişkenlerine değer atar. Bu ifadeler çalışma anında değerlendirilirerek SetEnvIf yönergesindeki gibi ort-değişkenine uygulanır.

    SetEnvIfExpr "tolower(req('X-Sendfile')) == 'd:\images\very_big.iso')" iso_delivered

    Burada uygulamamızın her X-Sendfile göndermeye çalışmasında ortam değişkenine iso_delivered değeri atanmaktadır.

    Uzak IP adresi RFC 1918'e göre özel bir adres ise rfc1918 değişkenine 1 atanması daha kullanışlı bir örnek olurdu:

    SetEnvIfExpr "-R '10.0.0.0/8' || -R '172.16.0.0/12' || -R '192.168.0.0/16'" rfc1918

    Ayrıca bakınız:

    top

    SetEnvIfNoCase Yönergesi

    Açıklama:Ortam değişkenlerini isteğin özniteliklerinde harf büyüklüğüne bağlı olmaksızın yapılmış tanımlara göre atar.
    Sözdizimi:SetEnvIfNoCase öznitelik düzifd [!]ort-değişkeni[=değer] [[!]ort-değişkeni[=değer]] ...
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Temel
    Modül:mod_setenvif

    SetEnvIfNoCase yönergesi sözdizimsel ve anlamsal olarak SetEnvIf yönergesinin eşdeğeridir. Ancak, eşleşmelerde harf büyüklüğüne duyarsızdır. Örnek:

    SetEnvIfNoCase Host Example\.Org site=example

    Burada, Host: HTTP istek başlığında Example.Org, example.org veya harf büyüklüğünce farklı benzerleri belirtilmişse site ortam değişkenine "example" değeri atanmaktadır.

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_lbmethod_bybusyness.html0000644000000000000500000000036213362070302022026 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_lbmethod_bybusyness.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_lbmethod_bybusyness.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_authn_dbd.html0000644000000000000500000000033613362070302017673 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authn_dbd.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authn_dbd.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_dir.html.fr.utf80000644000000000000500000006017613412755316020037 0ustar rootsrc mod_dir - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_dir

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Permet la redirection des adresses se terminant par un répertoire sans slash de fin et la mise à disposition des fichiers index de répertoire
    Statut:Base
    Identificateur de Module:dir_module
    Fichier Source:mod_dir.c

    Sommaire

    L'index d'un répertoire peut provenir de deux sources :

    • Un fichier écrit par l'utilisateur, dont le nom, en général appelé index.html, peut être défini à l'aide de la directive DirectoryIndex fournie par le module mod_dir.
    • Un listing généré par le serveur, par l'intermédiaire du module mod_autoindex.

    Les deux fonctions sont bien distinctes, si bien que vous pouvez supprimer (ou remplacer) la génération automatique d'index, si vous le souhaitez.

    Une redirection "slash de fin" est effectuée lorsque le serveur reçoit une requête pour une URL du style http://nom-serveur/foo/nom-rep où nom-rep est le nom d'un répertoire. Comme les répertoires nécessitent un slash de fin, mod_dir effectue une redirection vers http://nom-serveur/foo/nom-rep/.

    top

    Directive DirectoryCheckHandler

    Description:Définit la réponse de ce module lorsqu'un autre gestionnaire est utilisé
    Syntaxe:DirectoryCheckHandler On|Off
    Défaut:DirectoryCheckHandler Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_dir
    Compatibilité:Disponible depuis la version 2.4.8 du serveur HTTP Apache. Les versions antérieures à 2.4 se comportaient implicitement comme si "DirectoryCheckHandler ON" avait été spécifié.

    La directive DirectoryCheckHandler permet de faire en sorte que mod_dir recherche un index de répertoire ou ajoute des slashes de fin lorsqu'un autre gestionnaire à été défini pour l'URL considérée. Les gestionnaires peuvent être définis à via des directives telles que SetHandler ou par d'autres modules tels que mod_rewrite au cours des substitutions de niveau répertoire.

    Dans les versions antérieures à 2.4, ce module ne modifiait pas son comportement si un autre gestionnaire avait été défini pour l'URL considérée. Ceci permettait de servir des index de répertoires même si une directive SetHandler avait été définie pour un répertoire entier, mais pouvait aussi être à l'origine de conflits avec d'autres modules comme mod_rewrite.

    top

    Directive DirectoryIndex

    Description:Liste des fichiers ressources à rechercher lorsque le client envoie une requête pour un répertoire
    Syntaxe:DirectoryIndex disabled | url locale [url locale] ...
    Défaut:DirectoryIndex index.html
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_dir

    La directive DirectoryIndex permet de définir une liste de fichiers ressources à rechercher lorsqu'un client envoie une requête pour l'index d'un répertoire, en ajoutant un '/' à la fin du nom de ce dernier. url locale est l'URL (codée avec caractères '%') d'un document du serveur, relative au répertoire faisant l'objet de la requête ; il s'agit en général du nom d'un fichier situé dans le répertoire. Si plusieurs URLs sont fournies, le serveur renverra la première d'entre elles qui correspond à une ressource existante. Si aucune ressource ne correspond à la liste des URLs spécifiées, et si l'option Indexes est définie, le serveur générera son propre listing du répertoire.

    Exemple

    DirectoryIndex index.html

    Avec cette configuration, une requête pour l'URL http://example.com/docs/ renverrait au client la ressource http://example.com/docs/index.html si elle existe, ou provoquerait la génération du listing du répertoire si la ressource n'existe pas.

    Notez qu'il n'est pas nécessaire que les documents soient relatifs au répertoire ;

    DirectoryIndex index.html index.txt  /cgi-bin/index.pl

    provoquerait l'exécution du script CGI /cgi-bin/index.pl si aucun des fichiers index.html ou index.txt n'existe dans le répertoire considéré.

    La spécification du seul argument "disabled" empêche mod_dir de rechercher un index. Un argument "disabled" sera interprété de manière littérale si d'autres arguments sont présents avant ou après lui, même s'ils sont eux-mêmes des arguments "disabled".

    Note: Positionner plusieurs directives DirectoryIndex au coeur du même context complète la liste des ressources et ne l'écrase pas :

    # Exemple A: Positionner index.html en page d'index, puis ajouter index.php.
    <Directory "/foo">
        DirectoryIndex index.html
        DirectoryIndex index.php
    </Directory>
    
    # Exemple B: La même chose que l'exemple A, mais réalisé au moyen d'une seule directive.
    <Directory "/foo">
        DirectoryIndex index.html index.php
    </Directory>
    
    # Exemple C: Pour remplacer la liste des ressources, il faut d'abord la vider :
    # Ici, seul index.php restera référencé comme ressource d'index.
    <Directory "/foo">
        DirectoryIndex index.html
        DirectoryIndex disabled
        DirectoryIndex index.php
    </Directory>
    top

    Directive DirectoryIndexRedirect

    Description:Définit une redirection externe pour les index de répertoires.
    Syntaxe:DirectoryIndexRedirect on | off | permanent | temp | seeother | 3xx-code
    Défaut:DirectoryIndexRedirect off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_dir
    Compatibilité:Disponible depuis la version 2.3.14

    Par défaut, c'est la page définie par la directive DirectoryIndex qui est sélectionnée et renvoyée de manière transparente au client. La directive DirectoryIndexRedirect permet de rediriger le client via une redirection de type 3xx.

    Les arguments acceptés sont :

    • on : envoie une redirection 302 vers l'index choisi.
    • off : n'envoie aucune redirection. Il s'agit du comportement historique de mod_dir.
    • permanent : envoie une redirection 301 (permanent) vers l'index choisi.
    • temp : ceci est équivalent à on
    • seeother : envoie une redirection 303 (également appelée "See Other") vers l'index choisi.
    • 3xx-code : envoie une redirection accompagnée du code 3xx choisi.

    Exemple

    DirectoryIndexRedirect on

    Une requête pour http://example.com/docs/ se solderait par une redirection temporaire vers http://example.com/docs/index.html si cette ressource existe.

    top

    Directive DirectorySlash

    Description:Activation/Désactivation de la redirection "slash de fin"
    Syntaxe:DirectorySlash On|Off
    Défaut:DirectorySlash On
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_dir

    La directive DirectorySlash permet de déterminer si mod_dir doit corriger ou non les URLs pointant vers un répertoire.

    En général, si un utilisateur envoie une requête pour une ressource sans slash de fin, cette ressource représentant un répertoire, mod_dir le redirige vers la même ressource, mais en ajoutant un slash de fin, et ceci pour plusieurs bonnes raisons :

    • La requête de l'utilisateur contiendra finalement l'URL canonique de la ressource
    • mod_autoindex fonctionnera correctement. Comme il n'indique pas le chemin dans le lien, le chemin de l'URL serait incorrect.
    • La directive DirectoryIndex n'est évaluée que pour les répertoires se terminant par un slash.
    • Les références à des URLs relatives dans les pages html fonctionneront alors correctement.

    Si vous ne souhaitez pas voir ces effets, et si les raisons évoquées ci-dessus ne s'appliquent pas à vous, vous pouvez désactiver la redirection comme indiqué ci-dessous. Gardez cependant à l'esprit que ceci peut avoir des répercutions en matière de sécurité.

    # voir l'avertissement de sécurité ci-dessous !
    <Location "/some/path">
        DirectorySlash Off
        SetHandler some-handler
    </Location>

    Avertissement de sécurité

    La désactivation de la redirection "slash de fin" peut entraîner la divulgation d'informations. Considérons la situation où mod_autoindex est actif (Options +Indexes), où la directive DirectoryIndex a pour valeur une ressource valide (par exemple index.html), et où aucun gestionnaire particulier n'a été défini pour cette URL. Dans ce cas, une requête avec slash de fin afficherait le contenu du fichier index.html ; par contre, une requête sans slash de fin afficherait un listing du contenu du répertoire.

    Notez aussi que certains navigateurs peuvent modifier par erreur des requêtes POST en requêtes GET lors d'une redirection, les données POST étant alors perdues.

    top

    Directive FallbackResource

    Description:Définit une URL par défaut pour les requêtes qui ne ciblent aucun fichier
    Syntaxe:FallbackResource disabled | url-locale
    Défaut:disabled - httpd renvoie un code d'erreur 404 (Not Found)
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_dir
    Compatibilité:L'argument disabled est disponible à partir de la version 2.4.4 du serveur HTTP Apache.

    Cette directive permet de définir un traitement pour toute URL qui ne correspond à aucune ressource de votre système de fichiers, et qui provoquerait sans cela l'envoi d'un code d'erreur HTTP 404 (Not Found). Par exemple

    FallbackResource /not-404.php

    fait en sorte que les requêtes ne correspondant à aucun fichier soient traitées par non-404.php, sans affecter les requêtes pour des fichiers existants.

    Il est souvent souhaitable qu'un seul fichier ou ressource traite toutes les requêtes à destination d'un répertoire particulier, sauf pour les requêtes qui correspondent à un fichier ou script existant. On y fait souvent référence sous le terme 'contrôleur frontal'.

    Dans les versions plus anciennes de httpd, cet effet nécessitait en général mod_rewrite, et l'utilisation des tests conditionnels -f et -d pour vérifier l'existence des fichiers et répertoires. Maintenant, une seule ligne de configuration est nécessaire.

    FallbackResource /index.php

    Les fichiers existants comme des images, des fichiers css, etc... seront traités normalement.

    L'argument disabled permet de désactiver cette fonctionnalité dans le cas où l'héritage d'un répertoire parent n'est pas souhaité.

    Pour un URI intermédiaire tel que http://example.com/blog/, cet URI intermédiaire doit être spécifié en tant que url-locale :

    <Directory "/web/example.com/htdocs/blog">
        FallbackResource /blog/index.php
    </Directory>
    <Directory "/web/example.com/htdocs/blog/images">
        FallbackResource disabled
    </Directory>

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_http2.html.fr.utf80000644000000000000500000002550413416404674021561 0ustar rootsrc mod_proxy_http2 - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_proxy_http2

    Langues Disponibles:  en  |  fr 

    Description:Support de HTTP/2 pour mod_proxy
    Statut:Extension
    Identificateur de Module:proxy_http2_module
    Fichier Source:mod_proxy_http2.c
    Compatibilité:Disponible à partir de la version 2.4.19 du serveur HTTP Apache

    Sommaire

    mod_proxy_http2 ne supporte que HTTP/2 et ne permet pas de rétrogradation vers HTTP/1.1. Cela signifie que le serveur d'arrière-plan doit supporter HTTP/2 car HTTP/1.1 ne pourra alors pas être utilisé.

    Ce module nécessite la présence de mod_proxy ; pour pouvoir traiter les requêtes mandatées HTTP/2, mod_proxy et mod_proxy_http2 doivent donc être chargés par le serveur.

    mod_proxy_http2 travaille avec des requêtes entrantes en HTTP/1.1 ou HTTP/2. Dans les deux cas, les requêtes vers le même serveur d'arrière-plan sont envoyées via une seule connexion TCP, dans la mesure du possible (autrement dit lorsque la connexion peut être réutilisée).

    Avertissement : il ne sera effectué aucune tentative de fusion de plusieurs requêtes entrantes HTTP/1 (devant être mandatées vers le même serveur d'arrière-plan) vers des flux HTTP/2 appartenant à la même requête HTTP/2. Chaque requête HTTP/1 entrante sera mandatée vers le serveur d'arrière-plan en utilisant une requête HTTP/2 séparée (tout en réutilisant si possible la même connexion TCP).

    Ce module s'appuie sur libnghttp2 pour fournir le moteur central http/2.

    Avertissement

    Ce module en est au stade expérimental. Ses comportement, directives et valeurs par défauts sont donc susceptibles de modifications d'une version à l'autre plus fréquentes que pour les autres modules. A ce titre, il est fortement conseillé aux utilisateurs de consulter le fichier "CHANGES" pour prendre connaissance de ces modifications.

    Avertissement

    N'activez pas le mandatement avant d'avoir sécurisé votre serveur. Les serveurs mandataires ouverts sont dangereux non seulement pour votre propre réseau, mais aussi pour l'Internet au sens large.

    top

    Exemples de base

    Les exemples ci-dessous montrent comment configurer HTTP/2 pour des connexions d'arrière-plan vers un mandataire inverse.

    HTTP/2 (TLS)

    ProxyPass "/app" "h2://app.example.com"
    ProxyPassReverse "/app" "https://app.example.com"

    HTTP/2 (non sécurisé)

    ProxyPass "/app" "h2c://app.example.com"
    ProxyPassReverse "/app" "http://app.example.com"

    Pour mandater en inverse les protocoles h2 ou h2c, on utilise la directive ProxyPassReverse avec les schèmes habituels https et respectivement http qui sont connus et utilisés par l'agent utilisateur.

    top

    Informations sur les requêtes

    mod_proxy_http fournit les informations sur les requêtes suivantes pour enregistrement dans les journaux en utilisant le format %{VARNAME}n avec les directives LogFormat ou ErrorLogFormat :

    proxy-source-port
    Le numéro de port local utilisé pour la connexion vers le serveur d'arrière-plan.
    proxy-status
    Le statut HTTP/2 en provenance du serveur d'arrière-plan.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dumpio.html0000644000000000000500000000046213362070302017240 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_dumpio.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_dumpio.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_dumpio.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_authn_anon.html0000644000000000000500000000063713362070302020101 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authn_anon.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authn_anon.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_authn_anon.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_authn_anon.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_dbd.html0000644000000000000500000000032213362070302016467 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_dbd.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_dbd.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_session_cookie.html.en0000644000000000000500000003333413412755316021377 0ustar rootsrc mod_session_cookie - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_session_cookie

    Available Languages:  en  |  fr 

    Description:Cookie based session support
    Status:Extension
    Module Identifier:session_cookie_module
    Source File:mod_session_cookie.c
    Compatibility:Available in Apache 2.3 and later

    Summary

    Warning

    The session modules make use of HTTP cookies, and as such can fall victim to Cross Site Scripting attacks, or expose potentially private information to clients. Please ensure that the relevant risks have been taken into account before enabling the session functionality on your server.

    This submodule of mod_session provides support for the storage of user sessions on the remote browser within HTTP cookies.

    Using cookies to store a session removes the need for the server or a group of servers to store the session locally, or collaborate to share a session, and can be useful for high traffic environments where a server based session might be too resource intensive.

    If session privacy is required, the mod_session_crypto module can be used to encrypt the contents of the session before writing the session to the client.

    For more details on the session interface, see the documentation for the mod_session module.

    top

    Basic Examples

    To create a simple session and store it in a cookie called session, configure the session as follows:

    Browser based session

    Session On
    SessionCookieName session path=/

    For more examples on how the session can be configured to be read from and written to by a CGI application, see the mod_session examples section.

    For documentation on how the session can be used to store username and password details, see the mod_auth_form module.

    top

    SessionCookieName Directive

    Description:Name and attributes for the RFC2109 cookie storing the session
    Syntax:SessionCookieName name attributes
    Default:none
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_session_cookie

    The SessionCookieName directive specifies the name and optional attributes of an RFC2109 compliant cookie inside which the session will be stored. RFC2109 cookies are set using the Set-Cookie HTTP header.

    An optional list of cookie attributes can be specified, as per the example below. These attributes are inserted into the cookie as is, and are not interpreted by Apache. Ensure that your attributes are defined correctly as per the cookie specification.

    Cookie with attributes

    Session On
    SessionCookieName session path=/private;domain=example.com;httponly;secure;version=1;
    top

    SessionCookieName2 Directive

    Description:Name and attributes for the RFC2965 cookie storing the session
    Syntax:SessionCookieName2 name attributes
    Default:none
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_session_cookie

    The SessionCookieName2 directive specifies the name and optional attributes of an RFC2965 compliant cookie inside which the session will be stored. RFC2965 cookies are set using the Set-Cookie2 HTTP header.

    An optional list of cookie attributes can be specified, as per the example below. These attributes are inserted into the cookie as is, and are not interpreted by Apache. Ensure that your attributes are defined correctly as per the cookie specification.

    Cookie2 with attributes

    Session On
    SessionCookieName2 session path=/private;domain=example.com;httponly;secure;version=1;
    top

    SessionCookieRemove Directive

    Description:Control for whether session cookies should be removed from incoming HTTP headers
    Syntax:SessionCookieRemove On|Off
    Default:SessionCookieRemove Off
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_session_cookie

    The SessionCookieRemove flag controls whether the cookies containing the session will be removed from the headers during request processing.

    In a reverse proxy situation where the Apache server acts as a server frontend for a backend origin server, revealing the contents of the session cookie to the backend could be a potential privacy violation. When set to on, the session cookie will be removed from the incoming HTTP headers.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_autoindex.html.ja.utf80000644000000000000500000020165413412755316021242 0ustar rootsrc mod_autoindex - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_autoindex

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:Unix ã® ls コマンドや Win32 ã® dir シェルコマンドã«ä¼¼ãŸ ディレクトリインデックスを生æˆã™ã‚‹
    ステータス:Base
    モジュール識別å­:autoindex_module
    ソースファイル:mod_autoindex.c

    概è¦

    ディレクトリã®ã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ã¯äºŒã¤ã®æƒ…å ±æºã®ã†ã¡ã® 一ã¤ã‹ã‚‰ç”Ÿæˆã§ãã¾ã™:

    • 普通㯠index.html ã¨å‘¼ã°ã‚Œã‚‹ ユーザã«ã‚ˆã£ã¦æ›¸ã‹ã‚ŒãŸãƒ•ァイル。 DirectoryIndex ディレクティブã§ã“ã®ãƒ•ァイルåを設定ã—ã¾ã™ã€‚ ã“れ㯠mod_dir ã§åˆ¶å¾¡ã•れã¾ã™ã€‚
    • ã‚‚ã—ãã¯ã€ã‚µãƒ¼ãƒã«ã‚ˆã£ã¦ç”Ÿæˆã•れãŸä¸€è¦§ã€‚ ãã®ä»–ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§ã“ã®ä¸€è¦§ã®æ›¸å¼ã‚’制御ã—ã¾ã™ã€‚ AddIcon, AddIconByEncoding 㨠AddIconByType を使ã†ã“ã¨ã§ã€æ§˜ã€…ãªãƒ•ァイルタイプã«å¯¾ã—ã¦ã‚¢ã‚¤ã‚³ãƒ³ä¸€è¦§ã‚’ セットã—ã¾ã™ã€‚ã¤ã¾ã‚Šã€ãƒªã‚¹ãƒˆã•れãŸãƒ•ァイル毎ã«ã€ ファイルã«ãƒžãƒƒãƒã—ãŸä¸€ç•ªæœ€åˆã®ã‚¢ã‚¤ã‚³ãƒ³ãŒè¡¨ç¤ºã•れã¾ã™ã€‚ ã“れら㯠mod_autoindex ã§åˆ¶å¾¡ã•れã¾ã™ã€‚

    望むãªã‚‰ã°ã€è‡ªå‹•インデックス生æˆã‚’完全ã«é™¤åŽ» (ã‚ã‚‹ã„ã¯ç½®æ›) ã§ãるよã†ã«ã€ã“ã®äºŒã¤ã®æ©Ÿèƒ½ã¯åˆ†é›¢ã•れã¦ã„ã¾ã™ã€‚

    自動インデックス生æˆã¯ Options +Indexes を使ã†ã“ã¨ã§æœ‰åйã«ãªã‚Šã¾ã™ã€‚詳細ã«ã¤ã„ã¦ã¯ã€ Options ディレクティブをã”覧下ã•ã„。

    ã‚‚ã— FancyIndexingオプション㌠IndexOptions ディレクティブã«ä¸Žãˆã‚‰ã‚Œã¦ã„ã‚‹ãªã‚‰ã°ã€ 列ã®å…ˆé ­ã¯è¡¨ç¤ºã®é †ç•ªã‚’制御ã™ã‚‹ãƒªãƒ³ã‚¯ã«ãªã‚Šã¾ã™ã€‚ 先頭ã®ãƒªãƒ³ã‚¯ã‚’é¸æŠžã™ã‚‹ã¨ã€ä¸€è¦§ã¯å†ç”Ÿæˆã•れ㦠ãã®åˆ—ã®å€¤ã§ã‚½ãƒ¼ãƒˆã•れã¾ã™ã€‚ åŒã˜å…ˆé ­ã‚’ç¶šã‘ã¦é¸æŠžã™ã‚‹ã¨ã€äº¤äº’ã«æ˜‡é †ã¨é™é †ã¨ã«ãªã‚Šã¾ã™ã€‚ ã“れらã®åˆ—ã®å…ˆé ­ã®ãƒªãƒ³ã‚¯ã¯ã€ IndexOptions ディレクティブ㮠SuppressColumnSorting ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã§æ¶ˆã™ã“ã¨ãŒã§ãã¾ã™ã€‚

    "Size" ã§ã‚½ãƒ¼ãƒˆã—ãŸå ´åˆã¯ã€ç”¨ã„られるã®ã¯ 実際ã®ãƒ•ァイルã®ã‚µã‚¤ã‚ºã§ã‚ã£ã¦ã€ 表示ã®å€¤ã§ã¯ãªã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„ - ãŸã¨ãˆä¸¡æ–¹ã¨ã‚‚㌠"1K" ã¨è¡¨ç¤ºã•れã¦ã„ãŸã¨ã—ã¦ã‚‚〠1010 ãƒã‚¤ãƒˆã®ãƒ•ァイルã¯å¿…ãš 1011 ãƒã‚¤ãƒˆã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚ˆã‚Šã‚‚å‰ (昇順ã®å ´åˆ) ã«è¡¨ç¤ºã•れã¾ã™ã€‚

    top

    Autoindex リクエストクエリー引数

    Apache 2.0.23 ã§ã€ コラムソートã®ãŸã‚ã«ã‚¯ã‚¨ãƒªãƒ¼å¼•æ•°ã‚’å†ç·¨æˆã—ã¦ã€ æ–°ã—ã„クエリーオプションã®ã‚°ãƒ«ãƒ¼ãƒ—ã‚’å°Žå…¥ã—ã¾ã—ãŸã€‚ 出力ã«å¯¾ã™ã‚‹ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ã™ã¹ã¦ã®åˆ¶å¾¡ã‚’åŠ¹çŽ‡çš„ã«æŠ¹æ¶ˆ ã§ãるよã†ã«ã€ IndexOptions IgnoreClient ãŒå°Žå…¥ã•れã¾ã—ãŸã€‚

    コラムソートã®ãƒ˜ãƒƒãƒ€ãれ自体ãŒã€ 下記ã®ã‚½ãƒ¼ãƒˆã‚¯ã‚¨ãƒªãƒ¼ã‚ªãƒ—ションを付加ã™ã‚‹ 自分自身をå‚ç…§ã™ã‚‹ãƒªãƒ³ã‚¯ã§ã™ã€‚ 下記ã®ã‚ªãƒ—ションã®ã©ã‚Œã§ã‚‚〠ディレクトリリソースã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«åŠ ãˆã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    • C=N ã¯ã€ãƒ•ァイルåã§ã‚½ãƒ¼ãƒˆã—ã¾ã™ã€‚
    • C=M ã¯ã€æ›´æ–°æ—¥æ™‚〠ディレクトリã€ãƒ•ァイルåã®é †ã§ã‚½ãƒ¼ãƒˆã—ã¾ã™ã€‚
    • C=S ã¯ã€ã‚µã‚¤ã‚ºã€ ディレクトリã€ãƒ•ァイルåã®é †ã§ã‚½ãƒ¼ãƒˆã—ã¾ã™ã€‚
    • C=D ã¯ã€èª¬æ˜Žã€ ディレクトリã€ãƒ•ァイルåã®é †ã§ã‚½ãƒ¼ãƒˆã—ã¾ã™ã€‚
    • O=A ã¯ã€æ˜‡é †ã§è¡¨ã‚’ソートã—ã¾ã™ã€‚
    • O=D ã¯ã€é™é †ã§è¡¨ã‚’ソートã—ã¾ã™ã€‚
    • F=0 ã¯ã€å˜ç´”ãªè¡¨ã®æ›¸å¼ã«ã—ã¾ã™ã€‚ (FancyIndex ã§ã¯ã‚りã¾ã›ã‚“。)
    • F=1 ã¯ã€FancyIndex 表示ã®è¡¨ã®æ›¸å¼ã«ã—ã¾ã™ã€‚
    • F=2 ã¯ã€è¡¨ã‚’ HTML ã®ãƒ†ãƒ¼ãƒ–ルを使ã£ãŸ FancyIndex ã®æ›¸å¼ã«ã—ã¾ã™ã€‚
    • V=0 ã¯ã€ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ã‚ˆã‚‹ã‚½ãƒ¼ãƒˆã‚’無効ã«ã—ã¾ã™ã€‚
    • V=1 ã¯ã€ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ã‚ˆã‚‹ã‚½ãƒ¼ãƒˆã‚’有効ã«ã—ã¾ã™ã€‚
    • P=pattern ã¯ã€ä¸Žãˆã‚‰ã‚ŒãŸ pattern ã«é©åˆã—ãŸãƒ•ァイルã®ã¿ã‚’表示ã—ã¾ã™ã€‚

    "P (パターン㮠P)" クエリー引数ã¯ã€ 通常㮠IndexIgnore ディレクティブãŒå‡¦ç†ã•れãŸå¾Œã«æ¤œæŸ»ã•れ〠ファイルåå…¨ã¦ãŒã€ä»–ã® autoindex リスト処ç†ã¨åŒæ§˜ã®åˆ¤å®šåŸºæº–下ã«ç½®ã‹ã‚Œç¶šã‘ã‚‹ ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。 mod_autoindex ã®ã‚¯ã‚¨ãƒªãƒ¼å¼•数パーサ (è§£æž) ã¯ã€ èªè­˜ä¸èƒ½ãªã‚ªãƒ—ションã«ã¶ã¤ã‹ã‚‹ã¨å³åº§ã«åœæ­¢ã—ã¾ã™ã€‚ クエリー引数ã¯ä¸Šã®è¡¨ã«å¾“ã£ã¦ æ­£ã—ã„å½¢å¼ã«ãªã£ã¦ã„ãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    下ã®å˜ç´”ãªä¾‹ã¯ã€ã“れらã®ã‚¯ã‚¨ãƒªãƒ¼ã‚ªãƒ—ションを 表ã—ã¾ã™ã€‚ã“れをãã®ã¾ã¾åˆ‡ã‚Šå–ã£ã¦ HEADER.html ファイルã«ä¿å­˜ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ mod_autoindex ㌠X=Go 入力ã«ã¶ã¤ã‹ã‚‹å‰ã« 引数ãŒå…¨ã¦è§£é‡ˆã•れるよã†ã«ã€ 未知ã®å¼•æ•° "X" ã¯ãƒªã‚¹ãƒˆã®æœ€å¾Œã«ç½®ã‹ã‚Œã¦ã„ã¾ã™ã€‚

    <form action="" method="get">
    Show me a <select name="F">
    <option value="0"> Plain list</option>
    <option value="1" selected="selected"> Fancy list</option>
    <option value="2"> Table list</option>
    </select>
    Sorted by <select name="C">
    <option value="N" selected="selected"> Name</option>
    <option value="M"> Date Modified</option>
    <option value="S"> Size</option>
    <option value="D"> Description</option>
    </select>
    <select name="O">
    <option value="A" selected="selected"> Ascending</option>
    <option value="D"> Descending</option>
    </select>
    <select name="V">
    <option value="0" selected="selected"> in Normal order</option>
    <option value="1"> in Version order</option>
    </select>
    Matching <input type="text" name="P" value="*" />
    <input type="submit" name="X" value="Go" />
    </form>

    top

    AddAlt ディレクティブ

    説明:アイコンã®ä»£ã‚り㫠表示ã•れるã€ãƒ•ァイルåã§é¸æŠžã•れãŸä»£æ›¿ãƒ†ã‚­ã‚¹ãƒˆ
    æ§‹æ–‡:AddAlt string file [file] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    AddAlt ã¯ã€FancyIndexing ã«ãŠã„ã¦ã€ã‚¢ã‚¤ã‚³ãƒ³ã®ä»£ã‚りã«è¡¨ç¤ºã™ã‚‹ä»£æ›¿ãƒ†ã‚­ã‚¹ãƒˆã‚’æä¾›ã—ã¾ã™ã€‚ file ã¯ã€èª¬æ˜Žã™ã‚‹ãƒ•ァイルã®ãƒ•ァイル拡張å­ã€ ファイルåã®ä¸€éƒ¨ã€ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¡¨ç¾ã€å®Œå…¨ãªãƒ•ァイルåã® ã©ã‚Œã‹ã«ãªã‚Šã¾ã™ã€‚ string ã«ç©ºç™½ãŒã‚ã‚‹å ´åˆã¯å¼•用符 (" ã‹ ') ã§å›²ã‚€å¿…è¦ãŒã‚りã¾ã™ã€‚ ã“ã®æ–‡å­—列ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒç”»åƒã‚’表示ã§ããªã„å ´åˆã‚„ ç”»åƒã®ãƒ­ãƒ¼ãƒ‰ã‚’無効ã«ã—ã¦ã„ã‚‹å ´åˆã‚„ アイコンã®å–å¾—ã«å¤±æ•—ã—ãŸã¨ãã«è¡¨ç¤ºã•れã¾ã™ã€‚

    例

    AddAlt "PDF file" *.pdf
    AddAlt Compressed *.gz *.zip *.Z

    top

    AddAltByEncoding ディレクティブ

    説明:アイコンã®ä»£ã‚りã«è¡¨ç¤ºã•れるã€MIME 符å·åŒ–方法ã§é¸æŠžã•れ㟠代替テキスト
    æ§‹æ–‡:AddAltByEncoding string MIME-encoding [MIME-encoding] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    AddAltByEncoding ã¯ã€ FancyIndexing ã«ãŠã„ã¦ã€ã‚¢ã‚¤ã‚³ãƒ³ã®ä»£ã‚りã«è¡¨ç¤ºã™ã‚‹ä»£æ›¿æ–‡å­—列をæä¾›ã—ã¾ã™ã€‚ MIME-encoding ã¯æœ‰åйãªç¬¦å·åŒ–ã€ä¾‹ãˆã° x-compress ã§ã™ã€‚ string ã«ç©ºç™½ãŒã‚ã‚‹ã¨ãã¯ã€å¼•用符 (" ã‹ ') ã§å›²ã‚€å¿…è¦ãŒã‚りã¾ã™ã€‚ ã“ã®æ–‡å­—列ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒç”»åƒã‚’表示ã§ããªã„å ´åˆã‚„ ç”»åƒã®ãƒ­ãƒ¼ãƒ‰ã‚’無効ã«ã—ã¦ã„ã‚‹å ´åˆã‚„ アイコンã®å–å¾—ã«å¤±æ•—ã—ãŸã¨ãã«è¡¨ç¤ºã•れã¾ã™ã€‚

    例

    AddAltByEncoding gzip x-gzip

    top

    AddAltByType ディレクティブ

    説明:アイコンã®ä»£ã‚り㫠表示ã•れるã€MIME タイプã§é¸æŠžã•れãŸä»£æ›¿ãƒ†ã‚­ã‚¹ãƒˆ
    æ§‹æ–‡:AddAltByType string MIME-type [MIME-type] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    AddAltByType ã¯ã€ FancyIndexing ã«ãŠã„ã¦ã€ã‚¢ã‚¤ã‚³ãƒ³ã®ä»£ã‚りã«è¡¨ç¤ºã™ã‚‹ä»£æ›¿æ–‡å­—列を設定ã—ã¾ã™ã€‚ MIME-type ã¯æœ‰åйãªã‚¿ã‚¤ãƒ—ã€ä¾‹ãˆã° text/html ã§ã™ã€‚ string ã«ç©ºç™½ãŒã‚ã‚‹ã¨ãã¯ã€å¼•用符 (" ã‹ ') ã§å›²ã‚€å¿…è¦ãŒã‚りã¾ã™ã€‚ ã“ã®æ–‡å­—列ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒç”»åƒã‚’表示ã§ããªã„å ´åˆã‚„ ç”»åƒã®ãƒ­ãƒ¼ãƒ‰ã‚’無効ã«ã—ã¦ã„ã‚‹å ´åˆã‚„ アイコンã®å–å¾—ã«å¤±æ•—ã—ãŸã¨ãã«è¡¨ç¤ºã•れã¾ã™ã€‚

    例

    AddAltByType 'plain text' text/plain

    top

    AddDescription ディレクティブ

    説明:ファイルã«å¯¾ã—ã¦è¡¨ç¤ºã™ã‚‹èª¬æ˜Ž
    æ§‹æ–‡:AddDescription string file [file] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    FancyIndexing ã«ãŠã„ã¦ã€ãƒ•ァイルã«å¯¾ã—ã¦è¡¨ç¤ºã™ã‚‹èª¬æ˜Žã‚’設定ã—ã¾ã™ã€‚ file ã¯èª¬æ˜Žã™ã‚‹ãƒ•ァイルã®ãƒ•ァイル拡張å­ã€ ファイルåã®ä¸€éƒ¨ã€ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¡¨ç¾ã€å®Œå…¨ãªãƒ•ァイルåã® ã©ã‚Œã‹ã«ãªã‚Šã¾ã™ã€‚ string ã¯äºŒé‡å¼•用符 (") ã§å›²ã¾ã‚Œã¾ã™ã€‚

    例

    AddDescription "The planet Mars" /web/pics/mars.gif

    通常ã®ãƒ‡ãƒ•ォルトã®èª¬æ˜Žé ˜åŸŸã¯ 23 ãƒã‚¤ãƒˆã®å¹…ã§ã™ã€‚ IndexOptions SuppressIcon オプション㧠6 ãƒã‚¤ãƒˆè¿½åŠ ã€ IndexOptions SuppressSize オプション㧠7 ãƒã‚¤ãƒˆè¿½åŠ ã€ IndexOptions SuppressLastModified オプション㧠19 ãƒã‚¤ãƒˆè¿½åŠ ã•れã¾ã™ã€‚ ã§ã™ã‹ã‚‰ã€ãƒ‡ãƒ•ォルトã®èª¬æ˜Žã‚³ãƒ©ãƒ ã®æœ€å¤§å¹…㯠55 ãƒã‚¤ãƒˆã«ãªã‚Šã¾ã™ã€‚

    ã“ã®ã‚³ãƒ©ãƒ ã®å¤§ãã•を上書ãã—ãŸã‚Šã€ 説明ãŒç„¡åˆ¶é™é•·ã§ã‚‚よã„よã†ã«ã™ã‚‹ãŸã‚ã®è©³ç´°ã«é–¢ã—ã¦ã¯ã€ DescriptionWidth ã¨ã„ㆠIndexOptions ã®ã‚­ãƒ¼ãƒ¯ãƒ¼ãƒ‰ã‚’ã”覧下ã•ã„。

    警告

    AddDescription ã§å®šç¾©ã•れãŸèª¬æ˜Žãƒ†ã‚­ã‚¹ãƒˆã¯ã€ã‚¿ã‚°ã‚„文字列ã¨ã„ã£ãŸ HTML マークアップをå«ã‚€ã“ã¨ãŒã§ãã¾ã™ã€‚ ã‚‚ã—ã€èª¬æ˜Žã‚³ãƒ©ãƒ ã®å¹…ã«ã‚ˆã£ã¦ã‚¿ã‚°ä»˜ã‘ã•れãŸè¦ç´ ãŒä¸¸ã‚è¾¼ã¾ã‚ŒãŸ (太字ã®èªžå¥ã®æœ€å¾ŒãŒåˆ‡ã‚Œã‚‹ã¨ã„ã£ãŸ) å ´åˆã€ å‡ºåŠ›çµæžœã¯ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªä¸€è¦§ã®æ®‹ã‚Šã®éƒ¨åˆ†ã«å½±éŸ¿ã‚’与ãˆã‚‹ã§ã—ょã†ã€‚

    top

    AddIcon ディレクティブ

    説明:ファイルã«è¡¨ç¤ºã™ã‚‹ã‚¢ã‚¤ã‚³ãƒ³ã‚’åå‰ã§é¸æŠž
    æ§‹æ–‡:AddIcon icon name [name] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    FancyIndexing ã«ãŠã„ã¦ã€ name ã§çµ‚ã‚るファイルã®éš£ã«è¡¨ç¤ºã™ã‚‹ã‚¢ã‚¤ã‚³ãƒ³ã‚’設定ã—ã¾ã™ã€‚ icon ã¯ã€(% ã§ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã•れãŸ) アイコンã¸ã®ç›¸å¯¾ URL ã‹ã€ä»–ã®æ›¸å¼ (alttext, url) ã§ã™ã€‚ ã“ã“ã§ alttext ã¯ã€éžã‚°ãƒ©ãƒ•ィカルブラウザå‘ã‘ã«ã‚¢ã‚¤ã‚³ãƒ³ã«ä»˜ã‘られãŸãƒ†ã‚­ã‚¹ãƒˆã‚¿ã‚°ã§ã™ã€‚

    name ã¯ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«å¯¾å¿œã™ã‚‹ ^^DIRECTORY^^ ã‹ã€ç©ºç™½è¡Œã«å¯¾å¿œã™ã‚‹ ^^BLANKICON^^ (ä¸€è¦§ãŒæ­£ã—ã表示ã•れるãŸã‚ã«) ã‹ã€ ファイル拡張å­ã‹ã€ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¡¨ç¾ã‹ã€ãƒ•ァイルåã®ä¸€éƒ¨ã‹ 完全ãªãƒ•ァイルåã§ã™ã€‚

    例

    AddIcon (IMG,/icons/image.xbm) .gif .jpg .xbm
    AddIcon /icons/dir.xbm ^^DIRECTORY^^
    AddIcon /icons/backup.xbm *~

    ã‚‚ã—å¯èƒ½ãªã‚‰ã€ AddIcon より AddIconByType を優先的ã«ä½¿ã†ã¹ãã§ã—ょã†ã€‚

    top

    AddIconByEncoding ディレクティブ

    説明:ファイルã«è¡¨ç¤ºã™ã‚‹ã‚¢ã‚¤ã‚³ãƒ³ã‚’ MIME 符å·åŒ–方法ã§é¸æŠž
    æ§‹æ–‡:AddIconByEncoding icon MIME-encoding [MIME-encoding] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    FancyIndexing ã«ãŠã„ã¦ã€ãƒ•ァイルã®éš£ã«è¡¨ç¤ºã™ã‚‹ã‚¢ã‚¤ã‚³ãƒ³ã‚’設定ã—ã¾ã™ã€‚ icon ã¯ã€(% ã§ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã•れãŸ) アイコンã¸ã®ç›¸å¯¾ URL ã‹ã€ä»–ã®æ›¸å¼ (alttext, url) ã§ã™ã€‚ ã“ã“ã§ alttext ã¯ã€éžã‚°ãƒ©ãƒ•ィカルブラウザå‘ã‘ã«ã‚¢ã‚¤ã‚³ãƒ³ã«ä»˜ã‘られãŸãƒ†ã‚­ã‚¹ãƒˆã‚¿ã‚°ã§ã™ã€‚

    MIME-encoding ã¯ã€æœ‰åйãªã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã€ 例ãˆã° x-compressã§ã™ã€‚

    例

    AddIconByEncoding /icons/compress.xbm x-compress

    top

    AddIconByType ディレクティブ

    説明:ファイルã®éš£ã«è¡¨ç¤ºã™ã‚‹ã‚¢ã‚¤ã‚³ãƒ³ã‚’ MIME タイプã«ã‚ˆã£ã¦é¸æŠž
    æ§‹æ–‡:AddIconByType icon MIME-type [MIME-type] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    FancyIndexing ã«ãŠã„ã¦ã€ãƒ•ァイルã®éš£ã«è¡¨ç¤ºã™ã‚‹ã‚¢ã‚¤ã‚³ãƒ³ã‚’設定ã—ã¾ã™ã€‚ icon ã¯ã€(% ã§ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã•れãŸ) アイコンã¸ã®ç›¸å¯¾ URL ã‹ã€ä»–ã®æ›¸å¼ (alttext, url) ã§ã™ã€‚ ã“ã“ã§ alttext ã¯ã€éžã‚°ãƒ©ãƒ•ィカルブラウザå‘ã‘ã«ã‚¢ã‚¤ã‚³ãƒ³ã«ä»˜ã‘られãŸãƒ†ã‚­ã‚¹ãƒˆã‚¿ã‚°ã§ã™ã€‚

    MIME-type ã¯ã€è¦æ±‚ã•れãŸã‚¿ã‚¤ãƒ—ã«è©²å½“ã™ã‚‹ ワイルドカード表ç¾ã§ã™ã€‚

    例

    AddIconByType (IMG,/icons/image.xbm) image/*

    top

    DefaultIcon ディレクティブ

    説明:特定ã®ã‚¢ã‚¤ã‚³ãƒ³ãŒä½•も設定ã•れã¦ã„ãªã„時㫠ファイルã«è¡¨ç¤ºã™ã‚‹ã‚¢ã‚¤ã‚³ãƒ³
    æ§‹æ–‡:DefaultIcon url-path
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    FancyIndexing ã«ãŠã„ã¦ã€ 特定ã®ã‚¢ã‚¤ã‚³ãƒ³ãŒãªã„å ´åˆã«ãƒ•ァイルã«è¡¨ç¤ºã™ã‚‹ã‚¢ã‚¤ã‚³ãƒ³ã‚’設定ã—ã¾ã™ã€‚ url-path ã¯ã€(% ã§ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã•れãŸ) アイコンã¸ã®ç›¸å¯¾ URL ã§ã™ã€‚

    例

    DefaultIcon /icon/unknown.xbm

    top

    HeaderName ディレクティブ

    説明: インデックス一覧ã®å…ˆé ­ã«æŒ¿å…¥ã•れるファイルã®åå‰
    æ§‹æ–‡:HeaderName filename
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    HeaderName ディレクティブã¯ã€ インデックス一覧ã®å…ˆé ­ã«æŒ¿å…¥ã™ã‚‹ãƒ•ァイルã®åå‰ã‚’設定ã—ã¾ã™ã€‚ Filename ã¯å–り込むファイルã®åå‰ã§ã™ã€‚

    例

    HeaderName HEADER.html

    HeaderName ã‚‚ ReadmeName も両方ã¨ã‚‚ç¾åœ¨ã¯ã€filename をインデックスã•れã¦ã„るディレクトリã«ç”¨ã„られ㟠URI ã«å¯¾ã™ã‚‹ç›¸å¯¾ URI パスã¨ã—ã¦æ‰±ã„ã¾ã™ã€‚ filename ãŒã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§å§‹ã¾ã‚‹å ´åˆã¯ã€ DocumentRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ãªã‚Šã¾ã™ã€‚

    例

    HeaderName /include/HEADER.html

    filename 㯠メジャーコンテントタイプ㌠"text/*" (例ãˆã°ã€text/html, text/plain ç­‰ã§ã™ã€‚) ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã¨ã—ã¦è§£æ±º ã•れãªã‘れã°ãªã‚Šã¾ã›ã‚“。ã“れã¯ã¤ã¾ã‚Šã€ ã‚‚ã— CGI スクリプトã®å®Ÿéš›ã®ãƒ•ァイルタイプ㌠次ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®ã‚ˆã†ã«ã—ã¦å®Ÿéš›ã®å‡ºåŠ›ã¨ã¯ç•°ãªã£ã¦ text/html ã¨ã—ã¦ãƒžãƒ¼ã‚¯ã•れã¦ã„ã‚‹å ´åˆã€ filename 㯠CGI スクリプトをå‚ç…§ã™ã‚‹ã‹ã‚‚知れãªã„〠ã¨ã„ã†ã“ã¨ã‚’æ„味ã—ã¾ã™:

    AddType text/html .cgi

    Options MultiViews ㌠有効ã«ãªã£ã¦ã„ã‚‹å ´åˆã¯ã€ コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ ãŒè¡Œãªã‚れã¾ã™ã€‚ ã‚‚ã— filename ㌠(CGI スクリプトã§ãªã„) é™çš„㪠text/html ドキュメントã§è§£æ±ºã•れ〠options Includes ã‹ IncludesNOEXEC ãŒæœ‰åйã«ãªã£ã¦ã„ã‚‹å ´åˆã¯ã€ ファイルã¯ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ã‚¤ãƒ³ã‚¯ãƒ«ãƒ¼ãƒ‰ã§å‡¦ç†ã•れã¾ã™ (mod_include ドキュメントをå‚ç…§ã—ã¦ä¸‹ã•ã„)。

    ã‚‚ã— HeaderName ã§æŒ‡å®šã•れãŸãƒ•ァイル㌠HTML ドキュメントã®é–‹å§‹éƒ¨åˆ† (<html>, <head>, ç­‰) ã‚’å«ã‚“ã§ã„ãŸã‚‰ã€ IndexOptions +SuppressHTMLPreamble を設定ã—ã¦ã€ã“れらã®ã‚¿ã‚°ãŒç¹°ã‚Šè¿”ã•れãªã„よã†ã«ã—ãŸã„ã¨æ€ã†ã§ã—ょã†ã€‚

    top

    IndexHeadInsert ディレクティブ

    説明:インデックスページ㮠HEAD セクションã«ãƒ†ã‚­ã‚¹ãƒˆã‚’挿入ã™ã‚‹
    æ§‹æ–‡:IndexHeadInsert "markup ..."
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    IndexHeadInsert ディレクティブを使ã£ã¦ インデックスã¨ã—ã¦ç”Ÿæˆã•れãŸHTMLã® <head> セクション㫠挿入ã™ã‚‹æ–‡å­—列を指定ã—ã¾ã™ã€‚

    Example

    IndexHeadInsert "<link rel=\"sitemap\" href=\"/sitemap.html\">"

    top

    IndexIgnore ディレクティブ

    説明:ディレクトリ一覧を行ãªã†éš›ã«ç„¡è¦–ã™ã¹ã ファイルリストã«è¿½åŠ 
    æ§‹æ–‡:IndexIgnore file [file] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    IndexIgnore ディレクティブã¯ã€ ディレクトリã®ä¸€è¦§ã‚’行ã†éš›ã«ç„¡è¦–ã™ã¹ãファイルリストã«è¿½åŠ ã—ã¾ã™ã€‚ file ã¯ã€ シェル形å¼ã®ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¡¨ç¾ã‹å®Œå…¨ãªãƒ•ァイルåã§ã™ã€‚ IndexIgnore ãŒè¤‡æ•°ã‚ã‚‹å ´åˆã¯ã€ç„¡è¦–ã™ã‚‹ãƒªã‚¹ãƒˆã«è¿½åŠ ãŒè¡Œã‚れ〠置æ›ã¯è¡Œã‚れã¾ã›ã‚“。デフォルトã§ã¯ãƒªã‚¹ãƒˆã«ã¯ . (カレントディレクトリ) ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚

    IndexIgnore README .htaccess *.bak *~

    top

    IndexIgnoreReset ディレクティブ

    説明:Empties the list of files to hide when listing a directory
    æ§‹æ–‡:IndexIgnoreReset ON|OFF
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex
    äº’æ›æ€§:2.3.10 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    IndexOptions ディレクティブ

    説明:ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ã®æ§˜ã€…ãªè¨­å®šé …ç›®
    æ§‹æ–‡:IndexOptions [+|-]option [[+|-]option] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    IndexOptions ã¯ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ã®æŒ™å‹•を指定ã—ã¾ã™ã€‚ option ã¯æ¬¡ã®ã©ã‚Œã‹ã§ã™:

    Charset=character-set (Apache 2.0.61 以é™)
    Charset キーワードã§ã€ 生æˆã•ã‚Œã‚‹ãƒšãƒ¼ã‚¸ã®æ–‡å­—セットを指定ã§ãã¾ã™ã€‚ 下ä½ã®ãƒ•ァイルシステム㌠Unicode ベースã‹ã©ã†ã‹ã«ä¾å­˜ã—ã¾ã™ãŒã€ デフォルト値㯠ISO-8859-1 ã‹ UTF-8 ã«ãªã‚Šã¾ã™ã€‚

    Example:

    IndexOptions Charset=UTF-8

    Type=MIME content-type (Apache 2.0.61 以é™)
    Type キーワードã§ã€ 生æˆã•れるページ㮠MIME コンテントタイプを指定ã§ãã¾ã™ã€‚ デフォルト値㯠text/html ã«ãªã‚Šã¾ã™ã€‚

    Example:

    IndexOptions Type=text/plain

    DescriptionWidth=[n | *] (2.0.23 以é™)
    DescriptionWidth キーワードã¯èª¬æ˜Žã‚³ãƒ©ãƒ ã®å¹…ã‚’æ–‡å­—æ•°ã§æŒ‡å®šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
    -DescriptionWidth (ã¾ãŸã¯éžè¨­å®š) ã§ã€ mod_autoindex ãŒæœ€é©ãªå¹…を計算ã™ã‚‹ã‚ˆã†ã«ã§ãã¾ã™ã€‚
    DescriptionWidth=n ã§ã€ã‚³ãƒ©ãƒ å¹…ã‚’ n ãƒã‚¤ãƒˆã«å›ºå®šã—ã¾ã™ã€‚
    DescriptionWidth=* ã¯ã€æœ€é•·ã®èª¬æ˜Žã«åˆã‚ã›ã¦å¿…è¦ãªé•·ã•ã¾ã§ã‚³ãƒ©ãƒ ã‚’å»¶ã°ã—ã¾ã™ã€‚
    説明を丸ã‚込んã å ´åˆç‰¹æœ‰ã®å±é™ºã«ã¤ã„ã¦ã¯ AddDescription セクションをãŠèª­ã¿ä¸‹ã•ã„。
    FancyIndexing
    飾り付ãインデックスをオンã«ã—ã¾ã™ã€‚
    FoldersFirst (2.0.23 以é™)
    ã“ã®ã‚ªãƒ—ã‚·ãƒ§ãƒ³ãŒæœ‰åйã«ãªã£ãŸå ´åˆã€ã‚µãƒ–ディレクトリã®ä¸€è¦§ã¯ å¿…ãšæœ€åˆã«ç¾ã‚れã¦ã€é€šå¸¸ã®ãƒ•ァイルã¯ãã®å¾Œã«ç¶šãã¾ã™ã€‚ 一覧ã¯åŸºæœ¬çš„ã«ã¯ã€ãƒ•ァイルã¨ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®äºŒã¤ã®éƒ¨åˆ†ã«åˆ†ã‘られã¦ã€ ãれãžã‚Œã¯åˆ¥ã€…ã«ã‚½ãƒ¼ãƒˆã•れã€ãã®å¾Œã‚µãƒ–ディレクトリを先ã«ã—㦠表示ãŒè¡Œãªã‚れã¾ã™ã€‚例ãˆã°ã‚½ãƒ¼ãƒˆé †ãŒåå‰ã®é™é †ã«ãªã£ã¦ã„ã¦ã€ FoldersFirst ãŒæœ‰åйã«ãªã£ã¦ã„ã‚‹å ´åˆã¯ã€ サブディレクトリ Zed ã¯ã‚µãƒ–ディレクトリ Beta よりもå‰ã«ãƒªã‚¹ãƒˆã•れã€é€šå¸¸ã®ãƒ•ァイル Gamma ã‚„ Alpha よりもå‰ã«ãƒªã‚¹ãƒˆã•れã¾ã™ã€‚ã“ã®ã‚ªãƒ—ション㯠FancyIndexing も有効ã«ãªã£ã¦ã„ã‚‹ã¨ãã«ã®ã¿æœ‰åйã§ã™ã€‚
    HTMLTable (実験的〠Apache 2.0.23 以é™)
    ã“ã®å®Ÿé¨“çš„ãªã‚ªãƒ—ション㯠FancyIndexing ã¨ã¨ã‚‚ã«æŒ‡å®šã™ã‚‹ã“ã¨ã§ã€ 飾りã®ä»˜ã„ãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªä¸€è¦§ã®ãŸã‚ã«ãƒ†ãƒ¼ãƒ–ルを使ã£ãŸå˜ç´”ãªè¡¨ã‚’作りã¾ã™ã€‚ ã“れã¯å¤ã„ブラウザを混乱ã•ã›ã‚‹ã‹ã‚‚ã—れãªã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。 WinNT ã‚„ãã®ä»– utf-8 ãŒæœ‰åйãªãƒ—ラットホームã®ã‚ˆã†ã«ã€ãƒ•ァイルåや説明テキスト㌠å³èª­ã¿ã«ãªã£ãŸã‚Šå·¦èª­ã¿ã«ãªã‚Šãˆã‚‹å ´åˆã¯ç‰¹ã«å¿…è¦ã§ã™ã€‚
    IconsAreLinks
    ã“れã¯ã€FancyIndexing ã«ãŠã„ã¦ã€ アイコンもファイルåã¸ã®ãƒªãƒ³ã‚¯ã®ä¸€éƒ¨ã«ã—ã¾ã™ã€‚
    IconHeight[=pixels]
    ã“ã®ã‚ªãƒ—ションãŒã€IconWidth ã¨ã¨ã‚‚㫠使ã‚れã¦ã„ã‚‹å ´åˆã¯ã€ã‚µãƒ¼ãƒã¯ãƒ•ァイルアイコンã®ãŸã‚ã® img ã‚¿ã‚°ã« height 㨠width 属性をå–り込むよã†ã«ãªã‚Šã¾ã™ã€‚ ã“れã«ã‚ˆã£ã¦ã€ã‚¤ãƒ¡ãƒ¼ã‚¸å…¨ã¦ã‚’ロードã—終ã‚ã‚‹ã¾ã§å¾…ãŸãªãã¦ã‚‚〠ブラウザã¯ãƒšãƒ¼ã‚¸ãƒ¬ã‚¤ã‚¢ã‚¦ãƒˆã‚’ã‚らã‹ã˜ã‚計算ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã®ã‚ªãƒ—ションã«ä½•も値ãŒä¸Žãˆã‚‰ã‚Œãªã‘れã°ã€Apache ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§æä¾›ã•れã¦ã„ã‚‹ã‚¢ã‚¤ã‚³ãƒ³ã®æ¨™æº–ã®é«˜ã•㌠デフォルトãªã‚Šã¾ã™ã€‚
    IconWidth[=pixels]
    ã“ã®ã‚ªãƒ—ションãŒã€IconHeight ã¨ã¨ã‚‚ã«ä½¿ã‚れã¦ã„ã‚‹å ´åˆã¯ã€ サーãƒã¯ãƒ•ァイルアイコンã®ãŸã‚ã® img ã‚¿ã‚°ã« height 㨠width 属性をå–り込むよã†ã«ãªã‚Šã¾ã™ã€‚ ã“れã«ã‚ˆã£ã¦ã€ã‚¤ãƒ¡ãƒ¼ã‚¸å…¨ã¦ã‚’ロードã—終ã‚ã‚‹ã¾ã§å¾…ãŸãªãã¦ã‚‚〠ブラウザã¯ãƒšãƒ¼ã‚¸ãƒ¬ã‚¤ã‚¢ã‚¦ãƒˆã‚’ã‚らã‹ã˜ã‚計算ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã®ã‚ªãƒ—ションã«ä½•も値ãŒä¸Žãˆã‚‰ã‚Œãªã‘れã°ã€Apache ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§æä¾›ã•れã¦ã„ã‚‹ã‚¢ã‚¤ã‚³ãƒ³ã®æ¨™æº–ã®é«˜ã•㌠デフォルトãªã‚Šã¾ã™ã€‚
    IgnoreCase
    ã“ã®ã‚ªãƒ—ã‚·ãƒ§ãƒ³ãŒæœ‰åйã§ã‚ã‚‹ã¨ã€ãƒ•ァイルåã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã«ã‚½ãƒ¼ãƒˆã•れã¾ã™ã€‚ 例ãˆã°ãƒ•ァイルåãŒæ˜‡é †ã§ã‚½ãƒ¼ãƒˆã•れã€IgnoreCase ãŒæœ‰åйã§ã‚れã°ã€ Zeta 㯠alfa ã®å¾Œã«ãƒªã‚¹ãƒˆã•れã¾ã™ (注æ„: GAMMA ã¯å¸¸ã« gamma ã®å‰ã«ãªã‚Šã¾ã™)。
    IgnoreClient
    ã“ã®ã‚ªãƒ—ション㧠mod_autoindex ã¯ã€ クライアントã‹ã‚‰ã®å…¨ã¦ã®ã‚¯ã‚¨ãƒªãƒ¼å¤‰æ•°ã‚’無視ã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ ã“れã¯ã‚½ãƒ¼ãƒˆé †ã‚‚å«ã¿ã¾ã™ã€‚ (ã¤ã¾ã‚Š SuppressColumnSorting も有効ã«ãªã‚Šã¾ã™ã€‚)
    NameWidth=[n | *]
    NameWidth キーワードã§ãƒ•ァイルåコラムã®å¹…ã‚’ãƒã‚¤ãƒˆæ•°ã§ 指定ã§ãã¾ã™ã€‚
    -NameWidth (ã¾ãŸã¯éžè¨­å®š) ã§ã€ mod_autoindex ãŒæœ€é©ãªå¹…を計算ã™ã‚‹ã‚ˆã†ã«ã§ãã¾ã™ã€‚
    NameWidth=n ã§ã€ã‚³ãƒ©ãƒ å¹…ã‚’ n ãƒã‚¤ãƒˆã«å›ºå®šã—ã¾ã™ã€‚
    NameWidth=* ã¯ã€å¿…è¦ãªé•·ã•ã¾ã§ã‚³ãƒ©ãƒ ã‚’å»¶ã°ã—ã¾ã™ã€‚
    ScanHTMLTitles
    FancyIndexing ã®ãŸã‚ã«ã€ HTML ドキュメントã‹ã‚‰ã‚¿ã‚¤ãƒˆãƒ«ã‚’å–り出ã™ã“ã¨ã‚’å¯èƒ½ã«ã—ã¾ã™ã€‚ ã‚‚ã—ファイル㫠AddDescription ã§èª¬æ˜ŽãŒä¸Žãˆã‚‰ã‚Œã¦ã„ãªã‘れã°ã€ httpd 㯠title ã‚¿ã‚°ã®å€¤ã‚’読むãŸã‚ã«ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’読ã¿å§‹ã‚ã¾ã™ã€‚ ã“れ㯠CPU ã‚„ disk ã«è² è·ã‚’ã‹ã‘ã¾ã™ã€‚
    ShowForbidden
    通常 Apache ã¯ã‚µãƒ–リクエストã®çµæžœãŒHTTP_UNAUTHORIZED ã‚„ HTTP_FORBIDDEN ã®ãƒ•ァイルã¯ä¸€è¦§ã«è¡¨ç¤ºã—ã¾ã›ã‚“。 ã“ã®ã‚ªãƒ—ションを指定ã™ã‚‹ã¨ã€ãã®ã‚ˆã†ãªãƒ•ァイルも一覧ã«è¡¨ç¤ºã—ã¾ã™ã€‚
    SuppressColumnSorting
    ã‚‚ã—æŒ‡å®šã•れã¦ã„れã°ã€Apache 㯠FancyIndexing ã§è¡¨ç¤ºã•れã¦ã„るディレクトリ一覧ã§ã® コラムã®å…ˆé ­ã‚’ã€ã‚½ãƒ¼ãƒˆã®ãŸã‚ã®ãƒªãƒ³ã‚¯ã«ã—ãªããªã‚Šã¾ã™ã€‚ ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®æŒ™å‹•ã¯ã€ãƒªãƒ³ã‚¯ã¨ã—ã¾ã™ã€‚ コラムã®å…ˆé ­ã‚’é¸ã¶ã¨ã‚³ãƒ©ãƒ ã®å€¤ã«å¾“ã£ã¦ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒªã‚¹ãƒˆã‚’ ソートã—ã¾ã™ã€‚ Apache 2.0.23 以å‰ã§ã¯ã€ã“れã¯åŒæ™‚㫠ソート文字列ã®ãŸã‚ã®ã‚¯ã‚¨ãƒªãƒ¼å¼•æ•°ã®è§£æžã‚‚無効ã«ã—ã¾ã™ã€‚ ã“ã®æŒ™å‹•㯠Apache 2.0.23 ã§ã¯ IndexOptions IgnoreClient ã§åˆ¶å¾¡ã•れるよã†ã«ãªã£ã¦ã„ã¾ã™ã€‚
    SuppressDescription
    ã“れ㯠FancyIndexing ã«ãŠã‘るファイルã®èª¬æ˜Žã‚’消去ã—ã¾ã™ã€‚ デフォルトã§ã¯ã€èª¬æ˜Žã¯å®šç¾©ã•れã¦ãŠã‚‰ãšã€ ã“ã®ã‚ªãƒ—ションを使ã†ã¨ä»–ã®ãŸã‚ã« 23 文字ã®ç©ºç™½ã‚’稼ãã“ã¨ãŒã§ãã¾ã™ã€‚ ファイルã®èª¬æ˜Žã«é–¢ã™ã‚‹æƒ…å ±ã¯ã€ AddDescription ã‚’ã”覧下ã•ã„。ã¾ãŸã€èª¬æ˜Žã®ã‚³ãƒ©ãƒ ã‚µã‚¤ã‚ºã‚’制é™ã™ã‚‹ DescriptionWidth インデックスオプションもã”覧下ã•ã„。
    SuppressHTMLPreamble
    通常〠HeaderName ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã—ãŸãƒ•ァイルを ディレクトリãŒå®Ÿéš›ã«å«ã‚“ã§ã„れã°ã€æ¨™æº–的㪠HTML プリアンブル (<html>, <head>, ç­‰) ã®å¾Œã«ã€ モジュールã¯ãƒ•ァイルã®ä¸­èº«ã‚’インクルードã—ã¾ã™ã€‚ SuppressHTMLPreamble オプションã¯ã€ ã“ã®æŒ™å‹•を無効ã«ã§ãã¦ã€ モジュールãŒãƒ˜ãƒƒãƒ€ãƒ¼ãƒ•ァイルã®ä¸­èº«ã‹ã‚‰è¡¨ç¤ºã‚’å§‹ã‚ã¾ã™ã€‚ ã“ã®å ´åˆã€ãƒ˜ãƒƒãƒ€ãƒ¼ãƒ•ã‚¡ã‚¤ãƒ«ã¯æ­£ã—ã„ HTML 命令をå«ã‚“ã§ã„ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 ヘッダーファイルãŒå­˜åœ¨ã—ãªã„å ´åˆã¯ã€ãƒ—リアンブルã¯é€šå¸¸é€šã‚Š ç”Ÿæˆã•れã¾ã™ã€‚
    SuppressIcon (Apache 2.0.23 以é™)
    ã“れ㯠FancyIndexing ã®ä¸€è¦§ã‹ã‚‰ã‚¢ã‚¤ã‚³ãƒ³ã‚’消去ã—ã¾ã™ã€‚ SuppressIcon 㨠SuppressRules ã¨çµ„åˆã‚ã›ã‚‹ã“ã¨ã«ã‚ˆã£ã¦æ­£ã—ã„ HTML 3.2 ã®å‡ºåŠ›ãŒå¾—られã¾ã™ã€‚ HTML 3.2 ã®æœ€çµ‚è¦æ ¼ã¯ã€ img 㨠hr ㌠pre ブロックã«å…¥ã‚‹ (FancyIndexing ä¸€è¦§ã§æ›¸å¼ã«ä½¿ã‚れã¦ã„ã¾ã™) ã“ã¨ã‚’ç¦æ­¢ã—ã¦ã„ã¾ã™ã€‚
    SuppressLastModified
    FancyIndexing 一覧ã«ãŠã„ã¦æœ€çµ‚更新日時ã®è¡¨ç¤ºã‚’消去ã—ã¾ã™ã€‚
    SuppressRules (Apache 2.0.23 以é™)
    ディレクトリ一覧ã«ãŠã„ã¦æ°´å¹³åŒºåˆ‡ã‚Šç·š (hr ã‚¿ã‚°) を消去ã—ã¾ã™ã€‚ SuppressIcon 㨠SuppressRules ã¨çµ„åˆã‚ã›ã‚‹ã“ã¨ã«ã‚ˆã£ã¦æ­£ã—ã„ HTML 3.2 ã®å‡ºåŠ›ãŒå¾—られã¾ã™ã€‚ HTML 3.2 ã®æœ€çµ‚è¦æ ¼ã¯ã€ img 㨠hr ㌠pre ブロックã«å…¥ã‚‹ (FancyIndexing ä¸€è¦§ã§æ›¸å¼ã«ä½¿ã‚れã¦ã„ã¾ã™) ã“ã¨ã‚’ç¦æ­¢ã—ã¦ã„ã¾ã™ã€‚
    SuppressSize
    FancyIndexing 一覧ã«ãŠã„ã¦ãƒ•ァイルサイズã®è¡¨ç¤ºã‚’消去ã—ã¾ã™ã€‚
    TrackModified (Apache 2.0.23 以é™)
    ã“れ㯠HTTP ヘッダ中ã«ã€ ディレクトリ㮠Last-Modified ã‚„ ETag ã‚’å«ã‚ã¾ã™ã€‚ ã“れã¯ã€ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ã‚„ファイルシステム㌠é©åˆ‡ãª stat() ã®è¿”り値を返ã™å ´åˆã«ã®ã¿æœ‰åйã§ã™ã€‚ ã„ãã¤ã‹ã® UNIX システムã€OS2 ã® JFS ã‚„ Win32 ã® NTFS ボリュームã¯ãã†ãªã£ã¦ã„ã¾ã™ã€‚ 例ãˆã°ã€OS2 㨠Win32 FAT ボリュームã¯ãã†ã§ã¯ã‚りã¾ã›ã‚“。 ã“ã®æ©Ÿèƒ½ãŒæœ‰åйã«ãªã‚‹ã¨ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚„プロキシ㯠HEAD リクエストを行ã†ã“ã¨ã«ã‚ˆã£ã¦ã€ ファイル一覧ã®å¤‰åŒ–を追跡ã™ã‚‹ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ オペレーティングシステムã«ã‚ˆã£ã¦ã¯ã€æ–°è¦ãƒ•ァイルや ç§»å‹•ãƒ•ã‚¡ã‚¤ãƒ«ã¯æ­£ã—ã追跡ã™ã‚‹ã‘れã©ã‚‚〠ディレクトリ中ã®ãƒ•ァイルã®ã‚µã‚¤ã‚ºã‚„日付ã¯è¿½è·¡ã—ãªã„ã¨ã„ã†ã“ã¨ã« 注æ„ã—ã¦ãã ã•ã„。 æ—¢ã«å­˜åœ¨ã™ã‚‹ãƒ•ァイルã®ã‚µã‚¤ã‚ºã‚„日付ã®ã‚¹ã‚¿ãƒ³ãƒ—ãŒå¤‰åŒ–ã—ã¦ã‚‚〠全ã¦ã® Unix プラットホームã§ã¯ã€ Last-Modified ヘッダーを更新ã—ã¾ã›ã‚“。 ã‚‚ã—ã“れãŒé‡è¦ã§ã‚れã°ã€ ã“ã®ã‚ªãƒ—ションを無効ã®ã¾ã¾ã«ã—ã¦ãã ã•ã„。
    VersionSort (Apache 2.0a3 以é™)
    VersionSort キーワードã¯ãƒãƒ¼ã‚¸ãƒ§ãƒ³ç•ªå·ã‚’å«ã‚“ã ãƒ•ã‚¡ã‚¤ãƒ«ãŒ è‡ªç„¶ãªæ–¹æ³•ã§ã‚½ãƒ¼ãƒˆã•れるよã†ã«ã—ã¾ã™ã€‚ 文字列ã¯é€šå¸¸é€šã‚Šã‚½ãƒ¼ãƒˆã•れ〠ãれ以外ã®ã€èª¬æ˜Žã‚„åå‰ä¸­ã®æ•°ã¨ãªã‚‹éƒ¨åˆ†æ–‡å­—列㯠ãã®æ•°å€¤ã§æ¯”較ã•れã¾ã™ã€‚

    例:

    foo-1.7
    foo-1.7.2
    foo-1.7.12
    foo-1.8.2
    foo-1.8.2a
    foo-1.12

    番å·ãŒ 0 ã‹ã‚‰å§‹ã¾ã‚‹å ´åˆã¯ã€ç«¯æ•°ã¨è€ƒãˆã‚‰ã‚Œã¾ã™

    foo-1.001
    foo-1.002
    foo-1.030
    foo-1.04

    XHTML (Apache 2.0.49 以é™)
    XHTML キーワードを指定ã™ã‚‹ã¨ã€mod_autoindex 㯠HTML 3.2 ã®ä»£ã‚り㫠XHTML 1.0 ã®ã‚³ãƒ¼ãƒ‰ã‚’出力ã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚
    増減指定ã§ãã‚‹ IndexOptions

    Apache 1.3.3 ã§ã¯ã€ IndexOptions ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æ‰±ã„ã§å¹¾ã¤ã‹ã®å¤§ããªå¤‰åŒ–ãŒå°Žå…¥ã•れã¾ã—ãŸã€‚ 特ã«ã€

    • 一ã¤ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«å¯¾ã™ã‚‹è¤‡æ•°ã® IndexOptions ディレクティブã¯ã€ç¾åœ¨ã§ã¯ä¸€ã¤ã«ãƒžãƒ¼ã‚¸ã•れã¾ã™ã€‚

      <Directory /foo> IndexOptions HTMLTable
      IndexOptions SuppressColumnsorting
      </Directory>

      ã®çµæžœã¯ã€æ¬¡ã®æŒ‡å®šã¨åŒä¸€ã®çµæžœã«ãªã‚Šã¾ã™ã€‚

      IndexOptions HTMLTable SuppressColumnsorting

    • 増減構文 (ã™ãªã‚ã¡ã€'+' ã‚„ '-' ã®æŽ¥é ­è¾žãŒä»˜ãキーワード) ã®è¿½åŠ ã€‚

    '+' ã‚„ '-' 接頭辞ã®ä»˜ã„ãŸã‚­ãƒ¼ãƒ¯ãƒ¼ãƒ‰ã«å‡ºä¼šã†ã¨ãれã¯ã€ ãã®æ™‚点ã§ã® IndexOptions ã®è¨­å®š (ã“れã¯ä¸Šæµã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’å—ã‘ç¶™ãŽã¾ã™) ã«å¯¾ã—ã¦é©å¿œã•れã¾ã™ã€‚ ã—ã‹ã—ãªãŒã‚‰ã€æŽ¥é ­è¾žã®ä»˜ã‹ãªã„キーワードãŒå‡¦ç†ã•れãŸå ´åˆã¯ã€ å—ã‘ç¶™ã„ã ã‚ªãƒ—ション全ã¦ã¨ãれã¾ã§å‡ºä¼šã£ãŸå¢—減設定全ã¦ãŒ 消去ã•れã¾ã™ã€‚次ã®ä¾‹ã‚’考ãˆã¦ã¿ã¦ãã ã•ã„:

    IndexOptions +ScanHTMLTitles -IconsAreLinks FancyIndexing
    IndexOptions +SuppressSize

    最終的ãªåŠ¹æžœã¯ IndexOptions FancyIndexing +SuppressSize ã¨åŒä¸€ã§ã™ã€‚ 接頭辞ã®ä»˜ã‹ãªã„ FancyIndexing ã§ãれ以å‰ã®å¢—減キーワードã¯ç„¡åйã«ãªã‚Šã€ ãã®å¾Œã®ç´¯ç©ãŒå§‹ã¾ã‚‹ã‹ã‚‰ã§ã™ã€‚

    ã‚るディレクトリã«ãŠã„ã¦ä¸Šä½ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«æŒ‡å®šã•れãŸè¨­å®šã«å½±éŸ¿ã•れるã“ã¨ãªã IndexOptions を設定ã—ãŸã„å ´åˆã€ + ã‚„ - 接頭辞ã®ä»˜ã‹ãªã„キーワードã§è¨­å®šã—ã¦ãã ã•ã„。

    top

    IndexOrderDefault ディレクティブ

    説明: ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ã®æ¨™æº–ã®é †ç•ªä»˜ã‘を設定
    æ§‹æ–‡:IndexOrderDefault Ascending|Descending Name|Date|Size|Description
    デフォルト:IndexOrderDefault Ascending Name
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    IndexOrderDefault ディレクティブ㯠FancyIndexing インデックスオプションã¨ä½µã›ã¦ç”¨ã„られã¾ã™ã€‚ デフォルトã§ã¯ã€FancyIndexing ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªä¸€è¦§ã¯ãƒ•ァイルåã®æ˜‡é †ã§è¡¨ç¤ºã•れã¾ã™ã€‚ IndexOrderDefault ã§ã€åˆæœŸçŠ¶æ…‹ã®è¡¨ç¤ºé †ç•ªã‚’変ãˆã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    IndexOrderDefault ã¯äºŒã¤ã®å¼•æ•°ã‚’ã¨ã‚Šã¾ã™ã€‚一ã¤ç›®ã¯ã‚½ãƒ¼ãƒˆã®æ–¹å‘を指示ã™ã‚‹ Ascending ã‹ Descending ã®ã„ãšã‚Œã‹ã§ã™ã€‚ 二ã¤ç›®ã®å¼•数㯠Name, Date, Size ã‹ Description ã®ã„ãšã‚Œã‹ä¸€ã¤ã®ã‚­ãƒ¼ãƒ¯ãƒ¼ãƒ‰ã§ã‚ã£ã¦ã€1ã¤ç›®ã®ã‚½ãƒ¼ãƒˆã‚­ãƒ¼ã‚’指定ã—ã¾ã™ã€‚ 2ã¤ç›®ã®ã‚½ãƒ¼ãƒˆã‚­ãƒ¼ã¯å¸¸ã«ãƒ•ァイルåã®æ˜‡é †ã«ãªã‚Šã¾ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㨠SuppressColumnSorting インデックスオプションã¨ã‚’組ã¿åˆã‚ã›ã‚‹ã“ã¨ã§ã€ ディレクトリ一覧をã‚る特定ã®é †ç•ªã§ã®ã¿è¡¨ç¤ºã™ã‚‹ã‚ˆã†ã«ã§ãã¾ã™ã€‚ ã“れã¯ã€ クライアントãŒåˆ¥ã®é †ç•ªã§ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªä¸€è¦§ã‚’リクエストã™ã‚‹ã“ã¨ã‚’防ãŽã¾ã™ã€‚

    top

    IndexStyleSheet ディレクティブ

    説明:ディレクトリインデックス㫠CSS スタイルシートを追加ã™ã‚‹
    æ§‹æ–‡:IndexStyleSheet url-path
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    IndexStyleSheet ディレクティブ㯠インデックス表示ã«ä½¿ç”¨ã•れる CSS ã®ãƒ•ァイルåを設定ã—ã¾ã™ã€‚

    例

    IndexStyleSheet "/css/style.css"

    top

    ReadmeName ディレクティブ

    説明:ã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ä¸€è¦§ã®æœ€å¾Œã«æŒ¿å…¥ã•れるファイルã®åå‰
    æ§‹æ–‡:ReadmeName filename
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_autoindex

    ReadmeName ディレクティブã¯ã€ インデックスã®çµ‚ã‚りã«ä»˜ã‘加ãˆã‚‰ã‚Œã‚‹ãƒ•ァイルã®åå‰ã‚’設定ã—ã¾ã™ã€‚ filename ã¯æŒ¿å…¥ã™ã‚‹ãƒ•ァイルã®åå‰ã§ã€ 一覧ã®è¡Œã‚れã¦ã„ã‚‹ä½ç½®ã‹ã‚‰ç›¸å¯¾çš„ãªã‚‚ã®ã¨ã—ã¦è§£é‡ˆã•れã¾ã™ã€‚ filename ãŒã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§å§‹ã¾ã‚‹å ´åˆã¯ã€ DocumentRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ãªã‚Šã¾ã™ã€‚

    例

    ReadmeName FOOTER.html

    例 2

    ReadmeName /include/FOOTER.html

    より詳細ã«ã¾ã§ã“ã®æŒ™å‹•ã«ã¤ã„ã¦è¨˜è¿°ã—ã¦ã„ã‚‹ HeaderName ã‚‚ã”覧下ã•ã„。

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dbd.html.fr.utf80000644000000000000500000006570413412755316020014 0ustar rootsrc mod_dbd - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_dbd

    Langues Disponibles:  en  |  fr 

    Description:Gestion des connexions à une base de données SQL
    Statut:Extension
    Identificateur de Module:dbd_module
    Fichier Source:mod_dbd.c
    Compatibilité:Versions 2.1 and supérieures

    Sommaire

    Le module mod_dbd gère les connexions à une base de données SQL via APR. Il permet aux modules qui requièrent des fonctions liées aux bases de données SQL de se connecter à une base de données à la demande, et s'efforce de conférer aux bases de données une efficacité et une évolutivité optimales pour les MPMs threadés ou non threadés. Pour plus de détails, voir le site web APR, ainsi que cette vue d'ensemble de l'environnement de développement d'Apache DBD par son développeur initial.

    top

    Regroupement des connexions

    Ce module gère de manière optimisée en fonction de la plate-forme les connexions aux bases de données. Sur les plates-formes non threadées, il maintient une connexion persistente à la manière d'un LAMP classique (Linux, Apache, Mysql, Perl/PHP/Python). Sur les plates-formes threadées, il maintient un groupe de connexions à la fois plus évolutif et plus efficace, comme décrit dans cet article d'ApacheTutor. Notez que mod_dbd remplace les modules présentés dans cet article.

    top

    Connexion

    Pour vous connecter à votre base de données, vous devez spécifier un pilote et des paramètres de connexion qui diffèrent selon le moteur de base de données. Par exemple, pour vous connecter à mysql, spécifiez ce qui suit :

    DBDriver mysql
    DBDParams host=localhost,dbname=pony,user=shetland,pass=appaloosa

    Vous pourrez alors utiliser cette connexion dans de nombreux autres modules comme mod_rewrite, mod_authn_dbd et mod_lua. Vous trouverez des exemples d'utilisation dans la documentation de ces modules.

    Voir la syntaxe de la directive DBDParams pour les informations à fournir dans la chaîne de connexion en fonction des différents pilotes de base de données supportés.

    top

    API DBD d'Apache

    mod_dbd exporte cinq fonctions que d'autres modules pourront utiliser. L'API se présente comme suit :

    typedef struct {
        apr_dbd_t *handle;
        apr_dbd_driver_t *driver;
        apr_hash_t *prepared;
    } ap_dbd_t;
    
    /* Fonctions exportées pour accéder à la base de données */
    
    /* ouvre une connexion qui DOIT avoir été explicitement fermée.
     * Renvoie NULL en cas d'erreur
     */
    AP_DECLARE(ap_dbd_t*) ap_dbd_open(apr_pool_t*, server_rec*);
    
    /* ferme une connexion ouverte avec ap_dbd_open */
    AP_DECLARE(void) ap_dbd_close(server_rec*, ap_dbd_t*);
    
    /* acquiert une connexion qui aura la durée de vie de la requête et qui
     * NE DOIT PAS avoir été explicitement fermée. Renvoie NULL en cas
     * d'erreur. C'est la fonction recommandée pour la plupart des
     * applications.
     */
    AP_DECLARE(ap_dbd_t*) ap_dbd_acquire(request_rec*);
    
    /* acquiert une connexion qui aura la durée de vie d'une connexion et
     * qui NE DOIT PAS avoir été explicitement fermée. Renvoie NULL en cas
     * d'erreur.
     */
    AP_DECLARE(ap_dbd_t*) ap_dbd_cacquire(conn_rec*);
    
    /* Prépare une requête qu'un module client pourra utiliser */
    AP_DECLARE(void) ap_dbd_prepare(server_rec*, const char*, const char*);
    
    /* Exporte aussi ces fonctions à titre optionnel mour les modules qui
     * péfèreraient les utiliser */
    APR_DECLARE_OPTIONAL_FN(ap_dbd_t*, ap_dbd_open, (apr_pool_t*, server_rec*));
    APR_DECLARE_OPTIONAL_FN(void, ap_dbd_close, (server_rec*, ap_dbd_t*));
    APR_DECLARE_OPTIONAL_FN(ap_dbd_t*, ap_dbd_acquire, (request_rec*));
    APR_DECLARE_OPTIONAL_FN(ap_dbd_t*, ap_dbd_cacquire, (conn_rec*));
    APR_DECLARE_OPTIONAL_FN(void, ap_dbd_prepare, (server_rec*, const char*, const char*));
    top

    Requêtes SQL préparées

    mod_dbd supporte les requêtes SQL préparées à destination des modules qui pourraient les utiliser. Chaque requête préparée doit posséder un nom (étiquette), et est stockée dans un condensé (hash) : les condensés sont du type apr_dbd_prepared_t et s'utilisent dans toute requête SQL ou commande select préparée par apr_dbd.

    Il est du ressort des modules utilisateurs de dbd d'utiliser les requêtes préparées et de préciser quelles requêtes doivent être spécifiées dans httpd.conf, ou de fournir leurs propres directives et d'utiliser ap_dbd_prepare.

    Avertissement

    Lorsqu'on utilise des requêtes préparées avec des bases de données MySQL, il est préférable de définir reconnect à 0 dans la chaîne de connexion, afin d'éviter des erreurs provoquées par un client MySQL qui se reconnecterait sans réinitialiser correctement les requêtes préparées. Si reconnect est défini à 1, toute connexion défectueuse sera sensée être réparée, mais comme mod_dbd n'en est pas informé, les requêtes préparées seront invalidées.
    top

    AVERTISSEMENT DE SECURITE

    Toute application web impliquant une base de données doit se protéger elle-même contre les attaques de type injection SQL. Dans la plupart des cas Apache DBD est sûr, car les applications utilisent des requêtes préparées, et les entrées non sures ne seront utilisées qu'à titre de données. Bien entendu, si vous l'utilisez via un module tiers, vous devez être au fait des précautions à prendre.

    Cependant, le pilote FreeTDS est non sûr de par sa nature-même. Comme la bibliothèque sous-jacente ne supporte pas les requêtes préparées, le pilote en effectue une émulation, et les entrées non sûres sont fusionnées avec la requête SQL.

    Il peut être sécurisé en décontaminant toutes les entrées : un processus inspiré de la recherche de contaminations (taint mode) de Perl. Chaque entrée est comparée à une expression rationnelle, et seules les entrées qui correspondent sont utilisées, en accord avec le langage Perl :

      $untrusted =~ /([a-z]+)/;
      $trusted = $1;

    Pour utiliser ceci, les expressions rationnelles de décontamination doivent être incluses dans les requêtes préparées. L'expression rationnelle doit se situer immédiatement après le caractère % dans la requête préparée, et doit être entourée d'accolades {}. Par exemple, si votre application attend une entrée alphanumérique, vous pouvez utiliser :

    "SELECT foo FROM bar WHERE input = %s"

    avec d'autres pilotes, et ne risquer au pire qu'une requête échouée. Mais avec FreeTDS, vous devez utiliser :

    "SELECT foo FROM bar WHERE input = %{([A-Za-z0-9]+)}s"

    tout ce qui ne correspond pas à l'expression rationnelle est alors rejeté, et la requête est maintenant sûre.

    Alternativement, vous pouvez utiliser le pilote ODBC tiers, qui offre la sécurité des requêtes préparées authentiques.

    top

    Directive DBDExptime

    Description:Durée de vie des connexions inactives
    Syntaxe:DBDExptime durée en secondes
    Défaut:DBDExptime 300
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_dbd

    Cette directive permet de définir la durée de vie des connexions inactives lorsque le nombre de connexions spécifié par la directive DBDKeep a été dépassé (plates-formes threadées uniquement).

    top

    Directive DBDInitSQL

    Description:Exécute une instruction SQL après connexion à une base de données
    Syntaxe:DBDInitSQL "instruction SQL"
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_dbd

    Les modules qui le souhaitent peuvent exécuter une ou plusieurs instructions SQL après connexion à une base de données. Par exemple initialiser certaines valeurs, ou ajouter une entrée dans le journal lors d'une nouvelle connexion à la base de données.

    top

    Directive DBDKeep

    Description:Nombre maximum de connexions maintenues
    Syntaxe:DBDKeep nombre
    Défaut:DBDKeep 2
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_dbd

    Cette directive permet de définir le nombre maximum de connexions à maintenir par processus, en dehors de celles servant à gérer les pics de demandes (plates-formes threadées uniquement).

    top

    Directive DBDMax

    Description:Nombre maximum de connexions
    Syntaxe:DBDMax nombre
    Défaut:DBDMax 10
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_dbd

    Cette directive permet de définir le nombre maximum effectif de connexions par processus (plates-formes threadées uniquement).

    top

    Directive DBDMin

    Description:Nombre minimum de connexions
    Syntaxe:DBDMin nombre
    Défaut:DBDMin 1
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_dbd

    Cette directive permet de définir le nombre minimum de connexions par processus (plates-formes threadées uniquement).

    top

    Directive DBDParams

    Description:Paramètres de la connexion à la base de données
    Syntaxe:DBDParams param1=valeur1[,param2=valeur2]
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_dbd

    Cette directive permet de spécifier des paramètres selon les besoins du pilote concerné. En général, les paramètres à passer concernent tout ce qui n'a pas de valeur par défaut comme le nom d'utilisateur, le mot de passe, le nom de la base de données, le nom d'hôte et le numéro de port de la connexion.

    Les paramètres de la chaîne de connexion en fonction des différents pilotes comprennent :

    FreeTDS (pour MSSQL et SyBase)
    username, password, appname, dbname, host, charset, lang, server
    MySQL
    host, port, user, pass, dbname, sock, flags, fldsz, group, reconnect
    Oracle
    user, pass, dbname, server
    PostgreSQL
    La chaîne de connexion est passée directement à PQconnectdb
    SQLite2
    La chaîne de connexion est scindée avec comme séparateur le caractère ':', et partie1:partie2 est utilisé dans sqlite_open(partie1, atoi(partie2), NULL)
    SQLite3
    La chaîne de connexion est passée directement à sqlite3_open
    ODBC
    datasource, user, password, connect, ctimeout, stimeout, access, txmode, bufsize
    top

    Directive DBDPersist

    Description:Utiliser ou non des connexions persistentes
    Syntaxe:DBDPersist On|Off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_dbd

    Si cette directive est définie à Off, les connexions persistentes et les connexions groupées sont désactivées. À la demande d'un client, une nouvelle connexion à la base de données est ouverte, et fermée immédiatement à l'issue du traitement. Cette configuration ne doit être utilisée qu'à des fins de débogage, ou sur des serveurs à charge faible.

    Par défaut, les groupes de connexions persistentes sont activés (ou une seule connexion persistente du style LAMP pour les serveurs non threadés), et c'est la configuration qui devrait être utilisée dans la plupart des cas sur un serveur en production.

    Avant la version 2.2.2, cette directive n'acceptait que les valeurs 0 et 1 au lieu de Off et On, respectivement.

    top

    Directive DBDPrepareSQL

    Description:Définit une requête SQL préparée
    Syntaxe:DBDPrepareSQL "requête SQL" étiquette
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_dbd

    Pour les modules tels que les modules d'authentification, qui utilisent de manière répétée la même requête SQL, on peut optimiser les performances en préparant la requête une fois pour toutes au démarrage, plutôt qu'à chaque utilisation. Cette directive permet de préparer une requête SQL et de lui assigner une étiquette.

    top

    Directive DBDriver

    Description:Spécifie un pilote SQL
    Syntaxe:DBDriver nom
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_dbd

    Cette directive permet de spécifier un pilote apr_dbd par son nom. Le pilote doit être installé sur votre système (sur la plupart des systèmes, il s'agit d'un objet partagé ou d'une dll). Par exemple, DBDriver mysql va sélectionner le pilote MySQL dans la bibliothèque apr_dbd_mysql.so.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_ext_filter.html.fr.utf80000644000000000000500000004732513412755316021427 0ustar rootsrc mod_ext_filter - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_ext_filter

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Fait traiter le corps de la réponse par un programme externe avant de l'envoyer au client
    Statut:Extension
    Identificateur de Module:ext_filter_module
    Fichier Source:mod_ext_filter.c

    Sommaire

    mod_ext_filter représente un modèle de programmation simple et bien connu pour les filtres. Avec ce module, tout programme qui lit l'entrée standard stdin et écrit sur la sortie standard stdout (autrement dit une commande filtre de style Unix) peut servir de filtre pour Apache. Ce mécanisme de filtrage est beaucoup plus lent qu'un filtre spécialement écrit pour l'API d'Apache et faisant partie intégrante du processus du serveur Apache, mais il présente les avantages suivants :

    • le modèle de programmation est beaucoup plus simple
    • tout langage de script ou de programmation peut être utilisé, pourvu qu'il permette au programme de lire l'entrée standard et d'écrire sur la sortie standard.
    • on peut utiliser des programmes existants comme filtres Apache sans modification.

    Même dans le cas où le niveau de performance est insuffisant pour une utilisation en production, on peut utiliser mod_ext_filter comme prototype d'environnement pour les filtres.

    top

    Exemples

    Générer du HTML à partir d'un autre type de contenu

    # la directive de mod_ext_filter définissant un filtre
    # permettant de mettre des fichiers text/c au format HTML en
    # utilisant le programme externe /usr/bin/enscript, le type du
    # fichier résultant étant défini à text/html
    ExtFilterDefine c-to-html mode=output \
        intype=text/c outtype=text/html \
        cmd="/usr/bin/enscript --color -w html -Ec -o -"
    
    <Directory "/export/home/trawick/apacheinst/htdocs/c">
        # directive de base permettant de traiter la sortie avec le
        # nouveau filtre
        SetOutputFilter c-to-html
    
        # directive de mod_mime définissant le type des fichiers dont
        # le nom possède l'extension .c à text/c
        AddType text/c .c
    </Directory>

    Implémentation d'un filtre de codage de contenu

    Note : cet exemple avec gzip n'est fourni qu'à titre d'illustration. Veuillez vous reporter à la documentation de mod_deflate pour un exemple d'implémentation plus pratique.

    # la directive de mod_ext_filter qui définit le filtre externe
    ExtFilterDefine gzip mode=output cmd=/bin/gzip
    
    <Location "/gzipped">
    
        # directive de base permettant de traiter la sortie avec le
      # filtre gzip
        SetOutputFilter gzip
    
        # la directive de mod_headers permettant d'ajouter le champ
      # d'en-tête "Content-Encoding: gzip"
        Header set Content-Encoding gzip
    </Location>

    Ralentissement du serveur

    # directive de mod_ext_filter définissant un filtre qui fait
    # passer tous les flux en sortie par la commande cat ; cat ne
    # modifie rien ; elle ne fait que compliquer le cheminement des
    # flux et consommer des ressources supplémentaires
           ExtFilterDefine slowdown mode=output cmd=/bin/cat \
    ExtFilterDefine slowdown mode=output cmd=/bin/cat \
        preservescontentlength
    
    <Location "/">
        # directive de base permettant de traiter plusieurs fois la
        # sortie avec le filtre slowdown
        #
        SetOutputFilter slowdown;slowdown;slowdown
    </Location>

    Utilisation de sed pour remplacer du texte dans la réponse

    # directive de mod_ext_filter définissant un filtre qui
    # remplace du texte dans la réponse
    #
    ExtFilterDefine fixtext mode=output intype=text/html \
        cmd="/bin/sed s/verdana/arial/g"
    
    <Location "/">
        # directive de base permettant de traiter la sortie avec le
        # filtre fixtext
        SetOutputFilter fixtext
    </Location>

    Vous pouvez aussi utiliser mod_substitute pour effectuer le même traitement sans avoir à invoquer un programme externe.

    Tracer un autre filtre

    # Trace les données lues et écrites par mod_deflate pour un
    # client particulier (IP 192.168.1.31) qui a des problèmes de
    # compression.
    # Ce premier filtre va tracer ce qui entre dans mod_deflate.
    ExtFilterDefine tracebefore \
        cmd="/bin/tracefilter.pl /tmp/tracebefore" \
        EnableEnv=trace_this_client
    
    # Ce second filtre va tracer ce qui sort de mod_deflate.
    # Notez que sans le paramètre ftype, le type de filtre par
    # défaut AP_FTYPE_RESOURCE placerait le filtre *avant*
    # mod_deflate dans la chaîne de filtrage. Le fait d'affecter
    # à ce paramètre une valeur numérique sensiblement supérieure à
    # AP_FTYPE_CONTENT_SET permet de s'assurer que le filtre sera
    # placé après mod_deflate.
    ExtFilterDefine traceafter \
        cmd="/bin/tracefilter.pl /tmp/traceafter" \
        EnableEnv=trace_this_client ftype=21
    
    <Directory "/usr/local/docs">
        SetEnvIf Remote_Addr 192.168.1.31 trace_this_client
        SetOutputFilter tracebefore;deflate;traceafter
    </Directory>

    Voici le filtre qui trace les données :

    #!/usr/local/bin/perl -w
    use strict;
    
    open(SAVE, ">$ARGV[0]")
        or die "can't open $ARGV[0]: $?";
    
    while (<STDIN>) {
        print SAVE $_;
        print $_;
    }
    
    close(SAVE);
    top

    Directive ExtFilterDefine

    Description:Définit un filtre externe
    Syntaxe:ExtFilterDefine nom_filtre paramètres
    Contexte:configuration globale
    Statut:Extension
    Module:mod_ext_filter

    La directive ExtFilterDefine définit les caractéristiques d'un filtre externe, et en particulier le programme à exécuter ainsi que ses arguments.

    nom_filtre spécifie le nom du filtre en cours de définition. On peut ensuite utiliser ce nom pour référencer le filtre dans les directives SetOutputFilter. Il doit être unique parmi les noms de tous les filtres enregistrés. Pour le moment, aucune erreur n'est signalée par l'API register-filter, si bien qu'un problème de noms dupliqués ne sera pas porté à la connaissance de l'utilisateur.

    Viennent ensuite un ou plusieurs paramètres dans un ordre indéfini, qui permettent de spécifier la commande externe à exécuter et certaines autres caractéristiques. Le seul paramètre obligatoire est cmd=. Voici la liste de ces paramètres :

    cmd=ligne de commande
    Le mot-clé cmd= spécifie la commande externe à exécuter. Si la ligne de commande comporte des arguments, elle doit être entourée de guillemets (par exemple cmd="/bin/mypgm arg1 arg2"). Les guillemets habituels du shell ne sont pas nécessaires car le programme est lancé directement, sans passer par le shell. Les arguments du programme doivent être séparés par des espaces. Si un argument contient des espaces, ces derniers doivent être échappés par un antislash '\'. Si un argument contient des antislashes '\', ces derniers doivent être eux-mêmes échappés par un antislash '\'. Outre les variables d'environnement CGI standards, les variables DOCUMENT_URI, DOCUMENT_PATH_INFO, et QUERY_STRING_UNESCAPED seront également définies pour le programme.
    mode=mode
    Utilisez mode=output (valeur par défaut) pour les filtres qui traitent les réponses. Utilisez mode=input pour les filtres qui traitent les requêtes. mode=input est disponible depuis la version 2.1 d'Apache.
    intype=type MIME
    Ce paramètre spécifie le type de médium Internet (c'est à dire le type MIME) des documents qui doivent être filtrés. Par défaut, tous les documents sont filtrés. Aucun des documents possédant un type MIME autre que celui spécifié par intype= ne sera filtré.
    outtype=type MIME
    Ce paramètre spécifie le type de médium Internet (c'est à dire le type MIME) des documents filtrés. Il intervient lorsque les opérations de filtrage comprennent une modification du type MIME. Par défaut, le type MIME n'est pas modifié.
    PreservesContentLength
    Le mot-clé PreservesContentLength indique que le filtre doit conserver la taille du contenu. Ce n'est pas le comportement par défaut, car la plupart des filtres modifient cette taille. Ce mot-clé doit être spécifié si le filtre ne doit pas modifier la taille du contenu.
    ftype=type de filtre
    Ce paramètre spécifie une valeur numérique représentant le type de filtre sous lequel le filtre doit être enregistré. La valeur par défaut, AP_FTYPE_RESOURCE, convient dans la plupart des situations. Ce paramètre devient nécessaire dès lors que le filtre doit opérer à un autre point de la chaîne de filtrage que les filtres de ressources. Voir les définitions de AP_FTYPE_... dans util_filter.h pour trouver une valeur appropriée.
    disableenv=env
    Ce paramètre spécifie le nom d'une variable d'environnement qui, si elle est définie, va désactiver le filtre.
    enableenv=env
    Ce paramètre spécifie le nom d'une variable d'environnement qui doit être définie pour que le filtre ne soit pas désactivé.
    top

    Directive ExtFilterOptions

    Description:Configure les options de mod_ext_filter
    Syntaxe:ExtFilterOptions option [option] ...
    Défaut:ExtFilterOptions NoLogStderr
    Contexte:répertoire
    Statut:Extension
    Module:mod_ext_filter

    La directive ExtFilterOptions spécifie des options de traitement particulières pour mod_ext_filter. Les arguments option peuvent contenir :

    LogStderr | NoLogStderr
    Le mot-clé LogStderr indique que les messages envoyés par le programme de filtrage externe sur la sortie d'erreurs standard doivent être enregistrés dans le journal des erreurs d'Apache. NoLogStderr inverse ce comportement.
    Onfail=[abort|remove]
    Indique la marche à suivre si le programme de filtrage externe ne peut pas démarrer. Avec abort (la valeur par défaut), le traitement de la requête sera abandonné. Avec remove, le filtre est supprimé, et le traitement de la requête se poursuit sans lui.
    ExtFilterOptions LogStderr

    Les messages envoyés vers la sortie d'erreurs standard du filtre seront enregistrés dans le journal des erreurs d'Apache.

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/prefork.html.en0000644000000000000500000004012713412755316017172 0ustar rootsrc prefork - Apache HTTP Server Version 2.4
    <-

    Apache MPM prefork

    Available Languages:  de  |  en  |  fr  |  ja  |  tr 

    Description:Implements a non-threaded, pre-forking web server
    Status:MPM
    Module Identifier:mpm_prefork_module
    Source File:prefork.c

    Summary

    This Multi-Processing Module (MPM) implements a non-threaded, pre-forking web server. Each server process may answer incoming requests, and a parent process manages the size of the server pool. It is appropriate for sites that need to avoid threading for compatibility with non-thread-safe libraries. It is also the best MPM for isolating each request, so that a problem with a single request will not affect any other.

    This MPM is very self-regulating, so it is rarely necessary to adjust its configuration directives. Most important is that MaxRequestWorkers be big enough to handle as many simultaneous requests as you expect to receive, but small enough to assure that there is enough physical RAM for all processes.

    top

    How it Works

    A single control process is responsible for launching child processes which listen for connections and serve them when they arrive. Apache httpd always tries to maintain several spare or idle server processes, which stand ready to serve incoming requests. In this way, clients do not need to wait for a new child processes to be forked before their requests can be served.

    The StartServers, MinSpareServers, MaxSpareServers, and MaxRequestWorkers regulate how the parent process creates children to serve requests. In general, Apache httpd is very self-regulating, so most sites do not need to adjust these directives from their default values. Sites which need to serve more than 256 simultaneous requests may need to increase MaxRequestWorkers, while sites with limited memory may need to decrease MaxRequestWorkers to keep the server from thrashing (swapping memory to disk and back). More information about tuning process creation is provided in the performance hints documentation.

    While the parent process is usually started as root under Unix in order to bind to port 80, the child processes are launched by Apache httpd as a less-privileged user. The User and Group directives are used to set the privileges of the Apache httpd child processes. The child processes must be able to read all the content that will be served, but should have as few privileges beyond that as possible.

    MaxConnectionsPerChild controls how frequently the server recycles processes by killing old ones and launching new ones.

    This MPM uses the mpm-accept mutex to serialize access to incoming connections when subject to the thundering herd problem (generally, when there are multiple listening sockets). The implementation aspects of this mutex can be configured with the Mutex directive. The performance hints documentation has additional information about this mutex.

    top

    MaxSpareServers Directive

    Description:Maximum number of idle child server processes
    Syntax:MaxSpareServers number
    Default:MaxSpareServers 10
    Context:server config
    Status:MPM
    Module:prefork

    The MaxSpareServers directive sets the desired maximum number of idle child server processes. An idle process is one which is not handling a request. If there are more than MaxSpareServers idle, then the parent process will kill off the excess processes.

    Tuning of this parameter should only be necessary on very busy sites. Setting this parameter to a large number is almost always a bad idea. If you are trying to set the value equal to or lower than MinSpareServers, Apache HTTP Server will automatically adjust it to MinSpareServers + 1.

    See also

    top

    MinSpareServers Directive

    Description:Minimum number of idle child server processes
    Syntax:MinSpareServers number
    Default:MinSpareServers 5
    Context:server config
    Status:MPM
    Module:prefork

    The MinSpareServers directive sets the desired minimum number of idle child server processes. An idle process is one which is not handling a request. If there are fewer than MinSpareServers idle, then the parent process creates new children: It will spawn one, wait a second, then spawn two, wait a second, then spawn four, and it will continue exponentially until it is spawning 32 children per second. It will stop whenever it satisfies the MinSpareServers setting.

    Tuning of this parameter should only be necessary on very busy sites. Setting this parameter to a large number is almost always a bad idea.

    See also

    Available Languages:  de  |  en  |  fr  |  ja  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_autoindex.html.fr.utf80000644000000000000500000020771413412755316021262 0ustar rootsrc mod_autoindex - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_autoindex

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Génère automatiquement des index de répertoires d'une manière similaire à la commande Unix ls, ou à la commande shell Win32 dir
    Statut:Base
    Identificateur de Module:autoindex_module
    Fichier Source:mod_autoindex.c

    Sommaire

    L'index d'un répertoire peut être généré de deux manières :

    • Un fichier situé dans ce répertoire, en général appelé index.html, mais dont le nom de ce ou ces fichiers peut être défini par la directive DirectoryIndex. C'est le module mod_dir qui traite alors cet index.
    • Un listing généré par le serveur, dont le format est contrôlé par un certain nombre de directives. Les directives AddIcon, AddIconByEncoding et AddIconByType permettent de définir une liste d'icônes à afficher en fonction des différents types de fichiers ; pour chaque fichier listé, le premier icône qui correspond au type du fichier est affiché. C'est le module mod_autoindex qui traite alors cet index.

    Les deux fonctions sont séparées, si bien que vous pouvez entièrement supprimer (ou remplacer) la génération automatique d'index, si vous le souhaitez.

    On active la génération automatique d'index en spécifiant Options +Indexes. Voir la directive Options pour plus de détails.

    Si la directive IndexOptions est spécifiée avec l'option FancyIndexing, les en-têtes de colonnes sont des liens qui permettent de contrôler l'ordre de tri de l'affichage. Si vous actionnez le lien d'un en-tête, le listing sera généré à nouveau, trié en fonction des valeurs de la colonne concernée. Si l'on actionne de manière répétitive le même en-tête, l'ordre de tri est commuté entre les ordres croissant et décroissant. On peut supprimer ces liens d'en-têtes de colonnes à l'aide de l'option SuppressColumnSorting de la directive IndexOptions.

    Notez que lorsque l'affichage est trié en fonction de la taille, c'est la taille réelle qui est prise en compte, et non la valeur affichée - ainsi, un fichier de 1010 octets sera toujours affiché avant un fichier de 1011 octets (en ordre croissant), même si la taille affichée des deux fichiers est "1K".

    top

    Arguments de la requête d'autoindexation

    La chaîne de paramètres de la requête peut contenir de nombreux arguments permettant dans une certaine mesure au client de contrôler l'ordre de l'index du répertoire, ainsi que la liste des fichiers à afficher. Si vous souhaitez désactiver cette fonctionnalité, utilisez l'option IndexOptions IgnoreClient.

    Les en-têtes de tri des colonnes eux-mêmes sont des hyper-liens auto-référant qui ajoutent les options de tri à la requête énumérées ci-dessous qui peuvent être ajoutées à toute requête concernant la ressource répertoire.

    • C=N trie l'affichage en fonction du nom de fichier
    • C=M trie l'affichage en fonction de la date de dernière modification, puis du nom de fichier
    • C=S trie l'affichage en fonction de la taille, puis du nom de fichier
    • C=D trie l'affichage en fonction de la description, puis du nom de fichier
    • O=A trie l'affichage selon l'ordre croissant
    • O=D trie l'affichage selon l'ordre décroissant
    • F=0 affiche le listing sous la forme d'une simple liste (sans FancyIndex)
    • F=1 affiche le listing avec en-têtes de colonnes sous forme de liens hyper-textes (FancyIndexed)
    • F=2 affiche le listing sous forme de table HTML avec en-têtes de colonnes contenant des liens hyper-textes (FancyIndexed)
    • V=0 désactive le tri en fonction de la version
    • V=1 active le tri en fonction de la version
    • P=modèle n'affiche que les fichiers correspondant au modèle spécifié

    Notez que l'argument 'P' (pour Pattern) n'est testé qu'après que les directives habituelles IndexIgnore ont été traitées, et que tous les noms de fichiers sont encore assujettis aux mêmes critères que pour tout autre listing auto-indexé. L'interpréteur d'arguments de requête de mod_autoindex s'arrête immédiatement s'il rencontre une option non reconnue. Les arguments de requête doivent être bien formés, selon la table ci-dessus.

    Les options de requêtes sont illustrées par l'exemple ci-dessous, qui peut être copié et collé dans un fichier header.html. Notez que l'argument inconnu "X", pour le bouton submit, est introduit en dernier afin de s'assurer que tous les arguments ont été interprétés avant que mod_autoindex ne rencontre l'entrée X=Go.

    <form action="" method="get">
    Montre moi une <select name="F">
    <option value="0"> liste simple</option>
    <option value="1" selected="selected"> liste avec en-têtes</option>
    <option value="2"> liste avec en-tête sous forme de table</option>
    </select>
    triée par <select name="C">
    <option value="N" selected="selected"> nom</option>
    <option value="M"> date de modification</option>
    <option value="S"> taille</option>
    <option value="D"> description</option>
    </select>
    <select name="O">
    <option value="A" selected="selected"> croissant</option>
    <option value="D"> décroissant</option>
    </select>
    <select name="V">
    <option value="0" selected="selected"> dans l'ordre normal</option>
    <option value="1"> en fonction de la version</option>
    </select>
    correspondant à <input type="text" name="P" value="*" />
    <input type="submit" name="X" value="Go" />
    </form>

    top

    Directive AddAlt

    Description:Texte optionnel à afficher à la place d'un icône pour un fichier en fonction de son nom
    Syntaxe:AddAlt texte fichier [fichier] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    La directive AddAlt permet d'afficher un texte optionnel pour un fichier, à la place d'un icône, dans le cas d'un affichage FancyIndexing. fichier est une extension de fichier, un nom de fichier partiel, une expression avec caractères génériques ou un nom de fichier complet permettant de caractériser le(s) fichier(s) concerné(s). Si texte contient des espaces, vous devez l'entourer de guillemets ou d'apostrophes (" ou '). Ce texte optionnel sera affiché si le client ne peut pas afficher d'images, si le chargement d'images est désactivé ou si l'icône ne peut pas être trouvé.

    AddAlt "PDF file" *.pdf
    AddAlt Compressed *.gz *.zip *.Z
    top

    Directive AddAltByEncoding

    Description:Texte optionnel à afficher à la place d'un icône pour un fichier en fonction de son codage MIME
    Syntaxe:AddAltByEncoding texte codage MIME [codage MIME] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    La directive AddAltByEncoding permet d'afficher un texte optionnel à la place d'un icône pour un fichier dans le cas d'un affichage FancyIndexing. codage MIME doit être un type valide, comme x-compress. Si texte contient des espaces, vous devez l'entourer de guillemets ou d'apostrophes (" ou '). Ce texte optionnel sera affiché si le client ne peut pas afficher d'images, si le chargement d'images est désactivé ou si l'icône ne peut pas être trouvé.

    AddAltByEncoding gzip x-gzip
    top

    Directive AddAltByType

    Description:Texte optionnel à afficher à la place d'un icône pour un fichier en fonction de son type MIME
    Syntaxe:AddAltByType texte type MIME [type MIME] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    La directive AddAltByType permet d'afficher un texte optionnel à la place d'un icône pour un fichier dans le cas d'un affichage FancyIndexing. type MIME doit être un type MIME valide, comme text/html. Si texte contient des espaces, vous devez l'entourer de guillemets ou d'apostrophes (" ou '). Ce texte optionnel sera affiché si le client ne peut pas afficher d'images, si le chargement d'images est désactivé ou si l'icône ne peut pas être trouvé.

    AddAltByType 'Fichier texte' text/plain
    top

    Directive AddDescription

    Description:Afficher la description d'un fichier
    Syntaxe:AddDescription texte [fichier] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    Cette directive permet d'afficher une description pour un fichier, dans le cas d'un affichage FancyIndexing. fichier est une extension de fichier, un nom de fichier partiel, une expression avec caractères génériques ou un nom de fichier complet permettant de caractériser le fichier. texte doit être entouré de guillemets (").

    AddDescription "The planet Mars" mars.gif
    AddDescription "My friend Marshall" friends/mars.gif

    La taille par défaut, habituelle du champ de description est de 23 octets. L'option IndexOptions SuppressIcon ajoute 6 octets, l'option IndexOptions SuppressSize en ajoute 7 et l'option IndexOptions SuppressLastModified en ajoute 19. Ainsi, la plus grande taille par défaut qui peut être assignée à la colonne description est de 55 octets.

    Comme l'argument fichier peut être un nom de fichier partiel, vous devez garder à l'esprit qu'un nom de fichier partiel trop court pourra correspondre à des fichiers non voulus. Par exemple, le.html correspondra au fichier le.html, mais aussi au fichier example.html. En cas d'ambiguïté, utilisez un nom de fichier aussi complet que possible, et ordonnez votre liste de directives AddDescription en conséquence.

    Voir le mot-clé DescriptionWidth de la directive IndexOptions pour plus de détails sur la manière d'augmenter la taille de cette colonne, ou pour permettre des descriptions de taille illimitée.

    Avertissement

    Le texte descriptif défini par la directive AddDescription peut contenir des marquages HTML, comme des balises ou des entités caractères. Si la limite de taille de la colonne description venait à tronquer une balise (par exemple couper la fin d'une phrase en caractères gras), le résultat pourrait en affecter toute la suite du listing du répertoire.

    Arguments avec chemins

    Les chemins absolus ne sont actuellement pas supportés et ne peuvent correspondre à aucun chemin réel à l'exécution. Les arguments contenant des chemins relatifs, qui ne devraient être normalement utilisés que dans les fichiers htaccess, sont implicitement préfixés par '*/' afin d'éviter toute association avec des noms de répertoires partiels.

    top

    Directive AddIcon

    Description:Icône à afficher pour un fichier en fonction de son nom
    Syntaxe:AddIcon icône nom [nom] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    Cette directive permet de déterminer l'icône à afficher à côté d'un fichier dont le nom se termine par nom, dans le cas d'un affichage FancyIndexing. icône est une URL relative (échappée par des caractères '%') vers l'icône, une URL distante pleinement qualifiée, ou de la forme (alttext,url), où alttext est le symbole texte correspondant à l'icône à afficher dans les navigateurs en mode texte.

    nom correspond à ^^DIRECTORY^^ pour les répertoires, ^^BLANKICON^^ pour les lignes vides (pour personnaliser la présentation du listing), une extension de fichier, une expression avec caractères génériques, un nom de fichier partiel ou un nom de fichier complet.

    ^^BLANKICON^^ n'est utilisé que pour le formatage, et n'est donc pas nécessaire si vous utilisez IndexOptions HTMLTable.

    #Examples
    AddIcon (IMG,/icons/image.png) .gif .jpg .png
    AddIcon /icons/dir.png ^^DIRECTORY^^
    AddIcon /icons/backup.png *~

    Lorsque c'est possible, il est préférable d'utiliser AddIconByType plutôt que AddIcon.

    top

    Directive AddIconByEncoding

    Description:Icône à afficher à côté d'un fichier en fonction de son codage MIME
    Syntaxe:AddIconByEncoding icône codage MIME [codage MIME] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    Cette directive permet de déterminer l'icône à afficher à côté d'un fichier dans le cas d'un affichage FancyIndexing. icône est une URL relative (échappée par des caractères '%') vers l'icône, une URL pleinement qualifiée, ou de la forme (alttext,url), où alttext est le symbole texte correspondant à l'icône à afficher dans les navigateurs en mode texte.

    codage MIME doit être un codage valide, comme x-compress.

    AddIconByEncoding /icons/compress.png x-compress
    top

    Directive AddIconByType

    Description:Icône à afficher à côté d'un fichier en fonction de son type MIME
    Syntaxe:AddIconByType icône type MIME [type MIME] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    Cette directive permet de déterminer l'icône à afficher à côté d'un fichier de type MIME type MIME dans le cas d'un affichage FancyIndexing. icône est une URL relative (échappée par des caractères '%') vers l'icône, une URL pleinement qualifiée, ou de la forme (alttext,url), où alttext est le symbole texte correspondant à l'icône à afficher dans les navigateurs en mode texte.

    type MIME est une expression avec caractères génériques représentant le type MIME.

    AddIconByType (IMG,/icons/image.png) image/*
    top

    Directive DefaultIcon

    Description:Icône à afficher par défaut lorsqu'aucun icône spécifique n'est précisé
    Syntaxe:DefaultIcon chemin URL
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    La directive DefaultIcon permet de définir l'icône à afficher à côté d'un fichier lorsqu'aucun icône spécifique n'a été précisé, dans le cas d'un affichage FancyIndexing. chemin URL est une URL relative (échappée par des caractères '%') vers l'icône ou une URL pleinement qualifiée.

    DefaultIcon /icon/unknown.png
    top

    Directive HeaderName

    Description:Nom du fichier qui sera inséré au début de la page contenant l'index
    Syntaxe:HeaderName nom fichier
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    La directive HeaderName permet de définir le nom du fichier qui sera inséré au début de la page contenant l'index. nom fichier est le nom du fichier à inclure.

    HeaderName HEADER.html

    Les deux directives HeaderName et ReadmeName traitent maintenant nom fichier comme un chemin URI relatif au chemin utilisé pour accéder au répertoire faisant l'objet de l'index. Si nom fichier commence par un slash '/', il sera considéré comme relatif au répertoire défini par la directive DocumentRoot.

    HeaderName /include/HEADER.html

    nom fichier doit correspondre à un document dont le type MIME est du style text/* (par exemple text/html, text/plain, etc...). Cela signifie que nom fichier peut faire référence à un script CGI si le véritable type MIME du script (et non celui de sa sortie) est marqué comme text/html par exemple à l'aide d'une directive comme :

    AddType text/html .cgi

    Une négociation de contenu sera effectuée si Options MultiViews a été précisé. Si nom fichier correspond à un document statique text/html (et non à un script CGI), et une des deux options Includes ou IncludesNOEXEC est activée, le fichier sera traité en tant qu'inclusion côté serveur (Server Side Include) (voir la documentation de mod_include).

    Si le fichier spécifié par la directive HeaderName contient les en-têtes d'un document HTML ((<html>, <head>, etc...), vous serez probablement amené à définir IndexOptions +SuppressHTMLPreamble, de manière à ce que ces balises ne soient pas répétées.

    Voir aussi

    top

    Directive IndexHeadInsert

    Description:Insère du texte dans la section HEAD de la page d'index.
    Syntaxe:IndexHeadInsert "marque ..."
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    La directive IndexHeadInsert permet de spécifier une chaîne de caractères à insérer dans la section <head> du code HTML généré pour la page d'index.

    IndexHeadInsert "<link rel=\"sitemap\" href=\"/sitemap.html\">"
    top

    Directive IndexIgnore

    Description:Ajouts à la liste des fichiers à cacher lors de l'affichage de l'index d'un répertoire
    Syntaxe:IndexIgnore fichier [fichier] ...
    Défaut:IndexIgnore "."
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    La directive IndexIgnore permet d'effectuer des ajouts à la liste des fichiers à cacher lors de l'affichage de l'index d'un répertoire. fichier est une expression avec caractères génériques de style shell ou un nom de fichier complet. Plusieurs directives IndexIgnore effectuent des ajouts à la liste, et ne remplacent pas la liste des fichiers à ignorer. Par défaut, la liste contient . (le répertoire courant).

    IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t

    Expressions rationnelles

    Cette directive est actuellement incompatible avec les sections de configuration qui comportent des arguments avec expressions rationnelles comme <DirectoryMatch>

    top

    Directive IndexIgnoreReset

    Description:Vide la liste des fichiers à cacher lors de l'affichage du contenu d'un répertoire
    Syntaxe:IndexIgnoreReset ON|OFF
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex
    Compatibilité:Versions 2.3.10 et supérieures

    La directive IndexIgnoreReset supprime toute liste de fichiers définie par la directive IndexIgnore et héritée par ailleurs d'autres sections de configuration.

    <Directory "/var/www">
        IndexIgnore *.bak .??* *~ *# HEADER* README* RCS CVS *,v *,t
    </Directory>
    <Directory "/var/www/backups">
        IndexIgnoreReset ON
        IndexIgnore .??* *# HEADER* README* RCS CVS *,v *,t
    </Directory>

    Revoyez la configuration par défaut pour une liste de modèles que vous voulez ignorer explicitement après usage de cette directive.

    top

    Directive IndexOptions

    Description:Diverses options de configuration pour l'indexation d'un répertoire
    Syntaxe:IndexOptions [+|-]option [[+|-]option] ...
    Défaut:Par défaut, aucune option n'est activée.
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    La directive IndexOptions permet de spécifier les options de configuration de l'indexation du répertoire. option peut prendre l'une des valeurs suivantes :

    AddAltClass
    Ajoute une déclaration de classe CSS supplémentaire à chaque enregistrement de la table du listing du répertoire dans le cas où IndexOptions HTMLTable est activé et où un IndexStyleSheet a été défini. Plutôt que d'appliquer à chaque enregistrement de la table les classes standards even et odd, c'est ici une classe even-ALT ou odd-ALT qui sera appliquée, où ALT sera soit le texte alternatif standard associé au style du fichier (par exemple snd, txt, img, etc...), soit le texte alternatif défini par une des différentes directives AddAlt*.
    Charset=jeu de caractères (Versions 2.0.61 et supérieures du serveur HTTP Apache)
    Le mot-clé Charset vous permet de spécifier le jeu de caractères de la page générée. La valeur par défaut est UTF-8 sous Windows et MAC OS X, et ISO-8859-1 dans les autres cas (en fait selon que le système de fichiers sous-jacent utilise les noms de fichiers en Unicode ou non).
    IndexOptions Charset=UTF-8
    DescriptionWidth=[n | *]
    Le mot-clé DescriptionWidth vous permet de spécifier la taille en caractères de la colonne description.
    Avec -DescriptionWidth (ou si l'option n'est pas définie), mod_autoindex calcule la meilleure taille.
    DescriptionWidth=n fixe la taille de la colonne à n octets.
    DescriptionWidth=* ajuste la taille de la colonne à la plus longue chaîne de description. Voir la section concernant AddDescription pour les dangers inhérants à la troncature des descriptions.
    FancyIndexing
    Cette option active l'indexation "améliorée" des répertoires, c'est à dire avec en-têtes de colonnes sous forme d'hyper-liens auto-référants.
    FoldersFirst
    Lorsque cette option est activée, la liste des sous-répertoires apparaîtra toujours en premier, suivie de la liste des fichiers normaux du répertoire. Le listing comporte principalement deux parties, les fichiers et les sous-répertoires, chacun d'eux étant trié séparément et les sous-répertoires affichés en premier. Par exemple, si l'ordre de tri est décroissant par nom, et si FoldersFirst est activé, le sous-répertoire Zed sera affiché avant le sous-répertoire Beta, qui sera lui-même affiché avant les fichiers normaux Gamma et Alpha. Cette option n'a d'effet que si FancyIndexing est aussi activé.
    HTMLTable
    Cette option pour l'affichage FancyIndexing permet de construire une table simple pour l'affichage de l'index du répertoire. Cette option s'avèrera particulièrement nécessaire pour les plates-formes où utf-8 est activé et dans le cas où les noms de fichiers ou les chaînes de description alternent entre les ordres de lecture gauche à droite et droite à gauche.
    IconsAreLinks
    Configure la partie réservée aux icônes de l'ancrage pour le nom de fichier, dans le cas d'un affichage "amélioré".
    IconHeight[=pixels]
    Si cette option est présente, en combinaison avec IconWidth, le serveur va inclure les attributs height et width dans la balise img qui référence le fichier de l'icône. Ceci va permettre au navigateur de prévoir les caractéristiques de la page sans devoir attendre que toutes les images aient été chargées. En l'absence de cette option, c'est la hauteur standard définie par le logiciel Apache httpd qui est choisie comme valeur par défaut. Cette option n'a d'effet que si FancyIndexing est aussi activé.
    IconWidth[=pixels]
    Si cette option est présente, en combinaison avec IconHeight, le serveur va inclure les attributs height et width dans la balise img qui référence le fichier de l'icône. Ceci va permettre au navigateur de prévoir les caractéristiques de la page sans devoir attendre que toutes les images aient été chargées. En l'absence de cette option, c'est la largeur standard définie par le logiciel Apache httpd qui est choisie comme valeur par défaut.
    IgnoreCase
    Si cette option est activée, les noms sont triés sans tenir compte de la casse. Par exemple, si le tri s'effectue sur les noms dans l'ordre croissant, et si IgnoreCase est activé, le fichier Zeta apparaîtra après le fichier alfa (Note : le fichier GAMMA apparaîtra toujours avant le fichier gamma).
    IgnoreClient
    Si cette option est activée, mod_autoindex va ignorer toutes les variables de requête fournies par le client, y compris les informations de tri (ce qui implique l'activation de l'option SuppressColumnSorting).
    NameWidth=[n | *]
    Le mot-clé NameWidth vous permet de spécifier la largeur en octets de la colonne correspondant au nom du fichier.
    Avec -NameWidth (ou si l'option n'est pas définie), mod_autoindex va calculer la meilleure largeur possible, mais jusqu'à une largeur maximale de 20 octets.
    NameWidth=n fixe la largeur de la colonne à n octets.
    NameWidth=* définit la largeur de colonne à la valeur nécessaire.
    ScanHTMLTitles
    L'activation de cette option permet d'extraire le titre des documents HTML dans le cas d'un affichage "amélioré". Si le fichier ne possède aucune description définie par la directive AddDescription, httpd va lire le document pour tenter d'en extraire le titre. Ce processus est coûteux en ressources disque et CPU.
    ShowForbidden
    Si cette option est activée, Apache httpd affichera les fichiers normalement cachés suite au retour des valeurs HTTP_UNAUTHORIZED ou HTTP_FORBIDDEN par la sous-requête.
    SuppressColumnSorting
    Si cette option est activée, Apache httpd supprimera les liens hyper-texte dans les en-têtes de colonnes dans le cas d'un affichage "amélioré". Par défaut, ces en-têtes constituent des liens hyper-texte, et la sélection de l'un d'entre eux va trier l'index du répertoire en fonction des valeurs de la colonne correspondante. Cependant, les arguments de la chaîne de paramètres de la requête ajoutés à l'URL seront toujours ignorés. Ce comportement est contrôlé par l'option IndexOptions IgnoreClient.
    SuppressDescription
    L'activation de cette option va supprimer la description des fichiers dans le cas d'un affichage "amélioré". Par défaut aucune description de fichier n'est définie, et par conséquent l'utilisation de cette option va permettre de récupérer un espace à l'écran de 23 caractères pouvant être utilisé pour autre chose. Voir la directive AddDescription pour plus d'informations à propos de la définition des descriptions de fichiers. Voir aussi l'option d'index DescriptionWidth pour limiter la taille de la colonne description. Cette option n'a d'effet que si FancyIndexing est aussi activé.
    SuppressHTMLPreamble
    Si le répertoire contient effectivement le fichier spécifié par la directive HeaderName, le module inclut en général le contenu du fichier après avoir inséré un préambule HTML standard (<html>, <head>, etc...). L'activation de l'option SuppressHTMLPreamble supprime l'insertion de ce préambule, et le module va alors commencer l'affichage directement par le contenu du fichier d'en-tête. Dans ce cas par contre, le fichier d'en-tête doit contenir des instructions HTML appropriées. S'il n'y a pas de fichier d'en-tête, le préambule est généré comme dans le cas général. Si vous spécifiez aussi une directive ReadmeName, et si ce fichier existe, les balises de fermeture closing </body></html> seront aussi omises dans la sortie, en supposant que vous ayez placé ces balises de fermeture dans ce fichier.
    SuppressIcon
    L'activation de cette option supprime l'affichage des icônes dans le cas d'un affichage "amélioré". La combinaison de SuppressIcon et SuppressRules permet de générer une sortie au format HTML 3.2 qui, selon les dernières spécifications, interdit les éléments img et hr dans les blocs pre (utilisés pour formater les affichages "améliorés").
    SuppressLastModified
    L'activation de cette option supprime l'affichage de la date de dernière modification dans le cas d'un affichage "amélioré". Cette option n'a d'effet que si FancyIndexing est aussi activé.
    SuppressRules
    L'activation de cette option supprime l'affichage des lignes horizontales (éléments hr) dans les index de répertoires. La combinaison de SuppressIcon et SuppressRules permet de générer une sortie au format HTML 3.2 qui, selon les dernières spécifications, interdit les éléments img et hr dans les blocs pre (utilisés pour formater les affichages "améliorés"). Cette option n'a d'effet que si FancyIndexing est aussi activé.
    SuppressSize
    L'activation de cette option supprime l'affichage de la taille du fichier dans le cas d'un affichage "amélioré". Cette option n'a d'effet que si FancyIndexing est aussi activé.
    TrackModified
    Cette option renvoie les valeurs Last-Modified et ETag pour le répertoire indexé dans l'en-tête HTTP. Elle n'est valide que si le système d'exploitation et le système de fichiers renvoient des résultats appropriés pour la fonction stat(). C'est le cas de certains systèmes Unix, ainsi que JFS sous OS/2 ou les volumes NTFS sous Win32. Ce n'est par contre pas le cas des volumes FAT Win32 et OS/2. Lorsque cette option est activée, le client ou le mandataire peuvent détecter les changements dans la liste des fichiers lorsqu'ils effectuent une requête HEAD. Notez que certains systèmes d'exploitation détectent correctement les nouveaux fichiers et les fichiers supprimés, mais ne détectent pas les modifications de tailles ou de dates des fichiers du répertoire. Les modifications de taille ou de date d'un fichier existant ne mettent pas à jour l'en-tête Last-Modified sur toutes les plate-formes Unix. Si c'est le cas, laissez cette option désactivée.
    Type=type MIME (Versions 2.0.61 et supérieures du serveur HTTP Apache)
    Le mot-clé Type vous permet de spécifier le type MIME de la page générée. La valeur par défaut est text/html.
    IndexOptions Type=text/plain
    UseOldDateFormat (Apache HTTP Server versions 2.4.26 et ultérieures)
    Le format de date utilisé dans le champ Last Modified avait été modifié par inadvertance de "%d-%b-%Y %H:%M" en "%Y-%m-%d %H:%M" dans la version 2.4.0. Cette option permet de restaurer le format de date des versions 2.2 et antérieures.
    VersionSort (Versions 2.0a3 et supérieures du serveur HTTP Apache)
    Le mot-clé VersionSort permet de trier les fichiers contenant des numéros de version d'une manière spécifique. Les chaînes sont triées comme d'habitude, excepté les sous-chaînes de chiffres du nom de fichier et de sa description qui sont comparées en fonction de leur valeur numérique.

    Exemple :

    foo-1.7
    foo-1.7.2
    foo-1.7.12
    foo-1.8.2
    foo-1.8.2a
    foo-1.12

    Si le nombre commence par le chiffre 0, il est considéré comme la partie fractionnaire d'un nombre :

    foo-1.001
    foo-1.002
    foo-1.030
    foo-1.04

    XHTML (Versions 2.0.49 et supérieures du serveur HTTP Apache)
    Le mot-clé XHTML enjoint mod_autoindex de générer du code XHTML 1.0 au lieu de HTML 3.2. Cette option n'a d'effet que si FancyIndexing est aussi activé.
    Options d'index incrémentales

    Vous devez porter une attention particulière à la manière dont les IndexOptions multiples sont traitées.

    • Plusieurs directives IndexOptions apparaissant dans la même section directory sont maintenant fusionnées. Le résultat de :
      <Directory "/foo">
          IndexOptions HTMLTable
          IndexOptions SuppressColumnsorting
      </Directory>

      est équivalent à

      IndexOptions HTMLTable SuppressColumnsorting
    • L'ajout de la syntaxe incrémentale (en préfixant les mots-clés avec + ou -).

    Chaque fois qu'un mot-clé préfixé par '+' ou '-' est trouvé, il est appliqué aux définitions des IndexOptions courantes (qui ont été éventuellement héritées d'un directory de niveau supérieur). Par contre, si un mot-clé non préfixé est trouvé, il supprime toutes les definitions héritées, ainsi que toute définition incrémentale. Considérons l'exemple suivant :

    IndexOptions +ScanHTMLTitles -IconsAreLinks FancyIndexing
    IndexOptions +SuppressSize

    L'effet global est équivalent à l'effet qu'aurait provoqué IndexOptions FancyIndexing +SuppressSize, car l'option non préfixée FancyIndexing annule les mots-clés incrémentaux situés avant elle, mais leur permet ensuite de s'incrémenter à nouveau.

    Pour définir inconditionnellement les IndexOptions pour un répertoire particulier, tout en supprimant les définitions héritées, spécifiez les mots-clés sans préfixe + ou -

    top

    Directive IndexOrderDefault

    Description:Définit l'ordre d'affichage par défaut d'un index de répertoire
    Syntaxe:IndexOrderDefault Ascending|Descending Name|Date|Size|Description
    Défaut:IndexOrderDefault Ascending Name
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    La directive IndexOrderDefault s'utilise en combinaison avec l'option d'index FancyIndexing. Par défaut, les index de répertoires "améliorés" sont affichés selon l'ordre croissant des noms de fichiers ; la directive IndexOrderDefault vous permet de modifier ce comportement.

    La directive IndexOrderDefault accepte deux arguments. Le premier est soit Ascending, soit Descending, et indique l'ordre de tri. Le second doit prendre une des valeurs Name, Date, Size, ou Description, et permet d'identifier la clé primaire. La clé secondaire est toujours le nom du fichier selon un ordre croissant.

    Si vous le désirez, vous pouvez empêcher le client de modifier l'ordre de tri de la liste en ajoutant l'option d'index SuppressColumnSorting qui supprime le lien de définition du tri de l'en-tête de la colonne, ainsi que l'option IgnoreClient qui empêche ce même client de passer outre vos préférences de tri en ajoutant manuellement des options de tri à la chaîne de paramètres de la requête.

    top

    Directive IndexStyleSheet

    Description:Ajoute une feuille de style CSS à l'index du répertoire
    Syntaxe:IndexStyleSheet chemin-url
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    La directive IndexStyleSheet permet de définir le nom du fichier qui servira de feuille de style CSS pour l'index.

    IndexStyleSheet "/css/style.css"

    L'utilisation de cette directive en conjonction avec IndexOptions HTMLTable ajoute plusieurs classes CSS au document HTML résultant. Un identifiant CSS indexlist est attribué à l'ensemble de la table et les classes suivantes sont associées aux différentes parties du listing :

    ClasseDéfinition
    tr.indexheadLigne d'en-tête du listing
    th.indexcolicon and td.indexcolicon Colonne de l'icône
    th.indexcolname and td.indexcolname Colonne du nom du fichier
    th.indexcollastmod and td.indexcollastmod Colonne de la date de dernière modification
    th.indexcolsize and td.indexcolsize Colonne de la taille du fichier
    th.indexcoldesc and td.indexcoldesc Colonne de la description
    tr.breakrow Pied de page
    tr.odd and tr.even Alternance des lignes paires et impaires
    top

    Directive ReadmeName

    Description:Nom du fichier dont le contenu sera inséré à la fin de l'index
    Syntaxe:ReadmeName nom-fichier
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_autoindex

    La directive ReadmeName permet de définir le nom du fichier dont le contenu sera ajouté à la fin de l'index. nom-fichier est le nom du fichier à inclure, et est considéré comme relatif au répertoire faisant l'objet de l'index. Si nom-fichier commence par un slash '/', comme dans l'exemple 2, il sera considéré comme relatif au répertoire défini par la directive DocumentRoot.

    # Example 1
    ReadmeName FOOTER.html
    # Example 2
    ReadmeName /include/FOOTER.html

    Voir aussi la directive HeaderName, où cette fonctionnalité est décrite plus en détails.

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_http2.html.fr.utf80000644000000000000500000020163213503452341020305 0ustar rootsrc mod_http2 - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_http2

    Langues Disponibles:  en  |  fr 

    Description:Support de la couche transport HTTP/2
    Statut:Extension
    Identificateur de Module:http2_module
    Fichier Source:mod_http2.c
    Compatibilité:Disponible à partir de la version 2.4.17 du serveur HTTP Apache

    Sommaire

    Ce module ajoute le support de HTTP/2 (RFC 7540) au serveur HTTP Apache.

    Il s'appuie sur la bibliothèque libnghttp2 pour implémenter le moteur de base http/2.

    Pour mettre en oeuvre les fonctionnalités décrites dans ce document, vous devez activer HTTP/2 en utilisant la directive Protocols. HTTP/2 n'imposant pas de chiffrement, deux protocoles sont disponibles : h2 (HTTP/2 avec TLS) at h2c (HTTP/2 avec TCP).

    Voici deux types de configuration courant :

    HTTP/2 dans un contexte de serveur virtuel (TLS seulement)

    Protocols h2 http/1.1

    Permet une négociation HTTP/2 (h2) via TLS ALPN au sein d'un <VirtualHost> sécurisé. La vérification du préambule HTTP/2 (mode direct, voir H2Direct) est désactivée par défaut pour h2.

    HTTP/2 dans un contexte de serveur (TLS et texte pur)

    Protocols h2 h2c http/1.1

    Permet une négociation HTTP/2 (h2) via TLS ALPN au sein d'un <VirtualHost> sécurisé. Permet aussi une négociation HTTP/2 en texte pur (h2c) en effectuant une mise à jour depuis une connexion initiale HTTP/1.1 ou via une vérification du préambule HTTP/2 (mode direct, voir H2Direct).

    Si vous avez besoin d'informations supplémentaires à propos du protocole, veuillez vous reporter à la HTTP/2 FAQ.

    top

    Comment ça marche ?

    Quantification des ressources supplémentaires nécessaires à HTTP/2

    Activer HTTP/2 sur votre serveur Apache a un impact sur la consommation de ressources, et si votre site est très actif, il est conseillé d'en prendre sérieusement en compte les implications.

    HTTP/2 attribue à chaque requête qu'il reçoit son propre thread de travail pour son traitement, la collecte des résultats et l'envoie de ces derniers au client. Pour y parvenir, il lui faut lancer des threads supplémentaires, et ceci constituera le premier effet notable de l'activation de HTTP/2.

    Dans l'implémentation actuelle, ces threads de travail font partie d'un jeu de threads distinct de celui des threads de travail du MPM avec lequel vous êtes familié. Il s'agit simplement du mode de fonctionnement actuel, et il n'en sera pas obligatoirement toujours ainsi (il est cependant probable que la situation restera inchangée avec la version 2.4.x). De par ce mode de fonctionnement, les threads de travail HTTP/2, ou plus simplement H2 ne seront pas affichés par mod_status. De même, ils ne seront pas pris en compte par les directives du style ThreadsPerChild. Par contre, ils utilisent par défaut la valeur de ThreadsPerChild si vous n'avez pas spécifié d'autres valeurs via H2MinWorkers et H2MaxWorkers.

    Autre changement à surveiller : la consommation de mémoire. En effet, comme HTTP/2 conserve plus d'informations sur le serveur pour gérer toutes les requêtes en cours, leurs priorités et interdépendances, il aura toujours besoin de plus de mémoire que pour un traitement en HTTP/1.1. Trois directives permettent de limiter l'empreinte mémoire d'une connexion HTTP/2 : H2MaxSessionStreams, H2WindowSize et H2StreamMaxMemSize.

    La directive H2MaxSessionStreams permet de limiter le nombre de requêtes simultanées qu'un client peut envoyer sur une connexion HTTP/2. La valeur que vous allez définir dépend de votre site. La valeur par défaut qui est de 100 est largement suffisante, et à moins que vous ne soyez un peu juste en mémoire, je vous conseille de ne pas la modifier. La plupart des requêtes qu'envoie un client sont des requêtes de type GET sans corps qui n'utilisent que très peu de mémoire en attendant le démarrage du traitement.

    La directive H2WindowSize permet de définir la taille maximale que peut avoir le corps d'une requête que le client envoie avant d'attendre que le serveur en demande d'avantage. En d'autres termes, il s'agit de la quantité de données que le serveur peut stocker dans son tampon, valable pour une requête.

    En outre, la directive H2StreamMaxMemSize permet de définir la quantité de données de la réponse qui doit être mise en tampon. Chaque requête étant prise en charge par un thread H2Worker et produisant des données que le serveur tente de transmettre au client via une connexion HTTP/2, si le client n'est pas en mesure de lire ces données assez rapidement, la connexion les mettra en tampon et interrompra l'exécution du thread H2Worker correspondant.

    Serveurs virtuels et requêtes mal redirigées

    De nombreux site utilisent le même certificat TLS pour plusieurs serveurs virtuels. Ce certificat référence un nom de serveur générique comme '*.example.org' ou plusieurs noms de serveur différents. Les navigateurs qui utilisent HTTP/2 détectent ce comportement et réutilisent une connexion déjà ouverte pour ces serveurs.

    Ceci améliore considérablement les performances, mais il y a un prix à payer : il faut accorder un soin tout particulier à la configuration de tels serveurs virtuels. Le problème réside dans le fait que plusieurs requêtes pour plusieurs serveurs virtuels vont se partager la même connexion TLS, et ceci empêche toute renégociation car le standard HTTP/2 l'interdit.

    Ainsi, lorsque plusieurs de vos serveurs virtuels utilisent le même certificat et si vous souhaitez utiliser HTTP/2 pour y accéder, vous devez vous assurer que tous vos serveurs virtuels possèdent exactement la même configuration SSL. En particulier, ils doivent utiliser les mêmes protocole, algorithme de chiffrement et configuration pour la vérification du client.

    Dans le cas contraire, Apache httpd le détectera et renverra au client un code de réponse spécial, 421 Misdirected Request.

    Variables d'environnement

    Ce module peut être configuré pour fournir des informations en rapport avec HTTP/2 sous la forme de variables d'environnement supplémentaires dans l'espace de nommage SSI et CGI, ainsi que dans les configurations personnalisées de le journalisation (voir %{VAR_NAME}e).

    Nom variable : Type : Description :
    HTTPedrapeauHTTP/2 est utilisé.
    H2PUSHdrapeauLa fonctionnalité HTTP/2 Server Push est activée pour cette requête et supportée par le client.
    H2_PUSHdrapeauautre nom pour H2PUSH
    H2_PUSHEDchaînevide ou PUSHED pour une requête pushée par le serveur.
    H2_PUSHED_ONnombrenuméro du flux HTTP/2 qui a déclenché le push de cette requête.
    H2_STREAM_IDnombrenuméro du flux HTTP/2 de cette requête.
    H2_STREAM_TAGchaîneidentifiant de flux unique du processus HTTP/2 composé de l'identifiant de la connexion et de l'identifiant du flux séparés par -.
    top

    Directive H2CopyFiles

    Description:Contrôle la gestion des fichiers dans les réponses
    Syntaxe:H2CopyFiles on|off
    Défaut:H2CopyFiles off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_http2
    Compatibilité:Disponible à partir de la version 2.4.24 du serveur HTTP Apache.

    Cette directive permet de définir la manière de gérer les contenus de fichiers dans les réponses. Lorsqu'elle est à off (sa valeur par défaut), les descripteurs de fichiers sont transmis par le processus de traitement de la requête vers la connexion principale en utilisant le système habituel de mise en réserve d'Apache pour gérer le durée de vie du fichier.

    Lorsqu'elle est à on, le contenu du fichier est recopier pendant le traitement de la requête et ces données mises en tampon sont transmises vers la connexion principale, ce qui s'avère avantageux lorsqu'un module tiers injecte dans la réponse des fichiers possédant des durées de vie différentes.

    Un exemple de ces modules tiers : mod_wsgi qui peut injecter des descripteurs de fichiers dans la réponse. Ces fichiers sont fermés lorsque Python estime que le traitement est terminé, alors que mod_http2 est probablement encore loin d'en avoir fini avec eux.

    top

    Directive H2Direct

    Description:Activation du protocole H2 Direct
    Syntaxe:H2Direct on|off
    Défaut:H2Direct on pour h2c, off pour le protocole h2
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_http2

    Cette directive permet d'activer/désactiver l'utilisation du mode HTTP/2 Direct. Elle doit être située dans une section <VirtualHost> afin d'activer la communication directe HTTP/2 pour le serveur virtuel considéré.

    La notion de communication directe signifie que si les premiers octets reçus par le serveur correspondent à un en-tête HTTP/2, le protocole HTTP/2 est utilisé sans négociation supplémentaire. Ce mode est défini pour les transmissions en clair (h2c) dans la RFC 7540. Son utilisation avec les connexions TLS n'est pas officiellement supportée.

    Lorsque le protocole h2 ou h2c n'est pas activé via la directive Protocols, la recherche d'un en-tête HTTP/2 n'est jamais effectuée au sein d'une connexion. La directive H2Direct ne produit alors aucun effet. Ceci est important pour les connexions qui utilisent un protocole pour lequel une lecture initiale peut entraîner un blocage définitif comme NNTP.

    Pour un client qui sait qu'un serveur supporte h2c, la communication directe HTTP/2 dispense le client d'une mise à jour HTTP/1.1, ce qui entraîne une amélioration des performances et évite les restrictions sur les corps de requête suite à une mise à jour.

    Cette directive rend aussi h2c plus attractif pour les communications de serveur à serveur lorsque la connexion est sure ou peut être sécurisée d'une manière ou d'une autre.

    Exemple

    H2Direct on
    top

    Directive H2EarlyHints

    Description:Contrôle l'envoi de codes d'état 103
    Syntaxe:H2EarlyHints on|off
    Défaut:H2EarlyHints off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_http2
    Compatibilité:Disponible à partir de la version 2.4.24 du serveur HTTP Apache.

    Cette directive permet de définir si les réponses intermédiaires contenant un code d'état HTTP 103 doivent être envoyées au client ou non. Par défaut ce n'est actuellement pas le cas car certains clients ont encore des problèmes avec les réponses intermédiaires inattendues.

    Lorsque cette directive est définie à on, les ressources PUSHées définie par la directive H2PushResource déclenchent une réponse intermédiaire 103 avant la réponse finale. Cette réponse 103 comporte des en-têtes Link qui provoquent le préchargement des ressources considérées.

    top

    Directive H2MaxSessionStreams

    Description:Nombre maximal de flux actifs par session HTTP/2.
    Syntaxe:H2MaxSessionStreams n
    Défaut:H2MaxSessionStreams 100
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_http2

    Cette directive permet de définir le nombre maximal de flux actifs par session (connexion) HTTP/2 accepté par le serveur. Selon la RFC 7540, un flux est considéré comme actif s'il n'est ni en attente ni fermé.

    Exemple

    H2MaxSessionStreams 20
    top

    Directive H2MaxWorkerIdleSeconds

    Description:Nombre maximal de secondes pendant lequel une unité de traitement h2 pourra rester inactive sans être arrêtée.
    Syntaxe:H2MaxWorkerIdleSeconds n
    Défaut:H2MaxWorkerIdleSeconds 600
    Contexte:configuration globale
    Statut:Extension
    Module:mod_http2

    Cette directive permet de définir le nombre maximal de secondes pendant lequel une unité de traitement h2 pourra rester inactive avant de s'arrêter elle-même. Cet arrêt ne peut cependant se produire que si le nombre d'unités de traitement h2 dépasse H2MinWorkers.

    Exemple

    H2MaxWorkerIdleSeconds 20
    top

    Directive H2MaxWorkers

    Description:Nombre maximal de threads à utiliser pour chaque processus enfant.
    Syntaxe:H2MaxWorkers n
    Contexte:configuration globale
    Statut:Extension
    Module:mod_http2

    Cette directive permet de définir le nombre maximal de threads à lancer pour le traitement HTTP/2 de chaque processus enfant. Si cette directive n'est pas définie, mod_http2 choisira une valeur appropriée en fonction du module mpm utilisé. This directive sets the maximum number of worker threads to spawn per child process for HTTP/2 processing. If this directive is not used, mod_http2 will chose a value suitable for the mpm module loaded.

    Exemple

    H2MaxWorkers 20
    top

    Directive H2MinWorkers

    Description:Nombre minimal de threads à utiliser pour chaque processus enfant.
    Syntaxe:H2MinWorkers n
    Contexte:configuration globale
    Statut:Extension
    Module:mod_http2

    Cette directive permet de définir le nombre minimal de threads à lancer pour le traitement HTTP/2 de chaque processus enfant. Si cette directive n'est pas définie, mod_http2 choisira une valeur appropriée en fonction du module mpm utilisé.

    Exemple

    H2MinWorkers 10
    top

    Directive H2ModernTLSOnly

    Description:Impose les connexions HTTP/2 en mode "TLS moderne" seulement
    Syntaxe:H2ModernTLSOnly on|off
    Défaut:H2ModernTLSOnly on
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_http2
    Compatibilité:Disponible à partir de la version 2.4.18 du serveur HTTP Apache.

    Cette directive permet de définir si les vérifications de sécurité sur les connexions HTTP/2 doivent être exclusivement en mode TLS (https:). Elle peut être placée au niveau du serveur principal ou dans une section <VirtualHost>.

    Les vérifications de sécurité nécessitent TLSv1.2 au minimum et l'absence de tout algorithme de chiffrement listé dans la RFC 7540, Appendix A. Ces vérifications seront étendues lorsque de nouveaux prérequis en matière de sécurité seront mis en place.

    Le nom provient des définitions Mozilla Security/Server Side TLS où il est question de "modern compatibility". Mozilla Firefox et d'autres navigateurs imposent la "modern compatibility" pour les connexions HTTP/2. Comme toute chose en matière de sécurité opérationnelle, c'est une cible mouvante susceptible d'évoluer dans le futur.

    Un des buts de ces vérifications dans mod_http2 tend à imposer ce niveau de sécurité pour toutes les connexions, et non seulement celles en provenance des navigateurs web. Un autre but est l'interdiction d'utiliser HTTP/2 en tant que protocole dans les négociations si les prérequis ne sont pas respectés.

    En fin de compte, la sécurité de la connexion TLS est déterminée par les directives de configuration du serveur pour mod_ssl.

    Exemple

    H2ModernTLSOnly off
    top

    Directive H2Padding

    Description:Spécifie un intervalle de nombres d'octets de bourrage à ajouter aux trames utiles
    Syntaxe:H2Padding numbits
    Défaut:H2Padding 0
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_http2
    Compatibilité:Disponible à partir de la version 2.4.39 du serveur HTTP Apache.

    La valeur par défaut 0 indique qu'aucun octet de bourrage ne sera ajouté aux trames utiles comme HEADERS, DATA et PUSH_PROMISE. Ceci correspond au comportement des versions précédentes. Dans ce cas et sous certaines conditions, un observateur du trafic réseau pourra alors déterminer la longueur de ces trames dans le flux TLS.

    Si on attribue à numbits la valeur 1-8, un nombre aléatoire d'octets entre 0 et 2^numbits sont ajoutés à chaque trame. Une valeur aléatoire d'octets de bourrage est attribué indépendamment à chaque trame que le module renvoie au client.

    Pour améliorer la dissimulation de la longueur des trames, on peut augmenter le nombre moyen d'octets de bourrage, mais cela augmente d'autant le trafic réseau. Le nombre optimal d'octets de bourrage dépend donc du type de trafic web que le serveur engendre.

    La valeur par défaut de 0 (aucun octet de bourrage) a été choisie dans un but de compatibilité ascendante. Il peut en effet exister des installations où les octets de bourrage ne sont pas souhaités ou sont néfastes. La cause principale peut provenir d'un client dont l'implémentation comporte des erreurs.

    top

    Directive H2Push

    Description:Activation/désactivation du server push H2
    Syntaxe:H2Push on|off
    Défaut:H2Push on
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_http2
    Compatibilité:Disponible à partir de la version 2.4.18 du serveur HTTP Apache.

    Cette directive permet d'activer/désactiver l'utilisation de la fonctionnalité server push du protocole HTTP/2.

    Lorsqu'un client demande une ressource particulière, le protocole HTTP/2 permet au serveur de lui fournir des ressources supplémentaires. Ceci s'avère utile lorsque ces ressources sont reliées entre elles, ce qui peut laisser supposer que le client va probablement les demander dans un délai plus ou moins long. Le mécanisme de pushing permet alors au client d'économiser le temps qu'il lui aurait fallu pour demander ces ressources supplémentaires lui-même. Par contre, fournir au client des ressources dont il n'a pas besoin ou qu'il possède déjà constitue une perte de bande passante.

    Les server pushes sont détectés en inspectant les en-têtes Link des réponses (voir https://tools.ietf.org/html/rfc5988 pour la spécification). Lorsqu'un lien spécifié de cette manière possède l'attribut rel=preload, il est considéré comme devant faire l'objet d'un push.

    Les en-têtes link des réponses sont soit définis par l'application, soit configurés via H2PushResource ou mod_headers comme suit :

    Exemple de configuration d'en-tête link via mod_headers

    <Location /index.html>
        Header add Link "</css/site.css>;rel=preload"
        Header add Link "</images/logo.jpg>;rel=preload"
    </Location>

    Comme le montre l'exemple, il est possible d'ajouter autant d'en-têtes link que l'on souhaite à une réponse, ce qui déclenchera autant de pushes. Cette fonctionnalité doit donc être utilisée avec prudence car le module ne vérifie pas si une ressource n'a pas déjà été "pushée" vers un client.

    Les PUSH HTTP/2 sont activés par défaut. Vous pouvez activer/désactiver cette fonctionnalité pour toute connexion au serveur au niveau global ou serveur virtuel. Vous pouvez en outre désactiver PUSH pour un jeu de ressources dans une section Directory/Location. Notez que ceci permet de contrôler quelles ressources peuvent déclencher un PUSH, mais pas les ressources qui peuvent être envoyées via PUSH.

    Exemple

    H2Push off

    Enfin, il est important de savoir que les pushes ne se produisent que si le client en manifeste le désir ; la plupart des navigateurs le font, mais certains, comme Safari 9, ne le font pas. En outre, les pushes ne se produisent que pour les ressources de la même autorité que celle de la réponse originale.

    top

    Directive H2PushDiarySize

    Description:Taille du journal des Pushes H2
    Syntaxe:H2PushDiarySize n
    Défaut:H2PushDiarySize 256
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_http2
    Compatibilité:Disponible à partir de la version 2.4.19 du serveur HTTP Apache.

    Cette directive permet de définir le nombre maximum de pushes qui seront enregistrés pour une connexion HTTP/2. Elle peut être placée dans une section <VirtualHost> afin de définir le nombre de pushes pour le serveur virtuel considéré.

    Le journal des pushes enregistre un condensé (sous la forme d'un nombre de 64 bits) des ressources préchargées (leurs URLs) afin d'éviter les duplications de pushes pour une même connexion. Cependant, ces données ne sont pas conservées, et les clients qui ouvrent une nouvelle connexion se verront à nouveau affecter les mêmes pushes. A ce titre, une étude est en cours pour permettre au client de supprimer le condensé des ressources qu'il possède déjà, et par là-même de réinitialiser le journal des pushes à chaque nouvelle connexion.

    Si la taille maximale est atteinte, les nouvelles entrées remplacent les plus anciennes. Une entrée du journal nécessitant 8 octets, un journal de 256 entrées consomme 2 Ko de mémoire.

    Si cette directive est définie à 0, le journal des pushes est désactivé.

    top

    Directive H2PushPriority

    Description:Priorité des pushes H2
    Syntaxe:H2PushPriority mime-type [after|before|interleaved] [weight]
    Défaut:H2PushPriority * After 16
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_http2
    Compatibilité:Disponible à partir de la version 2.4.18 du serveur HTTP Apache. Nécessite la bibliothèque nghttp2 version 1.5.0 ou supérieure.

    Cette directive permet de définir une gestion de priorité des pushes en fonction du type de contenu de la réponse. Elle est en général définie au niveau du serveur principal, mais peut aussi l'être au niveau d'un serveur virtuel.

    Les pushes HTTP/2 sont toujours liés à une requête client. Chaque paire requête/réponse de cette sorte, ou flux, possède une dépendance et un poids qui définissent la priorité du flux.

    Lorsqu'un flux dépend d'un autre, disons X dépend de Y, alors Y reçoit toute la bande passante avant que X n'en reçoive ne serait-ce qu'une partie. Notez que cela ne signifie en rien que Y bloque X ; en effet, si Y n'a aucune donnée à envoyer, toute la bande passante qui lui est allouée peut être utilisée par X.

    Lorsque plusieurs flux dépendent d'un même autre flux, disons X1 et X2 dépendent tous deux de Y, le poids détermine la bande passante allouée. Ainsi, si X1 et X2 possèdent le même poids, ils recevront tous deux la moitié de la bande passante disponible. Si le poids de X1 est égal au double de celui de X2, X1 recevra une bande passante double de celle de X2.

    En fin de compte, tout flux dépend du flux racine qui reçoit toute la bande passante disponible mais n'envoie jamais de données. Cette bande passante est ainsi répartie entre les flux enfants selon leur poids. Ces derniers l'utilisent alors pour envoyer leurs données ou pour la répartir entre leurs propres flux enfants, et ainsi de suite. Si aucun des flux enfants n'a de données à envoyer, la bande passante est attribuée à d'autres flux selon les mêmes règles.

    Ce système de priorités a été conçu de façon a toujours pouvoir utiliser la bande passante disponible tout en définissant des priorités et en attribuant des poids aux différents flux. Ainsi, tous les flux sont en général initialisés par le client qui lui-même définit les priorités.

    Seul le fait de savoir qu'un flux implique un PUSH permet au serveur de décider quelle est la priorité initiale d'un tel flux. Dans les exemples ci-dessous, X est le flux client. Il dépend de Y et le serveur décide de "PUSHer" les flux P1 et P2 sur X.

    La règle de priorité par défaut est :

    Règle de priorité par défaut

    H2PushPriority * After 16

    Elle peut se traduire par "Envoyer un flux PUSH avec tout type de contenu et dépendant du flux client avec le poids 16". P1 et P2 seront alors envoyés après X, et comme leurs poids sont identiques, il se verront allouer la même quantité de bande passante.

    Règle de priorité entrelacée

    H2PushPriority text/css Interleaved 256

    Ce qui peut se traduire par "Envoyer toute ressource CSS dans la même dépendance et avec le même poids que le flux client". Si le type de contenu de P1 est "text/css", il dépendra de Y (comme X) et son poids effectif sera calculé selon la formule : P1ew = Xw * (P1w / 256). Si P1w est de 256, Le poids effectif de P1 sera le même que celui de X. Si X et P1 ont des données à envoyer, il se verront allouer la même quantité de bande passante.

    Avec un Pw de 512, un flux entrelacé et PUSHé aura un poids double de celui de X. Avec un poids de 128, son poids ne sera que la moitié de celui de X. Notez que les poids effectifs sont toujours plafonnés à 256.

    Règle de priorité Before

    H2PushPriority application/json Before

    Dans cet exemple, tout flux PUSHé dont le contenu est de type 'application/json' sera envoyé avant X, ce qui rend P1 dépendant de Y et X dépendant de P1. Ainsi, X sera mis en attente aussi longtemps que P1 aura des données à envoyer. Le poids effectif est hérité du flux client, et l'attribution d'un poids spécifique n'est pas autorisée.

    Vous devez garder à l'esprit que les spécifications en matière de priorités sont limitées par les ressources disponibles du serveur. Si un serveur ne dispose d'aucun processus/thread de travail pour les flux PUSHés, les données du flux considéré ne seront envoyées que lorsque les autres flux auront terminé l'envoi des leurs.

    Enfin et surtout, il convient de tenir compte de certaines particularités de la syntaxe de cette directive :

    1. '*' est la seule expression permettant de remplacer tout type de contenu. 'image/*' ne fonctionnera pas.
    2. La dépendance par défaut est 'After'.
    3. Il existe aussi des poids par défaut : pour 'After' le poids est de 16, alors que pour 'interleaved' il est de 256.

    Exemples de règles

    H2PushPriority application/json 32         # une règle de priorité 'After'
    H2PushPriority image/jpeg before           # poid hérité
    H2PushPriority text/css   interleaved      # poids de 256 par défaut
    top

    Directive H2PushResource

    Description:Déclare des ressources à proposer ("pusher") au client
    Syntaxe:H2PushResource [add] path [critical]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_http2
    Compatibilité:Disponible à partir de la version 2.4.24 du serveur HTTP Apache.

    Lorsqu'il sont activés pour un répertoire, les PUSHes HTTP/2 seront tentés pour tous les chemins ajoutés via cette directive. Cette dernière peut être utilisée plusieurs fois pour le même répertoire.

    Cette directive propose des ressources beaucoup plus tôt que les en-têtes Link de mod_headers. mod_http2 présente ces ressources au client via une réponse intermédiaire 103 Early Hints. Ceci implique que les clients qui ne supportent pas PUSH recevront quand-même rapidement des propositions de préchargement.

    A la différence de la définition d'en-têtes de réponse Link via mod_headers, cette directive n'aura d'effet que pour les connexions HTTP/2.

    En ajoutant l'option critical à une telle ressource, le serveur la traitera prioritairement, et une fois les données disponibles, ces dernières seront envoyées avant les données de la requête principale.

    top

    Directive H2SerializeHeaders

    Description:Active/désactive la sérialisation du traitement des requêtes/réponses
    Syntaxe:H2SerializeHeaders on|off
    Défaut:H2SerializeHeaders off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_http2

    Cette directive permet de définir si les requêtes HTTP/2 doivent être sérialisées au format HTTP/1.1 pour être traitées par le noyau de httpd, ou si les données binaires reçues doivent être passées directement aux request_recs.

    La sérialisation dégrade les performances, mais garantit une meilleure compatibilité ascendante lorsque des filtres ou programmes accroche personnalisés en ont besoin.

    Exemple

    H2SerializeHeaders on
    top

    Directive H2StreamMaxMemSize

    Description:Quantité maximale de données en sortie mises en tampon par flux.
    Syntaxe:H2StreamMaxMemSize bytes
    Défaut:H2StreamMaxMemSize 65536
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_http2

    Cette directive permet de définir la quantité maximale de données en sortie mises en tampon mémoire pour un flux actif. Ce tampon mémoire n'est pas alloué pour chaque flux en tant que tel. Les quantités de mémoire sont définies en fonction de cette limite lorsqu'elles sont sur le point d'être allouées. Le flux s'arrête lorsque la limite a été atteinte, et ne reprendra que lorsque les données du tampon auront été transmises au client.

    Exemple

    H2StreamMaxMemSize 128000
    top

    Directive H2TLSCoolDownSecs

    Description:Durée d'inactivité d'une connexion TLS avant diminution de la taille des paquets
    Syntaxe:H2TLSCoolDownSecs seconds
    Défaut:H2TLSCoolDownSecs 1
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_http2
    Compatibilité:Disponible à partir de la version 2.4.18 du serveur HTTP Apache.

    Cette directive permet de spécifier le nombre de secondes avant lequel une connexion TLS inactive va diminuer la taille des paquets de données à une valeur inférieure (~1300 octets). Elle peut être définie au niveau du serveur principal ou pour un <serveur virtuel> spécifique.

    Voir la directive H2TLSWarmUpSize pour une description du "préchauffage" de TLS. La directive H2TLSCoolDownSecs met en lumière le fait que les connexions peuvent se détériorer au bout d'un certain temps (et au fur et à mesure des corrections du flux TCP), et cela même si elle sont inactives. Pour ne pas détériorer les performances d'une manière générale, il est par conséquent préférable de revenir à la phase de préchauffage lorsqu'aucune donnée n'a été transmise pendant un certain nombre de secondes.

    Dans les situations où les connexions peuvent être considérées comme fiables, ce délai peut être désactivé en définissant cette directive à 0.

    Dans l'exemple suivant, la directive est définie à 0, ce qui désactive tout retour à une phase de préchauffage des connexions TLS. Les connexions TLS déjà préchauffées conservent donc toujours leur taille de paquet de données maximale.

    Exemple

    H2TLSCoolDownSecs 0
    top

    Directive H2TLSWarmUpSize

    Description:Taille des paquets durant la phase initiale de la connexion TLS
    Syntaxe:H2TLSWarmUpSize amount
    Défaut:H2TLSWarmUpSize 1048576
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_http2
    Compatibilité:Disponible à partir de la version 2.4.18 du serveur HTTP Apache.

    Cette directive permet de définir le nombre d'octets à envoyer dans les petits enregistrements TLS (~1300 octets) avant d'atteindre leur taille maximale de 16 ko pour les connexions https: HTTP/2. Elle peut être définie au niveau du serveur principal ou pour des <Serveurs virtuels> spécifiques.

    Les mesures effectuées par les laboratoires de performances de Google montrent que les meilleurs performances sont atteintes pour les connexions TLS si la taille initiale des enregistrements reste en deça du niveau du MTU afin de permettre à la totatlité d'un enregistrement d'entrer dans un paquet IP.

    Comme TCP ajuste son contrôle de flux et sa taille de fenêtre, des enregistrements TLS trop longs peuvent rester en file d'attente ou même être perdus et devoir alors être réémis. Ceci est bien entendu vrai pour tous les paquets ; cependant, TLS a besoin de la totalité de l'enregistrement pour pouvoir le déchiffrer. Tout octet manquant rendra impossible l'utilisation de ceux qui ont été reçus.

    Lorqu'un nombre suffisant d'octets a été transmis avec succès, la connexion TCP est stable, et la taille maximale (16 ko) des enregistrements TLS peut être utilisée pour des performances optimales.

    Dans les architectures où les serveurs sont atteints par des machines locales ou pour les connexions de confiance seulement, la valeur de cette directive peut être définie à 0, ce qui a pour effet de désactiver la "phase de chauffage".

    Dans l'exemple suivant, la phase de chauffage est effectivement désactivée en définissant la directive à 0.

    Exemple

    H2TLSWarmUpSize 0
    top

    Directive H2Upgrade

    Description:Activation/Désactivation du protocole de mise à jour H2
    Syntaxe:H2Upgrade on|off
    Défaut:H2Upgrade on pour h2c, off pour h2
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_http2

    Cette directive permet d'activer/désactiver l'utilisation de la méthode de mise à jour pour passer de HTTP/1.1 à HTTP/2. Elle doit être placée dans une section <VirtualHost> afin d'activer la mise à jour vers HTTP/2 pour le serveur virtuel considéré.

    Cette méthode de changement de protocole est définie dans HTTP/1.1 et utilise l'en-tête "Upgrade" (d'où son nom) pour indiquer l'intention d'utiliser un autre protocole. Cet en-tête peut être présent dans toute requête sur une connexion HTTP/1.1.

    Elle activée par défaut pour les transmissions en clair (h2c), et désactivée avec TLS (h2), comme préconisé par la RFC 7540.

    Sachez cependant que les mises à jour ne sont acceptées que pour les requêtes qui ne possèdent pas de corps. Le requêtes de type POST et PUT avec un contenu ne feront jamais l'objet d'une mise à jour vers HTTP/2. Se référer à la documentation de la directive H2Direct pour envisager une alternative à Upgrade.

    Cette directive n'a d'effet que si h2 ou h2c est activé via la directive Protocols.

    Exemple

    H2Upgrade on
    top

    Directive H2WindowSize

    Description:Taille maximale des paquets de données pour les transmissions client vers serveur.
    Syntaxe:H2WindowSize bytes
    Défaut:H2WindowSize 65535
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_http2

    Cette directive permet de définir la taille maximale des paquets de données envoyés par le client au serveur, et limite la quantité de données que le serveur doit mettre en tampon. Le client arrêtera d'envoyer des données sur un flux lorsque cette limite sera atteinte jusqu'à ce que le serveur indique qu'il dispose d'un espace suffisant (car il aura traité une partie des données).

    Cette limite n'affecte que les corps de requêtes, non les métadonnées comme les en-têtes. Par contre, elle n'affecte pas les corps de réponses car la taille maximale de ces derniers est gérée au niveau des clients.

    Exemple

    H2WindowSize 128000

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_balancer.html0000644000000000000500000000051213362070302020747 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy_balancer.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_proxy_balancer.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_proxy_balancer.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_headers.html.fr.utf80000644000000000000500000011233313412755316020665 0ustar rootsrc mod_headers - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_headers

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Personnalisation des en-têtes de requêtes et de réponses HTTP
    Statut:Extension
    Identificateur de Module:headers_module
    Fichier Source:mod_headers.c

    Sommaire

    Ce module fournit des directives permettant de contrôler et modifier les en-têtes de requêtes et de réponses HTTP. Les en-têtes peuvent être fusionnés, remplacés ou supprimés.

    top

    Chronologie du traitement

    Les directives fournies par mod_headers peuvent s'insérer presque partout dans la configuration du serveur, et on peut limiter leur portée en les plaçant dans des sections de configuration.

    La chronologie du traitement est importante et est affectée par l'ordre d'apparition des directives dans le fichier de configuration et par leur placement dans les sections de configuration. Ainsi, ces deux directives ont un effet différent si leur ordre est inversé :

    RequestHeader append MirrorID "mirror 12"
    RequestHeader unset MirrorID

    Dans cet ordre, l'en-tête MirrorID n'est pas défini. Si l'ordre des directives était inversé, l'en-tête MirrorID serait défini à "mirror 12".

    top

    Traitement précoce et traitement tardif

    mod_headers peut agir soir précocement, soit tardivement au niveau de la requête. Le mode normal est le mode tardif, lorsque les en-têtes de requête sont définis, immédiatement avant l'exécution du générateur de contenu, et pour les en-têtes de réponse, juste au moment où la réponse est envoyée sur le réseau. Utilisez toujours le mode tardif sur un serveur en production.

    Le mode précoce a été conçu à des fins d'aide aux tests et au débogage pour les développeurs. Les directives définies en utilisant le mot-clé early sont censées agir au tout début du traitement de la requête. Cela signifie que l'on peut les utiliser pour simuler différentes requêtes et définir des situations de test, tout en gardant à l'esprit que les en-têtes peuvent être modifiés à tout moment par d'autres modules avant que le réponse ne soit générée.

    Comme les directives précoces sont traitées avant que le chemin de la requête ne soit parcouru, les en-têtes précoces ne peuvent être définis que dans un contexte de serveur principal ou de serveur virtuel. Les directives précoces ne peuvent pas dépendre d'un chemin de requête, si bien qu'elles échoueront dans des contextes tels que <Directory> ou <Location>.

    top

    Exemples

    1. Copie tous les en-têtes de requête qui commencent par "TS" vers les en-têtes de la réponse :
      Header echo ^TS
    2. Ajoute à la réponse un en-tête, mon-en-tête, qui contient un horodatage permettant de déterminer le moment où la requête a été reçue, et le temps qui s'est écoulé jusqu'à ce que la requête ait commencé à être servie. Cet en-tête peut être utilisé par le client pour estimer la charge du serveur ou isoler les goulets d'étranglement entre le client et le serveur.
      Header set mon-en-tête "%D %t"

      le résultat est l'ajout à la réponse d'un en-tête du type :

      mon-en-tête: D=3775428 t=991424704447256

    3. Dit Bonjour à Joe

      Header set mon-en-tête "Bonjour Joe. Il a fallu %D microsecondes \
      à Apache pour servir cette requête."

      le résultat est l'ajout à la réponse d'un en-tête du type :

      	Header set MyHeader "Bonjour Joe. Il a fallu D=3775428 microsecondes à Apache
                pour servir cette requête."
    4. Ajoute l'en-tête mon-en-tête à la réponse si et seulement si l'en-tête mon-en-tête-requête est présent dans la requête. Ceci peut s'avérer utile pour générer des en-têtes de réponse "à la tête du client". Notez que cet exemple nécessite les services du module mod_setenvif.
      SetEnvIf MyRequestHeader myvalue HAVE_MyRequestHeader
      Header set MyHeader "%D %t mytext" env=HAVE_MyRequestHeader

      Si l'en-tête mon-en-tête-requête: mavaleur est présent dans la requête HTTP, la réponse contiendra un en-tête du type :

      mon-en-tête: D=3775428 t=991424704447256 montexte

    5. Permet à DAV de fonctionner avec Apache sur SSL (voir la description du problème) en remplaçant https: par http: dans l'en-tête Destination :
      RequestHeader edit Destination ^https: http: early
    6. Définit la valeur d'un même en-tête sous de multiples conditions non exclusives, mais ne duplique pas une valeur déjà définie dans l'en-tête qui en résulte. Si toutes les conditions suivantes sont satisfaites pour une requête (en d'autres termes, si les trois variables d'environnement CGI, NO_CACHE et NO_STORE existent pour la requête) :
      Header merge Cache-Control no-cache env=CGI
      Header merge Cache-Control no-cache env=NO_CACHE
      Header merge Cache-Control no-store env=NO_STORE

      alors, la réponse contiendra l'en-tête suivant :

      Cache-Control: no-cache, no-store

      Si append avait été utilisé à la place de merge, la réponse aurait contenu l'en-tête suivant :

      Cache-Control: no-cache, no-cache, no-store

    7. Définit un cookie de test si et seulement si le client n'envoie pas de cookie
      Header set Set-Cookie testcookie "expr=-z %{req:Cookie}"
    8. Ajoute un en-tête de mise en cache pour les réponses avec un code d'état HTTP de 200
      Header append Cache-Control s-maxage=600 "expr=%{REQUEST_STATUS} == 200"
    top

    Directive Header

    Description:Configure les en-têtes d'une réponse HTTP
    Syntaxe:Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note en-tête [[expr=]valeur [remplacement] [early|env=[!]variable|expr=expression]]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_headers
    Compatibilité:SetIfEmpty est disponible depuis la version 2.4.7 du serveur HTTP Apache ; le paramètre expr=valeur a été introduit avec la version 2.4.10

    Cette directive permet de remplacer, fusionner, ou supprimer des en-têtes de réponse HTTP. L'en-tête est modifié juste après que le gestionnaire de contenu et les filtres en sortie ne s'exécutent, ce qui permet la modification des en-têtes sortants.

    L'argument optionnel condition permet de déterminer sur quelle table interne d'en-têtes de réponses cette directive va opérer : onsuccess (valeur par défaut, peut être omis) ou always. A la différence de ceux de la première table, les en-têtes de la seconde sont ajoutés à la réponse même en cas d'erreur et sont conservés au fil des redirections internes (par exemple les gestionnaires ErrorDocument). Notez aussi que la répétition de cette directive avec les deux conditions peut être pertinente dans certains scénarios, car always n'englobe pas onsuccess en ce qui concerne les en-têtes existants :

    • Vous ajoutez un en-tête à une réponse générée localement et échouée (non-2xx), une redirection par exemple, et dans ce cas, seule la table correspondant à always est utilisée dans la réponse définitive.
    • Vous modifiez ou supprimez un en-tête généré par un script CGI ou par mod_proxy_fcgi, auquel cas, les en-têtes des scripts CGI sont dans la table correspondant à always et non dans la table par défaut.
    • Vous modifiez ou supprimez un en-tête généré par tel ou tel composant du serveur, mais cet en-tête n'est pas trouvé par la condition par défaut onsuccess.

    Comme il n'y a pas de liste unique "normalisée" d'en-têtes, la manière dont httpd stocke en interne les en-têtes des réponses HTTP est à l'origine de la fonctionnalité que constitue la différence entre onsuccess et always. Si vous ne gardez pas à l'esprit le concept ci-après lors de l'écriture de votre configuration, certaines réponses HTTP pourront contenir des en-têtes dupliqués (ce qui pourra dérouter les utilisateurs ou même parfois les clients HTTP). Supposons par exemple que votre configuration comporte un mandataire PHP simple avec mod_proxy_fcgi et que votre script PHP d'arrière-plan ajoute l'en-tête X-Foo: bar à chaque réponse HTTP. Comme décrit plus haut, mod_proxy_fcgi utilise la table always pour stocker les en-têtes, et une configuration comme la suivante n'aboutira pas au résultat attendu car l'en-tête sera dupliqué avec les deux valeurs :

    # la valeur de X-Foo est définie dans la table d'en-têtes 'onsuccess'
    Header set X-Foo: baz

    Plusieurs modèles de configuration permettent de contourner ce problème, comme celui-ci :

    # 'onsuccess' peut être omis car il s'agit de la valeur par défaut
    Header onsuccess unset X-Foo
    Header always set X-Foo "baz"

    Outre le paramètre condition décrit ci-dessus, vous pouvez limiter une action en fonction de codes d'état HTTP, par exemple pour les requêtes mandatées ou générées par un programme CGI. Voir l'exemple qui utilise %{REQUEST_STATUS} dans la section ci-dessus.

    L'action que cette directive provoque est déterminée par le premier argument (ou par le second argument si une condition est spécifiée). Il peut prendre une des valeurs suivantes :

    Avertissement

    Vous devez lire la différence, décrite plus haut, entre les listes d'en-têtes always et onsuccess avant de lire la liste d'actions ci-dessous car cet important concept s'applique encore ici. En fait, chaque action fonctionne telle qu'elle est décrite mais seulement pour la liste d'en-têtes cible.

    add
    L'en-tête est ajouté au jeu d'en-têtes préexistant, même s'il existe déjà. Ceci peut conduire à la présence de deux (ou plusieurs) en-têtes possèdant le même nom et donc induire des conséquences imprévues ; en général, il est préférable d'utiliser set, append ou merge.
    append
    La valeur d'en-tête est ajoutée à tout en-tête existant de même nom. Lorsqu'une nouvelle valeur est ainsi ajoutée, elle est séparée de celles qui sont déjà présentes par une virgule. Il s'agit de la méthode HTTP standard permettant d'affecter plusieurs valeurs à un en-tête.
    echo
    Les en-têtes de la requête possédant le nom spécifié sont recopiés vers les en-têtes de la réponse. en-tête peut être une expression rationnelle, et valeur ne doit pas être présent.
    edit
    edit*
    Si l'en-tête existe, sa valeur est modifiée en fonction d'une expression rationnelle de type recherche/remplacement. L'argument valeur est une expression rationnelle, et l'argument remplacement une chaîne de caractères de remplacement qui peut contenir des références arrières ou des spécificateurs de format. La forme edit n'effectuera une recherche/remplacement qu'une seule fois dans la valeur de l'en-tête, alors que la forme edit* en effectuera autant que le nombre d'apparition de la chaîne à remplacer.
    merge
    La valeur d'en-tête est ajoutée à tout en-tête de même nom, sauf si elle apparaît déjà dans la liste des valeurs préexistantes de l'en-tête séparées par des virgules. Lorsqu'une nouvelle valeur est ainsi ajoutée, elle est séparée de celles qui sont déjà présentes par une virgule. Il s'agit de la méthode HTTP standard permettant d'affecter plusieurs valeurs à un en-tête. Les valeurs sont comparées en tenant compte de la casse, et après le traitement de tous les spécificateurs de format. Une valeur entourée de guillemets est considérée comme différente de la même valeur mais sans guillemets.
    set
    L'en-tête est défini, remplaçant tout en-tête préexistant avec le même nom. L'argument valeur peut être une chaîne de formatage.
    setifempty
    L'en-tête est défini, mais seulement s'il n'existe aucun en-tête avec le même nom.
    L'en-tête Content-Type est un cas particulier car il est possible que sa valeur ait été déterminée mais que l'en-tête ne soit pas présent dans la réponse lorsque setifempty est évalué. Dans ce cas, il est préférable d'utiliser set comme dans l'exemple suivant :
    Header set Content-Type "text/plain" "expr=-z %{CONTENT_TYPE}"
    unset
    L'en-tête est supprimé s'il existe. Si plusieurs en-têtes possèdent le même nom, ils seront tous supprimés. L'argument value ne doit pas apparaître.
    note
    La valeur de l'en-tête considéré est copiée dans une note interne dont le nom est spécifié via l'argument valeur. Ceci permet de journaliser la valeur d'un en-tête envoyé par un programme CGI ou une ressource mandatée, même s'il est prévu de l'effacer.
    Disponible à partir de la version 2.4.7 du serveur HTTP Apache.

    Cet argument est suivi d'un nom d'en-tête qui peut se terminer par un caractère ':', mais ce n'est pas obligatoire. La casse est ignorée avec set, append, merge, add, unset et edit. Le nom d'en-tête est sensible à la casse pour echo et peut être une expression rationnelle.

    Avec set, append, merge et add, une valeur est spécifiée comme argument suivant. Si valeur contient des espaces, elle doit être entourée de guillemets. valeur peut être une chaîne de caractères, une chaîne contenant des spécificateurs de format propres à mod_headers (et des caractères littéraux), ou une expression ap_expr préfixée par expr=.

    valeur supporte les spécificateurs de format suivants :

    FormatDescription
    %% Le caractère pourcentage
    %t Le moment de réception de la requête en temps universel coordonné depuis le temps epoch (Jan. 1, 1970) et exprimé en microsecondes. La valeur est précédée de t=.
    %D Le temps écoulé entre la réception de la requête et l'envoi des en-têtes sur le réseau. Il s'agit de la durée de traitement de la requête. La valeur est précédée de D=. La valeur est exprimée en microsecondes.
    %l La charge moyenne courante du serveur proprement dit. Ce sont les valeurs obtenues par getloadavg() qui représentent la charge moyenne courante, sur 5 minutes et sur 15 minutes. Chaque valeur est précédée de l= et séparée de la suivante par un /.
    Disponible depuis la version 2.4.4 du serveur HTTP Apache.
    %i Le pourcentage courant de httpd au repos (de 0 à 100) en se basant sur le nombre de processus et threads disponibles. La valeur est précédée de i=.
    Disponible depuis la version 2.4.4 du serveur HTTP Apache.
    %b Le pourcentage courant de httpd utilisé (de 0 à 100) en se basant sur le nombre de processus et threads disponibles. La valeur est précédée de b=.
    Disponible depuis la version 2.4.4 du serveur HTTP Apache.
    %{NOM_VARIABLE}e Le contenu de la variable d'environnement NOM_VARIABLE.
    %{NOM_VARIABLE}s Le contenu de la variable d'environnement SSL NOM_VARIABLE, si mod_ssl est activé.

    Note

    Le spécificateur de format %s est disponible depuis la version 2.1 d'Apache ; il peut être utilisé à la place de %e pour éviter de devoir spécifier SSLOptions +StdEnvVars. Cependant, si SSLOptions +StdEnvVars doit tout de même être spécifié pour une raison quelconque, %e sera plus efficace que %s.

    Note à propos des valeurs des expressions

    Lorsque le paramètre valeur utilise l'interpréteur ap_expr, certaines syntaxes d'expressions seront différentes des exemples qui évaluent des expressions booléennes telles que <If> :

    • Le point de départ de la syntaxe est 'string' au lieu de 'expr'.
    • Les appels de fonction utilisent la syntaxe %{funcname:arg} au lieu de funcname(arg).
    • Les fonctions multi-arguments ne sont pas encore disponibles depuis le point de départ 'string'.
    • Il faut mettre entre guillemets l'ensemble du paramètre, comme dans l'exemple suivant :
      Header set foo-checksum "expr=%{md5:foo}"

    editnécessite les deux arguments valeur, qui est une expression rationnelle, et une chaîne additionnelle remplacement. Depuis la version 2.4.7, la chaîne de remplacement peut aussi contenir des spécificateurs de format.

    La directive Header peut être suivie d'un argument additionnel qui peut prendre les valeurs suivantes :

    early
    Spécifie traitement préalable.
    env=[!]variable
    La directive est appliquée si et seulement si la variable d'environnement variable existe. Un ! devant variable inverse le test, et la directive ne s'appliquera alors que si variable n'est pas définie.
    expr=expression
    La directive s'applique si et seulement si expression est évaluée à true. Vous trouverez plus de détails à propos de la syntaxe et de l'évaluation des expressions dans la documentation ap_expr.
             # Cet exemple retarde l'évaluation de la clause de condition par
    	 # rapport à <If>
             Header always set CustomHeader my-value "expr=%{REQUEST_URI} =~ m#^/special_path.php$#"

    Excepté le cas du mode précoce, les directives Header sont traitées juste avant l'envoi de la réponse sur le réseau. Cela signifie qu'il est possible de définir et/ou modifier la plupart des en-têtes, à l'exception de certains en-têtes qui sont ajoutés par le filtre d'en-tête HTTP. Avant la version 2.2.12, il n'était pas possible de modifier l'en-tête Content-Type avec cette directive.

    top

    Directive RequestHeader

    Description:Configure les en-têtes d'une requête HTTP
    Syntaxe:RequestHeader add|append|edit|edit*|merge|set|setifempty|unset en-tête [[expr=]valeur [remplacement] [early|env=[!]variable|expr=expression]]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_headers
    Compatibilité:SetIfEmpty est disponible depuis la version 2.4.7 du serveur HTTP Apache ; le paramètre expr=valeur a été introduit avec la version 2.4.10

    Cette directive permet de remplacer, fusionner, modifier ou supprimer des en-têtes de requête HTTP. L'en-tête est modifié juste avant que le gestionnaire de contenu ne s'exécute, ce qui permet la modification des en-têtes entrants. L'action effectuée est déterminée par le premier argument. Ce dernier accepte les valeurs suivantes :

    add
    L'en-tête est ajouté au jeu d'en-têtes préexistant, même s'il existe déjà. Ceci peut conduire à la présence de deux (ou plusieurs) en-têtes possèdant le même nom et donc induire des conséquences imprévues ; en général, il est préférable d'utiliser set, append ou merge.
    append
    La valeur d'en-tête est ajoutée à tout en-tête existant de même nom. Lorsqu'une nouvelle valeur est ainsi ajoutée, elle est séparée de celles qui sont déjà présentes par une virgule. Il s'agit de la méthode HTTP standard permettant d'affecter plusieurs valeurs à un en-tête.
    edit
    edit*
    Si l'en-tête existe, sa valeur est modifiée en fonction d'une expression rationnelle de type recherche/remplacement. L'argument valeur est une expression rationnelle, et l'argument remplacement une chaîne de caractères de remplacement qui peut contenir des références arrières ou des spécificateurs de format. Avec edit, la chaîne de l'en-tête correspondant au modèle ne sera recherchée et remplacée qu'une seule fois, alors qu'avec edit*, elle le sera pour chacune de ses instances si elle apparaît plusieurs fois.
    merge
    La valeur d'en-tête est ajoutée à tout en-tête de même nom, sauf si elle apparaît déjà dans la liste des valeurs préexistantes de l'en-tête séparées par des virgules. Lorsqu'une nouvelle valeur est ainsi ajoutée, elle est séparée de celles qui sont déjà présentes par une virgule. Il s'agit de la méthode HTTP standard permettant d'affecter plusieurs valeurs à un en-tête. Les valeurs sont comparées en tenant compte de la casse, et après le traitement de tous les spécificateurs de format. Une valeur entourée de guillemets est considérée comme différente de la même valeur mais sans guillemets.
    set
    L'en-tête est défini, remplaçant tout en-tête préexistant avec le même nom.
    setifempty
    L'en-tête est défini, mais seulement s'il n'existe aucun en-tête avec le même nom.
    Disponible depuis la version 2.4.7 du serveur HTTP Apache.
    unset
    L'en-tête est supprimé s'il existe. Si plusieurs en-têtes possèdent le même nom, ils seront tous supprimés. L'argument value ne doit pas apparaître.

    Cet argument est suivi d'un nom d'en-tête qui peut se terminer par un caractère ':', mais ce n'est pas obligatoire. La casse est ignorée. Avec set, append, merge et add, une valeur est fournie en troisième argument. Si une valeur contient des espaces, elle doit être entourée de guillemets. Avec unset, aucune valeur ne doit apparaître. valeur peut être une chaîne de caractères, une chaîne contenant des spécificateurs de format, ou une combinaison des deux. Les spécificateurs de format supportés sont les mêmes que ceux de la directive Header, à laquelle vous pouvez vous reporter pour plus de détails. Avec edit, les deux arguments valeur et remplacement sont obligatoires, et correspondent respectivement à une expression rationnelle et à une chaîne de remplacement.

    La directive RequestHeader peut être suivie d'un argument supplémentaire, qui pourra prendre les valeurs suivantes :

    early
    Spécifie traitement préalable.
    env=[!]variable
    La directive est appliquée si et seulement si la variable d'environnement variable existe. Un ! devant variable inverse le test, et la directive ne s'appliquera alors que si variable n'est pas définie.
    expr=expression
    La directive s'applique si et seulement si expression est évaluée à true. Vous trouverez plus de détails à propos de la syntaxe et de l'évaluation des expressions dans la documentation ap_expr.

    Excepté le cas du mode précoce, la directive RequestHeader est traitée juste avant la prise en compte de la requête par son gestionnaire, au cours de la phase de vérification. Ceci permet la modification des en-têtes générés par le navigateur, ou par les filtres en entrée d'Apache.

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mpm_common.html.tr.utf80000644000000000000500000021274613520523022020566 0ustar rootsrc mpm_common - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache MPM Ortak Yönergeleri

    Mevcut Diller:  de  |  en  |  fr  |  ja  |  tr 

    Bu çeviri güncel olmayabilir. Son değişiklikler için İngilizce sürüm geçerlidir.
    Açıklama:Birden fazla Çok Süreçlilik Modülü (MPM) tarafından gerçeklenmiş yönergeler bütünü.
    Durum:MPM
    top

    CoreDumpDirectory Yönergesi

    Açıklama:core dosyasını dökümlemek üzere Apache HTTP Sunucusunun geçmeye çalışacağı dizin.
    Sözdizimi:CoreDumpDirectory dizin
    Öntanımlı:Öntanımlı değer için aşağıdaki açıklamaya bakınız
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork

    Bu yönerge core dosyasını dökümlemek üzere Apache httpd’nin geçmeye çalışacağı dizini belirler. Eğer işletim sisteminiz, çöken bir sürecin olması durumunda core dosyasını çöken sürecin çalışma dizinine yazacak şekilde yapılandırılmışsa, CoreDumpDirectory yönergesinin değeri olarak, öntanımlı olan ve sunucuyu çalıştıran kullanıcı tarafından yazılamayan ServerRoot dizini yerine başka bir çalışma dizini belirtmek gerekir.

    Hata ayıklamak amacıyla bir core dosyası dökümlemek isterseniz farklı bir yer belirtmek için bu yönergeyi kullanabilirsiniz. Eğer işletim sisteminiz çöken bir sürecin olması durumunda core dosyasını çöken sürecin çalışma dizinine yazacak şekilde yapılandırılmamışsa, bu yönergenin bir etkisi olmaz.

    Linux üzerinde core dökümlemek

    Apache httpd root olarak başlatılıp başka bir kullanıcıya geçilirse Linux çekirdeği, süreç tarafından yazılabilir olsa bile core dökümlemeyi iptal eder. Eğer CoreDumpDirectory yönergesi ile açıkça bir dizin belirtirseniz, Apache httpd (2.0.46 ve sonraki sürümleri), Linux 2.4 ve sonrasında core dökümlemeyi yeniden etkinleştirecektir.

    BSD üzerinde core dökümlemek

    BSD sistemlerinde (FreeBSD gibi) suid bitli çalıştırılabilirlerin core dökümlemesini etkin kılmak için kern.sugid_coredump değişkenine 1 değerini atayın.

    Özel sinyaller

    CoreDumpDirectory işlemi sadece belli sinyaller için gerçekleşir: SIGFPE, SIGILL, SIGABORT, SIGSEGV ve SIGBUS.

    Bazı işletim sistemlerinde SIGQUIT sinyali de bir core dosyası dökümler ancak bunu CoreDumpDirectory veya EnableExceptionHook işlemi üzerinden yapmaz, dolayısıyla core dosyasının yeri tamamen işletim sisteminin belirlediği yer olur.

    top

    EnableExceptionHook Yönergesi

    Açıklama:Bir çöküş sonrası olağandışılık eylemcilerini çalıştıracak kancayı etkin kılar.
    Sözdizimi:EnableExceptionHook On|Off
    Öntanımlı:EnableExceptionHook Off
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork

    Güvenlik sebebiyle bu yönerge sadece Apache --enable-exception-hook seçeneği ile yapılandırılmışsa kullanılabilir olacaktır. Bu, harici modüllerin eklenmesine ve bir çocuk sürecin çöküşü sonrası bir şeyler yapmaya izin veren bir kancayı etkin kılar.

    Bu kancayı kullanan iki modül (mod_whatkilledus ve mod_backtrace) zaten vardır. bunlar hakkında daha fazla bilgi edinmek için Jeff Trawick'in EnableExceptionHook sitesine bakabilirsiniz.

    top

    GracefulShutdownTimeout Yönergesi

    Açıklama:Sunucunun nazikçe kapatılmasının ardından ana süreç çıkana kadar geçecek süre için bir zaman aşımı belirler.
    Sözdizimi:GracefulShutdownTimeout saniye
    Öntanımlı:GracefulShutdownTimeout 0
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork
    Uyumluluk:Sürüm 2.2 ve sonrasında mevcuttur

    GracefulShutdownTimeout yönergesi, sunucuya "nazikçe dur" sinyali gönderildikten sonra mevcut bağlantılara hizmet sunmaya daha kaç saniye devam edebileceğini belirtir.

    Bu değerin 0 olarak belirtilmesi, sunucunun bekleyen bütün isteklere hizmet sunumu tamamlanıncaya kadar (gerekirse sonsuza kadar) bekleyebileceği anlamına gelir.

    top

    Listen Yönergesi

    Açıklama:Sunucunun dinleyeceği IP adresini ve portu belirler.
    Sözdizimi:Listen [IP-adresi:]port-numarası [protokol]
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2
    Uyumluluk:protokol değiştirgesi 2.1.5 sürümünde eklenmiştir.

    Listen yönergesi Apache httpd’yi sadece belli IP adreslerini ve portlarını dinlemeye sevkeder. Listen artık belirtilmesi zorunlu yönergelerden biridir. Yapılandırma dosyasında bulunmadığı takdirde sunucu başlatılırken başarısız olacaktır. Bu Apache HTTP Sunucusunun önceki sürümünde böyle değildi.

    Listen yönergesi Apache httpd’ye, sadece belli portlardan veya IP adresi ve port çiftlerinden gelen istekleri kabul etmesini söyler. Eğer sadece port numarası belirtilmişse sunucu belirtilen portu bütün ağ arabirimlerinde dinleyecektir. Eğer portla birlikte bir IP adresi de belirtilmişse, sunucu belirtilen portu sadece belirtilen arabirimden dinleyecektir.

    Çok sayıda IP adresi ve port belirtmek için çok sayıda Listen yönergesi kullanılabilir. Sunucu bu durumda belirtilen bütün IP adreslerinden ve portlardan gelecek isteklere yanıt verecektir.

    Örneğin sunucunun hem port 80 hem de port 8000’den istek kabul etmesini istiyorsanız bunu şöyle belirtebilirsiniz:

    Listen 80
    Listen 8000

    Sunucunun belirtilen iki ağ arabiriminden ve port numarasından gelen bağlantıları kabul etmesi için şu yapılandırmayı kullanabilirsiniz:

    Listen 192.170.2.1:80
    Listen 192.170.2.5:8000

    IPv6 adresleri belirtilirken örnekteki gibi köşeli ayraçlar arasına alınmalıdır:

    Listen [2001:db8::a00:20ff:fea7:ccea]:80

    İsteğe bağlı protocol argümanı çoğu yapılandırmada gerekli değildir. Belirtilmediği takdirde. port 443 için https ve tüm diğer portlar için http öntanımlıdır. Protokol, isteği hangi modülün elde edeceğinin ve AcceptFilter yönergesi ile protokole özgü hangi en iyilemelerin uygulanacağının saptanmasında kullanılır.

    Protokol belirtme ihtiyacını sadece standartdışı portlar çalıştırıyorsanız duyarsınız. Örneğin, port 8443 üzerinde bir https sitesi çalıştırmak istiyorsanız bunu şöyle belirtebilirsiniz:

    Listen 192.170.2.1:8443 https

    Hata durumu

    Aynı IP adresi ve portun çok sayıda Listen yönergesinde belirtilmesi bir "adres kullanımda" (Address already in use) hatasına yol açar.

    Ayrıca bakınız:

    top

    ListenBackLog Yönergesi

    Açıklama:Bekleyen bağlantılar kuyruğunun azami uzunluğunu belirler
    Sözdizimi:ListenBackLog kuyruk-uzunluğu
    Öntanımlı:ListenBackLog 511
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2

    Bekleyen bağlantılar kuyruğunun azami uzunluğu. Genellikle bu ayar ne gerekir ne de istenir. Ancak bazı sistemlerde TCP SYN yüklenme saldırılarına karşı bu değerin arttırılması gerekebilir. kuyruk-uzunluğu parametresi için listen(2) işlevinin açıklamasına bakınız.

    Bu değer çoğunlukla işletim sistemi tarafından daha küçük bir sayıyla sınırlanır. Bu, işletim sistemine bağlı olarak değişiklik gösterir. Ayrıca, çoğu işletim sisteminin kuyruk-uzunluğu parametresi ile ne belirttiğinize bakmaksızın kendisi için atanmış değeri (fakat normal olarak daha büyüğünü) kullanacağına dikkat ediniz.

    top

    ListenCoresBucketsRatio Yönergesi

    Açıklama:İşlemci çekirdek sayısının dinleyenlerin buket sayısına oranı
    Sözdizimi:ListenCoresBucketsRatio oran
    Öntanımlı:ListenCoresBucketsRatio 0 (iptal)
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork
    Uyumluluk:Apache HTTP Server 2.4.17 ve sonrasında, SO_REUSEPORT soket seçeneğini destekleyen bir Linux çekirdeğinin varlığında ve yeni bağlantıların bunu kullanan dinleme süreçlerinin (veya evrelerinin) soketleri arasında eşit paylaştırılıyor olması halinde kullanılır. Örneğin Linux 3.9 ve sonrasında kullanılabilirken *BSD'lerin şu anki SO_REUSEPORT gerçeklenimi ile kullanılamaz.

    (çevrimiçi) İşlemci çekirdek sayısının dinleyenlerin buket sayısına oranı, Apache HTTP Sunucusunun işlemci_çekirdek_sayısı / oran sayıda dinleme buketi oluşturması için kullanılabilir ve bu buketlerin herbiri aynı portlar üzerinde kendi Listen soketlerini içeriyor olurlar. Bu durumda, her çocuk süreç tek bir buketle çalışır (çocukların oluşturulması sırasında buketler döner dağılımla eşleştirilir).

    "çevrimiçi" İşlemci çekirdek sayısının anlamı

    Linux için (ve ayrıca BSD) bir işlemci çekirdeği Hotplug yapılandırılarak açılıp kapatıalbilir. Dolayısıyla, ListenCoresBucketsRatio yönergesi oluşturulacak buket sayısını hesaplarken bu yapılandırmayı esas alır.

    ListenCoresBucketsRatio yeni bağlantılar kabul edilirken/darboğazlar oluşurken ölçeklenebilirliği arttırabilir. Çok sayıda işlemci çekirdekli sistemlerde bu özelliğin etkinleştirilmesinin önemli başarım artışları ve daha kısa yanıt süreleri oluşturduğu gözlenmiştir.

    Bu oranın etkin olabilmesi için işlemci çekirdeği çift sayıda olmalıdır. oran için önerilen değer 8 olup bu durumda çalışma anında en azından 16 çekirdek kullanılabiliyor olmalıdır. En iyi başarımı elde etmek gereken oran her sistem için hesaplanmalı, çok sayıda değer denenmeli ve başlıca başarım ölçütlerinizin çeşitli sonuçları iyi gözlemlenmelidir.

    Bu yönerge aşağı yuvarlanan MinSpareThreads ve MaxSpareThreads değerlerinin hesabını etkiler. Bağlantıları en uygun şekilde kabul etmek için çocuk süreçlerin sayısının buket sayısının katları olması gerekir.

    Çok sayıda Listen veya aynı adres veya port üstünda çok sayıda Apache HTTP sunucusu

    Dinleyen soketler üzerinde SO_REUSEPORT seçeneğini tanımlamak normal bir durumda sistem tarafından oluşturulmuş bir bağlama hatası olmaksızın çok sayıda sürecin aynı adres ve porta bağlanması sonucunu doğurur.

    Bu ayrıca pozitif bir ListenCoresBucketsRatio değeriyle aynı IP:port üzerinde yapılandırılmış çok sayıda Apache httpd örneğinin hatasız başlamasının yanında gelen çağrıların her iki örneğe eşit olarak dağıtılacağı anlamına da gelir. (Bu, herhangi bir durumda bir öneri veya makul bir kullanım DEĞİL, böyle bir olası sorunun algılanmasının engelleneceğine dair bir uyarıdır.)

    Aynı örnek dahilinde, çok sayıda Listen yönergesinin tam olarak aynı IP ve port üzerinde yapılandırılması durumunda Apache httpd gerekli sınamaları yaptıktan sonra başlamayacak, böylelikle birbirinin benzeri çok sayıda kullanışsız buketin oluşturulması engellenecektir. Ancak, olası tüm örtüşmeler (bir konak adının başka bir yerde kullanılmış bir IP'ye çözümlenmesi gibi) yakalanamayacaktır.

    top

    MaxConnectionsPerChild Yönergesi

    Açıklama:Tek bir çocuk sürecin ömrü boyunca işleme sokabileceği istek sayısını sınırlamakta kullanılır.
    Sözdizimi:MaxConnectionsPerChild sayı
    Öntanımlı:MaxConnectionsPerChild 0
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2
    Uyumluluk:Apache HTTP Sunucusunun 2.3.9 ve sonraki sürümlerinde kullanılabilmektedir. Eski isim MaxRequestsPerChild hala desteklenmektedir.

    MaxConnectionsPerChild yönergesi, tek bir çocuk sürecin işleme sokabileceği istek sayısını sınırlamakta kullanılır. MaxConnectionsPerChild istekten sonra çocuk süreç ölür. Eğer MaxConnectionsPerChild için 0 belirtilmişse sürecin ömrü sonsuz olacaktır.

    MaxConnectionsPerChild için sıfırdan farklı bir değer belirtilmesi sürecin kullanacağı bellek miktarını sınırlamak suretiyle olası bellek sızıntılarını engeller.

    top

    MaxMemFree Yönergesi

    Açıklama:free() çağrılmaksızın ana bellek ayırıcının ayırmasına izin verilen azami bellek miktarını belirler.
    Sözdizimi:MaxMemFree kB-sayısı
    Öntanımlı:MaxMemFree 2048
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork, mpm_winnt, mpm_netware

    MaxMemFree yönergesi, free() çağrılmaksızın her bellek ayırıcının ayırmasına izin verilen azami bellek miktarını kB cinsinden belirler. Evreli MPM'lerde her evre kendi ayırıcısına sahiptir. 0 değeri belirtildiğinde eşik sınırsız olacaktır.

    top

    MaxRequestWorkers Yönergesi

    Açıklama:Aynı anda işleme sokulacak azami bağlantı sayısı
    Sözdizimi:MaxRequestWorkers sayı
    Öntanımlı:Ayrıntılar için aşağıdaki açıklamaya bakınız.
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork

    MaxRequestWorkers yönergesi aynı anda işleme sokulacak bağlantı sayısını sınırlamak için kullanılır. MaxRequestWorkers bağlantı isteğinden fazlası geldiği takdirde bu istekler normal olarak kuyruğa alınıp bekletilir. Kuyrukta bekletilecek isteklerin azami sayısı ise ListenBacklog yönergesi ile belirlenir. İstek sunmakta olan çocuk süreçlerden biri serbest kaldığında bekletilen bağlantılardan birine hizmet sunulmaya başlanır.

    Evreli olmayan sunucularda (prefork gibi) MaxRequestWorkers yönergesi istekleri sunmak için başlatılacak çocuk süreçlerin azami sayısını belirler. Öntanımlı değer 256 olup bu değeri arttırmak isterseniz ServerLimit değerini de arttırmalısınız.

    Çok evreli ve melez sunucularda (event veya worker gibi) MaxRequestWorkers yönergesi istemcilere hizmet verecek evre sayısını sınırlar. Öntanımlı değer melez MPM’ler için 16'dır (ServerLimit ile ThreadsPerChild çarpılır: 16 x 25). Bu bakımdan MaxRequestWorkers değerini 16 süreçten fazlasına ayarlamak için ServerLimit değerini de arttırmalısınız.

    MaxRequestWorkers yerine 2.3.13 öncesinde MaxClients kullanılırdı. Eski isim hala desteklenmektedir.

    top

    MaxSpareThreads Yönergesi

    Açıklama:Boştaki azami evre sayısını belirler
    Sözdizimi:MaxSpareThreads number
    Öntanımlı:Ayrıntılar için aşağıdaki açıklamaya bakınız.
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, mpm_netware, mpmt_os2

    Boştaki azami evre sayısı. Her MPM bu yönerge karşısında farklı davranır.

    worker ve event için MaxSpareThreads 250 öntanımlıdır. Bu MPM'ler boştaki evreleri sunucu genelinde izler. Eğer sunucuda çok fazla boşta evre varsa, sunucu boştaki evrelerin sayısı bu sınırın altına inene kadar çocuk süreçleri öldürür. ListenCoresBucketsRatio yönergesi etkinse ek süreçler/evreler oluşabilir.

    mpm_netware için MaxSpareThreads 100 öntanımlıdır. Bu MPM tek bir süreç olarak çalıştığından boştaki evre sayısı aynı zamanda sunucu genelinde boştaki evre sayısıdır.

    mpmt_os2 modülü mpm_netware modülü gibi çalışır. mpmt_os2 için öntanımlı değer 10'dur.

    Kısıtlamalar

    MaxSpareThreads için değer aralığı sınırlıdır. Apache httpd belirtilen değeri aşağıdaki kurallara uygun olarak kendiliğinden düzeltecektir:

    Ayrıca bakınız:

    top

    MinSpareThreads Yönergesi

    Açıklama:İsteklerin ani artışında devreye girecek boştaki evrelerin asgari sayısını belirler.
    Sözdizimi:MinSpareThreads sayı
    Öntanımlı:Ayrıntılar için aşağıdaki açıklamaya bakınız.
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, mpm_netware, mpmt_os2

    İsteklerin ani artışında devreye girecek boştaki evrelerin asgari sayısı. Her MPM bu yönerge karşısında farklı davranır.

    worker ve event modülü için MinSpareThreads 75 öntanımlıdır ve bu modül boştaki evreleri sunucu genelinde izler. Eğer sunucuda boştaki evre sayısı yetersizse, sunucu, boştaki evrelerin sayısı bu sınırın üstüne çıkana kadar çocuk süreç oluşturur. ListenCoresBucketsRatio yönergesi etkinse ek süreçler/evreler oluşabilir.

    mpm_netware için MinSpareThreads 10 öntanımlıdır ve tek süreç kendisi olduğundan izleme sunucu genelinde yapılır.

    mpmt_os2 modülü mpm_netware modülü gibi çalışır. mpmt_os2 için öntanımlı değer 5'tir.

    Ayrıca bakınız:

    top

    PidFile Yönergesi

    Açıklama:Ana sürecin süreç kimliğinin (PID) kaydedileceği dosyayı belirler.
    Sözdizimi:PidFile dosya
    Öntanımlı:PidFile logs/httpd.pid
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork, mpm_winnt, mpmt_os2

    PidFile yönergesi, sunucunun artalan sürecinin süreç kimliğinin kaydedileceği dosyayı belirler. Dosya ismi mutlak dosya yoluyla belirtilmemişse dosya yolunun ServerRoot dizinine göre belirtildiği kabul edilir.

    PidFile /var/run/apache.pid

    Sunucuya sinyal gönderebilmek çoğunlukla işe yarar. Böylece ErrorLog ve TransferLog dosyaları kapatılıp yeniden açılır ve yapılandırma dosyaları yeniden okunur. Bu, PidFile dosyasında belirtilen süreç kimliğine bir SIGHUP (kill -1) sinyali gönderilerek yapılır.

    Günlük dosyasının yeri ve güvenlik ile ilgili uyarılar PidFile dosyası içinde sözkonusu olabilir.

    Ek Bilgi

    Apache HTTP Sunucusunu (yeniden) başlatırken veya durdururken sadece apachectl betiğini kullanmanız önerilir.

    top

    ReceiveBufferSize Yönergesi

    Açıklama:TCP alım tamponu boyu
    Sözdizimi:ReceiveBufferSize bayt-sayısı
    Öntanımlı:ReceiveBufferSize 0
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2

    Sunucunun TCP alım tamponu boyunu bayt-sayısı ile belirtilen bayta ayarlar.

    0 değeri atarsanız sunucu işletim sistemi öntanımlısını kullanacaktır.

    top

    ScoreBoardFile Yönergesi

    Açıklama:Çocuk süreçler için eşgüdüm verisini saklamakta kullanılan dosyanın yerini belirler.
    Sözdizimi:ScoreBoardFile dosya-yolu
    Öntanımlı:ScoreBoardFile logs/apache_runtime_status
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork, mpm_winnt

    Apache HTTP Sunucusu ana ve çocuk süreçler arasında iletişim için bir çetele tutar. Bazı mimariler bu iletişimi kolaylaştırmak için bir dosya gerektirir. Eğer yönerge belirtilmezse Apache httpd çeteleyi önce tamamen bellekte oluşturmayı dener (anonim paylaşımlı bellek kullanarak); bunda başarılı olamazsa dosyayı diskte oluşturmaya çalışacaktır (paylaşımlı belleğe eşlemli dosya kullanarak). Bu yönergenin belirtilmesi Apache httpd'nin dosyayı daima diskte oluşturmasına sebep olur.

    ScoreBoardFile /var/run/apache_status

    Paylaşımlı belleğe eşlemli dosya, çeteleye doğrudan erişmesi gereken üçüncü parti uygulamalar için yararlıdır.

    Eğer ScoreBoardFile yönergesi ile bir dosya belirtecekseniz, dosyayı bir RAM diske yerleştirerek hız artışı sağlayabilirsiniz. Fakat, günlük dosyası yerleştirme ve güvenlik ile ilgili uyarılara benzer uyarılara karşı dikkatli olunuz.

    Ayrıca bakınız:

    top

    SendBufferSize Yönergesi

    Açıklama:TCP tamponu boyu
    Sözdizimi:SendBufferSize bayt-sayısı
    Öntanımlı:SendBufferSize 0
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2

    Sunucu TCP gönderim tamponu boyunu bayt-sayısı ile belirtilen bayta ayarlayacaktır. Yüksek hızlı yüksek yataklık süreli bağlantılarda işletim sisteminin öntanımlı değerini aşacak şekilde (örn, kıtalararası hızlı hatlarda 100ms veya fazlası) ayarlamak çoğunlukla kullanışlıdır.

    0 değeri atarsanız sunucu işletim sistemi öntanımlısını kullanacaktır.

    İşletim sisteminizin ilaveten yapılandırılması, yüksek hız, yüksek gecikme bağlantılarında daha yüksek başarım elde etmek için gerekli olabilir.

    Bazı işletim sistemlerinde, TCP davranışı, EnableSendfile yönergesine Off değeri atanmadıkça görülemeyen, büyükçe bir SendBufferSize değerinden kaynaklanarak değişir. Bu etkileşim sadece duruk dosyalarda görülür.

    top

    ServerLimit Yönergesi

    Açıklama:Ayarlanabilir süreç sayısının üst sınırını belirler.
    Sözdizimi:ServerLimit sayı
    Öntanımlı:Ayrıntılar için aşağıdaki açıklamaya bakınız.
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork

    prefork modülü söz konusu olduğunda bu yönerge, Apache httpd sürecinin ömrü boyunca MaxRequestWorkers yönergesine atanabilecek azami değeri belirler. worker ve event modülü sözkonusu olduğunda ise, Apache httpd sürecinin ömrü boyunca MaxRequestWorkers yönergesine atanabilecek azami değeri ThreadLimit ile birlikte belirler. event modülü için bu yönerge kaç eski sunucunun çalışmayı sürdüreceğini ve kaçının açık bağlantıları işlemeyi bitireceğini belirler. Bu yönergeyi bir yeniden başlatma sırasında değiştirirseniz bu değişiklik yok sayılır fakat MaxRequestWorkers değişiklikleri dikkate alınır.

    Bu yönergenin kullanılması özel bir dikkat gerektirir. Eğer ServerLimit gereğinden yüksek bir değere ayarlanırsa, gereksiz yere paylaşımlı bellek ayrılmış olur. Eğer ServerLimit ve MaxRequestWorkers değerleri sistemin işleyebileceğinden daha yüksek değerlere ayarlanırsa Apache httpd başlayamayacağı gibi sistemi kararsız hale de getirebilir.

    Bu yönergeyi prefork modülü ile sadece MaxRequestWorkers yönergesine 256’dan (öntanımlı) daha büyük bir değer atayacaksanız kullanınız. Bu yönergeye MaxRequestWorkers için atamak istediğiniz değerden fazlasını atamayınız.

    worker modülü söz konusu olduğunda bu yönergeyi MaxRequestWorkers ve ThreadsPerChild ayarları 16 sunucu sürecinden (16 öntanımlıdır) fazlasını gerektiriyorsa ayarlayınız. Bu yönergeye MaxRequestWorkers ve ThreadsPerChild için gerekli gördüğünüz sunucu süreci sayısından fazlasını atamayınız.

    event modülü söz konusu olduğunda, MaxRequestWorkers ve ThreadsPerChild yönergeleri ile belirlenen süreç sayısına ek olarak zarifçe kapatılan süreçlerin sayısıyla arttırıp 16 sunucu sürecinden (16 öntanımlıdır) fazlasına ayarlayınız.

    Ek Bilgi

    Sunucu içinde derlenmiş olarak ServerLimit 20000 şeklinde bir zorlayıcı sınır vardır (prefork için 200000’dir). Bu önlem, yazım hatalarının istenmeyen sonuçlara yol açmasını engellemek için düşünülmüştür. Bu sınırı daha da arttırmak için mpm kaynak dosyasındaki MAX_SERVER_LIMIT değerini değiştirip sunucuyu yeniden derlemeniz gerekir.

    Ayrıca bakınız:

    top

    StartServers Yönergesi

    Açıklama:Sunucunun başlatılması sırasında oluşturulan çocuk süreçlerin sayısını belirler.
    Sözdizimi:StartServers sayı
    Öntanımlı:Ayrıntılar için aşağıdaki açıklamaya bakınız.
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, prefork, mpmt_os2

    StartServers yönergesi, sunucunun başlatılması sırasında oluşturulan çocuk süreçlerin sayısını belirler. Süreç sayısı normal olarak yüke bağlı olarak değişse de bu değerin ayarlanmasını gerektirecek küçük bir sebep vardır. (MinSpareThreads, MaxSpareThreads, MinSpareServers, MaxSpareServers yönergelerine bakınız.)

    Öntanımlı değer MPM’den MPM’e fark eder. Öntanımlı değer worker ve event için 3 iken prefork için 5, mpmt_os2 için 2'dir.

    top

    StartThreads Yönergesi

    Açıklama:Sunucunun başlatılması sırasında oluşturulan evrelerin sayısını belirler.
    Sözdizimi:StartThreads sayı
    Öntanımlı:Ayrıntılar için aşağıdaki açıklamaya bakınız.
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:mpm_netware

    StartThreads yönergesi, sunucunun başlatılması sırasında oluşturulan evrelerin sayısını belirler. Evre sayısı normal olarak yüke bağlı olarak değişse de bu değerin ayarlanmasını gerektirecek küçük bir sebep vardır. (MinSpareThreads, MaxSpareThreads, MinSpareServers, MaxSpareServers yönergelerine bakınız.)

    mpm_netware için StartThreads 50 öntanımlı olup, sadece tek bir süreç olduğundan, sunucunun başlatılması sırasında oluşturulan evrelerin toplam sayısı 50’dir.

    top

    ThreadLimit Yönergesi

    Açıklama:Çocuk süreç başına ayarlanabilir evre sayısının üst sınırını belirler.
    Sözdizimi:ThreadLimit sayı
    Öntanımlı:Ayrıntılar için aşağıdaki açıklamaya bakınız.
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, mpm_winnt

    Bu yönerge, Apache httpd sürecinin ömrü boyunca ThreadsPerChild yönergesine atanabilecek azami değeri belirler. Bu yönergeyi bir yeniden başlatma sırasında değiştirirseniz bu değişiklik yok sayılır fakat ThreadsPerChild değişiklikleri dikkate alınır.

    Bu yönergenin kullanılması özel bir dikkat gerektirir. Eğer ThreadLimit değeri ThreadsPerChild değerinden yüksek bir değere ayarlanırsa, gereksiz yere paylaşımlı bellek ayrılmış olur. Eğer ThreadLimit ve ThreadsPerChild değerleri sistemin işleyebileceğinden daha yüksek değerlere ayarlanırsa Apache httpd başlayamayacağı gibi sistemi kararsız hale de getirebilir. Bu yönergeye Apache httpd'nin çalışması için öngörülmüş en büyük değerden daha yükseğini atamayınız.

    ThreadLimit yönergesinin öntanımlı değeri mpm_winnt için 1920, diğerleri için 64’tür.

    Ek Bilgi

    Sunucu içinde derlenmiş olarak ThreadLimit 20000 şeklinde bir zorlayıcı sınır vardır (mpm_winnt için 15000, event için ThreadLimit 100000). Bu önlem, yazım hatalarının istenmeyen sonuçlara yol açmasını engellemek için düşünülmüştür. Bu sınırı daha da arttırmak için mpm kaynak dosyasındaki MAX_SERVER_LIMIT değerini değiştirip sunucuyu yeniden derlemeniz gerekir.

    top

    ThreadsPerChild Yönergesi

    Açıklama:Her çocuk süreç tarafından oluşturulan evrelerin sayısını belirler.
    Sözdizimi:ThreadsPerChild sayı
    Öntanımlı:Ayrıntılar için aşağıdaki açıklamaya bakınız.
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, mpm_winnt

    Bu yönerge, her çocuk süreç tarafından oluşturulan evrelerin sayısını belirler. Çocuk süreçler bu evreleri başlatıldıklarında oluştururlar ve bundan daha fazlasını asla oluşturmazlar. mpm_winnt gibi sadece bir çocuk sürecin bulunduğu bir MPM kullanıyorsanız, bu sayı Apache httpd'nin tüm yükünü kaldırabilecek kadar büyük olmalıdır. worker gibi çok çocuk süreçli bir MPM kullanıyorsanız, toplam evre sayısı Apache httpd'nin tüm yükünü kaldırabilecek kadar büyük olmalıdır.

    ThreadsPerChild için öntanımlı değer mpm_winnt kullanıldığında 64 diğerleri için 25’tir.

    ThreadsPerChild değeri ThreadLimit değerini aşamaz. Eğer daha yüksek bir değer verilirse sunucu başlatılırken düşürülür ve günlüğe bir uyarı kaydedilir. Bu iki yönerge arasındaki ilişki ThreadLimit belgelsinde açıklanmıştır.

    top

    ThreadStackSize Yönergesi

    Açıklama:İstemci bağlantılarını elde eden evreler tarafından kullanılan yığıtın bayt cinsinden uzunluğunu belirler.
    Sözdizimi:ThreadStackSize boyut
    Öntanımlı:NetWare üzerinde 65536; diğer işletim sistemlerinde değişir.
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:event, worker, mpm_winnt, mpm_netware, mpmt_os2
    Uyumluluk:Apache HTTP Sunucusu 2.1 ve sonrasında kullanılabilir.

    ThreadStackSize yönergesi, istemci bağlantılarını elde eden evreler ve bu bağlantıları işlemekte yardımcı olan modül çağrıları tarafından kullanılan yığıtın bayt cinsinden uzunluğunu belirler. Çoğu durumda işletim sistemi yığıtı uygun bir boyuta ayarlar, fakat yine de ayarlanmasını gerektirecek bazı durumlar olabilir:

    • HP-UX gibi görece küçük yığıt boyuna sahip platformlarda, Apache httpd, görece büyük yığıt alanı kullanan bazı üçüncü parti modüller yüzünden çökebilir. Bu modüller öntanımlı yığıt boyu daha büyük olan diÄŸer platformlarda sorunsuz çalışabilir. Bu tür çökmeler ThreadStackSize yönergesine daha büyük yığıt boyu atanarak çözümlenir. Böyle bir ayarlamayı sadece üçüncü parti modülün üreticisi bunun gerekliliÄŸini belirtmiÅŸse veya Apache httpd’nin evre yığıt boyutunun küçüklüğünden dolayı çöktüğü teÅŸhis edildiÄŸi takdirde yapınız.
    • Öntanımlı yığıt boyu Apache sunucusu için gerekenden belirgin ÅŸekilde büyük bazı platformalarda, eÄŸer ThreadStackSize yönergesi ile bu boyuttan daha düşük bir deÄŸer atanmışsa çocuk süreç başına evre sayısının yüksek olduÄŸu durumlarda bu yığıt yetmeyebilir. Böyle bir ayarlama sadece sunucunun öldüresiye denendiÄŸi dolayısıyla yığıt boyutlarının aşırı zorlandığı deneme ortamlarında yapılmalıdır. Gereken en küçük yığıt boyutu kullanılan modüle sıkı sıkıya baÄŸlıdır, fakat Apache httpd yapılandırmasında yapılan bir deÄŸiÅŸiklik mevcut ThreadStackSize ayarını geçersiz hale getirebilir.
    • Linux üzerinde, ilgili sistem çaÄŸrısı en küçük yığıt boyutu olarak bu deÄŸeri kullanacağından, bu yönerge sadece öntanımlı yığıt boyutunu arttırmak için kullanılabilir. ulimit -s için (çoÄŸunlukla büyükçe) soft sınır (sınırsızsa 8MB), öntanımlı yığıt boyutu olarak kullanılır.
    Çocuk süreç başına yüksek bir evre sayısı gerekmedikçe ThreadStackSize değerinin azaltılmaması önerilir. Bazı platformlarda (Linux dahil), 128000 ayarı zaten çok düşüktür ve daha da azaltmak bazı modüllerle çökmeye sebep olur.

    Mevcut Diller:  de  |  en  |  fr  |  ja  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_include.html.ja.utf80000644000000000000500000015653313412755316020672 0ustar rootsrc mod_include - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_include

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:サーãƒãŒãƒ‘ースã™ã‚‹ html ドキュメント (Server Side Includes)
    ステータス:Base
    モジュール識別å­:include_module
    ソースファイル:mod_include.c
    äº’æ›æ€§:Apache 2.0 ã‹ã‚‰å‡ºåŠ›ãƒ•ã‚£ãƒ«ã‚¿ã¨ã—ã¦å®Ÿè£…ã•れã¾ã—ãŸã€‚

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ãƒ•ァイルãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚‰ã‚Œã‚‹å‰ã«å‡¦ç†ã™ã‚‹ãƒ•ィルタを æä¾›ã—ã¾ã™ã€‚処ç†ã®å†…容ã¯è¦ç´ ã¨å‘¼ã°ã‚Œã‚‹ç‰¹åˆ¥ãªå½¢å¼ã® SGML コメントã«ã‚ˆã‚Š åˆ¶å¾¡ã•れã¾ã™ã€‚ã“れらã®è¦ç´ ã¯æ¡ä»¶åˆ†å²ã‚„ã€ä»–ã®ãƒ•ァイルや プログラムã®å‡ºåŠ›ã®å–り込ã¿ã€ç’°å¢ƒå¤‰æ•°ã®è¨­å®šã‚„表示を行ãªã†ã“ã¨ãŒ ã§ãã¾ã™ã€‚

    top

    Server-Side Includes を有効ã«ã™ã‚‹

    Server Side Includes 㯠INCLUDES フィルタ ã«ã‚ˆã‚Šå®Ÿè£…ã•れã¦ã„ã¾ã™ã€‚ Server-side include ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’å«ã‚€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®æ‹¡å¼µå­ãŒ .shtml ã®å ´åˆã€ä»¥ä¸‹ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§ã¯ Apache ãŒãれらを パースã—ã¦ã€ãã®çµæžœã§ãるドキュメント㫠text/html ã® MIME タイプを割り当ã¦ã¾ã™:

    AddType text/html .shtml
    AddOutputFilter INCLUDES .shtml

    以下ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠shtml ファイルã®ã‚ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã§æŒ‡å®šã•れã¦ã„ã‚‹ å¿…è¦ãŒã‚りã¾ã™ (通常㯠<Directory> ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã§æŒ‡å®šã—ã¾ã™ãŒã€ AllowOverride Options ãŒè¨­å®šã•れã¦ã„ã‚‹ã¨ã€.htaccess ãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ãã“ã¨ã‚‚ã§ãã¾ã™):

    Options +Includes

    äº’æ›æ€§ã‚’ä¿ã¤ãŸã‚ã«ã€server-parsed ãƒãƒ³ãƒ‰ãƒ© ã‚‚ INCLUDES フィルタを 有効ã«ã—ã¾ã™ã€‚MIME タイプ text/x-server-parsed-html ã‚„ text/x-server-parsed-html3 ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã«å¯¾ã—ã¦ã‚‚ Apache 㯠INCLUDES フィルタを有効ã«ã—ã¾ã™ (出力ã•れるもã®ã¯ MIME タイプ text/html ã«ãªã‚Šã¾ã™)。

    詳ã—ã„æƒ…報㯠Tutorial on Server Side Includes.

    top

    サーãƒã‚µã‚¤ãƒ‰ã‚¤ãƒ³ã‚¯ãƒ«ãƒ¼ãƒ‰ (SSI) ã§ã® PATH_INFO

    SSI ã§å‡¦ç†ã•れるファイルã¯ãƒ‡ãƒ•ォルトã§ã¯ PATH_INFO (後続ã®ãƒ‘ã‚¹åæƒ…å ±) 付ãã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘入れãªããªã‚Šã¾ã—ãŸã€‚AcceptPathInfo ディレクティブ㧠PATH_INFO 付ãã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘入れるよã†ã«ã‚µãƒ¼ãƒã‚’ 設定ã§ãã¾ã™ã€‚

    top

    基本è¦ç´ 

    ドキュメントã¯ã€SGML ã®ã‚³ãƒ¡ãƒ³ãƒˆã¨ã—ã¦ç‰¹åˆ¥ãªã‚³ãƒžãƒ³ãƒ‰ãŒåŸ‹ã‚è¾¼ã¾ã‚ŒãŸ HTML ドキュメントã¨ã—ã¦ãƒ‘ースã•れã¾ã™ã€‚ã‚³ãƒžãƒ³ãƒ‰ã®æ§‹æ–‡ã¯æ¬¡ã®ã‚ˆã†ã« ãªã£ã¦ã„ã¾ã™:

    <!--#element attribute=value attribute=value ... -->

    値 (訳注: value) ã¯äºŒé‡å¼•用符ã§å›²ã‚€ã®ãŒä¸€èˆ¬çš„ã§ã™ãŒã€ シングルクオート (') ã¨ãƒãƒƒã‚¯ã‚¯ã‚ªãƒ¼ãƒˆ (`) も使用ã§ãã¾ã™ã€‚ 多ãã®ã‚³ãƒžãƒ³ãƒ‰ã¯å±žæ€§-値 (訳注: attribute-value) ã®çµ„を一ã¤ã ã‘指定ã§ãã¾ã™ã€‚ コメントã®çµ‚ã‚り (-->) ã®å‰ã«ã¯ã€SSI ã®å¥ã®ä¸€éƒ¨ã ã¨è§£é‡ˆã•れãªã„よã†ã«ã™ã‚‹ãŸã‚ã«ç©ºç™½ã‚’ 入れã¦ãã ã•ã„。最åˆã® <!--# ã¯ã¾ã¨ã‚ã¦ä¸€ã¤ã® å¥ã§ã€ç©ºç™½ã‚’ãµãã‚“ã§ã¯ã„ã‘ãªã„ã“ã¨æ³¨æ„ã—ã¦ãã ã•ã„。

    è¦ç´  (訳注: element) を以下ã®è¡¨ã«ç¤ºã—ã¾ã™ã€‚

    è¦ç´ èª¬æ˜Ž
    config configure output formats
    echo print variables
    exec execute external programs
    fsize print size of a file
    flastmod print last modification time of a file
    include include a file
    printenv print all available variables
    set set a value of a variable

    SSI è¦ç´ ã¯ mod_include 以外ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ 定義ã•れるã“ã¨ã‚‚ã‚りã¾ã™ã€‚実際〠exec è¦ç´ ã¯ mod_cgi ã§æä¾›ã•れã¦ã„ã¦ã€ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒ ロードã•れる場åˆã«ã®ã¿åˆ©ç”¨å¯èƒ½ã¨ãªã‚Šã¾ã™ã€‚

    config è¦ç´ 

    次ã®ã‚³ãƒžãƒ³ãƒ‰ã¯è§£æžã®æ§˜ã€…ãªå´é¢ã‚’制御ã—ã¾ã™ã€‚å±žæ€§ã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚

    echomsg (Apache 2.1 以é™)
    指定ã•れる値ã¯ã€echo è¦ç´ ãŒæœªå®šç¾©ã®å¤‰æ•°ã‚’エコーã—よã†ã¨ã—ãŸéš›ã«ã€ クライアントã«é€ã‚‰ã‚Œã‚‹ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã«ãªã‚Šã¾ã™ã€‚ SSIUndefinedEcho ディレクティブを上書ãã—ã¾ã™ã€‚
    errmsg
    ã“ã®å€¤ãŒã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®è§£æžä¸­ã«ã‚¨ãƒ©ãƒ¼ãŒç™ºç”Ÿã—ãŸæ™‚㫠クライアントã«é€ä¿¡ã•れるメッセージã«ãªã‚Šã¾ã™ã€‚ SSIErrorMsg ディレクティブを上書ãã—ã¾ã™ã€‚
    sizefmt
    ã“ã®å€¤ã¯ã€ãƒ•ァイルã®ã‚µã‚¤ã‚ºã‚’表示ã™ã‚‹éš›ã«ä½¿ç”¨ã™ã‚‹ フォーマットを設定ã—ã¾ã™ã€‚値㯠ãƒã‚¤ãƒˆã‚«ã‚¦ãƒ³ãƒˆã® bytesã‹ã€Kb ã‚„ Mb を優先的ã«ä½¿ç”¨ã™ã‚‹ abbrec (例ãˆã° 1024 ãƒã‚¤ãƒˆã¯ "1K" ã¨è¡¨ç¤ºã•れã¾ã™) ã§ã™ã€‚
    timefmt
    ã“ã®å€¤ã¯ strftime(3) ライブラリルーãƒãƒ³ãŒ 日時をプリントã™ã‚‹éš›ã«ç”¨ã„られã¾ã™ã€‚

    echo è¦ç´ 

    ã“ã®ã‚³ãƒžãƒ³ãƒ‰ã¯ä»¥ä¸‹ã§å®šç¾©ã•れã¦ã„ã‚‹ include 変数 を表示ã—ã¾ã™ã€‚変数ãŒè¨­å®šã•れã¦ã„ãªã„å ´åˆã¯ SSIUndefinedEcho ディレクティブ㧠決定ã•ã‚Œã‚‹çµæžœã¨ãªã‚Šã¾ã™ã€‚日付ã¯ãã®æ™‚点ã§ã® timefmt ã«å¾“ã£ã¦ 表示ã•れã¾ã™ã€‚å±žæ€§ã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚

    var
    値ã¯è¡¨ç¤ºã™ã‚‹å¤‰æ•°ã®åå‰ã§ã™ã€‚
    encoding

    変数を出力ã™ã‚‹å‰ã«ã€å¤‰æ•°ä¸­ã®ç‰¹åˆ¥æ–‡å­—ã‚’ã©ã®ã‚ˆã†ã«ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã™ã‚‹ã‹ã‚’ 指定ã—ã¾ã™ã€‚none ã«è¨­å®šã•れã¦ã„ã‚‹ã¨ã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã¯è¡Œãªã‚れã¾ã›ã‚“。 url ã«è¨­å®šã•れã¦ã„ã‚‹ã¨ã€URL エンコード (%-エンコードã¨ã‚‚ 呼ã°ã‚Œã¦ã„ã¾ã™ã€‚ã“れã¯ãƒªãƒ³ã‚¯ç­‰ã® URL ã®ä½¿ç”¨ã«é©åˆ‡ã§ã™) ㌠行ãªã‚れã¾ã™ã€‚echo è¦ç´ ã®é–‹å§‹æ™‚ã¯ã€ãƒ‡ãƒ•ォルト㯠entity ã«è¨­å®šã•れã¦ã„ã¾ã™ã€‚ã“れã¯ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ (段è½ã‚„テキストãªã©ã®ãƒ–ロックレベル㮠HTML エレメントã®ã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆã« é©ã—ã¦ã„ã¾ã™) を行ãªã„ã¾ã™ã€‚ã“れ㯠encoding 属性 を加ãˆã‚‹ã“ã¨ã§å¤‰æ›´ã§ãã¾ã™ã€‚å¤‰æ›´ã¯æ¬¡ã® encoding 属性ã‹ã€ è¦ç´ ã®çµ‚了ã¾ã§åŠ¹åŠ›ã‚’æŒã¡ã¾ã™ã€‚

    encoding 属性ã¯ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã®å¤‰æ›´ã‚’ã—ãŸã„ var ã®å‰ã« ã‚ã‚‹å¿…è¦ãŒã‚ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。 ã¾ãŸã€ISO-8859-1 エンコーディング㧠定義ã•れã¦ã„ã‚‹ç‰¹åˆ¥ãªæ–‡å­—ã ã‘ãŒã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れã¾ã™ã€‚ åˆ¥ã®æ–‡å­—ã®ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã®å ´åˆã¯ã€ã“ã®ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã¯ 望ã¿ã®çµæžœã«ãªã‚‰ãªã„ã‹ã‚‚ã—れã¾ã›ã‚“。

    クロスサイトスクリプティングã®å•題をé¿ã‘ã‚‹ãŸã‚ã«ã€ 常ã«ãƒ¦ãƒ¼ã‚¶ã‹ã‚‰ã®ãƒ‡ãƒ¼ã‚¿ã‚’エンコードã™ã¹ãã§ã™ã€‚

    exec è¦ç´ 

    exec ã‚³ãƒžãƒ³ãƒ‰ã¯æŒ‡å®šã•れãŸã‚·ã‚§ãƒ«ã‚³ãƒžãƒ³ãƒ‰ã‚„ CGI スクリプトを 実行ã—ã¾ã™ã€‚mod_cgi ãŒã‚µãƒ¼ãƒã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹ã„ãªã‘れ㰠ãªã‚Šã¾ã›ã‚“。Option IncludesNOEXEC ã¯ã“ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’無効ã«ã—ã¾ã™ã€‚ 使用å¯èƒ½ãªå±žæ€§ã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚

    cgi

    値㯠(%-エンコードã•れãŸ) URL を指定ã—ã¾ã™ã€‚パス㌠スラッシュ (/) ã§å§‹ã¾ã‚‰ãªã„ã¨ãã¯ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‹ã‚‰ã® 相対パスã¨ã—ã¦æ‰±ã‚れã¾ã™ã€‚ã“ã®ãƒ‘スã§å‚ç…§ã•れã¦ã„るドキュメント㯠サーãƒãŒ CGI スクリプトã¨ã—ã¦æ‰±ã£ã¦ã„ãªãã¦ã‚‚ CGI スクリプトã¨ã—㦠起動ã•れã¾ã™ã€‚ãŸã ã—ã€ã‚¹ã‚¯ãƒªãƒ—トã®ã‚るディレクトリã§ã¯ (ScriptAlias ã‚„ Option ExecCGI ã«ã‚ˆã£ã¦) CGI スクリプトã®ä½¿ç”¨ãŒè¨±å¯ã•れã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚

    CGI スクリプトã«ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®å…ƒã€…ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã® PATH_INFO ã¨ã‚¯ã‚¨ãƒªãƒ¼æ–‡å­—列 (QUERY_STRING) ãŒæ¸¡ã•れã¾ã™ã€‚ ã“れら㯠URL パスã¨ã—ã¦ç‰¹å®šã§ããªã„ã‚‚ã®ã§ã™ã€‚ ã‚¹ã‚¯ãƒªãƒ—ãƒˆã¯æ¨™æº– CGI 環境ã«åŠ ãˆã¦ã€include 変数を 使用ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    例

    <!--#exec cgi="/cgi-bin/example.cgi" -->

    スクリプトãŒã€å‡ºåŠ›ã®ä»£ã‚り㫠Location: ヘッダを返ã™ã¨ã€ HTML ã®ã‚¢ãƒ³ã‚«ãƒ¼ (訳注: リンク) ã«å¤‰æ›ã•れã¾ã™ã€‚

    exec cgi よりも〠include virtual ã®æ–¹ã‚’使ã†ã‚ˆã†ã«ã—ã¦ãã ã•ã„。特ã«ã€CGI ã¸ã®è¿½åŠ ã®å¼•æ•°ã‚’ クエリー文字列を使ã£ã¦æ¸¡ã™ã“ã¨ã¯ exec cgi 㯠ã§ãã¾ã›ã‚“ãŒã€include virtual ã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ã—㦠å¯èƒ½ã§ã™ã€‚

    <!--#include virtual="/cgi-bin/example.cgi?argument=value" -->

    cmd

    サーãƒã¯æŒ‡å®šã•ã‚ŒãŸæ–‡å­—列を /bin/sh を使ã£ã¦ 実行ã—ã¾ã™ã€‚コマンドã¯é€šå¸¸ã® CGI 変数ã«åŠ ãˆã¦ include 変数も使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚

    ã»ã¨ã‚“ã©ã®å ´åˆã€#include virtual ã‚’ä½¿ã†æ–¹ãŒ #exec cgi ã‚„ #exec cmd を使ã†ã‚ˆã‚Šã‚‚良ã„ã§ã™ã€‚å‰è€… (#include virtual) ã¯æ¨™æº–ã® Apache ã®ã‚µãƒ–リクエスト機構を使ã£ã¦ãƒ•ァイルやスクリプト㮠出力をå–り込ã¿ã¾ã™ã€‚ ã“ã¡ã‚‰ã®æ–¹ãŒã‚ˆãテストã•れメンテナンスã•ã‚ŒãŸæ–¹æ³•ã§ã™ã€‚

    ã•らã«ã€Win32 ã®ã‚ˆã†ãªã„ãã¤ã‹ã®ãƒ—ラットフォームやã€suexec を使ã£ã¦ã„ã‚‹ unix ã§ã¯ã€ exec ディレクティブã®ã‚³ãƒžãƒ³ãƒ‰ã« 引数を渡ã—ãŸã‚Šã€ã‚³ãƒžãƒ³ãƒ‰ã«ç©ºç™½ã‚’入れるã“ã¨ã¯ã§ãã¾ã›ã‚“。 ã§ã™ã‹ã‚‰ã€ä»¥ä¸‹ã®ã‚‚ã®ã¯ unix ã® suexec ã§ãªã„設定ã§ã¯å‹•作ã—ã¾ã™ãŒã€ Win32 ã‚„ suexec を使ã£ã¦ã„ã‚‹ unix ã§ã¯æœŸå¾…ã—ãŸçµæžœã«ã¯ãªã‚Šã¾ã›ã‚“:

    <!--#exec cmd="perl /path/to/perlscript arg1 arg2" -->

    fsize è¦ç´ 

    ã“ã®ã‚³ãƒžãƒ³ãƒ‰ã¯æŒ‡å®šã•れãŸãƒ•ァイルã®å¤§ãã•ã‚’ sizefmt ã® æ›¸å¼æŒ‡å®šã«åŸºã¥ã„ã¦å‡ºåŠ›ã—ã¾ã™ã€‚å±žæ€§ã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚

    file
    値ã¯è§£æžã•れã¦ã„るドキュメントã®å­˜åœ¨ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‹ã‚‰ã® 相対パスã§ã™ã€‚
    virtual
    値㯠(% エンコードã•れãŸ) URL-path ã§ã™ã€‚スラッシュ (/) ã§ å§‹ã¾ã‚‰ãªã„ã¨ãã¯ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ã—ã¦æ‰±ã‚れã¾ã™ã€‚ CGI ã®å‡ºåŠ›ã®ã‚µã‚¤ã‚ºã¯ãƒ—リントã•れã¾ã›ã‚“。CGI スクリプト自体ã®ã‚µã‚¤ã‚ºãŒãƒ—リントã•れるã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。

    flastmod è¦ç´ 

    ã“ã®ã‚³ãƒžãƒ³ãƒ‰ã¯æŒ‡å®šã•れãŸãƒ•ã‚¡ã‚¤ãƒ«ã®æœ€çµ‚修正時刻を timefmt æ›¸å¼æŒ‡å®šã«å¾“ã£ã¦è¡¨ç¤ºã—ã¾ã™ã€‚ 指定å¯èƒ½ãªå±žæ€§ã¯ fsize コマンドã¨åŒã˜ã§ã™ã€‚

    include è¦ç´ 

    ã“ã®ã‚³ãƒžãƒ³ãƒ‰ã¯åˆ¥ã®æ–‡æ›¸ã‚„ファイルã®ãƒ†ã‚­ã‚¹ãƒˆã‚’è§£æžã—ã¦ã„るファイル㫠挿入ã—ã¾ã™ã€‚挿入ã•れるファイルã¯ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã®ç®¡ç†ä¸‹ã«ã‚りã¾ã™ã€‚ è§£æžã—ã¦ã„るファイルã®å­˜åœ¨ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã« Option IncludesNOEXEC ãŒè¨­å®šã•れã¦ã„ã‚‹å ´åˆã€text MIME タイプ (text/plain, text/html ç­‰) ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®ã¿ã‚¤ãƒ³ã‚¯ãƒ«ãƒ¼ãƒ‰ãŒè¡Œãªã‚れã¾ã™ã€‚ ãã®ä»–ã®å ´åˆã¯ã€ã‚¯ã‚¨ãƒªãƒ¼æ–‡å­—列もå«ã‚ã€ã‚³ãƒžãƒ³ãƒ‰ã§æŒ‡å®šã•れ㟠完全㪠URL を使ã£ã¦æ™®é€šã« CGI スクリプトãŒå‘¼ã³å‡ºã•れã¾ã™ã€‚

    å±žæ€§ãŒæ–‡æ›¸ã®ä½ç½®ã‚’指定ã—ã¾ã™ã€‚include コマンドã«ä¸Žãˆã‚‰ã‚ŒãŸãれãžã‚Œã® 属性ã«å¯¾ã—ã¦æŒ¿å…¥ä½œæ¥­ãŒè¡Œãªã‚れã¾ã™ã€‚有効ãªå±žæ€§ã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚

    file
    値ã¯è§£æžã•れã¦ã„るドキュメントã®å­˜åœ¨ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‹ã‚‰ã® 相対パスã§ã™ã€‚ ../ ã‚’å«ã‚“ã§ã„ãŸã‚Šã€çµ¶å¯¾ãƒ‘スを指定ã—ãŸã‚Šã¯ã§ãã¾ã›ã‚“。 ã§ã™ã‹ã‚‰ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ«ãƒ¼ãƒˆã®å¤–ã«ã‚るファイルやã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæ§‹é€ ã§ 上ä½ã«ã‚るファイルを挿入ã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“。 常ã«ã“ã®å±žæ€§ã‚ˆã‚Šã¯ã€virtual 属性を使ã†ã‚ˆã†ã«ã—ã¦ãã ã•ã„。
    virtual

    値ã¯è§£æžã•れã¦ã„るドキュメントã‹ã‚‰ã® (% エンコードã•れãŸ) URL ã§ã™ã€‚URL ã«ã¯ã‚¹ã‚­ãƒ¼ãƒ ã‚„ホストåã‚’å«ã‚ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“。パスã¨ã€ ã‚‚ã—ã‚れã°ã‚¯ã‚¨ãƒªãƒ¼æ–‡å­—列を指定ã§ãã‚‹ã ã‘ã§ã™ã€‚スラッシュ (/) ã‹ã‚‰ å§‹ã¾ã‚‰ãªã„å ´åˆã¯ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ã—ã¦æ‰±ã‚れã¾ã™ã€‚

    URL ã¯å±žæ€§ã‹ã‚‰ä½œã‚‰ã‚Œã€ãã® URL をクライアントãŒã‚¢ã‚¯ã‚»ã‚¹ã—ãŸã¨ã㫠出力ã•れる内容ãŒè§£æžå¾Œã®å‡ºåŠ›ã«å«ã‚られã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€æŒ¿å…¥ã•れる ファイルã¯å…¥ã‚Œå­æ§‹é€ ã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    指定ã•れ㟠URL ㌠CGI プログラムã§ã‚ã£ãŸå ´åˆã¯ã€ プログラムãŒå®Ÿè¡Œã•れã€ãã®å‡ºåŠ›ãŒè§£æžã—ã¦ã„るファイル中㮠ディレクティブãŒã‚ã£ãŸä½ç½®ã«æŒ¿å…¥ã•れã¾ã™ã€‚CGI ã® url 㫠クエリー URL を入れるã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    <!--#include virtual="/cgi-bin/example.cgi?argument=value" -->

    HTML ドキュメント㫠CGI プログラムã®å‡ºåŠ›ã‚’å«ã‚る方法ã¨ã—ã¦ã¯ã€ include virtual ã®æ–¹ãŒ exec cgi よりも 好ã¾ã—ã„æ–¹æ³•ã§ã™ã€‚

    KeptBodySize ディレクティブãŒè¨­å®šã•れã¦ã„ã¦ã€ã‹ã¤ã€ã“ã®å¯¾è±¡ãƒ•ァイル㌠(訳注: POST リクエストを)å—ã‘入れã§ãã‚‹ãªã‚‰ã€ POST リクエストをå—ã‘å–ã£ã¦ã‚µãƒ–リクエストを発行ã™ã‚‹éš›ã«ã‚‚ POST ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæ¸¡ã•れã¾ã™ã€‚ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒè¨­å®šã•れã¦ã„ãªã„å ´åˆã¯ã€ サブリクエスト㯠GET リクエストã¨ã—ã¦å‡¦ç†ã•れã¾ã™ã€‚

    printenv è¦ç´ 

    ã“れã¯ã€å­˜åœ¨ã™ã‚‹ã™ã¹ã¦ã®å¤‰æ•°ã¨ãã®å€¤ã‚’表示ã—ã¾ã™ã€‚Apache 1.3.12 ã‹ã‚‰ã€ ç‰¹åˆ¥ãªæ–‡å­—ã¯å‡ºåŠ›ã•れるå‰ã«ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ (詳細㯠echo è¦ç´ ã‚’å‚ç…§) ã•れるよã†ã«ãªã‚Šã¾ã—ãŸã€‚属性ã¯ã‚りã¾ã›ã‚“。

    例

    <!--#printenv -->

    set è¦ç´ 

    ã“れã¯å¤‰æ•°ã®å€¤ã‚’設定ã—ã¾ã™ã€‚å±žæ€§ã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚

    var
    設定ã™ã‚‹å¤‰æ•°ã®åå‰ã€‚
    value
    変数ã«è¨­å®šã™ã‚‹å€¤ã€‚

    例

    <!--#set var="category" value="help" -->

    top

    Include 変数

    標準 CGI 環境ã®å¤‰æ•°ã«åŠ ãˆã¦ã€echo コマンドや〠if ã‚„ elif, ãれã«ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‹ã‚‰å‘¼ã³å‡ºã•れる ã™ã¹ã¦ã®ãƒ—ログラムã‹ã‚‰ä½¿ç”¨ã§ãる変数ãŒã‚りã¾ã™ã€‚

    DATE_GMT
    グリニッジ標準時ã«ã‚ˆã‚‹ç¾åœ¨æ™‚刻。
    DATE_LOCAL
    ãƒ­ãƒ¼ã‚«ãƒ«ã®æ¨™æº–時ã«ã‚ˆã‚‹ç¾åœ¨æ™‚刻。
    DOCUMENT_NAME
    ユーザãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã—㟠(ディレクトリを除ã„ãŸ) ファイルå。
    DOCUMENT_URI
    ユーザãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã—㟠(% エンコードã•れãŸ) URL-path。 挿入ファイルãŒå…¥ã‚Œå­ã«ãªã£ã¦ã„ã‚‹å ´åˆã¯ã€è§£æžã•れã¦ã„ã‚‹ ドキュメント㮠URL ã§ã¯ãªã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。
    LAST_MODIFIED
    ユーザãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã—ãŸãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®æœ€çµ‚修正時刻。
    QUERY_STRING_UNESCAPED
    クエリー文字列ãŒã‚ã‚‹å ´åˆã€ã“ã®å¤‰æ•°ã«ã¯ (%-デコードã•れãŸ) クエリー文字列ãŒä»£å…¥ã•れã¦ã„ã¦ã€shell ã§ä½¿ç”¨ã§ãるよã†ã« エスケープã•れã¦ã„ã¾ã™ (& ã¨ã„ã£ãŸç‰¹æ®Šæ–‡å­—ã«ã¯ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ãŒç›´å‰ã«ç½®ã‹ã‚Œã¾ã™)。
    top

    変数置æ›

    変数置æ›ã¯ãŸã„ã¦ã„ã®å ´åˆ SSI ディレクティブã®å¼•æ•°ã¨ã—ã¦å¦¥å½“ãªå ´æ‰€ã«ã‚ã‚‹ 引用符ã§å›²ã¾ã‚ŒãŸæ–‡å­—列中ã§è¡Œãªã‚れã¾ã™ã€‚ã“れã«è©²å½“ã™ã‚‹ã‚‚ã®ã«ã¯ã€ config, exec, flastmod, fsize, include, echo, set ã® å„ディレクティブã¨ã€æ¡ä»¶åˆ†å²ç”¨ã®ã‚ªãƒšãƒ¬ãƒ¼ã‚¿ã¸ã®å¼•æ•°ãŒã‚りã¾ã™ã€‚ ドル記å·ã¯ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã‚’使ã†ã“ã¨ã§ä½¿ã†ã“ã¨ãŒã§ãã¾ã™:

    <!--#if expr="$a = \$test" -->

    変数åã¨ã—ã¦ã¿ãªã•れる文字列ã®ä¸­ã§å¤‰æ•°ã¸ã®å‚ç…§ã‚’ç½®æ›ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã¨ãã¯ã€ シェルã§ã®å¤‰æ•°ç½®æ›ã®ã‚ˆã†ã«ã€ä¸­æ‹¬å¼§ã§æ‹¬ã‚‹ã“ã¨ã§åŒºåˆ¥ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™:

    <!--#set var="Zed" value="${REMOTE_HOST}_${REQUEST_METHOD}" -->

    ã“ã®ä¾‹ã§ã¯ã€REMOTE_HOST ㌠"X" ã§ REQUEST_METHOD ㌠"Y" ã®ã¨ãã«å¤‰æ•° Zed ã‚’ "X_Y" ã«è¨­å®šã—ã¾ã™ã€‚

    以下ã®ä¾‹ã§ã¯ã€DOCUMENT_URI ㌠/foo/file.html ã®ã¨ãã« "in foo" ã‚’ã€/bar/file.html ã®ã¨ãã« "in bar" を〠ã©ã¡ã‚‰ã§ã‚‚ãªã„ã¨ãã«ã¯ "in neither" を表示ã—ã¾ã™ã€‚

    <!--#if expr='"$DOCUMENT_URI" = "/foo/file.html"' -->
    in foo
    <!--#elif expr='"$DOCUMENT_URI" = "/bar/file.html"' -->
    in bar
    <!--#else -->
    in neither
    <!--#endif -->

    top

    フロー制御è¦ç´ 

    基本的ãªãƒ•ローコントロールè¦ç´ ã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚

    <!--#if expr="test_condition" -->
    <!--#elif expr="test_condition" -->
    <!--#else -->
    <!--#endif -->

    if è¦ç´ ã¯ãƒ—ログラミング言語㮠if æ–‡ã¨åŒã˜ã‚ˆã†ã«å‹•作ã—ã¾ã™ã€‚æ¡ä»¶ãŒè©•価ã•れã€çµæžœãŒçœŸã§ã‚ã‚Œã°æ¬¡ã® elif ã‹ else ã‹ endif è¦ç´ ã¾ã§ã®æ–‡å­—列ãŒå‡ºåŠ›ã«æŒ¿å…¥ã•れã¾ã™ã€‚

    elif ã‚„ else 文㯠test_condition ãŒå½ã®ã¨ãã«ãƒ†ã‚­ã‚¹ãƒˆã‚’å‡ºåŠ›ã«æŒ¿å…¥ã™ã‚‹ãŸã‚ã«ä½¿ã‚れã¾ã™ã€‚ ã“れらã®è¦ç´ ã¯ã‚ã£ã¦ã‚‚ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。

    endif è¦ç´ ã¯ if è¦ç´ ã‚’終了ã•ã›ã¾ã™ã€‚ã“ã®è¦ç´ ã¯å¿…é ˆã§ã™ã€‚

    test_condition ã¯ä»¥ä¸‹ã®ã©ã‚Œã‹ã§ã™:

    string
    string ãŒç©ºã§ãªã„å ´åˆã«çœŸã§ã™
    -A string

    (訳注: httpd ã®)設定を検査ã—ã¦ã€ æ–‡å­—åˆ—ã§æŒ‡å®šã—㟠URL ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹å ´åˆ true ã§ã€ ãã†ã§ãªã‘れ㰠false ã«ãªã‚Šã¾ã™ã€‚ SSIAccessEnable ãŒæœ‰åйã®ã¨ãã«ã®ã¿ ã“ã®æ¤œæŸ»ã¯è¡Œã‚れã¾ã™ã€‚ 承èªã•れã¦ã„ãªã„ユーザã‹ã‚‰ã¯éš ã—ã¦ãŠããŸã„ URL ã«ã¤ã„ã¦ã®æƒ…報〠ãŸã¨ãˆã° URL ã¸ã®ãƒªãƒ³ã‚¯ãªã©ãŒã‚ã‚‹å ´åˆã«ã€ä¾¿åˆ©ã§ã™ã€‚ 検査ã§ã¯ URL ã¸ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹ã‹ã®æ¨©é™ã®ã¿ãŒè¡Œã‚れã€URL ãŒå­˜åœ¨ã™ã‚‹ã‹ã©ã†ã‹ã«ã¤ã„ã¦ã¯æ¤œæŸ»ã•れãªã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。

    Example

    <!--#if expr="-A /private" -->
    Click <a href="/private">here</a> to access private information.
    <!--#endif -->

    string1 = string2
    string1 == string2
    string1 != string2

    string1 㨠string2 を比較ã—ã¾ã™ã€‚ string2 ㌠/string/ ã¨ã„ã†å½¢å¼ã§ã‚れã°ã€æ­£è¦è¡¨ç¾ã¨ã—ã¦æ¯”較ã•れã¾ã™ã€‚æ­£è¦è¡¨ç¾ã¯ PCRE エンジンã§å®Ÿè£…ã•れã¦ã„ã¦ã€ perl 5 ã¨åŒã˜æ§‹æ–‡ã‚’使用ã—ã¾ã™ã€‚ == ã¯å˜ã« = ã®åˆ¥åã§ã€ã¾ã£ãŸãåŒã˜å‹•作を ã—ã¾ã™ã€‚

    æ­£ã®ãƒžãƒƒãƒãƒ³ã‚° (= ã¾ãŸã¯ ==) ã®å ´åˆã¯ã€ æ­£è¦è¡¨ç¾ã§ã‚°ãƒ«ãƒ¼ãƒ—分ã‘ã•れãŸãƒ‘ーツをキャプãƒãƒ£ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ キャプãƒãƒ£ã•れãŸéƒ¨åˆ†ã¯ç‰¹æ®Šå¤‰æ•° $1 .. $9 ã«æ ¼ç´ã•れã¾ã™ã€‚

    例

    <!--#if expr="$QUERY_STRING = /^sid=([a-zA-Z0-9]+)/" -->
    <!--#set var="session" value="$1" -->
    <!--#endif -->

    string1 < string2
    string1 <= string2
    string1 > string2
    string1 >= string2
    string1 㨠string2 を比較ã—ã¾ã™ã€‚ 文字列ã¨ã—ã¦æ¯”較ã•れる (strcmp(3) を使用) ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。ã§ã™ã‹ã‚‰ã€æ–‡å­—列 "100" 㯠"20" よりもå°ã•ã„ã“ã¨ã«ãªã‚Šã¾ã™ã€‚
    ( test_condition )
    test_condition ãŒçœŸã®ã¨ãã€çœŸ
    ! test_condition
    test_condition ãŒå½ã®ã¨ãã€çœŸ
    test_condition1 && test_condition2
    test_condition1 ã‹ã¤ test_condition2 ãŒçœŸã®ã¨ãã€çœŸ
    test_condition1 || test_condition2
    test_condition1 ã¾ãŸã¯ test_condition2 ãŒçœŸã®ã¨ãã€çœŸ

    "=" 㨠"!=" ã®æ–¹ãŒ "&&" より ãã¤ãæŸç¸›ã—ã¾ã™ã€‚"!" ã®æŸç¸›ãŒä¸€ç•ªãã¤ããªã£ã¦ã„ã¾ã™ã€‚ ã§ã™ã‹ã‚‰ä»¥ä¸‹ã®äºŒã¤ã¯ç­‰ä¾¡ã§ã™:

    <!--#if expr="$a = test1 && $b = test2" -->
    <!--#if expr="($a = test1) && ($b = test2)" -->

    真å½å€¤ã‚ªãƒšãƒ¬ãƒ¼ã‚¿ && 㨠|| ã¯åŒã˜å„ªå…ˆåº¦ã§ã™ã€‚ ã“れらã®ã‚ªãƒšãƒ¬ãƒ¼ã‚¿ã§ä¸€æ–¹ã«ã‚ˆã‚Šå¼·ã„優先度をã¤ã‘ãŸã„å ´åˆã«ã¯ã€ 括弧を使ã†å¿…è¦ãŒã‚りã¾ã™ã€‚

    変数やオペレータã¨ã—ã¦èªè­˜ã•れãªã„ã‚‚ã®ã¯ã™ã¹ã¦æ–‡å­—列ã¨ã—㦠扱ã‚れã¾ã™ã€‚文字列ã¯å¼•用符ã§å›²ã‚€ã“ã¨ã‚‚ã§ãã¾ã™: 'string' ã®ã‚ˆã†ã«ã€‚引用符ã§å›²ã¾ã‚Œã¦ã„ãªã„文字列ã«ã¯ç©ºç™½ (スペースã¨ã‚¿ãƒ–) ã‚’å«ã‚ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“。ãれらã¯å¤‰æ•°ãªã©ã®å¥ã‚’分離ã™ã‚‹ãŸã‚㫠使ã‚れã¦ã„ã‚‹ã‹ã‚‰ã§ã™ã€‚è¤‡æ•°ã®æ–‡å­—列ãŒç¶šã„ã¦ã„ã‚‹ã¨ãã¯ã€ 空白を間ã«å…¥ã‚Œã¦ä¸€ã¤ã«ãã£ã¤ã‘られã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€

    string1    string2 㯠string1 string2 ã«ãªã‚Šã¾ã™ã€‚

    ã¾ãŸã€

    'string1    string2' 㯠string1    string2 ã«ãªã‚Šã¾ã™ã€‚

    真å½å€¤è¡¨ç¾ã®æœ€é©åŒ–

    å¼ãŒã‚‚ã£ã¨è¤‡é›‘ã«ãªã‚Šã€å‡¦ç†ã®é€Ÿåº¦ä½Žä¸‹ãŒé¡•è‘—ã«ãªã£ãŸå ´åˆã¯ã€ 評価ルールã«å¾“ã£ã¦æœ€é©åŒ–ã—ã¦ã¿ã‚‹ã¨è‰¯ã„ã§ã—ょã†ã€‚

    • 評価ã¯å·¦ã‹ã‚‰å³ã«å‘ã‹ã£ã¦è¡Œã‚れã¾ã™ã€‚
    • 二値真å½å€¤ã‚ªãƒšãƒ¬ãƒ¼ã‚¿ (&& 㨠||) ã¯ã€å‡ºæ¥ã‚‹é™ã‚ŠçŸ­çµ¡è©•価ã•れã¾ã™ã€‚ã¤ã¾ã‚Šçµæžœã¨ã—ã¦ä¸Šè¨˜ã®ãƒ«ãƒ¼ãƒ«ã¯ã€ mod_include ãŒå·¦ã®è©•価å¼ã‚’評価ã—ã¾ã™ã€‚ å·¦å´ã§çµæžœã‚’å分決定ã§ãã‚‹å ´åˆã¯ã€è©•価ã¯ãã“ã§åœæ­¢ã—ã¾ã™ã€‚ ãã†ã§ãªã„å ´åˆã¯å³å´ã‚’評価ã—ã¦ã€å·¦ã¨å³ã®ä¸¡æ–¹ã‹ã‚‰çµæžœã‚’計算ã—ã¾ã™ã€‚
    • 短絡評価ã¯è©•価ã®å¯¾è±¡ã«æ­£è¦è¡¨ç¾ãŒå«ã¾ã‚Œã‚‹å ´åˆã€ã‚ªãƒ•ã«ãªã‚Šã¾ã™ã€‚ 後方å‚ç…§ã™ã‚‹å¤‰æ•° ($1 .. $9) を埋ã‚ã‚‹ãŸã‚ã«ã€å®Ÿéš›ã«è©•価ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã‹ã‚‰ã§ã™ã€‚

    特定ã®å¼ãŒã©ã®ã‚ˆã†ã«æ‰±ã‚れるã‹ã‚’知りãŸã„å ´åˆã¯ã€ -DDEBUG_INCLUDE コンパイラオプションを付ã‘㦠mod_include をリコンパイルã™ã‚‹ã¨è‰¯ã„ã§ã—ょã†ã€‚ ã“れã«ã‚ˆã‚Šã€å…¨ã¦ã®ãƒ‘ースã•れãŸå¼ã«å¯¾ã—ã¦ã€å­—å¥è§£æžæƒ…報〠パースツリーã¨ã€ ãれãŒã©ã®ã‚ˆã†ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚‰ã‚ŒãŸå‡ºåŠ›ã¾ã§è©•価ã•れãŸã‹ã‚’ 挿入ã—ã¾ã™ã€‚

    æ­£è¦è¡¨ç¾å†…ã§ã® / ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—

    æ­£è¦è¡¨ç¾å†…ã§ãƒ‡ãƒªãƒŸã‚¿ã¨ã—ã¦æ‰±ã„ãŸããªã„ / ãŒã‚れã°ã€ãれらã¯å…¨ã¦ エスケープã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 æ­£è¦è¡¨ç¾ã®æ„味ãŒã©ã†ã§ã‚ã‚ã†ã¨ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã¯å¿…è¦ã§ã™ã€‚

    top

    SSIEndTag ディレクティブ

    説明:include è¦ç´ ã‚’終了ã•ã›ã‚‹æ–‡å­—列
    æ§‹æ–‡:SSIEndTag tag
    デフォルト:SSIEndTag "-->"
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Base
    モジュール:mod_include
    äº’æ›æ€§:2.0.30 以é™ã§åˆ©ç”¨å¯èƒ½

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠mod_include ãŒæŽ¢ã™ã€ include è¦ç´ ã®çµ‚äº†ã‚’ç¤ºã™æ–‡å­—列を変更ã—ã¾ã™ã€‚

    例

    SSIEndTag "%>"

    å‚ç…§

    top

    SSIErrorMsg ディレクティブ

    説明:SSI ã®ã‚¨ãƒ©ãƒ¼ãŒã‚ã£ãŸã¨ãã«è¡¨ç¤ºã•れるエラーメッセージ
    æ§‹æ–‡:SSIErrorMsg message
    デフォルト:SSIErrorMsg "[an error occurred while processing this directive]"
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Base
    モジュール:mod_include
    äº’æ›æ€§:ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.0.30 以é™ã§ä½¿ç”¨å¯èƒ½

    SSIErrorMsg ディレクティブ㯠mod_include ãŒã‚¨ãƒ©ãƒ¼ãŒèµ·ã“ã£ãŸã¨ãã«è¡¨ç¤ºã™ã‚‹ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’変更ã—ã¾ã™ã€‚プロダクションサーãƒã§ã¯ メッセージãŒãƒ¦ãƒ¼ã‚¶ã«è¡¨ç¤ºã•れãªã„よã†ã«ã™ã‚‹ãŸã‚㫠デフォルトエラーメッセージを "<!-- Error -->" ã«å¤‰ãˆã‚‹ã¨ã„ã†ã‚ˆã†ãªã“ã¨ã‚’考ãˆã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠<!--#config errmsg=message --> è¦ç´ ã¨åŒã˜åŠ¹æžœã«ãªã‚Šã¾ã™ã€‚

    例

    SSIErrorMsg "<!-- Error -->"

    top

    SSIETag ディレクティブ

    説明:Controls whether ETags are generated by the server.
    æ§‹æ–‡:SSIETag on|off
    デフォルト:SSIETag off
    コンテキスト:ディレクトリ, .htaccess
    ステータス:Base
    モジュール:mod_include
    äº’æ›æ€§:Available in version 2.2.15 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    SSILastModified ディレクティブ

    説明:Controls whether Last-Modified headers are generated by the server.
    æ§‹æ–‡:SSILastModified on|off
    デフォルト:SSILastModified off
    コンテキスト:ディレクトリ, .htaccess
    ステータス:Base
    モジュール:mod_include
    äº’æ›æ€§:Available in version 2.2.15 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    SSILegacyExprParser ディレクティブ

    説明:Enable compatibility mode for conditional expressions.
    æ§‹æ–‡:SSILegacyExprParser on|off
    デフォルト:SSILegacyExprParser off
    コンテキスト:ディレクトリ, .htaccess
    ステータス:Base
    モジュール:mod_include
    äº’æ›æ€§:Available in version 2.3.13 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    SSIStartTag ディレクティブ

    説明:include è¦ç´ ã‚’é–‹å§‹ã™ã‚‹æ–‡å­—列
    æ§‹æ–‡:SSIStartTag tag
    デフォルト:SSIStartTag "<!--#"
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Base
    モジュール:mod_include
    äº’æ›æ€§:ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.0.30 以é™ã§ä½¿ç”¨å¯èƒ½

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠mod_include ãŒæŽ¢ã™ã€include è¦ç´ ã®é–‹å§‹ã‚’ç¤ºã™æ–‡å­—列を変更ã—ã¾ã™ã€‚

    二ã¤ã®ã‚µãƒ¼ãƒã§ (ã‚‚ã—ã‹ã™ã‚‹ã¨åˆ¥ã€…ã®æ®µéšŽã§) ファイルã®å‡ºåŠ›ã‚’è§£æžã—ã¦ã„ã¦ã€ ãれãžã‚Œã«é•ã†ã‚³ãƒžãƒ³ãƒ‰ã‚’処ç†ã•ã›ãŸã„〠ã¨ã„ã†ã‚ˆã†ãªã¨ãã«ã“ã®ã‚ªãƒ—ションを使ã„ã¾ã™ã€‚

    例

    SSIStartTag "<%"
    SSIEndTag "%>"

    上ã®ä¾‹ã®ã‚ˆã†ã«å¯¾å¿œã™ã‚‹ SSIEndTag ã‚’ä½µã›ã¦ä½¿ã†ã¨ã€ 下ã«ç¤ºã™ä¾‹ã®ã‚ˆã†ã« SSI ディレクティブを使ãˆã¾ã™:

    é•ã†é–‹å§‹ã¨çµ‚了ã®ã‚¿ã‚°ã‚’使ã£ãŸ SSI ディレクティブ

    <%printenv %>

    å‚ç…§

    top

    SSITimeFormat ディレクティブ

    説明:日付ã‘ã‚’ç¾ã™æ–‡å­—åˆ—ã®æ›¸å¼ã‚’設定ã™ã‚‹
    æ§‹æ–‡:SSITimeFormat formatstring
    デフォルト:SSITimeFormat "%A, %d-%b-%Y %H:%M:%S %Z"
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Base
    モジュール:mod_include
    äº’æ›æ€§:2.0.30 以é™ã§ä½¿ç”¨å¯èƒ½

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠DATE 環境変数を echo ã—ã¦æ—¥ä»˜ã‚’ç¾ã™æ–‡å­—列㌠表示ã•れるã¨ãã®æ›¸å¼ã‚’変更ã—ã¾ã™ã€‚formatstring 㯠C 標準ライブラリ㮠strftime(3) ã¨åŒã˜å½¢å¼ã§ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠<!--#config timefmt=formatstring --> è¦ç´ ã¨åŒã˜åŠ¹æžœã«ãªã‚Šã¾ã™ã€‚

    例

    SSITimeFormat "%R, %B %d, %Y"

    上ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§ã¯ã€æ—¥ä»˜ã¯ "22:26, June 14, 2002" ã¨ã„ㆠ形å¼ã§è¡¨ç¤ºã•れã¾ã™ã€‚

    top

    SSIUndefinedEcho ディレクティブ

    説明:未定義ã®å¤‰æ•°ãŒ echo ã•れãŸã¨ãã«è¡¨ç¤ºã•れる文字列
    æ§‹æ–‡:SSIUndefinedEcho string
    デフォルト:SSIUndefinedEcho "(none)"
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Base
    モジュール:mod_include
    äº’æ›æ€§:2.0.34 以é™ã§åˆ©ç”¨å¯èƒ½

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯å¤‰æ•°ãŒå®šç¾©ã•れã¦ã„ãªã„ã«ã‚‚é–¢ã‚ら㚠"echo" ã•れãŸã¨ãã« mod_include ãŒè¡¨ç¤ºã™ã‚‹æ–‡å­—列を変更ã—ã¾ã™ã€‚

    例

    SSIUndefinedEcho "<!-- undef -->"

    top

    XBitHack ディレクティブ

    説明:実行ビットãŒè¨­å®šã•れãŸãƒ•ァイル㮠SSI ディレクティブを è§£æžã™ã‚‹
    æ§‹æ–‡:XBitHack on|off|full
    デフォルト:XBitHack off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Options
    ステータス:Base
    モジュール:mod_include

    XBitHack ディレクティブã¯é€šå¸¸ã® HTML ドキュメントã®è§£æžã‚’制御ã—ã¾ã™ã€‚ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠MIME タイプ text/html ã¨é–¢é€£ä»˜ã‘られã¦ã„るファイルã«ã®ã¿å½±éŸ¿ã—ã¾ã™ã€‚ XBitHack ã¯ä»¥ä¸‹ã®å€¤ã‚’ã¨ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    off
    実行å¯èƒ½ãƒ•ァイルã«å¯¾ã—ã¦ç‰¹åˆ¥ãªæ‰±ã„ã‚’ã—ã¾ã›ã‚“。
    on
    ユーザã®å®Ÿè¡Œãƒ“ットãŒè¨­å®šã•れã¦ã„ã‚‹ text/html ファイルã¯å…¨ã¦ã‚µãƒ¼ãƒã§è§£æžã™ã‚‹ html ドキュメントã¨ã—ã¦æ‰±ã‚れã¾ã™ã€‚
    full
    on ã¨åŒæ§˜ã§ã™ãŒã€ã‚°ãƒ«ãƒ¼ãƒ—実行ビットもテストã—ã¾ã™ã€‚ ã‚‚ã—ãれãŒè¨­å®šã•れã¦ã„れã°ã€è¿”ã•れるファイル㮠Last-modified ã® æ—¥ä»˜ã‚’ãƒ•ã‚¡ã‚¤ãƒ«ã®æœ€çµ‚修正時刻ã«ã—ã¾ã™ã€‚ãれãŒè¨­å®šã•れã¦ã„ãªã„ã¨ãã¯ã€ last-modified ã®æ—¥ä»˜ã¯é€ã‚‰ã‚Œã¾ã›ã‚“。ã“ã®ãƒ“ットを設定ã™ã‚‹ã¨ã€ クライアントやプロキシãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’キャッシュã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚
    æ³¨æ„ ä»–ã® CGI ã‚’ #include ã™ã‚‹ã‹ã‚‚ã—れãªã„ã‚‚ã®ã‚„ã€å„アクセスã«å¯¾ã—ã¦é•ã†å‡ºåŠ›ã‚’ç”Ÿæˆã™ã‚‹ (ã‚‚ã—ãã¯å¾Œã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§å¤‰ã‚ã‚‹ã‹ã‚‚ã—れãªã„ã‚‚ã®) ã™ã¹ã¦ã® SSI スクリプトã«å¯¾ã—ã¦ã‚°ãƒ«ãƒ¼ãƒ—実行ビット㌠設定ã•れã¦ã„ãªã„ã“ã¨ã‚’確èªã§ããªã„å ´åˆã¯ã€full ã¯ä½¿ã‚ãªã„æ–¹ãŒè‰¯ã„ ã§ã—ょã†ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_so.html.fr.utf80000644000000000000500000003614213412755316017676 0ustar rootsrc mod_so - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_so

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Chargement de modules ou de code exécutable au cours du démarrage ou du redémarrage du serveur
    Statut:Extension
    Identificateur de Module:so_module
    Fichier Source:mod_so.c
    Compatibilité:Sous Windows, c'est un module de base (toujours inclus)

    Sommaire

    Sur les systèmes d'exploitation sélectionnés, ce module peut être utilisé pour charger des modules dans le serveur HTTP Apache en cours d'exécution grâce au mécanisme des Dynamic Shared Object ou Objets Partagés Dynamiquement (DSO), et évite ainsi de devoir effectuer une recompilation.

    Sous Unix, le code chargé provient en général de fichiers objet partagés possèdant en général l'extension .so, alors que sous Windows, l'extension peut être soit .so, soit .dll.

    Avertissement

    En général, les modules compilés pour une version majeure du serveur HTTP Apache ne fonctionneront pas avec une autre (par exemple de 1.3 à 2.0 ou 2.0 à 2.2). D'une version majeure à l'autre, il y a souvent des modifications d'API qui nécessitent des modifications du module pour qu'il puisse fonctionner avec la nouvelle version.

    top

    Création de modules chargeables pour Windows

    Note

    Sous Windows, où les modules chargeables possèdent en général l'extension de nom de fichier .dll, les modules Apache httpd se nomment mod_nom-module.so, tout comme sur les autres plates-formes. Vous trouverez cependant encore des modules tiers, comme PHP par exemple, qui continuent d'utiliser la convention de nommage avec extension .dll.

    Bien que mod_so puisse encore charger des modules possèdant un nom du style ApacheModuleFoo.dll, il est préférable d'utiliser la nouvelle convention de nommage ; si vous modifiez votre module chargeable pour la version 2.0, veuillez aussi modifier son nom pour respecter cette nouvelle convention.

    Les API des modules Apache httpd sous Unix et Windows sont identiques. Alors que certains modules s'appuient sur certains aspects de l'architecture Unix non présents dans Windows, et ne fonctionneront donc pas sur cette dernière plate-forme, de nombreux modules fonctionnent sous Windows avec peu ou pas de modification par rapport à leur version Unix.

    Lorsqu'un module fonctionne, il peut être ajouté au serveur de deux manières. Sous Unix, il peut être compilé dans le serveur. Comme Apache httpd pour Windows ne dispose pas du programme Configure propre à Apache httpd pour Unix, le fichier source du module doit être ajouté au fichier projet Apache de base, et ses symboles ajoutés au fichier os\win32\modules.c.

    La seconde méthode consiste à compiler le module en tant que DLL, à savoir une bibliothèque partagée qui pourra être chargée dans le serveur en cours d'exécution via la directive LoadModule. Ces modules DLL peuvent être distribués et exécutés sur toute installation d'Apache httpd pour Windows, sans avoir à recompiler le serveur.

    Pour créer un module DLL, il est nécessaire d'apporter une légère modification à son fichier source : l'enregistrement du module doit être exporté depuis la DLL (qui sera elle-même créée plus tard ; voir plus loin). Pour ce faire, ajoutez la macro AP_MODULE_DECLARE_DATA (définie dans les fichiers d'en-têtes d'Apache httpd) à la définition de l'enregistrement de votre module. Par exemple, si votre module est déclaré comme suit :

    module foo_module;

    Remplacez cette ligne par :

    module AP_MODULE_DECLARE_DATA foo_module;

    Notez que cette macro ne sera prise en compte que sous Windows, si bien que le module poura être utilisé sans changement sous Unix, si besoin est. Alternativement, si vous êtes familier avec les fichiers .DEF, vous pouvez les utiliser pour exporter l'enregistrement du module.

    Maintenant, nous sommes prêts à créer une DLL contenant notre module. Il va falloir pour cela la lier avec la bibliothèque d'export libhttpd.lib qui a été créée au cours de la compilation de la bibliothèque partagée libhttpd.dll. Il sera peut-être aussi nécessaire de modifier la configuration du compilateur pour s'assurer que les fichiers d'en-têtes d'Apache httpd seront correctement localisés. Vous trouverez cette bibliothèque à la racine du répertoire des modules de votre serveur. Il est souhaitable d'utiliser un fichier de module .dsp existant dans l'arborescence afin de s'assurer que l'environnement de compilation est correctement configuré, mais vous pouvez aussi comparer les options de compilation et d'édition de liens à votre fichier .dsp.

    Ceci devrait créer une version DLL de votre module. Il vous suffit maintenant de l'enregistrer dans le répertoire modules à la racine de votre serveur, et d'utiliser la directive LoadModule pour la charger.

    top

    Directive LoadFile

    Description:Liaison du fichier objet ou de la bibliothèque spécifié
    Syntaxe:LoadFile nom-fichier [nom-fichier] ...
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_so

    La directive LoadFile permet de lier le fichier objet ou la bibliothèque spécifié au serveur lors du démarrage ou du redémarrage de ce dernier ; ceci permet d'ajouter tout code additionnel nécessaire au fonctionnement d'un module. nom-fichier est soit un chemin absolu, soit un chemin relatif au répertoire défini par la directive ServerRoot.

    Par exemple :

    LoadFile "libexec/libxmlparse.so"
    top

    Directive LoadModule

    Description:Liaison avec le serveur du fichier objet ou de la bibliothèque spécifié, et ajout de ce dernier à la liste des modules actifs
    Syntaxe:LoadModule module nom-fichier
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_so

    La directive LoadModule permet de lier le fichier objet ou la bibliothèque nom-fichier avec le serveur, et d'ajouter la structure de module nommée module à la liste des modules actifs. module est le nom de la variable externe de type module dans le fichier, et est référencé comme Identificateur de module dans la documentation des modules.

    Par exemple :

    LoadModule status_module "modules/mod_status.so"

    charge le module spécifié depuis le sous-répertoire des modules situé à la racine du serveur.

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/directives.html.zh-cn.utf80000644000000000000500000015531413523273316021170 0ustar rootsrc 指令索引 - Apache HTTP æœåС噍 版本 2.4
    <-

    指令索引

    å¯ç”¨è¯­è¨€:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    æ¯ä¸ªåœ¨ Apache 标准å‘行版中å¯ç”¨çš„æŒ‡ä»¤éƒ½åˆ—åœ¨è¿™é‡Œã€‚å®ƒä»¬ä½¿ç”¨ä¸€è‡´çš„æ ¼å¼æè¿°ï¼Œè€Œä¸”æœ‰æœ¯è¯­å­—å…¸ã€‚

    指令快速å‚考用æ¥ä»¥æ‘˜è¦çš„å½¢å¼æä¾›æœ‰å…³æ¯ä¸ªæŒ‡ä»¤çš„详细信æ¯ã€‚

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 

    å¯ç”¨è¯­è¨€:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    评论

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_ident.html.en0000644000000000000500000002371313412755316017466 0ustar rootsrc mod_ident - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_ident

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:RFC 1413 ident lookups
    Status:Extension
    Module Identifier:ident_module
    Source File:mod_ident.c
    Compatibility:Available in Apache 2.1 and later

    Summary

    This module queries an RFC 1413 compatible daemon on a remote host to look up the owner of a connection.

    top

    IdentityCheck Directive

    Description:Enables logging of the RFC 1413 identity of the remote user
    Syntax:IdentityCheck On|Off
    Default:IdentityCheck Off
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_ident
    Compatibility:Moved out of core in Apache 2.1

    This directive enables RFC 1413-compliant logging of the remote user name for each connection, where the client machine runs identd or something similar. This information is logged in the access log using the %...l format string.

    The information should not be trusted in any way except for rudimentary usage tracking.

    Note that this can cause serious latency problems accessing your server since every request requires one of these lookups to be performed. When firewalls or proxy servers are involved, each lookup might possibly fail and add a latency duration as defined by the IdentityCheckTimeout directive to each hit. So in general this is not very useful on public servers accessible from the Internet.

    top

    IdentityCheckTimeout Directive

    Description:Determines the timeout duration for ident requests
    Syntax:IdentityCheckTimeout seconds
    Default:IdentityCheckTimeout 30
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_ident

    This directive specifies the timeout duration of an ident request. The default value of 30 seconds is recommended by RFC 1413, mainly because of possible network latency. However, you may want to adjust the timeout value according to your local network speed.

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cache_socache.html.en0000644000000000000500000004444613412755316021121 0ustar rootsrc mod_cache_socache - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_cache_socache

    Available Languages:  en  |  fr 

    Description:Shared object cache (socache) based storage module for the HTTP caching filter.
    Status:Extension
    Module Identifier:cache_socache_module
    Source File:mod_cache_socache.c

    Summary

    mod_cache_socache implements a shared object cache (socache) based storage manager for mod_cache.

    The headers and bodies of cached responses are combined, and stored underneath a single key in the shared object cache. A number of implementations of shared object caches are available to choose from.

    Multiple content negotiated responses can be stored concurrently, however the caching of partial content is not yet supported by this module.

    # Turn on caching
    CacheSocache shmcb
    CacheSocacheMaxSize 102400
    <Location "/foo">
        CacheEnable socache
    </Location>
    
    # Fall back to the disk cache
    CacheSocache shmcb
    CacheSocacheMaxSize 102400
    <Location "/foo">
        CacheEnable socache
        CacheEnable disk
    </Location>

    Note:

    mod_cache_socache requires the services of mod_cache, which must be loaded before mod_cache_socache.

    top

    CacheSocache Directive

    Description:The shared object cache implementation to use
    Syntax:CacheSocache type[:args]
    Context:server config, virtual host
    Status:Extension
    Module:mod_cache_socache
    Compatibility:Available in Apache 2.4.5 and later

    The CacheSocache directive defines the name of the shared object cache implementation to use, followed by optional arguments for that implementation. A number of implementations of shared object caches are available to choose from.

    CacheSocache shmcb
    top

    CacheSocacheMaxSize Directive

    Description:The maximum size (in bytes) of an entry to be placed in the cache
    Syntax:CacheSocacheMaxSize bytes
    Default:CacheSocacheMaxSize 102400
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache_socache
    Compatibility:Available in Apache 2.4.5 and later

    The CacheSocacheMaxSize directive sets the maximum size, in bytes, for the combined headers and body of a document to be considered for storage in the cache. The larger the headers that are stored alongside the body, the smaller the body may be.

    The mod_cache_socache module will only attempt to cache responses that have an explicit content length, or that are small enough to be written in one pass. This is done to allow the mod_cache_disk module to have an opportunity to cache responses larger than those cacheable within mod_cache_socache.

    CacheSocacheMaxSize 102400
    top

    CacheSocacheMaxTime Directive

    Description:The maximum time (in seconds) for a document to be placed in the cache
    Syntax:CacheSocacheMaxTime seconds
    Default:CacheSocacheMaxTime 86400
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache_socache
    Compatibility:Available in Apache 2.4.5 and later

    The CacheSocacheMaxTime directive sets the maximum freshness lifetime, in seconds, for a document to be stored in the cache. This value overrides the freshness lifetime defined for the document by the HTTP protocol.

    CacheSocacheMaxTime 86400
    top

    CacheSocacheMinTime Directive

    Description:The minimum time (in seconds) for a document to be placed in the cache
    Syntax:CacheSocacheMinTime seconds
    Default:CacheSocacheMinTime 600
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache_socache
    Compatibility:Available in Apache 2.4.5 and later

    The CacheSocacheMinTime directive sets the amount of seconds beyond the freshness lifetime of the response that the response should be cached for in the shared object cache. If a response is only stored for its freshness lifetime, there will be no opportunity to revalidate the response to make it fresh again.

    CacheSocacheMinTime 600
    top

    CacheSocacheReadSize Directive

    Description:The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    Syntax:CacheSocacheReadSize bytes
    Default:CacheSocacheReadSize 0
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache_socache
    Compatibility:Available in Apache 2.4.5 and later

    The CacheSocacheReadSize directive sets the minimum amount of data, in bytes, to be read from the backend before the data is sent to the client. The default of zero causes all data read of any size to be passed downstream to the client immediately as it arrives. Setting this to a higher value causes the disk cache to buffer at least this amount before sending the result to the client. This can improve performance when caching content from a slow reverse proxy.

    This directive only takes effect when the data is being saved to the cache, as opposed to data being served from the cache.

    CacheSocacheReadSize 102400
    top

    CacheSocacheReadTime Directive

    Description:The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    Syntax:CacheSocacheReadTime milliseconds
    Default:CacheSocacheReadTime 0
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache_socache
    Compatibility:Available in Apache 2.4.5 and later

    The CacheSocacheReadTime directive sets the minimum amount of elapsed time that should pass before making an attempt to send data downstream to the client. During the time period, data will be buffered before sending the result to the client. This can improve performance when caching content from a reverse proxy.

    The default of zero disables this option.

    This directive only takes effect when the data is being saved to the cache, as opposed to data being served from the cache. It is recommended that this option be used alongside the CacheSocacheReadSize directive to ensure that the server does not buffer excessively should data arrive faster than expected.

    CacheSocacheReadTime 1000

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_heartbeat.html0000644000000000000500000000033613362070302017702 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_heartbeat.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_heartbeat.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/quickreference.html.es0000644000000000000500000055457113523273316020535 0ustar rootsrc Guía Rápida de Referencia de Directivas - Servidor HTTP Apache Versión 2.4
    <-

    Guía Rápida de Referencia de Directivas

    Idiomas disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    La Guía Rápida de Referencia de Directivas muestra el uso, las opciones por defecto, el estado y el contexto de cada directiva de configuración de Apache. Para más información sobre cada directiva, consulte el Diccionario de Directivas.

    La primera columna muestra el nombre y el uso de la directiva. La segunda columna muestra el valor por defecto de la directiva, si existe ese valor por defecto. Si el valor por defecto es demasiado largo para mostrarlo, el primer carácter va seguido de un signo "+".

    La tercera y la cuarta columna listan los contextos en los que la directiva puede funcionar y el estado de la directiva de acuerdo con las notas que detallan más abajo.

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 
    sserver config
    vvirtual host
    ddirectory
    h.htaccess
    psección de proxy
    CCore
    MMPM
    BBase
    EExtensión
    XExperimental
    TExterno
    AcceptFilter protocol accept_filtersC
    Configura mejoras para un Protocolo de Escucha de Sockets
    AcceptPathInfo On|Off|Default Default svdhC
    Los recursos aceptan información sobre su ruta
    AccessFileName filename [filename] ... .htaccess svC
    Nombre del fichero distribuido de configuración
    Action action-type cgi-script [virtual]svdhB
    Activates a CGI script for a particular handler or content-type
    AddAlt string file [file] ...svdhB
    Alternate text to display for a file, instead of an icon selected by filename
    AddAltByEncoding string MIME-encoding [MIME-encoding] ...svdhB
    Alternate text to display for a file instead of an icon selected by MIME-encoding
    AddAltByType string MIME-type [MIME-type] ...svdhB
    Alternate text to display for a file, instead of an icon selected by MIME content-type
    AddCharset charset extension [extension] ...svdhB
    Maps the given filename extensions to the specified content charset
    AddDefaultCharset On|Off|charset Off svdhC
    Default charset parameter to be added when a response content-type is text/plain or text/html
    AddDescription string file [file] ...svdhB
    Description to display for a file
    AddEncoding encoding extension [extension] ...svdhB
    Maps the given filename extensions to the specified encoding type
    AddHandler handler-name extension [extension] ...svdhB
    Maps the filename extensions to the specified handler
    AddIcon icon name [name] ...svdhB
    Icon to display for a file selected by name
    AddIconByEncoding icon MIME-encoding [MIME-encoding] ...svdhB
    Icon to display next to files selected by MIME content-encoding
    AddIconByType icon MIME-type [MIME-type] ...svdhB
    Icon to display next to files selected by MIME content-type
    AddInputFilter filter[;filter...] extension [extension] ...svdhB
    Maps filename extensions to the filters that will process client requests
    AddLanguage language-tag extension [extension] ...svdhB
    Maps the given filename extension to the specified content language
    AddModuleInfo module-name stringsvE
    Adds additional information to the module information displayed by the server-info handler
    AddOutputFilter filter[;filter...] extension [extension] ...svdhB
    Maps filename extensions to the filters that will process responses from the server
    AddOutputFilterByType filter[;filter...] media-type [media-type] ...svdhB
    assigns an output filter to a particular media-type
    AddType media-type extension [extension] ...svdhB
    Maps the given filename extensions onto the specified content type
    Alias [URL-path] file-path|directory-pathsvdB
    Maps URLs to filesystem locations
    AliasMatch regex file-path|directory-pathsvB
    Maps URLs to filesystem locations using regular expressions
    Allow from all|host|env=[!]env-variable [host|env=[!]env-variable] ...dhE
    Controls which hosts can access an area of the server
    AllowCONNECT port[-port] [port[-port]] ... 443 563 svE
    Ports that are allowed to CONNECT through the proxy
    AllowEncodedSlashes On|Off Off svC
    Determines whether encoded path separators in URLs are allowed to be passed through
    AllowMethods reset|HTTP-method [HTTP-method]... reset dX
    Restrict access to the listed HTTP methods
    AllowOverride All|None|directive-type [directive-type] ... None (2.3.9 and lat +dC
    Types of directives that are allowed in .htaccess files
    AllowOverrideList None|directive [directive-type] ... None dC
    Individual directives that are allowed in .htaccess files
    Anonymous user [user] ...dhE
    Specifies userIDs that are allowed access without password verification
    Anonymous_LogEmail On|Off On dhE
    Sets whether the password entered will be logged in the error log
    Anonymous_MustGiveEmail On|Off On dhE
    Specifies whether blank passwords are allowed
    Anonymous_NoUserID On|Off Off dhE
    Sets whether the userID field may be empty
    Anonymous_VerifyEmail On|Off Off dhE
    Sets whether to check the password field for a correctly formatted email address
    AsyncRequestWorkerFactor factorsM
    Limit concurrent connections per process
    AuthBasicAuthoritative On|Off On dhB
    Sets whether authorization and authentication are passed to lower level modules
    AuthBasicFake off|username [password]dhB
    Fake basic authentication using the given expressions for username and password
    AuthBasicProvider provider-name [provider-name] ... file dhB
    Sets the authentication provider(s) for this location
    AuthBasicUseDigestAlgorithm MD5|Off Off dhB
    Check passwords against the authentication providers as if Digest Authentication was in force instead of Basic Authentication.
    AuthDBDUserPWQuery querydE
    SQL query to look up a password for a user
    AuthDBDUserRealmQuery querydE
    SQL query to look up a password hash for a user and realm.
    AuthDBMGroupFile file-pathdhE
    Sets the name of the database file containing the list of user groups for authorization
    AuthDBMType default|SDBM|GDBM|NDBM|DB default dhE
    Sets the type of database file that is used to store passwords
    AuthDBMUserFile file-pathdhE
    Sets the name of a database file containing the list of users and passwords for authentication
    AuthDigestAlgorithm MD5|MD5-sess MD5 dhE
    Selects the algorithm used to calculate the challenge and response hashes in digest authentication
    AuthDigestDomain URI [URI] ...dhE
    URIs that are in the same protection space for digest authentication
    AuthDigestNonceLifetime seconds 300 dhE
    How long the server nonce is valid
    AuthDigestProvider provider-name [provider-name] ... file dhE
    Sets the authentication provider(s) for this location
    AuthDigestQop none|auth|auth-int [auth|auth-int] auth dhE
    Determines the quality-of-protection to use in digest authentication
    AuthDigestShmemSize size 1000 sE
    The amount of shared memory to allocate for keeping track of clients
    AuthFormAuthoritative On|Off On dhB
    Sets whether authorization and authentication are passed to lower level modules
    AuthFormBody fieldnamedB
    The name of a form field carrying the body of the request to attempt on successful login
    AuthFormDisableNoStore On|Off Off dB
    Disable the CacheControl no-store header on the login page
    AuthFormFakeBasicAuth On|Off Off dB
    Fake a Basic Authentication header
    AuthFormLocation fieldnamedB
    The name of a form field carrying a URL to redirect to on successful login
    AuthFormLoginRequiredLocation urldB
    The URL of the page to be redirected to should login be required
    AuthFormLoginSuccessLocation urldB
    The URL of the page to be redirected to should login be successful
    AuthFormLogoutLocation uridB
    The URL to redirect to after a user has logged out
    AuthFormMethod fieldnamedB
    The name of a form field carrying the method of the request to attempt on successful login
    AuthFormMimetype fieldnamedB
    The name of a form field carrying the mimetype of the body of the request to attempt on successful login
    AuthFormPassword fieldnamedB
    The name of a form field carrying the login password
    AuthFormProvider provider-name [provider-name] ... file dhB
    Sets the authentication provider(s) for this location
    AuthFormSitePassphrase secretdB
    Bypass authentication checks for high traffic sites
    AuthFormSize sizedB
    The largest size of the form in bytes that will be parsed for the login details
    AuthFormUsername fieldnamedB
    The name of a form field carrying the login username
    AuthGroupFile file-pathdhB
    Sets the name of a text file containing the list of user groups for authorization
    AuthLDAPAuthorizePrefix prefix AUTHORIZE_ dhE
    Specifies the prefix for environment variables set during authorization
    AuthLDAPBindAuthoritative off|on on dhE
    Determines if other authentication providers are used when a user can be mapped to a DN but the server cannot successfully bind with the user's credentials.
    AuthLDAPBindDN distinguished-namedhE
    Optional DN to use in binding to the LDAP server
    AuthLDAPBindPassword passworddhE
    Password used in conjunction with the bind DN
    AuthLDAPCharsetConfig file-pathsE
    Language to charset conversion configuration file
    AuthLDAPCompareAsUser on|off off dhE
    Use the authenticated user's credentials to perform authorization comparisons
    AuthLDAPCompareDNOnServer on|off on dhE
    Use the LDAP server to compare the DNs
    AuthLDAPDereferenceAliases never|searching|finding|always always dhE
    When will the module de-reference aliases
    AuthLDAPGroupAttribute attribute member uniqueMember +dhE
    LDAP attributes used to identify the user members of groups.
    AuthLDAPGroupAttributeIsDN on|off on dhE
    Use the DN of the client username when checking for group membership
    AuthLDAPInitialBindAsUser off|on off dhE
    Determines if the server does the initial DN lookup using the basic authentication users' own username, instead of anonymously or with hard-coded credentials for the server
    AuthLDAPInitialBindPattern regex substitution (.*) $1 (remote use +dhE
    Specifies the transformation of the basic authentication username to be used when binding to the LDAP server to perform a DN lookup
    AuthLDAPMaxSubGroupDepth Number 10 dhE
    Specifies the maximum sub-group nesting depth that will be evaluated before the user search is discontinued.
    AuthLDAPRemoteUserAttribute uiddhE
    Use the value of the attribute returned during the user query to set the REMOTE_USER environment variable
    AuthLDAPRemoteUserIsDN on|off off dhE
    Use the DN of the client username to set the REMOTE_USER environment variable
    AuthLDAPSearchAsUser on|off off dhE
    Use the authenticated user's credentials to perform authorization searches
    AuthLDAPSubGroupAttribute attribute member uniqueMember +dhE
    Specifies the attribute labels, one value per directive line, used to distinguish the members of the current group that are groups.
    AuthLDAPSubGroupClass LdapObjectClass groupOfNames groupO +dhE
    Specifies which LDAP objectClass values identify directory objects that are groups during sub-group processing.
    AuthLDAPURL url [NONE|SSL|TLS|STARTTLS]dhE
    URL specifying the LDAP search parameters
    AuthMerging Off | And | Or Off dhB
    Controls the manner in which each configuration section's authorization logic is combined with that of preceding configuration sections.
    AuthName auth-domaindhB
    Authorization realm for use in HTTP authentication
    AuthnCacheContext directory|server|custom-stringdB
    Specify a context string for use in the cache key
    AuthnCacheEnablesB
    Enable Authn caching configured anywhere
    AuthnCacheProvideFor authn-provider [...]dhB
    Specify which authn provider(s) to cache for
    AuthnCacheSOCache provider-name[:provider-args]sB
    Select socache backend provider to use
    AuthnCacheTimeout timeout (seconds)dhB
    Set a timeout for cache entries
    <AuthnProviderAlias baseProvider Alias> ... </AuthnProviderAlias>sB
    Enclose a group of directives that represent an extension of a base authentication provider and referenced by the specified alias
    AuthnzFcgiCheckAuthnProvider provider-name|None option ...dE
    Enables a FastCGI application to handle the check_authn authentication hook.
    AuthnzFcgiDefineProvider type provider-name backend-addresssE
    Defines a FastCGI application as a provider for authentication and/or authorization
    AuthType None|Basic|Digest|FormdhB
    Type of user authentication
    AuthUserFile file-pathdhB
    Sets the name of a text file containing the list of users and passwords for authentication
    AuthzDBDLoginToReferer On|Off Off dE
    Determines whether to redirect the Client to the Referring page on successful login or logout if a Referer request header is present
    AuthzDBDQuery querydE
    Specify the SQL Query for the required operation
    AuthzDBDRedirectQuery querydE
    Specify a query to look up a login page for the user
    AuthzDBMType default|SDBM|GDBM|NDBM|DB default dhE
    Sets the type of database file that is used to store list of user groups
    <AuthzProviderAlias baseProvider Alias Require-Parameters> ... </AuthzProviderAlias> sB
    Enclose a group of directives that represent an extension of a base authorization provider and referenced by the specified alias
    AuthzSendForbiddenOnFailure On|Off Off dhB
    Send '403 FORBIDDEN' instead of '401 UNAUTHORIZED' if authentication succeeds but authorization fails
    BalancerGrowth # 5 svE
    Number of additional Balancers that can be added Post-configuration
    BalancerInherit On|Off On svE
    Inherit ProxyPassed Balancers/Workers from the main server
    BalancerMember [balancerurl] url [key=value [key=value ...]]dE
    Add a member to a load balancing group
    BalancerPersist On|Off Off svE
    Attempt to persist changes made by the Balancer Manager across restarts.
    BrotliAlterETag AddSuffix|NoChange|Remove AddSuffix svE
    How the outgoing ETag header should be modified during compression
    BrotliCompressionMaxInputBlock valuesvE
    Maximum input block size
    BrotliCompressionQuality value 5 svE
    Compression quality
    BrotliCompressionWindow value 18 svE
    Brotli sliding compression window size
    BrotliFilterNote [type] notenamesvE
    Places the compression ratio in a note for logging
    BrowserMatch regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables conditional on HTTP User-Agent
    BrowserMatchNoCase regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables conditional on User-Agent without respect to case
    BufferedLogs On|Off Off sB
    Buffer log entries in memory before writing to disk
    BufferSize integer 131072 svdhE
    Maximum size in bytes to buffer by the buffer filter
    CacheDefaultExpire seconds 3600 (one hour) svdhE
    The default duration to cache a document when no expiry date is specified.
    CacheDetailHeader on|off off svdhE
    Add an X-Cache-Detail header to the response.
    CacheDirLength length 2 svE
    The number of characters in subdirectory names
    CacheDirLevels levels 2 svE
    The number of levels of subdirectories in the cache.
    CacheDisable url-string | onsvdhE
    Disable caching of specified URLs
    CacheEnable cache_type [url-string]svdE
    Enable caching of specified URLs using a specified storage manager
    CacheFile file-path [file-path] ...sX
    Cache a list of file handles at startup time
    CacheHeader on|off off svdhE
    Add an X-Cache header to the response.
    CacheIgnoreCacheControl On|Off Off svE
    Ignore request to not serve cached content to client
    CacheIgnoreHeaders header-string [header-string] ... None svE
    Do not store the given HTTP header(s) in the cache.
    CacheIgnoreNoLastMod On|Off Off svdhE
    Ignore the fact that a response has no Last Modified header.
    CacheIgnoreQueryString On|Off Off svE
    Ignore query string when caching
    CacheIgnoreURLSessionIdentifiers identifier [identifier] ... None svE
    Ignore defined session identifiers encoded in the URL when caching
    CacheKeyBaseURL URLsvE
    Override the base URL of reverse proxied cache keys.
    CacheLastModifiedFactor float 0.1 svdhE
    The factor used to compute an expiry date based on the LastModified date.
    CacheLock on|off off svE
    Enable the thundering herd lock.
    CacheLockMaxAge integer 5 svE
    Set the maximum possible age of a cache lock.
    CacheLockPath directory /tmp/mod_cache-lock +svE
    Set the lock path directory.
    CacheMaxExpire seconds 86400 (one day) svdhE
    The maximum time in seconds to cache a document
    CacheMaxFileSize bytes 1000000 svdhE
    The maximum size (in bytes) of a document to be placed in the cache
    CacheMinExpire seconds 0 svdhE
    The minimum time in seconds to cache a document
    CacheMinFileSize bytes 1 svdhE
    The minimum size (in bytes) of a document to be placed in the cache
    CacheNegotiatedDocs On|Off Off svB
    Allows content-negotiated documents to be cached by proxy servers
    CacheQuickHandler on|off on svE
    Run the cache from the quick handler.
    CacheReadSize bytes 0 svdhE
    The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    CacheReadTime milliseconds 0 svdhE
    The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    CacheRoot directorysvE
    The directory root under which cache files are stored
    CacheSocache type[:args]svE
    The shared object cache implementation to use
    CacheSocacheMaxSize bytes 102400 svdhE
    The maximum size (in bytes) of an entry to be placed in the cache
    CacheSocacheMaxTime seconds 86400 svdhE
    The maximum time (in seconds) for a document to be placed in the cache
    CacheSocacheMinTime seconds 600 svdhE
    The minimum time (in seconds) for a document to be placed in the cache
    CacheSocacheReadSize bytes 0 svdhE
    The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    CacheSocacheReadTime milliseconds 0 svdhE
    The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    CacheStaleOnError on|off on svdhE
    Serve stale content in place of 5xx responses.
    CacheStoreExpired On|Off Off svdhE
    Attempt to cache responses that the server reports as expired
    CacheStoreNoStore On|Off Off svdhE
    Attempt to cache requests or responses that have been marked as no-store.
    CacheStorePrivate On|Off Off svdhE
    Attempt to cache responses that the server has marked as private
    CGIDScriptTimeout time[s|ms]svdhB
    The length of time to wait for more output from the CGI program
    CGIMapExtension cgi-path .extensiondhC
    Technique for locating the interpreter for CGI scripts
    CGIPassAuth On|Off Off dhC
    Enables passing HTTP authorization headers to scripts as CGI variables
    CGIVar variable ruledhC
    Controls how some CGI variables are set
    CharsetDefault charsetsvdhE
    Charset to translate into
    CharsetOptions option [option] ... ImplicitAdd svdhE
    Configures charset translation behavior
    CharsetSourceEnc charsetsvdhE
    Source charset of files
    CheckCaseOnly on|off Off svdhE
    Limits the action of the speling module to case corrections
    CheckSpelling on|off Off svdhE
    Enables the spelling module
    ChrootDir /path/to/directorysB
    Directory for apache to run chroot(8) after startup.
    ContentDigest On|Off Off svdhC
    Enables the generation of Content-MD5 HTTP Response headers
    CookieDomain domainsvdhE
    The domain to which the tracking cookie applies
    CookieExpires expiry-periodsvdhE
    Expiry time for the tracking cookie
    CookieName token Apache svdhE
    Name of the tracking cookie
    CookieStyle Netscape|Cookie|Cookie2|RFC2109|RFC2965 Netscape svdhE
    Format of the cookie header field
    CookieTracking on|off off svdhE
    Enables tracking cookie
    CoreDumpDirectory directorysM
    Directory where Apache HTTP Server attempts to switch before dumping core
    CustomLog file|pipe format|nickname [env=[!]environment-variable| expr=expression]svB
    Sets filename and format of log file
    Dav On|Off|provider-name Off dE
    Enable WebDAV HTTP methods
    DavDepthInfinity on|off off svdE
    Allow PROPFIND, Depth: Infinity requests
    DavGenericLockDB file-pathsvdE
    Location of the DAV lock database
    DavLockDB file-pathsvE
    Location of the DAV lock database
    DavMinTimeout seconds 0 svdE
    Minimum amount of time the server holds a lock on a DAV resource
    DBDExptime time-in-seconds 300 svE
    Keepalive time for idle connections
    DBDInitSQL "SQL statement"svE
    Execute an SQL statement after connecting to a database
    DBDKeep number 2 svE
    Maximum sustained number of connections
    DBDMax number 10 svE
    Maximum number of connections
    DBDMin number 1 svE
    Minimum number of connections
    DBDParams param1=value1[,param2=value2]svE
    Parameters for database connection
    DBDPersist On|OffsvE
    Whether to use persistent connections
    DBDPrepareSQL "SQL statement" labelsvE
    Define an SQL prepared statement
    DBDriver namesvE
    Specify an SQL driver
    DefaultIcon url-pathsvdhB
    Icon to display for files when no specific icon is configured
    DefaultLanguage language-tagsvdhB
    Defines a default language-tag to be sent in the Content-Language header field for all resources in the current context that have not been assigned a language-tag by some other means.
    DefaultRuntimeDir directory-path DEFAULT_REL_RUNTIME +sC
    Base directory for the server run-time files
    DefaultType media-type|none none svdhC
    This directive has no effect other than to emit warnings if the value is not none. In prior versions, DefaultType would specify a default media type to assign to response content for which no other media type configuration could be found.
    Define parameter-namesC
    Define the existence of a variable
    DeflateBufferSize value 8096 svE
    Fragment size to be compressed at one time by zlib
    DeflateCompressionLevel valuesvE
    How much compression do we apply to the output
    DeflateFilterNote [type] notenamesvE
    Places the compression ratio in a note for logging
    DeflateInflateLimitRequestBody valuesvdhE
    Maximum size of inflated request bodies
    DeflateInflateRatioBurst value 3 svdhE
    Maximum number of times the inflation ratio for request bodies can be crossed
    DeflateInflateRatioLimit value 200 svdhE
    Maximum inflation ratio for request bodies
    DeflateMemLevel value 9 svE
    How much memory should be used by zlib for compression
    DeflateWindowSize value 15 svE
    Zlib compression window size
    Deny from all|host|env=[!]env-variable [host|env=[!]env-variable] ...dhE
    Controls which hosts are denied access to the server
    <Directory directory-path> ... </Directory>svC
    Enclose a group of directives that apply only to the named file-system directory, sub-directories, and their contents.
    DirectoryCheckHandler On|Off Off svdhB
    Toggle how this module responds when another handler is configured
    DirectoryIndex disabled | local-url [local-url] ... index.html svdhB
    List of resources to look for when the client requests a directory
    DirectoryIndexRedirect on | off | permanent | temp | seeother | 3xx-code off svdhB
    Configures an external redirect for directory indexes.
    <DirectoryMatch regex> ... </DirectoryMatch>svC
    Enclose directives that apply to the contents of file-system directories matching a regular expression.
    DirectorySlash On|Off On svdhB
    Toggle trailing slash redirects on or off
    DocumentRoot directory-path /usr/local/apache/h +svC
    Directory that forms the main document tree visible from the web
    DTracePrivileges On|Off Off sX
    Determines whether the privileges required by dtrace are enabled.
    DumpIOInput On|Off Off sE
    Dump all input data to the error log
    DumpIOOutput On|Off Off sE
    Dump all output data to the error log
    <Else> ... </Else>svdhC
    Contains directives that apply only if the condition of a previous <If> or <ElseIf> section is not satisfied by a request at runtime
    <ElseIf expression> ... </ElseIf>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime while the condition of a previous <If> or <ElseIf> section is not satisfied
    EnableExceptionHook On|Off Off sM
    Enables a hook that runs exception handlers after a crash
    EnableMMAP On|Off On svdhC
    Use memory-mapping to read files during delivery
    EnableSendfile On|Off Off svdhC
    Use the kernel sendfile support to deliver files to the client
    Error messagesvdhC
    Abort configuration parsing with a custom error message
    ErrorDocument error-code documentsvdhC
    What the server will return to the client in case of an error
    ErrorLog file-path|syslog[:facility] logs/error_log (Uni +svC
    Location where the server will log errors
    ErrorLog [connection|request] formatsvC
    Format specification for error log entries
    ExamplesvdhX
    Demonstration directive to illustrate the Apache module API
    ExpiresActive On|Off Off svdhE
    Enables generation of Expires headers
    ExpiresByType MIME-type <code>secondssvdhE
    Value of the Expires header configured by MIME type
    ExpiresDefault <code>secondssvdhE
    Default algorithm for calculating expiration time
    ExtendedStatus On|Off Off[*] sC
    Keep track of extended status information for each request
    ExtFilterDefine filtername parameterssE
    Define an external filter
    ExtFilterOptions option [option] ... NoLogStderr dE
    Configure mod_ext_filter options
    FallbackResource disabled | local-urlsvdhB
    Define a default URL for requests that don't map to a file
    FileETag component ... INode MTime Size svdhC
    File attributes used to create the ETag HTTP response header for static files
    <Files filename> ... </Files>svdhC
    Contains directives that apply to matched filenames
    <FilesMatch regex> ... </FilesMatch>svdhC
    Contains directives that apply to regular-expression matched filenames
    FilterChain [+=-@!]filter-name ...svdhB
    Configure the filter chain
    FilterDeclare filter-name [type]svdhB
    Declare a smart filter
    FilterProtocol filter-name [provider-name] proto-flagssvdhB
    Deal with correct HTTP protocol handling
    FilterProvider filter-name provider-name expressionsvdhB
    Register a content filter
    FilterTrace filter-name levelsvdB
    Get debug/diagnostic information from mod_filter
    ForceLanguagePriority None|Prefer|Fallback [Prefer|Fallback] Prefer svdhB
    Action to take if a single acceptable document is not found
    ForceType media-type|NonedhC
    Forces all matching files to be served with the specified media type in the HTTP Content-Type header field
    ForensicLog filename|pipesvE
    Sets filename of the forensic log
    GlobalLogfile|pipe format|nickname [env=[!]environment-variable| expr=expression]sB
    Sets filename and format of log file
    GprofDir /tmp/gprof/|/tmp/gprof/%svC
    Directory to write gmon.out profiling data to.
    GracefulShutdownTimeout seconds 0 sM
    Specify a timeout after which a gracefully shutdown server will exit.
    Group unix-group #-1 sB
    Group under which the server will answer requests
    H2CopyFiles on|off off svdhE
    Determine file handling in responses
    H2Direct on|off on for h2c, off for +svE
    H2 Direct Protocol Switch
    H2EarlyHints on|off off svE
    Determine sending of 103 status codes
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] svdhE
    Configure HTTP response headers
    HeaderName filenamesvdhB
    Name of the file that will be inserted at the top of the index listing
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending heartbeat requests to this server
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Enables DNS lookups on client IP addresses
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    Enables logging of the RFC 1413 identity of the remote user
    IdentityCheckTimeout seconds 30 svdE
    Determines the timeout duration for ident requests
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime
    <IfDefine [!]parameter-name> ... </IfDefine>svdhC
    Encloses directives that will be processed only if a test is true at startup
    <IfDirective [!]directive-name> ... </IfDirective>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific directive
    <IfFile [!]filename> ... </IfFile>svdhC
    Encloses directives that will be processed only if file exists at startup
    <IfModule [!]module-file|module-identifier> ... </IfModule>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific module
    <IfSection [!]section-name> ... </IfSection>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific section directive
    <IfVersion [[!]operator] version> ... </IfVersion>svdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates that are not explicitly mapped
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling an imagemap
    Include [optional|strict] file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IndexHeadInsert "markup ..."svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ... "." svdhB
    Adds to the list of files to hide when listing a directory
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing a directory
    IndexOptions [+|-]option [[+|-]option] ...svdhB
    Various configuration settings for directory indexing
    IndexOrderDefault Ascending|Descending Name|Date|Size|Description Ascending Name svdhB
    Sets the default ordering of the directory index
    IndexStyleSheet url-pathsvdhB
    Adds a CSS stylesheet to the directory index
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field
    ISAPICacheFile file-path [file-path] ...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI extensions
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI extensions
    KeepAlive On|Off On svC
    Enables HTTP persistent connections
    KeepAliveTimeout num[ms] 5 svC
    Amount of time the server will wait for subsequent requests on a persistent connection
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to the specified maximum size, for potential use by filters such as mod_include.
    LanguagePriority MIME-lang [MIME-lang] ...svdhB
    The precedence of language variants for cases where the client does not express a preference
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare operations
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain valid
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted Certificate Authority or global client certificates
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... </Limit>dhC
    Restrict enclosed access controls to only certain HTTP methods
    <LimitExcept method [method] ... > ... </LimitExcept>dhC
    Restrict access controls to all HTTP methods except the named ones
    LimitInternalRecursion number [number] 10 svC
    Determine maximum number of internal redirects and nested subrequests
    LimitRequestBody bytes 0 svdhC
    Restricts the total size of the HTTP request body sent from the client
    LimitRequestFields number 100 svC
    Limits the number of HTTP request header fields that will be accepted from the client
    LimitRequestFieldSize bytes 8190 svC
    Limits the size of the HTTP request header allowed from the client
    LimitRequestLine bytes 8190 svC
    Limit the size of the HTTP request line that will be accepted from the client
    LimitXMLRequestBody bytes 1000000 svdhC
    Limits the size of an XML-based request body
    Listen [IP-address:]portnumber [protocol]sM
    IP addresses and ports that the server listens to
    ListenBackLog backlog 511 sM
    Maximum length of the queue of pending connections
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of listeners' buckets
    LoadFile filename [filename] ...svE
    Link in the named object file or library
    LoadModule module filenamesvE
    Links in the object file or library, and adds to the list of active modules
    <Location URL-path|URL> ... </Location>svC
    Applies the enclosed directives only to matching URLs
    <LocationMatch regex> ... </LocationMatch>svC
    Applies the enclosed directives only to regular-expression matching URLs
    LogFormat format|nickname [nickname] "%h %l %u %t \"%r\" +svB
    Describes a format for use in a log file
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel [module:]level [module:level] ... warn svdC
    Controls the verbosity of the ErrorLog
    LogMessage message [hook=hook] [expr=expression] dX
    Log user-defined message to error log
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    <Macro name [par1 .. parN]> ... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server will handle during its life
    MaxKeepAliveRequests number 100 svC
    Number of requests allowed on a persistent connection
    MaxMemFree KBytes 2048 sM
    Maximum amount of memory that the main allocator is allowed to hold without calling free()
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete resource
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed simultaneously
    MaxSpareServers number 10 sM
    Maximum number of idle child server processes
    MaxSpareThreads numbersM
    Maximum number of idle threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDBaseServer on|off off sE
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sE
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsE
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url https://acme-v02.ap +sE
    The URL of the ACME Certificate Authority service.
    MDCertificateFile path-to-pem-filesE
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesE
    Specify a static private key for for the static cerrtificate.
    MDCertificateProtocol protocol ACME sE
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sE
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsE
    -
    MDDriveMode always|auto|manual auto sE
    former name of MDRenewMode.
    MDHttpProxy urlsE
    Define a proxy for outgoing connections.
    MDMember hostnamesE
    Additional hostname for the managed domain.
    MDMembers auto|manual auto sE
    Control if the alias domain names are automatically added.
    MDMessageCmd path-to-cmd optional-argssE
    Handle events for Manage Domains
    MDMustStaple on|off off sE
    Control if new certificates carry the OCSP Must Staple flag.
    MDNotifyCmd path [ args ]sE
    Run a program when a Managed Domain is ready.
    MDomain dns-name [ other-dns-name... ] [auto|manual]sE
    Define list of domain names that belong to one group.
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sE
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sE
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sE
    Set type and size of the private keys generated.
    MDRenewMode always|auto|manual auto sE
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sE
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sE
    Redirects http: traffic to https: for Managed Domains.
    MDServerStatus on|off on sE
    Control if Managed Domain information is added to server-status.
    MDStoreDir path md sE
    Path on the local file system to store the Managed Domains data.
    MDWarnWindow duration 10% sE
    Define the time window when you want to be warned about an expiring certificate.
    MemcacheConnTTL num[units] 15s svE
    Keepalive time for idle connections
    MergeSlashes ON|OFF ON svC
    Controls whether the server merges consecutive slashes in URLs.
    MergeTrailers [on|off] off svC
    Determines whether trailers are merged into headers
    MetaDir directory .web svdhE
    Name of the directory to find CERN-style meta information files
    MetaFiles on|off off svdhE
    Activates CERN meta-file processing
    MetaSuffix suffix .meta svdhE
    File name suffix for the file containing CERN-style meta information
    MimeMagicFile file-pathsvE
    Enable MIME-type determination based on file contents using the specified magic file
    MinSpareServers number 5 sM
    Minimum number of idle child server processes
    MinSpareThreads numbersM
    Minimum number of idle threads available to handle request spikes
    MMapFile file-path [file-path] ...sX
    Map a list of files into memory at startup time
    ModemStandard V.21|V.26bis|V.32|V.34|V.92dX
    Modem standard to simulate
    ModMimeUsePathInfo On|Off Off dB
    Tells mod_mime to treat path_info components as part of the filename
    MultiviewsMatch Any|NegotiatedOnly|Filters|Handlers [Handlers|Filters] NegotiatedOnly svdhB
    The types of files that will be included when searching for a matching file with MultiViews
    Mutex mechanism [default|mutex-name] ... [OmitPID] default sC
    Configures mutex mechanism and lock file directory for all or specified mutexes
    NameVirtualHost addr[:port]sC
    Designates an IP address for name-virtual hosting
    NoProxy host [host] ...svE
    Hosts, domains, or networks that will be connected to directly
    NWSSLTrustedCerts filename [filename] ...sB
    List of additional client certificates
    NWSSLUpgradeable [IP-address:]portnumbersB
    Allows a connection to be upgraded to an SSL connection upon request
    Options [+|-]option [[+|-]option] ... All svdhC
    Configures what features are available in a particular directory
    Order ordering Deny,Allow dhE
    Controls the default access state and the order in which Allow and Deny are evaluated.
    OutputSed sed-commanddhX
    Sed command for filtering response content
    PassEnv env-variable [env-variable] ...svdhB
    Passes environment variables from the shell
    PidFile filename logs/httpd.pid sM
    File where the server records the process ID of the daemon
    PrivilegesMode FAST|SECURE|SELECTIVE FAST svdX
    Trade off processing speed and efficiency vs security against malicious privileges-aware code.
    Protocol protocolsvC
    Protocol for a listening socket
    ProtocolEcho On|Off Off svX
    Turn the echo server on or off
    Protocols protocol ... http/1.1 svC
    Protocols available for a server/virtual host
    ProtocolsHonorOrder On|Off On svC
    Determines if order of Protocols determines precedence during negotiation
    <Proxy wildcard-url> ...</Proxy>svE
    Container for directives applied to proxied resources
    Proxy100Continue Off|On On svdE
    Forward 100-continue expectation to the origin server
    ProxyAddHeaders Off|On On svdE
    Add proxy information in X-Forwarded-* headers
    ProxyBadHeader IsError|Ignore|StartBody IsError svE
    Determines how to handle bad header lines in a response
    ProxyBlock *|word|host|domain [word|host|domain] ...svE
    Words, hosts, or domains that are banned from being proxied
    ProxyDomain DomainsvE
    Default domain name for proxied requests
    ProxyErrorOverride On|Off Off svdE
    Override error pages for proxied content
    ProxyExpressDBMFile pathnamesvE
    Pathname to DBM file.
    ProxyExpressDBMType type default svE
    DBM type of file.
    ProxyExpressEnable on|off off svE
    Enable the module functionality.
    ProxyFCGIBackendType FPM|GENERIC FPM svdhE
    Specify the type of backend FastCGI application
    ProxyFCGISetEnvIf conditional-expression [!]environment-variable-name [value-expression]svdhE
    Allow variables sent to FastCGI servers to be fixed up
    ProxyFtpDirCharset character_set ISO-8859-1 svdE
    Define the character set for proxied FTP listings
    ProxyFtpEscapeWildcards on|off on svdE
    Whether wildcards in requested filenames are escaped when sent to the FTP server
    ProxyFtpListOnWildcard on|off on svdE
    Whether wildcards in requested filenames trigger a file listing
    ProxyHCExpr name {ap_expr expression}svE
    Creates a named condition expression to use to determine health of the backend based on its response
    ProxyHCTemplate name parameter=setting [...]svE
    Creates a named template for setting various health check parameters
    ProxyHCTPsize size 16 sE
    Sets the total server-wide size of the threadpool used for the health check workers
    ProxyHTMLBufSize bytes 8192 svdB
    Sets the buffer size increment for buffering inline scripts and stylesheets.
    ProxyHTMLCharsetOut Charset | *svdB
    Specify a charset for mod_proxy_html output.
    ProxyHTMLDocType HTML|XHTML [Legacy]
    OR
    ProxyHTMLDocType fpi [SGML|XML]
    svdB
    Sets an HTML or XHTML document type declaration.
    ProxyHTMLEnable On|Off Off svdB
    Turns the proxy_html filter on or off.
    ProxyHTMLEvents attribute [attribute ...]svdB
    Specify attributes to treat as scripting events.
    ProxyHTMLExtended On|Off Off svdB
    Determines whether to fix links in inline scripts, stylesheets, and scripting events.
    ProxyHTMLFixups [lowercase] [dospath] [reset]svdB
    Fixes for simple HTML errors.
    ProxyHTMLInterp On|Off Off svdB
    Enables per-request interpolation of ProxyHTMLURLMap rules.
    ProxyHTMLLinks element attribute [attribute2 ...]svdB
    Specify HTML elements that have URL attributes to be rewritten.
    ProxyHTMLMeta On|Off Off svdB
    Turns on or off extra pre-parsing of metadata in HTML <head> sections.
    ProxyHTMLStripComments On|Off Off svdB
    Determines whether to strip HTML comments.
    ProxyHTMLURLMap from-pattern to-pattern [flags] [cond]svdB
    Defines a rule to rewrite HTML links
    ProxyIOBufferSize bytes 8192 svE
    Determine size of internal data throughput buffer
    <ProxyMatch regex> ...</ProxyMatch>svE
    Container for directives applied to regular-expression-matched proxied resources
    ProxyMaxForwards number -1 svE
    Maximium number of proxies that a request can be forwarded through
    ProxyPass [path] !|url [key=value [key=value ...]] [nocanon] [interpolate] [noquery]svdE
    Maps remote servers into the local server URL-space
    ProxyPassInherit On|Off On svE
    Inherit ProxyPass directives defined from the main server
    ProxyPassInterpolateEnv On|Off Off svdE
    Enable Environment Variable interpolation in Reverse Proxy configurations
    ProxyPassMatch [regex] !|url [key=value [key=value ...]]svdE
    Maps remote servers into the local server URL-space using regular expressions
    ProxyPassReverse [path] url [interpolate]svdE
    Adjusts the URL in HTTP response headers sent from a reverse proxied server
    ProxyPassReverseCookieDomain internal-domain public-domain [interpolate]svdE
    Adjusts the Domain string in Set-Cookie headers from a reverse- proxied server
    ProxyPassReverseCookiePath internal-path public-path [interpolate]svdE
    Adjusts the Path string in Set-Cookie headers from a reverse- proxied server
    ProxyPreserveHost On|Off Off svdE
    Use incoming Host HTTP request header for proxy request
    ProxyReceiveBufferSize bytes 0 svE
    Network buffer size for proxied HTTP and FTP connections
    ProxyRemote match remote-serversvE
    Remote proxy used to handle certain requests
    ProxyRemoteMatch regex remote-serversvE
    Remote proxy used to handle requests matched by regular expressions
    ProxyRequests On|Off Off svE
    Enables forward (standard) proxy requests
    ProxySCGIInternalRedirect On|Off|Headername On svdE
    Enable or disable internal redirect responses from the backend
    ProxySCGISendfile On|Off|Headername Off svdE
    Enable evaluation of X-Sendfile pseudo response header
    ProxySet url key=value [key=value ...]svdE
    Set various Proxy balancer or member parameters
    ProxySourceAddress addresssvE
    Set local IP address for outgoing proxy connections
    ProxyStatus Off|On|Full Off svE
    Show Proxy LoadBalancer status in mod_status
    ProxyTimeout secondssvE
    Network timeout for proxied requests
    ProxyVia On|Off|Full|Block Off svE
    Information provided in the Via HTTP response header for proxied requests
    QualifyRedirectURL ON|OFF OFF svdC
    Controls whether the REDIRECT_URL environment variable is fully qualified
    ReadmeName filenamesvdhB
    Name of the file that will be inserted at the end of the index listing
    ReceiveBufferSize bytes 0 sM
    TCP receive buffer size
    Redirect [status] [URL-path] URLsvdhB
    Sends an external redirect asking the client to fetch a different URL
    RedirectMatch [status] regex URLsvdhB
    Sends an external redirect based on a regular expression match of the current URL
    RedirectPermanent URL-path URLsvdhB
    Sends an external permanent redirect asking the client to fetch a different URL
    RedirectTemp URL-path URLsvdhB
    Sends an external temporary redirect asking the client to fetch a different URL
    RedisConnPoolTTL num[units] 15s svE
    TTL used for the connection pool with the Redis server(s)
    RedisTimeout num[units] 5s svE
    R/W timeout used for the connection with the Redis server(s)
    ReflectorHeader inputheader [outputheader]svdhB
    Reflect an input header to the output headers
    RegexDefaultOptions [none] [+|-]option [[+|-]option] ... DOTALL DOLLAR_ENDON +sC
    Allow to configure global/default options for regexes
    RegisterHttpMethod method [method [...]]sC
    Register non-standard HTTP methods
    RemoteIPHeader header-fieldsvB
    Declare the header field which should be parsed for useragent IP addresses
    RemoteIPInternalProxy proxy-ip|proxy-ip/subnet|hostname ...svB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPInternalProxyList filenamesvB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPProxiesHeader HeaderFieldNamesvB
    Declare the header field which will record all intermediate IP addresses
    RemoteIPProxyProtocol On|OffsvB
    Enable or disable PROXY protocol handling
    RemoteIPProxyProtocolExceptions host|range [host|range] [host|range]svB
    Disable processing of PROXY header for certain hosts or networks
    RemoteIPTrustedProxy proxy-ip|proxy-ip/subnet|hostname ...svB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPTrustedProxyList filenamesvB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoveCharset extension [extension] ...vdhB
    Removes any character set associations for a set of file extensions
    RemoveEncoding extension [extension] ...vdhB
    Removes any content encoding associations for a set of file extensions
    RemoveHandler extension [extension] ...vdhB
    Removes any handler associations for a set of file extensions
    RemoveInputFilter extension [extension] ...vdhB
    Removes any input filter associations for a set of file extensions
    RemoveLanguage extension [extension] ...vdhB
    Removes any language associations for a set of file extensions
    RemoveOutputFilter extension [extension] ...vdhB
    Removes any output filter associations for a set of file extensions
    RemoveType extension [extension] ...vdhB
    Removes any content type associations for a set of file extensions
    RequestHeader add|append|edit|edit*|merge|set|setifempty|unset header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] svdhE
    Configure HTTP request headers
    RequestReadTimeout [handshake=timeout[-maxtimeout][,MinRate=rate] [header=timeout[-maxtimeout][,MinRate=rate] [body=timeout[-maxtimeout][,MinRate=rate] handshake=0 header= +svE
    Set timeout values for completing the TLS handshake, receiving the request headers and/or body from client.
    Require [not] entity-name [entity-name] ...dhB
    Tests whether an authenticated user is authorized by an authorization provider.
    <RequireAll> ... </RequireAll>dhB
    Enclose a group of authorization directives of which none must fail and at least one must succeed for the enclosing directive to succeed.
    <RequireAny> ... </RequireAny>dhB
    Enclose a group of authorization directives of which one must succeed for the enclosing directive to succeed.
    <RequireNone> ... </RequireNone>dhB
    Enclose a group of authorization directives of which none must succeed for the enclosing directive to not fail.
    RewriteBase URL-pathdhE
    Sets the base URL for per-directory rewrites
    RewriteCond TestString CondPattern [flags]svdhE
    Defines a condition under which rewriting will take place
    RewriteEngine on|off off svdhE
    Enables or disables runtime rewriting engine
    RewriteMap MapName MapType:MapSource [MapTypeOptions] svE
    Defines a mapping function for key-lookup
    RewriteOptions OptionssvdhE
    Sets some special options for the rewrite engine
    RewriteRule Pattern Substitution [flags]svdhE
    Defines rules for the rewriting engine
    RLimitCPU seconds|max [seconds|max]svdhC
    Limits the CPU consumption of processes launched by Apache httpd children
    RLimitMEM bytes|max [bytes|max]svdhC
    Limits the memory consumption of processes launched by Apache httpd children
    RLimitNPROC number|max [number|max]svdhC
    Limits the number of processes that can be launched by processes launched by Apache httpd children
    Satisfy Any|All All dhE
    Interaction between host-level access control and user authentication
    ScoreBoardFile file-path logs/apache_runtime +sM
    Location of the file used to store coordination data for the child processes
    Script method cgi-scriptsvdB
    Activates a CGI script for a particular request method.
    ScriptAlias [URL-path] file-path|directory-pathsvdB
    Maps a URL to a filesystem location and designates the target as a CGI script
    ScriptAliasMatch regex file-path|directory-pathsvB
    Maps a URL to a filesystem location using a regular expression and designates the target as a CGI script
    ScriptInterpreterSource Registry|Registry-Strict|Script Script svdhC
    Technique for locating the interpreter for CGI scripts
    ScriptLog file-pathsvB
    Location of the CGI script error logfile
    ScriptLogBuffer bytes 1024 svB
    Maximum amount of PUT or POST requests that will be recorded in the scriptlog
    ScriptLogLength bytes 10385760 svB
    Size limit of the CGI script logfile
    ScriptSock file-path cgisock sB
    The filename prefix of the socket to use for communication with the cgi daemon
    SecureListen [IP-address:]portnumber Certificate-Name [MUTUAL]sB
    Enables SSL encryption for the specified port
    SeeRequestTail On|Off Off sC
    Determine if mod_status displays the first 63 characters of a request or the last 63, assuming the request itself is greater than 63 chars.
    SendBufferSize bytes 0 sM
    TCP buffer size
    ServerAdmin email-address|URLsvC
    Email address that the server includes in error messages sent to the client
    ServerAlias hostname [hostname] ...vC
    Alternate names for a host used when matching requests to name-virtual hosts
    ServerLimit numbersM
    Upper limit on configurable number of processes
    ServerName [scheme://]fully-qualified-domain-name[:port]svC
    Hostname and port that the server uses to identify itself
    ServerPath URL-pathvC
    Legacy URL pathname for a name-based virtual host that is accessed by an incompatible browser
    ServerRoot directory-path /usr/local/apache sC
    Base directory for the server installation
    ServerSignature On|Off|EMail Off svdhC
    Configures the footer on server-generated documents
    ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full Full sC
    Configures the Server HTTP response header
    Session On|Off Off svdhE
    Enables a session for the current directory or location
    SessionCookieName name attributessvdhE
    Name and attributes for the RFC2109 cookie storing the session
    SessionCookieName2 name attributessvdhE
    Name and attributes for the RFC2965 cookie storing the session
    SessionCookieRemove On|Off Off svdhE
    Control for whether session cookies should be removed from incoming HTTP headers
    SessionCryptoCipher name aes256 svdhX
    The crypto cipher to be used to encrypt the session
    SessionCryptoDriver name [param[=value]]sX
    The crypto driver to be used to encrypt the session
    SessionCryptoPassphrase secret [ secret ... ] svdhX
    The key used to encrypt the session
    SessionCryptoPassphraseFile filenamesvdX
    File containing keys used to encrypt the session
    SessionDBDCookieName name attributessvdhE
    Name and attributes for the RFC2109 cookie storing the session ID
    SessionDBDCookieName2 name attributessvdhE
    Name and attributes for the RFC2965 cookie storing the session ID
    SessionDBDCookieRemove On|Off On svdhE
    Control for whether session ID cookies should be removed from incoming HTTP headers
    SessionDBDDeleteLabel label deletesession svdhE
    The SQL query to use to remove sessions from the database
    SessionDBDInsertLabel label insertsession svdhE
    The SQL query to use to insert sessions into the database
    SessionDBDPerUser On|Off Off svdhE
    Enable a per user session
    SessionDBDSelectLabel label selectsession svdhE
    The SQL query to use to select sessions from the database
    SessionDBDUpdateLabel label updatesession svdhE
    The SQL query to use to update existing sessions in the database
    SessionEnv On|Off Off svdhE
    Control whether the contents of the session are written to the HTTP_SESSION environment variable
    SessionExclude pathsvdhE
    Define URL prefixes for which a session is ignored
    SessionExpiryUpdateInterval interval 0 (always update) svdhE
    Define the number of seconds a session's expiry may change without the session being updated
    SessionHeader headersvdhE
    Import session updates from a given HTTP response header
    SessionInclude pathsvdhE
    Define URL prefixes for which a session is valid
    SessionMaxAge maxage 0 svdhE
    Define a maximum age in seconds for a session
    SetEnv env-variable [value]svdhB
    Sets environment variables
    SetEnvIf attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables based on attributes of the request
    SetEnvIfExpr expr [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables based on an ap_expr expression
    SetEnvIfNoCase attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables based on attributes of the request without respect to case
    SetHandler handler-name|NonesvdhC
    Forces all matching files to be processed by a handler
    SetInputFilter filter[;filter...]svdhC
    Sets the filters that will process client requests and POST input
    SetOutputFilter filter[;filter...]svdhC
    Sets the filters that will process responses from the server
    SSIEndTag tag "-->" svB
    String that ends an include element
    SSIErrorMsg message "[an error occurred +svdhB
    Error message displayed when there is an SSI error
    SSIETag on|off off dhB
    Controls whether ETags are generated by the server.
    SSILastModified on|off off dhB
    Controls whether Last-Modified headers are generated by the server.
    SSILegacyExprParser on|off off dhB
    Enable compatibility mode for conditional expressions.
    SSIStartTag tag "<!--#" svB
    String that starts an include element
    SSITimeFormat formatstring "%A, %d-%b-%Y %H:%M +svdhB
    Configures the format in which date strings are displayed
    SSIUndefinedEcho string "(none)" svdhB
    String displayed when an unset variable is echoed
    SSLCACertificateFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for Client Auth
    SSLCACertificatePath directory-pathsvE
    Directory of PEM-encoded CA Certificates for Client Auth
    SSLCADNRequestFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for defining acceptable CA names
    SSLCADNRequestPath directory-pathsvE
    Directory of PEM-encoded CA Certificates for defining acceptable CA names
    SSLCARevocationCheck chain|leaf|none [flags ...] none svE
    Enable CRL-based revocation checking
    SSLCARevocationFile file-pathsvE
    File of concatenated PEM-encoded CA CRLs for Client Auth
    SSLCARevocationPath directory-pathsvE
    Directory of PEM-encoded CA CRLs for Client Auth
    SSLCertificateChainFile file-pathsvE
    File of PEM-encoded Server CA Certificates
    SSLCertificateFile file-pathsvE
    Server PEM-encoded X.509 certificate data file
    SSLCertificateKeyFile file-pathsvE
    Server PEM-encoded private key file
    SSLCipherSuite [protocol] cipher-spec DEFAULT (depends on +svdhE
    Cipher Suite available for negotiation in SSL handshake
    SSLCompression on|off off svE
    Enable compression on the SSL level
    SSLCryptoDevice engine builtin sE
    Enable use of a cryptographic hardware accelerator
    SSLEngine on|off|optional off svE
    SSL Engine Operation Switch
    SSLFIPS on|off off sE
    SSL FIPS mode Switch
    SSLHonorCipherOrder on|off off svE
    Option to prefer the server's cipher preference order
    SSLInsecureRenegotiation on|off off svE
    Option to enable support for insecure renegotiation
    SSLOCSPDefaultResponder urisvE
    Set the default responder URI for OCSP validation
    SSLOCSPEnable on|leaf|off off svE
    Enable OCSP validation of the client certificate chain
    SSLOCSPNoverify On/Off Off svE
    skip the OCSP responder certificates verification
    SSLOCSPOverrideResponder on|off off svE
    Force use of the default responder URI for OCSP validation
    SSLOCSPProxyURL urlsvE
    Proxy URL to use for OCSP requests
    SSLOCSPResponderCertificateFile filesvE
    Set of trusted PEM encoded OCSP responder certificates
    SSLOCSPResponderTimeout seconds 10 svE
    Timeout for OCSP queries
    SSLOCSPResponseMaxAge seconds -1 svE
    Maximum allowable age for OCSP responses
    SSLOCSPResponseTimeSkew seconds 300 svE
    Maximum allowable time skew for OCSP response validation
    SSLOCSPUseRequestNonce on|off on svE
    Use a nonce within OCSP queries
    SSLOpenSSLConfCmd command-name command-valuesvE
    Configure OpenSSL parameters through its SSL_CONF API
    SSLOptions [+|-]option ...svdhE
    Configure various SSL engine run-time options
    SSLPassPhraseDialog type builtin sE
    Type of pass phrase dialog for encrypted private keys
    SSLProtocol [+|-]protocol ... all -SSLv3 (up to 2 +svE
    Configure usable SSL/TLS protocol versions
    SSLProxyCACertificateFile file-pathsvpE
    File of concatenated PEM-encoded CA Certificates for Remote Server Auth
    SSLProxyCACertificatePath directory-pathsvpE
    Directory of PEM-encoded CA Certificates for Remote Server Auth
    SSLProxyCARevocationCheck chain|leaf|none none svpE
    Enable CRL-based revocation checking for Remote Server Auth
    SSLProxyCARevocationFile file-pathsvpE
    File of concatenated PEM-encoded CA CRLs for Remote Server Auth
    SSLProxyCARevocationPath directory-pathsvpE
    Directory of PEM-encoded CA CRLs for Remote Server Auth
    SSLProxyCheckPeerCN on|off on svpE
    Whether to check the remote server certificate's CN field
    SSLProxyCheckPeerExpire on|off on svpE
    Whether to check if remote server certificate is expired
    SSLProxyCheckPeerName on|off on svpE
    Configure host name checking for remote server certificates
    SSLProxyCipherSuite [protocol] cipher-spec ALL:!ADH:RC4+RSA:+H +svpE
    Cipher Suite available for negotiation in SSL proxy handshake
    SSLProxyEngine on|off off svpE
    SSL Proxy Engine Operation Switch
    SSLProxyMachineCertificateChainFile filenamesvpE
    File of concatenated PEM-encoded CA certificates to be used by the proxy for choosing a certificate
    SSLProxyMachineCertificateFile filenamesvpE
    File of concatenated PEM-encoded client certificates and keys to be used by the proxy
    SSLProxyMachineCertificatePath directorysvpE
    Directory of PEM-encoded client certificates and keys to be used by the proxy
    SSLProxyProtocol [+|-]protocol ... all -SSLv3 (up to 2 +svpE
    Configure usable SSL protocol flavors for proxy usage
    SSLProxyVerify level none svpE
    Type of remote server Certificate verification
    SSLProxyVerifyDepth number 1 svpE
    Maximum depth of CA Certificates in Remote Server Certificate verification
    SSLRandomSeed context source [bytes]sE
    Pseudo Random Number Generator (PRNG) seeding source
    SSLRenegBufferSize bytes 131072 dhE
    Set the size for the SSL renegotiation buffer
    SSLRequire expressiondhE
    Allow access only when an arbitrarily complex boolean expression is true
    SSLRequireSSLdhE
    Deny access when SSL is not used for the HTTP request
    SSLSessionCache type none sE
    Type of the global/inter-process SSL Session Cache
    SSLSessionCacheTimeout seconds 300 svE
    Number of seconds before an SSL session expires in the Session Cache
    SSLSessionTicketKeyFile file-pathsvE
    Persistent encryption/decryption key for TLS session tickets
    SSLSessionTickets on|off on svE
    Enable or disable use of TLS session tickets
    SSLSRPUnknownUserSeed secret-stringsvE
    SRP unknown user seed
    SSLSRPVerifierFile file-pathsvE
    Path to SRP verifier file
    SSLStaplingCache typesE
    Configures the OCSP stapling cache
    SSLStaplingErrorCacheTimeout seconds 600 svE
    Number of seconds before expiring invalid responses in the OCSP stapling cache
    SSLStaplingFakeTryLater on|off on svE
    Synthesize "tryLater" responses for failed OCSP stapling queries
    SSLStaplingForceURL urisvE
    Override the OCSP responder URI specified in the certificate's AIA extension
    SSLStaplingResponderTimeout seconds 10 svE
    Timeout for OCSP stapling queries
    SSLStaplingResponseMaxAge seconds -1 svE
    Maximum allowable age for OCSP stapling responses
    SSLStaplingResponseTimeSkew seconds 300 svE
    Maximum allowable time skew for OCSP stapling response validation
    SSLStaplingReturnResponderErrors on|off on svE
    Pass stapling related OCSP errors on to client
    SSLStaplingStandardCacheTimeout seconds 3600 svE
    Number of seconds before expiring responses in the OCSP stapling cache
    SSLStrictSNIVHostCheck on|off off svE
    Whether to allow non-SNI clients to access a name-based virtual host.
    SSLUserName varnamesdhE
    Variable name to determine user name
    SSLUseStapling on|off off svE
    Enable stapling of OCSP responses in the TLS handshake
    SSLVerifyClient level none svdhE
    Type of Client Certificate verification
    SSLVerifyDepth number 1 svdhE
    Maximum depth of CA Certificates in Client Certificate verification
    StartServers numbersM
    Number of child server processes created at startup
    StartThreads numbersM
    Number of threads created on startup
    Substitute s/pattern/substitution/[infq]dhE
    Pattern to filter the response content
    SubstituteInheritBefore on|off off dhE
    Change the merge order of inherited patterns
    SubstituteMaxLineLength bytes(b|B|k|K|m|M|g|G) 1m dhE
    Set the maximum line size
    Suexec On|OffsB
    Enable or disable the suEXEC feature
    SuexecUserGroup User GroupsvE
    User and group for CGI programs to run as
    ThreadLimit numbersM
    Sets the upper limit on the configurable number of threads per child process
    ThreadsPerChild numbersM
    Number of threads created by each child process
    ThreadStackSize sizesM
    The size in bytes of the stack used by threads handling client connections
    TimeOut seconds 60 svC
    Amount of time the server will wait for certain events before failing a request
    TraceEnable [on|off|extended] on sC
    Determines the behaviour on TRACE requests
    TransferLog file|pipesvB
    Specify location of a log file
    TypesConfig file-path conf/mime.types sB
    The location of the mime.types file
    UnDefine parameter-namesC
    Undefine the existence of a variable
    UndefMacro namesvdB
    Undefine a macro
    UnsetEnv env-variable [env-variable] ...svdhB
    Removes variables from the environment
    Use name [value1 ... valueN] svdB
    Use a macro
    UseCanonicalName On|Off|DNS Off svdC
    Configures how the server determines its own name and port
    UseCanonicalPhysicalPort On|Off Off svdC
    Configures how the server determines its own name and port
    User unix-userid #-1 sB
    The userid under which the server will answer requests
    UserDir directory-filename [directory-filename] ... svB
    Location of the user-specific directories
    VHostCGIMode On|Off|Secure On vX
    Determines whether the virtualhost can run subprocesses, and the privileges available to subprocesses.
    VHostCGIPrivs [+-]?privilege-name [[+-]?privilege-name] ...vX
    Assign arbitrary privileges to subprocesses created by a virtual host.
    VHostGroup unix-groupidvX
    Sets the Group ID under which a virtual host runs.
    VHostPrivs [+-]?privilege-name [[+-]?privilege-name] ...vX
    Assign arbitrary privileges to a virtual host.
    VHostSecure On|Off On vX
    Determines whether the server runs with enhanced security for the virtualhost.
    VHostUser unix-useridvX
    Sets the User ID under which a virtual host runs.
    VirtualDocumentRoot interpolated-directory|none none svE
    Dynamically configure the location of the document root for a given virtual host
    VirtualDocumentRootIP interpolated-directory|none none svE
    Dynamically configure the location of the document root for a given virtual host
    <VirtualHost addr[:port] [addr[:port]] ...> ... </VirtualHost>sC
    Contains directives that apply only to a specific hostname or IP address
    VirtualScriptAlias interpolated-directory|none none svE
    Dynamically configure the location of the CGI directory for a given virtual host
    VirtualScriptAliasIP interpolated-directory|none none svE
    Dynamically configure the location of the CGI directory for a given virtual host
    WatchdogInterval time-interval[s] 1 sB
    Watchdog interval in seconds
    XBitHack on|off|full off svdhB
    Parse SSI directives in files with the execute bit set
    xml2EncAlias charset alias [alias ...]sB
    Recognise Aliases for encoding values
    xml2EncDefault namesvdhB
    Sets a default encoding to assume when absolutely no information can be automatically detected
    xml2StartParse element [element ...]svdhB
    Advise the parser to skip leading junk.

    Idiomas disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Comentarios

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_access_compat.html.en0000644000000000000500000007065313412755316021174 0ustar rootsrc mod_access_compat - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_access_compat

    Available Languages:  en  |  fr  |  ja 

    Description:Group authorizations based on host (name or IP address)
    Status:Extension
    Module Identifier:access_compat_module
    Source File:mod_access_compat.c
    Compatibility:Available in Apache HTTP Server 2.3 as a compatibility module with previous versions of Apache httpd 2.x. The directives provided by this module have been deprecated by the new authz refactoring. Please see mod_authz_host

    Summary

    The directives provided by mod_access_compat are used in <Directory>, <Files>, and <Location> sections as well as .htaccess files to control access to particular parts of the server. Access can be controlled based on the client hostname, IP address, or other characteristics of the client request, as captured in environment variables. The Allow and Deny directives are used to specify which clients are or are not allowed access to the server, while the Order directive sets the default access state, and configures how the Allow and Deny directives interact with each other.

    Both host-based access restrictions and password-based authentication may be implemented simultaneously. In that case, the Satisfy directive is used to determine how the two sets of restrictions interact.

    Note

    The directives provided by mod_access_compat have been deprecated by mod_authz_host. Mixing old directives like Order, Allow or Deny with new ones like Require is technically possible but discouraged. This module was created to support configurations containing only old directives to facilitate the 2.4 upgrade. Please check the upgrading guide for more information.

    In general, access restriction directives apply to all access methods (GET, PUT, POST, etc). This is the desired behavior in most cases. However, it is possible to restrict some methods, while leaving other methods unrestricted, by enclosing the directives in a <Limit> section.

    Merging of configuration sections

    When any directive provided by this module is used in a new configuration section, no directives provided by this module are inherited from previous configuration sections.

    top

    Allow Directive

    Description:Controls which hosts can access an area of the server
    Syntax: Allow from all|host|env=[!]env-variable [host|env=[!]env-variable] ...
    Context:directory, .htaccess
    Override:Limit
    Status:Extension
    Module:mod_access_compat

    The Allow directive affects which hosts can access an area of the server. Access can be controlled by hostname, IP address, IP address range, or by other characteristics of the client request captured in environment variables.

    The first argument to this directive is always from. The subsequent arguments can take three different forms. If Allow from all is specified, then all hosts are allowed access, subject to the configuration of the Deny and Order directives as discussed below. To allow only particular hosts or groups of hosts to access the server, the host can be specified in any of the following formats:

    A (partial) domain-name
    Allow from example.org
    Allow from .net example.edu

    Hosts whose names match, or end in, this string are allowed access. Only complete components are matched, so the above example will match foo.example.org but it will not match fooexample.org. This configuration will cause Apache httpd to perform a double DNS lookup on the client IP address, regardless of the setting of the HostnameLookups directive. It will do a reverse DNS lookup on the IP address to find the associated hostname, and then do a forward lookup on the hostname to assure that it matches the original IP address. Only if the forward and reverse DNS are consistent and the hostname matches will access be allowed.

    A full IP address
    Allow from 10.1.2.3
    Allow from 192.168.1.104 192.168.1.205

    An IP address of a host allowed access

    A partial IP address
    Allow from 10.1
    Allow from 10 172.20 192.168.2

    The first 1 to 3 bytes of an IP address, for subnet restriction.

    A network/netmask pair
    Allow from 10.1.0.0/255.255.0.0

    A network a.b.c.d, and a netmask w.x.y.z. For more fine-grained subnet restriction.

    A network/nnn CIDR specification
    Allow from 10.1.0.0/16

    Similar to the previous case, except the netmask consists of nnn high-order 1 bits.

    Note that the last three examples above match exactly the same set of hosts.

    IPv6 addresses and IPv6 subnets can be specified as shown below:

    Allow from 2001:db8::a00:20ff:fea7:ccea
    Allow from 2001:db8::a00:20ff:fea7:ccea/10

    The third format of the arguments to the Allow directive allows access to the server to be controlled based on the existence of an environment variable. When Allow from env=env-variable is specified, then the request is allowed access if the environment variable env-variable exists. When Allow from env=!env-variable is specified, then the request is allowed access if the environment variable env-variable doesn't exist. The server provides the ability to set environment variables in a flexible way based on characteristics of the client request using the directives provided by mod_setenvif. Therefore, this directive can be used to allow access based on such factors as the clients User-Agent (browser type), Referer, or other HTTP request header fields.

    SetEnvIf User-Agent ^KnockKnock/2\.0 let_me_in
    <Directory "/docroot">
        Order Deny,Allow
        Deny from all
        Allow from env=let_me_in
    </Directory>

    In this case, browsers with a user-agent string beginning with KnockKnock/2.0 will be allowed access, and all others will be denied.

    Merging of configuration sections

    When any directive provided by this module is used in a new configuration section, no directives provided by this module are inherited from previous configuration sections.

    top

    Deny Directive

    Description:Controls which hosts are denied access to the server
    Syntax: Deny from all|host|env=[!]env-variable [host|env=[!]env-variable] ...
    Context:directory, .htaccess
    Override:Limit
    Status:Extension
    Module:mod_access_compat

    This directive allows access to the server to be restricted based on hostname, IP address, or environment variables. The arguments for the Deny directive are identical to the arguments for the Allow directive.

    top

    Order Directive

    Description:Controls the default access state and the order in which Allow and Deny are evaluated.
    Syntax: Order ordering
    Default:Order Deny,Allow
    Context:directory, .htaccess
    Override:Limit
    Status:Extension
    Module:mod_access_compat

    The Order directive, along with the Allow and Deny directives, controls a three-pass access control system. The first pass processes either all Allow or all Deny directives, as specified by the Order directive. The second pass parses the rest of the directives (Deny or Allow). The third pass applies to all requests which do not match either of the first two.

    Note that all Allow and Deny directives are processed, unlike a typical firewall, where only the first match is used. The last match is effective (also unlike a typical firewall). Additionally, the order in which lines appear in the configuration files is not significant -- all Allow lines are processed as one group, all Deny lines are considered as another, and the default state is considered by itself.

    Ordering is one of:

    Allow,Deny
    First, all Allow directives are evaluated; at least one must match, or the request is rejected. Next, all Deny directives are evaluated. If any matches, the request is rejected. Last, any requests which do not match an Allow or a Deny directive are denied by default.
    Deny,Allow
    First, all Deny directives are evaluated; if any match, the request is denied unless it also matches an Allow directive. Any requests which do not match any Allow or Deny directives are permitted.
    Mutual-failure
    This order has the same effect as Order Allow,Deny and is deprecated in its favor.

    Keywords may only be separated by a comma; no whitespace is allowed between them.

    Match Allow,Deny result Deny,Allow result
    Match Allow only Request allowed Request allowed
    Match Deny only Request denied Request denied
    No match Default to second directive: Denied Default to second directive: Allowed
    Match both Allow & Deny Final match controls: Denied Final match controls: Allowed

    In the following example, all hosts in the example.org domain are allowed access; all other hosts are denied access.

    Order Deny,Allow
    Deny from all
    Allow from example.org

    In the next example, all hosts in the example.org domain are allowed access, except for the hosts which are in the foo.example.org subdomain, who are denied access. All hosts not in the example.org domain are denied access because the default state is to Deny access to the server.

    Order Allow,Deny
    Allow from example.org
    Deny from foo.example.org

    On the other hand, if the Order in the last example is changed to Deny,Allow, all hosts will be allowed access. This happens because, regardless of the actual ordering of the directives in the configuration file, the Allow from example.org will be evaluated last and will override the Deny from foo.example.org. All hosts not in the example.org domain will also be allowed access because the default state is Allow.

    The presence of an Order directive can affect access to a part of the server even in the absence of accompanying Allow and Deny directives because of its effect on the default access state. For example,

    <Directory "/www">
        Order Allow,Deny
    </Directory>

    will Deny all access to the /www directory because the default access state is set to Deny.

    The Order directive controls the order of access directive processing only within each phase of the server's configuration processing. This implies, for example, that an Allow or Deny directive occurring in a <Location> section will always be evaluated after an Allow or Deny directive occurring in a <Directory> section or .htaccess file, regardless of the setting of the Order directive. For details on the merging of configuration sections, see the documentation on How Directory, Location and Files sections work.

    Merging of configuration sections

    When any directive provided by this module is used in a new configuration section, no directives provided by this module are inherited from previous configuration sections.

    top

    Satisfy Directive

    Description:Interaction between host-level access control and user authentication
    Syntax:Satisfy Any|All
    Default:Satisfy All
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_access_compat
    Compatibility:Influenced by <Limit> and <LimitExcept> in version 2.0.51 and later

    Access policy if both Allow and Require used. The parameter can be either All or Any. This directive is only useful if access to a particular area is being restricted by both username/password and client host address. In this case the default behavior (All) is to require that the client passes the address access restriction and enters a valid username and password. With the Any option the client will be granted access if they either pass the host restriction or enter a valid username and password. This can be used to password restrict an area, but to let clients from particular addresses in without prompting for a password.

    For example, if you wanted to let people on your network have unrestricted access to a portion of your website, but require that people outside of your network provide a password, you could use a configuration similar to the following:

    Require valid-user
    Allow from 192.168.1
    Satisfy Any

    Another frequent use of the Satisfy directive is to relax access restrictions for a subdirectory:

    <Directory "/var/www/private">
        Require valid-user
    </Directory>
    
    <Directory "/var/www/private/public">
        Allow from all
        Satisfy Any
    </Directory>

    In the above example, authentication will be required for the /var/www/private directory, but will not be required for the /var/www/private/public directory.

    Since version 2.0.51 Satisfy directives can be restricted to particular methods by <Limit> and <LimitExcept> sections.

    Merging of configuration sections

    When any directive provided by this module is used in a new configuration section, no directives provided by this module are inherited from previous configuration sections.

    See also

    Available Languages:  en  |  fr  |  ja 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_alias.html0000644000000000000500000000074413362070302017037 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_alias.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_alias.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_alias.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_alias.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: mod_alias.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_authn_core.html.en0000644000000000000500000004007513412755316020512 0ustar rootsrc mod_authn_core - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authn_core

    Available Languages:  en  |  fr 

    Description:Core Authentication
    Status:Base
    Module Identifier:authn_core_module
    Source File:mod_authn_core.c
    Compatibility:Available in Apache 2.3 and later

    Summary

    This module provides core authentication capabilities to allow or deny access to portions of the web site. mod_authn_core provides directives that are common to all authentication providers.

    top

    Creating Authentication Provider Aliases

    Extended authentication providers can be created within the configuration file and assigned an alias name. The alias providers can then be referenced through the directives AuthBasicProvider or AuthDigestProvider in the same way as a base authentication provider. Besides the ability to create and alias an extended provider, it also allows the same extended authentication provider to be reference by multiple locations.

    Examples

    This example checks for passwords in two different text files.

    Checking multiple text password files

    # Check here first
    <AuthnProviderAlias file file1>
        AuthUserFile "/www/conf/passwords1"
    </AuthnProviderAlias>
    
    # Then check here
    <AuthnProviderAlias file file2>   
        AuthUserFile "/www/conf/passwords2"
    </AuthnProviderAlias>
    
    <Directory "/var/web/pages/secure">
        AuthBasicProvider file1 file2
        
        AuthType Basic
        AuthName "Protected Area"
        Require valid-user
    </Directory>

    The example below creates two different ldap authentication provider aliases based on the ldap provider. This allows a single authenticated location to be serviced by multiple ldap hosts:

    Checking multiple LDAP servers

    <AuthnProviderAlias ldap ldap-alias1>
        AuthLDAPBindDN cn=youruser,o=ctx
        AuthLDAPBindPassword yourpassword
        AuthLDAPURL ldap://ldap.host/o=ctx
    </AuthnProviderAlias>
    <AuthnProviderAlias ldap ldap-other-alias>
        AuthLDAPBindDN cn=yourotheruser,o=dev
        AuthLDAPBindPassword yourotherpassword
        AuthLDAPURL ldap://other.ldap.host/o=dev?cn
    </AuthnProviderAlias>
    
    Alias "/secure" "/webpages/secure"
    <Directory "/webpages/secure">
        AuthBasicProvider ldap-other-alias  ldap-alias1
        
        AuthType Basic
        AuthName "LDAP Protected Place"
        Require valid-user
        # Note that Require ldap-* would not work here, since the 
        # AuthnProviderAlias does not provide the config to authorization providers
        # that are implemented in the same module as the authentication provider.
    </Directory>
    top

    AuthName Directive

    Description:Authorization realm for use in HTTP authentication
    Syntax:AuthName auth-domain
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_authn_core

    This directive sets the name of the authorization realm for a directory. This realm is given to the client so that the user knows which username and password to send. AuthName takes a single argument; if the realm name contains spaces, it must be enclosed in quotation marks. It must be accompanied by AuthType and Require directives, and directives such as AuthUserFile and AuthGroupFile to work.

    For example:

    AuthName "Top Secret"

    The string provided for the AuthName is what will appear in the password dialog provided by most browsers.

    See also

    top

    <AuthnProviderAlias> Directive

    Description:Enclose a group of directives that represent an extension of a base authentication provider and referenced by the specified alias
    Syntax:<AuthnProviderAlias baseProvider Alias> ... </AuthnProviderAlias>
    Context:server config
    Status:Base
    Module:mod_authn_core

    <AuthnProviderAlias> and </AuthnProviderAlias> are used to enclose a group of authentication directives that can be referenced by the alias name using one of the directives AuthBasicProvider or AuthDigestProvider.

    This directive has no affect on authorization, even for modules that provide both authentication and authorization.
    top

    AuthType Directive

    Description:Type of user authentication
    Syntax:AuthType None|Basic|Digest|Form
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_authn_core

    This directive selects the type of user authentication for a directory. The authentication types available are None, Basic (implemented by mod_auth_basic), Digest (implemented by mod_auth_digest), and Form (implemented by mod_auth_form).

    To implement authentication, you must also use the AuthName and Require directives. In addition, the server must have an authentication-provider module such as mod_authn_file and an authorization module such as mod_authz_user.

    The authentication type None disables authentication. When authentication is enabled, it is normally inherited by each subsequent configuration section, unless a different authentication type is specified. If no authentication is desired for a subsection of an authenticated section, the authentication type None may be used; in the following example, clients may access the /www/docs/public directory without authenticating:

    <Directory "/www/docs">
        AuthType Basic
        AuthName Documents
        AuthBasicProvider file
        AuthUserFile "/usr/local/apache/passwd/passwords"
        Require valid-user
    </Directory>
    
    <Directory "/www/docs/public">
        AuthType None
        Require all granted
    </Directory>
    When disabling authentication, note that clients which have already authenticated against another portion of the server's document tree will typically continue to send authentication HTTP headers or cookies with each request, regardless of whether the server actually requires authentication for every resource.

    See also

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_log_debug.html.fr.utf80000644000000000000500000002533213412755316021203 0ustar rootsrc mod_log_debug - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_log_debug

    Langues Disponibles:  en  |  fr 

    Description:Journalisation supplémentaire à des fins de débogage
    Statut:Expérimental
    Identificateur de Module:log_debug_module
    Fichier Source:mod_log_debug.c
    Compatibilité:Disponible depuis la version 2.3.14 d'Apache
    top

    Exemples

    1. Enregistre un message après le traitement d'une requête pour /foo/* :
      <Location "/foo/">
        LogMessage "/foo/ has been requested"
      </Location>
    2. Enregistre un message si une requête pour /foo/* est traitée dans une sous-requête :
      <Location "/foo/">
        LogMessage "subrequest to /foo/" hook=type_checker "expr=-T %{IS_SUBREQ}"
      </Location>
      Le branchement (hook) par défaut log_transaction n'est pas exécuté pour les sous-requêtes ; nous devons donc en utiliser un autre.
    3. Enregistre un message si un client IPv6 est à l'origine d'un dépassement de délai pour une requête :
      LogMessage "IPv6 timeout from %{REMOTE_ADDR}" "expr=-T %{IPV6} && %{REQUEST_STATUS} = 408"
      Notez l'emplacement des guillemets pour l'argument expr=.
    4. Enregistre la valeur de la variable d'environnement de requête "X-Foo" à chaque étape du traitement :
      <Location "/">
        LogMessage "%{reqenv:X-Foo}" hook=all
      </Location>
      En association avec les repères de temps en microsecondes du journal des erreurs, hook=all permet aussi de déterminer la durée d'exécution des différentes phases du traitement de la requête.
    top

    Directive LogMessage

    Description:Enregistre des messages personnalisés dans le journal des erreurs
    Syntaxe:LogMessage message [hook=hook] [expr=expression]
    Défaut:Non défini
    Contexte:répertoire
    Statut:Expérimental
    Module:mod_log_debug

    Cette directive permet d'enregistrer un message personnalisé dans le journal des erreurs. Ce message peut utiliser des variables et des fonctions dans la syntaxe ap_expr. D'éventuelles références à des en-têtes HTTP dans l'expression rationnelle n'entraîneront pas l'ajout des noms d'en-tête correspondants à l'en-tête Vary. Les messages sont enregistrés au loglevel info.

    Le branchement (hook) précise la phase du traitement de la requête avant laquelle le message sera enregistré. Les branchements suivants sont supportés :

    Nom
    translate_name
    type_checker
    quick_handler
    map_to_storage
    check_access
    check_access_ex
    insert_filter
    check_authn
    check_authz
    fixups
    handler
    log_transaction

    Le branchement par défaut est log_transaction. La valeur spéciale all est également supportée ; dans ce cas, le message sera enregistré à chaque phase. Tous les branchements ne sont pas exécutés pour chaque requête.

    L'expression optionnelle permet de restreindre l'enregistrement du message en fonction d'une certaine condition. La syntaxe de l'expression est décrite dans la documentation ap_expr. D'éventuelles références à des en-têtes HTTP dans l'expression rationnelle n'entraîneront pas l'ajout des noms d'en-tête correspondants à l'en-tête Vary.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_log_forensic.html0000644000000000000500000000064413362070302020416 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_log_forensic.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_log_forensic.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_log_forensic.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_log_forensic.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_asis.html.ja.utf80000644000000000000500000002337113412755316020177 0ustar rootsrc mod_asis - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_asis

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:自分用㮠HTTP ãƒ˜ãƒƒãƒ€ã®æ›¸ã‹ã‚Œã¦ã„るファイルをé€ä¿¡ã™ã‚‹
    ステータス:Base
    モジュール識別å­:asis_module
    ソースファイル:mod_asis.c

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ãƒãƒ³ãƒ‰ãƒ© send-as-is ã‚’æä¾›ã—ã¾ã™ã€‚ã“ã®ãƒãƒ³ãƒ‰ãƒ©ã¯é€šå¸¸ã® HTTP ヘッダをã»ã¨ã‚“ã©è¿½åŠ ã™ã‚‹ã“ã¨ãªãドキュメントをé€ä¿¡ã—ã¾ã™ã€‚

    ã“れã¯ã‚µãƒ¼ãƒã‹ã‚‰ã©ã‚“ãªç¨®é¡žã®ãƒ‡ãƒ¼ã‚¿ã‚’é€ã‚‹ã¨ãã«ã‚‚使用ã§ãã¾ã™ã€‚ Cgi スクリプトや nph スクリプトãŒç„¡ãã¦ã‚‚リダイレクトや他ã®ç‰¹åˆ¥ãª HTTP 応答をé€ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    æ­´å²çš„ãªç†ç”±ã«ã‚ˆã‚Šã€ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ mime タイプ httpd/send-as-is ã®ãƒ•ァイルも処ç†ã—ã¾ã™ã€‚

    Support Apache!

    トピック

    ディレクティブ

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚りã¾ã›ã‚“。

    Bugfix checklist

    å‚ç…§

    top

    使用法

    サーãƒè¨­å®šãƒ•ァイルã§ã€ãƒ•ァイル㨠send-as-is ãƒãƒ³ãƒ‰ãƒ©ã‚’例ãˆã°ä»¥ä¸‹ã®ã‚ˆã†ã«é–¢é€£ä»˜ã‘ã¦ãã ã•ã„。

    AddHandler send-as-is asis

    æ‹¡å¼µå­ãŒ .asis ã®ã™ã¹ã¦ã®ãƒ•ァイルã®å†…容㯠Apache ã‹ã‚‰ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¸ã»ã¨ã‚“ã©å¤‰æ›´ç„¡ãé€ã‚‰ã‚Œã¾ã™ã€‚ HTTP ヘッダã¯ç‰¹åˆ¥ã§ã€ãƒ•ァイルã‹ã‚‰ mod_cgi ã®ãƒ«ãƒ¼ãƒ«ã«å¾“ã£ã¦å–り出ã•れã¾ã™ã€‚ã§ã™ã‹ã‚‰ asis ファイルã«ã¯ æ­£ã—ã„ヘッダãŒè¨˜è¼‰ã•れã¦ã„ãªã‘れã°ãªã‚Šã¾ã›ã—〠ã¾ãŸ CGI ã§ã®è¡¨è¨˜æ³•ã§ã‚ã‚‹ã¨ã“ã‚ã® Status: ヘッダを使ã£ã¦ HTTP レスãƒãƒ³ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’決ã‚ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    ã“れã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«ãƒ•ァイルãŒç§»å‹•ã—ãŸã“ã¨ã‚’知らã›ã‚‹ãŸã‚ã« as is (ãã®ã¾ã¾) ã§é€ã‚‰ã‚Œã‚‹ãƒ•ァイルã®å†…容ã®ä¾‹ã§ã™ã€‚

    Status: 301 Now where did I leave that URL
    Location: http://xyz.abc.com/foo/bar.html
    Content-type: text/html

    <html>
    <head>
    <title>Lame excuses'R'us</title>
    </head>
    <body>
    <h1>Fred's exceptionally wonderful page has moved to
    <a href="http://xyz.abc.com/foo/bar.html">Joe's</a> site.
    </h1>
    </body>
    </html>

    注æ„

    注æ„: サーãƒã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«è¿”ã•れるデータã«å¸¸ã« Date: 㨠Server: ヘッダを追加ã—ã¾ã™ã®ã§ã€ ãれらãŒãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ã‹ã‚Œã¦ã„ã¦ã¯ã„ã‘ã¾ã›ã‚“。 サーãƒã¯ Last-Modified ヘッダを追加ã—ã¾ã›ã‚“。 ãŠãらãã¯ãã†ã™ã¹ãã§ã—ょã†ã‘れã©ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_request.html0000644000000000000500000000046513362070302017436 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_request.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_request.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_request.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_auth_form.html0000644000000000000500000000033613362070302017727 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_auth_form.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_auth_form.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_socache_redis.html.en0000644000000000000500000002410213520522576021147 0ustar rootsrc mod_socache_redis - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_socache_redis

    Available Languages:  en 

    Description:Redis based shared object cache provider.
    Status:Extension
    Module Identifier:socache_redis_module
    Source File:mod_socache_redis.c
    Compatibility:Available in Apache 2.4.39 and later

    Summary

    mod_socache_redis is a shared object cache provider which provides for creation and access to a cache backed by the Redis high-performance, distributed memory object caching system.

    This shared object cache provider's "create" method requires a comma separated list of memcached host/port specifications. If using this provider via another modules configuration (such as SSLSessionCache), provide the list of servers as the optional "arg" parameter.

    SSLSessionCache redis:redis.example.com:12345,redis2.example.com:12345

    Details of other shared object cache providers can be found here.

    top

    RedisConnPoolTTL Directive

    Description:TTL used for the connection pool with the Redis server(s)
    Syntax:RedisConnPoolTTL num[units]
    Default:RedisConnPoolTTL 15s
    Context:server config, virtual host
    Status:Extension
    Module:mod_socache_redis
    Compatibility:Available in Apache 2.4.39 and later

    Set the time to keep idle connections with the Redis server(s) alive (threaded platforms only).

    Valid values for RedisConnPoolTTL are times up to one hour. 0 means no timeout.

    This timeout defaults to units of seconds, but accepts suffixes for milliseconds (ms), seconds (s), minutes (min), and hours (h).

    # Set a timeout of 10 minutes
    RedisConnPoolTTL 10min
    # Set a timeout of 60 seconds
    RedisConnPoolTTL 60
    top

    RedisTimeout Directive

    Description:R/W timeout used for the connection with the Redis server(s)
    Syntax:RedisTimeout num[units]
    Default:RedisTimeout 5s
    Context:server config, virtual host
    Status:Extension
    Module:mod_socache_redis
    Compatibility:Available in Apache 2.4.39 and later

    Set the Read/Write timeout used for the connection with the Redis server(s).

    Valid values for RedisTimeout are times up to one hour. 0 means no timeout.

    This timeout defaults to units of seconds, but accepts suffixes for milliseconds (ms), seconds (s), minutes (min), and hours (h).

    # Set a timeout of 10 minutes
    RedisTimeout 10min
    # Set a timeout of 60 seconds
    RedisTimeout 60

    Available Languages:  en 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_groupfile.html.ja.utf80000644000000000000500000002362713412755316022453 0ustar rootsrc mod_authz_groupfile - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_authz_groupfile

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:プレーンテキストファイルを用ã„ãŸã‚°ãƒ«ãƒ¼ãƒ—承èª
    ステータス:Base
    モジュール識別å­:authz_groupfile_module
    ソースファイル:mod_authz_groupfile.c
    äº’æ›æ€§:Apache 2.1 以é™

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯èªè¨¼ã•れãŸãƒ¦ãƒ¼ã‚¶ãŒã‚°ãƒ«ãƒ¼ãƒ—ã®ãƒ¡ãƒ³ãƒãƒ¼ã‹ å¦ã‹ã«ã‚ˆã£ã¦ã‚¦ã‚§ãƒ–サイトã®ä¸€éƒ¨ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã™ã‚‹ã‹æ‹’å¦ã™ã‚‹ã‹ã® æ‰¿èªæ©Ÿèƒ½ã‚’æä¾›ã—ã¾ã™ã€‚åŒæ§˜ã®æ©Ÿèƒ½ã¯ mod_authz_dbm ã«ã‚ˆã£ã¦ã‚‚æä¾›ã•れã¦ã„ã¾ã™ã€‚

    Support Apache!

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    AuthGroupFile ディレクティブ

    説明:証èªã«ä½¿ç”¨ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ã‚°ãƒ«ãƒ¼ãƒ—ã®ä¸€è¦§ãŒæ ¼ç´ã•れã¦ã„る〠テキストファイルã®åå‰ã‚’設定ã™ã‚‹
    æ§‹æ–‡:AuthGroupFile file-path
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Base
    モジュール:mod_authz_groupfile

    AuthGroupFile ディレクティブã¯ã€ 証èªã«ä½¿ç”¨ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ã‚°ãƒ«ãƒ¼ãƒ—ã®ä¸€è¦§ãŒæ ¼ç´ã•れã¦ã„る〠テキストファイルã®åå‰ã‚’設定ã—ã¾ã™ã€‚ file-path ã¯ã‚°ãƒ«ãƒ¼ãƒ—ファイルã¸ã®ãƒ‘スã§ã™ã€‚ 絶対パスã§ãªã‘れã°ã€ ServerRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ã—ã¦æ‰±ã‚れã¾ã™ã€‚

    グループファイルå„行ã¯ã€ã‚°ãƒ«ãƒ¼ãƒ—åã€ã‚³ãƒ­ãƒ³ã€ãã—㦠スペース区切りã§ãã®ãƒ¡ãƒ³ãƒãƒ¼ã®ãƒ¦ãƒ¼ã‚¶åを記述ã—ã¾ã™ã€‚

    例:

    mygroup: bob joe anne

    大ããªãƒ•ァイルを探索ã™ã‚‹ã®ã¯ã€éžå¸¸ã«åŠ¹çŽ‡ãŒæ‚ªã„ã¨ã„ã†ç‚¹ã« 注æ„ã—ã¦ãã ã•ã„。ãã®ã‚ˆã†ãªå ´åˆã¯ã€ AuthDBMGroupFile ã®æ–¹ãŒãšã£ã¨è‰¯ã„性能を発æ®ã—ã¾ã™ã€‚

    セキュリティ

    AuthGroupFile ã¯ã€ ウェブサーãƒã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ„リーã®å¤–å´ã« ä¿ç®¡ã™ã‚‹ã‚ˆã†ã«ã—ã¦ãã ã•ã„。 ä¿è­·ã—よã†ã¨ã—ã¦ã„るディレクトリ以下ã«ã¯ã€ç½®ã‹ãªã„ã§ä¸‹ã•ã„。 ãã†ã—ãªã„ã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒ AuthGroupFile ã‚’ ダウンロードã§ãã¦ã—ã¾ã†å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dialup.html.en0000644000000000000500000001700113412755316017632 0ustar rootsrc mod_dialup - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_dialup

    Available Languages:  en  |  fr 

    Description:Send static content at a bandwidth rate limit, defined by the various old modem standards
    Status:Experimental
    Module Identifier:dialup_module
    Source File:mod_dialup.c

    Summary

    It is a module that sends static content at a bandwidth rate limit, defined by the various old modem standards. So, you can browse your site with a 56k V.92 modem, by adding something like this:

    <Location "/mysite">
        ModemStandard "V.92"
    </Location>

    Previously to do bandwidth rate limiting modules would have to block an entire thread, for each client, and insert sleeps to slow the bandwidth down. Using the new suspend feature, a handler can get callback N milliseconds in the future, and it will be invoked by the Event MPM on a different thread, once the timer hits. From there the handler can continue to send data to the client.

    top

    ModemStandard Directive

    Description:Modem standard to simulate
    Syntax:ModemStandard V.21|V.26bis|V.32|V.34|V.92
    Context:directory
    Status:Experimental
    Module:mod_dialup

    Specify what modem standard you wish to simulate.

    <Location "/mysite">
        ModemStandard "V.26bis"
    </Location>

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_session.html0000644000000000000500000000033213362070302017422 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_session.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_session.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_session.html.en0000644000000000000500000010571513523273316020047 0ustar rootsrc mod_session - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_session

    Available Languages:  en  |  fr 

    Description:Session support
    Status:Extension
    Module Identifier:session_module
    Source File:mod_session.c
    Compatibility:Available in Apache 2.3 and later

    Summary

    Warning

    The session modules make use of HTTP cookies, and as such can fall victim to Cross Site Scripting attacks, or expose potentially private information to clients. Please ensure that the relevant risks have been taken into account before enabling the session functionality on your server.

    This module provides support for a server wide per user session interface. Sessions can be used for keeping track of whether a user has been logged in, or for other per user information that should be kept available across requests.

    Sessions may be stored on the server, or may be stored on the browser. Sessions may also be optionally encrypted for added security. These features are divided into several modules in addition to mod_session; mod_session_crypto, mod_session_cookie and mod_session_dbd. Depending on the server requirements, load the appropriate modules into the server (either statically at compile time or dynamically via the LoadModule directive).

    Sessions may be manipulated from other modules that depend on the session, or the session may be read from and written to using environment variables and HTTP headers, as appropriate.

    top

    What is a session?

    At the core of the session interface is a table of key and value pairs that are made accessible across browser requests. These pairs can be set to any valid string, as needed by the application making use of the session.

    The "session" is a application/x-www-form-urlencoded string containing these key value pairs, as defined by the HTML specification.

    The session can optionally be encrypted and base64 encoded before being written to the storage mechanism, as defined by the administrator.

    top

    Who can use a session?

    The session interface is primarily developed for the use by other server modules, such as mod_auth_form, however CGI based applications can optionally be granted access to the contents of the session via the HTTP_SESSION environment variable. Sessions have the option to be modified and/or updated by inserting an HTTP response header containing the new session parameters.

    top

    Keeping sessions on the server

    Apache can be configured to keep track of per user sessions stored on a particular server or group of servers. This functionality is similar to the sessions available in typical application servers.

    If configured, sessions are tracked through the use of a session ID that is stored inside a cookie, or extracted from the parameters embedded within the URL query string, as found in a typical GET request.

    As the contents of the session are stored exclusively on the server, there is an expectation of privacy of the contents of the session. This does have performance and resource implications should a large number of sessions be present, or where a large number of webservers have to share sessions with one another.

    The mod_session_dbd module allows the storage of user sessions within a SQL database via mod_dbd.

    top

    Keeping sessions on the browser

    In high traffic environments where keeping track of a session on a server is too resource intensive or inconvenient, the option exists to store the contents of the session within a cookie on the client browser instead.

    This has the advantage that minimal resources are required on the server to keep track of sessions, and multiple servers within a server farm have no need to share session information.

    The contents of the session however are exposed to the client, with a corresponding risk of a loss of privacy. The mod_session_crypto module can be configured to encrypt the contents of the session before writing the session to the client.

    The mod_session_cookie allows the storage of user sessions on the browser within an HTTP cookie.

    top

    Basic Examples

    Creating a session is as simple as turning the session on, and deciding where the session will be stored. In this example, the session will be stored on the browser, in a cookie called session.

    Browser based session

    Session On
    SessionCookieName session path=/

    The session is not useful unless it can be written to or read from. The following example shows how values can be injected into the session through the use of a predetermined HTTP response header called X-Replace-Session.

    Writing to a session

    Session On
    SessionCookieName session path=/
    SessionHeader X-Replace-Session

    The header should contain name value pairs expressed in the same format as a query string in a URL, as in the example below. Setting a key to the empty string has the effect of removing that key from the session.

    CGI to write to a session

    #!/bin/bash
    echo "Content-Type: text/plain"
    echo "X-Replace-Session: key1=foo&key2=&key3=bar"
    echo
    env

    If configured, the session can be read back from the HTTP_SESSION environment variable. By default, the session is kept private, so this has to be explicitly turned on with the SessionEnv directive.

    Read from a session

    Session On
    SessionEnv On
    SessionCookieName session path=/
    SessionHeader X-Replace-Session

    Once read, the CGI variable HTTP_SESSION should contain the value key1=foo&key3=bar.

    top

    Session Privacy

    Using the "show cookies" feature of your browser, you would have seen a clear text representation of the session. This could potentially be a problem should the end user need to be kept unaware of the contents of the session, or where a third party could gain unauthorised access to the data within the session.

    The contents of the session can be optionally encrypted before being placed on the browser using the mod_session_crypto module.

    Browser based encrypted session

    Session On
    SessionCryptoPassphrase secret
    SessionCookieName session path=/

    The session will be automatically decrypted on load, and encrypted on save by Apache, the underlying application using the session need have no knowledge that encryption is taking place.

    Sessions stored on the server rather than on the browser can also be encrypted as needed, offering privacy where potentially sensitive information is being shared between webservers in a server farm using the mod_session_dbd module.

    top

    Cookie Privacy

    The HTTP cookie mechanism also offers privacy features, such as the ability to restrict cookie transport to SSL protected pages only, or to prevent browser based javascript from gaining access to the contents of the cookie.

    Warning

    Some of the HTTP cookie privacy features are either non-standard, or are not implemented consistently across browsers. The session modules allow you to set cookie parameters, but it makes no guarantee that privacy will be respected by the browser. If security is a concern, use the mod_session_crypto to encrypt the contents of the session, or store the session on the server using the mod_session_dbd module.

    Standard cookie parameters can be specified after the name of the cookie, as in the example below.

    Setting cookie parameters

    Session On
    SessionCryptoPassphrase secret
    SessionCookieName session path=/private;domain=example.com;httponly;secure;

    In cases where the Apache server forms the frontend for backend origin servers, it is possible to have the session cookies removed from the incoming HTTP headers using the SessionCookieRemove directive. This keeps the contents of the session cookies from becoming accessible from the backend server.

    top

    Session Support for Authentication

    As is possible within many application servers, authentication modules can use a session for storing the username and password after login. The mod_auth_form saves the user's login name and password within the session.

    Form based authentication

    Session On
    SessionCryptoPassphrase secret
    SessionCookieName session path=/
    AuthFormProvider file
    AuthUserFile "conf/passwd"
    AuthType form
    AuthName "realm"
    #...

    See the mod_auth_form module for documentation and complete examples.

    top

    Integrating Sessions with External Applications

    In order for sessions to be useful, it must be possible to share the contents of a session with external applications, and it must be possible for an external application to write a session of its own.

    A typical example might be an application that changes a user's password set by mod_auth_form. This application would need to read the current username and password from the session, make the required changes to the user's password, and then write the new password to the session in order to provide a seamless transition to the new password.

    A second example might involve an application that registers a new user for the first time. When registration is complete, the username and password is written to the session, providing a seamless transition to being logged in.

    Apache modules
    Modules within the server that need access to the session can use the mod_session.h API in order to read from and write to the session. This mechanism is used by modules like mod_auth_form.
    CGI programs and scripting languages
    Applications that run within the webserver can optionally retrieve the value of the session from the HTTP_SESSION environment variable. The session should be encoded as a application/x-www-form-urlencoded string as described by the HTML specification. The environment variable is controlled by the setting of the SessionEnv directive. The session can be written to by the script by returning a application/x-www-form-urlencoded response header with a name set by the SessionHeader directive. In both cases, any encryption or decryption, and the reading the session from or writing the session to the chosen storage mechanism is handled by the mod_session modules and corresponding configuration.
    Applications behind mod_proxy
    If the SessionHeader directive is used to define an HTTP request header, the session, encoded as a application/x-www-form-urlencoded string, will be made available to the application. If the same header is provided in the response, the value of this response header will be used to replace the session. As above, any encryption or decryption, and the reading the session from or writing the session to the chosen storage mechanism is handled by the mod_session modules and corresponding configuration.
    Standalone applications
    Applications might choose to manipulate the session outside the control of the Apache HTTP server. In this case, it is the responsibility of the application to read the session from the chosen storage mechanism, decrypt the session, update the session, encrypt the session and write the session to the chosen storage mechanism, as appropriate.
    top

    Session Directive

    Description:Enables a session for the current directory or location
    Syntax:Session On|Off
    Default:Session Off
    Context:server config, virtual host, directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_session

    The Session directive enables a session for the directory or location container. Further directives control where the session will be stored and how privacy is maintained.

    top

    SessionEnv Directive

    Description:Control whether the contents of the session are written to the HTTP_SESSION environment variable
    Syntax:SessionEnv On|Off
    Default:SessionEnv Off
    Context:server config, virtual host, directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_session

    If set to On, the SessionEnv directive causes the contents of the session to be written to a CGI environment variable called HTTP_SESSION.

    The string is written in the URL query format, for example:

    key1=foo&key3=bar

    top

    SessionExclude Directive

    Description:Define URL prefixes for which a session is ignored
    Syntax:SessionExclude path
    Default:none
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_session

    The SessionExclude directive allows sessions to be disabled relative to URL prefixes only. This can be used to make a website more efficient, by targeting a more precise URL space for which a session should be maintained. By default, all URLs within the directory or location are included in the session. The SessionExclude directive takes precedence over the SessionInclude directive.

    Warning

    This directive has a similar purpose to the path attribute in HTTP cookies, but should not be confused with this attribute. This directive does not set the path attribute, which must be configured separately.

    top

    SessionExpiryUpdateInterval Directive

    Description:Define the number of seconds a session's expiry may change without the session being updated
    Syntax:SessionExpiryUpdateInterval interval
    Default:SessionExpiryUpdateInterval 0 (always update)
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_session
    Compatibility:Available in Apache 2.4.41 and later

    The SessionExpiryUpdateInterval directive allows sessions to avoid the cost associated with writing the session each request when only the expiry time has changed. This can be used to make a website more efficient or reduce load on a database when using mod_session_dbd. The session is always written if the data stored in the session has changed or the expiry has changed by more than the configured interval.

    Setting the interval to zero disables this directive, and the session expiry is refreshed for each request.

    This directive only has an effect when combined with SessionMaxAge to enable session expiry. Sessions without an expiry are only written when the data stored in the session has changed.

    Warning

    Because the session expiry may not be refreshed with each request, it's possible for sessions to expire up to interval seconds early. Using a small interval usually provides sufficient savings while having a minimal effect on expiry resolution.

    top

    SessionHeader Directive

    Description:Import session updates from a given HTTP response header
    Syntax:SessionHeader header
    Default:none
    Context:server config, virtual host, directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_session

    The SessionHeader directive defines the name of an HTTP response header which, if present, will be parsed and written to the current session.

    The header value is expected to be in the URL query format, for example:

    key1=foo&key2=&key3=bar

    Where a key is set to the empty string, that key will be removed from the session.

    top

    SessionInclude Directive

    Description:Define URL prefixes for which a session is valid
    Syntax:SessionInclude path
    Default:all URLs
    Context:server config, virtual host, directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_session

    The SessionInclude directive allows sessions to be made valid for specific URL prefixes only. This can be used to make a website more efficient, by targeting a more precise URL space for which a session should be maintained. By default, all URLs within the directory or location are included in the session.

    Warning

    This directive has a similar purpose to the path attribute in HTTP cookies, but should not be confused with this attribute. This directive does not set the path attribute, which must be configured separately.

    top

    SessionMaxAge Directive

    Description:Define a maximum age in seconds for a session
    Syntax:SessionMaxAge maxage
    Default:SessionMaxAge 0
    Context:server config, virtual host, directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_session

    The SessionMaxAge directive defines a time limit for which a session will remain valid. When a session is saved, this time limit is reset and an existing session can be continued. If a session becomes older than this limit without a request to the server to refresh the session, the session will time out and be removed. Where a session is used to stored user login details, this has the effect of logging the user out automatically after the given time.

    Setting the maxage to zero disables session expiry.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_imagemap.html.fr.utf80000644000000000000500000005663713412755316021050 0ustar rootsrc mod_imagemap - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_imagemap

    Langues Disponibles:  en  |  fr  |  ko 

    Description:Traitement des cartes des zones interactives d'une image (imagemaps) au niveau du serveur
    Statut:Base
    Identificateur de Module:imagemap_module
    Fichier Source:mod_imagemap.c

    Sommaire

    Ce module traite les fichiers .map, et remplace ainsi la fonctionnalité du programme CGI imagemap. Tout répertoire ou type de document configuré pour utiliser le gestionnaire imap-file (à l'aide des directives AddHandler ou SetHandler), sera traité par ce module.

    La directive suivante confère aux fichiers possèdant l'extension .map le statut de fichiers imagemap :

    AddHandler imap-file map

    Notez que la syntaxe suivante reste encore supportée :

    AddType application/x-httpd-imap map

    Cependant, nous essayons d'abandonner progressivement les "types MIME magiques", et cette syntaxe est sur le point de devenir obsolète.

    top

    Nouvelles fonctionnalités

    Le module imagemap propose quelques nouvelles fonctionnalités qui n'étaient pas disponibles avec les programmes imagemap précédemment distribués.

    • Références d'URLs relatives à l'information contenue dans l'en-tête Referer: .
    • Assignement <base> par défaut via la nouvelle directive base.
    • Fichier imagemap.conf non requis.
    • Références à des points.
    • Génération configurable de menus d'images interactives.
    top

    Fichier imagemap

    Les lignes d'un fichier imagemap peuvent se présenter sous plusieurs formats :

    directive valeur [x,y ...]
    directive valeur "Texte de menu" [x,y ...]
    directive valeur x,y ... "Texte de menu"

    Les directives sont base, default, poly, circle, rect, ou point. valeur est une URL absolue ou relative, ou une des valeurs spéciales énumérées ci-dessous. Les coordonnées sont des paires x,y séparées par des espaces. Le texte entre guillemets est le texte du lien si un menu imagemap est généré. Les lignes commençant par '#' sont des commentaires.

    Directives d'un fichier imagemap

    Les directives autorisées dans un fichier imagemap sont au nombre de six. Elles peuvent se trouver à n'importe quelle position dans le fichier, mais sont traitées dans l'ordre selon lequel elles sont enregistrées dans le fichier imagemap.

    Directive base

    Elle a le même effet que <base href="valeur">. Les URLs non absolues du fichier imagemap sont considérées comme relatives à cette valeur. La directive base l'emporte sur une directive ImapBase définie dans un fichier .htaccess ou dans le fichier de configuration du serveur. En l'absence de directive de configuration ImapBase, la valeur par défaut de base est http://nom_serveur/.

    base_uri est un synonyme de base. Notez que la présence ou l'absence d'un slash de fin dans l'URL est importante.

    Directive default
    La décision à prendre si les coordonnées fournies ne correspondent à aucune des directives poly, circle, ou rect, et si aucune directive point n'est présente. En l'absence de définition d'une directive de configuration ImapDefault, la valeur par défaut est nocontent et provoque l'envoi d'un code de statut 204 No Content. Le client verra toujours la même page s'afficher.
    Directive poly
    Accepte comme arguments trois à cent points, et est actionnée si les coordonnées sélectionnées par l'utilisateur tombent dans le polygone défini par ces points.
    Directive circle
    Accepte comme arguments les coordonnées du centre d'un cercle et celles d'un point de ce cercle. Elle est actionnée si les coordonnées sélectionnées par l'utilisateur tombent dans ce cercle.
    Directive rect
    Accepte comme arguments les coordonnées des sommets de deux angles opposés d'un rectangle. Elle est actionnée si les coordonnées sélectionnées par l'utilisateur tombent dans ce rectangle.
    Directive point
    Elle n'accepte qu'un seul point comme argument. Si aucune autre directive ne correspond, c'est la directive dont le point spécifié est le plus près du point sélectionné par l'utilisateur qui est actionnée. Notez que la directive default ne sera pas suivie si une directive point est présente et si des coordonnées valides sont fournies.

    Valeurs

    Les valeurs passées aux directives peuvent contenir :

    une URL

    L'URL peut être absolue ou relative. Les URLs relatives peuvent contenir '..' et seront considérées comme relatives à la valeur de base.

    base en lui-même, ne sera pas résolu en fonction de la valeur courante. Cependant, une directive base mailto: fonctionnera correctement.

    map
    Équivalent à l'URL du fichier imagemap lui-même. Aucune coordonnée n'est spécifiée, et un menu sera donc généré, à moins qu'une directive ImapMenu n'ait été définie à none.
    menu
    Équivalent à map.
    referer
    Équivalent à l'URL du document référant. La valeur par défaut est http://nom_serveur/ si aucun en-tête Referer: n'est présent.
    nocontent
    Envoie un code de statut 204 No Content, indiquant au client qu'il doit continuer à afficher la même page. Valide pour toutes les directives, sauf base.
    error
    Envoie un code de statut d'échec 500 Server Error. Valide pour toutes les directives, sauf base, mais n'a de sens qu'avec la directive default.

    Coordonnées

    0,0 200,200
    Une coordonnée se compose de deux valeurs, x et y, séparées par une virgule. Les coordonnées sont séparées entre elles par des espaces. Pour s'adapter à la manière dont Lynx traite les images interactives, la sélection par un utilisateur de la coordonnée 0,0 a le même effet que si aucune coordonnée n'a été sélectionnée.

    Texte entre guillemets

    "Texte du menu"

    Après la valeur ou les coordonnées, la ligne peut éventuellement contenir un texte entre guillemets. Cette chaîne constitue le texte du lien si un menu est généré :

    <a href="http://example.com/">Texte de menu</a>

    Si aucun texte entre guillemets n'est présent, le texte sera constitué du nom du lien :

    <a href="http://example.com/">http://example.com</a>

    Si vous voulez insérer des guillemets dans le texte, vous devez les inscrire sous la forme &quot;.

    top

    Exemple de fichier imagemap

    #Les commentaires sont affichés dans un menu 'formaté' ou #'semi-formaté'.
    #Et peuvent contenir des balises html. <hr>
    base referer
    poly map "Puis-je avoir un menu, s'il vous plait ?" 0,0 0,10 10,10 10,0
    rect .. 0,0 77,27 "le répertoire du référant"
    circle http://www.inetnebr.example.com/lincoln/feedback/ 195,0 305,27
    rect autre_fichier "dans le même répertoire que le référant" 306,0 419,27
    point http://www.zyzzyva.example.com/ 100,100
    point http://www.tripod.example.com/ 200,200
    rect mailto:nate@tripod.example.com 100,150 200,0 "Bogues?"

    top

    Référencement de votre fichier imagemap

    Exemple HTML

    <a href="/maps/imagemap1.map">
    <img ismap src="/images/imagemap1.gif">
    </a>

    Exemple XHTML

    <a href="/maps/imagemap1.map">
    <img ismap="ismap" src="/images/imagemap1.gif" />
    </a>

    top

    Directive ImapBase

    Description:Valeur par défaut de la directive base des fichiers imagemap
    Syntaxe:ImapBase map|referer|URL
    Défaut:ImapBase http://nom_serveur/
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_imagemap

    La directive ImapBase permet de définir la valeur par défaut de la directive base des fichiers imagemap. Sa valeur est écrasée par la présence éventuelle d'une directive base dans le fichier imagemap. Si cette directive est absente, la valeur par défaut de la directive base est http://nom_serveur/.

    Voir aussi

    top

    Directive ImapDefault

    Description:Action à entreprendre par défaut lorsqu'un fichier imagemap est invoqué avec des coordonnées qui ne correspondent à aucune cible
    Syntaxe:ImapDefault error|nocontent|map|referer|URL
    Défaut:ImapDefault nocontent
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_imagemap

    La directive ImapDefault permet de définir la valeur par défaut de la directive default utilisée dans les fichiers imagemap. Sa valeur est écrasée par la présence éventuelle d'une directive default dans le fichier imagemap. Si cette directive est absente, l'action associée à default est nocontent, ce qui implique l'envoi d'un code de statut 204 No Content au client. Dans ce cas, le client doit continuer à afficher la même page.

    top

    Directive ImapMenu

    Description:Action à entreprendre si aucune coordonnée n'est fournie lorsqu'on invoque un fichier imagemap
    Syntaxe:ImapMenu none|formatted|semiformatted|unformatted
    Défaut:ImapMenu formatted
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Base
    Module:mod_imagemap

    La directive ImapMenu permet de spécifier l'action à entreprendre lorsqu'un fichier imagemap est invoqué sans coordonnées valides.

    none
    Si l'argument d'ImapMenu est none, aucun menu n'est généré, et l'action default est effectuée.
    formatted
    Le menu formatted est le menu le plus simple. Les commentaires du fichier imagemap sont ignorés. Un en-tête de niveau un est affiché, puis un séparateur horizontal, puis chacun des liens sur une ligne séparée. L'aspect du menu est similaire à celui d'un listing de répertoire.
    semiformatted
    Dans le menu semiformatted, les commentaires sont affichés au moment où ils apparaissent dans le fichier imagemap. Les lignes vides sont interprètées comme des lignes de séparation HTML. Aucun en-tête ni séparateur horizontal n'est affiché. À part ces différences, le menu semiformatted est identique au menu formatted.
    unformatted
    Les commentaires sont affichés et les lignes vides sont ignorées. N'est affiché que ce qui apparait dans le fichier imagemap. Toutes les lignes de séparation HTML et les en-têtes doivent être inclus en tant que commentaires dans le fichier imagemap. Cela vous procure une grande souplesse pour définir l'apparence de vos menus, mais vous oblige à rédiger vos fichiers imagemap en HTML, et non en texte plat.

    Langues Disponibles:  en  |  fr  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/directives.html.tr.utf80000644000000000000500000015556313523273316020604 0ustar rootsrc Yönerge Dizini - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Yönerge Dizini

    Mevcut Diller:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Standart Apache dağıtımında bulunan yönergelerin tamamı burada listelenmiştir. Hepsi aralarında şekilsel bir uyum sağlanarak açıklanmışlardır. Açıklamalarında kullanılan terimler için Yönerge Sözlüğüne bakabilirsiniz.

    Ayrıca, yönerge ayrıntılarının bir özet olarak listelendiği bir Hızlı Yönerge Kılavuzu da mevcuttur.

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 

    Mevcut Diller:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_autoindex.html.tr.utf80000644000000000000500000020417013447004010021253 0ustar rootsrc mod_autoindex - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_autoindex

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    Açıklama:Unix ls veya Win32 dir kabuk komutunun yaptığı gibi dizin içeriğini listeler.
    Durum:Temel
    Modül Betimleyici:autoindex_module
    Kaynak Dosyası:mod_autoindex.c

    Özet

    Bir dizin içerik dosyası iki kaynaktan gelebilir:

    • Bu dizinde bulunan ve genellikle index.html adında bir dosya olarak. Kullanılan dosyanın veya dosyaların ismi DirectoryIndex yönergesi ile belirlenir ve mod_dir tarafından denetlenir.
    • Kullanıcı tarafından böyle bir dosya saÄŸlanmadığı takdirde dizin içerik listesini sunucu üretir. DiÄŸer yönergeler bu listenin biçemini belirler. Listede gösterilen dosya türü simgeleri AddIcon, AddIconByEncoding ve AddIconByType yönergeleri ile belirlenir. Bunlar mod_autoindex tarafından denetlenir.

    İki işlev birbirinden ayrı tutulmuştur, böylece kendiliğinden içerik listesi üretimi tamamen iptal edilebilir (veya değiştirilebilir).

    Kendiliğinden içerik listesi üretimi Options +Indexes ile etkin kılınabilir. Daha fazla bilgi için Options yönergesinin açıklamasına bakınız.

    IndexOptions yönergesi FancyIndexing seçeneği ile kullanılmışsa sütun başlıkları listenin sıralamasını sütundaki sıralamaya göre değiştirecek hiper bağlar haline getirilir (süslü liste). Aynı başlığa peşpeşe tıklamak suretiyle sıralamayı büyükten küçüğe veya tersine değiştirebilirsiniz. Bu sütun başlığı bağlarının oluşturulması IndexOptions yönergesi SuppressColumnSorting seçeneği ile kullanılarak engellenebilir.

    Boyuta göre sıralamada daima dosyanın asıl boyutuna bakılır. Dolayısıyla ikisi de "1K" olarak gösterilen iki dosyadan 1010 baytlık olanı küçükten büyüğe sıralamada 1011 baytlıktan önce gösterilecektir.

    top

    Sütun Sıralamada Sorgu Seçenekleri

    İstemciye, dizin içeriğini listelerken neleri hangi sırada listeleyeceğini belirleyebilmesi için içerik üzerinde biraz denetim sağlayabileceği çeşitli sorgu dizgesi bileşenleri sağlanmıştır. Çıktı üzerinde kullanıcı denetimini tamamen ortadan kaldırmak için IndexOptions yönergesinin IgnoreClient seçeneği kullanılabilir.

    Sütun sıralama başlıklarının her biri hedefi kendisi olan birer hiper bağ olup aşağıda sıralanan sorgu seçeneklerini kullanırlar. Bu seçeneklerin her biri her dizin içerik listesi isteğine eklenebilir.

    • C=N dizini dosya adına göre sıralar
    • C=M dizini son deÄŸiÅŸiklik zamanına ve ardından dosya ismine göre sıralar.
    • C=S dizini boyuta ve ardından dosya adına göre sıralar
    • C=D dizini açıklamaya ve ardından dosya adına göre sıralar.
    • O=A artan sıralama uygulanır.
    • O=D azalan sıralama uygulanır.
    • F=0 listeleme basit listeleme biçiminde yapılır (FancyIndexing seçeneÄŸi ile etkinleÅŸtirilen biçimde deÄŸil)
    • F=1 listeleme FancyIndexing seçeneÄŸi ile etkinleÅŸtirilen biçimde yapılır
    • F=2 listeleme FancyIndexing ve HTMLTable seçeneÄŸi ile etkinleÅŸtirilen biçimde yapılır.
    • V=0 sürüme göre sıralama iptal edilir.
    • V=1 sürüme göre sıralama etkin kılınır.
    • P=kalıp sadece belirtilen kalıp ile eÅŸleÅŸen dosyalar istelenir.

    P=kalıp sorgu seçeneğinin normalde IndexIgnore yönergesi işleme sokulduktan sonra değerlendirildiğine ve dosya isimlerinin diğer kendiliğinden içerik listeleme koşullarının konusu olmaya devam ettiğine dikkat ediniz. mod_autoindex modülündeki Sorgu Seçenekleri çözümleyicisi tanımadığı bir seçeneğe rastlar rastlamaz işlemi durdurur. Sorgu Seçenekleri yukarıda belirtilene uygun olarak iyi biçimli olmak zorundadır.

    Aşağıdaki basit örnekte sorgu seçeneklerinin kullanımı gösterilmiştir. Son satırda bulunan "submit" düğmesindeki tanınmayan "X" girdisine dikkat ediniz. "X=Göster" girdisi tüm seçenekler işlendikten sonra mod_autoindex tarafından son argüman olarak ele alınacak ve çözümleme işlemi o noktada duracaktır.

    <form action="" method="get">
      <input type="text" name="P" value="*" /> ile eÅŸleÅŸen
      <select name="C">
        <option value="N" selected="selected">isme</option>
        <option value="M"> deÄŸiÅŸiklik tarihine</option>
        <option value="S"> boyuta</option>
        <option value="D"> açıklamaya</option>
      </select> göre
      <select name="O">
        <option value="A" selected="selected"> artan</option>
        <option value="D"> azalan</option>
      </select>
      <select name="V">
        <option value="0" selected="selected">normal</option>
        <option value="1"> sürümlü</option>
      </select> sıralamayla bir
      <select name="F">
        <option value="0"> basit liste</option>
        <option value="1" selected="selected"> süslü liste</option>
        <option value="2"> tablolu liste</option>
      </select>
      <input type="submit" name="X" value="Göster" />
    </form>
    top

    AddAlt Yönergesi

    Açıklama:Dosyaya göre seçilen simgenin yerinde gösterilecek metni belirler.
    Sözdizimi:AddAlt metin dosya [dosya] ...
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    AddAlt yönergesi, FancyIndexing seçeneğiyle üretilen dizin listesinde bir dosya simgesinin yerinde gösterilecek metni belirler. dosya olarak dosya türünü betimleyecek bir dosya uzantısı, dosya isminin bir kısmı, bir dosya ismi kalıbı veya tam yoluyla bir dosya ismi belirtilebilir. Eğer metin boşluk karakterleri içeriyorsa tırnak içine (" veya ') alınmalıdır. Simge metni, simge bulunamadığı veya istemci resim gösteremediği takdirde ya da kullanıcı resim yüklememeyi tercih etmişse gösterilir.

    AddAlt "PDF file" *.pdf
    AddAlt Compressed *.gz *.zip *.Z
    top

    AddAltByEncoding Yönergesi

    Açıklama:Dosyanın MIME kodlamasına göre seçilen simgenin yerinde gösterilecek metni belirler.
    Sözdizimi:AddAltByEncoding metin MIME-kodlaması [MIME-kodlaması] ...
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    AddAltByEncoding yönergesi, FancyIndexing seçeneğiyle üretilen dizin listesinde bir dosya simgesinin yerinde gösterilecek metni belirler. MIME-kodlaması olarak x-compress gibi geçerli bir içerik kodlaması belirtilmelidir. Eğer metin boşluk karakterleri içeriyorsa tırnak içine (" veya ') alınmalıdır. Simge metni simge bulunamadığı veya istemci resim gösteremediği takdirde ya da kullanıcı resim yüklememeyi tercih etmişse gösterilir.

    AddAltByEncoding gzip x-gzip
    top

    AddAltByType Yönergesi

    Açıklama:Dosyanın MIME türüne göre seçilen simgenin yerinde gösterilecek metni belirler.
    Sözdizimi:AddAltByType metin MIME-türü [MIME-türü] ...
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    AddAltByType yönergesi, FancyIndexing seçeneğiyle üretilen dizin listesinde bir dosya simgesinin yerinde gösterilecek metni belirler. MIME-türü olarak text/html gibi geçerli bir içerik türü belirtilmelidir. Eğer metin boşluk karakterleri içeriyorsa tırnak içine (" veya ') alınmalıdır. Simge metni simge bulunamadığı veya istemci resim gösteremediği takdirde ya da kullanıcı resim yüklememeyi tercih etmişse gösterilir.

    AddAltByType 'salt metin' text/plain
    top

    AddDescription Yönergesi

    Açıklama:Bir dosya için gösterilecek açıklama belirtilir.
    Sözdizimi:AddDescription metin dosya [dosya] ...
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    Yönerge, FancyIndexing seçeneğiyle üretilen dizin listesinde bir dosya için gösterilecek açıklamayı belirler. dosya olarak dosya türünü betimleyecek bir dosya uzantısı, dosya isminin bir kısmı, bir dosya ismi kalıbı veya tam yoluyla bir dosya ismi belirtilebilir. Eğer dosya açıklamasını içeren metin boşluk karakterleri içeriyorsa çift tırnak (") içine alınmalıdır.

    AddDescription "Mars Gezegeni" mars.gif 
    AddDescription "Dostum Marshall" dostlar/mars.gif

    Normalde öntanımlı açıklama alanının genişliği 23 bayttır. IndexOptions SuppressIcon seçeneği buna 6 bayt daha ekler; IndexOptions SuppressSize seçeneği 7 bayt, IndexOptions SuppressLastModified seçeneği ise 19 bayt ekler. Böylece en fazla 55 karakterlik öntanımlı sütun genişliğine ulaşılabilir.

    dosya kısmî dosya ismi içerebileceğinden çok kısa dosya ismi belirtilmesi yüzünden istemeden de olsa başka dosyalarla eşleşebileceğini unutmayın. Örneğin, le.html doğrudan le.html ile eşleşebileceği gibi example.html ile de eşleşecektir. Şüpheli durumların ortaya çıkabileceği durumlarda mümkün olduğunca dosya isminin tamamını kullanın ve saptanan ilk eşleşmenin kullanılacağını aklınızdan çıkarmayın ayrıca, AddDescription listesini de uygun şekilde sıralayın.

    Açıklama sütununun öntanımlı genişliği geçersiz kılınabilir hatta sınırsız açıklama uzunluğu atanabilir. Bu konu için IndexOptions yönergesinin DescriptionWidth seçeneğinin açıklamasına bakınız.

    Önemli

    AddDescription ile tanımlanan açıklama metni HTML etiketleri ve karakter öğeleri içerebilir. Eğer açıklama sütununun genişlik sınırlamasından dolayı bir HTML etiketinin içeriği kırpılırsa bu durum dizin listesinin kalanını etkileyebilir (örneğin, kalın gösterim listenin kalanına yayılabilir).

    Yol bilgisi içeren değiştirgeler

    Mutlak yollar henüz desteklenmemetedir ve çalışma anında hiçbir şeyle eşleşmeyeceklerdir. Normalde sadece htaccess bağlamında kullanılan, göreli yol bilgisi içeren değiştirgeler, kısmi dizin isimleriyle eşleşmemeleri için örtük olarak '*/' öneki alırlar.

    top

    AddIcon Yönergesi

    Açıklama:Bir dosya için gösterilecek simgeyi dosya adına göre belirler.
    Sözdizimi:AddIcon simge isim [isim] ...
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    Yönerge, FancyIndexing seçeneğiyle üretilen dizin listesinde adı isim ile biten bir dosya için gösterilecek simgeyi belirler. simge ya simgenin göreli URL’si (% öncelemeli), tam nitelenmiş bir uzak URL ya da (alt-metin,url) biçeminde olmalıdır; buradaki alt-metin simge gösterilemediği durumda tarayıcı tarafından simgenin yerinde gösterilecek metindir.

    isim olarak ya (listeyi düzgün biçemlemek amacıyla) dizinler için ^^DIRECTORY^^, boş satırlar için ^^BLANKICON^^ ya da dosya türünü betimleyecek bir dosya uzantısı, dosya isminin bir kısmı, bir dosya ismi kalıbı veya tam yoluyla bir dosya ismi belirtilebilir.

    ^^BLANKICON^^ sadece biçemleme için kullanılır, dolayısıyla IndexOptions HTMLTable kullanıyorsanız gereksizdir.

    #Examples
    AddIcon (IMG,/icons/image.png) .gif .jpg .png
    AddIcon /icons/dir.png ^^DIRECTORY^^
    AddIcon /icons/backup.png *~

    Mümkünse AddIcon yerine AddIconByType yönergesi tercih edilmelidir.

    top

    AddIconByEncoding Yönergesi

    Açıklama:Bir dosya için gösterilecek simgeyi dosyanın MIME kodlamasına göre belirler.
    Sözdizimi:AddIconByEncoding simge MIME-kodlaması [MIME-kodlaması] ...
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    Yönerge, FancyIndexing seçeneğiyle üretilen dizin listesinde bir dosya için gösterilecek simgeyi belirler. simge ya simgenin göreli URL’si (% öncelemeli), tam nitelenmiş uzak bir URL ya da (alt-metin,url) biçeminde olmalıdır; buradaki alt-metin simge gösterilemediği durumda tarayıcı tarafından simgenin yerinde gösterilecek metindir.

    MIME-kodlaması olarak x-compress gibi geçerli bir içerik kodlaması belirtilmelidir.

    AddIconByEncoding /icons/compress.png x-compress
    top

    AddIconByType Yönergesi

    Açıklama:Bir dosya için gösterilecek simgeyi dosyanın MIME türüne göre belirler.
    Sözdizimi:AddIconByType simge MIME-türü [MIME-türü] ...
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    Yönerge, FancyIndexing seçeneğiyle üretilen dizin listesinde MIME türü MIME-türü olarak belirtilen bir dosya için gösterilecek simgeyi belirler. simge ya simgenin göreli URL’si (% öncelemeli), tam nitelenmiş uzak bir URL ya da (alt-metin,url) biçeminde olmalıdır; buradaki alt-metin simge gösterilemediği durumda tarayıcı tarafından simgenin yerinde gösterilecek metindir.

    MIME-türü MIME türleri ile eşleşen bir dosya kalıbı ifadesi olabilir.

    AddIconByType (IMG,/icons/image.png) image/*
    top

    DefaultIcon Yönergesi

    Açıklama:Özel bir simge atanmamış dosyalar için gösterilecek simgeyi belirler.
    Sözdizimi:DefaultIcon URL-yolu
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    The DefaultIcon yönergesi FancyIndexing seçeneğiyle üretilen dizin listesinde özel bir simge atanmamış dosyalar için gösterilecek simgeyi belirler. URL-yolu simgeye bir göreli URL (% öncelemeli) veya tam nitelenmiş uzak bir URL belirtir.

    DefaultIcon /icon/unknown.png
    top

    HeaderName Yönergesi

    Açıklama:Dizin listesinin tepesine yerleştirilecek dosyanın ismini belirler.
    Sözdizimi:HeaderName dosya-ismi
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    HeaderName yönergesi, dizin listesinin tepesine yerleştirilecek dosyanın ismini belirler. Dosyanın ismi dosya-ismi ile belirtilir.

    HeaderName HEADER.html

    HeaderName and ReadmeName yönergelerinde dosya-ismi artık içeriği listelenecek dizine erişmek için kullanılan bir göreli URL yolu olarak ele alınmaktadır. Eğer dosya-ismi bir bölü çizgisi ("/") ile başlıyorsa DocumentRoot yönergesinde belirtilen dizine göre belirtildiği varsayılır.

    HeaderName /include/HEADER.html

    dosya-ismi, içerik türü text/* (text/html, text/plain gibi) olan bir belge olarak çözümlenmelidir. Yani, aşağıdaki örnekteki gibi betiğin asıl dosya türü text/html olarak imlenmişse dosya-ismi bir CGI betiğinin ismi bile olabilir:

    AddType text/html .cgi

    Options ile MultiViews etkin kılınmışsa dosyaya içerik dili uzlaşımı da uygulanabilir. dosya-ismi ile belirtilen dosya text/html türünde durağan bir belge (bir CGI betiği değil) ise ve options ile Includes ve IncludesNOEXEC seçeneklerinden biri belirtilmişse dosya bir SSI sayfası olarak ele alınır (mod_include belgesine bakınız).

    Eğer yönergede belirtilen dosya bir HTML belge gibi başlıyorsa (<html>, <head>, vs.) ve bu etiketlerin yinelenmemesini istiyorsanız IndexOptions +SuppressHTMLPreamble ataması yapmanız gerekecektir.

    Ayrıca bakınız:

    top

    IndexHeadInsert Yönergesi

    Açıklama:Bir dizin sayfasının HEAD bölümüne metin yerleştirir.
    Sözdizimi:IndexHeadInsert "imlenim ..."
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    IndexHeadInsert yönergesi, dizin listesi için üretilen HTML’nin <head> bölümüne yerleştirilecek bir dizge tanımlar.

    IndexHeadInsert "<link rel=\"sitemap\" href=\"/sitemap.html\">"
    top

    IndexIgnore Yönergesi

    Açıklama:Dizin içerik listesinden gizlenecek dosyaların listesi belirtilir.
    Sözdizimi:IndexIgnore dosya [dosya] ...
    Öntanımlı:IndexIgnore "."
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    IndexIgnore yönergesi, dizin içerik listesinden gizlenecek dosyaların listesini belirtmek için kullanılır. dosya olarak kabuk tarzı bir dosya ismi kalıbı veya tam yoluyla bir dosya ismi belirtilebilir. Evvelce yapılmış bir atamada değişiklik yapmak yerine birden fazla IndexIgnore ataması yapabilirsiniz. Liste öntanımlı olarak içinde bulunulan dizini (./) içerir.

    IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t

    Düzenli İfadeler

    Bu yönerge, <DirectoryMatch> gibidüzenli ifadeler içeren yapılandırma bölümlerinde henüz çalışmamaktadır.

    top

    IndexIgnoreReset Yönergesi

    Açıklama:Bir dizini listelerken gizlenecek dosyalar listesini boşaltır
    Sözdizimi:IndexIgnoreReset ON|OFF
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex
    Uyumluluk:Apache HTTP Sunucusunun 2.3.10 ve sonraki sürümlerinde kullanılabilmektedir.

    Bu yönerge, diğer yapılandırma bölümlerince bir şekilde miras alınmayan ve IndexIgnore tarafından yoksayılan dosyaları kaldırır.

    <Directory "/var/www">
        IndexIgnore *.bak .??* *~ *# HEADER* README* RCS CVS *,v *,t
    </Directory>
    <Directory "/var/www/backups">
        IndexIgnoreReset ON
        IndexIgnore .??* *# HEADER* README* RCS CVS *,v *,t
    </Directory>

    Bu yönergeyi kullandıktan sonra, açıkça yoksaymak istediğiniz kalıpların bir listesi için öntanımlı yapılandırmayı gözden geçirin.

    top

    IndexOptions Yönergesi

    Açıklama:Dizin içerik listesini yapılandıracak seçenekler belirtilir.
    Sözdizimi:IndexOptions [+|-]seçenek [[+|-]seçenek] ...
    Öntanımlı:Öntanımlı olarak hiçbir seçenek etkin değildir.
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    IndexOptions yönergesi dizin içerik listesinin davranışını belirler. seçenek olarak şunlar belirtilebilir:

    AddAltClass
    IndexOptions HTMLTable etkin ve bir IndexStyleSheet tanımlı olduğunda dizin listesi tablosunun her satırına fazladan bir CSS sınıfı bildirimi ekler. Tablonun her satırına uygulanmaması için standart even ve odd sınıfları yerine even-ALT ve odd-ALT bildirimleri kullanılabilir. Burada ALT ya bir dosya biçimiyle ilişkili standat bir alt dizgesidir ya da AddAlt* yönergeleriyle tanımlanan bir alt dizgesidir.
    Charset=karakter-kümesi (Apache HTTP Sunucusunun 2.0.61 ve sonraki sürümleri)
    Charset seçeneği üretilen sayfa için bir karakter kümesi belirtebilmenizi sağlar. Dizinin bulunduğu dosya sisteminin karakter kodlamasına bağlı olarak öntanımlı değeri Windows ve Mac OS X'te UTF-8, diğerlerinde ISO-8859-1’dir (İlgili dosya sisteminin Unicode dosya isimleri kullanıp kullanmamasına bağlıdır).
    IndexOptions Charset=UTF-8
    DescriptionWidth=[n | *]

    DescriptionWidth seçeneği üretilen sayfada açıklama sütununun genişliğini sizin belirleyebilmenizi sağlar. Bu seçenek kullanılmadığında veya -DescriptionWidth olarak belirtildiğinde uygun genişliği mod_autoindex hesaplar.

    DescriptionWidth=n ile açıklama sütununun genişliği n baytla sınırlanır.

    DescriptionWidth=* ile açıklama sütununun genişliği en uzun açıklama metni sığacak şekilde arttırılır.

    Sütun genişliğinin sabitliği nedeniyle metnin kırpılmasından kaynaklanan sorunlar için AddDescription yönergesinin açıklamasına bakınız.

    FancyIndexing
    Dizin içerik listesi süslü olur.
    FoldersFirst
    Bu seçenek etkin kılındığında dizin içerik listesinde alt dizinler dosyalardan önce listelenir. Listelemede genel olarak iki bileşen vardır: Alt dizinler ve dosyalar. Her biri kendi arasında sıraya dizilir ve alt dizinlerin tamamı dosyalardan önce gösterilir. Örneğin sıralama isme göre azalan sırada yapılıyorsa ve FoldersFirst etkinse Zed dizini listede Beta dizininden ve Gamma ve Alpha dosyalarından önce yer alacaktır. Bu seçenek sadece FancyIndexing seçeneği etkinse etkili olacaktır.
    HTMLTable
    FancyIndexing seçeneği ile birlikte süslü listeleme için basit bir tablo oluşturur. UTF-8'in etkin olduğu platformlarda gereklidir. Bununla birlikte, Linux, WinNT gibi sağdan sola veya soldan sağa yazım yönünün değiştiği platformlarda dosya isimleri ve açıklamalar için bu özellikle gerekli olabilir.
    IconsAreLinks
    Bu seçenek FancyIndexing seçeneği ile birlikte süslü listelemede dosya simgesini dosyaya bir hiper bağ haline getirir.
    IconHeight[=benek-sayısı]
    Bu seçeneğin varlığı IconWidth seçeneği ile kullanıldığında dosya simgesinin img etiketinin height ve width özniteliklerini içermesine sebep olur. Böylece tarayıcının tüm simgelerin yüklenmesini beklemeden sayfa yerleşimi için bir ön hesaplama yapabilmesi mümkün olur. Seçenek bir değer belirtilmeksizin kullanıldığında Apache http tarafından atanmış standart simge yüksekliği öntanımlıdır. Bu seçenek sadece FancyIndexing seçeneği etkinse etkili olacaktır.
    IconWidth[=benek-sayısı]
    Bu seçeneğin varlığı IconHeight seçeneği ile kullanıldığında dosya simgesinin img etiketinin height ve width özniteliklerini içermesine sebep olur. Böylece tarayıcının tüm simgelerin yüklenmesini beklemeden sayfa yerleşimi için bir ön hesaplama yapabilmesi mümkün olur. Seçenek bir değer belirtilmeksizin kullanıldığında Apache httpd tarafından atanmış standart simge genişliği öntanımlıdır.
    IgnoreCase
    Bu seçenek etkin kılındığında isimler harf büyüklüğüne duyarsız sıralanır. Örneğin, isme göre artan sıralamada IgnoreCase etkinse Zeta dosyası alfa dosyasından sonra listelenir (Dikkat: GAMMA daima gamma’dan önce listelenir.)
    IgnoreClient
    Bu seçenek mod_autoindex’in listenin sıralanmasına etki edenler dahil tüm sorgu değişkenlerini yoksaymasına sebep olur (örtük olarak SuppressColumnSorting uygulanır).
    NameWidth=[n | *]

    NameWidth seçeneği dosya ismi sütunu için bir genişlik belirtebilmenizi mümkün kılar.

    Hiç belirtilmediğinde veya -NameWidth biçeminde belirtildiğinde mod_autoindex uygun genişliği kendisi hesaplayacaktır, fakat en fazla 20 karakter olabilir.

    NameWidth=n ile sütun genişliği n bayt genişlikte sabitlenir.

    NameWidth=* olduğunda ise sütun genişliği en geniş satırın sığacağı kadar arttırılır.

    ScanHTMLTitles
    Bu seçenek süslü listeleme için HTML belgelerden sayfa başlığının okunmasını sağlar. Dosya için AddDescription ile bir açıklama tanımlanmımışsa Apache httpd belgenin title etiketinin içeriğini okuyacaktır. Bu seçenek işlemciyi ve diski fazla meşgul eder.
    ShowForbidden
    Alt istek HTTP_UNAUTHORIZED veya HTTP_FORBIDDEN döndürdüğünden dolayı normalde gizli olan dosyalar bu seçenek belirtilmişse listede gösterilir.
    SuppressColumnSorting
    Bu seçenek belirtilmişse Apache, süslü dizin listesinde sütun başlıklarını sıralama için hiper bağ haline getirmeyecektir. Sütun başlıkları için öntanımlı davranış hiper bağ olmak olup bunlar seçilerek dizin listesinin o sütundaki değerlere göre sıralanması sağlanır. Bu davranış IndexOptions IgnoreClient ile sağlanmaktadır.
    SuppressDescription
    Süslü listelemede dosya açıklamalarının gösterilmesini engeller. Öntanımlı olarak hiçbir dosya açıklaması tanımlı değildir, dolayısıyla bu seçenek kullanılarak ekran genişliğinden 23 karakterlik yer kazanılabilir. Dosya açıklamalarının nasıl belirlendiğini öğrenmek için AddDescription yönergesinin açıklamasına bakınız. Ayrıca, açıklama sütununun genişliğini ayarlayan DescriptionWidth dizin listeleme seçeneğine de bakınız. Bu seçenek sadece FancyIndexing seçeneği etkinse etkili olacaktır.
    SuppressHTMLPreamble
    Eğer dizin aslında HeaderName yönergesi ile belirtilmiş bir dosya içeriyorsa modül normal olarak bu dosyanın içeriğinin öncesine HTML başlangıç etiketlerini (<html>, <head>, vs.) yerleştirir. Bu seçenek bu davranışı iptal ederek modülün dosya içeriğinin başlangıcına bir şey eklememesini sağlar. Bu durumda başlık dosyasının uygun HTML etiketlerini içermesi gerekir. Böyle bir başlık dosyası yoksa normal olarak HTML başlangıç etiketleri üretilir. Eğer bir ReadmeName yönergesi de belirtilirse ve bu dosya mevcutsa, kapayan </body></html> etiketleri de çıktı bulunmaz. Buna dayanarak bu etiketleri de sizin koymanız gerekebilir.
    SuppressIcon
    Süslü dizin listesinde dosya simgelerinin gösterilmesini engeller. Son belirtim, süslü dizin listelemede kullanılan pre etiketinin içeriğinde img ve hr etiketlerinin bulunmasına izin vermediğinden SuppressIcon ve SuppressRules seçenekleri birlikte kullanılarak HTML 3.2 belirtimine uyum sağlanır.
    SuppressLastModified
    Süslü dizin listelemede son değişiklik tarihinin gösterilmesi engellenir. Bu seçenek sadece FancyIndexing seçeneği etkinse etkili olacaktır.
    SuppressRules
    Dizin listelemede hr etiketinin kullanımını engeller. Son belirtim, süslü dizin listelemede kullanılan pre etiketinin içeriğinde img ve hr etiketlerinin bulunmasına izin vermediğinden SuppressIcon ve SuppressRules seçenekleri birlikte kullanılarak HTML 3.2 belirtimine uyum sağlanır. Bu seçenek sadece FancyIndexing seçeneği etkinse etkili olacaktır.
    SuppressSize
    Süslü dizin listelemede dosya boyutunun gösterilmesi engellenir. Bu seçenek sadece FancyIndexing seçeneği etkinse etkili olacaktır.
    TrackModified
    Bu seçenek listelenen dizin için HTTP başlığında Last-Modified ve ETag alanlarının dönmesini sağlar. Sadece işletim sistemi veya dosya sistemi uygun stat() sonuçlarını döndürüyorsa bu geçerlidir. Bazı Unix sistemleri ve OS/2'nin JFS'si ile Win32’nin NTFS’i böyledir. Ancak OS/2 ve Win32 FAT dosya sistemleri böyle değildir. Bu özellik etkin kılındığında istemci veya vekil HEAD istekleriyle dosya listesindeki değişiklikleri izleyebilirler. Yalnız, bazı işletim sistemlerinin yeni ve silinmiş dosyaların izini iyi sürdüğü halde dizin içindeki dosyaların boyut ve tarih değişikliklerini izlemediklerine dikkat ediniz. Mevcut bir dosyanın boyut ve zaman damgasındaki değişiklikler Last-Modified başlığının güncellenmesini tüm Unix sistemlerinde sağlamaz. Bu gibi durumlarda bu seçeneğin kapalı kalması daha iyidir.
    Type=MIME-türü
    Type anahtar sözcüğü üretilen sayfanın MIME içerik türünün belirtilebilmesini sağlar. text/html öntanımlıdır.
    IndexOptions Type=text/plain
    UseOldDateFormat (Apache HTTP Sunucusu 2.4.26 ve sonrasında)
    Last Modified alanı tarafından kullanılan tarih biçemi "%Y-%m-%d %H:%M" dikkatsizlik sonucu 2.4.0 sürümünde "%d-%b-%Y %H:%M" olarak değişmiştir. Bu seçenekle tarih biçemini 2.2 ve öncesindeki biçemiyle kullanabilirsiniz.
    VersionSort
    VersionSort seçeneği isimlerinde sürüm numarası bulunan dosyaların sayısal sıralamaya uygun olarak sıralanmalarını sağlar. Normalde sıralama karakter sıralamasına göre yapılır, ardından sürüm numaralı dosyalar veya açıklamalar kendi aralarında sayısal sıralamaya tabi tutulur.

    Örnek:

    foo-1.7
    foo-1.7.2
    foo-1.7.12
    foo-1.8.2
    foo-1.8.2a
    foo-1.12

    Sıfır ile başlalan numaralara ondalık sayı muamelesi yapılır:

    foo-1.001
    foo-1.002
    foo-1.030
    foo-1.04

    XHTML
    XHTML seçeneği mod_autoindex’in kodu HTML 3.2’ye değil XHTML 1.0’a uygun üretmesini sağlar. Bu seçenek sadece FancyIndexing seçeneği etkinse etkili olacaktır.
    + veya - Önekli Seçenekler

    Çok sayıda IndexOptions yönergesinin işlenebileceğine dikkat edin.

    • Tek bir dizin için çok sayıda IndexOptions yönergesi belirtilmiÅŸse bunlar ayrı ayrı deÄŸil birlikte ele alınır. Yani,
      <Directory "/foo">
          IndexOptions HTMLTable
          IndexOptions SuppressColumnsorting
      </Directory>

      yapılandırmasındaki IndexOptions yönergeleri

      IndexOptions HTMLTable SuppressColumnsorting

      yönergesine eşdeğerdir.

    • Seçeneklerde + veya - önekleri kullanılabilmektedir.

    + veya - önekli seçeneklere rastlandığında bunlar mevcut (üst dizinden miras alınanlar ve/veya önceki atamalar) IndexOptions yönergelerine uygulanır. Ancak, önek kullanılmamış bir seçeneğe raslandığında, o noktada önceki ve miras alınmış bu tür seçenekler iptal edilir. Şu örneği ele alalım:

    IndexOptions +ScanHTMLTitles -IconsAreLinks FancyIndexing
    IndexOptions +SuppressSize

    Bunun net etkisi IndexOptions FancyIndexing +SuppressSize atamasına eşdeğerdir, çünkü öneksiz FancyIndexing seçeneği kendinden önceki önekli seçenekleri iptal etmiş fakat hemen ardından eklenmelerine izin vermiştir.

    Belli bir dizine önceki seçenekleri temizleyerek koşulsuz olarak tamamen yeni seçenekler atamak istiyorsanız IndexOptions yönergesinde seçenekleri + veya - öneklerini kullanmadan belirtiniz.

    top

    IndexOrderDefault Yönergesi

    Açıklama:Dizin içerik listesinin öntanımlı sıralamasını belirler.
    Sözdizimi:IndexOrderDefault Ascending|Descending Name|Date|Size|Description
    Öntanımlı:IndexOrderDefault Ascending Name
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    IndexOrderDefault yönergesi FancyIndexing seçeneğinin etkin olduğu durumda işe yarar. Öntanımlı olarak süslü listelemede dizin içeriği dosya ismine göre artan sıralamayla listelenir. IndexOrderDefault yönergesi bu öntanımlı sıralamanın değiştirilmesini mümkün kılar.

    IndexOrderDefault yönergesi iki değer alır. İlki sıralama yönünü belirtmek üzere Ascending (küçükten büyüğe) veya Descending (büyükten küçüğe) olmak zorundadır. İkinci değer ise birincil sıralama anahtarını belirtmek üzere Name, Date, Size ve Description sözcüklerinden biri olmalıdır (anlamları sırayla: İsim, Tarih, Boyut, Açıklama). İkincil sıralama anahtarı daima artan sıralamayla dosya ismidir.

    Sütunun tepesindeki sıralama bağını kaldırmak için SuppressColumnSorting seçeneğinin yanında, sıralama tercihlerinizi geçersiz kılmak için sorgu dizgesine elle sıralama seçenekleri eklenmesini engellemek için IgnoreClient seçeneğini de kullanarak istemcinin listeyi yeniden sıralamasını engelleyebilirsiniz.

    top

    IndexStyleSheet Yönergesi

    Açıklama:Dizin listesine bir biçembent ekler.
    Sözdizimi:IndexStyleSheet url-yolu
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    IndexStyleSheet yönergesi dizin listelemesi için kullanılacak biçembent dosyasının ismini belirtmek için kullanılır.

    IndexStyleSheet "/css/style.css"

    Bu yönergenin IndexOptions HTMLTable ile birlikte kullanılması sonuçlanan HTML dosyasına bir miktar CSS sınıfı ekler. Tablonun tamamı indexlist için bir CSS kimliği verir ve aşağıdaki sınıflar listenin çeşitli parçalarıyla ilişkilendirilir:

    SınıfTanım
    tr.indexhead Liste satırının başlığı
    th.indexcolicon and td.indexcolicon Simge sütunu
    th.indexcolname and td.indexcolname Dosya ismi sütunu
    th.indexcollastmod and td.indexcollastmod Son değişiklik sütunu
    th.indexcolsize and td.indexcolsize Dosya boyutu sütunu
    th.indexcoldesc and td.indexcoldesc Açıklama sütunu
    tr.breakrow Tablonun altınaki yatay çizgi
    tr.odd and tr.even Tek ve çift satırlar
    top

    ReadmeName Yönergesi

    Açıklama:Dizin listesinin sonuna yerleştirilecek dosyanın ismini belirler.
    Sözdizimi:ReadmeName dosya-ismi
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_autoindex

    ReadmeName yönergesi dizin listesinin sonuna eklenecek dosyanın ismini belirler. dosya-ismi ile listeye dahil edilecek dosyanın ismi listelenen dizine göreli olarak belirtilir. Eğer dosya ismi 2. örnekteki gibi bir bölü çizgisi ile başlıyorsa DocumentRoot’a göreli belirtildiği varsayılır.

    # 1. Örnek
    ReadmeName FOOTER.html
    # 2. Örnek
    ReadmeName /include/FOOTER.html

    Ayrıca bu davranışın daha ayrıntılı ele alındığı HeaderName yönergesine de bakınız.

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_sed.html.fr.utf80000644000000000000500000003014013412755316020020 0ustar rootsrc mod_sed - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_sed

    Langues Disponibles:  en  |  fr 

    Description:Filtre les contenus en entrée (requêtes) et en sortie (réponses) en utilisant la syntaxe de sed
    Statut:
    Identificateur de Module:sed_module
    Fichier Source:mod_sed.c sed0.c sed1.c regexp.c regexp.h sed.h
    Compatibilité:Disponible depuis la version 2.3 d'Apache

    Sommaire

    mod_sed est un filtre de contenu "in-process". Le filtre mod_sed fournit les commandes d'édition de sed implémentées par le programme sed de Solaris 10 comme décrit dans la page de manuel. Cependant, à la différence de sed, mod_sed ne reçoit pas de données sur son entrée standard. Au lieu de cela, le filtre agit sur les données échangées entre le client et le serveur. mod_sed peut être utilisé comme filtre en entrée ou en sortie. mod_sed est un filtre de contenu, ce qui signifie qu'on ne peut pas l'utiliser pour modifier les en-têtes http du client ou du serveur.

    Le filtre en sortie mod_sed accepte un tronçon de données, exécute le script sed sur ces données, puis génère une sortie qui est transmise au filtre suivant dans la chaîne.

    Le filtre en entrée mod_sed reçoit des données en provenance du filtre suivant dans la chaîne, exécute les scripts sed, et renvoie les données générées au filtre appelant dans la chaîne de filtrage.

    Les filtres en entrée ou en sortie ne traitent les données que si des caractères newline sont détectés dans le contenu à filtrer. A la fin des données, ce qui reste est traité comme la dernière ligne.

    top

    Exemple de configuration

    Ajout d'un filtre en sortie

    # Dans l'exemple suivant, le filtre sed va remplacer la chaîne
    	 # "monday" par "MON" et la chaîne "sunday" par "SUN" dans les
    	 # documents html avant de les envoyer au client.
    <Directory "/var/www/docs/sed"> 
        AddOutputFilter Sed html 
        OutputSed "s/monday/MON/g" 
        OutputSed "s/sunday/SUN/g" 
    </Directory>

    Ajout d'un filtre en entrée

             # Dans l'exemple suivant, le filtre sed va remplacer la chaîne
    	 # "monday" par "MON" et la chaîne "sunday" par "SUN" dans les
    	 # données POST envoyées à PHP.
            <Directory "/var/www/docs/sed"> 
        AddInputFilter Sed php 
        InputSed "s/monday/MON/g" 
        InputSed "s/sunday/SUN/g" 
    </Directory>
    top

    Commandes sed

    Vous trouverez tous les détails à propos de la commande sed dans sa page de manuel.

    b
    Saut vers le label spécifié (similaire à goto).
    h
    Copie la ligne courante dans le tampon.
    H
    Ajoute la ligne courante au tampon.
    g
    Copie le contenu du tampon dans la ligne courante.
    G
    Ajoute le contenu du tampon à la ligne courante.
    x
    Echange les contenus du tampon et de la ligne courante.
    top

    Directive InputSed

    Description:Commande sed à exécuter pour le filtrage des données d'une requête (en général des données POST)
    Syntaxe:InputSed commande-sed
    Contexte:répertoire, .htaccess
    Statut:
    Module:mod_sed

    La directive InputSed permet de spécifier la commande sed à exécuter pour le filtrage des données (en général des données POST) d'une requête.

    top

    Directive OutputSed

    Description:Commande sed pour le filtrage des contenus de type réponse
    Syntaxe:OutputSed commande-sed
    Contexte:répertoire, .htaccess
    Statut:
    Module:mod_sed

    La directive OutputSed permet de spécifier la commande sed à exécuter dans le cadre du traitement d'une réponse.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authnz_fcgi.html.fr.utf80000644000000000000500000007252013412755316021556 0ustar rootsrc mod_authnz_fcgi - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authnz_fcgi

    Langues Disponibles:  en  |  fr 

    Description:Permet à une application d'autorisation FastCGI de gérer l'authentification et l'autorisation httpd.
    Statut:Extension
    Identificateur de Module:authnz_fcgi_module
    Fichier Source:mod_authnz_fcgi.c
    Compatibilité:Disponible à partir de la version 2.4.10 du serveur HTTP Apache

    Sommaire

    Ce module permet aux applications d'autorisation FastCGI d'authentifier les utilisateurs et de contrôler leur accès aux ressources. Il supporte les systèmes d'autorisation FastCGI génériques qui participent en une seule phase à l'authentification et à l'autorisation, ainsi que les processus d'authentification et d'autorisation spécifiques à Apache httpd qui interviennent en une ou plusieurs phases.

    Les processus d'autorisation FastCGI peuvent authentifier un utilisateur via son identificateur et son mot de passe comme dans le processus d'authentification basique, ou via un mécanisme arbitraire.

    top

    Modes d'invocation

    Les modes d'invocation des processus d'autorisation FastCGI que ce module supporte se distinguent par deux caractéristiques : le type et le mécanisme d'authentification.

    Le Type est simplement authn pour l'authentification, authz pour l'autorisation et authnz l'authentification et l'autorisation.

    Le mécanisme d'authentification fait référence aux mécanismes d'authentification et aux phases de traitement de la configuration de Apache httpd, et peut être AuthBasicProvider, Require, ou check_user_id. Les deux premiers mécanismes correspondent aux directives utilisées pour participer aux phases de traitement appropriées.

    Description de chaque mode:

    Type authn, mechanism AuthBasicProvider
    Dans ce mode, la variable FCGI_ROLE est définie à AUTHORIZER, et la variable FCGI_APACHE_ROLE à AUTHENTICATOR. L'application doit être spécifiée en tant que fournisseur de type authn via la directive AuthnzFcgiDefineProvider, et activée via la directive AuthBasicProvider. Lorsqu'elle est invoquée, l'application est censée authentifier le client à l'aide de l'identifiant et du mot de passe de l'utilisateur. Exemple d'application :
    #!/usr/bin/perl
    use FCGI;
    my $request = FCGI::Request();
    while ($request->Accept() >= 0) {
        die if $ENV{'FCGI_APACHE_ROLE'} ne "AUTHENTICATOR";
        die if $ENV{'FCGI_ROLE'}        ne "AUTHORIZER";
        die if !$ENV{'REMOTE_PASSWD'};
        die if !$ENV{'REMOTE_USER'};
    
        print STDERR "This text is written to the web server error log.\n";
    
        if ( ($ENV{'REMOTE_USER' } eq "foo" || $ENV{'REMOTE_USER'} eq "foo1") &&
            $ENV{'REMOTE_PASSWD'} eq "bar" ) {
            print "Status: 200\n";
            print "Variable-AUTHN_1: authn_01\n";
            print "Variable-AUTHN_2: authn_02\n";
            print "\n";
        }
        else {
            print "Status: 401\n\n";
        }
    }
    Exemple de configuration httpd :
    AuthnzFcgiDefineProvider authn FooAuthn fcgi://localhost:10102/
    <Location "/protected/">
      AuthType Basic
      AuthName "Restricted"
      AuthBasicProvider FooAuthn
      Require ...
    </Location>
    Type authz, mechanism Require
    Dans ce mode, la variable FCGI_ROLE est définie à AUTHORIZER et FCGI_APACHE_ROLE à AUTHORIZER. L'application doit être spécifiée en tant que fournisseur de type authz via la directive AuthnzFcgiDefineProvider. Lorsqu'elle est invoquée, l'application est censée contrôler les accès du client à l'aide de l'identifiant utilisateur et d'autres données contenues dans la requête. Exemple d'application :
    #!/usr/bin/perl
    use FCGI;
    my $request = FCGI::Request();
    while ($request->Accept() >= 0) {
        die if $ENV{'FCGI_APACHE_ROLE'} ne "AUTHORIZER";
        die if $ENV{'FCGI_ROLE'}        ne "AUTHORIZER";
        die if $ENV{'REMOTE_PASSWD'};
    
        print STDERR "This text is written to the web server error log.\n";
    
        if ($ENV{'REMOTE_USER'} eq "foo1") {
            print "Status: 200\n";
            print "Variable-AUTHZ_1: authz_01\n";
            print "Variable-AUTHZ_2: authz_02\n";
            print "\n";
        }
        else {
            print "Status: 403\n\n";
        }
    }
    Exemple de configuration httpd :
    AuthnzFcgiDefineProvider authz FooAuthz fcgi://localhost:10103/
    <Location "/protected/">
      AuthType ...
      AuthName ...
      AuthBasicProvider ...
      Require FooAuthz
    </Location>
    Type authnz, mechanism AuthBasicProvider + Require
    Dans ce mode qui supporte le protocole d'autorisation web server-agnostic FastCGI, la variable FCGI_ROLE est définie à AUTHORIZER et FCGI_APACHE_ROLE n'est pas définie. L'application doit être spécifiée en tant que fournisseur de type authnz via la directive AuthnzFcgiDefineProvider. L'application est censée assurer l'authentification et l'autorisation au cours d'une même invocation à l'aide de l'identifiant et du mot de passe de l'utilisateur et d'autres données contenues dans la requête. L'invocation de l'application intervient au cours de la phase d'authentification de l'API Apache httpd. Si l'application renvoie le code 200, et si le même fournisseur est invoqué au cours de la phase d'autorisation (via une directive Require), mod_authnz_fcgi renverra un code de type success pour la phase d'autorisation sans invoquer l'application. Exemple d'application :
    #!/usr/bin/perl
    use FCGI;
    my $request = FCGI::Request();
    while ($request->Accept() >= 0) {
        die if $ENV{'FCGI_APACHE_ROLE'};
        die if $ENV{'FCGI_ROLE'} ne "AUTHORIZER";
        die if !$ENV{'REMOTE_PASSWD'};
        die if !$ENV{'REMOTE_USER'};
    
        print STDERR "This text is written to the web server error log.\n";
    
        if ( ($ENV{'REMOTE_USER' } eq "foo" || $ENV{'REMOTE_USER'} eq "foo1") &&
            $ENV{'REMOTE_PASSWD'} eq "bar" &&
            $ENV{'REQUEST_URI'} =~ m%/bar/.*%) {
            print "Status: 200\n";
            print "Variable-AUTHNZ_1: authnz_01\n";
            print "Variable-AUTHNZ_2: authnz_02\n";
            print "\n";
        }
        else {
            print "Status: 401\n\n";
        }
    }
    Exemple de configuration httpd :
    AuthnzFcgiDefineProvider authnz FooAuthnz fcgi://localhost:10103/
    <Location "/protected/">
      AuthType Basic
      AuthName "Restricted"
      AuthBasicProvider FooAuthnz
      Require FooAuthnz
    </Location>
    Type authn, mechanism check_user_id
    Dans ce mode, la variable FCGI_ROLE est définie à AUTHORIZER et FCGI_APACHE_ROLE à AUTHENTICATOR. L'application doit être spécifiée en tant que fournisseur de type authn via une directive AuthnzFcgiDefineProvider. La directive AuthnzFcgiCheckAuthnProvider permet de l'invoquer. Exemple d'application :
    #!/usr/bin/perl
    use FCGI;
    my $request = FCGI::Request();
    while ($request->Accept() >= 0) {
        die if $ENV{'FCGI_APACHE_ROLE'} ne "AUTHENTICATOR";
        die if $ENV{'FCGI_ROLE'} ne "AUTHORIZER";
    
        # This authorizer assumes that the RequireBasicAuth option of 
        # AuthnzFcgiCheckAuthnProvider is On:
        die if !$ENV{'REMOTE_PASSWD'};
        die if !$ENV{'REMOTE_USER'};
    
        print STDERR "This text is written to the web server error log.\n";
    
        if ( ($ENV{'REMOTE_USER' } eq "foo" || $ENV{'REMOTE_USER'} eq "foo1") &&
            $ENV{'REMOTE_PASSWD'} eq "bar" ) {
            print "Status: 200\n";
            print "Variable-AUTHNZ_1: authnz_01\n";
            print "Variable-AUTHNZ_2: authnz_02\n";
            print "\n";
        }
        else {
            print "Status: 401\n\n";
            # If a response body is written here, it will be returned to
            # the client.
        }
    }
    Exemple de configuration httpd :
    AuthnzFcgiDefineProvider authn FooAuthn fcgi://localhost:10103/
    <Location "/protected/">
      AuthType ...
      AuthName ...
      AuthnzFcgiCheckAuthnProvider FooAuthn \
                                   Authoritative On \
                                   RequireBasicAuth Off \
                                   UserExpr "%{reqenv:REMOTE_USER}"
      Require ...
    </Location>
    top

    Exemples supplémentaires

    1. Si votre application supporte séparément les rôles d'authentification et d'autorisation (AUTHENTICATOR et AUTHORIZER), vous pouvez définir des fournisseurs séparés comme suit, même s'ils correspondent à la même application :
      AuthnzFcgiDefineProvider authn  FooAuthn  fcgi://localhost:10102/
      AuthnzFcgiDefineProvider authz  FooAuthz  fcgi://localhost:10102/
      Spécifie le fournisseur authn via la directive AuthBasicProvider et le fournisseur authz via la directive Require:
      AuthType Basic
      AuthName "Restricted"
      AuthBasicProvider FooAuthn
      Require FooAuthz
    2. Si votre application supporte le rôle générique AUTHORIZER (authentification et autorisation en une seule invocation), vous pouvez définir un fournisseur unique comme suit :
      AuthnzFcgiDefineProvider authnz FooAuthnz fcgi://localhost:10103/
      Spécifie le fournisseur authnz via les directives AuthBasicProvider et Require :
      AuthType Basic
      AuthName "Restricted"
      AuthBasicProvider FooAuthnz
      Require FooAuthnz
    top

    Limitations

    Les fonctionnalités suivantes ne sont pas encore implémentées :

    Vérificateur d'accès d'Apache httpd
    La phase access check de l'API Apache httpd est distincte des phases d'authentification et d'autorisation. Certaines autres implémentations de FastCGI supportent cette phase et lorsque c'est le cas, la variable FCGI_APACHE_ROLE est définie à ACCESS_CHECKER.
    Redirections (pipes) ou sockets locaux (Unix)
    Seuls les sockets TCP sont actuellement supportés.
    Support de mod_authn_socache
    Le support de l'interaction avec mod_authn_socache pour les applications qui interviennent dans le processus d'authentification d'Apache httpd serait souhaitable.
    Support de l'authentification de type digest à l'aide de AuthDigestProvider
    Cette limitation ne sera probablement jamais franchie car il n'existe aucun flux de données d'autorisation capable de lire dans un condensé de type hash.
    Gestion des processus applicatifs
    Cette fonctionnalité restera probablement hors de portée de ce module. Il faudra donc gérer les processus applicatifs d'une autre manière ; par exemple, fcgistarter permet de les démarrer.
    AP_AUTH_INTERNAL_PER_URI
    Tous les fournisseurs sont actuellement enregistrés en tant que AP_AUTH_INTERNAL_PER_CONF, ce qui signifie que les vérifications ne sont pas effectuées pour les sous-requêtes internes avec la même configuration de contrôle d'accès que la requête initiale.
    Conversion du jeu de caractères des données de protocole
    Si mod_authnz_fcgi s'exécute dans un environnement de compilation EBCDIC, toutes les données de protocole FastCGI sont écrites en EBCDIC et doivent être disponibles en EBCDIC.
    Plusieurs requêtes pour une connexion
    Actuellement, la connexion au fournisseur d'autorisation FastCGI est fermée après chaque phase de traitement. Par exemple, si le fournisseur d'autorisation gère séparément les phases authn et authz, deux connexions seront nécessaires.
    Redirection de certains URIs
    Les URIs en provenance des clients ne peuvent pas être redirigés selon une table de redirection, comme avec la directive ProxyPass utilisée avec les répondeurs FastCGI.
    top

    Journalisation

    1. Les erreurs de traitement sont journalisées à un niveau error ou supérieur.
    2. Les messages envoyés par l'application sont journalisés au niveau warn.
    3. Les messages de deboguage à caractère général sont journalisés au niveau debug.
    4. Les variables d'environnement transmises à l'application sont journalisées au niveau trace2. La valeur de la variable REMOTE_PASSWD sera occultée, mais toute autre donnée sensible sera visible dans le journal.
    5. Toutes les entrées/sorties entre le module et l'application FastCGI, y compris les variables d'environnement, seront journalisées au format imprimable et hexadécimal au niveau trace5. Toutes les données sensibles seront visibles dans le journal.

    La directive LogLevel permet de configurer un niveau de journalisation spécifique à mod_authnz_fcgi. Par exemple :

    LogLevel info authnz_fcgi:trace8
    top

    Directive AuthnzFcgiCheckAuthnProvider

    Description:Permet à une application FastCGI de gérer l'accroche d'authentification check_authn.
    Syntaxe:AuthnzFcgiCheckAuthnProvider provider-name|None option ...
    Défaut:none
    Contexte:répertoire
    Statut:Extension
    Module:mod_authnz_fcgi

    Cette directive permet de confier à une application FastCGI la gestion d'une phase spécifique du processus d'authentification ou d'autorisation.

    Certaines fonctionnalités des fournisseurs d'autorisation FastCGI nécessitent cette directive en lieu et place de AuthBasicProvider pour pouvoir être activées :

    • L'authentification de type autre que basique ; en général, détermination de l'identifiant utilisateur et renvoi de sa valeur depuis le fournisseur d'autorisation ; voir l'option UserExpr ci-dessous
    • Sélection d'un code de réponse personnalisé ; en cas de code de réponse autre que 200 en provenance du fournisseur d'autorisation, c'est ce code qui sera utilisé comme code d'état de la réponse
    • Définition du corps d'une réponse autre que 200 ; si le fournisseur d'autorisation renvoie un corps de réponse avec un code autre que 200, c'est ce corps de réponse qui sera renvoyé au client ; la longueur du texte est limitée à 8192 octets
    provider-name
    C'est le nom du fournisseur défini au préalable via la directive AuthnzFcgiDefineProvider.
    None
    Spécifiez None pour désactiver un fournisseur activé avec cette même directive dans une autre portée, par exemple dans un répertoire parent.
    option
    Les options suivantes sont supportées :
    Authoritative On|Off (par défaut On)
    Cette option permet de définir si l'appel à d'autres modules est autorisé lorsqu'un fournisseur d'autorisation FastCGI a été configuré et si la requête échoue.
    DefaultUser id utilisateur
    Lorsque le fournisseur d'autorisation donne son accord, et si UserExpr est défini et correspond à une chaîne vide, (par exemple, si le fournisseur d'autorisation ne renvoie aucune variable), c'est cette valeur qui sera utilisée comme id utilisateur par défaut. Cela se produit souvent lorsqu'on se trouve dans un contexte d'invité, ou d'utilisateur non authentifié ; les utilisateurs et invités se voient alors attribué un id utilisateur spécifique qui permettra de se connecter et d'accéder à certaines ressources.
    RequireBasicAuth On|Off (par défaut Off)
    Cette option permet de définir si l'authentification basique est requise avant de transmettre la requête au fournisseur d'autorisation. Dans l'affirmative, le fournisseur d'autorisation ne sera invoqué qu'en présence d'un id utilisateur et d'un mot de passe ; si ces deux éléments ne sont pas présents, un code d'erreur 401 sera renvoyé
    UserExpr expr (pas de valeur par défaut)
    Lorsque le client ne fournit pas l'authentification basique et si le fournisseur d'autorisation détermine l'id utilisateur, cette expression, évaluée après l'appel au fournisseur d'autorisation, permet de déterminer l'id utilisateur. Cette expression se conforme à la syntaxe ap_expr et doit correspondre à une chaîne de caractères. Une utilisation courante consiste à référencer la définition d'une Variable-XXX renvoyée par le fournisseur d'autorisation via une option du style UserExpr "%{reqenv:XXX}". Si cette option est spécifiée, et si l'id utilisateur ne peut pas être définie via l'expression après une authentification réussie, la requête sera rejetée avec un code d'erreur 500.
    top

    Directive AuthnzFcgiDefineProvider

    Description:Définit une application FastCGI en tant que fournisseur d'authentification et/ou autorisation
    Syntaxe:AuthnzFcgiDefineProvider type provider-name backend-address
    Défaut:none
    Contexte:configuration globale
    Statut:Extension
    Module:mod_authnz_fcgi

    Cette directive permet de définir une application FastCGI en tant que fournisseur pour une phase particulière d'authentification ou d'autorisation.

    type
    Les valeurs de ce paramètre sont authn pour l'authentification, authz pour l'autorisation, ou authnz pour un fournisseur d'autorisation générique FastCGI qui effectue les deux vérifications.
    provider-name
    Ce paramètre permet d'associer un nom au fournisseur ; ce nom pourra être utilisé dans des directives comme AuthBasicProvider et Require.
    backend-address
    Ce paramètre permet de spécifier l'adresse de l'application sous la forme fcgi://hostname:port/. Le ou les processus de l'application doivent être gérés indépendamment comme avec fcgistarter.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_http.html0000644000000000000500000000034013362070302020156 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy_http.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_proxy_http.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_cache.html.en0000644000000000000500000021013713420146431017413 0ustar rootsrc mod_cache - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_cache

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:RFC 2616 compliant HTTP caching filter.
    Status:Extension
    Module Identifier:cache_module
    Source File:mod_cache.c

    Summary

    This module should be used with care, as when the CacheQuickHandler directive is in its default value of on, the Allow and Deny directives will be circumvented. You should not enable quick handler caching for any content to which you wish to limit access by client host name, address or environment variable.

    mod_cache implements an RFC 2616 compliant HTTP content caching filter, with support for the caching of content negotiated responses containing the Vary header.

    RFC 2616 compliant caching provides a mechanism to verify whether stale or expired content is still fresh, and can represent a significant performance boost when the origin server supports conditional requests by honouring the If-None-Match HTTP request header. Content is only regenerated from scratch when the content has changed, and not when the cached entry expires.

    As a filter, mod_cache can be placed in front of content originating from any handler, including flat files (served from a slow disk cached on a fast disk), the output of a CGI script or dynamic content generator, or content proxied from another server.

    In the default configuration, mod_cache inserts the caching filter as far forward as possible within the filter stack, utilising the quick handler to bypass all per request processing when returning content to the client. In this mode of operation, mod_cache may be thought of as a caching proxy server bolted to the front of the webserver, while running within the webserver itself.

    When the quick handler is switched off using the CacheQuickHandler directive, it becomes possible to insert the CACHE filter at a point in the filter stack chosen by the administrator. This provides the opportunity to cache content before that content is personalised by the mod_include filter, or optionally compressed by the mod_deflate filter.

    Under normal operation, mod_cache will respond to and can be controlled by the Cache-Control and Pragma headers sent from a client in a request, or from a server within a response. Under exceptional circumstances, mod_cache can be configured to override these headers and force site specific behaviour, however such behaviour will be limited to this cache only, and will not affect the operation of other caches that may exist between the client and server, and as a result is not recommended unless strictly necessary.

    RFC 2616 allows for the cache to return stale data while the existing stale entry is refreshed from the origin server, and this is supported by mod_cache when the CacheLock directive is suitably configured. Such responses will contain a Warning HTTP header with a 110 response code. RFC 2616 also allows a cache to return stale data when the attempt made to refresh the stale data returns an error 500 or above, and this behaviour is supported by default by mod_cache. Such responses will contain a Warning HTTP header with a 111 response code.

    mod_cache requires the services of one or more storage management modules. The following storage management modules are included in the base Apache distribution:

    mod_cache_disk
    Implements a disk based storage manager. Headers and bodies are stored separately on disk, in a directory structure derived from the md5 hash of the cached URL. Multiple content negotiated responses can be stored concurrently, however the caching of partial content is not supported by this module. The htcacheclean tool is provided to list cached URLs, remove cached URLs, or to maintain the size of the disk cache within size and inode limits.
    mod_cache_socache
    Implements a shared object cache based storage manager. Headers and bodies are stored together beneath a single key based on the URL of the response being cached. Multiple content negotiated responses can be stored concurrently, however the caching of partial content is not supported by this module.

    Further details, discussion, and examples, are provided in the Caching Guide.

    top
    top

    Sample Configuration

    Sample httpd.conf

    #
    # Sample Cache Configuration
    #
    LoadModule cache_module modules/mod_cache.so
    <IfModule mod_cache.c>
        LoadModule cache_disk_module modules/mod_cache_disk.so
        <IfModule mod_cache_disk.c>
            CacheRoot "c:/cacheroot"
            CacheEnable disk  "/"
            CacheDirLevels 5
            CacheDirLength 3
        </IfModule>
    
        # When acting as a proxy, don't cache the list of security updates
        CacheDisable "http://security.update.server/update-list/"
    </IfModule>
    top

    Avoiding the Thundering Herd

    When a cached entry becomes stale, mod_cache will submit a conditional request to the backend, which is expected to confirm whether the cached entry is still fresh, and send an updated entity if not.

    A small but finite amount of time exists between the time the cached entity becomes stale, and the time the stale entity is fully refreshed. On a busy server, a significant number of requests might arrive during this time, and cause a thundering herd of requests to strike the backend suddenly and unpredictably.

    To keep the thundering herd at bay, the CacheLock directive can be used to define a directory in which locks are created for URLs in flight. The lock is used as a hint by other requests to either suppress an attempt to cache (someone else has gone to fetch the entity), or to indicate that a stale entry is being refreshed (stale content will be returned in the mean time).

    Initial caching of an entry

    When an entity is cached for the first time, a lock will be created for the entity until the response has been fully cached. During the lifetime of the lock, the cache will suppress the second and subsequent attempt to cache the same entity. While this doesn't hold back the thundering herd, it does stop the cache attempting to cache the same entity multiple times simultaneously.

    Refreshment of a stale entry

    When an entity reaches its freshness lifetime and becomes stale, a lock will be created for the entity until the response has either been confirmed as still fresh, or replaced by the backend. During the lifetime of the lock, the second and subsequent incoming request will cause stale data to be returned, and the thundering herd is kept at bay.

    Locks and Cache-Control: no-cache

    Locks are used as a hint only to enable the cache to be more gentle on backend servers, however the lock can be overridden if necessary. If the client sends a request with a Cache-Control header forcing a reload, any lock that may be present will be ignored, and the client's request will be honored immediately and the cached entry refreshed.

    As a further safety mechanism, locks have a configurable maximum age. Once this age has been reached, the lock is removed, and a new request is given the opportunity to create a new lock. This maximum age can be set using the CacheLockMaxAge directive, and defaults to 5 seconds.

    Example configuration

    Enabling the cache lock

    #
    # Enable the cache lock
    #
    <IfModule mod_cache.c>
        CacheLock on
        CacheLockPath "/tmp/mod_cache-lock"
        CacheLockMaxAge 5
    </IfModule>
    top

    Fine Control with the CACHE Filter

    Under the default mode of cache operation, the cache runs as a quick handler, short circuiting the majority of server processing and offering the highest cache performance available.

    In this mode, the cache bolts onto the front of the server, acting as if a free standing RFC 2616 caching proxy had been placed in front of the server.

    While this mode offers the best performance, the administrator may find that under certain circumstances they may want to perform further processing on the request after the request is cached, such as to inject personalisation into the cached page, or to apply authorization restrictions to the content. Under these circumstances, an administrator is often forced to place independent reverse proxy servers either behind or in front of the caching server to achieve this.

    To solve this problem the CacheQuickHandler directive can be set to off, and the server will process all phases normally handled by a non-cached request, including the authentication and authorization phases.

    In addition, the administrator may optionally specify the precise point within the filter chain where caching is to take place by adding the CACHE filter to the output filter chain.

    For example, to cache content before applying compression to the response, place the CACHE filter before the DEFLATE filter as in the example below:

    # Cache content before optional compression
    CacheQuickHandler off
    AddOutputFilterByType CACHE;DEFLATE text/plain

    Another option is to have content cached before personalisation is applied by mod_include (or another content processing filter). In this example templates containing tags understood by mod_include are cached before being parsed:

    # Cache content before mod_include and mod_deflate
    CacheQuickHandler off
    AddOutputFilterByType CACHE;INCLUDES;DEFLATE text/html

    You may place the CACHE filter anywhere you wish within the filter chain. In this example, content is cached after being parsed by mod_include, but before being processed by mod_deflate:

    # Cache content between mod_include and mod_deflate
    CacheQuickHandler off
    AddOutputFilterByType INCLUDES;CACHE;DEFLATE text/html

    Warning:

    If the location of the CACHE filter in the filter chain is changed for any reason, you may need to flush your cache to ensure that your data served remains consistent. mod_cache is not in a position to enforce this for you.
    top

    Cache Status and Logging

    Once mod_cache has made a decision as to whether or not an entity is to be served from cache, the detailed reason for the decision is written to the subprocess environment within the request under the cache-status key. This reason can be logged by the LogFormat directive as follows:

    LogFormat "%{cache-status}e ..."

    Based on the caching decision made, the reason is also written to the subprocess environment under one the following four keys, as appropriate:

    cache-hit
    The response was served from cache.
    cache-revalidate
    The response was stale and was successfully revalidated, then served from cache.
    cache-miss
    The response was served from the upstream server.
    cache-invalidate
    The cached entity was invalidated by a request method other than GET or HEAD.

    This makes it possible to support conditional logging of cached requests as per the following example:

    CustomLog "cached-requests.log" common env=cache-hit
    CustomLog "uncached-requests.log" common env=cache-miss
    CustomLog "revalidated-requests.log" common env=cache-revalidate
    CustomLog "invalidated-requests.log" common env=cache-invalidate

    For module authors, a hook called cache_status is available, allowing modules to respond to the caching outcomes above in customised ways.

    top

    CacheDefaultExpire Directive

    Description:The default duration to cache a document when no expiry date is specified.
    Syntax:CacheDefaultExpire seconds
    Default:CacheDefaultExpire 3600 (one hour)
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache

    The CacheDefaultExpire directive specifies a default time, in seconds, to cache a document if neither an expiry date nor last-modified date are provided with the document. The value specified with the CacheMaxExpire directive does not override this setting.

    CacheDefaultExpire 86400
    top

    CacheDetailHeader Directive

    Description:Add an X-Cache-Detail header to the response.
    Syntax:CacheDetailHeader on|off
    Default:CacheDetailHeader off
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache
    Compatibility:Available in Apache 2.3.9 and later

    When the CacheDetailHeader directive is switched on, an X-Cache-Detail header will be added to the response containing the detailed reason for a particular caching decision.

    It can be useful during development of cached RESTful services to have additional information about the caching decision written to the response headers, so as to confirm whether Cache-Control and other headers have been correctly used by the service and client.

    If the normal handler is used, this directive may appear within a <Directory> or <Location> directive. If the quick handler is used, this directive must appear within a server or virtual host context, otherwise the setting will be ignored.

    # Enable the X-Cache-Detail header
    CacheDetailHeader on

    X-Cache-Detail: "conditional cache hit: entity refreshed" from localhost

    top

    CacheDisable Directive

    Description:Disable caching of specified URLs
    Syntax:CacheDisable url-string | on
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache

    The CacheDisable directive instructs mod_cache to not cache urls at or below url-string.

    Example

    CacheDisable "/local_files"

    If used in a <Location> directive, the path needs to be specified below the Location, or if the word "on" is used, caching for the whole location will be disabled.

    Example

    <Location "/foo">
        CacheDisable on
    </Location>

    The no-cache environment variable can be set to disable caching on a finer grained set of resources in versions 2.2.12 and later.

    See also

    top

    CacheEnable Directive

    Description:Enable caching of specified URLs using a specified storage manager
    Syntax:CacheEnable cache_type [url-string]
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_cache
    Compatibility:A url-string of '/' applied to forward proxy content in 2.2 and earlier.

    The CacheEnable directive instructs mod_cache to cache urls at or below url-string. The cache storage manager is specified with the cache_type argument. The CacheEnable directive can alternatively be placed inside either <Location> or <LocationMatch> sections to indicate the content is cacheable. cache_type disk instructs mod_cache to use the disk based storage manager implemented by mod_cache_disk. cache_type socache instructs mod_cache to use the shared object cache based storage manager implemented by mod_cache_socache.

    In the event that the URL space overlaps between different CacheEnable directives (as in the example below), each possible storage manager will be run until the first one that actually processes the request. The order in which the storage managers are run is determined by the order of the CacheEnable directives in the configuration file. CacheEnable directives within <Location> or <LocationMatch> sections are processed before globally defined CacheEnable directives.

    When acting as a forward proxy server, url-string must minimally begin with a protocol for which caching should be enabled.

    # Cache content (normal handler only)
    CacheQuickHandler off
    <Location "/foo">
        CacheEnable disk
    </Location>
    
    # Cache regex (normal handler only)
    CacheQuickHandler off
    <LocationMatch "foo$">
        CacheEnable disk
    </LocationMatch>
    
    # Cache all but forward proxy url's (normal or quick handler)
    CacheEnable  disk  /
    
    # Cache FTP-proxied url's (normal or quick handler)
    CacheEnable  disk  ftp://
    
    # Cache forward proxy content from www.example.org (normal or quick handler)
    CacheEnable  disk  http://www.example.org/

    A hostname starting with a "*" matches all hostnames with that suffix. A hostname starting with "." matches all hostnames containing the domain components that follow.

    # Match www.example.org, and fooexample.org
    CacheEnable  disk  "http://*example.org/"
    # Match www.example.org, but not fooexample.org
    CacheEnable  disk  "http://.example.org/"

    The no-cache environment variable can be set to disable caching on a finer grained set of resources in versions 2.2.12 and later.

    See also

    top

    CacheHeader Directive

    Description:Add an X-Cache header to the response.
    Syntax:CacheHeader on|off
    Default:CacheHeader off
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache
    Compatibility:Available in Apache 2.3.9 and later

    When the CacheHeader directive is switched on, an X-Cache header will be added to the response with the cache status of this response. If the normal handler is used, this directive may appear within a <Directory> or <Location> directive. If the quick handler is used, this directive must appear within a server or virtual host context, otherwise the setting will be ignored.

    HIT
    The entity was fresh, and was served from cache.
    REVALIDATE
    The entity was stale, was successfully revalidated and was served from cache.
    MISS
    The entity was fetched from the upstream server and was not served from cache.
    # Enable the X-Cache header
    CacheHeader on
    X-Cache: HIT from localhost
    top

    CacheIgnoreCacheControl Directive

    Description:Ignore request to not serve cached content to client
    Syntax:CacheIgnoreCacheControl On|Off
    Default:CacheIgnoreCacheControl Off
    Context:server config, virtual host
    Status:Extension
    Module:mod_cache

    Ordinarily, requests containing a Cache-Control: no-cache or Pragma: no-cache header value will not be served from the cache. The CacheIgnoreCacheControl directive allows this behavior to be overridden. CacheIgnoreCacheControl On tells the server to attempt to serve the resource from the cache even if the request contains no-cache header values. Resources requiring authorization will never be cached.

    CacheIgnoreCacheControl On

    Warning:

    This directive will allow serving from the cache even if the client has requested that the document not be served from the cache. This might result in stale content being served.

    See also

    top

    CacheIgnoreHeaders Directive

    Description:Do not store the given HTTP header(s) in the cache.
    Syntax:CacheIgnoreHeaders header-string [header-string] ...
    Default:CacheIgnoreHeaders None
    Context:server config, virtual host
    Status:Extension
    Module:mod_cache

    According to RFC 2616, hop-by-hop HTTP headers are not stored in the cache. The following HTTP headers are hop-by-hop headers and thus do not get stored in the cache in any case regardless of the setting of CacheIgnoreHeaders:

    • Connection
    • Keep-Alive
    • Proxy-Authenticate
    • Proxy-Authorization
    • TE
    • Trailers
    • Transfer-Encoding
    • Upgrade

    CacheIgnoreHeaders specifies additional HTTP headers that should not to be stored in the cache. For example, it makes sense in some cases to prevent cookies from being stored in the cache.

    CacheIgnoreHeaders takes a space separated list of HTTP headers that should not be stored in the cache. If only hop-by-hop headers not should be stored in the cache (the RFC 2616 compliant behaviour), CacheIgnoreHeaders can be set to None.

    Example 1

    CacheIgnoreHeaders Set-Cookie

    Example 2

    CacheIgnoreHeaders None

    Warning:

    If headers like Expires which are needed for proper cache management are not stored due to a CacheIgnoreHeaders setting, the behaviour of mod_cache is undefined.
    top

    CacheIgnoreNoLastMod Directive

    Description:Ignore the fact that a response has no Last Modified header.
    Syntax:CacheIgnoreNoLastMod On|Off
    Default:CacheIgnoreNoLastMod Off
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache

    Ordinarily, documents without a last-modified date are not cached. Under some circumstances the last-modified date is removed (during mod_include processing for example) or not provided at all. The CacheIgnoreNoLastMod directive provides a way to specify that documents without last-modified dates should be considered for caching, even without a last-modified date. If neither a last-modified date nor an expiry date are provided with the document then the value specified by the CacheDefaultExpire directive will be used to generate an expiration date.

    CacheIgnoreNoLastMod On
    top

    CacheIgnoreQueryString Directive

    Description:Ignore query string when caching
    Syntax:CacheIgnoreQueryString On|Off
    Default:CacheIgnoreQueryString Off
    Context:server config, virtual host
    Status:Extension
    Module:mod_cache

    Ordinarily, requests with query string parameters are cached separately for each unique query string. This is according to RFC 2616/13.9 done only if an expiration time is specified. The CacheIgnoreQueryString directive tells the cache to cache requests even if no expiration time is specified, and to reply with a cached reply even if the query string differs. From a caching point of view the request is treated as if having no query string when this directive is enabled.

    CacheIgnoreQueryString On
    top

    CacheIgnoreURLSessionIdentifiers Directive

    Description:Ignore defined session identifiers encoded in the URL when caching
    Syntax:CacheIgnoreURLSessionIdentifiers identifier [identifier] ...
    Default:CacheIgnoreURLSessionIdentifiers None
    Context:server config, virtual host
    Status:Extension
    Module:mod_cache

    Sometimes applications encode the session identifier into the URL like in the following Examples:

    • /someapplication/image.gif;jsessionid=123456789
    • /someapplication/image.gif?PHPSESSIONID=12345678

    This causes cacheable resources to be stored separately for each session, which is often not desired. CacheIgnoreURLSessionIdentifiers lets define a list of identifiers that are removed from the key that is used to identify an entity in the cache, such that cacheable resources are not stored separately for each session.

    CacheIgnoreURLSessionIdentifiers None clears the list of ignored identifiers. Otherwise, each identifier is added to the list.

    Example 1

    CacheIgnoreURLSessionIdentifiers jsessionid

    Example 2

    CacheIgnoreURLSessionIdentifiers None
    top

    CacheKeyBaseURL Directive

    Description:Override the base URL of reverse proxied cache keys.
    Syntax:CacheKeyBaseURL URL
    Context:server config, virtual host
    Status:Extension
    Module:mod_cache
    Compatibility:Available in Apache 2.3.9 and later

    When the CacheKeyBaseURL directive is specified, the URL provided will be used as the base URL to calculate the URL of the cache keys in the reverse proxy configuration. When not specified, the scheme, hostname and port of the current virtual host is used to construct the cache key. When a cluster of machines is present, and all cached entries should be cached beneath the same cache key, a new base URL can be specified with this directive.

    # Override the base URL of the cache key.
    CacheKeyBaseURL "http://www.example.com/"
    Take care when setting this directive. If two separate virtual hosts are accidentally given the same base URL, entries from one virtual host will be served to the other.
    top

    CacheLastModifiedFactor Directive

    Description:The factor used to compute an expiry date based on the LastModified date.
    Syntax:CacheLastModifiedFactor float
    Default:CacheLastModifiedFactor 0.1
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache

    In the event that a document does not provide an expiry date but does provide a last-modified date, an expiry date can be calculated based on the time since the document was last modified. The CacheLastModifiedFactor directive specifies a factor to be used in the generation of this expiry date according to the following formula: expiry-period = time-since-last-modified-date * factor expiry-date = current-date + expiry-period For example, if the document was last modified 10 hours ago, and factor is 0.1 then the expiry-period will be set to 10*0.1 = 1 hour. If the current time was 3:00pm then the computed expiry-date would be 3:00pm + 1hour = 4:00pm. If the expiry-period would be longer than that set by CacheMaxExpire, then the latter takes precedence.

    CacheLastModifiedFactor 0.5
    top

    CacheLock Directive

    Description:Enable the thundering herd lock.
    Syntax:CacheLock on|off
    Default:CacheLock off
    Context:server config, virtual host
    Status:Extension
    Module:mod_cache
    Compatibility:Available in Apache 2.2.15 and later

    The CacheLock directive enables the thundering herd lock for the given URL space.

    In a minimal configuration the following directive is all that is needed to enable the thundering herd lock in the default system temp directory.

    # Enable cache lock
    CacheLock on
    top

    CacheLockMaxAge Directive

    Description:Set the maximum possible age of a cache lock.
    Syntax:CacheLockMaxAge integer
    Default:CacheLockMaxAge 5
    Context:server config, virtual host
    Status:Extension
    Module:mod_cache

    The CacheLockMaxAge directive specifies the maximum age of any cache lock.

    A lock older than this value in seconds will be ignored, and the next incoming request will be given the opportunity to re-establish the lock. This mechanism prevents a slow client taking an excessively long time to refresh an entity.

    top

    CacheLockPath Directive

    Description:Set the lock path directory.
    Syntax:CacheLockPath directory
    Default:CacheLockPath /tmp/mod_cache-lock
    Context:server config, virtual host
    Status:Extension
    Module:mod_cache

    The CacheLockPath directive allows you to specify the directory in which the locks are created. By default, the system's temporary folder is used. Locks consist of empty files that only exist for stale URLs in flight, so is significantly less resource intensive than the traditional disk cache.

    top

    CacheMaxExpire Directive

    Description:The maximum time in seconds to cache a document
    Syntax:CacheMaxExpire seconds
    Default:CacheMaxExpire 86400 (one day)
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache

    The CacheMaxExpire directive specifies the maximum number of seconds for which cacheable HTTP documents will be retained without checking the origin server. Thus, documents will be out of date at most this number of seconds. This maximum value is enforced even if an expiry date was supplied with the document.

    CacheMaxExpire 604800
    top

    CacheMinExpire Directive

    Description:The minimum time in seconds to cache a document
    Syntax:CacheMinExpire seconds
    Default:CacheMinExpire 0
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache

    The CacheMinExpire directive specifies the minimum number of seconds for which cacheable HTTP documents will be retained without checking the origin server. This is only used if no valid expire time was supplied with the document.

    CacheMinExpire 3600
    top

    CacheQuickHandler Directive

    Description:Run the cache from the quick handler.
    Syntax:CacheQuickHandler on|off
    Default:CacheQuickHandler on
    Context:server config, virtual host
    Status:Extension
    Module:mod_cache
    Compatibility:Apache HTTP Server 2.3.3 and later

    The CacheQuickHandler directive controls the phase in which the cache is handled.

    In the default enabled configuration, the cache operates within the quick handler phase. This phase short circuits the majority of server processing, and represents the most performant mode of operation for a typical server. The cache bolts onto the front of the server, and the majority of server processing is avoided.

    When disabled, the cache operates as a normal handler, and is subject to the full set of phases when handling a server request. While this mode is slower than the default, it allows the cache to be used in cases where full processing is required, such as when content is subject to authorization.

    # Run cache as a normal handler
    CacheQuickHandler off

    It is also possible, when the quick handler is disabled, for the administrator to choose the precise location within the filter chain where caching is to be performed, by adding the CACHE filter to the chain.

    # Cache content before mod_include and mod_deflate
    CacheQuickHandler off
    AddOutputFilterByType CACHE;INCLUDES;DEFLATE text/html

    If the CACHE filter is specified more than once, the last instance will apply.

    top

    CacheStaleOnError Directive

    Description:Serve stale content in place of 5xx responses.
    Syntax:CacheStaleOnError on|off
    Default:CacheStaleOnError on
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache
    Compatibility:Available in Apache 2.3.9 and later

    When the CacheStaleOnError directive is switched on, and when stale data is available in the cache, the cache will respond to 5xx responses from the backend by returning the stale data instead of the 5xx response. While the Cache-Control headers sent by clients will be respected, and the raw 5xx responses returned to the client on request, the 5xx response so returned to the client will not invalidate the content in the cache.

    # Serve stale data on error.
    CacheStaleOnError on
    top

    CacheStoreExpired Directive

    Description:Attempt to cache responses that the server reports as expired
    Syntax:CacheStoreExpired On|Off
    Default:CacheStoreExpired Off
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache

    Since httpd 2.2.4, responses which have already expired are not stored in the cache. The CacheStoreExpired directive allows this behavior to be overridden. CacheStoreExpired On tells the server to attempt to cache the resource if it is stale. Subsequent requests would trigger an If-Modified-Since request of the origin server, and the response may be fulfilled from cache if the backend resource has not changed.

    CacheStoreExpired On
    top

    CacheStoreNoStore Directive

    Description:Attempt to cache requests or responses that have been marked as no-store.
    Syntax:CacheStoreNoStore On|Off
    Default:CacheStoreNoStore Off
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache

    Ordinarily, requests or responses with Cache-Control: no-store header values will not be stored in the cache. The CacheStoreNoStore directive allows this behavior to be overridden. CacheStoreNoStore On tells the server to attempt to cache the resource even if it contains no-store header values. Resources requiring authorization will never be cached.

    CacheStoreNoStore On

    Warning:

    As described in RFC 2616, the no-store directive is intended to "prevent the inadvertent release or retention of sensitive information (for example, on backup tapes)." Enabling this option could store sensitive information in the cache. You are hereby warned.

    See also

    top

    CacheStorePrivate Directive

    Description:Attempt to cache responses that the server has marked as private
    Syntax:CacheStorePrivate On|Off
    Default:CacheStorePrivate Off
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache

    Ordinarily, responses with Cache-Control: private header values will not be stored in the cache. The CacheStorePrivate directive allows this behavior to be overridden. CacheStorePrivate On tells the server to attempt to cache the resource even if it contains private header values. Resources requiring authorization will never be cached.

    CacheStorePrivate On

    Warning:

    This directive will allow caching even if the upstream server has requested that the resource not be cached. This directive is only ideal for a 'private' cache.

    See also

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_asis.html.ko.euc-kr0000644000000000000500000002074513412755316020520 0ustar rootsrc mod_asis - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_asis

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:HTTP Çì´õ¸¦ Æ÷ÇÔÇÑ ÆÄÀÏÀ» º¸³½´Ù
    »óÅÂ:Base
    ¸ðµâ¸í:asis_module
    ¼Ò½ºÆÄÀÏ:mod_asis.c

    ¿ä¾à

    ÀÌ ¸ðµâÀº ¾ÆÆÄÄ¡°¡ ÀϹÝÀûÀÎ HTTP Çì´õÀÇ ´ëºÎºÐÀ» Ãß°¡ÇÏÁö¾Ê°í ¹®¼­¸¦ º¸³»µµ·Ï ¸¸µå´Â send-as-is Çڵ鷯¸¦ Á¦°øÇÑ´Ù.

    ±×·¡¼­ ¼­¹ö´Â cgi ½ºÅ©¸³Æ®³ª nph ½ºÅ©¸³Æ®¸¦ »ç¿ëÇÏÁö¾Ê°íµµ ¸®´ÙÀÌ·º¼Ç°ú ´Ù¸¥ Ưº°ÇÑ HTTP ÀÀ´ä µî ¾î¶² ÀÚ·áµµ º¸³¾ ¼ö ÀÖ´Ù.

    °ú°Å¿¡ ÀÌ ¸ðµâÀº mime typeÀÌ httpd/send-as-isÀÎ ÆÄÀϵµ ó¸®Çß´Ù.

    Support Apache!

    ÁÖÁ¦

    Áö½Ã¾îµé

    ÀÌ ¸ðµâ¿¡´Â Áö½Ã¾î°¡ ¾ø½À´Ï´Ù.

    Bugfix checklist

    Âü°í

    top

    »ç¿ë¹ý

    ¼­¹ö ¼³Á¤ÆÄÀÏ¿¡¼­ ÆÄÀϰú send-as-is Çڵ鷯¸¦ ¿¹¸¦ µé¾î ´ÙÀ½°ú °°ÀÌ ¿¬°áÇÑ´Ù.

    AddHandler send-as-is asis

    ¾ÆÆÄÄ¡´Â .asis È®ÀåÀÚ¸¦ °¡Áø ÆÄÀÏÀÇ ³»¿ëÀ» °ÅÀÇ ¼öÁ¤ÇÏÁö¾Ê°í Ŭ¶óÀÌ¾ðÆ®¿¡°Ô º¸³½´Ù. Ŭ¶óÀÌ¾ðÆ®´Â HTTP Çì´õ°¡ ÇÊ¿äÇϹǷΠ»©¸ÔÁö¸¶¶ó. Status: Çì´õµµ ÇÊ¿äÇÏ´Ù. ÀÌ Çì´õÀÇ ³»¿ëÀº ¼¼ÀÚ¸® ¼ýÀÚÀÎ HTTP ÀÀ´äÄÚµå¿Í ±× µÚÀÇ ¹®±¸ÀÌ´Ù.

    ´ÙÀ½Àº ³»¿ë ±×´ë·Î Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ÆÄÀÏÀÌ ¸®´ÙÀ̷¼ǵǾú´Ù°í ¾Ë¸®´Â ÆÄÀÏÀÇ ¿¹ÀÌ´Ù.

    Status: 301 Now where did I leave that URL
    Location: http://xyz.abc.com/foo/bar.html
    Content-type: text/html

    <html>
    <head>
    <title>Lame excuses'R'us</title>
    </head>
    <body>
    <h1>Fred's exceptionally wonderful page has moved to
    <a href="http://xyz.abc.com/foo/bar.html">Joe's</a> site.
    </h1>
    </body>
    </html>

    ÁÖÀÇ:

    ¼­¹ö´Â ÀڷḦ Ŭ¶óÀÌ¾ðÆ®¿¡°Ô º¸³¾¶§ Ç×»ó Date:¿Í Server: Çì´õ¸¦ Ãß°¡ÇϹǷÎ, ÆÄÀÏ¿¡ ÀÌ Çì´õ°¡ ÀÖÀ¸¸é ¾ÈµÈ´Ù. ¼­¹ö´Â Last-Modified Çì´õ¸¦ Ãß°¡ÇÏÁö ¾Ê´Â´Ù. ±×·¡¼­ ¾Æ¸¶µµ ÀÌ Çì´õ´Â Æ÷ÇÔÇØ¾ß ÇÑ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_suexec.html.en0000644000000000000500000002016413412755316017654 0ustar rootsrc mod_suexec - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_suexec

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Allows CGI scripts to run as a specified user and Group
    Status:Extension
    Module Identifier:suexec_module
    Source File:mod_suexec.c

    Summary

    This module, in combination with the suexec support program allows CGI scripts to run as a specified user and Group.

    top

    SuexecUserGroup Directive

    Description:User and group for CGI programs to run as
    Syntax:SuexecUserGroup User Group
    Context:server config, virtual host
    Status:Extension
    Module:mod_suexec

    The SuexecUserGroup directive allows you to specify a user and group for CGI programs to run as. Non-CGI requests are still processed with the user specified in the User directive.

    Example

    SuexecUserGroup nobody nogroup

    Startup will fail if this directive is specified but the suEXEC feature is disabled.

    See also

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mpm_winnt.html.fr.utf80000644000000000000500000002660313412755316020427 0ustar rootsrc mpm_winnt - Serveur HTTP Apache Version 2.4
    <-

    Apache MPM winnt

    Langues Disponibles:  de  |  en  |  fr  |  ja 

    Description:Module multi-processus optimisé pour Windows NT.
    Statut:MPM
    Identificateur de Module:mpm_winnt_module
    Fichier Source:mpm_winnt.c

    Sommaire

    Ce module multi-processus (MPM) est le module par défaut pour les systèmes d'exploitation de style Windows NT. Il consiste en un processus de contrôle unique qui lance un processus enfant unique, ce dernier créant à son tour des threads pour traiter les requêtes.

    La directive ThreadsPerChild définit le nombre maximal de connexions clientes simultanées.

    Ce MPM utilise par défaut les APIs Windows avancées pour accepter les nouvelles connexions des clients. Avec certaines configurations, des produits tiers peuvent interférer avec cette implémentation, et provoquer l'enregistrement des messages suivants dans les journaux du serveur :

    Child: Encountered too many AcceptEx faults accepting client connections.
    winnt_mpm: falling back to 'AcceptFilter none'.

    Le MPM se rabat sur une implémentation plus sûre, mais certaines requêtes n'ont pas été traitées correctement. Pour éviter cette erreur, définissez la directive AcceptFilter à none.

    AcceptFilter http none
    AcceptFilter https none

    Avec les versions 2.0 et 2.2 d'Apache httpd, c'est la directive Win32DisableAcceptEx qui était utilisée à cet effet.

    Le MPM WinNT diffère des autres MPMs Unix comme worker et event à bien des égards :

    • Lorsqu'un processus enfant s'arrête suite à un arrêt ou redémarrage du serveur, ou lorsque que la limite MaxConnectionsPerChild est atteinte, les requêtes en cours de traitement par ce processus en cours d'arrêt n'ont que TimeOut secondes pour s'exécuter avant l'arrêt du processus. Les autres types de redémarrage ou arrêt ne sont pas implémentés.
    • Les nouveau processus enfants relisent les fichiers de configuration au lieu d'en hériter du parent. Ce comportement ne pose pas de problème si le processus enfant est créé au démarrage ou redémarrage, mais dans le cas où un processus enfant est créé parce qu'un autre processus enfant s'est arrêté ou a atteint la limite MaxConnectionsPerChild, tout changement survenu entre temps dans la configuration sera alors pris en compte dans le processus enfant, et parent et enfant utiliseront une configuration différente. Si des modifications planifiées de la configuration ont été partiellement effectuées, et si la configuration courante n'est pas interprétable, le processus enfant de remplacement ne pourra pas démarrer, et le serveur s'arrêtera. En conséquence, toute modification des fichiers de configuration doit être accompagnée d'un redémarrage du serveur.
    • Les hooks monitor et fatal_exception ne sont pas encore implémentés.
    • La directive AcceptFilter est implémentée par le MPM et fournit un type de contrôle différent sur le traitement des nouvelles connexions (Voir la documentation de la directive AcceptFilter pour plus de détails).

    Langues Disponibles:  de  |  en  |  fr  |  ja 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_session_dbd.html.en0000644000000000000500000006212213412755316020654 0ustar rootsrc mod_session_dbd - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_session_dbd

    Available Languages:  en  |  fr 

    Description:DBD/SQL based session support
    Status:Extension
    Module Identifier:session_dbd_module
    Source File:mod_session_dbd.c
    Compatibility:Available in Apache 2.3 and later

    Summary

    Warning

    The session modules make use of HTTP cookies, and as such can fall victim to Cross Site Scripting attacks, or expose potentially private information to clients. Please ensure that the relevant risks have been taken into account before enabling the session functionality on your server.

    This submodule of mod_session provides support for the storage of user sessions within a SQL database using the mod_dbd module.

    Sessions can either be anonymous, where the session is keyed by a unique UUID string stored on the browser in a cookie, or per user, where the session is keyed against the userid of the logged in user.

    SQL based sessions are hidden from the browser, and so offer a measure of privacy without the need for encryption.

    Different webservers within a server farm may choose to share a database, and so share sessions with one another.

    For more details on the session interface, see the documentation for the mod_session module.

    top

    DBD Configuration

    Before the mod_session_dbd module can be configured to maintain a session, the mod_dbd module must be configured to make the various database queries available to the server.

    There are four queries required to keep a session maintained, to select an existing session, to update an existing session, to insert a new session, and to delete an expired or empty session. These queries are configured as per the example below.

    Sample DBD configuration

    DBDriver pgsql
    DBDParams "dbname=apachesession user=apache password=xxxxx host=localhost"
    DBDPrepareSQL "delete from session where key = %s" deletesession
    DBDPrepareSQL "update session set value = %s, expiry = %lld, key = %s where key = %s" updatesession
    DBDPrepareSQL "insert into session (value, expiry, key) values (%s, %lld, %s)" insertsession
    DBDPrepareSQL "select value from session where key = %s and (expiry = 0 or expiry > %lld)" selectsession
    DBDPrepareSQL "delete from session where expiry != 0 and expiry < %lld" cleansession
    top

    Anonymous Sessions

    Anonymous sessions are keyed against a unique UUID, and stored on the browser within an HTTP cookie. This method is similar to that used by most application servers to store session information.

    To create a simple anonymous session and store it in a postgres database table called apachesession, and save the session ID in a cookie called session, configure the session as follows:

    SQL based anonymous session

    Session On
    SessionDBDCookieName session path=/

    For more examples on how the session can be configured to be read from and written to by a CGI application, see the mod_session examples section.

    For documentation on how the session can be used to store username and password details, see the mod_auth_form module.

    top

    Per User Sessions

    Per user sessions are keyed against the username of a successfully authenticated user. It offers the most privacy, as no external handle to the session exists outside of the authenticated realm.

    Per user sessions work within a correctly configured authenticated environment, be that using basic authentication, digest authentication or SSL client certificates. Due to the limitations of who came first, the chicken or the egg, per user sessions cannot be used to store authentication credentials from a module like mod_auth_form.

    To create a simple per user session and store it in a postgres database table called apachesession, and with the session keyed to the userid, configure the session as follows:

    SQL based per user session

    Session On
    SessionDBDPerUser On
    top

    Database Housekeeping

    Over the course of time, the database can be expected to start accumulating expired sessions. At this point, the mod_session_dbd module is not yet able to handle session expiry automatically.

    Warning

    The administrator will need to set up an external process via cron to clean out expired sessions.

    top

    SessionDBDCookieName Directive

    Description:Name and attributes for the RFC2109 cookie storing the session ID
    Syntax:SessionDBDCookieName name attributes
    Default:none
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_session_dbd

    The SessionDBDCookieName directive specifies the name and optional attributes of an RFC2109 compliant cookie inside which the session ID will be stored. RFC2109 cookies are set using the Set-Cookie HTTP header.

    An optional list of cookie attributes can be specified, as per the example below. These attributes are inserted into the cookie as is, and are not interpreted by Apache. Ensure that your attributes are defined correctly as per the cookie specification.

    Cookie with attributes

    Session On
    SessionDBDCookieName session path=/private;domain=example.com;httponly;secure;version=1;
    top

    SessionDBDCookieName2 Directive

    Description:Name and attributes for the RFC2965 cookie storing the session ID
    Syntax:SessionDBDCookieName2 name attributes
    Default:none
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_session_dbd

    The SessionDBDCookieName2 directive specifies the name and optional attributes of an RFC2965 compliant cookie inside which the session ID will be stored. RFC2965 cookies are set using the Set-Cookie2 HTTP header.

    An optional list of cookie attributes can be specified, as per the example below. These attributes are inserted into the cookie as is, and are not interpreted by Apache. Ensure that your attributes are defined correctly as per the cookie specification.

    Cookie2 with attributes

    Session On
    SessionDBDCookieName2 session path=/private;domain=example.com;httponly;secure;version=1;
    top

    SessionDBDCookieRemove Directive

    Description:Control for whether session ID cookies should be removed from incoming HTTP headers
    Syntax:SessionDBDCookieRemove On|Off
    Default:SessionDBDCookieRemove On
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_session_dbd

    The SessionDBDCookieRemove flag controls whether the cookies containing the session ID will be removed from the headers during request processing.

    In a reverse proxy situation where the Apache server acts as a server frontend for a backend origin server, revealing the contents of the session ID cookie to the backend could be a potential privacy violation. When set to on, the session ID cookie will be removed from the incoming HTTP headers.

    top

    SessionDBDDeleteLabel Directive

    Description:The SQL query to use to remove sessions from the database
    Syntax:SessionDBDDeleteLabel label
    Default:SessionDBDDeleteLabel deletesession
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_session_dbd

    The SessionDBDDeleteLabel directive sets the default delete query label to be used to delete an expired or empty session. This label must have been previously defined using the DBDPrepareSQL directive.

    top

    SessionDBDInsertLabel Directive

    Description:The SQL query to use to insert sessions into the database
    Syntax:SessionDBDInsertLabel label
    Default:SessionDBDInsertLabel insertsession
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_session_dbd

    The SessionDBDInsertLabel directive sets the default insert query label to be used to load in a session. This label must have been previously defined using the DBDPrepareSQL directive.

    If an attempt to update the session affects no rows, this query will be called to insert the session into the database.

    top

    SessionDBDPerUser Directive

    Description:Enable a per user session
    Syntax:SessionDBDPerUser On|Off
    Default:SessionDBDPerUser Off
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_session_dbd

    The SessionDBDPerUser flag enables a per user session keyed against the user's login name. If the user is not logged in, this directive will be ignored.

    top

    SessionDBDSelectLabel Directive

    Description:The SQL query to use to select sessions from the database
    Syntax:SessionDBDSelectLabel label
    Default:SessionDBDSelectLabel selectsession
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_session_dbd

    The SessionDBDSelectLabel directive sets the default select query label to be used to load in a session. This label must have been previously defined using the DBDPrepareSQL directive.

    top

    SessionDBDUpdateLabel Directive

    Description:The SQL query to use to update existing sessions in the database
    Syntax:SessionDBDUpdateLabel label
    Default:SessionDBDUpdateLabel updatesession
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_session_dbd

    The SessionDBDUpdateLabel directive sets the default update query label to be used to load in a session. This label must have been previously defined using the DBDPrepareSQL directive.

    If an attempt to update the session affects no rows, the insert query will be called to insert the session into the database. If the database supports InsertOrUpdate, override this query to perform the update in one query instead of two.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_echo.html.fr.utf80000644000000000000500000001712413412755316020172 0ustar rootsrc mod_echo - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_echo

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Un simple serveur d'écho pour illustrer les modules de protocole
    Statut:Expérimental
    Identificateur de Module:echo_module
    Fichier Source:mod_echo.c

    Sommaire

    Ce module est un module de protocole exemple permettant d'en illustrer le concept. Il fournit un simple serveur d'écho. Envoyez lui une phrase par telnet, et il vous la renverra.

    top

    Directive ProtocolEcho

    Description:Active ou désactive le serveur d'écho
    Syntaxe:ProtocolEcho On|Off
    Défaut:ProtocolEcho Off
    Contexte:configuration globale, serveur virtuel
    Statut:Expérimental
    Module:mod_echo

    La directive ProtocolEcho permet d'activer ou de désactiver le serveur d'écho.

    Exemple

    ProtocolEcho On

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_user.html0000644000000000000500000000063713362070302020140 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authz_user.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authz_user.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_authz_user.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_authz_user.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_cache_disk.html.fr.utf80000644000000000000500000005241513412755316021333 0ustar rootsrc mod_cache_disk - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_cache_disk

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Module de stockage sur disque pour le filtre de mise en cache HTTP.
    Statut:Extension
    Identificateur de Module:cache_disk_module
    Fichier Source:mod_cache_disk.c

    Sommaire

    mod_cache_disk implémente un gestionnaire de stockage sur disque pour le module mod_cache.

    Les en-têtes et corps des réponses mises en cache sont stockés séparément sur le disque, dans une structure de répertoires basée sur le condensé md5 de l'URL mise en cache.

    Plusieurs réponses au contenu négocié peuvent être stockées en même temps, mais la mise en cache de contenus partiels n'est pas supportée actuellement par ce module.

    Les mises à jour atomiques du cache pour les fichiers d'en-tête et de corps peuvent être effectuées sans verrouillage en enregistrant les numéros d'inode et de périphérique du fichier de corps dans le fichier d'en-tête. Ceci implique que les entrées du cache déplacées manuellement dans le cache seront ignorées.

    L'utilitaire htcacheclean permet de lister et de supprimer les URLs du cache, ou de maintenir le cache en deçà de certaines limites de taille et/ou de nombre d'inodes. L'utilitaire peut être exécuté à la demande, ou automatiquement pour assurer un contrôle continu des tailles des répertoires.

    Note :

    mod_cache doit être chargé avant mod_cache_disk pour que ce dernier puisse fonctionner.

    Note :

    Lorsque la plate-forme la supporte, et si elle est activée via la directive EnableSendfile, mod_cache_disk utilise la fonctionnalité sendfile pour servir les fichiers à partir du cache. Cependant, mod_cache_disk ignore la configuration de la directive EnableSendfile dans un contexte de répertoire ou de fichier .htaccess, car le module ne dispose pas des définitions correspondantes lorsque la requête est servie depuis le cache.

    top

    Directive CacheDirLength

    Description:Le nombre de caractères des noms des sous-répertoires
    Syntaxe:CacheDirLength longueur
    Défaut:CacheDirLength 2
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_cache_disk

    la directive CacheDirLength permet de définir le nombre de caractères que comportera chaque nom de sous-répertoire de la hiérarchie du cache. On peut l'utiliser en conjonction avec CacheDirLevels pour déterminer une structure approximative de la hiérarchie de cache.

    Une valeur haute pour CacheDirLength combinée avec une valeur basse pour CacheDirLevels générera une hiérarchie relativement peu profonde, avec un grand nombre de sous-répertoires à chaque niveau.

    La valeur du produit CacheDirLevels * CacheDirLength ne doit pas dépasser 20.

    top

    Directive CacheDirLevels

    Description:Le nombre de niveaux de sous-répertoires que comportera le cache.
    Syntaxe:CacheDirLevels niveaux
    Défaut:CacheDirLevels 2
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_cache_disk

    La directive CacheDirLevels permet de définir le nombre de niveaux de sous-répertoires que comportera le cache. Les données du cache seront stokées au niveau correspondant par rapport au répertoire CacheRoot.

    Une valeur haute pour CacheDirLevels combinée avec une valeur basse pour CacheDirLength générera une arborescence très développée, avec un petit nombre de sous-répertoires à chaque niveau.

    La valeur du produit CacheDirLevels * CacheDirLength ne doit pas dépasser 20.

    top

    Directive CacheMaxFileSize

    Description:>La taille maximale (en octets) d'un document pour pouvoir être stocké dans le cache
    Syntaxe:CacheMaxFileSize octets
    Défaut:CacheMaxFileSize 1000000
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache_disk

    La directive CacheMaxFileSize permet de définir la taille maximale d'un document, en octets, pour que celui-ci puisse faire l'objet d'un stockage dans le cache.

    CacheMaxFileSize 64000
    top

    Directive CacheMinFileSize

    Description:La taille minimale (en octets) d'un document pour pouvoir être stocké dans le cache
    Syntaxe:CacheMinFileSize octets
    Défaut:CacheMinFileSize 1
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache_disk

    La directive CacheMinFileSize permet de définir la taille minimale d'un document, en octets, pour que celui-ci puisse faire l'objet d'un stockage dans le cache.

    CacheMinFileSize 64
    top

    Directive CacheReadSize

    Description:La quantité minimale (en octets) de données à lire et à mettre en cache avant de les envoyer au client
    Syntaxe:CacheReadSize octets
    Défaut:CacheReadSize 0
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache_disk

    La directive CacheReadSize permet de définir la quantité minimale de données, en octets, à lire depuis le serveur d'arrière-plan avant de les envoyer au client. Avec la valeur par défaut zéro, toute donnée de toutes tailles est envoyée au client dès qu'elle est disponible. Avec une valeur non nulle, le cache disque met en tampon au moins la quantité de données correspondante avant d'envoyer la réponse au client. Les performances peuvent s'en trouver améliorées lorsqu'on met en cache du contenu en provenance d'un mandataire inverse.

    Cette directive ne prend effet que lorsque les données sont enregistrées dans le cache, et non lorsque les données sont servies à partir du cache.

    CacheReadSize 102400
    top

    Directive CacheReadTime

    Description:Le temps minimum (en millisecondes) qui doit s'écouler avant d'envoyer les données au client
    Syntaxe:CacheReadTime millisecondes
    Défaut:CacheReadTime 0
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache_disk

    La directive CacheReadTime permet de définir le temps minimum qui doit s'écouler avant d'essayer d'envoyer des données au client. Pendant ce temps, les données sont mises en tampon avant de pouvoir être envoyées au client. Les performances peuvent s'en trouver améliorées lorsqu'on met en cache du contenu en provenance d'un mandataire inverse.

    La valeur par défaut zéro désactive cette option.

    Cette directive ne prend effet que lorsque les données sont enregistrées dans le cache, et non lorsque les données sont servies à partir du cache. Il est recommandé d'harmoniser l'utilisation de cette directive avec celle de la directive CacheReadSize, afin de s'assurer que le serveur n'effectue pas une mise en tampon excessive au cas où les données arriveraient plus vite que prévu.

    CacheReadTime 1000
    top

    Directive CacheRoot

    Description:La racine du répertoire dans lequel les fichiers du cache seront stockés
    Syntaxe:CacheRoot répertoire
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_cache_disk

    La directive CacheRoot permet de définir le nom du répertoire sur disque qui contiendra les fichiers du cache. Si le module mod_cache_disk a été chargé ou compilé dans le serveur Apache, cette directive doit être définie. L'absence de définition de la directive CacheRoot provoquera une erreur de traitement du fichier de configuration. Les directives CacheDirLevels et CacheDirLength permettent de définir la structure des sous-répertoires du répertoire racine spécifié.

    CacheRoot c:/cacheroot

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_request.html.en0000644000000000000500000002250013412755316020044 0ustar rootsrc mod_request - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_request

    Available Languages:  en  |  fr  |  tr 

    Description:Filters to handle and make available HTTP request bodies
    Status:Base
    Module Identifier:request_module
    Source File:mod_request.c
    Compatibility:Available in Apache 2.3 and later
    top

    KeptBodySize Directive

    Description:Keep the request body instead of discarding it up to the specified maximum size, for potential use by filters such as mod_include.
    Syntax:KeptBodySize maximum size in bytes
    Default:KeptBodySize 0
    Context:directory
    Status:Base
    Module:mod_request

    Under normal circumstances, request handlers such as the default handler for static files will discard the request body when it is not needed by the request handler. As a result, filters such as mod_include are limited to making GET requests only when including other URLs as subrequests, even if the original request was a POST request, as the discarded request body is no longer available once filter processing is taking place.

    When this directive has a value greater than zero, request handlers that would otherwise discard request bodies will instead set the request body aside for use by filters up to the maximum size specified. In the case of the mod_include filter, an attempt to POST a request to the static shtml file will cause any subrequests to be POST requests, instead of GET requests as before.

    This feature makes it possible to break up complex web pages and web applications into small individual components, and combine the components and the surrounding web page structure together using mod_include. The components can take the form of CGI programs, scripted languages, or URLs reverse proxied into the URL space from another server using mod_proxy.

    Note: Each request set aside has to be set aside in temporary RAM until the request is complete. As a result, care should be taken to ensure sufficient RAM is available on the server to support the intended load. Use of this directive should be limited to where needed on targeted parts of your URL space, and with the lowest possible value that is still big enough to hold a request body.

    If the request size sent by the client exceeds the maximum size allocated by this directive, the server will return 413 Request Entity Too Large.

    See also

    Available Languages:  en  |  fr  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dir.html.ko.euc-kr0000644000000000000500000004103513412755316020332 0ustar rootsrc mod_dir - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_dir

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:"¸¶Áö¸· ½½·¡½¬" ¸®´ÙÀÌ·º¼ÇÀ» Á¦°øÇÏ°í µð·ºÅ丮 index ÆÄÀÏÀ» ¼­ºñ½ºÇÑ´Ù
    »óÅÂ:Base
    ¸ðµâ¸í:dir_module
    ¼Ò½ºÆÄÀÏ:mod_dir.c

    ¿ä¾à

    µð·ºÅ丮ÀÇ index´Â ´ÙÀ½ µÑÁß ÇѰ¡Áö ¹æ¹ýÀ¸·Î Á¦°øµÈ´Ù:

    • »ç¿ëÀÚ°¡ ÀÛ¼ºÇÑ º¸Åë index.htmlÀ̶ó´Â ÆÄÀÏ. DirectoryIndex Áö½Ã¾î´Â ÀÌ ÆÄÀÏÀÇ À̸§À» ÁöÁ¤ÇÑ´Ù. mod_dir°¡ ÀÌ Áö½Ã¾î¸¦ Á¦°øÇÑ´Ù.
    • ¾Æ´Ï¶ó¸é ¼­¹ö°¡ ¸¸µç ¸ñ·Ï. mod_autoindex°¡ ÀÌ ±â´ÉÀ» Á¦°øÇÑ´Ù.

    µÎ ±â´ÉÀº ¼­·Î º°°³·Î ¿øÇÑ´Ù¸é ÀÚµ¿ index »ý¼ºÀ» ¿ÏÀüÈ÷ ¾ø¾Ù (ȤÀº ±³Ã¼ÇÒ) ¼ö ÀÖ´Ù.

    dirnameÀÌ µð·ºÅ丮¶ó¸é ¼­¹ö´Â URL http://servername/foo/dirname ¿äûÀ» ¹ÞÀ¸¸é "¸¶Áö¸· ½½·¡½¬" ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù. µð·ºÅ丮¿¡´Â ¸¶Áö¸· ½½·¡½¬°¡ ÇÊ¿äÇÏ´Ù. ±×·¡¼­ mod_dirÀº http://servername/foo/dirname/·Î ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù.

    top

    DirectoryCheckHandler Áö½Ã¾î

    ¼³¸í:Toggle how this module responds when another handler is configured
    ¹®¹ý:DirectoryCheckHandler On|Off
    ±âº»°ª:DirectoryCheckHandler Off
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_dir
    Áö¿ø:Available in 2.4.8 and later. Releases prior to 2.4 implicitly act as if "DirectoryCheckHandler ON" was specified.

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    DirectoryIndex Áö½Ã¾î

    ¼³¸í:Ŭ¶óÀÌ¾ðÆ®°¡ µð·ºÅ丮¸¦ ¿äûÇÒ¶§ ã¾Æº¼ ÀÚ¿ø ¸ñ·Ï
    ¹®¹ý:DirectoryIndex local-url [local-url] ...
    ±âº»°ª:DirectoryIndex index.html
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_dir

    DirectoryIndex Áö½Ã¾î´Â Ŭ¶óÀÌ¾ðÆ®°¡ µð·ºÅ丮¸í ³¡¿¡ /¸¦ ºÙ¿©¼­ µð·ºÅ丮ÀÇ index¸¦ ¿äûÇÒ¶§ ã¾Æº¼ ÀÚ¿ø ¸ñ·ÏÀ» ÁöÁ¤ÇÑ´Ù. Local-urlÀº ¿äûÇÑ µð·ºÅ丮¿¡ »ó´ëÀûÀÎ ¹®¼­ÀÇ (%·Î ÀÎÄÚµùµÈ) URLÀÌ´Ù. º¸ÅëÀº µð·ºÅ丮¿¡ ÀÖ´Â ÆÄÀϸíÀÌ´Ù. ¿©·¯ URLÀ» ÁöÁ¤ÇÒ ¼ö ÀÖ°í, ÀÌ °æ¿ì ¼­¹ö´Â ù¹øÂ°·Î ãÀº ÆÄÀÏÀ» º¸³½´Ù. ÀÚ¿øÀ» ãÀ» ¼ö ¾ø°í Indexes ¿É¼ÇÀ» ¼³Á¤ÇÏ¿´´Ù¸é ¼­¹ö´Â Á÷Á¢ µð·ºÅ丮 ¸ñ·ÏÀ» ¸¸µç´Ù.

    ¿¹Á¦

    DirectoryIndex index.html

    ÀÌ °æ¿ì http://myserver/docs/¸¦ ¿äûÇÒ¶§ http://myserver/docs/index.htmlÀÌ ÀÖÀ¸¸é À̸¦ º¸³»°í, ¾ø´Ù¸é µð·ºÅ丮 ¸ñ·ÏÀ» º¸³½´Ù.

    ¹®¼­°¡ ¹Ýµå½Ã µð·ºÅ丮¿¡ »ó´ëÀûÀÏ ÇÊ¿ä´Â ¾ø´Ù.

    DirectoryIndex index.html index.txt /cgi-bin/index.pl

    ÀÌ °æ¿ì µð·ºÅ丮¿¡ index.htmlÀ̳ª index.txt°¡ ¾øÀ¸¸é CGI ½ºÅ©¸³Æ® /cgi-bin/index.plÀ» ½ÇÇàÇÑ´Ù.

    top

    DirectoryIndexRedirect Áö½Ã¾î

    ¼³¸í:Configures an external redirect for directory indexes.
    ¹®¹ý:DirectoryIndexRedirect on | off | permanent | temp | seeother | 3xx-code
    ±âº»°ª:DirectoryIndexRedirect off
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_dir
    Áö¿ø:Available in version 2.3.14 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    DirectorySlash Áö½Ã¾î

    ¼³¸í:¸¶Áö¸· ½½·¡½¬ ¸®´ÙÀÌ·º¼ÇÀ» Ű°í ²ö´Ù
    ¹®¹ý:DirectorySlash On|Off
    ±âº»°ª:DirectorySlash On
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_dir
    Áö¿ø:¾ÆÆÄÄ¡ 2.0.51 ÀÌÈĺÎÅÍ

    DirectorySlash Áö½Ã¾î´Â mod_dir°¡ µð·ºÅ丮¸¦ °¡¸®Å°´Â URLÀ» ¼öÁ¤ÇÒÁö ¿©ºÎ¸¦ °áÁ¤ÇÑ´Ù.

    »ç¿ëÀÚ°¡ ¸¶Áö¸· ½½·¡½¬¾øÀÌ µð·ºÅ丮¿¡ ÇØ´çÇÏ´Â ÀÚ¿øÀ» ¿äûÇϸé, mod_dir´Â º¸Åë ´ÙÀ½°ú °°Àº ÀÌÀ¯·Î »ç¿ëÀÚ¸¦ ¸¶Áö¸· ½½·¡½¬¸¦ ºÙÀÎ µ¿ÀÏÇÑ ÀÚ¿øÀ¸·Î ¸®´ÙÀÌ·º¼ÇÇÑ´Ù.

    • »ç¿ëÀÚ´Â °á±¹ ÀÚ¿øÀÇ Á¤±Ô URLÀ» ¿äûÇÏ°Ô µÈ´Ù
    • mod_autoindex°¡ ¿Ã¹Ù·Î µ¿ÀÛÇÑ´Ù. ÀÌ ±â´ÉÀÌ ¾ø´Ù¸é ÀÌ ¸ðµâÀº ¸µÅ©¿¡ À߸øµÈ °æ·Î¸¦ ¾²°Ô µÈ´Ù.
    • DirectoryIndex´Â ¸¶Áö¸· ½½·¡½¬°¡ ÀÖ´Â µð·ºÅ丮 ¿äû¸¸À» ó¸®ÇÑ´Ù.
    • html ÆäÀÌÁö¿¡ ÀÖ´Â »ó´ëÀûÀÎ URL ÂüÁ¶°¡ ¿Ã¹Ù·Î µ¿ÀÛÇÑ´Ù.

    ±×·±µ¥ ÀÌ ±â´ÉÀ» ¿øÇÏÁö ¾Ê°Å³ª À§¿¡ µç ÀÌÀ¯°¡ ´ç½Å¿¡°Ô ¾Ë¸ÂÁö ¾Ê´Ù¸é ´ÙÀ½°ú °°ÀÌ ¸®´ÙÀÌ·º¼ÇÀ» ÇÏÁö ¾ÊÀ» ¼ö ÀÖ´Ù.

    # ¾Æ·¡ º¸¾È °æ°í Âü°í!
    <Location /some/path>
    DirectorySlash Off
    SetHandler some-handler
    </Location>

    º¸¾È °æ°í

    ¸¶Áö¸· ½½·¡½¬ ¸®´ÙÀÌ·º¼ÇÀ» ²ô¸é Á¤º¸°¡ À¯ÃâµÉ ¼ö ÀÖ´Ù. (Options +Indexes) mod_autoindex¸¦ »ç¿ëÇϰí DirectoryIndex¸¦ (index.html °°Àº) À¯È¿ÇÑ ÀÚ¿øÀ¸·Î ¼³Á¤ÇÏ¿´Áö¸¸ ÇØ´ç URL¿¡ ´Ù¸¥ Ưº°ÇÑ Çڵ鷯°¡ ¾ø´Â »óȲÀ» »ó»óÇØº¸¶ó. ÀÌ °æ¿ì ¸¶Áö¸· ½½·¡½¬°¡ ÀÖ´Â ¿äûÀº index.html ÆÄÀÏÀ» º¸¿©ÁØ´Ù. ±×·¯³ª ¸¶Áö¸· ½½·¡½¬°¡ ¾ø´Â ¿äûÀº µð·ºÅ丮 ³»¿ëÀ» º¸¿©ÁØ´Ù.

    top

    FallbackResource Áö½Ã¾î

    ¼³¸í:Define a default URL for requests that don't map to a file
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Base
    ¸ðµâ:mod_dir

    Documentation not yet translated. Please see English version of document.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_dbd.html.fr.utf80000644000000000000500000004142013412755316021200 0ustar rootsrc mod_authn_dbd - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authn_dbd

    Langues Disponibles:  en  |  fr 

    Description:Authentification utilisateur à l'aide d'une base de données SQL
    Statut:Extension
    Identificateur de Module:authn_dbd_module
    Fichier Source:mod_authn_dbd.c
    Compatibilité:Disponible depuis la version 2.1 d'Apache

    Sommaire

    Ce module permet aux frontaux d'authentification comme mod_auth_digest et mod_auth_basic d'authentifier les utilisateurs en les recherchant dans une base de données SQL. mod_authn_file, par exemple, fournit une fonctionnalité similaire.

    Ce module s'appuie sur mod_dbd pour spécifier le pilote de la base de données sous-jacente et les paramètres de connexion, mais aussi pour gérer les connexions à la base de données.

    Si l'on utilise mod_auth_basic ou mod_auth_digest, on peut invoquer ce module en affectant la valeur dbd à la directive AuthBasicProvider ou AuthDigestProvider.

    top

    Performances et mise en cache

    Certains utilisateurs de l'authentification DBD sous HTTPD 2.2/2.4 ont signalé une charge problématique au niveau de la base de données. Cela se produit en général lorsqu'une page HTML contient des centaines d'objets (comme des images, des scripts, etc...), chacun d'entre eux nécessitant une authentification. Les utilisateurs qui rencontrent ce genre de problème peuvent utiliser le module mod_authn_socache qui permet de mettre les données d'authentification en cache, et soulager ainsi la base de données de la plus grande partie de la charge.

    top

    Exemple de configuration

    Voici un exemple simple d'utilisation de ce module dans un contexte d'authentification et de bases de données.

    # configuration de mod_dbd
    # MISE À JOUR pour inclure la mise en cache de l'authentification
    DBDriver pgsql
    DBDParams "dbname=apacheauth user=apache password=xxxxxx"
    
    DBDMin  4
    DBDKeep 8
    DBDMax  20
    DBDExptime 300
    
    <Directory "/usr/www/mon-serveur/private">
      # configuration de mod_authn_core et mod_auth_basic
      # pour mod_authn_dbd
      AuthType Basic
      AuthName "Mon serveur"
    
      # Pour mettre en cache les données d'authentification, placez socache
      # avant dbd
      AuthBasicProvider socache dbd
    
      # Aussi nécessaire à la mise en cache : dire au cache de mettre en
      # cache les recherches dbd !
      AuthnCacheProvideFor dbd
      AuthnCacheContext mon-serveur
    
      # configuration de mod_authz_core
      Require valid-user
    
      # la requête SQL de mod_authn_dbd pour authentifier un utilisateur
      AuthDBDUserPWQuery "SELECT password FROM authn WHERE user = %s"
    </Directory>
    top

    Mise à disposition des informations de connexion

    Si httpd a été compilé avec la version 1.3.0 ou supérieure de l'APR, pour chaque requête envoyée au serveur de base de données, toutes les valeurs de colonnes du premier enregistrement renvoyé par la requête sont affectées à des variables d'environnement avec le préfixe "AUTHENTICATE_".

    Par exemple, si une requête renvoie un nom d'utilisateur, un nom complet et un numéro de téléphone, un programme CGI pourra accéder à ces informations sans avoir besoin d'effectuer une deuxième requête vers la base de données.

    Ceci va entraîner une simplification considérable du code et de la configuration nécessaire de certaines applications web.

    top

    Directive AuthDBDUserPWQuery

    Description:Requête SQL servant à vérifier le mot de passe d'un utilisateur
    Syntaxe:AuthDBDUserPWQuery requête
    Contexte:répertoire
    Statut:Extension
    Module:mod_authn_dbd

    La directive AuthDBDUserPWQuery permet de spécifier une requête servant à vérifier le mot de passe d'un utilisateur donné. L'identifiant utilisateur sera transmis comme paramètre sous forme d'une seule chaîne de caractères lorsque la requête sera exécutée. Cet identifiant est référencé dans la requête en utilisant le spécificateur de format %s.

    AuthDBDUserPWQuery "SELECT password FROM authn WHERE user = %s"

    La première colonne du premier enregistrement renvoyé par la requête se présentera sous la forme d'une chaîne de caractères contenant le mot de passe chiffré. Les enregistrements suivants sont ignorés. Si aucun enregistrement n'est renvoyé, l'utilisateur ne sera pas authentifié par mod_authn_dbd.

    Si httpd a été compilé avec la version 1.3.0 ou supérieure de l'APR, toute valeur de colonne supplémentaire du premier enregistrement renvoyé par la requête sera stockée dans une variable d'environnement dont le nom aura la forme AUTHENTICATE_valeur-colonne.

    Le format du mot de passe chiffré dépend du frontal d'authentification utilisé (par exemple mod_auth_basic ou mod_auth_digest). Voir la documentation sur les Formats de mots de passe pour plus de détails.

    top

    Directive AuthDBDUserRealmQuery

    Description:Requête SQL servant à vérifier une empreinte de mot de passe pour un utilisateur et un identifiant d'authentification.
    Syntaxe:AuthDBDUserRealmQuery requête
    Contexte:répertoire
    Statut:Extension
    Module:mod_authn_dbd

    La directive AuthDBDUserRealmQuery permet de spécifier une requête SQL servant à vérifier une empreinte de mot de passe pour un utilisateur et un identifiant d'authentification donnés au cours d'un processus d'authentification digest. Les identifiants de l'utilisateur et de l'authentification sont passés dans cet ordre comme paramètres à l'exécution de la requête. Ils sont référencés dans la chaîne de la requête en utilisant des spécificateurs de format %s.

    AuthDBDUserRealmQuery "SELECT password FROM authn WHERE user = %s AND realm = %s"

    La première colonne du premier enregistrement renvoyé par la requête se présentera sous la forme d'une chaîne de caractères contenant le mot de passe chiffré. Les enregistrements suivants seront ignorés. Si aucun enregistrement n'est renvoyé, l'utilisateur ne sera pas authentifié par mod_authn_dbd.

    Si httpd a été compilé avec une version 1.3.0 ou supérieure de l'APR, toute valeur de colonne supplémentaire du premier enregistrement renvoyé par la requête sera stockée dans une variable d'environnement avec un nom de la forme AUTHENTICATE_COLONNE.

    Le format du mot de passe chiffré dépend du frontal d'authentification utilisé (par exemple mod_auth_basic ou mod_auth_digest). Voir la documentation sur les Formats de mots de passe pour plus de détails.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_socache_memcache.html.fr.utf80000644000000000000500000002225013412755316022477 0ustar rootsrc mod_socache_memcache - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_socache_memcache

    Langues Disponibles:  en  |  fr 

    Description:Fournisseur de cache d'objets partagés basé sur Memcache.
    Statut:Extension
    Identificateur de Module:socache_memcache_module
    Fichier Source:mod_socache_memcache.c

    Sommaire

    Le module mod_socache_memcache est un fournisseur de cache d'objets partagés qui permet la création et l'accès à un cache maintenu par le système de mise en cache d'objets en mémoire distribuée à hautes performances memcached.

    Cette méthode "create" du fournisseur de cache d'objets partagés requiert une liste de spécifications hôte/port en cache mémoire séparées par des virgules. Si vous utilisez ce fournisseur dans la configuration d'autres modules (comme SSLSessionCache), vous devez fournir la liste des serveurs sous la forme du paramètre optionnel "arg".

    SSLSessionCache memcache:memcache.example.com:12345,memcache2.example.com:12345

    Vous trouverez des détails à propos des autres fournisseurs de cache d'objets partagés ici.

    top

    Directive MemcacheConnTTL

    Description:Durée de conservation des connexions inactives
    Syntaxe:MemcacheConnTTL num[units]
    Défaut:MemcacheConnTTL 15s
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_socache_memcache
    Compatibilité:Disponible à partir de la version 2.4.17 du serveur HTTP Apache.

    Définit la durée pendant laquelle les connexions inactives avec le(s) serveur(s) memcache seront conservées (plateformes threadées seulement).

    Les valeurs valides de la directive MemcacheConnTTL sont des durées d'une heure maximum. La valeur 0 signifie une absence de péremption

    L'unité par défaut pour ce délai est la seconde, mais vous pouvez ajouter un suffixe pour spécifier une unité différente ; ms pour milliseconde, s pour seconde, min pour minute et h pour heure..

    Dans les versions antérieures à 2.4.17, ce délai était codé en dur et sa valeur était 600 microsecondes. La valeur la plus proche de cette ancienne valeur pour la directive MemcacheConnTTL est donc 1ms.

    # Définition d'un délai de 10 minutes
    MemcacheConnTTL 10min
    # Définition d'un délai de 60 secondes
    MemcacheConnTTL 60

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_remoteip.html.fr.utf80000644000000000000500000007233113412755316021101 0ustar rootsrc mod_remoteip - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_remoteip

    Langues Disponibles:  en  |  fr 

    Description:Remplace l'adresse IP du client pour la requête par l'adresse IP présentée par un mandataire ou un répartiteur de charge via les en-têtes de la requête.
    Statut:Base
    Identificateur de Module:remoteip_module
    Fichier Source:mod_remoteip.c

    Sommaire

    Ce module permet de traiter le client qui a initié la requête en tant que client original du point de vue de httpd à des fins d'autorisation et de connexion, même si ce client se trouve derrière un répartiteur de charge, un serveur frontal, ou un serveur mandataire.

    Le module remplace l'adresse IP du client pour la connexion par l'adresse IP indiquée dans l'en-tête de requête configuré via la directive RemoteIPHeader.

    Ce module implémente aussi la partie serveur du protocole PROXY de HAProxy via la directive RemoteIPProxyProtocol.

    Une fois sa valeur modifiée comme indiqué, cette adresse IP client est utilisée pour la fonctionnalité Require ip de mod_authz_host ; elle est aussi affichée par mod_status, et enregistrée via les chaînes de formatage %a des modules mod_log_config et core. L'adresse IP client sous-jacente de la connexion est enregistrée via la chaîne de formatage %{c}a.

    Il est essentiel de n'activer cette fonctionnalité que pour les requêtes en provenance des serveurs intermédiaires (mandataires, etc...) auxquels le serveur peut faire confiance, car il est trivial pour le client distant d'usurper l'identité d'un autre client.
    top

    Traitement des adresses distantes

    Par défaut, Apache identifie le client via la valeur client_ip de la connexion, et de cette valeur découlent les valeurs remote_host et remote_logname de la connexion. Ces champs jouent un rôle dans l'authentification, l'autorisation et la journalisation, ainsi que dans d'autres traitements effectués par d'autres modules chargeables.

    mod_remoteip remplace l'adresse IP client de la connexion par l'adresse IP client indiquée par exemple par un mandataire ou un répartiteur de charge pour toute la durée de la requête. Un répartiteur de charge pourra ainsi établir une connexion keepalive de longue durée avec le serveur, chaque requête conservant alors l'adresse IP client correcte bien que l'adresse IP client sous-jacente du répartiteur de charge reste inchangée.

    Lorsque la valeur de l'en-tête comporte plusieurs adresses IP client séparées par des virgules, celles-ci sont traitées de la droite vers la gauche. Le traitement s'arrête lorsque l'adresse IP client courante n'est pas digne de confiance pour présenter l'adresse IP précédente. Le champ d'en-tête est alors mis à jour de façon à ne contenir que cette liste d'adresses non confirmées, ou bien, si toutes les adresses IP sont dignes de confiance, cet en-tête est tout bonnement supprimé de la requête.

    Lors du remplacement de l'adresse IP client, le module stocke la liste des hôtes intermédiaires dans un mémo remoteip-proxy-ip-list, que l'on peut faire enregistrer par mod_log_config en utilisant le symbole de format %{remoteip-proxy-ip-list}n. Si l'administrateur doit stocker ceci dans un en-tête additionnel, la même valeur peut aussi être enregistrée sous la forme d'un en-tête en utilisant la directive RemoteIPProxiesHeader.

    Adresses IPv4 converties au format IPv6

    Avec httpd, d'une manière générale, toute adresse IPv4 convertie au format IPv6 est enregistrée sous sa forme IPv4.

    Adresses internes (privées)

    Tous les blocs d'adresses internes 10/8, 172.16/12, 192.168/16, 169.254/16 and 127/8 (ainsi que les adresses IPv6 en dehors du bloc public 2000::/3 block) ne sont évaluées par mod_remoteip que lorsque des mandataires internes (intranet) RemoteIPInternalProxy sont enregistrés.
    top

    Directive RemoteIPHeader

    Description:Définit le champ d'en-tête qui contiendra les adresses IP du client
    Syntaxe:RemoteIPHeader en-tête
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_remoteip

    La directive RemoteIPHeader indique à mod_remoteip de traiter la valeur de l'en-tête spécifié comme l'adresse IP du client, ou comme une liste d'adresses IP clients intermédiaires, en fonction de la configuration des directives RemoteIPInternalProxy et RemoteIPTrustedProxy. Si ces deux dernières directives ne sont pas utilisées, mod_remoteip traitera tout hôte présentant une adresse non interne dans l'en-tête RemoteIPHeader comme hôte de confiance.

    Si ces deux dernières directives ne sont pas utilisées, mod_remoteip traitera tout hôte présentant une adresse non interne dans l'en-tête RemoteIPHeader comme hôte de confiance.

    Exemple à usage interne (répartiteur de charge)

    RemoteIPHeader X-Client-IP

    Exemple dans le cas d'un mandataire

    RemoteIPHeader X-Forwarded-For
    top

    Directive RemoteIPInternalProxy

    Description:Déclare les adresses IP intranet clients comme dignes de confiance pour présenter la valeur RemoteIPHeader
    Syntaxe:RemoteIPInternalProxy ip-mandataire|ip-mandataire/sous-réseau|nom-hôte ...
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_remoteip

    La directive RemoteIPInternalProxy permet d'ajouter une ou plusieurs adresses (ou blocs d'adresses) auxquelles on peut faire confiance pour présenter une valeur RemoteIPHeader valide de l'adresse IP du client. A la différence de la directive RemoteIPTrustedProxy, toute adresse IP présentée dans cet en-tête, y comprises les adresses intranet privées, sont considérées comme dignes de confiance lorsqu'elles sont indiquées par ces mandataires.

    Exemple à usage interne (répartiteur de charge)

    RemoteIPHeader X-Client-IP
    RemoteIPInternalProxy 10.0.2.0/24
    RemoteIPInternalProxy gateway.localdomain
    top

    Directive RemoteIPInternalProxyList

    Description:Déclare les adresses IP intranet clients comme dignes de confiance pour présenter la valeur RemoteIPHeader
    Syntaxe:RemoteIPInternalProxyList nom-fichier
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_remoteip

    La directive RemoteIPInternalProxyList permet de spécifier un fichier parcouru au démarrage du serveur pour construire une liste d'adresses (ou blocs d'adresses), auxquelles on peut faire confiance pour présenter une valeur RemoteIPHeader valide de l'adresse IP du client.

    Le caractère '#' indique une ligne de commentaires, sinon, toutes les lignes séparées par un caractère nouvelle ligne ou tous les éléments d'une ligne séparés par un espace sont traités de la même façon qu'avec la directive RemoteIPInternalProxy.

    Exemple à usage interne (répartiteur de charge)

    RemoteIPHeader X-Client-IP
    RemoteIPInternalProxyList conf/trusted-proxies.lst

    contenu de conf/mandataires-de-confiance.lst

             # Nos mandataires internes de confiance
             10.0.2.0/24         # Tout le monde dans le groupe de test
             passerelle.domaine-local # Le frontal répartiteur de charge
    top

    Directive RemoteIPProxiesHeader

    Description:Déclare le champ d'en-tête qui contiendra toutes les adresses IP intermédiaires
    Syntaxe:RemoteIPProxiesHeader Nom_en-tête
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_remoteip

    La directive RemoteIPProxiesHeader permet de spécifier l'en-tête dans lequel mod_remoteip va collecter une liste de toutes les adresses IP clients intermédiaires auxquelles on pourra faire confiance pour résoudre l'adresse IP client de la requête. Notez que les adresses intermédiaires RemoteIPTrustedProxy sont enregistrées dans cet en-tête, alors que toute adresse intermédiaire RemoteIPInternalProxy est omise.

    Exemple

    RemoteIPHeader X-Forwarded-For
    RemoteIPProxiesHeader X-Forwarded-By
    top

    Directive RemoteIPProxyProtocol

    Description:Active ou désactive la gestion du protocole PROXY
    Syntaxe:RemoteIPProxyProtocol On|Off
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_remoteip
    Compatibilité:Disponible à partir de la version 2.4.31 du serveur HTTP Apache

    La directive RemoteIPProxyProtocol permet d'activer ou de désactiver la prise en compte et la gestion de l'en-tête de connexion du protocole PROXY. Si elle est définie à On, la demande du client doit envoyer l'en-tête approprié pour chaque nouvelle connexion, sinon cette dernière sera fermée à moins qu'il ne fasse partie de la liste, définie via la directive RemoteIPProxyProtocolDisableHosts, des hôtes pour lesquels le protocole PROXY est désactivé.

    Bien que cette directive peut être définie au niveau de n'importe quel serveur virtuel, il est important de garder à l'esprit que, étant donné que le protocole PROXY est basé sur la connexion et agnostique quant au protocle, son activation/désactivation est basée sur le couple adresse IP/port. Cela signifie que si plusieurs serveurs virtuels à base de nom sont configurés avec le même couple adresse IP/port, et si vous activez le protocole PROXY pour l'un d'entre eux, il le sera aussi pour tous les autres (avec le même couple adresse IP/port). Cela signifie aussi que si vous tentez d'activer le protocole PROXY pour un serveur virtuel et de le désactiver pour un autre, cela ne marchera pas ; dans ce dernier cas, la dernière directive l'emporte sur les autres et une notification sera enregistrée dans le journal pour indiquer les réglages qui ont été annulés.

    Listen 80
    <VirtualHost *:80>
        ServerName www.example.com
        RemoteIPProxyProtocol On
    
        #Les requêtes pour ce serveur virtuel doivent contenir un en-tête du
        #protocole PROXY. Si ce n'est pas le cas, la connexion sera fermée.
    </VirtualHost>
    
    Listen 8080
    <VirtualHost *:8080>
        ServerName www.example.com
        RemoteIPProxyProtocol On
        RemoteIPProxyProtocolExceptions 127.0.0.1 10.0.0.0/8
    
        #Les requêtes pour ce serveur virtuel doivent contenir un en-tête du
        #protocole PROXY. Si ce n'est pas le cas, la connexion sera fermée à moins
        que sa source ne soit localhost ou la gamme d'adresses RFC1918 10.x.x.x
    </VirtualHost>
    top

    Directive RemoteIPProxyProtocolExceptions

    Description:Désactive la prise en compte de l'en-tête PROXY pour certains hôtes ou réseaux
    Syntaxe:RemoteIPProxyProtocolExceptions host|range [host|range] [host|range]
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_remoteip
    Compatibilité:RemoteIPProxyProtocolExceptions est disponible à partir de la version 2.4.31 du serveur HTTP Apache

    La directive RemoteIPProxyProtocol permet de contrôler la prise en compte de l'en-tête de connexion du protocole PROXY. Il est parfois souhaitable d'exiger pour certains clients la présence de l'en-tête PROXY, mais aussi de permettre aux autres clients de se connecter sans ce dernier. Cette directive permet à l'administrateur du serveur d'autoriser cette possibilité à un hôte isolé ou à une gamme d'hôtes au format CIDR.

    top

    Directive RemoteIPTrustedProxy

    Description:Déclare les adresses IP clientes de l'intranet dignes de confiance pour présenter la valeur RemoteIPHeader
    Syntaxe:RemoteIPTrustedProxy ip-mandataire|ip-mandataire/sous-réseau|nom-hôte ...
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_remoteip

    La directive RemoteIPTrustedProxy permet d'ajouter une ou plusieurs adresses, ou blocs d'adresses, auxquelles on peut faire confiance pour présenter une valeur RemoteIPHeader valide de l'adresse IP du client. A la différence de la directive RemoteIPInternalProxy, toutes les adresses IP intranet ou privées indiquées par de tels mandataires, y compris les blocs d'adresses 10/8, 172.16/12, 192.168/16, 169.254/16 et 127/8 (ou située en dehors du bloc IPv6 public 2000::/3), ne sont pas dignes de confiance en tant qu'adresses IP distantes, et se situent à gauche dans le contenu de l'en-tête RemoteIPHeader.

    Exemple d'adresse de confiance (répartiteur de charge

    RemoteIPHeader X-Forwarded-For
    RemoteIPTrustedProxy 10.0.2.16/28
    RemoteIPTrustedProxy proxy.example.com
    top

    Directive RemoteIPTrustedProxyList

    Description:Déclare les adresses IP intranet clients comme dignes de confiance pour présenter la valeur RemoteIPHeader
    Syntaxe:RemoteIPTrustedProxyList nom-fichier
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_remoteip

    La directive RemoteIPTrustedProxyList permet de spécifier un fichier parcouru au démarrage du serveur pour construire une liste d'adresses (ou blocs d'adresses), auxquelles on peut faire confiance pour présenter une valeur RemoteIPHeader valide de l'adresse IP du client.

    Le caractère '#' indique une ligne de commentaires, sinon, toutes les lignes séparées par un caractère nouvelle ligne ou tous les éléments d'une ligne séparés par un espace sont traités de la même façon qu'avec la directive RemoteIPTrustedProxy.

    Exemple d'adresse de confiance (répartiteur de charge

    RemoteIPHeader X-Forwarded-For
    RemoteIPTrustedProxyList conf/trusted-proxies.lst

    conf/mandataires-de-confiance.lst contents

    # Mandataires externes identifiés
    192.0.2.16/28 #groupe wap phone de mandataires
    proxy.isp.example.com #un FAI bien connu

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cache_socache.html.fr.utf80000644000000000000500000004607713412755316022015 0ustar rootsrc mod_cache_socache - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_cache_socache

    Langues Disponibles:  en  |  fr 

    Description:Module de stockage à base de cache d'objets partagés (socache) pour le filtre de mise en cache HTTP.
    Statut:Extension
    Identificateur de Module:cache_socache_module
    Fichier Source:mod_cache_socache.c

    Sommaire

    Le module mod_cache_socache implémente un gestionnaire de stockage à base de cache d'objets partagés (socache) pour le module mod_cache.

    Les en-têtes et corps des réponses mises en cache sont rassemblés et stockés sous une même clé dans le cache d'objets partagés. Il est possible de choisir entre plusieurs implémentations de caches d'objets partagés.

    Des réponses avec différents contenus négociés peuvent être stockées simultanément ; cependant, la mise en cache de contenus partiels n'est pas encore supportée par ce module.

    # Activation de la mise en cache
    CacheSocache shmcb
    CacheSocacheMaxSize 102400
    <Location "/foo">
        CacheEnable socache
    </Location>
    
    # Possibilité de se rabattre sur le cache disque
    CacheSocache shmcb
    CacheSocacheMaxSize 102400
    <Location "/foo">
        CacheEnable socache
        CacheEnable disk
    </Location>

    Note :

    Le module mod_cache_socache requiert les services du module mod_cache qui doit donc avoir été préalablement chargé.

    top

    Directive CacheSocache

    Description:Implémentation du cache d'objets partagés à utiliser
    Syntaxe:CacheSocache type[:args]
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_cache_socache
    Compatibilité:Disponible à partir de la version 2.4.5 du serveur HTTP Apache

    La directive CacheSocache définit l'implémentation du cache d'objets partagés à utiliser, suivie d'arguments optionnels. Il est possible de choisir entre plusieurs implémentations de caches d'objets partagés.

    CacheSocache shmcb
    top

    Directive CacheSocacheMaxSize

    Description:La taille maximale d'une entrée pouvant être placée dans le cache
    Syntaxe:CacheSocacheMaxSize octets
    Défaut:CacheSocacheMaxSize 102400
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache_socache
    Compatibilité:Disponible à partir de la version 2.4.5 du serveur HTTP Apache

    La directive CacheSocacheMaxSize définit la taille maximale, en octets, de la somme des en-têtes et du corps d'un document pouvant être stocké dans le cache. Bien entendu, plus la taille des en-têtes sera grande, plus la taille maximale du corps du document s'en trouvera réduite.

    Le module mod_cache_socache ne tentera de mettre en cache que des réponses qui possèdent une taille de contenu explicite, ou dont la taille est suffisamment petite pour qu'elles soient écrites en une seule passe. Ceci permet au module mod_cache_disk de mettre en cache des réponses dont la taille est trop importante pour pouvoir être mises en cache par mod_cache_socache.

    CacheSocacheMaxSize 102400
    top

    Directive CacheSocacheMaxTime

    Description:La durée maximale de stockage d'un document dans le cache avant péremption
    Syntaxe:CacheSocacheMaxTime secondes
    Défaut:CacheSocacheMaxTime 86400
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache_socache
    Compatibilité:Disponible à partir de la version 2.4.5 du serveur HTTP Apache

    La directive CacheSocacheMaxTime définit la durée de stockage maximale en secondes d'un document dans le cache avant péremption. Cette définition l'emporte sur la durée de fraîcheur définie pour le document par le protocole HTTP.

    CacheSocacheMaxTime 86400
    top

    Directive CacheSocacheMinTime

    Description:La durée minimale de stockage d'un document dans le cache
    Syntaxe:CacheSocacheMinTime seconds
    Défaut:CacheSocacheMinTime 600
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache_socache
    Compatibilité:Disponible à partir de la version 2.4.5 du serveur HTTP Apache

    La directive CacheSocacheMinTime définit le nombre de secondes au delà de la durée de fraîcheur de la réponse pendant lesquelles cette dernière devra être stockée dans le cache d'objets partagés. En effet, si une réponse n'est stockée que pour une durée égale à sa durée de fraîcheur, elle n'a pas besoin d'être rafraîchie.

    CacheSocacheMinTime 600
    top

    Directive CacheSocacheReadSize

    Description:La quantité minimale de données du document à lire et mettre en cache avant envoi au client
    Syntaxe:CacheSocacheReadSize octets
    Défaut:CacheSocacheReadSize 0
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache_socache
    Compatibilité:Disponible à partir de la version 2.4.5 du serveur HTTP Apache

    La directive CacheSocacheReadSize définit la quantité minimale de données, en octets, à lire depuis l'arrière-plan avant envoi au client. Avec la valeur par défaut 0, les données sont transmises au client dès leur arrivée et quelle que soit leur taille. Si la valeur définie est non nulle, le cache disque va mettre en tampon au moins la quantité de données correspondante avant envoi au client. Ceci peut améliorer les performances en cas de mise en cache de contenu en provenance d'un mandataire inverse lent.

    Cette directive n'a d'effet qu'au moment où les données sont stockées dans le cache, et non lorsqu'elles sont servies depuis le cache.

    CacheSocacheReadSize 102400
    top

    Directive CacheSocacheReadTime

    Description:La durée minimale de lecture avant l'envoi des données
    Syntaxe:CacheSocacheReadTime millisecondes
    Défaut:CacheSocacheReadTime 0
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache_socache
    Compatibilité:Disponible à partir de la version 2.4.5 du serveur HTTP Apache

    La directive CacheSocacheReadTime définit le temps minimal qui doit s'écouler avant de tenter l'envoi des données au client. Cette durée sera mise à profit pour lire et mettre en tampon les données avant leur envoi au client. Ceci peut améliorer les performances en cas de mise en cache de contenu en provenance d'un mandataire inverse.

    La valeur par défaut 0 désactive cette directive.

    Cette directive n'a d'effet qu'au moment où les données sont stockées dans le cache, et non lorsqu'elles sont servies depuis le cache. Il est recommandé d'utiliser cette directive en concomitance avec la directive CacheSocacheReadSize afin de s'assurer que le serveur ne mette pas les données en tampon de manière excessive dans le cas où les données arriveraient plus vite que prévu.

    CacheSocacheReadTime 1000

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_socache_shmcb.html.fr.utf80000644000000000000500000001461213412755316022034 0ustar rootsrc mod_socache_shmcb - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_socache_shmcb

    Langues Disponibles:  en  |  fr 

    Description:Fournisseur de cache d'objets partagés basé sur shmcb.
    Statut:Extension
    Identificateur de Module:socache_shmcb_module
    Fichier Source:mod_socache_shmcb.c

    Sommaire

    Le module mod_socache_shmcb est un fournisseur de cache d'objets partagés qui permet la création et l'accès à un cache maintenu par un tampon cyclique à hautes performances au sein d'un segment de mémoire partagée.

    shmcb:/chemin/vers/datafile(512000)

    Vous trouverez des détails à propos des autres fournisseurs de cache d'objets partagés ici.

    Support Apache!

    Directives

    Ce module ne fournit aucune directive.

    Traitement des bugs

    Voir aussi

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cache.html.ko.euc-kr0000644000000000000500000011501513412755316020617 0ustar rootsrc mod_cache - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_cache

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:URI¸¦ Ű·Î »ç¿ëÇÏ¿© ³»¿ëÀ» ij½¬ÇÑ´Ù.
    »óÅÂ:Experimental
    ¸ðµâ¸í:cache_module
    ¼Ò½ºÆÄÀÏ:mod_cache.c

    ¿ä¾à

    ÀÌ ¸ðµâÀº ½ÇÇèÀûÀÎ »óÅÂÀÌ´Ù. ¹®¼­´Â ¾ÆÁ÷ ÀÛ¾÷ÁßÀÌ´Ù...

    mod_cache´Â °°Àº ÄÄÇ»ÅÍ¿¡ ÀÖ´Â ³»¿ëÀ̳ª ÇÁ·Ï½ÃµÈ ³»¿ëÀ» ij½¬ÇÒ ¼ö ÀÖ´Â RFC 2616 ȣȯ HTTP ³»¿ëij½¬¸¦ ±¸ÇöÇÑ´Ù. mod_cache¸¦ »ç¿ëÇÏ·Á¸é ÀúÀå°ü¸®¸ðµâ(storage management module)ÀÌ ÇÊ¿äÇÏ´Ù. ±âº» ¾ÆÆÄÄ¡ ¹èÆ÷º»¿¡´Â µÎ°¡Áö ÀúÀå°ü¸®¸ðµâÀÌ ÀÖ´Ù:

    mod_cache_disk
    ´Â µð½ºÅ©±â¹Ý ÀúÀå°ü¸®ÀÚ¸¦ ±¸ÇöÇÑ´Ù.
    mod_mem_cache
    ´Â ¸Þ¸ð¸®±â¹Ý ÀúÀå°ü¸®ÀÚ¸¦ ±¸ÇöÇÑ´Ù. mod_mem_cache´Â ÆÄÀϱâ¼úÀÚ¸¦ ij½¬Çϰųª Èü(heap) °ø°£¿¡ °´Ã¼¸¦ ij½¬ÇÏ´Â µÎ°¡Áö ¹æ½ÄÁß ÇѰ¡Áö ¹æ¹ýÀ¸·Î µ¿ÀÛÇϵµ·Ï ¼³Á¤ÇÒ ¼ö ÀÖ´Ù. mod_mem_cache´Â ÀÚ½ÅÀÌ »ý¼ºÇÑ ³»¿ëÀ» ij½¬Çϰųª, (¿ªÇÁ·Ï½Ã(reverse proxy)·Î ¾Ë·ÁÁø) ProxyPass¸¦ »ç¿ëÇÏ¿© mod_proxy¸¦ À§ÇØ µÞ´Ü ¼­¹ö³»¿ëÀ» ij½¬ÇÒ ¼ö ÀÖ´Ù.

    ³»¿ëÀ» URI¸¦ Åä´ë·Î ¸¸µç Ű·Î ij½¬¿¡ ÀúÀåÇÏ°í °¡Á®¿Â´Ù. Á¢±Ùº¸È£°¡ µÈ ³»¿ëÀº ij½¬ÇÏÁö¾Ê´Â´Ù.

    top
    top

    ¼³Á¤¿¹

    Sample httpd.conf

    #
    # ¿¹Á¦ ij½¬ ¼³Á¤
    #
    LoadModule cache_module modules/mod_cache.so

    <IfModule mod_cache.c>
    #LoadModule cache_disk_module modules/mod_cache_disk.so
    <IfModule mod_cache_disk.c>
    CacheRoot c:/cacheroot
    CacheSize 256
    CacheEnable disk /
    CacheDirLevels 5
    CacheDirLength 3
    </IfModule>

    LoadModule mem_cache_module modules/mod_mem_cache.so
    <IfModule mod_mem_cache.c>
    CacheEnable mem /
    MCacheSize 4096
    MCacheMaxObjectCount 100
    MCacheMinObjectSize 1
    MCacheMaxObjectSize 2048
    </IfModule>
    </IfModule>

    top

    CacheDefaultExpire Áö½Ã¾î

    ¼³¸í:¸¸±â½Ã°£À» ÁöÁ¤ÇÏÁö¾ÊÀº ¹®¼­¸¦ ij½¬ÇÒ ±âº» ±â°£.
    ¹®¹ý:CacheDefaultExpire seconds
    ±âº»°ª:CacheDefaultExpire 3600 (one hour)
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    CacheDefaultExpire Áö½Ã¾î´Â ¹®¼­ÀÇ ¸¸±â½Ã°£°ú ÃÖ±Ù¼öÁ¤½Ã°£ÀÌ ¾ø´Â °æ¿ì ¹®¼­¸¦ ij½¬ÇÒ ÃÊ´ÜÀ§ ±âº» ½Ã°£À» ÁöÁ¤ÇÑ´Ù. CacheMaxExpire·Î ÁöÁ¤ÇÑ °ªÀÌ ÀÌ ¼³Á¤À» ¹«½ÃÇÏÁö ¾Ê´Â´Ù.

    CacheDefaultExpire 86400

    top

    CacheDetailHeader Áö½Ã¾î

    ¼³¸í:Add an X-Cache-Detail header to the response.
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    Documentation not yet translated. Please see English version of document.

    top

    CacheDisable Áö½Ã¾î

    ¼³¸í:ƯÁ¤ URLÀ» ij½¬ÇÏÁö ¾Ê´Â´Ù
    ¹®¹ý:CacheDisable url-string
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    CacheDisable Áö½Ã¾î¸¦ »ç¿ëÇϸé mod_cache°¡ url-string ÀÌÇÏÀÇ urlµéÀ» ij½¬ÇÏÁö ¾Ê´Â´Ù.

    ¿¹Á¦

    CacheDisable /local_files

    top

    CacheEnable Áö½Ã¾î

    ¼³¸í:ÁöÁ¤ÇÑ ÀúÀå°ü¸®ÀÚ¸¦ »ç¿ëÇÏ¿© ÁöÁ¤ÇÑ URLÀ» ij½¬ÇÑ´Ù
    ¹®¹ý:CacheEnable cache_type url-string
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    CacheEnable Áö½Ã¾î¸¦ »ç¿ëÇϸé mod_cache°¡ url-string ÀÌÇÏ urlµéÀ» ij½¬ÇÑ´Ù. ij½¬ ÀúÀå°ü¸®ÀÚ´Â cache_type ¾Æ±Ô¸ÕÆ®·Î ÁöÁ¤ÇÑ´Ù. cache_type memÀº mod_mem_cache°¡ ±¸ÇöÇÏ´Â ¸Þ¸ð¸®±â¹Ý ÀúÀå°ü¸®ÀÚ¸¦ »ç¿ëÇÑ´Ù. cache_type disk´Â mod_cache_disk°¡ ±¸ÇöÇÏ´Â µð½ºÅ©±â¹Ý ÀúÀå°ü¸®ÀÚ¸¦ »ç¿ëÇÑ´Ù. cache_type fd´Â mod_mem_cache°¡ ±¸ÇöÇÏ´Â ÆÄÀϱâ¼úÀÚ Ä³½¬¸¦ »ç¿ëÇÑ´Ù.

    (¾Æ·¡ ¿¹¿Í °°ÀÌ) URL °ø°£ÀÌ ´Ù¸¥ CacheEnable Áö½Ã¾î¿Í °ãÄ¡¸é ½ÇÁ¦·Î ÇÑ ÀúÀå°ü¸®ÀÚ°¡ ¿äûÀ» ó¸®ÇÒ¶§±îÁö µÎ ÀúÀå°ü¸®ÀÚ¸¦ ¸ðµÎ ½ÇÇàÇÑ´Ù. ¼³Á¤ÆÄÀÏ¿¡¼­ CacheEnable Áö½Ã¾îÀÇ ¼ø¼­´ë·Î ÀúÀå°ü¸®ÀÚ°¡ ½ÇÇàµÈ´Ù.

    CacheEnable mem /manual
    CacheEnable fd /images
    CacheEnable disk /

    top

    CacheHeader Áö½Ã¾î

    ¼³¸í:Add an X-Cache header to the response.
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    Documentation not yet translated. Please see English version of document.

    top

    CacheIgnoreCacheControl Áö½Ã¾î

    ¼³¸í:Ŭ¶óÀÌ¾ðÆ®°¡ ij½¬ÇÏÁö¾Ê´Â ³»¿ëÀ» ¿äûÇÔÀ» ¹«½ÃÇÑ´Ù.
    ¹®¹ý:CacheIgnoreCacheControl On|Off
    ±âº»°ª:CacheIgnoreCacheControl Off
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    º¸Åë no-cache³ª no-store Çì´õ°ªÀ» °¡Áø ¹®¼­´Â ij½¬¿¡ ÀúÀåÇÏÁö¾Ê´Â´Ù. CacheIgnoreCacheControl Áö½Ã¾î´Â ÀÌ·± ÇൿÀ» º¯°æÇÑ´Ù. CacheIgnoreCacheControl OnÀ» »ç¿ëÇÏ¸é ¼­¹ö´Â ¹®¼­¿¡ no-cache³ª no-store Çì´õ°ªÀÌ À־ ¹®¼­¸¦ ij½¬ÇÑ´Ù. ÀÎÁõÀÌ ÇÊ¿äÇÑ ¹®¼­´Â Àý´ë·Î ij½¬ÇÏÁö ¾Ê´Â´Ù.

    CacheIgnoreCacheControl On

    top

    CacheIgnoreHeaders Áö½Ã¾î

    ¼³¸í:ij½¬¿¡ ÁöÁ¤ÇÑ HTTP Çì´õ(µé)¸¦ ÀúÀåÇÏÁö ¾Ê´Â´Ù
    ¹®¹ý:CacheIgnoreHeaders header-string [header-string] ...
    ±âº»°ª:CacheIgnoreHeaders None
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    RFC 2616¿¡ µû¸£¸é È©°£(hop-by-hop) HTTP Çì´õ´Â ij½¬¿¡ ÀúÀåÇÏÁö ¾Ê´Â´Ù. È©°£ HTTP Çì´õ¿¡´Â ´ÙÀ½°ú °°Àº °ÍÀÌ ÀÖÀ¸¸ç, CacheIgnoreHeaders ¼³Á¤°ú °ü°è¾øÀÌ ¾î¶² °æ¿ì¿¡µµ ij½¬¿¡ ÀúÀåµÇÁö ¾Ê´Â´Ù.

    • Connection
    • Keep-Alive
    • Proxy-Authenticate
    • Proxy-Authorization
    • TE
    • Trailers
    • Transfer-Encoding
    • Upgrade

    CacheIgnoreHeaders´Â ij½¬¿¡ ÀúÀåÇÏ¸é ¾ÈµÇ´Â HTTP Çì´õ¸¦ Ãß°¡·Î ÁöÁ¤ÇÑ´Ù. ¿¹¸¦ µé¾î, ÄíŰ(cookie)¸¦ ij½¬¿¡ ÀúÀåÇÏ¸é ¾ÈµÇ´Â °æ¿ì°¡ ÀÖ´Ù.

    CacheIgnoreHeaders´Â ij½¬¿¡ ÀúÀåÇÏÁö ¾ÊÀ» HTTP Çì´õµéÀ» °ø¹éÀ¸·Î ±¸ºÐÇÑ ¸ñ·ÏÀ» ¹Þ´Â´Ù. (RFC 2616¿¡ µû¶ó) ij½¬¿¡ È©°£ Çì´õ¸¸ ÀúÀåÇÏÁö ¾ÊÀ¸·Á¸é, CacheIgnoreHeaders¸¦ NoneÀ¸·Î ¼³Á¤ÇÑ´Ù.

    ¿¹Á¦ 1

    CacheIgnoreHeaders Set-Cookie

    ¿¹Á¦ 2

    CacheIgnoreHeaders None

    °æ°í:

    CacheIgnoreHeaders ¼³Á¤À» »ç¿ëÇÏ¿© Expires °°ÀÌ Ä³½¬ °ü¸®¿¡ ÇÊ¿äÇÑ Çì´õ¸¦ ÀúÀåÇÏÁö ¾ÊÀ¸¸é, mod_cache´Â ºñÁ¤»óÀûÀ¸·Î µ¿ÀÛÇÑ´Ù.
    top

    CacheIgnoreNoLastMod Áö½Ã¾î

    ¼³¸í:ÀÀ´ä¿¡ Last Modified Çì´õ°¡ ¾ø´Ù´Â »ç½ÇÀ» ¹«½ÃÇÑ´Ù.
    ¹®¹ý:CacheIgnoreNoLastMod On|Off
    ±âº»°ª:CacheIgnoreNoLastMod Off
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    º¸Åë ÃÖ±Ù¼öÁ¤ÀÏÀÌ ¾ø´Â ¹®¼­´Â ij½¬ÇÏÁö ¾Ê´Â´Ù. ¾î¶² °æ¿ì ÃÖ±Ù¼öÁ¤ÀÏÀ» (¿¹¸¦ µé¾î mod_include ó¸®Áß¿¡) »©°Å³ª óÀ½ºÎÅÍ ¾ø¾úÀ» ¼ö°¡ ÀÖ´Ù. CacheIgnoreNoLastMod Áö½Ã¾î´Â ÃÖ±Ù¼öÁ¤ÀÏÀÌ ¾ø´Â ¹®¼­µµ ¹Ýµå½Ã ij½¬Çϵµ·Ï ¸¸µç´Ù. ¹®¼­¿¡ ÃÖ±Ù¼öÁ¤Àϰú ¸¸±â½Ã°£ÀÌ ¾ø´Â °æ¿ì CacheDefaultExpire Áö½Ã¾î·Î ÁöÁ¤ÇÑ °ªÀ» ¸¸±â½Ã°£À¸·Î »ç¿ëÇÑ´Ù.

    CacheIgnoreNoLastMod On

    top

    CacheIgnoreQueryString Áö½Ã¾î

    ¼³¸í:Ignore query string when caching
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    Documentation not yet translated. Please see English version of document.

    top

    CacheIgnoreURLSessionIdentifiers Áö½Ã¾î

    ¼³¸í:Ignore defined session identifiers encoded in the URL when caching
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    Documentation not yet translated. Please see English version of document.

    top

    CacheKeyBaseURL Áö½Ã¾î

    ¼³¸í:Override the base URL of reverse proxied cache keys.
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    Documentation not yet translated. Please see English version of document.

    top

    CacheLastModifiedFactor Áö½Ã¾î

    ¼³¸í:LastModified ½Ã°£À¸·Î ¸¸±â½Ã°£À» °è»êÇϴµ¥ »ç¿ëÇÏ´Â °è¼ö.
    ¹®¹ý:CacheLastModifiedFactor float
    ±âº»°ª:CacheLastModifiedFactor 0.1
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    ¹®¼­¿¡ ¸¸±â½Ã°£Àº ¾øÁö¸¸ ÃÖ±Ù¼öÁ¤ÀÏÀÌ ÀÖ´Â °æ¿ì ÃÖ±Ù¼öÁ¤ÀÏ ÀÌÈÄ Áö³­ ½Ã°£À¸·Î ¸¸±â½Ã°£À» °è»êÇÑ´Ù. CacheLastModifiedFactor Áö½Ã¾î´Â ¸¸±â½Ã°£À» °è»êÇÏ´Â ´ÙÀ½ °ø½Ä¿¡¼­ »ç¿ëÇÒ factor¸¦ ÁöÁ¤ÇÑ´Ù: expiry-period = time-since-last-modified-date * factor expiry-date = current-date + expiry-period ¿¹¸¦ µé¾î, ¹®¼­°¡ 10 ½Ã°£ Àü¿¡ ¸¶Áö¸·À¸·Î ¼öÁ¤µÇ¾ú°í factor°¡ 0.1À̶ó¸é ¸¸±â±â°£Àº 10*01 = 1 ½Ã°£ÀÌ µÈ´Ù. ÇöÀç ½Ã°£ÀÌ 3:00pmÀ̶ó¸é ¸¸±â½Ã°£Àº 3:00pm + 1½Ã°£ = 4:00pmÀÌ´Ù. ¸¸±â±â°£ÀÌ CacheMaxExpire º¸´Ù ±æ´Ù¸é CacheMaxExpire¸¦ »ç¿ëÇÑ´Ù.

    CacheLastModifiedFactor 0.5

    top

    CacheLock Áö½Ã¾î

    ¼³¸í:Enable the thundering herd lock.
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    Documentation not yet translated. Please see English version of document.

    top

    CacheLockMaxAge Áö½Ã¾î

    ¼³¸í:Set the maximum possible age of a cache lock.
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    Documentation not yet translated. Please see English version of document.

    top

    CacheLockPath Áö½Ã¾î

    ¼³¸í:Set the lock path directory.
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    Documentation not yet translated. Please see English version of document.

    top

    CacheMaxExpire Áö½Ã¾î

    ¼³¸í:¹®¼­¸¦ ij½¬ÇÏ´Â ÃÊ´ÜÀ§ ÃÖ´ë½Ã°£
    ¹®¹ý:CacheMaxExpire seconds
    ±âº»°ª:CacheMaxExpire 86400 (ÇÏ·ç)
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    CacheMaxExpire Áö½Ã¾î´Â ½ÇÁ¦ ¼­¹ö¸¦ °Ë»çÇÏÁö¾Ê°í ij½¬°¡´ÉÇÑ HTTP ¹®¼­¸¦ À¯ÁöÇÒ ¼ö ÀÖ´Â ÃÊ´ÜÀ§ ÃÖ´ë½Ã°£À» ÁöÁ¤ÇÑ´Ù. Áï, ¹®¼­´Â ÃÖ´ëÇÑ ÀÌ ¼³Á¤°ª¸¸Å­ ¿À·¡µÇ¾ú´Ù. ¹®¼­°¡ ¸¸±â½Ã°£À» ÁöÁ¤ÇÏ¿©µµ ÀÌ ÃÖ´ë°ªÀ» ÁöŲ´Ù.

    CacheMaxExpire 604800

    top

    CacheMinExpire Áö½Ã¾î

    ¼³¸í:The minimum time in seconds to cache a document
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    Documentation not yet translated. Please see English version of document.

    top

    CacheQuickHandler Áö½Ã¾î

    ¼³¸í:Run the cache from the quick handler.
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    Documentation not yet translated. Please see English version of document.

    top

    CacheStaleOnError Áö½Ã¾î

    ¼³¸í:Serve stale content in place of 5xx responses.
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    Documentation not yet translated. Please see English version of document.

    top

    CacheStoreExpired Áö½Ã¾î

    ¼³¸í:Attempt to cache responses that the server reports as expired
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    Documentation not yet translated. Please see English version of document.

    top

    CacheStoreNoStore Áö½Ã¾î

    ¼³¸í:Attempt to cache requests or responses that have been marked as no-store.
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    Documentation not yet translated. Please see English version of document.

    top

    CacheStorePrivate Áö½Ã¾î

    ¼³¸í:Attempt to cache responses that the server has marked as private
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Experimental
    ¸ðµâ:mod_cache

    Documentation not yet translated. Please see English version of document.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_deflate.html.ja.utf80000644000000000000500000007607613435243454020656 0ustar rootsrc mod_deflate - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_deflate

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:クライアントã¸é€ã‚‰ã‚Œã‚‹å‰ã«ã‚³ãƒ³ãƒ†ãƒ³ãƒ„を圧縮ã™ã‚‹
    ステータス:Extension
    モジュール識別å­:deflate_module
    ソースファイル:mod_deflate.c

    概è¦

    mod_deflate モジュール㯠DEFLATE 出力フィルタをæä¾›ã—ã¾ã™ã€‚ã“れã¯ã‚µãƒ¼ãƒã‹ã‚‰ã®å‡ºåŠ›ã‚’ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’ 通ã—ã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚‹å‰ã«åœ§ç¸®ã™ã‚‹ã“ã¨ã‚’å¯èƒ½ã«ã—ã¾ã™ã€‚

    top

    サンプル設定

    下ã«ã›ã£ã‹ã¡ãªäººå‘ã‘ã®ç°¡å˜ãªè¨­å®šä¾‹ã‚’示ã—ã¾ã™ã€‚

    数タイプã®ã¿åœ§ç¸®ã™ã‚‹

    AddOutputFilterByType DEFLATE text/html text/plain text/xml

    以下ã®è¨­å®šã¯ã‚³ãƒ³ãƒ†ãƒ³ãƒ„をより圧縮ã—ã¾ã™ãŒã€ãšã£ã¨è¤‡é›‘ãªè¨­å®šã«ãªã‚Šã¾ã™ã€‚ 設定ã®éš…々ã¾ã§ã‚ˆãç†è§£ã—ãªã„ã§ä½¿ã‚ãªã„ã§ãã ã•ã„。

    ç”»åƒä»¥å¤–å…¨ã¦åœ§ç¸®ã™ã‚‹

    <Location />
    # Insert filter
    SetOutputFilter DEFLATE

    # Netscape 4.x has some problems...
    BrowserMatch ^Mozilla/4 gzip-only-text/html

    # Netscape 4.06-4.08 have some more problems
    BrowserMatch ^Mozilla/4\.0[678] no-gzip

    # MSIE masquerades as Netscape, but it is fine
    # BrowserMatch \bMSIE !no-gzip !gzip-only-text/html

    # Don't compress images
    SetEnvIfNoCase Request_URI \
    \.(?:gif|jpe?g|png)$ no-gzip dont-vary

    # Make sure proxies don't deliver the wrong content
    Header append Vary User-Agent env=!dont-vary
    </Location>

    top

    圧縮を有効ã«ã™ã‚‹

    Output Compression

    圧縮機能㯠DEFLATE フィルタ ã«ã‚ˆã‚Šå®Ÿè£…ã•れã¦ã„ã¾ã™ã€‚以下ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®ã‚ã‚‹ コンテナ中ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’圧縮ã™ã‚‹ã‚ˆã†ã«ã—ã¾ã™:

    SetOutputFilter DEFLATE

    よã使ã‚れã¦ã„るブラウザã§ã¯ã€ã™ã¹ã¦ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«å¯¾ã™ã‚‹ 圧縮を扱ãˆã‚‹ã‚ã‘ã§ã¯ã‚りã¾ã›ã‚“。ã§ã™ã‹ã‚‰ã€gzip-only-text/html ノートを 1 ã«ã—ã¦ã€html ファイルã«å¯¾ã—ã¦ã®ã¿ 圧縮ãŒåƒãよã†ã«ã—ãŸæ–¹ãŒã‚ˆã„ã‹ã‚‚ã—れã¾ã›ã‚“ (以下å‚ç…§) ã“ã®å€¤ã‚’ 1 以外ã®å€¤ã«è¨­å®šã—ãŸå ´åˆã¯ç„¡è¦–ã•れã¾ã™ã€‚

    通常ã€ç‰¹å®šã®MIMEタイプã«ã¤ã„ã¦ã®ã¿åœ§ç¸®ã—ãŸã„ã®ã§ã‚れã°ã€ AddOutputFilterByType ディレクティブを使用ã—ã¾ã™ã€‚次㫠Apache ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã® html ファイルã®ã¿ã®åœ§ç¸®ã‚’有効ã«ã™ã‚‹ä¾‹ã‚’示ã—ã¾ã™ã€‚

    <Directory "/your-server-root/manual">
    AddOutputFilterByType DEFLATE text/html
    </Directory>

    å…¨ã¦ã®ãƒ•ァイルタイプã§ã®åœ§ç¸®ã«å•題を抱ãˆã¦ã„るブラウザã«å¯¾ã—ã¦ã¯ã€ BrowserMatch ディレクティブを使用ã—ã¦ã€ç‰¹å®šã®ãƒ–ラウザ㫠no-gzip ノートをセットã—ã€åœ§ç¸®ãŒè¡Œãªã‚れãªã„よã†ã«ã—ã¾ã™ã€‚ no-gzip 㨠gzip-only-text/html を組ã¿åˆã‚ã›ã‚‹ã“ã¨ã§ä¸Šæ‰‹ã対処ã§ãã¾ã™ã€‚ ã“ã®å ´åˆã€å‰è€…ãŒå¾Œè€…をオーãƒãƒ¼ãƒ©ã‚¤ãƒ‰ã—ã¾ã™ã€‚ 上記ã®è¨­å®šä¾‹ã®æŠœç²‹ã‚’ 次ã«ç¤ºã—ã¾ã™ã®ã§ã”覧下ã•ã„。

    BrowserMatch ^Mozilla/4 gzip-only-text/html
    BrowserMatch ^Mozilla/4\.0[678] no-gzip
    BrowserMatch \bMSIE !no-gzip !gzip-only-text/html

    ã¾ãšå§‹ã‚ã« User-Agent 文字列ã‹ã‚‰ Netscape Navigator 4.x ã§ã‚ã‚‹ã‹ã©ã†ã‹ã‚’調ã¹ã¾ã™ã€‚ã“れらã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯ã€ text/html 以外ã®ã‚¿ã‚¤ãƒ—ã®åœ§ç¸®ã‚’扱ã†ã“ã¨ãŒã§ãã¾ã›ã‚“。 4.06, 4.07, 4.08 㯠html ファイルã®ä¼¸å¼µã«ã‚‚å•題を抱ãˆã¦ã„ã¾ã™ã€‚ ã§ã™ã‹ã‚‰ã“れらã«å¯¾ã—ã¦ã¯ã€å®Œå…¨ã« deflate フィルタをオフã«ã—ã¾ã™ã€‚

    3 番目㮠BrowserMatch ディレクティブã§ã€æŽ¨æ¸¬ã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆã‚’修正ã—ã¾ã™ã€‚ ãªãœãªã‚‰ Microsoft Internet Explorer ã‚‚ "Mozilla/4" ã¨ç‰¹å®šã•れã¾ã™ãŒã€ ã“れらã¯å®Ÿéš›ã«ã¯åœ§ç¸®ã‚’扱ã†ã“ã¨ãŒã§ãã‚‹ã‹ã‚‰ã§ã™ã€‚ User-Agent ヘッダを "MSIE" (\b ã¯ã€Œå˜èªžã®å¢ƒç•Œã€ã‚’æ„味ã—ã¾ã™) ã®è¿½åŠ æ–‡å­—ã§æ¤œæŸ»ã—ã¦ã€ ã“れ以å‰ã«è¨­å®šã—ãŸåˆ¶é™ã‚’å†ã³è§£é™¤ã—ã¾ã™ã€‚

    注

    DEFLATE フィルタã¯å¿…ãšã€PHP ã‚„ SSI ã¨ã„ã£ãŸ RESOURCE フィルタã®å¾Œã«ãªã‚Šã¾ã™ã€‚ DEFLATE フィルタã¯å†…部的ãªã‚µãƒ–リクエストを関知ã—ã¾ã›ã‚“。

    注

    SetEnv ã§è¨­å®šã•れる force-gzip 環境変数ãŒã‚りã¾ã™ãŒã€ã“れ㯠ブラウザ㮠accept-encoding 設定を無視ã—ã€åœ§ç¸®ã—ãŸå‡ºåŠ›ã‚’ã—ã¾ã™ã€‚

    出力ã®ä¼¸é•·

    mod_deflate モジュールã¯ã€gzip 圧縮ã•れãŸãƒ¬ã‚¹ãƒãƒ³ã‚¹ 本文を inflate/uncompress ã™ã‚‹ãƒ•ィルタもæä¾›ã—ã¦ã„ã¾ã™ã€‚ ã“ã®æ©Ÿèƒ½ã‚’有効ã«ã™ã‚‹ã«ã¯ã€SetOutputFilter ã‚„ AddOutputFilter を使ã£ã¦ã€ INFLATE フィルタを出力フィルタãƒã‚§ã‚¤ãƒ³ã«æŒ¿å…¥ã—ã¾ã™ã€‚ 例ãˆã°æ¬¡ã®ã‚ˆã†ã«ã—ã¾ã™ã€‚

    <Location /dav-area>
    ProxyPass http://example.com/
    SetOutputFilter INFLATE
    </Location>

    ã“ã®ä¾‹ã§ã¯ã€example.com ã‹ã‚‰ã® gzip 圧縮ã•れãŸå‡ºåŠ›ã‚’ä¼¸é•·ã—〠ãã®ä»–ã®ãƒ•ィルタãŒã•らã«ãã®å‡ºåŠ›ã‚’å‡¦ç†ã§ãるよã†ã«ã—ã¾ã™ã€‚

    入力ã®ä¼¸å¼µ

    mod_deflate モジュールã¯ã€gzip ã§åœ§ç¸®ã•れãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆæœ¬ä½“を伸張ã™ã‚‹ãƒ•ィルタもæä¾›ã—ã¦ã„ã¾ã™ã€‚ ã“ã®æ©Ÿèƒ½ã‚’有効ã«ã™ã‚‹ã«ã¯ã€SetInputFilter ã‹ AddInputFilter を使用ã—ã¦ã€ DEFLATE フィルタを入力フィルタãƒã‚§ã‚¤ãƒ³ã«çµ„ã¿è¾¼ã¿ã¾ã™ã€‚ 例ãˆã°æ¬¡ã®ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚

    <Location /dav-area>
    SetInputFilter DEFLATE
    </Location>

    ã“ã®è¨­å®šã§ã‚れã°ã€Content-Encoding: gzip ヘッダをå«ã‚€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæ¥ã‚‹ã¨ã€æœ¬ä½“ã¯è‡ªå‹•çš„ã«ä¼¸å¼µã•れã¾ã™ã€‚ gzip リクエスト本体をé€ä¿¡ã™ã‚‹ãƒ–ラウザã¯ã‚ã¾ã‚Šã‚りã¾ã›ã‚“。 ã—ã‹ã—ã€ä¾‹ãˆã° WebDAV クライアントã®å¹¾ã¤ã‹ãªã©ã€ç‰¹åˆ¥ãªã‚¢ãƒ—リケーションã§ãƒªã‚¯ã‚¨ã‚¹ãƒˆã® 圧縮を実際ã«ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã‚‚ã®ã‚‚ã‚りã¾ã™ã€‚

    Content-Length ã«é–¢ã™ã‚‹æ³¨æ„

    リクエスト本体ãれ自体を評価ã™ã‚‹å ´åˆã¯ã€Content-Length ヘッダを信用ã—ãªã„ã§ãã ã•ã„。Content-Length ヘッダã¯ã€ クライアントã‹ã‚‰é€ä¿¡ã•れるデータã®é•·ã•ã‚’åæ˜ ã—ã¦ã„ã‚‹ã®ã§ã‚ã£ã¦ã€ 伸張ã•れãŸãƒ‡ãƒ¼ã‚¿ã‚¹ãƒˆãƒªãƒ¼ãƒ ã®ãƒã‚¤ãƒˆã‚«ã‚¦ãƒ³ãƒˆã§ã¯ã‚りã¾ã›ã‚“。

    top

    Proxy サーãƒã§ã®æ‰±ã„

    mod_deflate モジュール㯠Vary: Accept-Encoding HTTP 応答ヘッダをé€ä¿¡ã—ã¦ã€é©åˆ‡ãª Accept-Encoding リクエストヘッダをé€ä¿¡ã™ã‚‹ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«å¯¾ã—ã¦ã®ã¿ã€ プロクシサーãƒãŒã‚­ãƒ£ãƒƒã‚·ãƒ¥ã—ãŸå¿œç­”ã‚’é€ä¿¡ã™ã‚‹ã‚ˆã†ã«æ³¨æ„ã‚’å–šèµ·ã—ã¾ã™ã€‚ ã“ã®ã‚ˆã†ã«ã—ã¦ã€åœ§ç¸®ã‚’扱ã†ã“ã¨ã®ã§ããªã„クライアント㫠圧縮ã•れãŸå†…容ãŒé€ã‚‰ã‚Œã‚‹ã“ã¨ã®ãªã„よã†ã«ã—ã¾ã™ã€‚

    ã‚‚ã—特別ã«ä½•ã‹ã«ä¾å­˜ã—ã¦é™¤å¤–ã—ãŸã„å ´åˆã€ä¾‹ãˆã° User-Agent ヘッダãªã©ã«ä¾å­˜ã—ã¦ã„ã‚‹å ´åˆã€æ‰‹å‹•ã§ Vary ヘッダを設定ã—ã¦ã€ 追加ã®åˆ¶é™ã«ã¤ã„ã¦ãƒ—ロクシサーãƒã«æ³¨æ„を行ãªã†å¿…è¦ãŒã‚りã¾ã™ã€‚ 例ãˆã° User-Agent ã«ä¾å­˜ã—㦠DEFLATE を追加ã™ã‚‹å…¸åž‹çš„ãªè¨­å®šã§ã¯ã€æ¬¡ã®ã‚ˆã†ã«è¿½åŠ ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚

    Header append Vary User-Agent

    ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ä»¥å¤–ã®æƒ…å ± (例ãˆã° HTTP ãƒãƒ¼ã‚¸ãƒ§ãƒ³) ã«ä¾å­˜ã—ã¦åœ§ç¸®ã™ã‚‹ã‹ã©ã†ã‹æ±ºã‚ã‚‹å ´åˆã€ Vary ヘッダを * ã«è¨­å®šã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚ ã“ã®ã‚ˆã†ã«ã™ã‚‹ã¨ã€ä»•æ§˜ã«æº–æ‹ ã—ãŸãƒ—ロクシã¯ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’å…¨ã行ãªã‚ãªããªã‚Šã¾ã™ã€‚

    例

    Header set Vary *

    top

    DeflateBufferSize ディレクティブ

    説明:zlib ãŒä¸€åº¦ã«åœ§ç¸®ã™ã‚‹å¡Šã®å¤§ãã•
    æ§‹æ–‡:DeflateBufferSize value
    デフォルト:DeflateBufferSize 8096
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_deflate

    DeflateBufferSize ディレクティブ㯠zlib ãŒä¸€åº¦ã«åœ§ç¸®ã™ã‚‹å¡Šã®å¤§ãã•ã‚’ãƒã‚¤ãƒˆå˜ä½ã§æŒ‡å®šã—ã¾ã™ã€‚

    top

    DeflateCompressionLevel ディレクティブ

    説明:出力ã«å¯¾ã—ã¦è¡Œãªã†åœ§ç¸®ã®ç¨‹åº¦
    æ§‹æ–‡:DeflateCompressionLevel value
    デフォルト:Zlib ã®ãƒ‡ãƒ•ォルト
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_deflate
    äº’æ›æ€§:This directive is available since Apache 2.0.45

    DeflateCompressionLevel ディレクティブ㯠圧縮ã®ç¨‹åº¦ã‚’設定ã—ã¾ã™ã€‚大ããªå€¤ã§ã¯ã€ã‚ˆã‚Šåœ§ç¸®ãŒè¡Œãªã‚れã¾ã™ãŒã€ CPU 資æºã‚’消費ã—ã¾ã™ã€‚

    値㯠1 (低圧縮) ã‹ã‚‰ 9 (高圧縮) ã§ã™ã€‚

    top

    DeflateFilterNote ディレクティブ

    説明:ロギング用ã«åœ§ç¸®æ¯”をメモã«è¿½åŠ 
    æ§‹æ–‡:DeflateFilterNote [type] notename
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_deflate
    äº’æ›æ€§:type is available since Apache 2.0.45

    DeflateFilterNote ディレクティブ㯠圧縮比ã«é–¢ã™ã‚‹ãƒ¡ãƒ¢ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ä»˜åŠ ã•れるã“ã¨ã‚’指定ã—ã¾ã™ã€‚ メモ (note) ã®åå‰ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«æŒ‡å®šã•れãŸå€¤ã§ã™ã€‚ メモã¯ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã« 値を記録ã—ã€çµ±è¨ˆã‚’å–る目的ã«ã‚‚使ãˆã¾ã™ã€‚

    例

    DeflateFilterNote ratio

    LogFormat '"%r" %b (%{ratio}n) "%{User-agent}i"' deflate
    CustomLog logs/deflate_log deflate

    ログã‹ã‚‰ã‚‚ã£ã¨ç²¾å¯†ãªå€¤ã‚’抽出ã—ãŸã„å ´åˆã¯ã€type 引数を使用ã—ã¦ã€ãƒ‡ãƒ¼ã‚¿ã‚¿ã‚¤ãƒ—をログã®ãƒ¡ãƒ¢ã¨ã—ã¦æ®‹ã™ã‚ˆã†ã«æŒ‡å®šã§ãã¾ã™ã€‚ type ã¯æ¬¡ã®ã†ã¡ã®ä¸€ã¤ã§ã™ã€‚

    Input
    フィルタã®å…¥åŠ›ã‚¹ãƒˆãƒªãƒ¼ãƒ ã®ãƒã‚¤ãƒˆã‚«ã‚¦ãƒ³ãƒˆã‚’メモã«ä¿å­˜ã™ã‚‹ã€‚
    Output
    フィルタã®å‡ºåŠ›ã‚¹ãƒˆãƒªãƒ¼ãƒ ã®ãƒã‚¤ãƒˆã‚«ã‚¦ãƒ³ãƒˆã‚’メモã«ä¿å­˜ã™ã‚‹ã€‚
    Ratio
    圧縮率 (出力 / 入力 * 100) をメモã«ä¿å­˜ã™ã‚‹ã€‚ type 引数をçœç•¥ã—ãŸå ´åˆã¯ã€ã“れãŒãƒ‡ãƒ•ォルトã¨ãªã‚Šã¾ã™ã€‚

    ã¾ã¨ã‚ã‚‹ã¨ã€æ¬¡ã®ã‚ˆã†ã«ãƒ­ã‚°ã‚’å–ã‚‹ã“ã¨ã«ãªã‚‹ã§ã—ょã†ã€‚

    精密ãªãƒ­ã‚°æŽ¡å–

    DeflateFilterNote Input instream
    DeflateFilterNote Output outstream
    DeflateFilterNote Ratio ratio

    LogFormat '"%r" %{outstream}n/%{instream}n (%{ratio}n%%)' deflate
    CustomLog logs/deflate_log deflate

    å‚ç…§

    top

    DeflateInflateLimitRequestBody ディレクティブ

    説明:Maximum size of inflated request bodies
    æ§‹æ–‡:DeflateInflateLimitRequestBody value
    デフォルト:None, but LimitRequestBody applies after deflation
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    ステータス:Extension
    モジュール:mod_deflate
    äº’æ›æ€§:2.4.10 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    DeflateInflateRatioBurst ディレクティブ

    説明:Maximum number of times the inflation ratio for request bodies can be crossed
    æ§‹æ–‡:DeflateInflateRatioBurst value
    デフォルト:DeflateInflateRatioBurst 3
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    ステータス:Extension
    モジュール:mod_deflate
    äº’æ›æ€§:2.4.10 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    DeflateInflateRatioLimit ディレクティブ

    説明:Maximum inflation ratio for request bodies
    æ§‹æ–‡:DeflateInflateRatioLimit value
    デフォルト:DeflateInflateRatioLimit 200
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    ステータス:Extension
    モジュール:mod_deflate
    äº’æ›æ€§:2.4.10 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    DeflateMemLevel ディレクティブ

    説明:zlib ãŒåœ§ç¸®ã«ä½¿ã†ãƒ¡ãƒ¢ãƒªã®ãƒ¬ãƒ™ãƒ«ã‚’指定
    æ§‹æ–‡:DeflateMemLevel value
    デフォルト:DeflateMemLevel 9
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_deflate

    DeflateMemLevel ディレクティブ㯠zlib ãŒåœ§ç¸®ã«ä½¿ã†ãƒ¡ãƒ¢ãƒªã®ãƒ¬ãƒ™ãƒ«ã‚’設定ã—ã¾ã™ (1 ã‹ã‚‰ 9 ã®é–“ã®å€¤)。 (訳注: 2 を底ã¨ã™ã‚‹å¯¾æ•°ã®å€¤ã«ãªã‚Šã¾ã™ã€‚ 8 程度ãŒè‰¯ã„ã§ã—ょã†ã€‚)

    top

    DeflateWindowSize ディレクティブ

    説明:Zlib ã®åœ§ç¸®ç”¨ã‚¦ã‚£ãƒ³ãƒ‰ã‚¦ã®å¤§ãã•
    æ§‹æ–‡:DeflateWindowSize value
    デフォルト:DeflateWindowSize 15
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_deflate

    DeflateWindowSize ディレクティブ㯠zlib ã®åœ§ç¸®ç”¨ã‚¦ã‚£ãƒ³ãƒ‰ã‚¦ (訳注: zlib ã§ä½¿ç”¨ã•れる履歴ãƒãƒƒãƒ•ã‚¡) ã®å¤§ãã•を指定ã—ã¾ã™ (1 ã‹ã‚‰ 15 ã®é–“ã®å€¤)。 一般的ã«å¤§ããªã‚¦ã‚£ãƒ³ãƒ‰ã‚¦ã‚µã‚¤ã‚ºã‚’使用ã™ã‚‹ã¨åœ§ç¸®çއãŒå‘上ã—ã¾ã™ã€‚ (訳注: 2 を底ã¨ã™ã‚‹å¯¾æ•°ã®å€¤ã«ãªã‚Šã¾ã™ã€‚ 8 ã‹ã‚‰ 15 ã«ã™ã‚‹ã®ãŒè‰¯ã„ã§ã—ょã†ã€‚)

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_status.html.fr.utf80000644000000000000500000003151613412755316020600 0ustar rootsrc mod_status - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_status

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Fournit des informations sur les performances et l'activité du serveur
    Statut:Base
    Identificateur de Module:status_module
    Fichier Source:mod_status.c

    Sommaire

    Le module Status permet à un administrateur de déterminer le niveau de performances de son serveur. Les statistiques instantanées du serveur sont présentées dans une page HTML sous une forme aisément lisible. Si nécessaire, cette page peut être configurée pour être automatiquement actualisée (sous réserve de compatibilité du navigateur). Une autre page fournit l'état instantané du serveur sous la forme d'une simple liste lisible par une machine.

    Les détails fournis sont :

    • Le nombre de processus servant les requêtes
    • Le nombre de processus inactifs
    • L'état de chaque processus, le nombre de requêtes qu'il a traitées et le nombre total d'octets qu'il a servis (*)
    • Le nombre total d'accès effectués et d'octets servis (*)
    • Le moment où le serveur a été démarré/redémarré et le temps écoulé depuis
    • Les valeurs moyennes du nombre de requêtes par seconde, du nombre d'octets servis par seconde et du nombre d'octets par requête (*)
    • Le pourcentage CPU instantané utilisé par chaque processus et par l'ensemble des processus (*)
    • Les hôtes et requêtes actuellement en cours de traitement (*)

    Les lignes se terminant par "(*)" ne sont disponibles que si la directive ExtendedStatus est définie à On. Depuis la version 2.3.6, le chargement de mod_status définit automatiquement ExtendedStatus à On.

    top

    Activation du rapport d'état

    Pour n'activer les rapports d'état que pour les navigateurs appartenent au domaine example.com, ajoutez ces lignes à votre fichier de configuration httpd.conf :

    <Location "/etat-serveur">
        SetHandler server-status
        Require host example.com
    </Location>

    Il est alors possible d'obtenir les statistiques du serveur en utilisant un navigateur web et en accédant à la page http://votre.serveur/etat-serveur.

    top

    Actualisation automatique

    Vous pouvez faire en sorte que cette page d'état s'actualise elle-même automatiquement si votre navigateur supporte "refresh". Pour ce faire, accédez à la page http://votre.serveur/etat-serveur?refresh=N, pour que cette dernière soit actualisée toutes les N secondes.

    top

    Fichier d'état lisible par une machine

    La page http://votre.serveur/etat-serveur?auto permet d'obtenir une version du fichier d'état lisible par une machine. Ceci s'avère intéressant dans le cadre d'une exécution automatique : voir le programme en Perl log_server_status situé dans le répertoire /support de votre distribution du serveur HTTP Apache.

    Veuillez noter que si mod_status a été chargé dans le serveur, son gestionnaire sera disponible dans tous les fichiers de configuration, y compris les fichiers de configuration de niveau répertoire (par exemple .htaccess), ce qui peut avoir des répercutions quant à la sécurité de votre site.
    top

    Utilisation de server-status pour la recherche de défauts de fonctionnement

    La page server-status peut servir de point de départ à la recherche de défauts de fonctionnement lorsque votre serveur mobilise toutes les ressources disponibles (CPU ou mémoire), pour identifier quels clients ou requêtes sont la cause du problème.

    Tout d'abord, assurez-vous que la directive ExtendedStatus est bien définie à on, de façon à ce que vous puissiez avoir accès à toutes les informations à propos de la requête et du client pour chaque processus enfant ou thread.

    Consultez ensuite la liste des processus en cours (à l'aide de top, ou d'un utilitaire de listage des processus similaire), afin d'identifier les processus coupables. Triez l'affichage de top par utilisation CPU ou mémoire, en fonction du problème rencontré.

    Rechargez la page server-status et recherchez les identifiants des processus trouvés précédemment ; vous pourrez alors déterminer quelle requête est traitée par ces processus, pour quel client. Les requêtes peuvent apparaître de manière fugitive, et il se peut que vous deviez effectuer plusieurs essais avant de parvenir à les prendre en flagrant délit, pour ainsi dire.

    Cette procédure devrait vous permettre de cerner quel client, ou type de requête, sont à l'origine de vos problèmes de charge. Il est probable que vous identifiiez une application web au comportement anormal, ou un client en train d'attaquer votre site.

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_nw_ssl.html.fr.utf80000644000000000000500000002346713412755316020570 0ustar rootsrc mod_nw_ssl - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_nw_ssl

    Langues Disponibles:  en  |  fr 

    Description:Active le chiffrement SSL pour Netware
    Statut:Base
    Identificateur de Module:nwssl_module
    Fichier Source:mod_nw_ssl.c
    Compatibilité:NetWare seulement

    Sommaire

    Ce module active le chiffrement SSL sur un port spécifique. Il s'appuie sur la fonctionnalité de chiffrement SSL intégrée au système d'exploitation Netware.

    top

    Directive NWSSLTrustedCerts

    Description:Liste de certificats clients supplémentaires
    Syntaxe:NWSSLTrustedCerts nom-fichier [nom-fichier] ...
    Contexte:configuration globale
    Statut:Base
    Module:mod_nw_ssl

    Cette directive permet de spécifier une liste de fichiers (au format DER) contenant des certificats clients utilisés lors de l'établissement d'une connexion SSL mandatée. Chaque certificat client utilisé par un serveur doit être enregistré séparément dans son propre fichier .der.

    top

    Directive NWSSLUpgradeable

    Description:Permet de promouvoir une connexion non SSL au statut de connexion SSL à la demande
    Syntaxe:NWSSLUpgradeable [adresse-IP:]num-port
    Contexte:configuration globale
    Statut:Base
    Module:mod_nw_ssl

    Cette directive permet de promouvoir une connexion établie sur l'adresse IP et/ou le port spécifiés au statut de connexion SSL à la demande du client. L'adresse et/ou le port doivent avoir été définis au préalable par une directive Listen.

    top

    Directive SecureListen

    Description:Active le chiffrement SSL pour le port spécifié
    Syntaxe:SecureListen [adresse-IP:]num-port nom-certificat [MUTUAL]
    Contexte:configuration globale
    Statut:Base
    Module:mod_nw_ssl

    Cette directive permet de spécifier le port et le nom de certificat de style eDirectory qui seront utilisés pour activer le chiffrement SSL. En outre, un troisième paramètre optionnel permet d'activer l'authentification mutuelle.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/quickreference.html.fr.utf80000644000000000000500000060635013523273316021413 0ustar rootsrc Document de référence rapide des directives - Serveur HTTP Apache Version 2.4
    <-

    Document de référence rapide des directives

    Langues Disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Le document de référence rapide des directives montre l'usage, les valeurs par défaut, le statut, et le contexte de chaque directive de configuration d'Apache. Pour plus d'informations sur chacun de ces termes, voir le Dictionnaire des directives.

    La première colonne donne le nom de la directive et son usage. Si la directive possède une valeur par défaut, elle est indiquée dans la deuxième colonne. Si la valeur par défaut est trop grande pour pouvoir être affichée, elle sera tronquée et suivie d'un "+".

    La troisième colonne énumère les contextes dans lesquels la directive est applicable, et la quatrième indique son statut en accord avec le tableau des légendes ci-dessous.

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 
    sconfiguration globale
    vserveur virtuel
    drépertoire
    h.htaccess
    psection proxy
    CNoyau httpd
    MMPM
    BBase
    EExtension
    XExpérimental
    TExterne
    AcceptFilter protocole filtre d'acceptationsC
    Permet d'optimiser la configuration d'une socket pour l'écoute d'un protocole
    AcceptPathInfo On|Off|Default Default svdhC
    Les ressources acceptent des informations sous forme d'un nom de chemin en fin de requête.
    AccessFileName nom-du-fichier [nom-du-fichier] ... .htaccess svC
    Nom du fichier de configuration distribué
    Action type d'action script cgi [virtual]svdhB
    Active un script CGI pour un gestionnaire ou un type de contenu particulier
    AddAlt texte fichier [fichier] ...svdhB
    Texte optionnel à afficher à la place d'un icône pour un fichier en fonction de son nom
    AddAltByEncoding texte codage MIME [codage MIME] ...svdhB
    Texte optionnel à afficher à la place d'un icône pour un fichier en fonction de son codage MIME
    AddAltByType texte type MIME [type MIME] ...svdhB
    Texte optionnel à afficher à la place d'un icône pour un fichier en fonction de son type MIME
    AddCharset jeu-car extension [extension] ...svdhB
    Associe les extensions de noms de fichiers spécifiées au jeu de caractères spécifié
    AddDefaultCharset On|Off|jeu de caractères Off svdhC
    Paramètre jeu de caractères par défaut à ajouter quand le type de contenu d'une réponse est text/plain ou text/html
    AddDescription texte [fichier] ...svdhB
    Afficher la description d'un fichier
    AddEncoding codage extension [extension] ...svdhB
    Associe les extensions de noms de fichiers données au type de codage spécifié
    AddHandler nom-gestionnaire extension [extension] ...svdhB
    Associe les extensions de noms de fichiers données au gestionnaire spécifié
    AddIcon icône nom [nom] ...svdhB
    Icône à afficher pour un fichier en fonction de son nom
    AddIconByEncoding icône codage MIME [codage MIME] ...svdhB
    Icône à afficher à côté d'un fichier en fonction de son codage MIME
    AddIconByType icône type MIME [type MIME] ...svdhB
    Icône à afficher à côté d'un fichier en fonction de son type MIME
    AddInputFilter filtre[;filtre...] extension [extension] ...svdhB
    Associe les extensions de noms de fichiers aux filtres spécifiés qui traiteront les requêtes clients
    AddLanguage symbole-langue extension [extension] ...svdhB
    Associe l'extension de nom de fichier donnée à la langue spécifié
    AddModuleInfo nom-module chaînesvE
    Ajoute des données supplémentaires aux informations de module affichées par le gestionnaire server-info
    AddOutputFilter filtre[;filtre...] extension [extension] ...svdhB
    Associe les extensions de noms de fichiers aux filtres spécifiés qui traiteront les réponses en provenance du serveur
    AddOutputFilterByType filtre[;filtre...] type_de_média [type_de_média] ...svdhB
    assigne un filtre en sortie pour un type de média particulier
    AddType type-médium extension [extension] ...svdhB
    Associe les extensions de noms de fichiers au type de contenu spécifié
    Alias [chemin URL] chemin fichier|chemin répertoiresvB
    Met en correspondance des URLs avec des chemins du système de fichiers
    AliasMatch regex chemin fichier|chemin répertoiresvB
    Met en correspondance des URLs avec le système de fichiers en faisant intervenir les expressions rationnelles
    Allow from all|hôte|env=[!]variable d'environnement [hôte|env=[!]variable d'environnement] ...dhE
    Spécifie quels hôtes peuvent accéder à une certaine zone du serveur
    AllowCONNECT port[-port] [port[-port]] ... 443 563 svE
    Ports autorisés à se CONNECTer à travers le mandataire
    AllowEncodedSlashes On|Off|NoDecode Off svC
    Détermine si les séparateurs de chemin encodés sont autorisés à transiter dans les URLs tels quels
    AllowMethods reset|HTTP-method [HTTP-method]... reset dX
    Restreint l'accès aux méthodes HTTP spécifiées
    AllowOverride All|None|type directive [type directive] ... None à partir de la +dC
    Types de directives autorisées dans les fichiers .htaccess
    AllowOverrideList None|directive [directive-type] ... None dC
    Directives autorisées dans les fichiers .htaccess
    Anonymous utilisateur [utilisateur] ...dhE
    Définit la liste des identifiants utilisateur autorisés à accéder sans vérification du mot de passe
    Anonymous_LogEmail On|Off On dhE
    Détermine si le mot de passe fourni sera enregistré dans le journal des erreurs
    Anonymous_MustGiveEmail On|Off On dhE
    Détermine si l'abscence de mot de passe est autorisée
    Anonymous_NoUserID On|Off Off dhE
    Détermine si le champ identifiant peut être vide
    Anonymous_VerifyEmail On|Off Off dhE
    Détermine s'il faut vérifier que le format de l'adresse email fournie comme mot de passe est correct
    AsyncRequestWorkerFactor facteursM
    Limite le nombre de connexions simultanées par thread
    AuthBasicAuthoritative On|Off On dhB
    Définit si les processus d'autorisation et d'authentification peuvent être confiés à des modules de plus bas niveau
    AuthBasicFake off|username [password]dhB
    Authentification de base simulée à l'aide des nom d'utilisateur et mot de passe fournis
    AuthBasicProvider nom fournisseur [nom fournisseur] ... file dhB
    Définit le(les) fournisseur(s) d'authentification pour cette zone du site web
    AuthBasicUseDigestAlgorithm MD5|Off Off dhB
    Vérifie les mots de passe auprès des fournisseurs d'authentification à la manière de l'authentification de type Digest.
    AuthDBDUserPWQuery requêtedE
    Requête SQL servant à vérifier le mot de passe d'un utilisateur
    AuthDBDUserRealmQuery requêtedE
    Requête SQL servant à vérifier une empreinte de mot de passe pour un utilisateur et un identifiant d'authentification.
    AuthDBMGroupFile chemin-fichierdhE
    Définit le nom du fichier de base de données contenant la liste des groupes d'utilisateurs permettant de définir les autorisations des utilisateurs
    AuthDBMType default|SDBM|GDBM|NDBM|DB default dhE
    Définit le type de fichier de base de données utilisé pour stocker les mots de passe
    AuthDBMUserFile chemin-fichierdhE
    Définit le nom d'un fichier de base de données pour l'authentification contenant la liste des utilisateurs et de leurs mots de passe
    AuthDigestAlgorithm MD5|MD5-sess MD5 dhE
    Sélectionne l'algorithme utilisé pour calculer les condensés du défit et de sa réponse
    AuthDigestDomain URI [URI] ...dhE
    Les URIs qui se trouvent dans le même espace de protection concernant l'authentification à base de condensés
    AuthDigestNonceLifetime secondes 300 dhE
    Durée de validité du nombre à valeur unique du serveur (nonce)
    AuthDigestProvider nom fournisseur [nom fournisseur] ... file dhE
    Définit le(s) fournisseurs(s) d'authentification pour la zone du site web concernée
    AuthDigestQop none|auth|auth-int [auth|auth-int] auth dhE
    Détermine le niveau de protection fourni par l'authentification à base de condensé
    AuthDigestShmemSize taille 1000 sE
    La quantité de mémoire partagée à allouer afin de conserver les informations à propos des clients
    AuthFormAuthoritative On|Off On dhB
    Détermine si l'autorisation et l'authentification sont confiés à des modules de plus bas niveau
    AuthFormBody nom du champdB
    Le nom du champ de formulaire contenant le corps de la requête à effectuer en cas de connexion réussie
    AuthFormDisableNoStore On|Off Off dB
    Désactive l'en-tête CacheControl no-store sur la page de connexion
    AuthFormFakeBasicAuth On|Off Off dB
    Simule une en-tête d'authentification de base
    AuthFormLocation nom du champdB
    Le nom du champ de formulaire qui contiendra l'URL vers laquelle l'utilisateur sera redirigé en cas de connexion réussie
    AuthFormLoginRequiredLocation urldB
    L'URL de la page vers laquelle on doit être redirigé si une authentification est requise
    AuthFormLoginSuccessLocation urldB
    L'URL de la page vers laquelle on doit être redirigé en cas de connexion réussie
    AuthFormLogoutLocation uridB
    L'URL vers laquelle un utilisateur devra être redirigé après s'être déconnecté
    AuthFormMethod nom du champdB
    Le nom du champ de formulaire contenant la méthode de la requête à effectuer en cas de connexion réussie
    AuthFormMimetype nom du champdB
    Le nom du champ de formulaire contenant le type MIME du corps de la requête à effectuer en cas de connexion réussie
    AuthFormPassword nom du champdB
    Le nom du champ de formulaire qui contient le mot de passe de connexion
    AuthFormProvider nom fournisseur [nom fournisseur] ... file dhB
    Définit le(s) fournisseur(s) d'authentification pour la zone concernée
    AuthFormSitePassphrase secretdB
    Court-circuite l'authentification pour les sites à fort trafic
    AuthFormSize tailledB
    La taille maximale en octets du formulaire dont seront extraites les informations de connexion
    AuthFormUsername nom du champdB
    Le nom du champ de formulaire qui contient le nom de connexion
    AuthGroupFile chemin-fichierdhB
    Définit le nom d'un fichier texte contenant la liste des groupes d'utilisateurs permettant de définir les autorisations des utilisateurs
    AuthLDAPAuthorizePrefix préfixe AUTHORIZE_ dhE
    Spécifie le préfixe ajouté aux variables d'environnement durant la phase d'autorisation
    AuthLDAPBindAuthoritative off|on on dhE
    Détermine si l'on doit utiliser d'autres fournisseurs d'authentification lorsque le serveur ne peut pas valider les données d'authentification de l'utilisateur, alors que ce dernier possède un DN.
    AuthLDAPBindDN dndhE
    Un DN optionnel pour se connecter au serveur LDAP
    AuthLDAPBindPassword mot-de-passedhE
    Mot de passe à utiliser en conjonction avec le DN de connexion
    AuthLDAPCharsetConfig chemin-fichiersE
    Chemin du fichier de configuration de la correspondance langage/jeu de caractères
    AuthLDAPCompareAsUser on|off off dhE
    Utilisation des données d'authentification de l'utilisateur pour effectuer les comparaisons pour l'attribution des autorisations
    AuthLDAPCompareDNOnServer on|off on dhE
    Utilise le serveur LDAP pour comparer les DNs
    AuthLDAPDereferenceAliases never|searching|finding|always always dhE
    À quel moment le module va déréférencer les alias
    AuthLDAPGroupAttribute attribut member uniqueMember +dhE
    L'attribut LDAP utilisé pour vérifier l'appartenance d'un utilisateur à un groupe.
    AuthLDAPGroupAttributeIsDN on|off on dhE
    Utilise le DN de l'utilisateur pour vérifier son appartenance à un groupe
    AuthLDAPInitialBindAsUser off|on off dhE
    Détermine si le serveur effectue la recherche initiale du DN en utilisant le nom propre de l'utilisateur pour l'authentification de base et non de manière anonyme, ou en utilisant des données d'authentification codées en dur pour le serveur
    AuthLDAPInitialBindPattern regex substitution (.*) $1 (nom de l'u +dhE
    Spécifie la modification a apporter au nom d'utilisateur pour l'authentification de base lors de l'authentification auprès du serveur LDAP pour effectuer une recherche de DN
    AuthLDAPMaxSubGroupDepth Nombre 10 dhE
    Spécifie la profondeur d'imbrication des sous-groupes maximale prise en compte avant l'abandon de la recherche de l'utilisateur.
    AuthLDAPRemoteUserAttribute uiddhE
    Spécifie l'attribut dont la valeur renvoyée au cours de la requête de l'utilisateur sera utilisée pour définir la variable d'environnement REMOTE_USER
    AuthLDAPRemoteUserIsDN on|off off dhE
    Utilise le DN de l'utilisateur pour définir la variable d'environnement REMOTE_USER
    AuthLDAPSearchAsUser on|off off dhE
    Utilise les données d'authentification de l'utilisateur pour la recherche des autorisations
    AuthLDAPSubGroupAttribute attributdhE
    Spécifie les noms d'attribut, un par directive, utilisés pour différencier les membres du groupe courant qui sont eux-mêmes des groupes.
    AuthLDAPSubGroupClass ObjectClass-LDAP groupOfNames groupO +dhE
    Spécifie quelles valeurs d'objectClass LDAP identifient les objets de l'annuaire qui sont des groupes au cours du traitement des sous-groupes.
    AuthLDAPURL url [NONE|SSL|TLS|STARTTLS]dhE
    URL specifying the LDAP search parameters
    AuthMerging Off | And | Or Off dhB
    Définit la manière dont chaque logique d'autorisation des sections de configuration se combine avec celles des sections de configuration précédentes.
    AuthName domaine d'autorisationdhB
    L'identifiant de l'autorisation à utiliser avec l'authentification HTTP
    AuthnCacheContext directory|server|chaîne-personnaliséedB
    Spécifie une chaîne de contexte à utiliser dans la clé du cache
    AuthnCacheEnablesB
    Active la mise en cache de l'authentification en tout endroit
    AuthnCacheProvideFor fournisseur-authn [...]dhB
    Spécifie le fournisseur pour lequel on veut effectuer une mise en cache
    AuthnCacheSOCache nom-fournisseur[:arguments-fournisseur]sB
    Sélectionne le fournisseur socache d'arrière-plan à utiliser
    AuthnCacheTimeout durée-de-vie (secondes)dhB
    Définit une durée de vie pour les entrées du cache
    <AuthnProviderAlias alias-fournisseur> ... </AuthnProviderAlias>sB
    Regroupe un ensemble de directives qui constituent une extension d'un fournisseur d'authentification de base et lui attribue l'alias spécifié
    AuthnzFcgiCheckAuthnProvider provider-name|None option ...dE
    Permet à une application FastCGI de gérer l'accroche d'authentification check_authn.
    AuthnzFcgiDefineProvider type provider-name backend-addresssE
    Définit une application FastCGI en tant que fournisseur d'authentification et/ou autorisation
    AuthType None|Basic|Digest|FormdhB
    Type d'authentification utilisateur
    AuthUserFile chemin-fichierdhB
    Définit le nom d'un fichier texte pour l'authentification contenant la liste des utilisateurs et de leurs mots de passe
    AuthzDBDLoginToReferer On|Off Off dE
    Définit si le client doit être redirigé vers la page d'origine en cas de connexion ou de déconnexion réussie si un en-tête de requête Referer est présent
    AuthzDBDQuery requêtedE
    Définit la requête SQL pour l'opération requise
    AuthzDBDRedirectQuery requêtedE
    Définit une requête pour rechercher une page vers laquelle rediriger l'utilisateur après une connexion réussie
    AuthzDBMType default|SDBM|GDBM|NDBM|DB default dhE
    Définit le type de fichier de base de données contenant la liste des groupes d'utilisateurs
    <AuthzProviderAlias fournisseur-de-base Alias Paramètres-Require> ... </AuthzProviderAlias> sB
    Regroupe des directives représentant une extension d'un fournisseur d'autorisation de base qui pourra être référencée à l'aide de l'alias spécifié
    AuthzSendForbiddenOnFailure On|Off Off dhB
    Envoie '403 FORBIDDEN' au lieu de '401 UNAUTHORIZED' si l'authentification réussit et si l'autorisation a été refusée.
    BalancerGrowth # 5 svE
    Nombre de membres supplémentaires pouvant être ajoutés après la configuration initiale
    BalancerInherit On|Off On svE
    Héritage des membres du groupes de répartition de charge du mandataire définis au niveau du serveur principal
    BalancerMember [balancerurl] url [clé=valeur [clé=valeur ...]]dE
    Ajoute un membre à un groupe de répartition de charge
    BalancerPersist On|Off Off svE
    Tente de conserver les changements effectués par le gestionnaire de répartition de charge après un redémarrage du serveur.
    BrotliAlterETag AddSuffix|NoChange|Remove AddSuffix svE
    Comment l'en-tête de réponse ETag doit être modifié au cours de la compression
    BrotliCompressionMaxInputBlock valuesvE
    Taille maximale du bloc de données en entrée
    BrotliCompressionQuality value 5 svE
    Qualité de la compression
    BrotliCompressionWindow value 18 svE
    Taille de la fenêtre de compression glissante brotli
    BrotliFilterNote [type] notenamesvE
    Enregistre le taux de compression dans une note à des fins de journalisation
    BrowserMatch regex [!]env-variable[=valeur] [[!]env-variable[=valeur]] ...svdhB
    Définit des variables d'environnement en fonction du contenu de l'en-tête HTTP User-Agent
    BrowserMatchNoCase regex [!]env-variable[=valeur] [[!]env-variable[=valeur]] ...svdhB
    Définit des variables d'environnement en fonction du contenu de l'en-tête HTTP User-Agent sans tenir compte de la casse
    BufferedLogs On|Off Off sB
    Enregistre les entrées du journal dans un tampon en mémoire avant de les écrire sur disque
    BufferSize entier 131072 svdhE
    Taille maximale en octets du filtre par tampon
    CacheDefaultExpire secondes 3600 (une heure) svdhE
    La durée par défaut de mise en cache d'un document lorsqu'aucune date d'expiration n'a été spécifiée.
    CacheDetailHeader on|off off svdhE
    Ajoute un en-tête X-Cache-Detail à la réponse.
    CacheDirLength longueur 2 svE
    Le nombre de caractères des noms des sous-répertoires
    CacheDirLevels niveaux 2 svE
    Le nombre de niveaux de sous-répertoires que comportera le cache.
    CacheDisable chaîne-url | onsvdhE
    Désactive la mise en cache des URLs spécifiées
    CacheEnable type de cache [chaîne URL]svdE
    Active la mise en cache des URLs spécifiées en utilisant le gestionnaire de stockage précisé
    CacheFile chemin fichier [chemin fichier] ...sX
    Met en cache une liste de gestionnaires de fichiers au démarrage
    CacheHeader on|off off svdhE
    Ajoute un en-tête X-Cache à la réponse.
    CacheIgnoreCacheControl On|Off Off svE
    Ignore les en-têtes de requête enjoignant de ne pas servir le contenu au client depuis le cache
    CacheIgnoreHeaders en-tête [en-tête] ... None svE
    Ne pas stocker le(s) en-tête(s) spécifié(s) dans le cache.
    CacheIgnoreNoLastMod On|Off Off svdhE
    Ignore le fait qu'une réponse ne possède pas d'en-tête Last Modified.
    CacheIgnoreQueryString On|Off Off svE
    Ignore la chaîne de paramètres lors de la mise en cache
    CacheIgnoreURLSessionIdentifiers identifiant [identifiant] ... None svE
    Ignore les identifiants de session définis encodés dans l'URL lors de la mise en cache
    CacheKeyBaseURL URLsvE
    Remplace l'URL de base des clés du cache mandatées en inverse
    CacheLastModifiedFactor flottant 0.1 svdhE
    Le facteur utilisé pour générer une date d'expiration en fonction de la date de dernière modification.
    CacheLock on|off off svE
    Active la protection contre les tempêtes de requêtes.
    CacheLockMaxAge entier 5 svE
    Définit la durée de vie maximale d'un verrou de cache.
    CacheLockPath répertoire /tmp/mod_cache-lock +svE
    Définit le répertoire des verrous.
    CacheMaxExpire secondes 86400 (une journée) +svdhE
    La durée maximale en secondes de mise en cache d'un document
    CacheMaxFileSize octets 1000000 svdhE
    >La taille maximale (en octets) d'un document pour pouvoir être stocké dans le cache
    CacheMinExpire secondes 0 svdhE
    La durée minimale en secondes de mise en cache d'un document
    CacheMinFileSize octets 1 svdhE
    La taille minimale (en octets) d'un document pour pouvoir être stocké dans le cache
    CacheNegotiatedDocs On|Off Off svB
    Permet la mise en cache au niveau des serveurs mandataires des documents dont le contenu a été négocié
    CacheQuickHandler on|off on svE
    Exécute le cache à partir d'un gestionnaire rapide.
    CacheReadSize octets 0 svdhE
    La quantité minimale (en octets) de données à lire et à mettre en cache avant de les envoyer au client
    CacheReadTime millisecondes 0 svdhE
    Le temps minimum (en millisecondes) qui doit s'écouler avant d'envoyer les données au client
    CacheRoot répertoiresvE
    La racine du répertoire dans lequel les fichiers du cache seront stockés
    CacheSocache type[:args]svE
    Implémentation du cache d'objets partagés à utiliser
    CacheSocacheMaxSize octets 102400 svdhE
    La taille maximale d'une entrée pouvant être placée dans le cache
    CacheSocacheMaxTime secondes 86400 svdhE
    La durée maximale de stockage d'un document dans le cache avant péremption
    CacheSocacheMinTime seconds 600 svdhE
    La durée minimale de stockage d'un document dans le cache
    CacheSocacheReadSize octets 0 svdhE
    La quantité minimale de données du document à lire et mettre en cache avant envoi au client
    CacheSocacheReadTime millisecondes 0 svdhE
    La durée minimale de lecture avant l'envoi des données
    CacheStaleOnError on|off on svdhE
    Sert du contenu non à jour à la place de réponses 5xx.
    CacheStoreExpired On|Off Off svdhE
    Tente de mettre en cache les réponses que le serveur considère comme arrivées à expiration
    CacheStoreNoStore On|Off Off svdhE
    Tente de mettre en cache les requêtes ou réponses dont l'entête Cache-Control: a pour valeur no-store.
    CacheStorePrivate On|Off Off svdhE
    Tente de mettre en cache des réponses que le serveur a marquées comme privées
    CGIDScriptTimeout time[s|ms]svdhB
    Durée maximale d'attente de la prochaine sortie du programme CGI
    CGIMapExtension chemin CGI .extensiondhC
    Technique permettant de localiser l'interpréteur des scripts CGI
    CGIPassAuth On|Off Off dhC
    Active la transmission d'en-têtes d'autorisation HTTP aux scripts en tant que variables CGI
    CGIVar variable ruledhC
    Contrôle la manière dont certaines variables CGI sont définies
    CharsetDefault jeu de caractèressvdhE
    Jeu de caractère vers lequel la traduction doit s'effectuer
    CharsetOptions option [option] ... ImplicitAdd svdhE
    Précise les détails de la traduction du jeu de caractères
    CharsetSourceEnc jeu de caractèressvdhE
    Jeu de caractères source des fichiers
    CheckCaseOnly on|off Off svdhE
    Limite l'action du module aux corrections de majuscules
    CheckSpelling on|off Off svdhE
    Active le module de correction
    ChrootDir chemin-répertoiresB
    Répertoire dans lequel Apache doit se positionner au démarrage après avoir effectué un chroot(8).
    ContentDigest On|Off Off svdhC
    Active la génération d'un en-tête Content-MD5 dans la réponse HTTP
    CookieDomain domainesvdhE
    Le domaine auquel le cookie traceur s'applique
    CookieExpires duréesvdhE
    Durée avant expiration du cookie traceur
    CookieName symbole Apache svdhE
    Nom du cookie traceur
    CookieStyle Netscape|Cookie|Cookie2|RFC2109|RFC2965 Netscape svdhE
    Format du champ d'en-tête cookie
    CookieTracking on|off off svdhE
    Active le cookie traceur
    CoreDumpDirectory répertoiresM
    Le répertoire dans lequel le serveur HTTP Apache va tenter de se positionner avant d'effectuer un vidage mémoire
    CustomLog fichier|pipe format|alias [env=[!]variable-environnement| expr=expression]svB
    Définit le nom et le format du fichier journal
    Dav On|Off|nom fournisseur Off dE
    Active les méthodes HTTP WebDAV
    DavDepthInfinity on|off off svdE
    Autorise les requêtes PROPFIND avec en-tête Depth: Infinity
    DavGenericLockDB chemin fichiersvdE
    Chemin de la base de données des verrous DAV
    DavLockDB chemin fichiersvE
    Chemin de la base de données des verrous DAV
    DavMinTimeout secondes 0 svdE
    Durée minimale pendant laquelle le serveur maintient un verrou sur une ressource DAV
    DBDExptime durée en secondes 300 svE
    Durée de vie des connexions inactives
    DBDInitSQL "instruction SQL"svE
    Exécute une instruction SQL après connexion à une base de données
    DBDKeep nombre 2 svE
    Nombre maximum de connexions maintenues
    DBDMax nombre 10 svE
    Nombre maximum de connexions
    DBDMin nombre 1 svE
    Nombre minimum de connexions
    DBDParams param1=valeur1[,param2=valeur2]svE
    Paramètres de la connexion à la base de données
    DBDPersist On|OffsvE
    Utiliser ou non des connexions persistentes
    DBDPrepareSQL "requête SQL" étiquettesvE
    Définit une requête SQL préparée
    DBDriver nomsvE
    Spécifie un pilote SQL
    DefaultIcon chemin URLsvdhB
    Icône à afficher par défaut lorsqu'aucun icône spécifique n'est précisé
    DefaultLanguage symbole-languesvdhB
    Définit un symbole de langue par défaut à affecter au champ d'en-tête Content-Language pour toutes les ressources dans le contexte courant auxquelles aucun symbole de langue n'a été associé.
    DefaultRuntimeDir chemin-répertoire DEFAULT_REL_RUNTIME +sC
    Répertoire de base des fichiers créés au cours de l'exécution du serveur
    DefaultType type média|none none svdhC
    Les seuls effets de cette directive sont des émissions d'avertissements si sa valeur est différente de none. Dans les versions précédentes, DefaultType permettait de spécifier un type de média à assigner par défaut au contenu d'une réponse pour lequel aucun autre type de média n'avait été trouvé.
    Define nom-paramètre [valeur-paramètre]svdC
    Permet de définir une variable
    DeflateBufferSize valeur 8096 svE
    Taille du fragment que zlib devra comprimer en une seule fois
    DeflateCompressionLevel valeursvE
    Le niveau de compression que nous appliquons à la sortie
    DeflateFilterNote [type] nom de la notesvE
    Enregistre le taux de compression sous la forme d'une note à des fins de journalisation
    DeflateInflateLimitRequestBody valuesvdhE
    Taille maximale des corps de requête décompressés
    DeflateInflateRatioBurst value 3 svdhE
    Nombre maximal de fois que le ratio de décompression d'un corps de requête peut être dépassé
    DeflateInflateRatioLimit value 200 svdhE
    Ratio de décompression maximum pour les corps de requêtes
    DeflateMemLevel valeur 9 svE
    La quantité de mémoire utilisable par zlib pour la compression
    DeflateWindowSize valeur 15 svE
    Taille de la fenêtre de compression zlib
    Deny from all|hôte|env=[!]variable d'environnement [hôte|env=[!]variable d'environnement] ...dhE
    Définit quels hôtes ne sont pas autorisés à accéder au serveur
    <Directory chemin répertoire> ... </Directory>svC
    Regroupe un ensemble de directives qui ne s'appliquent qu'au répertoire concerné du système de fichiers, à ses sous-répertoires, et à leur contenu.
    DirectoryCheckHandler On|Off Off svdhB
    Définit la réponse de ce module lorsqu'un autre gestionnaire est utilisé
    DirectoryIndex disabled | url locale [url locale] ... index.html svdhB
    Liste des fichiers ressources à rechercher lorsque le client envoie une requête pour un répertoire
    DirectoryIndexRedirect on | off | permanent | temp | seeother | 3xx-code off svdhB
    Définit une redirection externe pour les index de répertoires.
    <DirectoryMatch regex> ... </DirectoryMatch>svC
    Regroupe des directives qui s'appliquent au contenu de répertoires du système de fichiers correspondant à une expression rationnelle
    DirectorySlash On|Off On svdhB
    Activation/Désactivation de la redirection "slash de fin"
    DocumentRoot chemin répertoire "/usr/local/apache/ +svC
    Racine principale de l'arborescence des documents visible depuis Internet
    DTracePrivileges On|Off Off sX
    Détermine si les privilèges requis par dtrace sont activés.
    DumpIOInput On|Off Off sE
    Enregistre toutes les entrées dans le journal des erreurs
    DumpIOOutput On|Off Off sE
    Enregistre toutes les sorties dans le journal des erreurs
    <Else> ... </Else>svdhC
    Contient des directives qui ne s'appliquent que si la condition correspondant à la section <If> ou <ElseIf> précédente n'est pas satisfaite par la requête à l'exécution
    <ElseIf expression> ... </ElseIf>svdhC
    Contient des directives qui ne s'appliquent que si la condition correspondante est satisfaite par une requête à l'exécution, alors que la condition correspondant à la section <If> ou <ElseIf> précédente ne l'était pas.
    EnableExceptionHook On|Off Off sM
    Active un hook ("point d'accrochage logiciel") qui exécute des gestionnaires d'exception après un crash
    EnableMMAP On|Off On svdhC
    Utilise la projection en mémoire (Memory-Mapping) pour lire les fichiers pendant qu'ils sont servis
    EnableSendfile On|Off Off svdhC
    Utilise le support sendfile du noyau pour servir les fichiers aux clients
    Error messagesvdhC
    Interrompt la lecture de la configuration avec un message d'erreur personnalisé
    ErrorDocument code erreur documentsvdhC
    Document que le serveur renvoie au client en cas d'erreur
    ErrorLog file-path|syslog[:[facility][:tag]] logs/error_log (Uni +svC
    Définition du chemin du journal des erreurs
    ErrorLogFormat [connection|request] formatsvC
    Spécification du format des entrées du journal des erreurs
    ExamplesvdhX
    Directive de démonstration pour illustrer l'API des modules Apache
    ExpiresActive On|Off Off svdhE
    Active la génération d'en-têtes Expires
    ExpiresByType type MIME <code>secondessvdhE
    Définition de la valeur de l'en-tête Expires en fonction du type MIME
    ExpiresDefault <code>secondessvdhE
    Mode de calcul par défaut de la date d'expiration
    ExtendedStatus On|Off Off sC
    Extrait des informations d'état étendues pour chaque requête
    ExtFilterDefine nom_filtre paramètressE
    Définit un filtre externe
    ExtFilterOptions option [option] ... NoLogStderr dE
    Configure les options de mod_ext_filter
    FallbackResource disabled | url-localesvdhB
    Définit une URL par défaut pour les requêtes qui ne ciblent aucun fichier
    FileETag composant ... MTime Size svdhC
    Caractéristiques de fichier utilisées lors de la génération de l'en-tête de réponse HTTP ETag pour les fichiers statiques
    <Files nom fichier> ... </Files>svdhC
    Contient des directives qui s'appliquent aux fichiers précisés
    <FilesMatch expression rationnelle> ... </FilesMatch>svdhC
    Contient des directives qui s'appliquent à des fichiers spécifiés sous la forme d'expressions rationnelles
    FilterChain [+=-@!]nom_filtre ...svdhB
    Configure la chaîne de filtrage
    FilterDeclare nom_filtre [type]svdhB
    Déclare un filtre intelligent
    FilterProtocol nom_filtre [nom_fournisseur] drapeaux_protocolesvdhB
    Vérifie le respect du protocole HTTP
    FilterProvider nom_filtre nom_fournisseur expressionsvdhB
    Enregistre un filtre de contenu
    FilterTrace nom_filtre niveausvdB
    Obtention d'informations de débogage/diagnostique en provenance de mod_filter
    ForceLanguagePriority None|Prefer|Fallback [Prefer|Fallback] Prefer svdhB
    Action à entreprendre si un document acceptable unique n'est pas trouvé
    ForceType type médium|NonedhC
    Force le type de médium spécifié dans le champ d'en-tête HTTP Content-Type pour les fichiers correspondants
    ForensicLog nom-fichier|pipesvE
    Définit le nom de fichier du journal légal
    GlobalLogfile|pipe format|nickname [env=[!]environment-variable| expr=expression]sB
    Définit le nom et le format du fichier journal
    GprofDir /tmp/gprof/|/tmp/gprof/%svC
    Répertoire dans lequel écrire les données de profiling gmon.out.
    GracefulShutdownTimeout seconds 0 sM
    Spécifie le délai maximum après lequel le serveur va s'arrêter dans le cas d'un arrêt "en douceur"
    Group groupe unix #-1 sB
    Groupe sous lequel le serveur va traiter les requêtes
    H2CopyFiles on|off off svdhE
    Contrôle la gestion des fichiers dans les réponses
    H2Direct on|off on pour h2c, off po +svE
    Activation du protocole H2 Direct
    H2EarlyHints on|off off svE
    Contrôle l'envoi de codes d'état 103
    H2MaxSessionStreams n 100 svE
    Nombre maximal de flux actifs par session HTTP/2.
    H2MaxWorkerIdleSeconds n 600 sE
    Nombre maximal de secondes pendant lequel une unité de traitement h2 pourra rester inactive sans être arrêtée.
    H2MaxWorkers nsE
    Nombre maximal de threads à utiliser pour chaque processus enfant.
    H2MinWorkers nsE
    Nombre minimal de threads à utiliser pour chaque processus enfant.
    H2ModernTLSOnly on|off on svE
    Impose les connexions HTTP/2 en mode "TLS moderne" seulement
    H2Padding numbits 0 svE
    Spécifie un intervalle de nombres d'octets de bourrage à ajouter aux trames utiles
    H2Push on|off on svdhE
    Activation/désactivation du server push H2
    H2PushDiarySize n 256 svE
    Taille du journal des Pushes H2
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    Priorité des pushes H2
    H2PushResource [add] path [critical]svdhE
    Déclare des ressources à proposer ("pusher") au client
    H2SerializeHeaders on|off off svE
    Active/désactive la sérialisation du traitement des requêtes/réponses
    H2StreamMaxMemSize bytes 65536 svE
    Quantité maximale de données en sortie mises en tampon par flux.
    H2TLSCoolDownSecs seconds 1 svE
    Durée d'inactivité d'une connexion TLS avant diminution de la taille des paquets
    H2TLSWarmUpSize amount 1048576 svE
    Taille des paquets durant la phase initiale de la connexion TLS
    H2Upgrade on|off on pour h2c, off po +svdhE
    Activation/Désactivation du protocole de mise à jour H2
    H2WindowSize bytes 65535 svE
    Taille maximale des paquets de données pour les transmissions client vers serveur.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note en-tête [[expr=]valeur [remplacement] [early|env=[!]variable|expr=expression]] svdhE
    Configure les en-têtes d'une réponse HTTP
    HeaderName nom fichiersvdhB
    Nom du fichier qui sera inséré au début de la page contenant l'index
    HeartbeatAddress addr:portsX
    Adresse multicast à laquelle envoyer les requêtes heartbeat
    HeartbeatListen addr:portsX
    Adresse multicast d'écoute des requêtes entrantes heartbeat
    HeartbeatMaxServers nombre-de-serveurs 10 sX
    Spécifie le nombre maximal de serveurs qui pourront envoyer des requêtes heartbeat à ce serveur.
    HeartbeatStorage chemin fichier logs/hb.dat sX
    Chemin vers le stockage des données heartbeat
    HeartbeatStorage chemin-fichier logs/hb.dat sX
    Indique le chemin permettant de lire les données heartbeat
    HostnameLookups On|Off|Double Off svdC
    Active la recherche DNS sur les adresses IP des clients
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modifie les contraintes sur les messages des requêtes HTTP
    IdentityCheck On|Off Off svdE
    Active la journalisation de l'identité RFC 1413 de l'utilisateur distant
    IdentityCheckTimeout secondes 30 svdE
    Détermine le délai d'attente pour les requêtes ident
    <If expression> ... </If>svdhC
    Contient des directives qui ne s'appliquent que si une condition est satisfaite au cours du traitement d'une requête
    <IfDefine [!]paramètre> ... </IfDefine>svdhC
    Contient des directives qui ne s'appliqueront que si un test retourne "vrai" au démarrage du serveur
    <IfDirective [!]directive-name> ... </IfDirective>svdhC
    Regroupe des directives dont le traitement est conditionné par la présence ou l'absence d'une directive particulière
    <IfFile [!]filename> ... </IfFile>svdhC
    Regroupe des directives qui ne seront traitées que si un fichier existe au démarrage
    <IfModule [!]fichier module|identificateur module> ... </IfModule>svdhC
    Contient des directives qui ne s'appliquent qu'en fonction de la présence ou de l'absence d'un module spécifique
    <IfSection [!]section-name> ... </IfSection>svdhC
    Regroupe des directives dont le traitement est conditionné par la présence ou l'absence d'une section particulière
    <IfVersion [[!]opérateur] version> ... </IfVersion>svdhE
    Contient des portions de configuration dépendantes de la version
    ImapBase map|referer|URL http://nom_serveur/ +svdhB
    Valeur par défaut de la directive base des fichiers imagemap
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Action à entreprendre par défaut lorsqu'un fichier imagemap est invoqué avec des coordonnées qui ne correspondent à aucune cible
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action à entreprendre si aucune coordonnée n'est fournie lorsqu'on invoque un fichier imagemap
    Include chemin-fichier|chemin-répertoire|wildcardsvdC
    Inclut d'autres fichiers de configuration dans un des fichiers de configuration du serveur
    IncludeOptional file-path|directory-path|wildcardsvdC
    Inclusion de fichiers dans le fichier de configuration
    IndexHeadInsert "marque ..."svdhB
    Insère du texte dans la section HEAD de la page d'index.
    IndexIgnore fichier [fichier] ... "." svdhB
    Ajouts à la liste des fichiers à cacher lors de l'affichage de l'index d'un répertoire
    IndexIgnoreReset ON|OFFsvdhB
    Vide la liste des fichiers à cacher lors de l'affichage du contenu d'un répertoire
    IndexOptions [+|-]option [[+|-]option] ...svdhB
    Diverses options de configuration pour l'indexation d'un répertoire
    IndexOrderDefault Ascending|Descending Name|Date|Size|Description Ascending Name svdhB
    Définit l'ordre d'affichage par défaut d'un index de répertoire
    IndexStyleSheet chemin-urlsvdhB
    Ajoute une feuille de style CSS à l'index du répertoire
    InputSed commande-seddh
    Commande sed à exécuter pour le filtrage des données d'une requête (en général des données POST)
    ISAPIAppendLogToErrors on|off off svdhB
    Enregistrement des requêtes HSE_APPEND_LOG_PARAMETER de la part des extensions ISAPI dans le journal des erreurs
    ISAPIAppendLogToQuery on|off on svdhB
    Enregistre les requêtes HSE_APPEND_LOG_PARAMETER de la part des extensions ISAPI dans la partie arguments de la requête
    ISAPICacheFile chemin-fichier [chemin-fichier] ...svB
    Fichiers .dll ISAPI devant être chargés au démarrage
    ISAPIFakeAsync on|off off svdhB
    Emulation du support des entrées/sorties asynchrones pour les appels ISAPI
    ISAPILogNotSupported on|off off svdhB
    Journalisation des demandes de fonctionnalités non supportées de la part des extensions ISAPI
    ISAPIReadAheadBuffer taille 49152 svdhB
    Taille du tampon de lecture anticipée envoyé aux extensions ISAPI
    KeepAlive On|Off On svC
    Active les connexions HTTP persistantes
    KeepAliveTimeout nombre[ms] 5 svC
    Durée pendant laquelle le serveur va attendre une requête avant de fermer une connexion persistante
    KeptBodySize taille maximale en octets 0 dB
    Conserve le corps de la requête à concurrence de la taille maximale spécifiée, pour une utilisation éventuelle par des filtres comme mod_include.
    LanguagePriority langage-MIME [langage-MIME] ...svdhB
    L'ordre de priorité des variantes de langages pour les cas où le client n'a pas formulé de préférences
    LDAPCacheEntries nombre 1024 sE
    Nombre maximum d'entrées dans le cache LDAP primaire
    LDAPCacheTTL secondes 600 sE
    Durée pendant laquelle les entrées du cache restent valides.
    LDAPConnectionPoolTTL n -1 svE
    Désactive les connexions d'arrière-plan qui sont restées inactives trop longtemps au sein du jeu de connexions.
    LDAPConnectionTimeout secondessE
    Spécifie le délai d'attente en secondes de la socket de connexion
    LDAPLibraryDebug 7sE
    Active le débogage dans le SDK LDAP
    LDAPOpCacheEntries nombre 1024 sE
    Nombre d'entrées utilisées pour mettre en cache les opérations de comparaison LDAP
    LDAPOpCacheTTL secondes 600 sE
    Durée pendant laquelle les entrées du cache d'opérations restent valides
    LDAPReferralHopLimit nombredhE
    Le nombre maximum de redirections vers des serveurs alternatifs (referrals) avant l'abandon de la requête LDAP.
    LDAPReferrals On|Off|default On dhE
    Active la redirection vers des serveurs alternatifs au cours des requêtes vers le serveur LDAP.
    LDAPRetries nombre d'essais 3 sE
    Définit le nombre maximum de tentatives de connexions au serveur LDAP.
    LDAPRetryDelay secondes 0 sE
    Définit le temps d'attente avant un autre essai de connexion au serveur LDAP.
    LDAPSharedCacheFile chemin/fichiersE
    Définit le fichier du cache en mémoire partagée
    LDAPSharedCacheSize octets 500000 sE
    Taille en octets du cache en mémoire partagée
    LDAPTimeout secondes 60 sE
    Spécifie le délai d'attente pour les opérations de recherche et d'identification LDAP en secondes
    LDAPTrustedClientCert type chemin/nom-fichier/alias [mot de passe]svdhE
    Définit le nom de fichier contenant un certificat client ou un alias renvoyant vers un certificat client spécifique à une connexion. Tous les SDK LDAP ne supportent pas les certificats clients par connexion.
    LDAPTrustedGlobalCert type chemin/nom-fichier [mot de passe]sE
    Définit le nom de fichier ou la base de données contenant les Autorités de Certification de confiance globales ou les certificats clients globaux
    LDAPTrustedMode typesvE
    Spécifie le mode (SSL ou TLS) à utiliser lors de la connexion à un serveur LDAP.
    LDAPVerifyServerCert On|Off On sE
    Force la vérification du certificat du serveur
    <Limit méthode [méthode] ... > ... </Limit>dhC
    Limite les contrôles d'accès que la section contient à certaines méthodes HTTP
    <LimitExcept méthode [méthode] ... > ... </LimitExcept>dhC
    Applique les contrôles d'accès à toutes les méthodes HTTP, sauf celles qui sont spécifiées
    LimitInternalRecursion nombre [nombre] 10 svC
    Détermine le nombre maximal de redirections internes et de sous-requêtes imbriquées
    LimitRequestBody octets 0 svdhC
    limite la taille maximale du corps de la requête HTTP envoyée par le client
    LimitRequestFields nombre 100 svC
    Limite le nombre de champs d'en-tête autorisés dans une requête HTTP
    LimitRequestFieldSize octets 8190 svC
    Dédinit la taille maximale autorisée d'un en-tête de requête HTTP
    LimitRequestLine octets 8190 svC
    Définit la taille maximale d'une ligne de requête HTTP
    LimitXMLRequestBody octets 1000000 svdhC
    Définit la taille maximale du corps d'une requête au format XML
    Listen [adresse IP:]numéro port [protocole]sM
    Les adresses IP et ports sur lesquels le serveur écoute
    ListenBackLog backlog 511 sM
    Longueur maximale de la liste d'attente des connexions
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Rapport entre le nombre de coeurs de processeur activés et le nombre de segments d'écoute
    LoadFile nom-fichier [nom-fichier] ...svE
    Liaison du fichier objet ou de la bibliothèque spécifié
    LoadModule module nom-fichiersvE
    Liaison avec le serveur du fichier objet ou de la bibliothèque spécifié, et ajout de ce dernier à la liste des modules actifs
    <Location chemin URL|URL> ... </Location>svC
    N'applique les directives contenues qu'aux URLs spécifiées
    <LocationMatch regex> ... </LocationMatch>svC
    N'applique les directives contenues qu'aux URLs correspondant à une expression rationnelle
    LogFormat format|alias [alias] "%h %l %u %t \"%r\" +svB
    Décrit un format utilisable dans un fichier journal
    LogIOTrackTTFB ON|OFF OFF svdhE
    Permet d'enregistrer le délai avant le premier octet (time to first byte - TTFB)
    LogLevel [module:]niveau [module:niveau] ... warn svdC
    Contrôle la verbosité du journal des erreurs
    LogMessage message [hook=hook] [expr=expression] dX
    Enregistre des messages personnalisés dans le journal des erreurs
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Branche une fonction fournisseur d'autorisation dans mod_authz_core
    LuaCodeCache stat|forever|never stat svdhE
    Configure le cache de code compilé.
    LuaHookAccessChecker /chemin/vers/lua/script.lua hook_function_name [early|late]svdhE
    Fournit un point d'entrée pour la phase access_checker du traitement de la requête
    LuaHookAuthChecker /chemin/vers/lua/script.lua hook_function_name [early|late]svdhE
    Fournit un point d'entrée pour la phase auth_checker du traitement de la requête
    LuaHookCheckUserID /chemin/vers/lua/script.lua hook_function_name [early|late]svdhE
    Fournit un point d'entrée pour la phase check_user_id du traitement de la requête
    LuaHookFixups /chemin/vers/lua/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la phase de correction du traitement de la requête
    LuaHookInsertFilter /chemin/vers/lua/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la phase insert_filter du traitement de la requête
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Permet une insertion dans la phase de journalisation du traitement d'une requête
    LuaHookMapToStorage /chemin/vers/lua/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la phase map_to_storage du traitement de la requête
    LuaHookTranslateName /chemin/vers/lua/script.lua nom_fonction_hook [early|late]svE
    Fournit un point d'entrée à la phase du nom de traduction du traitement de la requête
    LuaHookTypeChecker /chemin/vers/lua/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la phase type_checker du traitement de la requête
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Contrôle la manière dont les sections de configuration parentes sont fusionnées dans les enfants
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Fournit une fonction Lua pour le filtrage en entrée
    LuaMapHandler modele-uri /chemin/vers/lua/script.lua [nom-fonction]svdhE
    Met en correspondance un chemin avec un gestionnaire lua
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Fournit une fonction Lua pour le filtrage de contenu en sortie
    LuaPackageCPath /chemin/vers/include/?.soasvdhE
    Ajoute un répertoire au package.cpath de lua
    LuaPackagePath /chemin/vers/include/?.luasvdhE
    Ajoute un répertoire au package.path de lua
    LuaQuickHandler /path/to/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la gestion rapide du traitement de la requête
    LuaRoot /chemin/vers/un/répertoiresvdhE
    Spécifie le chemin de base pour la résolution des chemins relatifs dans les directives de mod_lua
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    Une valeur parmi once, request, conn, thread -- la valeur par défaut est once
    <Macro nom [par1 .. parN]> ... </Macro>svdB
    Définition d'une macro dans un fichier de configuration
    MaxConnectionsPerChild number 0 sM
    Limite le nombre de connexions qu'un processus enfant va traiter au cours de son fonctionnement
    MaxKeepAliveRequests nombre 100 svC
    Nombre de requêtes permises pour une connexion persistante
    MaxMemFree KOctets 2048 sM
    Quantité maximale de mémoire que l'allocateur principal est autorisé à conserver sans appeler free()
    MaxRangeOverlaps default | unlimited | none | nombre de chevauchements 20 svdC
    Nombre de chevauchements de segments de données autorisé (par exemple 100-200,150-300) avant le renvoi de la ressource complète
    MaxRangeReversals default | unlimited | none | nombre d'inversions 20 svdC
    Nombre d'inversions d'ordre autorisé dans la spécification des segments de données (par exemple 100-200,50-70) avant le renvoi de la ressource complète
    MaxRanges default | unlimited | none | nombre de segments 200 svdC
    Nombre de segments de données autorisé avant le renvoi de l'intégralité de la ressource
    MaxRequestWorkers nombresM
    Nombre maximum de connexions pouvant être traitées simultanément
    MaxSpareServers nombre 10 sM
    Nombre maximum de processus serveurs enfants inactifs
    MaxSpareThreads nombresM
    Nombre maximum de threads inactifs
    MaxThreads nombre 2048 sM
    Définit le nombre maximum de threads esclaves
    MDBaseServer on|off off sE
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sE
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsE
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url https://acme-v02.ap +sE
    The URL of the ACME Certificate Authority service.
    MDCertificateFile path-to-pem-filesE
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesE
    Specify a static private key for for the static cerrtificate.
    MDCertificateProtocol protocol ACME sE
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sE
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsE
    -
    MDDriveMode always|auto|manual auto sE
    former name of MDRenewMode.
    MDHttpProxy urlsE
    Define a proxy for outgoing connections.
    MDMember hostnamesE
    Additional hostname for the managed domain.
    MDMembers auto|manual auto sE
    Control if the alias domain names are automatically added.
    MDMessageCmd path-to-cmd optional-argssE
    Handle events for Manage Domains
    MDMustStaple on|off off sE
    Control if new certificates carry the OCSP Must Staple flag.
    MDNotifyCmd path [ args ]sE
    Run a program when a Managed Domain is ready.
    MDomain dns-name [ other-dns-name... ] [auto|manual]sE
    Define list of domain names that belong to one group.
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sE
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sE
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sE
    Set type and size of the private keys generated.
    MDRenewMode always|auto|manual auto sE
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sE
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sE
    Redirects http: traffic to https: for Managed Domains.
    MDServerStatus on|off on sE
    Control if Managed Domain information is added to server-status.
    MDStoreDir path md sE
    Path on the local file system to store the Managed Domains data.
    MDWarnWindow duration 10% sE
    Define the time window when you want to be warned about an expiring certificate.
    MemcacheConnTTL num[units] 15s svE
    Durée de conservation des connexions inactives
    MergeSlashes ON|OFF ON svC
    Fusion des slashes consécutifs dans les URLs par le serveur.
    MergeTrailers [on|off] off svC
    Détermine si les données supplémentaires (trailers) sont fusionnées avec les en-têtes
    MetaDir répertoire .web svdhE
    Le nom du répertoire où trouver les fichiers de métainformations dans le style du CERN
    MetaFiles on|off off svdhE
    Active le traitement des métafichiers du CERN
    MetaSuffix suffixe .meta svdhE
    Suffixe du fichier contenant les métainformations dans le style du CERN
    MimeMagicFile chemin-fichiersvE
    Active la détermination du type MIME en se basant sur le contenu du fichier et en utilisant le fichier magique spécifié
    MinSpareServers nombre 5 sM
    Nombre minimum de processus serveurs enfants inactifs
    MinSpareThreads nombresM
    Nombre minimum de threads inactifs qui seront disponibles pour pouvoir traiter les pics de requêtes
    MMapFile chemin fichier [chemin fichier] ...sX
    Charge au démarrage une liste de fichiers en mémoire
    ModemStandard V.21|V.26bis|V.32|V.34|V.92dX
    Standard de modem à simuler
    ModMimeUsePathInfo On|Off Off dB
    Indique à mod_mime de traiter les éléments de path_info en tant que parties du nom de fichier
    MultiviewsMatch Any|NegotiatedOnly|Filters|Handlers [Handlers|Filters] NegotiatedOnly svdhB
    Les types de fichiers qui seront inclus lors d'une recherche de correspondance de fichier avec les vues multiples (MultiViews)
    Mutex mécanisme [default|nom-mutex] ... [OmitPID] default sC
    Définit les mécanismes de mutex et le repertoire du fichier verrou pour tous les mutex ou seulement les mutex spécifiés
    NameVirtualHost adresse[:port]sC
    OBSOLETE : Définit une adresse IP pour les serveurs virtuels à base de nom
    NoProxy domaine [domaine] ...svE
    Serveurs, domaines ou réseaux auquels on se connectera directement
    NWSSLTrustedCerts nom-fichier [nom-fichier] ...sB
    Liste de certificats clients supplémentaires
    NWSSLUpgradeable [adresse-IP:]num-portsB
    Permet de promouvoir une connexion non SSL au statut de connexion SSL à la demande
    Options [+|-]option [[+|-]option] ... FollowSymlinks svdhC
    Définit les fonctionnalités disponibles pour un répertoire particulier
    Order ordre Deny,Allow dhE
    Définit le statut d'accès par défaut et l'ordre dans lequel les directives Allow et Deny sont évaluées.
    OutputSed commande-seddh
    Commande sed pour le filtrage des contenus de type réponse
    PassEnv var-env [var-env] ...svdhB
    Transmet des variables d'environnement depuis le shell
    PidFile nom fichier logs/httpd.pid sM
    Ficher dans lequel le serveur enregistre l'identificateur de processus du démon
    PrivilegesMode FAST|SECURE|SELECTIVE FAST svdX
    Fait un compromis entre d'une part l'efficacité et la vitesse de traitement et d'autre part la sécurité à l'encontre des codes malicieux supportant les privilèges.
    Protocol protocolesvC
    Protocole pour une socket d'écoute
    ProtocolEcho On|Off Off svX
    Active ou désactive le serveur d'écho
    Protocols protocole ... http/1.1 svC
    Protocoles disponibles pour un serveur virtuel ou non
    ProtocolsHonorOrder On|Off On svC
    Détermine qui du client ou du serveur détermine l'ordre des protocoles au cours de la négociation de la connexion
    <Proxy url-avec-jokers> ...</Proxy>svE
    Conteneur de directives s'appliquant à des ressources mandatées
    Proxy100Continue Off|On On svdE
    Transmission du message "100-continue" au serveur d'origine
    ProxyAddHeaders Off|On On svdE
    Ajoute des informations à propos du mandataire aux en-têtes X-Forwarded-*
    ProxyBadHeader IsError|Ignore|StartBody IsError svE
    Détermine la manière de traiter les lignes d'en-tête incorrectes d'une réponse
    ProxyBlock *|terme|serveur|domaine [terme|serveur|domaine] ...svE
    Termes, serveurs ou domaines bloqués par le mandataire
    ProxyDomain DomainesvE
    Nom de domaine par défaut pour les requêtes mandatées
    ProxyErrorOverride On|Off Off svdE
    Outrepasser les pages d'erreur pour les contenus mandatés
    ProxyExpressDBMFile pathnamesvE
    Chemin du fichier DBM.
    ProxyExpressDBMType type default svE
    Type de fichier DBM.
    ProxyExpressEnable on|off off svE
    Active la fonctionnalité du module.
    ProxyFCGIBackendType FPM|GENERIC FPM svdhE
    Spécifie le type de l'application FastCGI d'arrière-plan
    ProxyFCGISetEnvIf conditional-expression [!]environment-variable-name [value-expression]svdhE
    Permet d'adapter la valeur des variables envoyées aux serveurs FastCGI
    ProxyFtpDirCharset character_set ISO-8859-1 svdE
    Définit le jeu de caractères des listings FTP mandatés
    ProxyFtpEscapeWildcards on|off on svdE
    Les caractères génériques dans les noms de fichiers doivent-ils être échappés lorsqu'ils sont envoyés au serveur FTP ?
    ProxyFtpListOnWildcard on|off on svdE
    Les caractères génériques dans les noms de fichiers demandés doivent-ils déclencher l'affichage d'un listing ?
    ProxyHCExpr name {ap_expr expression}svE
    Crée et nomme une expression conditionnelle à utiliser pour déterminer la santé d'un serveur d'arrière-plan en fonction de sa valeur
    ProxyHCTemplate name parameter=setting [...]svE
    Crée et nomme un modèle permettant de définir différents paramètres de check up
    ProxyHCTPsize size 16 sE
    Définit la taille totale, pour l'ensemble du serveur, du jeu de threads utilisé pour le check up des équipiers
    ProxyHTMLBufSize nb-octets 8192 svdB
    Définit l'incrément de la taille du tampon, ainsi que sa taille initiale, pour la mise en tampon des scripts en ligne et des feuilles de style.
    ProxyHTMLCharsetOut jeu-de-caractères | *svdB
    Spécifie un jeu de caractères pour la sortie de mod_proxy_html.
    ProxyHTMLDocType HTML|XHTML [Legacy]
    OR
    ProxyHTMLDocType fpi [SGML|XML]
    svdB
    Définit une déclaration de type de document HTML ou XHTML.
    ProxyHTMLEnable On|Off Off svdB
    Permet d'activer/désactiver le filtre proxy_html.
    ProxyHTMLEvents attribut [attribut ...]svdB
    Spécifie les attributs à traiter comme des évènements de type scripting.
    ProxyHTMLExtended On|Off Off svdB
    Détermine si l'on doit corriger les liens dans les scripts en ligne, les feuilles de style et les évènements de type scripting.
    ProxyHTMLFixups [lowercase] [dospath] [reset]svdB
    Corrige les erreurs HTML simples.
    ProxyHTMLInterp On|Off Off svdB
    Active la réinterprétation des règles ProxyHTMLURLMap pour chaque requête.
    ProxyHTMLLinks élément attribut [attribut2 ...]svdB
    Spécifie les éléments HTML dont les attributs d'URL doivent être réécrits.
    ProxyHTMLMeta On|Off Off svdB
    Active ou désactive une préinterprétation supplémentaire des métadonnées dans les sections HTML <head>.
    ProxyHTMLStripComments On|Off Off svdB
    Détermine si les commentaires HTML doivent être supprimés.
    ProxyHTMLURLMap modèle-source modèle-cible [drapeaux] [cond]svdB
    Définit une règle de réécriture des liens HTML
    ProxyIOBufferSize octets 8192 svE
    Détermine la taille du tampon interne de transfert de données
    <ProxyMatch regex> ...</ProxyMatch>svE
    Conteneur de directives s'appliquant à des ressources mandatées correspondant à une expression rationnelle
    ProxyMaxForwards nombre -1 svE
    Nombre maximum de mandataires à travers lesquelles une requête peut être redirigée
    ProxyPass [chemin] !|url [clé=valeur [clé=valeur ...]] [nocanon] [interpolate] [noquery]svdE
    Référencer des serveurs distants depuis l'espace d'URLs du serveur local
    ProxyPassInherit On|Off On svE
    Héritage des directives ProxyPass définies au niveau du serveur principal
    ProxyPassInterpolateEnv On|Off Off svdE
    Active l'interpolation des variables d'environnement dans les configurations de mandataires inverses
    ProxyPassMatch [regex] !|url [clé=valeur [clé=valeur ...]]svdE
    Fait correspondre des serveurs distants dans l'espace d'URL du serveur local en utilisant des expressions rationnelles
    ProxyPassReverse [chemin] url [interpolate]svdE
    Ajuste l'URL dans les en-têtes de la réponse HTTP envoyée par un serveur mandaté en inverse
    ProxyPassReverseCookieDomain domaine-interne domaine-public [interpolate]svdE
    Ajuste la chaîne correspondant au domaine dans les en-têtes Set-Cookie en provenance d'un serveur mandaté
    ProxyPassReverseCookiePath chemin-interne chemin-public [interpolate]svdE
    Ajuste la chaîne correspondant au chemin dans les en-têtes Set-Cookie en provenance d'un serveur mandaté
    ProxyPreserveHost On|Off Off svdE
    Utilise l'en-tête de requête entrante Host pour la requête du mandataire
    ProxyReceiveBufferSize octets 0 svE
    Taille du tampon réseau pour les connexions mandatées HTTP et FTP
    ProxyRemote comparaison serveur-distantsvE
    Mandataire distant à utiliser pour traiter certaines requêtes
    ProxyRemoteMatch regex serveur-distantsvE
    Le mandataire distant à utiliser pour traiter les requêtes correspondant à une expression rationnelle
    ProxyRequests On|Off Off svE
    Active la fonctionnalité (standard) de mandataire direct
    ProxySCGIInternalRedirect On|Off|Headername On svdE
    Active ou désactive les réponses de redirection interne en provenance du serveur cible.
    ProxySCGISendfile On|Off|nom-en-tête Off svdE
    Active l'évaluation du pseudo en-tête de réponse X-Sendfile
    ProxySet url clé=valeur [clé=valeur ...]svdE
    Définit différents paramètres relatifs à la répartition de charge des mandataires et aux membres des groupes de répartition de charge
    ProxySourceAddress adressesvE
    Définit l'adresse IP locale pour les connexions mandatées sortantes
    ProxyStatus Off|On|Full Off svE
    Affiche l'état du répartiteur de charge du mandataire dans mod_status
    ProxyTimeout secondessvE
    Délai d'attente réseau pour les requêtes mandatées
    ProxyVia On|Off|Full|Block Off svE
    Information fournie dans l'en-tête de réponse HTTP Via pour les requêtes mandatées
    QualifyRedirectURL ON|OFF OFF svdC
    Vérifie si la variable d'environnement REDIRECT_URL est pleinement qualifiée
    ReadmeName nom-fichiersvdhB
    Nom du fichier dont le contenu sera inséré à la fin de l'index
    ReceiveBufferSize octets 0 sM
    Taille du tampon TCP en entrée
    Redirect [état] [URL-path] URLsvdhB
    Envoie une redirection externe demandant au client d'effectuer une autre requête avec une URL différente
    RedirectMatch [état] regex URLsvdhB
    Envoie une redirection externe faisant appel aux expressions rationnelles pour la mise en correspondance de l'URL courante
    RedirectPermanent chemin URL URLsvdhB
    Envoie une redirection externe permanente demandant au client d'effectuer une nouvelle requête avec une URL différente
    RedirectTemp chemin URL URLsvdhB
    Envoie une redirection externe temporaire demandant au client d'effectuer une nouvelle requête avec une URL différente
    RedisConnPoolTTL num[units] 15s svE
    TTL used for the connection pool with the Redis server(s)
    RedisTimeout num[units] 5s svE
    R/W timeout used for the connection with the Redis server(s)
    ReflectorHeader en-tête-entrée [en-tête-sortie]svdhB
    Renvoie un en-tête d'entrée dans les en-têtes de sortie
    RegexDefaultOptions [none] [+|-]option [[+|-]option] ... DOLLAR_ENDONLY sC
    Configuration des options globales par défaut pour les expressions rationnelles
    RegisterHttpMethod méthode [méthode [...]]sC
    Enregistrement de méthodes HTTP non standards
    RemoteIPHeader en-têtesvB
    Définit le champ d'en-tête qui contiendra les adresses IP du client
    RemoteIPInternalProxy ip-mandataire|ip-mandataire/sous-réseau|nom-hôte ...svB
    Déclare les adresses IP intranet clients comme dignes de confiance pour présenter la valeur RemoteIPHeader
    RemoteIPInternalProxyList nom-fichiersvB
    Déclare les adresses IP intranet clients comme dignes de confiance pour présenter la valeur RemoteIPHeader
    RemoteIPProxiesHeader Nom_en-têtesvB
    Déclare le champ d'en-tête qui contiendra toutes les adresses IP intermédiaires
    RemoteIPProxyProtocol On|OffsvB
    Active ou désactive la gestion du protocole PROXY
    RemoteIPProxyProtocolExceptions host|range [host|range] [host|range]svB
    Désactive la prise en compte de l'en-tête PROXY pour certains hôtes ou réseaux
    RemoteIPTrustedProxy ip-mandataire|ip-mandataire/sous-réseau|nom-hôte ...svB
    Déclare les adresses IP clientes de l'intranet dignes de confiance pour présenter la valeur RemoteIPHeader
    RemoteIPTrustedProxyList nom-fichiersvB
    Déclare les adresses IP intranet clients comme dignes de confiance pour présenter la valeur RemoteIPHeader
    RemoveCharset extension [extension] ...vdhB
    Supprime toute association de jeu de caractères pour un ensemble d'extensions de noms de fichiers
    RemoveEncoding extension [extension] ...vdhB
    Supprime toute association de codage de contenu pour un ensemble d'extensions de noms de fichiers
    RemoveHandler extension [extension] ...vdhB
    Supprime toute association de gestionnaire à un ensemble d'extensions de noms de fichiers
    RemoveInputFilter extension [extension] ...vdhB
    Supprime toute association de filtre en entrée à un ensemble d'extensions de noms de fichiers
    RemoveLanguage extension [extension] ...vdhB
    Supprime toute association de langue à un ensemble d'extensions de noms de fichiers
    RemoveOutputFilter extension [extension] ...vdhB
    Supprime toute association de filtre en sortie à un ensemble d'extensions de noms de fichiers
    RemoveType extension [extension] ...vdhB
    Supprime toute association de type de contenu à un ensemble d'extensions de noms de fichiers
    RequestHeader add|append|edit|edit*|merge|set|setifempty|unset en-tête [[expr=]valeur [remplacement] [early|env=[!]variable|expr=expression]] svdhE
    Configure les en-têtes d'une requête HTTP
    RequestReadTimeout [handshake=timeout[-maxtimeout][,MinRate=rate] [header=timeout[-maxtimeout][,MinRate=MinRate] [body=timeout[-maxtimeout][,MinRate=MinRate] handshake=0 header= +svE
    Définit des délais maximums pour la négociation TLS, la réception des en-têtes et/ou corps des requêtes en provenance du client.
    Require [not] nom-entité [nom-entité] ...dhB
    Vérifie si un utilisateur authentifié a une autorisation d'accès accordée par un fournisseur d'autorisation.
    <RequireAll> ... </RequireAll>dhB
    Regroupe plusieurs directives d'autorisation dont aucune ne doit échouer et dont au moins une doit retourner un résultat positif pour que la directive globale retourne elle-même un résultat positif.
    <RequireAny> ... </RequireAny>dhB
    Regroupe des directives d'autorisation dont au moins une doit retourner un résultat positif pour que la directive globale retourne elle-même un résultat positif.
    <RequireNone> ... </RequireNone>dhB
    Regroupe des directives d'autorisation dont aucune ne doit retourner un résultat positif pour que la directive globale n'échoue pas.
    RewriteBase chemin_URLdhE
    Définit l'URL de base pour les réécritures au niveau répertoire
    RewriteCond chaîne_de_test expression_de_comparaison [drapeaux]svdhE
    Définit une condition qui devra être satisfaite pour que la réécriture soit effectuée
    RewriteEngine on|off off svdhE
    Active ou désactive l'exécution du moteur de réécriture
    RewriteMap MapName MapType:MapSource [MapTypeOptions] svE
    Définit une fonction de mise en correspondance pour la recherche de mots-clés
    RewriteOptions OptionssvdhE
    Configure certaines options spéciales pour le moteur de réécriture
    RewriteRule Modèle Substitution [drapeaux]svdhE
    Définit les règles pour le moteur de réécriture
    RLimitCPU secondes|max [secondes|max]svdhC
    Limite le temps CPU alloué aux processus initiés par les processus enfants d'Apache httpd
    RLimitMEM octets|max [octets|max]svdhC
    Limite la mémoire allouée aux processus initiés par les processus enfants d'Apache httpd
    RLimitNPROC nombre|max [nombre|max]svdhC
    Limite le nombre de processus qui peuvent être initiés par les processus initiés par les processus enfants d'Apache httpd
    Satisfy Any|All All dhE
    Interaction entre le contrôle d'accès en fonction de l'hôte et l'authentification utilisateur
    ScoreBoardFile chemin fichier logs/apache_runtime +sM
    Chemin du fichier où sont stockées les données concernant la coordination des processus enfants
    Script méthode script cgisvdB
    Active un script CGI dans le cas d'une méthode de requête particulière.
    ScriptAlias [chemin URL] chemin fichier|chemin répertoiresvdB
    Fait correspondre une URL à une zone du système de fichiers et désigne la cible comme script CGI
    ScriptAliasMatch regex chemin fichier|chemin répertoiresvB
    Fait correspondre une URL à une zone du système de fichiers en faisant appel aux expressions rationnelles et en désignant la cible comme un script CGI
    ScriptInterpreterSource Registry|Registry-Strict|Script Script svdhC
    Permet de localiser l'interpréteur des scripts CGI
    ScriptLog chemin fichiersvB
    Chemin du fichier journal des erreurs du script CGI
    ScriptLogBuffer octets 1024 svB
    Taille maximale des requêtes PUT ou POST qui seront enregistrées dans le journal du script
    ScriptLogLength octets 10385760 svB
    Taille maximale du fichier journal des scripts CGI
    ScriptSock chemin fichier cgisock sB
    Le préfixe du nom de fichier du socket à utiliser pour communiquer avec le démon CGI
    SecureListen [adresse-IP:]num-port nom-certificat [MUTUAL]sB
    Active le chiffrement SSL pour le port spécifié
    SeeRequestTail On|Off Off sC
    Détermine si mod_status affiche les 63 premiers caractères d'une requête ou les 63 derniers, en supposant que la requête elle-même possède plus de 63 caractères.
    SendBufferSize octets 0 sM
    Taille du tampon TCP en sortie
    ServerAdmin adresse électronique|URLsvC
    L'adresse électronique que le serveur inclut dans les messages d'erreur envoyés au client
    ServerAlias nom serveur [nom serveur] ...vC
    Autres noms d'un serveur utilisables pour atteindre des serveurs virtuels à base de nom
    ServerLimit nombresM
    Limite supérieure de la définition du nombre de processus
    ServerName [protocole://]nom-de-domaine|adresse-ip[:port]svC
    Nom d'hôte et port que le serveur utilise pour s'authentifier lui-même
    ServerPath chemin d'URLvC
    Nom de chemin d'URL hérité pour un serveur virtuel à base de nom accédé par un navigateur incompatible
    ServerRoot chemin de répertoire /usr/local/apache sC
    Racine du répertoire d'installation du serveur
    ServerSignature On|Off|EMail Off svdhC
    Définit un pied de page pour les documents générés par le serveur
    ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full Full sC
    Configure l'en-tête Server de la réponse HTTP
    Session On|Off Off svdhE
    Ouvre une session pour le contexte courant
    SessionCookieName nom attributssvdhE
    Nom et attributs du cookie RFC2109 dans lequel la session est stockée
    SessionCookieName2 nom attributssvdhE
    Nom et attributs pour le cookie RFC2965 dans lequel est stockée la session
    SessionCookieRemove On|Off Off svdhE
    Détermine si les cookies de session doivent être supprimés des en-têtes HTTP entrants
    SessionCryptoCipher algorithme aes256 svdhX
    L'algorithme à utiliser pour le chiffrement de la session
    SessionCryptoDriver nom [param[=valeur]]sX
    Le pilote de chiffrement à utiliser pour chiffrer les sessions
    SessionCryptoPassphrase secret [ secret ... ] svdhX
    La clé utilisée pour chiffrer la session
    SessionCryptoPassphraseFile nom-fichiersvdX
    Le fichier contenant les clés utilisées pour chiffrer la session
    SessionDBDCookieName nom attributssvdhE
    Nom et attributs du cookie RFC2109 qui contient l'identifiant de session
    SessionDBDCookieName2 nom attributssvdhE
    Nom et attributs du cookie RFC2965 qui contient l'identifiant de session
    SessionDBDCookieRemove On|Off On svdhE
    Détermine si les cookies de session doivent être supprimés des en-têtes HTTP entrants
    SessionDBDDeleteLabel étiquette deletesession svdhE
    La requête SQL à utiliser pour supprimer des sessions de la base de données
    SessionDBDInsertLabel étiquette insertsession svdhE
    La requête SQL à utiliser pour insérer des sessions dans la base de données
    SessionDBDPerUser On|Off Off svdhE
    Active une session propre à un utilisateur
    SessionDBDSelectLabel étiquette selectsession svdhE
    La requête SQL à utiliser pour sélectionner des sessions dans la base de données
    SessionDBDUpdateLabel étiquette updatesession svdhE
    La requête SQL à utiliser pour mettre à jour des sessions préexistantes dans la base de données
    SessionEnv On|Off Off svdhE
    Définit si le contenu de la session doit être enregistré dans la variable d'environnement HTTP_SESSION
    SessionExclude cheminsvdhE
    Définit les préfixes d'URLs pour lesquels une session sera ignorée
    SessionExpiryUpdateInterval interval 0 (always update) svdhE
    Define the number of seconds a session's expiry may change without the session being updated
    SessionHeader en-têtesvdhE
    Importation des mises à jour de session depuis l'en-tête de réponse HTTP spécifié
    SessionInclude cheminsvdhE
    Définit les préfixes d'URL pour lesquels une session est valide
    SessionMaxAge durée de vie maximale 0 svdhE
    Définit une durée de vie maximale pour la session en secondes
    SetEnv var-env [valeur]svdhB
    Définit des variables d'environnement
    SetEnvIf attribut regex [!]env-variable[=valeur] [[!]env-variable[=valeur]] ...svdhB
    Définit des variables d'environnement en fonction des attributs de la requête
    SetEnvIfExpr expr [!]env-variable[=valeur] [[!]env-variable[=valeur]] ...svdhB
    Définit des variables d'environnement en fonction d'une expression ap_expr
    SetEnvIfNoCase attribut regex [!]env-variable[=valeur] [[!]env-variable[=valeur]] ...svdhB
    Définit des variables d'environnement en fonction des attributs de la requête sans tenir compte de la casse
    SetHandler handler-name|none|expressionsvdhC
    Force le traitement des fichiers spécifiés par un gestionnaire particulier
    SetInputFilter filtre[;filtre...]svdhC
    Définit les filtres par lesquels vont passer les requêtes client et les données POST
    SetOutputFilter filtre[;filtre...]svdhC
    Définit les filtres par lesquels vont passer les réponses du serveur
    SSIEndTag tag "-->" svB
    Chaîne qui termine l'élément include
    SSIErrorMsg message "[an error occurred +svdhB
    Message d'erreur affiché lorsqu'une erreur SSI survient
    SSIETag on|off off dhB
    Définit si des en-têtes ETags sont générés par le serveur.
    SSILastModified on|off off dhB
    Définit si des en-têtes Last-Modified sont générés par le serveur.
    SSILegacyExprParser on|off off dhB
    Active le mode de compatibilité pour les expressions conditionnelles.
    SSIStartTag tag "<!--#" svB
    Chaîne qui marque le début d'un élément include
    SSITimeFormat chaîne de formatage "%A, %d-%b-%Y %H:%M +svdhB
    Configuration du format d'affichage des dates
    SSIUndefinedEcho chaîne "(none)" svdhB
    Chaîne à afficher lorsqu'on tente d'extraire le contenu d'une variable non définie
    SSLCACertificateFile chemin-fichiersvE
    Fichier contenant une concaténation des certificats de CA codés en PEM pour l'authentification des clients
    SSLCACertificatePath chemin-répertoiresvE
    Répertoire des certificats de CA codés en PEM pour l'authentification des clients
    SSLCADNRequestFile chemin-fichiersvE
    Fichier contenant la concaténation des certificats de CA codés en PEM pour la définition de noms de CA acceptables
    SSLCADNRequestPath chemin-répertoiresvE
    Répertoire contenant des fichiers de certificats de CA codés en PEM pour la définition de noms de CA acceptables
    SSLCARevocationCheck chain|leaf|none [flags ...] none svE
    Active la vérification des révocations basée sur les CRL
    SSLCARevocationFile chemin-fichiersvE
    Fichier contenant la concaténation des CRLs des CA codés en PEM pour l'authentification des clients
    SSLCARevocationPath chemin-répertoiresvE
    Répertoire des CRLs de CA codés en PEM pour l'authentification des clients
    SSLCertificateChainFile chemin-fichiersvE
    Fichier contenant les certificats de CA du serveur codés en PEM
    SSLCertificateFile chemin-fichiersvE
    Fichier de données contenant le certificat X.509 du serveur codé en PEM
    SSLCertificateKeyFile chemin-fichiersvE
    Fichier contenant la clé privée du serveur codée en PEM
    SSLCipherSuite [protocol] cipher-spec DEFAULT (dépend de +svdhE
    Algorithmes de chiffrement disponibles pour la négociation au cours de l'initialisation de la connexion SSL
    SSLCompression on|off off svE
    Permet d'activer la compression au niveau SSL
    SSLCryptoDevice moteur builtin sE
    Active l'utilisation d'un accélérateur matériel de chiffrement
    SSLEngine on|off|optional off svE
    Interrupteur marche/arrêt du moteur SSL
    SSLFIPS on|off off sE
    Coimmutateur du mode SSL FIPS
    SSLHonorCipherOrder on|off off svE
    Option permettant de classer les algorithmes de chiffrement du serveur par ordre de préférence
    SSLInsecureRenegotiation on|off off svE
    Option permettant d'activer le support de la renégociation non sécurisée
    SSLOCSPDefaultResponder urisvE
    Définit l'URI du répondeur par défaut pour la validation OCSP
    SSLOCSPEnable on|leaf|off off svE
    Active la validation OCSP de la chaîne de certificats du client
    SSLOCSPNoverify On/Off Off svE
    Evite la vérification des certificats des répondeurs OCSP
    SSLOCSPOverrideResponder on|off off svE
    Force l'utilisation de l'URI du répondeur par défaut pour la validation OCSP
    SSLOCSPProxyURL urlsvE
    Adresse de mandataire à utiliser pour les requêtes OCSP
    SSLOCSPResponderCertificateFile filesvE
    Fournit un jeu de certificats de confiance du répondeur OCSP avec encodage PEM
    SSLOCSPResponderTimeout secondes 10 svE
    Délai d'attente pour les requêtes OCSP
    SSLOCSPResponseMaxAge secondes -1 svE
    Age maximum autorisé pour les réponses OCSP
    SSLOCSPResponseTimeSkew secondes 300 svE
    Dérive temporelle maximale autorisée pour la validation des réponses OCSP
    SSLOCSPUseRequestNonce on|off on svE
    Use a nonce within OCSP queries
    SSLOpenSSLConfCmd commande valeursvE
    Configuration des paramètres d'OpenSSL via son API SSL_CONF
    SSLOptions [+|-]option ...svdhE
    Configure différentes options d'exécution du moteur SSL
    SSLPassPhraseDialog type builtin sE
    Méthode utilisée pour entrer le mot de passe pour les clés privées chiffrées
    SSLProtocol [+|-]protocole ... all -SSLv3 (jusqu'à +svE
    Indique les versions du protocole SSL/TLS disponibles
    SSLProxyCACertificateFile file-pathsvpE
    Fichier contenant la concaténation des certificats de CA codés en PEM pour l'authentification des serveurs distants
    SSLProxyCACertificatePath chemin-répertoiresvpE
    Répertoire des certificats de CA codés en PEM pour l'authentification des serveurs distants
    SSLProxyCARevocationCheck chain|leaf|none none svpE
    Active la vérification des révocations basée sur les CRLs pour l'authentification du serveur distant
    SSLProxyCARevocationFile chemin-fichiersvpE
    Fichier contenant la concaténation des CRLs de CA codés en PEM pour l'authentification des serveurs distants
    SSLProxyCARevocationPath chemin-répertoiresvpE
    Répertoire des CRLs de CA codés en PEM pour l'authentification des serveurs distants
    SSLProxyCheckPeerCN on|off on svpE
    Configuration de la vérification du champ CN du certificat du serveur distant
    SSLProxyCheckPeerExpire on|off on svpE
    Configuration de la vérification de l'expiration du certificat du serveur distant
    SSLProxyCheckPeerName on|off on svpE
    Configure la vérification du nom d'hôte dans les certificats serveur distants
    SSLProxyCipherSuite [protocol] cipher-spec ALL:!ADH:RC4+RSA:+H +svpE
    Algorithmes de chiffrement disponibles pour la négociation lors de l'initialisation d'une connexion SSL de mandataire
    SSLProxyEngine on|off off svpE
    Interrupteur marche/arrêt du moteur de mandataire SSL
    SSLProxyMachineCertificateChainFile nom-fichiersvpE
    Fichier de certificats de CA encodés PEM concaténés permettant au mandataire de choisir un certificat
    SSLProxyMachineCertificateFile chemin-fichiersvpE
    Fichier contenant la concaténation des clés et certificats clients codés en PEM que le mandataire doit utiliser
    SSLProxyMachineCertificatePath chemin-répertoiresvpE
    Répertoire des clés et certificats clients codés en PEM que le mandataire doit utiliser
    SSLProxyProtocol [+|-]protocole ... all -SSLv3 (jusqu'à +svpE
    Définit les protocoles SSL disponibles pour la fonction de mandataire
    SSLProxyVerify niveau none svpE
    Niveau de vérification du certificat du serveur distant
    SSLProxyVerifyDepth niveau 1 svpE
    Niveau de profondeur maximum dans les certificats de CA lors de la vérification du certificat du serveur distant
    SSLRandomSeed contexte source [nombre]sE
    Source de déclenchement du Générateur de Nombres Pseudo-Aléatoires (PRNG)
    SSLRenegBufferSize taille 131072 dhE
    Définit la taille du tampon de renégociation SSL
    SSLRequire expressiondhE
    N'autorise l'accès que lorsqu'une expression booléenne complexe et arbitraire est vraie
    SSLRequireSSLdhE
    Interdit l'accès lorsque la requête HTTP n'utilise pas SSL
    SSLSessionCache type none sE
    Type du cache de session SSL global et inter-processus
    SSLSessionCacheTimeout secondes 300 svE
    Nombre de secondes avant l'expiration d'une session SSL dans le cache de sessions
    SSLSessionTicketKeyFile chemin-fichiersvE
    Clé de chiffrement/déchiffrement permanente pour les tickets de session TLS
    SSLSessionTickets on|off on svE
    Active ou désactive les tickets de session TLS
    SSLSRPUnknownUserSeed secret-stringsvE
    Source d'aléa pour utilisateur SRP inconnu
    SSLSRPVerifierFile file-pathsvE
    Chemin du fichier de vérification SRP
    SSLStaplingCache typesE
    Configuration du cache pour l'agrafage OCSP
    SSLStaplingErrorCacheTimeout secondes 600 svE
    Durée de vie des réponses invalides dans le cache pour agrafage OCSP
    SSLStaplingFakeTryLater on|off on svE
    Génère une réponse "tryLater" pour les requêtes OCSP échouées
    SSLStaplingForceURL urisvE
    Remplace l'URI du serveur OCSP spécifié dans l'extension AIA du certificat
    SSLStaplingResponderTimeout secondes 10 svE
    Temps d'attente maximum pour les requêtes vers les serveurs OCSP
    SSLStaplingResponseMaxAge secondes -1 svE
    Age maximum autorisé des réponses OCSP incluses dans la négociation TLS
    SSLStaplingResponseTimeSkew secondes 300 svE
    Durée de vie maximale autorisée des réponses OCSP incluses dans la négociation TLS
    SSLStaplingReturnResponderErrors on|off on svE
    Transmet au client les erreurs survenues lors des requêtes OCSP
    SSLStaplingStandardCacheTimeout secondes 3600 svE
    Durée de vie des réponses OCSP dans le cache
    SSLStrictSNIVHostCheck on|off off svE
    Contrôle de l'accès des clients non-SNI à un serveur virtuel à base de nom.
    SSLUserName nom-varsdhE
    Nom de la variable servant à déterminer le nom de l'utilisateur
    SSLUseStapling on|off off svE
    Active l'ajout des réponses OCSP à la négociation TLS
    SSLVerifyClient niveau none svdhE
    Niveau de vérification du certificat client
    SSLVerifyDepth nombre 1 svdhE
    Profondeur maximale des certificats de CA pour la vérification des certificats clients
    StartServers nombresM
    Nombre de processus enfants du serveur créés au démarrage
    StartThreads nombresM
    Nombre de threads créés au démarrage
    Substitute s/modèle/substitution/[infq]dhE
    Modèle de substition dans le contenu de la réponse
    SubstituteInheritBefore on|off on dhE
    Modifie l'ordre de fusion des modèles hérités
    SubstituteMaxLineLength octets(b|B|k|K|m|M|g|G) 1m dhE
    Définit la longueur de ligne maximale
    Suexec On|OffsB
    Active ou désactive la fonctionnalité suEXEC
    SuexecUserGroup Utilisateur GroupesvE
    L'utilisateur et le groupe sous lesquels les programmes CGI doivent s'exécuter
    ThreadLimit nombresM
    Le nombre de threads maximum que l'on peut définir par processus enfant
    ThreadsPerChild nombresM
    Nombre de threads créés par chaque processus enfant
    ThreadStackSize taillesM
    La taille en octets de la pile qu'utilisent les threads qui traitent les connexions clients
    TimeOut secondes 60 svC
    Temps pendant lequel le serveur va attendre certains évènements avant de considérer qu'une requête a échoué
    TraceEnable [on|off|extended] on svC
    Détermine le comportement des requêtes TRACE
    TransferLog fichier|pipesvB
    Spécifie l'emplacement d'un fichier journal
    TypesConfig chemin-fichier conf/mime.types sB
    Le chemin du fichier mime.types
    UnDefine nom-variablesC
    Invalide la définition d'une variable
    UndefMacro nomsvdB
    Supprime une macro
    UnsetEnv var-env [var-env] ...svdhB
    Supprime des variables de l'environnement
    Use nom [valeur1 ... valeurN] svdB
    Utilisation d'une macro
    UseCanonicalName On|Off|DNS Off svdC
    Définit la manière dont le serveur détermine son propre nom et son port
    UseCanonicalPhysicalPort On|Off Off svdC
    Définit la manière dont le serveur détermine son propre port
    User utilisateur unix #-1 sB
    L'utilisateur sous lequel le serveur va traiter les requêtes
    UserDir nom-répertoire [nom-répertoire] ... svB
    Chemin des répertoires propres à un utilisateur
    VHostCGIMode On|Off|Secure On vX
    Détermine si le serveur virtuel peut exécuter des sous-processus, et définit les privilèges disponibles pour ces dernier.
    VHostCGIPrivs [+-]?privilege-name [[+-]?privilege-name] ...vX
    Assigne des privilèges au choix aux sous-processus créés par un serveur virtuel.
    VHostGroup identifiant-groupe-unixvX
    Définit l'identifiant du groupe sous lequel s'exécute un serveur virtuel.
    VHostPrivs [+-]?nom-privilège [[+-]?nom-privilège] ...vX
    Assigne des privilèges à un serveur virtuel.
    VHostSecure On|Off On vX
    Détermine si le serveur s'exécute avec une sécurité avancée pour les serveurs virtuels.
    VHostUser identifiant-utilisateur-unixvX
    Définit l'identifiant utilisateur sous lequel s'exécute un serveur virtuel.
    VirtualDocumentRoot répertoire-interpolé|none none svE
    Permet une configuration dynamique de la racine des documents d'un serveur virtuel donné
    VirtualDocumentRootIP répertoire-interpolé|none none svE
    Configuration dynamique de la racine des documents pour un serveur virtuel donné
    <VirtualHost adresse IP[:port] [adresse IP[:port]] ...> ... </VirtualHost>sC
    Contient des directives qui ne s'appliquent qu'à un nom d'hôte spécifique ou à une adresse IP
    VirtualScriptAlias répertoire-interpolé|none none svE
    Configuration dynamique du répertoire des scripts CGI pour un serveur virtuel donné
    VirtualScriptAliasIP répertoire-interpolé|none none svE
    Configuration dynamique du répertoire des scripts CGI pour un serveur virtuel donné
    WatchdogInterval time-interval[s] 1 sB
    Intervalle Watchdog en secondes
    XBitHack on|off|full off svdhB
    Interprète les directives SSI dans les fichiers dont le bit d'exécution est positionné
    xml2EncAlias jeu-de-caractères alias [alias ...]sB
    Définit des alias pour les valeurs d'encodage
    xml2EncDefault nomsvdhB
    Définit un encodage par défaut à utiliser lorsqu'aucune information ne peut être automatiquement détectée
    xml2StartParse élément [élément ...]svdhB
    Indique à l'interpréteur à partir de quelle balise il doit commencer son traitement.

    Langues Disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mpm_netware.html.en0000644000000000000500000002410213412755316020033 0ustar rootsrc mpm_netware - Apache HTTP Server Version 2.4
    <-

    Apache MPM netware

    Available Languages:  en  |  fr 

    Description:Multi-Processing Module implementing an exclusively threaded web server optimized for Novell NetWare
    Status:MPM
    Module Identifier:mpm_netware_module
    Source File:mpm_netware.c

    Summary

    This Multi-Processing Module (MPM) implements an exclusively threaded web server that has been optimized for Novell NetWare.

    The main thread is responsible for launching child worker threads which listen for connections and serve them when they arrive. Apache HTTP Server always tries to maintain several spare or idle worker threads, which stand ready to serve incoming requests. In this way, clients do not need to wait for a new child threads to be spawned before their requests can be served.

    The StartThreads, MinSpareThreads, MaxSpareThreads, and MaxThreads regulate how the main thread creates worker threads to serve requests. In general, Apache httpd is very self-regulating, so most sites do not need to adjust these directives from their default values. Sites with limited memory may need to decrease MaxThreads to keep the server from thrashing (spawning and terminating idle threads). More information about tuning process creation is provided in the performance hints documentation.

    MaxConnectionsPerChild controls how frequently the server recycles processes by killing old ones and launching new ones. On the NetWare OS it is highly recommended that this directive remain set to 0. This allows worker threads to continue servicing requests indefinitely.

    top

    MaxThreads Directive

    Description:Set the maximum number of worker threads
    Syntax:MaxThreads number
    Default:MaxThreads 2048
    Context:server config
    Status:MPM
    Module:mpm_netware

    The MaxThreads directive sets the desired maximum number worker threads allowable. The default value is also the compiled in hard limit. Therefore it can only be lowered, for example:

    MaxThreads 512

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_userdir.html.en0000644000000000000500000003013713412755316020036 0ustar rootsrc mod_userdir - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_userdir

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    Description:User-specific directories
    Status:Base
    Module Identifier:userdir_module
    Source File:mod_userdir.c

    Summary

    This module allows user-specific directories to be accessed using the http://example.com/~user/ syntax.

    top

    UserDir Directive

    Description:Location of the user-specific directories
    Syntax:UserDir directory-filename [directory-filename] ...
    Context:server config, virtual host
    Status:Base
    Module:mod_userdir

    The UserDir directive sets the real directory in a user's home directory to use when a request for a document for a user is received. Directory-filename is one of the following:

    • The name of a directory or a pattern such as those shown below.
    • The keyword disabled. This turns off all username-to-directory translations except those explicitly named with the enabled keyword (see below).
    • The keyword disabled followed by a space-delimited list of usernames. Usernames that appear in such a list will never have directory translation performed, even if they appear in an enabled clause.
    • The keyword enabled followed by a space-delimited list of usernames. These usernames will have directory translation performed even if a global disable is in effect, but not if they also appear in a disabled clause.

    If neither the enabled nor the disabled keywords appear in the Userdir directive, the argument is treated as a filename pattern, and is used to turn the name into a directory specification. A request for http://www.example.com/~bob/one/two.html will be translated to:

    UserDir directive used Translated path
    UserDir public_html ~bob/public_html/one/two.html
    UserDir /usr/web /usr/web/bob/one/two.html
    UserDir /home/*/www /home/bob/www/one/two.html

    The following directives will send redirects to the client:

    UserDir directive used Translated path
    UserDir http://www.example.com/users http://www.example.com/users/bob/one/two.html
    UserDir http://www.example.com/*/usr http://www.example.com/bob/usr/one/two.html
    UserDir http://www.example.com/~*/ http://www.example.com/~bob/one/two.html
    Be careful when using this directive; for instance, "UserDir ./" would map "/~root" to "/" - which is probably undesirable. It is strongly recommended that your configuration include a "UserDir disabled root" declaration. See also the Directory directive and the Security Tips page for more information.

    Additional examples:

    To allow a few users to have UserDir directories, but not anyone else, use the following:

    UserDir disabled
    UserDir enabled user1 user2 user3

    To allow most users to have UserDir directories, but deny this to a few, use the following:

    UserDir disabled user4 user5 user6

    It is also possible to specify alternative user directories. If you use a command like:

    UserDir "public_html" "/usr/web" "http://www.example.com/"

    With a request for http://www.example.com/~bob/one/two.html, will try to find the page at ~bob/public_html/one/two.html first, then /usr/web/bob/one/two.html, and finally it will send a redirect to http://www.example.com/bob/one/two.html.

    If you add a redirect, it must be the last alternative in the list. Apache httpd cannot determine if the redirect succeeded or not, so if you have the redirect earlier in the list, that will always be the alternative that is used.

    User directory substitution is not active by default in versions 2.1.4 and later. In earlier versions, UserDir public_html was assumed if no UserDir directive was present.

    Merging details

    Lists of specific enabled and disabled users are replaced, not merged, from global to virtual host scope

    See also

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_privileges.html0000644000000000000500000000034013362070302020107 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_privileges.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_privileges.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_actions.html.fr.utf80000644000000000000500000003251613412755316020716 0ustar rootsrc mod_actions - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_actions

    Langues Disponibles:  de  |  en  |  fr  |  ja  |  ko 

    Description:Exécution des scripts CGI en fonction du type de média ou de la méthode de requête.
    Statut:Base
    Identificateur de Module:actions_module
    Fichier Source:mod_actions.c

    Sommaire

    Ce module possède deux directives. La directive Action vous permet de lancer l'exécution de scripts CGI chaque fois qu'un fichier possédant un certain type de contenu MIME fait l'objet d'une requête. La directive Script vous permet de lancer l'exécution de scripts CGI chaque fois que la requête utilise une méthode particulière. Ceci facilite grandement l'exécution de scripts qui traitent des fichiers.

    top

    Directive Action

    Description:Active un script CGI pour un gestionnaire ou un type de contenu particulier
    Syntaxe:Action type d'action script cgi [virtual]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_actions
    Compatibilité:Le modificateur virtual et le passage de gestionnaire ont été introduits dans Apache 2.1

    Cette directive ajoute une action qui va activer script cgi lorsque type d'action est déclenché par la requête. script cgi est un chemin URL vers une ressource qui a été désignée comme script CGI à l'aide des directives ScriptAlias ou AddHandler. type d'action peut être soit un gestionnaire, soit un type de contenu MIME. L'URL et le chemin du document correspondant sont envoyés en utilisant les variables d'environnement CGI standards PATH_INFO et PATH_TRANSLATED. Le gestionnaire utilisé pour cette requête particulière est transmis à l'aide de la variable REDIRECT_HANDLER.

    Exemple : type MIME

    # Requests for files of a particular MIME content type:
    Action image/gif /cgi-bin/images.cgi

    Dans cet exemple, les requêtes pour des fichiers possédant le type de contenu MIME image/gif seront traitées par le script CGI /cgi-bin/images.cgi.

    Example: File extension

    # Files of a particular file extension
    AddHandler my-file-type .xyz
    Action my-file-type "/cgi-bin/program.cgi"

    Dans cet exemple, les requêtes pour des fichiers possédant l'extension .xyz seront traitées par le script CGI /cgi-bin/programme.cgi.

    Le modificateur optionnel virtual permet de désactiver la vérification de l'existence du fichier demandé. Ceci peut s'avérer utile, par exemple, si vous voulez utiliser la directive Action pour des localisations virtuelles.

    <Location "/news">
        SetHandler news-handler
        Action news-handler "/cgi-bin/news.cgi" virtual
    </Location>

    Voir aussi

    top

    Directive Script

    Description:Active un script CGI dans le cas d'une méthode de requête particulière.
    Syntaxe:Script méthode script cgi
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_actions

    Cette directive ajoute une action qui va activer script cgi lorsqu'un fichier est demandé en utilisant la méthode méthode. script cgi est le chemin URL d'une ressource qui a été désignée comme script CGI en utilisant les directives ScriptAlias ou AddHandler. L'URL et le chemin du document demandé sont envoyés en utilisant les variables d'environnement CGI standards PATH_INFO et PATH_TRANSLATED.

    Tous les noms de méthode peuvent être utilisés. Les noms de méthode sont sensibles à la casse, si bien que Script PUT et Script put ont des effets totalement différents.

    Notez que la commande Script ne définit que des actions par défaut. Si un script CGI est appelé, ou toute autre ressource capable de gérer la méthode de la requête en interne, il agira en conséquence. Notez aussi que Script avec une méthode GET ne sera appelé que si la requête possède des arguments (par exemple foo.html?hi). Dans le cas contraire, la requête sera traitée normalement.

    # All GET requests go here
    Script GET "/cgi-bin/search"
    
    # A CGI PUT handler
    Script PUT "/~bob/put.cgi"

    Langues Disponibles:  de  |  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_charset_lite.html.fr.utf80000644000000000000500000004105613412755316021723 0ustar rootsrc mod_charset_lite - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_charset_lite

    Langues Disponibles:  en  |  fr  |  ko 

    Description:Spécifie dans quel jeu de caractère doivent s'effectuer les traductions ou les réencodages
    Statut:Extension
    Identificateur de Module:charset_lite_module
    Fichier Source:mod_charset_lite.c

    Sommaire

    Le module mod_charset_lite permet au serveur de modifier le jeu de caractères des réponses avant de les envoyer aux clients. Dans un environnement EBCDIC, Apache traduit toujours les contenus au protocole HTTP (par exemples les en-têtes de réponses) de la page de code de la locale du processus Apache vers ISO-8859-1, mais pas le corps des réponses. Dans tous les environnements, on peut utiliser mod_charset_lite pour spécifier que les corps des réponses doivent être traduits. Par exemple, si les fichiers sont stockés sous forme EBCDIC, mod_charset_lite pourra les traduire en ISO-8859-1 avant de les envoyer au client.

    Ce module fournit quelques procédés de configuration implémentés par Apache version russe, ainsi que son module mod_charset associé.

    top

    Problèmes courants

    Noms de jeux de caractères non valides

    Les noms des jeux de caractères passés en paramètres aux directives CharsetSourceEnc et CharsetDefault doivent être reconnus par le mécanisme de traduction utilisé par APR sur le système où mod_charset_lite est utilisé. Ces noms de jeux de caractères ne sont pas standardisés, et sont en général différents des valeurs qui leur correspondent dans les en-têtes HTTP. Actuellement, APR ne peut utiliser que iconv(3) ; vous pouvez donc tester facilement vos noms de jeux de caractères en utilisant le programme iconv(1), de la manière suivante :

    iconv -f valeur-charsetsourceenc -t valeur-charsetdefault

    Incompatibilité entre le jeu de caractères du contenu et les règles de traduction

    Si les règles de traduction ne peuvent s'appliquer au contenu, la traduction peut échouer avec des conséquences diverses, comme :

    • Le mécanisme de traduction peut renvoyer un mauvais code de retour, et la connexion sera interrompue.
    • Le mécanisme de traduction peut insérer silencieusement des caractères spéciaux (par exemple des points d'interrogation) dans le tampon de sortie lorsqu'il n'est pas en mesure de traduire le tampon d'entrée.
    top

    Directive CharsetDefault

    Description:Jeu de caractère vers lequel la traduction doit s'effectuer
    Syntaxe:CharsetDefault jeu de caractères
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_charset_lite

    La directive CharsetDefault permet de spécifier le jeu de caractères vers lequel le contenu situé dans le conteneur associé devra être traduit.

    La valeur de l'argument jeu de caractères doit être un nom de jeu de caractères valide du point de vue du support des jeux de caractères dans APR. En général, cela implique qu'elle doit être reconnue par iconv.

    Exemple

    <Directory "/export/home/trawick/apacheinst/htdocs/convert">
        CharsetSourceEnc  UTF-16BE
        CharsetDefault    ISO-8859-1
    </Directory>
    Spécifier le même jeu de caractères pour les deux directives CharsetSourceEnc et CharsetDefault désactive la traduction. Le jeu de caractères ne doit pas forcément correspondre au jeu de caractères de la réponse, mais il doit être valide du point de vue du système.
    top

    Directive CharsetOptions

    Description:Précise les détails de la traduction du jeu de caractères
    Syntaxe:CharsetOptions option [option] ...
    Défaut:CharsetOptions ImplicitAdd
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_charset_lite

    La directive CharsetOptions permet de préciser certains détails du comportement du module mod_charset_lite. Option accepte les valeurs suivantes :

    ImplicitAdd | NoImplicitAdd
    Le mot-clé ImplicitAdd indique que mod_charset_lite doit insérer son filtre de manière implicite lorsque la configuration indique que le jeu de caractère du contenu doit être traduit. Si la chaîne de filtrage est configurée de manière explicite via la directive AddOutputFilter, l'option NoImplicitAdd doit être utilisée afin que mod_charset_lite n'ajoute pas son propre filtre.
    TranslateAllMimeTypes | NoTranslateAllMimeTypes
    Normalement, mod_charset_lite n'effectuera une traduction qu'en présence d'un petit nombre de types MIME parmi tous les types possibles. Lorsque l'option TranslateAllMimeTypes est utilisée pour une section de configuration donnée, la traduction est effectuée sans se préoccuper du type MIME.
    top

    Directive CharsetSourceEnc

    Description:Jeu de caractères source des fichiers
    Syntaxe:CharsetSourceEnc jeu de caractères
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_charset_lite

    La directive CharsetSourceEnc permet de spécifier un jeu de caractères source pour les fichiers situés dans le conteneur associé.

    La valeur de l'argument jeu de caractères doit être un nom de jeu de caractères valide du point de vue du support des jeux de caractères dans APR. En général, cela implique qu'elle doit être reconnue par iconv.

    Exemple

    <Directory "/export/home/trawick/apacheinst/htdocs/convert">
        CharsetSourceEnc  UTF-16BE
        CharsetDefault    ISO-8859-1
    </Directory>

    Les noms de jeux de caractères de cet exemple sont reconnus par le mécanisme de traduction d'iconv sous Solaris 8.

    Spécifier le même jeu de caractères pour les deux directives CharsetSourceEnc et CharsetDefault désactive la traduction. Le jeu de caractères ne doit pas forcément correspondre au jeu de caractères de la réponse, mais il doit être valide du point de vue du système.

    Langues Disponibles:  en  |  fr  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/quickreference.html.ja.utf80000644000000000000500000056273613523273316021407 0ustar rootsrc ディレクティブ クイックリファレンス - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    ディレクティブ クイックリファレンス

    翻訳済ã¿è¨€èªž:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    ディレクティブ クイックリファレンスã§ã¯ã€å„ Apache 設定ディレクティブ㮠使用方法ã€ãƒ‡ãƒ•ォルト値ã€ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã¨ã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆã‚’示ã—ã¦ã„ã¾ã™ã€‚ å„ディレクティブã®ã€ã‚ˆã‚Šè©³ã—ã„æƒ…å ±ã«é–¢ã—ã¦ã¯ ディレクティブ辞書を ã”覧下ã•ã„。

    第 1 列目ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®åå‰ã¨ä½¿ç”¨æ–¹æ³•ã§ã™ã€‚ 第 2 列目㯠(ã‚‚ã—ã‚れã°) デフォルト値ã¨ãªã£ã¦ã„ã¾ã™ã€‚ デフォルト値ãŒé•·ã™ãŽã¦è¡¨ç¤ºã—ãれãªã„å ´åˆã¯ã€é€”中ã¾ã§è¡¨ç¤ºã—ãŸä¸Šã§ã€ã€ 「 + ã€ã§ç¶šããŒã‚ã‚‹ã“ã¨ã‚’示ã—ã¦ã„ã¾ã™ã€‚

    第 3, 4 列ã¯ã€ä¸‹ã®è¡¨ã®æ³¨é‡ˆã«å¾“ã£ã¦ã€ ディレクティブã®ä½¿ç”¨ã§ãるコンテキストã¨ã€ ディレクティブã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ãŒç¤ºã•れã¦ã„ã¾ã™ã€‚

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 
    sサーãƒè¨­å®šãƒ•ァイル
    vãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    dディレクトリ
    h.htaccess
    CCore
    MMPM
    BBase
    EExtension
    XExperimental
    TExternal
    AcceptFilter protocol accept_filtersC
    プロトコルを Listen ã—ã¦ã„ã‚‹ã‚½ã‚±ãƒƒãƒˆã®æœ€é©åŒ–を設定ã™ã‚‹
    AcceptPathInfo On|Off|Default Default svdhC
    後ã«ç¶šããƒ‘ã‚¹åæƒ…報をå—ã‘付ã‘ã‚‹ãƒªã‚½ãƒ¼ã‚¹ã®æŒ‡å®š
    AccessFileName filename [filename] ... .htaccess svC
    分散設定ファイルã®åå‰
    Action action-type cgi-script [virtual]svdhB
    特定ã®ãƒãƒ³ãƒ‰ãƒ©ã‚„コンテントタイプã«å¯¾ã—㦠CGI を実行ã™ã‚‹ã‚ˆã†ã« 設定
    AddAlt string file [file] ...svdhB
    アイコンã®ä»£ã‚り㫠表示ã•れるã€ãƒ•ァイルåã§é¸æŠžã•れãŸä»£æ›¿ãƒ†ã‚­ã‚¹ãƒˆ
    AddAltByEncoding string MIME-encoding [MIME-encoding] ...svdhB
    アイコンã®ä»£ã‚りã«è¡¨ç¤ºã•れるã€MIME 符å·åŒ–方法ã§é¸æŠžã•れ㟠代替テキスト
    AddAltByType string MIME-type [MIME-type] ...svdhB
    アイコンã®ä»£ã‚り㫠表示ã•れるã€MIME タイプã§é¸æŠžã•れãŸä»£æ›¿ãƒ†ã‚­ã‚¹ãƒˆ
    AddCharset charset extension [extension] ...svdh
    ファイルåã®æ‹¡å¼µå­ã‚’指定ã•ã‚ŒãŸæ–‡å­—セットã«ãƒžãƒƒãƒ—ã™ã‚‹
    AddDefaultCharset On|Off|charset Off svdhC
    レスãƒãƒ³ã‚¹ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—㌠text/plain ã‚ã‚‹ã„㯠text/html ã®å ´åˆã«è¿½åŠ ã™ã‚‹ãƒ‡ãƒ•ォルト㮠charset パラメータ
    AddDescription string file [file] ...svdhB
    ファイルã«å¯¾ã—ã¦è¡¨ç¤ºã™ã‚‹èª¬æ˜Ž
    AddEncoding MIME-enc extension [extension] ...svdh
    ファイルåã®æ‹¡å¼µå­ã‚’指定ã•れãŸã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚° ã«ãƒžãƒƒãƒ—ã™ã‚‹
    AddHandler handler-name extension [extension] ...svdh
    ファイルåã®æ‹¡å¼µå­ã‚’指定ã•れãŸãƒãƒ³ãƒ‰ãƒ©ã«ãƒžãƒƒãƒ—ã™ã‚‹
    AddIcon icon name [name] ...svdhB
    ファイルã«è¡¨ç¤ºã™ã‚‹ã‚¢ã‚¤ã‚³ãƒ³ã‚’åå‰ã§é¸æŠž
    AddIconByEncoding icon MIME-encoding [MIME-encoding] ...svdhB
    ファイルã«è¡¨ç¤ºã™ã‚‹ã‚¢ã‚¤ã‚³ãƒ³ã‚’ MIME 符å·åŒ–方法ã§é¸æŠž
    AddIconByType icon MIME-type [MIME-type] ...svdhB
    ファイルã®éš£ã«è¡¨ç¤ºã™ã‚‹ã‚¢ã‚¤ã‚³ãƒ³ã‚’ MIME タイプã«ã‚ˆã£ã¦é¸æŠž
    AddInputFilter filter[;filter...] extension [extension] ...svdh
    ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã‚’クライアントã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’処ç†ã™ã‚‹ フィルタã«ãƒžãƒƒãƒ—ã™ã‚‹
    AddLanguage MIME-lang extension [extension] ...svdh
    ファイルåを指定ã•れãŸè¨€èªžã«ãƒžãƒƒãƒ—
    AddModuleInfo module-name stringsvE
    server-info ãƒãƒ³ãƒ‰ãƒ©ã«ã‚ˆã‚Šè¡¨ç¤ºã•ã‚Œã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æƒ…å ±ã« è¿½åŠ ã®æƒ…報を付ã‘加ãˆã‚‹
    AddOutputFilter filter[;filter...] extension [extension] ...svdh
    ファイルåã®æ‹¡å¼µå­ã‚’サーãƒã‹ã‚‰ã®å¿œç­”を処ç†ã™ã‚‹ãƒ•ィルタ㫠マップã™ã‚‹
    AddOutputFilterByType filter[;filter...] media-type [media-type] ...svdhB
    assigns an output filter to a particular media-type
    AddType MIME-type extension [extension] ...svdh
    ファイルåã®æ‹¡å¼µå­ã‚’指定ã•れãŸã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã«ãƒžãƒƒãƒ—
    Alias URL-path file-path|directory-pathsvB
    URL をファイルシステムã®ä½ç½®ã«ãƒžãƒƒãƒ—ã™ã‚‹
    AliasMatch regex file-path|directory-pathsvB
    æ­£è¦è¡¨ç¾ã‚’使ã£ã¦ URL をファイルシステムã®ä½ç½®ã«ãƒžãƒƒãƒ—ã™ã‚‹
    Allow from all|host|env=[!]env-variable [host|env=[!]env-variable] ...dhE
    サーãƒã®ã‚る領域ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãるホストを制御ã™ã‚‹
    AllowCONNECT port[-port] [port[-port]] ... 443 563 svE
    Ports that are allowed to CONNECT through the proxy
    AllowEncodedSlashes On|Off Off svC
    URL 中ã®ç¬¦å·åŒ–ã•れãŸãƒ‘ス分離文字ãŒå…ˆã«ä¼ãˆã‚‰ã‚Œã‚‹ã®ã‚’許å¯ã™ã‚‹ã‹ã©ã†ã‹ã‚’ 決定ã™ã‚‹
    AllowMethods reset|HTTP-method [HTTP-method]... reset dX
    Restrict access to the listed HTTP methods
    AllowOverride All|None|directive-type [directive-type] ... All dC
    .htaccess ã§è¨±å¯ã•れるディレクティブã®ç¨®é¡ž
    AllowOverrideList None|directive [directive-type] ... None dC
    Individual directives that are allowed in .htaccess files
    Anonymous user [user] ...dhE
    ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®æ¤œæŸ»ç„¡ã—ã§ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã™ã‚‹ userID を指定ã™ã‚‹
    Anonymous_LogEmail On|Off On dhE
    入力ã•れãŸãƒ‘スワードãŒã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã«ãƒ­ã‚®ãƒ³ã‚°ã•れるã‹ã©ã†ã‹ã‚’ 設定ã™ã‚‹
    Anonymous_MustGiveEmail On|Off On dhE
    空パスワードを許å¯ã™ã‚‹ã‹ã©ã†ã‹ã‚’指定ã™ã‚‹
    Anonymous_NoUserID On|Off Off dhE
    空 userID を許å¯ã™ã‚‹ã‹ã‚’指定ã™ã‚‹
    Anonymous_VerifyEmail On|Off Off dhE
    ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰æ¬„ãŒæ­£ã—ã„å½¢å¼ã®é›»å­ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã‚ã‚‹ã“ã¨ã‚’ 調ã¹ã‚‹ã‹ã©ã†ã‹ã‚’設定ã™ã‚‹
    AsyncRequestWorkerFactor factorsM
    Limit concurrent connections per process
    AuthBasicAuthoritative On|Off On dhB
    èªè¨¼ã¨æ‰¿èªã‚’ã€ã‚ˆã‚Šä½Žã„レベルã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ç§»è¡Œã•ã›ã‚‹ã‹ã‚’ 設定ã—ã¾ã™ã€‚
    AuthBasicFake off|username [password]dhB
    Fake basic authentication using the given expressions for username and password
    AuthBasicProvider provider-name [provider-name] ... file dhB
    ã“ã®ä½ç½®ã«å¯¾ã™ã‚‹èªè¨¼ãƒ—ロãƒã‚¤ãƒ€ã‚’設定ã—ã¾ã™ã€‚
    AuthBasicUseDigestAlgorithm MD5|Off Off dhB
    Check passwords against the authentication providers as if Digest Authentication was in force instead of Basic Authentication.
    AuthDBDUserPWQuery querydE
    SQL query to look up a password for a user
    AuthDBDUserRealmQuery querydE
    SQL query to look up a password hash for a user and realm.
    AuthDBMGroupFile file-pathdhE
    Sets the name of the database file containing the list of user groups for authorization
    AuthDBMType default|SDBM|GDBM|NDBM|DB default dhE
    パスワードをä¿å­˜ã™ã‚‹ãŸã‚ã«å¿…è¦ãªãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãƒ•ァイルã®ç¨®é¡žã‚’ 設定ã™ã‚‹
    AuthDBMUserFile file-pathdhE
    èªè¨¼ç”¨ã®ãƒ¦ãƒ¼ã‚¶ã¨ãƒ‘スワードã®ãƒªã‚¹ãƒˆã‚’ä¿æŒã—ã¦ã„ã‚‹ データベースファイルåを設定ã™ã‚‹
    AuthDigestAlgorithm MD5|MD5-sess MD5 dhE
    Selects the algorithm used to calculate the challenge and response hashes in digest authentication
    AuthDigestDomain URI [URI] ...dhE
    URIs that are in the same protection space for digest authentication
    AuthDigestNonceLifetime seconds 300 dhE
    How long the server nonce is valid
    AuthDigestProvider provider-name [provider-name] ... file dhE
    Sets the authentication provider(s) for this location
    AuthDigestQop none|auth|auth-int [auth|auth-int] auth dhE
    Determines the quality-of-protection to use in digest authentication
    AuthDigestShmemSize size 1000 sE
    The amount of shared memory to allocate for keeping track of clients
    AuthFormAuthoritative On|Off On dhB
    Sets whether authorization and authentication are passed to lower level modules
    AuthFormBody fieldnamedB
    The name of a form field carrying the body of the request to attempt on successful login
    AuthFormDisableNoStore On|Off Off dB
    Disable the CacheControl no-store header on the login page
    AuthFormFakeBasicAuth On|Off Off dB
    Fake a Basic Authentication header
    AuthFormLocation fieldnamedB
    The name of a form field carrying a URL to redirect to on successful login
    AuthFormLoginRequiredLocation urldB
    The URL of the page to be redirected to should login be required
    AuthFormLoginSuccessLocation urldB
    The URL of the page to be redirected to should login be successful
    AuthFormLogoutLocation uridB
    The URL to redirect to after a user has logged out
    AuthFormMethod fieldnamedB
    The name of a form field carrying the method of the request to attempt on successful login
    AuthFormMimetype fieldnamedB
    The name of a form field carrying the mimetype of the body of the request to attempt on successful login
    AuthFormPassword fieldnamedB
    The name of a form field carrying the login password
    AuthFormProvider provider-name [provider-name] ... file dhB
    Sets the authentication provider(s) for this location
    AuthFormSitePassphrase secretdB
    Bypass authentication checks for high traffic sites
    AuthFormSize sizedB
    The largest size of the form in bytes that will be parsed for the login details
    AuthFormUsername fieldnamedB
    The name of a form field carrying the login username
    AuthGroupFile file-pathdhB
    証èªã«ä½¿ç”¨ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ã‚°ãƒ«ãƒ¼ãƒ—ã®ä¸€è¦§ãŒæ ¼ç´ã•れã¦ã„る〠テキストファイルã®åå‰ã‚’設定ã™ã‚‹
    AuthLDAPAuthorizePrefix prefix AUTHORIZE_ dhE
    Specifies the prefix for environment variables set during authorization
    AuthLDAPBindAuthoritative off|on on dhE
    Determines if other authentication providers are used when a user can be mapped to a DN but the server cannot successfully bind with the user's credentials.
    AuthLDAPBindDN distinguished-namedhE
    Optional DN to use in binding to the LDAP server
    AuthLDAPBindPassword passworddhE
    Password used in conjunction with the bind DN
    AuthLDAPCharsetConfig file-pathsE
    Language to charset conversion configuration file
    AuthLDAPCompareAsUser on|off off dhE
    Use the authenticated user's credentials to perform authorization comparisons
    AuthLDAPCompareDNOnServer on|off on dhE
    Use the LDAP server to compare the DNs
    AuthLDAPDereferenceAliases never|searching|finding|always always dhE
    When will the module de-reference aliases
    AuthLDAPGroupAttribute attribute member uniqueMember +dhE
    LDAP attributes used to identify the user members of groups.
    AuthLDAPGroupAttributeIsDN on|off on dhE
    Use the DN of the client username when checking for group membership
    AuthLDAPInitialBindAsUser off|on off dhE
    Determines if the server does the initial DN lookup using the basic authentication users' own username, instead of anonymously or with hard-coded credentials for the server
    AuthLDAPInitialBindPattern regex substitution (.*) $1 (remote use +dhE
    Specifies the transformation of the basic authentication username to be used when binding to the LDAP server to perform a DN lookup
    AuthLDAPMaxSubGroupDepth Number 10 dhE
    Specifies the maximum sub-group nesting depth that will be evaluated before the user search is discontinued.
    AuthLDAPRemoteUserAttribute uiddhE
    Use the value of the attribute returned during the user query to set the REMOTE_USER environment variable
    AuthLDAPRemoteUserIsDN on|off off dhE
    Use the DN of the client username to set the REMOTE_USER environment variable
    AuthLDAPSearchAsUser on|off off dhE
    Use the authenticated user's credentials to perform authorization searches
    AuthLDAPSubGroupAttribute attribute member uniqueMember +dhE
    Specifies the attribute labels, one value per directive line, used to distinguish the members of the current group that are groups.
    AuthLDAPSubGroupClass LdapObjectClass groupOfNames groupO +dhE
    Specifies which LDAP objectClass values identify directory objects that are groups during sub-group processing.
    AuthLDAPURL url [NONE|SSL|TLS|STARTTLS]dhE
    URL specifying the LDAP search parameters
    AuthMerging Off | And | Or Off dhB
    Controls the manner in which each configuration section's authorization logic is combined with that of preceding configuration sections.
    AuthName auth-domaindhB
    Authorization realm for use in HTTP authentication
    AuthnCacheContext directory|server|custom-stringdB
    Specify a context string for use in the cache key
    AuthnCacheEnablesB
    Enable Authn caching configured anywhere
    AuthnCacheProvideFor authn-provider [...]dhB
    Specify which authn provider(s) to cache for
    AuthnCacheSOCache provider-name[:provider-args]sB
    Select socache backend provider to use
    AuthnCacheTimeout timeout (seconds)dhB
    Set a timeout for cache entries
    <AuthnProviderAlias baseProvider Alias> ... </AuthnProviderAlias>sB
    Enclose a group of directives that represent an extension of a base authentication provider and referenced by the specified alias
    AuthnzFcgiCheckAuthnProvider provider-name|None option ...dE
    Enables a FastCGI application to handle the check_authn authentication hook.
    AuthnzFcgiDefineProvider type provider-name backend-addresssE
    Defines a FastCGI application as a provider for authentication and/or authorization
    AuthType None|Basic|Digest|FormdhB
    Type of user authentication
    AuthUserFile file-pathdhB
    èªè¨¼ã«ä½¿ç”¨ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ã¨ãƒ‘スワードã®ä¸€è¦§ãŒæ ¼ç´ã•れã¦ã„る〠テキストファイルã®åå‰ã‚’設定ã™ã‚‹
    AuthzDBDLoginToReferer On|Off Off dE
    Determines whether to redirect the Client to the Referring page on successful login or logout if a Referer request header is present
    AuthzDBDQuery querydE
    Specify the SQL Query for the required operation
    AuthzDBDRedirectQuery querydE
    Specify a query to look up a login page for the user
    AuthzDBMType default|SDBM|GDBM|NDBM|DB default dhE
    Sets the type of database file that is used to store list of user groups
    <AuthzProviderAlias baseProvider Alias Require-Parameters> ... </AuthzProviderAlias> sB
    Enclose a group of directives that represent an extension of a base authorization provider and referenced by the specified alias
    AuthzSendForbiddenOnFailure On|Off Off dhB
    Send '403 FORBIDDEN' instead of '401 UNAUTHORIZED' if authentication succeeds but authorization fails
    BalancerGrowth # 5 svE
    Number of additional Balancers that can be added Post-configuration
    BalancerInherit On|Off On svE
    Inherit ProxyPassed Balancers/Workers from the main server
    dE
    Add a member to a load balancing group
    BalancerPersist On|Off Off svE
    Attempt to persist changes made by the Balancer Manager across restarts.
    BrotliAlterETag AddSuffix|NoChange|Remove AddSuffix svE
    How the outgoing ETag header should be modified during compression
    BrotliCompressionMaxInputBlock valuesvE
    Maximum input block size
    BrotliCompressionQuality value 5 svE
    Compression quality
    BrotliCompressionWindow value 18 svE
    Brotli sliding compression window size
    BrotliFilterNote [type] notenamesvE
    Places the compression ratio in a note for logging
    BrowserMatch regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    HTTP User-Agent ã«åŸºã¥ã„ã¦ç’°å¢ƒå¤‰æ•°ã‚’設定ã™ã‚‹
    BrowserMatchNoCase regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    HTTP User-Agent ã«åŸºã¥ã„ã¦å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã« 環境変数を設定ã™ã‚‹
    BufferedLogs On|Off Off sB
    ãƒ‡ã‚£ã‚¹ã‚¯ã«æ›¸ã出ã™å‰ã«ãƒ¡ãƒ¢ãƒªã«ãƒ­ã‚°ã‚¨ãƒ³ãƒˆãƒªã‚’ãƒãƒƒãƒ•ã‚¡ã™ã‚‹
    BufferSize integer 131072 svdhE
    Maximum size in bytes to buffer by the buffer filter
    CacheDefaultExpire seconds 3600 (1時間) svE
    æœŸæ—¥ãŒæŒ‡å®šã•れã¦ã„ãªã„ã¨ãã«ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’キャッシュã™ã‚‹ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®æœŸé–“
    CacheDetailHeader on|off off svdhE
    Add an X-Cache-Detail header to the response.
    CacheDirLength length 2 svE
    サブディレクトリåã®æ–‡å­—æ•°
    CacheDirLevels levels 2 svE
    キャッシュã®ã‚µãƒ–ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®æ·±ã•ã®æ•°
    CacheDisable url-stringsvE
    特定㮠URL をキャッシュã—ãªã„
    CacheEnable cache_type url-stringsvE
    指定ã—ãŸã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ç®¡ç†æ–¹å¼ã‚’使ã£ã¦ã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’有効ã«ã™ã‚‹
    CacheFile file-path [file-path] ...sX
    Cache a list of file handles at startup time
    CacheHeader on|off off svdhE
    Add an X-Cache header to the response.
    CacheIgnoreCacheControl On|Off Off svE
    キャッシュã•れã¦ã„るコンテンツを返ã•ãªã„よã†ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ リクエストã•れã¦ã‚‚無視ã™ã‚‹
    CacheIgnoreHeaders header-string [header-string] ... None svE
    指定ã•れ㟠HTTP ヘッダをキャッシュã«ä¿å­˜ã—ãªã„。
    CacheIgnoreNoLastMod On|Off Off svE
    応答㫠Last Modified ãŒç„¡ãã¦ã‚‚æ°—ã«ã—ãªã„よã†ã«ã™ã‚‹
    CacheIgnoreQueryString On|Off Off svE
    キャッシュ時ã«ã‚¯ã‚¨ãƒªãƒ¼ã‚¹ãƒˆãƒªãƒ³ã‚°ã‚’無視ã™ã‚‹
    CacheIgnoreURLSessionIdentifiers identifier [identifier] ... None svE
    Ignore defined session identifiers encoded in the URL when caching
    CacheKeyBaseURL URLsvE
    Override the base URL of reverse proxied cache keys.
    CacheLastModifiedFactor float 0.1 svE
    LastModified ã®æ—¥ä»˜ã«åŸºã¥ã„ã¦æœ‰åŠ¹æœŸé™ (expiry) を計算ã™ã‚‹ãŸã‚ã®é‡ã¿ã‚’指定ã™ã‚‹
    CacheLock on|off off svE
    Enable the thundering herd lock.
    CacheLockMaxAge integer 5 svE
    Set the maximum possible age of a cache lock.
    CacheLockPath directory /tmp/mod_cache-lock +svE
    Set the lock path directory.
    CacheMaxExpire seconds 86400 (一日) svE
    ドキュメントをキャッシュã™ã‚‹æœ€å¤§æ™‚é–“ã‚’ç§’æ•°ã§è¡¨ã—ãŸã‚‚ã®
    CacheMaxFileSize bytes 1000000 svE
    キャッシュã«ä¿ç®¡ã•ã‚Œã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®æœ€å¤§ã® (ãƒã‚¤ãƒˆã§ã®) サイズ
    CacheMinExpire seconds 0 svE
    ドキュメントをキャッシュã™ã‚‹æœ€å°ç§’æ•°
    CacheMinFileSize bytes 1 svE
    キャッシュã«ä¿ç®¡ã•ã‚Œã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®æœ€å°é™ã® (ãƒã‚¤ãƒˆã§ã®) 大ãã•
    CacheNegotiatedDocs On|Off Off svB
    コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã•れãŸãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’プロキシサーãƒãŒ キャッシュã§ãるよã†ã«ã™ã‚‹
    CacheQuickHandler on|off on svE
    Run the cache from the quick handler.
    svdhE
    The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    svdhE
    The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    CacheRoot directorysvE
    キャッシュファイルãŒä¿ç®¡ã•れるルートディレクトリ
    CacheSocache type[:args]svE
    The shared object cache implementation to use
    CacheSocacheMaxSize bytes 102400 svdhE
    The maximum size (in bytes) of an entry to be placed in the cache
    CacheSocacheMaxTime seconds 86400 svdhE
    The maximum time (in seconds) for a document to be placed in the cache
    CacheSocacheMinTime seconds 600 svdhE
    The minimum time (in seconds) for a document to be placed in the cache
    CacheSocacheReadSize bytes 0 svdhE
    The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    CacheSocacheReadTime milliseconds 0 svdhE
    The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    CacheStaleOnError on|off on svdhE
    Serve stale content in place of 5xx responses.
    CacheStoreExpired On|Off Off svdhE
    Attempt to cache responses that the server reports as expired
    CacheStoreNoStore On|Off Off svE
    no-store ã¨æŒ‡å®šã•れã¦ã„るレスãƒãƒ³ã‚¹ã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’試ã¿ã‚‹ã€‚
    CacheStorePrivate On|Off Off svE
    private ã¨æŒ‡å®šã•れã¦ã„るレスãƒãƒ³ã‚¹ã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’試ã¿ã‚‹ã€‚
    CGIDScriptTimeout time[s|ms]svdhB
    The length of time to wait for more output from the CGI program
    CGIMapExtension cgi-path .extensiondhC
    CGI スクリプトã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ—リタã®ä½ç½®ã‚’調ã¹ã‚‹ãŸã‚ã®æ‰‹æ³•
    CGIPassAuth On|Off Off dhC
    Enables passing HTTP authorization headers to scripts as CGI variables
    CGIVar variable ruledhC
    Controls how some CGI variables are set
    CharsetDefault charsetsvdhE
    Charset to translate into
    CharsetOptions option [option] ... ImplicitAdd svdhE
    Configures charset translation behavior
    CharsetSourceEnc charsetsvdhE
    Source charset of files
    CheckCaseOnly on|off Off svdhE
    å¤§æ–‡å­—å°æ–‡å­—ã®ä¿®æ­£ã ã‘行ã†ã‚ˆã†ã«ã™ã‚‹
    CheckSpelling on|off Off svdhE
    spelling モジュールを使用ã™ã‚‹ã‚ˆã†ã«ã™ã‚‹
    ChrootDir /path/to/directorysB
    Directory for apache to run chroot(8) after startup.
    ContentDigest On|Off Off svdhC
    Content-MD5 HTTP 応答ヘッダã®ç”Ÿæˆã‚’有効ã«ã™ã‚‹
    CookieDomain domainsvdhE
    The domain to which the tracking cookie applies
    CookieExpires expiry-periodsvdhE
    Expiry time for the tracking cookie
    CookieName token Apache svdhE
    Name of the tracking cookie
    CookieStyle Netscape|Cookie|Cookie2|RFC2109|RFC2965 Netscape svdhE
    Format of the cookie header field
    CookieTracking on|off off svdhE
    Enables tracking cookie
    CoreDumpDirectory directorysM
    Apache ãŒã‚³ã‚¢ãƒ€ãƒ³ãƒ—ã™ã‚‹å‰ã«ç§»å‹•を試ã¿ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒª
    CustomLog file|pipe format|nickname [env=[!]environment-variable]svB
    ログファイルã®åå‰ã¨æ›¸å¼ã‚’設定ã™ã‚‹
    Dav On|Off|provider-name Off dE
    WebDAV HTTP メソッドを有効ã«ã—ã¾ã™
    DavDepthInfinity on|off off svdE
    PROPFIND, Depth: Infinity リクエストを許å¯ã—ã¾ã™
    DavGenericLockDB file-pathsvdE
    DAV ロックデータベースã®å ´æ‰€
    DavLockDB file-pathsvE
    DAV ロックデータベースã®ä½ç½®
    DavMinTimeout seconds 0 svdE
    サーãƒãŒ DAV リソースã®ãƒ­ãƒƒã‚¯ã‚’ç¶­æŒã™ã‚‹æœ€å°æ™‚é–“ã§ã™ã€‚
    DBDExptime time-in-seconds 300 svE
    Keepalive time for idle connections
    DBDInitSQL "SQL statement"svE
    Execute an SQL statement after connecting to a database
    DBDKeep number 2 svE
    Maximum sustained number of connections
    DBDMax number 10 svE
    Maximum number of connections
    DBDMin number 1 svE
    Minimum number of connections
    DBDParams param1=value1[,param2=value2]svE
    Parameters for database connection
    DBDPersist On|OffsvE
    Whether to use persistent connections
    DBDPrepareSQL "SQL statement" labelsvE
    Define an SQL prepared statement
    DBDriver namesvE
    Specify an SQL driver
    DefaultIcon url-pathsvdhB
    特定ã®ã‚¢ã‚¤ã‚³ãƒ³ãŒä½•も設定ã•れã¦ã„ãªã„時㫠ファイルã«è¡¨ç¤ºã™ã‚‹ã‚¢ã‚¤ã‚³ãƒ³
    DefaultLanguage MIME-langsvdh
    ã‚るスコープã®ã™ã¹ã¦ã®ãƒ•ァイルを指定ã•れãŸè¨€èªžã« 設定ã™ã‚‹
    DefaultRuntimeDir directory-path DEFAULT_REL_RUNTIME +sC
    Base directory for the server run-time files
    DefaultType MIME-type|none text/plain svdhC
    サーãƒãŒã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—を決定ã§ããªã„ã¨ãã« é€ã‚‰ã‚Œã‚‹ MIME コンテントタイプ
    Define parameter-namesC
    変数ã®å­˜åœ¨ã‚’宣言ã™ã‚‹
    DeflateBufferSize value 8096 svE
    zlib ãŒä¸€åº¦ã«åœ§ç¸®ã™ã‚‹å¡Šã®å¤§ãã•
    DeflateCompressionLevel valuesvE
    出力ã«å¯¾ã—ã¦è¡Œãªã†åœ§ç¸®ã®ç¨‹åº¦
    DeflateFilterNote [type] notenamesvE
    ロギング用ã«åœ§ç¸®æ¯”をメモã«è¿½åŠ 
    DeflateInflateLimitRequestBody valuesvdhE
    Maximum size of inflated request bodies
    DeflateInflateRatioBurst value 3 svdhE
    Maximum number of times the inflation ratio for request bodies can be crossed
    DeflateInflateRatioLimit value 200 svdhE
    Maximum inflation ratio for request bodies
    DeflateMemLevel value 9 svE
    zlib ãŒåœ§ç¸®ã«ä½¿ã†ãƒ¡ãƒ¢ãƒªã®ãƒ¬ãƒ™ãƒ«ã‚’指定
    DeflateWindowSize value 15 svE
    Zlib ã®åœ§ç¸®ç”¨ã‚¦ã‚£ãƒ³ãƒ‰ã‚¦ã®å¤§ãã•
    Deny from all|host|env=[!]env-variable [host|env=[!]env-variable] ...dhE
    サーãƒãŒã‚¢ã‚¯ã‚»ã‚¹ã‚’æ‹’å¦ã™ã‚‹ãƒ›ã‚¹ãƒˆã‚’制御ã™ã‚‹
    <Directory directory-path> ... </Directory>svC
    指定ã®ãƒ•ァイルシステムã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¨ã‚µãƒ–ディレクトリã¨ã®ã¿ã« é©ç”¨ã•れるディレクティブを囲む
    DirectoryCheckHandler On|Off Off svdhB
    Toggle how this module responds when another handler is configured
    DirectoryIndex local-url [local-url] ... index.html svdhB
    クライアントãŒãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’リクエストã—ãŸã¨ãã«èª¿ã¹ã‚‹ リソースã®ãƒªã‚¹ãƒˆ
    DirectoryIndexRedirect on | off | permanent | temp | seeother | 3xx-code off svdhB
    Configures an external redirect for directory indexes.
    <DirectoryMatch regex> ... </DirectoryMatch>svC
    æ­£è¦è¡¨ç¾ã«ãƒžãƒƒãƒã™ã‚‹ãƒ•ァイルシステムã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¨ サブディレクトリã¨ã®ã¿ã«é©ç”¨ã•れるディレクティブを囲む
    DirectorySlash On|Off On svdhB
    パス末尾ã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã™ã‚‹ã‹ã©ã†ã‹ã®ã‚ªãƒ³ã‚ªãƒ•をトグルã•ã›ã‚‹
    DocumentRoot directory-path /usr/local/apache/h +svC
    ウェブã‹ã‚‰è¦‹ãˆã‚‹ãƒ¡ã‚¤ãƒ³ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ„リーã«ãªã‚‹ ディレクトリ
    DTracePrivileges On|Off Off sX
    Determines whether the privileges required by dtrace are enabled.
    DumpIOInput On|Off Off sE
    エラーログã«ã™ã¹ã¦ã®å…¥åŠ›ãƒ‡ãƒ¼ã‚¿ã‚’ãƒ€ãƒ³ãƒ—
    DumpIOOutput On|Off Off sE
    エラーログã«ã™ã¹ã¦ã®å‡ºåŠ›ãƒ‡ãƒ¼ã‚¿ã‚’ãƒ€ãƒ³ãƒ—
    <Else> ... </Else>svdhC
    Contains directives that apply only if the condition of a previous <If> or <ElseIf> section is not satisfied by a request at runtime
    <ElseIf expression> ... </ElseIf>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime while the condition of a previous <If> or <ElseIf> section is not satisfied
    EnableExceptionHook On|Off Off sM
    クラッシュã®å¾Œã«ä¾‹å¤–ãƒãƒ³ãƒ‰ãƒ©ã‚’実行ã™ã‚‹ãƒ•ックを有効ã«ã™ã‚‹
    EnableMMAP On|Off On svdhC
    é…é€ä¸­ã«ãƒ•ァイルを読ã¿è¾¼ã‚€ãŸã‚ã«ãƒ¡ãƒ¢ãƒªãƒžãƒƒãƒ”ングを 使ã†ã‹ã©ã†ã‹
    EnableSendfile On|Off On svdhC
    ファイルã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¸ã®é…逿™‚ã«ã‚«ãƒ¼ãƒãƒ«ã® sendfile サãƒãƒ¼ãƒˆã‚’ 使ã†ã‹ã©ã†ã‹
    Error messagesvdhC
    Abort configuration parsing with a custom error message
    ErrorDocument error-code documentsvdhC
    エラーãŒç™ºç”Ÿã—ãŸã¨ãã«ã‚µãƒ¼ãƒãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚‹ã‚‚ã®
    ErrorLog file-path|syslog[:facility] logs/error_log (Uni +svC
    サーãƒãŒã‚¨ãƒ©ãƒ¼ã‚’ログåŽé›†ã™ã‚‹å ´æ‰€
    ErrorLogFormat [connection|request] formatsvC
    Format specification for error log entries
    ExamplesvdhX
    Demonstration directive to illustrate the Apache module API
    ExpiresActive On|OffsvdhE
    Expires ヘッダã®ç”Ÿæˆã‚’有効ã«ã™ã‚‹
    ExpiresByType MIME-type <code>secondssvdhE
    MIME タイプã«ã‚ˆã£ã¦è¨­å®šã•れる Expires ヘッダã®å€¤
    ExpiresDefault <code>secondssvdhE
    期é™åˆ‡ã‚ŒæœŸæ—¥ã‚’計算ã™ã‚‹ãƒ‡ãƒ•ォルトアルゴリズム
    ExtendedStatus On|Off Off[*] sC
    Keep track of extended status information for each request
    ExtFilterDefine filtername parameterssE
    外部フィルタを定義
    ExtFilterOptions option [option] ... DebugLevel=0 NoLogS +dE
    mod_ext_filter ã®ã‚ªãƒ—ションを設定
    svdhB
    Define a default URL for requests that don't map to a file
    FileETag component ... INode MTime Size svdhC
    ETag HTTP 応答ヘッダを作æˆã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã•れる ファイルã®å±žæ€§
    <Files filename> ... </Files>svdhC
    マッãƒã™ã‚‹ãƒ•ァイルåã«é©ç”¨ã•れるディレクティブを囲む
    <FilesMatch regex> ... </FilesMatch>svdhC
    æ­£è¦è¡¨ç¾ã«ãƒžãƒƒãƒã™ã‚‹ãƒ•ァイルåã«é©ç”¨ã•れる ディレクティブを囲む
    FilterChain [+=-@!]filter-name ...svdhB
    Configure the filter chain
    FilterDeclare filter-name [type]svdhB
    Declare a smart filter
    FilterProtocol filter-name [provider-name] proto-flagssvdhB
    Deal with correct HTTP protocol handling
    FilterProvider filter-name provider-name expressionsvdhB
    Register a content filter
    FilterTrace filter-name levelsvdB
    Get debug/diagnostic information from mod_filter
    ForceLanguagePriority None|Prefer|Fallback [Prefer|Fallback] Prefer svdhB
    è¦æ±‚ã«åˆã†å˜ç‹¬ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãŒè¦‹ã¤ã‹ã‚‰ãªã‹ã£ãŸã¨ãã«è¡Œãªã†ã“ã¨ã‚’指定
    ForceType MIME-type|NonedhC
    ã™ã¹ã¦ã®ãƒžãƒƒãƒã™ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ãŒæŒ‡å®šã® MIME コンテントタイプ㧠é€ã‚‰ã‚Œã‚‹ã‚ˆã†ã«ã™ã‚‹
    ForensicLog filename|pipesvE
    Forensic ログã®ãƒ•ァイルåを設定ã™ã‚‹
    GlobalLogfile|pipe format|nickname [env=[!]environment-variable| expr=expression]sB
    Sets filename and format of log file
    GprofDir /tmp/gprof/|/tmp/gprof/%svC
    Directory to write gmon.out profiling data to.
    GracefulShutDownTimeout secondssM
    ç©ã‚„ã‹ãªåœæ­¢ã‚’ã‹ã‘ãŸå¾Œã€çµ‚了ã™ã‚‹ã¾ã§å¾…ã¤æ™‚é–“
    Group unix-group #-1 sB
    Group under which the server will answer requests
    H2CopyFiles on|off off svdhE
    Determine file handling in responses
    H2Direct on|off on for h2c, off for +svE
    H2 Direct Protocol Switch
    H2EarlyHints on|off off svE
    Determine sending of 103 status codes
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] set|append|add|unset|echo header [value] [early|env=[!]variable]svdhE
    HTTP 応答ヘッダã®è¨­å®š
    HeaderName filenamesvdhB
    インデックス一覧ã®å…ˆé ­ã«æŒ¿å…¥ã•れるファイルã®åå‰
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending heartbeat requests to this server
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    クライアント㮠IP アドレス㮠DNS ルックアップを 有効ã«ã™ã‚‹
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    リモートユーザ㮠RFC 1413 ã«ã‚ˆã‚‹ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®ãƒ­ã‚®ãƒ³ã‚°ã‚’ 有効ã«ã™ã‚‹
    IdentityCheckTimeout seconds 30 svdE
    Ident リクエストãŒã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã™ã‚‹ã¾ã§ã®æœŸé–“を決ã‚ã‚‹
    <If expression> ... </If>svdhC
    実行時ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæ¡ä»¶ã‚’満ãŸã—ãŸå ´åˆã«ã®ã¿é©ç”¨ã•れる ディレクティブを包å«ã™ã‚‹
    <IfDefine [!]parameter-name> ... </IfDefine>svdhC
    起動時ã«ãƒ†ã‚¹ãƒˆãŒçœŸã§ã‚ã‚‹ã¨ãã®ã¿ã«å‡¦ç†ã•れるディレクティブを 囲む
    <IfDirective [!]directive-name> ... </IfDirective>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific directive
    <IfFile [!]filename> ... </IfFile>svdhC
    Encloses directives that will be processed only if file exists at startup
    <IfModule [!]module-file|module-identifier> ... </IfModule>svdhC
    モジュールã®å­˜åœ¨ã™ã‚‹ã‹ã—ãªã„ã‹ã«å¿œã˜ã¦å‡¦ç†ã•れる ディレクティブを囲む
    <IfSection [!]section-name> ... </IfSection>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific section directive
    <IfVersion [[!]operator] version> ... </IfVersion>svdhE
    ãƒãƒ¼ã‚¸ãƒ§ãƒ³ä¾å­˜ã®è¨­å®šã‚’入れる
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates that are not explicitly mapped
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling an imagemap
    Include file-path|directory-pathsvdC
    サーãƒè¨­å®šãƒ•ァイル中ã‹ã‚‰ä»–ã®è¨­å®šãƒ•ァイルをå–り込む
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IndexHeadInsert "markup ..."svdhB
    インデックスページ㮠HEAD セクションã«ãƒ†ã‚­ã‚¹ãƒˆã‚’挿入ã™ã‚‹
    IndexIgnore file [file] ...svdhB
    ディレクトリ一覧を行ãªã†éš›ã«ç„¡è¦–ã™ã¹ã ファイルリストã«è¿½åŠ 
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing a directory
    IndexOptions [+|-]option [[+|-]option] ...svdhB
    ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ã®æ§˜ã€…ãªè¨­å®šé …ç›®
    IndexOrderDefault Ascending|Descending Name|Date|Size|Description Ascending Name svdhB
    ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ã®æ¨™æº–ã®é †ç•ªä»˜ã‘を設定
    IndexStyleSheet url-pathsvdhB
    ディレクトリインデックス㫠CSS スタイルシートを追加ã™ã‚‹
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field
    ISAPICacheFile file-path [file-path] ...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI extensions
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI extensions
    KeepAlive On|Off On svC
    HTTP ã®æŒç¶šçš„ãªæŽ¥ç¶šã‚’æœ‰åŠ¹ã«ã™ã‚‹
    KeepAliveTimeout seconds 5 svC
    æŒç¶šçš„ãªæŽ¥ç¶šã§æ¬¡ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæ¥ã‚‹ã¾ã§ã‚µãƒ¼ãƒãŒå¾…ã¤æ™‚é–“
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to the specified maximum size, for potential use by filters such as mod_include.
    LanguagePriority MIME-lang [MIME-lang] ...svdhB
    クライアントãŒå„ªå…ˆåº¦ã‚’示ã•ãªã‹ã£ãŸã¨ãã®è¨€èªžã® variant ã®å„ªå…ˆåº¦ã‚’ 指定
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare operations
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain valid
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted Certificate Authority or global client certificates
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... </Limit>svdhC
    囲ã„ã®ä¸­ã«ã‚るアクセス制御ã®é©ç”¨ã‚’特定㮠HTTP メソッドã®ã¿ã« 制é™ã™ã‚‹
    <LimitExcept method [method] ... > ... </LimitExcept>svdhC
    指定ã•れãŸã‚‚ã®ä»¥å¤–ã® HTTP メソッドã«ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã‚’ 制é™ã™ã‚‹
    LimitInternalRecursion number [number] 10 svC
    内部リダイレクトã¨å…¥ã‚Œå­ã«ãªã£ãŸã‚µãƒ–ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æœ€å¤§æ•°ã‚’決定ã™ã‚‹
    LimitRequestBody bytes 0 svdhC
    クライアントã‹ã‚‰é€ã‚‰ã‚Œã‚‹ HTTP リクエストã®ãƒœãƒ‡ã‚£ã® ç·é‡ã‚’制é™ã™ã‚‹
    LimitRequestFields number 100 sC
    クライアントã‹ã‚‰ã® HTTP リクエストã®ãƒ˜ãƒƒãƒ€ãƒ•ã‚£ãƒ¼ãƒ«ãƒ‰ã®æ•°ã‚’ 制é™ã™ã‚‹
    LimitRequestFieldSize bytes 8190 sC
    クライアントã‹ã‚‰ã® HTTP リクエストã®ãƒ˜ãƒƒãƒ€ã® サイズを制é™ã™ã‚‹
    LimitRequestLine bytes 8190 sC
    クライアントã‹ã‚‰ã® HTTP リクエスト行ã®ã‚µã‚¤ã‚ºã‚’制é™ã™ã‚‹
    LimitXMLRequestBody bytes 1000000 svdhC
    XML å½¢å¼ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒœãƒ‡ã‚£ã®ã‚µã‚¤ã‚ºã‚’制é™ã™ã‚‹
    Listen [IP-address:]portnumber [protocol]sM
    サーãƒãŒ listen ã™ã‚‹IP アドレスã¨ãƒãƒ¼ãƒˆç•ªå·
    ListenBacklog backlogsM
    ä¿ç•™çŠ¶æ…‹ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã®ã‚­ãƒ¥ãƒ¼ã®æœ€å¤§é•·
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of listeners' buckets
    LoadFile filename [filename] ...svE
    指定ã•れãŸã‚ªãƒ–ジェクトファイルやライブラリをリンクã™ã‚‹
    LoadModule module filenamesvE
    オブジェクトファイルやライブラリをリンクã—ã€ä½¿ç”¨ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã® リストã«è¿½åŠ ã™ã‚‹
    <Location URL-path|URL> ... </Location>svC
    囲んã ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–をマッãƒã™ã‚‹ URL ã®ã¿ã«é©ç”¨
    <LocationMatch regex> ... </LocationMatch>svC
    囲んã ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’æ­£è¦è¡¨ç¾ã«ãƒžãƒƒãƒã™ã‚‹ URL ã®ã¿ã« é©ç”¨
    LogFormat format|nickname [nickname] "%h %l %u %t \"%r\" +svB
    ログファイルã§ä½¿ç”¨ã™ã‚‹æ›¸å¼ã‚’設定ã™ã‚‹
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel level warn svC
    ErrorLog ã®å†—長性を制御ã™ã‚‹
    LogMessage message [hook=hook] [expr=expression] dX
    Log user-defined message to error log
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    <Macro name [par1 .. parN]> ... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server will handle during its life
    MaxKeepAliveRequests number 100 svC
    æŒç¶šçš„ãªæŽ¥ç¶šä¸Šã§è¨±å¯ã•ã‚Œã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æ•°
    MaxMemFree KBytes 0 sM
    free() ãŒå‘¼ã°ã‚Œãªã„é™ã‚Šã€ 主メモリアロケータãŒä¿æŒã—ç¶šã‘ã‚‰ã‚Œã‚‹ãƒ¡ãƒ¢ãƒªã®æœ€å¤§é‡
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete resource
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed simultaneously
    MaxSpareServers number 10 sM
    アイドルãªå­ã‚µãƒ¼ãƒãƒ—ãƒ­ã‚»ã‚¹ã®æœ€å¤§å€‹æ•°
    MaxSpareThreads numbersM
    ã‚¢ã‚¤ãƒ‰ãƒ«ã‚¹ãƒ¬ãƒƒãƒ‰ã®æœ€å¤§æ•°
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDBaseServer on|off off sE
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sE
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsE
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url https://acme-v02.ap +sE
    The URL of the ACME Certificate Authority service.
    MDCertificateFile path-to-pem-filesE
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesE
    Specify a static private key for for the static cerrtificate.
    MDCertificateProtocol protocol ACME sE
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sE
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsE
    -
    MDDriveMode always|auto|manual auto sE
    former name of MDRenewMode.
    MDHttpProxy urlsE
    Define a proxy for outgoing connections.
    MDMember hostnamesE
    Additional hostname for the managed domain.
    MDMembers auto|manual auto sE
    Control if the alias domain names are automatically added.
    MDMessageCmd path-to-cmd optional-argssE
    Handle events for Manage Domains
    MDMustStaple on|off off sE
    Control if new certificates carry the OCSP Must Staple flag.
    MDNotifyCmd path [ args ]sE
    Run a program when a Managed Domain is ready.
    MDomain dns-name [ other-dns-name... ] [auto|manual]sE
    Define list of domain names that belong to one group.
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sE
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sE
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sE
    Set type and size of the private keys generated.
    MDRenewMode always|auto|manual auto sE
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sE
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sE
    Redirects http: traffic to https: for Managed Domains.
    MDServerStatus on|off on sE
    Control if Managed Domain information is added to server-status.
    MDStoreDir path md sE
    Path on the local file system to store the Managed Domains data.
    MDWarnWindow duration 10% sE
    Define the time window when you want to be warned about an expiring certificate.
    MemcacheConnTTL num[units] 15s svE
    Keepalive time for idle connections
    MergeSlashes ON|OFF ON svC
    Controls whether the server merges consecutive slashes in URLs.
    MergeTrailers [on|off] off svC
    Determines whether trailers are merged into headers
    MetaDir directory .web svdhE
    Name of the directory to find CERN-style meta information files
    MetaFiles on|off off svdhE
    Activates CERN meta-file processing
    MetaSuffix suffix .meta svdhE
    File name suffix for the file containing CERN-style meta information
    MimeMagicFile file-pathsvE
    Enable MIME-type determination based on file contents using the specified magic file
    MinSpareServers number 5 sM
    アイドルãªå­ã‚µãƒ¼ãƒãƒ—ãƒ­ã‚»ã‚¹ã®æœ€å°å€‹æ•°
    MinSpareThreads numbersM
    リクエストã«å¿œç­”ã™ã‚‹ã“ã¨ã®ã§ãã‚‹ ã‚¢ã‚¤ãƒ‰ãƒ«ã‚¹ãƒ¬ãƒƒãƒ‰æ•°ã®æœ€å°æ•°
    MMapFile file-path [file-path] ...sX
    Map a list of files into memory at startup time
    ModemStandard V.21|V.26bis|V.32|V.34|V.92dX
    Modem standard to simulate
    ModMimeUsePathInfo On|Off Off d
    path_info コンãƒãƒ¼ãƒãƒ³ãƒˆã‚’ファイルåã®ä¸€éƒ¨ã¨ã—ã¦æ‰±ã†ã‚ˆã†ã« mod_mime ã«é€šçŸ¥ã™ã‚‹
    MultiviewsMatch Any|NegotiatedOnly|Filters|Handlers [Handlers|Filters] NegotiatedOnly svdh
    MultiViews ã§ã®ãƒžãƒƒãƒãƒ³ã‚°ã®æ¤œç´¢ã«å«ã¾ã›ã‚‹ ファイルã®ã‚¿ã‚¤ãƒ—を指定ã™ã‚‹
    Mutex mechanism [default|mutex-name] ... [OmitPID] default sC
    Configures mutex mechanism and lock file directory for all or specified mutexes
    NameVirtualHost addr[:port]sC
    åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ãŸã‚ã® IP アドレスを指定
    NoProxy host [host] ...svE
    直接接続ã™ã‚‹ ホストã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯
    NWSSLTrustedCerts filename [filename] ...sB
    List of additional client certificates
    NWSSLUpgradeable [IP-address:]portnumbersB
    Allows a connection to be upgraded to an SSL connection upon request
    Options [+|-]option [[+|-]option] ... All svdhC
    ディレクトリã«å¯¾ã—ã¦ä½¿ç”¨å¯èƒ½ãªæ©Ÿèƒ½ã‚’設定ã™ã‚‹
    Order ordering Deny,Allow dhE
    デフォルトã®ã‚¢ã‚¯ã‚»ã‚¹å¯èƒ½ãªçŠ¶æ…‹ã¨ã€Allow 㨠Deny ãŒè©•価ã•れる順番を制御ã™ã‚‹
    OutputSed sed-commanddhX
    Sed command for filtering response content
    PassEnv env-variable [env-variable] ...svdhB
    シェルã‹ã‚‰ã®ç’°å¢ƒå¤‰æ•°ã‚’渡ã™
    PidFile filename logs/httpd.pid sM
    デーモンã®ãƒ—ロセス ID をサーãƒãŒè¨˜éŒ²ã™ã‚‹ãŸã‚ã®ãƒ•ァイル
    PrivilegesMode FAST|SECURE|SELECTIVE FAST svdX
    Trade off processing speed and efficiency vs security against malicious privileges-aware code.
    Protocol protocolsvC
    Protocol for a listening socket
    ProtocolEcho On|Off Off svX
    エコーサーãƒã®æœ‰åŠ¹ç„¡åŠ¹ã‚’è¨­å®šã—ã¾ã™ã€‚
    Protocols protocol ... http/1.1 svC
    Protocols available for a server/virtual host
    ProtocolsHonorOrder On|Off On svC
    Determines if order of Protocols determines precedence during negotiation
    <Proxy wildcard-url> ...</Proxy>svE
    プロキシã•れるリソースã«é©ç”¨ã•れるコンテナ
    Proxy100Continue Off|On On svdE
    Forward 100-continue expectation to the origin server
    ProxyAddHeaders Off|On On svdE
    Add proxy information in X-Forwarded-* headers
    ProxyBadHeader IsError|Ignore|StartBody IsError svE
    応答ã«ãŠã‹ã—ãªãƒ˜ãƒƒãƒ€ãŒã‚ã‚‹å ´åˆã®æ‰±ã„方を決ã‚ã‚‹
    ProxyBlock *|word|host|domain [word|host|domain] ...svE
    ãƒ—ãƒ­ã‚­ã‚·æŽ¥ç¶šã‚’ç¦æ­¢ã™ã‚‹èªžå¥ã€ãƒ›ã‚¹ãƒˆåã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’指定ã™ã‚‹
    ProxyDomain DomainsvE
    プロキシã•れãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ‡ãƒ•ォルトã®ãƒ‰ãƒ¡ã‚¤ãƒ³å
    ProxyErrorOverride On|Off Off svE
    プロキシã•れãŸã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®ã‚¨ãƒ©ãƒ¼ãƒšãƒ¼ã‚¸ã‚’上書ãã™ã‚‹
    ProxyExpressDBMFile pathnamesvE
    Pathname to DBM file.
    ProxyExpressDBMType type default svE
    DBM type of file.
    ProxyExpressEnable on|off off svE
    Enable the module functionality.
    ProxyFCGIBackendType FPM|GENERIC FPM svdhE
    Specify the type of backend FastCGI application
    ProxyFCGISetEnvIf conditional-expression [!]environment-variable-name [value-expression]svdhE
    Allow variables sent to FastCGI servers to be fixed up
    ProxyFtpDirCharset character_set ISO-8859-1 svdE
    Define the character set for proxied FTP listings
    ProxyFtpEscapeWildcards on|off on svdE
    Whether wildcards in requested filenames are escaped when sent to the FTP server
    ProxyFtpListOnWildcard on|off on svdE
    Whether wildcards in requested filenames trigger a file listing
    ProxyHCExpr name {ap_expr expression}svE
    Creates a named condition expression to use to determine health of the backend based on its response
    ProxyHCTemplate name parameter=setting [...]svE
    Creates a named template for setting various health check parameters
    ProxyHCTPsize size 16 sE
    Sets the total server-wide size of the threadpool used for the health check workers
    ProxyHTMLBufSize bytes 8192 svdB
    Sets the buffer size increment for buffering inline scripts and stylesheets.
    ProxyHTMLCharsetOut Charset | *svdB
    Specify a charset for mod_proxy_html output.
    ProxyHTMLDocType HTML|XHTML [Legacy]
    OR
    ProxyHTMLDocType fpi [SGML|XML]
    svdB
    Sets an HTML or XHTML document type declaration.
    ProxyHTMLEnable On|Off Off svdB
    Turns the proxy_html filter on or off.
    ProxyHTMLEvents attribute [attribute ...]svdB
    Specify attributes to treat as scripting events.
    ProxyHTMLExtended On|Off Off svdB
    Determines whether to fix links in inline scripts, stylesheets, and scripting events.
    ProxyHTMLFixups [lowercase] [dospath] [reset]svdB
    Fixes for simple HTML errors.
    ProxyHTMLInterp On|Off Off svdB
    Enables per-request interpolation of ProxyHTMLURLMap rules.
    ProxyHTMLLinks element attribute [attribute2 ...]svdB
    Specify HTML elements that have URL attributes to be rewritten.
    ProxyHTMLMeta On|Off Off svdB
    Turns on or off extra pre-parsing of metadata in HTML <head> sections.
    ProxyHTMLStripComments On|Off Off svdB
    Determines whether to strip HTML comments.
    ProxyHTMLURLMap from-pattern to-pattern [flags] [cond]svdB
    Defines a rule to rewrite HTML links
    ProxyIOBufferSize bytes 8192 svE
    内部データスループットãƒãƒƒãƒ•ã‚¡ã®ã‚µã‚¤ã‚ºã‚’決定ã™ã‚‹
    <ProxyMatch regex> ...</ProxyMatch>svE
    æ­£è¦è¡¨ç¾ã§ã®ãƒžãƒƒãƒã«ã‚ˆã‚‹ãƒ—ロキシリソース用ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–コンテナ
    ProxyMaxForwards number 10 svE
    リクエストãŒãƒ•ォワードã•ã‚Œã‚‹ãƒ—ãƒ­ã‚­ã‚·ã®æœ€å¤§æ•°
    ProxyPass [path] !|url [key=value key=value ...]]svdE
    リモートサーãƒã‚’ローカルサーãƒã® URL 空間ã«ãƒžãƒƒãƒ—ã™ã‚‹
    ProxyPassInherit On|Off On svE
    Inherit ProxyPass directives defined from the main server
    svdE
    Enable Environment Variable interpolation in Reverse Proxy configurations
    svdE
    Maps remote servers into the local server URL-space using regular expressions
    ProxyPassReverse [path] urlsvdE
    リãƒãƒ¼ã‚¹ãƒ—ロキシã•れãŸã‚µãƒ¼ãƒã‹ã‚‰é€ã‚‰ã‚ŒãŸ HTTP 応答ヘッダ㮠URL を調整ã™ã‚‹
    ProxyPassReverseCookieDomain internal-domain public-domainsvdE
    リãƒãƒ¼ã‚¹ãƒ—ロキシサーãƒã‹ã‚‰ã® Set-Cookie ヘッダ㮠Domain 文字列を 調整ã™ã‚‹
    ProxyPassReverseCookiePath internal-path public-pathsvdE
    Reverse プロキシサーãƒã‹ã‚‰ã® Set-Cookie ヘッダ㮠Path 文字列を 調整ã™ã‚‹
    ProxyPreserveHost On|Off Off svE
    プロキシリクエストã«ã€å—ã‘付ã‘㟠Host HTTP ヘッダを使ã†
    ProxyReceiveBufferSize bytes 0 svE
    プロキシã•れる HTTP 㨠FTP 接続ã®ãŸã‚ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒãƒƒãƒ•ァサイズ
    ProxyRemote match remote-serversvE
    特定ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’æ‰±ã†æ™‚ã«ä½¿ã‚れるリモートプロキシを指定ã™ã‚‹
    ProxyRemoteMatch regex remote-serversvE
    æ­£è¦è¡¨ç¾ã§ã®ãƒžãƒƒãƒã«ã‚ˆã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã†ãƒªãƒ¢ãƒ¼ãƒˆãƒ—ãƒ­ã‚­ã‚·ã®æŒ‡å®š
    ProxyRequests On|Off Off svE
    フォワード (標準ã®) プロキシリクエストを有効ã«ã™ã‚‹
    ProxySCGIInternalRedirect On|Off|Headername On svdE
    Enable or disable internal redirect responses from the backend
    ProxySCGISendfile On|Off|Headername Off svdE
    Enable evaluation of X-Sendfile pseudo response header
    dE
    Set various Proxy balancer or member parameters
    ProxySourceAddress addresssvE
    Set local IP address for outgoing proxy connections
    svE
    Show Proxy LoadBalancer status in mod_status
    ProxyTimeout seconds 300 svE
    プロキシã•れãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆ
    ProxyVia On|Off|Full|Block Off svE
    プロキシã•れãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã® Via HTTP 応答ヘッダ ã«ã‚ˆã‚Šæä¾›ã•れる情報
    QualifyRedirectURL ON|OFF OFF svdC
    Controls whether the REDIRECT_URL environment variable is fully qualified
    ReadmeName filenamesvdhB
    ã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ä¸€è¦§ã®æœ€å¾Œã«æŒ¿å…¥ã•れるファイルã®åå‰
    ReceiveBufferSize bytes 0 sM
    TCP å—ä¿¡ãƒãƒƒãƒ•ァサイズ
    Redirect [status] URL-path URLsvdhB
    クライアントãŒé•ㆠURL ã‚’å–å¾—ã™ã‚‹ã‚ˆã†ã«å¤–部ã¸ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’ é€ã‚‹
    RedirectMatch [status] regex URLsvdhB
    ç¾åœ¨ã® URL ã¸ã®æ­£è¦è¡¨ç¾ã®ãƒžãƒƒãƒã«ã‚ˆã‚Š å¤–éƒ¨ã¸ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’é€ã‚‹
    RedirectPermanent URL-path URLsvdhB
    クライアントãŒé•ㆠURL ã‚’å–å¾—ã™ã‚‹ã‚ˆã†ã«å¤–部ã¸ã®æ°¸ä¹…的㪠リダイレクトをé€ã‚‹
    RedirectTemp URL-path URLsvdhB
    クライアントãŒé•ㆠURL ã‚’å–å¾—ã™ã‚‹ã‚ˆã†ã«å¤–部ã¸ã®ä¸€æ™‚的㪠リダイレクトをé€ã‚‹
    RedisConnPoolTTL num[units] 15s svE
    TTL used for the connection pool with the Redis server(s)
    RedisTimeout num[units] 5s svE
    R/W timeout used for the connection with the Redis server(s)
    ReflectorHeader inputheader [outputheader]svdhB
    Reflect an input header to the output headers
    RegexDefaultOptions [none] [+|-]option [[+|-]option] ... DOTALL DOLLAR_ENDON +sC
    Allow to configure global/default options for regexes
    RegisterHttpMethod method [method [...]]sC
    Register non-standard HTTP methods
    RemoteIPHeader header-fieldsvB
    Declare the header field which should be parsed for useragent IP addresses
    RemoteIPInternalProxy proxy-ip|proxy-ip/subnet|hostname ...svB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPInternalProxyList filenamesvB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPProxiesHeader HeaderFieldNamesvB
    Declare the header field which will record all intermediate IP addresses
    RemoteIPProxyProtocol On|OffsvB
    Enable or disable PROXY protocol handling
    RemoteIPProxyProtocolExceptions host|range [host|range] [host|range]svB
    Disable processing of PROXY header for certain hosts or networks
    RemoteIPTrustedProxy proxy-ip|proxy-ip/subnet|hostname ...svB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPTrustedProxyList filenamesvB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoveCharset extension [extension] ...vdh
    ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã«é–¢é€£ä»˜ã‘られãŸã™ã¹ã¦ã®æ–‡å­—セット を解除ã™ã‚‹
    RemoveEncoding extension [extension] ...vdh
    ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã«é–¢é€£ä»˜ã‘られãŸã™ã¹ã¦ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚° を解除ã™ã‚‹
    RemoveHandler extension [extension] ...vdh
    ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã«é–¢é€£ä»˜ã‘られãŸã™ã¹ã¦ã®ãƒãƒ³ãƒ‰ãƒ©ã‚’ 解除ã™ã‚‹
    RemoveInputFilter extension [extension] ...vdh
    ファイル拡張å­ã«é–¢é€£ä»˜ã‘られãŸå…¥åŠ›ãƒ•ã‚£ãƒ«ã‚¿ã‚’è§£é™¤ã™ã‚‹
    RemoveLanguage extension [extension] ...vdh
    ファイル拡張å­ã«é–¢é€£ä»˜ã‘られãŸè¨€èªžã‚’解除ã™ã‚‹
    RemoveOutputFilter extension [extension] ...vdh
    ファイル拡張å­ã«é–¢é€£ä»˜ã‘られãŸå‡ºåŠ›ãƒ•ã‚£ãƒ«ã‚¿ã‚’è§£é™¤ã™ã‚‹
    RemoveType extension [extension] ...vdh
    ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã¨é–¢é€£ä»˜ã‘られãŸã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã‚’ 解除ã™ã‚‹
    RequestHeader set|append|add|unset header [value] [early|env=[!]variable]svdhE
    HTTP リクエストヘッダã®è¨­å®š
    RequestReadTimeout [handshake=timeout[-maxtimeout][,MinRate=rate] [header=timeout[-maxtimeout][,MinRate=rate] [body=timeout[-maxtimeout][,MinRate=rate] handshake=0 header= +svE
    Set timeout values for completing the TLS handshake, receiving the request headers and/or body from client.
    Require [not] entity-name [entity-name] ...dhB
    Tests whether an authenticated user is authorized by an authorization provider.
    <RequireAll> ... </RequireAll>dhB
    Enclose a group of authorization directives of which none must fail and at least one must succeed for the enclosing directive to succeed.
    <RequireAny> ... </RequireAny>dhB
    Enclose a group of authorization directives of which one must succeed for the enclosing directive to succeed.
    <RequireNone> ... </RequireNone>dhB
    Enclose a group of authorization directives of which none must succeed for the enclosing directive to not fail.
    RewriteBase URL-pathdhE
    Sets the base URL for per-directory rewrites
    RewriteCond TestString CondPattern [flags]svdhE
    Defines a condition under which rewriting will take place
    RewriteEngine on|off off svdhE
    Enables or disables runtime rewriting engine
    RewriteMap MapName MapType:MapSource [MapTypeOptions] svE
    Defines a mapping function for key-lookup
    RewriteOptions OptionssvdhE
    Sets some special options for the rewrite engine
    RewriteRule Pattern Substitution [flags]svdhE
    Defines rules for the rewriting engine
    RLimitCPU seconds|max [seconds|max]svdhC
    Apache ã®å­ãƒ—ロセスã‹ã‚‰èµ·å‹•ã•れãŸãƒ—ロセス㮠CPU 消費é‡ã‚’ 制é™ã™ã‚‹
    RLimitMEM bytes|max [bytes|max]svdhC
    Apache ã®å­ãƒ—ロセスã‹ã‚‰èµ·å‹•ã•れãŸãƒ—ロセスã®ãƒ¡ãƒ¢ãƒªæ¶ˆè²»é‡ã‚’ 制é™ã™ã‚‹
    RLimitNPROC number|max [number|max]svdhC
    Apache ã®å­ãƒ—ロセスã‹ã‚‰èµ·å‹•ã•れãŸãƒ—ロセスãŒèµ·å‹•ã™ã‚‹ãƒ—ロセス㮠数を制é™ã™ã‚‹
    Satisfy Any|All All dhE
    ホストレベルã®ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã¨ãƒ¦ãƒ¼ã‚¶èªè¨¼ã¨ã®ç›¸äº’作用を指定
    ScoreBoardFile file-path logs/apache_status sM
    å­ãƒ—ロセスã¨é€£æºã™ã‚‹ãŸã‚ã®ãƒ‡ãƒ¼ã‚¿ã‚’ä¿å­˜ã™ã‚‹ ファイルã®ä½ç½®
    Script method cgi-scriptsvdB
    特定ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ¡ã‚½ãƒƒãƒ‰ã«å¯¾ã—㦠CGI スクリプトを 実行ã™ã‚‹ã‚ˆã†ã«è¨­å®š
    ScriptAlias URL-path file-path|directory-pathsvB
    URL をファイルシステムã®ä½ç½®ã¸ãƒžãƒƒãƒ—ã—ã€ãƒžãƒƒãƒ—先を CGI ã‚¹ã‚¯ãƒªãƒ—ãƒˆã«æŒ‡å®š
    ScriptAliasMatch regex file-path|directory-pathsvB
    URL ã‚’æ­£è¦è¡¨ç¾ã‚’使ã£ã¦ãƒ•ァイルシステムã®ä½ç½®ã¸ãƒžãƒƒãƒ—ã—ã€ãƒžãƒƒãƒ—先を CGI ã‚¹ã‚¯ãƒªãƒ—ãƒˆã«æŒ‡å®š
    ScriptInterpreterSource Registry|Registry-Strict|Script Script svdhC
    CGI スクリプトã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ—リタã®ä½ç½®ã‚’調ã¹ã‚‹ãŸã‚ã®æ‰‹æ³•
    ScriptLog file-pathsvB
    CGI スクリプトã®ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ãƒ•ァイルã®å ´æ‰€
    ScriptLogBuffer bytes 1024 svB
    スクリプトログã«è¨˜éŒ²ã•れる PUT ã‚„ POST リクエストã®å†…容ã®ä¸Šé™
    ScriptLogLength bytes 10385760 svB
    CGI スクリプトã®ãƒ­ã‚°ãƒ•ァイルã®å¤§ãã•ã®ä¸Šé™
    ScriptSock file-path logs/cgisock sB
    CGI デーモンã¨ã®é€šä¿¡ã«ä½¿ã‚れるソケットã®ãƒ•ァイルåã®æŽ¥é ­è¾ž
    SecureListen [IP-address:]portnumber Certificate-Name [MUTUAL]sB
    Enables SSL encryption for the specified port
    SeeRequestTail On|Off Off sC
    Determine if mod_status displays the first 63 characters of a request or the last 63, assuming the request itself is greater than 63 chars.
    SendBufferSize bytes 0 sM
    TCP ãƒãƒƒãƒ•ァサイズ
    ServerAdmin email-address|URLsvC
    サーãƒãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚‹ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã«å«ã‚ã‚‹é›»å­ãƒ¡ãƒ¼ãƒ«ã® アドレス
    ServerAlias hostname [hostname] ...vC
    リクエストをåå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ãƒžãƒƒãƒã•ã›ã¦ã„ã‚‹ã¨ã㫠使用ã•れるホストã®åˆ¥å
    ServerLimit numbersM
    設定å¯èƒ½ãªã‚µãƒ¼ãƒãƒ—ロセス数ã®ä¸Šé™
    ServerName [scheme://]fully-qualified-domain-name[:port]svC
    サーãƒãŒè‡ªåˆ†è‡ªèº«ã‚’示ã™ã¨ãã«ä½¿ã†ãƒ›ã‚¹ãƒˆåã¨ãƒãƒ¼ãƒˆ
    ServerPath URL-pathvC
    éžäº’æ›ã®ãƒ–ラウザãŒåå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸã¨ãã® ãŸã‚ã®äº’æ›ç”¨ URL パスå
    ServerRoot directory-path /usr/local/apache sC
    インストールã•れãŸã‚µãƒ¼ãƒã®ãƒ™ãƒ¼ã‚¹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒª
    ServerSignature On|Off|EMail Off svdhC
    サーãƒãŒç”Ÿæˆã™ã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®ãƒ•ッタを設定
    ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full Full sC
    Server HTTP 応答ヘッダを設定ã™ã‚‹
    Session On|Off Off svdhE
    Enables a session for the current directory or location
    SessionCookieName name attributessvdhE
    Name and attributes for the RFC2109 cookie storing the session
    SessionCookieName2 name attributessvdhE
    Name and attributes for the RFC2965 cookie storing the session
    SessionCookieRemove On|Off Off svdhE
    Control for whether session cookies should be removed from incoming HTTP headers
    SessionCryptoCipher name aes256 svdhX
    The crypto cipher to be used to encrypt the session
    SessionCryptoDriver name [param[=value]]sX
    The crypto driver to be used to encrypt the session
    SessionCryptoPassphrase secret [ secret ... ] svdhX
    The key used to encrypt the session
    SessionCryptoPassphraseFile filenamesvdX
    File containing keys used to encrypt the session
    SessionDBDCookieName name attributessvdhE
    Name and attributes for the RFC2109 cookie storing the session ID
    SessionDBDCookieName2 name attributessvdhE
    Name and attributes for the RFC2965 cookie storing the session ID
    SessionDBDCookieRemove On|Off On svdhE
    Control for whether session ID cookies should be removed from incoming HTTP headers
    SessionDBDDeleteLabel label deletesession svdhE
    The SQL query to use to remove sessions from the database
    SessionDBDInsertLabel label insertsession svdhE
    The SQL query to use to insert sessions into the database
    SessionDBDPerUser On|Off Off svdhE
    Enable a per user session
    SessionDBDSelectLabel label selectsession svdhE
    The SQL query to use to select sessions from the database
    SessionDBDUpdateLabel label updatesession svdhE
    The SQL query to use to update existing sessions in the database
    SessionEnv On|Off Off svdhE
    Control whether the contents of the session are written to the HTTP_SESSION environment variable
    SessionExclude pathsvdhE
    Define URL prefixes for which a session is ignored
    SessionExpiryUpdateInterval interval 0 (always update) svdhE
    Define the number of seconds a session's expiry may change without the session being updated
    SessionHeader headersvdhE
    Import session updates from a given HTTP response header
    SessionInclude pathsvdhE
    Define URL prefixes for which a session is valid
    SessionMaxAge maxage 0 svdhE
    Define a maximum age in seconds for a session
    SetEnv env-variable valuesvdhB
    環境変数を設定ã™ã‚‹
    SetEnvIf attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    リクエストã®å±žæ€§ã«åŸºã¥ã„ã¦ç’°å¢ƒå¤‰æ•°ã‚’設定ã™ã‚‹
    svdhB
    Sets environment variables based on an ap_expr expression
    SetEnvIfNoCase attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    リクエストã®å±žæ€§ã«åŸºã¥ã„ã¦å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã«ç’°å¢ƒå¤‰æ•°ã‚’設定ã™ã‚‹
    SetHandler handler-name|NonesvdhC
    マッãƒã™ã‚‹ãƒ•ァイルãŒãƒãƒ³ãƒ‰ãƒ©ã§å‡¦ç†ã•れるよã†ã«ã™ã‚‹
    SetInputFilter filter[;filter...]svdhC
    クライアントã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚„ POST ã®å…¥åŠ›ã‚’å‡¦ç†ã™ã‚‹ãƒ•ィルタを設定ã™ã‚‹
    SetOutputFilter filter[;filter...]svdhC
    サーãƒã®å¿œç­”を処ç†ã™ã‚‹ãƒ•ィルタを設定ã™ã‚‹
    SSIEndTag tag "-->" svB
    include è¦ç´ ã‚’終了ã•ã›ã‚‹æ–‡å­—列
    SSIErrorMsg message "[an error occurred +svdhB
    SSI ã®ã‚¨ãƒ©ãƒ¼ãŒã‚ã£ãŸã¨ãã«è¡¨ç¤ºã•れるエラーメッセージ
    SSIETag on|off off dhB
    Controls whether ETags are generated by the server.
    SSILastModified on|off off dhB
    Controls whether Last-Modified headers are generated by the server.
    SSILegacyExprParser on|off off dhB
    Enable compatibility mode for conditional expressions.
    SSIStartTag tag "<!--#" svB
    include è¦ç´ ã‚’é–‹å§‹ã™ã‚‹æ–‡å­—列
    SSITimeFormat formatstring "%A, %d-%b-%Y %H:%M +svdhB
    日付ã‘ã‚’ç¾ã™æ–‡å­—åˆ—ã®æ›¸å¼ã‚’設定ã™ã‚‹
    SSIUndefinedEcho string "(none)" svdhB
    未定義ã®å¤‰æ•°ãŒ echo ã•れãŸã¨ãã«è¡¨ç¤ºã•れる文字列
    SSLCACertificateFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for Client Auth
    SSLCACertificatePath directory-pathsvE
    Directory of PEM-encoded CA Certificates for Client Auth
    SSLCADNRequestFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for defining acceptable CA names
    SSLCADNRequestPath directory-pathsvE
    Directory of PEM-encoded CA Certificates for defining acceptable CA names
    SSLCARevocationCheck chain|leaf|none [flags ...] none svE
    Enable CRL-based revocation checking
    SSLCARevocationFile file-pathsvE
    File of concatenated PEM-encoded CA CRLs for Client Auth
    SSLCARevocationPath directory-pathsvE
    Directory of PEM-encoded CA CRLs for Client Auth
    SSLCertificateChainFile file-pathsvE
    File of PEM-encoded Server CA Certificates
    SSLCertificateFile file-pathsvE
    Server PEM-encoded X.509 certificate data file
    SSLCertificateKeyFile file-pathsvE
    Server PEM-encoded private key file
    SSLCipherSuite [protocol] cipher-spec DEFAULT (depends on +svdhE
    Cipher Suite available for negotiation in SSL handshake
    SSLCompression on|off off svE
    Enable compression on the SSL level
    SSLCryptoDevice engine builtin sE
    Enable use of a cryptographic hardware accelerator
    SSLEngine on|off|optional off svE
    SSL Engine Operation Switch
    SSLFIPS on|off off sE
    SSL FIPS mode Switch
    SSLHonorCipherOrder on|off off svE
    Option to prefer the server's cipher preference order
    SSLInsecureRenegotiation on|off off svE
    Option to enable support for insecure renegotiation
    SSLOCSPDefaultResponder urisvE
    Set the default responder URI for OCSP validation
    SSLOCSPEnable on|leaf|off off svE
    Enable OCSP validation of the client certificate chain
    SSLOCSPNoverify On/Off Off svE
    skip the OCSP responder certificates verification
    SSLOCSPOverrideResponder on|off off svE
    Force use of the default responder URI for OCSP validation
    SSLOCSPProxyURL urlsvE
    Proxy URL to use for OCSP requests
    SSLOCSPResponderCertificateFile filesvE
    Set of trusted PEM encoded OCSP responder certificates
    SSLOCSPResponderTimeout seconds 10 svE
    Timeout for OCSP queries
    SSLOCSPResponseMaxAge seconds -1 svE
    Maximum allowable age for OCSP responses
    SSLOCSPResponseTimeSkew seconds 300 svE
    Maximum allowable time skew for OCSP response validation
    SSLOCSPUseRequestNonce on|off on svE
    Use a nonce within OCSP queries
    SSLOpenSSLConfCmd command-name command-valuesvE
    Configure OpenSSL parameters through its SSL_CONF API
    SSLOptions [+|-]option ...svdhE
    Configure various SSL engine run-time options
    SSLPassPhraseDialog type builtin sE
    Type of pass phrase dialog for encrypted private keys
    SSLProtocol [+|-]protocol ... all -SSLv3 (up to 2 +svE
    Configure usable SSL/TLS protocol versions
    SSLProxyCACertificateFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for Remote Server Auth
    SSLProxyCACertificatePath directory-pathsvE
    Directory of PEM-encoded CA Certificates for Remote Server Auth
    SSLProxyCARevocationCheck chain|leaf|none none svE
    Enable CRL-based revocation checking for Remote Server Auth
    SSLProxyCARevocationFile file-pathsvE
    File of concatenated PEM-encoded CA CRLs for Remote Server Auth
    SSLProxyCARevocationPath directory-pathsvE
    Directory of PEM-encoded CA CRLs for Remote Server Auth
    SSLProxyCheckPeerCN on|off on svE
    Whether to check the remote server certificate's CN field
    SSLProxyCheckPeerExpire on|off on svE
    Whether to check if remote server certificate is expired
    SSLProxyCheckPeerName on|off on svE
    Configure host name checking for remote server certificates
    SSLProxyCipherSuite [protocol] cipher-spec ALL:!ADH:RC4+RSA:+H +svE
    Cipher Suite available for negotiation in SSL proxy handshake
    SSLProxyEngine on|off off svE
    SSL Proxy Engine Operation Switch
    SSLProxyMachineCertificateChainFile filenamesvE
    File of concatenated PEM-encoded CA certificates to be used by the proxy for choosing a certificate
    SSLProxyMachineCertificateFile filenamesvE
    File of concatenated PEM-encoded client certificates and keys to be used by the proxy
    SSLProxyMachineCertificatePath directorysvE
    Directory of PEM-encoded client certificates and keys to be used by the proxy
    SSLProxyProtocol [+|-]protocol ... all -SSLv3 (up to 2 +svE
    Configure usable SSL protocol flavors for proxy usage
    SSLProxyVerify level none svE
    Type of remote server Certificate verification
    SSLProxyVerifyDepth number 1 svE
    Maximum depth of CA Certificates in Remote Server Certificate verification
    SSLRandomSeed context source [bytes]sE
    Pseudo Random Number Generator (PRNG) seeding source
    SSLRenegBufferSize bytes 131072 dhE
    Set the size for the SSL renegotiation buffer
    SSLRequire expressiondhE
    Allow access only when an arbitrarily complex boolean expression is true
    SSLRequireSSLdhE
    Deny access when SSL is not used for the HTTP request
    SSLSessionCache type none sE
    Type of the global/inter-process SSL Session Cache
    SSLSessionCacheTimeout seconds 300 svE
    Number of seconds before an SSL session expires in the Session Cache
    SSLSessionTicketKeyFile file-pathsvE
    Persistent encryption/decryption key for TLS session tickets
    SSLSessionTickets on|off on svE
    Enable or disable use of TLS session tickets
    SSLSRPUnknownUserSeed secret-stringsvE
    SRP unknown user seed
    SSLSRPVerifierFile file-pathsvE
    Path to SRP verifier file
    SSLStaplingCache typesE
    Configures the OCSP stapling cache
    SSLStaplingErrorCacheTimeout seconds 600 svE
    Number of seconds before expiring invalid responses in the OCSP stapling cache
    SSLStaplingFakeTryLater on|off on svE
    Synthesize "tryLater" responses for failed OCSP stapling queries
    SSLStaplingForceURL urisvE
    Override the OCSP responder URI specified in the certificate's AIA extension
    SSLStaplingResponderTimeout seconds 10 svE
    Timeout for OCSP stapling queries
    SSLStaplingResponseMaxAge seconds -1 svE
    Maximum allowable age for OCSP stapling responses
    SSLStaplingResponseTimeSkew seconds 300 svE
    Maximum allowable time skew for OCSP stapling response validation
    SSLStaplingReturnResponderErrors on|off on svE
    Pass stapling related OCSP errors on to client
    SSLStaplingStandardCacheTimeout seconds 3600 svE
    Number of seconds before expiring responses in the OCSP stapling cache
    SSLStrictSNIVHostCheck on|off off svE
    Whether to allow non-SNI clients to access a name-based virtual host.
    SSLUserName varnamesdhE
    Variable name to determine user name
    SSLUseStapling on|off off svE
    Enable stapling of OCSP responses in the TLS handshake
    SSLVerifyClient level none svdhE
    Type of Client Certificate verification
    SSLVerifyDepth number 1 svdhE
    Maximum depth of CA Certificates in Client Certificate verification
    StartServers numbersM
    起動時ã«ç”Ÿæˆã•れるå­ã‚µãƒ¼ãƒãƒ—ãƒ­ã‚»ã‚¹ã®æ•°
    StartThreads numbersM
    起動時ã«ç”Ÿæˆã•ã‚Œã‚‹ã‚¹ãƒ¬ãƒƒãƒ‰ã®æ•°
    Substitute s/pattern/substitution/[infq]dhE
    Pattern to filter the response content
    SubstituteInheritBefore on|off off dhE
    Change the merge order of inherited patterns
    SubstituteMaxLineLength bytes(b|B|k|K|m|M|g|G) 1m dhE
    Set the maximum line size
    Suexec On|OffsB
    Enable or disable the suEXEC feature
    SuexecUserGroup User GroupsvE
    CGI プログラムã®ãƒ¦ãƒ¼ã‚¶ãƒ‘ーミッションã€ã‚°ãƒ«ãƒ¼ãƒ—パーミッション
    ThreadLimit numbersM
    設定å¯èƒ½ãªå­ãƒ—ロセス毎ã®ã‚¹ãƒ¬ãƒƒãƒ‰æ•°ã®ä¸Šé™ã‚’ 設定ã—ã¾ã™
    ThreadsPerChild numbersM
    å­ãƒ—ロセスãれãžã‚Œã«ç”Ÿæˆã•れるスレッド数
    ThreadStackSize sizesM
    クライアントã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’å—ã‘æŒã¤ã‚¹ãƒ¬ãƒƒãƒ‰ãŒä½¿ç”¨ã™ã‚‹ スタックã®ãƒã‚¤ãƒˆæ•°
    TimeOut seconds 60 svC
    å„イベントã«ã¤ã„ã¦ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’失敗ã•ã›ã‚‹ã¾ã§ã«ã‚µãƒ¼ãƒãŒ å¾…ã¤æ™‚間を設定
    TraceEnable [on|off|extended] on sC
    TRACE メソッドã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã™ã‚‹å¿œç­”方法を決ã‚ã‚‹
    TransferLog file|pipesvB
    ログファイルã®ä½ç½®ã‚’指定
    TypesConfig file-path conf/mime.types s
    mime.types ファイルã®ä½ç½®
    UnDefine parameter-namesC
    Undefine the existence of a variable
    UndefMacro namesvdB
    Undefine a macro
    UnsetEnv env-variable [env-variable] ...svdhB
    環境ã‹ã‚‰å¤‰æ•°ã‚’å–り除ã
    Use name [value1 ... valueN] svdB
    Use a macro
    UseCanonicalName On|Off|Dns Off svdC
    サーãƒãŒè‡ªåˆ†è‡ªèº«ã®åå‰ã¨ãƒãƒ¼ãƒˆã‚’決定ã™ã‚‹æ–¹æ³•を設定ã™ã‚‹
    UseCanonicalPhysicalPort On|Off Off svdC
    自分自身ã®åå‰ã¨ãƒãƒ¼ãƒˆç•ªå·ã‚’解決ã™ã‚‹æ–¹æ³•を設定ã™ã‚‹
    User unix-userid #-1 sB
    The userid under which the server will answer requests
    UserDir directory-filename [directory-filename] ...svB
    ユーザ専用ディレクトリã®ä½ç½®
    VHostCGIMode On|Off|Secure On vX
    Determines whether the virtualhost can run subprocesses, and the privileges available to subprocesses.
    VHostCGIPrivs [+-]?privilege-name [[+-]?privilege-name] ...vX
    Assign arbitrary privileges to subprocesses created by a virtual host.
    VHostGroup unix-groupidvX
    Sets the Group ID under which a virtual host runs.
    VHostPrivs [+-]?privilege-name [[+-]?privilege-name] ...vX
    Assign arbitrary privileges to a virtual host.
    VHostSecure On|Off On vX
    Determines whether the server runs with enhanced security for the virtualhost.
    VHostUser unix-useridvX
    Sets the User ID under which a virtual host runs.
    VirtualDocumentRoot interpolated-directory|none none svE
    Dynamically configure the location of the document root for a given virtual host
    VirtualDocumentRootIP interpolated-directory|none none svE
    Dynamically configure the location of the document root for a given virtual host
    <VirtualHost addr[:port] [addr[:port]] ...> ... </VirtualHost>sC
    特定ã®ãƒ›ã‚¹ãƒˆåã‚„ IP アドレスã®ã¿ã«é©ç”¨ã•れるディレクティブを 囲む
    VirtualScriptAlias interpolated-directory|none none svE
    Dynamically configure the location of the CGI directory for a given virtual host
    VirtualScriptAliasIP interpolated-directory|none none svE
    Dynamically configure the location of the CGI directory for a given virtual host
    WatchdogInterval time-interval[s] 1 sB
    Watchdog interval in seconds
    XBitHack on|off|full off svdhB
    実行ビットãŒè¨­å®šã•れãŸãƒ•ァイル㮠SSI ディレクティブを è§£æžã™ã‚‹
    xml2EncAlias charset alias [alias ...]sB
    Recognise Aliases for encoding values
    xml2EncDefault namesvdhB
    Sets a default encoding to assume when absolutely no information can be automatically detected
    xml2StartParse element [element ...]svdhB
    Advise the parser to skip leading junk.

    翻訳済ã¿è¨€èªž:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_lbmethod_bybusyness.html.fr.utf80000644000000000000500000002040013412755316023327 0ustar rootsrc mod_lbmethod_bybusyness - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_lbmethod_bybusyness

    Langues Disponibles:  en  |  fr 

    Description:Algorithme de planification avec répartition de charge de l'attribution des requêtes en attente pour le module mod_proxy_balancer
    Statut:Extension
    Identificateur de Module:lbmethod_bybusyness_module
    Fichier Source:mod_lbmethod_bybusyness.c
    Compatibilité:Dissocié de mod_proxy_balancer depuis la version 2.3

    Sommaire

    Ce module ne fournit pas lui-même de directive de configuration. Il nécessite les services de mod_proxy_balancer, et fournit la méthode de répartition de charge bybusyness.

    top

    Algorithme d'attribution des requêtes en attente

    Activé via lbmethod=bybusyness, ce planificateur surveille le nombre de requêtes assignées à chaque processus worker à l'instant présent. Une nouvelle requête est automatiquement assignée au processus worker auquel est assigné le plus petit nombre de requêtes. Ceci s'avère utile dans le cas où les processus worker mettent en file d'attente les requêtes entrantes indépendamment d'Apache, et permet de s'assurer que la longueur des files reste raisonnable, et qu'une requête est toujours assignée au processus worker qui sera à même de la servir le plus rapidement et avec une latence réduite.

    Si plusieurs processus worker s'avèrent les moins chargés, le choix d'un de ces derniers est effectué à partir des statistiques (et des estimations de charges) qu'utilise la méthode de décompte des requêtes. Au fil du temps, la distribution des tâches finit par ressembler à celle de byrequests (tel qu'implémenté par mod_lbmethod_byrequests).

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cgid.html0000644000000000000500000000060713362070302016652 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_cgid.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_cgid.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_cgid.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_cgid.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_proxy_ajp.html.ja.utf80000644000000000000500000010037613412755316021254 0ustar rootsrc mod_proxy_ajp - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_proxy_ajp

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:mod_proxy ã§ AJP をサãƒãƒ¼ãƒˆã™ã‚‹ãŸã‚ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«
    ステータス:Extension
    モジュール識別å­:proxy_ajp_module
    ソースファイル:mod_proxy_ajp.c

    概è¦

    本モジュールã«ã¯ mod_proxy ãŒå¿…è¦ã§ã™ã€‚ Apache JServ Protocol version 1.3 (ä»¥é™ AJP13) をサãƒãƒ¼ãƒˆã—ã¾ã™ã€‚

    AJP13 プロトコルを扱ãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ã«ã¯ mod_proxy 㨠mod_proxy_ajp をサーãƒã«çµ„ã¿è¾¼ã‚€å¿…è¦ãŒã‚りã¾ã™ã€‚

    警告

    安全ãªã‚µãƒ¼ãƒã«ã™ã‚‹ã¾ã§ãƒ—ãƒ­ã‚¯ã‚·æ©Ÿèƒ½ã¯æœ‰åйã«ã—ãªã„ã§ãã ã•ã„。 オープンプロキシサーãƒã¯ã‚ãªãŸè‡ªèº«ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«ã¨ã£ã¦ã‚‚〠インターãƒãƒƒãƒˆå…¨ä½“ã«ã¨ã£ã¦ã‚‚å±é™ºã§ã™ã€‚

    Support Apache!

    トピック

    ディレクティブ

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚りã¾ã›ã‚“。

    Bugfix checklist

    å‚ç…§

    top

    ãƒ—ãƒ­ãƒˆã‚³ãƒ«ã®æ¦‚è¦

    AJP13 プロトコルã¯ãƒ‘ケット指å‘ã§ã™ã€‚ å¯èª­ãªãƒ—レーンテキスト形å¼ã§ã¯ãªããƒã‚¤ãƒŠãƒªå½¢å¼ã«ãªã£ãŸã®ã¯ã€ ãŠãらãパフォーマンス上ã®ç†ç”±ã«ã‚ˆã‚Šã¾ã™ã€‚ ウェブサーãƒã¯ã‚µãƒ¼ãƒ–レットコンテナ㨠TCP コãƒã‚¯ã‚·ãƒ§ãƒ³ã§é€šä¿¡ã—ã¾ã™ã€‚ ソケット生æˆã¯é‡ã„処ç†ãªã®ã§ã€è² è·ã‚’減らã™ãŸã‚ã«ã€ã‚µãƒ¼ãƒ–レットコンテナã¨ã® TCP 接続を維æŒã—ã€è¤‡æ•°ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ»ãƒ¬ã‚¹ãƒãƒ³ã‚¹å‡¦ç†ã‚µã‚¤ã‚¯ãƒ«ã«å¯¾ã—ã¦ä¸€ã¤ã® コãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’使ã„ã¾ã‚ã™ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚

    ã‚るリクエストã«ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ãŒå‰²ã‚Šå½“ã¦ã‚‰ã‚Œã‚‹ã¨ã€ãã®å‡¦ç†ã‚µã‚¤ã‚¯ãƒ«ãŒ 完了ã™ã‚‹ã¾ã§ä»–ã®ã‚‚ã®ã«ä½¿ã‚れるã“ã¨ã¯ã‚りã¾ã›ã‚“。 ã¤ã¾ã‚Šã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ä¸Šã§ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®åŒæ™‚処ç†ã¯è¡Œã‚れã¾ã›ã‚“。 ã“ã®ãŸã‚ã€ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ä¸¡ç«¯ã§ã®å®Ÿè¡Œã™ã‚‹ã‚³ãƒ¼ãƒ‰ã‚’ç°¡æ½”ã«ã§ãる一方ã§ã€ åŒæ™‚ã«é–‹ãコãƒã‚¯ã‚·ãƒ§ãƒ³ã¯å¤šããªã£ã¦ã„ã¾ã™ã€‚

    サーブレットコンテナã¸ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’é–‹ã„ãŸå¾Œã¯ã€ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã®çŠ¶æ…‹ã¯ æ¬¡ã®ã©ã‚Œã‹ã«ãªã‚Šã¾ã™:

    • Idle
      コãƒã‚¯ã‚·ãƒ§ãƒ³ä¸Šã§å‡¦ç†ã•れã¦ã„るリクエストã¯ã‚りã¾ã›ã‚“。
    • Assigned
      コãƒã‚¯ã‚·ãƒ§ãƒ³ã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’処ç†ä¸­ã§ã™ã€‚

    コãƒã‚¯ã‚·ãƒ§ãƒ³ãŒç‰¹å®šã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ã‚¢ã‚µã‚¤ãƒ³ã•れるã¨ã€åŸºæœ¬çš„ãªæƒ…å ± (例ãˆã° HTTP ヘッダ等) ãŒåœ§ç¸®ã•れãŸå½¢ (例ãˆã°é€šå¸¸ã®æ–‡å­—åˆ—ã¯æ•´æ•°ã«ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れã¾ã™) ã§è»¢é€ã•れã¾ã™ã€‚詳細ã¯ä¸‹è¨˜ã®ã€Œãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ‘ã‚±ãƒƒãƒˆã®æ§‹é€ ã€ã‚’å‚ç…§ã—ã¦ãã ã•ã„。 リクエストã«ãƒœãƒ‡ã‚£ãŒå­˜åœ¨ (content-length > 0) ã™ã‚Œã°ã€ åŸºæœ¬çš„ãªæƒ…å ±ã®ç›´å¾Œã«åˆ¥ãƒ‘ケットã§è»¢é€ã•れã¾ã™ã€‚

    ã“ã®æ™‚点ã§ãŠãらãã€ã‚µãƒ¼ãƒ–レットコンテナã¯å‡¦ç†ã‚’é–‹å§‹ã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ ã§ã™ã®ã§ã€æ¬¡ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’ウェブサーãƒã«æˆ»ã—ã¦çŸ¥ã‚‰ã›ã‚‰ã‚Œã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚

    • SEND_HEADERS
      ブラウザã«ãƒ˜ãƒƒãƒ€ã‚’é€ä¿¡ã—ã¾ã™ã€‚
    • SEND_BODY_CHUNK
      ブラウザã«ãƒœãƒ‡ã‚£ãƒ‡ãƒ¼ã‚¿ã®ãƒãƒ£ãƒ³ã‚¯ã‚’é€ã‚Šã¾ã™ã€‚
    • GET_BODY_CHUNK
      リクエストã®ãƒ‡ãƒ¼ã‚¿ã‚’å…¨ã¦å—ã‘å–り終ã‚ã£ã¦ã„ãªã„ã¨ãã«ã€ 残ã£ã¦ã„るデータをå—ã‘å–りã¾ã™ã€‚パケットã«ã‚る定ã¾ã£ãŸæœ€å¤§é•·ãŒã‚りã€ä»»æ„㮠大ãã•ã®ãƒ‡ãƒ¼ã‚¿ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒœãƒ‡ã‚£ã¨ã—ã¦å«ã¾ã‚Œã†ã‚‹å ´åˆ (例ãˆã°ãƒ•ァイルã®ã‚¢ãƒƒãƒ—ロードã®å ´åˆ) ã«å¿…è¦ã¨ãªã‚Šã¾ã™ã€‚ (注: HTTP ã®ãƒãƒ£ãƒ³ã‚¯è»¢é€ã¨ã¯é–¢é€£ã‚りã¾ã›ã‚“。)
    • END_RESPONSE
      リクエスト処ç†ã‚µã‚¤ã‚¯ãƒ«ã‚’終了ã—ã¾ã™ã€‚

    個々ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯ãれãžã‚Œç•°ãªã‚‹ãƒ‡ãƒ¼ã‚¿ãƒ‘ケット形å¼ã«ãªã£ã¦ã„ã¾ã™ã€‚ 後述ã®ã€Œãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ‘ã‚±ãƒƒãƒˆã®æ§‹é€ ã€ã‚’å‚ç…§ã—ã¦ãã ã•ã„。

    top

    基本パケット構造

    ã“ã®ãƒ—ロトコルã«ã¯ XDR ã‹ã‚‰å—ã‘ç¶™ã„ã éƒ¨åˆ†ãŒå°‘ã—ã‚りã¾ã™ãŒã€å¤šãã®ç‚¹ã§ ç•°ãªã‚Šã¾ã™ (例ãˆã° 4 ãƒã‚¤ãƒˆã‚¢ãƒ©ã‚¤ãƒ¡ãƒ³ãƒˆã§ãªã„ã“ã¨ãªã©) 。

    ãƒã‚¤ãƒˆã‚ªãƒ¼ãƒ€ãƒ¼: 個々ã®ãƒã‚¤ãƒˆã®ã‚¨ãƒ³ãƒ‡ã‚£ã‚¢ãƒ³ãŒã©ã†ãªã£ã¦ã„ã‚‹ã‹ã¯ã€ ç§ã¯è©³ã—ããªã„ã®ã§ã™ãŒã€ãƒªãƒˆãƒ«ã‚¨ãƒ³ãƒ‡ã‚£ã‚¢ãƒ³ã«ãªã£ã¦ã„ã‚‹ã¨æ€ã„ã¾ã™ã€‚ XDR 仕様ã§ãã†ãªã£ã¦ã„ã‚‹ã®ã¨ã€ç´ æ™´ã‚‰ã—ã„ã“ã¨ã« sys/socket ライブラリ㌠(C ã§) ãã†ã„ã†é¢¨ã«ã§ãã¦ã„ã‚‹ã®ã§ãã†ãªã®ã ã¨æ€ã„ã¾ã—ãŸã€‚ ソケット呼ã³å‡ºã—ã®å†…部ã«ã¤ã„ã¦ã‚ˆã‚Šè©³ã—ã„æ–¹ãŒã„らã£ã—ゃã„ã¾ã—ãŸã‚‰ã€ ã”æ•™æŽˆãã ã•ã„。

    プロトコルã«ã¯ 4 ã¤ã®ãƒ‡ãƒ¼ã‚¿ã‚¿ã‚¤ãƒ—ãŒã‚りã¾ã™: byte, boolean, integer, string ã§ã™ã€‚

    Byte
    ãƒã‚¤ãƒˆä¸€ã¤ã§ã™ã€‚
    Boolean
    ãƒã‚¤ãƒˆä¸€ã¤ã§ã€1 = true, 0 = false ã§ã™ã€‚ (C ã®ã‚ˆã†ã«) éžé›¶ã‚’真ã¨ã—ã¦æ‰±ã£ã¦ã—ã¾ã†ã¨ã€ã‚ã‚‹å ´åˆã¯å‹•ãã‹ã‚‚ã—れã¾ã›ã‚“ã—〠動ã‹ãªã„ã‹ã‚‚ã—れã¾ã›ã‚“。
    Integer
    0 ã‹ã‚‰ 2^16 (32768) ã®ç¯„å›²ã®æ•°å­—。高次㮠2 ãƒã‚¤ãƒˆãŒ å…ˆã«æ ¼ç´ã•れã¾ã™ã€‚
    String
    å¯å¤‰é•·ã®æ–‡å­—列 (2^16 ãŒé•·ã•ã®ä¸Šé™) ã€‚é•·ã•æƒ…å ±ã®ãƒ‘ケット 2 ãƒã‚¤ãƒˆã®å¾Œã« 文字列 (終端文字 '\0' ã‚’å«ã‚€) ãŒç¶šãå½¢å¼ã§ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れã¾ã™ã€‚ エンコードã•れã¦ã„ã‚‹é•·ã•æƒ…å ±ã¯æœ€å¾Œã® '\0' をカウントã—ãªã„ ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„――ã“れ㯠strlen ã¨åŒæ§˜ã§ã™ã€‚ ã“れらã®çµ‚端文字をスキップã™ã‚‹ãŸã‚ã«ã€ã‚ã¾ã‚Šæ„味ã®ç„¡ã„インクリメント文 ã‚’ãŸãã•ん書ã‹ãªã„ã¨ã„ã‘ãªã„ã®ã¯ã€ Java ã®å´ã‹ã‚‰è¦‹ã‚‹ã¨å°‘ã—紛らã‚ã—ãæ„Ÿã˜ã‚‰ã‚Œã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。 ã“ã†ãªã£ãŸç†ç”±ã¯ãŠãらãã€Servlet コンテナã‹ã‚‰è¿”ã•れる文字列を読ã¿å‡ºã™æ™‚ã«ã€ 効率よã C ã®ã‚³ãƒ¼ãƒ‰ã‚’書ã‘るよã†ã«ã™ã‚‹â€•―サーブレットã‹ã‚‰è¿”ã•れる 文字列㯠\0 文字ã§çµ‚端ã•れã¦ã„ã‚‹ã®ã§ã€C ã®ã‚³ãƒ¼ãƒ‰ã§ã¯ã‚ã–ã‚ã–コピーをã›ãšã«ã€ 一ã¤ã®ãƒãƒƒãƒ•ã‚¡ã¸ã®ãƒªãƒ•ァレンスをå–り回ã™ã‚ˆã†ã«æ›¸ãã“ã¨ãŒã§ãる―― ãŸã‚ã ã¨æ€ã‚れã¾ã™ã€‚ '\0' 文字ãŒãªã„å ´åˆã¯ã€C ã§ã¯æ–‡å­—列ã®è¦å‰‡ã«åˆã†ã‚ˆã†ã«ã‚³ãƒ”ーã—ãªã‘れ㰠ã„ã‘ãªããªã£ã¦ã—ã¾ã„ã¾ã™ã€‚

    パケットサイズ

    多ãã®ã‚³ãƒ¼ãƒ‰ã§ãã†ãªã£ã¦ã„ã‚‹ã®ã§ã™ãŒã€ãƒ‘ã‚±ãƒƒãƒˆã‚µã‚¤ã‚ºã®æœ€å¤§ã‚µã‚¤ã‚ºã¯ 8 * 1024 (8K) ã§ã™ã€‚パケットã®å®Ÿéš›ã®é•·ã•ã¯ãƒ˜ãƒƒãƒ€ã« エンコードã•れã¦å…¥ã£ã¦ã„ã¾ã™ã€‚

    パケットヘッダ

    サーãƒã‹ã‚‰ã‚³ãƒ³ãƒ†ãƒŠã«é€å‡ºã•れるパケット㯠0x1234 ã§å§‹ã¾ã‚Šã¾ã™ã€‚ コンテナã‹ã‚‰ã‚µãƒ¼ãƒã«é€ã‚‰ã‚Œã‚‹ãƒ‘ケット㯠AB (ASCII コード A 㨠ASCII コード B) ã§å§‹ã¾ã‚Šã¾ã™ã€‚ã“ã®äºŒãƒã‚¤ãƒˆã®å¾Œã«ã€ãƒšã‚¤ãƒ­ãƒ¼ãƒ‰é•·ãŒ (上記ã®å½¢å¼ã§) ç¶šãã¾ã™ã€‚ã“ã®ãŸã‚ã€ãƒšã‚¤ãƒ­ãƒ¼ãƒ‰é•·ã®æœ€å¤§å€¤ã¯ 2^16 ã«ã§ãるよã†ã«æ€ãˆã¾ã™ãŒã€ 実際ã«ã¯ã‚³ãƒ¼ãƒ‰ã§ã¯æœ€å¤§å€¤ã¯ 8K ã«è¨­å®šã•れã¦ã„ã¾ã™ã€‚

    ãƒ‘ã‚±ãƒƒãƒˆå½¢å¼ (Server->Container)
    Byte 0 1 2 3 4...(n+3)
    Contents 0x12 0x34 データ長 (n) Data
    ãƒ‘ã‚±ãƒƒãƒˆå½¢å¼ (Container->Server)
    Byte 0 1 2 3 4...(n+3)
    Contents A B データ長 (n) Data

    ã»ã¨ã‚“ã©ã®ãƒ‘ケットã§ã€ãƒšã‚¤ãƒ­ãƒ¼ãƒ‰ã®æœ€åˆã®ãƒã‚¤ãƒˆãŒãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®åž‹ã‚’エンコード ã—ã¦ã„ã¾ã™ã€‚例外ã¯ã‚µãƒ¼ãƒã‹ã‚‰ã‚³ãƒ³ãƒ†ãƒŠã«é€ã‚‰ã‚Œã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒœãƒ‡ã‚£ãƒ‘ケットã§ã™ ――ã“ã‚Œã‚‰ã¯æ¨™æº–çš„ãªãƒ‘ã‚±ãƒƒãƒˆå½¢å¼ (0x1234 ã¨ãƒ‘ケット長) ã§ã™ãŒã€ãã®å¾Œã«ç¶šãプレフィックスコードãŒã‚りã¾ã›ã‚“。

    ウェブサーãƒã¯æ¬¡ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’サーブレットコンテナã«é€å‡ºã§ãã¾ã™ã€‚

    コード パケットã®åž‹ æ„味
    2 Forward Request リクエスト処ç†ã‚µã‚¤ã‚¯ãƒ«ã‚’後続ã®ãƒ‡ãƒ¼ã‚¿ã¨ã¨ã‚‚ã«é–‹å§‹ã™ã‚‹ã€‚
    7 Shutdown ウェブサーãƒãŒã‚³ãƒ³ãƒ†ãƒŠã«ã€ã‚³ãƒ³ãƒ†ãƒŠã‚’終了ã™ã‚‹ã‚ˆã†ã«ä¼ãˆã‚‹ã€‚
    8 Ping ウェブサーãƒãŒã‚³ãƒ³ãƒ†ãƒŠã«åˆ¶å¾¡ã‚’å—ã‘æŒã¤ã‚ˆã†ã«ä¼ãˆã‚‹ (セキュアログインフェーズ) 。
    10 CPing ウェブサーãƒãŒã‚³ãƒ³ãƒ†ãƒŠã« CPong ã§å³åº§ã«å¿œç­”ã™ã‚‹ã‚ˆã†ã«ä¼ãˆã‚‹ã€‚
    none Data サイズ (2 ãƒã‚¤ãƒˆ) ã¨ãれã«ç¶šãボディデータ。

    基本的ãªã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã‚’確ä¿ã™ã‚‹ãŸã‚ã€ãƒ›ã‚¹ãƒˆã•れã¦ã„るマシンã¨åŒä¸€ã® マシンã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—ã¦ã®ã¿ã€ã‚³ãƒ³ãƒ†ãƒŠã¯å®Ÿéš›ã« Shutdown を実行ã—ã¾ã™ã€‚

    最åˆã® Data パケットã¯ã€Forward Request ã®ç›´å¾Œã«ã‚¦ã‚§ãƒ–サーãƒã‹ã‚‰é€ã‚‰ã‚Œã¾ã™ã€‚

    サーブレットコンテナã¯ã‚¦ã‚§ãƒ–サーãƒã«ã€æ¬¡ã®ã‚¿ã‚¤ãƒ—ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’é€ã‚‹ã“ã¨ãŒ ã§ãã¾ã™ :

    コード パケットã®åž‹ æ„味
    3 Send Body Chunk サーブレットコンテナã‹ã‚‰ã‚¦ã‚§ãƒ–サーãƒã« (ãã—ã¦ãŠãらããã®ã¾ã¾ãƒ–ラウザã«)ã€ãƒœãƒ‡ã‚£ã®ãƒãƒ£ãƒ³ã‚¯ã‚’é€ã‚‹ã€‚
    4 Send Headers サーブレットコンテナã‹ã‚‰ã‚¦ã‚§ãƒ–サーãƒã« (ãã—ã¦ãŠãらããã®ã¾ã¾ãƒ–ラウザã«) レスãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ã‚’é€ã‚‹ã€‚
    5 End Response レスãƒãƒ³ã‚¹ (ã¤ã¾ã‚Šãƒªã‚¯ã‚¨ã‚¹ãƒˆå‡¦ç†ã‚µã‚¤ã‚¯ãƒ«) 終了ã®ç›®å°ã‚’é€ã‚‹ã€‚
    6 Get Body Chunk ã¾ã å…¨ã¦è»¢é€ã•れã¦ã„ãªã„å ´åˆã€æ®‹ã£ã¦ã„るリクエストã®ãƒ‡ãƒ¼ã‚¿ã‚’å—ã‘å–る。
    9 CPong 応答 CPing リクエストã«å¿œç­”ã™ã‚‹ã€‚

    上記メッセージã¯ã€ãれãžã‚Œå†…部構造ãŒç•°ãªã£ã¦ã„ã¾ã™ã€‚詳細ã¯ä¸‹è¨˜ã‚’ã”覧ãã ã•ã„。

    top

    リクエストパケット構造

    サーãƒã‹ã‚‰ã‚³ãƒ³ãƒ†ãƒŠã¸é€ã‚‰ã‚Œã‚‹ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒ Forward Request åž‹ã®å ´åˆ :

    AJP13_FORWARD_REQUEST :=
        prefix_code      (byte) 0x02 = JK_AJP13_FORWARD_REQUEST
        method           (byte)
        protocol         (string)
        req_uri          (string)
        remote_addr      (string)
        remote_host      (string)
        server_name      (string)
        server_port      (integer)
        is_ssl           (boolean)
        num_headers      (integer)
        request_headers *(req_header_name req_header_value)
        attributes      *(attribut_name attribute_value)
        request_terminator (byte) OxFF

    request_headers ã¯æ¬¡ã®ã‚ˆã†ãªæ§‹é€ ã«ãªã£ã¦ã„ã¾ã™ :

    req_header_name := 
        sc_req_header_name | (string)  [see below for how this is parsed]
    
    sc_req_header_name := 0xA0xx (integer)
    
    req_header_value := (string)

    属性 ã¯ã‚ªãƒ—ションã§ã€æ¬¡ã®ã‚ˆã†ãªæ§‹é€ ã‚’ã—ã¦ã„ã¾ã™ :

    attribute_name := sc_a_name | (sc_a_req_attribute string)
    
    attribute_value := (string)

    ã‚‚ã£ã¨ã‚‚é‡è¦ãªãƒ˜ãƒƒãƒ€ã¯ content-length ã ã¨ã„ã†ã“ã¨ã« 注æ„ã—ã¦ãã ã•ã„ã€‚ã‚³ãƒ³ãƒ†ãƒŠã¯æ¬¡ã®ãƒ‘ケットを探ã™ã‹ã©ã†ã‹ã‚’〠ãã‚Œã‚’è¦‹ã¦æ±ºã‚ã‚‹ã‹ã‚‰ã§ã™ã€‚

    Forward Request è¦ç´ ã®è©³ç´°ãªèª¬æ˜Ž

    Request prefix

    リクエストã«ã¤ã„ã¦ã¯å…¨ã¦ã€ã“ã®å€¤ã¯ 2 ã«ãªã‚Šã¾ã™ã€‚ä»–ã® Prefix コードã®è©³ç´°ã¯ 上記をã”覧ãã ã•ã„。

    Method

    HTTP メソッド㯠1 ãƒã‚¤ãƒˆã«ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れã¾ã™ :

    Command NameCode
    OPTIONS1
    GET2
    HEAD3
    POST4
    PUT5
    DELETE6
    TRACE7
    PROPFIND8
    PROPPATCH9
    MKCOL10
    COPY11
    MOVE12
    LOCK13
    UNLOCK14
    ACL15
    REPORT16
    VERSION-CONTROL17
    CHECKIN18
    CHECKOUT19
    UNCHECKOUT20
    SEARCH21
    MKWORKSPACE22
    UPDATE23
    LABEL24
    MERGE25
    BASELINE_CONTROL26
    MKACTIVITY27

    今後㮠ajp13 ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯ã€ã“ã®ä¸€è¦§ã«ãªã„ã€ä»Šå¾Œè¿½åŠ ã•れるメソッドを é€ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。

    protocol, req_uri, remote_addr, remote_host, server_name, server_port, is_ssl

    ã“れらã¯ã¾ã•ã«æ–‡å­—通りã®ã‚‚ã®ã§ã™ã€‚ã©ã‚Œã‚‚å¿…è¦ã§ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æ¯Žå›žã«ã¤ã é€ã‚‰ã‚Œã¾ã™ã€‚

    Headers

    request_headers ã®æ§‹é€ ã¯æ¬¡ã®ã‚ˆã†ãªã‚‚ã®ã§ã™ : ã¾ãšãƒ˜ãƒƒãƒ€ã®æ•° num_headers ãŒã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れã¾ã™ã€‚ 次ã«ãƒ˜ãƒƒãƒ€å req_header_name / 値 req_header_value ã®çµ„ãŒç¶šãã¾ã™ã€‚効率ã®ãŸã‚ã€ä¸€èˆ¬çš„ãªãƒ˜ãƒƒãƒ€ã¯æ•´æ•°ã§ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã—ã¦è»¢é€ã—ã¾ã™ã€‚ ヘッダåãŒåŸºæœ¬ãƒ˜ãƒƒãƒ€ã®ä¸€è¦§ã«ç„¡ã„å ´åˆã¯ã€é€šå¸¸é€šã‚Š (文字列ã¨ã—ã¦ã€é•·ã• プレフィックス付ãã§) 転é€ã•れã¾ã™ã€‚一般的ãªãƒ˜ãƒƒãƒ€ sc_req_header_name ã®ä¸€è¦§ã¨ãã®ã‚³ãƒ¼ãƒ‰ã¯æ¬¡ã®é€šã‚Šã§ã™ (ã©ã‚Œã‚‚å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã™) :

    åå‰ã‚³ãƒ¼ãƒ‰ã®å€¤ã‚³ãƒ¼ãƒ‰å
    accept0xA001SC_REQ_ACCEPT
    accept-charset0xA002SC_REQ_ACCEPT_CHARSET
    accept-encoding0xA003SC_REQ_ACCEPT_ENCODING
    accept-language0xA004SC_REQ_ACCEPT_LANGUAGE
    authorization0xA005SC_REQ_AUTHORIZATION
    connection0xA006SC_REQ_CONNECTION
    content-type0xA007SC_REQ_CONTENT_TYPE
    content-length0xA008SC_REQ_CONTENT_LENGTH
    cookie0xA009SC_REQ_COOKIE
    cookie20xA00ASC_REQ_COOKIE2
    host0xA00BSC_REQ_HOST
    pragma0xA00CSC_REQ_PRAGMA
    referer0xA00DSC_REQ_REFERER
    user-agent0xA00ESC_REQ_USER_AGENT

    ã“れを読ã¿è¾¼ã‚€ Java ã®ã‚³ãƒ¼ãƒ‰ã§ã¯ã€æœ€åˆã® 2 ãƒã‚¤ãƒˆæ•´æ•°ã‚’å–り込ã¿ã€ ç›®å°ã«ãªã‚‹ãƒã‚¤ãƒˆ '0xA0' ã§ã‚れã°ã€ãƒ˜ãƒƒãƒ€åã®é…列㮠インデックスを使ã„ã¾ã™ã€‚先頭ãƒã‚¤ãƒˆãŒ 0xA0 ã§ãªã„å ´åˆã¯ã€ 先頭 2 ãƒã‚¤ãƒˆã¯æ–‡å­—åˆ—é•·ã‚’è¡¨ã™æ•´æ•°ã§ã‚ã‚‹ã¨è§£é‡ˆã—ã€èª­ã¿è¾¼ã¿ã¯ã˜ã‚ã¾ã™ã€‚

    ヘッダåã®é•·ã•㯠0x9999 (==0xA000 -1) 以上ã«ãªã‚‰ãªã„ã¨ã„ㆠ仮定ã®ä¸‹ã«å‹•ã„ã¦ã„ã¦ã€å°‘ã—ã‚ã„ã¾ã„ã§ã™ãŒåˆç†çš„ãªæŒ™å‹•ã«ãªã£ã¦ã„ã¾ã™ã€‚

    注:

    content-length ヘッダã¯ã¨ã¦ã‚‚é‡è¦ã§ã™ã€‚ 存在ã—ã¦ã„ã¦éžã‚¼ãƒ­ã§ã‚れã°ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ã¯ãƒœãƒ‡ã‚£ãŒã‚ã‚‹ (例ãˆã° POST リクエスト) ã¨æŽ¨æ¸¬ã—ã€ãã®ãƒœãƒ‡ã‚£ã‚’å–り込むãŸã‚㫠直後ã®ãƒ‘ケットを入力ストリームã‹ã‚‰èª­ã¿è¾¼ã¿ã¯ã˜ã‚ã¾ã™ã€‚

    属性

    ? プレフィックスã§å§‹ã¾ã‚‹å±žæ€§ (例 ?context) ã¯ã€‚çœç•¥å¯èƒ½ã§ã™ã€‚ãれãžã‚Œå±žæ€§ã®åž‹ã‚’示㙠1 ãƒã‚¤ãƒˆã®ã‚³ãƒ¼ãƒ‰ã¨ã€ 値(æ–‡å­—åˆ—ã‹æ•´æ•°)ãŒç¶šãã¾ã™ã€‚ ã“れらã¯é †ä¸åŒã§é€ã‚‹ã“ã¨ãŒã§ãã¾ã™ (C ã®ã‚³ãƒ¼ãƒ‰ã¯å¸¸ã«ä¸‹ã®ä¸€è¦§é †ã« é€ã‚‹ã‚ˆã†ã§ã™ãŒ) 。 オプションã®å±žæ€§ã®ãƒªã‚¹ãƒˆã®æœ€å¾Œã«ã¯ã€ç‰¹åˆ¥ãªçµ‚了コードãŒé€ã‚‰ã‚Œã¾ã™ã€‚ コードã®ä¸€è¦§ã¯ :

    InformationCode ValueType Of ValueNote
    ?context0x01-未実装
    ?servlet_path0x02-未実装
    ?remote_user0x03String
    ?auth_type0x04String
    ?query_string0x05String
    ?jvm_route0x06String
    ?ssl_cert0x07String
    ?ssl_cipher0x08String
    ?ssl_session0x09String
    ?req_attribute0x0AStringName (the name of the attribute follows)
    ?ssl_key_size0x0BInteger
    are_done0xFF-request_terminator

    context 㨠servlet_path ã¯ç¾åœ¨ã® C 㮠コードã§ã¯ã‚»ãƒƒãƒˆã•れã¦ã„ã¾ã›ã‚“。ã¾ãŸã€ã»ã¨ã‚“ã©ã® Java ã®ã‚³ãƒ¼ãƒ‰ã§ã‚‚〠ã“ã®ãƒ•ィールドã§ä½•ãŒé€ã‚‰ã‚Œã¦ã‚‚無視ã•れã¾ã™ (ã“れらã®ã‚³ãƒ¼ãƒ‰ã®å¾Œã«æ–‡å­—列㌠é€ã‚‰ã‚Œã‚‹ã¨å£Šã‚Œã‚‹ã‚‚ã®ã‚‚ã‚りã¾ã™)。 ã“れãŒãƒã‚°ãªã®ã‹ã€å˜ã«æœªå®Ÿè£…ãªã®ã‹ã€æ­´å²çš„çµŒç·¯ã§æ®‹ã£ã¦ã„るコードãªã®ã‹ 分ã‹ã‚Šã¾ã›ã‚“ãŒã€ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã®ä¸¡å´ã¨ã‚‚ã§è¦‹å½“ãŸã‚Šã¾ã›ã‚“。

    remote_user 㨠auth_type ã¯ãŠãらã HTTP レベルã®èªè¨¼ã‚’å‚ç…§ã—ã¦ã„ã¦ã€ãƒªãƒ¢ãƒ¼ãƒˆãƒ¦ãƒ¼ã‚¶ã®ãƒ¦ãƒ¼ã‚¶åã¨èªè¨¼ã«ä½¿ç”¨ã—㟠タイプ (例 Basic, Digest) ã«ã¤ã„ã¦ã‚„りå–りã—ã¾ã™ã€‚

    query_string, ssl_cert, ssl_cipher, ssl_session 㯠HTTP 㨠HTTPS ã®å¯¾å¿œã™ã‚‹éƒ¨åˆ†ã‚’å‚ç…§ã—ã¾ã™ã€‚

    jvm_route ã¯ã‚¹ãƒ†ã‚£ãƒƒã‚­ãƒ¼ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®ã‚µãƒãƒ¼ãƒˆâ€•― ロードãƒãƒ©ãƒ³ã‚¹ã—ã¦ã„る複数ã®ã‚µãƒ¼ãƒä¸­ã®ç‰¹å®šã® Tomcat インスタンスã¨ã€ ユーザã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã¨ã‚’ç´ä»˜ã‘る機能――ã«ä½¿ã‚れã¾ã™ã€‚

    ã“ã®åŸºæœ¬å±žæ€§ä¸€è¦§ã«ç„¡ã„ã‚‚ã®ã«ã¤ã„ã¦ã¯ã€req_attribute コード 0x0A 経由ã§å±žæ€§ã‚’何個ã§ã‚‚é€ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ 属性ã®åå‰ã¨å€¤ã®æ–‡å­—列ã®çµ„ã‚’ã€ãれãžã‚Œã“ã®ã‚³ãƒ¼ãƒ‰ã®ç›´å¾Œã«é€ã‚Šã¾ã™ã€‚ 環境変数ã¯ã“ã®æ–¹æ³•ã§ä¼ãˆã‚‰ã‚Œã¾ã™ã€‚

    最後ã«å±žæ€§ãŒå…¨ã¦é€ä¿¡ã•れãŸå¾Œã«ã€å±žæ€§ã®çµ‚端を示㙠0xFF ãŒé€å‡ºã•れã¾ã™ã€‚ã“ã®ä¿¡å·ã¯å±žæ€§ã®ä¸€è¦§ã®çµ‚ã‚りを示ã™ã¨åŒæ™‚ã«ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆ パケットã®çµ‚端をも示ã—ã¦ã„ã¾ã™ã€‚

    top

    レスãƒãƒ³ã‚¹ãƒ‘ケット構造

    コンテナãŒã‚µãƒ¼ãƒã«é€ã‚Šè¿”ã™ã“ã¨ã®ã§ãるメッセージ:

    AJP13_SEND_BODY_CHUNK :=
      prefix_code   3
      chunk_length  (integer)
      chunk        *(byte)
      chunk_terminator (byte) Ox00
    
    AJP13_SEND_HEADERS :=
      prefix_code       4
      http_status_code  (integer)
      http_status_msg   (string)
      num_headers       (integer)
      response_headers *(res_header_name header_value)
    
    res_header_name :=
        sc_res_header_name | (string)   [see below for how this is parsed]
    
    sc_res_header_name := 0xA0 (byte)
    
    header_value := (string)
    
    AJP13_END_RESPONSE :=
      prefix_code       5
      reuse             (boolean)
    
    
    AJP13_GET_BODY_CHUNK :=
      prefix_code       6
      requested_length  (integer)

    詳細 :

    Send Body Chunk

    ãƒãƒ£ãƒ³ã‚¯ã¯åŸºæœ¬çš„ã«ã¯ãƒã‚¤ãƒŠãƒªãƒ‡ãƒ¼ã‚¿ã§ã€ãƒ–ラウザã«ç›´æŽ¥é€ã‚‰ã‚Œã¾ã™ã€‚

    Send Headers

    ステータスコードã¨ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒé€šå¸¸ã® HTTP ã®é€šä¿¡ã«ã¯ã‚りã¾ã™ (例 200 㨠OK)。レスãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€åã¯ã€ リクエストヘッダåã¨åŒæ§˜ã®æ–¹æ³•ã§ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れã¾ã™ã€‚ ã‚³ãƒ¼ãƒ‰ã¨æ–‡å­—列ã®åˆ¤åˆ¥æ–¹æ³•ã®è©³ç´°ã«é–¢ã—ã¦ã¯ã€ä¸Šè¨˜ã® header_encoding ã‚’å‚ç…§ã—ã¦ãã ã•ã„。 一般的ãªãƒ˜ãƒƒãƒ€ã®ã‚³ãƒ¼ãƒ‰ã¯ :

    åå‰ã‚³ãƒ¼ãƒ‰ã®å€¤
    Content-Type0xA001
    Content-Language0xA002
    Content-Length0xA003
    Date0xA004
    Last-Modified0xA005
    Location0xA006
    Set-Cookie0xA007
    Set-Cookie20xA008
    Servlet-Engine0xA009
    Status0xA00A
    WWW-Authenticate0xA00B

    コードã‹ãƒ˜ãƒƒãƒ€æ–‡å­—列ã®ç›´å¾Œã«ã¯ã€ãƒ˜ãƒƒãƒ€ã®å€¤ãŒã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れã¾ã™ã€‚

    End Response

    リクエスト処ç†ã‚µã‚¤ã‚¯ãƒ«ã®çµ‚了を知らã›ã¾ã™ã€‚reuse フラグãŒçœŸ (==1) ã®å ´åˆã€ç¾åœ¨ä½¿ç”¨ã—ã¦ã„ã‚‹ TCP コãƒã‚¯ã‚·ãƒ§ãƒ³ã¯æ¬¡ã®æ–°ã—ㄠリクエストã«ä½¿ãˆã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚reuse ãŒå½ (C ã®ã‚³ãƒ¼ãƒ‰ã§ã¯ 1 以外ã®å…¨ã¦) ã®å ´åˆã¯ã€ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’é–‰ã˜ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚

    Get Body Chunk

    (ボディã®ã‚µã‚¤ã‚ºãŒå¤§ãã™ãŽã¦æœ€åˆã®ãƒ‘ケットã«åŽã¾ã‚‰ãªã„å ´åˆã‚„〠リクエストãŒãƒãƒ£ãƒ³ã‚¯è»¢é€ã•れãŸå ´åˆãªã©ã«ã¯ã€) コンテナã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‹ã‚‰ã® データ読ã¿è¾¼ã¿è¦æ±‚ã‚’ã—ã¾ã™ã€‚サーãƒå´ã¯ãれã«å¯¾ã—ã¦ã€æœ€å° request_length 最大 (8186 (8 Kbytes - 6)) ã®ç¯„囲ã§ã€æœªè»¢é€ã§æ®‹ã£ã¦ã„るリクエストボディã®å¤§ãã•ã®ãƒ‡ãƒ¼ã‚¿ã‚’ é€ã‚Šè¿”ã—ã¾ã™ã€‚
    ボディã«ãã‚Œä»¥ä¸Šãƒ‡ãƒ¼ã‚¿ãŒæ®‹ã£ã¦ã„ãªã„å ´åˆ (ã¤ã¾ã‚Šã‚µãƒ¼ãƒ–ãƒ¬ãƒƒãƒˆãŒ ãƒœãƒ‡ã‚£ã®æœ€å¾Œã‚’è¶…ãˆã¦èª­ã¿è¾¼ã‚‚ã†ã¨ã—ãŸå ´åˆ) ã€ã‚µãƒ¼ãƒã¯ ペイロード長 0 ã®ç©ºãƒ‘ケット(0x12,0x34,0x00,0x00) ã‚’é€ã‚Šè¿”ã—ã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_speling.html0000644000000000000500000000062313362070302017403 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_speling.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_speling.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_speling.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_speling.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_slotmem_shm.html0000644000000000000500000000034213362070302020267 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_slotmem_shm.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_slotmem_shm.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_unixd.html.en0000644000000000000500000003321713412755316017512 0ustar rootsrc mod_unixd - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_unixd

    Available Languages:  en  |  fr  |  tr 

    Description:Basic (required) security for Unix-family platforms.
    Status:Base
    Module Identifier:unixd_module
    Source File:mod_unixd.c
    top

    ChrootDir Directive

    Description:Directory for apache to run chroot(8) after startup.
    Syntax:ChrootDir /path/to/directory
    Default:none
    Context:server config
    Status:Base
    Module:mod_unixd
    Compatibility:Available in Apache 2.2.10 and later

    This directive tells the server to chroot(8) to the specified directory after startup, but before accepting requests over the 'net.

    Note that running the server under chroot is not simple, and requires additional setup, particularly if you are running scripts such as CGI or PHP. Please make sure you are properly familiar with the operation of chroot before attempting to use this feature.

    top

    Group Directive

    Description:Group under which the server will answer requests
    Syntax:Group unix-group
    Default:Group #-1
    Context:server config
    Status:Base
    Module:mod_unixd

    The Group directive sets the group under which the server will answer requests. In order to use this directive, the server must be run initially as root. If you start the server as a non-root user, it will fail to change to the specified group, and will instead continue to run as the group of the original user. Unix-group is one of:

    A group name
    Refers to the given group by name.
    # followed by a group number.
    Refers to a group by its number.

    Example

    Group www-group

    It is recommended that you set up a new group specifically for running the server. Some admins use user nobody, but this is not always possible or desirable.

    Security

    Don't set Group (or User) to root unless you know exactly what you are doing, and what the dangers are.

    See also

    top

    Suexec Directive

    Description:Enable or disable the suEXEC feature
    Syntax:Suexec On|Off
    Default:On if suexec binary exists with proper owner and mode, Off otherwise
    Context:server config
    Status:Base
    Module:mod_unixd

    When On, startup will fail if the suexec binary doesn't exist or has an invalid owner or file mode.

    When Off, suEXEC will be disabled even if the suexec binary exists and has a valid owner and file mode.

    top

    User Directive

    Description:The userid under which the server will answer requests
    Syntax:User unix-userid
    Default:User #-1
    Context:server config
    Status:Base
    Module:mod_unixd

    The User directive sets the user ID as which the server will answer requests. In order to use this directive, the server must be run initially as root. If you start the server as a non-root user, it will fail to change to the lesser privileged user, and will instead continue to run as that original user. If you do start the server as root, then it is normal for the parent process to remain running as root. Unix-userid is one of:

    A username
    Refers to the given user by name.
    # followed by a user number.
    Refers to a user by its number.

    The user should have no privileges that result in it being able to access files that are not intended to be visible to the outside world, and similarly, the user should not be able to execute code that is not meant for HTTP requests. It is recommended that you set up a new user and group specifically for running the server. Some admins use user nobody, but this is not always desirable, since the nobody user can have other uses on the system.

    Security

    Don't set User (or Group) to root unless you know exactly what you are doing, and what the dangers are.

    See also

    Available Languages:  en  |  fr  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cgi.html.fr.utf80000644000000000000500000005007413412755316020017 0ustar rootsrc mod_cgi - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_cgi

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Exécution des scripts CGI
    Statut:Base
    Identificateur de Module:cgi_module
    Fichier Source:mod_cgi.c

    Sommaire

    Tout fichier pris en compte par le gestionnaire cgi-script sera traité en tant que script CGI et exécuté par le serveur, sa sortie étant renvoyée au client. Les fichiers sont associés à ce gestionnaire soit parce qu'ils possèdent un nom contenant une extension définie par la directive AddHandler, soit parce qu'ils se situent dans un répertoire défini par une directive ScriptAlias.

    Comme introduction à l'utilisation des scripts CGI avec Apache, voir notre tutoriel Les contenus dynamiques avec CGI.

    Il est recommandé d'utiliser le module mod_cgid à la place de mod_cgi lorsqu'on utilise un module MPM multi-threadé sous Unix. Vus de l'utilisateur, les deux modules sont pratiquement identiques.

    À des fins de compatibilité ascendante, le gestionnaire cgi-script sera aussi activé pour tout fichier possédant le type MIME application/x-httpd-cgi. L'utilisation du type MIME magic est obsolète.

    top

    Les variables d'environnement CGI

    Le serveur va définir les variables d'environnement CGI comme décrit dans la Spécification CGI, de la manière suivante :

    PATH_INFO
    Cette variable ne sera pas disponible si la directive AcceptPathInfo est explicitement définie à off. Par défaut, si la directive AcceptPathInfo n'est pas définie, mod_cgi acceptera des informations de chemin (en ajoutant /infos/chemin après le nom du script dans l'URI), alors que le serveur de base retournera une erreur 404 NOT FOUND pour les requêtes contenant des informations de chemin supplémentaires. Ne pas définir la directive AcceptPathInfo a le même effet sur les requêtes avec mod_cgi que de la définir à On.
    REMOTE_HOST
    Cette variable ne sera définie que si la directive HostnameLookups est définie à on (elle est à off par défaut), et si une recherche DNS inverse sur l'adresse IP de l'hôte client aboutit effectivement à un nom d'hôte.
    REMOTE_IDENT
    Cette variable ne sera définie que si la directive IdentityCheck est définie à on, et si l'hôte client supporte le protocole ident. Notez que l'on ne peut accorder une confiance aveugle au contenu de cette variable car il peut être aisément falsifié, et si un mandataire s'intercale entre le client et le serveur, il est totalement inutilisable.
    REMOTE_USER
    Cette variable ne sera définie que si le script CGI fait l'objet d'une authentification.

    Ce module utilise aussi les fonctions de base ap_add_common_vars et ap_add_cgi_vars pour ajouter des variables d'environnement comme :

    DOCUMENT_ROOT
    Prend la valeur définie par la directive DocumentRoot.
    SERVER_NAME
    Le nom de domaine pleinement qualifié pour la requête considérée
    SERVER_ADDR
    L'adresse IP du serveur virtuel qui traite la requête
    SERVER_ADMIN
    Prend la valeur définie par la directive ServerAdmin.

    Pour une liste exhaustive de ces variables, vous pouvez écrire un script CGI basique qui extrait toutes les variables d'environnement passées par Apache selon un format adapté.

    top

    Débogage des scripts CGI

    Le débogage des scripts CGI était difficile par le passé, principalement parce qu'il n'était pas possible d'étudier la sortie (sortie standard et erreurs) des scripts dont l'exécution échouait. Les directives qui suivent permettent une journalisation plus détaillée des erreurs.

    Format du fichier journal CGI

    Lorsqu'il est configuré, le journal des erreurs CGI enregistre la sortie de tout programme CGI dont l'exécution ne s'effectue pas correctement. Un script CGI dont l'exécution échoue provoque la journalisation d'une grande quantité d'informations. Les deux premières lignes possèdent toujours le format suivant :

    %% [date] requête
    %% état HTTP nom du script CGI

    Si le script CGI n'a pas pu démarrer, le fichier journal contiendra les deux lignes supplémentaires suivantes :

    %%erreur
    message d'erreur

    Par contre, si l'erreur provient du renvoi par le script d'informations incorrectes dans les en-têtes (dû souvent à une bogue du script), les informations suivantes sont journalisées :

    %requête
    Tous les en-têtes de requête HTTP reçus
    Les entités POST ou PUT (s'il en existe)
    %réponse
    Tous les en-têtes générés par le script CGI
    %stdout
    la sortie standard CGI
    %stderr
    la sortie d'erreurs standard CGI

    (Les parties %stdout et %stderr seront absentes si le script n'a rien envoyé sur la sortie standard ou la sortie d'erreurs).

    top

    Directive ScriptLog

    Description:Chemin du fichier journal des erreurs du script CGI
    Syntaxe:ScriptLog chemin fichier
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_cgi, mod_cgid

    La directive ScriptLog permet de définir le chemin du fichier journal des erreurs du script CGI. Si cette directive n'est pas définie, aucune journalisation des erreurs n'est effectuée. Si elle est définie, toute erreur CGI sera enregistrée dans le fichier dont le nom est fourni en argument. S'il s'agit d'un chemin de fichier relatif, il est considéré par rapport au répertoire défini par la directive ServerRoot.

    Exemple

    ScriptLog logs/cgi_log

    Ce journal sera ouvert par l'utilisateur sous lequel les processus enfants s'exécutent, c'est à dire l'utilisateur spécifié par la directive du serveur User. Ceci implique que le répertoire dans lequel se trouve le journal doit être accessible en écriture pour cet utilisateur, ou bien que le fichier est créé manuellement et accessible en écriture pour cet utilisateur. Si vous placez le journal du script dans votre répertoire principal des journaux, ne modifiez JAMAIS les permissions de ce dernier afin de le le rendre accessible en écriture par l'utilisateur sous lequel les processus enfants s'exécutent.

    Notez que l'on ne doit activer la journalisation des scripts qu'à des fins de débogage lors de l'écriture de scripts CGI, et non de manière permanente sur un serveur en production. Elle n'est pas optimisée en terme de performances et d'efficacité, et peut présenter des problèmes de sécurité si on l'utilise dans un cadre autre que celui pour lequel elle a été conçue.

    top

    Directive ScriptLogBuffer

    Description:Taille maximale des requêtes PUT ou POST qui seront enregistrées dans le journal du script
    Syntaxe:ScriptLogBuffer octets
    Défaut:ScriptLogBuffer 1024
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_cgi, mod_cgid

    Cette directive permet de limiter la taille du corps de toute entité PUT ou POST qui sera enregistrée dans le journal, afin de prévenir une croissance trop importante et trop rapide du fichier journal due à la réception de corps de requête de grandes tailles. Cette directive permet de modifier cette taille maximale, dont la valeur par défaut est de 1024 octets.

    top

    Directive ScriptLogLength

    Description:Taille maximale du fichier journal des scripts CGI
    Syntaxe:ScriptLogLength octets
    Défaut:ScriptLogLength 10385760
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_cgi, mod_cgid

    La directive ScriptLogLength permet de définir la taille maximale du fichier journal des scripts CGI. Comme le fichier journal accumule une grande quantité d'informations par erreur CGI (tous les en-têtes de la requête, toutes les sorties du script), il peut vite atteindre une grande taille. En limitant la taille du fichier, cette directive permet d'éviter les problèmes que causerait sa croissance sans limites. Lorsque le fichier a atteint cette taille maximale, plus aucune information n'y est enregistrée.

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_auth_digest.html0000644000000000000500000000050413362070302020240 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_auth_digest.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_auth_digest.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_auth_digest.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_dav_fs.html.ja.utf80000644000000000000500000002240413412755316020476 0ustar rootsrc mod_dav_fs - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_dav_fs

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:mod_dav ã®ãŸã‚ã®ãƒ•ァイルシステムプロãƒã‚¤ãƒ€
    ステータス:Extension
    モジュール識別å­:dav_fs_module
    ソースファイル:mod_dav_fs.c

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ mod_dav ã®ã‚µãƒ¼ãƒ“スを必è¦ã¨ã—ã¾ã™ã€‚mod_dav ã®ã‚µãƒãƒ¼ãƒˆãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ã—ã¦å‹•作ã—ã€ã‚µãƒ¼ãƒãƒ•ァイルシステム上㫠ä½ç½®ã™ã‚‹ãƒªã‚½ãƒ¼ã‚¹ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’æä¾›ã—ã¾ã™ã€‚ã“ã®ãƒ—ロãƒã‚¤ãƒ€ã®æ­£å¼ãªåå‰ã¯ filesystem ã§ã™ã€‚mod_dav ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ãƒ—ロãƒã‚¤ãƒ€ã¯ Dav ディレクティブを使用ã—ã¦èµ·å‹•ã•れã¾ã™ã€‚

    例

    Dav filesystem

    filesystem 㯠mod_dav ã®ãƒ‡ãƒ•ォルトプロãƒã‚¤ãƒ€ã«ãªã£ã¦ã„ã¾ã™ã‹ã‚‰ã€ä»£ã‚りã«å˜ã« On ã¨æŒ‡å®šã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    Support Apache!

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    DavLockDB ディレクティブ

    説明:DAV ロックデータベースã®ä½ç½®
    æ§‹æ–‡:DavLockDB file-path
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_dav_fs

    ロックデータベースã¸ã®ãƒ•ãƒ«ãƒ‘ã‚¹ã‚’ã€æ‹¡å¼µå­ã‚’除ã„ãŸå½¢ã§ 指定ã™ã‚‹ã«ã¯ã€DavLockDB を使ã„ã¾ã™ã€‚パスãŒçµ¶å¯¾ãƒ‘スã§ãªã‘れã°ã€ServerRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨è§£é‡ˆã•れã¾ã™ã€‚ mod_dav_fs 実装ã§ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ­ãƒƒã‚¯ã‚’ 追跡ã™ã‚‹ãŸã‚ã« SDBM データベースを使ã„ã¾ã™ã€‚

    例

    DavLockDB logs/DavLock

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_log_config.html.en0000644000000000000500000010705513444161410020462 0ustar rootsrc mod_log_config - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_log_config

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Logging of the requests made to the server
    Status:Base
    Module Identifier:log_config_module
    Source File:mod_log_config.c

    Summary

    This module provides for flexible logging of client requests. Logs are written in a customizable format, and may be written directly to a file, or to an external program. Conditional logging is provided so that individual requests may be included or excluded from the logs based on characteristics of the request.

    Three directives are provided by this module: TransferLog to create a log file, LogFormat to set a custom format, and CustomLog to define a log file and format in one step. The TransferLog and CustomLog directives can be used multiple times in each server to cause each request to be logged to multiple files.

    top

    Custom Log Formats

    The format argument to the LogFormat and CustomLog directives is a string. This string is used to log each request to the log file. It can contain literal characters copied into the log files and the C-style control characters "\n" and "\t" to represent new-lines and tabs. Literal quotes and backslashes should be escaped with backslashes.

    The characteristics of the request itself are logged by placing "%" directives in the format string, which are replaced in the log file by the values as follows:

    Format String Description
    %% The percent sign.
    %a Client IP address of the request (see the mod_remoteip module).
    %{c}a Underlying peer IP address of the connection (see the mod_remoteip module).
    %A Local IP-address.
    %B Size of response in bytes, excluding HTTP headers.
    %b Size of response in bytes, excluding HTTP headers. In CLF format, i.e. a '-' rather than a 0 when no bytes are sent.
    %{VARNAME}C The contents of cookie VARNAME in the request sent to the server. Only version 0 cookies are fully supported.
    %D The time taken to serve the request, in microseconds.
    %{VARNAME}e The contents of the environment variable VARNAME.
    %f Filename.
    %h Remote hostname. Will log the IP address if HostnameLookups is set to Off, which is the default. If it logs the hostname for only a few hosts, you probably have access control directives mentioning them by name. See the Require host documentation.
    %{c}h Like %h, but always reports on the hostname of the underlying TCP connection and not any modifications to the remote hostname by modules like mod_remoteip.
    %H The request protocol.
    %{VARNAME}i The contents of VARNAME: header line(s) in the request sent to the server. Changes made by other modules (e.g. mod_headers) affect this. If you're interested in what the request header was prior to when most modules would have modified it, use mod_setenvif to copy the header into an internal environment variable and log that value with the %{VARNAME}e described above.
    %k Number of keepalive requests handled on this connection. Interesting if KeepAlive is being used, so that, for example, a '1' means the first keepalive request after the initial one, '2' the second, etc...; otherwise this is always 0 (indicating the initial request).
    %l Remote logname (from identd, if supplied). This will return a dash unless mod_ident is present and IdentityCheck is set On.
    %L The request log ID from the error log (or '-' if nothing has been logged to the error log for this request). Look for the matching error log line to see what request caused what error.
    %m The request method.
    %{VARNAME}n The contents of note VARNAME from another module.
    %{VARNAME}o The contents of VARNAME: header line(s) in the reply.
    %p The canonical port of the server serving the request.
    %{format}p The canonical port of the server serving the request, or the server's actual port, or the client's actual port. Valid formats are canonical, local, or remote.
    %P The process ID of the child that serviced the request.
    %{format}P The process ID or thread ID of the child that serviced the request. Valid formats are pid, tid, and hextid. hextid requires APR 1.2.0 or higher.
    %q The query string (prepended with a ? if a query string exists, otherwise an empty string).
    %r First line of request.
    %R The handler generating the response (if any).
    %s Status. For requests that have been internally redirected, this is the status of the original request. Use %>s for the final status.
    %t Time the request was received, in the format [18/Sep/2011:19:18:28 -0400]. The last number indicates the timezone offset from GMT
    %{format}t The time, in the form given by format, which should be in an extended strftime(3) format (potentially localized). If the format starts with begin: (default) the time is taken at the beginning of the request processing. If it starts with end: it is the time when the log entry gets written, close to the end of the request processing. In addition to the formats supported by strftime(3), the following format tokens are supported:
    secnumber of seconds since the Epoch
    msecnumber of milliseconds since the Epoch
    usecnumber of microseconds since the Epoch
    msec_fracmillisecond fraction
    usec_fracmicrosecond fraction
    These tokens can not be combined with each other or strftime(3) formatting in the same format string. You can use multiple %{format}t tokens instead.
    %T The time taken to serve the request, in seconds.
    %{UNIT}T The time taken to serve the request, in a time unit given by UNIT. Valid units are ms for milliseconds, us for microseconds, and s for seconds. Using s gives the same result as %T without any format; using us gives the same result as %D. Combining %T with a unit is available in 2.4.13 and later.
    %u Remote user if the request was authenticated. May be bogus if return status (%s) is 401 (unauthorized).
    %U The URL path requested, not including any query string.
    %v The canonical ServerName of the server serving the request.
    %V The server name according to the UseCanonicalName setting.
    %X Connection status when response is completed:
    X = Connection aborted before the response completed.
    + = Connection may be kept alive after the response is sent.
    - = Connection will be closed after the response is sent.
    %I Bytes received, including request and headers. Cannot be zero. You need to enable mod_logio to use this.
    %O Bytes sent, including headers. May be zero in rare cases such as when a request is aborted before a response is sent. You need to enable mod_logio to use this.
    %S Bytes transferred (received and sent), including request and headers, cannot be zero. This is the combination of %I and %O. You need to enable mod_logio to use this.
    %{VARNAME}^ti The contents of VARNAME: trailer line(s) in the request sent to the server.
    %{VARNAME}^to The contents of VARNAME: trailer line(s) in the response sent from the server.

    Modifiers

    Particular items can be restricted to print only for responses with specific HTTP status codes by placing a comma-separated list of status codes immediately following the "%". The status code list may be preceded by a "!" to indicate negation.

    Format String Meaning
    %400,501{User-agent}i Logs User-agent on 400 errors and 501 errors only. For other status codes, the literal string "-" will be logged.
    %!200,304,302{Referer}i Logs Referer on all requests that do not return one of the three specified codes, "-" otherwise.

    The modifiers "<" and ">" can be used for requests that have been internally redirected to choose whether the original or final (respectively) request should be consulted. By default, the % directives %s, %U, %T, %D, and %r look at the original request while all others look at the final request. So for example, %>s can be used to record the final status of the request and %<u can be used to record the original authenticated user on a request that is internally redirected to an unauthenticated resource.

    Format Notes

    For security reasons, starting with version 2.0.46, non-printable and other special characters in %r, %i and %o are escaped using \xhh sequences, where hh stands for the hexadecimal representation of the raw byte. Exceptions from this rule are " and \, which are escaped by prepending a backslash, and all whitespace characters, which are written in their C-style notation (\n, \t, etc). In versions prior to 2.0.46, no escaping was performed on these strings so you had to be quite careful when dealing with raw log files.

    Since httpd 2.0, unlike 1.3, the %b and %B format strings do not represent the number of bytes sent to the client, but simply the size in bytes of the HTTP response (which will differ, for instance, if the connection is aborted, or if SSL is used). The %O format provided by mod_logio will log the actual number of bytes sent over the network.

    Note: mod_cache is implemented as a quick-handler and not as a standard handler. Therefore, the %R format string will not return any handler information when content caching is involved.

    Examples

    Some commonly used log format strings are:

    Common Log Format (CLF)
    "%h %l %u %t \"%r\" %>s %b"
    Common Log Format with Virtual Host
    "%v %h %l %u %t \"%r\" %>s %b"
    NCSA extended/combined log format
    "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\""
    Referer log format
    "%{Referer}i -> %U"
    Agent (Browser) log format
    "%{User-agent}i"

    You can use the %{format}t directive multiple times to build up a time format using the extended format tokens like msec_frac:

    Timestamp including milliseconds
    "%{%d/%b/%Y %T}t.%{msec_frac}t %{%z}t"
    top

    Security Considerations

    See the security tips document for details on why your security could be compromised if the directory where logfiles are stored is writable by anyone other than the user that starts the server.

    top

    BufferedLogs Directive

    Description:Buffer log entries in memory before writing to disk
    Syntax:BufferedLogs On|Off
    Default:BufferedLogs Off
    Context:server config
    Status:Base
    Module:mod_log_config

    The BufferedLogs directive causes mod_log_config to store several log entries in memory and write them together to disk, rather than writing them after each request. On some systems, this may result in more efficient disk access and hence higher performance. It may be set only once for the entire server; it cannot be configured per virtual-host.

    This directive should be used with caution as a crash might cause loss of logging data.
    top

    CustomLog Directive

    Description:Sets filename and format of log file
    Syntax:CustomLog file|pipe format|nickname [env=[!]environment-variable| expr=expression]
    Context:server config, virtual host
    Status:Base
    Module:mod_log_config

    The CustomLog directive is used to log requests to the server. A log format is specified, and the logging can optionally be made conditional on request characteristics using environment variables.

    The first argument, which specifies the location to which the logs will be written, can take one of the following two types of values:

    file
    A filename, relative to the ServerRoot.
    pipe
    The pipe character "|", followed by the path to a program to receive the log information on its standard input. See the notes on piped logs for more information.

    Security:

    If a program is used, then it will be run as the user who started httpd. This will be root if the server was started by root; be sure that the program is secure.

    Note

    When entering a file path on non-Unix platforms, care should be taken to make sure that only forward slashed are used even though the platform may allow the use of back slashes. In general it is a good idea to always use forward slashes throughout the configuration files.

    The second argument specifies what will be written to the log file. It can specify either a nickname defined by a previous LogFormat directive, or it can be an explicit format string as described in the log formats section.

    For example, the following two sets of directives have exactly the same effect:

    # CustomLog with format nickname
    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    CustomLog "logs/access_log" common
    
    # CustomLog with explicit format string
    CustomLog "logs/access_log" "%h %l %u %t \"%r\" %>s %b"

    The third argument is optional and controls whether or not to log a particular request. The condition can be the presence or absence (in the case of a 'env=!name' clause) of a particular variable in the server environment. Alternatively, the condition can be expressed as arbitrary boolean expression. If the condition is not satisfied, the request will not be logged. References to HTTP headers in the expression will not cause the header names to be added to the Vary header.

    Environment variables can be set on a per-request basis using the mod_setenvif and/or mod_rewrite modules. For example, if you want to record requests for all GIF images on your server in a separate logfile but not in your main log, you can use:

    SetEnvIf Request_URI \.gif$ gif-image
    CustomLog "gif-requests.log" common env=gif-image
    CustomLog "nongif-requests.log" common env=!gif-image

    Or, to reproduce the behavior of the old RefererIgnore directive, you might use the following:

    SetEnvIf Referer example\.com localreferer
    CustomLog "referer.log" referer env=!localreferer
    top

    GlobalLog Directive

    Description:Sets filename and format of log file
    Syntax:GlobalLogfile|pipe format|nickname [env=[!]environment-variable| expr=expression]
    Context:server config
    Status:Base
    Module:mod_log_config
    Compatibility:Available in Apache HTTP Server 2.4.19 and later

    The GlobalLog directive defines a log shared by the main server configuration and all defined virtual hosts.

    The GlobalLog directive is identical to the CustomLog directive, apart from the following differences:

    • GlobalLog is not valid in virtual host context.
    • GlobalLog is used by virtual hosts that define their own CustomLog, unlike a globally specified CustomLog.
    top

    LogFormat Directive

    Description:Describes a format for use in a log file
    Syntax:LogFormat format|nickname [nickname]
    Default:LogFormat "%h %l %u %t \"%r\" %>s %b"
    Context:server config, virtual host
    Status:Base
    Module:mod_log_config

    This directive specifies the format of the access log file.

    The LogFormat directive can take one of two forms. In the first form, where only one argument is specified, this directive sets the log format which will be used by logs specified in subsequent TransferLog directives. The single argument can specify an explicit format as discussed in the custom log formats section above. Alternatively, it can use a nickname to refer to a log format defined in a previous LogFormat directive as described below.

    The second form of the LogFormat directive associates an explicit format with a nickname. This nickname can then be used in subsequent LogFormat or CustomLog directives rather than repeating the entire format string. A LogFormat directive that defines a nickname does nothing else -- that is, it only defines the nickname, it doesn't actually apply the format and make it the default. Therefore, it will not affect subsequent TransferLog directives. In addition, LogFormat cannot use one nickname to define another nickname. Note that the nickname should not contain percent signs (%).

    Example

    LogFormat "%v %h %l %u %t \"%r\" %>s %b" vhost_common
    top

    TransferLog Directive

    Description:Specify location of a log file
    Syntax:TransferLog file|pipe
    Context:server config, virtual host
    Status:Base
    Module:mod_log_config

    This directive has exactly the same arguments and effect as the CustomLog directive, with the exception that it does not allow the log format to be specified explicitly or for conditional logging of requests. Instead, the log format is determined by the most recently specified LogFormat directive which does not define a nickname. Common Log Format is used if no other format has been specified.

    Example

    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\""
    TransferLog logs/access_log

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_uwsgi.html0000644000000000000500000000020313254517661020351 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy_uwsgi.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 httpd-2.4.41/docs/manual/mod/overrides.html.fr.utf80000644000000000000500000022215513520522576020421 0ustar rootsrc Index par classes des directives autorisées dans .htaccess - Serveur HTTP Apache Version 2.4
    <-

    Index par classes des directives autorisées dans .htaccess

    Langues Disponibles:  en  |  fr 

    Ceci est un index, organisé en classes, des directives autorisées dans les fichiers .htaccess pour différentes définitions de la directive AllowOverride. Il a pour but d'aider les administrateurs à contrôler les privilèges qu'ils accordent aux utilisateurs via les fichiers .htaccess. Pour une présentation de la manière dont fonctionnent les fichiers .htaccess, voir le tutoriel .htaccess.

    Pour déterminer le jeu de directives que la configuration de votre serveur autorise aux utilisateurs dans les fichiers .htaccess :

    1. Commencez par rechercher la présence d'une directive AllowOverrideList dans la section directory concernée. Sa définition vous indiquera la liste des directives autorisées (La valeur par défaut de cette directive est None).
    2. Recherchez ensuite la présence d'une directive AllowOverride dans cette même section (sa valeur par défaut est None). Il y a tout d'abord deux cas particuliers :
      1. Si la directive AllowOverride est définie à All, vous pouvez ajouter toutes les directives indiquées sur cette page à la liste préexistante.
      2. Si la directive AllowOverride est définie à None, inutile d'aller plus loin. Seules les directives indiquées par la directive AllowOverrideList (si elle est présente) seront autorisées.
    3. En dehors de ces deux cas, la directive AllowOverride définit une liste de classes de directives (vous trouverez plus loin le jeu de directives correspondant à chacune de ces classes), et vous pourrez alors les ajouter à la liste définie par la directive AllowOverrideList.
    4. Ajoutez enfin à la liste le jeu de directives toujours autorisées dans les fichiers .htaccess (elles sont listées dans la section All ci-dessous).

    De nombreuses classes de directives sont assez puissantes et peuvent permettre aux utilisateurs des fichiers .htaccess de contrôler une grande partie du serveur. Pour une approche plus sure, définissez AllowOverride None, et utilisez la directive AllowOverrideList pour spécifier la liste exacte de directives que les utilisateurs de fichiers .htaccess pourront utiliser.

    top

    All

    Les directives suivantes sont autorisées dans les fichiers .htaccess, sous réserve que la surcharge soit autorisée dans la configuration du serveur.

    <Else>core
    Contient des directives qui ne s'appliquent que si la condition correspondant à la section <If> ou <ElseIf> précédente n'est pas satisfaite par la requête à l'exécution
    <ElseIf>core
    Contient des directives qui ne s'appliquent que si la condition correspondante est satisfaite par une requête à l'exécution, alors que la condition correspondant à la section <If> ou <ElseIf> précédente ne l'était pas.
    <Files>core
    Contient des directives qui s'appliquent aux fichiers précisés
    <FilesMatch>core
    Contient des directives qui s'appliquent à des fichiers spécifiés sous la forme d'expressions rationnelles
    <If>core
    Contient des directives qui ne s'appliquent que si une condition est satisfaite au cours du traitement d'une requête
    <IfDefine>core
    Contient des directives qui ne s'appliqueront que si un test retourne "vrai" au démarrage du serveur
    <IfDirective>core
    Regroupe des directives dont le traitement est conditionné par la présence ou l'absence d'une directive particulière
    <IfFile>core
    Regroupe des directives qui ne seront traitées que si un fichier existe au démarrage
    <IfModule>core
    Contient des directives qui ne s'appliquent qu'en fonction de la présence ou de l'absence d'un module spécifique
    <IfSection>core
    Regroupe des directives dont le traitement est conditionné par la présence ou l'absence d'une section particulière
    <IfVersion>mod_version
    Contient des portions de configuration dépendantes de la version
    LimitRequestBodycore
    limite la taille maximale du corps de la requête HTTP envoyée par le client
    LimitXMLRequestBodycore
    Définit la taille maximale du corps d'une requête au format XML
    LogIOTrackTTFBmod_logio
    Permet d'enregistrer le délai avant le premier octet (time to first byte - TTFB)
    LuaCodeCachemod_lua
    Configure le cache de code compilé.
    LuaHookAccessCheckermod_lua
    Fournit un point d'entrée pour la phase access_checker du traitement de la requête
    LuaHookAuthCheckermod_lua
    Fournit un point d'entrée pour la phase auth_checker du traitement de la requête
    LuaHookCheckUserIDmod_lua
    Fournit un point d'entrée pour la phase check_user_id du traitement de la requête
    LuaHookFixupsmod_lua
    Fournit un point d'entrée pour la phase de correction du traitement de la requête
    LuaHookInsertFiltermod_lua
    Fournit un point d'entrée pour la phase insert_filter du traitement de la requête
    LuaHookLogmod_lua
    Permet une insertion dans la phase de journalisation du traitement d'une requête
    LuaHookMapToStoragemod_lua
    Fournit un point d'entrée pour la phase map_to_storage du traitement de la requête
    LuaHookTranslateNamemod_lua
    Fournit un point d'entrée à la phase du nom de traduction du traitement de la requête
    LuaHookTypeCheckermod_lua
    Fournit un point d'entrée pour la phase type_checker du traitement de la requête
    LuaInheritmod_lua
    Contrôle la manière dont les sections de configuration parentes sont fusionnées dans les enfants
    LuaMapHandlermod_lua
    Met en correspondance un chemin avec un gestionnaire lua
    LuaPackageCPathmod_lua
    Ajoute un répertoire au package.cpath de lua
    LuaPackagePathmod_lua
    Ajoute un répertoire au package.path de lua
    LuaQuickHandlermod_lua
    Fournit un point d'entrée pour la gestion rapide du traitement de la requête
    LuaRootmod_lua
    Spécifie le chemin de base pour la résolution des chemins relatifs dans les directives de mod_lua
    LuaScopemod_lua
    Une valeur parmi once, request, conn, thread -- la valeur par défaut est once
    RLimitCPUcore
    Limite le temps CPU alloué aux processus initiés par les processus enfants d'Apache httpd
    RLimitMEMcore
    Limite la mémoire allouée aux processus initiés par les processus enfants d'Apache httpd
    RLimitNPROCcore
    Limite le nombre de processus qui peuvent être initiés par les processus initiés par les processus enfants d'Apache httpd
    ServerSignaturecore
    Définit un pied de page pour les documents générés par le serveur
    SSIErrorMsgmod_include
    Message d'erreur affiché lorsqu'une erreur SSI survient
    SSITimeFormatmod_include
    Configuration du format d'affichage des dates
    SSIUndefinedEchomod_include
    Chaîne à afficher lorsqu'on tente d'extraire le contenu d'une variable non définie
    top

    AuthConfig

    Les directives suivantes sont autorisées dans les fichiers .htaccess lorsque AllowOverride AuthConfig a été spécifié. Elles permettent aux utilisateurs de fichiers .htaccess de contrôler les méthodes d'authentification et d'autorisation qui s'appliquent à l'arborescence de leur répertoire, y compris de nombreuses directives utilitaires pour la gestion de session et la configuration TLS.

    Anonymousmod_authn_anon
    Définit la liste des identifiants utilisateur autorisés à accéder sans vérification du mot de passe
    Anonymous_LogEmailmod_authn_anon
    Détermine si le mot de passe fourni sera enregistré dans le journal des erreurs
    Anonymous_MustGiveEmailmod_authn_anon
    Détermine si l'abscence de mot de passe est autorisée
    Anonymous_NoUserIDmod_authn_anon
    Détermine si le champ identifiant peut être vide
    Anonymous_VerifyEmailmod_authn_anon
    Détermine s'il faut vérifier que le format de l'adresse email fournie comme mot de passe est correct
    AuthBasicAuthoritativemod_auth_basic
    Définit si les processus d'autorisation et d'authentification peuvent être confiés à des modules de plus bas niveau
    AuthBasicFakemod_auth_basic
    Authentification de base simulée à l'aide des nom d'utilisateur et mot de passe fournis
    AuthBasicProvidermod_auth_basic
    Définit le(les) fournisseur(s) d'authentification pour cette zone du site web
    AuthBasicUseDigestAlgorithmmod_auth_basic
    Vérifie les mots de passe auprès des fournisseurs d'authentification à la manière de l'authentification de type Digest.
    AuthDBMGroupFilemod_authz_dbm
    Définit le nom du fichier de base de données contenant la liste des groupes d'utilisateurs permettant de définir les autorisations des utilisateurs
    AuthDBMTypemod_authn_dbm
    Définit le type de fichier de base de données utilisé pour stocker les mots de passe
    AuthDBMUserFilemod_authn_dbm
    Définit le nom d'un fichier de base de données pour l'authentification contenant la liste des utilisateurs et de leurs mots de passe
    AuthDigestAlgorithmmod_auth_digest
    Sélectionne l'algorithme utilisé pour calculer les condensés du défit et de sa réponse
    AuthDigestDomainmod_auth_digest
    Les URIs qui se trouvent dans le même espace de protection concernant l'authentification à base de condensés
    AuthDigestNonceLifetimemod_auth_digest
    Durée de validité du nombre à valeur unique du serveur (nonce)
    AuthDigestProvidermod_auth_digest
    Définit le(s) fournisseurs(s) d'authentification pour la zone du site web concernée
    AuthDigestQopmod_auth_digest
    Détermine le niveau de protection fourni par l'authentification à base de condensé
    AuthFormAuthoritativemod_auth_form
    Détermine si l'autorisation et l'authentification sont confiés à des modules de plus bas niveau
    AuthFormProvidermod_auth_form
    Définit le(s) fournisseur(s) d'authentification pour la zone concernée
    AuthGroupFilemod_authz_groupfile
    Définit le nom d'un fichier texte contenant la liste des groupes d'utilisateurs permettant de définir les autorisations des utilisateurs
    AuthLDAPAuthorizePrefixmod_authnz_ldap
    Spécifie le préfixe ajouté aux variables d'environnement durant la phase d'autorisation
    AuthLDAPBindAuthoritativemod_authnz_ldap
    Détermine si l'on doit utiliser d'autres fournisseurs d'authentification lorsque le serveur ne peut pas valider les données d'authentification de l'utilisateur, alors que ce dernier possède un DN.
    AuthLDAPBindDNmod_authnz_ldap
    Un DN optionnel pour se connecter au serveur LDAP
    AuthLDAPBindPasswordmod_authnz_ldap
    Mot de passe à utiliser en conjonction avec le DN de connexion
    AuthLDAPCompareAsUsermod_authnz_ldap
    Utilisation des données d'authentification de l'utilisateur pour effectuer les comparaisons pour l'attribution des autorisations
    AuthLDAPCompareDNOnServermod_authnz_ldap
    Utilise le serveur LDAP pour comparer les DNs
    AuthLDAPDereferenceAliasesmod_authnz_ldap
    À quel moment le module va déréférencer les alias
    AuthLDAPGroupAttributemod_authnz_ldap
    L'attribut LDAP utilisé pour vérifier l'appartenance d'un utilisateur à un groupe.
    AuthLDAPGroupAttributeIsDNmod_authnz_ldap
    Utilise le DN de l'utilisateur pour vérifier son appartenance à un groupe
    AuthLDAPInitialBindAsUsermod_authnz_ldap
    Détermine si le serveur effectue la recherche initiale du DN en utilisant le nom propre de l'utilisateur pour l'authentification de base et non de manière anonyme, ou en utilisant des données d'authentification codées en dur pour le serveur
    AuthLDAPInitialBindPatternmod_authnz_ldap
    Spécifie la modification a apporter au nom d'utilisateur pour l'authentification de base lors de l'authentification auprès du serveur LDAP pour effectuer une recherche de DN
    AuthLDAPMaxSubGroupDepthmod_authnz_ldap
    Spécifie la profondeur d'imbrication des sous-groupes maximale prise en compte avant l'abandon de la recherche de l'utilisateur.
    AuthLDAPRemoteUserAttributemod_authnz_ldap
    Spécifie l'attribut dont la valeur renvoyée au cours de la requête de l'utilisateur sera utilisée pour définir la variable d'environnement REMOTE_USER
    AuthLDAPRemoteUserIsDNmod_authnz_ldap
    Utilise le DN de l'utilisateur pour définir la variable d'environnement REMOTE_USER
    AuthLDAPSearchAsUsermod_authnz_ldap
    Utilise les données d'authentification de l'utilisateur pour la recherche des autorisations
    AuthLDAPSubGroupAttributemod_authnz_ldap
    Spécifie les noms d'attribut, un par directive, utilisés pour différencier les membres du groupe courant qui sont eux-mêmes des groupes.
    AuthLDAPSubGroupClassmod_authnz_ldap
    Spécifie quelles valeurs d'objectClass LDAP identifient les objets de l'annuaire qui sont des groupes au cours du traitement des sous-groupes.
    AuthLDAPURlmod_authnz_ldap
    L'URL permettant de spécifier les paramètres de la recherche LDAP
    AuthMergingmod_authz_core
    Définit la manière dont chaque logique d'autorisation des sections de configuration se combine avec celles des sections de configuration précédentes.
    AuthNamemod_authn_core
    L'identifiant de l'autorisation à utiliser avec l'authentification HTTP
    AuthnCacheProvideFormod_authn_socache
    Spécifie le fournisseur pour lequel on veut effectuer une mise en cache
    AuthnCacheTimeoutmod_authn_socache
    Définit une durée de vie pour les entrées du cache
    AuthTypemod_authn_core
    Type d'authentification utilisateur
    AuthUserFilemod_authn_file
    Définit le nom d'un fichier texte pour l'authentification contenant la liste des utilisateurs et de leurs mots de passe
    AuthzDBMTypemod_authz_dbm
    Définit le type de fichier de base de données contenant la liste des groupes d'utilisateurs
    CGIPassAuthcore
    Active la transmission d'en-têtes d'autorisation HTTP aux scripts en tant que variables CGI
    LDAPReferralHopLimitmod_ldap
    Le nombre maximum de redirections vers des serveurs alternatifs (referrals) avant l'abandon de la requête LDAP.
    LDAPReferralsmod_ldap
    Active la redirection vers des serveurs alternatifs au cours des requêtes vers le serveur LDAP.
    <Limit>core
    Limite les contrôles d'accès que la section contient à certaines méthodes HTTP
    <LimitExcept>core
    Applique les contrôles d'accès à toutes les méthodes HTTP, sauf celles qui sont spécifiées
    Requiremod_authz_core
    Vérifie si un utilisateur authentifié a une autorisation d'accès accordée par un fournisseur d'autorisation.
    <RequireAll>mod_authz_core
    Regroupe plusieurs directives d'autorisation dont aucune ne doit échouer et dont au moins une doit retourner un résultat positif pour que la directive globale retourne elle-même un résultat positif.
    <RequireAny>mod_authz_core
    Regroupe des directives d'autorisation dont au moins une doit retourner un résultat positif pour que la directive globale retourne elle-même un résultat positif.
    <RequireNone>mod_authz_core
    Regroupe des directives d'autorisation dont aucune ne doit retourner un résultat positif pour que la directive globale n'échoue pas.
    Satisfymod_access_compat
    Interaction entre le contrôle d'accès en fonction de l'hôte et l'authentification utilisateur
    Sessionmod_session
    Ouvre une session pour le contexte courant
    SessionEnvmod_session
    Définit si le contenu de la session doit être enregistré dans la variable d'environnement HTTP_SESSION
    SessionHeadermod_session
    Importation des mises à jour de session depuis l'en-tête de réponse HTTP spécifié
    SessionIncludemod_session
    Définit les préfixes d'URL pour lesquels une session est valide
    SessionMaxAgemod_session
    Définit une durée de vie maximale pour la session en secondes
    SSLCipherSuitemod_ssl
    Algorithmes de chiffrement disponibles pour la négociation au cours de l'initialisation de la connexion SSL
    SSLRenegBufferSizemod_ssl
    Définit la taille du tampon de renégociation SSL
    SSLRequiremod_ssl
    N'autorise l'accès que lorsqu'une expression booléenne complexe et arbitraire est vraie
    SSLRequireSSLmod_ssl
    Interdit l'accès lorsque la requête HTTP n'utilise pas SSL
    SSLUserNamemod_ssl
    Nom de la variable servant à déterminer le nom de l'utilisateur
    SSLVerifyClientmod_ssl
    Niveau de vérification du certificat client
    SSLVerifyDepthmod_ssl
    Profondeur maximale des certificats de CA pour la vérification des certificats clients
    top

    FileInfo

    Les directives suivantes sont autorisées dans les fichiers .htaccess lorsque AllowOverride FileInfo a été spécifié. Elles accordent aux utilisateurs de fichiers .htaccess un grand nombre de contrôles sur les réponses et les métadonnées fournies par le serveur.

    AcceptPathInfocore
    Les ressources acceptent des informations sous forme d'un nom de chemin en fin de requête.
    Actionmod_actions
    Active un script CGI pour un gestionnaire ou un type de contenu particulier
    AddCharsetmod_mime
    Associe les extensions de noms de fichiers spécifiées au jeu de caractères spécifié
    AddDefaultCharsetcore
    Paramètre jeu de caractères par défaut à ajouter quand le type de contenu d'une réponse est text/plain ou text/html
    AddEncodingmod_mime
    Associe les extensions de noms de fichiers données au type de codage spécifié
    AddHandlermod_mime
    Associe les extensions de noms de fichiers données au gestionnaire spécifié
    AddInputFiltermod_mime
    Associe les extensions de noms de fichiers aux filtres spécifiés qui traiteront les requêtes clients
    AddLanguagemod_mime
    Associe l'extension de nom de fichier donnée à la langue spécifié
    AddOutputFiltermod_mime
    Associe les extensions de noms de fichiers aux filtres spécifiés qui traiteront les réponses en provenance du serveur
    AddOutputFilterByTypemod_filter
    assigne un filtre en sortie pour un type de média particulier
    AddTypemod_mime
    Associe les extensions de noms de fichiers au type de contenu spécifié
    BrowserMatchmod_setenvif
    Définit des variables d'environnement en fonction du contenu de l'en-tête HTTP User-Agent
    BrowserMatchNoCasemod_setenvif
    Définit des variables d'environnement en fonction du contenu de l'en-tête HTTP User-Agent sans tenir compte de la casse
    CGIMapExtensioncore
    Technique permettant de localiser l'interpréteur des scripts CGI
    CGIVarcore
    Contrôle la manière dont certaines variables CGI sont définies
    CharsetDefaultmod_charset_lite
    Jeu de caractère vers lequel la traduction doit s'effectuer
    CharsetOptionsmod_charset_lite
    Précise les détails de la traduction du jeu de caractères
    CharsetSourceEncmod_charset_lite
    Jeu de caractères source des fichiers
    CookieDomainmod_usertrack
    Le domaine auquel le cookie traceur s'applique
    CookieExpiresmod_usertrack
    Durée avant expiration du cookie traceur
    CookieNamemod_usertrack
    Nom du cookie traceur
    CookieStylemod_usertrack
    Format du champ d'en-tête cookie
    CookieTrackingmod_usertrack
    Active le cookie traceur
    DefaultLanguagemod_mime
    Définit un symbole de langue par défaut à affecter au champ d'en-tête Content-Language pour toutes les ressources dans le contexte courant auxquelles aucun symbole de langue n'a été associé.
    DefaultTypecore
    Les seuls effets de cette directive sont des émissions d'avertissements si sa valeur est différente de none. Dans les versions précédentes, DefaultType permettait de spécifier un type de média à assigner par défaut au contenu d'une réponse pour lequel aucun autre type de média n'avait été trouvé.
    EnableMMAPcore
    Utilise la projection en mémoire (Memory-Mapping) pour lire les fichiers pendant qu'ils sont servis
    EnableSendfilecore
    Utilise le support sendfile du noyau pour servir les fichiers aux clients
    ErrorDocumentcore
    Document que le serveur renvoie au client en cas d'erreur
    FileETagcore
    Caractéristiques de fichier utilisées lors de la génération de l'en-tête de réponse HTTP ETag pour les fichiers statiques
    ForceLanguagePrioritymod_negotiation
    Action à entreprendre si un document acceptable unique n'est pas trouvé
    ForceTypecore
    Force le type de médium spécifié dans le champ d'en-tête HTTP Content-Type pour les fichiers correspondants
    Headermod_headers
    Configure les en-têtes d'une réponse HTTP
    ISAPIAppendLogToErrorsmod_isapi
    Enregistrement des requêtes HSE_APPEND_LOG_PARAMETER de la part des extensions ISAPI dans le journal des erreurs
    ISAPIAppendLogToQuerymod_isapi
    Enregistre les requêtes HSE_APPEND_LOG_PARAMETER de la part des extensions ISAPI dans la partie arguments de la requête
    ISAPIFakeAsyncmod_isapi
    Emulation du support des entrées/sorties asynchrones pour les appels ISAPI
    ISAPILogNotSupportedmod_isapi
    Journalisation des demandes de fonctionnalités non supportées de la part des extensions ISAPI
    ISAPIReadAheadBuffermod_isapi
    Taille du tampon de lecture anticipée envoyé aux extensions ISAPI
    LanguagePrioritymod_negotiation
    L'ordre de priorité des variantes de langages pour les cas où le client n'a pas formulé de préférences
    MultiviewsMatchmod_mime
    Les types de fichiers qui seront inclus lors d'une recherche de correspondance de fichier avec les vues multiples (MultiViews)
    PassEnvmod_env
    Transmet des variables d'environnement depuis le shell
    QualifyRedirectURLcore
    Vérifie si la variable d'environnement REDIRECT_URL est pleinement qualifiée
    Redirectmod_alias
    Envoie une redirection externe demandant au client d'effectuer une autre requête avec une URL différente
    RedirectMatchmod_alias
    Envoie une redirection externe faisant appel aux expressions rationnelles pour la mise en correspondance de l'URL courante
    RedirectPermanentmod_alias
    Envoie une redirection externe permanente demandant au client d'effectuer une nouvelle requête avec une URL différente
    RedirectTempmod_alias
    Envoie une redirection externe temporaire demandant au client d'effectuer une nouvelle requête avec une URL différente
    RemoveCharsetmod_mime
    Supprime toute association de jeu de caractères pour un ensemble d'extensions de noms de fichiers
    RemoveEncodingmod_mime
    Supprime toute association de codage de contenu pour un ensemble d'extensions de noms de fichiers
    RemoveHandlermod_mime
    Supprime toute association de gestionnaire à un ensemble d'extensions de noms de fichiers
    RemoveInputFiltermod_mime
    Supprime toute association de filtre en entrée à un ensemble d'extensions de noms de fichiers
    RemoveLanguagemod_mime
    Supprime toute association de langue à un ensemble d'extensions de noms de fichiers
    RemoveOutputFiltermod_mime
    Supprime toute association de filtre en sortie à un ensemble d'extensions de noms de fichiers
    RemoveTypemod_mime
    Supprime toute association de type de contenu à un ensemble d'extensions de noms de fichiers
    RequestHeadermod_headers
    Configure les en-têtes d'une requête HTTP
    RewriteBasemod_rewrite
    Définit l'URL de base pour les réécritures au niveau répertoire
    RewriteCondmod_rewrite
    Définit une condition qui devra être satisfaite pour que la réécriture soit effectuée
    RewriteEnginemod_rewrite
    Active ou désactive l'exécution du moteur de réécriture
    RewriteOptionsmod_rewrite
    Configure certaines options spéciales pour le moteur de réécriture
    RewriteRulemod_rewrite
    Définit les règles pour le moteur de réécriture
    ScriptInterpreterSourcecore
    Permet de localiser l'interpréteur des scripts CGI
    SetEnvmod_env
    Définit des variables d'environnement
    SetEnvIfmod_setenvif
    Définit des variables d'environnement en fonction des attributs de la requête
    SetEnvIfExprmod_setenvif
    Définit des variables d'environnement en fonction d'une expression ap_expr
    SetEnvIfNoCasemod_setenvif
    Définit des variables d'environnement en fonction des attributs de la requête sans tenir compte de la casse
    SetHandlercore
    Force le traitement des fichiers spécifiés par un gestionnaire particulier
    SetInputFiltercore
    Définit les filtres par lesquels vont passer les requêtes client et les données POST
    SetOutputFiltercore
    Définit les filtres par lesquels vont passer les réponses du serveur
    Substitutemod_substitute
    Modèle de substition dans le contenu de la réponse
    SubstituteInheritBeforemod_substitute
    Modifie l'ordre de fusion des modèles hérités
    SubstituteMaxLineLengthmod_substitute
    Définit la longueur de ligne maximale
    UnsetEnvmod_env
    Supprime des variables de l'environnement
    top

    Indexes

    Les directives suivantes sont autorisées dans les fichiers .htaccess lorsque AllowOverride Indexes a été spécifié. Elles permettent aux utilisateurs de fichiers .htaccess de contrôler certains aspects des pages d'index de répertoires fournies par le serveur, y compris la génération d'autoindex.

    AddAltmod_autoindex
    Texte optionnel à afficher à la place d'un icône pour un fichier en fonction de son nom
    AddAltByEncodingmod_autoindex
    Texte optionnel à afficher à la place d'un icône pour un fichier en fonction de son codage MIME
    AddAltByTypemod_autoindex
    Texte optionnel à afficher à la place d'un icône pour un fichier en fonction de son type MIME
    AddDescriptionmod_autoindex
    Afficher la description d'un fichier
    AddIconmod_autoindex
    Icône à afficher pour un fichier en fonction de son nom
    AddIconByEncodingmod_autoindex
    Icône à afficher à côté d'un fichier en fonction de son codage MIME
    AddIconByTypemod_autoindex
    Icône à afficher à côté d'un fichier en fonction de son type MIME
    DefaultIconmod_autoindex
    Icône à afficher par défaut lorsqu'aucun icône spécifique n'est précisé
    DirectoryCheckHandlermod_dir
    Définit la réponse de ce module lorsqu'un autre gestionnaire est utilisé
    DirectoryIndexmod_dir
    Liste des fichiers ressources à rechercher lorsque le client envoie une requête pour un répertoire
    DirectoryIndexRedirectmod_dir
    Définit une redirection externe pour les index de répertoires.
    DirectorySlashmod_dir
    Activation/Désactivation de la redirection "slash de fin"
    ExpiresActivemod_expires
    Active la génération d'en-têtes Expires
    ExpiresByTypemod_expires
    Définition de la valeur de l'en-tête Expires en fonction du type MIME
    ExpiresDefaultmod_expires
    Mode de calcul par défaut de la date d'expiration
    FallbackResourcemod_dir
    Définit une URL par défaut pour les requêtes qui ne ciblent aucun fichier
    HeaderNamemod_autoindex
    Nom du fichier qui sera inséré au début de la page contenant l'index
    ImapBasemod_imagemap
    Valeur par défaut de la directive base des fichiers imagemap
    ImapDefaultmod_imagemap
    Action à entreprendre par défaut lorsqu'un fichier imagemap est invoqué avec des coordonnées qui ne correspondent à aucune cible
    ImapMenumod_imagemap
    Action à entreprendre si aucune coordonnée n'est fournie lorsqu'on invoque un fichier imagemap
    IndexHeadInsertmod_autoindex
    Insère du texte dans la section HEAD de la page d'index.
    IndexIgnoremod_autoindex
    Ajouts à la liste des fichiers à cacher lors de l'affichage de l'index d'un répertoire
    IndexIgnoreResetmod_autoindex
    Vide la liste des fichiers à cacher lors de l'affichage du contenu d'un répertoire
    IndexOptionsmod_autoindex
    Diverses options de configuration pour l'indexation d'un répertoire
    IndexOrderDefaultmod_autoindex
    Définit l'ordre d'affichage par défaut d'un index de répertoire
    IndexStyleSheetmod_autoindex
    Ajoute une feuille de style CSS à l'index du répertoire
    MetaDirmod_cern_meta
    Le nom du répertoire où trouver les fichiers de métainformations dans le style du CERN
    MetaFilesmod_cern_meta
    Active le traitement des métafichiers du CERN
    MetaSuffixmod_cern_meta
    Suffixe du fichier contenant les métainformations dans le style du CERN
    ReadmeNamemod_autoindex
    Nom du fichier dont le contenu sera inséré à la fin de l'index
    top

    Limit

    Les directives suivantes sont autorisées dans les fichiers .htaccess lorsque AllowOverride Limit a été spécifié. Cette autorisation de surcharge très restreinte permet principalement d'utiliser les directives d'autorisation héritées fournies par mod_access_compat.

    Allowmod_access_compat
    Spécifie quels hôtes peuvent accéder à une certaine zone du serveur
    Denymod_access_compat
    Définit quels hôtes ne sont pas autorisés à accéder au serveur
    <Limit>core
    Limite les contrôles d'accès que la section contient à certaines méthodes HTTP
    <LimitExcept>core
    Applique les contrôles d'accès à toutes les méthodes HTTP, sauf celles qui sont spécifiées
    Ordermod_access_compat
    Définit le statut d'accès par défaut et l'ordre dans lequel les directives Allow et Deny sont évaluées.
    top

    Options

    Les directives suivantes sont autorisées dans les fichiers .htaccess lorsque AllowOverride Options a été spécifié. Elles permettent aux utilisateurs de fichiers .htaccess d'utiliser la directive Options et d'autres directives similaires, ainsi que les directives qui contrôlent la chaîne de filtrage.

    CheckCaseOnlymod_speling
    Limite l'action du module aux corrections de majuscules
    CheckSpellingmod_speling
    Active le module de correction
    ContentDigestcore
    Active la génération d'un en-tête Content-MD5 dans la réponse HTTP
    FilterChainmod_filter
    Configure la chaîne de filtrage
    FilterDeclaremod_filter
    Déclare un filtre intelligent
    FilterProtocolmod_filter
    Vérifie le respect du protocole HTTP
    FilterProvidermod_filter
    Enregistre un filtre de contenu
    Optionscore
    Définit les fonctionnalités disponibles pour un répertoire particulier
    ReflectorHeadermod_reflector
    Renvoie un en-tête d'entrée dans les en-têtes de sortie
    SSLOptionsmod_ssl
    Configure différentes options d'exécution du moteur SSL
    XBitHackmod_include
    Interprète les directives SSI dans les fichiers dont le bit d'exécution est positionné

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/directives.html.es0000644000000000000500000015576713523273316017707 0ustar rootsrc Índice de Directivas - Servidor HTTP Apache Versión 2.4
    <-

    Índice de Directivas

    Idiomas disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Todas las directivas disponibles en la distribución estándar de Apache están en la lista que se muestra más abajo. Cada una se describe usando un formato uniforme, y existe un glosario de los términos usados en las descripciones que puede consultar.

    También existe una Guía Rápida de Referencia de Directivas con información de cada directiva de forma resumida.

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 

    Idiomas disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Comentarios

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_heartbeat.html.fr.utf80000644000000000000500000002347013412755316021214 0ustar rootsrc mod_heartbeat - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_heartbeat

    Langues Disponibles:  en  |  fr 

    Description:Envoie des messages d'état au mandataire frontal
    Statut:Expérimental
    Identificateur de Module:heartbeat_module
    Fichier Source:mod_heartbeat
    Compatibilité:Disponible à partir de la version 2.3 du serveur HTTP Apache

    Sommaire

    mod_heartbeat envoie à un moniteur mod_heartmonitor des messages multicast l'informant du nombre de connexions courantes. En général, mod_heartmonitor est chargé sur un serveur mandataire où mod_lbmethod_heartbeat est chargé, ce qui permet d'utiliser la lbmethod "heartbeat" au sein des directives ProxyPass.

    Le module mod_heartbeat est chargé sur le serveur d'origine qui sert les requêtes via le serveur mandataire.

    Pour utiliser mod_heartbeat, mod_status et mod_watchdog doivent être soit des modules statiques, soit des modules dynamiques, et dans ce dernier cas, ils doivent être chargés avant mod_heartbeat.
    top

    Utilisation de la sortie de mod_heartbeat

    Chaque seconde, ce module génère un paquet multicast UDP contenant le nombre de threads/processus occupés et en attente. Le paquet possède un format ASCII simple similaire aux paramètres de requête GET en HTTP.

    Exemple de paquet

    v=1&ready=75&busy=0

    Les utilisateurs disposeront dans le futur de nouvelles variables en plus de busy et ready, et toujours séparées par des '&'.

    top

    Directive HeartbeatAddress

    Description:Adresse multicast à laquelle envoyer les requêtes heartbeat
    Syntaxe:HeartbeatAddress addr:port
    Défaut:disabled
    Contexte:configuration globale
    Statut:Expérimental
    Module:mod_heartbeat

    La directive HeartbeatAddress permet de spécifier l'adresse multicast à laquelle mod_heartbeat va envoyer ses informations. En général, cette adresse correspond à la valeur définie par la directive HeartbeatListen sur le serveur mandataire frontal.

    HeartbeatAddress 239.0.0.1:27999

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_ident.html0000644000000000000500000000061313362070302017044 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_ident.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_ident.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_ident.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_ident.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_proxy_hcheck.html.fr.utf80000644000000000000500000004405113412755316021741 0ustar rootsrc mod_proxy_hcheck - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_proxy_hcheck

    Langues Disponibles:  en  |  fr 

    Description:Check up dynamique des membres du groupe de répartition de charge (équipiers) pour mod_proxy
    Statut:Extension
    Identificateur de Module:proxy_hcheck_module
    Fichier Source:mod_proxy_hcheck.c
    Compatibilité:Disponible à partir de la version 2.4.21 du serveur HTTP Apache

    Sommaire

    Ce module permet d'effectuer un check up dynamique des membres du groupe de répartition de charge (équipiers). Ce check up peut être activé pour un ou plusieurs équipiers et il est indépendant des requêtes de mandataire inverse proprement dites.

    Pour fonctionner, ce module nécessite le chargement préalable de mod_watchdog.

    Paramètres

    Le mécanisme de check up est activé via l'utilisation de paramètres supplémentaires de la directive BalancerMember configurés de manière standard via la directive ProxyPass :

    Ce module définit un nouveau drapeau d'état status pour BalancerMember : "C". Lorsque l'équipier est mis hors service suite à un disfonctionnement déterminé par le module de check up, ce drapeau est activé et peut être lu (et modifié) via le balancer-manager.

    Paramètre Défaut Description
    hcmethod None Aucun check up dynamique n'est effectué. Les choix possibles sont :
    MethodDescriptionNote
    NoneAucun check up dynamique effectué
    TCPVérifie qu'un socket vers le serveur d'arrière-plan peut être créé ; par exemple "es-tu en état de fonctionner"
    OPTIONSEnvoie une requête HTTP OPTIONS au serveur d'arrière-plan*
    HEADEnvoie une requête HTTP HEAD au serveur d'arrière-plan*
    GETEnvoie une requête HTTP GET au serveur d'arrière-plan*
    *: si hcexpr n'est pas utilisé, un retour HTTP 2xx ou 3xx sera interprété comme un passage avec succès du check up.
    hcpasses 1 Nombre de check up à passer avec succès avant de remettre en service l'équipier
    hcfails 1 Nombre de check up échoués avant mettre hors service l'équipier
    hcinterval 30 Intervalle entre deux check up en secondes (par défaut effectué toutes les 30 secondes)
    hcuri   URI supplémentaire à ajouter à l'URL de l'équipier pour le check up.
    hctemplate   Nom du modèle créé via ProxyHCTemplate à utiliser pour définir les paramètres de check up de cet équipier
    hcexpr   Nom de l'expression créée via ProxyHCExpr utilisée pour analyser les en-têtes de la réponse du check up.
    Si ce paramètre est absent, un état HTTP de 2xx à 3xx est interprété comme un check up réussi.
    top

    Exemples d'utilisation

    L'exemple suivant montre comment configurer le check up pour différents serveurs d'arrière-plan :

    ProxyHCExpr ok234 {%{REQUEST_STATUS} =~ /^[234]/}
    ProxyHCExpr gdown {%{REQUEST_STATUS} =~ /^[5]/}
    ProxyHCExpr in_maint {hc('body') !~ /Under maintenance/}
    
    <Proxy balancer://foo>
      BalancerMember http://www.example.com/  hcmethod=GET hcexpr=in_maint hcuri=/status.php
      BalancerMember http://www2.example.com/ hcmethod=HEAD hcexpr=ok234 hcinterval=10
      BalancerMember http://www3.example.com/ hcmethod=TCP hcinterval=5 hcpasses=2 hcfails=3
      BalancerMember http://www4.example.com/
    </Proxy>
    
    ProxyPass "/" "balancer://foo"
    ProxyPassReverse "/" "balancer://foo"

    Dans ce scénario, on teste l'équipier http://www.example.com/ en lui envoyant une requête GET /status.php et en regardant si la réponse contient la chaîne Under maintenance. Si c'est le cas, le check up est considéré comme ayant échoué et l'équipier est mis hors service. Ce check up dynamique est effectué toutes les 30 secondes, ce qui correspond à la valeur par défaut.

    On teste l'équipier http://www2.example.com/ en lui envoyant simplement une requête HEAD toutes les 10 secondes et en vérifiant que la réponse HTTP est bien un code d'état de 2xx, 3xx ou 4xx. On teste l'équipier http://www3.example.com/ en vérifiant simplement toutes les 5 secondes que le socket vers ce serveur est bien opérationnel. Si ce serveur est marqué "hors service", il lui faudra 2 check up réussis pour être réactivé et participer à nouveau à la répartition de charge. Si à ce moment-là il échoue à 3 check up successifs, il sera à nouveau mis hors service. Enfin, l'équipier http://www4.example.com/ ne fait l'objet d'aucun check up.

    top

    Directive ProxyHCExpr

    Description:Crée et nomme une expression conditionnelle à utiliser pour déterminer la santé d'un serveur d'arrière-plan en fonction de sa valeur
    Syntaxe:ProxyHCExpr name {ap_expr expression}
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy_hcheck

    La directive ProxyHCExpr permet de créer et nommer une expression conditionnelle dont la valeur calculée en fonction des en-têtes de la réponse du serveur d'arrière-plan permettra d'évaluer la santé de ce dernier. Cette expression nommée peut alors être assignée aux serveurs d'arrière-plan via le paramètre hcexpr.

    ProxyHCExpr: interprète les réponses 2xx/3xx/4xx comme des check up réussis

    ProxyHCExpr ok234 {%{REQUEST_STATUS} =~ /^[234]/}
    ProxyPass "/apps"     "balancer://foo"
    
    <Proxy balancer://foo>
      BalancerMember http://www2.example.com/  hcmethod=HEAD hcexpr=ok234 hcinterval=10
    </Proxy>
    L'expression peut utiliser des accolades ("{}") comme délimiteurs en plus des guillemets normaux.

    Si l'on utilise une méthode de check up (par exemple GET) qui génère un corps de réponse, ce corps peut lui-même être ausculté via ap_expr en utilisant la fonction associée aux expressions hc() spécifique à ce module.

    Dans l'exemple suivant, on envoie une requête GET au serveur d'arrière-plan, et si le corps de la réponse contient la chaîne Under maintenance, ce serveur d'arrière-plan est mis hors service.

    ProxyHCExpr: auscultation du corps de la réponse

    ProxyHCExpr in_maint {hc('body') !~ /Under maintenance/}
    ProxyPass "/apps"     "balancer://foo"
    
    <Proxy balancer://foo>
      BalancerMember http://www.example.com/ hcexpr=in_maint hcmethod=get hcuri=/status.php
    </Proxy>

    NOTE: Comme le corps de la réponse peut être assez grand, il est recommandé de privilégier un check up basé sur les codes d'état.

    top

    Directive ProxyHCTemplate

    Description:Crée et nomme un modèle permettant de définir différents paramètres de check up
    Syntaxe:ProxyHCTemplate name parameter=setting [...]
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy_hcheck

    La directive ProxyHCTemplate permet de créer et nommer un modèle de paramètres de check up qui peut alors être assigné aux équipiers via le paramètre hctemplate.

    ProxyHCTemplate

    ProxyHCTemplate tcp5 hcmethod=tcp hcinterval=5
    ProxyPass "/apps"     "balancer://foo"
    
    <Proxy balancer://foo>
      BalancerMember http://www2.example.com/ hctemplate=tcp5
    </Proxy>
    top

    Directive ProxyHCTPsize

    Description:Définit la taille totale, pour l'ensemble du serveur, du jeu de threads utilisé pour le check up des équipiers
    Syntaxe:ProxyHCTPsize size
    Défaut:ProxyHCTPsize 16
    Contexte:configuration globale
    Statut:Extension
    Module:mod_proxy_hcheck

    Si Apache httpd et APR ont été compilés avec le support des threads, le module de check up peut confier ce travail à un jeu de threads associé au processus Watchdog, ce qui permet l'exécution des check up en parallèle. La directive ProxyHCTPsize permet de déterminer la taille de ce jeu de threads. Une valeur de 0 signifie qu'aucun jeu de threads ne sera utilisé, et le check up des différents équipiers sera alors effectué séquentiellement.

    ProxyHCTPsize

    ProxyHCTPsize 32

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/index.html.de0000644000000000000500000005552013520523022016605 0ustar rootsrc Modul-Index - Apache HTTP Server Version 2.4
    <-

    Modul-Index

    Verfügbare Sprachen:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Nachfolgend ist eine Liste aller Module angegeben, die als Bestandteil der Distribution des Apache HTTP Servers mitgeliefert werden. Bitte beachten Sie auch die vollständige alphabetische Liste aller Apache-HTTP-Server-Direktiven.

    top

    Kernfunktionen und Multi-Processing-Module

    core
    Ständig verfügbare Kernfunktionen des Apache HTTP Servers
    mpm_common
    Eine Sammlung von Direktiven, die in mehr als einem Multi-Processing-Modul (MPM) implementiert sind.
    event
    A variant of the worker MPM with the goal of consuming threads only for connections with active processing
    mpm_netware
    Multi-Processing Module implementing an exclusively threaded web server optimized for Novell NetWare
    mpmt_os2
    Hybrid multi-process, multi-threaded MPM for OS/2
    prefork
    Implementiert einen im Voraus forkenden Webserver ohne Thread-Unterstützung
    mpm_winnt
    Das Multi-Processing-Modul ist optimiert für Windows NT.
    worker
    Multi-Processing-Modul, das einen Hybrid-Webserver mit Multi-Thread und Multi-Prozess-Unterstützung implementiert
    top

    Andere Module

     A  |  B  |  C  |  D  |  E  |  F  |  H  |  I  |  L  |  M  |  N  |  P  |  R  |  S  |  U  |  V  |  W  |  X 

    mod_access_compat
    Group authorizations based on host (name or IP address)
    mod_actions
    Dieses Modul ermöglicht die Ausführung von CGI-Skripten in Abhängigkeit von Medientypen und Anfragemethoden.
    mod_alias
    Provides for mapping different parts of the host filesystem in the document tree and for URL redirection
    mod_allowmethods
    Easily restrict what HTTP methods can be used on the server
    mod_asis
    Sends files that contain their own HTTP headers
    mod_auth_basic
    Basic HTTP authentication
    mod_auth_digest
    User authentication using MD5 Digest Authentication
    mod_auth_form
    Form authentication
    mod_authn_anon
    Allows "anonymous" user access to authenticated areas
    mod_authn_core
    Core Authentication
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    User authentication using DBM files
    mod_authn_file
    User authentication using text files
    mod_authn_socache
    Manages a cache of authentication credentials to relieve the load on backends
    mod_authnz_fcgi
    Allows a FastCGI authorizer application to handle Apache httpd authentication and authorization
    mod_authnz_ldap
    Allows an LDAP directory to be used to store the database for HTTP Basic authentication.
    mod_authz_core
    Core Authorization
    mod_authz_dbd
    Group Authorization and Login using SQL
    mod_authz_dbm
    Group authorization using DBM files
    mod_authz_groupfile
    Group authorization using plaintext files
    mod_authz_host
    Group authorizations based on host (name or IP address)
    mod_authz_owner
    Authorization based on file ownership
    mod_authz_user
    User Authorization
    mod_autoindex
    Generates directory indexes, automatically, similar to the Unix ls command or the Win32 dir shell command
    mod_brotli
    Compress content via Brotli before it is delivered to the client
    mod_buffer
    Support for request buffering
    mod_cache
    RFC 2616 compliant HTTP caching filter.
    mod_cache_disk
    Disk based storage module for the HTTP caching filter.
    mod_cache_socache
    Shared object cache (socache) based storage module for the HTTP caching filter.
    mod_cern_meta
    CERN httpd metafile semantics
    mod_cgi
    Execution of CGI scripts
    mod_cgid
    Execution of CGI scripts using an external CGI daemon
    mod_charset_lite
    Specify character set translation or recoding
    mod_data
    Convert response body into an RFC2397 data URL
    mod_dav
    Distributed Authoring and Versioning (WebDAV) functionality
    mod_dav_fs
    Filesystem provider for mod_dav
    mod_dav_lock
    Generic locking module for mod_dav
    mod_dbd
    Manages SQL database connections
    mod_deflate
    Compress content before it is delivered to the client
    mod_dialup
    Send static content at a bandwidth rate limit, defined by the various old modem standards
    mod_dir
    Provides for "trailing slash" redirects and serving directory index files
    mod_dumpio
    Dumps all I/O to error log as desired.
    mod_echo
    A simple echo server to illustrate protocol modules
    mod_env
    Modifies the environment which is passed to CGI scripts and SSI pages
    mod_example_hooks
    Illustrates the Apache module API
    mod_expires
    Generation of Expires and Cache-Control HTTP headers according to user-specified criteria
    mod_ext_filter
    Pass the response body through an external program before delivery to the client
    mod_file_cache
    Caches a static list of files in memory
    mod_filter
    Context-sensitive smart filter configuration module
    mod_headers
    Customization of HTTP request and response headers
    mod_heartbeat
    Sends messages with server status to frontend proxy
    mod_heartmonitor
    Centralized monitor for mod_heartbeat origin servers
    mod_http2
    Support for the HTTP/2 transport layer
    mod_ident
    RFC 1413 ident lookups
    mod_imagemap
    Server-side imagemap processing
    mod_include
    Server-parsed html documents (Server Side Includes)
    mod_info
    Provides a comprehensive overview of the server configuration
    mod_isapi
    ISAPI Extensions within Apache for Windows
    mod_lbmethod_bybusyness
    Pending Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_byrequests
    Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_bytraffic
    Weighted Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_heartbeat
    Heartbeat Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_ldap
    LDAP connection pooling and result caching services for use by other LDAP modules
    mod_log_config
    Logging of the requests made to the server
    mod_log_debug
    Additional configurable debug logging
    mod_log_forensic
    Forensic Logging of the requests made to the server
    mod_logio
    Logging of input and output bytes per request
    mod_lua
    Provides Lua hooks into various portions of the httpd request processing
    mod_macro
    Provides macros within apache httpd runtime configuration files
    mod_md
    Managing domains across virtual hosts, certificate provisioning via the ACME protocol
    mod_mime
    Associates the requested filename's extensions with the file's behavior (handlers and filters) and content (mime-type, language, character set and encoding)
    mod_mime_magic
    Determines the MIME type of a file by looking at a few bytes of its contents
    mod_negotiation
    Provides for content negotiation
    mod_nw_ssl
    Enable SSL encryption for NetWare
    mod_privileges
    Support for Solaris privileges and for running virtual hosts under different user IDs.
    mod_proxy
    Multi-protocol proxy/gateway server
    mod_proxy_ajp
    AJP support module for mod_proxy
    mod_proxy_balancer
    mod_proxy extension for load balancing
    mod_proxy_connect
    mod_proxy extension for CONNECT request handling
    mod_proxy_express
    Dynamic mass reverse proxy extension for mod_proxy
    mod_proxy_fcgi
    FastCGI support module for mod_proxy
    mod_proxy_fdpass
    fdpass external process support module for mod_proxy
    mod_proxy_ftp
    FTP support module for mod_proxy
    mod_proxy_hcheck
    Dynamic health check of Balancer members (workers) for mod_proxy
    mod_proxy_html
    Rewrite HTML links in to ensure they are addressable from Clients' networks in a proxy context.
    mod_proxy_http
    HTTP support module for mod_proxy
    mod_proxy_http2
    HTTP/2 support module for mod_proxy
    mod_proxy_scgi
    SCGI gateway module for mod_proxy
    mod_proxy_uwsgi
    UWSGI gateway module for mod_proxy
    mod_proxy_wstunnel
    Websockets support module for mod_proxy
    mod_ratelimit
    Bandwidth Rate Limiting for Clients
    mod_reflector
    Reflect a request body as a response via the output filter stack.
    mod_remoteip
    Replaces the original client IP address for the connection with the useragent IP address list presented by a proxies or a load balancer via the request headers.
    mod_reqtimeout
    Set timeout and minimum data rate for receiving requests
    mod_request
    Filters to handle and make available HTTP request bodies
    mod_rewrite
    Provides a rule-based rewriting engine to rewrite requested URLs on the fly
    mod_sed
    Filter Input (request) and Output (response) content using sed syntax
    mod_session
    Session support
    mod_session_cookie
    Cookie based session support
    mod_session_crypto
    Session encryption support
    mod_session_dbd
    DBD/SQL based session support
    mod_setenvif
    Allows the setting of environment variables based on characteristics of the request
    mod_slotmem_plain
    Slot-based shared memory provider.
    mod_slotmem_shm
    Slot-based shared memory provider.
    mod_so
    Loading of executable code and modules into the server at start-up or restart time
    mod_socache_dbm
    DBM based shared object cache provider.
    mod_socache_dc
    Distcache based shared object cache provider.
    mod_socache_memcache
    Memcache based shared object cache provider.
    mod_socache_redis
    Redis based shared object cache provider.
    mod_socache_shmcb
    shmcb based shared object cache provider.
    mod_speling
    Attempts to correct mistaken URLs by ignoring capitalization, or attempting to correct various minor misspellings.
    mod_ssl
    Strong cryptography using the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols
    mod_status
    Provides information on server activity and performance
    mod_substitute
    Perform search and replace operations on response bodies
    mod_suexec
    Allows CGI scripts to run as a specified user and Group
    mod_unique_id
    Provides an environment variable with a unique identifier for each request
    mod_unixd
    Basic (required) security for Unix-family platforms.
    mod_userdir
    User-specific directories
    mod_usertrack
    Clickstream logging of user activity on a site
    mod_version
    Version dependent configuration
    mod_vhost_alias
    Provides for dynamically configured mass virtual hosting
    mod_watchdog
    provides infrastructure for other modules to periodically run tasks
    mod_xml2enc
    Enhanced charset/internationalisation support for libxml2-based filter modules

    Verfügbare Sprachen:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/mod/index.html.ja.utf80000644000000000000500000005764613520523022017507 0ustar rootsrc モジュール一覧 - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    モジュール一覧

    翻訳済ã¿è¨€èªž:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    以下㯠Apache HTTP サーãƒã®é…布物ã«åŒæ¢±ã•れã¦ã„るモジュール㮠一覧ã§ã™ã€‚Apache HTTP サームディレクティブ ã®ã‚¢ãƒ«ãƒ•ァベット順ã®ãƒªã‚¹ãƒˆã‚‚ã”覧ãã ã•ã„。

    top

    コア機能㨠MPM

    core
    常ã«ä½¿ç”¨å¯èƒ½ãª Apache HTTP サーãƒã®ã‚³ã‚¢æ©Ÿèƒ½
    mpm_common
    二ã¤ä»¥ä¸Šã®ãƒžãƒ«ãƒãƒ—ロセッシングモジュール (MPM) ã§å®Ÿè£…ã•れã¦ã„るディレクティブã®ã‚³ãƒ¬ã‚¯ã‚·ãƒ§ãƒ³
    event
    A variant of the worker MPM with the goal of consuming threads only for connections with active processing
    mpm_netware
    Multi-Processing Module implementing an exclusively threaded web server optimized for Novell NetWare
    mpmt_os2
    Hybrid multi-process, multi-threaded MPM for OS/2
    prefork
    スレッドを使ã‚ãšã€å…ˆè¡Œã—㦠fork を行ãªã†ã‚¦ã‚§ãƒ–サーãƒã‚’実装
    mpm_winnt
    Windows NT å‘ã‘ã«æœ€é©åŒ–ã•れãŸãƒžãƒ«ãƒãƒ—ロセッシングモジュール
    worker
    マルãƒã‚¹ãƒ¬ãƒƒãƒ‰ã¨ãƒžãƒ«ãƒãƒ—ロセスã®ãƒã‚¤ãƒ–リッド型 ウェブサーãƒã‚’実装ã—ãŸãƒžãƒ«ãƒãƒ—ロセッシングモジュール
    top

    ä»–ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«

     A  |  B  |  C  |  D  |  E  |  F  |  H  |  I  |  L  |  M  |  N  |  P  |  R  |  S  |  U  |  V  |  W  |  X 

    mod_access_compat
    ホスト (åå‰ã‚‚ã—ã㯠IP アドレス) ã«åŸºã¥ã„ãŸã‚°ãƒ«ãƒ¼ãƒ—承èª
    mod_actions
    メディアタイプやリクエストメソッドã«å¿œã˜ã¦ CGI スクリプトを実行ã™ã‚‹æ©Ÿèƒ½ã‚’æä¾›
    mod_alias
    ホストファイルシステム上ã®ã„ã‚ã„ã‚ãªé•ã†å ´æ‰€ã‚’ ドキュメントツリーã«ãƒžãƒƒãƒ—ã™ã‚‹æ©Ÿèƒ½ã¨ã€ URL ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’行ãªã†æ©Ÿèƒ½ã‚’æä¾›ã™ã‚‹
    mod_allowmethods
    Easily restrict what HTTP methods can be used on the server
    mod_asis
    自分用㮠HTTP ãƒ˜ãƒƒãƒ€ã®æ›¸ã‹ã‚Œã¦ã„るファイルをé€ä¿¡ã™ã‚‹
    mod_auth_basic
    基本èªè¨¼
    mod_auth_digest
    User authentication using MD5 Digest Authentication
    mod_auth_form
    Form authentication
    mod_authn_anon
    èªè¨¼ãŒå¿…è¦ãªé ˜åŸŸã¸ã® "anonymous" ユーザã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã™ã‚‹
    mod_authn_core
    Core Authentication
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    DBM ファイルを用ã„ãŸãƒ¦ãƒ¼ã‚¶èªè¨¼
    mod_authn_file
    テキストファイルを用ã„ãŸãƒ¦ãƒ¼ã‚¶èªè¨¼
    mod_authn_socache
    Manages a cache of authentication credentials to relieve the load on backends
    mod_authnz_fcgi
    Allows a FastCGI authorizer application to handle Apache httpd authentication and authorization
    mod_authnz_ldap
    Allows an LDAP directory to be used to store the database for HTTP Basic authentication.
    mod_authz_core
    Core Authorization
    mod_authz_dbd
    Group Authorization and Login using SQL
    mod_authz_dbm
    Group authorization using DBM files
    mod_authz_groupfile
    プレーンテキストファイルを用ã„ãŸã‚°ãƒ«ãƒ¼ãƒ—承èª
    mod_authz_host
    Group authorizations based on host (name or IP address)
    mod_authz_owner
    ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‰€æœ‰è€…ã«åŸºã¥ã„ãŸæ‰¿èª
    mod_authz_user
    ユーザ承èª
    mod_autoindex
    Unix ã® ls コマンドや Win32 ã® dir シェルコマンドã«ä¼¼ãŸ ディレクトリインデックスを生æˆã™ã‚‹
    mod_brotli
    Compress content via Brotli before it is delivered to the client
    mod_buffer
    Support for request buffering
    mod_cache
    URI をキーã«ã—ãŸã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥
    mod_cache_disk
    URI をキーã«ã—ãŸã‚³ãƒ³ãƒ†ãƒ³ãƒ„キャッシュストレージ管ç†
    mod_cache_socache
    Shared object cache (socache) based storage module for the HTTP caching filter.
    mod_cern_meta
    CERN httpd metafile semantics
    mod_cgi
    CGI スクリプトã®å®Ÿè¡Œ
    mod_cgid
    外部 CGI デーモンを使ã£ãŸ CGI スクリプトã®å®Ÿè¡Œ
    mod_charset_lite
    Specify character set translation or recoding
    mod_data
    Convert response body into an RFC2397 data URL
    mod_dav
    分散オーサリングã¨ãƒãƒ¼ã‚¸ãƒ§ãƒ³ç®¡ç† (WebDAV) 機能
    mod_dav_fs
    mod_dav ã®ãŸã‚ã®ãƒ•ァイルシステムプロãƒã‚¤ãƒ€
    mod_dav_lock
    mod_dav ç”¨ã®æ±Žç”¨ãƒ­ãƒƒã‚¯ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«
    mod_dbd
    Manages SQL database connections
    mod_deflate
    クライアントã¸é€ã‚‰ã‚Œã‚‹å‰ã«ã‚³ãƒ³ãƒ†ãƒ³ãƒ„を圧縮ã™ã‚‹
    mod_dialup
    Send static content at a bandwidth rate limit, defined by the various old modem standards
    mod_dir
    「最後ã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã€ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã¨ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã® ã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æ‰±ã†æ©Ÿèƒ½ã‚’æä¾›ã™ã‚‹
    mod_dumpio
    望むよã†ã«ã™ã¹ã¦ã® I/O をエラーログã«ãƒ€ãƒ³ãƒ—ã™ã‚‹
    mod_echo
    ãƒ—ãƒ­ãƒˆã‚³ãƒ«ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æ¦‚è¦ã‚’示ã™ãŸã‚ã®å˜ç´”ãªã‚¨ã‚³ãƒ¼ã‚µãƒ¼ãƒ
    mod_env
    CGI スクリプトåŠã³ SSI ãƒšãƒ¼ã‚¸ã«æ¸¡ã•れる環境変数を変更ã™ã‚‹æ©Ÿèƒ½ã‚’æä¾›ã™ã‚‹
    mod_example_hooks
    Illustrates the Apache module API
    mod_expires
    ãƒ¦ãƒ¼ã‚¶ã®æŒ‡å®šã—ãŸåŸºæº–ã«åŸºã¥ã„㟠Expires 㨠Cache-Control HTTP ヘッダã®ç”Ÿæˆ
    mod_ext_filter
    レスãƒãƒ³ã‚¹ã®ãƒœãƒ‡ã‚£ã‚’クライアントã«é€ã‚‹å‰ã«å¤–部プログラムã§å‡¦ç†ã™ã‚‹
    mod_file_cache
    Caches a static list of files in memory
    mod_filter
    Context-sensitive smart filter configuration module
    mod_headers
    HTTP リクエストã®ãƒ˜ãƒƒãƒ€ã¨å¿œç­”ã®ãƒ˜ãƒƒãƒ€ã®ã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚º
    mod_heartbeat
    Sends messages with server status to frontend proxy
    mod_heartmonitor
    Centralized monitor for mod_heartbeat origin servers
    mod_http2
    Support for the HTTP/2 transport layer
    mod_ident
    RFC 1413 ident lookups
    mod_imagemap
    Server-side imagemap processing
    mod_include
    サーãƒãŒãƒ‘ースã™ã‚‹ html ドキュメント (Server Side Includes)
    mod_info
    サーãƒã®è¨­å®šã®åŒ…æ‹¬çš„ãªæ¦‚観をæä¾›ã™ã‚‹
    mod_isapi
    ISAPI Extensions within Apache for Windows
    mod_lbmethod_bybusyness
    Pending Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_byrequests
    Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_bytraffic
    Weighted Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_heartbeat
    Heartbeat Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_ldap
    LDAP connection pooling and result caching services for use by other LDAP modules
    mod_log_config
    サーãƒã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ­ã‚®ãƒ³ã‚°
    mod_log_debug
    Additional configurable debug logging
    mod_log_forensic
    サーãƒã«é€ã‚‰ã‚ŒãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã® forensic ロギング
    mod_logio
    リクエスト毎ã«å…¥åŠ›ãƒã‚¤ãƒˆæ•°ã¨å‡ºåŠ›ãƒã‚¤ãƒˆæ•°ã¨ã‚’ロギング
    mod_lua
    Provides Lua hooks into various portions of the httpd request processing
    mod_macro
    Provides macros within apache httpd runtime configuration files
    mod_md
    Managing domains across virtual hosts, certificate provisioning via the ACME protocol
    mod_mime
    リクエストã•れãŸãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã¨ãƒ•ã‚¡ã‚¤ãƒ«ã®æŒ¯ã‚‹èˆžã„ (ãƒãƒ³ãƒ‰ãƒ©ã¨ãƒ•ィルタ)ã€å†…容 (MIME タイプã€è¨€èªžã€æ–‡å­—セットã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°) ã¨ã‚’関連付ã‘ã‚‹
    mod_mime_magic
    Determines the MIME type of a file by looking at a few bytes of its contents
    mod_negotiation
    コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ 機能をæä¾›ã™ã‚‹
    mod_nw_ssl
    Enable SSL encryption for NetWare
    mod_privileges
    Support for Solaris privileges and for running virtual hosts under different user IDs.
    mod_proxy
    HTTP/1.1 プロキシ/ゲートウェイサーãƒ
    mod_proxy_ajp
    mod_proxy ã§ AJP をサãƒãƒ¼ãƒˆã™ã‚‹ãŸã‚ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«
    mod_proxy_balancer
    è² è·åˆ†æ•£ã®ãŸã‚ã® mod_proxy æ‹¡å¼µ
    mod_proxy_connect
    CONNECT リクエストを扱ㆠmod_proxy ç”¨ã®æ‹¡å¼µ
    mod_proxy_express
    Dynamic mass reverse proxy extension for mod_proxy
    mod_proxy_fcgi
    FastCGI support module for mod_proxy
    mod_proxy_fdpass
    fdpass external process support module for mod_proxy
    mod_proxy_ftp
    FTP support module for mod_proxy
    mod_proxy_hcheck
    Dynamic health check of Balancer members (workers) for mod_proxy
    mod_proxy_html
    Rewrite HTML links in to ensure they are addressable from Clients' networks in a proxy context.
    mod_proxy_http
    HTTP support module for mod_proxy
    mod_proxy_http2
    HTTP/2 support module for mod_proxy
    mod_proxy_scgi
    SCGI gateway module for mod_proxy
    mod_proxy_uwsgi
    UWSGI gateway module for mod_proxy
    mod_proxy_wstunnel
    Websockets support module for mod_proxy
    mod_ratelimit
    Bandwidth Rate Limiting for Clients
    mod_reflector
    Reflect a request body as a response via the output filter stack.
    mod_remoteip
    Replaces the original client IP address for the connection with the useragent IP address list presented by a proxies or a load balancer via the request headers.
    mod_reqtimeout
    Set timeout and minimum data rate for receiving requests
    mod_request
    Filters to handle and make available HTTP request bodies
    mod_rewrite
    Provides a rule-based rewriting engine to rewrite requested URLs on the fly
    mod_sed
    Filter Input (request) and Output (response) content using sed syntax
    mod_session
    Session support
    mod_session_cookie
    Cookie based session support
    mod_session_crypto
    Session encryption support
    mod_session_dbd
    DBD/SQL based session support
    mod_setenvif
    リクエストã®ç‰¹å¾´ã«åŸºã¥ã„ãŸç’°å¢ƒå¤‰æ•°ã®è¨­å®šã‚’å¯èƒ½ã«ã™ã‚‹
    mod_slotmem_plain
    Slot-based shared memory provider.
    mod_slotmem_shm
    Slot-based shared memory provider.
    mod_so
    起動時やå†èµ·å‹•時ã«å®Ÿè¡Œã‚³ãƒ¼ãƒ‰ã¨ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’サーãƒã«ãƒ­ãƒ¼ãƒ‰ã™ã‚‹
    mod_socache_dbm
    DBM based shared object cache provider.
    mod_socache_dc
    Distcache based shared object cache provider.
    mod_socache_memcache
    Memcache based shared object cache provider.
    mod_socache_redis
    Redis based shared object cache provider.
    mod_socache_shmcb
    shmcb based shared object cache provider.
    mod_speling
    ユーザãŒå…¥åŠ›ã—ãŸã§ã‚ã‚ã†é–“é•ã£ãŸ URL ã‚’ã€ å¤§æ–‡å­—å°æ–‡å­—ã®åŒºåˆ¥ã‚’無視ã™ã‚‹ã“ã¨ã¨ä¸€ã¤ä»¥ä¸‹ã®ç¶´ã‚Šé–“é•ã„を許容ã™ã‚‹ã“ã¨ã§ 修正を試ã¿ã‚‹
    mod_ssl
    Strong cryptography using the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols
    mod_status
    サーãƒã®æ´»å‹•状æ³ã¨æ€§èƒ½ã«é–¢ã™ã‚‹æƒ…報をæä¾›ã™ã‚‹
    mod_substitute
    Perform search and replace operations on response bodies
    mod_suexec
    指定ã•れãŸãƒ¦ãƒ¼ã‚¶ã¨ã‚°ãƒ«ãƒ¼ãƒ—ã§ CGI スクリプトを実行ã™ã‚‹
    mod_unique_id
    ãれãžã‚Œã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã™ã‚‹ä¸€æ„ãªè­˜åˆ¥å­ã®å…¥ã£ãŸç’°å¢ƒå¤‰æ•°ã‚’ æä¾›ã™ã‚‹
    mod_unixd
    Basic (required) security for Unix-family platforms.
    mod_userdir
    ユーザ専用ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’æä¾›
    mod_usertrack
    Clickstream logging of user activity on a site
    mod_version
    ãƒãƒ¼ã‚¸ãƒ§ãƒ³ä¾å­˜ã®è¨­å®š
    mod_vhost_alias
    Provides for dynamically configured mass virtual hosting
    mod_watchdog
    provides infrastructure for other modules to periodically run tasks
    mod_xml2enc
    Enhanced charset/internationalisation support for libxml2-based filter modules

    翻訳済ã¿è¨€èªž:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/mod/mod_authn_file.html.en0000644000000000000500000002666413412755316020511 0ustar rootsrc mod_authn_file - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authn_file

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:User authentication using text files
    Status:Base
    Module Identifier:authn_file_module
    Source File:mod_authn_file.c
    Compatibility:Available in Apache 2.1 and later

    Summary

    This module provides authentication front-ends such as mod_auth_digest and mod_auth_basic to authenticate users by looking up users in plain text password files. Similar functionality is provided by mod_authn_dbm.

    When using mod_auth_basic or mod_auth_digest, this module is invoked via the AuthBasicProvider or AuthDigestProvider with the file value.

    top

    AuthUserFile Directive

    Description:Sets the name of a text file containing the list of users and passwords for authentication
    Syntax:AuthUserFile file-path
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_authn_file

    The AuthUserFile directive sets the name of a textual file containing the list of users and passwords for user authentication. File-path is the path to the user file. If it is not absolute, it is treated as relative to the ServerRoot.

    Each line of the user file contains a username followed by a colon, followed by the encrypted password. If the same user ID is defined multiple times, mod_authn_file will use the first occurrence to verify the password.

    The encrypted password format depends on which authentication frontend (e.g. mod_auth_basic or mod_auth_digest) is being used. See Password Formats for more information.

    For mod_auth_basic, use the utility htpasswd which is installed as part of the binary distribution, or which can be found in src/support. See the man page for more details. In short:

    Create a password file Filename with username as the initial ID. It will prompt for the password:

    htpasswd -c Filename username

    Add or modify username2 in the password file Filename:

    htpasswd Filename username2

    Note that searching large text files is very inefficient; AuthDBMUserFile should be used instead.

    For mod_auth_digest, use htdigest instead. Note that you cannot mix user data for Digest Authentication and Basic Authentication within the same file.

    Security

    Make sure that the AuthUserFile is stored outside the document tree of the web-server. Do not put it in the directory that it protects. Otherwise, clients may be able to download the AuthUserFile.

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_anon.html.ja.utf80000644000000000000500000004474513412755316021402 0ustar rootsrc mod_authn_anon - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_authn_anon

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:èªè¨¼ãŒå¿…è¦ãªé ˜åŸŸã¸ã® "anonymous" ユーザã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã™ã‚‹
    ステータス:Extension
    モジュール識別å­:authn_anon_module
    ソースファイル:mod_authn_anon.c
    äº’æ›æ€§:Apache 2.1 以é™

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ mod_auth_basic ã®ã‚ˆã†ãª èªè¨¼ãƒ•ロントエンドã¨ã—ã¦ã€anonymous-ftp サイトã®ã‚ˆã†ãªã€ã€Œé­”法ã®ã€ãƒ¦ãƒ¼ã‚¶ ID 'anonymous' ã¨é›»å­ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’パスワードã«ã—ãŸãƒ¦ãƒ¼ã‚¶èªè¨¼ã‚’ 行ãªã†æ©Ÿèƒ½ã‚’æä¾›ã—ã¾ã™ã€‚ã“ã®é›»å­ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã¯ãƒ­ã‚°åŽé›†ã™ã‚‹ã“ã¨ãŒ ã§ãã¾ã™ã€‚

    ä»–ã® (データベースã«ã‚ˆã‚‹) アクセス制御方法ã¨çµ„ã¿åˆã‚ã›ã‚‹ã“ã¨ã§ã€ 「未登録ã€ãƒ¦ãƒ¼ã‚¶ã«å¯¾ã—ã¦ã‚µã‚¤ãƒˆã‚’公開ã—ã¤ã¤ã€åŠ¹çŽ‡ã‚ˆãユーザ追跡ã—ãŸã‚Šã€ ユーザã®ãƒ—ロファイルã«å¿œã˜ãŸã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºã‚’ã—ãŸã‚Šã§ãã¾ã™ã€‚ ã“ã®ã‚ˆã†ãªèªè¨¼ã«åŸºã¥ã„ãŸãƒ¦ãƒ¼ã‚¶è¿½è·¡ã®åˆ©ç‚¹ã®ä¸€ã¤ã¯ã€ マジッククッキーã«åŸºã¥ãユーザ追跡方法や〠ç妙㪠URL ã®æŽ¥é ­è¾žã‚„æŽ¥å°¾è¾žã‚’åˆ©ç”¨ã—ãŸãƒ¦ãƒ¼ã‚¶è¿½è·¡æ–¹æ³•ã¨ã¯ç•°ãªã‚Šã€ 完全ã«ãƒ–ラウザéžä¾å­˜ã§ã‚りã€ãƒ¦ãƒ¼ã‚¶é–“ã§ URL を共有ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã¨ã„ㆠ点ã§ã™ã€‚

    mod_auth_basic を使用ã—ã¦ã„ã‚‹å ´åˆã¯ã€ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ AuthBasicProvider ã« anon ã¨ã„ã†å€¤ã‚’設定ã™ã‚‹ã“ã¨ã§èµ·å‹•ã•れã¾ã™ã€‚

    Support Apache!

    トピック

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    例

    以下ã®ä¾‹ã¯ã€Œæ™®é€šã€ã® htpasswd ファイルã«åŸºã¥ã„ãŸèªè¨¼ã¨çµ„ã¿åˆã‚ã•れ㦠ãŠã‚Šã€ä»¥ä¸‹ã®è¦ä»¶ã‚’見ãŸã™ãƒ¦ãƒ¼ã‚¶ã‚’「ゲストã€ã¨ã—ã¦è¨±å¯ã—ã¾ã™:

    • ユーザ㯠userID を入力ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 (Anonymous_NoUserID)
    • ユーザã¯ãƒ‘スワードを入力ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 (Anonymous_MustGiveEmail)
    • 入力ã•れãŸãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯æœ‰åйãªé›»å­ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã§ãªã‘れ㰠ãªã‚Šã¾ã›ã‚“。ã™ãªã‚ã¡ã€å°‘ãã¨ã‚‚一ã¤ã® '@' 㨠'.' ㌠å«ã¾ã‚Œã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚ (Anonymous_VerifyEmail)
    • userID 㯠anonymous guest www test welcome ã®ã©ã‚Œã‹ã§ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 ユーザåã®æ¯”較ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã›ã‚“。
    • パスワード欄ã«å…¥åŠ›ã•れãŸé›»å­ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã¯ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ãƒ•ァイル㫠ロギングã•れã¾ã™ã€‚ (Anonymous_LogEmail)

    例

    <Directory /var/www/html/private>
        AuthName "Use 'anonymous' & Email address for guest entry"
        AuthType Basic
        AuthBasicProvider file anon
        AuthUserFile /path/to/your/.htpasswd
        
        Anonymous_NoUserID off
        Anonymous_MustGiveEmail on
        Anonymous_VerifyEmail on
        Anonymous_LogEmail on
        Anonymous anonymous guest www test welcome
        
        Require valid-user
    </Directory>
    top

    Anonymous ディレクティブ

    説明:ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®æ¤œæŸ»ç„¡ã—ã§ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã™ã‚‹ userID を指定ã™ã‚‹
    æ§‹æ–‡:Anonymous user [user] ...
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Extension
    モジュール:mod_authn_anon

    ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®æ¤œæŸ»ã‚’ã—ãªã„ã§ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã™ã‚‹ã€Œé­”法ã®ã€ userID ã‚’ 設定ã—ã¾ã™ã€‚userID 中ã«ç©ºç™½ã‚’使ãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ãŸã‚〠エスケープ文字 \ ã«ã‚ˆã‚‹æ–¹æ³•ã¨ã€å¼•用符 ' 㨠" ã«ã‚ˆã‚‹ã‚¯ã‚ªãƒ¼ãƒ†ã‚£ãƒ³ã‚° を使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚

    ユーザåã®æ¯”較ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—ãªã„ã“ã¨ã« 注æ„ã—ã¦ãã ã•ã„。
    魔法ã®ãƒ¦ãƒ¼ã‚¶å 'anonymous' ãŒè¨±å¯ã•れã¦ã„ã‚‹ userID ã« å«ã‚€ã‚ˆã†ã«ã™ã‚‹ã“ã¨ã¯å¼·ã推奨ã•れã¦ã„ã¾ã™ã€‚

    例:

    Anonymous anonymous "Not Registered" "I don't know"

    ã“れã¯ã€userID "anonymous", "AnonyMous", "Not Registered", "I Don't Know" ã®ã©ã‚Œã‹ã‚’使ã£ã¦ã‚‚ パスワード無ã—ã§ãƒ¦ãƒ¼ã‚¶ãŒã‚µã‚¤ãƒˆã«å…¥ã‚Œã‚‹ã‚ˆã†ã«ã—ã¾ã™ã€‚

    Apache 2.1 ã§ã¯ userID ã« "*" を指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã®å ´åˆã€ã™ã¹ã¦ã®userID を許å¯ã—ã¾ã™ã€‚

    top

    Anonymous_LogEmail ディレクティブ

    説明:入力ã•れãŸãƒ‘スワードãŒã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã«ãƒ­ã‚®ãƒ³ã‚°ã•れるã‹ã©ã†ã‹ã‚’ 設定ã™ã‚‹
    æ§‹æ–‡:Anonymous_LogEmail On|Off
    デフォルト:Anonymous_LogEmail On
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Extension
    モジュール:mod_authn_anon

    デフォルト㮠On ã«è¨­å®šã•れãŸå ´åˆã¯ã€ 入力ã•れ㟠(ã¾ã£ã¨ã†ãªé›»å­ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã‚ã‚‹ã“ã¨ãŒ 期待ã•れる) 「パスワードã€ãŒã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã«ãƒ­ã‚®ãƒ³ã‚°ã•れã¾ã™ã€‚

    top

    Anonymous_MustGiveEmail ディレクティブ

    説明:空パスワードを許å¯ã™ã‚‹ã‹ã©ã†ã‹ã‚’指定ã™ã‚‹
    æ§‹æ–‡:Anonymous_MustGiveEmail On|Off
    デフォルト:Anonymous_MustGiveEmail On
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Extension
    モジュール:mod_authn_anon

    ユーザãŒãƒ‘スワードã¨ã—ã¦é›»å­ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’指定ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã‹ã©ã†ã‹ã‚’ 設定ã—ã¾ã™ã€‚ã“れã¯ç©ºãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ç¦æ­¢ã—ã¾ã™ã€‚

    top

    Anonymous_NoUserID ディレクティブ

    説明:空 userID を許å¯ã™ã‚‹ã‹ã‚’指定ã™ã‚‹
    æ§‹æ–‡:Anonymous_NoUserID On|Off
    デフォルト:Anonymous_NoUserID Off
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Extension
    モジュール:mod_authn_anon

    On ã«è¨­å®šã™ã‚‹ã¨ã€ãƒ¦ãƒ¼ã‚¶ã¯ userID (ã¨ãŠãらã㯠パスワード欄も) 空ã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã“れã¯å˜ã«ãƒªã‚¿ãƒ¼ãƒ³ã‚­ãƒ¼ã‚’ å©ã„ãŸã‚Š OK ボタンを直接クリックã—ãŸã‚Šã™ã‚‹ MS-Explorer ユーザã«ã¯ éžå¸¸ã«ä¾¿åˆ©ã§ã™ã€‚ãã®ã‚ˆã†ãªæ“作ã¯ã”ãã”ã自然ãªã‚‚ã®ã§ã—ょã†ã€‚

    top

    Anonymous_VerifyEmail ディレクティブ

    説明:ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰æ¬„ãŒæ­£ã—ã„å½¢å¼ã®é›»å­ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã‚ã‚‹ã“ã¨ã‚’ 調ã¹ã‚‹ã‹ã©ã†ã‹ã‚’設定ã™ã‚‹
    æ§‹æ–‡:Anonymous_VerifyEmail On|Off
    デフォルト:Anonymous_VerifyEmail Off
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Extension
    モジュール:mod_authn_anon

    On ã«è¨­å®šã•れã¦ã„ã‚‹å ´åˆã€ãƒ¦ãƒ¼ã‚¶ãŒæœ‰åйãªé›»å­ãƒ¡ãƒ¼ãƒ« アドレスを入力ã™ã‚‹ã“ã¨ã‚’推奨ã™ã‚‹ãŸã‚ã€å…¥åŠ›ã•れãŸã€Œãƒ‘スワードã€ã¯ å°‘ãªãã¨ã‚‚一ã¤ã® '@' 㨠'.' ã‚’å«ã‚“ã§ã„ã‚‹ã‹ã©ã†ã‹ã‚’調ã¹ã¾ã™ (上㮠Anonymous_LogEmail å‚ç…§)。

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/quickreference.html.de0000644000000000000500000055542513523273316020515 0ustar rootsrc Kurzreferenz der Direktiven - Apache HTTP Server Version 2.4
    <-

    Kurzreferenz der Direktiven

    Verfügbare Sprachen:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Die Kurzreferenz der Direktiven zeigt die Verwendung, Voreinstellung, den Status und den Kontext aller Apache-Konfigurationsanweisungen. Für weitergehende Informationen schauen Sie bitte im Verzeichnis der Direktiven.

    Die erste Spalte enthält den Namen und die Verwendung. Die zweite Spalte zeigt die Voreinstellung der Direktive, sofern eine Voreinstellung existiert. Wenn die Voreinstellung zu breit für die Anzeige ist, wird sie abgeschnitten und mit einem nachfolgenden "+" versehen.

    Die dritte und vierte Spalte geben den Kontext an, in dem die Direktive erlaubt ist, sowie den Status der Direktive entsprechend der Legende.

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 
    sServerkonfiguration
    vVirtual Host
    dVerzeichnis
    h.htaccess
    CCore
    MMPM
    BBasis
    EErweiterung
    Xexperimentell
    Textern
    AcceptFilter Protokoll FiltersC
    Konfiguriert Optimierungen für lauschende Sockets bestimmter Protokolle
    AcceptPathInfo On|Off|Default Default svdhC
    Ressourcen lassen angehängte Pfadangaben zu
    AccessFileName Dateiname [Dateiname] ... .htaccess svC
    Name der dezentralen Konfigurationsdateien
    Action Aktionsart CGI-Skript [virtual]svdhB
    Aktiviert ein CGI-Skript für einen bestimmten Handler oder Content-Type
    AddAlt string file [file] ...svdhB
    Alternate text to display for a file, instead of an icon selected by filename
    AddAltByEncoding string MIME-encoding [MIME-encoding] ...svdhB
    Alternate text to display for a file instead of an icon selected by MIME-encoding
    AddAltByType string MIME-type [MIME-type] ...svdhB
    Alternate text to display for a file, instead of an icon selected by MIME content-type
    AddCharset charset extension [extension] ...svdhB
    Maps the given filename extensions to the specified content charset
    AddDefaultCharset On|Off|Zeichenkodierung Off svdhC
    Standard-Charset-Parameter, der bei Antworten vom Content-Type text/plain oder text/html hinzugefügt wird
    AddDescription string file [file] ...svdhB
    Description to display for a file
    AddEncoding encoding extension [extension] ...svdhB
    Maps the given filename extensions to the specified encoding type
    AddHandler handler-name extension [extension] ...svdhB
    Maps the filename extensions to the specified handler
    AddIcon icon name [name] ...svdhB
    Icon to display for a file selected by name
    AddIconByEncoding icon MIME-encoding [MIME-encoding] ...svdhB
    Icon to display next to files selected by MIME content-encoding
    AddIconByType icon MIME-type [MIME-type] ...svdhB
    Icon to display next to files selected by MIME content-type
    AddInputFilter filter[;filter...] extension [extension] ...svdhB
    Maps filename extensions to the filters that will process client requests
    AddLanguage language-tag extension [extension] ...svdhB
    Maps the given filename extension to the specified content language
    AddModuleInfo module-name stringsvE
    Adds additional information to the module information displayed by the server-info handler
    AddOutputFilter filter[;filter...] extension [extension] ...svdhB
    Maps filename extensions to the filters that will process responses from the server
    AddOutputFilterByType filter[;filter...] media-type [media-type] ...svdhB
    assigns an output filter to a particular media-type
    AddType media-type extension [extension] ...svdhB
    Maps the given filename extensions onto the specified content type
    Alias [URL-path] file-path|directory-pathsvdB
    Maps URLs to filesystem locations
    AliasMatch regex file-path|directory-pathsvB
    Maps URLs to filesystem locations using regular expressions
    Allow from all|host|env=[!]env-variable [host|env=[!]env-variable] ...dhE
    Controls which hosts can access an area of the server
    AllowCONNECT port[-port] [port[-port]] ... 443 563 svE
    Ports that are allowed to CONNECT through the proxy
    AllowEncodedSlashes On|Off Off svC
    Legt fest, ob kodierte Pfadtrennzeichen in URLs durchgereicht werden dürfen
    AllowMethods reset|HTTP-method [HTTP-method]... reset dX
    Restrict access to the listed HTTP methods
    AllowOverride All|None|Direktiven-Typ [Direktiven-Typ] ... None (2.3.9 und spä +dC
    Direktiven-Typen, die in .htaccess-Dateien erlaubt sind.
    AllowOverrideList None|directive [directive-type] ... None dC
    Individual directives that are allowed in .htaccess files
    Anonymous user [user] ...dhE
    Specifies userIDs that are allowed access without password verification
    Anonymous_LogEmail On|Off On dhE
    Sets whether the password entered will be logged in the error log
    Anonymous_MustGiveEmail On|Off On dhE
    Specifies whether blank passwords are allowed
    Anonymous_NoUserID On|Off Off dhE
    Sets whether the userID field may be empty
    Anonymous_VerifyEmail On|Off Off dhE
    Sets whether to check the password field for a correctly formatted email address
    AsyncRequestWorkerFactor factorsM
    Limit concurrent connections per process
    AuthBasicAuthoritative On|Off On dhB
    Sets whether authorization and authentication are passed to lower level modules
    AuthBasicFake off|username [password]dhB
    Fake basic authentication using the given expressions for username and password
    AuthBasicProvider provider-name [provider-name] ... file dhB
    Sets the authentication provider(s) for this location
    AuthBasicUseDigestAlgorithm MD5|Off Off dhB
    Check passwords against the authentication providers as if Digest Authentication was in force instead of Basic Authentication.
    AuthDBDUserPWQuery querydE
    SQL query to look up a password for a user
    AuthDBDUserRealmQuery querydE
    SQL query to look up a password hash for a user and realm.
    AuthDBMGroupFile file-pathdhE
    Sets the name of the database file containing the list of user groups for authorization
    AuthDBMType default|SDBM|GDBM|NDBM|DB default dhE
    Sets the type of database file that is used to store passwords
    AuthDBMUserFile file-pathdhE
    Sets the name of a database file containing the list of users and passwords for authentication
    AuthDigestAlgorithm MD5|MD5-sess MD5 dhE
    Selects the algorithm used to calculate the challenge and response hashes in digest authentication
    AuthDigestDomain URI [URI] ...dhE
    URIs that are in the same protection space for digest authentication
    AuthDigestNonceLifetime seconds 300 dhE
    How long the server nonce is valid
    AuthDigestProvider provider-name [provider-name] ... file dhE
    Sets the authentication provider(s) for this location
    AuthDigestQop none|auth|auth-int [auth|auth-int] auth dhE
    Determines the quality-of-protection to use in digest authentication
    AuthDigestShmemSize size 1000 sE
    The amount of shared memory to allocate for keeping track of clients
    AuthFormAuthoritative On|Off On dhB
    Sets whether authorization and authentication are passed to lower level modules
    AuthFormBody fieldnamedB
    The name of a form field carrying the body of the request to attempt on successful login
    AuthFormDisableNoStore On|Off Off dB
    Disable the CacheControl no-store header on the login page
    AuthFormFakeBasicAuth On|Off Off dB
    Fake a Basic Authentication header
    AuthFormLocation fieldnamedB
    The name of a form field carrying a URL to redirect to on successful login
    AuthFormLoginRequiredLocation urldB
    The URL of the page to be redirected to should login be required
    AuthFormLoginSuccessLocation urldB
    The URL of the page to be redirected to should login be successful
    AuthFormLogoutLocation uridB
    The URL to redirect to after a user has logged out
    AuthFormMethod fieldnamedB
    The name of a form field carrying the method of the request to attempt on successful login
    AuthFormMimetype fieldnamedB
    The name of a form field carrying the mimetype of the body of the request to attempt on successful login
    AuthFormPassword fieldnamedB
    The name of a form field carrying the login password
    AuthFormProvider provider-name [provider-name] ... file dhB
    Sets the authentication provider(s) for this location
    AuthFormSitePassphrase secretdB
    Bypass authentication checks for high traffic sites
    AuthFormSize sizedB
    The largest size of the form in bytes that will be parsed for the login details
    AuthFormUsername fieldnamedB
    The name of a form field carrying the login username
    AuthGroupFile file-pathdhB
    Sets the name of a text file containing the list of user groups for authorization
    AuthLDAPAuthorizePrefix prefix AUTHORIZE_ dhE
    Specifies the prefix for environment variables set during authorization
    AuthLDAPBindAuthoritative off|on on dhE
    Determines if other authentication providers are used when a user can be mapped to a DN but the server cannot successfully bind with the user's credentials.
    AuthLDAPBindDN distinguished-namedhE
    Optional DN to use in binding to the LDAP server
    AuthLDAPBindPassword passworddhE
    Password used in conjunction with the bind DN
    AuthLDAPCharsetConfig file-pathsE
    Language to charset conversion configuration file
    AuthLDAPCompareAsUser on|off off dhE
    Use the authenticated user's credentials to perform authorization comparisons
    AuthLDAPCompareDNOnServer on|off on dhE
    Use the LDAP server to compare the DNs
    AuthLDAPDereferenceAliases never|searching|finding|always always dhE
    When will the module de-reference aliases
    AuthLDAPGroupAttribute attribute member uniqueMember +dhE
    LDAP attributes used to identify the user members of groups.
    AuthLDAPGroupAttributeIsDN on|off on dhE
    Use the DN of the client username when checking for group membership
    AuthLDAPInitialBindAsUser off|on off dhE
    Determines if the server does the initial DN lookup using the basic authentication users' own username, instead of anonymously or with hard-coded credentials for the server
    AuthLDAPInitialBindPattern regex substitution (.*) $1 (remote use +dhE
    Specifies the transformation of the basic authentication username to be used when binding to the LDAP server to perform a DN lookup
    AuthLDAPMaxSubGroupDepth Number 10 dhE
    Specifies the maximum sub-group nesting depth that will be evaluated before the user search is discontinued.
    AuthLDAPRemoteUserAttribute uiddhE
    Use the value of the attribute returned during the user query to set the REMOTE_USER environment variable
    AuthLDAPRemoteUserIsDN on|off off dhE
    Use the DN of the client username to set the REMOTE_USER environment variable
    AuthLDAPSearchAsUser on|off off dhE
    Use the authenticated user's credentials to perform authorization searches
    AuthLDAPSubGroupAttribute attribute member uniqueMember +dhE
    Specifies the attribute labels, one value per directive line, used to distinguish the members of the current group that are groups.
    AuthLDAPSubGroupClass LdapObjectClass groupOfNames groupO +dhE
    Specifies which LDAP objectClass values identify directory objects that are groups during sub-group processing.
    AuthLDAPURL url [NONE|SSL|TLS|STARTTLS]dhE
    URL specifying the LDAP search parameters
    AuthMerging Off | And | Or Off dhB
    Controls the manner in which each configuration section's authorization logic is combined with that of preceding configuration sections.
    AuthName auth-domaindhB
    Authorization realm for use in HTTP authentication
    AuthnCacheContext directory|server|custom-stringdB
    Specify a context string for use in the cache key
    AuthnCacheEnablesB
    Enable Authn caching configured anywhere
    AuthnCacheProvideFor authn-provider [...]dhB
    Specify which authn provider(s) to cache for
    AuthnCacheSOCache provider-name[:provider-args]sB
    Select socache backend provider to use
    AuthnCacheTimeout timeout (seconds)dhB
    Set a timeout for cache entries
    <AuthnProviderAlias baseProvider Alias> ... </AuthnProviderAlias>sB
    Enclose a group of directives that represent an extension of a base authentication provider and referenced by the specified alias
    AuthnzFcgiCheckAuthnProvider provider-name|None option ...dE
    Enables a FastCGI application to handle the check_authn authentication hook.
    AuthnzFcgiDefineProvider type provider-name backend-addresssE
    Defines a FastCGI application as a provider for authentication and/or authorization
    AuthType None|Basic|Digest|FormdhB
    Type of user authentication
    AuthUserFile file-pathdhB
    Sets the name of a text file containing the list of users and passwords for authentication
    AuthzDBDLoginToReferer On|Off Off dE
    Determines whether to redirect the Client to the Referring page on successful login or logout if a Referer request header is present
    AuthzDBDQuery querydE
    Specify the SQL Query for the required operation
    AuthzDBDRedirectQuery querydE
    Specify a query to look up a login page for the user
    AuthzDBMType default|SDBM|GDBM|NDBM|DB default dhE
    Sets the type of database file that is used to store list of user groups
    <AuthzProviderAlias baseProvider Alias Require-Parameters> ... </AuthzProviderAlias> sB
    Enclose a group of directives that represent an extension of a base authorization provider and referenced by the specified alias
    AuthzSendForbiddenOnFailure On|Off Off dhB
    Send '403 FORBIDDEN' instead of '401 UNAUTHORIZED' if authentication succeeds but authorization fails
    BalancerGrowth # 5 svE
    Number of additional Balancers that can be added Post-configuration
    BalancerInherit On|Off On svE
    Inherit ProxyPassed Balancers/Workers from the main server
    BalancerMember [balancerurl] url [key=value [key=value ...]]dE
    Add a member to a load balancing group
    BalancerPersist On|Off Off svE
    Attempt to persist changes made by the Balancer Manager across restarts.
    BrotliAlterETag AddSuffix|NoChange|Remove AddSuffix svE
    How the outgoing ETag header should be modified during compression
    BrotliCompressionMaxInputBlock valuesvE
    Maximum input block size
    BrotliCompressionQuality value 5 svE
    Compression quality
    BrotliCompressionWindow value 18 svE
    Brotli sliding compression window size
    BrotliFilterNote [type] notenamesvE
    Places the compression ratio in a note for logging
    BrowserMatch regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables conditional on HTTP User-Agent
    BrowserMatchNoCase regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables conditional on User-Agent without respect to case
    BufferedLogs On|Off Off sB
    Buffer log entries in memory before writing to disk
    BufferSize integer 131072 svdhE
    Maximum size in bytes to buffer by the buffer filter
    CacheDefaultExpire seconds 3600 (one hour) svdhE
    The default duration to cache a document when no expiry date is specified.
    CacheDetailHeader on|off off svdhE
    Add an X-Cache-Detail header to the response.
    CacheDirLength length 2 svE
    The number of characters in subdirectory names
    CacheDirLevels levels 2 svE
    The number of levels of subdirectories in the cache.
    CacheDisable url-string | onsvdhE
    Disable caching of specified URLs
    CacheEnable cache_type [url-string]svdE
    Enable caching of specified URLs using a specified storage manager
    CacheFile file-path [file-path] ...sX
    Cache a list of file handles at startup time
    CacheHeader on|off off svdhE
    Add an X-Cache header to the response.
    CacheIgnoreCacheControl On|Off Off svE
    Ignore request to not serve cached content to client
    CacheIgnoreHeaders header-string [header-string] ... None svE
    Do not store the given HTTP header(s) in the cache.
    CacheIgnoreNoLastMod On|Off Off svdhE
    Ignore the fact that a response has no Last Modified header.
    CacheIgnoreQueryString On|Off Off svE
    Ignore query string when caching
    CacheIgnoreURLSessionIdentifiers identifier [identifier] ... None svE
    Ignore defined session identifiers encoded in the URL when caching
    CacheKeyBaseURL URLsvE
    Override the base URL of reverse proxied cache keys.
    CacheLastModifiedFactor float 0.1 svdhE
    The factor used to compute an expiry date based on the LastModified date.
    CacheLock on|off off svE
    Enable the thundering herd lock.
    CacheLockMaxAge integer 5 svE
    Set the maximum possible age of a cache lock.
    CacheLockPath directory /tmp/mod_cache-lock +svE
    Set the lock path directory.
    CacheMaxExpire seconds 86400 (one day) svdhE
    The maximum time in seconds to cache a document
    CacheMaxFileSize bytes 1000000 svdhE
    The maximum size (in bytes) of a document to be placed in the cache
    CacheMinExpire seconds 0 svdhE
    The minimum time in seconds to cache a document
    CacheMinFileSize bytes 1 svdhE
    The minimum size (in bytes) of a document to be placed in the cache
    CacheNegotiatedDocs On|Off Off svB
    Allows content-negotiated documents to be cached by proxy servers
    CacheQuickHandler on|off on svE
    Run the cache from the quick handler.
    CacheReadSize bytes 0 svdhE
    The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    CacheReadTime milliseconds 0 svdhE
    The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    CacheRoot directorysvE
    The directory root under which cache files are stored
    CacheSocache type[:args]svE
    The shared object cache implementation to use
    CacheSocacheMaxSize bytes 102400 svdhE
    The maximum size (in bytes) of an entry to be placed in the cache
    CacheSocacheMaxTime seconds 86400 svdhE
    The maximum time (in seconds) for a document to be placed in the cache
    CacheSocacheMinTime seconds 600 svdhE
    The minimum time (in seconds) for a document to be placed in the cache
    CacheSocacheReadSize bytes 0 svdhE
    The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    CacheSocacheReadTime milliseconds 0 svdhE
    The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    CacheStaleOnError on|off on svdhE
    Serve stale content in place of 5xx responses.
    CacheStoreExpired On|Off Off svdhE
    Attempt to cache responses that the server reports as expired
    CacheStoreNoStore On|Off Off svdhE
    Attempt to cache requests or responses that have been marked as no-store.
    CacheStorePrivate On|Off Off svdhE
    Attempt to cache responses that the server has marked as private
    CGIDScriptTimeout time[s|ms]svdhB
    The length of time to wait for more output from the CGI program
    CGIMapExtension CGI-Pfad .EndungdhC
    Technik zur Bestimmung des Interpreters für CGI-Skripte
    CGIPassAuth On|Off Off dhC
    Enables passing HTTP authorization headers to scripts as CGI variables
    CGIVar variable ruledhC
    Controls how some CGI variables are set
    CharsetDefault charsetsvdhE
    Charset to translate into
    CharsetOptions option [option] ... ImplicitAdd svdhE
    Configures charset translation behavior
    CharsetSourceEnc charsetsvdhE
    Source charset of files
    CheckCaseOnly on|off Off svdhE
    Limits the action of the speling module to case corrections
    CheckSpelling on|off Off svdhE
    Enables the spelling module
    ChrootDir /path/to/directorysB
    Directory for apache to run chroot(8) after startup.
    ContentDigest On|Off Off svdhC
    Aktiviert die Generierung von Content-MD5 HTTP-Response-Headern
    CookieDomain domainsvdhE
    The domain to which the tracking cookie applies
    CookieExpires expiry-periodsvdhE
    Expiry time for the tracking cookie
    CookieName token Apache svdhE
    Name of the tracking cookie
    CookieStyle Netscape|Cookie|Cookie2|RFC2109|RFC2965 Netscape svdhE
    Format of the cookie header field
    CookieTracking on|off off svdhE
    Enables tracking cookie
    CoreDumpDirectory VerzeichnissM
    Verzeichnis, in das der Apache zu wechseln versucht, bevor er einen Hauptspeicherauszug erstellt
    CustomLog file|pipe format|nickname [env=[!]environment-variable| expr=expression]svB
    Sets filename and format of log file
    Dav On|Off|provider-name Off dE
    Enable WebDAV HTTP methods
    DavDepthInfinity on|off off svdE
    Allow PROPFIND, Depth: Infinity requests
    DavGenericLockDB file-pathsvdE
    Location of the DAV lock database
    DavLockDB file-pathsvE
    Location of the DAV lock database
    DavMinTimeout seconds 0 svdE
    Minimum amount of time the server holds a lock on a DAV resource
    DBDExptime time-in-seconds 300 svE
    Keepalive time for idle connections
    DBDInitSQL "SQL statement"svE
    Execute an SQL statement after connecting to a database
    DBDKeep number 2 svE
    Maximum sustained number of connections
    DBDMax number 10 svE
    Maximum number of connections
    DBDMin number 1 svE
    Minimum number of connections
    DBDParams param1=value1[,param2=value2]svE
    Parameters for database connection
    DBDPersist On|OffsvE
    Whether to use persistent connections
    DBDPrepareSQL "SQL statement" labelsvE
    Define an SQL prepared statement
    DBDriver namesvE
    Specify an SQL driver
    DefaultIcon url-pathsvdhB
    Icon to display for files when no specific icon is configured
    DefaultLanguage language-tagsvdhB
    Defines a default language-tag to be sent in the Content-Language header field for all resources in the current context that have not been assigned a language-tag by some other means.
    DefaultRuntimeDir directory-path DEFAULT_REL_RUNTIME +sC
    Base directory for the server run-time files
    DefaultType MIME-Type text/plain svdhC
    MIME-Content-Type, der gesendet wird, wenn der Server den Typ nicht auf andere Weise ermitteln kann.
    Define ParameternamesC
    Define the existence of a variable
    DeflateBufferSize value 8096 svE
    Fragment size to be compressed at one time by zlib
    DeflateCompressionLevel valuesvE
    How much compression do we apply to the output
    DeflateFilterNote [type] notenamesvE
    Places the compression ratio in a note for logging
    DeflateInflateLimitRequestBody valuesvdhE
    Maximum size of inflated request bodies
    DeflateInflateRatioBurst value 3 svdhE
    Maximum number of times the inflation ratio for request bodies can be crossed
    DeflateInflateRatioLimit value 200 svdhE
    Maximum inflation ratio for request bodies
    DeflateMemLevel value 9 svE
    How much memory should be used by zlib for compression
    DeflateWindowSize value 15 svE
    Zlib compression window size
    Deny from all|host|env=[!]env-variable [host|env=[!]env-variable] ...dhE
    Controls which hosts are denied access to the server
    <Directory Verzeichnispfad> ... </Directory>svC
    Umschließt eine Gruppe von Direktiven, die nur auf das genannte Verzeichnis des Dateisystems und Unterverzeichnisse angewendet werden
    DirectoryCheckHandler On|Off Off svdhB
    Toggle how this module responds when another handler is configured
    DirectoryIndex disabled | local-url [local-url] ... index.html svdhB
    List of resources to look for when the client requests a directory
    DirectoryIndexRedirect on | off | permanent | temp | seeother | 3xx-code off svdhB
    Configures an external redirect for directory indexes.
    <DirectoryMatch regex> ... </DirectoryMatch>svC
    Umschließt eine Gruppe von Direktiven, die auf Verzeichnisse des Dateisystems und ihre Unterverzeichnisse abgebildet werden, welche auf einen regulären Ausdruck passen
    DirectorySlash On|Off On svdhB
    Toggle trailing slash redirects on or off
    DocumentRoot Verzeichnis /usr/local/apache/h +svC
    Verzeichnis, welches den Haupt-Dokumentenbaum bildet, der im Web sichtbar ist.
    DTracePrivileges On|Off Off sX
    Determines whether the privileges required by dtrace are enabled.
    DumpIOInput On|Off Off sE
    Dump all input data to the error log
    DumpIOOutput On|Off Off sE
    Dump all output data to the error log
    <Else> ... </Else>svdhC
    Contains directives that apply only if the condition of a previous <If> or <ElseIf> section is not satisfied by a request at runtime
    <ElseIf expression> ... </ElseIf>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime while the condition of a previous <If> or <ElseIf> section is not satisfied
    EnableExceptionHook On|Off Off sM
    Aktiviert einen Hook, der nach einem Absturz noch Ausnahmefehler behandeln lassen kann
    EnableMMAP On|Off On svdhC
    Verwende Memory-Mapping, um Dateien während der Auslieferung zu lesen
    EnableSendfile On|Off On svdhC
    Verwende die sendfile-Unterstützung des Kernels, um Dateien an den Client auszuliefern
    Error messagesvdhC
    Abort configuration parsing with a custom error message
    ErrorDocument Fehlercode DokumentsvdhC
    Das, was der Server im Fehlerfall an den Client zurückgibt
    ErrorLog Dateiname|syslog[:facility] logs/error_log (Uni +svC
    Ablageort, an dem der Server Fehler protokolliert
    ErrorLogFormat [connection|request] formatsvC
    Format specification for error log entries
    ExamplesvdhX
    Demonstration directive to illustrate the Apache module API
    ExpiresActive On|Off Off svdhE
    Enables generation of Expires headers
    ExpiresByType MIME-type <code>secondssvdhE
    Value of the Expires header configured by MIME type
    ExpiresDefault <code>secondssvdhE
    Default algorithm for calculating expiration time
    ExtendedStatus On|Off Off[*] sC
    Keep track of extended status information for each request
    ExtFilterDefine filtername parameterssE
    Define an external filter
    ExtFilterOptions option [option] ... NoLogStderr dE
    Configure mod_ext_filter options
    FallbackResource disabled | local-urlsvdhB
    Define a default URL for requests that don't map to a file
    FileETag Komponente ... INode MTime Size svdhC
    Dateiattribute, die zur Erstellung des HTTP-Response-Headers ETag verwendet werden
    <Files Dateiname> ... </Files>svdhC
    Enthält Direktiven, die sich nur auf passende Dateinamen beziehen
    <FilesMatch regex> ... </FilesMatch>svdhC
    Enthält Direktiven, die für Dateinamen gelten, die auf einen regulären Ausdruck passen
    FilterChain [+=-@!]filter-name ...svdhB
    Configure the filter chain
    FilterDeclare filter-name [type]svdhB
    Declare a smart filter
    FilterProtocol filter-name [provider-name] proto-flagssvdhB
    Deal with correct HTTP protocol handling
    FilterProvider filter-name provider-name expressionsvdhB
    Register a content filter
    FilterTrace filter-name levelsvdB
    Get debug/diagnostic information from mod_filter
    ForceLanguagePriority None|Prefer|Fallback [Prefer|Fallback] Prefer svdhB
    Action to take if a single acceptable document is not found
    ForceType MIME-Type|NonedhC
    Erzwingt die Auslieferung aller passendenden Dateien mit dem angegebenen MIME-Content-Type
    ForensicLog filename|pipesvE
    Sets filename of the forensic log
    GlobalLogfile|pipe format|nickname [env=[!]environment-variable| expr=expression]sB
    Sets filename and format of log file
    GprofDir /tmp/gprof/|/tmp/gprof/%svC
    Directory to write gmon.out profiling data to.
    GracefulShutdownTimeout seconds 0 sM
    Specify a timeout after which a gracefully shutdown server will exit.
    Group unix-group #-1 sB
    Group under which the server will answer requests
    H2CopyFiles on|off off svdhE
    Determine file handling in responses
    H2Direct on|off on for h2c, off for +svE
    H2 Direct Protocol Switch
    H2EarlyHints on|off off svE
    Determine sending of 103 status codes
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] svdhE
    Configure HTTP response headers
    HeaderName filenamesvdhB
    Name of the file that will be inserted at the top of the index listing
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending heartbeat requests to this server
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Aktiviert DNS-Lookups auf Client-IP-Adressen
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    Enables logging of the RFC 1413 identity of the remote user
    IdentityCheckTimeout seconds 30 svdE
    Determines the timeout duration for ident requests
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime
    <IfDefine [!]Parametername> ... </IfDefine>svdhC
    Schließt Direktiven ein, die nur ausgeführt werden, wenn eine Testbedingung beim Start wahr ist
    <IfDirective [!]directive-name> ... </IfDirective>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific directive
    <IfFile [!]filename> ... </IfFile>svdhC
    Encloses directives that will be processed only if file exists at startup
    <IfModule [!]Modulname|Modulbezeichner> ... </IfModule>svdhC
    Schließt Direktiven ein, die abhängig vom Vorhandensein oder Fehlen eines speziellen Moduls ausgeführt werden
    <IfSection [!]section-name> ... </IfSection>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific section directive
    <IfVersion [[!]operator] version> ... </IfVersion>svdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates that are not explicitly mapped
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling an imagemap
    Include Dateiname|VerzeichnissvdC
    Fügt andere Konfigurationsdateien innerhalb der Server-Konfigurationsdatei ein
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IndexHeadInsert "markup ..."svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ... "." svdhB
    Adds to the list of files to hide when listing a directory
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing a directory
    IndexOptions [+|-]option [[+|-]option] ...svdhB
    Various configuration settings for directory indexing
    IndexOrderDefault Ascending|Descending Name|Date|Size|Description Ascending Name svdhB
    Sets the default ordering of the directory index
    IndexStyleSheet url-pathsvdhB
    Adds a CSS stylesheet to the directory index
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field
    ISAPICacheFile file-path [file-path] ...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI extensions
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI extensions
    KeepAlive On|Off On svC
    Aktiviert persistente HTTP-Verbindungen
    KeepAliveTimeout Sekunden 5 svC
    Zeitspanne, die der Server während persistenter Verbindungen auf nachfolgende Anfragen wartet
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to the specified maximum size, for potential use by filters such as mod_include.
    LanguagePriority MIME-lang [MIME-lang] ...svdhB
    The precedence of language variants for cases where the client does not express a preference
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare operations
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain valid
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted Certificate Authority or global client certificates
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit Methode [Methode] ... > ... </Limit>svdhC
    Beschränkt die eingeschlossenen Zugriffskontrollen auf bestimmte HTTP-Methoden
    <LimitExcept Methode [Methode] ... > ... </LimitExcept>svdhC
    Beschränkt Zugriffskontrollen auf alle HTTP-Methoden außer den genannten
    LimitInternalRecursion Zahl [Zahl] 10 svC
    Bestimmt die maximale Anzahl interner Umleitungen und verschachtelter Unteranfragen
    LimitRequestBody Bytes 0 svdhC
    Begrenzt die Gesamtgröße des vom Client gesendeten HTTP-Request-Body
    LimitRequestFields Anzahl 100 sC
    Begrenzt die Anzahl der HTTP-Request-Header, die vom Client entgegengenommen werden
    LimitRequestFieldsize BytessC
    Begrenzt die Länge des vom Client gesendeten HTTP-Request-Headers
    LimitRequestLine Bytes 8190 sC
    Begrenzt die Länge der vom Client entgegengenommenen HTTP-Anfragezeile
    LimitXMLRequestBody Bytes 1000000 svdhC
    Begrenzt die Größe eines XML-basierten Request-Bodys
    Listen [IP-Addresse:]PortsM
    IP-Adressen und Ports, an denen der Server lauscht
    ListenBacklog backlogsM
    Maximale Länge der Warteschlange schwebender Verbindungen
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of listeners' buckets
    LoadFile filename [filename] ...svE
    Link in the named object file or library
    LoadModule module filenamesvE
    Links in the object file or library, and adds to the list of active modules
    <Location URL-Pfad|URL> ... </Location>svC
    Wendet die enthaltenen Direktiven nur auf die entsprechenden URLs an
    <LocationMatch regex> ... </LocationMatch>svC
    Wendet die enthaltenen Direktiven nur auf URLs an, die auf reguläre Ausdrücke passen
    LogFormat format|nickname [nickname] "%h %l %u %t \"%r\" +svB
    Describes a format for use in a log file
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel Level warn svC
    Steuert die Ausführlichkeit des Fehlerprotokolls
    LogMessage message [hook=hook] [expr=expression] dX
    Log user-defined message to error log
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    <Macro name [par1 .. parN]> ... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server will handle during its life
    MaxKeepAliveRequests Anzahl 100 svC
    Anzahl der Anfragen, die bei einer persistenten Verbindung zulässig sind
    MaxMemFree KBytes 0 sM
    Maximale Menge des Arbeitsspeichers, den die Haupt-Zuteilungsroutine verwalten darf, ohne free() aufzurufen
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete resource
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed simultaneously
    MaxSpareServers Anzahl 10 sM
    Maximale Anzahl der unbeschäftigten Kindprozesse des Servers
    MaxSpareThreads AnzahlsM
    Maximale Anzahl unbeschäftigter Threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDBaseServer on|off off sE
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sE
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsE
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url https://acme-v02.ap +sE
    The URL of the ACME Certificate Authority service.
    MDCertificateFile path-to-pem-filesE
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesE
    Specify a static private key for for the static cerrtificate.
    MDCertificateProtocol protocol ACME sE
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sE
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsE
    -
    MDDriveMode always|auto|manual auto sE
    former name of MDRenewMode.
    MDHttpProxy urlsE
    Define a proxy for outgoing connections.
    MDMember hostnamesE
    Additional hostname for the managed domain.
    MDMembers auto|manual auto sE
    Control if the alias domain names are automatically added.
    MDMessageCmd path-to-cmd optional-argssE
    Handle events for Manage Domains
    MDMustStaple on|off off sE
    Control if new certificates carry the OCSP Must Staple flag.
    MDNotifyCmd path [ args ]sE
    Run a program when a Managed Domain is ready.
    MDomain dns-name [ other-dns-name... ] [auto|manual]sE
    Define list of domain names that belong to one group.
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sE
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sE
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sE
    Set type and size of the private keys generated.
    MDRenewMode always|auto|manual auto sE
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sE
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sE
    Redirects http: traffic to https: for Managed Domains.
    MDServerStatus on|off on sE
    Control if Managed Domain information is added to server-status.
    MDStoreDir path md sE
    Path on the local file system to store the Managed Domains data.
    MDWarnWindow duration 10% sE
    Define the time window when you want to be warned about an expiring certificate.
    MemcacheConnTTL num[units] 15s svE
    Keepalive time for idle connections
    MergeSlashes ON|OFF ON svC
    Controls whether the server merges consecutive slashes in URLs.
    MergeTrailers [on|off] off svC
    Determines whether trailers are merged into headers
    MetaDir directory .web svdhE
    Name of the directory to find CERN-style meta information files
    MetaFiles on|off off svdhE
    Activates CERN meta-file processing
    MetaSuffix suffix .meta svdhE
    File name suffix for the file containing CERN-style meta information
    MimeMagicFile file-pathsvE
    Enable MIME-type determination based on file contents using the specified magic file
    MinSpareServers Anzahl 5 sM
    Minimale Anzahl der unbeschäftigten Kindprozesse des Servers
    MinSpareThreads AnzahlsM
    Minimale Anzahl unbeschäftigter Threads, die zur Bedienung von Anfragespitzen zur Verfügung stehen
    MMapFile file-path [file-path] ...sX
    Map a list of files into memory at startup time
    ModemStandard V.21|V.26bis|V.32|V.34|V.92dX
    Modem standard to simulate
    ModMimeUsePathInfo On|Off Off dB
    Tells mod_mime to treat path_info components as part of the filename
    MultiviewsMatch Any|NegotiatedOnly|Filters|Handlers [Handlers|Filters] NegotiatedOnly svdhB
    The types of files that will be included when searching for a matching file with MultiViews
    Mutex mechanism [default|mutex-name] ... [OmitPID] default sC
    Configures mutex mechanism and lock file directory for all or specified mutexes
    NameVirtualHost Adresse[:Port]sC
    Bestimmt eine IP-Adresse für den Betrieb namensbasierter virtueller Hosts
    NoProxy host [host] ...svE
    Hosts, domains, or networks that will be connected to directly
    NWSSLTrustedCerts filename [filename] ...sB
    List of additional client certificates
    NWSSLUpgradeable [IP-address:]portnumbersB
    Allows a connection to be upgraded to an SSL connection upon request
    Options [+|-]Option [[+|-]Option] ... All svdhC
    Definiert, welche Eigenschaften oder Funktionen in einem bestimmten Verzeichnis verfügbar sind
    Order ordering Deny,Allow dhE
    Controls the default access state and the order in which Allow and Deny are evaluated.
    OutputSed sed-commanddhX
    Sed command for filtering response content
    PassEnv env-variable [env-variable] ...svdhB
    Passes environment variables from the shell
    PidFile Dateiname logs/httpd.pid sM
    Datei, in welcher der Server die Prozess-ID des Daemons ablegt
    PrivilegesMode FAST|SECURE|SELECTIVE FAST svdX
    Trade off processing speed and efficiency vs security against malicious privileges-aware code.
    Protocol protocolsvC
    Protocol for a listening socket
    ProtocolEcho On|Off Off svX
    Turn the echo server on or off
    Protocols protocol ... http/1.1 svC
    Protocols available for a server/virtual host
    ProtocolsHonorOrder On|Off On svC
    Determines if order of Protocols determines precedence during negotiation
    <Proxy wildcard-url> ...</Proxy>svE
    Container for directives applied to proxied resources
    Proxy100Continue Off|On On svdE
    Forward 100-continue expectation to the origin server
    ProxyAddHeaders Off|On On svdE
    Add proxy information in X-Forwarded-* headers
    ProxyBadHeader IsError|Ignore|StartBody IsError svE
    Determines how to handle bad header lines in a response
    ProxyBlock *|word|host|domain [word|host|domain] ...svE
    Words, hosts, or domains that are banned from being proxied
    ProxyDomain DomainsvE
    Default domain name for proxied requests
    ProxyErrorOverride On|Off Off svdE
    Override error pages for proxied content
    ProxyExpressDBMFile pathnamesvE
    Pathname to DBM file.
    ProxyExpressDBMType type default svE
    DBM type of file.
    ProxyExpressEnable on|off off svE
    Enable the module functionality.
    ProxyFCGIBackendType FPM|GENERIC FPM svdhE
    Specify the type of backend FastCGI application
    ProxyFCGISetEnvIf conditional-expression [!]environment-variable-name [value-expression]svdhE
    Allow variables sent to FastCGI servers to be fixed up
    ProxyFtpDirCharset character_set ISO-8859-1 svdE
    Define the character set for proxied FTP listings
    ProxyFtpEscapeWildcards on|off on svdE
    Whether wildcards in requested filenames are escaped when sent to the FTP server
    ProxyFtpListOnWildcard on|off on svdE
    Whether wildcards in requested filenames trigger a file listing
    ProxyHCExpr name {ap_expr expression}svE
    Creates a named condition expression to use to determine health of the backend based on its response
    ProxyHCTemplate name parameter=setting [...]svE
    Creates a named template for setting various health check parameters
    ProxyHCTPsize size 16 sE
    Sets the total server-wide size of the threadpool used for the health check workers
    ProxyHTMLBufSize bytes 8192 svdB
    Sets the buffer size increment for buffering inline scripts and stylesheets.
    ProxyHTMLCharsetOut Charset | *svdB
    Specify a charset for mod_proxy_html output.
    ProxyHTMLDocType HTML|XHTML [Legacy]
    OR
    ProxyHTMLDocType fpi [SGML|XML]
    svdB
    Sets an HTML or XHTML document type declaration.
    ProxyHTMLEnable On|Off Off svdB
    Turns the proxy_html filter on or off.
    ProxyHTMLEvents attribute [attribute ...]svdB
    Specify attributes to treat as scripting events.
    ProxyHTMLExtended On|Off Off svdB
    Determines whether to fix links in inline scripts, stylesheets, and scripting events.
    ProxyHTMLFixups [lowercase] [dospath] [reset]svdB
    Fixes for simple HTML errors.
    ProxyHTMLInterp On|Off Off svdB
    Enables per-request interpolation of ProxyHTMLURLMap rules.
    ProxyHTMLLinks element attribute [attribute2 ...]svdB
    Specify HTML elements that have URL attributes to be rewritten.
    ProxyHTMLMeta On|Off Off svdB
    Turns on or off extra pre-parsing of metadata in HTML <head> sections.
    ProxyHTMLStripComments On|Off Off svdB
    Determines whether to strip HTML comments.
    ProxyHTMLURLMap from-pattern to-pattern [flags] [cond]svdB
    Defines a rule to rewrite HTML links
    ProxyIOBufferSize bytes 8192 svE
    Determine size of internal data throughput buffer
    <ProxyMatch regex> ...</ProxyMatch>svE
    Container for directives applied to regular-expression-matched proxied resources
    ProxyMaxForwards number -1 svE
    Maximium number of proxies that a request can be forwarded through
    ProxyPass [path] !|url [key=value [key=value ...]] [nocanon] [interpolate] [noquery]svdE
    Maps remote servers into the local server URL-space
    ProxyPassInherit On|Off On svE
    Inherit ProxyPass directives defined from the main server
    ProxyPassInterpolateEnv On|Off Off svdE
    Enable Environment Variable interpolation in Reverse Proxy configurations
    ProxyPassMatch [regex] !|url [key=value [key=value ...]]svdE
    Maps remote servers into the local server URL-space using regular expressions
    ProxyPassReverse [path] url [interpolate]svdE
    Adjusts the URL in HTTP response headers sent from a reverse proxied server
    ProxyPassReverseCookieDomain internal-domain public-domain [interpolate]svdE
    Adjusts the Domain string in Set-Cookie headers from a reverse- proxied server
    ProxyPassReverseCookiePath internal-path public-path [interpolate]svdE
    Adjusts the Path string in Set-Cookie headers from a reverse- proxied server
    ProxyPreserveHost On|Off Off svdE
    Use incoming Host HTTP request header for proxy request
    ProxyReceiveBufferSize bytes 0 svE
    Network buffer size for proxied HTTP and FTP connections
    ProxyRemote match remote-serversvE
    Remote proxy used to handle certain requests
    ProxyRemoteMatch regex remote-serversvE
    Remote proxy used to handle requests matched by regular expressions
    ProxyRequests On|Off Off svE
    Enables forward (standard) proxy requests
    ProxySCGIInternalRedirect On|Off|Headername On svdE
    Enable or disable internal redirect responses from the backend
    ProxySCGISendfile On|Off|Headername Off svdE
    Enable evaluation of X-Sendfile pseudo response header
    ProxySet url key=value [key=value ...]svdE
    Set various Proxy balancer or member parameters
    ProxySourceAddress addresssvE
    Set local IP address for outgoing proxy connections
    ProxyStatus Off|On|Full Off svE
    Show Proxy LoadBalancer status in mod_status
    ProxyTimeout secondssvE
    Network timeout for proxied requests
    ProxyVia On|Off|Full|Block Off svE
    Information provided in the Via HTTP response header for proxied requests
    QualifyRedirectURL ON|OFF OFF svdC
    Controls whether the REDIRECT_URL environment variable is fully qualified
    ReadmeName filenamesvdhB
    Name of the file that will be inserted at the end of the index listing
    ReceiveBufferSize bytes 0 sM
    TCP receive buffer size
    Redirect [status] [URL-path] URLsvdhB
    Sends an external redirect asking the client to fetch a different URL
    RedirectMatch [status] regex URLsvdhB
    Sends an external redirect based on a regular expression match of the current URL
    RedirectPermanent URL-path URLsvdhB
    Sends an external permanent redirect asking the client to fetch a different URL
    RedirectTemp URL-path URLsvdhB
    Sends an external temporary redirect asking the client to fetch a different URL
    RedisConnPoolTTL num[units] 15s svE
    TTL used for the connection pool with the Redis server(s)
    RedisTimeout num[units] 5s svE
    R/W timeout used for the connection with the Redis server(s)
    ReflectorHeader inputheader [outputheader]svdhB
    Reflect an input header to the output headers
    RegexDefaultOptions [none] [+|-]option [[+|-]option] ... DOTALL DOLLAR_ENDON +sC
    Allow to configure global/default options for regexes
    RegisterHttpMethod method [method [...]]sC
    Register non-standard HTTP methods
    RemoteIPHeader header-fieldsvB
    Declare the header field which should be parsed for useragent IP addresses
    RemoteIPInternalProxy proxy-ip|proxy-ip/subnet|hostname ...svB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPInternalProxyList filenamesvB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPProxiesHeader HeaderFieldNamesvB
    Declare the header field which will record all intermediate IP addresses
    RemoteIPProxyProtocol On|OffsvB
    Enable or disable PROXY protocol handling
    RemoteIPProxyProtocolExceptions host|range [host|range] [host|range]svB
    Disable processing of PROXY header for certain hosts or networks
    RemoteIPTrustedProxy proxy-ip|proxy-ip/subnet|hostname ...svB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPTrustedProxyList filenamesvB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoveCharset extension [extension] ...vdhB
    Removes any character set associations for a set of file extensions
    RemoveEncoding extension [extension] ...vdhB
    Removes any content encoding associations for a set of file extensions
    RemoveHandler extension [extension] ...vdhB
    Removes any handler associations for a set of file extensions
    RemoveInputFilter extension [extension] ...vdhB
    Removes any input filter associations for a set of file extensions
    RemoveLanguage extension [extension] ...vdhB
    Removes any language associations for a set of file extensions
    RemoveOutputFilter extension [extension] ...vdhB
    Removes any output filter associations for a set of file extensions
    RemoveType extension [extension] ...vdhB
    Removes any content type associations for a set of file extensions
    RequestHeader add|append|edit|edit*|merge|set|setifempty|unset header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] svdhE
    Configure HTTP request headers
    RequestReadTimeout [handshake=timeout[-maxtimeout][,MinRate=rate] [header=timeout[-maxtimeout][,MinRate=rate] [body=timeout[-maxtimeout][,MinRate=rate] handshake=0 header= +svE
    Set timeout values for completing the TLS handshake, receiving the request headers and/or body from client.
    Require [not] entity-name [entity-name] ...dhB
    Tests whether an authenticated user is authorized by an authorization provider.
    <RequireAll> ... </RequireAll>dhB
    Enclose a group of authorization directives of which none must fail and at least one must succeed for the enclosing directive to succeed.
    <RequireAny> ... </RequireAny>dhB
    Enclose a group of authorization directives of which one must succeed for the enclosing directive to succeed.
    <RequireNone> ... </RequireNone>dhB
    Enclose a group of authorization directives of which none must succeed for the enclosing directive to not fail.
    RewriteBase URL-pathdhE
    Sets the base URL for per-directory rewrites
    RewriteCond TestString CondPattern [flags]svdhE
    Defines a condition under which rewriting will take place
    RewriteEngine on|off off svdhE
    Enables or disables runtime rewriting engine
    RewriteMap MapName MapType:MapSource [MapTypeOptions] svE
    Defines a mapping function for key-lookup
    RewriteOptions OptionssvdhE
    Sets some special options for the rewrite engine
    RewriteRule Pattern Substitution [flags]svdhE
    Defines rules for the rewriting engine
    RLimitCPU Sekunden|max [Sekunden|max]svdhC
    Begrenzt den CPU-Verbrauch von Prozessen, die von Apache-Kindprozessen gestartet wurden
    RLimitMEM Bytes|max [Bytes|max]svdhC
    Begrenzt den Speicherverbrauch von Prozessen, die von Apache-Kindprozessen gestartet wurden
    RLimitNPROC Zahl|max [Zahl|max]svdhC
    Begrenzt die Anzahl der Prozesse, die von Prozessen gestartet werden können, der ihrerseits von Apache-Kinprozessen gestartet wurden
    Satisfy Any|All All dhE
    Interaction between host-level access control and user authentication
    ScoreBoardFile Dateipfad logs/apache_status sM
    Ablageort der Datei, die zur Speicherung von Daten zur Koordinierung der Kindprozesse verwendet wird
    Script Methode CGI-SkriptsvdB
    Aktiviert ein CGI-Skript für eine bestimmte Anfragemethode.
    ScriptAlias [URL-path] file-path|directory-pathsvdB
    Maps a URL to a filesystem location and designates the target as a CGI script
    ScriptAliasMatch regex file-path|directory-pathsvB
    Maps a URL to a filesystem location using a regular expression and designates the target as a CGI script
    ScriptInterpreterSource Registry|Registry-Strict|Script Script svdhC
    Methode zur Ermittlung des Interpreters von CGI-Skripten
    ScriptLog file-pathsvB
    Location of the CGI script error logfile
    ScriptLogBuffer bytes 1024 svB
    Maximum amount of PUT or POST requests that will be recorded in the scriptlog
    ScriptLogLength bytes 10385760 svB
    Size limit of the CGI script logfile
    ScriptSock file-path cgisock sB
    The filename prefix of the socket to use for communication with the cgi daemon
    SecureListen [IP-address:]portnumber Certificate-Name [MUTUAL]sB
    Enables SSL encryption for the specified port
    SeeRequestTail On|Off Off sC
    Determine if mod_status displays the first 63 characters of a request or the last 63, assuming the request itself is greater than 63 chars.
    SendBufferSize Bytes 0 sM
    Größe des TCP-Puffers
    ServerAdmin E-Mail-Adresse|URLsvC
    E-Mail-Adresse, die der Server in Fehlermeldungen einfügt, welche an den Client gesendet werden
    ServerAlias Hostname [Hostname] ...vC
    Alternativer Name für einen Host, der verwendet wird, wenn Anfragen einem namensbasierten virtuellen Host zugeordnet werden
    ServerLimit AnzahlsM
    Obergrenze für die konfigurierbare Anzahl von Prozessen
    ServerName voll-qualifizierter-Domainname[:port]svC
    Rechnername und Port, die der Server dazu verwendet, sich selbst zu identifizieren
    ServerPath URL-PfadvC
    Veralteter URL-Pfad für einen namensbasierten virtuellen Host, auf den von einem inkompatiblen Browser zugegriffen wird
    ServerRoot Verzeichnis /usr/local/apache sC
    Basisverzeichnis der Serverinstallation
    ServerSignature On|Off|EMail Off svdhC
    Konfiguriert die Fußzeile von servergenerierten Dokumenten
    ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full Full sC
    Konfiguriert den HTTP-Response-Header Server
    Session On|Off Off svdhE
    Enables a session for the current directory or location
    SessionCookieName name attributessvdhE
    Name and attributes for the RFC2109 cookie storing the session
    SessionCookieName2 name attributessvdhE
    Name and attributes for the RFC2965 cookie storing the session
    SessionCookieRemove On|Off Off svdhE
    Control for whether session cookies should be removed from incoming HTTP headers
    SessionCryptoCipher name aes256 svdhX
    The crypto cipher to be used to encrypt the session
    SessionCryptoDriver name [param[=value]]sX
    The crypto driver to be used to encrypt the session
    SessionCryptoPassphrase secret [ secret ... ] svdhX
    The key used to encrypt the session
    SessionCryptoPassphraseFile filenamesvdX
    File containing keys used to encrypt the session
    SessionDBDCookieName name attributessvdhE
    Name and attributes for the RFC2109 cookie storing the session ID
    SessionDBDCookieName2 name attributessvdhE
    Name and attributes for the RFC2965 cookie storing the session ID
    SessionDBDCookieRemove On|Off On svdhE
    Control for whether session ID cookies should be removed from incoming HTTP headers
    SessionDBDDeleteLabel label deletesession svdhE
    The SQL query to use to remove sessions from the database
    SessionDBDInsertLabel label insertsession svdhE
    The SQL query to use to insert sessions into the database
    SessionDBDPerUser On|Off Off svdhE
    Enable a per user session
    SessionDBDSelectLabel label selectsession svdhE
    The SQL query to use to select sessions from the database
    SessionDBDUpdateLabel label updatesession svdhE
    The SQL query to use to update existing sessions in the database
    SessionEnv On|Off Off svdhE
    Control whether the contents of the session are written to the HTTP_SESSION environment variable
    SessionExclude pathsvdhE
    Define URL prefixes for which a session is ignored
    SessionExpiryUpdateInterval interval 0 (always update) svdhE
    Define the number of seconds a session's expiry may change without the session being updated
    SessionHeader headersvdhE
    Import session updates from a given HTTP response header
    SessionInclude pathsvdhE
    Define URL prefixes for which a session is valid
    SessionMaxAge maxage 0 svdhE
    Define a maximum age in seconds for a session
    SetEnv env-variable [value]svdhB
    Sets environment variables
    SetEnvIf attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables based on attributes of the request
    SetEnvIfExpr expr [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables based on an ap_expr expression
    SetEnvIfNoCase attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables based on attributes of the request without respect to case
    SetHandler Handlername|NonesvdhC
    Erzwingt die Verarbeitung aller passenden Dateien durch einen Handler
    SetInputFilter Filter[;Filter...]svdhC
    Bestimmt die Filter, die Client-Anfragen und POST-Eingaben verarbeiten
    SetOutputFilter Filter[;Filter...]svdhC
    Bestimmt die Filter, die Antworten des Servers verarbeiten
    SSIEndTag tag "-->" svB
    String that ends an include element
    SSIErrorMsg message "[an error occurred +svdhB
    Error message displayed when there is an SSI error
    SSIETag on|off off dhB
    Controls whether ETags are generated by the server.
    SSILastModified on|off off dhB
    Controls whether Last-Modified headers are generated by the server.
    SSILegacyExprParser on|off off dhB
    Enable compatibility mode for conditional expressions.
    SSIStartTag tag "<!--#" svB
    String that starts an include element
    SSITimeFormat formatstring "%A, %d-%b-%Y %H:%M +svdhB
    Configures the format in which date strings are displayed
    SSIUndefinedEcho string "(none)" svdhB
    String displayed when an unset variable is echoed
    SSLCACertificateFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for Client Auth
    SSLCACertificatePath directory-pathsvE
    Directory of PEM-encoded CA Certificates for Client Auth
    SSLCADNRequestFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for defining acceptable CA names
    SSLCADNRequestPath directory-pathsvE
    Directory of PEM-encoded CA Certificates for defining acceptable CA names
    SSLCARevocationCheck chain|leaf|none [flags ...] none svE
    Enable CRL-based revocation checking
    SSLCARevocationFile file-pathsvE
    File of concatenated PEM-encoded CA CRLs for Client Auth
    SSLCARevocationPath directory-pathsvE
    Directory of PEM-encoded CA CRLs for Client Auth
    SSLCertificateChainFile file-pathsvE
    File of PEM-encoded Server CA Certificates
    SSLCertificateFile file-pathsvE
    Server PEM-encoded X.509 certificate data file
    SSLCertificateKeyFile file-pathsvE
    Server PEM-encoded private key file
    SSLCipherSuite [protocol] cipher-spec DEFAULT (depends on +svdhE
    Cipher Suite available for negotiation in SSL handshake
    SSLCompression on|off off svE
    Enable compression on the SSL level
    SSLCryptoDevice engine builtin sE
    Enable use of a cryptographic hardware accelerator
    SSLEngine on|off|optional off svE
    SSL Engine Operation Switch
    SSLFIPS on|off off sE
    SSL FIPS mode Switch
    SSLHonorCipherOrder on|off off svE
    Option to prefer the server's cipher preference order
    SSLInsecureRenegotiation on|off off svE
    Option to enable support for insecure renegotiation
    SSLOCSPDefaultResponder urisvE
    Set the default responder URI for OCSP validation
    SSLOCSPEnable on|leaf|off off svE
    Enable OCSP validation of the client certificate chain
    SSLOCSPNoverify On/Off Off svE
    skip the OCSP responder certificates verification
    SSLOCSPOverrideResponder on|off off svE
    Force use of the default responder URI for OCSP validation
    SSLOCSPProxyURL urlsvE
    Proxy URL to use for OCSP requests
    SSLOCSPResponderCertificateFile filesvE
    Set of trusted PEM encoded OCSP responder certificates
    SSLOCSPResponderTimeout seconds 10 svE
    Timeout for OCSP queries
    SSLOCSPResponseMaxAge seconds -1 svE
    Maximum allowable age for OCSP responses
    SSLOCSPResponseTimeSkew seconds 300 svE
    Maximum allowable time skew for OCSP response validation
    SSLOCSPUseRequestNonce on|off on svE
    Use a nonce within OCSP queries
    SSLOpenSSLConfCmd command-name command-valuesvE
    Configure OpenSSL parameters through its SSL_CONF API
    SSLOptions [+|-]option ...svdhE
    Configure various SSL engine run-time options
    SSLPassPhraseDialog type builtin sE
    Type of pass phrase dialog for encrypted private keys
    SSLProtocol [+|-]protocol ... all -SSLv3 (up to 2 +svE
    Configure usable SSL/TLS protocol versions
    SSLProxyCACertificateFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for Remote Server Auth
    SSLProxyCACertificatePath directory-pathsvE
    Directory of PEM-encoded CA Certificates for Remote Server Auth
    SSLProxyCARevocationCheck chain|leaf|none none svE
    Enable CRL-based revocation checking for Remote Server Auth
    SSLProxyCARevocationFile file-pathsvE
    File of concatenated PEM-encoded CA CRLs for Remote Server Auth
    SSLProxyCARevocationPath directory-pathsvE
    Directory of PEM-encoded CA CRLs for Remote Server Auth
    SSLProxyCheckPeerCN on|off on svE
    Whether to check the remote server certificate's CN field
    SSLProxyCheckPeerExpire on|off on svE
    Whether to check if remote server certificate is expired
    SSLProxyCheckPeerName on|off on svE
    Configure host name checking for remote server certificates
    SSLProxyCipherSuite [protocol] cipher-spec ALL:!ADH:RC4+RSA:+H +svE
    Cipher Suite available for negotiation in SSL proxy handshake
    SSLProxyEngine on|off off svE
    SSL Proxy Engine Operation Switch
    SSLProxyMachineCertificateChainFile filenamesvE
    File of concatenated PEM-encoded CA certificates to be used by the proxy for choosing a certificate
    SSLProxyMachineCertificateFile filenamesvE
    File of concatenated PEM-encoded client certificates and keys to be used by the proxy
    SSLProxyMachineCertificatePath directorysvE
    Directory of PEM-encoded client certificates and keys to be used by the proxy
    SSLProxyProtocol [+|-]protocol ... all -SSLv3 (up to 2 +svE
    Configure usable SSL protocol flavors for proxy usage
    SSLProxyVerify level none svE
    Type of remote server Certificate verification
    SSLProxyVerifyDepth number 1 svE
    Maximum depth of CA Certificates in Remote Server Certificate verification
    SSLRandomSeed context source [bytes]sE
    Pseudo Random Number Generator (PRNG) seeding source
    SSLRenegBufferSize bytes 131072 dhE
    Set the size for the SSL renegotiation buffer
    SSLRequire expressiondhE
    Allow access only when an arbitrarily complex boolean expression is true
    SSLRequireSSLdhE
    Deny access when SSL is not used for the HTTP request
    SSLSessionCache type none sE
    Type of the global/inter-process SSL Session Cache
    SSLSessionCacheTimeout seconds 300 svE
    Number of seconds before an SSL session expires in the Session Cache
    SSLSessionTicketKeyFile file-pathsvE
    Persistent encryption/decryption key for TLS session tickets
    SSLSessionTickets on|off on svE
    Enable or disable use of TLS session tickets
    SSLSRPUnknownUserSeed secret-stringsvE
    SRP unknown user seed
    SSLSRPVerifierFile file-pathsvE
    Path to SRP verifier file
    SSLStaplingCache typesE
    Configures the OCSP stapling cache
    SSLStaplingErrorCacheTimeout seconds 600 svE
    Number of seconds before expiring invalid responses in the OCSP stapling cache
    SSLStaplingFakeTryLater on|off on svE
    Synthesize "tryLater" responses for failed OCSP stapling queries
    SSLStaplingForceURL urisvE
    Override the OCSP responder URI specified in the certificate's AIA extension
    SSLStaplingResponderTimeout seconds 10 svE
    Timeout for OCSP stapling queries
    SSLStaplingResponseMaxAge seconds -1 svE
    Maximum allowable age for OCSP stapling responses
    SSLStaplingResponseTimeSkew seconds 300 svE
    Maximum allowable time skew for OCSP stapling response validation
    SSLStaplingReturnResponderErrors on|off on svE
    Pass stapling related OCSP errors on to client
    SSLStaplingStandardCacheTimeout seconds 3600 svE
    Number of seconds before expiring responses in the OCSP stapling cache
    SSLStrictSNIVHostCheck on|off off svE
    Whether to allow non-SNI clients to access a name-based virtual host.
    SSLUserName varnamesdhE
    Variable name to determine user name
    SSLUseStapling on|off off svE
    Enable stapling of OCSP responses in the TLS handshake
    SSLVerifyClient level none svdhE
    Type of Client Certificate verification
    SSLVerifyDepth number 1 svdhE
    Maximum depth of CA Certificates in Client Certificate verification
    StartServers AnzahlsM
    Anzahl der Kindprozesse des Servers, die beim Start erstellt werden
    StartThreads AnzahlsM
    Anzahl der Threads, die beim Start erstellt werden
    Substitute s/pattern/substitution/[infq]dhE
    Pattern to filter the response content
    SubstituteInheritBefore on|off off dhE
    Change the merge order of inherited patterns
    SubstituteMaxLineLength bytes(b|B|k|K|m|M|g|G) 1m dhE
    Set the maximum line size
    Suexec On|OffsB
    Enable or disable the suEXEC feature
    SuexecUserGroup User GroupsvE
    User and group for CGI programs to run as
    ThreadLimit AnzahlsM
    Bestimmt die Obergrenze der konfigurierbaren Anzahl von Threads pro Kindprozess
    ThreadsPerChild AnzahlsM
    Anzahl der Threads, die mit jedem Kindprozess gestartet werden
    ThreadStackSize sizesM
    Die Größe des Stacks in Bytes, der von Threads verwendet wird, die Client-Verbindungen bearbeiten.
    TimeOut Sekunden 60 sC
    Zeitspanne, die der Server auf verschiedene Ereignisse wartet, bevor er die Anfrage abbricht
    TraceEnable [on|off|extended] on sC
    Legt das Verhalten von TRACE-Anfragen fest
    TransferLog file|pipesvB
    Specify location of a log file
    TypesConfig file-path conf/mime.types sB
    The location of the mime.types file
    UnDefine parameter-namesC
    Undefine the existence of a variable
    UndefMacro namesvdB
    Undefine a macro
    UnsetEnv env-variable [env-variable] ...svdhB
    Removes variables from the environment
    Use name [value1 ... valueN] svdB
    Use a macro
    UseCanonicalName On|Off|DNS Off svdC
    Bestimmt, wie der Server seinen eigenen Namen und Port ermittelt
    UseCanonicalPhysicalPort On|Off Off svdC
    Bestimmt, wie der Server seinen eigenen Namen und Port ermittelt
    User unix-userid #-1 sB
    The userid under which the server will answer requests
    UserDir directory-filename [directory-filename] ... svB
    Location of the user-specific directories
    VHostCGIMode On|Off|Secure On vX
    Determines whether the virtualhost can run subprocesses, and the privileges available to subprocesses.
    VHostCGIPrivs [+-]?privilege-name [[+-]?privilege-name] ...vX
    Assign arbitrary privileges to subprocesses created by a virtual host.
    VHostGroup unix-groupidvX
    Sets the Group ID under which a virtual host runs.
    VHostPrivs [+-]?privilege-name [[+-]?privilege-name] ...vX
    Assign arbitrary privileges to a virtual host.
    VHostSecure On|Off On vX
    Determines whether the server runs with enhanced security for the virtualhost.
    VHostUser unix-useridvX
    Sets the User ID under which a virtual host runs.
    VirtualDocumentRoot interpolated-directory|none none svE
    Dynamically configure the location of the document root for a given virtual host
    VirtualDocumentRootIP interpolated-directory|none none svE
    Dynamically configure the location of the document root for a given virtual host
    <VirtualHost Adresse[:Port] [Adresse[:Port]] ...> ... </VirtualHost>sC
    Enthält Direktiven, die nur auf bestimmte Hostnamen oder IP-Adressen angewendet werden
    VirtualScriptAlias interpolated-directory|none none svE
    Dynamically configure the location of the CGI directory for a given virtual host
    VirtualScriptAliasIP interpolated-directory|none none svE
    Dynamically configure the location of the CGI directory for a given virtual host
    WatchdogInterval time-interval[s] 1 sB
    Watchdog interval in seconds
    XBitHack on|off|full off svdhB
    Parse SSI directives in files with the execute bit set
    xml2EncAlias charset alias [alias ...]sB
    Recognise Aliases for encoding values
    xml2EncDefault namesvdhB
    Sets a default encoding to assume when absolutely no information can be automatically detected
    xml2StartParse element [element ...]svdhB
    Advise the parser to skip leading junk.

    Verfügbare Sprachen:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Kommentare

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dav.html.ko.euc-kr0000644000000000000500000004333613412755316020334 0ustar rootsrc mod_dav - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_dav

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:Distributed Authoring and Versioning (WebDAV) ±â´É
    »óÅÂ:Extension
    ¸ðµâ¸í:dav_module
    ¼Ò½ºÆÄÀÏ:mod_dav.c

    ¿ä¾à

    ÀÌ ¸ðµâÀº ¾ÆÆÄÄ¡¿¡ WebDAV ('Web-based Distributed Authoring and Versioning') class 1°ú class 2 ±â´ÉÀ» Ãß°¡ÇÑ´Ù. WebDAV´Â ¿ø°Ý À¥¼­¹öÀÇ ÀÚ¿ø°ú ÄÝ·º¼Ç(collection)À» (¿ªÁÖ; ÄÝ·º¼ÇÀº ÆÄÀϽýºÅÛÀÇ µð·ºÅ丮¿Í °°Àº °³³äÀÌ´Ù) ¸¸µé°í, ¿Å±â°í, º¹»çÇϰí, Áö¿ï ¼ö ÀÖµµ·Ï HTTP ÇÁ·ÎÅäÄÝÀ» È®ÀåÇÑ °ÍÀÌ´Ù.

    top

    WebDAV »ç¿ëÇϱâ

    mod_dav¸¦ »ç¿ëÇÏ·Á¸é httpd.conf ÆÄÀÏ¿¡ ¾Æ·¡°ú °°ÀÌ Ãß°¡ÇÑ´Ù:

    Dav On

    ±×·¯¸é mod_dav_fs ¸ðµâÀÌ ±¸ÇöÇÏ´Â DAV ÆÄÀϽýºÅÛ Á¦°øÀÚ(provider)¸¦ »ç¿ëÇÑ´Ù. ±×·¯¹Ç·Î ÀÌ ¸ðµâµµ ¼­¹ö¿¡ °°ÀÌ ÄÄÆÄÀϵÇÀְųª LoadModule Áö½Ã¾î·Î ½ÇÇàÁß¿¡ Àоîµé¿©¾ß ÇÑ´Ù.

    ¶Ç, DAV Àá±Ý(lock) µ¥ÀÌÅͺ£À̽ºÀÇ À§Ä¡¸¦ httpd.conf ÆÄÀÏÀÇ Àü¿ª ºÎºÐ¿¡ DavLockDB Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ÁöÁ¤ÇØ¾ß ÇÑ´Ù:

    DavLockDB /usr/local/apache2/var/DavLock

    ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÏ´Â User¿Í GroupÀº Àá±Ý µ¥ÀÌÅͺ£À̽º°¡ ÀÖ´Â µð·ºÅ丮¿¡ ¾²±â ±ÇÇÑÀ» °¡Á®¾ß ÇÑ´Ù.

    DAV¸¦ »ç¿ëÇÏ´Â À§Ä¡¿¡ Á¢±ÙÀ» Á¦ÇÑÇϱâÀ§ÇØ <Location> Áö½Ã¾î ¾È¿¡ <Limit> Áö½Ã¾î¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù. DAV Ŭ¶óÀÌ¾ðÆ®°¡ ÇѹøÀÇ ¿äû¿¡ º¸³¾ ¼ö ÀÖ´Â ÃÖ´ë ¹ÙÀÌÆ®¼ö¸¦ Á¦ÇÑÇÏ·Á¸é LimitXMLRequestBody Áö½Ã¾î¸¦ »ç¿ëÇÑ´Ù. "ÀϹÝÀûÀÎ" LimitRequestBody Áö½Ã¾î´Â DAV ¿äû°ú °ü°è¾ø´Ù.

    Àüü ¿¹Á¦

    DavLockDB /usr/local/apache2/var/DavLock

    <Location /foo>
    Dav On

    AuthType Basic
    AuthName DAV
    AuthUserFile user.passwd

    <LimitExcept GET OPTIONS>
    require user admin
    </LimitExcept>
    </Location>

    mod_dav´Â Greg SteinÀÌ ¸¸µç Apache 1.3¿ë mod_dav¸¦ ±â¹ÝÀ¸·Î ¸¸µé¾ú´Ù. ¸ðµâ¿¡ ´ëÇÑ ´õ ÀÚ¼¼ÇÑ Á¤º¸´Â ±× »çÀÌÆ®¸¦ Âü°íÇ϶ó.

    top

    º¸¾È ¹®Á¦

    DAV¸¦ »ç¿ëÇÏ¸é ¿ø°Ý Ŭ¶óÀÌ¾ðÆ®°¡ ¼­¹öÀÇ ÆÄÀÏÀ» Á¶ÀÛÇÒ ¼ö Àֱ⶧¹®¿¡, mod_dav¸¦ »ç¿ëÇϱâ Àü¿¡ ¼­¹ö°¡ ¾ÈÀüÇÑÁö Ưº°È÷ °ü½ÉÀ» °¡Á®¾ß ÇÑ´Ù.

    ¼­¹ö¿¡¼­ DAV°¡ °¡´ÉÇÑ À§Ä¡´Â ÀÎÁõÀ¸·Î º¸È£ÇØ¾ß ÇÑ´Ù. HTTP Basic Authentication´Â ÃßõÇÏÁö ¾Ê´Â´Ù. ÃÖ¼ÒÇÑ mod_auth_digest ¸ðµâÀÌ Á¦°øÇÏ´Â HTTP Digest AuthenticationÀ» »ç¿ëÇØ¾ß ÇÑ´Ù. °ÅÀÇ ¸ðµç WebDAV Ŭ¶óÀÌ¾ðÆ®´Â ÀÌ ÀÎÁõ ¹æ½ÄÀ» Áö¿øÇÑ´Ù. ¾Æ´Ï¸é SSL ¿¬°á¿¡¼­ Basic AuthenticationÀ» »ç¿ëÇÒ ¼öµµ ÀÖ´Ù.

    mod_dav°¡ ÆÄÀÏÀ» Á¶ÀÛÇÏ·Á¸é, ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÏ´Â User¿Í GroupÀº ÇØ´ç µð·ºÅ丮¿Í ÆÄÀÏ¿¡ ¾²±â ±ÇÇÑÀ» °¡Á®¾ß ÇÑ´Ù. ¶Ç, »õ·Î »ý¼ºÇÑ ÆÄÀÏÀº User¿Í GroupÀÌ ¼ÒÀ¯ÇÏ°Ô µÈ´Ù. ±×·¡¼­ ¾Æ¹«³ª ÀÌ °èÁ¤¿¡ Á¢±ÙÇÒ ¼ö ¾øµµ·Ï Ç϶ó. DAV ÀúÀå¼Ò´Â ¾ÆÆÄÄ¡¸¸ Á¢±ÙÇÒ ¼ö ÀÖ´Ù°í °¡Á¤ÇÑ´Ù. ¾ÆÆÄÄ¡¸¦ ÅëÇÏÁö¾Ê°í (¿¹¸¦ µé¾î FTP³ª ÆÄÀϽýºÅÛ µµ±¸¸¦ »ç¿ëÇÏ¿©) ÆÄÀÏÀ» ¼öÁ¤ÇÔÀ» Çã¿ëÇÏ¸é ¾ÈµÈ´Ù.

    mod_dav´Â ¿©·¯ ¼­ºñ½º°ÅºÎ °ø°ÝÀÇ ´ë»óÀÌ µÉ ¼ö ÀÖ´Ù. LimitXMLRequestBody Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© Å« DAV ¿äûÀ» ÀÐÀ»¶§ ¸Þ¸ð¸®·®À» Á¦ÇÑÇÒ ¼ö ÀÖ´Ù. DavDepthInfinity Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ¸¹Àº ¸Þ¸ð¸®¸¦ ¼Ò¸ðÇϱâÀ§ÇÑ ¸Å¿ì Å« ÀúÀå¼ÒÀÇ PROPFIND ¿äûÀ» ¸·À» ¼ö ÀÖ´Ù. ´Ü¼øÈ÷ Ŭ¶óÀÌ¾ðÆ®°¡ ¿©·¯ Å« ÆÄÀϵé·Î µð½ºÅ©°ø°£À» ä¿ì´Â ¼­ºñ½º°ÅºÎ °ø°Ýµµ °¡´ÉÇÏ´Ù. ¾ÆÆÄÄ¡¿¡¼­ À̸¦ ¸·À» Á÷Á¢ÀûÀÎ ¹æ¹ýÀº ¾ø´Ù. ±×·¯¹Ç·Î ½Å·ÚÇÏÁö¾Ê´Â »ç¿ëÀÚ¿¡°Ô DAV Á¢±ÙÀ» Çã¿ëÇÏÁö ¾Êµµ·ÏÇ϶ó.

    top

    º¹ÀâÇÑ ¼³Á¤

    ÀϹÝÀûÀÎ Áú¹®Áß Çϳª´Â (PHP ½ºÅ©¸³Æ®, CGI ½ºÅ©¸³Æ® µî) µ¿ÀûÆÄÀÏ ÀÛ¾÷À» À§ÇØ mod_dav¸¦ »ç¿ëÇÏ´Â ¹æ¹ýÀÌ´Ù. ÀÌ´Â GET ¿äûÀÌ ÆÄÀÏ ³»¿ëÀ» ´Ù¿î·ÎµåÇÏÁö ¾Ê°í Ç×»ó ½ºÅ©¸³Æ®¸¦ ½ÇÇàÇϹǷΠ¾î·Æ´Ù. ÇØ°á¹æ¹ýÁß Çϳª´Â ³»¿ë¿¡ µÎ°³ÀÇ URLÀ» ´ëÀÀÇÏ´Â °ÍÀÌ´Ù. ÇÑ URLÀº ½ºÅ©¸³Æ®¸¦ ½ÇÇàÇϰí, ´Ù¸¥ URL·Î´Â ÆÄÀÏÀ» ´Ù¿î·ÎµåÇÏ¿© DAV·Î ÀÛ¾÷ÇÒ ¼ö ÀÖ´Ù.

    Alias /phparea /home/gstein/php_files
    Alias /php-source /home/gstein/php_files
    <Location /php-source> DAV On
    ForceType text/plain
    </Location>

    ÀÌ ¼³Á¤¿¡¼­ http://example.com/phparea´Â PHP ½ºÅ©¸³Æ®ÀÇ °á°ú¸¦ º¸¿©ÁÖ°í, http://example.com/php-source·Î´Â DAV Ŭ¶óÀÌ¾ðÆ®¿¡¼­ ½ºÅ©¸³Æ®¸¦ ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù.

    top

    Dav Áö½Ã¾î

    ¼³¸í:WebDAV HTTP ¸Þ½áµå¸¦ ½ÃÀÛÇÑ´Ù
    ¹®¹ý:Dav On|Off|provider-name
    ±âº»°ª:Dav Off
    »ç¿ëÀå¼Ò:directory
    »óÅÂ:Extension
    ¸ðµâ:mod_dav

    ÁöÁ¤ÇÑ À§Ä¡¿¡¼­ WebDAV HTTP ¸Þ½áµå¸¦ »ç¿ëÇÏ·Á¸é Dav Áö½Ã¾î¸¦ »ç¿ëÇÑ´Ù:

    <Location /foo>
    Dav On
    </Location>

    On °ªÀº ½ÇÁ¦·Î mod_dav_fs ¸ðµâÀÌ Á¦°øÇÏ´Â ±âº» Á¦°øÀÚÀÎ filesystemÀÇ º°ÄªÀÌ´Ù. ¾î¶² À§Ä¡¿¡¼­ DAV¸¦ ½ÃÀÛÇϸé ÇÏÀ§°ø°£¿¡¼­ DAV¸¦ »ç¿ë¾ÈÇϵµ·Ï ¼³Á¤ÇÒ ¼ö ¾øÀ½À» ÁÖÀÇÇ϶ó. ¿ÏÀüÇÑ ¼³Á¤¿¹´Â À§ÀÇ ÀýÀ» Âü°íÇ϶ó.

    ¼­¹ö¸¦ ¾ÈÀüÇÏ°Ô ±¸¼ºÇÒ¶§±îÁö WebDAVÀ» »ç¿ëÇÏÁö ¸¶¶ó. ±×·¸Áö ¾ÊÀ¸¸é ´©±¸¶óµµ ¼­¹ö¸¦ ÅëÇØ ÆÄÀÏÀ» ºÐ¹èÇÒ ¼ö ÀÖ°Ô µÈ´Ù.
    top

    DavDepthInfinity Áö½Ã¾î

    ¼³¸í:PROPFINDÀÇ Depth: Infinity ¿äûÀ» Çã°¡ÇÑ´Ù
    ¹®¹ý:DavDepthInfinity on|off
    ±âº»°ª:DavDepthInfinity off
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory
    »óÅÂ:Extension
    ¸ðµâ:mod_dav

    DavDepthInfinity Áö½Ã¾î¸¦ »ç¿ëÇϸé 'Depth: Infinity' Çì´õ¸¦ °¡Áø PROPFIND ¿äûÀ» Çã°¡ÇÑ´Ù. ÀÌ·± ¿äûÀ» »ç¿ëÇÏ¿© ¼­ºñ½º°ÅºÎ °ø°ÝÀÌ °¡´ÉÇϱ⠶§¹®¿¡ ±âº»ÀûÀ¸·Î Çã¿ëÇÏÁö ¾Ê´Â´Ù.

    top

    DavMinTimeout Áö½Ã¾î

    ¼³¸í:¼­¹ö°¡ DAV ÀÚ¿ø¿¡ ´ëÇØ À¯ÁöÇÒ Àá±ÝÀÇ Ãּҽð£
    ¹®¹ý:DavMinTimeout seconds
    ±âº»°ª:DavMinTimeout 0
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory
    »óÅÂ:Extension
    ¸ðµâ:mod_dav

    Ŭ¶óÀÌ¾ðÆ®°¡ DAV ÀÚ¿ø¿¡ Àá±Ý(lock)À» ¿äûÇÒ¶§ ¼­¹ö°¡ ¾Ë¾Æ¼­ Àá±ÝÀ» Á¦°ÅÇÒ ¼ö ÀÖ´Â ½Ã°£À» °°ÀÌ ¾Ë·ÁÁÙ ¼ö ÀÖ´Ù. ÀÌ °ªÀº ´ÜÁö ¿äûÀÏ»ÓÀ̸ç, ¼­¹ö´Â Ŭ¶óÀÌ¾ðÆ®°¡ ¿äûÇÑ °ªÀ» ¹«½ÃÇϰí Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ÀÓÀÇÀÇ ½Ã°£À» ¾Ë·ÁÁÙ ¼ö ÀÖ´Ù.

    DavMinTimeout Áö½Ã¾î´Â Ŭ¶óÀÌ¾ðÆ®¿¡°Ô º¸³¾ ÃÖ¼Ò Àá±Ý ½Ã°£À» (ÃÊ´ÜÀ§) ÁöÁ¤ÇÑ´Ù. Microsoft Web Folders´Â ±âº»°ªÀ¸·Î 120 Ãʸ¦ »ç¿ëÇÑ´Ù. DavMinTimeout¿¡ (600 ÃÊ¿Í °°ÀÌ) ´õ ³ôÀº °ªÀ» »ç¿ëÇϸé Ŭ¶óÀÌ¾ðÆ®°¡ ³×Æ®¿÷ Áö¿¬¶§¹®¿¡ Àá±ÝÀ» ÀҰԵǴ °æ¿ì¸¦ ÁÙÀÏ ¼ö ÀÖ´Ù.

    ¿¹Á¦

    <Location /MSWord>
    DavMinTimeout 600
    </Location>

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_headers.html.en0000644000000000000500000010356213412755316017777 0ustar rootsrc mod_headers - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_headers

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Customization of HTTP request and response headers
    Status:Extension
    Module Identifier:headers_module
    Source File:mod_headers.c

    Summary

    This module provides directives to control and modify HTTP request and response headers. Headers can be merged, replaced or removed.

    top

    Order of Processing

    The directives provided by mod_headers can occur almost anywhere within the server configuration, and can be limited in scope by enclosing them in configuration sections.

    Order of processing is important and is affected both by the order in the configuration file and by placement in configuration sections. These two directives have a different effect if reversed:

    RequestHeader append MirrorID "mirror 12"
    RequestHeader unset MirrorID

    This way round, the MirrorID header is not set. If reversed, the MirrorID header is set to "mirror 12".

    top

    Early and Late Processing

    mod_headers can be applied either early or late in the request. The normal mode is late, when Request Headers are set immediately before running the content generator and Response Headers just as the response is sent down the wire. Always use Late mode in an operational server.

    Early mode is designed as a test/debugging aid for developers. Directives defined using the early keyword are set right at the beginning of processing the request. This means they can be used to simulate different requests and set up test cases, but it also means that headers may be changed at any time by other modules before generating a Response.

    Because early directives are processed before the request path's configuration is traversed, early headers can only be set in a main server or virtual host context. Early directives cannot depend on a request path, so they will fail in contexts such as <Directory> or <Location>.

    top

    Examples

    1. Copy all request headers that begin with "TS" to the response headers:
      Header echo ^TS
    2. Add a header, MyHeader, to the response including a timestamp for when the request was received and how long it took to begin serving the request. This header can be used by the client to intuit load on the server or in isolating bottlenecks between the client and the server.
      Header set MyHeader "%D %t"

      results in this header being added to the response:

      MyHeader: D=3775428 t=991424704447256

    3. Say hello to Joe
      Header set MyHeader "Hello Joe. It took %D microseconds for Apache to serve this request."

      results in this header being added to the response:

      MyHeader: Hello Joe. It took D=3775428 microseconds for Apache to serve this request.

    4. Conditionally send MyHeader on the response if and only if header MyRequestHeader is present on the request. This is useful for constructing headers in response to some client stimulus. Note that this example requires the services of the mod_setenvif module.
      SetEnvIf MyRequestHeader myvalue HAVE_MyRequestHeader
      Header set MyHeader "%D %t mytext" env=HAVE_MyRequestHeader

      If the header MyRequestHeader: myvalue is present on the HTTP request, the response will contain the following header:

      MyHeader: D=3775428 t=991424704447256 mytext

    5. Enable DAV to work with Apache running HTTP through SSL hardware (problem description) by replacing https: with http: in the Destination header:
      RequestHeader edit Destination ^https: http: early
    6. Set the same header value under multiple nonexclusive conditions, but do not duplicate the value in the final header. If all of the following conditions applied to a request (i.e., if the CGI, NO_CACHE and NO_STORE environment variables all existed for the request):
      Header merge Cache-Control no-cache env=CGI
      Header merge Cache-Control no-cache env=NO_CACHE
      Header merge Cache-Control no-store env=NO_STORE

      then the response would contain the following header:

      Cache-Control: no-cache, no-store

      If append was used instead of merge, then the response would contain the following header:

      Cache-Control: no-cache, no-cache, no-store

    7. Set a test cookie if and only if the client didn't send us a cookie
      Header set Set-Cookie testcookie "expr=-z %{req:Cookie}"
    8. Append a Caching header for responses with a HTTP status code of 200
      Header append Cache-Control s-maxage=600 "expr=%{REQUEST_STATUS} == 200"
    top

    Header Directive

    Description:Configure HTTP response headers
    Syntax:Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]]
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_headers
    Compatibility:SetIfEmpty available in 2.4.7 and later, expr=value available in 2.4.10 and later

    This directive can replace, merge or remove HTTP response headers. The header is modified just after the content handler and output filters are run, allowing outgoing headers to be modified.

    The optional condition argument determines which internal table of responses headers this directive will operate against: onsuccess (default, can be omitted) or always. The difference between the two lists is that the headers contained in the latter are added to the response even on error, and persisted across internal redirects (for example, ErrorDocument handlers). Note also that repeating this directive with both conditions makes sense in some scenarios because always is not a superset of onsuccess with respect to existing headers:

    • You're adding a header to a locally generated non-success (non-2xx) response, such as a redirect, in which case only the table corresponding to always is used in the ultimate response.
    • You're modifying or removing a header generated by a CGI script or by mod_proxy_fcgi, in which case the CGI scripts' headers are in the table corresponding to always and not in the default table.
    • You're modifying or removing a header generated by some piece of the server but that header is not being found by the default onsuccess condition.

    This difference between onsuccess and always is a feature that resulted as a consequence of how httpd internally stores headers for a HTTP response, since it does not offer any "normalized" single list of headers. The main problem that can arise if the following concept is not kept in mind while writing the configuration is that some HTTP responses might end up with the same header duplicated (confusing users or sometimes even HTTP clients). For example, suppose that you have a simple PHP proxy setup with mod_proxy_fcgi and your backend PHP scripts adds the X-Foo: bar header to each HTTP response. As described above, mod_proxy_fcgi uses the always table to store headers, so a configuration like the following ends up in the wrong result, namely having the header duplicated with both values:

    # X-Foo's value is set in the 'onsuccess' headers table
    Header set X-Foo: baz

    To circumvent this limitation, there are some known configuration patterns that can help, like the following:

    # 'onsuccess' can be omitted since it is the default
    Header onsuccess unset X-Foo
    Header always set X-Foo "baz"

    Separately from the condition parameter described above, you can limit an action based on HTTP status codes for e.g. proxied or CGI requests. See the example that uses %{REQUEST_STATUS} in the section above.

    The action it performs is determined by the first argument (second argument if a condition is specified). This can be one of the following values:

    Warning

    Please read the difference between always and onsuccess headers list described above before start reading the actions list, since that important concept still applies. Each action, in fact, works as described but only on the target headers list.

    add
    The response header is added to the existing set of headers, even if this header already exists. This can result in two (or more) headers having the same name. This can lead to unforeseen consequences, and in general set, append or merge should be used instead.
    append
    The response header is appended to any existing header of the same name. When a new value is merged onto an existing header it is separated from the existing header with a comma. This is the HTTP standard way of giving a header multiple values.
    echo
    Request headers with this name are echoed back in the response headers. header may be a regular expression. value must be omitted.
    edit
    edit*
    If this response header exists, its value is transformed according to a regular expression search-and-replace. The value argument is a regular expression, and the replacement is a replacement string, which may contain backreferences or format specifiers. The edit form will match and replace exactly once in a header value, whereas the edit* form will replace every instance of the search pattern if it appears more than once.
    merge
    The response header is appended to any existing header of the same name, unless the value to be appended already appears in the header's comma-delimited list of values. When a new value is merged onto an existing header it is separated from the existing header with a comma. This is the HTTP standard way of giving a header multiple values. Values are compared in a case sensitive manner, and after all format specifiers have been processed. Values in double quotes are considered different from otherwise identical unquoted values.
    set
    The response header is set, replacing any previous header with this name. The value may be a format string.
    setifempty
    The request header is set, but only if there is no previous header with this name.
    The Content-Type header is a special use case since there might be the chance that its value have been determined but the header is not part of the response when setifempty is evaluated. It is safer to use set for this use case like in the following example:
    Header set Content-Type "text/plain" "expr=-z %{CONTENT_TYPE}"
    unset
    The response header of this name is removed, if it exists. If there are multiple headers of the same name, all will be removed. value must be omitted.
    note
    The value of the named response header is copied into an internal note whose name is given by value. This is useful if a header sent by a CGI or proxied resource is configured to be unset but should also be logged.
    Available in 2.4.7 and later.

    This argument is followed by a header name, which can include the final colon, but it is not required. Case is ignored for set, append, merge, add, unset and edit. The header name for echo is case sensitive and may be a regular expression.

    For set, append, merge and add a value is specified as the next argument. If value contains spaces, it should be surrounded by double quotes. value may be a character string, a string containing mod_headers specific format specifiers (and character literals), or an ap_expr expression prefixed with expr=

    The following format specifiers are supported in value:

    FormatDescription
    %% The percent sign
    %t The time the request was received in Universal Coordinated Time since the epoch (Jan. 1, 1970) measured in microseconds. The value is preceded by t=.
    %D The time from when the request was received to the time the headers are sent on the wire. This is a measure of the duration of the request. The value is preceded by D=. The value is measured in microseconds.
    %l The current load averages of the actual server itself. It is designed to expose the values obtained by getloadavg() and this represents the current load average, the 5 minute average, and the 15 minute average. The value is preceded by l= with each average separated by /.
    Available in 2.4.4 and later.
    %i The current idle percentage of httpd (0 to 100) based on available processes and threads. The value is preceded by i=.
    Available in 2.4.4 and later.
    %b The current busy percentage of httpd (0 to 100) based on available processes and threads. The value is preceded by b=.
    Available in 2.4.4 and later.
    %{VARNAME}e The contents of the environment variable VARNAME.
    %{VARNAME}s The contents of the SSL environment variable VARNAME, if mod_ssl is enabled.

    Note

    The %s format specifier is only available in Apache 2.1 and later; it can be used instead of %e to avoid the overhead of enabling SSLOptions +StdEnvVars. If SSLOptions +StdEnvVars must be enabled anyway for some other reason, %e will be more efficient than %s.

    Note on expression values

    When the value parameter uses the ap_expr parser, some expression syntax will differ from examples that evaluate boolean expressions such as <If>:

    • The starting point of the grammar is 'string' rather than 'expr'.
    • Function calls use the %{funcname:arg} syntax rather than funcname(arg).
    • Multi-argument functions are not currently accessible from this starting point
    • Quote the entire parameter, such as
      Header set foo-checksum "expr=%{md5:foo}"

    For edit there is both a value argument which is a regular expression, and an additional replacement string. As of version 2.4.7 the replacement string may also contain format specifiers.

    The Header directive may be followed by an additional argument, which may be any of:

    early
    Specifies early processing.
    env=[!]varname
    The directive is applied if and only if the environment variable varname exists. A ! in front of varname reverses the test, so the directive applies only if varname is unset.
    expr=expression
    The directive is applied if and only if expression evaluates to true. Details of expression syntax and evaluation are documented in the ap_expr documentation.
    # This delays the evaluation of the condition clause compared to <If>
    Header always set CustomHeader my-value "expr=%{REQUEST_URI} =~ m#^/special_path.php$#"

    Except in early mode, the Header directives are processed just before the response is sent to the network. This means that it is possible to set and/or override most headers, except for some headers added by the HTTP header filter. Prior to 2.2.12, it was not possible to change the Content-Type header with this directive.

    top

    RequestHeader Directive

    Description:Configure HTTP request headers
    Syntax:RequestHeader add|append|edit|edit*|merge|set|setifempty|unset header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]]
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_headers
    Compatibility:SetIfEmpty available in 2.4.7 and later, expr=value available in 2.4.10 and later

    This directive can replace, merge, change or remove HTTP request headers. The header is modified just before the content handler is run, allowing incoming headers to be modified. The action it performs is determined by the first argument. This can be one of the following values:

    add
    The request header is added to the existing set of headers, even if this header already exists. This can result in two (or more) headers having the same name. This can lead to unforeseen consequences, and in general set, append or merge should be used instead.
    append
    The request header is appended to any existing header of the same name. When a new value is merged onto an existing header it is separated from the existing header with a comma. This is the HTTP standard way of giving a header multiple values.
    edit
    edit*
    If this request header exists, its value is transformed according to a regular expression search-and-replace. The value argument is a regular expression, and the replacement is a replacement string, which may contain backreferences or format specifiers. The edit form will match and replace exactly once in a header value, whereas the edit* form will replace every instance of the search pattern if it appears more than once.
    merge
    The request header is appended to any existing header of the same name, unless the value to be appended already appears in the existing header's comma-delimited list of values. When a new value is merged onto an existing header it is separated from the existing header with a comma. This is the HTTP standard way of giving a header multiple values. Values are compared in a case sensitive manner, and after all format specifiers have been processed. Values in double quotes are considered different from otherwise identical unquoted values.
    set
    The request header is set, replacing any previous header with this name
    setifempty
    The request header is set, but only if there is no previous header with this name.
    Available in 2.4.7 and later.
    unset
    The request header of this name is removed, if it exists. If there are multiple headers of the same name, all will be removed. value must be omitted.

    This argument is followed by a header name, which can include the final colon, but it is not required. Case is ignored. For set, append, merge and add a value is given as the third argument. If a value contains spaces, it should be surrounded by double quotes. For unset, no value should be given. value may be a character string, a string containing format specifiers or a combination of both. The supported format specifiers are the same as for the Header, please have a look there for details. For edit both a value and a replacement are required, and are a regular expression and a replacement string respectively.

    The RequestHeader directive may be followed by an additional argument, which may be any of:

    early
    Specifies early processing.
    env=[!]varname
    The directive is applied if and only if the environment variable varname exists. A ! in front of varname reverses the test, so the directive applies only if varname is unset.
    expr=expression
    The directive is applied if and only if expression evaluates to true. Details of expression syntax and evaluation are documented in the ap_expr documentation.

    Except in early mode, the RequestHeader directive is processed just before the request is run by its handler in the fixup phase. This should allow headers generated by the browser, or by Apache input filters to be overridden or modified.

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_ratelimit.html0000644000000000000500000000033613362070302017735 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_ratelimit.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_ratelimit.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_authn_socache.html0000644000000000000500000000034613362070302020550 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authn_socache.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authn_socache.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/core.html.fr.utf80000644000000000000500000116417713521115051017344 0ustar rootsrc core - Serveur HTTP Apache Version 2.4
    <-

    Fonctionalités de Base Apache

    Langues Disponibles:  de  |  en  |  es  |  fr  |  ja  |  tr 

    Cette traduction peut être périmée. Vérifiez la version anglaise pour les changements récents.
    Description:Fonctionnalités de base du serveur HTTP Apache toujours disponibles
    Statut:Noyau httpd
    top

    Directive AcceptFilter

    Description:Permet d'optimiser la configuration d'une socket pour l'écoute d'un protocole
    Syntaxe:AcceptFilter protocole filtre d'acceptation
    Contexte:configuration globale
    Statut:Noyau httpd
    Module:core

    Cette directive permet d'effectuer une optimisation de la socket d'écoute d'un type de protocole en fonction du système d'exploitation. Le but premier est de faire en sorte que le noyau n'envoie pas de socket au processus du serveur jusqu'à ce que des données soient reçues, ou qu'une requête HTTP complète soit mise en tampon. Seuls les Filtres d'acceptation de FreeBSD, le filtre plus primitif TCP_DEFER_ACCEPT sous Linux, et la version optimisée d'AcceptEx() de Windows sont actuellement supportés.

    L'utilisation de l'argument none va désactiver tout filtre d'acceptation pour ce protocole. Ceci s'avère utile pour les protocoles qui nécessitent l'envoi de données par le serveur en premier, comme ftp: ou nntp:

    AcceptFilter nntp none

    Les noms de protocoles par défaut sont https pour le port 443 et http pour tous les autres ports. Pour spécifier un autre protocole à utiliser avec un port en écoute, ajoutez l'argument protocol à la directive Listen.

    Sous FreeBSD, les valeurs par défaut sont :

    AcceptFilter http httpready
    AcceptFilter https dataready

    Le filtre d'acceptation httpready met en tampon des requêtes HTTP entières au niveau du noyau. Quand une requête entière a été reçue, le noyau l'envoie au serveur. Voir la page de manuel de accf_http(9) pour plus de détails. Comme les requêtes HTTPS sont chiffrées, celles-ci n'autorisent que le filtre accf_data(9).

    Sous Linux, les valeurs par défaut sont :

    AcceptFilter http data
    AcceptFilter https data

    Le filtre TCP_DEFER_ACCEPT de Linux ne supporte pas la mise en tampon des requêtes http. Toute valeur autre que none active le filtre TCP_DEFER_ACCEPT pour ce protocole. Pour plus de détails, voir la page de manuel Linux de tcp(7).

    Sous Windows, les valeurs par défaut sont :

    AcceptFilter http connect
    AcceptFilter https connect

    Le module MPM pour Windows mpm_winnt utilise la directive AcceptFilter comme commutateur de l'API AcceptEx(), et ne supporte pas la mise en tampon du protocole http. connect utilise l'API AcceptEx(), extrait aussi les adresses réseau finales, mais à l'instar de none, la valeur connect n'attend pas la transmission des données initiales.

    Sous Windows, none utilise accept() au lieu d'AcceptEx(), et ne recycle pas les sockets entre les connexions. Ceci s'avère utile pour les interfaces réseau dont le pilote est défectueux, ainsi que pour certains fournisseurs de réseau comme les pilotes vpn, ou les filtres anti-spam, anti-virus ou anti-spyware.

    L'AcceptFilter data (Windows)

    Jusqu'à la version 2.4.23, le filtre d'acceptation data attendait que des données aient été transmises et que le tampon de données initial et l'adresse réseau finale aient été déterminés par l'invocation AcceptEx(). Cette implémentation étant vulnérable à une attaque de type denial of service, elle a été désactivée.

    La version actuelle de httpd prend par défaut le filtre connect sous Windows, et reprendra la valeur data si data est spécifié. Il est fortement conseillé aux utilisateurs des versions plus anciennes de définir explicitement le filtre connect pour leurs AcceptFilter comme indiqué plus haut.

    Voir aussi

    top

    Directive AcceptPathInfo

    Description:Les ressources acceptent des informations sous forme d'un nom de chemin en fin de requête.
    Syntaxe:AcceptPathInfo On|Off|Default
    Défaut:AcceptPathInfo Default
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core

    Cette directive permet de définir si les requêtes contenant des informations sous forme d'un nom de chemin suivant le nom d'un fichier réel (ou un fichier qui n'existe pas dans un répertoire qui existe) doivent être acceptées ou rejetées. Les scripts peuvent accéder à cette information via la variable d'environnement PATH_INFO.

    Supposons par exemple que /test/ pointe vers un répertoire qui ne contient que le fichier here.html. Les requêtes pour /test/here.html/more et /test/nothere.html/more vont affecter la valeur /more à la variable d'environnement PATH_INFO.

    L'argument de la directive AcceptPathInfo possède trois valeurs possibles :

    Off
    Une requête ne sera acceptée que si elle correspond à un chemin qui existe. Par conséquent, une requête contenant une information de chemin après le nom de fichier réel comme /test/here.html/more dans l'exemple ci-dessus renverra une erreur "404 NOT FOUND".
    On
    Une requête sera acceptée si la partie principale du chemin correspond à un fichier existant. Dans l'exemple ci-dessus /test/here.html/more, la requête sera acceptée si /test/here.html correspond à un nom de fichier valide.
    Default
    Le traitement des requêtes est déterminé par le gestionnaire responsable de la requête. Le gestionnaire de base pour les fichiers normaux rejette par défaut les requêtes avec PATH_INFO. Les gestionnaires qui servent des scripts, commecgi-script et isapi-handler, acceptent en général par défaut les requêtes avec PATH_INFO.

    Le but premier de la directive AcceptPathInfo est de vous permettre de remplacer le choix du gestionnaire d'accepter ou de rejeter PATH_INFO. Ce remplacement est nécessaire par exemple, lorsque vous utilisez un filtre, comme INCLUDES, pour générer un contenu basé sur PATH_INFO. Le gestionnaire de base va en général rejeter la requête, et vous pouvez utiliser la configuration suivante pour utiliser un tel script :

    <Files "mypaths.shtml">
      Options +Includes
      SetOutputFilter INCLUDES
      AcceptPathInfo On
    </Files>
    top

    Directive AccessFileName

    Description:Nom du fichier de configuration distribué
    Syntaxe:AccessFileName nom-du-fichier [nom-du-fichier] ...
    Défaut:AccessFileName .htaccess
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    Au cours du traitement d'une requête, le serveur recherche le premier fichier de configuration existant à partir de la liste de noms dans chaque répertoire composant le chemin du document, à partir du moment où les fichiers de configuration distribués sont activés pour ce répertoire. Par exemple :

    AccessFileName .acl

    avant de renvoyer le document /usr/local/web/index.html, le serveur va rechercher les fichiers /.acl, /usr/.acl, /usr/local/.acl et /usr/local/web/.acl pour y lire d'éventuelles directives, à moins quelles n'aient été désactivées avec

    <Directory "/">
        AllowOverride None
    </Directory>

    Voir aussi

    top

    Directive AddDefaultCharset

    Description:Paramètre jeu de caractères par défaut à ajouter quand le type de contenu d'une réponse est text/plain ou text/html
    Syntaxe:AddDefaultCharset On|Off|jeu de caractères
    Défaut:AddDefaultCharset Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core

    Cette directive spécifie une valeur par défaut pour le paramètre jeu de caractères du type de média (le nom d'un codage de caractères) à ajouter à une réponse, si et seulement si le type de contenu de la réponse est soit text/plain, soit text/html. Ceci va remplacer tout jeu de caractères spécifié dans le corps de la réponse via un élément META, bien que cet effet dépende en fait souvent de la configuration du client de l'utilisateur. La définition de AddDefaultCharset Off désactive cette fonctionnalité. AddDefaultCharset On ajoute un jeu de caractères par défaut de iso-8859-1. Toute autre valeur peut être définie via le paramètre jeu de caractères, qui doit appartenir à la liste des valeurs de jeux de caractères enregistrés par l'IANA à utiliser dans les types de média Internet (types MIME). Par exemple :

    AddDefaultCharset utf-8

    La directive AddDefaultCharset ne doit être utilisée que lorsque toutes les ressources textes auxquelles elle s'applique possèdent le jeu de caractère spécifié, et qu'il est trop contraignant de définir leur jeu de caractères individuellement. Un exemple de ce type est l'ajout du paramètre jeu de caractères aux ressources comportant un contenu généré, comme les scripts CGI hérités qui peuvent être vulnérables à des attaques de type cross-site scripting à cause des données utilisateurs incluses dans leur sortie. Notez cependant qu'une meilleur solution consiste à corriger (ou supprimer) ces scripts, car la définition d'un jeu de caractères par défaut ne protège pas les utilisateurs qui ont activé la fonctionnalité "Détection automatique de l'encodage des caractères" dans leur navigateur.

    Voir aussi

    top

    Directive AllowEncodedSlashes

    Description:Détermine si les séparateurs de chemin encodés sont autorisés à transiter dans les URLs tels quels
    Syntaxe:AllowEncodedSlashes On|Off|NoDecode
    Défaut:AllowEncodedSlashes Off
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core
    Compatibilité:L'option NoDecode est disponible depuis la version 2.3.12.

    La directive AllowEncodedSlashes permet l'utilisation des URLs contenant des séparateurs de chemin encodés dans la partie chemin (%2F pour / et même %5C pour \ sur les systèmes concernés).

    Avec la valeur par défaut, Off, de telles URLs sont refusées et provoquent le renvoi d'une erreur 404 (Not found).

    Avec la valeur On, ces URLs sont acceptées, et les slashes encodés sont décodés comme tout autre caractère codé.

    Avec la valeur NoDecode, ces URLs sont acceptées, mais les slashes codés ne sont pas décodés et laissés dans leur état codé.

    Définir AllowEncodedSlashes à On est surtout utile en association avec PATH_INFO.

    Note

    Si le codage des slashes dans la partie chemin est nécessaire, l'utilisation de l'option NoDecode est fortement recommandée par mesure de sécurité. Permettre le décodage des slashes pourrait éventuellement induire l'autorisation de chemins non sûrs.

    Voir aussi

    top

    Directive AllowOverride

    Description:Types de directives autorisées dans les fichiers .htaccess
    Syntaxe:AllowOverride All|None|type directive [type directive] ...
    Défaut:AllowOverride None à partir de la version 2.3.9, AllowOverride All pour les versions antérieures
    Contexte:répertoire
    Statut:Noyau httpd
    Module:core

    Lorsque le serveur trouve un fichier .htaccess (dont le nom est défini par la directive AccessFileName), il doit savoir lesquelles des directives placées dans ce fichier sont autorisées à modifier la configuration préexistante.

    Valable seulement dans les sections <Directory>

    La directive AllowOverride ne peut être utilisée que dans les sections <Directory> définies sans expressions rationnelles, et non dans les sections <Location>, <DirectoryMatch> ou <Files>.

    Lorsque cette directive et la directive AllowOverrideList sont définies à None, les fichiers .htaccess sont totalement ignorés. Dans ce cas, le serveur n'essaiera même pas de lire les fichiers .htaccess du système de fichiers.

    Lorsque cette directive est définie à All, toute directive valable dans le Contexte .htaccess sera autorisée dans les fichiers .htaccess.

    L'argument type directive peut contenir les groupements de directives suivants (voir ce document pour obtenir la liste à jour des directives activées pour chaque type de directive) :

    AuthConfig
    Permet l'utilisation des directives d'autorisation (AuthDBMGroupFile, AuthDBMUserFile, AuthGroupFile, AuthName, AuthType, AuthUserFile, Require, etc...).
    FileInfo
    Permet l'utilisation des directives qui contrôlent les types de documents (directives ErrorDocument, ForceType, LanguagePriority, SetHandler, SetInputFilter, SetOutputFilter, et directives du module mod_mime Add* et Remove*), des metadonnées des documents (Header, RequestHeader, SetEnvIf, SetEnvIfNoCase, BrowserMatch, CookieExpires, CookieDomain, CookieStyle, CookieTracking, CookieName), des directives du module mod_rewrite directives (RewriteEngine, RewriteOptions, RewriteBase, RewriteCond, RewriteRule), des directives du module mod_alias directives (Redirect, RedirectTemp, RedirectPermanent, RedirectMatch), et de la directive Action du module mod_actions.
    Indexes
    Permet l'utilisation des directives qui contrôlent l'indexation des répertoires (AddDescription, AddIcon, AddIconByEncoding, AddIconByType, DefaultIcon, DirectoryIndex, FancyIndexing, HeaderName, IndexIgnore, IndexOptions, ReadmeName, etc...).
    Limit
    Permet l'utilisation des directives contrôlant l'accès au serveur (Allow, Deny et Order).
    Nonfatal=[Override|Unknown|All]
    Permet d'utiliser l'option AllowOverride pour rendre les erreurs de syntaxe non fatales dans les fichiers .htaccess : au lieu de causer une Internal Server Error, les directives non autorisées ou non reconnues seront ignorées et un avertissement enregistré dans le journal :
    • Nonfatal=Override rend les directives interdite par AllowOverride non fatales.
    • Nonfatal=Unknown rend les directives inconnues non fatales. Sont concernées les erreurs de frappe et les directives implémentées par un module non chargé.
    • Nonfatal=All rend toutes les directives précédentes non fatales.

    Notez qu'une erreur de syntaxe dans une directive valide causera toujours une internal server error.

    Sécurité

    Les erreurs non fatales peuvent être à l'origine de problèmes de sécurité pour les utilisateurs de fichiers .htaccess. Par exemple, si AllowOverride interdit AuthConfig, toute configuration utilisateur destinée à restreindre l'accès à un site ne sera pas prise en compte.
    Options[=Option,...]
    Permet l'utilisation des directives contrôlant les fonctionnalités spécifiques d'un répertoire (Options et XBitHack). "Options" doit être suivi d'un signe "égal", puis d'une liste d'options séparées par des virgules (pas d'espaces) ; ces options doivent être définies à l'aide de la commande Options.

    Désactivation implicite des options

    Bien que la liste des options disponibles dans les fichiers .htaccess puisse être limitée par cette directive, tant qu'un directive Options est autorisée, toute autre option héritée peut être désactivée en utilisant la syntaxe non-relative. En d'autres termes, ce mécanisme ne peut pas forcer une option spécifique à rester activée tout en permettant à toute autre option d'être activée.

    AllowOverride Options=Indexes,MultiViews

    Exemple :

    AllowOverride AuthConfig Indexes

    Dans l'exemple ci-dessus, toutes les directives qui ne font partie ni du groupe AuthConfig, ni du groupe Indexes, provoquent une erreur "internal server error".

    Pour des raisons de sécurité et de performance, ne définissez pas AllowOverride à autre chose que None dans votre bloc <Directory "/">. Recherchez plutôt (ou créez) le bloc <Directory> qui se réfère au répertoire où vous allez précisément placer un fichier .htaccess.

    Voir aussi

    top

    Directive AllowOverrideList

    Description:Directives autorisées dans les fichiers .htaccess
    Syntaxe:AllowOverrideList None|directive [directive-type] ...
    Défaut:AllowOverrideList None
    Contexte:répertoire
    Statut:Noyau httpd
    Module:core

    Lorsque le serveur trouve un fichier .htaccess (comme spécifié par la directive AccessFileName), il doit savoir lesquelles des directives déclarées dans ce fichier peuvent remplacer des directives des fichiers de configuration du serveur.

    Seulement disponible dans les sections <Directory>

    La directive AllowOverrideList n'est disponible que dans les sections <Directory> spécifiées sans expressions rationnelles.

    Lorsque cette directive et la directive AllowOverride sont définies à None, les fichiers .htaccess sont totalement ignorés. Dans ce cas, le serveur ne cherchera même pas à lire des fichiers .htaccess dans le système de fichiers.

    Example:

    AllowOverride None
    AllowOverrideList Redirect RedirectMatch

    Dans l'exemple ci-dessus, seules les directives Redirect et RedirectMatch sont autorisées. Toutes les autres provoqueront une erreur interne du serveur.

    Example:

    AllowOverride AuthConfig
    AllowOverrideList CookieTracking CookieName

    Dans l'exemple ci-dessus, la directive AllowOverride autorise les directives du groupement AuthConfig, et AllowOverrideList n'autorise que deux directives du groupement FileInfo. Toutes les autres provoqueront une erreur interne du serveur.

    Voir aussi

    top

    Directive CGIMapExtension

    Description:Technique permettant de localiser l'interpréteur des scripts CGI
    Syntaxe:CGIMapExtension chemin CGI .extension
    Contexte:répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core
    Compatibilité:NetWare uniquement

    Cette directive permet de contrôler la manière dont Apache httpd trouve l'interpréteur servant à exécuter les scripts CGI. Par exemple, avec la définition CGIMapExtension sys:\foo.nlm .foo, tous les fichiers scripts CGI possédant une extension .foo seront passés à l'interpréteur FOO.

    top

    Directive CGIPassAuth

    Description:Active la transmission d'en-têtes d'autorisation HTTP aux scripts en tant que variables CGI
    Syntaxe:CGIPassAuth On|Off
    Défaut:CGIPassAuth Off
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible à partir de la version 2.4.13 du serveur HTTP Apache

    La directive CGIPassAuth permet aux scripts d'accéder aux en-têtes d'autorisation HTTP tels que Authorization, en-tête nécessaire aux scripts qui implémente une authentification HTTP de base. Normalement, ces en-têtes HTTP sont invisibles pour les scripts car ils leurs permettraient de voir les identifiants et mots de passe utilisés pour accéder au serveur lorsque l'authentification HTTP de base est activée au niveau du serveur web. Cette directive doit être définie à "On" lorsque des scripts sont autorisés à implémenter une authentification HTTP de base.

    Cette directive constitue une alternative à l'option de compilation SECURITY_HOLE_PASS_AUTHORIZATION qui était déjà disponible dans les versions précédentes du serveur HTTP Apache.

    Cette option est prise en compte par tout module qui utilise ap_add_common_vars(), comme mod_cgi, mod_cgid, mod_proxy_fcgi, mod_proxy_scgi, etc... En particulier, elle affecte les modules qui ne traitent pas à proprement parler les requêtes, mais utilisent quand-même cette API, comme mod_include ou mod_ext_filter. Les modules tiers qui n'utilisent pas ap_add_common_vars() peuvent aussi choisir de prendre en compte cette option.

    top

    Directive CGIVar

    Description:Contrôle la manière dont certaines variables CGI sont définies
    Syntaxe:CGIVar variable rule
    Contexte:répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible à partir de la version 2.4.21 du serveur HTTP Apache

    Cette directive permet de contrôler la manière dont certaines variables CGI sont définies.

    règles REQUEST_URI :

    original-uri (valeur par défaut)
    La valeur est extraite de la requête originale, et ne tient pas compte des redirections internes ou des sous-requêtes qui pourraient modifier la ressource demandée.
    current-uri
    La valeur reflète la ressource en cours de traitement ; elle peut être différente de la ressource demandée dans la requête initiale du client suite à d'éventuelles redirections internes ou sous-requêtes.
    top

    Directive ContentDigest

    Description:Active la génération d'un en-tête Content-MD5 dans la réponse HTTP
    Syntaxe:ContentDigest On|Off
    Défaut:ContentDigest Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Options
    Statut:Noyau httpd
    Module:core

    Cette directive active la génération d'un en-tête Content-MD5 selon les définitions des RFC 1864 et 2616.

    MD5 est un algorithme permettant de générer un condensé (parfois appelé "empreinte") à partir de données d'une taille aléatoire ; le degré de précision est tel que la moindre altération des données d'origine entraîne une altération de l'empreinte.

    L'en-tête Content-MD5 permet de vérifier l'intégrité de la réponse HTTP dans son ensemble. Un serveur mandataire ou un client peut utiliser cet en-tête pour rechercher une éventuelle modification accidentelle de la réponse au cours de sa transmission. Exemple d'en-tête :

    Content-MD5: AuLb7Dp1rqtRtxz2m9kRpA==

    Notez que des problèmes de performances peuvent affecter votre serveur, car l'empreinte est générée pour chaque requête (il n'y a pas de mise en cache).

    L'en-tête Content-MD5 n'est envoyé qu'avec les documents servis par le module core, à l'exclusion de tout autre module. Ainsi, les documents SSI, les sorties de scripts CGI, et les réponses à des requêtes partielles (byte range) ne comportent pas cet en-tête.

    top

    Directive DefaultRuntimeDir

    Description:Répertoire de base des fichiers créés au cours de l'exécution du serveur
    Syntaxe:DefaultRuntimeDir chemin-répertoire
    Défaut:DefaultRuntimeDir DEFAULT_REL_RUNTIMEDIR (logs/)
    Contexte:configuration globale
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible depuis la version 2.4.2 du serveur HTTP Apache

    La directive DefaultRuntimeDir permet de définir le répertoire dans lequel le serveur va créer les différents fichiers relatifs à son exécution (mémoire partagée, verrous, etc...). Si le chemin spécifié est relatif, le chemin absolu sera généré relativement à la valeur de la directive ServerRoot

    Example

    DefaultRuntimeDir scratch/

    La valeur par défaut de la directive DefaultRuntimeDir peut être modifiée en changeant la valeur de la macro DEFAULT_REL_RUNTIMEDIR définie à la compilation.

    Note: si la valeur de ServerRoot n'a pas été spécifiée avant d'utiliser cette directive, c'est la valeur par défaut de ServerRoot qui sera utilisée pour définir la base du répertoire.

    Voir aussi

    top

    Directive DefaultType

    Description:Les seuls effets de cette directive sont des émissions d'avertissements si sa valeur est différente de none. Dans les versions précédentes, DefaultType permettait de spécifier un type de média à assigner par défaut au contenu d'une réponse pour lequel aucun autre type de média n'avait été trouvé.
    Syntaxe:DefaultType type média|none
    Défaut:DefaultType none
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core
    Compatibilité:L'argument none est disponible dans les versions d'Apache httpd 2.2.7 et supérieures. Tous les autres choix sont DESACTIVÉS à partir des version 2.3.x.

    Cette directive a été désactivée. Pour la compatibilité ascendante avec les anciens fichiers de configuration, elle peut être spécifiée avec la valeur none, c'est à dire sans type de médium par défaut. Par exemple :

    DefaultType None

    DefaultType None n'est disponible que dans les versions d'Apache 2.2.7 et supérieures.

    Utilisez le fichier de configuration mime.types et la directive AddType pour configurer l'assignement d'un type de médium via les extensions de fichiers, ou la directive ForceType pour attribuer un type de médium à des ressources spécifiques. Dans le cas contraire, le serveur enverra sa réponse sans champ d'en-tête Content-Type, et le destinataire devra déterminer lui-même le type de médium.

    top

    Directive Define

    Description:Permet de définir une variable
    Syntaxe:Define nom-paramètre [valeur-paramètre]
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Noyau httpd
    Module:core

    Avec un seul paramètre, l'effet de la directive Define est identique à celui de l'argument -D du programme httpd. Il permet de modifier le comportement des sections <IfDefine> sans avoir à ajouter d'argument -D au sein des scripts de démarrage.

    De plus, le second paramètre permet d'affecter une valeur à la variable définie par le premier. Cette variable peut être référencée dans le fichier de configuration via la syntaxe ${VAR}. La portée de la variable est toujours globale, et n'est jamais limitée à la section de configuration courante.

    <IfDefine TEST>
      Define servername test.example.com
    </IfDefine>
    <IfDefine !TEST>
      Define servername www.example.com
      Define SSL
    </IfDefine>
    
    DocumentRoot "/var/www/${servername}/htdocs"

    Le caractère ":" est interdit dans les noms de variables afin d'éviter les conflits avec la syntaxe de la directive RewriteMap.

    Portée de la directive et pièges à éviter

    Si cette directive est définie au sein d'un bloc VirtualHost, les changements qu'elle induit sont visibles de toute directive ultérieure, au delà de tout bloc VirtualHost.

    Voir aussi

    top

    Directive <Directory>

    Description:Regroupe un ensemble de directives qui ne s'appliquent qu'au répertoire concerné du système de fichiers, à ses sous-répertoires, et à leur contenu.
    Syntaxe:<Directory chemin répertoire> ... </Directory>
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    Les balises <Directory> et </Directory> permettent de regrouper un ensemble de directives qui ne s'appliquent qu'au répertoire précisé, à ses sous-répertoires, et aux fichiers situés dans ces sous-répertoires. Toute directive autorisée dans un contexte de répertoire peut être utilisée. chemin répertoire est soit le chemin absolu d'un répertoire, soit une chaîne de caractères avec caractères génériques utilisant la comparaison Unix de style shell. Dans une chaîne de caractères avec caractères génériques, ? correspond à un caractère quelconque, et * à toute chaîne de caractères. Les intervalles de caractères [] sont aussi autorisés. Aucun caractère générique ne peut remplacer le caractère `/', si bien que l'expression <Directory "/*/public_html"> ne conviendra pas pour le chemin * /home/user/public_html, alors que <Directory "/home/*/public_html"> conviendra. Exemple :

    <Directory "/usr/local/httpd/htdocs">
      Options Indexes FollowSymLinks
    </Directory>

    Les chemins de répertoires contenant des espaces doivent être entourés de guillemets afin d'empêcher l'interprétation de ces espaces comme fins d'arguments.

    Soyez prudent avec l'argument chemin répertoire : il doit correspondre exactement au chemin du système de fichier qu'Apache httpd utilise pour accéder aux fichiers. Les directives comprises dans une section <Directory> ne s'appliqueront pas aux fichiers du même répertoire auxquels on aura accédé via un chemin différent, per exemple via un lien symbolique.

    Les Expressions rationnelles peuvent aussi être utilisées en ajoutant le caractère ~. Par exemple :

    <Directory ~ "^/www/[0-9]{3}">
    
    </Directory>

    pourra correspondre à tout répertoire situé dans /www/ et dont le nom se compose de trois chiffres.

    Si plusieurs sections <Directory> (sans expression rationnelle) correspondent au répertoire (ou à un de ses parents) qui contient le document, les directives de la section <Directory> dont le chemin est le plus court sont appliquées en premier, en s'intercalant avec les directives des fichiers .htaccess. Par exemple, avec

    <Directory "/">
      AllowOverride None
    </Directory>
    
    <Directory "/home">
      AllowOverride FileInfo
    </Directory>

    l'accès au document /home/web/dir/doc.html emprunte le chemin suivant :

    • Aplication de la directive AllowOverride None (qui désactive les fichiers .htaccess).
    • Application de la directive AllowOverride FileInfo (pour le répertoire /home).
    • Application de toute directive FileInfo qui se trouverait dans d'éventuels fichiers /home/.htaccess, /home/web/.htaccess ou /home/web/dir/.htaccess, dans cet ordre.

    Les directives associées aux répertoires sous forme d'expressions rationnelles ne sont prises en compte qu'une fois toutes les directives des sections sans expressions rationnelles appliquées. Alors, tous les répertoires avec expressions rationnelles sont testés selon l'ordre dans lequel ils apparaissent dans le fichier de configuration. Par exemple, avec

    <Directory ~ "abc$">
      # ... directives ici ...
    </Directory>

    la section avec expression rationnelle ne sera prise en compte qu'après les sections <Directory> sans expression rationnelle et les fichiers .htaccess. Alors, l'expression rationnelle conviendra pour /home/abc/public_html/abc et la section <Directory> correspondante s'appliquera.

    Notez que la politique d'accès par défaut dans les sections <Directory "/"> consiste à autoriser tout accès sans restriction. Ceci signifie qu'Apache httpd va servir tout fichier correspondant à une URL. Il est recommandé de modifier cette situation à l'aide d'un bloc du style

    <Directory "/">
      Require all denied
    </Directory>

    puis d'affiner la configuration pour les répertoires que vous voulez rendre accessibles. Voir la page Conseils à propos de sécurité pour plus de détails.

    Les sections <Directory> se situent dans le fichier httpd.conf. Les directives <Directory> ne peuvent pas être imbriquées et ne sont pas autorisées dans les sections <Limit> ou <LimitExcept>.

    Voir aussi

    top

    Directive <DirectoryMatch>

    Description:Regroupe des directives qui s'appliquent au contenu de répertoires du système de fichiers correspondant à une expression rationnelle
    Syntaxe:<DirectoryMatch regex> ... </DirectoryMatch>
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    Les balises <DirectoryMatch> et </DirectoryMatch> permettent de regrouper un ensemble de directives qui ne s'appliqueront qu'au répertoire précisé (et aux fichiers qu'il contient), comme pour la section <Directory>. Cependant, le répertoire est précisé sous la forme d'une expression rationnelle. Par exemple :

    <DirectoryMatch "^/www/(.+/)?[0-9]{3}/">
        # ...
    </DirectoryMatch>

    convient pour les sous-répertoires de /www/ dont le nom se compose de trois chiffres.

    Compatibilité

    Avant la version 2.3.9, cette directive s'appliquait aussi aux sous-répertoires (comme la directive <Directory>), et ne tenait pas compte du symbole de fin de ligne ($). Depuis la version 2.3.9, seuls les répertoires qui correspondent à l'expression sont affectés par les directives contenues dans la section.

    slash de fin

    Cette directive s'applique aux requêtes pour des répertoires avec ou sans slash de fin ; les expressions contenant un symbole de fin de ligne ($) doivent donc faire l'objet d'une attention particulière.

    A partir de la version 2.4.8, les groupes nommés et les références arrières sont extraits et enregistrés dans l'environnement avec leur nom en majuscules et préfixé par "MATCH_". Ceci permet de référencer des URLs dans des expressions ou au sein de modules comme mod_rewrite. Pour éviter toute confusion, les références arrières numérotées (non nommées) sont ignorées. Vous devez utiliser à la place des groupes nommés.

    <DirectoryMatch "^/var/www/combined/(?<sitename>[^/]+)">
        Require ldap-group cn=%{env:MATCH_SITENAME},ou=combined,o=Example
    </DirectoryMatch>

    Voir aussi

    top

    Directive DocumentRoot

    Description:Racine principale de l'arborescence des documents visible depuis Internet
    Syntaxe:DocumentRoot chemin répertoire
    Défaut:DocumentRoot "/usr/local/apache/htdocs"
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    Cette directive permet de définir le répertoire à partir duquel httpd va servir les fichiers. S'il ne correspond pas à un Alias, le chemin de l'URL sera ajouté par le serveur à la racine des documents afin de construire le chemin du document recherché. Exemple :

    DocumentRoot "/usr/web"

    un accès à http://my.example.com/index.html se réfère alors à /usr/web/index.html. Si chemin répertoire n'est pas un chemin absolu, il est considéré comme relatif au chemin défini par la directive ServerRoot.

    Le répertoire défini par la directive DocumentRoot ne doit pas comporter de slash final.

    Voir aussi

    top

    Directive <Else>

    Description:Contient des directives qui ne s'appliquent que si la condition correspondant à la section <If> ou <ElseIf> précédente n'est pas satisfaite par la requête à l'exécution
    Syntaxe:<Else> ... </Else>
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core
    Compatibilité:Les conditions imbriquées sont supportées à partir de la version 2.4.26 du serveur HTTP Apache

    La section <Else> applique les directives qu'elle contient si et seulement si les conditions correspondant à la section <If> ou <ElseIf> immédiatement supérieure et dans la même portée n'ont pas été satisfaites. Par exemple, dans :

    <If "-z req('Host')">
      # ...
    </If>
    <Else>
      # ...
    </Else>

    La condition de la section <If> serait satisfaite pour les requêtes HTTP/1.0 sans en-tête Host:, alors que celle de la section <Else> le serait pour les requêtes comportant un en-tête Host:.

    Voir aussi

    top

    Directive <ElseIf>

    Description:Contient des directives qui ne s'appliquent que si la condition correspondante est satisfaite par une requête à l'exécution, alors que la condition correspondant à la section <If> ou <ElseIf> précédente ne l'était pas.
    Syntaxe:<ElseIf expression> ... </ElseIf>
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core
    Compatibilité:Les conditions imbriquées sont supportées à partir de la version 2.4.26 du serveur HTTP Apache

    La section <ElseIf> applique les directives qu'elle contient si et seulement si d'une part la condition correspondante est satisfaite, et d'autre part la condition correspondant à la section <If> ou <ElseIf> de la même portée ne l'est pas. Par exemple, dans :

    <If "-R '10.1.0.0/16'">
      #...
    </If>
    <ElseIf "-R '10.0.0.0/8'">
      #...
    </ElseIf>
    <Else>
      #...
    </Else>

    La condition correspondant à la section <ElseIf> est satisfaite si l'adresse distante de la requête appartient au sous-réseau 10.0.0.0/8, mais pas si elle appartient au sous-réseau 10.1.0.0/16.

    Voir aussi

    top

    Directive EnableMMAP

    Description:Utilise la projection en mémoire (Memory-Mapping) pour lire les fichiers pendant qu'ils sont servis
    Syntaxe:EnableMMAP On|Off
    Défaut:EnableMMAP On
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core

    Cette directive définit si httpd peut utiliser la projection en mémoire (Memory-Mapping) quand il doit lire le contenu d'un fichier pendant qu'il est servi. Par défaut, lorsque le traitement d'une requête requiert l'accès aux données contenues dans un fichier -- par exemple, pour servir un fichier interprété par le serveur à l'aide de mod_include -- Apache httpd projette le fichier en mémoire si le système d'exploitation le permet.

    Cette projection en mémoire induit parfois une amélioration des performances. Sur certains systèmes cependant, il est préférable de désactiver la projection en mémoire afin d'éviter certains problèmes opérationnels :

    • Sur certains systèmes multi-processeurs, la projection en mémoire peut dégrader les performances du programme httpd.
    • S'il fait l'objet d'une projection en mémoire par httpd, la suppression ou la troncature d'un fichier peut provoquer un crash de httpd avec une erreur de segmentation.

    Pour les configurations de serveur sujettes à ce genre de problème, il est préférable de désactiver la projection en mémoire des fichiers servis en spécifiant :

    EnableMMAP Off

    Pour les montages NFS, cette fonctionnalité peut être explicitement désactivée pour les fichiers concernés en spécifiant :

    <Directory "/path-to-nfs-files">
      EnableMMAP Off
    </Directory>
    top

    Directive EnableSendfile

    Description:Utilise le support sendfile du noyau pour servir les fichiers aux clients
    Syntaxe:EnableSendfile On|Off
    Défaut:EnableSendfile Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core
    Compatibilité:Par défaut à Off depuis la version 2.3.9.

    Cette directive définit si le programme httpd peut utiliser le support sendfile du noyau pour transmettre le contenu des fichiers aux clients. Par défaut, lorsque le traitement d'une requête ne requiert pas l'accès aux données contenues dans un fichier -- par exemple, pour la transmission d'un fichier statique -- Apache httpd utilise sendfile pour transmettre le contenu du fichier sans même lire ce dernier, si le système d'exploitation le permet.

    Ce mécanisme sendfile évite la séparation des opérations de lecture et d'envoi, ainsi que les réservations de tampons. sur certains systèmes cependant, ou sous certains systèmes de fichiers, il est préférable de désactiver cette fonctionnalité afin d'éviter certains problèmes opérationnels :

    • Certains systèmes peuvent présenter un support sendfile défectueux que le système de compilation n'a pas détecté, en particulier si les exécutables ont été compilés sur une autre machine, puis copiés sur la première avec un support sendfile défectueux.
    • Sous Linux, l'utilisation de sendfile induit des bogues lors de la récupération des paquets de vérification TCP (TCP-checksum) avec certaines cartes réseau lorsqu'on utilise IPv6.
    • Sous Linux sur Itanium, sendfile peut s'avérer incapable de traiter les fichiers de plus de 2 Go.
    • Avec un montage réseau de DocumentRoot (par exemple NFS, SMB, CIFS, FUSE), le noyau peut s'avérer incapable de servir un fichier de ce montage réseau en passant par son propre cache.

    Pour les configurations de serveur non sujettes à ce genre de problème, vous pouvez activer cette fonctionnalité en spécifiant :

    EnableSendfile On

    Pour les montages réseau, cette fonctionnalité peut être explicitement désactivée pour les fichiers concernés en spécifiant :

    <Directory "/path-to-nfs-files">
      EnableSendfile Off
    </Directory>

    Veuillez noter que la configuration de la directive EnableSendfile dans un contexte de répertoire ou de fichier .htaccess n'est pas supportée par mod_cache_disk. Le module ne prend en compte la définition de EnableSendfile que dans un contexte global.

    top

    Directive Error

    Description:Interrompt la lecture de la configuration avec un message d'erreur personnalisé
    Syntaxe:Error message
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Noyau httpd
    Module:core
    Compatibilité:à partir de la version 2.3.9

    Si une erreur peut être détectée dans la configuration, souvent un module manquant, cette directive peut être utilisée pour générer un message d'erreur personnalisé, et interrompre la lecture de la configuration.

    # Exemple
    # vérification du chargement de mod_include
    <IfModule !include_module>
      Error "mod_include is required by mod_foo.  Load it with LoadModule."
    </IfModule>
    
    # vérification de la définition de SSL ou (exclusif) NOSSL
    <IfDefine SSL>
    <IfDefine NOSSL>
      Error "Both SSL and NOSSL are defined.  Define only one of them."
    </IfDefine>
    </IfDefine>
    <IfDefine !SSL>
    <IfDefine !NOSSL>
      Error "Either SSL or NOSSL must be defined."
    </IfDefine>
    </IfDefine>
    top

    Directive ErrorDocument

    Description:Document que le serveur renvoie au client en cas d'erreur
    Syntaxe:ErrorDocument code erreur document
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core

    Apache httpd peut traiter les problèmes et les erreurs de quatre manières,

    1. afficher un simple message d'erreur au contenu fixe
    2. afficher un message personnalisé
    3. rediriger en interne vers un chemin d'URL local pour traiter le problème ou l'erreur
    4. rediriger vers une URL externe pour traiter le problème ou l'erreur

    La première option constitue le comportement par défaut; pour choisir une des trois autres options, il faut configurer Apache à l'aide de la directive ErrorDocument, suivie du code de la réponse HTTP et d'une URL ou d'un message. Apache httpd fournit parfois des informations supplémentaires à propos du problème ou de l'erreur.

    A partir de la version 2.4.13, il est possible d'utiliser la syntaxe des expressions dans cette directive afin de générer des chaînes et URLs dynamiques.

    Les URLs peuvent commencer par un slash (/) pour les chemins web locaux (relatifs au répertoire défini par la directive DocumentRoot), ou se présenter sous la forme d'une URL complète que le client pourra résoudre. Alternativement, un message à afficher par le navigateur pourra être fourni. Notez que la décision de considérer le paramètre comme URL, chemin ou message intervient avant toute interprètation d'expression. Exemples :

    ErrorDocument 500 http://example.com/cgi-bin/server-error.cgi
    ErrorDocument 404 /errors/bad_urls.php
    ErrorDocument 401 /subscription_info.html
    ErrorDocument 403 "Sorry can't allow you access today"
    ErrorDocument 403 Forbidden!
    ErrorDocument 403 /errors/forbidden.py?referrer=%{escape:%{HTTP_REFERER}}

    De plus, on peut spécifier la valeur spéciale default pour indiquer l'utilisation d'un simple message d'Apache httpd codé en dur. Bien que non nécessaire dans des circonstances normales, la spécification de la valeur default va permettre de rétablir l'utilisation du simple message d'Apache httpd codé en dur pour les configurations qui sans cela, hériteraient d'une directive ErrorDocument existante.

    ErrorDocument 404 /cgi-bin/bad_urls.pl
    
    <Directory "/web/docs">
      ErrorDocument 404 default
    </Directory>

    Notez que lorsque vous spécifiez une directive ErrorDocument pointant vers une URL distante (c'est à dire tout ce qui commence par le préfixe http), le serveur HTTP Apache va envoyer une redirection au client afin de lui indiquer où trouver le document, même dans le cas où ce document se trouve sur le serveur local. Ceci a de nombreuses conséquences dont la plus importante réside dans le fait que le client ne recevra pas le code d'erreur original, mais au contraire un code de statut de redirection. Ceci peut en retour semer la confusion chez les robots web et divers clients qui tentent de déterminer la validité d'une URL en examinant le code de statut. De plus, si vous utilisez une URL distante avec ErrorDocument 401, le client ne saura pas qu'il doit demander un mot de passe à l'utilisateur car il ne recevra pas le code de statut 401. C'est pourquoi, si vous utilisez une directive ErrorDocument 401, elle devra faire référence à un document par le biais d'un chemin local.

    Microsoft Internet Explorer (MSIE) ignore par défaut les messages d'erreur générés par le serveur lorsqu'ils sont trop courts et remplacent ses propres messages d'erreur "amicaux". Le seuil de taille varie en fonction du type d'erreur, mais en général, si la taille de votre message d'erreur est supérieure à 512 octets, il y a peu de chances pour que MSIE l'occulte, et il sera affiché par ce dernier. Vous trouverez d'avantage d'informations dans l'article de la base de connaissances Microsoft Q294807.

    Bien que la plupart des messages d'erreur internes originaux puissent être remplacés, ceux-ci sont cependant conservés dans certaines circonstances sans tenir compte de la définition de la directive ErrorDocument. En particulier, en cas de détection d'une requête mal formée, le processus de traitement normal des requêtes est immédiatement interrompu, et un message d'erreur interne est renvoyé, ceci afin de se prémunir contre les problèmes de sécurité liés aux requêtes mal formées.

    Si vous utilisez mod_proxy, il est en général préférable d'activer ProxyErrorOverride afin d'être en mesure de produire des messages d'erreur personnalisés pour le compte de votre serveur d'origine. Si vous n'activez pas ProxyErrorOverride, Apache httpd ne générera pas de messages d'erreur personnalisés pour le contenu mandaté.

    Voir aussi

    top

    Directive ErrorLog

    Description:Définition du chemin du journal des erreurs
    Syntaxe: ErrorLog file-path|syslog[:[facility][:tag]]
    Défaut:ErrorLog logs/error_log (Unix) ErrorLog logs/error.log (Windows and OS/2)
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    La directive ErrorLog permet de définir le nom du fichier dans lequel le serveur va journaliser toutes les erreurs qu'il rencontre. Si le file-path n'est pas absolu, il est considéré comme relatif au chemin défini par la directive ServerRoot.

    ErrorLog "/var/log/httpd/error_log"

    Si le file-path commence par une barre verticale "(|)", il est considéré comme une commande à lancer pour traiter la journalisation de l'erreur.

    ErrorLog "|/usr/local/bin/httpd_errors"

    Voir les notes à propos des journaux redirigés pour plus d'informations.

    L'utilisation de syslog à la place d'un nom de fichier active la journalisation via syslogd(8) si le système le supporte. Le dispositif syslog par défaut est local7, mais vous pouvez le modifier à l'aide de la syntaxe syslog:facility, où facility peut être remplacé par un des noms habituellement documentés dans la page de man syslog(1). Le dispositif syslog local7 est global, et si il est modifié dans un serveur virtuel, le dispositif final spécifié affecte l'ensemble du serveur. La même règle s'applique au tag syslog qui utilise par défaut le nom du binaire du serveur HTTP Apache httpd dans la plupart des cas. Vous pouvez aussi modifier cette valeur en utilisant la syntaxe syslog::tag.

    ErrorLog syslog:user
    ErrorLog syslog:user:httpd.srv1
    ErrorLog syslog::httpd.srv2

    Des modules supplémentaires peuvent fournir leurs propres fournisseurs ErrorLog. La syntaxe est similaire à celle de l'exemple syslog ci-dessus.

    SECURITE : Voir le document conseils à propos de sécurité pour des détails sur les raisons pour lesquelles votre sécurité peut être compromise si le répertoire contenant les fichiers journaux présente des droits en écriture pour tout autre utilisateur que celui sous lequel le serveur est démarré.

    Note

    Lors de la spécification d'un chemin de fichier sur les plates-formes non-Unix, on doit veiller à n'utiliser que des slashes (/), même si la plate-forme autorise l'utilisation des anti-slashes (\). Et d'une manière générale, il est recommandé de n'utiliser que des slashes (/) dans les fichiers de configuration.

    Voir aussi

    top

    Directive ErrorLogFormat

    Description:Spécification du format des entrées du journal des erreurs
    Syntaxe: ErrorLogFormat [connection|request] format
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    La directive ErrorLogFormat permet de spécifier quelles informations supplémentaires vont être enregistrées dans le journal des erreurs en plus du message habituel.

    # Exemple simple
    ErrorLogFormat "[%t] [%l] [pid %P] %F: %E: [client %a] %M"

    La spécification de connection ou request comme premier paramètre permet de définir des formats supplémentaires, ce qui a pour effet de journaliser des informations additionnelles lorsque le premier message est enregistré respectivement pour une connexion ou une requête spécifique. Ces informations additionnelles ne sont enregistrées qu'une seule fois par connexion/requête. Si le traitement d'une connexion ou d'une requête ne génère aucun message dans le journal, alors aucune information additionnelle n'est enregistrée.

    Il peut arriver que certains items de la chaîne de format ne produisent aucune sortie. Par exemple, l'en-tête Referer n'est présent que si le message du journal est associé à une requête et s'il est généré à un moment où l'en-tête Referer a déjà été lu par le client. Si aucune sortie n'est générée, le comportement par défaut consiste à supprimer tout ce qui se trouve entre l'espace précédent et le suivant. Ceci implique que la ligne de journalisation est divisée en champs ne contenant pas d'espace séparés par des espaces. Si un item de la chaîne de format ne génère aucune sortie, l'ensemble du champ est omis. Par exemple, si l'adresse distante %a du format [%t] [%l] [%a] %M  n'est pas disponible, les crochets qui l'entourent ne seront eux-mêmes pas enregistrés. Il est possible d'échapper les espaces par un anti-slash afin qu'ils ne soient pas considérés comme séparateurs de champs. La combinaison '% ' (pourcentage espace) est un délimiteur de champ de taille nulle qui ne génère aucune sortie.

    Ce comportement peut être changé en ajoutant des modificateurs à l'item de la chaîne de format. Le modificateur - (moins) provoque l'enregistrement d'un signe moins si l'item considéré ne génère aucune sortie. Pour les formats à enregistrement unique par connexion/requête, il est aussi possible d'utiliser le modificateur + (plus). Si un item ne générant aucune sortie possède le modificateur plus, la ligne dans son ensemble est omise.

    Un modificateur de type entier permet d'assigner un niveau de sévérité à un item de format. L'item considéré ne sera journalisé que si la sévérité du message n'est pas plus haute que le niveau de sévérité spécifié. Les valeurs possibles vont de 1 (alert) à 15 (trace8), en passant par 4 (warn) ou 7 (debug).

    Par exemple, voici ce qui arriverait si vous ajoutiez des modificateurs à l'item %{Referer}i qui enregistre le contenu de l'en-tête Referer.

    Item modifiéSignification
    %-{Referer}i Enregistre le caractère - si l'en-tête Referer n'est pas défini.
    %+{Referer}i N'enregistre rien si l'en-tête Referer n'est pas défini.
    %4{Referer}i N'enregistre le contenu de l'en-tête Referer que si la sévérité du message de journalisation est supérieure à 4.

    Certains items de format acceptent des paramètres supplémentaires entre accolades.

    Chaîne de format Description
    %% Le signe pourcentage
    %a Adresse IP et port clients
    %{c}a Port et adresse IP sous-jacents du correspondant pour la connexion (voir le module mod_remoteip)
    %A Adresse IP et port locaux
    %{name}e Variable d'environnement de requête name
    %E Etat d'erreur APR/OS et chaîne
    %F Nom du fichier source et numéro de ligne de l'appel du journal
    %{name}i En-tête de requête name
    %k Nombre de requêtes persistantes pour cette connexion
    %l Sévérité du message
    %L Identifiant journal de la requête
    %{c}L Identifiant journal de la connexion
    %{C}L Identifiant journal de la connexion si utilisé dans la portée de la connexion, vide sinon
    %m Nom du module qui effectue la journalisation du message
    %M Le message effectif
    %{name}n Note de requête name
    %P Identifiant du processus courant
    %T Identifiant du thread courant
    %{g}T Identifiant unique de thread système du thread courant (l'identifiant affiché par la commande top par exemple ; seulement sous Linux pour l'instant)
    %t L'heure courante
    %{u}t L'heure courante avec les microsecondes
    %{cu}t L'heure courante au format compact ISO 8601, avec les microsecondes
    %v Le nom de serveur canonique ServerName du serveur courant.
    %V Le nom de serveur du serveur qui sert la requête en accord avec la définition de la directive UseCanonicalName.
    (anti-slash espace) Espace non délimiteur
    (pourcentage espace) Délimiteur de champ (aucune sortie)

    L'item de format identifiant journal %L génère un identifiant unique pour une connexion ou une requête. Il peut servir à déterminer quelles lignes correspondent à la même connexion ou requête ou quelle requête est associée à tel connexion. Un item de format %L est aussi disponible dans le module mod_log_config, mais il permet dans ce contexte de corréler les entrées du journal des accès avec celles du journal des erreurs. Si le module mod_unique_id est chargé, c'est son identifiant unique qui sera utilisé comme identifiant de journal pour les requêtes.

    # Exemple (format par défaut pour les MPMs threadés)
    ErrorLogFormat "[%{u}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% ,\ referer\ %{Referer}i"

    Cet exemple renverrait un message d'erreur du style :

    [Thu May 12 08:28:57.652118 2011] [core:error] [pid 8777:tid 4326490112] [client ::1:58619] File does not exist: /usr/local/apache2/htdocs/favicon.ico

    Notez que, comme indiqué plus haut, certains champs sont totalement supprimés s'ils n'ont pas été définis.

    # Exemple (similaire au format 2.2.x)
    ErrorLogFormat "[%t] [%l] %7F: %E: [client\ %a] %M% ,\ referer\ %{Referer}i"
    # Exemple avancé avec identifiants journal de requête/connexion
    ErrorLogFormat "[%{uc}t] [%-m:%-l] [R:%L] [C:%{C}L] %7F: %E: %M"
    ErrorLogFormat request "[%{uc}t] [R:%L] Request %k on C:%{c}L pid:%P tid:%T"
    ErrorLogFormat request "[%{uc}t] [R:%L] UA:'%+{User-Agent}i'"
    ErrorLogFormat request "[%{uc}t] [R:%L] Referer:'%+{Referer}i'"
    ErrorLogFormat connection "[%{uc}t] [C:%{c}L] local\ %a remote\ %A"

    Voir aussi

    top

    Directive ExtendedStatus

    Description:Extrait des informations d'état étendues pour chaque requête
    Syntaxe:ExtendedStatus On|Off
    Défaut:ExtendedStatus Off
    Contexte:configuration globale
    Statut:Noyau httpd
    Module:core

    Cette option permet d'extraire des données supplémentaires concernant la requête en cours de traitement pour un processus donné, et crée un résumé d'utilisation ; vous pouvez accéder à ces variables pendant l'exécution en configurant mod_status. Notez que d'autres modules sont susceptibles de s'appuyer sur ce tableau de bord.

    Cette directive s'applique au serveur dans son ensemble, et ne peut pas être activée/désactivée pour un serveur virtuel particulier. Notez que l'extraction des informations d'état étendues peut ralentir le serveur. Notez aussi que cette définition ne peut pas être modifiée au cours d'un redémarrage graceful.

    Notez que le chargement de mod_status définit automatiquement ExtendedStatus à On, et que d'autres modules tiers sont susceptibles d'en faire de même. De tels modules ont besoin d'informations détaillées à propos de l'état de tous les processus. Depuis la version 2.3.6, mod_status a définit la valeur par défaut à On, alors qu'elle était à Off dans les versions antérieures.

    top

    Directive FileETag

    Description:Caractéristiques de fichier utilisées lors de la génération de l'en-tête de réponse HTTP ETag pour les fichiers statiques
    Syntaxe:FileETag composant ...
    Défaut:FileETag MTime Size
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core
    Compatibilité:La valeur par défaut était "INode MTime Size" dans les versions 2.3.14 et antérieures.

    La directive FileETag définit les caractéristiques de fichier utilisées lors de la génération de l'en-tête de réponse HTTP ETag (entity tag) quand le document est contenu dans un fichier statique(la valeur de ETag est utilisée dans le cadre de la gestion du cache pour préserver la bande passante réseau). La directive FileETag vous permet maintenant de choisir quelles caractéristiques du fichier vont être utilisées, le cas échéant. Les mots-clés reconnus sont :

    INode
    Le numéro d'i-node du fichier sera inclus dans le processus de génération
    MTime
    La date et l'heure auxquelles le fichier a été modifié la dernière fois seront incluses
    Size
    La taille du fichier en octets sera incluse
    All
    Tous les champs disponibles seront utilisés. Cette définition est équivalente à :
    FileETag INode MTime Size
    None
    Si le document se compose d'un fichier, aucun champ ETag ne sera inclus dans la réponse

    Les mots-clés INode, MTime, et Size peuvent être préfixés par + ou -, ce qui permet de modifier les valeurs par défaut héritées d'un niveau de configuration plus général. Tout mot-clé apparaissant sans aucun préfixe annule entièrement et immédiatement les configurations héritées.

    Si la configuration d'un répertoire contient FileETag INode MTime Size, et si un de ses sous-répertoires contient FileETag -INode, la configuration de ce sous-répertoire (qui sera propagée vers tout sous-répertoire qui ne la supplante pas), sera équivalente à FileETag MTime Size.

    Avertissement

    Ne modifiez pas les valeurs par défaut pour les répertoires ou localisations où WebDAV est activé et qui utilisent mod_dav_fs comme fournisseur de stockage. mod_dav_fs utilise MTime Size comme format fixe pour les comparaisons de champs ETag dans les requêtes conditionnelles. Ces requêtes conditionnelles échoueront si le format ETag est modifié via la directive FileETag.

    Inclusions côté serveur

    Aucun champ ETag n'est généré pour les réponses interprétées par mod_include, car l'entité de la réponse peut changer sans modification de l'INode, du MTime, ou de la taille du fichier statique contenant les directives SSI.
    top

    Directive <Files>

    Description:Contient des directives qui s'appliquent aux fichiers précisés
    Syntaxe:<Files nom fichier> ... </Files>
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core

    La directive <Files> limite la portée des directives qu'elle contient aux fichiers précisés. Elle est comparable aux directives <Directory> et <Location>. Elle doit se terminer par une balise </Files>. Les directives contenues dans cette section s'appliqueront à tout objet dont le nom de base (la dernière partie du nom de fichier) correspond au fichier spécifié. Les sections <Files> sont traitées selon l'ordre dans lequel elles apparaissent dans le fichier de configuration, après les sections <Directory> et la lecture des fichiers .htaccess, mais avant les sections <Location>. Notez que les sections <Files> peuvent être imbriquées dans les sections <Directory> afin de restreindre la portion du système de fichiers à laquelle ces dernières vont s'appliquer.

    L'argument filename peut contenir un nom de fichier ou une chaîne de caractères avec caractères génériques, où ? remplace un caractère, et * toute chaîne de caractères.

    <Files "cat.html">
        # Insérer ici des directives qui s'appliquent au fichier cat.html
    </Files>
    
    <Files "?at.*">
        # Les directives insérées ici s'appliqueront aux fichiers
        # cat.html, bat.html, hat.php, et ainsi de suite.
    </Files>

    On peut aussi utiliser les Expressions rationnelles en ajoutant la caractère ~. Par exemple :

    <Files ~ "\.(gif|jpe?g|png)$">
        #...
    </Files>

    correspondrait à la plupart des formats graphiques de l'Internet. Il est cependant préférable d'utiliser la directive <FilesMatch>.

    Notez qu'à la différence des sections <Directory> et <Location>, les sections <Files> peuvent être utilisées dans les fichiers .htaccess. Ceci permet aux utilisateurs de contrôler l'accès à leurs propres ressources, fichier par fichier.

    Voir aussi

    top

    Directive <FilesMatch>

    Description:Contient des directives qui s'appliquent à des fichiers spécifiés sous la forme d'expressions rationnelles
    Syntaxe:<FilesMatch expression rationnelle> ... </FilesMatch>
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core

    La section <FilesMatch> limite la portée des directives qu'elle contient aux fichiers spécifiés, tout comme le ferait une section <Files>. Mais elle accepte aussi les expressions rationnelles. Par exemple :

    <FilesMatch ".+\.(gif|jpe?g|png)$">
        # ...
    </FilesMatch>

    correspondrait à la plupart des formats graphiques de l'Internet.

    Les caractères .+ au début de l'expression rationnelle permettent de s'assurer que les fichiers de nom .png, ou .gif, par exemple, ne seront pas pris en compte.

    A partir de la version 2.4.8, les groupes nommés et les références arrières sont extraits et enregistrés dans l'environnement avec leur nom en majuscules et préfixé par "MATCH_". Ceci permet de référencer des URLs dans des expressions ou au sein de modules comme mod_rewrite. Pour éviter toute confusion, les références arrières numérotées (non nommées) sont ignorées. Vous devez utiliser à la place des groupes nommés.

    <FilesMatch "^(?<sitename>[^/]+)">
        Require ldap-group cn=%{env:MATCH_SITENAME},ou=combined,o=Example
    </FilesMatch>

    Voir aussi

    top

    Directive ForceType

    Description:Force le type de médium spécifié dans le champ d'en-tête HTTP Content-Type pour les fichiers correspondants
    Syntaxe:ForceType type médium|None
    Contexte:répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core

    Lorsqu'elle est placée dans un fichier .htaccess ou une section <Directory>, <Location>, ou <Files>, cette directive force l'identification du type MIME des fichiers spécifiés à la valeur de l'argument type médium. Par exemple, si vous possédez un répertoire ne contenant que des fichiers GIF, et si vous ne voulez pas leur ajouter l'extension .gif, vous pouvez utiliser :

    ForceType image/gif

    Notez que cette directive l'emporte sur d'autres associations de type de médium indirectes définies dans mime.types ou via la directive AddType.

    Vous pouvez aussi annuler toute définition plus générale de ForceType en affectant la valeur None à l'argument type médium :

    # force le type MIME de tous les fichiers à image/gif:
    <Location "/images">
      ForceType image/gif
    </Location>
    
    # mais utilise les méthodes classiques d'attribution du type MIME
    # dans le sous-répertoire suivant :
    <Location "/images/mixed">
      ForceType None
    </Location>

    A la base, cette directive écrase le type de contenu généré pour les fichiers statiques servis à partir du sytème de fichiers. Pour les ressources autres que les fichiers statiques pour lesquels le générateur de réponse spécifie en général un type de contenu, cette directive est ignorée.

    Note

    Lorsque des directives explicites comme SetHandler ou module="mod_mime">AddHandler ne s'appliquent pas à la requête courante, le nom du gestionnaire interne normalement défini par ces directives correspondra alors au type de contenu spécifié par cette directive. Il s'agit d'un comportement historique que certains modules tiers, comme mod_php, peuvent interpréter comme un type de contenu artificiel ne servant qu'à indiquer le module qui doit prendre en compte la requête considérée. Dans la mesure du possible, il est conseillé d'éviter les configurations qui comportent de tels types artificiels en utilisant les directives SetHandler ou AddHandler.

    top

    Directive GprofDir

    Description:Répertoire dans lequel écrire les données de profiling gmon.out.
    Syntaxe:GprofDir /tmp/gprof/|/tmp/gprof/%
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    Lorsque le serveur a été compilé avec le support du profiling gprof, la directive GprofDir permet de spécifier dans quel répertoire les fichiers gmon.out doivent être écrits lorsque le processus s'arrête. Si l'argument se termine par un caractère pourcentage ('%'), des sous-répertoires sont créés pour chaque identifiant de processus.

    Cette directive ne fonctionne actuellement qu'avec le MPM prefork.

    top

    Directive HostnameLookups

    Description:Active la recherche DNS sur les adresses IP des clients
    Syntaxe:HostnameLookups On|Off|Double
    Défaut:HostnameLookups Off
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Noyau httpd
    Module:core

    Cette directive active la recherche DNS afin de pouvoir journaliser les nom d'hôtes (et les passer aux programmes CGI et aux inclusions SSI via la variable REMOTE_HOST). La valeur Double déclenche une double recherche DNS inverse. En d'autres termes, une fois la recherche inverse effectuée, on lance une recherche directe sur le résultat de cette dernière. Au moins une des adresses IP fournies par la recherche directe doit correspondre à l'adresse originale (ce que l'on nomme PARANOID dans la terminologie "tcpwrappers").

    Quelle que soit la configuration, lorsqu'on utilise mod_authz_host pour contrôler l'accès en fonction du nom d'hôte, une double recherche DNS inverse est effectuée, sécurité oblige. Notez cependant que le résultat de cette double recherche n'est en général pas accessible, à moins que vous n'ayez spécifié HostnameLookups Double. Par exemple, si vous n'avez spécifié que HostnameLookups On, et si une requête concerne un objet protégé par des restrictions en fonction du nom d'hôte, quel que soit le résultat de la double recherche inverse, les programmes CGI ne recevront que le résultat de la recherche inverse simple dans la variable REMOTE_HOST.

    La valeur par défaut est Off afin de préserver le traffic réseau des sites pour lesquels la recherche inverse n'est pas vraiment nécessaire. Cette valeur par défaut est aussi bénéfique pour les utilisateurs finaux car il n'ont ainsi pas à subir de temps d'attente supplémentaires dus aux recherches DNS. Les sites fortement chargés devraient laisser cette directive à Off, car les recherches DNS peuvent prendre des temps très longs. Vous pouvez éventuellement utiliser hors ligne l'utilitaire logresolve, compilé par défaut dans le sous-répertoire bin de votre répertoire d'installation, afin de déterminer les noms d'hôtes associés aux adresses IP journalisées.

    Enfin, si vous avez des directives Require à base de nom, une recherche de nom d'hôte sera effectuée quelle que soit la définition de la directive HostnameLookups.

    top

    Directive HttpProtocolOptions

    Description:Modifie les contraintes sur les messages des requêtes HTTP
    Syntaxe:HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0]
    Défaut:HttpProtocolOptions Strict LenientMethods Allow0.9
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible à partir des versions 2.2.32 et 2.4.24 du serveur HTTP Apache

    Cette directive permet de modifier les règles qui s'appliquent à la ligne de requête HTTP (RFC 7230 §3.1.1) et aux champs des en-têtes des requêtes HTTP (RFC 7230 §3.2), qui s'appliquent maintenant par défaut ou en utilisant l'option Strict. L'option Unsafe a été ajoutée pour pouvoir restaurer les anciens comportements nécessaires aux anciens modules et applications et aux agents utilisateurs personnalisés considérés comme obsolètes.

    Ces règles s'appliquant avant le traitement de la requête, elles doivent, pour être prises en compte, être définies au niveau global ou dans la première section par défaut du serveur virtuel qui correspond à la requête considérée, par interface IP/port et non par nom.

    Cette directive accepte trois paramètres issus de la liste suivante, ceux qui ne sont pas spécifiés prenant leur valeur par défaut :

    Strict|Unsafe

    Avant l'introduction de cette directive, les interpréteurs de requêtes du serveur HTTP Apache toléraient un grand nombre de formats en entrée qui n'étaient pas forcément conformes au protocole. RFC 7230 §9.4 Request Splitting et §9.5 Response Smuggling ne rappellent que deux des risques potentiels induits par des requêtes non conformes, alors que RFC 7230 §3.5 signale les risques encourus par l'acceptation de blancs non conformes dans les lignes de requête. Avec l'introduction de cette directive, toutes les règles de grammaire de la spécification doivent être respectées dans le mode d'opérations par défaut Strict.

    Risques de sécurité liés au mode Unsafe

    Il est fortement déconseillé aux utilisateurs d'utiliser le mode d'opération Unsafe, ou UnsafeWhitespace, en particulier pour les déploiements de serveurs ouverts sur l'extérieur et/ou accessibles au public. Si un moniteur défectueux ou autre logiciel spécialisé ne s'exécutant que sur un intranet nécessite une interface, les utilisateurs ne doivent utiliser les options de type UnSafe qu'en cas de nécessité et uniquement au sein d'un serveur virtuel bien spécifique et sur un réseau privé.

    Exemple de requête provoquant l'envoi d'un message HTTP 400 en mode Strict

    # Missing CRLF
    GET / HTTP/1.0\n\n

    Utilitaires en ligne de commande et CRLF

    Il peut s'avérer nécessaire de forcer certains utilitaires à utiliser CRLF ; si ce n'est pas le cas, httpd reverra une réponse HTTP 400 comme dans le cas précédent. Par exemple, le client OpenSSL s_client doit utiliser le paramètre -crlf pour fonctionner correctement.

    Pour détecter des problèmes tels que l'absence de CRLF, vous pouvez utiliser la directive DumpIOInput qui permet de décortiquer les requêtes HTTP.

    RegisteredMethods|LenientMethods

    La section de la RFC 7231 §4.1 "Request Methods" "Overview" indique que les serveurs doivent renvoyer un message d'erreur lorsque la ligne de requête comporte une méthode non supportée. C'est déjà le cas lorsque l'option LenientMethods est utilisée, mais les administrateurs ont la possibilité de limiter les méthodes utilisées via l'option RegisteredMethods en enregistrant toute méthode non standard via la directive RegisterHttpMethod, en particulier si l'option Unsafe est utilisée.

    Compatibilité avec le mandat direct

    L'option RegisteredMethods ne doit pas être utilisée pour les serveurs mandataires car ces derniers ne connaissent pas les méthodes supportées par les serveurs originaux.

    Exemple de requête provoquant l'envoi d'un message HTTP 501 en mode LenientMethods

    # Méthode HTTP inconnue
    WOW / HTTP/1.0\r\n\r\n

    # Méthode HTTP spécifiée en minuscules
    get / HTTP/1.0\r\n\r\n

    Allow0.9|Require1.0

    La section de la RFC 2616 §19.6 "Compatibility With Previous Versions" encouragait les serveurs HTTP à supporter les anciennes requêtes HTTP/0.9. La RFC 7230 va cependant à son encontre via sa préconisation "Le souhait de supporter les requêtes HTTP/0.9 a été supprimé" et y adjoint des commentaires dans RFC 7230 Appendix A. A ce titre, l'option Require1.0 permet à l'utilisateur d'inhiber le comportement induit par l'option par défaut Allow0.9.

    Exemple de requête provoquant l'envoi d'un message HTTP 400 en mode Require1.0

    # Version HTTP non supportée
    GET /\r\n\r\n

    La consultation des messages enregistrés dans le journal ErrorLog, configuré via la directive LogLevel avec un niveau info, pourra vous aider à identifier de telles requêtes non conformes ainsi que leur provenance. Les utilisateurs devront accorder une attention particulière aux messages d'erreur de type 400 dans le journal access pour détecter les requêtes apparemment valides mais rejetées.

    top

    Directive <If>

    Description:Contient des directives qui ne s'appliquent que si une condition est satisfaite au cours du traitement d'une requête
    Syntaxe:<If expression> ... </If>
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core
    Compatibilité:Les conditions imbriquées sont supportées à partir de la version 2.4.26 du serveur HTTP Apache

    La directive <If> évalue une expression à la volée, et applique les directives qu'elle contient si et seulement si l'expression renvoie la valeur "vrai". Par exemple :

    <If "-z req('Host')">

    serait satisfaite pour les requêtes HTTP/1.0 sans en-tête Host:. Les expressions peuvent contenir différents opérateurs de type shell pour la comparaison de chaînes (==, !=, <, ...), la comparaison d'entiers (-eq, -ne, ...), ou à usages divers (-n, -z, -f, ...). Les expressions rationnelles sont aussi supportées,

    <If "%{QUERY_STRING} =~ /(delete|commit)=.*?elem/">

    ainsi que les comparaison de modèles de type shell et de nombreuses autres opérations. Ces opérations peuvent être effectuées sur les en-têtes de requêtes (req), les variables d'environnement (env), et un grand nombre d'autres propriétés. La documentation complète est disponible dans Les expressions dans le serveur HTTP Apache.

    Cette section de configuration ne peut contenir que des directives qui supportent le contexte de répertoire.

    Certain variables, such as CONTENT_TYPE and other response headers, are set after <If> conditions have already been evaluated, and so will not be available to use in this directive.

    Voir aussi

    top

    Directive <IfDefine>

    Description:Contient des directives qui ne s'appliqueront que si un test retourne "vrai" au démarrage du serveur
    Syntaxe:<IfDefine [!]paramètre> ... </IfDefine>
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core

    La section <IfDefine test>...</IfDefine> permet de conférer un caractère conditionnel à un ensemble de directives. Les directives situées à l'intérieur d'une section <IfDefine> ne s'appliquent que si test est vrai. Si test est faux, tout ce qui se trouve entre les balises de début et de fin est ignoré.

    test peut se présenter sous deux formes :

    • nom paramètre
    • !nom paramètre

    Dans le premier cas, les directives situées entre les balises de début et de fin ne s'appliqueront que si le paramètre nommé nom paramètre est défini. Le second format inverse le test, et dans ce cas, les directives ne s'appliqueront que si nom paramètre n'est pas défini.

    L'argument nom paramètre est une définition qui peut être effectuée par la ligne de commande httpd via le paramètre -Dparamètre au démarrage du serveur, ou via la directive Define.

    Les sections <IfDefine> peuvent être imbriquées, ce qui permet d'implémenter un test multi-paramètres simple. Exemple :

    httpd -DReverseProxy -DUseCache -DMemCache ...

    <IfDefine ReverseProxy>
      LoadModule proxy_module   modules/mod_proxy.so
      LoadModule proxy_http_module   modules/mod_proxy_http.so
      <IfDefine UseCache>
        LoadModule cache_module   modules/mod_cache.so
        <IfDefine MemCache>
          LoadModule mem_cache_module   modules/mod_mem_cache.so
        </IfDefine>
        <IfDefine !MemCache>
          LoadModule cache_disk_module   modules/mod_cache_disk.so
        </IfDefine>
      </IfDefine>
    </IfDefine>
    top

    Directive <IfDirective>

    Description:Regroupe des directives dont le traitement est conditionné par la présence ou l'absence d'une directive particulière
    Syntaxe:<IfDirective [!]directive-name> ... </IfDirective>
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible à partir de la version 2.4.34 du serveur HTTP Apache

    La section <IfDirective test>...</IfDirective> permet de regrouper des directives dont le traitement n'est effectué que si une directive particulière est présente, autrement dit si l'expression test est évaluée à true. Si l'expression test est évaluée à false, toutes les lignes qui se trouvent entre les balises de début et de fin de la section sont ignorées.

    L'expression test de la section <IfDirective> peut prendre les deux formes suivantes :

    • directive-name
    • !directive-name

    Dans le premier cas, les directives qui se situent entre les balises de début et de fin de la section ne sont traitées que si une directive de nom directive-name est disponible à cet instant. Dans le second cas, la condition est inversée, et les directives ne sont traitées que si directive-name n'est pas disponible.

    Cette section ne doit être utilisée que si vous devez partager le même fichier de configuration entre plusieurs versions de httpd, sans tenir compte de la disponibilité de telle ou telle directive. Dans une configuration standard, il est inutile de placer les directives dans des sections <IfDirective>.

    Voir aussi

    top

    Directive <IfFile>

    Description:Regroupe des directives qui ne seront traitées que si un fichier existe au démarrage
    Syntaxe:<IfFile [!]filename> ... </IfFile>
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible à partir de la version 2.4.34 du serveur HTTP Apache

    La section <IfFile filename>...</IfFile> permet de conditionner le traitement de directives à l'existence d'un fichier sur disque. Ainsi, les directives définies au sein d'une section <IfFile> ne seront traitées que si le fichier filename existe. Si le fichier filename n'existe pas, tout ce qui se trouve entre les marqueurs start et end sera ignoré. filename peut être un chemin absolu ou relatif au chemin défini par la directive ServerRoot.

    Le paramètre filename de l'en-tête d'une section <IfFile> peut prendre la même forme que la variable test de la section <IfDefine> ; à ce titre, le résultat du test peut être inversé en plaçant le caractère ! juste avant filename.

    Si filename est un chemin relatif, il sera généré par rapport au chemin défini par la directive ServerRoot. Lorsque la directive <IfFile> intervient avant la définition de la directive ServerRoot, filename sera relatif au répertoire racine par défaut du serveur ou au répertoire racine passé dans la ligne de commande via l'option -d.

    top

    Directive <IfModule>

    Description:Contient des directives qui ne s'appliquent qu'en fonction de la présence ou de l'absence d'un module spécifique
    Syntaxe:<IfModule [!]fichier module|identificateur module> ... </IfModule>
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core
    Compatibilité:Les identificateurs de modules sont disponibles dans les versions 2.1 et supérieures.

    La section <IfModule test>...</IfModule> permet de conférer à des directives un caractère conditionnel basé sur la présence d'un module spécifique. Les directives situées dans une section <IfModule> ne s'appliquent que si test est vrai. Si test est faux, tout ce qui se trouve entre les balises de début et de fin est ignoré.

    test peut se présenter sous deux formes :

    • module
    • !module

    Dans le premier cas, les directives situées entre les balises de début et de fin ne s'appliquent que si le module module est présent -- soit compilé avec le binaire Apache httpd, soit chargé dynamiquement via la directive LoadModule. Le second format inverse le test, et dans ce cas, les directives ne s'appliquent que si module n'est pas présent.

    L'argument module peut contenir soit l'identificateur du module, soit le nom du fichier source du module. Par exemple, rewrite_module est un identificateur et mod_rewrite.c le nom du fichier source correspondant. Si un module comporte plusieurs fichiers sources, utilisez le nom du fichier qui contient la chaîne de caractères STANDARD20_MODULE_STUFF.

    Les sections <IfModule> peuvent être imbriquées, ce qui permet d'implémenter des tests multi-modules simples.

    Cette section ne doit être utilisée que si votre fichier de configuration ne fonctionne qu'en fonction de la présence ou de l'absence d'un module spécifique. D'une manière générale, il n'est pas nécessaire de placer les directives à l'intérieur de sections <IfModule>.
    top

    Directive <IfSection>

    Description:Regroupe des directives dont le traitement est conditionné par la présence ou l'absence d'une section particulière
    Syntaxe:<IfSection [!]section-name> ... </IfSection>
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible à partir de la version 2.4.34 du serveur HTTP Apache

    La section <IfSection test>...</IfSection> permet de regrouper des directives dont le traitement n'est effectué que si une section de configuration particulière est présente. Une section, par exemple <VirtualHost>, permet de regrouper des directives et possède un nom précédé du caractère "<".

    Les directives situées à l'intérieur d'une section <IfSection> ne sont traitées que si l'expression test est évaluée à true. Si l'expression test est évaluée à false, toutes les lignes situées entre les balises de début et de fin de la section sont ignorées.

    section-name doit être spécifié sans les caractères de début "<" ou fin ">". L'expression test de la section <IfSection> peut prendre deux formes :

    • section-name
    • !section-name

    Dans le premier cas, les directives qui se situent entre les balises de début et de fin de la section ne sont traitées que si une section de nom section-name est disponible à cet instant. Dans le second cas, la condition est inversée, et les directives ne sont traitées que si section-name n'est pas disponible.

    Par exemple :

    <IfSection VirtualHost>
       ...
    </IfSection>
    Cette section ne doit être utilisée que si vous devez partager le même fichier de configuration entre plusieurs versions de httpd, sans tenir compte de la disponibilité de telle ou telle section. Dans une configuration standard, il est inutile de placer les directives dans des sections <IfSection>.

    Voir aussi

    top

    Directive Include

    Description:Inclut d'autres fichiers de configuration dans un des fichiers de configuration du serveur
    Syntaxe:Include chemin-fichier|chemin-répertoire|wildcard
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Noyau httpd
    Module:core
    Compatibilité:Utilisation des caractères génériques dans la partie chemin depuis la version 2.3.6

    Cette directive permet l'inclusion d'autres fichiers de configuration dans un des fichiers de configuration du serveur.

    On peut utiliser des caractères génériques de style Shell (fnmatch()) aussi bien dans la partie nom de fichier du chemin que dans la partie répertoires pour inclure plusieurs fichiers en une seule fois, selon leur ordre alphabétique. De plus, si la directive Include pointe vers un répertoire, Apache httpd inclura tous les fichiers de ce répertoire et de tous ces sous-répertoires. L'inclusion de répertoires entiers est cependant déconseillée, car il est fréquent d'oublier des fichiers temporaires dans un répertoire, ce qui causerait une erreur httpd en cas d'inclusion. Pour inclure des fichiers qui correspondent à un certain modèle, comme *.conf par exemple, nous vous recommandons d'utiliser plutôt la syntaxe avec caractères génériques comme ci-dessous.

    La directive Include échouera avec un code d'erreur si une expression contenant des caractères génériques ne correspond à aucun fichier. Pour ignorer les expressions contenant des caractères génériques ne correspondant à aucun fichier, utilisez la directive IncludeOptional.

    Le chemin fichier spécifié peut être soit un chemin absolu, soit un chemin relatif au répertoire défini par la directive ServerRoot.

    Exemples :

    Include /usr/local/apache2/conf/ssl.conf
    Include /usr/local/apache2/conf/vhosts/*.conf

    ou encore, avec des chemins relatifs au répertoire défini par la directive ServerRoot :

    Include conf/ssl.conf
    Include conf/vhosts/*.conf

    On peut aussi insérer des caractères génériques dans la partie répertoires du chemin. Dans l'exemple suivant, la directive échouera si aucun sous-répertoire de conf/vhosts ne contient au moins un fichier *.conf :

    Include conf/vhosts/*/*.conf

    Par contre, dans l'exemple suivant, la directive sera simplement ignorée si aucun sous-répertoire de conf/vhosts ne contient au moins un fichier *.conf :

    IncludeOptional conf/vhosts/*/*.conf

    Voir aussi

    top

    Directive IncludeOptional

    Description:Inclusion de fichiers dans le fichier de configuration
    Syntaxe:IncludeOptional file-path|directory-path|wildcard
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible à partir de la version 2.3.6 du serveur HTTP Apache. Après la version 2.4.30, les chemins de fichiers non existants et ne comportant pas de caractères génériques ne génèrent plus d'erreurs de syntaxe

    Cette directive permet d'inclure des fichiers dans les fichiers de configuration du serveur. Elle fonctionne de manière identique à la directive Include, mais au lieu de générer une erreur, elle sera ignorée silensieusement si malgré l'utilisation de caractères génériques, le chemin de fichier ou de répertoire spécifié n'existe pas dans le système de fichiers.

    Voir aussi

    top

    Directive KeepAlive

    Description:Active les connexions HTTP persistantes
    Syntaxe:KeepAlive On|Off
    Défaut:KeepAlive On
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    L'extension Keep-Alive de HTTP/1.0 et l'implémentation des connexions persistantes dans HTTP/1.1 ont rendu possibles des sessions HTTP de longue durée, ce qui permet de transmettre plusieurs requêtes via la même connexion TCP. Dans certains cas, le gain en rapidité pour des documents comportant de nombreuses images peut atteindre 50%. Pour activer les connexions persistantes, définissez KeepAlive On.

    Pour les clients HTTP/1.0, les connexions persistantes ne seront mises en oeuvre que si elles ont été spécialement demandées par un client. De plus, une connexion persistante avec un client HTTP/1.0 ne peut être utilisée que si la taille du contenu est connue d'avance. Ceci implique que les contenus dynamiques comme les sorties CGI, les pages SSI, et les listings de répertoires générés par le serveur n'utiliseront en général pas les connexions persistantes avec les clients HTTP/1.0. Avec les clients HTTP/1.1, les connexions persistantes sont utilisées par défaut, sauf instructions contraires. Si le client le demande, le transfert par tronçons de taille fixe (chunked encoding) sera utilisé afin de transmettre un contenu de longueur inconnue via une connexion persistante.

    Lorsqu'un client utilise une connexion persistante, elle comptera pour une seule requête pour la directive MaxConnectionsPerChild, quel que soit le nombre de requêtes transmises via cette connexion.

    Voir aussi

    top

    Directive KeepAliveTimeout

    Description:Durée pendant laquelle le serveur va attendre une requête avant de fermer une connexion persistante
    Syntaxe:KeepAliveTimeout nombre[ms]
    Défaut:KeepAliveTimeout 5
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    Le nombre de secondes pendant lesquelles Apache httpd va attendre une requête avant de fermer la connexion. Le délai peut être défini en millisecondes en suffixant sa valeur par ms. La valeur du délai spécifiée par la directive Timeout s'applique dès qu'une requête a été reçue.

    Donner une valeur trop élévée à KeepAliveTimeout peut induire des problèmes de performances sur les serveurs fortement chargés. Plus le délai est élévé, plus nombreux seront les processus serveur en attente de requêtes de la part de clients inactifs.

    Si la directive KeepAliveTimeout n'est pas définie pour un serveur virtuel à base de nom, c'est la valeur de la paire adresse IP/port du serveur virtuel qui correspond le mieux qui sera utilisée.

    top

    Directive <Limit>

    Description:Limite les contrôles d'accès que la section contient à certaines méthodes HTTP
    Syntaxe:<Limit méthode [méthode] ... > ... </Limit>
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig, Limit
    Statut:Noyau httpd
    Module:core

    Les contrôles d'accès s'appliquent normalement à toutes les méthodes d'accès, et c'est en général le comportement souhaité. Dans le cas général, les directives de contrôle d'accès n'ont pas à être placées dans une section <Limit>.

    La directive <Limit> a pour but de limiter les effets des contrôles d'accès aux méthodes HTTP spécifiées. Pour toutes les autres méthodes, les restrictions d'accès contenues dans la section <Limit> n'auront aucun effet. L'exemple suivant n'applique les contrôles d'accès qu'aux méthodes POST, PUT, et DELETE, en laissant les autres méthodes sans protection :

    <Limit POST PUT DELETE>
      Require valid-user
    </Limit>

    La liste des noms de méthodes peut contenir une ou plusieurs valeurs parmi les suivantes : GET, POST, PUT, DELETE, CONNECT, OPTIONS, PATCH, PROPFIND, PROPPATCH, MKCOL, COPY, MOVE, LOCK, et UNLOCK. Le nom de méthode est sensible à la casse. Si la valeur GET est présente, les requêtes HEAD seront aussi concernées. La méthode TRACE ne peut pas être limitée (voir la directive TraceEnable).

    Une section <LimitExcept> doit toujours être préférée à une section <Limit> pour la restriction d'accès, car une section <LimitExcept> fournit une protection contre les méthodes arbitraires.

    Les directives <Limit> et <LimitExcept> peuvent être imbriquées. Dans ce cas, pour chaque niveau des directives <Limit> ou <LimitExcept>, ces dernières doivent restreindre l'accès pour les méthodes auxquelles les contrôles d'accès s'appliquent.

    Lorsqu'on utilise les directives <Limit> ou <LimitExcept> avec la directive Require, la première directive Require dont la condition est satisfaite autorise la requête, sans tenir compte de la présence d'autres directives Require.

    Par exemple, avec la configuration suivante, tous les utilisateurs seront autorisés à effectuer des requêtes POST, et la directive Require group editors sera ignorée dans tous les cas :

    <LimitExcept GET>
      Require valid-user
    </LimitExcept>
    <Limit POST>
      Require group editors
    </Limit>
    top

    Directive <LimitExcept>

    Description:Applique les contrôles d'accès à toutes les méthodes HTTP, sauf celles qui sont spécifiées
    Syntaxe:<LimitExcept méthode [méthode] ... > ... </LimitExcept>
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig, Limit
    Statut:Noyau httpd
    Module:core

    <LimitExcept> et </LimitExcept> permettent de regrouper des directives de contrôle d'accès qui s'appliqueront à toutes les méthodes d'accès HTTP qui ne font pas partie de la liste des arguments ; en d'autres termes, elles ont un comportement opposé à celui de la section <Limit>, et on peut les utiliser pour contrôler aussi bien les méthodes standards que les méthodes non standards ou non reconnues. Voir la documentation de la section <Limit> pour plus de détails.

    Par exemple :

    <LimitExcept POST GET>
      Require valid-user
    </LimitExcept>
    top

    Directive LimitInternalRecursion

    Description:Détermine le nombre maximal de redirections internes et de sous-requêtes imbriquées
    Syntaxe:LimitInternalRecursion nombre [nombre]
    Défaut:LimitInternalRecursion 10
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    Une redirection interne survient, par exemple, quand on utilise la directive Action qui redirige en interne la requête d'origine vers un script CGI. Une sous-requête est le mécanisme qu'utilise Apache httpd pour déterminer ce qui se passerait pour un URI s'il faisait l'objet d'une requête. Par exemple, mod_dir utilise les sous-requêtes pour rechercher les fichiers listés dans la directive DirectoryIndex.

    La directive LimitInternalRecursion permet d'éviter un crash du serveur dû à un bouclage infini de redirections internes ou de sous-requêtes. De tels bouclages sont dus en général à des erreurs de configuration.

    La directive accepte, comme arguments, deux limites qui sont évaluées à chaque requête. Le premier nombre est le nombre maximum de redirections internes qui peuvent se succéder. Le second nombre détermine la profondeur d'imbrication maximum des sous-requêtes. Si vous ne spécifiez qu'un seul nombre, il sera affecté aux deux limites.

    LimitInternalRecursion 5
    top

    Directive LimitRequestBody

    Description:limite la taille maximale du corps de la requête HTTP envoyée par le client
    Syntaxe:LimitRequestBody octets
    Défaut:LimitRequestBody 0
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core

    Cette directive spécifie la taille maximale autorisée pour le corps d'une requête ; la valeur de l'argument octets va de 0 (pour une taille illimitée), à 2147483647 (2Go). Voir la note ci-dessous pour la limite d'applicabilité aux requêtes mandatées.

    La directive LimitRequestBody permet de définir une limite pour la taille maximale autorisée du corps d'une requête HTTP en tenant compte du contexte dans lequel la directive a été placée (c'est à dire au niveau du serveur, d'un répertoire, d'un fichier ou d'une localisation). Si la requête du client dépasse cette limite, le serveur répondra par un message d'erreur et ne traitera pas la requête. La taille du corps d'une requête normale va varier de manière importante en fonction de la nature de la ressource et des méthodes autorisées pour cette dernière. Les scripts CGI utilisent souvent le corps du message pour extraire les informations d'un formulaire. Les implémentations de la méthode PUT nécessitent une valeur au moins aussi élevée que la taille maximale des représentations que le serveur désire accepter pour cette ressource.

    L'administrateur du serveur peut utiliser cette directive pour contrôler plus efficacement les comportements anormaux des requêtes des clients, ce qui lui permettra de prévenir certaines formes d'attaques par déni de service.

    Si par exemple, vous autorisez le chargement de fichiers vers une localisation particulière, et souhaitez limiter la taille des fichiers chargés à 100Ko, vous pouvez utiliser la directive suivante :

    LimitRequestBody 102400

    Pour une description détaillée de la manière dont cette directive est interprétée par les requêtes mandatées, voir la documentation du module mod_proxy.

    top

    Directive LimitRequestFields

    Description:Limite le nombre de champs d'en-tête autorisés dans une requête HTTP
    Syntaxe:LimitRequestFields nombre
    Défaut:LimitRequestFields 100
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    nombre est un entier de 0 (nombre de champs illimité) à 32767. La valeur par défaut est définie à la compilation par la constante DEFAULT_LIMIT_REQUEST_FIELDS (100 selon la distribution).

    La directive LimitRequestFields permet à l'administrateur du serveur de modifier le nombre maximum de champs d'en-tête autorisés dans une requête HTTP. Pour un serveur, cette valeur doit être supérieure au nombre de champs qu'une requête client normale peut contenir. Le nombre de champs d'en-tête d'une requête qu'un client utilise dépasse rarement 20, mais ce nombre peut varier selon les implémentations des clients, et souvent en fonction des extensions que les utilisateurs configurent dans leurs navigateurs pour supporter la négociation de contenu détaillée. Les extensions HTTP optionnelles utilisent souvent les champs d'en-tête des requêtes.

    L'administrateur du serveur peut utiliser cette directive pour contrôler plus efficacement les comportements anormaux des requêtes des clients, ce qui lui permettra de prévenir certaines formes d'attaques par déni de service. La valeur spécifiée doit être augmentée si les clients standards reçoivent une erreur du serveur indiquant que la requête comportait un nombre d'en-têtes trop important.

    Par exemple :

    LimitRequestFields 50

    Avertissement

    Dans le cas des serveurs virtuels à base de noms, la valeur de cette directive est extraite du serveur virtuel par défaut (le premier de la liste) pour la paire adresse IP/port.

    top

    Directive LimitRequestFieldSize

    Description:Dédinit la taille maximale autorisée d'un en-tête de requête HTTP
    Syntaxe:LimitRequestFieldSize octets
    Défaut:LimitRequestFieldSize 8190
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    Cette directive permet de définir le nombre maximum d'octets autorisés dans un en-tête de requête HTTP.

    La directive LimitRequestFieldSize permet à l'administrateur du serveur de définir la taille maximale autorisée d'un en-tête de requête HTTP. Pour un serveur, cette valeur doit être suffisamment grande pour contenir tout en-tête d'une requête client normale. La taille d'un champ d'en-tête de requête normal va varier selon les implémentations des clients, et en fonction des extensions que les utilisateurs configurent dans leurs navigateurs pour supporter la négociation de contenu détaillée. Les en-têtes d'authentification SPNEGO peuvent atteindre une taille de 12392 octets.

    >L'administrateur du serveur peut utiliser cette directive pour contrôler plus efficacement les comportements anormaux des requêtes des clients, ce qui lui permettra de prévenir certaines formes d'attaques par déni de service.

    Par exemple ::

    LimitRequestFieldSize 4094
    Dans des conditions normales, la valeur par défaut de cette directive ne doit pas être modifiée.

    Avertissement

    Dans le cas des serveurs virtuels à base de noms, la valeur de cette directive est extraite du serveur virtuel par défaut (le premier de la liste) pour lequel la paire adresse IP/port correspond le mieux.

    top

    Directive LimitRequestLine

    Description:Définit la taille maximale d'une ligne de requête HTTP
    Syntaxe:LimitRequestLine octets
    Défaut:LimitRequestLine 8190
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    Cette directive permet de définir la taille maximale autorisée pour une ligne de requête HTTP en octets.

    La directive LimitRequestLine permet à l'administrateur du serveur de définir la taille maximale autorisée d'une ligne de requête HTTP client. Comme une requête comporte une méthode HTTP, un URI, et une version de protocole, la directive LimitRequestLine impose une restriction sur la longueur maximale autorisée pour un URI dans une requête au niveau du serveur. Pour un serveur, cette valeur doit être suffisamment grande pour référencer les noms de toutes ses ressources, y compris toutes informations pouvant être ajoutées dans la partie requête d'une méthode GET.

    L'administrateur du serveur peut utiliser cette directive pour contrôler plus efficacement les comportements anormaux des requêtes des clients, ce qui lui permettra de prévenir certaines formes d'attaques par déni de service.

    Par exemple :

    LimitRequestLine 4094
    Dans des conditions normales, cette directive doit conserver sa valeur par défaut.

    Avertissement

    Dans le cas des serveurs virtuels à base de noms, la valeur de cette directive est extraite du serveur virtuel par défaut (le premier de la liste) pour lequel la paire adresse IP/port correspond le mieux.

    top

    Directive LimitXMLRequestBody

    Description:Définit la taille maximale du corps d'une requête au format XML
    Syntaxe:LimitXMLRequestBody octets
    Défaut:LimitXMLRequestBody 1000000
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core

    Taille maximale (en octets) du corps d'une requête au format XML. Une valeur de 0 signifie qu'aucune limite n'est imposée.

    Exemple :

    LimitXMLRequestBody 0
    top

    Directive <Location>

    Description:N'applique les directives contenues qu'aux URLs spécifiées
    Syntaxe:<Location chemin URL|URL> ... </Location>
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    La directive <Location> limite la portée des directives contenues aux URLs définies par l'argument URL. Elle est similaire à la directive <Directory>, et marque le début d'une section qui se termine par une directive </Location>. Les sections <Location> sont traitées selon l'ordre dans lequel elles apparaissent dans le fichier de configuration, mais après les sections <Directory> et la lecture des fichiers .htaccess, et après les sections <Files>.

    Les sections <Location> agissent complètement en dehors du système de fichiers. Ceci a de nombreuses conséquences. Parmi les plus importantes, on ne doit pas utiliser les sections <Location> pour contrôler l'accès aux répertoires du système de fichiers. Comme plusieurs URLs peuvent correspondre au même répertoire du système de fichiers, un tel contrôle d'accès pourrait être contourné.

    Les directives que contient cette section seront appliquées aux requêtes si la partie chemin de l'URL satisfait à l'un au moins de ces critères :

    • Le chemin spécifié correspond exactement à la partie chemin de l'URL.
    • Le chemin spécifié, qui se termine par un slash, est un préfixe de la partie chemin de l'URL (traité comme une racine du contexte).
    • Le chemin spécifié, si on lui ajoute un slash de fin, est un préfixe de la partie chemin de l'URL (aussi traité comme une racine du contexte).

    Dans l'exemple ci-dessous, où aucun slash de fin n'est utilisé, les directives contenues dans la section s'appliqueront à /private1, /private1/ et /private1/file.txt, mais pas à /private1other.

    <Location "/private1">
        #  ...
    </Location>

    De même, dans l'exemple ci-dessous, où l'on utilise un slash de fin, les directives contenues dans la section s'appliqueront à /private2/ et à /private2/file.txt, mais pas à /private2other.

    <Location "/private2/">
        # ...
    </Location>

    Quand utiliser la section <Location>

    Vous pouvez utiliser une section <Location> pour appliquer des directives à des contenus situés en dehors du système de fichiers. Pour les contenus situés à l'intérieur du système de fichiers, utilisez plutôt les sections <Directory> et <Files>. <Location "/"> constitue une exception et permet d'appliquer aisément une configuration à l'ensemble du serveur.

    Pour toutes les requêtes originales (non mandatées), l'argument URL est un chemin d'URL de la forme /chemin/. Aucun protocole, nom d'hôte, port, ou chaîne de requête ne doivent apparaître. Pour les requêtes mandatées, l'URL spécifiée doit être de la forme protocole://nom_serveur/chemin, et vous devez inclure le préfixe.

    L'URL peut contenir des caractères génériques. Dans une chaîne avec caractères génériques, ? correspond à un caractère quelconque, et * à toute chaîne de caractères. Les caractères génériques ne peuvent pas remplacer un / dans le chemin URL.

    On peut aussi utiliser les Expressions rationnelles, moyennant l'addition d'un caractère ~. Par exemple :

    <Location ~ "/(extra|special)/data">
        #...
    </Location>

    concernerait les URLs contenant les sous-chaîne /extra/data ou /special/data. La directive <LocationMatch> présente un comportement identique à la version avec expressions rationnelles de la directive <Location>, et son utilisation est préférable à l'utilisation de cette dernière pour la simple raison qu'il est difficile de distinguer ~ de - dans la plupart des fontes.

    La directive <Location> s'utilise principalement avec la directive SetHandler. Par exemple, pour activer les requêtes d'état, mais ne les autoriser que depuis des navigateurs appartenant au domaine example.com, vous pouvez utiliser :

    <Location "/status">
      SetHandler server-status
      Require host example.com
    </Location>

    Note à propos du slash (/)

    La signification du caractère slash dépend de l'endroit où il se trouve dans l'URL. Les utilisateurs peuvent être habitués à son comportement dans le système de fichiers où plusieurs slashes successifs sont souvent réduits à un slash unique (en d'autres termes, /home///foo est identique à /home/foo). Dans l'espace de nommage des URLs, ce n'est cependant pas toujours le cas. Pour la directive <LocationMatch> et la version avec expressions rationnelles de la directive <Location>, vous devez spécifier explicitement les slashes multiples si telle est votre intention.

    Par exemple, <LocationMatch "^/abc"> va correspondre à l'URL /abc mais pas à l'URL //abc. La directive <Location> sans expression rationnelle se comporte de la même manière lorsqu'elle est utilisée pour des requêtes mandatées. Par contre, lorsque la directive <Location> sans expression rationnelle est utilisée pour des requêtes non mandatées, elle fera correspondre implicitement les slashes multiples à des slashes uniques. Par exemple, si vous spécifiez <Location "/abc/def">, une requête de la forme /abc//def correspondra.

    Voir aussi

    top

    Directive <LocationMatch>

    Description:N'applique les directives contenues qu'aux URLs correspondant à une expression rationnelle
    Syntaxe:<LocationMatch regex> ... </LocationMatch>
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    La directive <LocationMatch> limite la portée des directives contenues à l'URL spécifiée, de manière identique à la directive <Location>. Mais son argument permettant de spécifier les URLs concernées est une expression rationnelle au lieu d'une simple chaîne de caractères. Par exemple :

    <LocationMatch "/(extra|special)/data">
        # ...
    </LocationMatch>

    correspondrait à toute URL contenant les sous-chaînes /extra/data ou /special/data.

    Si vous recherchez une URL commençant par plutôt que seulement contenant /extra/data, préfixez l'expression rationnelle avec un ^.

    <LocationMatch "^/(extra|special)/data">

    A partir de la version 2.4.8, les groupes nommés et les références arrières sont extraits et enregistrés dans l'environnement avec leur nom en majuscules et préfixé par "MATCH_". Ceci permet de référencer des URLs dans des expressions ou au sein de modules comme mod_rewrite. Pour éviter toute confusion, les références arrières numérotées (non nommées) sont ignorées. Vous devez utiliser à la place des groupes nommés.

    <LocationMatch "^/combined/(?<sitename>[^/]+)">
        Require ldap-group cn=%{env:MATCH_SITENAME},ou=combined,o=Example
    </LocationMatch>

    Note à propos du slash '/'

    La signification du caractère slash '/' dépend de l'endroit où il apparaît dans une URL. Les utilisateurs sont habitués à voir de multiples slashes adjacents réduits à un seul au sein du système de fichiers (par exemple, /home///foo est équivalent à /home/foo). Ce n'est n'est cependant pas toujours le cas au sein des URLs. En effet, si vous souhaitez spécifier plusieurs slashes, vous devez le faire explicitement au sein de la directive <LocationMatch> et de la version regex de la directive <Location>.

    Par exemple, <LocationMatch "^/abc"> correspondra à l'URL /abc, mais pas à l'URL //abc. La directive (non-regex) <Location> se comporte de la même manière lorsqu'elle est utilisée dans les requêtes de mandataire. Par contre, pour les autres types de requêtes, la directive <Location> considérera plusieurs slashes adjacents comme équivalents à un seul slash. Par exemple, si vous spécifiez <Location "/abc/def">, une requête pour /abc//def correspondra.

    Voir aussi

    top

    Directive LogLevel

    Description:Contrôle la verbosité du journal des erreurs
    Syntaxe:LogLevel [module:]niveau [module:niveau] ...
    Défaut:LogLevel warn
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Noyau httpd
    Module:core
    Compatibilité:La configuration du niveau de journalisation par module et par répertoire est disponible depuis la version 2.3.6 du serveur HTTP Apache

    La directive LogLevel permet d'ajuster la verbosité des messages enregistrés dans les journaux d'erreur (voir la directive ErrorLog directive). Les niveaux disponibles sont présentés ci-après, par ordre de criticité décroissante :

    Niveau Description Exemple
    emerg Urgences - le système est inutilisable. "Child cannot open lock file. Exiting"
    alert Des mesures doivent être prises immédiatement. "getpwuid: couldn't determine user name from uid"
    crit Conditions critiques. "socket: Failed to get a socket, exiting child"
    error Erreurs. "Premature end of script headers"
    warn Avertissements. "child process 1234 did not exit, sending another SIGHUP"
    notice Evènement important mais normal. "httpd: caught SIGBUS, attempting to dump core in ..."
    info Informations. "Server seems busy, (you may need to increase StartServers, or Min/MaxSpareServers)..."
    debug Messages de débogage. "Opening config file ..."
    trace1 Messages de traces "proxy: FTP: control connection complete"
    trace2 Messages de traces "proxy: CONNECT: sending the CONNECT request to the remote proxy"
    trace3 Messages de traces "openssl: Handshake: start"
    trace4 Messages de traces "read from buffered SSL brigade, mode 0, 17 bytes"
    trace5 Messages de traces "map lookup FAILED: map=rewritemap key=keyname"
    trace6 Messages de traces "cache lookup FAILED, forcing new map lookup"
    trace7 Messages de traces, enregistrement d'une grande quantité de données "| 0000: 02 23 44 30 13 40 ac 34 df 3d bf 9a 19 49 39 15 |"
    trace8 Messages de traces, enregistrement d'une grande quantité de données "| 0000: 02 23 44 30 13 40 ac 34 df 3d bf 9a 19 49 39 15 |"

    Lorsqu'un niveau particulier est spécifié, les messages de tous les autres niveaux de criticité supérieure seront aussi enregistrés. Par exemple, si LogLevel info est spécifié, les messages de niveaux notice et warn seront aussi émis.

    Il est recommandé d'utiliser un niveau crit ou inférieur.

    Par exemple :

    LogLevel notice

    Note

    Si la journalisation s'effectue directement dans un fichier, les messages de niveau notice ne peuvent pas être supprimés et sont donc toujours journalisés. Cependant, ceci ne s'applique pas lorsque la journalisation s'effectue vers syslog.

    Spécifier un niveau sans nom de module va attribuer ce niveau à tous les modules. Spécifier un niveau avec nom de module va attribuer ce niveau à ce module seulement. Il est possible de spécifier un module par le nom de son fichier source ou par son identificateur, avec ou sans le suffixe _module. Les trois spécifications suivantes sont donc équivalentes :

    LogLevel info ssl:warn
    LogLevel info mod_ssl.c:warn
    LogLevel info ssl_module:warn

    Il est aussi possible d'attribuer un niveau de journalisation par répertoire :

    LogLevel info
    <Directory "/usr/local/apache/htdocs/app">
      LogLevel debug
    </Directory>
    La configuration du niveau de journalisation par répertoire n'affecte que les messages journalisés après l'interprétation de la requête et qui sont associés à cette dernière. Les messages de journalisation associés à la connexion ou au serveur ne sont pas affectés.

    Voir aussi

    top

    Directive MaxKeepAliveRequests

    Description:Nombre de requêtes permises pour une connexion persistante
    Syntaxe:MaxKeepAliveRequests nombre
    Défaut:MaxKeepAliveRequests 100
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    La directive MaxKeepAliveRequests permet de limiter le nombre de requêtes autorisées par connexion lorsque KeepAlive est à "on". Si sa valeur est 0, le nombre de requêtes autorisées est illimité. Il est recommandé de définir une valeur assez haute pour des performances du serveur maximales.

    Par exemple :

    MaxKeepAliveRequests 500
    top

    Directive MaxRangeOverlaps

    Description:Nombre de chevauchements de segments de données autorisé (par exemple 100-200,150-300) avant le renvoi de la ressource complète
    Syntaxe:MaxRangeOverlaps default | unlimited | none | nombre de chevauchements
    Défaut:MaxRangeOverlaps 20
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible depuis la version 2.3.15 du serveur HTTP Apache

    La directive MaxRangeOverlaps permet de limiter le nombre de chevauchements de segments de données HTTP autorisé par le serveur. Si le nombre de chevauchements de segments demandé est supérieur au nombre maximal autorisé, la ressource sera renvoyée dans son intégralité.

    default
    Limite le nombre de chevauchements de segments à la valeur par défaut 20 définie à la compilation.
    none
    Aucun chevauchement de segment n'est autorisé.
    unlimited
    Le nombre de chevauchements de segments est illimité.
    number-of-ranges
    Un nombre positif représente le nombre maximal de chevauchements de segments autorisé par le serveur.
    top

    Directive MaxRangeReversals

    Description:Nombre d'inversions d'ordre autorisé dans la spécification des segments de données (par exemple 100-200,50-70) avant le renvoi de la ressource complète
    Syntaxe:MaxRangeReversals default | unlimited | none | nombre d'inversions
    Défaut:MaxRangeReversals 20
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible depuis la version 2.3.15 du serveur HTTP Apache

    La directive MaxRangeReversals permet de limiter le nombre d'inversions d'ordre dans la spécification des segments de données HTTP autorisé par le serveur. Si le nombre d'inversions demandé est supérieur au nombre maximal autorisé, la ressource sera renvoyée dans son intégralité.

    default
    Limite le nombre d'inversions à la valeur par défaut 20 définie à la compilation.
    none
    Aucune inversion n'est autorisée.
    unlimited
    Le nombre d'inversions est illimité.
    number-of-ranges
    Un nombre positif représente le nombre maximal d'inversions autorisé par le serveur.
    top

    Directive MaxRanges

    Description:Nombre de segments de données autorisé avant le renvoi de l'intégralité de la ressource
    Syntaxe:MaxRanges default | unlimited | none | nombre de segments
    Défaut:MaxRanges 200
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible depuis la version 2.3.15 du serveur HTTP Apache

    La directive MaxRanges permet de limiter le nombre de segments de données que le serveur va renvoyer au client. Si un nombre de segments plus important est demandé, la ressource sera renvoyée dans son intégralité.

    default
    Limite le nombre de segments de données à 200 (valeur par défaut définie à la compilation).
    none
    Les en-têtes Range sont ignorés.
    unlimited
    Le nombre de segments de données est illimité.
    nombre de segments
    Un nombre positif représentera la nombre de segments de données maximal que le serveur renverra au client.
    top

    Directive MergeSlashes

    Description:Fusion des slashes consécutifs dans les URLs par le serveur.
    Syntaxe:MergeSlashes ON|OFF
    Défaut:MergeSlashes ON
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible à partir de la version 2.4.39 du serveur HTTP Apache

    Par défaut, le serveur fusionne les caractères slash ('/') multiples et consécutifs dans la partie chemin de l'URL d'une requête.

    Lorsque cette partie chemin de l'URL est appliquée au système de fichiers, ces slashes multiples sont inutiles. Il peut être cependant préférable de conserver ces slashes multiples et consécutifs car ils peuvent avoir une signification dans le cas des URLs gérées différemment, par exemple par CGI ou par un serveur mandataire. Il convient alors de définir MergeSlashes à OFF. Dans ces types de configuration, les expressions rationnelles utilisées dans le fichier de configuration pour effectuer une comparaison de la partie chemin de l'URL ((LocationMatch, RewriteRule, ...) doivent en effet tenir compte de la présence éventuelle de slashes multiples et consécutifs.

    top

    Directive MergeTrailers

    Description:Détermine si les données supplémentaires (trailers) sont fusionnées avec les en-têtes
    Syntaxe:MergeTrailers [on|off]
    Défaut:MergeTrailers off
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible à partir de la version 2.4.11 du serveur HTTP Apache

    Cette directive permet de contrôler la fusion des données HTTP supplémentaires (trailers) avec la représentation interne des en-têtes. Cette fusion intervient lorsque le corps de la requête a été entièrement reçu, bien longtemps après que la majeure partie du traitement des en-têtes ait une chance de pouvoir examiner ou modifier les en-têtes de la requête.

    Cette option a été introduite dans un souci de compatibilité avec les versions antérieures à 2.4.11, où les données supplémentaires étaient systématiquement fusionnées avec les en-têtes de la requête.

    top

    Directive Mutex

    Description:Définit les mécanismes de mutex et le repertoire du fichier verrou pour tous les mutex ou seulement les mutex spécifiés
    Syntaxe:Mutex mécanisme [default|nom-mutex] ... [OmitPID]
    Défaut:Mutex default
    Contexte:configuration globale
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible depuis la version 2.3.4 du serveur HTTP Apache

    La directive Mutex permet de définir le mécanisme de mutex, et éventuellement le répertoire du fichier verrou que les modules et httpd utilisent pour sérialiser l'accès aux ressources. Spécifiez default comme second argument pour modifier la configuration de tous les mutex ; spécifiez un nom de mutex (voir la table ci-dessous) comme second argument pour ne modifier que la configuration de ce mutex.

    La directive Mutex est typiquement utilisée dans les situations exceptionnelles suivantes :

    • choix d'un autre mécanisme de mutex lorsque le mécanisme par défaut sélectionné par APR présente un problème de fonctionnement ou de performances.
    • choix d'un autre répertoire utilisé par les mutex à base de fichier lorsque le répertoire par défaut ne supporte pas le verrouillage

    Modules supportés

    Cette directive ne configure que les mutex qui ont été enregistrés avec le serveur de base via l'API ap_mutex_register(). Tous les modules fournis avec httpd supportent la directive Mutex, mais il n'en sera pas forcément de même pour les modules tiers. Reportez-vous à la documentation du module tiers considéré afin de déterminer le(s) nom(s) de mutex qui pourront être définis si la directive est supportée.

    Les mécanismes de mutex disponibles sont les suivants :

    • default | yes

      C'est l'implémentation du verrouillage par défaut, telle qu'elle est définie par APR. On peut afficher l'implémentation du verrouillage par défaut via la commande httpd avec l'option -V.

    • none | no

      Le mutex est désactivé, et cette valeur n'est permise pour un mutex que si le module indique qu'il s'agit d'un choix valide. Consultez la documentation du module pour plus d'informations.

    • posixsem

      Une variante de mutex basée sur un sémaphore Posix.

      Avertissement

      La propriété du sémaphore n'est pas restituée si un thread du processus gérant le mutex provoque une erreur de segmentation, ce qui provoquera un blocage du serveur web.

    • sysvsem

      Une variante de mutex basée sur un sémaphore IPC SystemV.

      Avertissement

      Il peut arriver que les sémaphores SysV soient conservés si le processus se crashe avant que le sémaphore ne soit supprimé.

      Sécurité

      L'API des sémaphores permet les attaques par déni de service par tout programme CGI s'exécutant sous le même uid que le serveur web (autrement dit tous les programmes CGI, à moins que vous n'utilisiez un programme du style suexec ou cgiwrapper).

    • sem

      Sélection de la "meilleure" implémentation des sémaphores disponible ; le choix s'effectue entre les sémaphores posix et IPC SystemV, dans cet ordre.

    • pthread

      Une variante de mutex à base de mutex de thread Posix inter-processus.

      Avertissement

      Sur la plupart des systèmes, si un processus enfant se termine anormalement alors qu'il détenait un mutex qui utilise cette implémentation, le serveur va se bloquer et cesser de répondre aux requêtes. Dans ce cas, un redémarrage manuel est nécessaire pour récupérer le mutex.

      Solaris et Linux constituent des exceptions notables, en ceci qu'ils fournissent un mécanisme qui permet en général de récupérer le mutex après l'arrêt anormal d'un processus enfant qui détenait le mutex.

      Si votre système est compatible POSIX ou implémente la fonction pthread_mutexattr_setrobust_np(), vous devriez pouvoir utiliser l'option pthread sans problème.

    • fcntl:/chemin/vers/mutex

      Une variante de mutex utilisant un fichier verrou physique et la fonction fcntl().

      Avertissement

      Lorsqu'on utilise plusieurs mutex basés sur ce mécanisme dans un environnement multi-processus, multi-thread, des erreurs de blocage (EDEADLK) peuvent être rapportées pour des opérations de mutex valides si la fonction fcntl() ne gère pas les threads, comme sous Solaris.

    • flock:/chemin/vers/mutex

      Méthode similaire à fcntl:/chemin/vers/mutex, mais c'est la fonction flock() qui est utilisée pour gérer le verrouillage par fichier.

    • file:/chemin/vers/mutex

      Sélection de la "meilleure" implémentation de verrouillage par fichier disponible ; le choix s'effectue entre fcntl et flock, dans cet ordre.

    La plupart des mécanismes ne sont disponibles que sur les plate-formes où ces dernières et APR les supportent. Les mécanismes qui ne sont pas disponibles sur toutes les plate-formes sont posixsem, sysvsem, sem, pthread, fcntl, flock, et file.

    Avec les mécanismes à base de fichier fcntl et flock, le chemin, s'il est fourni, est un répertoire dans lequel le fichier verrou sera créé. Le répertoire par défaut est le répertoire d'exécution de httpd relatif à la directive ServerRoot. Utilisez toujours un système de fichiers local sur disque pour /chemin/vers/mutex et jamais un répertoire se trouvant dans un système de fichiers NFS ou AFS. Le nom de base du fichier se composera du type de mutex, d'une chaîne optionnelle correspondant à l'instance et fournie par le module ; et, sauf si le mot-clé OmitPID a été spécifié, l'identificateur du processus parent httpd sera ajouté afin de rendre le nom du fichier unique, évitant ainsi tout conflit lorsque plusieurs instances d'httpd partagent le même répertoire de verrouillage. Par exemple, si le nom de mutex est mpm-accept, et si le répertoire de verrouillage est /var/httpd/locks, le nom du fichier verrou pour l'instance httpd dont le processus parent a pour identifiant 12345 sera /var/httpd/locks/mpm-accept.12345.

    Sécurité

    Il est conseillé d'éviter de placer les fichiers mutex dans un répertoire où tout le monde peut écrire comme /var/tmp, car quelqu'un pourrait initier une attaque par déni de service et empêcher le serveur de démarrer en créant un fichier verrou possédant un nom identique à celui que le serveur va tenter de créer.

    La table suivante décrit les noms de mutex utilisés par httpd et ses modules associés.

    Nom mutex Module(s) Ressource protégée
    mpm-accept modules MPM prefork et worker connexions entrantes, afin d'éviter le problème de l'afflux de requêtes ; pour plus d'informations, voir la documentation Amélioration des performances
    authdigest-client mod_auth_digest liste de clients en mémoire partagée
    authdigest-opaque mod_auth_digest compteur en mémoire partagée
    ldap-cache mod_ldap cache de résultat de recherche LDAP
    rewrite-map mod_rewrite communication avec des programmes externes d'associations de valeurs, afin d'éviter les interférences d'entrées/sorties entre plusieurs requêtes
    ssl-cache mod_ssl cache de session SSL
    ssl-stapling mod_ssl cache de l'étiquetage OCSP ("OCSP stapling")
    watchdog-callback mod_watchdog fonction de rappel d'un module client particulier

    Le mot-clé OmitPID permet d'empêcher l'addition de l'identifiant du processus httpd parent au nom du fichier verrou.

    Dans l'exemple suivant, le mécanisme de mutex pour le mutex mpm-accept est modifié pour passer du mécanisme par défaut au mécanisme fcntl, avec le fichier verrou associé créé dans le répertoire /var/httpd/locks. Le mécanisme de mutex par défaut pour tous les autres mutex deviendra sysvsem.

    Mutex sysvsem default
    Mutex fcntl:/var/httpd/locks mpm-accept
    top

    Directive NameVirtualHost

    Description:OBSOLETE : Définit une adresse IP pour les serveurs virtuels à base de nom
    Syntaxe:NameVirtualHost adresse[:port]
    Contexte:configuration globale
    Statut:Noyau httpd
    Module:core

    Avant la version 2.3.11, il était nécessaire de définir une directive NameVirtualHost pour indiquer au serveur qu'une paire adresse IP/port particulière pouvait être utilisée comme serveur virtuel à base de nom. Depuis la version 2.3.11, chaque fois qu'une paire adresse IP/port est utilisée dans plusieurs serveurs virtuels, l'hébergement virtuel à base de nom est automatiquement activé pour cette adresse.

    Cette directive n'a actuellement plus aucun effet.

    Voir aussi

    top

    Directive Options

    Description:Définit les fonctionnalités disponibles pour un répertoire particulier
    Syntaxe:Options [+|-]option [[+|-]option] ...
    Défaut:Options FollowSymlinks
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Options
    Statut:Noyau httpd
    Module:core
    Compatibilité:Avec la version 2.3.11, la valeur par défaut passe de All à FollowSymlinks

    La directive Options permet de définir les fonctionnalités de serveur disponibles pour un répertoire particulier.

    option peut être défini à None, auquel cas aucune fonctionnalité spécifique n'est activée, ou comprendre une ou plusieurs des options suivantes :

    All
    Toutes les options excepté MultiViews.
    ExecCGI
    L'exécution de scripts CGI à l'aide du module mod_cgi est permise.
    FollowSymLinks
    Le serveur va suivre les liens symboliques dans le répertoire concerné. Il s'agit de la valeur par défaut.

    Bien que le serveur suive les liens symboliques, il ne modifie pas le nom de chemin concerné défini par la section <Directory>.

    Les options FollowSymLinks et SymLinksIfOwnerMatch ne fonctionnent que dans les sections <Directory> ou les fichiers .htaccess.

    Le fait d'omettre cette option ne doit pas être considéré comme une mesure de sécurité efficace, car il existe toujours une situation de compétition (race condition) entre l'instant où l'on vérifie qu'un chemin n'est pas un lien symbolique, et l'instant où l'on utilise effectivement ce chemin.

    Includes
    Les inclusions côté serveur (SSI) à l'aide du module mod_include sont autorisées.
    IncludesNOEXEC
    Les inclusions côté serveur (SSI) sont permises, mais #exec cmd et #exec cgi sont désactivés. L'utilisation de #include virtual pour les scripts CGI est cependant toujours possible depuis des répertoires définis par ScriptAlias.
    Indexes
    Si une URL requise correspond au répertoire concerné, et si aucun DirectoryIndex (par exemple index.html) n'est défini pour ce répertoire, le module mod_autoindex va renvoyer un listing formaté du répertoire.
    MultiViews
    Les vues multiples ("multiviews") à contenu négocié à l'aide du module mod_negotiation sont autorisées.

    Note

    Cette option est ignorée si elle est définie en tout autre endroit qu'une section <Directory>, car mod_negotiation a besoin de ressources réelles pour effectuer ses comparaisons et ses évaluations.

    SymLinksIfOwnerMatch
    Le serveur ne suivra que les liens symboliques qui renvoient vers un fichier ou un répertoire dont le propriétaire est le même que celui du lien.

    Note

    Les options FollowSymLinks et SymLinksIfOwnerMatch ne fonctionnent que dans les sections <Directory> ou les fichiers .htaccess.

    Le fait d'omettre cette option ne doit pas être considéré comme une mesure de sécurité efficace, car il existe toujours une situation de compétition (race condition) entre l'instant où l'on vérifie qu'un chemin n'est pas un lien symbolique, et l'instant où l'on utilise effectivement ce chemin.

    Normalement, si plusieurs directives Options peuvent s'appliquer à un répertoire, c'est la plus spécifique qui est utilisée et les autres sont ignorées ; les options ne sont pas fusionnées (voir comment les sections sont fusionnées). Elles le sont cependant si toutes les options de la directive Options sont précédées d'un symbole + ou -. Toute option précédée d'un + est ajoutée à la liste des options courantes de manière forcée et toute option précédée d'un - est supprimée de la liste des options courantes de la même manière.

    Note

    Mélanger des Options avec + ou - avec des Options sans + ou - constitue une erreur de syntaxe, et la vérification de la syntaxe au cours du démarrage du serveur fera échouer ce dernier.

    Par exemple, sans aucun symbole + et - :

    <Directory "/web/docs">
      Options Indexes FollowSymLinks
    </Directory>
    
    <Directory "/web/docs/spec">
      Options Includes
    </Directory>

    ici, seule l'option Includes sera prise en compte pour le répertoire /web/docs/spec. Par contre, si la seconde directive Options utilise les symboles + et - :

    <Directory "/web/docs">
      Options Indexes FollowSymLinks
    </Directory>
    
    <Directory "/web/docs/spec">
      Options +Includes -Indexes
    </Directory>

    alors, les options FollowSymLinks et Includes seront prises en compte pour le répertoire /web/docs/spec.

    Note

    L'utilisation de -IncludesNOEXEC ou -Includes désactive complètement les inclusions côté serveur sans tenir compte des définitions précédentes.

    En l'absence de toute définition d'options, la valeur par défaut est FollowSymlinks.

    top

    Directive Protocol

    Description:Protocole pour une socket d'écoute
    Syntaxe:Protocol protocole
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible depuis la version 2.1.5 d'Apache, mais seulement depuis la version 2.3.3 sous Windows.

    Cette directive permet de spécifier le protocole utilisé pour une socket d'écoute particulière. Le protocole sert à déterminer quel module doit traiter une requête, et d'appliquer les optimisations spécifiques au protocole via la directive AcceptFilter.

    Vous ne devez définir le protocole que si vous travaillez avec des ports non standards ; dans le cas général, le protocole http est associé au port 80 et le protocole https au port 443.

    Par exemple, si vous travaillez avec le protocole https sur un port non standard, spécifiez le protocole de manière explicite :

    Protocol https

    Vous pouvez aussi spécifier le protocole via la directive Listen.

    Voir aussi

    top

    Directive Protocols

    Description:Protocoles disponibles pour un serveur virtuel ou non
    Syntaxe:Protocols protocole ...
    Défaut:Protocols http/1.1
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible à partir de la version 2.4.17 du serveur HTTP Apache.

    Cette directive permet de spécifier la liste des protocoles supportés par un serveur virtuel ou non. Cette liste énumère les protocoles qu'un client sera autorisé à négocier avec ce serveur.

    Par défaut, seul le protocole http/1.1 est disponible (compatible avec les clients http/1.0 et http/0.9). Par conséquent, vous devez fournir cette liste si vous voulez étendre les protocoles disponibles pour le serveur.

    Par exemple, si vous voulez autoriser le protocole HTTP/2 pour un serveur avec TLS, utilisez cette directive comme suit :

    Protocols h2 http/1.1

    Les protocoles valides sont http/1.1 pour les connexions http et https, h2 pour les connections https et h2c pour les connexions http. D'autres modules peuvent fournir d'autres protocoles.

    Spécifier des protocoles non disponibles ou désactivés n'aura aucun effet, et ceux-ci seront simplement ignorés.

    Si un serveur virtuel ne possède pas de directive Protocols propre, il hérite des protocoles spécifiés pour le serveur principal. Autrement dit, les directives Protocols définies au niveau d'un serveur virtuel remplacent celles définies au niveau du serveur principal.

    Voir aussi

    top

    Directive ProtocolsHonorOrder

    Description:Détermine qui du client ou du serveur détermine l'ordre des protocoles au cours de la négociation de la connexion
    Syntaxe:ProtocolsHonorOrder On|Off
    Défaut:ProtocolsHonorOrder On
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible à partir de la version 2.4.17 du serveur HTTP Apache.

    Cette directive permet de définir si le serveur doit tenir compte de l'ordre des protocoles définis par la directive Protocols.

    Si cette directive est définie à Off, l'ordre de la liste des protocoles fournie par le client l'emporte sur l'ordre défini dans la configuration du serveur.

    Si la directive ProtocolsHonorOrder est définie à on (valeur par défaut), il n'est pas tenu compte de l'ordre de la liste des protocoles fournie par le client, et seul l'ordre de la liste des protocles définie au niveau du serveur influera la négociation du protocole.

    Voir aussi

    top

    Directive QualifyRedirectURL

    Description:Vérifie si la variable d'environnement REDIRECT_URL est pleinement qualifiée
    Syntaxe:QualifyRedirectURL ON|OFF
    Défaut:QualifyRedirectURL OFF
    Contexte:configuration globale, serveur virtuel, répertoire
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core
    Compatibilité:Directive supportée à partir de la version 2.4.18 du serveur HTTP Apache. Jusqu'à la version 2.4.17, le serveur se comportait comme si la directive QualifyRedirectURL était définie à ON.

    Cette directive permet de s'assurer que le serveur vérifiera que la variable d'environnement REDIRECT_URL est bien pleinement qualifiée. Par défaut, cette variable contient l'URL textuellement demandée par le client, par exemple "/index.html". Avec QualifyRedirectURL ON, la même requête affectera à la variable REDIRECT_URL une valeur du style "http://www.example.com/index.html".

    Même si cette directive n'est pas définie, lorsqu'une requête est soumise avec une URL pleinement qualifiée, la variable REDIRECT_URL contiendra quand-même une URL pleinement qualifiée.

    top

    Directive RegexDefaultOptions

    Description:Configuration des options globales par défaut pour les expressions rationnelles
    Syntaxe:RegexDefaultOptions [none] [+|-]option [[+|-]option] ...
    Défaut:RegexDefaultOptions DOLLAR_ENDONLY
    Contexte:configuration globale
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible à partir de la version 2.4.30 du serveur HTTP Apache.

    Cette directive permet d'ajouter certains comportements par défaut à TOUTES les expressions rationnelles utilisées ultérieurement.

    Toute option précédée d'un '+' est ajoutée aux options déjà définies.
    Toute option précédée d'un '-' est enlevée des options déjà définies.
    Toute option non suffixée par '+' ou '-' sera définie et remplacera l'option correspondante éventuellement déjà définie.
    Le mot-clé none annule toutes les options déjà définies.

    option peut être :

    ICASE
    Utilise une recherche de correspondance insensible à la casse.
    DOTALL
    Le drapeau Perl /s.
    DOLLAR_ENDONLY
    '$' n'est actif qu'à la fin de la chaîne de référence.
    .
    # 
    RegexDefaultOptions +ICASE +DOLLAR_ENDONLY
    ...
    # Supprime l'option ICASE, tout en conservant toutes les autres options
    # préexistantes
    RegexDefaultOptions -ICASE
    ...
    # Définit l'option par défaut à DOTALL et annule toutes les autres options
    RegexDefaultOptions DOTALL
    ...
    # Annule toutes les options définies
    RegexDefaultOptions none
    ...
    top

    Directive RegisterHttpMethod

    Description:Enregistrement de méthodes HTTP non standards
    Syntaxe:RegisterHttpMethod méthode [méthode [...]]
    Contexte:configuration globale
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible à partir de la version 2.4.24 du serveur HTTP Apache

    Cette directive permet d'enregistrer des méthodes HTTP supplémentaires. Ceci s'avérera nécessaire si l'on doit utiliser des méthodes non standards avec des directives qui acceptent des noms de méthodes en paramètres, ou pour permettre l'utilisation de méthodes particulières non standards en passant par un serveur mandataire ou au sein de scripts CGI, et ceci alors que le serveur a été configuré pour ne transmettre que des méthodes reconnues aux modules.

    Voir aussi

    top

    Directive RLimitCPU

    Description:Limite le temps CPU alloué aux processus initiés par les processus enfants d'Apache httpd
    Syntaxe:RLimitCPU secondes|max [secondes|max]
    Défaut:Non défini ; utilise les valeurs par défaut du système d'exploitation
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core

    Prend 1 ou 2 paramètres. Le premier definit la limite de consommation de ressources pour tous les processus, et le second la consommation de ressources maximale. Les deux paramètres peuvent contenir soit un nombre, soit max pour indiquer au serveur que la limite de consommation correspond à la valeur maximale autorisée par la configuration du système d'exploitation. Pour augmenter la consommation maximale de ressources, le serveur doit s'exécuter en tant que root, ou se trouver dans sa phase de démarrage.

    Cette directive s'applique aux processus initiés par les processus enfants d'Apache httpd qui traitent les requêtes, et non aux processus enfants eux-mêmes. Sont concernés les scripts CGI et les commandes exec des SSI, mais en aucun cas les processus initiés par le processus parent d'Apache httpd comme les journalisations redirigées vers un programme.

    Les limites de ressources CPU sont exprimées en secondes par processus.

    Voir aussi

    top

    Directive RLimitMEM

    Description:Limite la mémoire allouée aux processus initiés par les processus enfants d'Apache httpd
    Syntaxe:RLimitMEM octets|max [octets|max]
    Défaut:Non défini ; utilise les valeurs par défaut du système d'exploitation
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core

    Prend 1 ou 2 paramètres. Le premier definit la limite de consommation de ressources pour tous les processus, et le second la consommation de ressources maximale. Les deux paramètres peuvent contenir soit un nombre, soit max pour indiquer au serveur que la limite de consommation correspond à la valeur maximale autorisée par la configuration du système d'exploitation. Pour augmenter la consommation maximale de ressources, le serveur doit s'exécuter en tant que root, ou se trouver dans sa phase de démarrage.

    Cette directive s'applique aux processus initiés par les processus enfants d'Apache httpd qui traitent les requêtes, et non aux processus enfants eux-mêmes. Sont concernés les scripts CGI et les commandes exec des SSI, mais en aucun cas les processus initiés par le processus parent d'Apache httpd comme les journalisations redirigées vers un programme.

    Les limites de ressources mémoire sont exprimées en octets par processus.

    Voir aussi

    top

    Directive RLimitNPROC

    Description:Limite le nombre de processus qui peuvent être initiés par les processus initiés par les processus enfants d'Apache httpd
    Syntaxe:RLimitNPROC nombre|max [nombre|max]
    Défaut:Unset; uses operating system defaults
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core

    Prend 1 ou 2 paramètres. Le premier definit la limite de consommation de ressources pour tous les processus, et le second la consommation de ressources maximale. Les deux paramètres peuvent contenir soit un nombre, soit max pour indiquer au serveur que la limite de consommation correspond à la valeur maximale autorisée par la configuration du système d'exploitation. Pour augmenter la consommation maximale de ressources, le serveur doit s'exécuter en tant que root, ou se trouver dans sa phase de démarrage.

    Cette directive s'applique aux processus initiés par les processus enfants d'Apache httpd qui traitent les requêtes, et non aux processus enfants eux-mêmes. Sont concernés les scripts CGI et les commandes exec des SSI, mais en aucun cas les processus initiés par le processus parent d'Apache httpd comme les journalisations redirigées vers un programme.

    Les limites des processus contrôlent le nombre de processus par utilisateur.

    Note

    Si les processus CGI s'exécutent sous le même utilisateur que celui du serveur web, cette directive va limiter le nombre de processus que le serveur pourra lui-même créer. La présence de messages cannot fork dans le journal des erreurs indiquera que la limite est atteinte.

    Voir aussi

    top

    Directive ScriptInterpreterSource

    Description:Permet de localiser l'interpréteur des scripts CGI
    Syntaxe:ScriptInterpreterSource Registry|Registry-Strict|Script
    Défaut:ScriptInterpreterSource Script
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core
    Compatibilité:Win32 seulement.

    Cette directive permet de contrôler la méthode qu'utilise Apache httpd pour trouver l'interpréteur destiné à exécuter les scripts CGI. La définition par défaut est Script : ceci indique à Apache httpd qu'il doit utiliser l'interpréteur précisé dans la ligne shebang du script (la première ligne, commençant par #!). Sur les systèmes Win32, cette ligne ressemble souvent à ceci :

    #!C:/Perl/bin/perl.exe

    ou simplement, dans le cas où perl est dans le PATH :

    #!perl

    Avec ScriptInterpreterSource Registry, Windows va effectuer une recherche dans l'arborescence HKEY_CLASSES_ROOT de la base de registre avec comme mot-clé l'extension du fichier contenant le script (par exemple .pl). C'est la commande définie par la sous-clé de registre Shell\ExecCGI\Command ou, si elle n'existe pas, la sous-clé Shell\Open\Command qui est utilisée pour ouvrir le fichier du script. Si ces clés de registre ne sont pas trouvées, Apache httpd utilise la méthode de l'option Script.

    Sécurité

    Soyez prudent si vous utilisez ScriptInterpreterSource Registry avec des répertoires faisant l'objet d'un ScriptAlias, car Apache httpd va essayer d'exécuter tous les fichiers contenus dans celui-ci. L'option Registry peut causer des appels de programmes non voulus sur des fichiers non destinés à être exécutés. Par exemple, la commande par défaut open sur les fichiers .htm sur la plupart des systèmes Windows va lancer Microsoft Internet Explorer ; ainsi, toute requête HTTP pour un fichier .htm situé dans le répertoire des scripts va lancer le navigateur en arrière-plan sur le serveur, ce qui a toutes les chances de crasher votre système dans les minutes qui suivent.

    L'option Registry-Strict, apparue avec la version 2.0 du serveur HTTP Apache, agit de manière identique à Registry, mais n'utilise que la sous-clé Shell\ExecCGI\Command. La présence de la clé ExecCGI n'étant pas systématique, Elle doit être définie manuellement dans le registre Windows et évite ainsi tout appel de programme accidentel sur votre système.

    top

    Directive SeeRequestTail

    Description:Détermine si mod_status affiche les 63 premiers caractères d'une requête ou les 63 derniers, en supposant que la requête elle-même possède plus de 63 caractères.
    Syntaxe:SeeRequestTail On|Off
    Défaut:SeeRequestTail Off
    Contexte:configuration globale
    Statut:Noyau httpd
    Module:core
    Compatibilité:Disponible depuis la version 2.2.7 d'Apache httpd.

    Avec ExtendedStatus On, mod_status affiche la véritable requête en cours de traitement. Pour des raisons historiques, seuls 63 caractères de la requête sont réellement stockés à des fins d'affichage. Cette directive permet de déterminer si ce sont les 63 premiers caractères qui seront stockés (c'est le comportement par défaut), ou si ce sont les 63 derniers. Ceci ne s'applique bien entendu que si la taille de la requête est de 64 caractères ou plus.

    Si Apache httpd traite la requête GET /disque1/stockage/apache/htdocs/images/rep-images1/nourriture/pommes.jpg HTTP/1.1 , l'affichage de la requête par mod_status se présentera comme suit :

    Off (défaut) GET /disque1/stockage/apache/htdocs/images/rep-images1/nourritu
    On apache/htdocs/images/rep-images1/nourriture/pommes.jpg HTTP/1.1
    top

    Directive ServerAdmin

    Description:L'adresse électronique que le serveur inclut dans les messages d'erreur envoyés au client
    Syntaxe:ServerAdmin adresse électronique|URL
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    La directive ServerAdmin permet de définir l'adresse de contact que le serveur va inclure dans tout message d'erreur qu'il envoie au client. Si le programme httpd ne reconnait pas l'argument fourni comme une URL, il suppose que c'est une adresse électronique, et lui ajoute le préfixe mailto: dans les cibles des hyperliens. Il est cependant recommandé d'utiliser exclusivement une adresse électronique, car de nombreux scripts CGI considèrent ceci comme implicite. Si vous utilisez une URL, elle doit pointer vers un autre serveur que vous contrôlez. Dans le cas contraire, les utilisateurs seraient dans l'impossibilité de vous contacter en cas de problème.

    Il peut s'avérer utile de définir une adresse dédiée à l'administration du serveur, par exemple :

    ServerAdmin www-admin@foo.example.com

    car les utilisateurs ne mentionnent pas systématiquement le serveur dont ils parlent !

    top

    Directive ServerAlias

    Description:Autres noms d'un serveur utilisables pour atteindre des serveurs virtuels à base de nom
    Syntaxe:ServerAlias nom serveur [nom serveur] ...
    Contexte:serveur virtuel
    Statut:Noyau httpd
    Module:core

    La directive ServerAlias permet de définir les noms alternatifs d'un serveur utilisables pour atteindre des serveurs virtuels à base de nom. La directive ServerAlias peut contenir des caractères génériques, si nécessaire.

    <VirtualHost *:80>
      ServerName server.example.com
      ServerAlias server server2.example.com server2
      ServerAlias *.example.com
      UseCanonicalName Off
      # ...
    </VirtualHost>

    La recherche du serveur virtuel à base de nom correspondant au plus près à la requête s'effectue selon l'ordre d'apparition des directives <virtualhost> dans le fichier de configuration. Le premier serveur virtuel dont le ServerName ou le ServerAlias correspond est choisi, sans priorité particulière si le nom contient des caractères génériques (que ce soit pour ServerName ou ServerAlias).

    Tous les noms spécifiés au sein d'une section <VirtualHost> sont traités comme un ServerAlias (sans caractères génériques).

    Voir aussi

    top

    Directive ServerName

    Description:Nom d'hôte et port que le serveur utilise pour s'authentifier lui-même
    Syntaxe:ServerName [protocole://]nom-de-domaine|adresse-ip[:port]
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    La directive ServerName permet de définir les protocole, nom d'hôte et port d'une requête que le serveur utilise pour s'authentifier lui-même.

    La directive ServerName permet (éventuellement en conjonction avec la directive ServerAlias) d'identifier de manière unique un serveur virtuel, lorsqu'elle est utilisée dans un contexte de serveurs virtuels à base de noms.

    Cette directive est aussi utilisée lors de la création d'URLs de redirection relatives quand la directive UseCanonicalName est définie à une valeur autre que la valeur par défaut.

    Par exemple, si le nom de la machine hébergeant le serveur web est simple.example.com, la machine possède l'alias DNS www.example.com, et si vous voulez que le serveur web s'identifie avec cet alias, vous devez utilisez la définition suivante :

    ServerName www.example.com

    La directive ServerName peut apparaître à toutes les étapes de la définition du serveur. Toute occurrence annule cependant la précédente (pour ce serveur).

    Si la directive ServerName n'est pas définie, le serveur tente de déterminer le nom d'hôte visible du point de vue du client en demandant tout d'abord au système d'exploitation le nom d'hôte système, et en cas d'échec, en effectuant une recherche DNS inverse sur une adresse IP présente sur le système.

    Si la directive ServerName ne précise pas de port, le serveur utilisera celui de la requête entrante. Il est recommandé de spécifier un nom d'hôte et un port spécifiques à l'aide de la directive ServerName pour une fiabilité optimale et à titre préventif.

    Si vous définissez des serveurs virtuels à base de nom, une directive ServerName située à l'intérieur d'une section <VirtualHost> spécifiera quel nom d'hôte doit apparaître dans l'en-tête de requête Host: pour pouvoir atteindre ce serveur virtuel.

    Parfois, le serveur s'exécute en amont d'un dispositif qui implémente SSL, comme un mandataire inverse, un répartiteur de charge ou un boîtier dédié SSL. Dans ce cas, spécifiez le protocole https:// et le port auquel les clients se connectent dans la directive ServerName, afin de s'assurer que le serveur génère correctement ses URLs d'auto-identification.

    Voir la description des directives UseCanonicalName et UseCanonicalPhysicalPort pour les définitions qui permettent de déterminer si les URLs auto-identifiantes (par exemple via le module mod_dir) vont faire référence au port spécifié, ou au port indiqué dans la requête du client.

    Si la valeur de la directive ServerName ne peut pas être résolue en adresse IP, le démarrage du serveur provoquera un avertissement. httpd va alors utiliser le résultat de la commande système hostname pour déterminer le nom du serveur, ce qui ne correspondra pratiquement jamais au nom de serveur que vous souhaitez réellement.

    httpd: Could not reliably determine the server's fully qualified domain name, using rocinante.local for ServerName

    Voir aussi

    top

    Directive ServerPath

    Description:Nom de chemin d'URL hérité pour un serveur virtuel à base de nom accédé par un navigateur incompatible
    Syntaxe:ServerPath chemin d'URL
    Contexte:serveur virtuel
    Statut:Noyau httpd
    Module:core

    La directive ServerPath permet de définir le nom de chemin d'URL hérité d'un hôte, à utiliser avec les serveurs virtuels à base de nom.

    Voir aussi

    top

    Directive ServerRoot

    Description:Racine du répertoire d'installation du serveur
    Syntaxe:ServerRoot chemin de répertoire
    Défaut:ServerRoot /usr/local/apache
    Contexte:configuration globale
    Statut:Noyau httpd
    Module:core

    La directive ServerRoot permet de définir le répertoire dans lequel le serveur est installé. En particulier, il contiendra les sous-répertoires conf/ et logs/. Les chemins relatifs indiqués dans les autres directives (comme Include ou LoadModule) seront définis par rapport à ce répertoire.

    ServerRoot "/home/httpd"

    La valeur par défaut de ServerRoot peut être modifiée via l'argument --prefix de la commande configure, et de nombreuses distributions tierces du serveur proposent une valeur différente de celles listées ci-dessus.

    Voir aussi

    top

    Directive ServerSignature

    Description:Définit un pied de page pour les documents générés par le serveur
    Syntaxe:ServerSignature On|Off|EMail
    Défaut:ServerSignature Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Noyau httpd
    Module:core

    La directive ServerSignature permet de définir une ligne de pied de page fixe pour les documents générés par le serveur (messages d'erreur, listings de répertoires ftp de mod_proxy, sorties de mod_info, etc...). Dans le cas d'une chaîne de mandataires, l'utilisateur n'a souvent aucun moyen de déterminer lequel des mandataires chaînés a généré un message d'erreur, et c'est une des raisons pour lesquelles on peut être amené à ajouter un tel pied de page.

    La valeur par défaut Off supprime la ligne de pied de page (et est ainsi compatible avec le comportement des versions 1.2 et antérieures d'Apache). la valeur On ajoute simplement une ligne contenant le numéro de version du serveur ainsi que le nom du serveur virtuel issu de la directive ServerName, alors que la valeur EMail ajoute en plus une référence "mailto:" à l'administrateur du document référencé issu la directive ServerAdmin.

    Après la version 2.0.44, les détails à propos du numéro de version du serveur sont contrôlés à l'aide de la directive ServerTokens.

    Voir aussi

    top

    Directive ServerTokens

    Description:Configure l'en-tête Server de la réponse HTTP
    Syntaxe:ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full
    Défaut:ServerTokens Full
    Contexte:configuration globale
    Statut:Noyau httpd
    Module:core

    Cette directive permet de contrôler le contenu de l'en-tête Server inclus dans la réponse envoyée au client : cet en-tête peut contenir le type de système d'exploitation du serveur, ainsi que des informations à propos des modules compilés avec le serveur.

    ServerTokens Full (ou non spécifié)
    Le serveur envoie par exemple : Server: Apache/2.4.2 (Unix) PHP/4.2.2 MyMod/1.2
    ServerTokens Prod[uctOnly]
    Le serveur renvoie (par exemple): Server: Apache
    ServerTokens Major
    Le serveur renvoie (par exemple): Server: Apache/2
    ServerTokens Minor
    Le serveur renvoie (par exemple): Server: Apache/2.4
    ServerTokens Min[imal]
    Le serveur renvoie (par exemple): Server: Apache/2.4.2
    ServerTokens OS
    Le serveur renvoie (par exemple): Server: Apache/2.4.2 (Unix)

    Cette définition s'applique à l'ensemble du serveur et ne peut être activée ou désactivée pour tel ou tel serveur virtuel.

    Dans les versions postérieures à 2.0.44, cette directive contrôle aussi les informations fournies par la directive ServerSignature.

    Définir ServerTokens à une valeur inférieure à minimal n'est pas recommandé car le débogage des problèmes interopérationnels n'en sera alors que plus difficile. Notez aussi que la désactivation de l'en-tête Server: n'améliore en rien la sécurité de votre serveur ; le concept de "sécurité par l'obscurité" est un mythe et conduit à une mauvaise perception de ce qu'est la sécurité.

    Voir aussi

    top

    Directive SetHandler

    Description:Force le traitement des fichiers spécifiés par un gestionnaire particulier
    Syntaxe:SetHandler handler-name|none|expression
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core
    Compatibilité:L'argument expression est disponible à partir de la version 2.4.19 su serveur HTTP Apache

    Lorsqu'elle se situe à l'intérieur d'un fichier .htaccess, ou d'une section <Directory> ou <Location>, cette directive force le traitement de tous les fichiers spécifiés par le gestionnaire défini par l'argument nom gestionnaire. Par exemple, dans le cas d'un répertoire dont vous voulez interpréter le contenu comme des fichiers de règles d'images cliquables, sans tenir compte des extensions, vous pouvez ajouter la ligne suivante dans un fichier .htaccess de ce répertoire :

    SetHandler imap-file

    Autre exemple : si vous voulez que le serveur affiche un compte-rendu d'état chaque fois qu'une URL du type http://nom serveur/status est appelée, vous pouvez ajouter ceci dans httpd.conf :

    <Location "/status">
      SetHandler server-status
    </Location>

    Vous pouvez aussi utiliser cette directive pour associer un gestionnaire à des fichiers possèdant une extension de nom de fichier particulière. Par exemple :

    <FilesMatch "\.php$">
        SetHandler application/x-httpd-php
    </FilesMatch>

    Pour référencer des variables spécifiques à une requête, y compris les références arrières vers des expressions rationnelles nommées, vous pouvez utiliser des expressions ayant pour valeur une chaîne :

    <LocationMatch ^/app/(?<sub>[^/]+)/>
         SetHandler "proxy:unix:/var/run/app_%{env:MATCH_sub}.sock|fcgi://localhost:8080"
    </LocationMatch>

    Vous pouvez écraser la définition antérieure d'une directive SetHandler en utilisant la valeur None.

    Note

    Comme SetHandler l'emporte sur la définition des gestionnaires par défaut, le comportement habituel consistant à traiter les URLs se terminant par un slash (/) comme des répertoires ou des fichiers index est désactivé.

    Voir aussi

    top

    Directive SetInputFilter

    Description:Définit les filtres par lesquels vont passer les requêtes client et les données POST
    Syntaxe:SetInputFilter filtre[;filtre...]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core

    La directive SetInputFilter permet de définir le ou les filtres par lesquels vont passer les requêtes client et les données POST au moment où le serveur les reçoit. Cette définition vient en ajout à tout autre filtre défini en quelqu'endroit que ce soit, y compris via la directive AddInputFilter.

    Si la directive comporte plusieurs filtres, ils doivent être séparés par des points-virgules, et spécifiés selon l'ordre dans lequel vous souhaitez les voir agir sur les contenus.

    Voir aussi

    top

    Directive SetOutputFilter

    Description:Définit les filtres par lesquels vont passer les réponses du serveur
    Syntaxe:SetOutputFilter filtre[;filtre...]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Noyau httpd
    Module:core

    La directive SetOutputFilter permet de définir les filtres par lesquels vont passer les réponses du serveur avant d'être envoyées au client. Cette définition vient en ajout à tout autre filtre défini en quelqu'endroit que ce soit, y compris via la directive AddOutputFilter.

    Par exemple, la configuration suivante va traiter tous les fichiers du répertoire /www/data/ comme des inclusions côté serveur (SSI) :

    <Directory "/www/data/">
      SetOutputFilter INCLUDES
    </Directory>

    Si la directive comporte plusieurs filtres, ils doivent être séparés par des points-virgules, et spécifiés selon l'ordre dans lequel vous souhaitez les voir agir sur les contenus.

    Voir aussi

    top

    Directive TimeOut

    Description:Temps pendant lequel le serveur va attendre certains évènements avant de considérer qu'une requête a échoué
    Syntaxe:TimeOut secondes
    Défaut:TimeOut 60
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    La directive TimeOut permet de définir le temps maximum pendant lequel Apache httpd va attendre des entrées/sorties selon les circonstances :

    • Lors de la lecture de données en provenance du client, le temps maximum jusqu'à l'arrivée d'un paquet TCP si le tampon est vide.

      Pour les données initiales d'une nouvelle connexion, et tant qu'une directive AcceptFilter n'aura pas transmis cette nouvelle connexion au serveur, cette directive n'aura aucun effet.

    • Lors de l'écriture de données destinées au client, le temps maximum jusqu'à l'arrivée de l'accusé-réception d'un paquet si le tampon d'envoi est plein.
    • Avec mod_cgi et mod_cgid, le temps d'attente maximum pour un bloc individuel en sortie d'un script CGI.
    • Avec mod_ext_filter, le temps d'attente maximum des sorties d'un processus de filtrage.
    • Avec mod_proxy, la valeur du délai par défaut si ProxyTimeout n'est pas défini.
    top

    Directive TraceEnable

    Description:Détermine le comportement des requêtes TRACE
    Syntaxe:TraceEnable [on|off|extended]
    Défaut:TraceEnable on
    Contexte:configuration globale, serveur virtuel
    Statut:Noyau httpd
    Module:core

    Cette directive l'emporte sur le comportement de TRACE pour le noyau du serveur et mod_proxy. La définition par défaut TraceEnable on permet des requêtes TRACE selon la RFC 2616, qui interdit d'ajouter tout corps à la requête. La définition TraceEnable off indique au noyau du serveur et à mod_proxy de retourner un code d'erreur 405 (Méthode non autorisée) au client.

    En fait, et à des fins de test et de diagnostic seulement, on peut autoriser l'ajout d'un corps de requête à l'aide de la définition non standard TraceEnable extended. Le noyau du serveur (dans le cas d'un serveur d'origine) va limiter la taille du corps de requête à 64Kb (plus 8Kb pour les en-têtes de fractionnement si Transfer-Encoding: chunked est utilisé). Le noyau du serveur va reproduire l'ensemble des en-têtes, y compris les en-têtes de fractionnement avec le corps de la réponse. Dans le cas d'un serveur mandataire, la taille du corps de requête n'est pas limitée à 64Kb.

    Note

    Bien que certains prétendent le contraire, activer la méthode TRACE ne constitue pas un problème de sécurité dans Apache httpd. La méthode TRACE est définie par la spécification HTTP/1.1 et les différentes implémentations sont censées la supporter.

    top

    Directive UnDefine

    Description:Invalide la définition d'une variable
    Syntaxe:UnDefine nom-variable
    Contexte:configuration globale
    Statut:Noyau httpd
    Module:core

    Annule l'effet d'une directive Define ou d'un argument -D de httpd en invalidant l'existence de la variable correspondante.

    On peut utiliser cette directive pour inverser l'effet d'une section <IfDefine> sans avoir à modifier les arguments -D dans les scripts de démarrage.

    Si cette directive est définie au sein d'un bloc VirtualHost, les changements qu'elle induit sont visibles de toute directive ultérieure, au delà de tout bloc VirtualHost.

    Voir aussi

    top

    Directive UseCanonicalName

    Description:Définit la manière dont le serveur détermine son propre nom et son port
    Syntaxe:UseCanonicalName On|Off|DNS
    Défaut:UseCanonicalName Off
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Noyau httpd
    Module:core

    Dans de nombreuses situations, Apache httpd doit construire une URL auto-identifiante -- c'est à dire une URL qui fait référence au serveur lui-même. Avec UseCanonicalName On, Apache httpd va utiliser le nom d'hôte et le port spécifiés par la directive ServerName pour construire le nom canonique du serveur. Ce nom est utilisé dans toutes les URLs auto-identifiantes, et affecté aux variables SERVER_NAME et SERVER_PORT dans les programmes CGI.

    Avec UseCanonicalName Off, Apache httpd va construire ses URLs auto-identifiantes à l'aide du nom d'hôte et du port fournis par le client, si ce dernier en a fourni un (dans la négative, Apache utilisera le nom canonique, de la même manière que ci-dessus). Ces valeurs sont les mêmes que celles qui sont utilisées pour implémenter les serveurs virtuels à base de nom, et sont disponibles avec les mêmes clients. De même, les variables CGI SERVER_NAME et SERVER_PORT seront affectées des valeurs fournies par le client.

    Cette directive peut s'avérer utile, par exemple, sur un serveur intranet auquel les utilisateurs se connectent en utilisant des noms courts tels que www. Si les utilisateurs tapent un nom court suivi d'une URL qui fait référence à un répertoire, comme http://www/splat, sans le slash terminal, vous remarquerez qu'Apache httpd va les rediriger vers http://www.example.com/splat/. Si vous avez activé l'authentification, ceci va obliger l'utilisateur à s'authentifier deux fois (une première fois pour www et une seconde fois pour www.example.com -- voir la foire aux questions sur ce sujet pour plus d'informations). Par contre, si UseCanonicalName est définie à Off, Apache httpd redirigera l'utilisateur vers http://www/splat/.

    Pour l'hébergement virtuel en masse à base d'adresse IP, on utilise une troisième option, UseCanonicalName DNS, pour supporter les clients anciens qui ne fournissent pas d'en-tête Host:. Apache httpd effectue alors une recherche DNS inverse sur l'adresse IP du serveur auquel le client s'est connecté afin de construire ses URLs auto-identifiantes.

    Avertissement

    Les programmes CGI risquent d'être perturbés par cette option s'ils tiennent compte de la variable SERVER_NAME. Le client est pratiquement libre de fournir la valeur qu'il veut comme nom d'hôte. Mais si le programme CGI n'utilise SERVER_NAME que pour construire des URLs auto-identifiantes, il ne devrait pas y avoir de problème.

    Voir aussi

    top

    Directive UseCanonicalPhysicalPort

    Description:Définit la manière dont le serveur détermine son propre port
    Syntaxe:UseCanonicalPhysicalPort On|Off
    Défaut:UseCanonicalPhysicalPort Off
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Noyau httpd
    Module:core

    Dans de nombreuses situations, Apache httpd doit construire une URL auto-identifiante -- c'est à dire une URL qui fait référence au serveur lui-même. Avec UseCanonicalPhysicalPort On, Apache httpd va fournir le numéro de port physique réel utilisé par la requête en tant que port potentiel, pour construire le port canonique afin que le serveur puisse alimenter la directive UseCanonicalName. Avec UseCanonicalPhysicalPort Off, Apache httpd n'utilisera pas le numéro de port physique réel, mais au contraire se référera aux informations de configuration pour construire un numéro de port valide.

    Note

    L'ordre dans lequel s'effectue la recherche quand on utilise le port physique est le suivant :

    UseCanonicalName On
    1. Port indiqué dans Servername
    2. Port physique
    3. Port par défaut
    UseCanonicalName Off | DNS
    1. Port spécifié dans l'en-tête Host:
    2. Port physique
    3. Port spécifié par Servername
    4. Port par défaut

    Avec UseCanonicalPhysicalPort Off, on reprend l'ordre ci-dessus en supprimant "Port physique".

    Voir aussi

    top

    Directive <VirtualHost>

    Description:Contient des directives qui ne s'appliquent qu'à un nom d'hôte spécifique ou à une adresse IP
    Syntaxe:<VirtualHost adresse IP[:port] [adresse IP[:port]] ...> ... </VirtualHost>
    Contexte:configuration globale
    Statut:Noyau httpd
    Module:core

    Les balises <VirtualHost> et </VirtualHost> permettent de rassembler un groupe de directives qui ne s'appliquent qu'à un serveur virtuel particulier. Toute directive autorisée dans un contexte de serveur virtuel peut être utilisée. Lorsque le serveur reçoit un requête pour un document hébergé par un serveur virtuel particulier, il applique les directives de configuration rassemblées dans la section <VirtualHost>. adresse IP peut être une des entités suivantes, éventuellement suivies d'un caractère ':' et d'un numéro de port (ou *) :

    • L'adresse IP du serveur virtuel ;
    • Un nom de domaine entièrement qualifié correspondant à l'adresse IP du serveur virtuel (non recommandé) ;
    • Le caractère *, qui agit comme un caractère générique, et correspond à toute adresse IP.
    • La chaîne _default_, dont la signification est identique à celle du caractère *
    <VirtualHost 10.1.2.3:80>
      ServerAdmin webmaster@host.example.com
      DocumentRoot "/www/docs/host.example.com"
      ServerName host.example.com
      ErrorLog "logs/host.example.com-error_log"
      TransferLog "logs/host.example.com-access_log"
    </VirtualHost>

    Les adresses IPv6 doivent être entourées de crochets car dans le cas contraire, un éventuel port optionnel ne pourrait pas être déterminé. Voici un exemple de serveur virtuel avec adresse IPv6 :

    <VirtualHost [2001:db8::a00:20ff:fea7:ccea]:80>
      ServerAdmin webmaster@host.example.com
      DocumentRoot "/www/docs/host.example.com"
      ServerName host.example.com
      ErrorLog "logs/host.example.com-error_log"
      TransferLog "logs/host.example.com-access_log"
    </VirtualHost>

    Chaque serveur virtuel doit correspondre à une adresse IP, un port ou un nom d'hôte spécifique ; dans le premier cas, le serveur doit être configuré pour recevoir les paquets IP de plusieurs adresses (si le serveur n'a qu'une interface réseau, on peut utiliser à cet effet la commande ifconfig alias -- si votre système d'exploitation le permet).

    Note

    L'utilisation de la directive <VirtualHost> n'affecte en rien les adresses IP sur lesquelles Apache httpd est en écoute. Vous devez vous assurer que les adresses des serveurs virtuels sont bien incluses dans la liste des adresses précisées par la directive Listen.

    Tout bloc <VirtualHost> doit comporter une directive ServerName. Dans le cas contraire, le serveur virtuel héritera de la valeur de la directive ServerName issue de la configuration du serveur principal.

    A l'arrivée d'une requête, le serveur tente de la faire prendre en compte par la section <VirtualHost> qui correspond le mieux en ne se basant que sur la paire adresse IP/port. Les chaînes sans caractères génériques l'emportent sur celles qui en contiennent. Si aucune correspondance du point de vue de l'adresse IP/port n'est trouvée, c'est la configuration du serveur "principal" qui sera utilisée.

    Si plusieurs serveurs virtuels correspondent du point de vue de l'adresse IP/port, le serveur sélectionne celui qui correspond le mieux du point de vue du nom d'hôte de la requête. Si aucune correspondance du point de vue du nom d'hôte n'est trouvée, c'est le premier serveur virtuel dont l'adresse IP/port correspond qui sera utilisé. Par voie de conséquence, le premier serveur virtuel comportant une certaine paire adresse IP/port est le serveur virtuel par défaut pour cette paire adresse IP/port.

    Sécurité

    Voir le document sur les conseils à propos de sécurité pour une description détaillée des raisons pour lesquelles la sécurité de votre serveur pourrait être compromise, si le répertoire contenant les fichiers journaux est inscriptible par tout autre utilisateur que celui qui démarre le serveur.

    Voir aussi

    Langues Disponibles:  de  |  en  |  es  |  fr  |  ja  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_lua.html.fr.utf80000644000000000000500000030553113420635273020035 0ustar rootsrc mod_lua - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_lua

    Langues Disponibles:  en  |  fr 

    Description:Fournit des points d'entrée Lua dans différentes parties du traitement des requêtes httpd
    Statut:Extension
    Identificateur de Module:lua_module
    Fichier Source:mod_lua.c
    Compatibilité:versions 2.3 et supérieures

    Sommaire

    Ce module permet d'ajouter au serveur des extensions sous forme de scripts écrits dans le langage de programmation Lua. mod_lua fournit de nombreuses extensions (hooks) disponibles avec les modules natifs du serveur HTTP Apache, comme les associations de requêtes à des fichiers, la génération de réponses dynamiques, le contrôle d'accès, l'authentification et l'autorisation.

    Vous trouverez davantage d'informations à propos du langage de programmation Lua sur le site web de Lua.

    Avertissement

    Ce module possède une grande capacité d'action sur le fonctrionnement de httpd, ce qui lui confère une grande puissance, mais peut aussi induire un risque de sécurité. Il est déconseillé d'utiliser ce module sur un serveur partagé avec des utilisateurs auxquels vous ne pouvez pas accorder une confiance absolue, car il peut permettre de modifier le fonctionnement interne de httpd.

    top

    Configuration de base

    La directive de base pour le chargement du module est

    LoadModule lua_module modules/mod_lua.so

    mod_lua fournit un gestionnaire nommé lua-script qui peut être utilisé avec une directive AddHandler ou SetHandler :

    <Files "*.lua">
        SetHandler lua-script
    </Files>

    Ceci aura pour effet de faire traiter les requêtes pour les fichiers dont l'extension est .lua par mod_lua en invoquant cette fonction de gestion de fichier.

    Pour plus de détails, voir la directive LuaMapHandler.

    top

    Ecrire des gestionnaires

    Dans l'API du serveur HTTP Apache, un gestionnaire est une sorte de point d'accroche (hook) spécifique responsable de la génération de la réponse. mod_proxy, mod_cgi et mod_status sont des exemples de modules comportant un gestionnaire.

    mod_lua cherche toujours à invoquer une fonction Lua pour le gestionnaire, plutôt que de simplement évaluer le corps d'un script dans le style de CGI. Une fonction de gestionnaire se présente comme suit :

    example.lua
    -- exemple de gestionnaire require "string" --[[ Il s'agit du nom de méthode par défaut pour les gestionnaires Lua ; voir les noms de fonctions optionnels dans la directive LuaMapHandler pour choisir un point d'entrée différent. --]] function handle(r) r.content_type = "text/plain" if r.method == 'GET' then r:puts("Hello Lua World!\n") for k, v in pairs( r:parseargs() ) do r:puts( string.format("%s: %s\n", k, v) ) end elseif r.method == 'POST' then r:puts("Hello Lua World!\n") for k, v in pairs( r:parsebody() ) do r:puts( string.format("%s: %s\n", k, v) ) end else elseif r.method == 'PUT' then -- message d'erreur personnalisé r:puts("Unsupported HTTP method " .. r.method) r.status = 405 return apache2.OK else -- message d'erreur ErrorDocument return 501 end return apache2.OK end

    Ce gestionnaire se contente d'afficher les arguments codés d'un uri ou d'un formulaire dans un page au format texte.

    Cela signifie que vous pouvez (et êtes encouragé à) avoir plusieurs gestionnaires (ou points d'entrée, ou filtres) dans le même script.

    top

    Ecriture de fournisseurs d'autorisation

    mod_authz_core fournit une interface d'autorisation de haut niveau bien plus facile à utiliser que dans les hooks correspondants. Le premier argument de la directive Require permet de spécifier le fournisseur d'autorisation à utiliser. Pour chaque directive Require, mod_authz_core appellera le fournisseur d'autorisation spécifié, le reste de la ligne constituant les paramètres. Le fournisseur considéré va alors vérifier les autorisations et fournir le résultat dans une valeur de retour.

    En général, le fournisseur authz est appelé avant l'authentification. S'il doit connaître le nom d'utilisateur authentifié (ou si l'utilisateur est appelé à être authentifié), le fournisseur doit renvoyer apache2.AUTHZ_DENIED_NO_USER, ce qui va déclancher le processus d'authentification et un deuxième appel du fournisseur authz.

    La fonction du fournisseur authz ci-dessous accepte deux arguments, une adresse IP et un nom d'utilisateur. Elle autorise l'accès dans le cas où la requête provient de l'adresse IP spécifiée, ou si l'utilisateur authentifié correspond au second argument :

    authz_provider.lua
    require 'apache2' function authz_check_foo(r, ip, user) if r.useragent_ip == ip then return apache2.AUTHZ_GRANTED elseif r.user == nil then return apache2.AUTHZ_DENIED_NO_USER elseif r.user == user then return apache2.AUTHZ_GRANTED else return apache2.AUTHZ_DENIED end end

    La configuration suivante enregistre cette fonction en tant que fournisseur foo, et la configure por l'URL / :

    LuaAuthzProvider foo authz_provider.lua authz_check_foo
    <Location "/">
      Require foo 10.1.2.3 john_doe
    </Location>
    top

    Ecriture de fonctions d'accroche (hooks)

    Les fonctions d'accroche déterminent la manière dont les modules (et les scripts Lua) participent au traitement des requêtes. Chaque type d'accroche proposé par le serveur a un rôle spécifique, comme l'association de requêtes au système de fichiers, le contrôle d'accès, ou la définition de types MIME :

    Phase d'accroche Directive mod_lua Description
    Gestionnaire rapide LuaQuickHandler Il s'agit de la première accroche appelée lorsqu'une requête a été associée à un serveur ou un serveur virtuel.
    Phase de traduction LuaHookTranslateName Cette phase traduit l'URI de la requête en nom de fichier sur le système. Ce sont des modules comme mod_alias et mod_rewrite qui interviennent au cours de cette phase.
    Choix du lieu de stockage de la ressource LuaHookMapToStorage Cette phase définit le lieu de stockage de la ressource : physique, en cache ou externe/mandaté. Elle est assurée par les modules de mandat ou de mise en cache.
    Autorisation d'accès LuaHookAccessChecker Cette phase vérifie si un client a l'autorisation d'accès à la ressource. Elle s'exécute avant l'authentification de l'utisateur ; il faut donc être prudent.
    Vérification de l'identifiant utilisateur LuaHookCheckUserID Cette phase vérifie l'identifiant de l'utilisateur ayant fait l'objet d'une négociation.
    Vérification de l'autorisation d'accès LuaHookAuthChecker ou LuaAuthzProvider Cette phase vérifie l'autorisation d'accès d'un utilisateur en fonction des ses paramètres de connexion, comme l'identifiant, le certificat, etc...
    Vérification du type de la ressource LuaHookTypeChecker Cette phase assigne un type de contenu et un gestionnaire à la ressource.
    Derniers réglages LuaHookFixups C'est la dernière phase avant l'activation des gestionnaires de contenu. Toute modification de dernière minute à la requête doit être effectuée ici.
    Gestionnaire de contenu fichiers fx. .lua ou directive LuaMapHandler C'est durant cette phase que le contenu est traité. Les fichiers sont lus, interprétés, certains sont exécutés, et le résultat obtenu est envoyé au client.
    Journalisation LuaHookLog Lorsqu'une requête a été traitée, plusieurs phases de journalisation interviennent, et enregistrent leurs résultats dans les fichiers d'erreur ou d'accès. Mod_lua peut s'intercaler au départ de ce processus et ainsi contrôler la journalisation.

    Les fonctions d'accroche reçoivent l'objet de la requête comme seul argument (sauf LuaAuthzProvider qui reçoit aussi des arguments en provenance de la directive Require). Elles peuvent renvoyer une valeur, selon la fonction, mais il s'agit en général d'un code d'état HTTP ou des valeurs OK, DONE, ou DECLINED, que vous pouvez écrire dans Lua sous la forme apache2.OK, apache2.DONE, ou apache2.DECLINED.

    translate_name.lua
    -- exemple d'accroche qui réécrit un URI en chemin du système de fichiers. require 'apache2' function translate_name(r) if r.uri == "/translate-name" then r.filename = r.document_root .. "/find_me.txt" return apache2.OK end -- on ne gère pas cette URL et on donne sa chance à un autre module return apache2.DECLINED end
    translate_name2.lua
    --[[ exemple d'accroche qui réécrit un URI vers un autre URI. Il renvoie un apache2.DECLINED pour permettre à un autre interpréteur d'URL de travailler sur la substitution, y compris l'accroche translate_name de base dont les tables de correspondances se basent sur DocumentRoot. Note: utilisez le drapeau early/late de la directive pour l'exécuter avant ou après mod_alias. --]] require 'apache2' function translate_name(r) if r.uri == "/translate-name" then r.uri = "/find_me.txt" return apache2.DECLINED end return apache2.DECLINED end
    top

    Structures de données

    request_rec

    request_rec est considérée en tant que donnée utilisateur. Elle possède une métatable qui vous permet d'accomplir des choses intéressantes. Pour la plus grande partie, elle possède les mêmes champs que la structure request_rec, la plupart d'entre eux étant accessibles en lecture et écriture (le contenu des champs de la table peut être modifié, mais les champs eux-mêmes ne peuvent pas être établis en tant que tables distinctes).

    Nom Type Lua Modifiable Description
    allowoverrides string non L'option AllowOverride s'applique à la requête courante.
    ap_auth_type string non Ce champ contient le type d'authentification effectuée (par exemple basic)
    args string oui La chaîne de paramètres de la requête (par exemple foo=bar&name=johnsmith)
    assbackwards boolean non contient true s'il s'agit d'une requête de style HTTP/0.9 (par exemple GET /foo (sans champs d'en-tête) )
    auth_name string non La chaîne d'identification utilisée pour la vérification de l'autorisation d'accès (si elle est disponible).
    banner string non La bannière du serveur, par exemple Apache HTTP Server/2.4.3 openssl/0.9.8c
    basic_auth_pw string non Le mot de passe pour l'authentification de base envoyé avec la requête, s'il existe
    canonical_filename string non Le nom de fichier canonique de la requête
    content_encoding string non Le type de codage du contenu de la requête courante
    content_type string oui Le type de contenu de la requête courante, tel qu'il a été déterminé au cours de la phase type_check (par exemple image/gif ou text/html)
    context_prefix string non
    context_document_root string non
    document_root string non La racine des documents du serveur
    err_headers_out table non L'en-tête MIME de l'environnement pour la réponse, écrit même en cas d'erreur et conservé pendant les redirections internes
    filename string oui Le nom de fichier correspondant à la requête, par exemple /www/example.com/foo.txt. Il peut être modifié au cours des phases translate-name ou map-to-storage du traitement de la requête pour permettre au gestionnaire par défaut (ou aux gestionnaires de script) de servir une version du fichier autre que celle demandée.
    handler string oui Le nom du gestionnaire qui doit traiter la requête, par exemple lua-script si elle doit être traitée par mod_lua. Cette valeur est en général définie via les directives AddHandler ou SetHandler, mais peut aussi l'être via mod_lua pour permettre à un autre gestionnaire de traiter une requête spécifique qui ne serait pas traitée par défaut par ce dernier.
    headers_in table oui Les en-têtes MIME de l'environnement de la requête. Il s'agit des en-têtes comme Host, User-Agent, Referer, etc...
    headers_out table oui Les en-têtes MIME de l'environnement de la réponse.
    hostname string non Le nom d'hôte, tel que défini par l'en-tête Host: ou par un URI complet.
    is_https boolean non Indique si la requête à été faite via HTTPS
    is_initial_req boolean non Indique si la requête courante est la requête initiale ou une sous-requête.
    limit_req_body number non La taille maximale du corps de la requête, ou 0 si aucune limite.
    log_id string non L'identifiant de la requête dans les journaux d'accès ou d'erreur.
    method string non La méthode de la requête, par exemple GET ou POST.
    notes table oui Une liste de notes qui peuvent être transmises d'un module à l'autre.
    options string non La valeur de la directive Options pour la requête courante.
    path_info string non La valeur de PATH_INFO extraite de la requête.
    port number non Le port du serveur utilisé par la requête.
    protocol string non Le protocole utilisé, par exemple HTTP/1.1
    proxyreq string oui Indique s'il s'agit d'une requête mandatée ou non. Cette valeur est en général définie au cours de la phase post_read_request/translate_name du traitement de la requête.
    range string non Le contenu de l'en-tête Range:.
    remaining number non Le nombre d'octets du corps de la requête restant à lire.
    server_built string non La date de compilation du serveur.
    server_name string non Le nom du serveur pour cette requête.
    some_auth_required boolean non Indique si une autorisation est/était requise pour cette requête.
    subprocess_env table oui Le jeu de variables d'environnement pour cette requête.
    started number non Le moment où le serveur a été (re)démarré, en secondes depuis epoch (1er janvier 1970)
    status number oui Le code de retour (courant) pour cette requête, par exemple 200 ou 404.
    the_request string non La chaîne de la requête telle qu'elle a été envoyée par le client, par exemple GET /foo/bar HTTP/1.1.
    unparsed_uri string non La partie URI non interprétée de la requête
    uri string oui L'URI après interprétation par httpd
    user string oui Si une authentification a été effectuée, nom de l'utilisateur authentifié.
    useragent_ip string non L'adresse IP de l'agent qui a envoyé la requête
    top

    Méthodes de l'objet request_rec

    L'objet request_rec possède (au minimum) les méthodes suivantes :

    r:flush()   -- vide le tampon de sortie
                -- Renvoie true si le vidage a été effectué avec succès,
    	    -- false dans le cas contraire.
    
    while nous_avons_des_données_à_envoyer do
        r:puts("Bla bla bla\n") -- envoi des données à envoyer vers le tampon
        r:flush() -- vidage du tampon (envoi au client)
        r.usleep(500000) -- mise en attente pendant 0.5 secondes et bouclage
    end
    r:add_output_filter(filter_name) -- ajoute un filtre en sortie
    
    r:add_output_filter("fooFilter") -- insère le filtre fooFilter dans le flux de sortie
    r:sendfile(filename) -- envoie un fichier entier au client en utilisant sendfile s'il est
                         -- supporté par la plateforme :
    
    if use_sendfile_thing then
        r:sendfile("/var/www/large_file.img")
    end
    r:parseargs() -- renvoie deux tables : une table standard de couples
                  -- clé/valeur pour les données GET simples,
                  -- et une autre pour les données
                  -- multivaluées (par exemple foo=1&foo=2&foo=3) :
    
    local GET, GETMULTI = r:parseargs()
    r:puts("Votre nom est : " .. GET['name'] or "Unknown")
    r:parsebody()([sizeLimit]) -- interprète le corps de la
                               -- requête en tant que POST et renvoie
                               -- deux tables lua, comme r:parseargs(). Un
                               -- nombre optionnel peut être fourni
                               -- pour spécifier le nombre maximal
                               -- d'octets à interpréter. La
                               -- valeur par défaut est 8192.
    
    local POST, POSTMULTI = r:parsebody(1024*1024)
    r:puts("Votre nom est : " .. POST['name'] or "Unknown")
    r:puts("bonjour", " le monde", "!") -- affichage dans le corps de la réponse
    r:write("une simple chaîne") -- affichage dans le corps de la réponse
    r:escape_html("<html>test</html>") -- Echappe le code HTML et renvoie le résultat
    r:base64_encode(string) -- Encode une chaîne à l'aide du standard de codage Base64.
    
    local encoded = r:base64_encode("This is a test") -- returns VGhpcyBpcyBhIHRlc3Q=
    r:base64_decode(string) -- Décode une chaîne codée en Base64.
    
    local decoded = r:base64_decode("VGhpcyBpcyBhIHRlc3Q=") -- returns 'This is a test'
    r:md5(string) -- Calcule et renvoie le condensé MD5 d'une chaîne en mode binaire (binary safe).
    
    local hash = r:md5("This is a test") -- returns ce114e4501d2f4e2dcea3e17b546f339
    r:sha1(string) -- Calcule et renvoie le condensé SHA1 d'une chaîne en mode binaire (binary safe).
    
    local hash = r:sha1("This is a test") -- returns a54d88e06612d820bc3be72877c74f257b561b19
    r:escape(string) -- Echappe une chaîne de type URL.
    
    local url = "http://foo.bar/1 2 3 & 4 + 5"
    local escaped = r:escape(url) -- renvoie 'http%3a%2f%2ffoo.bar%2f1+2+3+%26+4+%2b+5'
    r:unescape(string) -- Déséchappe une chaîne de type URL.
    
    local url = "http%3a%2f%2ffoo.bar%2f1+2+3+%26+4+%2b+5"
    local unescaped = r:unescape(url) -- renvoie 'http://foo.bar/1 2 3 & 4 + 5'
    r:construct_url(string) -- Construit une URL à partir d'un URI
    
    local url = r:construct_url(r.uri)
    r.mpm_query(number) -- Interroge le serveur à propos de son module MPM via la requête ap_mpm_query.
    
    local mpm = r.mpm_query(14)
    if mpm == 1 then
        r:puts("Ce serveur utilise le MPM Event")
    end
    r:expr(string) -- Evalue une chaîne de type expr.
    
    if r:expr("%{HTTP_HOST} =~ /^www/") then
        r:puts("Ce nom d'hôte commence par www")
    end
    r:scoreboard_process(a) -- Interroge le serveur à propos du
                            -- processus à la position a.
    
    local process = r:scoreboard_process(1)
    r:puts("Le serveur 1 a comme PID " .. process.pid)
    r:scoreboard_worker(a, b) -- Interroge le serveur à propos du
                              -- thread b, dans le processus a.
    
    local thread = r:scoreboard_worker(1, 1)
    r:puts("L'ID du thread 1 du serveur 1 est " .. thread.tid .. " et son
    état est " .. thread.status)
    r:clock() -- Renvoie l'heure courante avec une précision d'une microseconde.
    r:requestbody(filename) -- Lit et renvoie le corps d'une requête.
                            -- Si 'filename' est spécifié, le
                            -- corps de requête n'est pas
                            -- renvoyé, mais sauvegardé dans
                            -- le fichier correspondant.
    
    local input = r:requestbody()
    r:puts("Vous m'avez envoyé le corps de requête suivant :\n")
    r:puts(input)
    r:add_input_filter(filter_name) -- Ajoute le filtre en entrée 'filter_name'.
    r:module_info(module_name) -- Interroge le serveur à propos d'un module.
    
    local mod = r.module_info("mod_lua.c")
    if mod then
        for k, v in pairs(mod.commands) do
           r:puts( ("%s: %s\n"):format(k,v)) -- affiche toutes les directives
                                             -- implémentées par ce module.
        end
    end
    r:loaded_modules() -- Renvoie une liste des modules chargés par httpd.
    
    for k, module in pairs(r:loaded_modules()) do
        r:puts("J'ai chargé le module " .. module .. "\n")
    end
    r:runtime_dir_relative(filename) -- Génère le nom d'un fichier run-time
                                     -- (par exemple la mémoire partagée
                                     -- "file") relativement au répertoire de run-time.
    r:server_info() -- Renvoie une table contenant des informations à
                    -- propos du serveur, comme le nom de
                    -- l'exécutable httpd, le module mpm utilisé, etc...
    r:set_document_root(file_path) -- Définit la racine des documents
                                   -- pour la requête à file_path.
    r:add_version_component(component_string) -- Ajoute un élément à
                                              -- la bannière du serveur.
    r:set_context_info(prefix, docroot) -- Définit le préfixe et la
                                        -- racine des documents du contexte pour une requête.
    r:os_escape_path(file_path) -- Convertit un chemin du système de
                                -- fichiers en URL indépendamment du système d'exploitation.
    r:escape_logitem(string) -- Echappe une chaîne pour journalisation.
    r.strcmp_match(string, pattern) -- Vérifie si 'string' correspond à
                                    -- 'pattern' via la fonction strcmp_match (GLOBs). Par exemple, est-ce que
                                    -- 'www.example.com' correspond à '*.example.com' ?
    
    local match = r.strcmp_match("foobar.com", "foo*.com")
    if match then 
        r:puts("foobar.com matches foo*.com")
    end
    r:set_keepalive() -- Définit l'état de persistance d'une requête.
                      -- Renvoie true dans la mesure du possible, false dans le cas contraire.
    r:make_etag() -- Génère et renvoie le etag pour la requête courante.
    r:send_interim_response(clear) -- Renvoie une réponse d'intérim (1xx) au
                                   -- client. Si 'clear' est vrai, les en-têtes disponibles
                                   -- seront envoyés et effacés.
    r:custom_response(status_code, string) -- Génère et définit une réponse
                                           -- personnalisée pour un code d'état particulier.
                                           -- Le fonctionnement est très proche de celui de la directive ErrorDocument.
    
    r:custom_response(404, "Baleted!")
    r.exists_config_define(string) -- Vérifie si une définition de configuration existe.
    
    if r.exists_config_define("FOO") then
        r:puts("httpd a probablement été lancé avec l'option -DFOO, ou FOO a
        été défini dans la configuration")
    end
    r:state_query(string) -- Interroge le serveur à propos de son état.
    r:stat(filename [,wanted]) -- Exécute stat() sur un fichier, et renvoie une table contenant
                               -- des informations à propos de ce fichier.
    
    local info = r:stat("/var/www/foo.txt")
    if info then
        r:puts("Ce fichier existe et a été modifié pour la dernière fois à : " .. info.modified)
    end
    r:regex(string, pattern [,flags]) -- Exécute une recherche à base d'expression rationnelle
                                      -- sur une chaîne, et renvoie les éventuelles correspondances trouvées.
    
    local matches = r:regex("foo bar baz", [[foo (\w+) (\S*)]])
    if matches then
        r:puts("L'expression rationnelle correspond et le dernier mot
        capturé ($2) est : " .. matches[2])
    end
    
    -- Exemple avec insensibilité à la casse :
    local matches = r:regex("FOO bar BAz", [[(foo) bar]], 1)
    
    -- les drapeaux peuvent être une combibaison bit à bit de :
    -- 0x01: insensibilité à la casse
    -- 0x02: recherche multiligne
    r.usleep(microsecondes) -- Interrompt l'exécution du script pendant le nombre de microsecondes spécifié.
    r:dbacquire(dbType[, dbParams]) -- Acquiert une connexion à une base de données et renvoie une classe database.
                                    -- Voir 'Connectivité aux bases de données'
    				-- pour plus de détails.
    r:ivm_set("key", value) -- Défini une variable Inter-VM avec une valeur spécifique.
                            -- Ces valeurs sont conservées même si la VM est
    			-- arrêtée ou non utilisée, et ne doivent donc être
    			-- utilisées que si MaxConnectionsPerChild > 0.
    			-- Les valeurs peuvent être de type number, string
    			-- ou boolean et sont stockées séparément pour
    			-- chaque processus (elles ne seront donc pas d'une
    			-- grande utilité si l'on utilise le mpm prefork).
                            
    r:ivm_get("key")        -- Lit le contenu d'une variable définie via ivm_set. Renvoie
    			-- le contenu de la variable si elle existe, ou nil
    			-- dans le cas contraire.
                            
    -- Voici un exemple de lecture/écriture qui sauvegarde une variable
    -- globale en dehors de la VM :
    function handle(r)
        -- La première VM qui effectue l'appel suivant n'obtiendra aucune
        -- valeur, et devra la créer
        local foo = r:ivm_get("cached_data")
        if not foo then
            foo = do_some_calcs() -- simulation de valeurs de retour
            r:ivm_set("cached_data", foo) -- définition globale de la variable
        end
        r:puts("La donnée en cache est : ", foo)
    end
    r:htpassword(string [,algorithm [,cost]]) -- Génère un hash de mot de passe à partir d'une chaîne.
                                              -- algorithm: 0 = APMD5 (défaut), 1 = SHA, 2 = BCRYPT, 3 = CRYPT.
                                              -- cost: ne s'utilise qu'avec l'algorythme BCRYPT (défaut = 5).
    r:mkdir(dir [,mode]) -- Crée un répertoire et définit son mode via le paramètre optionnel mode.
    r:mkrdir(dir [,mode]) -- Crée des répertoires de manière récursive et définit
                          -- leur mode via le paramètre optionnel mode.
    r:rmdir(dir) -- Supprime un répertoire.
    r:touch(file [,mtime]) -- Définit la date de modification d'un fichier à la date courante ou à
                           -- la valeur optionnelle mtime en msec.
    r:get_direntries(dir) -- Renvoie une table contenant toutes les entrées de répertoires.
    
    -- Renvoie un chemin sous forme éclatée en chemin, fichier, extension
    function handle(r)
      local dir = r.context_document_root
      for _, f in ipairs(r:get_direntries(dir)) do
        local info = r:stat(dir .. "/" .. f)
        if info then
          local mtime = os.date(fmt, info.mtime / 1000000)
          local ftype = (info.filetype == 2) and "[dir] " or "[file]"
          r:puts( ("%s %s %10i %s\n"):format(ftype, mtime, info.size, f) )
        end
      end
    end
    r.date_parse_rfc(string) -- Interprète une chaîne date/heure et renvoie l'équivalent en secondes depuis epoche.
    r:getcookie(key) -- Obtient un cookie HTTP
    r:setcookie(key, value, secure, expires) -- Définit un cookie HTTP, par exemple :
    r:setcookie("foo", "bar and stuff", false, os.time() + 86400)
    r:wsupgrade() -- Met à jour une connexion vers les WebSockets si possible (et si demandé) :
    if r:wsupgrade() then -- si la mise à jour est possible :
        r:wswrite("Bienvenue dans les websockets!") -- écrit quelque chose à l'intention du client
        r:wsclose()  -- Au revoir !
    end
    r:wsread() -- Lit un cadre de websocket depuis une connexion vers websocket mise à jour (voir ci-dessus) :
               
    local line, isFinal = r:wsread() -- isFinal indique s'il s'agit du cadre final.
                                     -- dans le cas contraire, on peut lire les cadres suivants
    r:wswrite("Vous avez écrit : " .. line)
    r:wswrite(line) -- écrit un cadre vers un client WebSocket :
    r:wswrite("Bonjour le Monde !")
    r:wsclose() -- ferme une requête WebSocket et l'achève pour httpd :
    
    if r:wsupgrade() then
        r:wswrite("Ecrire quelque chose : ")
        local line = r:wsread() or "nothing"
        r:wswrite("Vous avez écrit : " .. line);
        r:wswrite("Au revoir !")
        r:wsclose()
    end
    top

    Fonctions de journalisation

    	-- exemples de messages de journalisation
    	r:trace1("Ceci est un message de journalisation de niveau
    	trace") -- les niveaux valides vont de trace1 à trace8 
            r:debug("Ceci est un message de journalisation de niveau debug")
            r:info("Ceci est un message de journalisation de niveau info")
            r:notice("Ceci est un message de journalisation de niveau notice")
            r:warn("Ceci est un message de journalisation de niveau warn")
            r:err("Ceci est un message de journalisation de niveau err")
            r:alert("Ceci est un message de journalisation de niveau alert")
            r:crit("Ceci est un message de journalisation de niveau crit")
            r:emerg("Ceci est un message de journalisation de niveau emerg")
    top

    Paquet apache2

    Le paquet nommé apache2 est fourni avec (au minimum) le contenu suivant :

    apache2.OK
    Constante interne OK. Les gestionnaires renverront cette valeur s'ils ont traité la requête.
    apache2.DECLINED
    Constante interne DECLINED. Les gestionnaires renverront cette valeur s'ils n'ont pas l'intention de traiter la requête.
    apache2.DONE
    Constante interne DONE.
    apache2.version
    Chaîne contenant la version du serveur HTTP Apache
    apache2.HTTP_MOVED_TEMPORARILY
    Code d'état HTTP
    apache2.PROXYREQ_NONE, apache2.PROXYREQ_PROXY, apache2.PROXYREQ_REVERSE, apache2.PROXYREQ_RESPONSE
    Constantes internes utilisées par mod_proxy
    apache2.AUTHZ_DENIED, apache2.AUTHZ_GRANTED, apache2.AUTHZ_NEUTRAL, apache2.AUTHZ_GENERAL_ERROR, apache2.AUTHZ_DENIED_NO_USER
    constantes internes utilisées par mod_authz_core

    Les autres codes d'état HTTP ne sont pas encore implémentés.

    top

    Modification de contenu avec les filtres lua

    Les fonctions de filtrage implémentées via les directives LuaInputFilter ou LuaOutputFilter sont conçues comme des fonctions de 3ème phase non blocantes utilisant des sous-routines pour suspendre et reprendre l'exécution d'une fonction lorsque des paquets de données sont envoyés à la chaîne de filtrage. La structure de base d'une telle fonction est :

    function filter(r)
        -- Nous indiquons tout d'abord que nous sommes prêts à recevoir des
        -- blocs de données.
        -- Avant ceci, nous pouvons définir notre environnement, tester
        -- certaines conditions, et, si nous le jugeons nécessaire, refuser le
        -- filtrage d'une requête :
        if something_bad then
            return -- Le filtrage est sauté
        end
        -- Sans se préoccuper des données que nous devons éventuellement ajouter, un arrêt est réalisé ici.
        -- Noter que les filtres de sortie sont les seuls capables d'ajouter des éléments au début des données.
        -- Les filtres en entrée peuvent ajouter des éléments à la fin des données au stade final.
    
        coroutine.yield([optional header to be prepended to the content])
    
        -- Après cet arrêt, nous allons recevoir d'autres blocs de données, un par un ;
        -- nous pouvons les traiter comme il nous plaît et procéder à la réponse.
        -- Ces blocs sont conservés dans la variable globale 'bucket', nous réalisons donc
        -- une boucle pour vérifier que 'bucket' n'est pas vide :
        while bucket ~= nil do
            local output = mangle(bucket) -- Do some stuff to the content
            coroutine.yield(output) -- Return our new content to the filter chain
        end
    
        -- Une fois les blocs de données épuisés, 'bucket' est positionné à une valeur vide ('nil'),
        -- ce qui va nous faire sortir de cette boucle et nous amener à l'étape suivante.
        -- On peut ajouter ce qu'on veut à la fin des données à cette étape, qui constitue le dernier
        -- arrêt. Les filtres d'entrée comme de sortie peuvent servir à ajouter des éléments à la fin
        --  des données à cette étape.
        coroutine.yield([optional footer to be appended to the content])
    end
    top

    Connectivité aux bases de données

    Mod_lua implémente une fonctionnalité basique de connexion aux bases de données permettant d'envoyer des requêtes ou d'exécuter des commandes auprès des moteurs de base de données les plus courants (mySQL, PostgreSQL, FreeTDS, ODBC, SQLite, Oracle), ainsi que mod_dbd.

    L'exemple suivant montre comment se connecter à une base de données et extraire des informations d'une table :

    function handle(r)
        -- connexion à la base de données
        local database, err = r:dbacquire("mysql", "server=localhost,user=someuser,pass=somepass,dbname=mydb")
        if not err then
            -- Sélection de certaines informations
            local results, err = database:select(r, "SELECT `name`, `age` FROM `people` WHERE 1")
            if not err then
                local rows = results(0) -- extrait tous les enregistrements en mode synchrone
                for k, row in pairs(rows) do
                    r:puts( string.format("Name: %s, Age: %s<br/>", row[1], row[2]) )
                end
            else
                r:puts("Database query error: " .. err)
            end
            database:close()
        else
            r:puts("Connexion à la base de données impossible : " .. err)
        end
    end

    Pour utiliser mod_dbd, spécifiez mod_dbd comme type de base de données, ou laissez le champ vide :

    local database = r:dbacquire("mod_dbd")

    L'objet database et ses méthodes

    L'objet database renvoyé par dbacquire possède les méthodes suivantes :

    Sélection normale et requête vers une base de données :

    -- Exécution d'une requête et renvoie du nombre d'enregistrements
    affectés :
    local affected, errmsg = database:query(r, "DELETE FROM `tbl` WHERE 1")
    
    -- Exécution d'une requête et renvoie du résultat qui peut être utilisé
    en mode synchrone ou asynchrone :
    local result, errmsg = database:select(r, "SELECT * FROM `people` WHERE 1")

    Utilisation de requêtes préparées (recommandé) :

    -- Création et exécution d'une requête préparée :
    local statement, errmsg = database:prepare(r, "DELETE FROM `tbl` WHERE `age` > %u")
    if not errmsg then
        local result, errmsg = statement:query(20) -- exécute la requête pour age > 20
    end
    
    -- Extrait une requête préparée depuis une directive DBDPrepareSQL :
    local statement, errmsg = database:prepared(r, "someTag")
    if not errmsg then
        local result, errmsg = statement:select("John Doe", 123) -- injecte les valeurs "John Doe" et 123 dans la requête
    end

    Echappement de valeurs, fermeture de la base données, etc...

    -- Echappe une valeur pour pouvoir l'utiliser dans une requête :
    local escaped = database:escape(r, [["'|blabla]])
    
    -- Ferme une base de données et libère les liens vers cette dernière :
    database:close()
    
    -- Vérifie si une connexion à une base de données est en service et
    opérationnelle :
    local connected = database:active()

    Travail avec les jeux d'enregistrements renvoyés par les requêtes

    Les jeux d'enregistrements renvoyés par db:select ou par des requêtes préparées créées par db:prepare permettent de sélectionner des enregistrements en mode synchrone ou asynchrone, selon le nombre d'enregistrements spécifié :
    result(0) sélectionne tous les enregistrements en mode synchrone en renvoyant une table d'enregistrements.
    result(-1) sélectionne le prochain enregistrement disponible en mode asynchrone.
    result(N) sélectionne l'enregistrement numéro N en mode asynchrone.

    -- extrait un jeu d'enregistrements via une requête régulière :
    local result, err = db:select(r, "SELECT * FROM `tbl` WHERE 1")
    
    local rows = result(0) -- sélectionne tous les enregistrements en mode synchrone
    local row = result(-1) -- sélectionne le prochain enregistrement disponible en mode asynchrone
    local row = result(1234) -- sélectionne l'enregistrement 1234 en mode asynchrone
    local row = result(-1, true) -- Lit l'enregistrement suivant en utilisant les noms d'enregistrements comme index.

    Il est possible de construire une fonction qui renvoie une fonction itérative permettant de traiter tous les enregistrement en mode synchrone ou asynchrone selon la valeur de l'argument async :

    function rows(resultset, async)
        local a = 0
        local function getnext()
            a = a + 1
            local row = resultset(-1)
            return row and a or nil, row
        end
        if not async then
            return pairs(resultset(0))
        else
            return getnext, self
        end
    end
    
    local statement, err = db:prepare(r, "SELECT * FROM `tbl` WHERE `age` > %u")
    if not err then
         -- sélectionne des enregistrements en mode asynchrone :
        local result, err = statement:select(20)
        if not err then
            for index, row in rows(result, true) do
                ....
            end
        end
    
         -- sélectionne des enregistrements en mode synchrone :
        local result, err = statement:select(20)
        if not err then
            for index, row in rows(result, false) do
                ....
            end
        end
    end

    Fermeture d'une connexion à une base de données

    Lorsqu'elles ne sont plus utilisées, les connexions aux bases de données doivent être fermées avec database:close(). Si vous ne les fermez pas manuellement, mod_lua les fermera peut-être en tant que résidus collectés, mais si ce n'est pas le cas, vous pouvez finir pas avoir trop de connexions vers la base de données inutilisées. Les deux mesures suivantes sont pratiquement identiques :

    -- Méthode 1 : fermeture manuelle de la connexion
    local database = r:dbacquire("mod_dbd")
    database:close() -- c'est tout
    
    -- Méthode 2 : on laisse le collecteur de résidus la fermer
    local database = r:dbacquire("mod_dbd")
    database = nil -- on coupe le lien
    collectgarbage() -- fermeture de la connexion par le collecteur de résidus

    Précautions à prendre lorsque l'on travaille avec les bases de données

    Bien que les fonctions query et run soient toujours disponibles, il est recommandé d'utiliser des requêtes préparées chaque fois que possible, afin d'une part d'optimiser les performances (si votre connexion reste longtemps en vie), et d'autre part minimiser le risque d'attaques par injection SQL. Les fonctions run et query ne doivent être utilisées que lorsque la requête ne contient pas de variables (requête statique). Dans le cas des requêtes dynamiques, utilisez db:prepare ou db:prepared.

    top

    Directive LuaAuthzProvider

    Description:Branche une fonction fournisseur d'autorisation dans mod_authz_core
    Syntaxe:LuaAuthzProvider provider_name /path/to/lua/script.lua function_name
    Contexte:configuration globale
    Statut:Extension
    Module:mod_lua
    Compatibilité:Disponible depuis la version 2.4.3 du serveur HTTP Apache

    Lorsqu'une fonction lua a été enregistrée en tant que fournisseur d'autorisation, elle peut être appelée via la directive Require :

    LuaRoot "/usr/local/apache2/lua"
    LuaAuthzProvider foo authz.lua authz_check_foo
    <Location "/">
      Require foo johndoe
    </Location>
    require "apache2"
    function authz_check_foo(r, who)
        if r.user ~= who then return apache2.AUTHZ_DENIED
        return apache2.AUTHZ_GRANTED
    end
    top

    Directive LuaCodeCache

    Description:Configure le cache de code compilé.
    Syntaxe:LuaCodeCache stat|forever|never
    Défaut:LuaCodeCache stat
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua

    Cette directive permet de définir le comportement du cache de code en mémoire. La valeur par défaut est stat ; dans ce cas, le script du niveau le plus haut (et pas les scripts inclus) est vérifié à chaque fois que ce fichier est nécessaire, et est rechargé si la date de modification est plus récente que celle du script déjà chargé. Les autres valeurs permettent respectivement de garder le fichier en cache perpétuellement (forever - jamais vérifié ni remplacé), ou de ne jamais le mettre en cache (never).

    En général, les valeurs stat et forever sont utilisées pour un serveur en production, et les valeurs stat ou never pour un serveur en développement.

    Exemples :

    LuaCodeCache stat
    LuaCodeCache forever
    LuaCodeCache never
    top

    Directive LuaHookAccessChecker

    Description:Fournit un point d'entrée pour la phase access_checker du traitement de la requête
    Syntaxe:LuaHookAccessChecker /chemin/vers/lua/script.lua hook_function_name [early|late]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua
    Compatibilité:Le troisième argument optionnel est disponible depuis la version 2.3.15 du serveur HTTP Apache.

    Ajoute votre fonction d'accroche à la phase access_checker. Une fonction d'accroche access checker renvoie en général OK, DECLINED, ou HTTP_FORBIDDEN.

    Ordonnancement

    Les arguments optionnels "early" ou "late" permettent de contrôler le moment auquel ce script s'exécute par rapport aux autres modules.

    top

    Directive LuaHookAuthChecker

    Description:Fournit un point d'entrée pour la phase auth_checker du traitement de la requête
    Syntaxe:LuaHookAuthChecker /chemin/vers/lua/script.lua hook_function_name [early|late]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua
    Compatibilité:Le troisième argument optionnel est disponible depuis la version 2.3.15 du serveur HTTP Apache.

    Invoque une fonction lua au cours de la phase auth_checker du traitement de la requête. Cette directive peut s'utiliser pour implémenter une vérification arbitraire de l'authentification et de l'autorisation. Voici un exemple très simple :

    require 'apache2'
    
    -- fonction d'accroche authcheck fictive
    -- Si la requête ne contient aucune donnée d'authentification, l'en-tête
    -- de la réponse est défini et un code 401 est renvoyé afin de demander au
    -- navigateur d'effectuer une authentification basique. Si la requête
    -- comporte des données d'authentification, elles ne sont pas vraiment
    -- consultées, mais on admet la prise en compte de l'utilisateur 'foo' et
    -- on la valide. On vérifie ensuite si l'utilisateur est bien 'foo' et on
    -- accepte la requête.
    function authcheck_hook(r)
    
       -- recherche des informations d'authentification
       auth = r.headers_in['Authorization']
       if auth ~= nil then
         -- définition d'un utilisateur par défaut
         r.user = 'foo'
       end
    
       if r.user == nil then
          r:debug("authcheck: user is nil, returning 401")
          r.err_headers_out['WWW-Authenticate'] = 'Basic realm="WallyWorld"'
          return 401
       elseif r.user == "foo" then
          r:debug('user foo: OK')
       else
          r:debug("authcheck: user='" .. r.user .. "'")
          r.err_headers_out['WWW-Authenticate'] = 'Basic realm="WallyWorld"'
          return 401
       end
       return apache2.OK
    end

    Ordonnancement

    Les arguments optionnels "early" ou "late" permettent de contrôler le moment auquel ce script s'exécute par rapport aux autres modules.

    top

    Directive LuaHookCheckUserID

    Description:Fournit un point d'entrée pour la phase check_user_id du traitement de la requête
    Syntaxe:LuaHookCheckUserID /chemin/vers/lua/script.lua hook_function_name [early|late]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua
    Compatibilité:Le troisième argument optionnel est disponible depuis la version 2.3.15 du serveur HTTP Apache.

    ...

    Ordonnancement

    Les arguments optionnels "early" ou "late" permettent de contrôler le moment auquel ce script s'exécute par rapport aux autres modules.

    top

    Directive LuaHookFixups

    Description:Fournit un point d'entrée pour la phase de correction du traitement de la requête
    Syntaxe:LuaHookFixups /chemin/vers/lua/script.lua hook_function_name
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua

    Idem LuaHookTranslateName, mais s'exécute durant la phase de correction.

    top

    Directive LuaHookInsertFilter

    Description:Fournit un point d'entrée pour la phase insert_filter du traitement de la requête
    Syntaxe:LuaHookInsertFilter /chemin/vers/lua/script.lua hook_function_name
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua

    Non encore implémenté

    top

    Directive LuaHookLog

    Description:Permet une insertion dans la phase de journalisation du traitement d'une requête
    Syntaxe:LuaHookLog /path/to/lua/script.lua log_function_name
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua

    Ce dispositif d'insertion simple permet d'exécuter une fonction lorsque httpd entre dans la phase de journalisation du traitement d'une requête. Vous pouvez ainsi ajouter des données à vos propres entrées de journalisation, manipuler les entrées du journal standard avant leur enregistrement ou empêcher l'enregistrement d'une entrée dans le journal. Pour empêcher l'enregistrement normal des entrées du journal, renvoyez simplement apache2.DONE dans votre gestionnaire de journalisation, ou au contraire, renvoyez apache2.OK pour que httpd effectue une journalisation normale.

    Exemple :

    LuaHookLog "/path/to/script.lua" logger
    -- /path/to/script.lua --
    function logger(r)
        -- on joue à pile ou face :
        -- Si on obtient 1, on écrit dans notre propre journal Lua et on dit
        -- à httpd de ne pas enregistrer d'entrée dans le journal standard..
        -- Si on obtient 2, on nettoie un peu les données avant que httpd ne
        -- les enregistre dans le journal standard.
    
        if math.random(1,2) == 1 then
            -- On effectue notre propre journalisation et le journal
    	-- standard n'est pas alimenté
            local f = io.open("/foo/secret.log", "a")
            if f then
                f:write("Quelque chose de secret est arrivé à " .. r.uri .. "\n")
                f:close()
            end
            return apache2.DONE -- On dit à httpd de ne rien enregistrer
    			    --dans le journal standard
        else
            r.uri = r.uri:gsub("somesecretstuff", "") -- nettoie les données
            return apache2.OK -- et httpd doit alors les enregistrer.
        end
    end
    top

    Directive LuaHookMapToStorage

    Description:Fournit un point d'entrée pour la phase map_to_storage du traitement de la requête
    Syntaxe:LuaHookMapToStorage /chemin/vers/lua/script.lua hook_function_name
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua

    Identique à la directive LuaHookTranslateName, mais s'exécute à la phase map-to-storage du traitement de la requête. Les modules comme mod_cache agissent pendant cette phase, ce qui permet de présenter un exemple intéressant de ce que l'on peut faire ici :

    LuaHookMapToStorage "/path/to/lua/script.lua" check_cache
    require"apache2"
    cached_files = {}
    
    function read_file(filename)
        local input = io.open(filename, "r")
        if input then
            local data = input:read("*a")
            cached_files[filename] = data
            file = cached_files[filename]
            input:close()
        end
        return cached_files[filename]
    end
    
    function check_cache(r)
        if r.filename:match("%.png$") then -- Ne concerne que les fichiers PNG
            local file = cached_files[r.filename] -- Vérifie les entrées du cache
            if not file then
                file = read_file(r.filename)  -- Lit le fichier vers le cache
            end
            if file then -- Si le fichier existe, on l'envoie
                r.status = 200
                r:write(file)
                r:info(("%s a été envoyé au client depuis le cache"):format(r.filename))
                return apache2.DONE -- cout-circuite le gestionnaire par défaut des fichiers PNG
            end
        end
        return apache2.DECLINED -- Si nous n'avons rien eu à faire, nous laissons les autres s'en charger
    end
    top

    Directive LuaHookTranslateName

    Description:Fournit un point d'entrée à la phase du nom de traduction du traitement de la requête
    Syntaxe:LuaHookTranslateName /chemin/vers/lua/script.lua nom_fonction_hook [early|late]
    Contexte:configuration globale, serveur virtuel
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua
    Compatibilité:Le troisième argument optionnel est disponible depuis la version 2.3.15 du serveur HTTP Apache.

    Cette directive permet d'ajouter un point d'entrée (à APR_HOOK_MIDDLE) à la phase du nom de traduction du traitement de la requête. La fonction hook accepte un seul argument, le request_rec, et doit renvoyer un code d'état qui est soit un code d'erreur HTTP, ou une constante définie dans le module apache2 : apache2.OK, apache2.DECLINED, ou apache2.DONE.

    Pour ceux qui ne sont pas familiers avec les points d'entrée (hook), en gros, chaque hook sera invoqué jusqu'à ce que l'un d'entre eux renvoie apache2.OK. Si un hook n'effectuer pas la traduction, il doit juste renvoyer apache2.DECLINED. Si le traitement de la requête doit être interrompu, la valeur renvoyée doit être apache2.DONE.

    Exemple :

    # httpd.conf
    LuaHookTranslateName "/scripts/conf/hooks.lua" silly_mapper
    -- /scripts/conf/hooks.lua --
    require "apache2"
    function silly_mapper(r)
        if r.uri == "/" then
            r.filename = "/var/www/home.lua"
            return apache2.OK
        else
            return apache2.DECLINED
        end
    end

    Contexte

    Cette directive ne peut être utilisée ni à l'intérieur d'une section <Directory> ou <Files>, ni dans un fichier htaccess.

    Ordonnancement

    Les arguments optionnels "early" ou "late" permettent de contrôler le moment auquel ce script s'exécute par rapport aux autres modules.

    top

    Directive LuaHookTypeChecker

    Description:Fournit un point d'entrée pour la phase type_checker du traitement de la requête
    Syntaxe:LuaHookTypeChecker /chemin/vers/lua/script.lua hook_function_name
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua

    Cette directive fournit un point d'entrée pour la phase type_checker du traitement de la requête. Cette phase correspond au moment où la requête se voit assigner un type et un gestionnaire de contenu, et peut donc être utilisée pour modifier le type et le gestionnaire en fonction de l'entrée :

    LuaHookTypeChecker "/path/to/lua/script.lua" type_checker
        function type_checker(r)
            if r.uri:match("%.to_gif$") then -- foo.png.to_gif convient
                r.content_type = "image/gif" -- affectation du type image/gif
                r.handler = "gifWizard"      -- force le traitement de la requête par le module gifWizard
                r.filename = r.uri:gsub("%.to_gif$", "") -- corrige le nom du fichier demandé
                return apache2.OK
            end
    
            return apache2.DECLINED
        end
    top

    Directive LuaInherit

    Description:Contrôle la manière dont les sections de configuration parentes sont fusionnées dans les enfants
    Syntaxe:LuaInherit none|parent-first|parent-last
    Défaut:LuaInherit parent-first
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua
    Compatibilité:Versions 2.4.0 et supérieures

    Par défaut, si des directives LuaHook* se trouvent dans des sections de configuration Directory ou Location qui se chevauchent, les scripts définis dans les sections les plus spécifiques s'exécutent après ceux définis dans les sections plus génériques (LuaInherit parent-first). Vous pouvez inverser cet ordre, ou faire en sorte que le contexte parent ne s'applique pas du tout.

    Jusqu'aux versions 2.3.x, le comportement par défaut consistait à ignorer les directives LuaHook* situées dans les sections de configuration parentes.

    top

    Directive LuaInputFilter

    Description:Fournit une fonction Lua pour le filtrage en entrée
    Syntaxe:LuaInputFilter filter_name /path/to/lua/script.lua function_name
    Contexte:configuration globale
    Statut:Extension
    Module:mod_lua
    Compatibilité:Disponible depuis la version 2.4.5 du serveur HTTP Apache

    Cette directive permet d'ajouter un filtre en entrée sous la forme d'une fonction Lua. A l'instar des filtres en sorties, les filtres en entrée fonctionnent comme des sous-routines, intervenant dans un premier temps avant l'envoi du contenu des tampons, puis chaque fois qu'un paquet de données doit être transmis à la chaîne, et éventuellement produisant toute donnée à ajouter aux données en entrée. La variable globale bucket contient les paquets de données tels qu'ils sont transmis au script Lua :

    LuaInputFilter myInputFilter "/www/filter.lua" input_filter
    <Files "*.lua">
      SetInputFilter myInputFilter
    </Files>
    --[[
        Exemple de filtre en entrée qui convertit toutes les données POST en
        majuscules.
    ]]--
    function input_filter(r)
        print("luaInputFilter called") -- pour débogage
        coroutine.yield() -- attend des paquets de données
        while bucket do -- Pour chaque paquet, faire ...
            local output = string.upper(bucket) -- Convertit toutes les données POST en majuscules
            coroutine.yield(output) -- Envoie les données traitées à la chaîne de filtrage
        end
        -- plus aucune donnée à traiter.
        coroutine.yield("&filterSignature=1234") -- Ajoute une signature à la fin
    end

    Le filtre en entrée peut interdire ou sauter un filtre s'il est considéré comme indésirable :

    function input_filter(r)
        if not good then
            return -- Empêche tout simplement le filtrage et transmet le contenu original
        end
        coroutine.yield() -- attend des paquets de données
        ...               -- insert les filtres ici
    end

    Voir "Modification de contenu avec les filtres Lua" pour plus de détails.

    top

    Directive LuaMapHandler

    Description:Met en correspondance un chemin avec un gestionnaire lua
    Syntaxe:LuaMapHandler modele-uri /chemin/vers/lua/script.lua [nom-fonction]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua

    Cette directive permet de faire correspondre un modèle d'uri avec une fonction de gestionnaire située dans un fichier spécifique. Elle utilise les expressions rationnelles PCRE pour mettre en correspondance l'uri, et supporte les groupes de correspondance d'interpolation dans le chemin du fichier et le nom de la fonction. Prenez garde aux problèmes de sécurité en écrivant vos expressions rationnelles.

    Exemples :

    LuaMapHandler "/(\w+)/(\w+)" "/scripts/$1.lua" "handle_$2"

    Cette directive va faire correspondre des uri comme /photos/show?id=9 au fichier /scripts/photos.lua, et invoquera la fonction de gestionnaire handle_show au niveau de la vm lua après chargement de ce fichier.

    LuaMapHandler "/bingo" "/scripts/wombat.lua"

    Cette directive invoquera la fonction "handle" qui est la valeur par défaut si aucun nom de fonction spécifique n'est spécifié.

    top

    Directive LuaOutputFilter

    Description:Fournit une fonction Lua pour le filtrage de contenu en sortie
    Syntaxe:LuaOutputFilter filter_name /path/to/lua/script.lua function_name
    Contexte:configuration globale
    Statut:Extension
    Module:mod_lua
    Compatibilité:Disponible à partir de la version 2.4.5 du serveur HTTP Apache

    >Cette directive permet d'ajouter un filtre en sortie sous la forme d'une fonction Lua. A l'instar des filtres en sorties, les filtres en entrée fonctionnent comme des sous-routines, intervenant dans un premier temps avant l'envoi du contenu des tampons, puis chaque fois qu'un paquet de données doit être transmis à la chaîne, et éventuellement produisant toute donnée à ajouter aux données en sortie. La variable globale bucket contient les paquets de données tels qu'ils sont transmis au script Lua :

    LuaOutputFilter myOutputFilter "/www/filter.lua" output_filter
    <Files "*.lua">
      SetOutputFilter myOutputFilter
    </Files>
    --[[
        Exemple de filtre en sortie qui échappe toutes les entités HTML en
        sortie
    ]]--
    function output_filter(r)
        coroutine.yield("(Handled by myOutputFilter)<br/>\n") -- Ajoute des données au début de la sortie,
                                                                    -- puis attend des paquets de données à traiter
        while bucket do -- Pour chaque paquet, faire ...
            local output = r:escape_html(bucket) -- Echappe les données en sortie
            coroutine.yield(output) -- Envoie les données traitées à la chaîne
        end
        -- plus aucune donnée à traiter.
    end

    Comme les filres en entrée, le filtre en sortie peut interdire ou sauter un filtre s'il est considéré comme indésirable :

    function output_filter(r)
        if not r.content_type:match("text/html") then
            return -- Empêche tout simplement le filtrage et transmet le contenu original
        end
        coroutine.yield() -- attend des paquets de données
        ...               -- insert les filtres ici
    end

    Les filtres Lua avec mod_filter

    Lorsqu'on utilise un filtre Lua comme fournisseur sous-jacent via la directive FilterProvider, le filtrage ne fonctionnera que si filter-name est identique à provider-name.

    Voir "Modification de contenu avec les filtres Lua" pour plus de détails.

    top

    Directive LuaPackageCPath

    Description:Ajoute un répertoire au package.cpath de lua
    Syntaxe:LuaPackageCPath /chemin/vers/include/?.soa
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua

    Cette directive permet d'ajouter un chemin à la liste des chemins de recherche des bibliothèques partagées de lua. Ceci modifie le package.cpath dans les vms lua.

    top

    Directive LuaPackagePath

    Description:Ajoute un répertoire au package.path de lua
    Syntaxe:LuaPackagePath /chemin/vers/include/?.lua
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua

    Cette directive permet d'ajouter un chemin à la liste des chemins de recherche du module lua. Elle suit les mêmes conventions que lua. Ceci modifie le package.path dans les vms lua.

    Exemples :

    LuaPackagePath "/scripts/lib/?.lua"
    LuaPackagePath "/scripts/lib/?/init.lua"
    top

    Directive LuaQuickHandler

    Description:Fournit un point d'entrée pour la gestion rapide du traitement de la requête
    Syntaxe:LuaQuickHandler /path/to/script.lua hook_function_name
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua

    Cette phase s'exécute juste après l'attribution de la requête à un serveur virtuel, et permet d'effectuer certains traitements avant le déroulement des autres phases, ou de servir une requête sans avoir à la traduire, l'associer à un espace de stockage, etc... Comme cette phase s'exécute avant toute autre, les directives telles que <Location> ou <Directory> ne sont pas encore prises en compte, car Les URI n'ont pas encore été entièrement interprétés.

    Contexte

    Cette directive ne peut être utilisée ni à l'intérieur d'une section <Directory> ou <Files>, ni dans un fichier htaccess.

    top

    Directive LuaRoot

    Description:Spécifie le chemin de base pour la résolution des chemins relatifs dans les directives de mod_lua
    Syntaxe:LuaRoot /chemin/vers/un/répertoire
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua

    Cette directive permet de spécifier le chemin de base qui sera utilisé pour évaluer tous les chemins relatifs dans mod_lua. En l'absence de cette directive, les chemins relatifs sont résolus par rapport au répertoire de travail courant, ce qui ne sera pas toujours approprié pour un serveur.

    top

    Directive LuaScope

    Description:Une valeur parmi once, request, conn, thread -- la valeur par défaut est once
    Syntaxe:LuaScope once|request|conn|thread|server [min] [max]
    Défaut:LuaScope once
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Extension
    Module:mod_lua

    Cette directive permet de spécifier la durée de vie de l'interpréteur Lua qui sera utilisé dans ce "répertoire". La valeur par défaut est "once".

    once:
    utilise l'interpréteur une fois.
    request:
    utilise l'interpréteur pour traiter tout ce qui est basé sur le même fichier dans la requête, et qui se trouve aussi dans la portée de la requête.
    conn:
    idem request, mais attaché à connection_rec
    thread:
    Utilise l'interpréteur pendant toute la durée de vie du thread qui traite la requête (disponible seulement avec les MPMs threadés).
    server:
    Le comportement est ici différent, car la portée du serveur présente une durée de vie assez longue, et plusieurs threads vont partager le même server_rec. Pour gérer tout ceci, les états lua du serveur sont stockés dans une liste de ressources apr. Les arguments min et max permettent de spécifier les nombres minimaux et maximaux d'états lua à stocker dans la liste.

    En général, les portées thread et server sont 2 à 3 fois plus rapides que les autres, car elles n'ont pas besoin de régénérer de nouveaux états Lua à chaque requête (comme c'est le cas avec le MPM event, où même les connexions persistantes utilisent un nouveau thread pour chaque requête). Si vous pensez que vos scripts n'auront pas de problème s'il réutilisent un état, alors les portées thread ou server doivent être utilisées car elles présenteront de meilleures performances. Alors que la portée thread fournira les réponses les plus rapides, la portée server utilisera moins de mémoire car les états sont rassemblés dans des jeux, permettant par exemple à 1000 threads de partager 100 états Lua, ne nécessitant ainsi que 10% de la mémoire requise par la portée thread.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cgid.html.ja.utf80000644000000000000500000003026313412755316020144 0ustar rootsrc mod_cgid - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_cgid

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:外部 CGI デーモンを使ã£ãŸ CGI スクリプトã®å®Ÿè¡Œ
    ステータス:Base
    モジュール識別å­:cgid_module
    ソースファイル:mod_cgid.c
    äº’æ›æ€§:Unix ã®ã‚¹ãƒ¬ãƒƒãƒ‰ MPM ã®ã¿

    概è¦

    最é©åŒ–ãŒæ–½ã•れã¦ã„ã‚‹ã“ã¨ã¨ã€ä»¥ä¸‹ã§èª¬æ˜Žã•れã¦ã„る追加㮠ScriptSock ディレクティブを除ã„ã¦ã¯ã€ mod_cgid 㯠mod_cgi ã¨åŒæ§˜ã® 動作をã—ã¾ã™ã€‚Apache 㨠CGI ã«é–¢ã™ã‚‹è©³ç´°ã¯ mod_cgi ã®æ¦‚è¦ã‚’読んã§ãã ã•ã„。

    Unix オペレーティングシステムã®ä¸­ã«ã¯ã€ãƒžãƒ«ãƒã‚¹ãƒ¬ãƒƒãƒ‰ã®ã‚µãƒ¼ãƒã‹ã‚‰ プロセスを fork ã™ã‚‹ã®ãŒéžå¸¸ã«ã‚³ã‚¹ãƒˆã®é«˜ã„動作ã«ãªã£ã¦ã„ã‚‹ã‚‚ã®ãŒã‚りã¾ã™ã€‚ ç†ç”±ã¯ã€æ–°ã—ã„プロセスãŒè¦ªãƒ—ロセスã®ã‚¹ãƒ¬ãƒƒãƒ‰ã™ã¹ã¦ã‚’複製ã™ã‚‹ã‹ã‚‰ã§ã™ã€‚ å„ CGI 起動時ã«ã“ã®ã‚³ã‚¹ãƒˆãŒã‹ã‹ã‚‹ã®ã‚’防ããŸã‚ã«ã€mod_cgid ã¯å­ãƒ—ロセスを fork ã—㦠CGI スクリプトを実行ã™ã‚‹ãŸã‚㮠外部デーモンを実行ã—ã¾ã™ã€‚ 主サーãƒã¯ unix ドメインソケットを使ã£ã¦ã“ã®ãƒ‡ãƒ¼ãƒ¢ãƒ³ã¨é€šä¿¡ã—ã¾ã™ã€‚

    コンパイル時ã«ãƒžãƒ«ãƒã‚¹ãƒ¬ãƒƒãƒ‰ MPM ãŒé¸ã°ã‚ŒãŸã¨ã㯠mod_cgi ã®ä»£ã‚りã«å¿…ãšã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒä½¿ç”¨ã•れã¾ã™ã€‚ ユーザã®ãƒ¬ãƒ™ãƒ«ã§ã¯ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®è¨­å®šã¨å‹•作㯠mod_cgi ã¨ã¾ã£ãŸãåŒã˜ã§ã™ã€‚唯一ã®ä¾‹å¤–㯠ScriptSock ディレクティブ㮠追加ã§ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠CGI デーモンã¨ã®é€šä¿¡ç”¨ã®ã‚½ã‚±ãƒƒãƒˆã®åå‰ã‚’ 指定ã—ã¾ã™ã€‚

    top

    CGIDScriptTimeout ディレクティブ

    説明:The length of time to wait for more output from the CGI program
    æ§‹æ–‡:CGIDScriptTimeout time[s|ms]
    デフォルト:value of Timeout directive when unset
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    ステータス:Base
    モジュール:mod_cgid
    äº’æ›æ€§:CGIDScriptTimeout defaults to zero in releases 2.4 and earlier

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    ScriptSock ディレクティブ

    説明:CGI デーモンã¨ã®é€šä¿¡ã«ä½¿ã‚れるソケットã®ãƒ•ァイルåã®æŽ¥é ­è¾ž
    æ§‹æ–‡:ScriptSock file-path
    デフォルト:ScriptSock logs/cgisock
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Base
    モジュール:mod_cgid

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠CGI デーモンã¨ã®é€šä¿¡ã«ä½¿ã‚れるソケット㮠ファイルåã®æŽ¥é ­è¾žã‚’è¨­å®šã—ã¾ã™ã€‚ã¾ãŸã€ãƒ•ァイルåã«ã¯ã‚µãƒ¼ãƒã®ãƒ—ロセスID㌠追加ã•れã¾ã™ã€‚ソケット㯠Apache ãŒèµ·å‹•ã•れãŸãƒ¦ãƒ¼ã‚¶ (通常 root) 㮠パーミッションを用ã„ã¦ã‚ªãƒ¼ãƒ—ンã•れã¾ã™ã€‚CGI スクリプトã¨ã®é€šä¿¡ã® セキュリティをä¿ã¤ãŸã‚ã«ã€ã‚½ã‚±ãƒƒãƒˆã®å­˜åœ¨ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã« ä»–ã®ãƒ¦ãƒ¼ã‚¶ãŒæ›¸ãè¾¼ã¿æ¨©é™ã‚’æŒã£ã¦ã„ãªã„よã†ã«ã™ã‚‹ã“ã¨ãŒé‡è¦ã§ã™ã€‚

    例

    ScriptSock /var/run/cgid.sock

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_session_crypto.html.fr.utf80000644000000000000500000004643613503452341022340 0ustar rootsrc mod_session_crypto - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_session_crypto

    Langues Disponibles:  en  |  fr 

    Description:Support du chiffrement des sessions
    Statut:Expérimental
    Identificateur de Module:session_crypto_module
    Fichier Source:mod_session_crypto.c
    Compatibilité:Disponible depuis la version 2.3 d'Apache

    Sommaire

    Avertissement

    Les modules de session font usage des cookies HTTP, et peuvent à ce titre être victimes d'attaques de type Cross Site Scripting, ou divulguer des informations à caractère privé aux clients. Veuillez vous assurer que les risques ainsi encourus ont été pris en compte avant d'activer le support des sessions sur votre serveur.

    Ce sous-module du module mod_session fournit le support du chiffrement des sessions utilisateur avant de les enregistrer dans une base de données locale, ou dans un cookie HTTP au niveau du navigateur distant.

    Il peut contribuer à préserver la confidentialité des sessions lorsque leur contenu doit rester privé pour l'utilisateur, ou lorsqu'une protection contre les attaques de type cross site scripting est nécessaire.

    Pour plus de détails à propos de l'interface des sessions, voir la documentation du module mod_session.

    top

    Utilisation de base

    Pour créer une session chiffrée et la stocker dans un cookie nommé session, configurez la comme suit :

    Session chiffrée stockée au niveau du serveur

    Session On
    SessionCookieName session path=/
    SessionCryptoPassphrase secret

    La session sera chiffrée avec la clé spécifiée. Il est possible de configurer plusieurs serveurs pour qu'ils puissent partager des sessions, en s'assurant que la même clé de chiffrement est utilisée sur chaque serveur.

    Si la clé de chiffrement est modifiée, les sessions seront automatiquement invalidées.

    Pour des détails sur la manière dont une session peut être utilisée pour stocker des informations de type nom d'utilisateur/mot de passe, voir la documentation du module mod_auth_form.

    top

    Directive SessionCryptoCipher

    Description:L'algorithme à utiliser pour le chiffrement de la session
    Syntaxe:SessionCryptoCipher algorithme
    Défaut:SessionCryptoCipher aes256
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Expérimental
    Module:mod_session_crypto
    Compatibilité:Disponible depuis la version 2.3.0 du serveur HTTP Apache

    La directive SessionCryptoCipher permet de spécifier l'algorithme à utiliser pour le chiffrement. En l'absence de spécification, l'algorithme par défaut est aes256.

    L'algorithme peut être choisi, en fonction du moteur de chiffrement utilisé, parmi les valeurs suivantes :

    • 3des192
    • aes128
    • aes192
    • aes256
    top

    Directive SessionCryptoDriver

    Description:Le pilote de chiffrement à utiliser pour chiffrer les sessions
    Syntaxe:SessionCryptoDriver nom [param[=valeur]]
    Défaut:aucun
    Contexte:configuration globale
    Statut:Expérimental
    Module:mod_session_crypto
    Compatibilité:Disponible depuis la version 2.3.0 d'Apache

    La directive SessionCryptoDriver permet de spécifier le nom du pilote à utiliser pour le chiffrement. Si aucun pilote n'est spécifié, le pilote utilisé par défaut sera le pilote recommandé compilé avec APR-util.

    Le pilote de chiffrement NSS nécessite certains paramètres de configuration, qui seront spécifiés comme arguments de la directive avec des valeurs optionnelles après le nom du pilote.

    NSS sans base de données de certificats

    SessionCryptoDriver nss

    NSS avec base de données de certificats

    SessionCryptoDriver nss dir=certs

    NSS avec base de données de certificats et paramètres

    SessionCryptoDriver nss dir=certs clé3=clé3.db cert7=cert7.db secmod=secmod

    NSS avec chemins contenant des espaces

    SessionCryptoDriver nss "dir=My Certs" key3=key3.db cert7=cert7.db secmod=secmod

    Le pilote de chiffrement NSS peut avoir été configuré au préalable dans une autre partie du serveur, par exemple depuis mod_nss ou mod_ldap. Si c'est le cas, un avertissement sera enregistré dans le journal, et la configuration existante s'en trouvera affectée. Pour éviter cet avertissement, utilisez le paramètre noinit comme suit :

    NSS avec base de données de certificats

    SessionCryptoDriver nss noinit

    Pour éviter la confusion, assurez-vous que tous les modules utilisant NSS soient configurés avec des paramètres identiques.

    Le pilote de chiffrement openssl accepte un paramètre optionnel permettant de spécifier le moteur de chiffrement à utiliser.

    OpenSSL avec spécification du moteur de chiffrement

    SessionCryptoDriver openssl engine=nom-moteur
    top

    Directive SessionCryptoPassphrase

    Description:La clé utilisée pour chiffrer la session
    Syntaxe:SessionCryptoPassphrase secret [ secret ... ]
    Défaut:none
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Expérimental
    Module:mod_session_crypto
    Compatibilité:Disponible depuis la version 2.3.0 d'Apache

    La directive SessionCryptoPassphrase permet de spécifier les clés à utiliser pour chiffrer de manière symétrique le contenu de la session avant de l'enregistrer, ou pour déchiffrer le contenu de la session après sa lecture.

    L'utilisation de clés longues et composées de caractères vraiment aléatoires est plus performant en matière de sécurité. Modifier une clé sur un serveur a pour effet d'invalider toutes les sessions existantes.

    Il est possible de spécifier plusieurs clés afin de mettre en oeuvre la rotation de clés. La première clé spécifiée sera utilisée pour le chiffrement, alors que l'ensemble des clés spécifiées le sera pour le déchiffrement. Pour effectuer une rotation périodique des clés sur plusieurs serveurs, ajoutez une nouvelle clé en fin de liste, puis, une fois la rotation complète effectuée, supprimez la première clé de la liste.

    Depuis la version 2.4.7, si la valeur de l'argument commence par exec: , la commande spécifiée sera exécutée, et la première ligne que cette dernière renverra sur la sortie standard sera utilisée comme clé.

    # clé spécifiée et utilisée en tant que tel
    SessionCryptoPassphrase secret
    
    # exécution de /path/to/program pour générer la clé
    SessionCryptoPassphrase exec:/path/to/program
    
    # exécution de /path/to/program avec un argument pour générer la clé
    SessionCryptoPassphrase "exec:/path/to/otherProgram argument1"
    top

    Directive SessionCryptoPassphraseFile

    Description:Le fichier contenant les clés utilisées pour chiffrer la session
    Syntaxe:SessionCryptoPassphraseFile nom-fichier
    Défaut:none
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Expérimental
    Module:mod_session_crypto
    Compatibilité:Disponible depuis la version 2.3.0 du serveur HTTP Apache

    La directive SessionCryptoPassphraseFile permet de spécifier le nom d'un fichier de configuration contenant les clés à utiliser pour le chiffrement et le déchiffrement de la session (une clé par ligne). Le fichier est lu au démarrage du serveur, et un redémarrage graceful est nécessaire pour prendre en compte un éventuel changement de clés.

    À la différence de la directive SessionCryptoPassphrase, les clés ne sont pas présentes dans le fichier de configuration de httpd et peuvent être cachées via une protection appropriée du fichier de clés.

    Il est possible de spécifier plusieurs clés afin de mettre en oeuvre la rotation de clés. La première clé spécifiée sera utilisée pour le chiffrement, alors que l'ensemble des clés spécifiées le sera pour le déchiffrement. Pour effectuer une rotation périodique des clés sur plusieurs serveurs, ajoutez une nouvelle clé en fin de liste, puis, une fois la rotation complète effectuée, supprimez la première clé de la liste.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_expires.html.ko.euc-kr0000644000000000000500000003612513412755316021237 0ustar rootsrc mod_expires - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_expires

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:»ç¿ëÀÚ°¡ ÁöÁ¤ÇÑ ±âÁØ¿¡ µû¶ó Expires¿Í Cache-Control HTTP Çì´õ¸¦ »ý¼ºÇÑ´Ù
    »óÅÂ:Extension
    ¸ðµâ¸í:expires_module
    ¼Ò½ºÆÄÀÏ:mod_expires.c

    ¿ä¾à

    ÀÌ ¸ðµâÀº ¼­¹ö ÀÀ´äÀÇ Expires HTTP Çì´õ¿Í Cache-Control HTTP Çì´õÀÇ max-age Áö½Ã¾î ¼³Á¤À» Á¶ÀýÇÑ´Ù. ¸¸±âÀÏÀ» ÆÄÀÏÀÌ ¸¶Á÷¸· ¼öÁ¤µÈ ½Ã°£ ȤÀº Ŭ¶óÀÌ¾ðÆ®°¡ Á¢¼ÓÇÑ ½Ã°£¿¡ »ó´ëÀûÀ¸·Î ¼³Á¤ÇÒ ¼ö ÀÖ´Ù.

    ÀÌ HTTP Çì´õµéÀº Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ¹®¼­ÀÇ À¯È¿¼º°ú Áö¼Ó¼ºÀ» ¾Ë·ÁÁØ´Ù. ÀÌ ½Ã°£ÀÌ ¾ÆÁ÷ Áö³ªÁö¾Ê¾Ò´Ù¸é, ¹®¼­¸¦ ij½¬¿¡¼­ °¡Á®¿Íµµ µÈ´Ù. ¸¸±âÀÏÀÌ Áö³µ´Ù¸é ij½¬µÈ °ÍÀ» "¸¸·áµÇ°í" À¯È¿ÇÏÁö ¾Ê´Ù°í °£ÁÖÇÏ¿©, ¼Ò½º¿¡¼­ ¹®¼­¸¦ »õ·Î ¾ò¾î¿Í¾ß ÇÑ´Ù.

    Header Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© max-age ¿ÜÀÇ ´Ù¸¥ Cache-Control Áö½Ã¾î(RFC 2616, 14.9 Àý Âü°í)¸¦ ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù.

    top

    ´Ù¸¥ ³»ºÎ ¹®¹ý

    ExpiresDefault¿Í ExpiresByType Áö½Ã¾î¸¦ ´õ Àбâ ÁÁÀº Çü½ÄÀ¸·Î ±â¼úÇÒ ¼ö ÀÖ´Ù:

    ExpiresDefault "<base> [plus] {<num> <type>}*"
    ExpiresByType type/encoding "<base> [plus] {<num> <type>}*"

    <base>´Â ´ÙÀ½Áß ÇϳªÀÌ´Ù:

    • access
    • now ('access'¿Í °°À½)
    • modification

    plus Ű¿öµå´Â ¾ø¾îµµ µÈ´Ù. <num>Àº [atoi()¿¡ »ç¿ëÇÒ ¼ö ÀÖ´Â] Á¤¼ö°ªÀÌ´Ù. <type>Àº ´ÙÀ½Áß ÇϳªÀÌ´Ù:

    • years
    • months
    • weeks
    • days
    • hours
    • minutes
    • seconds

    ¿¹¸¦ µé¾î, ´ÙÀ½ ¸ðµÎ´Â ¹®¼­°¡ ±âº»ÀûÀ¸·Î Á¢¼ÓµÈÁö 1´ÞÈÄ¿¡ ¸¸±âµÈ´Ù°í ¼³Á¤ÇÑ´Ù:

    ExpiresDefault "access plus 1 month"
    ExpiresDefault "access plus 4 weeks"
    ExpiresDefault "access plus 30 days"

    '<num> <type>' ±¸¹®À» ¹Ýº¹Çؼ­ »ç¿ëÇÏ¿© ¸¸±â½Ã°£À» ÀÚ¼¼È÷ ¼³Á¤ÇÒ ¼ö ÀÖ´Ù:

    ExpiresByType text/html "access plus 1 month 15 days 2 hours"
    ExpiresByType image/gif "modification plus 5 hours 3 minutes"

    ¸¸¾à ¼öÁ¤½Ã°£(modification)À» ±âÁØÀ¸·Î ¸¸±â½Ã°£À» ¼³Á¤ÇÏ´Â °æ¿ì ³»¿ëÀ» µð½ºÅ©¿¡ ÀÖ´Â ÆÄÀÏ¿¡¼­ °¡Á®¿ÀÁö ¾Ê´Â´Ù¸é Expires Çì´õ¸¦ ºÙÀÌÁö ¾Ê´Â´Ù. ÀÌ °æ¿ì ³»¿ë¿¡ ¼öÁ¤½Ã°£ÀÌ ¾ø±â ¶§¹®ÀÌ´Ù.

    top

    ExpiresActive Áö½Ã¾î

    ¼³¸í:Expires Çì´õ¸¦ »ý¼ºÇÑ´Ù
    ¹®¹ý:ExpiresActive On|Off
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Extension
    ¸ðµâ:mod_expires

    ÀÌ Áö½Ã¾î´Â ÇØ´ç ¿µ¿ª¿¡ ´ëÇØ (Áï, .htaccess ÆÄÀÏ¿¡¼­ »ç¿ëÇÑ´Ù¸é ±× µð·ºÅ丮 ¾Æ·¡¿¡ ÀÖ´Â ¹®¼­µé¸¸ ÇØ´çµÈ´Ù.) Expires¿Í Cache-Control Çì´õ¸¦ »ý¼ºÇÒÁö À¯¹«¸¦ °áÁ¤ÇÑ´Ù. (.htaccess ÆÄÀÏ µîÀ¸·Î ´õ ÇÏÀ§ ´Ü°è¿¡¼­ ¼­¹ö¼³Á¤À» º¯°æÇÏÁö¾Ê´Â ÇÑ) OffÀ̸é ÇØ´ç ¿µ¿ª¿¡ ÀÖ´Â ¹®¼­¿¡ À̵é Çì´õ¸¦ »ý¼ºÇÏÁö ¾Ê´Â´Ù. OnÀ̸é ExpiresByType°ú ExpiresDefault Áö½Ã¾î·Î (ÇØ´ç Ç׸ñÀ» Âü°íÇ϶ó) ÁöÁ¤ÇÑ ±ÔÄ¢¿¡ µû¶ó ¼­ºñ½ºÇÏ·Á´Â ¹®¼­¿¡ ÀÌ Çì´õµéÀ» »ý¼ºÇÑ´Ù.

    ÀÌ Áö½Ã¾î°¡ Expires³ª Cache-Control Çì´õ¸¦ º¸ÀåÇÏÁö´Â ¾Ê´Â´Ù. ±ÔÄ¢¿¡ ÇØ´çÇÏÁö ¾Ê´Ù¸é ¸¶Ä¡ ÀÌ Áö½Ã¾î°¡ ¾ø´Â °Íó·³ Çì´õ¸¦ ¸¸µéÁö ¾Ê´Â´Ù.

    top

    ExpiresByType Áö½Ã¾î

    ¼³¸í:MIME typeÀ¸·Î Expires Çì´õ°ªÀ» ¼³Á¤ÇÑ´Ù
    ¹®¹ý:ExpiresByType MIME-type <code>seconds
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Extension
    ¸ðµâ:mod_expires

    ÀÌ Áö½Ã¾î´Â ƯÁ¤ Á¾·ùÀÇ (¿¡¸¦ µé¾î, text/html) ¹®¼­¿¡ ´ëÇÑ Expires Çì´õ°ª°ú Cache-Control Çì´õÀÇ max-age Áö½Ã¾î°ªÀ» Á¤ÀÇÇÑ´Ù. µÎ¹øÂ° ¾Æ±Ô¸ÕÆ®´Â ¸¸±â½Ã°£À» °áÁ¤ÇÒ¶§ ±âÁØ ½Ã°£¿¡ ´õÇÒ ÃÊ´ÜÀ§ °ªÀ» ÁöÁ¤ÇÑ´Ù. Cache-Control: max-age´Â ¸¸±â½Ã°£¿¡¼­ ¿äûÇÑ ½Ã°£À» »©¼­ °è»êÇϰí, °á°ú´Â ÃÊ´ÜÀ§·Î Ç¥½ÃÇÑ´Ù.

    ±âÁØ ½Ã°£Àº ÆÄÀÏÀÇ ÃÖ±Ù ¼öÁ¤½Ã°£ ȤÀº Ŭ¶óÀÌ¾ðÆ®°¡ ¹®¼­¿¡ Á¢±ÙÇÑ ½Ã°£ÀÌ´Ù. À̶² °ÍÀ» »ç¿ëÇÒÁö´Â <code> Çʵå·Î °áÁ¤ÇØ¾ß ÇÑ´Ù. MÀº ±âÁØ ½Ã°£À¸·Î ÆÄÀÏÀÇ ÃÖ±Ù ¼öÁ¤½Ã°£À» »ç¿ëÇϰí, A´Â Ŭ¶óÀ̾ðÆ®ÀÇ Á¢±Ù ½Ã°£À» »ç¿ëÇÑ´Ù.

    Â÷ÀÌ´Â ¹Ì¹¦ÇÏ´Ù. MÀ» »ç¿ëÇϸé ij½¬¿¡ ÀÖ´Â ¸ðµç º¹»çº»ÀÌ °°Àº ½Ã°£¿¡ ¸¸·áµÈ´Ù. ±×·¡¼­ Ç×»ó °°Àº URL·Î ã¾Æº¼ ¼ö ÀÖ´Â ÁÖ°£ÀÏÁ¤ °°Àº ¿ëµµ¿¡ ÁÁ´Ù. A¸¦ »ç¿ëÇÏ¸é º¹»çº»ÀÇ ¸¸±â½Ã°£ÀÌ °¢°¢ ´Ù¸£´Ù. ÀÌ´Â ÀÚÁÖ ¼öÁ¤µÇÁö¾Ê´Â ±×¸²ÆÄÀÏ¿¡, ƯÈ÷ ¿©·¯ ¹®¼­¿¡¼­ °°Àº ±×¸²À» ÂüÁ¶ÇÒ¶§ (¿¹¸¦ µé¾î, À̹ÌÁö´Â »ó´ëÀûÀ¸·Î ªÀº ±â°£µ¿¾È ¹Ýº¹Çؼ­ Á¢±ÙµÈ´Ù), À¯¿ëÇÏ´Ù.

    ¿¹Á¦:

    # ¸¸±âÇì´õ¸¦ »ç¿ëÇÑ´Ù
    ExpiresActive On
    # Ŭ¶óÀÌ¾ðÆ® Ä³½¬ÀÇ GIF ±×¸²Àº ÇÑ ´ÞÈÄ¿¡ ¸¸±âÇÑ´Ù
    ExpiresByType image/gif A2592000
    # HTML ¹®¼­´Â º¯°æÈÄ ÀÏÁÖÀϰ£ À¯È¿ÇÏ´Ù ExpiresByType text/html M604800

    ÀÌ Áö½Ã¾î´Â ExpiresActive OnÀ» »ç¿ëÇÒ¶§¸¸ À¯È¿ÇÔÀ» ÁÖÀÇÇ϶ó. ExpiresDefault Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ƯÁ¤ MIME type¿¡ ´ëÇØ¼­¸¸ ¸¸±â½Ã°£À» ¼³Á¤ÇÒ ¼ö ÀÖ´Ù.

    ¾Õ¿¡¼­ ¼³¸íÇÑ ´Ù¸¥ ¹®¹ýÀ» »ç¿ëÇÏ¿© ¸¸±â½Ã°£À» °è»êÇÒ ¼öµµ ÀÖ´Ù.

    top

    ExpiresDefault Áö½Ã¾î

    ¼³¸í:¸¸±â½Ã°£À» °è»êÇÏ´Â ±âº» ¾Ë°í¸®Áò
    ¹®¹ý:ExpiresDefault <code>seconds
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Extension
    ¸ðµâ:mod_expires

    ÀÌ Áö½Ã¾î´Â ÇØ´ç ¿µ¿ª¿¡ ÀÖ´Â ¸ðµç ¹®¼­ÀÇ ¸¸±â½Ã°£À» °è»êÇÏ´Â ±âº» ¾Ë°í¸®ÁòÀ» ÁöÁ¤ÇÑ´Ù. ExpiresByType Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© Á¾·ùº°·Î ¼³Á¤ÇÒ ¼ö ÀÖ´Ù. ¾Æ±Ô¸ÕÆ® ¹®¹ý¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ¼³¸íÀº ±× Áö½Ã¾î¿Í ´Ù¸¥ ¹®¹ýÀ» Âü°íÇ϶ó.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_info.html.en0000644000000000000500000003516313412755316017320 0ustar rootsrc mod_info - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_info

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Provides a comprehensive overview of the server configuration
    Status:Extension
    Module Identifier:info_module
    Source File:mod_info.c

    Summary

    To configure mod_info, add the following to your httpd.conf file.

    <Location "/server-info">
        SetHandler server-info
    </Location>

    You may wish to use mod_authz_host inside the <Location> directive to limit access to your server configuration information:

    <Location "/server-info">
        SetHandler server-info
        Require host example.com
    </Location>

    Once configured, the server information is obtained by accessing http://your.host.example.com/server-info

    top

    Security Issues

    Once mod_info is loaded into the server, its handler capability is available in all configuration files, including per-directory files (e.g., .htaccess). This may have security-related ramifications for your site.

    In particular, this module can leak sensitive information from the configuration directives of other Apache modules such as system paths, usernames/passwords, database names, etc. Therefore, this module should only be used in a controlled environment and always with caution.

    You will probably want to use mod_authz_host to limit access to your server configuration information.

    Access control

    <Location "/server-info">
        SetHandler server-info
        # Allow access from server itself
        Require ip 127.0.0.1
    
        # Additionally, allow access from local workstation
        Require ip 192.168.1.17
    </Location>
    top

    Selecting the information shown

    By default, the server information includes a list of all enabled modules, and for each module, a description of the directives understood by that module, the hooks implemented by that module, and the relevant directives from the current configuration.

    Other views of the configuration information are available by appending a query to the server-info request. For example, http://your.host.example.com/server-info?config will show all configuration directives.

    ?<module-name>
    Only information relevant to the named module
    ?config
    Just the configuration directives, not sorted by module
    ?hooks
    Only the list of Hooks each module is attached to
    ?list
    Only a simple list of enabled modules
    ?server
    Only the basic server information
    ?providers
    List the providers that are available on your server
    top

    Dumping the configuration on startup

    If the config define -DDUMP_CONFIG is set, mod_info will dump the pre-parsed configuration to stdout during server startup.

    httpd -DDUMP_CONFIG -k start

    Pre-parsed means that directives like <IfDefine> and <IfModule> are evaluated and environment variables are replaced. However it does not represent the final state of the configuration. In particular, it does not represent the merging or overriding that may happen for repeated directives.

    This is roughly equivalent to the ?config query.

    top

    Known Limitations

    mod_info provides its information by reading the parsed configuration, rather than reading the original configuration file. There are a few limitations as a result of the way the parsed configuration tree is created:

    • Directives which are executed immediately rather than being stored in the parsed configuration are not listed. These include ServerRoot, LoadModule, and LoadFile.
    • Directives which control the configuration file itself, such as Include, <IfModule> and <IfDefine> are not listed, but the included configuration directives are.
    • Comments are not listed. (This may be considered a feature.)
    • Configuration directives from .htaccess files are not listed (since they do not form part of the permanent server configuration).
    • Container directives such as <Directory> are listed normally, but mod_info cannot figure out the line number for the closing </Directory>.
    • Directives generated by third party modules such as mod_perl might not be listed.
    top

    AddModuleInfo Directive

    Description:Adds additional information to the module information displayed by the server-info handler
    Syntax:AddModuleInfo module-name string
    Context:server config, virtual host
    Status:Extension
    Module:mod_info

    This allows the content of string to be shown as HTML interpreted, Additional Information for the module module-name. Example:

    AddModuleInfo mod_deflate.c 'See <a \
        href="http://httpd.apache.org/docs/2.4/mod/mod_deflate.html">\
        http://httpd.apache.org/docs/2.4/mod/mod_deflate.html</a>'

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_dbm.html.ja.utf80000644000000000000500000003210513412755316021174 0ustar rootsrc mod_authn_dbm - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_authn_dbm

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:DBM ファイルを用ã„ãŸãƒ¦ãƒ¼ã‚¶èªè¨¼
    ステータス:Extension
    モジュール識別å­:authn_dbm_module
    ソースファイル:mod_authn_dbm.c
    äº’æ›æ€§:Apache 2.1 以é™

    概è¦

    本モジュール㯠mod_auth_digest ã‚„ mod_auth_basic ã¨ã„ã£ãŸèªè¨¼ãƒ•ロントエンドã«å¯¾ã—ã¦ã€ dbm パスワードファイル内ã‹ã‚‰ã®ãƒ¦ãƒ¼ã‚¶æ¤œç´¢ã«ã‚ˆã‚‹ ユーザèªè¨¼æ©Ÿèƒ½ã‚’æä¾›ã—ã¾ã™ã€‚ä¼¼ãŸã‚ˆã†ãªæ©Ÿèƒ½ã¯ mod_authn_file ã§ã‚‚æä¾›ã•れã¦ã„ã¾ã™ã€‚

    mod_auth_basic ã‚„ mod_auth_digest を使用ã™ã‚‹éš›ã«ã¯ã€ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ AuthBasicProvider ã‚„ AuthDigestPrivider ã§ dbm ã¨æŒ‡å®šã™ã‚‹ã“ã¨ã§èµ·å‹•ã•れã¾ã™ã€‚

    top

    AuthDBMType ディレクティブ

    説明:パスワードをä¿å­˜ã™ã‚‹ãŸã‚ã«å¿…è¦ãªãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãƒ•ァイルã®ç¨®é¡žã‚’ 設定ã™ã‚‹
    æ§‹æ–‡:AuthDBMType default|SDBM|GDBM|NDBM|DB
    デフォルト:AuthDBMType default
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Extension
    モジュール:mod_authn_dbm

    パスワードをä¿å­˜ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã™ã‚‹ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãƒ•ァイルã®ç¨®é¡žã‚’ 設定ã—ã¾ã™ã€‚デフォルトã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã®ç¨®é¡žã¯ã‚³ãƒ³ãƒ‘ã‚¤ãƒ«æ™‚ã«æ±ºã¾ã‚Šã¾ã™ã€‚ ä»–ã®ç¨®é¡žã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãŒä½¿ç”¨å¯èƒ½ã‹ã©ã†ã‹ã‚‚ コンパイル時ã®è¨­å®šã«ä¾å­˜ã—ã¾ã™ã€‚

    パスワードファイルを作æˆã™ã‚‹ã®ã«ä½¿ç”¨ã™ã‚‹ãƒ—ログラムãŒåŒã˜ç¨®é¡žã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‚’ 使用ã™ã‚‹ã‚ˆã†ã«è¨­å®šã™ã‚‹ã“ã¨ã¯éžå¸¸ã«é‡è¦ã§ã™ã€‚

    top

    AuthDBMUserFile ディレクティブ

    説明:èªè¨¼ç”¨ã®ãƒ¦ãƒ¼ã‚¶ã¨ãƒ‘スワードã®ãƒªã‚¹ãƒˆã‚’ä¿æŒã—ã¦ã„ã‚‹ データベースファイルåを設定ã™ã‚‹
    æ§‹æ–‡:AuthDBMUserFile file-path
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Extension
    モジュール:mod_authn_dbm

    AuthDBMUserFile ディレクティブ㯠èªè¨¼ç”¨ã®ãƒ¦ãƒ¼ã‚¶ã¨ãƒ‘スワードã®ãƒªã‚¹ãƒˆã‚’ä¿æŒã—ã¦ã„ã‚‹ DBM ファイル㮠åå‰ã‚’設定ã—ã¾ã™ã€‚File-path ã¯ãƒ¦ãƒ¼ã‚¶ãƒ•ァイルã¸ã® 絶対パスã§ã™ã€‚

    ユーザファイルã®ã‚­ãƒ¼ã¯ãƒ¦ãƒ¼ã‚¶åã§ã™ã€‚ユーザã«å¯¾ã—ã¦è¿”ã•れる値㯠暗å·åŒ–ã•れãŸãƒ‘スワードã§ã€ãã®å¾Œã«ã€ã‚³ãƒ­ãƒ³ã«ç¶šã„ã¦ä»»æ„ã®ãƒ‡ãƒ¼ã‚¿ãŒ ç¶šã„ã¦ã„ã‚‹ã“ã¨ã‚‚ã‚りã¾ã™ã€‚コロンã¨ãã®å¾Œã®ãƒ‡ãƒ¼ã‚¿ã¯ã‚µãƒ¼ãƒã¯ 無視ã—ã¾ã™ã€‚

    セキュリティ

    AuthDBMUserFile ã¯ã€ ウェブサーãƒã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ„リーã®å¤–å´ã«ä¿ç®¡ã™ã‚‹ã‚ˆã†ã«ã—ã¦ãã ã•ã„。 ä¿è­·ã—よã†ã¨ã—ã¦ã„るディレクトリ以下ã«ã¯ ç½®ã‹ãªã„ã§ä¸‹ã•ã„。 ãã†ã—ãªã„ã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒ AuthUserFile ã‚’ ダウンロードã§ãã¦ã—ã¾ã„ã¾ã™ã€‚

    é‡è¦ãªäº’æ›æ€§ã«é–¢ã™ã‚‹æ³¨æ„: apache module ã® dbmopen ã®å®Ÿè£…㯠文字列㌠NULL ã§çµ‚ã‚ã£ã¦ã„ã‚‹ã“ã¨ã«ä¾å­˜ã™ã‚‹ã®ã§ã¯ãªãã€DBM データストラクãƒãƒ£ ã®ãƒãƒƒã‚·ãƒ¥å€¤ã®æ–‡å­—列ã®é•·ã•を読ã¿å–りã¾ã™ã€‚Netscape ウェブサーãƒãªã©ã€ アプリケーションã®ä¸­ã«ã¯æ–‡å­—列㌠NULL ã§çµ‚ã‚ã£ã¦ã„ã‚‹ã“ã¨ã«ä¾å­˜ã—ã¦ã„ã‚‹ ã‚‚ã®ãŒã‚りã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€ç•°ãªã‚‹ã‚¢ãƒ—リケーション間ã§ã® DBM ファイル㮠使用ã«å•題ãŒã‚ã‚‹å ´åˆã¯ã€ã“れãŒåŽŸå› ã«ãªã£ã¦ã„ã‚‹å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚

    Apache ã«ã¯ dbmmanage ã¨ã„ㆠperl スクリプトãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚ã“ã®ãƒ—ログラムを使ã£ã¦ã“㮠モジュールãŒä½¿ç”¨ã™ã‚‹ DBM フォーマットã®ãƒ‘スワードファイルを作æˆã—ãŸã‚Š æ›´æ–°ã—ãŸã‚Šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cache.html0000644000000000000500000000061313362070302017004 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_cache.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_cache.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_cache.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_cache.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_session_dbd.html.fr.utf80000644000000000000500000006572513412755316021562 0ustar rootsrc mod_session_dbd - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_session_dbd

    Langues Disponibles:  en  |  fr 

    Description:Support des session basé sur DBD/SQL
    Statut:Extension
    Identificateur de Module:session_dbd_module
    Fichier Source:mod_session_dbd.c
    Compatibilité:Disponible depuis la version 2.3 d'Apache

    Sommaire

    Avertissement

    Les modules de session font usage des cookies HTTP, et peuvent à ce titre être victimes d'attaques de type Cross Site Scripting, ou divulguer des informations à caractère privé aux clients. Veuillez vous assurer que les risques ainsi encourus ont été pris en compte avant d'activer le support des sessions sur votre serveur.

    Ce sous-module du module mod_session fournit le support du stockage des sessions utilisateur dans une base de données SQL en utilisant le module mod_dbd.

    Les sessions sont soit anonymes, et la session est alors identifiée par un UUID unique stocké dans un cookie au niveau du navigateur, soit propres à l'utilisateur, et la session est alors identifiée par l'identifiant de l'utilisateur connecté.

    Les sessions basées sur SQL sont dissimulées au navigateur, et permettent ainsi de préserver la confidentialité sans avoir recours au chiffrement.

    Plusieurs serveurs web d'une forêt de serveurs peuvent choisir de partager une base de données, et ainsi partager les sessions entre eux.

    Pour plus de détails à propos de l'interface des sessions, voir la documentation du module mod_session.

    top

    Configuration de DBD

    Pour que le module mod_session_dbd puisse être configuré et maintenir une session, il faut tout d'abord configurer le module mod_dbd pour que le serveur puisse exécuter des requêtes vers la base de données.

    Quatre types de requêtes sont nécessaires pour maintenir une session, sélectionner ou mettre à jour une session existante, insérer une nouvelle session et supprimer une session vide ou arrivée à expiration. Ces requêtes sont configurées comme dans l'exemple suivant :

    Exemple de configuration de DBD

    DBDriver pgsql
    DBDParams "dbname=apachesession user=apache password=xxxxx host=localhost"
    DBDPrepareSQL "delete from session where key = %s" deletesession
    DBDPrepareSQL "update session set value = %s, expiry = %lld, key = %s where key = %s" updatesession
    DBDPrepareSQL "insert into session (value, expiry, key) values (%s, %lld, %s)" insertsession
    DBDPrepareSQL "select value from session where key = %s and (expiry = 0 or expiry > %lld)" selectsession
    DBDPrepareSQL "delete from session where expiry != 0 and expiry < %lld" cleansession
    top

    Sessions anonymes

    Les sessions anonymes sont identifiées par un UUID unique, et stockées dans un cookie au niveau du navigateur. Cette méthode est similaire à celle utilisée par la plupart des serveurs d'applications pour stocker les informations de session.

    Pour créer une session anonyme, la stocker dans une table de base de donnée postgres nommée apachesession, et sauvegarder l'identifiant de session dans un cookie nommé session, configurez la session comme suit :

    Session anonyme basée sur SQL

    Session On
    SessionDBDCookieName session path=/

    Pour plus d'exemples sur la manière dont une application CGI peut accéder aux informations de session, voir la section exemples de la documentation du module mod_session.

    Pour des détails sur la manière dont une session peut être utilisée pour stocker des informations de type nom d'utilisateur/mot de passe, voir la documentation du module mod_auth_form.

    top

    Sessions propres à un utilisateur

    Les sessions propres à un utilisateur sont identifiées par le nom de l'utilisateur authentifié avec succès. Ceci permet d'assurer une confidentialité optimale, car aucun traitement externe à la session n'existe en dehors du contexte authentifié.

    Les sessions propres à un utilisateur ne fonctionnent que dans un environnement d'authentification correctement configuré, qu'il s'agisse d'une authentification de base, à base de condensés (digest) ou de certificats client SSL. Suite à des limitations dues à des dépendances mutuelles, les sessions propres à un utilisateur ne peuvent pas être utilisées pour stocker les données d'authentification en provenance d'un module comme mod_auth_form.

    Pour créer une session propre à un utilisateur, la stocker dans une table de base de données postgres nommée apachesession, avec comme clé de session l'identifiant utilisateur, ajoutez les lignes suivantes :

    Session propre à un utilisateur basée sur SQL

    Session On
    SessionDBDPerUser On
    top

    Nettoyage de la base de données

    Avec le temps, la base de données va commencer à accumuler des sessions expirées. Pour le moment, le module mod_session_dbd n'est pas en mesure de gérer automatiquement l'expiration des sessions.

    Avertissement

    L'administrateur devra mettre en oeuvre un traitement externe via cron pour nettoyer les sessions expirées.

    top

    Directive SessionDBDCookieName

    Description:Nom et attributs du cookie RFC2109 qui contient l'identifiant de session
    Syntaxe:SessionDBDCookieName nom attributs
    Défaut:none
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_session_dbd

    La directive SessionDBDCookieName permet de spécifier le nom et les attributs optionnels d'un cookie compatible RFC2109 qui contiendra l'identifiant de session. Les cookies RFC2109 sont définis à l'aide de l'en-tête HTTP Set-Cookie.

    Une liste optionnelle d'attributs peut être spécifiée pour ce cookie, comme dans l'exemple ci-dessous. Ces attributs sont insérés dans le cookie tels quels, et ne sont pas interprétés par Apache. Assurez-vous que vos attributs sont définis correctement selon la spécification des cookies.

    Cookie avec attributs

    Session On
    SessionDBDCookieName session path=/private;domain=example.com;httponly;secure;version=1;
    top

    Directive SessionDBDCookieName2

    Description:Nom et attributs du cookie RFC2965 qui contient l'identifiant de session
    Syntaxe:SessionDBDCookieName2 nom attributs
    Défaut:none
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_session_dbd

    La directive SessionDBDCookieName2 permet de spécifier le nom et les attributs optionnels d'un cookie compatible RFC2965 qui contiendra l'identifiant de session. Les cookies RFC2965 sont définis à l'aide de l'en-tête HTTP Set-Cookie2.

    Une liste optionnelle d'attributs peut être spécifiée pour ce cookie, comme dans l'exemple ci-dessous. Ces attributs sont insérés dans le cookie tel quel, et ne sont pas interprétés par Apache. Assurez-vous que vos attributs sont définis correctement selon la spécification des cookies.

    Cookie2 avec attributs

    Session On
    SessionDBDCookieName2 session path=/private;domain=example.com;httponly;secure;version=1;
    top

    Directive SessionDBDCookieRemove

    Description:Détermine si les cookies de session doivent être supprimés des en-têtes HTTP entrants
    Syntaxe:SessionDBDCookieRemove On|Off
    Défaut:SessionDBDCookieRemove On
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_session_dbd

    La directive SessionDBDCookieRemove permet de déterminer si les cookies contenant l'identifiant de session doivent être supprimés des en-têtes pendant le traitement de la requête.

    Dans le cas d'un mandataire inverse où le serveur Apache sert de frontal à un serveur d'arrière-plan, révéler le contenu du cookie de session à ce dernier peut conduire à une violation de la confidentialité. À ce titre, si cette directive est définie à "on", le cookie de session sera supprimé des en-têtes HTTP entrants.

    top

    Directive SessionDBDDeleteLabel

    Description:La requête SQL à utiliser pour supprimer des sessions de la base de données
    Syntaxe:SessionDBDDeleteLabel étiquette
    Défaut:SessionDBDDeleteLabel deletesession
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_session_dbd

    La directive SessionDBDDeleteLabel permet de définir l'étiquette de la requête de suppression à utiliser par défaut pour supprimer une session vide ou expirée. Cette étiquette doit avoir été définie au préalable via une directive DBDPrepareSQL.

    top

    Directive SessionDBDInsertLabel

    Description:La requête SQL à utiliser pour insérer des sessions dans la base de données
    Syntaxe:SessionDBDInsertLabel étiquette
    Défaut:SessionDBDInsertLabel insertsession
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_session_dbd

    La directive SessionDBDInsertLabel permet de définir l'étiquette de la requête d'insertion par défaut à charger dans une session. Cette étiquette doit avoir été définie au préalable via une directive DBDPrepareSQL.

    Si une tentative de mise à jour d'une session ne concerne aucun enregistrement, c'est cette requête qui sera utilisée pour insérer la session dans la base de données.

    top

    Directive SessionDBDPerUser

    Description:Active une session propre à un utilisateur
    Syntaxe:SessionDBDPerUser On|Off
    Défaut:SessionDBDPerUser Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_session_dbd

    La directive SessionDBDPerUser permet d'activer une session propre à un utilisateur, dont la clé sera le nom de l'utilisateur connecté. Si l'utilisateur n'est pas connecté, la directive sera ignorée.

    top

    Directive SessionDBDSelectLabel

    Description:La requête SQL à utiliser pour sélectionner des sessions dans la base de données
    Syntaxe:SessionDBDSelectLabel étiquette
    Défaut:SessionDBDSelectLabel selectsession
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_session_dbd

    La directive SessionDBDSelectLabel permet de définir l'étiquette de la requête de sélection par défaut à utiliser pour charger une session. Cette étiquette doit avoir été définie au préalable via une directive DBDPrepareSQL.

    top

    Directive SessionDBDUpdateLabel

    Description:La requête SQL à utiliser pour mettre à jour des sessions préexistantes dans la base de données
    Syntaxe:SessionDBDUpdateLabel étiquette
    Défaut:SessionDBDUpdateLabel updatesession
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_session_dbd

    La directive SessionDBDUpdateLabel permet de définir l'étiquette de la requête de mise à jour par défaut à charger dans une session. Cette étiquette doit avoir été définie au préalable via une directive DBDPrepareSQL.

    Si une tentative de mise à jour d'une session ne concerne aucun enregistrement, c'est la requête d'insertion qui sera appelée pour insérer la session dans la base de données. Si la base de données supporte InsertOrUpdate, modifiez cette requête pour effectuer la mise à jour en une seule requête au lieu de deux.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_session_crypto.html.en0000644000000000000500000004357713520523022021443 0ustar rootsrc mod_session_crypto - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_session_crypto

    Available Languages:  en  |  fr 

    Description:Session encryption support
    Status:Experimental
    Module Identifier:session_crypto_module
    Source File:mod_session_crypto.c
    Compatibility:Available in Apache 2.3 and later

    Summary

    Warning

    The session modules make use of HTTP cookies, and as such can fall victim to Cross Site Scripting attacks, or expose potentially private information to clients. Please ensure that the relevant risks have been taken into account before enabling the session functionality on your server.

    This submodule of mod_session provides support for the encryption of user sessions before being written to a local database, or written to a remote browser via an HTTP cookie.

    This can help provide privacy to user sessions where the contents of the session should be kept private from the user, or where protection is needed against the effects of cross site scripting attacks.

    For more details on the session interface, see the documentation for the mod_session module.

    top

    Basic Usage

    To create a simple encrypted session and store it in a cookie called session, configure the session as follows:

    Browser based encrypted session

    Session On
    SessionCookieName session path=/
    SessionCryptoPassphrase secret

    The session will be encrypted with the given key. Different servers can be configured to share sessions by ensuring the same encryption key is used on each server.

    If the encryption key is changed, sessions will be invalidated automatically.

    For documentation on how the session can be used to store username and password details, see the mod_auth_form module.

    top

    SessionCryptoCipher Directive

    Description:The crypto cipher to be used to encrypt the session
    Syntax:SessionCryptoCipher name
    Default:SessionCryptoCipher aes256
    Context:server config, virtual host, directory, .htaccess
    Status:Experimental
    Module:mod_session_crypto
    Compatibility:Available in Apache 2.3.0 and later

    The SessionCryptoCipher directive allows the cipher to be used during encryption. If not specified, the cipher defaults to aes256.

    Possible values depend on the crypto driver in use, and could be one of:

    • 3des192
    • aes128
    • aes192
    • aes256
    top

    SessionCryptoDriver Directive

    Description:The crypto driver to be used to encrypt the session
    Syntax:SessionCryptoDriver name [param[=value]]
    Default:none
    Context:server config
    Status:Experimental
    Module:mod_session_crypto
    Compatibility:Available in Apache 2.3.0 and later

    The SessionCryptoDriver directive specifies the name of the crypto driver to be used for encryption. If not specified, the driver defaults to the recommended driver compiled into APR-util.

    The NSS crypto driver requires some parameters for configuration, which are specified as parameters with optional values after the driver name.

    NSS without a certificate database

    SessionCryptoDriver nss

    NSS with certificate database

    SessionCryptoDriver nss dir=certs

    NSS with certificate database and parameters

    SessionCryptoDriver nss dir=certs key3=key3.db cert7=cert7.db secmod=secmod

    NSS with paths containing spaces

    SessionCryptoDriver nss "dir=My Certs" key3=key3.db cert7=cert7.db secmod=secmod

    The NSS crypto driver might have already been configured by another part of the server, for example from mod_nss or mod_ldap. If found to have already been configured, a warning will be logged, and the existing configuration will have taken affect. To avoid this warning, use the noinit parameter as follows.

    NSS with certificate database

    SessionCryptoDriver nss noinit

    To prevent confusion, ensure that all modules requiring NSS are configured with identical parameters.

    The openssl crypto driver supports an optional parameter to specify the engine to be used for encryption.

    OpenSSL with engine support

    SessionCryptoDriver openssl engine=name
    top

    SessionCryptoPassphrase Directive

    Description:The key used to encrypt the session
    Syntax:SessionCryptoPassphrase secret [ secret ... ]
    Default:none
    Context:server config, virtual host, directory, .htaccess
    Status:Experimental
    Module:mod_session_crypto
    Compatibility:Available in Apache 2.3.0 and later

    The SessionCryptoPassphrase directive specifies the keys to be used to enable symmetrical encryption on the contents of the session before writing the session, or decrypting the contents of the session after reading the session.

    Keys are more secure when they are long, and consist of truly random characters. Changing the key on a server has the effect of invalidating all existing sessions.

    Multiple keys can be specified in order to support key rotation. The first key listed will be used for encryption, while all keys listed will be attempted for decryption. To rotate keys across multiple servers over a period of time, add a new secret to the end of the list, and once rolled out completely to all servers, remove the first key from the start of the list.

    As of version 2.4.7 if the value begins with exec: the resulting command will be executed and the first line returned to standard output by the program will be used as the key.

    #key used as-is
    SessionCryptoPassphrase secret
    
    #Run /path/to/program to get key
    SessionCryptoPassphrase exec:/path/to/program
    
    #Run /path/to/otherProgram and provide arguments
    SessionCryptoPassphrase "exec:/path/to/otherProgram argument1"
    top

    SessionCryptoPassphraseFile Directive

    Description:File containing keys used to encrypt the session
    Syntax:SessionCryptoPassphraseFile filename
    Default:none
    Context:server config, virtual host, directory
    Status:Experimental
    Module:mod_session_crypto
    Compatibility:Available in Apache 2.3.0 and later

    The SessionCryptoPassphraseFile directive specifies the name of a configuration file containing the keys to use for encrypting or decrypting the session, specified one per line. The file is read on server start, and a graceful restart will be necessary for httpd to pick up changes to the keys.

    Unlike the SessionCryptoPassphrase directive, the keys are not exposed within the httpd configuration and can be hidden by protecting the file appropriately.

    Multiple keys can be specified in order to support key rotation. The first key listed will be used for encryption, while all keys listed will be attempted for decryption. To rotate keys across multiple servers over a period of time, add a new secret to the end of the list, and once rolled out completely to all servers, remove the first key from the start of the list.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_core.html.en0000644000000000000500000011160313412755316020522 0ustar rootsrc mod_authz_core - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authz_core

    Available Languages:  en  |  fr 

    Description:Core Authorization
    Status:Base
    Module Identifier:authz_core_module
    Source File:mod_authz_core.c
    Compatibility:Available in Apache HTTPD 2.3 and later

    Summary

    This module provides core authorization capabilities so that authenticated users can be allowed or denied access to portions of the web site. mod_authz_core provides the functionality to register various authorization providers. It is usually used in conjunction with an authentication provider module such as mod_authn_file and an authorization module such as mod_authz_user. It also allows for advanced logic to be applied to the authorization processing.

    top

    Authorization Containers

    The authorization container directives <RequireAll>, <RequireAny> and <RequireNone> may be combined with each other and with the Require directive to express complex authorization logic.

    The example below expresses the following authorization logic. In order to access the resource, the user must either be the superadmin user, or belong to both the admins group and the Administrators LDAP group and either belong to the sales group or have the LDAP dept attribute sales. Furthermore, in order to access the resource, the user must not belong to either the temps group or the LDAP group Temporary Employees.

    <Directory "/www/mydocs">
        <RequireAll>
            <RequireAny>
                Require user superadmin
                <RequireAll>
                    Require group admins
                    Require ldap-group "cn=Administrators,o=Airius"
                    <RequireAny>
                        Require group sales
                        Require ldap-attribute dept="sales"
                    </RequireAny>
                </RequireAll>
            </RequireAny>
            <RequireNone>
                Require group temps
                Require ldap-group "cn=Temporary Employees,o=Airius"
            </RequireNone>
        </RequireAll>
    </Directory>
    top

    The Require Directives

    mod_authz_core provides some generic authorization providers which can be used with the Require directive.

    Require env

    The env provider allows access to the server to be controlled based on the existence of an environment variable. When Require env env-variable is specified, then the request is allowed access if the environment variable env-variable exists. The server provides the ability to set environment variables in a flexible way based on characteristics of the client request using the directives provided by mod_setenvif. Therefore, this directive can be used to allow access based on such factors as the clients User-Agent (browser type), Referer, or other HTTP request header fields.

    SetEnvIf User-Agent "^KnockKnock/2\.0" let_me_in
    <Directory "/docroot">
        Require env let_me_in
    </Directory>

    In this case, browsers with a user-agent string beginning with KnockKnock/2.0 will be allowed access, and all others will be denied.

    When the server looks up a path via an internal subrequest such as looking for a DirectoryIndex or generating a directory listing with mod_autoindex, per-request environment variables are not inherited in the subrequest. Additionally, SetEnvIf directives are not separately evaluated in the subrequest due to the API phases mod_setenvif takes action in.

    Require all

    The all provider mimics the functionality that was previously provided by the 'Allow from all' and 'Deny from all' directives. This provider can take one of two arguments which are 'granted' or 'denied'. The following examples will grant or deny access to all requests.

    Require all granted
    Require all denied

    Require method

    The method provider allows using the HTTP method in authorization decisions. The GET and HEAD methods are treated as equivalent. The TRACE method is not available to this provider, use TraceEnable instead.

    The following example will only allow GET, HEAD, POST, and OPTIONS requests:

    Require method GET POST OPTIONS

    The following example will allow GET, HEAD, POST, and OPTIONS requests without authentication, and require a valid user for all other methods:

    <RequireAny>
         Require method GET POST OPTIONS
         Require valid-user
    </RequireAny>

    Require expr

    The expr provider allows basing authorization decisions on arbitrary expressions.

    Require expr "%{TIME_HOUR} -ge 9 && %{TIME_HOUR} -le 17"
    <RequireAll>
        Require expr "!(%{QUERY_STRING} =~ /secret/)"
        Require expr "%{REQUEST_URI} in { '/example.cgi', '/other.cgi' }"
    </RequireAll>
    Require expr "!(%{QUERY_STRING} =~ /secret/) && %{REQUEST_URI} in { '/example.cgi', '/other.cgi' }"

    The syntax is described in the ap_expr documentation. Before httpd 2.4.16, the surrounding double-quotes MUST be omitted.

    Normally, the expression is evaluated before authentication. However, if the expression returns false and references the variable %{REMOTE_USER}, authentication will be performed and the expression will be re-evaluated.

    top

    Creating Authorization Provider Aliases

    Extended authorization providers can be created within the configuration file and assigned an alias name. The alias providers can then be referenced through the Require directive in the same way as a base authorization provider. Besides the ability to create and alias an extended provider, it also allows the same extended authorization provider to be referenced by multiple locations.

    Example

    The example below creates two different ldap authorization provider aliases based on the ldap-group authorization provider. This example allows a single authorization location to check group membership within multiple ldap hosts:

    <AuthzProviderAlias ldap-group ldap-group-alias1 "cn=my-group,o=ctx">
        AuthLDAPBindDN "cn=youruser,o=ctx"
        AuthLDAPBindPassword yourpassword
        AuthLDAPUrl "ldap://ldap.host/o=ctx"
    </AuthzProviderAlias>
    
    <AuthzProviderAlias ldap-group ldap-group-alias2 "cn=my-other-group,o=dev">
        AuthLDAPBindDN "cn=yourotheruser,o=dev"
        AuthLDAPBindPassword yourotherpassword
        AuthLDAPUrl "ldap://other.ldap.host/o=dev?cn"
    </AuthzProviderAlias>
    
    Alias "/secure" "/webpages/secure"
    <Directory "/webpages/secure">
        Require all granted
    
        AuthBasicProvider file
    
        AuthType Basic
        AuthName LDAP_Protected_Place
    
        #implied OR operation
        Require ldap-group-alias1
        Require ldap-group-alias2
    </Directory>
    top

    AuthMerging Directive

    Description:Controls the manner in which each configuration section's authorization logic is combined with that of preceding configuration sections.
    Syntax:AuthMerging Off | And | Or
    Default:AuthMerging Off
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_authz_core

    When authorization is enabled, it is normally inherited by each subsequent configuration section, unless a different set of authorization directives is specified. This is the default action, which corresponds to an explicit setting of AuthMerging Off.

    However, there may be circumstances in which it is desirable for a configuration section's authorization to be combined with that of its predecessor while configuration sections are being merged. Two options are available for this case, And and Or.

    When a configuration section contains AuthMerging And or AuthMerging Or, its authorization logic is combined with that of the nearest predecessor (according to the overall order of configuration sections) which also contains authorization logic as if the two sections were jointly contained within a <RequireAll> or <RequireAny> directive, respectively.

    The setting of AuthMerging is not inherited outside of the configuration section in which it appears. In the following example, only users belonging to group alpha may access /www/docs. Users belonging to either groups alpha or beta may access /www/docs/ab. However, the default Off setting of AuthMerging applies to the <Directory> configuration section for /www/docs/ab/gamma, so that section's authorization directives override those of the preceding sections. Thus only users belong to the group gamma may access /www/docs/ab/gamma.
    <Directory "/www/docs">
        AuthType Basic
        AuthName Documents
        AuthBasicProvider file
        AuthUserFile "/usr/local/apache/passwd/passwords"
        Require group alpha
    </Directory>
    
    <Directory "/www/docs/ab">
        AuthMerging Or
        Require group beta
    </Directory>
    
    <Directory "/www/docs/ab/gamma">
        Require group gamma
    </Directory>
    top

    <AuthzProviderAlias> Directive

    Description:Enclose a group of directives that represent an extension of a base authorization provider and referenced by the specified alias
    Syntax:<AuthzProviderAlias baseProvider Alias Require-Parameters> ... </AuthzProviderAlias>
    Context:server config
    Status:Base
    Module:mod_authz_core

    <AuthzProviderAlias> and </AuthzProviderAlias> are used to enclose a group of authorization directives that can be referenced by the alias name using the directive Require.

    If several parameters are needed in Require-Parameters, they must be enclosed in quotation marks. Otherwise, only the first one is taken into account.

    # In this example, for both addresses to be taken into account, they MUST be enclosed
    # between quotation marks
    <AuthzProviderAlias ip blacklisted-ips "XXX.XXX.XXX.XXX YYY.YYY.YYY.YYY">
    </AuthzProviderAlias>
    
    <Directory "/path/to/dir">
        <RequireAll>
            Require not blacklisted-ips
            Require all granted
        </RequireAll>
    </Directory>
    top

    AuthzSendForbiddenOnFailure Directive

    Description:Send '403 FORBIDDEN' instead of '401 UNAUTHORIZED' if authentication succeeds but authorization fails
    Syntax:AuthzSendForbiddenOnFailure On|Off
    Default:AuthzSendForbiddenOnFailure Off
    Context:directory, .htaccess
    Status:Base
    Module:mod_authz_core
    Compatibility:Available in Apache HTTPD 2.3.11 and later

    If authentication succeeds but authorization fails, Apache HTTPD will respond with an HTTP response code of '401 UNAUTHORIZED' by default. This usually causes browsers to display the password dialogue to the user again, which is not wanted in all situations. AuthzSendForbiddenOnFailure allows to change the response code to '403 FORBIDDEN'.

    Security Warning

    Modifying the response in case of missing authorization weakens the security of the password, because it reveals to a possible attacker, that his guessed password was right.

    top

    Require Directive

    Description:Tests whether an authenticated user is authorized by an authorization provider.
    Syntax:Require [not] entity-name [entity-name] ...
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_authz_core

    This directive tests whether an authenticated user is authorized according to a particular authorization provider and the specified restrictions. mod_authz_core provides the following generic authorization providers:

    Require all granted
    Access is allowed unconditionally.
    Require all denied
    Access is denied unconditionally.
    Require env env-var [env-var] ...
    Access is allowed only if one of the given environment variables is set.
    Require method http-method [http-method] ...
    Access is allowed only for the given HTTP methods.
    Require expr expression
    Access is allowed if expression evaluates to true.

    Some of the allowed syntaxes provided by mod_authz_user, mod_authz_host, and mod_authz_groupfile are:

    Require user userid [userid] ...
    Only the named users can access the resource.
    Require group group-name [group-name] ...
    Only users in the named groups can access the resource.
    Require valid-user
    All valid users can access the resource.
    Require ip 10 172.20 192.168.2
    Clients in the specified IP address ranges can access the resource.

    Other authorization modules that implement require options include mod_authnz_ldap, mod_authz_dbm, mod_authz_dbd, mod_authz_owner and mod_ssl.

    In most cases, for a complete authentication and authorization configuration, Require must be accompanied by AuthName, AuthType and AuthBasicProvider or AuthDigestProvider directives, and directives such as AuthUserFile and AuthGroupFile (to define users and groups) in order to work correctly. Example:

    AuthType Basic
    AuthName "Restricted Resource"
    AuthBasicProvider file
    AuthUserFile "/web/users"
    AuthGroupFile "/web/groups"
    Require group admin

    Access controls which are applied in this way are effective for all methods. This is what is normally desired. If you wish to apply access controls only to specific methods, while leaving other methods unprotected, then place the Require statement into a <Limit> section.

    The result of the Require directive may be negated through the use of the not option. As with the other negated authorization directive <RequireNone>, when the Require directive is negated it can only fail or return a neutral result, and therefore may never independently authorize a request.

    In the following example, all users in the alpha and beta groups are authorized, except for those who are also in the reject group.

    <Directory "/www/docs">
        <RequireAll>
            Require group alpha beta
            Require not group reject
        </RequireAll>
    </Directory>

    When multiple Require directives are used in a single configuration section and are not contained in another authorization directive like <RequireAll>, they are implicitly contained within a <RequireAny> directive. Thus the first one to authorize a user authorizes the entire request, and subsequent Require directives are ignored.

    Security Warning

    Exercise caution when setting authorization directives in Location sections that overlap with content served out of the filesystem. By default, these configuration sections overwrite authorization configuration in Directory, and Files sections.

    The AuthMerging directive can be used to control how authorization configuration sections are merged.

    See also

    top

    <RequireAll> Directive

    Description:Enclose a group of authorization directives of which none must fail and at least one must succeed for the enclosing directive to succeed.
    Syntax:<RequireAll> ... </RequireAll>
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_authz_core

    <RequireAll> and </RequireAll> are used to enclose a group of authorization directives of which none must fail and at least one must succeed in order for the <RequireAll> directive to succeed.

    If none of the directives contained within the <RequireAll> directive fails, and at least one succeeds, then the <RequireAll> directive succeeds. If none succeed and none fail, then it returns a neutral result. In all other cases, it fails.

    See also

    top

    <RequireAny> Directive

    Description:Enclose a group of authorization directives of which one must succeed for the enclosing directive to succeed.
    Syntax:<RequireAny> ... </RequireAny>
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_authz_core

    <RequireAny> and </RequireAny> are used to enclose a group of authorization directives of which one must succeed in order for the <RequireAny> directive to succeed.

    If one or more of the directives contained within the <RequireAny> directive succeed, then the <RequireAny> directive succeeds. If none succeed and none fail, then it returns a neutral result. In all other cases, it fails.

    Because negated authorization directives are unable to return a successful result, they can not significantly influence the result of a <RequireAny> directive. (At most they could cause the directive to fail in the case where they failed and all other directives returned a neutral value.) Therefore negated authorization directives are not permitted within a <RequireAny> directive.

    See also

    top

    <RequireNone> Directive

    Description:Enclose a group of authorization directives of which none must succeed for the enclosing directive to not fail.
    Syntax:<RequireNone> ... </RequireNone>
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_authz_core

    <RequireNone> and </RequireNone> are used to enclose a group of authorization directives of which none must succeed in order for the <RequireNone> directive to not fail.

    If one or more of the directives contained within the <RequireNone> directive succeed, then the <RequireNone> directive fails. In all other cases, it returns a neutral result. Thus as with the other negated authorization directive Require not, it can never independently authorize a request because it can never return a successful result. It can be used, however, to restrict the set of users who are authorized to access a resource.

    Because negated authorization directives are unable to return a successful result, they can not significantly influence the result of a <RequireNone> directive. Therefore negated authorization directives are not permitted within a <RequireNone> directive.

    See also

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_env.html.ja.utf80000644000000000000500000002611613412755316020030 0ustar rootsrc mod_env - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_env

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:CGI スクリプトåŠã³ SSI ãƒšãƒ¼ã‚¸ã«æ¸¡ã•れる環境変数を変更ã™ã‚‹æ©Ÿèƒ½ã‚’æä¾›ã™ã‚‹
    ステータス:Base
    モジュール識別å­:env_module
    ソースファイル:mod_env.c

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ã‚ˆã‚Š CGI スクリプト㨠SSI ページã«é©ç”¨ã•れる環境変数を制御ã™ã‚‹ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ 環境変数㯠httpd プロセスを起動ã—ãŸã‚·ã‚§ãƒ«ã‹ã‚‰æ¸¡ã•れã¾ã™ã€‚ã¾ãŸã€ 設定ファイルã§ç’°å¢ƒå¤‰æ•°ã‚’設定ã—ãŸã‚Šã€å‰Šé™¤ã—ãŸã‚Šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    Support Apache!

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    PassEnv ディレクティブ

    説明:シェルã‹ã‚‰ã®ç’°å¢ƒå¤‰æ•°ã‚’渡ã™
    æ§‹æ–‡:PassEnv env-variable [env-variable] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Base
    モジュール:mod_env

    httpd プロセスを起動ã—ãŸã‚·ã‚§ãƒ«ã®ç’°å¢ƒã‹ã‚‰ CGI スクリプト㨠SSI ãƒšãƒ¼ã‚¸ã«æ¸¡ã™ç’°å¢ƒå¤‰æ•°ã‚’一ã¤ä»¥ä¸ŠæŒ‡å®šã—ã¾ã™ã€‚

    例

    PassEnv LD_LIBRARY_PATH

    top

    SetEnv ディレクティブ

    説明:環境変数を設定ã™ã‚‹
    æ§‹æ–‡:SetEnv env-variable value
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Base
    モジュール:mod_env

    環境変数を設定ã—ã€ãれを CGI スクリプト㨠SSI ãƒšãƒ¼ã‚¸ã«æ¸¡ã™ã‚ˆã†ã«ã—ã¾ã™ã€‚

    例

    SetEnv SPECIAL_PATH /foo/bin

    top

    UnsetEnv ディレクティブ

    説明:環境ã‹ã‚‰å¤‰æ•°ã‚’å–り除ã
    æ§‹æ–‡:UnsetEnv env-variable [env-variable] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Base
    モジュール:mod_env

    CGI スクリプト㨠SSI ãƒšãƒ¼ã‚¸ã«æ¸¡ã•れる環境変数ã‹ã‚‰æŒ‡å®šã•れãŸç’°å¢ƒå¤‰æ•°ã‚’å–り除ãã¾ã™ã€‚

    例

    UnsetEnv LD_LIBRARY_PATH

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cache_socache.html0000644000000000000500000000034613362070302020474 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_cache_socache.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_cache_socache.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_authn_file.html0000644000000000000500000000063713362070302020065 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authn_file.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authn_file.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_authn_file.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_authn_file.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_alias.html.ja.utf80000644000000000000500000007106513412755316020334 0ustar rootsrc mod_alias - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_alias

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:ホストファイルシステム上ã®ã„ã‚ã„ã‚ãªé•ã†å ´æ‰€ã‚’ ドキュメントツリーã«ãƒžãƒƒãƒ—ã™ã‚‹æ©Ÿèƒ½ã¨ã€ URL ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’行ãªã†æ©Ÿèƒ½ã‚’æä¾›ã™ã‚‹
    ステータス:Base
    モジュール識別å­:alias_module
    ソースファイル:mod_alias.c

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚µãƒ¼ãƒã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒåˆ°ç€ã—ãŸã¨ãã« URL ã®æ“作や制御をã™ã‚‹ã“ã¨ã‚’å¯èƒ½ã«ã—ã¾ã™ã€‚Alias ディレクティブ㨠ScriptAlias ディレクティブ㯠URL ã¨ãƒ•ァイルシステムã®ãƒ‘スをマップã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã•れã¾ã™ã€‚ã“れ㯠DocumentRoot ã®ä¸‹ã«ãªã„ドキュメントをウェブã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ„リーã®ä¸€éƒ¨ã¨ã—㦠é€ã‚‰ã‚Œã‚‹ã‚ˆã†ã«ã—ã¾ã™ã€‚ScriptAlias ディレクティブã«ã¯ãƒžãƒƒãƒ—å…ˆã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãŒ CGI スクリプトã®ã¿ã§ã‚ã‚‹ã“ã¨ã‚’示ã™ã¨ã„ã†è¿½åŠ ã®åŠ¹æžœãŒã‚りã¾ã™ã€‚

    Redirect ディレクティブ㯠クライアントã«é•ã£ãŸ URL ã«æ–°ã—ã„リクエストをé€ã‚‹ã‚ˆã†ã«æŒ‡ç¤ºã—ã¾ã™ã€‚ã“れã¯ã€ ãƒªã‚½ãƒ¼ã‚¹ãŒæ–°ã—ã„場所ã«ç§»å‹•ã—ãŸã¨ãã«ã‚ˆã使用ã•れã¾ã™ã€‚

    mod_alias ã¯ç°¡å˜ãª URL æ“作å‘ã‘ã«è¨­è¨ˆã•れã¦ã„ã¾ã™ã€‚ ã‚ˆã‚Šè¤‡é›‘ãªæ“作ã€ã‚¯ã‚¨ãƒªãƒ¼ã‚¹ãƒˆãƒªãƒ³ã‚°ã®æ“作ã«ã¯ã€mod_rewrite ã§æä¾›ã•れるツールを使用ã—ã¦ãã ã•ã„。

    top

    処ç†ã®é †ç•ª

    様々ãªã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆä¸­ã§ã® Alias ã‚„ Redirect ã¯ä»–ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㨠åŒã˜ã‚ˆã†ã«æ¨™æº–㮠マージè¦å‰‡ 㫠従ã£ã¦å‡¦ç†ã•れã¾ã™ã€‚ãŸã ã—ã€(例ãˆã° <VirtualHost> セクションã®ä¸­ã®ã‚ˆã†ã«) 複数㮠Alias ã‚„ Redirect ㌠åŒã˜ã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆä¸­ã«ç¾ã‚ŒãŸå ´åˆã¯æ±ºã¾ã£ãŸé †ç•ªã§å‡¦ç†ã•れã¾ã™ã€‚

    ã¾ãšã€Alias ã®å‰ã«ã™ã¹ã¦ã® Redirect ãŒå‡¦ç†ã•れã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€Redirect ã‹ RedirectMatch ã«ãƒžãƒƒãƒã™ã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ã¯ Alias ã¯æ±ºã—ã¦é©ç”¨ã•れã¾ã›ã‚“。次ã«ã€Alias 㨠Redirect ãŒè¨­å®šãƒ•ァイル中㮠順番ã«é©ç”¨ã•ã‚Œã€æœ€åˆã«ãƒžãƒƒãƒã—ãŸã‚‚ã®ãŒå„ªå…ˆã•れã¾ã™ã€‚

    ã§ã™ã‹ã‚‰ã€äºŒã¤ä»¥ä¸Šã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒåŒã˜ãƒ‘スã«é©ç”¨ã•れるã¨ãã¯ã€ ã™ã¹ã¦ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®åŠ¹æžœã‚’å¾—ã‚‹ãŸã‚ã«ã¯ã‚ˆã‚Šè©³ã—ã„ãƒ‘ã‚¹ã‚’å…ˆã«æ›¸ã å¿…è¦ãŒã‚りã¾ã™ã€‚例ãˆã°ã€æ¬¡ã®è¨­å®šã¯æœŸå¾…通りã®å‹•作をã—ã¾ã™:

    Alias /foo/bar /baz
    Alias /foo /gaq

    ã—ã‹ã—ã€ä¸Šè¨˜ã®äºŒã¤ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®é †ç•ªãŒé€†ã«ãªã‚‹ã¨ã€ /foo Alias ㌠常㫠/foo/bar Alias より先ã«ãƒžãƒƒãƒã—ã¾ã™ã®ã§ã€å¾Œè€…㯠決ã—ã¦é©ç”¨ã•れるã“ã¨ã¯ã‚りã¾ã›ã‚“。

    top

    Alias ディレクティブ

    説明:URL をファイルシステムã®ä½ç½®ã«ãƒžãƒƒãƒ—ã™ã‚‹
    æ§‹æ–‡:Alias URL-path file-path|directory-path
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Base
    モジュール:mod_alias

    Alias ディレクティブã¯ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’ ローカルファイルシステム㮠DocumentRoot 以外ã®å ´æ‰€ã«ä¿ç®¡ã™ã‚‹ã“ã¨ã‚’å¯èƒ½ã«ã—ã¾ã™ã€‚ URL ã® (% ãŒå¾©å·ã•れãŸ) パス㌠url-path ã§å§‹ã¾ã‚‹ã‚‚ã®ã¯ directory-filename ã§å§‹ã¾ã‚‹ãƒ­ãƒ¼ã‚«ãƒ«ãƒ•ァイルã«ãƒžãƒƒãƒ—ã•れã¾ã™ã€‚

    例

    Alias /image /ftp/pub/image

    http://myserver/image/foo.gif ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—ã¦ã€ã‚µãƒ¼ãƒã¯ ファイル /ftp/pub/image/foo.gif ã‚’è¿”ã—ã¾ã™ã€‚

    ã‚‚ã— url-path ã®æœ€å¾Œã« / を書ã„ãŸãªã‚‰ã€ã‚µãƒ¼ãƒãŒã‚¨ã‚¤ãƒªã‚¢ã‚¹ã‚’展開ã™ã‚‹ãŸã‚ã«ã¯ã€æœ€å¾Œã® / ãŒå¿…è¦ã«ãªã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。ã™ãªã‚ã¡ã€Alias /icons/ /usr/local/apache/icons/ ã¨ã„ã†ã‚‚ã®ã‚’使用ã—ã¦ã„ã‚‹å ´åˆã¯ã€ /icons ã¨ã„ㆠurl ã¯ã‚¨ã‚¤ãƒªã‚¢ã‚¹ã•れã¾ã›ã‚“。

    エイリアスã®è¡Œã先をå«ã‚“ã§ã„ã‚‹ <Directory> セクションを追加ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã‹ã‚‚ã—れãªã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。 エイリアスã®å±•開㯠<Directory> セクションを調ã¹ã‚‹å‰ã«è¡Œãªã‚れã¾ã™ã®ã§ã€ エイリアスã®è¡Œã先㮠<Directory> セクションã®ã¿ 効果ãŒã‚りã¾ã™ã€‚ (ã—ã‹ã—ã€<Location> セクションã¯ã‚¨ã‚¤ãƒªã‚¢ã‚¹ãŒå‡¦ç†ã•れるå‰ã«å®Ÿè¡Œã•れã¾ã™ã®ã§ã€ ã“ã¡ã‚‰ã¯é©ç”¨ã•れã¾ã™ã€‚)

    特ã«ã€Alias ã‚’ DocumentRoot ディレクトリã®å¤–å´ã«é…ç½®ã—ãŸå ´åˆã¯ã€è¡Œãå…ˆã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«å¯¾ã™ã‚‹ アクセス権é™ã‚’明示的ã«åˆ¶é™ã—ãªã‘れã°ãªã‚‰ãªã„ã§ã—ょã†ã€‚

    例

    Alias /image /ftp/pub/image
    <Directory /ftp/pub/image>
    Order allow,deny
    Allow from all
    </Directory>

    top

    AliasMatch ディレクティブ

    説明:æ­£è¦è¡¨ç¾ã‚’使ã£ã¦ URL をファイルシステムã®ä½ç½®ã«ãƒžãƒƒãƒ—ã™ã‚‹
    æ§‹æ–‡:AliasMatch regex file-path|directory-path
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Base
    モジュール:mod_alias

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠Alias ã¨ã»ã¨ã‚“ã©åŒã˜ã§ã™ãŒã€ç°¡å˜ãªå…ˆé ­ã‹ã‚‰ã®ãƒžãƒƒãƒã‚’行ãªã†ã®ã§ã¯ãªã〠標準正è¦è¡¨ç¾ã‚’利用ã—ã¾ã™ã€‚ã“ã“ã§æŒ‡å®šã•ã‚ŒãŸæ­£è¦è¡¨ç¾ã¨ URL ã®ãƒ‘ス ãŒåˆã†ã‹ã©ã†ã‹ã‚’調ã¹ã€åˆã†å ´åˆã¯æ‹¬å¼§ã§æ‹¬ã‚‰ã‚ŒãŸãƒžãƒƒãƒã‚’ 与ãˆã‚‰ã‚ŒãŸæ–‡å­—列ã§ç½®ãæ›ãˆã€ãれをファイルåã¨ã—ã¦ä½¿ç”¨ã—ã¾ã™ã€‚ãŸã¨ãˆã°ã€ /icons ディレクトリを使ㆠãŸã‚ã«ã¯ä»¥ä¸‹ã®ã‚ˆã†ãªã‚‚ã®ãŒä½¿ç”¨ã§ãã¾ã™:

    AliasMatch ^/icons(.*) /usr/local/apache/icons$1

    top

    Redirect ディレクティブ

    説明:クライアントãŒé•ㆠURL ã‚’å–å¾—ã™ã‚‹ã‚ˆã†ã«å¤–部ã¸ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’ é€ã‚‹
    æ§‹æ–‡:Redirect [status] URL-path URL
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Base
    モジュール:mod_alias

    Redirect ディレクティブã¯å¤ã„ URL ã‚’æ–°ã—ã„ã‚‚ã®ã¸ãƒžãƒƒãƒ—ã—ã¾ã™ã€‚ æ–°ã—ã„ URL ãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«è¿”ã•れã¾ã™ã€‚ãã—ã¦ã€ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯æ–°ã—ã„アドレスをもã†ä¸€å›žå–å¾—ã—よã†ã¨ã—ã¾ã™ã€‚ URL-path (% ãŒå¾©å·ã•れãŸ) パスã§å§‹ã¾ã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã¸ã® ã™ã¹ã¦ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ URL ã§å§‹ã¾ã‚‹æ–°ã—ã„ (% ãŒç¬¦å·åŒ–ã•れãŸ) URL ã¸ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚¨ãƒ©ãƒ¼ãŒè¿”ã•れã¾ã™ã€‚

    例

    Redirect /service http://foo2.bar.com/service

    クライアント㯠http://myserver/service/foo.txt ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’行ãªã†ã¨ã€ä»£ã‚り㫠http://foo2.bar.com/service/foo.txt をアクセスã™ã‚‹ã‚ˆã†ã«å‘Šã’られã¾ã™ã€‚

    注æ„

    設定ファイル中ã®é †ç•ªã«é–¢ã‚らãšã€ Redirect ç³»ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠Alias ディレクティブ㨠ScriptAlias ディレクティブよりも優先ã•れã¾ã™ã€‚ ã¾ãŸã€.htaccess ファイルや <Directory> セクションã®ä¸­ã§ä½¿ã‚れã¦ã„ãŸã¨ã—ã¦ã‚‚ã€URL-path ã¯ç›¸å¯¾ãƒ‘スã§ã¯ãªãã€å®Œå…¨ãª URL ã§ãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    ã‚‚ã— status 引数ãŒä¸Žãˆã‚‰ã‚Œã¦ã„ãªã‘れã°ã€ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã¯ "temporary" (HTTP ステータス 302) ã«ãªã‚Šã¾ã™ã€‚ã“れã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã« リソースãŒä¸€æ™‚çš„ã«ç§»å‹•ã—ãŸã¨ã„ã†ã“ã¨ã‚’示ã—ã¾ã™ã€‚Status 引数㯠他㮠HTTP ã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’è¿”ã™ãŸã‚ã«ä½¿ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™:

    permanent
    永久ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’ã™ã‚‹ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ (301) ã‚’è¿”ã—ã¾ã™ã€‚ ã“れã¯ãƒªã‚½ãƒ¼ã‚¹ãŒæ°¸ä¹…ã«ç§»å‹•ã—ãŸã¨ã„ã†ã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚
    temp
    一時的ãªãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ (302) ã‚’è¿”ã—ã¾ã™ã€‚ã“れãŒãƒ‡ãƒ•ォルトã§ã™ã€‚
    seeother
    "See Other" ステータス (303) ã‚’è¿”ã—ã¾ã™ã€‚ ã“れã¯ãƒªã‚½ãƒ¼ã‚¹ãŒä»–ã®ã‚‚ã®ã§ç½®ãæ›ãˆã‚‰ã‚ŒãŸã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚
    gone
    "Gone" ステータス (410) ã‚’è¿”ã—ã¾ã™ã€‚ã“れã¯ãƒªã‚½ãƒ¼ã‚¹ãŒæ°¸ä¹…㫠削除ã•れãŸã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚ã“ã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ãŒä½¿ç”¨ã•れãŸå ´åˆã€ url 引数ã¯çœç•¥ã•れãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    Status ã®å€¤ã«ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’数値ã§ä¸Žãˆã‚‹ã“ã¨ã§ ä»–ã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã‚‚è¿”ã™ã“ã¨ãŒã§ãã¾ã™ã€‚ステータス㌠300 㨠399 ã®é–“ã«ã‚ã‚‹å ´åˆã€url 引数ã¯å­˜åœ¨ã—ã¦ã„ãªã‘れã°ã„ã‘ã¾ã›ã‚“。 ãã®ä»–ã®å ´åˆã¯çœç•¥ã•れã¦ã„ãªã‘れã°ãªã‚Šã¾ã›ã‚“。ãŸã ã—〠ステータス㯠Apache ã®ã‚³ãƒ¼ãƒ‰ãŒçŸ¥ã£ã¦ã„ã‚‹ã‚‚ã®ã§ã‚ã‚‹å¿…è¦ãŒã‚りã¾ã™ (http_protocol.c ã®é–¢æ•° send_error_response を見ã¦ãã ã•ã„)。

    例:

    例

    Redirect permanent /one http://example.com/two
    Redirect 303 /three http://example.com/other

    top

    RedirectMatch ディレクティブ

    説明:ç¾åœ¨ã® URL ã¸ã®æ­£è¦è¡¨ç¾ã®ãƒžãƒƒãƒã«ã‚ˆã‚Š å¤–éƒ¨ã¸ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’é€ã‚‹
    æ§‹æ–‡:RedirectMatch [status] regex URL
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Base
    モジュール:mod_alias

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠Redirect ã¨ã»ã¨ã‚“ã©åŒã˜ã§ã™ãŒã€ç°¡å˜ãªå…ˆé ­ã‹ã‚‰ã®ãƒžãƒƒãƒã‚’行ãªã†ã®ã§ã¯ãªã〠標準正è¦è¡¨ç¾ã‚’利用ã—ã¾ã™ã€‚ã“ã“ã§æŒ‡å®šã•ã‚ŒãŸæ­£è¦è¡¨ç¾ã¨ URL-path ãŒåˆã†ã‹ã©ã†ã‹ã‚’調ã¹ã€åˆã†å ´åˆã¯æ‹¬å¼§ã§æ‹¬ã‚‰ã‚ŒãŸãƒžãƒƒãƒã‚’ 与ãˆã‚‰ã‚ŒãŸæ–‡å­—列ã§ç½®ãæ›ãˆã€ãれをファイルåã¨ã—ã¦ä½¿ç”¨ã—ã¾ã™ã€‚ ãŸã¨ãˆã°ã€ã™ã¹ã¦ã® GIF ファイルを別サーãƒã®åŒæ§˜ãªåå‰ã® JPEG ファイルã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã™ã‚‹ã«ã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ãªã‚‚ã®ã‚’使ã„ã¾ã™:

    RedirectMatch (.*)\.gif$ http://www.anotherserver.com$1.jpg

    top

    RedirectPermanent ディレクティブ

    説明:クライアントãŒé•ㆠURL ã‚’å–å¾—ã™ã‚‹ã‚ˆã†ã«å¤–部ã¸ã®æ°¸ä¹…的㪠リダイレクトをé€ã‚‹
    æ§‹æ–‡:RedirectPermanent URL-path URL
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Base
    モジュール:mod_alias

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã« Redirect ãŒæ°¸ä¹…çš„ãªã‚‚ã® (ステータス 301) ã§ã‚ã‚‹ã“ã¨ã‚’知らã›ã¾ã™ã€‚ Redirect permanent ã¨ã¾ã£ãŸãåŒã˜ã§ã™ã€‚

    top

    RedirectTemp ディレクティブ

    説明:クライアントãŒé•ㆠURL ã‚’å–å¾—ã™ã‚‹ã‚ˆã†ã«å¤–部ã¸ã®ä¸€æ™‚的㪠リダイレクトをé€ã‚‹
    æ§‹æ–‡:RedirectTemp URL-path URL
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Base
    モジュール:mod_alias

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã« Redirect ãŒä¸€æ™‚çš„ãªã‚‚ã®ã§ã‚ã‚‹ (ステータス 302) ã“ã¨ã‚’知らã›ã¾ã™ã€‚ Redirect temp ã¨ã¾ã£ãŸãåŒã˜ã§ã™ã€‚

    top

    ScriptAlias ディレクティブ

    説明:URL をファイルシステムã®ä½ç½®ã¸ãƒžãƒƒãƒ—ã—ã€ãƒžãƒƒãƒ—先を CGI ã‚¹ã‚¯ãƒªãƒ—ãƒˆã«æŒ‡å®š
    æ§‹æ–‡:ScriptAlias URL-path file-path|directory-path
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Base
    モジュール:mod_alias

    ScriptAlias ディレクティブã¯ã€å¯¾è±¡ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã« mod_cgi ã® cgi-script ãƒãƒ³ãƒ‰ãƒ©ã§å‡¦ç†ã•れる CGI スクリプトãŒã‚ã‚‹ã“ã¨ã‚’示ã™ä»¥å¤–㯠Alias ディレクティブã¨åŒã˜æŒ¯ã‚‹èˆžã„ã‚’ã—ã¾ã™ã€‚ URL ã® (% ãŒå¾©å·ã•れãŸ) パス㌠URL-path ã§å§‹ã¾ã‚‹ã‚‚ã®ã¯ ローカルã®ãƒ•ァイルシステム㮠フルパスã§ã‚る二番目ã®å¼•æ•°ã«ãƒžãƒƒãƒ—ã•れã¾ã™ã€‚

    例

    ScriptAlias /cgi-bin/ /web/cgi-bin/

    http://myserver/cgi-bin/foo ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—ã¦ã‚µãƒ¼ãƒã¯ã‚¹ã‚¯ãƒªãƒ—ト /web/cgi-bin/foo を実行ã—ã¾ã™ã€‚

    top

    ScriptAliasMatch ディレクティブ

    説明:URL ã‚’æ­£è¦è¡¨ç¾ã‚’使ã£ã¦ãƒ•ァイルシステムã®ä½ç½®ã¸ãƒžãƒƒãƒ—ã—ã€ãƒžãƒƒãƒ—先を CGI ã‚¹ã‚¯ãƒªãƒ—ãƒˆã«æŒ‡å®š
    æ§‹æ–‡:ScriptAliasMatch regex file-path|directory-path
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Base
    モジュール:mod_alias

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠ScriptAlias ã¨ã»ã¨ã‚“ã©åŒã˜ã§ã™ãŒã€ç°¡å˜ãªå…ˆé ­ã‹ã‚‰ã®ãƒžãƒƒãƒã‚’行ãªã†ã®ã§ã¯ãªã〠標準正è¦è¡¨ç¾ã‚’利用ã—ã¾ã™ã€‚ã“ã“ã§æŒ‡å®šã•ã‚ŒãŸæ­£è¦è¡¨ç¾ã¨ URL-path ãŒåˆã†ã‹ã©ã†ã‹ã‚’調ã¹ã€åˆã†å ´åˆã¯æ‹¬å¼§ã§æ‹¬ã‚‰ã‚ŒãŸãƒžãƒƒãƒã‚’ 与ãˆã‚‰ã‚ŒãŸæ–‡å­—列ã§ç½®ãæ›ãˆã€ãれをファイルåã¨ã—ã¦ä½¿ç”¨ã—ã¾ã™ã€‚ ãŸã¨ãˆã°ã€æ¨™æº–ã® /cgi-bin を使用ã™ã‚‹ã‚ˆã†ã«ã™ã‚‹ãŸã‚ã«ã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ãªã‚‚ã®ã‚’使ã„ã¾ã™:

    ScriptAliasMatch ^/cgi-bin(.*) /usr/local/apache/cgi-bin$1

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authnz_ldap.html.fr.utf80000644000000000000500000025463413434266145021577 0ustar rootsrc mod_authnz_ldap - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authnz_ldap

    Langues Disponibles:  en  |  fr 

    Description:Permet d'utiliser un annuaire LDAP pour l'authentification HTTP de base.
    Statut:Extension
    Identificateur de Module:authnz_ldap_module
    Fichier Source:mod_authnz_ldap.c
    Compatibilité:Disponible depuis les versions 2.1 et supérieures d'Apache

    Sommaire

    Ce module permet aux frontaux d'authentification comme mod_auth_basic d'authentifier les utilisateurs via un annuaire ldap.

    mod_authnz_ldap supporte les fonctionnalités suivantes :

    • Support vérifié du OpenLDAP SDK (versions 1.x et 2.x), du Novell LDAP SDK et du SDK iPlanet (Netscape).
    • Implémentation de politiques d'autorisation complexes en les définissant via des filtres LDAP.
    • Mise en oeuvre d'une mise en cache des opérations LDAP élaborée via mod_ldap.
    • Support de LDAP via SSL (nécessite le SDK Netscape) ou TLS (nécessite le SDK OpenLDAP 2.x ou le SDK LDAP Novell).

    Lorsqu'on utilise mod_auth_basic, ce module est invoqué en affectant la valeur ldap à la directive AuthBasicProvider.

    top
    top

    Mises en garde à caractère général

    Ce module effectue une mise en cache des résultats du processus d'authentification et d'autorisation en fonction de la configuration du module mod_ldap. Les modifications effectuées au niveau du serveur LDAP d'arrière-plan comme les verrouillages ou révocations d'utilisateurs, les changements de mot de passe, ou les changements d'appartenance à un groupe (et cette liste n'est pas exhaustive), ne seront pas immédiatement propagées jusqu'au serveur HTTP. Consultez les directives du module mod_ldap pour plus de détails à propos de la configuration de la mise en cache.

    top

    Mode opératoire

    L'utilisateur se voit accorder l'accès selon un processus en deux phases. La première phase est l'authentification, au cours de laquelle le fournisseur d'authentification mod_authnz_ldap vérifie que les informations de connexion de l'utilisateur sont valides. Elle est aussi connue sous le nom de phase de recherche/connexion (NdT : en anglais ou dans le code source : search/bind). La deuxième phase est l'autorisation, au cours de laquelle mod_authnz_ldap détermine si l'utilisateur authentifié a la permission d'accéder à la ressource considérée. Elle est aussi connue sous le nom de phase de comparaison (compare).

    mod_authnz_ldap comporte un fournisseur d'authentification authn_ldap et un gestionnaire d'autorisation authz_ldap. Le fournisseur d'authentification authn_ldap peut être invoqué en affectant la valeur ldap à la directive AuthBasicProvider. Le gestionnaire d'autorisation authz_ldap enrichit la liste des types d'autorisations de la directive Require en y ajoutant les valeurs ldap-user, ldap-dn et ldap-group.

    La phase d'authentification

    Au cours de la phase d'authentification, mod_authnz_ldap recherche une entrée de l'annuaire LDAP qui correspond au nom d'utilisateur fourni par le client HTTP. Si une correspondance unique est trouvée, mod_authnz_ldap tente de se connecter au serveur hébergeant l'annuaire LDAP en utilisant le DN de l'entrée et le mot de passe fourni par le client HTTP. Comme ce processus effectue tout d'abord une recherche, puis une connexion, il est aussi connu sous le nom de phase de recherche/connexion. Voici le détail des étapes constituant la phase de recherche/connexion :

    1. Confection d'un filtre de recherche en combinant les attribut et filtre définis par la directive AuthLDAPURL avec le nom d'utilisateur et le mot de passe fournis par le client HTTP.
    2. Recherche dans l'annuaire LDAP en utilisant le filtre confectionné précédemment. Si le résultat de la recherche est négatif ou comporte plusieurs entrées, refus ou restriction de l'accès.
    3. Extraction du DN (distinguished name) de l'entrée issue du résultat de la recherche, et tentative de connexion au serveur LDAP en utilisant ce DN et le mot de passe fournis par le client HTTP. Si la connexion échoue, refus ou restriction de l'accès.

    Les directives utilisées durant la phase de recherche/connexion sont les suivantes :

    AuthLDAPURL Spécifie le serveur LDAP, le DN de base, l'attribut à utiliser pour la recherche, ainsi que les filtres de recherche supplémentaires.
    AuthLDAPBindDN Un DN optionnel pour se connecter durant la phase de recherche.
    AuthLDAPBindPassword Un mot de passe optionnel pour se connecter durant la phase de recherche.

    La phase d'autorisation

    Au cours de la phase d'autorisation, mod_authnz_ldap tente de déterminer si l'utilisateur est autorisé à accéder à la ressource considérée. Une grande partie de cette vérification consiste pour mod_authnz_ldap en des opérations de comparaison au niveau du serveur LDAP. C'est pourquoi cette phase est aussi connue sous le nom de phase de comparaison. mod_authnz_ldap accepte les directives Require suivantes pour déterminer si les informations de connexion permettent d'accorder l'accès à l'utilisateur :

    • Avec la directive Require ldap-user, l'autorisation d'accès est accordée si le nom d'utilisateur spécifié par la directive correspond au nom d'utilisateur fourni par le client.
    • Avec la directive Require ldap-dn, l'autorisation d'accès est accordée si le DN spécifié par la directive correspond au DN extrait du résultat de la recherche dans l'annuaire LDAP.
    • Avec la directive Require ldap-group, l'autorisation d'accès est accordée si le DN extrait du résultat de la recherche dans l'annuaire LDAP (ou le nom d'utilisateur fourni par le client) appartient au groupe LDAP spécifié par la directive, ou éventuellement à un de ses sous-groupes.
    • Avec la directive Require ldap-attribute, l'autorisation d'accès est accordée si la valeur de l'attribut extraite de la recherche dans l'annuaire LDAP correspond à la valeur spécifiée par la directive.
    • Avec la directive Require ldap-filter, l'autorisation d'accès est accordée si le filtre de recherche renvoie un objet utilisateur unique qui corresponde au DN de l'utilisateur authentifié.
    • dans tous les autres cas, refus ou restriction de l'accès.

    Sous réserve du chargement de modules d'autorisation supplémentaires, d'autres valeurs de la directive Require peuvent être spécifiées.

    Durant la phase de comparaison, mod_authnz_ldap utilise les directives suivantes :

    AuthLDAPURL On utilise l'attribut spécifié dans l'URL pour les opérations de comparaison initiées par la directive Require ldap-user.
    AuthLDAPCompareDNOnServer Détermine le comportement de la directive Require ldap-dn.
    AuthLDAPGroupAttribute Détermine l'attribut utilisé pour les opérations de comparaison initiées par la directive Require ldap-group.
    AuthLDAPGroupAttributeIsDN Spécifie si l'on doit utiliser le DN ou le nom de l'utilisateur lors des opérations de comparaison initiées par la directive Require ldap-group.
    AuthLDAPMaxSubGroupDepth Détermine la profondeur maximale de l'arborescence des sous-groupes qui seront évalués au cours des opérations de comparaisons initiées par la directive Require ldap-group.
    AuthLDAPSubGroupAttribute Détermine l'attribut à utiliser lors de l'extraction de membres de sous-groupes du groupe courant au cours des opérations de comparaison initiées par la directive Require ldap-group.
    AuthLDAPSubGroupClass Spécifie les valeurs de classe d'objet LDAP à utiliser pour déterminer si les objets extraits de l'annuaire sont bien des objets de type groupe (et non des objets de type utilisateur), au cours du traitement des sous-groupes initié par la directive Require ldap-group.
    top

    Les directives requises

    Les directives Require d'Apache sont utilisées au cours de la phase d'autorisation afin de s'assurer que l'utilisateur est autorisé à accéder à une ressource. mod_authnz_ldap enrichit la liste des types d'autorisations avec les valeurs ldap-user, ldap-dn, ldap-group, ldap-attribute et ldap-filter. D'autres types d'autorisations sont disponibles, sous réserve du chargement de modules d'autorisation supplémentaires.

    Depuis la version 2.4.8, les directives require LDAP supportent les expressions.

    Require ldap-user

    La directive Require ldap-user permet de spécifier les noms des utilisateurs autorisés à accéder à la ressource. Lorsque mod_authnz_ldap a extrait un DN unique de l'annuaire LDAP, il effectue une opération de comparaison LDAP en utilisant le nom d'utilisateur spécifié par la directive Require ldap-user, pour vérifier si ce nom d'utilisateur correspond à l'entrée LDAP extraite. On peut accorder l'accès à plusieurs utilisateurs en plaçant plusieurs nom d'utilisateurs sur la même ligne séparés par des espaces. Si un nom d'utilisateur contient des espaces, il doit être entouré de guillemets. On peut aussi accorder l'accès à plusieurs utilisateurs en utilisant une directive Require ldap-user par utilisateur. Par exemple, avec la directive AuthLDAPURL définie à ldap://ldap/o=Example?cn (spécifiant donc que l'attribut cn sera utilisé pour les recherches), on pourra utiliser les directives Require suivantes pour restreindre l'accès :

    Require ldap-user "Barbara Jenson"
    Require ldap-user "Fred User"
    Require ldap-user "Joe Manager"

    De par la manière dont mod_authnz_ldap traite cette directive, Barbara Jenson peut s'authentifier comme Barbara Jenson, Babs Jenson ou tout autre cn sous lequel elle est enregistrée dans l'annuaire LDAP. Une seule ligne Require ldap-user suffit pour toutes les valeurs de l'attribut dans l'entrée LDAP de l'utilisateur.

    Si l'attribut uid avait été spécifié à la place de l'attribut cn dans l'URL précédente, les trois lignes ci-dessus auraient pû être condensées en une seule ligne :

    Require ldap-user bjenson fuser jmanager

    Require ldap-group

    Cette directive permet de spécifier un groupe LDAP dont les membres auront l'autorisation d'accès. Elle prend comme argument le DN du groupe LDAP. Note : n'entourez pas le nom du groupe avec des guillemets. Par exemple, supposons que l'entrée suivante existe dans l'annuaire LDAP :

    dn: cn=Administrators, o=Example
    objectClass: groupOfUniqueNames
    uniqueMember: cn=Barbara Jenson, o=Example
    uniqueMember: cn=Fred User, o=Example

    La directive suivante autoriserait alors l'accès à Fred et Barbara :

    Require ldap-group cn=Administrators, o=Example

    Les membres peuvent aussi se trouver dans les sous-groupes du groupe LDAP spécifié si la directive AuthLDAPMaxSubGroupDepth a été définie à une valeur supérieure à 0. Par exemple, supposons que les entrées suivantes existent dans l'annuaire LDAP :

    dn: cn=Employees, o=Example
    objectClass: groupOfUniqueNames
    uniqueMember: cn=Managers, o=Example
    uniqueMember: cn=Administrators, o=Example
    uniqueMember: cn=Users, o=Example
    
    dn: cn=Managers, o=Example
    objectClass: groupOfUniqueNames
    uniqueMember: cn=Bob Ellis, o=Example
    uniqueMember: cn=Tom Jackson, o=Example
    
    dn: cn=Administrators, o=Example
    objectClass: groupOfUniqueNames
    uniqueMember: cn=Barbara Jenson, o=Example
    uniqueMember: cn=Fred User, o=Example
    
    dn: cn=Users, o=Example
    objectClass: groupOfUniqueNames
    uniqueMember: cn=Allan Jefferson, o=Example
    uniqueMember: cn=Paul Tilley, o=Example
    uniqueMember: cn=Temporary Employees, o=Example
    
    dn: cn=Temporary Employees, o=Example
    objectClass: groupOfUniqueNames
    uniqueMember: cn=Jim Swenson, o=Example
    uniqueMember: cn=Elliot Rhodes, o=Example

    Les directives suivantes autoriseraient alors l'accès à Bob Ellis, Tom Jackson, Barbara Jenson, Fred User, Allan Jefferson, et Paul Tilley, mais l'interdiraient à Jim Swenson, ou Elliot Rhodes (car ils sont situés dans un sous-groupe de niveau de profondeur 2) :

    Require ldap-group cn=Employees, o=Example
    AuthLDAPMaxSubGroupDepth 1

    Le comportement de cette directive est modifié par les directives AuthLDAPGroupAttribute, AuthLDAPGroupAttributeIsDN, AuthLDAPMaxSubGroupDepth, AuthLDAPSubGroupAttribute, et AuthLDAPSubGroupClass.

    Require ldap-dn

    La directive Require ldap-dn permet à l'administrateur d'accorder l'utorisation d'accès en fonction du DN. Elle permet de spécifier un DN pour lequel l'accès est autorisé. Si le DN extrait de l'annuaire correspond au DN spécifié par la directive Require ldap-dn, l'autorisation d'accès est accordée. Note : n'entourez pas Le DN de guillemets.

    La directive suivante accorderait l'accès à un DN spécifique :

    Require ldap-dn cn=Barbara Jenson, o=Example

    Le comportement ce cette directive est modifié par la directive AuthLDAPCompareDNOnServer.

    Require ldap-attribute

    La directive Require ldap-attribute permet à l'administrateur d'accorder l'autorisation d'accès en fonction des attributs de l'utilisateur authentifié dans l'annuaire LDAP. Si la valeur de l'attribut dans l'annuaire correspond à la valeur spécifiée par la directive, l'autorisation d'accès est accordée.

    La directive suivante accorderait l'autorisation d'accès à tout utilisateur dont l'attribut employeeType a pour valeur "actif" :

    Require ldap-attribute employeeType="active"

    Plusieurs paires attribut/valeur peuvent être spécifiées par une même directive en les séparant par des espaces, ou en définissant plusieurs directives Require ldap-attribute. La logique sous-jacente à une liste de paires attribut/valeur est une opération OU. L'autorisation d'accès sera accordée si au moins une paire attribut/valeur de la liste spécifiée correspond à la paire attribut/valeur de l'utilisateur authentifié. Si elle contient des espaces, la valeur, et seulement la valeur, doit être entourée de guillemets.

    La directive suivante accorderait l'autorisation d'accès à tout utilisateur dont l'attribut city aurait pour valeur "San Jose", ou donc l'attribut status aurait pour valeur "actif" :

    Require ldap-attribute city="San Jose" status="active"

    Require ldap-filter

    La directive Require ldap-filter permet à l'administrateur d'accorder l'autorisation d'accès en fonction d'un filtre de recherche LDAP complexe. L'autorisation d'accès est accordée si le DN renvoyé par le filtre de recherche correspond au DN de l'utilisateur authentifié.

    La directive suivante accorderait l'autorisation d'accès à tout utilisateur possédant un téléphone cellulaire et faisant partie du département "marketing" :

    Require ldap-filter &(cell=*)(department=marketing)

    Alors que la directive Require ldap-attribute se contente d'une simple comparaison d'attributs, la directive Require ldap-filter effectue une opération de recherche dans l'annuaire LDAP en utilisant le filtre de recherche spécifié. Si une simple comparaison d'attributs suffit, l'opération de comparaison effectuée par ldap-attribute sera plus rapide que l'opération de recherche effectuée par ldap-filter, en particulier dans le cas d'un annuaire LDAP de grande taille.

    top

    Exemples

    • Accorde l'autorisation d'accès à tout utilisateur présent dans l'annuaire LDAP, en utilisant son UID pour effectuer la recherche :
      AuthLDAPURL "ldap://ldap1.example.com:389/ou=People, o=Example?uid?sub?(objectClass=*)"
      Require valid-user
    • L'exemple suivant est similaire au précédent, mais les champs dont les valeurs par défaut conviennent sont omis. Notez aussi la présence d'un annuaire LDAP redondant :
      AuthLDAPURL "ldap://ldap1.example.com ldap2.example.com/ou=People, o=Example"
      Require valid-user
    • Encore un exemple similaire aux précédents, mais cette fois, c'est l'attribut cn qui est utilisé pour la recherche à la place de l'UID. Notez que ceci peut poser problème si plusieurs utilisateurs de l'annuaire partagent le même cn, car une recherche sur le cn doit retourner une entrée et une seule. C'est pourquoi cette approche n'est pas recommandée : il est préférable de choisir un attribut de votre annuaire dont l'unicité soit garantie, comme uid.
      AuthLDAPURL "ldap://ldap.example.com/ou=People, o=Example?cn"
      Require valid-user
    • Accorde l'autorisation d'accès à tout utilisateur appartenant au groupe Administrateurs. Les utilisateurs doivent s'authentifier en utilisant leur UID :
      AuthLDAPURL ldap://ldap.example.com/o=Example?uid
      Require ldap-group cn=Administrators, o=Example
    • Accorde l'accès à tout utilisateur appartenant au groupe dont le nom correspond au nom d'hôte du serveur virtuel. Dans cet exemple, on utilise une expression pour construire le filtre.
      AuthLDAPURL ldap://ldap.example.com/o=Example?uid
      Require ldap-group cn=%{SERVER_NAME}, o=Example
    • Pour l'exemple suivant, on suppose que tout utilisateur de chez Example qui dispose d'un bippeur alphanumérique possèdera un attribut LDAP qpagePagerID. Seuls ces utilisateurs (authentifiés via leur UID) se verront accorder l'autorisation d'accès :
      AuthLDAPURL ldap://ldap.example.com/o=Example?uid??(qpagePagerID=*)
      Require valid-user
    • L'exemple suivant illustre la puissance des filtres pour effectuer des requêtes complexes. Sans les filtres, il aurait été nécessaire de créer un nouveau groupe LDAP et de s'assurer de la synchronisation des membres du groupe avec les utilisateurs possédant un bippeur. Tout devient limpide avec les filtres. Nous avons pour but d'accorder l'autorisation d'accès à tout utilisateur disposant d'un bippeur ainsi qu'à Joe Manager qui ne possède pas de bippeur, mais doit tout de même pouvoir accéder à la ressource :

      AuthLDAPURL ldap://ldap.example.com/o=Example?uid??(|(qpagePagerID=*)(uid=jmanager))
      Require valid-user

      Ce dernier exemple peut sembler confus au premier abord ; en fait, il permet de mieux comprendre à quoi doit ressembler le filtre en fonction de l'utilisateur qui se connecte. Si Fred User se connecte en tant que fuser, le filtre devra ressembler à :

      (&(|(qpagePagerID=*)(uid=jmanager))(uid=fuser))

      Un recherche avec le filtre ci-dessus ne retournera un résultat positif que si fuser dispose d'un bippeur. Si Joe Manager se connecte en tant que jmanager, le filtre devra ressembler à :

      (&(|(qpagePagerID=*)(uid=jmanager))(uid=jmanager))

      Un recherche avec le filtre ci-dessus retournera un résultat positif que jmanager dispose d'un bippeur ou non

    top

    Utilisation de TLS

    Pour l'utilisation de TLS, voir les directives du module mod_ldap LDAPTrustedClientCert, LDAPTrustedGlobalCert et LDAPTrustedMode.

    Un second paramètre optionnel peut être ajouté à la directive AuthLDAPURL pour remplacer le type de connexion par défaut défini par la directive LDAPTrustedMode. Ceci permettra de promouvoir la connexion établie via une URL du type ldap:// au statut de connection sécurisée sur le même port.

    top

    Utilisation de SSL

    Pour l'utilisation de SSL, voir les directives du module mod_ldap LDAPTrustedClientCert, LDAPTrustedGlobalCert et LDAPTrustedMode.

    Pour spécifier un serveur LDAP sécurisé, utilisez ldaps:// au lieu de ldap:// dans la directive AuthLDAPURL.

    top

    Mise à disposition des informations de connexion

    Au cours du processus d'authentification, les attributs LDAP spécifiés par la directive AuthLDAPURL sont enregistrés dans des variables d'environnement préfixées par la chaîne "AUTHENTICATE_".

    Au cours du processus d'autorisation, les attributs LDAP spécifiés par la directive AuthLDAPURL sont enregistrés dans des variables d'environnement préfixées par la chaîne "AUTHORIZE_".

    Si les champs attribut contiennent le nom, le CN et le numéro de téléphone d'un utilisateur, un programme CGI pourra accéder à ces informations sans devoir effectuer une autre requête LDAP pour les extraire de l'annuaire.

    Ceci a pour effet de simplifier considérablement le code et la configuration nécessaire de certaines applications web.

    top

    Utilisation d'Active Directory

    Active Directory peut supporter plusieurs domaines à la fois. Pour faire la distinction entre les utilisateurs de plusieurs domaines, on peut ajouter à l'entrée de l'utilisateur dans l'annuaire un identifiant appelé Nom Principal d'Utilisateur (User Principle Name ou UPN). Cet UPN se compose en général du nom de compte de l'utilisateur, suivi du nom du domaine considéré, par exemple untel@nz.example.com.

    Vous voudrez probablement configurer le module mod_authnz_ldap afin de pouvoir authentifier les utilisateurs de n'importe quel domaine de la forêt Active Directory. Ainsi, untel@nz.example.com et untel@au.example.com pourront être authentifiés en une seule fois par la même requête.

    Pour y parvenir, on utilise le concept de Catalogue Global d'Active Directory. Ce Catalogue Global est une copie en lecture seule des attributs sélectionnés de tous les serveurs de la forêt Active Directory. Une requête vers le Catalogue Global permet donc d'atteindre tous les domaines en une seule fois, sans avoir à se connecter aux différents serveurs, via des liaisons dont certaines peuvent être lentes.

    Lorsqu'il est activé, la Catalogue Global est un serveur d'annuaire indépendant accessible sur le port 3268 (3269 pour SSL). Pour rechercher un utilisateur, effectuez une recherche sur l'attribut userPrincipalName, avec une base de recherche vide, comme suit :

    AuthLDAPBindDN apache@example.com
    AuthLDAPBindPassword password
    AuthLDAPURL ldap://10.0.0.1:3268/?userPrincipalName?sub

    Les utilisateurs devront s'authentifier en entrant leur UPN, de la formeuntel@nz.example.com.

    top

    Utilisation de Microsoft FrontPage avec mod_authnz_ldap

    Normalement, FrontPage utilise des fichiers utilisateur/groupe spécifiques à FrontPage-web (c'est à dire les modules mod_authn_file et mod_authz_groupfile) pour effectuer toute l'authentification. Malheureusement, il ne suffit pas de modifier l'authentification LDAP en ajoutant les directives appropriées, car ceci corromprait les formulaires de Permissions dans le client FrontPage, qui sont censés modifier les fichiers d'autorisation standards au format texte.

    Lorsqu'un site web FrontPage a été créé, lui adjoindre l'authentification LDAP consiste à ajouter les directives suivantes à chaque fichier .htaccess qui sera créé dans le site web :

    AuthLDAPURL       "the url"
    AuthGroupFile     "mygroupfile"
    Require group     "mygroupfile"

    Comment ça marche

    FrontPage restreint l'accès à un site web en ajoutant la directive Require valid-user aux fichiers .htaccess. La directive Require valid-user permettra l'accès à tout utilisateur valide du point de vue LDAP. Cela signifie que tout utilisateur possédant une entrée dans l'annuaire LDAP sera considéré comme valide, alors que FrontPage ne considère comme valides que les utilisateurs enregistrés dans le fichier des utilisateurs local. En remplaçant l'autorisation par groupe LDAP par une autorisation par fichier de groupe, Apache sera en mesure de consulter le fichier des utilisateurs local (géré par FrontPage) - au lieu de l'annuaire LDAP - lors du processus d'autorisation des utilisateurs.

    Une fois les directives ajoutées selon ce qui précède, les utilisateurs FrontPage pourront effectuer toutes les opérations de gestion à partir du client FrontPage.

    Avertissements

    • Lors du choix de l'URL LDAP, l'attribut à utiliser pour l'authentification doit aussi être valide pour le fichier des utilisateurs de mod_authn_file. A cette fin, l'UID est idéal.
    • Lorsqu'ils ajoutent des utilisateurs via FrontPage, les administrateurs de FrontPage doivent choisir des noms d'utilisateurs qui existent déjà dans l'annuaire LDAP (pour des raisons évidentes). De même, le mot de passe que l'administrateur entre dans le formulaire est ignoré, car pour l'authentification, Apache utilise le mot de passe de l'annuaire LDAP, et non le mot de passe enregistré dans le fichier des utilisateurs, ce qui peut semer la confusion parmi les administrateurs web.
    • Pour supporter FrontPage, Apache doit être compilé avec mod_auth_basic, mod_authn_file et mod_authz_groupfile. Ceci est dû au fait qu'Apache doit utiliser le fichier de groupes de mod_authz_groupfile pour déterminer le niveau d'accès d'un utilisateur au site web FrontPage.
    • Les directives doivent être placées dans les fichiers .htaccess. Elles ne fonctionneront pas si vous les placez dans une section <Location> ou <Directory>. Ceci est dû au fait que pour savoir où se trouve la liste des utilisateurs valides, mod_authnz_ldap doit être en mesure d'atteindre la directive AuthGroupFile qui se trouve dans les fichiers .htaccess de FrontPage. Si les directives de mod_authnz_ldap ne sont pas situées dans le même fichier .htaccess que les directives FrontPage, la configuration ne fonctionnera pas, car mod_authnz_ldap ne sera jamais en mesure de traiter le fichier .htaccess, et par conséquent ne pourra jamais trouver le fichier des utilisateurs géré par FrontPage.
    top

    Directive AuthLDAPAuthorizePrefix

    Description:Spécifie le préfixe ajouté aux variables d'environnement durant la phase d'autorisation
    Syntaxe:AuthLDAPAuthorizePrefix préfixe
    Défaut:AuthLDAPAuthorizePrefix AUTHORIZE_
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap
    Compatibilité:Disponible depuis la version 2.3.6

    Cette directive permet de spécifier le préfixe ajouté aux variables d'environnement durant la phase d'autorisation. Si la valeur spécifiée est AUTHENTICATE_, les utilisateurs de ces variables d'environnement verront les mêmes informations, que le serveur effectue une authentification, une autorisation, ou les deux.

    Note

    Aucune variable d'autorisation n'est définie lorsqu'un utilisateur s'est vu autoriser l'accès via la directive Require valid-user.
    top

    Directive AuthLDAPBindAuthoritative

    Description:Détermine si l'on doit utiliser d'autres fournisseurs d'authentification lorsque le serveur ne peut pas valider les données d'authentification de l'utilisateur, alors que ce dernier possède un DN.
    Syntaxe:AuthLDAPBindAuthoritative off|on
    Défaut:AuthLDAPBindAuthoritative on
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap

    Par défaut, des fournisseurs d'authentification sont appelés si un utilisateur ne possède pas de DN, mais ne le sont pas si l'utilisateur possède un DN et si son mot de passe ne peut pas être vérifié lors d'une connexion au serveur LDAP. Si la directive AuthLDAPBindAuthoritative est définie à off, d'autres modules d'authentification configurés auront une chance de valider le mot de passe de l'utilisateur si la tentative de connexion au serveur LDAP échoue pour une raison quelconque (avec les données d'authentification fournies).

    Ceci permet aux utilisateurs présent à la fois dans l'annuaire LDAP et dans un fichier AuthUserFile de s'authentifier lorsque le serveur LDAP est disponible, alors que le compte de l'utilisateur est verrouillé ou que son mot de passe est inutilisable pour une raison quelconque.

    Voir aussi

    top

    Directive AuthLDAPBindDN

    Description:Un DN optionnel pour se connecter au serveur LDAP
    Syntaxe:AuthLDAPBindDN dn
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap

    Cette directive permet de définir un DN optionnel pour se connecter au serveur afin d'y rechercher des entrées. Si aucun DN n'est spécifié, mod_authnz_ldap tentera une connexion anonyme.

    top

    Directive AuthLDAPBindPassword

    Description:Mot de passe à utiliser en conjonction avec le DN de connexion
    Syntaxe:AuthLDAPBindPassword mot-de-passe
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap
    Compatibilité:exec: est disponible depuis la version 2.4.5 du serveur HTTP Apache.

    Cette directive permet de spécifier un mot de passe à utiliser en conjonction avec le DN de connexion. Notez que ce mot de passe constitue en général une donnée sensible, et doit donc être protégé de manière appropriée. Vous ne devez utiliser les directives AuthLDAPBindDN et AuthLDAPBindPassword que si vous en avez vraiment besoin pour effectuer une recherche dans l'annuaire.

    Si la valeur spécifiée débute par "exec:", la commande qui suit sera exécutée, et la première ligne renvoyée par la commande sur la sortie standard sera utilisée comme mot de passe.

    # Mot de passe spécifié directement
    AuthLDAPBindPassword secret
    
    # Exécution de /path/to/program pour obtenir le mot de passe
    AuthLDAPBindPassword exec:/path/to/program
    
    # Exécution de /path/to/otherProgram avec un argument pour obtenir le mot de passe
    AuthLDAPBindPassword "exec:/path/to/otherProgram argument1"
    top

    Directive AuthLDAPCharsetConfig

    Description:Chemin du fichier de configuration de la correspondance langage/jeu de caractères
    Syntaxe:AuthLDAPCharsetConfig chemin-fichier
    Contexte:configuration globale
    Statut:Extension
    Module:mod_authnz_ldap

    La directive AuthLDAPCharsetConfig permet de définir le chemin du fichier de configuration de la correspondance langage/jeu de caractères. chemin-fichier est un chemin relatif au répertoire défini par la directive ServerRoot. Ce fichier contient une liste de correspondances extension de langage/jeu de caractères. La plupart des administrateurs utilisent le fichier charset.conv fourni qui associe les extensions de langage courantes à leurs jeux de caractères.

    Le fichier contient des lignes au format suivant :

    extension de langage jeu de caractères [Nom du langage] ...

    L'extension est insensible à la casse. Les lignes vides et les lignes commençant par un dièse (#) sont ignorées.

    top

    Directive AuthLDAPCompareAsUser

    Description:Utilisation des données d'authentification de l'utilisateur pour effectuer les comparaisons pour l'attribution des autorisations
    Syntaxe:AuthLDAPCompareAsUser on|off
    Défaut:AuthLDAPCompareAsUser off
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap
    Compatibilité:Disponible depuis la version version 2.3.6

    Lorsque cette directive est définie, et si mod_authnz_ldap a authentifié l'utilisateur, les recherches LDAP pour les autorisations utilisent le nom distinctif trouvé (DN) et le mot de passe d'authentification basique HTTP de l'utilisateur authentifié au lieu des données d'authentification configurées au niveau du serveur.

    Les vérifications d'autorisation ldap-attribute, ldap-user, et ldap-group (niveau simple seulement) utilisent des comparaisons.

    Cette directive n'a d'effet sur les comparaisons effectuées au cours des traitements de groupe imbriqués, et lorsque la directive AuthLDAPSearchAsUser est aussi activée.

    Cette directive ne doit être utilisée que si votre serveur LDAP n'autorise pas les recherches anonymes, ou si vous ne pouvez pas utiliser de nom d'utilisateur dédié via la directive AuthLDAPBindDN.

    Voir aussi

    top

    Directive AuthLDAPCompareDNOnServer

    Description:Utilise le serveur LDAP pour comparer les DNs
    Syntaxe:AuthLDAPCompareDNOnServer on|off
    Défaut:AuthLDAPCompareDNOnServer on
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap

    Lorsque cette directive est définie à on, mod_authnz_ldap utilise le serveur LDAP pour comparer les DNs. Il s'agit de la seule méthode infaillible pour comparer les DNs. mod_authnz_ldap va rechercher dans l'annuaire le DN spécifié par la directive Require dn, puis extraire ce DN et le comparer avec le DN extrait de l'entrée de l'utilisateur. Si cette directive est à off, mod_authnz_ldap effectue une simple comparaison de chaînes. Cette dernière approche peut produire des faux négatifs, mais elle est beaucoup plus rapide. Notez cependant que le cache de mod_ldap peut accélérer la comparaison de DNs dans la plupart des situations.

    top

    Directive AuthLDAPDereferenceAliases

    Description:À quel moment le module va déréférencer les alias
    Syntaxe:AuthLDAPDereferenceAliases never|searching|finding|always
    Défaut:AuthLDAPDereferenceAliases always
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap

    Cette directive permet de spécifier à quel moment mod_authnz_ldap va déréférencer les alias au cours des opérations liées à LDAP. La valeur par défaut est always.

    top

    Directive AuthLDAPGroupAttribute

    Description:L'attribut LDAP utilisé pour vérifier l'appartenance d'un utilisateur à un groupe.
    Syntaxe:AuthLDAPGroupAttribute attribut
    Défaut:AuthLDAPGroupAttribute member uniqueMember
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap

    Cette directive permet de spécifier quel attribut LDAP est utilisé pour vérifier l'appartenance d'un utilisateur à un groupe. On peut spécifier plusieurs attributs en répétant cette directive plusieurs fois. Si la directive n'est pas définie, mod_authnz_ldap utilise les attributs member et uniqueMember.

    top

    Directive AuthLDAPGroupAttributeIsDN

    Description:Utilise le DN de l'utilisateur pour vérifier son appartenance à un groupe
    Syntaxe:AuthLDAPGroupAttributeIsDN on|off
    Défaut:AuthLDAPGroupAttributeIsDN on
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap

    Lorsqu'elle est définie à on, cette directive indique que c'est le DN de l'utilisateur qui doit être utilisé pour vérifier son appartenance à un groupe. Dans le cas contraire, c'est le nom de l'utilisateur qui sera utilisé. Par exemple, supposons que le client envoie le nom d'utilisateur bjenson, qui correspond au DN LDAP cn=Babs Jenson,o=Example. Si la directive est à on, mod_authnz_ldap va vérifier si cn=Babs Jenson, o=Example est un membre du groupe. Dans le cas contraire, mod_authnz_ldap vérifiera si bjenson est un membre du groupe.

    top

    Directive AuthLDAPInitialBindAsUser

    Description:Détermine si le serveur effectue la recherche initiale du DN en utilisant le nom propre de l'utilisateur pour l'authentification de base et non de manière anonyme, ou en utilisant des données d'authentification codées en dur pour le serveur
    Syntaxe:AuthLDAPInitialBindAsUser off|on
    Défaut:AuthLDAPInitialBindAsUser off
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap
    Compatibilité:Disponible depuis la version 2.3.6

    Par défaut, le serveur convertit le nom d'utilisateur pour l'authentification de base en nom distinctif LDAP (DN) soit de manière anonyme, soit avec un couple nom/mot de passe dédié. Cette directive permet de forcer le serveur à utiliser les véritables nom d'utilisateur et mot de passe fournis par l'utilisateur pour effectuer la recherche initiale du DN.

    Si le nom d'utilisateur ne peut pas s'authentifier directement et nécessite de légères modifications, voir la directive AuthLDAPInitialBindPattern.

    Cette directive ne doit être utilisée que si votre serveur LDAP n'autorise pas les recherches anonymes, ou si vous ne pouvez pas utiliser de nom d'utilisateur dédié via la directive AuthLDAPBindDN.

    Non disponible dans la cas d'une autorisation seule

    On ne peut utiliser cette directive que si ce module effectue une authentification, et n'a aucun effet si ce module n'est utilisé que pour les processus d'autorisation.

    Voir aussi

    top

    Directive AuthLDAPInitialBindPattern

    Description:Spécifie la modification a apporter au nom d'utilisateur pour l'authentification de base lors de l'authentification auprès du serveur LDAP pour effectuer une recherche de DN
    Syntaxe:AuthLDAPInitialBindPattern regex substitution
    Défaut:AuthLDAPInitialBindPattern (.*) $1 (nom de l'utilisateur distant utilisé tel quel)
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap
    Compatibilité:Disponible depuis la version 2.3.6

    Si la directive AuthLDAPInitialBindAsUser est définie à ON, le nom utilisateur pour l'authentification de base sera transformé selon l'expression rationnelle regex et l'argument substitution spécifiés.

    L'expression rationnelle est comparée au nom d'utilisateur pour l'authentification de base courant. L'argument substitution peut contenir des références arrières, mais n'effectue aucune autre interpolation de variable.

    Cette directive ne doit être utilisée que si votre serveur LDAP n'autorise pas les recherches anonymes, ou si vous ne pouvez pas utiliser de nom d'utilisateur dédié via la directive AuthLDAPBindDN.

    AuthLDAPInitialBindPattern (.+) $1@example.com
    AuthLDAPInitialBindPattern (.+) cn=$1,dc=example,dc=com

    Non disponible dans la cas d'une autorisation seule

    On ne peut utiliser cette directive que si ce module effectue une authentification, et n'a aucun effet si ce module n'est utilisé que pour les processus d'autorisation.

    Débogage

    Le DN de substitution est enregistré dans la variable d'environnement LDAP_BINDASUSER. Si l'expression rationnelle ne convient pas, le nom d'utilisateur est utilisé tel quel.

    Voir aussi

    top

    Directive AuthLDAPMaxSubGroupDepth

    Description:Spécifie la profondeur d'imbrication des sous-groupes maximale prise en compte avant l'abandon de la recherche de l'utilisateur.
    Syntaxe:AuthLDAPMaxSubGroupDepth Nombre
    Défaut:AuthLDAPMaxSubGroupDepth 10
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap
    Compatibilité:Disponible à partir de la version 2.3.0 du serveur HTTP Apache

    Lorsque cette directive est définie à une valeur X non nulle, en combinaison avec l'utilisation de la directive Require ldap-group DN-groupe, les données de connexion fournies seront utilisées pour vérifier l'appartenance de l'utilisateur à l'objet de l'annuaire DN-groupe ou à tout sous-groupe du groupe courant en tenant compte de la profondeur d'imbrication maximale X spécifiée par la directive.

    Se référer à la section Require ldap-group pour un exemple plus détaillé.

    Performances dans le cas des groupes imbriqués

    Lorsque les directives AuthLDAPSubGroupAttribute et AuthLDAPGroupAttribute se recouvrent (comme c'est le cas par défaut et requis par les schémas LDAP courants), la recherche de sous-groupes au sein de grands groupes peut être très longue. Si vos groupes sont très grands et non imbriqués, définissez la directive AuthLDAPMaxSubGroupDepth à 0.

    top

    Directive AuthLDAPRemoteUserAttribute

    Description:Spécifie l'attribut dont la valeur renvoyée au cours de la requête de l'utilisateur sera utilisée pour définir la variable d'environnement REMOTE_USER
    Syntaxe:AuthLDAPRemoteUserAttribute uid
    Défaut:none
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap

    Lorsque cette directive est définie, la variable d'environnement REMOTE_USER sera définie à la valeur de l'attribut spécifié. Assurez-vous que cet attribut soit bien inclus dans la liste d'attributs spécifiés dans la définition de AuthLDAPURL ; dans le cas contraire, cette directive n'aurait aucun effet. Si elle est présente, cette directive l'emporte sur AuthLDAPRemoteUserIsDN. Elle peut s'avérer utile par exemple, si vous souhaitez que les utilisateurs se connectent à un site web en utilisant leur adresse email, alors qu'une application sous-jacente nécessite un nom d'utilisateur comme identifiant.

    top

    Directive AuthLDAPRemoteUserIsDN

    Description:Utilise le DN de l'utilisateur pour définir la variable d'environnement REMOTE_USER
    Syntaxe:AuthLDAPRemoteUserIsDN on|off
    Défaut:AuthLDAPRemoteUserIsDN off
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap

    Lorsque cette directive est à on, la variable d'environnement REMOTE_USER sera définie avec la valeur du DN complet de l'utilisateur authentifié, et non plus avec simplement le nom d'utilisateur fourni par le client. Elle est définie à off par défaut.

    top

    Directive AuthLDAPSearchAsUser

    Description:Utilise les données d'authentification de l'utilisateur pour la recherche des autorisations
    Syntaxe:AuthLDAPSearchAsUser on|off
    Défaut:AuthLDAPSearchAsUser off
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap
    Compatibilité:Disponible depuis la version 2.3.6

    Lorsque cette directive est définie, et si mod_authnz_ldap a authentifié l'utilisateur, les recherches LDAP pour définir les autorisations utilisent le nom distinctif (DN) trouvé et le mot de passe pour l'authentification de base HTTP de l'utilisateur authentifié, au lieu des données d'authentification configurées au niveau du serveur.

    Les vérifications d'autorisation ldap-filter et ldap-dn utilisent des recherches.

    Cette directive n'a d'effet sur les comparaisons effectuées au cours des traitements de groupe imbriqués, et lorsque la directive AuthLDAPCompareAsUser est aussi activée.

    Cette directive ne doit être utilisée que si votre serveur LDAP n'autorise pas les recherches anonymes, ou si vous ne pouvez pas utiliser de nom d'utilisateur dédié via la directive AuthLDAPBindDN.

    Voir aussi

    top

    Directive AuthLDAPSubGroupAttribute

    Description:Spécifie les noms d'attribut, un par directive, utilisés pour différencier les membres du groupe courant qui sont eux-mêmes des groupes.
    Syntaxe:AuthLDAPSubGroupAttribute attribut
    Défaut:AuthLDAPSubgroupAttribute member uniqueMember
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap
    Compatibilité:Disponible à partir de la version 2.3.0 du serveur HTTP Apache

    Un objet groupe LDAP peut contenir des membres qui sont des utilisateurs et des membres qui sont eux-mêmes des groupes (appelés sous-groupes ou groupes imbriqués). La directive AuthLDAPSubGroupAttribute spécifie l'attribut utilisé pour identifier les groupes, alors que la directive AuthLDAPGroupAttribute spécifie l'attribut utilisé pour identifier les utilisateurs. On peut spécifier plusieurs attributs en répétant la directive plusieurs fois. Si elle n'est pas définie, mod_authnz_ldap utilise les attributs member et uniqueMember.

    top

    Directive AuthLDAPSubGroupClass

    Description:Spécifie quelles valeurs d'objectClass LDAP identifient les objets de l'annuaire qui sont des groupes au cours du traitement des sous-groupes.
    Syntaxe:AuthLDAPSubGroupClass ObjectClass-LDAP
    Défaut:AuthLDAPSubGroupClass groupOfNames groupOfUniqueNames
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap
    Compatibilité:Disponible à partir de la version 2.3.0 du serveur HTTP Apache

    Un objet groupe LDAP peut contenir des membres qui sont des utilisateurs et des membres qui sont eux-mêmes des groupes (appelés sous-groupes ou groupes imbriqués). La directive AuthLDAPSubGroupAttribute permet d'identifier les membres qui sont des sous-groupes du groupe courant (à l'opposé des membres utilisateurs). La directive AuthLDAPSubGroupClass permet de spécifier les valeurs d'objectClass LDAP utilisées pour vérifier que certains membres sont en fait des objets groupe. Les sous-groupes ainsi identifiés peuvent alors faire l'objet d'une recherche d'autres membres utilisateurs ou sous-groupes. On peut spécifier plusieurs attributs en répétant cette directive plusieurs fois. Si cette directive n'est pas définie, mod_authnz_ldap utilise les attributs groupOfNames et groupOfUniqueNames.

    top

    Directive AuthLDAPURL

    Description:URL specifying the LDAP search parameters
    Syntaxe:AuthLDAPURL url [NONE|SSL|TLS|STARTTLS]
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authnz_ldap

    La documentation de cette directive n'a pas encore t traduite. Veuillez vous reporter la version en langue anglaise.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dav_lock.html.fr.utf80000644000000000000500000002451613412755316021041 0ustar rootsrc mod_dav_lock - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_dav_lock

    Langues Disponibles:  en  |  fr  |  ja 

    Description:Module de verrouillage générique pour mod_dav
    Statut:Extension
    Identificateur de Module:dav_lock_module
    Fichier Source:mod_dav_lock.c
    Compatibilité:Disponible depuis la version 2.1 d'Apache

    Sommaire

    ce module implémente une API de verrouillage générique que tout fournisseur support de mod_dav peut utiliser. Son activation nécessite l'utilisation de mod_dav. Mais sans fournisseur support pour l'utiliser, il n'est d'aucun service et ne doit pas être chargé dans le serveur. mod_dav_svn, le module qui implémente le fournisseur subversion, est un exemple de module de support qui utilise effectivement mod_dav_lock.

    Notez que mod_dav_fs n'a pas besoin de ce module de verrouillage générique, car il utilise sa propre version plus spécifique.

    Pour que mod_dav_lock puisse fonctionner, il vous suffit de spécifier le chemin de la base de données des verrous à l'aide de la directive DavGenericLockDB décrite ci-dessous.

    Note du développeur

    Pour déterminer le pointeur de la fonction du fournisseur de verrouillage, vous devez utiliser l'API ap_lookup_provider avec les arguments dav-lock, generic et 0.

    top

    Directive DavGenericLockDB

    Description:Chemin de la base de données des verrous DAV
    Syntaxe:DavGenericLockDB chemin fichier
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_dav_lock

    La directive DavLockDB permet de spécifier le chemin complet de la base de données des verrous, sans extension. Si le chemin n'est pas absolu, il sera considéré comme relatif au répertoire défini par la directive ServerRoot. L'implémentation de mod_dav_lock utilise une base de données SDBM pour surveiller les verrous utilisateurs.

    Exemple

    DavGenericLockDB var/DavLock

    Les utilisateur et groupe sous lesquels Apache s'exécute et qui sont respectivement définis par les directives User et Group doivent pouvoir écrire dans le répertoire qui contient le fichier de la base de données des verrous. Pour des raisons de sécurité, il est recommandé de créer un répertoire dédié à la base de données des verrous, plutôt que de modifier les permissions d'un répertoire existant. Dans l'exemple ci-dessus, Apache va créer des fichiers dans le répertoire var/, lui-même sous-répertoire du répertoire défini par la directive ServerRoot, avec le nom de base DavLock suivi d'une extension choisie par le serveur.

    Langues Disponibles:  en  |  fr  |  ja 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_env.html.ko.euc-kr0000644000000000000500000002363713412755316020354 0ustar rootsrc mod_env - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_env

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:CGI ½ºÅ©¸³Æ®³ª SSI ÆäÀÌÁö¿¡ Àü´ÞÇÒ È¯°æº¯¼ö¸¦ ¼öÁ¤ÇÑ´Ù
    »óÅÂ:Base
    ¸ðµâ¸í:env_module
    ¼Ò½ºÆÄÀÏ:mod_env.c

    ¿ä¾à

    ÀÌ ¸ðµâÀº CGI ½ºÅ©¸³Æ®³ª SSI ÆäÀÌÁö¿¡ Àü´ÞÇÒ È¯°æº¯¼ö¸¦ Á¶ÀýÇÑ´Ù. À¥¼­¹ö¸¦ ½ÃÀÛÇÑ ½©¿¡¼­ ȯ°æº¯¼ö¸¦ °¡Á®¿Ã ¼ö ÀÖ´Ù. ¾Æ´Ï¸é ¼³Á¤°úÁ¤Áß¿¡ ȯ°æº¯¼ö¸¦ ¼³Á¤Çϰí Á¦°ÅÇÒ ¼ö ÀÖ´Ù.

    top

    PassEnv Áö½Ã¾î

    ¼³¸í:½©¿¡¼­ ȯ°æº¯¼ö¸¦ °¡Á®¿Â´Ù
    ¹®¹ý:PassEnv env-variable [env-variable] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_env

    À¥¼­¹ö¸¦ ½ÇÇàÇÑ ½©ÀÇ Æ¯Á¤ ȯ°æº¯¼ö¸¦ CGI ½ºÅ©¸³Æ®³ª SSI ÆäÀÌÁö·Î Àü´ÞÇÑ´Ù.

    ¿¹Á¦

    PassEnv LD_LIBRARY_PATH

    top

    SetEnv Áö½Ã¾î

    ¼³¸í:ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù
    ¹®¹ý:SetEnv env-variable value
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_env

    CGI ½ºÅ©¸³Æ®³ª SSI ÆäÀÌÁö¿¡ Àü´ÞÇÒ È¯°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù.

    ¿¹Á¦

    SetEnv SPECIAL_PATH /foo/bin

    top

    UnsetEnv Áö½Ã¾î

    ¼³¸í:ȯ°æº¯¼ö¸¦ Á¦°ÅÇÑ´Ù
    ¹®¹ý:UnsetEnv env-variable [env-variable] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_env

    CGI ½ºÅ©¸³Æ®³ª SSI ÆäÀÌÁö¿¡ ȯ°æº¯¼ö¸¦ Àü´ÞÇÏÁö ¾Ê´Â´Ù.

    ¿¹Á¦

    UnsetEnv LD_LIBRARY_PATH

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_auth_basic.html.en0000644000000000000500000004711613412755316020470 0ustar rootsrc mod_auth_basic - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_auth_basic

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Basic HTTP authentication
    Status:Base
    Module Identifier:auth_basic_module
    Source File:mod_auth_basic.c
    Compatibility:Available in Apache 2.1 and later

    Summary

    This module allows the use of HTTP Basic Authentication to restrict access by looking up users in the given providers. HTTP Digest Authentication is provided by mod_auth_digest. This module should usually be combined with at least one authentication module such as mod_authn_file and one authorization module such as mod_authz_user.

    top

    AuthBasicAuthoritative Directive

    Description:Sets whether authorization and authentication are passed to lower level modules
    Syntax:AuthBasicAuthoritative On|Off
    Default:AuthBasicAuthoritative On
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_auth_basic

    Normally, each authorization module listed in AuthBasicProvider will attempt to verify the user, and if the user is not found in any provider, access will be denied. Setting the AuthBasicAuthoritative directive explicitly to Off allows for both authentication and authorization to be passed on to other non-provider-based modules if there is no userID or rule matching the supplied userID. This should only be necessary when combining mod_auth_basic with third-party modules that are not configured with the AuthBasicProvider directive. When using such modules, the order of processing is determined in the modules' source code and is not configurable.

    top

    AuthBasicFake Directive

    Description:Fake basic authentication using the given expressions for username and password
    Syntax:AuthBasicFake off|username [password]
    Default:none
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_auth_basic
    Compatibility:Apache HTTP Server 2.4.5 and later

    The username and password specified are combined into an Authorization header, which is passed to the server or service behind the webserver. Both the username and password fields are interpreted using the expression parser, which allows both the username and password to be set based on request parameters.

    If the password is not specified, the default value "password" will be used. To disable fake basic authentication for an URL space, specify "AuthBasicFake off".

    In this example, we pass a fixed username and password to a backend server.

    Fixed Example

    <Location "/demo">
        AuthBasicFake demo demopass
    </Location>

    In this example, we pass the email address extracted from a client certificate, extending the functionality of the FakeBasicAuth option within the SSLOptions directive. Like the FakeBasicAuth option, the password is set to the fixed string "password".

    Certificate Example

    <Location "/secure">
        AuthBasicFake "%{SSL_CLIENT_S_DN_Email}"
    </Location>

    Extending the above example, we generate a password by hashing the email address with a fixed passphrase, and passing the hash to the backend server. This can be used to gate into legacy systems that do not support client certificates.

    Password Example

    <Location "/secure">
        AuthBasicFake "%{SSL_CLIENT_S_DN_Email}" "%{sha1:passphrase-%{SSL_CLIENT_S_DN_Email}}"
    </Location>

    Exclusion Example

    <Location "/public">
        AuthBasicFake off
    </Location>
    top

    AuthBasicProvider Directive

    Description:Sets the authentication provider(s) for this location
    Syntax:AuthBasicProvider provider-name [provider-name] ...
    Default:AuthBasicProvider file
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_auth_basic

    The AuthBasicProvider directive sets which provider is used to authenticate the users for this location. The default file provider is implemented by the mod_authn_file module. Make sure that the chosen provider module is present in the server.

    Example

    <Location "/secure">
        AuthType basic
        AuthName "private area"
        AuthBasicProvider  dbm
        AuthDBMType        SDBM
        AuthDBMUserFile    "/www/etc/dbmpasswd"
        Require            valid-user
    </Location>

    Providers are queried in order until a provider finds a match for the requested username, at which point this sole provider will attempt to check the password. A failure to verify the password does not result in control being passed on to subsequent providers.

    Providers are implemented by mod_authn_dbm, mod_authn_file, mod_authn_dbd, mod_authnz_ldap and mod_authn_socache.

    top

    AuthBasicUseDigestAlgorithm Directive

    Description:Check passwords against the authentication providers as if Digest Authentication was in force instead of Basic Authentication.
    Syntax:AuthBasicUseDigestAlgorithm MD5|Off
    Default:AuthBasicUseDigestAlgorithm Off
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_auth_basic
    Compatibility:Apache HTTP Server 2.4.7 and later

    Normally, when using Basic Authentication, the providers listed in AuthBasicProvider attempt to verify a user by checking their data stores for a matching username and associated password. The stored passwords are usually encrypted, but not necessarily so; each provider may choose its own storage scheme for passwords.

    When using AuthDigestProvider and Digest Authentication, providers perform a similar check to find a matching username in their data stores. However, unlike in the Basic Authentication case, the value associated with each stored username must be an encrypted string composed from the username, realm name, and password. (See RFC 2617, Section 3.2.2.2 for more details on the format used for this encrypted string.)

    As a consequence of the difference in the stored values between Basic and Digest Authentication, converting from Digest Authentication to Basic Authentication generally requires that all users be assigned new passwords, as their existing passwords cannot be recovered from the password storage scheme imposed on those providers which support Digest Authentication.

    Setting the AuthBasicUseDigestAlgorithm directive to MD5 will cause the user's Basic Authentication password to be checked using the same encrypted format as for Digest Authentication. First a string composed from the username, realm name, and password is hashed with MD5; then the username and this encrypted string are passed to the providers listed in AuthBasicProvider as if AuthType was set to Digest and Digest Authentication was in force.

    Through the use of AuthBasicUseDigestAlgorithm a site may switch from Digest to Basic Authentication without requiring users to be assigned new passwords.

    The inverse process of switching from Basic to Digest Authentication without assigning new passwords is generally not possible. Only if the Basic Authentication passwords have been stored in plain text or with a reversable encryption scheme will it be possible to recover them and generate a new data store following the Digest Authentication password storage scheme.
    Only providers which support Digest Authentication will be able to authenticate users when AuthBasicUseDigestAlgorithm is set to MD5. Use of other providers will result in an error response and the client will be denied access.

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_unique_id.html.ko.euc-kr0000644000000000000500000003214013412755316021533 0ustar rootsrc mod_unique_id - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_unique_id

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:°¢ ¿äû¸¶´Ù À¯ÀÏÇÑ ½Äº°ÀÚ¸¦ °¡Áö´Â ȯ°æº¯¼ö¸¦ Á¦°øÇÑ´Ù
    »óÅÂ:Extension
    ¸ðµâ¸í:unique_id_module
    ¼Ò½ºÆÄÀÏ:mod_unique_id.c

    ¿ä¾à

    ÀÌ ¸ðµâÀº ¾î¶² Ưº°ÇÑ »óȲ¿¡¼­µµ "¸ðµç" ¿äûÁß¿¡¼­ À¯ÀÏÇϵµ·Ï º¸ÀåµÈ ½Äº°ÀÚ(identifier)¸¦ ¸ðµç ¿äû¿¡ Á¦°øÇÑ´Ù. ½ÉÁö¾î ÀÌ ½Äº°Àڴ Ưº°ÇÏ°Ô ±¸¼ºÇÑ Å¬·¯½ºÅÍÀÇ ¿©·¯ ÄÄÇ»Å͵é Áß¿¡¼­µµ À¯ÀÏÇÏ´Ù. °¢ ¿äû¸¶´Ù ȯ°æº¯¼ö UNIQUE_ID¸¦ ¼³Á¤ÇÑ´Ù. À¯ÀÏÇÑ ½Äº°ÀÚ´Â ¿©·¯°¡Áö ¿ëµµ·Î »ç¿ëÇÒ ¼ö ÀÖÁö¸¸, ¼³¸íÀº ÀÌ ¹®¼­ÀÇ ¹üÀ§¸¦ ³Ñ¾î¼±´Ù.

    Support Apache!

    ÁÖÁ¦

    Áö½Ã¾îµé

    ÀÌ ¸ðµâ¿¡´Â Áö½Ã¾î°¡ ¾ø½À´Ï´Ù.

    Bugfix checklist

    Âü°í

    top

    ÀÌ·Ð

    ¸ÕÀú À¯´Ð½º ½Ã½ºÅÛ¿¡¼­ ¾ÆÆÄÄ¡ ¼­¹ö°¡ ¾î¶»°Ô µ¿ÀÛÇÏ´ÂÁö °£·«È÷ »ìÆìº¸ÀÚ. Windows NT´Â ÇöÀç ÀÌ ±â´ÉÀ» Áö¿øÇÏÁö ¾Ê´Â´Ù. À¯´Ð½º¿¡¼­ ¾ÆÆÄÄ¡´Â ¿©·¯ ÀÚ½ÄÀ» ¸¸µé°í, ÀÚ½Ä ÇÁ·Î¼¼½º´Â Çѹø¿¡ ÇÑ ¿äû¾¿ ó¸®ÇÑ´Ù. ÀÚ½ÄÀº ½ÇÇàÁß¿¡ ¿©·¯ ¿äûÀ» ó¸®ÇÑ´Ù. ¿©±â¼­ Áß¿äÇÑ °ÍÀº ÀڽĵéÀÌ ¼­·Î ÀڷḦ °øÀ¯ÇÏÁö ¾Ê´Â´Ù´Â Á¡ÀÌ´Ù. ¾ÕÀ¸·Î ÀÚ½ÄÀ» httpd ÇÁ·Î¼¼½º¶ó°í ÇÑ´Ù.

    ¿©·¯ ÄÄÇ»ÅÍ·Î À¥»çÀÌÆ®¸¦ ¼­ºñ½ºÇÑ´Ù¸é Ŭ·¯½ºÅÍ(cluster)¶ó°í ºÎ¸¥´Ù. °¢ ÄÄÇ»ÅÍ´Â ¿©·¯ ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÒ ¼ö ÀÖ´Ù. ÀÌµé ¸ðµÎ¸¦ "¿ìÁÖ"·Î º¸¸é, Ŭ·¯½ºÅÍ¿¡ ÀÖ´Â ÄÄÇ»Å͵鰣¿¡ ¸¹Àº Åë½Å¾øÀÌ °¢ ¿äû¸¶´Ù ¿ìÁÖ¿¡¼­ À¯ÀÏÇÑ ½Äº°ÀÚ¸¦ ¸¸µé ¼ö ÀÖ´Ù.

    Ŭ·¯½ºÅÍ¿¡ ÀÖ´Â ÄÄÇ»ÅÍ´Â ´ÙÀ½ ¿ä±¸»çÇ×À» ¸¸Á·ÇØ¾ß ÇÑ´Ù. (ÄÄÇ»Å͸¦ ÇѴ븸 »ç¿ëÇÏ´õ¶óµµ ÄÄÇ»ÅÍ ½Ã°£À» NTP¿Í µ¿±âÇØ¾ß ÇÑ´Ù.)

    • ÄÄÇ»ÅÍ ½Ã°£Àº NTP³ª ´Ù¸¥ ³×Æ®¿÷ ½Ã°£ ÇÁ·ÎÅäÄݰú µ¿±âÈ­µÈ´Ù.
    • ÄÄÇ»ÅÍÀÇ È£½ºÆ®¸íÀÌ ¸ðµÎ ´Ù¸£´Ù. ±×·¡¼­ ¸ðµâÀÌ È£½ºÆ®¸íÀ¸·Î ãÀ¸¸é Ŭ·¯½ºÅÍ¿¡ ÀÖ´Â °¢ ÄÄÇ»Å͸¶´Ù ´Ù¸¥ IP ÁÖ¼Ò¸¦ ¾ò´Â´Ù.

    ¿î¿µÃ¼Á¦¿¡¼­ pid (ÇÁ·Î¼¼½º id)°¡ 32ºñÆ®¿¡ µé¾î°£´Ù°í °¡Á¤ÇÑ´Ù. ¿î¿µÃ¼Á¦°¡ pid·Î 32ºñÆ® ÀÌ»óÀ» »ç¿ëÇÑ´Ù¸é °£´ÜÇÏÁö¸¸ Äڵ带 ¼öÁ¤ÇØ¾ß ÇÑ´Ù.

    ÀÌ·± °¡Á¤ÇÏ¿¡ ¿ì¸®´Â ¾î¶² ½ÃÁ¡¿¡¼­ Ŭ·¯½ºÅÍÀÇ ¾î¶² ÄÄÇ»ÅÍ¿¡ ÀÖ´Â ¾î¶² httpd ÇÁ·Î¼¼½º¸¦ ´Ù¸¥ ¸ðµç httpd ÇÁ·Î¼¼½ºµé°ú ±¸º°ÇÒ ¼ö ÀÖ´Ù. ÄÄÇ»ÅÍÀÇ IP ÁÖ¼Ò¿Í httpd ÇÁ·Î¼¼½ºÀÇ pid¸¸À¸·Îµµ ÃæºÐÈ÷ ±¸º°ÇÒ ¼ö ÀÖ´Ù. ±×·¡¼­ ¿äû¿¡ ´ëÇØ À¯ÀÏÇÑ ±¸º°ÀÚ¸¦ ¸¸µå·Á¸é ½Ã°£Â÷¸¦ ±¸º°ÇÒ ¼ö¸¸ ÀÖÀ¸¸é µÈ´Ù.

    ½Ã°£À» ±¸º°ÇϱâÀ§ÇØ À¯´Ð½º ½Ã°£(timestamp, ¼¼°è Ç¥Áؽ÷Π1970³â 1¿ù 1ÀÏ ÀÌÈÄ Áö³­ ÃÊ)°ú 16ºñÆ® Ä«¿îÅ͸¦ »ç¿ëÇÑ´Ù. À¯´Ð½º ½Ã°£Àº ÃÊ´ÜÀ§À̰í, Ä«¿îÅÍ´Â ÀÏ Ãʵ¿¾È 65536±îÁö Áõ°¡ÇÑ´Ù. ( ip_addr, pid, time_stamp, counter ) ¹­À½Àº ¾î¶² httpd ÇÁ·Î¼¼½º¿¡¼­ ÀÏ Ãʵ¿¾È 65536 ¿äûÀ» ±¸º°ÇÒ ¼ö ÀÖ´Ù. ±×·¯³ª Ä«¿îÅÍ´Â pid¸¦ Àç»ç¿ëÇÏ´Â ¹®Á¦¸¦ ÇØ°áÇØ¾ß ÇÑ´Ù.

    httpd ÀÚ½ÄÀ» ¸¸µé¸é Ä«¿îÅÍ´Â ( ÇöÀç ¹Ð¸®ÃÊ ³ª´©±â 10 )À» 65536À¸·Î ³ª´« ³ª¸ÓÁö°¡ µÈ´Ù. (¸î¸î ½Ã½ºÅÛÀÇ ¹Ð¸®ÃÊ ½Ã°£¿¡¼­ ÇÏÀ§ ºñÆ®°¡ ÀÏÄ¡ÇÏÁö¾Ê´Â ¹®Á¦¶§¹®¿¡ ÀÌ °ø½ÄÀ» ¸¸µé¾ú´Ù.) À¯ÀÏÇÑ ½Äº°ÀÚ¸¦ ¸¸µé¶§ »ç¿ëÇÏ´Â ½Ã°£Àº À¥¼­¹ö°¡ ¿äûÀ» ¹ÞÀº ½Ã°£ÀÌ´Ù. Ä«¿îÅÍ´Â ½Äº°ÀÚ¸¦ ¸¸µé¶§¸¶´Ù Áõ°¡ÇÑ´Ù (±×¸®°í ´Ù½Ã ½ÃÀÛÇÑ´Ù).

    Ä¿³ÎÀº ÇÁ·Î¼¼½º¸¦ Æ÷Å©ÇÒ¶§(fork) °¢ ÇÁ·Î¼¼½º¿¡ pid¸¦ ÇÒ´çÇϰí, pid´Â ´Ù½Ã ½ÃÀÛÇÒ ¼ö ÀÖ´Ù. (pid´Â ¸¹Àº À¯´Ð½º¿¡¼­ 16ºñÆ®ÀÌÁö¸¸, ÃÖ±Ù ½Ã½ºÅÛÀº 32ºñÆ®·Î È®ÀåÇß´Ù.) ±×·¡¼­ ½Ã°£ÀÌ Áö³ª¸é °°Àº pid¸¦ Àç»ç¿ëÇÒ ¼ö ÀÖ´Ù. ±×·¯³ª °°Àº ½Ã°£¿¡ pid¸¦ Àç»ç¿ëÇÏÁö ¾Ê´Â´Ù¸é À§ÀÇ ¹­À½Àº À¯ÀÏÇÏ´Ù. Áï, ¿ì¸®´Â ½Ã½ºÅÛÀÌ ÀÏÃʵ¿¾È ÇÁ·Î¼¼½º¸¦ 65536°³ ÀÌ»ó ¸¸µéÁö ¾Ê´Â´Ù°í °¡Á¤ÇÑ´Ù. (¾î¶² À¯´Ð½º¿¡¼­´Â 32768°³ ÀÌ»ó ÇÁ·Î¼¼½º¸¦ ¸¸µé¸é pid Àç»ç¿ë ¹®Á¦°¡ ¹ß»ýÇÒ ¼ö ÀÖÁö¸¸, À̰ÍÁ¶Â÷µµ ÀϾ °Í°°Áö ¾Ê´Ù.)

    ½Ã°£ÀÌ ¾î¶² ÀÌÀ¯¿¡¼­°Ç ¹Ýº¹µÈ´Ù°í °¡Á¤Çغ¸ÀÚ. Áï, ½Ã½ºÅÛ ½Ã°è°¡ ²¿¿©¼­ ½Ã°£ÀÌ °ú°Å·Î µ¹¾Æ°¡´Â (ȤÀº ½Ã°è°¡ ³Ê¹« ¾Õ¼­°¡¼­ ¿Ã¹Ù·Î Àç¼³Á¤ÇÑÈÄ ¹Ì·¡¿¡ °°Àº ½Ã°£ÀÌ µÇ´Â) °æ¿ì´Ù. ÀÌ °æ¿ì pid¿Í ½Ã°£À» ¸ðµÎ Àç»ç¿ëÇÒ ¼ö ÀÖ´Ù. Ä«¿îÅÍÀÇ ÃʱâÈ­ °ø½ÄÀº ÀÌ ¹®Á¦¸¦ ÇØ°áÇÏ·Á°í °í¾ÈµÇ¾ú´Ù. ¿ì¸®´Â ½ÇÁ¦ ¹«ÀÛÀ§ ¼ýÀÚ·Î Ä«¿îÅ͸¦ ÃʱâÈ­ÇÏ±æ ¿øÇÏÁö¸¸, ¸¹Àº ½Ã½ºÅÛ¿¡¼­ ÀÌ·± ¼ö¸¦ ½±°Ô ¾òÀ» ¼ö ¾ø´Ù. (¿¹¸¦ µé¾î, seed°¡ ÇÊ¿äÇϱ⶧¹®¿¡ rand()¸¦ »ç¿ëÇÒ ¼ö ¾ø°í, ½Ã°£Àº ÃÖ¼ÒÇÑ ÀÏÃÊ ´ÜÀ§À̱⶧¹®¿¡ ½Ã°£À¸·Î seed·Î »ç¿ëÇÒ ¼ö ¾ø´Ù.) Áï ¿Ïº®ÇÑ ÇØ°áÃ¥ÀÌ ¾ø´Ù.

    ±×·³ ÀÌ ¹æ¹ýÀº ¾ó¸¶³ª ±¦ÂúÀ»±î? ÄÄÇ»ÅÍÁß Çϳª°¡ ¿äûÀ» ÃÊ´ç ÃÖ´ë 500°³ (½Ã½ºÅÛÀº ÀϹÝÀûÀ¸·Î Á¤ÀûÀÎ ÆÄÀÏÀ» Àü¼ÛÇÏ´Â °Í ÀÌ»óÀÇ ÀÛ¾÷À» ÇϹǷΠÀÌ ±ÛÀ» ¾²´Â ½ÃÁ¡¿¡¼­ »ó´çÈ÷ ³ôÀº °ªÀÌ´Ù.) ¼­ºñ½ºÇÑ´Ù°í °¡Á¤ÇÏÀÚ. µ¿½Ã¿¡ ¾ó¸¶¸¸Å­ÀÇ Å¬¶óÀÌ¾ðÆ®¸¦ ó¸®Çϴ°¡¿¡ µû¶ó ÀÚ½ÄÀÇ °³¼ö°¡ °áÁ¤µÈ´Ù. ±×·¯³ª ¿ì¸®´Â ºñ°üÀûÀ¸·Î ÇÑ ÀÚ½ÄÀÌ ¿äûÀ» ÃÊ´ç 500°³ ó¸®ÇÒ ¼ö ÀÖ´Ù°í °¡Á¤ÇÑ´Ù. Àç»ç¿ëÇÑ pid¸¦ °¡Áø ÀÚ½ÄÀÇ 500°³ ¿äû°ú ÀÌÀü ÀÚ½ÄÀÇ 500°³ ¿äûÀÇ Ä«¿îÅͰªÀÌ °ãÄ¥ ¼ö ÀÖ´Â Ä«¿îÅÍ ½ÃÀÛ°ª °æ¿ì¼ö´Â 1000°³ÀÌ´Ù. ±×·¡¼­ (ÃÊ´ÜÀ§¿¡¼­) ÀÚ½ÄÀÌ Ä«¿îÅͰªÀ» ¹Ýº¹ÇÏ¿© À¯ÀϼºÀÌ ±úÁú È®·üÀº 1.5%ÀÌ´Ù. À̰ÍÀº ¸Å¿ì ºñ°üÀûÀÎ °¡Á¤À̸ç, ½ÇÁ¦ ÀÌ·² °æ¿ì´Â »ó´çÈ÷ ´õ ³·´Ù. ±×·¡µµ ½Ã½ºÅÛ¿¡¼­ ÀÌ·± ÀÏÀÌ ¹ß»ýÇÒ °Í °°´Ù¸é (¼Ò½º¸¦ ¼öÁ¤ÇÏ¿©) Ä«¿îÅ͸¦ 32ºñÆ®·Î ¸¸µé¾î¶ó.

    ¼¶¸ÓŸÀÓ¶§¹®¿¡ ½Ã°è°¡ "µÚ·Î °¡´Â" °ÍÀ» °ÆÁ¤ÇÒÁöµµ ¸ð¸¥´Ù. ±×·¯³ª ¿©±â¼­ »ç¿ëÇÏ´Â ½Ã°£Àº ±¹Á¦ Ç¥ÁؽÃ(UTC), Áï ½Ã°£ÀÌ "Ç×»ó" ¾ÕÀ¸·Î °¡¹Ç·Î ¹®Á¦°¡ ¾ø´Ù. x86±â¹Ý À¯´Ð½º¿¡¼­´Â ÀûÀýÇÑ ¼³Á¤ÀÌ ÇÊ¿äÇÏ´Ù. ¸ÞÀκ¸µå ½Ã°è°¡ UTC¸¦ »ç¿ëÇϵµ·Ï ¼³Á¤ÇØ¾ß ÇÑ´Ù. ±×·¯³ª NTP¸¦ »ç¿ëÇÑ´Ù¸é Àç½ÃÀÛÈÄ Á¶±Ý Áö³ª¸é UTC ½Ã°£¿¡ ¿Ã¹Ù·Î ¸ÂÃá´Ù.

    ȯ°æº¯¼ö UNIQUE_ID´Â MIME base64 ÀÎÄÚµù°ú ºñ½ÁÇÑ ¹æ¹ýÀ¸·Î 112ºñÆ® (32ºñÆ® IP ÁÖ¼Ò, 32ºñÆ® pid, 32ºñÆ® ½Ã°£, 16ºñÆ® Ä«¿îÅÍ) ¹­À½À» ¾ËÆÄºª [A-Za-z0-9@-]·Î Ç¥ÇöÇÑ´Ù. ½ÇÁ¦ MIME base64 ¾ËÆÄºªÀº [A-Za-z0-9+/]ÀÌÁö¸¸ +¿Í /´Â URL¿¡¼­ Ưº°ÇÑ Àǹ̷Π»ç¿ëÇϹǷΠÁ¦¿ÜÇß´Ù. ¸ðµç °ªÀ» ³×Æ®¿÷ ¹ÙÀÌÆ®¼ø¼­·Î ÀÎÄÚµùÇϱ⶧¹®¿¡ ´Ù¸¥ ¹ÙÀÌÆ®¼ø¼­¸¦ »ç¿ëÇÏ´Â ¾ÆÅ°ÅØÃİ£¿¡ °ªÀÌ °°´Ù. ½ÇÁ¦ ÀÎÄÚµù ¼ø¼­´Â ½Ã°£, IP ÁÖ¼Ò, pid, Ä«¿îÅÍ ¼ø¼­ÀÌ´Ù. ÀÌ ¼ø¼­¿¡´Â ¾î¶² ¸ñÀûÀÌ ÀÖÁö¸¸, ÇÁ·Î±×·¥Àº ÀÎÄÚµù ¼ø¼­¿¡ ÀÇÁ¸ÇÏ¿© °ªµéÀ» ºÐ¼®ÇÏ¸é ¾ÈµÊÀ» °­Á¶ÇÑ´Ù. ÇÁ·Î±×·¥Àº ÀÎÄÚµùµÈ UNIQUE_ID Àüü¸¦ ÇÑ ´ÜÀ§·Î »ý°¢Çϰí, ´Ù¸¥ UNIQUE_ID¿Í µ¿ÀÏÇÑÁö¸¸ ºñ±³ÇÒ ¼ö ÀÖ´Ù.

    ¼ø¼­´Â ¾ÕÀ¸·Î ±âÁ¸ÀÇ UNIQUE_ID µ¥ÀÌÅͺ£À̽º¿Í Ãæµ¹À» ¿°·ÁÇÏÁö¾Ê°í ÀÎÄÚµùÀ» º¯°æÇÒ ¼ö ÀÖµµ·Ï °í¾ÈÇß´Ù. »õ·Î¿î ÀÎÄÚµùÀº ù Ç׸ñÀ¸·Î ½Ã°£À» »ç¿ëÇϰųª, °°Àº ¾ËÆÄºª°ú ºñÆ® ±æÀ̸¦ »ç¿ëÇÒ ¼öµµ ÀÖ´Ù. ½Ã°£ÀÌ ±âº»ÀûÀ¸·Î Áõ°¡ÇÏ´Â °ªÀ̹ǷΠŬ·¯½ºÅÍ¿¡ ÀÖ´Â ¸ðµç ÄÄÇ»ÅͰ¡ ¿äû ¼­ºñ½º¸¦ Áß´ÜÇϰí ÀÌÀü ÀÎÄÚµù Çü½ÄÀ» ±×¸¸ »ç¿ëÇϱâÀ§ÇØ ±âÁØ ÃÊ(flag second)¸¸À¸·Î ÃæºÐÇÏ´Ù. ÀÌÈÄ ¿äûÀ» Àç°ÔÇÏ°í »õ·Î¿î ÀÎÄÚµùÀ» ½ÃÀÛÇÒ ¼ö ÀÖ´Ù.

    ¿ì¸®´Â ÀÌ ¹æ¹ýÀÌ ÀÌ ¹®Á¦¿¡ ´ëÇÏ¿© »ó´ëÀûÀ¸·Î Æ÷ÆÃ°¡´ÉÇÑ ÇØ°áÃ¥À̶ó°í ¹Ï´Â´Ù. ÀÌ ¹æ¹ýÀº Windows NT¿Í °°Àº ¸ÖƼ¾²·¹µå ½Ã½ºÅÛÀ¸·Î È®ÀåÇÒ ¼ö ÀÖ°í, ¾ÕÀ¸·Î ¿ëµµ¿¡ µû¶ó È®ÀåÇÒ ¼ö ÀÖ´Ù. ¹Ì·¡¿¡ ÇÊ¿äÇѸ¸Å­ ´õ ±ä ½Äº°ÀÚ¸¦ ¸¸µé ¼ö Àֱ⶧¹®¿¡ »ý¼ºÇÑ ½Äº°ÀÚ´Â ±âº»ÀûÀ¸·Î ¿µ¿øÇÑ ¼ö¸íÀ» °¡Áø´Ù. ±âº»ÀûÀ¸·Î Ŭ·¯½ºÅÍÀÇ ÄÄÇ»ÅÍµé »çÀÌ¿¡ Åë½ÅÀÌ ÇÊ¿ä¾ø°í (ºÎÇϰ¡ ÀÛÀº NTP µ¿±â¸¸ ÇÊ¿äÇÏ´Ù), httpd ÇÁ·Î¼¼½º »çÀÌ¿¡ Åë½Åµµ ÇÊ¿ä¾ø´Ù (Ä¿³ÎÀÌ ºÎ¿©ÇÏ´Â pid°ªÀÌ ¾Ï¹¬ÀûÀÎ Åë½ÅÀÌ´Ù). ¸Å¿ì ƯÀÌÇÑ »óȲÀ̶ó¸é ÀνÄÀÚ Å©±â¸¦ ÁÙÀÏ ¼ö ÀÖÁö¸¸ ´õ ¸¹Àº Á¤º¸¸¦ °¡Á¤ÇØ¾ß ÇÑ´Ù. (¿¹¸¦ µé¾î, ¾î¶² »çÀÌÆ®¿¡¼­ 32ºñÆ® IP ÁÖ¼Ò ±¸ºÐÀº ºÒÇÊ¿äÇÏ°Ô Å©Áö¸¸, À̸¦ ÁÙÀÌ´Â ¹æ¹ýÀº »óȲ¿¡ µû¶ó ´Ù¸£´Ù.)

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_userdir.html0000644000000000000500000000075613362070302017426 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_userdir.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_userdir.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_userdir.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_userdir.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: mod_userdir.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_expires.html.fr.utf80000644000000000000500000004350113412755316020731 0ustar rootsrc mod_expires - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_expires

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Génération des en-têtes HTTP Expires et Cache-Control en fonction de critères spécifiés par l'utilisateur
    Statut:Extension
    Identificateur de Module:expires_module
    Fichier Source:mod_expires.c

    Sommaire

    Ce module permet de contrôler la définition de l'en-tête HTTP Expires et la directive max-age de l'en-tête HTTP Cache-Control dans les réponses du serveur. La date d'expiration peut être définie soit par rapport à la date de dernière modification du fichier source, soit par rapport à l'heure d'accès du client.

    Ces en-têtes HTTP permettent d'informer le client quant à la validité et à la persistence du document. S'il est présent dans le cache, et tant qu'il n'est pas arrivé à expiration, le document sera servi à partir de ce dernier, plutôt qu'à partir du document source. Après expiration, la copie du document dans le cache sera considérée comme "expirée" et donc invalide, et une nouvelle copie devra être obtenue à partir du document source.

    Pour modifier les directives de contrôle du cache autres que max-age (voir la RFC 2616 section 14.9), vous pouvez utiliser la directive Header.

    Lorsque l'en-tête Expires est déjà présent dans la réponse générée par le serveur, par exemple s'il a été créé par un script CGI ou un serveur original via un serveur mandataire, ce module n'ajoute aucun en-tête Expires ou Cache-Control.

    top

    Autre syntaxe de définition de l'intervalle

    Pour une syntaxe plus lisible, on peut aussi utiliser les directives ExpiresDefault et ExpiresByType comme suit :

    ExpiresDefault "base  [plus num type] [num type] ..."
    ExpiresByType type/encoding "base  [plus num type] [num type] ..."

    où base peut être :

    • access
    • now (équivalent à 'access')
    • modification

    Le mot-clé plus est optionnel. num doit correspondre à une valeur entière [compatible avec atoi()], et type peut être choisi parmi :

    • years
    • months
    • weeks
    • days
    • hours
    • minutes
    • seconds

    Par exemple, pour faire expirer par défaut les documents 1 mois après leur accès, on peut utiliser une des directives suivantes :

    ExpiresDefault "access plus 1 month"
    ExpiresDefault "access plus 4 weeks"
    ExpiresDefault "access plus 30 days"

    La date d'expiration peut être définie plus précisément en ajoutant plusieurs clauses 'num type' :

    ExpiresByType text/html "access plus 1 month 15 days 2 hours"
    ExpiresByType image/gif "modification plus 5 hours 3 minutes"

    Notez que si vous utilisez une configuration basée sur la date de modification, l'en-tête Expires ne sera pas ajouté à un contenu qui ne provient pas directement d'un fichier sur disque ; et ceci tout simplement parce que ce type de contenu ne possède pas de date de modification.

    top

    Directive ExpiresActive

    Description:Active la génération d'en-têtes Expires
    Syntaxe:ExpiresActive On|Off
    Défaut:ExpiresActive Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Extension
    Module:mod_expires

    Cette directive permet d'activer ou de désactiver la génération des en-têtes Expires et Cache-Control pour les documents concernés ; en d'autres termes, si cette directive se trouve dans un fichier .htaccess, par exemple, elle ne s'applique qu'aux documents générés à partir du répertoire considéré. Si elle est définie à Off, les en-têtes ne seront générés pour aucun document du domaine considéré (sauf surcharge de la configuration à un niveau inférieur, comme un fichier .htaccess qui l'emporterait sur le fichier de configuration du serveur). Si elle est définie à On, les en-têtes seront ajoutés aux documents servis en fonction des critères définis par les directives ExpiresByType et ExpiresDefault (voir plus loin).

    Notez que cette directive ne permet pas de garantir qu'un en-tête Expires ou Cache-Control sera généré. Si les critères ne sont pas respectés, aucun en-tête ne sera généré, et la directive produira le même effet que si elle n'avait pas été définie.

    top

    Directive ExpiresByType

    Description:Définition de la valeur de l'en-tête Expires en fonction du type MIME
    Syntaxe:ExpiresByType type MIME <code>secondes
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Extension
    Module:mod_expires

    Cette directive permet de définir la valeur de l'en-tête Expires et de la directive max-age de l'en-tête Cache-Control générés pour les documents du type MIME spécifié (par exemple, text/html). Le second argument définit le nombre de secondes qui seront ajoutées à un temps de base pour calculer la date d'expiration. Cache-Control: max-age se calcule en soustrayant la date de la requête de la date d'expiration et s'exprime en secondes.

    Le champ <code> permet de spécifier quel temps doit être utilisé comme temps de base; M signifie que c'est la date de dernière modification du fichier qui doit être utilisée comme temps de base, alors que A signifie que c'est le moment où le client a accédé au document qui doit être utilisé comme temps de base.

    La différence d'effet est subtile. Si on utilise M, toutes les copies existantes du document dans tous les caches expireront au même moment, ce qui peut convenir par exemple pour une notice hebdomadaire qui correspond toujours à la même URL. Si on utilise A, la date d'expiration sera différente pour chaque client, ce qui peut convenir pour des fichiers d'images qui ne changent pas très souvent, et en particulier pour un ensemble de documents en relation qui se réfèrent tous aux mêmes images (ces images sont alors accédées de manière répétitive dans un intervalle de temps assez court).

    Exemple :

    # active la génération des en-têtes Expires
    ExpiresActive On
    # les images GIF expirent au bout d'un mois dans le cache du
    # client
    ExpiresByType image/gif A2592000
    # les documents HTML restent valables une semaine après leur date
    # de dernière modification
    ExpiresByType text/html M604800

    Notez que cette directive ne produit d'effet que si ExpiresActive On a été spécifié. Elle l'emporte, mais seulement pour le type MIME spécifié, sur toute date d'expiration définie par la directive ExpiresDefault.

    Vous pouvez aussi définir le mode de calcul de la date d'expiration en utilisant une syntaxe alternative, comme décrit plus haut dans ce document.

    top

    Directive ExpiresDefault

    Description:Mode de calcul par défaut de la date d'expiration
    Syntaxe:ExpiresDefault <code>secondes
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Indexes
    Statut:Extension
    Module:mod_expires

    Cette directive permet de définir le mode de calcul par défaut de la date d'expiration pour tous les documents du domaine considéré. Elle peut être annulée pour certains types de documents par la directive ExpiresByType. Voir la description de cette dernière directive pour plus de détails à propos de la syntaxe de l'argument, ainsi que la description de la syntaxe alternative.

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_scgi.html.en0000644000000000000500000003522013420146431020534 0ustar rootsrc mod_proxy_scgi - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy_scgi

    Available Languages:  en  |  fr 

    Description:SCGI gateway module for mod_proxy
    Status:Extension
    Module Identifier:proxy_scgi_module
    Source File:mod_proxy_scgi.c
    Compatibility:Available in version 2.2.14 and later

    Summary

    This module requires the service of mod_proxy. It provides support for the SCGI protocol, version 1.

    Thus, in order to get the ability of handling the SCGI protocol, mod_proxy and mod_proxy_scgi have to be present in the server.

    Warning

    Do not enable proxying until you have secured your server. Open proxy servers are dangerous both to your network and to the Internet at large.

    top

    Examples

    Remember, in order to make the following examples work, you have to enable mod_proxy and mod_proxy_scgi.

    Simple gateway

    ProxyPass "/scgi-bin/" "scgi://localhost:4000/"

    The balanced gateway needs mod_proxy_balancer and at least one load balancer algorithm module, such as mod_lbmethod_byrequests, in addition to the proxy modules listed above. mod_lbmethod_byrequests is the default, and will be used for this example configuration.

    Balanced gateway

    ProxyPass "/scgi-bin/" "balancer://somecluster/"
    <Proxy "balancer://somecluster">
        BalancerMember "scgi://localhost:4000"
        BalancerMember "scgi://localhost:4001"
    </Proxy>
    top

    Environment Variables

    In addition to the configuration directives that control the behaviour of mod_proxy, an environment variable may also control the SCGI protocol provider:

    proxy-scgi-pathinfo
    By default mod_proxy_scgi will neither create nor export the PATH_INFO environment variable. This allows the backend SCGI server to correctly determine SCRIPT_NAME and Script-URI and be compliant with RFC 3875 section 3.3. If instead you need mod_proxy_scgi to generate a "best guess" for PATH_INFO, set this env-var. The variable must be set before SetEnv is effective. SetEnvIf can be used instead: SetEnvIf Request_URI . proxy-scgi-pathinfo
    top

    ProxySCGIInternalRedirect Directive

    Description:Enable or disable internal redirect responses from the backend
    Syntax:ProxySCGIInternalRedirect On|Off|Headername
    Default:ProxySCGIInternalRedirect On
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy_scgi
    Compatibility:The Headername feature is available in version 2.4.13 and later

    The ProxySCGIInternalRedirect enables the backend to internally redirect the gateway to a different URL. This feature originates in mod_cgi, which internally redirects the response if the response status is OK (200) and the response contains a Location (or configured alternate header) and its value starts with a slash (/). This value is interpreted as a new local URL that Apache httpd internally redirects to.

    mod_proxy_scgi does the same as mod_cgi in this regard, except that you can turn off the feature or specify the use of a header other than Location.

    Example

        ProxySCGIInternalRedirect Off
    
    # Django and some other frameworks will fully qualify "local URLs"
    # set by the application, so an alternate header must be used.
    <Location /django-app/>
        ProxySCGIInternalRedirect X-Location
    </Location>
    top

    ProxySCGISendfile Directive

    Description:Enable evaluation of X-Sendfile pseudo response header
    Syntax:ProxySCGISendfile On|Off|Headername
    Default:ProxySCGISendfile Off
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy_scgi

    The ProxySCGISendfile directive enables the SCGI backend to let files be served directly by the gateway. This is useful for performance purposes — httpd can use sendfile or other optimizations, which are not possible if the file comes over the backend socket. Additionally, the file contents are not transmitted twice.

    The ProxySCGISendfile argument determines the gateway behaviour:

    Off
    No special handling takes place.
    On
    The gateway looks for a backend response header called X-Sendfile and interprets the value as the filename to serve. The header is removed from the final response headers. This is equivalent to ProxySCGISendfile X-Sendfile.
    anything else
    Similar to On, but instead of the hardcoded header name X-Sendfile, the argument is used as the header name.

    Example

    # Use the default header (X-Sendfile)
    ProxySCGISendfile On
    
    # Use a different header
    ProxySCGISendfile X-Send-Static

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_alias.html.ko.euc-kr0000644000000000000500000005571513412755316020657 0ustar rootsrc mod_alias - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_alias

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:ÆÄÀϽýºÅÛÀÇ ´Ù¸¥ ºÎºÐµéÀ» ¹®¼­ °èÃþ±¸Á¶¿¡ Æ÷ÇÔÇϰí, URL ¸®´ÙÀÌ·º¼ÇÀ» Á¦°øÇÑ´Ù
    »óÅÂ:Base
    ¸ðµâ¸í:alias_module
    ¼Ò½ºÆÄÀÏ:mod_alias.c

    ¿ä¾à

    ÀÌ ¸ðµâÀÌ Á¦°øÇÏ´Â Áö½Ã¾îµéÀ» »ç¿ëÇÏ¿© ¼­¹ö°¡ ¿äûÀ» ¹ÞÀ»¶§ URLÀ» ¼öÁ¤Çϰųª Á¶ÀÛÇÒ ¼ö ÀÖ´Ù. Alias¿Í ScriptAlias Áö½Ã¾î´Â URLÀ» ÆÄÀϽýºÅÛ °æ·Î·Î ´ëÀÀÇÑ´Ù. ±×·¡¼­ DocumentRoot ¾Æ·¡¿¡ ¾ø´Â ³»¿ëÀ» À¥À¸·Î ¼­ºñ½ºÇÒ ¼ö ÀÖ´Ù. ¶Ç, ScriptAlias Áö½Ã¾î´Â ÁöÁ¤ÇÑ µð·ºÅ丮¿¡ CGI ½ºÅ©¸³Æ®¹Û¿¡ ¾ø´Ù°í ¾Ë¸°´Ù.

    Redirect Áö½Ã¾î´Â Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ´Ù¸¥ URL·Î »õ·Î¿î ¿äûÀ» Çϵµ·Ï Áö½ÃÇÑ´Ù. ÀÚ¿øÀ» »õ·Î¿î Àå¼Ò·Î ¿Å±ä °æ¿ì ÀÚÁÖ »ç¿ëÇÑ´Ù.

    mod_alias´Â °£´ÜÇÑ URL Á¶ÀÛÀ» À§ÇØ ¼³°èµÇ¾ú´Ù. ÁúÀǹ®ÀÚ¿­ Á¶ÀÛ°ú °°Àº º¹ÀâÇÑ ÀÛ¾÷Àº mod_rewrite°¡ Á¦°øÇÏ´Â ±â´ÉÀ» ÀÌ¿ëÇ϶ó.

    top

    ó¸® ¼ø¼­

    ¼­·Î ´Ù¸¥ »ç¿ëÀå¼Ò¿¡¼­ Alias¿Í Redirect¸¦ »ç¿ëÇÏ¸é ´Ù¸¥ Áö½Ã¾î¿Í °°ÀÌ Ç¥ÁØ °áÇÕ ¹æ¹ý¿¡ µû¶ó ó¸®ÇÑ´Ù. ±×·¯³ª °°Àº »ç¿ëÀå¼Ò¿¡ (¿¹¸¦ µé¾î, °°Àº <VirtualHost> ¼½¼Ç¿¡) Alias¿Í Redirect¸¦ »ç¿ëÇÏ¸é ¾Æ·¡ ¼ø¼­´ë·Î ó¸®ÇÑ´Ù.

    ¸ÕÀú ¸ðµç Redirect¸¦ ó¸®ÇÑ ÈÄ Alias¸¦ ó¸®ÇÑ´Ù. ±×·¡¼­ Redirect³ª RedirectMatch¿¡ ÇØ´çÇÏ´Â ¿äûÀº Àý´ë·Î AliasÇÏÁö ¾Ê´Â´Ù. ±×¸®°í Alias¿Í Redirect´Â ¼³Á¤ÆÄÀÏ¿¡¼­ ù¹øÂ°·Î ³ª¿À´Â °ÍÀ» »ç¿ëÇÑ´Ù.

    ±×·¡¼­ ¿©·¯ Áö½Ã¾î°¡ µ¿ÀÏÇÑ ÇÏÀ§°æ·Î¿¡ ÇØ´çÇÏ´Â °æ¿ì ¸ðµç Áö½Ã¾î¸¦ Àû¿ëÇϱâÀ§Çؼ­´Â °¡Àå »ó¼¼ÇÑ °æ·Î¸¦ ¸ÕÀú »ç¿ëÇØ¾ß ÇÑ´Ù. ¿¹¸¦ µé¾î, ´ÙÀ½ ¼³Á¤Àº ÀǵµÇÑ´ë·Î µ¿ÀÛÇÑ´Ù:

    Alias /foo/bar /baz
    Alias /foo /gaq

    ±×·¯³ª À§ÀÇ µÎ Áö½Ã¾î ¼ø¼­¸¦ ¹Ù²Ù¸é /foo/bar Alias ÀÌÀü¿¡ /foo Alias¸¦ Àû¿ëÇϹǷΠÇ×»ó µÎ¹øÂ° Áö½Ã¾î¸¦ ¹«½ÃÇÑ´Ù.

    top

    Alias Áö½Ã¾î

    ¼³¸í:URLÀ» ƯÁ¤ ÆÄÀϽýºÅÛ Àå¼Ò·Î ´ëÀÀÇÑ´Ù
    ¹®¹ý:Alias URL-path file-path|directory-path
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Base
    ¸ðµâ:mod_alias

    Alias Áö½Ã¾î¸¦ »ç¿ëÇÏ¸é ÆÄÀϽýºÅÛ¿¡¼­ DocumentRoot ¹Û¿¡ ÀÖ´Â ¹®¼­µµ ¼­ºñ½ºÇÒ ¼ö ÀÖ´Ù. url-path·Î ½ÃÀÛÇÏ´Â (%·Î ÀÎÄÚµùµÈ) URLÀ» directory-path·Î ½ÃÀÛÇÏ´Â ÆÄÀÏ¿¡ ´ëÀÀÇÑ´Ù.

    ¿¹Á¦:

    Alias /image /ftp/pub/image

    http://myserver/image/foo.gif¸¦ ¿äûÇÏ¸é ¼­¹ö´Â /ftp/pub/image/foo.gif ÆÄÀÏÀ» ³Ñ°ÜÁØ´Ù.

    url-path ³¡¿¡ /¸¦ Æ÷ÇÔÇϸé, URL ³¡¿¡ /¸¦ »ç¿ëÇØ¾ß¸¸ ¿µÇâÀÌ ÀÖÀ½À» ÁÖÀÇÇ϶ó. Áï, Alias /icons/ /usr/local/apache/icons/ ¼³Á¤Àº url /icons¿Í °ü°è°¡ ¾ø´Ù.

    ´ëÀÀÀÇ ´ë»óÀ» Æ÷ÇÔÇÏ´Â ¿©·¯ <Directory> ¼½¼ÇÀÌ ÇÊ¿äÇÒÁöµµ ¸ð¸¥´Ù. ÀÌ Áö½Ã¾î´Â <Directory> ¼½¼ÇÀ» °Ë»çÇϱâ Àü¿¡ ó¸®ÇϹǷÎ, ´ëÀÀÀÇ ´ë»ó¸¸ ¼½¼ÇÀÇ ¿µÇâÀ» ¹Þ´Â´Ù. (±×·¯³ª <Location> ¼½¼ÇÀº ÀÌ Áö½Ã¾î¸¦ ó¸®Çϱâ Àü¿¡ Çѹø¸¸ °Ë»çÇϹǷΠÁöÁ¤ÇÑ URL ÀÌÇÏ Àüü¿¡ ¿µÇâÀ» ÁØ´Ù.)

    ƯÈ÷ DocumentRoot ¹Û¿¡ ÀÖ´Â µð·ºÅ丮·Î Alias¸¦ ¸¸µé¾ú´Ù¸é, Á÷Á¢ ´ë»ó µð·ºÅ丮ÀÇ Á¢±ÙÀ» Çã¿ëÇØÁà¾ß ÇÑ´Ù.

    ¿¹Á¦:

    Alias /image /ftp/pub/image
    <Directory /ftp/pub/image>
    Order allow,deny
    Allow from all
    </Directory>

    top

    AliasMatch Áö½Ã¾î

    ¼³¸í:Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÏ¿© URLÀ» ÆÄÀϽýºÅÛ Àå¼Ò·Î ´ëÀÀÇÑ´Ù
    ¹®¹ý:AliasMatch regex file-path|directory-path
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Base
    ¸ðµâ:mod_alias

    ÀÌ Áö½Ã¾î´Â Alias¿Í °°Áö¸¸, °£´ÜÈ÷ URLÀÇ ¾ÕºÎºÐ¸¸ ºñ±³ÇÏ´Â ´ë½Å Ç¥ÁØ Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÑ´Ù. ÁöÁ¤ÇÑ Á¤±ÔÇ¥Çö½ÄÀ» URL °æ·Î¿Í ºñ±³ÇÏ¿© ¸Â´Ù¸é, ¼­¹ö´Â °ýÈ£·Î ¹­Àº ºÎºÐÀ» ´ëüÇÏ¿© ÆÄÀϸíÀ¸·Î »ç¿ëÇÑ´Ù. ¿¹¸¦ µé¾î, ´ÙÀ½°ú °°ÀÌ /icons µð·ºÅ丮¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù:

    AliasMatch ^/icons(.*) /usr/local/apache/icons$1

    top

    Redirect Áö½Ã¾î

    ¼³¸í:Ŭ¶óÀÌ¾ðÆ®°¡ ´Ù¸¥ URL¿¡ Á¢¼ÓÇϵµ·Ï ¿äûÇÏ´Â ¿ÜºÎ ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù
    ¹®¹ý:Redirect [status] URL-path URL
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_alias

    Redirect Áö½Ã¾î´Â ÀÌÀü URLÀ» »õ·Î¿î URL·Î ´ëÀÀÇÑ´Ù. Ŭ¶óÀÌ¾ðÆ®¿¡°Ô »õ·Î¿î URLÀ» º¸³»°í, Ŭ¶óÀÌ¾ðÆ®´Â »õ·Î¿î ÁÖ¼Ò·Î ´Ù½Ã Çѹø Á¢¼ÓÇÑ´Ù. (%·Î ÀÎÄÚµùµÈ) URL-path·Î ½ÃÀÛÇÏ´Â ¿äûÀ» ¹ÞÀ¸¸é (%·Î ÀÎÄÚµùµÈ) URL·Î ½ÃÀÛÇÏ´Â »õ·Î¿î URL·Î ¸®´ÙÀÌ·º¼Ç ¿À·ù¸¦ º¸³½´Ù.

    ¿¹Á¦:

    Redirect /service http://foo2.bar.com/service

    Ŭ¶óÀÌ¾ðÆ®°¡ http://myserver/service/foo.txt¸¦ ¿äûÇÏ¸é ´ë½Å http://foo2.bar.com/service/foo.txt¿¡ Á¢±ÙÇ϶ó´Â ÀÀ´äÀ» ¹Þ´Â´Ù.

    ÁÖÀÇ

    Redirect Áö½Ã¾î´Â ¼³Á¤ÆÄÀÏ¿¡¼­ ³ª¿À´Â ¼ø¼­¿Í °ü°è¾øÀÌ Alias¿Í ScriptAlias Áö½Ã¾îº¸´Ù ¿ì¼±¼øÀ§°¡ ³ô´Ù. ¶Ç, .htaccess ÆÄÀÏÀ̳ª <Directory> ¼½¼Ç¿¡¼­ »ç¿ëÇÏ´õ¶óµµ URL-path¿¡´Â »ó´ë°æ·Î°¡ ¾Æ´Ï¶ó ¹Ýµå½Ã ¿ÏÀüÇÑ URLÀ» »ç¿ëÇØ¾ß ÇÑ´Ù.

    status ¾Æ±Ô¸ÕÆ®¸¦ ÁöÁ¤ÇÏÁö¾ÊÀ¸¸é, "Àӽà (temporary)" (HTTP »óÅ 302) ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù. Áï, Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ÀÚ¿øÀ» Àӽ÷Π¿Å°å´Ù°í ¾Ë¸°´Ù. status ¾Æ±Ô¸ÕÆ®¸¦ »ç¿ëÇÏ¿© ´Ù¸¥ HTTP »óÅÂÄڵ带 ¹ÝȯÇÒ ¼ö ÀÖ´Ù:

    permanent
    ÀÚ¿øÀ» ¿ÏÀüÈ÷ ¿Å°åÀ½À» ¶æÇÏ´Â ¿µ±¸ ¸®´ÙÀÌ·º¼Ç »óŸ¦ (301) ¹ÝȯÇÑ´Ù.
    temp
    Àӽà ¸®´ÙÀÌ·º¼Ç »óŸ¦ (302) ¹ÝȯÇÑ´Ù. ±âº»°ªÀÌ´Ù.
    seeother
    ÀÚ¿øÀÌ ±³Ã¼µÇ¾úÀ½À» ¶æÇÏ´Â "ÂüÁ¶ (See Other)" »óŸ¦ (303) ¹ÝȯÇÑ´Ù.
    gone
    ÀÚ¿øÀÌ ¿µ±¸È÷ »èÁ¦µÇ¾úÀ½À» ¶æÇÏ´Â "¼Ò¸ê (Gone)" »óŸ¦ (410) ¹ÝȯÇÑ´Ù. ÀÌ »óŸ¦ »ç¿ëÇϸé URL ¾Æ±Ô¸ÕÆ®¸¦ »ç¿ëÇÒ ¼ö ¾ø´Ù.

    status¿¡ ¼ýÀÚ »óÅÂÄڵ带 »ç¿ëÇÏ¿© ´Ù¸¥ »óÅÂÄڵ嵵 ¹ÝȯÇÒ ¼ö ÀÖ´Ù. »óŰ¡ 300°ú 399 »çÀ̶ó¸é URL ¾Æ±Ô¸ÕÆ®¸¦ »ç¿ëÇØ¾ß Çϰí, ¾Æ´Ï¶ó¸é »ý·«ÇØ¾ß ÇÑ´Ù. ´Ü, ¾ÆÆÄÄ¡ Äڵ忡 »óŰ¡ Á¤ÀǵÇÀÖ¾î¾ß ÇÑ´Ù (http_protocol.cÀÇ send_error_response ÇÔ¼ö Âü°í).

    ¿¹Á¦:

    Redirect permanent /one http://example.com/two
    Redirect 303 /three http://example.com/other

    top

    RedirectMatch Áö½Ã¾î

    ¼³¸í:ÇöÀç URLÀÌ Á¤±ÔÇ¥Çö½Ä¿¡ ÇØ´çÇÏ¸é ¿ÜºÎ ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù
    ¹®¹ý:RedirectMatch [status] regex URL
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_alias

    ÀÌ Áö½Ã¾î´Â Redirect¿Í °°Áö¸¸, °£´ÜÈ÷ URLÀÇ ¾ÕºÎºÐ¸¸ ºñ±³ÇÏ´Â ´ë½Å Ç¥ÁØ Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÑ´Ù. ÁöÁ¤ÇÑ Á¤±ÔÇ¥Çö½ÄÀ» URL °æ·Î¿Í ºñ±³ÇÏ¿© ¸Â´Ù¸é, ¼­¹ö´Â °ýÈ£·Î ¹­Àº ºÎºÐÀ» ´ëüÇÏ¿© ÆÄÀϸíÀ¸·Î »ç¿ëÇÑ´Ù. ¿¹¸¦ µé¾î, ´ÙÀ½Àº ¸ðµç GIF ÆÄÀÏ ¿äû¿¡ ´ëÇØ ´Ù¸¥ ¼­¹öÀÇ ºñ½ÁÇÑ À̸§À» °¡Áø JPEG ÆÄÀÏ·Î ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù:

    RedirectMatch (.*)\.gif$ http://www.anotherserver.com$1.jpg

    top

    RedirectPermanent Áö½Ã¾î

    ¼³¸í:Ŭ¶óÀÌ¾ðÆ®°¡ ´Ù¸¥ URL¿¡ Á¢¼ÓÇϵµ·Ï ¿äûÇÏ´Â ¿ÜºÎ ¿µ±¸ ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù
    ¹®¹ý:RedirectPermanent URL-path URL
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_alias

    ÀÌ Áö½Ã¾î´Â Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ¸®´ÙÀÌ·º¼ÇÀÌ ¿µ±¸ÀûÀÓÀ» (»óÅ 301) ¾Ë¸°´Ù. Redirect permanent¿Í Á¤È®È÷ °°´Ù.

    top

    RedirectTemp Áö½Ã¾î

    ¼³¸í:Ŭ¶óÀÌ¾ðÆ®°¡ ´Ù¸¥ URL¿¡ Á¢¼ÓÇϵµ·Ï ¿äûÇÏ´Â ¿ÜºÎ Àӽà ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù
    ¹®¹ý:RedirectTemp URL-path URL
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_alias

    ÀÌ Áö½Ã¾î´Â Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ¸®´ÙÀÌ·º¼ÇÀÌ ÀÓ½ÃÀûÀÓÀ» (»óÅ 302) ¾Ë¸°´Ù. Redirect temp¿Í Á¤È®È÷ °°´Ù.

    top

    ScriptAlias Áö½Ã¾î

    ¼³¸í:URLÀ» ƯÁ¤ ÆÄÀϽýºÅÛ Àå¼Ò·Î ´ëÀÀÇÏ°í ´ë»óÀÌ CGI ½ºÅ©¸³Æ®¶ó°í ¾Ë¸°´Ù
    ¹®¹ý:ScriptAlias URL-path file-path|directory-path
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Base
    ¸ðµâ:mod_alias

    ScriptAlias Áö½Ã¾î´Â Alias Áö½Ã¾î¿Í ºñ½ÁÇÏÁö¸¸, Ãß°¡·Î ´ë»ó µð·ºÅ丮¿¡ mod_cgiÀÇ cgi-script Çڵ鷯°¡ ó¸®ÇÒ CGI ½ºÅ©¸³Æ®°¡ ÀÖ´Ù°í ¾Ë¸°´Ù. URL-path·Î ½ÃÀÛÇÏ´Â (%·Î ÀÎÄÚµùµÈ) URLÀ» ÆÄÀϽýºÅÛÀÇ Àý´ë°æ·ÎÀÎ µÎ¹øÂ° ¾Æ±Ô¸ÕÆ®·Î ½ÃÀÛÇÏ´Â ½ºÅ©¸³Æ®¿¡ ´ëÀÀÇÑ´Ù.

    ¿¹Á¦:

    ScriptAlias /cgi-bin/ /web/cgi-bin/

    http://myserver/cgi-bin/foo¸¦ ¿äûÇÏ¸é ¼­¹ö´Â /web/cgi-bin/foo ½ºÅ©¸³Æ®¸¦ ½ÇÇàÇÑ´Ù.

    top

    ScriptAliasMatch Áö½Ã¾î

    ¼³¸í:Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÏ¿© URLÀ» ƯÁ¤ ÆÄÀϽýºÅÛ Àå¼Ò·Î ´ëÀÀÇÏ°í ´ë»óÀÌ CGI ½ºÅ©¸³Æ®¶ó°í ¾Ë¸°´Ù
    ¹®¹ý:ScriptAliasMatch regex file-path|directory-path
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Base
    ¸ðµâ:mod_alias

    ÀÌ Áö½Ã¾î´Â ScriptAlias¿Í °°Áö¸¸, °£´ÜÈ÷ URLÀÇ ¾ÕºÎºÐ¸¸ ºñ±³ÇÏ´Â ´ë½Å Ç¥ÁØ Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÑ´Ù. ÁöÁ¤ÇÑ Á¤±ÔÇ¥Çö½ÄÀ» URL °æ·Î¿Í ºñ±³ÇÏ¿© ¸Â´Ù¸é, ¼­¹ö´Â °ýÈ£·Î ¹­Àº ºÎºÐÀ» ´ëüÇÏ¿© ÆÄÀϸíÀ¸·Î »ç¿ëÇÑ´Ù. ¿¹¸¦ µé¾î, ´ÙÀ½°ú °°ÀÌ Ç¥ÁØÀûÀÎ /cgi-binÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù:

    ScriptAliasMatch ^/cgi-bin(.*) /usr/local/apache/cgi-bin$1

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_imagemap.html.en0000644000000000000500000005235513412755316020147 0ustar rootsrc mod_imagemap - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_imagemap

    Available Languages:  en  |  fr  |  ko 

    Description:Server-side imagemap processing
    Status:Base
    Module Identifier:imagemap_module
    Source File:mod_imagemap.c

    Summary

    This module processes .map files, thereby replacing the functionality of the imagemap CGI program. Any directory or document type configured to use the handler imap-file (using either AddHandler or SetHandler) will be processed by this module.

    The following directive will activate files ending with .map as imagemap files:

    AddHandler imap-file map

    Note that the following is still supported:

    AddType application/x-httpd-imap map

    However, we are trying to phase out "magic MIME types" so we are deprecating this method.

    top

    New Features

    The imagemap module adds some new features that were not possible with previously distributed imagemap programs.

    • URL references relative to the Referer: information.
    • Default <base> assignment through a new map directive base.
    • No need for imagemap.conf file.
    • Point references.
    • Configurable generation of imagemap menus.
    top

    Imagemap File

    The lines in the imagemap files can have one of several formats:

    directive value [x,y ...]
    directive value "Menu text" [x,y ...]
    directive value x,y ... "Menu text"

    The directive is one of base, default, poly, circle, rect, or point. The value is an absolute or relative URL, or one of the special values listed below. The coordinates are x,y pairs separated by whitespace. The quoted text is used as the text of the link if a imagemap menu is generated. Lines beginning with '#' are comments.

    Imagemap File Directives

    There are six directives allowed in the imagemap file. The directives can come in any order, but are processed in the order they are found in the imagemap file.

    base Directive

    Has the effect of <base href="value"> . The non-absolute URLs of the map-file are taken relative to this value. The base directive overrides ImapBase as set in a .htaccess file or in the server configuration files. In the absence of an ImapBase configuration directive, base defaults to http://server_name/.

    base_uri is synonymous with base. Note that a trailing slash on the URL is significant.

    default Directive
    The action taken if the coordinates given do not fit any of the poly, circle or rect directives, and there are no point directives. Defaults to nocontent in the absence of an ImapDefault configuration setting, causing a status code of 204 No Content to be returned. The client should keep the same page displayed.
    poly Directive
    Takes three to one-hundred points, and is obeyed if the user selected coordinates fall within the polygon defined by these points.
    circle
    Takes the center coordinates of a circle and a point on the circle. Is obeyed if the user selected point is with the circle.
    rect Directive
    Takes the coordinates of two opposing corners of a rectangle. Obeyed if the point selected is within this rectangle.
    point Directive
    Takes a single point. The point directive closest to the user selected point is obeyed if no other directives are satisfied. Note that default will not be followed if a point directive is present and valid coordinates are given.

    Values

    The values for each of the directives can be any of the following:

    a URL

    The URL can be relative or absolute URL. Relative URLs can contain '..' syntax and will be resolved relative to the base value.

    base itself will not be resolved according to the current value. A statement base mailto: will work properly, though.

    map
    Equivalent to the URL of the imagemap file itself. No coordinates are sent with this, so a menu will be generated unless ImapMenu is set to none.
    menu
    Synonymous with map.
    referer
    Equivalent to the URL of the referring document. Defaults to http://servername/ if no Referer: header was present.
    nocontent
    Sends a status code of 204 No Content, telling the client to keep the same page displayed. Valid for all but base.
    error
    Fails with a 500 Server Error. Valid for all but base, but sort of silly for anything but default.

    Coordinates

    0,0 200,200
    A coordinate consists of an x and a y value separated by a comma. The coordinates are separated from each other by whitespace. To accommodate the way Lynx handles imagemaps, should a user select the coordinate 0,0, it is as if no coordinate had been selected.

    Quoted Text

    "Menu Text"

    After the value or after the coordinates, the line optionally may contain text within double quotes. This string is used as the text for the link if a menu is generated:

    <a href="http://example.com/">Menu text</a>

    If no quoted text is present, the name of the link will be used as the text:

    <a href="http://example.com/">http://example.com</a>

    If you want to use double quotes within this text, you have to write them as &quot;.

    top

    Example Mapfile

    #Comments are printed in a 'formatted' or 'semiformatted' menu.
    #And can contain html tags. <hr>
    base referer
    poly map "Could I have a menu, please?" 0,0 0,10 10,10 10,0
    rect .. 0,0 77,27 "the directory of the referer"
    circle http://www.inetnebr.example.com/lincoln/feedback/ 195,0 305,27
    rect another_file "in same directory as referer" 306,0 419,27
    point http://www.zyzzyva.example.com/ 100,100
    point http://www.tripod.example.com/ 200,200
    rect mailto:nate@tripod.example.com 100,150 200,0 "Bugs?"

    top

    Referencing your mapfile

    HTML example

    <a href="/maps/imagemap1.map">
    <img ismap src="/images/imagemap1.gif">
    </a>

    XHTML example

    <a href="/maps/imagemap1.map">
    <img ismap="ismap" src="/images/imagemap1.gif" />
    </a>

    top

    ImapBase Directive

    Description:Default base for imagemap files
    Syntax:ImapBase map|referer|URL
    Default:ImapBase http://servername/
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_imagemap

    The ImapBase directive sets the default base used in the imagemap files. Its value is overridden by a base directive within the imagemap file. If not present, the base defaults to http://servername/.

    See also

    top

    ImapDefault Directive

    Description:Default action when an imagemap is called with coordinates that are not explicitly mapped
    Syntax:ImapDefault error|nocontent|map|referer|URL
    Default:ImapDefault nocontent
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_imagemap

    The ImapDefault directive sets the default default used in the imagemap files. Its value is overridden by a default directive within the imagemap file. If not present, the default action is nocontent, which means that a 204 No Content is sent to the client. In this case, the client should continue to display the original page.

    top

    ImapMenu Directive

    Description:Action if no coordinates are given when calling an imagemap
    Syntax:ImapMenu none|formatted|semiformatted|unformatted
    Default:ImapMenu formatted
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_imagemap

    The ImapMenu directive determines the action taken if an imagemap file is called without valid coordinates.

    none
    If ImapMenu is none, no menu is generated, and the default action is performed.
    formatted
    A formatted menu is the simplest menu. Comments in the imagemap file are ignored. A level one header is printed, then an hrule, then the links each on a separate line. The menu has a consistent, plain look close to that of a directory listing.
    semiformatted
    In the semiformatted menu, comments are printed where they occur in the imagemap file. Blank lines are turned into HTML breaks. No header or hrule is printed, but otherwise the menu is the same as a formatted menu.
    unformatted
    Comments are printed, blank lines are ignored. Nothing is printed that does not appear in the imagemap file. All breaks and headers must be included as comments in the imagemap file. This gives you the most flexibility over the appearance of your menus, but requires you to treat your map files as HTML instead of plaintext.

    Available Languages:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_lua.html.en0000644000000000000500000026245213417353001017137 0ustar rootsrc mod_lua - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_lua

    Available Languages:  en  |  fr 

    Description:Provides Lua hooks into various portions of the httpd request processing
    Status:Extension
    Module Identifier:lua_module
    Source File:mod_lua.c
    Compatibility:2.3 and later

    Summary

    This module allows the server to be extended with scripts written in the Lua programming language. The extension points (hooks) available with mod_lua include many of the hooks available to natively compiled Apache HTTP Server modules, such as mapping requests to files, generating dynamic responses, access control, authentication, and authorization

    More information on the Lua programming language can be found at the the Lua website.

    Warning

    This module holds a great deal of power over httpd, which is both a strength and a potential security risk. It is not recommended that you use this module on a server that is shared with users you do not trust, as it can be abused to change the internal workings of httpd.

    top

    Basic Configuration

    The basic module loading directive is

    LoadModule lua_module modules/mod_lua.so

    mod_lua provides a handler named lua-script, which can be used with a SetHandler or AddHandler directive:

    <Files "*.lua">
        SetHandler lua-script
    </Files>

    This will cause mod_lua to handle requests for files ending in .lua by invoking that file's handle function.

    For more flexibility, see LuaMapHandler.

    top

    Writing Handlers

    In the Apache HTTP Server API, the handler is a specific kind of hook responsible for generating the response. Examples of modules that include a handler are mod_proxy, mod_cgi, and mod_status.

    mod_lua always looks to invoke a Lua function for the handler, rather than just evaluating a script body CGI style. A handler function looks something like this:

    example.lua
    -- example handler require "string" --[[ This is the default method name for Lua handlers, see the optional function-name in the LuaMapHandler directive to choose a different entry point. --]] function handle(r) r.content_type = "text/plain" if r.method == 'GET' then r:puts("Hello Lua World!\n") for k, v in pairs( r:parseargs() ) do r:puts( string.format("%s: %s\n", k, v) ) end elseif r.method == 'POST' then r:puts("Hello Lua World!\n") for k, v in pairs( r:parsebody() ) do r:puts( string.format("%s: %s\n", k, v) ) end elseif r.method == 'PUT' then -- use our own Error contents r:puts("Unsupported HTTP method " .. r.method) r.status = 405 return apache2.OK else -- use the ErrorDocument return 501 end return apache2.OK end

    This handler function just prints out the uri or form encoded arguments to a plaintext page.

    This means (and in fact encourages) that you can have multiple handlers (or hooks, or filters) in the same script.

    top

    Writing Authorization Providers

    mod_authz_core provides a high-level interface to authorization that is much easier to use than using into the relevant hooks directly. The first argument to the Require directive gives the name of the responsible authorization provider. For any Require line, mod_authz_core will call the authorization provider of the given name, passing the rest of the line as parameters. The provider will then check authorization and pass the result as return value.

    The authz provider is normally called before authentication. If it needs to know the authenticated user name (or if the user will be authenticated at all), the provider must return apache2.AUTHZ_DENIED_NO_USER. This will cause authentication to proceed and the authz provider to be called a second time.

    The following authz provider function takes two arguments, one ip address and one user name. It will allow access from the given ip address without authentication, or if the authenticated user matches the second argument:

    authz_provider.lua
    require 'apache2' function authz_check_foo(r, ip, user) if r.useragent_ip == ip then return apache2.AUTHZ_GRANTED elseif r.user == nil then return apache2.AUTHZ_DENIED_NO_USER elseif r.user == user then return apache2.AUTHZ_GRANTED else return apache2.AUTHZ_DENIED end end

    The following configuration registers this function as provider foo and configures it for URL /:

    LuaAuthzProvider foo authz_provider.lua authz_check_foo
    <Location "/">
      Require foo 10.1.2.3 john_doe
    </Location>
    top

    Writing Hooks

    Hook functions are how modules (and Lua scripts) participate in the processing of requests. Each type of hook exposed by the server exists for a specific purpose, such as mapping requests to the file system, performing access control, or setting mime types:

    Hook phase mod_lua directive Description
    Quick handler LuaQuickHandler This is the first hook that will be called after a request has been mapped to a host or virtual host
    Translate name LuaHookTranslateName This phase translates the requested URI into a filename on the system. Modules such as mod_alias and mod_rewrite operate in this phase.
    Map to storage LuaHookMapToStorage This phase maps files to their physical, cached or external/proxied storage. It can be used by proxy or caching modules
    Check Access LuaHookAccessChecker This phase checks whether a client has access to a resource. This phase is run before the user is authenticated, so beware.
    Check User ID LuaHookCheckUserID This phase it used to check the negotiated user ID
    Check Authorization LuaHookAuthChecker or LuaAuthzProvider This phase authorizes a user based on the negotiated credentials, such as user ID, client certificate etc.
    Check Type LuaHookTypeChecker This phase checks the requested file and assigns a content type and a handler to it
    Fixups LuaHookFixups This is the final "fix anything" phase before the content handlers are run. Any last-minute changes to the request should be made here.
    Content handler fx. .lua files or through LuaMapHandler This is where the content is handled. Files are read, parsed, some are run, and the result is sent to the client
    Logging LuaHookLog Once a request has been handled, it enters several logging phases, which logs the request in either the error or access log. Mod_lua is able to hook into the start of this and control logging output.

    Hook functions are passed the request object as their only argument (except for LuaAuthzProvider, which also gets passed the arguments from the Require directive). They can return any value, depending on the hook, but most commonly they'll return OK, DONE, or DECLINED, which you can write in Lua as apache2.OK, apache2.DONE, or apache2.DECLINED, or else an HTTP status code.

    translate_name.lua
    -- example hook that rewrites the URI to a filesystem path. require 'apache2' function translate_name(r) if r.uri == "/translate-name" then r.filename = r.document_root .. "/find_me.txt" return apache2.OK end -- we don't care about this URL, give another module a chance return apache2.DECLINED end
    translate_name2.lua
    --[[ example hook that rewrites one URI to another URI. It returns a apache2.DECLINED to give other URL mappers a chance to work on the substitution, including the core translate_name hook which maps based on the DocumentRoot. Note: Use the early/late flags in the directive to make it run before or after mod_alias. --]] require 'apache2' function translate_name(r) if r.uri == "/translate-name" then r.uri = "/find_me.txt" return apache2.DECLINED end return apache2.DECLINED end
    top

    Data Structures

    request_rec

    The request_rec is mapped in as a userdata. It has a metatable which lets you do useful things with it. For the most part it has the same fields as the request_rec struct, many of which are writable as well as readable. (The table fields' content can be changed, but the fields themselves cannot be set to different tables.)

    Name Lua type Writable Description
    allowoverrides string no The AllowOverride options applied to the current request.
    ap_auth_type string no If an authentication check was made, this is set to the type of authentication (f.x. basic)
    args string yes The query string arguments extracted from the request (f.x. foo=bar&name=johnsmith)
    assbackwards boolean no Set to true if this is an HTTP/0.9 style request (e.g. GET /foo (with no headers) )
    auth_name string no The realm name used for authorization (if applicable).
    banner string no The server banner, f.x. Apache HTTP Server/2.4.3 openssl/0.9.8c
    basic_auth_pw string no The basic auth password sent with this request, if any
    canonical_filename string no The canonical filename of the request
    content_encoding string no The content encoding of the current request
    content_type string yes The content type of the current request, as determined in the type_check phase (f.x. image/gif or text/html)
    context_prefix string no
    context_document_root string no
    document_root string no The document root of the host
    err_headers_out table no MIME header environment for the response, printed even on errors and persist across internal redirects
    filename string yes The file name that the request maps to, f.x. /www/example.com/foo.txt. This can be changed in the translate-name or map-to-storage phases of a request to allow the default handler (or script handlers) to serve a different file than what was requested.
    handler string yes The name of the handler that should serve this request, f.x. lua-script if it is to be served by mod_lua. This is typically set by the AddHandler or SetHandler directives, but could also be set via mod_lua to allow another handler to serve up a specific request that would otherwise not be served by it.
    headers_in table yes MIME header environment from the request. This contains headers such as Host, User-Agent, Referer and so on.
    headers_out table yes MIME header environment for the response.
    hostname string no The host name, as set by the Host: header or by a full URI.
    is_https boolean no Whether or not this request is done via HTTPS
    is_initial_req boolean no Whether this request is the initial request or a sub-request
    limit_req_body number no The size limit of the request body for this request, or 0 if no limit.
    log_id string no The ID to identify request in access and error log.
    method string no The request method, f.x. GET or POST.
    notes table yes A list of notes that can be passed on from one module to another.
    options string no The Options directive applied to the current request.
    path_info string no The PATH_INFO extracted from this request.
    port number no The server port used by the request.
    protocol string no The protocol used, f.x. HTTP/1.1
    proxyreq string yes Denotes whether this is a proxy request or not. This value is generally set in the post_read_request/translate_name phase of a request.
    range string no The contents of the Range: header.
    remaining number no The number of bytes remaining to be read from the request body.
    server_built string no The time the server executable was built.
    server_name string no The server name for this request.
    some_auth_required boolean no Whether some authorization is/was required for this request.
    subprocess_env table yes The environment variables set for this request.
    started number no The time the server was (re)started, in seconds since the epoch (Jan 1st, 1970)
    status number yes The (current) HTTP return code for this request, f.x. 200 or 404.
    the_request string no The request string as sent by the client, f.x. GET /foo/bar HTTP/1.1.
    unparsed_uri string no The unparsed URI of the request
    uri string yes The URI after it has been parsed by httpd
    user string yes If an authentication check has been made, this is set to the name of the authenticated user.
    useragent_ip string no The IP of the user agent making the request
    top

    Built in functions

    The request_rec object has (at least) the following methods:

    r:flush()   -- flushes the output buffer.
                -- Returns true if the flush was successful, false otherwise.
    
    while we_have_stuff_to_send do
        r:puts("Bla bla bla\n") -- print something to client
        r:flush() -- flush the buffer (send to client)
        r.usleep(500000) -- fake processing time for 0.5 sec. and repeat
    end
    r:add_output_filter(filter_name) -- add an output filter:
    
    r:add_output_filter("fooFilter") -- add the fooFilter to the output stream
    r:sendfile(filename) -- sends an entire file to the client, using sendfile if supported by the current platform:
    
    if use_sendfile_thing then
        r:sendfile("/var/www/large_file.img")
    end
    r:parseargs() -- returns two tables; one standard key/value table for regular GET data, 
                  -- and one for multi-value data (fx. foo=1&foo=2&foo=3):
    
    local GET, GETMULTI = r:parseargs()
    r:puts("Your name is: " .. GET['name'] or "Unknown")
    r:parsebody([sizeLimit]) -- parse the request body as a POST and return two lua tables,
                             -- just like r:parseargs().
                             -- An optional number may be passed to specify the maximum number 
                             -- of bytes to parse. Default is 8192 bytes:
                     
    local POST, POSTMULTI = r:parsebody(1024*1024)
    r:puts("Your name is: " .. POST['name'] or "Unknown")
    r:puts("hello", " world", "!") -- print to response body, self explanatory
    r:write("a single string") -- print to response body, self explanatory
    r:escape_html("<html>test</html>") -- Escapes HTML code and returns the escaped result
    r:base64_encode(string) -- Encodes a string using the Base64 encoding standard:
    
    local encoded = r:base64_encode("This is a test") -- returns VGhpcyBpcyBhIHRlc3Q=
    r:base64_decode(string) -- Decodes a Base64-encoded string:
    
    local decoded = r:base64_decode("VGhpcyBpcyBhIHRlc3Q=") -- returns 'This is a test'
    r:md5(string) -- Calculates and returns the MD5 digest of a string (binary safe):
    
    local hash = r:md5("This is a test") -- returns ce114e4501d2f4e2dcea3e17b546f339
    r:sha1(string) -- Calculates and returns the SHA1 digest of a string (binary safe):
    
    local hash = r:sha1("This is a test") -- returns a54d88e06612d820bc3be72877c74f257b561b19
    r:escape(string) -- URL-Escapes a string:
    
    local url = "http://foo.bar/1 2 3 & 4 + 5"
    local escaped = r:escape(url) -- returns 'http%3a%2f%2ffoo.bar%2f1+2+3+%26+4+%2b+5'
    r:unescape(string) -- Unescapes an URL-escaped string:
    
    local url = "http%3a%2f%2ffoo.bar%2f1+2+3+%26+4+%2b+5"
    local unescaped = r:unescape(url) -- returns 'http://foo.bar/1 2 3 & 4 + 5'
    r:construct_url(string) -- Constructs an URL from an URI
    
    local url = r:construct_url(r.uri)
    r.mpm_query(number) -- Queries the server for MPM information using ap_mpm_query:
    
    local mpm = r.mpm_query(14)
    if mpm == 1 then
        r:puts("This server uses the Event MPM")
    end
    r:expr(string) -- Evaluates an expr string.
    
    if r:expr("%{HTTP_HOST} =~ /^www/") then
        r:puts("This host name starts with www")
    end
    r:scoreboard_process(a) -- Queries the server for information about the process at position a:
    
    local process = r:scoreboard_process(1)
    r:puts("Server 1 has PID " .. process.pid)
    r:scoreboard_worker(a, b) -- Queries for information about the worker thread, b, in process a:
    
    local thread = r:scoreboard_worker(1, 1)
    r:puts("Server 1's thread 1 has thread ID " .. thread.tid .. " and is in " .. thread.status .. " status")
    r:clock() -- Returns the current time with microsecond precision
    r:requestbody(filename) -- Reads and returns the request body of a request.
                    -- If 'filename' is specified, it instead saves the
                    -- contents to that file:
                    
    local input = r:requestbody()
    r:puts("You sent the following request body to me:\n")
    r:puts(input)
    r:add_input_filter(filter_name) -- Adds 'filter_name' as an input filter
    r.module_info(module_name) -- Queries the server for information about a module
    
    local mod = r.module_info("mod_lua.c")
    if mod then
        for k, v in pairs(mod.commands) do
           r:puts( ("%s: %s\n"):format(k,v)) -- print out all directives accepted by this module
        end
    end
    r:loaded_modules() -- Returns a list of modules loaded by httpd:
    
    for k, module in pairs(r:loaded_modules()) do
        r:puts("I have loaded module " .. module .. "\n")
    end
    r:runtime_dir_relative(filename) -- Compute the name of a run-time file (e.g., shared memory "file") 
                             -- relative to the appropriate run-time directory.
    r:server_info() -- Returns a table containing server information, such as 
                    -- the name of the httpd executable file, mpm used etc.
    r:set_document_root(file_path) -- Sets the document root for the request to file_path
    r:set_context_info(prefix, docroot) -- Sets the context prefix and context document root for a request
    r:os_escape_path(file_path) -- Converts an OS path to a URL in an OS dependent way
    r:escape_logitem(string) -- Escapes a string for logging
    r.strcmp_match(string, pattern) -- Checks if 'string' matches 'pattern' using strcmp_match (globs).
                            -- fx. whether 'www.example.com' matches '*.example.com':
                            
    local match = r.strcmp_match("foobar.com", "foo*.com")
    if match then 
        r:puts("foobar.com matches foo*.com")
    end
    r:set_keepalive() -- Sets the keepalive status for a request. Returns true if possible, false otherwise.
    r:make_etag() -- Constructs and returns the etag for the current request.
    r:send_interim_response(clear) -- Sends an interim (1xx) response to the client.
                           -- if 'clear' is true, available headers will be sent and cleared.
    r:custom_response(status_code, string) -- Construct and set a custom response for a given status code.
                                   -- This works much like the ErrorDocument directive:
                                   
    r:custom_response(404, "Baleted!")
    r.exists_config_define(string) -- Checks whether a configuration definition exists or not:
    
    if r.exists_config_define("FOO") then
        r:puts("httpd was probably run with -DFOO, or it was defined in the configuration")
    end
    r:state_query(string) -- Queries the server for state information
    r:stat(filename [,wanted]) -- Runs stat() on a file, and returns a table with file information:
    
    local info = r:stat("/var/www/foo.txt")
    if info then
        r:puts("This file exists and was last modified at: " .. info.modified)
    end
    r:regex(string, pattern [,flags]) -- Runs a regular expression match on a string, returning captures if matched:
    
    local matches = r:regex("foo bar baz", [[foo (\w+) (\S*)]])
    if matches then
        r:puts("The regex matched, and the last word captured ($2) was: " .. matches[2])
    end
    
    -- Example ignoring case sensitivity:
    local matches = r:regex("FOO bar BAz", [[(foo) bar]], 1)
    
    -- Flags can be a bitwise combination of:
    -- 0x01: Ignore case
    -- 0x02: Multiline search
    r.usleep(number_of_microseconds) -- Puts the script to sleep for a given number of microseconds.
    r:dbacquire(dbType[, dbParams]) -- Acquires a connection to a database and returns a database class.
                            -- See 'Database connectivity' for details.
    r:ivm_set("key", value) -- Set an Inter-VM variable to hold a specific value.
                            -- These values persist even though the VM is gone or not being used,
                            -- and so should only be used if MaxConnectionsPerChild is > 0
                            -- Values can be numbers, strings and booleans, and are stored on a 
                            -- per process basis (so they won't do much good with a prefork mpm)
                            
    r:ivm_get("key")        -- Fetches a variable set by ivm_set. Returns the contents of the variable
                            -- if it exists or nil if no such variable exists.
                            
    -- An example getter/setter that saves a global variable outside the VM:
    function handle(r)
        -- First VM to call this will get no value, and will have to create it
        local foo = r:ivm_get("cached_data")
        if not foo then
            foo = do_some_calcs() -- fake some return value
            r:ivm_set("cached_data", foo) -- set it globally
        end
        r:puts("Cached data is: ", foo)
    end
    r:htpassword(string [,algorithm [,cost]]) -- Creates a password hash from a string.
                                              -- algorithm: 0 = APMD5 (default), 1 = SHA, 2 = BCRYPT, 3 = CRYPT.
                                              -- cost: only valid with BCRYPT algorithm (default = 5).
    r:mkdir(dir [,mode]) -- Creates a directory and sets mode to optional mode parameter.
    r:mkrdir(dir [,mode]) -- Creates directories recursive and sets mode to optional mode parameter.
    r:rmdir(dir) -- Removes a directory.
    r:touch(file [,mtime]) -- Sets the file modification time to current time or to optional mtime msec value.
    r:get_direntries(dir) -- Returns a table with all directory entries.
    
    function handle(r)
      local dir = r.context_document_root
      for _, f in ipairs(r:get_direntries(dir)) do
        local info = r:stat(dir .. "/" .. f)
        if info then
          local mtime = os.date(fmt, info.mtime / 1000000)
          local ftype = (info.filetype == 2) and "[dir] " or "[file]"
          r:puts( ("%s %s %10i %s\n"):format(ftype, mtime, info.size, f) )
        end
      end
    end
    r.date_parse_rfc(string) -- Parses a date/time string and returns seconds since epoche.
    r:getcookie(key) -- Gets a HTTP cookie
    r:setcookie{
      key = [key],
      value = [value],
      expires = [expiry],
      secure = [boolean],
      httponly = [boolean],
      path = [path],
      domain = [domain]
    } -- Sets a HTTP cookie, for instance:
    
    r:setcookie{
      key = "cookie1",
      value = "HDHfa9eyffh396rt",
      expires = os.time() + 86400,
      secure = true
    }
    r:wsupgrade() -- Upgrades a connection to WebSockets if possible (and requested):
    if r:wsupgrade() then -- if we can upgrade:
        r:wswrite("Welcome to websockets!") -- write something to the client
        r:wsclose()  -- goodbye!
    end
    r:wsread() -- Reads a WebSocket frame from a WebSocket upgraded connection (see above):
    
    local line, isFinal = r:wsread() -- isFinal denotes whether this is the final frame.
                                     -- If it isn't, then more frames can be read
    r:wswrite("You wrote: " .. line)
    r:wswrite(line) -- Writes a frame to a WebSocket client:
    r:wswrite("Hello, world!")
    r:wsclose() -- Closes a WebSocket request and terminates it for httpd:
    
    if r:wsupgrade() then
        r:wswrite("Write something: ")
        local line = r:wsread() or "nothing"
        r:wswrite("You wrote: " .. line);
        r:wswrite("Goodbye!")
        r:wsclose()
    end
    top

    Logging Functions

    -- examples of logging messages
    r:trace1("This is a trace log message") -- trace1 through trace8 can be used
    r:debug("This is a debug log message")
    r:info("This is an info log message")
    r:notice("This is a notice log message")
    r:warn("This is a warn log message")
    r:err("This is an err log message")
    r:alert("This is an alert log message")
    r:crit("This is a crit log message")
    r:emerg("This is an emerg log message")
    top

    apache2 Package

    A package named apache2 is available with (at least) the following contents.

    apache2.OK
    internal constant OK. Handlers should return this if they've handled the request.
    apache2.DECLINED
    internal constant DECLINED. Handlers should return this if they are not going to handle the request.
    apache2.DONE
    internal constant DONE.
    apache2.version
    Apache HTTP server version string
    apache2.HTTP_MOVED_TEMPORARILY
    HTTP status code
    apache2.PROXYREQ_NONE, apache2.PROXYREQ_PROXY, apache2.PROXYREQ_REVERSE, apache2.PROXYREQ_RESPONSE
    internal constants used by mod_proxy
    apache2.AUTHZ_DENIED, apache2.AUTHZ_GRANTED, apache2.AUTHZ_NEUTRAL, apache2.AUTHZ_GENERAL_ERROR, apache2.AUTHZ_DENIED_NO_USER
    internal constants used by mod_authz_core

    (Other HTTP status codes are not yet implemented.)

    top

    Modifying contents with Lua filters

    Filter functions implemented via LuaInputFilter or LuaOutputFilter are designed as three-stage non-blocking functions using coroutines to suspend and resume a function as buckets are sent down the filter chain. The core structure of such a function is:

    function filter(r)
        -- Our first yield is to signal that we are ready to receive buckets.
        -- Before this yield, we can set up our environment, check for conditions,
        -- and, if we deem it necessary, decline filtering a request alltogether:
        if something_bad then
            return -- This would skip this filter.
        end
        -- Regardless of whether we have data to prepend, a yield MUST be called here.
        -- Note that only output filters can prepend data. Input filters must use the 
        -- final stage to append data to the content.
        coroutine.yield([optional header to be prepended to the content])
        
        -- After we have yielded, buckets will be sent to us, one by one, and we can 
        -- do whatever we want with them and then pass on the result.
        -- Buckets are stored in the global variable 'bucket', so we create a loop
        -- that checks if 'bucket' is not nil:
        while bucket ~= nil do
            local output = mangle(bucket) -- Do some stuff to the content
            coroutine.yield(output) -- Return our new content to the filter chain
        end
    
        -- Once the buckets are gone, 'bucket' is set to nil, which will exit the 
        -- loop and land us here. Anything extra we want to append to the content
        -- can be done by doing a final yield here. Both input and output filters 
        -- can append data to the content in this phase.
        coroutine.yield([optional footer to be appended to the content])
    end
    top

    Database connectivity

    Mod_lua implements a simple database feature for querying and running commands on the most popular database engines (mySQL, PostgreSQL, FreeTDS, ODBC, SQLite, Oracle) as well as mod_dbd.

    The example below shows how to acquire a database handle and return information from a table:

    function handle(r)
        -- Acquire a database handle
        local database, err = r:dbacquire("mysql", "server=localhost,user=someuser,pass=somepass,dbname=mydb")
        if not err then
            -- Select some information from it
            local results, err = database:select(r, "SELECT `name`, `age` FROM `people` WHERE 1")
            if not err then
                local rows = results(0) -- fetch all rows synchronously
                for k, row in pairs(rows) do
                    r:puts( string.format("Name: %s, Age: %s<br/>", row[1], row[2]) )
                end
            else
                r:puts("Database query error: " .. err)
            end
            database:close()
        else
            r:puts("Could not connect to the database: " .. err)
        end
    end

    To utilize mod_dbd, specify mod_dbd as the database type, or leave the field blank:

    local database = r:dbacquire("mod_dbd")

    Database object and contained functions

    The database object returned by dbacquire has the following methods:

    Normal select and query from a database:

    -- Run a statement and return the number of rows affected:
    local affected, errmsg = database:query(r, "DELETE FROM `tbl` WHERE 1")
    
    -- Run a statement and return a result set that can be used synchronously or async:
    local result, errmsg = database:select(r, "SELECT * FROM `people` WHERE 1")

    Using prepared statements (recommended):

    -- Create and run a prepared statement:
    local statement, errmsg = database:prepare(r, "DELETE FROM `tbl` WHERE `age` > %u")
    if not errmsg then
        local result, errmsg = statement:query(20) -- run the statement with age > 20
    end
    
    -- Fetch a prepared statement from a DBDPrepareSQL directive:
    local statement, errmsg = database:prepared(r, "someTag")
    if not errmsg then
        local result, errmsg = statement:select("John Doe", 123) -- inject the values "John Doe" and 123 into the statement
    end

    Escaping values, closing databases etc:

    -- Escape a value for use in a statement:
    local escaped = database:escape(r, [["'|blabla]])
    
    -- Close a database connection and free up handles:
    database:close()
    
    -- Check whether a database connection is up and running:
    local connected = database:active()

    Working with result sets

    The result set returned by db:select or by the prepared statement functions created through db:prepare can be used to fetch rows synchronously or asynchronously, depending on the row number specified:
    result(0) fetches all rows in a synchronous manner, returning a table of rows.
    result(-1) fetches the next available row in the set, asynchronously.
    result(N) fetches row number N, asynchronously:

    -- fetch a result set using a regular query:
    local result, err = db:select(r, "SELECT * FROM `tbl` WHERE 1")
    
    local rows = result(0) -- Fetch ALL rows synchronously
    local row = result(-1) -- Fetch the next available row, asynchronously
    local row = result(1234) -- Fetch row number 1234, asynchronously
    local row = result(-1, true) -- Fetch the next available row, using row names as key indexes.

    One can construct a function that returns an iterative function to iterate over all rows in a synchronous or asynchronous way, depending on the async argument:

    function rows(resultset, async)
        local a = 0
        local function getnext()
            a = a + 1
            local row = resultset(-1)
            return row and a or nil, row
        end
        if not async then
            return pairs(resultset(0))
        else
            return getnext, self
        end
    end
    
    local statement, err = db:prepare(r, "SELECT * FROM `tbl` WHERE `age` > %u")
    if not err then
         -- fetch rows asynchronously:
        local result, err = statement:select(20)
        if not err then
            for index, row in rows(result, true) do
                ....
            end
        end
    
         -- fetch rows synchronously:
        local result, err = statement:select(20)
        if not err then
            for index, row in rows(result, false) do
                ....
            end
        end
    end

    Closing a database connection

    Database handles should be closed using database:close() when they are no longer needed. If you do not close them manually, they will eventually be garbage collected and closed by mod_lua, but you may end up having too many unused connections to the database if you leave the closing up to mod_lua. Essentially, the following two measures are the same:

    -- Method 1: Manually close a handle
    local database = r:dbacquire("mod_dbd")
    database:close() -- All done
    
    -- Method 2: Letting the garbage collector close it
    local database = r:dbacquire("mod_dbd")
    database = nil -- throw away the reference
    collectgarbage() -- close the handle via GC

    Precautions when working with databases

    Although the standard query and run functions are freely available, it is recommended that you use prepared statements whenever possible, to both optimize performance (if your db handle lives on for a long time) and to minimize the risk of SQL injection attacks. run and query should only be used when there are no variables inserted into a statement (a static statement). When using dynamic statements, use db:prepare or db:prepared.

    top

    LuaAuthzProvider Directive

    Description:Plug an authorization provider function into mod_authz_core
    Syntax:LuaAuthzProvider provider_name /path/to/lua/script.lua function_name
    Context:server config
    Status:Extension
    Module:mod_lua
    Compatibility:2.4.3 and later

    After a lua function has been registered as authorization provider, it can be used with the Require directive:

    LuaRoot "/usr/local/apache2/lua"
    LuaAuthzProvider foo authz.lua authz_check_foo
    <Location "/">
      Require foo johndoe
    </Location>
    require "apache2"
    function authz_check_foo(r, who)
        if r.user ~= who then return apache2.AUTHZ_DENIED
        return apache2.AUTHZ_GRANTED
    end
    top

    LuaCodeCache Directive

    Description:Configure the compiled code cache.
    Syntax:LuaCodeCache stat|forever|never
    Default:LuaCodeCache stat
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua

    Specify the behavior of the in-memory code cache. The default is stat, which stats the top level script (not any included ones) each time that file is needed, and reloads it if the modified time indicates it is newer than the one it has already loaded. The other values cause it to keep the file cached forever (don't stat and replace) or to never cache the file.

    In general stat or forever is good for production, and stat or never for development.

    Examples:

    LuaCodeCache stat
    LuaCodeCache forever
    LuaCodeCache never
    top

    LuaHookAccessChecker Directive

    Description:Provide a hook for the access_checker phase of request processing
    Syntax:LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua
    Compatibility:The optional third argument is supported in 2.3.15 and later

    Add your hook to the access_checker phase. An access checker hook function usually returns OK, DECLINED, or HTTP_FORBIDDEN.

    Ordering

    The optional arguments "early" or "late" control when this script runs relative to other modules.

    top

    LuaHookAuthChecker Directive

    Description:Provide a hook for the auth_checker phase of request processing
    Syntax:LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua
    Compatibility:The optional third argument is supported in 2.3.15 and later

    Invoke a lua function in the auth_checker phase of processing a request. This can be used to implement arbitrary authentication and authorization checking. A very simple example:

    require 'apache2'
    
    -- fake authcheck hook
    -- If request has no auth info, set the response header and
    -- return a 401 to ask the browser for basic auth info.
    -- If request has auth info, don't actually look at it, just
    -- pretend we got userid 'foo' and validated it.
    -- Then check if the userid is 'foo' and accept the request.
    function authcheck_hook(r)
    
       -- look for auth info
       auth = r.headers_in['Authorization']
       if auth ~= nil then
         -- fake the user
         r.user = 'foo'
       end
    
       if r.user == nil then
          r:debug("authcheck: user is nil, returning 401")
          r.err_headers_out['WWW-Authenticate'] = 'Basic realm="WallyWorld"'
          return 401
       elseif r.user == "foo" then
          r:debug('user foo: OK')
       else
          r:debug("authcheck: user='" .. r.user .. "'")
          r.err_headers_out['WWW-Authenticate'] = 'Basic realm="WallyWorld"'
          return 401
       end
       return apache2.OK
    end

    Ordering

    The optional arguments "early" or "late" control when this script runs relative to other modules.

    top

    LuaHookCheckUserID Directive

    Description:Provide a hook for the check_user_id phase of request processing
    Syntax:LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua
    Compatibility:The optional third argument is supported in 2.3.15 and later

    ...

    Ordering

    The optional arguments "early" or "late" control when this script runs relative to other modules.

    top

    LuaHookFixups Directive

    Description:Provide a hook for the fixups phase of a request processing
    Syntax:LuaHookFixups /path/to/lua/script.lua hook_function_name
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua

    Just like LuaHookTranslateName, but executed at the fixups phase

    top

    LuaHookInsertFilter Directive

    Description:Provide a hook for the insert_filter phase of request processing
    Syntax:LuaHookInsertFilter /path/to/lua/script.lua hook_function_name
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua

    Not Yet Implemented

    top

    LuaHookLog Directive

    Description:Provide a hook for the access log phase of a request processing
    Syntax:LuaHookLog /path/to/lua/script.lua log_function_name
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua

    This simple logging hook allows you to run a function when httpd enters the logging phase of a request. With it, you can append data to your own logs, manipulate data before the regular log is written, or prevent a log entry from being created. To prevent the usual logging from happening, simply return apache2.DONE in your logging handler, otherwise return apache2.OK to tell httpd to log as normal.

    Example:

    LuaHookLog "/path/to/script.lua" logger
    -- /path/to/script.lua --
    function logger(r)
        -- flip a coin:
        -- If 1, then we write to our own Lua log and tell httpd not to log
        -- in the main log.
        -- If 2, then we just sanitize the output a bit and tell httpd to 
        -- log the sanitized bits.
    
        if math.random(1,2) == 1 then
            -- Log stuff ourselves and don't log in the regular log
            local f = io.open("/foo/secret.log", "a")
            if f then
                f:write("Something secret happened at " .. r.uri .. "\n")
                f:close()
            end
            return apache2.DONE -- Tell httpd not to use the regular logging functions
        else
            r.uri = r.uri:gsub("somesecretstuff", "") -- sanitize the URI
            return apache2.OK -- tell httpd to log it.
        end
    end
    top

    LuaHookMapToStorage Directive

    Description:Provide a hook for the map_to_storage phase of request processing
    Syntax:LuaHookMapToStorage /path/to/lua/script.lua hook_function_name
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua

    Like LuaHookTranslateName but executed at the map-to-storage phase of a request. Modules like mod_cache run at this phase, which makes for an interesting example on what to do here:

    LuaHookMapToStorage "/path/to/lua/script.lua" check_cache
    require"apache2"
    cached_files = {}
    
    function read_file(filename) 
        local input = io.open(filename, "r")
        if input then
            local data = input:read("*a")
            cached_files[filename] = data
            file = cached_files[filename]
            input:close()
        end
        return cached_files[filename]
    end
    
    function check_cache(r)
        if r.filename:match("%.png$") then -- Only match PNG files
            local file = cached_files[r.filename] -- Check cache entries
            if not file then
                file = read_file(r.filename)  -- Read file into cache
            end
            if file then -- If file exists, write it out
                r.status = 200
                r:write(file)
                r:info(("Sent %s to client from cache"):format(r.filename))
                return apache2.DONE -- skip default handler for PNG files
            end
        end
        return apache2.DECLINED -- If we had nothing to do, let others serve this.
    end
    top

    LuaHookTranslateName Directive

    Description:Provide a hook for the translate name phase of request processing
    Syntax:LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]
    Context:server config, virtual host
    Override:All
    Status:Extension
    Module:mod_lua
    Compatibility:The optional third argument is supported in 2.3.15 and later

    Add a hook (at APR_HOOK_MIDDLE) to the translate name phase of request processing. The hook function receives a single argument, the request_rec, and should return a status code, which is either an HTTP error code, or the constants defined in the apache2 module: apache2.OK, apache2.DECLINED, or apache2.DONE.

    For those new to hooks, basically each hook will be invoked until one of them returns apache2.OK. If your hook doesn't want to do the translation it should just return apache2.DECLINED. If the request should stop processing, then return apache2.DONE.

    Example:

    # httpd.conf
    LuaHookTranslateName "/scripts/conf/hooks.lua" silly_mapper
    -- /scripts/conf/hooks.lua --
    require "apache2"
    function silly_mapper(r)
        if r.uri == "/" then
            r.filename = "/var/www/home.lua"
            return apache2.OK
        else
            return apache2.DECLINED
        end
    end

    Context

    This directive is not valid in <Directory>, <Files>, or htaccess context.

    Ordering

    The optional arguments "early" or "late" control when this script runs relative to other modules.

    top

    LuaHookTypeChecker Directive

    Description:Provide a hook for the type_checker phase of request processing
    Syntax:LuaHookTypeChecker /path/to/lua/script.lua hook_function_name
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua

    This directive provides a hook for the type_checker phase of the request processing. This phase is where requests are assigned a content type and a handler, and thus can be used to modify the type and handler based on input:

    LuaHookTypeChecker "/path/to/lua/script.lua" type_checker
        function type_checker(r)
            if r.uri:match("%.to_gif$") then -- match foo.png.to_gif
                r.content_type = "image/gif" -- assign it the image/gif type
                r.handler = "gifWizard"      -- tell the gifWizard module to handle this
                r.filename = r.uri:gsub("%.to_gif$", "") -- fix the filename requested
                return apache2.OK
            end
    
            return apache2.DECLINED
        end
    top

    LuaInherit Directive

    Description:Controls how parent configuration sections are merged into children
    Syntax:LuaInherit none|parent-first|parent-last
    Default:LuaInherit parent-first
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua
    Compatibility:2.4.0 and later

    By default, if LuaHook* directives are used in overlapping Directory or Location configuration sections, the scripts defined in the more specific section are run after those defined in the more generic section (LuaInherit parent-first). You can reverse this order, or make the parent context not apply at all.

    In previous 2.3.x releases, the default was effectively to ignore LuaHook* directives from parent configuration sections.

    top

    LuaInputFilter Directive

    Description:Provide a Lua function for content input filtering
    Syntax:LuaInputFilter filter_name /path/to/lua/script.lua function_name
    Context:server config
    Status:Extension
    Module:mod_lua
    Compatibility:2.4.5 and later

    Provides a means of adding a Lua function as an input filter. As with output filters, input filters work as coroutines, first yielding before buffers are sent, then yielding whenever a bucket needs to be passed down the chain, and finally (optionally) yielding anything that needs to be appended to the input data. The global variable bucket holds the buckets as they are passed onto the Lua script:

    LuaInputFilter myInputFilter "/www/filter.lua" input_filter
    <Files "*.lua">
      SetInputFilter myInputFilter
    </Files>
    --[[
        Example input filter that converts all POST data to uppercase.
    ]]--
    function input_filter(r)
        print("luaInputFilter called") -- debug print
        coroutine.yield() -- Yield and wait for buckets
        while bucket do -- For each bucket, do...
            local output = string.upper(bucket) -- Convert all POST data to uppercase
            coroutine.yield(output) -- Send converted data down the chain
        end
        -- No more buckets available.
        coroutine.yield("&filterSignature=1234") -- Append signature at the end
    end

    The input filter supports denying/skipping a filter if it is deemed unwanted:

    function input_filter(r)
        if not good then
            return -- Simply deny filtering, passing on the original content instead
        end
        coroutine.yield() -- wait for buckets
        ... -- insert filter stuff here
    end

    See "Modifying contents with Lua filters" for more information.

    top

    LuaMapHandler Directive

    Description:Map a path to a lua handler
    Syntax:LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua

    This directive matches a uri pattern to invoke a specific handler function in a specific file. It uses PCRE regular expressions to match the uri, and supports interpolating match groups into both the file path and the function name. Be careful writing your regular expressions to avoid security issues.

    Examples:

    LuaMapHandler "/(\w+)/(\w+)" "/scripts/$1.lua" "handle_$2"

    This would match uri's such as /photos/show?id=9 to the file /scripts/photos.lua and invoke the handler function handle_show on the lua vm after loading that file.

    LuaMapHandler "/bingo" "/scripts/wombat.lua"

    This would invoke the "handle" function, which is the default if no specific function name is provided.

    top

    LuaOutputFilter Directive

    Description:Provide a Lua function for content output filtering
    Syntax:LuaOutputFilter filter_name /path/to/lua/script.lua function_name
    Context:server config
    Status:Extension
    Module:mod_lua
    Compatibility:2.4.5 and later

    Provides a means of adding a Lua function as an output filter. As with input filters, output filters work as coroutines, first yielding before buffers are sent, then yielding whenever a bucket needs to be passed down the chain, and finally (optionally) yielding anything that needs to be appended to the input data. The global variable bucket holds the buckets as they are passed onto the Lua script:

    LuaOutputFilter myOutputFilter "/www/filter.lua" output_filter
    <Files "*.lua">
      SetOutputFilter myOutputFilter
    </Files>
    --[[
        Example output filter that escapes all HTML entities in the output
    ]]--
    function output_filter(r)
        coroutine.yield("(Handled by myOutputFilter)<br/>\n") -- Prepend some data to the output,
                                                              -- yield and wait for buckets.
        while bucket do -- For each bucket, do...
            local output = r:escape_html(bucket) -- Escape all output
            coroutine.yield(output) -- Send converted data down the chain
        end
        -- No more buckets available.
    end

    As with the input filter, the output filter supports denying/skipping a filter if it is deemed unwanted:

    function output_filter(r)
        if not r.content_type:match("text/html") then
            return -- Simply deny filtering, passing on the original content instead
        end
        coroutine.yield() -- wait for buckets
        ... -- insert filter stuff here
    end

    Lua filters with mod_filter

    When a Lua filter is used as the underlying provider via the FilterProvider directive, filtering will only work when the filter-name is identical to the provider-name.

    See "Modifying contents with Lua filters" for more information.

    top

    LuaPackageCPath Directive

    Description:Add a directory to lua's package.cpath
    Syntax:LuaPackageCPath /path/to/include/?.soa
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua

    Add a path to lua's shared library search path. Follows the same conventions as lua. This just munges the package.cpath in the lua vms.

    top

    LuaPackagePath Directive

    Description:Add a directory to lua's package.path
    Syntax:LuaPackagePath /path/to/include/?.lua
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua

    Add a path to lua's module search path. Follows the same conventions as lua. This just munges the package.path in the lua vms.

    Examples:

    LuaPackagePath "/scripts/lib/?.lua"
    LuaPackagePath "/scripts/lib/?/init.lua"
    top

    LuaQuickHandler Directive

    Description:Provide a hook for the quick handler of request processing
    Syntax:LuaQuickHandler /path/to/script.lua hook_function_name
    Context:server config, virtual host
    Override:All
    Status:Extension
    Module:mod_lua

    This phase is run immediately after the request has been mapped to a virtal host, and can be used to either do some request processing before the other phases kick in, or to serve a request without the need to translate, map to storage et cetera. As this phase is run before anything else, directives such as <Location> or <Directory> are void in this phase, just as URIs have not been properly parsed yet.

    Context

    This directive is not valid in <Directory>, <Files>, or htaccess context.

    top

    LuaRoot Directive

    Description:Specify the base path for resolving relative paths for mod_lua directives
    Syntax:LuaRoot /path/to/a/directory
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua

    Specify the base path which will be used to evaluate all relative paths within mod_lua. If not specified they will be resolved relative to the current working directory, which may not always work well for a server.

    top

    LuaScope Directive

    Description:One of once, request, conn, thread -- default is once
    Syntax:LuaScope once|request|conn|thread|server [min] [max]
    Default:LuaScope once
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Extension
    Module:mod_lua

    Specify the life cycle scope of the Lua interpreter which will be used by handlers in this "Directory." The default is "once"

    once:
    use the interpreter once and throw it away.
    request:
    use the interpreter to handle anything based on the same file within this request, which is also request scoped.
    conn:
    Same as request but attached to the connection_rec
    thread:
    Use the interpreter for the lifetime of the thread handling the request (only available with threaded MPMs).
    server:
    This one is different than others because the server scope is quite long lived, and multiple threads will have the same server_rec. To accommodate this, server scoped Lua states are stored in an apr resource list. The min and max arguments specify the minimum and maximum number of Lua states to keep in the pool.

    Generally speaking, the thread and server scopes execute roughly 2-3 times faster than the rest, because they don't have to spawn new Lua states on every request (especially with the event MPM, as even keepalive requests will use a new thread for each request). If you are satisfied that your scripts will not have problems reusing a state, then the thread or server scopes should be used for maximum performance. While the thread scope will provide the fastest responses, the server scope will use less memory, as states are pooled, allowing f.x. 1000 threads to share only 100 Lua states, thus using only 10% of the memory required by the thread scope.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_mime_magic.html.fr.utf80000644000000000000500000004337413412755316021351 0ustar rootsrc mod_mime_magic - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_mime_magic

    Langues Disponibles:  en  |  fr 

    Description:Détermine le type MIME d'un fichier à partir de quelques octets de son contenu
    Statut:Extension
    Identificateur de Module:mime_magic_module
    Fichier Source:mod_mime_magic.c

    Sommaire

    Ce module permet de déterminer le type MIME des fichiers de la même manière que la commande Unix file(1), à savoir en se basant sur les premiers octets du fichier. Il est conçu comme une "seconde ligne de défense" pour les cas où mod_mime ne parvient pas à déterminer le type du fichier.

    Ce module est dérivé d'une version libre de la commande Unix file(1) qui utilise des "nombres magiques" et autres marques distinctives issus du contenu du fichier pour essayer de déterminer le type de contenu. Ce module n'est activé que si le fichier magique est spécifié par la directive MimeMagicFile.

    top

    Format du fichier magique

    Le fichier contient du texte ASCII sur 4 à 5 colonnes. Les lignes vides sont autorisées mais ignorées. Toute ligne commençant par un dièse (#) est un commentaire. Les autres lignes sont interprétées en colonnes comme suit :

    ColonneDescription
    1 numéro de l'octet à partir duquel la vérification débute
    ">" indique une dépendance par rapport à la dernière ligne non-">"
    2

    type de donnée à rechercher

    byte caractère unique
    short entier sur 16 bits selon l'ordre de la machine
    long entier sur 32 bits selon l'ordre de la machine
    string chaîne de taille choisie
    date date au format entier long (secondes depuis le temps Unix epoch/1970)
    beshort entier 16 bits big-endian
    belong entier 32 bits big-endian
    bedate date au format entier 32 bits big-endian
    leshort entier 16 bits little-endian
    lelong entier 32 bits little-endian
    ledate date au format entier 32 bits little-endian
    3 contenu des données à rechercher
    4 type MIME si correspondance
    5 codage MIME si correspondance (optionnel)

    Par exemple, les lignes du fichier magique suivantes permettraient de reconnaître certains formats audio :

    # Sun/NeXT audio data
    0      string      .snd
    >12    belong      1       audio/basic
    >12    belong      2       audio/basic
    >12    belong      3       audio/basic
    >12    belong      4       audio/basic
    >12    belong      5       audio/basic
    >12    belong      6       audio/basic
    >12    belong      7       audio/basic
    >12    belong     23       audio/x-adpcm

    Et celles-ci permettraient de reconnaître la différence entre les fichiers *.doc qui contiennent des documents Microsoft Word et les documents FrameMaker (ce sont des formats de fichiers incompatibles qui possèdent le même suffixe).

    # Frame
    0  string  \<MakerFile        application/x-frame
    0  string  \<MIFFile          application/x-frame
    0  string  \<MakerDictionary  application/x-frame
    0  string  \<MakerScreenFon   application/x-frame
    0  string  \<MML              application/x-frame
    0  string  \<Book             application/x-frame
    0  string  \<Maker            application/x-frame
    
    # MS-Word
    0  string  \376\067\0\043            application/msword
    0  string  \320\317\021\340\241\261  application/msword
    0  string  \333\245-\0\0\0           application/msword

    Un champ optionnel codage MIME peut être ajouté dans la cinquième colonne. Par exemple, cette ligne permet de reconnaître les fichiers compressés par gzip et définissent le type de codage.

    # gzip (GNU zip, à ne pas confondre avec
    #       l'archiveur zip [Info-ZIP/PKWARE])
    
    0  string  \037\213  application/octet-stream  x-gzip
    top

    Problèmes liés aux performances

    Ce module n'est pas fait pour tous les systèmes. Si votre système parvient à peine à supporter sa charge, ou si vous testez les performances d'un serveur web, il est déconseillé d'utiliser ce module car son fonctionnement a un prix en matière de ressources consommées.

    Des efforts ont cependant été fournis pour améliorer les performances du code original de la commande file(1) en l'adaptant pour fonctionner sur un serveur web à forte charge. Il a été conçu pour un serveur sur lequel des milliers d'utilisateurs publient leurs propres documents, ce qui est probablement très courant sur un intranet. Il s'avère souvent bénéfique qu'un serveur puisse prendre des décisions plus pertinentes à propos du contenu d'un fichier que celles se basant sur le nom du fichier seul, ne serait-ce que pour diminuer le nombre d'appels du type "pourquoi ma page ne s'affiche-t-elle pas ?" survenant lorsque les utilisateurs nomment leurs fichiers incorrectement. Vous devez déterminer si la charge supplémentaire convient à votre environnement.

    top

    Notes

    Les notes suivantes s'appliquent au module mod_mime_magic et sont incluses ici pour conformité avec les restrictions de copyright des contributeurs qui requièrent de les accepter.

    Note de traduction : ces informations de type légal ne sont pas traductibles

    mod_mime_magic: MIME type lookup via file magic numbers
    Copyright (c) 1996-1997 Cisco Systems, Inc.

    This software was submitted by Cisco Systems to the Apache Group in July 1997. Future revisions and derivatives of this source code must acknowledge Cisco Systems as the original contributor of this module. All other licensing and usage conditions are those of the Apache Group.

    Some of this code is derived from the free version of the file command originally posted to comp.sources.unix. Copyright info for that program is included below as required.

    - Copyright (c) Ian F. Darwin, 1987. Written by Ian F. Darwin.

    This software is not subject to any license of the American Telephone and Telegraph Company or of the Regents of the University of California.

    Permission is granted to anyone to use this software for any purpose on any computer system, and to alter it and redistribute it freely, subject to the following restrictions:

    1. The author is not responsible for the consequences of use of this software, no matter how awful, even if they arise from flaws in it.
    2. The origin of this software must not be misrepresented, either by explicit claim or by omission. Since few users ever read sources, credits must appear in the documentation.
    3. Altered versions must be plainly marked as such, and must not be misrepresented as being the original software. Since few users ever read sources, credits must appear in the documentation.
    4. This notice may not be removed or altered.

    For compliance with Mr Darwin's terms: this has been very significantly modified from the free "file" command.

    • all-in-one file for compilation convenience when moving from one version of Apache to the next.
    • Memory allocation is done through the Apache API's pool structure.
    • All functions have had necessary Apache API request or server structures passed to them where necessary to call other Apache API routines. (i.e., usually for logging, files, or memory allocation in itself or a called function.)
    • struct magic has been converted from an array to a single-ended linked list because it only grows one record at a time, it's only accessed sequentially, and the Apache API has no equivalent of realloc().
    • Functions have been changed to get their parameters from the server configuration instead of globals. (It should be reentrant now but has not been tested in a threaded environment.)
    • Places where it used to print results to stdout now saves them in a list where they're used to set the MIME type in the Apache request record.
    • Command-line flags have been removed since they will never be used here.
    top

    Directive MimeMagicFile

    Description:Active la détermination du type MIME en se basant sur le contenu du fichier et en utilisant le fichier magique spécifié
    Syntaxe:MimeMagicFile chemin-fichier
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_mime_magic

    La directive MimeMagicFile permet d'activer ce module, le fichier par défaut fourni étant conf/magic. Les chemins sans slash '/' de début sont relatifs au répertoire défini par la directive ServerRoot. Les serveurs virtuels utilisent le même fichier que le serveur principal sauf si un fichier spécifique a été défini pour ce serveur virtuel, auquel cas c'est ce dernier fichier qui sera utilisé.

    Exemple

    MimeMagicFile conf/magic

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/index.html.tr.utf80000644000000000000500000005564613520523022017540 0ustar rootsrc Modül Dizini - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Modül Dizini

    Mevcut Diller:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Apache HTTP Sunucusu dağıtımının parçası olarak gelen modüllerin tamamı aşağıda listelenmiştir. Ayrıca, tüm Apache HTTP Sunucusu yönergelerinin alfabetik olarak listelendiği bir Yönerge Dizini de mevcuttur.

    top

    Temel Özellikler ve Çoklu İşlem Modülleri

    core
    Apache HTTP Sunucusunda daima mevcut olan çekirdek özellikler
    mpm_common
    Birden fazla Çok Süreçlilik Modülü (MPM) tarafından gerçeklenmiş yönergeler bütünü.
    event
    A variant of the worker MPM with the goal of consuming threads only for connections with active processing
    mpm_netware
    Multi-Processing Module implementing an exclusively threaded web server optimized for Novell NetWare
    mpmt_os2
    Hybrid multi-process, multi-threaded MPM for OS/2
    prefork
    Evresiz ön çatallamalı HTTP sunucusu oluşturur
    mpm_winnt
    Multi-Processing Module optimized for Windows NT.
    worker
    Çok evreli ve çok süreçli melez bir HTTP sunucusu oluşturan çok süreçlilik modülü.
    top

    Diğer Modüller

     A  |  B  |  C  |  D  |  E  |  F  |  H  |  I  |  L  |  M  |  N  |  P  |  R  |  S  |  U  |  V  |  W  |  X 

    mod_access_compat
    Group authorizations based on host (name or IP address)
    mod_actions
    Execute CGI scripts based on media type or request method.
    mod_alias
    Belge ağacının parçalarının dosya sisteminin parçalarıyla eşlenmesini sağlar ve URL yönlendirmesi yapar.
    mod_allowmethods
    Easily restrict what HTTP methods can be used on the server
    mod_asis
    Sends files that contain their own HTTP headers
    mod_auth_basic
    Basic HTTP authentication
    mod_auth_digest
    User authentication using MD5 Digest Authentication
    mod_auth_form
    Form authentication
    mod_authn_anon
    Allows "anonymous" user access to authenticated areas
    mod_authn_core
    Core Authentication
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    User authentication using DBM files
    mod_authn_file
    User authentication using text files
    mod_authn_socache
    Manages a cache of authentication credentials to relieve the load on backends
    mod_authnz_fcgi
    Allows a FastCGI authorizer application to handle Apache httpd authentication and authorization
    mod_authnz_ldap
    Allows an LDAP directory to be used to store the database for HTTP Basic authentication.
    mod_authz_core
    Core Authorization
    mod_authz_dbd
    Group Authorization and Login using SQL
    mod_authz_dbm
    Group authorization using DBM files
    mod_authz_groupfile
    Group authorization using plaintext files
    mod_authz_host
    Group authorizations based on host (name or IP address)
    mod_authz_owner
    Authorization based on file ownership
    mod_authz_user
    User Authorization
    mod_autoindex
    Unix ls veya Win32 dir kabuk komutunun yaptığı gibi dizin içeriğini listeler.
    mod_brotli
    Compress content via Brotli before it is delivered to the client
    mod_buffer
    Support for request buffering
    mod_cache
    RFC 2616 compliant HTTP caching filter.
    mod_cache_disk
    Disk based storage module for the HTTP caching filter.
    mod_cache_socache
    Shared object cache (socache) based storage module for the HTTP caching filter.
    mod_cern_meta
    CERN httpd metafile semantics
    mod_cgi
    Execution of CGI scripts
    mod_cgid
    Execution of CGI scripts using an external CGI daemon
    mod_charset_lite
    Specify character set translation or recoding
    mod_data
    Convert response body into an RFC2397 data URL
    mod_dav
    Distributed Authoring and Versioning (WebDAV) functionality
    mod_dav_fs
    Filesystem provider for mod_dav
    mod_dav_lock
    Generic locking module for mod_dav
    mod_dbd
    Manages SQL database connections
    mod_deflate
    Compress content before it is delivered to the client
    mod_dialup
    Send static content at a bandwidth rate limit, defined by the various old modem standards
    mod_dir
    Bölü çizgisiyle biten yönlendirmeleri yapar ve dizin içeriği dosyalarını sunar.
    mod_dumpio
    Dumps all I/O to error log as desired.
    mod_echo
    A simple echo server to illustrate protocol modules
    mod_env
    CGI betiklerine ve SSI sayfalarına aktarılan değişkenlere müdahale etmek için kullanılır.
    mod_example_hooks
    Illustrates the Apache module API
    mod_expires
    Generation of Expires and Cache-Control HTTP headers according to user-specified criteria
    mod_ext_filter
    Pass the response body through an external program before delivery to the client
    mod_file_cache
    Caches a static list of files in memory
    mod_filter
    Context-sensitive smart filter configuration module
    mod_headers
    Customization of HTTP request and response headers
    mod_heartbeat
    Sends messages with server status to frontend proxy
    mod_heartmonitor
    Centralized monitor for mod_heartbeat origin servers
    mod_http2
    Support for the HTTP/2 transport layer
    mod_ident
    RFC 1413 ident lookups
    mod_imagemap
    Server-side imagemap processing
    mod_include
    Server-parsed html documents (Server Side Includes)
    mod_info
    Provides a comprehensive overview of the server configuration
    mod_isapi
    ISAPI Extensions within Apache for Windows
    mod_lbmethod_bybusyness
    Pending Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_byrequests
    Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_bytraffic
    Weighted Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_heartbeat
    Heartbeat Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_ldap
    LDAP connection pooling and result caching services for use by other LDAP modules
    mod_log_config
    Sunucuya yapılan isteklerin günlük kayıtlarının tutulması
    mod_log_debug
    Additional configurable debug logging
    mod_log_forensic
    Sunucuya yapılan isteklerin adli günlük kayıtlarının tutulması
    mod_logio
    Her isteğin girdi ve çıktı uzunluklarının günlüklenmesi.
    mod_lua
    Provides Lua hooks into various portions of the httpd request processing
    mod_macro
    Provides macros within apache httpd runtime configuration files
    mod_md
    Managing domains across virtual hosts, certificate provisioning via the ACME protocol
    mod_mime
    Associates the requested filename's extensions with the file's behavior (handlers and filters) and content (mime-type, language, character set and encoding)
    mod_mime_magic
    Determines the MIME type of a file by looking at a few bytes of its contents
    mod_negotiation
    Provides for content negotiation
    mod_nw_ssl
    Enable SSL encryption for NetWare
    mod_privileges
    Support for Solaris privileges and for running virtual hosts under different user IDs.
    mod_proxy
    Multi-protocol proxy/gateway server
    mod_proxy_ajp
    AJP support module for mod_proxy
    mod_proxy_balancer
    mod_proxy extension for load balancing
    mod_proxy_connect
    mod_proxy extension for CONNECT request handling
    mod_proxy_express
    Dynamic mass reverse proxy extension for mod_proxy
    mod_proxy_fcgi
    FastCGI support module for mod_proxy
    mod_proxy_fdpass
    fdpass external process support module for mod_proxy
    mod_proxy_ftp
    FTP support module for mod_proxy
    mod_proxy_hcheck
    Dynamic health check of Balancer members (workers) for mod_proxy
    mod_proxy_html
    Rewrite HTML links in to ensure they are addressable from Clients' networks in a proxy context.
    mod_proxy_http
    HTTP support module for mod_proxy
    mod_proxy_http2
    HTTP/2 support module for mod_proxy
    mod_proxy_scgi
    SCGI gateway module for mod_proxy
    mod_proxy_uwsgi
    UWSGI gateway module for mod_proxy
    mod_proxy_wstunnel
    Websockets support module for mod_proxy
    mod_ratelimit
    Bandwidth Rate Limiting for Clients
    mod_reflector
    Reflect a request body as a response via the output filter stack.
    mod_remoteip
    Replaces the original client IP address for the connection with the useragent IP address list presented by a proxies or a load balancer via the request headers.
    mod_reqtimeout
    Set timeout and minimum data rate for receiving requests
    mod_request
    HTTP istek gövdelerini işleme sokup kullanılabilir kılan süzgeçler
    mod_rewrite
    Provides a rule-based rewriting engine to rewrite requested URLs on the fly
    mod_sed
    Filter Input (request) and Output (response) content using sed syntax
    mod_session
    Session support
    mod_session_cookie
    Cookie based session support
    mod_session_crypto
    Session encryption support
    mod_session_dbd
    DBD/SQL based session support
    mod_setenvif
    Ortam değişkenlerinin isteğin özelliklerine uygun olarak atanmasını sağlar
    mod_slotmem_plain
    Slot-based shared memory provider.
    mod_slotmem_shm
    Slot-based shared memory provider.
    mod_so
    Modüllerin ve çalıştırılabilir kodun sunucunun başlatılması veya yeniden başlatılması sırasında yüklenmesini sağlar.
    mod_socache_dbm
    DBM based shared object cache provider.
    mod_socache_dc
    Distcache based shared object cache provider.
    mod_socache_memcache
    Memcache based shared object cache provider.
    mod_socache_redis
    Redis based shared object cache provider.
    mod_socache_shmcb
    shmcb based shared object cache provider.
    mod_speling
    Attempts to correct mistaken URLs by ignoring capitalization, or attempting to correct various minor misspellings.
    mod_ssl
    Strong cryptography using the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols
    mod_status
    Sunucu etkinliği ve başarımı hakkında bilgi sağlar.
    mod_substitute
    Perform search and replace operations on response bodies
    mod_suexec
    CGI betiklerinin belli bir kullanıcı ve grubun aidiyetinde çalışmasını mümkün kılar.
    mod_unique_id
    Provides an environment variable with a unique identifier for each request
    mod_unixd
    Unix ailesi platformlar için temel (gerekli) güvenlik.
    mod_userdir
    Kullanıcılara özel dizinler
    mod_usertrack
    Clickstream logging of user activity on a site
    mod_version
    Version dependent configuration
    mod_vhost_alias
    Kitlesel sanal konakların devingen olarak yapılandırılmasını sağlar
    mod_watchdog
    provides infrastructure for other modules to periodically run tasks
    mod_xml2enc
    Enhanced charset/internationalisation support for libxml2-based filter modules

    Mevcut Diller:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/mod/mpm_common.html.ja.utf80000644000000000000500000020525113412755316020541 0ustar rootsrc mpm_common - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache MPM 共通ディレクティブ

    翻訳済ã¿è¨€èªž:  de  |  en  |  fr  |  ja  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:二ã¤ä»¥ä¸Šã®ãƒžãƒ«ãƒãƒ—ロセッシングモジュール (MPM) ã§å®Ÿè£…ã•れã¦ã„るディレクティブã®ã‚³ãƒ¬ã‚¯ã‚·ãƒ§ãƒ³
    ステータス:MPM
    top

    CoreDumpDirectory ディレクティブ

    説明:Apache ãŒã‚³ã‚¢ãƒ€ãƒ³ãƒ—ã™ã‚‹å‰ã«ç§»å‹•を試ã¿ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒª
    æ§‹æ–‡:CoreDumpDirectory directory
    デフォルト:デフォルトã®è¨­å®šã¯èª¬æ˜Žæ–‡ã‚’読んã§ãã ã•ã„
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:beos, leader, mpm_winnt, perchild, prefork, threadpool, worker

    Apache ãŒã‚³ã‚¢ãƒ€ãƒ³ãƒ—ã™ã‚‹å‰ã«ç§»å‹•を試ã¿ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’制御ã—ã¾ã™ã€‚ デフォルト値㯠ServerRoot ディレクトリã§ã™ãŒã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¯ã‚µãƒ¼ãƒã®å®Ÿè¡Œã•れã¦ã„るユーザ権é™ã§ 書ãè¾¼ã¿å¯èƒ½ã§ã‚ã‚‹ã¹ãã§ã¯ãªã„ã®ã§ã€é€šå¸¸ã¯ã‚³ã‚¢ãƒ€ãƒ³ãƒ—ã¯æ›¸ãè¾¼ã¾ã‚Œã¾ã›ã‚“。 デãƒãƒƒã‚°ã®ãŸã‚ã«ã‚³ã‚¢ãƒ€ãƒ³ãƒ—ãŒå¿…è¦ã§ã‚れã°ã€ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を使ã£ã¦ä»–ã®ä½ç½®ã«ã‚³ã‚¢ãƒ€ãƒ³ãƒ—を書ã出ã™ã‚ˆã†ã«ã§ãã¾ã™ã€‚

    Linux ã§ã®ã‚³ã‚¢ãƒ€ãƒ³ãƒ—

    Apache ㌠root ã¨ã—ã¦èµ·å‹•ã•れã¦ã€åˆ¥ã®ãƒ¦ãƒ¼ã‚¶ã®æ¨©é™ã«ä»¥é™ã—ãŸå ´åˆã¯ Linux ã®ã‚«ãƒ¼ãƒãƒ«ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãŒãƒ—ãƒ­ã‚»ã‚¹ã®æ¨©é™ã§æ›¸ãè¾¼ã¿å¯èƒ½ãªå ´åˆã§ã•ãˆã‚‚ コアダンプを無効ã«ã—ã¾ã™ã€‚Apache (2.0.46 以é™) 㯠Linux 2.4 以é™ã§ã¯ã‚³ã‚¢ãƒ€ãƒ³ãƒ—を行ãªã†ã‚ˆã†ã«å†æŒ‡å®šã—ã¾ã™ãŒã€ãれ㯠CoreDumpDirectory を明示的ã«è¨­å®šã—ãŸã¨ãã« é™ã‚Šã¾ã™ã€‚

    top

    EnableExceptionHook ディレクティブ

    説明:クラッシュã®å¾Œã«ä¾‹å¤–ãƒãƒ³ãƒ‰ãƒ©ã‚’実行ã™ã‚‹ãƒ•ックを有効ã«ã™ã‚‹
    æ§‹æ–‡:EnableExceptionHook On|Off
    デフォルト:EnableExceptionHook Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:leader, perchild, prefork, threadpool, worker
    äº’æ›æ€§:2.0.49 以é™

    安全上ã®ç†ç”±ã‹ã‚‰ã€--enable-exception-hook configure オプションを有効ã«ã—ãŸå ´åˆã«ã®ã¿ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を利用ã§ãã¾ã™ã€‚ 外部モジュールをプラグインã—ã¦ã€å­ãŒã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã—ãŸå¾Œã«ä½•ã‹å®Ÿè¡Œã§ãるよã†ãª フックを有効ã«ã—ã¾ã™ã€‚

    ã“ã®ã‚ˆã†ãªå¤–部モジュールã¯ã€æ—¢ã«äºŒã¤å­˜åœ¨ã—ã¦ã„ã¦ã€ mod_whatkilledus 㨠mod_backtrace ãŒã“ã®ãƒ•ックを活用ã—ã¾ã™ã€‚ã“れらã®è©³ç´°ã«ã¤ã„ã¦ã¯ Jeff Trawick ã•ã‚“ã® EnableExceptionHook site ã‚’å‚ç…§ã—ã¦ãã ã•ã„。

    top

    GracefulShutdownTimeout ディレクティブ

    説明:ç©ã‚„ã‹ãªåœæ­¢ã‚’ã‹ã‘ãŸå¾Œã€çµ‚了ã™ã‚‹ã¾ã§å¾…ã¤æ™‚é–“
    æ§‹æ–‡:GracefulShutDownTimeout seconds
    デフォルト:GracefulShutDownTimeout 0
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:prefork, worker, event
    äº’æ›æ€§:2.2 以é™

    GracefulShutdownTimeout ã«ã¯ サーãƒãƒ¼ãŒ "graceful-stop" シグナルをå—ã‘å–ã£ã¦ã‹ã‚‰ç¾åœ¨ã® リクエストã®å‡¦ç†ã‚’最大ã§ä½•ç§’é–“ç¶šã‘ã‚‹ã‹ã‚’指定ã—ã¾ã™ã€‚

    ã“ã®å€¤ã‚’ゼロã«è¨­å®šã™ã‚‹ã¨ã€å‡¦ç†ä¸­ã¨ã—ã¦æ®‹ã£ã¦ã„るリクエスト㌠全ã¦å®Œäº†ã™ã‚‹ã¾ã§ã‚µãƒ¼ãƒãƒ¼ã¯çµ‚了ã—ã¾ã›ã‚“。

    top

    Listen ディレクティブ

    説明:サーãƒãŒ listen ã™ã‚‹IP アドレスã¨ãƒãƒ¼ãƒˆç•ªå·
    æ§‹æ–‡:Listen [IP-address:]portnumber [protocol]
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:beos, leader, mpm_netware, mpm_winnt, mpmt_os2, perchild, prefork, threadpool, worker, event
    äº’æ›æ€§:Apache 2.0 ã‹ã‚‰å¿…須ディレクティブ。protocol 引数㯠2.1.5 ã§è¿½åŠ ã€‚

    Listen ディレクティブ㯠Apache ãŒç‰¹å®šã® IP アドレスやãƒãƒ¼ãƒˆç•ªå·ã ã‘ã‚’ listen ã™ã‚‹ã‚ˆã†ã«æŒ‡å®šã—ã¾ã™ã€‚ デフォルトã§ã¯å…¨ã¦ã® IP インターフェースã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¿œç­”ã—ã¾ã™ã€‚ Listen ディレクティブ㯠ç¾åœ¨ã¯å¿…é ˆã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¨ãªã‚Šã¾ã—ãŸã€‚ ã‚‚ã—設定ファイルã«ãªã‘れã°ã€ã‚µãƒ¼ãƒã¯èµ·å‹•ã«å¤±æ•—ã—ã¾ã™ã€‚ ã“れã¯ä»¥å‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã® Apache ã‹ã‚‰å¤‰æ›´ã®ã‚ã£ãŸéƒ¨åˆ†ã§ã™ã€‚

    Listen ディレクティブã§ã¯ã€ç‰¹å®šã®ãƒãƒ¼ãƒˆã‚ã‚‹ã„㯠アドレスã¨ãƒãƒ¼ãƒˆã®çµ„ã¿åˆã‚ã›ã‹ã‚‰å…¥ã£ã¦ãるリクエストã«å¯¾ã—㦠応答ã™ã‚‹ã‚ˆã†ã«æŒ‡å®šã—ã¾ã™ã€‚ ã‚‚ã—ãƒãƒ¼ãƒˆç•ªå·ã ã‘ãŒæŒ‡å®šã•れãŸå ´åˆã¯ã€ã‚µãƒ¼ãƒã¯å…¨ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ェース㮠指定ã•れãŸãƒãƒ¼ãƒˆç•ªå·ã«å¯¾ã—㦠listen ã—ã¾ã™ã€‚ IP アドレスãŒãƒãƒ¼ãƒˆã¨ã¨ã‚‚ã«æŒ‡å®šã•れãŸå ´åˆã¯ã€ サーãƒã¯æŒ‡å®šã•れãŸãƒãƒ¼ãƒˆã¨ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ェースã«å¯¾ã—㦠listen ã—ã¾ã™ã€‚

    複数ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ãƒãƒ¼ãƒˆã«å¯¾ã—㦠listen ã™ã‚‹ã‚ˆã†ã«ã€ 複数㮠Listen ディレクティブを使ã†ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ サーãƒã¯åˆ—挙ã•れãŸã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ãƒãƒ¼ãƒˆå…¨ã¦ã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—㦠応答ã—ã¾ã™ã€‚

    例ãˆã°ã€ã‚µãƒ¼ãƒãŒ 80 番ãƒãƒ¼ãƒˆã¨ 8000 番ãƒãƒ¼ãƒˆã®ä¸¡æ–¹ã® コãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’å—ã‘入れる場åˆã¯ã€æ¬¡ã®ã‚ˆã†ã«ã—ã¾ã™ã€‚

    Listen 80
    Listen 8000

    二ã¤ã®ç‰¹å®šã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ェースã¨ãƒãƒ¼ãƒˆç•ªå·ã‹ã‚‰ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’ å—ã‘入れるよã†ã«ã™ã‚‹ã«ã¯ã€æ¬¡ã®ã‚ˆã†ã«ã—ã¾ã™ã€‚

    Listen 192.170.2.1:80
    Listen 192.170.2.5:8000

    IPv6 アドレスã¯è§’括弧ã§å›²ã¾ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 例ãˆã°æ¬¡ã®ä¾‹ã®ã‚ˆã†ã«ã§ã™ã€‚

    Listen [2001:db8::a00:20ff:fea7:ccea]:80

    protocol オプション引数ã¯é€šå¸¸ã®è¨­å®šã§ã¯å¿…è¦ã‚りã¾ã›ã‚“。 無指定ã®å ´åˆã€443 番ãƒãƒ¼ãƒˆã«ã¯ https ãŒã€ä»–ã®ãƒãƒ¼ãƒˆã«ã¯ http ãŒãƒ‡ãƒ•ォルト値ã¨ã—ã¦ä½¿ç”¨ã•れã¾ã™ã€‚ protocol 指定ã¯ã€ã©ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’処ç†ã™ã‚‹ã‹ã‚’決定ã—〠AcceptFilter ã«ã‚ˆã‚‹ãƒ—ãƒ­ãƒˆã‚³ãƒ«ç‰¹æœ‰ã®æœ€é©åŒ–を行ã†ã‚ˆã†ã«ã—ã¾ã™ã€‚

    éžæ¨™æº–ãªãƒãƒ¼ãƒˆã§é‹ç”¨ã—ã¦ã„ã‚‹éš›ã«ã®ã¿ protocol 指定ãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ ãŸã¨ãˆã° https ãªã‚µã‚¤ãƒˆã‚’ 8443 番ãƒãƒ¼ãƒˆã§é‹ç”¨ã—ã¦ã„ã‚‹å ´åˆ :

    Listen 192.170.2.1:8443 https

    エラーæ¡ä»¶

    åŒä¸€ IP アドレスã¨ãƒãƒ¼ãƒˆã®çµ„ã«ã€è¤‡æ•°ã® Listen ディレクティブを指定ã—ã¦ã—ã¾ã†ã¨ã€Address already in use ã¨ã„ã†ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’å—ã‘ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚

    å‚ç…§

    top

    ListenBackLog ディレクティブ

    説明:ä¿ç•™çŠ¶æ…‹ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã®ã‚­ãƒ¥ãƒ¼ã®æœ€å¤§é•·
    æ§‹æ–‡:ListenBacklog backlog
    デフォルト:ListenBacklog 511
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:beos, leader, mpm_netware, mpm_winnt, mpmt_os2, perchild, prefork, threadpool, worker

    ä¿ç•™çŠ¶æ…‹ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã®ã‚­ãƒ¥ãƒ¼ã®æœ€å¤§é•·ã§ã™ã€‚ 一般的ã«ã¯èª¿æ•´ã™ã‚‹å¿…è¦ã¯ã‚りã¾ã›ã‚“ã—ã€èª¿æ•´ã¯æœ›ã¾ã—ãã‚りã¾ã›ã‚“。 ã—ã‹ã—ã€TCP SYN フラッドアタックã®çжæ³ä¸‹ã«ãŠã‹ã‚Œã‚‹å ´åˆã«ã€ 増やã—ãŸæ–¹ãŒæœ›ã¾ã—ã„システムもã‚りã¾ã™ã€‚ listen(2) システムコールã®ãƒãƒƒã‚¯ãƒ­ã‚°ãƒ‘ラメータを ã”覧下ã•ã„。

    ã“ã®å€¤ã¯ OS ã«ã‚ˆã‚Šã€å°ã•ãªæ•°ã«æŠ‘ãˆã‚‰ã‚Œã¾ã™ã€‚ 値㯠OS 毎ã«ç•°ãªã£ã¦ã„ã¾ã™ã€‚ã¾ãŸå¤šãã® OS ã§ã¯ã€ ãƒãƒƒã‚¯ãƒ­ã‚°ã¨ã—ã¦æŒ‡å®šã•れã¦ã„る値ã¡ã‚‡ã†ã©ã¾ã§ä½¿ã£ã¦ã„ã‚‹ã‚ã‘ã§ã¯ãªã〠設定ã•れã¦ã„る値ã«åŸºã¥ã„㦠(通常ã¯è¨­å®šå€¤ã‚ˆã‚Šã‚‚大ããªå€¤ã‚’) 使ã£ã¦ã„ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。

    top

    ListenCoresBucketsRatio ディレクティブ

    説明:Ratio between the number of CPU cores (online) and the number of listeners' buckets
    æ§‹æ–‡:ListenCoresBucketsRatio ratio
    デフォルト:ListenCoresBucketsRatio 0 (disabled)
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:event, worker, prefork
    äº’æ›æ€§:Available in Apache HTTP Server 2.4.17, with a kernel supporting the socket option SO_REUSEPORT and distributing new connections evenly across listening processes' (or threads') sockets using it (eg. Linux 3.9 and later, but not the current implementations of SO_REUSEPORT in *BSDs.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    MaxConnectionsPerChild ディレクティブ

    説明:Limit on the number of connections that an individual child server will handle during its life
    æ§‹æ–‡:MaxConnectionsPerChild number
    デフォルト:MaxConnectionsPerChild 0
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2
    äº’æ›æ€§:Available Apache HTTP Server 2.3.9 and later. The old name MaxRequestsPerChild is still supported.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    MaxMemFree ディレクティブ

    説明:free() ãŒå‘¼ã°ã‚Œãªã„é™ã‚Šã€ 主メモリアロケータãŒä¿æŒã—ç¶šã‘ã‚‰ã‚Œã‚‹ãƒ¡ãƒ¢ãƒªã®æœ€å¤§é‡
    æ§‹æ–‡:MaxMemFree KBytes
    デフォルト:MaxMemFree 0
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:beos, leader, mpm_netware, prefork, threadpool, worker, mpm_winnt

    MaxMemFree ディレクティブ㯠free() ãŒå‘¼ã°ã‚Œãªã„é™ã‚Šã€ 主アロケータãŒä¿æŒã§ãる空ã®ãƒ¡ãƒ¢ãƒªã®æœ€å¤§å€¤ã‚’キロãƒã‚¤ãƒˆå˜ä½ã§è¨­å®šã—ã¾ã™ã€‚ 設定ã•れã¦ã„ãªã„ã‹ã€é›¶ã«è¨­å®šã•れã¦ã„ã‚‹ã¨ãã¯ã€ç„¡åˆ¶é™ã«ãªã‚Šã¾ã™ã€‚

    top

    MaxRequestWorkers ディレクティブ

    説明:Maximum number of connections that will be processed simultaneously
    æ§‹æ–‡:MaxRequestWorkers number
    デフォルト:See usage for details
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:event, worker, prefork

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    MaxSpareThreads ディレクティブ

    説明:ã‚¢ã‚¤ãƒ‰ãƒ«ã‚¹ãƒ¬ãƒƒãƒ‰ã®æœ€å¤§æ•°
    æ§‹æ–‡:MaxSpareThreads number
    デフォルト:詳細ã¯ä½¿ç”¨æ³•ã‚’ã”覧下ã•ã„。
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:beos, leader, mpm_netware, mpmt_os2, perchild, threadpool, worker

    アイドルãªã‚¹ãƒ¬ãƒƒãƒ‰ã®æœ€å¤§æ•°ã§ã™ã€‚ç•°ãªã‚‹ MPM ã§ã¯ãれãžã‚Œã€ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ç•°ãªã‚‹å–り扱ã‚れ方をã•れã¾ã™ã€‚

    perchild ã§ã¯ã€ デフォルト㯠MaxSpareThreads 10 ã§ã™ã€‚ ã“ã® MPM ã¯ã‚¢ã‚¤ãƒ‰ãƒ«ã‚¹ãƒ¬ãƒƒãƒ‰æ•°ã‚’ã€ãれãžã‚Œã®å­ãƒ—ロセスã”ã¨ã«ç›£è¦–ã—ã¾ã™ã€‚ å­ãƒ—ロセスã«ã‚¢ã‚¤ãƒ‰ãƒ«ã‚¹ãƒ¬ãƒƒãƒ‰ãŒå¤šã™ãŽã‚‹å ´åˆã¯ã€ サーãƒã¯ãã®å­ãƒ—ロセスã«å«ã¾ã‚Œã‚‹ã‚¹ãƒ¬ãƒƒãƒ‰ã‚’終了ã—å§‹ã‚ã¾ã™ã€‚

    worker, leader, threadpool ã§ã¯ã€ デフォルト㯠MaxSpareThreads 250 ã§ã™ã€‚ ã“ã® MPM ã¯ã‚¢ã‚¤ãƒ‰ãƒ«ã‚¹ãƒ¬ãƒƒãƒ‰æ•°ã‚’サーãƒå…¨ä½“ã§ç›£è¦–ã—ã¾ã™ã€‚ サーãƒã§ã‚¢ã‚¤ãƒ‰ãƒ«ã‚¹ãƒ¬ãƒƒãƒ‰æ•°ãŒå¤šã™ãŽã‚‹å ´åˆã¯ã€ ã“ã®æ•°å­—よりも少ãªã„æ•°ã«ãªã‚‹ã¾ã§å­ãƒ—ロセスを終了ã—ã¾ã™ã€‚

    mpm_netware ã§ã¯ã€ デフォルト㯠MaxSpareThreads 100 ã§ã™ã€‚ ã“ã® MPM ã¯ã‚·ãƒ³ã‚°ãƒ«ãƒ—ロセスã§å®Ÿè¡Œã•れã¾ã™ã®ã§ã€ スペアスレッド数もサーãƒå…¨ä½“ã§å‹˜å®šã—ã¾ã™ã€‚

    beos 㨠mpmt_os2 㯠mpm_netware ã¨ä¼¼ãŸæŒ™å‹•ã‚’ã—ã¾ã™ã€‚ beos ã§ã®ãƒ‡ãƒ•ォルト値㯠MaxSpareThreads 50 ã§ã™ã€‚mpmt_os2 ã§ã®ãƒ‡ãƒ•ォルト値㯠10 ã§ã™ã€‚

    制é™äº‹é …

    MaxSpareThreads ã®å–る値ã«ã¯åˆ¶é™ãŒã‚りã¾ã™ã€‚ Apache ã¯æ¬¡ã®è¦å‰‡ã«å¾“ã£ã¦è‡ªå‹•çš„ã«è£œæ­£ã—ã¾ã™ã€‚

    å‚ç…§

    top

    MinSpareThreads ディレクティブ

    説明:リクエストã«å¿œç­”ã™ã‚‹ã“ã¨ã®ã§ãã‚‹ ã‚¢ã‚¤ãƒ‰ãƒ«ã‚¹ãƒ¬ãƒƒãƒ‰æ•°ã®æœ€å°æ•°
    æ§‹æ–‡:MinSpareThreads number
    デフォルト:詳細ã¯ä½¿ç”¨æ–¹æ³•ã‚’ã”覧下ã•ã„。
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:beos, leader, mpm_netware, mpmt_os2, perchild, threadpool, worker

    リクエストã«å¿œç­”ã™ã‚‹ã‚¹ãƒ¬ãƒƒãƒ‰æ•°ã®æœ€å°å€¤ã§ã™ã€‚ ç•°ãªã‚‹ MPM ã§ã¯ãれãžã‚Œã€ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ç•°ãªã‚‹å–り扱ã‚れ方をã—ã¾ã™ã€‚

    perchild ã§ã¯ã€ デフォルト㯠MinSpareThreads 5 ã§ã€ アイドルスレッド数をå­ãƒ—ロセス毎ã«ç›£è¦–ã—ã¾ã™ã€‚ ã‚‚ã—å­ãƒ—ロセスã«ååˆ†ãªæ•°ã®ã‚¹ãƒ¬ãƒƒãƒ‰ãŒãªã‘れã°ã€ サーãƒã¯ãã®å­ãƒ—ãƒ­ã‚»ã‚¹ã«æ–°ã—ã„スレッドを作り始ã‚ã¾ã™ã€‚ ã§ã™ã‹ã‚‰ã€NumServers ã‚’ 10 ã«ã€MinSpareThreads ã‚’ 5 ã«ã—ãŸå ´åˆã¯ã€æœ€å°ã§ã‚‚ 50 ã®ã‚¢ã‚¤ãƒ‰ãƒ«ã‚¹ãƒ¬ãƒƒãƒ‰ãŒ システム上ã«ã‚ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚

    worker, leader, threadpool ã§ã¯ã€ デフォルト㯠MinSpareThreads 75 ã§ã€ アイドルスレッド数をサーãƒå…¨ä½“ã§ç›£è¦–ã—ã¾ã™ã€‚ ã‚‚ã—サーãƒã«ååˆ†ãªæ•°ã®ã‚¢ã‚¤ãƒ‰ãƒ«ã‚¹ãƒ¬ãƒƒãƒ‰ãŒãªã‘れã°ã€ アイドルスレッド数ãŒã“ã®æ•° number よりも大ãããªã‚‹ã¾ã§ æ–°ã—ã„å­ãƒ—ロセスãŒç”Ÿæˆã•れã¾ã™ã€‚

    mpm_netware ã§ã¯ã€ デフォルト㯠MinSpareThreads 10 ã§ã€ シングルプロセス MPM ã§ã™ã®ã§ã€ã‚µãƒ¼ãƒå…¨ä½“ã§ç®¡ç†ã•れã¾ã™ã€‚

    beos 㨠mpmt_os2 ã¯ã€ mpm_netwareã«ã‚ˆãä¼¼ã¦ã„ã¾ã™ã€‚ beos ã§ã®ãƒ‡ãƒ•ォルト㯠MinSpareThreads 1 ã§ã™ã€‚mpmt_os2 ã§ã®ãƒ‡ãƒ•ォルト㯠5 ã§ã™ã€‚

    å‚ç…§

    top

    PidFile ディレクティブ

    説明:デーモンã®ãƒ—ロセス ID をサーãƒãŒè¨˜éŒ²ã™ã‚‹ãŸã‚ã®ãƒ•ァイル
    æ§‹æ–‡:PidFile filename
    デフォルト:PidFile logs/httpd.pid
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:beos, leader, mpm_winnt, mpmt_os2, perchild, prefork, threadpool, worker

    PidFile ディレクティブã§ã€ デーモンã®ãƒ—ロセス ID をサーãƒãŒè¨˜éŒ²ã™ã‚‹ãƒ•ァイルを設定ã—ã¾ã™ã€‚ ファイルåãŒçµ¶å¯¾ãƒ‘スã§ãªã„å ´åˆã¯ã€ ServerRoot ã‹ã‚‰ã®ç›¸å¯¾çš„ãªã‚‚ã®ã¨ã—ã¦æ‰±ã‚れã¾ã™ã€‚

    例

    PidFile /var/run/apache.pid

    サーãƒãŒ ErrorLog ã‚„ TransferLog ã‚’é–‰ã˜ã¦é–‹ãç›´ã—ãŸã‚Šã€è¨­å®šãƒ•ァイルを å†èª­è¾¼ã—ãŸã‚Šã•ã›ã‚‹ãŸã‚ã«ã€ã‚µãƒ¼ãƒã«ã‚·ã‚°ãƒŠãƒ«ã‚’é€ã‚‹ã“ã¨ãŒã§ãる㨠便利ãªã“ã¨ãŒã‚りã¾ã™ã€‚ ã“れ㯠SIGHUP (kill -1) シグナルを PidFile ã«æ›¸ã‹ã‚Œã¦ã„るプロセス ID ã«é€ã‚‹ã“ã¨ã§ã§ãã¾ã™ã€‚

    PidFile ã«ã¯ã€ãƒ­ã‚°ãƒ•ァイルã®è¨­ç½®ä½ç½®ã‚„ セキュリティ ã¨å…¨ãåŒã˜æ³¨æ„点ãŒã‚りã¾ã™ã€‚

    注æ„

    Apache 2 ã§ã¯ã€ apachectl スクリプトã®ã¿ã‚’使用ã—ã¦ã‚µãƒ¼ãƒã® (å†) èµ·å‹•ã‚„åœæ­¢ã‚’ 行ãªã†ã“ã¨ã‚’推奨ã—ã¦ã„ã¾ã™ã€‚

    top

    ReceiveBufferSize ディレクティブ

    説明:TCP å—ä¿¡ãƒãƒƒãƒ•ァサイズ
    æ§‹æ–‡:ReceiveBufferSize bytes
    デフォルト:ReceiveBufferSize 0
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:beos, mpm_netware, mpm_winnt, mpmt_os2, prefork, worker

    サーãƒã¯ TCP å—ä¿¡ãƒãƒƒãƒ•ァサイズを指定ã•れãŸãƒã‚¤ãƒˆæ•°ã«è¨­å®šã—ã¾ã™ã€‚

    0ã«ã—ãŸå ´åˆã€OS ã®ãƒ‡ãƒ•ォルト値ãŒä½¿ç”¨ã•れã¾ã™ã€‚

    top

    ScoreBoardFile ディレクティブ

    説明:å­ãƒ—ロセスã¨é€£æºã™ã‚‹ãŸã‚ã®ãƒ‡ãƒ¼ã‚¿ã‚’ä¿å­˜ã™ã‚‹ ファイルã®ä½ç½®
    æ§‹æ–‡:ScoreBoardFile file-path
    デフォルト:ScoreBoardFile logs/apache_status
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:beos, leader, mpm_winnt, perchild, prefork, threadpool, worker

    Apache ã¯è¦ªãƒ—ロセスã¨å­ãƒ—ロセス間ã®é€šä¿¡ã«ã‚¹ã‚³ã‚¢ãƒœãƒ¼ãƒ‰ã‚’用ã„ã¾ã™ã€‚ ã“ã®é€šä¿¡æ©Ÿèƒ½ã«ãƒ•ァイルを必è¦ã¨ã™ã‚‹ã‚¢ãƒ¼ã‚­ãƒ†ã‚¯ãƒãƒ£ã‚‚ã‚りã¾ã™ã€‚ ãƒ•ã‚¡ã‚¤ãƒ«ãŒæŒ‡å®šã•れã¦ã„ãªã‘れã°ã€Apache ã¯ã¾ãšãƒ¡ãƒ¢ãƒªä¸Š (匿å共有メモリ) ã«ã‚¹ã‚³ã‚¢ãƒœãƒ¼ãƒ‰ã‚’作ã‚ã†ã¨ã—ã€ãれãŒå¤±æ•—ã™ã‚‹ã¨ ディスク上ã«ãƒ•ァイル (ファイルベースã®å…±æœ‰ãƒ¡ãƒ¢ãƒª) を作ã‚ã†ã¨ã—ã¾ã™ã€‚ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を指定ã™ã‚‹ã¨ã€Apache ã¯å¿…ãšãƒ‡ã‚£ã‚¹ã‚¯ã«ãƒ•ァイルを生æˆã—ã¾ã™ã€‚

    例

    ScoreBoardFile /var/run/apache_status

    ファイルベースã®å…±æœ‰ãƒ¡ãƒ¢ãƒªã¯ã€ã‚µãƒ¼ãƒ‰ãƒ‘ーティー製ã®ã‚¢ãƒ—リケーション㧠スコアボードã«ç›´æŽ¥ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹å¿…è¦ãŒã‚ã‚‹å ´åˆã«å½¹ã«ç«‹ã¡ã¾ã™ã€‚

    ScoreBoardFile を使ã†å ´åˆã€ RAM ディスク上ã«ç½®ãã¨ã‚¹ãƒ”ードãŒå‘上ã™ã‚‹ã§ã—ょã†ã€‚ ã—ã‹ã—ã€ãƒ­ã‚°ãƒ•ァイルã®è¨­ç½®ä½ç½®ã‚„ セキュリティ ã¨åŒæ§˜ã®æ³¨æ„点ãŒã‚ã‚‹ã®ã§ã€æ³¨æ„ã—ã¦ãã ã•ã„。

    å‚ç…§

    top

    SendBufferSize ディレクティブ

    説明:TCP ãƒãƒƒãƒ•ァサイズ
    æ§‹æ–‡:SendBufferSize bytes
    デフォルト:SendBufferSize 0
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:beos, leader, mpm_netware, mpm_winnt, mpmt_os2, perchild, prefork, threadpool, worker

    サーãƒã¯ TCP é€ä¿¡ãƒãƒƒãƒ•ァサイズを指定ã•れãŸãƒã‚¤ãƒˆæ•°ã«è¨­å®šã—ã¾ã™ã€‚ 高速ã§é«˜ãƒ¬ã‚¤ãƒ†ãƒ³ã‚·ãªç’°å¢ƒã§ (例 100ms 程度ã€å¤§é™¸æ¨ªæ–­é«˜é€Ÿé€šä¿¡è·¯ãªã©) å¤ã„一般的㪠OS ã®ãƒ‡ãƒ•ォルト値を増やã™ã®ã«éžå¸¸ã«ä¾¿åˆ©ã§ã™ã€‚

    0ã«ã—ãŸå ´åˆã€OS ã®ãƒ‡ãƒ•ォルト値ãŒä½¿ç”¨ã•れã¾ã™ã€‚

    top

    ServerLimit ディレクティブ

    説明:設定å¯èƒ½ãªã‚µãƒ¼ãƒãƒ—ロセス数ã®ä¸Šé™
    æ§‹æ–‡:ServerLimit number
    デフォルト:詳細ã¯ä½¿ç”¨æ³•ã‚’å‚ç…§
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:leader, perchild, prefork, threadpool, worker

    prefork MPM ã®å ´åˆã¯ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠Apache プロセス稼åƒä¸­ã«ãŠã‘ã‚‹ MaxClients ã«è¨­å®šå¯èƒ½ãªä¸Šé™å€¤ã‚’設定ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ (訳注: prefork ã®å ´åˆã¯åŒæ™‚クライアント数 = サーãƒãƒ—ロセス数ãªã®ã§)。 worker MPM ã®å ´åˆã«ã¯ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠ThreadLimit ディレクティブã¨çµ„ã¿åˆã‚ã›ã¦ã€ Apache プロセス稼åƒä¸­ã«ãŠã‘ã‚‹ MaxClients ã«è¨­å®šå¯èƒ½ãªä¸Šé™å€¤ã‚’設定ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を変更ã—ã¦å†èµ·å‹•(訳注: apachectl restart)ã—ã¦ã‚‚無視ã•れã¾ã™ãŒã€ MaxClients ã¯å†èµ·å‹•ã§å¤‰æ›´ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を使用ã™ã‚‹éš›ã¯ç‰¹ã«æ³¨æ„ã—ã¦ãã ã•ã„。 ServerLimit ãŒå¿…è¦ä»¥ä¸Šã«å¤§ããªå€¤ã« 設定ã•れãŸå ´åˆã¯ã€ä½™è¨ˆãªæœªä½¿ç”¨å…±æœ‰ãƒ¡ãƒ¢ãƒªãŒå‰²ã‚Šå½“ã¦ã‚‰ã‚Œã¾ã™ã€‚ ServerLimit 㨠MaxClients ãŒã‚·ã‚¹ãƒ†ãƒ ã®æ‰±ãˆã‚‹ç¯„囲を越ãˆãŸè¨­å®šå€¤ã«ãªã£ã¦ã„ã‚‹ã¨ã€ Apache ã¯èµ·å‹•ã—ãªã„ã‹ã€èµ·å‹•ã—ã¦ã‚‚ä¸å®‰å®šã«ãªã‚‹ã§ã—ょã†ã€‚

    prefork MPM ã§ã¯ã€ MaxClients ã‚’ 256 (デフォルト) よりも大ããªå€¤ã«è¨­å®šã™ã‚‹å¿…è¦ãŒã‚る時ã«ã ã‘使用ã—ã¦ãã ã•ã„。 希望㮠MaxClients æ•°ã¨ãらã¹ã¦ã€å¿…è¦ä»¥ä¸Šã«å¤§ããªå€¤ã‚’指定ã™ã‚‹ã“ã¨ã¯é¿ã‘ã¦ãã ã•ã„。

    worker, leader, threadpool MPM ã§ã¯ã€ MaxClients 㨠ThreadsPerChild ã®è¨­å®šã§ 16 サーãƒãƒ—ロセス (デフォルト) 以上必è¦ã«ãªã‚‹å ´åˆã«ã®ã¿ä½¿ç”¨ã—ã¦ãã ã•ã„。希望㮠MaxClients 㨠ThreadsPerChild ã¨ãらã¹ã¦ã€å¿…è¦ã¨ãªã‚‹ã‚µãƒ¼ãƒãƒ—ロセス数以上ã«å¤§ããªå€¤ã‚’ 設定ã™ã‚‹ã“ã¨ã¯é¿ã‘ã¦ãã ã•ã„。

    perchild MPM ã§ã¯ã€ NumServers ã‚’ 8 (デフォルト) よã‚ã„も大ããªå€¤ã«è¨­å®šã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã¨ãã«ã®ã¿ä½¿ç”¨ã—ã¦ãã ã•ã„。

    注æ„

    ServerLimit 20000 ã¨ã„ã†åˆ¶é™ä»˜ãã§ã‚³ãƒ³ãƒ‘イルã•れã¦ã„ã¾ã™ (prefork MPM ã§ã¯ 200000) 。 ã“れã¯ã‚¹ãƒšãƒ«ãƒŸã‚¹ã«ã‚ˆã£ã¦èª¤ã£ã¦é…·ã„状æ³ã«ãªã‚‹ã®ã‚’〠回é¿ã™ã‚‹ãŸã‚ã®å‡¦ç½®ã§ã™ã€‚

    å‚ç…§

    top

    StartServers ディレクティブ

    説明:起動時ã«ç”Ÿæˆã•れるå­ã‚µãƒ¼ãƒãƒ—ãƒ­ã‚»ã‚¹ã®æ•°
    æ§‹æ–‡:StartServers number
    デフォルト:詳細ã¯ä½¿ç”¨æ–¹æ³•ã‚’å‚ç…§
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:leader, mpmt_os2, prefork, threadpool, worker

    StartServers ディレクティブã¯ã€ 起動時ã«ç”Ÿæˆã•れるå­ã‚µãƒ¼ãƒãƒ—ãƒ­ã‚»ã‚¹ã®æ•°ã‚’設定ã—ã¾ã™ã€‚ プロセス数ã¯è² è·ã«å¿œã˜ã¦å‹•çš„ã«åˆ¶å¾¡ã•れã¾ã™ã®ã§ã€ 通常ã¯ã“ã®å€¤ã‚’調整ã™ã‚‹ç†ç”±ã¯ã‚ã¾ã‚Šãªã„ã§ã—ょã†ã€‚

    デフォルト値㯠MPM ã”ã¨ã«ç•°ãªã‚Šã¾ã™ã€‚ leader, threadpool, worker 㯠StartServers 3 ã§ã™ã€‚ prefork 㯠5 ã§ã€ mpmt_os2 㯠2 ã§ã™ã€‚

    top

    StartThreads ディレクティブ

    説明:起動時ã«ç”Ÿæˆã•ã‚Œã‚‹ã‚¹ãƒ¬ãƒƒãƒ‰ã®æ•°
    æ§‹æ–‡:StartThreads number
    デフォルト:詳細ã¯ä½¿ç”¨æ–¹æ³•ã‚’å‚ç…§
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:beos, mpm_netware, perchild

    起動時ã«ç”Ÿæˆã•ã‚Œã‚‹ã‚¹ãƒ¬ãƒƒãƒ‰ã®æ•°ã§ã™ã€‚ スレッド数ã¯è² è·ã«å¿œã˜ã¦å‹•çš„ã«åˆ¶å¾¡ã•れã¾ã™ã®ã§ã€ 通常ã¯ã“ã®å€¤ã‚’調整ã™ã‚‹ç†ç”±ã¯ã‚ã¾ã‚Šãªã„ã§ã—ょã†ã€‚

    perchild ã§ã®ãƒ‡ãƒ•ォルト㯠StartThreads 5 ã§ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯èµ·å‹•時㫠プロセス毎ã®ã‚¹ãƒ¬ãƒƒãƒ‰æ•°ã‚’追跡ã—ã¾ã™ã€‚

    mpm_netware ã§ã®ãƒ‡ãƒ•ォルト㯠StartThreads 50 ã§ã€ ã“ã®å ´åˆãƒ—ロセスã¯ä¸€ã¤ã—ã‹ãªã„ã®ã§ã€ 起動時ã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¿œç­”ã™ã‚‹ã‚¹ãƒ¬ãƒƒãƒ‰ã®ç·æ•°ã¨ãªã‚Šã¾ã™ã€‚

    beos ã§ã®ãƒ‡ãƒ•ォルト㯠StartThreads 10 ã§ã™ã€‚ ã¾ãŸã€èµ·å‹•時ã«ç”Ÿæˆã•れるスレッドã®ç·æ•°ã«ã‚‚åæ˜ ã•れã¾ã™ã€‚

    top

    ThreadLimit ディレクティブ

    説明:設定å¯èƒ½ãªå­ãƒ—ロセス毎ã®ã‚¹ãƒ¬ãƒƒãƒ‰æ•°ã®ä¸Šé™ã‚’ 設定ã—ã¾ã™
    æ§‹æ–‡:ThreadLimit number
    デフォルト:詳細ã¯ä½¿ç”¨æ–¹æ³•ã‚’å‚ç…§
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:leader, mpm_winnt, perchild, threadpool, worker
    äº’æ›æ€§:Apache 2.0.41 ã¨ãれ以é™ã® mpm_winnt ã§åˆ©ç”¨å¯èƒ½

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠Apache プロセス稼åƒä¸­ã«ãŠã‘ã‚‹ ThreadsPerChild ã«è¨­å®šå¯èƒ½ãªä¸Šé™å€¤ã‚’設定ã—ã¾ã™ã€‚å†èµ·å‹•時ã«ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®å€¤ã‚’ 変更ã—ã¦ã‚‚無視ã•れã¾ã™ãŒã€ ThreadsPerChild ã¯å†èµ·å‹•中ã«ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã•れãŸä¸Šé™å€¤ã¾ã§ 変更ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を使用ã™ã‚‹éš›ã¯ç‰¹ã«æ³¨æ„ã—ã¦ãã ã•ã„。 ThreadLimit ㌠ThreadsPerChild よりもãšã£ã¨å¤§ããªå€¤ã«è¨­å®šã•れãŸå ´åˆã¯ã€ ä½™è¨ˆãªæœªä½¿ç”¨å…±æœ‰ãƒ¡ãƒ¢ãƒªãŒå‰²ã‚Šå½“ã¦ã‚‰ã‚Œã¦ã—ã¾ã„ã¾ã™ã€‚ ThreadLimit ㌠ThreadsPerChild ã®ä¸¡æ–¹ãŒã‚·ã‚¹ãƒ†ãƒ ã®æ‰±ãˆã‚‹ç¯„囲を超ãˆã¦ã„ã‚‹å ´åˆã¯ã€ Apache ã¯èµ·å‹•ã—ãªã„ã‹ã€èµ·å‹•ã—ãŸã¨ã—ã¦ã‚‚ä¸å®‰å®šã«ãªã‚‹ã§ã—ょã†ã€‚ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®å€¤ã¯ä»Šä½¿ç”¨ã—ã¦ã„ã‚‹ Apache ã® ThreadsPerChild ã®äºˆæƒ³ä¸Šé™å€¤ã‚’ è¶…ãˆãŸå€¤ã«ã¯è¨­å®šã—ãªã„ã§ãã ã•ã„。

    ThreadLimit ã®ãƒ‡ãƒ•ォルト値㯠mpm_winnt ã®ã¨ã㯠1920 ã§ã€ ä»–ã®å ´åˆã¯ 64 ã§ã™ã€‚

    注æ„

    ThreadLimit 20000 (mpm_winnt ã®å ´åˆã¯ ThreadLimit 15000 ) ã¨ã„ã†åˆ¶é™ä»˜ãã§ã‚³ãƒ³ãƒ‘イルã•れã¦ã„ã¾ã™ã€‚ ã“れã¯ã‚¹ãƒšãƒ«ãƒŸã‚¹ã«ã‚ˆã£ã¦èª¤ã£ã¦é…·ã„状æ³ã«ãªã‚‹ã®ã‚’〠回é¿ã™ã‚‹ãŸã‚ã®å‡¦ç½®ã§ã™ã€‚

    top

    ThreadsPerChild ディレクティブ

    説明:å­ãƒ—ロセスãれãžã‚Œã«ç”Ÿæˆã•れるスレッド数
    æ§‹æ–‡:ThreadsPerChild number
    デフォルト:詳細ã¯ä½¿ç”¨æ–¹æ³•ã‚’å‚ç…§
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:leader, mpm_winnt, threadpool, worker

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ãれãžã‚Œã®å­ãƒ—ロセスã§ç”Ÿæˆã•れる スレッド数を設定ã—ã¾ã™ã€‚ å­ãƒ—ロセスã¯é–‹å§‹æ™‚ã«ã“れらã®ã‚¹ãƒ¬ãƒƒãƒ‰ã‚’生æˆã—ã¦ã€ ãã®å¾Œã¯ç”Ÿæˆã—ã¾ã›ã‚“。mpm_winnt ã®ã‚ˆã†ãªã€ å­ãƒ—ロセスãŒä¸€ã¤ã—ã‹ãªã„よã†ãª MPM を利用ã—ã¦ã„ã‚‹ã®ã§ã‚れã°ã€ ã“ã®å€¤ã¯ã‚µãƒ¼ãƒã®è² è·å…¨ä½“ã‚’å分å–り扱ãˆã‚‹ç¨‹åº¦ã«ã€ 大ãããªã‘れã°ãªã‚Šã¾ã›ã‚“。worker ã®ã‚ˆã†ãªã€ å­ãƒ—ロセスãŒè¤‡æ•°ã‚るよã†ãª MPM を利用ã—ã¦ã„ã‚‹ã®ã§ã‚れã°ã€ サーãƒã®é€šå¸¸è² è·ã‚’å分扱ãˆã‚‹ç¨‹åº¦ã«ã€ ã‚¹ãƒ¬ãƒƒãƒ‰ç·æ•°ãŒå¤šããªã‘れã°ãªã‚Šã¾ã›ã‚“。

    mpm_winntã§ã® ThreadsPerChild ã®ãƒ‡ãƒ•ォルト値㯠64 ã§ã€ä»–ã®å ´åˆã¯ 25 ã§ã™ã€‚

    top

    ThreadStackSize ディレクティブ

    説明:クライアントã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’å—ã‘æŒã¤ã‚¹ãƒ¬ãƒƒãƒ‰ãŒä½¿ç”¨ã™ã‚‹ スタックã®ãƒã‚¤ãƒˆæ•°
    æ§‹æ–‡:ThreadStackSize size
    デフォルト:NetWare ã§ã¯ 65536。他㮠OS ã§ã¯é•ã£ãŸå€¤
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:leader, mpm_netware, mpm_winnt, perchild, threadpool, worker
    äº’æ›æ€§:2.1 以é™

    クライアントコãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’å—ã‘æŒã¡ã€ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³å‡¦ç†ã«å¿…è¦ãªãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã® 呼ã³å‡ºã—を行ãªã£ã¦ã„るスレッドã®ã€(自動変数用ã®) スタックサイズ㯠ThreadStackSize ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã—ã¾ã™ã€‚ 大抵ã®å ´åˆ OS ã®æŒ‡å®šã—ã¦ã„るスタックサイズã®ãƒ‡ãƒ•ォルト値㯠é©åˆ‡ãªã‚‚ã®ã§ã™ãŒã€èª¿æ•´ãŒå¿…è¦ã«ãªã‚‹å ´åˆã‚‚ã‚りã¾ã™:

    • スレッドスタックサイズã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆå€¤ãŒæ¯”較的å°ã•ã設定ã•れã¦ã„ã‚‹ プラットホーム (例ãˆã° HP-UX) ã§ã¯ã€è‡ªå‹•変数用ã®é ˜åŸŸã§å¤§ããªå®¹é‡ã‚’ 使用ã™ã‚‹ã‚µãƒ¼ãƒ‰ãƒ‘ーティ製モジュールã®ãŸã‚ã« Apache ãŒã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã™ã‚‹ å ´åˆã‚‚ã‚りã¾ã™ã€‚ãã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ä»–ã®ãƒ—ラットホームã§ã¯ スタックサイズãŒå¤§ãã„ãŸã‚ã«ã€å¿«èª¿ã«å‹•作ã™ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。 ã“ã®ã‚¿ã‚¤ãƒ—ã®ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã¯ã€ThreadStackSize ã§ OS ã®ãƒ‡ãƒ•ォルト値より大ããªå€¤ã‚’指定ã™ã‚‹ã“ã¨ã§è§£æ±ºã—ã¾ã™ã€‚ サードパーティ製モジュールã§ã“ã®å‡¦ç½®ãŒå¿…è¦ã§ã‚ã‚‹ã¨è¨˜è¼‰ã•れã¦ã„ã‚‹ å ´åˆã‹ã€Apache ã®å‡ºåŠ›ã™ã‚‹ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã§ã‚¹ãƒ¬ãƒƒãƒ‰ã‚¹ã‚¿ãƒƒã‚¯ã‚µã‚¤ã‚ºãŒ å°ã•ã™ãŽã‚‹ã¨æŒ‡æ‘˜ã•れã¦ã„ã‚‹å ´åˆã«ã®ã¿ã€ã“ã®èª¿æ•´ã‚’ã—ã¦ãã ã•ã„。
    • デフォルトスレッドスタックサイズãŒã€Web サーãƒç”¨é€”ã«å¿…è¦ãªé‡ã‚ˆã‚Šã‚‚ 明らã‹ã«å¤§ãã™ãŽã‚‹å ´åˆã€ThreadStackSize ã‚’ OS ã®ãƒ‡ãƒ•ォルト値よりもå°ã•ãªå€¤ã«ã™ã‚‹ã“ã¨ã§ã€å­ãƒ—ロセスã‚ãŸã‚Šã® ã‚¹ãƒ¬ãƒƒãƒ‰æ•°ã‚’ã‚ˆã‚Šå¤šãæŒãŸã›ã‚‰ã‚Œã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ ã“ã®ã‚¿ã‚¤ãƒ—ã®èª¿æ•´ã¯ã€ãƒ†ã‚¹ãƒˆç’°å¢ƒã§ã‚¦ã‚§ãƒ–サーãƒã‚’完全㫠テストã§ãã‚‹å ´åˆã«é™ã£ã¦è¡Œãªã†ã¹ãã§ã™ã€‚ ã¾ã‚Œã«å¤šæ•°ã®ã‚¹ã‚¿ãƒƒã‚¯ãŒè¦æ±‚ã•れるリクエストをå—ã‘ã‚‹ã“ã¨ãŒã‚ã‚‹ã‹ã‚‚ ã—れãªã„ã‹ã‚‰ã§ã™ã€‚ Web サーãƒã®è¨­å®šã‚’変更ã™ã‚‹ã¨ã€ç¾åœ¨ã® ThreadStackSize ã®è¨­å®šãŒå–り消ã•れる場åˆãŒã‚りã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  de  |  en  |  fr  |  ja  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy.html.ja.utf80000644000000000000500000027025113520523022020405 0ustar rootsrc mod_proxy - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_proxy

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:HTTP/1.1 プロキシ/ゲートウェイサーãƒ
    ステータス:Extension
    モジュール識別å­:proxy_module
    ソースファイル:mod_proxy.c

    概è¦

    警告

    サーãƒã‚’安全ã«ã™ã‚‹ã¾ã§ ProxyRequests ã¯æœ‰åйã«ã—ãªã„ã§ãã ã•ã„。 オープンプロキシサーãƒã¯ã‚ãªãŸè‡ªèº«ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«ã¨ã£ã¦ã‚‚〠インターãƒãƒƒãƒˆå…¨ä½“ã«ã¨ã£ã¦ã‚‚å±é™ºã§ã™ã€‚

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ Apache ã®ãƒ—ロキシ/ゲートウェイ機能を実装ã—ã¦ã„ã¾ã™ã€‚ AJP13 (Apache JServe Protocol version 1.3), FTP, CONNECT (SSL 用), HTTP/0.9, HTTP/1.0, HTTP/1.1 ã®ãƒ—ロキシ機能を実装ã—ã¦ã„ã¾ã™ã€‚ã“れらã®ãƒ—ロトコルやãã®ä»–ã®ãƒ—ロトコル用㮠プロキシ機能をæŒã£ãŸã€ä»–ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«æŽ¥ç¶šã™ã‚‹ã‚ˆã†ã«ã‚‚設定ã§ãã¾ã™ã€‚

    Apache ã®ãƒ—ロキシ機能㯠mod_proxy ã®ä»–ã«ã€ ã„ãã¤ã‹ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«åˆ†å‰²ã•れã¦ã„ã¾ã™: mod_proxy_http, mod_proxy_ftp, mod_proxy_ajp, mod_proxy_balancer, mod_proxy_connect ã§ã™ã€‚ã§ã™ã‹ã‚‰ã€ 特定ã®ãƒ—ãƒ­ã‚­ã‚·ã®æ©Ÿèƒ½ã‚’使ã„ãŸã„å ´åˆã¯ã€mod_proxy 㨠該当ã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’サーãƒã« (コンパイル時ã«é™çš„ã«è¡Œãªã†ã‹ LoadModule ã§å‹•çš„ã«èª­ã¿è¾¼ã‚€ã‹ã—ã¦) 組ã¿è¾¼ã‚€å¿…è¦ãŒã‚りã¾ã™ã€‚

    ã“れã«åŠ ãˆã¦ã€ä»–ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ã‚ˆã£ã¦æ‹¡å¼µæ©Ÿèƒ½ãŒæä¾›ã•れã¦ã„ã¾ã™ã€‚ キャッシュ㯠mod_cache ã¨é–¢é€£ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ æä¾›ã•れã¦ã„ã¾ã™ã€‚SSL/TLS ã§é éš”サーãƒã«æŽ¥ç¶šã™ã‚‹æ©Ÿèƒ½ã¯ mod_ssl ã® SSLProxy* ディレクティブ㧠æä¾›ã•れã¦ã„ã¾ã™ã€‚ã“ã‚Œã‚‰ã®æ©Ÿèƒ½ã‚’利用ã™ã‚‹ãŸã‚ã«ã¯ã€è©²å½“ã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ 組ã¿è¾¼ã‚“ã§è¨­å®šã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    top

    フォワードプロキシã¨ãƒªãƒãƒ¼ã‚¹ãƒ—ロキシ

    Apache ã¯ãƒ•ォワードプロキシã¨ã—ã¦ã‚‚〠リãƒãƒ¼ã‚¹ãƒ—ロキシã¨ã—ã¦ã‚‚設定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    通常ã®ãƒ•ォワードプロキシã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ オリジンサーム(訳注: コンテンツ生æˆå…ƒã®ã‚µãƒ¼ãƒ) ã®é–“ã«ä½ç½®ã™ã‚‹ä¸­é–“サーãƒã§ã™ã€‚ オリジンサーãƒã‹ã‚‰ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’å–å¾—ã™ã‚‹éŽç¨‹ã§ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯ 行ãå…ˆã¨ã—ã¦ã‚ªãƒªã‚¸ãƒ³ã‚µãƒ¼ãƒã‚’指定ã—ã¤ã¤ãƒ—ロキシã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é€ã‚Šã€ プロキシã¯ã‚ªãƒªã‚¸ãƒ³ã‚µãƒ¼ãƒã‹ã‚‰ã‚³ãƒ³ãƒ†ãƒ³ãƒ„å–å¾—ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é€ã‚Šã€ コンテンツãŒå–å¾—ã§ãれã°ãれをクライアントã«è¿”ã—ã¾ã™ã€‚ クライアントãŒä»–ã®ã‚µã‚¤ãƒˆã«ãƒ•ォワードプロクシ経由ã§ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã«ã¯ã€ 特別ã«ãれ用ã®è¨­å®šã‚’ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    フォワードプロキシã®ä¸€èˆ¬çš„ãªä½¿ç”¨æ–¹æ³•ã¯ã€ãƒ•ァイアウォールã«ã‚ˆã£ã¦ 制é™ã•れã¦ã„る内部ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’ æä¾›ã™ã‚‹ã‚‚ã®ã§ã™ã€‚フォワードプロキシã¯ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®ä½¿ç”¨é‡ã‚’ 減らã™ãŸã‚ã« (mod_cache ã§æä¾›ã•れã¦ã„ã‚‹) キャッシュ機能を用ã„ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    フォワードプロキシ㯠ProxyRequests ディレクティブ㧠有効ã«ãªã‚Šã¾ã™ã€‚フォワードプロキシã§ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯æœ¬å½“ã®èº«å…ƒã‚’ éš ã—ã¦ä»»æ„ã®ã‚µã‚¤ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãるよã†ã«ãªã‚‹ãŸã‚ã€ãƒ•ォワードプロキシを 有効ã«ã™ã‚‹å‰ã«ã€æ‰¿èªã•れãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ã¿ãŒãƒ—ロキシã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãるよã†ã« サーãƒã‚’安全ã«ã™ã‚‹ã“ã¨ãŒé‡è¦ã§ã™ã€‚

    一方リãƒãƒ¼ã‚¹ãƒ—ロキシã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«ã¯æ™®é€šã® ウェブサーãƒã®ã‚ˆã†ã«è¦‹ãˆã¾ã™ã€‚クライアントå´ã«ç‰¹åˆ¥ãªè¨­å®šã¯å¿…è¦ã‚りã¾ã›ã‚“。 クライアントã¯ãƒªãƒãƒ¼ã‚¹ãƒ—ロキシã®åå‰ç©ºé–“ã«å¯¾ã—ã¦é€šå¸¸ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã¸ã® リクエストを行ãªã„ã¾ã™ã€‚プロキシã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ã©ã“ã«é€ã‚Œã°è‰¯ã„ã‹ã‚’判定ã—〠ã‚ãŸã‹ã‚‚自分自身ãŒã‚ªãƒªã‚¸ãƒ³ã‚µãƒ¼ãƒã§ã‚ã£ãŸã‹ã®ã‚ˆã†ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã« コンテンツを返ã—ã¾ã™ã€‚

    リãƒãƒ¼ã‚¹ãƒ—ロキシã®ã‚ˆãã‚る利用方法ã¯ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãƒ¦ãƒ¼ã‚¶ã« ファイアウォールã®ä¸­ã«ã‚るサーãƒã«ã‚¢ã‚¯ã‚»ã‚¹ã‚’与ãˆã‚‹ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚ リãƒãƒ¼ã‚¹ãƒ—ロキシã¯è¤‡æ•°ã®ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã¸è² è·åˆ†æ•£ã‚’ã™ã‚‹ãŸã‚㫠使ã£ãŸã‚Šã€é…ã„ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã®ãŸã‚ã«ã‚­ãƒ£ãƒƒã‚·ãƒ¥æ©Ÿèƒ½ã‚’æä¾›ã—ãŸã‚Š ã™ã‚‹ãŸã‚ã«ä½¿ãˆã¾ã™ã€‚ã¾ãŸã€ãƒªãƒãƒ¼ã‚¹ãƒ—ロキシã¯è¤‡æ•°ã®ã‚µãƒ¼ãƒã‚’ åŒã˜ URL 空間ã«ã¾ã¨ã‚ã‚‹ãŸã‚ã«ä½¿ã†ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    リãƒãƒ¼ã‚¹ãƒ—ロキシ㯠ProxyPass ディレクティブや RewriteRule ディレクティブ㮠[P] フラグを使ã†ã“ã¨ã§æœ‰åйã«ãªã‚Šã¾ã™ã€‚リãƒãƒ¼ã‚¹ãƒ—ロキシ㮠設定ã®ãŸã‚ã« ProxyRequests を設定ã™ã‚‹å¿…è¦ã¯ ã‚りã¾ã›ã‚“。

    top

    基本ã®ä¾‹

    以下ã®ä¾‹ã¯æ‰‹å§‹ã‚ã®ç°¡å˜ãªä¾‹ã§ã™ã€‚個々ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æ„味㯠ãれãžã‚Œã®èª¬æ˜Žã‚’ãŠèª­ã¿ãã ã•ã„。

    ã¾ãŸã‚­ãƒ£ãƒƒã‚·ãƒ¥æ©Ÿèƒ½ã‚’有効ã«ã—ãŸã„å ´åˆã¯ã€mod_cache ã®èª¬æ˜Žã‚’読んã§ãã ã•ã„。

    フォワードプロキシ

    ProxyRequests On
    ProxyVia On

    <Proxy *>
    Order deny,allow
    Deny from all
    Allow from internal.example.com
    </Proxy>

    リãƒãƒ¼ã‚¹ãƒ—ロキシ

    ProxyRequests Off

    <Proxy *>
    Order deny,allow
    Allow from all
    </Proxy>

    ProxyPass /foo http://foo.example.com/bar
    ProxyPassReverse /foo http://foo.example.com/bar

    top

    プロキシã¸ã®ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡

    プロキシã®ã‚¢ã‚¯ã‚»ã‚¹ã¯ä»¥ä¸‹ã®ã‚ˆã†ã« <Proxy> コンテナã®ä¸­ã« ディレクティブを書ãã“ã¨ã§åˆ¶å¾¡ã§ãã¾ã™:

    <Proxy *>
    Order Deny,Allow
    Deny from all
    Allow from 192.168.0
    </Proxy>

    アクセス制御ã®ãŸã‚ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®ã‚ˆã‚Šè©³ã—ã„æƒ…報㯠mod_authz_host ã‚’ãŠèª­ã¿ãã ã•ã„。

    (ProxyRequests ディレクティブを 使ã£ã¦) フォワードプロキシを設定ã—ã¦ã„ã‚‹å ´åˆã¯ã€å޳ã—ãアクセス 制é™ã‚’行ãªã†ã“ã¨ãŒéžå¸¸ã«å¤§åˆ‡ã§ã™ã€‚ãã†ã—ãªã„ã¨ã€ä»»æ„ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒ 身元を明ã‹ã™ã“ã¨ãªãä»»æ„ã®ãƒ›ã‚¹ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ãŸã‚ã«ã‚µãƒ¼ãƒã‚’使ã†ã“ã¨ãŒ ã§ãã¦ã—ã¾ã„ã¾ã™ã€‚ã“れã¯ã‚ãªãŸè‡ªèº«ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«ã¨ã£ã¦ã‚‚ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆ 全体ã«ã¨ã£ã¦ã‚‚å±é™ºãªã“ã¨ã§ã™ã€‚(ProxyRequests Off ã«ã—㦠ProxyPass ディレクティブを使ã£ã¦) リãƒãƒ¼ã‚¹ãƒ—ロキシを使ã£ã¦ã„ã‚‹å ´åˆã«ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯ã‚ãªãŸãŒæ˜Žç¤ºçš„㫠設定ã—ãŸãƒ›ã‚¹ãƒˆã«ã—ã‹ã‚¢ã‚¯ã‚»ã‚¹ã§ããªã„ãŸã‚ã€ãƒ•ォワードプロキシã®ã¨ã ã»ã©ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã«åŠ›ã‚’æ³¨ãŒãªãã¦ã‚‚大丈夫ã§ã™ã€‚

    top

    é…ã„èµ·å‹•

    ProxyBlock ディレクティブを使ã£ã¦ã„ã‚‹å ´åˆã€ 後ã®ãƒ†ã‚¹ãƒˆã®ãŸã‚ã«èµ·å‹•時ã«ãƒ›ã‚¹ãƒˆã® IP アドレスãŒèª¿ã¹ã‚‰ã‚Œã¦ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã•れã¾ã™ã€‚ホストåã®ãƒ«ãƒƒã‚¯ã‚¢ãƒƒãƒ—㮠速ã•ã«ã‚ˆã£ã¦ã¯ã€æ•°ç§’ (ã‹ãれ以上) ã‹ã‹ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。

    top

    イントラãƒãƒƒãƒˆãƒ—ロキシ

    イントラãƒãƒƒãƒˆã«ã‚ã‚‹ Apache プロキシサーãƒã¯å¤–部ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ 会社ã®ãƒ•ァイアウォールを通ã—ã¦é€ã‚‰ãªã‘れã°ãªã‚Šã¾ã›ã‚“。(ã“ã®ãŸã‚ã«ã¯ 個々㮠scheme ã«ã¤ã„ã¦ãれãžã‚Œã€ãƒ•ァイアウォール㮠プロキシã«ãƒ•ォワードã•れるよã†ã« ProxyRemote ディレクティブを 設定ã—ã¦ãã ã•ã„)。ã—ã‹ã—イントラãƒãƒƒãƒˆå†…ã®ãƒªã‚½ãƒ¼ã‚¹ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ãã¯ã€ ファイアウォールを通ã•ãªã„ã§ã‚‚アクセスã§ãã¾ã™ã€‚ ã©ã®ãƒ›ã‚¹ãƒˆãŒã‚¤ãƒ³ãƒˆãƒ©ãƒãƒƒãƒˆã«å±žã—ã€ç›´æŽ¥ã‚¢ã‚¯ã‚»ã‚¹ã™ã¹ãã‹ã‚’指定ã™ã‚‹ã«ã¯ã€ NoProxy ディレクティブ㌠役ã«ç«‹ã¡ã¾ã™ã€‚

    イントラãƒãƒƒãƒˆå†…ã®ãƒ¦ãƒ¼ã‚¶ã¯ WWW ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§ãƒ­ãƒ¼ã‚«ãƒ«ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’ çœç•¥ã™ã‚‹ã“ã¨ãŒã‚ˆãã‚りã¾ã™ã€‚http://somehost.example.com/ ã¨ã„ã†ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ä»£ã‚り㫠"http://somehost/" をリクエストã—ãŸã‚Šã—ã¾ã™ã€‚ ã“ã®ã‚ˆã†ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘付ã‘ã€ã‚µãƒ¼ãƒã«è¨­å®šã•れã¦ã„るローカルドメイン㌠暗黙ã®ã†ã¡ã«ä½¿ã‚れã¦ã„ã‚‹ã¨è§£é‡ˆã—ã¦ã€å˜ç´”ã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’処ç†ã™ã‚‹ã‚‚ã®ã‚‚ 商用プロキシサーãƒã®ä¸­ã«ã¯ã‚りã¾ã™ã€‚ サーãƒãŒ プロキシã®ã‚µãƒ¼ãƒ“ス用ã«è¨­å®šã•れã¦ã„㦠ProxyDomain ディレクティブ㌠使用ã•れãŸå ´åˆã«ã¯ã€Apache ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå¿œç­”ã‚’é€ã£ã¦ã€ æ­£ã—ã„ã€å®Œå…¨ãª ((訳注: fully qualified)) サーãƒã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã«é€ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã“ã®ã‚ˆã†ã« リダイレクトã™ã‚‹ã¨ã€ãƒ¦ãƒ¼ã‚¶ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãŒæ­£ã—ã„完全ãªãƒ›ã‚¹ãƒˆåã‚’å«ã‚€ ã“ã¨ã«ã‚‚ãªã‚‹ãŸã‚ã€ã‚ˆã‚Šå¥½ã¾ã—ã„æ–¹æ³•ã¨è¨€ãˆã‚‹ã§ã—ょã†ã€‚

    top

    プロトコルã®èª¿æ•´

    Keepalive ã‚„ HTTP/1.1 ã‚’é©åˆ‡ã«å®Ÿè£…ã—ã¦ã„ãªã„アプリケーションサーãƒã«å¯¾ã—㦠mod_proxy ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é€ä¿¡ã™ã‚‹å ´åˆã€ HTTP/1.0 を使ã£ã¦ keepalive ã‚’ç„¡ã—ã«ã—ã¦ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é€ã‚‹ã‚ˆã†ã«ã™ã‚‹ 環境変数ãŒäºŒã¤ã‚りã¾ã™ã€‚ã“れら㯠SetEnv ディレクティブã§è¨­å®šã—ã¾ã™ã€‚

    force-proxy-request-1.0 㨠proxy-nokeepalive ãŒãã®ç’°å¢ƒå¤‰æ•°ã§ã™ã€‚

    <Location /buggyappserver/>
    ProxyPass http://buggyappserver:7001/foo/
    SetEnv force-proxy-request-1.0 1
    SetEnv proxy-nokeepalive 1
    </Location>

    top

    リクエストボディ

    POST メソッドãªã©ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒœãƒ‡ã‚£ãŒã‚りã¾ã™ã€‚ HTTP プロトコル仕様ã«ã‚ˆã‚‹ã¨ã€ãƒœãƒ‡ã‚£ã®ã‚るリクエスト㯠chunked 転é€ã‚’使ã†ã‹ã€Content-Length ヘッダをé€ä¿¡ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 ã“ã®ã‚ˆã†ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’オリジンサーãƒã«é€ä¿¡ã™ã‚‹å ´åˆã€ mod_proxy_http ã¯å¸¸ã« Content-Length ã‚’é€ã‚ã†ã¨è©¦ã¿ã¾ã™ã€‚ã—ã‹ã—。ボディãŒå¤§ããã€ã‚ªãƒªã‚¸ãƒŠãƒ«ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§ chunked 転é€ãŒä½¿ã‚れã¦ã„ã‚‹å ´åˆã€ä¸Šæµã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã« chunked 転é€ã‚‚使ã‚れã¾ã™ã€‚ ã“ã®æŒ™å‹•㯠環境変数ã§åˆ¶å¾¡ã§ãã¾ã™ã€‚ proxy-sendcl を設定ã™ã‚‹ã¨ã€å¯èƒ½ãªé™ã‚Šå¸¸ã« Content-Length を付与ã—ã¦ã€ 上æµã‚µãƒ¼ãƒã«é€ä¿¡ã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ 逆㫠proxy-sendchunked を設定ã™ã‚‹ã¨ã€ãƒªã‚½ãƒ¼ã‚¹æ¶ˆè²»ã‚’抑ãˆã€ chnked エンコードを使ã£ã¦é€ä¿¡ã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚

    top

    BalancerGrowth ディレクティブ

    説明:Number of additional Balancers that can be added Post-configuration
    æ§‹æ–‡:BalancerGrowth #
    デフォルト:BalancerGrowth 5
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy
    äº’æ›æ€§:BalancerGrowth is only available in Apache HTTP Server 2.3.13 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    BalancerInherit ディレクティブ

    説明:Inherit ProxyPassed Balancers/Workers from the main server
    æ§‹æ–‡:BalancerInherit On|Off
    デフォルト:BalancerInherit On
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy
    äº’æ›æ€§:BalancerInherit is only available in Apache HTTP Server 2.4.5 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    BalancerMember ディレクティブ

    説明:Add a member to a load balancing group
    æ§‹æ–‡:
    コンテキスト:ディレクトリ
    ステータス:Extension
    モジュール:mod_proxy

    Documentation not yet translated. Please see English version of document.

    top

    BalancerPersist ディレクティブ

    説明:Attempt to persist changes made by the Balancer Manager across restarts.
    æ§‹æ–‡:BalancerPersist On|Off
    デフォルト:BalancerPersist Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy
    äº’æ›æ€§:BalancerPersist is only available in Apache HTTP Server 2.4.4 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    NoProxy ディレクティブ

    説明:直接接続ã™ã‚‹ ホストã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯
    æ§‹æ–‡:NoProxy host [host] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚¤ãƒ³ãƒˆãƒ©ãƒãƒƒãƒˆä¸­ã® Apache プロキシサーãƒã«ã®ã¿ 有用ã§ã™ã€‚NoProxy ディレクティブã¯ç©ºç™½åŒºåˆ‡ã‚Šã§ã€ サブãƒãƒƒãƒˆã€IP アドレスã€ãƒ›ã‚¹ãƒˆã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ãƒªã‚¹ãƒˆã‚’指定ã—ã¾ã™ã€‚ ã“れらã®ã©ã‚Œã‹ã«ãƒžãƒƒãƒã™ã‚‹ãƒ›ã‚¹ãƒˆã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ ProxyRemote ã§è¨­å®šã•れãŸãƒ—ロキシサーãƒã« フォワードã•れãšã€ç›´æŽ¥å‡¦ç†ã•れã¾ã™ã€‚

    例

    ProxyRemote * http://firewall.mycompany.com:81
    NoProxy .mycompany.com 192.168.112.0/21

    NoProxy ディレクティブ㮠host 引数㯠以下ã®ç¨®é¡žã®ã©ã‚Œã‹ã§ã™:

    Domain

    Domain ã¯å…ˆé ­ã«ãƒ”リオドã®ç€ã„ãŸéƒ¨åˆ† DNS ドメインåã§ã™ã€‚ åŒä¸€ DNS ドメインåŠã³ã‚¾ãƒ¼ãƒ³ (ã™ãªã‚ã¡ã€ãƒ›ã‚¹ãƒˆåã®æœ«å°¾ãŒã™ã¹ã¦ Domain ã§çµ‚ã‚ã£ã¦ã„ã‚‹ã¨ã„ã†ã“ã¨) ã«å±žã™ã‚‹ãƒ›ã‚¹ãƒˆã®ãƒªã‚¹ãƒˆã‚’ 表ã—ã¾ã™)。

    例

    .com .apache.org.

    Domain ã‚’ Hostname ã¨åŒºåˆ¥ã™ã‚‹ãŸã‚ã« (æ„味的ã«ã‚‚構文的ã«ã‚‚。DNS ドメインも DNS ã® A レコードをæŒã¤ã“ã¨ãŒã§ãã‚‹ã®ã§ã™!)ã€Domain 㯠常ã«ãƒ”リオドã§å§‹ã¾ã‚Šã¾ã™ã€‚

    注

    ドメインåã®æ¯”較ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã«è¡Œãªã‚れã€Domain ã¯å¸¸ã« DNS ツリーã®ãƒ«ãƒ¼ãƒˆã‹ã‚‰å§‹ã¾ã‚‹ã‚‚ã®ã¨ã¿ãªã•れã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€ 次ã®äºŒã¤ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ .MyDomain.com 㨠.mydomain.com. (最後ã®ãƒ”ãƒªã‚ªãƒ‰ã«æ³¨ç›®) ã¯åŒä¸€ã§ã‚る㨠ã¿ãªã•れã¾ã™ã€‚ãƒ‰ãƒ¡ã‚¤ãƒ³ã®æ¯”較㯠DNS ルックアップãªã—ã§è¡Œãªã‚れるãŸã‚〠サブãƒãƒƒãƒˆã®æ¯”較よりもãšã£ã¨åŠ¹çŽ‡çš„ã§ã™ã€‚

    SubNet

    SubNet ã¯æ•°å€¤å½¢å¼ (ドットã§åŒºåˆ‡ã‚‰ã‚ŒãŸå››ã¤ã®æ•°å­—) 㮠部分インターãƒãƒƒãƒˆã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã™ã€‚後ã«ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã¨ Subnet ã®æ„味ã®ã‚るビット数を指定ã™ã‚‹ãƒãƒƒãƒˆãƒžã‚¹ã‚¯ã¨ã‚’ç¶šã‘ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ 共通ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¤ãƒ³ã‚¿ãƒ•ェースを使ã£ã¦åˆ°é”ã™ã‚‹ã“ã¨ã®ã§ãるサブãƒãƒƒãƒˆã‚’ 表ã™ãŸã‚ã«ä½¿ã‚れã¾ã™ã€‚明示的ã«ãƒãƒƒãƒˆãƒžã‚¹ã‚¯ã‚’指定ã—ãªã„å ´åˆã¯ 最後ã®çœç•¥ã•れ㟠(ã‚‚ã—ãã¯å€¤ãŒ 0 ã®) æ•°å­—ãŒãƒžã‚¹ã‚¯ã‚’指定ã—ã¾ã™ã€‚ (ã“ã®å ´åˆã¯ã€ãƒãƒƒãƒˆãƒžã‚¹ã‚¯ã¯ 8 ビットå˜ä½ã§ã—ã‹æŒ‡å®šã§ãã¾ã›ã‚“。) 例:

    192.168 ã‚‚ã—ã㯠192.168.0.0
    サブãƒãƒƒãƒˆ 192.168.0.0 ã¨æš—黙㮠16 ビット有効ãªãƒãƒƒãƒˆãƒžã‚¹ã‚¯ (255.255.0.0 ã¨ã„ã†ãƒãƒƒãƒˆãƒžã‚¹ã‚¯ã®å½¢å¼ã§ä½¿ã‚れるã“ã¨ã‚‚ ã‚りã¾ã™)
    192.168.112.0/21
    サブãƒãƒƒãƒˆ192.168.112.0/21 㨠21 ビット有効㪠ãƒãƒƒãƒˆãƒžã‚¹ã‚¯ (255.255.248.0 ã¨ã„ã†å½¢å¼ã§ä½¿ã‚れるã“ã¨ã‚‚ ã‚りã¾ã™)

    特別ãªå ´åˆã«ã€32 ビット有効㪠SubNet 㯠IPAddr ã¨åŒç­‰ã§ã€ 0 ビット有効㪠SubNet (例ãˆã°ã€0.0.0.0/0) 㯠ã™ã¹ã¦ã® IP アドレスã«ãƒžãƒƒãƒã™ã‚‹å®šæ•° _Default_ ã¨åŒã˜ã§ã™ã€‚

    IPAddr

    IPAddr ã¯æ•°å€¤å½¢å¼ (ドットã§åŒºåˆ‡ã‚‰ã‚ŒãŸå››ã¤ã®æ•°å­—) 㮠完全インターãƒãƒƒãƒˆã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã™ã€‚通常ã¯ã“ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã¯ãƒ›ã‚¹ãƒˆã‚’ 表ã—ã¾ã™ãŒã€å¿…ãšã—もアドレスã«å¯¾å¿œã™ã‚‹ DNS ドメインåãŒã‚ã‚‹ã‚ã‘ã§ã¯ ã‚りã¾ã›ã‚“。

    例

    192.168.123.7

    注

    IPAddr 㯠DNS システムã«ã‚ˆã‚Šè§£æ±ºã•れる必è¦ãŒãªã„ã®ã§ã€ apache ã®æ€§èƒ½ãŒå‘上ã™ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。

    Hostname

    Hostname 㯠DNS ドメインサービスã«ã‚ˆã‚Šä¸€ã¤ã‚‚ã—ã㯠複数㮠IPAddr ã«è§£æ±ºå¯èƒ½ãª 完全㪠DNS ドメインåã§ã™ã€‚ã“れ㯠(Domain ã¨é•ã£ã¦ã€èª¬æ˜Žã¯ä¸Šè¨˜ã‚’å‚ç…§) è«–ç†çš„ãªãƒ›ã‚¹ãƒˆã‚’表ã—ã€å°‘ãã¨ã‚‚一ã¤ã® IPAddr (ã‚‚ã—ãã¯é•ㆠIPAddr ã®ãƒ›ã‚¹ãƒˆã®ãƒªã‚¹ãƒˆ) ã«è§£æ±º ã•れãªã‘れã°ãªã‚Šã¾ã›ã‚“)。

    例

    prep.ai.mit.edu
    www.apache.org

    注

    多ãã®å ´åˆã€Hostname ã®ä»£ã‚り㫠IPAddr を指定ã—ãŸæ–¹ãŒã€DNS ルックアップを é¿ã‘ã‚‹ã“ã¨ãŒã§ãã‚‹ãŸã‚ã€åŠ¹çŽ‡ãŒè‰¯ããªã‚Šã¾ã™ã€‚Apache ã®åå‰è§£æ±ºã¯ ãƒãƒ¼ãƒ ã‚µãƒ¼ãƒã¸ã®æŽ¥ç¶šãŒé…ã„ PPP 上ã®å ´åˆãªã©ã«ã‹ãªã‚Šæ™‚é–“ã‚’å–られる ã“ã¨ãŒã‚りã¾ã™ã€‚

    Hostname ã®æ¯”較ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã«è¡Œãªã‚れ〠Hostname ã¯å¸¸ã« DNS ツリーã®ãƒ«ãƒ¼ãƒˆã‹ã‚‰å§‹ã¾ã‚‹ã‚‚ã®ã¨ã¿ãªã•れã¾ã™ã€‚ ã§ã™ã‹ã‚‰ã€äºŒã¤ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ WWW.MyDomain.com 㨠www.mydomain.com. (最後ã®ãƒ”ãƒªã‚ªãƒ‰ã«æ³¨ç›®) ã¯åŒä¸€ã§ã‚る㨠ã¿ãªã•れã¾ã™ã€‚

    å‚ç…§

    top

    <Proxy> ディレクティブ

    説明:プロキシã•れるリソースã«é©ç”¨ã•れるコンテナ
    æ§‹æ–‡:<Proxy wildcard-url> ...</Proxy>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy

    <Proxy> セクション中㮠ディレクティブã¯ãƒžãƒƒãƒã™ã‚‹ãƒ—ロキシã•れるコンテンツã«ã®ã¿é©ç”¨ã•れã¾ã™ã€‚ シェル形å¼ã®ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ãŒä½¿ãˆã¾ã™ã€‚

    例ãˆã°ã€æ¬¡ã®è¨­å®šã¯ yournetwork.example.com 㮠ホストã«ã®ã¿ãƒ—ロキシサーãƒã‚’経由ã—ãŸã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã—ã¾ã™:

    <Proxy *>
    Order Deny,Allow
    Deny from all
    Allow from yournetwork.example.com
    </Proxy>

    次ã®ä¾‹ã¯ example.com ã® foo ディレクトリ㮠ã™ã¹ã¦ã®ãƒ•ァイルã«å¯¾ã—ã¦ã€ãƒ—ロキシサーãƒã‚’通ã—ã¦é€ã‚‰ã‚ŒãŸã¨ãã«ã¯ INCLUDES フィルタを通ã—ã¦é€ã‚‹ã‚ˆã†ã«è¨­å®šã—ã¾ã™:

    <Proxy http://example.com/foo/*>
    SetOutputFilter INCLUDES
    </Proxy>

    top

    Proxy100Continue ディレクティブ

    説明:Forward 100-continue expectation to the origin server
    æ§‹æ–‡:Proxy100Continue Off|On
    デフォルト:Proxy100Continue On
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Extension
    モジュール:mod_proxy
    äº’æ›æ€§:Available in version 2.4.39 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    ProxyAddHeaders ディレクティブ

    説明:Add proxy information in X-Forwarded-* headers
    æ§‹æ–‡:ProxyAddHeaders Off|On
    デフォルト:ProxyAddHeaders On
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Extension
    モジュール:mod_proxy
    äº’æ›æ€§:Available in version 2.3.10 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    ProxyBadHeader ディレクティブ

    説明:応答ã«ãŠã‹ã—ãªãƒ˜ãƒƒãƒ€ãŒã‚ã‚‹å ´åˆã®æ‰±ã„方を決ã‚ã‚‹
    æ§‹æ–‡:ProxyBadHeader IsError|Ignore|StartBody
    デフォルト:ProxyBadHeader IsError
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy
    äº’æ›æ€§:2.0.44 以é™

    ProxyBadHeader ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯æ§‹æ–‡çš„ã« é–“é•ã£ãŸãƒ˜ãƒƒãƒ€ (ã¤ã¾ã‚Š ã‚³ãƒ­ãƒ³ã‚’å«ã¾ãªã„ã‚‚ã®) ã‚’å—ã‘å–ã£ãŸã¨ãã« mod_proxy ãŒã©ã†æŒ¯ã‚‹èˆžã†ã‹ã‚’決ã‚ã¾ã™ã€‚以下ã®å¼•æ•°ã‚’ å–ã‚‹ã“ã¨ãŒã§ãã¾ã™:

    IsError
    リクエストを中止ã—㦠502 (Bad Gateway) 応答を返ã™ã€‚ ã“れãŒãƒ‡ãƒ•ォルトã®å‹•作ã§ã™ã€‚
    Ignore
    é–“é•ã£ãŸãƒ˜ãƒƒãƒ€è¡Œã‚’ãã‚‚ãも存在ã—ãªã‹ã£ãŸã‚‚ã®ã¨ã—ã¦æ‰±ã†ã€‚
    StartBody
    é–“é•ã£ãŸãƒ˜ãƒƒãƒ€è¡Œã‚’å—ã‘å–ã£ãŸã‚‰ã€ãƒ˜ãƒƒãƒ€ã®èª­ã¿è¾¼ã¿ã‚’終了ã—ã¦ã€ ãれ以é™ã®æ®‹ã‚Šã‚’ボディã¨ã—ã¦æ‰±ã†ã€‚ã“れã¯ãƒ˜ãƒƒãƒ€ã¨ãƒœãƒ‡ã‚£ã®é–“ã«ç©ºè¡Œã‚’入れ忘れ㦠ã—ã¾ã£ã¦ã„るよã†ãªã€ãã¡ã‚“ã¨å‹•作ã—ã¦ã„ãªã„ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒãŒã‚ã‚‹ã¨ãã«ã€ å•題を回é¿ã™ã‚‹ã®ã«å½¹ã«ç«‹ã¡ã¾ã™ã€‚
    top

    ProxyBlock ディレクティブ

    説明:ãƒ—ãƒ­ã‚­ã‚·æŽ¥ç¶šã‚’ç¦æ­¢ã™ã‚‹èªžå¥ã€ãƒ›ã‚¹ãƒˆåã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’指定ã™ã‚‹
    æ§‹æ–‡:ProxyBlock *|word|host|domain [word|host|domain] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy

    ProxyBlock ディレクティブã¯ç©ºç™½ã§åŒºåˆ‡ã‚‰ã‚ŒãŸ 語å¥ã€ãƒ›ã‚¹ãƒˆåã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ãƒªã‚¹ãƒˆã‚’指定ã—ã¾ã™ã€‚サイトåã«ãã®èªžå¥ã€ãƒ›ã‚¹ãƒˆå〠ドメインをå«ã‚€ã‚µã‚¤ãƒˆã¸ã® HTTPã€HTTPSã€FTP ã«ã‚ˆã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ プロキシサーãƒã«ã‚ˆã‚Šãƒ–ロックã•れã¾ã™ã€‚プロキシモジュール㯠起動時ã«ãƒ›ã‚¹ãƒˆåã¨æ€ã—ã項目㮠IP アドレスを調ã¹ã€å¾Œã®ãƒ†ã‚¹ãƒˆã®ãŸã‚㫠キャッシュã—ã¾ã™ã€‚ã“れã«ã‚ˆã‚Šã€ã‚µãƒ¼ãƒã®èµ·å‹•ãŒå°‘ã—é…ããªã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。

    Example

    ProxyBlock joes-garage.com some-host.co.uk rocky.wotsamattau.edu

    rocky.wotsamattau.edu ㌠IP アドレスã§å‚ç…§ã•れãŸã¨ãã§ã‚‚ マッãƒã—ã¾ã™ã€‚

    wotsamattau.edu ã®ãƒžãƒƒãƒã«ã¯ wotsamattau ã ã‘ã§ã‚‚å分ã§ã™ã€‚

    ProxyBlock *

    ã¯ã™ã¹ã¦ã®ã‚µã‚¤ãƒˆã¸ã®æŽ¥ç¶šã‚’ブロックã™ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。

    top

    ProxyDomain ディレクティブ

    説明:プロキシã•れãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ‡ãƒ•ォルトã®ãƒ‰ãƒ¡ã‚¤ãƒ³å
    æ§‹æ–‡:ProxyDomain Domain
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚¤ãƒ³ãƒˆãƒ©ãƒãƒƒãƒˆå†…ã® Apache プロキシサーãƒã«ã®ã¿ 有用ã§ã™ã€‚ProxyDomain ディレクティブ㯠apache プロキシサーãƒãŒå±žã™ã‚‹ãƒ‡ãƒ•ォルトã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’指定ã—ã¾ã™ã€‚ ドメインåã®ç„¡ã„リクエストをå—ã‘ãŸå ´åˆã€è¨­å®šã•れ㟠Domain ãŒè¿½åŠ ã•れãŸåŒã˜ãƒ›ã‚¹ãƒˆã¸ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå¿œç­”ãŒè¿”ã•れã¾ã™ã€‚

    例

    ProxyRemote * http://firewall.mycompany.com:81
    NoProxy .mycompany.com 192.168.112.0/21
    ProxyDomain .mycompany.com

    top

    ProxyErrorOverride ディレクティブ

    説明:プロキシã•れãŸã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®ã‚¨ãƒ©ãƒ¼ãƒšãƒ¼ã‚¸ã‚’上書ãã™ã‚‹
    æ§‹æ–‡:ProxyErrorOverride On|Off
    デフォルト:ProxyErrorOverride Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy
    äº’æ›æ€§:ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.0 以é™ã§ä½¿ç”¨å¯èƒ½

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãƒªãƒãƒ¼ã‚¹ãƒ—ロキシを使用ã—ã¦ã„ã¦ã€ エンドユーザã«é€ã‚‰ã‚Œã‚‹ã‚¨ãƒ©ãƒ¼ãƒšãƒ¼ã‚¸ã®å¤–見を共通ã®ã‚‚ã®ã«ã—ãŸã„ã¨ã㫠有用ã§ã™ã€‚ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠(mod_include ã® SSI ã«ã‚ˆã£ã¦) インクルードã•れãŸãƒ•ァイルãŒã‚¨ãƒ©ãƒ¼ã‚³ãƒ¼ãƒ‰ã‚’å–å¾—ã—ã¦ã€æ­£ã—ã動作を ã™ã‚‹ã‚ˆã†ã«ã‚‚ã—ã¾ã™ (デフォルトã®å‹•作ã¯ã€ãƒ—ロキシã•れãŸã‚µãƒ¼ãƒã® エラーページã®è¡¨ç¤ºã§ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を有効ã«ã™ã‚‹ã¨ SSI ã®ã‚¨ãƒ©ãƒ¼ メッセージを表示ã—ã¾ã™)。

    top

    ProxyIOBufferSize ディレクティブ

    説明:内部データスループットãƒãƒƒãƒ•ã‚¡ã®ã‚µã‚¤ã‚ºã‚’決定ã™ã‚‹
    æ§‹æ–‡:ProxyIOBufferSize bytes
    デフォルト:ProxyIOBufferSize 8192
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy

    ProxyIOBufferSize ディレクティブã¯å…¥åŠ›ã¨ å‡ºåŠ›ç”¨ã®ä¸€æ™‚メモリã¨ã—ã¦ä½¿ã‚れる内部ãƒãƒƒãƒ•ã‚¡ã®ã‚µã‚¤ã‚ºã‚’調整ã—ã¾ã™ã€‚ サイズ㯠8192 以下ã§ãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    ã»ã¨ã‚“ã©ã™ã¹ã¦ã®å ´åˆã€ã“ã®å€¤ã‚’変更ã™ã‚‹ç†ç”±ã¯ã‚りã¾ã›ã‚“。

    top

    <ProxyMatch> ディレクティブ

    説明:æ­£è¦è¡¨ç¾ã§ã®ãƒžãƒƒãƒã«ã‚ˆã‚‹ãƒ—ロキシリソース用ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–コンテナ
    æ§‹æ–‡:<ProxyMatch regex> ...</ProxyMatch>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy

    <ProxyMatch> 㯠URL ã®ãƒžãƒƒãƒã« æ­£è¦è¡¨ç¾ を用ã„ã‚‹ã“ã¨ã‚’除ã„㦠<Proxy> ディレクティブã¨åŒã˜ã§ã™ã€‚

    top

    ProxyMaxForwards ディレクティブ

    説明:リクエストãŒãƒ•ォワードã•ã‚Œã‚‹ãƒ—ãƒ­ã‚­ã‚·ã®æœ€å¤§æ•°
    æ§‹æ–‡:ProxyMaxForwards number
    デフォルト:ProxyMaxForwards 10
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy
    äº’æ›æ€§:Apache 2.0 以é™ã§ä½¿ç”¨å¯èƒ½

    ProxyMaxForwards ディレクティブ㯠リクエスト㫠Max-Forwards ãƒ˜ãƒƒãƒ€ãŒæŒ‡å®šã•れã¦ã„ãªã„å ´åˆã« リクエストãŒé€šéŽå¯èƒ½ãªãƒ—ãƒ­ã‚­ã‚·ã®æœ€å¤§æ•°ã‚’設定ã—ã¾ã™ã€‚ã“れ㯠プロキシã®ç„¡é™ãƒ«ãƒ¼ãƒ—ã‚„ DoS 攻撃を防ããŸã‚ã«è¨­å®šã•れã¦ã„ã¾ã™ã€‚

    例

    ProxyMaxForwards 15

    top

    ProxyPass ディレクティブ

    説明:リモートサーãƒã‚’ローカルサーãƒã® URL 空間ã«ãƒžãƒƒãƒ—ã™ã‚‹
    æ§‹æ–‡:ProxyPass [path] !|url [key=value key=value ...]]
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Extension
    モジュール:mod_proxy

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãƒªãƒ¢ãƒ¼ãƒˆã‚µãƒ¼ãƒã‚’ローカルサーãƒã®åå‰ç©ºé–“㫠マップã§ãるよã†ã«ã—ã¾ã™ã€‚ローカルサーãƒã¯é€šå¸¸ã®æ„味ã§ã®ãƒ—ロキシ㨠ã—ã¦ã¯å‹•作ã›ãšã€ãƒªãƒ¢ãƒ¼ãƒˆã‚µãƒ¼ãƒã®ãƒŸãƒ©ãƒ¼ã¨ã—ã¦æŒ¯ã‚‹èˆžã„ã¾ã™ã€‚ path ã¯ãƒ­ãƒ¼ã‚«ãƒ«ã®ä»®æƒ³ãƒ‘スã®åå‰ã§ã™ã€‚url 㯠リモートサーãƒã®éƒ¨åˆ† URL ã«ãªã‚Šã€ã‚¯ã‚¨ãƒªãƒ¼æ–‡å­—列をå«ã‚€ã“ã¨ã¯ã§ãã¾ã›ã‚“。

    ProxyPass ディレクティブを 使ã£ã¦ã„ã‚‹ã¨ã㯠ProxyRequests ディレクティブã¯é€šå¸¸ã¯ off ã«è¨­å®šã•れã¦ã„ã‚‹ã¹ãã§ã™ã€‚

    ローカルサーãƒã®ã‚¢ãƒ‰ãƒ¬ã‚¹ãŒ http://example.com/ ã§ã‚る㨠ã—ã¾ã™ã€‚ã™ã‚‹ã¨ã€

    ProxyPass /mirror/foo/ http://backend.example.com/

    ã¨è¨­å®šã™ã‚‹ã¨ http://example.com/mirror/foo/bar ã¸ã® リクエストãŒå†…部的㫠http://backend.example.com/bar ã¸ã® プロキシリクエストã«å¤‰æ›ã•れるã“ã¨ã«ãªã‚Šã¾ã™ã€‚

    サブディレクトリをリãƒãƒ¼ã‚¹ãƒ—ロキシã—ãŸããªã„ã¨ãã« ! 㯠役ã«ç«‹ã¡ã¾ã™ã€‚例ãˆã°ã€

    ProxyPass /mirror/foo/i !
    ProxyPass /mirror/foo http://backend.example.com

    㯠/mirror/foo/i を除ã /mirror/foo ã¸ã®ã™ã¹ã¦ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ backend.example.com ã«ãƒ—ロキシã—ã¾ã™ã€‚

    注

    順番ã¯é‡è¦ã§ã™ã€‚一般的㪠ProxyPass ディレクティブã®å‰ã« 除外ディレクティブを置ãå¿…è¦ãŒã‚りã¾ã™ã€‚

    2.1 ã®æ©Ÿèƒ½ã§ã€ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã¨ã®æŽ¥ç¶šã«ãƒ—ールã•れãŸã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’ 使ãˆã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚key=value å½¢å¼ã®ãƒ‘ラメータ㧠ã“ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ãƒ—ーリングã®èª¿æ•´ãŒã§ãã¾ã™ã€‚Hard Maximum ã®ãƒ‡ãƒ•ォルト値ã¯ã€æœ‰åйã«ãªã£ã¦ã„ã‚‹ MPM ã§ã®ãƒ—ロセス当ãŸã‚Šã®ã‚¹ãƒ¬ãƒƒãƒ‰æ•°ã¨ åŒã˜æ•°ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³æ•°ã§ã™ã€‚prefork MPM ã§ã¯é€šå¸¸ã¯ 1 ã§ã€worker MPM ã§ã¯ ThreadsPerChild ã§èª¿æ•´ã•れã¾ã™ã€‚

    min ã®è¨­å®šã§ã€ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã¨ã®é–“ã«ä½•本ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’ 常時開ãã‹ãŒæ±ºã¾ã‚Šã¾ã™ã€‚Soft Maximum smax ã®æ•°ã« é”ã™ã‚‹ã¾ã§å¿…è¦ã«å¿œã˜ã¦ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã¯ç”Ÿæˆã•れã¾ã™ã€‚smax ã‚’è¶…ãˆãŸæ•°ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã¯ã€ç”Ÿå­˜æ™‚é–“ ttl ã§åˆ‡æ–­ã•れã¾ã™ã€‚ ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã¨ Hard Maximum max ã®æ•°ä»¥ä¸Šã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’ 生æˆã™ã‚‹ã“ã¨ã¯ã‚りã¾ã›ã‚“。

    ProxyPass /example http://backend.example.com smax=5 max=20 ttl=120 retry=300

    パラメータ デフォルト値 説明
    min 0 ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã¨ã®æŽ¥ç¶šã§ 常ã«é–‹ã„ã¦ã„るコãƒã‚¯ã‚·ãƒ§ãƒ³æ•°ã®æœ€å°å€¤
    max 1...n ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã¨ã®æŽ¥ç¶šæ•°ã® Hard Maximum (訳注: ãƒãƒ¼ãƒ‰ãƒªãƒŸãƒƒãƒˆ)。 デフォルト値ã¯ã€ä½¿ç”¨ã—ã¦ã„ã‚‹ MPM ã®ãƒ—ロセスã‚ãŸã‚Šã®ã‚¹ãƒ¬ãƒƒãƒ‰æ•°ã«ãªã£ã¦ã„ã¾ã™ã€‚ Prefork MPM ã§ã¯å¸¸ã« 1 ã§ã€Worker MPM ã§ã¯ ThreadsPerChild ã§èª¿ç¯€ã§ãã¾ã™ã€‚Hard Maximum 以上ã«ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã¨ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’ 生æˆã™ã‚‹ã“ã¨ã¯ã‚りã¾ã›ã‚“。
    smax max 接続数㮠Soft Maximum (訳注: ソフトリミット)ã¾ã§ã€ コãƒã‚¯ã‚·ãƒ§ãƒ³ã¯å¿…è¦ã«å¿œã˜ã¦ç”Ÿæˆã•れã¾ã™ã€‚ smax ã‚’è¶…ãˆãŸæ•°ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã¯ç”Ÿå­˜æ™‚é–“ ttl ã§åˆ‡æ–­ã•れã¾ã™ã€‚
    ttl - smax æ•°ã‚’è¶…ãˆãŸéžæ´»å‹•状態ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã®ç”Ÿå­˜æ™‚é–“ã‚’ã€ ç§’ã§æŒ‡å®šã—ã¾ã™ã€‚ã“ã®æœŸé–“内ã«ä½¿ç”¨ã•れãªã‹ã£ãŸã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã¯ã€ å…¨ã¦é–‰ã˜ã‚‰ã‚Œã¾ã™ã€‚
    timeout Timeout コãƒã‚¯ã‚·ãƒ§ãƒ³ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã‚’ç§’ã§æŒ‡å®šã—ã¾ã™ã€‚ç‰¹ã«æŒ‡å®šã•れãªã‘れã°ã€ フリーãªã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’å–å¾—ã§ãã‚‹ã¾ã§å¾…ã¡ã¾ã™ã€‚ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠max パラメータã¨åˆã‚ã›ã¦ä½¿ã†ã“ã¨ã§ã€ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã¨ã® 接続数を制御ã™ã‚‹ã®ã«ä½¿ã„ã¾ã™ã€‚
    acquire - 設定ã™ã‚‹ã¨ã€ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ãƒ—ールã‹ã‚‰ãƒ•リーã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’å–å¾—ã™ã‚‹ãŸã‚㫠待機ã™ã‚‹å¾…ã¡æ™‚é–“ã®æœ€å¤§å€¤ã«ãªã‚Šã¾ã™ã€‚フリーã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ãŒãƒ—ールã«ãªã‹ã£ãŸå ´åˆã¯ã€ SERVER_BUSY ステータスãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«è¿”ã•れã¾ã™ã€‚
    keepalive Off ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã¨ Apache ã®é–“ã«ãƒ•ァイアーウォールãŒã‚ã‚‹å ´åˆã«ã¯ã€ ã“ã®ãƒ‘ラメータを使ã£ã¦ãã ã•ã„。ファイアウォールã¯å¾€ã€…ã«ã—ã¦ã€ éžæ´»å‹•状態ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’è½ã¨ãã†ã¨ã—ã¾ã™ã€‚ ã“ã®ãƒ•ラグ㯠OS ã«æŒ‡ç¤ºã—ã¦ã€KEEP_ALIVE ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’éžæ´»å‹•状態㮠コãƒã‚¯ã‚·ãƒ§ãƒ³ã§ã‚‚é€ã‚‹ã‚ˆã†ã«ã—ã¾ã™ (間隔㯠OS ã®ã‚°ãƒ­ãƒ¼ãƒãƒ«è¨­å®šã«ä¾å­˜ã—〠通常㯠120ms é–“éš”) 。ã“れã«ã‚ˆã£ã¦ãƒ•ァイアウォールã«ã‚ˆã£ã¦ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ãŒ è½ã¨ã•れるã“ã¨ã‚’防ã’ã¾ã™ã€‚keepalive を有効ã«ã™ã‚‹ã«ã¯ã€ã“ã®ãƒ—ロパティを On ã«ã—ã¦ãã ã•ã„。
    retry 60 コãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’プーリングã™ã‚‹ãŸã‚ã®ã€ãƒªãƒˆãƒ©ã‚¤ã®ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã‚’秒㧠指定ã—ã¾ã™ã€‚ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã¸ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ãƒ—ーリングãŒå¤±æ•—ã—ãŸå ´åˆã¯ã€ ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã®æœŸé–“ãŒéŽãŽã‚‹ã¾ã§ã€ãã®ã‚µãƒ¼ãƒã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’フォワードã—ã¾ã›ã‚“。 ã“ã®æ©Ÿèƒ½ã‚’使ã†ã¨ã€ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã‚’メンテナンスã®ãŸã‚ã«ã‚·ãƒ£ãƒƒãƒˆãƒ€ã‚¦ãƒ³ã—〠後ã§ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã«å¾©å¸°ã•ã›ã‚‹ã¨ã„ã£ãŸã“ã¨ãŒã§ãã¾ã™ã€‚
    loadfactor 1 ワーカーã‚ãŸã‚Šã®è² è·ä¿‚æ•°ã§ã™ã€‚BalancerMember ã§ä½¿ã„ã¾ã™ã€‚ 1 ã‹ã‚‰ 100 ã¾ã§ã®æ•°å­—ã§ãã®ãƒ¯ãƒ¼ã‚«ãƒ¼ã«å¯¾ã™ã‚‹æ­£è¦åŒ–ã•れãŸè² è·çŽ‡ã‚’æŒ‡å®šã—ã¾ã™ã€‚
    route - ロードãƒãƒ©ãƒ³ã‚µã§ä½¿ã£ãŸå ´åˆã€ãƒ¯ãƒ¼ã‚«ãƒ¼ã®ãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚’ã—ã¾ã™ã€‚ ルートã¯ã‚»ãƒƒã‚·ãƒ§ãƒ³ ID ã«ä»˜åŠ ã•れãŸå€¤ã«ãªã‚Šã¾ã™ã€‚
    redirect - ワーカーã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ã‚·ãƒ§ãƒ³çµŒè·¯ã§ã™ã€‚ã“ã®å€¤ã¯é€šå¸¸ã¯ã€ 安全ã«ã‚¯ãƒ©ã‚¹ã‚¿ã‹ã‚‰ãƒŽãƒ¼ãƒ‰ã‚’å–り去る設定を動的ã«å…¥ã‚Œã‚‹ãŸã‚ã«ä½¿ã„ã¾ã™ã€‚ セッション ID ã®ç„¡ã„リクエスト全ã¦ã‚’指定ã—ãŸå ´åˆã¯ã€ ã“ã®å€¤ã¨åŒã˜ãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ãƒ‘ラメータをæŒã¤ BalancerMember ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•れã¾ã™ã€‚

    Proxy ディレクティブã®ã‚¹ã‚­ãƒ¼ãƒ ãŒ balancer:// ã«ãªã£ã¦ã„ã‚‹å ´åˆã¯ã€ ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã¨å®Ÿéš›ã«ã¯é€šä¿¡ã—ãªã„仮想ワーカーãŒç”Ÿæˆã•れã¾ã™ã€‚ ã“ã®ãƒ¯ãƒ¼ã‚«ãƒ¼ã¯å¹¾ã¤ã‹ã® "本物ã®" ワーカーã®ç®¡ç†ã‚’ã¤ã‹ã•ã©ã‚Šã¾ã™ã€‚ ã“ã®å ´åˆãƒ‘ラメータã¯ã€ã“ã®ä»®æƒ³ãƒ¯ãƒ¼ã‚«ãƒ¼ã«å¯¾ã—ã¦è¨­å®šã•れã¾ã™ã€‚

    パラメータ デフォルト値 説明
    lbmethod - Balancer ã®ãƒ­ãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹æ–¹æ³•。使用ã™ã‚‹ãƒ­ãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹ã® スケジューリング方法をé¸ã³ã¾ã™ã€‚処ç†ã—ãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æ•°ã§é‡ã¿ä»˜ã‘ã™ã‚‹ byrequests ã‹ã€è»¢é€é‡ã®ãƒã‚¤ãƒˆæ•°ã§é‡ã¿ä»˜ã‘ã™ã‚‹ bytraffic を設定ã§ãã¾ã™ã€‚デフォルト㯠byrequests ã§ã™ã€‚
    stickysession - ãƒãƒ©ãƒ³ã‚µãƒ¼ã®ã‚¹ãƒ†ã‚£ãƒƒã‚­ãƒ¼ã‚»ãƒƒã‚·ãƒ§ãƒ³åã§ã™ã€‚通常ã¯ã“ã®å€¤ã¯ JSESSIONID ã‚„ PHPSESSIONID ã¨ã„ã£ãŸã‚‚ã®ã«ãªã‚Šã¾ã™ãŒã€ã“ã®å€¤ã¯ ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚¢ãƒ—リケーションã®ã‚µãƒãƒ¼ãƒˆã™ã‚‹ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«ä¾å­˜ã—ã¾ã™ã€‚
    nofailover Off On ã«ãªã£ã¦ã„ã‚‹ã¨ã€ãƒ¯ãƒ¼ã‚«ãƒ¼ãŒã‚¨ãƒ©ãƒ¼ã‚’èµ·ã“ã—ãŸã‚Š ç„¡åŠ¹ã«ãªã£ã¦ã„ã‚‹å ´åˆã«ã‚»ãƒƒã‚·ãƒ§ãƒ³ãŒåˆ‡ã‚Œã¾ã™ã€‚ ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒãŒã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒ¬ãƒ—リケーションをサãƒãƒ¼ãƒˆã—ã¦ã„ãªã„å ´åˆã¯ã€ On ã«ã—ã¦ãã ã•ã„。
    timeout 0 ãƒãƒ©ãƒ³ã‚µãƒ¼ã®ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã‚’ç§’ã§æŒ‡å®šã—ã¾ã™ã€‚ ã“ã®å€¤ã‚’設定ã™ã‚‹ã¨ã€ãƒ•リーã®ãƒ¯ãƒ¼ã‚«ãƒ¼ã‚’å–å¾—ã™ã‚‹ã¾ã§ã®æœ€å¤§å¾…機時間ã«ãªã‚Šã¾ã™ã€‚ デフォルトã§ã¯å¾…機ã—ã¾ã›ã‚“。
    maxattempts 1 フェイルオーãƒãƒ¼ã‚’試ã¿ã‚‹æœ€å¤§ã®å›žæ•°ã‚’指定ã—ã¾ã™ã€‚

    ProxyPass /special-area http://special.example.com/ smax=5 max=10
    ProxyPass / balancer://mycluster stickysession=jsessionid nofailover=On
    <Proxy balancer://mycluster>
    BalancerMember http://1.2.3.4:8009
    BalancerMember http://1.2.3.5:8009 smax=10
    # Less powerful server, don't send as many requests there
    BalancerMember http://1.2.3.6:8009 smax=1 loadfactor=20
    </Proxy>

    <Location> セクションã®ä¸­ã§ä½¿ã‚れãŸå ´åˆã€æœ€åˆã®å¼•数㯠çœç•¥ã•れã€ãƒ­ãƒ¼ã‚«ãƒ«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¯ <Location> ã‹ã‚‰å–å¾—ã•れã¾ã™ã€‚

    より柔軟ãªãƒªãƒãƒ¼ã‚¹ãƒ—ロキシã®è¨­å®šãŒå¿…è¦ãªå ´åˆã¯ã€[P] フラグ付ãã® RewriteRule ディレクティブをå‚ç…§ã—ã¦ãã ã•ã„。

    top

    ProxyPassInherit ディレクティブ

    説明:Inherit ProxyPass directives defined from the main server
    æ§‹æ–‡:ProxyPassInherit On|Off
    デフォルト:ProxyPassInherit On
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy
    äº’æ›æ€§:ProxyPassInherit is only available in Apache HTTP Server 2.4.5 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    ProxyPassInterpolateEnv ディレクティブ

    説明:Enable Environment Variable interpolation in Reverse Proxy configurations
    æ§‹æ–‡:
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Extension
    モジュール:mod_proxy

    Documentation not yet translated. Please see English version of document.

    top

    ProxyPassMatch ディレクティブ

    説明:Maps remote servers into the local server URL-space using regular expressions
    æ§‹æ–‡:
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Extension
    モジュール:mod_proxy

    Documentation not yet translated. Please see English version of document.

    top

    ProxyPassReverse ディレクティブ

    説明:リãƒãƒ¼ã‚¹ãƒ—ロキシã•れãŸã‚µãƒ¼ãƒã‹ã‚‰é€ã‚‰ã‚ŒãŸ HTTP 応答ヘッダ㮠URL を調整ã™ã‚‹
    æ§‹æ–‡:ProxyPassReverse [path] url
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Extension
    モジュール:mod_proxy

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠Apache ã« HTTP リダイレクト応答㮠Location, Content-Location, URI ヘッダã®èª¿æ•´ã‚’ã•ã›ã¾ã™ã€‚ã“れã¯ã€Apache ãŒãƒªãƒãƒ¼ã‚¹ãƒ—ロキシã¨ã—ã¦ä½¿ã‚れã¦ã„ã‚‹ ã¨ãã«ã€ãƒªãƒãƒ¼ã‚¹ãƒ—ロキシを通ã•ãªã„ã§ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã“ã¨ã‚’防ããŸã‚ã« é‡è¦ã§ã™ã€‚ã“れã«ã‚ˆã‚Šãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã® HTTP リダイレクト㌠リãƒãƒ¼ã‚¹ãƒ—ロキシã¨ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã®é–“ã§æ‰±ã‚れるよã†ã«ãªã‚Šã¾ã™ã€‚

    ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æ˜Žç¤ºã•れã¦ã„ã‚‹ HTTP 応答ヘッダã®ã¿ãŒæ›¸ãæ›ãˆã‚‰ã‚Œã¾ã™ã€‚ Apache ã¯ä»–ã®å¿œç­”ãƒ˜ãƒƒãƒ€ã‚’æ›¸ãæ›ãˆãŸã‚Šã€HTML ページã®ä¸­ã® URL å‚ç…§ã‚’ æ›¸ãæ›ãˆãŸã‚Šã™ã‚‹ã“ã¨ã¯ã‚りã¾ã›ã‚“。HTML ã®ä¸­ã‚’見ã¦ã€URL å‚ç…§ã‚’æ›¸ãæ›ãˆã‚‹ モジュール㫠Nick Kew ã•ã‚“ã® mod_proxy_html ãŒã‚りã¾ã™ã€‚

    path ã¯ãƒ­ãƒ¼ã‚«ãƒ«ä»®æƒ³ãƒ‘スã®åå‰ã§ã™ã€‚url 㯠リモートサーãƒã®éƒ¨åˆ† URL ã§ã™ã€‚ã“れら㯠ProxyPass ディレクティブã¨åŒæ§˜ã§ã™ã€‚

    例ãˆã°ã€ãƒ­ãƒ¼ã‚«ãƒ«ã‚µãƒ¼ãƒã®ã‚¢ãƒ‰ãƒ¬ã‚¹ãŒ http://example.com/ ã ã¨ã—ã¾ã™ã€‚ã™ã‚‹ã¨

    ProxyPass /mirror/foo/ http://backend.example.com/
    ProxyPassReverse /mirror/foo/ http://backend.example.com/
    ProxyPassReverseCookieDomain backend.example.com public.example.com
    ProxyPassReverseCookiePath / /mirror/foo/

    ã¨ã„ã†è¨­å®šã‚’ã™ã‚‹ã¨ã€http://example.com/mirror/foo/bar ã¸ã®ãƒ­ãƒ¼ã‚«ãƒ«ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒ http://backend.example.com/bar ã¸ã®ãƒ—ロキシリクエストã«å†…部ã§ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•れるã ã‘ã§ã¯ã‚りã¾ã›ã‚“ (ã“れ㯠ProxyPass ã®æ©Ÿèƒ½ã§ã™)。backend.example.com ãŒé€ã‚‹ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã®é¢å€’ã‚‚ã¿ã¾ã™ã€‚http://backend.example.com/bar ㌠http://backend.example.com/quux ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•れãŸã¨ã〠Apache 㯠HTTP リダイレクト応答をクライアントã«é€ã‚‹å‰ã«ã€ http://example.com/mirror/foo/quux ã«å¤‰æ›´ã—ã¾ã™ã€‚ URL ã‚’æ§‹æˆã™ã‚‹ã®ã«ä½¿ã‚れるホストå㯠UseCanonicalName ã®è¨­å®šã«å¿œã˜ã¦é¸æŠžã•れるã“ã¨ã« 注æ„ã—ã¦ãã ã•ã„。

    ProxyPassReverse ディレクティブ㯠対応ã™ã‚‹ ProxyPass ディレクティブã«ã¯ä¾å­˜ã—ãªã„ãŸã‚〠mod_rewrite ã®ãƒ—ãƒ­ã‚­ã‚·é€šéŽæ©Ÿèƒ½ (RewriteRule ... [P]) ã¨ä½µã›ã¦ä½¿ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    <Location> セクションã®ä¸­ã§ä½¿ã‚れãŸå ´åˆã¯ã€ 最åˆã®å¼•æ•°ã¯çœç•¥ã•れã€ãƒ­ãƒ¼ã‚«ãƒ«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¯ <Location> ã‹ã‚‰å–å¾—ã•れã¾ã™ã€‚

    top

    ProxyPassReverseCookieDomain ディレクティブ

    説明:リãƒãƒ¼ã‚¹ãƒ—ロキシサーãƒã‹ã‚‰ã® Set-Cookie ヘッダ㮠Domain 文字列を 調整ã™ã‚‹
    æ§‹æ–‡:ProxyPassReverseCookieDomain internal-domain public-domain
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Extension
    モジュール:mod_proxy

    使用法ã¯åŸºæœ¬çš„ã« ProxyPassReverse ã¨åŒã˜ã§ã™ãŒã€ ヘッダ㮠URL ã®ä»£ã‚り㫠Set-Cookie ヘッダ㮠domain æ–‡å­—åˆ—ã‚’æ›¸ãæ›ãˆã¾ã™ã€‚

    top

    ProxyPassReverseCookiePath ディレクティブ

    説明:Reverse プロキシサーãƒã‹ã‚‰ã® Set-Cookie ヘッダ㮠Path 文字列を 調整ã™ã‚‹
    æ§‹æ–‡:ProxyPassReverseCookiePath internal-path public-path
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Extension
    モジュール:mod_proxy

    使用法ã¯åŸºæœ¬çš„ã« ProxyPassReverse ã¨åŒã˜ã§ã™ãŒã€ ヘッダ㮠URL ã®ä»£ã‚り㫠Set-Cookie ヘッダ㮠path æ–‡å­—åˆ—ã‚’æ›¸ãæ›ãˆã¾ã™ã€‚

    top

    ProxyPreserveHost ディレクティブ

    説明:プロキシリクエストã«ã€å—ã‘付ã‘㟠Host HTTP ヘッダを使ã†
    æ§‹æ–‡:ProxyPreserveHost On|Off
    デフォルト:ProxyPreserveHost Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy
    äº’æ›æ€§:Apache 2.0.31 以é™ã§ä½¿ç”¨å¯èƒ½

    ã“ã®ã‚ªãƒ—ã‚·ãƒ§ãƒ³ãŒæœ‰åйã«ãªã£ã¦ã„ã‚‹å ´åˆã€ProxyPass ã§æŒ‡å®šã—ãŸãƒ›ã‚¹ãƒˆåã®ä»£ã‚りã«ã€å—ã‘付ã‘ãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã® Host: 行を プロキシ先ã®ãƒ›ã‚¹ãƒˆã«é€ã‚Šã¾ã™ã€‚

    ã“ã®ã‚ªãƒ—ションã¯é€šå¸¸ã¯ Off ã«è¨­å®šã—ã¦ãã ã•ã„。 ã»ã¨ã‚“ã©ã®å ´åˆã€ã“れã¯å¤§é‡ã®åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒ†ã‚£ãƒ³ã‚°ã‚’行ãªã£ã¦ã„ã¦ã€ 元々㮠Host ヘッダをãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒãŒè§£é‡ˆã™ã‚‹å¿…è¦ã®ã‚ã‚‹ã¨ãã®ã‚ˆã†ãªã€ 特別ãªè¨­å®šãŒå¿…è¦ãªå ´åˆã«ã®ã¿æœ‰ç”¨ã§ã™ã€‚

    top

    ProxyReceiveBufferSize ディレクティブ

    説明:プロキシã•れる HTTP 㨠FTP 接続ã®ãŸã‚ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒãƒƒãƒ•ァサイズ
    æ§‹æ–‡:ProxyReceiveBufferSize bytes
    デフォルト:ProxyReceiveBufferSize 0
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy

    ProxyReceiveBufferSize ディレクティブ㯠スループットを上ã’ã‚‹ãŸã‚ã«æ˜Žç¤ºçš„ã« (TCP/IP) ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒãƒƒãƒ•ã‚¡ã®ã‚µã‚¤ã‚ºã‚’ 設定ã—ã¾ã™ã€‚値㯠512 以上ã‹ã€ã‚·ã‚¹ãƒ†ãƒ ã®ãƒ‡ãƒ•ォルトã®ãƒãƒƒãƒ•ã‚¡ サイズをæ„味ã™ã‚‹ 0 ã§ãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    例

    ProxyReceiveBufferSize 2048

    top

    ProxyRemote ディレクティブ

    説明:特定ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’æ‰±ã†æ™‚ã«ä½¿ã‚れるリモートプロキシを指定ã™ã‚‹
    æ§‹æ–‡:ProxyRemote match remote-server
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã“ã®ãƒ—ロキシã«å¯¾ã™ã‚‹ãƒªãƒ¢ãƒ¼ãƒˆãƒ—ロキシを定義ã—ã¾ã™ã€‚ match ã¯ãƒªãƒ¢ãƒ¼ãƒˆã‚µãƒ¼ãƒãŒã‚µãƒãƒ¼ãƒˆã™ã‚‹ URL スキーム〠リモートサーãƒãŒä½¿ã†ã¯ãšã® URL ã®ä¸€éƒ¨åˆ†ã€ã‚µãƒ¼ãƒãŒã™ã¹ã¦ã® リクエストã«ä½¿ã‚れるã“ã¨ã‚’示㙠* ã®ã©ã‚Œã‹ã«ãªã‚Šã¾ã™ã€‚ remote-server ã¯ãƒªãƒ¢ãƒ¼ãƒˆã‚µãƒ¼ãƒã®éƒ¨åˆ† URL ã§ã™ã€‚æ§‹æ–‡:

    remote-server = scheme://hostname[:port]

    scheme ã¯å®Ÿéš›ä¸Šãƒªãƒ¢ãƒ¼ãƒˆã‚µãƒ¼ãƒã¨ã®é€šä¿¡ã«ä½¿ã‚れるプロトコルを 決定ã—ã¾ã™ã€‚ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ã¯ http ã ã‘ãŒã‚µãƒãƒ¼ãƒˆã•れ㦠ã„ã¾ã™ã€‚

    例

    ProxyRemote http://goodguys.com/ http://mirrorguys.com:8000
    ProxyRemote * http://cleversite.com
    ProxyRemote ftp http://ftpproxy.mydomain.com:8080

    ã“ã®ä¾‹ã§ã¯ã€ãƒ—ロキシ㯠FTP リクエストを別㮠HTTP リクエストã§åŒ…ã‚“ã§ ãã®ã‚ˆã†ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ãˆã‚‹åˆ¥ã®ãƒ—ロキシã«è»¢é€ã—ã¾ã™ã€‚

    ã“ã®ã‚ªãƒ—ションã¯ãƒªãƒãƒ¼ã‚¹ãƒ—ロキシã®è¨­å®šã‚‚サãƒãƒ¼ãƒˆã—ã¾ã™ã€‚ サーãƒãŒåˆ¥ã®ãƒ•ォワードプロキシã®å¾Œã‚ã«éš ã•れã¦ã„ã‚‹å ´åˆã§ã‚‚ ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚¦ã‚§ãƒ–サーãƒã‚’ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã® URL 空間ã«å…¥ã‚Œã‚‹ã“ã¨ãŒ ã§ãã¾ã™ã€‚

    top

    ProxyRemoteMatch ディレクティブ

    説明:æ­£è¦è¡¨ç¾ã§ã®ãƒžãƒƒãƒã«ã‚ˆã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã†ãƒªãƒ¢ãƒ¼ãƒˆãƒ—ãƒ­ã‚­ã‚·ã®æŒ‡å®š
    æ§‹æ–‡:ProxyRemoteMatch regex remote-server
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy

    ProxyRemoteMatch ã¯æœ€åˆã®å¼•æ•°ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã•れ㟠URL ã«ãƒžãƒƒãƒã™ã‚‹æ­£è¦è¡¨ç¾ã§ã‚ã‚‹ã“ã¨ã‚’除ã‘ã° ProxyRemote ディレクティブã¨åŒã˜ã§ã™ã€‚

    top

    ProxyRequests ディレクティブ

    説明:フォワード (標準ã®) プロキシリクエストを有効ã«ã™ã‚‹
    æ§‹æ–‡:ProxyRequests On|Off
    デフォルト:ProxyRequests Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy

    ã“れ㯠Apache ã®ãƒ•ォワードプロキシサーãƒã¨ã—ã¦ã®å‹•作を 有効もã—ãã¯ç„¡åйã«ã—ã¾ã™ã€‚(ProxyRequests ã‚’ Off 㫠設定ã—ã¦ã‚‚ã€ProxyPass ã®è¨­å®šã¯ç„¡åйã«ãªã‚Šã¾ã›ã‚“。)

    通常ã®ãƒªãƒãƒ¼ã‚¹ãƒ—ロキシã®è¨­å®šã§ã¯ã€ã“ã®ã‚ªãƒ—ション㯠Off ã«è¨­å®šã—ã¦ãã ã•ã„。

    HTTP ã‚„ FTP サイトã¸ã®ãƒ—ãƒ­ã‚­ã‚·ã®æ©Ÿèƒ½ã‚’有効ã«ã—ãŸã„å ´åˆã¯ã€ mod_proxy_http ã‚„ mod_proxy_ftp ㌠サーãƒã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    警告

    サーãƒã‚’安全ã«ã™ã‚‹ã¾ã§ ProxyRequests ã¯æœ‰åйã«ã—ãªã„ã§ãã ã•ã„。 オープンプロキシサーãƒã¯ã‚ãªãŸè‡ªèº«ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«ã¨ã£ã¦ã‚‚〠インターãƒãƒƒãƒˆå…¨ä½“ã«ã¨ã£ã¦ã‚‚å±é™ºã§ã™ã€‚

    top

    ProxySet ディレクティブ

    説明:Set various Proxy balancer or member parameters
    æ§‹æ–‡:
    コンテキスト:ディレクトリ
    ステータス:Extension
    モジュール:mod_proxy

    Documentation not yet translated. Please see English version of document.

    top

    ProxySourceAddress ディレクティブ

    説明:Set local IP address for outgoing proxy connections
    æ§‹æ–‡:ProxySourceAddress address
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy
    äº’æ›æ€§:Available in version 2.3.9 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    ProxyStatus ディレクティブ

    説明:Show Proxy LoadBalancer status in mod_status
    æ§‹æ–‡:
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy

    Documentation not yet translated. Please see English version of document.

    top

    ProxyTimeout ディレクティブ

    説明:プロキシã•れãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆ
    æ§‹æ–‡:ProxyTimeout seconds
    デフォルト:ProxyTimeout 300
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy
    äº’æ›æ€§:Apache 2.0.31 以é™ã§ä½¿ç”¨å¯èƒ½

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãƒ¦ãƒ¼ã‚¶ãŒãƒ—ロキシリクエストã®ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã‚’ 指定ã§ãるよã†ã«ã—ã¾ã™ã€‚ã“れã¯ãƒãƒ³ã‚°ã—ã¦ã—ã¾ã†é…ã„ã€ã‚‚ã—ãã¯æŒ™å‹•㮠怪ã—ã„サーãƒãŒã‚りã€ã‚µãƒ¼ãƒãŒãƒ‡ãƒ¼ã‚¿ã‚’è¿”ã™ã¾ã§ã²ãŸã™ã‚‰å¾…ã¡ç¶šã‘るよりも タイムアウトを返ã—ã¦ã‚ˆã‚Šç·©ã‚„ã‹ã«(訳注: graceful ã«) 失敗ã•ã›ãŸã„å ´åˆã«å½¹ã«ç«‹ã¡ã¾ã™ã€‚

    top

    ProxyVia ディレクティブ

    説明:プロキシã•れãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã® Via HTTP 応答ヘッダ ã«ã‚ˆã‚Šæä¾›ã•れる情報
    æ§‹æ–‡:ProxyVia On|Off|Full|Block
    デフォルト:ProxyVia Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_proxy

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãƒ—ロキシ㮠Via: HTTP ヘッダã®ä½¿ç”¨ã‚’ 制御ã—ã¾ã™ã€‚想定ã•れã¦ã„ã‚‹ä½¿ã„æ–¹ã¯ã€ãƒ—ロキシサーãƒãŒã„ãã¤ã‚‚繋ãŒã£ã¦ã„ã‚‹ã¨ãã« ãƒ—ãƒ­ã‚­ã‚·ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æµã‚Œã‚’制御ã™ã‚‹ã“ã¨ã§ã™ã€‚Via: ヘッダ行㮠説明㯠RFC 2616 (HTTP/1.1) ã® 14.45 節を読んã§ãã ã•ã„。

    • デフォルト㮠Off ã«è¨­å®šã•れã¦ã„ã‚‹ã¨ã€ç‰¹åˆ¥ãªå‡¦ç†ã¯ 行ãªã‚れã¾ã›ã‚“。リクエストやリプライ㫠Via: ヘッダãŒã‚れã°ã€ 変更ã•れãšã«ãã®ã¾ã¾æ¸¡ã—ã¾ã™ã€‚
    • On ã«è¨­å®šã•れã¦ã„れã°ã€å„リクエストã¨ãƒªãƒ—ライ㫠Via: 行ãŒè¿½åŠ ã•れã¾ã™ã€‚
    • Full ã«è¨­å®šã•れã¦ã„れã°ã€Via: ヘッダ㯠コメント部分㫠Apache サーãƒã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚‚å«ã‚€ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚
    • Block ã«è¨­å®šã•れã¦ã„れã°ã€ã™ã¹ã¦ã®ãƒ—ロキシリクエストã‹ã‚‰ Via: ヘッダãŒå–り除ã‹ã‚Œã¾ã™ã€‚æ–°ãŸã« Via: ㌠生æˆã•れるã“ã¨ã¯ã‚りã¾ã›ã‚“。

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_headers.html.ko.euc-kr0000644000000000000500000004705313412755316021175 0ustar rootsrc mod_headers - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_headers

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:HTTP ¿äû Çì´õ¿Í ÀÀ´ä Çì´õ ¼öÁ¤
    »óÅÂ:Extension
    ¸ðµâ¸í:headers_module
    ¼Ò½ºÆÄÀÏ:mod_headers.c
    Áö¿ø:RequestHeader´Â ¾ÆÆÄÄ¡ 2.0¿¡¸¸ ÀÖ´Ù

    ¿ä¾à

    ÀÌ ¸ðµâÀº HTTP ¿äû Çì´õ¿Í ÀÀ´ä Çì´õ¸¦ Á¶ÀýÇÏ°í ¼öÁ¤ÇÏ´Â Áö½Ã¾îµéÀ» Á¦°øÇÑ´Ù. Çì´õ¸¦ ÇÕÄ¡°Å³ª ´ëü, Á¦°ÅÇÒ ¼ö ÀÖ´Ù.

    top

    ó¸® ¼ø¼­

    mod_headers°¡ Á¦°øÇÏ´Â Áö½Ã¾î´Â ¼­¹ö¼³Á¤ÀÇ °ÅÀÇ ¸ðµç Àå¼Ò¿¡¼­ »ç¿ëÇÒ ¼ö ÀÖÀ¸¸ç, ¼³Á¤ ¼½¼ÇÀ¸·Î °¨½Î¼­ Áö½Ã¾îÀÇ ¹üÀ§¸¦ Á¦ÇÑÇÒ ¼öµµ ÀÖ´Ù.

    󸮼ø¼­´Â Áß¿äÇϸç, ¼³Á¤ÆÄÀÏ¿¡ ³ª¿Â ¼ø¼­¿Í ¼³Á¤ ¼½¼ÇÀÇ ¿µÇâÀ» ¹Þ´Â´Ù. ´ÙÀ½ µÎ Áö½Ã¾î¸¦ ¹Ý´ë·Î ÀûÀ¸¸é È¿°ú°¡ ´Þ¶óÁø´Ù.

    RequestHeader append MirrorID "mirror 12"
    RequestHeader unset MirrorID

    À§¿Í °°ÀÌ ÀûÀ¸¸é MirrorID Çì´õ°¡ ³ª¿ÀÁö ¾Ê´Â´Ù. ¹Ý´ë·Î ÀûÀ¸¸é MirrorID Çì´õ¸¦ "mirror 12"·Î ¼³Á¤ÇÑ´Ù.

    top

    À̸¥(early) ó¸®¿Í ´ÊÀº(late) ó¸®

    mod_headers¸¦ ¿äû Ãʱ⳪ ³ªÁß¿¡ Àû¿ëÇÒ ¼ö ÀÖ´Ù. º¸ÅëÀº ³»¿ë»ý¼ºÀÚ¸¦ ½ÇÇàÇϱâ Á÷Àü¿¡ ¿äû Çì´õ¸¦ ¼³Á¤Çϰí ÀÀ´äÀ» ³×Æ®¿÷¿¡ ¾µ¶§ ÀÀ´ä Çì´õ¸¦ ¼³Á¤ÇÏ´Â ´ÊÀº(late) ¹æ½ÄÀ» »ç¿ëÇÑ´Ù. ½ÇÁ¦ ¼­ºñ½ºÇÏ´Â ¼­¹ö¿¡¼­´Â Ç×»ó ´À¸° ¹æ½ÄÀ» »ç¿ëÇ϶ó.

    À̸¥(early) ¹æ½ÄÀº °³¹ßÀÚ¸¦ À§ÇØ °Ë»ç/µð¹ö±ë¿ëÀ¸·Î ¸¸µé¾ú´Ù. early Ű¿öµå¸¦ »ç¿ëÇÏ¿© Á¤ÀÇÇÑ Áö½Ã¾î´Â ¿äûÀ» ó¸®Çϱ⠽ÃÀÛÇÒ¶§ ¼³Á¤ÇÑ´Ù. Áï, ´Ù¸¥ ¿äûÀ» ¸ðÀǽÇÇèÇϰųª °Ë»ç¸¦ ÇϱâÀ§ÇØ »ç¿ëÇÒ ¼ö ÀÖÁö¸¸, ÀÀ´äÀ» »ý¼ºÇϱâ Àü¿¡ ´Ù¸¥ ¸ðµâÀÌ ºÒ½Ã¿¡ Çì´õ¸¦ ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù.

    ¿äû°æ·Î¿¡ ´ëÇÑ ¼³Á¤À» »ìÆìº¸±â Àü¿¡ À̸¥ Áö½Ã¾î¸¦ ó¸®Çϱ⶧¹®¿¡ À̸¥ Çì´õ Áö½Ã¾î´Â ÁÖ¼­¹öÀ̳ª °¡»óÈ£½ºÆ® »ç¿ëÀå¼Ò¿¡¼­¸¸ »ç¿ëÇÒ ¼ö ÀÖ´Ù. À̸¥ Áö½Ã¾î´Â ¿äû°æ·Î¿¡ ÀÇÁ¸ÇÒ ¼ö ¾ø±â¶§¹®¿¡ <Directory>³ª <Location>°°Àº »ç¿ëÀå¼Ò¿¡¼­ »ç¿ëÇÒ ¼ö ¾ø´Ù.

    top

    ¿¹Á¦

    1. "TS"·Î ½ÃÀÛÇÏ´Â ¸ðµç ¿äû Çì´õ¸¦ ÀÀ´ä Çì´õ·Î º¹»çÇÑ´Ù.

      Header echo ^TS

    2. ÀÀ´ä¿¡ ¿äûÀ» ¹ÞÀº ½Ã°£°ú ¿äûÀ» ¼­ºñ½ºÇϴµ¥ °É¸± ½Ã°£À» ¾Ë·ÁÁÖ´Â MyHeader Çì´õ¸¦ Ãß°¡ÇÑ´Ù. Ŭ¶óÀÌ¾ðÆ®´Â ÀÌ Çì´õ¸¦ º¸°í ¼­¹öÀÇ ºÎÇϸ¦ ÃßÁ¤Çϰųª Ŭ¶óÀÌ¾ðÆ®¿Í ¼­¹ö°£ÀÇ º´¸ñÁ¡À» ãÀ» ¼ö ÀÖ´Ù.

      Header add MyHeader "%D %t"

      ÀÀ´ä¿¡ ´ÙÀ½°ú °°Àº Çì´õ°¡ »ý±ä´Ù.

      MyHeader: D=3775428 t=991424704447256

    3. Joe¿¡°Ô ¾È³ç

      Header add MyHeader "Hello Joe. It took %D microseconds \
      for Apache to serve this request."

      ÀÀ´ä¿¡ ´ÙÀ½°ú °°Àº Çì´õ°¡ »ý±ä´Ù.

      MyHeader: Hello Joe. It took D=3775428 microseconds for Apache to serve this request.

    4. ¿äû¿¡ "MyRequestHeader" Çì´õ°¡ ÀÖ´Â °æ¿ì¿¡¸¸ ¼±ÅÃÀûÀ¸·Î ÀÀ´ä¿¡ MyHeader¸¦ º¸³½´Ù. ƯÁ¤ Ŭ¶óÀÌ¾ðÆ®¿¡°Ô¸¸ ÀÀ´ä¿¡ Çì´õ¸¦ Ãß°¡ÇÒ¶§ À¯¿ëÇÏ´Ù. ÀÌ ¿¹Á¦°¡ µ¿ÀÛÇÏ·Á¸é mod_setenvif ¸ðµâÀÌ ÇÊ¿äÇÏ´Ù.

      SetEnvIf MyRequestHeader value HAVE_MyRequestHeader
      Header add MyHeader "%D %t mytext" env=HAVE_MyRequestHeader

      HTTP ¿äû¿¡ MyRequestHeader: value Çì´õ°¡ ÀÖ´Ù¸é, ÀÀ´ä¿¡ ´ÙÀ½°ú °°Àº Çì´õ°¡ »ý±ä´Ù.

      MyHeader: D=3775428 t=991424704447256 mytext

    top

    Header Áö½Ã¾î

    ¼³¸í:HTTP ÀÀ´ä Çì´õ¸¦ ±¸¼ºÇÑ´Ù
    ¹®¹ý:Header [condition] set|append|add|unset|echo header [value] [early|env=[!]variable]
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Extension
    ¸ðµâ:mod_headers

    ÀÌ Áö½Ã¾î´Â HTTP ÀÀ´ä Çì´õ¸¦ ÇÕÄ¡°Å³ª ´ëü, Á¦°ÅÇÑ´Ù. ³»¿ë Çڵ鷯¿Í Ãâ·Â ÇÊÅͰ¡ ½ÇÇàÇÑ Á÷ÈÄ¿¡ Çì´õ¸¦ ¼öÁ¤Çϱ⶧¹®¿¡ º¸³¾ Çì´õ¸¦ ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù.

    conditionÀº ¼±ÅÃÀûÀ¸·Î »ç¿ëÇϸç, °ªÀ¸·Î onsuccess ȤÀº always¸¦ »ç¿ëÇÑ´Ù. ÀÌ´Â ¾î¶² ³»ºÎ Çì´õÇ¥¿¡ µ¿ÀÛÇÒÁö¸¦ °áÁ¤ÇÑ´Ù. onsuccess´Â 2xx »óÅÂÄڵ带 ¶æÇϰí, always´Â (2xx¸¦ Æ÷ÇÔÇÑ) ¸ðµç »óÅÂÄڵ带 ¶æÇÑ´Ù. ƯÈ÷ ¾î¶² ¸ðµâÀÌ ¼³Á¤ÇÑ Çì´õ¸¦ ÇØÁ¦ÇÏ°í ½Í´Ù¸é, µÑÁß ¾î¶² °ÍÀ» »ç¿ëÇÒÁö Àß »ìÆìºÁ¾ß ÇÑ´Ù.

    µÎ¹øÂ° ¾Æ±Ô¸ÕÆ®¿¡ µû¶ó ±â´ÉÀÌ ´Ù¸£´Ù. µÎ¹øÂ° ¾Æ±Ô¸ÕÆ®·Î ¾Æ·¡ °ªÁß Çϳª¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    set
    ÀÀ´ä Çì´õ¸¦ ¼³Á¤ÇÑ´Ù. °°Àº À̸§À¸·Î ÀÌ¹Ì Çì´õ°¡ ÀÖ´Ù¸é ´ëüÇÑ´Ù. value¿¡ Çü½Ä¹®ÀÚ¿­À» »ç¿ëÇÒ ¼ö ÀÖ´Ù.
    append
    ÀÌ¹Ì Á¸ÀçÇÏ´Â °°Àº À̸§ÀÇ ÀÀ´ä Çì´õ¿¡ Ãß°¡ÇÑ´Ù. ±âÁ¸ Çì´õ¿¡ »õ·Î¿î °ªÀ» ÇÕÄ¡¸é, ±âÁ¸ Çì´õ¿Í »õ·Î¿î °ª »çÀÌ¿¡ ½°Ç¥¸¦ ºÙÀδÙ. ÀÌ´Â ¿©·¯ Çì´õ°ªÀ» ÁöÁ¤ÇÏ´Â HTTP Ç¥ÁØ ¹æ½ÄÀÌ´Ù.
    add
    Çì´õ°¡ ÀÌ¹Ì ÀÖ´õ¶óµµ ÀÀ´ä Çì´õ¸¦ Ãß°¡ÇÑ´Ù. ±×·¡¼­ °°Àº À̸§ÀÇ Çì´õ°¡ µÎ°³ (ȤÀº ¸¹ÀÌ) »ý±æ ¼ö ÀÖ´Ù. ÀÌ °æ¿ì ÀÇ¿ÜÀÇ °á°ú°¡ ¹ß»ýÇÒ ¼ö Àֱ⶧¹®¿¡ º¸Åë ´ë½Å append¸¦ »ç¿ëÇØ¾ß ÇÑ´Ù.
    unset
    ÀÌ·± À̸§ÀÇ ÀÀ´ä Çì´õ°¡ ÀÖ´Ù¸é »èÁ¦ÇÑ´Ù. °°Àº À̸§À» °¡Áø Çì´õ°¡ ¿©·¯°³ ÀÖ´Ù¸é ¸ðµÎ Á¦°ÅÇÑ´Ù. value´Â ÀûÁö ¾Ê´Â´Ù.
    echo
    ÀÌ·± À̸§ÀÇ ¿äû Çì´õ¸¦ ±×´ë·Î ÀÀ´ä Çì´õ·Î º¸³½´Ù. header¿¡ Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù. value´Â ÀûÁö ¾Ê´Â´Ù.

    ¾Æ±Ô¸ÕÆ® µÚ¿¡ header À̸§ÀÌ ³ª¿Â´Ù. Çì´õ¸í µÚ¿¡ ÄÝ·ÐÀ» ÀûÀ» ¼ö ÀÖÁö¸¸, ¾ø¾îµµ µÈ´Ù. set, append, add, unset¿¡¼­ ´ë¼Ò¹®ÀÚ´Â ¹«½ÃÇÑ´Ù. echoÀÇ header À̸§Àº ´ë¼ö¹®ÀÚ¸¦ ±¸º°Çϰí Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    add, append, setÀ» »ç¿ëÇÒ¶§´Â ¼¼¹øÂ° ¾Æ±Ô¸ÕÆ® value°¡ ÇÊ¿äÇÏ´Ù. value ¾È¿¡ °ø¹éÀÌ ÀÖ´Ù¸é ½Öµû¿ÈÇ¥·Î ¹­¾î¾ß ÇÑ´Ù. value´Â ÀÏ¹Ý ¹®ÀÚ¿­À̳ª Çü½ÄÀ» ±â¼úÇÏ´Â ¹®ÀÚ¿­À̸ç, µÎ°¡Áö¸¦ °°ÀÌ »ç¿ëÇÒ ¼öµµ ÀÖ´Ù. value¿¡¼­ Áö¿øÇÏ´Â Çü½Ä±â¼úÀÚ´Â ´ÙÀ½°ú °°´Ù.

    Çü½Ä¼³¸í
    %% ÆÛ¼¾Æ® ±âÈ£
    %t ¿äûÀ» ¹ÞÀº ½Ã°£À» ±¹Á¦Ç¥Áؽ÷Πepoch (1970³â 1¿ù 1ÀÏ) ÀÌÈÄ Áö³­ ¸¶ÀÌÅ©·ÎÃÊ ´ÜÀ§·Î. °ª ¾Õ¿¡ t=ÀÌ ºÙ´Â´Ù.
    %D ¿äûÀ» ¹ÞÀº ½Ã°£ºÎÅÍ Çì´õ¸¦ ³×Æ®¿÷¿¡ ¾µ¶§±îÁö °É¸° ½Ã°£. ¿äûÀÇ ±â°£À» Àé´Ù. °ª ¾Õ¿¡ D=ÀÌ ºÙ´Â´Ù.
    %{FOOBAR}e ȯ°æº¯¼ö FOOBARÀÇ ³»¿ë.
    %{FOOBAR}s mod_sslÀÌ µ¿ÀÛÇÑ´Ù¸é, SSL ȯ°æº¯¼ö FOOBARÀÇ ³»¿ë.

    ÁÖÀÇ

    %s Çü½Ä Áö½ÃÀÚ´Â ¾ÆÆÄÄ¡ 2.1 ÀÌÈÄ¿¡¸¸ ÀÖ´Ù. ÀÌ Áö½ÃÀÚ´Â SSLOptions +StdEnvVars¸¦ »ç¿ëÇÏ´Â ºÎ´ãÀ» ´ú±âÀ§ÇØ %e ´ë½Å »ç¿ëÇÒ ¼ö ÀÖ´Ù. ¾î¶² ÀÌÀ¯¿¡¼­°Ç SSLOptions +StdEnvVars¸¦ »ç¿ëÇØ¾ß ÇÑ´Ù¸é, %e´Â %s º¸´Ù ÈξÀ ´õ È¿À²ÀûÀÌ´Ù.

    Header Áö½Ã¾î µÚ¿¡ ÇൿÀÌ ÀϾ Á¶°ÇÀ» Áö½ÃÇÏ´Â Ãß°¡ ¾Æ±Ô¸ÕÆ®³ª À̸¥ 󸮸¦ ¶æÇϴ Ű¿öµå early°¡ ³ª¿Ã ¼ö ÀÖ´Ù. env=... ¾Æ±Ô¸ÕÆ®¸¦ »ç¿ëÇÑ °æ¿ì ÇØ´ç ȯ°æº¯¼ö°¡ Á¸ÀçÇÑ´Ù¸é (ȤÀº env=!...¿¡ ³ª¿Â ȯ°æº¯¼ö°¡ Á¸ÀçÇÏÁö ¾Ê´Ù¸é) Header Áö½Ã¾î°¡ µ¿ÀÛÇÑ´Ù. ±×·¸Áö ¾ÊÀ¸¸é Áö½Ã¾î´Â ¿äû¿¡ ¾Æ¹« ¿µÇâÀ» ¹ÌÄ¡Áö ¾Ê´Â´Ù.

    À̸¥ ¹æ½ÄÀÌ ¾Æ´Ï¶ó¸é ÀÀ´äÀ» ³×Æ®¿÷À¸·Î º¸³»±â Á÷Àü¿¡ Header Áö½Ã¾î¸¦ ó¸®ÇÑ´Ù. ±×·¡¼­ Çì´õ ÇÊÅͰ¡ Ãß°¡ÇÏ´Â Çì´õ¸¦ Á¦¿ÜÇÑ ´ëºÎºÐÀÇ Çì´õ¸¦ ¼³Á¤Çϰųª µ¤¾î¾µ ¼ö ÀÖ´Ù.

    top

    RequestHeader Áö½Ã¾î

    ¼³¸í:HTTP ¿äû Çì´õ¸¦ ±¸¼ºÇÑ´Ù
    ¹®¹ý:RequestHeader set|append|add|unset header [value] [early|env=[!]variable]
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Extension
    ¸ðµâ:mod_headers

    ÀÌ Áö½Ã¾î´Â HTTP ¿äû Çì´õ¸¦ ÇÕÄ¡°Å³ª ´ëü, Á¦°ÅÇÑ´Ù. ³»¿ë Çڵ鷯°¡ ½ÇÇàÇϱâ Á÷Àü¿¡ Çì´õ¸¦ ¼öÁ¤Çϱ⶧¹®¿¡ ¹ÞÀº Çì´õ¸¦ ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù. ù¹øÂ° ¾Æ±Ô¸ÕÆ®¿¡ µû¶ó ±â´ÉÀÌ ´Ù¸£´Ù. ù¹øÂ° ¾Æ±Ô¸ÕÆ®·Î ¾Æ·¡ °ªÁß Çϳª¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    set
    ¿äû Çì´õ¸¦ ¼³Á¤ÇÑ´Ù. °°Àº À̸§À¸·Î ÀÌ¹Ì Çì´õ°¡ ÀÖ´Ù¸é ´ëüÇÑ´Ù
    append
    ÀÌ¹Ì Á¸ÀçÇÏ´Â °°Àº À̸§ÀÇ ¿äû Çì´õ¿¡ Ãß°¡ÇÑ´Ù. ±âÁ¸ Çì´õ¿¡ »õ·Î¿î °ªÀ» ÇÕÄ¡¸é, ±âÁ¸ Çì´õ¿Í »õ·Î¿î °ª »çÀÌ¿¡ ½°Ç¥¸¦ ºÙÀδÙ. ÀÌ´Â ¿©·¯ Çì´õ°ªÀ» ÁöÁ¤ÇÏ´Â HTTP Ç¥ÁØ ¹æ½ÄÀÌ´Ù.
    add
    Çì´õ°¡ ÀÌ¹Ì ÀÖ´õ¶óµµ ¿äû Çì´õ¸¦ Ãß°¡ÇÑ´Ù. ±×·¡¼­ °°Àº À̸§ÀÇ Çì´õ°¡ µÎ°³ (ȤÀº ¸¹ÀÌ) »ý±æ ¼ö ÀÖ´Ù. ÀÌ °æ¿ì ÀÇ¿ÜÀÇ °á°ú°¡ ¹ß»ýÇÒ ¼ö Àֱ⶧¹®¿¡ º¸Åë ´ë½Å append¸¦ »ç¿ëÇØ¾ß ÇÑ´Ù.
    unset
    ÀÌ·± À̸§ÀÇ ¿äû Çì´õ°¡ ÀÖ´Ù¸é »èÁ¦ÇÑ´Ù. °°Àº À̸§À» °¡Áø Çì´õ°¡ ¿©·¯°³ ÀÖ´Ù¸é ¸ðµÎ Á¦°ÅÇÑ´Ù. value´Â ÀûÁö ¾Ê´Â´Ù.

    ¾Æ±Ô¸ÕÆ® µÚ¿¡ Çì´õ¸íÀÌ ³ª¿Â´Ù. Çì´õ¸í µÚ¿¡ ÄÝ·ÐÀ» ÀûÀ» ¼ö ÀÖÁö¸¸, ¾ø¾îµµ µÈ´Ù. ´ë¼Ò¹®ÀÚ´Â ¹«½ÃÇÑ´Ù. add, append, setÀ» »ç¿ëÇÒ¶§´Â ¼¼¹øÂ° ¾Æ±Ô¸ÕÆ® value°¡ ÇÊ¿äÇÏ´Ù. value ¾È¿¡ °ø¹éÀÌ ÀÖ´Ù¸é ½Öµû¿ÈÇ¥·Î ¹­¾î¾ß ÇÑ´Ù. unsetÀ» »ç¿ëÇÒ¶§´Â value¸¦ ÀûÀ¸¸é ¾ÈµÈ´Ù. value´Â ÀÏ¹Ý ¹®ÀÚ¿­À̳ª Çü½ÄÀ» ±â¼úÇÏ´Â ¹®ÀÚ¿­À̸ç, µÎ°¡Áö¸¦ °°ÀÌ »ç¿ëÇÒ ¼öµµ ÀÖ´Ù. Áö¿øÇÏ´Â Çü½Ä±â¼úÀÚ´Â Header¿Í °°À¸¹Ç·Î ÀÚ¼¼ÇÑ ³»¿ëÀº ±×°÷À» Âü°íÇ϶ó.

    RequestHeader Áö½Ã¾î µÚ¿¡ ÇൿÀÌ ÀϾ Á¶°ÇÀ» Áö½ÃÇÏ´Â Ãß°¡ ¾Æ±Ô¸ÕÆ®³ª À̸¥ 󸮸¦ ¶æÇϴ Ű¿öµå early°¡ ³ª¿Ã ¼ö ÀÖ´Ù. env=... ¾Æ±Ô¸ÕÆ®¸¦ »ç¿ëÇÑ °æ¿ì ÇØ´ç ȯ°æº¯¼ö°¡ Á¸ÀçÇÑ´Ù¸é (ȤÀº env=!...¿¡ ³ª¿Â ȯ°æº¯¼ö°¡ Á¸ÀçÇÏÁö ¾Ê´Ù¸é) RequestHeader Áö½Ã¾î°¡ µ¿ÀÛÇÑ´Ù. ±×·¸Áö ¾ÊÀ¸¸é Áö½Ã¾î´Â ¿äû¿¡ ¾Æ¹« ¿µÇâÀ» ¹ÌÄ¡Áö ¾Ê´Â´Ù.

    À̸¥ ¹æ½ÄÀÌ ¾Æ´Ï¶ó¸é fixup ´Ü°è¿¡¼­ ¿äû¿¡ ÇØ´çÇÏ´Â Çڵ鷯¸¦ ½ÇÇàÇϱâ Á÷Àü¿¡ RequestHeader Áö½Ã¾î¸¦ ó¸®ÇÑ´Ù. ±×·¡¼­ ºê¶ó¿ìÀú¿¡ µû¶ó ȤÀº ¾ÆÆÄÄ¡ ÀÔ·ÂÇÊÅͰ¡ Çì´õ¸¦ µ¤¾î¾²°Å³ª ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_logio.html.tr.utf80000644000000000000500000002516113447004010020365 0ustar rootsrc mod_logio - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_logio

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    Açıklama:Her isteğin girdi ve çıktı uzunluklarının günlüklenmesi.
    Durum:Eklenti
    Modül Betimleyici:logio_module
    Kaynak Dosyası:mod_logio.c

    Özet

    Bu modül her istekte alınan ve gönderilen bayt sayısının günlüklenmesini sağlar. Sayılar, istekte ve yanıtta yer alan başlıklar ve gövdeleri hesaba dahil ederek ağ üzerinde gerçekte gidip gelen bayt sayısını gösterir. Bayt sayımı, girdide SSL/TLS öncesinde ve çıktıda SSL/TLS sonrasında yapılır, böylece sayıların, şifrelemeyle herhangi bir değişikliği doğru olarak yansıtması sağlanmış olur.

    Bu modül mod_log_config modülünü gerektirir.

    SSL ile KeepAlive bağlantılar kullanıldığında, SSL uzlaşımının ek yükü, bağlantı üzerinden yapılan ilk isteğin bayt sayısını yansıtır. Her dizin için yeniden uzlaşım gerektiği takdirde bayt sayısı yeniden uzlaşımı tetikleyen istekle ilişkilendirilir.
    top

    Özel Günlük Biçemleri

    İsteğin belirgin özellikleri için, biçem dizgesinde yer alan % imli biçem belirteçlerinin yerine günlük dosyasında değerleri yazılır. Bu modül üç yeni biçem belirteci ekler:

    Biçem Belirteci Açıklama
    %I İstek gövdesi ve başlıklar dahil alınan bayt sayısı; sıfır olamaz.
    %O Başlıklar dahil gönderilen bayt sayısı; sıfır olamaz.
    %S Aktarılan bayt sayısı (alınan ve gönderilen), istekler ve başlıklar dahil; sıfır olamaz. %I ve %O'nun birleşimidir.
    Apache 2.4.7 ve sonrasında kullanılabilmektedir.
    %^FB İstek gelip yanıt başlıklarının ilk baytı yazılana kadar mikrosaniye cinsinden geçen zaman. Sadece LogIOTrackTTFB yönergesine ON atanmışsa kullanılabilir.
    Apache 2.4.13 ve sonrasında kullanılabilir.

    Genel olarak, işlevsellik şöyle kullanılır:

    Birleşik G/Ç günlükleme biçemi:
    "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %I %O"
    top

    LogIOTrackTTFB Yönergesi

    Açıklama:İlk baytın yazılmasına kadar geçen süreyi izler
    Sözdizimi:LogIOTrackTTFB ON|OFF
    Öntanımlı:LogIOTrackTTFB OFF
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Eklenti
    Modül:mod_logio
    Uyumluluk:Apache 2.4.13 ve sonrasında kullanılabilir

    Bu yönerge isteğin okunmasından yanıt başlığının ilk baytının yazılmasına kadar geçen sürenin izlenmesini yapılandırır. Sonuçlanan değeri %^FB biçemi ile günlüğe kaydettirebilirsiniz.

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_log_config.html.ko.euc-kr0000644000000000000500000006305013412755316021663 0ustar rootsrc mod_log_config - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_log_config

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:¼­¹ö·ÎÀÇ ¿äûÀ» ·Î±×¿¡ ±â·ÏÇÑ´Ù
    »óÅÂ:Base
    ¸ðµâ¸í:log_config_module
    ¼Ò½ºÆÄÀÏ:mod_log_config.c

    ¿ä¾à

    ÀÌ ¸ðµâÀº Ŭ¶óÀ̾ðÆ®ÀÇ ¿äûÀ» ·Î±×¿¡ ÀÚÀ¯·Ó°Ô ±â·ÏÇÑ´Ù. ÀÚ½ÅÀÌ ¿øÇÏ´Â Çü½ÄÀ¸·Î ·Î±×¸¦ ±â·ÏÇÒ ¼ö ÀÖ°í, ÆÄÀÏÀ̳ª ¿ÜºÎ ÇÁ·Î±×·¥¿¡ Á÷Á¢ ·Î±×¸¦ º¸³¾ ¼öµµ ÀÖ´Ù. Á¶°ÇÀû ·Î±×¸¦ »ç¿ëÇÏ¸é ¿äûÀÇ ¼º°Ý¿¡ µû¶ó ¿äûÀ» ·Î±×¿¡ Ãß°¡Çϰųª Á¦¿ÜÇÒ ¼ö ÀÖ´Ù.

    ÀÌ ¸ðµâÀº ¼¼°¡Áö Áö½Ã¾î¸¦ Á¦°øÇÑ´Ù. TransferLog´Â ·Î±×ÆÄÀÏÀ» ¸¸µé°í, LogFormatÀº ¿øÇÏ´Â Çü½ÄÀ» Á¤Çϰí, CustomLog´Â Çѹø¿¡ ·Î±×ÆÄÀϰú Çü½ÄÀ» ¸ðµÎ ÁöÁ¤ÇÑ´Ù. TransferLog¿Í CustomLog Áö½Ã¾î¸¦ ¿©·¯¹ø »ç¿ëÇÏ¸é ¿äûÀ» ¿©·¯ ÆÄÀÏ¿¡ ±â·ÏÇÒ ¼ö ÀÖ´Ù.

    top

    ·Î±× Çü½Ä ÁöÁ¤Çϱâ

    LogFormat°ú CustomLog Áö½Ã¾îÀÇ Çü½Ä ¾Æ±Ô¸ÕÆ®´Â ¹®ÀÚ¿­ÀÌ´Ù. ÀÌ ¹®ÀÚ¿­¿¡ µû¶ó ¿äûÀ» ·Î±×ÆÄÀÏ¿¡ ±â·ÏÇÑ´Ù. ¹®ÀÚ¿­¿¡´Â ·Î±×ÆÄÀÏ¿¡ ±×´ë·Î º¹»çµÇ´Â ¹®ÀÚ¿Í Çà¹Ù²Þ°ú ÅÇÀ» ³ªÅ¸³»´Â CÀÇ "\n"°ú "\t" Á¦¾î¹®ÀÚ¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù. ·Î±×ÆÄÀÏ¿¡ µû¿ÈÇ¥³ª ¹é½½·¡½¬¸¦ ¾²·Á¸é ¾Õ¿¡ ¹Ýµå½Ã ¹é½½·¡½¬¸¦ Àû¾îÁà¾ß ÇÑ´Ù.

    ¿äûÀÇ Æ¯Â¡Àº Çü½Ä ¹®ÀÚ¿­¿¡ "%" Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ±â·ÏÇÑ´Ù. ÀÌ Áö½Ã¾î´Â ·Î±×ÆÄÀÏ¿¡¼­ ´ÙÀ½°ú °°ÀÌ º¯°æµÈ´Ù.

    Çü½Ä ¹®ÀÚ¿­ ¼³¸í
    %% ÆÛ¼¾Æ® ±âÈ£
    %...a ¿ø°Ý IP-ÁÖ¼Ò
    %...A (¼­¹ö) IP-ÁÖ¼Ò
    %...B HTTP Çì´õ¸¦ Á¦¿ÜÇÑ Àü¼Û ¹ÙÀÌÆ®¼ö.
    %...b HTTP Çì´õ¸¦ Á¦¿ÜÇÑ Àü¼Û ¹ÙÀÌÆ®¼ö. CLF Çü½Ä°ú °°ÀÌ Àü¼ÛÇÑ ³»¿ëÀÌ ¾ø´Â °æ¿ì 0 ´ë½Å '-'°¡ ³ª¿Â´Ù.
    %...{Foobar}C ¼­¹ö°¡ ¼ö½ÅÇÑ ¿äû¿¡¼­ Foobar ÄíŰÀÇ ³»¿ë.
    %...D ¿äûÀ» ó¸®Çϴµ¥ °É¸° ½Ã°£ (¸¶ÀÌÅ©·ÎÃÊ ´ÜÀ§).
    %...{FOOBAR}e ȯ°æº¯¼ö FOOBARÀÇ ³»¿ë
    %...f ÆÄÀϸí
    %...h ¿ø°Ý È£½ºÆ®
    %...H ¿äû ÇÁ·ÎÅäÄÝ
    %...{Foobar}i ¼­¹ö°¡ ¼ö½ÅÇÑ ¿äû¿¡¼­ Foobar: Çì´õÀÇ ³»¿ë.
    %...l (ÀÖ´Ù¸é identd°¡ Á¦°øÇÑ) ¿ø°Ý ·Î±×Àθí. mod_ident°¡ ÀÖ°í IdentityCheck°¡ OnÀÌ ¾Æ´Ï¸é »©±â±âÈ£¸¦ ±â·ÏÇÑ´Ù.
    %...m ¿äû ¸Þ½áµå
    %...{Foobar}n ´Ù¸¥ ¸ðµâÀÌ ±â·ÏÇÑ Foobar ³ëÆ®(note) ³»¿ë.
    %...{Foobar}o ÀÀ´äÀÇ Foobar: Çì´õ ³»¿ë.
    %...p ¿äûÀ» ¼­ºñ½ºÇÏ´Â ¼­¹öÀÇ Á¤±Ô Æ÷Æ®
    %...P ¿äûÀ» ¼­ºñ½ºÇÏ´Â ÀÚ½ÄÀÇ ÇÁ·Î¼¼½º ID.
    %...{format}P ¿äûÀ» ¼­ºñ½ºÇÏ´Â ÀÚ½ÄÀÇ ÇÁ·Î¼¼½º ID ȤÀº ¾²·¹µå ID. format¿¡´Â pid¿Í tid°¡ °¡´ÉÇÏ´Ù.
    %...q ÁúÀǹ®ÀÚ¿­ (ÁúÀǹ®ÀÚ¿­ÀÌ ÀÖ´Ù¸é ¾Õ¿¡ ?¸¦ ºÙÀ̰í, ¾ø´Ù¸é ºó ¹®ÀÚ¿­)
    %...r ¿äûÀÇ Ã¹¹øÂ° ÁÙ
    %...s »óÅÂ(status). ³»ºÎ ¸®´ÙÀÌ·º¼ÇµÈ ¿äûÀÇ °æ¿ì *¿ø·¡* ¿äûÀÇ »óÅÂÀÌ´Ù. ÃÖÁ¾ ¿äûÀÇ »óÅ´ %...>s.
    %...t common log format ½Ã°£ Çü½Ä(Ç¥ÁØ ¿µ¾î Çü½Ä)ÀÇ ½Ã°£
    %...{format}t strftime(3) Çü½Ä formatÀÇ ½Ã°£. (Áö¿ª½Ã°£ÀÏ ¼ö ÀÖÀ½)
    %...T ¿äûÀ» ó¸®Çϴµ¥ °É¸° ½Ã°£ (ÃÊ ´ÜÀ§).
    %...u ¿ø°Ý »ç¿ëÀÚ (auth°¡ Á¦°øÇϸç, »óÅÂ(%s)°¡ 401ÀÎ °æ¿ì ÀÌ»óÇÑ °ªÀ» ³ª¿Ã ¼ö ÀÖÀ½)
    %...U ÁúÀǹ®ÀÚ¿­À» Á¦¿ÜÇÑ ¿äû URL °æ·Î.
    %...v ¿äûÀ» ¼­ºñ½ºÇÑ ¼­¹öÀÇ Á¤±Ô ServerName.
    %...V UseCanonicalName ¼³Á¤¿¡ µû¸¥ ¼­¹ö¸í.
    %...X ÀÀ´äÀ» ¸¶ÃÆÀ»¶§ ¿¬°á »óÅÂ.
    X = ÀÀ´äÀ» ¸¶Ä¡±â Àü¿¡ ¿¬°áÀÌ ²÷¾îÁ³´Ù.
    + = ÀÀ´äÀ» º¸³½ÈÄ¿¡µµ ¿¬°áÀÌ »ì¾ÆÀÖ´Ù(keep alive).
    - = ÀÀ´äÀ» º¸³½ÈÄ ¿¬°áÀÌ ²÷¾îÁ³´Ù.

    (¾ÆÆÄÄ¡ 1.3 ÈÄ¹Ý ¹öÀü¿¡¼­ ÀÌ Áö½Ã¾î´Â %...c¿´Áö¸¸, ÀüÅëÀûÀÎ ssl %...{var}c ¹®¹ý°ú °ãÃļ­ º¯°æÇß´Ù.)

    %...I ¿äû°ú Çì´õ¸¦ Æ÷ÇÔÇÑ ¼ö½Å ¹ÙÀÌÆ®¼ö·Î 0ÀÏ ¼ö ¾ø´Ù. À̸¦ »ç¿ëÇÏ·Á¸é mod_logio°¡ ÇÊ¿äÇÏ´Ù.
    %...O Çì´õ¸¦ Æ÷ÇÔÇÑ ¼Û½Å ¹ÙÀÌÆ®¼ö·Î 0ÀÏ ¼ö ¾ø´Ù. À̸¦ »ç¿ëÇÏ·Á¸é mod_logio°¡ ÇÊ¿äÇÏ´Ù.

    "..."¿¡´Â (¿¹¸¦ µé¾î, "%h %u %r %s %b") ¾Æ¹«°Íµµ ¾ø°Å³ª, Ç׸ñÀ» Æ÷ÇÔÇÒ Á¶°ÇÀÌ ³ª¿Â´Ù (Á¶°ÇÀ» ¸¸Á·ÇÏÁö ¾ÊÀ¸¸é ÀÚ¸®¿¡ "-"¸¦ ±â·ÏÇÑ´Ù). Á¶°ÇÀº ¾Õ¿¡ "!"¸¦ ºÙÀ̰ųª ¾ÈºÙÀÎ HTTP »óÅÂÄÚµå ¸ñ·ÏÀ¸·Î ÀÛ¼ºÇÑ´Ù. ¿¹¸¦ µé¾î, "%400,501{User-agent}i"´Â 400 (Bad Request) ¿À·ù¿Í 501 (Not Implemented) ¿À·ùÀ϶§¸¸ User-agent:¸¦ ·Î±×¿¡ ³²±â°í, "%!200,304,302{Referer}i"´Â Á¤»óÀûÀÎ »óŰ¡ ¾Æ´Ñ ¸ðµç ¿äû¿¡ ´ëÇØ Referer:¸¦ ·Î±×¿¡ ³²±ä´Ù.

    ¼öÁ¤ÀÚ "<"¿Í ">"´Â ³»ºÎ ¸®´ÙÀÌ·º¼ÇµÈ ¿äû¿¡¼­ °¢°¢ óÀ½ ¿äûÀ» ¸»ÇÒÁö ¸¶Áö¸· ¿äûÀ» ¸»ÇÒÁö ¼±ÅÃÇÑ´Ù. ±âº»ÀûÀ¸·Î %s, %U, %T, %D, %rÀº óÀ½ ¿äûÀ» º¸°í, ³ª¸ÓÁö % Áö½Ã¾î´Â ¸¶Áö¸· ¿äûÀ» º»´Ù. ±×·¡¼­ %>s´Â ¿äûÀÇ ¸¶Áö¸· »óÅÂ(status)¸¦ ±â·ÏÇϰí, %<u´Â ÀÎÁõÀ¸·Î º¸È£ÇÏÁö ¾Ê´Â ÀÚ¿øÀ¸·Î ³»ºÎ ¶ó´ÙÀÌ·º¼ÇµÈ °æ¿ì¿¡µµ óÀ½¿¡ ÀÎÁõÇÑ »ç¿ëÀÚ¸¦ ±â·ÏÇÑ´Ù.

    2.0.46 ÀÌÀüÀÇ httpd 2.0 ¹öÀüÀº %...r, %...i, %...oÀÇ °á°ú ¹®ÀÚ¿­À» ±×´ë·Î µÎ¾ú´Ù. ÀÌÀ¯´Â Common Log FormatÀÇ ¿ä±¸»çÇ×À» µû¸£±âÀ§Çؼ­¿´´Ù. Áï, Ŭ¶óÀÌ¾ðÆ®°¡ Á¦¾î¹®ÀÚ¸¦ ·Î±×¿¡ Áý¾î³ÖÀ» ¼ö Àֱ⶧¹®¿¡ ·Î±×ÆÄÀÏÀ» ±×´ë·Î ´Ù·ê ¶§´Â Á¶½ÉÇØ¾ß ÇÑ´Ù.

    º¸¾È»ó ÀÌÀ¯·Î 2.0.46ºÎÅÍ Ãâ·ÂÇÒ ¼ö ¾ø´Â ¹®ÀÚ³ª ´Ù¸¥ Ư¼ö¹®ÀÚ¸¦ \xhh·Î Ç¥ÇöÇÑ´Ù. ¿©±â¼­ hh´Â ÇØ´ç ¹ÙÀÌÆ®ÀÇ 16Áø¼ö Ç¥ÇöÀ» ³ªÅ¸³½´Ù. ÀÌ ±ÔÄ¢ÀÇ ¿¹¿Ü´Â ¹é½½·¡½¬¸¦ ¾Õ¿¡ ºÙÀÌ´Â "¿Í \, ±×¸®°í C¾ð¾î Çü½ÄÀÇ °ø¹é¹®ÀÚµé(\n, \t µî)ÀÌ´Ù.

    ÀϹÝÀûÀ¸·Î ¸¹ÀÌ »ç¿ëÇÏ´Â ·Î±× Çü½ÄÀº ´ÙÀ½°ú °°´Ù.

    Common Log Format (CLF)
    "%h %l %u %t \"%r\" %>s %b"
    °¡»óÈ£½ºÆ® Á¤º¸¸¦ Æ÷ÇÔÇÑ Common Log Format
    "%v %h %l %u %t \"%r\" %>s %b"
    NCSA extended/combined ·Î±× Çü½Ä
    "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\""
    Referer ·Î±× Çü½Ä
    "%{Referer}i -> %U"
    Agent (ºê¶ó¿ìÀú) ·Î±× Çü½Ä
    "%{User-agent}i"

    ¿äûÀ» ¼­ºñ½ºÇÏ´Â ¼­¹öÀÇ Á¤±Ô ServerName°ú ListenÀº °¢°¢ %v¿Í %p¸¦ »ç¿ëÇÑ´Ù. ·Î±×ºÐ¼® ÇÁ·Î±×·¥ÀÌ ½ÇÁ¦·Î ¿äûÀ» ¼­ºñ½ºÇϴ ȣ½ºÆ®¸¦ ¾Ë±âÀ§ÇØ °¡»óÈ£½ºÆ® ã±â ¾Ë°í¸®ÁòÀ» °¡Áú ÇÊ¿ä¾øµµ·Ï ÀÌµé °ªÀº UseCanonicalName ¼³Á¤°ú ¹«°üÇÏ´Ù.

    top

    º¸¾È»ó °í·ÁÇÒ Á¡

    ¼­¹ö¸¦ ½ÃÀÛÇÏ´Â »ç¿ëÀÚ¿Ü¿¡ ´Ù¸¥ »ç¿ëÀÚ°¡ ·Î±×ÆÄÀÏÀ» ÀúÀåÇÏ´Â µð·ºÅ丮¿¡ ¾²±â ±ÇÇÑÀ» °¡Áú¶§ ¿Ö º¸¾È¿¡ ¹®Á¦°¡ »ý±â´ÂÁö º¸¾È ÆÁ ¹®¼­¸¦ Âü°íÇ϶ó.

    top

    BufferedLogs Áö½Ã¾î

    ¼³¸í:Buffer log entries in memory before writing to disk
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤
    »óÅÂ:Base
    ¸ðµâ:mod_log_config

    Documentation not yet translated. Please see English version of document.

    top

    CustomLog Áö½Ã¾î

    ¼³¸í:·Î±×ÆÄÀÏ À̸§°ú Çü½ÄÀ» ÁöÁ¤ÇÑ´Ù
    ¹®¹ý:CustomLog file|pipe format|nickname [env=[!]environment-variable]
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Base
    ¸ðµâ:mod_log_config

    ¼­¹ö°¡ ¿äûÀ» ·Î±×¿¡ ³²±æ¶§ CustomLog Áö½Ã¾î¸¦ »ç¿ëÇÑ´Ù. ·Î±× Çü½ÄÀ» ÁöÁ¤Çϰí, ȯ°æº¯¼ö¸¦ »ç¿ëÇÏ¿© ¿äûÀÇ Æ¯Â¡¿¡ µû¶ó ¼±ÅÃÀûÀ¸·Î ·Î±×¸¦ ³²±æ ¼öµµ ÀÖ´Ù.

    ·Î±×¸¦ ±â·ÏÇÒ Àå¼Ò¸¦ ÁöÁ¤Çϴ ù¹øÂ° ¾Æ±Ô¸ÕÆ®¿¡´Â ´ÙÀ½ µÑÁß Çϳª¸¦ »ç¿ëÇÑ´Ù.

    file
    ServerRoot¿¡ »ó´ëÀûÀÎ ÆÄÀϸí.
    pipe
    ÆÄÀÌÇÁ¹®ÀÚ "|"µÚ¿¡ ·Î±× Á¤º¸¸¦ Ç¥ÁØÀÔ·ÂÀ¸·Î ¹ÞÀ» ÇÁ·Î±×·¥ °æ·Î¸¦ Àû´Â´Ù.

    º¸¾È:

    ÇÁ·Î±×·¥À» »ç¿ëÇÑ´Ù¸é ÇÁ·Î±×·¥Àº À¥¼­¹ö¸¦ ½ÃÀÛÇÑ »ç¿ëÀÚ ±ÇÇÑÀ¸·Î ½ÇÇàµÈ´Ù. ¼­¹ö¸¦ root·Î ½ÃÀÛÇÑ´Ù¸é ÇÁ·Î±×·¥µµ root·Î ½ÇÇàÇϹǷΠÇÁ·Î±×·¥ÀÌ ¾ÈÀüÇÑÁö È®ÀÎÇ϶ó.

    ÁÖÀÇ

    À¯´Ð½º°¡ ¾Æ´Ñ Ç÷¡Æû¿¡¼­ ÆÄÀϰæ·Î¸¦ ÀÔ·ÂÇÒ¶§ Ç÷¡ÆûÀÌ ¹é½½·¡½¬¸¦ »ç¿ëÇÏ´õ¶óµµ ¹Ýµå½Ã ½½·¡½¬¸¦ »ç¿ëÇØ¾ß ÇÑ´Ù. ÀϹÝÀûÀ¸·Î ¼³Á¤ÆÄÀÏ¿¡¼­´Â Ç×»ó ½½·¡½¬¸¦ »ç¿ëÇÏ´Â °ÍÀÌ ÁÁ´Ù.

    µÎ¹øÂ° ¾Æ±Ô¸ÕÆ®´Â ·Î±×ÆÄÀÏ¿¡ ±â·ÏÇÒ ³»¿ëÀ» ÁöÁ¤ÇÑ´Ù. Àü¿¡ LogFormatÀ¸·Î Á¤ÀÇÇÑ nicknameÀ» »ç¿ëÇϰųª Á÷Á¢ ·Î±× Çü½Ä Àý¿¡¼­ ¼³¸íÇÑ format ¹®ÀÚ¿­À» »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    ¿¹¸¦ µé¾î, ´ÙÀ½ µÎ Áö½Ã¾î´Â ¶È°°Àº ÀÏÀ» ÇÑ´Ù.

    # Çü½Ä º°ÄªÀ» »ç¿ëÇÑ CustomLog
    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    CustomLog logs/access_log common

    # Á÷Á¢ Çü½Ä ¹®ÀÚ¿­À» »ç¿ëÇÑ CustomLog
    CustomLog logs/access_log "%h %l %u %t \"%r\" %>s %b"

    ¼¼¹øÂ° ¾Æ±Ô¸ÕÆ®´Â ¾ø¾îµµ µÇ¸ç, ƯÁ¤ ¼­¹ö ȯ°æº¯¼ö À¯¹«¿¡ µû¶ó ¿äûÀ» ·Î±×¿¡ ±â·ÏÇÒÁö ¿©ºÎ¸¦ °áÁ¤ÇÑ´Ù. ¿äû¿¡ ÁöÁ¤ÇÑ È¯°æº¯¼ö°¡ Á¤ÀǵÇÀÖ´Ù¸é (ȤÀº 'env=!name'¸¦ »ç¿ëÇÑ °æ¿ì ¾ø´Ù¸é) ¿äûÀ» ·Î±×¿¡ ±â·ÏÇÑ´Ù.

    mod_setenvif³ª mod_rewrite ¸ðµâÀ» »ç¿ëÇÏ¿© ¿äûº°·Î ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÒ ¼ö ÀÖ´Ù. ¿¹¸¦ µé¾î, ¼­¹ö°¡ GIF ±×¸²¿¡ ´ëÇÑ ¸ðµç ¿äûÀ» ÁÖ¼­¹ö ·Î±×°¡ ¾Æ´Ñ ´Ù¸¥ ·Î±×ÆÄÀÏ¿¡ ±â·ÏÇÏ·Á¸é,

    SetEnvIf Request_URI \.gif$ gif-image
    CustomLog gif-requests.log common env=gif-image
    CustomLog nongif-requests.log common env=!gif-image

    top

    GlobalLog Áö½Ã¾î

    ¼³¸í:Sets filename and format of log file
    ¹®¹ý:GlobalLogfile|pipe format|nickname [env=[!]environment-variable| expr=expression]
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤
    »óÅÂ:Base
    ¸ðµâ:mod_log_config
    Áö¿ø:Available in Apache HTTP Server 2.4.19 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    LogFormat Áö½Ã¾î

    ¼³¸í:·Î±×ÆÄÀÏ¿¡ »ç¿ëÇÒ Çü½ÄÀ» ±â¼úÇÑ´Ù
    ¹®¹ý:LogFormat format|nickname [nickname]
    ±âº»°ª:LogFormat "%h %l %u %t \"%r\" %>s %b"
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Base
    ¸ðµâ:mod_log_config

    ÀÌ Áö½Ã¾î´Â Á¢±Ù ·Î±×ÆÄÀÏÀÇ Çü½ÄÀ» ÁöÁ¤ÇÑ´Ù.

    LogFormat Áö½Ã¾î´Â µÎ°¡Áö Çü½ÄÀ¸·Î »ç¿ëÇÑ´Ù. ù¹øÂ° Çü½ÄÀº ¾Æ±Ô¸ÕÆ®¸¦ ÇѰ³¸¸ »ç¿ëÇÏ¿© ´ÙÀ½ TransferLog Áö½Ã¾îµéÀÌ »ç¿ëÇÒ ·Î±× Çü½ÄÀ» ÁöÁ¤ÇÑ´Ù. ÀÌ ¾Æ±Ô¸ÕÆ®¿¡ À§ÀÇ ·Î±× Çü½Ä ÁöÁ¤Çϱâ Àý¿¡¼­ ¼³¸íÇÑ formatÀ» Á÷Á¢ »ç¿ëÇϰųª, ´ÙÀ½¿¡ ¼³¸íÇÒ LogFormat Áö½Ã¾î·Î ¹Ì¸® Á¤ÀÇÇÑ (·Î±× Çü½ÄÀ» ÁöĪÇÏ´Â) nicknameÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    LogFormat Áö½Ã¾îÀÇ µÎ¹øÂ° Çü½ÄÀº format°ú nicknameÀ» ¿¬°áÇÑ´Ù. ±×·¯¸é µÚ¿¡¼­ »ç¿ëÇÏ´Â LogFormatÀ̳ª CustomLog Áö½Ã¾î¿¡ ¹Ýº¹Çؼ­ Çü½Ä ¹®ÀÚ¿­À» ¸ðµÎ ÀÔ·ÂÇÏ´Â ´ë½Å nicknameÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù. º°ÄªÀ» Á¤ÀÇÇÏ´Â LogFormat Áö½Ã¾î´Â ÀÌ ¿Ü¿¡´Â ¾Æ¹« ±â´ÉÀ» ÇÏÁö ¾Ê´Â´Ù. Áï, º°Äª¸¸À» Á¤ÀÇÇϸç, ½ÇÁ¦·Î Çü½ÄÀ» Àû¿ëÇϰųª Çü½ÄÀ» ±âº»°ªÀ¸·Î ¸¸µéÁö ¾Ê´Â´Ù. ±×·¯¹Ç·Î ´ÙÀ½¿¡ ³ª¿À´Â TransferLog Áö½Ã¾î¿¡ ¿µÇâÀ» ÁÖÁö ¾Ê´Â´Ù. ¶Ç, LogFormatÀº º°ÄªÀ¸·Î ´Ù¸¥ º°ÄªÀ» Á¤ÀÇÇÒ ¼ö ÀÖ´Ù. º°Äª À̸§¿¡´Â ÆÛ¼¾Æ® ±âÈ£(%)¸¦ »ç¿ëÇÒ ¼ö ¾øÀ½À» ÁÖÀÇÇ϶ó.

    ¿¹Á¦

    LogFormat "%v %h %l %u %t \"%r\" %>s %b" vhost_common

    top

    TransferLog Áö½Ã¾î

    ¼³¸í:·Î±×ÆÄÀÏ À§Ä¡¸¦ ¼³Á¤ÇÑ´Ù
    ¹®¹ý:TransferLog file|pipe
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Base
    ¸ðµâ:mod_log_config

    ÀÌ Áö½Ã¾î´Â CustomLog Áö½Ã¾î¿Í ¾Æ±Ô¸ÕÆ®¿Í ±â´ÉÀÌ ºñ½ÁÇÏÁö¸¸, ·Î±× Çü½ÄÀ» Á÷Á¢ ÁöÁ¤Çϰųª ¿äûÀ» Á¶°Ç¿¡ µû¶ó ·Î±×¿¡ ³²±æ ¼ö ¾ø´Ù. ´ë½Å °¡Àå ÃÖ±Ù »ç¿ëÇÑ (º°ÄªÀ» Á¤ÀÇÇÏÁö ¾ÊÀº) LogFormat Áö½Ã¾î°¡ ÁöÁ¤ÇÑ ·Î±× Çü½ÄÀ» »ç¿ëÇÑ´Ù. ¹Ì¸® Çü½ÄÀ» ÁöÁ¤ÇÏÁö ¾Ê¾Ò´Ù¸é Common Log FormatÀ» »ç¿ëÇÑ´Ù.

    ¿¹Á¦

    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\""
    TransferLog logs/access_log

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_asis.html.en0000644000000000000500000002163613412755316017324 0ustar rootsrc mod_asis - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_asis

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Sends files that contain their own HTTP headers
    Status:Base
    Module Identifier:asis_module
    Source File:mod_asis.c

    Summary

    This module provides the handler send-as-is which causes Apache HTTP Server to send the document without adding most of the usual HTTP headers.

    This can be used to send any kind of data from the server, including redirects and other special HTTP responses, without requiring a cgi-script or an nph script.

    For historical reasons, this module will also process any file with the mime type httpd/send-as-is.

    Support Apache!

    Topics

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    top

    Usage

    In the server configuration file, associate files with the send-as-is handler e.g.

    AddHandler send-as-is asis

    The contents of any file with a .asis extension will then be sent by Apache httpd to the client with almost no changes. In particular, HTTP headers are derived from the file itself according to mod_cgi rules, so an asis file must include valid headers, and may also use the CGI Status: header to determine the HTTP response code. The Content-Length: header will automatically be inserted or, if included, corrected by httpd.

    Here's an example of a file whose contents are sent as is so as to tell the client that a file has redirected.

    Status: 301 Now where did I leave that URL
    Location: http://xyz.example.com/foo/bar.html
    Content-type: text/html

    <html>
    <head>
    <title>Lame excuses'R'us</title>
    </head>
    <body>
    <h1>Fred's exceptionally wonderful page has moved to
    <a href="http://xyz.example.com/foo/bar.html">Joe's</a> site.
    </h1>
    </body>
    </html>

    Notes:

    The server always adds a Date: and Server: header to the data returned to the client, so these should not be included in the file. The server does not add a Last-Modified header; it probably should.

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_wstunnel.html.fr.utf80000644000000000000500000001731713412755316022400 0ustar rootsrc mod_proxy_wstunnel - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_proxy_wstunnel

    Langues Disponibles:  en  |  fr 

    Description:Module pour mod_proxy supportant les websockets
    Statut:Extension
    Identificateur de Module:proxy_wstunnel_module
    Fichier Source:mod_proxy_wstunnel.c
    Compatibilité:Disponible à partir de la version 2.4.5 du serveur HTTP Apache

    Sommaire

    Pour utiliser ce module, mod_proxy doit être chargé. Il fournit le support du tunnelling pour les connexions websocket vers un serveur websockets d'arrière-plan. La connexion est automatiquement promue en connexion websocket :

    Réponse HTTP

    Upgrade: WebSocket
    Connection: Upgrade

    Le mandatement des requêtes vers un serveur websockets comme echo.websocket.org peut être configuré via la directive ProxyPass :

    ProxyPass "/ws2/"  "ws://echo.websocket.org/"
    ProxyPass "/wss2/" "wss://echo.websocket.org/"

    La répartition de charge entre plusieurs serveurs d'arrière-plan peut être configurée via le module mod_proxy_balancer.

    En fait, ce module permet d'accepter d'autres protocoles ; vous pouvez à cet effet utiliser le paramètre upgrade de la directive ProxyPass. La valeur NONE signifie que vous court-circuitez la consultation de l'en-tête, mais que vous autorisez quand-même WebSocket. La valeur ANY signifie que Upgrade va lire les en-têtes de la requête et les utilisera dans l'en-tête Upgrade de la réponse.

    Support Apache!

    Directives

    Ce module ne fournit aucune directive.

    Traitement des bugs

    Voir aussi

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_socache_dbm.html.fr.utf80000644000000000000500000001444613412755316021507 0ustar rootsrc mod_socache_dbm - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_socache_dbm

    Langues Disponibles:  en  |  fr 

    Description:Fournisseur de cache d'objets partagés basé sur DBM.
    Statut:Extension
    Identificateur de Module:socache_dbm_module
    Fichier Source:mod_socache_dbm.c

    Sommaire

    Le module mod_socache_dbm est un fournisseur de cache d'objets partagés qui permet la création et l'accès à un cache maintenu par une base de données DBM.

    dbm:/chemin/vers/datafile

    Vous trouverez des détails à propos des autres fournisseurs de cache d'objets partagés ici.

    Support Apache!

    Directives

    Ce module ne fournit aucune directive.

    Traitement des bugs

    Voir aussi

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_userdir.html.fr.utf80000644000000000000500000003203413412755316020726 0ustar rootsrc mod_userdir - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_userdir

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Répertoires propres à un utilisateur
    Statut:Base
    Identificateur de Module:userdir_module
    Fichier Source:mod_userdir.c

    Sommaire

    Ce module permet l'accès aux répertoires propres à un utilisateur en utilisant la syntaxe http://example.com/~utilisateur/.

    top

    Directive UserDir

    Description:Chemin des répertoires propres à un utilisateur
    Syntaxe:UserDir nom-répertoire [nom-répertoire] ...
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_userdir

    La directive UserDir permet de définir le répertoire réel du répertoire home d'un utilisateur à utiliser à la réception d'une requête pour un document de cet utilisateur. nom-répertoire peut se présenter sous la forme suivante :

    • Le nom d'un répertoire ou un modèle tel que ceux présentés ci-dessous.
    • Le mot-clé disabled. Toutes les traductions nom d'utilisateur vers répertoire sont alors désactivées, à l'exception de celles comportant le mot-clé enabled (voir ci-dessous).
    • Le mot-clé disabled suivi d'une liste de noms d'utilisateurs séparés par des espaces. Les noms d'utilisateurs apparaissant dans une telle liste ne feront jamais l'objet d'une traduction vers un répertoire, même dans le cas où ils apparaîtront dans une clause enabled.
    • Le mot-clé enabled suivi d'une liste de noms d'utilisateurs séparés par des espaces. Les noms d'utilisateurs apparaissant dans une telle liste seront traduits en répertoires même dans le cas où une clause disable globale est active, mais pas s'ils apparaissent aussi dans une clause disabled.

    Si aucun mot-clé enabled ou disabled n'apparait dans la directive Userdir, l'argument est traité en tant que modèle de fichier, et utilisé pour traduire le nom d'utilisateur en une spécification de répertoire. Une requête pour http://www.example.com/~bob/un/deux.html sera traduite en :

    Directive Userdir utilisée Chemin traduit
    UserDir public_html ~bob/public_html/un/deux.html
    UserDir /usr/web /usr/web/bob/un/deux.html
    UserDir /home/*/www /home/bob/www/un/deux.html

    Les directives suivantes vont envoyer des redirections au client :

    Directive Userdir utilisée Chemin traduit
    UserDir http://www.example.com/utilisateurs http://www.example.com/utilisateurs/bob/un/deux.html
    UserDir http://www.example.com/*/usr http://www.example.com/bob/usr/un/deux.html
    UserDir http://www.example.com/~*/ http://www.example.com/~bob/un/deux.html
    Soyez prudent avec cette directive ; par exemple, "UserDir ./" ferait correspondre "/~root" à "/" - ce qui n'est probablement pas souhaité. Il est fortement recommandé d'inclure une déclaration "UserDir disabled root" dans votre configuration. Voir aussi la directive Directory et la page Conseils en matière de sécurité pour plus d'informations.

    Exemples supplémentaires :

    Pour permettre à quelques utilisateurs et seulement à ceux-ci de posséder des répertoires UserDir, utilisez la configuration suivante :

    UserDir disabled
    UserDir enabled user1 user2 user3

    Pour permettre à la plupart des utilisateurs de posséder des répertoires UserDir, mais l'interdire à quelques uns, utilisez la configuration suivante :

    UserDir disabled utilisateur4 utilisateur5 utilisateur6

    Il est aussi possible de spécifier des répertoires utilisateurs alternatifs. Si vous utilisez une commande comme :

    UserDir "public_html" "/usr/web" "http://www.example.com/"

    Avec une requête pour http://www.example.com/~bob/un/deux.html, le serveur tentera tout d'abord de trouver la page à ~bob/public_html/un/deux.html, puis à /usr/web/bob/un/deux.html, et enfin il enverra une redirection vers http://www.example.com/bob/un/deux.html.

    Si vous spécifiez une redirection, elle doit être la dernière alternative de la liste. Apache httpd ne pouvant pas déterminer si la redirection a réussi, si cette dernière ne se trouve pas en fin de liste, c'est cette alternative qui sera toujours utilisée.

    La substitution de répertoire utilisateur n'est pas activée par défaut depuis la version 2.1.4. Dans les versions précédentes, UserDir public_html était sous-entendu si aucune directive UserDir n'était présente.

    Détails à propos de la fusion

    Lorsqu'on passe du contexte global au contexte de serveur virtuel, les listes d'utilisateurs spécifiques activés ou désactivés sont remplacées par les listes du contexte, et non fusionnées.

    Voir aussi

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_suexec.html.ja.utf80000644000000000000500000002167013412755316020534 0ustar rootsrc mod_suexec - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_suexec

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:指定ã•れãŸãƒ¦ãƒ¼ã‚¶ã¨ã‚°ãƒ«ãƒ¼ãƒ—ã§ CGI スクリプトを実行ã™ã‚‹
    ステータス:Extension
    モジュール識別å­:suexec_module
    ソースファイル:mod_suexec.c
    äº’æ›æ€§:Apache 2.0 以é™ã§ä½¿ç”¨å¯èƒ½

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ suexec サãƒãƒ¼ãƒˆãƒ—ログラム ã«ã‚ˆã‚Šã€CGI ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒæŒ‡å®šã•れãŸãƒ¦ãƒ¼ã‚¶ã¨ã‚°ãƒ«ãƒ¼ãƒ—㧠実行ã•れるよã†ã«ã§ãã¾ã™ã€‚

    Support Apache!

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    SuexecUserGroup ディレクティブ

    説明:CGI プログラムã®ãƒ¦ãƒ¼ã‚¶ãƒ‘ーミッションã€ã‚°ãƒ«ãƒ¼ãƒ—パーミッション
    æ§‹æ–‡:SuexecUserGroup User Group
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_suexec
    äº’æ›æ€§:SuexecUserGroup 㯠2.0 以é™ã§ã®ã¿ä½¿ç”¨å¯èƒ½ã€‚

    SuexecUserGroup ディレクティブ㯠CGI プログラム ãŒå®Ÿè¡Œã•れるユーザã¨ã‚°ãƒ«ãƒ¼ãƒ—を指定ã§ãるよã†ã«ã—ã¾ã™ã€‚CGI 以外㮠リクエスト㯠User ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã•れãŸãƒ¦ãƒ¼ã‚¶ã®ã¾ã¾ã§å‡¦ç†ã•れã¾ã™ã€‚ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠Apache 1.3 ã«ãŠã‘ã‚‹ VirtualHosts ã®ä¸­ã§ User ディレクティブ㨠Group ディレクティブを使ã†ç”¨æ³•ã®ä»£ã‚りã«ãªã‚Šã¾ã™ã€‚

    例

    SuexecUserGroup nobody nogroup

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_isapi.html.en0000644000000000000500000005671613412755316017501 0ustar rootsrc mod_isapi - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_isapi

    Available Languages:  en  |  fr  |  ko 

    Description:ISAPI Extensions within Apache for Windows
    Status:Base
    Module Identifier:isapi_module
    Source File:mod_isapi.c
    Compatibility:Win32 only

    Summary

    This module implements the Internet Server extension API. It allows Internet Server extensions (e.g. ISAPI .dll modules) to be served by Apache for Windows, subject to the noted restrictions.

    ISAPI extension modules (.dll files) are written by third parties. The Apache Group does not author these modules, so we provide no support for them. Please contact the ISAPI's author directly if you are experiencing problems running their ISAPI extension. Please do not post such problems to Apache's lists or bug reporting pages.

    top

    Usage

    In the server configuration file, use the AddHandler directive to associate ISAPI files with the isapi-handler handler, and map it to them with their file extensions. To enable any .dll file to be processed as an ISAPI extension, edit the httpd.conf file and add the following line:

    AddHandler isapi-handler .dll
    In older versions of the Apache server, isapi-isa was the proper handler name, rather than isapi-handler. As of 2.3 development versions of the Apache server, isapi-isa is no longer valid. You will need to change your configuration to use isapi-handler instead.

    There is no capability within the Apache server to leave a requested module loaded. However, you may preload and keep a specific module loaded by using the following syntax in your httpd.conf:

    ISAPICacheFile c:/WebWork/Scripts/ISAPI/mytest.dll

    Whether or not you have preloaded an ISAPI extension, all ISAPI extensions are governed by the same permissions and restrictions as CGI scripts. That is, Options ExecCGI must be set for the directory that contains the ISAPI .dll file.

    Review the Additional Notes and the Programmer's Journal for additional details and clarification of the specific ISAPI support offered by mod_isapi.

    top

    Additional Notes

    Apache's ISAPI implementation conforms to all of the ISAPI 2.0 specification, except for some "Microsoft-specific" extensions dealing with asynchronous I/O. Apache's I/O model does not allow asynchronous reading and writing in a manner that the ISAPI could access. If an ISA tries to access unsupported features, including async I/O, a message is placed in the error log to help with debugging. Since these messages can become a flood, the directive ISAPILogNotSupported Off exists to quiet this noise.

    Some servers, like Microsoft IIS, load the ISAPI extension into the server and keep it loaded until memory usage is too high, or unless configuration options are specified. Apache currently loads and unloads the ISAPI extension each time it is requested, unless the ISAPICacheFile directive is specified. This is inefficient, but Apache's memory model makes this the most effective method. Many ISAPI modules are subtly incompatible with the Apache server, and unloading these modules helps to ensure the stability of the server.

    Also, remember that while Apache supports ISAPI Extensions, it does not support ISAPI Filters. Support for filters may be added at a later date, but no support is planned at this time.

    top

    Programmer's Journal

    If you are programming Apache 2.0 mod_isapi modules, you must limit your calls to ServerSupportFunction to the following directives:

    HSE_REQ_SEND_URL_REDIRECT_RESP
    Redirect the user to another location.
    This must be a fully qualified URL (e.g. http://server/location).
    HSE_REQ_SEND_URL
    Redirect the user to another location.
    This cannot be a fully qualified URL, you are not allowed to pass the protocol or a server name (e.g. simply /location).
    This redirection is handled by the server, not the browser.

    Warning

    In their recent documentation, Microsoft appears to have abandoned the distinction between the two HSE_REQ_SEND_URL functions. Apache continues to treat them as two distinct functions with different requirements and behaviors.

    HSE_REQ_SEND_RESPONSE_HEADER
    Apache accepts a response body following the header if it follows the blank line (two consecutive newlines) in the headers string argument. This body cannot contain NULLs, since the headers argument is NULL terminated.
    HSE_REQ_DONE_WITH_SESSION
    Apache considers this a no-op, since the session will be finished when the ISAPI returns from processing.
    HSE_REQ_MAP_URL_TO_PATH
    Apache will translate a virtual name to a physical name.
    HSE_APPEND_LOG_PARAMETER
    This logged message may be captured in any of the following logs:

    The first option, the %{isapi-parameter}n component, is always available and preferred.

    HSE_REQ_IS_KEEP_CONN
    Will return the negotiated Keep-Alive status.
    HSE_REQ_SEND_RESPONSE_HEADER_EX
    Will behave as documented, although the fKeepConn flag is ignored.
    HSE_REQ_IS_CONNECTED
    Will report false if the request has been aborted.

    Apache returns FALSE to any unsupported call to ServerSupportFunction, and sets the GetLastError value to ERROR_INVALID_PARAMETER.

    ReadClient retrieves the request body exceeding the initial buffer (defined by ISAPIReadAheadBuffer). Based on the ISAPIReadAheadBuffer setting (number of bytes to buffer prior to calling the ISAPI handler) shorter requests are sent complete to the extension when it is invoked. If the request is longer, the ISAPI extension must use ReadClient to retrieve the remaining request body.

    WriteClient is supported, but only with the HSE_IO_SYNC flag or no option flag (value of 0). Any other WriteClient request will be rejected with a return value of FALSE, and a GetLastError value of ERROR_INVALID_PARAMETER.

    GetServerVariable is supported, although extended server variables do not exist (as defined by other servers.) All the usual Apache CGI environment variables are available from GetServerVariable, as well as the ALL_HTTP and ALL_RAW values.

    Since httpd 2.0, mod_isapi supports additional features introduced in later versions of the ISAPI specification, as well as limited emulation of async I/O and the TransmitFile semantics. Apache httpd also supports preloading ISAPI .dlls for performance.

    top

    ISAPIAppendLogToErrors Directive

    Description:Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log
    Syntax:ISAPIAppendLogToErrors on|off
    Default:ISAPIAppendLogToErrors off
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_isapi

    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the server error log.

    top

    ISAPIAppendLogToQuery Directive

    Description:Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field
    Syntax:ISAPIAppendLogToQuery on|off
    Default:ISAPIAppendLogToQuery on
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_isapi

    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field (appended to the CustomLog %q component).

    top

    ISAPICacheFile Directive

    Description:ISAPI .dll files to be loaded at startup
    Syntax:ISAPICacheFile file-path [file-path] ...
    Context:server config, virtual host
    Status:Base
    Module:mod_isapi

    Specifies a space-separated list of file names to be loaded when the Apache server is launched, and remain loaded until the server is shut down. This directive may be repeated for every ISAPI .dll file desired. The full path name of each file should be specified. If the path name is not absolute, it will be treated relative to ServerRoot.

    top

    ISAPIFakeAsync Directive

    Description:Fake asynchronous support for ISAPI callbacks
    Syntax:ISAPIFakeAsync on|off
    Default:ISAPIFakeAsync off
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_isapi

    While set to on, asynchronous support for ISAPI callbacks is simulated.

    top

    ISAPILogNotSupported Directive

    Description:Log unsupported feature requests from ISAPI extensions
    Syntax:ISAPILogNotSupported on|off
    Default:ISAPILogNotSupported off
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_isapi

    Logs all requests for unsupported features from ISAPI extensions in the server error log. This may help administrators to track down problems. Once set to on and all desired ISAPI modules are functioning, it should be set back to off.

    top

    ISAPIReadAheadBuffer Directive

    Description:Size of the Read Ahead Buffer sent to ISAPI extensions
    Syntax:ISAPIReadAheadBuffer size
    Default:ISAPIReadAheadBuffer 49152
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_isapi

    Defines the maximum size of the Read Ahead Buffer sent to ISAPI extensions when they are initially invoked. All remaining data must be retrieved using the ReadClient callback; some ISAPI extensions may not support the ReadClient function. Refer questions to the ISAPI extension's author.

    Available Languages:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_usertrack.html.fr.utf80000644000000000000500000004014313412755316021254 0ustar rootsrc mod_usertrack - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_usertrack

    Langues Disponibles:  en  |  fr 

    Description: Journalisation Clickstream des liens parcourus par un utilisateur sur un site
    Statut:Extension
    Identificateur de Module:usertrack_module
    Fichier Source:mod_usertrack.c

    Sommaire

    Ce module permet de suivre le parcours d'un utilisateur à travers votre site web en faisant appel aux cookies de navigateur.

    top

    Journalisation

    mod_usertrack définit un cookie qui peut être journalisé via les formats configurables du module mod_log_config :

    LogFormat "%{Apache}n %r %t" usertrack
    CustomLog "logs/clickstream.log" usertrack
    top

    Directive CookieDomain

    Description:Le domaine auquel le cookie traceur s'applique
    Syntaxe:CookieDomain domaine
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_usertrack

    Cette directive permet de définir le domaine auquel le cookie traceur s'applique. Si elle n'est pas présente, aucun domaine n'est inclus dans le champ d'en-tête cookie.

    La chaîne dommaine doit commencer par un point, et doit comporter au moins un point entouré d'autres caractères. Par exemple, .example.com est une chaîne valide, mais www.example.com et .com ne le sont pas.

    La plupart des navigateurs utilisés actuellement n'autorisent pas la définition de cookies pour un domaine racine de deux niveaux, tel que .co.uk, bien qu'un tel domaine remplisse les conditions de validité décrites ci-dessus.
    Ces domaines sont équivalents à des domaines racines comme .com, et autoriser de tels cookies peut constituer un risque en matière de sécurité. Ainsi, si vous vous situez sous un domaine racine de deux niveaux, vous devez encore utiliser votre domaine véritable, comme vous le feriez avec tout autre domaine racine (par exemple .example.co.uk).
    CookieDomain .example.com
    top

    Directive CookieExpires

    Description:Durée avant expiration du cookie traceur
    Syntaxe:CookieExpires durée
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_usertrack

    Lorsqu'elle est utilisée, cette directive définit une durée avant l'expiration du cookie généré par le module usertrack. La durée peut être spécifiée sous la forme d'un nombre de secondes, ou sous une forme du style "2 weeks 3 days 7 hours". les termes valides sont : years, months, weeks, days, hours, minutes et seconds. Si la durée est spécifiée dans un format autre qu'un nombre de secondes, elle doit être entourée de guillemets.

    Si cette directive est absente, la durée de vie des cookies est limitée à la session actuelle du navigateur.

    CookieExpires "3 weeks"
    top

    Directive CookieName

    Description:Nom du cookie traceur
    Syntaxe:CookieName symbole
    Défaut:CookieName Apache
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_usertrack

    Cette directive vous permet de modifier le nom du cookie que ce module utilise pour sa journalisation. Le nom par défaut du cookie est "Apache".

    Vous devez spécifier un nom de cookie valide ; les résultats sont imprévisibles si vous utilisez un nom contenant des caractères inhabituels. Les caractères valides font partie des intervales A-Z, a-z, 0-9, "_", et "-".

    CookieName clicktrack
    top

    Directive CookieStyle

    Description:Format du champ d'en-tête cookie
    Syntaxe:CookieStyle Netscape|Cookie|Cookie2|RFC2109|RFC2965
    Défaut:CookieStyle Netscape
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_usertrack

    Cette directive permet de contrôler le format du champ d'en-tête cookie. Les trois formats autorisés sont :

    • Netscape : il s'agit du format original, mais est désormais obsolète. C'est le format par défaut et il correspond à la syntaxe historique utilisée par Apache.
    • Cookie ou RFC2109 : c'est la syntaxe qui remplace la syntaxe Netscape.
    • Cookie2 ou RFC2965 : c'est la syntaxe de cookie la plus actuelle.

    Tous les clients ne supportent pas l'ensemble de ces formats, mais il est conseillé d'utiliser le plus récent qui sera en général supporté par le navigateur utilisé par vos utilisateurs. A l'heure où ce document est écrit, la plupart des navigateurs supportent ces trois formats, Cookie2 étant le format recommandé.

    CookieStyle Cookie2
    top

    Directive CookieTracking

    Description:Active le cookie traceur
    Syntaxe:CookieTracking on|off
    Défaut:CookieTracking off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_usertrack

    Lorsque le module mod_usertrack est chargé, et si CookieTracking on est définie, Apache enverra un cookie traceur pour toute nouvelle requête. Cette directive peut être utilisée pour activer ou désactiver ce comportement pour un serveur virtuel ou un répertoire. Par défaut, l'activation de mod_usertrack ne suffit pas pour activer les cookies.

    CookieTracking on

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_buffer.html0000644000000000000500000000033013362070302017206 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_buffer.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_buffer.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_status.html.ko.euc-kr0000644000000000000500000002307213412755316021100 0ustar rootsrc mod_status - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_status

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:¼­¹ö Ȱµ¿°ú ¼º´É¿¡ ´ëÇÑ Á¤º¸¸¦ Á¦°øÇÑ´Ù
    »óÅÂ:Base
    ¸ðµâ¸í:status_module
    ¼Ò½ºÆÄÀÏ:mod_status.c

    ¿ä¾à

    Status ¸ðµâÀº ¼­¹ö °ü¸®ÀÚ¿¡°Ô ¼­¹öÀÇ »óŸ¦ º¸¿©ÁØ´Ù. ½±°Ô ÀÐÀ» ¼ö ÀÖ´Â HTML ÆäÀÌÁö·Î ÇöÀç ¼­¹öÅë°è¸¦ º¸¿©ÁØ´Ù. ÇÊ¿äÇÏ´Ù¸é (Ç¥ÁØÀ» µû¸£´Â ºê¶ó¿ìÀú¿¡¼­) ÆäÀÌÁö¸¦ ÀÚµ¿À¸·Î °»½ÅÇÒ ¼ö ÀÖ´Ù. ÇöÀç ¼­¹ö »óŸ¦ ÄÄÇ»ÅͰ¡ ÀÐÀ» ¼ö ÀÖ´Â °£´ÜÇÑ ¸ñ·ÏÀ¸·Î º¸¿©ÁÙ ¼öµµ ÀÖ´Ù.

    ¾Ë·ÁÁÖ´Â Á¤º¸´Â:

    • ¿äûÀ» ¼­ºñ½ºÇÏ´Â workerÀÇ °³¼ö
    • ½¬°í ÀÖ´Â(idle) workerÀÇ °³¼ö
    • °¢ workerµéÀÇ »óÅÂ, worker°¡ ó¸®ÇÑ ¿äûÀÇ °³¼ö¿Í worker°¡ ¼­ºñ½ºÇÑ Àüü ¹ÙÀÌÆ®¼ö (*)
    • ÃÑ Á¢±Ù Ƚ¼ö¿Í ¼­ºñ½ºÇÑ ¹ÙÀÌÆ®¼ö (*)
    • ¼­¹ö°¡ ½ÃÀÛȤÀº Àç½ÃÀÛÇÑ ½Ã°£°ú µ¿ÀÛÇÑ ½Ã°£
    • ÃÊ´ç ¿äû¼ö Æò±Õ, ÃÊ´ç ¼­ºñ½ºÇÑ ¹ÙÀÌÆ®¼ö¿Í ¿äû´ç ¹ÙÀÌÆ®¼ö Æò±Õ (*)
    • ÇöÀç ¾ÆÆÄÄ¡ Àüü¿Í °¢ workerµéÀÇ CPU ºñÀ² (*)
    • ÇöÀç ó¸®Çϰí Àִ ȣ½ºÆ®¿Í ¿äû (*)

    Ç¥ÁØ ¾ÆÆÄÄ¡¿¡´Â "(*)"·Î Ç¥½ÃÇÑ Åë°è¸¦ ¾òÀ» ¼ö ¾ø´Ù. ÀÌ Á¤º¸¸¦ º¸·Á¸é ÄÄÆÄÀϽà ¿É¼ÇÀ» »ç¿ëÇØ¾ß ÇÑ´Ù.

    Support Apache!

    ÁÖÁ¦

    Áö½Ã¾îµé

    ÀÌ ¸ðµâ¿¡´Â Áö½Ã¾î°¡ ¾ø½À´Ï´Ù.

    Bugfix checklist

    Âü°í

    top

    Status »ç¿ëÇϱâ

    foo.com µµ¸ÞÀο¡¼­ Á¢±ÙÇÑ ºê¶ó¿ìÀú¿¡°Ô¸¸ »óŸ¦ º¸¿©ÁÖ·Á¸é httpd.conf ¼³Á¤ÆÄÀÏ¿¡ ´ÙÀ½°ú °°ÀÌ Ãß°¡ÇÑ´Ù

    <Location /server-status>
    SetHandler server-status

    Order Deny,Allow
    Deny from all
    Allow from .foo.com
    </Location>

    ÀÌÁ¦ À¥ºê¶ó¿ìÀú·Î http://your.server.name/server-status ÆäÀÌÁö¿¡ Á¢±ÙÇÏ¸é ¼­¹ö Åë°è¸¦ º¼ ¼ö ÀÖ´Ù.

    top

    ÀÚµ¿ °»½Å

    ºê¶ó¿ìÀú°¡ "Àç°»½Å"À» Áö¿øÇÑ´Ù¸é status ÆäÀÌÁö¸¦ ÀÚµ¿À¸·Î °»½ÅÇÒ ¼ö ÀÖ´Ù. N Ãʸ¶´Ù °»½ÅÇÏ·Á¸é http://your.server.name/server-status?refresh=N ÆäÀÌÁö¸¦ »ç¿ëÇ϶ó.

    top

    ÄÄÇ»ÅͰ¡ ÀÐÀ» ¼ö ÀÖ´Â Status ÆÄÀÏ

    http://your.server.name/server-status?auto¿¡¼­ ÄÄÇ»ÅͰ¡ ½±°Ô ÀÐÀ» ¼ö ÀÖ´Â status ÆÄÀÏÀ» ¾òÀ» ¼ö ÀÖ´Ù. ÀÌ Çü½ÄÀº ¾ÆÆÄÄ¡ /support µð·ºÅ丮¿¡ ÀÖ´Â log_server_status Perl ÇÁ·Î±×·¥°ú °°ÀÌ ÀÚµ¿À¸·Î ½ÇÇàÇÏ´Â ÇÁ·Î±×·¥¿¡ À¯¿ëÇÏ´Ù.

    mod_status¸¦ ¼­¹ö¿Í °°ÀÌ ÄÄÆÄÀÏÇÏ¿´´Ù¸é µð·ºÅ丮º° ¼³Á¤ÆÄÀÏÀ» (¿¹¸¦ µé¾î, .htaccess) Æ÷ÇÔÇÏ¿© ¸ðµç ¼³Á¤ÆÄÀÏ¿¡¼­ Çڵ鷯¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù. ±×·¡¼­ »çÀÌÆ®¿¡ º¸¾È ¹®Á¦°¡ ¹ß»ýÇÒ ¼ö ÀÖ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_data.html.fr.utf80000644000000000000500000001727313412755316020172 0ustar rootsrc mod_data - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_data

    Langues Disponibles:  en  |  fr 

    Description:Convertit un corps de réponse en URL de type données RFC2397
    Statut:Extension
    Identificateur de Module:data_module
    Fichier Source:mod_data.c
    Compatibilité:Disponible depuis la version 2.3 du serveur HTTP Apache

    Sommaire

    Ce module permet de convertir une réponse en URL de type données RFC2397.

    Les URLs de type données peuvent être incluses en ligne dans les pages web via le module mod_include par exemple, afin d'éviter aux clients d'avoir à effectuer des connexions séparées pour éventuellement extraire un grand nombre de petites images. Les URLs de type données peuvent aussi être incluses dans des pages générées par langages de scripting tels que PHP.

    Un exemple d'URL de type données

    data:image/gif;base64,R0lGODdhMAAwAPAAAAAAAP///ywAAAAAMAAw
    AAAC8IyPqcvt3wCcDkiLc7C0qwyGHhSWpjQu5yqmCYsapyuvUUlvONmOZtfzgFz
    ByTB10QgxOR0TqBQejhRNzOfkVJ+5YiUqrXF5Y5lKh/DeuNcP5yLWGsEbtLiOSp
    a/TPg7JpJHxyendzWTBfX0cxOnKPjgBzi4diinWGdkF8kjdfnycQZXZeYGejmJl
    ZeGl9i2icVqaNVailT6F5iJ90m6mvuTS4OK05M0vDk0Q4XUtwvKOzrcd3iq9uis
    F81M1OIcR7lEewwcLp7tuNNkM3uNna3F2JQFo97Vriy/Xl4/f1cf5VWzXyym7PH
    hhx4dbgYKAAA7

    Le filtre n'accepte aucun paramètre, et peut être ajouté à la pile des filtres via la directive SetOutputFilter, ou toute autre directive supportée par le module mod_filter.

    Configuration du filtre

    <Location "/data/images">
        SetOutputFilter DATA
    </Location>
    Support Apache!

    Directives

    Ce module ne fournit aucune directive.

    Traitement des bugs

    Voir aussi

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_speling.html.en0000644000000000000500000002566213412755316020031 0ustar rootsrc mod_speling - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_speling

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Attempts to correct mistaken URLs by ignoring capitalization, or attempting to correct various minor misspellings.
    Status:Extension
    Module Identifier:speling_module
    Source File:mod_speling.c

    Summary

    Requests to documents sometimes cannot be served by the core apache server because the request was misspelled or miscapitalized. This module addresses this problem by trying to find a matching document, even after all other modules gave up. It does its work by comparing each document name in the requested directory against the requested document name without regard to case, and allowing up to one misspelling (character insertion / omission / transposition or wrong character). A list is built with all document names which were matched using this strategy.

    If, after scanning the directory,

    • no matching document was found, Apache will proceed as usual and return a "document not found" error.
    • only one document is found that "almost" matches the request, then it is returned in the form of a redirection response.
    • more than one document with a close match was found, then the list of the matches is returned to the client, and the client can select the correct candidate.
    top

    CheckCaseOnly Directive

    Description:Limits the action of the speling module to case corrections
    Syntax:CheckCaseOnly on|off
    Default:CheckCaseOnly Off
    Context:server config, virtual host, directory, .htaccess
    Override:Options
    Status:Extension
    Module:mod_speling

    When set, this directive limits the action of the spelling correction to lower/upper case changes. Other potential corrections are not performed.

    top

    CheckSpelling Directive

    Description:Enables the spelling module
    Syntax:CheckSpelling on|off
    Default:CheckSpelling Off
    Context:server config, virtual host, directory, .htaccess
    Override:Options
    Status:Extension
    Module:mod_speling

    This directive enables or disables the spelling module. When enabled, keep in mind that

    • the directory scan which is necessary for the spelling correction will have an impact on the server's performance when many spelling corrections have to be performed at the same time.
    • the document trees should not contain sensitive files which could be matched inadvertently by a spelling "correction".
    • the module is unable to correct misspelled user names (as in http://my.host/~apahce/), just file names or directory names.
    • spelling corrections apply strictly to existing files, so a request for the <Location "/status"> may get incorrectly treated as the negotiated file "/stats.html".

    mod_speling should not be enabled in DAV enabled directories, because it will try to "spell fix" newly created resource names against existing filenames, e.g., when trying to upload a new document doc43.html it might redirect to an existing document doc34.html, which is not what was intended.

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_connect.html0000644000000000000500000000050713362070302020635 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy_connect.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_proxy_connect.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_proxy_connect.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_proxy_hcheck.html0000644000000000000500000000034413362070302020430 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy_hcheck.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_proxy_hcheck.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/core.html.es0000644000000000000500000077740713521115051016464 0ustar rootsrc core - Servidor HTTP Apache Versión 2.4
    <-

    Funcionalidad Básica de Apache

    Idiomas disponibles:  de  |  en  |  es  |  fr  |  ja  |  tr 

    Esta traducción podría estar obsoleta. Consulte la versión en inglés de la documentación para comprobar si se han producido cambios recientemente.
    Descripción:Funcionalides básicas del Servidor HTTP Apache que siempre están presentes.
    Estado:Core
    top

    Directiva AcceptFilter

    Descripción:Configura mejoras para un Protocolo de Escucha de Sockets
    Sintaxis:AcceptFilter protocol accept_filter
    Contexto:server config
    Estado:Core
    Módulo:core
    Compatibilidad:Disponible en Apache httpd 2.1.5 y posteriores. En Windows desde Apache httpd 2.3.3 y posteriores.

    Esta directiva hace posible mejoras específicas a nivel de sistema operativo y a través del tipo de Protocolo para un socket que escucha. La premisa básica es que el kernel no envíe un socket al servidor hasta que o bien los datos se hayan recibido o bien se haya almacenado en el buffer una Respuesta HTTP completa. Actualmente sólo están soportados Accept Filters sobre FreeBSD, TCP_DEFER_ACCEPT sobre Linux, y AcceptEx() sobre Windows.

    El uso de none para un argumento desactiva cualquier filtro aceptado para ese protocolo. Esto es útil para protocolos que requieren que un servidor envíe datos primeros, tales como ftp: o nntp:

    AcceptFilter nntp none

    Los nombres de protocolo por defecto son https para el puerto 443 y http para todos los demás puertos. Para especificar que se está utilizando otro protocolo con un puerto escuchando, añade el argumento protocol a la directiva Listen.

    Sobre FreeBDS los valores por defecto:

    AcceptFilter http httpready
    AcceptFilter https dataready

    El filtro httpready almacena en el buffer peticiones HTTP completas a nivel de kernel. Una vez que la petición es recibida, el kernel la envía al servidor. Consulta la página man de accf_http(9) para más detalles. Puesto que las peticiones HTTPS están encriptadas, sólo se utiliza el filtro accf_data(9).

    Sobre Linux los valores por defecto son:

    AcceptFilter http data
    AcceptFilter https data

    En Linux, TCP_DEFER_ACCEPT no soporta el buffering en peticiones http. Cualquier valor además de none habilitará TCP_DEFER_ACCEPT en ese socket. Para más detalles ver la página man de Linux tcp(7).

    Sobre Windows los valores por defecto son:

    AcceptFilter http data
    AcceptFilter https data

    Sobre Windows mpm_winnt interpreta el argumento AcceptFilter para conmutar la API AcceptEx(), y no soporta el buffering sobre el protocolo http. Hay dos valores que utilizan la API Windows AcceptEx() y que recuperan sockets de red entre conexciones. data espera hasta que los datos han sido transmitidos como se comentaba anteriormente, y el buffer inicial de datos y las direcciones de red son recuperadas a partir de una única llamada AcceptEx(). connect utiliza la API AcceptEx() API, y recupera también las direcciones de red, pero a diferencia de none la opción connect no espera a la transmisión inicial de los datos.

    Sobre Windows, none prefiere accept() antes que AcceptEx() y no recuperará sockets entre las conexiones. Lo que es útil para los adaptadores de red con un soporte precario de drivers, así como para algunos proveedores de red tales como drivers vpn, o filtros de spam, de virus o de spyware.

    Consulte también

    • Protocol
    top

    Directiva AcceptPathInfo

    Descripción:Los recursos aceptan información sobre su ruta
    Sintaxis:AcceptPathInfo On|Off|Default
    Valor por defecto:AcceptPathInfo Default
    Contexto:server config, virtual host, directory, .htaccess
    Anula:FileInfo
    Estado:Core
    Módulo:core
    Compatibilidad:Disponible en Apache httpd 2.0.30 y posteriores

    Esta directiva controla si las peticiones que contienen información sobre la ruta que sigue un fichero que existe (o un fichero que no existe pero en un directorio que sí existe) serán aceptadas o denegadas. La información de ruta puede estar disponible para los scripts en la variable de entorno PATH_INFO.

    Por ejemplo, asumamos que la ubicación /test/ apunta a un directorio que contiene únicamente el fichero here.html. Entonces, las peticiones tanto para /test/here.html/more como para /test/nothere.html/more recogen /more como PATH_INFO.

    Los tres posibles argumentos para la directiva AcceptPathInfo son los siguientes:

    Off
    Una petición sólo será aceptada si se corresponde con una ruta literal que existe. Por lo tanto, una petición con una información de ruta después del nombre de fichero tal como /test/here.html/more en el ejemplo anterior devolverá un error 404 NOT FOUND.
    On
    Una petición será aceptada si una ruta principal de acceso se corresponde con un fichero que existe. El ejemplo anterior /test/here.html/more será aceptado si /test/here.html corresponde a un fichero válido.
    Default
    La gestión de las peticiones con información de ruta está determinada por el controlador responsable de la petición. El controlador principal para para ficheros normales rechaza por defecto peticiones PATH_INFO. Los controladores que sirven scripts, tales como cgi-script e isapi-handler, normalmente aceptan PATH_INFO por defecto.

    El objetivo principal de la directiva AcceptPathInfo es permitirte sobreescribir la opción del controlador de aceptar or rechazar PATH_INFO. Este tipo de sobreescritura se necesita, por ejemplo, cuando utilizas un filtro, tal como INCLUDES, para generar contenido basado en PATH_INFO. El controlador principal normalmente rechazaría la petición, de modo que puedes utilizar la siguiente configuración para habilitarla como script:

    <Files "mypaths.shtml">
    Options +Includes
    SetOutputFilter INCLUDES
    AcceptPathInfo On
    </Files>

    top

    Directiva AccessFileName

    Descripción:Nombre del fichero distribuido de configuración
    Sintaxis:AccessFileName filename [filename] ...
    Valor por defecto:AccessFileName .htaccess
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    Mientras que procesa una petición el servidor busca el primer fichero de configuración existente dentro de un listado de nombres en cada directorio de la ruta del documento, si los ficheros distribuidos de configuración están habilitados para ese directorio. Por ejemplo:

    AccessFileName .acl

    antes de servir el documento /usr/local/web/index.html, el servidor leerá /.acl, /usr/.acl, /usr/local/.acl and /usr/local/web/.acl para las directivas, salvo que estén deshabilitadas with

    <Directory />
    AllowOverride None
    </Directory>

    Consulte también

    top

    Directiva AddDefaultCharset

    Descripción:Default charset parameter to be added when a response content-type is text/plain or text/html
    Sintaxis:AddDefaultCharset On|Off|charset
    Valor por defecto:AddDefaultCharset Off
    Contexto:server config, virtual host, directory, .htaccess
    Anula:FileInfo
    Estado:Core
    Módulo:core

    This directive specifies a default value for the media type charset parameter (the name of a character encoding) to be added to a response if and only if the response's content-type is either text/plain or text/html. This should override any charset specified in the body of the response via a META element, though the exact behavior is often dependent on the user's client configuration. A setting of AddDefaultCharset Off disables this functionality. AddDefaultCharset On enables a default charset of iso-8859-1. Any other value is assumed to be the charset to be used, which should be one of the IANA registered charset values for use in Internet media types (MIME types). For example:

    AddDefaultCharset utf-8

    AddDefaultCharset should only be used when all of the text resources to which it applies are known to be in that character encoding and it is too inconvenient to label their charset individually. One such example is to add the charset parameter to resources containing generated content, such as legacy CGI scripts, that might be vulnerable to cross-site scripting attacks due to user-provided data being included in the output. Note, however, that a better solution is to just fix (or delete) those scripts, since setting a default charset does not protect users that have enabled the "auto-detect character encoding" feature on their browser.

    Consulte también

    top

    Directiva AllowEncodedSlashes

    Descripción:Determines whether encoded path separators in URLs are allowed to be passed through
    Sintaxis:AllowEncodedSlashes On|Off
    Valor por defecto:AllowEncodedSlashes Off
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core
    Compatibilidad:Available in Apache httpd 2.0.46 and later

    The AllowEncodedSlashes directive allows URLs which contain encoded path separators (%2F for / and additionally %5C for \ on according systems) to be used. Normally such URLs are refused with a 404 (Not found) error.

    Turning AllowEncodedSlashes On is mostly useful when used in conjunction with PATH_INFO.

    Note

    Allowing encoded slashes does not imply decoding. Occurrences of %2F or %5C (only on according systems) will be left as such in the otherwise decoded URL string.

    Consulte también

    top

    Directiva AllowOverride

    Descripción:Types of directives that are allowed in .htaccess files
    Sintaxis:AllowOverride All|None|directive-type [directive-type] ...
    Valor por defecto:AllowOverride None (2.3.9 and later), AllowOverride All (2.3.8 and earlier)
    Contexto:directory
    Estado:Core
    Módulo:core

    When the server finds an .htaccess file (as specified by AccessFileName) it needs to know which directives declared in that file can override earlier configuration directives.

    Only available in <Directory> sections

    AllowOverride is valid only in <Directory> sections specified without regular expressions, not in <Location>, <DirectoryMatch> or <Files> sections.

    When this directive is set to None, then .htaccess files are completely ignored. In this case, the server will not even attempt to read .htaccess files in the filesystem.

    When this directive is set to All, then any directive which has the .htaccess Context is allowed in .htaccess files.

    The directive-type can be one of the following groupings of directives.

    AuthConfig
    Allow use of the authorization directives (AuthDBMGroupFile, AuthDBMUserFile, AuthGroupFile, AuthName, AuthType, AuthUserFile, Require, etc.).
    FileInfo
    Allow use of the directives controlling document types (ErrorDocument, ForceType, LanguagePriority, SetHandler, SetInputFilter, SetOutputFilter, and mod_mime Add* and Remove* directives), document meta data (Header, RequestHeader, SetEnvIf, SetEnvIfNoCase, BrowserMatch, CookieExpires, CookieDomain, CookieStyle, CookieTracking, CookieName), mod_rewrite directives RewriteEngine, RewriteOptions, RewriteBase, RewriteCond, RewriteRule) and Action from mod_actions.
    Indexes
    Allow use of the directives controlling directory indexing (AddDescription, AddIcon, AddIconByEncoding, AddIconByType, DefaultIcon, DirectoryIndex, FancyIndexing, HeaderName, IndexIgnore, IndexOptions, ReadmeName, etc.).
    Limit
    Allow use of the directives controlling host access (Allow, Deny and Order).
    Options[=Option,...]
    Allow use of the directives controlling specific directory features (Options and XBitHack). An equal sign may be given followed by a comma (but no spaces) separated lists of options that may be set using the Options command.

    Example:

    AllowOverride AuthConfig Indexes

    In the example above all directives that are neither in the group AuthConfig nor Indexes cause an internal server error.

    For security and performance reasons, do not set AllowOverride to anything other than None in your <Directory /> block. Instead, find (or create) the <Directory> block that refers to the directory where you're actually planning to place a .htaccess file.

    Consulte también

    top

    Directiva AllowOverrideList

    Descripción:Individual directives that are allowed in .htaccess files
    Sintaxis:AllowOverrideList None|directive [directive-type] ...
    Valor por defecto:AllowOverrideList None
    Contexto:directory
    Estado:Core
    Módulo:core

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    Consulte también

    top

    Directiva CGIMapExtension

    Descripción:Technique for locating the interpreter for CGI scripts
    Sintaxis:CGIMapExtension cgi-path .extension
    Contexto:directory, .htaccess
    Anula:FileInfo
    Estado:Core
    Módulo:core
    Compatibilidad:NetWare only

    This directive is used to control how Apache httpd finds the interpreter used to run CGI scripts. For example, setting CGIMapExtension sys:\foo.nlm .foo will cause all CGI script files with a .foo extension to be passed to the FOO interpreter.

    top

    Directiva CGIPassAuth

    Descripción:Enables passing HTTP authorization headers to scripts as CGI variables
    Sintaxis:CGIPassAuth On|Off
    Valor por defecto:CGIPassAuth Off
    Contexto:directory, .htaccess
    Anula:AuthConfig
    Estado:Core
    Módulo:core
    Compatibilidad:Available in Apache HTTP Server 2.4.13 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    Directiva CGIVar

    Descripción:Controls how some CGI variables are set
    Sintaxis:CGIVar variable rule
    Contexto:directory, .htaccess
    Anula:FileInfo
    Estado:Core
    Módulo:core
    Compatibilidad:Available in Apache HTTP Server 2.4.21 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    Directiva ContentDigest

    Descripción:Enables the generation of Content-MD5 HTTP Response headers
    Sintaxis:ContentDigest On|Off
    Valor por defecto:ContentDigest Off
    Contexto:server config, virtual host, directory, .htaccess
    Anula:Options
    Estado:Core
    Módulo:core

    This directive enables the generation of Content-MD5 headers as defined in RFC1864 respectively RFC2616.

    MD5 is an algorithm for computing a "message digest" (sometimes called "fingerprint") of arbitrary-length data, with a high degree of confidence that any alterations in the data will be reflected in alterations in the message digest.

    The Content-MD5 header provides an end-to-end message integrity check (MIC) of the entity-body. A proxy or client may check this header for detecting accidental modification of the entity-body in transit. Example header:

    Content-MD5: AuLb7Dp1rqtRtxz2m9kRpA==

    Note that this can cause performance problems on your server since the message digest is computed on every request (the values are not cached).

    Content-MD5 is only sent for documents served by the core, and not by any module. For example, SSI documents, output from CGI scripts, and byte range responses do not have this header.

    top

    Directiva DefaultRuntimeDir

    Descripción:Base directory for the server run-time files
    Sintaxis:DefaultRuntimeDir directory-path
    Valor por defecto:DefaultRuntimeDir DEFAULT_REL_RUNTIMEDIR (logs/)
    Contexto:server config
    Estado:Core
    Módulo:core
    Compatibilidad:Available in Apache 2.4.2 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    Consulte también

    • the security tips for information on how to properly set permissions on the ServerRoot
    top

    Directiva DefaultType

    Descripción:This directive has no effect other than to emit warnings if the value is not none. In prior versions, DefaultType would specify a default media type to assign to response content for which no other media type configuration could be found.
    Sintaxis:DefaultType media-type|none
    Valor por defecto:DefaultType none
    Contexto:server config, virtual host, directory, .htaccess
    Anula:FileInfo
    Estado:Core
    Módulo:core
    Compatibilidad:The argument none is available in Apache httpd 2.2.7 and later. All other choices are DISABLED for 2.3.x and later.

    This directive has been disabled. For backwards compatibility of configuration files, it may be specified with the value none, meaning no default media type. For example:

    DefaultType None

    DefaultType None is only available in httpd-2.2.7 and later.

    Use the mime.types configuration file and the AddType to configure media type assignments via file extensions, or the ForceType directive to configure the media type for specific resources. Otherwise, the server will send the response without a Content-Type header field and the recipient may attempt to guess the media type.

    top

    Directiva Define

    Descripción:Define the existence of a variable
    Sintaxis:Define parameter-name
    Contexto:server config
    Estado:Core
    Módulo:core

    Equivalent to passing the -D argument to httpd.

    This directive can be used to toggle the use of <IfDefine> sections without needing to alter -D arguments in any startup scripts.

    top

    Directiva <Directory>

    Descripción:Enclose a group of directives that apply only to the named file-system directory, sub-directories, and their contents.
    Sintaxis:<Directory directory-path> ... </Directory>
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    <Directory> and </Directory> are used to enclose a group of directives that will apply only to the named directory, sub-directories of that directory, and the files within the respective directories. Any directive that is allowed in a directory context may be used. Directory-path is either the full path to a directory, or a wild-card string using Unix shell-style matching. In a wild-card string, ? matches any single character, and * matches any sequences of characters. You may also use [] character ranges. None of the wildcards match a `/' character, so <Directory /*/public_html> will not match /home/user/public_html, but <Directory /home/*/public_html> will match. Example:

    <Directory /usr/local/httpd/htdocs>
    Options Indexes FollowSymLinks
    </Directory>

    Be careful with the directory-path arguments: They have to literally match the filesystem path which Apache httpd uses to access the files. Directives applied to a particular <Directory> will not apply to files accessed from that same directory via a different path, such as via different symbolic links.

    Regular expressions can also be used, with the addition of the ~ character. For example:

    <Directory ~ "^/www/.*/[0-9]{3}">

    would match directories in /www/ that consisted of three numbers.

    If multiple (non-regular expression) <Directory> sections match the directory (or one of its parents) containing a document, then the directives are applied in the order of shortest match first, interspersed with the directives from the .htaccess files. For example, with

    <Directory />
    AllowOverride None
    </Directory>

    <Directory /home/>
    AllowOverride FileInfo
    </Directory>

    for access to the document /home/web/dir/doc.html the steps are:

    • Apply directive AllowOverride None (disabling .htaccess files).
    • Apply directive AllowOverride FileInfo (for directory /home).
    • Apply any FileInfo directives in /home/.htaccess, /home/web/.htaccess and /home/web/dir/.htaccess in that order.

    Regular expressions are not considered until after all of the normal sections have been applied. Then all of the regular expressions are tested in the order they appeared in the configuration file. For example, with

    <Directory ~ abc$>
    # ... directives here ...
    </Directory>

    the regular expression section won't be considered until after all normal <Directory>s and .htaccess files have been applied. Then the regular expression will match on /home/abc/public_html/abc and the corresponding <Directory> will be applied.

    Note that the default access for <Directory /> is Allow from All. This means that Apache httpd will serve any file mapped from an URL. It is recommended that you change this with a block such as

    <Directory />
    Order Deny,Allow
    Deny from All
    </Directory>

    and then override this for directories you want accessible. See the Security Tips page for more details.

    The directory sections occur in the httpd.conf file. <Directory> directives cannot nest, and cannot appear in a <Limit> or <LimitExcept> section.

    Consulte también

    top

    Directiva <DirectoryMatch>

    Descripción:Enclose directives that apply to the contents of file-system directories matching a regular expression.
    Sintaxis:<DirectoryMatch regex> ... </DirectoryMatch>
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    <DirectoryMatch> and </DirectoryMatch> are used to enclose a group of directives which will apply only to the named directory (and the files within), the same as <Directory>. However, it takes as an argument a regular expression. For example:

    <DirectoryMatch "^/www/(.+/)?[0-9]{3}">

    would match directories in /www/ that consisted of three numbers.

    Compatability

    Prior to 2.3.9, this directive implicitly applied to sub-directories (like <Directory>) and could not match the end of line symbol ($). In 2.3.9 and later, only directories that match the expression are affected by the enclosed directives.

    Trailing Slash

    This directive applies to requests for directories that may or may not end in a trailing slash, so expressions that are anchored to the end of line ($) must be written with care.

    Consulte también

    top

    Directiva DocumentRoot

    Descripción:Directory that forms the main document tree visible from the web
    Sintaxis:DocumentRoot directory-path
    Valor por defecto:DocumentRoot /usr/local/apache/htdocs
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    This directive sets the directory from which httpd will serve files. Unless matched by a directive like Alias, the server appends the path from the requested URL to the document root to make the path to the document. Example:

    DocumentRoot /usr/web

    then an access to http://www.my.host.com/index.html refers to /usr/web/index.html. If the directory-path is not absolute then it is assumed to be relative to the ServerRoot.

    The DocumentRoot should be specified without a trailing slash.

    Consulte también

    top

    Directiva <Else>

    Descripción:Contains directives that apply only if the condition of a previous <If> or <ElseIf> section is not satisfied by a request at runtime
    Sintaxis:<Else> ... </Else>
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core
    Compatibilidad:Nested conditions are evaluated in 2.4.26 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    Consulte también

    top

    Directiva <ElseIf>

    Descripción:Contains directives that apply only if a condition is satisfied by a request at runtime while the condition of a previous <If> or <ElseIf> section is not satisfied
    Sintaxis:<ElseIf expression> ... </ElseIf>
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core
    Compatibilidad:Nested conditions are evaluated in 2.4.26 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    Consulte también

    top

    Directiva EnableMMAP

    Descripción:Use memory-mapping to read files during delivery
    Sintaxis:EnableMMAP On|Off
    Valor por defecto:EnableMMAP On
    Contexto:server config, virtual host, directory, .htaccess
    Anula:FileInfo
    Estado:Core
    Módulo:core

    This directive controls whether the httpd may use memory-mapping if it needs to read the contents of a file during delivery. By default, when the handling of a request requires access to the data within a file -- for example, when delivering a server-parsed file using mod_include -- Apache httpd memory-maps the file if the OS supports it.

    This memory-mapping sometimes yields a performance improvement. But in some environments, it is better to disable the memory-mapping to prevent operational problems:

    • On some multiprocessor systems, memory-mapping can reduce the performance of the httpd.
    • Deleting or truncating a file while httpd has it memory-mapped can cause httpd to crash with a segmentation fault.

    For server configurations that are vulnerable to these problems, you should disable memory-mapping of delivered files by specifying:

    EnableMMAP Off

    For NFS mounted files, this feature may be disabled explicitly for the offending files by specifying:

    <Directory "/path-to-nfs-files"> EnableMMAP Off </Directory>

    top

    Directiva EnableSendfile

    Descripción:Use the kernel sendfile support to deliver files to the client
    Sintaxis:EnableSendfile On|Off
    Valor por defecto:EnableSendfile Off
    Contexto:server config, virtual host, directory, .htaccess
    Anula:FileInfo
    Estado:Core
    Módulo:core
    Compatibilidad:Available in version 2.0.44 and later. Default changed to Off in version 2.3.9.

    This directive controls whether httpd may use the sendfile support from the kernel to transmit file contents to the client. By default, when the handling of a request requires no access to the data within a file -- for example, when delivering a static file -- Apache httpd uses sendfile to deliver the file contents without ever reading the file if the OS supports it.

    This sendfile mechanism avoids separate read and send operations, and buffer allocations. But on some platforms or within some filesystems, it is better to disable this feature to avoid operational problems:

    • Some platforms may have broken sendfile support that the build system did not detect, especially if the binaries were built on another box and moved to such a machine with broken sendfile support.
    • On Linux the use of sendfile triggers TCP-checksum offloading bugs on certain networking cards when using IPv6.
    • On Linux on Itanium, sendfile may be unable to handle files over 2GB in size.
    • With a network-mounted DocumentRoot (e.g., NFS, SMB, CIFS, FUSE), the kernel may be unable to serve the network file through its own cache.

    For server configurations that are not vulnerable to these problems, you may enable this feature by specifying:

    EnableSendfile On

    For network mounted files, this feature may be disabled explicitly for the offending files by specifying:

    <Directory "/path-to-nfs-files"> EnableSendfile Off </Directory>

    Please note that the per-directory and .htaccess configuration of EnableSendfile is not supported by mod_cache_disk. Only global definition of EnableSendfile is taken into account by the module.

    top

    Directiva Error

    Descripción:Abort configuration parsing with a custom error message
    Sintaxis:Error message
    Contexto:server config, virtual host, directory, .htaccess
    Estado:Core
    Módulo:core
    Compatibilidad:2.3.9 and later

    If an error can be detected within the configuration, this directive can be used to generate a custom error message, and halt configuration parsing. The typical use is for reporting required modules which are missing from the configuration.

    Example

    # ensure that mod_include is loaded
    <IfModule !include_module>
    Error mod_include is required by mod_foo. Load it with LoadModule.
    </IfModule>

    # ensure that exactly one of SSL,NOSSL is defined
    <IfDefine SSL>
    <IfDefine NOSSL>
    Error Both SSL and NOSSL are defined. Define only one of them.
    </IfDefine>
    </IfDefine>
    <IfDefine !SSL>
    <IfDefine !NOSSL>
    Error Either SSL or NOSSL must be defined.
    </IfDefine>
    </IfDefine>

    top

    Directiva ErrorDocument

    Descripción:What the server will return to the client in case of an error
    Sintaxis:ErrorDocument error-code document
    Contexto:server config, virtual host, directory, .htaccess
    Anula:FileInfo
    Estado:Core
    Módulo:core

    In the event of a problem or error, Apache httpd can be configured to do one of four things,

    1. output a simple hardcoded error message
    2. output a customized message
    3. redirect to a local URL-path to handle the problem/error
    4. redirect to an external URL to handle the problem/error

    The first option is the default, while options 2-4 are configured using the ErrorDocument directive, which is followed by the HTTP response code and a URL or a message. Apache httpd will sometimes offer additional information regarding the problem/error.

    URLs can begin with a slash (/) for local web-paths (relative to the DocumentRoot), or be a full URL which the client can resolve. Alternatively, a message can be provided to be displayed by the browser. Examples:

    ErrorDocument 500 http://foo.example.com/cgi-bin/tester
    ErrorDocument 404 /cgi-bin/bad_urls.pl
    ErrorDocument 401 /subscription_info.html
    ErrorDocument 403 "Sorry can't allow you access today"

    Additionally, the special value default can be used to specify Apache httpd's simple hardcoded message. While not required under normal circumstances, default will restore Apache httpd's simple hardcoded message for configurations that would otherwise inherit an existing ErrorDocument.

    ErrorDocument 404 /cgi-bin/bad_urls.pl

    <Directory /web/docs>
    ErrorDocument 404 default
    </Directory>

    Note that when you specify an ErrorDocument that points to a remote URL (ie. anything with a method such as http in front of it), Apache HTTP Server will send a redirect to the client to tell it where to find the document, even if the document ends up being on the same server. This has several implications, the most important being that the client will not receive the original error status code, but instead will receive a redirect status code. This in turn can confuse web robots and other clients which try to determine if a URL is valid using the status code. In addition, if you use a remote URL in an ErrorDocument 401, the client will not know to prompt the user for a password since it will not receive the 401 status code. Therefore, if you use an ErrorDocument 401 directive then it must refer to a local document.

    Microsoft Internet Explorer (MSIE) will by default ignore server-generated error messages when they are "too small" and substitute its own "friendly" error messages. The size threshold varies depending on the type of error, but in general, if you make your error document greater than 512 bytes, then MSIE will show the server-generated error rather than masking it. More information is available in Microsoft Knowledge Base article Q294807.

    Although most error messages can be overriden, there are certain circumstances where the internal messages are used regardless of the setting of ErrorDocument. In particular, if a malformed request is detected, normal request processing will be immediately halted and the internal error message returned. This is necessary to guard against security problems caused by bad requests.

    If you are using mod_proxy, you may wish to enable ProxyErrorOverride so that you can provide custom error messages on behalf of your Origin servers. If you don't enable ProxyErrorOverride, Apache httpd will not generate custom error documents for proxied content.

    Consulte también

    top

    Directiva ErrorLog

    Descripción:Location where the server will log errors
    Sintaxis: ErrorLog file-path|syslog[:facility]
    Valor por defecto:ErrorLog logs/error_log (Unix) ErrorLog logs/error.log (Windows and OS/2)
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    The ErrorLog directive sets the name of the file to which the server will log any errors it encounters. If the file-path is not absolute then it is assumed to be relative to the ServerRoot.

    Example

    ErrorLog /var/log/httpd/error_log

    If the file-path begins with a pipe character "|" then it is assumed to be a command to spawn to handle the error log.

    Example

    ErrorLog "|/usr/local/bin/httpd_errors"

    See the notes on piped logs for more information.

    Using syslog instead of a filename enables logging via syslogd(8) if the system supports it. The default is to use syslog facility local7, but you can override this by using the syslog:facility syntax where facility can be one of the names usually documented in syslog(1). The facility is effectively global, and if it is changed in individual virtual hosts, the final facility specified affects the entire server.

    Example

    ErrorLog syslog:user

    SECURITY: See the security tips document for details on why your security could be compromised if the directory where log files are stored is writable by anyone other than the user that starts the server.

    Note

    When entering a file path on non-Unix platforms, care should be taken to make sure that only forward slashed are used even though the platform may allow the use of back slashes. In general it is a good idea to always use forward slashes throughout the configuration files.

    Consulte también

    top

    Directiva ErrorLogFormat

    Descripción:Format specification for error log entries
    Sintaxis: ErrorLog [connection|request] format
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core
    Compatibilidad:Available in Apache httpd 2.3.9 and later

    ErrorLogFormat allows to specify what supplementary information is logged in the error log in addition to the actual log message.

    Simple example

    ErrorLogFormat "[%t] [%l] [pid %P] %F: %E: [client %a] %M"

    Specifying connection or request as first paramter allows to specify additional formats, causing additional information to be logged when the first message is logged for a specific connection or request, respectivly. This additional information is only logged once per connection/request. If a connection or request is processed without causing any log message, the additional information is not logged either.

    It can happen that some format string items do not produce output. For example, the Referer header is only present if the log message is associated to a request and the log message happens at a time when the Referer header has already been read from the client. If no output is produced, the default behaviour is to delete everything from the preceeding space character to the next space character. This means the log line is implicitly divided into fields on non-whitespace to whitespace transitions. If a format string item does not produce output, the whole field is ommitted. For example, if the remote address %a in the log format [%t] [%l] [%a] %M  is not available, the surrounding brackets are not logged either. Space characters can be escaped with a backslash to prevent them from delimiting a field. The combination '% ' (percent space) is a zero-witdh field delimiter that does not produce any output.

    The above behaviour can be changed by adding modifiers to the format string item. A - (minus) modifier causes a minus to be logged if the respective item does not produce any output. In once-per-connection/request formats, it is also possible to use the + (plus) modifier. If an item with the plus modifier does not produce any output, the whole line is ommitted.

    A number as modifier can be used to assign a log severity level to a format item. The item will only be logged if the severity of the log message is not higher than the specified log severity level. The number can range from 1 (alert) over 4 (warn) and 7 (debug) to 15 (trace8).

    Some format string items accept additional parameters in braces.

    Format String Description
    %% The percent sign
    %...a Remote IP-address and port
    %...A Local IP-address and port
    %...{name}e Request environment variable name
    %...E APR/OS error status code and string
    %...F Source file name and line number of the log call
    %...{name}i Request header name
    %...k Number of keep-alive requests on this connection
    %...l Loglevel of the message
    %...L Log ID of the request
    %...{c}L Log ID of the connection
    %...{C}L Log ID of the connection if used in connection scope, empty otherwise
    %...m Name of the module logging the message
    %M The actual log message
    %...{name}n Request note name
    %...P Process ID of current process
    %...T Thread ID of current thread
    %...t The current time
    %...{u}t The current time including micro-seconds
    %...{cu}t The current time in compact ISO 8601 format, including micro-seconds
    %...v The canonical ServerName of the current server.
    %...V The server name of the server serving the request according to the UseCanonicalName setting.
    (backslash space) Non-field delimiting space
    (percent space) Field delimiter (no output)

    The log ID format %L produces a unique id for a connection or request. This can be used to correlate which log lines belong to the same connection or request, which request happens on which connection. A %L format string is also available in mod_log_config, to allow to correlate access log entries with error log lines. If mod_unique_id is loaded, its unique id will be used as log ID for requests.

    Example (somewhat similar to default format)

    ErrorLogFormat "[%{u}t] [%-m:%l] [pid %P] %7F: %E: [client\ %a] %M% ,\ referer\ %{Referer}i"

    Example (similar to the 2.2.x format)

    ErrorLogFormat "[%t] [%l] %7F: %E: [client\ %a] %M% ,\ referer\ %{Referer}i"

    Advanced example with request/connection log IDs

    ErrorLogFormat "[%{uc}t] [%-m:%-l] [R:%L] [C:%{C}L] %7F: %E: %M"
    ErrorLogFormat request "[%{uc}t] [R:%L] Request %k on C:%{c}L pid:%P tid:%T"
    ErrorLogFormat request "[%{uc}t] [R:%L] UA:'%+{User-Agent}i'"
    ErrorLogFormat request "[%{uc}t] [R:%L] Referer:'%+{Referer}i'"
    ErrorLogFormat connection "[%{uc}t] [C:%{c}L] local\ %a remote\ %A"

    Consulte también

    top

    Directiva ExtendedStatus

    Descripción:Keep track of extended status information for each request
    Sintaxis:ExtendedStatus On|Off
    Valor por defecto:ExtendedStatus Off[*]
    Contexto:server config
    Estado:Core
    Módulo:core

    This option tracks additional data per worker about the currently executing request, and a utilization summary; you can see these variables during runtime by configuring mod_status. Note that other modules may rely on this scoreboard.

    This setting applies to the entire server, and cannot be enabled or disabled on a virtualhost-by-virtualhost basis. The collection of extended status information can slow down the server. Also note that this setting cannot be changed during a graceful restart.

    Note that loading mod_status will change the default behavior to ExtendedStatus On, while other third party modules may do the same. Such modules rely on collecting detailed information about the state of all workers. The default is changed by mod_status beginning with version 2.3.6; the previous default was always Off.

    top

    Directiva FileETag

    Descripción:File attributes used to create the ETag HTTP response header for static files
    Sintaxis:FileETag component ...
    Valor por defecto:FileETag INode MTime Size
    Contexto:server config, virtual host, directory, .htaccess
    Anula:FileInfo
    Estado:Core
    Módulo:core

    The FileETag directive configures the file attributes that are used to create the ETag (entity tag) response header field when the document is based on a static file. (The ETag value is used in cache management to save network bandwidth.) The FileETag directive allows you to choose which of these -- if any -- should be used. The recognized keywords are:

    INode
    The file's i-node number will be included in the calculation
    MTime
    The date and time the file was last modified will be included
    Size
    The number of bytes in the file will be included
    All
    All available fields will be used. This is equivalent to:

    FileETag INode MTime Size

    None
    If a document is file-based, no ETag field will be included in the response

    The INode, MTime, and Size keywords may be prefixed with either + or -, which allow changes to be made to the default setting inherited from a broader scope. Any keyword appearing without such a prefix immediately and completely cancels the inherited setting.

    If a directory's configuration includes FileETag INode MTime Size, and a subdirectory's includes FileETag -INode, the setting for that subdirectory (which will be inherited by any sub-subdirectories that don't override it) will be equivalent to FileETag MTime Size.

    Warning

    Do not change the default for directories or locations that have WebDAV enabled and use mod_dav_fs as a storage provider. mod_dav_fs uses INode MTime Size as a fixed format for ETag comparisons on conditional requests. These conditional requests will break if the ETag format is changed via FileETag.

    Server Side Includes

    An ETag is not generated for responses parsed by mod_include, since the response entity can change without a change of the INode, MTime, or Size of the static file with embedded SSI directives.
    top

    Directiva <Files>

    Descripción:Contains directives that apply to matched filenames
    Sintaxis:<Files filename> ... </Files>
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core

    The <Files> directive limits the scope of the enclosed directives by filename. It is comparable to the <Directory> and <Location> directives. It should be matched with a </Files> directive. The directives given within this section will be applied to any object with a basename (last component of filename) matching the specified filename. <Files> sections are processed in the order they appear in the configuration file, after the <Directory> sections and .htaccess files are read, but before <Location> sections. Note that <Files> can be nested inside <Directory> sections to restrict the portion of the filesystem they apply to.

    The filename argument should include a filename, or a wild-card string, where ? matches any single character, and * matches any sequences of characters. Regular expressions can also be used, with the addition of the ~ character. For example:

    <Files ~ "\.(gif|jpe?g|png)$">

    would match most common Internet graphics formats. <FilesMatch> is preferred, however.

    Note that unlike <Directory> and <Location> sections, <Files> sections can be used inside .htaccess files. This allows users to control access to their own files, at a file-by-file level.

    Consulte también

    top

    Directiva <FilesMatch>

    Descripción:Contains directives that apply to regular-expression matched filenames
    Sintaxis:<FilesMatch regex> ... </FilesMatch>
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core

    The <FilesMatch> directive limits the scope of the enclosed directives by filename, just as the <Files> directive does. However, it accepts a regular expression. For example:

    <FilesMatch "\.(gif|jpe?g|png)$">

    would match most common Internet graphics formats.

    Consulte también

    top

    Directiva ForceType

    Descripción:Forces all matching files to be served with the specified media type in the HTTP Content-Type header field
    Sintaxis:ForceType media-type|None
    Contexto:directory, .htaccess
    Anula:FileInfo
    Estado:Core
    Módulo:core
    Compatibilidad:Moved to the core in Apache httpd 2.0

    When placed into an .htaccess file or a <Directory>, or <Location> or <Files> section, this directive forces all matching files to be served with the content type identification given by media-type. For example, if you had a directory full of GIF files, but did not want to label them all with .gif, you might want to use:

    ForceType image/gif

    Note that this directive overrides other indirect media type associations defined in mime.types or via the AddType.

    You can also override more general ForceType settings by using the value of None:

    # force all files to be image/gif:
    <Location /images>
    ForceType image/gif
    </Location>

    # but normal mime-type associations here:
    <Location /images/mixed>
    ForceType None
    </Location>

    This directive primarily overrides the content types generated for static files served out of the filesystem. For resources other than static files, where the generator of the response typically specifies a Content-Type, this directive has no effect.

    top

    Directiva GprofDir

    Descripción:Directory to write gmon.out profiling data to.
    Sintaxis:GprofDir /tmp/gprof/|/tmp/gprof/%
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    When the server has been compiled with gprof profiling support, GprofDir causes gmon.out files to be written to the specified directory when the process exits. If the argument ends with a percent symbol ('%'), subdirectories are created for each process id.

    This directive currently only works with the prefork MPM.

    top

    Directiva HostnameLookups

    Descripción:Enables DNS lookups on client IP addresses
    Sintaxis:HostnameLookups On|Off|Double
    Valor por defecto:HostnameLookups Off
    Contexto:server config, virtual host, directory
    Estado:Core
    Módulo:core

    This directive enables DNS lookups so that host names can be logged (and passed to CGIs/SSIs in REMOTE_HOST). The value Double refers to doing double-reverse DNS lookup. That is, after a reverse lookup is performed, a forward lookup is then performed on that result. At least one of the IP addresses in the forward lookup must match the original address. (In "tcpwrappers" terminology this is called PARANOID.)

    Regardless of the setting, when mod_authz_host is used for controlling access by hostname, a double reverse lookup will be performed. This is necessary for security. Note that the result of this double-reverse isn't generally available unless you set HostnameLookups Double. For example, if only HostnameLookups On and a request is made to an object that is protected by hostname restrictions, regardless of whether the double-reverse fails or not, CGIs will still be passed the single-reverse result in REMOTE_HOST.

    The default is Off in order to save the network traffic for those sites that don't truly need the reverse lookups done. It is also better for the end users because they don't have to suffer the extra latency that a lookup entails. Heavily loaded sites should leave this directive Off, since DNS lookups can take considerable amounts of time. The utility logresolve, compiled by default to the bin subdirectory of your installation directory, can be used to look up host names from logged IP addresses offline.

    top

    Directiva HttpProtocolOptions

    Descripción:Modify restrictions on HTTP Request Messages
    Sintaxis:HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0]
    Valor por defecto:HttpProtocolOptions Strict LenientMethods Allow0.9
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core
    Compatibilidad:2.2.32 or 2.4.24 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    Directiva <If>

    Descripción:Contains directives that apply only if a condition is satisfied by a request at runtime
    Sintaxis:<If expression> ... </If>
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core

    The <If> directive evaluates an expression at runtime, and applies the enclosed directives if and only if the expression evaluates to true. For example:

    <If "$req{Host} = ''">

    would match HTTP/1.0 requests without a Host: header.

    You may compare the value of any variable in the request headers ($req), response headers ($resp) or environment ($env) in your expression.

    Apart from =, If can use the IN operator to compare if the expression is in a given range:

    <If %{REQUEST_METHOD} IN GET,HEAD,OPTIONS>

    Consulte también

    top

    Directiva <IfDefine>

    Descripción:Encloses directives that will be processed only if a test is true at startup
    Sintaxis:<IfDefine [!]parameter-name> ... </IfDefine>
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core

    The <IfDefine test>...</IfDefine> section is used to mark directives that are conditional. The directives within an <IfDefine> section are only processed if the test is true. If test is false, everything between the start and end markers is ignored.

    The test in the <IfDefine> section directive can be one of two forms:

    • parameter-name
    • !parameter-name

    In the former case, the directives between the start and end markers are only processed if the parameter named parameter-name is defined. The second format reverses the test, and only processes the directives if parameter-name is not defined.

    The parameter-name argument is a define as given on the httpd command line via -Dparameter at the time the server was started or by the Define directive.

    <IfDefine> sections are nest-able, which can be used to implement simple multiple-parameter tests. Example:

    httpd -DReverseProxy -DUseCache -DMemCache ...

    # httpd.conf
    <IfDefine ReverseProxy>
    LoadModule proxy_module modules/mod_proxy.so
    LoadModule proxy_http_module modules/mod_proxy_http.so
    <IfDefine UseCache>
    LoadModule cache_module modules/mod_cache.so
    <IfDefine MemCache>
    LoadModule mem_cache_module modules/mod_mem_cache.so
    </IfDefine>
    <IfDefine !MemCache>
    LoadModule cache_disk_module modules/mod_cache_disk.so
    </IfDefine>
    </IfDefine>
    </IfDefine>

    top

    Directiva <IfDirective>

    Descripción:Encloses directives that are processed conditional on the presence or absence of a specific directive
    Sintaxis:<IfDirective [!]directive-name> ... </IfDirective>
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core
    Compatibilidad:Available in 2.4.34 and later.

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    Consulte también

    top

    Directiva <IfFile>

    Descripción:Encloses directives that will be processed only if file exists at startup
    Sintaxis:<IfFile [!]filename> ... </IfFile>
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core
    Compatibilidad:Available in 2.4.34 and later.

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    Directiva <IfModule>

    Descripción:Encloses directives that are processed conditional on the presence or absence of a specific module
    Sintaxis:<IfModule [!]module-file|module-identifier> ... </IfModule>
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core
    Compatibilidad:Module identifiers are available in version 2.1 and later.

    The <IfModule test>...</IfModule> section is used to mark directives that are conditional on the presence of a specific module. The directives within an <IfModule> section are only processed if the test is true. If test is false, everything between the start and end markers is ignored.

    The test in the <IfModule> section directive can be one of two forms:

    • module
    • !module

    In the former case, the directives between the start and end markers are only processed if the module named module is included in Apache httpd -- either compiled in or dynamically loaded using LoadModule. The second format reverses the test, and only processes the directives if module is not included.

    The module argument can be either the module identifier or the file name of the module, at the time it was compiled. For example, rewrite_module is the identifier and mod_rewrite.c is the file name. If a module consists of several source files, use the name of the file containing the string STANDARD20_MODULE_STUFF.

    <IfModule> sections are nest-able, which can be used to implement simple multiple-module tests.

    This section should only be used if you need to have one configuration file that works whether or not a specific module is available. In normal operation, directives need not be placed in <IfModule> sections.
    top

    Directiva <IfSection>

    Descripción:Encloses directives that are processed conditional on the presence or absence of a specific section directive
    Sintaxis:<IfSection [!]section-name> ... </IfSection>
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core
    Compatibilidad:Available in 2.4.34 and later.

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    Consulte también

    top

    Directiva Include

    Descripción:Includes other configuration files from within the server configuration files
    Sintaxis:Include [optional|strict] file-path|directory-path|wildcard
    Contexto:server config, virtual host, directory
    Estado:Core
    Módulo:core
    Compatibilidad:Wildcard matching available in 2.0.41 and later, directory wildcard matching available in 2.3.6 and later

    This directive allows inclusion of other configuration files from within the server configuration files.

    Shell-style (fnmatch()) wildcard characters can be used in the filename or directory parts of the path to include several files at once, in alphabetical order. In addition, if Include points to a directory, rather than a file, Apache httpd will read all files in that directory and any subdirectory. However, including entire directories is not recommended, because it is easy to accidentally leave temporary files in a directory that can cause httpd to fail. Instead, we encourage you to use the wildcard syntax shown below, to include files that match a particular pattern, such as *.conf, for example.

    When a wildcard is specified for a file component of the path, and no file matches the wildcard, the Include directive will be silently ignored. When a wildcard is specified for a directory component of the path, and no directory matches the wildcard, the Include directive will fail with an error saying the directory cannot be found.

    For further control over the behaviour of the server when no files or directories match, prefix the path with the modifiers optional or strict. If optional is specified, any wildcard file or directory that does not match will be silently ignored. If strict is specified, any wildcard file or directory that does not match at least one file will cause server startup to fail.

    When a directory or file component of the path is specified exactly, and that directory or file does not exist, Include directive will fail with an error saying the file or directory cannot be found.

    The file path specified may be an absolute path, or may be relative to the ServerRoot directory.

    Examples:

    Include /usr/local/apache2/conf/ssl.conf
    Include /usr/local/apache2/conf/vhosts/*.conf

    Or, providing paths relative to your ServerRoot directory:

    Include conf/ssl.conf
    Include conf/vhosts/*.conf

    Wildcards may be included in the directory or file portion of the path. In the following example, the server will fail to load if no directories match conf/vhosts/*, but will load successfully if no files match *.conf.

    Include conf/vhosts/*/vhost.conf
    Include conf/vhosts/*/*.conf

    In this example, the server will fail to load if either conf/vhosts/* matches no directories, or if *.conf matches no files:

    Include strict conf/vhosts/*/*.conf

    In this example, the server load successfully if either conf/vhosts/* matches no directories, or if *.conf matches no files:

    Include optional conf/vhosts/*/*.conf

    Consulte también

    top

    Directiva IncludeOptional

    Descripción:Includes other configuration files from within the server configuration files
    Sintaxis:IncludeOptional file-path|directory-path|wildcard
    Contexto:server config, virtual host, directory
    Estado:Core
    Módulo:core
    Compatibilidad:Available in 2.3.6 and later. Not existent file paths without wildcards do not cause SyntaxError after 2.4.30

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    Consulte también

    top

    Directiva KeepAlive

    Descripción:Enables HTTP persistent connections
    Sintaxis:KeepAlive On|Off
    Valor por defecto:KeepAlive On
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    The Keep-Alive extension to HTTP/1.0 and the persistent connection feature of HTTP/1.1 provide long-lived HTTP sessions which allow multiple requests to be sent over the same TCP connection. In some cases this has been shown to result in an almost 50% speedup in latency times for HTML documents with many images. To enable Keep-Alive connections, set KeepAlive On.

    For HTTP/1.0 clients, Keep-Alive connections will only be used if they are specifically requested by a client. In addition, a Keep-Alive connection with an HTTP/1.0 client can only be used when the length of the content is known in advance. This implies that dynamic content such as CGI output, SSI pages, and server-generated directory listings will generally not use Keep-Alive connections to HTTP/1.0 clients. For HTTP/1.1 clients, persistent connections are the default unless otherwise specified. If the client requests it, chunked encoding will be used in order to send content of unknown length over persistent connections.

    When a client uses a Keep-Alive connection it will be counted as a single "request" for the MaxConnectionsPerChild directive, regardless of how many requests are sent using the connection.

    Consulte también

    top

    Directiva KeepAliveTimeout

    Descripción:Amount of time the server will wait for subsequent requests on a persistent connection
    Sintaxis:KeepAliveTimeout num[ms]
    Valor por defecto:KeepAliveTimeout 5
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core
    Compatibilidad:Specifying a value in milliseconds is available in Apache httpd 2.3.2 and later

    The number of seconds Apache httpd will wait for a subsequent request before closing the connection. By adding a postfix of ms the timeout can be also set in milliseconds. Once a request has been received, the timeout value specified by the Timeout directive applies.

    Setting KeepAliveTimeout to a high value may cause performance problems in heavily loaded servers. The higher the timeout, the more server processes will be kept occupied waiting on connections with idle clients.

    In a name-based virtual host context, the value of the first defined virtual host (the default host) in a set of NameVirtualHost will be used. The other values will be ignored.

    top

    Directiva <Limit>

    Descripción:Restrict enclosed access controls to only certain HTTP methods
    Sintaxis:<Limit method [method] ... > ... </Limit>
    Contexto:directory, .htaccess
    Anula:AuthConfig, Limit
    Estado:Core
    Módulo:core

    Access controls are normally effective for all access methods, and this is the usual desired behavior. In the general case, access control directives should not be placed within a <Limit> section.

    The purpose of the <Limit> directive is to restrict the effect of the access controls to the nominated HTTP methods. For all other methods, the access restrictions that are enclosed in the <Limit> bracket will have no effect. The following example applies the access control only to the methods POST, PUT, and DELETE, leaving all other methods unprotected:

    <Limit POST PUT DELETE>
    Require valid-user
    </Limit>

    The method names listed can be one or more of: GET, POST, PUT, DELETE, CONNECT, OPTIONS, PATCH, PROPFIND, PROPPATCH, MKCOL, COPY, MOVE, LOCK, and UNLOCK. The method name is case-sensitive. If GET is used it will also restrict HEAD requests. The TRACE method cannot be limited (see TraceEnable).

    A <LimitExcept> section should always be used in preference to a <Limit> section when restricting access, since a <LimitExcept> section provides protection against arbitrary methods.

    The <Limit> and <LimitExcept> directives may be nested. In this case, each successive level of <Limit> or <LimitExcept> directives must further restrict the set of methods to which access controls apply.

    When using <Limit> or <LimitExcept> directives with the Require directive, note that the first Require to succeed authorizes the request, regardless of the presence of other Require directives.

    For example, given the following configuration, all users will be authorized for POST requests, and the Require group editors directive will be ignored in all cases:

    <LimitExcept GET> Require valid-user </LimitExcept>
    <Limit POST> Require group editors </Limit>

    top

    Directiva <LimitExcept>

    Descripción:Restrict access controls to all HTTP methods except the named ones
    Sintaxis:<LimitExcept method [method] ... > ... </LimitExcept>
    Contexto:directory, .htaccess
    Anula:AuthConfig, Limit
    Estado:Core
    Módulo:core

    <LimitExcept> and </LimitExcept> are used to enclose a group of access control directives which will then apply to any HTTP access method not listed in the arguments; i.e., it is the opposite of a <Limit> section and can be used to control both standard and nonstandard/unrecognized methods. See the documentation for <Limit> for more details.

    For example:

    <LimitExcept POST GET>
    Require valid-user
    </LimitExcept>

    top

    Directiva LimitInternalRecursion

    Descripción:Determine maximum number of internal redirects and nested subrequests
    Sintaxis:LimitInternalRecursion number [number]
    Valor por defecto:LimitInternalRecursion 10
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core
    Compatibilidad:Available in Apache httpd 2.0.47 and later

    An internal redirect happens, for example, when using the Action directive, which internally redirects the original request to a CGI script. A subrequest is Apache httpd's mechanism to find out what would happen for some URI if it were requested. For example, mod_dir uses subrequests to look for the files listed in the DirectoryIndex directive.

    LimitInternalRecursion prevents the server from crashing when entering an infinite loop of internal redirects or subrequests. Such loops are usually caused by misconfigurations.

    The directive stores two different limits, which are evaluated on per-request basis. The first number is the maximum number of internal redirects, that may follow each other. The second number determines, how deep subrequests may be nested. If you specify only one number, it will be assigned to both limits.

    Example

    LimitInternalRecursion 5

    top

    Directiva LimitRequestBody

    Descripción:Restricts the total size of the HTTP request body sent from the client
    Sintaxis:LimitRequestBody bytes
    Valor por defecto:LimitRequestBody 0
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core

    This directive specifies the number of bytes from 0 (meaning unlimited) to 2147483647 (2GB) that are allowed in a request body. See the note below for the limited applicability to proxy requests.

    The LimitRequestBody directive allows the user to set a limit on the allowed size of an HTTP request message body within the context in which the directive is given (server, per-directory, per-file or per-location). If the client request exceeds that limit, the server will return an error response instead of servicing the request. The size of a normal request message body will vary greatly depending on the nature of the resource and the methods allowed on that resource. CGI scripts typically use the message body for retrieving form information. Implementations of the PUT method will require a value at least as large as any representation that the server wishes to accept for that resource.

    This directive gives the server administrator greater control over abnormal client request behavior, which may be useful for avoiding some forms of denial-of-service attacks.

    If, for example, you are permitting file upload to a particular location, and wish to limit the size of the uploaded file to 100K, you might use the following directive:

    LimitRequestBody 102400

    For a full description of how this directive is interpreted by proxy requests, see the mod_proxy documentation.

    top

    Directiva LimitRequestFields

    Descripción:Limits the number of HTTP request header fields that will be accepted from the client
    Sintaxis:LimitRequestFields number
    Valor por defecto:LimitRequestFields 100
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    Number is an integer from 0 (meaning unlimited) to 32767. The default value is defined by the compile-time constant DEFAULT_LIMIT_REQUEST_FIELDS (100 as distributed).

    The LimitRequestFields directive allows the server administrator to modify the limit on the number of request header fields allowed in an HTTP request. A server needs this value to be larger than the number of fields that a normal client request might include. The number of request header fields used by a client rarely exceeds 20, but this may vary among different client implementations, often depending upon the extent to which a user has configured their browser to support detailed content negotiation. Optional HTTP extensions are often expressed using request header fields.

    This directive gives the server administrator greater control over abnormal client request behavior, which may be useful for avoiding some forms of denial-of-service attacks. The value should be increased if normal clients see an error response from the server that indicates too many fields were sent in the request.

    For example:

    LimitRequestFields 50

    Warning

    When name-based virtual hosting is used, the value for this directive is taken from the default (first-listed) virtual host for the NameVirtualHost the connection was mapped to.

    top

    Directiva LimitRequestFieldSize

    Descripción:Limits the size of the HTTP request header allowed from the client
    Sintaxis:LimitRequestFieldSize bytes
    Valor por defecto:LimitRequestFieldSize 8190
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    This directive specifies the number of bytes that will be allowed in an HTTP request header.

    The LimitRequestFieldSize directive allows the server administrator to reduce or increase the limit on the allowed size of an HTTP request header field. A server needs this value to be large enough to hold any one header field from a normal client request. The size of a normal request header field will vary greatly among different client implementations, often depending upon the extent to which a user has configured their browser to support detailed content negotiation. SPNEGO authentication headers can be up to 12392 bytes.

    This directive gives the server administrator greater control over abnormal client request behavior, which may be useful for avoiding some forms of denial-of-service attacks.

    For example:

    LimitRequestFieldSize 4094

    Under normal conditions, the value should not be changed from the default.

    Warning

    When name-based virtual hosting is used, the value for this directive is taken from the default (first-listed) virtual host for the NameVirtualHost the connection was mapped to.

    top

    Directiva LimitRequestLine

    Descripción:Limit the size of the HTTP request line that will be accepted from the client
    Sintaxis:LimitRequestLine bytes
    Valor por defecto:LimitRequestLine 8190
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    This directive sets the number of bytes that will be allowed on the HTTP request-line.

    The LimitRequestLine directive allows the server administrator to reduce or increase the limit on the allowed size of a client's HTTP request-line. Since the request-line consists of the HTTP method, URI, and protocol version, the LimitRequestLine directive places a restriction on the length of a request-URI allowed for a request on the server. A server needs this value to be large enough to hold any of its resource names, including any information that might be passed in the query part of a GET request.

    This directive gives the server administrator greater control over abnormal client request behavior, which may be useful for avoiding some forms of denial-of-service attacks.

    For example:

    LimitRequestLine 4094

    Under normal conditions, the value should not be changed from the default.

    Warning

    When name-based virtual hosting is used, the value for this directive is taken from the default (first-listed) virtual host for the NameVirtualHost the connection was mapped to.

    top

    Directiva LimitXMLRequestBody

    Descripción:Limits the size of an XML-based request body
    Sintaxis:LimitXMLRequestBody bytes
    Valor por defecto:LimitXMLRequestBody 1000000
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core

    Limit (in bytes) on maximum size of an XML-based request body. A value of 0 will disable any checking.

    Example:

    LimitXMLRequestBody 0

    top

    Directiva <Location>

    Descripción:Applies the enclosed directives only to matching URLs
    Sintaxis:<Location URL-path|URL> ... </Location>
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    The <Location> directive limits the scope of the enclosed directives by URL. It is similar to the <Directory> directive, and starts a subsection which is terminated with a </Location> directive. <Location> sections are processed in the order they appear in the configuration file, after the <Directory> sections and .htaccess files are read, and after the <Files> sections.

    <Location> sections operate completely outside the filesystem. This has several consequences. Most importantly, <Location> directives should not be used to control access to filesystem locations. Since several different URLs may map to the same filesystem location, such access controls may by circumvented.

    The enclosed directives will be applied to the request if the path component of the URL meets any of the following criteria:

    • The specified location matches exactly the path component of the URL.
    • The specified location, which ends in a forward slash, is a prefix of the path component of the URL (treated as a context root).
    • The specified location, with the addition of a trailing slash, is a prefix of the path component of the URL (also treated as a context root).

    In the example below, where no trailing slash is used, requests to /private1, /private1/ and /private1/file.txt will have the enclosed directives applied, but /private1other would not.

    <Location /private1> ...

    In the example below, where a trailing slash is used, requests to /private2/ and /private2/file.txt will have the enclosed directives applied, but /private2 and /private2other would not.

    <Location /private2/> ...

    When to use <Location>

    Use <Location> to apply directives to content that lives outside the filesystem. For content that lives in the filesystem, use <Directory> and <Files>. An exception is <Location />, which is an easy way to apply a configuration to the entire server.

    For all origin (non-proxy) requests, the URL to be matched is a URL-path of the form /path/. No scheme, hostname, port, or query string may be included. For proxy requests, the URL to be matched is of the form scheme://servername/path, and you must include the prefix.

    The URL may use wildcards. In a wild-card string, ? matches any single character, and * matches any sequences of characters. Neither wildcard character matches a / in the URL-path.

    Regular expressions can also be used, with the addition of the ~ character. For example:

    <Location ~ "/(extra|special)/data">

    would match URLs that contained the substring /extra/data or /special/data. The directive <LocationMatch> behaves identical to the regex version of <Location>, and is preferred, for the simple reason that ~ is hard to distinguish from - in many fonts.

    The <Location> functionality is especially useful when combined with the SetHandler directive. For example, to enable status requests, but allow them only from browsers at example.com, you might use:

    <Location /status>
    SetHandler server-status
    Require host example.com
    </Location>

    Note about / (slash)

    The slash character has special meaning depending on where in a URL it appears. People may be used to its behavior in the filesystem where multiple adjacent slashes are frequently collapsed to a single slash (i.e., /home///foo is the same as /home/foo). In URL-space this is not necessarily true. The <LocationMatch> directive and the regex version of <Location> require you to explicitly specify multiple slashes if that is your intention.

    For example, <LocationMatch ^/abc> would match the request URL /abc but not the request URL //abc. The (non-regex) <Location> directive behaves similarly when used for proxy requests. But when (non-regex) <Location> is used for non-proxy requests it will implicitly match multiple slashes with a single slash. For example, if you specify <Location /abc/def> and the request is to /abc//def then it will match.

    Consulte también

    top

    Directiva <LocationMatch>

    Descripción:Applies the enclosed directives only to regular-expression matching URLs
    Sintaxis:<LocationMatch regex> ... </LocationMatch>
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    The <LocationMatch> directive limits the scope of the enclosed directives by URL, in an identical manner to <Location>. However, it takes a regular expression as an argument instead of a simple string. For example:

    <LocationMatch "/(extra|special)/data">

    would match URLs that contained the substring /extra/data or /special/data.

    Consulte también

    top

    Directiva LogLevel

    Descripción:Controls the verbosity of the ErrorLog
    Sintaxis:LogLevel [module:]level [module:level] ...
    Valor por defecto:LogLevel warn
    Contexto:server config, virtual host, directory
    Estado:Core
    Módulo:core
    Compatibilidad:Per-module and per-directory configuration is available in Apache HTTP Server 2.3.6 and later

    LogLevel adjusts the verbosity of the messages recorded in the error logs (see ErrorLog directive). The following levels are available, in order of decreasing significance:

    Level Description Example
    emerg Emergencies - system is unusable. "Child cannot open lock file. Exiting"
    alert Action must be taken immediately. "getpwuid: couldn't determine user name from uid"
    crit Critical Conditions. "socket: Failed to get a socket, exiting child"
    error Error conditions. "Premature end of script headers"
    warn Warning conditions. "child process 1234 did not exit, sending another SIGHUP"
    notice Normal but significant condition. "httpd: caught SIGBUS, attempting to dump core in ..."
    info Informational. "Server seems busy, (you may need to increase StartServers, or Min/MaxSpareServers)..."
    debug Debug-level messages "Opening config file ..."
    trace1 Trace messages "proxy: FTP: control connection complete"
    trace2 Trace messages "proxy: CONNECT: sending the CONNECT request to the remote proxy"
    trace3 Trace messages "openssl: Handshake: start"
    trace4 Trace messages "read from buffered SSL brigade, mode 0, 17 bytes"
    trace5 Trace messages "map lookup FAILED: map=rewritemap key=keyname"
    trace6 Trace messages "cache lookup FAILED, forcing new map lookup"
    trace7 Trace messages, dumping large amounts of data "| 0000: 02 23 44 30 13 40 ac 34 df 3d bf 9a 19 49 39 15 |"
    trace8 Trace messages, dumping large amounts of data "| 0000: 02 23 44 30 13 40 ac 34 df 3d bf 9a 19 49 39 15 |"

    When a particular level is specified, messages from all other levels of higher significance will be reported as well. E.g., when LogLevel info is specified, then messages with log levels of notice and warn will also be posted.

    Using a level of at least crit is recommended.

    For example:

    LogLevel notice

    Note

    When logging to a regular file messages of the level notice cannot be suppressed and thus are always logged. However, this doesn't apply when logging is done using syslog.

    Specifying a level without a module name will reset the level for all modules to that level. Specifying a level with a module name will set the level for that module only. It is possible to use the module source file name, the module identifier, or the module identifier with the trailing _module omitted as module specification. This means the following three specifications are equivalent:

    LogLevel info ssl:warn
    LogLevel info mod_ssl.c:warn
    LogLevel info ssl_module:warn

    It is also possible to change the level per directory:

    LogLevel info
    <Directory /usr/local/apache/htdocs/app>
      LogLevel debug
    </Files>

    Per directory loglevel configuration only affects messages that are logged after the request has been parsed and that are associated with the request. Log messages which are associated with the connection or the server are not affected.
    top

    Directiva MaxKeepAliveRequests

    Descripción:Number of requests allowed on a persistent connection
    Sintaxis:MaxKeepAliveRequests number
    Valor por defecto:MaxKeepAliveRequests 100
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    The MaxKeepAliveRequests directive limits the number of requests allowed per connection when KeepAlive is on. If it is set to 0, unlimited requests will be allowed. We recommend that this setting be kept to a high value for maximum server performance.

    For example:

    MaxKeepAliveRequests 500

    top

    Directiva MaxRangeOverlaps

    Descripción:Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    Sintaxis:MaxRangeOverlaps default | unlimited | none | number-of-ranges
    Valor por defecto:MaxRangeOverlaps 20
    Contexto:server config, virtual host, directory
    Estado:Core
    Módulo:core
    Compatibilidad:Available in Apache HTTP Server 2.3.15 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    Directiva MaxRangeReversals

    Descripción:Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    Sintaxis:MaxRangeReversals default | unlimited | none | number-of-ranges
    Valor por defecto:MaxRangeReversals 20
    Contexto:server config, virtual host, directory
    Estado:Core
    Módulo:core
    Compatibilidad:Available in Apache HTTP Server 2.3.15 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    Directiva MaxRanges

    Descripción:Number of ranges allowed before returning the complete resource
    Sintaxis:MaxRanges default | unlimited | none | number-of-ranges
    Valor por defecto:MaxRanges 200
    Contexto:server config, virtual host, directory
    Estado:Core
    Módulo:core
    Compatibilidad:Available in Apache HTTP Server 2.3.15 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    Directiva MergeSlashes

    Descripción:Controls whether the server merges consecutive slashes in URLs.
    Sintaxis:MergeSlashes ON|OFF
    Valor por defecto:MergeSlashes ON
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core
    Compatibilidad:Added in 2.4.39

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    Directiva MergeTrailers

    Descripción:Determines whether trailers are merged into headers
    Sintaxis:MergeTrailers [on|off]
    Valor por defecto:MergeTrailers off
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core
    Compatibilidad:2.4.11 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    Directiva Mutex

    Descripción:Configures mutex mechanism and lock file directory for all or specified mutexes
    Sintaxis:Mutex mechanism [default|mutex-name] ... [OmitPID]
    Valor por defecto:Mutex default
    Contexto:server config
    Estado:Core
    Módulo:core
    Compatibilidad:Available in Apache HTTP Server 2.3.4 and later

    The Mutex directive sets the mechanism, and optionally the lock file location, that httpd and modules use to serialize access to resources. Specify default as the first argument to change the settings for all mutexes; specify a mutex name (see table below) as the first argument to override defaults only for that mutex.

    The Mutex directive is typically used in the following exceptional situations:

    • change the mutex mechanism when the default mechanism selected by APR has a functional or performance problem
    • change the directory used by file-based mutexes when the default directory does not support locking

    Supported modules

    This directive only configures mutexes which have been registered with the core server using the ap_mutex_register() API. All modules bundled with httpd support the Mutex directive, but third-party modules may not. Consult the documentation of the third-party module, which must indicate the mutex name(s) which can be configured if this directive is supported.

    The following mutex mechanisms are available:

    • default | yes

      This selects the default locking implementation, as determined by APR. The default locking implementation can be displayed by running httpd with the -V option.

    • none | no

      This effectively disables the mutex, and is only allowed for a mutex if the module indicates that it is a valid choice. Consult the module documentation for more information.

    • posixsem

      This is a mutex variant based on a Posix semaphore.

      Warning

      The semaphore ownership is not recovered if a thread in the process holding the mutex segfaults, resulting in a hang of the web server.

    • sysvsem

      This is a mutex variant based on a SystemV IPC semaphore.

      Warning

      It is possible to "leak" SysV semaphores if processes crash before the semaphore is removed.

      Security

      The semaphore API allows for a denial of service attack by any CGIs running under the same uid as the webserver (i.e., all CGIs, unless you use something like suexec or cgiwrapper).

    • sem

      This selects the "best" available semaphore implementation, choosing between Posix and SystemV IPC semaphores, in that order.

    • pthread

      This is a mutex variant based on cross-process Posix thread mutexes.

      Warning

      On most systems, if a child process terminates abnormally while holding a mutex that uses this implementation, the server will deadlock and stop responding to requests. When this occurs, the server will require a manual restart to recover.

      Solaris is a notable exception as it provides a mechanism which usually allows the mutex to be recovered after a child process terminates abnormally while holding a mutex.

      If your system implements the pthread_mutexattr_setrobust_np() function, you may be able to use the pthread option safely.

    • fcntl:/path/to/mutex

      This is a mutex variant where a physical (lock-)file and the fcntl() function are used as the mutex.

      Warning

      When multiple mutexes based on this mechanism are used within multi-threaded, multi-process environments, deadlock errors (EDEADLK) can be reported for valid mutex operations if fcntl() is not thread-aware, such as on Solaris.

    • flock:/path/to/mutex

      This is similar to the fcntl:/path/to/mutex method with the exception that the flock() function is used to provide file locking.

    • file:/path/to/mutex

      This selects the "best" available file locking implementation, choosing between fcntl and flock, in that order.

    Most mechanisms are only available on selected platforms, where the underlying platform and APR support it. Mechanisms which aren't available on all platforms are posixsem, sysvsem, sem, pthread, fcntl, flock, and file.

    With the file-based mechanisms fcntl and flock, the path, if provided, is a directory where the lock file will be created. The default directory is httpd's run-time file directory relative to ServerRoot. Always use a local disk filesystem for /path/to/mutex and never a directory residing on a NFS- or AFS-filesystem. The basename of the file will be the mutex type, an optional instance string provided by the module, and unless the OmitPID keyword is specified, the process id of the httpd parent process will be appended to to make the file name unique, avoiding conflicts when multiple httpd instances share a lock file directory. For example, if the mutex name is mpm-accept and the lock file directory is /var/httpd/locks, the lock file name for the httpd instance with parent process id 12345 would be /var/httpd/locks/mpm-accept.12345.

    Security

    It is best to avoid putting mutex files in a world-writable directory such as /var/tmp because someone could create a denial of service attack and prevent the server from starting by creating a lockfile with the same name as the one the server will try to create.

    The following table documents the names of mutexes used by httpd and bundled modules.

    Mutex name Module(s) Protected resource
    mpm-accept prefork and worker MPMs incoming connections, to avoid the thundering herd problem; for more information, refer to the performance tuning documentation
    authdigest-client mod_auth_digest client list in shared memory
    authdigest-opaque mod_auth_digest counter in shared memory
    ldap-cache mod_ldap LDAP result cache
    rewrite-map mod_rewrite communication with external mapping programs, to avoid intermixed I/O from multiple requests
    ssl-cache mod_ssl SSL session cache
    ssl-stapling mod_ssl OCSP stapling response cache
    watchdog-callback mod_watchdog callback function of a particular client module

    The OmitPID keyword suppresses the addition of the httpd parent process id from the lock file name.

    In the following example, the mutex mechanism for the MPM accept mutex will be changed from the compiled-in default to fcntl, with the associated lock file created in directory /var/httpd/locks. The mutex mechanism for all other mutexes will be changed from the compiled-in default to sysvsem.

    Mutex default sysvsem
    Mutex mpm-accept fcntl:/var/httpd/locks

    top

    Directiva NameVirtualHost

    Descripción:Designates an IP address for name-virtual hosting
    Sintaxis:NameVirtualHost addr[:port]
    Contexto:server config
    Estado:Core
    Módulo:core

    A single NameVirtualHost directive identifies a set of identical virtual hosts on which the server will further select from on the basis of the hostname requested by the client. The NameVirtualHost directive is a required directive if you want to configure name-based virtual hosts.

    This directive, and the corresponding VirtualHost, must be qualified with a port number if the server supports both HTTP and HTTPS connections.

    Although addr can be a hostname, it is recommended that you always use an IP address or a wildcard. A wildcard NameVirtualHost matches only virtualhosts that also have a literal wildcard as their argument.

    In cases where a firewall or other proxy receives the requests and forwards them on a different IP address to the server, you must specify the IP address of the physical interface on the machine which will be servicing the requests.

    In the example below, requests received on interface 192.0.2.1 and port 80 will only select among the first two virtual hosts. Requests received on port 80 on any other interface will only select among the third and fourth virtual hosts. In the common case where the interface isn't important to the mapping, only the "*:80" NameVirtualHost and VirtualHost directives are necessary.

    NameVirtualHost 192.0.2.1:80
    NameVirtualHost *:80

    <VirtualHost 192.0.2.1:80>
      ServerName namebased-a.example.com
    </VirtualHost>

    <VirtualHost 192.0.2.1:80>
      Servername namebased-b.example.com
    </VirtualHost>

    <VirtualHost *:80>
      ServerName namebased-c.example.com
    </VirtualHost>

    <VirtualHost *:80>
      ServerName namebased-d.example.com
    </VirtualHost>

    If no matching virtual host is found, then the first listed virtual host that matches the IP address and port will be used.

    IPv6 addresses must be enclosed in square brackets, as shown in the following example:

    NameVirtualHost [2001:db8::a00:20ff:fea7:ccea]:8080

    Argument to <VirtualHost> directive

    Note that the argument to the <VirtualHost> directive must exactly match the argument to the NameVirtualHost directive.

    NameVirtualHost 192.0.2.2:80
    <VirtualHost 192.0.2.2:80>
    # ...
    </VirtualHost>

    Consulte también

    top

    Directiva Options

    Descripción:Configures what features are available in a particular directory
    Sintaxis:Options [+|-]option [[+|-]option] ...
    Valor por defecto:Options All
    Contexto:server config, virtual host, directory, .htaccess
    Anula:Options
    Estado:Core
    Módulo:core

    The Options directive controls which server features are available in a particular directory.

    option can be set to None, in which case none of the extra features are enabled, or one or more of the following:

    All
    All options except for MultiViews. This is the default setting.
    ExecCGI
    Execution of CGI scripts using mod_cgi is permitted.
    FollowSymLinks
    The server will follow symbolic links in this directory.

    Even though the server follows the symlink it does not change the pathname used to match against <Directory> sections.

    Note also, that this option gets ignored if set inside a <Location> section.

    Omitting this option should not be considered a security restriction, since symlink testing is subject to race conditions that make it circumventable.

    Includes
    Server-side includes provided by mod_include are permitted.
    IncludesNOEXEC
    Server-side includes are permitted, but the #exec cmd and #exec cgi are disabled. It is still possible to #include virtual CGI scripts from ScriptAliased directories.
    Indexes
    If a URL which maps to a directory is requested, and there is no DirectoryIndex (e.g., index.html) in that directory, then mod_autoindex will return a formatted listing of the directory.
    MultiViews
    Content negotiated "MultiViews" are allowed using mod_negotiation.

    Note

    This option gets ignored if set anywhere other than <Directory>, as mod_negotiation needs real resources to compare against and evaluate from.

    SymLinksIfOwnerMatch
    The server will only follow symbolic links for which the target file or directory is owned by the same user id as the link.

    Note

    This option gets ignored if set inside a <Location> section.

    This option should not be considered a security restriction, since symlink testing is subject to race conditions that make it circumventable.

    Normally, if multiple Options could apply to a directory, then the most specific one is used and others are ignored; the options are not merged. (See how sections are merged.) However if all the options on the Options directive are preceded by a + or - symbol, the options are merged. Any options preceded by a + are added to the options currently in force, and any options preceded by a - are removed from the options currently in force.

    Warning

    Mixing Options with a + or - with those without is not valid syntax, and is likely to cause unexpected results.

    For example, without any + and - symbols:

    <Directory /web/docs>
    Options Indexes FollowSymLinks
    </Directory>

    <Directory /web/docs/spec>
    Options Includes
    </Directory>

    then only Includes will be set for the /web/docs/spec directory. However if the second Options directive uses the + and - symbols:

    <Directory /web/docs>
    Options Indexes FollowSymLinks
    </Directory>

    <Directory /web/docs/spec>
    Options +Includes -Indexes
    </Directory>

    then the options FollowSymLinks and Includes are set for the /web/docs/spec directory.

    Note

    Using -IncludesNOEXEC or -Includes disables server-side includes completely regardless of the previous setting.

    The default in the absence of any other settings is All.

    top

    Directiva Protocol

    Descripción:Protocol for a listening socket
    Sintaxis:Protocol protocol
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core
    Compatibilidad:Available in Apache 2.1.5 and later. On Windows from Apache 2.3.3 and later.

    This directive specifies the protocol used for a specific listening socket. The protocol is used to determine which module should handle a request, and to apply protocol specific optimizations with the AcceptFilter directive.

    You only need to set the protocol if you are running on non-standard ports, otherwise http is assumed for port 80 and https for port 443.

    For example, if you are running https on a non-standard port, specify the protocol explicitly:

    Protocol https

    You can also specify the protocol using the Listen directive.

    Consulte también

    top

    Directiva Protocols

    Descripción:Protocols available for a server/virtual host
    Sintaxis:Protocols protocol ...
    Valor por defecto:Protocols http/1.1
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core
    Compatibilidad:Only available from Apache 2.4.17 and later.

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    Consulte también

    top

    Directiva ProtocolsHonorOrder

    Descripción:Determines if order of Protocols determines precedence during negotiation
    Sintaxis:ProtocolsHonorOrder On|Off
    Valor por defecto:ProtocolsHonorOrder On
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core
    Compatibilidad:Only available from Apache 2.4.17 and later.

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    Consulte también

    top

    Directiva QualifyRedirectURL

    Descripción:Controls whether the REDIRECT_URL environment variable is fully qualified
    Sintaxis:QualifyRedirectURL ON|OFF
    Valor por defecto:QualifyRedirectURL OFF
    Contexto:server config, virtual host, directory
    Anula:FileInfo
    Estado:Core
    Módulo:core
    Compatibilidad:Directive supported in 2.4.18 and later. 2.4.17 acted as if 'QualifyRedirectURL ON' was configured.

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    Directiva RegexDefaultOptions

    Descripción:Allow to configure global/default options for regexes
    Sintaxis:RegexDefaultOptions [none] [+|-]option [[+|-]option] ...
    Valor por defecto:RegexDefaultOptions DOTALL DOLLAR_ENDONLY
    Contexto:server config
    Estado:Core
    Módulo:core
    Compatibilidad:Only available from Apache 2.4.30 and later.

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    Directiva RegisterHttpMethod

    Descripción:Register non-standard HTTP methods
    Sintaxis:RegisterHttpMethod method [method [...]]
    Contexto:server config
    Estado:Core
    Módulo:core
    Compatibilidad:Available in Apache HTTP Server 2.4.24 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    Consulte también

    top

    Directiva RLimitCPU

    Descripción:Limits the CPU consumption of processes launched by Apache httpd children
    Sintaxis:RLimitCPU seconds|max [seconds|max]
    Valor por defecto:Unset; uses operating system defaults
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core

    Takes 1 or 2 parameters. The first parameter sets the soft resource limit for all processes and the second parameter sets the maximum resource limit. Either parameter can be a number, or max to indicate to the server that the limit should be set to the maximum allowed by the operating system configuration. Raising the maximum resource limit requires that the server is running as root, or in the initial startup phase.

    This applies to processes forked off from Apache httpd children servicing requests, not the Apache httpd children themselves. This includes CGI scripts and SSI exec commands, but not any processes forked off from the Apache httpd parent such as piped logs.

    CPU resource limits are expressed in seconds per process.

    Consulte también

    top

    Directiva RLimitMEM

    Descripción:Limits the memory consumption of processes launched by Apache httpd children
    Sintaxis:RLimitMEM bytes|max [bytes|max]
    Valor por defecto:Unset; uses operating system defaults
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core

    Takes 1 or 2 parameters. The first parameter sets the soft resource limit for all processes and the second parameter sets the maximum resource limit. Either parameter can be a number, or max to indicate to the server that the limit should be set to the maximum allowed by the operating system configuration. Raising the maximum resource limit requires that the server is running as root, or in the initial startup phase.

    This applies to processes forked off from Apache httpd children servicing requests, not the Apache httpd children themselves. This includes CGI scripts and SSI exec commands, but not any processes forked off from the Apache httpd parent such as piped logs.

    Memory resource limits are expressed in bytes per process.

    Consulte también

    top

    Directiva RLimitNPROC

    Descripción:Limits the number of processes that can be launched by processes launched by Apache httpd children
    Sintaxis:RLimitNPROC number|max [number|max]
    Valor por defecto:Unset; uses operating system defaults
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core

    Takes 1 or 2 parameters. The first parameter sets the soft resource limit for all processes and the second parameter sets the maximum resource limit. Either parameter can be a number, or max to indicate to the server that the limit should be set to the maximum allowed by the operating system configuration. Raising the maximum resource limit requires that the server is running as root, or in the initial startup phase.

    This applies to processes forked off from Apache httpd children servicing requests, not the Apache httpd children themselves. This includes CGI scripts and SSI exec commands, but not any processes forked off from the Apache httpd parent such as piped logs.

    Process limits control the number of processes per user.

    Note

    If CGI processes are not running under user ids other than the web server user id, this directive will limit the number of processes that the server itself can create. Evidence of this situation will be indicated by cannot fork messages in the error_log.

    Consulte también

    top

    Directiva ScriptInterpreterSource

    Descripción:Technique for locating the interpreter for CGI scripts
    Sintaxis:ScriptInterpreterSource Registry|Registry-Strict|Script
    Valor por defecto:ScriptInterpreterSource Script
    Contexto:server config, virtual host, directory, .htaccess
    Anula:FileInfo
    Estado:Core
    Módulo:core
    Compatibilidad:Win32 only; option Registry-Strict is available in Apache HTTP Server 2.0 and later

    This directive is used to control how Apache httpd finds the interpreter used to run CGI scripts. The default setting is Script. This causes Apache httpd to use the interpreter pointed to by the shebang line (first line, starting with #!) in the script. On Win32 systems this line usually looks like:

    #!C:/Perl/bin/perl.exe

    or, if perl is in the PATH, simply:

    #!perl

    Setting ScriptInterpreterSource Registry will cause the Windows Registry tree HKEY_CLASSES_ROOT to be searched using the script file extension (e.g., .pl) as a search key. The command defined by the registry subkey Shell\ExecCGI\Command or, if it does not exist, by the subkey Shell\Open\Command is used to open the script file. If the registry keys cannot be found, Apache httpd falls back to the behavior of the Script option.

    Security

    Be careful when using ScriptInterpreterSource Registry with ScriptAlias'ed directories, because Apache httpd will try to execute every file within this directory. The Registry setting may cause undesired program calls on files which are typically not executed. For example, the default open command on .htm files on most Windows systems will execute Microsoft Internet Explorer, so any HTTP request for an .htm file existing within the script directory would start the browser in the background on the server. This is a good way to crash your system within a minute or so.

    The option Registry-Strict which is new in Apache HTTP Server 2.0 does the same thing as Registry but uses only the subkey Shell\ExecCGI\Command. The ExecCGI key is not a common one. It must be configured manually in the windows registry and hence prevents accidental program calls on your system.

    top

    Directiva SeeRequestTail

    Descripción:Determine if mod_status displays the first 63 characters of a request or the last 63, assuming the request itself is greater than 63 chars.
    Sintaxis:SeeRequestTail On|Off
    Valor por defecto:SeeRequestTail Off
    Contexto:server config
    Estado:Core
    Módulo:core
    Compatibilidad:Available in Apache httpd 2.2.7 and later.

    mod_status with ExtendedStatus On displays the actual request being handled. For historical purposes, only 63 characters of the request are actually stored for display purposes. This directive controls whether the 1st 63 characters are stored (the previous behavior and the default) or if the last 63 characters are. This is only applicable, of course, if the length of the request is 64 characters or greater.

    If Apache httpd is handling GET /disk1/storage/apache/htdocs/images/imagestore1/food/apples.jpg HTTP/1.1 mod_status displays as follows:

    Off (default) GET /disk1/storage/apache/htdocs/images/imagestore1/food/apples
    On orage/apache/htdocs/images/imagestore1/food/apples.jpg HTTP/1.1
    top

    Directiva ServerAdmin

    Descripción:Email address that the server includes in error messages sent to the client
    Sintaxis:ServerAdmin email-address|URL
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    The ServerAdmin sets the contact address that the server includes in any error messages it returns to the client. If the httpd doesn't recognize the supplied argument as an URL, it assumes, that it's an email-address and prepends it with mailto: in hyperlink targets. However, it's recommended to actually use an email address, since there are a lot of CGI scripts that make that assumption. If you want to use an URL, it should point to another server under your control. Otherwise users may not be able to contact you in case of errors.

    It may be worth setting up a dedicated address for this, e.g.

    ServerAdmin www-admin@foo.example.com

    as users do not always mention that they are talking about the server!

    top

    Directiva ServerAlias

    Descripción:Alternate names for a host used when matching requests to name-virtual hosts
    Sintaxis:ServerAlias hostname [hostname] ...
    Contexto:virtual host
    Estado:Core
    Módulo:core

    The ServerAlias directive sets the alternate names for a host, for use with name-based virtual hosts. The ServerAlias may include wildcards, if appropriate.

    <VirtualHost *:80>
    ServerName server.domain.com
    ServerAlias server server2.domain.com server2
    ServerAlias *.example.com
    UseCanonicalName Off
    # ...
    </VirtualHost>

    Consulte también

    top

    Directiva ServerName

    Descripción:Hostname and port that the server uses to identify itself
    Sintaxis:ServerName [scheme://]fully-qualified-domain-name[:port]
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    The ServerName directive sets the request scheme, hostname and port that the server uses to identify itself. This is used when creating redirection URLs.

    Additionally, ServerName is used (possibly in conjunction with ServerAlias) to uniquely identify a virtual host, when using name-based virtual hosts.

    For example, if the name of the machine hosting the web server is simple.example.com, but the machine also has the DNS alias www.example.com and you wish the web server to be so identified, the following directive should be used:

    ServerName www.example.com:80

    The ServerName directive may appear anywhere within the definition of a server. However, each appearance overrides the previous appearance (within that server).

    If no ServerName is specified, then the server attempts to deduce the hostname by performing a reverse lookup on the IP address. If no port is specified in the ServerName, then the server will use the port from the incoming request. For optimal reliability and predictability, you should specify an explicit hostname and port using the ServerName directive.

    If you are using name-based virtual hosts, the ServerName inside a <VirtualHost> section specifies what hostname must appear in the request's Host: header to match this virtual host.

    Sometimes, the server runs behind a device that processes SSL, such as a reverse proxy, load balancer or SSL offload appliance. When this is the case, specify the https:// scheme and the port number to which the clients connect in the ServerName directive to make sure that the server generates the correct self-referential URLs.

    See the description of the UseCanonicalName and UseCanonicalPhysicalPort directives for settings which determine whether self-referential URLs (e.g., by the mod_dir module) will refer to the specified port, or to the port number given in the client's request.

    Failure to set ServerName to a name that your server can resolve to an IP address will result in a startup warning. httpd will then use whatever hostname it can determine, using the system's hostname command. This will almost never be the hostname you actually want.

    httpd: Could not reliably determine the server's fully qualified domain name, using rocinante.local for ServerName

    Consulte también

    top

    Directiva ServerPath

    Descripción:Legacy URL pathname for a name-based virtual host that is accessed by an incompatible browser
    Sintaxis:ServerPath URL-path
    Contexto:virtual host
    Estado:Core
    Módulo:core

    The ServerPath directive sets the legacy URL pathname for a host, for use with name-based virtual hosts.

    Consulte también

    top

    Directiva ServerRoot

    Descripción:Base directory for the server installation
    Sintaxis:ServerRoot directory-path
    Valor por defecto:ServerRoot /usr/local/apache
    Contexto:server config
    Estado:Core
    Módulo:core

    The ServerRoot directive sets the directory in which the server lives. Typically it will contain the subdirectories conf/ and logs/. Relative paths in other configuration directives (such as Include or LoadModule, for example) are taken as relative to this directory.

    Example

    ServerRoot /home/httpd

    Consulte también

    top

    Directiva ServerSignature

    Descripción:Configures the footer on server-generated documents
    Sintaxis:ServerSignature On|Off|EMail
    Valor por defecto:ServerSignature Off
    Contexto:server config, virtual host, directory, .htaccess
    Anula:All
    Estado:Core
    Módulo:core

    The ServerSignature directive allows the configuration of a trailing footer line under server-generated documents (error messages, mod_proxy ftp directory listings, mod_info output, ...). The reason why you would want to enable such a footer line is that in a chain of proxies, the user often has no possibility to tell which of the chained servers actually produced a returned error message.

    The Off setting, which is the default, suppresses the footer line (and is therefore compatible with the behavior of Apache-1.2 and below). The On setting simply adds a line with the server version number and ServerName of the serving virtual host, and the EMail setting additionally creates a "mailto:" reference to the ServerAdmin of the referenced document.

    After version 2.0.44, the details of the server version number presented are controlled by the ServerTokens directive.

    Consulte también

    top

    Directiva ServerTokens

    Descripción:Configures the Server HTTP response header
    Sintaxis:ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full
    Valor por defecto:ServerTokens Full
    Contexto:server config
    Estado:Core
    Módulo:core

    This directive controls whether Server response header field which is sent back to clients includes a description of the generic OS-type of the server as well as information about compiled-in modules.

    ServerTokens Full (or not specified)
    Server sends (e.g.): Server: Apache/2.4.1 (Unix) PHP/4.2.2 MyMod/1.2
    ServerTokens Prod[uctOnly]
    Server sends (e.g.): Server: Apache
    ServerTokens Major
    Server sends (e.g.): Server: Apache/2
    ServerTokens Minor
    Server sends (e.g.): Server: Apache/2.4
    ServerTokens Min[imal]
    Server sends (e.g.): Server: Apache/2.4.1
    ServerTokens OS
    Server sends (e.g.): Server: Apache/2.4.1 (Unix)

    This setting applies to the entire server, and cannot be enabled or disabled on a virtualhost-by-virtualhost basis.

    After version 2.0.44, this directive also controls the information presented by the ServerSignature directive.

    Setting ServerTokens to less than minimal is not recommended because it makes it more difficult to debug interoperational problems. Also note that disabling the Server: header does nothing at all to make your server more secure; the idea of "security through obscurity" is a myth and leads to a false sense of safety.

    Consulte también

    top

    Directiva SetHandler

    Descripción:Forces all matching files to be processed by a handler
    Sintaxis:SetHandler handler-name|None
    Contexto:server config, virtual host, directory, .htaccess
    Anula:FileInfo
    Estado:Core
    Módulo:core
    Compatibilidad:Moved into the core in Apache httpd 2.0

    When placed into an .htaccess file or a <Directory> or <Location> section, this directive forces all matching files to be parsed through the handler given by handler-name. For example, if you had a directory you wanted to be parsed entirely as imagemap rule files, regardless of extension, you might put the following into an .htaccess file in that directory:

    SetHandler imap-file

    Another example: if you wanted to have the server display a status report whenever a URL of http://servername/status was called, you might put the following into httpd.conf:

    <Location /status>
    SetHandler server-status
    </Location>

    You can override an earlier defined SetHandler directive by using the value None.

    Note: because SetHandler overrides default handlers, normal behaviour such as handling of URLs ending in a slash (/) as directories or index files is suppressed.

    Consulte también

    top

    Directiva SetInputFilter

    Descripción:Sets the filters that will process client requests and POST input
    Sintaxis:SetInputFilter filter[;filter...]
    Contexto:server config, virtual host, directory, .htaccess
    Anula:FileInfo
    Estado:Core
    Módulo:core

    The SetInputFilter directive sets the filter or filters which will process client requests and POST input when they are received by the server. This is in addition to any filters defined elsewhere, including the AddInputFilter directive.

    If more than one filter is specified, they must be separated by semicolons in the order in which they should process the content.

    Consulte también

    top

    Directiva SetOutputFilter

    Descripción:Sets the filters that will process responses from the server
    Sintaxis:SetOutputFilter filter[;filter...]
    Contexto:server config, virtual host, directory, .htaccess
    Anula:FileInfo
    Estado:Core
    Módulo:core

    The SetOutputFilter directive sets the filters which will process responses from the server before they are sent to the client. This is in addition to any filters defined elsewhere, including the AddOutputFilter directive.

    For example, the following configuration will process all files in the /www/data/ directory for server-side includes.

    <Directory /www/data/>
    SetOutputFilter INCLUDES
    </Directory>

    If more than one filter is specified, they must be separated by semicolons in the order in which they should process the content.

    Consulte también

    top

    Directiva TimeOut

    Descripción:Amount of time the server will wait for certain events before failing a request
    Sintaxis:TimeOut seconds
    Valor por defecto:TimeOut 60
    Contexto:server config, virtual host
    Estado:Core
    Módulo:core

    The TimeOut directive defines the length of time Apache httpd will wait for I/O in various circumstances:

    1. When reading data from the client, the length of time to wait for a TCP packet to arrive if the read buffer is empty.
    2. When writing data to the client, the length of time to wait for an acknowledgement of a packet if the send buffer is full.
    3. In mod_cgi, the length of time to wait for output from a CGI script.
    4. In mod_ext_filter, the length of time to wait for output from a filtering process.
    5. In mod_proxy, the default timeout value if ProxyTimeout is not configured.
    top

    Directiva TraceEnable

    Descripción:Determines the behaviour on TRACE requests
    Sintaxis:TraceEnable [on|off|extended]
    Valor por defecto:TraceEnable on
    Contexto:server config
    Estado:Core
    Módulo:core
    Compatibilidad:Available in Apache HTTP Server 1.3.34, 2.0.55 and later

    This directive overrides the behavior of TRACE for both the core server and mod_proxy. The default TraceEnable on permits TRACE requests per RFC 2616, which disallows any request body to accompany the request. TraceEnable off causes the core server and mod_proxy to return a 405 (Method not allowed) error to the client.

    Finally, for testing and diagnostic purposes only, request bodies may be allowed using the non-compliant TraceEnable extended directive. The core (as an origin server) will restrict the request body to 64k (plus 8k for chunk headers if Transfer-Encoding: chunked is used). The core will reflect the full headers and all chunk headers with the response body. As a proxy server, the request body is not restricted to 64k.

    top

    Directiva UnDefine

    Descripción:Undefine the existence of a variable
    Sintaxis:UnDefine parameter-name
    Contexto:server config
    Estado:Core
    Módulo:core

    Undoes the effect of a Define or of passing a -D argument to httpd.

    This directive can be used to toggle the use of <IfDefine> sections without needing to alter -D arguments in any startup scripts.

    top

    Directiva UseCanonicalName

    Descripción:Configures how the server determines its own name and port
    Sintaxis:UseCanonicalName On|Off|DNS
    Valor por defecto:UseCanonicalName Off
    Contexto:server config, virtual host, directory
    Estado:Core
    Módulo:core

    In many situations Apache httpd must construct a self-referential URL -- that is, a URL that refers back to the same server. With UseCanonicalName On Apache httpd will use the hostname and port specified in the ServerName directive to construct the canonical name for the server. This name is used in all self-referential URLs, and for the values of SERVER_NAME and SERVER_PORT in CGIs.

    With UseCanonicalName Off Apache httpd will form self-referential URLs using the hostname and port supplied by the client if any are supplied (otherwise it will use the canonical name, as defined above). These values are the same that are used to implement name-based virtual hosts, and are available with the same clients. The CGI variables SERVER_NAME and SERVER_PORT will be constructed from the client supplied values as well.

    An example where this may be useful is on an intranet server where you have users connecting to the machine using short names such as www. You'll notice that if the users type a shortname, and a URL which is a directory, such as http://www/splat, without the trailing slash then Apache httpd will redirect them to http://www.domain.com/splat/. If you have authentication enabled, this will cause the user to have to authenticate twice (once for www and once again for www.domain.com -- see the FAQ on this subject for more information). But if UseCanonicalName is set Off, then Apache httpd will redirect to http://www/splat/.

    There is a third option, UseCanonicalName DNS, which is intended for use with mass IP-based virtual hosting to support ancient clients that do not provide a Host: header. With this option Apache httpd does a reverse DNS lookup on the server IP address that the client connected to in order to work out self-referential URLs.

    Warning

    If CGIs make assumptions about the values of SERVER_NAME they may be broken by this option. The client is essentially free to give whatever value they want as a hostname. But if the CGI is only using SERVER_NAME to construct self-referential URLs then it should be just fine.

    Consulte también

    top

    Directiva UseCanonicalPhysicalPort

    Descripción:Configures how the server determines its own name and port
    Sintaxis:UseCanonicalPhysicalPort On|Off
    Valor por defecto:UseCanonicalPhysicalPort Off
    Contexto:server config, virtual host, directory
    Estado:Core
    Módulo:core

    In many situations Apache httpd must construct a self-referential URL -- that is, a URL that refers back to the same server. With UseCanonicalPhysicalPort On Apache httpd will, when constructing the canonical port for the server to honor the UseCanonicalName directive, provide the actual physical port number being used by this request as a potential port. With UseCanonicalPhysicalPort Off Apache httpd will not ever use the actual physical port number, instead relying on all configured information to construct a valid port number.

    Note

    The ordering of when the physical port is used is as follows:

    UseCanonicalName On

    • Port provided in Servername
    • Physical port
    • Default port
    UseCanonicalName Off | DNS
    • Parsed port from Host: header
    • Physical port
    • Port provided in Servername
    • Default port

    With UseCanonicalPhysicalPort Off, the physical ports are removed from the ordering.

    Consulte también

    top

    Directiva <VirtualHost>

    Descripción:Contains directives that apply only to a specific hostname or IP address
    Sintaxis:<VirtualHost addr[:port] [addr[:port]] ...> ... </VirtualHost>
    Contexto:server config
    Estado:Core
    Módulo:core

    <VirtualHost> and </VirtualHost> are used to enclose a group of directives that will apply only to a particular virtual host. Any directive that is allowed in a virtual host context may be used. When the server receives a request for a document on a particular virtual host, it uses the configuration directives enclosed in the <VirtualHost> section. Addr can be:

    • The IP address of the virtual host;
    • A fully qualified domain name for the IP address of the virtual host (not recommended);
    • The character *, which is used only in combination with NameVirtualHost * to match all IP addresses; or
    • The string _default_, which is used only with IP virtual hosting to catch unmatched IP addresses.

    Example

    <VirtualHost 10.1.2.3>
    ServerAdmin webmaster@host.example.com
    DocumentRoot /www/docs/host.example.com
    ServerName host.example.com
    ErrorLog logs/host.example.com-error_log
    TransferLog logs/host.example.com-access_log
    </VirtualHost>

    IPv6 addresses must be specified in square brackets because the optional port number could not be determined otherwise. An IPv6 example is shown below:

    <VirtualHost [2001:db8::a00:20ff:fea7:ccea]>
    ServerAdmin webmaster@host.example.com
    DocumentRoot /www/docs/host.example.com
    ServerName host.example.com
    ErrorLog logs/host.example.com-error_log
    TransferLog logs/host.example.com-access_log
    </VirtualHost>

    Each Virtual Host must correspond to a different IP address, different port number or a different host name for the server, in the former case the server machine must be configured to accept IP packets for multiple addresses. (If the machine does not have multiple network interfaces, then this can be accomplished with the ifconfig alias command -- if your OS supports it).

    Note

    The use of <VirtualHost> does not affect what addresses Apache httpd listens on. You may need to ensure that Apache httpd is listening on the correct addresses using Listen.

    When using IP-based virtual hosting, the special name _default_ can be specified in which case this virtual host will match any IP address that is not explicitly listed in another virtual host. In the absence of any _default_ virtual host the "main" server config, consisting of all those definitions outside any VirtualHost section, is used when no IP-match occurs.

    You can specify a :port to change the port that is matched. If unspecified then it defaults to the same port as the most recent Listen statement of the main server. You may also specify :* to match all ports on that address. (This is recommended when used with _default_.)

    A ServerName should be specified inside each <VirtualHost> block. If it is absent, the ServerName from the "main" server configuration will be inherited.

    If no matching virtual host is found, then the first listed virtual host that matches the IP address will be used. As a consequence, the first listed virtual host is the default virtual host.

    Security

    See the security tips document for details on why your security could be compromised if the directory where log files are stored is writable by anyone other than the user that starts the server.

    Consulte también

    Idiomas disponibles:  de  |  en  |  es  |  fr  |  ja  |  tr 

    top

    Comentarios

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_autoindex.html0000644000000000000500000000077013362070302017745 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_autoindex.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_autoindex.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_autoindex.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_autoindex.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: mod_autoindex.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_mime_magic.html.en0000644000000000000500000004127213412755316020452 0ustar rootsrc mod_mime_magic - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_mime_magic

    Available Languages:  en  |  fr 

    Description:Determines the MIME type of a file by looking at a few bytes of its contents
    Status:Extension
    Module Identifier:mime_magic_module
    Source File:mod_mime_magic.c

    Summary

    This module determines the MIME type of files in the same way the Unix file(1) command works: it looks at the first few bytes of the file. It is intended as a "second line of defense" for cases that mod_mime can't resolve.

    This module is derived from a free version of the file(1) command for Unix, which uses "magic numbers" and other hints from a file's contents to figure out what the contents are. This module is active only if the magic file is specified by the MimeMagicFile directive.

    top

    Format of the Magic File

    The contents of the file are plain ASCII text in 4-5 columns. Blank lines are allowed but ignored. Commented lines use a hash mark (#). The remaining lines are parsed for the following columns:

    ColumnDescription
    1 byte number to begin checking from
    ">" indicates a dependency upon the previous non-">" line
    2

    type of data to match

    byte single character
    short machine-order 16-bit integer
    long machine-order 32-bit integer
    string arbitrary-length string
    date long integer date (seconds since Unix epoch/1970)
    beshort big-endian 16-bit integer
    belong big-endian 32-bit integer
    bedate big-endian 32-bit integer date
    leshort little-endian 16-bit integer
    lelong little-endian 32-bit integer
    ledate little-endian 32-bit integer date
    3 contents of data to match
    4 MIME type if matched
    5 MIME encoding if matched (optional)

    For example, the following magic file lines would recognize some audio formats:

    # Sun/NeXT audio data
    0      string      .snd
    >12    belong      1       audio/basic
    >12    belong      2       audio/basic
    >12    belong      3       audio/basic
    >12    belong      4       audio/basic
    >12    belong      5       audio/basic
    >12    belong      6       audio/basic
    >12    belong      7       audio/basic
    >12    belong     23       audio/x-adpcm

    Or these would recognize the difference between *.doc files containing Microsoft Word or FrameMaker documents. (These are incompatible file formats which use the same file suffix.)

    # Frame
    0  string  \<MakerFile        application/x-frame
    0  string  \<MIFFile          application/x-frame
    0  string  \<MakerDictionary  application/x-frame
    0  string  \<MakerScreenFon   application/x-frame
    0  string  \<MML              application/x-frame
    0  string  \<Book             application/x-frame
    0  string  \<Maker            application/x-frame
    
    # MS-Word
    0  string  \376\067\0\043            application/msword
    0  string  \320\317\021\340\241\261  application/msword
    0  string  \333\245-\0\0\0           application/msword

    An optional MIME encoding can be included as a fifth column. For example, this can recognize gzipped files and set the encoding for them.

    # gzip (GNU zip, not to be confused with
    #       [Info-ZIP/PKWARE] zip archiver)
    
    0  string  \037\213  application/octet-stream  x-gzip
    top

    Performance Issues

    This module is not for every system. If your system is barely keeping up with its load or if you're performing a web server benchmark, you may not want to enable this because the processing is not free.

    However, an effort was made to improve the performance of the original file(1) code to make it fit in a busy web server. It was designed for a server where there are thousands of users who publish their own documents. This is probably very common on intranets. Many times, it's helpful if the server can make more intelligent decisions about a file's contents than the file name allows ...even if just to reduce the "why doesn't my page work" calls when users improperly name their own files. You have to decide if the extra work suits your environment.

    top

    Notes

    The following notes apply to the mod_mime_magic module and are included here for compliance with contributors' copyright restrictions that require their acknowledgment.

    mod_mime_magic: MIME type lookup via file magic numbers
    Copyright (c) 1996-1997 Cisco Systems, Inc.

    This software was submitted by Cisco Systems to the Apache Group in July 1997. Future revisions and derivatives of this source code must acknowledge Cisco Systems as the original contributor of this module. All other licensing and usage conditions are those of the Apache Group.

    Some of this code is derived from the free version of the file command originally posted to comp.sources.unix. Copyright info for that program is included below as required.

    - Copyright (c) Ian F. Darwin, 1987. Written by Ian F. Darwin.

    This software is not subject to any license of the American Telephone and Telegraph Company or of the Regents of the University of California.

    Permission is granted to anyone to use this software for any purpose on any computer system, and to alter it and redistribute it freely, subject to the following restrictions:

    1. The author is not responsible for the consequences of use of this software, no matter how awful, even if they arise from flaws in it.
    2. The origin of this software must not be misrepresented, either by explicit claim or by omission. Since few users ever read sources, credits must appear in the documentation.
    3. Altered versions must be plainly marked as such, and must not be misrepresented as being the original software. Since few users ever read sources, credits must appear in the documentation.
    4. This notice may not be removed or altered.

    For compliance with Mr Darwin's terms: this has been very significantly modified from the free "file" command.

    • all-in-one file for compilation convenience when moving from one version of Apache to the next.
    • Memory allocation is done through the Apache API's pool structure.
    • All functions have had necessary Apache API request or server structures passed to them where necessary to call other Apache API routines. (i.e., usually for logging, files, or memory allocation in itself or a called function.)
    • struct magic has been converted from an array to a single-ended linked list because it only grows one record at a time, it's only accessed sequentially, and the Apache API has no equivalent of realloc().
    • Functions have been changed to get their parameters from the server configuration instead of globals. (It should be reentrant now but has not been tested in a threaded environment.)
    • Places where it used to print results to stdout now saves them in a list where they're used to set the MIME type in the Apache request record.
    • Command-line flags have been removed since they will never be used here.
    top

    MimeMagicFile Directive

    Description:Enable MIME-type determination based on file contents using the specified magic file
    Syntax:MimeMagicFile file-path
    Context:server config, virtual host
    Status:Extension
    Module:mod_mime_magic

    The MimeMagicFile directive can be used to enable this module, the default file is distributed at conf/magic. Non-rooted paths are relative to the ServerRoot. Virtual hosts will use the same file as the main server unless a more specific setting is used, in which case the more specific setting overrides the main server's file.

    Example

    MimeMagicFile conf/magic

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_socache.html.en0000644000000000000500000004513613412755316021172 0ustar rootsrc mod_authn_socache - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authn_socache

    Available Languages:  en  |  fr 

    Description:Manages a cache of authentication credentials to relieve the load on backends
    Status:Base
    Module Identifier:authn_socache_module
    Source File:mod_authn_socache.c
    Compatibility:Version 2.3 and later

    Summary

    Maintains a cache of authentication credentials, so that a new backend lookup is not required for every authenticated request.

    top

    Authentication Cacheing

    Some users of more heavyweight authentication such as SQL database lookups (mod_authn_dbd) have reported it putting an unacceptable load on their authentication provider. A typical case in point is where an HTML page contains hundreds of objects (images, scripts, stylesheets, media, etc), and a request to the page generates hundreds of effectively-immediate requests for authenticated additional contents.

    mod_authn_socache provides a solution to this problem by maintaining a cache of authentication credentials.

    top

    Usage

    The authentication cache should be used where authentication lookups impose a significant load on the server, or a backend or network. Authentication by file (mod_authn_file) or dbm (mod_authn_dbm) are unlikely to benefit, as these are fast and lightweight in their own right (though in some cases, such as a network-mounted file, cacheing may be worthwhile). Other providers such as SQL or LDAP based authentication are more likely to benefit, particularly where there is an observed performance issue. Amongst the standard modules, mod_authnz_ldap manages its own cache, so only mod_authn_dbd will usually benefit from this cache.

    The basic rules to cache for a provider are:

    1. Include the provider you're cacheing for in an AuthnCacheProvideFor directive.
    2. List socache ahead of the provider you're cacheing for in your AuthBasicProvider or AuthDigestProvider directive.

    A simple usage example to accelerate mod_authn_dbd using dbm as a cache engine:

    #AuthnCacheSOCache is optional.  If specified, it is server-wide
    AuthnCacheSOCache dbm
    <Directory "/usr/www/myhost/private">
        AuthType Basic
        AuthName "Cached Authentication Example"
        AuthBasicProvider socache dbd
        AuthDBDUserPWQuery "SELECT password FROM authn WHERE user = %s"
        AuthnCacheProvideFor dbd
        Require valid-user
        #Optional
        AuthnCacheContext dbd-authn-example
    </Directory>
    top

    Cacheing with custom modules

    Module developers should note that their modules must be enabled for cacheing with mod_authn_socache. A single optional API function ap_authn_cache_store is provided to cache credentials a provider has just looked up or generated. Usage examples are available in r957072, in which three authn providers are enabled for cacheing.

    top

    AuthnCacheContext Directive

    Description:Specify a context string for use in the cache key
    Syntax:AuthnCacheContext directory|server|custom-string
    Default:directory
    Context:directory
    Status:Base
    Module:mod_authn_socache

    This directive specifies a string to be used along with the supplied username (and realm in the case of Digest Authentication) in constructing a cache key. This serves to disambiguate identical usernames serving different authentication areas on the server.

    Two special values for this are directory, which uses the directory context of the request as a string, and server which uses the virtual host name.

    The default is directory, which is also the most conservative setting. This is likely to be less than optimal, as it (for example) causes $app-base, $app-base/images, $app-base/scripts and $app-base/media each to have its own separate cache key. A better policy is to name the AuthnCacheContext for the password provider: for example a htpasswd file or database table.

    Contexts can be shared across different areas of a server, where credentials are shared. However, this has potential to become a vector for cross-site or cross-application security breaches, so this directive is not permitted in .htaccess contexts.

    top

    AuthnCacheEnable Directive

    Description:Enable Authn caching configured anywhere
    Syntax:AuthnCacheEnable
    Context:server config
    Status:Base
    Module:mod_authn_socache

    This directive is not normally necessary: it is implied if authentication cacheing is enabled anywhere in httpd.conf. However, if it is not enabled anywhere in httpd.conf it will by default not be initialised, and is therefore not available in a .htaccess context. This directive ensures it is initialised so it can be used in .htaccess.

    top

    AuthnCacheProvideFor Directive

    Description:Specify which authn provider(s) to cache for
    Syntax:AuthnCacheProvideFor authn-provider [...]
    Default:None
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_authn_socache

    This directive specifies an authentication provider or providers to cache for. Credentials found by a provider not listed in an AuthnCacheProvideFor directive will not be cached.

    For example, to cache credentials found by mod_authn_dbd or by a custom provider myprovider, but leave those looked up by lightweight providers like file or dbm lookup alone:

    AuthnCacheProvideFor dbd myprovider
    top

    AuthnCacheSOCache Directive

    Description:Select socache backend provider to use
    Syntax:AuthnCacheSOCache provider-name[:provider-args]
    Context:server config
    Status:Base
    Module:mod_authn_socache
    Compatibility:Optional provider arguments are available in Apache HTTP Server 2.4.7 and later

    This is a server-wide setting to select a provider for the shared object cache, followed by optional arguments for that provider. Some possible values for provider-name are "dbm", "dc", "memcache", or "shmcb", each subject to the appropriate module being loaded. If not set, your platform's default will be used.

    top

    AuthnCacheTimeout Directive

    Description:Set a timeout for cache entries
    Syntax:AuthnCacheTimeout timeout (seconds)
    Default:300 (5 minutes)
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_authn_socache

    Cacheing authentication data can be a security issue, though short-term cacheing is unlikely to be a problem. Typically a good solution is to cache credentials for as long as it takes to relieve the load on a backend, but no longer, though if changes to your users and passwords are infrequent then a longer timeout may suit you. The default 300 seconds (5 minutes) is both cautious and ample to keep the load on a backend such as dbd (SQL database queries) down.

    This should not be confused with session timeout, which is an entirely separate issue. However, you may wish to check your session-management software for whether cached credentials can "accidentally" extend a session, and bear it in mind when setting your timeout.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_usertrack.html.en0000644000000000000500000003641513412755316020371 0ustar rootsrc mod_usertrack - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_usertrack

    Available Languages:  en  |  fr 

    Description: Clickstream logging of user activity on a site
    Status:Extension
    Module Identifier:usertrack_module
    Source File:mod_usertrack.c

    Summary

    Provides tracking of a user through your website via browser cookies.

    top

    Logging

    mod_usertrack sets a cookie which can be logged via mod_log_config configurable logging formats:

    LogFormat "%{Apache}n %r %t" usertrack
    CustomLog "logs/clickstream.log" usertrack
    top

    CookieDomain Directive

    Description:The domain to which the tracking cookie applies
    Syntax:CookieDomain domain
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_usertrack

    This directive controls the setting of the domain to which the tracking cookie applies. If not present, no domain is included in the cookie header field.

    The domain string must begin with a dot, and must include at least one embedded dot. That is, .example.com is legal, but www.example.com and .com are not.

    Most browsers in use today will not allow cookies to be set for a two-part top level domain, such as .co.uk, although such a domain ostensibly fulfills the requirements above.
    These domains are equivalent to top level domains such as .com, and allowing such cookies may be a security risk. Thus, if you are under a two-part top level domain, you should still use your actual domain, as you would with any other top level domain (for example .example.co.uk).
    CookieDomain .example.com
    top

    CookieExpires Directive

    Description:Expiry time for the tracking cookie
    Syntax:CookieExpires expiry-period
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_usertrack

    When used, this directive sets an expiry time on the cookie generated by the usertrack module. The expiry-period can be given either as a number of seconds, or in the format such as "2 weeks 3 days 7 hours". Valid denominations are: years, months, weeks, days, hours, minutes and seconds. If the expiry time is in any format other than one number indicating the number of seconds, it must be enclosed by double quotes.

    If this directive is not used, cookies last only for the current browser session.

    CookieExpires "3 weeks"
    top

    CookieName Directive

    Description:Name of the tracking cookie
    Syntax:CookieName token
    Default:CookieName Apache
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_usertrack

    This directive allows you to change the name of the cookie this module uses for its tracking purposes. By default the cookie is named "Apache".

    You must specify a valid cookie name; results are unpredictable if you use a name containing unusual characters. Valid characters include A-Z, a-z, 0-9, "_", and "-".

    CookieName clicktrack
    top

    CookieStyle Directive

    Description:Format of the cookie header field
    Syntax:CookieStyle Netscape|Cookie|Cookie2|RFC2109|RFC2965
    Default:CookieStyle Netscape
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_usertrack

    This directive controls the format of the cookie header field. The three formats allowed are:

    • Netscape, which is the original but now deprecated syntax. This is the default, and the syntax Apache has historically used.
    • Cookie or RFC2109, which is the syntax that superseded the Netscape syntax.
    • Cookie2 or RFC2965, which is the most current cookie syntax.

    Not all clients can understand all of these formats, but you should use the newest one that is generally acceptable to your users' browsers. At the time of writing, most browsers support all three of these formats, with Cookie2 being the preferred format.

    CookieStyle Cookie2
    top

    CookieTracking Directive

    Description:Enables tracking cookie
    Syntax:CookieTracking on|off
    Default:CookieTracking off
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_usertrack

    When mod_usertrack is loaded, and CookieTracking on is set, Apache will send a user-tracking cookie for all new requests. This directive can be used to turn this behavior on or off on a per-server or per-directory basis. By default, enabling mod_usertrack will not activate cookies.

    CookieTracking on

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dir.html0000644000000000000500000000073213362070302016521 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_dir.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_dir.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_dir.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_dir.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: mod_dir.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/worker.html0000644000000000000500000000072213362070302016414 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: worker.html.de Content-Language: de Content-type: text/html; charset=ISO-8859-1 URI: worker.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: worker.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: worker.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: worker.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/core.html0000644000000000000500000000103413362070302016030 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: core.html.de Content-Language: de Content-type: text/html; charset=ISO-8859-1 URI: core.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: core.html.es Content-Language: es Content-type: text/html; charset=ISO-8859-1 URI: core.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: core.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: core.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_proxy_http.html.fr.utf80000644000000000000500000003131613412755316021473 0ustar rootsrc mod_proxy_http - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_proxy_http

    Langues Disponibles:  en  |  fr 

    Description:Module fournissant le support HTTP à mod_proxy
    Statut:Extension
    Identificateur de Module:proxy_http_module
    Fichier Source:mod_proxy_http.c

    Sommaire

    Pour pouvoir fonctionner, ce module requiert le chargement de mod_proxy. Il fournit le support du mandatement des requêtes HTTP et HTTPS. mod_proxy_http supporte HTTP/0.9, HTTP/1.0 et HTTP/1.1. Il ne fournit aucune fonctionnalité de mise en cache. Si vous souhaitez mettre en oeuvre un mandataire qui assure aussi les fonctions de mise en cache, vous devez utiliser les services du module mod_cache.

    Ainsi, pour pouvoir traiter les requêtes HTTP mandatées, mod_proxy, et mod_proxy_http doivent être chargés dans le serveur.

    Avertissement

    N'activez pas la fonctionnalité de mandataire avant d'avoir sécurisé votre serveur. Les serveurs mandataires ouverts sont dangereux non seulement pour votre réseau, mais aussi pour l'Internet au sens large.

    top

    Variables d'environnement

    Outre les directives de configuration qui contrôlent le comportement de mod_proxy, plusieurs variables d'environnement permettent de contrôler le fournisseur du protocole HTTP. Parmi les variables suivantes, celle qui ne nécessitent pas de valeur particulière sont définies quelle que soit la valeur qu'on leur affecte.

    proxy-sendextracrlf
    Provoque l'envoi par le mandataire d'une nouvelle ligne CR-LF supplémentaire à la fin de la requête. Ceci constitue un moyen de contournement d'une bogue de certains navigateurs.
    force-proxy-request-1.0
    Force le mandataire à envoyer des requêtes vers le serveur cible selon le protocole HTTP/1.0 et désactive les fonctionnalités propres à HTTP/1.1.
    proxy-nokeepalive
    Force le mandataire à fermer la connexion avec le serveur cible après chaque requête.
    proxy-chain-auth
    Si le mandataire requiert une authentification, il va lire et exploiter les données d'authentification pour mandataire envoyées par le client. Si proxy-chain-auth est définie, il va aussi faire suivre ces données vers le mandataire suivant dans la chaîne. Ceci peut s'avérer nécessaire si une chaîne de mandataires partagent les informations d'authentification. Avertissement concernant la sécurité : Ne définissez cette variable que si vous êtes sûr d'en avoir besoin, car elle peut provoquer la divulgation d'informations sensibles !
    proxy-sendcl
    Avec HTTP/1.0, toutes les requêtes qui possèdent un corps (par exemple les requêtes POST) doivent comporter un en-tête Content-Length. Cette variable d'environnement force le mandataire Apache à envoyer cet en-tête au serveur cible, sans tenir compte de ce que lui a envoyé le client. Ceci permet d'assurer la compatibilité lorsqu'on mandate un serveur cible mettant en oeuvre un protocole de type HTTP/1.0 ou inconnu. Elle peut cependant nécessiter la mise en tampon de l'intégralité de la requête par le mandataire, ce qui s'avère très inefficace pour les requêtes de grande taille.
    proxy-sendchunks ou proxy-sendchunked
    Cette variable constitue l'opposé de proxy-sendcl. Elle permet la transmission des corps de requêtes vers le serveur cible en utilisant un codage de transfert fractionné. Ceci permet une transmission des requêtes plus efficace, mais nécessite que le serveur cible supporte le protocole HTTP/1.1.
    proxy-interim-response
    Cette variable peut prendre les valeurs RFC (valeur par défaut) ou Suppress. Les versions précédentes de httpd supprimaient les réponses intermédiaires HTTP (1xx) envoyées par le serveur cible. En pratique, si un serveur cible envoie une réponse intermédiaire, il se peut qu'il étende lui-même le protocole d'une manière dont nous n'avons pas connaissance, ou tout simplement non conforme. Le comportement du mandataire est donc maintenant configurable : définissez proxy-interim-response RFC pour être totalement compatible avec le protocole, ou proxy-interim-response Suppress pour supprimer les réponses intermédiaires.
    proxy-initial-not-pooled
    Si cette variable est définie, aucune connexion faisant partie d'un jeu ne sera réutilisée si la requête du client est la requête initiale pour une connexion. Ceci permet d'éviter le message d'erreur "proxy: error reading status line from remote server" causé par la situation de compétition au cours de laquelle le serveur cible ferme la connexion du jeu après la vérification de la connexion par le mandataire, et avant que les données envoyées par le mandataire n'atteignent le serveur cible. Il faut cependant garder à l'esprit que la définition de cette variable dégrade les performances, particulièrement avec les clients HTTP/1.0.
    top

    Informations sur les requêtes

    mod_proxy_http enregistre les informations suivantes pour journalisation via le format %{NOMVAR}n dans les directives LogFormat ou ErrorLogFormat :

    proxy-source-port
    Le port local utilisé pour la connexion vers le serveur d'arrière-plan.
    proxy-status
    Le code d'état HTTP reçu du serveur d'arrière-plan.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_expires.html.en0000644000000000000500000004134013412755316020036 0ustar rootsrc mod_expires - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_expires

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Generation of Expires and Cache-Control HTTP headers according to user-specified criteria
    Status:Extension
    Module Identifier:expires_module
    Source File:mod_expires.c

    Summary

    This module controls the setting of the Expires HTTP header and the max-age directive of the Cache-Control HTTP header in server responses. The expiration date can set to be relative to either the time the source file was last modified, or to the time of the client access.

    These HTTP headers are an instruction to the client about the document's validity and persistence. If cached, the document may be fetched from the cache rather than from the source until this time has passed. After that, the cache copy is considered "expired" and invalid, and a new copy must be obtained from the source.

    To modify Cache-Control directives other than max-age (see RFC 2616 section 14.9), you can use the Header directive.

    When the Expires header is already part of the response generated by the server, for example when generated by a CGI script or proxied from an origin server, this module does not change or add an Expires or Cache-Control header.

    top

    Alternate Interval Syntax

    The ExpiresDefault and ExpiresByType directives can also be defined in a more readable syntax of the form:

    ExpiresDefault "base  [plus num type] [num type] ..."
    ExpiresByType type/encoding "base  [plus num type] [num type] ..."

    where base is one of:

    • access
    • now (equivalent to 'access')
    • modification

    The plus keyword is optional. num should be an integer value [acceptable to atoi()], and type is one of:

    • years
    • months
    • weeks
    • days
    • hours
    • minutes
    • seconds

    For example, any of the following directives can be used to make documents expire 1 month after being accessed, by default:

    ExpiresDefault "access plus 1 month"
    ExpiresDefault "access plus 4 weeks"
    ExpiresDefault "access plus 30 days"

    The expiry time can be fine-tuned by adding several 'num type' clauses:

    ExpiresByType text/html "access plus 1 month 15 days 2 hours"
    ExpiresByType image/gif "modification plus 5 hours 3 minutes"

    Note that if you use a modification date based setting, the Expires header will not be added to content that does not come from a file on disk. This is due to the fact that there is no modification time for such content.

    top

    ExpiresActive Directive

    Description:Enables generation of Expires headers
    Syntax:ExpiresActive On|Off
    Default:ExpiresActive Off
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Extension
    Module:mod_expires

    This directive enables or disables the generation of the Expires and Cache-Control headers for the document realm in question. (That is, if found in an .htaccess file, for instance, it applies only to documents generated from that directory.) If set to Off, the headers will not be generated for any document in the realm (unless overridden at a lower level, such as an .htaccess file overriding a server config file). If set to On, the headers will be added to served documents according to the criteria defined by the ExpiresByType and ExpiresDefault directives (q.v.).

    Note that this directive does not guarantee that an Expires or Cache-Control header will be generated. If the criteria aren't met, no header will be sent, and the effect will be as though this directive wasn't even specified.

    top

    ExpiresByType Directive

    Description:Value of the Expires header configured by MIME type
    Syntax:ExpiresByType MIME-type <code>seconds
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Extension
    Module:mod_expires

    This directive defines the value of the Expires header and the max-age directive of the Cache-Control header generated for documents of the specified type (e.g., text/html). The second argument sets the number of seconds that will be added to a base time to construct the expiration date. The Cache-Control: max-age is calculated by subtracting the request time from the expiration date and expressing the result in seconds.

    The base time is either the last modification time of the file, or the time of the client's access to the document. Which should be used is specified by the <code> field; M means that the file's last modification time should be used as the base time, and A means the client's access time should be used.

    The difference in effect is subtle. If M is used, all current copies of the document in all caches will expire at the same time, which can be good for something like a weekly notice that's always found at the same URL. If A is used, the date of expiration is different for each client; this can be good for image files that don't change very often, particularly for a set of related documents that all refer to the same images (i.e., the images will be accessed repeatedly within a relatively short timespan).

    Example:

    # enable expirations
    ExpiresActive On
    # expire GIF images after a month in the client's cache
    ExpiresByType image/gif A2592000
    # HTML documents are good for a week from the
    # time they were changed
    ExpiresByType text/html M604800

    Note that this directive only has effect if ExpiresActive On has been specified. It overrides, for the specified MIME type only, any expiration date set by the ExpiresDefault directive.

    You can also specify the expiration time calculation using an alternate syntax, described earlier in this document.

    top

    ExpiresDefault Directive

    Description:Default algorithm for calculating expiration time
    Syntax:ExpiresDefault <code>seconds
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Extension
    Module:mod_expires

    This directive sets the default algorithm for calculating the expiration time for all documents in the affected realm. It can be overridden on a type-by-type basis by the ExpiresByType directive. See the description of that directive for details about the syntax of the argument, and the alternate syntax description as well.

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_host.html0000644000000000000500000000034013362070302020126 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authz_host.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authz_host.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_proxy_ftp.html0000644000000000000500000000033613362070302017775 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy_ftp.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_proxy_ftp.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_cern_meta.html0000644000000000000500000000047613362070302017705 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_cern_meta.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_cern_meta.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_cern_meta.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_brotli.html.en0000644000000000000500000005223113412755316017653 0ustar rootsrc mod_brotli - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_brotli

    Available Languages:  en  |  fr 

    Description:Compress content via Brotli before it is delivered to the client
    Status:Extension
    Module Identifier:brotli_module
    Source File:mod_brotli.c
    Compatibility:Available in version 2.4.26 and later.

    Summary

    The mod_brotli module provides the BROTLI_COMPRESS output filter that allows output from your server to be compressed using the brotli compression format before being sent to the client over the network. This module uses the Brotli library found at https://github.com/google/brotli.

    top

    Sample Configurations

    Compression and TLS

    Some web applications are vulnerable to an information disclosure attack when a TLS connection carries compressed data. For more information, review the details of the "BREACH" family of attacks.

    This is a simple configuration that compresses common text-based content types.

    Compress only a few types

    AddOutputFilterByType BROTLI_COMPRESS text/html text/plain text/xml text/css text/javascript application/javascript
    top

    Enabling Compression

    Compression and TLS

    Some web applications are vulnerable to an information disclosure attack when a TLS connection carries compressed data. For more information, review the details of the "BREACH" family of attacks.

    Output Compression

    Compression is implemented by the BROTLI_COMPRESS filter. The following directive will enable compression for documents in the container where it is placed:

    SetOutputFilter BROTLI_COMPRESS
    SetEnvIfNoCase Request_URI \.(?:gif|jpe?g|png)$ no-brotli

    If you want to restrict the compression to particular MIME types in general, you may use the AddOutputFilterByType directive. Here is an example of enabling compression only for the html files of the Apache documentation:

    <Directory "/your-server-root/manual">
        AddOutputFilterByType BROTLI_COMPRESS text/html
    </Directory>

    Note

    The BROTLI_COMPRESS filter is always inserted after RESOURCE filters like PHP or SSI. It never touches internal subrequests.

    Note

    There is an environment variable no-brotli, set via SetEnv, which will disable brotli compression for a particular request, even if it is supported by the client.
    top

    Dealing with proxy servers

    The mod_brotli module sends a Vary: Accept-Encoding HTTP response header to alert proxies that a cached response should be sent only to clients that send the appropriate Accept-Encoding request header. This prevents compressed content from being sent to a client that will not understand it.

    If you use some special exclusions dependent on, for example, the User-Agent header, you must manually configure an addition to the Vary header to alert proxies of the additional restrictions. For example, in a typical configuration where the addition of the BROTLI_COMPRESS filter depends on the User-Agent, you should add:

    Header append Vary User-Agent

    If your decision about compression depends on other information than request headers (e.g. HTTP version), you have to set the Vary header to the value *. This prevents compliant proxies from caching entirely.

    Example

    Header set Vary *
    top

    Serving pre-compressed content

    Since mod_brotli re-compresses content each time a request is made, some performance benefit can be derived by pre-compressing the content and telling mod_brotli to serve them without re-compressing them. This may be accomplished using a configuration like the following:

    <IfModule mod_headers.c>
        # Serve brotli compressed CSS files if they exist
        # and the client accepts brotli.
        RewriteCond "%{HTTP:Accept-encoding}" "br"
        RewriteCond "%{REQUEST_FILENAME}\.br" "-s"
        RewriteRule "^(.*)\.css"              "$1\.css\.br" [QSA]
    
        # Serve brotli compressed JS files if they exist
        # and the client accepts brotli.
        RewriteCond "%{HTTP:Accept-encoding}" "br"
        RewriteCond "%{REQUEST_FILENAME}\.br" "-s"
        RewriteRule "^(.*)\.js"               "$1\.js\.br" [QSA]
    
    
        # Serve correct content types, and prevent double compression.
        RewriteRule "\.css\.br$" "-" [T=text/css,E=no-brotli:1]
        RewriteRule "\.js\.br$"  "-" [T=text/javascript,E=no-brotli:1]
    
    
        <FilesMatch "(\.js\.br|\.css\.br)$">
          # Serve correct encoding type.
          Header append Content-Encoding br
    
          # Force proxies to cache brotli &
          # non-brotli css/js files separately.
          Header append Vary Accept-Encoding
        </FilesMatch>
    </IfModule>
    top

    BrotliAlterETag Directive

    Description:How the outgoing ETag header should be modified during compression
    Syntax:BrotliAlterETag AddSuffix|NoChange|Remove
    Default:BrotliAlterETag AddSuffix
    Context:server config, virtual host
    Status:Extension
    Module:mod_brotli

    The BrotliAlterETag directive specifies how the ETag hader should be altered when a response is compressed.

    AddSuffix

    Append the compression method onto the end of the ETag, causing compressed and uncompressed representations to have unique ETags. In another dynamic compression module, mod_deflate, this has been the default since 2.4.0. This setting prevents serving "HTTP Not Modified" (304) responses to conditional requests for compressed content.

    NoChange

    Don't change the ETag on a compressed response. In another dynamic compression module, mod_deflate, this has been the default prior to 2.4.0. This setting does not satisfy the HTTP/1.1 property that all representations of the same resource have unique ETags.

    Remove

    Remove the ETag header from compressed responses. This prevents some conditional requests from being possible, but avoids the shortcomings of the preceding options.

    top

    BrotliCompressionMaxInputBlock Directive

    Description:Maximum input block size
    Syntax:BrotliCompressionMaxInputBlock value
    Default:(automatic)
    Context:server config, virtual host
    Status:Extension
    Module:mod_brotli

    The BrotliCompressionMaxInputBlock directive specifies the maximum input block size between 16 and 24, with the caveat that larger block sizes require more memory.

    top

    BrotliCompressionQuality Directive

    Description:Compression quality
    Syntax:BrotliCompressionQuality value
    Default:BrotliCompressionQuality 5
    Context:server config, virtual host
    Status:Extension
    Module:mod_brotli

    The BrotliCompressionQuality directive specifies the compression quality (a value between 0 and 11). Higher quality values result in better, but also slower compression.

    top

    BrotliCompressionWindow Directive

    Description:Brotli sliding compression window size
    Syntax:BrotliCompressionWindow value
    Default:BrotliCompressionWindow 18
    Context:server config, virtual host
    Status:Extension
    Module:mod_brotli

    The BrotliCompressionWindow directive specifies the brotli sliding compression window size (a value between 10 and 24). Larger window sizes can improve compression quality, but require more memory.

    top

    BrotliFilterNote Directive

    Description:Places the compression ratio in a note for logging
    Syntax:BrotliFilterNote [type] notename
    Context:server config, virtual host
    Status:Extension
    Module:mod_brotli

    The BrotliFilterNote directive specifies that a note about compression ratios should be attached to the request. The name of the note is the value specified for the directive. You can use that note for statistical purposes by adding the value to your access log.

    Example

    BrotliFilterNote ratio
    
    LogFormat '"%r" %b (%{ratio}n) "%{User-agent}i"' brotli
    CustomLog "logs/brotli_log" brotli

    If you want to extract more accurate values from your logs, you can use the type argument to specify the type of data left as a note for logging. type can be one of:

    Input
    Store the byte count of the filter's input stream in the note.
    Output
    Store the byte count of the filter's output stream in the note.
    Ratio
    Store the compression ratio (output/input * 100) in the note. This is the default, if the type argument is omitted.

    Thus you may log it this way:

    Accurate Logging

    BrotliFilterNote Input instream
    BrotliFilterNote Output outstream
    BrotliFilterNote Ratio ratio
    
    LogFormat '"%r" %{outstream}n/%{instream}n (%{ratio}n%%)' brotli
    CustomLog "logs/brotli_log" brotli

    See also

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/core.html.de0000644000000000000500000071224613521115051016433 0ustar rootsrc core - Apache HTTP Server Version 2.4
    <-

    Apache-Kernfunktionen

    Verfügbare Sprachen:  de  |  en  |  es  |  fr  |  ja  |  tr 

    Diese Übersetzung ist möglicherweise nicht mehr aktuell. Bitte prüfen Sie die englische Version auf die neuesten Änderungen.
    Beschreibung:Ständig verfügbare Kernfunktionen des Apache HTTP Servers
    Status:Core
    top

    AcceptFilter-Direktive

    Beschreibung:Konfiguriert Optimierungen für lauschende Sockets bestimmter Protokolle
    Syntax:AcceptFilter Protokoll Filter
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core
    Kompatibilität:Verfügbar ab Apache 2.1.5

    Diese Direktive aktiviert betriebssystemspezifische Optimierungen für lauschende Sockets anhand des Protokolltyps. Der grundlegende Ansatz ist, dass der Kernel das Socket nicht an den Serverprozess übergibt, bis entweder Daten verfügbar sind oder eine komplette HTTP-Anfrage zwischengespeichert wurde. Derzeit werden ausschließlich die Accept-Filter von FreeBSD und das primitivere TCP_DEFER_ACCEPT von Linux unterstützt.

    Die Standardeinstellungen für FreeBSD sind:

    AcceptFilter http httpready
    AcceptFilter https dataready

    Der httpready-Accept-Filter puffert komplette HTTP-Anfragen auf Kernelebene. Sobald eine Anfrage vollständig vorliegt, schickt der Kernel sie an den Server weiter. Bitte schlagen Sie in der accf_http(9)-Manpage für weitere Details nach. HTTPS-Anfragen sind verschlüsselt. Daher wird dafür nur der accf_data(9)-Filter verwendet.

    Die Standardeinstellungen für Linux sind:

    AcceptFilter http data
    AcceptFilter https data

    TCP_DEFER_ACCEPT unter Linux unterstützt keine Zwischenspeicherung von HTTP-Anfragen. Jeder andere Wert als none aktiviert TCP_DEFER_ACCEPT auf dem Lauschsocket. Mehr Details finden Sie in der tcp(7)-Manpage von Linux.

    Wenn Sie none als Argument verwenden, werden alle Accept-Filter für das Protokoll abgeschaltet. Das ist sinnvoll für Protokolle, bei denen der Server zuerst Daten senden muss, wie zum Beispiel nntp:

    AcceptFilter nttp none

    top

    AcceptPathInfo-Direktive

    Beschreibung:Ressourcen lassen angehängte Pfadangaben zu
    Syntax:AcceptPathInfo On|Off|Default
    Voreinstellung:AcceptPathInfo Default
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Core
    Modul:core
    Kompatibilität:Verfügbar ab Apache 2.0.30

    Die Direktive steuert, ob Anfragen akzeptiert oder abgewiesen werden, bei denen nach der tatsächlichen Datei (oder einer nicht existierenden Datei in einem existierenden Verzeichnis) zusätzliche Pfadangaben folgen. Die angehängte Pfadangabe kann Skripten in der Umgebungsvariable PATH_INFO verfügbar gemacht werden.

    Nehmen wir beispielsweise an, dass /test/ auf ein Verzeichnis zeigt, welches lediglich eine Datei here.html enthält. Dann wird bei Anfragen nach /test/here.html/more und /test/nothere.html/more beides Mal /more als PATH_INFO ermittelt.

    Die drei möglichen Argumente für die Direktive AcceptPathInfo sind:

    Off
    Eine Anfrage wird nur dann akzeptiert, wenn sie exakt auf ein existierendes Verzeichnis (oder eine Datei) abgebildet werden kann. Daher würde eine Anfrage mit einer nach dem tatsächlichen Dateinamen angehängten Pfadangabe, wie /test/here.html/more im obigen Beispiel, den Fehler 404 NOT FOUND (Anm.d.Ü.: nicht gefunden) zurückgeben.
    On
    Eine Anfrage wird akzeptiert, wenn eine vorangestellte Pfadangabe auf ein existierendes Verzeichnis abgebildet werden kann. Das obige Beispiel /test/here.html/more wird akzeptiert, wenn /test/here.html auf eine gültige Datei zeigt.
    Default
    Die Behandlung von Anfragen mit angehängten Pfadangaben wird von dem für die Anfrage verantwortlichen Handler bestimmt. Der Core-Handler für gewöhnliche Dateien weist PATH_INFO-Zugriffe standardmäßig zurück. Handler, die Skripte bedienen, wie z.B. cgi-script und isapi-handler, sind im Allgemeinen darauf voreingestellt, PATH_INFO zu akzeptieren.

    Das eigentliche Ziel von AcceptPathInfo ist es, Ihnen das Überschreiben der Voreinstellung der Handler bezüglich der Akzeptanz oder Ablehnung von PATH_INFO zu erlauben. Eine solche Änderung ist zum Beispiel notwendig, wenn Sie einen Filter wie INCLUDES verwenden, um Inhalte abhängig von PATH_INFO zu generieren. Der Core-Handler würde die Anfrage normalerweise abweisen. Verwenden Sie die folgende Konfiguration, um dennoch solch ein Skript zu ermöglichen.

    <Files "mypaths.shtml">
    Options +Includes
    SetOutputFilter INCLUDES
    AcceptPathInfo On
    </Files>

    top

    AccessFileName-Direktive

    Beschreibung:Name der dezentralen Konfigurationsdateien
    Syntax:AccessFileName Dateiname [Dateiname] ...
    Voreinstellung:AccessFileName .htaccess
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core

    Aus dieser Namensliste sucht der Server während der Bearbeitung einer Anfrage in jedem Verzeichnis nach der ersten existierenden Datei, sofern im betreffenden Verzeichnis dezentrale Konfigurationsdateien erlaubt sind. Beispiel:

    AccessFileName .acl

    Vor der Rücksendung des Dokuments /usr/local/web/index.html wird der Server /.acl, /usr/.acl, /usr/local/.acl und /usr/local/web/.acl einlesen, solange diese nicht mit

    <Directory />
    AllowOverride None
    </Directory>

    deaktiviert wurden.

    Siehe auch

    top

    AddDefaultCharset-Direktive

    Beschreibung:Standard-Charset-Parameter, der bei Antworten vom Content-Type text/plain oder text/html hinzugefügt wird
    Syntax:AddDefaultCharset On|Off|Zeichenkodierung
    Voreinstellung:AddDefaultCharset Off
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Core
    Modul:core

    Die Direktive gibt einen Standardwert für den Charset-Paramter des Medientyps (den Namen einer Zeichencodierung) an, der einer Antwort genau dann hinzugefügt wird, wenn der Content-Type der Antwort entweder text/plain oder text/html ist. Dies sollte jedes mittels META-Element im Datenteil der Antwort angegebene Charset überschreiben. Das genaue Verhalten hängt jedoch oft von der Client-Konfiguration des Benutzers ab. Die Einstellung AddDefaultCharset Off deaktiviert diese Funktionalität. AddDefaultCharset On aktiviert die Standard-Zeichenkodierung iso-8859-1. Jeder andere Wert wird als die zu verwendende Zeichenkodierung aufgefaßt, die eines der bei IANA registrierten Charset-Werte zur Verwendung in MIME-Medientypen sein sollte. Zum Beispiel:

    AddDefaultCharset utf-8

    AddDefaultCharset sollte nur verwendet werden, wenn von allen Textressourcen, für die es gilt, bekannt ist, dass sie in dieser Zeichkodierung vorliegen, oder wenn es zu unbequem ist, ihre Zeichenkodierung indivuell zu benennen. Ein solches Beispiel ist das Hinzufügen des Charset-Parameters zu Ressourcen, die generierte Inhalte enthalten. Ein Beispiel sind CGI-Skript-Altlasten, die aufgrund von in die Ausgabe integrierten Daten, die durch den Benutzer übermittelt wurden, gegen Cross-Site-Scripting-Angriffe verwundbar sind. Eine bessere Lösung wäre jedoch, diese Skripte zu korrigieren (oder zu löschen), da die Angabe einer Standard-Zeichencodierung keine Anwender schützt, die in ihrem Browser die Funktion zur automatischen Erkennung der Zeichenkodierung aktiviert haben.

    Siehe auch

    top

    AllowEncodedSlashes-Direktive

    Beschreibung:Legt fest, ob kodierte Pfadtrennzeichen in URLs durchgereicht werden dürfen
    Syntax:AllowEncodedSlashes On|Off
    Voreinstellung:AllowEncodedSlashes Off
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core
    Kompatibilität:Verfügbar ab Apache 2.0.46

    Die AllowEncodedSlashes-Direktive erlaubt die Verwendung von URLs, welche kodierte Pfadtrennzeichen (%2F für / und auf entsprechenden Systemen zusätzlich %5C für \) enthalten. Normalerweise werden derartige URLs mit einem 404-Fehler (Nicht gefunden) abgewiesen.

    AllowEncodedSlashes On ist vor allem in Verbindung mit PATH_INFO hilfreich.

    Anmerkung

    Das Erlauben von Schrägstrichen impliziert nicht deren Dekodierung. Vorkommen von %2F oder %5C (nur auf entsprechenden Systemen) werden unverändert in der ansonsten dekodierten URL belassen.

    Siehe auch

    top

    AllowOverride-Direktive

    Beschreibung:Direktiven-Typen, die in .htaccess-Dateien erlaubt sind.
    Syntax:AllowOverride All|None|Direktiven-Typ [Direktiven-Typ] ...
    Voreinstellung:AllowOverride None (2.3.9 und später), AllowOverride All (2.3.8 und früher)
    Kontext:Verzeichnis
    Status:Core
    Modul:core

    Wenn der Server eine .htaccess-Datei (wie durch AccessFileName definiert) findet, muss er wissen, welche in der Datei angegebenen Direktiven frühere Konfigurationsanweisungen überschreiben dürfen.

    Nur in <Directory>-Abschnitten verfügbar

    AllowOverride ist nur in <Directory>-Abschnitten gültig, die ohne reguläre Ausdrücke definiert wurden, nicht in <Location>-, <DirectoryMatch>- oder <Files>-Abschnitten.

    Wenn diese Anweisung auf None gesetzt wird, dann werden .htaccess-Dateien komplett ignoriert. In diesem Fall wird der Server nicht einmal versuchen, die .htaccess-Dateien im Dateisystem zu lesen.

    Wenn diese Anweisung auf All gesetzt wird, dann ist jede Direktive in den .htaccess-Dateien erlaubt, die den Kontext .htaccess besitzt.

    Der Direktiven-Typ kann eine der folgenden Anweisungsgruppen sein.

    AuthConfig
    Erlaubt die Verwendung von Autorisierungs-Anweisungen (AuthDBMGroupFile, AuthDBMUserFile, AuthGroupFile, AuthName, AuthType, AuthUserFile, Require usw.).
    FileInfo
    Erlaubt die Verwendung von Direktiven zur Steuerung der Dokumenttypen (DefaultType, ErrorDocument, ForceType, LanguagePriority, SetHandler, SetInputFilter, SetOutputFilter, und mod_mime-Direktiven Add* und Remove* usw.), Metadaten (Header, RequestHeader, SetEnvIf, SetEnvIfNoCase, BrowserMatch, CookieExpires, CookieDomain, CookieStyle, CookieTracking, CookieName), mod_rewrite-Direktiven RewriteEngine, RewriteOptions, RewriteBase, RewriteCond, RewriteRule) und Action aus mod_actions.
    Indexes
    Erlaubt die Verwendung von Direktiven zur Steuerung von Verzeichnisindizes (AddDescription, AddIcon, AddIconByEncoding, AddIconByType, DefaultIcon, DirectoryIndex, FancyIndexing, HeaderName, IndexIgnore, IndexOptions, ReadmeName usw.).
    Limit
    Erlaubt die Verwendung von Direktiven zur Steuerung des Zugriffs von Hosts (Allow, Deny und Order).
    Options[=Option,...]
    Erlaubt die Verwendung von Direktiven zur Steuerung spezieller Verzeichniseigenschaften (Options und XBitHack). Sie können mit einem Gleichheitszeichen gefolgt von einer kommaseparierten Liste (ohne Leerzeichen) angeben, welche Optionen mit der Options-Direktive gesetzt werden dürfen.

    Beispiel:

    AllowOverride AuthConfig Indexes

    Im obigen Beispiel erzeugen alle Direktiven einen internal server error (Anm.d.Ü.: Server-interner Fehler), die weder der Gruppe AuthConfig noch der Gruppe Indexes angehören.

    Siehe auch

    top

    AllowOverrideList-Direktive

    Beschreibung:Individual directives that are allowed in .htaccess files
    Syntax:AllowOverrideList None|directive [directive-type] ...
    Voreinstellung:AllowOverrideList None
    Kontext:Verzeichnis
    Status:Core
    Modul:core

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    Siehe auch

    top

    CGIMapExtension-Direktive

    Beschreibung:Technik zur Bestimmung des Interpreters für CGI-Skripte
    Syntax:CGIMapExtension CGI-Pfad .Endung
    Kontext:Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Core
    Modul:core
    Kompatibilität:ausschließlich NetWare

    Die Direktive wird zur Steuerung verwendet, wie Apache den Interpreter ermittelt, der zur Ausführung von CGI-Skripten verwendet wird. Beispielsweise bestimmt die Angabe von CGIMapExtension sys:\foo.nlm .foo, dass alle CGI-Scripte mit der Endung .foo an den FOO-Interpreter übergeben werden.

    top

    CGIPassAuth-Direktive

    Beschreibung:Enables passing HTTP authorization headers to scripts as CGI variables
    Syntax:CGIPassAuth On|Off
    Voreinstellung:CGIPassAuth Off
    Kontext:Verzeichnis, .htaccess
    AllowOverride:AuthConfig
    Status:Core
    Modul:core
    Kompatibilität:Available in Apache HTTP Server 2.4.13 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    CGIVar-Direktive

    Beschreibung:Controls how some CGI variables are set
    Syntax:CGIVar variable rule
    Kontext:Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Core
    Modul:core
    Kompatibilität:Available in Apache HTTP Server 2.4.21 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    ContentDigest-Direktive

    Beschreibung:Aktiviert die Generierung von Content-MD5 HTTP-Response-Headern
    Syntax:ContentDigest On|Off
    Voreinstellung:ContentDigest Off
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:Options
    Status:Core
    Modul:core

    Die Direktive aktiviert die Generierung von Content-MD5-Headern, wie sie in RFC1864 bzw. RFC2616 definiert sind.

    MD5 ist ein Algorithmus zur Berechnung eines "Datenextrakts" (zuweilen "Fingerabdruck" genannt) (Anm.d.Ü.: Der "Datenextrakt" wird im Englischen als "message digest" oder "fingerprint" bezeichnet.) aus beliebig langen Daten. Es gilt als zuverlässig, dass Veränderungen an den Daten sich in Veränderungen des Extrakts wiederspiegeln.

    Der Content-MD5-Header bietet eine End-to-End-Integritätsprüfung (MIC) (Anm.d.Ü.: MIC steht für "message integrity check".) des Daten-Inhalts. Ein Proxy oder Client kann diesen Header prüfen, um zufällige Veränderungen des Entity-Inhalts bei der Übertragung festzustellen. Beispielheader:

    Content-MD5: AuLb7Dp1rqtRtxz2m9kRpA==

    Beachten Sie bitte, dass dies Performanceprobleme auf Ihrem System verursachen kann, da der Extrakt bei jeder Anfrage berechnet wird (der Wert wird nicht zwischengespeichert).

    Content-MD5 wird nur für Dokumente gesendet, die von core bedient werden, nicht jedoch bei Modulen. SSI-Dokumente, CGI-Skript-Ausgaben und Byte-Range-Antworten besitzen diesen Header beispielsweise nicht.

    top

    DefaultRuntimeDir-Direktive

    Beschreibung:Base directory for the server run-time files
    Syntax:DefaultRuntimeDir directory-path
    Voreinstellung:DefaultRuntimeDir DEFAULT_REL_RUNTIMEDIR (logs/)
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core
    Kompatibilität:Available in Apache 2.4.2 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    Siehe auch

    • the security tips for information on how to properly set permissions on the ServerRoot
    top

    DefaultType-Direktive

    Beschreibung:MIME-Content-Type, der gesendet wird, wenn der Server den Typ nicht auf andere Weise ermitteln kann.
    Syntax:DefaultType MIME-Type
    Voreinstellung:DefaultType text/plain
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Core
    Modul:core

    Es kann vorkommen, dass der Server ein Dokument ausliefern muss, dessen Typ er nicht mit Hilfe seiner MIME-Type-Zuordnungen bestimmen kann.

    Der Server muss den Client über den Content-Type des Dokumentes informieren. Daher verwendet er im Falle eines unbekannten Typs die DefaultType-Einstellung. Zum Beispiel:

    DefaultType image/gif

    wäre angemessen für ein Verzeichnis, das viele GIF-Bilder enthält, deren Dateinamen nicht Endung .gif besitzen.

    Beachten Sie bitte, dass die Direktive anders als ForceType lediglich den Standard-MIME-Type bestimmt. Alle anderen MIME-Type-Definitionen, einschließlich Dateierweiterungen, die den Medien-Typ anzeigen können, überschreiben diese Voreinstellung.

    top

    Define-Direktive

    Beschreibung:Define the existence of a variable
    Syntax:Define Parametername
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core

    Equivalent zum übergeben von Parametername mittels des -D Arguments an httpd.

    Diese Directive kann verwendet werden, um die Nutzung von <IfDefine> Sectionen umzuschalten, ohne die -D Argumentente in etwaigen Start-Skripten ändern zu müssen.

    top

    <Directory>-Direktive

    Beschreibung:Umschließt eine Gruppe von Direktiven, die nur auf das genannte Verzeichnis des Dateisystems und Unterverzeichnisse angewendet werden
    Syntax:<Directory Verzeichnispfad> ... </Directory>
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core

    <Directory> und </Directory> werden dazu verwendet, eine Gruppe von Direktiven zusammenzufassen, die nur für das genannte Verzeichnis und dessen Unterverzeichnisse gelten. Jede Direktive, die im Verzeichnis-Kontext erlaubt ist, kann verwendet werden. Verzeichnispfad ist entweder der vollständige Pfad zu einem Verzeichnis oder eine Zeichenkette mit Platzhaltern wie sie von der Unix-Shell zum Abgleich verwendet werden. In einer Zeichenkette mit Platzhaltern (Anm.d.Ü.: sogenannte wild-cards) entspricht ? einem einzelnen Zeichen und * einer Zeichenkette beliebiger Länge. Sie können auch auch []-Zeichenbereiche verwenden. Keiner der Platzhalter entspricht dem Zeichen "/". Daher passt <Directory /*/public_html> nicht auf /home/user/public_html, <Directory /home/*/public_html> jedoch tut es. Beispiel:

    <Directory /usr/local/httpd/htdocs>
    Options Indexes FollowSymLinks
    </Directory>

    Seien Sie vorsichtig mit den Verzeichnispfad-Argumenten. Sie müssen buchstäblich mit dem Dateisystempfad übereinstimmen, den der Apache für den Zugriff auf die Dateien verwendet. Direktiven, die für ein bestimmtes Verzeichnis gelten, gelten nicht für Dateien in dem Verzeichnis, auf die über einen anderen Pfad zugegriffen wird, wie z.B. über verschiedene symbolische Links.

    Erweiterte reguläre Ausdrücke können ebenfalls verwendet werden, indem das Zeichen ~ hinzugefügt wird. Beispielsweise würde

    <Directory ~ "^/www/.*/[0-9]{3}">

    auf Verzeichnisse in /www/ passen, die aus drei Zahlen bestehen.

    Wenn mehrere <Directory>-Abschnitte (ohne reguläre Ausdrücke) auf ein Verzeichnis (oder ein ihm übergeordnetes Verzeichnis) passen, welches ein Dokument enthält, dann werden die Direktiven der Reihe nach, angefangen beim kürzesten passenden Muster, vermischt mit den Direktiven aus den .htaccess-Dateien, angewendet. Beispiel:

    <Directory />
    AllowOverride None
    </Directory>

    <Directory /home/>
    AllowOverride FileInfo
    </Directory>

    Beim Zugriff auf das Dokument /home/web/dir/doc.html sind die einzelnen Schritte:

    • Wende die Direktive AllowOverride None an (deaktiviere .htaccess-Dateien).
    • Wende die Direktive AllowOverride FileInfo (auf das Verzeichnis /home) an.
    • Wende jede FileInfo-Direktive aus /home/.htaccess, /home/web/.htaccess und /home/web/dir/.htaccess der Reihe nach an.

    Reguläre Ausdrücke werden solange nicht berücksichtigt, bis alle normalen Abschnitte angewendet wurden. Anschließend werden alle regulären Ausdrücke in der Reihenfolge geprüft, in der sie in der Konfigurationsdatei auftauchen. Beispielsweise wird bei

    <Directory ~ abc$>
    # ... hier die Direktiven ...
    </Directory>

    der Abschnitt mit dem regulären Ausdruck nicht berücksichtigt, bis alle normalen <Directory>-Abschnitte und .htaccess-Dateien angewendet wurden. Dann erst wird der reguläre Ausdruck mit /home/abc/public_html/abc abgeglichen und der entsprechende <Directory>-Abschnitt angewendet.

    Beachten Sie bitte, dass der vom Apache voreingestellte Zugriff für <Directory /> Allow from All ist. Das bedeutet, dass der Apache jede Datei ausliefert, die durch eine URL abgebildet wird. Es wird empfohlen, dass Sie dies durch einen Block wie

    <Directory />
    Order Deny,Allow
    Deny from All
    </Directory>

    ändern und anschließend für Verzeichnisse überschreiben, die Sie verfügbar machen wollen. Für weitere Einzelheiten lesen Sie bitte die Seite zu den Sicherheitshinweisen.

    Die Verzeichnisabschnitte erscheinen in der Datei httpd.conf. <Directory>-Direktiven dürfen nicht ineinander verschachtelt werden oder innerhalb von <Limit>- oder <LimitExcept>-Abschnitten auftauchen.

    Siehe auch

    top

    <DirectoryMatch>-Direktive

    Beschreibung:Umschließt eine Gruppe von Direktiven, die auf Verzeichnisse des Dateisystems und ihre Unterverzeichnisse abgebildet werden, welche auf einen regulären Ausdruck passen
    Syntax:<DirectoryMatch regex> ... </DirectoryMatch>
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core

    <DirectoryMatch> und </DirectoryMatch> werden dazu verwendet, eine Gruppe von Direktiven zusammenzufassen, die nur für das genannte Verzeichnis und dessen Unterverzeichnisse gelten, genauso wie bei <Directory>. Als Argument dient jedoch ein regulärer Ausdruck. Beispielsweise würde

    <DirectoryMatch "^/www/.*/[0-9]{3}">

    auf Verzeichnisse in /www/ passen, die aus drei Zeichen bestehen.

    Siehe auch

    top

    DocumentRoot-Direktive

    Beschreibung:Verzeichnis, welches den Haupt-Dokumentenbaum bildet, der im Web sichtbar ist.
    Syntax:DocumentRoot Verzeichnis
    Voreinstellung:DocumentRoot /usr/local/apache/htdocs
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core

    Die Direktive setzt das Verzeichnis, von dem aus httpd Dateien ausliefert. Sofern nicht eine Direktive wie Alias greift, hängt der Server Pfade aus der angeforderten URL an das Wurzelverzeichnis an, um den Pfad zum Dokument zu bilden. Beispiel:

    DocumentRoot /usr/web

    Damit bezieht sich ein Zugriff auf http://www.my.host.com/index.html auf /usr/web/index.html. Wenn das Verzeichnis nicht absolut angegeben ist, wird es relativ zu ServerRoot betrachtet.

    DocumentRoot sollte ohne einen Schrägstrich am Ende angegeben werden.

    Siehe auch

    top

    <Else>-Direktive

    Beschreibung:Contains directives that apply only if the condition of a previous <If> or <ElseIf> section is not satisfied by a request at runtime
    Syntax:<Else> ... </Else>
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core
    Kompatibilität:Nested conditions are evaluated in 2.4.26 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    Siehe auch

    top

    <ElseIf>-Direktive

    Beschreibung:Contains directives that apply only if a condition is satisfied by a request at runtime while the condition of a previous <If> or <ElseIf> section is not satisfied
    Syntax:<ElseIf expression> ... </ElseIf>
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core
    Kompatibilität:Nested conditions are evaluated in 2.4.26 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    Siehe auch

    top

    EnableMMAP-Direktive

    Beschreibung:Verwende Memory-Mapping, um Dateien während der Auslieferung zu lesen
    Syntax:EnableMMAP On|Off
    Voreinstellung:EnableMMAP On
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Core
    Modul:core

    Die Direktive steuert, ob httpd Memory-Mapping verwenden darf, wenn er während der Auslieferung den Inhalt einer Datei lesen muss. Wenn die Bearbeitung einer Anfrage es erfordert, auf die Daten in einer Datei zuzugreifen -- zum Beispiel bei der Auslieferung einer mittels mod_include serverseitig analysierten Datei --, dann verwendet der Apache standardmäßig Memory-Mapping für diese Datei, sofern das Betriebssystem es unterstützt.

    Memory-Mapping bedeutet zuweilen eine Performanceverbesserung. In einigen Umgebungen ist es jedoch besser, Memory-Mapping zu deaktivieren, um Problemen während des Betriebs vorzubeugen:

    • Bei einigen Multiprozessorsystemen kann Memory-Mapping die Performance von httpd reduzieren.
    • Bei einem per NFS eingebundenen DocumentRoot kann httpd mit einem Speicherzugriffsfehler (Anm.d.Ü.: ein so genannter "segmentation fault") abstürzen, wenn eine Datei gelöscht oder gekürzt wird, während httpd sie im Speicher abbildet.

    Bei Serverkonfigurationen, die für dieses Problem anfällig sind, sollten Sie das Memory-Mapping für auszuliefernde Dateien deaktivieren, indem Sie schreiben:

    EnableMMAP Off

    Bei per NFS eingebundenen Dateien kann diese Funktion explizit für die störenden Dateien deaktiviert werden, indem Sie angeben:

    <Directory "/pfad-zu-den-nfs-dateien"> EnableMMAP Off </Directory>

    top

    EnableSendfile-Direktive

    Beschreibung:Verwende die sendfile-Unterstützung des Kernels, um Dateien an den Client auszuliefern
    Syntax:EnableSendfile On|Off
    Voreinstellung:EnableSendfile On
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Core
    Modul:core
    Kompatibilität:Verfügbar ab Apache Version 2.0.44

    Die Direktive steuert, ob httpd die sendfile-Unterstützung des Kernels verwenden kann, um Dateiinhalte an den Client zu übermitteln. Wenn die Bearbeitung einer Anfrage keinen Zugriff auf die Daten in der Datei erfordert -- zum Beispiel bei der Auslieferung einer statischen Datei -- und das Betriebssystem es unterstützt, verwendet der Apache standardmäßig sendfile, um den Dateiinhalt zu übertragen, ohne die Datei jemals zu lesen.

    Der sendfile-Mechanismus vermeidet getrennte Lese- und Sendeoperationen sowie Puffer-Zuweisungen. Bei einigen Plattformen bzw. Dateisystemen deaktivieren Sie diese Funktion jedoch besser, um Probleme während des Betriebs zu vermeiden:

    • Einige Plattformen besitzen u.U. eine fehlerhafte sendfile-Unterstützung, die das Erstellungssystem nicht erkennt, insbesondere wenn die Binärdateien auf einem anderen Rechner erstellt und auf eine solche Maschine mit fehlerhafter sendfile-Unterstützung übertragen wurden.
    • Bei einem über das Netzwerk eingebundenen DocumentRoot (z.B. NFS oder SMB) ist der Kernel möglicherweise nicht in der Lage, die Netzwerkdatei über seinen eigenen Cache zu bedienen.
    • Unter Linux löst die Verwendung von sendfile in Verbindung mit bestimmten Netzwerkkarten und IPv6 TCP-Checksummenfehler aus.
    • Unter Linux auf Itanium-Systemen kommt sendfile unter Umständen nicht mit Dateien größer als 2GB klar.

    Bei Serverkonfigurationen, die für dieses Problam anfällig sind, sollten die diese Funktion deaktivieren, indem Sie schreiben:

    EnableSendfile Off

    Bei per NFS oder SMB eingebundenen Dateien kann diese Funktion explizit für die störenden Dateien deaktiviert werden, indem Sie angeben:

    <Directory "/pfad-zu-den-nfs-dateien"> EnableSendfile Off </Directory>

    Beachten Sie bitte, dass die verzeichnisbasierte und .htaccess-Konfiguration von EnableSendfile nicht vom mod_cache_disk-Modul unterstützt wird. Nur die globale Konfiguration von EnableSendfile wird vom Modul beachtet.

    top

    Error-Direktive

    Beschreibung:Abort configuration parsing with a custom error message
    Syntax:Error message
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    Status:Core
    Modul:core
    Kompatibilität:2.3.9 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    ErrorDocument-Direktive

    Beschreibung:Das, was der Server im Fehlerfall an den Client zurückgibt
    Syntax:ErrorDocument Fehlercode Dokument
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Core
    Modul:core
    Kompatibilität:Die Syntax der Anführungszeichen bei Textnachrichten hat sich im Apache 2.0 geändert

    Im Falle eines Problems oder Fehlers kann der Apache konfiguriert werden, eine der vier Aktionen auszuführen:

    1. Ausgabe einer einfachen, hartkodierten Fehlermeldung
    2. Ausgabe einer angepassten Meldung
    3. Umleitung zu einem lokalen URL-Pfad der das Problem bzw. den Fehler behandelt
    4. Umleitung zu einer externen URL, die das Problem bzw. den Fehler behandelt

    Die erste Option ist Voreinstellung, während die Optionen 2 bis 4 über die Direktive ErrorDocument eingestellt werden, welcher der HTTP-Statuscode und eine URL oder Nachricht folgen. Abhängig vom Problem bzw. Fehler bietet der Apache manchmal zusätzliche Informationen an.

    URLs können bei lokalen Webpfaden mit einem Schrägstrich (/) beginnen (relativ zum DocumentRoot-Verzeichnis) oder eine vollständige URL bilden, die der Client auflösen kann. Alternativ kann eine Nachricht für die Anzeige im Browser angeboten werden. Beispiel:

    ErrorDocument 500 http://foo.example.com/cgi-bin/tester
    ErrorDocument 404 /cgi-bin/falsche_urls.pl
    ErrorDocument 401 /info_zur_anmeldung.html
    ErrorDocument 403 "Der Zugriff ist nicht erlaubt."

    Außerdem kann der spezielle Wert default angegeben werden, um die schlichte, hartkodierte Nachricht des Apache zu verwenden. Es wird normalerweise nicht benötigt, doch default stellt die einfach, im Apache hartkodierte Meldung in Konfigurationen wieder her, die ansonsten von einem existierenden (Anm.d.Ü.: zuvor konfigurierten) ErrorDocument erben würden.

    ErrorDocument 404 /cgi-bin/bad_urls.pl

    <Directory /web/docs>
    ErrorDocument 404 default
    </Directory>

    Wenn Sie eine ErrorDocument-Anweisung angeben, die auf eine entfernte URL weist (d.h. irgendetwas mit der Methode http davor), beachten Sie bitte, dass der Apache eine Umleitung zum Client sendet, um diesem mitzuteilen, wo das Dokument zu finden ist, auch wenn das Dokument letztlich wieder zum gleichen Server führt. Das hat mehrere Auswirkungen. Die wichtigste ist, dass der Client nicht den Original-Statuscode erhält sondern statt dessen einen Umleitungs-Statuscode. Dies wiederum kann Web-Robots und andere Clients verwirren, die den Statuscode dazu verwenden, herauszufinden ob eine URL gültig ist. Wenn Sie eine entfernte URL in einer Anweisung ErrorDocument 401 verwenden, wird der Client darüber hinaus nicht wissen, dass er den Benutzer zur Eingabe eines Passwortes auffordern muss, da er den Statuscode 401 nicht erhält. Deshalb müssen Sie sich auf ein lokales Dokument beziehen, wenn Sie eine Anweisung ErrorDocument 401 verwenden.

    Der Microsoft Internet Explorer (MSIE) ignoriert standardmäßig serverseitig generierte Fehlermeldungen, wenn sie "zu kurz" sind und ersetzt sie durch eigene "freundliche" Fehlermeldungen. Die Größe variiert abhängig von der Art des Fehlers, im Allgemeinen zeigt der MSIE jedoch den serverseitig generierten Fehler, anstatt ihn zu verstecken, wenn Ihr Fehlerdokument größer als 512 Bytes ist. Weitere Informationen sind im Artikel Q294807 in der Microsoft Knowledgebase verfügbar.

    Obwohl die meisten Fehlermeldungen überschrieben werden können, werden unter bestimmten Umständen die internen Meldungen ungeachtet der Einstellung der ErrorDocument-Direktive verwendet. Insbesondere bei einer fehlerhaften Anfrage werden der normale Bearbeitungsprozess sofort beendet und die interne Meldung zurückgegeben. Das ist notwendig, um Sicherheitsprobleme zu vermeiden, die auf Grund fehlerhafter Anfragen entstehen.

    In Versionen vor 2.0 wurden Meldungen durch ein einzelnes vorangestelltes Anführungszeichen (") erkannt.

    Siehe auch

    top

    ErrorLog-Direktive

    Beschreibung:Ablageort, an dem der Server Fehler protokolliert
    Syntax: ErrorLog Dateiname|syslog[:facility]
    Voreinstellung:ErrorLog logs/error_log (Unix) ErrorLog logs/error.log (Windows and OS/2)
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core

    Die Direktive ErrorLog bestimmt den Namen der Datei, in welcher der Server alle auftretenden Fehler protokolliert. Wenn Dateiname nicht absolut ist, wird er relativ zu ServerRoot betrachtet.

    Beispiel

    ErrorLog /var/log/httpd/error_log

    Wenn der Dateiname mit einem senkrechten Strich (|, engl.: Pipe) beginnt, wird angenommen, dass es sich um einen Befehl handelt, der ausgeführt wird, um das Fehlerprotokolls zu verarbeiten.

    Beispiel

    ErrorLog "|/usr/local/bin/httpd_errors"

    Die Verwendung von syslog anstelle eines Dateinamens aktiviert die Protokollierung mittels syslogd(8), sofern das System es unterstützt. Als Voreinstellung wird der syslog-Typ (syslog facility) local7 verwendet, Sie können dies jedoch auch überschreiben, indem Sie die Syntax syslog:facility verwenden, wobei facility einer der Namen sein kann, die üblicherweise in syslog(1) dokumentiert sind.

    Beispiel

    ErrorLog syslog:user

    SICHERHEITSHINWEIS: Lesen Sie das Dokument Sicherheitshinweise zu Einzelheiten darüber, warum Ihre Sicherheit gefährdet sein kann, wenn das Verzeichnis, in dem die Log-Dateien gespeichert werden, für jemand anderen, als den Benutzer, der den Server gestartet hat, beschreibbar ist.

    Anmerkung

    Bei der Eingabe eines Dateipfads auf nicht-Unix-Plattformen sollte darauf geachtet werden, nur (Vorwärts-)Schrägstriche zu verwenden, auch wenn die Plattform rückwärts gerichtete Schrägstriche (Backslashes) erlaubt. Im Allgemeinen ist es eine gute Idee, innerhalb der Konfigurationsdateien immer Vorwärts-Schrägstriche zu verwenden.

    Siehe auch

    top

    ErrorLogFormat-Direktive

    Beschreibung:Format specification for error log entries
    Syntax: ErrorLogFormat [connection|request] format
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    Siehe auch

    top

    ExtendedStatus-Direktive

    Beschreibung:Keep track of extended status information for each request
    Syntax:ExtendedStatus On|Off
    Voreinstellung:ExtendedStatus Off[*]
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    FileETag-Direktive

    Beschreibung:Dateiattribute, die zur Erstellung des HTTP-Response-Headers ETag verwendet werden
    Syntax:FileETag Komponente ...
    Voreinstellung:FileETag INode MTime Size
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Core
    Modul:core

    Wenn dem Dokument eine Datei zugrundeliegt, bestimmt die Direktive FileETag die Dateiattribute, die zur Erstellung des HTTP-Response-Headers ETag (Entity-Tag) verwendet werden. (Der Wert von ETag wird bei der Cache-Verwaltung zur Einsparung von Netzwerk-Bandbreite benutzt.) Im Apache 1.3.22 und früher wurde der ETag-Wert stets aus der I-Node, der Größe und dem Datum der letzten Änderung (mtime) der Datei gebildet. Die Direktive FileETag erlaubt es Ihnen, zu bestimmen, welche dieser Eigenschaften -- falls überhaupt -- verwendet werden sollen. Die gültigen Schlüsselworte lauten:

    INode
    Die I-Node-Nummer wird in die Berechnung mit einbezogen
    MTime
    Datum und Uhrzeit der letzten Änderung werden mit einbezogen
    Size
    Die Anzahl der Bytes in der Datei wird mit einbezogen
    All
    Alle verfügbaren Angaben werden verwendet. Die ist gleichbedeutend mit:

    FileETag INode MTime Size

    None
    Es wird keine ETag-Angabe in die Antwort eingefügt, wenn dem Dokument eine Datei zugrundeliegt.

    Den Schlüsselwörtern INode, MTime und Size kann entweder ein + oder ein - vorangestellt werden, was die Änderung einer Vorgabe erlaubt, die von einem größeren Umfeld geerbt wurde. Jedes Schlüselwort ohne ein solches Prefix hebt die ererbte Einstellung sofort und vollständig auf.

    Wenn die Konfiguration für ein Verzeichnis FileETag INode MTime Size enthält und die eines Unterverzeichnisses FileETag -INode, dann ist die Einstellung für das Unterverzeichnis (die an jedes Unter-Unterverzeichnis weitervererbt wird, welches dies nicht überschreibt) äquivalent mit FileETag MTime Size.

    top

    <Files>-Direktive

    Beschreibung:Enthält Direktiven, die sich nur auf passende Dateinamen beziehen
    Syntax:<Files Dateiname> ... </Files>
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core

    Die Direktive <Files> begrenzt die Reichweite der enthaltenen Anweisungen auf Dateinamen. Sie ist vergleichbar mit den Direktiven <Directory> und <Location>. Sie muss eine passende </Files>-Anweisung besitzen. Die innerhalb dieses Abschnittes angegebenen Direktiven werden auf jedes Objekt mit einem Basisnamen (letzte Komponente des Dateinamens) angewendet, der auf die angegebenen Dateinamen passt. <Files>-Container werden, nachdem die <Directory>-Container und .htaccess-Dateien gelesen sind, jedoch vor den <Location>-Containern, in der Reihenfolge ihres Auftretens ausgeführt. Beachten Sie, dass <Files>-Anweisungen innerhalb von <Directory>-Containern auftreten können, um den Teil des Dateisystems einzuschränken, den sie betreffen.

    Das Argument Dateiname kann einen Dateinamen oder eine Zeichenkette mit Platzhaltern enthalten, wobei ? auf ein einzelnes Zeichen passt und * auf eine beliebige Folge von Zeichen. Erweiterte reguläre Ausdrücke können ebenfalls verwendet werden, indem das Zeichen ~ hinzugefügt wird. Beispielsweise würde

    <Files ~ "\.(gif|jpe?g|png)$">

    auf die gebräuchlichsten Grafikformate im Internet passen. <FilesMatch> wird jedoch bevorzugt.

    Beachten Sie bitte, dass die <Files>-Container anders als <Directory>- und <Location>-Container innerhalb von .htaccess-Dateien verwendet werden können. Dies erlaubt den Anwendern auf Dateiebene die Kontrolle über ihre eigenen Dateien.

    Siehe auch

    top

    <FilesMatch>-Direktive

    Beschreibung:Enthält Direktiven, die für Dateinamen gelten, die auf einen regulären Ausdruck passen
    Syntax:<FilesMatch regex> ... </FilesMatch>
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core

    Die Direktive <FilesMatch> begrenzt wie die Direktive <Files> die enthaltenen Anweisungen auf Dateinamen. Sie akzeptiert jedoch reguläre Ausdrücke. Beispielsweise würde

    <FilesMatch "\.(gif|jpe?g|png)$">

    auf die gebräuchlichsten Grafikformate im Internet passen.

    Siehe auch

    top

    ForceType-Direktive

    Beschreibung:Erzwingt die Auslieferung aller passendenden Dateien mit dem angegebenen MIME-Content-Type
    Syntax:ForceType MIME-Type|None
    Kontext:Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Core
    Modul:core
    Kompatibilität:Wurde im Apache 2.0 in den Core verschoben

    Wenn sie innerhalb einer .htaccess-Datei, eines <Directory>-, <Location>- <Files>-Containers angegeben wird, erzwingt die Direktive die Auslieferung aller entsprechenden Dateien mit dem Content-Type, der durch MIME-Type definiert wurde. Wenn Sie zum Beispiel ein Verzeichnis voller GIF-Dateien haben, die Sie nicht alle durch .gif kennzeichnen wollen, können Sie angeben:

    ForceType image/gif

    Beachten Sie bitte, dass die Direktive anders als DefaultType alle MIME-Type-Zuordnungen überschreibt, einschließlich Dateiendungen, die einen Medientyp bezeichnen könnten.

    Sie können jede ForceType-Angabe durch die Verwendung des Wertes None überschreiben:

    # erzwinge image/gif für alle Dateien:
    <Location /images>
    ForceType image/gif
    </Location>

    # hier jedoch normale MIME-Type-Zuordnungen:
    <Location /images/mixed>
    ForceType None
    </Location>

    top

    GprofDir-Direktive

    Beschreibung:Directory to write gmon.out profiling data to.
    Syntax:GprofDir /tmp/gprof/|/tmp/gprof/%
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    HostnameLookups-Direktive

    Beschreibung:Aktiviert DNS-Lookups auf Client-IP-Adressen
    Syntax:HostnameLookups On|Off|Double
    Voreinstellung:HostnameLookups Off
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis
    Status:Core
    Modul:core

    Diese Direktive aktiviert die DNS-Abfrage (Anm.d.Ü.: ein sogenannter DNS-Lookup), so dass Hostnamen protokolliert (und in REMOTE_HOST an CGIs/SSIs übergeben) werden könnnen. Der Wert Double bezieht sich auf ein Double-Reverse-DNS-Lookup. D.h. nachdem ein Reverse-Lookup durchgeführt wurde, wird dann auf dem Ergebnis ein Forward-Lookup ausgeführt. Wenigstens eine der IP-Adressen aus dem Forward-Lookup muss der Originaladresse entsprechen. (In der "tcpwrappers"-Terminologie wird dies PARANOID genannt.)

    Unabhängig von der Einstellung wird ein Double-Reverse-Lookup durchgeführt, wenn mod_authz_host zur Zugriffskontrolle per Hostnamen eingesetzt wird. Dies ist aus Sicherheitsgründen notwendig. Beachten Sie, dass das Ergebnis dieses Double-Reverse-Lookups nicht generell verfügbar ist, solange Sie nicht HostnameLookups Double setzen. Wenn beispielsweise nur HostnameLookups On angegeben ist und eine Anfrage für ein Objekt erfolgt, welches durch Hostnamen-Beschränkungen geschützt ist, dann wird CGIs nur das Ergebnis des Singel-Reverse-Lookups in REMOTE_HOST übergeben, egal ob das Doble-Reverse-Lookup fehlschlug oder nicht.

    Die Voreinstellung ist Off, um Netzwerktraffic bei den Angeboten einzusparen, die nicht tatsächlich Reverse-Lookups benötigen. Es ist auch für die Endanwender besser, da sie nicht die zusätzliche Wartezeit ertragen müssen, die ein Lookup mit sich bringt. Hoch frequentierte Angebote sollten diese Direktive auf Offlassen. Das Hilfsprogramm logresolve, das standardmäßig in das Unterverzeichnis bin Ihres Installationsverzeichnisses kompiliert wird, kann dazu verwendet werden, um offline Hostnamen von protokollierten IP-Adressen nachzuschlagen.

    top

    HttpProtocolOptions-Direktive

    Beschreibung:Modify restrictions on HTTP Request Messages
    Syntax:HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0]
    Voreinstellung:HttpProtocolOptions Strict LenientMethods Allow0.9
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core
    Kompatibilität:2.2.32 or 2.4.24 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    <If>-Direktive

    Beschreibung:Contains directives that apply only if a condition is satisfied by a request at runtime
    Syntax:<If expression> ... </If>
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core
    Kompatibilität:Nested conditions are evaluated in 2.4.26 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    Siehe auch

    top

    <IfDefine>-Direktive

    Beschreibung:Schließt Direktiven ein, die nur ausgeführt werden, wenn eine Testbedingung beim Start wahr ist
    Syntax:<IfDefine [!]Parametername> ... </IfDefine>
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core

    Der Container <IfDefine Test>...</IfDefine> wird dazu verwendet, Direktiven als bedingt zu kennzeichnen. Die Direktiven innerhalb eines <IfDefine>-Abschnittes werden nur ausgeführt, wenn Test wahr ist. Ist Test falsch, wird alles zwischen der Start- und Endemarkierung ignoriert.

    In der <IfDefine>-Anweisung kann Test eine von zwei Formen annehmen:

    • Parametername
    • !Parametername

    Im ersten Fall werden die Direktiven zwischen der Start- und Endemarkierung nur ausgeführt, wenn der Parameter namens Parametername definiert ist. Die zweite Form kehrt den Test um und führt die Direktiven nur dann aus, wenn Parametername nicht definiert ist.

    Das Argument Parametername ist ein sogenanntes "Define", das beim beim Start des Servers in der httpd-Befehlszeile durch -DParameter angegeben wird.

    <IfDefine>-Container können ineinander verschachtelt werden, um einfache Multi-Parameter-Tests zu implementieren. Beispiel:

    httpd -DReverseProxy ...

    # httpd.conf
    <IfDefine ReverseProxy>
    LoadModule rewrite_module modules/mod_rewrite.so
    LoadModule proxy_module modules/libproxy.so
    </IfDefine>

    top

    <IfDirective>-Direktive

    Beschreibung:Encloses directives that are processed conditional on the presence or absence of a specific directive
    Syntax:<IfDirective [!]directive-name> ... </IfDirective>
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core
    Kompatibilität:Available in 2.4.34 and later.

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    Siehe auch

    top

    <IfFile>-Direktive

    Beschreibung:Encloses directives that will be processed only if file exists at startup
    Syntax:<IfFile [!]filename> ... </IfFile>
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core
    Kompatibilität:Available in 2.4.34 and later.

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    <IfModule>-Direktive

    Beschreibung:Schließt Direktiven ein, die abhängig vom Vorhandensein oder Fehlen eines speziellen Moduls ausgeführt werden
    Syntax:<IfModule [!]Modulname|Modulbezeichner> ... </IfModule>
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core
    Kompatibilität:Modulbezeichner sind ab Version 2.1 verfügbar.

    Der Container <IfModule Test>...</IfModule> wird dazu verwendet, Direktiven als abhängig von dem Vorhandensein eines speziellen Moduls zu kennzeichnen. Die Direktiven innerhalb eines <IfModule>-Abschnitts werden nur ausgeführt, wenn Test wahr ist. Ist Test falsch, wird alles zwischen der Start- und Endemarkierung ignoriert.

    In der <IfModule>-Anweisung kann Test eine von zwei Formen annehmen:

    • Modul
    • !Modul

    Im ersten Fall werden die Direktiven zwischen der Start- und Endemarkierung nur ausgeführt, das Modul namens Modul im Apache enthalten ist -- entweder einkompiliert oder mittels LoadModule dynamisch geladen. Die zweite Form dreht den Test um und führt die Direktiven nur aus, wenn Modul nicht enthalten ist.

    Das Argument Modul kann entweder der Modulbezeichner oder der Dateiname des Moduls zum Zeitpunkt seiner Kompilierung sein. rewrite_module beispielsweise ist der Bezeichner und mod_rewrite.c ist der Dateiname. Wenn ein Modul aus mehreren Quelltext-Dateien besteht, verwenden Sie den Namen der Datei, welche die Zeichenfolge STANDARD20_MODULE_STUFF enthält.

    <IfModule>-Container können inneinander verschachtelt werden, um einfache Multi-Modul-Tests durchzuführen.

    Dieser Container sollte verwendet werden, wenn Sie eine Konfigurationsdatei benötigen, die unabhängig davon funktioniert, ob ein bestimmtes Modul verfügbar ist oder nicht. Normalerweise ist es nicht notwendig, Direktiven in <IfModule>-Containern unterzubringen.

    top

    <IfSection>-Direktive

    Beschreibung:Encloses directives that are processed conditional on the presence or absence of a specific section directive
    Syntax:<IfSection [!]section-name> ... </IfSection>
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core
    Kompatibilität:Available in 2.4.34 and later.

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    Siehe auch

    top

    Include-Direktive

    Beschreibung:Fügt andere Konfigurationsdateien innerhalb der Server-Konfigurationsdatei ein
    Syntax:Include Dateiname|Verzeichnis
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis
    Status:Core
    Modul:core
    Kompatibilität:Die Platzhalter-Suche ist verfügbar seit 2.0.41

    Die Direktive erlaubt das Einfügen anderer Konfigurationsdateien in die Konfigurationsdatei des Servers.

    Shell-typische (fnmatch()) Platzhlaterzeichen können dazu verwendet werden, mehrere Dateien auf einmal in alphabetischer Reihenfolge einzufügen. Wenn Include darüber hinaus auf ein Verzeichnis anstatt auf eine Datei zeigt, liest der Apache alle Dateien in diesem Verzeichnis und allen Unterverzeichnissen ein. Das Einfügen ganzer Verzeichnisse ist jedoch nicht empfehlenswert, da temporäre Dateien sehr leicht versehentlich in einem Verzeichnis zurückgelassen werden, was httpd scheitern lassen kann.

    Der angegebene Dateiname kann ein absoluter Pfad sein oder relativ zum ServerRoot-Verzeichnis angegeben werden.

    Beispiele:

    Include /usr/local/apache2/conf/ssl.conf
    Include /usr/local/apache2/conf/vhosts/*.conf

    Oder Sie geben Pfade relativ zu Ihrem ServerRoot-Verzeichnis an:

    Include conf/ssl.conf
    Include conf/vhosts/*.conf

    Der Aufruf von apachectl configtest liefert eine Liste der Dateien, die während des Konfigurations-Tests verarbeitet werden:

    root@host# apachectl configtest
    Processing config file: /usr/local/apache2/conf/ssl.conf
    Processing config file: /usr/local/apache2/conf/vhosts/vhost1.conf
    Processing config file: /usr/local/apache2/conf/vhosts/vhost2.conf
    Syntax OK

    Siehe auch

    top

    IncludeOptional-Direktive

    Beschreibung:Includes other configuration files from within the server configuration files
    Syntax:IncludeOptional file-path|directory-path|wildcard
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis
    Status:Core
    Modul:core
    Kompatibilität:Available in 2.3.6 and later. Not existent file paths without wildcards do not cause SyntaxError after 2.4.30

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    Siehe auch

    top

    KeepAlive-Direktive

    Beschreibung:Aktiviert persistente HTTP-Verbindungen
    Syntax:KeepAlive On|Off
    Voreinstellung:KeepAlive On
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core

    Die Keep-Alive-Erweiterung von HTTP/1.0 und die HTTP/1.1-Funktionalität persistenter Verbindungen unterstützt langlebige HTTP-Sitzungen, die es erlauben, mehrere Anfragen über die gleich TCP-Verbindung zu senden. In einigen Fällen wurde eine Beschleunigung der Wartezeiten von beinahe 50% für HTML-Dokumente mit vielen Bildern festgestellt. Um Keep-Alive-Verbindungen zu aktivieren, setzen Sie KeepAlive On.

    Bei HTTP/1.0-Clients werden Keep-Alive-Verbindungen nur dann verwendet, wenn sie vom Client eigens angefordert werden. Desweiteren können Keep-Alive-Verbindungen bei einem HTTP/1.0-Client nur dann verwendet werden, wenn die Länge des Inhalts im Voraus bekannt ist. Dies impliziert, dass dynamische Inhalte wie CGI-Ausgaben, SSI-Seiten und servergenerierte Verzeichnisauflistungen im Allgemeinen keine Keep-Alive-Verbindungen mit HTTP/1.0-Clients verwenden. Bei HTTP/1.1-Clients sind Keep-Alive-Verbindungen Voreinstellung, solange nichts anderes angegeben ist. Wenn der Client es anfordert, wird Chunked-Encoding verwendet, um Inhalte mit unbekannter Länge über persistente Verbindungen zu senden.

    Siehe auch

    top

    KeepAliveTimeout-Direktive

    Beschreibung:Zeitspanne, die der Server während persistenter Verbindungen auf nachfolgende Anfragen wartet
    Syntax:KeepAliveTimeout Sekunden
    Voreinstellung:KeepAliveTimeout 5
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core

    Dies legt die Anzahl der Sekunden fest, die der Apache auf weitere Anfragen wartet, bevor er die Verbindung schließt. Nachdem einmal eine Anfrage entgegen genommen wurde, wird die durch die Direktive Timeout festgelegte Auszeit angewendet.

    Auf stark belasteten Servern kann ein hoher KeepAliveTimeout-Wert zu Durchsatzminderungen führen. Je höher die Auszeit angegeben ist, desto länger ist der Apache damit beschäftigt, auf untätige Clients zu warten.

    top

    <Limit>-Direktive

    Beschreibung:Beschränkt die eingeschlossenen Zugriffskontrollen auf bestimmte HTTP-Methoden
    Syntax:<Limit Methode [Methode] ... > ... </Limit>
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core

    Zugriffskontrollen gelten normalerweise für alle Zugriffsmethoden, was normalerweise auch das gewünschte Verhalten ist. Im Allgemeinen sollten Zugriffskontrollen nicht in einen <Limit>-Container gepackt werden.

    Der Sinn der Direktive <Limit> ist es, den Effekt der Zugriffskontrollen auf die angegebenen HTTP-Methoden zu beschränken. Bei allen anderen Methoden haben die in der <Limit>-Gruppe enthaltenen Zugriffsbeschränkungen keine Wirkung. Im folgenden Beispiel gilt die Zugriffskontrolle nur für die Methoden POST, PUT und DELETE. Alle anderen Methoden bleiben ungeschützt:

    <Limit POST PUT DELETE>
    Require valid-user
    </Limit>

    Sie können eine oder mehrere der folgenden Methoden angeben: GET, POST, PUT, DELETE, CONNECT, OPTIONS, PATCH, PROPFIND, PROPPATCH, MKCOL, COPY, MOVE, LOCK und UNLOCK. Die Methodennamen unterscheiden zwischen Groß- und Kleinschreibung. Wenn GET verwendet wird, sind HEAD-Anfragen ebenfalls eingeschränkt. Die TRACE-Methode kann nicht limitiert werden.

    Wenn es um Zugriffsbeschränkungen geht, sollte ein <LimitExcept>-Container sollte immer einem <Limit>-Container vorgezogen werden, da <LimitExcept> einen Schutz gegen beliebige Methoden bietet.
    top

    <LimitExcept>-Direktive

    Beschreibung:Beschränkt Zugriffskontrollen auf alle HTTP-Methoden außer den genannten
    Syntax:<LimitExcept Methode [Methode] ... > ... </LimitExcept>
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core

    <LimitExcept> und </LimitExcept> werden dazu verwendet, eine Gruppe von Anweisungen zur Zugriffskontrolle zusammenzufassen, die dann auf jede HTTP-Methode angewendet werden, die nicht als Argument angegeben ist. D.h. dies ist das Gegenteil des <Limit>-Containers und kann zur Steuerung von Standard- und nicht-Standard-/unbekannten Methoden verwendet werden. Für weitere Einzelheiten lesen Sie bitte die Beschreibung zu <Limit>.

    Beispiel:

    <LimitExcept POST GET>
    Require valid-user
    </LimitExcept>

    top

    LimitInternalRecursion-Direktive

    Beschreibung:Bestimmt die maximale Anzahl interner Umleitungen und verschachtelter Unteranfragen
    Syntax:LimitInternalRecursion Zahl [Zahl]
    Voreinstellung:LimitInternalRecursion 10
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core
    Kompatibilität:Verfügbar ab Apache 2.0.47

    Eine interne Umleitung erfolgt beispielsweise, wenn die Direktive Action verwendet wird, welche die Originalanfrage intern zu einem CGI-Skript weiterleitet. Eine Unteranfrage (Anm.d.Ü.: engl. Subrequest) ist ein Mechanismus des Apache, um herauszufinden, was bei einer URI geschehen würde, wäre sie angefordert worden. mod_dir z.B. verwendet Unteranfragen, um nach den Dateien zu suchen, die in der DirectoryIndex-Anweisung aufgeführt sind.

    LimitInternalRecursion bewahrt den Server vor einem Absturz, wenn er in eine Endlosschleife aus internen Umleitungen oder Unteranfragen hineinläuft. Derartige Schleifen werden gewöhnlich durch Fehlkonfiguration verursacht.

    Die Direktive setzt zwei verschiedene Begrenzungen, welche je Anfrage ausgewertet werden. Die erste Zahl bestimmt die maximale Anzahl der Umleitungen, die aufeinander folgen dürfen. Die zweite Zahl legt fest, wie tief Unteranfragen ineinander verschachtelt werden dürfen. Wenn Sie lediglich eine Zahl angeben, wird sie beiden Begrenzungen zugewiesen.

    Beispiel

    LimitInternalRecursion 5

    top

    LimitRequestBody-Direktive

    Beschreibung:Begrenzt die Gesamtgröße des vom Client gesendeten HTTP-Request-Body
    Syntax:LimitRequestBody Bytes
    Voreinstellung:LimitRequestBody 0
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core

    Die Direktive gibt die Anzahl der Bytes zwischen 0 (unbegrenzt) und 2147483647 (2GB) an, die im Request-Body (Datenteil der Anfrage) erlaubt sind.

    Die Direktive LimitRequestBody erlaubt es dem Benutzer, die Größe des HTTP-Request-Bodys in dem Kontext zu begrenzen, in dem die Anweisung angegeben ist (Server, pro Verzeichnis, pro Datei oder pro Adresse). Wenn die Anfrage des Clients dieses Limit überschreitet, gibt der Server einen Fehler zurück anstatt die Anfrage zu bearbeiten. Die Größe des Datenteils einer Anfrage kann sehr stark variieren, abhängig von der Art der Ressource und den für diese Ressource erlaubten Methoden. CGI-Skripte verwenden den Datenteil üblicherweise zum Empfang von Formulardaten. Wird die PUT-Methode angewendet, dann muss der Wert mindestens so groß sein wie irgendeine Darstellungsform, die der Server für diese Ressource akzeptieren soll.

    Die Direktive gibt dem Serveradministrator eine größere Kontrolle gegenüber abnormalem Verhalten von Clients, was bei der Vermeidung einiger Formen von Denial-of-Service-Attacken hilfreich sein kann.

    Wenn Sie beispielsweise das Hochladen von Dateien zu einer bestimmten Adresse erlauben, aber die Größe der hochgeladenen Dateien auf 100K beschränken wollen, können Sie die folgende Anweisung verwenden:

    LimitRequestBody 102400

    top

    LimitRequestFields-Direktive

    Beschreibung:Begrenzt die Anzahl der HTTP-Request-Header, die vom Client entgegengenommen werden
    Syntax:LimitRequestFields Anzahl
    Voreinstellung:LimitRequestFields 100
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core

    Anzahl ist ein Integer-Wert (eine positive Ganzzahl) zwischen 0 (unbegrenzt) und 32767. Die Voreinstellung wird durch die Konstante DEFAULT_LIMIT_REQUEST_FIELDS (100 bei der Auslieferung) zur Kompilierungszeit gesetzt.

    Die Direktive LimitRequestFields erlaubt es dem Serveradministrator, die maximale Anzahl der in einem HTTP-Request erlaubten HTTP-Request-Header zu verändern. Für den Server muss dieser Wert größer sein als die Anzahl der Headerzeilen, die ein normaler Client senden könnte. Die Anzahl der Request-Header, die ein gewöhnlicher Client verwendet, überschreitet selten 20 Zeilen. Allerdings kann dies zwischen den verschiedenen Client-Ausführungen variieren, oft abhängig vom Ausmaß, mit dem der Anwender die genaue Content-Negotiation-Unterstützung seines Browsers konfiguriert hat. Optionale HTTP-Erweiterungen äußern sich oft in Form von HTTP-Headern.

    Die Direktive gibt dem Serveradministrator eine größere Kontrolle gegenüber abnormalem Verhalten von Clients, was bei der Vermeidung einiger Formen von Denial-of-Service-Attacken hilfreich sein kann. Der Wert sollte erhöht werden, wenn normale Clients eine Fehlermeldung vom Server erhalten, die besagt, dass mit der Anfrage zu viele Headerzeilen gesendet wurden.

    Beispiel:

    LimitRequestFields 50

    top

    LimitRequestFieldSize-Direktive

    Beschreibung:Begrenzt die Länge des vom Client gesendeten HTTP-Request-Headers
    Syntax:LimitRequestFieldsize Bytes
    Voreinstellung:LimitRequestFieldsize 8190
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core

    Die Direktive gibt die Anzahl der Bytes an, die in einem HTTP-Header erlaubt sind.

    Die Direktive LimitRequestFieldsize erlaubt es dem Serveradministrator, die maximale Größe eines HTTP-Request-Headers zu verringern oder erhöhen. Für den Server muss der Wert groß genug sein, um eine beliebige Headerzeile einer normalen Client-Anfrage vorzuhalten. Die Größe variiert stark zwischen den verschiedenen Client-Ausführungen, oft abhängig vom Ausmaß, mit dem der Anwender die genaue Content-Negotiation-Unterstützung seines Browsers konfiguriert hat. SPNEGO-Authentisierungs-Header können bis zu 12392 Bytes lang sein.

    Die Direktive gibt dem Serveradministrator eine größere Kontrolle gegenüber abnormalem Verhalten von Clients, was bei der Vermeidung einiger Formen von Denial-of-Service-Attacken hilfreich sein kann.

    Beispiel:

    LimitRequestFieldSize 4094

    Unter normalen Umständen sollte die Voreinstellung nicht verändert werden.
    top

    LimitRequestLine-Direktive

    Beschreibung:Begrenzt die Länge der vom Client entgegengenommenen HTTP-Anfragezeile
    Syntax:LimitRequestLine Bytes
    Voreinstellung:LimitRequestLine 8190
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core

    Die Direktive legt die Anzahl der Bytes fest, die in der HTTP-Anfragezeile erlaubt sind.

    Die Direktive LimitRequestLine erlaubt es dem Serveradministrator, die maximale Größe der HTTP-Anfragezeile zu verringern oder erhöhen. Da die Anfragezeile aus der HTTP-Methode, der URI und der Protokollversion besteht, bedeutet die LimitRequestLine-Direktive eine Beschränkung der Länge der für eine Anfrage an den Server erlaubten Anfrage-URI. Für den Server muss der Wert groß genug sein, um jeden seiner Ressourcennamen vorzuhalten, einschließlich aller Informationen, die im Query-String einer GET-Anfrage übergeben werden können.

    Die Direktive gibt dem Serveradministrator eine größere Kontrolle gegenüber abnormalem Verhalten von Clients, was bei der Vermeidung einiger Formen von Denial-of-Service-Attacken hilfreich sein kann.

    Beispiel:

    LimitRequestLine 4094

    Unter normalen Umständen sollte die Voreinstellung nicht verändert werden.
    top

    LimitXMLRequestBody-Direktive

    Beschreibung:Begrenzt die Größe eines XML-basierten Request-Bodys
    Syntax:LimitXMLRequestBody Bytes
    Voreinstellung:LimitXMLRequestBody 1000000
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core

    Dies gibt die Grenze für die maximale Größe (in Bytes) des XML-basierten Request-Bodys an. Der Wert 0 deaktiviert diese Prüfung.

    Beispiel:

    LimitXMLRequestBody 0

    top

    <Location>-Direktive

    Beschreibung:Wendet die enthaltenen Direktiven nur auf die entsprechenden URLs an
    Syntax:<Location URL-Pfad|URL> ... </Location>
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core

    Die Direktive <Location> begrenzt die Reichweite der enthaltenen Anweisungen auf URLs. Sie ist der Direktive <Directory> ähnlich und startet einen Abschnitt, der mit der Anweisung </Location> abgeschlossen wird. <Location>-Container werden, nachdem die <Directory>-Container und .htaccess-Dateien gelesen wurden, und nach den <Files>-Containern, in der Reihenfolge ausgeführt, in der sie in der Konfigurationsdatei erscheinen.

    <Location>-Abschnitte operieren vollständig außerhalb des Dateisystems. Dies hat mehrere Konsequenzen. An Wichtigsten, <Location>-Anweisungen sollten nicht dafür verwendet werden, den Zugriff zu Teilen des Dateisystems zu steuern. Da mehrere unterschiedliche URLs auf die gleiche Stelle des Dateisystems zeigen können, könnte eine solche Zugriffskontrolle u.U. umgangen werden.

    Wann sollte<Location> verwendet werden

    Verwenden Sie <Location>, um Anweisungen auf Inhalte anzuwenden, die außerhalb des Dateisystems abgelegt sind. Benutzen Sie <Directory> und <Files> für Inhalte, die innerhalb des Dateisystems abgelegt sind. Eine Ausnahme bildet <Location />, welches ein einfacher Weg ist, um eine Konfiguration auf den gesamten Server anzuwenden.

    Für alle nicht-Proxy-Anfragen ist die entsprechende URL ein URL-Pfad in der Form /path/. Es dürfen weder ein Schema, noch ein Hostname, noch ein Port, noch ein Query-String einbezogen werden. Für Proxy-Anfragen hat die Vergleichs-URL die Form schema://servername/path. Das Präfix muss angegeben werden.

    Die URL kann Platzhalter verwenden. In einer Zeichenfolge mit Platzhaltern entspricht ? einem einzelnen Zeichen und *einer beliebigen Zeichenfolge.

    Erweiterte reguläre Ausdrücke können ebenfalls verwendet werden, indem das Zeichen ~ hinzugefügt wird. Beispielsweise würde

    <Location ~ "/(extra|special)/data">

    auf URLs passen, welche die Zeichenfolge /extra/data oder /special/data enthalten. Die Direktive <LocationMatch> verhält sich genauso wie <Location> mit regulären Ausdrücken.

    Die Funktionalität von <Location> ist insbesondere dann nützlich, wenn sie mit der SetHandler-Direktive kombiniert wird. Um zum Beispiel Statusabfragen zu aktivieren, sie aber nur von Browsern aus foo.com zuzulassen, könnten Sie schreiben:

    <Location /status>
    SetHandler server-status
    Order Deny,Allow
    Deny from all
    Allow from .foo.com
    </Location>

    Anmerkung zu / (Schrägstrich, Slash)

    Das Slash-Zeichen hat eine besondere Bedeutung, je nachdem, wo es in der URL erscheint. Manche werden sein Verhalten vom Dateisystem gewohnt sein, wo mehrere aufeinanderfolgende Schrägstriche häufig zu einem Schrägstrich zusammengefaßt werden (d.h. /home///foo ist das gleiche wie /home/foo). Im URL-Raum ist dies nicht notwendigerweise genauso. Bei der Direktive <LocationMatch> und der <Location>-Version mit regulären Ausdrücken müssen Sie explizit mehrere Schrägstriche angeben, wenn Sie genau dies beabsichtigen.

    Beispielsweise würde <LocationMatch ^/abc> auf die angeforderte URL /abc passen, nicht aber auf //abc. Die Direktive <Location> (ohne reguläre Ausdrücke) verhält sich ähnlich, wenn sie für Proxy-Anfragen verwendet wird. Wenn <Location> (ohne reguläre Ausdrücke) jedoch für nicht-Proxy-Anfragen verwendet wird, werden stillscheigend mehrere Schrächstriche mit mit einem einzigen Schrägstrich gleichgesetzt. Geben Sie beispielsweise <Location /abc/def> an und die Anfrage lautet auf /abc//def, dann greift die Anweisung.

    Siehe auch

    top

    <LocationMatch>-Direktive

    Beschreibung:Wendet die enthaltenen Direktiven nur auf URLs an, die auf reguläre Ausdrücke passen
    Syntax:<LocationMatch regex> ... </LocationMatch>
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core

    Die Direktive <LocationMatch> begrenzt die Reichweite der enthaltenen Anweisungen in der gleichen Weise wie <Location> auf URLs. Sie verwendet jedoch reguläre Ausdrücke als Argument anstelle einer einfachen Zeichenkette. Beispielsweise würde

    <LocationMatch "/(extra|special)/data">

    auf URLs passen, welche die Zeichenfolge /extra/data oder /special/data enthalten.

    Siehe auch

    top

    LogLevel-Direktive

    Beschreibung:Steuert die Ausführlichkeit des Fehlerprotokolls
    Syntax:LogLevel Level
    Voreinstellung:LogLevel warn
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core

    LogLevel stellt die Ausführlichkeit der Nachrichten ein, die im Fehlerprotokoll aufgezeichnet werden (siehe Direktive ErrorLog). Die folgenden, nach absteigender Aussagekraft sortierten Level sind verfügbar:

    Level Beschreibung Beispiel
    emerg Notfall - das System ist unbenutzbar. "Child cannot open lock file. Exiting" (Anm.d.Ü.: "Kindprozess kann die Lock-Datei nicht öffnen. Beende Programm")
    alert Maßnahmen müssen unverzüglich ergriffen werden. "getpwuid: couldn't determine user name from uid" (Anm.d.Ü.: "getpwuid: kann keinen Benutzernamen aus der UID ermitteln")
    crit Kritischer Zustand. "socket: Failed to get a socket, exiting child" (Anm.d.Ü.: "socket: Socket-Zuweisung fehlgeschlagen, beende Kindprozess")
    error Fehlerbedingung. "Premature end of script headers" (Anm.d.Ü.: "Vorzeitiges Ende der Skript-Header")
    warn Warnung. "child process 1234 did not exit, sending another SIGHUP" (Anm.d.Ü.: "Kindprozess 1234 nicht beendet, sende ein weiteres SIGHUP")
    notice Normaler, aber signifikanter Zustand. "httpd: caught SIGBUS, attempting to dump core in ..." (Anm.d.Ü.: "httpd: SIGBUS empfangen, versuche Speicherabbild nach ... zu schreiben")
    info Information. "Server seems busy, (you may need to increase StartServers, or Min/MaxSpareServers)..." (Anm.d.Ü.: "Server scheint beschäftigt zu sein, (möglicherweise müssen Sie StartServers oder Min/MaxSpareServers erhöhen)")
    debug Debug-Level-Nachrichten "Opening config file ..." (Anm.d.Ü.: "Öffne Konfigurationsdatei ...")

    Geben Sie einen bestimmten Level an, denn werden Nachrichten von allen höheren Leveln ebenso angezeigt. Z.B.: Wenn LogLevel info eingestellt ist, dann werden Nachrichten der Log-Level notice und warn ebenso eingetragen.

    Es wird empfohlen, mindestens den Level crit zu verwenden.

    Beispiel:

    LogLevel notice

    Hinweis

    Beim Protokollieren in eine reguläre Datei können Nachrichten des Levels notice nicht unterdrückt werden und werden daher immer protokolliert. Dies trifft allerdings nicht zu, wenn mittels syslog protokolliert wird.

    top

    MaxKeepAliveRequests-Direktive

    Beschreibung:Anzahl der Anfragen, die bei einer persistenten Verbindung zulässig sind
    Syntax:MaxKeepAliveRequests Anzahl
    Voreinstellung:MaxKeepAliveRequests 100
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core

    Die Direktive MaxKeepAliveRequests begrenzt die Anzahl der Anfragen, die pro Verbindung zulässig sind, wenn KeepAlive eingeschaltet ist. Bei der Einstellung 0 sind unbegrenzt viele Anfragen erlaubt. Wir empfehlen für diese Einstellung einen hohen Wert für eine maximale Serverleistung.

    Beispiel:

    MaxKeepAliveRequests 500

    top

    MaxRangeOverlaps-Direktive

    Beschreibung:Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    Syntax:MaxRangeOverlaps default | unlimited | none | number-of-ranges
    Voreinstellung:MaxRangeOverlaps 20
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis
    Status:Core
    Modul:core
    Kompatibilität:Available in Apache HTTP Server 2.3.15 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    MaxRangeReversals-Direktive

    Beschreibung:Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    Syntax:MaxRangeReversals default | unlimited | none | number-of-ranges
    Voreinstellung:MaxRangeReversals 20
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis
    Status:Core
    Modul:core
    Kompatibilität:Available in Apache HTTP Server 2.3.15 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    MaxRanges-Direktive

    Beschreibung:Number of ranges allowed before returning the complete resource
    Syntax:MaxRanges default | unlimited | none | number-of-ranges
    Voreinstellung:MaxRanges 200
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis
    Status:Core
    Modul:core
    Kompatibilität:Available in Apache HTTP Server 2.3.15 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    MergeSlashes-Direktive

    Beschreibung:Controls whether the server merges consecutive slashes in URLs.
    Syntax:MergeSlashes ON|OFF
    Voreinstellung:MergeSlashes ON
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core
    Kompatibilität:Added in 2.4.39

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    MergeTrailers-Direktive

    Beschreibung:Determines whether trailers are merged into headers
    Syntax:MergeTrailers [on|off]
    Voreinstellung:MergeTrailers off
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core
    Kompatibilität:2.4.11 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    Mutex-Direktive

    Beschreibung:Configures mutex mechanism and lock file directory for all or specified mutexes
    Syntax:Mutex mechanism [default|mutex-name] ... [OmitPID]
    Voreinstellung:Mutex default
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core
    Kompatibilität:Available in Apache HTTP Server 2.3.4 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    NameVirtualHost-Direktive

    Beschreibung:Bestimmt eine IP-Adresse für den Betrieb namensbasierter virtueller Hosts
    Syntax:NameVirtualHost Adresse[:Port]
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core

    Die Direktive NameVirtualHost ist erforderlich, wenn Sie namensbasierte virtuelle Hosts konfigurieren möchten.

    Obwohl Adresse eine Hostname sein kann, wird empfohlen, dass Sie stets eine IP-Adresse verwenden, z.B.:

    NameVirtualHost 111.22.33.44

    Mit der NameVirtualHost-Anweisung geben Sie die IP-Adresse an, unter der der Server Anfragen für namensbasierte virtuelle Hosts entgegennimmt. Das ist üblicherweise die Adresse, zu der die Namen Ihrer namensbasierten virtuellen Hosts aufgelöst werden. Falls eine Firewall oder ein anderer Proxy die Anfrage in Empfang nimmt und Sie zu einer weiteren IP-Adresse des Servers weiterleitet, müssen Sie die IP-Adresse der physikalischen Schnittstelle der Maschine angeben, welche die Anfragen bedient. Wenn Sie mehrere namensbasierte Hosts an verschiedenen Adressen betreiben, wiederholen Sie einfach die Anweisung für jede Adresse.

    Anmerkung

    Beachten Sie, dass der "Hauptserver" und jeder _default_-Server niemals bei einer Anfrage an einer NameVirtualHost-IP-Adresse bedient wird (es sei denn, Sie geben aus irgendwelchen Gründen NameVirtualHost an, definieren dann aber keine VirtualHosts für diese Adresse).

    Optional können Sie die Nummer eines Ports angeben, an dem namensbasierte virtuelle Hosts verwendet werden sollen. Beispiel:

    NameVirtualHost 111.22.33.44:8080

    IPv6-Adressen müssen, wie im folgenden Beispiel angegeben, in eckige Klammern eingeschlossen werden:

    NameVirtualHost [2001:db8::a00:20ff:fea7:ccea]:8080

    Um an allen Schnittstellen Anfragen zu empfangen, können Sie * als Argument verwenden.

    NameVirtualHost *

    Argument der Direktive <VirtualHost>

    Beachten Sie, dass das Argument der <VirtualHost>-Anweisung exakt auf das Argument der NameVirtualHost-Anweisung passen muss.

    NameVirtualHost 1.2.3.4
    <VirtualHost 1.2.3.4>
    # ...
    </VirtualHost>

    Siehe auch

    top

    Options-Direktive

    Beschreibung:Definiert, welche Eigenschaften oder Funktionen in einem bestimmten Verzeichnis verfügbar sind
    Syntax:Options [+|-]Option [[+|-]Option] ...
    Voreinstellung:Options All
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:Options
    Status:Core
    Modul:core

    Die Direktive Options steuert, welche Eigenschaften bzw. Funktionen in einem bestimmten Verzeichnis verfügbar sind.

    Option kann auf None gesetzt werden, wobei keine der besonderen Eigenschaften verfügbar sind, oder auf eines oder mehrere der folgenden:

    All
    Alle Optionen außer MultiViews. Dies ist die Voreinstellung.
    ExecCGI
    Die Ausführung von CGI-Skripten, welche mod_cgi verwenden, ist erlaubt.
    FollowSymLinks
    Der Server folgt symbolischen Links in diesem Verzeichnis.

    Auch wenn der Server symbolischen Links folgt, bedeutet dies nicht, dass der zum Abgleich gegen <Directory>-Abschnitte verwendete Pfadname wechselt.

    Beachten Sie auch, dass diese Option innerhalb eines <Location>-Abschnitts ignoriert wird.

    Includes
    Server Side Includes, die von mod_include bereitgestellt werden, sind erlaubt.
    IncludesNOEXEC
    Server Side Includes sind erlaubt, #exec cmd und #exec cgi sind jedoch deaktiviert. Es ist aber noch möglich, CGI-Skripte aus ScriptAlias-Verzeichnissen mittels #include virtual einzubinden.
    Indexes
    Wenn eine URL, die auf ein Verzeichnis zeigt, in dem sich keine durch DirectoryIndex definierte Indexdatei (z.B. index.html) befindet, dann liefert mod_autoindex eine formatierte Auflistung des Verzeichnisses zurück.
    MultiViews
    "MultiViews" sind bei der Verwendung von mod_negotiation erlaubt (siehe Content-Negotiation).
    SymLinksIfOwnerMatch
    Der Server folgt nur symbolischen Links, bei denen die Zieldatei bzw. das Zielverzeichnis der gleichen Benutzerkennung gehört, wie der Link.

    Anmerkung

    Diese Option wird innerhalb eines <Location>-Abschnitts ignoriert.

    Wenn mehrere Options auf ein Verzeichnis angewandt werden können, dann wird normalerweise die spezifischste (Anm.d.Ü.: Gemeint ist die zuletzt ausgeführte Option.) verwendet und alle anderen werden ignoriert; die Optionen werden nicht vermischt. (Siehe auch Wie Abschnitte zusammengeführt werden..) Wenn jedoch allen Optionen der Options-Anweisung eines der Zeichen + oder - vorangestellt wird, werden die Optionen zusammengemischt. Jede Option mit vorangestelltem + wird zu den momentan gültigen Optionen hinzugefügt und jede Option mit vorangestelltem - wird aus den derzeit gültigen Optionen entfernt.

    Warnung

    Die Vermischung von Optionen mit + oder - mit Optionen ohne diese (Zeichen) ist keine gültige Syntax und führt mit hoher Wahrscheinlichkeit zu unerwarteten Effekten.

    So wird zum Beispiel ohne die Zeichen + und -

    <Directory /web/docs>
    Options Indexes FollowSymLinks
    </Directory>

    <Directory /web/docs/spec>
    Options Includes
    </Directory>

    für das Verzeichnis /web/docs/spec wird jetzt lediglich Includes gesetzt. Wenn die zweite Options-Anweisung jedoch +- und --Zeichen verwenden würde,

    <Directory /web/docs>
    Options Indexes FollowSymLinks
    </Directory>

    <Directory /web/docs/spec>
    Options +Includes -Indexes
    </Directory>

    dann würden die Optionen FollowSymLinks und Includes für das Verzeichnis /web/docs/spec gesetzt.

    Anmerkung

    Die Verwendung von -IncludesNOEXEC oder -Includes deaktiviert Server Side Includes unabhängig von der vorigen Einstellung vollständig.

    Die Voreinstellung ist All, sofern keine anderen Angaben gemacht wurden.

    top

    Protocol-Direktive

    Beschreibung:Protocol for a listening socket
    Syntax:Protocol protocol
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core
    Kompatibilität:Available in Apache 2.1.5 and later. On Windows, from Apache 2.3.3 and later.

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    Siehe auch

    top

    Protocols-Direktive

    Beschreibung:Protocols available for a server/virtual host
    Syntax:Protocols protocol ...
    Voreinstellung:Protocols http/1.1
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core
    Kompatibilität:Only available from Apache 2.4.17 and later.

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    Siehe auch

    top

    ProtocolsHonorOrder-Direktive

    Beschreibung:Determines if order of Protocols determines precedence during negotiation
    Syntax:ProtocolsHonorOrder On|Off
    Voreinstellung:ProtocolsHonorOrder On
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core
    Kompatibilität:Only available from Apache 2.4.17 and later.

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    Siehe auch

    top

    QualifyRedirectURL-Direktive

    Beschreibung:Controls whether the REDIRECT_URL environment variable is fully qualified
    Syntax:QualifyRedirectURL ON|OFF
    Voreinstellung:QualifyRedirectURL OFF
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis
    AllowOverride:FileInfo
    Status:Core
    Modul:core
    Kompatibilität:Directive supported in 2.4.18 and later. 2.4.17 acted as if 'QualifyRedirectURL ON' was configured.

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    RegexDefaultOptions-Direktive

    Beschreibung:Allow to configure global/default options for regexes
    Syntax:RegexDefaultOptions [none] [+|-]option [[+|-]option] ...
    Voreinstellung:RegexDefaultOptions DOTALL DOLLAR_ENDONLY
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core
    Kompatibilität:Only available from Apache 2.4.30 and later.

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    RegisterHttpMethod-Direktive

    Beschreibung:Register non-standard HTTP methods
    Syntax:RegisterHttpMethod method [method [...]]
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core
    Kompatibilität:Available in Apache HTTP Server 2.4.24 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    Siehe auch

    top

    RLimitCPU-Direktive

    Beschreibung:Begrenzt den CPU-Verbrauch von Prozessen, die von Apache-Kindprozessen gestartet wurden
    Syntax:RLimitCPU Sekunden|max [Sekunden|max]
    Voreinstellung:unbestimmt; verwendet die Voreinstellung des Systems
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core

    Akzeptiert einen oder zwei Parameter. Der erste Paramater setzt eine weiche Ressourcenbegrenzung für alle Prozesse, der zweite Parameter setzt die Maximalgrenze für die Ressourcennutzung. Jeder der Parameter kann eine Zahl oder max sein. max zeigt dem Server an, dass das vom Betriebssystem erlaubte Maximum verwendet werden soll. Das Anheben der maximal erlaubten Ressourcennutzung erfordert, dass der Server als root läuft, zumindest in der anfänglichen Startphase.

    Dies wird auf Prozesse angewendet, die von Anfragen bearbeitenden Apache-Kindprozessen abgespalten werden, nicht auf die Apache-Kindprozesse selbst. Das beinhaltet CGI-Skripte und SSI-exec-Befehle, nicht jedoch Prozesse, die vom Apache-Elternprozess abgespalten werden, wie z.B. Protokollierung.

    CPU-Ressourcenbegrenzung wird in Sekunden pro Prozess ausgedrückt.

    Siehe auch

    top

    RLimitMEM-Direktive

    Beschreibung:Begrenzt den Speicherverbrauch von Prozessen, die von Apache-Kindprozessen gestartet wurden
    Syntax:RLimitMEM Bytes|max [Bytes|max]
    Voreinstellung:unbestimmt; verwendet die Voreinstellung des Systems
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core

    Akzeptiert einen oder zwei Parameter. Der erste Paramater setzt eine weiche Ressourcenbegrenzung für alle Prozesse, der zweite Parameter setzt die Maximalgrenze für die Ressourcennutzung. Jeder der Parameter kann eine Zahl oder max sein. max zeigt dem Server an, dass das vom Betriebssystem erlaubte Maximum verwendet werden soll. Das Anheben der maximal erlaubten Ressourcennutzung erfordert, dass der Server als root läuft, zumindest in der anfänglichen Startphase.

    Dies wird auf Prozesse angewendet, die von Anfragen bearbeitenden Apache-Kindprozessen abgespalten werden, nicht auf die Apache-Kindprozesse selbst. Das beinhaltet CGI-Skripte und SSI-exec-Befehle, nicht jedoch Prozesse, die vom Apache-Elternprozess abgespalten werden, wie z.B. Protokollierung.

    Die Begrenzung des Speicherverbrauchs wird in Bytes pro Prozess ausgedrückt.

    Siehe auch

    top

    RLimitNPROC-Direktive

    Beschreibung:Begrenzt die Anzahl der Prozesse, die von Prozessen gestartet werden können, der ihrerseits von Apache-Kinprozessen gestartet wurden
    Syntax:RLimitNPROC Zahl|max [Zahl|max]
    Voreinstellung:unbestimmt; verwendet die Voreinstellung des Systems
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core

    Akzeptiert einen oder zwei Parameter. Der erste Paramater setzt eine weiche Ressourcenbegrenzung für alle Prozesse, der zweite Parameter setzt die Maximalgrenze für die Ressourcennutzung. Jeder der Parameter kann eine Zahl oder max sein. max zeigt dem Server an, dass das vom Betriebssystem erlaubte Maximum verwendet werden soll. Das Anheben der maximal erlaubten Ressourcennutzung erfordert, dass der Server als root läuft, zumindest in der anfänglichen Startphase.

    Dies wird auf Prozesse angewendet, die von Anfragen bearbeitenden Apache-Kindprozessen abgespalten werden, nicht auf die Apache-Kindprozesse selbst. Dies beinhaltet CGI-Skripte und SSI-exec-Befehle, nicht jedoch Prozesse, die vom Apache-Elternprozess abgespalten werden, wie z.B. Protokollierung.

    Prozessbegrenzungen steuern die Anzahl der Prozesse pro Benutzer.

    Anmerkung

    Wenn CGI-Prozesse nicht unter anderen Benutzerkennungen als der User-ID des Webservers laufen, dann beschränkt diese Direktive die Anzahl der Prozesse, die der Server selbst erstellen kann. Kennzeichen einer solchen Situation sind cannot fork-Meldungen (Anm.d.Ü.: kann nicht abspalten) in der Datei error_log.

    Siehe auch

    top

    ScriptInterpreterSource-Direktive

    Beschreibung:Methode zur Ermittlung des Interpreters von CGI-Skripten
    Syntax:ScriptInterpreterSource Registry|Registry-Strict|Script
    Voreinstellung:ScriptInterpreterSource Script
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Core
    Modul:core
    Kompatibilität:ausschließlich Win32; Die Option Registry-Strict ist verfügbar seit Apache 2.0.

    Die Direktive steuert, wie der Apache den Interpreter zur Ausführung von CGI-Skripten bestimmt. Die Voreinstellung ist Script. Dies veranlaßt den Apache, den Interpreter zu verwenden, auf den die Shebang-Zeile (erste Zeile, beginnt mit #!) im Skript zeigt. Auf Win32-Systemen sieht diese Zeile üblicherweise so aus:

    #!C:/Perl/bin/perl.exe

    oder, wenn perl im Pfad (Umgebungsvariable PATH) liegt, einfach:

    #!perl

    Die Einstellung ScriptInterpreterSource Registry veranlaßt eine Suche in HKEY_CLASSES_ROOT der Windows-Registrierungsdatenbank und verwendet die Endung der Skript-Datei (z.B. .pl) als Suchargument. Der durch den Unterschlüssel Shell\ExecCGI\Command oder, falls dieser nicht existiert, Shell\Open\Command definierte Befehl wird zum Öffnen der Skript-Datei verwendet. Wenn der Schlüssel zur Dateiendung oder beide Unterschlüssel fehlen, dann verwendet der Apache die Option Script.

    Sicherheit

    Seien Sie vorsichtig, ScriptInterpreterSource Registry bei Verzeichnissen zu verwenden, auf die eine ScriptAlias-Anweisung zeigt, denn der Apache versucht jede Datei innerhalb des Verzeichnisses auszuführen. Die Einstellung Registry kann unerwünschte Programmaufrufe bei Dateien verursachen, die üblicherweise nicht ausgeführt werden. Auf den meisten Windows-Systemen beispielsweise startet der voreingestellte Öffnen-Befehl für .htm-Dateien den Microsoft Internet Explorer, so dass jede HTTP-Anfrage nach einer existierenden .htm-Datei im Skript-Verzeichnis den Browser im Hintergrund starten würde. Dies ist eine wirksame Methode, Ihr System binnen etwa einer Minute zum Absturz zu bringen.

    Die seit Apache 2.0 neue Option Registry-Strict macht das gleiche wie Registry, verwendet jedoch nur den Unterschlüssel Shell\ExecCGI\Command. Der Schlüssel ExecCGI ist gewöhnlich nicht voreingestellt. Er muss manuell eingerichtet werden und schützt Ihr System so for versehentlichen Programmaufrufen.

    top

    SeeRequestTail-Direktive

    Beschreibung:Determine if mod_status displays the first 63 characters of a request or the last 63, assuming the request itself is greater than 63 chars.
    Syntax:SeeRequestTail On|Off
    Voreinstellung:SeeRequestTail Off
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core
    Kompatibilität:Available in Apache httpd 2.2.7 and later.

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    ServerAdmin-Direktive

    Beschreibung:E-Mail-Adresse, die der Server in Fehlermeldungen einfügt, welche an den Client gesendet werden
    Syntax:ServerAdmin E-Mail-Adresse|URL
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core

    ServerAdmin legt die Kontaktadresse fest, die der Server in jede Fehlermeldung einfügt, die er an den Client zurückschickt. Wenn httpd das übergebene Argument nicht als URL erkennt, nimmt er an, dess es sich um eine E-Mail-Adresse handelt und stellt in Hyperlinks mailto: voran. Es ist jedoch sogar sinnvoll, eine E-Mail-Adresse zu verwenden, da viele CGI-Skripte davon ausgehen. Wenn Sie eine URL verwenden möchten, sollten Sie auf einem anderen unter Ihrer Kontrolle stehenden Server verweisen. Andernfalls können Besucher Sie im Fehlerfall möglicherweise nicht kontaktieren.

    Es kann sich lohnen, hierfür eine reservierte Adresse anzugeben, z.B.

    ServerAdmin www-admin@foo.example.com

    da Anwender nicht unbedingt erwähnen, dass sie vom Server sprechen!

    top

    ServerAlias-Direktive

    Beschreibung:Alternativer Name für einen Host, der verwendet wird, wenn Anfragen einem namensbasierten virtuellen Host zugeordnet werden
    Syntax:ServerAlias Hostname [Hostname] ...
    Kontext:Virtual Host
    Status:Core
    Modul:core

    Die Direktive ServerAlias bestimmt die alternativen Namen eines Hosts zur Verwendung mit namensbasierten virtuellen Hosts.

    <VirtualHost *>
    ServerName server.domain.com
    ServerAlias server server2.domain.com server2
    # ...
    </VirtualHost>

    Siehe auch

    top

    ServerName-Direktive

    Beschreibung:Rechnername und Port, die der Server dazu verwendet, sich selbst zu identifizieren
    Syntax:ServerName voll-qualifizierter-Domainname[:port]
    Kontext:Serverkonfiguration, Virtual Host
    Status:Core
    Modul:core
    Kompatibilität:Diese Direktive löst in Version 2.0 die Funktionalität der Direktive Port aus Version 1.3 ab.

    Die Direktive ServerName bestimmt den Rechnernamen und Port, den der Server dazu verwendet, sich selbst zu identifizieren. Diese werden bei der Erstellung von Umleitungs-URLs benötigt. Wenn beispielsweise der Name der Maschine, die den Webserver beherbergt, simple.example.com lautet, die Maschine jedoch auch einen DNS-Alias www.example.com besitzt und Sie den Webserver so identifizieren möchten, sollten Sie die folgende Anweisung verwenden:

    ServerName www.example.com:80

    Wenn kein ServerName angegeben wurde, dann versucht der Server den Rechnernamen mittels eines Reverse-Lookup herzuleiten. Wenn kein Port in der ServerName-Anweisung angegeben wurde, dann verwendet der Server den Port der eingegangenen Anfrage. Für eine optimale Zuverlässigkeit und Berechenbarkeit sollten Sie einen eindeutigen Rechnernamen und Port angeben, in dem Sie die Direktive ServerName verwenden.

    Wenn Sie namensbasierte virtuelle Hosts verwenden, gibt ServerName innerhalb eines <VirtualHost>-Abschnitts an, welcher Hostname im Host:-Header der Anfrage auftauchen muss, damit sie diesem virtuellen Host zugeordnet wird.

    Lesen Sie bitte die Beschreibung der Direktiven UseCanonicalName und UseCanonicalPhysicalPort für Einstellungen, die bestimmen, ob selbstreferenzierende URLs (z.B. vom Modul mod_dir) auf den angegebenen Port zeigen oder auf die Portnummern die in der Anfrage des Clients angegeben ist.

    Siehe auch

    top

    ServerPath-Direktive

    Beschreibung:Veralteter URL-Pfad für einen namensbasierten virtuellen Host, auf den von einem inkompatiblen Browser zugegriffen wird
    Syntax:ServerPath URL-Pfad
    Kontext:Virtual Host
    Status:Core
    Modul:core

    Die Direktive ServerPath legt den veralteten (Anm.d.Ü.: Gemeint ist eigentlich "Altlast" aufgrund antiquierter Clients.) URL-Pfad eines Hosts zur Verwendung mit namensbasierten virtuellen Hosts fest.

    Siehe auch

    top

    ServerRoot-Direktive

    Beschreibung:Basisverzeichnis der Serverinstallation
    Syntax:ServerRoot Verzeichnis
    Voreinstellung:ServerRoot /usr/local/apache
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core

    Die Direktive ServerRoot bestimmt das Verzeichnis, in dem der Server installiert ist. Üblicherweise enthält es die Unterverzeichnisse conf/ und logs/. Relative Pfadangaben anderer Direktiven (wie z.B. Include oder LoadModule) werden relativ zu diesem Verzeichnis betrachtet.

    Beispiel

    ServerRoot /home/httpd

    Siehe auch

    top

    ServerSignature-Direktive

    Beschreibung:Konfiguriert die Fußzeile von servergenerierten Dokumenten
    Syntax:ServerSignature On|Off|EMail
    Voreinstellung:ServerSignature Off
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:All
    Status:Core
    Modul:core

    Die Direktive ServerSignature ermöglicht die Gestaltung einer unter servergenerierten Dokumenten (z.B. Fehlerdokumente, FTP-Verzeichnislisten von mod_proxy, mod_info-Ausgaben, ...) angefügten Fußzeile. Ein möglicher Grund für die Aktivierung einer solchen Fußzeile ist, dass der Anwender bei einer Kette von Proxy-Servern oft keine Möglichkeit hat, zu erkennen, welcher der verketteten Server gegenwärtig die zurückgegebene Fehlermeldung produziert hat.

    Die (Vor-)Einstellung Off unterdrückt die Fußzeile (und ist damit kompatibel zum Verhalten des Apache 1.2 und früher). Die Einstellung On fügt schlicht eine Zeile mit der Versionsnummer des Servers und dem Servernamen (ServerName) des bedienenden virtuellen Hosts an. Die Einstellung EMail erstellt zusätzlich einen "mailto:"-Verweis zum Serveradministrator (ServerAdmin) des referenzierten Dokuments.

    Ab Version 2.0.44 werden die Details der angegebenen Versionsnummer des Servers von der Direktive ServerTokens kontrolliert.

    Siehe auch

    top

    ServerTokens-Direktive

    Beschreibung:Konfiguriert den HTTP-Response-Header Server
    Syntax:ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full
    Voreinstellung:ServerTokens Full
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core

    die Direktive steuert, ob der Response-Header Server, der an den Client zurückgesendet wird, eine Beschreibung des allgemeinen Betriesbsystemtyps des Servers wie auch Informationen über einkompilierte Module enthält.

    ServerTokens Prod[uctOnly]
    Der Server sendet (z.B.): Server: Apache
    ServerTokens Major
    Der Server sendet (z.B.): Server: Apache/2
    ServerTokens Minor
    Der Server sendet (z.B.): Server: Apache/2.0
    ServerTokens Min[imal]
    Der Server sendet (z.B.): Server: Apache/2.0.41
    ServerTokens OS
    Der Server sendet (z.B.): Server: Apache/2.0.41 (Unix)
    ServerTokens Full (oder nicht angegeben)
    Der Server sendet (z.B.): Server: Apache/2.0.41 (Unix) PHP/4.2.2 MyMod/1.2

    Diese Einstellung gilt für den gesamten Server und kann nicht auf Virtual-Host-Basis aktiviert oder deaktiviert werden.

    Ab Version 2.0.44 steuert diese Direktive auch die Informationen, die durch die Direktive ServerSignature angeboten werden.

    Siehe auch

    top

    SetHandler-Direktive

    Beschreibung:Erzwingt die Verarbeitung aller passenden Dateien durch einen Handler
    Syntax:SetHandler Handlername|None
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Core
    Modul:core
    Kompatibilität:Seit Apache 2.0 im Core

    Wenn die Direktive innerhalb einer .htaccess-Datei oder in einem <Directory>- oder <Location>-Abschnitt angegeben wird, erzwingt sie, dass alle entsprechenden Dateien von dem durch Handlername angegebenen Handler analysiert werden. Wenn Sie beispielsweise ein Verzeichnis haben, dessen Dateien unabhängig von der Endung gänzlich als Image-Maps interpretiert werden sollen, können Sie folgendes in eine .htaccess-Datei in dem Verzeichnis schreiben:

    SetHandler imap-file

    Noch ein Beispiel: wenn Sie den Server immer, wenn die URL http://servername/status aufgerufen wird, einen Statusbericht anzeigen lassen möchten, dann können Sie folgendes in die httpd.conf schreiben:

    <Location /status>
    SetHandler server-status
    </Location>

    Sie können eine zuvor definierte SetHandler-Anweisung aufheben, indem Sie den Wert None verwenden.

    Hinweis: SetHandler setzt die Standard-Handler außer Kraft und unterdrückt gewohnte Verhaltensweisen, wie beispielsweise die Behandlung von URLs, die auf einen Schrägstrich (/) enden als Verzeichnisse oder (die Auslieferung von) Index-Dateien.

    Siehe auch

    top

    SetInputFilter-Direktive

    Beschreibung:Bestimmt die Filter, die Client-Anfragen und POST-Eingaben verarbeiten
    Syntax:SetInputFilter Filter[;Filter...]
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Core
    Modul:core

    Die Direktive SetInputFilter bestimmt den oder die Filter, die Client-Anfragen und POST-Eingaben verarbeiten, wenn sie vom Server empfangen werden. Diese gelten zusätzlich zu anderweitig definierten Filtern, einschließlich denen der Direktive AddInputFilter.

    Wenn mehr als ein Filter angegeben wird, dann müssen diese durch Semikolon voneinander getrennt in der Reihenfolge angegeben werden, in der sie die Daten verarbeiten sollen.

    Siehe auch

    top

    SetOutputFilter-Direktive

    Beschreibung:Bestimmt die Filter, die Antworten des Servers verarbeiten
    Syntax:SetOutputFilter Filter[;Filter...]
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Core
    Modul:core

    Die Direktive SetOutputFilter bestimmt die Filter, die Antworten des Servers verarbeiten, bevor sie an den Client gesendet werden. Diese gelten zusätzlich zu anderweitig definierten Filtern, einschließlich denen der Direktive AddOutputFilter.

    Die folgende Konfiguration verarbeitet zum Beispiel alle Dateien im Verzeichnis /www/data als Server Side Includes.

    <Directory /www/data/>
    SetOutputFilter INCLUDES
    </Directory>

    Wenn mehr als ein Filter angegeben wird, dann müssen diese durch Semikolon voneinander getrennt in der Reihenfolge angegeben werden, in der sie die Daten verarbeiten sollen.

    Siehe auch

    top

    TimeOut-Direktive

    Beschreibung:Zeitspanne, die der Server auf verschiedene Ereignisse wartet, bevor er die Anfrage abbricht
    Syntax:TimeOut Sekunden
    Voreinstellung:TimeOut 60
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core

    Die Direktive TimeOut definiert derzeit die Zeitspanne, die der Apache auf drei Dinge wartet:

    1. Die gesamte Zeispanne, die benötigt wird, um eine GET-Anfrage zu empfangen.
    2. Die Zeitspanne zwischen dem Empfang von TCP-Paketen einer POST- oder PUT-Anfrage.
    3. Die Zeitspanne zwischen ACKs bei der Übermittlung der TCP-Pakete der Antwort.

    Wir haben vor, diese Zeitspannen in Zukunft separat konfigurierbar zu machen. Vor Version 1.2 war der Zeitgeber auf 1200 voreingestellt, wurde dann aber auf 300 herabgesetzt, was immer noch weit mehr ist, als in den meisten Situationen benötigt wird. Die Voreinstellung wurde nicht weiter herabgesetzt, da gelegentlich noch Stellen im Code existieren können, wo der Zeitgeber nicht zurückgesetzt wird, wenn ein Paket verschickt wird. Seit Apache 2.4 ist die Voreinstellung 60.

    top

    TraceEnable-Direktive

    Beschreibung:Legt das Verhalten von TRACE-Anfragen fest
    Syntax:TraceEnable [on|off|extended]
    Voreinstellung:TraceEnable on
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core
    Kompatibilität:Verfügbar ab Apache 1.3.34 und 2.0.55

    Diese Direktive beeinflusst das Verhalten von TRACE sowohl für den Server selbst als auch mod_proxy. Die Voreinstellung TraceEnable on erlaubt TRACE-Anfragen gemäß RFC 2616. Dort werden nur Anfragen ohne Datenteil zugelassen. TraceEnable off sorgt dafür, dass der Serverkern und mod_proxy den Fehler 405 (Zugriffsmethode nicht erlaubt) an den Client senden.

    Zu Test- und Diagnosezwecken können Sie auch nicht-standardkonforme Anfragen mit Datenteil erlauben, indem Sie die Direktive TraceEnable extended verwenden. Der Server (als Ursprungsserver) beschränkt den Anfrageinhalt auf 64k. (Wenn Transfer-Encoding: chunked benutzt wird, können weitere 8k für die Chunk-Kopfzeilen verwendet werden.) Der Server selbst reflektiert dann die vollständigen HTTP- und Chunk-Kopfzeilen in seiner Antwort. Die Einschränkung auf 64k gilt nicht, wenn der Server als Proxy arbeitet.

    top

    UnDefine-Direktive

    Beschreibung:Undefine the existence of a variable
    Syntax:UnDefine parameter-name
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    Siehe auch

    top

    UseCanonicalName-Direktive

    Beschreibung:Bestimmt, wie der Server seinen eigenen Namen und Port ermittelt
    Syntax:UseCanonicalName On|Off|DNS
    Voreinstellung:UseCanonicalName Off
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis
    Status:Core
    Modul:core

    In vielen Situationen muss der Apache eine selbstreferenzierende URL -- d.h. eine URL, die auf den selben Server zurück verweist -- zusammenbauen. Bei UseCanonicalName On verwendet der Apache den Hostnamen und Port, der in der ServerName-Anweisung angegeben ist, um den kanonischen Namen des Servers zu erstellen. Dieser Name wird in allen selbstreferenzierenden URLs sowie in CGI-Skripten für die Werte von SERVER_NAME und SERVER_PORT verwendet.

    Bei UseCanonicalName Off bildet der Apache selbstreferenzierende URLs, indem er den vom Client übermittelten Hostnamen und Port verwendet, sofern diese vorhanden sind (andernfalls wird der kanonische Name, wie oben beschrieben, benutzt). Die Werte sind die gleichen, die zur Anwendung von namensbasierten virtuellen Hosts verwendet werden, und sie sind mit den gleichen Clients verfügbar (Anm.d.Ü.: , die auch in der Lage sind, auf namensbasierte virtuelle Hosts zuzugreifen, d.h. einen Host-Header mitschicken). Die CGI-Variablen SERVER_NAME und SERVER_PORT werden ebenfalls aus den vom Client angeboten Werten erstellt.

    Ein Intranet-Server, auf den Anwender mit kurzen Namen wie www zugreifen, ist ein Beispiel, wo dies sinnvoll sein kann. Sie werden bemerken, dass der Apache den Benutzer auf http://www.domain.com/splat/ umleitet, wenn dieser einen Kurznamen und eine URL, die einem Verzeichnis entspricht, ohne abschließenden Schrägstrich eingibt, wie z.B. http://www/splat. Wenn Sie Authentisierung aktiviert haben, bewirkt dies, dass der Benutzer sich zweimal identifizieren muss (einmal für www und noch einmal für www.domain.com -- lesen Sie für weitere Informationen die FAQ zu diesem Thema). Wenn UseCanonicalName jedoch auf Off gesetzt ist, denn wird der Apache zu http://www/splat/ umleiten.

    Es existiert noch eine dritte Option, UseCanonicalName DNS, die für den Betrieb von IP-basierten Massen-Virtual-Hosts gedacht ist, um antiquierte Clients zu unterstützen, die keinen Host:-Header bereit stellen. Um selbstreferenzierende URLs zu ermitteln, führt der Apache bei dieser Option ein Reverse-DNS-Lookup auf die IP-Adresse des Servers aus, zu der der Client Verbindung aufgenommen hat.

    Warnung

    Wenn CGI-Skripte Vermutungen aufgrund des Wertes von SERVER_NAME anstellen, können sie durch diese Option fehlschlagen. Clients steht es im Wesentlichen frei, einen Wert für den Hostnamen anzugeben, wie er will. Wenn das CGI-Skript SERVER_NAME jedoch lediglich dazu verwendet, selbstreferenzierende URLs zu erstellen, sollte das gerade noch in Ordnung sein.

    Siehe auch

    top

    UseCanonicalPhysicalPort-Direktive

    Beschreibung:Bestimmt, wie der Server seinen eigenen Namen und Port ermittelt
    Syntax:UseCanonicalPhysicalPort On|Off
    Voreinstellung:UseCanonicalPhysicalPort Off
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis
    Status:Core
    Modul:core

    In vielen Situationen muss der Apache eine selbstreferenzierende URL zusammenbauen, d.h. eine URL, die auf den selben Server zurück verweist. Wenn der Apache für die UseCanonicalName-Direktive den Port bestimmt, wird mit UseCanonicalPhysicalPort On die tatsächlich für die Anfrage verwendete physische Portnummer in Betracht gezogen. Mit UseCanonicalPhysicalPort Off verläßt sich der Apache nur auf die Konfiguration, um eine gültige Portnummer zu bestimmen und läßt die physische Portnummer außer acht.

    Hinweis

    Wenn der physische Port verwendet wird, ist die Reihenfolge wie folgt:

    UseCanonicalName On

    • Der in Servername angegebene Port
    • Der physische Port
    • Der Standardport
    UseCanonicalName Off | DNS
    • Der Port, der aus dem Host:-Header gewonnen wurde
    • Der physische Port
    • Der in Servername angegebene Port
    • Der Standardport

    Bei UseCanonicalPhysicalPort Off werden die physischen Ports aus der Suchreihe entfernt.

    Siehe auch

    top

    <VirtualHost>-Direktive

    Beschreibung:Enthält Direktiven, die nur auf bestimmte Hostnamen oder IP-Adressen angewendet werden
    Syntax:<VirtualHost Adresse[:Port] [Adresse[:Port]] ...> ... </VirtualHost>
    Kontext:Serverkonfiguration
    Status:Core
    Modul:core

    <VirtualHost> und </VirtualHost> werden dazu verwendet, eine Gruppe von Direktiven zusammenzufassen, die nur auf einen bestimmten virtuellen Host angewendet werden. Jede Direktive, die im Virtual-Host-Kontext zulässig ist, kann verwendet werden. Wenn der Server eine Anfrage für ein bestimmtes Dokument eines bestimmten virtuellen Hosts empfängt, dann benutzt er die im <VirtualHost>-Container enthaltenen Konfigurationsanweisungen. Adresse kann sein:

    • Die IP-Adresse des virtuellen Hosts.
    • Ein voll qualifizierter Domainname für die IP-Adresse des virtuellen Hosts.
    • Das Zeichen *, welches nur in Kombination mit NameVirtualHost * verwendet wird, um allen IP-Adressen zu entsprechen.
    • Die Zeichenkette _default_, die nur mit IP-basierten virtuellen Hosts verwendet wird, um nicht zugewiesene IP-Adressen aufzufangen.

    Beispiel

    <VirtualHost 10.1.2.3>
    ServerAdmin webmaster@host.foo.com
    DocumentRoot /www/docs/host.foo.com
    ServerName host.foo.com
    ErrorLog logs/host.foo.com-error_log
    TransferLog logs/host.foo.com-access_log
    </VirtualHost>

    IPv6-Adressen müssen in eckigen Klammern angegeben werden, da die optionale Portnummer sonst nicht erkannt werden kann. Hier ein IPv6-Beispiel:

    <VirtualHost [2001:db8::a00:20ff:fea7:ccea]>
    ServerAdmin webmaster@host.example.com
    DocumentRoot /www/docs/host.example.com
    ServerName host.example.com
    ErrorLog logs/host.example.com-error_log
    TransferLog logs/host.example.com-access_log
    </VirtualHost>

    Jeder virtuelle Host muss einer anderen IP-Adresse, einem anderen Port oder einem anderen Hostnamen für den Server entsprechen. Im ersten Fall muss die Servermaschine so eingerichtet sein, dass sie IP-Pakete für mehrere Adressen akzeptiert. (Wenn der Rechner nicht mehrere Netzwerkkarten besitzt, kann dies mit dem Befehl ifconfig alias durchgeführt werden -- sofern Ihr Betriebssystem das unterstützt).

    Anmerkung

    Die Verwendung von <VirtualHost> beeinflusst nicht, an welchen Adressen der Apache lauscht. Sie müssen mit Listen sicherstellen, dass der Apache an der richtigen Adresse lauscht.

    Bei der Verwendung IP-basierter virtuellen Hosts kann der spezielle Name _default_ benutzt werden. In diesem Fall weist der Apache jede IP-Adresse diesem virtuellen Host zu, die nicht explizit in einem anderen virtuellen Host angegeben ist. Falls kein virtueller Host _default_ angegeben ist, wird die "Hauptserver"-Konfiguration, die aus allen Definitionen außerhalb der Virtual-Host-Abschnitte besteht, für nicht passende IPs verwendet. (Beachten Sie jedoch, dass eine IP-Adressen die zu einer NameVirtualHost-Anweisung passt, weder den "Hauptserver" noch den virtuellen Host _default_ verwendet. Lesen Sie für weitere Details die Dokumentation zu namensbasierten virtuell Hosts.)

    Sie können einen speziellen :Port angeben, um den entsprechenden Port zu wechseln. Falls nicht angegeben, wird er auf den gleichen Port voreingestellt, wie die letzte Listen-Anweisung des Hauptservers. Sie können auch :* angeben, um alle Ports dieser Adresse zu akzeptieren. (Dies wird zusammen mit _default_ empfohlen.)

    Sicherheit

    Lesen Sie das Dokument Sicherheitshinweise für Details, warum Ihre Sicherheit gefährdet sein kann, wenn das Verzeichnis, in dem Protokolldateien gespeichert werden, für jemanden anderes als den Benutzer beschreibbar ist, der den Server gestartet hat.

    Siehe auch

    Verfügbare Sprachen:  de  |  en  |  es  |  fr  |  ja  |  tr 

    top

    Kommentare

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_echo.html.en0000644000000000000500000001671713412755316017307 0ustar rootsrc mod_echo - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_echo

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:A simple echo server to illustrate protocol modules
    Status:Experimental
    Module Identifier:echo_module
    Source File:mod_echo.c

    Summary

    This module provides an example protocol module to illustrate the concept. It provides a simple echo server. Telnet to it and type stuff, and it will echo it.

    top

    ProtocolEcho Directive

    Description:Turn the echo server on or off
    Syntax:ProtocolEcho On|Off
    Default:ProtocolEcho Off
    Context:server config, virtual host
    Status:Experimental
    Module:mod_echo

    The ProtocolEcho directive enables or disables the echo server.

    Example

    ProtocolEcho On

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_groupfile.html.en0000644000000000000500000002464413412755316021576 0ustar rootsrc mod_authz_groupfile - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authz_groupfile

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Group authorization using plaintext files
    Status:Base
    Module Identifier:authz_groupfile_module
    Source File:mod_authz_groupfile.c
    Compatibility:Available in Apache 2.1 and later

    Summary

    This module provides authorization capabilities so that authenticated users can be allowed or denied access to portions of the web site by group membership. Similar functionality is provided by mod_authz_dbm.

    top

    The Require Directives

    Apache's Require directives are used during the authorization phase to ensure that a user is allowed to access a resource. mod_authz_groupfile extends the authorization types with group and group-file.

    Since v2.4.8, expressions are supported within the groupfile require directives.

    Require group

    This directive specifies group membership that is required for the user to gain access.

    Require group admin

    Require file-group

    When this directive is specified, the filesystem permissions on the file being accessed are consulted. The user must be a member of a group with the same name as the group that owns the file. See mod_authz_owner for more details.

    Require file-group
    top

    AuthGroupFile Directive

    Description:Sets the name of a text file containing the list of user groups for authorization
    Syntax:AuthGroupFile file-path
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_authz_groupfile

    The AuthGroupFile directive sets the name of a textual file containing the list of user groups for user authorization. File-path is the path to the group file. If it is not absolute, it is treated as relative to the ServerRoot.

    Each line of the group file contains a groupname followed by a colon, followed by the member usernames separated by spaces.

    Example:

    mygroup: bob joe anne

    Note that searching large text files is very inefficient; AuthDBMGroupFile provides a much better performance.

    Security

    Make sure that the AuthGroupFile is stored outside the document tree of the web-server; do not put it in the directory that it protects. Otherwise, clients may be able to download the AuthGroupFile.

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/module-dict.html0000644000000000000500000000075613362070302017320 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: module-dict.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: module-dict.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: module-dict.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: module-dict.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: module-dict.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_log_config.html.ja.utf80000644000000000000500000010350213412755316021341 0ustar rootsrc mod_log_config - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_log_config

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:サーãƒã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ­ã‚®ãƒ³ã‚°
    ステータス:Base
    モジュール識別å­:log_config_module
    ソースファイル:mod_log_config.c

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’柔軟ã«ãƒ­ã‚°åŽé›†ã™ã‚‹æ©Ÿèƒ½ã‚’ æä¾›ã—ã¾ã™ã€‚ログã¯ã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºå¯èƒ½ãªæ›¸å¼ã§æ›¸ã‹ã‚Œã€ãƒ•ァイルã«ç›´æŽ¥ 書ã„ãŸã‚Šã€å¤–éƒ¨ãƒ—ãƒ­ã‚°ãƒ©ãƒ ã«æ¸¡ã—ãŸã‚Šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚個々ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ 特徴ã«å¿œã˜ã¦ãƒ­ã‚°ã«æ›¸ã„ãŸã‚Šæ›¸ã‹ãªã‹ã£ãŸã‚Šã§ãるよã†ã«ã€æ¡ä»¶ã«ã‚ˆã‚‹ ログåŽé›†ã‚‚æä¾›ã•れã¦ã„ã¾ã™ã€‚

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ä¸‰ã¤ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–æä¾›ã—ã¾ã™: ログファイルを作æˆã™ã‚‹ãŸã‚ã® TransferLog, æ–°ã—ã„æ›¸å¼ã‚’ 定義ã™ã‚‹ LogFormat, ログファイル㨠書å¼ã‚’一度ã«å®šç¾©ã™ã‚‹ CustomLog ã§ã™ã€‚ å„リクエストãŒè¤‡æ•°å›žãƒ­ã‚°åŽé›†ã•れるよã†ã«ã™ã‚‹ãŸã‚ã« TransferLog ディレクティブ㨠CustomLog ディレクティブã¯è¤‡æ•°å›žä½¿ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    top

    カスタムログ書å¼

    LogFormat ディレクティブ㨠CustomLog ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æ›¸å¼ã‚’指定ã™ã‚‹å¼•æ•°ã¯æ–‡å­—列ã§ã™ã€‚ã“ã®æ–‡å­—列を使ã£ã¦ãれãžã‚Œã® リクエストãŒãƒ­ã‚°ãƒ•ァイルã«ãƒ­ã‚°åŽé›†ã•れã¾ã™ã€‚ãã®æ–‡å­—列ã«ã¯ ログファイルã«ãã®ã¾ã¾ 書ã‹ã‚Œã‚‹æ–‡å­—列やã€ãれãžã‚Œæ”¹è¡Œã¨ã‚¿ãƒ–を表㙠C 言語 å½¢å¼ã®åˆ¶å¾¡æ–‡å­— "\n" 㨠"\t" ã¨ã‚’å«ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ãã®ã¾ã¾å‡ºåŠ›ã•ã›ãŸã„引用符ã¨ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã¯ ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚

    リクエストã®ç‰¹å¾´ãã®ã‚‚ã®ã¯ "%" ディレクティブを書å¼ã®æ–‡å­—åˆ—ã«æ›¸ãã“ã¨ã§ ログåŽé›†ã•れã¾ã™ã€‚"%" ディレクティブã¯ãƒ­ã‚°ãƒ•ァイル中ã§ã¯ä»¥ä¸‹ã®ã‚ˆã†ãª 値ã§ç½®æ›ã•れã¾ã™:

    フォーマット文字列 説明
    %% パーセント記å·
    %a リモート IP アドレス
    %A ローカル IP アドレス
    %B レスãƒãƒ³ã‚¹ã®ãƒã‚¤ãƒˆæ•°ã€‚HTTP ヘッダã¯é™¤ã。
    %b レスãƒãƒ³ã‚¹ã®ãƒã‚¤ãƒˆæ•°ã€‚HTTP ヘッダã¯é™¤ã。CLF 書å¼ã€‚ ã™ãªã‚ã¡ã€1 ãƒã‚¤ãƒˆã‚‚é€ã‚‰ã‚Œãªã‹ã£ãŸã¨ã㯠0 ã§ã¯ãªã〠'-' ã«ãªã‚‹
    %{Foobar}C サーãƒã«é€ã‚‰ã‚ŒãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆä¸­ã®ã‚¯ãƒƒã‚­ãƒ¼ Foobar ã®å€¤
    %D リクエストを処ç†ã™ã‚‹ã®ã«ã‹ã‹ã£ãŸæ™‚é–“ã€ãƒžã‚¤ã‚¯ãƒ­ç§’å˜ä½
    %{FOOBAR}e 環境変数 FOOBAR ã®å†…容
    %f ファイルå
    %h リモートホスト
    %H リクエストプロトコル
    %{Foobar}i サーãƒã«é€ã‚‰ã‚ŒãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã® Foobar: ヘッダã®å†…容
    %l (identd ã‹ã‚‰ã‚‚ã—æä¾›ã•れã¦ã„れã°) リモートログå。 ã“れ㯠mod_ident ãŒã‚µãƒ¼ãƒã«å­˜åœ¨ã—ã¦ã€ IdentityCheck ディレクティブ㌠On ã«è¨­å®šã•れã¦ã„ãªã„é™ã‚Šã€ - ã«ãªã‚Šã¾ã™ã€‚
    %m リクエストメソッド
    %{Foobar}n ä»–ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‹ã‚‰ã®ãƒ¡ãƒ¢ Foobar ã®å†…容
    %{Foobar}o 応答㮠Foobar: ヘッダã®å†…容
    %p リクエストを扱ã£ã¦ã„るサーãƒã®æ­£å¼ãªãƒãƒ¼ãƒˆ
    %{format}p サーãƒãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’処ç†ã—ã¦ã„ã‚‹ãƒãƒ¼ãƒˆã®å…¬å¼ (訳注: canonical) ã®ãƒãƒ¼ãƒˆç•ªå·ã‹ã€ サーãƒã®å®Ÿéš›ã®ãƒãƒ¼ãƒˆç•ªå·ã‹ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã®å®Ÿéš›ã®ãƒãƒ¼ãƒˆç•ªå·ã‹ã§ã™ã€‚ format ã«ä½¿ãˆã‚‹æ–‡å­—列㯠canonical, local, remote ã«ãªã‚Šã¾ã™ã€‚
    %P リクエストを扱ã£ãŸå­ãƒ—ロセスã®ãƒ—ロセス ID
    %{format}P リクエストを扱ã£ãŸãƒ¯ãƒ¼ã‚«ãƒ¼ã®ãƒ—ロセス ID ã‹ã‚¹ãƒ¬ãƒƒãƒ‰ ID。 format ã¨ã—ã¦æœ‰åйãªå€¤ã¯ pid, tid, hextid ã§ã™ã€‚hextid を使ã†ã«ã¯ APR 1.2.0 以é™ãŒå¿…è¦ã§ã™ã€‚
    %q å•ã„åˆã›æ–‡å­—列 (存在ã™ã‚‹å ´åˆã¯å‰ã« ? ãŒè¿½åŠ ã•れる。 ãã†ã§ãªã„å ´åˆã¯ç©ºæ–‡å­—列)
    %r ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æœ€åˆã®è¡Œ
    %s ステータス。内部ã§ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•れãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ã€å…ƒã€…㮠リクエストã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ --- 最後ã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã¯ %>s
    %t リクエストをå—付ã‘ãŸæ™‚刻。 CLF ã®æ™‚åˆ»ã®æ›¸å¼ (標準ã®è‹±èªžã®æ›¸å¼)
    %{format}t format ã§ä¸Žãˆã‚‰ã‚ŒãŸæ›¸å¼ã«ã‚ˆã‚‹æ™‚刻。format 㯠strftime (3) 㮠書å¼ã§ã‚ã‚‹å¿…è¦ãŒã‚る。(地域化ã•れã¦ã„ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹)
    %T リクエストを扱ã†ã®ã«ã‹ã‹ã£ãŸæ™‚é–“ã€ç§’å˜ä½
    %u リモートユーザ (èªè¨¼ã«ã‚ˆã‚‹ã‚‚ã®ã€‚ステータス (%s) ㌠401 ã®ã¨ãã¯æ„味ãŒãªã„ã‚‚ã®ã§ã‚ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹)
    %U リクエストã•れ㟠URL パス。クエリ文字列ã¯å«ã¾ãªã„
    %v リクエストを扱ã£ã¦ã„るサーãƒã®æ­£å¼ãª ServerName
    %V UseCanonicalName ã®è¨­å®šã«ã‚ˆã‚‹ã‚µãƒ¼ãƒå
    %X 応答ãŒå®Œäº†ã—ãŸã¨ãã®æŽ¥ç¶šã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹:
    X = 応答ãŒå®Œäº†ã™ã‚‹å‰ã«æŽ¥ç¶šãŒç•°å¸¸çµ‚了
    + = 応答ãŒé€ã‚‰ã‚ŒãŸå¾Œã«æŽ¥ç¶šã‚’æŒç¶šã™ã‚‹ã“ã¨ãŒå¯èƒ½
    - = 応答ãŒé€ã‚‰ã‚ŒãŸå¾Œã«æŽ¥ç¶šãŒåˆ‡ã‚‰ã‚Œã‚‹

    (ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠Apache 1.3 ã®å¾ŒæœŸã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯ %c ã«å‰²ã‚Šå½“ã¦ã‚‰ã‚Œã¦ ã„ã¾ã—ãŸãŒã€ã“ã‚Œã¯æ­´å²çš„ã« ssl ãŒä½¿ç”¨ã—ã¦ã„ã‚‹ %{var}c æ§‹æ–‡ã¨è¡çªã—ã¦ã„ã¾ã—ãŸã€‚)

    %I リクエストã¨ãƒ˜ãƒƒãƒ€ã‚’å«ã‚€ã€å—ã‘å–ã£ãŸãƒã‚¤ãƒˆæ•°ã€‚ 0 ã«ã¯ãªã‚‰ãªã„。 ã“れを使用ã™ã‚‹ãŸã‚ã«ã¯ mod_logio ãŒå¿…è¦
    %O ヘッダをå«ã‚€ã€é€ä¿¡ã—ãŸãƒã‚¤ãƒˆæ•°ã€‚0 ã«ã¯ãªã‚‰ãªã„。 ã“れを使用ã™ã‚‹ãŸã‚ã«ã¯ mod_logio ãŒå¿…è¦

    修飾å­

    特定ã®è¦ç´ ã¯ "%" ã®ç›´å¾Œã« HTTP ステータスコードをカンマ区切り㧠指定ã™ã‚‹ã“ã¨ã§ã€è¡¨ç¤ºã‚’制é™ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚例ãˆã° "%400,501{User-agent}i" ã§ã¯ã€ 400 㨠500 番エラーã§ã®ã¿ User-agent をログã—ã¾ã™ã€‚ ä»–ã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã§ã¯ "-" ã¨ã„ã†æ–‡å­—列㌠ログã•れã¾ã™ã€‚ステータスコードã®ãƒªã‚¹ãƒˆã¯ "!" ã§å¦å®šã‚’指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ : "%!200,304,302{Referer}i" ã¯ã€æŒ‡å®šã•れ㟠3 ã¤ã®ã‚³ãƒ¼ãƒ‰ã®ã©ã‚Œã«ã‚‚該当ã—ãªã„リクエスト全ã¦ã§ Referer をログã—ã¾ã™ã€‚

    ä¿®é£¾å­ "<" 㨠">" ã¯å†…部リダイレクトã•れãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ­ã‚°ã« å…ƒã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‹æœ€çµ‚çš„ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ã©ã¡ã‚‰ã‚’使用ã™ã‚‹ã‹ã‚’ 指定ã™ã‚‹ãŸã‚ã«ä½¿ã„ã¾ã™ã€‚デフォルトã§ã¯ã€% ディレクティブ㮠%s, %U, %T, %D, %r ã¯å…ƒã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ã€ä»–ã¯æœ€çµ‚çš„ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ 使用ã—ã¾ã™ã€‚例ãˆã°ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æœ€çµ‚ステータスを記録ã™ã‚‹ã«ã¯ %>s ã‚’ã€å†…部的ã«èªè¨¼ã•れã¦ã„ãªã„リソースã¸ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•れ㟠リクエストã§å…ƒã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§èªè¨¼ã•れãŸãƒ¦ãƒ¼ã‚¶ã‚’記録ã™ã‚‹ãŸã‚ã«ã¯ %<u を使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚

    ãã®ä»–注æ„点

    セキュリティ上ã®ç†ç”±ã«ã‚ˆã‚Š 2.0.46 より〠%r, %i, %o ã«å…¥ã£ã¦ã„る〠å°å­—ä¸å¯èƒ½ãªæ–‡å­—ã¨ä»–ã®ç‰¹åˆ¥ãªæ–‡å­—ã¯ã€\xhh ã¨ã„ã†å½¢å¼ã®æ–‡å­—列ã§ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã•れるよã†ã«ãªã‚Šã¾ã—ãŸã€‚hh 㯠ãã®ã¾ã¾ã®ãƒã‚¤ãƒˆã®å€¤ã® 16 進ã§ã®å€¤ã§ã™ã€‚ã“ã®è¦å‰‡ã®ä¾‹å¤–ã«ã¯ã€ ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã‚’使ã£ã¦ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã•れる " 㨠\ ã¨ã€ C å½¢å¼ã®è¡¨è¨˜æ³•ãŒä½¿ã‚れる空白文字 (\n, \t ãªã©) ãŒã‚りã¾ã™ã€‚2.0.46 以å‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—処ç†ã¯è¡Œã‚れã¾ã›ã‚“ã®ã§ã€ 生ログファイルを扱ã†éš›ã«æ³¨æ„ãŒå¿…è¦ã§ã™ã€‚

    httpd 2.0 ã§ã¯ 1.3 ã¨ã¯ç•°ãªã‚Šã€%b 㨠%B フォーマット文字列ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ä¿¡ã•れãŸãƒã‚¤ãƒˆæ•°ãã®ã‚‚ã®ã§ã¯ãªã〠HTTP レスãƒãƒ³ã‚¹ã®ãƒã‚¤ãƒˆæ•°ã§ã™ (ã“れらã¯ç•°ãªã‚‹ã‚‚ã®ã§ã€ãŸã¨ãˆã°ã€ コãƒã‚¯ã‚·ãƒ§ãƒ³ãŒé€”中ã§ç ´æ£„ã•れãŸå ´åˆã‚„ã€SSL 使用時ã«ä¸€è‡´ã—ã¾ã›ã‚“) 。 mod_logio ã§æä¾›ã•れã¦ã„ã‚‹ %O フォーマット文字列ã§ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯çµŒç”±ã§å®Ÿéš›ã«è»¢é€ã•れãŸãƒã‚¤ãƒˆæ•°ã‚’ 記録ã§ãã¾ã™ã€‚

    例

    よã使ã‚れるフォーマット文字列ã¯:

    Common Log Format (CLF)
    "%h %l %u %t \"%r\" %>s %b"
    ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆä»˜ã Common Log Format
    "%v %h %l %u %t \"%r\" %>s %b"
    NCSA extended/combined ログ書å¼
    "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\""
    Referer ログ書å¼
    "%{Referer}i -> %U"
    Agent (ブラウザ) ログ書å¼
    "%{User-agent}i"
    top

    セキュリティã«é–¢ã—ã¦

    ログファイルãŒä¿å­˜ã•れã¦ã„るディレクトリãŒã‚µãƒ¼ãƒã‚’èµ·å‹•ã—ãŸä»¥å¤–ã®ãƒ¦ãƒ¼ã‚¶ã§ 書ãè¾¼ã¿å¯èƒ½ãªã¨ãã«ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã®å•題ãŒç™ºç”Ÿã™ã‚‹ç†ç”±ã®è©³ç´°ã¯ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã®ã“㤠をå‚ç…§ã—ã¦ãã ã•ã„。

    top

    BufferedLogs ディレクティブ

    説明:ãƒ‡ã‚£ã‚¹ã‚¯ã«æ›¸ã出ã™å‰ã«ãƒ¡ãƒ¢ãƒªã«ãƒ­ã‚°ã‚¨ãƒ³ãƒˆãƒªã‚’ãƒãƒƒãƒ•ã‚¡ã™ã‚‹
    æ§‹æ–‡:BufferedLogs On|Off
    デフォルト:BufferedLogs Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Base
    モジュール:mod_log_config
    äº’æ›æ€§:2.0.41 以é™

    BufferedLogs ディレクティブを使ã†ã¨ mod_log_config ã®æŒ™å‹•ãŒå¤‰åŒ–ã—ã¦ã€ 複数ã®ãƒ­ã‚°ã‚’書ã出ã™éš›ã«ã€ãれãžã‚Œã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆå‡¦ç†å¾Œæ¯Žã« 書ã出ã™ã®ã§ã¯ãªãã€ã„ã£ãŸã‚“メモリã«è“„ãˆã¦ã‹ã‚‰ã€ ã¾ã¨ã‚ã¦ãƒ‡ã‚£ã‚¹ã‚¯ã«æ›¸ã出ã™ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ ã“ã®çµæžœãƒ‡ã‚£ã‚¹ã‚¯ã‚¢ã‚¯ã‚»ã‚¹ãŒã‚ˆã‚ŠåŠ¹çŽ‡çš„ã«ãªã‚Šã€ 高ã„パフォーマンスã®å¾—られるシステムもã‚ã‚‹ã§ã—ょã†ã€‚ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚µãƒ¼ãƒå…¨ä½“ã§ä¸€åº¦ã ã‘設定ã§ãã¾ã™; ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã”ã¨ã«è¨­å®šã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“。

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯å®Ÿé¨“çš„ãªã‚‚ã®ã§ã™ã®ã§ã€ 使用ã™ã‚‹éš›ã¯æ³¨æ„ã—ã¦ãã ã•ã„。
    top

    CustomLog ディレクティブ

    説明:ログファイルã®åå‰ã¨æ›¸å¼ã‚’設定ã™ã‚‹
    æ§‹æ–‡:CustomLog file|pipe format|nickname [env=[!]environment-variable]
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Base
    モジュール:mod_log_config

    CustomLog ディレクティブã¯ã‚µãƒ¼ãƒã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ ログåŽé›†ã™ã‚‹ãŸã‚ã«ä½¿ã‚れã¾ã™ã€‚ãƒ­ã‚°ã®æ›¸å¼ãŒæŒ‡å®šã•れ〠環境変数を使ã£ã¦ãƒ­ã‚®ãƒ³ã‚°ãŒæ¡ä»¶ã«å¿œã˜ã¦è¡Œãªã‚れるよã†ã«ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    ãƒ­ã‚°ãŒæ›¸ã‹ã‚Œã‚‹å ´æ‰€ã‚’指定ã™ã‚‹æœ€åˆã®å¼•æ•°ã¯ä»¥ä¸‹ã®äºŒã¤ã®å½¢å¼ã®å€¤ã‚’ ã¨ã‚‹ã“ã¨ãŒã§ãã¾ã™:

    file
    ServerRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã§è¡¨ã•れるファイルå。
    pipe
    パイプ文字 "|" ã¨ã€ãã®å¾Œã«æ¨™æº–入力ã‹ã‚‰ãƒ­ã‚°ã® 情報をå—ã‘ã¨ã‚‹ãƒ—ログラムã¸ã®ãƒ‘スãŒç¶šã„ãŸã‚‚ã®ã€‚

    セキュリティ

    ã‚‚ã—プログラムãŒä½¿ç”¨ã•れãŸå ´åˆã€ httpd ãŒèµ·å‹•ã•れãŸãƒ¦ãƒ¼ã‚¶ã¨ã—ã¦å®Ÿè¡Œã•れã¾ã™ã€‚ã“れã¯ã‚µãƒ¼ãƒãŒ root ã«ã‚ˆã£ã¦èµ·å‹•ã•れãŸå ´åˆã¯ root ã«ãªã‚Šã¾ã™ã€‚プログラム㌠安全ã§ã‚るよã†ã«ç•™æ„ã—ã¦ãã ã•ã„。

    注

    Unix ã§ãªã„プラットフォームã§ãƒ•ァイルã®ãƒ‘スを入力ã—ã¦ã„ã‚‹ã¨ãã¯ã€ 使用ã—ã¦ã„るプラットフォームãŒãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã®ä½¿ç”¨ã‚’許å¯ã—ã¦ã„㟠ã¨ã—ã¦ã€é€šå¸¸ã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã ã‘を使ã†ã‚ˆã†ã«æ°—ã‚’ã¤ã‘ã¦ãã ã•ã„。 一般的ã«ã€è¨­å®šãƒ•ァイル中ã§ã¯å¸¸ã«æ™®é€šã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã®ã¿ã‚’使ã†ã‚ˆã†ã«ã™ã‚‹ æ–¹ãŒè‰¯ã„ã§ã™ã€‚

    二ã¤ã‚ã®å¼•æ•°ã¯ãƒ­ã‚°ãƒ•ァイルã«ä½•ãŒæ›¸ã‹ã‚Œã‚‹ã‹ã‚’指定ã—ã¾ã™ã€‚ å‰ã«ã‚ã‚‹ LogFormat ディレクティブã«ã‚ˆã‚Š å®šç¾©ã•れ㟠nickname ã‹ã€ãƒ­ã‚°ã®æ›¸å¼ ã®ã¨ã“ã‚ã§èª¬æ˜Žã•れã¦ã„ã‚‹ã€æ˜Žç¤ºçš„㪠format 文字列㮠ã©ã¡ã‚‰ã‹ã‚’指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    例ãˆã°ã€ä»¥ä¸‹ã®äºŒã¤ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–群ã¯å…¨ãåŒã˜åŠ¹æžœã‚’ã‚‚ãŸã‚‰ã—ã¾ã™:

    # CustomLog with format nickname
    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    CustomLog logs/access_log common

    # CustomLog with explicit format string
    CustomLog logs/access_log "%h %l %u %t \"%r\" %>s %b"

    三ã¤ç›®ã®å¼•æ•°ã¯çœç•¥å¯èƒ½ã§ã€ã‚µãƒ¼ãƒã®ç’°å¢ƒã«ã‚る変数ãŒã‚ã‚‹ã‹ãªã„ã‹ã« 応ã˜ã¦ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ログåŽé›†ã™ã‚‹ã‹ã©ã†ã‹ã‚’制御ã™ã‚‹ãŸã‚ã«ä½¿ã†ã“ã¨ãŒã§ãã¾ã™ã€‚ 指定ã•れãŸç’°å¢ƒå¤‰æ•°ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—㦠設定ã•れã¦ã„ãŸå ´åˆ ('env=!name' æ–‡ãŒä½¿ã‚れãŸã¨ã㯠設定ã•れã¦ã„ãªã„å ´åˆ)ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒãƒ­ã‚°åŽé›†ã•れã¾ã™ã€‚

    環境変数㯠mod_setenvif モジュール㨠mod_rewrite モジュールã®ä¸¡æ–¹ã‚‚ã—ã㯠片方を用ã„ã¦ãƒªã‚¯ã‚¨ã‚¹ãƒˆã”ã¨ã«è¨­å®šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ 例ãˆã°ã€ã‚µãƒ¼ãƒã«ã‚ã‚‹ã™ã¹ã¦ã® GIF ç”»åƒã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’別ã®ãƒ­ã‚°ãƒ•ァイル ã«ã¯è¨˜éŒ²ã—ãŸã„ã‘れã©ã€ãƒ¡ã‚¤ãƒ³ãƒ­ã‚°ã«ã¯è¨˜éŒ²ã—ãŸããªã„ã€ã¨ã„ã†ã¨ã㯠以下ã®ã‚‚ã®ã‚’使ã†ã“ã¨ãŒã§ãã¾ã™:

    SetEnvIf Request_URI \.gif$ gif-image
    CustomLog gif-requests.log common env=gif-image
    CustomLog nongif-requests.log common env=!gif-image

    å¤ã„ RefererIgnore ディレクティブã¨åŒã˜æŒ™å‹•ã‚’ã•ã›ãŸã„å ´åˆã¯ã€ 次ã®ã‚ˆã†ã«ã—ã¾ã™:

    SetEnvIf Referer example\.com localreferer
    CustomLog referer.log referer env=!localreferer

    top

    GlobalLog ディレクティブ

    説明:Sets filename and format of log file
    æ§‹æ–‡:GlobalLogfile|pipe format|nickname [env=[!]environment-variable| expr=expression]
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Base
    モジュール:mod_log_config
    äº’æ›æ€§:Available in Apache HTTP Server 2.4.19 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    LogFormat ディレクティブ

    説明:ログファイルã§ä½¿ç”¨ã™ã‚‹æ›¸å¼ã‚’設定ã™ã‚‹
    æ§‹æ–‡:LogFormat format|nickname [nickname]
    デフォルト:LogFormat "%h %l %u %t \"%r\" %>s %b"
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Base
    モジュール:mod_log_config

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ãƒ•ã‚¡ã‚¤ãƒ«ã®æ›¸å¼ã‚’指定ã—ã¾ã™ã€‚

    LogFormat ディレクティブã¯äºŒã¤ã®å½¢å¼ã®ã©ã¡ã‚‰ã‹ã‚’ ã¨ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚最åˆã®å½¢å¼ã§ã¯ä¸€ã¤ã®å¼•æ•°ã®ã¿ãŒæŒ‡å®šã•れ〠続ã TransferLog ã§æŒ‡å®šã•れãŸãƒ­ã‚°ã§ä½¿ã‚ã‚Œã‚‹ãƒ­ã‚°ã®æ›¸å¼ã‚’設定ã—ã¾ã™ã€‚ã“ã®å˜ç‹¬ã®å¼•æ•°ã§ã¯ 上ã®ã‚«ã‚¹ã‚¿ãƒ ãƒ­ã‚°æ›¸å¼ã§èª¬æ˜Žã•れã¦ã„るよã†ã« format ã‚’æ˜Žç¤ºçš„ã«æŒ‡å®šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã‚‚ã—ãã¯ã€ä¸‹ã§èª¬æ˜Žã•れã¦ã„るよã†ã«å‰ã« LogFormat ディレクティブã§å®šç¾©ã•れãŸãƒ­ã‚°ã®æ›¸å¼ã‚’ nicknameを使ã£ã¦ å‚ç…§ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    LogFormat ディレクティブã®äºŒã¤ã‚ã®å½¢å¼ã¯ format ã« nickname を与ãˆã¾ã™ã€‚ フォーマット文字列全体をå†ã³æ›¸ãã‹ã‚りã«ã€ ã“ã® nickname ã‚’ç¶šãã® LogFormat ディレクティブや CustomLog ディレクティブã§ä½¿ã†ã“ã¨ãŒã§ãã¾ã™ã€‚ Nickname を定義ã™ã‚‹ LogFormat ディレクティブ㯠他ã«ã¯ä½•ã‚‚ã—ã¾ã›ã‚“ -- ã™ãªã‚ã¡ã€ãƒ‹ãƒƒã‚¯ãƒãƒ¼ãƒ ã‚’定義 ã™ã‚‹ã ã‘ã§ã€å®Ÿéš›ã«æ›¸å¼ã‚’é©ç”¨ã—ã¦ãƒ‡ãƒ•ォルトã«ã™ã‚‹ã¨ã„ã†ã“ã¨ã¯è¡Œãªã„ã¾ã›ã‚“。 ã§ã™ã‹ã‚‰ã€ã“れã¯ç¶šã TransferLog ディレクティブã«ã¯å½±éŸ¿ã‚’与ãˆã¾ã›ã‚“。 ã•らã«ã€LogFormat ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯æ—¢å­˜ã® nickname ã‚’ 使ã£ã¦åˆ¥ã® nickname を定義ã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“。Nickname ã«ã¯ ãƒ‘ãƒ¼ã‚»ãƒ³ãƒˆè¨˜å· (%) ãŒå«ã¾ã‚Œã¦ã„ã¦ã¯ã„ã‘ãªã„ã“ã¨ã«ã‚‚æ³¨æ„ ã—ã¦ãã ã•ã„。

    例

    LogFormat "%v %h %l %u %t \"%r\" %>s %b" vhost_common

    top

    TransferLog ディレクティブ

    説明:ログファイルã®ä½ç½®ã‚’指定
    æ§‹æ–‡:TransferLog file|pipe
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Base
    モジュール:mod_log_config

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ãƒ­ã‚°æ›¸å¼ã‚’直接指定ã§ããªã„ã“ã¨ã¨ã€ æ¡ä»¶ä»˜ãロギングãŒç„¡ã„ã“ã¨ã‚’除ãã¨ã€CustomLog ã¨å…¨ãåŒã˜å¼•æ•°ã¨åŠ¹æžœãŒã‚りã¾ã™ã€‚ 直接ログ書å¼ã‚’指定ã™ã‚‹ä»£ã‚りã«ã€ãƒ­ã‚°ã®æ›¸å¼ã¯ãã“ã¾ã§ã§ä¸€ç•ªæœ€å¾Œã«æŒ‡å®šã•れ㟠ニックãƒãƒ¼ãƒ ã‚’定義ã—ãªã„ LogFormat ディレクティブ ã§å®šç¾©ã•れãŸã‚‚ã®ã‚’使ã„ã¾ã™ã€‚ ã‚‚ã—ä»–ã®æ›¸å¼ãŒå…¨ã指定ã•れã¦ã„ãªã„ã¨ã㯠Common Log Format ãŒä½¿ã‚れã¾ã™ã€‚

    例

    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\""
    TransferLog logs/access_log

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_logio.html.ko.euc-kr0000644000000000000500000002235713412755316020673 0ustar rootsrc mod_logio - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_logio

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:¿äû´ç ÀÔÃâ·Â ¹ÙÀÌÆ®¼ö¸¦ ±â·Ï
    »óÅÂ:Extension
    ¸ðµâ¸í:logio_module
    ¼Ò½ºÆÄÀÏ:mod_logio.c

    ¿ä¾à

    ÀÌ ¸ðµâÀº ¿äû´ç ÀÔÃâ·Â ¹ÙÀÌÆ®¼ö¸¦ ±â·ÏÇÑ´Ù. ¼ýÀÚ´Â ³×Æ®¿÷¿¡¼­ ½ÇÁ¦·Î ÁÖ°í¹ÞÀº ¹ÙÀÌÆ®¼ö¸¦ ³ªÅ¸³»¸ç, ¿äû°ú ÀÀ´äÀÇ Çì´õ¿Í ³»¿ëÀ» Æ÷ÇÔÇÑ´Ù. °³¼ö´Â ÀÔ·ÂÀÇ °æ¿ì SSL/TLS ÀÌÀü¿¡, Ãâ·ÂÀÇ °æ¿ì SSL/TLS ÀÌÈÄ¿¡ ¼¼±â¶§¹®¿¡ ¾ÏȣȭÀÇ °á°úµµ ¿Ã¹Ù·Î ¹Ý¿µµÈ´Ù.

    ÀÌ ¸ðµâÀ» »ç¿ëÇÏ·Á¸é mod_log_configÀÌ ÇÊ¿äÇÏ´Ù.

    top

    »ç¿ëÀÚÁ¤ÀÇ ·Î±× Çü½Ä

    ÀÌ ¸ðµâÀº µÎ°¡Áö »õ·Î¿î ·Î±×Áö½Ã¾î¸¦ Ãß°¡ÇÑ´Ù. ¿äûÀÚüÀÇ Æ¯¼ºÀº Çü½Ä¹®ÀÚ¿­¿¡ "%" Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ±â·ÏÇÑ´Ù. Áö½Ã¾î´Â ·Î±×ÆÄÀÏ¿¡ ´ÙÀ½°ú °°Àº °ªÀ» ±â·ÏÇÑ´Ù:

    Çü½Ä¹®ÀÚ¿­ ¼³¸í
    %...I ¿äû°ú Çì´õ¸¦ Æ÷ÇÔÇÏ¿© ¹ÞÀº ¹ÙÀÌÆ®¼ö. 0ÀÏ ¼ö ¾ø´Ù.
    %...O Çì´õ¸¦ Æ÷ÇÔÇÏ¿© º¸³½ ¹ÙÀÌÆ®¼ö. 0ÀÏ ¼ö ¾ø´Ù.

    º¸Åë ´ÙÀ½°ú °°ÀÌ »ç¿ëÇÑ´Ù:

    °áÇÕµÈ ÀÔÃâ·Â ·Î±× Çü½Ä:
    "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %I %O"
    top

    LogIOTrackTTFB Áö½Ã¾î

    ¼³¸í:Enable tracking of time to first byte (TTFB)
    ¹®¹ý:LogIOTrackTTFB ON|OFF
    ±âº»°ª:LogIOTrackTTFB OFF
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:All
    »óÅÂ:Extension
    ¸ðµâ:mod_logio
    Áö¿ø:Apache HTTP Server 2.4.13 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cache_disk.html.en0000644000000000000500000005015513412755316020440 0ustar rootsrc mod_cache_disk - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_cache_disk

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Disk based storage module for the HTTP caching filter.
    Status:Extension
    Module Identifier:cache_disk_module
    Source File:mod_cache_disk.c

    Summary

    mod_cache_disk implements a disk based storage manager for mod_cache.

    The headers and bodies of cached responses are stored separately on disk, in a directory structure derived from the md5 hash of the cached URL.

    Multiple content negotiated responses can be stored concurrently, however the caching of partial content is not yet supported by this module.

    Atomic cache updates to both header and body files are achieved without the need for locking by storing the device and inode numbers of the body file within the header file. This has the side effect that cache entries manually moved into the cache will be ignored.

    The htcacheclean tool is provided to list cached URLs, remove cached URLs, or to maintain the size of the disk cache within size and/or inode limits. The tool can be run on demand, or can be daemonized to offer continuous monitoring of directory sizes.

    Note:

    mod_cache_disk requires the services of mod_cache, which must be loaded before mod_cache_disk.

    Note:

    mod_cache_disk uses the sendfile feature to serve files from the cache when supported by the platform, and when enabled with EnableSendfile. However, per-directory and .htaccess configuration of EnableSendfile are ignored by mod_cache_disk as the corresponding settings are not available to the module when a request is being served from the cache.

    top

    CacheDirLength Directive

    Description:The number of characters in subdirectory names
    Syntax:CacheDirLength length
    Default:CacheDirLength 2
    Context:server config, virtual host
    Status:Extension
    Module:mod_cache_disk

    The CacheDirLength directive sets the number of characters for each subdirectory name in the cache hierarchy. It can be used in conjunction with CacheDirLevels to determine the approximate structure of your cache hierarchy.

    A high value for CacheDirLength combined with a low value for CacheDirLevels will result in a relatively flat hierarchy, with a large number of subdirectories at each level.

    The result of CacheDirLevels* CacheDirLength must not be higher than 20.

    top

    CacheDirLevels Directive

    Description:The number of levels of subdirectories in the cache.
    Syntax:CacheDirLevels levels
    Default:CacheDirLevels 2
    Context:server config, virtual host
    Status:Extension
    Module:mod_cache_disk

    The CacheDirLevels directive sets the number of subdirectory levels in the cache. Cached data will be saved this many directory levels below the CacheRoot directory.

    A high value for CacheDirLevels combined with a low value for CacheDirLength will result in a relatively deep hierarchy, with a small number of subdirectories at each level.

    The result of CacheDirLevels* CacheDirLength must not be higher than 20.

    top

    CacheMaxFileSize Directive

    Description:The maximum size (in bytes) of a document to be placed in the cache
    Syntax:CacheMaxFileSize bytes
    Default:CacheMaxFileSize 1000000
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache_disk

    The CacheMaxFileSize directive sets the maximum size, in bytes, for a document to be considered for storage in the cache.

    CacheMaxFileSize 64000
    top

    CacheMinFileSize Directive

    Description:The minimum size (in bytes) of a document to be placed in the cache
    Syntax:CacheMinFileSize bytes
    Default:CacheMinFileSize 1
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache_disk

    The CacheMinFileSize directive sets the minimum size, in bytes, for a document to be considered for storage in the cache.

    CacheMinFileSize 64
    top

    CacheReadSize Directive

    Description:The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    Syntax:CacheReadSize bytes
    Default:CacheReadSize 0
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache_disk

    The CacheReadSize directive sets the minimum amount of data, in bytes, to be read from the backend before the data is sent to the client. The default of zero causes all data read of any size to be passed downstream to the client immediately as it arrives. Setting this to a higher value causes the disk cache to buffer at least this amount before sending the result to the client. This can improve performance when caching content from a reverse proxy.

    This directive only takes effect when the data is being saved to the cache, as opposed to data being served from the cache.

    CacheReadSize 102400
    top

    CacheReadTime Directive

    Description:The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    Syntax:CacheReadTime milliseconds
    Default:CacheReadTime 0
    Context:server config, virtual host, directory, .htaccess
    Status:Extension
    Module:mod_cache_disk

    The CacheReadTime directive sets the minimum amount of elapsed time that should pass before making an attempt to send data downstream to the client. During the time period, data will be buffered before sending the result to the client. This can improve performance when caching content from a reverse proxy.

    The default of zero disables this option.

    This directive only takes effect when the data is being saved to the cache, as opposed to data being served from the cache. It is recommended that this option be used alongside the CacheReadSize directive to ensure that the server does not buffer excessively should data arrive faster than expected.

    CacheReadTime 1000
    top

    CacheRoot Directive

    Description:The directory root under which cache files are stored
    Syntax:CacheRoot directory
    Context:server config, virtual host
    Status:Extension
    Module:mod_cache_disk

    The CacheRoot directive defines the name of the directory on the disk to contain cache files. If the mod_cache_disk module has been loaded or compiled in to the Apache server, this directive must be defined. Failing to provide a value for CacheRoot will result in a configuration file processing error. The CacheDirLevels and CacheDirLength directives define the structure of the directories under the specified root directory.

    CacheRoot c:/cacheroot

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_ext_filter.html0000644000000000000500000000063713362070302020114 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_ext_filter.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_ext_filter.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_ext_filter.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_ext_filter.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/quickreference.html.ko.euc-kr0000644000000000000500000054640713523273316021723 0ustar rootsrc Áö½Ã¾î ºü¸¥ÂüÁ¶ - Apache HTTP Server Version 2.4
    <-

    Áö½Ã¾î ºü¸¥ÂüÁ¶

    °¡´ÉÇÑ ¾ð¾î:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.

    ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡ ¼³Á¤Áö½Ã¾î °¢°¢ÀÇ ¿ëµµ, ±âº»°ª, »óÅÂ, »ç¿ëÀå¼Ò¸¦ º¸¿©ÁØ´Ù. À̵éÀº Áö½Ã¾î »çÀü¿¡¼­ ¼³¸íÇÑ´Ù.

    ù¹øÂ° ¿­Àº Áö½Ã¾î À̸§°ú ¿ëµµ¸¦ ¾Ë·ÁÁØ´Ù. µÎ¹øÂ° ¿­Àº Áö½Ã¾î¿¡ ±âº»°ªÀÌ ÀÖ´Ù¸é ±âº»°ªÀ» º¸¿©ÁØ´Ù. ¸¸¾à ±âº»°ªÀÌ ³Ê¹« ±æ´Ù¸é, "+" ±âÈ£·Î »ý·«ÇßÀ½À» ¾Ë¸°´Ù.

    ¼¼¹øÂ°¿Í ³×¹øÂ° ¿­Àº °¢°¢ ¾Æ·¡ Ç¥¿¡ µû¶ó Áö½Ã¾î¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Â Àå¼Ò¿Í Áö½Ã¾îÀÇ »óŸ¦ ³ªÅ¸³½´Ù.

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 
    sÁÖ¼­¹ö¼³Á¤
    v°¡»óÈ£½ºÆ®
    ddirectory
    h.htaccess
    CCore
    MMPM
    BBase
    EExtension
    XExperimental
    TExternal
    AcceptFilter protocol accept_filtersC
    Configures optimizations for a Protocol's Listener Sockets
    AcceptPathInfo On|Off|Default Default svdhC
    Resources accept trailing pathname information
    AccessFileName filename [filename] ... .htaccess svC
    Name of the distributed configuration file
    Action action-type cgi-script [virtual]svdhB
    ƯÁ¤ Çڵ鷯³ª content-type¿¡ ´ëÇØ CGI ½ºÅ©¸³Æ®¸¦ »ç¿ëÇÑ´Ù
    AddAlt string file [file] ...svdhB
    ÆÄÀϸíÀ¸·Î ¼±ÅÃÇÑ ¾ÆÀÌÄÜ´ë½Å »ç¿ëÇÒ ÆÄÀÏ ¼³¸í±Û
    AddAltByEncoding string MIME-encoding [MIME-encoding] ...svdhB
    MIME-encodingÀ¸·Î ¼±ÅÃÇÑ ¾ÆÀÌÄÜ´ë½Å »ç¿ëÇÒ ÆÄÀÏ ¼³¸í±Û
    AddAltByType string MIME-type [MIME-type] ...svdhB
    MIME content-typeÀ¸·Î ¼±ÅÃÇÑ ¾ÆÀÌÄÜ´ë½Å »ç¿ëÇÒ ÆÄÀÏ ¼³¸í±Û
    AddCharset charset extension [extension] ...svdhB
    Maps the given filename extensions to the specified content charset
    AddDefaultCharset On|Off|charset Off svdhC
    Default charset parameter to be added when a response content-type is text/plain or text/html
    AddDescription string file [file] ...svdhB
    ÆÄÀÏ¿¡ ´ëÇÑ ¼³¸í
    AddEncoding encoding extension [extension] ...svdhB
    Maps the given filename extensions to the specified encoding type
    AddHandler handler-name extension [extension] ...svdhB
    Maps the filename extensions to the specified handler
    AddIcon icon name [name] ...svdhB
    À̸§À¸·Î ¼±ÅÃÇÑ ÆÄÀÏ¿¡ »ç¿ëÇÒ ¾ÆÀÌÄÜ
    AddIconByEncoding icon MIME-encoding [MIME-encoding] ...svdhB
    MIME content-encodingÀ¸·Î ¼±ÅÃÇÑ ÆÄÀÏ¿¡ »ç¿ëÇÒ ¾ÆÀÌÄÜ
    AddIconByType icon MIME-type [MIME-type] ...svdhB
    MIME content-typeÀ¸·Î ¼±ÅÃÇÑ ÆÄÀÏ¿¡ »ç¿ëÇÒ ¾ÆÀÌÄÜ
    AddInputFilter filter[;filter...] extension [extension] ...svdhB
    Maps filename extensions to the filters that will process client requests
    AddLanguage language-tag extension [extension] ...svdhB
    Maps the given filename extension to the specified content language
    AddModuleInfo module-name stringsvE
    ¸ðµâ¿¡ ´ëÇÑ Ãß°¡ Á¤º¸¸¦ server-info Çڵ鷯°¡ º¸¿©ÁÖµµ·Ï Ãß°¡ÇÑ´Ù
    AddOutputFilter filter[;filter...] extension [extension] ...svdhB
    Maps filename extensions to the filters that will process responses from the server
    AddOutputFilterByType filter[;filter...] media-type [media-type] ...svdhB
    assigns an output filter to a particular media-type
    AddType media-type extension [extension] ...svdhB
    Maps the given filename extensions onto the specified content type
    Alias URL-path file-path|directory-pathsvB
    URLÀ» ƯÁ¤ ÆÄÀϽýºÅÛ Àå¼Ò·Î ´ëÀÀÇÑ´Ù
    AliasMatch regex file-path|directory-pathsvB
    Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÏ¿© URLÀ» ÆÄÀϽýºÅÛ Àå¼Ò·Î ´ëÀÀÇÑ´Ù
    Allow from all|host|env=[!]env-variable [host|env=[!]env-variable] ...dhE
    Controls which hosts can access an area of the server
    AllowCONNECT port[-port] [port[-port]] ... 443 563 svE
    Ports that are allowed to CONNECT through the proxy
    AllowEncodedSlashes On|Off|NoDecode Off svC
    Determines whether encoded path separators in URLs are allowed to be passed through
    AllowMethods reset|HTTP-method [HTTP-method]... reset dX
    Restrict access to the listed HTTP methods
    AllowOverride All|None|directive-type [directive-type] ... None (2.3.9 and lat +dC
    Types of directives that are allowed in .htaccess files
    AllowOverrideList None|directive [directive-type] ... None dC
    Individual directives that are allowed in .htaccess files
    Anonymous user [user] ...dhE
    ¾ÏÈ£°Ë»ç¾øÀÌ Á¢±ÙÀ» Çã¿ëÇÒ »ç¿ëÀÚ ¾ÆÀ̵ðµéÀ» ÁöÁ¤ÇÑ´Ù
    Anonymous_LogEmail On|Off On dhE
    ÀÔ·ÂÇÑ ¾ÏÈ£¸¦ ¿À·ù·Î±×¿¡ ±â·ÏÇÒÁö ¿©ºÎ
    Anonymous_MustGiveEmail On|Off On dhE
    ¾ÏÈ£°¡ ¾ø¾îµµ °¡´ÉÇÑÁö ¿©ºÎ
    Anonymous_NoUserID On|Off Off dhE
    »ç¿ëÀÚ ¾ÆÀ̵𰡠¾ø¾îµµ °¡´ÉÇÏÁö ¿©ºÎ
    Anonymous_VerifyEmail On|Off Off dhE
    ¾ÏÈ£°¡ ¿Ã¹Ù¸¥ Çü½ÄÀÇ ÀüÀÚ¿ìÆí ÁÖ¼ÒÀÎÁö °Ë»ç ¿©ºÎ
    AsyncRequestWorkerFactor factorsM
    Limit concurrent connections per process
    AuthBasicAuthoritative On|Off On dhB
    ÀÎÁõ°ú ±ÇÇѺο©¸¦ Àú¼öÁØ ¸ðµâ¿¡ ³Ñ°ÜÁÙÁö °áÁ¤ÇÑ´Ù
    AuthBasicFake off|username [password]dhB
    Fake basic authentication using the given expressions for username and password
    AuthBasicProvider On|Off|provider-name [provider-name] ... On dhB
    ÀÌ À§Ä¡¿¡ ´ëÇÑ ÀÎÁõÁ¦°øÀÚ¸¦ ÁöÁ¤ÇÑ´Ù
    AuthBasicUseDigestAlgorithm MD5|Off Off dhB
    Check passwords against the authentication providers as if Digest Authentication was in force instead of Basic Authentication.
    AuthDBDUserPWQuery querydE
    SQL query to look up a password for a user
    AuthDBDUserRealmQuery querydE
    SQL query to look up a password hash for a user and realm.
    AuthDBMGroupFile file-pathdhE
    ÀÎÁõ¿¡ »ç¿ëÇÒ »ç¿ëÀÚ ±×·ì ¸ñ·ÏÀ» ÀúÀåÇÏ´Â µ¥ÀÌÅͺ£À̽º ÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù
    AuthDBMType default|SDBM|GDBM|NDBM|DB default dhE
    ¾ÏÈ£¸¦ ÀúÀåÇÏ´Â µ¥ÀÌÅͺ£À̽º ÆÄÀÏ Á¾·ù¸¦ ÁöÁ¤ÇÑ´Ù
    AuthDBMUserFile file-pathdhE
    ÀÎÁõÇÒ »ç¿ëÀÚ¿Í ¾ÏÈ£ ¸ñ·ÏÀ» ÀúÀåÇÏ´Â µ¥ÀÌÅͺ£À̽º ÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù
    AuthDigestAlgorithm MD5|MD5-sess MD5 dhX
    digest authentication¿¡¼­ challenge¿Í response hash¸¦ °è»êÇÏ´Â ¾Ë°í¸®ÁòÀ» ¼±ÅÃÇÑ´Ù
    AuthDigestDomain URI [URI] ...dhX
    digest authentication¿¡¼­ °°Àº º¸È£¿µ¿ª¿¡ ¼ÓÇÏ´Â URIµé
    AuthDigestNonceLifetime seconds 300 dhX
    ¼­¹ö nonce°¡ À¯È¿ÇÑ ±â°£
    AuthDigestProvider On|Off|provider-name [provider-name] ... On dhX
    ÀÌ À§Ä¡¿¡ ´ëÇÑ ÀÎÁõÁ¦°øÀÚ¸¦ ÁöÁ¤ÇÑ´Ù
    AuthDigestQop none|auth|auth-int [auth|auth-int] auth dhX
    digest authentication°¡ »ç¿ëÇÒ º¸È£¼öÁØ(quality-of-protection)À» ÁöÁ¤ÇÑ´Ù.
    AuthDigestShmemSize size 1000 sX
    Ŭ¶óÀÌ¾ðÆ®¸¦ ÃßÀûÇϱâÀ§ÇØ ÇÒ´çÇÏ´Â °øÀ¯¸Þ¸ð¸®·®
    AuthFormAuthoritative On|Off On dhB
    Sets whether authorization and authentication are passed to lower level modules
    AuthFormBody fieldnamedB
    The name of a form field carrying the body of the request to attempt on successful login
    AuthFormDisableNoStore On|Off Off dB
    Disable the CacheControl no-store header on the login page
    AuthFormFakeBasicAuth On|Off Off dB
    Fake a Basic Authentication header
    AuthFormLocation fieldnamedB
    The name of a form field carrying a URL to redirect to on successful login
    AuthFormLoginRequiredLocation urldB
    The URL of the page to be redirected to should login be required
    AuthFormLoginSuccessLocation urldB
    The URL of the page to be redirected to should login be successful
    AuthFormLogoutLocation uridB
    The URL to redirect to after a user has logged out
    AuthFormMethod fieldnamedB
    The name of a form field carrying the method of the request to attempt on successful login
    AuthFormMimetype fieldnamedB
    The name of a form field carrying the mimetype of the body of the request to attempt on successful login
    AuthFormPassword fieldnamedB
    The name of a form field carrying the login password
    AuthFormProvider provider-name [provider-name] ... file dhB
    Sets the authentication provider(s) for this location
    AuthFormSitePassphrase secretdB
    Bypass authentication checks for high traffic sites
    AuthFormSize sizedB
    The largest size of the form in bytes that will be parsed for the login details
    AuthFormUsername fieldnamedB
    The name of a form field carrying the login username
    AuthGroupFile file-pathdhB
    ÀÎÁõ¿¡ »ç¿ëÇÒ »ç¿ëÀÚ ±×·ì ¸ñ·ÏÀ» ÀúÀåÇÏ´Â ¹®ÀÚÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù
    AuthLDAPAuthorizePrefix prefix AUTHORIZE_ dhE
    Specifies the prefix for environment variables set during authorization
    AuthLDAPBindAuthoritative off|on on dhE
    Determines if other authentication providers are used when a user can be mapped to a DN but the server cannot successfully bind with the user's credentials.
    AuthLDAPBindDN distinguished-namedhE
    Optional DN to use in binding to the LDAP server
    AuthLDAPBindPassword passworddhE
    Password used in conjunction with the bind DN
    AuthLDAPCharsetConfig file-pathsE
    Language to charset conversion configuration file
    AuthLDAPCompareAsUser on|off off dhE
    Use the authenticated user's credentials to perform authorization comparisons
    AuthLDAPCompareDNOnServer on|off on dhE
    Use the LDAP server to compare the DNs
    AuthLDAPDereferenceAliases never|searching|finding|always always dhE
    When will the module de-reference aliases
    AuthLDAPGroupAttribute attribute member uniqueMember +dhE
    LDAP attributes used to identify the user members of groups.
    AuthLDAPGroupAttributeIsDN on|off on dhE
    Use the DN of the client username when checking for group membership
    AuthLDAPInitialBindAsUser off|on off dhE
    Determines if the server does the initial DN lookup using the basic authentication users' own username, instead of anonymously or with hard-coded credentials for the server
    AuthLDAPInitialBindPattern regex substitution (.*) $1 (remote use +dhE
    Specifies the transformation of the basic authentication username to be used when binding to the LDAP server to perform a DN lookup
    AuthLDAPMaxSubGroupDepth Number 10 dhE
    Specifies the maximum sub-group nesting depth that will be evaluated before the user search is discontinued.
    AuthLDAPRemoteUserAttribute uiddhE
    Use the value of the attribute returned during the user query to set the REMOTE_USER environment variable
    AuthLDAPRemoteUserIsDN on|off off dhE
    Use the DN of the client username to set the REMOTE_USER environment variable
    AuthLDAPSearchAsUser on|off off dhE
    Use the authenticated user's credentials to perform authorization searches
    AuthLDAPSubGroupAttribute attribute member uniqueMember +dhE
    Specifies the attribute labels, one value per directive line, used to distinguish the members of the current group that are groups.
    AuthLDAPSubGroupClass LdapObjectClass groupOfNames groupO +dhE
    Specifies which LDAP objectClass values identify directory objects that are groups during sub-group processing.
    AuthLDAPURL url [NONE|SSL|TLS|STARTTLS]dhE
    URL specifying the LDAP search parameters
    AuthMerging Off | And | Or Off dhB
    Controls the manner in which each configuration section's authorization logic is combined with that of preceding configuration sections.
    AuthName auth-domaindhB
    Authorization realm for use in HTTP authentication
    AuthnCacheContext directory|server|custom-stringdB
    Specify a context string for use in the cache key
    AuthnCacheEnablesB
    Enable Authn caching configured anywhere
    AuthnCacheProvideFor authn-provider [...]dhB
    Specify which authn provider(s) to cache for
    AuthnCacheSOCache provider-name[:provider-args]sB
    Select socache backend provider to use
    AuthnCacheTimeout timeout (seconds)dhB
    Set a timeout for cache entries
    <AuthnProviderAlias baseProvider Alias> ... </AuthnProviderAlias>sB
    Enclose a group of directives that represent an extension of a base authentication provider and referenced by the specified alias
    AuthnzFcgiCheckAuthnProvider provider-name|None option ...dE
    Enables a FastCGI application to handle the check_authn authentication hook.
    AuthnzFcgiDefineProvider type provider-name backend-addresssE
    Defines a FastCGI application as a provider for authentication and/or authorization
    AuthType None|Basic|Digest|FormdhB
    Type of user authentication
    AuthUserFile file-pathdhB
    ÀÎÁõÇÒ »ç¿ëÀÚ¸í¿Í ¾ÏÈ£ ¸ñ·ÏÀ» ÀúÀåÇÏ´Â ¹®ÀÚÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù
    AuthzDBDLoginToReferer On|Off Off dE
    Determines whether to redirect the Client to the Referring page on successful login or logout if a Referer request header is present
    AuthzDBDQuery querydE
    Specify the SQL Query for the required operation
    AuthzDBDRedirectQuery querydE
    Specify a query to look up a login page for the user
    AuthzDBMType default|SDBM|GDBM|NDBM|DB default dhE
    ¾ÏÈ£¸¦ ÀúÀåÇÏ´Â µ¥ÀÌÅͺ£À̽º ÆÄÀÏ Á¾·ù¸¦ ÁöÁ¤ÇÑ´Ù
    <AuthzProviderAlias baseProvider Alias Require-Parameters> ... </AuthzProviderAlias> sB
    Enclose a group of directives that represent an extension of a base authorization provider and referenced by the specified alias
    AuthzSendForbiddenOnFailure On|Off Off dhB
    Send '403 FORBIDDEN' instead of '401 UNAUTHORIZED' if authentication succeeds but authorization fails
    BalancerGrowth # 5 svE
    Number of additional Balancers that can be added Post-configuration
    BalancerInherit On|Off On svE
    Inherit ProxyPassed Balancers/Workers from the main server
    BalancerMember [balancerurl] url [key=value [key=value ...]]dE
    Add a member to a load balancing group
    BalancerPersist On|Off Off svE
    Attempt to persist changes made by the Balancer Manager across restarts.
    BrotliAlterETag AddSuffix|NoChange|Remove AddSuffix svE
    How the outgoing ETag header should be modified during compression
    BrotliCompressionMaxInputBlock valuesvE
    Maximum input block size
    BrotliCompressionQuality value 5 svE
    Compression quality
    BrotliCompressionWindow value 18 svE
    Brotli sliding compression window size
    BrotliFilterNote [type] notenamesvE
    Places the compression ratio in a note for logging
    BrowserMatch regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    HTTP User-Agent¿¡ µû¶ó ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù
    BrowserMatchNoCase regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    ´ë¼Ò¹®ÀÚ¸¦ ±¸º°ÇÏÁö¾Ê°í User-Agent¿¡ µû¶ó ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù
    sB
    Buffer log entries in memory before writing to disk
    BufferSize integer 131072 svdhE
    Maximum size in bytes to buffer by the buffer filter
    CacheDefaultExpire seconds 3600 (one hour) svX
    ¸¸±â½Ã°£À» ÁöÁ¤ÇÏÁö¾ÊÀº ¹®¼­¸¦ ij½¬ÇÒ ±âº» ±â°£.
    svdhX
    Add an X-Cache-Detail header to the response.
    CacheDirLength length 2 svX
    ÇÏÀ§µð·ºÅ丮¸íÀÇ ¹®ÀÚ°³¼ö
    CacheDirLevels levels 3 svX
    ij½¬ÀÇ ÇÏÀ§µð·ºÅ丮 ±íÀÌ.
    CacheDisable url-stringsvX
    ƯÁ¤ URLÀ» ij½¬ÇÏÁö ¾Ê´Â´Ù
    CacheEnable cache_type url-stringsvX
    ÁöÁ¤ÇÑ ÀúÀå°ü¸®ÀÚ¸¦ »ç¿ëÇÏ¿© ÁöÁ¤ÇÑ URLÀ» ij½¬ÇÑ´Ù
    CacheFile file-path [file-path] ...sX
    ½ÃÀ۽à ¿©·¯ ÆÄÀÏ ÇÚµéÀ» ij½¬ÇÑ´Ù
    svdhX
    Add an X-Cache header to the response.
    CacheIgnoreCacheControl On|Off Off svX
    Ŭ¶óÀÌ¾ðÆ®°¡ ij½¬ÇÏÁö¾Ê´Â ³»¿ëÀ» ¿äûÇÔÀ» ¹«½ÃÇÑ´Ù.
    CacheIgnoreHeaders header-string [header-string] ... None svX
    ij½¬¿¡ ÁöÁ¤ÇÑ HTTP Çì´õ(µé)¸¦ ÀúÀåÇÏÁö ¾Ê´Â´Ù
    CacheIgnoreNoLastMod On|Off Off svX
    ÀÀ´ä¿¡ Last Modified Çì´õ°¡ ¾ø´Ù´Â »ç½ÇÀ» ¹«½ÃÇÑ´Ù.
    svX
    Ignore query string when caching
    svX
    Ignore defined session identifiers encoded in the URL when caching
    svX
    Override the base URL of reverse proxied cache keys.
    CacheLastModifiedFactor float 0.1 svX
    LastModified ½Ã°£À¸·Î ¸¸±â½Ã°£À» °è»êÇϴµ¥ »ç¿ëÇÏ´Â °è¼ö.
    svX
    Enable the thundering herd lock.
    svX
    Set the maximum possible age of a cache lock.
    svX
    Set the lock path directory.
    CacheMaxExpire seconds 86400 (ÇÏ·ç) svX
    ¹®¼­¸¦ ij½¬ÇÏ´Â ÃÊ´ÜÀ§ ÃÖ´ë½Ã°£
    CacheMaxFileSize bytes 1000000 svX
    ij½¬¿¡ ÀúÀåÇÒ ¹®¼­ÀÇ ÃÖ´ëÅ©±â (¹ÙÀÌÆ® ´ÜÀ§)
    svdhX
    The minimum time in seconds to cache a document
    CacheMinFileSize bytes 1 svX
    ij½¬¿¡ ÀúÀåÇÒ ¹®¼­ÀÇ ÃÖ¼ÒÅ©±â (¹ÙÀÌÆ® ´ÜÀ§)
    CacheNegotiatedDocs On|Off Off svB
    Allows content-negotiated documents to be cached by proxy servers
    svX
    Run the cache from the quick handler.
    svdhX
    The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    svdhX
    The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    CacheRoot directorysvX
    ij½¬ ÆÄÀÏÀ» ÀúÀåÇÒ µð·ºÅ丮 root
    CacheSocache type[:args]svE
    The shared object cache implementation to use
    CacheSocacheMaxSize bytes 102400 svdhE
    The maximum size (in bytes) of an entry to be placed in the cache
    CacheSocacheMaxTime seconds 86400 svdhE
    The maximum time (in seconds) for a document to be placed in the cache
    CacheSocacheMinTime seconds 600 svdhE
    The minimum time (in seconds) for a document to be placed in the cache
    CacheSocacheReadSize bytes 0 svdhE
    The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    CacheSocacheReadTime milliseconds 0 svdhE
    The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    svdhX
    Serve stale content in place of 5xx responses.
    svdhX
    Attempt to cache responses that the server reports as expired
    svdhX
    Attempt to cache requests or responses that have been marked as no-store.
    svdhX
    Attempt to cache responses that the server has marked as private
    CGIDScriptTimeout time[s|ms]svdhB
    The length of time to wait for more output from the CGI program
    CGIMapExtension cgi-path .extensiondhC
    Technique for locating the interpreter for CGI scripts
    CGIPassAuth On|Off Off dhC
    Enables passing HTTP authorization headers to scripts as CGI variables
    CGIVar variable ruledhC
    Controls how some CGI variables are set
    CharsetDefault charsetsvdhX
    º¯È¯ÇÒ ¹®ÀÚÁýÇÕ
    CharsetOptions option [option] ... DebugLevel=0 NoImpl +svdhX
    ¹®ÀÚÁýÇÕ º¯È¯ ±â´ÉÀ» ¼³Á¤
    CharsetSourceEnc charsetsvdhX
    ÆÄÀÏ ¿øº»ÀÇ ¹®ÀÚÁýÇÕ
    svdhE
    Limits the action of the speling module to case corrections
    CheckSpelling on|off Off svdhE
    ¸ÂÃã¹ý ¸ðµâÀ» »ç¿ëÇÑ´Ù
    ChrootDir /path/to/directorysB
    Directory for apache to run chroot(8) after startup.
    ContentDigest On|Off Off svdhC
    Enables the generation of Content-MD5 HTTP Response headers
    CookieDomain domainsvdhE
    The domain to which the tracking cookie applies
    CookieExpires expiry-periodsvdhE
    Expiry time for the tracking cookie
    CookieName token Apache svdhE
    Name of the tracking cookie
    CookieStyle Netscape|Cookie|Cookie2|RFC2109|RFC2965 Netscape svdhE
    Format of the cookie header field
    CookieTracking on|off off svdhE
    Enables tracking cookie
    CoreDumpDirectory directorysM
    Directory where Apache HTTP Server attempts to switch before dumping core
    CustomLog file|pipe format|nickname [env=[!]environment-variable]svB
    ·Î±×ÆÄÀÏ À̸§°ú Çü½ÄÀ» ÁöÁ¤ÇÑ´Ù
    Dav On|Off|provider-name Off dE
    WebDAV HTTP ¸Þ½áµå¸¦ ½ÃÀÛÇÑ´Ù
    DavDepthInfinity on|off off svdE
    PROPFINDÀÇ Depth: Infinity ¿äûÀ» Çã°¡ÇÑ´Ù
    DavGenericLockDB file-pathsvdE
    Location of the DAV lock database
    DavLockDB file-pathsvE
    DAV Àá±Ý µ¥ÀÌÅͺ£À̽º À§Ä¡
    DavMinTimeout seconds 0 svdE
    ¼­¹ö°¡ DAV ÀÚ¿ø¿¡ ´ëÇØ À¯ÁöÇÒ Àá±ÝÀÇ Ãּҽð£
    DBDExptime time-in-seconds 300 svE
    Keepalive time for idle connections
    DBDInitSQL "SQL statement"svE
    Execute an SQL statement after connecting to a database
    DBDKeep number 2 svE
    Maximum sustained number of connections
    DBDMax number 10 svE
    Maximum number of connections
    DBDMin number 1 svE
    Minimum number of connections
    DBDParams param1=value1[,param2=value2]svE
    Parameters for database connection
    DBDPersist On|OffsvE
    Whether to use persistent connections
    DBDPrepareSQL "SQL statement" labelsvE
    Define an SQL prepared statement
    DBDriver namesvE
    Specify an SQL driver
    DefaultIcon url-pathsvdhB
    ƯÁ¤ ¾ÆÀÌÄÜÀ» ¼³Á¤ÇÏÁö¾ÊÀº ÆÄÀÏ¿¡ »ç¿ëÇÒ ¾ÆÀÌÄÜ
    DefaultLanguage language-tagsvdhB
    Defines a default language-tag to be sent in the Content-Language header field for all resources in the current context that have not been assigned a language-tag by some other means.
    DefaultRuntimeDir directory-path DEFAULT_REL_RUNTIME +sC
    Base directory for the server run-time files
    DefaultType media-type|none none svdhC
    This directive has no effect other than to emit warnings if the value is not none. In prior versions, DefaultType would specify a default media type to assign to response content for which no other media type configuration could be found.
    Define parameter-name [parameter-value]svdC
    Define a variable
    DeflateBufferSize value 8096 svE
    zlibÀÌ Çѹø¿¡ ¾ÐÃàÇÒ Å©±â
    DeflateCompressionLevel valuesvE
    Ãâ·ÂÀ» ¾î´ÀÁ¤µµ ¾ÐÃàÇϴ°¡
    DeflateFilterNote [type] notenamesvE
    ¾ÐÃà·üÀ» ·Î±×¿¡ ±â·ÏÇÑ´Ù
    DeflateInflateLimitRequestBody valuesvdhE
    Maximum size of inflated request bodies
    DeflateInflateRatioBurst value 3 svdhE
    Maximum number of times the inflation ratio for request bodies can be crossed
    DeflateInflateRatioLimit value 200 svdhE
    Maximum inflation ratio for request bodies
    DeflateMemLevel value 9 svE
    zlibÀÌ ¾ÐÃàÇÒ¶§ »ç¿ëÇÏ´Â ¸Þ¸ð¸®·®
    DeflateWindowSize value 15 svE
    Zlib ¾ÐÃà window size
    Deny from all|host|env=[!]env-variable [host|env=[!]env-variable] ...dhE
    Controls which hosts are denied access to the server
    <Directory directory-path> ... </Directory>svC
    Enclose a group of directives that apply only to the named file-system directory, sub-directories, and their contents.
    DirectoryCheckHandler On|Off Off svdhB
    Toggle how this module responds when another handler is configured
    DirectoryIndex local-url [local-url] ... index.html svdhB
    Ŭ¶óÀÌ¾ðÆ®°¡ µð·ºÅ丮¸¦ ¿äûÇÒ¶§ ã¾Æº¼ ÀÚ¿ø ¸ñ·Ï
    DirectoryIndexRedirect on | off | permanent | temp | seeother | 3xx-code off svdhB
    Configures an external redirect for directory indexes.
    <DirectoryMatch regex> ... </DirectoryMatch>svC
    Enclose directives that apply to the contents of file-system directories matching a regular expression.
    DirectorySlash On|Off On svdhB
    ¸¶Áö¸· ½½·¡½¬ ¸®´ÙÀÌ·º¼ÇÀ» Ű°í ²ö´Ù
    DocumentRoot directory-path "/usr/local/apache/ +svC
    Directory that forms the main document tree visible from the web
    DTracePrivileges On|Off Off sX
    Determines whether the privileges required by dtrace are enabled.
    DumpIOInput On|Off Off sE
    Dump all input data to the error log
    DumpIOOutput On|Off Off sE
    Dump all output data to the error log
    <Else> ... </Else>svdhC
    Contains directives that apply only if the condition of a previous <If> or <ElseIf> section is not satisfied by a request at runtime
    <ElseIf expression> ... </ElseIf>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime while the condition of a previous <If> or <ElseIf> section is not satisfied
    EnableExceptionHook On|Off Off sM
    Enables a hook that runs exception handlers after a crash
    EnableMMAP On|Off On svdhC
    Use memory-mapping to read files during delivery
    EnableSendfile On|Off Off svdhC
    Use the kernel sendfile support to deliver files to the client
    Error messagesvdhC
    Abort configuration parsing with a custom error message
    ErrorDocument error-code documentsvdhC
    What the server will return to the client in case of an error
    ErrorLog file-path|syslog[:[facility][:tag]] logs/error_log (Uni +svC
    Location where the server will log errors
    ErrorLogFormat [connection|request] formatsvC
    Format specification for error log entries
    ExamplesvdhX
    ¾ÆÆÄÄ¡ ¸ðµâ API¸¦ ¼³¸íÇϱâÀ§ÇÑ ¿¹Á¦ Áö½Ã¾î
    ExpiresActive On|OffsvdhE
    Expires Çì´õ¸¦ »ý¼ºÇÑ´Ù
    ExpiresByType MIME-type <code>secondssvdhE
    MIME typeÀ¸·Î Expires Çì´õ°ªÀ» ¼³Á¤ÇÑ´Ù
    ExpiresDefault <code>secondssvdhE
    ¸¸±â½Ã°£À» °è»êÇÏ´Â ±âº» ¾Ë°í¸®Áò
    ExtendedStatus On|Off Off[*] sC
    Keep track of extended status information for each request
    ExtFilterDefine filtername parameterssE
    ¿ÜºÎ ÇÊÅ͸¦ Á¤ÀÇÇÑ´Ù
    ExtFilterOptions option [option] ... DebugLevel=0 NoLogS +dE
    mod_ext_filter ¿É¼ÇÀ» ¼³Á¤ÇÑ´Ù
    svdhB
    Define a default URL for requests that don't map to a file
    FileETag component ... MTime Size svdhC
    File attributes used to create the ETag HTTP response header for static files
    <Files filename> ... </Files>svdhC
    Contains directives that apply to matched filenames
    <FilesMatch regex> ... </FilesMatch>svdhC
    Contains directives that apply to regular-expression matched filenames
    FilterChain [+=-@!]filter-name ...svdhB
    Configure the filter chain
    FilterDeclare filter-name [type]svdhB
    Declare a smart filter
    FilterProtocol filter-name [provider-name] proto-flagssvdhB
    Deal with correct HTTP protocol handling
    FilterProvider filter-name provider-name expressionsvdhB
    Register a content filter
    FilterTrace filter-name levelsvdB
    Get debug/diagnostic information from mod_filter
    ForceLanguagePriority None|Prefer|Fallback [Prefer|Fallback] Prefer svdhB
    Action to take if a single acceptable document is not found
    ForceType media-type|NonedhC
    Forces all matching files to be served with the specified media type in the HTTP Content-Type header field
    ForensicLog filename|pipesvE
    Sets filename of the forensic log
    GlobalLogfile|pipe format|nickname [env=[!]environment-variable| expr=expression]sB
    Sets filename and format of log file
    GprofDir /tmp/gprof/|/tmp/gprof/%svC
    Directory to write gmon.out profiling data to.
    GracefulShutdownTimeout seconds 0 sM
    Specify a timeout after which a gracefully shutdown server will exit.
    Group unix-group #-1 sB
    Group under which the server will answer requests
    H2CopyFiles on|off off svdhE
    Determine file handling in responses
    H2Direct on|off on for h2c, off for +svE
    H2 Direct Protocol Switch
    H2EarlyHints on|off off svE
    Determine sending of 103 status codes
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] set|append|add|unset|echo header [value] [early|env=[!]variable]svdhE
    HTTP ÀÀ´ä Çì´õ¸¦ ±¸¼ºÇÑ´Ù
    HeaderName filenamesvdhB
    ÆÄÀϸñ·Ï À§¿¡ »ðÀÔÇÒ ÆÄÀÏÀÇ À̸§
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending heartbeat requests to this server
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Enables DNS lookups on client IP addresses
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    ¿ø°Ý »ç¿ëÀÚÀÇ RFC 1413 ½Å¿øÀ» ·Î±×¿¡ ±â·ÏÇÑ´Ù
    IdentityCheckTimeout seconds 30 svdE
    ident ¿äûÀÇ ½Ã°£Á¦ÇÑÀ» ÁöÁ¤ÇÑ´Ù
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime
    <IfDefine [!]parameter-name> ... </IfDefine>svdhC
    Encloses directives that will be processed only if a test is true at startup
    <IfDirective [!]directive-name> ... </IfDirective>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific directive
    <IfFile [!]filename> ... </IfFile>svdhC
    Encloses directives that will be processed only if file exists at startup
    <IfModule [!]module-file|module-identifier> ... </IfModule>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific module
    <IfSection [!]section-name> ... </IfSection>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific section directive
    <IfVersion [[!]operator] version> ... </IfVersion>svdhE
    ¹öÀüº° ¼³Á¤À» ¹­´Â´Ù
    ImapBase map|referer|URL http://servername/ svdhB
    À̹ÌÁö¸Ê ÆÄÀÏ¿¡¼­ base ±âº»°ª
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    À̹ÌÁö¸Ê¿¡ ¾î´À ¿µ¿ª¿¡µµ ÇØ´çÇÏÁö ¾Ê´Â ÁÂÇ¥¸¦ ÁØ °æ¿ì ±âº» Çൿ
    ImapMenu none|formatted|semiformatted|unformattedsvdhB
    ÁÂÇ¥¾øÀÌ À̹ÌÁö¸Ê ¿äû½Ã ÃëÇÒ Çൿ
    Include file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ...svdhB
    µð·ºÅ丮 ¸ñ·Ï¿¡¼­ ¼û±æ ÆÄÀϸñ·ÏÀ» Ãß°¡ÇÑ´Ù
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing a directory
    IndexOptions [+|-]option [[+|-]option] ...svdhB
    µð·ºÅ丮 ¸ñ·ÏÀÇ ¿©·¯ ¼³Á¤µé
    IndexOrderDefault Ascending|Descending Name|Date|Size|Description Ascending Name svdhB
    µð·ºÅ丮 ¸ñ·ÏÀÇ ±âº» ¼ø¼­¸¦ ¼³Á¤ÇÑ´Ù
    IndexStyleSheet url-pathsvdhB
    µð·ºÅ丮 ¸ñ·Ï¿¡ CSS ½ºÅ¸ÀϽ¬Æ®¸¦ Ãß°¡ÇÑ´Ù
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    ISAPI exntensionÀÇ HSE_APPEND_LOG_PARAMETER ¿äûÀ» ¿À·ù ·Î±×¿¡ ±â·ÏÇÑ´Ù
    ISAPIAppendLogToQuery on|off on svdhB
    ISAPI exntensionÀÇ HSE_APPEND_LOG_PARAMETER ¿äûÀ» ÁúÀǹ®ÀÚ¿­¿¡ ±â·ÏÇÑ´Ù
    ISAPICacheFile file-path [file-path] ...svB
    ¼­¹ö°¡ ½ÃÀÛÇÒ¶§ ¸Þ¸ð¸®·Î ÀоîµéÀÏ ISAPI .dll ÆÄÀϵé
    ISAPIFakeAsync on|off off svdhB
    ºñµ¿±â ISAPI ÄݹéÀ» Áö¿øÇϴ ôÇÑ´Ù
    ISAPILogNotSupported on|off off svdhB
    ISAPI extensionÀÌ Áö¿øÇÏÁö ¾Ê´Â ±â´ÉÀ» ¿äûÇÏ¸é ·Î±×¿¡ ±â·ÏÇÑ´Ù
    ISAPIReadAheadBuffer size 49152 svdhB
    ISAPI extensionÀÇ ¹Ì¸®Àбâ¹öÆÛ(read ahead buffer) Å©±â
    KeepAlive On|Off On svC
    Enables HTTP persistent connections
    KeepAliveTimeout num[ms] 5 svC
    Amount of time the server will wait for subsequent requests on a persistent connection
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to the specified maximum size, for potential use by filters such as mod_include.
    LanguagePriority MIME-lang [MIME-lang] ...svdhB
    The precedence of language variants for cases where the client does not express a preference
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare operations
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain valid
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted Certificate Authority or global client certificates
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... </Limit>dhC
    Restrict enclosed access controls to only certain HTTP methods
    <LimitExcept method [method] ... > ... </LimitExcept>dhC
    Restrict access controls to all HTTP methods except the named ones
    LimitInternalRecursion number [number] 10 svC
    Determine maximum number of internal redirects and nested subrequests
    LimitRequestBody bytes 0 svdhC
    Restricts the total size of the HTTP request body sent from the client
    LimitRequestFields number 100 svC
    Limits the number of HTTP request header fields that will be accepted from the client
    LimitRequestFieldSize bytes 8190 svC
    Limits the size of the HTTP request header allowed from the client
    LimitRequestLine bytes 8190 svC
    Limit the size of the HTTP request line that will be accepted from the client
    LimitXMLRequestBody bytes 1000000 svdhC
    Limits the size of an XML-based request body
    Listen [IP-address:]portnumber [protocol]sM
    IP addresses and ports that the server listens to
    ListenBackLog backlog 511 sM
    Maximum length of the queue of pending connections
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of listeners' buckets
    LoadFile filename [filename] ...sE
    ÁöÁ¤ÇÑ ¸ñÀûÆÄÀÏÀ̳ª ¶óÀ̺귯¸®¸¦ ÀоîµéÀδÙ
    LoadModule module filenamesE
    ¸ñÀûÆÄÀÏÀ̳ª ¶óÀ̺귯¸®¸¦ ÀоîµéÀ̰í, »ç¿ë°¡´ÉÇÑ ¸ðµâ ¸ñ·Ï¿¡ Ãß°¡ÇÑ´Ù
    <Location URL-path|URL> ... </Location>svC
    Applies the enclosed directives only to matching URLs
    <LocationMatch regex> ... </LocationMatch>svC
    Applies the enclosed directives only to regular-expression matching URLs
    LogFormat format|nickname [nickname] "%h %l %u %t \"%r\" +svB
    ·Î±×ÆÄÀÏ¿¡ »ç¿ëÇÒ Çü½ÄÀ» ±â¼úÇÑ´Ù
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel [module:]level [module:level] ... warn svdC
    Controls the verbosity of the ErrorLog
    LogMessage message [hook=hook] [expr=expression] dX
    Log user-defined message to error log
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    <Macro name [par1 .. parN]> ... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server will handle during its life
    MaxKeepAliveRequests number 100 svC
    Number of requests allowed on a persistent connection
    MaxMemFree KBytes 2048 sM
    Maximum amount of memory that the main allocator is allowed to hold without calling free()
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete resource
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed simultaneously
    MaxSpareServers number 10 sM
    Maximum number of idle child server processes
    MaxSpareThreads numbersM
    Maximum number of idle threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDBaseServer on|off off sE
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sE
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsE
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url https://acme-v02.ap +sE
    The URL of the ACME Certificate Authority service.
    MDCertificateFile path-to-pem-filesE
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesE
    Specify a static private key for for the static cerrtificate.
    MDCertificateProtocol protocol ACME sE
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sE
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsE
    -
    MDDriveMode always|auto|manual auto sE
    former name of MDRenewMode.
    MDHttpProxy urlsE
    Define a proxy for outgoing connections.
    MDMember hostnamesE
    Additional hostname for the managed domain.
    MDMembers auto|manual auto sE
    Control if the alias domain names are automatically added.
    MDMessageCmd path-to-cmd optional-argssE
    Handle events for Manage Domains
    MDMustStaple on|off off sE
    Control if new certificates carry the OCSP Must Staple flag.
    MDNotifyCmd path [ args ]sE
    Run a program when a Managed Domain is ready.
    MDomain dns-name [ other-dns-name... ] [auto|manual]sE
    Define list of domain names that belong to one group.
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sE
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sE
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sE
    Set type and size of the private keys generated.
    MDRenewMode always|auto|manual auto sE
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sE
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sE
    Redirects http: traffic to https: for Managed Domains.
    MDServerStatus on|off on sE
    Control if Managed Domain information is added to server-status.
    MDStoreDir path md sE
    Path on the local file system to store the Managed Domains data.
    MDWarnWindow duration 10% sE
    Define the time window when you want to be warned about an expiring certificate.
    MemcacheConnTTL num[units] 15s svE
    Keepalive time for idle connections
    MergeSlashes ON|OFF ON svC
    Controls whether the server merges consecutive slashes in URLs.
    MergeTrailers [on|off] off svC
    Determines whether trailers are merged into headers
    MetaDir directory .web svdhE
    CERN ¸ÞŸÁ¤º¸¸¦ ãÀ» µð·ºÅ丮 À̸§
    MetaFiles on|off off svdhE
    CERN ¸ÞŸÆÄÀÏÀ» ó¸®ÇÑ´Ù
    MetaSuffix suffix .meta svdhE
    CERN ¸ÞŸÁ¤º¸¸¦ ÀúÀåÇÏ´Â ÆÄÀÏÀÇ Á¢¹Ì»ç
    MimeMagicFile file-pathsvE
    Enable MIME-type determination based on file contents using the specified magic file
    MinSpareServers number 5 sM
    Minimum number of idle child server processes
    MinSpareThreads numbersM
    Minimum number of idle threads available to handle request spikes
    MMapFile file-path [file-path] ...sX
    ½ÃÀ۽à ¿©·¯ ÆÄÀÏÀ» ¸Þ¸ð¸®¿¡ ´ëÀÀÇÑ´Ù
    ModemStandard V.21|V.26bis|V.32|V.34|V.92dX
    Modem standard to simulate
    ModMimeUsePathInfo On|Off Off dB
    Tells mod_mime to treat path_info components as part of the filename
    MultiviewsMatch Any|NegotiatedOnly|Filters|Handlers [Handlers|Filters] NegotiatedOnly svdhB
    The types of files that will be included when searching for a matching file with MultiViews
    Mutex mechanism [default|mutex-name] ... [OmitPID] default sC
    Configures mutex mechanism and lock file directory for all or specified mutexes
    NameVirtualHost addr[:port]sC
    DEPRECATED: Designates an IP address for name-virtual hosting
    NoProxy host [host] ...svE
    Hosts, domains, or networks that will be connected to directly
    NWSSLTrustedCerts filename [filename] ...sB
    List of additional client certificates
    NWSSLUpgradeable [IP-address:]portnumbersB
    Allows a connection to be upgraded to an SSL connection upon request
    Options [+|-]option [[+|-]option] ... FollowSymlinks svdhC
    Configures what features are available in a particular directory
    Order ordering Deny,Allow dhE
    Controls the default access state and the order in which Allow and Deny are evaluated.
    OutputSed sed-commanddhX
    Sed command for filtering response content
    PassEnv env-variable [env-variable] ...svdhB
    ½©¿¡¼­ ȯ°æº¯¼ö¸¦ °¡Á®¿Â´Ù
    PidFile filename logs/httpd.pid sM
    File where the server records the process ID of the daemon
    PrivilegesMode FAST|SECURE|SELECTIVE FAST svdX
    Trade off processing speed and efficiency vs security against malicious privileges-aware code.
    Protocol protocolsvC
    Protocol for a listening socket
    ProtocolEcho On|OffsvX
    echo ¼­¹ö¸¦ Ű°í ²ö´Ù
    Protocols protocol ... http/1.1 svC
    Protocols available for a server/virtual host
    ProtocolsHonorOrder On|Off On svC
    Determines if order of Protocols determines precedence during negotiation
    <Proxy wildcard-url> ...</Proxy>svE
    Container for directives applied to proxied resources
    Proxy100Continue Off|On On svdE
    Forward 100-continue expectation to the origin server
    ProxyAddHeaders Off|On On svdE
    Add proxy information in X-Forwarded-* headers
    ProxyBadHeader IsError|Ignore|StartBody IsError svE
    Determines how to handle bad header lines in a response
    ProxyBlock *|word|host|domain [word|host|domain] ...svE
    Words, hosts, or domains that are banned from being proxied
    ProxyDomain DomainsvE
    Default domain name for proxied requests
    ProxyErrorOverride On|Off Off svdE
    Override error pages for proxied content
    ProxyExpressDBMFile pathnamesvE
    Pathname to DBM file.
    ProxyExpressDBMType type default svE
    DBM type of file.
    ProxyExpressEnable on|off off svE
    Enable the module functionality.
    ProxyFCGIBackendType FPM|GENERIC FPM svdhE
    Specify the type of backend FastCGI application
    ProxyFCGISetEnvIf conditional-expression [!]environment-variable-name [value-expression]svdhE
    Allow variables sent to FastCGI servers to be fixed up
    ProxyFtpDirCharset character_set ISO-8859-1 svdE
    Define the character set for proxied FTP listings
    ProxyFtpEscapeWildcards on|off on svdE
    Whether wildcards in requested filenames are escaped when sent to the FTP server
    ProxyFtpListOnWildcard on|off on svdE
    Whether wildcards in requested filenames trigger a file listing
    ProxyHCExpr name {ap_expr expression}svE
    Creates a named condition expression to use to determine health of the backend based on its response
    ProxyHCTemplate name parameter=setting [...]svE
    Creates a named template for setting various health check parameters
    ProxyHCTPsize size 16 sE
    Sets the total server-wide size of the threadpool used for the health check workers
    ProxyHTMLBufSize bytes 8192 svdB
    Sets the buffer size increment for buffering inline scripts and stylesheets.
    ProxyHTMLCharsetOut Charset | *svdB
    Specify a charset for mod_proxy_html output.
    ProxyHTMLDocType HTML|XHTML [Legacy]
    OR
    ProxyHTMLDocType fpi [SGML|XML]
    svdB
    Sets an HTML or XHTML document type declaration.
    ProxyHTMLEnable On|Off Off svdB
    Turns the proxy_html filter on or off.
    ProxyHTMLEvents attribute [attribute ...]svdB
    Specify attributes to treat as scripting events.
    ProxyHTMLExtended On|Off Off svdB
    Determines whether to fix links in inline scripts, stylesheets, and scripting events.
    ProxyHTMLFixups [lowercase] [dospath] [reset]svdB
    Fixes for simple HTML errors.
    ProxyHTMLInterp On|Off Off svdB
    Enables per-request interpolation of ProxyHTMLURLMap rules.
    ProxyHTMLLinks element attribute [attribute2 ...]svdB
    Specify HTML elements that have URL attributes to be rewritten.
    ProxyHTMLMeta On|Off Off svdB
    Turns on or off extra pre-parsing of metadata in HTML <head> sections.
    ProxyHTMLStripComments On|Off Off svdB
    Determines whether to strip HTML comments.
    ProxyHTMLURLMap from-pattern to-pattern [flags] [cond]svdB
    Defines a rule to rewrite HTML links
    ProxyIOBufferSize bytes 8192 svE
    Determine size of internal data throughput buffer
    <ProxyMatch regex> ...</ProxyMatch>svE
    Container for directives applied to regular-expression-matched proxied resources
    ProxyMaxForwards number -1 svE
    Maximium number of proxies that a request can be forwarded through
    ProxyPass [path] !|url [key=value [key=value ...]] [nocanon] [interpolate] [noquery]svdE
    Maps remote servers into the local server URL-space
    ProxyPassInherit On|Off On svE
    Inherit ProxyPass directives defined from the main server
    ProxyPassInterpolateEnv On|Off Off svdE
    Enable Environment Variable interpolation in Reverse Proxy configurations
    ProxyPassMatch [regex] !|url [key=value [key=value ...]]svdE
    Maps remote servers into the local server URL-space using regular expressions
    ProxyPassReverse [path] url [interpolate]svdE
    Adjusts the URL in HTTP response headers sent from a reverse proxied server
    ProxyPassReverseCookieDomain internal-domain public-domain [interpolate]svdE
    Adjusts the Domain string in Set-Cookie headers from a reverse- proxied server
    ProxyPassReverseCookiePath internal-path public-path [interpolate]svdE
    Adjusts the Path string in Set-Cookie headers from a reverse- proxied server
    ProxyPreserveHost On|Off Off svdE
    Use incoming Host HTTP request header for proxy request
    ProxyReceiveBufferSize bytes 0 svE
    Network buffer size for proxied HTTP and FTP connections
    ProxyRemote match remote-serversvE
    Remote proxy used to handle certain requests
    ProxyRemoteMatch regex remote-serversvE
    Remote proxy used to handle requests matched by regular expressions
    ProxyRequests On|Off Off svE
    Enables forward (standard) proxy requests
    ProxySCGIInternalRedirect On|Off|Headername On svdE
    Enable or disable internal redirect responses from the backend
    ProxySCGISendfile On|Off|Headername Off svdE
    Enable evaluation of X-Sendfile pseudo response header
    ProxySet url key=value [key=value ...]svdE
    Set various Proxy balancer or member parameters
    ProxySourceAddress addresssvE
    Set local IP address for outgoing proxy connections
    ProxyStatus Off|On|Full Off svE
    Show Proxy LoadBalancer status in mod_status
    ProxyTimeout secondssvE
    Network timeout for proxied requests
    ProxyVia On|Off|Full|Block Off svE
    Information provided in the Via HTTP response header for proxied requests
    QualifyRedirectURL ON|OFF OFF svdC
    Controls whether the REDIRECT_URL environment variable is fully qualified
    ReadmeName filenamesvdhB
    ÆÄÀϸñ·Ï ¸¶Áö¸·¿¡ »ðÀÔÇÒ ÆÄÀÏÀÇ À̸§
    ReceiveBufferSize bytes 0 sM
    TCP receive buffer size
    Redirect [status] URL-path URLsvdhB
    Ŭ¶óÀÌ¾ðÆ®°¡ ´Ù¸¥ URL¿¡ Á¢¼ÓÇϵµ·Ï ¿äûÇÏ´Â ¿ÜºÎ ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù
    RedirectMatch [status] regex URLsvdhB
    ÇöÀç URLÀÌ Á¤±ÔÇ¥Çö½Ä¿¡ ÇØ´çÇÏ¸é ¿ÜºÎ ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù
    RedirectPermanent URL-path URLsvdhB
    Ŭ¶óÀÌ¾ðÆ®°¡ ´Ù¸¥ URL¿¡ Á¢¼ÓÇϵµ·Ï ¿äûÇÏ´Â ¿ÜºÎ ¿µ±¸ ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù
    RedirectTemp URL-path URLsvdhB
    Ŭ¶óÀÌ¾ðÆ®°¡ ´Ù¸¥ URL¿¡ Á¢¼ÓÇϵµ·Ï ¿äûÇÏ´Â ¿ÜºÎ Àӽà ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù
    RedisConnPoolTTL num[units] 15s svE
    TTL used for the connection pool with the Redis server(s)
    RedisTimeout num[units] 5s svE
    R/W timeout used for the connection with the Redis server(s)
    ReflectorHeader inputheader [outputheader]svdhB
    Reflect an input header to the output headers
    RegexDefaultOptions [none] [+|-]option [[+|-]option] ... DOTALL DOLLAR_ENDON +sC
    Allow to configure global/default options for regexes
    RegisterHttpMethod method [method [...]]sC
    Register non-standard HTTP methods
    RemoteIPHeader header-fieldsvB
    Declare the header field which should be parsed for useragent IP addresses
    RemoteIPInternalProxy proxy-ip|proxy-ip/subnet|hostname ...svB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPInternalProxyList filenamesvB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPProxiesHeader HeaderFieldNamesvB
    Declare the header field which will record all intermediate IP addresses
    RemoteIPProxyProtocol On|OffsvB
    Enable or disable PROXY protocol handling
    RemoteIPProxyProtocolExceptions host|range [host|range] [host|range]svB
    Disable processing of PROXY header for certain hosts or networks
    RemoteIPTrustedProxy proxy-ip|proxy-ip/subnet|hostname ...svB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPTrustedProxyList filenamesvB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoveCharset extension [extension] ...vdhB
    Removes any character set associations for a set of file extensions
    RemoveEncoding extension [extension] ...vdhB
    Removes any content encoding associations for a set of file extensions
    RemoveHandler extension [extension] ...vdhB
    Removes any handler associations for a set of file extensions
    RemoveInputFilter extension [extension] ...vdhB
    Removes any input filter associations for a set of file extensions
    RemoveLanguage extension [extension] ...vdhB
    Removes any language associations for a set of file extensions
    RemoveOutputFilter extension [extension] ...vdhB
    Removes any output filter associations for a set of file extensions
    RemoveType extension [extension] ...vdhB
    Removes any content type associations for a set of file extensions
    RequestHeader set|append|add|unset header [value] [early|env=[!]variable]svdhE
    HTTP ¿äû Çì´õ¸¦ ±¸¼ºÇÑ´Ù
    RequestReadTimeout [handshake=timeout[-maxtimeout][,MinRate=rate] [header=timeout[-maxtimeout][,MinRate=rate] [body=timeout[-maxtimeout][,MinRate=rate] handshake=0 header= +svE
    Set timeout values for completing the TLS handshake, receiving the request headers and/or body from client.
    Require [not] entity-name [entity-name] ...dhB
    Tests whether an authenticated user is authorized by an authorization provider.
    <RequireAll> ... </RequireAll>dhB
    Enclose a group of authorization directives of which none must fail and at least one must succeed for the enclosing directive to succeed.
    <RequireAny> ... </RequireAny>dhB
    Enclose a group of authorization directives of which one must succeed for the enclosing directive to succeed.
    <RequireNone> ... </RequireNone>dhB
    Enclose a group of authorization directives of which none must succeed for the enclosing directive to not fail.
    RewriteBase URL-pathdhE
    Sets the base URL for per-directory rewrites
    RewriteCond TestString CondPattern [flags]svdhE
    Defines a condition under which rewriting will take place
    RewriteEngine on|off off svdhE
    Enables or disables runtime rewriting engine
    RewriteMap MapName MapType:MapSource [MapTypeOptions] svE
    Defines a mapping function for key-lookup
    RewriteOptions OptionssvdhE
    Sets some special options for the rewrite engine
    RewriteRule Pattern Substitution [flags]svdhE
    Defines rules for the rewriting engine
    RLimitCPU seconds|max [seconds|max]svdhC
    Limits the CPU consumption of processes launched by Apache httpd children
    RLimitMEM bytes|max [bytes|max]svdhC
    Limits the memory consumption of processes launched by Apache httpd children
    RLimitNPROC number|max [number|max]svdhC
    Limits the number of processes that can be launched by processes launched by Apache httpd children
    Satisfy Any|All All dhE
    Interaction between host-level access control and user authentication
    ScoreBoardFile file-path logs/apache_runtime +sM
    Location of the file used to store coordination data for the child processes
    Script method cgi-scriptsvdB
    ƯÁ¤ ¿äû¸Þ¼­µå¿¡ ´ëÇØ CGI ½ºÅ©¸³Æ®¸¦ »ç¿ëÇÑ´Ù.
    ScriptAlias URL-path file-path|directory-pathsvB
    URLÀ» ƯÁ¤ ÆÄÀϽýºÅÛ Àå¼Ò·Î ´ëÀÀÇÏ°í ´ë»óÀÌ CGI ½ºÅ©¸³Æ®¶ó°í ¾Ë¸°´Ù
    ScriptAliasMatch regex file-path|directory-pathsvB
    Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÏ¿© URLÀ» ƯÁ¤ ÆÄÀϽýºÅÛ Àå¼Ò·Î ´ëÀÀÇÏ°í ´ë»óÀÌ CGI ½ºÅ©¸³Æ®¶ó°í ¾Ë¸°´Ù
    ScriptInterpreterSource Registry|Registry-Strict|Script Script svdhC
    Technique for locating the interpreter for CGI scripts
    ScriptLog file-pathsvB
    CGI ½ºÅ©¸³Æ® ¿À·ù·Î±×ÆÄÀÏÀÇ À§Ä¡
    ScriptLogBuffer bytes 1024 svB
    ½ºÅ©¸³Æ® ·Î±×¿¡ ±â·ÏÇÒ PUT ȤÀº POST ¿äûÀÇ ÃÖ´ë·®
    ScriptLogLength bytes 10385760 svB
    CGI ½ºÅ©¸³Æ® ·Î±×ÆÄÀÏÀÇ Å©±â Á¦ÇÑ
    ScriptSock file-path logs/cgisock svB
    cgi µ¥¸ó°ú Åë½ÅÀ» À§ÇØ »ç¿ëÇÒ ¼ÒÄÏÀÇ À̸§
    SecureListen [IP-address:]portnumber Certificate-Name [MUTUAL]sB
    Enables SSL encryption for the specified port
    SeeRequestTail On|Off Off sC
    Determine if mod_status displays the first 63 characters of a request or the last 63, assuming the request itself is greater than 63 chars.
    SendBufferSize bytes 0 sM
    TCP buffer size
    ServerAdmin email-address|URLsvC
    Email address that the server includes in error messages sent to the client
    ServerAlias hostname [hostname] ...vC
    Alternate names for a host used when matching requests to name-virtual hosts
    ServerLimit numbersM
    Upper limit on configurable number of processes
    ServerName [scheme://]domain-name|ip-address[:port]svC
    Hostname and port that the server uses to identify itself
    ServerPath URL-pathvC
    Legacy URL pathname for a name-based virtual host that is accessed by an incompatible browser
    ServerRoot directory-path /usr/local/apache sC
    Base directory for the server installation
    ServerSignature On|Off|EMail Off svdhC
    Configures the footer on server-generated documents
    ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full Full sC
    Configures the Server HTTP response header
    Session On|Off Off svdhE
    Enables a session for the current directory or location
    SessionCookieName name attributessvdhE
    Name and attributes for the RFC2109 cookie storing the session
    SessionCookieName2 name attributessvdhE
    Name and attributes for the RFC2965 cookie storing the session
    SessionCookieRemove On|Off Off svdhE
    Control for whether session cookies should be removed from incoming HTTP headers
    SessionCryptoCipher name aes256 svdhX
    The crypto cipher to be used to encrypt the session
    SessionCryptoDriver name [param[=value]]sX
    The crypto driver to be used to encrypt the session
    SessionCryptoPassphrase secret [ secret ... ] svdhX
    The key used to encrypt the session
    SessionCryptoPassphraseFile filenamesvdX
    File containing keys used to encrypt the session
    SessionDBDCookieName name attributessvdhE
    Name and attributes for the RFC2109 cookie storing the session ID
    SessionDBDCookieName2 name attributessvdhE
    Name and attributes for the RFC2965 cookie storing the session ID
    SessionDBDCookieRemove On|Off On svdhE
    Control for whether session ID cookies should be removed from incoming HTTP headers
    SessionDBDDeleteLabel label deletesession svdhE
    The SQL query to use to remove sessions from the database
    SessionDBDInsertLabel label insertsession svdhE
    The SQL query to use to insert sessions into the database
    SessionDBDPerUser On|Off Off svdhE
    Enable a per user session
    SessionDBDSelectLabel label selectsession svdhE
    The SQL query to use to select sessions from the database
    SessionDBDUpdateLabel label updatesession svdhE
    The SQL query to use to update existing sessions in the database
    SessionEnv On|Off Off svdhE
    Control whether the contents of the session are written to the HTTP_SESSION environment variable
    SessionExclude pathsvdhE
    Define URL prefixes for which a session is ignored
    SessionExpiryUpdateInterval interval 0 (always update) svdhE
    Define the number of seconds a session's expiry may change without the session being updated
    SessionHeader headersvdhE
    Import session updates from a given HTTP response header
    SessionInclude pathsvdhE
    Define URL prefixes for which a session is valid
    SessionMaxAge maxage 0 svdhE
    Define a maximum age in seconds for a session
    SetEnv env-variable valuesvdhB
    ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù
    SetEnvIf attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    ¿äûÀÇ ¼ºÁú¿¡ µû¶ó ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù
    svdhB
    Sets environment variables based on an ap_expr expression
    SetEnvIfNoCase attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    ´ë¼Ò¹®ÀÚ¸¦ ±¸º°ÇÏÁö¾Ê°í ¿äûÀÇ ¼ºÁú¿¡ µû¶ó ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù
    SetHandler handler-name|none|expressionsvdhC
    Forces all matching files to be processed by a handler
    SetInputFilter filter[;filter...]svdhC
    Sets the filters that will process client requests and POST input
    SetOutputFilter filter[;filter...]svdhC
    Sets the filters that will process responses from the server
    SSIEndTag tag "-->" svB
    String that ends an include element
    SSIErrorMsg message "[an error occurred +svdhB
    Error message displayed when there is an SSI error
    SSIETag on|off off dhB
    Controls whether ETags are generated by the server.
    SSILastModified on|off off dhB
    Controls whether Last-Modified headers are generated by the server.
    SSILegacyExprParser on|off off dhB
    Enable compatibility mode for conditional expressions.
    SSIStartTag tag "<!--#" svB
    String that starts an include element
    SSITimeFormat formatstring "%A, %d-%b-%Y %H:%M +svdhB
    Configures the format in which date strings are displayed
    SSIUndefinedEcho string "(none)" svdhB
    String displayed when an unset variable is echoed
    SSLCACertificateFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for Client Auth
    SSLCACertificatePath directory-pathsvE
    Directory of PEM-encoded CA Certificates for Client Auth
    SSLCADNRequestFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for defining acceptable CA names
    SSLCADNRequestPath directory-pathsvE
    Directory of PEM-encoded CA Certificates for defining acceptable CA names
    SSLCARevocationCheck chain|leaf|none [flags ...] none svE
    Enable CRL-based revocation checking
    SSLCARevocationFile file-pathsvE
    File of concatenated PEM-encoded CA CRLs for Client Auth
    SSLCARevocationPath directory-pathsvE
    Directory of PEM-encoded CA CRLs for Client Auth
    SSLCertificateChainFile file-pathsvE
    File of PEM-encoded Server CA Certificates
    SSLCertificateFile file-pathsvE
    Server PEM-encoded X.509 certificate data file
    SSLCertificateKeyFile file-pathsvE
    Server PEM-encoded private key file
    SSLCipherSuite [protocol] cipher-spec DEFAULT (depends on +svdhE
    Cipher Suite available for negotiation in SSL handshake
    SSLCompression on|off off svE
    Enable compression on the SSL level
    SSLCryptoDevice engine builtin sE
    Enable use of a cryptographic hardware accelerator
    SSLEngine on|off|optional off svE
    SSL Engine Operation Switch
    SSLFIPS on|off off sE
    SSL FIPS mode Switch
    SSLHonorCipherOrder on|off off svE
    Option to prefer the server's cipher preference order
    SSLInsecureRenegotiation on|off off svE
    Option to enable support for insecure renegotiation
    SSLOCSPDefaultResponder urisvE
    Set the default responder URI for OCSP validation
    SSLOCSPEnable on|leaf|off off svE
    Enable OCSP validation of the client certificate chain
    SSLOCSPNoverify On/Off Off svE
    skip the OCSP responder certificates verification
    SSLOCSPOverrideResponder on|off off svE
    Force use of the default responder URI for OCSP validation
    SSLOCSPProxyURL urlsvE
    Proxy URL to use for OCSP requests
    SSLOCSPResponderCertificateFile filesvE
    Set of trusted PEM encoded OCSP responder certificates
    SSLOCSPResponderTimeout seconds 10 svE
    Timeout for OCSP queries
    SSLOCSPResponseMaxAge seconds -1 svE
    Maximum allowable age for OCSP responses
    SSLOCSPResponseTimeSkew seconds 300 svE
    Maximum allowable time skew for OCSP response validation
    SSLOCSPUseRequestNonce on|off on svE
    Use a nonce within OCSP queries
    SSLOpenSSLConfCmd command-name command-valuesvE
    Configure OpenSSL parameters through its SSL_CONF API
    SSLOptions [+|-]option ...svdhE
    Configure various SSL engine run-time options
    SSLPassPhraseDialog type builtin sE
    Type of pass phrase dialog for encrypted private keys
    SSLProtocol [+|-]protocol ... all -SSLv3 (up to 2 +svE
    Configure usable SSL/TLS protocol versions
    SSLProxyCACertificateFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for Remote Server Auth
    SSLProxyCACertificatePath directory-pathsvE
    Directory of PEM-encoded CA Certificates for Remote Server Auth
    SSLProxyCARevocationCheck chain|leaf|none none svE
    Enable CRL-based revocation checking for Remote Server Auth
    SSLProxyCARevocationFile file-pathsvE
    File of concatenated PEM-encoded CA CRLs for Remote Server Auth
    SSLProxyCARevocationPath directory-pathsvE
    Directory of PEM-encoded CA CRLs for Remote Server Auth
    SSLProxyCheckPeerCN on|off on svE
    Whether to check the remote server certificate's CN field
    SSLProxyCheckPeerExpire on|off on svE
    Whether to check if remote server certificate is expired
    SSLProxyCheckPeerName on|off on svE
    Configure host name checking for remote server certificates
    SSLProxyCipherSuite [protocol] cipher-spec ALL:!ADH:RC4+RSA:+H +svE
    Cipher Suite available for negotiation in SSL proxy handshake
    SSLProxyEngine on|off off svE
    SSL Proxy Engine Operation Switch
    SSLProxyMachineCertificateChainFile filenamesvE
    File of concatenated PEM-encoded CA certificates to be used by the proxy for choosing a certificate
    SSLProxyMachineCertificateFile filenamesvE
    File of concatenated PEM-encoded client certificates and keys to be used by the proxy
    SSLProxyMachineCertificatePath directorysvE
    Directory of PEM-encoded client certificates and keys to be used by the proxy
    SSLProxyProtocol [+|-]protocol ... all -SSLv3 (up to 2 +svE
    Configure usable SSL protocol flavors for proxy usage
    SSLProxyVerify level none svE
    Type of remote server Certificate verification
    SSLProxyVerifyDepth number 1 svE
    Maximum depth of CA Certificates in Remote Server Certificate verification
    SSLRandomSeed context source [bytes]sE
    Pseudo Random Number Generator (PRNG) seeding source
    SSLRenegBufferSize bytes 131072 dhE
    Set the size for the SSL renegotiation buffer
    SSLRequire expressiondhE
    Allow access only when an arbitrarily complex boolean expression is true
    SSLRequireSSLdhE
    Deny access when SSL is not used for the HTTP request
    SSLSessionCache type none sE
    Type of the global/inter-process SSL Session Cache
    SSLSessionCacheTimeout seconds 300 svE
    Number of seconds before an SSL session expires in the Session Cache
    SSLSessionTicketKeyFile file-pathsvE
    Persistent encryption/decryption key for TLS session tickets
    SSLSessionTickets on|off on svE
    Enable or disable use of TLS session tickets
    SSLSRPUnknownUserSeed secret-stringsvE
    SRP unknown user seed
    SSLSRPVerifierFile file-pathsvE
    Path to SRP verifier file
    SSLStaplingCache typesE
    Configures the OCSP stapling cache
    SSLStaplingErrorCacheTimeout seconds 600 svE
    Number of seconds before expiring invalid responses in the OCSP stapling cache
    SSLStaplingFakeTryLater on|off on svE
    Synthesize "tryLater" responses for failed OCSP stapling queries
    SSLStaplingForceURL urisvE
    Override the OCSP responder URI specified in the certificate's AIA extension
    SSLStaplingResponderTimeout seconds 10 svE
    Timeout for OCSP stapling queries
    SSLStaplingResponseMaxAge seconds -1 svE
    Maximum allowable age for OCSP stapling responses
    SSLStaplingResponseTimeSkew seconds 300 svE
    Maximum allowable time skew for OCSP stapling response validation
    SSLStaplingReturnResponderErrors on|off on svE
    Pass stapling related OCSP errors on to client
    SSLStaplingStandardCacheTimeout seconds 3600 svE
    Number of seconds before expiring responses in the OCSP stapling cache
    SSLStrictSNIVHostCheck on|off off svE
    Whether to allow non-SNI clients to access a name-based virtual host.
    SSLUserName varnamesdhE
    Variable name to determine user name
    SSLUseStapling on|off off svE
    Enable stapling of OCSP responses in the TLS handshake
    SSLVerifyClient level none svdhE
    Type of Client Certificate verification
    SSLVerifyDepth number 1 svdhE
    Maximum depth of CA Certificates in Client Certificate verification
    StartServers numbersM
    Number of child server processes created at startup
    StartThreads numbersM
    Number of threads created on startup
    Substitute s/pattern/substitution/[infq]dhE
    Pattern to filter the response content
    SubstituteInheritBefore on|off off dhE
    Change the merge order of inherited patterns
    SubstituteMaxLineLength bytes(b|B|k|K|m|M|g|G) 1m dhE
    Set the maximum line size
    Suexec On|OffsB
    Enable or disable the suEXEC feature
    SuexecUserGroup User GroupsvE
    CGI ÇÁ·Î±×·¥ÀÌ »ç¿ëÇÒ »ç¿ëÀÚ¿Í ±×·ì ±ÇÇÑ
    ThreadLimit numbersM
    Sets the upper limit on the configurable number of threads per child process
    ThreadsPerChild numbersM
    Number of threads created by each child process
    ThreadStackSize sizesM
    The size in bytes of the stack used by threads handling client connections
    TimeOut seconds 60 svC
    Amount of time the server will wait for certain events before failing a request
    TraceEnable [on|off|extended] on svC
    Determines the behavior on TRACE requests
    TransferLog file|pipesvB
    ·Î±×ÆÄÀÏ À§Ä¡¸¦ ¼³Á¤ÇÑ´Ù
    TypesConfig file-path conf/mime.types sB
    The location of the mime.types file
    UnDefine parameter-namesC
    Undefine the existence of a variable
    UndefMacro namesvdB
    Undefine a macro
    UnsetEnv env-variable [env-variable] ...svdhB
    ȯ°æº¯¼ö¸¦ Á¦°ÅÇÑ´Ù
    Use name [value1 ... valueN] svdB
    Use a macro
    UseCanonicalName On|Off|DNS Off svdC
    Configures how the server determines its own name and port
    UseCanonicalPhysicalPort On|Off Off svdC
    Configures how the server determines its own port
    User unix-userid #-1 sB
    The userid under which the server will answer requests
    UserDir directory-filename public_html svB
    »ç¿ëÀÚº° µð·ºÅ丮 À§Ä¡
    VHostCGIMode On|Off|Secure On vX
    Determines whether the virtualhost can run subprocesses, and the privileges available to subprocesses.
    VHostCGIPrivs [+-]?privilege-name [[+-]?privilege-name] ...vX
    Assign arbitrary privileges to subprocesses created by a virtual host.
    VHostGroup unix-groupidvX
    Sets the Group ID under which a virtual host runs.
    VHostPrivs [+-]?privilege-name [[+-]?privilege-name] ...vX
    Assign arbitrary privileges to a virtual host.
    VHostSecure On|Off On vX
    Determines whether the server runs with enhanced security for the virtualhost.
    VHostUser unix-useridvX
    Sets the User ID under which a virtual host runs.
    VirtualDocumentRoot interpolated-directory|none none svE
    Dynamically configure the location of the document root for a given virtual host
    VirtualDocumentRootIP interpolated-directory|none none svE
    Dynamically configure the location of the document root for a given virtual host
    <VirtualHost addr[:port] [addr[:port]] ...> ... </VirtualHost>sC
    Contains directives that apply only to a specific hostname or IP address
    VirtualScriptAlias interpolated-directory|none none svE
    Dynamically configure the location of the CGI directory for a given virtual host
    VirtualScriptAliasIP interpolated-directory|none none svE
    Dynamically configure the location of the CGI directory for a given virtual host
    WatchdogInterval time-interval[s] 1 sB
    Watchdog interval in seconds
    XBitHack on|off|full off svdhB
    Parse SSI directives in files with the execute bit set
    xml2EncAlias charset alias [alias ...]sB
    Recognise Aliases for encoding values
    xml2EncDefault namesvdhB
    Sets a default encoding to assume when absolutely no information can be automatically detected
    xml2StartParse element [element ...]svdhB
    Advise the parser to skip leading junk.

    °¡´ÉÇÑ ¾ð¾î:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_socache_dc.html0000644000000000000500000000034013362070302020011 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_socache_dc.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_socache_dc.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_md.html0000644000000000000500000000017213246517067016360 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_md.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 httpd-2.4.41/docs/manual/mod/mod_auth_digest.html.fr.utf80000644000000000000500000005363413412755316021562 0ustar rootsrc mod_auth_digest - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_auth_digest

    Langues Disponibles:  en  |  fr  |  ko 

    Description:Authentification utilisateur utilisant les condensés MD5
    Statut:Extension
    Identificateur de Module:auth_digest_module
    Fichier Source:mod_auth_digest.c

    Sommaire

    Ce module implémente l'authentification HTTP basée sur les condensés MD5 (RFC2617), et fournit une alternative à mod_auth_basic en ne transmettant plus le mot de passe en clair. Cependant, cela ne suffit pas pour améliorer la sécurité de manière significative par rapport à l'authentification basique. En outre, le stockage du mot de passe sur le serveur est encore moins sûr dans le cas d'une authentification à base de condensé que dans le cas d'une authentification basique. C'est pourquoi l'utilisation de l'authentification basique associée à un chiffrement de la connexion via mod_ssl constitue une bien meilleure alternative.

    top

    Utilisation de l'authentification à base de condensés

    Pour utiliser l'authentification à base de condensés MD5, vous devez simplement remplacer AuthType Basic et AuthBasicProvider respectivement par AuthType Digest et AuthDigestProvider lorsque vous configurez l'authentification, puis ajouter une directive AuthDigestDomain contenant au moins la(les) URI(s) racine(s) de la zone à protéger.

    On peut créer les fichiers utilisateur appropriés (au format texte) à l'aide de l'outil htdigest.

    Exemple :

    <Location "/private/">
        AuthType Digest
        AuthName "private area"
        AuthDigestDomain "/private/" "http://mirror.my.dom/private2/"
        
        AuthDigestProvider file
        AuthUserFile "/web/auth/.digest_pw"
        Require valid-user
    </Location>

    Note

    L'authentification à base de condensé a été conçue pour améliorer la sécurité par rapport à l'authentification basique, mais il s'avère que ce but n'a pas été atteint. Un attaquant de type "man-in-the-middle" peut facilement forcer le navigateur à revenir à une authentification basique. Même une oreille indiscrète passive peut retrouver le mot de passe par force brute avec les moyens modernes, car l'algorithme de hashage utilisé par l'authentification à base de condensé est trop rapide. Autre problème, le stockage des mots de passe sur le serveur n'est pas sûr. Le contenu d'un fichier htdigest volé peut être utilisé directement pour l'authentification à base de condensé. Il est donc fortement recommandé d'utiliser mod_ssl pour chiffrer la connexion.

    mod_auth_digest ne fonctionne correctement que sur les plates-formes où APR supporte la mémoire partagée.

    top

    Directive AuthDigestAlgorithm

    Description:Sélectionne l'algorithme utilisé pour calculer les condensés du défit et de sa réponse
    Syntaxe:AuthDigestAlgorithm MD5|MD5-sess
    Défaut:AuthDigestAlgorithm MD5
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_auth_digest

    La directive AuthDigestAlgorithm permet de sélectionner l'algorithme utilisé pour calculer les condensés du défit et de sa réponse.

    MD5-sess n'est pas encore correctement implémenté.
    top

    Directive AuthDigestDomain

    Description:Les URIs qui se trouvent dans le même espace de protection concernant l'authentification à base de condensés
    Syntaxe:AuthDigestDomain URI [URI] ...
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_auth_digest

    La directive AuthDigestDomain vous permet de spécifier un ou plusieurs URIs se trouvant dans le même espace de protection (c'est à dire utilisant le même utilisateur/mot de passe et se trouvant dans le même domaine). Les URIs spécifiés sont des préfixes ; le client doit savoir que tous les URIs situés sous ces préfixes seront protégés par le même utilisateur/mot de passe. Les URIs peuvent être soit des URIs absolus (c'est à dire avec protocole, nom serveur, port, etc...), soit des URIs relatifs.

    Cette directive doit toujours être présente et contenir au moins le(s) URI(s) racine(s) pour cet espace. Dans le cas contraire, le client va envoyer un en-tête d'autorisation avec chaque requête à destination de ce serveur.

    Les URIs spécifiés peuvent aussi référencer différents serveurs, auquel cas les clients (qui sont à même de le comprendre) vont partager l'utilisateur/mot de passe entre plusieurs serveurs sans le demander à l'utilisateur à chaque fois.

    top

    Directive AuthDigestNonceLifetime

    Description:Durée de validité du nombre à valeur unique du serveur (nonce)
    Syntaxe:AuthDigestNonceLifetime secondes
    Défaut:AuthDigestNonceLifetime 300
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_auth_digest

    La directive AuthDigestNonceLifetime permet de contrôler la durée de validité du nombre à valeur unique du serveur (nonce). Lorsque le client contacte le serveur en utilisant un nonce dont la validité a expiré, le serveur renvoie un code d'erreur 401 avec stale=true. Si secondes est supérieur à 0, il spécifie la durée de validité du nonce ; il est en général déconseillé d'affecter à cet argument une valeur inférieure à 10 secondes. Si secondes est inférieur à 0, le nonce n'expire jamais.

    top

    Directive AuthDigestProvider

    Description:Définit le(s) fournisseurs(s) d'authentification pour la zone du site web concernée
    Syntaxe:AuthDigestProvider nom fournisseur [nom fournisseur] ...
    Défaut:AuthDigestProvider file
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_auth_digest

    La directive AuthDigestProvider permet de définir quel fournisseur d'authentification sera utilisé pour authentifier les utilisateurs pour la zone du site web concernée. Assurez-vous que le module implémentant le fournisseur d'authentification choisi soit bien présent dans le serveur. Le fournisseur par défaut file est implémenté par le module mod_authn_file.

    Voir mod_authn_dbm, mod_authn_file, mod_authn_dbd et mod_authn_socache pour la liste des fournisseurs disponibles.

    top

    Directive AuthDigestQop

    Description:Détermine le niveau de protection fourni par l'authentification à base de condensé
    Syntaxe:AuthDigestQop none|auth|auth-int [auth|auth-int]
    Défaut:AuthDigestQop auth
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_auth_digest

    La directive AuthDigestQop permet de définir le niveau de protection fourni. auth ne fournit que l'authentification (nom utilisateur/mot de passe) ; auth-int fournit l'authentification plus un contrôle d'intégrité (un condensé MD5 de l'entité est aussi calculé et vérifié) ; avec none, le module va utiliser l'ancien algorithme de condensés RFC-2069 (qui n'effectue pas de contrôle d'intégrité). On peut spécifier à la fois auth et auth-int, auquel cas c'est le navigateur qui va choisir lequel des deux utiliser. none ne doit être utilisé que dans le cas où le navigateur ne serait pas à même (pour une raison ou pour une autre) de relever le défit qu'il recevrait si un autre niveau de protection était défini.

    auth-int n'est pas encore implémenté.
    top

    Directive AuthDigestShmemSize

    Description:La quantité de mémoire partagée à allouer afin de conserver les informations à propos des clients
    Syntaxe:AuthDigestShmemSize taille
    Défaut:AuthDigestShmemSize 1000
    Contexte:configuration globale
    Statut:Extension
    Module:mod_auth_digest

    La directive AuthDigestShmemSize permet de définir la quantité de mémoire partagée à allouer au démarrage du serveur afin de conserver les informations à propos des clients. Notez que le segment de mémoire partagée ne peut pas être défini à une taille inférieure à l'espace nécessaire pour conserver les informations à propos d'un client. Cette valeur dépend de votre système. Si vous voulez en déterminer la valeur exacte, vous pouvez simplement définir AuthDigestShmemSize à 0 et consulter le message d'erreur que renverra le serveur lorsqu'on essaiera de le démarrer.

    L'argument size s'exprime par défaut en octets, mais vous pouvez suffixer le nombre par un K ou un M pour spécifier respectivement des KiloOctets ou des MégaOctets. Par exemple, les directives qui suivent sont toutes équivalentes :

    AuthDigestShmemSize 1048576
    AuthDigestShmemSize 1024K
    AuthDigestShmemSize 1M

    Langues Disponibles:  en  |  fr  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_ext_filter.html.en0000644000000000000500000004434613412755316020535 0ustar rootsrc mod_ext_filter - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_ext_filter

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Pass the response body through an external program before delivery to the client
    Status:Extension
    Module Identifier:ext_filter_module
    Source File:mod_ext_filter.c

    Summary

    mod_ext_filter presents a simple and familiar programming model for filters. With this module, a program which reads from stdin and writes to stdout (i.e., a Unix-style filter command) can be a filter for Apache. This filtering mechanism is much slower than using a filter which is specially written for the Apache API and runs inside of the Apache server process, but it does have the following benefits:

    • the programming model is much simpler
    • any programming/scripting language can be used, provided that it allows the program to read from standard input and write to standard output
    • existing programs can be used unmodified as Apache filters

    Even when the performance characteristics are not suitable for production use, mod_ext_filter can be used as a prototype environment for filters.

    top

    Examples

    Generating HTML from some other type of response

    # mod_ext_filter directive to define a filter
    # to HTML-ize text/c files using the external
    # program /usr/bin/enscript, with the type of
    # the result set to text/html
    ExtFilterDefine c-to-html mode=output \
        intype=text/c outtype=text/html \
        cmd="/usr/bin/enscript --color -w html -Ec -o -"
    
    <Directory "/export/home/trawick/apacheinst/htdocs/c">
        # core directive to cause the new filter to
        # be run on output
        SetOutputFilter c-to-html
        
        # mod_mime directive to set the type of .c
        # files to text/c
        AddType text/c .c
    </Directory>

    Implementing a content encoding filter

    Note: this gzip example is just for the purposes of illustration. Please refer to mod_deflate for a practical implementation.

    # mod_ext_filter directive to define the external filter
    ExtFilterDefine gzip mode=output cmd=/bin/gzip
    
    <Location "/gzipped">
        
        # core directive to cause the gzip filter to be
        # run on output
        SetOutputFilter gzip
        
        # mod_headers directive to add
        # "Content-Encoding: gzip" header field
        Header set Content-Encoding gzip
    </Location>

    Slowing down the server

    # mod_ext_filter directive to define a filter
    # which runs everything through cat; cat doesn't
    # modify anything; it just introduces extra pathlength
    # and consumes more resources
    ExtFilterDefine slowdown mode=output cmd=/bin/cat \
        preservescontentlength
    
    <Location "/">
        # core directive to cause the slowdown filter to
        # be run several times on output
        #
        SetOutputFilter slowdown;slowdown;slowdown
    </Location>

    Using sed to replace text in the response

    # mod_ext_filter directive to define a filter which
    # replaces text in the response
    #
    ExtFilterDefine fixtext mode=output intype=text/html \
        cmd="/bin/sed s/verdana/arial/g"
    
    <Location "/">
        # core directive to cause the fixtext filter to
        # be run on output
        SetOutputFilter fixtext
    </Location>

    You can do the same thing using mod_substitute without invoking an external process.

    Tracing another filter

    # Trace the data read and written by mod_deflate
    # for a particular client (IP 192.168.1.31)
    # experiencing compression problems.
    # This filter will trace what goes into mod_deflate.
    ExtFilterDefine tracebefore \
        cmd="/bin/tracefilter.pl /tmp/tracebefore" \
        EnableEnv=trace_this_client
    
    # This filter will trace what goes after mod_deflate.
    # Note that without the ftype parameter, the default
    # filter type of AP_FTYPE_RESOURCE would cause the
    # filter to be placed *before* mod_deflate in the filter
    # chain.  Giving it a numeric value slightly higher than
    # AP_FTYPE_CONTENT_SET will ensure that it is placed
    # after mod_deflate.
    ExtFilterDefine traceafter \
        cmd="/bin/tracefilter.pl /tmp/traceafter" \
        EnableEnv=trace_this_client ftype=21
    
    <Directory "/usr/local/docs">
        SetEnvIf Remote_Addr 192.168.1.31 trace_this_client
        SetOutputFilter tracebefore;deflate;traceafter
    </Directory>

    Here is the filter which traces the data:

    #!/usr/local/bin/perl -w
    use strict;
    
    open(SAVE, ">$ARGV[0]")
        or die "can't open $ARGV[0]: $?";
    
    while (<STDIN>) {
        print SAVE $_;
        print $_;
    }
    
    close(SAVE);
    top

    ExtFilterDefine Directive

    Description:Define an external filter
    Syntax:ExtFilterDefine filtername parameters
    Context:server config
    Status:Extension
    Module:mod_ext_filter

    The ExtFilterDefine directive defines the characteristics of an external filter, including the program to run and its arguments.

    filtername specifies the name of the filter being defined. This name can then be used in SetOutputFilter directives. It must be unique among all registered filters. At the present time, no error is reported by the register-filter API, so a problem with duplicate names isn't reported to the user.

    Subsequent parameters can appear in any order and define the external command to run and certain other characteristics. The only required parameter is cmd=. These parameters are:

    cmd=cmdline
    The cmd= keyword allows you to specify the external command to run. If there are arguments after the program name, the command line should be surrounded in quotation marks (e.g., cmd="/bin/mypgm arg1 arg2".) Normal shell quoting is not necessary since the program is run directly, bypassing the shell. Program arguments are blank-delimited. A backslash can be used to escape blanks which should be part of a program argument. Any backslashes which are part of the argument must be escaped with backslash themselves. In addition to the standard CGI environment variables, DOCUMENT_URI, DOCUMENT_PATH_INFO, and QUERY_STRING_UNESCAPED will also be set for the program.
    mode=mode
    Use mode=output (the default) for filters which process the response. Use mode=input for filters which process the request. mode=input is available in Apache 2.1 and later.
    intype=imt
    This parameter specifies the internet media type (i.e., MIME type) of documents which should be filtered. By default, all documents are filtered. If intype= is specified, the filter will be disabled for documents of other types.
    outtype=imt
    This parameter specifies the internet media type (i.e., MIME type) of filtered documents. It is useful when the filter changes the internet media type as part of the filtering operation. By default, the internet media type is unchanged.
    PreservesContentLength
    The PreservesContentLength keyword specifies that the filter preserves the content length. This is not the default, as most filters change the content length. In the event that the filter doesn't modify the length, this keyword should be specified.
    ftype=filtertype
    This parameter specifies the numeric value for filter type that the filter should be registered as. The default value, AP_FTYPE_RESOURCE, is sufficient in most cases. If the filter needs to operate at a different point in the filter chain than resource filters, then this parameter will be necessary. See the AP_FTYPE_foo definitions in util_filter.h for appropriate values.
    disableenv=env
    This parameter specifies the name of an environment variable which, if set, will disable the filter.
    enableenv=env
    This parameter specifies the name of an environment variable which must be set, or the filter will be disabled.
    top

    ExtFilterOptions Directive

    Description:Configure mod_ext_filter options
    Syntax:ExtFilterOptions option [option] ...
    Default:ExtFilterOptions NoLogStderr
    Context:directory
    Status:Extension
    Module:mod_ext_filter

    The ExtFilterOptions directive specifies special processing options for mod_ext_filter. Option can be one of

    LogStderr | NoLogStderr
    The LogStderr keyword specifies that messages written to standard error by the external filter program will be saved in the Apache error log. NoLogStderr disables this feature.
    Onfail=[abort|remove]
    Determines how to proceed if the external filter program cannot be started. With abort (the default value) the request will be aborted. With remove, the filter is removed and the request continues without it.
    ExtFilterOptions LogStderr

    Messages written to the filter's standard error will be stored in the Apache error log.

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_fdpass.html.en0000644000000000000500000001700113412755316021075 0ustar rootsrc mod_proxy_fdpass - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy_fdpass

    Available Languages:  en  |  fr 

    Description:fdpass external process support module for mod_proxy
    Status:Extension
    Module Identifier:proxy_fdpass_module
    Source File:mod_proxy_fdpass.c
    Compatibility:Available for unix in version 2.3 and later

    Summary

    This module requires the service of mod_proxy. It provides support for the passing the socket of the client to another process.

    mod_proxy_fdpass uses the ability of AF_UNIX domain sockets to pass an open file descriptor to allow another process to finish handling a request.

    The module has a proxy_fdpass_flusher provider interface, which allows another module to optionally send the response headers, or even the start of the response body. The default flush provider disables keep-alive, and sends the response headers, letting the external process just send a response body.

    In order to use another provider, you have to set the flusher parameter in the ProxyPass directive.

    At this time the only data passed to the external process is the client socket. To receive a client socket, call recvfrom with an allocated struct cmsghdr. Future versions of this module may include more data after the client socket, but this is not implemented at this time.

    Support Apache!

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_log_forensic.html.ja.utf80000644000000000000500000003431213412755316021706 0ustar rootsrc mod_log_forensic - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_log_forensic

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:サーãƒã«é€ã‚‰ã‚ŒãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã® forensic ロギング
    ステータス:Extension
    モジュール識別å­:log_forensic_module
    ソースファイル:mod_log_forensic.c
    äº’æ›æ€§:mod_unique_id ã¯ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.1 ã‹ã‚‰ã¯å¿…é ˆã§ã¯ ãªããªã£ãŸ

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆã® forensic ロギングを 行ãªã„ã¾ã™ã€‚ログåŽé›†ã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®å‡¦ç†ã®å‰ã¨å¾Œã«è¡Œãªã‚れã¾ã™ã®ã§ã€ forensic ログã¯å„リクエストã«å¯¾ã—ã¦äºŒè¡Œãƒ­ã‚°åŽé›†ã—ã¾ã™ã€‚ Forensic ロガーã¯éžå¸¸ã«å޳坆ã§ã™ã€‚ã“れã¯ä»¥ä¸‹ã®ã“ã¨ã‚’æ„味ã—ã¾ã™:

    • フォーマットã¯å›ºå®šã§ã™ã€‚実行時ã«ãƒ­ã‚®ãƒ³ã‚°ãƒ•ォーマットを変更ã™ã‚‹ã“ã¨ã¯ ã§ãã¾ã›ã‚“。
    • データを書ã‘ãªã„å ´åˆã¯å­ãƒ—ロセスã¯ãã®å ´ã§çµ‚了ã—ã€ã•らã«ã‚³ã‚¢ã‚’ ダンプã™ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“ (CoreDumpDirectory ディレクティブã®è¨­å®šã«ä¾ã‚Šã¾ã™)。

    Forensic ログã®å‡ºåŠ›ã‚’æ¤œæŸ»ã™ã‚‹ãŸã‚ã«ã¯ã€ é…布物㮠support ディレクトリã«ã‚ã‚‹ check_forensic スクリプトãŒå½¹ã«ç«‹ã¤ã§ã—ょã†ã€‚

    top

    Forensic ログフォーマット

    å„リクエストã¯2回ログåŽé›†ã•れã¾ã™ã€‚最åˆã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒå‡¦ç†ã•れる å‰ (ã¤ã¾ã‚Šã€ãƒ˜ãƒƒãƒ€ã‚’å—ã‘å–ã£ãŸå¾Œ) ã§ã™ã€‚2度目ã®ãƒ­ã‚°ã¯ リクエストãŒå‡¦ç†ã•れãŸå¾Œã€é€šå¸¸ã®ãƒ­ã‚°åŽé›†ã¨åŒã˜ã¨ã㫠行ãªã‚れã¾ã™ã€‚

    å„リクエストを識別ã™ã‚‹ãŸã‚ã«ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ã¯ 一æ„ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆ ID ãŒå‰²ã‚Šå½“ã¦ã‚‰ã‚Œã¾ã™ã€‚ã“ã® forensic ID 㯠フォーマット文字列 %{forensic-id}n を使ã†ã“ã¨ã§ 通常㮠transfer ログã«ãƒ­ã‚°åŽé›†ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ mod_unique_id を使ã£ã¦ã„ã‚‹å ´åˆã¯ã€ãれãŒç”Ÿæˆã™ã‚‹ ID ãŒä½¿ã‚れã¾ã™ã€‚

    最åˆã®è¡Œã¯ forensic IDã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆè¡Œã¨å—ã‘å–ã£ãŸã™ã¹ã¦ã®ãƒ˜ãƒƒãƒ€ã‚’ パイプ文字 (|) ã§åˆ†é›¢ã—ã¦ãƒ­ã‚°åŽé›†ã—ã¾ã™ã€‚ 例ãˆã°ä»¥ä¸‹ã®ã‚ˆã†ã«ãªã‚Šã¾ã™ (実際ã¯ã™ã¹ã¦åŒã˜è¡Œã«ãªã‚Šã¾ã™):

    +yQtJf8CoAB4AAFNXBIEAAAAA|GET /manual/de/images/down.gif HTTP/1.1|Host:localhost%3a8080|User-Agent:Mozilla/5.0 (X11; U; Linux i686; en-US; rv%3a1.6) Gecko/20040216 Firefox/0.8|Accept:image/png, etc...

    最åˆã®ãƒ—ラス文字ãŒã“ã®ãƒ­ã‚°ã¯æœ€åˆã®ãƒ­ã‚°ã§ã‚ã‚‹ã“ã¨ã‚’示ã—ã¾ã™ã€‚ 二番目ã®è¡Œã¯ãƒžã‚¤ãƒŠã‚¹æ–‡å­—㨠ID ã®ã¿ã§ã™:

    -yQtJf8CoAB4AAFNXBIEAAAAA

    check_forensic スクリプトã¯å¼•æ•°ã¨ã—ã¦ãƒ­ã‚°ãƒ•ァイルã®åå‰ã‚’ å–りã¾ã™ã€‚+/- ã® ID ã®çµ„を調ã¹ã€å®Œäº†ã—ã¦ã„ãªã„ リクエストãŒã‚ã‚‹å ´åˆã¯è­¦å‘Šã‚’発ã—ã¾ã™ã€‚

    top

    セキュリティã®å•題

    ログファイルãŒä¿å­˜ã•れるディレクトリãŒã‚µãƒ¼ãƒã‚’èµ·å‹•ã—ãŸãƒ¦ãƒ¼ã‚¶ ä»¥å¤–ã§æ›¸ãè¾¼ã¿å¯èƒ½ã«ãªã£ã¦ã„ã‚‹ã¨ãã«ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ãŒç ´ã‚‰ã‚Œã‚‹å¯èƒ½æ€§ãŒ ã‚ã‚‹ã“ã¨ã«ã¤ã„ã¦ã®è©³ç´°ã¯ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã®ã“ã¤ã‚’ å‚ç…§ã—ã¦ãã ã•ã„。

    top

    ForensicLog ディレクティブ

    説明:Forensic ログã®ãƒ•ァイルåを設定ã™ã‚‹
    æ§‹æ–‡:ForensicLog filename|pipe
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_log_forensic

    ForensicLog ディレクティブ㯠forensic è§£æžã®ãŸã‚㮠サーãƒã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ログåŽé›†ã«ä½¿ã„ã¾ã™ã€‚ å„ログエントリã«ã¯ã€æ™®é€šã® CustomLog ディレクティブを使ã£ã¦ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¨é–¢é€£ä»˜ã‘ã‚‹ã“ã¨ã® ã§ãã‚‹ 一æ„㪠ID ãŒå‰²ã‚Šå½“ã¦ã‚‰ã‚Œã¾ã™ã€‚mod_log_forensic 㯠forensic-id ã¨ã„ã†ãƒˆãƒ¼ã‚¯ãƒ³ã‚’作æˆã—ã€ãƒ•ォーマット文字列 %{forensic-id}n を使ã†ã“ã¨ã§ãã®ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ transfer ログ㫠追加ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    引数ã¯ãƒ­ã‚°ãŒæ›¸ã出ã•れるä½ç½®ã‚’指定ã—ã€ä»¥ä¸‹ã® 2種類ã®å€¤ã®ã©ã¡ã‚‰ã‹ã‚’ å–ã‚‹ã“ã¨ãŒã§ãã¾ã™:

    filename
    ServerRoot ã‹ã‚‰ã® 相対ファイルå
    pipe
    パイプ文字 "|" ã¨ã€ãã®å¾Œã«ãƒ­ã‚°æƒ…報を標準入力ã‹ã‚‰ å—ã‘å–るプログラム。プログラムå㯠ServerRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ã—ã¦ã‚‚ 指定ã§ãã¾ã™ã€‚

    セキュリティ:

    プログラムを使ã†å ´åˆã€ãã®ãƒ—ログラム㯠httpd ã‚’èµ·å‹•ã—ãŸãƒ¦ãƒ¼ã‚¶ã§ 実行ã•れã¾ã™ã€‚ã¤ã¾ã‚Šã€ã‚µãƒ¼ãƒãŒ root ã§å®Ÿè¡Œã•れãŸå ´åˆã¯ root 㧠実行ã•れるã¨ã„ã†ã“ã¨ã§ã™ã€‚プログラムãŒå®‰å…¨ã§ã‚ã‚‹ã‹ã€ã‚ˆã‚Šæ¨©é™ã®å°‘ãªã„ ユーザã«åˆ‡ã‚Šæ›¿ãˆã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã“ã¨ã‚’確ã‹ã‚ã¦ãã ã•ã„。

    注

    Unix 以外ã®ãƒ—ラットフォームã§ãƒ•ァイルåを入力ã™ã‚‹ã¨ãã¯ã€ プラットフォームãŒãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã®ä½¿ç”¨ã‚’許å¯ã—ã¦ã„ã‚‹å ´åˆã§ã‚‚〠スラッシュã®ã¿ãŒä½¿ã‚れるよã†ã«æ°—ã‚’ã¤ã‘ã¦ãã ã•ã„。 普通ã¯è¨­å®šãƒ•ァイルã™ã¹ã¦ã«ãŠã„ã¦ã€ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã®æ–¹ã‚’使用ã™ã‚‹ã‚ˆã†ã« ã—ã¦ãã ã•ã„。

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_uwsgi.html.en0000644000000000000500000002011013412755316020746 0ustar rootsrc mod_proxy_uwsgi - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy_uwsgi

    Available Languages:  en 

    Description:UWSGI gateway module for mod_proxy
    Status:Extension
    Module Identifier:proxy_uwsgi_module
    Source File:mod_proxy_uwsgi.c

    Summary

    This module requires the service of mod_proxy. It provides support for the UWSGI protocol.

    Thus, in order to get the ability of handling the UWSGI protocol, mod_proxy and mod_proxy_uwsgi have to be present in the server.

    Warning

    Do not enable proxying until you have secured your server. Open proxy servers are dangerous both to your network and to the Internet at large.

    Support Apache!

    Topics

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    top

    Examples

    Remember, in order to make the following examples work, you have to enable mod_proxy and mod_proxy_uwsgi.

    Simple gateway

    ProxyPass "/uwsgi-bin/" "uwsgi://localhost:4000/"

    The balanced gateway needs mod_proxy_balancer and at least one load balancer algorithm module, such as mod_lbmethod_byrequests, in addition to the proxy modules listed above. mod_lbmethod_byrequests is the default, and will be used for this example configuration.

    Balanced gateway

    ProxyPass "/uwsgi-bin/" "balancer://somecluster/"
    <Proxy balancer://somecluster>
        BalancerMember uwsgi://localhost:4000
        BalancerMember uwsgi://localhost:4001
    </Proxy>

    Available Languages:  en 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cern_meta.html.ko.euc-kr0000644000000000000500000002505413412755316021514 0ustar rootsrc mod_cern_meta - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_cern_meta

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:CERN À¥¼­¹ö ¸ÞŸÆÄÀÏ Áö¿ø
    »óÅÂ:Extension
    ¸ðµâ¸í:cern_meta_module
    ¼Ò½ºÆÄÀÏ:mod_cern_meta.c

    ¿ä¾à

    CERN À¥¼­¹ö ¸ÞŸÆÄÀÏÀ» Èä³»³½´Ù. ¸ÞŸÆÄÀÏÀº Á¢±ÙÇÏ´Â ÆÄÀÏ¿¡ ´ëÇØ ÀϹÝÀûÀÎ Çì´õ¿Ü¿¡ Ãß°¡·Î Ãâ·ÂÇÒ HTTP Çì´õ¸¦ ´ã°íÀÖ´Ù. ¾ÆÆÄÄ¡ .asis ÆÄÀϰú ºñ½ÁÇϰí, Expires: Çì´õ¸¦ ¼öÁ¤Çϰųª ´Ù¸¥ ½Å±âÇÑ ÀϵéÀ» ÇÒ ¼ö ÀÖ´Ù. ¸ÞŸ Á¤º¸¸¦ ´Ù·ç´Â ¹æ¹ýÀº ´Ù¾çÇÏÁö¸¸, ÀÌ¹Ì ÀÌ ¸ðµâÀ» »ç¿ëÇÏ´Â ¸¹Àº CERN »ç¿ëÀÚµéÀ» À§ÇØ ÀÌ ¹æ¹ýÀ» ¼±ÅÃÇß´Ù.

    ´õ ÀÚ¼¼ÇÑ Á¤º¸´Â CERN metafile semantics¸¦ Âü°íÇ϶ó.

    top

    MetaDir Áö½Ã¾î

    ¼³¸í:CERN ¸ÞŸÁ¤º¸¸¦ ãÀ» µð·ºÅ丮 À̸§
    ¹®¹ý:MetaDir directory
    ±âº»°ª:MetaDir .web
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Extension
    ¸ðµâ:mod_cern_meta

    ¾ÆÆÄÄ¡°¡ ¸ÞŸÁ¤º¸ ÆÄÀÏÀ» ãÀ» µð·ºÅ丮¸íÀ» ÁöÁ¤ÇÑ´Ù. µð·ºÅ丮´Â º¸Åë Á¢±ÙÇÒ ÆÄÀÏÀÌ ÀÖ´Â µð·ºÅ丮ÀÇ '°¨ÃçÁø' ÇÏÀ§µð·ºÅ丮´Ù. "."À¸·Î ÁöÁ¤ÇÏ¸é °°Àº µð·ºÅ丮¿¡¼­ ÆÄÀÏÀ» ã´Â´Ù:

    MetaDir .

    ¾Æ´Ï¸é ÆÄÀÏÀÌ ÀÖ´Â ÇÏÀ§µð·ºÅ丮¸¦ ÁöÁ¤ÇÑ´Ù:

    MetaDir .meta

    top

    MetaFiles Áö½Ã¾î

    ¼³¸í:CERN ¸ÞŸÆÄÀÏÀ» ó¸®ÇÑ´Ù
    ¹®¹ý:MetaFiles on|off
    ±âº»°ª:MetaFiles off
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Extension
    ¸ðµâ:mod_cern_meta

    µð·ºÅ丮º°·Î ¸ÞŸÆÄÀÏ Ã³¸®¿©ºÎ¸¦ °áÁ¤ÇÑ´Ù.

    top

    MetaSuffix Áö½Ã¾î

    ¼³¸í:CERN ¸ÞŸÁ¤º¸¸¦ ÀúÀåÇÏ´Â ÆÄÀÏÀÇ Á¢¹Ì»ç
    ¹®¹ý:MetaSuffix suffix
    ±âº»°ª:MetaSuffix .meta
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Extension
    ¸ðµâ:mod_cern_meta

    ¸ÞŸÁ¤º¸¸¦ ÀúÀåÇÏ´Â ÆÄÀÏÀÇ Á¢¹Ì»ç¸¦ ÁöÁ¤ÇÑ´Ù. ¿¹¸¦ µé¾î, µÎ Áö½Ã¾îÀÇ ±âº»°ªÀ» »ç¿ëÇÒ °æ¿ì DOCUMENT_ROOT/somedir/index.htmlÀ» ¿äûÇϸé DOCUMENT_ROOT/somedir/.web/index.html.metaÀÇ ³»¿ëÀ» Âü°íÇÏ¿© MIME Çì´õ Á¤º¸¸¦ Ãß°¡ÇÑ´Ù.

    ¿¹Á¦:

    MetaSuffix .meta

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_ssl.html.en0000644000000000000500000055527713520523022017166 0ustar rootsrc mod_ssl - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_ssl

    Available Languages:  en  |  fr 

    Description:Strong cryptography using the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols
    Status:Extension
    Module Identifier:ssl_module
    Source File:mod_ssl.c

    Summary

    This module provides SSL v3 and TLS v1.x support for the Apache HTTP Server. SSL v2 is no longer supported.

    This module relies on OpenSSL to provide the cryptography engine.

    Further details, discussion, and examples are provided in the SSL documentation.

    Support Apache!

    Topics

    Directives

    Bugfix checklist

    See also

    top

    Environment Variables

    This module can be configured to provide several items of SSL information as additional environment variables to the SSI and CGI namespace. This information is not provided by default for performance reasons. (See SSLOptions StdEnvVars, below.) The generated variables are listed in the table below. For backward compatibility the information can be made available under different names, too. Look in the Compatibility chapter for details on the compatibility variables.

    Variable Name: Value Type: Description:
    HTTPS flag HTTPS is being used.
    SSL_PROTOCOL string The SSL protocol version (SSLv3, TLSv1, TLSv1.1, TLSv1.2)
    SSL_SESSION_ID string The hex-encoded SSL session id
    SSL_SESSION_RESUMED string Initial or Resumed SSL Session. Note: multiple requests may be served over the same (Initial or Resumed) SSL session if HTTP KeepAlive is in use
    SSL_SECURE_RENEG string true if secure renegotiation is supported, else false
    SSL_CIPHER string The cipher specification name
    SSL_CIPHER_EXPORT string true if cipher is an export cipher
    SSL_CIPHER_USEKEYSIZE number Number of cipher bits (actually used)
    SSL_CIPHER_ALGKEYSIZE number Number of cipher bits (possible)
    SSL_COMPRESS_METHOD string SSL compression method negotiated
    SSL_VERSION_INTERFACE string The mod_ssl program version
    SSL_VERSION_LIBRARY string The OpenSSL program version
    SSL_CLIENT_M_VERSION string The version of the client certificate
    SSL_CLIENT_M_SERIAL string The serial of the client certificate
    SSL_CLIENT_S_DN string Subject DN in client's certificate
    SSL_CLIENT_S_DN_x509 string Component of client's Subject DN
    SSL_CLIENT_SAN_Email_n string Client certificate's subjectAltName extension entries of type rfc822Name
    SSL_CLIENT_SAN_DNS_n string Client certificate's subjectAltName extension entries of type dNSName
    SSL_CLIENT_SAN_OTHER_msUPN_n string Client certificate's subjectAltName extension entries of type otherName, Microsoft User Principal Name form (OID 1.3.6.1.4.1.311.20.2.3)
    SSL_CLIENT_I_DN string Issuer DN of client's certificate
    SSL_CLIENT_I_DN_x509 string Component of client's Issuer DN
    SSL_CLIENT_V_START string Validity of client's certificate (start time)
    SSL_CLIENT_V_END string Validity of client's certificate (end time)
    SSL_CLIENT_V_REMAIN string Number of days until client's certificate expires
    SSL_CLIENT_A_SIG string Algorithm used for the signature of client's certificate
    SSL_CLIENT_A_KEY string Algorithm used for the public key of client's certificate
    SSL_CLIENT_CERT string PEM-encoded client certificate
    SSL_CLIENT_CERT_CHAIN_n string PEM-encoded certificates in client certificate chain
    SSL_CLIENT_CERT_RFC4523_CEA string Serial number and issuer of the certificate. The format matches that of the CertificateExactAssertion in RFC4523
    SSL_CLIENT_VERIFY string NONE, SUCCESS, GENEROUS or FAILED:reason
    SSL_SERVER_M_VERSION string The version of the server certificate
    SSL_SERVER_M_SERIAL string The serial of the server certificate
    SSL_SERVER_S_DN string Subject DN in server's certificate
    SSL_SERVER_SAN_Email_n string Server certificate's subjectAltName extension entries of type rfc822Name
    SSL_SERVER_SAN_DNS_n string Server certificate's subjectAltName extension entries of type dNSName
    SSL_SERVER_SAN_OTHER_dnsSRV_n string Server certificate's subjectAltName extension entries of type otherName, SRVName form (OID 1.3.6.1.5.5.7.8.7, RFC 4985)
    SSL_SERVER_S_DN_x509 string Component of server's Subject DN
    SSL_SERVER_I_DN string Issuer DN of server's certificate
    SSL_SERVER_I_DN_x509 string Component of server's Issuer DN
    SSL_SERVER_V_START string Validity of server's certificate (start time)
    SSL_SERVER_V_END string Validity of server's certificate (end time)
    SSL_SERVER_A_SIG string Algorithm used for the signature of server's certificate
    SSL_SERVER_A_KEY string Algorithm used for the public key of server's certificate
    SSL_SERVER_CERT string PEM-encoded server certificate
    SSL_SRP_USER string SRP username
    SSL_SRP_USERINFO string SRP user info
    SSL_TLS_SNI string Contents of the SNI TLS extension (if supplied with ClientHello)

    x509 specifies a component of an X.509 DN; one of C,ST,L,O,OU,CN,T,I,G,S,D,UID,Email. In httpd 2.2.0 and later, x509 may also include a numeric _n suffix. If the DN in question contains multiple attributes of the same name, this suffix is used as a zero-based index to select a particular attribute. For example, where the server certificate subject DN included two OU attributes, SSL_SERVER_S_DN_OU_0 and SSL_SERVER_S_DN_OU_1 could be used to reference each. A variable name without a _n suffix is equivalent to that name with a _0 suffix; the first (or only) attribute. When the environment table is populated using the StdEnvVars option of the SSLOptions directive, the first (or only) attribute of any DN is added only under a non-suffixed name; i.e. no _0 suffixed entries are added.

    In httpd 2.4.32 and later, an optional _RAW suffix may be added to x509 in a DN component, to suppress conversion of the attribute value to UTF-8. This must be placed after the index suffix (if any). For example, SSL_SERVER_S_DN_OU_RAW or SSL_SERVER_S_DN_OU_0_RAW could be used.

    The format of the *_DN variables has changed in Apache HTTPD 2.3.11. See the LegacyDNStringFormat option for SSLOptions for details.

    SSL_CLIENT_V_REMAIN is only available in version 2.1 and later.

    A number of additional environment variables can also be used in SSLRequire expressions, or in custom log formats:

    HTTP_USER_AGENT        PATH_INFO             AUTH_TYPE
    HTTP_REFERER           QUERY_STRING          SERVER_SOFTWARE
    HTTP_COOKIE            REMOTE_HOST           API_VERSION
    HTTP_FORWARDED         REMOTE_IDENT          TIME_YEAR
    HTTP_HOST              IS_SUBREQ             TIME_MON
    HTTP_PROXY_CONNECTION  DOCUMENT_ROOT         TIME_DAY
    HTTP_ACCEPT            SERVER_ADMIN          TIME_HOUR
    THE_REQUEST            SERVER_NAME           TIME_MIN
    REQUEST_FILENAME       SERVER_PORT           TIME_SEC
    REQUEST_METHOD         SERVER_PROTOCOL       TIME_WDAY
    REQUEST_SCHEME         REMOTE_ADDR           TIME
    REQUEST_URI            REMOTE_USER

    In these contexts, two special formats can also be used:

    ENV:variablename
    This will expand to the standard environment variable variablename.
    HTTP:headername
    This will expand to the value of the request header with name headername.
    top

    Custom Log Formats

    When mod_ssl is built into Apache or at least loaded (under DSO situation) additional functions exist for the Custom Log Format of mod_log_config. First there is an additional ``%{varname}x'' eXtension format function which can be used to expand any variables provided by any module, especially those provided by mod_ssl which can you find in the above table.

    For backward compatibility there is additionally a special ``%{name}c'' cryptography format function provided. Information about this function is provided in the Compatibility chapter.

    Example

    CustomLog "logs/ssl_request_log" "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

    These formats even work without setting the StdEnvVars option of the SSLOptions directive.

    top

    Request Notes

    mod_ssl sets "notes" for the request which can be used in logging with the %{name}n format string in mod_log_config.

    The notes supported are as follows:

    ssl-access-forbidden
    This note is set to the value 1 if access was denied due to an SSLRequire or SSLRequireSSL directive.
    ssl-secure-reneg
    If mod_ssl is built against a version of OpenSSL which supports the secure renegotiation extension, this note is set to the value 1 if SSL is in used for the current connection, and the client also supports the secure renegotiation extension. If the client does not support the secure renegotiation extension, the note is set to the value 0. If mod_ssl is not built against a version of OpenSSL which supports secure renegotiation, or if SSL is not in use for the current connection, the note is not set.
    top

    Expression Parser Extension

    When mod_ssl is built into Apache or at least loaded (under DSO situation) any variables provided by mod_ssl can be used in expressions for the ap_expr Expression Parser. The variables can be referenced using the syntax ``%{varname}''. Starting with version 2.4.18 one can also use the mod_rewrite style syntax ``%{SSL:varname}'' or the function style syntax ``ssl(varname)''.

    Example (using mod_headers)

    Header set X-SSL-PROTOCOL "expr=%{SSL_PROTOCOL}"
    Header set X-SSL-CIPHER "expr=%{SSL:SSL_CIPHER}"

    This feature even works without setting the StdEnvVars option of the SSLOptions directive.

    top

    Authorization providers for use with Require

    mod_ssl provides a few authentication providers for use with mod_authz_core's Require directive.

    Require ssl

    The ssl provider denies access if a connection is not encrypted with SSL. This is similar to the SSLRequireSSL directive.

    Require ssl

    Require ssl-verify-client

    The ssl provider allows access if the user is authenticated with a valid client certificate. This is only useful if SSLVerifyClient optional is in effect.

    The following example grants access if the user is authenticated either with a client certificate or by username and password.

    Require ssl-verify-client
    Require valid-user
    top

    SSLCACertificateFile Directive

    Description:File of concatenated PEM-encoded CA Certificates for Client Auth
    Syntax:SSLCACertificateFile file-path
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    This directive sets the all-in-one file where you can assemble the Certificates of Certification Authorities (CA) whose clients you deal with. These are used for Client Authentication. Such a file is simply the concatenation of the various PEM-encoded Certificate files, in order of preference. This can be used alternatively and/or additionally to SSLCACertificatePath.

    Example

    SSLCACertificateFile "/usr/local/apache2/conf/ssl.crt/ca-bundle-client.crt"
    top

    SSLCACertificatePath Directive

    Description:Directory of PEM-encoded CA Certificates for Client Auth
    Syntax:SSLCACertificatePath directory-path
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    This directive sets the directory where you keep the Certificates of Certification Authorities (CAs) whose clients you deal with. These are used to verify the client certificate on Client Authentication.

    The files in this directory have to be PEM-encoded and are accessed through hash filenames. So usually you can't just place the Certificate files there: you also have to create symbolic links named hash-value.N. And you should always make sure this directory contains the appropriate symbolic links.

    Example

    SSLCACertificatePath "/usr/local/apache2/conf/ssl.crt/"
    top

    SSLCADNRequestFile Directive

    Description:File of concatenated PEM-encoded CA Certificates for defining acceptable CA names
    Syntax:SSLCADNRequestFile file-path
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    When a client certificate is requested by mod_ssl, a list of acceptable Certificate Authority names is sent to the client in the SSL handshake. These CA names can be used by the client to select an appropriate client certificate out of those it has available.

    If neither of the directives SSLCADNRequestPath or SSLCADNRequestFile are given, then the set of acceptable CA names sent to the client is the names of all the CA certificates given by the SSLCACertificateFile and SSLCACertificatePath directives; in other words, the names of the CAs which will actually be used to verify the client certificate.

    In some circumstances, it is useful to be able to send a set of acceptable CA names which differs from the actual CAs used to verify the client certificate - for example, if the client certificates are signed by intermediate CAs. In such cases, SSLCADNRequestPath and/or SSLCADNRequestFile can be used; the acceptable CA names are then taken from the complete set of certificates in the directory and/or file specified by this pair of directives.

    SSLCADNRequestFile must specify an all-in-one file containing a concatenation of PEM-encoded CA certificates.

    Example

    SSLCADNRequestFile "/usr/local/apache2/conf/ca-names.crt"
    top

    SSLCADNRequestPath Directive

    Description:Directory of PEM-encoded CA Certificates for defining acceptable CA names
    Syntax:SSLCADNRequestPath directory-path
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    This optional directive can be used to specify the set of acceptable CA names which will be sent to the client when a client certificate is requested. See the SSLCADNRequestFile directive for more details.

    The files in this directory have to be PEM-encoded and are accessed through hash filenames. So usually you can't just place the Certificate files there: you also have to create symbolic links named hash-value.N. And you should always make sure this directory contains the appropriate symbolic links.

    Example

    SSLCADNRequestPath "/usr/local/apache2/conf/ca-names.crt/"
    top

    SSLCARevocationCheck Directive

    Description:Enable CRL-based revocation checking
    Syntax:SSLCARevocationCheck chain|leaf|none [flags ...]
    Default:SSLCARevocationCheck none
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Optional flags available in httpd 2.4.21 or later

    Enables certificate revocation list (CRL) checking. At least one of SSLCARevocationFile or SSLCARevocationPath must be configured. When set to chain (recommended setting), CRL checks are applied to all certificates in the chain, while setting it to leaf limits the checks to the end-entity cert.

    The available flags are:

    • no_crl_for_cert_ok

      Prior to version 2.3.15, CRL checking in mod_ssl also succeeded when no CRL(s) for the checked certificate(s) were found in any of the locations configured with SSLCARevocationFile or SSLCARevocationPath.

      With the introduction of SSLCARevocationFile, the behavior has been changed: by default with chain or leaf, CRLs must be present for the validation to succeed - otherwise it will fail with an "unable to get certificate CRL" error.

      The flag no_crl_for_cert_ok allows to restore previous behaviour.

    Example

    SSLCARevocationCheck chain

    Compatibility with versions 2.2

    SSLCARevocationCheck chain no_crl_for_cert_ok
    top

    SSLCARevocationFile Directive

    Description:File of concatenated PEM-encoded CA CRLs for Client Auth
    Syntax:SSLCARevocationFile file-path
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    This directive sets the all-in-one file where you can assemble the Certificate Revocation Lists (CRL) of Certification Authorities (CA) whose clients you deal with. These are used for Client Authentication. Such a file is simply the concatenation of the various PEM-encoded CRL files, in order of preference. This can be used alternatively and/or additionally to SSLCARevocationPath.

    Example

    SSLCARevocationFile "/usr/local/apache2/conf/ssl.crl/ca-bundle-client.crl"
    top

    SSLCARevocationPath Directive

    Description:Directory of PEM-encoded CA CRLs for Client Auth
    Syntax:SSLCARevocationPath directory-path
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    This directive sets the directory where you keep the Certificate Revocation Lists (CRL) of Certification Authorities (CAs) whose clients you deal with. These are used to revoke the client certificate on Client Authentication.

    The files in this directory have to be PEM-encoded and are accessed through hash filenames. So usually you have not only to place the CRL files there. Additionally you have to create symbolic links named hash-value.rN. And you should always make sure this directory contains the appropriate symbolic links.

    Example

    SSLCARevocationPath "/usr/local/apache2/conf/ssl.crl/"
    top

    SSLCertificateChainFile Directive

    Description:File of PEM-encoded Server CA Certificates
    Syntax:SSLCertificateChainFile file-path
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    SSLCertificateChainFile is deprecated

    SSLCertificateChainFile became obsolete with version 2.4.8, when SSLCertificateFile was extended to also load intermediate CA certificates from the server certificate file.

    This directive sets the optional all-in-one file where you can assemble the certificates of Certification Authorities (CA) which form the certificate chain of the server certificate. This starts with the issuing CA certificate of the server certificate and can range up to the root CA certificate. Such a file is simply the concatenation of the various PEM-encoded CA Certificate files, usually in certificate chain order.

    This should be used alternatively and/or additionally to SSLCACertificatePath for explicitly constructing the server certificate chain which is sent to the browser in addition to the server certificate. It is especially useful to avoid conflicts with CA certificates when using client authentication. Because although placing a CA certificate of the server certificate chain into SSLCACertificatePath has the same effect for the certificate chain construction, it has the side-effect that client certificates issued by this same CA certificate are also accepted on client authentication.

    But be careful: Providing the certificate chain works only if you are using a single RSA or DSA based server certificate. If you are using a coupled RSA+DSA certificate pair, this will work only if actually both certificates use the same certificate chain. Else the browsers will be confused in this situation.

    Example

    SSLCertificateChainFile "/usr/local/apache2/conf/ssl.crt/ca.crt"
    top

    SSLCertificateFile Directive

    Description:Server PEM-encoded X.509 certificate data file
    Syntax:SSLCertificateFile file-path
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    This directive points to a file with certificate data in PEM format. At a minimum, the file must include an end-entity (leaf) certificate. The directive can be used multiple times (referencing different filenames) to support multiple algorithms for server authentication - typically RSA, DSA, and ECC. The number of supported algorithms depends on the OpenSSL version being used for mod_ssl: with version 1.0.0 or later, openssl list-public-key-algorithms will output a list of supported algorithms, see also the note below about limitations of OpenSSL versions prior to 1.0.2 and the ways to work around them.

    The files may also include intermediate CA certificates, sorted from leaf to root. This is supported with version 2.4.8 and later, and obsoletes SSLCertificateChainFile. When running with OpenSSL 1.0.2 or later, this allows to configure the intermediate CA chain on a per-certificate basis.

    Custom DH parameters and an EC curve name for ephemeral keys, can also be added to end of the first file configured using SSLCertificateFile. This is supported in version 2.4.7 or later. Such parameters can be generated using the commands openssl dhparam and openssl ecparam. The parameters can be added as-is to the end of the first certificate file. Only the first file can be used for custom parameters, as they are applied independently of the authentication algorithm type.

    Finally the end-entity certificate's private key can also be added to the certificate file instead of using a separate SSLCertificateKeyFile directive. This practice is highly discouraged. If it is used, the certificate files using such an embedded key must be configured after the certificates using a separate key file. If the private key is encrypted, the pass phrase dialog is forced at startup time.

    DH parameter interoperability with primes > 1024 bit

    Beginning with version 2.4.7, mod_ssl makes use of standardized DH parameters with prime lengths of 2048, 3072 and 4096 bits and with additional prime lengths of 6144 and 8192 bits beginning with version 2.4.10 (from RFC 3526), and hands them out to clients based on the length of the certificate's RSA/DSA key. With Java-based clients in particular (Java 7 or earlier), this may lead to handshake failures - see this FAQ answer for working around such issues.

    Default DH parameters when using multiple certificates and OpenSSL versions prior to 1.0.2

    When using multiple certificates to support different authentication algorithms (like RSA, DSA, but mainly ECC) and OpenSSL prior to 1.0.2, it is recommended to either use custom DH parameters (preferably) by adding them to the first certificate file (as described above), or to order the SSLCertificateFile directives such that RSA/DSA certificates are placed after the ECC one.

    This is due to a limitation in older versions of OpenSSL which don't let the Apache HTTP Server determine the currently selected certificate at handshake time (when the DH parameters must be sent to the peer) but instead always provide the last configured certificate. Consequently, the server may select default DH parameters based on the length of the wrong certificate's key (ECC keys are much smaller than RSA/DSA ones and their length is not relevant for selecting DH primes).

    Since custom DH parameters always take precedence over the default ones, this issue can be avoided by creating and configuring them (as described above), thus using a custom/suitable length.

    Example

    SSLCertificateFile "/usr/local/apache2/conf/ssl.crt/server.crt"
    top

    SSLCertificateKeyFile Directive

    Description:Server PEM-encoded private key file
    Syntax:SSLCertificateKeyFile file-path
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    This directive points to the PEM-encoded private key file for the server. If the contained private key is encrypted, the pass phrase dialog is forced at startup time.

    The directive can be used multiple times (referencing different filenames) to support multiple algorithms for server authentication. For each SSLCertificateKeyFile directive, there must be a matching SSLCertificateFile directive.

    The private key may also be combined with the certificate in the file given by SSLCertificateFile, but this practice is highly discouraged. If it is used, the certificate files using such an embedded key must be configured after the certificates using a separate key file.

    Example

    SSLCertificateKeyFile "/usr/local/apache2/conf/ssl.key/server.key"
    top

    SSLCipherSuite Directive

    Description:Cipher Suite available for negotiation in SSL handshake
    Syntax:SSLCipherSuite [protocol] cipher-spec
    Default:SSLCipherSuite DEFAULT (depends on OpenSSL version)
    Context:server config, virtual host, directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_ssl

    This complex directive uses a colon-separated cipher-spec string consisting of OpenSSL cipher specifications to configure the Cipher Suite the client is permitted to negotiate in the SSL handshake phase. The optional protocol specifier can configure the Cipher Suite for a specific SSL version. Possible values include "SSL" for all SSL Protocols up to and including TLSv1.2.

    Notice that this directive can be used both in per-server and per-directory context. In per-server context it applies to the standard SSL handshake when a connection is established. In per-directory context it forces a SSL renegotiation with the reconfigured Cipher Suite after the HTTP request was read but before the HTTP response is sent.

    If the SSL library supports TLSv1.3 (OpenSSL 1.1.1 and later), the protocol specifier "TLSv1.3" can be used to configure the cipher suites for that protocol. Since TLSv1.3 does not offer renegotiations, specifying ciphers for it in a directory context is not allowed.

    For a list of TLSv1.3 cipher names, see the OpenSSL documentation.

    An SSL cipher specification in cipher-spec is composed of 4 major attributes plus a few extra minor ones:

    • Key Exchange Algorithm:
      RSA, Diffie-Hellman, Elliptic Curve Diffie-Hellman, Secure Remote Password
    • Authentication Algorithm:
      RSA, Diffie-Hellman, DSS, ECDSA, or none.
    • Cipher/Encryption Algorithm:
      AES, DES, Triple-DES, RC4, RC2, IDEA, etc.
    • MAC Digest Algorithm:
      MD5, SHA or SHA1, SHA256, SHA384.

    An SSL cipher can also be an export cipher. SSLv2 ciphers are no longer supported. To specify which ciphers to use, one can either specify all the Ciphers, one at a time, or use aliases to specify the preference and order for the ciphers (see Table 1). The actually available ciphers and aliases depends on the used openssl version. Newer openssl versions may include additional ciphers.

    Tag Description
    Key Exchange Algorithm:
    kRSA RSA key exchange
    kDHr Diffie-Hellman key exchange with RSA key
    kDHd Diffie-Hellman key exchange with DSA key
    kEDH Ephemeral (temp.key) Diffie-Hellman key exchange (no cert)
    kSRP Secure Remote Password (SRP) key exchange
    Authentication Algorithm:
    aNULL No authentication
    aRSA RSA authentication
    aDSS DSS authentication
    aDH Diffie-Hellman authentication
    Cipher Encoding Algorithm:
    eNULL No encryption
    NULL alias for eNULL
    AES AES encryption
    DES DES encryption
    3DES Triple-DES encryption
    RC4 RC4 encryption
    RC2 RC2 encryption
    IDEA IDEA encryption
    MAC Digest Algorithm:
    MD5 MD5 hash function
    SHA1 SHA1 hash function
    SHA alias for SHA1
    SHA256 SHA256 hash function
    SHA384 SHA384 hash function
    Aliases:
    SSLv3 all SSL version 3.0 ciphers
    TLSv1 all TLS version 1.0 ciphers
    EXP all export ciphers
    EXPORT40 all 40-bit export ciphers only
    EXPORT56 all 56-bit export ciphers only
    LOW all low strength ciphers (no export, single DES)
    MEDIUM all ciphers with 128 bit encryption
    HIGH all ciphers using Triple-DES
    RSA all ciphers using RSA key exchange
    DH all ciphers using Diffie-Hellman key exchange
    EDH all ciphers using Ephemeral Diffie-Hellman key exchange
    ECDH Elliptic Curve Diffie-Hellman key exchange
    ADH all ciphers using Anonymous Diffie-Hellman key exchange
    AECDH all ciphers using Anonymous Elliptic Curve Diffie-Hellman key exchange
    SRP all ciphers using Secure Remote Password (SRP) key exchange
    DSS all ciphers using DSS authentication
    ECDSA all ciphers using ECDSA authentication
    aNULL all ciphers using no authentication

    Now where this becomes interesting is that these can be put together to specify the order and ciphers you wish to use. To speed this up there are also aliases (SSLv3, TLSv1, EXP, LOW, MEDIUM, HIGH) for certain groups of ciphers. These tags can be joined together with prefixes to form the cipher-spec. Available prefixes are:

    • none: add cipher to list
    • +: move matching ciphers to the current location in list
    • -: remove cipher from list (can be added later again)
    • !: kill cipher from list completely (can not be added later again)

    aNULL, eNULL and EXP ciphers are always disabled

    Beginning with version 2.4.7, null and export-grade ciphers are always disabled, as mod_ssl unconditionally adds !aNULL:!eNULL:!EXP to any cipher string at initialization.

    A simpler way to look at all of this is to use the ``openssl ciphers -v'' command which provides a nice way to successively create the correct cipher-spec string. The default cipher-spec string depends on the version of the OpenSSL libraries used. Let's suppose it is ``RC4-SHA:AES128-SHA:HIGH:MEDIUM:!aNULL:!MD5'' which means the following: Put RC4-SHA and AES128-SHA at the beginning. We do this, because these ciphers offer a good compromise between speed and security. Next, include high and medium security ciphers. Finally, remove all ciphers which do not authenticate, i.e. for SSL the Anonymous Diffie-Hellman ciphers, as well as all ciphers which use MD5 as hash algorithm, because it has been proven insufficient.

    $ openssl ciphers -v 'RC4-SHA:AES128-SHA:HIGH:MEDIUM:!aNULL:!MD5'
    RC4-SHA                 SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=SHA1
    AES128-SHA              SSLv3 Kx=RSA      Au=RSA  Enc=AES(128)  Mac=SHA1
    DHE-RSA-AES256-SHA      SSLv3 Kx=DH       Au=RSA  Enc=AES(256)  Mac=SHA1
    ...                     ...               ...     ...           ...
    SEED-SHA                SSLv3 Kx=RSA      Au=RSA  Enc=SEED(128) Mac=SHA1
    PSK-RC4-SHA             SSLv3 Kx=PSK      Au=PSK  Enc=RC4(128)  Mac=SHA1
    KRB5-RC4-SHA            SSLv3 Kx=KRB5     Au=KRB5 Enc=RC4(128)  Mac=SHA1

    The complete list of particular RSA & DH ciphers for SSL is given in Table 2.

    Example

    SSLCipherSuite RSA:!EXP:!NULL:+HIGH:+MEDIUM:-LOW
    Cipher-Tag Protocol Key Ex. Auth. Enc. MAC Type
    RSA Ciphers:
    DES-CBC3-SHA SSLv3 RSA RSA 3DES(168) SHA1
    IDEA-CBC-SHA SSLv3 RSA RSA IDEA(128) SHA1
    RC4-SHA SSLv3 RSA RSA RC4(128) SHA1
    RC4-MD5 SSLv3 RSA RSA RC4(128) MD5
    DES-CBC-SHA SSLv3 RSA RSA DES(56) SHA1
    EXP-DES-CBC-SHA SSLv3 RSA(512) RSA DES(40) SHA1 export
    EXP-RC2-CBC-MD5 SSLv3 RSA(512) RSA RC2(40) MD5 export
    EXP-RC4-MD5 SSLv3 RSA(512) RSA RC4(40) MD5 export
    NULL-SHA SSLv3 RSA RSA None SHA1
    NULL-MD5 SSLv3 RSA RSA None MD5
    Diffie-Hellman Ciphers:
    ADH-DES-CBC3-SHA SSLv3 DH None 3DES(168) SHA1
    ADH-DES-CBC-SHA SSLv3 DH None DES(56) SHA1
    ADH-RC4-MD5 SSLv3 DH None RC4(128) MD5
    EDH-RSA-DES-CBC3-SHA SSLv3 DH RSA 3DES(168) SHA1
    EDH-DSS-DES-CBC3-SHA SSLv3 DH DSS 3DES(168) SHA1
    EDH-RSA-DES-CBC-SHA SSLv3 DH RSA DES(56) SHA1
    EDH-DSS-DES-CBC-SHA SSLv3 DH DSS DES(56) SHA1
    EXP-EDH-RSA-DES-CBC-SHA SSLv3 DH(512) RSA DES(40) SHA1 export
    EXP-EDH-DSS-DES-CBC-SHA SSLv3 DH(512) DSS DES(40) SHA1 export
    EXP-ADH-DES-CBC-SHA SSLv3 DH(512) None DES(40) SHA1 export
    EXP-ADH-RC4-MD5 SSLv3 DH(512) None RC4(40) MD5 export
    top

    SSLCompression Directive

    Description:Enable compression on the SSL level
    Syntax:SSLCompression on|off
    Default:SSLCompression off
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available in httpd 2.4.3 and later, if using OpenSSL 0.9.8 or later; virtual host scope available if using OpenSSL 1.0.0 or later. The default used to be on in version 2.4.3.

    This directive allows to enable compression on the SSL level.

    Enabling compression causes security issues in most setups (the so called CRIME attack).

    top

    SSLCryptoDevice Directive

    Description:Enable use of a cryptographic hardware accelerator
    Syntax:SSLCryptoDevice engine
    Default:SSLCryptoDevice builtin
    Context:server config
    Status:Extension
    Module:mod_ssl

    This directive enables use of a cryptographic hardware accelerator board to offload some of the SSL processing overhead. This directive can only be used if the SSL toolkit is built with "engine" support; OpenSSL 0.9.7 and later releases have "engine" support by default, the separate "-engine" releases of OpenSSL 0.9.6 must be used.

    To discover which engine names are supported, run the command "openssl engine".

    Example

    # For a Broadcom accelerator:
    SSLCryptoDevice ubsec
    top

    SSLEngine Directive

    Description:SSL Engine Operation Switch
    Syntax:SSLEngine on|off|optional
    Default:SSLEngine off
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    This directive toggles the usage of the SSL/TLS Protocol Engine. This is should be used inside a <VirtualHost> section to enable SSL/TLS for a that virtual host. By default the SSL/TLS Protocol Engine is disabled for both the main server and all configured virtual hosts.

    Example

    <VirtualHost _default_:443>
    SSLEngine on
    #...
    </VirtualHost>

    In Apache 2.1 and later, SSLEngine can be set to optional. This enables support for RFC 2817, Upgrading to TLS Within HTTP/1.1. At this time no web browsers support RFC 2817.

    top

    SSLFIPS Directive

    Description:SSL FIPS mode Switch
    Syntax:SSLFIPS on|off
    Default:SSLFIPS off
    Context:server config
    Status:Extension
    Module:mod_ssl

    This directive toggles the usage of the SSL library FIPS_mode flag. It must be set in the global server context and cannot be configured with conflicting settings (SSLFIPS on followed by SSLFIPS off or similar). The mode applies to all SSL library operations.

    If httpd was compiled against an SSL library which did not support the FIPS_mode flag, SSLFIPS on will fail. Refer to the FIPS 140-2 Security Policy document of the SSL provider library for specific requirements to use mod_ssl in a FIPS 140-2 approved mode of operation; note that mod_ssl itself is not validated, but may be described as using FIPS 140-2 validated cryptographic module, when all components are assembled and operated under the guidelines imposed by the applicable Security Policy.

    top

    SSLHonorCipherOrder Directive

    Description:Option to prefer the server's cipher preference order
    Syntax:SSLHonorCipherOrder on|off
    Default:SSLHonorCipherOrder off
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    When choosing a cipher during an SSLv3 or TLSv1 handshake, normally the client's preference is used. If this directive is enabled, the server's preference will be used instead.

    Example

    SSLHonorCipherOrder on
    top

    SSLInsecureRenegotiation Directive

    Description:Option to enable support for insecure renegotiation
    Syntax:SSLInsecureRenegotiation on|off
    Default:SSLInsecureRenegotiation off
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available in httpd 2.2.15 and later, if using OpenSSL 0.9.8m or later

    As originally specified, all versions of the SSL and TLS protocols (up to and including TLS/1.2) were vulnerable to a Man-in-the-Middle attack (CVE-2009-3555) during a renegotiation. This vulnerability allowed an attacker to "prefix" a chosen plaintext to the HTTP request as seen by the web server. A protocol extension was developed which fixed this vulnerability if supported by both client and server.

    If mod_ssl is linked against OpenSSL version 0.9.8m or later, by default renegotiation is only supported with clients supporting the new protocol extension. If this directive is enabled, renegotiation will be allowed with old (unpatched) clients, albeit insecurely.

    Security warning

    If this directive is enabled, SSL connections will be vulnerable to the Man-in-the-Middle prefix attack as described in CVE-2009-3555.

    Example

    SSLInsecureRenegotiation on

    The SSL_SECURE_RENEG environment variable can be used from an SSI or CGI script to determine whether secure renegotiation is supported for a given SSL connection.

    top

    SSLOCSPDefaultResponder Directive

    Description:Set the default responder URI for OCSP validation
    Syntax:SSLOCSPDefaultResponder uri
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    This option sets the default OCSP responder to use. If SSLOCSPOverrideResponder is not enabled, the URI given will be used only if no responder URI is specified in the certificate being verified.

    top

    SSLOCSPEnable Directive

    Description:Enable OCSP validation of the client certificate chain
    Syntax:SSLOCSPEnable on|leaf|off
    Default:SSLOCSPEnable off
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Mode leaf available in httpd 2.4.34 and later

    This option enables OCSP validation of the client certificate chain. If this option is enabled, certificates in the client's certificate chain will be validated against an OCSP responder after normal verification (including CRL checks) have taken place. In mode 'leaf', only the client certificate itself will be validated.

    The OCSP responder used is either extracted from the certificate itself, or derived by configuration; see the SSLOCSPDefaultResponder and SSLOCSPOverrideResponder directives.

    Example

    SSLVerifyClient on
    SSLOCSPEnable on
    SSLOCSPDefaultResponder "http://responder.example.com:8888/responder"
    SSLOCSPOverrideResponder on
    top

    SSLOCSPNoverify Directive

    Description:skip the OCSP responder certificates verification
    Syntax:SSLOCSPNoverify On/Off
    Default:SSLOCSPNoverify Off
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available in httpd 2.4.26 and later, if using OpenSSL 0.9.7 or later

    Skip the OCSP responder certificates verification, mostly useful when testing an OCSP server.

    top

    SSLOCSPOverrideResponder Directive

    Description:Force use of the default responder URI for OCSP validation
    Syntax:SSLOCSPOverrideResponder on|off
    Default:SSLOCSPOverrideResponder off
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    This option forces the configured default OCSP responder to be used during OCSP certificate validation, regardless of whether the certificate being validated references an OCSP responder.

    top

    SSLOCSPProxyURL Directive

    Description:Proxy URL to use for OCSP requests
    Syntax:SSLOCSPProxyURL url
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available in httpd 2.4.19 and later

    This option allows to set the URL of a HTTP proxy that should be used for all queries to OCSP responders.

    top

    SSLOCSPResponderCertificateFile Directive

    Description:Set of trusted PEM encoded OCSP responder certificates
    Syntax:SSLOCSPResponderCertificateFile file
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available in httpd 2.4.26 and later, if using OpenSSL 0.9.7 or later

    This supplies a list of trusted OCSP responder certificates to be used during OCSP responder certificate validation. The supplied certificates are implicitly trusted without any further validation. This is typically used where the OCSP responder certificate is self signed or omitted from the OCSP response.

    top

    SSLOCSPResponderTimeout Directive

    Description:Timeout for OCSP queries
    Syntax:SSLOCSPResponderTimeout seconds
    Default:SSLOCSPResponderTimeout 10
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    This option sets the timeout for queries to OCSP responders, when SSLOCSPEnable is turned on.

    top

    SSLOCSPResponseMaxAge Directive

    Description:Maximum allowable age for OCSP responses
    Syntax:SSLOCSPResponseMaxAge seconds
    Default:SSLOCSPResponseMaxAge -1
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    This option sets the maximum allowable age ("freshness") for OCSP responses. The default value (-1) does not enforce a maximum age, which means that OCSP responses are considered valid as long as their nextUpdate field is in the future.

    top

    SSLOCSPResponseTimeSkew Directive

    Description:Maximum allowable time skew for OCSP response validation
    Syntax:SSLOCSPResponseTimeSkew seconds
    Default:SSLOCSPResponseTimeSkew 300
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    This option sets the maximum allowable time skew for OCSP responses (when checking their thisUpdate and nextUpdate fields).

    top

    SSLOCSPUseRequestNonce Directive

    Description:Use a nonce within OCSP queries
    Syntax:SSLOCSPUseRequestNonce on|off
    Default:SSLOCSPUseRequestNonce on
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available in httpd 2.4.10 and later

    This option determines whether queries to OCSP responders should contain a nonce or not. By default, a query nonce is always used and checked against the response's one. When the responder does not use nonces (e.g. Microsoft OCSP Responder), this option should be turned off.

    top

    SSLOpenSSLConfCmd Directive

    Description:Configure OpenSSL parameters through its SSL_CONF API
    Syntax:SSLOpenSSLConfCmd command-name command-value
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available in httpd 2.4.8 and later, if using OpenSSL 1.0.2 or later

    This directive exposes OpenSSL's SSL_CONF API to mod_ssl, allowing a flexible configuration of OpenSSL parameters without the need of implementing additional mod_ssl directives when new features are added to OpenSSL.

    The set of available SSLOpenSSLConfCmd commands depends on the OpenSSL version being used for mod_ssl (at least version 1.0.2 is required). For a list of supported command names, see the section Supported configuration file commands in the SSL_CONF_cmd(3) manual page for OpenSSL.

    Some of the SSLOpenSSLConfCmd commands can be used as an alternative to existing directives (such as SSLCipherSuite or SSLProtocol), though it should be noted that the syntax / allowable values for the parameters may sometimes differ.

    Examples

    SSLOpenSSLConfCmd Options -SessionTicket,ServerPreference
    SSLOpenSSLConfCmd ECDHParameters brainpoolP256r1
    SSLOpenSSLConfCmd ServerInfoFile "/usr/local/apache2/conf/server-info.pem"
    SSLOpenSSLConfCmd Protocol "-ALL, TLSv1.2"
    SSLOpenSSLConfCmd SignatureAlgorithms RSA+SHA384:ECDSA+SHA256
    top

    SSLOptions Directive

    Description:Configure various SSL engine run-time options
    Syntax:SSLOptions [+|-]option ...
    Context:server config, virtual host, directory, .htaccess
    Override:Options
    Status:Extension
    Module:mod_ssl

    This directive can be used to control various run-time options on a per-directory basis. Normally, if multiple SSLOptions could apply to a directory, then the most specific one is taken completely; the options are not merged. However if all the options on the SSLOptions directive are preceded by a plus (+) or minus (-) symbol, the options are merged. Any options preceded by a + are added to the options currently in force, and any options preceded by a - are removed from the options currently in force.

    The available options are:

    • StdEnvVars

      When this option is enabled, the standard set of SSL related CGI/SSI environment variables are created. This per default is disabled for performance reasons, because the information extraction step is a rather expensive operation. So one usually enables this option for CGI and SSI requests only.

    • ExportCertData

      When this option is enabled, additional CGI/SSI environment variables are created: SSL_SERVER_CERT, SSL_CLIENT_CERT and SSL_CLIENT_CERT_CHAIN_n (with n = 0,1,2,..). These contain the PEM-encoded X.509 Certificates of server and client for the current HTTPS connection and can be used by CGI scripts for deeper Certificate checking. Additionally all other certificates of the client certificate chain are provided, too. This bloats up the environment a little bit which is why you have to use this option to enable it on demand.

    • FakeBasicAuth

      When this option is enabled, the Subject Distinguished Name (DN) of the Client X509 Certificate is translated into a HTTP Basic Authorization username. This means that the standard Apache authentication methods can be used for access control. The user name is just the Subject of the Client's X509 Certificate (can be determined by running OpenSSL's openssl x509 command: openssl x509 -noout -subject -in certificate.crt). Note that no password is obtained from the user. Every entry in the user file needs this password: ``xxj31ZMTZzkVA'', which is the DES-encrypted version of the word `password''. Those who live under MD5-based encryption (for instance under FreeBSD or BSD/OS, etc.) should use the following MD5 hash of the same word: ``$1$OXLyS...$Owx8s2/m9/gfkcRVXzgoE/''.

      Note that the AuthBasicFake directive within mod_auth_basic can be used as a more general mechanism for faking basic authentication, giving control over the structure of both the username and password.

    • StrictRequire

      This forces forbidden access when SSLRequireSSL or SSLRequire successfully decided that access should be forbidden. Usually the default is that in the case where a ``Satisfy any'' directive is used, and other access restrictions are passed, denial of access due to SSLRequireSSL or SSLRequire is overridden (because that's how the Apache Satisfy mechanism should work.) But for strict access restriction you can use SSLRequireSSL and/or SSLRequire in combination with an ``SSLOptions +StrictRequire''. Then an additional ``Satisfy Any'' has no chance once mod_ssl has decided to deny access.

    • OptRenegotiate

      This enables optimized SSL connection renegotiation handling when SSL directives are used in per-directory context. By default a strict scheme is enabled where every per-directory reconfiguration of SSL parameters causes a full SSL renegotiation handshake. When this option is used mod_ssl tries to avoid unnecessary handshakes by doing more granular (but still safe) parameter checks. Nevertheless these granular checks sometimes may not be what the user expects, so enable this on a per-directory basis only, please.

    • LegacyDNStringFormat

      This option influences how values of the SSL_{CLIENT,SERVER}_{I,S}_DN variables are formatted. Since version 2.3.11, Apache HTTPD uses a RFC 2253 compatible format by default. This uses commas as delimiters between the attributes, allows the use of non-ASCII characters (which are converted to UTF8), escapes various special characters with backslashes, and sorts the attributes with the "C" attribute last.

      If LegacyDNStringFormat is set, the old format will be used which sorts the "C" attribute first, uses slashes as separators, and does not handle non-ASCII and special characters in any consistent way.

    Example

    SSLOptions +FakeBasicAuth -StrictRequire
    <Files ~ "\.(cgi|shtml)$">
        SSLOptions +StdEnvVars -ExportCertData
    </Files>
    top

    SSLPassPhraseDialog Directive

    Description:Type of pass phrase dialog for encrypted private keys
    Syntax:SSLPassPhraseDialog type
    Default:SSLPassPhraseDialog builtin
    Context:server config
    Status:Extension
    Module:mod_ssl

    When Apache starts up it has to read the various Certificate (see SSLCertificateFile) and Private Key (see SSLCertificateKeyFile) files of the SSL-enabled virtual servers. Because for security reasons the Private Key files are usually encrypted, mod_ssl needs to query the administrator for a Pass Phrase in order to decrypt those files. This query can be done in two ways which can be configured by type:

    • builtin

      This is the default where an interactive terminal dialog occurs at startup time just before Apache detaches from the terminal. Here the administrator has to manually enter the Pass Phrase for each encrypted Private Key file. Because a lot of SSL-enabled virtual hosts can be configured, the following reuse-scheme is used to minimize the dialog: When a Private Key file is encrypted, all known Pass Phrases (at the beginning there are none, of course) are tried. If one of those known Pass Phrases succeeds no dialog pops up for this particular Private Key file. If none succeeded, another Pass Phrase is queried on the terminal and remembered for the next round (where it perhaps can be reused).

      This scheme allows mod_ssl to be maximally flexible (because for N encrypted Private Key files you can use N different Pass Phrases - but then you have to enter all of them, of course) while minimizing the terminal dialog (i.e. when you use a single Pass Phrase for all N Private Key files this Pass Phrase is queried only once).

    • |/path/to/program [args...]

      This mode allows an external program to be used which acts as a pipe to a particular input device; the program is sent the standard prompt text used for the builtin mode on stdin, and is expected to write password strings on stdout. If several passwords are needed (or an incorrect password is entered), additional prompt text will be written subsequent to the first password being returned, and more passwords must then be written back.

    • exec:/path/to/program

      Here an external program is configured which is called at startup for each encrypted Private Key file. It is called with two arguments (the first is of the form ``servername:portnumber'', the second is either ``RSA'', ``DSA'', ``ECC'' or an integer index starting at 3 if more than three keys are configured), which indicate for which server and algorithm it has to print the corresponding Pass Phrase to stdout. In versions 2.4.8 (unreleased) and 2.4.9, it is called with one argument, a string of the form ``servername:portnumber:index'' (with index being a zero-based integer number), which indicate the server, TCP port and certificate number. The intent is that this external program first runs security checks to make sure that the system is not compromised by an attacker, and only when these checks were passed successfully it provides the Pass Phrase.

      Both these security checks, and the way the Pass Phrase is determined, can be as complex as you like. Mod_ssl just defines the interface: an executable program which provides the Pass Phrase on stdout. Nothing more or less! So, if you're really paranoid about security, here is your interface. Anything else has to be left as an exercise to the administrator, because local security requirements are so different.

      The reuse-algorithm above is used here, too. In other words: The external program is called only once per unique Pass Phrase.

    Example

    SSLPassPhraseDialog "exec:/usr/local/apache/sbin/pp-filter"
    top

    SSLProtocol Directive

    Description:Configure usable SSL/TLS protocol versions
    Syntax:SSLProtocol [+|-]protocol ...
    Default:SSLProtocol all -SSLv3 (up to 2.4.16: all)
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl

    This directive can be used to control which versions of the SSL/TLS protocol will be accepted in new connections.

    The available (case-insensitive) protocols are:

    • SSLv3

      This is the Secure Sockets Layer (SSL) protocol, version 3.0, from the Netscape Corporation. It is the successor to SSLv2 and the predecessor to TLSv1, but is deprecated in RFC 7568.

    • TLSv1

      This is the Transport Layer Security (TLS) protocol, version 1.0. It is the successor to SSLv3 and is defined in RFC 2246. It is supported by nearly every client.

    • TLSv1.1 (when using OpenSSL 1.0.1 and later)

      A revision of the TLS 1.0 protocol, as defined in RFC 4346.

    • TLSv1.2 (when using OpenSSL 1.0.1 and later)

      A revision of the TLS 1.1 protocol, as defined in RFC 5246.

    • TLSv1.3 (when using OpenSSL 1.1.1 and later)

      A new version of the TLS protocol, as defined in RFC 8446.

    • all

      This is a shortcut for ``+SSLv3 +TLSv1'' or - when using OpenSSL 1.0.1 and later - ``+SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2'', respectively (except for OpenSSL versions compiled with the ``no-ssl3'' configuration option, where all does not include +SSLv3).

    Example

    SSLProtocol TLSv1
    top

    SSLProxyCACertificateFile Directive

    Description:File of concatenated PEM-encoded CA Certificates for Remote Server Auth
    Syntax:SSLProxyCACertificateFile file-path
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    This directive sets the all-in-one file where you can assemble the Certificates of Certification Authorities (CA) whose remote servers you deal with. These are used for Remote Server Authentication. Such a file is simply the concatenation of the various PEM-encoded Certificate files, in order of preference. This can be used alternatively and/or additionally to SSLProxyCACertificatePath.

    Example

    SSLProxyCACertificateFile "/usr/local/apache2/conf/ssl.crt/ca-bundle-remote-server.crt"
    top

    SSLProxyCACertificatePath Directive

    Description:Directory of PEM-encoded CA Certificates for Remote Server Auth
    Syntax:SSLProxyCACertificatePath directory-path
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    This directive sets the directory where you keep the Certificates of Certification Authorities (CAs) whose remote servers you deal with. These are used to verify the remote server certificate on Remote Server Authentication.

    The files in this directory have to be PEM-encoded and are accessed through hash filenames. So usually you can't just place the Certificate files there: you also have to create symbolic links named hash-value.N. And you should always make sure this directory contains the appropriate symbolic links.

    Example

    SSLProxyCACertificatePath "/usr/local/apache2/conf/ssl.crt/"
    top

    SSLProxyCARevocationCheck Directive

    Description:Enable CRL-based revocation checking for Remote Server Auth
    Syntax:SSLProxyCARevocationCheck chain|leaf|none
    Default:SSLProxyCARevocationCheck none
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    Enables certificate revocation list (CRL) checking for the remote servers you deal with. At least one of SSLProxyCARevocationFile or SSLProxyCARevocationPath must be configured. When set to chain (recommended setting), CRL checks are applied to all certificates in the chain, while setting it to leaf limits the checks to the end-entity cert.

    When set to chain or leaf, CRLs must be available for successful validation

    Prior to version 2.3.15, CRL checking in mod_ssl also succeeded when no CRL(s) were found in any of the locations configured with SSLProxyCARevocationFile or SSLProxyCARevocationPath. With the introduction of this directive, the behavior has been changed: when checking is enabled, CRLs must be present for the validation to succeed - otherwise it will fail with an "unable to get certificate CRL" error.

    Example

    SSLProxyCARevocationCheck chain
    top

    SSLProxyCARevocationFile Directive

    Description:File of concatenated PEM-encoded CA CRLs for Remote Server Auth
    Syntax:SSLProxyCARevocationFile file-path
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    This directive sets the all-in-one file where you can assemble the Certificate Revocation Lists (CRL) of Certification Authorities (CA) whose remote servers you deal with. These are used for Remote Server Authentication. Such a file is simply the concatenation of the various PEM-encoded CRL files, in order of preference. This can be used alternatively and/or additionally to SSLProxyCARevocationPath.

    Example

    SSLProxyCARevocationFile "/usr/local/apache2/conf/ssl.crl/ca-bundle-remote-server.crl"
    top

    SSLProxyCARevocationPath Directive

    Description:Directory of PEM-encoded CA CRLs for Remote Server Auth
    Syntax:SSLProxyCARevocationPath directory-path
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    This directive sets the directory where you keep the Certificate Revocation Lists (CRL) of Certification Authorities (CAs) whose remote servers you deal with. These are used to revoke the remote server certificate on Remote Server Authentication.

    The files in this directory have to be PEM-encoded and are accessed through hash filenames. So usually you have not only to place the CRL files there. Additionally you have to create symbolic links named hash-value.rN. And you should always make sure this directory contains the appropriate symbolic links.

    Example

    SSLProxyCARevocationPath "/usr/local/apache2/conf/ssl.crl/"
    top

    SSLProxyCheckPeerCN Directive

    Description:Whether to check the remote server certificate's CN field
    Syntax:SSLProxyCheckPeerCN on|off
    Default:SSLProxyCheckPeerCN on
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    This directive sets whether the remote server certificate's CN field is compared against the hostname of the request URL. If both are not equal a 502 status code (Bad Gateway) is sent. SSLProxyCheckPeerCN is superseded by SSLProxyCheckPeerName in release 2.4.5 and later.

    In all releases 2.4.5 through 2.4.20, setting SSLProxyCheckPeerName off was sufficient to enable this behavior (as the SSLProxyCheckPeerCN default was on.) In these releases, both directives must be set to off to completely avoid remote server certificate name validation. Many users reported this to be very confusing.

    As of release 2.4.21, all configurations which enable either one of the SSLProxyCheckPeerName or SSLProxyCheckPeerCN options will use the new SSLProxyCheckPeerName behavior, and all configurations which disable either one of the SSLProxyCheckPeerName or SSLProxyCheckPeerCN options will suppress all remote server certificate name validation. Only the following configuration will trigger the legacy certificate CN comparison in 2.4.21 and later releases;

    Example

    SSLProxyCheckPeerCN on
    SSLProxyCheckPeerName off
    top

    SSLProxyCheckPeerExpire Directive

    Description:Whether to check if remote server certificate is expired
    Syntax:SSLProxyCheckPeerExpire on|off
    Default:SSLProxyCheckPeerExpire on
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    This directive sets whether it is checked if the remote server certificate is expired or not. If the check fails a 502 status code (Bad Gateway) is sent.

    Example

    SSLProxyCheckPeerExpire on
    top

    SSLProxyCheckPeerName Directive

    Description:Configure host name checking for remote server certificates
    Syntax:SSLProxyCheckPeerName on|off
    Default:SSLProxyCheckPeerName on
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:Apache HTTP Server 2.4.5 and later
    The proxy section context is allowed in httpd 2.4.30 and later

    This directive configures host name checking for server certificates when mod_ssl is acting as an SSL client. The check will succeed if the host name from the request URI matches one of the CN attribute(s) of the certificate's subject, or matches the subjectAltName extension. If the check fails, the SSL request is aborted and a 502 status code (Bad Gateway) is returned.

    Wildcard matching is supported for specific cases: an subjectAltName entry of type dNSName, or CN attributes starting with *. will match with any host name of the same number of name elements and the same suffix. E.g. *.example.org will match foo.example.org, but will not match foo.bar.example.org, because the number of elements in the respective host names differs.

    This feature was introduced in 2.4.5 and superseded the behavior of the SSLProxyCheckPeerCN directive, which only tested the exact value in the first CN attribute against the host name. However, many users were confused by the behavior of using these directives individually, so the mutual behavior of SSLProxyCheckPeerName and SSLProxyCheckPeerCN directives were improved in release 2.4.21. See the SSLProxyCheckPeerCN directive description for the original behavior and details of these improvements.

    top

    SSLProxyCipherSuite Directive

    Description:Cipher Suite available for negotiation in SSL proxy handshake
    Syntax:SSLProxyCipherSuite [protocol] cipher-spec
    Default:SSLProxyCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    Equivalent to SSLCipherSuite, but for the proxy connection. Please refer to SSLCipherSuite for additional information.

    top

    SSLProxyEngine Directive

    Description:SSL Proxy Engine Operation Switch
    Syntax:SSLProxyEngine on|off
    Default:SSLProxyEngine off
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    This directive toggles the usage of the SSL/TLS Protocol Engine for proxy. This is usually used inside a <VirtualHost> section to enable SSL/TLS for proxy usage in a particular virtual host. By default the SSL/TLS Protocol Engine is disabled for proxy both for the main server and all configured virtual hosts.

    Note that the SSLProxyEngine directive should not, in general, be included in a virtual host that will be acting as a forward proxy (using <Proxy> or ProxyRequests directives). SSLProxyEngine is not required to enable a forward proxy server to proxy SSL/TLS requests.

    Example

    <VirtualHost _default_:443>
        SSLProxyEngine on
        #...
    </VirtualHost>
    top

    SSLProxyMachineCertificateChainFile Directive

    Description:File of concatenated PEM-encoded CA certificates to be used by the proxy for choosing a certificate
    Syntax:SSLProxyMachineCertificateChainFile filename
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    This directive sets the all-in-one file where you keep the certificate chain for all of the client certs in use. This directive will be needed if the remote server presents a list of CA certificates that are not direct signers of one of the configured client certificates.

    This referenced file is simply the concatenation of the various PEM-encoded certificate files. Upon startup, each client certificate configured will be examined and a chain of trust will be constructed.

    Security warning

    If this directive is enabled, all of the certificates in the file will be trusted as if they were also in SSLProxyCACertificateFile.

    Example

    SSLProxyMachineCertificateChainFile "/usr/local/apache2/conf/ssl.crt/proxyCA.pem"
    top

    SSLProxyMachineCertificateFile Directive

    Description:File of concatenated PEM-encoded client certificates and keys to be used by the proxy
    Syntax:SSLProxyMachineCertificateFile filename
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    This directive sets the all-in-one file where you keep the certificates and keys used for authentication of the proxy server to remote servers.

    This referenced file is simply the concatenation of the various PEM-encoded certificate files, in order of preference. Use this directive alternatively or additionally to SSLProxyMachineCertificatePath.

    Currently there is no support for encrypted private keys

    Example

    SSLProxyMachineCertificateFile "/usr/local/apache2/conf/ssl.crt/proxy.pem"
    top

    SSLProxyMachineCertificatePath Directive

    Description:Directory of PEM-encoded client certificates and keys to be used by the proxy
    Syntax:SSLProxyMachineCertificatePath directory
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    This directive sets the directory where you keep the certificates and keys used for authentication of the proxy server to remote servers.

    The files in this directory must be PEM-encoded and are accessed through hash filenames. Additionally, you must create symbolic links named hash-value.N. And you should always make sure this directory contains the appropriate symbolic links.

    Currently there is no support for encrypted private keys

    Example

    SSLProxyMachineCertificatePath "/usr/local/apache2/conf/proxy.crt/"
    top

    SSLProxyProtocol Directive

    Description:Configure usable SSL protocol flavors for proxy usage
    Syntax:SSLProxyProtocol [+|-]protocol ...
    Default:SSLProxyProtocol all -SSLv3 (up to 2.4.16: all)
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    This directive can be used to control the SSL protocol flavors mod_ssl should use when establishing its server environment for proxy . It will only connect to servers using one of the provided protocols.

    Please refer to SSLProtocol for additional information.

    top

    SSLProxyVerify Directive

    Description:Type of remote server Certificate verification
    Syntax:SSLProxyVerify level
    Default:SSLProxyVerify none
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    When a proxy is configured to forward requests to a remote SSL server, this directive can be used to configure certificate verification of the remote server.

    The following levels are available for level:

    • none: no remote server Certificate is required at all
    • optional: the remote server may present a valid Certificate
    • require: the remote server has to present a valid Certificate
    • optional_no_ca: the remote server may present a valid Certificate
      but it need not to be (successfully) verifiable.

    In practice only levels none and require are really interesting, because level optional doesn't work with all servers and level optional_no_ca is actually against the idea of authentication (but can be used to establish SSL test pages, etc.)

    Example

    SSLProxyVerify require
    top

    SSLProxyVerifyDepth Directive

    Description:Maximum depth of CA Certificates in Remote Server Certificate verification
    Syntax:SSLProxyVerifyDepth number
    Default:SSLProxyVerifyDepth 1
    Context:server config, virtual host, proxy section
    Status:Extension
    Module:mod_ssl
    Compatibility:The proxy section context is allowed in httpd 2.4.30 and later

    This directive sets how deeply mod_ssl should verify before deciding that the remote server does not have a valid certificate.

    The depth actually is the maximum number of intermediate certificate issuers, i.e. the number of CA certificates which are max allowed to be followed while verifying the remote server certificate. A depth of 0 means that self-signed remote server certificates are accepted only, the default depth of 1 means the remote server certificate can be self-signed or has to be signed by a CA which is directly known to the server (i.e. the CA's certificate is under SSLProxyCACertificatePath), etc.

    Example

    SSLProxyVerifyDepth 10
    top

    SSLRandomSeed Directive

    Description:Pseudo Random Number Generator (PRNG) seeding source
    Syntax:SSLRandomSeed context source [bytes]
    Context:server config
    Status:Extension
    Module:mod_ssl

    This configures one or more sources for seeding the Pseudo Random Number Generator (PRNG) in OpenSSL at startup time (context is startup) and/or just before a new SSL connection is established (context is connect). This directive can only be used in the global server context because the PRNG is a global facility.

    The following source variants are available:

    • builtin

      This is the always available builtin seeding source. Its usage consumes minimum CPU cycles under runtime and hence can be always used without drawbacks. The source used for seeding the PRNG contains of the current time, the current process id and a randomly chosen 128 bytes extract of the stack. The drawback is that this is not really a strong source and at startup time (where the scoreboard is still not available) this source just produces a few bytes of entropy. So you should always, at least for the startup, use an additional seeding source.

    • file:/path/to/source

      This variant uses an external file /path/to/source as the source for seeding the PRNG. When bytes is specified, only the first bytes number of bytes of the file form the entropy (and bytes is given to /path/to/source as the first argument). When bytes is not specified the whole file forms the entropy (and 0 is given to /path/to/source as the first argument). Use this especially at startup time, for instance with an available /dev/random and/or /dev/urandom devices (which usually exist on modern Unix derivatives like FreeBSD and Linux).

      But be careful: Usually /dev/random provides only as much entropy data as it actually has, i.e. when you request 512 bytes of entropy, but the device currently has only 100 bytes available two things can happen: On some platforms you receive only the 100 bytes while on other platforms the read blocks until enough bytes are available (which can take a long time). Here using an existing /dev/urandom is better, because it never blocks and actually gives the amount of requested data. The drawback is just that the quality of the received data may not be the best.

    • exec:/path/to/program

      This variant uses an external executable /path/to/program as the source for seeding the PRNG. When bytes is specified, only the first bytes number of bytes of its stdout contents form the entropy. When bytes is not specified, the entirety of the data produced on stdout form the entropy. Use this only at startup time when you need a very strong seeding with the help of an external program (for instance as in the example above with the truerand utility you can find in the mod_ssl distribution which is based on the AT&T truerand library). Using this in the connection context slows down the server too dramatically, of course. So usually you should avoid using external programs in that context.

    • egd:/path/to/egd-socket (Unix only)

      This variant uses the Unix domain socket of the external Entropy Gathering Daemon (EGD) (see http://www.lothar.com/tech /crypto/) to seed the PRNG. Use this if no random device exists on your platform.

    Example

    SSLRandomSeed startup builtin
    SSLRandomSeed startup "file:/dev/random"
    SSLRandomSeed startup "file:/dev/urandom" 1024
    SSLRandomSeed startup "exec:/usr/local/bin/truerand" 16
    SSLRandomSeed connect builtin
    SSLRandomSeed connect "file:/dev/random"
    SSLRandomSeed connect "file:/dev/urandom" 1024
    top

    SSLRenegBufferSize Directive

    Description:Set the size for the SSL renegotiation buffer
    Syntax:SSLRenegBufferSize bytes
    Default:SSLRenegBufferSize 131072
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_ssl

    If an SSL renegotiation is required in per-location context, for example, any use of SSLVerifyClient in a Directory or Location block, then mod_ssl must buffer any HTTP request body into memory until the new SSL handshake can be performed. This directive can be used to set the amount of memory that will be used for this buffer.

    Note that in many configurations, the client sending the request body will be untrusted so a denial of service attack by consumption of memory must be considered when changing this configuration setting.

    Example

    SSLRenegBufferSize 262144
    top

    SSLRequire Directive

    Description:Allow access only when an arbitrarily complex boolean expression is true
    Syntax:SSLRequire expression
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_ssl

    SSLRequire is deprecated

    SSLRequire is deprecated and should in general be replaced by Require expr. The so called ap_expr syntax of Require expr is a superset of the syntax of SSLRequire, with the following exception:

    In SSLRequire, the comparison operators <, <=, ... are completely equivalent to the operators lt, le, ... and work in a somewhat peculiar way that first compares the length of two strings and then the lexical order. On the other hand, ap_expr has two sets of comparison operators: The operators <, <=, ... do lexical string comparison, while the operators -lt, -le, ... do integer comparison. For the latter, there are also aliases without the leading dashes: lt, le, ...

    This directive specifies a general access requirement which has to be fulfilled in order to allow access. It is a very powerful directive because the requirement specification is an arbitrarily complex boolean expression containing any number of access checks.

    The expression must match the following syntax (given as a BNF grammar notation):

    expr     ::= "true" | "false"
               | "!" expr
               | expr "&&" expr
               | expr "||" expr
               | "(" expr ")"
               | comp
    
    comp     ::= word "==" word | word "eq" word
               | word "!=" word | word "ne" word
               | word "<"  word | word "lt" word
               | word "<=" word | word "le" word
               | word ">"  word | word "gt" word
               | word ">=" word | word "ge" word
               | word "in" "{" wordlist "}"
               | word "in" "PeerExtList(" word ")"
               | word "=~" regex
               | word "!~" regex
    
    wordlist ::= word
               | wordlist "," word
    
    word     ::= digit
               | cstring
               | variable
               | function
    
    digit    ::= [0-9]+
    cstring  ::= "..."
    variable ::= "%{" varname "}"
    function ::= funcname "(" funcargs ")"

    For varname any of the variables described in Environment Variables can be used. For funcname the available functions are listed in the ap_expr documentation.

    The expression is parsed into an internal machine representation when the configuration is loaded, and then evaluated during request processing. In .htaccess context, the expression is both parsed and executed each time the .htaccess file is encountered during request processing.

    Example

    SSLRequire (    %{SSL_CIPHER} !~ m/^(EXP|NULL)-/                   \
                and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd."          \
                and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"}    \
                and %{TIME_WDAY} -ge 1 and %{TIME_WDAY} -le 5          \
                and %{TIME_HOUR} -ge 8 and %{TIME_HOUR} -le 20       ) \
               or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/

    The PeerExtList(object-ID) function expects to find zero or more instances of the X.509 certificate extension identified by the given object ID (OID) in the client certificate. The expression evaluates to true if the left-hand side string matches exactly against the value of an extension identified with this OID. (If multiple extensions with the same OID are present, at least one extension must match).

    Example

    SSLRequire "foobar" in PeerExtList("1.2.3.4.5.6")

    Notes on the PeerExtList function

    • The object ID can be specified either as a descriptive name recognized by the SSL library, such as "nsComment", or as a numeric OID, such as "1.2.3.4.5.6".

    • Expressions with types known to the SSL library are rendered to a string before comparison. For an extension with a type not recognized by the SSL library, mod_ssl will parse the value if it is one of the primitive ASN.1 types UTF8String, IA5String, VisibleString, or BMPString. For an extension of one of these types, the string value will be converted to UTF-8 if necessary, then compared against the left-hand-side expression.

    See also

    top

    SSLRequireSSL Directive

    Description:Deny access when SSL is not used for the HTTP request
    Syntax:SSLRequireSSL
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_ssl

    This directive forbids access unless HTTP over SSL (i.e. HTTPS) is enabled for the current connection. This is very handy inside the SSL-enabled virtual host or directories for defending against configuration errors that expose stuff that should be protected. When this directive is present all requests are denied which are not using SSL.

    Example

    SSLRequireSSL
    top

    SSLSessionCache Directive

    Description:Type of the global/inter-process SSL Session Cache
    Syntax:SSLSessionCache type
    Default:SSLSessionCache none
    Context:server config
    Status:Extension
    Module:mod_ssl

    This configures the storage type of the global/inter-process SSL Session Cache. This cache is an optional facility which speeds up parallel request processing. For requests to the same server process (via HTTP keep-alive), OpenSSL already caches the SSL session information locally. But because modern clients request inlined images and other data via parallel requests (usually up to four parallel requests are common) those requests are served by different pre-forked server processes. Here an inter-process cache helps to avoid unnecessary session handshakes.

    The following five storage types are currently supported:

    • none

      This disables the global/inter-process Session Cache. This will incur a noticeable speed penalty and may cause problems if using certain browsers, particularly if client certificates are enabled. This setting is not recommended.

    • nonenotnull

      This disables any global/inter-process Session Cache. However it does force OpenSSL to send a non-null session ID to accommodate buggy clients that require one.

    • dbm:/path/to/datafile

      This makes use of a DBM hashfile on the local disk to synchronize the local OpenSSL memory caches of the server processes. This session cache may suffer reliability issues under high load. To use this, ensure that mod_socache_dbm is loaded.

    • shmcb:/path/to/datafile[(size)]

      This makes use of a high-performance cyclic buffer (approx. size bytes in size) inside a shared memory segment in RAM (established via /path/to/datafile) to synchronize the local OpenSSL memory caches of the server processes. This is the recommended session cache. To use this, ensure that mod_socache_shmcb is loaded.

    • dc:UNIX:/path/to/socket

      This makes use of the distcache distributed session caching libraries. The argument should specify the location of the server or proxy to be used using the distcache address syntax; for example, UNIX:/path/to/socket specifies a UNIX domain socket (typically a local dc_client proxy); IP:server.example.com:9001 specifies an IP address. To use this, ensure that mod_socache_dc is loaded.

    Examples

    SSLSessionCache "dbm:/usr/local/apache/logs/ssl_gcache_data"
    SSLSessionCache "shmcb:/usr/local/apache/logs/ssl_gcache_data(512000)"

    The ssl-cache mutex is used to serialize access to the session cache to prevent corruption. This mutex can be configured using the Mutex directive.

    top

    SSLSessionCacheTimeout Directive

    Description:Number of seconds before an SSL session expires in the Session Cache
    Syntax:SSLSessionCacheTimeout seconds
    Default:SSLSessionCacheTimeout 300
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Applies also to RFC 5077 TLS session resumption in Apache 2.4.10 and later

    This directive sets the timeout in seconds for the information stored in the global/inter-process SSL Session Cache, the OpenSSL internal memory cache and for sessions resumed by TLS session resumption (RFC 5077). It can be set as low as 15 for testing, but should be set to higher values like 300 in real life.

    Example

    SSLSessionCacheTimeout 600
    top

    SSLSessionTicketKeyFile Directive

    Description:Persistent encryption/decryption key for TLS session tickets
    Syntax:SSLSessionTicketKeyFile file-path
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available in httpd 2.4.0 and later, if using OpenSSL 0.9.8h or later

    Optionally configures a secret key for encrypting and decrypting TLS session tickets, as defined in RFC 5077. Primarily suitable for clustered environments where TLS sessions information should be shared between multiple nodes. For single-instance httpd setups, it is recommended to not configure a ticket key file, but to rely on (random) keys generated by mod_ssl at startup, instead.

    The ticket key file must contain 48 bytes of random data, preferrably created from a high-entropy source. On a Unix-based system, a ticket key file can be created as follows:

    dd if=/dev/random of=/path/to/file.tkey bs=1 count=48

    Ticket keys should be rotated (replaced) on a frequent basis, as this is the only way to invalidate an existing session ticket - OpenSSL currently doesn't allow to specify a limit for ticket lifetimes. A new ticket key only gets used after restarting the web server. All existing session tickets become invalid after a restart.

    The ticket key file contains sensitive keying material and should be protected with file permissions similar to those used for SSLCertificateKeyFile.

    top

    SSLSessionTickets Directive

    Description:Enable or disable use of TLS session tickets
    Syntax:SSLSessionTickets on|off
    Default:SSLSessionTickets on
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available in httpd 2.4.11 and later, if using OpenSSL 0.9.8f or later.

    This directive allows to enable or disable the use of TLS session tickets (RFC 5077).

    TLS session tickets are enabled by default. Using them without restarting the web server with an appropriate frequency (e.g. daily) compromises perfect forward secrecy.

    top

    SSLSRPUnknownUserSeed Directive

    Description:SRP unknown user seed
    Syntax:SSLSRPUnknownUserSeed secret-string
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available in httpd 2.4.4 and later, if using OpenSSL 1.0.1 or later

    This directive sets the seed used to fake SRP user parameters for unknown users, to avoid leaking whether a given user exists. Specify a secret string. If this directive is not used, then Apache will return the UNKNOWN_PSK_IDENTITY alert to clients who specify an unknown username.

    Example

    SSLSRPUnknownUserSeed "secret"

    top

    SSLSRPVerifierFile Directive

    Description:Path to SRP verifier file
    Syntax:SSLSRPVerifierFile file-path
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available in httpd 2.4.4 and later, if using OpenSSL 1.0.1 or later

    This directive enables TLS-SRP and sets the path to the OpenSSL SRP (Secure Remote Password) verifier file containing TLS-SRP usernames, verifiers, salts, and group parameters.

    Example

    SSLSRPVerifierFile "/path/to/file.srpv"

    The verifier file can be created with the openssl command line utility:

    Creating the SRP verifier file

    openssl srp -srpvfile passwd.srpv -userinfo "some info" -add username

    The value given with the optional -userinfo parameter is avalable in the SSL_SRP_USERINFO request environment variable.

    top

    SSLStaplingCache Directive

    Description:Configures the OCSP stapling cache
    Syntax:SSLStaplingCache type
    Context:server config
    Status:Extension
    Module:mod_ssl
    Compatibility:Available if using OpenSSL 0.9.8h or later

    Configures the cache used to store OCSP responses which get included in the TLS handshake if SSLUseStapling is enabled. Configuration of a cache is mandatory for OCSP stapling. With the exception of none and nonenotnull, the same storage types are supported as with SSLSessionCache.

    top

    SSLStaplingErrorCacheTimeout Directive

    Description:Number of seconds before expiring invalid responses in the OCSP stapling cache
    Syntax:SSLStaplingErrorCacheTimeout seconds
    Default:SSLStaplingErrorCacheTimeout 600
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available if using OpenSSL 0.9.8h or later

    Sets the timeout in seconds before invalid responses in the OCSP stapling cache (configured through SSLStaplingCache) will expire. To set the cache timeout for valid responses, see SSLStaplingStandardCacheTimeout.

    top

    SSLStaplingFakeTryLater Directive

    Description:Synthesize "tryLater" responses for failed OCSP stapling queries
    Syntax:SSLStaplingFakeTryLater on|off
    Default:SSLStaplingFakeTryLater on
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available if using OpenSSL 0.9.8h or later

    When enabled and a query to an OCSP responder for stapling purposes fails, mod_ssl will synthesize a "tryLater" response for the client. Only effective if SSLStaplingReturnResponderErrors is also enabled.

    top

    SSLStaplingForceURL Directive

    Description:Override the OCSP responder URI specified in the certificate's AIA extension
    Syntax:SSLStaplingForceURL uri
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available if using OpenSSL 0.9.8h or later

    This directive overrides the URI of an OCSP responder as obtained from the authorityInfoAccess (AIA) extension of the certificate. One potential use is when a proxy is used for retrieving OCSP queries.

    top

    SSLStaplingResponderTimeout Directive

    Description:Timeout for OCSP stapling queries
    Syntax:SSLStaplingResponderTimeout seconds
    Default:SSLStaplingResponderTimeout 10
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available if using OpenSSL 0.9.8h or later

    This option sets the timeout for queries to OCSP responders when SSLUseStapling is enabled and mod_ssl is querying a responder for OCSP stapling purposes.

    top

    SSLStaplingResponseMaxAge Directive

    Description:Maximum allowable age for OCSP stapling responses
    Syntax:SSLStaplingResponseMaxAge seconds
    Default:SSLStaplingResponseMaxAge -1
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available if using OpenSSL 0.9.8h or later

    This option sets the maximum allowable age ("freshness") when considering OCSP responses for stapling purposes, i.e. when SSLUseStapling is turned on. The default value (-1) does not enforce a maximum age, which means that OCSP responses are considered valid as long as their nextUpdate field is in the future.

    top

    SSLStaplingResponseTimeSkew Directive

    Description:Maximum allowable time skew for OCSP stapling response validation
    Syntax:SSLStaplingResponseTimeSkew seconds
    Default:SSLStaplingResponseTimeSkew 300
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available if using OpenSSL 0.9.8h or later

    This option sets the maximum allowable time skew when mod_ssl checks the thisUpdate and nextUpdate fields of OCSP responses which get included in the TLS handshake (OCSP stapling). Only applicable if SSLUseStapling is turned on.

    top

    SSLStaplingReturnResponderErrors Directive

    Description:Pass stapling related OCSP errors on to client
    Syntax:SSLStaplingReturnResponderErrors on|off
    Default:SSLStaplingReturnResponderErrors on
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available if using OpenSSL 0.9.8h or later

    When enabled, mod_ssl will pass responses from unsuccessful stapling related OCSP queries (such as responses with an overall status other than "successful", responses with a certificate status other than "good", expired responses etc.) on to the client. If set to off, only responses indicating a certificate status of "good" will be included in the TLS handshake.

    top

    SSLStaplingStandardCacheTimeout Directive

    Description:Number of seconds before expiring responses in the OCSP stapling cache
    Syntax:SSLStaplingStandardCacheTimeout seconds
    Default:SSLStaplingStandardCacheTimeout 3600
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available if using OpenSSL 0.9.8h or later

    Sets the timeout in seconds before responses in the OCSP stapling cache (configured through SSLStaplingCache) will expire. This directive applies to valid responses, while SSLStaplingErrorCacheTimeout is used for controlling the timeout for invalid/unavailable responses.

    top

    SSLStrictSNIVHostCheck Directive

    Description:Whether to allow non-SNI clients to access a name-based virtual host.
    Syntax:SSLStrictSNIVHostCheck on|off
    Default:SSLStrictSNIVHostCheck off
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available in Apache 2.2.12 and later

    This directive sets whether a non-SNI client is allowed to access a name-based virtual host. If set to on in the default name-based virtual host, clients that are SNI unaware will not be allowed to access any virtual host, belonging to this particular IP / port combination. If set to on in any other virtual host, SNI unaware clients are not allowed to access this particular virtual host.

    This option is only available if httpd was compiled against an SNI capable version of OpenSSL.

    Example

    SSLStrictSNIVHostCheck on
    top

    SSLUserName Directive

    Description:Variable name to determine user name
    Syntax:SSLUserName varname
    Context:server config, directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_ssl

    This directive sets the "user" field in the Apache request object. This is used by lower modules to identify the user with a character string. In particular, this may cause the environment variable REMOTE_USER to be set. The varname can be any of the SSL environment variables.

    Note that this directive has no effect if the FakeBasicAuth option is used (see SSLOptions).

    Example

    SSLUserName SSL_CLIENT_S_DN_CN
    top

    SSLUseStapling Directive

    Description:Enable stapling of OCSP responses in the TLS handshake
    Syntax:SSLUseStapling on|off
    Default:SSLUseStapling off
    Context:server config, virtual host
    Status:Extension
    Module:mod_ssl
    Compatibility:Available if using OpenSSL 0.9.8h or later

    This option enables OCSP stapling, as defined by the "Certificate Status Request" TLS extension specified in RFC 6066. If enabled (and requested by the client), mod_ssl will include an OCSP response for its own certificate in the TLS handshake. Configuring an SSLStaplingCache is a prerequisite for enabling OCSP stapling.

    OCSP stapling relieves the client of querying the OCSP responder on its own, but it should be noted that with the RFC 6066 specification, the server's CertificateStatus reply may only include an OCSP response for a single cert. For server certificates with intermediate CA certificates in their chain (the typical case nowadays), stapling in its current implementation therefore only partially achieves the stated goal of "saving roundtrips and resources" - see also RFC 6961 (TLS Multiple Certificate Status Extension).

    When OCSP stapling is enabled, the ssl-stapling mutex is used to control access to the OCSP stapling cache in order to prevent corruption, and the sss-stapling-refresh mutex is used to control refreshes of OCSP responses. These mutexes can be configured using the Mutex directive.

    top

    SSLVerifyClient Directive

    Description:Type of Client Certificate verification
    Syntax:SSLVerifyClient level
    Default:SSLVerifyClient none
    Context:server config, virtual host, directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_ssl

    This directive sets the Certificate verification level for the Client Authentication. Notice that this directive can be used both in per-server and per-directory context. In per-server context it applies to the client authentication process used in the standard SSL handshake when a connection is established. In per-directory context it forces a SSL renegotiation with the reconfigured client verification level after the HTTP request was read but before the HTTP response is sent.

    The following levels are available for level:

    • none: no client Certificate is required at all
    • optional: the client may present a valid Certificate
    • require: the client has to present a valid Certificate
    • optional_no_ca: the client may present a valid Certificate
      but it need not to be (successfully) verifiable. This option cannot be relied upon for client authentication.

    Example

    SSLVerifyClient require
    top

    SSLVerifyDepth Directive

    Description:Maximum depth of CA Certificates in Client Certificate verification
    Syntax:SSLVerifyDepth number
    Default:SSLVerifyDepth 1
    Context:server config, virtual host, directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_ssl

    This directive sets how deeply mod_ssl should verify before deciding that the clients don't have a valid certificate. Notice that this directive can be used both in per-server and per-directory context. In per-server context it applies to the client authentication process used in the standard SSL handshake when a connection is established. In per-directory context it forces a SSL renegotiation with the reconfigured client verification depth after the HTTP request was read but before the HTTP response is sent.

    The depth actually is the maximum number of intermediate certificate issuers, i.e. the number of CA certificates which are max allowed to be followed while verifying the client certificate. A depth of 0 means that self-signed client certificates are accepted only, the default depth of 1 means the client certificate can be self-signed or has to be signed by a CA which is directly known to the server (i.e. the CA's certificate is under SSLCACertificatePath), etc.

    Example

    SSLVerifyDepth 10

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dumpio.html.ja.utf80000644000000000000500000002450713412755316020537 0ustar rootsrc mod_dumpio - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_dumpio

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:望むよã†ã«ã™ã¹ã¦ã® I/O をエラーログã«ãƒ€ãƒ³ãƒ—ã™ã‚‹
    ステータス:Extension
    モジュール識別å­:dumpio_module
    ソースファイル:mod_dumpio.c

    概è¦

    mod_dumpio を使ã†ã¨ã€Apache ãŒå—ã‘å–ã£ãŸã™ã¹ã¦ã®å…¥åŠ›ã¨ Apache ã«ã‚ˆã‚Šé€ã‚‰ã‚ŒãŸã™ã¹ã¦ã®å‡ºåŠ›ã¨ã®ã€ä¸¡æ–¹ã‚‚ã—ãã¯ã©ã¡ã‚‰ã‹ä¸€æ–¹ã‚’〠エラーログファイルã«ãƒ­ã‚°åŽé›† (訳注: ダンプ dump) ã§ãã¾ã™ã€‚

    データã®ãƒ­ã‚®ãƒ³ã‚°ã¯ã€SSL 復å·åŒ–ã®ç›´å¾Œ (入力) 㨠SSL æš—å·åŒ–ã®ç›´å‰ (出力) ã«è¡Œãªã‚れã¾ã™ã€‚ã”æƒ³åƒã®é€šã‚Šã€ ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã¨ã¦ã¤ã‚‚ãªã„データé‡ã‚’出力ã—ã¾ã™ã®ã§ã€ å•題をデãƒãƒƒã‚°ã—ã¦ã„ã‚‹ã¨ãã«ã®ã¿ä½¿ç”¨ã™ã‚‹ã‚ˆã†ã«ã—ã¦ãã ã•ã„。

    Support Apache!

    トピック

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    dumpio サãƒãƒ¼ãƒˆã‚’有効ã«ã™ã‚‹

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’有効ã«ã™ã‚‹ã«ã¯ã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒã‚³ãƒ³ãƒ‘イルã•れã¦ã„ã¦ã€ 実行ã™ã‚‹ Apache ã®è¨­å®šã§ã‚µãƒ¼ãƒã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚ ロギング機能ã¯ã€ä»¥ä¸‹ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を使ã£ã¦æœ‰åйã«ã—ãŸã‚Š ç„¡åŠ¹ã«ã—ãŸã‚Šã§ãã¾ã™ã€‚

    top

    DumpIOInput ディレクティブ

    説明:エラーログã«ã™ã¹ã¦ã®å…¥åŠ›ãƒ‡ãƒ¼ã‚¿ã‚’ãƒ€ãƒ³ãƒ—
    æ§‹æ–‡:DumpIOInput On|Off
    デフォルト:DumpIOInput Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Extension
    モジュール:mod_dumpio
    äº’æ›æ€§:DumpIOInput 㯠Apache 2.1.3 以é™ã®ã¿ã§ä½¿ç”¨å¯èƒ½

    ã™ã¹ã¦ã®å…¥åŠ›ã®ãƒ€ãƒ³ãƒ—を有効ã«ã—ã¾ã™ã€‚

    例

    DumpIOInput On

    top

    DumpIOOutput ディレクティブ

    説明:エラーログã«ã™ã¹ã¦ã®å‡ºåŠ›ãƒ‡ãƒ¼ã‚¿ã‚’ãƒ€ãƒ³ãƒ—
    æ§‹æ–‡:DumpIOOutput On|Off
    デフォルト:DumpIOOutput Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Extension
    モジュール:mod_dumpio
    äº’æ›æ€§:DumpIOOutput 㯠Apache 2.1.3 以é™ã§ã®ã¿ä½¿ç”¨å¯èƒ½

    ã™ã¹ã¦ã®å‡ºåŠ›ã®ãƒ€ãƒ³ãƒ—を有効ã«ã—ã¾ã™ã€‚

    例

    DumpIOOutput On

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_deflate.html.fr.utf80000644000000000000500000007453213434266145020667 0ustar rootsrc mod_deflate - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_deflate

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Comprime le contenu avant de le servir au client
    Statut:Extension
    Identificateur de Module:deflate_module
    Fichier Source:mod_deflate.c

    Sommaire

    Le module mod_deflate implémente le filtre de sortie DEFLATE qui permet de comprimer la sortie de votre serveur avant de l'envoyer au client sur le réseau.

    top

    Codages supportés

    Le seul codage supporté est gzip afin d'assurer une complète compatibilité avec les anciens navigateurs. Le codage deflate n'est donc pas supporté ; voir à ce sujet la documentation de zlib pour une explication détaillée.

    top

    Exemples de configurations

    Compression et TLS

    Certaines applications web sont vulnérables aux attaques visant le vol d'information lorsqu'une connexion TLS transmet des données compressées par deflate. Pour plus de détails, étudiez les attaques de la famille "BREACH".

    Voici une configuration simple qui comprime les contenus à base de texte courants.

    Ne comprime que certains types de documents

    AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript
    top

    Activation de la compression

    Compression et TLS

    Certaines applications web sont vulnérables aux attaques pour vol d'information lorsque la connexion TLS transmet des données compressées par deflate. Pour plus d'informations, voir en détails la famille d'attaques de type "BREACH".

    Compression de la sortie

    La compression est implémentée par le filtre DEFLATE. La directive suivante active la compression des documents dans le conteneur où elle est placée :

    SetOutputFilter DEFLATE
    SetEnvIfNoCase Request_URI "\.(?:gif|jpe?g|png)$" no-gzip

    Si vous voulez limiter la compression à certains types MIME particuliers, vous pouvez utiliser la directive AddOutputFilterByType. Voici un exemple où la compression n'est activée que pour les fichiers html de la documentation d'Apache :

    <Directory "/your-server-root/manual">
        AddOutputFilterByType DEFLATE text/html
    </Directory>

    Note

    Le filtre DEFLATE est toujours inséré après les filtres RESOURCE comme PHP ou SSI. Il n'affecte jamais les sous-requêtes internes.

    Note

    La variable d'environnement force-gzip, définie à l'aide de la directive SetEnv, permet d'ignorer la configuration de votre navigateur quant aux codages acceptés, et d'envoyer sans condition une sortie comprimée.

    Décompression de la sortie

    Le module mod_deflate fournit aussi un filtre permettant de décomprimer un corps de réponse comprimé par gzip. Pour activer cette fonctionnalité, vous devez insérer le filtre INFLATE dans la chaîne de filtrage en sortie via la directive SetOutputFilter ou AddOutputFilter, comme dans l'exemple suivant :

    <Location "/dav-area">
        ProxyPass "http://example.com/"
        SetOutputFilter INFLATE
    </Location>

    Dans cet exemple, les sorties comprimées par gzip en provenance de example.com seront décomprimées afin de pouvoir être éventuellement traitées par d'autres filtres.

    Décompression de l'entrée

    Le module mod_deflate fournit également un filtre permettant de décomprimer un corps de requête comprimé par gzip. Pour activer cette fonctionnalité, vous devez insérer le filtre DEFLATE dans la chaîne de filtrage en entrée via la directive SetInputFilter ou AddInputFilter, comme dans l'exemple suivant :

    <Location "/dav-area">
        SetInputFilter DEFLATE
    </Location>

    Désormais, si une requête contient un en-tête Content-Encoding: gzip, son corps sera automatiquement décomprimé. Peu de navigateurs sont actuellement en mesure de comprimer les corps de requêtes. Cependant, certaines applications spécialisées supportent les requêtes comprimées, comme par exemple certains clients WebDAV.

    Note à propos de l'en-tête Content-Length

    Si vous évaluez vous-même la taille du corps de requête, ne faites pas confiance à l'en-tête Content-Length! L'en-tête Content-Length indique la longueur des données en provenance du client, et non la quantité d'octets que représente le flux de données décompressé.

    top

    Prise en compte des serveurs mandataires

    Le module mod_deflate envoie un en-tête de réponse HTTP Vary: Accept-Encoding pour avertir les mandataires qu'une réponse enregistrée dans le cache ne doit être envoyée qu'aux clients qui ont envoyé l'en-tête de requête Accept-Encoding approprié. Ceci permet d'éviter l'envoi d'un contenu comprimé à un client qui ne sera pas en mesure de l'interpréter.

    Si vous avez défini des exclusions spécifiques dépendant, par exemple, de l'en-tête User-Agent, vous devez ajouter manuellement des données à l'en-tête Vary afin d'informer les mandataires des restrictions supplémentaires. Par exemple, dans la configuration classique où l'addition du filtre DEFLATE dépend du contenu de l'en-tête User-Agent, vous devez spécifier :

    Header append Vary User-Agent

    Si votre décision de comprimer le contenu dépend d'autres informations que celles contenues dans les en-têtes de la requête (par exemple la version HTTP), vous devez attribuer à l'en-tête Vary la valeur *, ce qui permet d'empêcher les mandataires compatibles de tout mettre en cache.

    Exemple

    Header set Vary *
    top

    Servir du contenu précompressé

    Comme mod_deflate recompresse le contenu demandé à chaque requête, il est possible de gagner en performances en précompressant ce contenu, et en forçant mod_deflate à servir ce contenu précompressé sans avoir à le recompresser à chaque requête. Pour ce faire, utilisez une configuration du style :

    <IfModule mod_headers.c>
        # Servir des fichiers CSS et JS compressés avec gzip, s'ils existent, et
        # si le client accepte gzip.
        RewriteCond "%{HTTP:Accept-encoding}" "gzip"
        RewriteCond "%{REQUEST_FILENAME}\.gz" "-s"
        RewriteRule "^(.*)\.(css|js)" "$1\.$2\.gz" [QSA]
    
    
        # Servir des types de contenus corrects, et empêcher mod_deflate
        # d'effectuer un double gzip.
        RewriteRule "\.css\.gz$" "-" [T=text/css,E=no-gzip:1]
        RewriteRule "\.js\.gz$"  "-" [T=text/javascript,E=no-gzip:1]
    
    
        <FilesMatch "(\.js\.gz|\.css\.gz)$">
          # Servir le type de codage correct.
          Header append Content-Encoding gzip
    
          # Force les mandataires à mettre en cache séparément les fichiers
          # css/js gzippés & non gzippés.
          Header append Vary Accept-Encoding
        </FilesMatch>
    </IfModule>
    top

    Directive DeflateBufferSize

    Description:Taille du fragment que zlib devra comprimer en une seule fois
    Syntaxe:DeflateBufferSize valeur
    Défaut:DeflateBufferSize 8096
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_deflate

    La directive DeflateBufferSize permet de spécifier la taille en octets du fragment que zlib devra comprimer en une seule fois. Si la taille de la réponse compressée est supérieure à celle spécifiée par cette directive, httpd passera à un mode d'encodage fragmenté (l'en-tête HTTP Transfer-Encoding prend la valeur Chunked), ceci ayant comme effet de bord de ne définir aucun en-tête HTTP Content-Length. Il est important de connaître ce comportement, particulièrement lorsque httpd travaille derrière des mandataires inverses avec mise en cache, ou lorsque httpd est configuré pour utiliser mod_cache et mod_cache_disk car les réponses HTTP sans en-tête Content-Length peuvent ne pas être mises en cache.

    top

    Directive DeflateCompressionLevel

    Description:Le niveau de compression que nous appliquons à la sortie
    Syntaxe:DeflateCompressionLevel valeur
    Défaut:La valeur par défaut de zlib
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_deflate

    La directive DeflateCompressionLevel permet de spécifier le niveau de compression à utiliser ; plus grande est la valeur, meilleure sera la compression, mais plus grand sera aussi le temps CPU nécessaire pour effectuer le traitement.

    La valeur doit être comprise entre 1 (compression minimale) et 9 (compression maximale).

    top

    Directive DeflateFilterNote

    Description:Enregistre le taux de compression sous la forme d'une note à des fins de journalisation
    Syntaxe:DeflateFilterNote [type] nom de la note
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_deflate

    La directive DeflateFilterNote permet de spécifier qu'une note à propos du taux de compression doit être attachée à la requête. Le nom de la note est passé sous la forme d'un argument de la directive. Vous pouvez utiliser cette note à des fins statistiques en enregistrant sa valeur dans votre journal des accès.

    Exemple

          DeflateFilterNote ratio
        
          LogFormat '"%r" %b (%{ratio}n) "%{User-agent}i"' deflate
          CustomLog "logs/deflate_log" deflate

    Pour extraire des informations plus précises de vos journaux, vous pouvez utiliser l'argument type pour spécifier le type de données de la note enregistrée dans le journal. type peut prendre une des valeurs suivantes :

    Input
    Enregistre dans la note la taille en octets du flux en entrée du filtre.
    Output
    Enregistre dans la note la taille en octets du flux en sortie du filtre.
    Ratio
    Enregistre le taux de compression (sortie/entrée * 100) dans la note. Il s'agit de la valeur par défaut si l'argument type est omis.

    Vous pouvez donc configurer votre journalisation de la manière suivante :

    Journalisation détaillée

    DeflateFilterNote Input instream
    DeflateFilterNote Output outstream
    DeflateFilterNote Ratio ratio
    
    LogFormat '"%r" %{outstream}n/%{instream}n (%{ratio}n%%)' deflate
    CustomLog "logs/deflate_log" deflate

    Voir aussi

    top

    Directive DeflateInflateLimitRequestBody

    Description:Taille maximale des corps de requête décompressés
    Syntaxe:DeflateInflateLimitRequestBody value
    Défaut:Aucune limite, mais LimitRequestBody s'applique après la compression
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_deflate
    Compatibilité:Disponible à partir de la version 2.4.10 du serveur HTTP Apache

    La directive DeflateInflateLimitRequestBody permet de spécifier la taille maximale d'un corps de requête décompressé. Si elle n'est pas définie, c'est la valeur de la directive LimitRequestBody qui s'applique au corps de requête décompressé.

    top

    Directive DeflateInflateRatioBurst

    Description:Nombre maximal de fois que le ratio de décompression d'un corps de requête peut être dépassé
    Syntaxe:DeflateInflateRatioBurst value
    Défaut:DeflateInflateRatioBurst 3
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_deflate
    Compatibilité:Disponible à partir de la version 2.4.10 du serveur HTTP Apache

    La directive DeflateInflateRatioBurst permet de spécifier le nombre maximal de fois que la valeur de la directive DeflateInflateRatioLimit peut être dépassé avant l'arrêt du traitement de la requête.

    top

    Directive DeflateInflateRatioLimit

    Description:Ratio de décompression maximum pour les corps de requêtes
    Syntaxe:DeflateInflateRatioLimit value
    Défaut:DeflateInflateRatioLimit 200
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_deflate
    Compatibilité:Disponible à partir de la version 2.4.10 du serveur HTTP Apache

    La directive DeflateInflateRatioLimit permet de définir le ratio maximum entre la taille d'un corps de requête compressé et sa taille décompressée. Ce ratio est vérifié au fur et à mesure de l'arrivée du corps de requête, et s'il est dépassé plus de DeflateInflateRatioBurst fois, le traitement de la requête est interrompu.

    top

    Directive DeflateMemLevel

    Description:La quantité de mémoire utilisable par zlib pour la compression
    Syntaxe:DeflateMemLevel valeur
    Défaut:DeflateMemLevel 9
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_deflate

    La directive DeflateMemLevel permet de spécifier la quantité de mémoire utilisable par zlib pour la compression (une valeur comprise entre 1 et 9).

    top

    Directive DeflateWindowSize

    Description:Taille de la fenêtre de compression zlib
    Syntaxe:DeflateWindowSize valeur
    Défaut:DeflateWindowSize 15
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_deflate

    La directive DeflateWindowSize permet de spécifier la fenêtre de compression zlib (une valeur comprise entre 1 et 15). En général, plus grande sera la taille de la fenêtre, plus grand sera le taux de compression auquel on pourra s'attendre.

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/quickreference.html.tr.utf80000644000000000000500000056155013523273316021433 0ustar rootsrc Hızlı Yönerge Kılavuzu - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Hızlı Yönerge Kılavuzu

    Mevcut Diller:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Bu hızlı yönerge kılavuzunda Apache yapılandırma yönergelerinin kullanımı, öntanımlı değerleri, durumu ve bağlamı gösterilmiştir. Bunların her biri hakkında ayrıntılı bilgi almak için Yönerge Sözlüğüne bakınız.

    İlk sütunda yönergenin ismi ve kullanımı belirtilmiştir. İkinci sütunda yönergenin varsa öntanımlı değeri gösterilmiştir. Eğer öntanımlı değer sütuna sığmayacak kadar uzunsa sığmayan kısmı kırpılıp yerine “+†imi konmuştur.

    Aşağıda sağdaki gösterge tablolarına uygun olarak, üçüncü sütunda yönergenin kullanımına izin verilen bağlamlar, dördüncü sütunda ise yönergenin durumu gösterilmiştir.

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 
    ssunucu geneli
    ksanal konak
    ddizin
    h.htaccess
    vvekil bölümü
    ÇÇekirdek
    MMPM
    TTemel
    EEklenti
    DDeneysel
    HHarici
    AcceptFilter protocol kabul_süzgecisÇ
    Bir protokolün dinleyici soketleri için en iyilemeleri ayarlar
    AcceptPathInfo On|Off|Default Default skdhÇ
    Dosya isminden sonra belirtilen yol verisini kabul veya reddeder.
    AccessFileName filename [filename] ... .htaccess skÇ
    Dağıtık yapılandırma dosyasının ismi belirtilir.
    Action action-type cgi-script [virtual]skdhT
    Activates a CGI script for a particular handler or content-type
    AddAlt metin dosya [dosya] ...skdhT
    Dosyaya göre seçilen simgenin yerinde gösterilecek metni belirler.
    AddAltByEncoding metin MIME-kodlaması [MIME-kodlaması] ...skdhT
    Dosyanın MIME kodlamasına göre seçilen simgenin yerinde gösterilecek metni belirler.
    AddAltByType metin MIME-türü [MIME-türü] ...skdhT
    Dosyanın MIME türüne göre seçilen simgenin yerinde gösterilecek metni belirler.
    AddCharset charset extension [extension] ...skdhT
    Maps the given filename extensions to the specified content charset
    AddDefaultCharset On|Off|karküm Off skdhÇ
    Bir yanıtın içerik türü text/plain veya text/html olduğunda eklenecek öntanımlı karakter kümesi parametresini belirler.
    AddDescription metin dosya [dosya] ...skdhT
    Bir dosya için gösterilecek açıklama belirtilir.
    AddEncoding encoding extension [extension] ...skdhT
    Maps the given filename extensions to the specified encoding type
    AddHandler handler-name extension [extension] ...skdhT
    Maps the filename extensions to the specified handler
    AddIcon simge isim [isim] ...skdhT
    Bir dosya için gösterilecek simgeyi dosya adına göre belirler.
    AddIconByEncoding simge MIME-kodlaması [MIME-kodlaması] ...skdhT
    Bir dosya için gösterilecek simgeyi dosyanın MIME kodlamasına göre belirler.
    AddIconByType simge MIME-türü [MIME-türü] ...skdhT
    Bir dosya için gösterilecek simgeyi dosyanın MIME türüne göre belirler.
    AddInputFilter filter[;filter...] extension [extension] ...skdhT
    Maps filename extensions to the filters that will process client requests
    AddLanguage language-tag extension [extension] ...skdhT
    Maps the given filename extension to the specified content language
    AddModuleInfo module-name stringskE
    Adds additional information to the module information displayed by the server-info handler
    AddOutputFilter filter[;filter...] extension [extension] ...skdhT
    Maps filename extensions to the filters that will process responses from the server
    AddOutputFilterByType filter[;filter...] media-type [media-type] ...skdhT
    assigns an output filter to a particular media-type
    AddType media-type extension [extension] ...skdhT
    Maps the given filename extensions onto the specified content type
    Alias [URL-yolu] dosya-yolu | dizin-yoluskdT
    URL’leri dosya sistemi konumlarıyla eşler.
    AliasMatch "düzenli-ifade" "dosya-yolu|dizin-yolu"skT
    URL’leri dosya sistemi konumlarıyla düzenli ifadeleri kullanarak eşler.
    Allow from all|host|env=[!]env-variable [host|env=[!]env-variable] ...dhE
    Controls which hosts can access an area of the server
    AllowCONNECT port[-port] [port[-port]] ... 443 563 skE
    Ports that are allowed to CONNECT through the proxy
    AllowEncodedSlashes On|Off|NoDecode Off skÇ
    Kodlanmış dosya yolu ayracı içeren URL’lere izin verilip verilmeyeceğini belirler.
    AllowMethods reset|HTTP-method [HTTP-method]... reset dD
    Restrict access to the listed HTTP methods
    AllowOverride All|None|yönerge-türü [yönerge-türü] ... None (2.3.9 ve sonr +dÇ
    .htaccess dosyalarında bulunmasına izin verilen yönerge türleri belirtilir.
    AllowOverrideList None|yönerge [yönerge-türü] ... None dÇ
    .htaccess dosyalarında izin verilecek yönergeler tek tek belirtilir
    Anonymous user [user] ...dhE
    Specifies userIDs that are allowed access without password verification
    Anonymous_LogEmail On|Off On dhE
    Sets whether the password entered will be logged in the error log
    Anonymous_MustGiveEmail On|Off On dhE
    Specifies whether blank passwords are allowed
    Anonymous_NoUserID On|Off Off dhE
    Sets whether the userID field may be empty
    Anonymous_VerifyEmail On|Off Off dhE
    Sets whether to check the password field for a correctly formatted email address
    AsyncRequestWorkerFactor factorsM
    Limit concurrent connections per process
    AuthBasicAuthoritative On|Off On dhT
    Sets whether authorization and authentication are passed to lower level modules
    AuthBasicFake off|username [password]dhT
    Fake basic authentication using the given expressions for username and password
    AuthBasicProvider provider-name [provider-name] ... file dhT
    Sets the authentication provider(s) for this location
    AuthBasicUseDigestAlgorithm MD5|Off Off dhT
    Check passwords against the authentication providers as if Digest Authentication was in force instead of Basic Authentication.
    AuthDBDUserPWQuery querydE
    SQL query to look up a password for a user
    AuthDBDUserRealmQuery querydE
    SQL query to look up a password hash for a user and realm.
    AuthDBMGroupFile file-pathdhE
    Sets the name of the database file containing the list of user groups for authorization
    AuthDBMType default|SDBM|GDBM|NDBM|DB default dhE
    Sets the type of database file that is used to store passwords
    AuthDBMUserFile file-pathdhE
    Sets the name of a database file containing the list of users and passwords for authentication
    AuthDigestAlgorithm MD5|MD5-sess MD5 dhE
    Selects the algorithm used to calculate the challenge and response hashes in digest authentication
    AuthDigestDomain URI [URI] ...dhE
    URIs that are in the same protection space for digest authentication
    AuthDigestNonceLifetime seconds 300 dhE
    How long the server nonce is valid
    AuthDigestProvider provider-name [provider-name] ... file dhE
    Sets the authentication provider(s) for this location
    AuthDigestQop none|auth|auth-int [auth|auth-int] auth dhE
    Determines the quality-of-protection to use in digest authentication
    AuthDigestShmemSize size 1000 sE
    The amount of shared memory to allocate for keeping track of clients
    AuthFormAuthoritative On|Off On dhT
    Sets whether authorization and authentication are passed to lower level modules
    AuthFormBody fieldnamedT
    The name of a form field carrying the body of the request to attempt on successful login
    AuthFormDisableNoStore On|Off Off dT
    Disable the CacheControl no-store header on the login page
    AuthFormFakeBasicAuth On|Off Off dT
    Fake a Basic Authentication header
    AuthFormLocation fieldnamedT
    The name of a form field carrying a URL to redirect to on successful login
    AuthFormLoginRequiredLocation urldT
    The URL of the page to be redirected to should login be required
    AuthFormLoginSuccessLocation urldT
    The URL of the page to be redirected to should login be successful
    AuthFormLogoutLocation uridT
    The URL to redirect to after a user has logged out
    AuthFormMethod fieldnamedT
    The name of a form field carrying the method of the request to attempt on successful login
    AuthFormMimetype fieldnamedT
    The name of a form field carrying the mimetype of the body of the request to attempt on successful login
    AuthFormPassword fieldnamedT
    The name of a form field carrying the login password
    AuthFormProvider provider-name [provider-name] ... file dhT
    Sets the authentication provider(s) for this location
    AuthFormSitePassphrase secretdT
    Bypass authentication checks for high traffic sites
    AuthFormSize sizedT
    The largest size of the form in bytes that will be parsed for the login details
    AuthFormUsername fieldnamedT
    The name of a form field carrying the login username
    AuthGroupFile file-pathdhT
    Sets the name of a text file containing the list of user groups for authorization
    AuthLDAPAuthorizePrefix prefix AUTHORIZE_ dhE
    Specifies the prefix for environment variables set during authorization
    AuthLDAPBindAuthoritative off|on on dhE
    Determines if other authentication providers are used when a user can be mapped to a DN but the server cannot successfully bind with the user's credentials.
    AuthLDAPBindDN distinguished-namedhE
    Optional DN to use in binding to the LDAP server
    AuthLDAPBindPassword passworddhE
    Password used in conjunction with the bind DN
    AuthLDAPCharsetConfig file-pathsE
    Language to charset conversion configuration file
    AuthLDAPCompareAsUser on|off off dhE
    Use the authenticated user's credentials to perform authorization comparisons
    AuthLDAPCompareDNOnServer on|off on dhE
    Use the LDAP server to compare the DNs
    AuthLDAPDereferenceAliases never|searching|finding|always always dhE
    When will the module de-reference aliases
    AuthLDAPGroupAttribute attribute member uniqueMember +dhE
    LDAP attributes used to identify the user members of groups.
    AuthLDAPGroupAttributeIsDN on|off on dhE
    Use the DN of the client username when checking for group membership
    AuthLDAPInitialBindAsUser off|on off dhE
    Determines if the server does the initial DN lookup using the basic authentication users' own username, instead of anonymously or with hard-coded credentials for the server
    AuthLDAPInitialBindPattern regex substitution (.*) $1 (remote use +dhE
    Specifies the transformation of the basic authentication username to be used when binding to the LDAP server to perform a DN lookup
    AuthLDAPMaxSubGroupDepth Number 10 dhE
    Specifies the maximum sub-group nesting depth that will be evaluated before the user search is discontinued.
    AuthLDAPRemoteUserAttribute uiddhE
    Use the value of the attribute returned during the user query to set the REMOTE_USER environment variable
    AuthLDAPRemoteUserIsDN on|off off dhE
    Use the DN of the client username to set the REMOTE_USER environment variable
    AuthLDAPSearchAsUser on|off off dhE
    Use the authenticated user's credentials to perform authorization searches
    AuthLDAPSubGroupAttribute attribute member uniqueMember +dhE
    Specifies the attribute labels, one value per directive line, used to distinguish the members of the current group that are groups.
    AuthLDAPSubGroupClass LdapObjectClass groupOfNames groupO +dhE
    Specifies which LDAP objectClass values identify directory objects that are groups during sub-group processing.
    AuthLDAPURL url [NONE|SSL|TLS|STARTTLS]dhE
    URL specifying the LDAP search parameters
    AuthMerging Off | And | Or Off dhT
    Controls the manner in which each configuration section's authorization logic is combined with that of preceding configuration sections.
    AuthName auth-domaindhT
    Authorization realm for use in HTTP authentication
    AuthnCacheContext directory|server|custom-stringdT
    Specify a context string for use in the cache key
    AuthnCacheEnablesT
    Enable Authn caching configured anywhere
    AuthnCacheProvideFor authn-provider [...]dhT
    Specify which authn provider(s) to cache for
    AuthnCacheSOCache provider-name[:provider-args]sT
    Select socache backend provider to use
    AuthnCacheTimeout timeout (seconds)dhT
    Set a timeout for cache entries
    <AuthnProviderAlias baseProvider Alias> ... </AuthnProviderAlias>sT
    Enclose a group of directives that represent an extension of a base authentication provider and referenced by the specified alias
    AuthnzFcgiCheckAuthnProvider provider-name|None option ...dE
    Enables a FastCGI application to handle the check_authn authentication hook.
    AuthnzFcgiDefineProvider type provider-name backend-addresssE
    Defines a FastCGI application as a provider for authentication and/or authorization
    AuthType None|Basic|Digest|FormdhT
    Type of user authentication
    AuthUserFile file-pathdhT
    Sets the name of a text file containing the list of users and passwords for authentication
    AuthzDBDLoginToReferer On|Off Off dE
    Determines whether to redirect the Client to the Referring page on successful login or logout if a Referer request header is present
    AuthzDBDQuery querydE
    Specify the SQL Query for the required operation
    AuthzDBDRedirectQuery querydE
    Specify a query to look up a login page for the user
    AuthzDBMType default|SDBM|GDBM|NDBM|DB default dhE
    Sets the type of database file that is used to store list of user groups
    <AuthzProviderAlias baseProvider Alias Require-Parameters> ... </AuthzProviderAlias> sT
    Enclose a group of directives that represent an extension of a base authorization provider and referenced by the specified alias
    AuthzSendForbiddenOnFailure On|Off Off dhT
    Send '403 FORBIDDEN' instead of '401 UNAUTHORIZED' if authentication succeeds but authorization fails
    BalancerGrowth # 5 skE
    Number of additional Balancers that can be added Post-configuration
    BalancerInherit On|Off On skE
    Inherit ProxyPassed Balancers/Workers from the main server
    BalancerMember [balancerurl] url [key=value [key=value ...]]dE
    Add a member to a load balancing group
    BalancerPersist On|Off Off skE
    Attempt to persist changes made by the Balancer Manager across restarts.
    BrotliAlterETag AddSuffix|NoChange|Remove AddSuffix skE
    How the outgoing ETag header should be modified during compression
    BrotliCompressionMaxInputBlock valueskE
    Maximum input block size
    BrotliCompressionQuality value 5 skE
    Compression quality
    BrotliCompressionWindow value 18 skE
    Brotli sliding compression window size
    BrotliFilterNote [type] notenameskE
    Places the compression ratio in a note for logging
    BrowserMatch düzifd [!]ort-değişkeni[=değer] [[!]ort-değişkeni[=değer]] ...skdhT
    Ortam değişkenlerini HTTP kullanıcı arayüzüne göre belirler.
    BrowserMatchNoCase düzifd [!]ort-değişkeni[=değer] [[!]ort-değişkeni[=değer]] ...skdhT
    Ortam değişkenlerini HTTP kullanıcı arayüzünün harf büyüklüğüne duyarsız eşleşmelerine bağlı olarak belirler.
    BufferedLogs On|Off Off sT
    Günlük girdilerini diske yazmadan önce bellekte tamponlar
    BufferSize integer 131072 skdhE
    Maximum size in bytes to buffer by the buffer filter
    CacheDefaultExpire seconds 3600 (one hour) skdhE
    The default duration to cache a document when no expiry date is specified.
    CacheDetailHeader on|off off skdhE
    Add an X-Cache-Detail header to the response.
    CacheDirLength length 2 skE
    The number of characters in subdirectory names
    CacheDirLevels levels 2 skE
    The number of levels of subdirectories in the cache.
    CacheDisable url-string | onskdhE
    Disable caching of specified URLs
    CacheEnable cache_type [url-string]skdE
    Enable caching of specified URLs using a specified storage manager
    CacheFile file-path [file-path] ...sD
    Cache a list of file handles at startup time
    CacheHeader on|off off skdhE
    Add an X-Cache header to the response.
    CacheIgnoreCacheControl On|Off Off skE
    Ignore request to not serve cached content to client
    CacheIgnoreHeaders header-string [header-string] ... None skE
    Do not store the given HTTP header(s) in the cache.
    CacheIgnoreNoLastMod On|Off Off skdhE
    Ignore the fact that a response has no Last Modified header.
    CacheIgnoreQueryString On|Off Off skE
    Ignore query string when caching
    CacheIgnoreURLSessionIdentifiers identifier [identifier] ... None skE
    Ignore defined session identifiers encoded in the URL when caching
    CacheKeyBaseURL URLskE
    Override the base URL of reverse proxied cache keys.
    CacheLastModifiedFactor float 0.1 skdhE
    The factor used to compute an expiry date based on the LastModified date.
    CacheLock on|off off skE
    Enable the thundering herd lock.
    CacheLockMaxAge integer 5 skE
    Set the maximum possible age of a cache lock.
    CacheLockPath directory /tmp/mod_cache-lock +skE
    Set the lock path directory.
    CacheMaxExpire seconds 86400 (one day) skdhE
    The maximum time in seconds to cache a document
    CacheMaxFileSize bytes 1000000 skdhE
    The maximum size (in bytes) of a document to be placed in the cache
    CacheMinExpire seconds 0 skdhE
    The minimum time in seconds to cache a document
    CacheMinFileSize bytes 1 skdhE
    The minimum size (in bytes) of a document to be placed in the cache
    CacheNegotiatedDocs On|Off Off skT
    Allows content-negotiated documents to be cached by proxy servers
    CacheQuickHandler on|off on skE
    Run the cache from the quick handler.
    CacheReadSize bytes 0 skdhE
    The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    CacheReadTime milliseconds 0 skdhE
    The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    CacheRoot directoryskE
    The directory root under which cache files are stored
    CacheSocache type[:args]skE
    The shared object cache implementation to use
    CacheSocacheMaxSize bytes 102400 skdhE
    The maximum size (in bytes) of an entry to be placed in the cache
    CacheSocacheMaxTime seconds 86400 skdhE
    The maximum time (in seconds) for a document to be placed in the cache
    CacheSocacheMinTime seconds 600 skdhE
    The minimum time (in seconds) for a document to be placed in the cache
    CacheSocacheReadSize bytes 0 skdhE
    The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    CacheSocacheReadTime milliseconds 0 skdhE
    The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    CacheStaleOnError on|off on skdhE
    Serve stale content in place of 5xx responses.
    CacheStoreExpired On|Off Off skdhE
    Attempt to cache responses that the server reports as expired
    CacheStoreNoStore On|Off Off skdhE
    Attempt to cache requests or responses that have been marked as no-store.
    CacheStorePrivate On|Off Off skdhE
    Attempt to cache responses that the server has marked as private
    CGIDScriptTimeout time[s|ms]skdhT
    The length of time to wait for more output from the CGI program
    CGIMapExtension cgi-yolu .uzantıdhÇ
    CGI betik yorumlayıcısını saptama tekniğini belirler.
    CGIPassAuth On|Off Off dhÇ
    HTTP yetkilendirme başlıklarının betiklere CGI değişkenleri olarak aktarılmasını etkin kılar
    CGIVar değişken kuraldhÇ
    Bazı CGI değişkenlerinin nasıl atanacağını belirler
    CharsetDefault charsetskdhE
    Charset to translate into
    CharsetOptions option [option] ... ImplicitAdd skdhE
    Configures charset translation behavior
    CharsetSourceEnc charsetskdhE
    Source charset of files
    CheckCaseOnly on|off Off skdhE
    Limits the action of the speling module to case corrections
    CheckSpelling on|off Off skdhE
    Enables the spelling module
    ChrootDir /dizin/yolusT
    Sunucunun başlatıldıktan sonra chroot(8) yapacağı dizini belirler.
    ContentDigest On|Off Off skdhÇ
    Content-MD5 HTTP yanıt başlıklarının üretimini etkin kılar.
    CookieDomain domainskdhE
    The domain to which the tracking cookie applies
    CookieExpires expiry-periodskdhE
    Expiry time for the tracking cookie
    CookieName token Apache skdhE
    Name of the tracking cookie
    CookieStyle Netscape|Cookie|Cookie2|RFC2109|RFC2965 Netscape skdhE
    Format of the cookie header field
    CookieTracking on|off off skdhE
    Enables tracking cookie
    CoreDumpDirectory dizinsM
    core dosyasını dökümlemek üzere Apache HTTP Sunucusunun geçmeye çalışacağı dizin.
    CustomLog dosya|borulu-süreç biçem|takma-ad [env=[!]ortam-değişkeni]| expr=ifade]skT
    Günlük dosyasın ismini ve girdi biçemini belirler.
    Dav On|Off|provider-name Off dE
    Enable WebDAV HTTP methods
    DavDepthInfinity on|off off skdE
    Allow PROPFIND, Depth: Infinity requests
    DavGenericLockDB file-pathskdE
    Location of the DAV lock database
    DavLockDB file-pathskE
    Location of the DAV lock database
    DavMinTimeout seconds 0 skdE
    Minimum amount of time the server holds a lock on a DAV resource
    DBDExptime time-in-seconds 300 skE
    Keepalive time for idle connections
    DBDInitSQL "SQL statement"skE
    Execute an SQL statement after connecting to a database
    DBDKeep number 2 skE
    Maximum sustained number of connections
    DBDMax number 10 skE
    Maximum number of connections
    DBDMin number 1 skE
    Minimum number of connections
    DBDParams param1=value1[,param2=value2]skE
    Parameters for database connection
    DBDPersist On|OffskE
    Whether to use persistent connections
    DBDPrepareSQL "SQL statement" labelskE
    Define an SQL prepared statement
    DBDriver nameskE
    Specify an SQL driver
    DefaultIcon URL-yoluskdhT
    Özel bir simge atanmamış dosyalar için gösterilecek simgeyi belirler.
    DefaultLanguage language-tagskdhT
    Defines a default language-tag to be sent in the Content-Language header field for all resources in the current context that have not been assigned a language-tag by some other means.
    DefaultRuntimeDir dizin-yolu DEFAULT_REL_RUNTIME +sÇ
    Sunucunun çalışma anı dosyaları için temel dizin
    DefaultType ortam-türü|none none skdhÇ
    Değeri none olduğu takdirde, bu yönergenin bir uyarı vermekten başka bir etkisi yoktur. Önceki sürümlerde, bu yönerge, sunucunun ortam türünü saptayamadığı durumda göndereceği öntanımlı ortam türünü belirlerdi.
    Define değişken-ismi [değişken-değeri]skdÇ
    Bir değişken tanımlar
    DeflateBufferSize value 8096 skE
    Fragment size to be compressed at one time by zlib
    DeflateCompressionLevel valueskE
    How much compression do we apply to the output
    DeflateFilterNote [type] notenameskE
    Places the compression ratio in a note for logging
    DeflateInflateLimitRequestBody valueskdhE
    Maximum size of inflated request bodies
    DeflateInflateRatioBurst value 3 skdhE
    Maximum number of times the inflation ratio for request bodies can be crossed
    DeflateInflateRatioLimit value 200 skdhE
    Maximum inflation ratio for request bodies
    DeflateMemLevel value 9 skE
    How much memory should be used by zlib for compression
    DeflateWindowSize value 15 skE
    Zlib compression window size
    Deny from all|host|env=[!]env-variable [host|env=[!]env-variable] ...dhE
    Controls which hosts are denied access to the server
    <Directory dizin-yolu> ... </Directory>skÇ
    Sadece ismi belirtilen dosya sistemi dizininde ve bunun altdizinlerinde ve bunların içeriğinde uygulanacak bir yönerge grubunu sarmalar.
    DirectoryCheckHandler On|Off Off skdhT
    Başka bir eylemci yapılandırılmışsa bu modülün nasıl yanıt vereceğini belirler
    DirectoryIndex disabled | yerel-url [yerel-url] ... index.html skdhT
    İstemci bir dizin istediğinde dizin içeriğini listeler.
    DirectoryIndexRedirect on | off | permanent | temp | seeother | 3xx-kodu off skdhT
    Dizin içerik listeleri için harici bir yönlendirme yapılandırır.
    <DirectoryMatch düzifd> ... </DirectoryMatch>skÇ
    Bir düzenli ifade ile eşleşen dosya sistemi dizinlerinin içeriklerine uygulanacak bir yönerge grubunu sarmalar.
    DirectorySlash On|Off On skdhT
    Bölü çizgisi ile biten yönlendirmeleri açar/kapar.
    DocumentRoot dizin-yolu "/usr/local/apache/ +skÇ
    İstemciye görünür olan ana belge ağacının kök dizinini belirler.
    DTracePrivileges On|Off Off sD
    Determines whether the privileges required by dtrace are enabled.
    DumpIOInput On|Off Off sE
    Dump all input data to the error log
    DumpIOOutput On|Off Off sE
    Dump all output data to the error log
    <Else> ... </Else>skdhÇ
    Önceki bir <If> veya <ElseIf> bölümünün koşulu, çalışma anında bir istek tarafından yerine getirilmediği takdirde uygulanacak yönergeleri içerir
    <ElseIf ifade> ... </ElseIf>skdhÇ
    İçerdiği koşulun bir istek tarafınan sağlandığı ancak daha önceki bir <If> veya <ElseIf> bölümlerininkilerin sağlanmadığı durumda kapsadığı yönergelerin uygulanmasını sağlar
    EnableExceptionHook On|Off Off sM
    Bir çöküş sonrası olağandışılık eylemcilerini çalıştıracak kancayı etkin kılar.
    EnableMMAP On|Off On skdhÇ
    Teslimat sırasında okunacak dosyalar için bellek eşlemeyi etkin kılar.
    EnableSendfile On|Off Off skdhÇ
    Dosyaların istemciye tesliminde çekirdeğin dosya gönderme desteğinin kullanımını etkin kılar.
    Error iletiskdhÇ
    Özel bir hata iletisiyle yapılandırma çözümlemesini durdurur
    ErrorDocument hata-kodu belgeskdhÇ
    Bir hata durumunda sunucunun istemciye ne döndüreceğini belirler.
    ErrorLog dosya-yolu|syslog[:[oluşum][:etiket]] logs/error_log (Uni +skÇ
    Sunucunun hata günlüğünü tutacağı yeri belirler.
    ErrorLogFormat [connection|request] biçemskÇ
    Hata günlüğü girdileri için biçem belirtimi
    ExampleskdhD
    Demonstration directive to illustrate the Apache module API
    ExpiresActive On|Off Off skdhE
    Enables generation of Expires headers
    ExpiresByType MIME-type <code>secondsskdhE
    Value of the Expires header configured by MIME type
    ExpiresDefault <code>secondsskdhE
    Default algorithm for calculating expiration time
    ExtendedStatus On|Off Off[*] sÇ
    Her istekte ek durum bilgisinin izini sürer
    ExtFilterDefine filtername parameterssE
    Define an external filter
    ExtFilterOptions option [option] ... NoLogStderr dE
    Configure mod_ext_filter options
    FallbackResource disabled | yerel-urlskdhT
    Bir dosya ile eşleşmeyen istekler için öntanımlı URL tanımlar
    FileETag bileşen ... MTime Size skdhÇ
    Duruk dosyalar için ETag HTTP yanıt başlığını oluşturmakta kullanılacak dosya özniteliklerini belirler.
    <Files dosya-adı> ... </Files>skdhÇ
    Dosya isimleriyle eşleşme halinde uygulanacak yönergeleri içerir.
    <FilesMatch düzifd> ... </FilesMatch>skdhÇ
    Düzenli ifadelerin dosya isimleriyle eşleşmesi halinde uygulanacak yönergeleri içerir.
    FilterChain [+=-@!]filter-name ...skdhT
    Configure the filter chain
    FilterDeclare filter-name [type]skdhT
    Declare a smart filter
    FilterProtocol filter-name [provider-name] proto-flagsskdhT
    Deal with correct HTTP protocol handling
    FilterProvider filter-name provider-name expressionskdhT
    Register a content filter
    FilterTrace filter-name levelskdT
    Get debug/diagnostic information from mod_filter
    ForceLanguagePriority None|Prefer|Fallback [Prefer|Fallback] Prefer skdhT
    Action to take if a single acceptable document is not found
    ForceType ortam-türü|NonedhÇ
    Bütün dosyaların belirtilen ortam türüyle sunulmasına sebep olur.
    ForensicLog dosya-adı|borulu-süreçskE
    Adli günlük için dosya ismini belirler.
    GlobalLog dosya|boru|sağlayıcı biçem|takma_ad [env=[!]ortam_değişkeni| expr=ifade]sT
    Günlük dosyasının ismini ve biçemini belirler
    GprofDir /tmp/gprof/|/tmp/gprof/%skÇ
    gmon.out ayrıntılı inceleme verisinin yazılacağı dizin
    GracefulShutdownTimeout saniye 0 sM
    Sunucunun nazikçe kapatılmasının ardından ana süreç çıkana kadar geçecek süre için bir zaman aşımı belirler.
    Group unix-grubu #-1 sT
    İsteklere yanıt verecek sunucunun ait olacağı grubu belirler.
    H2CopyFiles on|off off skdhE
    Determine file handling in responses
    H2Direct on|off on for h2c, off for +skE
    H2 Direct Protocol Switch
    H2EarlyHints on|off off skE
    Determine sending of 103 status codes
    H2MaxSessionStreams n 100 skE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on skE
    Require HTTP/2 connections to be "modern TLS" only
    H2Padding numbits 0 skE
    Determine the range of padding bytes added to payload frames
    H2Push on|off on skdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 skE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 skE
    H2 Server Push Priority
    H2PushResource [add] path [critical]skdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off skE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 skE
    Maximum amount of output data buffered per stream.
    H2TLSCoolDownSecs seconds 1 skE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 skE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +skdhE
    H2 Upgrade Protocol Switch
    H2WindowSize bytes 65535 skE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] skdhE
    Configure HTTP response headers
    HeaderName dosya-ismiskdhT
    Dizin listesinin tepesine yerleştirilecek dosyanın ismini belirler.
    HeartbeatAddress addr:portsD
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsD
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sD
    Specifies the maximum number of servers that will be sending heartbeat requests to this server
    HeartbeatStorage file-path logs/hb.dat sD
    Path to store heartbeat data
    HeartbeatStorage file-path logs/hb.dat sD
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off skdÇ
    İstemci IP adresleri üzerinde DNS sorgularını etkin kılar.
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0] Strict LenientMetho +skÇ
    HTTP İstek İletilerindeki sınırlamalarda değişiklik yapar
    IdentityCheck On|Off Off skdE
    Enables logging of the RFC 1413 identity of the remote user
    IdentityCheckTimeout seconds 30 skdE
    Determines the timeout duration for ident requests
    <If ifade> ... </If>skdhÇ
    Çalışma anında bir koşul bir istek tarafından yerine getirildiği takdirde uygulanacak yönergeleri barındırır.
    <IfDefine [!]parametre-adı> ... </IfDefine>skdhÇ
    Başlatma sırasında bir doğruluk sınamasından sonra işleme sokulacak yönergeleri sarmalar.
    <IfDirective [!]yönerge-adı> ... </IfDirective>skdhÇ
    Belirtilen yönerge adının varlığı veya yokluğuna bağlı olarak çalıştırılacak yönergeleri sarmalar.
    <IfFile [!]dosyaadı> ... </IfFile>skdhÇ
    Başlatma sırasında bir dosyanın varlığı durumunda işleme sokulacak yönergeleri sarmalar.
    <IfModule [!]modül-dosyası|modül-betimleyici> ... </IfModule>skdhÇ
    Belli bir modülün varlığına veya yokluğuna göre işleme sokulacak yönergeleri sarmalar.
    <IfSection [!]bölüm-adı> ... </IfSection>skdhÇ
    Belirtilen bölüm adının varlığı veya yokluğuna bağlı olarak çalıştırılacak yönergeleri sarmalar.
    <IfVersion [[!]operator] version> ... </IfVersion>skdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ skdhT
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent skdhT
    Default action when an imagemap is called with coordinates that are not explicitly mapped
    ImapMenu none|formatted|semiformatted|unformatted formatted skdhT
    Action if no coordinates are given when calling an imagemap
    Include dosya-yolu|dizin-yolu|jokerskdÇ
    Sunucu yapılandırma dosyalarının başka dosyaları içermesini sağlar.
    IncludeOptional dosya-yolu|dizin-yolu|jokerskdÇ
    Diğer yapılandırma dosyalarının sunucu yapılandırma dosyasına dahil edilmesini sağlar
    IndexHeadInsert "imlenim ..."skdhT
    Bir dizin sayfasının HEAD bölümüne metin yerleştirir.
    IndexIgnore dosya [dosya] ... "." skdhT
    Dizin içerik listesinden gizlenecek dosyaların listesi belirtilir.
    IndexIgnoreReset ON|OFFskdhT
    Bir dizini listelerken gizlenecek dosyalar listesini boşaltır
    IndexOptions [+|-]seçenek [[+|-]seçenek] ...skdhT
    Dizin içerik listesini yapılandıracak seçenekler belirtilir.
    IndexOrderDefault Ascending|Descending Name|Date|Size|Description Ascending Name skdhT
    Dizin içerik listesinin öntanımlı sıralamasını belirler.
    IndexStyleSheet url-yoluskdhT
    Dizin listesine bir biçembent ekler.
    InputSed sed-commanddhD
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off skdhT
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log
    ISAPIAppendLogToQuery on|off on skdhT
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field
    ISAPICacheFile file-path [file-path] ...skT
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off skdhT
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off skdhT
    Log unsupported feature requests from ISAPI extensions
    ISAPIReadAheadBuffer size 49152 skdhT
    Size of the Read Ahead Buffer sent to ISAPI extensions
    KeepAlive On|Off On skÇ
    HTTP kalıcı bağlantılarını etkin kılar
    KeepAliveTimeout sayı[ms] 5 skÇ
    Bir kalıcı bağlantıda sunucunun bir sonraki isteği bekleme süresi
    KeptBodySize azami_bayt_sayısı 0 dT
    mod_include gibi süzgeçler tarafından kullanılma olasılığına karşı istek gövdesi iptal edilmek yerine belirtilen azami boyutta tutulur.
    LanguagePriority MIME-lang [MIME-lang] ...skdhT
    The precedence of language variants for cases where the client does not express a preference
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 skE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare operations
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain valid
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted Certificate Authority or global client certificates
    LDAPTrustedMode typeskE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit yöntem [yöntem] ... > ... </Limit>dhÇ
    Erişimi sınırlanacak HTTP yöntemleri için erişim sınırlayıcıları sarmalar.
    <LimitExcept yöntem [yöntem] ... > ... </LimitExcept>dhÇ
    İsimleri belirtilenler dışında kalan HTTP yöntemleri için kullanılacak erişim sınırlayıcıları sarmalar.
    LimitInternalRecursion sayı [sayı] 10 skÇ
    Dahili yönlendirmelerin ve istek içi isteklerin azami sayısını belirler.
    LimitRequestBody bayt-sayısı 0 skdhÇ
    İstemci tarafından gönderilen HTTP istek gövdesinin toplam uzunluğunu sınırlar.
    LimitRequestFields sayı 100 skÇ
    İstemciden kabul edilecek HTTP isteği başlık alanlarının sayısını sınırlar.
    LimitRequestFieldSize bayt-sayısı 8190 skÇ
    İstemciden kabul edilecek HTTP isteği başlık uzunluğunu sınırlar.
    LimitRequestLine bayt-sayısı 8190 skÇ
    İstemciden kabul edilecek HTTP istek satırının uzunluğunu sınırlar.
    LimitXMLRequestBody bayt-sayısı 1000000 skdhÇ
    Bir XML temelli istek gövdesinin uzunluğunu sınırlar.
    Listen [IP-adresi:]port-numarası [protokol]sM
    Sunucunun dinleyeceÄŸi IP adresini ve portu belirler.
    ListenBackLog kuyruk-uzunluÄŸu 511 sM
    Bekleyen bağlantılar kuyruğunun azami uzunluğunu belirler
    ListenCoresBucketsRatio oran 0 (iptal) sM
    İşlemci çekirdek sayısının dinleyenlerin buket sayısına oranı
    LoadFile dosya-ismi [dosya-ismi] ...skE
    Belirtilen nesne dosyasını veya kütüphaneyi sunucu ile ilintiler.
    LoadModule modül dosya-ismiskE
    Belirtilen nesne dosyasını veya kütüphaneyi sunucu ile ilintiler ve etkin modül listesine ekler.
    <Location URL-yolu|URL> ... </Location>skÇ
    İçerdiği yönergeler sadece eşleşen URL’lere uygulanır.
    <LocationMatch düzifade> ... </LocationMatch>skÇ
    İçerdiği yönergeler sadece düzenli ifadelerle eşleşen URL’lere uygulanır.
    LogFormat biçem|takma-ad [takma-ad] "%h %l %u %t \"%r\" +skT
    Bir günlük dosyasında kullanılmak üzere girdi biçemi tanımlar.
    LogIOTrackTTFB ON|OFF OFF skdhE
    İlk baytın yazılmasına kadar geçen süreyi izler
    LogLevel [modül:]seviye [modül:seviye] ... warn skdÇ
    Hata günlüklerinin ayrıntı seviyesini belirler.
    LogMessage message [hook=hook] [expr=expression] dD
    Log user-defined message to error log
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core
    LuaCodeCache stat|forever|never stat skdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]skdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]skdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]skdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_nameskdhE
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_nameskdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_nameskdhE
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_nameskdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]skE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_nameskdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first skdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]skdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soaskdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luaskdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_nameskE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directoryskdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once skdhE
    One of once, request, conn, thread -- default is once
    <Macro name [par1 .. parN]> ... </Macro>skdT
    Define a configuration file macro
    MaxConnectionsPerChild sayı 0 sM
    Tek bir çocuk sürecin ömrü boyunca işleme sokabileceği istek sayısını sınırlamakta kullanılır.
    MaxKeepAliveRequests sayı 100 skÇ
    Bir kalıcı bağlantıda izin verilen istek sayısı
    MaxMemFree kB-sayısı 2048 sM
    free() çağrılmaksızın ana bellek ayırıcının ayırmasına izin verilen azami bellek miktarını belirler.
    MaxRangeOverlaps default | unlimited | none | aralık-sayısı 20 skdÇ
    Özkaynağın tamamını döndürmeden önce izin verilen üst üste binen aralık sayısı (100-200,150-300 gibi)
    MaxRangeReversals default | unlimited | none | aralık-sayısı 20 skdÇ
    Özkaynağın tamamını döndürmeden önce izin verilen ters sıralı aralık sayısı (100-200,50-70 gibi)
    MaxRanges default | unlimited | none | aralık-sayısı 200 skdÇ
    Özkaynağın tamamını döndürmeden önce izin verilen aralık sayısı
    MaxRequestWorkers sayısM
    Aynı anda işleme sokulacak azami bağlantı sayısı
    MaxSpareServers sayı 10 sM
    Boştaki çocuk süreçlerin azami sayısı
    MaxSpareThreads numbersM
    Boştaki azami evre sayısını belirler
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDBaseServer on|off off sE
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sE
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsE
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url https://acme-v02.ap +sE
    The URL of the ACME Certificate Authority service.
    MDCertificateFile path-to-pem-filesE
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesE
    Specify a static private key for for the static cerrtificate.
    MDCertificateProtocol protocol ACME sE
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sE
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsE
    -
    MDDriveMode always|auto|manual auto sE
    former name of MDRenewMode.
    MDHttpProxy urlsE
    Define a proxy for outgoing connections.
    MDMember hostnamesE
    Additional hostname for the managed domain.
    MDMembers auto|manual auto sE
    Control if the alias domain names are automatically added.
    MDMessageCmd path-to-cmd optional-argssE
    Handle events for Manage Domains
    MDMustStaple on|off off sE
    Control if new certificates carry the OCSP Must Staple flag.
    MDNotifyCmd path [ args ]sE
    Run a program when a Managed Domain is ready.
    MDomain dns-name [ other-dns-name... ] [auto|manual]sE
    Define list of domain names that belong to one group.
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sE
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sE
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sE
    Set type and size of the private keys generated.
    MDRenewMode always|auto|manual auto sE
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sE
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sE
    Redirects http: traffic to https: for Managed Domains.
    MDServerStatus on|off on sE
    Control if Managed Domain information is added to server-status.
    MDStoreDir path md sE
    Path on the local file system to store the Managed Domains data.
    MDWarnWindow duration 10% sE
    Define the time window when you want to be warned about an expiring certificate.
    MemcacheConnTTL num[units] 15s skE
    Keepalive time for idle connections
    MergeSlashes ON|OFF ON skÇ
    Sunucunun URL’lerde ardışık bölü çizgilerini birleştirip birleştirmeyeceğini denetler.
    MergeTrailers [on|off] off skÇ
    Trailer alanlarının başlığa dahil edilip edilmeyeceğini belirler
    MetaDir directory .web skdhE
    Name of the directory to find CERN-style meta information files
    MetaFiles on|off off skdhE
    Activates CERN meta-file processing
    MetaSuffix suffix .meta skdhE
    File name suffix for the file containing CERN-style meta information
    MimeMagicFile file-pathskE
    Enable MIME-type determination based on file contents using the specified magic file
    MinSpareServers sayı 5 sM
    Boştaki çocuk süreçlerin asgari sayısı
    MinSpareThreads sayısM
    İsteklerin ani artışında devreye girecek boştaki evrelerin asgari sayısını belirler.
    MMapFile file-path [file-path] ...sD
    Map a list of files into memory at startup time
    ModemStandard V.21|V.26bis|V.32|V.34|V.92dD
    Modem standard to simulate
    ModMimeUsePathInfo On|Off Off dT
    Tells mod_mime to treat path_info components as part of the filename
    MultiviewsMatch Any|NegotiatedOnly|Filters|Handlers [Handlers|Filters] NegotiatedOnly skdhT
    The types of files that will be included when searching for a matching file with MultiViews
    Mutex mekanizma [default|muteks-ismi] ... [OmitPID] default sÇ
    Muteks mekanizmasını ve kilit dosyası dizinini tüm muteksler veya belirtilenler için yapılandırır
    NameVirtualHost adres[:port]sÇ
    ÖNERİLMİYOR: İsme dayalı sanal konaklar için IP adresi belirtir
    NoProxy host [host] ...skE
    Hosts, domains, or networks that will be connected to directly
    NWSSLTrustedCerts filename [filename] ...sT
    List of additional client certificates
    NWSSLUpgradeable [IP-address:]portnumbersT
    Allows a connection to be upgraded to an SSL connection upon request
    Options [+|-]seçenek [[+|-]seçenek] ... FollowSymlinks skdhÇ
    Belli bir dizinde geçerli olacak özellikleri yapılandırır.
    Order ordering Deny,Allow dhE
    Controls the default access state and the order in which Allow and Deny are evaluated.
    OutputSed sed-commanddhD
    Sed command for filtering response content
    PassEnv ortam-deÄŸiÅŸkeni [ortam-deÄŸiÅŸkeni] ...skdhT
    Ortam değişkenlerini kabuktan aktarır.
    PidFile dosya logs/httpd.pid sM
    Ana sürecin süreç kimliğinin (PID) kaydedileceği dosyayı belirler.
    PrivilegesMode FAST|SECURE|SELECTIVE FAST skdD
    Trade off processing speed and efficiency vs security against malicious privileges-aware code.
    Protocol protokolskÇ
    Dinlenen bir soket için protokol
    ProtocolEcho On|Off Off skD
    Turn the echo server on or off
    Protocols protokol ... http/1.1 skÇ
    Sunucu/sanal konak için kullanılabilecek protokoller
    ProtocolsHonorOrder On|Off On skÇ
    Uzlaşma sırasında protokollerin öncelik sırasını belirler
    <Proxy wildcard-url> ...</Proxy>skE
    Container for directives applied to proxied resources
    Proxy100Continue Off|On On skdE
    Forward 100-continue expectation to the origin server
    ProxyAddHeaders Off|On On skdE
    Add proxy information in X-Forwarded-* headers
    ProxyBadHeader IsError|Ignore|StartBody IsError skE
    Determines how to handle bad header lines in a response
    ProxyBlock *|word|host|domain [word|host|domain] ...skE
    Words, hosts, or domains that are banned from being proxied
    ProxyDomain DomainskE
    Default domain name for proxied requests
    ProxyErrorOverride On|Off Off skdE
    Override error pages for proxied content
    ProxyExpressDBMFile pathnameskE
    Pathname to DBM file.
    ProxyExpressDBMType type default skE
    DBM type of file.
    ProxyExpressEnable on|off off skE
    Enable the module functionality.
    ProxyFCGIBackendType FPM|GENERIC FPM skdhE
    Specify the type of backend FastCGI application
    ProxyFCGISetEnvIf conditional-expression [!]environment-variable-name [value-expression]skdhE
    Allow variables sent to FastCGI servers to be fixed up
    ProxyFtpDirCharset character_set ISO-8859-1 skdE
    Define the character set for proxied FTP listings
    ProxyFtpEscapeWildcards on|off on skdE
    Whether wildcards in requested filenames are escaped when sent to the FTP server
    ProxyFtpListOnWildcard on|off on skdE
    Whether wildcards in requested filenames trigger a file listing
    ProxyHCExpr name {ap_expr expression}skE
    Creates a named condition expression to use to determine health of the backend based on its response
    ProxyHCTemplate name parameter=setting [...]skE
    Creates a named template for setting various health check parameters
    ProxyHCTPsize size 16 sE
    Sets the total server-wide size of the threadpool used for the health check workers
    ProxyHTMLBufSize bytes 8192 skdT
    Sets the buffer size increment for buffering inline scripts and stylesheets.
    ProxyHTMLCharsetOut Charset | *skdT
    Specify a charset for mod_proxy_html output.
    ProxyHTMLDocType HTML|XHTML [Legacy]
    OR
    ProxyHTMLDocType fpi [SGML|XML]
    skdT
    Sets an HTML or XHTML document type declaration.
    ProxyHTMLEnable On|Off Off skdT
    Turns the proxy_html filter on or off.
    ProxyHTMLEvents attribute [attribute ...]skdT
    Specify attributes to treat as scripting events.
    ProxyHTMLExtended On|Off Off skdT
    Determines whether to fix links in inline scripts, stylesheets, and scripting events.
    ProxyHTMLFixups [lowercase] [dospath] [reset]skdT
    Fixes for simple HTML errors.
    ProxyHTMLInterp On|Off Off skdT
    Enables per-request interpolation of ProxyHTMLURLMap rules.
    ProxyHTMLLinks element attribute [attribute2 ...]skdT
    Specify HTML elements that have URL attributes to be rewritten.
    ProxyHTMLMeta On|Off Off skdT
    Turns on or off extra pre-parsing of metadata in HTML <head> sections.
    ProxyHTMLStripComments On|Off Off skdT
    Determines whether to strip HTML comments.
    ProxyHTMLURLMap from-pattern to-pattern [flags] [cond]skdT
    Defines a rule to rewrite HTML links
    ProxyIOBufferSize bytes 8192 skE
    Determine size of internal data throughput buffer
    <ProxyMatch regex> ...</ProxyMatch>skE
    Container for directives applied to regular-expression-matched proxied resources
    ProxyMaxForwards number -1 skE
    Maximium number of proxies that a request can be forwarded through
    ProxyPass [path] !|url [key=value [key=value ...]] [nocanon] [interpolate] [noquery]skdE
    Maps remote servers into the local server URL-space
    ProxyPassInherit On|Off On skE
    Inherit ProxyPass directives defined from the main server
    ProxyPassInterpolateEnv On|Off Off skdE
    Enable Environment Variable interpolation in Reverse Proxy configurations
    ProxyPassMatch [regex] !|url [key=value [key=value ...]]skdE
    Maps remote servers into the local server URL-space using regular expressions
    ProxyPassReverse [path] url [interpolate]skdE
    Adjusts the URL in HTTP response headers sent from a reverse proxied server
    ProxyPassReverseCookieDomain internal-domain public-domain [interpolate]skdE
    Adjusts the Domain string in Set-Cookie headers from a reverse- proxied server
    ProxyPassReverseCookiePath internal-path public-path [interpolate]skdE
    Adjusts the Path string in Set-Cookie headers from a reverse- proxied server
    ProxyPreserveHost On|Off Off skdE
    Use incoming Host HTTP request header for proxy request
    ProxyReceiveBufferSize bytes 0 skE
    Network buffer size for proxied HTTP and FTP connections
    ProxyRemote match remote-serverskE
    Remote proxy used to handle certain requests
    ProxyRemoteMatch regex remote-serverskE
    Remote proxy used to handle requests matched by regular expressions
    ProxyRequests On|Off Off skE
    Enables forward (standard) proxy requests
    ProxySCGIInternalRedirect On|Off|Headername On skdE
    Enable or disable internal redirect responses from the backend
    ProxySCGISendfile On|Off|Headername Off skdE
    Enable evaluation of X-Sendfile pseudo response header
    ProxySet url key=value [key=value ...]skdE
    Set various Proxy balancer or member parameters
    ProxySourceAddress addressskE
    Set local IP address for outgoing proxy connections
    ProxyStatus Off|On|Full Off skE
    Show Proxy LoadBalancer status in mod_status
    ProxyTimeout secondsskE
    Network timeout for proxied requests
    ProxyVia On|Off|Full|Block Off skE
    Information provided in the Via HTTP response header for proxied requests
    QualifyRedirectURL ON|OFF OFF skdÇ
    REDIRECT_URL ortam değişkeninin tamamen nitelenmiş olup olmayacağını denetler
    ReadmeName dosya-ismiskdhT
    Dizin listesinin sonuna yerleştirilecek dosyanın ismini belirler.
    ReceiveBufferSize bayt-sayısı 0 sM
    TCP alım tamponu boyu
    Redirect [durum] [URL-yolu] URLskdhT
    İstemciyi, bir yönlendirme isteği döndürerek farklı bir URL’ye yönlendirir.
    RedirectMatch [durum] düzenli-ifade URLskdhT
    Geçerli URL ile eşleşen bir düzenli ifadeye dayanarak bir harici yönlendirme gönderir.
    RedirectPermanent URL-yolu URLskdhT
    İstemciyi, kalıcı bir yönlendirme isteği döndürerek farklı bir URL’ye yönlendirir.
    RedirectTemp URL-yolu URLskdhT
    İstemciyi, geçici bir yönlendirme isteği döndürerek farklı bir URL’ye yönlendirir.
    RedisConnPoolTTL num[units] 15s skE
    TTL used for the connection pool with the Redis server(s)
    RedisTimeout num[units] 5s skE
    R/W timeout used for the connection with the Redis server(s)
    ReflectorHeader inputheader [outputheader]skdhT
    Reflect an input header to the output headers
    RegexDefaultOptions [none] [+|-]seçenek [[+|-]seçenek] ... DOLLAR_ENDONLY sÇ
    Regex düzenli ifadeleri için öntanımlı/küresel seçenekleri yapılandırır
    RegisterHttpMethod yöntem [yöntem [...]]sÇ
    Standart olmayan HTTP yöntemlerini devreye alır
    RemoteIPHeader header-fieldskT
    Declare the header field which should be parsed for useragent IP addresses
    RemoteIPInternalProxy proxy-ip|proxy-ip/subnet|hostname ...skT
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPInternalProxyList filenameskT
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPProxiesHeader HeaderFieldNameskT
    Declare the header field which will record all intermediate IP addresses
    RemoteIPProxyProtocol On|OffskT
    Enable or disable PROXY protocol handling
    RemoteIPProxyProtocolExceptions host|range [host|range] [host|range]skT
    Disable processing of PROXY header for certain hosts or networks
    RemoteIPTrustedProxy proxy-ip|proxy-ip/subnet|hostname ...skT
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPTrustedProxyList filenameskT
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoveCharset extension [extension] ...kdhT
    Removes any character set associations for a set of file extensions
    RemoveEncoding extension [extension] ...kdhT
    Removes any content encoding associations for a set of file extensions
    RemoveHandler extension [extension] ...kdhT
    Removes any handler associations for a set of file extensions
    RemoveInputFilter extension [extension] ...kdhT
    Removes any input filter associations for a set of file extensions
    RemoveLanguage extension [extension] ...kdhT
    Removes any language associations for a set of file extensions
    RemoveOutputFilter extension [extension] ...kdhT
    Removes any output filter associations for a set of file extensions
    RemoveType extension [extension] ...kdhT
    Removes any content type associations for a set of file extensions
    RequestHeader add|append|edit|edit*|merge|set|setifempty|unset header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] skdhE
    Configure HTTP request headers
    RequestReadTimeout [handshake=timeout[-maxtimeout][,MinRate=rate] [header=timeout[-maxtimeout][,MinRate=rate] [body=timeout[-maxtimeout][,MinRate=rate] handshake=0 header= +skE
    Set timeout values for completing the TLS handshake, receiving the request headers and/or body from client.
    Require [not] entity-name [entity-name] ...dhT
    Tests whether an authenticated user is authorized by an authorization provider.
    <RequireAll> ... </RequireAll>dhT
    Enclose a group of authorization directives of which none must fail and at least one must succeed for the enclosing directive to succeed.
    <RequireAny> ... </RequireAny>dhT
    Enclose a group of authorization directives of which one must succeed for the enclosing directive to succeed.
    <RequireNone> ... </RequireNone>dhT
    Enclose a group of authorization directives of which none must succeed for the enclosing directive to not fail.
    RewriteBase URL-pathdhE
    Sets the base URL for per-directory rewrites
    RewriteCond TestString CondPattern [flags]skdhE
    Defines a condition under which rewriting will take place
    RewriteEngine on|off off skdhE
    Enables or disables runtime rewriting engine
    RewriteMap MapName MapType:MapSource [MapTypeOptions] skE
    Defines a mapping function for key-lookup
    RewriteOptions OptionsskdhE
    Sets some special options for the rewrite engine
    RewriteRule Pattern Substitution [flags]skdhE
    Defines rules for the rewriting engine
    RLimitCPU saniye|max [saniye|max]skdhÇ
    Apache httpd alt süreçleri tarafından çalıştırılan süreçlerin işlemci tüketimine sınırlama getirir.
    RLimitMEM bayt-sayısı|max [bayt-sayısı|max] skdhÇ
    Apache httpd alt süreçleri tarafından çalıştırılan süreçlerin bellek tüketimine sınırlama getirir.
    RLimitNPROC sayı|max [sayı|max]skdhÇ
    Apache httpd alt süreçleri tarafından çalıştırılabilecek süreç sayısına sınırlama getirir.
    Satisfy Any|All All dhE
    Interaction between host-level access control and user authentication
    ScoreBoardFile dosya-yolu logs/apache_runtime +sM
    Çocuk süreçler için eşgüdüm verisini saklamakta kullanılan dosyanın yerini belirler.
    Script method cgi-scriptskdT
    Activates a CGI script for a particular request method.
    ScriptAlias [URL-yolu] dosya-yolu|dizin-yoluskdT
    Bir URL’yi dosya sistemindeki bir yere eşler ve hedefi bir CGI betiği olarak çalıştırır.
    ScriptAliasMatch düzenli-ifade dosya-yolu|dizin-yoluskT
    Bir URL’yi dosya sistemindeki bir yere düzenli ifade kullanarak eşler ve hedefi bir CGI betiği olarak çalıştırır.
    ScriptInterpreterSource Registry|Registry-Strict|Script Script skdhÇ
    CGI betikleri için yorumlayıcı belirleme tekniği
    ScriptLog file-pathskT
    Location of the CGI script error logfile
    ScriptLogBuffer bytes 1024 skT
    Maximum amount of PUT or POST requests that will be recorded in the scriptlog
    ScriptLogLength bytes 10385760 skT
    Size limit of the CGI script logfile
    ScriptSock file-path cgisock sT
    The filename prefix of the socket to use for communication with the cgi daemon
    SecureListen [IP-address:]portnumber Certificate-Name [MUTUAL]sT
    Enables SSL encryption for the specified port
    SeeRequestTail On|Off Off sÇ
    İsteğin 63 karakterden büyük olduğu varsayımıyla, mod_status'un ilk 63 karakteri mi yoksa son 63 karakteri mi göstereceğini belirler.
    SendBufferSize bayt-sayısı 0 sM
    TCP tamponu boyu
    ServerAdmin eposta-adresi|URLskÇ
    Sunucunun hata iletilerinde istemciye göstereceği eposta adresi
    ServerAlias konakadı [konakadı] ...kÇ
    İstekleri isme dayalı sanal konaklarla eşleştirilirken kullanılacak konak adları için başka isimler belirtebilmeyi sağlar.
    ServerLimit sayısM
    Ayarlanabilir süreç sayısının üst sınırını belirler.
    ServerName [şema://]alan-adı|ip-adresi[:port] skÇ
    Sunucunun özdeşleşeceği konak ismi ve port.
    ServerPath URL-yolukÇ
    Uyumsuz bir tarayıcı tarafından erişilmesi için bir isme dayalı sanal konak için meşru URL yolu
    ServerRoot dizin-yolu /usr/local/apache sÇ
    Sunucu yapılandırması için kök dizin
    ServerSignature On|Off|EMail Off skdhÇ
    Sunucu tarafından üretilen belgelerin dipnotunu ayarlar.
    ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full Full sÇ
    Server HTTP yanıt başlığını yapılandırır.
    Session On|Off Off skdhE
    Enables a session for the current directory or location
    SessionCookieName name attributesskdhE
    Name and attributes for the RFC2109 cookie storing the session
    SessionCookieName2 name attributesskdhE
    Name and attributes for the RFC2965 cookie storing the session
    SessionCookieRemove On|Off Off skdhE
    Control for whether session cookies should be removed from incoming HTTP headers
    SessionCryptoCipher name aes256 skdhD
    The crypto cipher to be used to encrypt the session
    SessionCryptoDriver name [param[=value]]sD
    The crypto driver to be used to encrypt the session
    SessionCryptoPassphrase secret [ secret ... ] skdhD
    The key used to encrypt the session
    SessionCryptoPassphraseFile filenameskdD
    File containing keys used to encrypt the session
    SessionDBDCookieName name attributesskdhE
    Name and attributes for the RFC2109 cookie storing the session ID
    SessionDBDCookieName2 name attributesskdhE
    Name and attributes for the RFC2965 cookie storing the session ID
    SessionDBDCookieRemove On|Off On skdhE
    Control for whether session ID cookies should be removed from incoming HTTP headers
    SessionDBDDeleteLabel label deletesession skdhE
    The SQL query to use to remove sessions from the database
    SessionDBDInsertLabel label insertsession skdhE
    The SQL query to use to insert sessions into the database
    SessionDBDPerUser On|Off Off skdhE
    Enable a per user session
    SessionDBDSelectLabel label selectsession skdhE
    The SQL query to use to select sessions from the database
    SessionDBDUpdateLabel label updatesession skdhE
    The SQL query to use to update existing sessions in the database
    SessionEnv On|Off Off skdhE
    Control whether the contents of the session are written to the HTTP_SESSION environment variable
    SessionExclude pathskdhE
    Define URL prefixes for which a session is ignored
    SessionExpiryUpdateInterval interval 0 (always update) skdhE
    Define the number of seconds a session's expiry may change without the session being updated
    SessionHeader headerskdhE
    Import session updates from a given HTTP response header
    SessionInclude pathskdhE
    Define URL prefixes for which a session is valid
    SessionMaxAge maxage 0 skdhE
    Define a maximum age in seconds for a session
    SetEnv ortam-deÄŸiÅŸkeni [deÄŸer]skdhT
    Ortam değişkenlerini tanımlar.
    SetEnvIf öznitelik düzifd [!]ort-değişkeni[=değer] [[!]ort-değişkeni[=değer]] ...skdhT
    Ortam değişkenlerini isteğin özniteliklerine göre atar.
    SetEnvIfExpr ifade [!]ort-deÄŸiÅŸkeni[=deÄŸer] [[!]ort-deÄŸiÅŸkeni[=deÄŸer]] ...skdhT
    Bir ap_expr ifadesine dayanarak ortam deÄŸiÅŸkenlerine deÄŸer atar
    SetEnvIfNoCase öznitelik düzifd [!]ort-değişkeni[=değer] [[!]ort-değişkeni[=değer]] ...skdhT
    Ortam değişkenlerini isteğin özniteliklerinde harf büyüklüğüne bağlı olmaksızın yapılmış tanımlara göre atar.
    SetHandler eylemci-ismi|none|ifadeskdhÇ
    Eşleşen tüm dosyaların belli bir eylemci tarafından işlenmesine sebep olur.
    SetInputFilter süzgeç[;süzgeç...]skdhÇ
    POST girdilerini ve istemci isteklerini işleyecek süzgeçleri belirler.
    SetOutputFilter süzgeç[;süzgeç...]skdhÇ
    Sunucunun yanıtlarını işleyecek süzgeçleri belirler.
    SSIEndTag tag "-->" skT
    String that ends an include element
    SSIErrorMsg message "[an error occurred +skdhT
    Error message displayed when there is an SSI error
    SSIETag on|off off dhT
    Controls whether ETags are generated by the server.
    SSILastModified on|off off dhT
    Controls whether Last-Modified headers are generated by the server.
    SSILegacyExprParser on|off off dhT
    Enable compatibility mode for conditional expressions.
    SSIStartTag tag "<!--#" skT
    String that starts an include element
    SSITimeFormat formatstring "%A, %d-%b-%Y %H:%M +skdhT
    Configures the format in which date strings are displayed
    SSIUndefinedEcho string "(none)" skdhT
    String displayed when an unset variable is echoed
    SSLCACertificateFile file-pathskE
    File of concatenated PEM-encoded CA Certificates for Client Auth
    SSLCACertificatePath directory-pathskE
    Directory of PEM-encoded CA Certificates for Client Auth
    SSLCADNRequestFile file-pathskE
    File of concatenated PEM-encoded CA Certificates for defining acceptable CA names
    SSLCADNRequestPath directory-pathskE
    Directory of PEM-encoded CA Certificates for defining acceptable CA names
    SSLCARevocationCheck chain|leaf|none [flags ...] none skE
    Enable CRL-based revocation checking
    SSLCARevocationFile file-pathskE
    File of concatenated PEM-encoded CA CRLs for Client Auth
    SSLCARevocationPath directory-pathskE
    Directory of PEM-encoded CA CRLs for Client Auth
    SSLCertificateChainFile file-pathskE
    File of PEM-encoded Server CA Certificates
    SSLCertificateFile file-pathskE
    Server PEM-encoded X.509 certificate data file
    SSLCertificateKeyFile file-pathskE
    Server PEM-encoded private key file
    SSLCipherSuite [protocol] cipher-spec DEFAULT (depends on +skdhE
    Cipher Suite available for negotiation in SSL handshake
    SSLCompression on|off off skE
    Enable compression on the SSL level
    SSLCryptoDevice engine builtin sE
    Enable use of a cryptographic hardware accelerator
    SSLEngine on|off|optional off skE
    SSL Engine Operation Switch
    SSLFIPS on|off off sE
    SSL FIPS mode Switch
    SSLHonorCipherOrder on|off off skE
    Option to prefer the server's cipher preference order
    SSLInsecureRenegotiation on|off off skE
    Option to enable support for insecure renegotiation
    SSLOCSPDefaultResponder uriskE
    Set the default responder URI for OCSP validation
    SSLOCSPEnable on|leaf|off off skE
    Enable OCSP validation of the client certificate chain
    SSLOCSPNoverify On/Off Off skE
    skip the OCSP responder certificates verification
    SSLOCSPOverrideResponder on|off off skE
    Force use of the default responder URI for OCSP validation
    SSLOCSPProxyURL urlskE
    Proxy URL to use for OCSP requests
    SSLOCSPResponderCertificateFile fileskE
    Set of trusted PEM encoded OCSP responder certificates
    SSLOCSPResponderTimeout seconds 10 skE
    Timeout for OCSP queries
    SSLOCSPResponseMaxAge seconds -1 skE
    Maximum allowable age for OCSP responses
    SSLOCSPResponseTimeSkew seconds 300 skE
    Maximum allowable time skew for OCSP response validation
    SSLOCSPUseRequestNonce on|off on skE
    Use a nonce within OCSP queries
    SSLOpenSSLConfCmd command-name command-valueskE
    Configure OpenSSL parameters through its SSL_CONF API
    SSLOptions [+|-]option ...skdhE
    Configure various SSL engine run-time options
    SSLPassPhraseDialog type builtin sE
    Type of pass phrase dialog for encrypted private keys
    SSLProtocol [+|-]protocol ... all -SSLv3 (up to 2 +skE
    Configure usable SSL/TLS protocol versions
    SSLProxyCACertificateFile file-pathskvE
    File of concatenated PEM-encoded CA Certificates for Remote Server Auth
    SSLProxyCACertificatePath directory-pathskvE
    Directory of PEM-encoded CA Certificates for Remote Server Auth
    SSLProxyCARevocationCheck chain|leaf|none none skvE
    Enable CRL-based revocation checking for Remote Server Auth
    SSLProxyCARevocationFile file-pathskvE
    File of concatenated PEM-encoded CA CRLs for Remote Server Auth
    SSLProxyCARevocationPath directory-pathskvE
    Directory of PEM-encoded CA CRLs for Remote Server Auth
    SSLProxyCheckPeerCN on|off on skvE
    Whether to check the remote server certificate's CN field
    SSLProxyCheckPeerExpire on|off on skvE
    Whether to check if remote server certificate is expired
    SSLProxyCheckPeerName on|off on skvE
    Configure host name checking for remote server certificates
    SSLProxyCipherSuite [protocol] cipher-spec ALL:!ADH:RC4+RSA:+H +skvE
    Cipher Suite available for negotiation in SSL proxy handshake
    SSLProxyEngine on|off off skvE
    SSL Proxy Engine Operation Switch
    SSLProxyMachineCertificateChainFile filenameskvE
    File of concatenated PEM-encoded CA certificates to be used by the proxy for choosing a certificate
    SSLProxyMachineCertificateFile filenameskvE
    File of concatenated PEM-encoded client certificates and keys to be used by the proxy
    SSLProxyMachineCertificatePath directoryskvE
    Directory of PEM-encoded client certificates and keys to be used by the proxy
    SSLProxyProtocol [+|-]protocol ... all -SSLv3 (up to 2 +skvE
    Configure usable SSL protocol flavors for proxy usage
    SSLProxyVerify level none skvE
    Type of remote server Certificate verification
    SSLProxyVerifyDepth number 1 skvE
    Maximum depth of CA Certificates in Remote Server Certificate verification
    SSLRandomSeed context source [bytes]sE
    Pseudo Random Number Generator (PRNG) seeding source
    SSLRenegBufferSize bytes 131072 dhE
    Set the size for the SSL renegotiation buffer
    SSLRequire expressiondhE
    Allow access only when an arbitrarily complex boolean expression is true
    SSLRequireSSLdhE
    Deny access when SSL is not used for the HTTP request
    SSLSessionCache type none sE
    Type of the global/inter-process SSL Session Cache
    SSLSessionCacheTimeout seconds 300 skE
    Number of seconds before an SSL session expires in the Session Cache
    SSLSessionTicketKeyFile file-pathskE
    Persistent encryption/decryption key for TLS session tickets
    SSLSessionTickets on|off on skE
    Enable or disable use of TLS session tickets
    SSLSRPUnknownUserSeed secret-stringskE
    SRP unknown user seed
    SSLSRPVerifierFile file-pathskE
    Path to SRP verifier file
    SSLStaplingCache typesE
    Configures the OCSP stapling cache
    SSLStaplingErrorCacheTimeout seconds 600 skE
    Number of seconds before expiring invalid responses in the OCSP stapling cache
    SSLStaplingFakeTryLater on|off on skE
    Synthesize "tryLater" responses for failed OCSP stapling queries
    SSLStaplingForceURL uriskE
    Override the OCSP responder URI specified in the certificate's AIA extension
    SSLStaplingResponderTimeout seconds 10 skE
    Timeout for OCSP stapling queries
    SSLStaplingResponseMaxAge seconds -1 skE
    Maximum allowable age for OCSP stapling responses
    SSLStaplingResponseTimeSkew seconds 300 skE
    Maximum allowable time skew for OCSP stapling response validation
    SSLStaplingReturnResponderErrors on|off on skE
    Pass stapling related OCSP errors on to client
    SSLStaplingStandardCacheTimeout seconds 3600 skE
    Number of seconds before expiring responses in the OCSP stapling cache
    SSLStrictSNIVHostCheck on|off off skE
    Whether to allow non-SNI clients to access a name-based virtual host.
    SSLUserName varnamesdhE
    Variable name to determine user name
    SSLUseStapling on|off off skE
    Enable stapling of OCSP responses in the TLS handshake
    SSLVerifyClient level none skdhE
    Type of Client Certificate verification
    SSLVerifyDepth number 1 skdhE
    Maximum depth of CA Certificates in Client Certificate verification
    StartServers sayısM
    Sunucunun başlatılması sırasında oluşturulan çocuk süreçlerin sayısını belirler.
    StartThreads sayısM
    Sunucunun başlatılması sırasında oluşturulan evrelerin sayısını belirler.
    Substitute s/pattern/substitution/[infq]dhE
    Pattern to filter the response content
    SubstituteInheritBefore on|off off dhE
    Change the merge order of inherited patterns
    SubstituteMaxLineLength bytes(b|B|k|K|m|M|g|G) 1m dhE
    Set the maximum line size
    Suexec On|OffsT
    suEXEC özelliğini etkin veya etkisiz yapar
    SuexecUserGroup Kullanıcı GrupskE
    CGI betiklerini çalıştıracak kullanıcı ve grup belirtilir.
    ThreadLimit sayısM
    Çocuk süreç başına ayarlanabilir evre sayısının üst sınırını belirler.
    ThreadsPerChild sayısM
    Her çocuk süreç tarafından oluşturulan evrelerin sayısını belirler.
    ThreadStackSize boyutsM
    İstemci bağlantılarını elde eden evreler tarafından kullanılan yığıtın bayt cinsinden uzunluğunu belirler.
    TimeOut saniye 60 skÇ
    Bir istek için başarısız olmadan önce belirli olayların gerçekleşmesi için sunucunun geçmesini bekleyeceği süre.
    TraceEnable [on|off|extended] on skÇ
    TRACE isteklerinde davranış şeklini belirler
    TransferLog dosya|borulu-süreç [takma-ad]skT
    Bir günlük dosyasının yerini belirtir.
    TypesConfig file-path conf/mime.types sT
    The location of the mime.types file
    UnDefine değişken-ismisÇ
    Bir değişkeni tanımsız yapar
    UndefMacro nameskdT
    Undefine a macro
    UnsetEnv ortam-deÄŸiÅŸkeni [ortam-deÄŸiÅŸkeni] ...skdhT
    Ortamdaki değişkenleri tanımsız hale getirir.
    Use name [value1 ... valueN] skdT
    Use a macro
    UseCanonicalName On|Off|DNS Off skdÇ
    Sunucunun kendi adını ve portunu nasıl belirleyeceğini ayarlar
    UseCanonicalPhysicalPort On|Off Off skdÇ
    Sunucunun kendi adını ve portunu nasıl belirleyeceğini ayarlar
    User unix-kullanıcısı #-1 sT
    İsteklere yanıt verecek sunucunun ait olacağı kullanıcıyı belirler.
    UserDir dizin [dizin] ...skT
    Kullanıcıya özel dizinlerin yeri
    VHostCGIMode On|Off|Secure On kD
    Determines whether the virtualhost can run subprocesses, and the privileges available to subprocesses.
    VHostCGIPrivs [+-]?privilege-name [[+-]?privilege-name] ...kD
    Assign arbitrary privileges to subprocesses created by a virtual host.
    VHostGroup unix-groupidkD
    Sets the Group ID under which a virtual host runs.
    VHostPrivs [+-]?privilege-name [[+-]?privilege-name] ...kD
    Assign arbitrary privileges to a virtual host.
    VHostSecure On|Off On kD
    Determines whether the server runs with enhanced security for the virtualhost.
    VHostUser unix-useridkD
    Sets the User ID under which a virtual host runs.
    VirtualDocumentRoot hesaplanan-dizin|none none skE
    Bir sanal konağın belge kök dizinini devingen olarak yapılandırır.
    VirtualDocumentRootIP hesaplanan-dizin|none none skE
    Bir sanal konağın belge kök dizinini devingen olarak yapılandırır.
    <VirtualHost adres[:port] [adres[:port]] ...> ... </VirtualHost>sÇ
    Sadece belli bir konak ismine ve porta uygulanacak yönergeleri barındırır.
    VirtualScriptAlias hesaplanan-dizin|none none skE
    Bir sanal konağın CGI dizinini devingen olarak yapılandırır.
    VirtualScriptAliasIP hesaplanan-dizin|none none skE
    Bir sanal konağın CGI dizinini devingen olarak yapılandırır.
    WatchdogInterval time-interval[s] 1 sT
    Watchdog interval in seconds
    XBitHack on|off|full off skdhT
    Parse SSI directives in files with the execute bit set
    xml2EncAlias charset alias [alias ...]sT
    Recognise Aliases for encoding values
    xml2EncDefault nameskdhT
    Sets a default encoding to assume when absolutely no information can be automatically detected
    xml2StartParse element [element ...]skdhT
    Advise the parser to skip leading junk.

    Mevcut Diller:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_wstunnel.html.en0000644000000000000500000001674413412755316021511 0ustar rootsrc mod_proxy_wstunnel - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy_wstunnel

    Available Languages:  en  |  fr 

    Description:Websockets support module for mod_proxy
    Status:Extension
    Module Identifier:proxy_wstunnel_module
    Source File:mod_proxy_wstunnel.c
    Compatibility:Available in httpd 2.4.5 and later

    Summary

    This module requires the service of mod_proxy. It provides support for the tunnelling of web socket connections to a backend websockets server. The connection is automatically upgraded to a websocket connection:

    HTTP Response

    Upgrade: WebSocket
    Connection: Upgrade

    Proxying requests to a websockets server like echo.websocket.org can be done using the ProxyPass directive:

    ProxyPass "/ws2/"  "ws://echo.websocket.org/"
    ProxyPass "/wss2/" "wss://echo.websocket.org/"

    Load balancing for multiple backends can be achieved using mod_proxy_balancer.

    In fact the module can be used to upgrade to other protocols, you can set the upgrade parameter in the ProxyPass directive to allow the module to accept other protocol. NONE means you bypass the check for the header but still upgrade to WebSocket. ANY means that Upgrade will read in the request headers and use in the response Upgrade

    Support Apache!

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_groupfile.html0000644000000000000500000000066313362070302021155 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authz_groupfile.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authz_groupfile.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_authz_groupfile.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_authz_groupfile.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_proxy_ftp.html.fr.utf80000644000000000000500000005053013412755316021304 0ustar rootsrc mod_proxy_ftp - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_proxy_ftp

    Langues Disponibles:  en  |  fr 

    Description:Module fournissant le support FTP à mod_proxy
    Statut:Extension
    Identificateur de Module:proxy_ftp_module
    Fichier Source:mod_proxy_ftp.c

    Sommaire

    Pour pouvoir fonctionner, ce module requiert le chargement de mod_proxy. Il fournit le support du mandatement des sites FTP. Notez que le support FTP est actuellement limité à la méthode GET.

    Ainsi, pour pouvoir traiter les requêtes FTP mandatées, mod_proxy, et mod_proxy_ftp doivent être chargés dans le serveur.

    Avertissement

    N'activez pas la fonctionnalité de mandataire avant d'avoir sécurisé votre serveur. Les serveurs mandataires ouverts sont dangereux non seulement pour votre réseau, mais aussi pour l'Internet au sens large.

    top

    Pourquoi les fichiers du type xxx ne sont-ils pas téléchargeables par FTP ?

    Ce type particulier de fichier n'est probablement pas défini en temps que application/octet-stream dans le fichier de configuration mime.types de votre mandataire. La ligne suivante peut y remédier :

    application/octet-stream   bin dms lha lzh exe class tgz taz

    Vous pouvez aussi utiliser la directive ForceType pour définir par défaut tous les types de fichiers en tant que fichiers binaires :

    ForceType application/octet-stream
    top

    Comment puis-je forcer le téléchargement FTP en mode ASCII du fichier xxx ?

    Dans les rares siruations où vous devez télécharger un fichier spécifique en utilisant la méthode de transfert FTP ASCII (alors que le mode transfert par défaut est binary), vous pouvez modifier le mode de transfert de mod_proxy en suffixant la requête avec ;type=a pour forcer un transfert en mode ASCII (les listings de répertoires FTP sont cependant quant à eux transmis en mode ASCII).

    top

    Comment puis-je effectuer un chargement FTP ?

    Actuellement, seule la méthode GET est supportée pour FTP dans mod_proxy. Vous pouvez par contre utiliser le chargement HTTP (POST or PUT) via un mandataire Apache.

    top

    Comment puis-je accéder par FTP à des fichiers situés en dehors de mon répertoire home ?

    Un URI FTP est considéré comme relatif au répertoire home de l'utilisateur connecté. Hélas, vous ne pouvez pas utiliser /../ pour atteindre des répertoires de niveau supérieur, car les points sont interprétés par le navigateur et ne sont donc pas vraiment envoyés au serveur FTP. Pour traiter ce problème, une méthode nommée Squid %2f hack a été implémentée dans le mandataire FTP Apache ; cette solution est aussi utilisée par d'autres serveurs mandataires courants comme le Cache mandataire Squid. En préfixant par /%2f le chemin de votre requête, vous pouvez faire en sorte que le mandataire modifie le répertoire FTP racine en / (au lieu du répertoire home). Par exemple, pour extraire le fichier /etc/motd, vous pourriez utiliser l'URL :

    ftp://utilisateur@serveur/%2f/etc/motd

    top

    Comment puis-je dissimuler le mot de passe FTP apparaissant en clair dans la ligne d'URL de mon navigateur ?

    Apache utilise différentes stratégies pour effectuer une connexion à un serveur FTP à l'aide d'un nom d'utilisateur et d'un mot de passe. En l'absence de nom d'utilisateur et de mot de passe dans l'URL, Apache tente une connexion anonyme auprès du serveur FTP comme suit :

    utilisateur : anonymous
    mot de passe : apache-proxy@

    Ceci fonctionne avec tous les serveurs FTP courants configurés pour accepter les connexions anonymes.

    Pour une connexion personnalisée avec un nom d'utilisateur spécifique, vous pouvez intégrer ce dernier dans l'URL comme suit :

    ftp://nom-utilisateur@serveur/mon-fichier

    Si le serveur FTP demande un mot de passe pour ce nom d'utilisateur (ce qu'il est censé faire), Apache va renvoyer au client une réponse 401 (Autorisation requise), ce qui fera afficher au navigateur une boîte de dialogue utilisateur/mot de passe. Une fois le mot de passe saisi, la connexion est tentée à nouveau, et si elle réussit, la ressource demandée est présentée. L'avantage de cette procédure réside dans le fait que votre navigateur n'affiche pas le mot de passe en clair, ce qu'il aurait fait si vous aviez utilisé l'URL :

    ftp://nom-utilisateur:mot-de-passe@serveur/mon-fichier

    Note

    Le mot de passe transmis de cette manière n'est pas chiffré lorsqu'il est envoyé. Il transite entre votre navigateur et le serveur mandataire Apache sous la forme d'une chaîne de texte en clair codée en base64, et entre le mandataire Apache et le serveur FTP en texte pur. Vous devez par conséquent réfléchir à deux fois avant d'accéder à votre serveur FTP via HTTP (et d'une manière générale avant d'accéder à vos fichiers personnels via FTP !) sur des canaux non sécurisés, car des oreilles indiscrètes pourraient intercepter votre mot de passe au cours de son transfert.

    top

    Pourquoi reçois-je un listing de fichiers alors que j'ai demandé le téléchargement d'un fichier ?

    Apache examine l'URL de la requête afin de permettre la navigation dans les répertoires d'un serveur FTP ainsi que le téléchargement de fichiers. Si elle ressemble à un répertoire, ou contient des caractères génériques ("*?[{~"), alors Apache considère que c'est un listing qui est demandé, et non un téléchargement.

    Vous pouvez désactiver le traitement spécial des noms contenant des caractères génériques. Voir à cet effet la directive ProxyFtpListOnWildcard.

    top

    Directive ProxyFtpDirCharset

    Description:Définit le jeu de caractères des listings FTP mandatés
    Syntaxe:ProxyFtpDirCharset character_set
    Défaut:ProxyFtpDirCharset ISO-8859-1
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy_ftp
    Compatibilité:Disponible à partir de la version 2.2.7 du serveur HTTP Apache. Déplacé depuis mod_proxy à partir de la version 2.3.5

    La directive ProxyFtpDirCharset permet de définir le jeu de caractères à utiliser pour les listings FTP en HTML générés par mod_proxy_ftp.

    top

    Directive ProxyFtpEscapeWildcards

    Description:Les caractères génériques dans les noms de fichiers doivent-ils être échappés lorsqu'ils sont envoyés au serveur FTP ?
    Syntaxe:ProxyFtpEscapeWildcards on|off
    Défaut:ProxyFtpEscapeWildcards on
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy_ftp
    Compatibilité:Disponible depuis la version 2.3.3 du serveur HTTP Apache

    La directive ProxyFtpEscapeWildcards permet de déterminer si les caractères génériques ("*?[{~") que contiennent les noms de fichiers demandés doivent être échappés pas un slash inversé avant d'être envoyés au serveur FTP. Il s'agit du comportement par défaut ; cependant, de nombreux serveurs FTP n'ont aucune connaissance de la notion d'échappement, et tentent de servir le fichier demandé sous sa forme littérale, en incluant les slashes inversés dans son nom.

    Définissez cette directive à "off" pour permettre le téléchargement de fichiers dont les noms contiennent des caractères génériques depuis des serveurs FTP qui ne connaissent pas l'échappement des caractères génériques.

    top

    Directive ProxyFtpListOnWildcard

    Description:Les caractères génériques dans les noms de fichiers demandés doivent-ils déclencher l'affichage d'un listing ?
    Syntaxe:ProxyFtpListOnWildcard on|off
    Défaut:ProxyFtpListOnWildcard on
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_proxy_ftp
    Compatibilité:Disponible depuis la version 2.3.3 du serveur HTTP Apache

    La directive ProxyFtpListOnWildcard permet de déterminer si les caractères génériques ("*?[{~") que contiennent les noms de fichiers demandés provoquent l'affichage d'un listing de fichiers par mod_proxy_ftp au lieu de télécharger un fichier. Il s'agit de leur comportement par défaut (valeur on).

    Définissez cette directive à "off" pour permettre le téléchargement de fichiers même si leur nom contient des caractères génériques.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_filter.html.fr.utf80000644000000000000500000010550213412755316020537 0ustar rootsrc mod_filter - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_filter

    Langues Disponibles:  en  |  fr 

    Description:Module de configuration de filtre intelligent sensible au contexte
    Statut:Base
    Identificateur de Module:filter_module
    Fichier Source:mod_filter.c
    Compatibilité:Versions 2.1 et supérieures

    Sommaire

    Ce module permet une configuration intelligente et dépendant du contexte des filtres de contenu en sortie. Par exemple, Apache peut être configuré pour faire traiter différents types de contenus par différents filtres, même lorsque le type de contenu n'est pas connu à l'avance (par exemple dans un serveur mandataire).

    Le fonctionnement de mod_filter consiste à introduire des branchements dans la chaîne de filtrage. Plutôt que d'insérer directement des filtres dans la chaîne, on insère un sélecteur de filtre qui va effectuer un branchement conditionnel vers un fournisseur de filtre. mod_filter peut utiliser tout filtre de contenu comme fournisseur ; aucune modification des modules de filtrage existants n'est nécessaire (bien qu'il soit tout de même possible de les simplifier).

    top

    Filtrage intelligent

    Dans le modèle de filtrage traditionnel, les filtres sont insérés sans condition à l'aide de la directive AddOutputFilter et des directives apparentées. Chaque filtre doit ensuite déterminer s'il doit s'exécuter ou non, et les administrateurs du serveur disposent de peu de souplesse pour faire en sorte que la chaîne soit traitée de manière dynamique.

    mod_filter, à l'opposé, fournit aux administrateurs du serveur un grand degré de souplesse pour configurer la chaîne de filtrage. Concrètement, la décision d'insérer un filtre peut être prise en fonction d'une expression booléenne complexe. Ceci généralise le fonctionnement relativement souple de la directive AddOutputFilterByType.

    top

    Déclarations de filtres, fournisseurs et chaînes

    [Cette image illustre le modèle de filtrage traditionnel]
    Figure 1: Le modèle de filtrage traditionnel

    Dans le modèle traditionnel, les filtres en sortie constituent une simple chaîne s'étendant depuis le générateur de contenu (ou gestionnaire) jusqu'au client. Ce fonctionnement peut convenir s'il permet d'atteindre le but recherché, mais pose problème lorsque cette chaîne doit être configurée dynamiquement en fonction de la sortie du gestionnaire.

    [Cette image illustre le modèle de fonctionnement de     mod_filter]
    Figure 2: Le modèle de fonctionnement de mod_filter

    Le fonctionnement de mod_filter consiste à introduire des branchements dans la chaîne de filtrage. Plutôt que d'insérer directement des filtres dans la chaîne, on insère un sélecteur de filtre qui va effectuer un branchement conditionnel vers un fournisseur de filtre. mod_filter peut utiliser tout filtre de contenu comme fournisseur ; aucune modification des modules de filtrage existants n'est nécessaire (bien qu'il soit tout de même possible de les simplifier). Il peut y avoir plusieurs fournisseurs pour un seul filtre, mais un seul fournisseur sera choisi pour chaque requête.

    Une chaîne de filtrage peut comporter autant d'instances du sélecteur de filtre que l'on souhaite, chacune d'entre elles pouvant disposer de plusieurs fournisseurs. Un sélecteur de filtre possédant un seul fournisseur dont le choix est inconditionnel constitue un cas particulier : cette situation est équivalente à l'insertion directe du filtre dans la chaîne.

    top

    Configuration de la chaîne de filtrage

    Trois étapes sont nécessaires pour configurer une chaîne de filtrage avec mod_filter. Voir ci-dessous la description détaillée des directives.

    Déclaration des filtres
    La directive FilterDeclare permet de déclarer un filtre en lui assignant un nom et un type. Elle n'est obligatoire que si le filtre n'est pas du type par défaut AP_FTYPE_RESOURCE.
    Enregistrement des fournisseurs
    La directive FilterProvider permet d'associer un fournisseur à un filtre. Le filtre a été éventuellement déclaré à l'aide de la directive FilterDeclare ; si ce n'est pas le cas, FilterProvider va le déclarer implicitement avec le type par défaut AP_FTYPE_RESOURCE. Le fournisseur doit avoir été enregistré à l'aide de ap_register_output_filter par un module quelconque. Le dernier argument de la directive FilterProvider est une expression : le fournisseur s'exécutera pour une requête si et seulement si l'expression est évaluée vraie. L'expression peut évaluer une requête HTTP ou les en-têtes de la réponse, des variables d'environnement, ou le gestionnaire utilisé par cette requête. À la différence des version précédentes, mod_filter supporte désormais les expressions complexes associant des critères multiples au moyen d'une logique AND / OR (&& / ||) et de parenthèses. Pour les détails sur la syntaxe de l'expression, voir la documentation sur ap_expr.
    Configuration de la chaîne de filtrage
    Les directives ci-dessus permettent d'élaborer les éléments d'une chaîne de filtrage intelligente, mais pas de les configurer en vue de leur exécution. La directive FilterChain élabore une chaîne de filtrage à partir de filtres intelligents déclarés, permettant avec souplesse d'insérer des filtres au début ou à la fin de la chaîne, de supprimer un filtre ou même la chaîne complète.
    top

    Filtrage et statut de la réponse

    Normalement, mod_filter n'applique les filtres qu'aux réponses possédant un statut HTTP 200 (OK). Pour pouvoir filtrer des documents possédant un autre statut, vous devez définir la variable d'environnement filter-errordocs, les réponses étant alors filtrées sans se préoccuper de leur statut. Pour définir ce comportement de manière plus fine, vous pouvez utiliser des conditions dans la directive FilterProvider.

    top

    Mise à jour depuis une configuration du serveur HTTP Apache 2.2

    La directive FilterProvider a été modifiée par rapport à httpd 2.2 : les arguments match et dispatch ont été remplacés par l'argument unique expression plus polyvalent. En général, il est possible de convertir une paire match/dispatch vers les deux côtés d'une expression, de la manière suivante :

    "dispatch = 'match'"

    Les en-têtes de requête et de réponse et les variables d'environnement sont maintenant interprétés selon les syntaxes respectives %{req:foo}, %{resp:foo} et %{env:foo}. Les variables %{HANDLER} et %{CONTENT_TYPE} sont également supportées.

    Notez que l'évaluation de l'expression ne supporte plus les comparaisons de sous-chaînes. Ces dernières peuvent être remplacées par des comparaisons d'expressions rationnelles.

    top

    Exemples

    Inclusions côté serveur (SSI)
    Un exemple simple de remplacement de la directive AddOutputFilterByType
    FilterDeclare SSI
    FilterProvider SSI INCLUDES "%{CONTENT_TYPE} =~ m|^text/html|"
    FilterChain SSI
    Inclusions côté serveur (SSI)
    Même exemple que ci-dessus, mais envoi vers un gestionnaire (comportement classique des SSI ; les fichiers .shtml sont traités).
    FilterProvider SSI INCLUDES "%{HANDLER} = 'server-parsed'"
    FilterChain SSI
    Émulation de mod_gzip avec mod_deflate
    Insertion du filtre INFLATE seulement si l'en-tête Accept-Encoding a une valeur autre que "gzip". Ce filtre s'exécute avec le type ftype CONTENT_SET.
    FilterDeclare gzip CONTENT_SET
    FilterProvider gzip inflate "%{req:Accept-Encoding} !~ /gzip/"
    FilterChain gzip
    Diminution de la résolution d'une image
    Supposons que nous voulions réduire la résolution de toutes les images web, et que nous disposions de filtres pour les images GIF, JPEG et PNG.
    FilterProvider unpack jpeg_unpack "%{CONTENT_TYPE} = 'image/jpeg'"
    FilterProvider unpack gif_unpack  "%{CONTENT_TYPE} = 'image/gif'"
    FilterProvider unpack png_unpack  "%{CONTENT_TYPE} = 'image/png'"
    
    FilterProvider downsample downsample_filter "%{CONTENT_TYPE} = m|^image/(jpeg|gif|png)|"
    FilterProtocol downsample "change=yes"
    
    FilterProvider repack jpeg_pack "%{CONTENT_TYPE} = 'image/jpeg'"
    FilterProvider repack gif_pack  "%{CONTENT_TYPE} = 'image/gif'"
    FilterProvider repack png_pack  "%{CONTENT_TYPE} = 'image/png'"
    <Location "/image-filter">
        FilterChain unpack downsample repack
    </Location>
    top

    Gestion de protocole

    Historiquement, tout filtre doit s'assurer que toute modification qu'il effectue est correctement représentée dans les en-têtes de la réponse HTTP, et qu'il ne s'exécutera pas si cette exécution résultait en une modification interdite. Ceci impose aux auteurs de filtres la corvée de réimplémenter certaines fonctionnalités communes dans chaque filtre :

    • De nombreux filtres modifient les contenus, et de ce fait invalident les balises de ces contenus, leur somme de contrôle, leur condensé (hash) existant, ainsi que leur taille.
    • Les filtres qui nécessitent une réponse entière et non tronquée en entrée, doivent s'assurer qu'il n'ont pas reçu une réponse à une requête partielle.
    • Les filtres qui modifient la sortie d'un autre filtre doivent s'assurer qu'ils ne violent pas la directive d'un en-tête Cache-Control: no-transform éventuel.
    • Les filtres peuvent agir sur des réponses de façon à ce qu'elles ne puissent plus être mises en cache.

    mod_filter a pour but de gérer de manière générale ces détails de l'implémentation des filtres, réduisant par là-même la complexité des modules de filtrage de contenu. Le travail permettant d'atteindre ce but est cependant toujours en cours ; la directive FilterProtocol implémente certaines de ces fonctionnalités à des fins de compatibilité ascendante avec les modules d'Apache 2.0. Pour les versions 2.1 et supérieures de httpd, les API ap_register_output_filter_protocol et ap_filter_protocol permettent aux modules de filtrage de définir leurs propres comportements.

    Cependant, mod_filter ne doit pas interférer avec un filtre qui gère déjà tous les aspects du protocole. Par défaut (c'est à dire en l'absence de toute directive FilterProtocol), mod_filter ne modifiera donc pas les en-têtes.

    Au moment où ces lignes sont écrites, cette fonctionnalité a été très peu testée, car les modules d'usage courant ont été conçus pour fonctionner avec httpd 2.0. Les modules qui l'utilisent devront donc l'expérimenter avec précautions.

    top

    Directive AddOutputFilterByType

    Description:assigne un filtre en sortie pour un type de média particulier
    Syntaxe:AddOutputFilterByType filtre[;filtre...] type_de_média [type_de_média] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_filter
    Compatibilité:Présentait de sévères limitations avant d'être déplacé dans mod_filter dans la version 2.3.7

    Cette directive active un filtre en sortie particulier pour une requête en fonction du type de média de la réponse.

    L'exemple suivant active le filtre DEFLATE qui est fourni par le module mod_deflate. Il va compresser toute sortie dont le type MIME est text/html ou text/plain avant de l'envoyer au client.

    AddOutputFilterByType DEFLATE text/html text/plain

    Si vous voulez assigner plusieurs filtres au contenu, leurs noms doivent être séparés par des points-virgules. On peut aussi utiliser une directive AddOutputFilterByType pour chacun des filtres à assigner.

    La configuration ci-dessous impose le traitement de toute sortie de script dont le type MIME est text/html en premier lieu par le filtre INCLUDES, puis par le filtre DEFLATE.

    <Location "/cgi-bin/">
        Options Includes
        AddOutputFilterByType INCLUDES;DEFLATE text/html
    </Location>

    Voir aussi

    top

    Directive FilterChain

    Description:Configure la chaîne de filtrage
    Syntaxe:FilterChain [+=-@!]nom_filtre ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Options
    Statut:Base
    Module:mod_filter

    Cette directive permet de configurer une chaîne de filtrage composée de filtres déclarés. FilterChain accepte un nombre illimité d'arguments, chacun d'entre eux étant précédé d'un caractère de contrôle unique qui détermine l'action à entreprendre :

    +nom filtre
    Ajoutenom filtre à la fin de la chaîne de filtrage
    @nom filtre
    Ajoute nom filtre au début de la chaîne de filtrage
    -nom filtre
    Supprime nom filtre de la chaîne de filtrage
    =nom filtre
    Supprime tous les filtres de la chaîne de filtrage existante et les remplace par nom filtre
    !
    Supprime tous les filtres de la chaîne de filtrage existante
    nom filtre
    Équivalent à +nom filtre
    top

    Directive FilterDeclare

    Description:Déclare un filtre intelligent
    Syntaxe:FilterDeclare nom_filtre [type]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Options
    Statut:Base
    Module:mod_filter

    Cette directive permet de déclarer un filtre en sortie associé à un en-tête ou une variable d'environnement qui déterminera les conditions de son exécution. Le premier argument est le nom du filtre destiné à être utilisé dans les directives FilterProvider, FilterChain et FilterProtocol.

    Le dernier argument (optionnel) est le type du filtre, et peut prendre les valeurs de ap_filter_type, à savoir RESOURCE (valeur par défaut), CONTENT_SET, PROTOCOL, TRANSCODE, CONNECTION ou NETWORK.

    top

    Directive FilterProtocol

    Description:Vérifie le respect du protocole HTTP
    Syntaxe:FilterProtocol nom_filtre [nom_fournisseur] drapeaux_protocole
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Options
    Statut:Base
    Module:mod_filter

    Cette directive permet à mod_filter de s'assurer qu'un filtre ne s'exécutera pas s'il ne doit pas le faire, et que les en-têtes de la réponse HTTP sont définis correctement en tenant compte des effets du filtre.

    Cette directive se présente sous deux formes. Avec trois arguments, elle s'applique de manière spécifique à un nom filtre et un nom fournisseur pour ce filtre. Avec deux arguments, elle s'applique à un nom filtre pour tout fournisseur qu'il actionne.

    Les drapeaux spécifiés sont fusionnés avec les drapeaux que les fournisseurs sous-jacents ont éventuellement enregistrés avec mod_filter. Par exemple, un filtre peut avoir spécifié en interne un drapeau équivalent à change=yes, mais une configuration particulière du module peut le surcharger en spécifiant change=no.

    drapeaux_protocole peut contenir un ou plusieurs drapeaux parmi les suivants :

    change=yes|no
    Indique si le filtre doit modifier le contenu, y compris éventuellement sa taille
    change=1:1
    Le filtre modifie le contenu, mais pas sa taille
    byteranges=no
    Le filtre ne peut pas traiter de réponses à des sous-requêtes et nécessite des réponses complètes en entrée
    proxy=no
    Le filtre ne doit pas s'exécuter dans un contexte de mandataire
    proxy=transform
    Le filtre transforme la réponse de manière incompatible avec l'en-tête HTTP Cache-Control: no-transform
    cache=no
    Le filtre fait en sorte que la sortie ne puisse pas être mise en cache (par exemple en introduisant des modifications de contenu aléatoires)
    top

    Directive FilterProvider

    Description:Enregistre un filtre de contenu
    Syntaxe:FilterProvider nom_filtre nom_fournisseur expression
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Options
    Statut:Base
    Module:mod_filter

    Cette directive permet d'associer un fournisseur au filtre intelligent. Le fournisseur sera invoqué si et seulement si l'expression est évaluée vraie lorsque le sélecteur de filtre est appelé pour la première fois.

    nom fournisseur doit avoir été enregistré au cours du chargement d'un module à l'aide de ap_register_output_filter.

    expression est une expression ap_expr.

    Voir aussi

    top

    Directive FilterTrace

    Description:Obtention d'informations de débogage/diagnostique en provenance de mod_filter
    Syntaxe:FilterTrace nom_filtre niveau
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_filter

    Cette directive permet d'obtenir des informations de débogage en provenance de mod_filter. Elle est conçue pour aider à tester et déboguer les fournisseurs (ou modules de filtrage) ; elle peut aussi apporter une aide à l'utilisation de mod_filter lui-même.

    La sortie de débogage dépend de la définition d'argument level :

    0 (valeur par défaut)
    Aucune information de débogage n'est générée.
    1
    mod_filter va enregistrer les ensembles de conteneurs de données (buckets and brigades) qui traversent le filtre dans le journal des erreurs, avant que le fournisseur ne les traite. Ces informations sont similaires à celles générées par mod_diagnostics.
    2 (pas encore implémenté)
    Ce niveau permettra d'enregistrer l'ensemble des données qui traversent le filtre dans un fichier temporaire avant de les envoyer au fournisseur. Pour un débogage mono-utilisateur seulement ; l'enregistrement des données concernant plusieurs requêtes simultannées ne sera pas supporté.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_wstunnel.html0000644000000000000500000000035013362070302021057 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy_wstunnel.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_proxy_wstunnel.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_watchdog.html.en0000644000000000000500000002004213412755316020153 0ustar rootsrc mod_watchdog - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_watchdog

    Available Languages:  en  |  fr 

    Description:provides infrastructure for other modules to periodically run tasks
    Status:Base
    Module Identifier:watchdog_module
    Source File:mod_watchdog.c
    Compatibility:Available in Apache 2.3 and later

    Summary

    mod_watchdog defines programmatic hooks for other modules to periodically run tasks. These modules can register handlers for mod_watchdog hooks. Currently, the following modules in the Apache distribution use this functionality:

    To allow a module to use mod_watchdog functionality, mod_watchdog itself must be statically linked to the server core or, if a dynamic module, be loaded before the calling module.
    top

    WatchdogInterval Directive

    Description:Watchdog interval in seconds
    Syntax:WatchdogInterval time-interval[s]
    Default:WatchdogInterval 1
    Context:server config
    Status:Base
    Module:mod_watchdog

    Sets the interval at which the watchdog_step hook runs. Default is to run every second.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_ext_filter.html.ja.utf80000644000000000000500000005556213412755316021414 0ustar rootsrc mod_ext_filter - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_ext_filter

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:レスãƒãƒ³ã‚¹ã®ãƒœãƒ‡ã‚£ã‚’クライアントã«é€ã‚‹å‰ã«å¤–部プログラムã§å‡¦ç†ã™ã‚‹
    ステータス:Extension
    モジュール識別å­:ext_filter_module
    ソースファイル:mod_ext_filter.c

    概è¦

    mod_ext_filter ã§ã¯ フィルタ ã®æ…£ã‚Œè¦ªã—ã‚“ã å˜ç´”ãªãƒ—ãƒ­ã‚°ãƒ©ãƒŸãƒ³ã‚°ãƒ¢ãƒ‡ãƒ«ãŒæä¾›ã•れã¾ã™ã€‚ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ 使ãˆã°ã€æ¨™æº–入力ã‹ã‚‰èª­ã¿è¾¼ã‚“ã§ã€æ¨™æº–å‡ºåŠ›ã«æ›¸ã出ã™ãƒ—ログラム (ã™ãªã‚ã¡ Unix å½¢å¼ã®ãƒ•ィルタコマンド) ã‚’ Apache ã®ãƒ•ィルタã«ã™ã‚‹ã“ã¨ãŒ ã§ãã¾ã™ã€‚ã“ã®ãƒ•ã‚£ãƒ«ã‚¿ã®æ©Ÿæ§‹ã¯ã€Apache API å‘ã‘ã«æ›¸ã‹ã‚ŒãŸ Apache サーãƒãƒ—ロセス内ã§å®Ÿè¡Œã•れる専用ã®ãƒ•ィルタよりもãšã£ã¨é…ã„ã§ã™ãŒã€ 以下ã®ã‚ˆã†ãªåˆ©ç‚¹ã‚‚ã‚りã¾ã™ã€‚

    • ãšã£ã¨ã‚·ãƒ³ãƒ—ルãªãƒ—ログラミングモデル
    • ãƒ—ãƒ­ã‚°ãƒ©ãƒ ãŒæ¨™æº–入力ã‹ã‚‰èª­ã‚“ã§æ¨™æº–å‡ºåŠ›ã«æ›¸ãã‚‚ã®ã§ã‚ã‚‹é™ã‚Šã€ ã©ã‚“ãªãƒ—ログラム言語やスクリプト言語ã§ã‚‚使ã†ã“ã¨ãŒã§ãã‚‹
    • 既存ã®ãƒ—ログラムを変更ã™ã‚‹ã“ã¨ãªã Apache ã®ãƒ•ィルタã¨ã—㦠使ã†ã“ã¨ãŒã§ãã‚‹

    性能ã®å•題ã«ã‚ˆã‚Šå®Ÿé‹ç”¨ã«é©ã•ãªã„ã¨ã—ã¦ã‚‚ã€ãƒ•ィルタã®ãƒ—ロトタイプ用㮠環境ã¨ã—ã¦ã¯ mod_ext_filter ã¯ä½¿ãˆã¾ã™ã€‚

    Support Apache!

    トピック

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    例

    ä»–ã®ã‚¿ã‚¤ãƒ—ã®ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‹ã‚‰ HTML を生æˆã™ã‚‹

    # mod_ext_filter directive to define a filter
    # to HTML-ize text/c files using the external
    # program /usr/bin/enscript, with the type of
    # the result set to text/html
    ExtFilterDefine c-to-html mode=output \
    intype=text/c outtype=text/html \
    cmd="/usr/bin/enscript --color -W html -Ec -o - -"

    <Directory "/export/home/trawick/apacheinst/htdocs/c">
    # core directive to cause the new filter to
    # be run on output
    SetOutputFilter c-to-html

    # mod_mime directive to set the type of .c
    # files to text/c
    AddType text/c .c

    # mod_ext_filter directive to set the debug
    # level just high enough to see a log message
    # per request showing the configuration in force
    ExtFilterOptions DebugLevel=1
    </Directory>

    コンテントエンコーディングã®ãƒ•ィルタを実装ã™ã‚‹

    注: ã“ã® gzip ã®ä¾‹ã¯ãƒ‡ãƒ¢ç”¨ã§ã™ã€‚実用的ãªå®Ÿè£…㯠mod_deflate ã‚’å‚ç…§ã—ã¦ãã ã•ã„。

    # mod_ext_filter directive to define the external filter
    ExtFilterDefine gzip mode=output cmd=/bin/gzip

    <Location /gzipped>
    # core directive to cause the gzip filter to be
    # run on output
    SetOutputFilter gzip

    # mod_header directive to add
    # "Content-Encoding: gzip" header field
    Header set Content-Encoding gzip
    </Location>

    サーãƒã‚’é…ãã™ã‚‹

    # mod_ext_filter directive to define a filter
    # which runs everything through cat; cat doesn't
    # modify anything; it just introduces extra pathlength
    # and consumes more resources
    ExtFilterDefine slowdown mode=output cmd=/bin/cat \
    preservescontentlength

    <Location />
    # core directive to cause the slowdown filter to
    # be run several times on output
    #
    SetOutputFilter slowdown;slowdown;slowdown
    </Location>

    sed を使ã£ã¦å¿œç­”中ã®ãƒ†ã‚­ã‚¹ãƒˆã‚’ç½®æ›ã™ã‚‹

    # mod_ext_filter directive to define a filter which
    # replaces text in the response
    #
    ExtFilterDefine fixtext mode=output intype=text/html \
    cmd="/bin/sed s/verdana/arial/g"

    <Location />
    # core directive to cause the fixtext filter to
    # be run on output
    SetOutputFilter fixtext
    </Location>

    別ã®ãƒ•ィルタã®ãƒˆãƒ¬ãƒ¼ã‚¹

    # Trace the data read and written by mod_deflate
    # for a particular client (IP 192.168.1.31)
    # experiencing compression problems.
    # This filter will trace what goes into mod_deflate.
    ExtFilterDefine tracebefore \
    cmd="/bin/tracefilter.pl /tmp/tracebefore" \
    EnableEnv=trace_this_client

    # This filter will trace what goes after mod_deflate.
    # Note that without the ftype parameter, the default
    # filter type of AP_FTYPE_RESOURCE would cause the
    # filter to be placed *before* mod_deflate in the filter
    # chain. Giving it a numeric value slightly higher than
    # AP_FTYPE_CONTENT_SET will ensure that it is placed
    # after mod_deflate.
    ExtFilterDefine traceafter \
    cmd="/bin/tracefilter.pl /tmp/traceafter" \
    EnableEnv=trace_this_client ftype=21

    <Directory /usr/local/docs>
    SetEnvIf Remote_Addr 192.168.1.31 trace_this_client
    SetOutputFilter tracebefore;deflate;traceafter
    </Directory>

    データをトレースã™ã‚‹ãƒ•ィルタ:

    #!/usr/local/bin/perl -w
    use strict;

    open(SAVE, ">$ARGV[0]")
    or die "can't open $ARGV[0]: $?";

    while (<STDIN>) {
    print SAVE $_;
    print $_;
    }

    close(SAVE);

    top

    ExtFilterDefine ディレクティブ

    説明:外部フィルタを定義
    æ§‹æ–‡:ExtFilterDefine filtername parameters
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Extension
    モジュール:mod_ext_filter

    ExtFilterDefine ã¯ã€å®Ÿè¡Œã™ã‚‹ãƒ—ログラムや 引数ãªã©ã€å¤–部フィルタã®ç‰¹æ€§ã‚’定義ã—ã¾ã™ã€‚

    filtername ã¯å®šç¾©ã™ã‚‹ãƒ•ィルタã®åå‰ã‚’指定ã—ã¾ã™ã€‚ ã“ã®åå‰ã¯å¾Œã§ SetOutputFilter ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã§ãã¾ã™ã€‚åå‰ã¯ç™»éŒ²ã•れるã™ã¹ã¦ã®ãƒ•ィルタ㧠一æ„ã§ãªãã¦ã¯ãªã‚Šã¾ã›ã‚“ã€‚ç¾æ™‚点ã§ã¯ã€ãƒ•ィルタã®ç™»éŒ² API ã‹ã‚‰ã¯ エラーã¯å ±å‘Šã•れã¾ã›ã‚“。ã§ã™ã‹ã‚‰ã€é‡è¤‡ã™ã‚‹åå‰ã‚’使ã£ã¦ã—ã¾ã£ãŸã¨ãã§ã‚‚ ユーザã«ã¯ãã®ã“ã¨ã¯å ±å‘Šã•れã¾ã›ã‚“。

    ç¶šãパラメータã®é †ç•ªã¯é–¢ä¿‚ç„¡ãã€ãれらã¯å®Ÿè¡Œã™ã‚‹å¤–部コマンドã¨ã€ ä»–ã®ç‰¹æ€§ã‚’定義ã—ã¾ã™ã€‚cmd= ã ã‘ãŒå¿…é ˆã®ãƒ‘ラメータã§ã™ã€‚ 指定å¯èƒ½ãªãƒ‘ラメータã¯:

    cmd=cmdline
    cmd= キーワードã¯å®Ÿè¡Œã™ã‚‹å¤–部コマンドを指定ã—ã¾ã™ã€‚ プログラムåã®å¾Œã«å¼•æ•°ãŒã‚ã‚‹å ´åˆã¯ã€ã‚³ãƒžãƒ³ãƒ‰è¡Œã¯å¼•用符ã§å›²ã‚€ å¿…è¦ãŒã‚りã¾ã™ (例ãˆã°ã€cmd="/bin/mypgm arg1 arg2" ã®ã‚ˆã†ã«)。プログラム㯠シェル経由ã§ãªãã€ç›´æŽ¥å®Ÿè¡Œã•れã¾ã™ã®ã§ã€é€šå¸¸ã®ã‚·ã‚§ãƒ«ç”¨ã® エスケープã¯å¿…è¦ã‚りã¾ã›ã‚“。プログラムã®å¼•æ•°ã¯ç©ºç™½ã§åŒºåˆ‡ã‚‰ã‚Œã¾ã™ã€‚ プログラムã®å¼•æ•°ã®ä¸€éƒ¨ã¨ãªã‚‹å¿…è¦ã®ã‚る空白ã¯ãƒãƒƒã‚¯ã‚¹ãƒšãƒ¼ã‚¹ã§ã‚¨ã‚¹ã‚±ãƒ¼ãƒ— ã§ãã¾ã™ã€‚引数ã®ä¸€éƒ¨ã«ãªã‚‹ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã¯ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§ エスケープã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚標準㮠CGI 環境変数ã«åŠ ãˆã¦ã€ 環境変数 DOCUMENT_URI, DOCUMENT_PATH_INFO, and QUERY_STRING_UNESCAPED ãŒãƒ—ログラムã®ãŸã‚ã«è¨­å®šã•れã¾ã™ã€‚
    mode=mode
    応答を処ç†ã™ã‚‹ãƒ•ィルタã«ã¯ mode=output (デフォルト) を使ã„ã¾ã™ã€‚リクエストを処ç†ã™ã‚‹ãƒ•ィルタã«ã¯ mode=input を使ã„ã¾ã™ã€‚mode=input 㯠Apache 2.1 以é™ã§åˆ©ç”¨å¯èƒ½ã§ã™ã€‚
    intype=imt
    ã“ã®ãƒ‘ラメータã¯ãƒ•ィルタã•れるã¹ãドキュメント㮠インターãƒãƒƒãƒˆãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ— (ã™ãªã‚ã¡ã€MIME タイプ) ã‚’ 指定ã—ã¾ã™ã€‚デフォルトã§ã¯ã™ã¹ã¦ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãŒãƒ•ィルタã•れã¾ã™ã€‚ intype= ãŒæŒ‡å®šã•れã¦ã„れã°ã€ãƒ•ã‚£ãƒ«ã‚¿ã¯æŒ‡å®šã•れã¦ã„ãªã„ ドキュメントã«ã¯é©ç”¨ã•れãªããªã‚Šã¾ã™ã€‚
    outtype=imt
    ã“ã®ãƒ‘ラメータã¯ãƒ•ィルタã•れãŸãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã® インターãƒãƒƒãƒˆãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ— (ã™ãªã‚ã¡ã€MIME タイプ) ã‚’ 指定ã—ã¾ã™ã€‚フィルタ動作ã«ã¨ã‚‚ãªã£ã¦ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—㌠変ã‚ã‚‹å ´åˆã«æœ‰ç”¨ã§ã™ã€‚デフォルトã§ã¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—㯠変更ã•れã¾ã›ã‚“。
    PreservesContentLength
    PreservesContentLength キーワードã¯ãƒ•ィルタ㌠content length (訳注: コンテントã®é•·ã•) を変更ã—ãªã„ã¨ã„ã†ã“ã¨ã‚’指定ã—ã¾ã™ã€‚ã»ã¨ã‚“ã©ã®ãƒ•ィルタ㯠content length を変更ã™ã‚‹ãŸã‚ã€ã“れã¯ãƒ‡ãƒ•ォルトã§ã¯ã‚りã¾ã›ã‚“。 フィルタãŒé•·ã•を変ãˆãªã„ã¨ãã¯ã€ã“ã®ã‚­ãƒ¼ãƒ¯ãƒ¼ãƒ‰ã‚’指定ã™ã‚‹ã¨ よã„ã§ã—ょã†ã€‚
    ftype=filtertype
    ã“ã®ãƒ‘ラメータã¯ãƒ•ィルタãŒç™»éŒ²ã•れるã¹ãフィルタタイプ㮠数値を指定ã—ã¾ã™ã€‚ã»ã¨ã‚“ã©ã®å ´åˆã¯ã€ãƒ‡ãƒ•ォルト㮠AP_FTYPE_RESOURCE ã§ å分ã§ã™ã€‚フィルタãŒãƒ•ィルタãƒã‚§ãƒ¼ãƒ³ã®åˆ¥ã®å ´æ‰€ã§å‹•作ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ å ´åˆã¯ã€ã“ã®ãƒ‘ラメータを指定ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚指定å¯èƒ½ãªå€¤ã¯ util_filter.h ã® AP_FTYPE_foo 定義をå‚ç…§ã—ã¦ãã ã•ã„。
    disableenv=env
    設定ã•れã¦ã„ãŸå ´åˆã«ãƒ•ィルタを無効ã«ã™ã‚‹ãŸã‚ã®ç’°å¢ƒå¤‰æ•°ã‚’ 指定ã—ã¾ã™ã€‚
    enableenv=env
    ã“ã®ãƒ‘ラメータã¯ãƒ•ã‚£ãƒ«ã‚¿ãŒæœ‰åйã«ãªã‚‹ãŸã‚ã«è¨­å®šã•れã¦ã„ãªã‘れ㰠ãªã‚‰ãªã„環境変数を指定ã—ã¾ã™ã€‚
    top

    ExtFilterOptions ディレクティブ

    説明:mod_ext_filter ã®ã‚ªãƒ—ションを設定
    æ§‹æ–‡:ExtFilterOptions option [option] ...
    デフォルト:ExtFilterOptions DebugLevel=0 NoLogStderr
    コンテキスト:ディレクトリ
    ステータス:Extension
    モジュール:mod_ext_filter

    ExtFilterOptions ディレクティブ㯠mod_ext_filter ã®ç‰¹åˆ¥ãªå‡¦ç†ç”¨ã®ã‚ªãƒ—ションを 指定ã—ã¾ã™ã€‚Option ã«ã¯ä»¥ä¸‹ã®ã©ã‚Œã‹ã‚’指定ã—ã¾ã™ã€‚

    DebugLevel=n
    DebugLevel ã§ mod_ext_filter ã®ç”Ÿæˆã™ã‚‹ãƒ‡ãƒãƒƒã‚°ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®ãƒ¬ãƒ™ãƒ«ã‚’設定ã§ãã¾ã™ã€‚ デフォルトã§ã¯ã€ãƒ‡ãƒãƒƒã‚°ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯ç”Ÿæˆã•れã¾ã›ã‚“。 ã“れ㯠DebugLevel=0 ã¨è¨­å®šã™ã‚‹ã®ã¨åŒã˜ã§ã™ã€‚ æ•°å­—ãŒå¤§ãããªã‚Œã°ãªã‚‹ã»ã©ã€ã‚ˆã‚Šå¤šãã®ãƒ‡ãƒãƒƒã‚°ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒ 生æˆã•れã€ã‚µãƒ¼ãƒã®æ€§èƒ½ã¯è½ã¡ã¾ã™ã€‚数値ã®å®Ÿéš›ã®æ„味㯠mod_ext_filter.c ã®å…ˆé ­è¿‘ãã® DBGLVL_ 定数㮠定義ã§èª¬æ˜Žã•れã¦ã„ã¾ã™ã€‚

    注: デãƒãƒƒã‚°ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’ Apache ã®ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã« ä¿å­˜ã™ã‚‹ã‚ˆã†ã«ã™ã‚‹ãŸã‚ã«ã¯ã€core ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ– LogLevel を使ã†å¿…è¦ãŒã‚りã¾ã™ã€‚

    LogStderr | NoLogStderr
    LogStderr キーワードã¯å¤–部フィルタプログラムã«ã‚ˆã‚Š æ¨™æº–ã‚¨ãƒ©ãƒ¼ (訳注: stderr) ã«æ›¸ã‹ã‚ŒãŸãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’ Apache ã®ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã«ä¿å­˜ã™ã‚‹ã‚ˆã†ã«ã—ã¾ã™ã€‚NoLogStderr 㯠逆ã«ä¿å­˜ã—ãªã„よã†ã«ã—ã¾ã™ã€‚

    例

    ExtFilterOptions LogStderr DebugLevel=0

    ã“ã®ä¾‹ã§ã¯ã€ãƒ•ã‚£ãƒ«ã‚¿ã®æ¨™æº–å‡ºåŠ›ã«æ›¸ã‹ã‚ŒãŸãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯ Apache ã®ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã«ä¿å­˜ã•れã¾ã™ã€‚mod_ext_filter ã‹ã‚‰ã¯ デãƒãƒƒã‚°ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯ç”Ÿæˆã•れã¾ã›ã‚“。

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_logio.html0000644000000000000500000000074413362070302017057 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_logio.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_logio.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_logio.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_logio.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: mod_logio.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_substitute.html0000644000000000000500000000034013362070302020151 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_substitute.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_substitute.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_access_compat.html.fr.utf80000644000000000000500000007634613412755316022073 0ustar rootsrc mod_access_compat - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_access_compat

    Langues Disponibles:  en  |  fr  |  ja 

    Description:Autorisations de groupe à base de nom d'hôte (nom ou adresse IP)
    Statut:Extension
    Identificateur de Module:access_compat_module
    Fichier Source:mod_access_compat.c
    Compatibilité:Disponible dans la version 2.3 du serveur HTTP Apache à des fins de compatibilité avec les précédentes versions d'Apache httpd 2.x. Les directives fournies par ce module sont devenues obsolètes depuis la refonte d'authz. Voir mod_authz_host

    Sommaire

    Les directives fournies par le module mod_access_compat s'utilisent dans les sections <Directory>, <Files> et <Location>, ainsi que dans les fichiers .htaccess et permettent de contrôler l'accès à certaines parties du serveur. On peut contrôler cet accès en fonction du nom d'hôte du client, de son adresse IP ou d'autres caractéristiques de la requête, telles qu'elles sont enregistrées dans les variables d'environnement. Les directives Allow et Deny permettent de spécifier quels clients sont ou ne sont pas autorisés à accéder au serveur, alors que la directive Order définit le statut d'accès par défaut, et détermine la manière dont les directives Allow et Deny interagissent entre elles.

    Les restrictions d'accès à base de nom d'hôte et l'authentification à base de mot de passe peuvent être implémentées simultanément. Dans ce cas, on utilise la directive Satisfy pour déterminer la manière dont ces deux modes de restrictions interagissent.

    Note

    Les directives fournies par le module mod_access_compat sont devenues obsolètes depuis la refonte du module mod_authz_host. Mélanger d'anciennes directives comme Order, Allow ou Deny avec des nouvelles comme Require est techniquement possible mais déconseillé. En effet, mod_access_compat a été conçu pour supporter des configurations ne contenant que des anciennes directives afin de faciliter le passage à la version 2.4. Voir le document upgrading pour plus de détails.

    En général, les directives de restriction d'accès s'appliquent à toutes les méthodes d'accès (GET, PUT, POST, etc...). C'est d'ailleurs ce que l'on souhaite dans la plupart des cas. Il est cependant possible de restreindre certaines méthodes, alors que les autres méthodes ne se verront imposée aucune restriction, en regroupant les directives à l'intérieur d'une section <Limit>.

    Fusion des sections de configuration

    Lorsqu'une directive fournie par ce module est utilisée dans une nouvelle section de configuration, cette dernière n'hérite d'aucune directive définie dans une section précédente.

    top

    Directive Allow

    Description:Spécifie quels hôtes peuvent accéder à une certaine zone du serveur
    Syntaxe: Allow from all|hôte|env=[!]variable d'environnement [hôte|env=[!]variable d'environnement] ...
    Contexte:répertoire, .htaccess
    Surcharges autorisées:Limit
    Statut:Extension
    Module:mod_access_compat

    La directive Allow permet de définir quels hôtes ont le droit d'accéder à une certaine partie du serveur. On peut contrôler l'accès par nom d'hôte, adresse IP, intervalle d'adresses IP, ou toute autre caractéristique de la requête client enregistrée dans les variables d'environnement.

    Le premier argument de cette directive est toujours from. Les arguments suivants peuvent prendre trois formes différentes. Si Allow from all est spécifié, tout hôte se voit accordé l'accès, en tenant compte des directives Deny et Order comme décrit plus loin. Pour ne permettre l'accès au serveur qu'à un hôte ou un groupe d'hôtes particuliers, on peut spécifier un nom d'hôte sous une des formes suivantes :

    Un nom de domaine (partiel)
    Allow from example.org
    Allow from .net example.edu

    Les hôtes dont les noms correspondent ou se terminent par la chaîne spécifiée ont l'autorisation d'accès. Seules les composantes entières du nom d'hôte doivent correspondre ; ainsi, dans l'exemple ci-dessus, foo.example.org correspondra, mais fooexample.org ne conviendra pas. Avec cette configuration, Apache httpd va effectuer une double recherche DNS sur l'adresse IP du client, sans tenir compte de la définition de la directive HostnameLookups. Tout d'abord, une recherche DNS inverse sur l'adresse IP est effectuée pour déterminer le nom d'hôte associé, puis une recherche directe sur le nom d'hôte est effectuée afin de s'assurer qu'il correspond bien à l'adresse IP originale. L'accès ne sera accordé que si le nom d'hôte correspond et si les recherches DNS inverse et directe concordent.

    Une adresse IP complète
    Allow from 10.1.2.3
    Allow from 192.168.1.104 192.168.1.205

    L'adresse IP d'un hôte auquel on a accordé l'accès

    Une adresse IP partielle
    Allow from 10.1
    Allow from 10 172.20 192.168.2

    De un à trois des premiers octets d'une adresse IP, afin de restreindre l'accès à un sous-réseau.

    Une paire réseau/masque de sous-réseau
    Allow from 10.1.0.0/255.255.0.0

    Un réseau a.b.c.d, et un masque de sous-réseau w.x.y.z, pour une définition plus précise de la restriction d'accès imposée à un sous-réseau.

    Une spécification CIDR réseau/nnn
    Allow from 10.1.0.0/16

    Identique au cas précédent, mis à part que le masque est constitué des nnn bits de poids fort.

    Notez que les trois derniers exemples désignent le même ensemble d'hôtes.

    On peut spécifier des adresses et sous-réseaux IPv6 de la manière suivante :

    Allow from 2001:db8::a00:20ff:fea7:ccea
    Allow from 2001:db8::a00:20ff:fea7:ccea/10

    Le troisième format d'argument de la directive Allow permet de contrôler l'accès au serveur en fonction de l'existence d'une variable d'environnement. Lorsque Allow from env=variable d'environnement est spécifié, la requête est autorisée si la variable d'environnement variable d'environnement existe. En revanche, lorsque Allow from env=!env-variable est spécifié, la requête est autorisée si la variable d'environnement variable d'environnement n'existe pas. Le serveur permet de définir avec souplesse des variables d'environnement en se basant sur les caractéristiques de la requête client et en utilisant les directives fournies par le module mod_setenvif. Ainsi, on peut utiliser la directive Allow pour permettre l'accès en fonction de paramètres comme le User-Agent (type de navigateur) des clients, le Referer, ou d'autres champs d'en-tête de la requête HTTP.

    SetEnvIf User-Agent ^KnockKnock/2\.0 let_me_in
    <Directory "/docroot">
        Order Deny,Allow
        Deny from all
        Allow from env=let_me_in
    </Directory>

    Dans cet exemple, les navigateurs dont la chaîne user-agent commence par KnockKnock/2.0 se verront accorder l'accès, alors que tous les autres seront rejetés.

    Fusion des sections de configuration

    Lorsqu'une directive fournie par ce module est utilisée dans une nouvelle section de configuration, cette dernière n'hérite d'aucune directive définie dans une section précédente.

    top

    Directive Deny

    Description:Définit quels hôtes ne sont pas autorisés à accéder au serveur
    Syntaxe: Deny from all|hôte|env=[!]variable d'environnement [hôte|env=[!]variable d'environnement] ...
    Contexte:répertoire, .htaccess
    Surcharges autorisées:Limit
    Statut:Extension
    Module:mod_access_compat

    Cette directive permet de restreindre l'accès au serveur en fonction du nom d'hôte, de l'adresse IP ou de variables d'environnement. Les arguments de la directive Deny sont identiques aux arguments de la directive Allow.

    top

    Directive Order

    Description:Définit le statut d'accès par défaut et l'ordre dans lequel les directives Allow et Deny sont évaluées.
    Syntaxe: Order ordre
    Défaut:Order Deny,Allow
    Contexte:répertoire, .htaccess
    Surcharges autorisées:Limit
    Statut:Extension
    Module:mod_access_compat

    La directive Order, associée aux directives Allow et Deny, implémente un système de contrôle d'accès en trois passes. Au cours de la première passe, ce sont soit toutes les directives Allow, soit toutes les directives Deny qui sont traitées, selon la définition de la directive Order. Le reste des directives (Deny ou Allow) est traité au cours de la seconde passe. La troisième passe s'applique à toutes les requêtes qui ne sont concernées par aucune des deux premières passes.

    Notez que toutes les directives Allow et Deny sont traitées, à la différence d'un pare-feu classique où seule la première règle qui correspond est utilisée. La dernière directive qui correspond s'applique ( à la différence là encore d'un pare-feu classique). De plus, l'ordre dans lequel les lignes apparaissent dans le fichier de configuration n'a pas d'incidence -- toutes les lignes Allow sont considérées comme un groupe, toutes les lignes Deny comme un autre, et le statut par défaut a son existence propre.

    Ordre peut être :

    Allow,Deny
    Dans un premier temps, toutes les directives Allow sont évaluées ; au moins une d'entre elles doit correspondre, sinon la requête est rejetée. Ensuite, toutes les directives Deny sont évaluées. Si au moins l'une d'entre elles correspond, la requête est rejetée. Enfin, toute requête qui ne correspond à aucune directive Allow ou Deny est rejetée par défaut.
    Deny,Allow
    Dans un premier temps, toutes les directives Deny sont évaluées ; Si au moins une d'entre elles correspond, la requête est rejetée, à moins qu'elle corresponde aussi à une directive Allow. Toute requête qui ne correspond à aucune directive Allow ou Deny est autorisée.
    Mutual-failure
    Cet argument a le même effet que Allow,Deny et est devenu de ce fait obsolète.

    Les mots-clés ne peuvent être séparés que par des virgules ; aucun espace ne doit s'intercaler entre eux.

    Match Résultat Allow,Deny Résultat Deny,Allow
    Correspond à Allow seulement Requête autorisée Requête autorisée
    Correspond à Deny seulement Requête rejetée Requête rejetée
    Aucune correspondance Par défaut la seconde directive : rejet Par défaut la seconde directive : autorisation
    Correspond à Allow & Deny La dernière correspondance l'emporte : rejet La dernière correspondance l'emporte : autorisation

    Dans cet exemple, tous les hôtes du domaine example.org ont l'autorisation d'accès ; tous les autres voient leur accès refusé.

    Order Deny,Allow
    Deny from all
    Allow from example.org

    Dans l'exemple suivant, tous les hôtes du domaine example.org ont l'autorisation d'accès, sauf ceux du sous-domaine foo.example.org qui voient leur accès refusé. Tous les hôtes qui ne sont pas dans le domaine example.org sont rejetés car le statut par défaut est positionné sur Deny, et consiste donc en un refus d'accès.

    Order Allow,Deny
    Allow from example.org
    Deny from foo.example.org

    Par contre, si la valeur de la directive Order, dans l'exemple précédent, est Deny,Allow, tout le monde a l'autorisation d'accès. Ceci est dû au fait que Allow from example.org sera évalué en dernier, sans tenir compte de l'ordre réel dans lequel les directives apparaissent dans le fichier de configuration, et va l'emporter sur Deny from foo.example.org. Tout hôte qui n'est pas dans le domaine example.org aura aussi l'autorisation d'accès car le statut par défaut est positionné sur Allow et constitue donc une autorisation d'accès.

    La présence d'une directive Order peut affecter le contrôle d'accès à une partie du serveur même en l'abscence de directives Allow et Deny associées, à cause de son influence sur le statut par défaut. Par exemple,

    <Directory "/www">
        Order Allow,Deny
    </Directory>

    va interdire tout accès au répertoire /www à cause du statut d'accès par défaut qui est défini à Deny.

    La directive Order ne contrôle l'ordre dans lequel sont traitées les directives d'accès qu'au cours de chaque phase du traitement de la configuration du serveur. Ceci implique, par exemple, qu'une directive Allow ou Deny située dans une section <Location> sera toujours évaluée après une directive Allow ou Deny située dans une section <Directory> ou un fichier .htaccess, sans tenir compte de la définition de la directive Order. Pour plus de détails à propos de la fusion des sections de configuration, voir le document Comment fonctionnent les sections Directory, Location et Files.

    Fusion des sections de configuration

    Lorsqu'une directive fournie par ce module est utilisée dans une nouvelle section de configuration, cette dernière n'hérite d'aucune directive définie dans une section précédente.

    top

    Directive Satisfy

    Description:Interaction entre le contrôle d'accès en fonction de l'hôte et l'authentification utilisateur
    Syntaxe:Satisfy Any|All
    Défaut:Satisfy All
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_access_compat
    Compatibilité:Affecté par <Limit> et <LimitExcept> à partir de la version 2.0.51

    Politique d'accès dans le cas où on utilise à la fois Allow et Require. L'argument est soit All, soit Any. L'utilisation de cette directive n'a de sens que si l'accès à une zone particulière du serveur est restreinte par utilisateur/mot de passe et en fonction de l'adresse IP de l'hôte client. Dans ce cas, par défaut (All), le client doit satisfaire à la restriction d'adresse, et fournir un couple utilisateur/mot de passe valide. Avec l'argument Any, le client se verra accorder l'accès s'il satisfait à la restriction d'adresse ou fournit un couple utilisateur/mot de passe valide. On peut utiliser cette dernière définition pour restreindre l'accès à une zone par mot de passe, mais accorder l'accès aux clients possédant certaines adresses IP sans qu'ils aient à fournir de mot de passe.

    Par exemple, si vous souhaitez que les utilisateurs de votre réseau accèdent à une zone de votre site web sans restriction, mais que l'accès à cette zone nécessite un mot de passe pour les autres utilisateurs, vous pouvez utiliser une configuration du style :

    Require valid-user
    Allow from 192.168.1
    Satisfy Any

    Une autre utilisation fréquente de la directive Satisfy est l'allègement des restrictions d'accès à un sous-répertoire par rapport aux restrictions d'accès au répertoire parent :

    <Directory "/var/www/private">
        Require valid-user
    </Directory>
    
    <Directory "/var/www/private/public">
        Allow from all
        Satisfy Any
    </Directory>

    Dans l'exemple ci-dessus, l'accès au répertoire /var/www/private nécessitera une authentification, alors que l'accès au répertoire /var/www/private/public sera accordé sans restriction.

    Depuis la version 2.0.51, les directives Satisfy peuvent être restreintes à certaines méthodes particulières à l'aide des sections <Limit> et <LimitExcept>.

    Fusion des sections de configuration

    Lorsqu'une directive fournie par ce module est utilisée dans une nouvelle section de configuration, cette dernière n'hérite d'aucune directive définie dans une section précédente.

    Voir aussi

    Langues Disponibles:  en  |  fr  |  ja 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/directives.html0000644000000000000500000000137513362070302017251 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: directives.html.de Content-Language: de Content-type: text/html; charset=ISO-8859-1 URI: directives.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: directives.html.es Content-Language: es Content-type: text/html; charset=ISO-8859-1 URI: directives.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: directives.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: directives.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: directives.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 URI: directives.html.zh-cn.utf8 Content-Language: zh-cn Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/prefork.html0000644000000000000500000000072713362070302016560 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: prefork.html.de Content-Language: de Content-type: text/html; charset=ISO-8859-1 URI: prefork.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: prefork.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: prefork.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: prefork.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_isapi.html.fr.utf80000644000000000000500000006275413412755316020372 0ustar rootsrc mod_isapi - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_isapi

    Langues Disponibles:  en  |  fr  |  ko 

    Description:Extensions ISAPI dans Apache pour Windows
    Statut:Base
    Identificateur de Module:isapi_module
    Fichier Source:mod_isapi.c
    Compatibilité:Win32 only

    Sommaire

    Ce module implémente l'API des extensions du Serveur Internet. Il permet à Apache pour Windows de servir les extensions du Serveur Internet (par exemple les modules .dll ISAPI), compte tenu des restrictions spécifiées.

    Les modules d'extension ISAPI (fichiers .dll) sont des modules tiers. Leur auteur n'est pas le Groupe Apache, et nous n'assurons donc pas leur support. Veuillez contacter directement l'auteur d'ISAPI si vous rencontrez des problèmes à l'exécution d'une extension ISAPI. Merci de ne pas soumettre ce genre de problème dans les listes d'Apache ou dans les pages de rapports de bogues.

    top

    Utilisation

    Dans le fichier de configuration du serveur, utilisez la directive AddHandler pour associer les fichiers ISAPI au gestionnaire isapi-handler à l'aide de l'extension de leur nom de fichier. Pour faire en sorte que tout fichier .dll soit traité en tant qu'extension ISAPI, éditez le fichier httpd.conf et ajoutez les lignes suivantes :

    AddHandler isapi-handler .dll
    Dans les versions plus anciennes du serveur Apache, le nom du gestionnaire était isapi-isa au lieu de isapi-handler. Depuis les versions de développement 2.3 du serveur Apache, isapi-isa n'est plus valide, et vous devrez éventuellement modifier votre configuration pour utiliser isapi-handler à la place.

    Le serveur Apache ne propose aucun moyen de conserver en mémoire un module chargé. Vous pouvez cependant précharger et garder un module spécifique en mémoire en utilisant la syntaxe suivante dans votre httpd.conf :

    ISAPICacheFile c:/WebWork/Scripts/ISAPI/mytest.dll

    Que vous ayez ou non préchargé une extension ISAPI, ces dernières sont toutes soumises au mêmes restrictions et possèdent les mêmes permissions que les scripts CGI. En d'autres termes, Options ExecCGI doit être défini pour le répertoire qui contient le fichier .dll ISAPI.

    Reportez-vous aux Notes additionnelles et au Journal du programmeur pour plus de détails et une clarification à propos du support spécifique ISAPI fourni par le module mod_isapi.

    top

    Notes additionnelles

    L'implémentation ISAPI d'Apache se conforme à toutes les spécifications ISAPI 2.0, à l'exception de certaines extensions "spécifiques Microsoft" utilisant des entrées/sorties asynchrones. Le modèle des entrées/sorties d'Apache ne permet pas l'écriture et la lecture asynchrone de la manière dont ISAPI pourrait le faire. Si une extension tente d'utiliser des fonctionnalités non supportées, comme les entrées/sorties asynchrones, un message est enregistré dans le journal des erreurs afin d'aider au débogage. Comme ces messages peuvent devenir envahissants, la directive ISAPILogNotSupported Off permet de filter ce bruit de fond.

    Si aucune option de configuration particulière n'est spécifiée, certains serveurs, comme Microsoft IIS, chargent l'extension ISAPI dans le serveur et la conservent en mémoire jusqu'à ce que l'utilisation de cette dernière devienne trop élevée. Apache, par contre, charge et décharge réellement l'extension ISAPI chaque fois qu'elle est invoquée, si la directive ISAPICacheFile n'a pas été spécifiée. Ce n'est pas très performant, mais le modèle de mémoire d'Apache fait que cette méthode est la plus efficace. De nombreux modules ISAPI présentent des incompatibilités subtiles avec le serveur Apache, et le déchargement de ces modules permet d'assurer la stabilité du serveur.

    En outre, gardez à l'esprit que si Apache supporte les extensions ISAPI, il ne supporte pas les filtres ISAPI. Le support des filtres sera peut-être ajouté dans le futur, mais n'a pas encore été planifié.

    top

    Journal du programmeur

    Si vous écrivez des modules mod_isapi Apache 2.0, vous devez limiter vos appels à ServerSupportFunction aux directives suivantes :

    HSE_REQ_SEND_URL_REDIRECT_RESP
    Redirige l'utilisateur vers une autre adresse.
    Il doit s'agir d'une URL pleinement qualifiée (comme http://serveur/chemin).
    HSE_REQ_SEND_URL
    Redirige l'utilisateur vers une autre adresse.
    Ce ne doit pas être une URL pleinement qualifiée ; la mention du protocole ou du nom du serveur n'est pas autorisée (par exemple, utilisez simplement /chemin).
    La redirection n'est pas assurée par le navigateur mais par le serveur lui-même.

    Avertissement

    Dans sa documentation récente, Microsoft semble avoir abandonné la distinction entre les deux fonctions HSE_REQ_SEND_URL. Apache, quant à lui, continue de les traiter comme deux fonctions distinctes avec des contraintes et des comportements spécifiques.

    HSE_REQ_SEND_RESPONSE_HEADER
    Apache accepte un corps de réponse après l'en-tête s'il se situe après la ligne vide (deux caractères newline consécutifs) dans la chaîne des arguments d'en-têtes. Ce corps ne doit pas contenir de caractères NULL, car l'argument des en-têtes est lui-même terminé par un caractère NULL.
    HSE_REQ_DONE_WITH_SESSION
    Apache considère ceci comme sans objet, car la session est fermée lorsque l'extension ISAPI termine son traitement.
    HSE_REQ_MAP_URL_TO_PATH
    Apache va traduire un nom virtuel en nom physique.
    HSE_APPEND_LOG_PARAMETER
    Ce paramètre peut intervenir dans un de ces journaux :

    La première option, le composant %{isapi-parameter}n, est préférable et toujours disponible.

    HSE_REQ_IS_KEEP_CONN
    retourne le statut négocié Keep-Alive.
    HSE_REQ_SEND_RESPONSE_HEADER_EX
    se comportera comme indiqué dans le documentation, bien que le drapeau fKeepConn soit ignoré.
    HSE_REQ_IS_CONNECTED
    renverra faux si la requête a été abandonnée.

    Apache renvoie FALSE pour tout appel non supporté à ServerSupportFunction, et GetLastError renverra la valeur ERROR_INVALID_PARAMETER.

    ReadClient extrait la partie du corps de la requête qui dépasse le tampon initial (défini par la directive ISAPIReadAheadBuffer). En fonction de la définition de la directive ISAPIReadAheadBuffer (nombre d'octets à mettre dans le tampon avant d'appeler le gestionnaire ISAPI), les requêtes courtes sont envoyées en entier à l'extension lorsque celle-ci est invoquée. Si la taille de la requête est trop importante, l'extension ISAPI doit faire appel à ReadClient pour extraire la totalité du corps de la requête.

    WriteClient est supporté, mais seulement avec le drapeau HSE_IO_SYNC ou le drapeau "aucune option" (valeur 0). Toute autre requête WriteClient sera rejetée avec une valeur de retour FALSE, et GetLastError renverra la valeur ERROR_INVALID_PARAMETER

    GetServerVariable est supporté, bien que les variables étendues de serveur n'existent pas (comme défini par d'autres serveurs). Toutes les variables d'environnement CGI usuelles d'Apache sont disponibles à partir de GetServerVariable, ainsi que les valeurs ALL_HTTP et ALL_RAW.

    Depuis httpd 2.0, mod_isapi propose des fonctionnalités supplémentaires introduites dans les versions actualisées de la spécification ISAPI, ainsi qu'une émulation limitée des entrées/sorties asynchrones et la sémantique TransmitFile. Apache httpd supporte aussi le préchargement des .dlls ISAPI à des fins de performances.

    top

    Directive ISAPIAppendLogToErrors

    Description:Enregistrement des requêtes HSE_APPEND_LOG_PARAMETER de la part des extensions ISAPI dans le journal des erreurs
    Syntaxe:ISAPIAppendLogToErrors on|off
    Défaut:ISAPIAppendLogToErrors off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_isapi

    Cette directive permet d'enregistrer les requêtes HSE_APPEND_LOG_PARAMETER de la part des extensions ISAPI dans le journal des erreurs.

    top

    Directive ISAPIAppendLogToQuery

    Description:Enregistre les requêtes HSE_APPEND_LOG_PARAMETER de la part des extensions ISAPI dans la partie arguments de la requête
    Syntaxe:ISAPIAppendLogToQuery on|off
    Défaut:ISAPIAppendLogToQuery on
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_isapi

    Cette directive permet d'enregistrer les requêtes HSE_APPEND_LOG_PARAMETER de la part des extensions ISAPI dans la partie arguments de la requête (ajouté au composant %q de la directive CustomLog).

    top

    Directive ISAPICacheFile

    Description:Fichiers .dll ISAPI devant être chargés au démarrage
    Syntaxe:ISAPICacheFile chemin-fichier [chemin-fichier] ...
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_isapi

    Cette directive permet de spécifier une liste, séparés par des espaces, de noms de fichiers devant être chargés au démarrage du serveur Apache, et rester en mémoire jusqu'à l'arrêt du serveur. Cette directive peut être répétée pour chaque fichier .dll ISAPI souhaité. Le chemin complet du fichier doit être spécifié. Si le chemin n'est pas absolu, il sera considéré comme relatif au répertoire défini par la directive ServerRoot.

    top

    Directive ISAPIFakeAsync

    Description:Emulation du support des entrées/sorties asynchrones pour les appels ISAPI
    Syntaxe:ISAPIFakeAsync on|off
    Défaut:ISAPIFakeAsync off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_isapi

    Lorsquelle est définie à "on", cette directive permet d'émuler le support des entrées/sorties asynchrones pour les appels ISAPI.

    top

    Directive ISAPILogNotSupported

    Description:Journalisation des demandes de fonctionnalités non supportées de la part des extensions ISAPI
    Syntaxe:ISAPILogNotSupported on|off
    Défaut:ISAPILogNotSupported off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_isapi

    Cette directive permet d'enregistrer dans le journal des erreurs toutes les demandes de fonctionnalités non supportées de la part des extensions ISAPI. Ceci peut aider les administrateurs à décortiquer certains problèmes. Lorsqu'elle a été définie à "on" et si tous les modules ISAPI fonctionnent, elle peut être redéfinie à "off".

    top

    Directive ISAPIReadAheadBuffer

    Description:Taille du tampon de lecture anticipée envoyé aux extensions ISAPI
    Syntaxe:ISAPIReadAheadBuffer taille
    Défaut:ISAPIReadAheadBuffer 49152
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_isapi

    Cette directive permet de définir la taille maximale du tampon de lecture anticipée envoyé aux extensions ISAPI lorsqu'elles sont initialement invoquées. Toute donnée restante doit être extraite en faisant appel à ReadClient ; certaines extensions ISAPI peuvent ne pas supporter la fonction ReadClient. Pour plus de détails, veuillez vous adresser à l'auteur de l'extension ISAPI.

    Langues Disponibles:  en  |  fr  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_asis.html0000644000000000000500000000060713362070302016703 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_asis.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_asis.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_asis.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_asis.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_mime.html.fr.utf80000644000000000000500000021503213412755316020201 0ustar rootsrc mod_mime - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_mime

    Langues Disponibles:  en  |  fr  |  ja 

    Description:Associe les extensions des fichiers demandés avec l'action déclenchée par ces fichiers et avec leur contenu (type MIME, langue, jeu de caractère et codage)
    Statut:Base
    Identificateur de Module:mime_module
    Fichier Source:mod_mime.c

    Sommaire

    Ce module permet d'assigner des métadonnées aux contenus sélectionnés pour une réponse HTTP, en associant des modèles d'URI ou de noms de fichiers aux valeurs des métadonnées. Par exemple, les extensions de noms de fichiers définissent souvent le type de médium Internet, la langue, le jeu de caractères et le codage du contenu. Ces informations sont relayées par les messages HTTP véhiculant ces contenus, et utilisées au cours de la négociation de contenu lors de la sélection des différentes possibilités, de manière à ce que les préférences des utilisateurs soient respectées lors du choix d'un contenu à servir parmi plusieurs autres contenus. Voir mod_negotiation pour plus d'informations à propos de la négociation de contenu.

    Les directives AddCharset, AddEncoding, AddLanguage et AddType permettent d'associer des extensions de fichiers aux métadonnées de ces fichiers. Elles définissent respectivement le jeu de caractères, le codage du contenu, la langue du contenu et le type de médium (content-type) des documents. La directive TypesConfig permet de spécifier un fichier qui contient lui-même des associations entre extensions et types de media.

    De plus, mod_mime peut définir le gestionnaire et les filtres qui sont à l'origine du contenu et le traitent. Les directives AddHandler, AddOutputFilter, et AddInputFilter permettent de contrôler les modules ou les scripts qui vont servir le document. La directive MultiviewsMatch permet à mod_negotiation de déterminer les extensions de fichiers à inclure lors des tests de correspondances multivues.

    Alors que mod_mime associe des métadonnées avec des extensions de fichiers, le serveur de base core fournit des directives permettant d'associer tous les fichiers d'un conteneur donné (par exemple <Location>, <Directory>, ou <Files>) avec des métadonnées particulières. Parmi ces directives, on trouve ForceType, SetHandler, SetInputFilter, et SetOutputFilter. Les directives du serveur de base l'emportent sur toute directive d'association d'extensions de noms de fichiers définie par mod_mime.

    Notez que la modification des métadonnées d'un fichier ne modifie pas la valeur de l'en-tête Last-Modified. Ainsi, certaines copies de documents préalablement mises en cache peuvent encore être utilisées par un client ou un mandataire avec les anciens en-têtes. Si vous modifiez les métadonnées (langue, type de contenu, jeu de caractère ou codage), vous devez donc enregistrer une modification du fichier concerné (afin de mettre à jour sa date de dernière modification), pour être sûr que tous les visiteurs recevront le documents avec les en-têtes corrects.

    top

    Fichiers avec extensions multiples

    Les fichiers peuvent posséder plusieurs extensions dont l'ordre est normalement sans importance. Par exemple, si le fichier welcome.html.fr est associé au type de contenu text/html et à la langue française, le fichier welcome.fr.html possèdera exactement les même métadonnées. Si le fichier possède plusieurs extensions associées au même type de métadonnée, c'est celle de ces extensions la plus à droite qui sera utilisée, excepté pour ce qui concerne les langues et les codages de contenu. Par exemple, si .gif est associé au type de médium image/gif, et .html au type de médium text/html, le fichier welcome.gif.html sera associé au type de médium text/html.

    Les Languages et les codages de contenu sont traités de manière cumulative, car il est possible d'assigner plusieurs langues ou codages à une ressource particulière. Par exemple, le fichier welcome.html.en.de sera servi avec les en-têtes Content-Language: en, de et Content-Type: text/html.

    Des précautions doivent être prises lorsqu'un fichier avec extensions multiples est associé à la fois à un type de médium et à un gestionnaire. En général, cela impliquera la gestion de la requête par le module associé au gestionnaire. Par exemple, si l'extension .imap est associée au gestionnaire imap-file (du module mod_imagemap), et si l'extension .html est associée au type de médium text/html, le fichier world.imap.html sera à la fois associé au gestionnaire imap-file et au type de médium text/html. Pour son traitement, c'est le gestionnaire imap-file qui sera utilisé, et il sera donc traité en tant que fichier imagemap.

    Si vous préférez que seule la dernière partie d'un nom de fichier séparée du reste du nom par un point soit associée à une métadonnée particulière, n'utilisez pas les directives Add*. Par exemple, si vous souhaitez que le fichier foo.html.cgi soit traité en tant que script CGI, mais pas le fichier bar.cgi.html, alors, au lieu d'utiliser AddHandler cgi-script .cgi, utilisez plutôt :

    Configuration du gestionnaire en se basant seulement sur la dernière extension

    <FilesMatch "[^.]+\.cgi$">
      SetHandler cgi-script
    </FilesMatch>
    top

    Codage du contenu

    Un fichier d'un type de médium particulier peut être également codé d'une certaine manière pour simplifier sa transmission sur Internet. Alors que cela concerne en général la compression, comme gzip, il peut aussi s'agir de chiffrement, comme pgp ou d'un codage comme UUencoding, qui est conçu pour transmettre un fichier binaire sous un format ASCII (texte).

    La RFC HTTP/1.1, section 14.11 stipule à ce titre :

    Le champ d'en-tête Content-Encoding de l'entité est utilisé en tant que modificateur du type de médium. Lorsqu'il est présent, sa valeur indique quels codages de contenu additionnels ont été appliqués au corps de l'entité, et ainsi quels mécanismes de décodage doivent être appliqués afin de retrouver le type de médium référencé par le champ d'en-tête Content-Type. Le codage de contenu est principalement utilisé pour permettre la compression d'un document sans perdre l'information concernant le type de médium sous-jacent.

    En utilisant plusieurs extensions (voir la section ci-dessus à propos des extensions de fichiers multiples), vous pouvez indiquer qu'un fichier est d'un type, particulier, et possède aussi un codage particulier.

    Considérons par exemple un fichier contenant un document Microsoft Word et compressé par pkzip pour réduire sa taille. Si l'extension .doc est associée au type de fichier Microsoft Word, et si l'extension .zip est associée au codage de fichier pkzip, alors le fichier Resume.doc.zip sera identifié comme document Word compressé par pkzip.

    Apache joint un en-tête Content-encoding à la ressource afin d'informer le navigateur client à propos de la méthode de codage.

    Content-encoding: pkzip
    top

    Jeux de caractères et langues

    En plus du type de fichier et du codage, un autre élément important d'information est la langue dans laquelle le document est écrit, et avec quel jeu de caractères le contenu du fichier doit être affiché. Par exemple, un document peut être écrit en alphabet vietnamien ou cyrillique, et doit être affiché en conséquence. Cette information est également transmise via des en-têtes HTTP.

    Les jeu de caractères, langue, codage et type MIME sont tous utilisés au cours du processus de négociation de contenu (voir mod_negotiation) afin de déterminer quel document servir au client, lorsque plusieurs choix sont possibles en fonction du jeu de caractères, de la langue, du codage ou du type MIME. Toutes les associations d'extensions de noms de fichiers créées via les directives AddCharset, AddEncoding, AddLanguage et AddType (ainsi que les associations d'extensions listées dans le fichier défini par la directive MimeMagicFile), participent à ce processus de sélection. Les extensions de noms de fichiers qui n'ont été associés que par des directives AddHandler, AddInputFilter ou AddOutputFilter, peuvent être incluses ou exclues du processus de sélection en utilisant la directive MultiviewsMatch.

    Jeu de caractères

    Pour transmettre cette information supplémentaire, Apache peut ajouter un en-tête Content-Language, afin de spécifier la langue dans laquelle le document est écrit, et peut ajouter des informations additionnelles à l'en-tête Content-Type pour indiquer le jeu de caractères particulier qui doit être utilisé pour restituer correctement le document.

    Content-Language: en, fr Content-Type: text/plain; charset=ISO-8859-1

    La langue est spécifiée via son abréviation en deux lettres. Le jeu de caractères est le nom du jeu de caractères particulier qui doit être utilisé.

    top

    Directive AddCharset

    Description:Associe les extensions de noms de fichiers spécifiées au jeu de caractères spécifié
    Syntaxe:AddCharset jeu-car extension [extension] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive AddCharset permet d'associer les extensions de noms de fichiers spécifiées au jeu de caractères spécifié (le nom enregistré sur l'Internet d'un codage de caractères donné). jeu-car est le paramètre jeu de caractères du type de médium pour les ressources dont le nom de fichier contient extension. Cette association est ajoutée à toutes les autres déjà en vigueur, et écrase toute association préexistante pour la même extension.

    Exemple

    AddLanguage ja .ja
    AddCharset EUC-JP .euc
    AddCharset ISO-2022-JP .jis
    AddCharset SHIFT_JIS .sjis

    Avec cet exemple, le document xxxx.ja.jis sera traité en tant que document japonais dont le jeu de caractère est ISO-2022-JP (idem pour le document xxxx.jis.ja). La directive AddCharset sert à la fois à informer le client sur le codage des caractères du document afin que ce dernier puisse être interprété et affiché correctement, et à la négociation de contenu, au cours de laquelle le serveur décide lequel parmi plusieurs documents possibles il renvoie au client en fonction des préférences de ce dernier en matière de jeu de caractères.

    L'argument extension est insensible à la casse et peut être spécifié avec ou sans le point initial. Les noms de fichiers peuvent posséder plusieurs extensions, et l'argument extension sera comparé à chacune d'entre elles.

    Voir aussi

    top

    Directive AddEncoding

    Description:Associe les extensions de noms de fichiers données au type de codage spécifié
    Syntaxe:AddEncoding codage extension [extension] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive AddEncoding permet d'associer les extensions de noms de fichiers données au codage de contenu HTTP spécifié. codage est le codage de contenu HTTP à ajouter à la valeur du champ d'en-tête Content-Encoding pour les documents possédant l'extension spécifiée. Cette association est ajoutée à toutes les autres déjà en vigueur, et écrase toute association préexistante pour la même extension.

    Exemple

    AddEncoding x-gzip .gz
    AddEncoding x-compress .Z

    Avec cet exemple, les noms de fichiers possédant l'extension .gz seront marqués comme codés à l'aide du codage x-gzip, et les noms de fichiers possédant l'extension .Z comme codés avec x-compress.

    Les clients anciens n'acceptent que x-gzip et x-compress, bien que les standards stipulent qu'ils sont respectivement équivalents à gzip et compress. Apache effectue ses comparaisons de codages de contenu en ignorant tout préfixe x-. Lorsqu'il répond avec un codage, Apache utilise l'une ou l'autre forme (c'est à dire x-foo ou foo) selon les besoins du client. Si le client n'a pas besoin d'une forme particulière, Apache utilisera la forme employée par la directive AddEncoding. Pour résumer, vous devez toujours utiliser x-gzip et x-compress pour ces deux codages spécifiques. Certains codages plus récents, comme deflate, doivent être spécifiés sans le préfixe x-.

    L'argument extension est insensible à la casse et peut être spécifié avec ou sans le point initial. Les noms de fichiers peuvent posséder plusieurs extensions, et l'argument extension sera comparé à chacune d'entre elles.

    top

    Directive AddHandler

    Description:Associe les extensions de noms de fichiers données au gestionnaire spécifié
    Syntaxe:AddHandler nom-gestionnaire extension [extension] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    Les fichiers dont le nom a pour extension extension seront servis par le nom-gestionnaire spécifié. Cette association est ajoutée à toutes les autres déjà en vigueur, et écrase toute association préexistante pour la même extension. Par exemple, pour associer les scripts CGI avec l'extension de fichier .cgi, vous pouvez utiliser :

    AddHandler cgi-script .cgi

    Une fois cette ligne insérée dans votre fichier httpd.conf, tout fichier possédant l'extension .cgi sera traité en tant que programme CGI.

    L'argument extension est insensible à la casse et peut être spécifié avec ou sans le point initial. Les noms de fichiers peuvent posséder plusieurs extensions, et l'argument extension sera comparé à chacune d'entre elles.

    Voir aussi

    top

    Directive AddInputFilter

    Description:Associe les extensions de noms de fichiers aux filtres spécifiés qui traiteront les requêtes clients
    Syntaxe:AddInputFilter filtre[;filtre...] extension [extension] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive AddInputFilter permet d'associer l'extension de nom de fichier extension aux filtres spécifiés qui traiteront les requêtes clients et les entrées POST à leur réception par le serveur. Ceci s'ajoute à toute définition de filtre préexistante, y compris la directive SetInputFilter. Cette association est ajoutée à toutes les autres déjà en vigueur, et écrase toute association préexistante pour la même extension.

    Si plusieurs filtres sont spécifiés, ils doivent être séparés par des points-virgules et inscrits dans l'ordre selon lequel ils devront traiter le contenu. L'argument filtre est insensible à la casse.

    L'argument extension est insensible à la casse et peut être spécifié avec ou sans le point initial. Les noms de fichiers peuvent posséder plusieurs extensions, et l'argument extension sera comparé à chacune d'entre elles.

    Voir aussi

    top

    Directive AddLanguage

    Description:Associe l'extension de nom de fichier donnée à la langue spécifié
    Syntaxe:AddLanguage symbole-langue extension [extension] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive AddLanguage permet d'associer l'extension de nom de fichier donnée à la langue spécifiée. Les fichiers dont l'extension correspond à la valeur de l'argument extension se voient attribuer la valeur de l'argument symbole-langue comme en-tête HTTP Content-Language en accord avec les identifiants de langues définis par la RFC 3066. Cette directive l'emporte sur toute association préexistante pour la même extension.

    Exemple

    AddEncoding x-compress .Z
    AddLanguage en .en
    AddLanguage fr .fr

    Avec cet exemple, le document xxxx.en.Z sera traité en tant que document compressé de langue anglaise (idem pour le document xxxx.Z.en). Bien que la langue soit fournie au client, le navigateur n'utilise habituellement pas cette information. La directive AddLanguage est principalement utilisée au cours de la négociation de contenu, où le serveur choisit d'envoyer un document parmi plusieurs documents possibles en fonction de la préférence du client en matière de langue.

    Si une extension fait l'objet de plusieurs associations de langues, c'est la dernière qui sera utilisée. Ainsi, dans le cas suivant,

    AddLanguage en .en
    AddLanguage en-gb .en
    AddLanguage en-us .en

    les documents possédant l'extension .en seront traités en tant que documents de langue en-us.

    L'argument extension est insensible à la casse et peut être spécifié avec ou sans le point initial. Les noms de fichiers peuvent posséder plusieurs extensions, et l'argument extension sera comparé à chacune d'entre elles.

    Voir aussi

    top

    Directive AddOutputFilter

    Description:Associe les extensions de noms de fichiers aux filtres spécifiés qui traiteront les réponses en provenance du serveur
    Syntaxe:AddOutputFilter filtre[;filtre...] extension [extension] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive AddOutputFilter permet d'associer l'extension de nom de fichier définie par l'argument extension aux filtres qui traiteront les réponses en provenance du serveur avant de les envoyer au client. Ces filtres s'ajoutent à tout filtre défini par d'autres directives comme SetOutputFilter et AddOutputFilterByType. Cette association est fusionnée avec toute autre association en vigueur, et l'emporte sur toute association préexistante pour la même extension.

    Avec l'exemple suivant, tous les fichiers .shtml seront traités en tant qu'inclusions côté serveur (SSI), et la sortie sera compressée à l'aide du module mod_deflate.

    AddOutputFilter INCLUDES;DEFLATE shtml

    Si plusieurs filtres sont spécifiés, ils doivent être séparés par des points-virgules et inscrits dans l'ordre selon lequel il devront traiter le contenu. L'argument filtre est insensible à la casse.

    L'argument extension est insensible à la casse et peut être spécifié avec ou sans le point initial. Les noms de fichiers peuvent posséder plusieurs extensions, et l'argument extension sera comparé à chacune d'entre elles.

    Notez que toute définition de filtres via la directive AddOutputFilter remplace toutes les définitions précédentes effectuées via cette même directive.

    # Filtre spécifié "DEFLATE"
    AddOutputFilter DEFLATE shtml
    <Location "/foo">
      # Filtre spécifié "INCLUDES", remplace "DEFLATE"
      AddOutputFilter INCLUDES shtml
    </Location>
    <Location "/bar">
      # Filtre spécifié "INCLUDES;DEFLATE", remplace "DEFLATE"
      AddOutputFilter INCLUDES;DEFLATE shtml
    </Location>
    <Location "/bar/baz">
      # Filtre spécifié "BUFFER", remplace "INCLUDES;DEFLATE"
      AddOutputFilter BUFFER shtml
    </Location>
    <Location "/bar/baz/buz">
      # Pas de filtre spécifié, suppression de "BUFFER"
      RemoveOutputFilter shtml
    </Location>

    Voir aussi

    top

    Directive AddType

    Description:Associe les extensions de noms de fichiers au type de contenu spécifié
    Syntaxe:AddType type-médium extension [extension] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive AddType permet d'associer les extensions de noms de fichiers données au type de contenu spécifié. type-médium est le Type MIME à utiliser pour les fichiers dont le nom possède l'extension extension. Cette association s'ajoute à toute autre association en vigueur, et l'emporte sur toute association préexistante pour la même extension.

    Plutôt que d'éditer directement le fichier TypesConfig, il est recommandé d'utiliser la directive AddType pour ajouter de nouveaux types de médias.

    Exemple

    AddType image/gif .gif

    Ou, pour spécifier plusieurs extensions dans une seule directive :

    Exemple

    AddType image/jpeg jpeg jpg jpe

    L'argument extension est insensible à la casse et peut être spécifié avec ou sans le point initial. Les noms de fichiers peuvent posséder plusieurs extensions, et l'argument extension sera comparé à chacune d'entre elles.

    Il est possible d'obtenir un effet similaire à celui de la directive LanguagePriority du module mod_negotiation en qualifiant un type de média avec qs :

    Exemple

    AddType application/rss+xml;qs=0.8 .xml

    Ceci peut s'avérer utile dans certaines situations, par exemple lorsqu'un client qui a ajouté un en-tête Accept: */* à sa requête n'est pas en mesure de traiter le contenu renvoyé par le serveur.

    À la base, cette directive configure le type de contenu généré pour les fichiers statiques servis à partir du système de fichiers. Dans le cas des ressources autres que les fichiers statiques pour lesquelles le générateur de la réponse spécifie en général un Content-Type, cette directive n'a aucun effet.

    Note

    Si aucun gestionnaire n'est explicitement défini pour une requête, le type de contenu spécifié sera aussi utilisé comme nom du gestionnaire.

    Lorsqu'aucune directive comme SetHandler ou AddHandler ne s'applique à une requête, le nom de gestionnaire interne normalement défini par une de ces directives est en fait défini par le type de contenu spécifié par la présente directive.

    Pour des raisons historiques, certains modules tiers comme mod_php peuvent adopter ce type de comportement pour prendre en compte la requête concernée.

    Il est conseillé d'éviter les configurations qui reposent sur de tels types "synthétiques". En outre, les configurations qui limitent l'accès aux directives SetHandler ou AddHandler doivent aussi limiter l'accès à la directive AddType.

    Voir aussi

    top

    Directive DefaultLanguage

    Description:Définit un symbole de langue par défaut à affecter au champ d'en-tête Content-Language pour toutes les ressources dans le contexte courant auxquelles aucun symbole de langue n'a été associé.
    Syntaxe:DefaultLanguage symbole-langue
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive DefaultLanguage permet d'indiquer à Apache que toutes les ressources du contexte courant (par exemple, toutes les ressources concernées par le conteneur <Directory> courant) qui ne possèdent pas d'extension de langue explicite (comme .fr ou .de tel que défini par la directive AddLanguage), verront leur en-tête HTTP Content-Language affecté de la langue symbole-langue. Ceci permet de marquer des arborescences de répertoires entières comme contenant des documents en français, par exemple, sans avoir à renommer chaque fichier. Notez qu'à la différence de l'utilisation des extensions pour spécifier des langues, DefaultLanguage ne permet de spécifier qu'une seule langue.

    Si aucune directive DefaultLanguage n'est en vigueur, et si un fichier ne possède pas d'extension configurée par la directive AddLanguage, aucun champ d'en-tête Content-Language ne sera généré.

    Exemple

    DefaultLanguage en

    Voir aussi

    top

    Directive ModMimeUsePathInfo

    Description:Indique à mod_mime de traiter les éléments de path_info en tant que parties du nom de fichier
    Syntaxe:ModMimeUsePathInfo On|Off
    Défaut:ModMimeUsePathInfo Off
    Contexte:répertoire
    Statut:Base
    Module:mod_mime

    La directive ModMimeUsePathInfo permet de combiner le nom de fichier avec la partie path_info de l'URL pour appliquer les directives mod_mime à la requête. La valeur par défaut est Off - situation dans laquelle l'élément path_info est ignoré.

    L'utilisation de cette directive est conseillée si vous utilisez un système de fichiers virtuel.

    Exemple

    ModMimeUsePathInfo On

    Considérons une requête pour /index.php/foo.shtml, mod_mime ne traitera pas la requête entrante comme /index.php/foo.shtml et les directives comme AddOutputFilter INCLUDES .shtml ajouteront le filtre INCLUDES à la requête. Si la directive ModMimeUsePathInfo n'est pas définie, le filtre INCLUDES ne sera pas ajouté. Le fonctionnement sera identique dans le cas des chemins virtuels, tels que ceux définis par la directive <Location>

    Voir aussi

    top

    Directive MultiviewsMatch

    Description:Les types de fichiers qui seront inclus lors d'une recherche de correspondance de fichier avec les vues multiples (MultiViews)
    Syntaxe:MultiviewsMatch Any|NegotiatedOnly|Filters|Handlers [Handlers|Filters]
    Défaut:MultiviewsMatch NegotiatedOnly
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive MultiviewsMatch permet trois comportements différents pour la fonctionnalité Multiviews du module mod_negotiation. Les vues multiples permettent d'associer une requête pour un fichier, par exemple index.html, à toute extension négociée s'ajoutant à la requête de base, par exemple index.html.en, index.html.fr, ou index.html.gz.

    L'option NegotiatedOnly implique que toute extension s'ajoutant au nom de base doit correspondre à une extension de mod_mime reconnue pour la négociation de contenu, par exemple Charset, Content-Type, Language, ou Encoding. C'est la valeur d'option par défaut, et la contrainte la plus stricte dont les effets de bord inattendus sont les moins nombreux.

    Pour inclure des extensions associées avec des gestionnaires et/ou des filtres, définissez la directive MultiviewsMatch avec les mots-clés Handlers, Filters, ou les deux. Si tous les autres facteurs sont égaux, c'est le fichier de plus petite taille qui sera servi ; par exemple, si le choix doit s'opérer entre index.html.cgi de 500 octets et index.html.pl de 1000 octets, c'est le fichier .cgi qui l'emportera dans cet exemple. Les utilisateurs de fichiers .asis auront avantage à utiliser l'option Handler, si les fichiers .asis sont associés au gestionnaire asis-handler.

    Vous pouvez enfin autoriser l'association de toute extension avec l'option Any, même si mod_mime ne reconnaît pas l'extension. Ceci peut conduire à des résultats imprévisibles, comme l'envoi de fichiers .old ou .bak contrairement aux souhaits du webmaster.

    Par exemple, la configuration suivante va permettre l'inclusion des extensions associées aux gestionnaires et aux filtres dans les vues multiples, tout en excluant les fichiers de type inconnu :

    MultiviewsMatch Handlers Filters

    L'utilisation de la directive MultiviewsMatch dans une section <Location> ou <LocationMatch> n'est pas permise.

    Voir aussi

    top

    Directive RemoveCharset

    Description:Supprime toute association de jeu de caractères pour un ensemble d'extensions de noms de fichiers
    Syntaxe:RemoveCharset extension [extension] ...
    Contexte:serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive RemoveCharset permet de supprimer toute association de jeu de caractères pour les fichiers dont les noms possèdent les extensions spécifiées. Ceci permet, au sein des fichiers .htaccess, d'annuler toute association héritée du répertoire parent ou de la configuration du serveur pour un répertoire particulier.

    L'argument extension est insensible à la casse et peut être spécifié avec ou sans le point initial.

    Exemple

    RemoveCharset .html .shtml
    top

    Directive RemoveEncoding

    Description:Supprime toute association de codage de contenu pour un ensemble d'extensions de noms de fichiers
    Syntaxe:RemoveEncoding extension [extension] ...
    Contexte:serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive RemoveEncoding permet de supprimer toute association de codage pour les fichiers dont les noms possèdent les extensions spécifiées. Ceci permet, au sein des fichiers .htaccess, d'annuler toute association héritée du répertoire parent ou de la configuration du serveur pour un répertoire particulier. Voici un exemple d'utilisation de cette directive :

    /foo/.htaccess:

    AddEncoding x-gzip .gz
    AddType text/plain .asc
    <Files "*.gz.asc">
        RemoveEncoding .gz
    </Files>

    Avec cette configuration, le fichier foo.gz sera marqué comme codé avec gzip, mais foo.gz.asc sera marqué comme fichier texte non codé.

    Note

    Les directives RemoveEncoding étant traitées après toute directive AddEncoding, il est possible qu'elles annulent les effets de ces dernières si les deux apparaissent dans la configuration du même répertoire.

    L'argument extension est insensible à la casse et peut être spécifié avec ou sans le point initial.

    top

    Directive RemoveHandler

    Description:Supprime toute association de gestionnaire à un ensemble d'extensions de noms de fichiers
    Syntaxe:RemoveHandler extension [extension] ...
    Contexte:serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive RemoveHandler permet de supprimer toute association de gestionnaire à des fichiers dont le nom possède l'extension donnée. Ceci permet, au sein des fichiers .htaccess, d'annuler toute association héritée du répertoire parent ou de la configuration du serveur pour un répertoire particulier. Voici un exemple d'utilisation de cette directive :

    /foo/.htaccess:

    AddHandler server-parsed .html

    /foo/bar/.htaccess:

    RemoveHandler .html

    Avec cette dernière ligne, les fichiers .html du répertoire /foo/bar seront traités en tant que fichiers normaux, au lieu d'être traités en tant que candidats à l'interprétation (voir le module mod_include module).

    L'argument extension est insensible à la casse et peut être spécifié avec ou sans le point initial.

    top

    Directive RemoveInputFilter

    Description:Supprime toute association de filtre en entrée à un ensemble d'extensions de noms de fichiers
    Syntaxe:RemoveInputFilter extension [extension] ...
    Contexte:serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive RemoveInputFilter permet de supprimer toute association de filtre en entrée à des fichiers dont le nom possède l'extension donnée. Ceci permet, au sein des fichiers .htaccess, d'annuler toute association héritée du répertoire parent ou de la configuration du serveur pour un répertoire particulier.

    L'argument extension est insensible à la casse et peut être spécifié avec ou sans le point initial.

    Voir aussi

    top

    Directive RemoveLanguage

    Description:Supprime toute association de langue à un ensemble d'extensions de noms de fichiers
    Syntaxe:RemoveLanguage extension [extension] ...
    Contexte:serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive RemoveLanguage permet de supprimer toute association de langue à des fichiers dont le nom possède l'extension donnée. Ceci permet, au sein des fichiers .htaccess, d'annuler toute association héritée du répertoire parent ou de la configuration du serveur pour un répertoire particulier.

    L'argument extension est insensible à la casse et peut être spécifié avec ou sans le point initial.

    top

    Directive RemoveOutputFilter

    Description:Supprime toute association de filtre en sortie à un ensemble d'extensions de noms de fichiers
    Syntaxe:RemoveOutputFilter extension [extension] ...
    Contexte:serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive RemoveOutputFilter permet de supprimer toute association de filtre en sortie à des fichiers dont le nom possède l'extension donnée. Ceci permet, au sein des fichiers .htaccess, d'annuler toute association héritée du répertoire parent ou de la configuration du serveur pour un répertoire particulier.

    L'argument extension est insensible à la casse et peut être spécifié avec ou sans le point initial.

    Exemple

    RemoveOutputFilter shtml

    Voir aussi

    top

    Directive RemoveType

    Description:Supprime toute association de type de contenu à un ensemble d'extensions de noms de fichiers
    Syntaxe:RemoveType extension [extension] ...
    Contexte:serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_mime

    La directive RemoveType permet de supprimer toute association de type de médium à des fichiers dont le nom possède l'extension donnée. Ceci permet, au sein des fichiers .htaccess, d'annuler toute association héritée du répertoire parent ou de la configuration du serveur pour un répertoire particulier. Voici un exemple d'utilisation de cette directive :

    /foo/.htaccess:

    RemoveType .cgi

    Cette ligne aura pour effet de supprimer tout traitement spécifique des fichiers .cgi dans le répertoire /foo/ et ses sous-répertoires, et les réponses contenant ce type de fichier ne possèderont pas de champ d'en-tête HTTP Content-Type.

    Note

    Les directives RemoveType sont traitées après toutes les directives AddType, et il est possible que les effets de ces dernières soient annulés si les deux types de directives sont présents au sein de la configuration du même répertoire.

    L'argument extension est insensible à la casse et peut être spécifié avec ou sans le point initial.

    top

    Directive TypesConfig

    Description:Le chemin du fichier mime.types
    Syntaxe:TypesConfig chemin-fichier
    Défaut:TypesConfig conf/mime.types
    Contexte:configuration globale
    Statut:Base
    Module:mod_mime

    La directive TypesConfig permet de définir le chemin du fichier de configuration des types de média. L'argument chemin-fichier est un chemin relatif au répertoire défini par la directive ServerRoot. Ce fichier contient la liste des associations par défaut des extensions de noms de fichiers aux types de contenus. La plupart des administrateurs utilisent le fichier mime.types fourni par leur système d'exploitation, qui associe les extensions de noms de fichiers courantes à la liste officielle des types de média enregistrés par l'IANA et maintenue à http://www.iana.org/assignments/media-types/index.html, ainsi qu'un grand nombre de types non officiels. Ce fichier permet de simplifier le fichier httpd.conf en fournissant la majorité des définitions de types de média, et ses définitions peuvent être écrasées par des directives AddType, selon les besoins. Il est déconseillé de modifier le contenu du fichier mime.types car il peut être remplacé lors d'une mise à jour du serveur.

    Le fichier contient des lignes dont le format est identique à celui des arguments d'une directive AddType :

    type-médium [extension] ...

    Les extensions sont insensibles à la casse. Les lignes vides et les lignes commençant par un dièse (#) sont ignorées. Les lignes vides servent à compléter le fichier mime.types. Apache httpd peut encore déterminer ces types via le module mod_mime_magic.

    Merci de ne pas soumettre de requêtes au Projet de Serveur HTTP Apache pour ajouter une entrée dans le fichier mime.types fourni, sauf si : 1) le type de médium est déjà enregistré à l'IANA 2) et si l'extension est largement acceptée et ne provoque pas de conflits d'extensions entre les différentes plate-formes. Les requêtes du type catégorie/x-sous-type seront systématiquement rejetées, ainsi que toute nouvelle extension de deux lettres, car elle ont de fortes chances d'entrer en conflit par la suite avec les inombrables langues préexistantes et les espaces de nommage des jeux de caractères.

    Voir aussi

    Langues Disponibles:  en  |  fr  |  ja 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_echo.html.ko.euc-kr0000644000000000000500000001706513412755316020500 0ustar rootsrc mod_echo - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_echo

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:ÇÁ·ÎÅäÄÝ ¸ðµâÀ» ¼³¸íÇϱâÀ§ÇÑ °£´ÜÇÑ echo ¼­¹ö
    »óÅÂ:Experimental
    ¸ðµâ¸í:echo_module
    ¼Ò½ºÆÄÀÏ:mod_echo.c
    Áö¿ø:Apache 2.0 ÀÌÈĺÎÅÍ

    ¿ä¾à

    ÀÌ ¸ðµâÀº ÇÁ·ÎÅäÄÝ ¸ðµâÀÇ °³³äÀ» ¼³¸íÇϱâÀ§ÇÑ ¿¹Á¦ÀÌ´Ù. ÀÌ ¸ðµâÀº °£´ÜÇÑ echo ¼­¹ö¸¦ ±¸ÇöÇÑ´Ù. ÀÌ ¼­¹ö·Î telnetÇÏ¿© ¹«¾ð°¡¸¦ ÀÔ·ÂÇϸé, ¼­¹ö´Â ÀÔ·ÂÇÑ ³»¿ëÀÌ ±×´ë·Î ¹ÝȯÇÑ´Ù.

    Support Apache!

    Áö½Ã¾îµé

    Bugfix checklist

    Âü°í

    top

    ProtocolEcho Áö½Ã¾î

    ¼³¸í:echo ¼­¹ö¸¦ Ű°í ²ö´Ù
    ¹®¹ý:ProtocolEcho On|Off
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Experimental
    ¸ðµâ:mod_echo
    Áö¿ø:ProtocolEcho´Â 2.0 ÀÌÈÄ¿¡¸¸ ÀÖ´Ù.

    ProtocolEcho Áö½Ã¾î´Â echo ¼­¹ö¸¦ Ű°í ²ö´Ù.

    ¿¹Á¦

    ProtocolEcho On

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_file.html.ko.euc-kr0000644000000000000500000002504713412755316021677 0ustar rootsrc mod_authn_file - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_authn_file

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:¹®ÀÚÆÄÀÏÀ» ÀÌ¿ëÇÑ »ç¿ëÀÚ ÀÎÁõ
    »óÅÂ:Base
    ¸ðµâ¸í:authn_file_module
    ¼Ò½ºÆÄÀÏ:mod_authn_file.c
    Áö¿ø:¾ÆÆÄÄ¡ 2.1 ÀÌÈÄ

    ¿ä¾à

    ÀÌ ¸ðµâÀº mod_auth_digest¿Í mod_auth_basic °°Àº ÀÎÁõ¾Õ´Ü¸ðµâÀ» À§ÇØ ÀÏ¹Ý ¹®ÀÚ ¾ÏÈ£ÆÄÀÏ¿¡¼­ »ç¿ëÀÚ¸¦ ã¾Æ¼­ ÀÎÁõÇÑ´Ù. mod_authn_dbm°ú ±â´ÉÀÌ ºñ½ÁÇÏ´Ù.

    mod_auth_basicÀ̳ª mod_auth_digest¸¦ »ç¿ëÇÒ¶§ AuthBasicProvider³ª AuthDigestProviderÀÇ °ªÀ» file·Î ¼³Á¤Çϸé ÀÌ ¸ðµâÀ» »ç¿ëÇÑ´Ù.

    top

    AuthUserFile Áö½Ã¾î

    ¼³¸í:ÀÎÁõÇÒ »ç¿ëÀÚ¸í¿Í ¾ÏÈ£ ¸ñ·ÏÀ» ÀúÀåÇÏ´Â ¹®ÀÚÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù
    ¹®¹ý:AuthUserFile file-path
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Base
    ¸ðµâ:mod_authn_file

    AuthUserFile Áö½Ã¾î´Â »ç¿ëÀÚ ÀÎÁõ¿¡ »ç¿ëÇÒ »ç¿ëÀÚ¸í¿Í ¾ÏÈ£ ¸ñ·ÏÀ» ÀúÀåÇÏ´Â ¹®ÀÚÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù. File-path´Â ÆÄÀϰæ·ÎÀÌ´Ù. Àý´ë°æ·Î¸¦ »ç¿ëÇÏÁö ¾ÊÀ¸¸é ServerRootÀÇ »ó´ë°æ·Î·Î ó¸®ÇÑ´Ù.

    ÆÄÀÏÀÇ °¢ ÁÙ¿¡´Â »ç¿ëÀÚ¸í, ÄÝ·Ð, ÀÎÄÚµùµÈ ¾ÏÈ£°¡ ¼ø¼­´ë·Î ³ª¿Â´Ù. ¿©·¯ ÁÙ¿¡¼­ µ¿ÀÏÇÑ »ç¿ëÀÚ ¾ÆÀ̵𸦠Á¤ÀÇÇϸé, mod_authn_file´Â ù¹øÂ°·Î ³ª¿À´Â ¾ÏÈ£¸¦ »ç¿ëÇÑ´Ù.

    ÄÄÆÄÀÏµÈ ¹èÆ÷º»À̳ª src/support¿¡ ÀÖ´Â htpasswd µµ±¸´Â HTTP Basic Authentication¿¡ »ç¿ëÇÒ ¾ÏÈ£ÆÄÀÏÀ» °ü¸®ÇÑ´Ù. ÀÚ¼¼ÇÑ ³»¿ëÀº manpage¸¦ Âü°íÇ϶ó. ¿ä¾àÇϸé:

    Ãʱ⠾ÆÀ̵ð usernameÀ» °¡Áø ¾ÏÈ£ÆÄÀÏ FilenameÀ» ¸¸µç´Ù. ¾ÏÈ£¸¦ ¹°¾îº»´Ù:

    htpasswd -c Filename username

    ¾ÏÈ£ÆÄÀÏ Filename¿¡ username2¸¦ Ãß°¡Çϰųª ¼öÁ¤ÇÑ´Ù:

    htpasswd Filename username2

    Å« ¹®ÀÚÆÄÀÏÀ» °Ë»öÇÏ´Â °ÍÀº ¸Å¿ì ºñÈ¿À²ÀûÀÓÀ» ÁÖÀÇÇ϶ó. »ç¿ëÀÚ°¡ ¸¹´Ù¸é ´ë½Å AuthDBMUserFileÀ» »ç¿ëÇØ¾ß ÇÑ´Ù.

    HTTP Digest AuthenticationÀ» »ç¿ëÇÑ´Ù¸é htpasswd µµ±¸·Î ¾ÈµÈ´Ù. ´ë½Å htdigest¸¦ »ç¿ëÇØ¾ß ÇÑ´Ù. Digest Authentication°ú Basic AuthenticationÀ» À§ÇÑ ÀڷḦ °°Àº ÆÄÀÏ¿¡ ¼¯¾î¼­ »ç¿ëÇÒ ¼ö ¾øÀ½À» ÁÖÀÇÇ϶ó.

    º¸¾È

    AuthUserFileÀÌ À¥¼­¹öÀÇ ¹®¼­µé ¹Û¿¡ À§Ä¡ÇÔÀ» È®ÀÎÇ϶ó. ÀÌ ÆÄÀÏÀ» º¸È£ÇÒ µð·ºÅ丮 ¾È¿¡ °°ÀÌ µÎÁö ¸¶¶ó. ±×·¸Áö ¾ÊÀ¸¸é, Ŭ¶óÀÌ¾ðÆ®°¡ AuthUserFileÀ» ´Ù¿î·ÎµåÇÒ ¼ö ÀÖ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/index.html.es0000644000000000000500000005601313520523022016622 0ustar rootsrc Índice de Módulos - Servidor HTTP Apache Versión 2.4
    <-

    Índice de Módulos

    Idiomas disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Esta traducción podría estar obsoleta. Consulte la versión en inglés de la documentación para comprobar si se han producido cambios recientemente.

    Abajo se muestra una lista con todos los módulos que forman parte de la distribución de Apache. Consulte también la lista alfabética completa de las directivas de Apache.

    top

    Funcionalidad Básica y Módulos de MultiProcesamiento (MPM)

    core
    Funcionalides básicas del Servidor HTTP Apache que siempre están presentes.
    mpm_common
    A collection of directives that are implemented by more than one multi-processing module (MPM)
    event
    A variant of the worker MPM with the goal of consuming threads only for connections with active processing
    mpm_netware
    Multi-Processing Module implementing an exclusively threaded web server optimized for Novell NetWare
    mpmt_os2
    Hybrid multi-process, multi-threaded MPM for OS/2
    prefork
    Implements a non-threaded, pre-forking web server
    mpm_winnt
    Multi-Processing Module optimized for Windows NT.
    worker
    Multi-Processing Module implementing a hybrid multi-threaded multi-process web server
    top

    Otros Módulos

     A  |  B  |  C  |  D  |  E  |  F  |  H  |  I  |  L  |  M  |  N  |  P  |  R  |  S  |  U  |  V  |  W  |  X 

    mod_access_compat
    Group authorizations based on host (name or IP address)
    mod_actions
    Execute CGI scripts based on media type or request method.
    mod_alias
    Provides for mapping different parts of the host filesystem in the document tree and for URL redirection
    mod_allowmethods
    Easily restrict what HTTP methods can be used on the server
    mod_asis
    Sends files that contain their own HTTP headers
    mod_auth_basic
    Basic HTTP authentication
    mod_auth_digest
    User authentication using MD5 Digest Authentication
    mod_auth_form
    Form authentication
    mod_authn_anon
    Allows "anonymous" user access to authenticated areas
    mod_authn_core
    Core Authentication
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    User authentication using DBM files
    mod_authn_file
    User authentication using text files
    mod_authn_socache
    Manages a cache of authentication credentials to relieve the load on backends
    mod_authnz_fcgi
    Allows a FastCGI authorizer application to handle Apache httpd authentication and authorization
    mod_authnz_ldap
    Allows an LDAP directory to be used to store the database for HTTP Basic authentication.
    mod_authz_core
    Core Authorization
    mod_authz_dbd
    Group Authorization and Login using SQL
    mod_authz_dbm
    Group authorization using DBM files
    mod_authz_groupfile
    Group authorization using plaintext files
    mod_authz_host
    Group authorizations based on host (name or IP address)
    mod_authz_owner
    Authorization based on file ownership
    mod_authz_user
    User Authorization
    mod_autoindex
    Generates directory indexes, automatically, similar to the Unix ls command or the Win32 dir shell command
    mod_brotli
    Compress content via Brotli before it is delivered to the client
    mod_buffer
    Support for request buffering
    mod_cache
    RFC 2616 compliant HTTP caching filter.
    mod_cache_disk
    Disk based storage module for the HTTP caching filter.
    mod_cache_socache
    Shared object cache (socache) based storage module for the HTTP caching filter.
    mod_cern_meta
    CERN httpd metafile semantics
    mod_cgi
    Execution of CGI scripts
    mod_cgid
    Execution of CGI scripts using an external CGI daemon
    mod_charset_lite
    Specify character set translation or recoding
    mod_data
    Convert response body into an RFC2397 data URL
    mod_dav
    Distributed Authoring and Versioning (WebDAV) functionality
    mod_dav_fs
    Filesystem provider for mod_dav
    mod_dav_lock
    Generic locking module for mod_dav
    mod_dbd
    Manages SQL database connections
    mod_deflate
    Compress content before it is delivered to the client
    mod_dialup
    Send static content at a bandwidth rate limit, defined by the various old modem standards
    mod_dir
    Provides for "trailing slash" redirects and serving directory index files
    mod_dumpio
    Dumps all I/O to error log as desired.
    mod_echo
    A simple echo server to illustrate protocol modules
    mod_env
    Modifies the environment which is passed to CGI scripts and SSI pages
    mod_example_hooks
    Illustrates the Apache module API
    mod_expires
    Generation of Expires and Cache-Control HTTP headers according to user-specified criteria
    mod_ext_filter
    Pass the response body through an external program before delivery to the client
    mod_file_cache
    Caches a static list of files in memory
    mod_filter
    Context-sensitive smart filter configuration module
    mod_headers
    Customization of HTTP request and response headers
    mod_heartbeat
    Sends messages with server status to frontend proxy
    mod_heartmonitor
    Centralized monitor for mod_heartbeat origin servers
    mod_http2
    Support for the HTTP/2 transport layer
    mod_ident
    RFC 1413 ident lookups
    mod_imagemap
    Server-side imagemap processing
    mod_include
    Server-parsed html documents (Server Side Includes)
    mod_info
    Provides a comprehensive overview of the server configuration
    mod_isapi
    ISAPI Extensions within Apache for Windows
    mod_lbmethod_bybusyness
    Pending Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_byrequests
    Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_bytraffic
    Weighted Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_heartbeat
    Heartbeat Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_ldap
    LDAP connection pooling and result caching services for use by other LDAP modules
    mod_log_config
    Logging of the requests made to the server
    mod_log_debug
    Additional configurable debug logging
    mod_log_forensic
    Forensic Logging of the requests made to the server
    mod_logio
    Logging of input and output bytes per request
    mod_lua
    Provides Lua hooks into various portions of the httpd request processing
    mod_macro
    Provides macros within apache httpd runtime configuration files
    mod_md
    Managing domains across virtual hosts, certificate provisioning via the ACME protocol
    mod_mime
    Associates the requested filename's extensions with the file's behavior (handlers and filters) and content (mime-type, language, character set and encoding)
    mod_mime_magic
    Determines the MIME type of a file by looking at a few bytes of its contents
    mod_negotiation
    Provides for content negotiation
    mod_nw_ssl
    Enable SSL encryption for NetWare
    mod_privileges
    Support for Solaris privileges and for running virtual hosts under different user IDs.
    mod_proxy
    Multi-protocol proxy/gateway server
    mod_proxy_ajp
    AJP support module for mod_proxy
    mod_proxy_balancer
    mod_proxy extension for load balancing
    mod_proxy_connect
    mod_proxy extension for CONNECT request handling
    mod_proxy_express
    Dynamic mass reverse proxy extension for mod_proxy
    mod_proxy_fcgi
    FastCGI support module for mod_proxy
    mod_proxy_fdpass
    fdpass external process support module for mod_proxy
    mod_proxy_ftp
    FTP support module for mod_proxy
    mod_proxy_hcheck
    Dynamic health check of Balancer members (workers) for mod_proxy
    mod_proxy_html
    Rewrite HTML links in to ensure they are addressable from Clients' networks in a proxy context.
    mod_proxy_http
    HTTP support module for mod_proxy
    mod_proxy_http2
    HTTP/2 support module for mod_proxy
    mod_proxy_scgi
    SCGI gateway module for mod_proxy
    mod_proxy_uwsgi
    UWSGI gateway module for mod_proxy
    mod_proxy_wstunnel
    Websockets support module for mod_proxy
    mod_ratelimit
    Bandwidth Rate Limiting for Clients
    mod_reflector
    Reflect a request body as a response via the output filter stack.
    mod_remoteip
    Replaces the original client IP address for the connection with the useragent IP address list presented by a proxies or a load balancer via the request headers.
    mod_reqtimeout
    Set timeout and minimum data rate for receiving requests
    mod_request
    Filters to handle and make available HTTP request bodies
    mod_rewrite
    Provides a rule-based rewriting engine to rewrite requested URLs on the fly
    mod_sed
    Filter Input (request) and Output (response) content using sed syntax
    mod_session
    Session support
    mod_session_cookie
    Cookie based session support
    mod_session_crypto
    Session encryption support
    mod_session_dbd
    DBD/SQL based session support
    mod_setenvif
    Allows the setting of environment variables based on characteristics of the request
    mod_slotmem_plain
    Slot-based shared memory provider.
    mod_slotmem_shm
    Slot-based shared memory provider.
    mod_so
    Loading of executable code and modules into the server at start-up or restart time
    mod_socache_dbm
    DBM based shared object cache provider.
    mod_socache_dc
    Distcache based shared object cache provider.
    mod_socache_memcache
    Memcache based shared object cache provider.
    mod_socache_redis
    Redis based shared object cache provider.
    mod_socache_shmcb
    shmcb based shared object cache provider.
    mod_speling
    Attempts to correct mistaken URLs by ignoring capitalization, or attempting to correct various minor misspellings.
    mod_ssl
    Strong cryptography using the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols
    mod_status
    Provides information on server activity and performance
    mod_substitute
    Perform search and replace operations on response bodies
    mod_suexec
    Allows CGI scripts to run as a specified user and Group
    mod_unique_id
    Provides an environment variable with a unique identifier for each request
    mod_unixd
    Basic (required) security for Unix-family platforms.
    mod_userdir
    User-specific directories
    mod_usertrack
    Clickstream logging of user activity on a site
    mod_version
    Version dependent configuration
    mod_vhost_alias
    Provides for dynamically configured mass virtual hosting
    mod_watchdog
    provides infrastructure for other modules to periodically run tasks
    mod_xml2enc
    Enhanced charset/internationalisation support for libxml2-based filter modules

    Idiomas disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/mod/mod_reflector.html.fr.utf80000644000000000000500000002157013412755316021241 0ustar rootsrc mod_reflector - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_reflector

    Langues Disponibles:  en  |  fr 

    Description:Renvoie un corps de requête comme réponse via la pile de filtres en sortie.
    Statut:Base
    Identificateur de Module:reflector_module
    Fichier Source:mod_reflector.c
    Compatibilité:Versions 2.3 et ultérieures

    Sommaire

    Ce module permet de renvoyer un corps de requête au client, après l'avoir fait passer par la pile de filtres en sortie. Une chaîne de filtres configurée de manière appropriée peut être utilisée pour transformer la requête en réponse. Ce module peut ainsi être utilisé pour transformer un filtre en sortie en service HTTP.

    top

    Exemples

    Service de compression
    Fait passer le corps de la requête par le filtre DEFLATE pour le compresser. Cette requête nécessite un en-tête Content-Encoding contenant la valeur "gzip" pour que le filtre renvoie les données compressées.
    <Location "/compress">
        SetHandler reflector
        SetOutputFilter DEFLATE
    </Location>
    Service d'abaissement de l'échantillonnage d'image
    Fait passer le corps de la requête par un filtre d'abaissement de l'échantillonnage d'image, et renvoie le résultat au client.
    <Location "/downsample">
        SetHandler reflector
        SetOutputFilter DOWNSAMPLE
    </Location>
    top

    Directive ReflectorHeader

    Description:Renvoie un en-tête d'entrée dans les en-têtes de sortie
    Syntaxe:ReflectorHeader en-tête-entrée [en-tête-sortie]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Options
    Statut:Base
    Module:mod_reflector

    Cette directive permet de contrôler la répercution des en-têtes de la requête dans la réponse. Le premier argument correspond au nom de l'en-tête à copier. Si le second argument (optionnel) est spécifié, il définit le nom sous lequel l'en-tête sera répercuté dans la réponse ; dans le cas contraire, c'est le nom de l'en-tête original qui sera utilisé.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_remoteip.html0000644000000000000500000000033413362070302017565 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_remoteip.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_remoteip.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_ratelimit.html.en0000644000000000000500000001607313412755316020356 0ustar rootsrc mod_ratelimit - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_ratelimit

    Available Languages:  en  |  fr 

    Description:Bandwidth Rate Limiting for Clients
    Status:Extension
    Module Identifier:ratelimit_module
    Source File:mod_ratelimit.c
    Compatibility: rate-initial-burst available in httpd 2.4.24 and later. Rate limiting proxied content does not work correctly up to httpd 2.4.33.

    Summary

    Provides a filter named RATE_LIMIT to limit client bandwidth. The throttling is applied to each HTTP response while it is transferred to the client, and not aggregated at IP/client level. The connection speed to be simulated is specified, in KiB/s, using the environment variable rate-limit.

    Optionally, an initial amount of burst data, in KiB, may be configured to be passed at full speed before throttling to the specified rate limit. This value is optional, and is set using the environment variable rate-initial-burst.

    Example Configuration

    <Location "/downloads">
        SetOutputFilter RATE_LIMIT
        SetEnv rate-limit 400 
        SetEnv rate-initial-burst 512
    </Location>
    If the value specified for rate-limit causes integer overflow, the rate-limited will be disabled. If the value specified for rate-limit-burst causes integer overflow, the burst will be disabled.
    Support Apache!

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_actions.html0000644000000000000500000000075613362070302017411 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_actions.html.de Content-Language: de Content-type: text/html; charset=ISO-8859-1 URI: mod_actions.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_actions.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_actions.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_actions.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_ldap.html0000644000000000000500000000032413362070302016660 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_ldap.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_ldap.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_ratelimit.html.fr.utf80000644000000000000500000001661113412755316021246 0ustar rootsrc mod_ratelimit - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_ratelimit

    Langues Disponibles:  en  |  fr 

    Description:Limitation de la bande passante pour les clients
    Statut:Extension
    Identificateur de Module:ratelimit_module
    Fichier Source:mod_ratelimit.c
    Compatibilité: rate-initial-burst est disponible à partir de la version 2.4.24 du serveur HTTP Apache. La limitation de bande passante pour les contenus mandatés ne fonctionne pas correctement jusqu'à la version 2.4.33.

    Sommaire

    Ce module fournit un filtre RATE_LIMIT pour limiter la bande passante des clients. Cette contrainte s'applique à chaque réponse HTTP au moment où elle est envoyée au client ; elle n'affecte pas les autres échanges entre le client et le serveur. La variable d'environnement rate-limit permet de spécifier, en kb/s, le débit de la connexion à simuler.

    Optionnellement, il est possible, via la variable d'environnement rate-initial-burst, de définir une quantité de données en kOctets à transmettre à pleine vitesse avant de limiter la bande passante à la valeur voulue.

    Exemple de configuration

    <Location "/downloads">
        SetOutputFilter RATE_LIMIT
        SetEnv rate-limit 400
        SetEnv rate-initial-burst 512
    </Location>
    Si la valeur affectée à rate-limit dépasse la valeur maximale à affecter à un entier, la limitation de bande passante sera désactivée. Si la valeur affectée à rate-limit-burst dépasse la valeur maximale à affecter à un entier, la transmission du burst initial sans limitation de bande passante sera désactivée.
    Support Apache!

    Directives

    Ce module ne fournit aucune directive.

    Traitement des bugs

    Voir aussi

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dav.html0000644000000000000500000000060313362070302016512 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_dav.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_dav.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_dav.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_dav.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_authz_user.html.ja.utf80000644000000000000500000001661613412755316021435 0ustar rootsrc mod_authz_user - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_authz_user

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:ユーザ承èª
    ステータス:Base
    モジュール識別å­:authz_user_module
    ソースファイル:mod_authz_user.c
    äº’æ›æ€§:Apache 2.1 以é™ã§ä½¿ç”¨å¯èƒ½

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã€èªè¨¼ã•れãŸãƒ¦ãƒ¼ã‚¶ã«ã‚¦ã‚§ãƒ–サイトã®ä¸€éƒ¨ã¸ã® アクセスを許å¯ã—ãŸã‚Šæ‹’å¦ã—ãŸã‚Šã™ã‚‹ãŸã‚ã®æ‰¿èªæ©Ÿèƒ½ã‚’æä¾›ã—ã¾ã™ã€‚ mod_authz_user ã¯èªè¨¼ã•れãŸãƒ¦ãƒ¼ã‚¶ãŒ Require user ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«æ›¸ã‹ã‚Œã¦ã„れ㰠アクセスをèªã‚ã¾ã™ã€‚èªè¨¼ã«æˆåŠŸã—ãŸãƒ¦ãƒ¼ã‚¶ã™ã¹ã¦ã«ã‚¢ã‚¯ã‚»ã‚¹ã‚’ 許å¯ã™ã‚‹ã«ã¯ã€ä»£ã‚り㫠Require valid-user ã‚’ 使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚

    Support Apache!

    ディレクティブ

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚りã¾ã›ã‚“。

    Bugfix checklist

    å‚ç…§

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_echo.html0000644000000000000500000000060713362070302016662 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_echo.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_echo.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_echo.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_echo.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_info.html.fr.utf80000644000000000000500000003704313412755316020211 0ustar rootsrc mod_info - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_info

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Affiche une présentation complète de la configuration du serveur
    Statut:Extension
    Identificateur de Module:info_module
    Fichier Source:mod_info.c

    Sommaire

    Pour activer mod_info, ajoutez les lignes suivantes à votre fichier httpd.conf.

    <Location "/server-info">
        SetHandler server-info
    </Location>

    Il est recommandé d'utiliser mod_authz_host à l'intérieur de la section <Location> afin de restreindre l'accès aux informations de configuration de votre serveur :

    <Location "/server-info">
        SetHandler server-info
        Require host example.com
    </Location>

    Une fois cette configuration effectuée, les informations du serveur sont disponibles à l'adresse http://votre-serveur.com/infos-serveur.

    top

    Problèmes liés à la sécurité

    Une fois mod_info chargé dans le serveur, sa fonctionnalité de gestionnaire est disponible dans tous les fichiers de configuration, y compris les fichiers de configuration des répertoires (par exemple .htaccess). Ceci peut avoir des répercutions en matière de sécurité pour votre site.

    En particulier, l'utilisation de ce module peut conduire à la divulgation d'informations sensibles à partir des directives de configuration d'autres modules Apache comme des chemins systèmes, des couples nom d'utilisateur/mot de passe, des noms de bases de données, etc... C'est pourquoi ce module ne doit être utilisé que dans un environnement sous contrôle et toujours avec les plus grandes précautions.

    Il est recommandé d'utiliser mod_authz_host pour restreindre l'accès aux informations de configuration de votre serveur.

    Contrôle d'accès

    <Location "/server-info">
        SetHandler server-info
        # Autorisation d'accès depuis le serveur lui-même
        Require ip 127.0.0.1
    
        # Autorisation d'accès depuis une station de travail du réseau
    # local
        Require ip 192.168.1.17
    </Location>
    top

    Filtrage des informations affichées

    Par défaut, les informations affichées comprennent une liste de tous les modules activés, et pour chaque module, une description des directives qu'il accepte, les branchements (hooks) qu'il implémente, ainsi que les directives concernées dans la configuration courante.

    Il est possible d'afficher d'autres vues de la configuration en ajoutant un argument à la requête infos-serveur. Par exemple, http://votre-serveur.com/infos-serveur?config affichera toutes les directives de configuration.

    ?<module-name>
    Uniquement les informations relatives au module spécifié
    ?config
    Uniquement les directives de configuration, non triées par module
    ?hooks
    Uniquement la liste des branchements (hooks) auxquels le module est attaché
    ?list
    Une simple liste des modules activés
    ?server
    Uniquement des informations de base sur le serveur
    ?providers
    Liste des fournisseurs disponibles sur votre serveur
    top

    Affichage de la configuration au démarrage

    Si la directive de configuration define -DDUMP_CONFIG est utilisée, mod_info va envoyer la configuration préinterprétée vers stdout au cours du démarrage du serveur.

    httpd -DDUMP_CONFIG -k start

    "Préinterprétée" signifie que les directives telles que <IfDefine> et <IfModule> sont évaluées et les variables d'environnement remplacées par leurs valeurs. Cela ne représente cependant pas la configuration définitive. En particulier, les fusions ou écrasementsde définitions en cas de directives multiples ne sont pas représentés.

    Le résultat est équivalent à celui de la requête ?config.

    top

    Limitations connues

    mod_info tire ses informations de la configuration interprétée, et non du fichier de configuration original. La manière dont l'arbre de configuration interprété est créé induit quelques limitations :

    • Les directives qui sont traitées immédiatement sans être enregistrées dans l'arbre de configuration interprété ne sont pas prises en compte. Celles-ci comprennent ServerRoot, LoadModule et LoadFile.
    • Les directives qui contrôlent le fichier de configuration lui-même, comme Include, <IfModule> et <IfDefine> ne sont pas prises en compte, mais les directives de configuration incluses le sont.
    • Les commentaires ne sont pas pris en compte (Ce qui peut être considéré comme une fonctionnalité).
    • Les directives de configuration des fichiers .htaccess ne sont pas prises en compte (car elles ne font pas partie de la configuration permanente du serveur).
    • Les directives de conteneur comme <Directory> sont affichées normalement, mais mod_info est incapable de déterminer le numéro de ligne de la balise fermante </Directory>.
    • Les directives générées par des modules tiers comme mod_perl peuvent ne pas être prises en compte.
    top

    Directive AddModuleInfo

    Description:Ajoute des données supplémentaires aux informations de module affichées par le gestionnaire server-info
    Syntaxe:AddModuleInfo nom-module chaîne
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_info

    Cette directive permet d'afficher le contenu de chaîne en tant qu'Information supplémentaire interprétée en HTML pour le module nom-module. Exemple :

    AddModuleInfo mod_deflate.c 'See <a \
        href="http://httpd.apache.org/docs/2.4/mod/mod_deflate.html">\
        http://httpd.apache.org/docs/2.4/mod/mod_deflate.html</a>'

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/directive-dict.html.ko.euc-kr0000644000000000000500000003723613412755316021624 0ustar rootsrc Áö½Ã¾î¸¦ ¼³¸íÇϴµ¥ »ç¿ëÇÑ ¿ë¾îµé - Apache HTTP Server Version 2.4
    <-

    Áö½Ã¾î¸¦ ¼³¸íÇϴµ¥ »ç¿ëÇÑ ¿ë¾îµé

    °¡´ÉÇÑ ¾ð¾î:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.

    ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡ ¼³Á¤ Áö½Ã¾î¸¦ ¼³¸íÇϴµ¥ »ç¿ëÇÑ ¿ë¾îµéÀ» ¼³¸íÇÑ´Ù.

    top

    ¼³¸í (Description)

    Áö½Ã¾îÀÇ ¸ñÀû¿¡ ´ëÇÑ °£´ÜÇÑ ¼³¸í.

    top

    ¹®¹ý (Syntax)

    ¼³Á¤ÆÄÀÏ¿¡¼­ »ç¿ëÇÒ Áö½Ã¾îÀÇ Çü½ÄÀ» ¾Ë·ÁÁØ´Ù. ÀÌ ¹®¹ýÀº Áö½Ã¾î¸¶´Ù ¸Å¿ì ´Ù¸£¸ç, Áö½Ã¾î¸¦ Á¤ÀÇÇÒ ¶§¸¶´Ù ÀÚ¼¼È÷ ¼³¸íÇÑ´Ù. ÀϹÝÀûÀ¸·Î Áö½Ã¾î À̸§ µÚ¿¡ °ø¹éÀ¸·Î ±¸ºÐÇÑ ¾Æ±Ô¸ÕÆ®µéÀÌ ³ª¿Â´Ù. ¾Æ±Ô¸ÕÆ®°¡ °ø¹éÀ» Æ÷ÇÔÇÑ´Ù¸é ¾Æ±Ô¸ÕÆ®¸¦ ½Öµû¿ÈÇ¥·Î ¹­¾î¾ß ÇÑ´Ù. ¼±ÅÃÀûÀÎ ¾Æ±Ô¸ÕÆ®´Â Áß°ýÈ£·Î ¹­´Â´Ù. ¾Æ±Ô¸ÕÆ®°¡ ¿©·¯ °ªÁß ÇϳªÀÏ °æ¿ì °ªµéÀ» ¼öÁ÷¸·´ë "|"·Î ±¸ºÐÇÑ´Ù. ¹®ÀÚ±×´ë·Î »ç¿ëÇÒ ºÎºÐÀº ±âº» ¹®ÀÚü·Î ¾²°í, ´ëüÇÒ ¾Æ±Ô¸ÕÆ®´Â °­Á¶ÇÑ´Ù. ¾Æ±Ô¸ÕÆ® °³¼ö°¡ Á¤ÇØÁöÁö¾ÊÀº Áö½Ã¾î´Â ¸¶Áö¸· ¾Æ±Ô¸ÕÆ®°¡ ¹Ýº¹µÊÀ» ³ªÅ¸³»´Â "..."À¸·Î ³¡³­´Ù.

    Áö½Ã¾î´Â ¸Å¿ì ´Ù¾çÇÑ Á¾·ùÀÇ ¾Æ±Ô¸ÕÆ®¸¦ ¹Þ´Â´Ù. ÀÌÁß ÀÚÁÖ »ç¿ëÇÏ´Â °ÍÀº ¾Æ·¡¿Í °°´Ù.

    URL
    http://www.example.com/path/to/file.html°ú °°ÀÌ ½ºÅ´(scheme), È£½ºÆ®¸í, ¼±ÅÃÀûÀÎ °æ·Î¸íÀ» Æ÷ÇÔÇÑ ¿ÏÀüÇÑ Uniform Resource Locator
    URL-path
    /path/to/file.html°ú °°ÀÌ url¿¡¼­ ½ºÅ´°ú È£½ºÆ®¸í µÚ¿¡ ³ª¿À´Â ºÎºÐ. url-path´Â ÆÄÀϽýºÅÛ¿¡¼­ º» ½ÃÁ¡ÀÌ ¾Æ´Ñ À¥¿¡¼­ º» ½ÃÁ¡¿¡¼­ÀÇ ÀڷḦ ³ªÅ¸³½´Ù.
    file-path
    /usr/local/apache/htdocs/path/to/file.html°ú °°ÀÌ root µð·ºÅ丮·Î ½ÃÀÛÇÏ´Â ÆÄÀϽýºÅÛ»óÀÇ ÆÄÀÏ °æ·Î. µû·Î ¾ð±ÞÇÏÁö¾ÊÀ¸¸é, ½½·¡½¬·Î ½ÃÀÛÇÏÁö¾ÊÀº file-path´Â ServerRoot¿¡ »ó´ë°æ·Î·Î Ãë±ÞÇÑ´Ù.
    directory-path
    /usr/local/apache/htdocs/path/to/¿Í °°ÀÌ root µð·ºÅ丮·Î ½ÃÀÛÇÏ´Â ÆÄÀϽýºÅÛ»óÀÇ µð·ºÅ丮 °æ·Î.
    filename
    file.html°ú °°ÀÌ °æ·Î Á¤º¸°¡ ¾ø´Â ÆÄÀϸí.
    regex
    Perl Çü½ÄÀÇ Á¤±ÔÇ¥Çö½Ä(regular expression). Áö½Ã¾î´Â regex·Î ¹«¾ùÀΰ¡¸¦ °Ë»öÇÑ´Ù.
    extension
    ÀϹÝÀûÀ¸·Î filename¿¡¼­ ¸¶Áö¸· ¸¶Ä§Ç¥ µÚ¿¡ ³ª¿À´Â ºÎºÐÀÌ´Ù. ±×·¯³ª ¾ÆÆÄÄ¡´Â ¿©·¯ È®ÀåÀÚ¸¦ ÀνÄÇÒ ¼ö Àֱ⶧¹®¿¡, filename¿¡ ¸¶Ä§Ç¥°¡ ¿©·¯°³ Æ÷ÇÔµÈ °æ¿ì ¸¶Ä§Ç¥·Î ±¸ºÐµÈ ¸ðµç ºÎºÐÀ» È®ÀåÀÚ(extension)·Î ó¸®ÇÑ´Ù. ¿¹¸¦ µé¾î, ÆÄÀϸí file.html.enÀº .html°ú .enÀ̶ó´Â µÎ°¡Áö È®ÀåÀÚ¸¦ °¡Áø´Ù. ¾ÆÆÄÄ¡ Áö½Ã¾î¿¡¼­ extension¿¡ ÁöÁ¤ÇÑ °ª ¾Õ¿¡ ¸¶Ä§Ç¥°¡ À־ µÇ°í ¾ø¾îµµ µÈ´Ù. ¶Ç, extensionÀº ´ë¼Ò¹®ÀÚ¸¦ °¡¸®Áö¾Ê´Â´Ù.
    MIME-type
    text/html°ú °°ÀÌ ½½·¡½¬·Î major format type°ú minor format type¸¦ ±¸ºÐÇÏ¿© ÆÄÀÏÀÇ Çü½ÄÀ» ¼³¸íÇÏ´Â ¹æ½Ä.
    env-variable
    ¾ÆÆÄÄ¡ ¼³Á¤¿¡¼­ Á¤ÀÇÇÑ È¯°æº¯¼ö À̸§. ¿î¿µÃ¼Á¦ÀÇ È¯°æº¯¼ö¿Í ´Ù¸§À» ÁÖÀÇÇ϶ó. ÀÚ¼¼ÇÑ ³»¿ëÀº ȯ°æº¯¼ö ¹®¼­¸¦ Âü°íÇ϶ó.
    top

    ±âº»°ª (Default)

    Áö½Ã¾î¿¡ ±âº»°ªÀÌ ÀÖ´Ù¸é (¿¹¸¦ µé¾î, ¼³Á¤¿¡¼­ Áö½Ã¾î¸¦ »ý·«ÇÑ °æ¿ì ¾ÆÆÄÄ¡ À¥¼­¹ö´Â ÀÌ °ªÀ» »ç¿ëÇÑ´Ù.) ÀÌ Ç׸ñ¿¡ ³ª¿Â´Ù. ±âº»°ªÀÌ ¾ø´Ù¸é ÀÌ Ç׸ñÀº "None"À̾î¾ß ÇÑ´Ù. ±âº»°ªÀÌ ¼­¹ö¿¡ Æ÷ÇÔµÈ ±âº» httpd.confÀÇ Áö½Ã¾î °ª°ú ´Ù¸¦ ¼ö ÀÖÀ½À» ÁÖÀÇÇ϶ó.

    top

    »ç¿ëÀå¼Ò (Context)

    ¼­¹öÀÇ ¼³Á¤ÆÄÀÏÁß ¾î´À°÷¿¡¼­ Áö½Ã¾î¸¦ »ç¿ëÇÒ ¼ö ÀÖ´ÂÁö ¾Ë·ÁÁØ´Ù. ´ÙÀ½ °ªµéÀ» ½°Ç¥·Î ±¸ºÐÇÑ ¸ñ·ÏÀÌ´Ù:

    ÁÖ¼­¹ö¼³Á¤ (server config)
    Áö½Ã¾î¸¦ ¼­¹ö ¼³Á¤ÆÄÀÏ¿¡¼­ (¿¹¸¦ µé¾î, httpd.conf) »ç¿ëÇÒ ¼ö ÀÖÀ¸³ª, <VirtualHost>³ª <Directory>¿¡¼­ »ç¿ëÇÒ ¼ö ¾øÀ½À» ¶æÇÑ´Ù. ÀÌ Áö½Ã¾î´Â .htaccess ÆÄÀÏ¿¡¼­µµ »ç¿ëÇÒ ¼ö ¾ø´Ù.
    °¡»óÈ£½ºÆ® (virtual host)
    Áö½Ã¾î¸¦ ¼­¹ö ¼³Á¤ÆÄÀÏÀÇ <VirtualHost> ¾È¿¡¼­ »ç¿ëÇÒ ¼ö ÀÖÀ½À» ¶æÇÑ´Ù.
    µð·ºÅ丮 (directory)
    Áö½Ã¾î°¡ ¼½¼Ç ¼³Á¤¿¡ ¼³¸íÇÑ Á¦¾àÀ» µû¸£¸ç, ¼­¹ö ¼³Á¤ÆÄÀÏÀÇ <Directory>, <Location>, <Files>, <Proxy>¿¡¼­ »ç¿ëÇÒ ¼ö ÀÖÀ½À» ¶æÇÑ´Ù.
    .htaccess
    Áö½Ã¾î¸¦ µð·ºÅ丮º° .htaccess ÆÄÀÏ¿¡¼­ »ç¿ëÇÒ ¼ö ÀÖÀ½À» ¶æÇÑ´Ù. ÀÌ Áö½Ã¾î´Â ÇöÀç »ç¿ëÇÏ´Â overrides °ª¿¡ µû¶ó ¹«½ÃµÉ ¼ö ÀÖ´Ù.

    Áö½Ã¾î´Â ÁöÁ¤µÈ Àå¼Ò¿¡¼­¸¸ »ç¿ëÇÒ ¼ö ÀÖ´Ù. ´Ù¸¥ °÷¿¡¼­ »ç¿ëÇÏ¸é ¼³Á¤¿À·ù°¡ ¹ß»ýÇÏ°í ¼­¹ö´Â ºÎºÐ¿¡ ´ëÇÑ ¿äûÀ» ¿Ã¹Ù·Î ó¸®ÇÏÁö ¸øÇϰųª ÀÛµ¿ÀÌ, ¿¹¸¦ µé¾î ½ÃÀÛÁ¶Â÷µµ, ¾ÈµÉ ¼ö ÀÖ´Ù.

    Áö½Ã¾î¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Â Àå¼Ò´Â ¿­°ÅÇÑ Àå¼Ò¸¦ ¸ðµÎ ºÒ¸°(boolean) ORÇÑ °á°úÀÌ´Ù. Áï, "server config, .htaccess"¿¡¼­ °¡´ÉÇÏ´Ù´Â Áö½Ã¾î´Â httpd.conf ÆÄÀϰú .htaccess ÆÄÀÏ¿¡¼­´Â »ç¿ëÇÒ ¼ö ÀÖÁö¸¸, <Directory>³ª <VirtualHost>¿¡¼­´Â »ç¿ëÇÒ ¼ö ¾ø´Ù.

    top

    Override ¿É¼Ç (Override)

    ÀÌ Áö½Ã¾î¸¦ .htaccess ÆÄÀÏ¿¡¼­ »ç¿ëÇÏ·Á¸é ¾î¶² override ¿É¼ÇÀ» »ç¿ëÇØ¾ß ÇÏ´ÂÁö¸¦ ³ªÅ¸³½´Ù. Áö½Ã¾îÀÇ »ç¿ëÀå¼Ò°¡ Áö½Ã¾î¸¦ .htaccess ÆÄÀÏ¿¡¼­ »ç¿ëÇÒ ¼ö ¾ø´Ù°í ÇÑ´Ù¸é ¾î¶² »ç¿ëÀå¼Òµµ ³ª¿ÀÁö ¾Ê´Â´Ù.

    Overrides´Â AllowOverride Áö½Ã¾î·Î Áö½ÃÇϰí, (µð·ºÅ丮 µîÀÇ) ƯÁ¤ ¹üÀ§¿Í ÇÏÀ§ ¹üÀ§¿¡¼­ ´Ù¸¥ AllowOverride Áö½Ã¾î·Î ´Ù¸¥ °ªÀ» ¼³Á¤ÇÏÁö¾Ê¾Ò´Ù¸é ÇÏÀ§ ¹üÀ§¿¡µµ ±×´ë·Î Àû¿ëµÈ´Ù. Áö½Ã¾î ¼³¸í¿¡ »ç¿ë°¡´ÉÇÑ override À̸§µéÀÌ ³ª¿Â´Ù.

    top

    »óÅÂ (Status)

    Áö½Ã¾î°¡ ¾ÆÆÄÄ¡ À¥¼­¹ö¿¡ ¾ó¸¶³ª ±ä¹ÐÈ÷ ¹­¿©ÀÖ´ÂÁö¸¦ ³ªÅ¸³½´Ù. Áï, ±× Áö½Ã¾î³ª ±â´ÉÀ» »ç¿ëÇϱâÀ§ÇØ ¼­¹ö¸¦ ¸ðµâ°ú °°ÀÌ ´Ù½Ã ÄÄÆÄÀÏÇÒ Çʿ䰡 ÀÖÀ» ¼öµµ ÀÖ´Ù. °¡´ÉÇÑ °ªÀº ´ÙÀ½°ú °°´Ù:

    Core
    Áö½Ã¾î°¡ "Core" »óŸ¦ °¡Áö¸é, Áö½Ã¾î°¡ ¾ÆÆÄÄ¡ À¥¼­¹ö Çٽɺκп¡ ¼ÓÇϰí Ç×»ó »ç¿ë°¡´ÉÇÔÀ» ¶æÇÑ´Ù.
    MPM
    "MPM" »óÅÂÀÎ Áö½Ã¾î´Â ´ÙÁßó¸® ¸ðµâÀ» Á¦°øÇÑ´Ù. ÀÌ·± Áö½Ã¾î´Â Áö½Ã¾î ¼³¸í¿¡¼­ ¸ðµâ¿¡ ¿­°ÅµÈ MPMÁß Çϳª¸¦ »ç¿ëÇÒ¶§¸¸ °¡´ÉÇÏ´Ù.
    Base
    ±âº»ÀûÀ¸·Î ¼­¹ö¿Í °°ÀÌ ÄÄÆÄÀϵǹǷΠÁ÷Á¢ ±¸¼º¿¡¼­ ¸ðµâÀ» Á¦°ÅÇÏÁö ¾Ê¾Ò´Ù¸é ÀϹÝÀûÀ¸·Î »ç¿ë°¡´ÉÇÑ Ç¥ÁØ ¾ÆÆÄÄ¡ ¸ðµâÀÌ Á¦°øÇÏ´Â Áö½Ã¾î´Â "Base" »óÅÂÀÌ´Ù.
    Extension
    ¾ÆÆÄÄ¡ ¼­¹ö ¹èÆ÷º»¿¡´Â Æ÷ÇÔµÇÀÖÁö¸¸ º¸Åë ¼­¹ö¿Í °°ÀÌ ÄÄÆÄÀϵÇÁö¾Ê´Â ¸ðµâÀÌ Á¦°øÇÏ´Â Áö½Ã¾î´Â "Extension" »óÅÂÀÌ´Ù. ÀÌ·± Áö½Ã¾î¸¦ »ç¿ëÇÏ·Á¸é ¼­¹ö ÄÄÆÄÀÏ ±¸¼ºÆÄÀÏÀ» ¼öÁ¤ÇÏ°í ¾ÆÆÄÄ¡¸¦ ´Ù½Ã ÄÄÆÄÀÏÇØ¾ß ÇÑ´Ù.
    Experimental
    "Experimental"Àº Áö½Ã¾î°¡ ¾ÆÆÄÄ¡ ¹èÆ÷º»¿¡ Æ÷ÇÔµÇÀÖÁö¸¸, »ç¿ëÀº ÀÚ½ÅÀÇ Ã¥ÀÓÀÓÀ» ³ªÅ¸³½´Ù. Áö½Ã¾î´Â ¹®¼­È­µÇÀÖÁö¸¸, ½ÇÁ¦¿Í ´Ù¸¦ ¼ö ÀÖ´Ù. Áö½Ã¾î¸¦ Á¦°øÇÏ´Â ¸ðµâÀº ±âº»ÀûÀ¸·Î ¾ÆÆÄÄ¡¿Í °°ÀÌ ÄÄÆÄÀ쵃 ¼öµµ ¾ÈµÉ ¼öµµ ÀÖ´Ù. Áö½Ã¾î¿Í ¸ðµâÀ» ¼³¸íÇÏ´Â ¹®¼­ ¾Õ¿¡¼­ »ç¿ëÇÒ ¼ö ÀÖ´ÂÁö »ìÆìºÁ¶ó.
    top

    ¸ðµâ (Module)

    ´Ü¼øÈ÷ Áö½Ã¾î¸¦ Á¤ÀÇÇÑ ¼Ò½º ¸ðµâ¸íÀ» ¿­°ÅÇÑ´Ù.

    top

    Áö¿ø (Compatibility)

    Áö½Ã¾î°¡ ¿ø·¡ ¾ÆÆÄÄ¡ ¹öÀü 2 ¹èÆ÷º»ÀÇ ÀϺΰ¡ ¾Æ´Ï¿´´Ù¸é, Áö½Ã¾î¸¦ Ãß°¡Çϱ⠽ÃÀÛÇÑ ¹öÀüÀÌ ¿©±â ³ª¿Â´Ù. ¶Ç, ¾î¶² Ç÷¡Æû¿¡¼­¸¸ »ç¿ë°¡´ÉÇÑ Áö½Ã¾îµµ ¿©±â ³ª¿Â´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_vhost_alias.html.en0000644000000000000500000005176413412755316020706 0ustar rootsrc mod_vhost_alias - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_vhost_alias

    Available Languages:  en  |  fr  |  tr 

    Description:Provides for dynamically configured mass virtual hosting
    Status:Extension
    Module Identifier:vhost_alias_module
    Source File:mod_vhost_alias.c

    Summary

    This module creates dynamically configured virtual hosts, by allowing the IP address and/or the Host: header of the HTTP request to be used as part of the pathname to determine what files to serve. This allows for easy use of a huge number of virtual hosts with similar configurations.

    Note

    If mod_alias or mod_userdir are used for translating URIs to filenames, they will override the directives of mod_vhost_alias described below. For example, the following configuration will map /cgi-bin/script.pl to /usr/local/apache2/cgi-bin/script.pl in all cases:

    ScriptAlias "/cgi-bin/" "/usr/local/apache2/cgi-bin/"
    VirtualScriptAlias "/never/found/%0/cgi-bin/"
    top

    Directory Name Interpolation

    All the directives in this module interpolate a string into a pathname. The interpolated string (henceforth called the "name") may be either the server name (see the UseCanonicalName directive for details on how this is determined) or the IP address of the virtual host on the server in dotted-quad format. The interpolation is controlled by specifiers inspired by printf which have a number of formats:

    %% insert a %
    %p insert the port number of the virtual host
    %N.M insert (part of) the name

    N and M are used to specify substrings of the name. N selects from the dot-separated components of the name, and M selects characters within whatever N has selected. M is optional and defaults to zero if it isn't present; the dot must be present if and only if M is present. The interpretation is as follows:

    0 the whole name
    1 the first part
    2 the second part
    -1 the last part
    -2 the penultimate part
    2+ the second and all subsequent parts
    -2+ the penultimate and all preceding parts
    1+ and -1+ the same as 0

    If N or M is greater than the number of parts available a single underscore is interpolated.

    top

    Examples

    For simple name-based virtual hosts you might use the following directives in your server configuration file:

    UseCanonicalName    Off
    VirtualDocumentRoot "/usr/local/apache/vhosts/%0"

    A request for http://www.example.com/directory/file.html will be satisfied by the file /usr/local/apache/vhosts/www.example.com/directory/file.html.

    For a very large number of virtual hosts it is a good idea to arrange the files to reduce the size of the vhosts directory. To do this you might use the following in your configuration file:

    UseCanonicalName    Off
    VirtualDocumentRoot "/usr/local/apache/vhosts/%3+/%2.1/%2.2/%2.3/%2"

    A request for http://www.domain.example.com/directory/file.html will be satisfied by the file /usr/local/apache/vhosts/example.com/d/o/m/domain/directory/file.html.

    A more even spread of files can be achieved by hashing from the end of the name, for example:

    VirtualDocumentRoot "/usr/local/apache/vhosts/%3+/%2.-1/%2.-2/%2.-3/%2"

    The example request would come from /usr/local/apache/vhosts/example.com/n/i/a/domain/directory/file.html.

    Alternatively you might use:

    VirtualDocumentRoot "/usr/local/apache/vhosts/%3+/%2.1/%2.2/%2.3/%2.4+"

    The example request would come from /usr/local/apache/vhosts/example.com/d/o/m/ain/directory/file.html.

    A very common request by users is the ability to point multiple domains to multiple document roots without having to worry about the length or number of parts of the hostname being requested. If the requested hostname is sub.www.domain.example.com instead of simply www.domain.example.com, then using %3+ will result in the document root being /usr/local/apache/vhosts/domain.example.com/... instead of the intended example.com directory. In such cases, it can be beneficial to use the combination %-2.0.%-1.0, which will always yield the domain name and the tld, for example example.com regardless of the number of subdomains appended to the hostname. As such, one can make a configuration that will direct all first, second or third level subdomains to the same directory:

    VirtualDocumentRoot "/usr/local/apache/vhosts/%-2.0.%-1.0"

    In the example above, both www.example.com as well as www.sub.example.com or example.com will all point to /usr/local/apache/vhosts/example.com.

    For IP-based virtual hosting you might use the following in your configuration file:

    UseCanonicalName DNS
    VirtualDocumentRootIP "/usr/local/apache/vhosts/%1/%2/%3/%4/docs"
    VirtualScriptAliasIP  "/usr/local/apache/vhosts/%1/%2/%3/%4/cgi-bin"

    A request for http://www.domain.example.com/directory/file.html would be satisfied by the file /usr/local/apache/vhosts/10/20/30/40/docs/directory/file.html if the IP address of www.domain.example.com were 10.20.30.40. A request for http://www.domain.example.com/cgi-bin/script.pl would be satisfied by executing the program /usr/local/apache/vhosts/10/20/30/40/cgi-bin/script.pl.

    If you want to include the . character in a VirtualDocumentRoot directive, but it clashes with a % directive, you can work around the problem in the following way:

    VirtualDocumentRoot "/usr/local/apache/vhosts/%2.0.%3.0"

    A request for http://www.domain.example.com/directory/file.html will be satisfied by the file /usr/local/apache/vhosts/domain.example/directory/file.html.

    The LogFormat directives %V and %A are useful in conjunction with this module.

    top

    VirtualDocumentRoot Directive

    Description:Dynamically configure the location of the document root for a given virtual host
    Syntax:VirtualDocumentRoot interpolated-directory|none
    Default:VirtualDocumentRoot none
    Context:server config, virtual host
    Status:Extension
    Module:mod_vhost_alias

    The VirtualDocumentRoot directive allows you to determine where Apache HTTP Server will find your documents based on the value of the server name. The result of expanding interpolated-directory is used as the root of the document tree in a similar manner to the DocumentRoot directive's argument. If interpolated-directory is none then VirtualDocumentRoot is turned off. This directive cannot be used in the same context as VirtualDocumentRootIP.

    Note

    VirtualDocumentRoot will override any DocumentRoot directives you may have put in the same context or child contexts. Putting a VirtualDocumentRoot in the global server scope will effectively override DocumentRoot directives in any virtual hosts defined later on, unless you set VirtualDocumentRoot to None in each virtual host.
    top

    VirtualDocumentRootIP Directive

    Description:Dynamically configure the location of the document root for a given virtual host
    Syntax:VirtualDocumentRootIP interpolated-directory|none
    Default:VirtualDocumentRootIP none
    Context:server config, virtual host
    Status:Extension
    Module:mod_vhost_alias

    The VirtualDocumentRootIP directive is like the VirtualDocumentRoot directive, except that it uses the IP address of the server end of the connection for directory interpolation instead of the server name.

    top

    VirtualScriptAlias Directive

    Description:Dynamically configure the location of the CGI directory for a given virtual host
    Syntax:VirtualScriptAlias interpolated-directory|none
    Default:VirtualScriptAlias none
    Context:server config, virtual host
    Status:Extension
    Module:mod_vhost_alias

    The VirtualScriptAlias directive allows you to determine where Apache httpd will find CGI scripts in a similar manner to VirtualDocumentRoot does for other documents. It matches requests for URIs starting /cgi-bin/, much like ScriptAlias /cgi-bin/ would.

    top

    VirtualScriptAliasIP Directive

    Description:Dynamically configure the location of the CGI directory for a given virtual host
    Syntax:VirtualScriptAliasIP interpolated-directory|none
    Default:VirtualScriptAliasIP none
    Context:server config, virtual host
    Status:Extension
    Module:mod_vhost_alias

    The VirtualScriptAliasIP directive is like the VirtualScriptAlias directive, except that it uses the IP address of the server end of the connection for directory interpolation instead of the server name.

    Available Languages:  en  |  fr  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_sed.html.en0000644000000000000500000002716013412755316017136 0ustar rootsrc mod_sed - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_sed

    Available Languages:  en  |  fr 

    Description:Filter Input (request) and Output (response) content using sed syntax
    Status:Experimental
    Module Identifier:sed_module
    Source File:mod_sed.c sed0.c sed1.c regexp.c regexp.h sed.h
    Compatibility:Available in Apache 2.3 and later

    Summary

    mod_sed is an in-process content filter. The mod_sed filter implements the sed editing commands implemented by the Solaris 10 sed program as described in the manual page. However, unlike sed, mod_sed doesn't take data from standard input. Instead, the filter acts on the entity data sent between client and server. mod_sed can be used as an input or output filter. mod_sed is a content filter, which means that it cannot be used to modify client or server http headers.

    The mod_sed output filter accepts a chunk of data, executes the sed scripts on the data, and generates the output which is passed to the next filter in the chain.

    The mod_sed input filter reads the data from the next filter in the chain, executes the sed scripts, and returns the generated data to the caller filter in the filter chain.

    Both the input and output filters only process the data if newline characters are seen in the content. At the end of the data, the rest of the data is treated as the last line.

    top

    Sample Configuration

    Adding an output filter

    # In the following example, the sed filter will change the string
    # "monday" to "MON" and the string "sunday" to SUN in html documents
    # before sending to the client.
    <Directory "/var/www/docs/sed"> 
        AddOutputFilter Sed html 
        OutputSed "s/monday/MON/g" 
        OutputSed "s/sunday/SUN/g" 
    </Directory>

    Adding an input filter

    # In the following example, the sed filter will change the string
    # "monday" to "MON" and the string "sunday" to SUN in the POST data
    # sent to PHP.
    <Directory "/var/www/docs/sed"> 
        AddInputFilter Sed php 
        InputSed "s/monday/MON/g" 
        InputSed "s/sunday/SUN/g" 
    </Directory>
    top

    Sed Commands

    Complete details of the sed command can be found from the sed manual page.

    b
    Branch to the label specified (similar to goto).
    h
    Copy the current line to the hold buffer.
    H
    Append the current line to the hold buffer.
    g
    Copy the hold buffer to the current line.
    G
    Append the hold buffer to the current line.
    x
    Swap the contents of the hold buffer and the current line.
    top

    InputSed Directive

    Description:Sed command to filter request data (typically POST data)
    Syntax:InputSed sed-command
    Context:directory, .htaccess
    Status:Experimental
    Module:mod_sed

    The InputSed directive specifies the sed command to execute on the request data e.g., POST data.

    top

    OutputSed Directive

    Description:Sed command for filtering response content
    Syntax:OutputSed sed-command
    Context:directory, .htaccess
    Status:Experimental
    Module:mod_sed

    The OutputSed directive specifies the sed command to execute on the response.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy.html0000644000000000000500000000045713362070302017130 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_proxy.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_proxy.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_macro.html0000644000000000000500000000032613362070302017043 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_macro.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_macro.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_authz_dbm.html0000644000000000000500000000047613362070302017725 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authz_dbm.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authz_dbm.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_authz_dbm.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_lua.html0000644000000000000500000000032213362070302016517 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_lua.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_lua.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_socache_redis.html0000644000000000000500000000020513520522576020544 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_socache_redis.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 httpd-2.4.41/docs/manual/mod/mod_log_debug.html.en0000644000000000000500000002417513412755316020315 0ustar rootsrc mod_log_debug - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_log_debug

    Available Languages:  en  |  fr 

    Description:Additional configurable debug logging
    Status:Experimental
    Module Identifier:log_debug_module
    Source File:mod_log_debug.c
    Compatibility:Available in Apache 2.3.14 and later
    Support Apache!

    Topics

    Directives

    Bugfix checklist

    See also

    top

    Examples

    1. Log message after request to /foo/* is processed:
      <Location "/foo/">
        LogMessage "/foo/ has been requested"
      </Location>
    2. Log message if request to /foo/* is processed in a sub-request:
      <Location "/foo/">
        LogMessage "subrequest to /foo/" hook=type_checker "expr=-T %{IS_SUBREQ}"
      </Location>
      The default log_transaction hook is not executed for sub-requests, therefore we have to use a different hook.
    3. Log message if an IPv6 client causes a request timeout:
      LogMessage "IPv6 timeout from %{REMOTE_ADDR}" "expr=-T %{IPV6} && %{REQUEST_STATUS} = 408"
      Note the placing of the double quotes for the expr= argument.
    4. Log the value of the "X-Foo" request environment variable in each stage of the request:
      <Location "/">
        LogMessage "%{reqenv:X-Foo}" hook=all
      </Location>
      Together with microsecond time stamps in the error log, hook=all also lets you determine the times spent in the different parts of the request processing.
    top

    LogMessage Directive

    Description:Log user-defined message to error log
    Syntax:LogMessage message [hook=hook] [expr=expression]
    Default:Unset
    Context:directory
    Status:Experimental
    Module:mod_log_debug

    This directive causes a user defined message to be logged to the error log. The message can use variables and functions from the ap_expr syntax. References to HTTP headers will not cause header names to be added to the Vary header. The messages are logged at loglevel info.

    The hook specifies before which phase of request processing the message will be logged. The following hooks are supported:

    Name
    translate_name
    type_checker
    quick_handler
    map_to_storage
    check_access
    check_access_ex
    insert_filter
    check_authn
    check_authz
    fixups
    handler
    log_transaction

    The default is log_transaction. The special value all is also supported, causing a message to be logged at each phase. Not all hooks are executed for every request.

    The optional expression allows to restrict the message if a condition is met. The details of the expression syntax are described in the ap_expr documentation. References to HTTP headers will not cause the header names to be added to the Vary header.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/directive-dict.html0000644000000000000500000000113313362070302017777 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: directive-dict.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: directive-dict.html.es Content-Language: es Content-type: text/html; charset=ISO-8859-1 URI: directive-dict.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: directive-dict.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: directive-dict.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: directive-dict.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_cache.html.ja.utf80000644000000000000500000015054613420146431020277 0ustar rootsrc mod_cache - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_cache

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:URI をキーã«ã—ãŸã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥
    ステータス:Extension
    モジュール識別å­:cache_module
    ソースファイル:mod_cache.c

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ Allow ã‚„ Deny ディレクティブを無視ã—ã¾ã™ã®ã§ã€ 注æ„ã—ã¦ä½¿ã£ã¦ä¸‹ã•ã„。クライアントã®ãƒ›ã‚¹ãƒˆåã€ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚„環境変数を使ã£ã¦ アクセスを制é™ã—ãŸã„コンテンツã«å¯¾ã—ã¦ã¯ã‚­ãƒ£ãƒƒã‚·ãƒ¥æ©Ÿèƒ½ã‚’有効ã«ã™ã‚‹ã¹ãã§ã¯ã‚りã¾ã›ã‚“。

    mod_cache ã¯ãƒ­ãƒ¼ã‚«ãƒ«ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„やプロキシã•れ㟠コンテンツをキャッシュã™ã‚‹ãŸã‚ã«ä½¿ã‚れる RFC 2616 準拠㮠HTTP コンテンツキャッシュを実装ã—ã¦ã„ã¾ã™ã€‚mod_cache ã®å‹•作ã«ã¯ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã‚’管ç†ã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒå¿…è¦ã§ã™ã€‚標準 Apache é…布ã«ã¯äºŒã¤ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ç®¡ç†ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒå«ã¾ã‚Œã¦ã„ã¾ã™:

    mod_cache_disk
    ディスクを使用ã—ãŸã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ç®¡ç†æ©Ÿæ§‹ã‚’実装ã—ã¦ã„ã¾ã™ã€‚
    mod_mem_cache
    メモリを使用ã—ãŸã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ç®¡ç†æ©Ÿæ§‹ã‚’実装ã—ã¦ã„ã¾ã™ã€‚ mod_mem_cache ã¯æ¬¡ã®äºŒã¤ã®ãƒ¢ãƒ¼ãƒ‰ã®ã©ã¡ã‚‰ã‹ã§å‹•作ã™ã‚‹ よã†ã«è¨­å®šã§ãã¾ã™: オープンã•れã¦ã„るファイル記述å­ã‚’キャッシュã™ã‚‹ãƒ¢ãƒ¼ãƒ‰ã‹ã€ ヒープ上ã§ã®ã‚ªãƒ–ジェクトã®è‡ªä½“をキャッシュをã™ã‚‹ãƒ¢ãƒ¼ãƒ‰ã§ã™ã€‚ mod_mem_cache ã¯ãƒ­ãƒ¼ã‚«ãƒ«ã§ç”Ÿæˆã•れるコンテンツや〠mod_proxy ㌠ProxyPass を使ã£ã¦è¨­å®šã•れã¦ã„ã‚‹ ã¨ãã® (ã¤ã¾ã‚Šãƒªãƒãƒ¼ã‚¹ãƒ—ロキシ ã§ã®) ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã® コンテンツをキャッシュã™ã‚‹ã®ã«ä½¿ãˆã¾ã™ã€‚

    コンテンツã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã¸ã®ä¿å­˜ã¨å–得㯠URI ã«åŸºã¥ã„ãŸã‚­ãƒ¼ãŒä½¿ã‚れã¾ã™ã€‚ アクセスä¿è­·ã®ã‹ã‘られã¦ã„るコンテンツã¯ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã•れã¾ã›ã‚“。

    より詳細ãªè§£èª¬ã‚„例ã«ã¤ã„ã¦ã¯ã‚­ãƒ£ãƒƒã‚·ãƒ¥æ©Ÿèƒ½ ã‚’å‚ç…§ã—ã¦ãã ã•ã„。

    top
    top

    サンプル設定

    Sample httpd.conf

    #
    # Sample Cache Configuration
    #
    LoadModule cache_module modules/mod_cache.so

    <IfModule mod_cache.c>
    #LoadModule cache_disk_module modules/mod_cache_disk.so
    # If you want to use mod_cache_disk instead of mod_mem_cache,
    # uncomment the line above and comment out the LoadModule line below.
    <IfModule mod_cache_disk.c>
    CacheRoot c:/cacheroot
    CacheEnable disk /
    CacheDirLevels 5
    CacheDirLength 3
    </IfModule>

    LoadModule mem_cache_module modules/mod_mem_cache.so
    <IfModule mod_mem_cache.c>
    CacheEnable mem /
    MCacheSize 4096
    MCacheMaxObjectCount 100
    MCacheMinObjectSize 1
    MCacheMaxObjectSize 2048
    </IfModule>

    # When acting as a proxy, don't cache the list of security updates
    CacheDisable http://security.update.server/update-list/
    </IfModule>

    top

    CacheDefaultExpire ディレクティブ

    説明:æœŸæ—¥ãŒæŒ‡å®šã•れã¦ã„ãªã„ã¨ãã«ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’キャッシュã™ã‚‹ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®æœŸé–“
    æ§‹æ–‡:CacheDefaultExpire seconds
    デフォルト:CacheDefaultExpire 3600 (1時間)
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    CacheDefaultExpire ディレクティブã¯ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã« æœ‰åŠ¹æœŸé™ (expiry) や最終修正時刻 (last-modified) ãŒæŒ‡å®šã•れã¦ã„ãªã„å ´åˆã® ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®æ™‚間を指定ã—ã¾ã™ã€‚CacheMaxExpire ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã•れãŸå€¤ã¯ã“ã®è¨­å®šã‚’上書ãã—ã¾ã›ã‚“。

    CacheDefaultExpire 86400

    top

    CacheDetailHeader ディレクティブ

    説明:Add an X-Cache-Detail header to the response.
    æ§‹æ–‡:CacheDetailHeader on|off
    デフォルト:CacheDetailHeader off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    ステータス:Extension
    モジュール:mod_cache
    äº’æ›æ€§:Available in Apache 2.3.9 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    CacheDisable ディレクティブ

    説明:特定㮠URL をキャッシュã—ãªã„
    æ§‹æ–‡:CacheDisable url-string
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    CacheDisable ディレクティブ㧠mod_cache モジュール㌠url-string 以下㮠URL をキャッシュã—ãªã„よã†ã«ã—ã¾ã™ã€‚

    例

    CacheDisable /local_files

    top

    CacheEnable ディレクティブ

    説明:指定ã—ãŸã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ç®¡ç†æ–¹å¼ã‚’使ã£ã¦ã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’有効ã«ã™ã‚‹
    æ§‹æ–‡:CacheEnable cache_type url-string
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    CacheEnable ディレクティブ㧠mod_cache モジュール㌠url-string 以下㮠URL をキャッシュã™ã‚‹ã‚ˆã†ã«ã—ã¾ã™ã€‚ ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ç®¡ç†æ–¹å¼ã¯ cache_type å¼•æ•°ã§æŒ‡å®šã—ã¾ã™ã€‚ cache_type mem ã§ã€ mod_mem_cache ã§å®Ÿè£…ã•れã¦ã„るメモリを使ã£ãŸã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ ç®¡ç†æ–¹å¼ã‚’使ã†ã‚ˆã†ã« mod_cache ã«æŒ‡ç¤ºã—ã¾ã™ã€‚ cache_type disk ã§ã€ mod_cache_disk ã§å®Ÿè£…ã•れã¦ã„るディスクを使ã£ãŸã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ 管ç†ã‚’使ã†ã‚ˆã†ã« mod_cache ã«æŒ‡ç¤ºã—ã¾ã™ã€‚ cache_type fd 㯠mod_cache ã« mod_mem_cache ã«ã‚ˆã‚Šå®Ÿè£…ã•れã¦ã„るファイル記述å­ã® キャッシュを使ã†ã‚ˆã†ã«æŒ‡ç¤ºã—ã¾ã™ã€‚

    (下ã®ä¾‹ã®ã‚ˆã†ã«) CacheEnable ディレクティブ㮠URL 空間ãŒé‡è¤‡ã—ã¦ã„ã‚‹ã¨ãã¯ã€è©²å½“ã™ã‚‹ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸æ–¹å¼ã‚’é †ã«è©¦ã—ã¦ã€ 実際ã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®å‡¦ç†ãŒã§ãã‚‹ã¨ã€ãã®æ–¹å¼ã§å‡¦ç†ã—ã¾ã™ã€‚ ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ç®¡ç†æ–¹å¼ãŒå®Ÿè¡Œã•れる順番ã¯è¨­å®šãƒ•ァイル中㮠CacheEnable ã®é †ç•ªã«ã‚ˆã‚Šæ±ºå®šã•れã¾ã™ã€‚

    CacheEnable mem /manual
    CacheEnable fd /images
    CacheEnable disk /

    フォワードプロクシサーãƒã¨ã—ã¦å‹•作ã™ã‚‹å ´åˆã€ url-string を使ã£ã¦ã€ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’有効ã«ã™ã‚‹ãƒªãƒ¢ãƒ¼ãƒˆã‚µã‚¤ãƒˆã‚„ プロクシプロトコルを指定ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    # Cache proxied url's
    CacheEnable disk /

    # Cache FTP-proxied url's
    CacheEnable disk ftp://

    # Cache content from www.apache.org
    CacheEnable disk http://www.apache.org/

    top

    CacheHeader ディレクティブ

    説明:Add an X-Cache header to the response.
    æ§‹æ–‡:CacheHeader on|off
    デフォルト:CacheHeader off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    ステータス:Extension
    モジュール:mod_cache
    äº’æ›æ€§:Available in Apache 2.3.9 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    CacheIgnoreCacheControl ディレクティブ

    説明:キャッシュã•れã¦ã„るコンテンツを返ã•ãªã„よã†ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ リクエストã•れã¦ã‚‚無視ã™ã‚‹
    æ§‹æ–‡:CacheIgnoreCacheControl On|Off
    デフォルト:CacheIgnoreCacheControl Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    Cache-Control: no-cache ヘッダや Pragma: no-store ヘッダã®ã‚るリクエスト㫠対ã—ã¦ã¯ã€é€šå¸¸ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’使ã„ã¾ã›ã‚“。CacheIgnoreCacheControl ディレクティブを使ã†ã¨ã€ã“ã®å‹•作を上書ãã§ãã¾ã™ã€‚ CacheIgnoreCacheControl On ã¨ã™ã‚‹ã¨ã€ リクエスト㫠no-cache ã¨ã„ã†å€¤ãŒã‚ã£ã¦ã‚‚ã€ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’使ã£ã¦ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’ è¿”ã™ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚èªè¨¼ã‚’å¿…è¦ã¨ã™ã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã¯æ±ºã—㦠キャッシュã•れã¾ã›ã‚“。

    CacheIgnoreCacheControl On

    警告

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を使ã†ã¨ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆå–得時ã«ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’使ã‚ãªã„よã†ã« クライアントãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã—ã¦ã„ã‚‹ã«ã‚‚ã‹ã‹ã‚らãšã€ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’ 使ã†ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ãã®çµæžœã€ å¤ã„コンテンツãŒé€ã‚‰ã‚Œç¶šã‘ã‚‹ã“ã¨ã«ãªã£ã¦ã—ã¾ã†ã‹ã‚‚ã—れã¾ã›ã‚“。

    å‚ç…§

    top

    CacheIgnoreHeaders ディレクティブ

    説明:指定ã•れ㟠HTTP ヘッダをキャッシュã«ä¿å­˜ã—ãªã„。
    æ§‹æ–‡:CacheIgnoreHeaders header-string [header-string] ...
    デフォルト:CacheIgnoreHeaders None
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    RFC 2616 ã«ã‚ˆã‚‹ã¨ã€hop-by-hop HTTP ヘッダã¯ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã«ã¯ä¿ç®¡ã•れã¾ã›ã‚“。 以下ã®ãƒ˜ãƒƒãƒ€ã¯ hop-by-hop ヘッダã«è©²å½“ã—ã¾ã™ã®ã§ã€ CacheIgnoreHeaders ã®è¨­å®šã«é–¢ä¿‚ãªãキャッシュã«ã¯ä¿ç®¡ã•れã¾ã›ã‚“:

    • Connection
    • Keep-Alive
    • Proxy-Authenticate
    • Proxy-Authorization
    • TE
    • Trailers
    • Transfer-Encoding
    • Upgrade

    CacheIgnoreHeaders 㧠キャッシュã«ä¿ç®¡ã—ãªã„追加㮠HTTP ヘッダを指定ã—ã¾ã™ã€‚ 例ãˆã°ã€ã‚¯ãƒƒã‚­ãƒ¼ã‚’キャッシュã«ä¿ç®¡ã—ãªã„よã†ã«ã—ãŸæ–¹ãŒã‚ˆã„å ´åˆã‚‚ ã‚ã‚‹ã§ã—ょã†ã€‚

    CacheIgnoreHeaders ã®å¼•æ•°ã¯ã€ キャッシュã«ä¿ç®¡ã—ãªã„ HTTP ヘッダを空白区切りã«ã—ãŸãƒªã‚¹ãƒˆå½¢å¼ã§ã™ã€‚ キャッシュã«ä¿ç®¡ã—ãªã„ヘッダ㌠hop-by-hop ヘッダã ã‘ã®å ´åˆ (RFC 2616 準拠ã®å‹•作ã®ã¨ã) ã¯ã€ CacheIgnoreHeaders ã‚’ None ã«è¨­å®šã§ãã¾ã™ã€‚

    例 1

    CacheIgnoreHeaders Set-Cookie

    例 2

    CacheIgnoreHeaders None

    警告:

    Expires ã®ã‚ˆã†ãªé©åˆ‡ã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ç®¡ç†ã®ãŸã‚ã«å¿…è¦ãª ヘッダ㌠CacheIgnoreHeaders ã®è¨­å®šã«ã‚ˆã‚Š ä¿ç®¡ã•れã¦ã„ãªã„ã¨ãã¯ã€mod_cache ã®å‹•作ã¯å®šç¾©ã•れã¦ã„ã¾ã›ã‚“。
    top

    CacheIgnoreNoLastMod ディレクティブ

    説明:応答㫠Last Modified ãŒç„¡ãã¦ã‚‚æ°—ã«ã—ãªã„よã†ã«ã™ã‚‹
    æ§‹æ–‡:CacheIgnoreNoLastMod On|Off
    デフォルト:CacheIgnoreNoLastMod Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    通常ã€Last-Modified ã«ã‚ˆã‚‹æœ€çµ‚修正時刻ã®ç„¡ã„ドキュメントã¯ã‚­ãƒ£ãƒƒã‚·ãƒ¥ ã•れã¾ã›ã‚“。(例ãˆã° mod_include ã«ã‚ˆã‚‹å‡¦ç†ã®ã¨ããªã©ã«) Last-Modified æ™‚åˆ»ãŒæ¶ˆåŽ»ã•れãŸã‚Šã€ãã‚‚ãも最åˆã‹ã‚‰æä¾›ã•れã¦ã„ãªã„ 状æ³ãŒã‚りã¾ã™ã€‚CacheIgnoreNoLastMod ディレクティブを使ã†ã¨ã€Last-Modified æ—¥æ™‚ãŒæŒ‡å®šã•れã¦ã„ãªã„ ドキュメントã§ã‚‚キャッシュã™ã‚‹ã‚ˆã†ã«æŒ‡å®šã§ãã¾ã™ã€‚ドキュメント㫠最終修正時刻 (Last-Modified) æœ‰åŠ¹æœŸé™ (expiry) ãŒãªã„å ´åˆã¯ã€æœ‰åŠ¹æœŸé™ã® 生æˆã« CacheDefaultExpire ãŒä½¿ã‚れã¾ã™ã€‚

    CacheIgnoreNoLastMod On

    top

    CacheIgnoreQueryString ディレクティブ

    説明:キャッシュ時ã«ã‚¯ã‚¨ãƒªãƒ¼ã‚¹ãƒˆãƒªãƒ³ã‚°ã‚’無視ã™ã‚‹
    æ§‹æ–‡:CacheIgnoreQueryString On|Off
    デフォルト:CacheIgnoreQueryString Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    クエリーストリング付ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ã¤ã„ã¦ã¯é€šå¸¸ã€ã‚¯ã‚¨ãƒªãƒ¼ã‚¹ãƒˆãƒªãƒ³ã‚°ã”ã¨ã« 個別ã«ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã•れã¾ã™ã€‚ キャッシュã•れるã®ã¯æœ‰åŠ¹æœŸé™ãŒæŒ‡å®šã•れã¦ã„ã‚‹å ´åˆã®ã¿ã§ã€ã“れ㯠RFC 2616/13.9 ã«å¾“ã£ãŸã‚‚ã®ã§ã™ã€‚ CacheIgnoreQueryString ディレクティブを使ã†ã¨ 有効期é™ãŒæŒ‡å®šã•れã¦ã„ãªãã¦ã‚‚キャッシュã—ã¾ã™ã—〠クエリーストリングãŒç•°ãªã£ã¦ã„ã¦ã‚‚キャッシュを返ã—ã¾ã™ã€‚ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæœ‰åйã«ãªã£ã¦ã„ã‚‹å ´åˆã€ã‚­ãƒ£ãƒƒã‚·ãƒ¥æ©Ÿèƒ½ã®å´é¢ã‹ã‚‰ã¿ã‚‹ã¨ã€ ã‚ãŸã‹ã‚‚リクエストã«ã‚¯ã‚¨ãƒªãƒ¼ã‚¹ãƒˆãƒªãƒ³ã‚°ãŒã¤ã„ã¦ã„ãªã‹ã£ãŸã‹ã®ã‚ˆã†ã«æ‰±ã„ã¾ã™ã€‚

    CacheIgnoreQueryString On

    top

    CacheIgnoreURLSessionIdentifiers ディレクティブ

    説明:Ignore defined session identifiers encoded in the URL when caching
    æ§‹æ–‡:CacheIgnoreURLSessionIdentifiers identifier [identifier] ...
    デフォルト:CacheIgnoreURLSessionIdentifiers None
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    CacheKeyBaseURL ディレクティブ

    説明:Override the base URL of reverse proxied cache keys.
    æ§‹æ–‡:CacheKeyBaseURL URL
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache
    äº’æ›æ€§:Available in Apache 2.3.9 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    CacheLastModifiedFactor ディレクティブ

    説明:LastModified ã®æ—¥ä»˜ã«åŸºã¥ã„ã¦æœ‰åŠ¹æœŸé™ (expiry) を計算ã™ã‚‹ãŸã‚ã®é‡ã¿ã‚’指定ã™ã‚‹
    æ§‹æ–‡:CacheLastModifiedFactor float
    デフォルト:CacheLastModifiedFactor 0.1
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    ドキュメント㫠Last-Modified ã®æ—¥ä»˜ãŒç„¡ã„ã‘れã©ã‚‚æœ‰åŠ¹æœŸé™ (expiry) ã®æ—¥ä»˜ãŒã‚ã‚‹ã¨ã„ã†ã¨ãã«ã€æœ‰åŠ¹æœŸé™ã‚’最終修正時刻ã‹ã‚‰ã®çµŒéŽæ™‚é–“ã¨ã—㦠計算ã™ã‚‹ã‚ˆã†ã«ã§ãã¾ã™ã€‚有効期é™ã‚’次ã®è¨ˆç®—å¼ã«å¾“ã£ã¦ç”Ÿæˆã™ã‚‹ã®ã§ã™ãŒã€ ãã®ã¨ãã«ä½¿ã‚れる factor ã‚’ CacheLastModifiedFactor ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã—ã¾ã™ã€‚

    expiry-period = time-since-last-modified-date * factor expiry-date = current-date + expiry-period

    例ãˆã°ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãŒ 10 時間å‰ã«æœ€å¾Œã«ä¿®æ­£ã•れã¦ã„ã¦ã€ factor ㌠0.1 ã§ã‚れã°ã€æœŸæ—¥ã¯ 10*0.1 = 1 時間㫠設定ã•れã¾ã™ã€‚ç¾åœ¨æ™‚刻㌠3:00pm ã§ã‚れã°ã€è¨ˆç®—ã•ã‚ŒãŸæœŸæ—¥ã¯ 3:00pm + 1hour = 4:00pm ã«ãªã‚Šã¾ã™ã€‚

    期日㌠CacheMaxExpire ã§è¨­å®šã•れã¦ã„る値 より大ãããªã£ã¦ã—ã¾ã£ã¦ã„ã‚‹å ´åˆã¯ã€CacheMaxExpire ã®è¨­å®šå€¤ãŒå„ªå…ˆã•れã¾ã™ã€‚

    CacheLastModifiedFactor 0.5

    top

    CacheLock ディレクティブ

    説明:Enable the thundering herd lock.
    æ§‹æ–‡:CacheLock on|off
    デフォルト:CacheLock off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache
    äº’æ›æ€§:Available in Apache 2.2.15 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    CacheLockMaxAge ディレクティブ

    説明:Set the maximum possible age of a cache lock.
    æ§‹æ–‡:CacheLockMaxAge integer
    デフォルト:CacheLockMaxAge 5
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    CacheLockPath ディレクティブ

    説明:Set the lock path directory.
    æ§‹æ–‡:CacheLockPath directory
    デフォルト:CacheLockPath /tmp/mod_cache-lock
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    CacheMaxExpire ディレクティブ

    説明:ドキュメントをキャッシュã™ã‚‹æœ€å¤§æ™‚é–“ã‚’ç§’æ•°ã§è¡¨ã—ãŸã‚‚ã®
    æ§‹æ–‡:CacheMaxExpire seconds
    デフォルト:CacheMaxExpire 86400 (一日)
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    CacheMaxExpire ディレクティブã¯ã€ キャッシュã™ã‚‹ HTTP ドキュメントをã€å…ƒã®ã‚µãƒ¼ãƒã«å•ã„åˆã‚ã›ãªã„ã¾ã¾æœ€å¤§ä½•ç§’ ä¿æŒã—ã¦ã‚‚よã„ã‹ã‚’指定ã—ã¾ã™ã€‚ã¤ã¾ã‚Šã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã¯æœ€å¤§ã§ã“ã®ç§’æ•°é–“ã¶ã‚“å¤ã ãªã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ã“ã®æœ€å¤§å€¤ã¯ã€(訳注: レスãƒãƒ³ã‚¹ä¸­ã§)ドキュメントã¨å…±ã« ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®æœŸæ—¥ãŒæä¾›ã•れã¦ã„ã‚‹å ´åˆã§ã‚‚é©ç”¨ã•れã¾ã™ã€‚

    CacheMaxExpire 604800

    top

    CacheMinExpire ディレクティブ

    説明:ドキュメントをキャッシュã™ã‚‹æœ€å°ç§’æ•°
    æ§‹æ–‡:CacheMinExpire seconds
    デフォルト:CacheMinExpire 0
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    キャッシュå¯èƒ½ãª HTTP ドキュメントãŒã‚ã£ãŸã¨ãã«ã€ã‚ªãƒªã‚¸ãƒ³ã‚µãƒ¼ãƒã«å•ã„åˆã‚ã›ã‚‹ã“ã¨ãªã ä¿æŒã™ã‚‹ç§’æ•°ã®æœ€å°å€¤ã¯ CacheMinExpire ディレクティブを使ã£ã¦è¨­å®šã—ã¾ã™ã€‚ ã“ã®å€¤ã¯ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã«å¦¥å½“ãªæœ‰åŠ¹æœŸé™ãŒæŒ‡å®šã•れã¦ã„ãªã‹ã£ãŸå ´åˆã«ã®ã¿ä½¿ã‚れã¾ã™ã€‚

    CacheMinExpire 3600

    top

    CacheQuickHandler ディレクティブ

    説明:Run the cache from the quick handler.
    æ§‹æ–‡:CacheQuickHandler on|off
    デフォルト:CacheQuickHandler on
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache
    äº’æ›æ€§:Apache HTTP Server 2.3.3 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    CacheStaleOnError ディレクティブ

    説明:Serve stale content in place of 5xx responses.
    æ§‹æ–‡:CacheStaleOnError on|off
    デフォルト:CacheStaleOnError on
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    ステータス:Extension
    モジュール:mod_cache
    äº’æ›æ€§:Available in Apache 2.3.9 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    CacheStoreExpired ディレクティブ

    説明:Attempt to cache responses that the server reports as expired
    æ§‹æ–‡:CacheStoreExpired On|Off
    デフォルト:CacheStoreExpired Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    ステータス:Extension
    モジュール:mod_cache

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    CacheStoreNoStore ディレクティブ

    説明:no-store ã¨æŒ‡å®šã•れã¦ã„るレスãƒãƒ³ã‚¹ã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’試ã¿ã‚‹ã€‚
    æ§‹æ–‡:CacheStoreNoStore On|Off
    デフォルト:CacheStoreNoStore Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    通常 Cache-Control: no-store ヘッダã®ã¤ã„ã¦ã„るレスãƒãƒ³ã‚¹ã¯ キャッシュã•れã¾ã›ã‚“。CacheStoreNoCache ディレクティブã§ã“ã®æŒ™å‹•を上書ãã§ãã¾ã™ã€‚ CacheStoreNoCache On ã§ no-store ヘッダã®ã¤ã„ã¦ã„ã‚‹ リソースã«å¯¾ã—ã¦ã‚‚キャッシュを試ã¿ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ ãŸã ã—èªè¨¼ã®æ±‚ã‚られるリソース㯠決ã—㦠キャッシュã•れã¾ã›ã‚“。

    CacheStoreNoStore On

    警告:

    RFC 2616 ã«è¨˜è¼‰ã•れã¦ã„るよã†ã« no-store ディレクティブã¯ã€ "䏿³¨æ„ã«ã‚ˆã‚‹æ©Ÿå¯†æƒ…å ±ã®æ¼æ´©ã‚„残留 (ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—テープ等) を防ã" 目的ã§ä½¿ã‚れã¾ã™ãŒã€ã“ã®ã‚ªãƒ—ションを有効ã«ã™ã‚‹ã¨ã€ æ©Ÿå¯†æƒ…å ±ã‚’ä¿æŒã™ã‚‹ã“ã¨ã«ãªã£ã¦ã—ã¾ã„ã¾ã™ã€‚ ã§ã™ã®ã§ã€ã“ã“ã§è­¦å‘Šã—ã¦ãŠãã¾ã™ã€‚

    å‚ç…§

    top

    CacheStorePrivate ディレクティブ

    説明:private ã¨æŒ‡å®šã•れã¦ã„るレスãƒãƒ³ã‚¹ã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’試ã¿ã‚‹ã€‚
    æ§‹æ–‡:CacheStorePrivate On|Off
    デフォルト:CacheStorePrivate Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_cache

    通常 Cache-Control: private ヘッダã®ã¤ã„ã¦ã„るレスãƒãƒ³ã‚¹ã¯ キャッシュã•れã¾ã›ã‚“。CacheStorePrivate ディレクティブã§ã“ã®æŒ™å‹•を上書ãã§ãã¾ã™ã€‚ CacheStorePrivate On ã§ private ヘッダã®ã¤ã„ã¦ã„ã‚‹ リソースã«å¯¾ã—ã¦ã‚‚キャッシュを試ã¿ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ ãŸã ã—èªè¨¼ã®æ±‚ã‚られるリソース㯠決ã—㦠キャッシュã•れã¾ã›ã‚“。

    CacheStorePrivate On

    警告:

    上æµã‚µãƒ¼ãƒãŒã‚­ãƒ£ãƒƒã‚·ãƒ¥ã—ãªã„よã†ã«æŒ‡å®šã—ã¦ãã¦ã‚‚〠ãれを無視ã—ã¦ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ 望ã¾ã—ã„æŒ™å‹•ã«ãªã‚‹ã®ã¯ã€æœ¬å½“ã« 'private' ãªã‚­ãƒ£ãƒƒã‚·ãƒ¥ã«ã¤ã„ã¦ã®ã¿ã§ã—ょã†ã€‚

    å‚ç…§

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/worker.html.en0000644000000000000500000003665013412755316017041 0ustar rootsrc worker - Apache HTTP Server Version 2.4
    <-

    Apache MPM worker

    Available Languages:  de  |  en  |  fr  |  ja  |  tr 

    Description:Multi-Processing Module implementing a hybrid multi-threaded multi-process web server
    Status:MPM
    Module Identifier:mpm_worker_module
    Source File:worker.c

    Summary

    This Multi-Processing Module (MPM) implements a hybrid multi-process multi-threaded server. By using threads to serve requests, it is able to serve a large number of requests with fewer system resources than a process-based server. However, it retains much of the stability of a process-based server by keeping multiple processes available, each with many threads.

    The most important directives used to control this MPM are ThreadsPerChild, which controls the number of threads deployed by each child process and MaxRequestWorkers, which controls the maximum total number of threads that may be launched.

    top

    How it Works

    A single control process (the parent) is responsible for launching child processes. Each child process creates a fixed number of server threads as specified in the ThreadsPerChild directive, as well as a listener thread which listens for connections and passes them to a server thread for processing when they arrive.

    Apache HTTP Server always tries to maintain a pool of spare or idle server threads, which stand ready to serve incoming requests. In this way, clients do not need to wait for a new threads or processes to be created before their requests can be served. The number of processes that will initially launch is set by the StartServers directive. During operation, the server assesses the total number of idle threads in all processes, and forks or kills processes to keep this number within the boundaries specified by MinSpareThreads and MaxSpareThreads. Since this process is very self-regulating, it is rarely necessary to modify these directives from their default values. The maximum number of clients that may be served simultaneously (i.e., the maximum total number of threads in all processes) is determined by the MaxRequestWorkers directive. The maximum number of active child processes is determined by the MaxRequestWorkers directive divided by the ThreadsPerChild directive.

    Two directives set hard limits on the number of active child processes and the number of server threads in a child process, and can only be changed by fully stopping the server and then starting it again. ServerLimit is a hard limit on the number of active child processes, and must be greater than or equal to the MaxRequestWorkers directive divided by the ThreadsPerChild directive. ThreadLimit is a hard limit of the number of server threads, and must be greater than or equal to the ThreadsPerChild directive.

    In addition to the set of active child processes, there may be additional child processes which are terminating, but where at least one server thread is still handling an existing client connection. Up to MaxRequestWorkers terminating processes may be present, though the actual number can be expected to be much smaller. This behavior can be avoided by disabling the termination of individual child processes, which is achieved using the following:

    A typical configuration of the process-thread controls in the worker MPM could look as follows:

    ServerLimit         16
    StartServers         2
    MaxRequestWorkers  150
    MinSpareThreads     25
    MaxSpareThreads     75
    ThreadsPerChild     25

    While the parent process is usually started as root under Unix in order to bind to port 80, the child processes and threads are launched by the server as a less-privileged user. The User and Group directives are used to set the privileges of the Apache HTTP Server child processes. The child processes must be able to read all the content that will be served, but should have as few privileges beyond that as possible. In addition, unless suexec is used, these directives also set the privileges which will be inherited by CGI scripts.

    MaxConnectionsPerChild controls how frequently the server recycles processes by killing old ones and launching new ones.

    This MPM uses the mpm-accept mutex to serialize access to incoming connections when subject to the thundering herd problem (generally, when there are multiple listening sockets). The implementation aspects of this mutex can be configured with the Mutex directive. The performance hints documentation has additional information about this mutex.

    Available Languages:  de  |  en  |  fr  |  ja  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dav_lock.html.ja.utf80000644000000000000500000002501313412755316021015 0ustar rootsrc mod_dav_lock - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_dav_lock

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    説明:mod_dav ç”¨ã®æ±Žç”¨ãƒ­ãƒƒã‚¯ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«
    ステータス:Extension
    モジュール識別å­:dav_lock_module
    ソースファイル:mod_dav_lock.c
    äº’æ›æ€§:ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.1 以é™

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ mod_dav ã®ã©ã®ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ ã‹ã‚‰ã§ã‚‚使ãˆã‚‹æ±Žç”¨ãƒ­ãƒƒã‚¯ API ã‚’æä¾›ã—ã¾ã™ã€‚ 使用ã«ã¯æœ€ä½Žé™ mod_dav ã‚’å¿…è¦ã¨ã—ã¾ã™ãŒã€ã“れを利用ã™ã‚‹ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ãŒå­˜åœ¨ã—ãªã„ã¨å½¹ã«ç«‹ãŸãªã„ã®ã§ã€ ãã®ã‚ˆã†ãªå ´åˆã¯ã‚µãƒ¼ãƒã«èª­ã¿è¾¼ã‚€ã¹ãã§ã¯ã‚りã¾ã›ã‚“。 mod_dav_lock を実際ã«åˆ©ç”¨ã™ã‚‹ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ä¾‹ã¨ã—ã¦ã¯ subversion プロãƒã‚¤ãƒ€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã® mod_dav_svn ãŒã‚りã¾ã™ã€‚

    mod_dav_fs ã¯ç‰¹åŒ–ã•れãŸå°‚用ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’ 使ã†ãŸã‚ã€ã“ã®æ±Žç”¨ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯å¿…è¦ãªã„ã“ã¨ã«æ³¨æ„ã—㦠ãã ã•ã„。

    mod_dav_lock を機能ã•ã›ã‚‹ã«ã¯ã€ 以下ã§èª¬æ˜Žã•れã¦ã„ã‚‹ DavGenericLockDB を使ã£ã¦ ロックデータベースã®å ´æ‰€ã‚’指定ã™ã‚‹ã ã‘ã§ã™ã€‚

    開発者å‘ã‘ã®ãƒ¡ãƒ¢

    ロックをæä¾›ã—ã¦ã„る関数ã¸ã®ãƒã‚¤ãƒ³ã‚¿ã‚’å–å¾—ã™ã‚‹ãŸã‚ã«ã¯ã€ ap_lookup_provider API ã‚’ã€å¼•æ•° dav-lock, generic, 0 を指定ã—ã¦ä½¿ã†å¿…è¦ãŒ ã‚りã¾ã™ã€‚

    Support Apache!

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    DavGenericLockDB ディレクティブ

    説明:DAV ロックデータベースã®å ´æ‰€
    æ§‹æ–‡:DavGenericLockDB file-path
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Extension
    モジュール:mod_dav_lock

    DavGenericLockDB ディレクティブを 使ã£ã¦ã€æ‹¡å¼µå­ã‚’除ã„ãŸãƒ­ãƒƒã‚¯ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã¸ã®ãƒ•ルパスを 指定ã—ã¾ã™ã€‚絶対パスã§ãªã„ã¨ã㯠ServerRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ã—㦠扱ã‚れã¾ã™ã€‚mod_dav_lock ã®å®Ÿè£…ã§ã¯ãƒ¦ãƒ¼ã‚¶ã® ロックを追跡ã™ã‚‹ã®ã« SDBM データベースを使ã„ã¾ã™ã€‚

    例

    DavGenericLockDB var/DavLock

    ロックデータベースファイルã®ã‚るディレクトリ㯠Apache ãŒå®Ÿè¡Œã•れã¦ã„ã‚‹ User 㨠Group ã«ã‚ˆã£ã¦ 書ãè¾¼ã¿å¯èƒ½ã§ãªã‘れã°ãªã‚Šã¾ã›ã‚“。セキュリティ上ã®ç†ç”±ã‹ã‚‰ã€ 既存ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ãƒ‘ーミッションを変更ã™ã‚‹ã®ã§ã¯ãªã〠専用ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’作るã®ãŒè‰¯ã„ã§ã—ょã†ã€‚上ã®ä¾‹ã§ã¯ã€ Apache 㯠ServerRoot ã®ä¸‹ã® var/ ディレクトリã«ã€ãƒ•ァイルåã®æœ¬ä½“㌠DavLock 㧠サーãƒãŒè¿½åŠ ã™ã‚‹æ‹¡å¼µå­ã‚’æŒã¤ãƒ•ァイルを作æˆã—ã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_ident.html.ja.utf80000644000000000000500000002560613412755316020346 0ustar rootsrc mod_ident - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_ident

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    説明:RFC 1413 ident lookups
    ステータス:Extension
    モジュール識別å­:ident_module
    ソースファイル:mod_ident.c
    äº’æ›æ€§:Apache 2.1 ã§ä½¿ç”¨å¯èƒ½

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ãƒªãƒ¢ãƒ¼ãƒˆãƒ›ã‚¹ãƒˆã® RFC 1413 互æ›ãƒ‡ãƒ¼ãƒ¢ãƒ³ ã«ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã®æ‰€æœ‰è€…を訊ãã¾ã™ã€‚

    Support Apache!

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    IdentityCheck ディレクティブ

    説明:リモートユーザ㮠RFC 1413 ã«ã‚ˆã‚‹ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®ãƒ­ã‚®ãƒ³ã‚°ã‚’ 有効ã«ã™ã‚‹
    æ§‹æ–‡:IdentityCheck On|Off
    デフォルト:IdentityCheck Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Extension
    モジュール:mod_ident
    äº’æ›æ€§:Apache 2.1 ã§ core ã‹ã‚‰ç§»å‹•

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãƒžã‚·ãƒ³ä¸Šã§ identd ã‚„ãれã«é¡žä¼¼ã—ãŸãƒ‡ãƒ¼ãƒ¢ãƒ³ãŒå‹•作ã—ã¦ã„ã‚‹ã¨ãã«ã€ ãれãžã‚Œã®æŽ¥ç¶šã«å¯¾ã—㦠RFC 1413 ã«æº–処ã—ãŸãƒªãƒ¢ãƒ¼ãƒˆãƒ¦ãƒ¼ã‚¶ã® åå‰ã®ãƒ­ã‚®ãƒ³ã‚°ã‚’行ãªã†ã‚ˆã†ã«ã—ã¾ã™ã€‚ ã“ã®æƒ…å ±ã¯ã€%...l フォーマット文字列を使ã£ã¦ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã«åŽé›†ã•れã¾ã™ã€‚

    ã“ã“ã§å¾—ã‚‰ã‚ŒãŸæƒ…å ±ã¯ç°¡å˜ãªãƒ¦ãƒ¼ã‚¶è¿½è·¡ã«ä½¿ã†ä»¥å¤–ã¯ã€ ã¾ã£ãŸãä¿¡é ¼ã™ã‚‹ã¹ãã§ã¯ã‚りã¾ã›ã‚“。

    ã™ã¹ã¦ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—ã¦ãƒ«ãƒƒã‚¯ã‚¢ãƒƒãƒ—ãŒè¡Œãªã‚れã¾ã™ã®ã§ã€ 深刻ãªé…å»¶ã®å•題を起ã“ã™ã‹ã‚‚ã—れãªã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。 (訳注: 例ãˆã°ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã«) ファイアウォールやプロキシサーãƒãŒã‚ã‚‹ã¨ã€ ルックアップãŒå¤±æ•—ã—ã€å„リクエスト㫠IdentityCheckTimeoutã§å®šç¾©ã•れã¦ã„ã‚‹é…å»¶ãŒåŠ ã‚ã‚‹ã“ã¨ã« ãªã‚‹å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 従ã£ã¦ã€ä¸€èˆ¬çš„ã«ã¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹å¯èƒ½ãªãƒ‘ブリックãªã‚µãƒ¼ãƒã§ 有益ãªã‚‚ã®ã§ã¯ã‚りã¾ã›ã‚“。

    top

    IdentityCheckTimeout ディレクティブ

    説明:Ident リクエストãŒã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã™ã‚‹ã¾ã§ã®æœŸé–“を決ã‚ã‚‹
    æ§‹æ–‡:IdentityCheckTimeout seconds
    デフォルト:IdentityCheckTimeout 30
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Extension
    モジュール:mod_ident

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠ident リクエストã®ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆæ™‚間を決ã‚ã¾ã™ã€‚ デフォルトã®å€¤ã§ã‚ã‚‹ 30 ç§’ã¯ã€ä¸»ã«ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯é…å»¶ã®è€ƒæ…®ã®ãŸã‚ã« RFC 1413 ã«ã‚ˆã‚Š æŽ¨å¥¨ã•れã¦ã„ã¾ã™ã€‚ã—ã‹ã—ã€ãŠãらãローカルãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®é€Ÿåº¦ã« åˆã‚ã›ã¦ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆå€¤ã‚’調節ã™ã‚‹ã®ãŒã‚ˆã„ã§ã—ょã†ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_userdir.html.ja.utf80000644000000000000500000003212313412755316020710 0ustar rootsrc mod_userdir - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_userdir

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:ユーザ専用ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’æä¾›
    ステータス:Base
    モジュール識別å­:userdir_module
    ソースファイル:mod_userdir.c

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã€ http://example.com/~user/ 構文を使ã£ã¦ãƒ¦ãƒ¼ã‚¶å°‚用ディレクトリã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãるよã†ã«ã—ã¾ã™ã€‚

    top

    UserDir ディレクティブ

    説明:ユーザ専用ディレクトリã®ä½ç½®
    æ§‹æ–‡:UserDir directory-filename [directory-filename] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Base
    モジュール:mod_userdir

    UserDir ディレクティブã¯ã€ ユーザã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘ãŸæ™‚ã«ä½¿ã† ユーザã®ãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªä¸­ã®ã€å®Ÿéš›ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’ 設定ã—ã¾ã™ã€‚ directory-filename ã«ã¯æ¬¡ã®ã©ã‚Œã‹ã‚’指定ã—ã¾ã™:

    • ディレクトリåã‹ä¸‹ã«ç¤ºã™ã‚ˆã†ãªãƒ‘ターン。
    • disabled キーワード。 enabled キーワード (下記å‚ç…§) ã§æ˜Žç¤ºçš„㫠指定ã•れãŸãƒ¦ãƒ¼ã‚¶ä»¥å¤–ã® å…¨ã¦ã®ãƒ¦ãƒ¼ã‚¶å-ディレクトリ変æ›ã‚’ ã—ãªã„よã†ã«ã—ã¾ã™ã€‚
    • disabled キーワードã¨ã€ã‚¹ãƒšãƒ¼ã‚¹åŒºåˆ‡ã‚Šã®ãƒ¦ãƒ¼ã‚¶åリスト。 ã“ã®ãƒªã‚¹ãƒˆä¸­ã«å«ã¾ã‚Œã‚‹ãƒ¦ãƒ¼ã‚¶åã«å¯¾ã—ã¦ã¯ã€ãŸã¨ãˆ enabled 節ã«ã‚ã£ãŸã¨ã—ã¦ã‚‚〠決ã—ã¦ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªå¤‰æ›ã¯è¡Œã‚れã¾ã›ã‚“。
    • enabled キーワードã¨ã‚¹ãƒšãƒ¼ã‚¹åŒºåˆ‡ã‚Šã®ãƒ¦ãƒ¼ã‚¶åリスト。 全体ã§ã¯å¤‰æ›ãŒç„¡åйã«ãªã£ã¦ã„ãŸã¨ã—ã¦ã‚‚〠ã“れらã®ãƒ¦ãƒ¼ã‚¶åã«ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªå¤‰æ›ãŒè¡Œã‚れã¾ã™ã€‚ ãŸã ã—ã€disabled 節ã«ã‚‚ã‚れã°å¤‰æ›ã¯ã•れã¾ã›ã‚“。

    ã‚‚ã— enabled ã‚‚ disabled キーワードも UserDir ã«ç¾ã‚れã¦ã„ãªã‘れã°ã€ 引数ã¯ãƒ•ァイルåパターンã¨ã—ã¦æ‰±ã‚れ〠åå‰ã‹ã‚‰ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¸ã®å¤‰æ›ã®æŒ‡å®šã‚’行ãªã†æ™‚ã«ä½¿ã‚れã¾ã™ã€‚ http://www.example.com/~bob/one/two.html ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯æ¬¡ã®ã‚ˆã†ã«å¤‰æ›ã•れã¾ã™:

    UserDir ディレクティブ 変æ›å¾Œã®ãƒ‘ス
    UserDir public_html~bob/public_html/one/two.html
    UserDir /usr/web/usr/web/bob/one/two.html
    UserDir /home/*/www/home/bob/www/one/two.html

    次ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«å¯¾ã—ã¦ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’ é€ä¿¡ã—ã¾ã™:

    UserDir ディレクティブ 変æ›å¾Œã®ãƒ‘ス
    UserDir http://www.example.com/usershttp://www.example.com/users/bob/one/two.html
    UserDir http://www.example.com/*/usrhttp://www.example.com/bob/usr/one/two.html
    UserDir http://www.example.com/~*/http://www.example.com/~bob/one/two.html
    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を使ã†ã¨ãã¯æ³¨æ„ã—ã¦ãã ã•ã„; "UserDir ./" 㯠"/~root" ã‹ã‚‰ "/" ã¸ãƒžãƒƒãƒ—ã—ã¾ã™ãŒã€ ã“ã‚Œã¯æœ›ã¾ã—ã„動作ã§ã¯ãªã„ã§ã—ょã†ã€‚ "UserDir disabled root" 宣言を 設定ã®ä¸­ã«å«ã‚ã¦ãŠãã“ã¨ã‚’å¼·ããŠè–¦ã‚ã—ã¾ã™ã€‚ 追加情報㫠Directory ディレクティブや セキュリティ Tips ã®ãƒšãƒ¼ã‚¸ã‚‚ã”覧下ã•ã„。

    追加ã®ä¾‹:

    å°‘æ•°ã®ãƒ¦ãƒ¼ã‚¶ã®ã¿ãŒ UserDir ディレクトリを利用ã—ã€ãれ以外ã«ã¯åˆ©ç”¨ã•ã›ãŸããªã„å ´åˆã¯ 次を使ã„ã¾ã—ょã†:

    UserDir disabled
    UserDir enabled user1 user2 user3

    大部分ã®ãƒ¦ãƒ¼ã‚¶ã¯ UserDir ディレクトリを利用ã™ã‚‹ã‘れã©ã€ å°‘æ•°ã®äººã¯ä¸è¨±å¯ã«ã—ãŸã„å ´åˆã¯ã€æ¬¡ã‚’使ã„ã¾ã—ょã†:

    UserDir enabled
    UserDir disabled user4 user5 user6

    ä»–ã®ãƒ¦ãƒ¼ã‚¶ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’指定ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ 次ã®ã‚ˆã†ãªã‚³ãƒžãƒ³ãƒ‰ã‚’使ã†ã¨:

    Userdir public_html /usr/web http://www.example.com/

    http://www.example.com/~bob/one/two.html ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ã¾ãš ~bob/public_html/one/two.html ã®ãƒšãƒ¼ã‚¸ã‚’調ã¹ã€ãã®æ¬¡ã« /usr/web/bob/one/two.html を調ã¹ã€æœ€å¾Œã« http://www.example.com/bob/one/two.html ã¸ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’é€ã‚Šã¾ã™ã€‚

    リダイレクトを加ãˆã‚‹å ´åˆã¯ã€ãƒªã‚¹ãƒˆã®æœ€å¾Œã®é¸æŠžè‚¢ã§ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 Apache ã¯ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆãŒæˆåŠŸã™ã‚‹ã‹ã©ã†ã‹ã‚’決ã‚ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“ã®ã§ã€ リストã®å‰ã®æ–¹ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’書ãã¨ã€ãれãŒå¿…ãšä½¿ç”¨ã•ã‚Œã‚‹é¸æŠžè‚¢ã« ãªã£ã¦ã—ã¾ã„ã¾ã™ã€‚

    2.1.4 以é™ã§ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªç½®æ›æ©Ÿèƒ½ã¯ãƒ‡ãƒ•ォルトã§ã¯èµ·å‹•ã—ã¾ã›ã‚“。 ãれ以å‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯ã€UserDir ディレクティブãŒå­˜åœ¨ã—ãªã‘れã°ã€UserDir public_html ã§ã‚ã‚‹ã¨ä»®å®šã•れã¦ã„ã¾ã—ãŸã€‚

    å‚ç…§

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dumpio.html.fr.utf80000644000000000000500000002377213412755316020557 0ustar rootsrc mod_dumpio - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_dumpio

    Langues Disponibles:  en  |  fr  |  ja 

    Description:Enregistre toutes les entrées/sorties dans le journal des erreurs de la manière souhaitée.
    Statut:Extension
    Identificateur de Module:dumpio_module
    Fichier Source:mod_dumpio.c

    Sommaire

    mod_dumpio permet d'enregistrer toutes les entrées reçues par Apache et/ou toutes les sorties envoyées par ce dernier dans le fichier error.log.

    L'enregistrement des données s'effectue juste après le décodage SSL (pour les entrées), et juste avant le codage SSL (pour les sorties). Comme on peut s'y attendre, tout ceci peut représenter un volume important de données, et ne doit être utilisé qu'à des fins de débogage.

    top

    Activation du support dumpio

    Pour activer le module, ce dernier doit être compilé et chargé par l'intermédiaire de la configuration de votre instance d'Apache. La journalisation peut ensuite être activée ou désactivée séparément pour les entrées et sorties à l'aide des directives ci-dessous. En outre, mod_dumpio doit être configuré à LogLevel trace7 :

    LogLevel dumpio:trace7
    top

    Directive DumpIOInput

    Description:Enregistre toutes les entrées dans le journal des erreurs
    Syntaxe:DumpIOInput On|Off
    Défaut:DumpIOInput Off
    Contexte:configuration globale
    Statut:Extension
    Module:mod_dumpio
    Compatibilité:DumpIOInput est disponible depuis la version 2.1.3 d'Apache.

    Active la journalisation de toutes les entrées.

    Exemple

    DumpIOInput On
    top

    Directive DumpIOOutput

    Description:Enregistre toutes les sorties dans le journal des erreurs
    Syntaxe:DumpIOOutput On|Off
    Défaut:DumpIOOutput Off
    Contexte:configuration globale
    Statut:Extension
    Module:mod_dumpio
    Compatibilité:DumpIOOutput est disponible depuis la version 2.1.3 d'Apache.

    Active la journalisation de toutes les sorties.

    Exemple

    DumpIOOutput On

    Langues Disponibles:  en  |  fr  |  ja 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_access_compat.html0000644000000000000500000000050713362070302020547 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_access_compat.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_access_compat.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_access_compat.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_substitute.html.en0000644000000000000500000003520413412755316020574 0ustar rootsrc mod_substitute - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_substitute

    Available Languages:  en  |  fr 

    Description:Perform search and replace operations on response bodies
    Status:Extension
    Module Identifier:substitute_module
    Source File:mod_substitute.c
    Compatibility:Available in Apache HTTP Server 2.2.7 and later

    Summary

    mod_substitute provides a mechanism to perform both regular expression and fixed string substitutions on response bodies.

    top

    Substitute Directive

    Description:Pattern to filter the response content
    Syntax:Substitute s/pattern/substitution/[infq]
    Context:directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_substitute

    The Substitute directive specifies a search and replace pattern to apply to the response body.

    The meaning of the pattern can be modified by using any combination of these flags:

    i
    Perform a case-insensitive match.
    n
    By default the pattern is treated as a regular expression. Using the n flag forces the pattern to be treated as a fixed string.
    f
    The f flag causes mod_substitute to flatten the result of a substitution allowing for later substitutions to take place on the boundary of this one. This is the default.
    q
    The q flag causes mod_substitute to not flatten the buckets after each substitution. This can result in much faster response and a decrease in memory utilization, but should only be used if there is no possibility that the result of one substitution will ever match a pattern or regex of a subsequent one.

    The substitution is may contain literal text and regular expression backreferences

    Example

    <Location "/">
        AddOutputFilterByType SUBSTITUTE text/html
        Substitute "s/foo/bar/ni"
    </Location>

    The character which is used to separate (or "delimit") the various parts of the substituion string is referred to as the "delimiter", and it is most common to use a slash for this purpose.

    If either the pattern or the substitution contain a slash character then an alternative delimiter may be used to make the directive more readable:

    Example of using an alternate delimiter

    <Location "/">
        AddOutputFilterByType SUBSTITUTE text/html
        Substitute "s|<BR */?>|<br />|i"
    </Location>

    Backreferences can be used in the comparison and in the substitution, when regular expressions are used, as illustrated in the following example:

    Example of using backreferences and captures

    <Location "/">
        AddOutputFilterByType SUBSTITUTE text/html
        # "foo=k,bar=k" -> "foo/bar=k"
        Substitute "s|foo=(\w+),bar=\1|foo/bar=$1|"
    </Location>

    A common use scenario for mod_substitute is the situation in which a front-end server proxies requests to a back-end server which returns HTML with hard-coded embedded URLs that refer to the back-end server. These URLs don't work for the end-user, since the back-end server is unreachable.

    In this case, mod_substitute can be used to rewrite those URLs into something that will work from the front end:

    Rewriting URLs embedded in proxied content

    ProxyPass        "/blog/" "http://internal.blog.example.com/"
    ProxyPassReverse "/blog/" "http://internal.blog.example.com/"
    
    Substitute "s|http://internal.blog.example.com/|http://www.example.com/blog/|i"

    ProxyPassReverse modifies any Location (redirect) headers that are sent by the back-end server, and, in this example, Substitute takes care of the rest of the problem by fixing up the HTML response as well.

    top

    SubstituteInheritBefore Directive

    Description:Change the merge order of inherited patterns
    Syntax:SubstituteInheritBefore on|off
    Default:SubstituteInheritBefore off
    Context:directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_substitute
    Compatibility:Available in httpd 2.4.17 and later

    Whether to apply the inherited Substitute patterns first (on), or after the ones of the current context (off). SubstituteInheritBefore is itself inherited, hence contexts that inherit it (those that don't specify their own SubstituteInheritBefore value) will apply the closest defined merge order.

    top

    SubstituteMaxLineLength Directive

    Description:Set the maximum line size
    Syntax:SubstituteMaxLineLength bytes(b|B|k|K|m|M|g|G)
    Default:SubstituteMaxLineLength 1m
    Context:directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_substitute
    Compatibility:Available in httpd 2.4.11 and later

    The maximum line size handled by mod_substitute is limited to restrict memory use. The limit can be configured using SubstituteMaxLineLength. The value can be given as the number of bytes and can be suffixed with a single letter b, B, k, K, m, M, g, G to provide the size in bytes, kilobytes, megabytes or gigabytes respectively.

    Example

    <Location "/">
        AddOutputFilterByType SUBSTITUTE text/html
        SubstituteMaxLineLength 10m
        Substitute "s/foo/bar/ni"
    </Location>

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_dbd.html.en0000644000000000000500000003701013412755316020306 0ustar rootsrc mod_authn_dbd - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authn_dbd

    Available Languages:  en  |  fr 

    Description:User authentication using an SQL database
    Status:Extension
    Module Identifier:authn_dbd_module
    Source File:mod_authn_dbd.c
    Compatibility:Available in Apache 2.1 and later

    Summary

    This module provides authentication front-ends such as mod_auth_digest and mod_auth_basic to authenticate users by looking up users in SQL tables. Similar functionality is provided by, for example, mod_authn_file.

    This module relies on mod_dbd to specify the backend database driver and connection parameters, and manage the database connections.

    When using mod_auth_basic or mod_auth_digest, this module is invoked via the AuthBasicProvider or AuthDigestProvider with the dbd value.

    top

    Performance and Cacheing

    Some users of DBD authentication in HTTPD 2.2/2.4 have reported that it imposes a problematic load on the database. This is most likely where an HTML page contains hundreds of objects (e.g. images, scripts, etc) each of which requires authentication. Users affected (or concerned) by this kind of problem should use mod_authn_socache to cache credentials and take most of the load off the database.

    top

    Configuration Example

    This simple example shows use of this module in the context of the Authentication and DBD frameworks.

    # mod_dbd configuration
    # UPDATED to include authentication cacheing
    DBDriver pgsql
    DBDParams "dbname=apacheauth user=apache password=xxxxxx"
    
    DBDMin  4
    DBDKeep 8
    DBDMax  20
    DBDExptime 300
    
    <Directory "/usr/www/myhost/private">
      # mod_authn_core and mod_auth_basic configuration
      # for mod_authn_dbd
      AuthType Basic
      AuthName "My Server"
    
      # To cache credentials, put socache ahead of dbd here
      AuthBasicProvider socache dbd
    
      # Also required for caching: tell the cache to cache dbd lookups!
      AuthnCacheProvideFor dbd
      AuthnCacheContext my-server
    
      # mod_authz_core configuration
      Require valid-user
    
      # mod_authn_dbd SQL query to authenticate a user
      AuthDBDUserPWQuery "SELECT password FROM authn WHERE user = %s"
    </Directory>
    top

    Exposing Login Information

    If httpd was built against APR version 1.3.0 or higher, then whenever a query is made to the database server, all column values in the first row returned by the query are placed in the environment, using environment variables with the prefix "AUTHENTICATE_".

    If a database query for example returned the username, full name and telephone number of a user, a CGI program will have access to this information without the need to make a second independent database query to gather this additional information.

    This has the potential to dramatically simplify the coding and configuration required in some web applications.

    top

    AuthDBDUserPWQuery Directive

    Description:SQL query to look up a password for a user
    Syntax:AuthDBDUserPWQuery query
    Context:directory
    Status:Extension
    Module:mod_authn_dbd

    The AuthDBDUserPWQuery specifies an SQL query to look up a password for a specified user. The user's ID will be passed as a single string parameter when the SQL query is executed. It may be referenced within the query statement using a %s format specifier.

    AuthDBDUserPWQuery "SELECT password FROM authn WHERE user = %s"

    The first column value of the first row returned by the query statement should be a string containing the encrypted password. Subsequent rows will be ignored. If no rows are returned, the user will not be authenticated through mod_authn_dbd.

    If httpd was built against APR version 1.3.0 or higher, any additional column values in the first row returned by the query statement will be stored as environment variables with names of the form AUTHENTICATE_COLUMN.

    The encrypted password format depends on which authentication frontend (e.g. mod_auth_basic or mod_auth_digest) is being used. See Password Formats for more information.

    top

    AuthDBDUserRealmQuery Directive

    Description:SQL query to look up a password hash for a user and realm.
    Syntax:AuthDBDUserRealmQuery query
    Context:directory
    Status:Extension
    Module:mod_authn_dbd

    The AuthDBDUserRealmQuery specifies an SQL query to look up a password for a specified user and realm in a digest authentication process. The user's ID and the realm, in that order, will be passed as string parameters when the SQL query is executed. They may be referenced within the query statement using %s format specifiers.

    AuthDBDUserRealmQuery "SELECT password FROM authn WHERE user = %s AND realm = %s"

    The first column value of the first row returned by the query statement should be a string containing the encrypted password. Subsequent rows will be ignored. If no rows are returned, the user will not be authenticated through mod_authn_dbd.

    If httpd was built against APR version 1.3.0 or higher, any additional column values in the first row returned by the query statement will be stored as environment variables with names of the form AUTHENTICATE_COLUMN.

    The encrypted password format depends on which authentication frontend (e.g. mod_auth_basic or mod_auth_digest) is being used. See Password Formats for more information.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_env.html.en0000644000000000000500000002715613412755316017160 0ustar rootsrc mod_env - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_env

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Modifies the environment which is passed to CGI scripts and SSI pages
    Status:Base
    Module Identifier:env_module
    Source File:mod_env.c

    Summary

    This module allows for control of internal environment variables that are used by various Apache HTTP Server modules. These variables are also provided to CGI scripts as native system environment variables, and available for use in SSI pages. Environment variables may be passed from the shell which invoked the httpd process. Alternatively, environment variables may be set or unset within the configuration process.

    top

    PassEnv Directive

    Description:Passes environment variables from the shell
    Syntax:PassEnv env-variable [env-variable] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_env

    Specifies one or more native system environment variables to make available as internal environment variables, which are available to Apache HTTP Server modules as well as propagated to CGI scripts and SSI pages. Values come from the native OS environment of the shell which invoked the httpd process.

    Example

    PassEnv LD_LIBRARY_PATH
    top

    SetEnv Directive

    Description:Sets environment variables
    Syntax:SetEnv env-variable [value]
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_env

    Sets an internal environment variable, which is then available to Apache HTTP Server modules, and passed on to CGI scripts and SSI pages.

    Example

    SetEnv SPECIAL_PATH /foo/bin

    If you omit the value argument, the variable is set to an empty string.

    The internal environment variables set by this directive are set after most early request processing directives are run, such as access control and URI-to-filename mapping. If the environment variable you're setting is meant as input into this early phase of processing such as the RewriteRule directive, you should instead set the environment variable with SetEnvIf.

    See also

    top

    UnsetEnv Directive

    Description:Removes variables from the environment
    Syntax:UnsetEnv env-variable [env-variable] ...
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_env

    Removes one or more internal environment variables from those passed on to CGI scripts and SSI pages.

    Example

    UnsetEnv LD_LIBRARY_PATH

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/directives.html.ja.utf80000644000000000000500000015603513523273316020544 0ustar rootsrc ディレクティブ一覧 - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    ディレクティブ一覧

    翻訳済ã¿è¨€èªž:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    標準 Apache é…布ã«ã‚ã‚‹ã™ã¹ã¦ã® Apache ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®ä¸€è¦§ã§ã™ã€‚ ã“れらã¯ä¸€è²«ã—ãŸå½¢å¼ã§æ›¸ã‹ã‚Œã¦ã„ã¦ã€ä½¿ã‚れã¦ã„る用語㮠用語集 も用æ„ã•れã¦ã„ã¾ã™ã€‚

    å„ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æ¦‚è¦ã‚’説明ã—㟠ディレクティブクイックリファレンスも ã‚りã¾ã™ã€‚

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 

    翻訳済ã¿è¨€èªž:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_ajp.html.fr.utf80000644000000000000500000010346113412755316021267 0ustar rootsrc mod_proxy_ajp - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_proxy_ajp

    Langues Disponibles:  en  |  fr  |  ja 

    Description:Module de support AJP pour mod_proxy
    Statut:Extension
    Identificateur de Module:proxy_ajp_module
    Fichier Source:mod_proxy_ajp.c
    Compatibilité:Disponible depuis la version 2.1 d'Apache

    Sommaire

    Ce module nécessite le chargement de mod_proxy. Il fournit le support du Protocole Apache JServ version 1.3 (nommé dans la suite de ce document AJP13).

    Pour être en mesure d'exploiter le protocole AJP13, il est donc nécessaire de charger les modules mod_proxy et mod_proxy_ajp.

    Avertissement

    N'activez pas la fonctionnalité de mandataire avant d'avoir sécurisé votre serveur. Les serveurs mandataires ouverts sont dangereux non seulement pour votre réseau, mais aussi pour l'Internet au sens large.

    top

    Utilisation

    Ce module permet de mandater en inverse un serveur d'application d'arrière-plan (comme Apache Tomcat) qui utilise le protocole AJP13. Son utilisation est similaire à celle d'un mandataire inverse HTTP, mais s'appuie sur le prefixe ajp:// :

    Mandataire inverse simple

    ProxyPass "/app" "ajp://backend.example.com:8009/app"

    On peut aussi configurer un répartiteur de charge :

    Mandataire inverse avec répartiteur de charge

    <Proxy balancer://cluster>
        BalancerMember "ajp://app1.example.com:8009" loadfactor=1
        BalancerMember "ajp://app2.example.com:8009" loadfactor=2
        ProxySet lbmethod=bytraffic
    </Proxy>
    ProxyPass "/app" "balancer://cluster/app"

    Notez qu'en général, la directive ProxyPassReverse n'est pas nécessaire. La requête AJP inclut l'en-tête host original fourni au mandataire, et le serveur d'application est sensé générer des en-têtes auto-référençants relatifs à cet hôte ; aucune réécriture n'est donc nécessaire.

    La situation la plus courante dans laquelle la directive ProxyPassReverse est nécessaire se rencontre lorsque le chemin de l'URL au niveau du mandataire est différente de celle du serveur d'arrière-plan. Dans ce cas, un en-tête redirect peut être réécrit relativement à l'URL de l'hôte original (et non du serveur d'arrière-plan ajp:// URL) ; par exemple :

    Réécriture d'un chemin mandaté

    ProxyPass "/apps/foo" "ajp://backend.example.com:8009/foo"
    ProxyPassReverse "/apps/foo" "http://www.example.com/foo"

    Il est cependant préférable en général de déployer l'application sur le serveur d'arrière-plan avec le même chemin que sur le mandataire.

    top

    Variables d'environnement

    Les variables d'environnement dont le nom possède le préfixe AJP_ sont transmises au serveur original en tant qu'attributs de requête AJP (le préfixe AJP_ étant supprimé du nom de la clé).

    top

    Vue d'ensemble du protocole

    Le protocole AJP13 est orienté paquet. Le format binaire a été préféré, probablement pour des raisons de performances, au format texte pourtant plus lisible. Le serveur web communique avec le conteneur de servlets sur une connexion TCP. Pour diminuer la charge induite par le processus de création de socket, le serveur web va tenter d'utiliser des connexions TCP persistantes avec le conteneur de servlets, et de réutiliser les connexions pendant plusieurs cycles requêtes/réponse.

    Lorsqu'une connexion a été assignée à une requête particulière, elle ne sera utilisée pour aucune autre jusqu'à ce que le cycle de traitement de la requête se soit terminé. En d'autres termes, il n'y a pas de multiplexage des requêtes sur une connexion. Ceci se traduit par un code beaucoup plus simple à chaque extrémité de la connexion, un nombre plus important de connexions étant cependant ouvertes en même temps.

    Lorsque le serveur web a ouvert une connexion vers le conteneur de servlets, celle-ci peut se trouver dans l'un des états suivants :

    • Idle
      Aucune requête n'est traitée sur cette connexion.
    • Assigned
      La connexion fait l'objet d'un traitement de requête.

    Lorsqu'une connexion est assignée au traitement d'une requête particulière, les informations de base de cette dernière (comme les en-têtes HTTP, etc...) sont envoyées sur la connexion sous une forme très condensée (par exemple les chaînes courantes sont codées sous forme d'entiers). Vous trouverez des détails sur ce format plus loin dans la structure des paquets de requête. Si la requête possède un corps (content-length > 0), il est envoyé dans un paquet séparé immédiatement après.

    A ce moment, le conteneur est probablement prêt à traiter la requête. Au cours de ce traitement, il peut renvoyer les messages suivants au serveur web :

    • SEND_HEADERS
      Renvoie un jeu d'en-têtes au navigateur.
    • SEND_BODY_CHUNK
      Renvoie un tronçon de corps de requête au navigateur.
    • GET_BODY_CHUNK
      Reçoit un autre tronçon de données de la requête si elle n'a pas encore été transmise intégralement. Ce type de transmission est nécessaire car les paquets possèdent une taille maximale fixe, et des quantités quelconques de données peuvent être contenues dans le corps de la requête (pour un chargement de fichier, par exemple). Notez que cela n'a rien à voir avec le transfert HTTP fractionné.
    • END_RESPONSE
      Termine le cycle du traitement de la requête.

    Chaque message est associé à un paquet de données formaté différemment. Voir plus loin les structures des paquets de réponses pour plus de détails.

    top

    Structure de base des paquets

    Ce protocole hérite en partie de XDR, mais il diffère sur de nombreux points (pas d'alignement sur 4 bits, par exemple).

    AJP13 utilise les octets selon leur ordre d'arrivée par le réseau pour tous les types de données.

    Le protocole comporte quatre types de données : octets, booléens, entiers et chaînes de caractères.

    Octet
    Un seul octet.
    Booléen
    Un seul octet, 1 = vrai, 0 = faux. L'utilisation d'autres valeurs non nulles (dans le style C) peut fonctionner dans certains cas, mais pas dans certains autres..
    Entier
    Un nombre compris entre 0 et 2^16 (32768), stocké sur 2 octets en débutant par l'octet de poids forts.
    Chaîne
    Une chaîne de taille variable (longueur limitée à 2^16). Elle est codée comme suit : les deux premiers octets représentent la longueur de la chaîne, les octets suivants constituent la chaîne proprement dite (y compris le '\0' final). Notez que la longueur encodée dans les deux premiers octets ne prend pas en compte le '\0' final, de la même manière que strlen. Cela peut prêter à confusion du point de vue de Java qui est surchargé de déclarations d'autoincrémentation étranges destinées à traiter ces terminateurs. Je suppose que le but dans lequel cela a été conçu ainsi était de permettre au code C d'être plus efficace lors de la lecture de chaînes en provenance du conteneur de servlets -- avec le caractère \0 final, le code C peut transmettre des références dans un seul tampon, sans avoir à effectuer de copie. En l'absence du caractère \0 final, le code C doit effectuer une copie afin de pouvoir tenir compte de sa notion de chaîne.

    Taille du paquet

    Selon la majorité du code, la taille maximale du paquet est de 8 * 1024 bytes (8K). La taille réelle du paquet est encodée dans l'en-tête.

    En-têtes de paquet

    Les paquets envoyés par le serveur vers le conteneur commencent par 0x1234. Les paquets envoyés par le conteneur vers le serveur commencent par AB (c'est à dire le code ASCII de A suivi du code ASCII de B). Ensuite, vient un entier (codé comme ci-dessus) représentant la longueur des données transmises. Bien que ceci puisse faire croire que la taille maximale des données est de 2^16, le code définit en fait ce maximum à 8K.

    Format du paquet (Serveur->Conteneur)
    Octet 0 1 2 3 4...(n+3)
    Contenu 0x12 0x34 Taille des données (n) Data
    Format du paquet (Conteneur->Serveur)
    Octet 0 1 2 3 4...(n+3)
    Contenu A B Taille des données (n) Data

    Pour la plupart des paquets, le premier octet de la charge utile encode le type de message, à l'exception des paquets contenant un corps de requête envoyés du serveur vers le conteneur -- ils comportent un en-tête standard (0x1234 suivi de la taille du paquet), mais celui-ci n'est suivi d'aucun préfixe.

    Le serveur web peut envoyer les messages suivants au conteneur de servlets :

    Code Type de paquet Signification
    2 Fait suivre la requête Débute le cycle de traitement de la requête avec les données qui suivent.
    7 Arrêt Le serveur web demande au conteneur de s'arrêter.
    8 Ping Le serveur web demande au conteneur de prendre le contrôle (phase de connexion sécurisée).
    10 CPing Le serveur web demande au conteneur de répondre rapidement avec un CPong.
    none Données Taille (2 octets) et les données correspondantes.

    À des fins de sécurité, le conteneur n'effectuera réellement son Arrêt que si la demande provient de la machine par laquelle il est hébergé.

    Le premier paquet Données est envoyé immédiatement après le paquet Faire suivre la requête par le serveur web.

    Le conteneur de servlets peut envoyer les types de messages suivants au serveur web :

    Code Type de paquet Signification
    3 Envoi d'un tronçon de corps Envoi d'un tronçon de corps depuis le conteneur de servlets vers le serveur web (et probablement vers le navigateur).
    4 Envoie les en-têtes Envoi des en-têtes de réponse depuis le conteneur de servlets vers le serveur web (et probablement vers le navigateur).
    5 Fin de la réponse Marque la fin de la réponse (et par conséquent du cycle de traitement de la requête).
    6 Réception du tronçon de corps suivant Réception de la suite des données de la requête si elles n'ont pas encore été entièrement transmises.
    9 Réponse CPong La réponse à une requête CPing

    Chacun des messages ci-dessus possède une structure interne différente dont vous trouverez les détails ci-dessous.

    top

    Structure des paquets de requête

    Pour les messages de type Faire suivre la requête depuis le serveur vers le conteneur :

    AJP13_FORWARD_REQUEST :=
        prefix_code      (byte) 0x02 = JK_AJP13_FORWARD_REQUEST
        method           (byte)
        protocol         (string)
        req_uri          (string)
        remote_addr      (string)
        remote_host      (string)
        server_name      (string)
        server_port      (integer)
        is_ssl           (boolean)
        num_headers      (integer)
        request_headers *(req_header_name req_header_value)
        attributes      *(attribut_name attribute_value)
        request_terminator (byte) OxFF

    Les request_headers possèdent la structure suivante :

    req_header_name :=
        sc_req_header_name | (string)  [voir ci-dessous pour la manière dont
        ceci est interprété]
    
    sc_req_header_name := 0xA0xx (integer)
    
    req_header_value := (string)

    Les attributes sont optionnels et possèdent la structure suivante :

    attribute_name := sc_a_name | (sc_a_req_attribute string)
    
    attribute_value := (string)

    Un des en-têtes les plus importants est content-length, car il indique si le conteneur doit ou non attendre un autre paquet immédiatement.

    Description détaillée de la requête que le serveur fait suivre vers le conteneur

    Préfixe de la requête

    Pour toutes les requêtes, ce préfixe est 2. Voir ci-dessus pour les détails des autres codes de préfixes.

    Méthode

    La méthode HTTP, encodée sous la forme d'un seul octet :

    Nom commandeCode
    OPTIONS1
    GET2
    HEAD3
    POST4
    PUT5
    DELETE6
    TRACE7
    PROPFIND8
    PROPPATCH9
    MKCOL10
    COPY11
    MOVE12
    LOCK13
    UNLOCK14
    ACL15
    REPORT16
    VERSION-CONTROL17
    CHECKIN18
    CHECKOUT19
    UNCHECKOUT20
    SEARCH21
    MKWORKSPACE22
    UPDATE23
    LABEL24
    MERGE25
    BASELINE_CONTROL26
    MKACTIVITY27

    Les versions futures d'ajp13 pourront transmettre des méthodes supplémentaires, même si elles ne font pas partie de cette liste.

    protocol, req_uri, remote_addr, remote_host, server_name, server_port, is_ssl

    Les significations de ces éléments sont triviales. Ils sont tous obligatoires et seront envoyés avec chaque requête.

    En-têtes

    La structure de request_headers est la suivante : tout d'abord, le nombre d'en-têtes num_headers est encodé, suivi d'une liste de paires nom d'en-tête req_header_name / valeur req_header_value. Les noms d'en-têtes courants sont codés sous forme d'entiers afin de gagner de la place. Si le nom d'en-tête ne fait partie de la liste des en-têtes courants, il est encodé normalement (une chaîne de caractères préfixée par la taille). La liste des en-têtes courants sc_req_header_name avec leurs codes se présente comme suit (il sont tous sensibles à la casse) :

    NomValeur du codeNom du code
    accept0xA001SC_REQ_ACCEPT
    accept-charset0xA002SC_REQ_ACCEPT_CHARSET
    accept-encoding0xA003SC_REQ_ACCEPT_ENCODING
    accept-language0xA004SC_REQ_ACCEPT_LANGUAGE
    authorization0xA005SC_REQ_AUTHORIZATION
    connection0xA006SC_REQ_CONNECTION
    content-type0xA007SC_REQ_CONTENT_TYPE
    content-length0xA008SC_REQ_CONTENT_LENGTH
    cookie0xA009SC_REQ_COOKIE
    cookie20xA00ASC_REQ_COOKIE2
    host0xA00BSC_REQ_HOST
    pragma0xA00CSC_REQ_PRAGMA
    referer0xA00DSC_REQ_REFERER
    user-agent0xA00ESC_REQ_USER_AGENT

    Le code Java qui lit ceci extrait l'entier représenté par les deux premiers octets, et si le premier octet est '0xA0', il utilise l'entier représenté par le deuxième octet comme index d'un tableau de noms d'en-têtes. Si le premier octet n'est pas 0xA0, l'entier représenté par les deux octets est considéré comme la longueur d'une chaîne qui est alors lue.

    Ceci ne peut fonctionner que si aucun nom d'en-tête ne possède une taille supérieure à 0x9FFF (==0xA000 - 1), ce qui est vraisemblable, bien qu'un peu arbitraire.

    Note:

    L'en-tête content-length est extrêmement important. S'il est présent et non nul, le conteneur considère que la requête possède un corps (une requête POST, par exemple), et lit immédiatement le paquet suivant dans le flux d'entrée pour extraire ce corps.

    Attributs

    Les attributs préfixés par ? (par exemple ?context) sont tous optionnels. Chacun d'eux est représenté par un octet correspondant au type de l'attribut et par sa valeur (chaîne ou entier). Ils peuvent être envoyés dans un ordre quelconque (bien que le code C les envoie dans l'ordre ci-dessous). Un code de terminaison spécial est envoyé pour signaler la fin de la liste des attributs optionnels. La liste des codes est la suivante :

    InformationValeur codeType de valeurNote
    ?context0x01-Non implémenté actuellement
    ?servlet_path0x02-Non implémenté actuellement
    ?remote_user0x03String
    ?auth_type0x04String
    ?query_string0x05String
    ?jvm_route0x06String
    ?ssl_cert0x07String
    ?ssl_cipher0x08String
    ?ssl_session0x09String
    ?req_attribute0x0AStringNom (le nom de l'attribut vient ensuite)
    ?ssl_key_size0x0BInteger
    are_done0xFF-request_terminator

    context et servlet_path ne sont pas définis actuellement par le code C, et la majorité du code Java ignore complètement ce qui est envoyé par l'intermédiaire de ces champs (il va même parfois s'interrompre si une chaîne est envoyée après un de ces codes). Je ne sais pas si c'est une bogue ou une fonctionnalité non implémentée, ou tout simplement du code obsolète, mais en tout cas, il n'est pris en charge par aucune des deux extrémités de la connexion.

    remote_user et auth_type concernent probablement l'authentification au niveau HTTP, et contiennent le nom de l'utilisateur distant ainsi que le type d'authentification utilisée pour établir son identité (à savoir Basic, Digest).

    query_string, ssl_cert, ssl_cipher et ssl_session contiennent les éléments HTTP et HTTPS correspondants.

    jvm_route est utilisé dans le cadre des sessions persistantes, en associant une session utilisateur à une instance Tomcat particulière en présence de plusieurs répartiteurs de charge.

    Au delà de cette liste de base, tout autre attribut supplémentaire peut être envoyé via le code req_attribute 0x0A. Une paire de chaînes représentant le nom et la valeur de l'attribut est envoyée immédiatement après chaque instance de ce code. Les variables d'environnement sont transmises par cette méthode.

    Enfin, lorsque tous les attributs ont été transmis, le terminateur d'attributs, 0xFF, est envoyé. Ce dernier indique à la fois la fin de la liste d'attributs et la fin du paquet de la requête

    top

    Structure du paquet de la réponse

    Pour les messages que le conteneur peut renvoyer au serveur.

    AJP13_SEND_BODY_CHUNK :=
      prefix_code   3
      chunk_length  (integer)
      chunk        *(byte)
      chunk_terminator (byte) Ox00
    
    
    AJP13_SEND_HEADERS :=
      prefix_code       4
      http_status_code  (integer)
      http_status_msg   (string)
      num_headers       (integer)
      response_headers *(res_header_name header_value)
    
    res_header_name :=
        sc_res_header_name | (string)   [voir ci-dessous pour la manière
        dont ceci est interprété]
    
    sc_res_header_name := 0xA0 (byte)
    
    header_value := (string)
    
    AJP13_END_RESPONSE :=
      prefix_code       5
      reuse             (boolean)
    
    
    AJP13_GET_BODY_CHUNK :=
      prefix_code       6
      requested_length  (integer)

    Détails:

    Envoi d'un tronçon de corps

    Le tronçon se compose essentiellement de données binaires et est renvoyé directement au navigateur.

    Envoi des en-têtes

    Les code et message d'état correspondent aux code et message HTTP habituels (par exemple 200 et OK). Les noms d'en-têtes de réponses sont codés de la même façon que les noms d'en-têtes de requêtes. Voir ci-dessus le codage des en-têtes pour plus de détails à propos de la manière dont les codes se distinguent des chaînes.
    Les codes des en-têtes courants sont ::

    NomValeur code
    Content-Type0xA001
    Content-Language0xA002
    Content-Length0xA003
    Date0xA004
    Last-Modified0xA005
    Location0xA006
    Set-Cookie0xA007
    Set-Cookie20xA008
    Servlet-Engine0xA009
    Status0xA00A
    WWW-Authenticate0xA00B

    La valeur de l'en-tête est codée immédiatement après le code ou la chaîne du nom d'en-tête.

    Fin de la réponse

    Signale la fin de ce cycle de traitement de requête. Si le drapeau reuse est à true (toute valeur autre que 0 en langage C pur), cette connexion TCP peut être réutilisée pour traiter de nouvelles requêtes entrantes. Si reuse est à false (==0), la connexion sera fermée.

    Réception d'un tronçon de corps

    Le conteneur réclame la suite des données de la requête (dans le cas où la taille du corps était trop importante pour pouvoir être contenue dans le premier paquet envoyé, où lorsque la requête est fractionnée). Le serveur va alors envoyer un paquet contenant une quantité de données correspondant au minimum de la request_length, la taille maximale de corps envoyée (8186 (8 Koctets - 6)), et le nombre réel d'octets restants à envoyer pour ce corps de requête.
    S'il ne reste plus de données à transmettre pour ce corps de requête (c'est à dire si le conteneur de servlets tente de lire au delà de la fin du corps), le serveur va renvoyer un paquet vide dont la charge utile est de longueur 0 et se présentant sous la forme (0x12,0x34,0x00,0x00).

    Langues Disponibles:  en  |  fr  |  ja 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_ident.html.fr.utf80000644000000000000500000002472013412755316020357 0ustar rootsrc mod_ident - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_ident

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Recherche d'identité conformément à la RFC 1413
    Statut:Extension
    Identificateur de Module:ident_module
    Fichier Source:mod_ident.c
    Compatibilité:Disponible depuis la version 2.2 d'Apache

    Sommaire

    Ce module interroge un démon compatible RFC 1413 sur un serveur distant afin de déterminer le propriétaire d'une connexion.

    top

    Directive IdentityCheck

    Description:Active la journalisation de l'identité RFC 1413 de l'utilisateur distant
    Syntaxe:IdentityCheck On|Off
    Défaut:IdentityCheck Off
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_ident
    Compatibilité:Retiré du serveur de base depuis Apache 2.1

    Cette directive permet d'activer la journalisation compatible RFC 1413 du nom de l'utilisateur distant pour chaque connexion, si la machine du client exécute identd ou un démon similaire. Cette information est enregistrée dans le journal des accès en utilisant la chaîne de formatage %...l.

    Cette information ne doit pas faire l'objet d'une confiance absolue, et elle ne doit être utilisée que dans le cadre d'un traçage grossier.

    Notez que de sérieux problèmes de délais peuvent survenir lors des accès à votre serveur, car chaque requête nécessite l'exécution d'un de ces processus de recherche. Lorsque des pare-feu ou des serveurs mandataires sont impliqués, chaque recherche est susceptible d'échouer et ajouter un temps de latence conformément à la directive IdentityCheckTimeout. En général, ces recherches ne se révèlent donc pas très utiles sur des serveurs publics accessibles depuis l'Internet.

    top

    Directive IdentityCheckTimeout

    Description:Détermine le délai d'attente pour les requêtes ident
    Syntaxe:IdentityCheckTimeout secondes
    Défaut:IdentityCheckTimeout 30
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_ident

    Cette directive permet de spécifier le délai d'attente d'une requête ident. Une valeur par défaut de 30 secondes est recommandée par la RFC 1413, principalement pour prévenir les problèmes qui pourraient être induits par la charge du réseau. Vous pouvez cependant ajuster la valeur de ce délai en fonction du débit de votre réseau local.

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_autoindex.html.ko.euc-kr0000644000000000000500000014430213412755316021555 0ustar rootsrc mod_autoindex - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_autoindex

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:ÀÚµ¿À¸·Î À¯´Ð½ºÀÇ ls ¸í·É¾î³ª Win32ÀÇ dir ½©¸í·É¾î¿Í À¯»çÇÑ µð·ºÅ丮 ¸ñ·ÏÀ» ¸¸µç´Ù
    »óÅÂ:Base
    ¸ðµâ¸í:autoindex_module
    ¼Ò½ºÆÄÀÏ:mod_autoindex.c

    ¿ä¾à

    µð·ºÅ丮 ¸ñ·ÏÀº ¾ò´Â ¹æ¹ýÀº µÎ°¡Áö´Ù:

    • º¸Åë index.htmlÀ̶õ À̸§À¸·Î »ç¿ëÀÚ°¡ ÀÛ¼ºÇÑ ÆÄÀÏ. ÀÌ ÆÄÀÏÀÇ À̸§Àº DirectoryIndex Áö½Ã¾î·Î ÁöÁ¤ÇÑ´Ù. ÀÌ ÀÛ¾÷Àº mod_dirÀÌ ÇÑ´Ù.
    • ¾Æ´Ï¸é ¼­¹ö°¡ ¸ñ·ÏÀ» ¸¸µç´Ù. ÀÌ ¸ñ·ÏÀÇ Çü½ÄÀ» ÁöÁ¤ÇÏ´Â Áö½Ã¾îµéÀÌ ÀÖ´Ù. AddIcon, AddIconByEncoding, AddIconByTypeÀº ¿©·¯ ÆÄÀÏÁ¾·ù¸¶´Ù º¸¿©ÁÙ ¾ÆÀÌÄܵéÀ» ÁöÁ¤ÇÑ´Ù. °¢ ÆÄÀÏ¿¡ ´ëÀÀÇϴ ù¹øÂ° ¾ÆÀÌÄÜÀ» º¸ÀδÙ. ÀÌ ÀÛ¾÷À» mod_autoindex°¡ ÇÑ´Ù.

    ÀÌ µÎ ±â´ÉÀº ¼­·Î º°°³·Î, ¿øÇÑ´Ù¸é ÀÚµ¿ ¸ñ·Ï »ý¼ºÀ» ¿ÏÀüÈ÷ Á¦¿ÜÇÒ (ȤÀº ´ëüÇÒ) ¼ö ÀÖ´Ù.

    ÀÚµ¿ ¸ñ·Ï »ý¼ºÀº Options +Indexes·Î °¡´ÉÇÏ´Ù. ÀÚ¼¼ÇÑ ³»¿ëÀº Options Áö½Ã¾î¸¦ Âü°íÇ϶ó.

    IndexOptions Áö½Ã¾î¿¡ FancyIndexing ¿É¼ÇÀ» ÁÖ¸é, ¿­ À̸§À» Ãâ·ÂÇÒ ¼ø¼­¸¦ ¹Ù²Ù´Â ¸µÅ©·Î ¸¸µç´Ù. À̸§ ¸µÅ©¸¦ ¼±ÅÃÇÏ¸é ±× ¿­ÀÇ °ª ¼ø¼­·Î ¸ñ·ÏÀ» ´Ù½Ã ¸¸µç´Ù. °°Àº À̸§À» ¹Ýº¹Çؼ­ ¼±ÅÃÇÏ¸é ¿À¸§Â÷¼ø°ú ³»¸²Â÷¼ø »çÀ̸¦ ¿À°£´Ù. IndexOptions Áö½Ã¾îÀÇ SuppressColumnSorting ¿É¼ÇÀº ÀÌ·± ¿­ À̸§ ¸µÅ©¸¦ ¸¸µéÁö ¾Ê´Â´Ù.

    "Size(Å©±â)" ¼øÀ¸·Î º¼¶§ Ãâ·ÂµÇ´Â °ª ¼ø¼­°¡ ¾Æ´Ï¶ó ½ÇÁ¦ ÆÄÀÏÅ©±â ¼ø¼­ÀÓÀ» ÁÖÀÇÇ϶ó. Áï, 1010 ¹ÙÀÌÆ® ÆÄÀϰú 1011 ¹ÙÀÌÆ® ÆÄÀÏÀº µÑ´Ù "1K"·Î º¸ÀÌ´õ¶óµµ Ç×»ó 1010 ¹ÙÀÌÆ® ÆÄÀÏÀÌ ¾Õ¿¡ ³ª¿Â´Ù.

    top

    Autoindex ¿äû ¾Æ±Ô¸ÕÆ®

    ¾ÆÆÄÄ¡ 2.0.23´Â ¿­¼ø¼­¿¡ ´ëÇÑ ¿äû ¾Æ±Ô¸ÕÆ®¸¦ Á¤¸®Çϰí, »õ·Î¿î ¿É¼ÇµéÀ» Ãß°¡Çß´Ù. Ãâ·ÂÀ» Ŭ¶óÀÌ¾ðÆ®°¡ Á¶ÀýÇÒ ¼ö ¾øµµ·Ï ¸¸µå´Â IndexOptions IgnoreClient ¿É¼ÇÀÌ Ãß°¡µÇ¾ú´Ù.

    ¿­¼ø¼­ À̸§Àº ¾Æ·¡ ³ª¿Â ¼ø¼­ ¿äû ¿É¼ÇÀ» ´õÇÑ ÀÚ±âÂüÁ¶ ¸µÅ©´Ù. ¾Æ·¡ ¿É¼ÇÀº µð·ºÅ丮 ÀÚ¿ø¿¡ ´ëÇÑ ¾î¶² ¿äû¿¡µµ »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    • C=NÀº ÆÄÀÏ¸í ¼øÀÌ´Ù
    • C=MÀº ÃÖ±Ù ¼öÁ¤ÀÏ ¼ø, ±×¸®°í ÆÄÀÏ¸í ¼øÀÌ´Ù
    • C=S´Â Å©±â ¼ø, ±×¸®°í ÆÄÀÏ¸í ¼øÀÌ´Ù
    • C=D´Â ¼³¸í ¼ø, ±×¸®°í ÆÄÀÏ¸í ¼øÀÌ´Ù
    • O=A´Â ¿À¸§Â÷¼øÀ¸·Î ¸ñ·ÏÀ» Á¤·ÄÇÑ´Ù
    • O=D´Â ³»¸²Â÷¼øÀ¸·Î ¸ñ·ÏÀ» Á¤·ÄÇÑ´Ù
    • F=0Àº (FancyIndexed°¡ ¾Æ´Ñ) °£´ÜÇÑ ¸ñ·Ï Çü½ÄÀÌ´Ù
    • F=1Àº FancyIndexed ¸ñ·Ï Çü½ÄÀÌ´Ù
    • F=2´Â HTMLTable FancyIndexed ¸ñ·Ï Çü½ÄÀÌ´Ù
    • V=0Àº ¹öÀü ¼øÀ¸·Î Á¤·ÄÇÏÁö ¾Ê´Â´Ù
    • V=1Àº ¹öÀü ¼øÀ¸·Î Á¤·ÄÇÑ´Ù
    • P=patternÀº ÁÖ¾îÁø pattern¿¡ ÇØ´çÇÏ´Â ÆÄÀϸ¸À» ¸ñ·ÏÀ¸·Î ¸¸µç´Ù

    'P'attern ¾Æ±Ô¸ÕÆ®´Â ÀϹÝÀûÀÎ IndexIgnore Áö½Ã¾î¸¦ ó¸®ÇÑ ÈÄ¿¡ °Ë»çÇϱ⶧¹®¿¡, ¸ñ·ÏÀº ´Ù¸¥ autoindex Á¶°ÇÀ» µû¸§À» ÁÖÀÇÇ϶ó. mod_autoindexÀÇ ¿äû ¾Æ±Ô¸ÕÆ®¸¦ ÀоîµéÀ϶§ ¾Ë ¼ö ¾ø´Â ¿É¼ÇÀ» ¹ß°ßÇÏ¸é ´õ ÀÌ»ó ÀÐÁö¾Ê´Â´Ù. ¿äû ¾Æ±Ô¸ÕÆ®´Â À§ÀÇ Ç¥¿¡ µû¶ó ¸¸µé¾î¾ß ÇÑ´Ù.

    header.html ÆÄÀÏ¿¡ »ç¿ëÇÒ ¼ö ÀÖ´Â ¾Æ·¡ °£´ÜÇÑ ¿¹Á¦´Â ÀÌ ¿É¼ÇµéÀ» ¼³¸íÇÑ´Ù. submit ¹öÅÏÀÇ ¾Ë ¼ö ¾ø´Â "X" ¾Æ±Ô¸ÕÆ®´Â mod_autoindex°¡ X=Go Àü±îÁö ¸ðµç ¾Æ±Ô¸ÕÆ®¸¦ ÀоîµéÀÓÀ» È®ÀÎÇϱâÀ§ÇØ ¸¶Áö¸·¿¡ »ç¿ëÇß´Ù.

    <form action="" method="get">
    Show me a <select name="F">
    <option value="0"> Plain list</option>
    <option value="1" selected="selected"> Fancy list</option>
    <option value="2"> Table list</option>
    </select>
    Sorted by <select name="C">
    <option value="N" selected="selected"> Name</option>
    <option value="M"> Date Modified</option>
    <option value="S"> Size</option>
    <option value="D"> Description</option>
    </select>
    <select name="O">
    <option value="A" selected="selected"> Ascending</option>
    <option value="D"> Descending</option>
    </select>
    <select name="V">
    <option value="0" selected="selected"> in Normal order</option>
    <option value="1"> in Version order</option>
    </select>
    Matching <input type="text" name="P" value="*" />
    <input type="submit" name="X" value="Go" />
    </form>

    top

    AddAlt Áö½Ã¾î

    ¼³¸í:ÆÄÀϸíÀ¸·Î ¼±ÅÃÇÑ ¾ÆÀÌÄÜ´ë½Å »ç¿ëÇÒ ÆÄÀÏ ¼³¸í±Û
    ¹®¹ý:AddAlt string file [file] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    AddAlt´Â FancyIndexing¿¡¼­ ÆÄÀÏ¿¡ ´ëÇÑ ¾ÆÀÌÄÜ´ë½Å º¸ÀÏ ±ÛÀ» ÁöÁ¤ÇÑ´Ù. File¿¡´Â ¼³¸íÇÒ ÆÄÀÏÀÇ ÆÄÀÏ È®ÀåÀÚ, ÆÄÀϸí ÀϺÎ, ¿ÍÀϵåÄ«µå Ç¥Çö, Àüü ÆÄÀϸíÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù. String¿¡ °ø¹éÀÌ µé¾î°£´Ù¸é µû¿ÈÇ¥(" ȤÀº ')·Î ¹­¾î¾ß ÇÑ´Ù. Ŭ¶óÀÌ¾ðÆ®°¡ À̹ÌÁö¸¦ º¼ ¼ö ¾ø°Å³ª, À̹ÌÁö¸¦ ÀÐÁö¾Ê°Å³ª, ¾ÆÀÌÄÜÀ» ¸ø ¾òÀº °æ¿ì ÀÌ Ãß°¡ ±ÛÀÌ º¸ÀÌ°Ô µÈ´Ù.

    ¿¹Á¦

    AddAlt "PDF file" *.pdf
    AddAlt Compressed *.gz *.zip *.Z

    top

    AddAltByEncoding Áö½Ã¾î

    ¼³¸í:MIME-encodingÀ¸·Î ¼±ÅÃÇÑ ¾ÆÀÌÄÜ´ë½Å »ç¿ëÇÒ ÆÄÀÏ ¼³¸í±Û
    ¹®¹ý:AddAltByEncoding string MIME-encoding [MIME-encoding] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    AddAltByEncodingÀº FancyIndexing¿¡¼­ ÆÄÀÏ¿¡ ´ëÇÑ ¾ÆÀÌÄÜ´ë½Å º¸ÀÏ ±ÛÀ» ÁöÁ¤ÇÑ´Ù. MIME-encodingÀº x-compress¿Í °°Àº À¯È¿ÇÑ content-encodingÀÌ´Ù. String¿¡ °ø¹éÀÌ µé¾î°£´Ù¸é µû¿ÈÇ¥(" ȤÀº ')·Î ¹­¾î¾ß ÇÑ´Ù. Ŭ¶óÀÌ¾ðÆ®°¡ À̹ÌÁö¸¦ º¼ ¼ö ¾ø°Å³ª, À̹ÌÁö¸¦ ÀÐÁö¾Ê°Å³ª, ¾ÆÀÌÄÜÀ» ¸ø ¾òÀº °æ¿ì ÀÌ Ãß°¡ ±ÛÀÌ º¸ÀÌ°Ô µÈ´Ù.

    ¿¹Á¦

    AddAltByEncoding gzip x-gzip

    top

    AddAltByType Áö½Ã¾î

    ¼³¸í:MIME content-typeÀ¸·Î ¼±ÅÃÇÑ ¾ÆÀÌÄÜ´ë½Å »ç¿ëÇÒ ÆÄÀÏ ¼³¸í±Û
    ¹®¹ý:AddAltByType string MIME-type [MIME-type] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    AddAltByTypeÀº FancyIndexing¿¡¼­ ÆÄÀÏ¿¡ ´ëÇÑ ¾ÆÀÌÄÜ´ë½Å º¸ÀÏ ±ÛÀ» ÁöÁ¤ÇÑ´Ù. MIME-typeÀº text/html°ú °°Àº À¯È¿ÇÑ content-typeÀÌ´Ù. String¿¡ °ø¹éÀÌ µé¾î°£´Ù¸é µû¿ÈÇ¥(" ȤÀº ')·Î ¹­¾î¾ß ÇÑ´Ù. Ŭ¶óÀÌ¾ðÆ®°¡ À̹ÌÁö¸¦ º¼ ¼ö ¾ø°Å³ª, À̹ÌÁö¸¦ ÀÐÁö¾Ê°Å³ª, ¾ÆÀÌÄÜÀ» ¸ø ¾òÀº °æ¿ì ÀÌ Ãß°¡ ±ÛÀÌ º¸ÀÌ°Ô µÈ´Ù.

    ¿¹Á¦

    AddAltByType 'plain text' text/plain

    top

    AddDescription Áö½Ã¾î

    ¼³¸í:ÆÄÀÏ¿¡ ´ëÇÑ ¼³¸í
    ¹®¹ý:AddDescription string file [file] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    ÀÌ Áö½Ã¾î´Â FancyIndexing¿¡¼­ ÆÄÀÏ¿¡ ´ëÇÑ ¼³¸íÀ» ÁöÁ¤ÇÑ´Ù. File¿¡´Â ¼³¸íÇÒ ÆÄÀÏÀÇ ÆÄÀÏ È®ÀåÀÚ, ÆÄÀϸí ÀϺÎ, ¿ÍÀϵåÄ«µå Ç¥Çö, Àüü ÆÄÀϸíÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù. StringÀº µû¿ÈÇ¥(")·Î ¹­¾î¾ß ÇÑ´Ù.

    ¿¹Á¦

    AddDescription "The planet Mars" /web/pics/mars.gif

    ÀüÇüÀûÀÎ ±âº» ¼³¸í ÇÊµåÆøÀº 23 ¹ÙÀÌÆ®´Ù. IndexOptions SuppressIcon ¿É¼ÇÀ» »ç¿ëÇÏ¸é ±âº»Æø¿¡ 6 ¹ÙÀÌÆ®¸¦ ´õ Ãß°¡Çϰí, IndexOptions SuppressSize ¿É¼ÇÀº 7 ¹ÙÀÌÆ®¸¦, IndexOptions SuppressLastModified ¿É¼ÇÀº 19 ¹ÙÀÌÆ®¸¦ ´õ Ãß°¡ÇÑ´Ù. ±×·¯¹Ç·Î °¡Àå ³ÐÀº ¼³¸íÆøÀº 55 ¹ÙÀÌÆ®´Ù.

    ÀÌ ÇʵåÀÇ Æø¸¦ ¹Ù²Ù°Å³ª ¼³¸íÀÇ ±æÀ̸¦ ¹«ÇÑ´ë·Î ¸¸µå·Á¸é DescriptionWidth IndexOptions Ű¿öµå¸¦ Âü°íÇ϶ó.

    Á¶½É

    AddDescriptionÀ¸·Î ÁöÁ¤ÇÑ ¼³¸í±Û¿¡ ű׳ª character entity(¿ªÁÖ; &lt;, &amp; µîÀ» ÁöĪ)°°Àº HTMLÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù. ±×·¯³ª Æø¶§¹®¿¡ űװ¡ ÀÖ´Â ºÎºÐÀÌ Â©¸®°ÔµÇ¸é (¿¹¸¦ µé¾î ±½ÀºÃ¼ ºÎºÐ ³¡ÀÌ Â©¸®¸é) ³ª¸ÓÁö µð·ºÅ丮 ¸ñ·Ï¿¡ ¿µÇâÀ» ÁÙ ¼ö ÀÖ´Ù.

    top

    AddIcon Áö½Ã¾î

    ¼³¸í:À̸§À¸·Î ¼±ÅÃÇÑ ÆÄÀÏ¿¡ »ç¿ëÇÒ ¾ÆÀÌÄÜ
    ¹®¹ý:AddIcon icon name [name] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    ÀÌ Áö½Ã¾î´Â FancyIndexing¿¡¼­ nameÀ¸·Î ³¡³ª´Â ÆÄÀÏ ¿·¿¡ º¸¿©ÁÙ ¾ÆÀÌÄÜÀ» ÁöÁ¤ÇÑ´Ù. IconÀº ¾ÆÀÌÄÜÀÇ (%-escaped) »ó´ë URL ȤÀº (alttext,url) Çü½ÄÀÌ´Ù. ¿©±â¼­ alttext´Â ±×¸²À» º¸¿©ÁÙ ¼ö ¾ø´Â ºê¶ó¿ìÀú°¡ ¾ÆÀÌÄÜ´ë½Å »ç¿ëÇÒ ¹®±¸ÀÌ´Ù.

    Name¿¡´Â µð·ºÅ丮¸¦ ³ªÅ¸³»´Â ^^DIRECTORY^^, (¸ñ·Ï Çü½ÄÀ» ¿Ã¹Ù·Î ¸ÂÃß±âÀ§ÇØ) ºóÁÙÀ» ³ªÅ¸³»´Â ^^BLANKICON^^, ÆÄÀÏ È®ÀåÀÚ, ¿ÍÀϵåÄ«µå Ç¥Çö, ÆÄÀϸí ÀϺΠȤÀº Àüü¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    ¿¹Á¦

    AddIcon (IMG,/icons/image.xbm) .gif .jpg .xbm
    AddIcon /icons/dir.xbm ^^DIRECTORY^^
    AddIcon /icons/backup.xbm *~

    °¡´ÉÇϸé AddIconº¸´Ù´Â AddIconByTypeÀ» »ç¿ëÇØ¾ß ÇÑ´Ù.

    top

    AddIconByEncoding Áö½Ã¾î

    ¼³¸í:MIME content-encodingÀ¸·Î ¼±ÅÃÇÑ ÆÄÀÏ¿¡ »ç¿ëÇÒ ¾ÆÀÌÄÜ
    ¹®¹ý:AddIconByEncoding icon MIME-encoding [MIME-encoding] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    ÀÌ Áö½Ã¾î´Â FancyIndexing¿¡¼­ ÆÄÀÏ ¿·¿¡ º¸¿©ÁÙ ¾ÆÀÌÄÜÀ» ÁöÁ¤ÇÑ´Ù. IconÀº ¾ÆÀÌÄÜÀÇ (%-escaped) »ó´ë URL ȤÀº (alttext,url) Çü½ÄÀÌ´Ù. ¿©±â¼­ alttext´Â ±×¸²À» º¸¿©ÁÙ ¼ö ¾ø´Â ºê¶ó¿ìÀú°¡ ¾ÆÀÌÄÜ´ë½Å »ç¿ëÇÒ ¹®±¸ÀÌ´Ù.

    MIME-encoding´Â content-encoding¿¡ ÇØ´çÇÏ´Â ¿ÍÀϵåÄ«µå Ç¥ÇöÀÌ´Ù.

    ¿¹Á¦

    AddIconByEncoding /icons/compress.xbm x-compress

    top

    AddIconByType Áö½Ã¾î

    ¼³¸í:MIME content-typeÀ¸·Î ¼±ÅÃÇÑ ÆÄÀÏ¿¡ »ç¿ëÇÒ ¾ÆÀÌÄÜ
    ¹®¹ý:AddIconByType icon MIME-type [MIME-type] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    ÀÌ Áö½Ã¾î´Â FancyIndexing¿¡¼­ MIME-typeÀÇ ÆÄÀÏ ¿·¿¡ º¸¿©ÁÙ ¾ÆÀÌÄÜÀ» ÁöÁ¤ÇÑ´Ù. IconÀº ¾ÆÀÌÄÜÀÇ (%-escaped) »ó´ë URL ȤÀº (alttext,url) Çü½ÄÀÌ´Ù. ¿©±â¼­ alttext´Â ±×¸²À» º¸¿©ÁÙ ¼ö ¾ø´Â ºê¶ó¿ìÀú°¡ ¾ÆÀÌÄÜ´ë½Å »ç¿ëÇÒ ¹®±¸ÀÌ´Ù.

    MIME-typeÀº mime type¿¡ ÇØ´çÇÏ´Â ¿ÍÀϵåÄ«µå Ç¥ÇöÀÌ´Ù.

    ¿¹Á¦

    AddIconByType (IMG,/icons/image.xbm) image/*

    top

    DefaultIcon Áö½Ã¾î

    ¼³¸í:ƯÁ¤ ¾ÆÀÌÄÜÀ» ¼³Á¤ÇÏÁö¾ÊÀº ÆÄÀÏ¿¡ »ç¿ëÇÒ ¾ÆÀÌÄÜ
    ¹®¹ý:DefaultIcon url-path
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    DefaultIcon Áö½Ã¾î´Â FancyIndexing¿¡¼­ ƯÁ¤ ¾ÆÀÌÄÜÀ» ¼³Á¤ÇÏÁö¾ÊÀº ÆÄÀÏ ¿·¿¡ ³ª¿Ã ¾ÆÀÌÄÜÀÌ´Ù. IconÀº ¾ÆÀÌÄÜÀÇ (%-escaped) »ó´ë URLÀÌ´Ù.

    ¿¹Á¦

    DefaultIcon /icon/unknown.xbm

    top

    HeaderName Áö½Ã¾î

    ¼³¸í:ÆÄÀϸñ·Ï À§¿¡ »ðÀÔÇÒ ÆÄÀÏÀÇ À̸§
    ¹®¹ý:HeaderName filename
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    HeaderName Áö½Ã¾î´Â ÆÄÀϸñ·Ï ¾Õ¿¡ »ðÀÔÇÒ ÆÄÀÏÀÇ À̸§À» ÁöÁ¤ÇÑ´Ù. FilenameÀº »ðÀÔÇÒ ÆÄÀϸíÀÌ´Ù.

    ¿¹Á¦

    HeaderName HEADER.html

    ÇöÀç HeaderName°ú ReadmeName µÑ ¸ðµÎ FilenameÀ» Á¢±ÙÇÏ·Á´Â µð·ºÅ丮ÀÇ »ó´ë URI °æ·Î·Î ¹Þ¾ÆµéÀδÙ. FilenameÀÌ ½½·¡½¬·Î ½ÃÀÛÇϸé DocumentRoot¿¡ »ó´ëÀûÀÎ °æ·Î·Î ¹Þ¾ÆµéÀδÙ.

    ¿¹Á¦

    HeaderName /include/HEADER.html

    Filename¿¡´Â major content typeÀÌ text/*ÀÎ (¿¹¸¦ µé¾î, text/html, text/plain, µî) ¹®¼­¸¦ »ç¿ëÇØ¾ß ÇÑ´Ù. Áï, ½ºÅ©¸³Æ®ÀÇ (Ãâ·ÂÀÌ ¾Æ´Ñ) ½ÇÁ¦ ÆÄÀÏ typeÀ» ´ÙÀ½°ú °°ÀÌ text/html·Î ÁöÁ¤ÇÑ´Ù¸é filenameÀ¸·Î CGI ½ºÅ©¸³Æ®¸¦ ÁöÁ¤ÇÒ ¼öµµ ÀÖ´Ù:

    AddType text/html .cgi

    Options MultiViewsÀ» »ç¿ëÇÏ¸é ³»¿ëÇù»óÀ» ÇÑ´Ù. filenameÀÌ (CGI ½ºÅ©¸³Æ®°¡ ¾Æ´Ñ) °íÁ¤µÈ text/html ¹®¼­À̰í options Includes³ª IncludesNOEXEC Áß Çϳª¸¦ »ç¿ëÇÑ´Ù¸é ÆÄÀÏÀ» server-side includes·Î ó¸®ÇÑ´Ù. (mod_include ¹®¼­ Âü°í)

    HeaderNameÀ¸·Î ÁöÁ¤ÇÑ ÆÄÀÏ¿¡ (<html>, <head>, µî) HTML ¹®¼­ ½ÃÀۺκÐÀÌ Æ÷ÇÔµÇÀÖ´Ù¸é IndexOptions +SuppressHTMLPreambleÀ» »ç¿ëÇÏ¿© ÀÌ ºÎºÐÀ» Ãß°¡ÇÏÁö¾Ê´Â °ÍÀÌ ÁÁ´Ù.

    top

    IndexHeadInsert Áö½Ã¾î

    ¼³¸í:Inserts text in the HEAD section of an index page.
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    Documentation not yet translated. Please see English version of document.

    top

    IndexIgnore Áö½Ã¾î

    ¼³¸í:µð·ºÅ丮 ¸ñ·Ï¿¡¼­ ¼û±æ ÆÄÀϸñ·ÏÀ» Ãß°¡ÇÑ´Ù
    ¹®¹ý:IndexIgnore file [file] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    IndexIgnore Áö½Ã¾î´Â µð·ºÅ丮 ¸ñ·Ï¿¡¼­ °¨Ãâ ÆÄÀϸñ·ÏÀ» Ãß°¡ÇÑ´Ù. File¿¡´Â °¨Ãâ (½©¿¡¼­ »ç¿ëÇÏ´Â) È­ÀϵåÄ«µå Ç¥ÇöÀ̳ª Àüü ÆÄÀϸíÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù. ¿©·¯ IndexIgnore Áö½Ã¾î¸¦ »ç¿ëÇÏ¸é ±âÁ¸ÀÇ °¨Ãâ ÆÄÀϸñ·ÏÀ» ´ëüÇÏÁö¾Ê°í ¸ñ·Ï¿¡ ÁöÁ¤ÇÑ ÆÄÀϵéÀ» Ãß°¡ÇÑ´Ù. ±âº»ÀûÀ¸·Î ¸ñ·ÏÀº .À» (ÇöÀç µð·ºÅ丮) Æ÷ÇÔÇÑ´Ù.

    IndexIgnore README .htaccess *.bak *~

    top

    IndexIgnoreReset Áö½Ã¾î

    ¼³¸í:Empties the list of files to hide when listing a directory
    ¹®¹ý:IndexIgnoreReset ON|OFF
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex
    Áö¿ø:2.3.10 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    IndexOptions Áö½Ã¾î

    ¼³¸í:µð·ºÅ丮 ¸ñ·ÏÀÇ ¿©·¯ ¼³Á¤µé
    ¹®¹ý:IndexOptions [+|-]option [[+|-]option] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    IndexOptions Áö½Ã¾î´Â µð·ºÅ丮 ¸ñ·ÏÀ» ¼³Á¤ÇÑ´Ù. OptionÀº ´ÙÀ½ Áß ÇϳªÀÌ´Ù

    DescriptionWidth=[n | *] (¾ÆÆÄÄ¡ 2.0.23 ÀÌÈÄ)
    DescriptionWidth Ű¿öµå¸¦ »ç¿ëÇÏ¿© ¹®ÀÚ´ÜÀ§·Î ¼³¸í¿­ÀÇ ÆøÀ» ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù.
    -DescriptionWidth¸¦ ÁöÁ¤Çϸé (ȤÀº ¾Æ¹«°Íµµ ÁöÁ¤ÇÏÁö¾ÊÀ¸¸é) mod_autoindex°¡ ÃÖÀûÀÇ ÆøÀ» °è»êÇÑ´Ù.
    DescriptionWidth=nÀº ¿­ÀÇ ÆøÀ» n ¹ÙÀÌÆ®·Î °íÁ¤ÇÑ´Ù.
    DescriptionWidth=*Àº ¿­ÀÇ ÆøÀ» °¡Àå ±ä ¼³¸í±ÛÀ» ´ãÀ» ¼ö Àִ¸¸Å­ ´Ã¸°´Ù.
    ¼³Á¤ÀÌ Â©¸± ¼ö ÀÖ´Â ¹®Á¦´Â AddDescription ÀýÀ» Âü°íÇ϶ó.
    FancyIndexing
    µð·ºÅ丮ÀÇ fancy ¸ñ·ÏÀ» ¸¸µç´Ù.
    FoldersFirst (¾ÆÆÄÄ¡ 2.0.23 ÀÌÈÄ)
    ÀÌ ¿É¼ÇÀ» »ç¿ëÇϸé ÇÏÀ§µð·ºÅ丮 ¸ñ·ÏÀÌ Ç×»ó ¸ÕÀú ³ª¿À°í, µð·ºÅ丮¿¡ ÀÖ´Â ÀÏ¹Ý ÆÄÀÏÀÌ µÚ¿¡ ³ª¿Â´Ù. ±âº»ÀûÀ¸·Î ¸ñ·ÏÀº ÆÄÀϰú ÇÏÀ§µð·ºÅ丮·Î ³ª´µ°í, µû·Î °¢°¢ÀÇ ¼ø¼­¸¦ Á¤¸®ÇÏ¿© ÇÏÀ§µð·ºÅ丮µéÀ» ¸ÕÀú º¸ÀδÙ. ¿¹¸¦ µé¾î, À̸§ ¿ª¼øÀ¸·Î Á¤·ÄÇϰí FoldersFirst¸¦ »ç¿ëÇÑ´Ù¸é ÇÏÀ§µð·ºÅ丮 Zed°¡ ÇÏÀ§µð·ºÅ丮 Beta ¾Õ¿¡ ³ª¿À°í, ÇÏÀ§µð·ºÅ丮 Beta´Â ÀÏ¹Ý ÆÄÀÏ Gamma¿Í Alpha ¾Õ¿¡ ³ª¿Â´Ù. ÀÌ ¿É¼ÇÀº FancyIndexingÀ» ÇÔ²² »ç¿ëÇÒ¶§¸¸ È¿°ú°¡ ÀÖ´Ù.
    HTMLTable (½ÇÇèÀû, ¾ÆÆÄÄ¡ 2.0.23 ÀÌÈÄ)
    ÀÌ ½ÇÇèÀûÀÎ FancyIndexing ¿É¼ÇÀº °£´ÜÇÑ HTML Ç¥·Î fancy µð·ºÅ丮 ¸ñ·ÏÀ» ¸¸µç´Ù. ÀÌ ¿É¼ÇÀº ¿À·¡µÈ ºê¶ó¿ìÀú¸¦ È¥¶õ½º·´°Ô ÇÒ ¼ö ÀÖÀ½À» ÁÖÀÇÇ϶ó. ÀÌ ¿É¼ÇÀº WinNT³ª ´Ù¸¥ utf-8 »ç¿ë Ç÷¡Æû¿¡¼­ ÆÄÀϸíÀ̳ª ¼³¸í¹®ÀÇ Àб⠼ø¼­(¿ÞÂÊ¿¡¼­ ¿À¸¥ÂÊ È¤Àº ¿À¸¥ÂÊ¿¡¼­ ¿ÞÂÊÀ¸·Î)°¡ ´Ù¸¦¶§ Ưº°È÷ À¯¿ëÇÏ´Ù.
    IconsAreLinks
    fancy ¸ñ·Ï¿¡¼­ ÆÄÀÏ¸í ¸µÅ©¿¡ ¾ÆÀÌÄÜÀ» Æ÷ÇÔÇÑ´Ù.
    IconHeight[=pixels]
    ÀÌ ¿É¼ÇÀ» IconWidth¿Í °°ÀÌ »ç¿ëÇÏ¸é ¼­¹ö´Â ÆÄÀÏ ¾ÆÀÌÄÜÀÇ img ű׿¡ height¿Í width ¼Ó¼ºÀ» Æ÷ÇÔÇÑ´Ù. ±×·¯¸é ºê¶ó¿ìÀú´Â ¸ðµç À̹ÌÁö¸¦ ¹ÞÁö¾ÊÀº »óȲ¿¡¼­µµ ÆäÀÌÁö ±¸¼ºÀ» ¹Ì¸® °è»êÇÒ ¼ö ÀÖ´Ù. ¿É¼Ç¿¡ °ªÀ» ÁÖÁö¾ÊÀ¸¸é ¾ÆÆÄÄ¡°¡ Á¦°øÇÏ´Â ¾ÆÀÌÄÜÀÇ Ç¥ÁØ ³ôÀ̸¦ »ç¿ëÇÑ´Ù.
    IconWidth[=pixels]
    ÀÌ ¿É¼ÇÀ» IconHeight¿Í °°ÀÌ »ç¿ëÇÏ¸é ¼­¹ö´Â ÆÄÀÏ ¾ÆÀÌÄÜÀÇ img ű׿¡ height¿Í width ¼Ó¼ºÀ» Æ÷ÇÔÇÑ´Ù. ±×·¯¸é ºê¶ó¿ìÀú´Â ¸ðµç À̹ÌÁö¸¦ ¹ÚÁö¾ÊÀº »óȲ¿¡¼­µµ ÆäÀÌÁö ±¸¼ºÀ» ¹Ì¸® °è»êÇÒ ¼ö ÀÖ´Ù. ¿É¼Ç¿¡ °ªÀ» ÁÖÁö¾ÊÀ¸¸é ¾ÆÆÄÄ¡°¡ Á¦°øÇÏ´Â ¾ÆÀÌÄÜÀÇ Ç¥ÁØ ÆøÀ» »ç¿ëÇÑ´Ù.
    IgnoreCase
    ÀÌ ¿É¼ÇÀ» »ç¿ëÇÏ¸é ´ë¼Ò¹®ÀÚ ±¸º°ÇÏÁö¾Ê°í À̸§À» Á¤·ÄÇÑ´Ù. ¿¹¸¦ µé¾î, À̸§À¸·Î ¿À¸§Â÷¼øÀ̰í IgnoreCase¸¦ »ç¿ëÇÏ¸é ÆÄÀÏ Zeta´Â ÆÄÀÏ alfa µÚ¿¡ ³ª¿Â´Ù (ÁÖÀÇ: ÆÄÀÏ GAMMA´Â Ç×»ó ÆÄÀÏ gamma ¾Õ¿¡ ³ª¿Â´Ù).
    IgnoreClient
    ÀÌ ¿É¼ÇÀ» »ç¿ëÇϸé mod_autoindex´Â ¼ø¼­¸¦ Æ÷ÇÔÇÏ¿© Ŭ¶óÀÌ¾ðÆ®°¡ º¸³»´Â ¸ðµç ÁúÀǺ¯¼ö¸¦ ¹«½ÃÇÑ´Ù. (SuppressColumnSortingÀ» °¡Á¤ÇÑ´Ù.)
    NameWidth=[n | *]
    NameWidth Ű¿öµå´Â ¹ÙÀÌÆ®´ÜÀ§·Î ÆÄÀÏ¸í ¿­ÀÇ ÆøÀ» ÁöÁ¤ÇÑ´Ù.
    -NameWidthÀ» ÁöÁ¤Çϸé (ȤÀº ¾Æ¹«°Íµµ ÁöÁ¤ÇÏÁö¾ÊÀ¸¸é) mod_autoindex°¡ ÃÖÀûÀÇ ÆøÀ» °è»êÇÑ´Ù.
    NameWidth=n´Â ¿­ÀÇ ÆøÀ» n ¹ÙÀÌÆ®·Î °íÁ¤ÇÑ´Ù.
    NameWidth=*Àº ¿­ÀÇ ÆøÀ» ÇÊ¿äÇѸ¸Å­ ´Ã¸°´Ù.
    ScanHTMLTitles
    fancy ¸ñ·Ï¿¡¼­ HTML ¹®¼­ÀÇ titleÀ» »Ì´Â´Ù. ÆÄÀÏ¿¡ AddDescription·Î ÁöÁ¤ÇÑ ¼³¸íÀÌ ¾ø´Ù¸é À¥¼­¹ö´Â ¹®¼­ÀÇ title ¿ä¼Ò°ªÀ» ÀоîµéÀδÙ. ÀÌ ÀÛ¾÷Àº CPU¿Í µð½ºÅ©¸¦ ¸¹ÀÌ »ç¿ëÇÑ´Ù.
    SuppressColumnSorting
    ÀÌ ¿É¼ÇÀ» »ç¿ëÇÏ¸é ¾ÆÆÄÄ¡´Â FancyIndexed µð·ºÅ丮 ¸ñ·Ï¿¡¼­ ¿­ À̸§À» ¼ø¼­¸¦ ¹Ù²Ù´Â ¸µÅ©·Î ¸¸µéÁö ¾Ê´Â´Ù. º¸ÅëÀº ¿­ À̸§À» ¸µÅ©·Î ¸¸µé¾î¼­, ¿­ À̸§À» ¼±ÅÃÇÏ¸é ±× ¿­¿¡ ÀÖ´Â °ª¼ø¼­·Î µð·ºÅ丮 ¸ñ·ÏÀ» ¸¸µç´Ù. ¾ÆÆÄÄ¡ 2.0.23 ÀÌÀü¿¡´Â ¼ø¼­ ¾Æ±Ô¸ÕÆ®µµ ÀÐÁö ¾Ê¾Ò´Ù. ¾ÆÆÄÄ¡ 2.0.23¿¡¼­´Â IndexOptions IgnoreClient¸¦ »ç¿ëÇÏ¿© ¼ø¼­ ¾Æ±Ô¸ÕÆ®¸¦ ÀÐÁö ¾Ê´Â´Ù.
    SuppressDescription
    fancy ¸ñ·Ï¿¡¼­ ÆÄÀÏ ¼³¸íÀ» Æ÷ÇÔÇÏÁö ¾Ê´Â´Ù. ±âº»ÀûÀ¸·Î ¾î¶² ÆÄÀÏ ¼³¸íµµ Á¤ÀǵÇÀÖÁö¾Ê°í, ÀÌ ¿É¼ÇÀ» »ç¿ëÇϸé 23 ¹®ÀÚ °ø°£À» ´Ù¸¥ ¿ëµµ·Î »ç¿ëÇÑ´Ù. ÆÄÀÏ ¼³¸íÀ» ÁöÁ¤ÇÏ´Â ¹æ¹ýÀº AddDescriptionÀ» Âü°íÇ϶ó. ¼³¸í¿­ÀÇ Å©±â¸¦ ÁöÁ¤ÇÏ´Â DescriptionWidth ¿É¼Çµµ Âü°íÇ϶ó.
    SuppressHTMLPreamble
    µð·ºÅ丮¿¡ HeaderName Áö½Ã¾î·Î ÁöÁ¤ÇÑ ÆÄÀÏÀÌ ÀÖ´Â °æ¿ì ¸ðµâÀº º¸Åë Ç¥ÁØ HTML ½ÃÀۺκР(<html>, <head>, et cetera) µÚ¿¡ ÆÄÀÏ ³»¿ëÀ» ÷°¡ÇÑ´Ù. ±×·¯³ª SuppressHTMLPreamble ¿É¼ÇÀ» »ç¿ëÇϸé óÀ½ºÎÅÍ header ÆÄÀÏ ³»¿ëÀ» Æ÷ÇÔÇÑ´Ù. ÀÌ °æ¿ì header ÆÄÀÏ¿¡´Â ÀûÀýÇÑ HTML ¸í·ÉÀÌ ÀÖ¾î¾ß ÇÑ´Ù. header ÆÄÀÏÀÌ ¾ø´Ù¸é ÀϹÝÀûÀÎ ½ÃÀۺκÐÀÌ ¸¸µé¾îÁø´Ù.
    SuppressIcon (¾ÆÆÄÄ¡ 2.0.23 ÀÌÈÄ)
    fancy ¸ñ·Ï¿¡¼­ ¾ÆÀÌÄÜÀ» »«´Ù. SuppressIcon°ú SuppressRules¸¦ °°ÀÌ »ç¿ëÇϸé, (FancyIndexed ¸ñ·ÏÀÌ »ç¿ëÇÑ) pre ¾È¿¡ img¿Í hr ¿ä¼Ò »ç¿ëÀ» ±ÝÁöÇÑ ¸¶Áö¸· Ç¥ÁØÀÎ HTML 3.2¿¡ ¾Ë¸ÂÀº Ãâ·ÂÀÌ µÈ´Ù.
    SuppressLastModified
    fancy ¸ñ·Ï¿¡¼­ ¸¶Áö¸· ¼öÁ¤ÀÏÀ» Ç¥½ÃÇÏÁö ¾Ê´Â´Ù.
    SuppressRules (¾ÆÆÄÄ¡ 2.0.23 ÀÌÈÄ)
    µð·ºÅ丮 ¸ñ·Ï¿¡¼­ ¼öÆòÁÙÀ» (hr ¿ä¼Ò) »ç¿ëÇÏÁö ¾Ê´Â´Ù. SuppressIcon°ú SuppressRules¸¦ °°ÀÌ »ç¿ëÇϸé, (FancyIndexed ¸ñ·ÏÀÌ »ç¿ëÇÑ) pre ¾È¿¡ img¿Í hr ¿ä¼Ò »ç¿ëÀ» ±ÝÁöÇÑ ¸¶Áö¸· Ç¥ÁØÀÎ HTML 3.2¿¡ ¾Ë¸ÂÀº Ãâ·ÂÀÌ µÈ´Ù.
    SuppressSize
    fancy ¸ñ·Ï¿¡¼­ ÆÄÀÏÅ©±â¸¦ Ç¥½ÃÇÏÁö ¾Ê´Â´Ù.
    TrackModified (¾ÆÆÄÄ¡ 2.0.23 ÀÌÈÄ)
    µð·ºÅ丮 ¸ñ·ÏÀÇ HTTP Çì´õ¿¡ Last-Modified¿Í ETag °ªÀ» Æ÷ÇÔÇÑ´Ù. ÀÌ ¿É¼ÇÀº ¿î¿µÃ¼Á¦¿Í ÆÄÀϽýºÅÛ¿¡¼­ ÀûÀýÇÑ stat() °á°ú¸¦ ¾òÀ» ¼ö ÀÖÀ»¶§¸¸ À¯È¿ÇÏ´Ù. À¯´Ð½º ½Ã½ºÅÛ°ú OS2ÀÇ JFS, Win32ÀÇ NTFS¿¡¼­´Â °¡´ÉÇÏ´Ù. ¿¹¸¦ µé¾î, OS2¿Í Win32ÀÇ FATÀº ºÒ°¡´ÉÇÏ´Ù. ÀÌ ±â´ÉÀ» »ç¿ëÇϸé Ŭ¶óÀÌ¾ðÆ®³ª ÇÁ·Ï½Ã´Â HEAD ¿äûÀ» »ç¿ëÇÏ¿© ÆÄÀϸñ·ÏÀÇ º¯È­¸¦ ÃßÀûÇÒ ¼ö ÀÖ´Ù. ¾î¶² ¿î¿µÃ¼Á¦´Â »õ·Î¿î ÆÄÀϰú »èÁ¦ÇÑ ÆÄÀÏÀ» ¿Ã¹Ù·Î ÃßÀûÇÏÁö¸¸, µð·ºÅ丮¿¡ ÀÖ´Â ÆÄÀÏÀÇ Å©±â³ª ³¯Â¥ º¯È­¸¦ ÃßÀûÇÏÁö ¸øÇÔÀ» ÁÖÀÇÇ϶ó. ¸ðµç À¯´Ð½º Ç÷¡Æû¿¡¼­ ±âÁ¸ ÆÄÀÏÀÇ Å©±â³ª ³¯Â¥ º¯È­½Ã Last-Modified Çì´õ°¡ ¹Ù²îÁö¾Ê´Â´Ù. ÀÌ·± º¯È­°¡ Áß¿äÇÏ´Ù¸é ÀÌ ¿É¼ÇÀ» »ç¿ëÇÏÁö ¸¶¶ó.
    VersionSort (¾ÆÆÄÄ¡ 2.0a3 ÀÌÈÄ)
    VersionSort Ű¿öµå´Â ¹öÀü ¹øÈ£¸¦ Æ÷ÇÔÇÑ ÆÄÀϸíÀ» ÀÚ¿¬½º·´°Ô Á¤·ÄÇÑ´Ù. ¹®ÀÚ ºÎºÐÀº Á¤»óÀûÀÎ ¼ø¼­¸¦ Á¤·ÄÇÏÁö¸¸, ÆÄÀϰú ¼³¸í¿¡ ÀÖ´Â ¼ýÀÚ ºÎºÐÀº ¼ýÀÚ°ªÀ¸·Î ºñ±³ÇÑ´Ù.

    ¿¹Á¦:

    foo-1.7
    foo-1.7.2
    foo-1.7.12
    foo-1.8.2
    foo-1.8.2a
    foo-1.12

    ¼ö°¡ 0À¸·Î ½ÃÀÛÇϸé, ±× ¼ö¸¦ ºÐ¼ö·Î Ãë±ÞÇÑ´Ù:

    foo-1.001
    foo-1.002
    foo-1.030
    foo-1.04

    XHTML (¾ÆÆÄÄ¡ 2.0.49 ÀÌÈÄ)
    XHTML Ű¿öµå¸¦ »ç¿ëÇϸé mod_autoindex´Â HTML 3.2 ´ë½Å XHTML 1.0 Äڵ带 »ý¼ºÇÑ´Ù.
    Á¡ÁøÀûÀÎ IndexOptions

    ¾ÆÆÄÄ¡ 1.3.3¿¡¼­ IndexOptions Áö½Ã¾î 󸮹æ½ÄÀÌ Å©°Ô º¯È­µÇ¾ú´Ù. Ưº°È÷:

    • ÀÌÁ¦ ÇÑ µð·ºÅ丮¿¡ ´ëÇÑ ¿©·¯ IndexOptions Áö½Ã¾îµéÀ» ¼­·Î °áÇÕÇÑ´Ù. ´ÙÀ½ÀÇ °á°ú´Â:

      <Directory /foo> IndexOptions HTMLTable
      IndexOptions SuppressColumnsorting
      </Directory>

      ´ÙÀ½°ú °°´Ù

      IndexOptions HTMLTable SuppressColumnsorting

    • (¿¹¸¦ µé¾î, Ű¿öµå ¾Õ¿¡ +³ª -¸¦ ºÙÀÌ´Â) Á¡ÁøÀûÀÎ ¹®¹ýÀÌ Ãß°¡µÇ¾ú´Ù.

    Ű¿öµå ¾Õ¿¡ '+'³ª '-'°¡ ºÙÀ»¶§¸¶´Ù ÇØ´ç Ű¿öµå°¡ ÇöÀç (»óÀ§ µð·ºÅ丮¿¡¼­ »ó¼ÓµÇ¾úÀ») IndexOptions ¼³Á¤¿¡ ¹Ý¿µµÈ´Ù. ±×·¯³ª ¾Õ¿¡ ¾Æ¹«°Íµµ ¾ø´Â Ű¿öµå¸¦ ¸¸³ª¸é ¾ÆÁ÷±îÁö »ó¼ÓµÇ°Å³ª Á¡ÁøÀûÀ¸·Î º¯°æµÈ ¼³Á¤À» ¸ðµÎ Áö¿î´Ù. ´ÙÀ½ ¿¹Á¦¸¦ »ìÆìº¸ÀÚ:

    IndexOptions +ScanHTMLTitles -IconsAreLinks FancyIndexing
    IndexOptions +SuppressSize

    ¾Õ¿¡ ¾Æ¹«°Íµµ ¾ø´Â FancyIndexingÀÌ ÀÌÀüÀÇ Á¡ÁøÀûÀÎ ¼³Á¤À» Áö¿ö¹ö·ÈÁö¸¸ ¼³Á¤ÀÌ ´Ù½Ã Ãß°¡µÇ¿© °á°ú´Â IndexOptions FancyIndexing +SuppressSize¿Í °°´Ù.

    ƯÁ¤ µð·ºÅ丮¿¡ ´ëÇØ ¹«Á¶°ÇÀûÀÎ IndexOptions¸¦ ¼³Á¤ÇÏ·Á¸é Ű¿öµå ¾Õ¿¡ +³ª -¸¦ »ç¿ëÇÏÁö¸»°í »ó¼ÓµÈ ¼³Á¤À» Áö¿î´Ù.

    top

    IndexOrderDefault Áö½Ã¾î

    ¼³¸í:µð·ºÅ丮 ¸ñ·ÏÀÇ ±âº» ¼ø¼­¸¦ ¼³Á¤ÇÑ´Ù
    ¹®¹ý:IndexOrderDefault Ascending|Descending Name|Date|Size|Description
    ±âº»°ª:IndexOrderDefault Ascending Name
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    IndexOrderDefault Áö½Ã¾î´Â FancyIndexing ¸ñ·Ï ¿É¼Ç°ú ÇÔ²² »ç¿ëÇÑ´Ù. ±âº»ÀûÀ¸·Î fancyindexed µð·ºÅ丮 ¸ñ·ÏÀº ÆÄÀÏ¸í ¿À¸§Â÷¼øÀÌ´Ù. IndexOrderDefault´Â ÀÌ Ãʱ⠼ø¼­¸¦ º¯°æÇÒ ¼ö ÀÖ´Ù.

    IndexOrderDefault´Â µÎ ¾Æ±Ô¸ÕÆ®¸¦ ¹Þ´Â´Ù. ù¹øÂ°´Â ¼ø¼­ÀÇ ¹æÇâÀ» Áö½ÃÇÏ´Â Ascending (¿À¸¥Â÷¼ø) À̳ª Descending (³»¸²Â÷¼ø) Áß Çϳª´Ù. µÎ¹øÂ° ¾Æ±Ô¸ÕÆ®´Â ÀÏÂ÷ ¼ø¼­¸¦ ³ªÅ¸³»´Â Ű¿öµå Name, Date, Size, Description Áß Çϳª´Ù. ÀÌÂ÷ ¼ø¼­´Â Ç×»ó ÆÄÀÏ¸í ¿À¸§Â÷¼øÀÌ´Ù.

    ÀÌ Áö½Ã¾î¿Í SuppressColumnSorting ¸ñ·Ï ¿É¼ÇÀ» °°ÀÌ »ç¿ëÇÏ¸é Æ¯Á¤ ¼ø¼­·Î¸¸ µð·ºÅ丮 ¸ñ·ÏÀ» ¸¸µç´Ù. ÀÌ °æ¿ì Ŭ¶óÀÌ¾ðÆ®´Â ´Ù¸¥ ¼ø¼­·Î µð·ºÅ丮 ¸ñ·ÏÀ» ¿äûÇÏÁö ¸øÇÑ´Ù.

    top

    IndexStyleSheet Áö½Ã¾î

    ¼³¸í:µð·ºÅ丮 ¸ñ·Ï¿¡ CSS ½ºÅ¸ÀϽ¬Æ®¸¦ Ãß°¡ÇÑ´Ù
    ¹®¹ý:IndexStyleSheet url-path
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    IndexStyleSheet Áö½Ã¾î´Â µð·ºÅ丮 ¸ñ·Ï¿¡¼­ CSS·Î »ç¿ëÇÒ ÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù.

    Example

    IndexStyleSheet "/css/style.css"

    top

    ReadmeName Áö½Ã¾î

    ¼³¸í:ÆÄÀϸñ·Ï ¸¶Áö¸·¿¡ »ðÀÔÇÒ ÆÄÀÏÀÇ À̸§
    ¹®¹ý:ReadmeName filename
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_autoindex

    ReadmeName Áö½Ã¾î´Â ÆÄÀϸñ·Ï ³¡¿¡ »ðÀÔÇÒ ÆÄÀÏÀÇ À̸§À» ÁöÁ¤ÇÑ´Ù. FilenameÀº Æ÷ÇÔÇÒ ÆÄÀϸíÀ̰í, ¸ñ·ÏÀ» ¸¸µé·Á´Â À§Ä¡ÀÇ »ó´ë°æ·Î·Î ¹Þ¾ÆµéÀδÙ. FilenameÀÌ ½½·¡½¬·Î ½ÃÀÛÇϸé DocumentRoot¿¡ »ó´ë°æ·Î·Î ¹Þ¾ÆµéÀδÙ.

    ¿¹Á¦

    ReadmeName FOOTER.html

    ¿¹Á¦ 2

    ReadmeName /include/FOOTER.html

    ÀÌ µ¿ÀÛÀ» ÀÚ¼¼È÷ ¼³¸íÇÑ HeaderNameµµ Âü°íÇ϶ó.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_so.html.tr.utf80000644000000000000500000003601413447004010017674 0ustar rootsrc mod_so - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_so

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    Açıklama:Modüllerin ve çalıştırılabilir kodun sunucunun başlatılması veya yeniden başlatılması sırasında yüklenmesini sağlar.
    Durum:Eklenti
    Modül Betimleyici:so_module
    Kaynak Dosyası:mod_so.c
    Uyumluluk:Windows için bu bir temel modüldür (sunucu bunu daima içerir).

    Özet

    Seçilen işletim sistemleri üzerinde bu modül Apache HTTP Sunucusunun yeniden derlenmesini gerektirmeden modüllerin Devingen Paylaşımlı Nesne (DSO) mekanizması üzerinden kullanılabilmesini sağlar.

    Unix’te yüklenen kod genellikle paylaşımlı nesne dosyalarından (.so uzantılı dosyalar), Windows’ta ise ya .so ya da .dll uzantılı dosyalardan gelir.

    Uyarı

    Apache HTTP Sunucusunun ana sürümlerinden biri (1.3, 2.0, 2.2, 2.4 gibi) için derlenmiş modüller genelde bir diğerinde çalışmaz. Genellikle aralarında API değişikliği sözkonusu olduğundan çalışması için modüllerde yeni sürüme göre değişiklik yapılması gerekir.

    top

    Yüklenebilir Modüllerin Windows için Oluşturulması

    Bilginize

    Windows üzeinde yüklenebilir dosyalar genelde .dll sonekini alırlar. Apache httpd modülleri ise diğer platformlardaki gibi mod_filanca.so biçeminde isimlendirilmektedir. Bununla birlikte, üçüncü parti modüllerden bazılarının (PHP gibi) hala .dll sonekini kullandığı görülmektedir.

    mod_so modülü ApacheModuleFoo.dll biçeminde isimlendirilmiş modülleri hala yüklemekteyse de yeni adlandırma uzlaşımı tercih edilmelidir. Yüklenebilir modülleri 2.0’a dönüştürüyorsanız, lütfen isimlerini de 2.0 uzlaşımına uygun hale getiriniz.

    Apache httpd modül programlama arayüzü Unix ve Windows sürümleri arasında değişiklik göstermez. Unix için kullanılan çoğu modül hiç değişiklik yapmadan ya da çok küçük bir değişiklikle Windows’ta da çalışmaktadır. Çalışmayanlar Unix platformunun sahip olduğu ancak Windows platformunun sahip olmadığı nitelikleri kullanan modüllerdir.

    Bir modül Windows’ta çalıştığı zaman, sunucuya iki şekilde yüklenebilir. Unix’te olduğu gibi, doğrudan sunucunun içinde derlenebilir. Windows için hazırlanan Apache httpd paketi, Unix için geçerli olan Configure betiğini içermediğinden modülün kaynak dosyası ApacheCore proje dosyasına, sembolleri de os\win32\modules.c dosyasına eklenmelidir.

    İkinci yol ise modülü bir paylaşımlı kütüphane olarak çalışma anında LoadModule yönergesi ile yüklemek için bir DLL olarak derlemektir. Bu DLL modüller dağıtılabilir ve sunucuyu yeniden derlemek gerekmeksizin her Windows için Apache httpd kurulumunda çalışabilir.

    Bir modül DLL’i oluşturmak için modülün kaynak dosyasında küçük bir değişiklik yapmak gerekir: Modül kaydının daha sonra oluşturulacak olan DLL’den ihraç edilebilmesi gerekir (aşağıya bakınız). Bunu yapmak için modülün modül kaydı tanımına (Apache httpd başlık dosyalarında tanımlanmış olan) AP_MODULE_DECLARE_DATA eklenmelidir. Örneğin, modülünüz

    module foo_module;

    diye bir satır içeriyorsa bunu,

    module AP_MODULE_DECLARE_DATA foo_module;

    olarak değiştirmelisiniz. Bunun yalnız Windows üzerinde etkili olduğunu ve Unix için modül kodunda bir değişiklik gerekmediğini unutmayınız. Ayrıca, .DEF dosyaları hakkında bilgi sahibi iseniz modül kodunda değişiklik yapmak yerine modül kaydını bu yöntemle de ihraç edebilirsiniz.

    Artık modülü içeren bir DLL oluşturmaya hazırsınız. Bunu, libhttpd.dll paylaşımlı kütüphanesi derlenirken oluşturulan libhttpd.lib ihraç kütüphanesi ile ilintilemeniz gerekecektir. Ayrıca, Apache httpd başlık dosyalarının doğru konumlandığından emin olmak için derleyici seçeneklerinde değişiklik yapmanız gerekebilir. Bu kütüphaneyi sunucunuzun kök dizini altındaki modules dizininde bulabilirsiniz. En iyisi derleme ortamının doğru yapılandırıldığından emin olmak için ya ağaçta mevcut modüllerden birinin .dsp dosyasını gaspedersiniz ya da kendi .dsp dosyanızın ilintileme seçenekleriyle derleyicininkileri karşılaştırırsınız.

    Artık modülünüzün DLL sürümünü oluşturmalısınız. DLL’i sunucunuzun kök dizininin altında bulunan modules dizinine yerleştirdikten sonra LoadModule yönergesi ile sunucunuza yükleyebilirsiniz.

    top

    LoadFile Yönergesi

    Açıklama:Belirtilen nesne dosyasını veya kütüphaneyi sunucu ile ilintiler.
    Sözdizimi:LoadFile dosya-ismi [dosya-ismi] ...
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Eklenti
    Modül:mod_so

    LoadFile yönergesi ismi belirtilen kütüphaneleri veya nesne dosyalarını sunucu başlatılırken veya yeniden başlatılırken sunucu ile ilintiler. Yönerge, bazı modüllerin çalışması sırasında gereken ek kodların yüklenmesi için kullanılır. dosya-ismi olarak mutlak bir dosya yolu belirtilebileceği gibi ServerRoot’a göreli bir dosya yolu da belirtilebilir.

    Örnek:

    LoadFile libexec/libxmlparse.so
    top

    LoadModule Yönergesi

    Açıklama:Belirtilen nesne dosyasını veya kütüphaneyi sunucu ile ilintiler ve etkin modül listesine ekler.
    Sözdizimi:LoadModule modül dosya-ismi
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Eklenti
    Modül:mod_so

    LoadModule yönergesi dosya-ismi ile belirtilen nesne dosyasını veya kütüphaneyi sunucu ile ilintiler ve etkin modül listesine belirtilen modül ismiyle ekler. modül, modülün kaynak dosyasında module türündeki tek harici değişkenin ismi olup modül belgelerinde Modül Betimleyici olarak geçer.

    Örneğin,

    LoadModule status_module modules/mod_status.so

    satırı ile ismi belirtilen dosya ServerRoot dizini altındaki modules alt dizininden yüklenir.

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_setenvif.html.ja.utf80000644000000000000500000005323613412755316021066 0ustar rootsrc mod_setenvif - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_setenvif

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:リクエストã®ç‰¹å¾´ã«åŸºã¥ã„ãŸç’°å¢ƒå¤‰æ•°ã®è¨­å®šã‚’å¯èƒ½ã«ã™ã‚‹
    ステータス:Base
    モジュール識別å­:setenvif_module
    ソースファイル:mod_setenvif.c

    概è¦

    mod_setenvif モジュールã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ã‚ã‚‹å´é¢ãŒæŒ‡å®šã•ã‚ŒãŸæ­£è¦è¡¨ç¾ ã«åˆã†ã‹ã©ã†ã‹ã«ã‚ˆã£ã¦ç’°å¢ƒå¤‰æ•°ã‚’設定ã™ã‚‹æ©Ÿèƒ½ã‚’æä¾›ã—ã¾ã™ã€‚ ã“れらã®ç’°å¢ƒå¤‰æ•°ã‚’使用ã—ã¦ã€ã‚µãƒ¼ãƒã®ä»–ã®éƒ¨åˆ†ãŒã©ã®ã‚ˆã†ãªå‹•作をã™ã‚‹ã‹ã‚’ 決定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒæä¾›ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ 設定ファイルã«ç¾ã‚Œã‚‹é †ç•ªã«é©ç”¨ã•れã¾ã™ã€‚ ãれを使ã£ã¦ã€æ¬¡ã®ä¾‹ã®ã‚ˆã†ã«ã‚ˆã‚Šè¤‡é›‘ãªè¨­å®šã‚’ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“れã¯ã€ãƒ–ラウザ㌠mozilla ã§ã¯ã‚ã‚‹ã‘れã©ã€MSIE ã§ã¯ãªã„ã¨ãã« netscape を設定ã—ã¾ã™ã€‚

    BrowserMatch ^Mozilla netscape
    BrowserMatch MSIE !netscape

    top

    BrowserMatch ディレクティブ

    説明:HTTP User-Agent ã«åŸºã¥ã„ã¦ç’°å¢ƒå¤‰æ•°ã‚’設定ã™ã‚‹
    æ§‹æ–‡:BrowserMatch regex [!]env-variable[=value] [[!]env-variable[=value]] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Base
    モジュール:mod_setenvif

    BrowserMatch 㯠SetEnvIf ディレクティブ㮠特例ã§ã€User-Agent HTTP リクエストヘッダã«åŸºã¥ã„㦠環境変数を設定ã—ã¾ã™ã€‚以下㮠2 行ã®åŠ¹æžœã¯åŒã˜ã«ãªã‚Šã¾ã™:

    BrowserMatchNoCase Robot is_a_robot
    SetEnvIfNoCase User-Agent Robot is_a_robot

    ãã®ä»–ã®ä¾‹:

    BrowserMatch ^Mozilla forms jpeg=yes browser=netscape
    BrowserMatch "^Mozilla/[2-3]" tables agif frames javascript
    BrowserMatch MSIE !javascript

    top

    BrowserMatchNoCase ディレクティブ

    説明:HTTP User-Agent ã«åŸºã¥ã„ã¦å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã« 環境変数を設定ã™ã‚‹
    æ§‹æ–‡:BrowserMatchNoCase regex [!]env-variable[=value] [[!]env-variable[=value]] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Base
    モジュール:mod_setenvif

    BrowserMatchNoCase ディレクティブ㯠æ„味的ã«ã¯ BrowserMatch ディレクティブ㨠åŒã˜ã§ã™ã€‚ãŸã ã—ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—ãªã„ マッãƒãƒ³ã‚°ã‚’行ãªã„ã¾ã™ã€‚例ãˆã°:

    BrowserMatchNoCase mac platform=macintosh
    BrowserMatchNoCase win platform=windows

    BrowserMatch ディレクティブ㨠BrowserMatchNoCase ディレクティブ㯠SetEnvIf ディレクティブ㨠SetEnvIfNoCase ディレクティブ㮠特例ã§ã™ã€‚以下㮠2 行ã®åŠ¹æžœã¯åŒã˜ã§ã™:

    BrowserMatchNoCase Robot is_a_robot
    SetEnvIfNoCase User-Agent Robot is_a_robot

    top

    SetEnvIf ディレクティブ

    説明:リクエストã®å±žæ€§ã«åŸºã¥ã„ã¦ç’°å¢ƒå¤‰æ•°ã‚’設定ã™ã‚‹
    æ§‹æ–‡:SetEnvIf attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Base
    モジュール:mod_setenvif

    SetEnvIf ディレクティブã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®å±žæ€§ã«åŸºã¥ã„ã¦ç’°å¢ƒå¤‰æ•°ã‚’定義ã—ã¾ã™ã€‚ 最åˆã®å¼•æ•°ã§æŒ‡å®šã§ãã‚‹ attribute ã¯ä»¥ä¸‹ã® 4 ã¤ã®ã©ã‚Œã‹ã§ã™:

    1. HTTP リクエストヘッダフィールド (詳ã—ã„æƒ…報㯠RFC 2616 ã‚’ å‚ç…§ã—ã¦ãã ã•ã„)。例ãˆã°ã€Host, User-Agent, Referer, Accept-Language ã§ã™ã€‚リクエストヘッダã®é›†åˆã‚’ç¾ã™ãŸã‚ã« æ­£è¦è¡¨ç¾ã‚’使ã†ã“ã¨ã‚‚ã§ãã¾ã™ã€‚
    2. 以下ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ä¸€éƒ¨åˆ†ã®ã©ã‚Œã‹:
      • Remote_Host - リクエストを行ãªã£ã¦ã„るクライアントã®ãƒ›ã‚¹ãƒˆå (ã‚‚ã—ã‚れã°)
      • Remote_Addr - リクエストを行ãªã£ã¦ã„るクライアント㮠IP アドレス
      • Server_Addr - リクエストをå—ã‘å–ã£ãŸã‚µãƒ¼ãƒã® IP アドレス (2.0.43 以é™ã®ã¿)
      • Request_Method - 使用ã•れã¦ã„るメソッドå (GET, POST ãªã©)
      • Request_Protocol - リクエストãŒè¡Œãªã‚れãŸãƒ—ロトコルã®åå‰ã¨ãƒãƒ¼ã‚¸ãƒ§ãƒ³ (例ãˆã°ã€"HTTP/0.9", "HTTP/1.1" ãªã©ã€‚)
      • Request_URI - URL ã®ã‚¹ã‚­ãƒ¼ãƒ ã¨ãƒ›ã‚¹ãƒˆã®å¾Œã®éƒ¨åˆ†ã€‚ è¿½åŠ ã®æƒ…å ±ã¨ã—ã¦ã€ã‚¯ã‚¨ãƒªãƒ¼ã‚¹ãƒˆãƒªãƒ³ã‚°ã«ãƒžãƒƒãƒã•ã›ã‚‹å ´åˆã«ã¤ã„ã¦ã¯ RewriteCond ディレクティブをå‚ç…§ã—ã¦ãã ã•ã„。
    3. リクエストã¨é–¢é€£ä»˜ã‘られる環境変数ã®ãƒªã‚¹ãƒˆã€‚ã“れã«ã‚ˆã‚Š SetEnvIf ディレクティブãŒä»¥å‰ã®ãƒžãƒƒãƒã®çµæžœã‚’ 使ã†ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ã“ã®æ–¹æ³•ã®ãƒ†ã‚¹ãƒˆã§ã¯å‰ã®éƒ¨åˆ†ã«ã‚ã‚‹ SetEnvIf[NoCase] ã®çµæžœã®ã¿ã‚’使用å¯èƒ½ã§ã™ã€‚「å‰ã€ã¨ã¯ã€ より広ã„範囲ã«å¯¾ã—ã¦å®šç¾©ã•れã¦ã„ã‚‹ (サーãƒå…¨ä½“ã®ã‚ˆã†ã«) ã‹ã€ç¾åœ¨ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㮠範囲ã§ã‚ˆã‚Šå‰ã®éƒ¨åˆ†ã§å®šç¾©ã•れã¦ã„ã‚‹ã‹ã€ã¨ã„ã†ã“ã¨ã§ã™ã€‚ 環境変数ã§ã‚ã‚‹å¯èƒ½æ€§ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ç‰¹æ€§ã«å¯¾ã™ã‚‹ãƒžãƒƒãƒãŒå­˜åœ¨ã›ãšã€ attribute ã«æ­£è¦è¡¨ç¾ãŒä½¿ã‚れãªã‹ã£ãŸã¨ãã«ã®ã¿è€ƒæ…®ã•れã¾ã™ã€‚
    4. SSL クライアント証明書拡張ã¸ã®å‚ç…§ã§ã€oid オブジェクト ID ã§æŒ‡å®šã•れるもã®ã€‚ SSL リクエストã§ãªã„å ´åˆã‚„ oid ãŒè¨­å®šã•れã¦ã„ãªã‹ã£ãŸå ´åˆã¯ã€ 変数ã¯ã‚»ãƒƒãƒˆã•れã¾ã›ã‚“。oid ãŒè¤‡æ•°è¦‹ã¤ã‹ã£ãŸå ´åˆã¯ ãã‚Œã‚‰ã®æ–‡å­—列ã¯ã‚«ãƒ³ãƒž ',' 区切りã§é€£çµã•れã¾ã™ã€‚ oid ã¯æ–‡å­—列型拡張ã¸ã®å‚ç…§ã§ãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    二ã¤ç›®ã®å¼•æ•° (regex) 㯠正è¦è¡¨ç¾ã§ã™ã€‚ ã“れ㯠POSIX.2 ã® egrep å½¢å¼ã®æ­£è¦è¡¨ç¾ã¨ä¼¼ã¦ã„ã¾ã™ã€‚regex ㌠attribute ã«ãƒžãƒƒãƒã™ã‚‹å ´åˆã¯ã€æ®‹ã‚Šã®å¼•æ•°ãŒè©•価ã•れã¾ã™ã€‚

    残りã®å¼•æ•°ã¯è¨­å®šã™ã‚‹å¤‰æ•°ã®åå‰ã§ã€è¨­å®šã•れる値を指定ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ ã“れã¯ã€

    1. varname
    2. !varname
    3. varname=value

    ã®ã©ã‚Œã‹ã®å½¢å¼ã«ãªã‚Šã¾ã™ã€‚

    最åˆã®å½¢å¼ã§ã¯ã€å€¤ã¯ "1" ã«è¨­å®šã•れã¾ã™ã€‚ 二ã¤ç›®ã¯ã‚‚ã—値ãŒå®šç¾©ã•れã¦ã„れã°ãれをå–り除ãã¾ã™ã€‚ 三ã¤ç›®ã¯å¤‰æ•°ã‚’ value ã®ä¸Žãˆã‚‰ã‚ŒãŸå€¤ã«è¨­å®šã—ã¾ã™ã€‚ 2.0.51 以é™ã§ã¯ã€value 内㫠$1..$9 ãŒå­˜åœ¨ã™ã‚Œã°ãれをèªè­˜ã—ã€regex ã®å¯¾å¿œã™ã‚‹ä¸¸æ‹¬å¼§ã§å›²ã¾ã‚ŒãŸéƒ¨åˆ†ã§ ç½®æ›ã—ã¾ã™ã€‚

    例:

    SetEnvIf Request_URI "\.gif$" object_is_image=gif
    SetEnvIf Request_URI "\.jpg$" object_is_image=jpg
    SetEnvIf Request_URI "\.xbm$" object_is_image=xbm
    :
    SetEnvIf Referer www\.mydomain\.example\.com intra_site_referral
    :
    SetEnvIf object_is_image xbm XBIT_PROCESSING=1
    :
    SetEnvIf OID("2.16.840.1.113730.1.13") "(.*)" NetscapeComment=$1
    :
    SetEnvIf ^TS* ^[a-z].* HAVE_TS

    åˆã‚ã®ä¸‰ã¤ã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒç”»åƒã§ã‚ã‚‹ã¨ãã«ç’°å¢ƒå¤‰æ•° object_is_image を設定ã—ã¾ã™ã€‚å››ã¤ç›®ã¯ å‚ç…§å…ƒã®ãƒšãƒ¼ã‚¸ãŒã‚¦ã‚§ãƒ–サイト www.mydomain.example.com ã«ã‚ã‚‹ã¨ãã« intra_site_referral を設定ã—ã¾ã™ã€‚

    6番目ã®ä¾‹ã§ã¯ç’°å¢ƒå¤‰æ•° NetscapeComment を定義ã—ã¦ã€ ãã®å€¤ãŒ SSL クライアント証明書ã®å¯¾å¿œã™ã‚‹ãƒ•ã‚£ãƒ¼ãƒ«ãƒ‰ã®æ–‡å­—列ã§ã‚るよã†ã«ã—ã¾ã™ã€‚ ãŸã ã— SSL クライアント証明書ã®å¯¾å¿œã™ã‚‹ãƒ•ã‚£ãƒ¼ãƒ«ãƒ‰ã«æ–‡å­—列ãŒå­˜åœ¨ã™ã‚‹ ã¨ãã«ã®ã¿ã€ç’°å¢ƒå¤‰æ•°ã¯è¨­å®šã•れã¾ã™ã€‚

    最後ã®ä¾‹ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã« "TS" ã§å§‹ã¾ã‚Šã€å€¤ãŒé›†åˆ [a-z] ã®ã©ã‚Œã‹ã§ å§‹ã¾ã‚‹ãƒ˜ãƒƒãƒ€ãŒã‚ã‚‹ã¨ãã« HAVE_TS を設定ã—ã¾ã™ã€‚

    å‚ç…§

    top

    SetEnvIfExpr ディレクティブ

    説明:Sets environment variables based on an ap_expr expression
    æ§‹æ–‡:
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    ステータス:Base
    モジュール:mod_setenvif

    Documentation not yet translated. Please see English version of document.

    top

    SetEnvIfNoCase ディレクティブ

    説明:リクエストã®å±žæ€§ã«åŸºã¥ã„ã¦å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã«ç’°å¢ƒå¤‰æ•°ã‚’設定ã™ã‚‹
    æ§‹æ–‡:SetEnvIfNoCase attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Base
    モジュール:mod_setenvif

    SetEnvIfNoCase ã¯æ„味的ã«ã¯ SetEnvIf ディレクティブ㨠åŒã˜ã§ã™ã€‚é•ã„ã¯ã€æ­£è¦è¡¨ç¾ã®ãƒžãƒƒãƒãƒ³ã‚°ãŒå¤§æ–‡å­—å°æ–‡å­—を区別ã—ãªã„㧠行ãªã‚れるã“ã¨ã§ã™ã€‚例ãˆã°:

    SetEnvIfNoCase Host Apache\.Org site=apache

    ã“れ㯠HTTP リクエストヘッダã«ãƒ•ィールド Host: ㌠ã‚りã€ãã®å€¤ãŒ Apache.Org ã‚„ apache.org〠ãã®ä»–ã®å¤§æ–‡å­—å°æ–‡å­—ã®çµ„ã¿åˆã‚ã›ã§ã‚ã£ãŸã¨ãã« site 環境変数を "apache" ã«è¨­å®šã—ã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/module-dict.html.ko.euc-kr0000644000000000000500000002077213412755316021130 0ustar rootsrc ¸ðµâÀ» ¼³¸íÇϱâÀ§ÇØ »ç¿ëÇÑ ¿ë¾îµé - Apache HTTP Server Version 2.4
    <-

    ¸ðµâÀ» ¼³¸íÇϱâÀ§ÇØ »ç¿ëÇÑ ¿ë¾îµé

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡ ¸ðµâÀ» ¼³¸íÇϱâÀ§ÇØ »ç¿ëÇÑ ¿ë¾î¸¦ ¼³¸íÇÑ´Ù.

    top

    ¼³¸í

    ¸ðµâ ¸ñÀû¿¡ ´ëÇÑ °£´ÜÇÑ ¼³¸í.

    top

    »óÅÂ

    ¸ðµâÀÌ ¾ÆÆÄÄ¡ À¥¼­¹ö¿Í ¾ó¸¶³ª ¹ÐÁ¢È÷ ¿¬°üµÇÀÖ´ÂÁö ³ªÅ¸³½´Ù. Áï, ƯÁ¤ ¸ðµâ°ú ¸ðµâÀÇ ±â´ÉÀ» »ç¿ëÇϱâÀ§Çؼ­ ¼­¹ö¸¦ ´Ù½Ã ÄÄÆÄÀÏÇØ¾ß ÇÒ °æ¿ì°¡ ÀÖ´Ù. ÀÌ ¼Ó¼ºÀÇ °ªÀº:

    MPM
    »óŰ¡ "MPM"ÀÎ ¸ðµâÀº ´ÙÁßó¸® ¸ðµâÀÌ´Ù. ´Ù¸¥ Á¾·ùÀÇ ¸ðµâ°ú ´Þ¸® ¾ÆÆÄÄ¡´Â ¿ÀÁ÷ ÇÑ MPM¸¸À» »ç¿ëÇÑ´Ù. ÀÌ·± Á¾·ùÀÇ ¸ðµâÀº ±âº»ÀûÀÎ ¿äû ó¸®¿Í ºÐ¹è¸¦ ´ã´çÇÑ´Ù.
    Base
    »óŰ¡ "Base"ÀÎ ¸ðµâÀº ±âº»ÀûÀ¸·Î ¼­¹ö¿Í °°ÀÌ ÄÄÆÄÀϵǹǷÎ, ¼³Á¤¿¡¼­ ¸ðµâÀ» Á¦°ÅÇÏÁö ¾Ê´Â ÇÑ º¸Åë »ç¿ëÇÒ ¼ö ÀÖ´Ù.
    Extension
    »óŰ¡ "Extension"ÀÎ ¸ðµâÀº º¸Åë ¼­¹ö¿Í °°ÀÌ ÄÄÆÄÀϵÇÁö ¾Ê´Â´Ù. ¸ðµâ°ú ¸ðµâÀÇ ±â´ÉÀ» »ç¿ëÇÏ·Á¸é ¼­¹ö ÄÄÆÄÀÏ ±¸¼ºÆÄÀÏÀ» º¯°æÇÏ°í ¾ÆÆÄÄ¡¸¦ ´Ù½Ã ÄÄÆÄÀÏÇØ¾ß ÇÑ´Ù.
    Experimental
    "Experimental" »óÅ´ ¸ðµâÀÌ ¾ÆÆÄÄ¡ ¹èÆ÷º»¿¡ Æ÷ÇÔµÇÀÖÁö¸¸, »ç¿ëÇÏ·Á¸é À§ÇèÀ» °¨¼öÇØ¾ß ÇÑ´Ù. ¸ðµâ¿¡ ´ëÇÑ ¹®¼­°¡ ÀÖÁö¸¸, ¸ðµâÀ» Áö¿øÇÑ´Ù´Â ¸»Àº ¾Æ´Ï´Ù.
    External
    "External" »óÅ´ ±âº» ¾ÆÆÄÄ¡ ¹èÆ÷º»¿¡ Æ÷ÇÔµÇÁö ¾ÊÀº ¸ðµâ("Á¦»ïÀÚ°¡ ¸¸µç ¸ðµâ")ÀÌ´Ù. ¿ì¸®´Â ÀÌ·± ¸ðµâ¿¡ Ã¥ÀÓÀÌ ¾ø°í Áö¿øÇÏÁöµµ ¾Ê´Â´Ù.
    top

    ¼Ò½ºÆÄÀÏ

    °£´ÜÇÏ°Ô ¸»Çؼ­ ¸ðµâ ¼Ò½ºÄڵ尡 ÀÖ´Â ¼Ò½ºÆÄÀϸíÀÌ´Ù. <IfModule> Áö½Ã¾î¿¡¼­ »ç¿ëÇÏ´Â À̸§À̱⵵ ÇÏ´Ù.

    top

    ¸ðµâ¸í

    ¸ðµâÀ» ÁöĪÇÏ´Â ¹®ÀÚ¿­·Î, ¸ðµâÀ» µ¿ÀûÀ¸·Î ÀоîµéÀÌ´Â LoadModule Áö½Ã¾î¿¡¼­ »ç¿ëÇÑ´Ù. Á¤È®È÷ ¸»ÇÏ¸é ¼Ò½ºÆÄÀÏ¿¡¼­ module ÇüÀÇ ¿ÜºÎº¯¼ö À̸§ÀÌ´Ù.

    top

    Áö¿ø

    ¸ðµâÀÌ ¿ø·¡ ¾ÆÆÄÄ¡ ¹öÀü 2 ¹èÆ÷º»¿¡ Æ÷ÇÔµÇÁö ¾Ê¾Ò´Ù¸é, ¸ðµâÀ» óÀ½ ¼Ò°³ÇÑ ¹öÀüÀ» ¾Ë·ÁÁØ´Ù. ¶Ç, ¸ðµâÀÌ Æ¯Á¤ Ç÷¡Æû¿ëÀ̶ó¸é »ó¼¼È÷ ¼³¸íÇÑ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_watchdog.html.fr.utf80000644000000000000500000002050113412755316021045 0ustar rootsrc mod_watchdog - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_watchdog

    Langues Disponibles:  en  |  fr 

    Description:Fournit une infrastructure permettant à d'autres modules d'exécuter des tâches périodiques.
    Statut:Base
    Identificateur de Module:watchdog_module
    Fichier Source:mod_watchdog.c
    Compatibilité:Disponible à partir de la version 2.3 du serveur HTTP Apache

    Sommaire

    Le module mod_watchdog définit des branchements (hooks) programmés pour permettre à d'autres modules d'exécuter des tâches périodiques. Ces modules peuvent enregistrer des gestionnaires (handlers) pour les branchements de mod_watchdog. Actuellement, seuls les modules suivants de la distribution Apache utilisent cette fonctionnalité :

    Pour qu'un module puisse utiliser la fonctionnalité de mod_watchdog, ce dernier doit être lié statiquement avec le serveur httpd ; s'il a été lié dynamiquement, il doit être chargé avant l'appel au module qui doit utiliser sa fonctionnalité.
    top

    Directive WatchdogInterval

    Description:Intervalle Watchdog en secondes
    Syntaxe:WatchdogInterval time-interval[s]
    Défaut:WatchdogInterval 1
    Contexte:configuration globale
    Statut:Base
    Module:mod_watchdog

    Cette directive permet de définir l'intervalle entre chaque exécution du branchement watchdog. La valeur par défaut est de 1 seconde.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_speling.html.fr.utf80000644000000000000500000002667213412755316020725 0ustar rootsrc mod_speling - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_speling

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Tente de corriger les erreurs de casse dans les URLs ou les fautes de frappe mineures.
    Statut:Extension
    Identificateur de Module:speling_module
    Fichier Source:mod_speling.c

    Sommaire

    Il arrive que des requêtes pour des documents ne puissent pas être traitées par le serveur Apache de base à cause d'une erreur de frappe ou de casse. Ce module permet de traiter ce problème en essayant de trouver un document correspondant, même lorsque tous les autres modules y ont renoncé. Sa méthode de travail consiste à comparer chaque nom de document du répertoire demandé avec le document de la requête sans tenir compte de la casse, et en acceptant jusqu'à une erreur (insertion, omission, inversion de caractère ou caractère erroné). Une liste de tous les documents qui correspondent est alors élaborée en utilisant cette stratégie.

    Si après le parcours du répertoire,

    • aucun document correspondant n'a été trouvé, Apache procèdera normalement et renverra une erreur "document non trouvé".
    • un seul document correspondant pratiquement à la requête a été trouvé, celui-ci est renvoyé sous la forme d'une réponse de redirection.
    • plusieurs documents pouvant correspondre ont été trouvés, une liste des documents est envoyée au client afin que ce dernier puisse sélectionner le document correct.
    top

    Directive CheckCaseOnly

    Description:Limite l'action du module aux corrections de majuscules
    Syntaxe:CheckCaseOnly on|off
    Défaut:CheckCaseOnly Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Options
    Statut:Extension
    Module:mod_speling

    Lorsqu'elle est définie à "on", cette directive permet de limiter l'action du module aux inversions majuscule/minuscule. Les autres corrections ne sont pas effectuées.

    top

    Directive CheckSpelling

    Description:Active le module de correction
    Syntaxe:CheckSpelling on|off
    Défaut:CheckSpelling Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Options
    Statut:Extension
    Module:mod_speling

    Cette directive permet d'activer ou de désactiver le module de correction. Lorsqu'il est activé, rappelez-vous que :

    • le parcours du répertoire nécessaire à la correction aura un impact sur les performances du serveur lorsque de nombreuses corrections devront être effectuées au même moment.
    • l'arborescence ne doit pas contenir de documents sensibles qui pourraient être considérés par erreur comme correspondant à la requête.
    • le module ne corrige pas les noms d'utilisateur mal orthographiés (comme dans http://mon.serveur/~apahce/), mais seulement les noms de fichiers ou de répertoires.
    • les corrections s'appliquent strictement aux fichiers existants, si bien qu'une requête pour <Location "/status"> pour être traitée de manière incorrecte comme une requête pour le fichier négocié "/stats.html".

    mod_speling ne doit pas être activé pour des répertoires où DAV l'est aussi, car il va essayer de "corriger" les noms des ressources nouvellement créées en fonction des noms de fichiers existants ; par exemple, lors du chargement d'un nouveau document doc43.html, il est possible qu'il redirige vers un document existant doc34.html, ce qui ne correspond pas à ce que l'on souhaite.

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_file.html.ja.utf80000644000000000000500000003070513412755316021355 0ustar rootsrc mod_authn_file - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_authn_file

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:テキストファイルを用ã„ãŸãƒ¦ãƒ¼ã‚¶èªè¨¼
    ステータス:Base
    モジュール識別å­:authn_file_module
    ソースファイル:mod_authn_file.c
    äº’æ›æ€§:Apache 2.1 以é™

    概è¦

    本モジュール㯠mod_auth_digest ã‚„ mod_auth_basic ã¨ã„ã£ãŸèªè¨¼ãƒ•ロントエンドã«å¯¾ã—ã¦ã€ プレインテキストã®ãƒ‘スワードファイル内ã‹ã‚‰ãƒ¦ãƒ¼ã‚¶ã‚’検索ã™ã‚‹ã“ã¨ã§ã€ ユーザèªè¨¼æ©Ÿèƒ½ã‚’æä¾›ã—ã¾ã™ã€‚ä¼¼ãŸã‚ˆã†ãªæ©Ÿèƒ½ã¯ mod_authn_dbm ã§ã‚‚æä¾›ã•れã¦ã„ã¾ã™ã€‚

    mod_auth_basic ã‚„ mod_auth_digest を使用ã™ã‚‹éš›ã«ã¯ã€ AuthBasicProvider ã‚„ AuthDigestPrivider ã§ file ã¨æŒ‡å®šã™ã‚‹ã“ã¨ã§ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯èµ·å‹•ã•れã¾ã™ã€‚

    top

    AuthUserFile ディレクティブ

    説明:èªè¨¼ã«ä½¿ç”¨ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ã¨ãƒ‘スワードã®ä¸€è¦§ãŒæ ¼ç´ã•れã¦ã„る〠テキストファイルã®åå‰ã‚’設定ã™ã‚‹
    æ§‹æ–‡:AuthUserFile file-path
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Base
    モジュール:mod_authn_file

    AuthUserFile ディレクティブã¯ã€ ユーザèªè¨¼ã®ãŸã‚ã®ãƒ¦ãƒ¼ã‚¶ã¨ãƒ‘スワードã®ä¸€è¦§ã‚’æ ¼ç´ã—㟠テキストファイルã®åå‰ã‚’設定ã—ã¾ã™ã€‚file-path ã¯ãƒ¦ãƒ¼ã‚¶ãƒ•ァイルã¸ã®ãƒ‘スã§ã™ã€‚ ã‚‚ã—絶対パスã§ãªã‘れã°ã€ ServerRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ã—ã¦æ‰±ã‚れã¾ã™ã€‚

    ユーザファイルã®å„行ã«ã¯ã€ãƒ¦ãƒ¼ã‚¶åã€ã‚³ãƒ­ãƒ³ã€ æš—å·åŒ–ã—ãŸãƒ‘スワードを記述ã—ã¾ã™ã€‚ åŒä¸€ãƒ¦ãƒ¼ã‚¶ ID ãŒè¤‡æ•°å›žç™»éŒ²ã•ã‚ŒãŸæ™‚ã¯ã€ mod_authn_file ã¯æœ€åˆã«è¦‹ã¤ã‹ã£ãŸãƒ‘スワードを使用ã—ã¦èªè¨¼ã—ã¾ã™ã€‚

    ãƒã‚¤ãƒŠãƒªé…布ã®ä¸€éƒ¨ã¨ã—ã¦ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•れるã‹ã€ ã‚ã‚‹ã„㯠src/support ã«ã‚ã‚‹ htpasswd ユーティリティã§ã€ã“ã® HTTP 基本èªè¨¼ 用パスワードファイルをメインテナンスã—ã¾ã™ã€‚ 詳細㯠man ページをã”覧頂ãã¨ã—ã¦ã€ç°¡å˜ã«ã¯:

    åˆæœŸ ID username ã§ã€Filename ã¨ã„ã†ãƒ‘スワードファイルを生æˆã—ã¾ã™ã€‚ 次ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’発行ã™ã‚‹ã¨ãƒ‘スワードãŒè¦æ±‚ã•れã¾ã™:

    htpasswd -c Filename username

    パスワードファイル Filename ã«ã€username2 を追加ã—ãŸã‚Šä¿®æ­£ã—ãŸã‚Šã—ã¾ã™:

    htpasswd Filename username2

    (訳注: éžå¸¸ã«å¤šãã®ãƒ¦ãƒ¼ã‚¶ã‚’登録ã™ã‚‹ã¨å¤§ããªãƒ•ァイルã«ãªã‚Šã¾ã™ãŒ) 大ããªãƒ†ã‚­ã‚¹ãƒˆãƒ•ァイルを検索ã™ã‚‹ã®ã¯éžå¸¸ã«åŠ¹çŽ‡ãŒæ‚ªã„ ã¨ã„ã†ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。ãã®ã‚ˆã†ãªå¿…è¦ã®ã‚る時ã¯ã€ AuthDBMUserFile を代ã‚りã«ä½¿ã£ã¦ãã ã•ã„。

    HTTP ダイジェストèªè¨¼ã‚’使用ã™ã‚‹å ´åˆã¯ã€ htpasswd プログラムã§ã¯ä¸å分ã§ã™ã€‚ãã®ä»£ã‚り㫠htdigest を使用ã—ã¦ãã ã•ã„。ダイジェストèªè¨¼ç”¨ã®ãƒ‡ãƒ¼ã‚¿ã¨ 基本èªè¨¼ç”¨ã®ãƒ‡ãƒ¼ã‚¿ã‚’åŒä¸€ãƒ•ã‚¡ã‚¤ãƒ«ã«æ··ãœã¦ä¿å­˜ã§ããªã„〠ã¨ã„ã†ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。

    セキュリティ

    AuthUserFile ã¯ã€ã‚¦ã‚§ãƒ–サーãƒã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ„リーã®å¤–å´ã«ä¿ç®¡ã™ã‚‹ã‚ˆã†ã«ã—ã¦ãã ã•ã„。 ä¿è­·ã—よã†ã¨ã—ã¦ã„るディレクトリ以下ã«ã¯ã€ç½®ã‹ãªã„ã§ä¸‹ã•ã„。 ãã†ã—ãªã„㨠AuthUserFile 㯠ダウンロードã§ãã¦ã—ã¾ã„ã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_slotmem_plain.html0000644000000000000500000000034613362070302020607 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_slotmem_plain.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_slotmem_plain.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_auth_basic.html0000644000000000000500000000063713362070302020051 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_auth_basic.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_auth_basic.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_auth_basic.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_auth_basic.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_authz_user.html.ko.euc-kr0000644000000000000500000001555013412755316021750 0ustar rootsrc mod_authz_user - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_authz_user

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:»ç¿ëÀÚ ±ÇÇѺο©
    »óÅÂ:Base
    ¸ðµâ¸í:authz_user_module
    ¼Ò½ºÆÄÀÏ:mod_authz_user.c
    Áö¿ø:¾ÆÆÄÄ¡ 2.1 ÀÌÈĺÎÅÍ

    ¿ä¾à

    ÀÌ ¸ðµâÀº ±ÇÇÑÀ» ºÎ¿©ÇÏ¿©, ÀÎÁõÇÑ »ç¿ëÀÚ°¡ À¥»çÀÌÆ®ÀÇ ÀϺο¡ Á¢±ÙÇÒ ¼ö ÀÖ´ÂÁö °áÁ¤ÇÑ´Ù. mod_authz_user´Â Require user Áö½Ã¾î ¸ñ·Ï¿¡ ÀÎÁõÇÑ »ç¿ëÀÚ°¡ µé¾îÀÖÀ¸¸é Á¢±ÙÀ» Çã¿ëÇÑ´Ù. ¶Ç, require valid-user´Â ¼º°øÀûÀ¸·Î ÀÎÁõÇÑ »ç¿ëÀÚ ¸ðµÎ¿¡°Ô Á¢±ÙÀ» Çã¿ëÇÑ´Ù.

    Support Apache!

    Áö½Ã¾îµé

    ÀÌ ¸ðµâ¿¡´Â Áö½Ã¾î°¡ ¾ø½À´Ï´Ù.

    Bugfix checklist

    Âü°í

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_example_hooks.html0000644000000000000500000000051213362070302020575 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_example_hooks.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_example_hooks.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_example_hooks.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/module-dict.html.fr.utf80000644000000000000500000002276213412755316020627 0ustar rootsrc Termes utilisés pour décrire les modules - Serveur HTTP Apache Version 2.4
    <-

    Termes utilisés pour décrire les modules

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    Ce document décrit les termes utilisés pour décrire chaque module Apache.

    top

    Description

    Une brève description des fonctions du module.

    top

    Statut

    Ce terme indique le degré de rapprochement du module par rapport au coeur du serveur web Apache ; en d'autres termes, vous pouvez être amené à recompiler le serveur pour pouvoir accéder au module et à ses fonctionnalités. Les valeurs possibles de cet attribut sont :

    MPM
    Un module dont le statut est "MPM" est un module Multi-Processus. A la différence des autres modules, un seul module MPM peut et doit être utilisé par Apache à la fois. Ce type de module est responsable de la répartition et du traitement de base des requêtes.
    Base
    Un module dont le statut est "Base" est compilé dans le serveur et chargé avec ce dernier par défaut ; il est donc toujours disponible à moins que vous n'ayez fait en sorte de supprimer le module de votre configuration.
    Extension
    Un module dont le statut est "Extension" n'est pas compilé et chargé dans le serveur par défaut. Pour activer le module et accéder à ses fonctionnalités, vous devez modifier la configuration de la compilation du serveur et recompiler Apache.
    Expérimental
    Le statut "Experimental" indique que le module fait partie du kit Apache, mais que vous devez l'utiliser à vos risques et périls. Le module est documenté à des fins d'exhaustivité, et n'est pas obligatoirement supporté.
    Externe
    Ce statut indique que le module ("module tiers") ne fait pas partie de la distribution de base d'Apache. Nous ne sommes pas responsables de ces modules et n'en assurons pas le support.
    top

    Fichier source

    Il s'agit tout simplement de la liste des noms des fichiers source qui contiennent le code du module. C'est aussi le nom utilisé par la directive <IfModule>.

    top

    Identificateur de module

    C'est une chaîne permettant d'identifier le module à utiliser dans la directive LoadModule pour le chargement dynamique des modules. En particulier, c'est le nom de la variable externe de type module dans le fichier source.

    top

    Compatibilité

    Si le module ne faisait pas partie de la distribution originale d'Apache version 2, la version à partir de laquelle il est disponible est indiquée ici. En outre, si le module n'est disponible que sur certaines plates-formes, cela sera mentionné ici.

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_ajp.html.en0000644000000000000500000007552513412755316020406 0ustar rootsrc mod_proxy_ajp - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy_ajp

    Available Languages:  en  |  fr  |  ja 

    Description:AJP support module for mod_proxy
    Status:Extension
    Module Identifier:proxy_ajp_module
    Source File:mod_proxy_ajp.c
    Compatibility:Available in version 2.1 and later

    Summary

    This module requires the service of mod_proxy. It provides support for the Apache JServ Protocol version 1.3 (hereafter AJP13).

    Thus, in order to get the ability of handling AJP13 protocol, mod_proxy and mod_proxy_ajp have to be present in the server.

    Warning

    Do not enable proxying until you have secured your server. Open proxy servers are dangerous both to your network and to the Internet at large.

    top

    Usage

    This module is used to reverse proxy to a backend application server (e.g. Apache Tomcat) using the AJP13 protocol. The usage is similar to an HTTP reverse proxy, but uses the ajp:// prefix:

    Simple Reverse Proxy

    ProxyPass "/app" "ajp://backend.example.com:8009/app"

    Balancers may also be used:

    Balancer Reverse Proxy

    <Proxy "balancer://cluster">
        BalancerMember "ajp://app1.example.com:8009" loadfactor=1
        BalancerMember "ajp://app2.example.com:8009" loadfactor=2
        ProxySet lbmethod=bytraffic
    </Proxy>
    ProxyPass "/app" "balancer://cluster/app"

    Note that usually no ProxyPassReverse directive is necessary. The AJP request includes the original host header given to the proxy, and the application server can be expected to generate self-referential headers relative to this host, so no rewriting is necessary.

    The main exception is when the URL path on the proxy differs from that on the backend. In this case, a redirect header can be rewritten relative to the original host URL (not the backend ajp:// URL), for example:

    Rewriting Proxied Path

    ProxyPass "/apps/foo" "ajp://backend.example.com:8009/foo"
    ProxyPassReverse "/apps/foo" "http://www.example.com/foo"

    However, it is usually better to deploy the application on the backend server at the same path as the proxy rather than to take this approach.

    top

    Environment Variables

    Environment variables whose names have the prefix AJP_ are forwarded to the origin server as AJP request attributes (with the AJP_ prefix removed from the name of the key).

    top

    Overview of the protocol

    The AJP13 protocol is packet-oriented. A binary format was presumably chosen over the more readable plain text for reasons of performance. The web server communicates with the servlet container over TCP connections. To cut down on the expensive process of socket creation, the web server will attempt to maintain persistent TCP connections to the servlet container, and to reuse a connection for multiple request/response cycles.

    Once a connection is assigned to a particular request, it will not be used for any others until the request-handling cycle has terminated. In other words, requests are not multiplexed over connections. This makes for much simpler code at either end of the connection, although it does cause more connections to be open at once.

    Once the web server has opened a connection to the servlet container, the connection can be in one of the following states:

    • Idle
      No request is being handled over this connection.
    • Assigned
      The connection is handling a specific request.

    Once a connection is assigned to handle a particular request, the basic request information (e.g. HTTP headers, etc) is sent over the connection in a highly condensed form (e.g. common strings are encoded as integers). Details of that format are below in Request Packet Structure. If there is a body to the request (content-length > 0), that is sent in a separate packet immediately after.

    At this point, the servlet container is presumably ready to start processing the request. As it does so, it can send the following messages back to the web server:

    • SEND_HEADERS
      Send a set of headers back to the browser.
    • SEND_BODY_CHUNK
      Send a chunk of body data back to the browser.
    • GET_BODY_CHUNK
      Get further data from the request if it hasn't all been transferred yet. This is necessary because the packets have a fixed maximum size and arbitrary amounts of data can be included the body of a request (for uploaded files, for example). (Note: this is unrelated to HTTP chunked transfer).
    • END_RESPONSE
      Finish the request-handling cycle.

    Each message is accompanied by a differently formatted packet of data. See Response Packet Structures below for details.

    top

    Basic Packet Structure

    There is a bit of an XDR heritage to this protocol, but it differs in lots of ways (no 4 byte alignment, for example).

    AJP13 uses network byte order for all data types.

    There are four data types in the protocol: bytes, booleans, integers and strings.

    Byte
    A single byte.
    Boolean
    A single byte, 1 = true, 0 = false. Using other non-zero values as true (i.e. C-style) may work in some places, but it won't in others.
    Integer
    A number in the range of 0 to 2^16 (32768). Stored in 2 bytes with the high-order byte first.
    String
    A variable-sized string (length bounded by 2^16). Encoded with the length packed into two bytes first, followed by the string (including the terminating '\0'). Note that the encoded length does not include the trailing '\0' -- it is like strlen. This is a touch confusing on the Java side, which is littered with odd autoincrement statements to skip over these terminators. I believe the reason this was done was to allow the C code to be extra efficient when reading strings which the servlet container is sending back -- with the terminating \0 character, the C code can pass around references into a single buffer, without copying. if the \0 was missing, the C code would have to copy things out in order to get its notion of a string.

    Packet Size

    According to much of the code, the max packet size is 8 * 1024 bytes (8K). The actual length of the packet is encoded in the header.

    Packet Headers

    Packets sent from the server to the container begin with 0x1234. Packets sent from the container to the server begin with AB (that's the ASCII code for A followed by the ASCII code for B). After those first two bytes, there is an integer (encoded as above) with the length of the payload. Although this might suggest that the maximum payload could be as large as 2^16, in fact, the code sets the maximum to be 8K.

    Packet Format (Server->Container)
    Byte 0 1 2 3 4...(n+3)
    Contents 0x12 0x34 Data Length (n) Data
    Packet Format (Container->Server)
    Byte 0 1 2 3 4...(n+3)
    Contents A B Data Length (n) Data

    For most packets, the first byte of the payload encodes the type of message. The exception is for request body packets sent from the server to the container -- they are sent with a standard packet header ( 0x1234 and then length of the packet), but without any prefix code after that.

    The web server can send the following messages to the servlet container:

    Code Type of Packet Meaning
    2 Forward Request Begin the request-processing cycle with the following data
    7 Shutdown The web server asks the container to shut itself down.
    8 Ping The web server asks the container to take control (secure login phase).
    10 CPing The web server asks the container to respond quickly with a CPong.
    none Data Size (2 bytes) and corresponding body data.

    To ensure some basic security, the container will only actually do the Shutdown if the request comes from the same machine on which it's hosted.

    The first Data packet is send immediately after the Forward Request by the web server.

    The servlet container can send the following types of messages to the webserver:

    Code Type of Packet Meaning
    3 Send Body Chunk Send a chunk of the body from the servlet container to the web server (and presumably, onto the browser).
    4 Send Headers Send the response headers from the servlet container to the web server (and presumably, onto the browser).
    5 End Response Marks the end of the response (and thus the request-handling cycle).
    6 Get Body Chunk Get further data from the request if it hasn't all been transferred yet.
    9 CPong Reply The reply to a CPing request

    Each of the above messages has a different internal structure, detailed below.

    top

    Request Packet Structure

    For messages from the server to the container of type Forward Request:

    AJP13_FORWARD_REQUEST :=
        prefix_code      (byte) 0x02 = JK_AJP13_FORWARD_REQUEST
        method           (byte)
        protocol         (string)
        req_uri          (string)
        remote_addr      (string)
        remote_host      (string)
        server_name      (string)
        server_port      (integer)
        is_ssl           (boolean)
        num_headers      (integer)
        request_headers *(req_header_name req_header_value)
        attributes      *(attribut_name attribute_value)
        request_terminator (byte) OxFF

    The request_headers have the following structure:

    req_header_name :=
        sc_req_header_name | (string)  [see below for how this is parsed]
    
    sc_req_header_name := 0xA0xx (integer)
    
    req_header_value := (string)

    The attributes are optional and have the following structure:

    attribute_name := sc_a_name | (sc_a_req_attribute string)
    
    attribute_value := (string)

    Not that the all-important header is content-length, because it determines whether or not the container looks for another packet immediately.

    Detailed description of the elements of Forward Request

    Request prefix

    For all requests, this will be 2. See above for details on other Prefix codes.

    Method

    The HTTP method, encoded as a single byte:

    Command NameCode
    OPTIONS1
    GET2
    HEAD3
    POST4
    PUT5
    DELETE6
    TRACE7
    PROPFIND8
    PROPPATCH9
    MKCOL10
    COPY11
    MOVE12
    LOCK13
    UNLOCK14
    ACL15
    REPORT16
    VERSION-CONTROL17
    CHECKIN18
    CHECKOUT19
    UNCHECKOUT20
    SEARCH21
    MKWORKSPACE22
    UPDATE23
    LABEL24
    MERGE25
    BASELINE_CONTROL26
    MKACTIVITY27

    Later version of ajp13, will transport additional methods, even if they are not in this list.

    protocol, req_uri, remote_addr, remote_host, server_name, server_port, is_ssl

    These are all fairly self-explanatory. Each of these is required, and will be sent for every request.

    Headers

    The structure of request_headers is the following: First, the number of headers num_headers is encoded. Then, a series of header name req_header_name / value req_header_value pairs follows. Common header names are encoded as integers, to save space. If the header name is not in the list of basic headers, it is encoded normally (as a string, with prefixed length). The list of common headers sc_req_header_nameand their codes is as follows (all are case-sensitive):

    NameCode valueCode name
    accept0xA001SC_REQ_ACCEPT
    accept-charset0xA002SC_REQ_ACCEPT_CHARSET
    accept-encoding0xA003SC_REQ_ACCEPT_ENCODING
    accept-language0xA004SC_REQ_ACCEPT_LANGUAGE
    authorization0xA005SC_REQ_AUTHORIZATION
    connection0xA006SC_REQ_CONNECTION
    content-type0xA007SC_REQ_CONTENT_TYPE
    content-length0xA008SC_REQ_CONTENT_LENGTH
    cookie0xA009SC_REQ_COOKIE
    cookie20xA00ASC_REQ_COOKIE2
    host0xA00BSC_REQ_HOST
    pragma0xA00CSC_REQ_PRAGMA
    referer0xA00DSC_REQ_REFERER
    user-agent0xA00ESC_REQ_USER_AGENT

    The Java code that reads this grabs the first two-byte integer and if it sees an '0xA0' in the most significant byte, it uses the integer in the second byte as an index into an array of header names. If the first byte is not 0xA0, it assumes that the two-byte integer is the length of a string, which is then read in.

    This works on the assumption that no header names will have length greater than 0x9FFF (==0xA000 - 1), which is perfectly reasonable, though somewhat arbitrary.

    Note:

    The content-length header is extremely important. If it is present and non-zero, the container assumes that the request has a body (a POST request, for example), and immediately reads a separate packet off the input stream to get that body.

    Attributes

    The attributes prefixed with a ? (e.g. ?context) are all optional. For each, there is a single byte code to indicate the type of attribute, and then its value (string or integer). They can be sent in any order (though the C code always sends them in the order listed below). A special terminating code is sent to signal the end of the list of optional attributes. The list of byte codes is:

    InformationCode ValueType Of ValueNote
    ?context0x01-Not currently implemented
    ?servlet_path0x02-Not currently implemented
    ?remote_user0x03String
    ?auth_type0x04String
    ?query_string0x05String
    ?jvm_route0x06String
    ?ssl_cert0x07String
    ?ssl_cipher0x08String
    ?ssl_session0x09String
    ?req_attribute0x0AStringName (the name of the attribute follows)
    ?ssl_key_size0x0BInteger
    are_done0xFF-request_terminator

    The context and servlet_path are not currently set by the C code, and most of the Java code completely ignores whatever is sent over for those fields (and some of it will actually break if a string is sent along after one of those codes). I don't know if this is a bug or an unimplemented feature or just vestigial code, but it's missing from both sides of the connection.

    The remote_user and auth_type presumably refer to HTTP-level authentication, and communicate the remote user's username and the type of authentication used to establish their identity (e.g. Basic, Digest).

    The query_string, ssl_cert, ssl_cipher, and ssl_session refer to the corresponding pieces of HTTP and HTTPS.

    The jvm_route, is used to support sticky sessions -- associating a user's sesson with a particular Tomcat instance in the presence of multiple, load-balancing servers.

    Beyond this list of basic attributes, any number of other attributes can be sent via the req_attribute code 0x0A. A pair of strings to represent the attribute name and value are sent immediately after each instance of that code. Environment values are passed in via this method.

    Finally, after all the attributes have been sent, the attribute terminator, 0xFF, is sent. This signals both the end of the list of attributes and also then end of the Request Packet.

    top

    Response Packet Structure

    for messages which the container can send back to the server.

    AJP13_SEND_BODY_CHUNK :=
      prefix_code   3
      chunk_length  (integer)
      chunk        *(byte)
      chunk_terminator (byte) Ox00
    
    
    AJP13_SEND_HEADERS :=
      prefix_code       4
      http_status_code  (integer)
      http_status_msg   (string)
      num_headers       (integer)
      response_headers *(res_header_name header_value)
    
    res_header_name :=
        sc_res_header_name | (string)   [see below for how this is parsed]
    
    sc_res_header_name := 0xA0 (byte)
    
    header_value := (string)
    
    AJP13_END_RESPONSE :=
      prefix_code       5
      reuse             (boolean)
    
    
    AJP13_GET_BODY_CHUNK :=
      prefix_code       6
      requested_length  (integer)

    Details:

    Send Body Chunk

    The chunk is basically binary data, and is sent directly back to the browser.

    Send Headers

    The status code and message are the usual HTTP things (e.g. 200 and OK). The response header names are encoded the same way the request header names are. See header_encoding above for details about how the codes are distinguished from the strings.
    The codes for common headers are:

    NameCode value
    Content-Type0xA001
    Content-Language0xA002
    Content-Length0xA003
    Date0xA004
    Last-Modified0xA005
    Location0xA006
    Set-Cookie0xA007
    Set-Cookie20xA008
    Servlet-Engine0xA009
    Status0xA00A
    WWW-Authenticate0xA00B

    After the code or the string header name, the header value is immediately encoded.

    End Response

    Signals the end of this request-handling cycle. If the reuse flag is true (anything other than 0 in the actual C code), this TCP connection can now be used to handle new incoming requests. If reuse is false (==0), the connection should be closed.

    Get Body Chunk

    The container asks for more data from the request (If the body was too large to fit in the first packet sent over or when the request is chunked). The server will send a body packet back with an amount of data which is the minimum of the request_length, the maximum send body size (8186 (8 Kbytes - 6)), and the number of bytes actually left to send from the request body.
    If there is no more data in the body (i.e. the servlet container is trying to read past the end of the body), the server will send back an empty packet, which is a body packet with a payload length of 0. (0x12,0x34,0x00,0x00)

    Available Languages:  en  |  fr  |  ja 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_session_cookie.html.fr.utf80000644000000000000500000003472413412755316022275 0ustar rootsrc mod_session_cookie - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_session_cookie

    Langues Disponibles:  en  |  fr 

    Description:Support des sessions basé sur les cookies
    Statut:Extension
    Identificateur de Module:session_cookie_module
    Fichier Source:mod_session_cookie.c
    Compatibilité:Disponible depuis la version 2.3 d'Apache

    Sommaire

    Avertissement

    Les modules de session font usage des cookies HTTP, et peuvent à ce titre être victimes d'attaques de type Cross Site Scripting, ou divulguer des informations à caractère privé aux clients. Veuillez vous assurer que les risques ainsi encourus ont été pris en compte avant d'activer le support des sessions sur votre serveur.

    Ce sous-module du module mod_session fournit le support du stockage des sessions utilisateur au niveau du navigateur distant dans des cookies HTTP.

    L'utilisation de cookies pour stocker les sessions décharge le serveur ou le groupe de serveurs de la nécessité de stocker les sessions localement, ou de collaborer pour partager les sessions, et peut être utile dans les environnements à fort trafic où le stockage des sessions sur le serveur pourrait s'avérer trop consommateur de ressources.

    Si la confidentialité de la session doit être préservée, le contenu de cette dernière peut être chiffré avant d'être enregistré au niveau du client à l'aide du module mod_session_crypto.

    Pour plus de détails à propos de l'interface des sessions, voir la documentation du module mod_session.

    top

    Exemples simples

    Pour créer une session et la stocker dans un cookie nommé session, configurez-la comme suit :

    Session stockée au niveau du navigateur

    Session On
    SessionCookieName session path=/

    Pour plus d'exemples sur la manière dont une session doit être configurée pour qu'une application CGI puisse l'utiliser, voir la section exemples de la documentation du module mod_session.

    Pour des détails sur la manière dont une session peut être utilisée pour stocker des informations de type nom d'utilisateur/mot de passe, voir la documentation du module mod_auth_form.

    top

    Directive SessionCookieName

    Description:Nom et attributs du cookie RFC2109 dans lequel la session est stockée
    Syntaxe:SessionCookieName nom attributs
    Défaut:none
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_session_cookie

    La directive SessionCookieName permet de spécifier le nom et les attributs optionnels d'un cookie compatible RFC2109 dans lequel la session sera stockée. Les cookies RFC2109 sont définis en utilisant l'en-tête HTTP Set-Cookie.

    Une liste optionnelle d'attributs peut être spécifiée, comme dans l'exemple suivant. Ces attributs sont insérés tels quels dans le cookie, et ne sont pas interprétés par Apache. Assurez-vous que vos attributs soient définis correctement selon la spécification des cookies.

    Cookie avec attributs

    Session On
    SessionCookieName session path=/private;domain=example.com;httponly;secure;version=1;
    top

    Directive SessionCookieName2

    Description:Nom et attributs pour le cookie RFC2965 dans lequel est stockée la session
    Syntaxe:SessionCookieName2 nom attributs
    Défaut:none
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_session_cookie

    La directive SessionCookieName2 permet de spécifier le nom et les attributs optionnels d'un cookie compatible RFC2965 dans lequel la session sera stockée. Les cookies RFC2965 sont définis en utilisant l'en-tête HTTP Set-Cookie2.

    Une liste optionnelle d'attributs peut être spécifiée, comme dans l'exemple suivant. Ces attributs sont insérés tels quels dans le cookie, et ne sont pas interprétés par Apache. Assurez-vous que vos attributs soient définis correctement selon la spécification des cookies.

    Cookie2 avec attributs

    Session On
    SessionCookieName2 session path=/private;domain=example.com;httponly;secure;version=1;
    top

    Directive SessionCookieRemove

    Description:Détermine si les cookies de session doivent être supprimés des en-têtes HTTP entrants
    Syntaxe:SessionCookieRemove On|Off
    Défaut:SessionCookieRemove Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_session_cookie

    La directive SessionCookieRemove permet de déterminer si les cookies contenant la session doivent être supprimés des en-têtes pendant le traitement de la requête.

    Dans le cas d'un mandataire inverse où le serveur Apache sert de frontal à un serveur d'arrière-plan, révéler le contenu du cookie de session à ce dernier peut conduire à une violation de la confidentialité. À ce titre, si cette directive est définie à "on", le cookie de session sera supprimé des en-têtes HTTP entrants.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_data.html.en0000644000000000000500000001677513412755316017306 0ustar rootsrc mod_data - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_data

    Available Languages:  en  |  fr 

    Description:Convert response body into an RFC2397 data URL
    Status:Extension
    Module Identifier:data_module
    Source File:mod_data.c
    Compatibility:Available in Apache 2.3 and later

    Summary

    This module provides the ability to convert a response into an RFC2397 data URL.

    Data URLs can be embedded inline within web pages using something like the mod_include module, to remove the need for clients to make separate connections to fetch what may potentially be many small images. Data URLs may also be included into pages generated by scripting languages such as PHP.

    An example of a data URL

    data:image/gif;base64,R0lGODdhMAAwAPAAAAAAAP///ywAAAAAMAAw
    AAAC8IyPqcvt3wCcDkiLc7C0qwyGHhSWpjQu5yqmCYsapyuvUUlvONmOZtfzgFz
    ByTB10QgxOR0TqBQejhRNzOfkVJ+5YiUqrXF5Y5lKh/DeuNcP5yLWGsEbtLiOSp
    a/TPg7JpJHxyendzWTBfX0cxOnKPjgBzi4diinWGdkF8kjdfnycQZXZeYGejmJl
    ZeGl9i2icVqaNVailT6F5iJ90m6mvuTS4OK05M0vDk0Q4XUtwvKOzrcd3iq9uis
    F81M1OIcR7lEewwcLp7tuNNkM3uNna3F2JQFo97Vriy/Xl4/f1cf5VWzXyym7PH
    hhx4dbgYKAAA7

    The filter takes no parameters, and can be added to the filter stack using the SetOutputFilter directive, or any of the directives supported by the mod_filter module.

    Configuring the filter

    <Location "/data/images">
        SetOutputFilter DATA
    </Location>
    Support Apache!

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_userdir.html.ko.euc-kr0000644000000000000500000002545513412755316021241 0ustar rootsrc mod_userdir - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_userdir

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:»ç¿ëÀÚº° µð·ºÅ丮
    »óÅÂ:Base
    ¸ðµâ¸í:userdir_module
    ¼Ò½ºÆÄÀÏ:mod_userdir.c

    ¿ä¾à

    ÀÌ ¸ðµâÀ» »ç¿ëÇϸé http://example.com/~user/ ½ÄÀ¸·Î »ç¿ëÀÚº° µð·ºÅ丮¿¡ Á¢±ÙÇÒ ¼ö ÀÖ´Ù.

    top

    UserDir Áö½Ã¾î

    ¼³¸í:»ç¿ëÀÚº° µð·ºÅ丮 À§Ä¡
    ¹®¹ý:UserDir directory-filename
    ±âº»°ª:UserDir public_html
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Base
    ¸ðµâ:mod_userdir

    UserDir Áö½Ã¾î´Â »ç¿ëÀÚÀÇ ¹®¼­¿¡ ´ëÇÑ ¿äûÀ» ¹ÞÀ»¶§ »ç¿ëÀÚ È¨µð·ºÅ丮 ¾È¿¡¼­ »ç¿ëÇÒ ½ÇÁ¦ µð·ºÅ丮¸¦ ÁöÁ¤ÇÑ´Ù. Directory-filenameÀº ´ÙÀ½ Áß ÇϳªÀÌ´Ù:

    • ¾Æ·¡¿Í °°Àº µð·ºÅ丮¸í ȤÀº ÆÐÅÏ.
    • disabled Ű¿öµå. enabled Ű¿öµå·Î (¾Æ·¡ Âü°í) Á÷Á¢ À̸§À» ÁöÁ¤ÇÏÁö ¾Ê¾Ò´Ù¸é ¸ðµç »ç¿ëÀÚ¸í-µð·ºÅ丮 º¯È¯À» ÇÏÁö ¾Ê´Â´Ù.
    • disabled Ű¿öµå µÚ¿¡ °ø¹éÀ¸·Î ±¸ºÐÇÑ »ç¿ëÀÚ¸í ¸ñ·Ï. »ç¿ëÀÚ¸íÀÌ enabled ±¸¹®¿¡ ÀÖ´Ù°í ÇÏ´õ¶óµµ, ÀÌ ¸ñ·Ï¿¡ ÀÖ´Â »ç¿ëÀÚ¸íÀº µð·ºÅ丮 º¯È¯À» ÇÏÁö ¾Ê´Â´Ù.
    • enabled Ű¿öµå µÚ¿¡ °ø¹éÀ¸·Î ±¸ºÐÇÑ »ç¿ëÀÚ¸í ¸ñ·Ï. Àüü disableÀ» »ç¿ëÇÏ°í »ç¿ëÀÚ¸íÀÌ disabled ±¸¹®¿¡ ¾ø´õ¶óµµ, »ç¿ëÀÚ¸íÀ» µð·ºÅ丮 º¯È¯ÇÑ´Ù.

    Userdir Áö½Ã¾î¿¡ enabled³ª disabled Ű¿öµå¸¦ »ç¿ëÇÏÁö ¾ÊÀ¸¸é, ¾Æ±Ô¸ÕÆ®¸¦ ÆÄÀÏ¸í ÆÐÅÏÀ¸·Î ó¸®ÇÏ¿© µð·ºÅ丮·Î º¯È¯ÇÑ´Ù. http://www.foo.com/~bob/one/two.html¿¡ ´ëÇÑ ¿äûÀº ´ÙÀ½°ú °°ÀÌ º¯È¯µÈ´Ù:

    »ç¿ëÇÑ UserDir Áö½Ã¾î º¯È¯ÇÑ °æ·Î
    UserDir public_html~bob/public_html/one/two.html
    UserDir /usr/web/usr/web/bob/one/two.html
    UserDir /home/*/www/home/bob/www/one/two.html

    ´ÙÀ½ Áö½Ã¾î´Â Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù:

    »ç¿ëÇÑ UserDir Áö½Ã¾î º¯È¯ÇÑ °æ·Î
    UserDir http://www.foo.com/usershttp://www.foo.com/users/bob/one/two.html
    UserDir http://www.foo.com/*/usrhttp://www.foo.com/bob/usr/one/two.html
    UserDir http://www.foo.com/~*/http://www.foo.com/~bob/one/two.html
    ÀÌ Áö½Ã¾î¸¦ »ç¿ëÇÒ¶§ ÁÖÀÇÇ϶ó; ¿¹¸¦ µé¾î, "UserDir ./"´Â "/~root"¸¦ ¾Æ¸¶µµ ¹Ù¶÷Á÷ÇÏÁö ¾Ê°Ô "/"·Î º¯È¯ÇÑ´Ù. ¼³Á¤¿¡ "UserDir disabled root"¸¦ Æ÷ÇÔÇÏ±æ °­·ÂÈ÷ ±ÇÇÑ´Ù. ÀÚ¼¼ÇÑ Á¤º¸¸¦ ¾Ë·Á¸é Directory Áö½Ã¾î¿Í º¸¾È ÆÁµµ Âü°íÇ϶ó.

    Ãß°¡ ¿¹Á¦:

    ¸î¸î »ç¿ëÀÚ¿¡°Ô¸¸ UserDir µð·ºÅ丮¸¦ Çã¿ëÇÑ´Ù¸é, ´ÙÀ½°ú °°´Ù:

    UserDir disabled
    UserDir enabled user1 user2 user3

    ´ëºÎºÐÀÇ »ç¿ëÀÚ¿¡°Ô UserDir µð·ºÅ丮¸¦ Çã¿ëÇϰí ÀϺθ¸ °ÅºÎÇÑ´Ù¸é, ´ÙÀ½°ú °°´Ù:

    UserDir enabled
    UserDir disabled user4 user5 user6

    ´Ù¸¥ »ç¿ëÀÚ µð·ºÅ丮¸¦ ÁöÁ¤ÇÒ ¼öµµ ÀÖ´Ù. ´ÙÀ½°ú °°Àº ¸í·É¾î¸¦ »ç¿ëÇÑ´Ù¸é:

    Userdir public_html /usr/web http://www.foo.com/

    http://www.foo.com/~bob/one/two.html ¿äûÀ» Çϸé, ¸ÕÀú ~bob/public_html/one/two.html ÆäÀÌÁö¸¦ ã°í, /usr/web/bob/one/two.htmlÀ» ãÀº ÈÄ, ¸¶Áö¸·À¸·Î http://www.foo.com/bob/one/two.htmlÀ¸·Î ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù.

    ¸®´ÙÀÌ·º¼ÇÀ» »ç¿ëÇÑ´Ù¸é ¸ñ·ÏÀÇ ¸¶Áö¸·¿¡ µÎ¾î¾ß ÇÑ´Ù. ¾ÆÆÄÄ¡´Â ¸®´ÙÀÌ·º¼ÇÀÌ ¼º°øÇß´ÂÁö ¾Ë ¼ö ¾ø±â¶§¹®¿¡, ¸®´ÙÀÌ·º¼ÇÀ» ¸ñ·Ï ¾Õ¿¡ µÎ¸é Ç×»ó ¸®´ÙÀÌ·º¼ÇÀ» »ç¿ëÇÏ°Ô µÈ´Ù.

    Âü°í

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/event.html.fr.utf80000644000000000000500000007656213412755316017551 0ustar rootsrc event - Serveur HTTP Apache Version 2.4
    <-

    Apache MPM event

    Langues Disponibles:  en  |  fr 

    Description:Une variante du MPM worker conçue pour ne mobiliser des threads que pour les connexions en cours de traitement
    Statut:MPM
    Identificateur de Module:mpm_event_module
    Fichier Source:event.c

    Sommaire

    Le module multi-processus (MPM) event est conçu pour permettre le traitement d'un nombre accru de requêtes simultanées en déléguant certaines tâches aux threads d'écoute, libérant par là-même les threads de travail et leur permettant de traiter les nouvelles requêtes.

    Pour utiliser le MPM event, ajoutez --with-mpm=event aux arguments du script configure lorsque vous compilez le programme httpd.

    top

    Relations avec le MPM Worker

    Le MPM event s'inspire du MPM worker qui implémente un serveur hybride multi-processus et multi-threads. Un processus de contrôle unique (le parent) est chargé de lancer des processus enfants. Chaque processus enfant crée un nombre de threads serveurs défini via la directive ThreadsPerChild, ainsi qu'un thread d'écoute qui surveille les requêtes entrantes et les distribue aux threads de travail pour traitement au fur et à mesure de leur arrivée.

    Les directives de configuration à l'exécution sont identiques à celles que propose le MPM worker, avec l'unique addition de la directive AsyncRequestWorkerFactor.

    top

    Comment tout cela fonctionne

    Ce module MPM tente de résoudre le "problème keep alive" de HTTP. Lorsqu'un client a effectué une première requête, il peut garder la connexion ouverte et envoyer les requêtes suivante en utilisant le même socket, ce qui diminue considérablement la charge qui aurait été induite par la création de nouvelles connexions TCP. Cependant, le fonctionnement du serveur HTTP Apache impose de réserver un couple processus enfant/thread pour attendre les données en provenance du client, ce qui présente certains inconvénients. Pour résoudre ce problème, le MPM Event utilise un thread d'écoute dédié pour chaque processus pour gérer les sockets d'écoute, tous les sockets qui sont dans un état de connexion persistante, les sockets où les filtres de gestionnaire et de protocole ont fait leur travail, et ceux pour lesquels la seule chose restant à faire est l'envoi des données au client.

    Cette nouvelle architecture, en exploitant les sockets non blocants et les fonctionnalités des noyaux modernes mis en valeur par APR (comme epoll de Linux), n'a plus besoin du Mutex mpm-accept pour éviter le problème de "thundering herd".

    La directive AsyncRequestWorkerFactor permet de définir le nombre total de connexions qu'un bloc processus/thread peut gérer.

    Connexions asynchrones

    Avec les MPM précédents, les connexions asynchrones nécessitaient un thread de travail dédié, mais ce n'est plus le cas avec le MPM Event. La page d'état de mod_status montre de nouvelles colonnes dans la section "Async connections" :

    Writing
    Lors de l'envoi de la réponse au client, il peut arriver que le tampon d'écriture TCP soit plein si la connexion est trop lente. Si cela se produit, une instruction write() vers le socket renvoie en général EWOULDBLOCK ou EAGAIN pour que l'on puisse y écrire à nouveau après un certain temps d'inactivité. Le thread de travail qui utilise le socket doit alors être en mesure de récupérer la tâche en attente et la restituer au thread d'écoute qui, à son tour, la réattribuera au premier thread de travail disponible, lorsqu'un évènement sera généré pour le socket (par exemple, "il est maintenant possible d'écrire dans le socket"). Veuillez vous reporter à la section à propos des limitations pour plus de détails.
    Keep-alive
    La gestion des connexions persistantes constitue la principale amélioration par rapport au MPM Worker. Lorsqu'un thread de travail a terminé l'envoi d'une réponse à un client, il peut restituer la gestion du socket au thread d'écoute, qui à son tour va attendre un évènement en provenance du système d'exploitation comme "le socket est lisible". Si une nouvelle requête arrive en provenance du client, le thread d'écoute l'attribuera au premier thread de travail disponible. Inversement, si le délai KeepAliveTimeout est atteint, le socket sera fermé par le thread d'écoute. Les threads de travail n'ont donc plus à s'occuper des sockets inactifs et ils peuvent être réutilisés pour traiter d'autres requêtes.
    Closing
    Parfois, le MPM doit effectuer une fermeture progressive, c'est à dire envoyer au client une erreur survenue précédemment alors que ce dernier est en train de transmettre des données à httpd. Envoyer la réponse et fermer immédiatement la connexion n'est pas une bonne solution car le client (qui est encore en train d'envoyer le reste de la requête) verrait sa connexion réinitialisée et ne pourrait pas lire la réponse de httpd. La fermeture progressive est limitée dans le temps, mais elle peut tout de même être assez longue, si bien qu'elle est confiée à un thread de travail (y compris les procédures d'arrêt et la fermeture effective du socket). A partir de la version 2.4.28, c'est aussi le cas lorsque des connexions finissent par dépasser leur délai d'attente (le thread d'écoute ne gère jamais les connexions, si ce n'est attendre et dispatcher les évènements qu'elles génèrent).

    Ces améliorations sont disponible pour les connexions HTTP ou HTTPS.

    Arrêt de processus en douceur et utilisation du scoreboard

    Ce MPM présentait dans le passé des limitations de montée en puissance qui provoquaient l'erreur suivante : "scoreboard is full, not at MaxRequestWorkers". La directive MaxRequestWorkers permet de limiter le nombre de requêtes pouvant être servies simultanément à un moment donné ainsi que le nombre de processus autorisés (MaxRequestWorkers / ThreadsPerChild), alors que le scoreboard représente l'ensemble des processus en cours d'exécution et l'état de leurs threads de travail. Si le scoreboard est plein (autrement dit si aucun des threads n'est dans un état inactif) et si le nombre de requêtes actives servies est inférieur à MaxRequestWorkers, cela signifie que certains d'entre eux bloquent les nouvelles requêtes qui pourraient être servies et sont en l'occurrence mises en attente (dans la limite de la valeur imposée par la directive ListenBacklog). La plupart du temps, ces threads sont bloqués dans un état d'arrêt en douceur car ils attendent de terminer leur travail sur une connexion TCP pour s'arrêter et ainsi libérer une entrée dans le scoreboard (par exemple dans le cas du traitement des requêtes de longue durée, des clients lents ou des connexions en keep-alive). Voici deux scénarios courants :

    • Pendant un graceful restart. Le processus parent demande à tous ses processus enfants de terminer leur travail et de s'arrêter pendant qu'il recharge la configuration et lance de nouveaux processus. Si les processus existants continuent de s'exécuter pendant un certain temps avant de s'arrêter, le scoreboard sera partiellement occupé jusqu'à ce que les entrées correspondantes soient libérées.
    • Lorsque la charge du serveur diminue suffisamment pour que httpd commence à stopper certains processus (par exemple pour respecter la valeur de la directive MaxSpareThreads). Cette situation est problèmatique car lorsque la charge augmente à nouveau, httpd va essayer de lancer de nouveaux processus. Si cette situation se répète, le nombre de processus peut augmenter sensiblement, aboutissant à un mélange d'anciens processus tentant de s'arrêter et de nouveaux processus tentant d'effectuer un travail quelconque.

    A partir de la version 2.4.24, mpm-event est plus intelligent et peut traiter les arrêts graceful de manière plus efficace. Voici certaines de ces améliorations :

    • Utilisation de toutes les entrées du scoreboard dans la limite de la valeur définie par ServerLimit. Les directives MaxRequestWorkers et ThreadsPerChild permettent de limiter le nombre de processus actifs, alors que la directive ServerLimit prend aussi en compte les proccessus en arrêt graceful pour permettre l'utilisation d'entrées supplémentaires du scoreboard en cas de besoin. L'idée consiste à utiliser ServerLimit pour indiquer à httpd conbien de processus supplémentaires seront tolérés avant d'atteindre les limites imposées par les ressources du système.
    • Les processus en arrêt graceful doivent fermer leurs connexions en keep-alive.
    • Lors d'un arrêt graceful, s'il y a plus de threads de travail en cours d'exécution que de connexions ouvertes pour un processus donné, ces threads sont arrêtés afin de libérer les ressources plus vite (ce qui peut s'avérer nécessaire pour lancer de nouveaux processus).
    • Si le scoreboard est plein, empêche d'arrêter d'autres processus en mode graceful afin de réduire la charge jusqu'à ce que tous les anciens processus soient arrêtés (sinon la situation empirerait lors d'une remontée en charge).

    Le comportement décrit dans le dernier point est bien visible via mod_status dans la table des connexions avec les deux nouvelles colonnes "Slot" et "Stopping". La première indique le PID et la seconde si le processus est en cours d'arrêt ou non ; l'état supplémentaire "Yes (old gen)" indique un processus encore en exécution après un redémarrage graceful.

    Limitations

    La gestion améliorée des connexions peut ne pas fonctionner pour certains filtres de connexion qui se sont déclarés eux-mêmes incompatibles avec le MPM Event. Dans ce cas, le MPM Event réadoptera le comportement du MPM worker et réservera un thread de travail par connexion. Notez que tous les modules inclus dans la distribution du serveur httpd sont compatibles avec le MPM Event.

    Une restriction similaire apparaît lorsqu'une requête utilise un filtre en sortie qui doit pouvoir lire et/ou modifier la totalité du corps de la réponse. Si la connexion avec le client se bloque pendant que le filtre traite les données, et si la quantité de données produites par le filtre est trop importante pour être stockée en mémoire, le thread utilisé pour la requête n'est pas libéré pendant que httpd attend que les données soient transmises au client.
    Pour illustrer ce cas de figure, nous pouvons envisager les deux situations suivantes : servir une ressource statique (comme un fichier CSS) ou servir un contenu issu d'un programme FCGI/CGI ou d'un serveur mandaté. La première situation est prévisible ; en effet, le MPM Event a une parfaite visibilité sur la fin du contenu, et il peut utiliser les évènements : le thread de travail qui sert la réponse peut envoyer les premiers octets jusqu'à ce que EWOULDBLOCK ou EAGAIN soit renvoyé, et déléguer le reste de la réponse au thread d'écoute. Ce dernier en retour attend un évènement sur le socket, et délègue le reste de la réponse au premier thread de travail disponible. Dans la deuxième situation par contre (FCGI/CGI/contenu mandaté), le MPM n'a pas de visibilité sur la fin de la réponse, et le thread de travail doit terminer sa tâche avant de rendre le contrôle au thread d'écoute. La seule solution consisterait alors à stocker la réponse en mémoire, mais ce ne serait pas l'option la plus sure en matière de stabilité du serveur et d'empreinte mémoire.

    Matériel d'arrière-plan

    Le modèle event a été rendu possible par l'introduction de nouvelles APIs dans les systèmes d'exploitation supportés :

    • epoll (Linux)
    • kqueue (BSD)
    • event ports (Solaris)

    Avant que ces APIs soient mises à disposition, les APIs traditionnelles select et poll devaient être utilisées. Ces APIs deviennent lentes si on les utilise pour gérer de nombreuses connexions ou si le jeu de connexions possède un taux de renouvellement élevé. Les nouvelles APIs permettent de gérer beaucoup plus de connexions et leur performances sont meilleures lorsque le jeu de connexions à gérer change fréquemment. Ces APIs ont donc rendu possible l'écriture le MPM Event qui est mieux adapté à la situation HTTP typique où de nombreuses connexions sont inactives.

    Le MPM Event suppose que l'implémentation de apr_pollset sous-jacente est raisonnablement sure avec l'utilisation des threads (threadsafe). Ceci évite au MPM de devoir effectuer trop verrouillages de haut niveau, ou d'avoir à réveiller le thread d'écoute pour lui envoyer un socket keep-alive. Ceci n'est possible qu'avec KQueue et EPoll.

    top

    Prérequis

    Ce MPM dépend des opérations atomiques compare-and-swap d'APR pour la synchronisation des threads. Si vous compilez pour une plate-forme x86 et n'avez pas besoin du support 386, ou si vous compilez pour une plate-forme SPARC et n'avez pas besoin du support pre-UltraSPARC, ajoutez --enable-nonportable-atomics=yes aux arguments du script configure. Ceci permettra à APR d'implémenter les opérations atomiques en utilisant des instructions performantes indisponibles avec les processeurs plus anciens.

    Ce MPM ne fonctionne pas de manière optimale sur les plates-formes plus anciennes qui ne gèrent pas correctement les threads, mais ce problème est sans objet du fait du prérequis concernant EPoll ou KQueue.

    • Pour utiliser ce MPM sous FreeBSD, la version 5.3 ou supérieure de ce système est recommandée. Il est cependant possible d'exécuter ce MPM sous FreeBSD 5.2.1 si vous utilisez libkse (voir man libmap.conf).
    • Pour NetBSD, il est recommander d'utiliser la version 2.0 ou supérieure.
    • Pour Linux, un noyau 2.6 est recommandé. Il faut aussi s'assurer que votre version de glibc a été compilée avec le support pour EPoll.
    top

    Directive AsyncRequestWorkerFactor

    Description:Limite le nombre de connexions simultanées par thread
    Syntaxe:AsyncRequestWorkerFactor facteur
    Défaut:2
    Contexte:configuration globale
    Statut:MPM
    Module:event
    Compatibilité:Disponible depuis la version 2.3.13

    Le MPM event gère certaines connexions de manière asynchrone ; dans ce cas, les threads traitant la requête sont alloués selon les besoins et pour de courtes périodes. Dans les autres cas, un thread est réservé par connexion. Ceci peut conduire à des situations où tous les threads sont saturés et où aucun thread n'est capable d'effectuer de nouvelles tâches pour les connexions asynchrones établies.

    Pour minimiser les effets de ce problème, le MPM event utilise deux méthodes :

    • il limite le nombre de connexions simultanées par thread en fonction du nombre de processus inactifs;
    • si tous les processus sont occupés, il ferme des connexions permanentes, même si la limite de durée de la connexion n'a pas été atteinte. Ceci autorise les clients concernés à se reconnecter à un autre processus possèdant encore des threads disponibles.

    Cette directive permet de personnaliser finement la limite du nombre de connexions par thread. Un processus n'acceptera de nouvelles connexions que si le nombre actuel de connexions (sans compter les connexions à l'état "closing") est inférieur à :

    ThreadsPerChild + (AsyncRequestWorkerFactor * nombre de threads inactifs)

    Il est possible d'effectuer une estimation du nombre maximum de connexions simultanées pour tous les processus et pour un nombre donné moyen de threads de travail inactifs comme suit :

    (ThreadsPerChild + (AsyncRequestWorkerFactor * number of idle workers)) * ServerLimit

    Exemple

    ThreadsPerChild = 10
    ServerLimit = 4
    AsyncRequestWorkerFactor = 2
    MaxRequestWorkers = 40
    
    idle_workers = 4 (moyenne pour tous les processus pour faire simple)
    
    max_connections = (ThreadsPerChild + (AsyncRequestWorkerFactor * idle_workers)) * ServerLimit 
                    = (10 + (2 * 4)) * 4 = 72

    Lorsque tous les threads de travail sont inactifs, le nombre maximum absolu de connexions simultanées peut être calculé de manière plus simple :

    (AsyncRequestWorkerFactor + 1) * MaxRequestWorkers

    Exemple

    ThreadsPerChild = 10 
    ServerLimit = 4
    MaxRequestWorkers = 40
    AsyncRequestWorkerFactor = 2

    Si tous les threads de tous les processus sont inactifs, alors :

    idle_workers = 10

    Nous pouvons calculer le nombre maximum absolu de connexions simultanées de deux manières :

    max_connections = (ThreadsPerChild + (AsyncRequestWorkerFactor * idle_workers)) * ServerLimit 
                    = (10 + (2 * 10)) * 4 = 120
        
    max_connections = (AsyncRequestWorkerFactor + 1) * MaxRequestWorkers 
                    = (2 + 1) * 40 = 120

    Le réglage de la directive AsyncRequestWorkerFactor nécessite de connaître le trafic géré par httpd pour chaque style d'utilisation spécifique ; si vous modifiez la valeur par défaut, vous devrez par conséquent effectuer des tests approfondis en vous appuyant étroitement sur les données fournies par mod_status.

    La directive MaxRequestWorkers se nommait MaxClients avant la version 2.3.13. La valeur ci-dessus montre que cet ancien nom ne correspondait pas à sa signification exacte pour le MPM event.

    La directive AsyncRequestWorkerFactor accepte des valeurs d'argument de type non entier, comme "1.5".

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_env.html.tr.utf80000644000000000000500000002735013447004010020046 0ustar rootsrc mod_env - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_env

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    Açıklama:CGI betiklerine ve SSI sayfalarına aktarılan değişkenlere müdahale etmek için kullanılır.
    Durum:Temel
    Modül Betimleyici:env_module
    Kaynak Dosyası:mod_env.c

    Özet

    Bu modül Apache HTTP Sunucusunun çeşitli modülleri tarafınan kullanılan dahili ortam değişkenlerime müdahale etmeyi mümkün kılar. bu değişkenler ayrıca, CGI betiklerine yerel ortam değişkenleri olarak sunulur ve SSI sayfalarında da kullanılabilir. Ortam değişkenleri httpd süreci başlatılırken kabuktan aktarılabilir. Bundan başka, yapılandırma sürecinde tanımlı veya tanımsız yapılabilirler.

    top

    PassEnv Yönergesi

    Açıklama:Ortam değişkenlerini kabuktan aktarır.
    Sözdizimi:PassEnv ortam-değişkeni [ortam-değişkeni] ...
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Temel
    Modül:mod_env

    Dahili ortam değişkenleri olarak kullanılmak üzere sistem ortam değişkenlerini içeri aktarmak için kullanılır. Bunlar daha sonra Apache HTTP Sunucusunun modüllerinden kullanılabilir, CGI betiklerine ve SSI sayfalarında aktarılabilir. Değerler httpd süreci başlatılırken kabuğun işletim sistemi ortamından gelir.

    Örnek

    PassEnv LD_LIBRARY_PATH

    top

    SetEnv Yönergesi

    Açıklama:Ortam değişkenlerini tanımlar.
    Sözdizimi:SetEnv ortam-değişkeni [değer]
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Temel
    Modül:mod_env

    CGI betiklerine ve SSI sayfalarına aktarılmak ve Apache HTTP Sunucusu modüllerinde kullanılmak üzere bir dahili ortam değişkeni tanımlanmasını sağlar.

    SetEnv SPECIAL_PATH /foo/bin

    Bir değer belirtilmezse değişkene boş dizgi atanır.

    Bu yönerge tarafından atanan dahili ortam değişkenleri, en başta işleme sokulan, ereşem denetimi, URI-dosya ismi eşleştirmesi gibi istek işleme yönergelerinden sonra işleme sokulur. Eğer atadığınız ortam değişkeni, bir RewriteRule yönergesindeki gibi erken işlem aşamalarına girdi sağlıyorsa, bu durumda ortam değişkenini SetEnvIf ile atamalısınız.

    Ayrıca bakınız:

    top

    UnsetEnv Yönergesi

    Açıklama:Ortamdaki değişkenleri tanımsız hale getirir.
    Sözdizimi:UnsetEnv ortam-değişkeni [ortam-değişkeni] ...
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Temel
    Modül:mod_env

    CGI betiklerine ve SSI sayfalarına bir daha aktarılmamak üzere bir dahili ortam değişkenini siler.

    UnsetEnv LD_LIBRARY_PATH

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_html.html.en0000644000000000000500000010317113412755316020565 0ustar rootsrc mod_proxy_html - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy_html

    Available Languages:  en  |  fr 

    Description:Rewrite HTML links in to ensure they are addressable from Clients' networks in a proxy context.
    Status:Base
    Module Identifier:proxy_html_module
    Source File:mod_proxy_html.c
    Compatibility:Version 2.4 and later. Available as a third-party module for earlier 2.x versions

    Summary

    This module provides an output filter to rewrite HTML links in a proxy situation, to ensure that links work for users outside the proxy. It serves the same purpose as Apache's ProxyPassReverse directive does for HTTP headers, and is an essential component of a reverse proxy.

    For example, if a company has an application server at appserver.example.com that is only visible from within the company's internal network, and a public webserver www.example.com, they may wish to provide a gateway to the application server at http://www.example.com/appserver/. When the application server links to itself, those links need to be rewritten to work through the gateway. mod_proxy_html serves to rewrite <a href="http://appserver.example.com/foo/bar.html">foobar</a> to <a href="http://www.example.com/appserver/foo/bar.html">foobar</a> making it accessible from outside.

    mod_proxy_html was originally developed at WebÞing, whose extensive documentation may be useful to users.

    top

    ProxyHTMLBufSize Directive

    Description:Sets the buffer size increment for buffering inline scripts and stylesheets.
    Syntax:ProxyHTMLBufSize bytes
    Default:ProxyHTMLBufSize 8192
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_proxy_html
    Compatibility:Version 2.4 and later; available as a third-party for earlier 2.x versions

    In order to parse non-HTML content (stylesheets and scripts) embedded in HTML documents, mod_proxy_html has to read the entire script or stylesheet into a buffer. This buffer will be expanded as necessary to hold the largest script or stylesheet in a page, in increments of bytes as set by this directive.

    The default is 8192, and will work well for almost all pages. However, if you know you're proxying pages containing stylesheets and/or scripts bigger than 8K (that is, for a single script or stylesheet, NOT in total), it will be more efficient to set a larger buffer size and avoid the need to resize the buffer dynamically during a request.

    top

    ProxyHTMLCharsetOut Directive

    Description:Specify a charset for mod_proxy_html output.
    Syntax:ProxyHTMLCharsetOut Charset | *
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_proxy_html
    Compatibility:Version 2.4 and later; available as a third-party for earlier 2.x versions

    This selects an encoding for mod_proxy_html output. It should not normally be used, as any change from the default UTF-8 (Unicode - as used internally by libxml2) will impose an additional processing overhead. The special token ProxyHTMLCharsetOut * will generate output using the same encoding as the input.

    Note that this relies on mod_xml2enc being loaded.

    top

    ProxyHTMLDocType Directive

    Description:Sets an HTML or XHTML document type declaration.
    Syntax:ProxyHTMLDocType HTML|XHTML [Legacy]
    OR
    ProxyHTMLDocType fpi [SGML|XML]
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_proxy_html
    Compatibility:Version 2.4 and later; available as a third-party for earlier 2.x versions

    In the first form, documents will be declared as HTML 4.01 or XHTML 1.0 according to the option selected. This option also determines whether HTML or XHTML syntax is used for output. Note that the format of the documents coming from the backend server is immaterial: the parser will deal with it automatically. If the optional second argument is set to Legacy, documents will be declared "Transitional", an option that may be necessary if you are proxying pre-1998 content or working with defective authoring/publishing tools.

    In the second form, it will insert your own FPI. The optional second argument determines whether SGML/HTML or XML/XHTML syntax will be used.

    The default is changed to omitting any FPI, on the grounds that no FPI is better than a bogus one. If your backend generates decent HTML or XHTML, set it accordingly.

    If the first form is used, mod_proxy_html will also clean up the HTML to the specified standard. It cannot fix every error, but it will strip out bogus elements and attributes. It will also optionally log other errors at LogLevel Debug.

    top

    ProxyHTMLEnable Directive

    Description:Turns the proxy_html filter on or off.
    Syntax:ProxyHTMLEnable On|Off
    Default:ProxyHTMLEnable Off
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_proxy_html
    Compatibility:Version 2.4 and later; available as a third-party module for earlier 2.x versions.

    A simple switch to enable or disable the proxy_html filter. If mod_xml2enc is loaded it will also automatically set up internationalisation support.

    Note that the proxy_html filter will only act on HTML data (Content-Type text/html or application/xhtml+xml) and when the data are proxied. You can override this (at your own risk) by setting the PROXY_HTML_FORCE environment variable.

    top

    ProxyHTMLEvents Directive

    Description:Specify attributes to treat as scripting events.
    Syntax:ProxyHTMLEvents attribute [attribute ...]
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_proxy_html
    Compatibility:Version 2.4 and later; available as a third-party for earlier 2.x versions

    Specifies one or more attributes to treat as scripting events and apply ProxyHTMLURLMaps to where enabled. You can specify any number of attributes in one or more ProxyHTMLEvents directives.

    Normally you'll set this globally. If you set ProxyHTMLEvents in more than one scope so that one overrides the other, you'll need to specify a complete set in each of those scopes.

    A default configuration is supplied in proxy-html.conf and defines the events in standard HTML 4 and XHTML 1.

    top

    ProxyHTMLExtended Directive

    Description:Determines whether to fix links in inline scripts, stylesheets, and scripting events.
    Syntax:ProxyHTMLExtended On|Off
    Default:ProxyHTMLExtended Off
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_proxy_html
    Compatibility:Version 2.4 and later; available as a third-party for earlier 2.x versions

    Set to Off, HTML links are rewritten according to the ProxyHTMLURLMap directives, but links appearing in Javascript and CSS are ignored.

    Set to On, all scripting events (as determined by ProxyHTMLEvents) and embedded scripts or stylesheets are also processed by the ProxyHTMLURLMap rules, according to the flags set for each rule. Since this requires more parsing, performance will be best if you only enable it when strictly necessary.

    You'll also need to take care over patterns matched, since the parser has no knowledge of what is a URL within an embedded script or stylesheet. In particular, extended matching of / is likely to lead to false matches.

    top

    ProxyHTMLFixups Directive

    Description:Fixes for simple HTML errors.
    Syntax:ProxyHTMLFixups [lowercase] [dospath] [reset]
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_proxy_html
    Compatibility:Version 2.4 and later; available as a third-party for earlier 2.x versions

    This directive takes one to three arguments as follows:

    • lowercase Urls are rewritten to lowercase
    • dospath Backslashes in URLs are rewritten to forward slashes.
    • reset Unset any options set at a higher level in the configuration.

    Take care when using these. The fixes will correct certain authoring mistakes, but risk also erroneously fixing links that were correct to start with. Only use them if you know you have a broken backend server.

    top

    ProxyHTMLInterp Directive

    Description:Enables per-request interpolation of ProxyHTMLURLMap rules.
    Syntax:ProxyHTMLInterp On|Off
    Default:ProxyHTMLInterp Off
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_proxy_html
    Compatibility:Version 2.4 and later; available as a third-party module for earlier 2.x versions

    This enables per-request interpolation in ProxyHTMLURLMap to- and from- patterns.

    If interpolation is not enabled, all rules are pre-compiled at startup. With interpolation, they must be re-compiled for every request, which implies an extra processing overhead. It should therefore be enabled only when necessary.

    top

    ProxyHTMLLinks Directive

    Description:Specify HTML elements that have URL attributes to be rewritten.
    Syntax:ProxyHTMLLinks element attribute [attribute2 ...]
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_proxy_html
    Compatibility:Version 2.4 and later; available as a third-party for earlier 2.x versions

    Specifies elements that have URL attributes that should be rewritten using standard ProxyHTMLURLMaps. You will need one ProxyHTMLLinks directive per element, but it can have any number of attributes.

    Normally you'll set this globally. If you set ProxyHTMLLinks in more than one scope so that one overrides the other, you'll need to specify a complete set in each of those scopes.

    A default configuration is supplied in proxy-html.conf and defines the HTML links for standard HTML 4 and XHTML 1.

    Examples from proxy-html.conf

    ProxyHTMLLinks  a          href
    ProxyHTMLLinks  area       href
    ProxyHTMLLinks  link       href
    ProxyHTMLLinks  img        src longdesc usemap
    ProxyHTMLLinks  object     classid codebase data usemap
    ProxyHTMLLinks  q          cite
    ProxyHTMLLinks  blockquote cite
    ProxyHTMLLinks  ins        cite
    ProxyHTMLLinks  del        cite
    ProxyHTMLLinks  form       action
    ProxyHTMLLinks  input      src usemap
    ProxyHTMLLinks  head       profile
    ProxyHTMLLinks  base       href
    ProxyHTMLLinks  script     src for
    top

    ProxyHTMLMeta Directive

    Description:Turns on or off extra pre-parsing of metadata in HTML <head> sections.
    Syntax:ProxyHTMLMeta On|Off
    Default:ProxyHTMLMeta Off
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_proxy_html
    Compatibility:Version 2.4 and later; available as a third-party module for earlier 2.x versions.

    This turns on or off pre-parsing of metadata in HTML <head> sections.

    If not required, turning ProxyHTMLMeta Off will give a small performance boost by skipping this parse step. However, it is sometimes necessary for internationalisation to work correctly.

    ProxyHTMLMeta has two effects. Firstly and most importantly it enables detection of character encodings declared in the form

    <meta http-equiv="Content-Type" content="text/html;charset=foo">

    or, in the case of an XHTML document, an XML declaration. It is NOT required if the charset is declared in a real HTTP header (which is always preferable) from the backend server, nor if the document is utf-8 (unicode) or a subset such as ASCII. You may also be able to dispense with it where documents use a default declared using xml2EncDefault, but that risks propagating an incorrect declaration. A ProxyHTMLCharsetOut can remove that risk, but is likely to be a bigger processing overhead than enabling ProxyHTMLMeta.

    The other effect of enabling ProxyHTMLMeta is to parse all <meta http-equiv=...> declarations and convert them to real HTTP headers, in keeping with the original purpose of this form of the HTML <meta> element.

    Warning

    Because ProxyHTMLMeta promotes all http-equiv elements to HTTP headers, it is important that you only enable it in cases where you trust the HTML content as much as you trust the upstream server. If the HTML is controlled by bad actors, it will be possible for them to inject arbitrary, possibly malicious, HTTP headers into your server's responses.
    top

    ProxyHTMLStripComments Directive

    Description:Determines whether to strip HTML comments.
    Syntax:ProxyHTMLStripComments On|Off
    Default:ProxyHTMLStripComments Off
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_proxy_html
    Compatibility:Version 2.4 and later; available as a third-party for earlier 2.x versions

    This directive will cause mod_proxy_html to strip HTML comments. Note that this will also kill off any scripts or styles embedded in comments (a bogosity introduced in 1995/6 with Netscape 2 for the benefit of then-older browsers, but still in use today). It may also interfere with comment-based processors such as SSI or ESI: be sure to run any of those before mod_proxy_html in the filter chain if stripping comments!

    top

    ProxyHTMLURLMap Directive

    Description:Defines a rule to rewrite HTML links
    Syntax:ProxyHTMLURLMap from-pattern to-pattern [flags] [cond]
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_proxy_html
    Compatibility:Version 2.4 and later; available as a third-party module for earlier 2.x versions.

    This is the key directive for rewriting HTML links. When parsing a document, whenever a link target matches from-pattern, the matching portion will be rewritten to to-pattern, as modified by any flags supplied and by the ProxyHTMLExtended directive. Only the elements specified using the ProxyHTMLLinks directive will be considered as HTML links.

    The optional third argument may define any of the following Flags. Flags are case-sensitive.

    h

    Ignore HTML links (pass through unchanged)

    e

    Ignore scripting events (pass through unchanged)

    c

    Pass embedded script and style sections through untouched.

    L

    Last-match. If this rule matches, no more rules are applied (note that this happens automatically for HTML links).

    l

    Opposite to L. Overrides the one-change-only default behaviour with HTML links.

    R

    Use Regular Expression matching-and-replace. from-pattern is a regexp, and to-pattern a replacement string that may be based on the regexp. Regexp memory is supported: you can use brackets () in the from-pattern and retrieve the matches with $1 to $9 in the to-pattern.

    If R is not set, it will use string-literal search-and-replace. The logic is starts-with in HTML links, but contains in scripting events and embedded script and style sections.

    x

    Use POSIX extended Regular Expressions. Only applicable with R.

    i

    Case-insensitive matching. Only applicable with R.

    n

    Disable regexp memory (for speed). Only applicable with R.

    s

    Line-based regexp matching. Only applicable with R.

    ^

    Match at start only. This applies only to string matching (not regexps) and is irrelevant to HTML links.

    $

    Match at end only. This applies only to string matching (not regexps) and is irrelevant to HTML links.

    V

    Interpolate environment variables in to-pattern. A string of the form ${varname|default} will be replaced by the value of environment variable varname. If that is unset, it is replaced by default. The |default is optional.

    NOTE: interpolation will only be enabled if ProxyHTMLInterp is On.

    v

    Interpolate environment variables in from-pattern. Patterns supported are as above.

    NOTE: interpolation will only be enabled if ProxyHTMLInterp is On.

    The optional fourth cond argument defines a condition that will be evaluated per Request, provided ProxyHTMLInterp is On. If the condition evaluates FALSE the map will not be applied in this request. If TRUE, or if no condition is defined, the map is applied.

    A cond is evaluated by the Expression Parser. In addition, the simpler syntax of conditions in mod_proxy_html 3.x for HTTPD 2.0 and 2.2 is also supported.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/core.html.tr.utf80000644000000000000500000114110713521115051017346 0ustar rootsrc core - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Temel Özellikleri

    Mevcut Diller:  de  |  en  |  es  |  fr  |  ja  |  tr 

    Bu çeviri güncel olmayabilir. Son değişiklikler için İngilizce sürüm geçerlidir.
    Açıklama:Apache HTTP Sunucusunda daima mevcut olan çekirdek özellikler
    Durum:Çekirdek
    top

    AcceptFilter Yönergesi

    Açıklama:Bir protokolün dinleyici soketleri için en iyilemeleri ayarlar
    Sözdizimi:AcceptFilter protocol kabul_süzgeci
    BaÄŸlam:sunucu geneli
    Durum:Çekirdek
    Modül:core

    Bu yönerge Protocol yönergesinde belirtilen protokol türüne göre bir dinleme soketinin işletim sistemine özgü en iyilemelerini etkin kılar. İşletim sistemi çekirdeği için temel önerme veri alınıncaya kadar veya HTTP isteğinin tamamı tamponlanana kadar sunucu sürecine bir soket tahsis etmemektir. Şimdilik sadece FreeBSD’nin Kabul Süzgeçleri ve Linux’un soket seçeneklerinden TCP_DEFER_ACCEPT ve Windows'un en iyilenmiş AcceptEx() işlevi desteklenmektedir.

    Değiştirge olarak none kullanımı, protokolün kabul süzgeçlerini iptal edecektir. ftp: veya nntp gibi sunucunun baştan bir veri göndermesinin gerekli olduğu protokoller için kullanışlıdır. Örnek:

    AcceptFilter nntp none

    Öntanımlı protokol isimleri port 443 için https ve tüm diğer portlar için http'dir. Dinlenmesi için başka bir port ile ilgili bir protokol belirtmek isterseniz Listen yönergesine protokol argümanını ekleyin.

    FreeBSD için öntanımlı değerler:

    AcceptFilter http httpready
    AcceptFilter https dataready

    httpready kabul süzgeci HTTP isteklerinin tamamını işletim sistemi çekirdeği seviyesinde tamponlar. Çekirdek isteğin tamamını alır almaz sunucuya gönderir. Ayrıntılar için accf_http(9) kılavuz sayfasına bakınız. HTTPS istekleri şifrelenmiş olduğundan sadece accf_data(9) süzgeci kullanılır.

    Linux’taki öntanımlı değerler:

    AcceptFilter http data
    AcceptFilter https data

    Linux’un TCP_DEFER_ACCEPT soket seçeneği HTTP isteklerinin tamponlanmasını desteklemez. none dahil her değer dinleyici üzerinde TCP_DEFER_ACCEPT seçeneğini etkin kılar. Daha ayrıntılı bilgi edinmek için Linux tcp(7) kılavuz sayfasına bakınız.

    Windows’taki öntanımlı değerler::

    AcceptFilter http connect
    AcceptFilter https connect

    Windows'un mpm_winnt modülü AcceptEx() arayüzünü açıp kapamak için AcceptFilter'i yorumlar ve http protokol tamponlamasını desteklemez. connect, AcceptEx() arayüzünü kullanacak, ayrıca uç ağ adresleri de alınacak, fakat none gibi connect seçeneği de ilk veri aktarımını beklemeyecektir.

    Windows'ta none AcceptEx()'ten ziyade accept() kullanır ve ağ soketlerini bağlantılar arasında yer değiştirmez. Sürücü desteği bozuk ağ bağdaştırıcılarından başka vpn sürücüleri gibi bazı sanal ağ sağlayıcılar veya spam, virus veya casus yazılım süzgeçleri için kullanışlıdır.

    data AcceptFilter (Windows)

    2.4.23 ve öncesi sürümlerde, Windows data accept süzgeci veri aktarılana kadar bekletildikten sonra ilk veri tamponlanır ve uç ağ adresi için tek bir AcceptEx() çağrısı yapılır. Bu gerçeklenim hizmet reddi saldırısına konu olduğundan iptal edilmiştir.

    httpd'nin şu anki dağıtımları için Windows'da connect süzgeci öntanımlıdır ve data belirtilmiş olsa dahi connect belirtilmiş gibi davranılır. Önceki sürümleri kullananların AcceptFilter satırını yukarıdaki gibi connect süzgecine ayarlamaları gerekmektedir.

    Ayrıca bakınız:

    top

    AcceptPathInfo Yönergesi

    Açıklama:Dosya isminden sonra belirtilen yol verisini kabul veya reddeder.
    Sözdizimi:AcceptPathInfo On|Off|Default
    Öntanımlı:AcceptPathInfo Default
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core

    Bu yönerge, istekte dosya isminden sonra (dizinde belirtilen dosya bulunmayabilir) belirtilen yol verisinin kabul edilip edilmeyeceğini denetler. Dosya isminden sonra belirtilen yol verisi PATH_INFO ortam değişkeninde betiklerin kullanımına sunulabilir.

    Örneğin, içinde sadece here.html dosyası bulunan bir /test/ dizinimiz olsun. /test/here.html/more ve /test/nothere.html/more isteklerinin her ikisi de PATH_INFO değişkenine /more verisinin atanmasını sağlar.

    AcceptPathInfo yönergesine atanabilecek argüman sayısı üçtür:

    Off
    Sadece dosya isminden sonra yol verisi bulunmayan istekler kabul edilir. Yukarıdaki örnekteki gibi /test/here.html/more şeklindeki istekler bir 404 (Nesne bulunamadı) hatasıyla sonuçlanır.
    On
    Mevcut bir dosyaya ait bir dosya isminden sonra bir yol verisinin de belirtildiği istekler kabul edilir. Yukarıdaki örnekteki gibi /test/here.html/more şeklindeki istekler, /test/here.html geçerli bir dosya olduğu takdirde kabul edilir.
    Default
    Dosya isminden sonra yol verisi belirtilen isteklerin nasıl ele alınacağı istekten sorumlu eylemci tarafından saptanır. Normal dosyalar için çekirdek eylemci öntanımlı olarak PATH_INFO isteklerini reddeder. cgi-script ve isapi-handler gibi betiklere hizmet eden eylemciler ise genellikle PATH_INFO isteklerini öntanımlı olarak kabul ederler.

    AcceptPathInfo yönergesinin birincil amacı eylemcinin PATH_INFO istekleri hakkında verdiği kabul veya red kararını geçersiz kılabilmenizi sağlamaktır. Örneğin, PATH_INFO’ya dayalı olarak içerik üretmek için INCLUDES gibi bir süzgeç kullandığınız takdirde bu geçersizleştirme zorunlu olur. Normal dosyalar için çekirdek eylemci normal olarak isteği reddederdi, böyle bir durumda bir betiği etkin kılmak için aşağıdaki gibi bir yapılandırma kullanabilirsiniz:

    <Files "mypaths.shtml">
      Options +Includes
      SetOutputFilter INCLUDES
      AcceptPathInfo On
    </Files>
    top

    AccessFileName Yönergesi

    Açıklama:Dağıtık yapılandırma dosyasının ismi belirtilir.
    Sözdizimi:AccessFileName filename [filename] ...
    Öntanımlı:AccessFileName .htaccess
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    Belge yolu üzerindeki dizinlerde dağıtık yapılandırma dosyalarının bulunmasına izin verilmişse sunucu bir isteği işlerken önce bu dizinlerde bu yönergede belirtilmiş yapılandırma dosyasını arar. Örnek:

    AccessFileName .acl

    Sunucu, /usr/local/web/index.html belgesini döndürmeden önce,

    <Directory "/">
        AllowOverride None
    </Directory>

    şeklinde bir yapılandırma ile iptal edilmiş olmadıkça yönergeler için /.acl, /usr/.acl, /usr/local/.acl ve /usr/local/web/.acl dosyalarını okur.

    Ayrıca bakınız:

    top

    AddDefaultCharset Yönergesi

    Açıklama:Bir yanıtın içerik türü text/plain veya text/html olduğunda eklenecek öntanımlı karakter kümesi parametresini belirler.
    Sözdizimi:AddDefaultCharset On|Off|karküm
    Öntanımlı:AddDefaultCharset Off
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core

    Bu yönerge, yanıtın içerik türü text/plain veya text/html olmak şartıyla yanıta eklenecek karakter kümesini (karakter kodlamasınının ismini) belirler. Bu, asıl davranış çoğunlukla kullanıcının istemci yapılandırmasına bağlı olmakla birlikte, yanıtın gövdesinde META elemanı vasıtasıyla belirtilmiş karakter kümesini geçersiz kılar. AddDefaultCharset Off şeklinde bir atama bu işlevselliği iptal eder. AddDefaultCharset On ile bu işlevsellik etkin kılınmaktan başka iso-8859-1 karakter kümesini öntanımlı olarak yanıta eklenir. Yönergede karküm olarak belirtilecek değerler, Genel Ağ ortam türlerinde (MIME türlerinde) kullanmak üzere IANA’da kayıtlı karakter kümesi değerlerinden biri olmalıdır. Örnek:

    AddDefaultCharset utf-8

    AddDefaultCharset yönergesi sadece, metin kaynaklarının hepsinin aynı karakter kümesine sahip olduğu bilindiği takdirde ve her birinde ayrı ayrı karakter kümesi belirtmek çok külfetli olacaksa kullanılmalıdır. Buna bir örnek, CGI betikleri tarafından üretilmiş içeriğe sahip kaynaklara karakter kümesinin eklenmesidir; böyle kaynaklar çıktıda kullanıcı tarafından sağlanmış veri içermeleri nedeniyle karşı siteden kaynaklanan betikli saldırılardan zarar görebilir. Bununla birlikte, bir öntanımlı karakter kümesi belirtmek, tarayıcılarında “karakter kodlamasını kendiliğinden sapta†özelliğini etkin kılmış kullanıcıları korumayacağından daha iyi bir çözüm bu betikleri bu tür saldırılara karşı düzeltmek veya en iyisi silmektir.

    Ayrıca bakınız:

    top

    AllowEncodedSlashes Yönergesi

    Açıklama:Kodlanmış dosya yolu ayracı içeren URL’lere izin verilip verilmeyeceğini belirler.
    Sözdizimi:AllowEncodedSlashes On|Off|NoDecode
    Öntanımlı:AllowEncodedSlashes Off
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core
    Uyumluluk:NoDecode seçeneği Apache httpd 2.3.12 ve sonrasında mevcuttur.

    AllowEncodedSlashes yönergesi kodlanmış dosya yolu ayracı içeren URL’lere izin verir (/ yerine %2F ve ek olarak \ için ilgili sistemlerde %5C kullanılmış URL’ler).

    Off öntanımlı değeriyle, böyle URL’ler bir 404 (Nesne bulunamadı) hatasıyla reddedilirler.

    On değeriyle, böyle URL’ler kabul edilir ve kodlanmış dosya yolu ayraçları kodlanmış diğer karakterler gibi çözümlenir.

    NoDecode değeriyle, böyle URL’ler kabul edilir fakat kodlanmış dosya yolu ayraçları çözümlenmeden kodlanmış halde bırakılır.

    AllowEncodedSlashes On, çoğunlukla PATH_INFO ile bir arada kullanıldığı zaman kullanışlıdır.

    Ek Bilgi

    Kodlanmış bölü çizgileri yol bilgisi için gerekliyse bir güvenlik ölçütü olarak NoDecode kullanımı şiddetle önerilir. Kodlanmış bölü çizgilerinin çözümlenmesine izin vermek güvensiz olması olası yollara izin vermek olurdu.

    Ayrıca bakınız:

    top

    AllowOverride Yönergesi

    Açıklama:.htaccess dosyalarında bulunmasına izin verilen yönerge türleri belirtilir.
    Sözdizimi:AllowOverride All|None|yönerge-türü [yönerge-türü] ...
    Öntanımlı:AllowOverride None (2.3.9 ve sonrası), AllowOverride All (2.3.8 ve öncesi)
    BaÄŸlam:dizin
    Durum:Çekirdek
    Modül:core

    Sunucu AccessFileName yönergesi ile belirtildiği şekilde bir .htaccess dosyasına rastlarsa önceki yapılandırma yönergelerinin hangilerinin geçersiz kılınmak üzere bildirildiğini bilmek ister.

    Sadece <Directory> bölümlerinde geçerli

    AllowOverride yönergesi, <Location>, <DirectoryMatch> veya <Files> bölümlerinde değil, sadece düzenli ifade içermeyen <Directory> bölümlerinde geçerlidir.

    Bu yönergeye ve AllowOverrideList yönergesine değer olarak None belirtilirse .htaccess dosyaları tamamen yok sayılır. Bu durumda, sunucu dosya sisteminde rastladığı .htaccess dosyalarını okumaya dahi çalışmayacaktır.

    Bu yönergeye All değeri atanırsa, .htaccess bağlamında kullanılabilecek her yönergeye .htaccess dosyalarında izin verilir. (Hangi yönerge-türü türü için hangi yönergelerin etkin olduğunu görmek için .htaccess için Geçersizleştirme Sınıfları sayfasına bakınız)

    yönerge-türü olarak aşağıdaki yönerge grup isimlerinden biri belirtilebilir:

    AuthConfig
    AuthDBMGroupFile, AuthDBMUserFile, AuthGroupFile, AuthName, AuthType, AuthUserFile, Require ve benzeri yetkilendirme yönergelerinin kullanımını izin verilir.
    FileInfo
    Belge türünü denetleyen mod_mime Add* ve Remove* yönergeleri, ErrorDocument, ForceType, LanguagePriority, SetHandler, SetInputFilter, SetOutputFilter yönergeleri ve benzerleri ile Header, RequestHeader, SetEnvIf, SetEnvIfNoCase, BrowserMatch, CookieExpires, CookieDomain, CookieStyle, CookieTracking, CookieName belge meta veri yönergelerinin, mod_rewrite modülündeki RewriteEngine, RewriteOptions, RewriteBase, RewriteCond, RewriteRule yönergelerinin, mod_alias modülündeki Redirect, RedirectTemp, RedirectPermanent, RedirectMatch) yönergelerinin ve mod_actions modülündeki Action yönergesinin kullanımına izin verilir.
    Indexes
    Dizin içeriğinin listelenmesini denetleyen AddDescription, AddIcon, AddIconByEncoding, AddIconByType, DefaultIcon, DirectoryIndex, FancyIndexing, HeaderName, IndexIgnore, IndexOptions, ReadmeName yönergelerinin ve benzerlerinin kullanımına izin verilir.
    Limit
    Konak erişimini denetleyen Allow, Deny ve Order yönergelerinin kullanımına izin verilir.
    Nonfatal=[Override|Unknown|All]
    .htaccess dosyalarındaki sözdizimi hatalarının ölümcül olarak ele alınmaması için AllowOverride yönergesinin kullanımına izin verir; bunun yerine bir dahili sunucu hatasına sebep olur, izin verilmeyen veya tanınmayan yönergeler yoksayılır ve günlüğe bir uyarı çıktılanır:
    • Nonfatal=Override ile AllowOverride tarafından yasaklanmış yönergeler ölümcül olarak ele alınmaz.
    • Nonfatal=Unknown ile bilinmeyen yönergeler ölümcül olarak ele alınmaz. Yazım hatalarını ve mevcut olmayan bir modül tarafından gerçeklenmiÅŸ yönergeleri kapsar.
    • Nonfatal=All ile yukarıdakilerin ikisi de ölümcül olarak ele alınmaz.

    Geçerli bir yönergedeki yazım hatalarının hala dahili bir sunucu hatasına sebep olacağına dikkat ediniz.

    Güvenlik

    Ölümcül olmayan hatalar .htaccess kullanıcıları için güvenlikle ilgili sorunlara yol açabilir. Örneğin AllowOverride AuthConfig'e izin vermezse kullanıcıların siteye erişimini kısıtlayan yapılandırma iptal edilmiş olur.
    Options[=seçenek,...]
    Dizinlere özgü özellikleri denetleyen Options ve XBitHack yönergelerinin kullanımına izin verilir. Options komutunda belirtilecek seçenekler bir eşit işaretinden sonra aralarına sadece virgül konarak, fakat virgülden sonra boşluk bırakmadan belirtilebilir.

    Options'ın örtük iptali

    .htaccess dosyalarında kullanılabilen seçenek listesi bu yönergeyle sınırlanabilirse de herhangi bir Options yönergesine izin verildiği sürece miras alınmış diğer seçenekler göreli olmayan sözdizimi kullanılarak iptal edilebilir. Başka bir deyişle, bu mekanizma diğerlerinin değerlerini korumasına izin verirken belli bir seçeneği değerini korumaya zorlayamaz.

    AllowOverride Options=Indexes,MultiViews

    Örnek:

    AllowOverride AuthConfig Indexes

    Bu örnekte AuthConfig ve Indexes grubundaki yönergeler bir dahili sunucu hatasına yol açmayacaktır.

    Güvenlik ve başarımı arttırmak için <Directory "/"> bloğu içinde AllowOverride yönergesine None dışında bir değer atamayın. Böyle yapmak yerine bir .htaccess dosyası yerleştirmeyi düşündüğünüz dizine ait bir <Directory> bloğu olması daha iyidir.

    Ayrıca bakınız:

    top

    AllowOverrideList Yönergesi

    Açıklama:.htaccess dosyalarında izin verilecek yönergeler tek tek belirtilir
    Sözdizimi:AllowOverrideList None|yönerge [yönerge-türü] ...
    Öntanımlı:AllowOverrideList None
    BaÄŸlam:dizin
    Durum:Çekirdek
    Modül:core

    Sunucu bir .htaccess dosyası (AccessFileName tarafından belirtildiği gibi) bulduğunda önceki yapılandırma yönergelerini geçersiz kılabilen bu dosyada hangi yönergelerin bildirildiğini bilmek ister.

    Sadece <Directory> bölümlerinde kullanılabilir

    AllowOverrideList sadece <Directory> bölümlerinde düzenli ifadeler olmaksızın belirtilmişse kullanılabilir; <Location>, <DirectoryMatch> veya <Files> bölümlerinde değil.

    Bu yönergeye ve AllowOverride yönergesine None atanmışsa .htaccess dosyaları tamamen yoksayılır. Bu durumda sunucu dosya sistemindeki .htaccess dosyalarını okumaya bile çalışmayacaktır.

    Örnek:

    AllowOverride None
    AllowOverrideList Redirect RedirectMatch

    Yukarıdaki örnekte sadece Redirect ve RedirectMatch yönergelerine izin verilmektedir. Tüm diğerleri dahili bir sunucu hatasına sebep olacaktır.

    Örnek:

    AllowOverride AuthConfig
    AllowOverrideList CookieTracking CookieName

    Yukarıdaki örnekte AllowOverride yönergesi AuthConfig yönerge grubuna izin verirken AllowOverrideList yönergesi FileInfo yönerge grubundan yalnız iki yönergeye izin vermektedir. Tüm diğerleri dahili bir sunucu hatasına sebep olacaktır.

    Ayrıca bakınız:

    top

    CGIMapExtension Yönergesi

    Açıklama:CGI betik yorumlayıcısını saptama tekniğini belirler.
    Sözdizimi:CGIMapExtension cgi-yolu .uzantı
    BaÄŸlam:dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Sadece NetWare’de geçerlidir.

    Bu yönerge Apache httpd’nin CGI bekitlerini çalıştırmak için kullanacağı yorumlayıcıyı nasıl bulacağını denetlemek için kullanılır. Örneğin, CGIMapExtension sys:\foo.nlm .foo satırı .foo uzantılı CGI betik dosyalarının FOO yorumlayıcıya aktarılmasını sağlar.

    top

    CGIPassAuth Yönergesi

    Açıklama:HTTP yetkilendirme başlıklarının betiklere CGI değişkenleri olarak aktarılmasını etkin kılar
    Sözdizimi:CGIPassAuth On|Off
    Öntanımlı:CGIPassAuth Off
    BaÄŸlam:dizin, .htaccess
    Geçersizleştirme:AuthConfig
    Durum:Çekirdek
    Modül:core
    Uyumluluk: Apache HTTP Sunucusunun 2.4.13 ve sonraki sürümlerinde kullanılabilmektedir

    CGIPassAuth yönergesi, HTTP Temel kimlik doğrulamasını gerçekleştiren betikler için gereken Authorization gibi HTTP yetkilendirme başlıklarına betiklerin erişebilmesini sağlar. Normalde bu HTTP başlıkları betiklerden gizli olup sunucuda HTTP Temel kimlik kanıtlaması etkin kılındığında sunucuya erişmekte kullanılan kullanıcı kimliklerinin ve parolalarının betikler tarafından görülmemesini mümkün kılar. Bu yönerge, HTTP Temel kimlik kanıtlamasını betiklerin gerçekleştirmesini sağlamak için kullanılmalıdır.

    Apache HTTP Sunucusunun önceki sürümlerinde derleme sırasında kullanılabilen SECURITY_HOLE_PASS_AUTHORIZATION sabitinin yerine bu yönerge kullanılabilir.

    Bu ayarlama mod_cgi, mod_cgid, mod_proxy_fcgi, mod_proxy_scgi ve benzerleri gibi ap_add_common_vars() kullanan modüller tarafından kabul görür. Özellikle, isteği alışılmış tarzda işleme sokmayıp bu arayüzü kullanan modülleri etkiler. Ayrıca, ap_add_common_vars() kullanmayan üçüncü parti modüller de bu ayarlamayı kullanmayı tercih edebilir.

    top

    CGIVar Yönergesi

    Açıklama:Bazı CGI değişkenlerinin nasıl atanacağını belirler
    Sözdizimi:CGIVar değişken kural
    BaÄŸlam:dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Apache HTTP Server 2.4.21 ve sonrasında kullanılabilir

    Bu yönerge bazı CGI değişkenlerinin nasıl atanacağını belirler.

    REQUEST_URI kuralları:

    original-uri (default)
    Değer özgün istek satırından alınır ve dahili yöneldirmeler veya istenen özkaynakları değiştiren alt istekler dikkate alınmaz.
    current-uri
    Değer özgün istek satırından farklı olabilecek dahili yönlendirmeleri veya istenen özkaynakları değiştiren alt istekleri de yansıtır.
    top

    ContentDigest Yönergesi

    Açıklama:Content-MD5 HTTP yanıt başlıklarının üretimini etkin kılar.
    Sözdizimi:ContentDigest On|Off
    Öntanımlı:ContentDigest Off
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Options
    Durum:Çekirdek
    Modül:core

    Bu yönerge RFC2616 ve RFC1864’te tanımlandığı gibi Content-MD5 üretimini etkin kılar.

    MD5, verideki herhangi bir değişikliğin ileti özetinin değişmesi olarak yansıması nedeniyle yüksek derecede itimat sağlayan keyfi uzunlukta bir "ileti özeti" (bazen "parmakizi" dendiği de olur) hesaplama algoritmasıdır.

    Content-MD5 başlığı öğe gövdesinin iki uç arasında ileti bütünlük sınamasının yapılabilmesini sağlar. Bir istemci veya vekil aktarılan öğe gövdesinde rastlantısal bir değişiklik olup olmadığını saptamak için bu başlığın doğruluğunu sınayabilir. Başlık örneği:

    Content-MD5: AuLb7Dp1rqtRtxz2m9kRpA==

    Her istekte ileti özeti hesaplanacağından (değerler saklanmaz), bu yönergenin sunucunuzda başarım sorunlarına yol açacağına dikkat ediniz.

    Content-MD5, herhangi bir modül değil, sadece core modülü tarafından sunulan belgeler için gönderilir. Örneğin, SSI belgeleri CGI betikleri tarafından çıktılanırlar ve bayt seviyesinden çıktılar bu başlığa sahip olmazlar.

    top

    DefaultRuntimeDir Yönergesi

    Açıklama:Sunucunun çalışma anı dosyaları için temel dizin
    Sözdizimi:DefaultRuntimeDir dizin-yolu
    Öntanımlı:DefaultRuntimeDir DEFAULT_REL_RUNTIMEDIR (logs/)
    BaÄŸlam:sunucu geneli
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Apache 2.4.2 ve sonrasında kullanılabilmektedir.

    DefaultRuntimeDir yönergesi sunucunun çalışma anında oluşturacağı dosyaların (paylaşımlı bellek, kilitler, vb.) saklanacağı dizini belirtmekte kullanılır. Göreli bir yol belirtilirse tam yol ServerRoot yönergesinde belirtilene göreli olacaktır.

    Örnek

    DefaultRuntimeDir scratch/

    DefaultRuntimeDir için öntanımlı yer derleme sırasında DEFAULT_REL_RUNTIMEDIR #define satırı ile değiştirilebilir.

    Bilgi: ServerRoot bu yönergeden önce belirtilmiş olmalıdır, aksi takdirde temel dizin için öntanımlı ServerRoot kullanılır.

    Ayrıca bakınız:

    • ServerRoot üzerindeki izinlerin düzgün olarak nasıl ayarlanacağını öğrenmek için: güvenlik ipuçları
    top

    DefaultType Yönergesi

    Açıklama:Değeri none olduğu takdirde, bu yönergenin bir uyarı vermekten başka bir etkisi yoktur. Önceki sürümlerde, bu yönerge, sunucunun ortam türünü saptayamadığı durumda göndereceği öntanımlı ortam türünü belirlerdi.
    Sözdizimi:DefaultType ortam-türü|none
    Öntanımlı:DefaultType none
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core
    Uyumluluk:none değeri Apache httpd 2.2.7 ve sonrasında mevcuttur. Diğer tüm seçenekler Apache httpd'nin 2.3.x ve sonraki sürümleri için iptal edilmiştir.

    Bu yönerge iptal edilmiştir. Yapılandırma dosyalarının geriye uyumluluğunu sağlamak için, öntanımlı bir ortam türünün olmadığını belirten none değeriyle belirtilebilir. Örnek:

    DefaultType None

    DefaultType None sadece httpd-2.2.7 ve sonrasında mevcuttur.

    Ortam türlerini dosya uzantıları üzerinden yapılandırmak için AddType yönergesini ve mime.types yapılandırma dosyasını veya belli özkaynak türleri için ortam türlerini yapılandırmak için ForceType yönergesini kullanın.

    top

    Define Yönergesi

    Açıklama:Bir değişken tanımlar
    Sözdizimi:Define değişken-ismi [değişken-değeri]
    BaÄŸlam:sunucu geneli, sanal konak, dizin
    Durum:Çekirdek
    Modül:core

    Tek değiştirgeli biçemi httpd’yi -D seçeneğiyle çalıştırmaya eşdeğerdir. Bu yönerge, başlatma betiğinde -D seçeneğinin argümanlarını değiştirme gereği duymaksızın <IfDefine> bölümlerini kullanıma sokmak için kullanılabilir.

    Buna ek olarak, ikinci değiştirge belirtilirse yapılandırma değişkenine bu değer atanır. Değişken yapılandırmada ${VAR} sözdizimi ile kullanılabilir. Değişken daima küresel olarak tanımlı olup yapılandırma bölümünü sarmalayan etki alanı ile sınırlanmaz.

    <IfDefine TEST>
      Define servername test.example.com
    </IfDefine>
    <IfDefine !TEST>
      Define servername www.example.com
      Define SSL
    </IfDefine>
    DocumentRoot "/var/www/${servername}/htdocs"

    RewriteMap sözdizimi ile karışmalardan kaçınmak için değişken isimleri ikinokta ":" karakterleri içeremez.

    Sanal konak bağlamı ve tuzaklar

    Bu yönerge sanal konakta ve dizin içeriğinde desteklendiğinden yapılan değişiklikler (eşleşsin eşleşmesin) yönergeyi sarmalayan yapılandırma bölümünden başka, sonraki yapılandırma yönergelerine de görünür olur.

    Ayrıca bakınız:

    top

    <Directory> Yönergesi

    Açıklama:Sadece ismi belirtilen dosya sistemi dizininde ve bunun altdizinlerinde ve bunların içeriğinde uygulanacak bir yönerge grubunu sarmalar.
    Sözdizimi:<Directory dizin-yolu> ... </Directory>
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    <Directory> ve </Directory> sadece ismi belirtilen dosya sistemi dizininde, bunun altdizinlerinde ve bu dizinlerin içindeki dosyalara uygulanacak bir yönerge grubunu sarmalamakta kullanılır. Bir dizin bağlamında kullanılabilecek her yönergeye izin verilir. dizin-yolu bir dizinin tam yolu olabileceği gibi Unix kabuk tarzı bir dosya ismi eşleştirme kalıbı da olabilir. Kalıp dizgesinde, ? herhangi bir tek karakterle, * herhangi bir karakter dizisiyle eşleşir. Ayrıca [] karakter aralıkları da kullanılabilir. ‘/’ karakteri ile hiçbir kalıp karakteri eşleşmez, bu bakımdan <Directory "/*/public_html"> ile /home/user/public_html değil, ama <Directory "/home/*/public_html"> eşleşecektir. Örnek:

    <Directory "/usr/local/httpd/htdocs">
      Options Indexes FollowSymLinks
    </Directory>

    Dizin yollarında isterseniz önceleme kullanabilirsiniz, ancak eğer yol bazı boşluklar içeriyorsa mutlaka kullanmanız gerekir. Bir boşluk aksi belirtilmedikçe bir ifadenin sonunu belirlediğinden bu gereklidir.

    dizin-yolu argümanlarını belirtirken dikkatli olmalısınız: Apache httpd’nin dosyalara erişmekte kullandığı dosya sistemi yolu ile bire bir eşleşmelidir. Belli bir <Directory> dizinine uygulanan yönergeler, aynı dizine farklı bir yoldan, örneğin başka bir sembolik bağ üzerinden erişilen dosyalara uygulanmayacaktır.

    ~ karakterine ek olarak düzenli ifadeler de kullanılabilir. Örnek:

    <Directory ~ "^/www/[0-9]{3}">
    
    </Directory>

    yönergesi /www/ içindeki üç rakamdan oluşan dizinlerle eşleşecektir.

    Eğer çok sayıda (düzenli ifade olmayan) <Directory> bölümü, bir dosyayı içeren bir dizinle veya üst dizinlerinden biri ile eşleşiyorsa, uygulama en kısa eşleşmedeki yönergelerden başlayarak .htaccess dosyalarındaki yönergelere kadar genişletilir. Örneğin,

    <Directory "/">
      AllowOverride None
    </Directory>
    
    <Directory "/home">
      AllowOverride FileInfo
    </Directory>

    bölümleri ile /home/web/dir/doc.html belgesine erişirken şu aşamalardan geçilir:

    • AllowOverride None yönergesi uygulanır (.htaccess dosyaları iptal edilir).
    • AllowOverride FileInfo yönergesi uygulanır (/home dizini için).
    • Sırayla /home/.htaccess, /home/web/.htaccess ve /home/web/dir/.htaccess dosyaları içindeki FileInfo yönergeleri uygulanır.

    Normal bölümlerin tamamı uygulanıncaya kadar düzenli ifadeler değerlendirilmez. Düzenli ifadelerin tamamı yapılandırma dosyasında görüldükleri sıraya göre sınanırlar. Örneğin,

    <Directory ~ "abc$">
      # ... yönergeler burada ...
    </Directory>

    düzenli ifadeli bölümü, tüm normal <Directory> bölümleri ve .htaccess dosyaları uygulanıncaya kadar değerlendirilmeyecektir. Düzenli ifadeleri değerlendirmeye sıra gelince düzenli ifade /home/abc/public_html/abc ile eşleştirilecek ve buna ilişkin <Directory> uygulanacaktır.

    <Directory "/"> için öntanımlı erişimin tüm erişime izin vermek oluşuna dikkat ediniz. Bunu şöyle bir blokla değiştirmeniz,

    <Directory "/">
      Require all denied
    </Directory>

    ve erişilebilir olmasını istediğiniz dizinleri ayrıca belirtmeniz önerilir. Daha ayrıntılı bilgi edinmek için Güvenlik İpuçları belgesine bakınız.

    Dizin bölümleri httpd.conf dosyasında yer alır. <Directory> yönergeleri iç içe olamazlar ve bir <Limit> veya <LimitExcept> bölümü içinde bulunamazlar.

    Ayrıca bakınız:

    top

    <DirectoryMatch> Yönergesi

    Açıklama:Bir düzenli ifade ile eşleşen dosya sistemi dizinlerinin içeriklerine uygulanacak bir yönerge grubunu sarmalar.
    Sözdizimi:<DirectoryMatch düzifd> ... </DirectoryMatch>
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    <DirectoryMatch> and </DirectoryMatch> yönergeleri <Directory> gibi sadece ismi belirtilen dosya sistemi dizininde ve içindeki dosyalarda uygulanacak bir yönerge grubunu sarmalamakta kullanılır. Tek farkla argüman olarak bir düzenli ifade alır. Örnek:

    <DirectoryMatch "^/www/(.+/)?[0-9]{3}/">
        # ...
    </DirectoryMatch>

    yönergesi /www/ içindeki (veya alt dizinlerindeki) üç rakamdan oluşan dizinlerle eşleşecektir.

    Uyumluluk

    2.3.9 öncesinde, bu yönerge örtük olarak (<Directory> gibi) alt dizinlere de uygulanırdı ve satır sonu simgesi ($) ile eşleşemezdi. 2.3.9 ve sonrasında, sadece ifade ile eşleşen dizinler sarmalanan yönerge grubundan etkilenmektedir.

    Sondaki bölü çizgileri

    Bu yönerge bir bölü çizgisi ile sonlanan veya sonlanmayan dizinler için yapılan isteklere uygulanır, dolayısıyla satır sonuna ($) çıpalanmış ifadeler dikkatli yazılmalıdır.

    2.4.8 itibariyle, isimli gruplar ve geriye başvurular elde edilmekte olup ilgili isim büyük harfe çevrildikren sonra "MATCH_" ile öncelendikten sonra ortama yazılmaktadır. Böylece yol elemanlarına mod_rewrite gibi modüllerden veya düzenli ifadelerden başvurmak mümkün kılınmıştır. Karışıklığı önlemek için, numaralı (isimsiz) geriye başvurular yoksayılmaktadır. Bunların yerine isimli geriye başvurular kullanılmalıdır.

    <DirectoryMatch "^/var/www/combined/(?<sitename>[^/]+)">
        require ldap-group cn=%{env:MATCH_SITENAME},ou=combined,o=Example
    </DirectoryMatch>

    Ayrıca bakınız:

    • Normal <Directory> bölümlerindeki yönergelerle düzenli ifadelerin nasıl karıştırıldığının bir açıklaması için <Directory> yönergesine bakınız.
    • Bir istek alındığında farklı yapılandırma bölümlerinin nasıl bir arada ele alındığının açıklaması için <Directory>, <Location> ve <Files> bölümleri nasıl çalışır? belgesine bakınız.
    top

    DocumentRoot Yönergesi

    Açıklama:İstemciye görünür olan ana belge ağacının kök dizinini belirler.
    Sözdizimi:DocumentRoot dizin-yolu
    Öntanımlı:DocumentRoot "/usr/local/apache/htdocs"
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    Bu yönerge httpd tarafından dosyalarının sunulacağı dizini belirler. Alias benzeri bir yönerge ile eşleşmedikçe, sunucu istenen URL’deki yolu, belge yolu haline getirmek için belge kök dizinine ekler. Örnek:

    DocumentRoot "/usr/web"

    yapılandırması ile http://my.example.com/index.html isteği /usr/web/index.html ile eşleştirilir. dizin-yolu ile göreli dosya yolu belirtildiği takdirde belge kök dizininin ServerRoot ile belirtilen sunucu kök dizinine göre belirtildiği varsayılır.

    DocumentRoot ile belirtilen dizin bir bölü çizgisi ile bitirilmemelidir.

    Ayrıca bakınız:

    top

    <Else> Yönergesi

    Açıklama:Önceki bir <If> veya <ElseIf> bölümünün koşulu, çalışma anında bir istek tarafından yerine getirilmediği takdirde uygulanacak yönergeleri içerir
    Sözdizimi:<Else> ... </Else>
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core
    Uyumluluk:İç içe geçmiş koşullar 2.4.26 ve sonrasında değerlendirilmeye alınır

    <Else> sadece ve sadece aynı etki alanındaki en son <If> veya <ElseIf> bölümü uygulanmamışsa kapsadığı yönergeleri uygular. Örneğin:

    <If "-z req('Host')">
      # ...
    </If>
    <Else>
      # ...
    </Else>

    Burada, <If> yönergesi Host: başlıksız HTTP/1.0 istekleriyle eşleşirken <Else> Host: başlıklılarla eşleşir.

    Ayrıca bakınız:

    top

    <ElseIf> Yönergesi

    Açıklama:İçerdiği koşulun bir istek tarafınan sağlandığı ancak daha önceki bir <If> veya <ElseIf> bölümlerininkilerin sağlanmadığı durumda kapsadığı yönergelerin uygulanmasını sağlar
    Sözdizimi:<ElseIf ifade> ... </ElseIf>
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core
    Uyumluluk:İç içe geçmiş koşullar 2.4.26 ve sonrasında değerlendirilmeye alınır

    <ElseIf> kapsadığı yönergeleri sadece ve sadece belirtilen koşulun doğrulandığı ancak aynı etki alanında hemen önceki <If> veya <ElseIf> yönergesinin uygulanmadığı takdirde uygular. Örnek:

    <If "-R '10.1.0.0/16'">
      #...
    </If>
    <ElseIf "-R '10.0.0.0/8'">
      #...
    </ElseIf>
    <Else>
      #...
    </Else>

    <ElseIf> bir isteğin uzak adresi 10.0.0.0/8 ağına aitse ama 10.1.0.0/16 ağına ait değilse içerdiği yönergelerin uygulanmasını sağlar.

    Ayrıca bakınız:

    top

    EnableMMAP Yönergesi

    Açıklama:Teslimat sırasında okunacak dosyalar için bellek eşlemeyi etkin kılar.
    Sözdizimi:EnableMMAP On|Off
    Öntanımlı:EnableMMAP On
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core
    Uyumluluk:none değeri Apache 2.2.7 ve sonrasında mevcuttur.

    Bu yönerge, sunucunun teslimat sırasında gerektiği takdirde bir dosya içeriğinin okunması için bellek eşleme kullanıp kullanmayacağını belirler. Öntanımlı olarak, bir isteğin yerine getirilmesi, mod_include kullanarak sunucu tarafından çözümlenen bir dosyanın teslimatı sırasında olduğu gibi, bir dosya içindeki veriye erişilmesini gerektirdiğinde Apache httpd, işletim sistemi tarafından desteklendiği takdirde dosyayı belleğe eşler.

    Böyle bellek eşleme kimi zaman başarım artışını beraberinde getirirse de bazen sorunlardan kaçınmak için bellek eşlemeyi kapatmak daha iyi sonuç verir:

    • Bazı çok iÅŸlemcili sistemlerde bellek eÅŸleme httpd’nin baÅŸarımını düşürebilmektedir.
    • httpd bellek eÅŸlemli çalışırken bir dosyanın silinmesi veya boyutunun küçültülmesi httpd'nin parçalama arızası vererek çökmesine yol açabilir.

    Bu tür sorunlardan dolayı zarar görülebilecek sunucu yapılandırmalarında dosya teslimatında bellek eşlemlerinin kullanımını şu şekilde iptal etmeniz gerekir:

    EnableMMAP Off

    Bu özellik, sadece NFS dosya sistemi üzerinde sunulan dosyaları kapsamak üzere şu şekilde kolayca kapatılabilir:

    <Directory "/nfs-dosyaları-yolu">
      EnableMMAP Off
    </Directory>
    top

    EnableSendfile Yönergesi

    Açıklama:Dosyaların istemciye tesliminde çekirdeğin dosya gönderme desteğinin kullanımını etkin kılar.
    Sözdizimi:EnableSendfile On|Off
    Öntanımlı:EnableSendfile Off
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Öntanımlı değer 2.3.9 sürümünde Off olarak değişti.

    Bu yönerge, dosya içeriğinin istemciye teslimi için httpd’nin çekirdeğin dosya gönderme desteğini kullanıp kullanmayacağını belirler. Öntanımlı olarak, bir isteğin yerine getirilmesi, bir durağan dosyanın teslimatı sırasında olduğu gibi, bir dosya içindeki veriye erişilmesini gerektirmediği takdirde Apache httpd, işletim sistemi tarafından destekleniyorsa dosyayı istemciye teslim etmek için çekirdeğin dosya gönderme özelliğini kullanır.

    Çekirdeğin dosya gönderme mekanizması, okuma, gönderme ve tampon ayırma işlemlerini ayrı ayrı yapmaktan kaçınır. Fakat bazı platformlarda veya bazı dosya sistemlerinde aşağıda belirtilen işlemsel sorunlardan kaçınmak için bu özelliği iptal etmek daha iyidir:

    • Bazı platformlar, derleme sistemince saptanamayan bozuk bir dosya gönderme desteÄŸine sahiptir; özellikle eÄŸer derleme iÅŸlemi dosya gönderme desteÄŸinde sorun olmayan bir makinede yapılıp çalıştırılabilir dosyaların sorunlu makineye kurulduÄŸu durumda bu saptama yapılamayacaktır.
    • Linux’ta IPv6 kullanırken dosya gönderme desteÄŸi bazı aÄŸ kartlarındaki TCP toplama saÄŸlaması aktarım hatasını tetikler.
    • Itanium üzerinde çalışan Linux’ta dosya gönderme desteÄŸi (sendfile) 2GB’tan büyük dosyalarla çalışamamaktadır.
    • DocumentRoot aÄŸ dosya sistemi (NFS, SMB, CIFS, FUSE gibi) üzerinde olduÄŸu durumda çekirdek aÄŸ dosyalarını kendi arabelleÄŸi üzerinden sunamayabilir.

    Bu sorunlardan muzdarip sunucu yapılandırmaları için bu özelliği şöyle etkin kılabilirsiniz:

    EnableSendfile On

    Bu özellik, sadece bir ağ dosya sistemi üzerinde sunulan dosyaları kapsamak üzere şu şekilde kolayca kapatılabilir:

    <Directory "/nfs-dosyaları-yolu">
      EnableSendfile Off
    </Directory>

    EnableSendfile yönergesinin .htaccess ve diziniçi yapılandırmalarının mod_cache_disk tarafından desteklenmediğini lütfen aklınızdan çıkarmayın. EnableSendfile yönergesinin sadece küresel tanımları hesaba katılır.

    top

    Error Yönergesi

    Açıklama:Özel bir hata iletisiyle yapılandırma çözümlemesini durdurur
    Sözdizimi:Error ileti
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Durum:Çekirdek
    Modül:core
    Uyumluluk:2.3.9 ve sonrası

    Yapılandırmada bir hatanın saptanması istenirse, bu yönerge yapılandırma çözümlemesinin durdurulması ve özel bir hata iletisi üretilmesi için kullanılabilir. Genelde kullanıldığı durum, gerekli modüllerin yapılandırmada bulunmadığının raporlanmasıdır.

    # Örnek
    # mod_include yüklü değilse bilelim
    <IfModule !include_module>
      Error "Hata: mod_include mod_foo için gerekiyor. LoadModule ile yükleyin."
    </IfModule>
    
    # SSL veya NOSSL tanımlı mı bilelim
    <IfDefine SSL>
    <IfDefine NOSSL>
      Error "Ne SSL ne de NOSSL tanımlı. Sadece biri tanımlı olsa yeter."
    </IfDefine>
    </IfDefine>
    <IfDefine !SSL>
    <IfDefine !NOSSL>
      Error "Ya SSL ya da NOSSL tanımlı olmalı."
    </IfDefine>
    </IfDefine>
    top

    ErrorDocument Yönergesi

    Açıklama:Bir hata durumunda sunucunun istemciye ne döndüreceğini belirler.
    Sözdizimi:ErrorDocument hata-kodu belge
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core

    Bir sorun çıktığında veya hata oluştuğunda Apache httpd şu dört işlemden birini yapacak şekilde yapılandırılabilir:

    1. Yerleşik bir hata iletisi çıktılanır.
    2. Özel bir ileti çıktılanır.
    3. Sorunu/hatayı işleyecek yerel bir URL-yoluna dahili bir yönlendirme yapılır.
    4. Sorunu/hatayı işleyecek harici bir URL-yoluna yönlendirme yapılır.

    İlk seçenek öntanımlıdır. Diğer üç seçenek ErrorDocument yönergesinin argümanları (hata kodundan sonra bir URL veya hata iletisi) ile belirtilir. Apache httpd bazı durumlarda sorun/hata ile ilgili ek bilgi verecektir.

    2.4.13 itibariyle, özdevinimli dizgeler ve URLler üretmek için yönerge içinde ifade sözdizimi kullanılabilir.

    URL’ler yerel yollarda (DocumentRoot’a göre) bir bölü çizgisi (/) ile başlatılabileceği gibi istemci tarafından çözümlenecek tam bir URL şeklinde de belirtilebilir. Bunlar yerine, tarayıcıda gösterilmek üzere bir ileti de belirtilebilir. Örnekler:

    ErrorDocument 500 http://example.com/cgi-bin/server-error.cgi
    ErrorDocument 404 /errors/bad_urls.php
    ErrorDocument 401 /subscription_info.html
    ErrorDocument 403 "Kusura bakmayın, bugün hizmet veremiyoruz."
    ErrorDocument 403 /errors/forbidden.pl?referrer=%{escape:%{HTTP_REFERER}}

    Bunlardan başka, Apache httpd’nin kendi hata iletilerinin kullanılacağı özel default değeri ile belirtilebilir. Normal şartlar altında gerekmese de, bir şey belirtilmediği takdirde mevcut bir ErrorDocument yönergesini miras alan yapılandırmalarda Apache httpd’nin kendi hata iletilerinin kullanımı default değeri açıkça belirtilerek örnekteki gibi zorlanabilir:

    ErrorDocument 404 /cgi-bin/bad_urls.pl
    
    <Directory "/web/docs">
      ErrorDocument 404 default
    </Directory>

    ErrorDocument yönergesinde bir uzak URL (önünde http bulunan bir yol) belirtildiğinde, belge aynı sunucuda olsa bile, Apache HTTP Sunucusunun istemciye belgeyi bulacağı yer için bir yönlendirme göndereceğine dikkat ediniz. Bunun bazı istenmeyen etkileri vardır; en önemlilerinden biri istemcinin hata kodu yerine bir yönlendirme durum kodu alacak olmasıdır. Bu, bir URL’nin geçerliliğini durum koduna göre saptayan istemciler veya robotlar için yanıltıcı olacaktır. Buna ek olarak, ErrorDocument 401 için bir uzak URL belirttiğiniz durumda istemci 401 durum kodunu almayacağı için kullanıcıdan parola isteğinde bulunamayacaktır. Bu bakımdan, ihtiyaç duyduğunuz takdirde, ErrorDocument 401 yönergesine yerel bir belge belirtmelisiniz.

    Sunucunun ürettiği hata iletileri "çok kısa" olduğu takdirde, Microsoft Internet Explorer (MSIE) öntanımlı olarak bu hata iletilerini yoksayar ve bunun yerine kendi "kullanıcı dostu" hata iletilerini kullanır. "Çok kısa" eşiği duruma göre değişmekle birlikte, genellikle, hata iletileriniz 512 bayttan büyük olduğu takdirde MSIE kendi hata iletileri yerine sunucunun ürettiği hata iletilerini gösterecektir. Bu konuda daha fazla bilgiyi Q294807 kodlu Microsoft Knowledge Base makalesinde bulabilirsiniz.

    Çoğu yerleşik hata iletisi özel iletilerle değiştirilebilse de bazı durumlarda ErrorDocument ile ne belirtildiğine bakılmaksızın yerleşik hata iletileri kullanılır. Özellikle, bozuk bir istek saptandığında normal istek işleme hemen devre dışı bırakılır ve yerleşik hata iletisi döndürülür. Bu, hatalı istekler yaparak güvenlik sorunlarına yol açılmak istenmesi durumlarında gereklidir.

    mod_proxy kullanıyorsanız, ProxyErrorOverride yönergesini etkin kılmak isteyebilirsiniz, böylece asıl sunucular adına özel hata iletileri üretebilirsiniz. ProxyErrorOverride etkin kılınmak istenmezse, Apache httpd vekalet edilen içerik için özel hata belgeleri üretmeyecektir.

    Ayrıca bakınız:

    top

    ErrorLog Yönergesi

    Açıklama:Sunucunun hata günlüğünü tutacağı yeri belirler.
    Sözdizimi: ErrorLog dosya-yolu|syslog[:[oluşum][:etiket]]
    Öntanımlı:ErrorLog logs/error_log (Unix) ErrorLog logs/error.log (Windows ve OS/2)
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    ErrorLog yönergesi sunucunun saptadığı hataları kaydedeceği dosyanın ismini belirtmek için kullanılır. dosya-yolu ile göreli dosya yolu belirtildiği takdirde dizininin ServerRoot ile belirtilen sunucu kök dizinine göre belirtildiği varsayılır.

    ErrorLog "/var/log/httpd/error_log"

    dosya-yolu bir boru imi "|" ile başlatıldığı takdirde hata iletilerinin hata günlüğünü işleme sokacak komuta borulanacağı varsayılır.

    ErrorLog "|/usr/local/bin/httpd_errors"

    Daha fazla bilgi için borulu günlüklere bakınız.

    Dosya adı yerine syslog kullanılırsa, sistem desteklediği takdirde günlük kaydı syslogd(8) üzerinden yürütülür. Öntanımlı olarak local7 syslog oluşumu kullanılır. Bunu syslog:oluşum sözdizimini kullanarak değiştirebilirsiniz. Buradaki oluşum syslog.conf(5) kılavuz sayfasında belirtilen oluşum isimlerinden biri olabilir. Oluşum aslında küreseldir ve sanal konaklardan bazılarında değiştirilmişse, belirtilen en son oluşum tüm sunucuyu etkileyecektir. etiket için de aynı kurallar uygulanır. Genellikle, öntanımlı etiket olarak Apache çalıştırılabilirinin ismi olan httpd kullanılır. Öntanımlı etiketi syslog::etiket sözdizimini kullanarak değiştirebilirsiniz

    ErrorLog syslog:user
    ErrorLog syslog:user:httpd.srv1
    ErrorLog syslog::httpd.srv2

    Buna ek olarak, modüller kendi günlük kaydı oluşturucusunu sağlayabilir. Sözdizimi yukarıdaki örnekte kullanılan syslog sözdiziminin benzeridir.

    GÜVENLİK: Günlük dosyalarının saklandığı dizin, sunucuyu başlatan kullanıcı dışındakiler tarafından yazılabilir olduğu takdirde güvenliğinizin nasıl tehlikeye gireceği güvenlik ipuçları belgesinde ayrıntılı olarak açıklanmıştır.

    Ek Bilgi

    Unix-dışı platformlarda dosya yolunu girerken, platform ters bölü çizgilerini desteklese bile normal bölü çizgileri kullanmaya özen göstermelisiniz. Genel olarak, dosya yollarını belirtirken yapılandırma dosyası boyunca normal bölü çizgisi kullanmak her zaman daha iyidir.

    Ayrıca bakınız:

    top

    ErrorLogFormat Yönergesi

    Açıklama:Hata günlüğü girdileri için biçem belirtimi
    Sözdizimi: ErrorLogFormat [connection|request] biçem
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    ErrorLogFormat yönergesi, hata günlüğünde asıl hata iletisine ek olarak günlüklenecek ek bilgiyi belirtmek için kullanılabilir.

    #Basit örnek
    ErrorLogFormat "[%t] [%l] [pid %P] %F: %E: [client %a] %M"

    İlk değiştirge olarak connection veya request belirtilmesi ek biçemlerin belirtilebilmesini sağlar. Böylece, belli bir bağlantı ya da istek için ilk ileti günlüklendiğinde ek bilgininde günlüklenmesi sağlanır. Bu ek bilgi sadece bağlantı/istek başına bir kere günlüklenir. herhangi bir günlük iletisine sebep olmadan işlenmişse ek bilgi de günlüklenmez.

    Bu, bazı biçem dizgesi öğeleri çıktı üretmediÄŸinde olur. ÖrneÄŸin, Referer baÅŸlığı sadece günlük iletisi bir istekle iliÅŸkilendirilmiÅŸse mevcuttur ve hata iletisi Referer baÅŸlığı istemcide okunduÄŸu anda oluÅŸur. EÄŸer bir çıktı üretilmezse, öntanımlı davranış önceki boÅŸluk karakterinden sonraki boÅŸluk karakterine kadar herÅŸeyi silmektir. Yani, günlük satırı örtük olarak boÅŸluklarla ayrılmış alanlara bölünür. Bir biçem dizgesi öğesi çıktı üretmezse alanın tamamı çıktılanmaz. ÖrneÄŸin, [%t] [%l] [%a] %M  günlük biçeminde uzak adres %a kullanılamazsa sarmalayıcı köşeli ayraçlar da günlüklenmeyecektir. BoÅŸluk karakterleri ters bölülerle öncelenerek bir alanı sınırlaması önlenebilir. '% ' (yüzde boÅŸluk) çifti sıfır geniÅŸlikte bir alan ayracı olup herhangi bir çıktı üretmez.

    Yukarıdaki davranış, biçem dizgesi öğesine değiştirciler eklenerek değiştirilebilir. - (tire) değiştircisi ilgili öğe bir çıktı üretmediğinde tire iminin günlüklenmesine sebep olur. Bağlantı/istek başına bir kere biçemlerinde + (artı) değiştircisini de kullanmak mümkündür.Artı değiştiricili bir öğe herhangi bir çıktı üretmezse satırın tamamı günlüklenmez.

    Bir biçem öğesine günlük önem derecesi atamak için değiştirici olarak bir sayı kullanılabilir. Bu öğenin günlüklenebilmesi için günlük iletisinin önem derecesinin belirtilen günlük önem derecesinden daha yüksek olmaması gerekir. Sayı 1'den (alarm) 4'e (uyarı) ve 7'den (hata ayıklama) 15'e (trace8) kadar olabilir.

    Örneğin, Referer istek başlığını günlükleyen %{Referer}i dizgeciğine değiştirciler eklendiğinde neler olduğunu burada görebilirsiniz:

    Değiştirlen DizgecikAnlamı
    %-{Referer}i Referer atanmamışsa bir - günüklenir.
    %+{Referer}i Referer atanmamışsa satırın tamamı çıktılanmaz.
    %4{Referer}i Sadece hata iletisinin önemi 4'ten yüksek olduğu durumda Referer günlüklenir.

    Bazı biçem dizfesi öğeleri ayraç içine alınmış ek değiştirgeler kabul eder.

    Biçem Dizgesi Açıklama
    %% Yüzde imi
    %a İstekteki istemci IP adresi ve portu
    %{c}a Bağlantının emsal IP adresi and portu (mod_remoteip modülüne bakın)
    %A Yerel IP adresi ve portu
    %{isim}e İstek ortam değişkeni isim
    %E APR/OS hata durum kodu ve iletisi
    %F Günlük çağrısının kaynak dosya ismi ve satır numarası
    %{isim}i İstek başlığı isim
    %k Bağlantıdaki keep-alive isteklerinin sayısı
    %l İletinin günlük seviyesi
    %L İsteğin günlük kimliği
    %{c}L Bağlantının günlük kimliği
    %{C}L Bağlantı etki alanında kullanılmışsa bağlantının günlük kimliği, aksi takdirde boş
    %m İletiyi günlükleyen modülün ismi
    %M Asıl günlük iletisi
    %{isim}n istek notu isim
    %P Geçerli sürecin süreç kimliği (PID'i)
    %T Geçerli evrenin evre kimliği
    %{g}T Geçerli evrenin eşsiz sistem evre kimliği (örn, top tarafınan gösterilenle aynı kimlik: şimdilik sadece Linux'a özgü)
    %t geçerli zaman
    %{u}t Mikro saniyeler dahil geçerli zaman
    %{cu}t ISO 8601 biçemiyle uyumlu mikro saniyeleri de içeren geçerli zaman
    %v Geçerli sunucunun kurallı ServerName
    %V UseCanonicalName ayarına uygun olarak isteği sunan sunucunun sunucu ismi
    (tersbölü boşluk) Alan ayracı olmayan boşluk
    (yüzde boşluk) Alan ayracı (çıktısız)

    The log ID format %L günlük kimliği biçemi bağlantı veya istek için eşsiz bir kimlik üretir. Bu, bağlantı üzerinden gelen istek durumunda günlük satırlarının ait olduğu bağlantı veya isteği bağdaştırmak için kullanılabilir. %L biçem dizgesi ayrıca mod_log_config modülünde erişim günlüğü iletilerini hata günlüğü iletileriyle ilişklendirmek için de kullanılabilmektedir. mod_unique_id modülü yüklüyse onun eşsiz kimliği istekler için günlük kimliği olarak kullanılacaktır.

    #Örnek (Evreli MPM'ler için öntanımlı biçim)
    ErrorLogFormat "[%{u}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% ,\ referer\ %{Referer}i"

    Bunun hata iletilerindeki sonuçları şöyle olabilir:

    [Thu May 12 08:28:57.652118 2011] [core:error] [pid 8777:tid 4326490112] [client ::1:58619] File does not exist: /usr/local/apache2/htdocs/favicon.ico

    Dikkat edin, yukarıda açıklandığı gibi, bazı alanlar tanımlanmadıklarından tamamen yoksayılır.

    #Örnek (2.2.x biçimine benzer)
    ErrorLogFormat "[%t] [%l] %7F: %E: [client\ %a] %M% ,\ referer\ %{Referer}i"
    #İstek/bağlantı günlük kimlikli gelişkin bir örnek
    ErrorLogFormat "[%{uc}t] [%-m:%-l] [R:%L] [C:%{C}L] %7F: %E: %M"
    ErrorLogFormat request "[%{uc}t] [R:%L] Request %k on C:%{c}L pid:%P tid:%T"
    ErrorLogFormat request "[%{uc}t] [R:%L] UA:'%+{User-Agent}i'"
    ErrorLogFormat request "[%{uc}t] [R:%L] Referer:'%+{Referer}i'"
    ErrorLogFormat connection "[%{uc}t] [C:%{c}L] local\ %a remote\ %A"

    Ayrıca bakınız:

    top

    ExtendedStatus Yönergesi

    Açıklama:Her istekte ek durum bilgisinin izini sürer
    Sözdizimi:ExtendedStatus On|Off
    Öntanımlı:ExtendedStatus Off[*]
    BaÄŸlam:sunucu geneli
    Durum:Çekirdek
    Modül:core

    Bu yönerge, o an işlenmekte olan istek hakkında evre başına ek veriyi ve kullanım özetini izler; mod_status modülünü yapılandırarak bu değişkenleri çalışma anında görebilirsiniz. Diğer modüllerin bu sonuçlara bel bağlayabileceğini unutmayın.

    Bu ayarlar sunucunun tamamına uygulanır ve bir sanal konakta etkin başka bir sanal konakta etkisiz kılınamaz. Ek durum bilgisinin toplanması sunucuyu yavaşlatabilir. Ayrıca, bu ayarın nazikçe yeniden başlatma sırasında değiştirilemeyeceğine dikkat ediniz.

    Diğer üçüncü parti modüller aynısını yaparken mod_status modülünün yüklenmesi ExtendedStatus On için öntanımlı davranışı değiştirecektir. Böyle modüller, tüm evrelerin durumu hakkında ayrıntılı bilgi toplanmasına bel bağlar. Öntanımlı değer sürüm 2.3.6 itibariyle mod_status tarafından değiştirilmiştir. Önceki sürümlerde öntanımlı değer daima Off idi.

    top

    FileETag Yönergesi

    Açıklama:Duruk dosyalar için ETag HTTP yanıt başlığını oluşturmakta kullanılacak dosya özniteliklerini belirler.
    Sözdizimi:FileETag bileşen ...
    Öntanımlı:FileETag MTime Size
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core
    Uyumluluk:2.3.14 ve öncesinde öntanımlı deÄŸer "INode MTime Size" idi.

    FileETag yönergesi, belge bir duruk dosyaya dayandığı takdirde ETag (Entity Tag - öğe etiketi kısaltması) yanıt başlığı alanını oluşturmakta kullanılacak dosya özniteliklerini yapılandırır. (ETag değeri, ağ band genişliğinden kazanmak için arabellek yönetiminde kullanılır.) FileETagyönergesi ne kullanılması gerektiğini belirleyebilmenizi sağlar. Değer olarak belirtilebilecek anahtar sözcükler şunlardır:

    INode
    Dosyanın düğüm numarası hesaba katılır.
    MTime
    Dosyanın son değişiklik tarih ve saati dahil edilir.
    Size
    Dosyanın bayt cinsinden uzunluğu dahil edilir.
    All
    Olası tüm alanlar kullanılır. Bu şuna eşdeğerdir:
    FileETag INode MTime Size
    None
    Bir belge dosyasıyla sunulsa bile yanıta hiçbir ETag alanı dahil edilmez.

    Öntanımlı ayarları miras alıp bunların kapsamını genişletmek/daraltmak için INode, MTime ve Size anahtar sözcüklerinin önüne + veya - imi konabilir. Bu imlerin bulunmadığı bir anahtar sözcüğün varlığı halinde hiçbir değer miras alınmaz.

    EÄŸer bir dizinin yapılandırması FileETag INode MTime Size ve alt dizini FileETag -INode içeriyorsa bu alt dizinin (ve bir geçersizleÅŸtirme olmadığı takdirde onun alt dizinlerinin) ayarları FileETag MTime Size yapılandırmasına eÅŸdeÄŸer olacaktır.

    Uyarı

    WebDAV’ın etkin olduÄŸu yerlerde veya dizinlerde saklama alanı saÄŸlayıcı olarak mod_dav_fs kullanılıyorsa öntanımlı ayarları deÄŸiÅŸtirmeyiniz. mod_dav_fs, koÅŸullu isteklerde ETag karşılaÅŸtırmaları yapabilmek için MTime Size yapılandırmasını kullanır. EÄŸer ETag ayarı FileETag yönergesi kullanılarak deÄŸiÅŸtirilirse koÅŸullu istekler gerektiÄŸi gibi yerine getirilemez.

    Sunucu Taraflı İçerik

    Gömülü SSI yönergeleri ile bir duruk dosyanın FileETag, MTime ve Size değerleri değişmeksizin yanıt öğesi değişebileceğinden mod_include tarafından çözümlenen yanıtlar için bir ETag üretilmez.
    top

    <Files> Yönergesi

    Açıklama:Dosya isimleriyle eşleşme halinde uygulanacak yönergeleri içerir.
    Sözdizimi:<Files dosya-adı> ... </Files>
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core

    <Files> yönergesi, içerdiği yönergelerin etki alanını dosya isimlerine göre sınırlandırır. <Directory> ve <Location> bölümleri ile karşılaştırılabilir. Bir </Files> yönergesi ile sonlandırılması gerekir. Bu bölüm içinde belirtilen yönergeler, <Files> yönergesinde belirtilen dosya-adı’nın son bileşeniyle (dizinler atıldıktan sonda kalan dosya ismi) eşleşen nesnelere uygulanır. <Files> bölümleri yapılandırma dosyasında, <Directory> bölümleri ve .htaccess dosyaları okunduktan sonra fakat <Location> yönergelerinden önce göründükleri sıraya göre işleme sokulurlar. <Files> bölümlerinin <Directory> bölümlerinin içinde uygulama alanını sınırlamak amacıyla kullanılabileceğine dikkat ediniz.

    dosya-adı argümanının bir dosya ismi veya bir dosya ismi kalıbı içermesi gerekir. Bir dosya ismi kalıbındaki her ? imi bir karakterle eşleştirilirken * imi karakter dizileri ile eşleştirilir.

    <Files "zat.html">
        # zat.html dosyasına uygulanacakları buraya koy
    </Files>
    
    <Files "?at.*">
        # Buradakiler hat.html, kat.html, tat.html ve benzerlerine uygulanır.
    </Files>

    ~ imine ek olarak düzenli ifadeler de kullanılabilir. Örneğin

    <Files ~ "\.(gif|jpe?g|png)$">
        #...
    </Files>

    satırı en bilinen resim dosyası biçimleriyle eşleşecektir. Bunun yerine <FilesMatch> yönergesi de tercih edilebilirdi.

    <Directory> ve <Location> bölümlerinin aksine, <Files> bölümleri .htaccess dosyaları içinde kullanılabilir. Bu sayede kullanıcıların kendi dosyalarına erişimi dosya seviyesinde denetlemelerine imkan sağlanmış olur.

    Ayrıca bakınız:

    top

    <FilesMatch> Yönergesi

    Açıklama:Düzenli ifadelerin dosya isimleriyle eşleşmesi halinde uygulanacak yönergeleri içerir.
    Sözdizimi:<FilesMatch düzifd> ... </FilesMatch>
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core

    <FilesMatch> yönergesi, içerdiği yönergelerin etki alanını <Files> yönergesinin yaptığı gibi dosya isimlerine göre sınırlandırır. Ancak, argüman olarak bir düzenli ifade kabul eder. Örneğin

    <FilesMatch "\.(gif|jpe?g|png)$">
        # ...
    </FilesMatch>

    satırı en bilinen resim dosyası biçimleriyle eşleşecektir.

    Düzenli ifadenin başlangıcındaki bir .+ .pngveya .gif dosyalarının, örnek olarak, eşleşmemesini garanti eder.

    2.4.8 itibariyle, isimli gruplar ve geriye başvurular elde edilmekte olup ilgili isim büyük harfe çevrildikren sonra "MATCH_" ile öncelendikten sonra ortama yazılmaktadır. Böylece yol elemanlarına mod_rewrite gibi modüllerden veya düzenli ifadelerden başvurmak mümkün kılınmıştır. Karışıklığı önlemek için, numaralı (isimsiz) geriye başvurular yoksayılmaktadır. Bunların yerine isimli geriye başvurular kullanılmalıdır.

    <FilesMatch "^(?<sitename>[^/]+)">
        Require ldap-group cn=%{env:MATCH_SITENAME},ou=combined,o=Example
    </FilesMatch>

    Ayrıca bakınız:

    top

    ForceType Yönergesi

    Açıklama:Bütün dosyaların belirtilen ortam türüyle sunulmasına sebep olur.
    Sözdizimi:ForceType ortam-türü|None
    BaÄŸlam:dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Apache httpd 2.0’da core modülüne taşındı.

    Bu yönerge, bir .htaccess dosyası veya bir <Directory>, <Location> veya <Files> bölümüne yerleştirildiği zaman, eşleşen tüm dosyaların ortam-türü ile belirtilen içerik türüyle sunulmasına sebep olur. Örneğin, altında sadece GIF dosyaları bulunan bir dizininiz varsa ve bunlara tek tek .gif uzantısı belirtmek istemiyorsanız şu yapılandırmayı kullanabilirsiniz:

    ForceType image/gif

    Bu yönerge, AddType yönergesi üzerinden ve mime.types dosyasında örtük olarak tanımlanmış ortam türü/dosya uzantısı ilişkilerini geçersiz kılar.

    Ayrıca, daha genel ForceType ayarlarını da None değeriyle geçersiz kılabilirsiniz:

    # tüm dosyaların image/gif olarak sunulması için:
    <Location "/images">
      ForceType image/gif
    </Location>
    
    # normal MIME-türüne geri dönmek için:
    <Location "/images/mixed">
      ForceType None
    </Location>

    Bu yönerge, öncelikle dosya sisteminden sunulan duruk dosyalar için üretilen içerik türlerini geçersiz kılar. Duruk dosyaların haricindeki özkaynaklar için yanıt üretecinin genelde bir Content-Type belirttiği durumda bu yönerge etkisizdir.

    Ek Bilgi

    SetHandler veya AddHandler gibi örtük yönergeler geçerli isteğe uygulanmadığı takdirde, normalde bu yönergeler tarafından belirlenen dahili eylemcinin ismi ForceType yönergesi tarafından belirtilen içerik türü ile eşleşecek şekilde belirlenir. Bu, bazı üçüncü parti modüller (mod_php gibi) tarafından kullanılan tarihi bir uygulama olup, bu modüller istekle eşleşecek modüllerin sorumluluğu almasını sağlamak için "sihirli" içerik türleri kullanabilir. Bu tür "sihirli" içerik türlerini kullanan yapılandırmalarda SetHandler veya AddHandler kullanımından kaçınılmalıdır.

    top

    GprofDir Yönergesi

    Açıklama:gmon.out ayrıntılı inceleme verisinin yazılacağı dizin
    Sözdizimi:GprofDir /tmp/gprof/|/tmp/gprof/%
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    Sunucu gprof ayrıntılı inceleme desteği ile derlenmişse, GprofDir yönergesi gmon.out dosyalarının süreç çıktığında belirtilen dizine yazılmasını sağlar. Eğer değiştirge bir yüzde simgesi ('%') ile bitiyorsa her süreç kimliği için alt dizinler oluşturulur.

    Bu yönerge şimdilik sadece prefork MPM'i ile çalışmaktadır.

    top

    HostnameLookups Yönergesi

    Açıklama:İstemci IP adresleri üzerinde DNS sorgularını etkin kılar.
    Sözdizimi:HostnameLookups On|Off|Double
    Öntanımlı:HostnameLookups Off
    BaÄŸlam:sunucu geneli, sanal konak, dizin
    Durum:Çekirdek
    Modül:core

    Bu yönerge oturum açabilecek konak isimlerini tespit edebilmek için DNS sorgularını etkin kılar (ve sonuç REMOTE_HOST’ta belirtilerek CGI/SSI’lere aktarılır). Double değeri sorgunun çift yönlü yapılacağını belirtir. Yani, bir tersine sorgunun ardından bir normal sorgu yapılır. Normal sorguda elde edilen IP adreslerinden birinin istek yapan IP adresi ile eşleşmesi gerekir. ("tcpwrappers" terminolojisinde buna PARANOID adı verilir.)

    Konak ismine göre erişimi denetlemek için mod_authz_host kullanıldığında, nasıl bir ayar yapıldığına bakılmaksızın, çift yönlü sorgulama yapılır. Bu güvenlik için gereklidir. Bunun dışında açıkça HostnameLookups Double belirtilmedikçe genellikle çift yönlü sorgulama yapılmaz. Örneğin, sadece HostnameLookups On belirtilmiş ve konak ismi kısıtlamalarıyla korunmuş bir nesne için bir istek yapılmışsa çift yönlü sorgunun başarısına bakılmaksızın CGI’lere REMOTE_HOST olarak tek yönlü sorgu sonucu aktarılır.

    Gerçekte ters yönlü sorguya gerek duyulmayan sitelerde ağ trafiğini yormamak için Off, öntanımlı değerdir. Ayrıca, son kullanıcıların DNS sorguları nedeniyle gereksiz yere bir beklemeye maruz kalmaması için de bu daha iyidir. Yükü zaten ağır olan sitelerde, DNS sorgularının görece uzun zaman alması nedeniyle bu yönergenin değeri Off olarak bırakılmalıdır. Öntanımlı olarak kurulum dizininizin bin alt dizinine kurulan logresolve uygulaması kullanılarak oturum açan IP adresleri için isim sorguları çevrim dışıyken yapılabilir.

    Son olarak, konak ismine dayalı Require yönergelerine sahipseniz konak ismi araması HostnameLookups ayarına bakılmaksızın gerçekleştirilecektir.

    top

    HttpProtocolOptions Yönergesi

    Açıklama:HTTP İstek İletilerindeki sınırlamalarda değişiklik yapar
    Sözdizimi:HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0]
    Öntanımlı:HttpProtocolOptions Strict LenientMethods Allow0.9
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core
    Uyumluluk:2.2.32 veya 2.4.24 ve sonrası

    Bu yönerge HTTP istek satırına (RFC 7230 §3.1.1) ve the HTTP istek başlığı alanlarına (RFC 7230 §3.2) uygulanmış kuralları öntanımlı olarak veya Strict seçeneği kullanılarak değiştirir. Eski modüller, uygulamalar veya kullanımı önerilmeyen özel istemciler için eski davranışlara dönmeyi sağlamak üzere Unsafe seçeneği eklenmiştir.

    Bu kurallar istek işlenmeden önce uygulanır. Dolayısıyla yönerge, IP/port arabirimine göre ana bölümde veya öntanımlı (ilk) eşleşen sanal konak bölümünde yapılandırılmalıdır.

    Bu yönergeye aşağıdaki parametrelerden seçilen üç tanesi uygulanabilir. Belirtilmeyenlerin yerine öntanımlılar uygulanır.

    Strict|Unsafe

    Bu yönerge devreye girmeden önce, Apache HTTP Sunucusunun istek iletisi ayrıştırıcıları protokolle uyumlu olmayan bir dizi girdi şekline toleranslıydı. RFC 7230 §9.4 İstek bölme ve §9.5 Yanıt kaçırma çağrıları uyumsuz istek iletilerinin kabulündeki olası risklerden yalnızca iki tanesidir. RFC 7230 §3.5 "İleti Ayrıştırma Sağlamlığı" belirsiz boşlukların kabul ve istek iletisi biçimleme risklerini tanımlar. Bu yönergenin devreye girmesini takiben belirtimin tüm imla kurallarına öntanımlı Strict işlem kipi ve 3.5 bölümünde tavsiye edilen hoşgörüsüz boşluk uygulanır ve esnekliğe müsamaha edilmez.

    Unsafe için güvenlik riskleri

    Kullanıcılar, özellikle dışa bakan, herkes tarafından erişilebilen sunucu konuşlandırmalarında Unsafe işlem kipine geçiş yapmaya karşı kesinlikle uyarılır. Eğer bir arayüz hataları izlemek veya bir intranette çalışan özel hizmet tüketicileri için gerekliyse, kullanıcılar, sadece, dahili özel ağlarına hizmet etmek üzere yapılandırılmış özel bir sanal konak üzerinde Unsafe işlem kipine geçiş yapmalıdır.

    Strict kipte HTTP 400 ile sonuçlanan bir istek örneği

    # Eksik CRLF
    GET / HTTP/1.0\n\n

    Komut satırı araçları ve CRLF

    Bazı araçların CRLF kullanmaya zorlanması gerekir, aksi takdirde httpd yukarıdaki örnekte belirtildiği gibi bir HTTP 400 yanıtı ile döner. Örneğin, OpenSSL s_client düzgün çalışmak için -crlf değiştirgesine ihtiyaç duyar.

    CRLF yokluğu gibi durumları saptamak için HTTP isteğini görünümlemek isterseniz DumpIOInput yönergesi yardımcı olabilir.

    RegisteredMethods|LenientMethods

    RFC 7231 §4.1 "İstek Yöntemleri" "Genel Bakış" bölümlerinde bir istek satırında desteklenmeyen bir yöntem saptadığında özgün sunucuların bir hatayla yanıt vermesini gerekli görmüştür. LenientMethods seçeneği kullanıldığında olan zaten budur. RegisteredMethods seçeneğine geçiş yapmak isteyen yöneticiler RegisterHttpMethod yönergesini kullanarak standart olmayan yöntemleri belirlemelidir. Özellikle Unsafe seçeneğine geçiş yapılacaksa bu yol izlenmelidir.

    İleri Vekil Uyumluluğu

    Özgün sunucunun kullandığı yöntemleri vekil sunucu bilemeyeceği için ileri vekil konaklarda RegisteredMethods seçeneğine geçiş yapılmamalıdır.

    Example of a request leading to HTTP 501 with LenientMethods mode

    # Unknown HTTP method
    WOW / HTTP/1.0\r\n\r\n

    # Lowercase HTTP method
    get / HTTP/1.0\r\n\r\n

    Allow0.9|Require1.0

    RFC 2616 §19.6 "Önceki Sürümlerle Uyumluluk" bölümünde HTTP sunucularının eski HTTP/0.9 isteklerini desteklemesi tavsiye edilmektedir. RFC 7230 "HTTP/0.9 isteklerini destekleme beklentisi kaldırılmıştır." cümlesiyle bunu geçersiz kılmış ve RFC 7230 Ek A bölümünde bununla ilgili yorumlar yer almıştır. Require1.0 seçeneği kullanıcıya öntanımlı Allow0.9 seçeneğinin davranışına verilen desteği kaldırma imkanını vermektedir.

    Require1.0 kipinde HTTP 400 ile sonuçlanan bir istek örneği

    # Desteklenmeyen HTTP sürümü
    GET /\r\n\r\n

    LogLevel debug seviyesiyle yapılandırılmış ErrorLog ile kaydedilmiş günlüklerin gözden geçirilmesi, böyle hatalı isteklerin kaynaklandıkları yerle birlikte belirlenmesine yardımcı olabilir. Kullanıcılar, beklenmedik bir şekilde reddedilmiş geçersiz istekleri bulmak için erişim günlüklerindeki 400 yanıtlarına özellikle dikkat etmelidir.

    top

    <If> Yönergesi

    Açıklama:Çalışma anında bir koşul bir istek tarafından yerine getirildiği takdirde uygulanacak yönergeleri barındırır.
    Sözdizimi:<If ifade> ... </If>
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core
    Uyumluluk:İç içe geçmiş koşullar 2.4.26 ve sonrasında değerlendirilmeye alınır

    <If> yönergesi bir ifadeyi çalışma anında değerlendirir ve ifadenin sonucu doğru olduğu takdirde içerdiği yönergeleri uygular. Örnek:

    <If "-z req('Host')">

    Bir Host: başlığı içermeyen HTTP/1.0 istekleriyle eşleşir. İfadeler, dizge karşılaştırması (==, !=, <, ...), tamsayı karşılaştırması (-eq, -ne, ...) ve diğerleri (-n, -z, -f, ...) için kabuktakilere benzer çeşitli işleçler içerebilir. Ayrıca, düzenli ifadeleri,

    <If "%{QUERY_STRING} =~ /(delete|commit)=.*?elem/">

    kabuk tarzı kalıp eşleştirme ve birçok başka işlemi kullanmak da mümkündür. Bu işlemler istek başlıklarında (req), ortam değişkenlerinde (env) ve çok sayıda başka niteliklerin üstünde yapılabilir. Apache HTTP Sunucusundaki İfadeler belgesinde daha ayrıntılı bilgi bulabilirsiniz.

    Bu yapılandırma bölümünün içinde sadece dizin bağlamını destekleyen yönergeler kullanılabilir.

    <If> sonrasında atanan CONTENT_TYPE gibi belli değişkenler ve diğer yanıt başlıkları zaten yorumlanmış olacaklarından bu yönerge için kullanılabilir olmayacaktır.

    Ayrıca bakınız:

    top

    <IfDefine> Yönergesi

    Açıklama:Başlatma sırasında bir doğruluk sınamasından sonra işleme sokulacak yönergeleri sarmalar.
    Sözdizimi:<IfDefine [!]parametre-adı> ... </IfDefine>
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core

    <IfDefine sınama>...</IfDefine> bölümü koşullu olarak işleme sokulacak yönergeleri içerir. Bir <IfDefine> bölümü içindeki yönergeler sadece sınama doğru sonuç verirse işleme sokulur. Aksi takdirde, bölüm içinde kalan her şey yok sayılır.

    <IfDefine> bölüm yönergesinde sınama için belirtilebilecek iki biçim vardır:

    • parametre-adı
    • !parametre-adı

    Birinci durumda bölüm içinde kalan yönergeler sadece parametre-adı ile belirtilen parametre tanımlı ise işleme sokulur. İkinci durumda ise tersi yapılır, yani sadece parametre-adı ile belirtilen parametre tanımlı değil ise yönergeler işleme sokulur.

    parametre-adı argümanı sunucu başlatılırken httpd komut satırında -Dparametre ile veya Define yönergesi ile belirtilerek tanımlı hale getirilebilir.

    <IfDefine> bölümleri iç içe olabilir, dolayısıyla çok parametreli basit sınamalar gerçeklenebilir. Örnek:

    httpd -DReverseProxy -DUseCache -DMemCache ...

    <IfDefine ReverseProxy>
      LoadModule proxy_module   modules/mod_proxy.so
      LoadModule proxy_http_module   modules/mod_proxy_http.so
      <IfDefine UseCache>
        LoadModule cache_module   modules/mod_cache.so
        <IfDefine MemCache>
          LoadModule mem_cache_module   modules/mod_mem_cache.so
        </IfDefine>
        <IfDefine !MemCache>
          LoadModule cache_disk_module   modules/mod_cache_disk.so
        </IfDefine>
      </IfDefine>
    </IfDefine>
    top

    <IfDirective> Yönergesi

    Açıklama:Belirtilen yönerge adının varlığı veya yokluğuna bağlı olarak çalıştırılacak yönergeleri sarmalar.
    Sözdizimi:<IfDirective [!]yönerge-adı> ... </IfDirective>
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core
    Uyumluluk:2.4.34 ve sonrasında kullanılabilir.

    <IfDirective yönerge-adı> ...</IfDirective> bölümü içindeki yönergeler yönerge-adı ile belirtilen yönerge mevcutsa çalıştırılır yoksa yok sayılır.

    <IfDirective> yönergenide sınama iki türlü yapılır:

    • yönerge-adı
    • !yönerge-adı

    İlk durumda bölüm içinde kalan yönergeler, yönerge başlangıç satırına belirtilen yönerge işlem sırasında mevcutsa çalıştırılır, değilse çalıştırılmaz. İkinci durumda ise, bölüm içinde kalan yönergeler, yönerge başlangıç satırına belirtilen yönerge işlem sırasında mevcut değilse çalıştırılır, mevcutsa çalıştırılmaz.

    Bu yönergeyi kullanma ihtiyacı sadece çok sayıda httpd tek bir yapılandırma dosyası ile çalıştırılmak zorundaysa ortaya çıkar. Böyle bir ihtiyacın olmadığı normal durumlarda yönergelerin <IfDirective> bölümlerine yerleştirlmesine gerek yoktur.

    Ayrıca bakınız:

    top

    <IfFile> Yönergesi

    Açıklama:Başlatma sırasında bir dosyanın varlığı durumunda işleme sokulacak yönergeleri sarmalar.
    Sözdizimi:<IfFile [!]dosyaadı> ... </IfFile>
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core
    Uyumluluk:2.4.34 ve sonrsında kullanılabilir.

    <IfFile dosyaadı>...</IfFile> bölümü bir dosyanın diskteki mevcudiyetine bağlı olarak çalıştırılacak yönergeleri belirtmekte kullanılır. <IfFile> bölümü içindeki yönergeler sadece diskte dosyaadı mevcutsa çalıştırılır. dosyaadı mevcut değilse bölüm içindeki yönergeler yok sayılır. dosyaadı sunucu kök dizinine göreli veya mutlak bir yol olarak belirtilebilir.

    <IfFile> bölüm yönergesindeki dosyaadı, <IfDefine> yönergesindeki sınama değişkenindeki gibi ele alınır, yani dosyaadı bir ! ile öncelenirse bölüm içindeki yonergeler dosyanın yokluğu durumunda çalıştırılır.

    Göreli bir dosyaadı belirtilmişse sınama ServerRoot yönergesinde belirtilen dizinde göre yapılır. <IfFile> yönergesinin ServerRoot yönergesinde önce yer alması durumunda dosya yolu derleme sırasında kullanılan sunucu köküne veya komut satırında -d seçeneği ile belirtilen dizine göre sınanır.

    top

    <IfModule> Yönergesi

    Açıklama:Belli bir modülün varlığına veya yokluğuna göre işleme sokulacak yönergeleri sarmalar.
    Sözdizimi:<IfModule [!]modül-dosyası|modül-betimleyici> ... </IfModule>
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Modül betimleyiciler 2.1 sürümünde ve sonrası için geçerlidir.

    <IfModule sınama>...</IfModule> bölümü belli bir modülün varlığına veya yokluğuna göre işleme sokulacak yönergeleri içerir. Bir <IfModule> bölümü içindeki yönergeler sadece sınama doğru sonuç verirse işleme sokulur. Aksi takdirde, bölüm içinde kalan her şey yok sayılır.

    <IfModule> bölüm yönergesinde sınama için belirtilebilecek iki biçim vardır:

    • modül
    • !modül

    Birinci durumda bölüm içinde kalan yönergeler sadece modül ile belirtilen modül Apache httpd içine dahil edilmişse veya LoadModule yönergesi ile devingen olarak yüklenmişse işleme sokulur. İkinci durumda ise tersi yapılır, yani sadece modül içerilmiş değil ise yönergeler işleme sokulur.

    modül argümanında bir modül betimleyici veya modülün derleme sırasındaki dosya adı belirtilebilir. Örneğin, rewrite_module bir betimleyici, mod_rewrite.c ise bir dosya ismidir. Eğer modül çok sayıda kaynak dosyasından oluşuyorsa STANDARD20_MODULE_STUFF dizgesini içeren dosyanın ismi kullanılır.

    <IfModule> bölümleri iç içe olabilir, dolayısıyla çok parametreli basit sınamalar gerçeklenebilir.

    Bu bölümü sadece yapılandırma dosyanızın belli modüllerin varlığına veya yokluğuna bağlı olarak çalışması gerektiği durumlarda kullanmalısınız. Normal işlemlerde yönergelerin <IfModule> bölümlerine yerleştirilmeleri gerekmez.
    top

    <IfSection> Yönergesi

    Açıklama:Belirtilen bölüm adının varlığı veya yokluğuna bağlı olarak çalıştırılacak yönergeleri sarmalar.
    Sözdizimi:<IfSection [!]bölüm-adı> ... </IfSection>
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core
    Uyumluluk:2.4.34 ve sonrasında kullanılabilir.

    <IfSection bölüm-adı> ...</IfSection> bölümü içindeki yönergeler bölüm-adı ile belirtilen bölüm mevcutsa çalıştırılır yoksa yok sayılır. Bir bölüm yönergesi "<" ile öncelenmiş bir yönerge adına sahip olmalı ve <VirtualHost> gibi başka yönergeleri sarmalayan bir yönerge olmalıdır.

    <IfSection> bölümü içindeki yönergeler sadece sınama doğru ise çalıştırılır, sınama yanlışsa çalıştırılmaz.

    bölüm-adı başında "<" veya sonunda ">" olmaksızın belirtilmelidir. <IfSection> yönergesindeki bölüm-adı iki türlü ele alınır:

    • bölüm-adı
    • !bölüm-adı

    İlk durumda bölüm içinde kalan yönergeler, yönerge başlangıç satırına belirtilen bölüm işlem sırasında mevcutsa çalıştırılır, değilse çalıştırılmaz. İkinci durumda ise, bölüm içinde kalan yönergeler, yönerge başlangıç satırına belirtilen bölüm işlem sırasında mevcut değilse çalıştırılır, mevcutsa çalıştırılmaz.

    Örnek:

    <IfSection VirtualHost>
       ...
    </IfSection>
    Bu yönergeyi kullanma ihtiyacı sadece çok sayıda httpd tek bir yapılandırma dosyası ile (belli bir bölüm yönergesinin var olup olmamasına bakmaksızın) çalıştırılmak zorundaysa ortaya çıkar. Böyle bir ihtiyacın olmadığı normal durumlarda yönergelerin <IfSection> bölümlerine yerleştirlmesine gerek yoktur.

    Ayrıca bakınız:

    top

    Include Yönergesi

    Açıklama:Sunucu yapılandırma dosyalarının başka dosyaları içermesini sağlar.
    Sözdizimi:Include dosya-yolu|dizin-yolu|joker
    BaÄŸlam:sunucu geneli, sanal konak, dizin
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Dizin kalıbıyla eşleşme ise 2.3.6 ve sonrasında mevcuttur.

    Bu yönerge sunucu yapılandırma dosyalarının başka dosyaları içermesini mümkün kılar.

    Çok sayıda dosyayı bir kerede alfabetik sırada içermek için yolun dosya ismi ve dizin parçalarında kabuk tarzı (fnmatch()) dosya ismi kalıp karakterleri kullanılabilir. Ayrıca, eğer Include yönergesi bir dosya değil de bir dizin gösteriyorsa Apache httpd bu dizindeki ve alt dizinlerindeki bütün dosyaları okuyacaktır. Bunula birlikte, dizinin bir bütün olarak okutulması önerilmez, çünkü dizinde httpd programının çökmesine sebep olabilecek geçici dosyalar unutulabilir. Bunun yerine, belli bir şablona uyan dosyaları seçebilmek için, örneğin *.conf gibi dosya kalıplarının kullanılmasını öneriyoruz.

    Include yönergesi, bir dosya kalıbı ifadesi hiçbir dosyayla eşleşmezse bir hatayla başarısız olacaktır. Eşleşmeyen dosya kalıbı ifadelerinin yoksayılması gerekiyorsa IncludeOptional yönergesi kullanılabilir.

    Dosya yolu mutlak bir dosya yolu olarak belirtilebileceği gibi ServerRoot dizinine göreli olarak da belirtilebilir.

    Örnekler:

    Include /usr/local/apache2/conf/ssl.conf
    Include /usr/local/apache2/conf/vhosts/*.conf

    Veya dizinler ServerRoot dizinine göre belirtilebilir:

    Include conf/ssl.conf
    Include conf/vhosts/*.conf

    Dosya kalıbı karakterleri yolun dizin ve dosya parçalarına yerleştirilebilir. conf/vhosts altında en azından bir *.conf içeren hiçbir alt dizin yoksa bu örnek başarısız olacaktır:

    Include conf/vhosts/*/*.conf

    Bunun yerine, dizin ve dosyaların eksikliği durumunda aşağıdaki komut sadece yoksayılır:

    IncludeOptional conf/vhosts/*/*.conf

    Ayrıca bakınız:

    top

    IncludeOptional Yönergesi

    Açıklama:Diğer yapılandırma dosyalarının sunucu yapılandırma dosyasına dahil edilmesini sağlar
    Sözdizimi:IncludeOptional dosya-yolu|dizin-yolu|joker
    BaÄŸlam:sunucu geneli, sanal konak, dizin
    Durum:Çekirdek
    Modül:core
    Uyumluluk:2.3.6 ve sonrasına kullanılabilmektedir. Dosya kalıp karakterleri içermeyen dosya yollarından mevcut olmayanlar 2.4.30 sürümünden itibaren sözdizimi hatalarına sebep olmamaktadır.

    Bu yönerge, diğer yapılandırma dosyalarının sunucu yapılandırma dosyasında içerilmesini sağlar. Çalışması Include yönergesi ile bir istisna dışında aynıdır. Dosya kalıp karakterlerinin hiçbir dosya veya dizinle eşleşmemesi veya dosya yolunun dosya sisteminde mevcut olmaması durumunda bir hata oluşmayacak ve bu durum sadece yoksayılacaktır.

    Ayrıca bakınız:

    top

    KeepAlive Yönergesi

    Açıklama:HTTP kalıcı bağlantılarını etkin kılar
    Sözdizimi:KeepAlive On|Off
    Öntanımlı:KeepAlive On
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    Keep-Alive yönergesi HTTP/1.0 protokolüne bir eklenti olup HTTP/1.1 protokolünün kalıcı bağlantı özelliği aynı TCP bağlantısı üzerinden çok sayıda isteğin gönderilmesini mümkün kılan uzun süreli HTTP oturumları açılmasını sağlar. Bunun, çok sayıda resim içeren HTML belgelerin yanıt zamanlarında bazı durumlarda %50’lik bir hızlanmayla sonuçlandığı gösterilmiştir. Kalıcı bağlantıları etkin kılmak için yönerge KeepAlive On şeklinde kullanılır.

    HTTP/1.0 istemcileri için kalıcı bağlantılar sadece bir istemci tarafından özellikle istendiği takdirde kullanılabilir. Ek olarak, HTTP/1.0 istemci kalıcı bağlantıları sadece içerik uzunluğu baştan bilindiği zaman kullanılabilir. Bu, CGI çıktısı, SSI sayfaları ve sunucunun ürettiği dizin listeleri gibi genellikle HTTP/1.0 istemcilere kalıcı bağlantılar kullanmayan devingen içeriklere uygulanır. HTTP/1.1 istemciler için kalıcı bağlantılar aksi belirtilmedikçe öntanımlıdır. İstemci istediği takdirde, uzunluğu bilinmeyen içerik kalıcı bağlantılar üzerinden gönderilirken parçalı kodlama kullanılacaktır.

    Bir istemci kalıcı bağlantı kullandığı takdirde, bağlantı üzerinden kaç istek gönderilirse gönderilsin, MaxConnectionsPerChild yönergesi bakımından tek bir istek olarak değerlendirilir.

    Ayrıca bakınız:

    top

    KeepAliveTimeout Yönergesi

    Açıklama:Bir kalıcı bağlantıda sunucunun bir sonraki isteği bekleme süresi
    Sözdizimi:KeepAliveTimeout sayı[ms]
    Öntanımlı:KeepAliveTimeout 5
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    Sunucunun kalıcı bir bağlantıyı kapatmadan önce bir sonraki isteği kaç saniye bekleyeceğini belirler. Ayrıca, ms soneki kullanılarak süreyi milisaniye olarak belirtmek de mümkündür. İstek alındıktan sonra Timeout yönergesiyle belirtilen zaman aşımı değeri uygulanır.

    KeepAliveTimeout için yüksek bir değer belirtmek ağır yüklü sunucularda başarım sorunlarına yol açar. Daha yüksek bir zaman aşımı, boştaki istemcilerin bulunduğu bağlantıları bekleyen daha fazla sunucu sürecini meşgul edecektir.

    İsme dayalı sanal konak için KeepAliveTimeout atanmamışsa, yerel IP adresi ve portu ile en iyi eşleşen ilk sanal konağın değeri kullanılır.

    top

    <Limit> Yönergesi

    Açıklama:Erişimi sınırlanacak HTTP yöntemleri için erişim sınırlayıcıları sarmalar.
    Sözdizimi:<Limit yöntem [yöntem] ... > ... </Limit>
    BaÄŸlam:dizin, .htaccess
    Geçersizleştirme:AuthConfig, Limit
    Durum:Çekirdek
    Modül:core

    Erişim denetleyicileri normalde tüm erişim yöntemleri için etkindir ve olağan olanı da budur. Genel durum olarak, erişim denetim yönergeleri bir <Limit> bölümüne yerleştirilmemelidir.

    <Limit> bölümünün amacı, erişim denetleyicilerinin etkilerini belli HTTP yöntemleri için sınırlamaktır. <Limit> bölümü içinde listelenen erişim sınırlamaları, kalan tüm diğer yöntemler için etkisiz olacaktır. Aşağıdaki örnekte, erişim sınırlaması POST, PUT ve DELETE yöntemleri için uygulanmakta, diğer tüm yöntemler korumasız bırakılmaktadır:

    <Limit POST PUT DELETE>
      Require valid-user
    </Limit>

    Birden fazla bölümde kullanılabilecek yöntem isimleri: GET, POST, PUT, DELETE, CONNECT, OPTIONS, PATCH, PROPFIND, PROPPATCH, MKCOL, COPY, MOVE, LOCK ve UNLOCK. Yöntem isimleri harf büyüklüğüne duyarlıdır. GET yöntemi sınırlanırsa HEAD istekleri de sınırlanmış olur. TRACE yöntemi sınırlanamaz (bkz, TraceEnable).

    Erişimi sınarlarken bir <Limit> bölümü yerine daima bir <LimitExcept> bölümünü tercih etmelisiniz, çünkü <LimitExcept> bölümü belirtilen yöntemler dışında kalanlara erişim koruması sağlar.

    <Limit> ve <LimitExcept> yönergeleri iç içe olabilirler. Bu durumda, başarılı her <Limit> veya <LimitExcept> seviyesi, erişim denetimlerinin uygulanacağı yöntemlerle sınırlı kalmalıdır.

    <Limit> veya <LimitExcept> yönergelerini Require yönergesi ile birlikte kullanılırken, ilk Require yönergesinin bir başka Require yönergesinin varlığından bağımsız olarak isteği başarıyla yetkilendirdiğine dikkat ediniz.

    Örneğin, aşağıdaki yapılandırmayı ele alalım; tüm kullanıcılar POST istekleri için yetkilendirilecek ve tüm durumlarda Require group editors yönergesi yoksayılacaktır:

    <LimitExcept GET>
      Require valid-user
    </LimitExcept>
    <Limit POST>
      Require group editors
    </Limit>
    top

    <LimitExcept> Yönergesi

    Açıklama:İsimleri belirtilenler dışında kalan HTTP yöntemleri için kullanılacak erişim sınırlayıcıları sarmalar.
    Sözdizimi:<LimitExcept yöntem [yöntem] ... > ... </LimitExcept>
    BaÄŸlam:dizin, .htaccess
    Geçersizleştirme:AuthConfig, Limit
    Durum:Çekirdek
    Modül:core

    <LimitExcept> ve </LimitExcept> argüman olarak belirtilenler dışında kalan HTTP yöntemleri için kullanılacak erişim sınırlayıcıları gruplamakta kullanılır. Yani, <Limit> bölümünün tersine, standart olsun olmasın bütün yöntemler için erişimi kısıtlamakta kullanılabilir. Daha ayrıntılı bilgi edinmek için <Limit> yönergesinin açıklamasına bakınız.

    Örnek:

    <LimitExcept POST GET>
      Require valid-user
    </LimitExcept>
    top

    LimitInternalRecursion Yönergesi

    Açıklama:Dahili yönlendirmelerin ve istek içi isteklerin azami sayısını belirler.
    Sözdizimi:LimitInternalRecursion sayı [sayı]
    Öntanımlı:LimitInternalRecursion 10
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    Örneğin, özgün istekleri dahili olarak bir CGI betiğine yönlendiren Action yönergesi kullanıldığında bir dahili yönlendirme oluşur. İstek içi istekler ise bazı URI’ler için istek yapıldığında ne olacağını bulmak için Apache httpd’nin kullandığı bir mekanizmadır. Örneğin, mod_dir, DirectoryIndex yönergesinde listelenen dosyalara bakmak için istek içi istekler kullanır.

    LimitInternalRecursion yönergesi sunucunun dahili yönlendirmeler ve istek içi isteklerin oluşturduğu döngülerden dolayı çökmemesini sağlar. Böyle döngüler genellikle yanlış yapılandırma sonucu ortaya çıkarlar.

    Yönerge her istek için değerlendirmeye alınacak iki farklı sınırlama için kullanılabilir. İlk sayı ardarda gelebilen dahili yönlendirmelerin azami sayısını, ikinci sayı ise istek içi isteklerin ne kadar iç içe olabileceğini belirler. Tek bir sayı belirtilirse iki sınırlama için de aynı değer kullanılır.

    LimitInternalRecursion 5
    top

    LimitRequestBody Yönergesi

    Açıklama:İstemci tarafından gönderilen HTTP istek gövdesinin toplam uzunluğunu sınırlar.
    Sözdizimi:LimitRequestBody bayt-sayısı
    Öntanımlı:LimitRequestBody 0
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core

    Bu yönerge, bir istek gövdesinde izin verilen bayt sayısını 0 (sınırsız anlamında) ile 2147483647 (2GB) arasında sınırlamak için kullanılır. Vekil isteklerinin snırlı uygulanabilirliği için aşağıdaki nota bakınız.

    LimitRequestBody yönergesi kullanıcıya yönergenin kullanıldığı bağlam (sunucu, belli bir dizin, belli bir dosya, belli bir yer) dahilinde bir HTTP istek iletisi gövdesinin izin verilen uzunluğu için bir sınır belirleme imkanı verir. Eğer istemcinin isteği bu sınırı aşarsa sunucu isteği sunmak yerine bir hata iletisi döndürecektir. Normal bir istek ileti gövdesinin uzunluğu büyük oranda özkaynağın doğasına ve bu özkaynak üzerinde izin verilen yöntemlere bağlıdır. CGI betikleri genellikle ileti gövdesini form bilgisini almak için kullanır. PUT yöntemi gerçeklenimleri, en azından, sunucunun o özkaynak için kabul etmek isteyeceği herhangi bir gösterim kadar büyük bir değer gerektirecektir.

    Bu yönerge, bazı hizmet reddi (DoS) saldırılarından kaçınmak için sunucu yöneticilerine, anormal istemci istekleri üzerinde daha iyi denetim imkanı sağlar.

    Eğer, örneğin, belli bir yere dosya yükleme izni verir ve buraya yüklenebilecek dosya boyutunu 100 kB ile sınırlamak isterseniz yönergeyi şöyle kullanabilirsiniz:

    LimitRequestBody 102400

    Bu yönergenin vekil istekleri tarafından nasıl yorumlandığı mod_proxy belgesinde ayrıntılı olarak açıklanmıştır.

    top

    LimitRequestFields Yönergesi

    Açıklama:İstemciden kabul edilecek HTTP isteği başlık alanlarının sayısını sınırlar.
    Sözdizimi:LimitRequestFields sayı
    Öntanımlı:LimitRequestFields 100
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    sayı, en küçük 0 (sınırsız anlamında), en büyük 32767 olabilir. Öntanımlı değer bir derleme zamanı sabiti olan DEFAULT_LIMIT_REQUEST_FIELDS ile belirlenir (dağıtımla gelen değeri 100’dür).

    LimitRequestFields yönergesi sunucu yöneticilerine bir HTTP isteğinde izin verilen istek başlık alanlarının sayısı üzerindeki sınırı değiştirebilme imkanı verir. Sunucu bu değerin, normal bir istemci isteğinin içerebileceği alan sayısından daha büyük olmasına ihtiyaç duyar. Bir istemci tarafından kullanılan istek başlık alanlarının sayısı nadiren 20’yi geçer, fakat bu farklı istemci gerçeklenimleri için değişiklik gösterir ve çoğunlukla kullanıcının tarayıcısını ayrıntılı içerik müzakeresini desteklemek için nasıl yapılandırdığıyla ilgilidir. İsteğe bağlı HTTP eklentileri çoğunlukla istek başlık alanları kullanılarak ifade edilir.

    Bu yönerge, bazı hizmet reddi (DoS) saldırılarından kaçınmak için sunucu yöneticilerine, anormal istemci istekleri üzerinde daha iyi denetim imkanı sağlar. Eğer normal istemciler sunucudan istekte bulunurken çok fazla başlık alanı gönderildiğine dair bir hata iletisi alırlarsa bu değerin arttırılması gerekir.

    Örnek:

    LimitRequestFields 50

    Uyarı

    İsme dayalı sanal konaklar kullanıldığında, bu yönergenin değeri, yerel IP adresi ve port çifti için öntanımlı olan (listedeki ilk) sanal konaktan alınır.

    .
    top

    LimitRequestFieldSize Yönergesi

    Açıklama:İstemciden kabul edilecek HTTP isteği başlık uzunluğunu sınırlar.
    Sözdizimi:LimitRequestFieldSize bayt-sayısı
    Öntanımlı:LimitRequestFieldSize 8190
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    Bu yönerge, HTTP istek başlığında izin verilecek bayt sayısını belirler.

    LimitRequestFieldSize yönergesi, sunucu yöneticilerine HTTP istek başlık alanının azami uzunluğunu ayarlama imkanı verir. Sunucu bu değerin, normal bir istemci isteğinin içerebileceği herhangi bir başlık alanını tutabilecek kadar büyük olmasını gerektirir. Normal bir istek başlık alanı uzunluğu kullanıcının tarayıcısını ayrıntılı içerik müzakeresini desteklemek için nasıl yapılandırdığıyla ilgilidir. SPNEGO kimlik doğrulama başlıkları 12392 baytlık olabilir.

    Bu yönerge, bazı hizmet reddi (DoS) saldırılarından kaçınmak için sunucu yöneticilerine, anormal istemci istekleri üzerinde daha iyi denetim imkanı sağlar.

    Örnek:

    LimitRequestFieldSize 4094
    Normal şartlar altında öntanımlı değer değiştirilmemelidir. Ayrıca, kaynak kodu değiştirip yeniden derlemeden bu değeri 8190'dan büyük yapamazsınız.

    Uyarı

    İsme dayalı sanal konaklar kullanıldığında, bu yönergenin değeri, yerel IP adresi ve port çifti için öntanımlı olan (listedeki ilk) sanal konaktan alınır.

    top

    LimitRequestLine Yönergesi

    Açıklama:İstemciden kabul edilecek HTTP istek satırının uzunluğunu sınırlar.
    Sözdizimi:LimitRequestLine bayt-sayısı
    Öntanımlı:LimitRequestLine 8190
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    Bu yönerge, HTTP istek satırında izin verilecek bayt sayısını belirler.

    LimitRequestLine yönergesi, sunucu yöneticilerine bir istemcinin HTTP istek satırının azami uzunluğunu ayarlama imkanı verir. İstek satırının içeriği HTTP yöntemi, URI ve protokol sürümünden oluştuğundan LimitRequestLine yönergesi, sunucudan bir istek için kullanılan istek adresinin uzunluğunu sınırlamış olur. Sunucu bu değerin, bir GET isteğinin sorgu kısmında aktarılabilen her bilgi dahil, özkaynak isimlerinden her birini tutabilecek kadar büyük olmasını gerektirir.

    Bu yönerge, bazı hizmet reddi (DoS) saldırılarından kaçınmak için sunucu yöneticilerine, anormal istemci istekleri üzerinde daha iyi denetim imkanı sağlar.

    Örnek:

    LimitRequestLine 4094
    Normal şartlar altında öntanımlı değer değiştirilmemelidir.

    Uyarı

    İsme dayalı sanal konaklar kullanıldığında, bu yönergenin değeri, yerel IP adresi ve port çifti için öntanımlı olan (listedeki ilk) sanal konaktan alınır.

    top

    LimitXMLRequestBody Yönergesi

    Açıklama:Bir XML temelli istek gövdesinin uzunluğunu sınırlar.
    Sözdizimi:LimitXMLRequestBody bayt-sayısı
    Öntanımlı:LimitXMLRequestBody 1000000
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core

    Bir XML temelli istek gövdesinin azami bayt sayısını belirler. Değer olarak 0 belirtildiğinde herhangi bir boyut sınaması yapılmaz.

    Örnek:

    LimitXMLRequestBody 0
    top

    <Location> Yönergesi

    Açıklama:İçerdiği yönergeler sadece eşleşen URL’lere uygulanır.
    Sözdizimi:<Location URL-yolu|URL> ... </Location>
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    <Location> bölüm yönergesi kapsadığı yönergelerin etki alanını belirtilen URL’lerle sınırlar. Bu yönerge, <Directory> yönergesine benzer ve </Location> yönergesi ile biten bir alt bölüm başlatır. <Location> bölümleri yapılandırma dosyasında göründükleri sıraya göre, <Directory> bölümleri ve .htaccess dosyaları okunup <Files> bölümleri de işlendikten sonra işleme sokulurlar.

    <Location> bölümleri dosya sisteminin tamamen dışında işlem görürler. Bunun çeşitli sonuçları olur. En önemlisi, <Location> yönergelerinin dosya sistemi konumlarına erişimi denetim altına almak için kullanılmaması gerekliliğidir. Aynı dosya sistemi konumuna farklı URL’lerle erişmek mümkün olduğundan bu tür erişim denetimleri hile ile atlatılabilir olacaktır.

    URL'nin yol bileşeni aşağıdaki koşullardan herhangi birini sağlıyorsa sarmalanan yönergeler isteğe uygulanır:

    • Belirtilen yer URL'nin yol bileÅŸeni ile tam olarak eÅŸleÅŸiyordur.
    • Belirtilen yer bir bölü çizgisi öncesinde bitiyorsa URL'nin yol bileÅŸeninin öneklerinden biriyle eÅŸleÅŸiyordur (baÄŸlamsal bir kök dizin olarak).
    • Belirtilen yer bir bölü çizgisi ile bitiyorsa URL'nin yol bileÅŸeninin öneklerinden biriyle eÅŸleÅŸiyordur (baÄŸlamsal bir kök dizin olarak).

    Aşağıdaki örnekte yer belirtimi bir bölü çizgisi ile bitirilmemiştir. /private1, /private1/ ve /private1/file.txt istekleri için sarmalanan yönergeler uygulanacaktır, fakat /private1other isteğine uygulanmayacaktır.

    <Location "/private1">
        #  ...
    </Location>

    Aşağıdaki örnekte yer belirtimi bir bölü çizgisi ile bitirilmiştir. /private2/ ve /private2/file.txt istekleri için sarmalanan yönergeler uygulanacaktır, fakat /private2 ve /private2other isteklerine uygulanmayacaktır.

    <Location "/private2/">
        # ...
    </Location>

    <Location> ne zaman kullanılmalı

    <Location> yönergesini dosya sistemi dışındaki içeriğe çeşitli yönergeler uygulamak için kullanın. Dosya sisteminde bulunan içerik için <Directory> ve <Files> bölümlerini kullanın. Bunun istisnası, sunucunun tamamına bir yapılandırma uygulamak için kolay bir yol olan <Location "/"> kullanımıdır.

    Kaynağa yapılan (vekil olmayan) tüm istekler için eşleşecek URL, /yol/ şeklinde bir URL yolu olmalı; ne şema, ne konak ismi ne port ne de sorgu dizgesi içermelidir. Vekil istekleri için eşleşecek URL ise şema://sunucuadı/dosya-yolu şeklinde olmalı ve önek içermelidir.

    URL içinde dosya kalıp karakterleri kullanılabilir. Dosya kalıp karakterleri bulunan bir dizgede bulunan ? karakteri herhangi bir tek karakterle eşleşirken * karakteri herhangi bir karakter dizisi ile eşleşecektir. URL yolu içindeki / karakterleri ile hiçbir dosya kalıp karakteri eşleşmez.

    Ayrıca, ~ karakteri eşliğinde düzenli ifadeler de kullanılabilir. Örneğin,

    <Location ~ "/(ek|hususi)/veri">
        #...
    </Location>

    yönergesi /ek/veri ve /hususi/veri alt dizgeleriyle eşleşecektir. <LocationMatch> yönergesi <Location> yönergesinin düzenli ifade sürümüne eşdeğer davranır ve bir çok yazı tipinde ~ karakterini - karakterinden ayırmak zor olduğu için tercih edilir.

    <Location> işlevselliği özellikle SetHandler yönergesi ile birlikte kullanışlı olur. Örneğin, durum isteklerini etkin kılmak ama sadece example.com’dan gelen isteklere izin vermek için şöyle bir uygulama yapabilirsiniz:

    <Location "/status">
      SetHandler server-status
      Require host example.com
    </Location>

    / (bölü çizgisi) hakkında

    Bölü çizgisinin URL içinde bulunduğu yere bağlı olarak özel anlamları vardır. Dosya sistemindeki çok sayıda yanyana kullanımının tek bir bölü çizgisi olarak ele alındığı duruma alışkın olanlar olabilir (yani, /home///foo ile /home/foo aynıdır). URL uzayında bunun böyle olması gerekli değildir. Eğer çok sayıda bölü çizgisini yanyana belirtmeniz gerekiyorsa <LocationMatch> yönergesinde ve <Location> yönergesinin düzenli ifadeli kullanımında bunu açıkça belirtmeniz gerekir.

    Örneğin, <LocationMatch "^/abc"> yönergesi /abc ile eşleşecek ama //abc ile eşleşmeyecektir. <Location> yönergesinin düzenli ifade içermeyen kullanımındaki davranış vekil isteklerinde kullanılana benzer ve doğrudan kaynağa yapılan (vekil olmayan) isteklerde çok sayıda bölü çizgisi dolaylı olarak tek bir bölü çizgisiyle eşleşecektir. Örneğin, <Location "/abc/def"> belirtirseniz ve istek /abc//def şeklinde olursa bu ikisi eşleşir.

    Ayrıca bakınız:

    top

    <LocationMatch> Yönergesi

    Açıklama:İçerdiği yönergeler sadece düzenli ifadelerle eşleşen URL’lere uygulanır.
    Sözdizimi:<LocationMatch düzifade> ... </LocationMatch>
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    <LocationMatch> yönergesi içerdiği yönergelerin etki alanını <Location> yönergesinin yaptığı gibi belirtilen URL’lerle sınırlar. Ancak argüman olarak basit bir dizge değil bir düzenli ifade alır. Örneğin,

    <LocationMatch "/(ek|hususi)/veri">
        # ...
    </LocationMatch>

    yönergesi /ek/veri ve /hususi/veri alt dizgeleriyle eşleşecektir.

    Eğer hedef, /ek/veri içeren değil de /ek/veri ile başlayan bir URL ise düzenli ifadenin önüne ^ getirmek gerekir.

    <LocationMatch "^/(ek|hususi)/veri">

    2.4.8 itibariyle, isimli gruplar ve geriye başvurular elde edilmekte olup ilgili isim büyük harfe çevrildikren sonra "MATCH_" ile öncelendikten sonra ortama yazılmaktadır. Böylece yol elemanlarına mod_rewrite gibi modüllerden veya düzenli ifadelerden başvurmak mümkün kılınmıştır. Karışıklığı önlemek için, numaralı (isimsiz) geriye başvurular yoksayılmaktadır. Bunların yerine isimli geriye başvurular kullanılmalıdır.

    <LocationMatch "^/combined/(?<sitename>[^/]+)">
        Require ldap-group cn=%{env:MATCH_SITENAME},ou=combined,o=Example
    </LocationMatch>

    / (bölü çizgisi) hakkında

    Bölü çizgisi karakteri URL üzerinde göründüğü yere bağlı olarak farklı anlamlar içerir. İnsanlar, birden çok bitişik bölü çizgisinin sık sık tek bir bölü çizgisine daraltıldığı dosya sistemindeki davranışına alışkın olabilir (örn, /home///foo ile /home/foo aynıdır). URL bakımından bu her zaman doğru değildir. Eğer niyetiniz buysa, <LocationMatch> yönergesi ve <Location> yönergesinin regex ile kullanımı, bölü çizgisinin özel anlam ifade etmesi nedeniyle gerektiği kadarının belirtilmesini gerektirir.

    Örneğin, <LocationMatch "^/abc"> ile /abc isteği eşleşirken //abc isteği eşleşmez. <Location> yönergesinin regex olmayan kullanımı vekil isteklerindeki gibi davranır. Fakat vekil harici işlemlerde <Location> yönergesinin regex olmayan kullanımında çok sayıda bölü çizgisi örtük olarak tek bölü çizgisiyle eşleşir. Örneğin, <Location "/abc/def"> belirtirseniz /abc//def isteği bu ifade ile eşleşecektir.

    Ayrıca bakınız:

    top

    LogLevel Yönergesi

    Açıklama:Hata günlüklerinin ayrıntı seviyesini belirler.
    Sözdizimi:LogLevel [modül:]seviye [modül:seviye] ...
    Öntanımlı:LogLevel warn
    BaÄŸlam:sunucu geneli, sanal konak, dizin
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Modül ve dizin bağlamındaki yapılandırmalar Apache HTTP Sunucusunun 2.3.6 ve sonraki sürümlerinde kullanılabilmektedir.

    LogLevel yönergesi hata günlüklerine kaydedilen hata iletilerinde hangi ayrıntılara yer verileceğini belirler (ErrorLog yönergesine bakınız). En yüksek önem derecesinden başlayarak olası seviye değerleri aşağıda sıralanmıştır:

    Seviye Açıklama Örnek
    emerg Acil durumlar - sistem kullanışsız. "Child cannot open lock file. Exiting"
    (Alt süreç kilit dosyasını açamıyor. Çıkılıyor)
    alert Ne yapılacaksa beklemeden yapılmalı. "getpwuid: couldn't determine user name from uid"
    (getpwuid: Kullanıcı ismi numarasından saptanamadı)
    crit Kriz durumları. "socket: Failed to get a socket, exiting child"
    (socket: bir soket alınamadı, alt süreç çıkıyor)
    error Hata durumları. "Premature end of script headers"
    (Betik başlıkları beklenmedik şekilde bitti)
    warn Uyarı durumları. "child process 1234 did not exit, sending another SIGHUP"
    (1234 alt süreci çıkmadı, başka bir SIGHUP gönderiliyor)
    notice Normal fakat önemli durum. "httpd: caught SIGBUS, attempting to dump core in ..."
    (httpd: SIGBUS alındı, core dökümlenmeye çalışılıyor: ...)
    info Bilgilendirme. "Server seems busy, (you may need to increase StartServers, or Min/MaxSpareServers)..."
    (Sunucu meşgul görünüyor, (StartServers veya Min/MaxSpareServers değerlerini arttırmanız gerekebilir)...)
    debug Hata ayıklama seviyesi iletileri "Opening config file ..."
    (... yapılandırma dosyası açılıyor)
    trace1 İz sürme iletileri "proxy: FTP: control connection complete"
    (vekil: FTP: denetim bağlantısı sağlandı)
    trace2 İz sürme iletileri "proxy: CONNECT: sending the CONNECT request to the remote proxy"
    (vekil: CONNECT: uzak vekile CONNECT isteği gönderiliyor)
    trace3 İz sürme iletileri "openssl: Handshake: start"
    trace4 İz sürme iletileri "read from buffered SSL brigade, mode 0, 17 bytes"
    (tamponlu SSL gruplamasından okuma, kip 0, 17 baytİz sürme iletileri
    trace5 İz sürme iletileri "map lookup FAILED: map=rewritemap key=keyname"
    (eşleşme araması BAŞARISIZ: map=rewritemap key=keyname)
    trace6 İz sürme iletileri "cache lookup FAILED, forcing new map lookup"
    (arabellek araması BAŞARISIZ, yeni bir eşleşme araması başlatılıyor)
    trace7 İz sürme iletileri, büyük miktarda veri dökümü "| 0000: 02 23 44 30 13 40 ac 34 df 3d bf 9a 19 49 39 15 |"
    trace8 İz sürme iletileri, büyük miktarda veri dökümü "| 0000: 02 23 44 30 13 40 ac 34 df 3d bf 9a 19 49 39 15 |"

    Belli bir seviye belirtildiğinde daha yüksek seviyeden iletiler de raporlanır. Örneğin, LogLevel info belirtildiğinde notice ve warn günlük seviyelerinin iletileri ayrıca raporlanacaktır.

    En az crit seviyesinin kullanılması önerilir.

    Örnek:

    LogLevel notice

    Ek Bilgi

    Günlük iletileri normal bir dosyaya yazılırken notice seviyesinden iletiler engellenemez ve dolayısıyla daima raporlanırlar. Ancak, günlük kaydı syslog kullanılarak yapılıyorsa bu uygulanmaz.

    Bir modül ismi olmaksızın bir seviye belirtmek seviyeyi bu seviyedeki tüm modüller için sıfırlayacaktır. Bir seviyyi bir modül ismiyle birlikte belirtmek seviyeyi sadece bu modül için sıfırlayacaktır. Modül ismi olarak, modülün kaynak dosyası ismini, modül kimliği veya _module sonekli modül ismi belirtmek mümkündür. Yani, aşağıdaki üç belirtim eşdeğerdedir:

    LogLevel info ssl:warn
    LogLevel info mod_ssl.c:warn
    LogLevel info ssl_module:warn

    Ayrıca seviyeyi dizin bağlamında değiştirmek de mümkündür:

    LogLevel info
    <Directory "/usr/local/apache/htdocs/app">
      LogLevel debug
    </Directory>
    Dizin bağlamında günük seviyesi yapılandırması sadece istek çözümlendikten ve istek dizinle ilişkilendirildikten sonra günlüklenen iletileri etkiler. Bağlantı veya sunucu ile ilişkilendirilmemiş günlük iletileri etkilenmez.

    Ayrıca bakınız:

    top

    MaxKeepAliveRequests Yönergesi

    Açıklama:Bir kalıcı bağlantıda izin verilen istek sayısı
    Sözdizimi:MaxKeepAliveRequests sayı
    Öntanımlı:MaxKeepAliveRequests 100
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    MaxKeepAliveRequests yönergesi KeepAlive etkinken bağlantı başına izin verilecek istek sayısını sınırlar. Değer olarak 0 belirtilirse istek sayısı sınırsız olur. Sunucu başarımını yüksek tutmak için yüksekçe bir değer belirtmenizi öneririz.

    Örnek:

    MaxKeepAliveRequests 500
    top

    MaxRangeOverlaps Yönergesi

    Açıklama:Özkaynağın tamamını döndürmeden önce izin verilen üst üste binen aralık sayısı (100-200,150-300 gibi)
    Sözdizimi:MaxRangeOverlaps default | unlimited | none | aralık-sayısı
    Öntanımlı:MaxRangeOverlaps 20
    BaÄŸlam:sunucu geneli, sanal konak, dizin
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Apache HTTP Sunucusunun 2.3.15 ve sonraki sürümlerinde kullanılabilmektedir.

    MaxRangeOverlaps yönergesi, sunucunun istemciye göndermeye gönüllü olacağı üst üste binen HTTP Range'lerinin sayısını sınırlar. İzin verilenden daha fazlası istenmişse özkaynağın tamamı döndürülür.

    default
    Üst üste binen HTTP Range'lerinin sayısını derleme sırasında belirlenen öntanımlı 20 değeriyle sınırlar.
    none
    Üst üste binen Range başlıkları yoksayılır.
    unlimited
    Sunucunun sağlamaya gönüllü olacağı üst üste binen HTTP Range'lerinin sayısı sınırlanmaz.
    aralık sayısı
    Sunucunun sağlamaya gönüllü olacağı üst üste binen HTTP Range'lerinin azami sayısını ifade eden pozitif bir tamsayı.
    top

    MaxRangeReversals Yönergesi

    Açıklama:Özkaynağın tamamını döndürmeden önce izin verilen ters sıralı aralık sayısı (100-200,50-70 gibi)
    Sözdizimi:MaxRangeReversals default | unlimited | none | aralık-sayısı
    Öntanımlı:MaxRangeReversals 20
    BaÄŸlam:sunucu geneli, sanal konak, dizin
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Apache HTTP Sunucusunun 2.3.15 ve sonraki sürümlerinde kullanılabilmektedir.

    The MaxRangeReversals yönergesi, sunucunun istemciye göndermeye gönüllü olacağı ter sıralı HTTP Range'lerinin sayısını sınırlar. İzin verilenden daha fazlası istenmişse özkaynağın tamamı döndürülür.

    default
    Ters sıralı HTTP Range'lerinin sayısını derleme sırasında belirlenen öntanımlı 20 değeriyle sınırlar.
    none
    Ters sıralı Range başlıkları yoksayılır.
    unlimited
    Sunucunun sağlamaya gönüllü olacağı ters sıralı HTTP Range'lerinin sayısı sınırlanmaz.
    aralık-sayısı
    Sunucunun sağlamaya gönüllü olacağı ters sıralı HTTP Range'lerinin azami sayısını ifade eden pozitif bir tamsayı.
    top

    MaxRanges Yönergesi

    Açıklama:Özkaynağın tamamını döndürmeden önce izin verilen aralık sayısı
    Sözdizimi:MaxRanges default | unlimited | none | aralık-sayısı
    Öntanımlı:MaxRanges 200
    BaÄŸlam:sunucu geneli, sanal konak, dizin
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Apache HTTP Sunucusunun 2.3.15 ve sonraki sürümlerinde kullanılabilmektedir.

    MaxRanges yönergesi, sunucunun istemciye göndermeye gönüllü olacağı HTTP Range'lerinin sayısını sınırlar. İzin verilenden daha fazlası istenmişse özkaynağın tamamı döndürülür.

    default
    HTTP Range'lerinin sayısını derleme sırasında belirlenen öntanımlı 200 değeriyle sınırlar.
    none
    Range başlıkları yoksayılır.
    unlimited
    Sunucunun sağlamaya gönüllü olacağı HTTP Range'lerinin sayısı sınırlanmaz.
    aralık-sayısı
    Sunucunun sağlamaya gönüllü olacağı HTTP Range'lerinin azami sayısını ifade eden pozitif bir tamsayı.
    top

    MergeSlashes Yönergesi

    Açıklama:Sunucunun URL’lerde ardışık bölü çizgilerini birleştirip birleştirmeyeceğini denetler.
    Sözdizimi:MergeSlashes ON|OFF
    Öntanımlı:MergeSlashes ON
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core
    Uyumluluk:2.4.39 sürümünde eklendi

    Öntanımlı olarak, sunucu istek adresinin yol bileşenindeki ardışık bölü çizgilerini ('/') birleştirip tek bölü çizgisi olarak ele alır.

    Bu adresleri dosya sistemi ile eşleştirirken bu ardışık bölü çizgilerinin önemi yoktur. Ancak. bu adresler CGI veya vekil gibi başka yollardan değerlendiriliyorsa bu ardışık bölü çizgilerinin olduğu gibi kalması tercih edilebilir. Bu durumlarda ardışık bölü çizgilerinin birleştirilmesini önlemek için MergeSlashes yönergesine OFF atanabilir. Bu atamayla, yapılandırma dosyasında, adresin yol bileşenini ile eşleşen düzenli ifadelerde (LocationMatch, RewriteRule, ...) ardışık bölü çizgileri hesaba katılacaktır.

    top

    MergeTrailers Yönergesi

    Açıklama:Trailer alanlarının başlığa dahil edilip edilmeyeceğini belirler
    Sözdizimi:MergeTrailers [on|off]
    Öntanımlı:MergeTrailers off
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core
    Uyumluluk:2.4.11 ve sonrası

    Bu yönerge HTTP Trailer alanlarının dahili HTTP başlıklarına kopyalanıp kopyalanmayacağını belirler. Kopyalama işlemi istek gövdesi tamamen alındığında gerçekleşir, çoğu başlık işleminin çok sonra istek başlıklarını inceleme veya değiştirme şansı olur.

    Bu seçenek, Trailer alanlarını daima kopyalayan 2.4.11 öncesi dağıtımlarla uyumluluk için vardır.

    top

    Mutex Yönergesi

    Açıklama:Muteks mekanizmasını ve kilit dosyası dizinini tüm muteksler veya belirtilenler için yapılandırır
    Sözdizimi:Mutex mekanizma [default|muteks-ismi] ... [OmitPID]
    Öntanımlı:Mutex default
    BaÄŸlam:sunucu geneli
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Apache HTTP Sunucusunun 2.3.4 ve sonraki sürümlerinde kullanılabilmektedir.

    Mutex yönergesi httpd ve diğer modüllerin özkaynaklara erişimi dizgeleştirmekte kullandıkları mekanizmanın yanında isteğe bağlı olarak kilit dosyasının yerini belirler. İlk değiştirge olarak default belirtilirse tüm mutekslerin ayarları değişir; ikinci değiştirge olarak bir muteks ismi belirtilirse (aşağıdaki tabloya bakın) yalnızca bu muteksin öntanımlıları değişir.

    Mutex yönergesi genelde aşağıdaki istisnai durumlarda kullanılır:

    • İşlevsel veya baÅŸarımsal bir soruna sahip APR tarafından öntanımlı mekanizma seçildiÄŸi takdirde muteks mekanizmasını deÄŸiÅŸtirmek için
    • Öntanımlı dizin, kilitlemeyi desteklemediÄŸi takdirde dosya tabanlı muteksler tarafından kullanılan dizini deÄŸiÅŸtirmek için

    Destekleyen modüller

    Bu yönerge sadece ap_mutex_register() API'si kullanılarak çekirdek sunucuda imlenmiş muteksleri yapılandırır. httpd ile birlikte dağıtılan tüm modüller Mutex yönergesini destekler, fakat üçüncü parti modüllerin hepsi desteklemeyebilir. Bu yönergenin desteklenip desteklenmediğini öğrenmek için üçüncü parti modülün belgelerini inceleyin; destekliyorsa muteks ad(lar)ı belirtilmiştir.

    Kullanılabilen muteks mekanizmaları:

    • default | yes

      APR tarafından saptanan öntanımlı kilitleme gerçeklenimini seçer. Öntanımlı kilitleme gerçeklenimi httpd -V seçeneği ile çalıştırılarak öğrenilebilir.

    • none | no

      Muteksi etkin şekilde iptal eder. Buna bir mutekste izin verilebilmesi için modülün bunun geçerli bir seçim olduğunu belirtmesi gerekir. Daha fazla bilgi için modül belgelerini inceleyin.

    • posixsem

      POSIX semaforuna dayalı bir muteks çeşididir.

      Uyarı

      Süreçteki bir evre muteks parçalama arızalarını tutuyorsa, httpd'nin çökmesi sonucu, semafor sahipliği geri kazanılmaz.

    • sysvsem

      SystemV IPC semaforuna dayalı bir muteks çeşididir.

      Uyarı

      Semafor geri kazanılmadan süreçler çökerse SysV semaforlarının "sızıntı" yapması mümkündür.

      Güvenlik

      Semafor API'si, HTTP sunucusu ile aynı kullanıcı kimliği altında çalışan bir CGI (örn, suexec veya cgiwrapper gibi bir araç kullanmıyorsanız bütün CGI'ler) tarafından hizmet reddi saldırısı yapılmasına izin verir.

    • sem

      POSIX ve SystemV IPC semaforları arasından kullanılabilir "en iyi" semafor gerçeklenimini seçer.

    • pthread

      Süreç çaprazlamalı POSIX evre mutekslerine dayalı bir muteks çeşididir.

      Uyarı

      Çoğu sistemde, bir çocuk süreç bu gerçeklenim tarafından kullanılan bir muteksi tutarken olağandışı bir şekilde sonlanırsa httpd donar ve isteklere yanıt vermeyi durdurur. Bu olduğunda sunucuyu bu durumdan kurtarmak için elle yeniden başlatmak gerekir.

      Bu duruma karşı bir mekanizma sağlayan Solaris ve Linux dikkate değer bir istisnadır. Bu mekanizma, bir muteksi tutan bir çocuk süreç olağandışı bir şekilde sonlandıktan sonra muteksin kurtarılmasını sağlar.

      Sisteminiz POSIX uyumluysa veya pthread_mutexattr_setrobust_np() işlevini sağlıyorsa pthread seçeneğini rahatça kullanabilirsiniz.

    • fcntl:/path/to/mutex

      Muteks olarak fcntl() işlevini ve fiziksel bir (lock-) dosyasını kullanan bir muteks çeşididir.

      Uyarı

      Bu mekanizmaya dayalı çok sayıda muteks, çok evreli ve çok süreçli ortamlarda kullanıldığında, örneğin Solaris'te olduğu gibi fcntl() evrelerden bihaberse, geçerli muteks işlemlerinde donma hataları (EDEADLK) raporlanabilir.

    • flock:/path/to/mutex

      flock() işlevinin dosya kilitlemeyi sağlaması dışında fcntl:/path/to/mutex yöntemine benzer.

    • file:/path/to/mutex

      fcntl ve flock arasından kullanılabilir "en iyi" dosya kilitleme gerçeklenimini seçer.

    Çoğu mekanizma, yalnız kendilerini destekleyen platformlarda APR tarafından da destekleniyorsa kullanılabilir. Tüm platformlarda kullanılamayan mekanizmalar posixsem, sysvsem, sem, pthread, fcntl, flock ve file mekanizmalarıdır.

    fcntl ve flock dosya tabanlı mekanizmaları ile bir yol sağlandığı takdirde bu, kilit dosyasının oluşturulacağı dizindir. Öntanımlı dizin, httpd'nin çalışma anı dizini ServerRoot'a görelidir. /path/to/mutex için daima bir yerel diskteki dosya sistemi kullanılır, asla NFS- veya AFS gibi bir ağ dosya sistemi kullanılmaz. Dosya ismi daima muteks ismi ile başlar, buna modül tarafından sağlanan isteğe bağlı bir aşama dizgesi eklenebilir, OmitPID değeri belirtilmemişse httpd ebeveyn sürecinin süreç kimliği buna eklenerek dosya ismi eşsiz kılınır. Böylece, çok sayıda httpd süreci aynı kilit dosyası dizinini paylaştığı durumda çakışmalar önlenmiş olur. Örneğin, muteks ismi mpm-accept ise ve kilit dosyası dizini /var/httpd/locks ise ve ebeveyn süreç kimliği 12345 ise bu httpd sürecine ait kilit dosyası ismi /var/httpd/locks/mpm-accept.12345 olurdu.

    Güvenlik

    Muteks dosyalarını herkesin yazabildiği /var/tmp gibi dizinlere koymaktan kaçınmak en iyisidir. Örneğin, birinin aynı dizinde oluşturmaya çalıştığı bir dosya ile aynı isimde bir kilit dosyasını sunucunun da oluşturmaya çalıştığı durumda sunucu engellenerek bir hizmet reddi saldırısı gerçekleştirilmiş gibi olur.

    httpd ve birlikte dağıtılan modüller tarafından kullanılan mutekslerin isimleri:

    Muteks ismi Modül(ler) Korunan özkaynak
    mpm-accept prefork ve worker MPM'leri Gürleyen sürü sorunundan kaçınmak için gelen bağlantılar; daha fazla bilgi için başarımın arttırılması belgesine bakın.
    authdigest-client mod_auth_digest Paylaşımlı bellekteki istemci listesi
    authdigest-opaque mod_auth_digest Paylaşımlı bellekteki sayaç
    ldap-cache mod_ldap LDAP sonuç arabelleği
    rewrite-map mod_rewrite Çoklu isteklerdeki birbirine karışmış G/Ç'tan kaçınmak için harici eşleştirme progamlarıyla iletişim
    ssl-cache mod_ssl SSL oturum arabelleÄŸi
    ssl-stapling mod_ssl OCSP zımbalama yanıtı arabelleği
    watchdog-callback mod_watchdog Bir istemci modülünün geri çağırım işlevi

    OmitPID seçeneği, httpd ebeveyn süreç kimliğinin kilit dosyası ismine eklenmesini engeller.

    Aşağıdaki örnekte, mpm-accept muteksinin mekanizmasının derleme sırasındaki öntanımlısı, kilit dosyasının oluşturulacağı dizinin /var/httpd/locks olarak belirtildiği fcntl mekanizmasıyla değiştirilmektedir.Tüm diğer mutekslerin derleme anı öntanımlı mekanizması ise sysvsem ile değiştirilmektedir.

    Mutex sysvsem default
    Mutex fcntl:/var/httpd/locks mpm-accept
    top

    NameVirtualHost Yönergesi

    Açıklama:ÖNERİLMİYOR: İsme dayalı sanal konaklar için IP adresi belirtir
    Sözdizimi:NameVirtualHost adres[:port]
    BaÄŸlam:sunucu geneli
    Durum:Çekirdek
    Modül:core

    2.3.11 öncesinde, NameVirtualHost yönergesi, isme dayalı sanal konaklar için belli bir IP adresi ve port çiftini sunucuya tanıtmak için gerekliydi. 2.3.11 ve sonrasında, bir IP adresi ve port çifti her zaman çok sayıda sanal konakta kullanılabilmekte, isme dayalı sanal barındırma bu adres için özdevinimli olarak etkin kılınmaktadır.

    Bu yönerge şu an etkisizdir.

    Ayrıca bakınız:

    top

    Options Yönergesi

    Açıklama:Belli bir dizinde geçerli olacak özellikleri yapılandırır.
    Sözdizimi:Options [+|-]seçenek [[+|-]seçenek] ...
    Öntanımlı:Options FollowSymlinks
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Options
    Durum:Çekirdek
    Modül:core
    Uyumluluk:2.3.11 sürümünde öntanımlı değer All değiştirilip FollowSymlinks yapıldı.

    Options yönergesi belli bir dizinde hangi sunucu özelliklerinin etkin olacağını (veya olmayacağını) belirler.

    seçenek olarak hiçbir ek özellik etkin olmayacaksa None, aksi takdirde aşağıdakilerden biri veya bir kaçı belirtilir:

    All
    MultiViews hariç tüm seçenekler.
    ExecCGI
    mod_cgi kullanan CGI betiklerinin çalışmasına izin verilir.
    FollowSymLinks
    Sunucu bu dizindeki sembolik bağları izler. Bu öntanımlıdır.

    Sembolik bağlar izlense bile <Directory> bölümleriyle eşleşen dosya yolları değiştirilmez.

    FollowSymLinks ve SymLinksIfOwnerMatch Options sadece <Directory> bölümlerinde veya .htaccess dosyaları içinde çalışır.

    Sembolik bağ sınamaları, atlatılabilir yarış koşullarına konu olduğundan bu seçeneğin yokluğu bir güvenlik sınırlaması olarak değerlendirilmemelidir.

    Includes
    mod_include tarafından sağlanan sunucu taraflı içeriklere izin verilir.
    IncludesNOEXEC
    Sunucu taraflı içeriklere izin verilir fakat #exec cmd ve #exec cgi iptal edilir. Ancak, ScriptAlias’lı dizinlerdeki CGI betikleri için #include virtual hala mümkün olacaktır.
    Indexes
    İstenen URL bir dizin ile eşleşiyorsa ve bu dizin için bir DirectoryIndex (index.html gibi) belirtilmemişse mod_autoindex bu dizinin biçimlenmiş bir listesini döndürecektir.
    MultiViews
    mod_negotiation kullanılarak içerik uzlaştırmalı çok görünümlü içeriğe izin verilir.

    Bilgi

    mod_negotiation karşılaştırmak değerlendirmek için gerçek özkaynaklara ihtiyaç duyduğundan <Directory> yönergesinde belirtilendan farklı bir yer ayarlanırsa bu seçenek yoksayılır.

    SymLinksIfOwnerMatch
    Sunucu sembolik bağları sadece sembolik bağın hedefi ile bulunduğu dizinin sahibinin aynı kullanıcı olması halinde izleyecektir.

    FollowSymLinks ve SymLinksIfOwnerMatch Options sadece <Directory> bölümlerinde veya .htaccess dosyaları içinde çalışır.

    Sembolik bağ sınamaları, atlatılabilir yarış koşullarına konu olduğundan bu seçenek bir güvenlik sınırlaması olarak değerlendirilmemelidir.

    Normalde, bir dizine çok sayıda Options uygulanabilirse de, dizine en uygun olanı uygulanıp diğerleri yok sayılır; seçenekler katıştırılmaz (bkz, Bölümler Nasıl Katıştırılır?). Bununla birlikte, önüne bir + veya - simgesi konmuş seçenekler varsa, o seçenekler katıştırılır. Önüne + konmuş seçenekler mevcutlara eklenirken - konmuş seçenekler silinir.

    Bilgi

    + veya - imli seçenekler içeren Options ile imsiz seçenekler içerenlerin karışık olarak kullanılması aslında geçersiz bir sözdizimi olup sunucunun başlatılması sırasında sözdizimi denetiminin çıkmasıyla reddedilir.

    Örneğin, + ve - imleri olmaksızın,

    <Directory "/web/docs">
      Options Indexes FollowSymLinks
    </Directory>
    
    <Directory "/web/docs/spec">
      Options Includes
    </Directory>

    yapılandırmasıyla /web/docs/spec dizininde sadece Includes seçeneği etkin olacaktır. Bununla birlikte, ikinci Options yönergesinde + ve - imleri kullanılırsa,

    <Directory "/web/docs">
      Options Indexes FollowSymLinks
    </Directory>
    
    <Directory "/web/docs/spec">
      Options +Includes -Indexes
    </Directory>

    yapılandırmasıyla /web/docs/spec dizininde FollowSymLinks ve Includes seçenekleri etkin olacaktır.

    Ek Bilgi

    -IncludesNOEXEC veya -Includes kullanımı, önceki ayarların ne olduğuna bakılmaksızın sunucu taraflı içeriğin tamamen iptaline sebep olur.

    Herhangi bir başka değer belirtilmedikçe FollowSymlinks öntanımlıdır.

    top

    Protocol Yönergesi

    Açıklama:Dinlenen bir soket için protokol
    Sözdizimi:Protocol protokol
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Apache httpd 2.1.5 ve sonrasında kullanılabilmektedir. Windows'ta ise Apache httpd 2.3.3 ve sonrasında kullanılabilmektedir.

    Bu yönerge dinlenen belli bir soket için kullanılacak protokolü belirler. Belirtilen protokol bir isteği hangi modülün ele alacağını ve AcceptFilter yönergesiyle yapılan özel eniyilemelere uygulanacak protokolü belirler.

    Bir protokol belirtme ihtiyacını sadece standartdışı portlarda çalışıyorsanız duyarsınız. Aksi takdirde, http protokolünün port 80'i, https'in ise 443'ü kullandığı varsayılır.

    Örneğin, https'i standartdışı bir portta çalıştırmak isterseniz protokolü şöyle belirtebilirsiniz:

    Protocol https

    Protokolü Listen yönergesini kullanarak da belirtebilirsiniz.

    Ayrıca bakınız:

    top

    Protocols Yönergesi

    Açıklama:Sunucu/sanal konak için kullanılabilecek protokoller
    Sözdizimi:Protocols protokol ...
    Öntanımlı:Protocols http/1.1
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Sadece Apache 2.4.17 ve sonrasında kullanılabilir.

    Bu yönerge bir sunucu/sanal konak için kullanılabilecek protokolleri belirtmekte kullanılır. Bu liste, bir istemcinin bir sanal konak veya sunucu ile uzlaşabilmesini sağlayan prokolleri belirler.

    Bir sanal konak veya sunucuda kullanılabilecek protolleri çeşitlendirmek isterseniz bu protokolleri belirtmeniz gerekir. 1.0 ve 0.9 istemcilerle uyumlu olan http/1.1 protokolü öntanımlıdır.

    Örneğin, bir sunucunun TLS'li HTTP/2 protokolünü desteklemesini şöyle sağlayabilirsiniz:

    Protocols h2 http/1.1

    Geçerli protokoller, http ve https bağlantıları için http/1.1 htps bağlantıları için h2 ve http bağlantıları için h2c protokolleridir. Modüller başka protokollerin de etkinleştirilmesini gerektirebilir.

    Kullanımından vazgeçilmiş protokollerin silinmesi gerekmez. Böyle protokol isimleri basitçe yoksayılır.

    Ana sunucu için belirtilen protokoller, kendi protokol yönergesi olmayan sanal konaklar için de geçerlidir. Diğer yandan sanal konaklarda protokol belirtilmesi ana sunucuda belirtien protollerin bu sanal konaklarda geçersiz olmasına sebep olur.

    Ayrıca bakınız:

    top

    ProtocolsHonorOrder Yönergesi

    Açıklama:Uzlaşma sırasında protokollerin öncelik sırasını belirler
    Sözdizimi:ProtocolsHonorOrder On|Off
    Öntanımlı:ProtocolsHonorOrder On
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Sadece Apache 2.4.17 ve sonrasında kullanılabilir.

    Sunucuda Protocols yönergesinde listelemiş protokollerin mi yoksa istemcinin protokol listesinin mi öncelikli olacağı bu yönerge ile belirtilir.

    Off belirtilirse, istemcinin protokol listesi sunucu yapılandırmasındaki sıralamanın önüne geçer.

    ProtocolsHonorOrder yönergesine on belirtilirse (öntanımlıdır), istemicinin protokol sıralaması dikkate alınmaz ve protokol uzlaşımının sonucunu sunucu ayarlarındaki sıralama belirler.

    Ayrıca bakınız:

    top

    QualifyRedirectURL Yönergesi

    Açıklama:REDIRECT_URL ortam değişkeninin tamamen nitelenmiş olup olmayacağını denetler
    Sözdizimi:QualifyRedirectURL ON|OFF
    Öntanımlı:QualifyRedirectURL OFF
    BaÄŸlam:sunucu geneli, sanal konak, dizin
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Yönerge 2.4.18 ve sonrasında desteklenmektedir. 2.4.17 sürümünde 'QualifyRedirectURL ON' yapılandırması mevcutmuş gibi davranılır.

    Bu yönerge sunucuya REDIRECT_URL ortam değişkenin tamamen nitelenmiş olacağını temin eder. Değişken öntanımlı olarak istemci tarafından talep edilen URL'yi harfi harfine içerir, "/index.html" gibi. QualifyRedirectURL ON belirtilseydi aynı istek "http://www.example.com/index.html" gibi bir değerle sonuçlanırdı.

    Böyle belirtilmemiş olsa bile, istek tam nitelenmiş bir URL içerseydi REDIRECT_URL de tam nitelenmiş URL'yi içerirdi.

    top

    RegexDefaultOptions Yönergesi

    Açıklama:Regex düzenli ifadeleri için öntanımlı/küresel seçenekleri yapılandırır
    Sözdizimi:RegexDefaultOptions [none] [+|-]seçenek [[+|-]seçenek] ...
    Öntanımlı:RegexDefaultOptions DOLLAR_ENDONLY
    BaÄŸlam:sunucu geneli
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Sadece Apache 2.4.30 ve sonrasında kullanılabilmektedir.

    Bu yönerge kendisinden sonra kullanılan bütün düzenli ifsdelerin davranışını etkiler.

    '+' ile öncelenmiş bütün seçenekler önceden atanmış seçeneklere eklenir.
    '-' ile öncelenmiş bütün seçenekler önceden atanmış seçeneklerden çıkarılır.
    '+' veya '-' ile öncelenmemiş her seçenek önceden atanmış seçenekleri silerek onların yerini alır.
    none ile önceden atanmış tüm seçenekler sıfırlanır.

    seçenek şunlardan biri olabilir:

    ICASE
    Harf büyüklüğüne duyarlı eşleşmeler kullanılır.
    DOTALL
    Perl'ün /s seçeneği.
    DOLLAR_ENDONLY
    '$' dizgenin sonu ile eÅŸleÅŸir.
    .
    # 
    RegexDefaultOptions +ICASE +DOLLAR_ENDONLY
    ...
    # ICASE seçeneği silinir, diğer seçenekler tutulur:
    RegexDefaultOptions -ICASE
    ...
    # Atanmuş seçenekler silinir, DOTALL öntanımlı seçenek yapılır:
    RegexDefaultOptions DOTALL
    ...
    # Tüm seçenekler silinir, öntanımlı seçenek kalmaz.
    RegexDefaultOptions none
    ...
    top

    RegisterHttpMethod Yönergesi

    Açıklama:Standart olmayan HTTP yöntemlerini devreye alır
    Sözdizimi:RegisterHttpMethod yöntem [yöntem [...]]
    BaÄŸlam:sunucu geneli
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Apache HTTP Sunucusunun 2.4.24 ve sonraki sürümlerinde kullanılabilmektedir.

    Bu yönerge sunucunun standatta bulunmayan ek HTTP yöntemlerini kullanabilmesini sağlar. Yönergelerde standartta olmayan yöntem isimleri kullanmak gerektiğinde veya sunucunun modüllere sadece standart yöntemleri aktaracak şekilde yapılandırıldığı durumlarda bazı standart-dışı yöntemleri vekil veya CGI betikleriyle aktarmayı mümkün kılmak için bu gereklidir.

    Ayrıca bakınız:

    top

    RLimitCPU Yönergesi

    Açıklama:Apache httpd alt süreçleri tarafından çalıştırılan süreçlerin işlemci tüketimine sınırlama getirir.
    Sözdizimi:RLimitCPU saniye|max [saniye|max]
    Öntanımlı:Bir değer belirtilmemiştir; işletim sistemi öntanımlıları kullanılır
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core

    1 veya 2 değer alır. İlk değer bütün süreçler için sanal özkaynak sınırını, ikinci değer ise kesin özkaynak sınırını belirler. İki değer de birer sayı olabileceği gibi bu sınırın işletim sistemi yapılandırmasında izin verilen üst sınıra ayarlanacağını belirtmek üzere max olabilir. Kesin özkaynak sınırını yükseltmek için sunucunun root olarak veya sistem açılışı sırasında çalıştırılması gerekir.

    Bu sınırlar Apache httpd’nin kendi alt süreçlerine değil, isteklere yanıt verirken Apache httpd alt süreçlerinin çatalladıkları süreçlere uygulanır. Bunlar CGI betikleri ve SSI çalıştırma komutları olabilir fakat borulu günlük kaydı gibi ana Apache httpd süreci tarafından çatallanmış süreçler olmazlar.

    İşlemci özkaynak sınırları saniye cinsinden ifade edilir.

    Ayrıca bakınız:

    top

    RLimitMEM Yönergesi

    Açıklama:Apache httpd alt süreçleri tarafından çalıştırılan süreçlerin bellek tüketimine sınırlama getirir.
    Sözdizimi:RLimitMEM bayt-sayısı|max [bayt-sayısı|max]
    Öntanımlı:Bir değer belirtilmemiştir; işletim sistemi öntanımlıları kullanılır
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core

    1 veya 2 değer alır. İlk değer bütün süreçler için sanal özkaynak sınırını, ikinci değer ise kesin özkaynak sınırını belirler. İki değer de birer sayı olabileceği gibi bu sınırın işletim sistemi yapılandırmasında izin verilen üst sınıra ayarlanacağını belirtmek üzere max olabilir. Kesin özkaynak sınırını yükseltmek için sunucunun root olarak veya sistem açılışı sırasında çalıştırılması gerekir.

    Bu sınırlar Apache httpd’nin kendi alt süreçlerine değil, isteklere yanıt verirken Apache httpd alt süreçlerinin çatalladıkları süreçlere uygulanır. Bunlar CGI betikleri ve SSI çalıştırma komutları olabilir fakat borulu günlük kaydı gibi ana Apache httpd süreci tarafından çatallanmış süreçler olmazlar.

    Bellek özkaynak sınırları süreç başına bayt sayısı olarak ifade edilir.

    Ayrıca bakınız:

    top

    RLimitNPROC Yönergesi

    Açıklama:Apache httpd alt süreçleri tarafından çalıştırılabilecek süreç sayısına sınırlama getirir.
    Sözdizimi:RLimitNPROC sayı|max [sayı|max]
    Öntanımlı:Bir değer belirtilmemiştir; işletim sistemi öntanımlıları kullanılır
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core

    1 veya 2 değer alır. İlk değer bütün süreçler için sanal özkaynak sınırını, ikinci değer ise kesin özkaynak sınırını belirler. İki değer de birer sayı olabileceği gibi bu sınırın işletim sistemi yapılandırmasında izin verilen üst sınıra ayarlanacağını belirtmek üzere max olabilir. Kesin özkaynak sınırını yükseltmek için sunucunun root olarak veya sistem açılışı sırasında çalıştırılması gerekir.

    Bu sınırlar Apache httpd’nin kendi alt süreçlerine değil, isteklere yanıt verirken Apache httpd alt süreçlerinin çatalladıkları süreçlere uygulanır. Bunlar CGI betikleri ve SSI çalıştırma komutları olabilir fakat borulu günlük kaydı gibi ana Apache httpd süreci tarafından çatallanmış süreçler olmazlar.

    Süreç sayısı sınırı kullanıcı başına süreç sayısına sınırlama getirir.

    Ek Bilgi

    CGI süreçleri sunucu kullanıcı kimliğinden farklı bir kullanıcı kimliği altında çalışmıyorsa bu yönerge sunucunun kendi oluşturduğu süreç sayısını sınırlayacaktır. Bunun kanıtı error_log’da iletilerin çatallanamamasıdır.

    Ayrıca bakınız:

    top

    ScriptInterpreterSource Yönergesi

    Açıklama:CGI betikleri için yorumlayıcı belirleme tekniği
    Sözdizimi:ScriptInterpreterSource Registry|Registry-Strict|Script
    Öntanımlı:ScriptInterpreterSource Script
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Sadece Win32 için.

    Bu yönerge Apache httpd’nin CGI betiklerini çalıştıracak yorumlayıcıyı nasıl tespit edeceğini belirler. Script öntanımlı olup Apache httpd’nin yorumlayıcı olarak betiğin diyezli ünlem satırında (#! ile başlayan ilk satır) belirtilen yorumlayıcıyı kullanacağını belirtir. Win32 sistemlerinde bu satır genellikle şöyledir:

    #!C:/Perl/bin/perl.exe

    perl yorumlayıcının yeri PATH değişkeninde kayıtlı ise şöyle de olabilir:

    #!perl

    ScriptInterpreterSource Registry değeri ise betik dosyası uzantısının (.pl gibi) Windows Sicili içindeki HKEY_CLASSES_ROOT ağacında arama yapmak için bir arama anahtarı olarak kullanılmasını sağlar. Betik dosyasını çalıştırmak için tanımlanmış komutu bulmak için Shell\ExecCGI\Command yoluna, orada yoksa Shell\Open\Command yoluna bakılır. İkisi de yoksa son çare olarak Script seçeneğinin davranışına dönülür.

    Güvenlik

    ScriptAlias’lı dizinlerde Apache httpd bulduğu her dosyayı çalıştırmayı deneyeceğinden ScriptInterpreterSource Registry yapılandırmasını kullanırken dikkatli olun. Registry seçeneği genellikle çalıştırılmayacak dosyalar için istenmeyen program çağrılarına sebep olabilir. Örneğin, çoğu Windows sisteminde .htm dosyaları için ön tanımlı "open" komutu Microsoft Internet Explorer’ın çalıştırılmasına sebep olur; bu bakımdan, betik dizininde bulunan bir .htm dosyası için yapılan bir HTTP isteği tarayıcının sunucu artalanında çalıştırılmasına sebep olacaktır. Bu, sistemi bir kaç dakika içinde çökertmek için iyi bir yoldur.

    Registry-Strict seçeneği Apache HTTP Sunucusunun 2.0 sürümünde yeni olup Registry seçeneğinin yaptığını Shell\ExecCGI\Command yolu için yapar. ExecCGI sistem tarafından bilinen bir anahtar olmadığından Windows Siciline elle kaydedilmesi gerekir ve dolayısıyla sisteminiz üzerinde istenmeyen program çağrılarına sebep olmaz.

    top

    SeeRequestTail Yönergesi

    Açıklama:İsteğin 63 karakterden büyük olduğu varsayımıyla, mod_status'un ilk 63 karakteri mi yoksa son 63 karakteri mi göstereceğini belirler.
    Sözdizimi:SeeRequestTail On|Off
    Öntanımlı:SeeRequestTail Off
    BaÄŸlam:sunucu geneli
    Durum:Çekirdek
    Modül:core
    Uyumluluk:Apache httpd 2.2.7 ve sonrasında kullanılabilmektedir.

    mod_status modülü ExtendedStatus On ile işleme alınan asıl isteği gösterir. Tarihsel amaçlarla, isteğin sadece 63 karakteri gösterme amacıyla saklanır. Bu yönerge ilk 63 karakterin mi (önceki davranış ve öntanımlı durum) yoksa son 63 karakterin mi saklanacağını belirler. Bu, şüphesiz, isteğin uzunluğu 64 karakter veya daha fazlaysa uygulanabilirdir.

    Apache httpd'ye gelen istek GET /disk1/storage/apache/htdocs/images/imagestore1/food/apples.jpg HTTP/1.1 ise mod_status ÅŸunu gösterir:

    Off (öntanımlı) GET /disk1/storage/apache/htdocs/images/imagestore1/food/apples
    On orage/apache/htdocs/images/imagestore1/food/apples.jpg HTTP/1.1
    top

    ServerAdmin Yönergesi

    Açıklama:Sunucunun hata iletilerinde istemciye göstereceği eposta adresi
    Sözdizimi:ServerAdmin eposta-adresi|URL
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    ServerAdmin yönergesi, sunucunun bir hata durumunda istemciye döndüreceği hata iletilerinde içereceği iletişim adresini belirtmek için kullanılır. Eğer httpd sağlanan değerin bir URL olmadığını saptarsa değerin bir eposta adresi olduğuna hükmeder ve önüne mailto: getirerek onu bir hiper bağ hedefi olarak kullanır. Çoğu CGI betiği bir eposta adresi belirtildiği kabulünü yaptığından değer olarak bir URL değil bir eposta adresi belirtmeniz önerilir. Eğer bir URL belirtecekseniz hedef sizin denetiminizde olan başka bir sunucuda bulunmalıdır, yoksa kullanıcılar hata durumunda bu adrese erişemeyebilirler.

    Kullanıcıların sunucu hakkında konuşurken isminizden bahsetmemeleri için burada belirtilecek adresin sırf bu işe adanmış bir adres olması daha iyidir. Örnek:

    ServerAdmin www-admin@foo.example.com
    top

    ServerAlias Yönergesi

    Açıklama:İstekleri isme dayalı sanal konaklarla eşleştirilirken kullanılacak konak adları için başka isimler belirtebilmeyi sağlar.
    Sözdizimi:ServerAlias konakadı [konakadı] ...
    BaÄŸlam:sanal konak
    Durum:Çekirdek
    Modül:core

    ServerAlias yönergesi, istekleri isme dayalı sanal konaklarla eşleştirilirken kullanılacak konak adları için başka isimler belirtebilmeyi sağlar. ServerAlias dosya adı kalıp karakterleri içerebilir.

    <VirtualHost *:80>
      ServerName server.example.com
      ServerAlias server server2.example.com server2
      ServerAlias *.example.com
      UseCanonicalName Off
      # ...
    </VirtualHost>

    İsme dayalı sanal konaklardan en iyi eşleşme kümesinde olanlar yapılandırmada göründükleri sıraya göre işleme sokulur. Joker kullanımları arasında fark gözetilmeksizin ServerName veya ServerAlias yönergesi eşleşen ilk sanal konak kullanılır.

    <VirtualHost> bölümü içindeki isimlerin sırası (jokersiz) ServerAlias yönergesindeki gibi ele alınır.

    Ayrıca bakınız:

    top

    ServerName Yönergesi

    Açıklama:Sunucunun özdeşleşeceği konak ismi ve port.
    Sözdizimi:ServerName [şema://]alan-adı|ip-adresi[:port]
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    ServerName yönergesi, sunucunun kendini betimlemekte kullanacağı şema, konak adı ve port değerlerini belirler.

    isme dayalı sanal konaklar kullanılırken bir sanal konağı eşsiz bir şekilde betimlemek için ServerName kullanılır (muhtemelen ServerAlias ile birlikte).

    Ek olarak, UseCanonicalName yönergesine öntanımlı olmayan bir değer atanarak özüne yönlendiren URL'ler oluştururken de bu yönerge kullanılır.

    Örneğin, HTTP sunucusunun barındırıldığı makinenin ismi mail.example.com olduğu halde makinenin bir de www.example.com diye bir de DNS rumuzu varsa ve HTTP sunucunuzun bu rumuzla kendini özdeşleştirmesini isterseniz bunu şöyle belirtebilirsiniz:

    ServerName www.example.com

    ServerName yönergesi sunucu tanımının içinde herhangi bir yerde görünebilirse de her göründüğü yerde bir öncekini iptal eder.

    Bir ServerName ataması yapılmamışsa sunucu istemciye görünen sunucu ismini anlamak için önce işletim sistemine sistemin konak adını sorar. Bu başarılı olmazsa sistem üzerinde IP adresine bir ters DNS sorgusu yapar.

    ServerName yönergesinde bir port belirtilmediği takdirde sunucu, isteğin geldiği portu kullanacaktır. Öngörülebilirlik ve güvenilirlik açısından en iyisi ServerName yönergesini kullanarak açıkça bir konak ismi ve port belirtmektir.

    İsme dayalı sanal konaklar kullanıyorsanız, <VirtualHost> bölümü içindeki ServerName yönergesi, isteğin Host: başlığında bu sanal konakla eşleşecek konak ismini belirler.

    Bazen sunucu, bir ters vekil, yük dengeleyici veya SSL yük aktarım uygulaması gibi bir aygıtın arkasında çalışır. Böyle durumlarda sunucunun kendine yönelik URL’leri doğru üretebildiğinden emin olmak için ServerName yönergesinde istemcinin bağlanacağı https:// şeması ve port numarası belirtilir.

    Sunucunun kendine yönelik URL’lerin belirtilen portu içerip içermediğini veya istemcinin yaptığı istekte belirtilen port numarasının verilip verilmediğinin saptamasını sağlayan (örneğin, mod_dir modülü tarafından) ayarlar için UseCanonicalName ve UseCanonicalPhysicalPort yönergelerinin açıklamalarına bakınız.

    ServerName yönergesine isim atamadaki bir başarısızlık, sunucu başlatılırken isim bir IP adresine çözümlenebileceğinden bir uyarı çıktılanmasına sebep olur. httpd böyle bir durumda sistemin hostname komutunu kullanarak saptadığı konak ismini kullanacaktır. Bu konak ismi hemen hemen daima sizin istediğiniz isim olmayacaktır.

    httpd: Could not reliably determine the server's fully qualified domain name, using belgeler.yerel for ServerName

    Çevirisi: Sunucunun tamamen nitelenmiş alan adı gerektiği gibi saptanamadı, ServerName için belgeler.yerel kullanılıyor

    Ayrıca bakınız:

    top

    ServerPath Yönergesi

    Açıklama:Uyumsuz bir tarayıcı tarafından erişilmesi için bir isme dayalı sanal konak için meşru URL yolu
    Sözdizimi:ServerPath URL-yolu
    BaÄŸlam:sanal konak
    Durum:Çekirdek
    Modül:core

    ServerPath yönergesi isme dayalı sanal konaklarda kullanmak için konağa meşru bir URL yolu belirler.

    Ayrıca bakınız:

    top

    ServerRoot Yönergesi

    Açıklama:Sunucu yapılandırması için kök dizin
    Sözdizimi:ServerRoot dizin-yolu
    Öntanımlı:ServerRoot /usr/local/apache
    BaÄŸlam:sunucu geneli
    Durum:Çekirdek
    Modül:core

    ServerRoot yönergesi sunucu yapılandırmasını içeren dizinin yerini belirtir. Genellikle conf/ ve logs/ gibi alt dizinler içerir. Include, LoadModule gibi diğer yapılandırma yönergelerindeki göreli yollar bu dizine göre ele alınır.

    ServerRoot "/home/httpd"

    ServerRoot için öntanımlı yer configure betiğinin --prefix seçeneği ile değiştirilebilir ve sunucunun çoğu üçüncü parti dağıtıcısı öntanımlı yeri yukardakilerden farklı bir yere ayarlar.

    Ayrıca bakınız:

    top

    ServerSignature Yönergesi

    Açıklama:Sunucu tarafından üretilen belgelerin dipnotunu ayarlar.
    Sözdizimi:ServerSignature On|Off|EMail
    Öntanımlı:ServerSignature Off
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:All
    Durum:Çekirdek
    Modül:core

    ServerSignature yönergesi, sunucu tarafından üretilen belgelerin (hata iletileri, mod_proxy ftp dizin listeleri, mod_info çıktısı, vs.) altındaki dipnot satırını yapılandırabilmenizi sağlar. Böyle bir dipnot satırın istenmesinin sebebi vekil zincirlerinde istemciye dönen hata iletisinin aslında hangi sunucu tarafından üretildiğini kullanıcıya bildirmektir.

    Off değeri öntanımlı değer olup dipnot satırının gösterilmemesini sağlar (Apache-1.2 ve öncesi ile uyumluluk). On değeri, sunucu sürüm numarası ve hizmeti sunan sanal konağın isminden (ServerName) oluşan bir dipnot satırı oluşturulmasını sağlar; EMail değeri bu ikisine ek olarak satıra ServerAdmin ile belirtilen adres için bir "mailto:" bağı ekler.

    2.0.44 sürümünden beri sunucu sürüm numarasının ayrıntıları ServerTokens yönergesi ile belirlenmektedir.

    Ayrıca bakınız:

    top

    ServerTokens Yönergesi

    Açıklama:Server HTTP yanıt başlığını yapılandırır.
    Sözdizimi:ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full
    Öntanımlı:ServerTokens Full
    BaÄŸlam:sunucu geneli
    Durum:Çekirdek
    Modül:core

    Bu yönerge Server HTTP yanıt başlığı alanında istemcilere sunucunun işletim sistemi, sunucuyla derlenmiş modüller, vs. hakkında bilgi verilip verilmeyeceğini belirler.

    ServerTokens Full (veya belirtilmezse)
    Sunucu şunu gönderir (örnek): Server: Apache/2.4.2 (Unix) PHP/4.2.2 MyMod/1.2
    ServerTokens Prod[uctOnly]
    Sunucu şunu gönderir (örnek): Server: Apache
    ServerTokens Major
    Sunucu şunu gönderir (örnek): Server: Apache/2
    ServerTokens Minor
    Sunucu şunu gönderir (örnek): Server: Apache/2.4
    ServerTokens Min[imal]
    Sunucu şunu gönderir (örnek): Server: Apache/2.4.2
    ServerTokens OS
    Sunucu şunu gönderir (örnek): Server: Apache/2.4.2 (Unix)

    Bu ayarlama sunucunun tamamını etkiler ve her sanal konak için farklılaştırılamaz.

    2.0.44 sürümünden itibaren bu yönerge ServerSignature yönergesi tarafından sunulan bilgiyi de etkilemektedir.

    ServerTokens yönergesinde minimal'den azının belirtilmesi önerilmez. Bunun sebebi ara işlemlerle ilgili hata ayıklamasını zorlaştırmasıdır. Ayrıca, Server: başlığının iptal edilmesinin sunucunuzu daha güvenli yapmayacağına dikkat ediniz; "çapraşıklıkla sağlanan güvenlik" düşüncesi gerçekle bağdaşmaz ve güvenliği olumsuz etkiler.

    Ayrıca bakınız:

    top

    SetHandler Yönergesi

    Açıklama:Eşleşen tüm dosyaların belli bir eylemci tarafından işlenmesine sebep olur.
    Sözdizimi:SetHandler eylemci-ismi|none|ifade
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core
    Uyumluluk:ifade seçeneği 2.4.19 sürümünde eklendi

    Bir .htaccess dosyasına veya bir <Directory> ya da <Location> bölümüne yerleştirildiğinde, eşleşen tüm dosyaların, ismi eylemci-ismi ile belirtilen eylemci tarafından çözümlenmesine sebep olur. Örneğin, bir dizin içindeki bütün dosyaların, uzantılarına bakılmaksızın birer imagemap kural dosyası olarak çözümlenmesini istersiniz, bu dizin içindeki bir .htaccess dosyasına şöyle bir satır koyabilirsiniz:

    SetHandler imap-file

    Başka bir örnek: http://localhost/status gibi bir istek yapıldığında sunucunun bir durum bilgisi göstermesi için httpd.conf dosyasına şöyle bir satır koyabilirsiniz:

    <Location "/status">
      SetHandler server-status
    </Location>

    Bu yönergeyi ayrıca, belli bir dosya uzantısına sahip dosyalara uygun bir eylemci atamak için de kullanabilirsiniz. örnek:

    <FilesMatch "\.php$">
        SetHandler application/x-httpd-php
    </FilesMatch>

    Dizge değerli ifadeler istek öncesi değişkenleri içerecek şekilde düzenlenebilir. Buna ismli düzenli ifadelere yapılan geriye başvurular dahildir:

    <LocationMatch ^/app/(?<sub>[^/]+)/>
         SetHandler "proxy:unix:/var/run/app_%{env:MATCH_sub}.sock|fcgi://localhost:8080"
    </LocationMatch>

    Evvelce tanımlanmış bir SetHandler yönergesini None değeriyle geçersiz hale getirebilirsiniz.

    Bilgi

    SetHandler yönergesi, öntanımlı eylemcileri geçersiz kıldığından, index dosyaları ve dizinleri belirtmek için URL’nin sonuna bölü çizgisi (/) getirmek şeklindeki normal davranış baskılanır.

    Ayrıca bakınız:

    top

    SetInputFilter Yönergesi

    Açıklama:POST girdilerini ve istemci isteklerini işleyecek süzgeçleri belirler.
    Sözdizimi:SetInputFilter süzgeç[;süzgeç...]
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core

    SetInputFilter yönergesi, istemci isteklerini ve sunucu tarafından alındığı takdirde POST girdisini işleyecek süzgeç veya süzgeçleri belirler. Bu, diğer AddInputFilter yönergeleri dahil evvelce tanımlanmış süzgeçlere eklenir.

    Birden fazla süzgeç belirtilmek istenirse birbirlerinden noktalı virgüllerle ayrılmalı ve çıktıyı işleyecekleri sıraya uygun olarak sıralanmalıdırlar.

    Ayrıca bakınız:

    top

    SetOutputFilter Yönergesi

    Açıklama:Sunucunun yanıtlarını işleyecek süzgeçleri belirler.
    Sözdizimi:SetOutputFilter süzgeç[;süzgeç...]
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Çekirdek
    Modül:core

    SetOutputFilter yönergesi, istemciye gönderilmeden önce sunucunun yanıtlarını işleyecek süzgeçleri belirler. Bu, diğer AddOutputFilter yönergeleri dahil evvelce tanımlanmış süzgeçlere eklenir.

    Örneğin, aşağıdaki yapılandırma ile /www/data/ dizinindeki bütün dosyalar sunucu taraflı içerik kapsamında ele alınacaktır.

    <Directory "/www/data/">
      SetOutputFilter INCLUDES
    </Directory>

    Birden fazla süzgeç belirtilmek istenirse birbirlerinden noktalı virgüllerle ayrılmalı ve çıktıyı işleyecekleri sıraya uygun olarak sıralanmalıdırlar.

    Ayrıca bakınız:

    top

    TimeOut Yönergesi

    Açıklama:Bir istek için başarısız olmadan önce belirli olayların gerçekleşmesi için sunucunun geçmesini bekleyeceği süre.
    Sözdizimi:TimeOut saniye
    Öntanımlı:TimeOut 60
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    TimeOut yönergesi Apache httpd’nin aşağıdaki durumlarda G/Ç için bekleyeceği süreyi belirler:

    • Veriyi istemciden okurken, okuma tamponu boÅŸ olduÄŸu takdirde bir TCP paketinin gelmesini bekleyeceÄŸi süre.

      Yeni bir bağlantıda ilk veri için, sunucuya yeni bağlantıyı aktaran bir AcceptFilter yönergesi ile ilgili yapılandırma ele alınıncaya kadar bu yönerge etkilenmez.

    • Veriyi istemciye yazarken, gönderme tamponu dolu olduÄŸu takdirde bir paket alındısı için beklenecek süre.
    • mod_cgi ve mod_cgid modülünde, bir CGI betiÄŸinden belli bir çıktı kümesi için beklenecek süre.
    • mod_ext_filter modülünde, bir süzme iÅŸleminden çıktı almak için beklenecek süre.
    • mod_proxy modülünde, ProxyTimeout yönergesi yapılandırılmamışsa öntanımlı zaman aşımı deÄŸeri.
    top

    TraceEnable Yönergesi

    Açıklama:TRACE isteklerinde davranış şeklini belirler
    Sözdizimi:TraceEnable [on|off|extended]
    Öntanımlı:TraceEnable on
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Çekirdek
    Modül:core

    Bu yönerge çekirdek ve vekil (mod_proxy) sunucuların her ikisi için öntanımlı TRACE davranışını değiştirir. Öntanımlı olan TraceEnable on ile RFC 2616’dan kaynaklanan ve isteğe herhangi bir istek gövdesinin eşlik etmesine izin vermeyen TRACE isteklerine izin verilir. TraceEnable off ile çekirdek ve vekil (mod_proxy) sunucuların her ikisi de TRACE isteklerine yanıt olarak bir 405 (Yönteme izin verilmiyor) hatası döndürür.

    TraceEnable extended ile sadece sınama ve tanı koyma amaçlarına yönelik olarak istek gövdelerine izin verilir. Asıl sunucu istek gövdesini 64kB ile sınırlar (Transfer-Encoding: chunked kullanılmışsa bölüm başlıkları için 8kB daha). Asıl sunucu yanıt gövdesinde tüm başlıkları ve bölüm başlıklarının tamamını yansıtacaktır. Vekil sunucuda ise istek gövdesi için 64kB’lık sınır yoktur.

    Bilgi

    Aksine iddialara rağmen, TRACE yöntemini etkinleştirmek Apache httpd'de bir güvenlik açığı değildir. TRACE yöntemi HTTP/1.1 belirtiminde tanımlanmış olup desteklenmesi umulmuştur.

    top

    UnDefine Yönergesi

    Açıklama:Bir değişkeni tanımsız yapar
    Sözdizimi:UnDefine değişken-ismi
    BaÄŸlam:sunucu geneli
    Durum:Çekirdek
    Modül:core

    Define yönergesinde veya httpd'nin -D seçeneğiyle belirtileni geri alır.

    Bu yönerge başlatma betiklerinde -D seçeneğinin argümanını değiştirmek gerekmeksizin <IfDefine> bölümlerinin kullanımını değiştirmek için kullanılabilir.

    Bu yönerge sanal konak bağlamında desteklenirken, kapsanan sanal konaklar haricinde, değişiklikleri kendisinden sonraki tüm yapılandırma yönergelerinde görünür kılar.

    Ayrıca bakınız:

    top

    UseCanonicalName Yönergesi

    Açıklama:Sunucunun kendi adını ve portunu nasıl belirleyeceğini ayarlar
    Sözdizimi:UseCanonicalName On|Off|DNS
    Öntanımlı:UseCanonicalName Off
    BaÄŸlam:sunucu geneli, sanal konak, dizin
    Durum:Çekirdek
    Modül:core

    Apache httpd‘nin çoğu durumda özüne yönelik URL‘ler (isteğin tekrar aynı sunucuya yapıldığı bir URL türü) oluşturması gerekir. UseCanonicalName On ile Apache httpd, sunucu için meşru ismi ve portu oluşturmak için ServerName yönergesinde belirtilen ismi ve portu kullanır. Bu isim CGI'lerde SERVER_NAME ve SERVER_PORT değerlerinde ve tüm özüne yönelik URL’lerde kullanılır.

    UseCanonicalName Off ile Apache httpd, özüne yönelik URL’leri varsa istemci tarafından sağlanan konak ismini ve portu kullanarak oluşturur; bunlar istemci tarafından sağlanmamışsa yukarıda tanımlanan işleme başvurulur. Bu değerler, isme dayalı sanal konakları gerçekleştirirken kullanılan değerlerle aynı olup aynı istemcilerle kullanılabilir. SERVER_NAME ve SERVER_PORT CGI değişkenleri de istemci tarafından sağlanan isim ve portla oluşturulur.

    Bir örnek olarak, iç ağdaki istemcilerin sunucuya www gibi bir kısa isim kullanarak bağlandığı durumu ele alırsak daha yararlı olur. Kullanıcılar bir kısa isim ve bir dizin isminden oluşan ve bir / ile sonlandırılmamış http://www/splat şeklinde bir istek yaparlarsa, Apache httpd onları http://www.example.com/splat/ adresine yönlendirecektir. Eğer kimlik doğrulama da etkinse bu kullanıcının iki defa kimlik doğrulamasına sokulmasına sebep olacaktır (bir kere www için bir kere de www.example.com için; daha fazla bilgi için SSS’ye bakınız). Fakat UseCanonicalName Off olsaydı Apache httpd isteği http://www/splat/ adresine yönlendirecekti.

    UseCanonicalName DNS diye üçüncü bir seçenek daha vardır ve istek yaparken Host: başlığını kullanmayan eski istemcileri desteklemek amacıyla IP’ye dayalı sanal konaklarla kullanmak için tasarlanmıştır. Bu seçenek etkin olduğunda Apache httpd, istemciyi özüne yönelik URL’lerle doğru yere bağlamak için sunucu IP adresi üzerinde bir ters DNS sorgusu yapar.

    Uyarı

    Eğer CGI’ler SERVER_NAME değerleri için önkabuller yapıyorlarsa bu seçenek işlerinin bozulmasına yol açabilir. Aslında istemciler konak ismi olarak istedikleri değeri vermekte özgürdürler. Fakat eğer CGI, özüne yönelik URL’leri oluştururken sadece SERVER_NAME değerini kullanıyorsa bu istendiği gibi çalışacaktır.

    Ayrıca bakınız:

    top

    UseCanonicalPhysicalPort Yönergesi

    Açıklama:Sunucunun kendi adını ve portunu nasıl belirleyeceğini ayarlar
    Sözdizimi:UseCanonicalPhysicalPort On|Off
    Öntanımlı:UseCanonicalPhysicalPort Off
    BaÄŸlam:sunucu geneli, sanal konak, dizin
    Durum:Çekirdek
    Modül:core

    Apache httpd‘nin çoğu durumda özüne yönelik URL‘ler (isteğin tekrar aynı sunucuya yapıldığı bir URL türü) oluşturması gerekir. Apache httpd UseCanonicalName yönergesine bağlı olarak sunucu için meşru portu oluştururken UseCanonicalPhysicalPort On ile olası port olarak istek tarafından kullanılmakta olan fiziksel portu kullanacaktır. UseCanonicalPhysicalPort Off olduğunda ise geçerli bir port numarası oluşturmak için asıl fiziksel port yerine yapılandırma bilgisi kullanılır.

    Ek Bilgi

    Fiziksel port kullanımı etkin olduğunda işlemler şu sırayla yürütülür:

    UseCanonicalName On
    1. Servername ile saÄŸlanan port
    2. Fiziksel port
    3. Öntanımlı port
    UseCanonicalName Off | DNS
    1. Host: başlığından çözümlenen port
    2. Fiziksel port
    3. Servername yönergesinde belirtilen port
    4. Öntanımlı port

    UseCanonicalPhysicalPort Off olduğunda işlem sırasında fiziksel port adımları atlanır.

    Ayrıca bakınız:

    top

    <VirtualHost> Yönergesi

    Açıklama:Sadece belli bir konak ismine ve porta uygulanacak yönergeleri barındırır.
    Sözdizimi:<VirtualHost adres[:port] [adres[:port]] ...> ... </VirtualHost>
    BaÄŸlam:sunucu geneli
    Durum:Çekirdek
    Modül:core

    <VirtualHost> ve </VirtualHost> birlikte sadece belli bir sanal konağa uygulanacak yönergeleri sarmalamakta kullanılırlar. Bir sanal konak kapsamında belirtilebilecek her yönerge kullanılabilir. Sunucu belli bir sanal konak üzerindeki bir belge için bir istek aldığında <VirtualHost> bölümünde bulunan yapılandırma yönergelerini kullanır. adres şunlardan biri olabilir, istemlik olarak ikinokta imi ve bir port numarası (veya *) eklenebilir:

    • Sanal konağın IP adresi.
    • Sanal konağın IP adresi için tam nitelenmiÅŸ alan adı (önerilmez).
    • Tüm IP adresleri ile eÅŸleÅŸmek üzere * karakteri.
    • * için bir takma ad olarak _default_ dizgesi.
    <VirtualHost 10.1.2.3:80>
      ServerAdmin webmaster@host.example.com
      DocumentRoot "/www/docs/host.example.com"
      ServerName host.example.com
      ErrorLog "logs/host.example.com-error_log"
      TransferLog "logs/host.example.com-access_log"
    </VirtualHost>

    İsteğe bağlı port numarasını belirtmeyi mümkün kılmak için IPv6 adresleri köşeli ayraç içine alınır. IPv6 adresi kullanılan bir örnek:

    <VirtualHost [2001:db8::a00:20ff:fea7:ccea]:80>
      ServerAdmin webmaster@host.example.com
      DocumentRoot "/www/docs/host.example.com"
      ServerName host.example.com
      ErrorLog "logs/host.example.com-error_log"
      TransferLog "logs/host.example.com-access_log"
    </VirtualHost>

    Her sanal konağın ya farklı bir IP adresi ve port ile ya da farklı bir konak ismiyle eşleşmesi gerekir. Birinci durumda sunucu makinesinin çok sayıda adresten IP paketleri kabul edecek şekilde yapılandırılması gerekir. (Eğer makinede çok sayıda ağ arabirimi yoksa bu, işletim sistemi desteklediği takdirde ifconfig alias komutuyla sağlanabilir.)

    Ek Bilgi

    <VirtualHost> kullanımı Apache httpd’nin dinleyeceği adresler üzerinde belirleyici değildir. Apache httpd’nin doğru adresi dinlediğinden emin olmak için Listen kullanmanız gerekebilir.

    Her <VirtualHost> bloku içinde bir ServerName yönergesi mutlaka olmalıdır. Yokluğu halinde "ana" sunucu yapılandırmasındaki ServerName miras alınacaktır.

    Bir istek alındığında, sunucu isteği, sadece yerel IP adresi ve port çiftine dayalı en iyi eşleşen ilk <VirtualHost> bölümüne eşler. Joker kullanmayanlar daha yüksek önceliğe sahiptir. IP ve port çiftine dayalı bir eşleşme bulunamazsa istek için ana sunucu yapılandırması kullanılır.

    En iyi eşleşen IP adresi ve port çiftini birden fazla sanal konak kullanıyorsa sunucu bu sanal konaklar (liste) arasından istenen konak ismiyle en iyi eşleşeni seçer. Eşleşen hiçbir isme dayalı sanal konak yoksa listedeki IP adresi ile eşleşen ilk sanal konak kullanılır. Bunun sonucu olarak, belirtilen IP adresi ve port çifti için listedeki ilk sanal konak, bu IP adresi ve port çifti için öntanımlı sanal konaktır.

    Güvenlik

    Günlük dosyalarının sunucuyu çalıştıran kullanıcıdan başka herkes tarafından yazılabilen bir yerde saklanmasından dolayı ortaya çıkabilecek güvenlik sorunları hakkında daha ayrıntılı bilgi için güvenlik ipuçları belgesine bakınız.

    Ayrıca bakınız:

    Mevcut Diller:  de  |  en  |  es  |  fr  |  ja  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_lbmethod_heartbeat.html0000644000000000000500000000036013362070302021555 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_lbmethod_heartbeat.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_lbmethod_heartbeat.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_auth_basic.html.ko.euc-kr0000644000000000000500000003353213412755316021661 0ustar rootsrc mod_auth_basic - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_auth_basic

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:Basic authentication
    »óÅÂ:Base
    ¸ðµâ¸í:auth_basic_module
    ¼Ò½ºÆÄÀÏ:mod_auth_basic.c
    Áö¿ø:¾ÆÆÄÄ¡ 2.1 ÀÌÈĺÎÅÍ

    ¿ä¾à

    ÀÌ ¸ðµâÀº ÇØ´ç Á¦°øÀÚ(provider)¸¦ »ç¿ëÇÏ¿© »ç¿ëÀÚº°·Î Á¢±ÙÀ» Á¦ÇÑÇÏ´Â HTTP Basic AuthenticationÀ» Á¦°øÇÑ´Ù. HTTP Digest AuthenticationÀº mod_auth_digest°¡ Á¦°øÇÑ´Ù.

    top

    AuthBasicAuthoritative Áö½Ã¾î

    ¼³¸í:ÀÎÁõ°ú ±ÇÇѺο©¸¦ Àú¼öÁØ ¸ðµâ¿¡ ³Ñ°ÜÁÙÁö °áÁ¤ÇÑ´Ù
    ¹®¹ý:AuthBasicAuthoritative On|Off
    ±âº»°ª:AuthBasicAuthoritative On
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Base
    ¸ðµâ:mod_auth_basic

    AuthBasicAuthoritative Áö½Ã¾î¸¦ Off·Î ¼³Á¤Çϸé ÁÖ¾îÁø »ç¿ëÀÚ ¾ÆÀÌµð¿¡ ÇØ´çÇÏ´Â »ç¿ëÀÚ ¾ÆÀ̵𳪠±ÔÄ¢À» ãÀ» ¼ö ¾ø´Â °æ¿ì ÀÎÁõ°ú ±ÇÇѺο© ¸ðµÎ¸¦ (modules.c ÆÄÀÏ¿¡¼­ Á¤ÀÇÇÑ) Àú¼öÁØ ¸ðµâ·Î ³Ñ°ÜÁØ´Ù. ÁÖ¾îÁø »ç¿ëÀÚ ¾ÆÀ̵𳪠±ÔÄ¢À» ã¾Ò´Ù¸é º¸Åë¶§¿Í °°ÀÌ ¾ÏÈ£¿Í Á¢±ÙÇã¿ë¿©ºÎ¸¦ °Ë»çÇϰí, ½ÇÆÐÇϸé "Authentication Required (ÀÎÁõ ÇÊ¿ä)" ÀÀ´äÀ» ÇÑ´Ù.

    ±×·¡¼­ ¿©·¯ ¸ðµâÀÇ µ¥ÀÌÅͺ£À̽º¿¡ »ç¿ëÀÚ ¾ÆÀ̵𰡠Àְųª À¯È¿ÇÑ Require Áö½Ã¾î¸¦ ¿©·¯ ¸ðµâ¿¡ Àû¿ëÇϸé, ù¹øÂ° ¸ðµâÀÌ »ç¿ëÀÚ¸¦ °Ë»çÇϰí, AuthBasicAuthoritative ¼³Á¤°ú °ü°è¾øÀÌ Á¢±ÙÀ» ³Ñ±âÁö¾Ê´Â´Ù.

    ±âº»ÀûÀ¸·Î Á¦¾î¸¦ ³Ñ±âÁö¾Ê°í, ¸ð¸£´Â »ç¿ëÀÚ ¾ÆÀ̵ð¿Í ±ÔÄ¢ÀÎ °æ¿ì "Authentication Required (ÀÎÁõ ÇÊ¿ä)" ÀÀ´äÀ» ÇÑ´Ù. ÀÌ Áö½Ã¾î¸¦ ¼³Á¤ÇÏÁö¾ÊÀ¸¸é ½Ã½ºÅÛÀÌ ¾ÈÀüÇÏ°Ô À¯ÁöµÇ¸ç, NCSA À¥¼­¹ö¿Í °°ÀÌ µ¿ÀÛÇÑ´Ù.

    top

    AuthBasicFake Áö½Ã¾î

    ¼³¸í:Fake basic authentication using the given expressions for username and password
    ¹®¹ý:AuthBasicFake off|username [password]
    ±âº»°ª:none
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Base
    ¸ðµâ:mod_auth_basic
    Áö¿ø:Apache HTTP Server 2.4.5 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    AuthBasicProvider Áö½Ã¾î

    ¼³¸í:ÀÌ À§Ä¡¿¡ ´ëÇÑ ÀÎÁõÁ¦°øÀÚ¸¦ ÁöÁ¤ÇÑ´Ù
    ¹®¹ý:AuthBasicProvider On|Off|provider-name [provider-name] ...
    ±âº»°ª:AuthBasicProvider On
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Base
    ¸ðµâ:mod_auth_basic

    AuthBasicProvider Áö½Ã¾î´Â ÀÌ À§Ä¡¿¡¼­ »ç¿ëÀÚ¸¦ ÀÎÁõÇÒ Á¦°øÀÚ¸¦ ÁöÁ¤ÇÑ´Ù. °ªÀÌ OnÀÌ¸é ±âº»Á¦°øÀÚ(file)¸¦ ¼±ÅÃÇÑ´Ù. mod_authn_file ¸ðµâÀÌ file Á¦°øÀÚ¸¦ ±¸ÇöÇϱ⶧¹®¿¡ ¼­¹ö¿¡ ÀÌ ¸ðµâÀÌ ÀÖ´ÂÁö È®ÀÎÇØ¾ß ÇÑ´Ù.

    ¿¹Á¦

    <Location /secure>
    AuthBasicProvider dbm
    AuthDBMType SDBM
    AuthDBMUserFile /www/etc/dbmpasswd
    Require valid-user
    </Location>

    Á¦°øÀÚ´Â mod_authn_dbm°ú mod_authn_fileÀ» Âü°íÇ϶ó.

    °ªÀÌ OffÀ̸é Á¦°øÀÚ ¸ñ·ÏÀ» Áö¿ì°í ±âº»»óÅ·Πµ¹¾Æ°£´Ù.

    top

    AuthBasicUseDigestAlgorithm Áö½Ã¾î

    ¼³¸í:Check passwords against the authentication providers as if Digest Authentication was in force instead of Basic Authentication.
    ¹®¹ý:AuthBasicUseDigestAlgorithm MD5|Off
    ±âº»°ª:AuthBasicUseDigestAlgorithm Off
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Base
    ¸ðµâ:mod_auth_basic
    Áö¿ø:Apache HTTP Server 2.4.7 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_heartbeat.html.en0000644000000000000500000002306713412755316020324 0ustar rootsrc mod_heartbeat - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_heartbeat

    Available Languages:  en  |  fr 

    Description:Sends messages with server status to frontend proxy
    Status:Experimental
    Module Identifier:heartbeat_module
    Source File:mod_heartbeat
    Compatibility:Available in Apache 2.3 and later

    Summary

    mod_heartbeat sends multicast messages to a mod_heartmonitor listener that advertises the servers current connection count. Usually, mod_heartmonitor will be running on a proxy server with mod_lbmethod_heartbeat loaded, which allows ProxyPass to use the "heartbeat" lbmethod inside of ProxyPass.

    mod_heartbeat itself is loaded on the origin server(s) that serve requests through the proxy server(s).

    To use mod_heartbeat, mod_status and mod_watchdog must be either a static modules or, if a dynamic module, must be loaded before mod_heartbeat.
    top

    Consuming mod_heartbeat Output

    Every 1 second, this module generates a single multicast UDP packet, containing the number of busy and idle workers. The packet is a simple ASCII format, similar to GET query parameters in HTTP.

    An Example Packet

    v=1&ready=75&busy=0

    Consumers should handle new variables besides busy and ready, separated by '&', being added in the future.

    top

    HeartbeatAddress Directive

    Description:Multicast address for heartbeat packets
    Syntax:HeartbeatAddress addr:port
    Default:disabled
    Context:server config
    Status:Experimental
    Module:mod_heartbeat

    The HeartbeatAddress directive specifies the multicast address to which mod_heartbeat will send status information. This address will usually correspond to a configured HeartbeatListen on a frontend proxy system.

    HeartbeatAddress 239.0.0.1:27999

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_speling.html.ja.utf80000644000000000000500000003206213412755316020676 0ustar rootsrc mod_speling - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_speling

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:ユーザãŒå…¥åŠ›ã—ãŸã§ã‚ã‚ã†é–“é•ã£ãŸ URL ã‚’ã€ å¤§æ–‡å­—å°æ–‡å­—ã®åŒºåˆ¥ã‚’無視ã™ã‚‹ã“ã¨ã¨ä¸€ã¤ä»¥ä¸‹ã®ç¶´ã‚Šé–“é•ã„を許容ã™ã‚‹ã“ã¨ã§ 修正を試ã¿ã‚‹
    ステータス:Extension
    モジュール識別å­:speling_module
    ソースファイル:mod_speling.c

    概è¦

    リクエストã®ç¶´ã‚ŠãŒé–“é•ã£ã¦ã„ãŸã‚Šã€ å¤§æ–‡å­—å°æ–‡å­—ãŒé•ã£ã¦ã„ãŸã‚Šã™ã‚‹ãŸã‚ã«ã€Apache ã®ã‚³ã‚¢ã‚µãƒ¼ãƒãŒ ドキュメントã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¸ã®å¿œç­”ã‚’æ­£ã—ãæä¾›ã§ããªã„ã“ã¨ãŒã‚りã¾ã™ã€‚ ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã€ä»–ã®ã™ã¹ã¦ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒã‚ãらã‚ãŸå¾Œã§ã‚ã£ãŸã¨ã—ã¦ã‚‚〠リクエストã«åˆã†ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’見ã¤ã‘よã†ã¨ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã“ã®å•題㮠解決を試ã¿ã¾ã™ã€‚ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã‚ã‚‹ ãれãžã‚Œã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®åå‰ã¨ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã•れãŸãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®åå‰ã¨ã‚’ å¤§æ–‡å­—å°æ–‡å­—ã®åŒºåˆ¥ã‚’無視ã—ã€ä¸€æ–‡å­—ã¾ã§ã® 綴りã®é–“é•ã„ (æ–‡å­—ã®æŒ¿å…¥/çœç•¥/隣åˆã†æ–‡å­—ã®ç½®æ›ã€é–“é•ã£ãŸæ–‡å­—) を許å¯ã—ã¦æ¯”較ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ç›®çš„ã‚’é”æˆã—よã†ã¨ã—ã¾ã™ã€‚ ã“ã®æ–¹æ³•ã§ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«åˆã†ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®ä¸€è¦§ãŒä½œæˆã•れã¾ã™ã€‚

    ディレクトリをスキャンã—ãŸå¾Œã«ã€

    • é©åˆ‡ãªãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãŒè¦‹ã¤ã‹ã‚‰ãªã‹ã£ãŸå ´åˆã€ Apache ã¯ã„ã¤ã‚‚ã¨åŒã˜ã‚ˆã†ã«å‡¦ç†ã‚’ã—〠「ドキュメントãŒè¦‹ã¤ã‹ã‚‰ãªã„ã€ã¨ã„ã†ã‚¨ãƒ©ãƒ¼ã‚’è¿”ã—ã¾ã™ã€‚
    • リクエストã«ã€Œã»ã¨ã‚“ã©ã€åˆã†ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãŒä¸€ã¤ã ã‘見ã¤ã‹ã£ãŸå ´åˆã€ ãれãŒãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå¿œç­”ã¨ã—ã¦è¿”ã•れã¾ã™ã€‚
    • よãä¼¼ãŸãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãŒè¤‡æ•°è¦‹ã¤ã‹ã£ãŸå ´åˆã€ ãã®ãƒªã‚¹ãƒˆãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«è¿”ã•ã‚Œã€ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒæ­£ã—ã„å€™è£œã‚’é¸æŠžã§ãるよã†ã«ã—ã¾ã™ã€‚
    Support Apache!

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    CheckCaseOnly ディレクティブ

    説明:å¤§æ–‡å­—å°æ–‡å­—ã®ä¿®æ­£ã ã‘行ã†ã‚ˆã†ã«ã™ã‚‹
    æ§‹æ–‡:CheckCaseOnly on|off
    デフォルト:CheckCaseOnly Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Options
    ステータス:Extension
    モジュール:mod_speling

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒã‚»ãƒƒãƒˆã•れるã¨ã€ 綴り訂正機能ã¯å¤§æ–‡å­—å°æ–‡å­—ã®ä¿®æ­£ã®ã¿åƒãã€ä»–ã®ä¿®æ­£æ©Ÿèƒ½ã¯åƒãã¾ã›ã‚“。

    top

    CheckSpelling ディレクティブ

    説明:spelling モジュールを使用ã™ã‚‹ã‚ˆã†ã«ã™ã‚‹
    æ§‹æ–‡:CheckSpelling on|off
    デフォルト:CheckSpelling Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Options
    ステータス:Extension
    モジュール:mod_speling
    äº’æ›æ€§:CheckSpelling 㯠Apache 1.1 ã§ã¯åˆ¥é…布ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ã€ å¤§æ–‡å­—å°æ–‡å­—ã®é–“é•ã„ã®ã¿ã®æ©Ÿèƒ½ã§ã—ãŸã€‚Apache 1.3 ã§ Apache ã®é…布㫠å«ã¾ã‚Œã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚Apache 1.3.2 よりå‰ã§ã¯ CheckSpelling ディレクティブã¯ã€Œã‚µãƒ¼ãƒã€ã¨ã€Œãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã€ã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆã§ã®ã¿ 使用å¯èƒ½ã§ã—ãŸ

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ç¶´ã‚Šç”¨ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’使用ã™ã‚‹ã‹ã©ã†ã‹ã‚’ 決ã‚ã¾ã™ã€‚使用時ã«ã¯ã€ä»¥ä¸‹ã®ã“ã¨ã‚’覚ãˆã¦ãŠã„ã¦ãã ã•ã„

    • åŒæ™‚ã«ãŸãã•ã‚“ã®ç¶´ã‚Šã®è¨‚正を行ãªã‚ãªã‘れã°ãªã‚‰ãªã„ã¨ãã¯ã€ ãã®ãŸã‚ã«è¡Œãªã‚れるディレクトリã®ã‚¹ã‚­ãƒ£ãƒ³ãŒã‚µãƒ¼ãƒã®æ€§èƒ½ã« 影響を与ãˆã¾ã™ã€‚
    • ドキュメントã®ä¸­ã«ç¶´ã‚Šã®ã€Œè¨‚æ­£ã€ã«ã‚ˆã‚Š æ„図ã›ãšåˆã£ã¦ã—ã¾ã†ã‚ˆã†ãªé‡è¦ãªãƒ•ァイルãŒãªã„よã†ã«ã—ã¦ãã ã•ã„。
    • モジュールã¯ãƒ¦ãƒ¼ã‚¶åã®ç¶´ã‚Šã®é–“é•ã„ (http://my.host/~apahce/ ã®ã‚ˆã†ã«) を訂正ã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“。 訂正ã§ãã‚‹ã®ã¯ãƒ•ァイルåã¨ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªåã ã‘ã§ã™ã€‚
    • 綴りã®è¨‚æ­£ã¯å­˜åœ¨ã™ã‚‹ãƒ•ァイルã«å޳坆ã«é©ç”¨ã•れã¾ã™ã®ã§ã€ <Location /status> ã¯ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã®çµæžœã®ãƒ•ァイル "/stats.html" ã¨ã—ã¦é–“é•ã£ã¦æ‰±ã‚れるã‹ã‚‚ã—れã¾ã›ã‚“。

    DAV ãŒæœ‰åйãªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã§ã¯ mod_speling ã¯æœ‰åйã«ã—ãªã„ã§ãã ã•ã„。 æ–°ã—ã作æˆã—ãŸãƒªã‚½ãƒ¼ã‚¹åã‚’æ—¢ã«å­˜åœ¨ã™ã‚‹ãƒ•ァイルåã«ã€Œä¿®æ­£ã€ã—よã†ã¨ã™ã‚‹ã€ 例ãˆã°ã€æ–°è¦ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆ doc43.html ãŒæ—¢ã«å­˜åœ¨ã™ã‚‹ doc34.html ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•れã¦ã€ 期待ã¨ã¯é•ã†æŒ™å‹•ã«ãªã‚‹ã‹ã‚‰ã§ã™ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_dbm.html.ko.euc-kr0000644000000000000500000002462013412755316021532 0ustar rootsrc mod_authz_dbm - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_authz_dbm

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:DBM ÆÄÀÏÀ» »ç¿ëÇÑ ±×·ì ÀÎÁõ
    »óÅÂ:Extension
    ¸ðµâ¸í:authz_dbm_module
    ¼Ò½ºÆÄÀÏ:mod_authz_dbm.c
    Áö¿ø:¾ÆÆÄÄ¡ 2.1 ÀÌÈĺÎÅÍ

    ¿ä¾à

    ÀÌ ¸ðµâÀº ÀÎÁõÇÑ »ç¿ëÀÚÀÇ ±×·ì±ÇÇÑÀ¸·Î À¥ÀÇ ÀϺθ¦ Á¢±ÙÇÒ ¼ö ÀÖ´ÂÁö °áÁ¤ÇÏ¿© ±ÇÇѺο©¸¦ ÇÑ´Ù. mod_authz_groupfile°ú ±â´ÉÀÌ ºñ½ÁÇÏ´Ù.

    top

    AuthDBMGroupFile Áö½Ã¾î

    ¼³¸í:ÀÎÁõ¿¡ »ç¿ëÇÒ »ç¿ëÀÚ ±×·ì ¸ñ·ÏÀ» ÀúÀåÇÏ´Â µ¥ÀÌÅͺ£À̽º ÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù
    ¹®¹ý:AuthDBMGroupFile file-path
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Extension
    ¸ðµâ:mod_authz_dbm

    AuthDBMGroupFile Áö½Ã¾î´Â ÀÎÁõ¿¡ »ç¿ëÇÒ »ç¿ëÀÚ ±×·ì ¸ñ·ÏÀ» ÀúÀåÇÏ´Â DBM ÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù. File-path´Â ÆÄÀÏÀÇ Àý´ë°æ·ÎÀÌ´Ù.

    ÆÄÀÏÀº »ç¿ëÀÚ¸íÀ» Ű·Î »ç¿ëÇÑ´Ù. »ç¿ëÀÚ¿¡ ´ëÇÑ °ªÀº ½°Ç¥·Î ±¸ºÐÇÑ »ç¿ëÀÚ°¡ ¼ÓÇÑ ±×·ì ¸ñ·ÏÀÌ´Ù. °ª¿¡ °ø¹éÀ̳ª ÄÝ·ÐÀ» »ç¿ëÇÒ ¼ö ¾ø´Ù.

    º¸¾È

    AuthDBMGroupFileÀÌ À¥¼­¹öÀÇ ¹®¼­µé ¹Û¿¡ À§Ä¡ÇÔÀ» È®ÀÎÇ϶ó. ÀÌ ÆÄÀÏÀ» º¸È£ÇÒ µð·ºÅ丮 ¾È¿¡ °°ÀÌ µÎÁö ¸¶¶ó. ±×·¸Áö ¾ÊÀ¸¸é, Ŭ¶óÀÌ¾ðÆ®°¡ AuthDBMGroupFile¸¦ ´Ù¿î·ÎµåÇÒ ¼ö ÀÖ´Ù.

    ±×·ì DBM ÆÄÀϰú ¾ÏÈ£ DBM ÆÄÀÏÀ» °°ÀÌ »ç¿ëÇϱâ: »ç¿ëÀÚ¿¡ ´ëÇÑ ¾ÏÈ£¿Í ±×·ì Á¤º¸ ¸ðµÎ¸¦ ÇÑ µ¥ÀÌÅͺ£À̽º¿¡¼­ °ü¸®ÇÏ´Â °ÍÀÌ ½¬¿ï¶§°¡ ÀÖ´Ù. ÀÌ °æ¿ì ÀÛ¼ºÇÒ Áö¿ø ÇÁ·Î±×·¥ÀÌ °£´ÜÇØÁø´Ù. ÇÁ·Î±×·¥Àº ÇÑ DBM ÆÄÀϸ¸À» Àá±×°í ¾²¸é µÈ´Ù. ±×·ìÆÄÀϰú ¾ÏÈ£ÆÄÀÏÀ» °°Àº DBMÆÄÀÏ·Î ¼³Á¤ÇÏ¸é °¡´ÉÇÏ´Ù:

    AuthDBMGroupFile /www/userbase
    AuthDBMUserFile /www/userbase

    ÀÌ ÅëÇÕ DBMÀÇ Å°´Â »ç¿ëÀÚ¸íÀÌ´Ù. °ªÀº ´ÙÀ½°ú °°´Ù

    ÀÎÄÚµùµÈ ¾ÏÈ£ : ±×·ì ¸ñ·Ï [ : (¹«½Ã) ]

    ¾ÏÈ£ ºÎºÐÀº Àü°ú °°ÀÌ ÀÎÄÚµùµÈ ¾ÏÈ£ÀÌ´Ù. ÄÝ·Ð µÚ¿¡ ½°Ç¥·Î ±¸ºÐÇÑ ±×·ì ¸ñ·ÏÀÌ ³ª¿Â´Ù. ¶Ç ´Ù½Ã ÄÝ·Ð ´ÙÀ½¿¡ ´Ù¸¥ Á¤º¸¸¦ ±â·ÏÇÒ ¼ö ÀÖ´Ù. ÀÌ ºÎºÐÀº ÀÎÁõ¸ðµâÀÌ ¹«½ÃÇÑ´Ù. www.telescope.org´Â ÀÌ·¸°Ô ¾ÏÈ£ µ¥ÀÌÅͺ£À̽º¿Í ±×·ì µ¥ÀÌÅͺ£À̽º¸¦ °°ÀÌ »ç¿ëÇÑ´Ù.

    top

    AuthzDBMType Áö½Ã¾î

    ¼³¸í:¾ÏÈ£¸¦ ÀúÀåÇÏ´Â µ¥ÀÌÅͺ£À̽º ÆÄÀÏ Á¾·ù¸¦ ÁöÁ¤ÇÑ´Ù
    ¹®¹ý:AuthzDBMType default|SDBM|GDBM|NDBM|DB
    ±âº»°ª:AuthzDBMType default
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Extension
    ¸ðµâ:mod_authz_dbm

    ¾ÏÈ£¸¦ ÀúÀåÇÏ´Â µ¥ÀÌÅͺ£À̽º ÆÄÀÏ Á¾·ù¸¦ ÁöÁ¤ÇÑ´Ù. µ¥ÀÌÅͺ£À̽º Á¾·ù ±âº»°ªÀº ÄÄÆÄÀ϶§ Á¤ÇØÁø´Ù. »ç¿ëÇÒ ¼ö ÀÖ´Â ´Ù¸¥ µ¥ÀÌÅͺ£À̽º ÆÄÀÏ Á¾·ùµµ ÄÄÆÄÀÏ ¼³Á¤¿¡ ´Þ·È´Ù.

    ¾ÏÈ£ÆÄÀÏÀ» ¸¸µç ÇÁ·Î±×·¥ÀÌ °°Àº Á¾·ùÀÇ µ¥ÀÌÅͺ£À̽º¸¦ »ç¿ëÇϵµ·Ï ¼³Á¤ÇØ¾ß ÇÑ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_expires.html.ja.utf80000644000000000000500000004445513412755316020725 0ustar rootsrc mod_expires - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_expires

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:ãƒ¦ãƒ¼ã‚¶ã®æŒ‡å®šã—ãŸåŸºæº–ã«åŸºã¥ã„㟠Expires 㨠Cache-Control HTTP ヘッダã®ç”Ÿæˆ
    ステータス:Extension
    モジュール識別å­:expires_module
    ソースファイル:mod_expires.c

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã‚µãƒ¼ãƒå¿œç­”ã® Expires HTTP ヘッダ 㨠Cache-Control ヘッダ㮠max-age ディレクティブ㮠設定を制御ã—ã¾ã™ã€‚å…ƒã®ãƒ•ァイルãŒä½œæˆã•ã‚ŒãŸæ™‚刻ã¾ãŸã¯ クライアントã®ã‚¢ã‚¯ã‚»ã‚¹æ™‚刻ã®ã©ã¡ã‚‰ã‹ã«åŸºã¥ã„ã¦æœŸé™åˆ‡ã‚Œæ—¥ã‚’ 設定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    ã“れらã®ãƒ˜ãƒƒãƒ€ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«æ–‡æ›¸ã® 有効性ã¨ç¶™ç¶šæ€§ã‚’指示ã—ã¾ã™ã€‚文書ãŒã‚­ãƒ£ãƒƒã‚·ãƒ¥ã•れãŸå ´åˆã«ã¯ã€ 指定時刻ã«é”ã™ã‚‹ã¾ã§ã¯ã€å…ƒã®å ´æ‰€ã‹ã‚‰å–å¾—ã™ã‚‹ä»£ã‚り㫠キャッシュã•れã¦ã„ã‚‹ã‚‚ã®ã‚’使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚ãã®å¾Œã¯ã€ キャッシュã«ã‚ã‚‹ã‚³ãƒ”ãƒ¼ã¯æœŸé™åˆ‡ã‚Œ (expired) ã§ç„¡åйã§ã‚ã‚‹ã¨ã•れ〠元ã®å ´æ‰€ã‹ã‚‰æ–°ã—ã„ã‚‚ã®ã‚’å–å¾—ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚

    max-age 以外 (RFC 2616 section 14.9 å‚ç…§) ã® Cache-Control ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ æ“作ã™ã‚‹ã«ã¯ Header ディレクティブを 使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚

    Support Apache!

    トピック

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    代替期間指定構文

    ExpiresDefault ディレクティブ㨠ExpiresByType ディレクティブ㯠以下ã®ã‚ˆã‚Šèª­ã¿æ˜“ã„æ§‹æ–‡ã‚’使ã£ã¦å®šç¾©ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™:

    ExpiresDefault "<base> [plus] {<num> <type>}*"
    ExpiresByType type/encoding "<base> [plus] {<num> <type>}*"

    <base> ã¯ä»¥ä¸‹ã®ã©ã‚Œã‹ã§ã™:

    • access
    • now ('access' ã¨ç­‰ä¾¡)
    • modification

    plus キーワードã¯çœç•¥å¯èƒ½ã§ã™ã€‚<num> 㯠(atoi() ãŒå—ã‘付ã‘ã‚‹) 整数値〠<type> ã¯ä»¥ä¸‹ã®ã©ã‚Œã‹ã§ã™:

    • years
    • months
    • weeks
    • days
    • hours
    • minutes
    • seconds

    例ãˆã°ã€ä»¥ä¸‹ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã©ã‚Œã‚‚ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§æ–‡æ›¸ãŒã‚¢ã‚¯ã‚»ã‚¹ã® 1 ヶ月後㫠期é™ãŒåˆ‡ã‚Œã‚‹ã‚ˆã†ã«ã™ã‚‹ãŸã‚ã«ä½¿ãˆã¾ã™:

    ExpiresDefault "access plus 1 month"
    ExpiresDefault "access plus 4 weeks"
    ExpiresDefault "access plus 30 days"

    期é™åˆ‡ã‚Œæ™‚刻ã¯ã„ãã¤ã‹ '<num> <type>' 節を追加ã™ã‚‹ã“ã¨ã§ã‚ˆã‚Šç´°ã‹ã 制御ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™:

    ExpiresByType text/html "access plus 1 month 15 days 2 hours"
    ExpiresByType image/gif "modification plus 5 hours 3 minutes"

    修正時刻ã«åŸºã¥ã„ãŸè¨­å®šã‚’使用ã—ã¦ã„ã‚‹å ´åˆã€Expires ヘッダ㯠ディスクã®ãƒ•ァイル以外ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«ã¯è¿½åŠ ã•れãªã„ã“ã¨ã«æ³¨æ„ ã—ã¦ãã ã•ã„。ãã®ã‚ˆã†ãªã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«ã¯ä¿®æ­£æ™‚刻ã¯å­˜åœ¨ã—ãªã„ã‹ã‚‰ã§ã™ã€‚

    top

    ExpiresActive ディレクティブ

    説明:Expires ヘッダã®ç”Ÿæˆã‚’有効ã«ã™ã‚‹
    æ§‹æ–‡:ExpiresActive On|Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Extension
    モジュール:mod_expires

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯å¯¾å¿œã™ã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®é ˜åŸŸã§ Expires 㨠Cache-Controlヘッダを 有効ã«ã™ã‚‹ã‹ç„¡åйã«ã™ã‚‹ã‹ã‚’決ã‚ã¾ã™ã€‚ (例ãˆã°ã€.htaccess ファイルã§ã¯ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã® 文書ã®ã¿ã«é©ç”¨ã•れるã¨ã„ã†ã“ã¨ã§ã™ã€‚) Off 㫠設定ã•れãŸå ´åˆã¯å¯¾å¿œé ˜åŸŸã§ãれらã®ãƒ˜ãƒƒãƒ€ã¯ 生æˆã•れã¾ã›ã‚“ (.htaccess ãŒã‚µãƒ¼ãƒè¨­å®šãƒ•ァイルã®è¨­å®šã‚’ 上書ãã™ã‚‹ã€ã¨ã„ã†ã‚ˆã†ãªä¸‹ä½ãƒ¬ãƒ™ãƒ«ã§ã®ä¸Šæ›¸ããŒã•れã¦ã„ãªã‘れã°)。 On ã«è¨­å®šã•れã¦ã„れã°ã€ãƒ˜ãƒƒãƒ€ã¯ ExpiresByType ディレクティブ㨠ExpiresDefault ディレクティブ ã®åŸºæº–ã«å¾“ã£ã¦æ–‡æ›¸ã«ãƒ˜ãƒƒãƒ€ã‚’追加ã—ã¾ã™ (å„ディレクティブå‚ç…§)。

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠Expires 㨠Cache-Control ヘッダã®å­˜åœ¨ã‚’ ä¿è¨¼ã™ã‚‹ã‚ã‘ã§ã¯ãªã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„ã€‚åŸºæº–ãŒæº€ãŸã•れ㦠ã„ãªã„å ´åˆã¯ãƒ˜ãƒƒãƒ€ã¯è¿½åŠ ã•れãšã€çµæžœã¨ã—ã¦ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㌠指定ã•れã¦ã„ãªã‹ã£ãŸã‹ã®ã‚ˆã†ã«ã•ãˆè¦‹ãˆã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚

    top

    ExpiresByType ディレクティブ

    説明:MIME タイプã«ã‚ˆã£ã¦è¨­å®šã•れる Expires ヘッダã®å€¤
    æ§‹æ–‡:ExpiresByType MIME-type <code>seconds
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Extension
    モジュール:mod_expires

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯æŒ‡å®šã•れãŸã‚¿ã‚¤ãƒ—ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆ (例ãˆã° text/html) ã«å¯¾ã—ã¦ç”Ÿæˆã•れる Expires ヘッダ㨠Cache-Control ヘッダ㮠max-age ディレクティブã®å€¤ã‚’定義ã—ã¾ã™ã€‚ 二ã¤ç›®ã®å¼•æ•°ã¯æœŸé™åˆ‡ã‚Œã®æ—¥æ™‚を生æˆã™ã‚‹ãŸã‚ã®åŸºæº–時刻ã«è¿½åŠ ã•れる 秒数を設定ã—ã¾ã™ã€‚Cache-Control: max-age ã¯æœŸé™åˆ‡ã‚Œã®æ™‚刻ã‹ã‚‰ãƒªã‚¯ã‚¨ã‚¹ãƒˆæ™‚刻を引ã„ãŸã‚‚ã®ã‚’秒㧠表ã™ã“ã¨ã§ç”Ÿæˆã•れã¾ã™ã€‚

    基準時刻ã¯ãƒ•ã‚¡ã‚¤ãƒ«ã®æœ€çµ‚修正時刻ã‹ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã¸ã® アクセス時刻ã§ã™ã€‚ã©ã¡ã‚‰ã‚’使ã†ã¹ãã‹ã¯ <code> ã«ã‚ˆã£ã¦æŒ‡å®šã—ã¾ã™ã€‚M ã¯åŸºæº–時刻ã¨ã—ã¦ ãƒ•ã‚¡ã‚¤ãƒ«ã®æœ€çµ‚修正時刻をã¨ã„ã†æ„味ã§ã€A ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã® アクセス時刻を使ã†ã¨ã„ã†æ„味ã«ãªã‚Šã¾ã™ã€‚

    効果ã«ã¯å¾®å¦™ãªé•ã„ãŒã‚りã¾ã™ã€‚M ãŒä½¿ç”¨ã•れãŸå ´åˆã¯ã€ ã™ã¹ã¦ã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã«ã‚ã‚‹ç¾åœ¨ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚­ãƒ£ãƒƒã‚·ãƒ¥ã¯åŒæ™‚ã«æœŸé™ãŒ 切れã¾ã™ã€‚ã“れã¯åŒã˜ URL ã«æ¯Žé€±å¸¸ã«ç½®ã‹ã‚Œã‚‹å ±ã›ã®ã‚ˆã†ãªã‚‚ã®ã«ã¯ éžå¸¸ã«æœ‰åйã§ã™ã€‚A ãŒä½¿ç”¨ã•れãŸå ´åˆã¯ã€æœŸé™åˆ‡ã‚Œã® 時間ã¯å„クライアントよã£ã¦ç•°ãªã‚Šã¾ã™ã€‚ã“れã¯ã‚ã¾ã‚Šå¤‰æ›´ã•れãªã„ ç”»åƒãƒ•ァイルãªã©ã€ç‰¹ã«é–¢é€£ã™ã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆç¾¤ãŒã™ã¹ã¦åŒã˜ç”»åƒã‚’ å‚ç…§ã™ã‚‹ã¨ã (ã™ãªã‚ã¡ç”»åƒãŒæ¯”è¼ƒçš„çŸ­ã„æœŸé–“内ã«ç¹°ã‚Šè¿”㗠アクセスã•れるã¨ã) ã«æœ‰åйã§ã™ã€‚

    例:

    # enable expirations
    ExpiresActive On
    # expire GIF images after a month in the client's cache
    ExpiresByType image/gif A2592000
    # HTML documents are good for a week from the
    # time they were changed
    ExpiresByType text/html M604800

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠ExpiresActive On ãŒæŒ‡å®šã•れã¦ã„ã‚‹ ã¨ãã®ã¿æœ‰åйã§ã‚ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。ã“れã¯ã€ 指定ã•れ㟠MIME タイプã«å¯¾ã—ã¦ã®ã¿ ExpiresDefault ディレクティブ㧠設定ã•ã‚ŒãŸæœŸé™åˆ‡ã‚ŒæœŸæ—¥ã‚’上書ãã—ã¾ã™ã€‚

    ã“ã®æ–‡æ›¸ã®å‰ã®æ–¹ã§èª¬æ˜Žã•れã¦ã„る代替構文を 使ã£ã¦æœŸé™åˆ‡ã‚ŒæœŸæ—¥ã®è¨ˆç®—方法を指定ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    top

    ExpiresDefault ディレクティブ

    説明:期é™åˆ‡ã‚ŒæœŸæ—¥ã‚’計算ã™ã‚‹ãƒ‡ãƒ•ォルトアルゴリズム
    æ§‹æ–‡:ExpiresDefault <code>seconds
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Extension
    モジュール:mod_expires

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯å¯¾å¿œã™ã‚‹ç¯„囲ã®ã™ã¹ã¦ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã«å¯¾ã—ã¦ ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®æœŸé™åˆ‡ã‚ŒæœŸæ—¥ã®è¨ˆç®—アルゴリズムを設定ã—ã¾ã™ã€‚ExpiresByType ディレクティブã«ã‚ˆã£ã¦ タイプ毎ã«ä¸Šæ›¸ãã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚å¼•æ•°ã®æ§‹æ–‡ã¯ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㮠説明をå‚ç…§ã—ã¦ãã ã•ã„。ã¾ãŸã€ä»£æ›¿æ§‹æ–‡ã‚‚ å‚ç…§ã—ã¦ãã ã•ã„。

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_dbd.html.en0000644000000000000500000004431313412755316020326 0ustar rootsrc mod_authz_dbd - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authz_dbd

    Available Languages:  en  |  fr 

    Description:Group Authorization and Login using SQL
    Status:Extension
    Module Identifier:authz_dbd_module
    Source File:mod_authz_dbd.c
    Compatibility:Available in Apache 2.4 and later

    Summary

    This module provides authorization capabilities so that authenticated users can be allowed or denied access to portions of the web site by group membership. Similar functionality is provided by mod_authz_groupfile and mod_authz_dbm, with the exception that this module queries a SQL database to determine whether a user is a member of a group.

    This module can also provide database-backed user login/logout capabilities. These are likely to be of most value when used in conjunction with mod_authn_dbd.

    This module relies on mod_dbd to specify the backend database driver and connection parameters, and manage the database connections.

    top

    The Require Directives

    Apache's Require directives are used during the authorization phase to ensure that a user is allowed to access a resource. mod_authz_dbd extends the authorization types with dbd-group, dbd-login and dbd-logout.

    Since v2.4.8, expressions are supported within the DBD require directives.

    Require dbd-group

    This directive specifies group membership that is required for the user to gain access.

    Require dbd-group team
    AuthzDBDQuery "SELECT group FROM authz WHERE user = %s"

    Require dbd-login

    This directive specifies a query to be run indicating the user has logged in.

    Require dbd-login
    AuthzDBDQuery "UPDATE authn SET login = 'true' WHERE user = %s"

    Require dbd-logout

    This directive specifies a query to be run indicating the user has logged out.

    Require dbd-logout
    AuthzDBDQuery "UPDATE authn SET login = 'false' WHERE user = %s"
    top

    Database Login

    In addition to the standard authorization function of checking group membership, this module can also provide server-side user session management via database-backed login/logout capabilities. Specifically, it can update a user's session status in the database whenever the user visits designated URLs (subject of course to users supplying the necessary credentials).

    This works by defining two special Require types: Require dbd-login and Require dbd-logout. For usage details, see the configuration example below.

    top

    Client Login integration

    Some administrators may wish to implement client-side session management that works in concert with the server-side login/logout capabilities offered by this module, for example, by setting or unsetting an HTTP cookie or other such token when a user logs in or out.

    To support such integration, mod_authz_dbd exports an optional hook that will be run whenever a user's status is updated in the database. Other session management modules can then use the hook to implement functions that start and end client-side sessions.

    top

    Configuration example

    # mod_dbd configuration
    DBDriver pgsql
    DBDParams "dbname=apacheauth user=apache pass=xxxxxx"
    
    DBDMin  4
    DBDKeep 8
    DBDMax  20
    DBDExptime 300
    
    <Directory "/usr/www/my.site/team-private/">
      # mod_authn_core and mod_auth_basic configuration
      # for mod_authn_dbd
      AuthType Basic
      AuthName Team
      AuthBasicProvider dbd
    
      # mod_authn_dbd SQL query to authenticate a logged-in user
      AuthDBDUserPWQuery \
        "SELECT password FROM authn WHERE user = %s AND login = 'true'"
    
      # mod_authz_core configuration for mod_authz_dbd
      Require dbd-group team
    
      # mod_authz_dbd configuration
      AuthzDBDQuery "SELECT group FROM authz WHERE user = %s"
    
      # when a user fails to be authenticated or authorized,
      # invite them to login; this page should provide a link
      # to /team-private/login.html
      ErrorDocument 401 "/login-info.html"
    
      <Files "login.html">
        # don't require user to already be logged in!
        AuthDBDUserPWQuery "SELECT password FROM authn WHERE user = %s"
    
        # dbd-login action executes a statement to log user in
        Require dbd-login
        AuthzDBDQuery "UPDATE authn SET login = 'true' WHERE user = %s"
    
        # return user to referring page (if any) after
        # successful login
        AuthzDBDLoginToReferer On
      </Files>
    
      <Files "logout.html">
        # dbd-logout action executes a statement to log user out
        Require dbd-logout
        AuthzDBDQuery "UPDATE authn SET login = 'false' WHERE user = %s"
      </Files>
    </Directory>
    top

    AuthzDBDLoginToReferer Directive

    Description:Determines whether to redirect the Client to the Referring page on successful login or logout if a Referer request header is present
    Syntax:AuthzDBDLoginToReferer On|Off
    Default:AuthzDBDLoginToReferer Off
    Context:directory
    Status:Extension
    Module:mod_authz_dbd

    In conjunction with Require dbd-login or Require dbd-logout, this provides the option to redirect the client back to the Referring page (the URL in the Referer HTTP request header, if present). When there is no Referer header, AuthzDBDLoginToReferer On will be ignored.

    top

    AuthzDBDQuery Directive

    Description:Specify the SQL Query for the required operation
    Syntax:AuthzDBDQuery query
    Context:directory
    Status:Extension
    Module:mod_authz_dbd

    The AuthzDBDQuery specifies an SQL query to run. The purpose of the query depends on the Require directive in effect.

    • When used with a Require dbd-group directive, it specifies a query to look up groups for the current user. This is the standard functionality of other authorization modules such as mod_authz_groupfile and mod_authz_dbm. The first column value of each row returned by the query statement should be a string containing a group name. Zero, one, or more rows may be returned.
      Require dbd-group
      AuthzDBDQuery "SELECT group FROM groups WHERE user = %s"
    • When used with a Require dbd-login or Require dbd-logout directive, it will never deny access, but will instead execute a SQL statement designed to log the user in or out. The user must already be authenticated with mod_authn_dbd.
      Require dbd-login
      AuthzDBDQuery "UPDATE authn SET login = 'true' WHERE user = %s"

    In all cases, the user's ID will be passed as a single string parameter when the SQL query is executed. It may be referenced within the query statement using a %s format specifier.

    top

    AuthzDBDRedirectQuery Directive

    Description:Specify a query to look up a login page for the user
    Syntax:AuthzDBDRedirectQuery query
    Context:directory
    Status:Extension
    Module:mod_authz_dbd

    Specifies an optional SQL query to use after successful login (or logout) to redirect the user to a URL, which may be specific to the user. The user's ID will be passed as a single string parameter when the SQL query is executed. It may be referenced within the query statement using a %s format specifier.

    AuthzDBDRedirectQuery "SELECT userpage FROM userpages WHERE user = %s"

    The first column value of the first row returned by the query statement should be a string containing a URL to which to redirect the client. Subsequent rows will be ignored. If no rows are returned, the client will not be redirected.

    Note that AuthzDBDLoginToReferer takes precedence if both are set.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/directive-dict.html.es0000644000000000000500000004535313412755316020434 0ustar rootsrc Términos que se Usan para Describir Directivas - Servidor HTTP Apache Versión 2.4
    <-

    Términos que se Usan para Describir Directivas

    Idiomas disponibles:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    Este documento describe los términos que se usan para describir cada directiva de configuración de Apache.

    top

    Descripción

    Una breve descripción del propósito de la directiva.

    top

    Sintaxis

    Indica el formato de la directiva tal y como aparecería en un fichero de configuración. Esta sintaxis es muy específica de cada directiva, y se describe con detalle en la definición de la directiva. Generalmente, el nombre de la directiva va seguido de una serie de uno o más parámetros separados por un espacio. Si un parámetro contiene un espacio, éste debe especificarse entre comillas dobles. Los parámetros opcionales van especificados entre corchetes. Donde un parámetro puede tener uno o más valores, los valores posibles se separan con barras verticales "|". El Texto Literal se muestra con la fuente por defecto, mientras que los distintos tipos de parámetros para los que una sustitución resulta necesaria son enfatizados. Las directivas que pueden tomar una lista variada de parámetros acaban en "..." indicando que el último parámetro se repite.

    Las Directivas usan un gran número de diferentes tipos de parámetros. A continuación definimos algunos de los más comunes.

    URL
    Un Localizador de Recursos Uniforme, incluye un esquema, nombre de host, y un path opcional como en http://www.example.com/path/to/file.html
    Ruta de URL
    La parte de una url que sigue al esquema y el nombre de host como en /path/to/file.html. El url-path representa una vista-web de un recurso, en contraposición a una vista de sistema-de-ficheros.
    Ruta del Fichero
    La ruta a un fichero en el sistema de ficheros local que comienza desde el directorio raíz como en /usr/local/apache/htdocs/path/to/file.html. A menos que se especifique, una ruta de fichero que no comienza con una barra "/" se tratará como una ruta relativa a ServerRoot.
    Ruta del Directorio
    La ruta a un directorio en el sistema de ficheros local que comienza con el directorio ráiz como en /usr/local/apache/htdocs/path/to/.
    Nombre del Fichero
    El nombre de un fichero sin ir acompañado de información de la ruta como en file.html.
    regex
    Una expresión regular compatible con Perl. La definición de directiva especificará contra qué se compara la regex.
    extensión
    En general, esta es la parte del nombre de fichero que sigue al último punto. Sin embargo, Apache reconoce múltiples extensiones de fichero, así que si un nombre de fichero contiene más de un punto, cada parte separada por un punto del nombre de fichero después del primer punto es una extensión. Por ejemplo, el nombre de fichero file.html.en contiene dos extensiones: .html y .en. Para las directivas de Apache, podrá especificar la extensiones con o sin el punto inicial. Además, las extensiones no son sensibles a mayúsculas o minúsculas.
    Tipo MIME
    Un método de describir el formato de un fichero que está formado por un tipo de formato mayor y un tipo de formato menor, separados de de una barra como en text/html.
    Variable de Entorno
    El nombre de una variable de entorno definida en el proceso de configuración de Apache. Tenga en cuenta que esto no es necesariamente lo mismo que la variable de entorno de un sistema operativo. Vea la documentación de variable de entorno para más detalles.
    top

    Por defecto

    Si la directiva tiene un valor por defecto (p.ej., si la omite de la configuración completamente, el servidor Web Apache se comportará como si la hubiera configurado con un valor en particular), se describe aquí. Si no tiene valor por defecto, esta sección debería indicar "Ninguno". Tenga en cuenta que el valor por defecto listado aquí no es necesariamente el mismo que el valor que toma la directiva en el httpd.conf por defecto distribuido con el servidor.

    top

    Contexto

    Esto indica dónde se acepta la directiva en los ficheros de configuración. Es una lista separada por comas para uno o más de los siguientes valores:

    server config
    Esto indica que la directiva puede usarse en los ficheros de configuración del servidor (p.ej., httpd.conf), pero not dentro de cualquier contenedor <VirtualHost> o <Directory>. No se permite en ficheros .htaccess de ninguna manera.
    virtual host
    Este contexto significa que la directiva puede aparecer dentro de un contenedor <VirtualHost> en el fichero de configuración del servidor.
    directory
    Una directiva marcada como válida en este contexto puede usarse dentro de contenedores <Directory>, <Location>, <Files>, <If>, <Proxy> en los ficheros de configuración del servidor, sujeta a las restricciones destacadas en las Secciones de Configuración.
    .htaccess
    Si una directiva es válida en este contexto, significa que puede aparecer dentro de ficheros .htaccess de contexto de directorio. Aunque podría no ser procesada, dependiendo de la configuración activa de AllowOverride en ese momento.

    La directiva solo se permite dentro del contexto designado; si intenta usarlo en algún otro, obtendrá un error de configuración que impedirá que el servidor gestione correctamente las solicitudes en ese contexto, o impedirá que el servidor pueda funcionar completamente -- p.ej., el servidor no arrancará.

    Las ubicaciones válidas para la directiva son actualmente el resultado de un Boolean OR de todos los contextos listados. En otras palabras, una directiva que está marcada como válida en "server config, .htaccess" puede usarse en el fichero httpd.conf y en ficheros .htaccess, pero no dentro de contenedores <Directory> o <VirtualHost>.

    top

    Override

    Este atributo de directiva indica qué Override de configuración debe estar activo para que la directiva se procese cuando aparece en un fichero .htaccess. Si el contexto de la directiva no permite que aparezca en ficheros .htaccess, entonces no se listará ningún contexto.

    Los Override se activan con la directiva AllowOverride, si se aplican a un ámbito en particular (como por ejemplo un directorio) y todos sus descendientes, a menos que se modifique más adelante por otras directivas AllowOverride en niveles inferiores. La documentación para la directiva también muestra una lista de los posibles nombres de Override disponibles.

    top

    Estado

    Esto indica cuan vinculada está esta directiva al servidor Web de Apache; o en otras palabras, puede que necesite recompilar el servidor con un conjunto mejor de módulos para obtener acceso a esta directiva y su funcionalidad. Valores posibles para estar directiva son:

    Core
    Si una directiva aparece listada con estado "Core", eso significa que forma parte de las partes más internas del Servidor Apache Web, y que siempre está disponible.
    MPM
    La directivas facilitadas por un Módulo de Multi-Proceso están etiquetadas con Estado "MPM". Este tipo de directiva estará disponible si y sólo si está usando uno de los MPM listados en la línea Módulo de la definición de la directiva.
    Base
    Una directiva listada con estado "Base" está facilitada por uno de los módulos estándar de Apache que están compilados con el servidor por defecto, y por tanto está normalmente disponible a menos que usted haga las acciones necesarias para eliminar este módulo de su configuración.
    Extensión
    Una directiva con estado "Extensión" está facilitada por uno de los módulos incluidos en el kit del servidor Apache, pero el módulo no está compilado generalmente dentro del servidor. Para activar esta y su funcionalidad, necesirará cambiar la configuración de compilación del servidor y recompilar Apache.
    Experimental
    El estado "Experimental" indica que la directiva está disponible como parte del kit de Apache, pero usted tendrá que ir por su cuenta si intenta usarla. La directiva se documenta para aportar información, pero no tiene por qué estar soportada de manera oficial. El módulo que provee esta directiva puede o puede que no esté compilado por defecto, compruebe la parte superior de la página que describe la direcitiva y el módulo para ver las anotaciones sobre su disponibilidad.
    top

    Módulo

    Esto simplemente hace referencia al nombre del módulo original que provee la directiva.

    top

    Compatibilidad

    Si la directiva no era parte de la distribución original de Apache versión 2, la versión en la que se introdujo debería estar referida aquí. Además, si la direcitva solo está disponible en ciertas plataformas, se verá anotado aquí.

    Idiomas disponibles:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    top

    Comentarios

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mpm_winnt.html.en0000644000000000000500000002555113412755316017536 0ustar rootsrc mpm_winnt - Apache HTTP Server Version 2.4
    <-

    Apache MPM winnt

    Available Languages:  de  |  en  |  fr  |  ja 

    Description:Multi-Processing Module optimized for Windows NT.
    Status:MPM
    Module Identifier:mpm_winnt_module
    Source File:mpm_winnt.c

    Summary

    This Multi-Processing Module (MPM) is the default for the Windows NT operating systems. It uses a single control process which launches a single child process which in turn creates threads to handle requests

    Capacity is configured using the ThreadsPerChild directive, which sets the maximum number of concurrent client connections.

    By default, this MPM uses advanced Windows APIs for accepting new client connections. In some configurations, third-party products may interfere with this implementation, with the following messages written to the web server log:

    Child: Encountered too many AcceptEx faults accepting client connections.
    winnt_mpm: falling back to 'AcceptFilter none'.

    The MPM falls back to a safer implementation, but some client requests were not processed correctly. In order to avoid this error, use AcceptFilter with accept filter none.

    AcceptFilter http none
    AcceptFilter https none

    In Apache httpd 2.0 and 2.2, Win32DisableAcceptEx was used for this purpose.

    The WinNT MPM differs from the Unix MPMs such as worker and event in several areas:

    • When a child process is exiting due to shutdown, restart, or MaxConnectionsPerChild, active requests in the exiting process have TimeOut seconds to finish before processing is aborted. Alternate types of restart and shutdown are not implemented.
    • New child processes read the configuration files instead of inheriting the configuration from the parent. The behavior will be the same as on Unix if the child process is created at startup or restart, but if a child process is created because the prior one crashed or reached MaxConnectionsPerChild, any pending changes to the configuration will become active in the child at that point, and the parent and child will be using a different configuration. If planned configuration changes have been partially implemented and the current configuration cannot be parsed, the replacement child process cannot start up and the server will halt. Because of this behavior, configuration files should not be changed until the time of a server restart.
    • The monitor and fatal_exception hooks are not currently implemented.
    • AcceptFilter is implemented in the MPM and has a different type of control over handling of new connections. (Refer to the AcceptFilter documentation for details.)

    Available Languages:  de  |  en  |  fr  |  ja 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cgid.html.en0000644000000000000500000002705713412755316017276 0ustar rootsrc mod_cgid - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_cgid

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Execution of CGI scripts using an external CGI daemon
    Status:Base
    Module Identifier:cgid_module
    Source File:mod_cgid.c
    Compatibility:Unix threaded MPMs only

    Summary

    Except for the optimizations and the additional ScriptSock directive noted below, mod_cgid behaves similarly to mod_cgi. See the mod_cgi summary for additional details about Apache and CGI.

    On certain unix operating systems, forking a process from a multi-threaded server is a very expensive operation because the new process will replicate all the threads of the parent process. In order to avoid incurring this expense on each CGI invocation, mod_cgid creates an external daemon that is responsible for forking child processes to run CGI scripts. The main server communicates with this daemon using a unix domain socket.

    This module is used by default instead of mod_cgi whenever a multi-threaded MPM is selected during the compilation process. At the user level, this module is identical in configuration and operation to mod_cgi. The only exception is the additional directive ScriptSock which gives the name of the socket to use for communication with the cgi daemon.

    top

    CGIDScriptTimeout Directive

    Description:The length of time to wait for more output from the CGI program
    Syntax:CGIDScriptTimeout time[s|ms]
    Default:value of Timeout directive when unset
    Context:server config, virtual host, directory, .htaccess
    Status:Base
    Module:mod_cgid
    Compatibility:CGIDScriptTimeout defaults to zero in releases 2.4 and earlier

    This directive limits the length of time to wait for more output from the CGI program. If the time is exceeded, the request and CGI are terminated.

    Example

    CGIDScriptTimeout 20
    top

    ScriptSock Directive

    Description:The filename prefix of the socket to use for communication with the cgi daemon
    Syntax:ScriptSock file-path
    Default:ScriptSock cgisock
    Context:server config
    Status:Base
    Module:mod_cgid

    This directive sets the filename prefix of the socket to use for communication with the CGI daemon, an extension corresponding to the process ID of the server will be appended. The socket will be opened using the permissions of the user who starts Apache (usually root). To maintain the security of communications with CGI scripts, it is important that no other user has permission to write in the directory where the socket is located.

    If file-path is not an absolute path, the location specified will be relative to the value of DefaultRuntimeDir.

    Example

    ScriptSock /var/run/cgid.sock

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_socache_memcache.html.en0000644000000000000500000002124213412755316021605 0ustar rootsrc mod_socache_memcache - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_socache_memcache

    Available Languages:  en  |  fr 

    Description:Memcache based shared object cache provider.
    Status:Extension
    Module Identifier:socache_memcache_module
    Source File:mod_socache_memcache.c

    Summary

    mod_socache_memcache is a shared object cache provider which provides for creation and access to a cache backed by the memcached high-performance, distributed memory object caching system.

    This shared object cache provider's "create" method requires a comma separated list of memcached host/port specifications. If using this provider via another modules configuration (such as SSLSessionCache), provide the list of servers as the optional "arg" parameter.

    SSLSessionCache memcache:memcache.example.com:12345,memcache2.example.com:12345

    Details of other shared object cache providers can be found here.

    top

    MemcacheConnTTL Directive

    Description:Keepalive time for idle connections
    Syntax:MemcacheConnTTL num[units]
    Default:MemcacheConnTTL 15s
    Context:server config, virtual host
    Status:Extension
    Module:mod_socache_memcache
    Compatibility:Available in Apache 2.4.17 and later

    Set the time to keep idle connections with the memcache server(s) alive (threaded platforms only).

    Valid values for MemcacheConnTTL are times up to one hour. 0 means no timeout.

    This timeout defaults to units of seconds, but accepts suffixes for milliseconds (ms), seconds (s), minutes (min), and hours (h).

    Before Apache 2.4.17, this timeout was hardcoded and its value was 600 usec. So, the closest configuration to match the legacy behaviour is to set MemcacheConnTTL to 1ms.

    # Set a timeout of 10 minutes
    MemcacheConnTTL 10min
    # Set a timeout of 60 seconds
    MemcacheConnTTL 60

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_mime_magic.html0000644000000000000500000000034013362070302020025 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_mime_magic.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_mime_magic.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mpm_netware.html.fr.utf80000644000000000000500000002512113412755316020727 0ustar rootsrc mpm_netware - Serveur HTTP Apache Version 2.4
    <-

    Apache MPM netware

    Langues Disponibles:  en  |  fr 

    Description:Module multi-processus implémentant un serveur web basé exclusivement sur les threads et optimisé pour Novell NetWare
    Statut:MPM
    Identificateur de Module:mpm_netware_module
    Fichier Source:mpm_netware.c

    Sommaire

    Ce module multi-processus (MPM) implémente un serveur web basé exclusivement sur les threads et optimisé pour Novell NetWare.

    Le thread maître est chargé du lancement de threads esclaves qui attendent les connexions et les traitent au fur et à mesure de leur arrivée. Le serveur HTTP Apache essaie toujours de maintenir plusieurs threads esclaves en spare (en réserve) ou inactifs. De cette façon, les clients n'ont pas besoin d'attendre le lancement d'un nouveau thread enfant pour que leurs requêtes soient traitées.

    Les directives StartThreads, MinSpareThreads, MaxSpareThreads, et MaxThreads contrôlent la manière dont le thread maître crée les threads esclaves afin de traiter les requêtes. En général, Apache httpd s'auto-régule correctement, et la plupart des sites ne nécessitent aucune modification des valeurs par défaut de ces directives. Pour les sites dont le serveur est limité en mémoire, il peut s'avérer nécessaire de diminuer la valeur de la directive MaxThreads afin d'éviter une hyper-activité du serveur (arrêts de threads inactifs et lancement incessant de nouveau threads). Vous trouverez plus d'informations à propos du contrôle de la création de processus dans le document conseils en matière de performances.

    La directive MaxRequestsPerChild contrôle la fréquence à laquelle le serveur recycle ses processus en arrêtant les anciens et en en lançant de nouveaux. Sous le système d'exploitation NetWare, il est vivement recommandé de laisser cette directive à 0, ce qui permet aux threads esclaves de continuer à traiter les requêtes indéfiniment.

    top

    Directive MaxThreads

    Description:Définit le nombre maximum de threads esclaves
    Syntaxe:MaxThreads nombre
    Défaut:MaxThreads 2048
    Contexte:configuration globale
    Statut:MPM
    Module:mpm_netware

    La directive MaxThreads définit le nombre maximum de threads esclaves que l'on désire autoriser. La valeur par défaut correspondant à la valeur codée en dur à la compilation, la valeur de cette directive ne peut donc qu'être diminuée, comme dans l'exemple suivant :

    MaxThreads 512

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_xml2enc.html.fr.utf80000644000000000000500000004144013423336600020613 0ustar rootsrc mod_xml2enc - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_xml2enc

    Langues Disponibles:  en  |  fr 

    Description:Support avancé de l'internationalisation et des jeux de caractères pour les modules de filtrage basés sur libxml2
    Statut:Base
    Identificateur de Module:xml2enc_module
    Fichier Source:mod_xml2enc.c
    Compatibilité:Disponible depuis la version 2.4 du serveur HTTP Apache. Disponible en tant que module tiers dans les versions 2.2.x

    Sommaire

    Ce module fournit un support avancé de l'internationalisation pour les modules de filtrage supportant les balises (markup-aware) comme mod_proxy_html. Il est capable de détecter automatiquement l'encodage des données en entrée et de s'assurer qu'elle sont traitées correctement par l'interpréteur libxml2, y compris la conversion en Unicode (UTF-8) si nécessaire. Il peut aussi convertir les données dans l'encodage de votre choix après le traitement des balises, et s'assurera que le jeu de caractères approprié sera défini dans l'en-tête HTTP Content-Type.

    top

    Utilisation

    Il existe deux scénarios d'utilisation : le cas des modules programmés pour travailler avec mod_xml2enc ; et les autres :

    Modules de filtrages programmés pour mod_xml2enc

    Les modules comme mod_proxy_html versions 3.1 et supérieures utilisent la fonction optionnelle xml2enc_charset pour déterminer la valeur de l'argument "jeu de caractères" à transmettre à l'interpréteur libxml2, et disposent de la fonction optionnelle xml2enc_filter pour effectuer un encodage ultérieur éventuel. L'utilisation de mod_xml2enc avec un module préprogrammé à cet effet ne nécessite aucune configuration : ce dernier configurera mod_xml2enc pour vous (sachant que vous pouvez tout de même le personnaliser via les directives de configuration ci-dessous).

    Modules de filtrages non programmés pour mod_xml2enc

    Pour utiliser mod_xml2enc avec un module basé sur libxml2 qui n'a pas été explicitement programmé pour mod_xml2enc, vous devrez configurer la chaîne de filtrage vous-même. Ainsi, pour utiliser mod_xml2enc avec un filtre foo fourni par un module mod_foo et pour améliorer le support i18n de ce dernier avec HTML et XML, vous pouvez utiliser les directives suivantes :

    
        FilterProvider iconv    xml2enc Content-Type $text/html
        FilterProvider iconv    xml2enc Content-Type $xml
        FilterProvider markup   foo Content-Type $text/html
        FilterProvider markup   foo Content-Type $xml
        FilterChain     iconv markup
        

    mod_foo supportera alors tout jeu de caractère supporté soit par libxml2, soit par apr_xlate/iconv, soit par les deux.

    top

    API de programmation

    Les programmeurs de modules de filtrage basés sur libxml2 sont encouragés à les préprogrammer pour mod_xml2enc, afin de fournir un support i18n solide aux utilisateurs sans avoir à réinventer la roue. L'API de programmation est décrite dans mod_xml2enc.h, et mod_proxy_html est un exemple de son utilisation.

    top

    Détection et encodage

    A la différence de mod_charset_lite, mod_xml2enc est conçu pour travailler avec des données dont l'encodage ne peut pas être connu, et donc configuré, à l'avance. Il utilise donc les techniques de 'reniflage' suivantes pour détecter le type d'encodage des données HTTP :

    1. Si l'en-tête HTTP Content-Type contient un paramètre charset, c'est ce dernier qui sera utilisé.
    2. Si les données commancent par une balise XML concernant l'ordre des octets (BOM) ou par une déclaration d'encodage XML, c'est celle-ci qui sera utilisée.
    3. Si un type d'encodage est déclaré dans un élément HTML <META>, c'est ce dernier qui sera utilisé.
    4. Si aucun des éléments précédents n'est trouvé, c'est la valeur par défaut définie par la directive xml2EncDefault qui sera utilisée.

    Les conditions sont testées dans cet ordre . Dès qu'une règle s'applique, elle est utilisée et la détection est terminée.

    top

    Codage en sortie

    libxml2 utilise toujours UTF-8 (Unicode) en interne, et les modules de filtrage basés sur libxml2 utiliseront cet encodage en sortie par défaut. mod_xml2enc peut modifier l'encodage en sortie via l'API, mais il n'y a actuellement aucun moyen de le configurer directement.

    La modification de l'encodage en sortie ne devrait (du moins en théorie) jamais être nécessaire, et est même déconseillée à cause de la charge de traitement supplémentaire imposée au serveur par une conversion non nécessaire.

    top

    Codages non supportés

    Si vous travaillez avec des encodages non supportés par aucune des méthodes de conversion disponibles sur votre plateforme, vous pouvez tout de même leur associer un alias vers un code supporté via la directive xml2EncAlias.

    top

    Directive xml2EncAlias

    Description:Définit des alias pour les valeurs d'encodage
    Syntaxe:xml2EncAlias jeu-de-caractères alias [alias ...]
    Contexte:configuration globale
    Statut:Base
    Module:mod_xml2enc

    Cette directive de niveau serveur permet de définir un ou plusieurs alias pour un encodage. Elle permet au support d'encodage de libxml2 de traiter en interne des encodages non reconnus par libxml2 en utilisant la table de conversion pour un encodage reconnu. Elle permet d'atteindre deux objectifs : supporter des jeux (ou noms) de caractères non reconnus par libxml2 ou iconv, et éviter une conversion pour un encodage lorsque cela n'est pas nécessaire.

    top

    Directive xml2EncDefault

    Description:Définit un encodage par défaut à utiliser lorsqu'aucune information ne peut être automatiquement détectée
    Syntaxe:xml2EncDefault nom
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Base
    Module:mod_xml2enc

    Si vous traitez des données dont l'encodage est connu, mais ne contenant aucune information à propos de ce dernier, vous pouvez définir une valeur par défaut afin d'aider mod_xml2enc à traiter correctement les données. Par exemple, pour définir la valeur par défaut Latin1 (iso-8859-1) specifiée dans HTTP/1.0, utilisez :

    xml2EncDefault iso-8859-1
    top

    Directive xml2StartParse

    Description:Indique à l'interpréteur à partir de quelle balise il doit commencer son traitement.
    Syntaxe:xml2StartParse élément [élément ...]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Base
    Module:mod_xml2enc

    Cette directive permet de spécifier à partir de quelle balise, parmi les éléments spécifiés, l'interpréteur de balise doit commencer son traitement. Ccei permet de contourner le problème des serveurs d'arrière-plan qui insèrent des éléments non conformes en début de données, ce qui a pour effet de perturber l'interpréteur (voir un exemple ici).

    Elle ne doit être utilisée ni pour les documents XML, ni pour les documents HTML correctement formatés.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_owner.html0000644000000000000500000000064313362070302020311 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authz_owner.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authz_owner.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_authz_owner.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_authz_owner.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_authn_anon.html.en0000644000000000000500000004100413412755316020506 0ustar rootsrc mod_authn_anon - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authn_anon

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Allows "anonymous" user access to authenticated areas
    Status:Extension
    Module Identifier:authn_anon_module
    Source File:mod_authn_anon.c
    Compatibility:Available in Apache 2.1 and later

    Summary

    This module provides authentication front-ends such as mod_auth_basic to authenticate users similar to anonymous-ftp sites, i.e. have a 'magic' user id 'anonymous' and the email address as a password. These email addresses can be logged.

    Combined with other (database) access control methods, this allows for effective user tracking and customization according to a user profile while still keeping the site open for 'unregistered' users. One advantage of using Auth-based user tracking is that, unlike magic-cookies and funny URL pre/postfixes, it is completely browser independent and it allows users to share URLs.

    When using mod_auth_basic, this module is invoked via the AuthBasicProvider directive with the anon value.

    top

    Example

    The example below is combined with "normal" htpasswd-file based authentication and allows users in additionally as 'guests' with the following properties:

    • It insists that the user enters a userID. (Anonymous_NoUserID)
    • It insists that the user enters a password. (Anonymous_MustGiveEmail)
    • The password entered must be a valid email address, i.e. contain at least one '@' and a '.'. (Anonymous_VerifyEmail)
    • The userID must be one of anonymous guest www test welcome and comparison is not case sensitive. (Anonymous)
    • And the Email addresses entered in the passwd field are logged to the error log file. (Anonymous_LogEmail)

    Example

    <Directory "/var/www/html/private">
        AuthName "Use 'anonymous' & Email address for guest entry"
        AuthType Basic
        AuthBasicProvider file anon
        AuthUserFile "/path/to/your/.htpasswd"
        
        Anonymous_NoUserID off
        Anonymous_MustGiveEmail on
        Anonymous_VerifyEmail on
        Anonymous_LogEmail on
        Anonymous anonymous guest www test welcome
        
        Require valid-user
    </Directory>
    top

    Anonymous Directive

    Description:Specifies userIDs that are allowed access without password verification
    Syntax:Anonymous user [user] ...
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authn_anon

    A list of one or more 'magic' userIDs which are allowed access without password verification. The userIDs are space separated. It is possible to use the ' and " quotes to allow a space in a userID as well as the \ escape character.

    Please note that the comparison is case-IN-sensitive.
    It's strongly recommended that the magic username 'anonymous' is always one of the allowed userIDs.

    Example:

    Anonymous anonymous "Not Registered" "I don't know"

    This would allow the user to enter without password verification by using the userIDs "anonymous", "AnonyMous", "Not Registered" and "I Don't Know".

    As of Apache 2.1 it is possible to specify the userID as "*". That allows any supplied userID to be accepted.

    top

    Anonymous_LogEmail Directive

    Description:Sets whether the password entered will be logged in the error log
    Syntax:Anonymous_LogEmail On|Off
    Default:Anonymous_LogEmail On
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authn_anon

    When set On, the default, the 'password' entered (which hopefully contains a sensible email address) is logged in the error log.

    top

    Anonymous_MustGiveEmail Directive

    Description:Specifies whether blank passwords are allowed
    Syntax:Anonymous_MustGiveEmail On|Off
    Default:Anonymous_MustGiveEmail On
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authn_anon

    Specifies whether the user must specify an email address as the password. This prohibits blank passwords.

    top

    Anonymous_NoUserID Directive

    Description:Sets whether the userID field may be empty
    Syntax:Anonymous_NoUserID On|Off
    Default:Anonymous_NoUserID Off
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authn_anon

    When set On, users can leave the userID (and perhaps the password field) empty. This can be very convenient for MS-Explorer users who can just hit return or click directly on the OK button; which seems a natural reaction.

    top

    Anonymous_VerifyEmail Directive

    Description:Sets whether to check the password field for a correctly formatted email address
    Syntax:Anonymous_VerifyEmail On|Off
    Default:Anonymous_VerifyEmail Off
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authn_anon

    When set On the 'password' entered is checked for at least one '@' and a '.' to encourage users to enter valid email addresses (see the above Anonymous_LogEmail).

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_ldap.html.en0000644000000000000500000014734113412755316017307 0ustar rootsrc mod_ldap - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_ldap

    Available Languages:  en  |  fr 

    Description:LDAP connection pooling and result caching services for use by other LDAP modules
    Status:Extension
    Module Identifier:ldap_module
    Source File:util_ldap.c

    Summary

    This module was created to improve the performance of websites relying on backend connections to LDAP servers. In addition to the functions provided by the standard LDAP libraries, this module adds an LDAP connection pool and an LDAP shared memory cache.

    To enable this module, LDAP support must be compiled into apr-util. This is achieved by adding the --with-ldap flag to the configure script when building Apache.

    SSL/TLS support is dependent on which LDAP toolkit has been linked to APR. As of this writing, APR-util supports: OpenLDAP SDK (2.x or later), Novell LDAP SDK, Mozilla LDAP SDK, native Solaris LDAP SDK (Mozilla based) or the native Microsoft LDAP SDK. See the APR website for details.

    top

    Example Configuration

    The following is an example configuration that uses mod_ldap to increase the performance of HTTP Basic authentication provided by mod_authnz_ldap.

    # Enable the LDAP connection pool and shared
    # memory cache. Enable the LDAP cache status
    # handler. Requires that mod_ldap and mod_authnz_ldap
    # be loaded. Change the "yourdomain.example.com" to
    # match your domain.
    
    LDAPSharedCacheSize 500000
    LDAPCacheEntries 1024
    LDAPCacheTTL 600
    LDAPOpCacheEntries 1024
    LDAPOpCacheTTL 600
    
    <Location "/ldap-status">
        SetHandler ldap-status
    
        Require host yourdomain.example.com
    
        Satisfy any
        AuthType Basic
        AuthName "LDAP Protected"
        AuthBasicProvider ldap
        AuthLDAPURL "ldap://127.0.0.1/dc=example,dc=com?uid?one"
        Require valid-user
    </Location>
    top

    LDAP Connection Pool

    LDAP connections are pooled from request to request. This allows the LDAP server to remain connected and bound ready for the next request, without the need to unbind/connect/rebind. The performance advantages are similar to the effect of HTTP keepalives.

    On a busy server it is possible that many requests will try and access the same LDAP server connection simultaneously. Where an LDAP connection is in use, Apache will create a new connection alongside the original one. This ensures that the connection pool does not become a bottleneck.

    There is no need to manually enable connection pooling in the Apache configuration. Any module using this module for access to LDAP services will share the connection pool.

    LDAP connections can keep track of the ldap client credentials used when binding to an LDAP server. These credentials can be provided to LDAP servers that do not allow anonymous binds during referral chasing. To control this feature, see the LDAPReferrals and LDAPReferralHopLimit directives. By default, this feature is enabled.

    top

    LDAP Cache

    For improved performance, mod_ldap uses an aggressive caching strategy to minimize the number of times that the LDAP server must be contacted. Caching can easily double or triple the throughput of Apache when it is serving pages protected with mod_authnz_ldap. In addition, the load on the LDAP server will be significantly decreased.

    mod_ldap supports two types of LDAP caching during the search/bind phase with a search/bind cache and during the compare phase with two operation caches. Each LDAP URL that is used by the server has its own set of these three caches.

    The Search/Bind Cache

    The process of doing a search and then a bind is the most time-consuming aspect of LDAP operation, especially if the directory is large. The search/bind cache is used to cache all searches that resulted in successful binds. Negative results (i.e., unsuccessful searches, or searches that did not result in a successful bind) are not cached. The rationale behind this decision is that connections with invalid credentials are only a tiny percentage of the total number of connections, so by not caching invalid credentials, the size of the cache is reduced.

    mod_ldap stores the username, the DN retrieved, the password used to bind, and the time of the bind in the cache. Whenever a new connection is initiated with the same username, mod_ldap compares the password of the new connection with the password in the cache. If the passwords match, and if the cached entry is not too old, mod_ldap bypasses the search/bind phase.

    The search and bind cache is controlled with the LDAPCacheEntries and LDAPCacheTTL directives.

    Operation Caches

    During attribute and distinguished name comparison functions, mod_ldap uses two operation caches to cache the compare operations. The first compare cache is used to cache the results of compares done to test for LDAP group membership. The second compare cache is used to cache the results of comparisons done between distinguished names.

    Note that, when group membership is being checked, any sub-group comparison results are cached to speed future sub-group comparisons.

    The behavior of both of these caches is controlled with the LDAPOpCacheEntries and LDAPOpCacheTTL directives.

    Monitoring the Cache

    mod_ldap has a content handler that allows administrators to monitor the cache performance. The name of the content handler is ldap-status, so the following directives could be used to access the mod_ldap cache information:

    <Location "/server/cache-info">
        SetHandler ldap-status
    </Location>

    By fetching the URL http://servername/cache-info, the administrator can get a status report of every cache that is used by mod_ldap cache. Note that if Apache does not support shared memory, then each httpd instance has its own cache, so reloading the URL will result in different information each time, depending on which httpd instance processes the request.

    top

    Using SSL/TLS

    The ability to create an SSL and TLS connections to an LDAP server is defined by the directives LDAPTrustedGlobalCert, LDAPTrustedClientCert and LDAPTrustedMode. These directives specify the CA and optional client certificates to be used, as well as the type of encryption to be used on the connection (none, SSL or TLS/STARTTLS).

    # Establish an SSL LDAP connection on port 636. Requires that
    # mod_ldap and mod_authnz_ldap be loaded. Change the
    # "yourdomain.example.com" to match your domain.
    
    LDAPTrustedGlobalCert CA_DER "/certs/certfile.der"
    
    <Location "/ldap-status">
        SetHandler ldap-status
    
        Require host yourdomain.example.com
    
        Satisfy any
        AuthType Basic
        AuthName "LDAP Protected"
        AuthBasicProvider ldap
        AuthLDAPURL "ldaps://127.0.0.1/dc=example,dc=com?uid?one"
        Require valid-user
    </Location>
    # Establish a TLS LDAP connection on port 389. Requires that
    # mod_ldap and mod_authnz_ldap be loaded. Change the
    # "yourdomain.example.com" to match your domain.
    
    LDAPTrustedGlobalCert CA_DER "/certs/certfile.der"
    
    <Location "/ldap-status">
        SetHandler ldap-status
    
        Require host yourdomain.example.com
    
        Satisfy any
        AuthType Basic
        AuthName "LDAP Protected"
        AuthBasicProvider ldap
        AuthLDAPURL "ldap://127.0.0.1/dc=example,dc=com?uid?one" TLS
        Require valid-user
    </Location>
    top

    SSL/TLS Certificates

    The different LDAP SDKs have widely different methods of setting and handling both CA and client side certificates.

    If you intend to use SSL or TLS, read this section CAREFULLY so as to understand the differences between configurations on the different LDAP toolkits supported.

    Netscape/Mozilla/iPlanet SDK

    CA certificates are specified within a file called cert7.db. The SDK will not talk to any LDAP server whose certificate was not signed by a CA specified in this file. If client certificates are required, an optional key3.db file may be specified with an optional password. The secmod file can be specified if required. These files are in the same format as used by the Netscape Communicator or Mozilla web browsers. The easiest way to obtain these files is to grab them from your browser installation.

    Client certificates are specified per connection using the LDAPTrustedClientCert directive by referring to the certificate "nickname". An optional password may be specified to unlock the certificate's private key.

    The SDK supports SSL only. An attempt to use STARTTLS will cause an error when an attempt is made to contact the LDAP server at runtime.

    # Specify a Netscape CA certificate file
    LDAPTrustedGlobalCert CA_CERT7_DB "/certs/cert7.db"
    # Specify an optional key3.db file for client certificate support
    LDAPTrustedGlobalCert CERT_KEY3_DB "/certs/key3.db"
    # Specify the secmod file if required
    LDAPTrustedGlobalCert CA_SECMOD "/certs/secmod"
    <Location "/ldap-status">
        SetHandler ldap-status
    
        Require host yourdomain.example.com
    
        Satisfy any
        AuthType Basic
        AuthName "LDAP Protected"
        AuthBasicProvider ldap
        LDAPTrustedClientCert CERT_NICKNAME <nickname> [password]
        AuthLDAPURL "ldaps://127.0.0.1/dc=example,dc=com?uid?one"
        Require valid-user
    </Location>

    Novell SDK

    One or more CA certificates must be specified for the Novell SDK to work correctly. These certificates can be specified as binary DER or Base64 (PEM) encoded files.

    Note: Client certificates are specified globally rather than per connection, and so must be specified with the LDAPTrustedGlobalCert directive as below. Trying to set client certificates via the LDAPTrustedClientCert directive will cause an error to be logged when an attempt is made to connect to the LDAP server..

    The SDK supports both SSL and STARTTLS, set using the LDAPTrustedMode parameter. If an ldaps:// URL is specified, SSL mode is forced, override this directive.

    # Specify two CA certificate files
    LDAPTrustedGlobalCert CA_DER "/certs/cacert1.der"
    LDAPTrustedGlobalCert CA_BASE64 "/certs/cacert2.pem"
    # Specify a client certificate file and key
    LDAPTrustedGlobalCert CERT_BASE64 "/certs/cert1.pem"
    LDAPTrustedGlobalCert KEY_BASE64 "/certs/key1.pem" [password]
    # Do not use this directive, as it will throw an error
    #LDAPTrustedClientCert CERT_BASE64 "/certs/cert1.pem"

    OpenLDAP SDK

    One or more CA certificates must be specified for the OpenLDAP SDK to work correctly. These certificates can be specified as binary DER or Base64 (PEM) encoded files.

    Both CA and client certificates may be specified globally (LDAPTrustedGlobalCert) or per-connection (LDAPTrustedClientCert). When any settings are specified per-connection, the global settings are superseded.

    The documentation for the SDK claims to support both SSL and STARTTLS, however STARTTLS does not seem to work on all versions of the SDK. The SSL/TLS mode can be set using the LDAPTrustedMode parameter. If an ldaps:// URL is specified, SSL mode is forced. The OpenLDAP documentation notes that SSL (ldaps://) support has been deprecated to be replaced with TLS, although the SSL functionality still works.

    # Specify two CA certificate files
    LDAPTrustedGlobalCert CA_DER "/certs/cacert1.der"
    LDAPTrustedGlobalCert CA_BASE64 "/certs/cacert2.pem"
    <Location "/ldap-status">
        SetHandler ldap-status
    
        Require host yourdomain.example.com
    
        LDAPTrustedClientCert CERT_BASE64 "/certs/cert1.pem"
        LDAPTrustedClientCert KEY_BASE64 "/certs/key1.pem"
        # CA certs respecified due to per-directory client certs
        LDAPTrustedClientCert CA_DER "/certs/cacert1.der"
        LDAPTrustedClientCert CA_BASE64 "/certs/cacert2.pem"
        Satisfy any
        AuthType Basic
        AuthName "LDAP Protected"
        AuthBasicProvider ldap
        AuthLDAPURL "ldaps://127.0.0.1/dc=example,dc=com?uid?one"
        Require valid-user
    </Location>

    Solaris SDK

    SSL/TLS for the native Solaris LDAP libraries is not yet supported. If required, install and use the OpenLDAP libraries instead.

    Microsoft SDK

    SSL/TLS certificate configuration for the native Microsoft LDAP libraries is done inside the system registry, and no configuration directives are required.

    Both SSL and TLS are supported by using the ldaps:// URL format, or by using the LDAPTrustedMode directive accordingly.

    Note: The status of support for client certificates is not yet known for this toolkit.

    top

    LDAPCacheEntries Directive

    Description:Maximum number of entries in the primary LDAP cache
    Syntax:LDAPCacheEntries number
    Default:LDAPCacheEntries 1024
    Context:server config
    Status:Extension
    Module:mod_ldap

    Specifies the maximum size of the primary LDAP cache. This cache contains successful search/binds. Set it to 0 to turn off search/bind caching. The default size is 1024 cached searches.

    top

    LDAPCacheTTL Directive

    Description:Time that cached items remain valid
    Syntax:LDAPCacheTTL seconds
    Default:LDAPCacheTTL 600
    Context:server config
    Status:Extension
    Module:mod_ldap

    Specifies the time (in seconds) that an item in the search/bind cache remains valid. The default is 600 seconds (10 minutes).

    top

    LDAPConnectionPoolTTL Directive

    Description:Discard backend connections that have been sitting in the connection pool too long
    Syntax:LDAPConnectionPoolTTL n
    Default:LDAPConnectionPoolTTL -1
    Context:server config, virtual host
    Status:Extension
    Module:mod_ldap
    Compatibility:Apache HTTP Server 2.3.12 and later

    Specifies the maximum age, in seconds, that a pooled LDAP connection can remain idle and still be available for use. Connections are cleaned up when they are next needed, not asynchronously.

    A setting of 0 causes connections to never be saved in the backend connection pool. The default value of -1, and any other negative value, allows connections of any age to be reused.

    For performance reasons, the reference time used by this directive is based on when the LDAP connection is returned to the pool, not the time of the last successful I/O with the LDAP server.

    Since 2.4.10, new measures are in place to avoid the reference time from being inflated by cache hits or slow requests. First, the reference time is not updated if no backend LDAP conncetions were needed. Second, the reference time uses the time the HTTP request was received instead of the time the request is completed.

    This timeout defaults to units of seconds, but accepts suffixes for milliseconds (ms), minutes (min), and hours (h).

    top

    LDAPConnectionTimeout Directive

    Description:Specifies the socket connection timeout in seconds
    Syntax:LDAPConnectionTimeout seconds
    Context:server config
    Status:Extension
    Module:mod_ldap

    This directive configures the LDAP_OPT_NETWORK_TIMEOUT (or LDAP_OPT_CONNECT_TIMEOUT) option in the underlying LDAP client library, when available. This value typically controls how long the LDAP client library will wait for the TCP connection to the LDAP server to complete.

    If a connection is not successful with the timeout period, either an error will be returned or the LDAP client library will attempt to connect to a secondary LDAP server if one is specified (via a space-separated list of hostnames in the AuthLDAPURL).

    The default is 10 seconds, if the LDAP client library linked with the server supports the LDAP_OPT_NETWORK_TIMEOUT option.

    LDAPConnectionTimeout is only available when the LDAP client library linked with the server supports the LDAP_OPT_NETWORK_TIMEOUT (or LDAP_OPT_CONNECT_TIMEOUT) option, and the ultimate behavior is dictated entirely by the LDAP client library.
    top

    LDAPLibraryDebug Directive

    Description:Enable debugging in the LDAP SDK
    Syntax:LDAPLibraryDebug 7
    Default:disabled
    Context:server config
    Status:Extension
    Module:mod_ldap

    Turns on SDK-specific LDAP debug options that generally cause the LDAP SDK to log verbose trace information to the main Apache error log. The trace messages from the LDAP SDK provide gory details that can be useful during debugging of connectivity problems with backend LDAP servers

    This option is only configurable when Apache HTTP Server is linked with an LDAP SDK that implements LDAP_OPT_DEBUG or LDAP_OPT_DEBUG_LEVEL, such as OpenLDAP (a value of 7 is verbose) or Tivoli Directory Server (a value of 65535 is verbose).

    The logged information will likely contain plaintext credentials being used or validated by LDAP authentication, so care should be taken in protecting and purging the error log when this directive is used.

    top

    LDAPOpCacheEntries Directive

    Description:Number of entries used to cache LDAP compare operations
    Syntax:LDAPOpCacheEntries number
    Default:LDAPOpCacheEntries 1024
    Context:server config
    Status:Extension
    Module:mod_ldap

    This specifies the number of entries mod_ldap will use to cache LDAP compare operations. The default is 1024 entries. Setting it to 0 disables operation caching.

    top

    LDAPOpCacheTTL Directive

    Description:Time that entries in the operation cache remain valid
    Syntax:LDAPOpCacheTTL seconds
    Default:LDAPOpCacheTTL 600
    Context:server config
    Status:Extension
    Module:mod_ldap

    Specifies the time (in seconds) that entries in the operation cache remain valid. The default is 600 seconds.

    top

    LDAPReferralHopLimit Directive

    Description:The maximum number of referral hops to chase before terminating an LDAP query.
    Syntax:LDAPReferralHopLimit number
    Default:SDK dependent, typically between 5 and 10
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_ldap

    This directive, if enabled by the LDAPReferrals directive, limits the number of referral hops that are followed before terminating an LDAP query.

    Support for this tunable is uncommon in LDAP SDKs.

    top

    LDAPReferrals Directive

    Description:Enable referral chasing during queries to the LDAP server.
    Syntax:LDAPReferrals On|Off|default
    Default:LDAPReferrals On
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_ldap
    Compatibility:The default parameter is available in Apache 2.4.7 and later

    Some LDAP servers divide their directory among multiple domains and use referrals to direct a client when a domain boundary is crossed. This is similar to a HTTP redirect. LDAP client libraries may or may not chase referrals by default. This directive explicitly configures the referral chasing in the underlying SDK.

    LDAPReferrals takes the following values:

    "on"

    When set to "on", the underlying SDK's referral chasing state is enabled, LDAPReferralHopLimit is used to override the SDK's hop limit, and an LDAP rebind callback is registered.

    "off"

    When set to "off", the underlying SDK's referral chasing state is disabled completely.

    "default"

    When set to "default", the underlying SDK's referral chasing state is not changed, LDAPReferralHopLimit is not used to overide the SDK's hop limit, and no LDAP rebind callback is registered.

    The directive LDAPReferralHopLimit works in conjunction with this directive to limit the number of referral hops to follow before terminating the LDAP query. When referral processing is enabled by a value of "On", client credentials will be provided, via a rebind callback, for any LDAP server requiring them.

    top

    LDAPRetries Directive

    Description:Configures the number of LDAP server retries.
    Syntax:LDAPRetries number-of-retries
    Default:LDAPRetries 3
    Context:server config
    Status:Extension
    Module:mod_ldap

    The server will retry failed LDAP requests up to LDAPRetries times. Setting this directive to 0 disables retries.

    LDAP errors such as timeouts and refused connections are retryable.

    top

    LDAPRetryDelay Directive

    Description:Configures the delay between LDAP server retries.
    Syntax:LDAPRetryDelay seconds
    Default:LDAPRetryDelay 0
    Context:server config
    Status:Extension
    Module:mod_ldap

    If LDAPRetryDelay is set to a non-zero value, the server will delay retrying an LDAP request for the specified amount of time. Setting this directive to 0 will result in any retry to occur without delay.

    LDAP errors such as timeouts and refused connections are retryable.

    top

    LDAPSharedCacheFile Directive

    Description:Sets the shared memory cache file
    Syntax:LDAPSharedCacheFile directory-path/filename
    Context:server config
    Status:Extension
    Module:mod_ldap

    Specifies the directory path and file name of the shared memory cache file. If not set, anonymous shared memory will be used if the platform supports it.

    top

    LDAPSharedCacheSize Directive

    Description:Size in bytes of the shared-memory cache
    Syntax:LDAPSharedCacheSize bytes
    Default:LDAPSharedCacheSize 500000
    Context:server config
    Status:Extension
    Module:mod_ldap

    Specifies the number of bytes to allocate for the shared memory cache. The default is 500kb. If set to 0, shared memory caching will not be used and every HTTPD process will create its own cache.

    top

    LDAPTimeout Directive

    Description:Specifies the timeout for LDAP search and bind operations, in seconds
    Syntax:LDAPTimeout seconds
    Default:LDAPTimeout 60
    Context:server config
    Status:Extension
    Module:mod_ldap
    Compatibility:Apache HTTP Server 2.3.5 and later

    This directive configures the timeout for bind and search operations, as well as the LDAP_OPT_TIMEOUT option in the underlying LDAP client library, when available.

    If the timeout expires, httpd will retry in case an existing connection has been silently dropped by a firewall. However, performance will be much better if the firewall is configured to send TCP RST packets instead of silently dropping packets.

    Timeouts for ldap compare operations requires an SDK with LDAP_OPT_TIMEOUT, such as OpenLDAP >= 2.4.4.

    top

    LDAPTrustedClientCert Directive

    Description:Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    Syntax:LDAPTrustedClientCert type directory-path/filename/nickname [password]
    Context:directory, .htaccess
    Status:Extension
    Module:mod_ldap

    It specifies the directory path, file name or nickname of a per connection client certificate used when establishing an SSL or TLS connection to an LDAP server. Different locations or directories may have their own independent client certificate settings. Some LDAP toolkits (notably Novell) do not support per connection client certificates, and will throw an error on LDAP server connection if you try to use this directive (Use the LDAPTrustedGlobalCert directive instead for Novell client certificates - See the SSL/TLS certificate guide above for details). The type specifies the kind of certificate parameter being set, depending on the LDAP toolkit being used. Supported types are:

    • CA_DER - binary DER encoded CA certificate
    • CA_BASE64 - PEM encoded CA certificate
    • CERT_DER - binary DER encoded client certificate
    • CERT_BASE64 - PEM encoded client certificate
    • CERT_NICKNAME - Client certificate "nickname" (Netscape SDK)
    • KEY_DER - binary DER encoded private key
    • KEY_BASE64 - PEM encoded private key
    top

    LDAPTrustedGlobalCert Directive

    Description:Sets the file or database containing global trusted Certificate Authority or global client certificates
    Syntax:LDAPTrustedGlobalCert type directory-path/filename [password]
    Context:server config
    Status:Extension
    Module:mod_ldap

    It specifies the directory path and file name of the trusted CA certificates and/or system wide client certificates mod_ldap should use when establishing an SSL or TLS connection to an LDAP server. Note that all certificate information specified using this directive is applied globally to the entire server installation. Some LDAP toolkits (notably Novell) require all client certificates to be set globally using this directive. Most other toolkits require clients certificates to be set per Directory or per Location using LDAPTrustedClientCert. If you get this wrong, an error may be logged when an attempt is made to contact the LDAP server, or the connection may silently fail (See the SSL/TLS certificate guide above for details). The type specifies the kind of certificate parameter being set, depending on the LDAP toolkit being used. Supported types are:

    • CA_DER - binary DER encoded CA certificate
    • CA_BASE64 - PEM encoded CA certificate
    • CA_CERT7_DB - Netscape cert7.db CA certificate database file
    • CA_SECMOD - Netscape secmod database file
    • CERT_DER - binary DER encoded client certificate
    • CERT_BASE64 - PEM encoded client certificate
    • CERT_KEY3_DB - Netscape key3.db client certificate database file
    • CERT_NICKNAME - Client certificate "nickname" (Netscape SDK)
    • CERT_PFX - PKCS#12 encoded client certificate (Novell SDK)
    • KEY_DER - binary DER encoded private key
    • KEY_BASE64 - PEM encoded private key
    • KEY_PFX - PKCS#12 encoded private key (Novell SDK)
    top

    LDAPTrustedMode Directive

    Description:Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    Syntax:LDAPTrustedMode type
    Context:server config, virtual host
    Status:Extension
    Module:mod_ldap

    The following modes are supported:

    • NONE - no encryption
    • SSL - ldaps:// encryption on default port 636
    • TLS - STARTTLS encryption on default port 389

    Not all LDAP toolkits support all the above modes. An error message will be logged at runtime if a mode is not supported, and the connection to the LDAP server will fail.

    If an ldaps:// URL is specified, the mode becomes SSL and the setting of LDAPTrustedMode is ignored.

    top

    LDAPVerifyServerCert Directive

    Description:Force server certificate verification
    Syntax:LDAPVerifyServerCert On|Off
    Default:LDAPVerifyServerCert On
    Context:server config
    Status:Extension
    Module:mod_ldap

    Specifies whether to force the verification of a server certificate when establishing an SSL connection to the LDAP server.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_alias.html.fr.utf80000644000000000000500000012005313412755316020341 0ustar rootsrc mod_alias - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_alias

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Permet d'atteindre différentes parties du système de fichiers depuis l'arborescence des documents du site web, ainsi que la redirection d'URL
    Statut:Base
    Identificateur de Module:alias_module
    Fichier Source:mod_alias.c

    Sommaire

    Les directives fournies par ce module permettent de manipuler et de contrôler les URLs à l'arrivée des requêtes sur le serveur. Les directives Alias et ScriptAlias permettent de faire correspondre des URLs avec des chemins du système de fichiers. Ceci permet de servir des contenus qui ne sont pas situés dans l'arborescence de DocumentRoot comme s'ils y étaient réellement. La directive ScriptAlias a pour effet supplémentaire de marquer le répertoire cible comme conteneur de scripts CGI.

    Les directives Redirect indiquent aux clients qu'ils doivent effectuer une nouvelle requête avec une URL différente. Elles sont souvent utilisées lorsqu'une ressource a été déplacée.

    Lorsque les directives Alias, ScriptAlias ou Redirect sont définies au sein d'une section <Location> ou <LocationMatch>, vous pouvez utiliser la syntaxe des expressions pour manipuler l'URL ou le chemin de destination.

    mod_alias est conçu pour traiter des tâches simples de manipulation d'URL. Pour des tâches plus complexes comme la manipulation des chaînes d'arguments des requêtes, utilisez plutôt les outils fournis par le module mod_rewrite

    top

    Chronologie du traitement

    Les alias et redirections apparaissant dans différents contextes sont traités comme les autres directives en respectant les règles de fusion standards. Par contre, ils sont traités selon une chronologie particulière lorsqu'ils apparaissent dans le même contexte (par exemple, dans la même section <VirtualHost>).

    Premièrement, toutes les redirections sont traitées avant les alias, et ainsi, une requête qui correspond à une directive Redirect ou RedirectMatch ne se verra jamais appliquer d'alias. Deuxièmement, les alias et redirections sont traités selon l'ordre dans lequel ils apparaissent dans le fichier de configuration, seule la première correspondance étant prise en compte.

    Ainsi, lorsqu'une ou plusieurs de ces directives s'appliquent au même sous-répertoire, vous devez classer les chemins du plus précis au moins précis afin que toutes les directives puissent éventuellement s'appliquer, comme dans l'exemple suivant :

    Alias "/foo/bar" "/baz"
    Alias "/foo" "/gaq"

    Si l'ordre des directives était inversé, la directive Alias ayant pour argument /foo serait toujours appliquée avant la directive Alias ayant pour argument /foo/bar, et cette dernière serait toujours ignorée.

    La définition de directives Alias, ScriptAlias ou Redirect au sein de sections <Location> ou <LocationMatch> l'emporte sur d'autres définitions éventuelles de ces mêmes directives au niveau de la configuration générale du serveur.

    top

    Directive Alias

    Description:Met en correspondance des URLs avec des chemins du système de fichiers
    Syntaxe:Alias [chemin URL] chemin fichier|chemin répertoire
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_alias

    La directive Alias permet de stocker des documents (destinés à être servis) dans des zones du système de fichiers situées en dehors de l'arborescence du site web DocumentRoot. Les URLs dont le chemin (décodé avec caractères %) commence par chemin URL seront mises en correspondance avec des fichiers locaux dont le chemin commence par chemin répertoire. Le chemin URL est sensible à la casse, même sur les systèmes de fichiers insensibles à la casse.

    Alias "/image" "/ftp/pub/image"

    Une requête pour http://example.com/image/foo.gif fera renvoyer par le serveur le fichier /ftp/pub/image/foo.gif. Seuls les éléments de chemin complets sont testés ; ainsi l'alias précédent ne conviendra pas pour une requête du style http://example.com/imagefoo.gif. Pour des mises en correspondance plus complexes faisant intervenir les expressions rationnelles, veuillez vous reporter à la directive AliasMatch.

    Notez que si vous ajoutez un slash de fin au chemin URL, vous devrez aussi ajouter un slash de fin au chemin de la requête. Autrement dit, si vous définissez

    Alias "/icons/" "/usr/local/apache/icons/"

    l'alias précédent ne s'appliquera pas à l'URL /icons à cause de l'absence du slash final. Ainsi, si le slash final est absent du chemin de l'URL, il doit aussi l'être du chemin du fichier.

    Notez qu'il pourra s'avérer nécessaire de définir des sections <Directory> supplémentaires qui couvriront la destination des alias. Le traitement des alias intervenant avant le traitement des sections <Directory>, seules les cibles des alias sont affectées (Notez cependant que les sections <Location> sont traitées avant les alias, et s'appliqueront donc).

    En particulier, si vous créez un alias ayant pour cible un répertoire situé en dehors de l'arborescence de votre site web DocumentRoot, vous devrez probablement permettre explicitement l'accès à ce répertoire.

    Alias "/image" "/ftp/pub/image"
    <Directory "/ftp/pub/image">
        Require all granted
    </Directory>

    Le nombre de slashes dans le paramètre chemin URL doit correspondre au nombre de slashes dans le chemin URL de la requête.

    Si la directive Alias est définie au sein d'une section <Location> ou <LocationMatch>, chemin URL est omis et chemin fichier est interprété en utilisant la syntaxe des expressions.
    Cette syntaxe est disponible à partir de la version 2.4.19 du serveur HTTP Apache.

    <Location "/image">
        Alias "/ftp/pub/image"
    </Location>
    <LocationMatch "/error/(?<NUMBER>[0-9]+)">
        Alias "/usr/local/apache/errors/%{env:MATCH_NUMBER}.html"
    </LocationMatch>
    top

    Directive AliasMatch

    Description:Met en correspondance des URLs avec le système de fichiers en faisant intervenir les expressions rationnelles
    Syntaxe:AliasMatch regex chemin fichier|chemin répertoire
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_alias

    Cette directive est identique à la directive Alias, mais fait appel aux expressions rationnelles, à la place d'une simple mise en correspondance de préfixe. L'expression rationnelle fournie est mise en correspondance avec le chemin URL, et si elle correspond, le serveur va substituer toute partie de chemin correspondant à l'expression entre parenthèses dans la chaîne fournie et l'utiliser comme nom de fichier. Par exemple, pour activer le répertoire /icons, on peut utiliser :

    AliasMatch "^/icons(.*)" "/usr/local/apache/icons$1$2"

    Toute la puissance des expressions rationnelles peut être mise à contribution. Par exemple, il est possible de construire un alias avec un modèle de chemin URL insensible à la casse :

    AliasMatch "(?i)^/image(.*)" "/ftp/pub/image$1"

    Il existe une différence subtile entre Alias et AliasMatch : Alias copie automatiquement toute portion supplémentaire de l'URI située après la partie du modèle qui correspond, à la fin du chemin du fichier de la partie droite, alors que AliasMatch ne le fait pas. Cela signifie qu'il sera préférable dans la plupart des cas de comparer l'expression rationnelle du modèle à la totalité de l'URI de la requête, et d'utiliser les substitutions dans la partie droite.

    En d'autres termes, le remplacement d'Alias par AliasMatch ne produira pas le même résultat. Au minimum, vous devez ajouter ^ au début de l'expression rationnelle, (.*)$ à sa fin et $1 à la fin de la chaîne de remplacement.

    Par exemple, supposons que nous voulions reformuler cet alias avec AliasMatch :

    Alias "/image/" "/ftp/pub/image/"

    Le simple remplacement d'Alias par AliasMatch ne produira pas le même résultat. Ainsi, ce qui suit va rediriger toutes les requêtes qui contiennent /image/ vers /ftp/pub/image/ :

    AliasMatch "/image/" "/ftp/pub/image/"

    Voici la directive AliasMatch qui produira le même résultat que la directive Alias ci-dessus :

    AliasMatch "^/image/(.*)$" "/ftp/pub/image/$1"

    Bien entendu, il n'y a aucune raison d'utiliser AliasMatch dans le cas où Alias suffit. AliasMatch vous permet d'effectuer des choses beaucoup plus sophistiquées. Par exemple, vous pouvez servir différentes sortes de fichiers à partir de répertoires différents :

          AliasMatch "^/image/(.*)\.jpg$" "/fichiers/jpg.images/$1.jpg"
          AliasMatch "^/image/(.*)\.gif$" "/fichiers/gif.images/$1.gif"

    Les éventuels slashes de tête multiples seront supprimés par le serveur avant que les directives de ce module n'effectuent des comparaisons avec le chemin URL de la requête.

    top

    Directive Redirect

    Description:Envoie une redirection externe demandant au client d'effectuer une autre requête avec une URL différente
    Syntaxe:Redirect [état] [URL-path] URL
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_alias

    La directive Redirect permet de faire correspondre une ancienne URL à une nouvelle en demandant au client d'aller chercher la ressource à une autre localisation.

    L'ancien URL-path est un chemin sensible à la casse (décodé à l'aide de caractères %) commençant par un slash. Les chemins relatifs ne sont pas autorisés.

    La nouvelle URL peut être une URL absolue commençant par un protocole et un nom d'hôte, mais on peut aussi utiliser un chemin URL commençant par un slash, auquel cas le protocole et le nom d'hôte du serveur local seront ajoutés.

    Ensuite, toute requête commençant par URL-path va renvoyer une redirection au client vers l'URL cible. Tout élément de chemin supplémentaire situé en aval du URL-path sera ajouté à l'URL cible.

    # Redirige vers une URL sur un serveur différent
    Redirect "/service" "http://foo2.example.com/service"
    
    # Redirige vers une URL sur le même serveur
    Redirect "/one" "/two"

    Si le client effectue une requête pour l'URL http://example.com/service/foo.txt, il lui sera demandé d'en effectuer une autre pour l'URL http://foo2.example.com/service/foo.txt. Ceci concerne les requêtes avec paramètres GET, comme http://example.com/service/foo.pl?q=23&a=42, qui seront redirigées vers http://foo2.example.com/service/foo.pl?q=23&a=42. Notez que les POSTs seront ignorés.
    Seuls les éléments de chemin complets sont testés, si bien que l'exemple précédent ne s'appliquera pas à l'URL http://example.com/servicefoo.txt. Pour des mises en correspondance plus complexes utilisant la syntaxe des expressions, ne spécifiez pas d'argument URL-path comme décrit ci-dessous. En outre, pour une mise en correspondance en utilisant les expressions rationnelles, veuillez vous reporter à la directive RedirectMatch.

    Note

    Les directives Redirect ont priorité sur les directives Alias et ScriptAlias, quel que soit leur ordre d'apparition dans le fichier de configuration. Les directives Redirect définies au sein d'une section Location l'emportent sur les directives Redirect et Alias comportant un argument URL-path.

    Si aucun argument état n'est spécifié, la redirection sera temporaire (code HTTP 302). Le client est alors informé que la ressource a été temporairement déplacée. On peut utiliser l'argument état pour renvoyer d'autres codes HTTP :

    permanent
    Renvoie un code de redirection permanente (301), indiquant que la ressource a été définitivement déplacée.
    temp
    Renvoie un code de redirection temporaire (302). C'est le comportement par défaut.
    seeother
    Renvoie un code "See Other" (303) indiquant que la ressource a été remplacée par une autre.
    gone
    Renvoie un code "Gone" (410) indiquant que la ressource a été définitivement supprimée. Lorsque ce code est utilisé, on ne doit pas utiliser l'argument URL.

    On peut renvoyer d'autres codes en spécifiant le code numérique comme valeur de l'argument of état. Si le code est compris entre 300 et 399, l'argument URL doit être présent. Si le code n'est pas compris entre 300 et 399, l'argument URL ne doit pas apparaître. Le code doit être un code HTTP valide, connu du serveur HTTP Apache (voir la fonction send_error_response dans http_protocol.c).

    Redirect permanent "/one" "http://example.com/two"
    Redirect 303 "/three" "http://example.com/other"

    Si une directive Redirect est définie au sein d'une section <Location> ou <LocationMatch> et si l'argument URL-path est omis, l'argument URL sera interprété en utilisant la syntaxe des expressions.
    Cette syntaxe est disponible à partir de la version 2.4.19 du serveur HTTP Apache.

    <Location "/one">
        Redirect permanent "http://example.com/two"
    </Location>
    <Location "/three">
        Redirect 303 "http://example.com/other"
    </Location>
    <LocationMatch "/error/(?<NUMBER>[0-9]+)">
        Redirect permanent "http://example.com/errors/%{env:MATCH_NUMBER}.html"
    </LocationMatch>
    top

    Directive RedirectMatch

    Description:Envoie une redirection externe faisant appel aux expressions rationnelles pour la mise en correspondance de l'URL courante
    Syntaxe:RedirectMatch [état] regex URL
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_alias

    Cette directive est identique à la directive Redirect, mais fait appel aux expressions rationnelles, à la place d'une simple mise en correspondance de préfixe. L'expression rationnelle fournie est mise en correspondance avec le chemin URL, et si elle correspond, le serveur va substituer toute partie de chemin correspondante entre parenthèses dans la chaîne spécifiée et l'utiliser comme nom de fichier. Par exemple, pour rediriger tous les fichiers GIF vers les fichiers JPEG de même nom sur un autre serveur, on peut utiliser :

    RedirectMatch "(.*)\.gif$" "http://autre.example.com$1.jpg"

    Les remarques à propos de la différence entre Alias et AliasMatch s'appliquent aussi à la différence entre les directives Redirect et RedirectMatch. Voir la directive AliasMatch pour plus de détails.

    top

    Directive RedirectPermanent

    Description:Envoie une redirection externe permanente demandant au client d'effectuer une nouvelle requête avec une URL différente
    Syntaxe:RedirectPermanent chemin URL URL
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_alias

    Cette directive informe le client que la redirection est permanente (code 301). Son comportement est exactement le même que celui de Redirect permanent.

    top

    Directive RedirectTemp

    Description:Envoie une redirection externe temporaire demandant au client d'effectuer une nouvelle requête avec une URL différente
    Syntaxe:RedirectTemp chemin URL URL
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_alias

    Cette directive informe le client que la redirection n'est que temporaire (code 302). Son comportement est exactement le même que celui de Redirect temp.

    top

    Directive ScriptAlias

    Description:Fait correspondre une URL à une zone du système de fichiers et désigne la cible comme script CGI
    Syntaxe:ScriptAlias [chemin URL] chemin fichier|chemin répertoire
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_alias

    La directive ScriptAlias présente le même comportement que la directive Alias, mais désigne en plus le répertoire cible comme conteneur de scripts CGI qui seront traitées par le gestionnaire cgi-script du module mod_cgi. Les URLs dont le chemin URL sensible à la casse (décodé avec caractères %) commence par chemin URL seront mises en correspondance avec les scripts dont le chemin commence par le second argument, qui est un chemin complet dans le système de fichiers local.

    ScriptAlias "/cgi-bin/" "/web/cgi-bin/"

    Une requête pour http://example.com/cgi-bin/foo ferait exécuter par le serveur le script /web/cgi-bin/foo. Cette configuration est sensiblement équivalente à :

    Alias "/cgi-bin/" "/web/cgi-bin/"
    <Location "/cgi-bin">
        SetHandler cgi-script
        Options +ExecCGI
    </Location>

    Vous pouvez aussi utiliser ScriptAlias avec un script ou gestionnaire de votre cru. Par exemple :

    ScriptAlias "/cgi-bin/" "/web/cgi-handler.pl"

    Dans ce scénario, tous les fichiers faisant l'objet d'une requête dans /cgi-bin/ seront traités par le fichier que vous avez spécifié, ce qui vous permet d'utiliser votre propre gestionnaire. Vous pouvez l'utiliser comme enveloppe (wrapper) pour les scripts CGI afin d'ajouter du contenu, ou autre action "maison".

    Il est préférable d'éviter de placer les scripts CGI dans l'arborescence de DocumentRoot afin d'éviter de révéler accidentellement leur code source lors d'une modification de configuration. On y parvient aisément avec ScriptAlias en mettant en correspondance une URL et en désignant la cible comme scripts CGI par la même occasion. Si vous choisissez de placer vos scripts CGI dans un répertoire accessible depuis le web, n'utilisez pas ScriptAlias. Utilisez plutôt <Directory>, SetHandler, et Options comme dans l'exemple suivant :
    <Directory "/usr/local/apache2/htdocs/cgi-bin">
        SetHandler cgi-script
        Options ExecCGI
    </Directory>
    Ceci est nécessaire car plusieurs chemins URL peuvent correspondre à la même zone du système de fichiers, court-circuitant ainsi la directive ScriptAlias et révélant le code source des scripts CGI s'ils ne sont pas protégés par une section Directory.

    Si la directive ScriptAlias est définie au sein d'une section <Location> ou <LocationMatch> et si l'argument chemin URL est omis, l'argument URL sera interprété en utilisant la syntaxe des expressions.
    Cette syntaxe est disponible à partir de la version 2.4.19 du serveur HTTP Apache.

    <Location "/cgi-bin">
        ScriptAlias "/web/cgi-bin/"
    </Location>
    <LocationMatch "/cgi-bin/errors/(?<NUMBER>[0-9]+)">
        ScriptAlias "/web/cgi-bin/errors/%{env:MATCH_NUMBER}.cgi"
    </LocationMatch>

    Voir aussi

    top

    Directive ScriptAliasMatch

    Description:Fait correspondre une URL à une zone du système de fichiers en faisant appel aux expressions rationnelles et en désignant la cible comme un script CGI
    Syntaxe:ScriptAliasMatch regex chemin fichier|chemin répertoire
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_alias

    Cette directive est équivalente à la directive ScriptAlias, mais fait appel aux expressions rationnelles, à la place d'une simple mise en correspondance de préfixe. L'expression rationnelle fournie est mise en correspondance avec le chemin URL, et si elle correspond, le serveur va substituer toute partie de chemin entre parenthèses dans la chaîne spécifiée et l'utiliser comme nom de fichier. Par exemple, pour activer le répertoire standard /cgi-bin, on peut utiliser :

    ScriptAliasMatch "^/cgi-bin(.*)" "/usr/local/apache/cgi-bin$1"

    Comme dans le cas d'AliasMatch, toute la puissance des expressions rationnelles peut être mise à contribution. Par exemple, il est possible de construire un alias avec une comparaison du modèle du chemin URL insensible à la casse :

    ScriptAliasMatch "(?i)^/cgi-bin(.*)" "/usr/local/apache/cgi-bin$1"

    Les remarques à propos de la différence entre Alias et AliasMatch s'appliquent aussi à la différence entre les directives ScriptAlias et ScriptAliasMatch. Voir la directive AliasMatch pour plus de détails.

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_session.html.fr.utf80000644000000000000500000011122713523273316020734 0ustar rootsrc mod_session - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_session

    Langues Disponibles:  en  |  fr 

    Cette traduction peut être périmée. Vérifiez la version anglaise pour les changements récents.
    Description:Support des sessions
    Statut:Extension
    Identificateur de Module:session_module
    Fichier Source:mod_session.c
    Compatibilité:Disponible depuis la version 2.3 d'Apache

    Sommaire

    Avertissement

    Le module session fait usage des cookies HTTP, et peut à ce titre être victime d'attaques de type Cross Site Scripting, ou divulguer des informations à caractère privé aux clients. Veuillez vous assurer que les risques ainsi encourus ont été pris en compte avant d'activer le support des sessions sur votre serveur.

    Ce module fournit le support d'une interface de session pour chaque utilisateur au niveau du serveur global. Les sessions permettent de transmettre diverses informations : l'utilisateur est-il connecté ou non, ou toute autre information qui doit être conservée d'une requête à l'autre.

    Les sessions peuvent être stockées sur le serveur, ou au niveau du navigateur. Les sessions peuvent également être chiffrées pour une sécurité accrue. Ces fonctionnalités sont réparties entre différents modules complémentaires de mod_session : mod_session_crypto, mod_session_cookie et mod_session_dbd. Chargez les modules appropriés en fonction des besoins du serveur (soit statiquement à la compilation, soit dynamiquement via la directive LoadModule).

    Les sessions peuvent être manipulées par d'autres modules qui dépendent de la session, ou la session peut être lue et écrite dans des variables d'environnement et des en-têtes HTTP, selon les besoins.

    top

    Qu'est-ce qu'une session ?

    Au coeur de l'interface de session se trouve une table de paires clé/valeur qui sont accessibles d'une requête du navigateur à l'autre. Les valeurs de clés peuvent se voir affecter toute chaîne de caractères valide, en fonction des besoins de l'application qui fait usage de la session.

    Une "session" est une chaîne application/x-www-form-urlencoded qui contient la paire clé/valeur définie par la spécification HTML.

    Selon les souhaits de l'administrateur, la session peut être chiffrée et codée en base64 avant d'être soumise au dispositif de stockage.

    top

    Qui peut utiliser une session ?

    L'interface de session a été conçue à l'origine pour être utilisée par d'autres modules du serveur comme mod_auth_form ; les applications à base de programmes CGI peuvent cependant se voir accorder l'accès au contenu d'une session via la variable d'environnement HTTP_SESSION. Il est possible de modifier et/ou de mettre à jour une session en insérant un en-tête de réponse HTTP contenant les nouveaux paramètres de session.

    top

    Stockage des sessions sur le serveur

    Apache peut être configuré pour stocker les sessions utilisateurs sur un serveur particulier ou un groupe de serveurs. Cette fonctionnalité est similaire aux sessions disponibles sur les serveurs d'applications courants.

    Selon la configuration, les sessions sont suivies à partir d'un identifiant de session stocké dans un cookie, ou extraites de la chaîne de paramètres de l'URL, comme dans les requêtes GET courantes.

    Comme le contenu de la session est stocké exclusivement sur le serveur, il est nécessaire de préserver la confidentialité de ce contenu. Ceci a des implications en matière de performance et de consommation de ressources lorsqu'un grand nombre de sessions est stocké, ou lorsqu'un grand nombre de serveurs doivent se partager les sessions entre eux.

    Le module mod_session_dbd permet de stocker les sessions utilisateurs dans une base de données SQL via le module mod_dbd.

    top

    Stockage des sessions au niveau du navigateur

    Dans les environnements à haut trafic où le stockage d'une session sur un serveur consomme trop de ressources, il est possible de stocker le contenu de la session dans un cookie au niveau du navigateur client.

    Ceci a pour avantage de ne nécessiter qu'une quantité minimale de ressources sur le serveur pour suivre les sessions, et évite à plusieurs serveurs parmi une forêt de serveurs de devoir partager les informations de session.

    Le contenu de la session est cependant présenté au client, avec pour conséquence un risque de perte de confidentialité. Le module mod_session_crypto peut être configuré pour chiffrer le contenu de la session avant qu'elle soit stockée au niveau du client.

    Le module mod_session_cookie permet de stocker les sessions au niveau du navigateur dans un cookie HTTP.

    top

    Exemples simples

    La création d'une session consiste simplement à ouvrir la session, et à décider de l'endroit où elle doit être stockée. Dans l'exemple suivant, la session sera stockée au niveau du navigateur, dans un cookie nommé session.

    Session stockée au niveau du navigateur

    Session On
    SessionCookieName session path=/

    Une session est inutile s'il n'est pas possible d'y lire ou d'y écrire. L'exemple suivant montre comment des valeurs peuvent être injectées dans une session à l'aide d'un en-tête de réponse HTTP prédéterminé nommé X-Replace-Session.

    Ecriture dans une session

    Session On
    SessionCookieName session path=/
    SessionHeader X-Replace-Session

    L'en-tête doit contenir des paires clé/valeur sous le même format que celui de la chaîne d'argument d'une URL, comme dans l'exemple suivant. Donner pour valeur à une clé la chaîne vide a pour effet de supprimer la clé de la session.

    Script CGI pour écrire dans une session

    #!/bin/bash
    echo "Content-Type: text/plain"
    echo "X-Replace-Session: key1=foo&key2=&key3=bar"
    echo
    env

    Selon la configuration, les informations de la session peuvent être extraites de la variable d'environnement HTTP_SESSION. Par défaut la session est privée, et cette fonctionnalité doit donc être explicitement activée via la directive SessionEnv.

    Lecture depuis une session

    Session On
    SessionEnv On
    SessionCookieName session path=/
    SessionHeader X-Replace-Session

    Une fois la lecture effectuée, la variable CGI HTTP_SESSION doit contenir la valeur clé1=foo&clé3=bar.

    top

    Confidentialité des sessions

    En utilisant la fonctionnalité de votre navigateur "Afficher les cookies", vous pouvez voir une réprésentation de la session sous forme de texte en clair. Ceci peut poser problème si le contenu de la session doit être dissimulé à l'utilisateur final, ou si un tiers accède sans autorisation aux informations de session.

    À ce titre, le contenu de la session peut être chiffré à l'aide du module mod_session_crypto avant d'être stocké au niveau du navigateur.

    Session chiffrée avant stockage au niveau du navigateur

    Session On
    SessionCryptoPassphrase secret
    SessionCookieName session path=/

    La session sera automatiquement déchiffrée à la lecture, et rechiffrée par Apache lors de la sauvegarde, si bien que l'application sous-jacente qui utilise la session n'a pas à se préoccuper de savoir si un chiffrement a été mis en oeuvre ou non.

    Les sessions stockées sur le serveur plutôt qu'au niveau du navigateur peuvent aussi être chiffrées, préservant par là-même la confidentialité lorsque des informations sensibles sont partagées entre les serveurs web d'une forêt de serveurs à l'aide du module mod_session_dbd.

    top

    Confidentialité du cookie

    Le mécanisme de cookie HTTP offre aussi des fonctionnalités quant à la confidentialité, comme la possibilité de restreindre le transport du cookie aux pages protégées par SSL seulement, ou l'interdiction pour les scripts java qui s'exécutent au niveau du navigateur d'obtenir l'accès au contenu du cookie.

    Avertissement

    Certaines fonctionnalités de confidentialité du cookie HTTP ne sont pas standardisées, ou ne sont pas toujours implémentées au niveau du navigateur. Les modules de session vous permettent de définir les paramètres du cookie, mais il n'est pas garanti que la confidentialité sera respectée par le navigateur. Si la sécurité est la principale préoccupation, chiffrez le contenu de la session avec le module mod_session_crypto, ou stockez la session sur le serveur avec le module mod_session_dbd.

    Les paramètres standards du cookie peuvent être spécifiés après le nom du cookie comme dans l'exemple suivant :

    Définition des paramètres du cookie

    Session On
    SessionCryptoPassphrase secret
    SessionCookieName session path=/private;domain=example.com;httponly;secure;

    Dans les cas où le serveur Apache sert de frontal pour des serveurs d'arrière-plan, il est possible de supprimer les cookies de session des en-têtes HTTP entrants à l'aide de la directive SessionCookieRemove. Ceci permet d'empêcher les serveurs d'arrière-plan d'accéder au contenu des cookies de session.

    top

    Support des sessions pour l'authentification

    Comme il est possible de le faire avec de nombreux serveurs d'applications, les modules d'authentification peuvent utiliser une session pour stocker le nom d'utilisateur et le mot de passe après connexion. Le module mod_auth_form par exemple, sauvegarde les nom de connexion et mot de passe de l'utilisateur dans une session.

    Authentification à base de formulaire

    Session On
    SessionCryptoPassphrase secret
    SessionCookieName session path=/
    AuthFormProvider file
    AuthUserFile "conf/passwd"
    AuthType form
    AuthName realm
    #...

    Pour la documentation et des exemples complets, voir le module mod_auth_form.

    top

    Intégration des sessions avec les applications externes

    Pour que les sessions soient utiles, leur contenu doit être accessible aux applications externes, et ces dernières doivent elles-mêmes être capables d'écrire une session.

    L'exemple type est une application qui modifie le mot de passe d'un utilisateur défini par mod_auth_form. Cette application doit pouvoir extraire les nom d'utilisateur et mot de passe courants de la session, effectuer les modifications demandées, puis écrire le nouveau mot de passe dans la session, afin que la transition vers le nouveau mot de passe soit transparente.

    Un autre exemple met en jeu une application qui enregistre un nouvel utilisateur pour la première fois. Une fois l'enregistrement terminé, le nom d'utilisateur et le mot de passe sont écrits dans la session, fournissant là aussi une transition transparente.

    Modules Apache
    Selon les besoins, les modules du serveur peuvent utiliser l'API mod_session.h pour lire et écrire dans les sessions. Les modules tels que mod_auth_form utilisent ce mécanisme.
    Programmes CGI et langages de script
    Les applications qui s'exécutent au sein du serveur web peuvent éventuellement extraire la valeur de la session de la variable d'environnement HTTP_SESSION. La session doit être codée sous la forme d'une chaîne application/x-www-form-urlencoded selon les préconisations de la specification HTML. Cette variable d'environnement est définie via la directive SessionEnv. Un script peut écrire dans la session en renvoyant un en-tête de réponse application/x-www-form-urlencoded dont le nom est défini via la directive SessionHeader. Dans les deux cas, tout chiffrement ou déchiffrement, ainsi que la lecture ou l'écriture de ou vers la session à partir du mécanisme de stockage choisi sont gérés par le module mod_session et la configuration correspondante.
    Applications situées derrière mod_proxy
    Si la directive SessionHeader est utilisée pour définir un en-tête de requête HTTP, la session codée sous la forme d'une chaîne application/x-www-form-urlencoded sera accessible pour l'application. Si ce même en-tête est fourni dans la réponse, sa valeur sera utilisée pour remplacer la session. Comme précédemment, tout chiffrement ou déchiffrement, ainsi que la lecture ou l'écriture de ou vers la session à partir du mécanisme de stockage choisi sont gérés par le module mod_session et la configuration correspondante.
    Applications indépendantes
    Les applications peuvent choisir de manipuler la session en s'affranchissant du contrôle du serveur HTTP Apache. Dans ce cas, c'est l'application qui doit prendre en charge la lecture de la session depuis le mécanisme de stockage choisi, son déchiffrement, sa mise à jour, son chiffrement et sa réécriture vers le mécanisme de stockage choisi de manière appropriée.
    top

    Directive Session

    Description:Ouvre une session pour le contexte courant
    Syntaxe:Session On|Off
    Défaut:Session Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_session

    La directive Session permet d'ouvrir une session pour le contexte ou conteneur courant. Les directives suivantes permettent de définir où la session sera stockée et comment sera assurée la confidentialité.

    top

    Directive SessionEnv

    Description:Définit si le contenu de la session doit être enregistré dans la variable d'environnement HTTP_SESSION
    Syntaxe:SessionEnv On|Off
    Défaut:SessionEnv Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_session

    Lorsque la directive SessionEnv est définie à On, le contenu de la session est enregistré dans une variable d'environnement CGI nommée HTTP_SESSION.

    La chaîne est écrite sous le même format que celui de la chaîne d'arguments d'une URL, comme dans l'exemple suivant :

    clé1=foo&clé3=bar

    top

    Directive SessionExclude

    Description:Définit les préfixes d'URLs pour lesquels une session sera ignorée
    Syntaxe:SessionExclude chemin
    Défaut:none
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_session

    La directive SessionExclude permet de définir les préfixes d'URLs pour lesquels la session sera désactivée. Ceci peut améliorer l'efficacité d'un site web, en ciblant de manière plus précise l'espace d'URL pour lequel une session devra être maintenue. Par défaut, toutes les URLs du contexte ou du conteneur courant sont incluses dans la session. La directive SessionExclude l'emporte sur la directive SessionInclude.

    Avertissement

    Cette directive a un comportement similaire à celui de l'attribut chemin des cookies HTTP, mais ne doit pas être confondue avec cet attribut. En effet, cette directive ne définit pas l'attribut chemin, qui doit être configuré séparément.

    top

    Directive SessionExpiryUpdateInterval

    Description:Define the number of seconds a session's expiry may change without the session being updated
    Syntaxe:SessionExpiryUpdateInterval interval
    Défaut:SessionExpiryUpdateInterval 0 (always update)
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_session
    Compatibilité:Available in Apache 2.4.41 and later

    La documentation de cette directive n'a pas encore t traduite. Veuillez vous reporter la version en langue anglaise.

    top

    Directive SessionHeader

    Description:Importation des mises à jour de session depuis l'en-tête de réponse HTTP spécifié
    Syntaxe:SessionHeader en-tête
    Défaut:none
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_session

    La directive SessionHeader permet de définir le nom d'un en-tête de réponse HTTP qui, s'il est présent, sera lu et son contenu écrit dans la session courante.

    Le contenu de l'en-tête doit se présenter sous le même format que celui de la chaîne d'arguments d'une URL, comme dans l'exemple suivant :

    clé1=foo&clé2=&clé3=bar

    Si une clé a pour valeur la chaîne vide, elle sera supprimée de la session.

    top

    Directive SessionInclude

    Description:Définit les préfixes d'URL pour lesquels une session est valide
    Syntaxe:SessionInclude chemin
    Défaut:toutes URLs
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_session

    La directive SessionInclude permet de définir les préfixes d'URL spécifiques pour lesquels une session sera valide. Ceci peut améliorer l'efficacité d'un site web, en ciblant de manière plus précise l'espace d'URL pour lequel une session devra être maintenue. Par défaut, toutes les URLs du contexte ou du conteneur courant sont incluses dans la session.

    Avertissement

    Cette directive a un comportement similaire à celui de l'attribut chemin des cookies HTTP, mais ne doit pas être confondue avec cet attribut. En effet, cette directive ne définit pas l'attribut chemin, qui doit être configuré séparément.

    top

    Directive SessionMaxAge

    Description:Définit une durée de vie maximale pour la session en secondes
    Syntaxe:SessionMaxAge durée de vie maximale
    Défaut:SessionMaxAge 0
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_session

    La directive SessionMaxAge permet de définir la durée maximale pendant laquelle une session restera valide. Lorsqu'une session est sauvegardée, cette durée est réinitialisée et la session peut continuer d'exister. Si la durée d'une session dépasse cette limite sans qu'une requête au serveur ne vienne la rafraîchir, la session va passer hors délai et sera supprimée. Lorsqu'une session est utilisée pour stocker les informations de connexion d'un utilisateur, ceci aura pour effet de le déconnecter automatiquement après le délai spécifié.

    Donner à cette directive la valeur 0 empêche l'expiration de la session.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dir.html.ja.utf80000644000000000000500000004724313412755316020022 0ustar rootsrc mod_dir - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_dir

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:「最後ã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã€ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã¨ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã® ã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æ‰±ã†æ©Ÿèƒ½ã‚’æä¾›ã™ã‚‹
    ステータス:Base
    モジュール識別å­:dir_module
    ソースファイル:mod_dir.c

    概è¦

    ディレクトリインデックスã¯ã€æ¬¡ã®äºŒã¤ã®ã†ã¡ã©ã¡ã‚‰ã‹ãŒåˆ©ç”¨ã•れã¾ã™:

    • 一ã¤ç›®ã¯ã€ãƒ¦ãƒ¼ã‚¶ãŒä½œæˆã—ãŸãƒ•ァイルを用ã„ã‚‹ã‚‚ã®ã§ã€é€šå¸¸ index.html ã¨ã„ã†ãƒ•ァイルåを使ã„ã¾ã™ã€‚ã“ã®ãƒ•ァイルåã¯ã€ DirectoryIndex ディレクティブ㧠指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã“ã®æ©Ÿèƒ½ã¯ mod_dir ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§æä¾›ã•れã¾ã™ã€‚
    • ã‚‚ã†ä¸€ã¤ã®æ–¹æ³•ã¯ã€ サーãƒã«ã‚ˆã£ã¦è‡ªå‹•çš„ã«ç”Ÿæˆã•れるディレクトリリストを用ã„ã‚‹å ´åˆã§ã™ã€‚ ã“ã®æ©Ÿèƒ½ã¯ã€mod_autoindex モジュールã«ã‚ˆã‚Šæä¾›ã•れã¾ã™ã€‚

    自動的ãªã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ç”Ÿæˆæ©Ÿèƒ½ã‚’削除 (ã‚‚ã—ãã¯äº¤æ›) ã§ãるよã†ã«ã€ã“ã®äºŒã¤ã®æ©Ÿèƒ½ã¯åˆ†é›¢ã•れã¦ã„ã¾ã™ã€‚

    ãªãŠ http://servername/foo/dirname ã¨ã„ㆠURL ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒã‚ã£ãŸéš›ã«ã€dirname ã¨ã„ã†ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãŒã‚れã°ã€ã€Œæœ€å¾Œã«ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã‚’ã¤ã‘ãŸå½¢ã€ã® URL ã¸ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’é€å‡ºã—ã¾ã™ã€‚ ディレクトリã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§çµ‚ã‚ã£ã¦ã„ã‚‹å¿…è¦ãŒã‚り〠mod_dir ã¯ã€http://servername/foo/dirname/ ã¸ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’é€å‡ºã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚

    top

    DirectoryCheckHandler ディレクティブ

    説明:Toggle how this module responds when another handler is configured
    æ§‹æ–‡:DirectoryCheckHandler On|Off
    デフォルト:DirectoryCheckHandler Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_dir
    äº’æ›æ€§:Available in 2.4.8 and later. Releases prior to 2.4 implicitly act as if "DirectoryCheckHandler ON" was specified.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    DirectoryIndex ディレクティブ

    説明:クライアントãŒãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’リクエストã—ãŸã¨ãã«èª¿ã¹ã‚‹ リソースã®ãƒªã‚¹ãƒˆ
    æ§‹æ–‡:DirectoryIndex local-url [local-url] ...
    デフォルト:DirectoryIndex index.html
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_dir

    クライアントãŒã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªåã®æœ€å¾Œã«ã€Œ/〠を指定ã—ã¦ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ã‚’è¦æ±‚ã™ã‚‹å ´åˆã«æŽ¢ã™ãƒªã‚½ãƒ¼ã‚¹ã®ãƒªã‚¹ãƒˆã‚’ DirectoryIndex ディレクティブã§è¨­å®šã—ã¾ã™ã€‚ Local-url ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«å¯¾å¿œã™ã‚‹ã€ã‚µãƒ¼ãƒä¸Šã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã® (% エンコードã•れãŸ) URL ã§ã€æ™®é€šã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªä¸­ã®ãƒ•ァイルã®åå‰ã§ã™ã€‚ 複数㮠URL ãŒè¨­å®šã•れãŸå ´åˆã«ã¯ã€æœ€åˆã«è¦‹ã¤ã‹ã£ãŸã‚‚ã®ã‚’è¿”ã—ã¾ã™ã€‚ ãれらãŒè¦‹ã¤ã‹ã‚‰ãšã€Indexes オプションãŒã‚»ãƒƒãƒˆã•れã¦ã„ã‚‹å ´åˆã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ãƒªã‚¹ãƒˆã‚’生æˆã—ã¾ã™ã€‚

    例

    DirectoryIndex index.html

    http://myserver/docs/ ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒã‚り〠http://myserver/docs/index.html ãŒå­˜åœ¨ã™ã‚Œã°ã€ã“ã® URL ãŒè¿”ã•れã¾ã™ã€‚ ã‚‚ã—存在ã—ãªã‘れã°ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ãƒªã‚¹ãƒˆãŒè¿”ã•れã¾ã™ã€‚

    注: ドキュメントãŒåŒã˜ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªå†…ã«å­˜åœ¨ã™ã‚‹ã¯å¿…è¦ã‚りã¾ã›ã‚“。

    DirectoryIndex index.html index.txt /cgi-bin/index.pl

    ã¨ã—ãŸå ´åˆã€index.html 㨠index.txt ã®ã©ã¡ã‚‰ã‚‚ディレクトリ内ã«å­˜åœ¨ã—ãªã„å ´åˆã€CGI スクリプト /cgi-bin/index.pl ãŒå®Ÿè¡Œã•れã¾ã™ã€‚

    top

    DirectoryIndexRedirect ディレクティブ

    説明:Configures an external redirect for directory indexes.
    æ§‹æ–‡:DirectoryIndexRedirect on | off | permanent | temp | seeother | 3xx-code
    デフォルト:DirectoryIndexRedirect off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_dir
    äº’æ›æ€§:Available in version 2.3.14 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    DirectorySlash ディレクティブ

    説明:パス末尾ã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã™ã‚‹ã‹ã©ã†ã‹ã®ã‚ªãƒ³ã‚ªãƒ•をトグルã•ã›ã‚‹
    æ§‹æ–‡:DirectorySlash On|Off
    デフォルト:DirectorySlash On
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Indexes
    ステータス:Base
    モジュール:mod_dir
    äº’æ›æ€§:2.0.51 以é™

    è¦æ±‚ã®ã‚ã£ãŸ URL ãŒãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’指ã™ã‹ã©ã†ã‹ã‚’〠mod_dir ãŒèª¿æ•´ã™ã‚‹ã¹ãã‹ã©ã†ã‹ã‚’ DirectorySlash ディレクティブã§è¨­å®šã—ã¾ã™ã€‚

    典型的ã«ã¯ã€ãƒ¦ãƒ¼ã‚¶ãŒæœ«å°¾ã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ç„¡ã—ã§ãƒªã‚½ãƒ¼ã‚¹ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’発行ã—〠ãã—ã¦ã€ãã®ãƒªã‚½ãƒ¼ã‚¹ãŒãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’指ã—ã¦ã„ãŸå ´åˆã€mod_dir ã¯ã€æœ«å°¾ã«ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã‚’付加ã—ãŸä¸Šã§åŒã˜ãƒªã‚½ãƒ¼ã‚¹ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•ã›ã¾ã™ã€‚ ã“ã®æŒ™å‹•ã«ã¯å¹¾ã¤ã‹ç†ç”±ãŒã‚りã¾ã™:

    • ユーザã¯ã€æœ€çµ‚çš„ã«ã¯ãƒªã‚½ãƒ¼ã‚¹ã®åˆ¥å URL をリクエストã™ã‚‹ã“ã¨ã«ãªã‚‹ã€‚
    • mod_autoindex ãŒæœŸå¾…通りã«å‹•ã。mod_autoindex ã®ç”Ÿæˆã™ã‚‹ãƒªãƒ³ã‚¯ã¯ãƒ‘スを出力ã—ã¾ã›ã‚“ã®ã§ã€ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ãŒãªã„å ´åˆã¯é–“é•ã£ãŸãƒ‘スを 指ã—ã¦ã—ã¾ã†ã“ã¨ã«ãªã‚Šã¾ã™ã€‚
    • DirectoryIndex ã¯ã€ 末尾ã«ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ãŒã¤ã„ã¦ã„るリクエストã«ã¤ã„ã¦ã®ã¿è©•価ã•れる。
    • HTML ページã®ç›¸å¯¾ URL å‚ç…§ãŒæ­£ã—ã動作ã™ã‚‹ã€‚

    ã¨ã¯ã„ãˆã€ã‚‚ã—ã“ã†ã„ã£ãŸåŠ¹æžœã‚’æœ›ã¾ãªã„ã€ã‹ã¤ã€ 上記ã®ã‚ˆã†ãªç†ç”±ãŒå½“ã¦ã¯ã¾ã‚‰ãªã„å ´åˆã¯ã€ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’次ã®ã‚ˆã†ã«ã—ã¦ã‚ªãƒ•ã«ã§ãã¾ã™:

    # see security warning below!
    <Location /some/path>
    DirectorySlash Off
    SetHandler some-handler
    </Location>

    セキュリティ警告

    末尾ã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’オフã«ã™ã‚‹ã¨ã€çµæžœçš„ã«æƒ…å ±æ¼æ´©ã‚’ æ‹›ãã“ã¨ã«ãªã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。 mod_autoindex ãŒæœ‰åй (Options +Indexes) ã§ã€ DirectoryIndex ãŒæœ‰åйãªãƒªã‚½ãƒ¼ã‚¹ (例ãˆã° index.html) を指ã—ã¦ã„ã¦ã€ã¾ãŸã€è¦æ±‚ã®ã‚ã£ãŸ URL ã«ç‰¹åˆ¥ãª ãƒãƒ³ãƒ‰ãƒ©ãŒè¨­å®šã•れã¦ã„ãªã„å ´åˆã‚’考ãˆã¦ã¿ã¦ãã ã•ã„。 ã“ã®å ´åˆæœ«å°¾ã«ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã®ã¤ã„ã¦ã„るリクエストã«å¯¾ã—ã¦ã¯ index.html ファイルãŒè¿”ã•れã¾ã™ã€‚ã—ã‹ã—スラッシュã®ãªã„リクエストã«å¯¾ã—ã¦ã¯ã€ ディレクトリã®å†…容一覧を返ã—ã¦ã—ã¾ã„ã¾ã™ã€‚

    top

    FallbackResource ディレクティブ

    説明:Define a default URL for requests that don't map to a file
    æ§‹æ–‡:
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    ステータス:Base
    モジュール:mod_dir

    Documentation not yet translated. Please see English version of document.

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_lbmethod_byrequests.html.fr.utf80000644000000000000500000003212613412755316023337 0ustar rootsrc mod_lbmethod_byrequests - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_lbmethod_byrequests

    Langues Disponibles:  en  |  fr 

    Description:Algorithme de planification avec répartition de charge du traitement des requêtes pour le module mod_proxy_balancer
    Statut:Extension
    Identificateur de Module:lbmethod_byrequests_module
    Fichier Source:mod_lbmethod_byrequests.c
    Compatibilité:Dissocié de mod_proxy_balancer dans la version 2.3

    Sommaire

    Ce module ne fournit pas lui-même de directive de configuration. Il nécessite les services de mod_proxy_balancer, et fournit la méthode de répartition de charge byrequests.

    top

    Algorithme d'attribution des requêtes

    Activé via lbmethod=byrequests, ce planificateur a été conçu dans le but de distribuer les requêtes à tous les processus worker afin qu'ils traitent tous le nombre de requêtes pour lequel ils ont été configurés. Il fonctionne de la manière suivante :

    lbfactor correspond à la quantité de travail que nous attendons de ce processus worker, ou en d'autres termes son quota de travail. C'est une valeur normalisée représentant leur part du travail à accomplir.

    lbstatus représente combien il est urgent que ce processus worker travaille pour remplir son quota de travail.

    Le worker est un membre du dispositif de répartition de charge, en général un serveur distant traitant un des protocoles supportés.

    On distribue à chaque processus worker son quota de travail, puis on regarde celui qui a le plus besoin de travailler (le plus grand lbstatus). Ce processus est alors sélectionné pour travailler, et son lbstatus diminué de l'ensemble des quotas de travail que nous avons distribués à tous les processus. La somme de tous les lbstatus n'est ainsi pas modifiée, et nous pouvons distribuer les requêtes selon nos souhaits.

    Si certains processus workers sont désactivés, les autres feront l'objet d'une planification normale.

    for each worker in workers
        worker lbstatus += worker lbfactor
        total factor    += worker lbfactor
        if worker lbstatus > candidate lbstatus
            candidate = worker
    
    candidate lbstatus -= total factor

    Si un répartiteur de charge est configuré comme suit :

    worker a b c d
    lbfactor 25 25 25 25
    lbstatus 0 0 0 0

    Et si b est désactivé, la planification suivante est mise en oeuvre :

    worker a b c d
    lbstatus -50 0 25 25
    lbstatus -25 0 -25 50
    lbstatus 0 0 0 0
    (repeat)

    C'est à dire la chronologie suivante : a c d a c d a c d ... Veuillez noter que :

    worker a b c d
    lbfactor 25 25 25 25

    A le même effet que :

    worker a b c d
    lbfactor 1 1 1 1

    Ceci est dû au fait que toutes les valeurs de lbfactor sont normalisées et évaluées en fonction des autres. Avec :

    worker a b c
    lbfactor 1 4 1

    le processus b va, en moyenne, se voir assigner 4 fois plus de requêtes que a et c.

    La configuration suivante, asymétrique, fonctionne comme on peut s'y attendre :

    worker a b
    lbfactor 70 30
     
    lbstatus -30 30
    lbstatus 40 -40
    lbstatus 10 -10
    lbstatus -20 20
    lbstatus -50 50
    lbstatus 20 -20
    lbstatus -10 10
    lbstatus -40 40
    lbstatus 30 -30
    lbstatus 0 0
    (repeat)

    Après 10 distributions, la planification se répète et 7 a sont sélectionnés avec 3 b intercalés.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_balancer.html.fr.utf80000644000000000000500000006333113412755316022265 0ustar rootsrc mod_proxy_balancer - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_proxy_balancer

    Langues Disponibles:  en  |  fr  |  ja 

    Description:Extension de mod_proxy pour le support de la répartition de charge
    Statut:Extension
    Identificateur de Module:proxy_balancer_module
    Fichier Source:mod_proxy_balancer.c
    Compatibilité:Disponible depuis la version 2.1 d'Apache

    Sommaire

    Pour pouvoir fonctionner, ce module requiert le chargement de mod_proxy, et il fournit le support de la répartition de charge pour tous les protocoles supportés. Parmi ces protocoles, les plus importants sont :

    L'algorithme de planification de la répartition de charge n'est pas fourni par ce module, mais par ceux-ci :

    Ainsi, pour mettre en oeuvre la répartition de charge, mod_proxy, mod_proxy_balancer et au moins un des modules fournissant l'algorithme de planification de la répartition de charge doivent être chargés dans le serveur.

    Avertissement

    N'activez pas la fonctionnalité de mandataire avant d'avoir sécurisé votre serveur. Les serveurs mandataires ouverts sont dangereux non seulement pour votre réseau, mais aussi pour l'Internet au sens large.

    top

    L'algorithme de planification de la répartition de charge

    A l'heure actuelle, 4 algorithmes de planification de la répartition de charge sont disponibles : ils se basent respectivement sur le comptage des requêtes (mod_lbmethod_byrequests), la mesure de l'intensité du trafic (mod_lbmethod_bytraffic), le comptage des requêtes en attente (mod_lbmethod_bybusyness) et la mesure de l'activité du serveur (mod_lbmethod_heartbeat). Ils sont contrôlés par la valeur de lbmethod dans la définition du répartiteur. Voir la directive ProxyPass pour plus de détails, et en particulier la configuration du répartiteur et de ses membres.

    top

    Répartition de charge avec abonnement utilisateur (stickyness)

    Le répartiteur supporte l'abonnement utilisateur. Lorsqu'une requête est mandatée vers un serveur d'arrière-plan particulier, toutes les requêtes suivantes du même utilisateur seront alors mandatées vers le même serveur d'arrière-plan. De nombreux répartiteurs de charge implémentent cette fonctionnalité via une table qui associe les adresses IP des clients aux serveurs d'arrière-plan. Cette approche est transparente aux clients et aux serveurs d'arrière-plan, mais induit certains problèmes : distribution de charge inégale si les clients se trouvent eux-mêmes derrière un mandataire, erreurs d'abonnement lorsqu'un client possède une adresse IP dynamique qui peut changer au cours d'une session et perte d'abonnement en cas de dépassement de la table de correspondances.

    Le module mod_proxy_balancer implémente l'abonnement selon deux alternatives : les cookies et le codage d'URL. Le cookie peut être fourni par le serveur d'arrière-plan ou par le serveur web Apache lui-même, alors que le codage d'URL est en général effectué par le serveur d'arrière-plan.

    top

    Exemples de configuration d'un répartiteur

    Avant de nous plonger dans les détails techniques, voici un exemple d'utilisation de mod_proxy_balancer mettant en oeuvre la répartition de charge entre deux serveurs d'arrière-plan :

    <Proxy "balancer://mycluster">
        BalancerMember "http://192.168.1.50:80"
        BalancerMember "http://192.168.1.51:80"
    </Proxy>
    ProxyPass        "/test" "balancer://mycluster"
    ProxyPassReverse "/test" "balancer://mycluster"

    Voici un autre exemple de répartiteur de charge avec abonnement utilisant mod_headers, fonctionnant même si le serveur d'arrière-plan ne définit pas de cookie de session approprié :

    Header add Set-Cookie "ROUTEID=.%{BALANCER_WORKER_ROUTE}e; path=/" env=BALANCER_ROUTE_CHANGED
    <Proxy "balancer://mycluster">
        BalancerMember "http://192.168.1.50:80" route=1
        BalancerMember "http://192.168.1.51:80" route=2
        ProxySet stickysession=ROUTEID
    </Proxy>
    ProxyPass        "/test" "balancer://mycluster"
    ProxyPassReverse "/test" "balancer://mycluster"
    top

    Variables d'environnement exportées

    A l'heure actuelle, 6 variables d'environnement sont exportées :

    BALANCER_SESSION_STICKY

    Cette variable se voir assignée la valeur de stickysession pour la requête courante. Il s'agit du nom du cookie ou du paramètre de requête utilisé pour les sessions avec abonnement.

    BALANCER_SESSION_ROUTE

    Cette variable se voit assignée la route interprétée pour la requête courante.

    BALANCER_NAME

    Cette variable se voit assigné le nom du répartiteur pour la requête courante. Il s'agit d'une valeur du style balancer://foo.

    BALANCER_WORKER_NAME

    Cette variable se voit assigné le nom du membre du groupe de répartition de charge utilisé pour la requête courante. Il s'agit d'une valeur du style http://hostA:1234.

    BALANCER_WORKER_ROUTE

    Cette variable se voit assignée la route du membre du groupe de répartition de charge qui sera utilisé pour la requête courante.

    BALANCER_ROUTE_CHANGED

    Cette variable est définie à 1 si la route de la session ne correspond pas à celle du membre du groupe de répartition de charge (BALANCER_SESSION_ROUTE != BALANCER_WORKER_ROUTE), ou si la session ne possède pas encore de route établie. Elle peut servir à déterminer quand il est éventuellement nécessaire d'envoyer au client une route mise à jour lorsque les sessions persistantes sont utilisées.

    top

    Activation du support du gestionnaire de répartiteur

    Cette fonctionnalité nécessite le chargement du module mod_status. Le gestionnaire de répartiteur permet la mise à jour dynamique des membres du groupe de répartition de charge. Vous pouvez utiliser le gestionnaire de répartiteur pour modifier le facteur de charge d'un membre particulier, ou passer ce dernier en mode hors ligne.

    Ainsi, pour mettre en oeuvre la gestion du répartiteur de charge, mod_status et mod_proxy_balancer doivent être chargés dans le serveur.

    Pour permettre la gestion du répartiteur de charge aux navigateurs appartenant au domaine example.com, ajoutez ces lignes à votre fichier de configuration httpd.conf :

    <Location "/balancer-manager">
        SetHandler balancer-manager
        Require host example.com
    </Location>

    Vous pourrez alors accéder au gestionnaire du répartiteur de charge en utilisant un navigateur web pour afficher la page http://nom.de.votre.serveur/balancer-manager. Notez que pour pouvoir contrôler dynamiquement un membre de groupe de répartition, ce dernier ne doit pas être défini au sein d'une section <Location ...>.

    top

    Détails à propos de la répartition de charge par abonnement (stickyness)

    Si l'abonnement s'appuie sur un cookie, vous devez définir le nom de ce cookie dont le contenu précise le serveur d'arrière-plan à utiliser. Pour ce faire, on utilise l'attribut stickysession avec la directive ProxyPass ou ProxySet. Le nom du cookie est sensible à la casse. Le répartiteur extrait le contenu du cookie et recherche un serveur membre dont la route correspond à cette valeur. La route doit aussi être définie dans la directive ProxyPass ou ProxySet. Le cookie peut être défini soit par le serveur d'arrière-plan, soit, comme indiqué dans l'exemple ci-dessus par le serveur web Apache lui-même.

    Certains serveurs d'arrière-plan, tels qu'Apache Tomcat, utilisent une forme sensiblement différente de cookie d'abonnement. Tomcat ajoute le nom de l'instance Tomcat à la fin de son identifiant de session, précédé par un point. Ainsi, si le serveur web Apache trouve un point dans la valeur du cookie d'abonnement, il n'utilisera que la partie située après ce point pour rechercher sa route. Pour que Tomcat puisse connaître son nom d'instance, vous devez définir l'attribut jvmRoute dans son fichier de configuration conf/server.xml à la valeur de la route du serveur qui se connecte au Tomcat considéré. Le nom du cookie de session utilisé par Tomcat (et plus généralement par les applications web Java à base de servlets) est JSESSIONID (en majuscules), mais peut être modifié.

    La seconde méthode pour implémenter l'abonnement est le codage d'URL. Ici, le serveur web recherche un paramètre dans l'URL de la requête. Le nom du paramètre est spécifié par l'attribut stickysession. Pour trouver un serveur membre, on recherche un serveur dont la route est égale à la valeur du paramètre. Comme il n'est pas aisé d'extraire et de manipuler tous les liens URL contenus dans les réponses, le travail consistant à ajouter les paramètres à chaque lien est généralement effectué par le serveur d'arrière-plan qui génère le contenu. Bien qu'il soit possible dans certains cas d'effectuer ces ajouts au niveau du serveur web via les modules mod_substitute ou mod_sed, cette méthode peut dégrader les performances.

    Les standards Java implémentent le codage d'URL de manière sensiblement différente. Ils ajoutent une information de chemin à l'URL en utilisant un point-virgule (;) comme séparateur, puis ajoutent enfin l'identifiant de session. Comme dans le cas des cookies, Apache Tomcat peut insérer la valeur de l'attribut jvmRoute dans cette information de chemin. Pour qu'Apache puisse trouver ce genre d'information de chemin, vous devez définir scolonpathdelim à On dans la directive ProxyPass ou ProxySet.

    Enfin, vous pouvez utiliser simultanément les cookies et le codage d'URL en définissant le nom du cookie et le nom du paramètre d'URL séparés par une barre verticale (|) comme dans l'exemple suivant :

    ProxyPass "/test" "balancer://mycluster" stickysession=JSESSIONID|jsessionid scolonpathdelim=On
    <Proxy "balancer://mycluster">
        BalancerMember "http://192.168.1.50:80" route=node1
        BalancerMember "http://192.168.1.51:80" route=node2
    </Proxy>

    Si le cookie et le paramètre de requête fournissent tous deux une information de route correcte pour la même requête, c'est l'information en provenance du paramètre de requête qui sera retenue.

    top

    Résolution des problèmes liés à la répartition de charge par abonnement

    Si vous êtes confronté à des erreurs d'abonnement, comme la nécessité pour les utilisateurs de se reconnecter suite à une perte de session d'application, vous devez tout d'abord vérifier si ceci n'est pas du à une indisponibilité sporadique des serveurs d'arrière-plan ou à une erreur de configuration. La présence de messages d'erreur de type proxy dans le journal des erreurs d'Apache pourra révéler des problèmes de stabilité au niveau des serveurs d'arrière-plan.

    Pour contrôler votre configuration, regardez tout d'abord si l'abonnement est à base de cookie ou de codage d'URL. L'étape suivante consiste à enregistrer certaines données dans le journal des accès en utilisant un format de journalisation personnalisé. Les champs intéressants sont les suivants :

    %{MONCOOKIE}C
    La valeur que contient le cookie de nom MONCOOKIE. Le nom doit correspondre au nom défini par l'attribut stickysession.
    %{Set-Cookie}o
    Ce champ contient tout cookie défini par le serveur d'arrière-plan. Vous pouvez ainsi vérifier si le serveur d'arrière-plan définit bien le cookie de session auquel vous vous attendez, et à quelle valeur il est défini.
    %{BALANCER_SESSION_STICKY}e
    Le nom du cookie ou du paramètre de requête utilisé pour la recherche de l'information de routage.
    %{BALANCER_SESSION_ROUTE}e
    L'information de routage extraite de la requête.
    %{BALANCER_WORKER_ROUTE}e
    La route du serveur choisi.
    %{BALANCER_ROUTE_CHANGED}e
    Contient la valeur 1 si la route extraite de la requête est différente de la route du serveur ; autrement dit, le traitement de la requête n'a pas pu être effectué dans le cadre d'une répartition de charge par abonnement.

    Les pertes de session sont souvent dues à des expirations de session dont la valeur peut en général être configurée au niveau du serveur d'arrière-plan.

    Si le niveau de journalisation est défini à debug ou plus, le répartiteur journalise aussi des informations détaillées à propos de l'abonnement dans le journal des erreurs, ce qui facilite la résolution des problèmes d'abonnement. Notez cependant que le volume de journalisation pourra alors s'avérer trop important pour un serveur en production sous forte charge.

    Langues Disponibles:  en  |  fr  |  ja 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_lbmethod_byrequests.html0000644000000000000500000000036213362070302022026 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_lbmethod_byrequests.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_lbmethod_byrequests.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_version.html.ko.euc-kr0000644000000000000500000002444013412755316021242 0ustar rootsrc mod_version - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_version

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:¹öÀüº° ¼³Á¤
    »óÅÂ:Extension
    ¸ðµâ¸í:version_module
    ¼Ò½ºÆÄÀÏ:mod_version.c
    Áö¿ø:¾ÆÆÄÄ¡ 2.1 ÀÌÈĺÎÅÍ

    ¿ä¾à

    ¿©·¯ ´Ù¸¥ À¥¼­¹ö ¹öÀü°ú ±¸¼ºÀ» ´Ù·ç¾î¾ß ÇÒ Å« ³×Æ®¿÷°ú Å×½ºÆ®¿ëÀ¸·Î »ç¿ëÇϱâÀ§ÇØ ÀÌ ¸ðµâÀ» ¸¸µé¾ú´Ù. ÀÌ ¸ðµâÀº ¼ýÀÚ ºñ±³³ª Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÏ¿© ÀÚÀ¯·Î¿î ¹öÀü °Ë»ç°¡ °¡´ÉÇÑ <IfVersion>À» Á¦°øÇÑ´Ù.

    ¿¹Á¦

    <IfVersion 2.1.0>
    # ÇöÀç À¥¼­¹ö ¹öÀüÀº Á¤È®È÷ 2.1.0ÀÌ´Ù
    </IfVersion>

    <IfVersion >= 2.2>
    # ÁøÂ¥ »õ·Î¿î ±â´ÉÀ» »ç¿ëÇÑ´Ù :-)
    </IfVersion>

    ´Ù¸¥ »ç¿ë¹ýÀº ¾Æ·¡¸¦ Âü°íÇÑ´Ù.

    Support Apache!

    Áö½Ã¾îµé

    Bugfix checklist

    Âü°í

    top

    <IfVersion> Áö½Ã¾î

    ¼³¸í:¹öÀüº° ¼³Á¤À» ¹­´Â´Ù
    ¹®¹ý:<IfVersion [[!]operator] version> ... </IfVersion>
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:All
    »óÅÂ:Extension
    ¸ðµâ:mod_version

    <IfVersion> ¼½¼ÇÀº À¥¼­¹ö ¹öÀüÀÌ ¿øÇÏ´Â Á¶°ÇÀ» ¸¸Á·ÇÒ¶§¸¸ ½ÇÇàÇÒ ¼³Á¤ Áö½Ã¾î¸¦ ¹­´Â´Ù. ÀϹÝÀûÀÎ (¼ýÀÚ) ºñ±³ÀÇ °æ¿ì version ¾Æ±Ô¸ÕÆ®´Â 2.1.0À̳ª 2.2¿Í °°ÀÌ major[.minor[.patch]] Çü½ÄÀÌ´Ù. minor¿Í patch´Â ¾ø¾îµµ µÈ´Ù. ÀÌµé ¼ýÀÚ°¡ ¾ø´Ù¸é 0À̶ó°í °¡Á¤ÇÑ´Ù. ´ÙÀ½°ú °°Àº ¼ýÀÚ operator°¡ °¡´ÉÇÏ´Ù.

    operator¼³¸í
    = ȤÀº == µ¿ÀÏÇÑ À¥¼­¹ö ¹öÀü
    > º¸´Ù Å« À¥¼­¹ö ¹öÀü
    >= Å©°Å³ª °°Àº À¥¼­¹ö ¹öÀü
    < º¸´Ù ÀÛÀº À¥¼­¹ö ¹öÀü
    <= À۰ųª °°Àº À¥¼­¹ö ¹öÀü

    ¿¹Á¦

    <IfVersion >= 2.1>
    # ¹öÀüÀÌ 2.1.0 º¸´Ù Å©°Å³ª °°À»¶§¸¸
    # ½ÇÇàÇÑ´Ù.
    </IfVersion>

    ¼ýÀÚ ºñ±³¿Ü¿¡µµ Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÏ¿© À¥¼­¹ö ¹öÀüÀ» ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù. ¿©±â¿¡´Â µÎ°¡Áö ¹æ¹ýÀÌ ÀÖ´Ù.

    operator¼³¸í
    = ȤÀº == versionÀº /regex/ Çü½ÄÀÌ´Ù
    ~ versionÀº regex Çü½ÄÀÌ´Ù

    ¿¹Á¦

    <IfVersion = /^2.1.[01234]$/>
    # ¿¹¸¦ µé¾î, ¿©±â¿¡ ¹ö±×°¡ Àִ ƯÁ¤ ¹öÀü¿¡ ´ëÇÑ ÇØ°áÃ¥ÀÌ ³ª¿Â´Ù </IfVersion>

    ¿¬»êÀÚ ¾Õ¿¡ ´À³¦Ç¥(!)¸¦ ¾²¸é Àǹ̸¦ ¹Ý´ë·Î ÇØ¼®ÇÑ´Ù.

    <IfVersion !~ ^2.1.[01234]$>
    # ÀÌ ¹öÀüÀÌ ¾Æ´Ï¸é
    </IfVersion>

    operator¸¦ »ý·«Çϸé =À̶ó°í »ý°¢ÇÑ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_core.html.fr.utf80000644000000000000500000004201313412755316021376 0ustar rootsrc mod_authn_core - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authn_core

    Langues Disponibles:  en  |  fr 

    Description:Le noyau de l'authentification
    Statut:Base
    Identificateur de Module:authn_core_module
    Fichier Source:mod_authn_core.c
    Compatibilité:Disponible depuis la version 2.3 d'Apache

    Sommaire

    Ce module fournit le coeur des fonctionnalités d'authentification permettant d'accorder ou de refuser l'accès à certaines zones du site web. Les directives fournies par le module mod_authn_core sont communes à tous les fournisseurs d'authentification.

    top

    Création d'alias de fournisseurs d'authentification

    Il est possible de créer des fournisseurs d'authentification étendus dans le fichier de configuration et de leur assigner un alias. Le fournisseur ainsi nommé peut alors être référencé à l'aide des directives AuthBasicProvider ou AuthDigestProvider tout comme un fournisseur d'authentification de base. Outre la possibilité de créer et attribuer un alias à un fournisseur étendu, le même fournisseur d'authentification peut aussi être référencé par plusieurs sections relatives à une zone du site web.

    Exemples

    Cet exemple vérifie les mots de passe dans deux fichiers textes différents.

    Vérification dans plusieurs fichiers de mots de passe au format texte

    # Première vérification
    <AuthnProviderAlias file file1>
        AuthUserFile "/www/conf/passwords1"
    </AuthnProviderAlias>
    
    # Vérification suivante
    <AuthnProviderAlias file file2>   
        AuthUserFile "/www/conf/passwords2"
    </AuthnProviderAlias>
    
    <Directory "/var/web/pages/secure">
        AuthBasicProvider file1 file2
        
        AuthType Basic
        AuthName "Protected Area"
        Require valid-user
    </Directory>

    Dans l'exemple ci-dessous, deux fournisseurs d'authentification ldap sont créés à partir du fournisseur ldap de base, et se voient attribuer un alias. L'authentification d'une même zone peut alors être traitée par plusieurs serveurs ldap :

    Vérification auprès de plusieurs serveurs LDAP

    <AuthnProviderAlias ldap ldap-alias1>
        AuthLDAPBindDN cn=youruser,o=ctx
        AuthLDAPBindPassword yourpassword
        AuthLDAPURL ldap://ldap.host/o=ctx
        </AuthnProviderAlias>
        <AuthnProviderAlias ldap ldap-other-alias>
        AuthLDAPBindDN cn=yourotheruser,o=dev
        AuthLDAPBindPassword yourotherpassword
        AuthLDAPURL ldap://other.ldap.host/o=dev?cn
    </AuthnProviderAlias>
    
    Alias "/secure" "/webpages/secure"
    <Directory "/webpages/secure">
        
        AuthBasicProvider ldap-other-alias  ldap-alias1
        
        AuthType Basic
        AuthName LDAP_Protected Place
        Require valid-user
        # Notez que Require ldap-* ne fonctionnerait pas ici, car
        # AuthnProviderAlias ne fournit pas de configuration pour les
        # fournisseurs d'autorisation implémentés dans le même module que le
        # fournisseur d'authentification.
    </Directory>
    top

    Directive AuthName

    Description:L'identifiant de l'autorisation à utiliser avec l'authentification HTTP
    Syntaxe:AuthName domaine d'autorisation
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_authn_core

    Cette directive permet de définir l'identifiant d'autorisation pour un répertoire. Cet identifiant est fourni au client de façon à ce qu'il sache quels nom d'utilisateur et mot de passe envoyer. AuthName accepte un seul argument ; s'il contient des espaces, il doit être entouré de guillemets. Pour pouvoir fonctionner, la directive AuthName doit être utilisée en combinaison avec les directives AuthType et Require, ainsi que des directives comme AuthUserFile et AuthGroupFile.

    Par exemple :

    AuthName "Top Secret"

    La chaîne fournie comme argument à AuthName apparaîtra dans la boîte de dialogue d'authentification pour la plupart des navigateurs.

    Voir aussi

    top

    Directive <AuthnProviderAlias>

    Description:Regroupe un ensemble de directives qui constituent une extension d'un fournisseur d'authentification de base et lui attribue l'alias spécifié
    Syntaxe:<AuthnProviderAlias alias-fournisseur> ... </AuthnProviderAlias>
    Contexte:configuration globale
    Statut:Base
    Module:mod_authn_core

    Les balises <AuthnProviderAlias> et </AuthnProviderAlias> permettent de regrouper un ensemble de directives d'authentification qui seront référencées par l'alias spécifié à l'aide des directives AuthBasicProvider ou AuthDigestProvider.

    Cette directive n'a aucun influence sur le processus d'autorisation, même pour les modules qui fournissent à la fois l'authentification et l'autorisation.
    top

    Directive AuthType

    Description:Type d'authentification utilisateur
    Syntaxe:AuthType None|Basic|Digest|Form
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_authn_core

    Cette directive permet de définir le type d'authentification utilisateur pour un répertoire. Les types d'authentification disponibles sont None, Basic (implémenté par mod_auth_basic), Digest (implémenté par mod_auth_digest), et Form (implémenté par mod_auth_form).

    Pour mettre en oeuvre l'authentification, vous devez aussi utiliser les directives AuthName et Require. De plus, le serveur doit pouvoir disposer d'un module fournisseur d'authentification comme mod_authn_file et d'un module d'autorisation comme mod_authz_user.

    Le type d'authentification None désactive l'authentification. Lorsqu'une authentification est définie, elle est en général héritée par chacune des sections de configuration qui suivent, à moins qu'un autre type d'authentification ne soit spécifié. Si l'on ne souhaite pas mettre en oeuvre d'authentification pour une sous-section d'une section authentifiée, on doit utiliser le type d'authentification None ; dans l'exemple suivant, les clients peuvent accéder au répertoire /www/docs/public sans devoir s'authentifier :

    <Directory "/www/docs">
        AuthType Basic
        AuthName Documents
        AuthBasicProvider file
        AuthUserFile "/usr/local/apache/passwd/passwords"
        Require valid-user
    </Directory>
    
    <Directory "/www/docs/public">
        AuthType None
        Require all granted
    </Directory>
    Veuillez noter que, lorsque l'authentification n'est pas activée, les clients qui se sont déjà authentifiés pour une autre zone de l'arborescence du site continueront en général à envoyer des en-tête d'authentification HTTP ou des cookies avec chaque requête, sans se préoccuper de savoir si le serveur nécessite vraiment une authentification pour chaque ressource.

    Voir aussi

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_xml2enc.html.en0000644000000000000500000003644413425471055017737 0ustar rootsrc mod_xml2enc - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_xml2enc

    Available Languages:  en  |  fr 

    Description:Enhanced charset/internationalisation support for libxml2-based filter modules
    Status:Base
    Module Identifier:xml2enc_module
    Source File:mod_xml2enc.c
    Compatibility:Version 2.4 and later. Available as a third-party module for 2.2.x versions

    Summary

    This module provides enhanced internationalisation support for markup-aware filter modules such as mod_proxy_html. It can automatically detect the encoding of input data and ensure they are correctly processed by the libxml2 parser, including converting to Unicode (UTF-8) where necessary. It can also convert data to an encoding of choice after markup processing, and will ensure the correct charset value is set in the HTTP Content-Type header.

    top

    Usage

    There are two usage scenarios: with modules programmed to work with mod_xml2enc, and with those that are not aware of it:

    Filter modules enabled for mod_xml2enc

    Modules such as mod_proxy_html version 3.1 and up use the xml2enc_charset optional function to retrieve the charset argument to pass to the libxml2 parser, and may use the xml2enc_filter optional function to postprocess to another encoding. Using mod_xml2enc with an enabled module, no configuration is necessary: the other module will configure mod_xml2enc for you (though you may still want to customise it using the configuration directives below).

    Non-enabled modules

    To use it with a libxml2-based module that isn't explicitly enabled for mod_xml2enc, you will have to configure the filter chain yourself. So to use it with a filter foo provided by a module mod_foo to improve the latter's i18n support with HTML and XML, you could use

    
        FilterProvider iconv    xml2enc Content-Type $text/html
        FilterProvider iconv    xml2enc Content-Type $xml
        FilterProvider markup   foo Content-Type $text/html
        FilterProvider markup   foo Content-Type $xml
        FilterChain     iconv markup
        

    mod_foo will now support any character set supported by either (or both) of libxml2 or apr_xlate/iconv.

    top

    Programming API

    Programmers writing libxml2-based filter modules are encouraged to enable them for mod_xml2enc, to provide strong i18n support for your users without reinventing the wheel. The programming API is exposed in mod_xml2enc.h, and a usage example is mod_proxy_html.

    top

    Detecting an Encoding

    Unlike mod_charset_lite, mod_xml2enc is designed to work with data whose encoding cannot be known in advance and thus configured. It therefore uses 'sniffing' techniques to detect the encoding of HTTP data as follows:

    1. If the HTTP Content-Type header includes a charset parameter, that is used.
    2. If the data start with an XML Byte Order Mark (BOM) or an XML encoding declaration, that is used.
    3. If an encoding is declared in an HTML <META> element, that is used.
    4. If none of the above match, the default value set by xml2EncDefault is used.

    The rules are applied in order. As soon as a match is found, it is used and detection is stopped.

    top

    Output Encoding

    libxml2 always uses UTF-8 (Unicode) internally, and libxml2-based filter modules will output that by default. mod_xml2enc can change the output encoding through the API, but there is currently no way to configure that directly.

    Changing the output encoding should (in theory, at least) never be necessary, and is not recommended due to the extra processing load on the server of an unnecessary conversion.

    top

    Unsupported Encodings

    If you are working with encodings that are not supported by any of the conversion methods available on your platform, you can still alias them to a supported encoding using xml2EncAlias.

    top

    xml2EncAlias Directive

    Description:Recognise Aliases for encoding values
    Syntax:xml2EncAlias charset alias [alias ...]
    Context:server config
    Status:Base
    Module:mod_xml2enc

    This server-wide directive aliases one or more encoding to another encoding. This enables encodings not recognised by libxml2 to be handled internally by libxml2's encoding support using the translation table for a recognised encoding. This serves two purposes: to support character sets (or names) not recognised either by libxml2 or iconv, and to skip conversion for an encoding where it is known to be unnecessary.

    top

    xml2EncDefault Directive

    Description:Sets a default encoding to assume when absolutely no information can be automatically detected
    Syntax:xml2EncDefault name
    Context:server config, virtual host, directory, .htaccess
    Status:Base
    Module:mod_xml2enc

    If you are processing data with known encoding but no encoding information, you can set this default to help mod_xml2enc process the data correctly. For example, to work with the default value of Latin1 (iso-8859-1) specified in HTTP/1.0, use:

    xml2EncDefault iso-8859-1
    top

    xml2StartParse Directive

    Description:Advise the parser to skip leading junk.
    Syntax:xml2StartParse element [element ...]
    Context:server config, virtual host, directory, .htaccess
    Status:Base
    Module:mod_xml2enc

    Specify that the markup parser should start at the first instance of any of the elements specified. This can be used as a workaround where a broken backend inserts leading junk that messes up the parser (example here).

    It should never be used for XML, nor well-formed HTML.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cgi.html.ja.utf80000644000000000000500000004734613412755316020012 0ustar rootsrc mod_cgi - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_cgi

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:CGI スクリプトã®å®Ÿè¡Œ
    ステータス:Base
    モジュール識別å­:cgi_module
    ソースファイル:mod_cgi.c

    概è¦

    ãƒãƒ³ãƒ‰ãƒ© cgi-script ãŒæŒ‡å®šã•れã¦ã„るファイル㯠CGI スクリプトã¨ã—ã¦æ‰±ã‚れ〠サーãƒã«ã‚ˆã‚Šå®Ÿè¡Œã•れã€ãã®å‡ºåŠ›ãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«è¿”ã•れã¾ã™ã€‚ ファイルã¯ã€AddHandler ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«æŒ‡å®šã•れ㟠拡張å­ã‚’åå‰ã«å«ã‚€ã‹ã€ ScriptAlias ディレクトリã«å­˜åœ¨ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã“ã®ãƒãƒ³ãƒ‰ãƒ©ã«ãªã‚Šã¾ã™ã€‚

    Apache ã§ CGI スクリプトを使用ã™ã‚‹ãŸã‚ã®ã‚¤ãƒ³ãƒˆãƒ­ãƒ€ã‚¯ã‚·ãƒ§ãƒ³ã¯ã€ CGI ã«ã‚ˆã‚‹å‹•的コンテンツ ã‚’å‚ç…§ã—ã¦ãã ã•ã„。

    Unix ã§ãƒžãƒ«ãƒã‚¹ãƒ¬ãƒƒãƒ‰ã® MPM を使ã£ã¦ã„ã‚‹å ´åˆã¯ã€ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã® 代ã‚り㫠mod_cgid を使ã†å¿…è¦ãŒã‚りã¾ã™ã€‚ ユーザレベルã§ã¯ã“ã®äºŒã¤ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯æœ¬è³ªçš„ã«ã¯åŒä¸€ã§ã™ã€‚

    å¾Œæ–¹äº’æ›æ€§ã®ãŸã‚〠MIME タイプ㌠application/x-httpd-cgi ã§ã‚るファイルã§ã‚‚ cgi-script ãƒãƒ³ãƒ‰ãƒ©ãŒæœ‰åйã«ãªã‚Šã¾ã™ã€‚ã“ã®ç‰¹æ®Šãª MIME タイプを ä½¿ã†æ–¹æ³•ã¯éžæŽ¨å¥¨ã§ã™ã€‚

    top

    CGI 環境変数

    サーãƒã¯ CGI è¦æ ¼ ã§æ±ºã‚られã¦ã„ã‚‹ CGI 環境変数を設定ã—ã¾ã™ã€‚以下ã®ã‚‚ã®ã¯ã€æ¡ä»¶ä»˜ãã§è¨­å®šã•れã¾ã™ã€‚

    PATH_INFO
    ã“れ㯠AcceptPathInfo ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæ˜Žç¤ºçš„ã« off ã«è¨­å®šã•れã¦ã„ã‚‹å ´åˆã¯è¨­å®šã•れã¾ã›ã‚“。デフォルトã®ã€ AcceptPathInfo ㌠指定ã•れã¦ã„ãªã„ã¨ãã®æŒ¯ã‚‹èˆžã„ã§ã¯ã€mod_cgi ã¯ãƒ‘ス情報 (URI ã®ã‚¹ã‚¯ãƒªãƒ—トã®ãƒ•ァイルåã®å¾Œã«ç¶šã /more/path/info) ã‚’ å—ã‘付ã‘ã¾ã™ãŒã€ã‚³ã‚¢ã¯ã‚µãƒ¼ãƒã¯ãƒ‘ス情報ã®ã‚るリクエスト㫠対ã—㦠404 NOT FOUND エラーを返ã—ã¾ã™ã€‚AcceptPathInfo ディレクティブを çœç•¥ã™ã‚‹ã¨ã€mod_cgi ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—㦠On ã‚’ 設定ã—ãŸã®ã¨åŒã˜åŠ¹æžœã«ãªã‚Šã¾ã™ã€‚
    REMOTE_HOST
    HostnameLookups ㌠on (デフォルトã§ã¯ off ã§ã™) ã§ã€ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã„るホストã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã® DNS ã®é€†å¼•ããŒå®Ÿéš›ã«ãƒ›ã‚¹ãƒˆåを見ã¤ã‘ãŸã¨ãã«ã®ã¿è¨­å®šã•れã¾ã™ã€‚
    REMOTE_IDENT
    IdentityCheck ㌠on ã«è¨­å®šã•れã¦ã„ã¦ã€ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã„るホスト㌠ident プロトコルをサãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã¨ãã«ã®ã¿è¨­å®šã•れã¾ã™ã€‚ ã“れã¯ç°¡å˜ã«å½ã‚‹ã“ã¨ãŒã§ãã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒã®é–“㫠プロキシãŒã‚れã°ã¾ã£ãŸãå½¹ã«ç«‹ãŸãªã„ã®ã§ã€ ã“ã®å¤‰æ•°ã®å€¤ã¯ä¿¡ç”¨ã§ããªã„ã¨ã„ã†ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。
    REMOTE_USER
    CGI スクリプトã«èªè¨¼ãŒå¿…è¦ãªã¨ãã«ã®ã¿è¨­å®šã•れã¾ã™ã€‚
    top

    CGI ã®ãƒ‡ãƒãƒƒã‚°

    CGI スクリプトã®ãƒ‡ãƒãƒƒã‚°ã¯ã€æ­£ã—ã動作ã—ã¦ã„ãªã„スクリプトã®å‡ºåŠ› (標準出力ã¨ã‚¨ãƒ©ãƒ¼) を調ã¹ã‚‹ã“ã¨ãŒã§ããªã„ãŸã‚ã«ã€é›£ã—ã„状態ãŒç¶šã„ã¦ã„ã¾ã—ãŸã€‚ ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚ˆã‚Šè©³ç´°ãªã‚¨ãƒ©ãƒ¼ã®ãƒ­ã‚°åŽé›†ã‚’æä¾›ã—ã¾ã™ã€‚

    CGI ãƒ­ã‚°ãƒ•ã‚¡ã‚¤ãƒ«ã®æ›¸å¼

    設定ã•れã¦ã„ã‚‹ã¨ãã«ã¯ã€CGI エラーログã¯é©åˆ‡ã«å‹•作ã—ãªã„ã™ã¹ã¦ã® CGI をログåŽé›†ã—ã¾ã™ã€‚ãれãžã‚Œã®æ­£ã—ã動作ã—ãªã„ CGI スクリプト㯠複数ã®è¡Œã«ã‚ãŸã‚‹æƒ…å ±ãŒãƒ­ã‚°åŽé›†ã•れã¾ã™ã€‚最åˆã® 2 行ã¯å¸¸ã«ä»¥ä¸‹ã®æ›¸å¼ã§ã™:

    %% [time] request-line
    %% HTTP-status CGI-script-filename

    エラーãŒã€CGI スクリプトãŒå®Ÿè¡Œã§ããªã„ã¨ã„ã†ã‚‚ã®ã§ã‚ã‚‹å ´åˆã¯ã€ ログファイルã¯ã•らã«ã‚‚ㆠ2 行書ã‹ã‚Œã¾ã™:

    %%error
    error-message

    ãã†ã§ã¯ãªãã€ã‚¨ãƒ©ãƒ¼ãŒæ­£ã—ããªã„ヘッダ情報を返ã™çµæžœã§ã‚ã‚‹å ´åˆ (スクリプトã®ãƒã‚°ã§ã‚ã‚‹ã“ã¨ãŒã‚ˆãã‚りã¾ã™)ã€ ä»¥ä¸‹ã®æƒ…å ±ãŒãƒ­ã‚°åŽé›†ã•れã¾ã™:

    %request
    å—ã‘å–ã£ãŸã™ã¹ã¦ã® HTTP リクエストヘッダ
    (ã‚‚ã—ã‚れã°) POST ã‚„ PUT ã®ä¸­èº«
    %response
    CGI スクリプトã«ã‚ˆã‚Šå‡ºåŠ›ã•れãŸã™ã¹ã¦ã®ãƒ˜ãƒƒãƒ€
    %stdout
    CGI 標準出力
    %stderr
    CGI 標準エラー

    (ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒæ¨™æº–出力や標準エラーã«ä½•も出力ã—ãªã‹ã£ãŸå ´åˆã¯ã€ %stdout ã‚„ %stderr ã¯ã‚りã¾ã›ã‚“)。

    top

    ScriptLog ディレクティブ

    説明:CGI スクリプトã®ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ãƒ•ァイルã®å ´æ‰€
    æ§‹æ–‡:ScriptLog file-path
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Base
    モジュール:mod_cgi, mod_cgid

    ScriptLog ディレクティブ㯠CGI スクリプト㮠エラーログファイルを設定ã—ã¾ã™ã€‚ScriptLog ㌠設定ã•れã¦ã„ãªã„ã¨ãã¯ã€ エラーログã¯ä½œæˆã•れã¾ã›ã‚“。設定ã•れã¦ã„ã‚‹ã¨ãã¯ã€CGI ã®ã‚¨ãƒ©ãƒ¼ã¯ã™ã¹ã¦å¼•æ•°ã¨ã—ã¦ä¸Žãˆã‚‰ã‚Œã¦ã„るファイルåã«ãƒ­ã‚°ã•れã¾ã™ã€‚ ç›¸å¯¾ãƒ‘ã‚¹ã§æŒ‡å®šã•れã¦ã„ã‚‹ã¨ãã¯ã€ ServerRootã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ã—㦠扱ã‚れã¾ã™ã€‚

    例

    ScriptLog logs/cgi_log

    ã“ã®ãƒ­ã‚°ã¯å­ãƒ—ロセスãŒå®Ÿè¡Œã•れã¦ã„るユーザã¨ã—ã¦ã‚ªãƒ¼ãƒ—ンã•れã¾ã™ã€‚ ã™ãªã‚ã¡ã€User ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã•れ㟠ユーザã§ã™ã€‚ã“れã¯ã€ã‚¹ã‚¯ãƒªãƒ—ãƒˆãƒ­ã‚°ãŒæ›¸ã‹ã‚Œã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãŒãã®ãƒ¦ãƒ¼ã‚¶ã§ 書ãè¾¼ã¿å¯èƒ½ã‹ã€ã‚¹ã‚¯ãƒªãƒ—ãƒˆãƒ•ã‚¡ã‚¤ãƒ«ãŒæ‰‹å‹•ã§ä½œæˆã•れã€ãã®ãƒ¦ãƒ¼ã‚¶ã§ 書ãè¾¼ã¿å¯èƒ½ã«ãªã£ã¦ã„ã‚‹å¿…è¦ãŒã‚ã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚スクリプトログを アクセスログãªã©ã®ãŸã‚ã®ãƒ­ã‚°ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«æ›¸ã‹ã‚Œã‚‹ã‚ˆã†ã«ã—ãŸã¨ãã¯ã€ ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’å­ãƒ—ロセスを実行ã—ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ã®æ¨©é™ã§ 書ãè¾¼ã¿å¯èƒ½ã«ã¯ã—ãªã„よã†ã«ã—ã¦ãã ã•ã„。

    スクリプトã®ãƒ­ã‚°åŽé›†ã¯ CGI スクリプトを書ãã¨ã㮠デãƒãƒƒã‚°ç”¨ã®æ©Ÿèƒ½ã¨ã—ã¦æ„図ã•れã¦ã„ã¦ã€é€šå¸¸ã®ã‚µãƒ¼ãƒã§ 常ã«ä½¿ç”¨ã•れるよã†ã«ã¯æ„図ã•れã¦ã„ãªã„ã¨ã„ã†ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。 é€Ÿåº¦ã‚„åŠ¹çŽ‡ã¯æœ€é©åŒ–ã•れã¦ãŠã‚‰ãšã€è¨­è¨ˆã•れãŸä»¥å¤–ã®æ–¹æ³•ã§ä½¿ç”¨ã•れる㨠セキュリティã®å•題ãŒã‚ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。

    top

    ScriptLogBuffer ディレクティブ

    説明:スクリプトログã«è¨˜éŒ²ã•れる PUT ã‚„ POST リクエストã®å†…容ã®ä¸Šé™
    æ§‹æ–‡:ScriptLogBuffer bytes
    デフォルト:ScriptLogBuffer 1024
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Base
    モジュール:mod_cgi, mod_cgid

    大ããªæœ¬ä½“ã‚’å—ã‘å–ã£ãŸã¨ãã«ãƒ­ã‚°ãƒ•ァイルãŒã™ãã«å¤§ãããªã‚Šã™ãŽã‚‹ å•題をé¿ã‘ã‚‹ãŸã‚ã«ã€ãƒ•ァイルã«ãƒ­ã‚°åŽé›†ã•れる PUT 㨠POST ã®æœ¬ä½“ã®å¤§ãã•ã¯åˆ¶é™ã•れã¦ã„ã¾ã™ã€‚デフォルトã§ã¯ã€1024 ãƒã‚¤ãƒˆã¾ã§ãŒãƒ­ã‚°åŽé›†ã•れã¾ã™ãŒã€ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãれを変更ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    top

    ScriptLogLength ディレクティブ

    説明:CGI スクリプトã®ãƒ­ã‚°ãƒ•ァイルã®å¤§ãã•ã®ä¸Šé™
    æ§‹æ–‡:ScriptLogLength bytes
    デフォルト:ScriptLogLength 10385760
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Base
    モジュール:mod_cgi, mod_cgid

    ScriptLogLength 㯠CGI スクリプトã®ãƒ­ã‚°ãƒ•ァイル ã®å¤§ãã•を制é™ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ログファイル㯠CGI ã®ã‚¨ãƒ©ãƒ¼æ¯Žã«å¤§é‡ã®æƒ…å ± (リクエストã®ã™ã¹ã¦ã®ãƒ˜ãƒƒãƒ€ã€ ã™ã¹ã¦ã®å‡ºåŠ›)をログã—ã¾ã™ã®ã§ã€ã™ãã«å¤§ããªãƒ•ァイルã«ãªã‚Šã¾ã™ã€‚ ã“ã®å¤§ãã•ã®åˆ¶é™ãŒãªã„ã“ã¨ã«ã‚ˆã‚‹å•題を防ããŸã‚ã«ã€ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を使ã£ã¦ CGI ã®ãƒ­ã‚°ãƒ•ァイル㮠最大ã®ãƒ•ァイルサイズを設定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ファイルãŒã“ã®å¤§ãã•ã‚’è¶…ãˆãŸå ´åˆã¯ã€ãã‚Œä»¥ä¸Šã¯æ›¸ãè¾¼ã¾ã‚Œã¾ã›ã‚“。

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_dbm.html.en0000644000000000000500000003130613412755316020321 0ustar rootsrc mod_authn_dbm - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authn_dbm

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:User authentication using DBM files
    Status:Extension
    Module Identifier:authn_dbm_module
    Source File:mod_authn_dbm.c
    Compatibility:Available in Apache 2.1 and later

    Summary

    This module provides authentication front-ends such as mod_auth_digest and mod_auth_basic to authenticate users by looking up users in dbm password files. Similar functionality is provided by mod_authn_file.

    When using mod_auth_basic or mod_auth_digest, this module is invoked via the AuthBasicProvider or AuthDigestProvider with the dbm value.

    top

    AuthDBMType Directive

    Description:Sets the type of database file that is used to store passwords
    Syntax:AuthDBMType default|SDBM|GDBM|NDBM|DB
    Default:AuthDBMType default
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authn_dbm

    Sets the type of database file that is used to store the passwords. The default database type is determined at compile time. The availability of other types of database files also depends on compile-time settings.

    For example, in order to enable the support for Berkeley DB (correspondent to the db type) the --with-berkeley-db option needs to be added to httpd's configure to generate the necessary DSO.

    It is crucial that whatever program you use to create your password files is configured to use the same type of database.

    top

    AuthDBMUserFile Directive

    Description:Sets the name of a database file containing the list of users and passwords for authentication
    Syntax:AuthDBMUserFile file-path
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Extension
    Module:mod_authn_dbm

    The AuthDBMUserFile directive sets the name of a DBM file containing the list of users and passwords for user authentication. File-path is the absolute path to the user file.

    The user file is keyed on the username. The value for a user is the encrypted password, optionally followed by a colon and arbitrary data. The colon and the data following it will be ignored by the server.

    Security:

    Make sure that the AuthDBMUserFile is stored outside the document tree of the web-server; do not put it in the directory that it protects. Otherwise, clients will be able to download the AuthDBMUserFile.

    The encrypted password format depends on which authentication frontend (e.g. mod_auth_basic or mod_auth_digest) is being used. See Password Formats for more information.

    Important compatibility note: The implementation of dbmopen in the Apache modules reads the string length of the hashed values from the DBM data structures, rather than relying upon the string being NULL-appended. Some applications, such as the Netscape web server, rely upon the string being NULL-appended, so if you are having trouble using DBM files interchangeably between applications this may be a part of the problem.

    A perl script called dbmmanage is included with Apache. This program can be used to create and update DBM format password files for use with this module. Another tool for maintaining the DBM files is the included program htdbm.

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_unixd.html0000644000000000000500000000045713362070302017076 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_unixd.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_unixd.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_unixd.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_mime.html0000644000000000000500000000045413362070302016673 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_mime.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_mime.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_mime.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_log_config.html.fr.utf80000644000000000000500000011402313447706537021367 0ustar rootsrc mod_log_config - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_log_config

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Journalisation des requêtes envoyées au serveur
    Statut:Base
    Identificateur de Module:log_config_module
    Fichier Source:mod_log_config.c

    Sommaire

    Ce module apporte une grande souplesse dans la journalisation des requêtes des clients. Les journaux sont écrits sous un format personnalisable, et peuvent être enregistrés directement dans un fichier, ou redirigés vers un programme externe. La journalisation conditionnelle est supportée, si bien que des requêtes individuelles peuvent être incluses ou exclues des journaux en fonction de leur caractéristiques.

    Ce module fournit trois directives : TransferLog crée un fichier journal, LogFormat définit un format personnalisé, et CustomLog définit un fichier journal et un format en une seule étape. Pour journaliser les requêtes dans plusieurs fichiers, vous pouvez utiliser plusieurs fois les directives TransferLog et CustomLog dans chaque serveur.

    top

    Formats de journaux personnalisés

    L'argument format des directives LogFormat et CustomLog est une chaîne de caractères. Cette chaîne définit le format de la journalisation des requêtes dans le fichier journal. Elle peut contenir des caractères littéraux qui seront reproduits dans le fichier journal, et les caractères de contrôle de style C "\n" et "\t" représentant respectivement une nouvelle ligne et une tabulation. Les guillemets et les anti-slashes littéraux doivent être échappés à l'aide d'anti-slashes.

    Les caractéristiques de la requête en elle-même sont journalisées en insérant des directives "%" dans la chaîne de format, celles-ci étant remplacées dans le fichier journal par certaines valeurs comme suit :

    Chaîne de format Description
    %% Le signe "pourcentage"
    %a L'adresse IP distante (voir le module mod_remoteip).
    %{c}a Adresse IP distante de la connexion(voir le module mod_remoteip)
    %A L'adresse IP locale
    %B La taille de la réponse en octets, en excluant les en-têtes HTTP.
    %b La taille de la réponse en octets, en excluant les en-têtes HTTP. Au format CLF , c'est à dire un '-' à la place d'un 0 lorsqu'aucun octet n'est renvoyé.
    %{NOMVAR}C Le contenu du cookie NOMVAR dans la requête envoyée au serveur. Seuls les cookies version 0 sont pleinement supportés.
    %D Le temps mis à servir la requête, en microsecondes.
    %{NOMVAR}e Le contenu de la variable d'environnement NOMVAR
    %f Nom de fichier
    %h Serveur distant. Contiendra l'adresse IP si la directive HostnameLookups est définie à Off, ce qui est sa valeur par défaut. Si cette adresse IP n'est enregistrée que pour certains serveurs, vous avez probablement défini des directives de contrôle d'accès qui mentionnent ces derniers par leurs noms. Voir la documentation de Require host.
    %{c}h Semblable à %h, mais exploite toujours le nom d'hôte de la connection TCP sous-jacente, en ignorant toute modification réalisée sur le nom d'hôte distant par des modules tels que mod_remoteip.
    %H Le protocole de la requête
    %{NOMVAR}i Le contenu des lignes d'en-tête NOMVAR: dans la requête envoyée au serveur. Ces en-têtes sont ajoutés par d'autres modules (par exemple mod_headers). Si vous êtes intéressé par ce qu'était l'en-tête de la requête avant d'être modifié par la plupart des modules, utilisez mod_setenvif pour copier l'en-tête dans une variable d'environnement interne et journaliser sa valeur via le champ %{VARNAME}e décrit plus haut.
    %k Nombre de requêtes persistantes en cours pour cette connexion. Interessant si la directive KeepAlive est utilisée ; par exemple, '1' signifie la première requête après la requête initiale, '2' la seconde, etc... ; autrement, il s'agit toujours de 0 (indiquant la requête initiale).
    %l Le nom de connexion distant (en provenance d'identd, si disponible). Affiche un tiret, sauf si mod_ident est présent et si IdentityCheck est à On.
    %L L'identifiant du message de journalisation de la requête dans le journal des erreurs (ou '-' si aucun message n'a été enregistré dans le journal des erreurs pour cette requête)
    %m La méthode de la requête
    %{NOMVAR}n Le contenu de la note NOMVAR en provenance d'un autre module.
    %{NOMVAR}o Le contenu de la ligne d'en-tête NOMVAR: de la réponse.
    %p Le port canonique du serveur servant la requête
    %{format}p Le port canonique du serveur servant la requête ou le véritable port du serveur ou le véritable port du client. les formats valides sont canonical, local, ou remote.
    %P Le numéro de processus du processus enfant qui a servi la requête.
    %{format}P Le numéro de processus ou le numéro de thread du processus enfant qui a servi la requête. Les formats valides sont pid, tid, et hextid. hextid nécessite APR version 1.2.0 ou supérieure.
    %q La chaîne d'arguments (préfixée par un ? si une chaîne d'arguments existe, sinon une chaîne vide)
    %r La première ligne de la requête
    %R Le gestionnaire qui génère la réponse (s'il y en a un).
    %s Statut. Pour les requêtes redirigées en interne, il s'agit du statut de la requête *originale* --- %>s pour la dernière.
    %t Date à laquelle la requête a été reçue (au format anglais standard)
    %{format}t La date, sous la forme spécifiée par format, qui devrait être au format étendu strftime(3) (éventuellement localisé). Si le format commence par begin: (valeur par défaut), la date est extraite au début du traitement de la requête ; s'il commence par end:, la date correspond au moment où l'entrée du journal est inscrite, par conséquent vers la fin du traitement de la requête. Hormis les formats supportés par strftime(3), les formats suivants sont aussi disponibles :
    secnombre de secondes depuis Epoch
    msecnombre de millisecondes depuis Epoch
    usecnombre de microsecondes depuis Epoch
    msec_fracfraction de milliseconde
    usec_fracfraction de microseconde
    Ces symboles ne peuvent pas être combinés entre eux ou avec un formatage strftime(3) dans la même chaîne de format. Par contre, vous pouvez utiliser plusieurs symboles %{format}t.
    %T Le temps mis pour servir la requête, en secondes.
    %{UNIT}T Le temps mis pour traiter la requête dans une unité définie par UNIT. Les valeurs d'unité valides sont ms pour millisecondes, us pour microsecondes et s pour secondes. Si UNIT est omis, la valeur de l'unité par défaut est la seconde ; spécifier la valeur d'unité us revient à utiliser le format %D. La possibilité de spécifier une valeur d'unité avec le format %T est disponible depuis la version 2.4.13 du serveur HTTP Apache.
    %u L'utilisateur distant (en provenance d'auth ; peut être faux si le statut de retour (%s) est 401).
    %U Le chemin de la requête, à l'exclusion de toute chaîne d'arguments.
    %v Le nom canonique du serveur qui a servi la requête, défini par la directive ServerName.
    %V La nom du serveur en tenant compte de la définition de la directive UseCanonicalName.
    %X Statut de la connexion lorsque la réponse a été renvoyée :
    X = connexion abandonnée avant l'envoi de la réponse.
    + = la connexion peut rester ouverte après l'envoi de la réponse.
    - = la connexion sera fermée après l'envoi de la réponse.
    %I Le nombre d'octets reçus, en comptant la requête et les en-têtes, ne peut être nul. Nécessite l'activation de mod_logio.
    %O Nombre d'octets envoyés, y compris les en-têtes. Peut être nul dans les rares cas où une requête est avortée avant que la réponse ne soit envoyée. Nécessite l'activation de mod_logio.
    %S Nombre d'octets transmis (en émission et réception), y compris corps et en-têtes de requête. Ce nombre ne peut pas être nul, et il correspond à la combinaison des formats %I et %O. mod_logio doit être chargé pour pouvoir utiliser ce format.
    %{VARNAME}^ti Le contenu de VARNAME: dans les paramètres de la requête envoyée au serveur.
    %{VARNAME}^to Le contenu de VARNAME: dans les paramètres de la réponse envoyée par le serveur.

    Modificateurs

    Il est possible de restreindre l'enregistrement de certains éléments en fonction du code de statut de la réponse, en insérant une liste de codes de statut séparés par des virgules immédiatement après le caractère "%". Par exemple, "%400,501{User-agent}i" n'enregistrera l'en-tête User-agent que dans le cas d'une erreur 400 ou 501. Avec les autres codes de statut, c'est la chaîne littérale "-" qui sera enregistrée. La liste de codes peut être précédée d'un "!" pour inverser la condition : "%!200,304,302{Referer}i" enregistre l'en-tête Referer pour toutes les requêtes qui ne renvoient pas un des trois codes spécifiés.

    Les modificateurs "<" et ">" peuvent être utilisés pour les requêtes qui ont été redirigées en interne afin de choisir si c'est respectivement la requête originale ou finale qui doit être consultée. Par défaut, les directives %s, %U, %T, %D, et %r consultent la requête originale, alors que toutes les autres consultent la requête finale. Ainsi, par exemple, on peut utiliser %>s pour enregistrer le statut final de la requête, et %<u pour enregistrer l'utilisateur authentifié à l'origine pour une requête redirigée en interne vers une ressource sans authentification.

    Quelques Notes

    Pour des raisons de sécurité, à partir de la version 2.0.46, les caractères non imprimables et autres caractères spéciaux dans les directives %r, %i et %o doivent être échappés à l'aide des séquences \xhh, où hh est le code hexadécimal du caractère spécial. Comme exceptions à cette règle, les caractères " et \ doivent être échappés par un anti-slash, et tous les "blancs" doivent être écrits selon leur notation de style C (\n, \t, etc...). Avant la version 2.0.46, aucun échappement n'était effectué sur ces chaînes, et il fallait être très prudent lors de l'exploitation des journaux bruts.

    A la différence de la version 1.3, depuis httpd 2.0, les chaînes de format %b et %B ne représentent pas le nombre d'octets envoyés au client, mais simplement la taille en octets de la réponse HTTP (les deux étant différents, par exemple, si la connexion est abandonnée, ou si SSL est utilisé). Le format %O fourni par mod_logio, enregistrera le nombre réel d'octets envoyés sur le réseau.

    Note : mod_cache est implémenté en tant que gestionnaire basique et non en tant que gestionnaire standard. C'est pourquoi la chaîne de format %R ne renverra pas d'information à propos du gestionnaire lorsqu'une mise en cache de contenu entre en jeu.

    Exemples

    Quelques chaînes de format couramment utilisées :

    Format de journal courant (CLF)
    "%h %l %u %t \"%r\" %>s %b"
    Format de journal courant avec un serveur virtuel
    "%v %h %l %u %t \"%r\" %>s %b"
    Format de journal NCSA étandu/combiné
    "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\""
    Format de journal de la page qui contient le lien vers la page concernée (Referer)
    "%{Referer}i -> %U"
    Format de journal de l'agent (Navigateur)
    "%{User-agent}i"

    Vous pouvez utiliser plusieurs fois la directive %{format}t pour construire un format de temps utilisant les symboles de format étendus tels que msec_frac :

    Format de temps prenant en compte les milisecondes
    "%{%d/%b/%Y %T}t.%{msec_frac}t %{%z}t"
    top

    Considérations concernant la sécurité

    Voir le document conseils à matière de sécurité pour plus de détails sur les raisons pour lesquelles votre sécurité pourrait être compromise, si le répertoire où sont stockés les fichiers journaux sont inscriptibles par tout autre utilisateur que celui qui démarre le serveur.

    top

    Directive BufferedLogs

    Description:Enregistre les entrées du journal dans un tampon en mémoire avant de les écrire sur disque
    Syntaxe:BufferedLogs On|Off
    Défaut:BufferedLogs Off
    Contexte:configuration globale
    Statut:Base
    Module:mod_log_config

    Lorsque la directive BufferedLogs est à "on", mod_log_config stocke de nombreuses entrées du journal en mémoire, et les écrit d'un seul bloc sur disque, plutôt que de les écrire après chaque requête. Sur certains systèmes, ceci peut améliorer l'efficacité des accès disque, et par conséquent les performances. La directive ne peut être définie qu'une seule fois pour l'ensemble du serveur ; elle ne peut pas être définie au niveau d'un serveur virtuel.

    Cette directive doit être utilisée avec précautions car un crash peut provoquer la perte de données de journalisation.
    top

    Directive CustomLog

    Description:Définit le nom et le format du fichier journal
    Syntaxe:CustomLog fichier|pipe format|alias [env=[!]variable-environnement| expr=expression]
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_log_config

    La directive CustomLog permet de contrôler la journalisation des requêtes destinées au serveur. Un format de journal est spécifié, et la journalisation peut s'effectuer de manière conditionnelle en fonction des caractéristiques de la requête en utilisant des variables d'environnement.

    Le premier argument, qui spécifie l'emplacement où les journaux seront écrits, accepte deux types de valeurs :

    fichier
    Un nom de fichier, relatif au répertoire défini par la directive ServerRoot.
    pipe
    Le caractère pipe "|", suivi du chemin vers un programme qui recevra les informations de la journalisation sur son entrée standard. Voir les notes à propos de la journalisation redirigée pour plus d'informations.

    Sécurité :

    Si les journaux sont redirigés vers un programme, ce dernier s'exécutera sous l'utilisateur qui a démarré httpd. Ce sera l'utilisateur root si le serveur a été démarré par root ; vérifiez que le programme est sécurisé.

    Note

    Lors de la spécification d'un chemin de fichier sur les plate-formes non-Unix, il faut prendre soin de ne pas oublier que seuls les slashes directs doivent être utilisés, même si la plate-forme autorise l'emploi d'anti-slashes. D'une manière générale, c'est une bonne idée que de n'utiliser que des slashes directs dans les fichiers de configuration.

    Le second argument permet de définir ce qui va être écrit dans le fichier journal. Il peut contenir soit un alias prédéfini par une directive LogFormat, soit une chaîne de format explicite comme décrit dans la section formats de journaux.

    Par exemple, les deux blocs de directives suivants produisent le même effet :

    # Journal personnalisé avec alias de format
    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    CustomLog "logs/access_log" common
    
    # Journal personnalisé avec chaîne de format explicite
    CustomLog "logs/access_log" "%h %l %u %t \"%r\" %>s %b"

    Le troisième argument est optionnel et permet de contrôler si une requête doit être ou non journalisée. Dans le cas d'une clause 'env=!nom', la condition peut être la présence ou l'absence d'une variable particulière dans l'environnement du serveur. Dans le cas d'une clause 'expr=expression', la condition consiste en une expression booléenne quelconque. Si la condition n'est pas vérifiée, la requête ne sera pas journalisée. D'éventuelles références à des en-têtes HTTP dans l'expression rationnelle n'entraîneront pas l'ajout des noms d'en-tête correspondants à l'en-tête Vary.

    Les variables d'environnement peuvent être définies au niveau de chaque requête en utilisant les modules mod_setenvif et/ou mod_rewrite. Par exemple, si vous voulez enregistrer les requêtes pour toutes les images GIF sur votre serveur dans un fichier journal séparé, et pas dans votre journal principal, vous pouvez utiliser :

    SetEnvIf Request_URI \.gif$ gif-image
    CustomLog "gif-requests.log" common env=gif-image
    CustomLog "nongif-requests.log" common env=!gif-image

    Ou, pour reproduire le comportement de l'ancienne directive RefererIgnore, vous pouvez utiliser :

    SetEnvIf Referer example\.com localreferer
    CustomLog "referer.log" referer env=!localreferer
    top

    Directive GlobalLog

    Description:Définit le nom et le format du fichier journal
    Syntaxe:GlobalLogfile|pipe format|nickname [env=[!]environment-variable| expr=expression]
    Contexte:configuration globale
    Statut:Base
    Module:mod_log_config
    Compatibilité:Disponible à partir de la version 2.4.19 du serveur HTTP Apache

    La directive GlobalLog permet de spécifier un journal partagé entre le serveur principal et tous les serveurs virtuels définis.

    Elle est identique à la directive CustomLog à ces différences près :

    • Elle n'est pas valide dans un contexte de serveur virtuel.
    • A la différence d'une directive CustomLog définie globalement, elle est prise en compte par les serveurs virtuels qui définissent leur propre directive CustomLog.
    top

    Directive LogFormat

    Description:Décrit un format utilisable dans un fichier journal
    Syntaxe:LogFormat format|alias [alias]
    Défaut:LogFormat "%h %l %u %t \"%r\" %>s %b"
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_log_config

    Cette directive permet de spécifier le format du fichier journal des accès.

    La directive LogFormat se présente sous deux formes. Sous la première forme, qui ne possède qu'un seul argument, la directive définit le format qui sera utilisé dans les journaux spécifiés par les directives TransferLog ultérieures. L'argument unique peut contenir un format explicite comme décrit dans la section formats de journaux personnalisés ci-dessus. Il peut aussi contenir un alias faisant référence à un format de journal prédéfini par une directive LogFormat comme décrit plus loin.

    Sous sa seconde forme, la directive LogFormat associe un format explicite à un alias. Cet alias peut ensuite s'utiliser dans les directives LogFormat ou CustomLog ultérieures, ce qui évite d'avoir à répéter l'ensemble de la chaîne de format. Une directive LogFormat qui définit un alias ne fait rien d'autre -- c'est à dire qu'elle ne fait que définir l'alias, elle n'applique pas le format et n'en fait pas le format par défaut. Par conséquent, elle n'affecte pas les directives TransferLog ultérieures. En outre, la directive LogFormat ne peut pas utiliser un alias pour en définir un autre. Notez que l'alias ne doit pas contenir de caractère pourcent (%).

    Exemple

    LogFormat "%v %h %l %u %t \"%r\" %>s %b" serveur_virtuel_commun
    top

    Directive TransferLog

    Description:Spécifie l'emplacement d'un fichier journal
    Syntaxe:TransferLog fichier|pipe
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_log_config

    Cette directive possède exactement les mêmes arguments et produit les mêmes effets que la directive CustomLog, à l'exception qu'elle ne permet pas de spécifier un format de journal explicite ou la journalisation conditionnelle des requêtes. En l'occurrence, le format de journal est déterminé par la dernière définition d'une directive LogFormat qui ne définit pas d'alias. Si aucun format particulier n'a été spécifié, c'est le Common Log Format qui sera utilisé.

    Exemple

    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\""
    TransferLog logs/access_log

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_macro.html.fr.utf80000644000000000000500000004015613416404674020360 0ustar rootsrc mod_macro - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_macro

    Langues Disponibles:  en  |  fr 

    Description:Ce module permet d'utiliser des macros dans les fichiers de configuration Apache.
    Statut:Base
    Identificateur de Module:macro_module
    Fichier Source:mod_macro.c
    Compatibilité:Disponible à partir de la version 2.4.5 du serveur HTTP Apache

    Sommaire

    Ce module permet d'utiliser des macros dans les fichiers de configuration à l'exécution du serveur HTTP Apache afin de faciliter la création de nombreux blocs de configuration similaires. Quand le serveur démarre, les macros sont exécutées avec les paramètres fournis, et le résultat obtenu est traité au même titre que le reste du fichier de configuration.

    top

    Utilisation

    On définit une macro à l'aide des blocs <Macro> qui contiennent la portion de votre configuration qui intervient de manière répétitive, y compris les variables pour les parties qui devront être substituées.

    Par exemple, vous pouvez utiliser une macro pour définir un bloc <VirtualHost>, afin de pouvoir définir de nombreux serveurs virtuels similaires :

    <Macro VHost $name $domain>
    <VirtualHost *:80>
        ServerName $domain
        ServerAlias www.$domain
    
        DocumentRoot "/var/www/vhosts/$name"
        ErrorLog "/var/log/httpd/$name.error_log"
        CustomLog "/var/log/httpd/$name.access_log" combined
    </VirtualHost>
    </Macro>

    Comme les directives de configuration httpd, les noms des macros sont insensibles à la casse, à la différence des variables qui y sont, elles, sensibles.

    Vous pouvez alors invoquer cette macro autant de fois que vous le voulez pour créer des serveurs virtuels

    Use VHost example example.com
    Use VHost myhost hostname.org
    Use VHost apache apache.org
    
    UndefMacro VHost

    Au démarrage du serveur, chacune de ces invocations Use sera remplacée par une définition de serveur virtuel complète, comme décrit dans la définition de la <Macro>.

    La directive UndefMacro permet d'éviter les conflits de définitions qui pourraient provenir de l'utilisation ultérieure de macros contenant les mêmes noms de variables.

    Vous trouverez une version plus élaborée de cet exemple plus loin dans la section Exemples.

    top

    Conseils

    Les noms de paramètres doivent commencer par un sigil tel que $, %, ou @, de façon à ce qu'ils soient clairement identifiables, mais aussi afin de faciliter les interactions avec les autres directives, comme la directive de base Define. Dans le cas contraire, vous recevrez un avertissement. En tout état de cause, il est conseillé d'avoir une bonne connaissance globale de la configuration du serveur, afin d'éviter la réutilisation des mêmes variables à différents niveaux, ce qui peut être à l'origine de confusions.

    Les paramètres préfixés par $ ou % ne sont pas échappés. Les paramètres préfixés par @ sont échappés entre guillemets.

    Evitez de préfixer un paramètre par le nom d'un autre paramètre (par exemple, présence simultanée des paramètres $win et $winter), car ceci peut introduire de la confusion lors de l'évaluation des expressions. Si cela se produit, c'est le nom de paramètre le plus long possible qui sera utilisé.

    Si vous désirez insérer une valeur dans une chaîne, il est conseillé de l'entourer d'accolades afin d'éviter toute confusion :

    <Macro DocRoot ${docroot}>
        DocumentRoot "/var/www/${docroot}/htdocs"
    </Macro>
    top

    Exemples

    Définition de serveurs virtuels

    Un exemple typique d'utilisation de mod_macro est la création dynamique de serveurs virtuels.

    ## Définition d'une macro VHost pour les configurations répétitives
    
    <Macro VHost $host $port $dir>
      Listen $port
      <VirtualHost *:$port>
    
        ServerName $host
        DocumentRoot "$dir"
    
        # Racine des documents publique
        <Directory "$dir">
          Require all granted
        </Directory>
    
        # restriction d'accès au sous-répertoire intranet.
        <Directory "$dir/intranet">
          Require ip 10.0.0.0/8
        </Directory>
      </VirtualHost>
    </Macro>
    
    ## Utilisation de la macro VHost avec différents arguments.
    
    Use VHost www.apache.org 80 /vhosts/apache/htdocs
    Use VHost example.org 8080 /vhosts/example/htdocs
    Use VHost www.example.fr 1234 /vhosts/example.fr/htdocs

    Suppression d'une définition de macro

    Il est recommandé de supprimer la définition d'une macro après l'avoir utilisée. Ceci permet d'éviter les confusions au sein d'un fichier de configuration complexe où des conflits entre noms de variables peuvent survenir.

    <Macro DirGroup $dir $group>
      <Directory "$dir">
        Require group $group
      </Directory>
    </Macro>
    
    Use DirGroup /www/apache/private private
    Use DirGroup /www/apache/server  admin
    
    UndefMacro DirGroup
    top

    Directive <Macro>

    Description:Définition d'une macro dans un fichier de configuration
    Syntaxe: <Macro nom [par1 .. parN]> ... </Macro>
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_macro

    La directive <Macro> permet de définir une macro dans un fichier de configuration Apache. Le premier argument est le nom de la macro, et les arguments suivants sont les paramètres. Il est de bon aloi de préfixer les noms des paramètres d'une macro avec un caractère parmi '$%@', et d'éviter d'en faire de même avec les noms de macros.

    <Macro LocalAccessPolicy>
      Require ip 10.2.16.0/24
    </Macro>
    
    <Macro RestrictedAccessPolicy $ipnumbers>
       Require ip $ipnumbers
    </Macro>
    top

    Directive UndefMacro

    Description:Supprime une macro
    Syntaxe:UndefMacro nom
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_macro

    La directive UndefMacro annule la définition d'une macro qui doit avoir été définie auparavant.

    UndefMacro LocalAccessPolicy
    UndefMacro RestrictedAccessPolicy
    top

    Directive Use

    Description:Utilisation d'une macro
    Syntaxe:Use nom [valeur1 ... valeurN]
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_macro

    La directive Use permet d'utiliser une macro. La macro considérée est expansée. Son nombre d'arguments doit être égal au nombre de paramètres précisés dans sa définition. Les valeurs passées en argument sont attribuées aux paramètres correspondants et substituées avant l'interprétation du texte de la macro.

    Use LocalAccessPolicy
    ...
    Use RestrictedAccessPolicy "192.54.172.0/24 192.54.148.0/24"

    est équivalent, avec les macros définies ci-dessus à :

    Require ip 10.2.16.0/24
    ...
    Require ip 192.54.172.0/24 192.54.148.0/24

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_host.html.en0000644000000000000500000003242613412755316020554 0ustar rootsrc mod_authz_host - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authz_host

    Available Languages:  en  |  fr 

    Description:Group authorizations based on host (name or IP address)
    Status:Base
    Module Identifier:authz_host_module
    Source File:mod_authz_host.c
    Compatibility:The forward-dns provider was addded in 2.4.19

    Summary

    The authorization providers implemented by mod_authz_host are registered using the Require directive. The directive can be referenced within a <Directory>, <Files>, or <Location> section as well as .htaccess files to control access to particular parts of the server. Access can be controlled based on the client hostname or IP address.

    In general, access restriction directives apply to all access methods (GET, PUT, POST, etc). This is the desired behavior in most cases. However, it is possible to restrict some methods, while leaving other methods unrestricted, by enclosing the directives in a <Limit> section.

    top

    The Require Directives

    Apache's Require directive is used during the authorization phase to ensure that a user is allowed or denied access to a resource. mod_authz_host extends the authorization types with ip, host, forward-dns and local. Other authorization types may also be used but may require that additional authorization modules be loaded.

    These authorization providers affect which hosts can access an area of the server. Access can be controlled by hostname, IP Address, or IP Address range.

    Since v2.4.8, expressions are supported within the host require directives.

    Require ip

    The ip provider allows access to the server to be controlled based on the IP address of the remote client. When Require ip ip-address is specified, then the request is allowed access if the IP address matches.

    A full IP address:

    Require ip 10.1.2.3
    Require ip 192.168.1.104 192.168.1.205

    An IP address of a host allowed access

    A partial IP address:

    Require ip 10.1
    Require ip 10 172.20 192.168.2

    The first 1 to 3 bytes of an IP address, for subnet restriction.

    A network/netmask pair:

    Require ip 10.1.0.0/255.255.0.0

    A network a.b.c.d, and a netmask w.x.y.z. For more fine-grained subnet restriction.

    A network/nnn CIDR specification:

    Require ip 10.1.0.0/16

    Similar to the previous case, except the netmask consists of nnn high-order 1 bits.

    Note that the last three examples above match exactly the same set of hosts.

    IPv6 addresses and IPv6 subnets can be specified as shown below:

    Require ip 2001:db8::a00:20ff:fea7:ccea
    Require ip 2001:db8:1:1::a
    Require ip 2001:db8:2:1::/64
    Require ip 2001:db8:3::/48

    Note: As the IP addresses are parsed on startup, expressions are not evaluated at request time.

    Require host

    The host provider allows access to the server to be controlled based on the host name of the remote client. When Require host host-name is specified, then the request is allowed access if the host name matches.

    A (partial) domain-name

    Require host example.org
    Require host .net example.edu

    Hosts whose names match, or end in, this string are allowed access. Only complete components are matched, so the above example will match foo.example.org but it will not match fooexample.org. This configuration will cause Apache to perform a double reverse DNS lookup on the client IP address, regardless of the setting of the HostnameLookups directive. It will do a reverse DNS lookup on the IP address to find the associated hostname, and then do a forward lookup on the hostname to assure that it matches the original IP address. Only if the forward and reverse DNS are consistent and the hostname matches will access be allowed.

    Require forward-dns

    The forward-dns provider allows access to the server to be controlled based on simple host names. When Require forward-dns host-name is specified, all IP addresses corresponding to host-name are allowed access.

    In contrast to the host provider, this provider does not rely on reverse DNS lookups: it simply queries the DNS for the host name and allows a client if its IP matches. As a consequence, it will only work with host names, not domain names. However, as the reverse DNS is not used, it will work with clients which use a dynamic DNS service.

    Require forward-dns bla.example.org

    A client the IP of which is resolved from the name bla.example.org will be granted access.

    The forward-dns provider was added in 2.4.19.

    Require local

    The local provider allows access to the server if any of the following conditions is true:

    • the client address matches 127.0.0.0/8
    • the client address is ::1
    • both the client and the server address of the connection are the same

    This allows a convenient way to match connections that originate from the local host:

    Require local

    Security Note

    If you are proxying content to your server, you need to be aware that the client address will be the address of your proxy server, not the address of the client, and so using the Require directive in this context may not do what you mean. See mod_remoteip for one possible solution to this problem.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_fcgi.html.fr.utf80000644000000000000500000006101213412755316021420 0ustar rootsrc mod_proxy_fcgi - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_proxy_fcgi

    Langues Disponibles:  en  |  fr 

    Description:Module fournissant le support de FastCGI à mod_proxy
    Statut:Extension
    Identificateur de Module:proxy_fcgi_module
    Fichier Source:mod_proxy_fcgi.c
    Compatibilité:Disponible depuis la version 2.3 d'Apache

    Sommaire

    Pour fonctionner, ce module nécessite le chargement de mod_proxy. Il fournit le support du protocole FastCGI.

    Ainsi, pour pouvoir traiter le protocole FastCGI, mod_proxy et mod_proxy_fcgi doivent être chargés dans le serveur.

    A la différence de mod_fcgid et mod_fastcgi, mod_proxy_fcgi n'est pas en mesure de démarrer le processus de l'application ; fcgistarter est fourni à cet effet sur certaines plateformes. Le framework applicatif FastCGI utilisé peut aussi fournir la gestion des processus ou des lancements de programmes externes.

    Avertissement

    N'activez pas la fonctionnalité de mandataire avant d'avoir sécurisé votre serveur. Les serveurs mandataires ouverts sont dangereux non seulement pour votre réseau, mais aussi pour l'Internet au sens large.

    top

    Exemples

    Pour que ces exemples fonctionnent, vous ne devez pas oublier d'activer mod_proxy et mod_proxy_fcgi.

    Instance d'application unique

    ProxyPass "/mon_appli/" "fcgi://localhost:4000/"

    mod_proxy_fcgi interdisant par défaut la réutilisation des connexions, lorsqu'une requête a été traitée, la connexion ne sera pas maintenue ouverte par le processus enfant httpd, et ne sera donc pas réutilisée. Cependant, si l'application FastCGI supporte les connexions httpd simultanées, vous pouvez opter pour la réutilisation des connexions comme dans l'exemple suivant :

    Instance d'application unique, réutilisation des connexions (versions 2.4.11 et supérieures)

    ProxyPass "/myapp/" "fcgi://localhost:4000/" enablereuse=on

    Active la réutilisation des connexions vers un serveur FCGI d'arrière-plan tel que PHP-FPM

    Il faut garder à l'esprit que PHP-FPM (en février 2018) utilise un modèle du style prefork ; autrement dit, chacun de ses processus de travail ne peut gérer qu'une connexion à la fois.
    Par défaut et lorsqu'il est configuré avec enablereuse=on et lorsqu'un MPM à base de threads est utilisé (comme worker ou event), mod_proxy autorise un jeu de ThreadsPerChild connexions vers le serveur d'arrière-plan pour chaque processus httpd, et par conséquent, il faut prêter une attention particulière aux situations suivantes :

    • Avec une charge en HTTP/1, il est fort probable que le nombre de connexions vers le serveur FCGI d'arrière-plan augmente jusqu'à atteindre MaxRequestWorkers.
    • Avec une charge en HTTP/2, et vue la manière dont mod_http2 est implémenté, il y a des threads de travail h2 additionnels qui peuvent forcer la création de connexions supplémentaires vers le serveur d'arrière-plan. Le nombre total de connexions que contiennent les jeux de connexions peut alors dépasser MaxRequestWorkers.

    Le nombre maximum de processus de travail PHP-FPM doit être défini judicieusement car il est possible qu'ils finissent par rester dans l'état occupé ("busy") pour ne gérer que des connexions persistantes inactives, sans avoir la possibilité d'en établir de nouvelles ; ce qui se traduira pour l'utilisateur final par une pile de "HTTP request timeouts".

    Dans l'exemple suivant, l'URI de la requête est transmis en tant que chemin du système de fichiers pour l'exécution du démon PHP-FPM. L'URL de la requête est implicitement ajoutée au second paramètre. PHP-FPM est à l'écoute de l'hôte et du port qui suivent fcgi://. La conservation/réutilisation des connexions est activée.

    PHP-FPM

    ProxyPassMatch "^/myapp/.*\.php(/.*)?$" "fcgi://localhost:9000/var/www/" enablereuse=on

    Dans l'exemple suivant, l'URI de la requête est transmis en tant que chemin du système de fichiers pour l'exécution du démon PHP-FPM. Dans ce cas cependant, PHP-FPM est à l'écoute d'un socket de domaine unix (UDS). Cette fonctionnalité est disponible à partir de la version 2.4.9. Avec cette syntaxe, si un nom d'hôte et un port sont ajoutés après fcgi://, ils seront ignorés.

    PHP-FPM with UDS

    ProxyPassMatch "^/(.*\.php(/.*)?)$" "unix:/var/run/php5-fpm.sock|fcgi://localhost/var/www/"

    La passerelle à répartition de charge nécessite le chargement du module mod_proxy_balancer et d'au moins un module fournissant un algorithme de répartition de charge, comme mod_lbmethod_byrequests en plus des modules déjà cités. mod_lbmethod_byrequests est le module par défaut et sera utilisé dans cet exemple de configuration.

    Passerelle à répartition de charge vers plusieurs instances de l'application

    ProxyPass "/myapp/" "balancer://myappcluster/"
    <Proxy "balancer://myappcluster/">
        BalancerMember "fcgi://localhost:4000"
        BalancerMember "fcgi://localhost:4001"
    </Proxy>

    Vous pouvez aussi forcer le traitement d'une requête en tant que requête de mandataire inverse en créant un court-circuiteur de gestionnaire approprié. Dans l'exemple ci-dessous, toutes les requêtes pour des scripts PHP seront transmises au serveur FastCGI spécifié par mandat inverse. Cette fonctionnalité est disponible à partir de la version 2.4.10 du serveur HTTP Apache. Pour des raisons de performances, il est recommandé de définir un worker (configuration d'un mandataire) représentant le même serveur fcgi:// d'arrière-plan. Avec cette configuration, il est possible d'effectuer une correspondance directe entre l'URI et le chemin du fichier sur le serveur, et le chemin local du fichier sera alors transmis au serveur d'arrière-plan. Lorsque FastCGI est configuré ainsi, le serveur est en mesure de calculer le PATH_INFO le plus approprié.

    Mandataire via un gestionnaire

    <FilesMatch "\.php$">
        # Note : la seule partie variable est /path/to/app.sock
        SetHandler  "proxy:unix:/path/to/app.sock|fcgi://localhost/"
    </FilesMatch>
       # Définition d'une configuration de mandataire qui convient.
       # La partie qui est mise en correspondance avec la valeur de
       # SetHandler est la partie qui suit le "pipe". Si vous devez faire
       # une distinction, "localhost" peut être changé en un nom de serveur
       # unique.
       <Proxy "fcgi://localhost/" enablereuse=on max=10>
       </Proxy>
    
    <FilesMatch ...>
        SetHandler  "proxy:fcgi://localhost:9000"
    </FilesMatch>
    
    <FilesMatch ...>
        SetHandler  "proxy:balancer://myappcluster/"
    </FilesMatch>
    top

    Variables d'environnement

    En plus des directives de configuration qui contrôlent le comportement de mod_proxy, de nombreuses variables d'environnement permettent de piloter le fournisseur du protocole FCGI :

    proxy-fcgi-pathinfo
    Lorsqu'il est configuré via les directives ProxyPass ou ProxyPassMatch, mod_proxy_fcgi ne définit pas la variable d'environnement PATH_INFO, ce qui permet au serveur FCGI d'arrière-plan de déterminer correctement SCRIPT_NAME et Script-URI, et de se conformer à la section 3.3 de la RFC 3875. Si au contraire vous avez souhaitez que mod_proxy_fcgi génère une "estimation la plus exacte possible" de PATH_INFO, définissez la variable d'environnement proxy-fcgi-pathinfo. Ceci peut servir de contournement pour une bogue présente dans certaines implémentations de FCGI. Cette variable peut être multivaluée afin de pouvoir choisir la valeur la plus appropriée (versions 2.4.11 et supérieures) :
    first-dot
    PATH_INFO est extrait à partir du slash qui suit le premier "." de l'URL.
    last-dot
    PATH_INFO est extrait à partir du slash qui suit le dernier "." de l'URL.
    full
    PATH_INFO est calculé en supposant que l'URL correspond au chemin du système de fichiers.
    unescape
    PATH_INFO correspond à la partie chemin de l'URL avec ses séquences d'échappement décodées.
    toute autre valeur
    PATH_INFO correspond à la partie chemin de l'URL. Auparavant, c'était la seule option pour proxy-fcgi-pathinfo.
    top

    Directive ProxyFCGIBackendType

    Description:Spécifie le type de l'application FastCGI d'arrière-plan
    Syntaxe:ProxyFCGIBackendType FPM|GENERIC
    Défaut:ProxyFCGIBackendType FPM
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_proxy_fcgi
    Compatibilité:Disponible à partir de la version 2.4.26 du serveur HTTP Apache

    Cette directive permet de spécifier le type de l'application FastCGI d'arrière-plan. Certains serveurs FastCGI, comme PHP-FPM, utilisent de manière historique des variables d'environnement exotiques pour identifier le type du serveur mandataire utilisé. Définissez cette directive à "GENERIC" si votre application n'est pas de type PHP-FPM et n'interpréter pas correctement des variables d'environnement comme SCRIPT_FILENAME ou PATH_TRANSLATED telles qu'elles sont définies par le serveur.

    SCRIPT_FILENAME est un exemple de valeur modifiée par la définition de cette directive. Historiquement, lorsqu'on utilisait le module mod_proxy_fcgi, SCRIPT_FILENAME était préfixé par la chaîne "proxy:fcgi://". C'est cette variable que lisent certaines applications FastCGI génériques en tant que valeur en entrée pour leur script ; cependant, PHP-FPM peut supprimer le préfixe, puis garder en mémoire qu'il communique avec Apache. Avec les versions 2.4.21 à 2.4.25, ce préfixe était automatiquement supprimé par le serveur, empêchant ainsi PHP-FPM de détecter et interopérer avec Apache dans certains scénarios.

    top

    Directive ProxyFCGISetEnvIf

    Description:Permet d'adapter la valeur des variables envoyées aux serveurs FastCGI
    Syntaxe:ProxyFCGISetEnvIf conditional-expression [!]environment-variable-name [value-expression]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_proxy_fcgi
    Compatibilité:Disponible à partir de la version 2.4.26 du serveur HTTP Apache.

    Juste avant la transmission d'une requête au serveur FastCGI configuré, le coeur du programme du serveur web définit un certain nombre de variables d'environnement en fonction de certains détails de la requête considérée. Les programmes FastCGI utilisent souvent ces variables comme données en entrée afin de déterminer quels scripts sous-jacents ils vont exécuter, ou quelles données en sortie doivent être produites.

    Voici quelques exemples de variables d'environnement importantes :

    • SCRIPT_NAME
    • SCRIPT_FILENAME
    • REQUEST_URI
    • PATH_INFO
    • PATH_TRANSLATED

    Cette directive permet de passer outre les variables d'environnement ci-dessus, entre autres. Elle est évaluée après la définition de la valeur initiale de ces variables ; elle peuvent donc être utilisées comme entrées dans les expressions définissants les conditions et les valeurs.

    Syntaxe des paramètres :

    conditional-expression
    Définit une condition en fonction de laquelle la variable d'environnement qui suit sera modifiée ou non. Pour la syntaxe de cette expression, reportez-vous aux exemples qui suivent ou à la spécification détaillée dans le document ap_expr.
    environment-variable-name
    Spécifie le nom de la variable d'environnement à modifier, par exemple PATH_INFO. Si elle est précédée d'un point d'exclamation, la définition de la variable sera annulée.
    value-expression
    Spécifie la nouvelle valeur de la variable "environment-variable-name". On peut inclure des références arrières, comme "$1", issues de captures en provenance de l'expression rationnelle conditional-expression. Si cette valeur est omise, la variable est définie (ou sa valeur est écrasée) par une chaîne vide — voir cependant la note ci-après.
    # Une modification basique, inconditionnelle
    ProxyFCGISetEnvIf "true" PATH_INFO "/example"
    
    # Utilisation d'une variable d'environnement pour spécifier la nouvelle valeur
    ProxyFCGISetEnvIf "true" PATH_INFO "%{reqenv:SCRIPT_NAME}"
    
    # Utilisation de captures dans la condition et de références arrières dans la # nouvelle valeur ProxyFCGISetEnvIf "reqenv('PATH_TRANSLATED') =~ m#(/.*prefix)(\d+)(.*)#" PATH_TRANSLATED "$1$3"

    Note : Annulation définition ou valeur vide

    La ligne suivante annule la définition de la variable VARIABLE, ce qui l'empêche d'être envoyée au serveur FastCGI :
    ProxyFCGISetEnvIf true !VARIABLE
    La ligne suivante, quant à elle, efface la valeur de la variable VARIABLE en lui affectant la chaîne vide ; cette variable VARIABLE sera alors tout de même envoyée au serveur FastCGI :
    ProxyFCGISetEnvIf true VARIABLE
    La spécification CGI/1.1 ne fait pas de distinction entre une variable contenant une chaîne vide et une variable qui n'existe pas. De nombreuses implémentations CGI et FastCGI font cependant cette distinction (ou permettent aux scripts de la faire). Le choix de celle que vous allez utiliser dépend de votre implémentation et de la raison qui vous pousse à modifier cette variable.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_session_crypto.html0000644000000000000500000000035013362070302021022 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_session_crypto.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_session_crypto.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/index.html.zh-cn.utf80000644000000000000500000005502713520523022020123 0ustar rootsrc 模å—索引 - Apache HTTP æœåС噍 版本 2.4
    <-

    模å—索引

    å¯ç”¨è¯­è¨€:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    䏋颿˜¯ Apache HTTP æœåС噍å‘行版中的所有模å—列表。å‚è§æŒ‰ç…§å­—æ¯é¡ºåºç½—列的所有 Apache HTTP æœåŠ¡å™¨æŒ‡ä»¤ã€‚

    top

    æ ¸å¿ƒç‰¹æ€§ä¸Žå¤šå¤„ç†æ¨¡å—(MPM)

    core
    Core Apache HTTP Server features that are always available
    mpm_common
    A collection of directives that are implemented by more than one multi-processing module (MPM)
    event
    A variant of the worker MPM with the goal of consuming threads only for connections with active processing
    mpm_netware
    Multi-Processing Module implementing an exclusively threaded web server optimized for Novell NetWare
    mpmt_os2
    Hybrid multi-process, multi-threaded MPM for OS/2
    prefork
    Implements a non-threaded, pre-forking web server
    mpm_winnt
    Multi-Processing Module optimized for Windows NT.
    worker
    Multi-Processing Module implementing a hybrid multi-threaded multi-process web server
    top

    其它模å—

     A  |  B  |  C  |  D  |  E  |  F  |  H  |  I  |  L  |  M  |  N  |  P  |  R  |  S  |  U  |  V  |  W  |  X 

    mod_access_compat
    Group authorizations based on host (name or IP address)
    mod_actions
    Execute CGI scripts based on media type or request method.
    mod_alias
    Provides for mapping different parts of the host filesystem in the document tree and for URL redirection
    mod_allowmethods
    Easily restrict what HTTP methods can be used on the server
    mod_asis
    Sends files that contain their own HTTP headers
    mod_auth_basic
    Basic HTTP authentication
    mod_auth_digest
    User authentication using MD5 Digest Authentication
    mod_auth_form
    Form authentication
    mod_authn_anon
    Allows "anonymous" user access to authenticated areas
    mod_authn_core
    Core Authentication
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    User authentication using DBM files
    mod_authn_file
    User authentication using text files
    mod_authn_socache
    Manages a cache of authentication credentials to relieve the load on backends
    mod_authnz_fcgi
    Allows a FastCGI authorizer application to handle Apache httpd authentication and authorization
    mod_authnz_ldap
    Allows an LDAP directory to be used to store the database for HTTP Basic authentication.
    mod_authz_core
    Core Authorization
    mod_authz_dbd
    Group Authorization and Login using SQL
    mod_authz_dbm
    Group authorization using DBM files
    mod_authz_groupfile
    Group authorization using plaintext files
    mod_authz_host
    Group authorizations based on host (name or IP address)
    mod_authz_owner
    Authorization based on file ownership
    mod_authz_user
    User Authorization
    mod_autoindex
    Generates directory indexes, automatically, similar to the Unix ls command or the Win32 dir shell command
    mod_brotli
    Compress content via Brotli before it is delivered to the client
    mod_buffer
    Support for request buffering
    mod_cache
    RFC 2616 compliant HTTP caching filter.
    mod_cache_disk
    Disk based storage module for the HTTP caching filter.
    mod_cache_socache
    Shared object cache (socache) based storage module for the HTTP caching filter.
    mod_cern_meta
    CERN httpd metafile semantics
    mod_cgi
    Execution of CGI scripts
    mod_cgid
    Execution of CGI scripts using an external CGI daemon
    mod_charset_lite
    Specify character set translation or recoding
    mod_data
    Convert response body into an RFC2397 data URL
    mod_dav
    Distributed Authoring and Versioning (WebDAV) functionality
    mod_dav_fs
    Filesystem provider for mod_dav
    mod_dav_lock
    Generic locking module for mod_dav
    mod_dbd
    Manages SQL database connections
    mod_deflate
    Compress content before it is delivered to the client
    mod_dialup
    Send static content at a bandwidth rate limit, defined by the various old modem standards
    mod_dir
    Provides for "trailing slash" redirects and serving directory index files
    mod_dumpio
    Dumps all I/O to error log as desired.
    mod_echo
    A simple echo server to illustrate protocol modules
    mod_env
    Modifies the environment which is passed to CGI scripts and SSI pages
    mod_example_hooks
    Illustrates the Apache module API
    mod_expires
    Generation of Expires and Cache-Control HTTP headers according to user-specified criteria
    mod_ext_filter
    Pass the response body through an external program before delivery to the client
    mod_file_cache
    Caches a static list of files in memory
    mod_filter
    Context-sensitive smart filter configuration module
    mod_headers
    Customization of HTTP request and response headers
    mod_heartbeat
    Sends messages with server status to frontend proxy
    mod_heartmonitor
    Centralized monitor for mod_heartbeat origin servers
    mod_http2
    Support for the HTTP/2 transport layer
    mod_ident
    RFC 1413 ident lookups
    mod_imagemap
    Server-side imagemap processing
    mod_include
    Server-parsed html documents (Server Side Includes)
    mod_info
    Provides a comprehensive overview of the server configuration
    mod_isapi
    ISAPI Extensions within Apache for Windows
    mod_lbmethod_bybusyness
    Pending Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_byrequests
    Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_bytraffic
    Weighted Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_heartbeat
    Heartbeat Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_ldap
    LDAP connection pooling and result caching services for use by other LDAP modules
    mod_log_config
    Logging of the requests made to the server
    mod_log_debug
    Additional configurable debug logging
    mod_log_forensic
    Forensic Logging of the requests made to the server
    mod_logio
    Logging of input and output bytes per request
    mod_lua
    Provides Lua hooks into various portions of the httpd request processing
    mod_macro
    Provides macros within apache httpd runtime configuration files
    mod_md
    Managing domains across virtual hosts, certificate provisioning via the ACME protocol
    mod_mime
    Associates the requested filename's extensions with the file's behavior (handlers and filters) and content (mime-type, language, character set and encoding)
    mod_mime_magic
    Determines the MIME type of a file by looking at a few bytes of its contents
    mod_negotiation
    Provides for content negotiation
    mod_nw_ssl
    Enable SSL encryption for NetWare
    mod_privileges
    Support for Solaris privileges and for running virtual hosts under different user IDs.
    mod_proxy
    Multi-protocol proxy/gateway server
    mod_proxy_ajp
    AJP support module for mod_proxy
    mod_proxy_balancer
    mod_proxy extension for load balancing
    mod_proxy_connect
    mod_proxy extension for CONNECT request handling
    mod_proxy_express
    Dynamic mass reverse proxy extension for mod_proxy
    mod_proxy_fcgi
    FastCGI support module for mod_proxy
    mod_proxy_fdpass
    fdpass external process support module for mod_proxy
    mod_proxy_ftp
    FTP support module for mod_proxy
    mod_proxy_hcheck
    Dynamic health check of Balancer members (workers) for mod_proxy
    mod_proxy_html
    Rewrite HTML links in to ensure they are addressable from Clients' networks in a proxy context.
    mod_proxy_http
    HTTP support module for mod_proxy
    mod_proxy_http2
    HTTP/2 support module for mod_proxy
    mod_proxy_scgi
    SCGI gateway module for mod_proxy
    mod_proxy_uwsgi
    UWSGI gateway module for mod_proxy
    mod_proxy_wstunnel
    Websockets support module for mod_proxy
    mod_ratelimit
    Bandwidth Rate Limiting for Clients
    mod_reflector
    Reflect a request body as a response via the output filter stack.
    mod_remoteip
    Replaces the original client IP address for the connection with the useragent IP address list presented by a proxies or a load balancer via the request headers.
    mod_reqtimeout
    Set timeout and minimum data rate for receiving requests
    mod_request
    Filters to handle and make available HTTP request bodies
    mod_rewrite
    Provides a rule-based rewriting engine to rewrite requested URLs on the fly
    mod_sed
    Filter Input (request) and Output (response) content using sed syntax
    mod_session
    Session support
    mod_session_cookie
    Cookie based session support
    mod_session_crypto
    Session encryption support
    mod_session_dbd
    DBD/SQL based session support
    mod_setenvif
    Allows the setting of environment variables based on characteristics of the request
    mod_slotmem_plain
    Slot-based shared memory provider.
    mod_slotmem_shm
    Slot-based shared memory provider.
    mod_so
    Loading of executable code and modules into the server at start-up or restart time
    mod_socache_dbm
    DBM based shared object cache provider.
    mod_socache_dc
    Distcache based shared object cache provider.
    mod_socache_memcache
    Memcache based shared object cache provider.
    mod_socache_redis
    Redis based shared object cache provider.
    mod_socache_shmcb
    shmcb based shared object cache provider.
    mod_speling
    Attempts to correct mistaken URLs by ignoring capitalization, or attempting to correct various minor misspellings.
    mod_ssl
    Strong cryptography using the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols
    mod_status
    Provides information on server activity and performance
    mod_substitute
    Perform search and replace operations on response bodies
    mod_suexec
    Allows CGI scripts to run as a specified user and Group
    mod_unique_id
    Provides an environment variable with a unique identifier for each request
    mod_unixd
    Basic (required) security for Unix-family platforms.
    mod_userdir
    User-specific directories
    mod_usertrack
    Clickstream logging of user activity on a site
    mod_version
    Version dependent configuration
    mod_vhost_alias
    Provides for dynamically configured mass virtual hosting
    mod_watchdog
    provides infrastructure for other modules to periodically run tasks
    mod_xml2enc
    Enhanced charset/internationalisation support for libxml2-based filter modules

    å¯ç”¨è¯­è¨€:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/mod/mpmt_os2.html.fr.utf80000644000000000000500000001772613412755316020165 0ustar rootsrc mpmt_os2 - Serveur HTTP Apache Version 2.4
    <-

    Apache MPM os2

    Langues Disponibles:  en  |  fr 

    Description:MPM hybride multi-processus, multi-thread pour OS/2
    Statut:MPM
    Identificateur de Module:mpm_mpmt_os2_module
    Fichier Source:mpmt_os2.c

    Sommaire

    Le serveur se compose d'un processus principal parent, et d'un petit nombre fixe de processus enfants.

    La tâche du processus parent consiste à gérer les processus enfants, c'est à dire lancer ces processus de manière à ce qu'il y en ait toujours un nombre égal à la valeur de la directive StartServers pour traiter les connexions.

    Chaque processus enfant comporte un jeu de threads esclaves et un thread maître qui accepte les connexions et les distribue aux esclaves via une file de travail. Le jeu de threads esclaves est dynamique et géré par un thread de maintenance de façon à ce que le nombre de threads inactifs soit maintenu entre MinSpareThreads et MaxSpareThreads.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_log_config.html0000644000000000000500000000077513362070302020060 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_log_config.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_log_config.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_log_config.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_log_config.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: mod_log_config.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_rewrite.html0000644000000000000500000000033213362070302017420 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_rewrite.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_rewrite.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_charset_lite.html.en0000644000000000000500000003655613412755316021042 0ustar rootsrc mod_charset_lite - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_charset_lite

    Available Languages:  en  |  fr  |  ko 

    Description:Specify character set translation or recoding
    Status:Extension
    Module Identifier:charset_lite_module
    Source File:mod_charset_lite.c

    Summary

    mod_charset_lite allows the server to change the character set of responses before sending them to the client. In an EBCDIC environment, Apache always translates HTTP protocol content (e.g. response headers) from the code page of the Apache process locale to ISO-8859-1, but not the body of responses. In any environment, mod_charset_lite can be used to specify that response bodies should be translated. For example, if files are stored in EBCDIC, then mod_charset_lite can translate them to ISO-8859-1 before sending them to the client.

    This module provides a small subset of configuration mechanisms implemented by Russian Apache and its associated mod_charset.

    top

    Common Problems

    Invalid character set names

    The character set name parameters of CharsetSourceEnc and CharsetDefault must be acceptable to the translation mechanism used by APR on the system where mod_charset_lite is deployed. These character set names are not standardized and are usually not the same as the corresponding values used in http headers. Currently, APR can only use iconv(3), so you can easily test your character set names using the iconv(1) program, as follows:

    iconv -f charsetsourceenc-value -t charsetdefault-value

    Mismatch between character set of content and translation rules

    If the translation rules don't make sense for the content, translation can fail in various ways, including:

    • The translation mechanism may return a bad return code, and the connection will be aborted.
    • The translation mechanism may silently place special characters (e.g., question marks) in the output buffer when it cannot translate the input buffer.
    top

    CharsetDefault Directive

    Description:Charset to translate into
    Syntax:CharsetDefault charset
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_charset_lite

    The CharsetDefault directive specifies the charset that content in the associated container should be translated to.

    The value of the charset argument must be accepted as a valid character set name by the character set support in APR. Generally, this means that it must be supported by iconv.

    Example

    <Directory "/export/home/trawick/apacheinst/htdocs/convert">
        CharsetSourceEnc  UTF-16BE
        CharsetDefault    ISO-8859-1
    </Directory>
    Specifying the same charset for both CharsetSourceEnc and CharsetDefault disables translation. The charset need not match the charset of the response, but it must be a valid charset on the system.
    top

    CharsetOptions Directive

    Description:Configures charset translation behavior
    Syntax:CharsetOptions option [option] ...
    Default:CharsetOptions ImplicitAdd
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_charset_lite

    The CharsetOptions directive configures certain behaviors of mod_charset_lite. Option can be one of

    ImplicitAdd | NoImplicitAdd
    The ImplicitAdd keyword specifies that mod_charset_lite should implicitly insert its filter when the configuration specifies that the character set of content should be translated. If the filter chain is explicitly configured using the AddOutputFilter directive, NoImplicitAdd should be specified so that mod_charset_lite doesn't add its filter.
    TranslateAllMimeTypes | NoTranslateAllMimeTypes
    Normally, mod_charset_lite will only perform translation on a small subset of possible mimetypes. When the TranslateAllMimeTypes keyword is specified for a given configuration section, translation is performed without regard for mimetype.
    top

    CharsetSourceEnc Directive

    Description:Source charset of files
    Syntax:CharsetSourceEnc charset
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Extension
    Module:mod_charset_lite

    The CharsetSourceEnc directive specifies the source charset of files in the associated container.

    The value of the charset argument must be accepted as a valid character set name by the character set support in APR. Generally, this means that it must be supported by iconv.

    Example

    <Directory "/export/home/trawick/apacheinst/htdocs/convert">
        CharsetSourceEnc  UTF-16BE
        CharsetDefault    ISO-8859-1
    </Directory>

    The character set names in this example work with the iconv translation support in Solaris 8.

    Specifying the same charset for both CharsetSourceEnc and CharsetDefault disables translation. The charset need not match the charset of the response, but it must be a valid charset on the system.

    Available Languages:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_log_forensic.html.fr.utf80000644000000000000500000003461213412755316021726 0ustar rootsrc mod_log_forensic - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_log_forensic

    Langues Disponibles:  en  |  fr  |  ja  |  tr 

    Description:Journalisation légale des requêtes envoyées au serveur
    Statut:Extension
    Identificateur de Module:log_forensic_module
    Fichier Source:mod_log_forensic.c
    Compatibilité:mod_unique_id n'est plus obligatoire depuis la version 2.1

    Sommaire

    Ce module permet la journalisation légale des requêtes client. La journalisation s'effectuant avant et après le traitement de la requête, le journal légal contient deux lignes pour chaque requête. Le processus de journalisation légale est très strict, à savoir :

    • Le format est figé. Vous ne pouvez pas modifier le format du journal à l'exécution.
    • S'il ne peut pas enregistrer ses données, le processus enfant se termine aussitôt, et peut éventuellement enregistrer un vidage mémoire (selon la définition de la directive CoreDumpDirectory).

    Pour interpréter les données du journal légal, vous pouvez vous aider du script check_forensic qui se trouve dans le répertoire support de la distribution.

    Note de traduction : le terme "légal" utilisé dans le présent document ne suggère aucunement que ce module apporte une valeur juridique aux journaux. Il est à comprendre dans le contexte similaire à ce que l'on trouve en analyse medico-légale. En d'autres termes, la finalité de ce module est de simplifier les opérations d'investigation autour du traitement des requêtes par le serveur.
    top

    Format du journal Forensic

    Chaque requête fait l'objet d'une double journalisation. La requête est journalisée une première fois avant son traitement (c'est à dire après la réception des en-têtes). La deuxième entrée du journal est écrite après le traitement de la requête, en fait au moment de la journalisation habituelle.

    Un identifiant unique est attribué à chaque requête afin de pouvoir l'identifier. Cette identifiant légal peut faire l'objet d'un enregistrement dans le journal standard en utilisant l'élément de chaîne de format %{forensic-id}n. Si vous utilisez mod_unique_id, c'est l'identifiant qu'il génère qui sera utilisé.

    La première partie de la journalisation de la requête enregistre l'identifiant légal, la ligne de la requête et tous les en-têtes reçus séparés par des caractères pipe (|). Voici à titre d'exemple à quoi pourrait ressembler une telle entrée (tout étant rassemblé sur une seule ligne) :

    +yQtJf8CoAB4AAFNXBIEAAAAA|GET /manual/de/images/down.gif HTTP/1.1|Host:localhost%3a8080|User-Agent:Mozilla/5.0 (X11; U; Linux i686; en-US; rv%3a1.6) Gecko/20040216 Firefox/0.8|Accept:image/png, etc...

    Le caractère plus ('+') de début indique qu'il s'agit de la première entrée de journal pour cette requête. La seconde entrée ne contiendra qu'un caractère moins ('-') suivi de l'identifiant :

    -yQtJf8CoAB4AAFNXBIEAAAAA

    Le script check_forensic prend comme argument le nom du fichier journal. Il recherche ces paires d'identifiants +/- et affiche un message d'erreur si la journalisation d'une requête n'est pas complète.

    top

    Considérations à propos de sécurité

    Voir le document conseils en matière de sécurité pour des détails sur les raisons pour lesquelles votre sécurité pourrait être compromise si le répertoire dans lequel les fichiers journaux sont stockés sont inscriptibles par tout autre utilisateur que celui qui démarre le serveur.

    Les fichiers journaux peuvent contenir des données sensibles comme le contenu des en-têtes Authorization: (qui peuvent contenir des mots de passe) ; ils ne doivent donc être lisibles que par l'utilisateur qui démarre le serveur.

    top

    Directive ForensicLog

    Description:Définit le nom de fichier du journal légal
    Syntaxe:ForensicLog nom-fichier|pipe
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_log_forensic

    La directive ForensicLog permet de contrôler la journalisation des requêtes à des fins d'analyse légale. Chaque entrée du journal se voit assigner un identifiant unique qui peut être associé à la requête en utilisant la directive CustomLog habituelle. mod_log_forensic crée un élément nommé forensic-id, qui peut être ajouté au journal standard en utilisant l'élément de format %{forensic-id}n.

    L'argument, qui permet de spécifier l'emplacement vers lequel le journal légal sera écrit, peut contenir les deux types de valeurs suivants :

    nom-fichier
    Un nom de fichier relatif au répertoire défini par la directive ServerRoot.
    pipe
    Le caractère pipe "|", suivi du chemin vers un programme qui recevra les informations de la journalisation sur son entrée standard. Le nom du programme peut être relatif au répertoire défini par la directive ServerRoot.

    Sécurité :

    Si les journaux sont redirigés vers un programme, ce dernier s'exécutera sous l'utilisateur qui a démarré httpd. Ce sera l'utilisateur root si le serveur a été démarré par root ; vérifiez que le programme est sécurisé ou passe sous le contrôle d'un utilisateur possédant des droits restreints.

    Note

    Lors de la spécification d'un chemin de fichier sur les plate-formes non-Unix, il faut prendre soin de ne pas oublier que seuls les slashes directs doivent être utilisés, même si la plate-forme autorise l'emploi d'anti-slashes. D'une manière générale, c'est une bonne idée que de n'utiliser que des slashes directs dans les fichiers de configuration.

    Langues Disponibles:  en  |  fr  |  ja  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_info.html.ja.utf80000644000000000000500000003620013412755316020166 0ustar rootsrc mod_info - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_info

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:サーãƒã®è¨­å®šã®åŒ…æ‹¬çš„ãªæ¦‚観をæä¾›ã™ã‚‹
    ステータス:Extension
    モジュール識別å­:info_module
    ソースファイル:mod_info.c

    概è¦

    mod_info を設定ã™ã‚‹ã«ã¯ã€ä»¥ä¸‹ã‚’ httpd.conf ファイルã«åŠ ãˆã¾ã™ã€‚

    <Location /server-info>
    SetHandler server-info
    </Location>

    <Location> ã®ä¸­ã§ mod_access を使ã£ã¦ã€ã‚µãƒ¼ãƒè¨­å®šæƒ…å ±ã¸ã® アクセスを制é™ã—ãŸã„ã¨æ€ã†ã‹ã‚‚ã—れã¾ã›ã‚“ :

    <Location /server-info>
    SetHandler server-info
    Order deny,allow
    Deny from all
    Allow from yourcompany.com
    </Location>

    一旦設定ã™ã‚‹ã¨ã€http://your.host.example.com/server-info ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã“ã¨ã§ã‚µãƒ¼ãƒã®æƒ…報を得られるよã†ã«ãªã‚Šã¾ã™ã€‚

    top

    Security Issues

    一旦 mod_info ãŒã‚µãƒ¼ãƒã«èª­ã¿è¾¼ã¾ã‚Œã‚‹ã¨ã€ æä¾›ã—ã¦ã„ã‚‹ãƒãƒ³ãƒ‰ãƒ©æ©Ÿèƒ½ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæ¯Žã®è¨­å®šãƒ•ァイル (例ãˆã° .htaccess) ã‚’å«ã‚€ ã™ã¹ã¦ã®è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ã§æœ‰åйã«ãªã‚Šã¾ã™ã€‚ ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’有効ã«ã™ã‚‹ã¨ãã¯ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã®å•題を考慮ã™ã‚‹å¿…è¦ãŒ ã‚ã‚‹ã§ã—ょã†ã€‚

    特ã«ã€ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã‚·ã‚¹ãƒ†ãƒ ãƒ‘スã€ãƒ¦ãƒ¼ã‚¶å/パスワード〠データベースåãªã©ã€ä»–ã® Apache モジュールã®è¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‹ã‚‰ ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ä¸Šå¾®å¦™ãªæƒ…報をæ¼ã‚‰ã™å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ ã§ã™ã‹ã‚‰ã€ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ãã¡ã‚“ã¨ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã•れãŸç’°å¢ƒã§ã®ã¿ã€ 注æ„ã—ã¦ä½¿ã£ã¦ãã ã•ã„。

    設定情報ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’制é™ã™ã‚‹ãŸã‚ã«ã€mod_authz_host ã‚’ 使ã†ã®ãŒè‰¯ã„ã§ã—ょã†ã€‚

    アクセス制御

    <Location /server-info>
    SetHandler server-info
    Order allow,deny
    # Allow access from server itself
    Allow from 127.0.0.1
    # Additionally, allow access from local workstation
    Allow from 192.168.1.17
    </Location>

    top

    表示ã•れる情報ã®é¸æŠž

    デフォルトã§ã¯ã€ã‚µãƒ¼ãƒæƒ…å ±ã¯ã™ã¹ã¦ã®æœ‰åйãªãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ã€ å„モジュールã«ã¤ã„ã¦ã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒç†è§£ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–〠実装ã—ã¦ã„ã‚‹ã€ãƒ•ックã€ç¾æ™‚点ã§ã®è¨­å®šã®é–¢é€£ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã« ãªã£ã¦ã„ã¾ã™ã€‚

    server-info リクエストã¸ã‚¯ã‚¨ãƒªãƒ¼ã‚’追加ã™ã‚‹ã“ã¨ã§ã€ 設定情報ã®ä»–ã®è¡¨ç¤ºå½¢å¼ã‚’é¸ã¶ã“ã¨ãŒã§ãã¾ã™ã€‚例ãˆã°ã€ http://your.host.example.com/server-info?config 㯠ã™ã¹ã¦ã®è¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を表示ã—ã¾ã™ã€‚

    ?<module-name>
    指定ã•れãŸãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«é–¢é€£ã™ã‚‹æƒ…å ±ã®ã¿
    ?config
    モジュールã§ã‚½ãƒ¼ãƒˆã›ãšã«ã€è¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®ã¿
    ?hooks
    å„モジュールãŒä½¿ç”¨ã™ã‚‹ãƒ•ックã®ã¿
    ?list
    有効ãªãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ç°¡å˜ãªãƒªã‚¹ãƒˆã®ã¿
    ?server
    åŸºæœ¬ã‚µãƒ¼ãƒæƒ…å ±ã®ã¿
    top

    既知ã®åˆ¶é™

    mod_info ã¯ã€å…ƒã®è¨­å®šãƒ•ァイルを読むã®ã§ã¯ãªã〠既ã«ãƒ‘ースã•れãŸè¨­å®šã‚’読ã¿è¾¼ã‚€ã“ã¨ã§æƒ…報をæä¾›ã—ã¾ã™ã€‚従ã£ã¦ã€ パース済ã¿ã®è¨­å®šæƒ…å ±ã®æœ¨ãŒç”Ÿæˆã•れる方法ã«ã‚ˆã‚‹åˆ¶é™ãŒã„ãã¤ã‹ã‚りã¾ã™:

    • パースã•れãŸè¨­å®šã«ä¿å­˜ã•れãšã«ã€ã™ãã«å®Ÿè¡Œã•れるディレクティブ㯠一覧ã«ç¾ã‚Œã¾ã›ã‚“。ã“れã«ã¯ ServerRoot, LoadModule, LoadFile ãŒã‚りã¾ã™ã€‚
    • Include, <IfModule>, <IfDefine>, ã®ã‚ˆã†ãªè¨­å®šãƒ•ァイル自身を制御ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯è¡¨ç¤ºã•れã¾ã›ã‚“。 ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®ä¸­ã«ã‚ã‚Šã€æœ‰åйã«ãªã£ã¦ã„るディレクティブ㯠表示ã•れã¾ã™ã€‚
    • コメントã¯è¡¨ç¤ºã•れã¾ã›ã‚“。(ã“れã¯ä»•様ã ã¨æ€ã£ã¦ãã ã•ã„。)
    • .htaccess ファイルã®è¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯è¡¨ç¤ºã•れã¾ã›ã‚“ (永久的ãªã‚µãƒ¼ãƒè¨­å®šã®ä¸€éƒ¨ã§ã¯ãªã„ã‹ã‚‰ã§ã™)。
    • <Directory> ã®ã‚ˆã†ãªã‚³ãƒ³ãƒ†ãƒŠãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯æ™®é€šã«è¡¨ç¤ºã•れã¾ã™ãŒã€ mod_info ã¯é–‰ã˜ã‚¿ã‚°ã® </Directory> ãªã©ã®æ•°ã‚’知るã“ã¨ã¯ã§ãã¾ã›ã‚“。
    • mod_perl ã®ã‚ˆã†ãªã‚µãƒ¼ãƒ‰ãƒ‘ーティモジュール ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯è¡¨ç¤ºã•れãªã„ã‹ã‚‚ã—れã¾ã›ã‚“。
    top

    AddModuleInfo ディレクティブ

    説明:server-info ãƒãƒ³ãƒ‰ãƒ©ã«ã‚ˆã‚Šè¡¨ç¤ºã•ã‚Œã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æƒ…å ±ã« è¿½åŠ ã®æƒ…報を付ã‘加ãˆã‚‹
    æ§‹æ–‡:AddModuleInfo module-name string
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_info
    äº’æ›æ€§:Apache 1.3 以é™

    ã“れã¯ã€string ã®å†…容ãŒãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« module-name ã®è¿½åŠ æƒ…å ± ã¨ã—㦠HTML ã¨ã—ã¦è§£é‡ˆã•れã€è¡¨ç¤ºã•れるよã†ã«ã—ã¾ã™ã€‚例:

    AddModuleInfo mod_deflate.c 'See <a \
    href="http://www.apache.org/docs/2.4/mod/mod_deflate.html">\
    http://www.apache.org/docs/2.4/mod/mod_deflate.html</a>'

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/directive-dict.html.ja.utf80000644000000000000500000005010213412755316021270 0ustar rootsrc ディレクティブã®è§£èª¬ã«ä½¿ã‚れる用語 - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    ディレクティブã®è§£èª¬ã«ä½¿ã‚れる用語

    翻訳済ã¿è¨€èªž:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ–‡æ›¸ã¯å„ Apache 設定ディレクティブ を説明ã™ã‚‹ãŸã‚ã«ä½¿ã‚れã¦ã„る用語を説明ã—ã¾ã™ã€‚

    top

    説明

    ディレクティブã®ç›®çš„ã®ç°¡å˜ãªèª¬æ˜Žã€‚

    top

    æ§‹æ–‡

    設定ファイル中ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æ›¸å¼ã‚’示ã—ã¾ã™ã€‚ ã“ã®æ§‹æ–‡ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–特有ãªã®ã§ã€è©³ç´°ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®èª¬æ˜Žã‚’ å‚ç…§ã—ã¦ãã ã•ã„。一般的ã«ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–åã®å¾Œã«ã¯ 空白ã«ã‚ˆã‚Šåˆ†å‰²ã•れãŸã„ãã¤ã‹ã®å¼•æ•°ãŒç¶šãã¾ã™ã€‚ 引数ãŒç©ºç™½ã‚’å«ã‚€ã¨ãã¯äºŒé‡å¼•用符 (訳注: ") ã§å›²ã¾ã‚Œã¦ã„ã¾ã™ã€‚ オプショナルãªå¼•æ•°ã¯æ‹¬å¼§ (訳注: []) ã§å›²ã¾ã‚Œã¦ã„ã¾ã™ã€‚ 引数ãŒè¤‡æ•°ã®å€¤ã‚’å–り得る場åˆã¯ã€ãれらã®å€¤ã¯åž‚ç›´ã®æ£’ "|" 㧠分割ã•れã¦ã„ã¾ã™ã€‚ 変更ã•れãªã„テキストã¯ãƒ‡ãƒ•ォルトã®ãƒ•ォントã§è¡¨ç¤ºã•れã€ç½®æ›ã®å¿…è¦ãª 引数ã¯å¼·èª¿ã•れã¦è¡¨ç¤ºã•れã¾ã™ã€‚ å¼•æ•°ã®æ•°ãŒå¤‰ã‚ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯æœ€å¾Œã® 引数ãŒç¹°ã‚Šè¿”ã•れるã“ã¨ã‚’示ã™ãŸã‚ã« "..." ã§çµ‚ã‚りã¾ã™ã€‚

    ディレクティブã¯å¤šãã®é•ã†åž‹ã®å¼•æ•°ã‚’ã¨ã‚Šã¾ã™ã€‚ã„ãã¤ã‹ã€è‰¯ã 使ã‚れるもã®ã‚’以下ã§å®šç¾©ã—ã¾ã™ã€‚

    URL
    http://www.example.com/path/to/file.html ã®ã‚ˆã†ã«ã€ スキームã€ãƒ›ã‚¹ãƒˆåã€ãƒ‘スå(çœç•¥å¯èƒ½)ã‚’å«ã‚“ã§ã„る完全㪠Uniform Resource Locator。
    URL-path
    /path/to/file.html ã®ã‚ˆã†ã«ã€ã‚¹ã‚­ãƒ¼ãƒ ã¨ ホストåã®å¾Œã«ç¶šã url ã®ä¸€éƒ¨ã€‚url-path 㯠ファイルシステムã‹ã‚‰ã®è¦–点ã§ã¯ãªã〠ウェブã‹ã‚‰ã®è¦–点ã§ãƒªã‚½ãƒ¼ã‚¹ã‚’表ç¾ã—ã¾ã™ã€‚
    file-path
    /usr/local/apache/htdocs/path/to/file.html ã®ã‚ˆã†ã«ã€ ルートディレクトリã‹ã‚‰å§‹ã¾ã‚‹ãƒ­ãƒ¼ã‚«ãƒ«ã®ãƒ•ァイルシステム上ã®ãƒ•ァイルã¸ã®ãƒ‘ス。 通常ã€ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§å§‹ã¾ã‚‰ãªã„ file-path 㯠ServerRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ã—㦠扱ã‚れã¾ã™ã€‚
    directory-path
    /usr/local/apache/htdocs/path/to/ ã®ã‚ˆã†ã«ã€ ルートディレクトリã‹ã‚‰å§‹ã¾ã‚‹ãƒ­ãƒ¼ã‚«ãƒ«ã®ãƒ•ァイルシステムã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¸ã® パス。
    filename
    file.html ã®ã‚ˆã†ã«ã€ãƒ‘ス情報ã®ä»˜ã„ã¦ã„ãªã„ ファイルå。
    regex
    Perl 互æ›ã®æ­£è¦è¡¨ç¾ã§ã™ã€‚ ディレクティブã®å®šç¾©ãŒ regex ãŒä½•ã«å¯¾ã—ã¦ãƒžãƒƒãƒã‚’行ãªã†ã®ã‹ã‚’指定ã—ã¾ã™ã€‚
    extension
    一般的ã«ã¯ filename ã®æœ€å¾Œã®ãƒ‰ãƒƒãƒˆã®å¾Œã®éƒ¨åˆ†ã§ã™ã€‚ ã—ã‹ã—ã€Apache ã¯è¤‡æ•°ã®ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã‚’èªè­˜ã—ã¾ã™ã®ã§ã€filename ã«è¤‡æ•°ã®ãƒ‰ãƒƒãƒˆãŒã‚ã‚‹ã¨ã€æœ€åˆã®ãƒ‰ãƒƒãƒˆã®å¾Œã®ã€ãれãžã‚Œã®ãƒ‰ãƒƒãƒˆã§åˆ†é›¢ã•れãŸéƒ¨åˆ†ãŒ extension (訳注: æ‹¡å¼µå­) ã«ãªã‚Šã¾ã™ã€‚例ãˆã°ã€filename file.html.en ã«ã¯äºŒã¤ã®æ‹¡å¼µå­ãŒã‚りã¾ã™ã€‚.html 㨠.en ã§ã™ã€‚Apache ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§ã¯ã€extension ã¯ãƒ‰ãƒƒãƒˆä»˜ãã§ã‚‚ç„¡ã—ã§ã‚‚指定ã§ãã¾ã™ã€‚ã•らã«ã€extension ã¯ å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã›ã‚“。
    MIME-type
    text/html ã®ã‚ˆã†ã«ã€ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§åˆ†é›¢ã•れ㟠主フォーマットã¨å‰¯ãƒ•ォーマットã«ã‚ˆã£ã¦ãƒ•ァイルã®å½¢å¼ã‚’ è¡¨ã™æ–¹æ³•ã§ã™ã€‚
    env-variable
    Apache ã®è¨­å®šã«ã‚ˆã‚Šå®šç¾©ã•れる 環境変数ã®åå‰ã§ã™ã€‚ã“れã¯ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ã® 環境変数ã¨åŒã˜ã¨ã¯é™ã‚‰ãªã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。詳細㯠環境変数ã®èª¬æ˜Žã‚’å‚ç…§ã—ã¦ãã ã•ã„。
    top

    デフォルト

    ディレクティブã«ãƒ‡ãƒ•ォルト値 (ã™ãªã‚ã¡ã€è¨­å®šãƒ•ァイルã‹ã‚‰ çœç•¥ã•れã¦ã„ã¦ã‚‚ã€Apache ウェブサーãƒã¯ç‰¹å®šã®å€¤ã«è¨­å®šã•れã¦ã„ã‚‹ã‹ã®ã‚ˆã†ã« 動作ã—ã¾ã™) ãŒã‚ã‚‹å ´åˆã¯ã“ã“ã«è¨˜è¿°ã•れã¾ã™ã€‚ デフォルト値ã®ç„¡ã„å ´åˆã€ã“ã“㯠"None" 㨠書ã‹ã‚Œã¾ã™ã€‚ã“ã“ã§æ›¸ã‹ã‚Œã¦ã„るデフォルトã¯ã‚µãƒ¼ãƒã¨å…±ã«é…布ã•れã¦ã„ã‚‹ デフォルト㮠httpd.conf å†…ã«æ›¸ã‹ã‚Œã¦ã„るディレクティブã®å€¤ã¨ é•ã†å¯èƒ½æ€§ãŒã‚ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。

    top

    コンテキスト

    ã“れã¯ã€ã‚µãƒ¼ãƒã®è¨­å®šãƒ•ァイル中ã®ã©ã“ã§ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæœ‰åйãªã®ã‹ã‚’示ã—ã¾ã™ã€‚ 次ã«ç¤ºã™å€¤ãŒä¸€ã¤ä»¥ä¸Šã‚«ãƒ³ãƒžåŒºåˆ‡ã‚Šã§åˆ—挙ã•れã¦ã„ã¾ã™ã€‚

    サーãƒè¨­å®šãƒ•ァイル
    ã“れã¯ã€ã‚µãƒ¼ãƒè¨­å®šãƒ•ァイル (例ãˆã°ã€httpd.conf, srm.conf, access.conf) 内ã§ã¯ä½¿ç”¨ã§ãã¾ã™ãŒã€ <VirtualHost> ã‚„ <Directory> ã®ä¸­ã§ã¯ 使用ã§ããªã„ã“ã¨ã‚’示ã—ã¾ã™ã€‚ .htaccessファイルã§ã®ä½¿ç”¨ã¯è¨±å¯ã•れã¦ã„ã¾ã›ã‚“。
    ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ã“れã¯ã€ã‚µãƒ¼ãƒè¨­å®šãƒ•ァイル㮠<VirtualHost> ã®ä¸­ã§ä½¿ç”¨ã§ãã‚‹ã“ã¨ã‚’示ã—ã¾ã™ã€‚
    ディレクトリ
    ã“れã¯ã€ã‚µãƒ¼ãƒè¨­å®šãƒ•ァイル㮠<Directory>, <Location>, <Files>, <If>, <Proxy> コンテナã®ä¸­ã§ã€ 設定セクション ã§èª¬æ˜Žã•れã¦ã„る制é™ã®ä¸‹ã§ä½¿ç”¨ã§ãã‚‹ã“ã¨ã‚’示ã—ã¾ã™ã€‚
    .htaccess
    ã“れã¯ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæ¯Žã® .htaccess ファイル内㧠使用å¯èƒ½ã§ã‚ã‚‹ã“ã¨ã‚’示ã—ã¾ã™ã€‚ ãŸã ã€ä¸Šæ›¸ã ã®è¨­å®šã«ã‚ˆã£ã¦ã¯ã€å‡¦ç†ã•れãªã„ã‹ã‚‚ã—れã¾ã›ã‚“。

    ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯æŒ‡ç¤ºã•れãŸã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆã§ã®ã¿è¨±å¯ã•れã¾ã™ã€‚ ä»–ã®å ´æ‰€ã§ä½¿ãŠã†ã¨ã™ã‚‹ã¨ã€ã‚µãƒ¼ãƒãŒãã®ã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆã‚’æ­£ã—ãæ‰±ãˆãªã ãªã‚‹ã‚ˆã†ãªè¨­å®šã‚¨ãƒ©ãƒ¼ãŒç™ºç”Ÿã™ã‚‹ã‹ã€ã‚µãƒ¼ãƒãŒã¾ã£ãŸã動作ã—ãªããªã‚‹ã€ ã™ãªã‚ã¡ã€ã‚µãƒ¼ãƒãŒèµ·å‹•ã—ãªããªã‚‹ã¨ã„ã†ã“ã¨ã«ãªã‚Šã¾ã™ã€‚

    ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æœ‰åйãªä½ç½®ã¯ã€å®Ÿéš›ã¯æŒ™ã’られã¦ã„るコンテキスト㮠論ç†å’Œ (訳注: Boolen OR) ã«ãªã‚Šã¾ã™ã€‚è¨€ã„æ›ãˆã‚‹ã¨ã€ "サーãƒè¨­å®šãƒ•ァイルã€.htaccess" ã§æœ‰åйã ã¨ 記ã•れã¦ã„るディレクティブ㯠httpd.conf ファイル㨠.htaccess ファイルã¨ã§æœ‰åйã§ã™ãŒã€ <Directory> ã‚„ <VirtualHost> ã®ä¸­ã§ã¯ä½¿ç”¨ã§ãã¾ã›ã‚“。

    top

    上書ã

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®å±žæ€§ã¯ã€.htaccess ファイル中㫠ディレクティブãŒç¾ã‚ŒãŸã¨ãã«ã€ãれã®å‡¦ç†ã‚’有効ã«ã™ã‚‹ãŸã‚ã« ã©ã®è¨­å®šã®ä¸Šæ›¸ããŒå¿…è¦ã‹ã‚’示ã—ã¾ã™ã€‚ ディレクティブ㮠コンテキスト ãŒã€.htaccess ファイル中ã§ã¯è¨±å¯ã—ã¦ã„ãªã„å ´åˆã¯ã€ ã“ã®å±žæ€§ã¯ "é©ç”¨ä¸å¯" ã¨æ›¸ã‹ã‚Œã¾ã™ã€‚

    上書ãã¯ã€AllowOverride ディレクティブã«ã‚ˆã£ã¦æœ‰åйã«ã•れ〠特定ã®ã‚¹ã‚³ãƒ¼ãƒ—(ディレクトリãªã©)ã¨ã€ ã•らã«ä¸‹ä½ã®ãƒ¬ãƒ™ãƒ«ã® AllowOverride ã§ä¿®æ­£ã•れãªã„é™ã‚Šã€ ãã®é…下ã«å¯¾ã—ã¦é©ç”¨ã•れã¾ã™ã€‚ ディレクティブã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã¯å–り得る上書ãã®åå‰ã‚‚挙ã’ã¾ã™ã€‚

    top

    ステータス

    ã“れã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㌠Apache ウェブサーãƒã«ã©ã‚Œãらã„ãã¤ã組ã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹ã‹ã‚’ 示ã—ã¾ã™ã€‚è¨€ã„æ›ãˆã‚Œã°ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¨ãã®æ©Ÿèƒ½ã‚’利用ã™ã‚‹ãŸã‚ã«ã€ ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æ•°ã‚’増やã—ã¦ã€ã‚µãƒ¼ãƒã‚’å†ã‚³ãƒ³ãƒ‘イルã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã‹ã‚‚ã—れãªã„ ã¨ã„ã†ã“ã¨ã‚’示ã—ã¾ã™ã€‚ ã“ã®å±žæ€§ãŒå–り得る値ã¯ä»¥ä¸‹ã®ã‚‚ã®ã§ã™:

    Core
    "Core" ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠Apache ウェブサーãƒã®åŸºæœ¬ã¨ãªã‚‹ã¹ãã‚‚ã®ã§ã‚り〠常ã«ä½¿ç”¨å¯èƒ½ã§ã‚ã‚‹ã“ã¨ã‚’示ã—ã¾ã™ã€‚
    MPM
    "MPM" ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãƒžãƒ«ãƒãƒ—ãƒ­ã‚»ãƒƒã‚·ãƒ³ã‚°ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚ ã“ã®ç¨®é¡žã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®å®šç¾©ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®è¡Œã«ä½¿ã£ã¦ã„るモジュールã®åå‰ãŒæ›¸ã‹ã‚Œã¦ã„ã‚‹ å ´åˆã«ã®ã¿ä½¿ç”¨å¯èƒ½ã§ã™ã€‚
    Base
    "Base" ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠デフォルトã§ã‚µãƒ¼ãƒã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„る標準モジュールã®ä¸­ã®ä¸€ã¤ã§ã‚µ ãƒãƒ¼ãƒˆã•れã¦ã„ã¦ã€ã‚ã–ã‚ã–設定ã‹ã‚‰ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’削除ã—ãŸã¨ãを除ã„ã¦ã€ 通常ã§ã¯ä½¿ç”¨å¯èƒ½ã§ã‚ã‚‹ã“ã¨ã‚’示ã—ã¾ã™ã€‚
    Extension
    "Extension" ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ Apache サーãƒã®é…布物ã«åŒæ¢±ã•れã¦ã„るモジュールã®ä¸€ã¤ã§æä¾›ã•れã¦ã„ã‚‹ã‚‚ã®ã®ã€ 通常ã§ã¯ã‚µãƒ¼ãƒã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ãªã„ã“ã¨ã‚’示ã—ã¾ã™ã€‚ ディレクティブã¨ãã®æ©Ÿèƒ½ã‚’有効ã«ã™ã‚‹ã«ã¯ã€ã‚µãƒ¼ãƒãƒ“ルド用ã®è¨­å®šãƒ•ァイルを 変更ã—㦠Apache ã‚’å†ã‚³ãƒ³ãƒ‘イルã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
    Experimental
    "Experimental" ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€Apache é…å¸ƒç‰©ã« åŒæ¢±ã•れã¦ã„ã‚‹ã‚‚ã®ã®ã€è©¦ã—ãŸã„å ´åˆã¯è‡ªå·±è²¬ä»»ã§è¡Œãªã† å¿…è¦ãŒã‚ã‚‹ã¨ã„ã†ã“ã¨ã‚’示ã—ã¾ã™ã€‚ディレクティブã¯ã€ã™ã¹ã¦ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’ 完全ã«ãã‚ã‚ã›ã‚‹ãŸã‚ã«è§£èª¬ã•れã¦ã„ã¾ã™ãŒã€ã‚µãƒãƒ¼ãƒˆã•れã¦ã„ã‚‹ã¨ã¯é™ã‚Šã¾ã›ã‚“。 ディレクティブをæä¾›ã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ãƒ‡ãƒ•ォルトã§çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹ã‹ã‚‚ ã—れã¾ã›ã‚“ã—ã€ãã†ã§ãªã„ã‹ã‚‚ã—れã¾ã›ã‚“。使用å¯èƒ½ã‹ã©ã†ã‹ã¯ã€ ディレクティブã¨ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®èª¬æ˜Žã‚’ã—ã¦ã„るページã®å…ˆé ­ã‚’調ã¹ã¦ãã ã•ã„。
    top

    モジュール

    ã“れã¯å˜ç´”ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒå®šç¾©ã•れã¦ã„るモジュールã®åå‰ã‚’記載ã—ã¾ã™ã€‚

    top

    äº’æ›æ€§

    ディレクティブ㌠Apache 2 ã®é…布ã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ãªã‹ã£ãŸå ´åˆã€ ディレクティブãŒå°Žå…¥ã•れãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒã“ã“ã«æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚ ã¾ãŸã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒç‰¹å®šã®ãƒ—ラットフォームã«ã®ã¿å­˜åœ¨ã™ã‚‹ã¨ãã‚‚ ã“ã“ã«æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_charset_lite.html.ko.euc-kr0000644000000000000500000003443413412755316022227 0ustar rootsrc mod_charset_lite - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_charset_lite

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:¹®ÀÚÁýÇÕ º¯È¯À» ÁöÁ¤
    »óÅÂ:Experimental
    ¸ðµâ¸í:charset_lite_module
    ¼Ò½ºÆÄÀÏ:mod_charset_lite.c

    ¿ä¾à

    ÀÌ ¸ðµâÀº ½ÇÇèÀûÀÎ ¸ðµâÀ̰í, ÁÖÀÇÀÖ°Ô »ç¿ëÇØ¾ß ÇÑ´Ù. ¿øÇÏ´Â µ¿ÀÛÀ» ÇÏ´ÂÁö mod_charset_lite ¼³Á¤À» ½ÃÇèÇØºÁ¶ó.

    mod_charset_lite¸¦ »ç¿ëÇÏ¿© ¹®¼­ ¿øº»ÀÇ ¹®ÀÚÁýÇÕ°ú ¹®¼­¸¦ Ŭ¶óÀÌ¾ðÆ®·Î º¸³»±â Àü¿¡ º¯È¯ÇÒ ¹®ÀÚÁýÇÕÀ» ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù. mod_charset_lite´Â Á÷Á¢ ÀڷḦ º¯È¯ÇÏÁö¾Ê°í ´ë½Å ¾ÆÆÄÄ¡¿¡°Ô º¯È¯Ç϶ó°í ¿äûÇÑ´Ù. mod_charset_lite´Â EBCDIC°ú ASCII ȯ°æ¿¡¼­ »ç¿ëÇÒ ¼ö ÀÖ´Ù. EBCDIC ȯ°æ¿¡¼­ ¾ÆÆÄÄ¡´Â º¸Åë ¾ÆÆÄÄ¡ ÇÁ·Î¼¼½ºÀÇ ÄÚµåÆäÀÌÁö¿¡¼­ ISO-8859-1 ¹®ÀÚÁýÇÕÀ¸·Î ¹®¼­¸¦ º¯È¯ÇÑ´Ù. mod_charset_lite¸¦ »ç¿ëÇÏ¿© ´Ù¸¥ º¯È¯À» Áö½ÃÇÒ ¼ö ÀÖ´Ù. ASCII ȯ°æ¿¡¼­ ¾ÆÆÄÄ¡´Â ±âº»ÀûÀ¸·Î º¯È¯À» ÇÏÁö ¾Ê±â¶§¹®¿¡, ¾î¶² º¯È¯À» À§Çؼ­´Â mod_charset_lite°¡ ÇÊ¿äÇÏ´Ù.

    ÀÌ ¸ðµâÀº ·¯½Ã¾ÆÆÇ ¾ÆÆÄÄ¡ÀÇ mod_charsetÀÌ Á¦°øÇÏ´Â ¼³Á¤ÀÇ ÀϺθ¦ Á¦°øÇÑ´Ù.

    top

    ÀϹÝÀûÀÎ ¹®Á¦Á¡

    À߸øµÈ ¹®ÀÚÁýÇÕ À̸§

    mod_charset_lite¸¦ »ç¿ëÇÏ´Â ½Ã½ºÅÛÀÇ ARP ¹ø¿ª±â´ÉÀÌ CharsetSourceEnc¿Í CharsetDefaultÀÇ ÆÄ¶ó¹ÌÅÍÀÎ ¹®ÀÚÁýÇÕ À̸§À» ó¸®ÇÒ ¼ö ÀÖ¾î¾ß ÇÑ´Ù. ¹®ÀÚÁýÇÕ À̸§Àº Ç¥ÁØÈ­µÇÁö ¾Ê¾Ò°í, http Çì´õ¿¡ »ç¿ëÇÏ´Â °ª°ú Ç×»ó °°Áö´Â ¾Ê´Ù. ÇöÀç APRÀº iconv(3)¸¸À» »ç¿ëÇϱ⶧¹®¿¡, ´ÙÀ½°ú °°ÀÌ iconv(1) ÇÁ·Î±×·¥À» »ç¿ëÇÏ¿© ƯÁ¤ ¹®ÀÚÁýÇÕ À̸§À» »ç¿ëÇÒ ¼ö ÀÖ´ÂÁö ½±°Ô ¾Ë ¼ö ÀÖ´Ù:

    iconv -f charsetsourceenc-value -t charsetdefault-value

    ³»¿ë°ú º¯È¯±ÔÄ¢ÀÇ ¹®ÀÚÁýÇÕÀÌ ¼­·Î ´Ù¸§

    º¯È¯±ÔÄ¢ÀÌ »óȲ¿¡ ¸ÂÁö¾ÊÀ¸¸é ´ÙÀ½°ú °°Àº ¿©·¯ ¹æ½ÄÀ¸·Î º¯È¯ÀÌ ½ÇÆÐÇÒ ¼ö ÀÖ´Ù:

    • º¯È¯±â´ÉÀÌ ½ÇÆÐ ¹ÝȯÄڵ带 ¹ÝȯÇÏ°í ¿¬°áÀÌ ²÷¾îÁú ¼ö ÀÖ´Ù.
    • ÀԷ¹öÆÛ¸¦ º¯È¯ÇÏÁö ¸øÇÒ¶§ Ãâ·Â¹öÆÛ¿¡ ´ë½Å Ưº°ÇÑ ¹®ÀÚ¸¦ (¿¹, ¹°À½Ç¥) ÀûÀ» ¼ö ÀÖ´Ù.
    top

    CharsetDefault Áö½Ã¾î

    ¼³¸í:º¯È¯ÇÒ ¹®ÀÚÁýÇÕ
    ¹®¹ý:CharsetDefault charset
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Experimental
    ¸ðµâ:mod_charset_lite

    CharsetDefault Áö½Ã¾î´Â Áö½Ã¾î¸¦ »ç¿ëÇÑ À§Ä¡¿¡ ÀÖ´Â ¿øº»À» º¯È¯ÇÒ ¹®ÀÚÁýÇÕÀ» ÁöÁ¤ÇÑ´Ù.

    charset ¾Æ±Ô¸ÕÆ®¿¡´Â APRÀÌ Áö¿øÇÏ´Â ¹®ÀÚÁýÇÕ À̸§À» »ç¿ëÇØ¾ß ÇÑ´Ù. ÀϹÝÀûÀ¸·Î iconv°¡ Áö¿øÇÏ´Â ¹®ÀÚÁýÇÕÀ» ÀǹÌÇÑ´Ù.

    ¿¹Á¦

    <Directory /export/home/trawick/apacheinst/htdocs/convert>
    CharsetSourceEnc UTF-16BE
    CharsetDefault ISO-8859-1
    </Directory>

    top

    CharsetOptions Áö½Ã¾î

    ¼³¸í:¹®ÀÚÁýÇÕ º¯È¯ ±â´ÉÀ» ¼³Á¤
    ¹®¹ý:CharsetOptions option [option] ...
    ±âº»°ª:CharsetOptions DebugLevel=0 NoImplicitAdd
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Experimental
    ¸ðµâ:mod_charset_lite

    CharsetOptions Áö½Ã¾î´Â mod_charset_liteÀÇ ±â´ÉÀ» ¼³Á¤ÇÑ´Ù. Option¿¡´Â ¾Æ·¡ Ç׸ñµéÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù

    DebugLevel=n
    DebugLevel Ű¿öµå´Â mod_charset_lite°¡ ±â·ÏÇÏ´Â µð¹ö±×¹®±¸ÀÇ ¼öÁØÀ» ¼³Á¤ÇÑ´Ù. ±âº»ÀûÀ¸·Î ¾î¶² °Íµµ ±â·ÏÇÏÁö ¾Ê´Â´Ù. ÀÌ´Â DebugLevel=0°ú °°´Ù. ³ôÀº ¼ýÀÚ¸¦ »ç¿ëÇÒ¼ö·Ï ´õ ¸¹Àº µð¹ö±×¹®±¸¸¦ ±â·ÏÇÏ°ÔµÇ¾î ¼­¹ö ¼º´ÉÀÌ ¶³¾îÁø´Ù. ¼ýÀÚ°ªÀÇ ½ÇÁ¦ Àǹ̴ mod_charset_lite.c ¾ÕºÎºÐÀÇ DBGLVL_ »ó¼ö Á¤ÀǸ¦ Âü°íÇ϶ó.
    ImplicitAdd | NoImplicitAdd
    ImplicitAdd Ű¿öµå´Â ³»¿ëÀ» º¯È¯ÇÒ ¹®ÀÚÁýÇÕÀ» ÁöÁ¤Çϸé ÀÚµ¿À¸·Î mod_charset_lite¸¦ ÇÊÅÍ¿¡ Ãß°¡ÇÑ´Ù. AddOutputFilter Áö½Ã¾î·Î ÇÊÅͼø¼­¸¦ Á÷Á¢ ÁöÁ¤ÇÑ´Ù¸é, NoImplicitAdd¸¦ »ç¿ëÇÏ¿© mod_charset_lite°¡ ÀÚµ¿À¸·Î ÇÊÅÍ¿¡ Ãß°¡µÇÁö¾Êµµ·Ï ÇØ¾ß ÇÑ´Ù.
    top

    CharsetSourceEnc Áö½Ã¾î

    ¼³¸í:ÆÄÀÏ ¿øº»ÀÇ ¹®ÀÚÁýÇÕ
    ¹®¹ý:CharsetSourceEnc charset
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Experimental
    ¸ðµâ:mod_charset_lite

    CharsetSourceEnc Áö½Ã¾î´Â Áö½Ã¾î¸¦ »ç¿ëÇÑ À§Ä¡¿¡ ÀÖ´Â ÆÄÀÏµé ¿øº»ÀÇ ¹®ÀÚÁýÇÕÀ» ÁöÁ¤ÇÑ´Ù.

    charset ¾Æ±Ô¸ÕÆ®¿¡´Â APRÀÌ Áö¿øÇÏ´Â ¹®ÀÚÁýÇÕ À̸§À» »ç¿ëÇØ¾ß ÇÑ´Ù. ÀϹÝÀûÀ¸·Î iconv°¡ Áö¿øÇÏ´Â ¹®ÀÚÁýÇÕÀ» ÀǹÌÇÑ´Ù.

    ¿¹Á¦

    <Directory /export/home/trawick/apacheinst/htdocs/convert>
    CharsetSourceEnc UTF-16BE
    CharsetDefault ISO-8859-1
    </Directory>

    Solaris 8ÀÇ iconv°¡ ÀÌ ¿¹Á¦ÀÇ ¹®ÀÚÁýÇÕÀ» Áö¿øÇÑ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_lbmethod_heartbeat.html.en0000644000000000000500000002046013412755316022174 0ustar rootsrc mod_lbmethod_heartbeat - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_lbmethod_heartbeat

    Available Languages:  en  |  fr 

    Description:Heartbeat Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    Status:Experimental
    Module Identifier:lbmethod_heartbeat_module
    Source File:mod_lbmethod_heartbeat.c
    Compatibility:Available in version 2.3 and later

    Summary

    lbmethod=heartbeat uses the services of mod_heartmonitor to balance between origin servers that are providing heartbeat info via the mod_heartbeat module.

    This modules load balancing algorithm favors servers with more ready (idle) capacity over time, but does not select the server with the most ready capacity every time. Servers that have 0 active clients are penalized, with the assumption that they are not fully initialized.

    top

    HeartbeatStorage Directive

    Description:Path to read heartbeat data
    Syntax:HeartbeatStorage file-path
    Default:HeartbeatStorage logs/hb.dat
    Context:server config
    Status:Experimental
    Module:mod_lbmethod_heartbeat

    The HeartbeatStorage directive specifies the path to read heartbeat data. This flat-file is used only when mod_slotmem_shm is not loaded.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_reflector.html.en0000644000000000000500000002105213412755316020342 0ustar rootsrc mod_reflector - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_reflector

    Available Languages:  en  |  fr 

    Description:Reflect a request body as a response via the output filter stack.
    Status:Base
    Module Identifier:reflector_module
    Source File:mod_reflector.c
    Compatibility:Version 2.3 and later

    Summary

    This module allows request bodies to be reflected back to the client, in the process passing the request through the output filter stack. A suitably configured chain of filters can be used to transform the request into a response. This module can be used to turn an output filter into an HTTP service.

    top

    Examples

    Compression service
    Pass the request body through the DEFLATE filter to compress the body. This request requires a Content-Encoding request header containing "gzip" for the filter to return compressed data.
    <Location "/compress">
        SetHandler reflector
        SetOutputFilter DEFLATE
    </Location>
    Image downsampling service
    Pass the request body through an image downsampling filter, and reflect the results to the caller.
    <Location "/downsample">
        SetHandler reflector
        SetOutputFilter DOWNSAMPLE
    </Location>
    top

    ReflectorHeader Directive

    Description:Reflect an input header to the output headers
    Syntax:ReflectorHeader inputheader [outputheader]
    Context:server config, virtual host, directory, .htaccess
    Override:Options
    Status:Base
    Module:mod_reflector

    This directive controls the reflection of request headers to the response. The first argument is the name of the request header to copy. If the optional second argument is specified, it will be used as the name of the response header, otherwise the original request header name will be used.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_ftp.html.en0000644000000000000500000004456013412755316020420 0ustar rootsrc mod_proxy_ftp - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy_ftp

    Available Languages:  en  |  fr 

    Description:FTP support module for mod_proxy
    Status:Extension
    Module Identifier:proxy_ftp_module
    Source File:mod_proxy_ftp.c

    Summary

    This module requires the service of mod_proxy. It provides support for the proxying FTP sites. Note that FTP support is currently limited to the GET method.

    Thus, in order to get the ability of handling FTP proxy requests, mod_proxy and mod_proxy_ftp have to be present in the server.

    Warning

    Do not enable proxying until you have secured your server. Open proxy servers are dangerous both to your network and to the Internet at large.

    top

    Why doesn't file type xxx download via FTP?

    You probably don't have that particular file type defined as application/octet-stream in your proxy's mime.types configuration file. A useful line can be:

    application/octet-stream   bin dms lha lzh exe class tgz taz

    Alternatively you may prefer to use the ForceType directive to default everything to binary:

    ForceType application/octet-stream
    top

    How can I force an FTP ASCII download of file xxx?

    In the rare situation where you must download a specific file using the FTP ASCII transfer method (while the default transfer is in binary mode), you can override mod_proxy's default by suffixing the request with ;type=a to force an ASCII transfer. (FTP Directory listings are always executed in ASCII mode, however.)

    top

    How can I do FTP upload?

    Currently, only GET is supported for FTP in mod_proxy. You can of course use HTTP upload (POST or PUT) through an Apache proxy.

    top

    How can I access FTP files outside of my home directory?

    An FTP URI is interpreted relative to the home directory of the user who is logging in. Alas, to reach higher directory levels you cannot use /../, as the dots are interpreted by the browser and not actually sent to the FTP server. To address this problem, the so called Squid %2f hack was implemented in the Apache FTP proxy; it is a solution which is also used by other popular proxy servers like the Squid Proxy Cache. By prepending /%2f to the path of your request, you can make such a proxy change the FTP starting directory to / (instead of the home directory). For example, to retrieve the file /etc/motd, you would use the URL:

    ftp://user@host/%2f/etc/motd

    top

    How can I hide the FTP cleartext password in my browser's URL line?

    To log in to an FTP server by username and password, Apache uses different strategies. In absence of a user name and password in the URL altogether, Apache sends an anonymous login to the FTP server, i.e.,

    user: anonymous
    password: apache-proxy@

    This works for all popular FTP servers which are configured for anonymous access.

    For a personal login with a specific username, you can embed the user name into the URL, like in:

    ftp://username@host/myfile

    If the FTP server asks for a password when given this username (which it should), then Apache will reply with a 401 (Authorization required) response, which causes the Browser to pop up the username/password dialog. Upon entering the password, the connection attempt is retried, and if successful, the requested resource is presented. The advantage of this procedure is that your browser does not display the password in cleartext (which it would if you had used

    ftp://username:password@host/myfile

    in the first place).

    Note

    The password which is transmitted in such a way is not encrypted on its way. It travels between your browser and the Apache proxy server in a base64-encoded cleartext string, and between the Apache proxy and the FTP server as plaintext. You should therefore think twice before accessing your FTP server via HTTP (or before accessing your personal files via FTP at all!) When using insecure channels, an eavesdropper might intercept your password on its way.

    top

    Why do I get a file listing when I expected a file to be downloaded?

    In order to allow both browsing the directories on an FTP server and downloading files, Apache looks at the request URL. If it looks like a directory, or contains wildcard characters ("*?[{~"), then it guesses that a listing is wanted instead of a download.

    You can disable the special handling of names with wildcard characters. See the ProxyFtpListOnWildcard directive.

    top

    ProxyFtpDirCharset Directive

    Description:Define the character set for proxied FTP listings
    Syntax:ProxyFtpDirCharset character_set
    Default:ProxyFtpDirCharset ISO-8859-1
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy_ftp
    Compatibility:Available in Apache 2.2.7 and later. Moved from mod_proxy in Apache 2.3.5.

    The ProxyFtpDirCharset directive defines the character set to be set for FTP directory listings in HTML generated by mod_proxy_ftp.

    top

    ProxyFtpEscapeWildcards Directive

    Description:Whether wildcards in requested filenames are escaped when sent to the FTP server
    Syntax:ProxyFtpEscapeWildcards on|off
    Default:ProxyFtpEscapeWildcards on
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy_ftp
    Compatibility:Available in Apache 2.3.3 and later

    The ProxyFtpEscapeWildcards directive controls whether wildcard characters ("*?[{~") in requested filenames are escaped with backslash before sending them to the FTP server. That is the default behavior, but many FTP servers don't know about the escaping and try to serve the literal filenames they were sent, including the backslashes in the names.

    Set to "off" to allow downloading files with wildcards in their names from FTP servers that don't understand wildcard escaping.

    top

    ProxyFtpListOnWildcard Directive

    Description:Whether wildcards in requested filenames trigger a file listing
    Syntax:ProxyFtpListOnWildcard on|off
    Default:ProxyFtpListOnWildcard on
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy_ftp
    Compatibility:Available in Apache 2.3.3 and later

    The ProxyFtpListOnWildcard directive controls whether wildcard characters ("*?[{~") in requested filenames cause mod_proxy_ftp to return a listing of files instead of downloading a file. By default (value on), they do.

    Set to "off" to allow downloading files even if they have wildcard characters in their names.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_data.html0000644000000000000500000000032413362070302016651 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_data.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_data.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_log_config.html.tr.utf80000644000000000000500000011264013447004010021361 0ustar rootsrc mod_log_config - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_log_config

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    Açıklama:Sunucuya yapılan isteklerin günlük kayıtlarının tutulması
    Durum:Temel
    Modül Betimleyici:log_config_module
    Kaynak Dosyası:mod_log_config.c

    Özet

    Bu modül istemci isteklerinin esnek şekilde günlüklenmesi ile ilgilidir. Günlükler kişiselleştirilebilir biçemdedir ve doğrudan bir dosyaya yazılabileceği gibi boru üzerinden harici bir sürece de yazılabilir. İsteğin özelliklerine bağlı olarak bazı isteklerin günlüklere kaydedilmesi veya kaydedilmemesi mümkün kılınmıştır.

    Bu modül üç yönerge içermektedir: Bir günlük dosyası oluşturmak için TransferLog, günlük biçemini kişiselleştirmek için LogFormat ve tek başına bir günlük dosyasını hem tanımlayıp hem de biçemleyen CustomLog yönergesi. Her isteğin çok sayıda dosyaya günlüklenmesini sağlamak için yapılandırma dosyasında her sunucu için birden fazla TransferLog ve CustomLog yönergesi belirtilebilir.

    top

    Günlük Girdilerinin Kişiselleştirilmesi

    LogFormat ve CustomLog yönergelerinin biçem argümanı bir dizgedir. Bu dizge her isteği günlük dosyasına günlüklemek için kullanılır. Doğrudan günlük dosyalarına kopyalanmak üzere dizgesel sabitler içerebileceği gibi satırsonu ve sekme karakterleri olarak C tarzı "\n" ve "\t" denetim karakterlerini de içerebilir. Dizgesel sabit olarak kullanılan tırnak ve tersbölü imlerinin tersbölü ile öncelenmesi gerekir.

    İstek özellikleri biçem dizgesine “%†imli belirteçler yerleştirilerek günlüklenir. Bu belirteçler ve anlamları:

    Belirteç Açıklama
    %% Yüzde imi.
    %a Uzak IP adresi ve isteğin portu (mod_remoteip modülüne bakın).
    %{c}a bağlantının emsal IP adresi and portu (mod_remoteip modülüne bakın).
    %A Yerel IP adresi.
    %B HTTP başlıkları hariç, yanıtın bayt cinsinden uzunluğu.
    %b HTTP başlıkları hariç, yanıtın bayt cinsinden uzunluğu. OGB biçeminde hiç bayt gönderilmemişse günlüğe '-' yerine '0' çıktılanır.
    %{DEĞİŞKEN}C İstek içinde sunucuya gönderilen DEĞİŞKEN çerezinin içeriği. Sadece 0 sürümlü çerezler tam olarak desteklenir.
    %D Mikrosaniye cinsinden isteği sunmak için harcanan zaman.
    %{DEĞİŞKEN}e DEĞİŞKEN ortam değişkeninin içeriği.
    %f Dosya ismi.
    %h Uzak konak ismi. HostnameLookups yönergesine öntanımlı olan Off değeri atanmışsa, IP adresi günlüğe kaydedilir. Bir kaç konak için konak ismi de günlüğe kaydoluyorsa muhtemelen onların isimlerini içeren erişim denetim yönergelerine sahipsinizdir. Bak: Require host.
    %{c}h %h gibi, ancak her zaman, temel TCP bağlantısının konak adı kaydedilir, ancak mod_remoteip gibi modüller tarafından uzak konak adında yapılan değişiklikler kaydedilmez.
    %H İstek Protokolü.
    %{DEĞİŞKEN}i İstekle birlikte sunucuya gönderilen DEĞİŞKEN: başlık satır(lar)ının içeriği. Diğer modüllerde (örn. mod_headers) yapılan değişikliklerden etkilenir. Modüllerin çoğu bunu değiştirdiğinde önceki istek başlık isminin ne olduğuyla ilgileniyorsanız, başlığı bir ortam değişkenine kaydetmek için mod_setenvif modülünü kullanın ve yukarıda açıklandığı gibi bu değeri %{DEĞİŞKEN}e ile günlüğe kaydedin.
    %k Bu bağlantıda işlenen isteklerin sayısı; yani örneğin, '1' değeri bağlantı kurulduktan sonraki ilk kalıcı bağlantıyı, '2', ikinci bağlantıyı, ..., vb. gösterir; KeepAlive kullanılmışsa değer anlamlıdır; aksi takdirde değer daima 0’dır.
    %l Uzak kullanıcı kimliği (sağlanmışsa, identd üzerinden). mod_ident modülü mevcut ve IdentityCheck yönergesine değer olarak On atanmış olmadıkça bu belirteç için günlüğe tire imi yazılır.
    %L Hata günlüğündeki istek günlük kimliği (veya bu istek için hata günlüğüne hiçbir şey kaydedilmemise '-'). Bu hataya neyin sebep olduğunu öğrenmek için ilgili hata günlüğü satırına bakın.
    %m İstek yöntemi.
    %{DEĞİŞKEN}n Diğer modüldeki DEĞİŞKEN bilgisinin içeriği.
    %{DEĞİŞKEN}o Yanıttaki DEĞİŞKEN: başlık satır(lar)ının içeriği.
    %p Sunucunun isteÄŸi sunduÄŸu meÅŸru port.
    %{biçem}p Sunucunun veya istemcinin gerçek portu veya sunucunun isteği sunduğu meşru port. Geçerli biçemler: canonical, local ve remote (anlamları sırasıyla: meşru, yerel ve uzak).
    %P İsteği sunan çocuk sürecin süreç kimliği.
    %{biçem}P İsteği sunan çocuk sürecin süreç kimliği (pid) veya evre kimliği (tid). Geçerli biçemler: pid, tid, hextid. hextid için APR 1.2.0 veya üstü gerekir.
    %q Sorgu dizgesi (bir sorgu dizgesi mevcutsa önüne bir ? eklenir yoksa hiçbir şey eklenmez).
    %r İsteğin ilk satırı.
    %s Durum. Dahili olarak yönlendirilmiş istekler için isteğin özgün durumudur. İsteğin son durumu için %>s kullanınız.
    %t [18/Sep/2011:19:18:28 -0400] biçeminde isteğin alındığı tarih ve saat. Sondaki sayı zaman diliminin GMT'ye uzaklığıdır.
    %{biçem}t İsteğin alındığı tarih ve saat; biçem uzatılmış strftime(3) biçeminde belirtilmelidir (genelde yerelleştirme amaçlı). begin: (öntanımlı) ile başlayan biçemlerde süre isteğin başlangıcına göredir. end: ile başlayan biçemlerde ise süre isteğin işlenmesinin bi,tmesine yakın, günlük girdisinin yazılmaya başladığı ana göredir. strftime(3) tarafından desteklenen biçemlere ek olarak aşağıdaki biçem dizgecikleri de desteklenmektedir:
    secMutlak zaman başlangıcından (epoch) beri geçen saniye sayısı
    msecMutlak zaman başlangıcından beri geçen milisaniye sayısı
    usecMutlak zaman başlangıcından beri geçen mikrosaniye sayısı
    msec_fracmilisaniyelik kesir
    usec_fracmikrosaniyelik kesir
    Bu dizgecikler, aynı biçem dizgesi içinde bir diğeriyle birlikte veya strftime(3) biçemlemesiyle birlikte yer alamazlar fakat çok sayıda %{biçem}t kullanılabilir.
    %T Saniye cinsinden, isteği sunmak için harcanan zaman.
    %{BİRİM}T BİRİM ile belirtilen zaman birimi cinsinden, isteği sunmak için harcanan zaman. Geçerli birimler: milisaniye için ms, mikrosaniye için us, saniye için s. s kullanımı birimsiz %T ile aynı sonucu verir; us kullanımı %D ile aynı sonucu verir. Birimli %T kullanımı 2.4.13 ve sonrasında geçerlidir.
    %u Uzak kullanıcı (kimlik doğrulaması istenmişse vardır; durum kodu (%s) 401 ise yanlış olabilir).
    %U Herhangi bir sorgu dizgesi içermeksizin istenen URL yolu.
    %v İsteği sunan sunucunun meşru sunucu ismi (ServerName).
    %V UseCanonicalName ayarı ile ilgili sunucu ismi.
    %X Yanıt tamamlandığında bağlantı durumu:
    X = Yanıt tamamlanmadan bağlantı koptu.
    + = Yanıt gönderildikten sonra bağlantı canlı kalabilir.
    - = Yanıt gönderildikten sonra bağlantı kapatılacak.
    %I İstek ve başlıklar dahil alınan bayt sayısı. Sıfır olamaz. Bunu kullanmak için mod_logio etkin olmalıdır.
    %O Başlıklar dahil gönderilen bayt sayısı. Bir yanıtın gönderilmesinden önce istekten vazgeçilmesi gibi nadir durumlarda sıfır olabilir. Bunu kullanmak için mod_logio etkin olmalıdır.
    %S Aktarılan bayt sayısı (alınan ve gönderilen), istekler ve başlıklar dahil; sıfır olamaz. %I ve %O'nun birleşimidir. Bunu kullanmak için mod_logio etkinleştirilmelidir.
    %{ALANADI}^ti Sunucuya gönderilen istekteki ALANADI: Trailer satır(lar)ının içeriği.
    %{VARNAME}^to Sunucudan gönderilen yanıttaki ALANADI: Trailer satır(lar)ının içeriği.

    DeÄŸiÅŸtiriciler

    Belli öğelerin sadece belli durum kodlarıyla ilgili yanıtlarla basılabilmesi için bu durum kodları % iminden hemen sonra virgüllerle ayrılmış olarak yazılabilir. Olumsuzlama belirtmek için durum kodu listesinin önüne bir "!" konabilir.

    Biçem Dizgesi Anlamı
    %400,501{User-agent}i Sadece 400 ve 501 hatalarında User-agent günlüğe kaydedilir. Diğer durum kodları için günlüğe "-" yazılır.
    %!200,304,302{Referer}i 200,304,302 durum kodlarından biriyle dönmeyen tüm istekler için Referer başlığı durum koduyla birlikte günlüğe kaydedilir. Aksi takdirde günlüğe "-" yazılır.

    İsteğin dahili olarak yönlendirilmesinde özgün durumunun mu yoksa son durumunun mu hesaba katılacağı "<" ve ">" değiştiricileri ile belirtilebilir. Öntanımlı olarak %s, %U, %T, %D, ve %r belirteçleri isteğin özgün durumuna bakarken diğerleri son durumuna bakarlar. Bu bakımdan örneğin, %>s belirteci, özgün istekteki kimliği doğrulanmış kullanıcının, dahili olarak kimlik doğrulaması gerekmeyen bir özkaynağa yönlendirilmesi halinde isteğin son durumunu kaydetmekte kullanılabilir.

    Bazı Bilgiler

    Güvenlik nedeniyle, 2.0.46 sürümünden itibaren %r, %i ve %o belirteçlerinde basılamayan karakterler ve diğer özel karakterler \xhh dizilimleri biçeminde öncelenmektedir. Burada hh yerine karakter numarasının onaltılık gösterimi yazılır. Bir tersbölü ile öncelenmesi gereken " ve \ ile \n, \t gibi C tarzı gösterimler bu kuralın dışındadır. 2.0.46 sürümünün öncesinde bu dizgeler öncelenmezdi ve ham günlük dosyalarıyla çalışırken dikkatli olmak gerekirdi.

    2.0 sürümünden beri 1.3 sürümünün aksine %b ve %B biçem belirteçleri, istemciye gönderilen bayt sayısını değil, HTTP yanıtının bayt sayısını ifade ederdi (bu yanıt, örneğin, SSL kullanıldığında veya bağlantı koptuğunda farklı uzunlukta olur). Artık, ağa gönderilen gerçek bayt sayısını günlüğe kaydetmek için mod_logio modülü tarafından sağlanan %O biçem belirteci kullanılmaktadır.

    Ek bilgi: mod_cache standat bir eylemci olarak değil hızlı bir eylemci olarak gerçeklenmiştir. Bu nedenle, içerik arabelleklemesi sözkonusu olduğunda %R biçem dizgesi herhangi bir eylemci bilgisi döndürmeyecektir.

    Örnekler

    Genelde herkesçe kullanılan günlük kaydı biçemleme dizgelerinden bazıları:

    Ortak Günlük Biçemi (OGB)
    "%h %l %u %t \"%r\" %>s %b"
    Sanal Konaklı Ortak Günlük Biçemi
    "%v %h %l %u %t \"%r\" %>s %b"
    NCSA uzun/birleşik günlük biçemi
    "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\""
    Referer başlığını içeren günlük biçemi
    "%{Referer}i -> %U"
    User-agent başlığını içeren günlük biçemi
    "%{User-agent}i"

    msec_frac gibi ek biçem dizgeciklerini kullanan bir zaman biçemi belirtmek isterseniz %{format}t biçem dizgesini defalarca kullanabilirsiniz:

    Milisaniyeleri de içeren bir zaman damgası
    "%{%d/%b/%Y %T}t.%{msec_frac}t %{%z}t"
    top

    Güvenlik Kaygıları

    Günlük dosyarının kaydedildiği dizine sunucuyu başlatan kullanıcı dışında diğer kullanıcılar tarafından yazılabiliyor olması halinde güvenliğinizden nasıl feragat etmiş olacağınız güvenlik ipuçları belgesinde açıklanmıştır.

    top

    BufferedLogs Yönergesi

    Açıklama:Günlük girdilerini diske yazmadan önce bellekte tamponlar
    Sözdizimi:BufferedLogs On|Off
    Öntanımlı:BufferedLogs Off
    BaÄŸlam:sunucu geneli
    Durum:Temel
    Modül:mod_log_config
    Uyumluluk:2.0.41 ve sonrasında mevcuttur.

    BufferedLogs yönergesi, mod_log_config modülünün çeşitli günlük girdilerini her isteğin hemen ardından tek tek değil, bir bütün halinde diske yazılmak üzere bellekte saklanmasını sağlar. Bu, bazı sistemlerde daha verimli disk erişimi, dolayısıyla daha yüksek başarım sağlayabilir. Sadece sunucu geneli için belirtilebilir, sanal konaklar için ayrı ayrı yapılandırılamaz.

    Bir çökme günlük verisi kaybına sebep olacağından bu yönerge dikkatli kullanılmalıdır.
    top

    CustomLog Yönergesi

    Açıklama:Günlük dosyasın ismini ve girdi biçemini belirler.
    Sözdizimi:CustomLog dosya|borulu-süreç biçem|takma-ad [env=[!]ortam-değişkeni]| expr=ifade]
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Temel
    Modül:mod_log_config

    CustomLog yönergesi istekleri günlüğe kaydetmek için kullanılır. Yönerge ile bir günlük biçemi belirtilebilir ve günlük kaydı isteğin özelliklerine bağlı olarak ortam değişkenleri vasıtasıyla şarta bağlı kılınabilir.

    İlk argümanda günlüğün yazılacağı yer belirtilir. İki tür yer belirtilebilir:

    dosya
    ServerRoot yönergesinin değerine göreli bir dosya ismi.
    borulu-süreç
    "|" boru karakteri ile öncelenmiş olarak günlük bilgisini standart girdisinden kabul edecek sürecin ismi (veya komut satırı) Daha fazla bilgi için borulu günlüklere bakınız.

    Güvenlik:

    Bir borulu süreç kullanılmışsa, süreç httpd’yi başlatan kullanıcı tarafından başlatılacaktır. Sunucu root tarafından başlatılıyorsa bu root olacaktır; bu bakımdan günlük kaydını alacak programın güvenilir olması önemlidir.

    Bilginize

    Dosya yolunu belirtirken tersbölü çizgisi kullanılan Unix dışı platformlarda bile yapılandırma dosyasında bu amaçla normal bölü çizgilerini kullanmaya özen gösterilmelidir.

    İkinci argümanda günlüğe ne yazılacağı belirtilir. Ya evvelce LogFormat yönergesi ile tanımlanmış bir takma-ad ya da içeriği Günlük Girdilerinin Kişiselleştirilmesi bölümünde açıklanmış bir biçem dizgesi olabilir.

    Örneğin, aşağıdaki iki yönerge kümesi aynı etkiye sahiptir:

    # Biçem dizgesi yerine takma ad içeren CustomLog
    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    CustomLog "logs/access_log" common
    
    # Biçem dizgesinin kendisini içeren CustomLog
    CustomLog "logs/access_log" "%h %l %u %t \"%r\" %>s %b"

    Üçüncü argüman isteğe bağlı olup,belli bir isteğin günlüğe kaydedilip kaydedilmeyeceğini belirler. Koşul, sunucu ortamında belli bir değişkenin varlığı veya yokluğu olabilir (bir 'env=!isim' durumu). İstenirse koşul keyfi bir mantıksal ifade olarak da belirtilebilir. Eğer koşul sağlanmazsa istek günlüğe kaydedilmez. İfadede bulunan HTTP başlıklarına başvurular bu başlık isimlerinin Vary başlığına eklenmesine sebep olmaz.

    Ortam değişkenleri mod_setenvif ve/veya mod_rewrite modülleri kullanılarak her istek için ayrı ayrı atanabilir. Örneğin, GIF biçemli resimler için yapılan istekleri ana günlük dosyasına değil de başka bir dosyaya kaydetmek isterseniz:

    SetEnvIf Request_URI \.gif$ gif-image
    CustomLog "gif-requests.log" common env=gif-image
    CustomLog "nongif-requests.log" common env=!gif-image

    Veya eski RefererIgnore yönergesinin davranışını taklit etmek isterseniz:

    SetEnvIf Referer example\.com localreferer
    CustomLog "referer.log" referer env=!localreferer
    top

    GlobalLog Yönergesi

    Açıklama:Günlük dosyasının ismini ve biçemini belirler
    Sözdizimi:GlobalLog dosya|boru|sağlayıcı biçem|takma_ad [env=[!]ortam_değişkeni| expr=ifade]
    BaÄŸlam:sunucu geneli
    Durum:Temel
    Modül:mod_log_config
    Uyumluluk:Apache HTTP Sunucusunun 2.4.19 ve sonraki sürümlerinde kullanılabilir.

    GlobalLog yönergesi ana sunucu yapılandırması ve tüm tanımlı sanal konaklarca paylaşılan bir günlük tanımlar.

    GlobalLog yönergesi aşağıdaki farklar dışında CustomLog yönergesine eşdeğerdir:

    • GlobalLog sanal konak baÄŸlamında belirtilirse geçersizdir.
    • Sanal konaklar küresel baÄŸlamda belirtilmiÅŸ bir CustomLog yönergesinin tersine GlobalLog yönergesini kendi CustomLog yönergesiymiÅŸ gibi kullanır.
    top

    LogFormat Yönergesi

    Açıklama:Bir günlük dosyasında kullanılmak üzere girdi biçemi tanımlar.
    Sözdizimi:LogFormat biçem|takma-ad [takma-ad]
    Öntanımlı:LogFormat "%h %l %u %t \"%r\" %>s %b"
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Temel
    Modül:mod_log_config

    Bu yönerge erişim günlüğü dosyasının girdi biçemini belirler.

    LogFormat yönergesi iki şekilde kullanılabilir. Tek argüman belirtilebilen ilkinde daha sonra TransferLog yönergelerinde belirtilen günlüklerde kullanılmak üzere günlük biçemini belirler. Bu günlük biçemi yukarıda açıklanan biçem belirteçlerinden oluşur. Bu tek argüman yerine aşağıda açıklandığı gibi önceki bir LogFormat yönergesinde tanımlanmış bir günlük biçemine atıf yapan bir takma-ad da belirtilebilir.

    LogFormat yönergesinin ikinci kullanım şeklinde biçem bir takma-ad için tanımlanır. Bu takma ad daha sonraki LogFormat veya CustomLog yönergelerinde aynı biçem dizgesini uzun uzadıya yazmamak için takma-ad olarak kullanılır. Bir LogFormat yönergesi bir takma ad tanımlamaktan başka bir şey yapmaz; yani, yaptığı iş sadece bir takma ad tanımlamaktan ibarettir, biçemi uygulamaz veya biçemi öntanımlı hale getirmez. Bu bakımdan sonraki TransferLog yönergelerini de etkilemeyecektir. Ayrıca, LogFormat yönergesi bir takma ada başka bir takma ad tanımlamakta da kullanılamaz. Bir takma adın yüzde imi (%) içeremeyeceğine de dikkat ediniz.

    LogFormat "%v %h %l %u %t \"%r\" %>s %b" vhost_common
    top

    TransferLog Yönergesi

    Açıklama:Bir günlük dosyasının yerini belirtir.
    Sözdizimi:TransferLog dosya|borulu-süreç [takma-ad]
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Temel
    Modül:mod_log_config

    Bir günlük biçemi tanımlanmasını ve şarta bağlı günlük kaydını mümkün kılmaması haricinde CustomLog yönergesi gibidir. Günlük biçemi yerine kendinden önce yer alan bir LogFormat yönergesinde tanımlanan bir takma ad kullanılır. Açıkça bir günlük biçemi takma adı belirtilmedikçe Ortak Günlük Biçemi öntanımlıdır.

    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\""
    TransferLog "logs/access_log"

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_setenvif.html.fr.utf80000644000000000000500000005604713412755316021106 0ustar rootsrc mod_setenvif - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_setenvif

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Permet de définir des variables d'environnement en fonction de certainescaractéristiques de la requête
    Statut:Base
    Identificateur de Module:setenvif_module
    Fichier Source:mod_setenvif.c

    Sommaire

    Le module mod_setenvif vous permet de définir des variables d'environnement internes de manière conditionnelle en fonction de critères que vous pouvez spécifier. Ces variables d'environnement peuvent être utilisées par d'autres parties du serveur pour prendre des décisions quant aux actions à entreprendre, et pour déterminer si les scripts CGI et les pages SSI doivent pouvoir y accéder.

    Les directives sont interprétées selon l'ordre dans lequel elles apparaîssent dans les fichiers de configuration. Ainsi, des séquences plus complexes peuvent être utilisées, comme dans cet exemple qui définit netscape si le navigateur est Mozilla et non MSIE.

    BrowserMatch ^Mozilla netscape
    BrowserMatch MSIE !netscape

    Lorsque le serveur cherche un chemin via une sous-requête interne (par exemple la recherche d'un DirectoryIndex), ou lorsqu'il génère un listing du contenu d'un répertoire via le module mod_autoindex, la sous-requête n'hérite pas des variables d'environnement spécifiques à la requête. En outre, à cause des phases de l'API auxquelles mod_setenvif prend part, les directives SetEnvIf ne sont pas évaluées séparément dans la sous-requête.

    top

    Directive BrowserMatch

    Description:Définit des variables d'environnement en fonction du contenu de l'en-tête HTTP User-Agent
    Syntaxe:BrowserMatch regex [!]env-variable[=valeur] [[!]env-variable[=valeur]] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_setenvif

    La directive BrowserMatch est un cas particulier de la directive SetEnvIf, qui définit des variables d'environnement en fonction du contenu de l'en-tête de requête HTTP User-Agent. Les deux lignes suivantes produisent le même effet :

    BrowserMatch Robot is_a_robot
    SetEnvIf User-Agent Robot is_a_robot

    Quelques exemples supplémentaires :

    BrowserMatch ^Mozilla forms jpeg=yes browser=netscape
    BrowserMatch "^Mozilla/[2-3]" tables agif frames javascript
    BrowserMatch MSIE !javascript
    top

    Directive BrowserMatchNoCase

    Description:Définit des variables d'environnement en fonction du contenu de l'en-tête HTTP User-Agent sans tenir compte de la casse
    Syntaxe:BrowserMatchNoCase regex [!]env-variable[=valeur] [[!]env-variable[=valeur]] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_setenvif

    La directive BrowserMatchNoCase est identique sur le plan sémantique à la directive BrowserMatch. Elle permet cependant une comparaison insensible à la casse. Par exemple :

    BrowserMatchNoCase mac platform=macintosh
    BrowserMatchNoCase win platform=windows

    Les directives BrowserMatch et BrowserMatchNoCase sont des cas particuliers des directives SetEnvIf et SetEnvIfNoCase. Ainsi, les deux lignes suivantes produisent le même effet :

    BrowserMatchNoCase Robot is_a_robot
    SetEnvIfNoCase User-Agent Robot is_a_robot
    top

    Directive SetEnvIf

    Description:Définit des variables d'environnement en fonction des attributs de la requête
    Syntaxe:SetEnvIf attribut regex [!]env-variable[=valeur] [[!]env-variable[=valeur]] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_setenvif

    La directive SetEnvIf permet de définir des variables d'environnement en fonction des attributs de la requête. L'attribut spécifié comme premier argument peut se présenter sous l'une des trois formes suivantes :

    1. Un champ d'en-tête de requête HTTP (voir la RFC2616 pour plus d'information à leur propos) ; par exemple : Host, User-Agent, Referer, ou Accept-Language. Il est possible d'utiliser une expression rationnelle pour spécifier un jeu d'en-têtes de requête.
    2. Une des caractéristiques de la requête suivantes :
      • Remote_Host - le nom d'hôte (s'il est disponible) du client qui effectue la requête
      • Remote_Addr - l'adresse IP du client qui effectue la requête
      • Server_Addr - l'adresse IP du serveur qui a reçu la requête (uniquement à partir des versions supérieures à 2.0.43)
      • Request_Method - Le nom de la méthode HTTP utilisée (GET, POST, et cetera...)
      • Request_Protocol - le nom et la version du protocole utilisé pour la requête (par exemple "HTTP/0.9", "HTTP/1.1", etc...)
      • Request_URI - la ressource demandée dans la ligne de requête HTTP -- en général la partie de l'URL suivant le protocole et le nom du serveur, sans la chaîne d'arguments. Voir la directive RewriteCond du module mod_rewrite pour plus d'informations sur la manière de mettre en correspondance votre chaîne d'arguments.
    3. Le nom d'une variable d'environnement parmi la liste de celles qui sont associées à la requête. Ceci permet à la directive SetEnvIf d'effectuer des tests en fonction du résultat de comparaisons précédentes. Seules les variables d'environnement définies par des directives SetEnvIf[NoCase] précédentes sont disponibles pour effectuer des tests de cette manière. 'Précédentes' signifie qu'elles se trouvent à un niveau plus global de la configuration (par exemple au niveau du serveur principal), ou plus haut chronologiquement dans le contexte de la directive. Les variables d'environnement ne seront prises en compte que si aucune correspondance n'a été trouvée parmi les caractéristiques de la requête, et si attribut n'a pas été spécifié sous la forme d'une expression rationnelle.

    Le second argument (regex) est une expression rationnelle. Si regex correspond à l'attribut, les arguments suivants sont évalués.

    Le reste des arguments constitue les noms des variables à définir, ainsi que les valeurs optionnelles qui doivent leur être affectées. Ils peuvent se présenter sous les formes suivantes :

    1. nom-variable, ou
    2. !nom-variable, ou
    3. nom-variable=valeur

    Dans la première forme, la valeur sera définie à "1". Dans la seconde forme, la variable sera supprimée si elle a été définie au préalable, et dans la troisième forme, la variable sera définie à la valeur littérale spécifiée par valeur. Depuis la version 2.0.51, Apache httpd reconnaît les occurrences de variables $1..$9 à l'intérieur de valeur, et les remplace par les sous-expressions entre parenthèses correspondantes de regex. $0 permet d'accéder à l'ensemble de la chaîne qui correspond à ce modèle.

    SetEnvIf Request_URI "\.gif$" object_is_image=gif
    SetEnvIf Request_URI "\.jpg$" object_is_image=jpg
    SetEnvIf Request_URI "\.xbm$" object_is_image=xbm
        
    SetEnvIf Referer www\.mydomain\.example\.com intra_site_referral
        
    SetEnvIf object_is_image xbm XBIT_PROCESSING=1
    
    SetEnvIf Request_URI "\.(.*)$" EXTENSION=$1
        
    SetEnvIf ^TS  ^[a-z]  HAVE_TS

    Les trois premières lignes définissent la variable d'environnement objet_est_une_image si l'objet de la requête est un fichier image, et la quatrième définit la variable intra_site_referral si la page référante se trouve quelque part dans le site web www.mydomain.example.com.

    La dernière ligne définit la variable d'environnement HAVE_TS si la requête contient un en-tête dont le nom commence par "TS" et dont la valeur commence par tout caractère du jeu [a-z].

    Voir aussi

    top

    Directive SetEnvIfExpr

    Description:Définit des variables d'environnement en fonction d'une expression ap_expr
    Syntaxe:SetEnvIfExpr expr [!]env-variable[=valeur] [[!]env-variable[=valeur]] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_setenvif

    La directive SetEnvIfExpr permet de définir des variables d'environnement en fonction d'une expression <If> ap_expr. Cette expression est évaluée à l'exécution, et utilise les variables d'environnement env-variable de la même manière que la directive SetEnvIf.

    SetEnvIfExpr "tolower(req('X-Sendfile')) == 'd:\images\very_big.iso')" iso_delivered

    Dans cet exemple, la variable d'environnement iso_delivered est définie chaque fois que notre application tente de l'envoyer via X-Sendfile.

    Il pourrait être plus utile de définir une variable rfc1918 si l'adresse IP distante est une adresse privée au sens de la RFC 1918 :

    SetEnvIfExpr "-R '10.0.0.0/8' || -R '172.16.0.0/12' || -R '192.168.0.0/16'" rfc1918

    Voir aussi

    top

    Directive SetEnvIfNoCase

    Description:Définit des variables d'environnement en fonction des attributs de la requête sans tenir compte de la casse
    Syntaxe:SetEnvIfNoCase attribut regex [!]env-variable[=valeur] [[!]env-variable[=valeur]] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_setenvif

    La directive SetEnvIfNoCase est identique d'un point de vue sémantique à la directive SetEnvIf, et ne s'en distingue que par le fait que la comparaison des expressions rationnelles est effectuée sans tenir compte de la casse. Par exemple :

    SetEnvIfNoCase Host Example\.Org site=example

    Cette ligne va définir la variable d'environnement site avec la valeur "example" si le champ d'en-tête de requête HTTP Host: est présent et contient Example.Org, example.org, ou une autre combinaison des mêmes caractères, sans tenir compte de la casse.

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_imagemap.html.ko.euc-kr0000644000000000000500000004742613412755316021346 0ustar rootsrc mod_imagemap - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_imagemap

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:¼­¹öÃø À̹ÌÁö¸Ê(imagemap) ó¸®
    »óÅÂ:Base
    ¸ðµâ¸í:imagemap_module
    ¼Ò½ºÆÄÀÏ:mod_imagemap.c

    ¿ä¾à

    ÀÌ ¸ðµâÀº imagemap CGI ÇÁ·Î±×·¥À» ´ë½ÅÇÏ¿© .map ÆÄÀÏÀ» ó¸®ÇÑ´Ù. ÀÌ ¸ðµâÀº (AddHandler³ª SetHandler¸¦ »ç¿ëÇÏ¿©) imap-file Çڵ鷯¸¦ »ç¿ëÇϵµ·Ï ¼³Á¤ÇÑ µð·ºÅ丮³ª ¹®¼­¸¦ ó¸®ÇÑ´Ù.

    ¾Æ·¡ Áö½Ã¾î´Â .mapÀ¸·Î ³¡³ª´Â ÆÄÀÏÀ» À̹ÌÁö¸Ê ÆÄÀÏ·Î ¼³Á¤ÇÑ´Ù.

    AddHandler imap-file map

    ¾ÆÁ÷µµ ¾Æ·¡¿Í °°Àº ¼³Á¤À» Áö¿øÇÑ´Ù.

    AddType application/x-httpd-imap map

    ±×·¯³ª ¿ì¸®´Â Á¡Â÷ "¼­¹ö¿¡°Ô Ưº°ÇÑ Àǹ̰¡ ÀÖ´Â MIME type"À» Á¦°ÅÇÏ·Á°í Çϱ⶧¹®¿¡ ÀÌ ¹æ¹ýÀº ¾ø¾îÁú °ÍÀÌ´Ù.

    top

    »õ·Î¿î ±â´É

    À̹ÌÁö¸Ê ¸ðµâ¿¡´Â ÀÌÀü À̹ÌÁö¸Ê ÇÁ·Î±×·¥¿¡´Â ¾ø´Â ¸î°¡Áö »õ·Î¿î ±â´ÉÀÌ ÀÖ´Ù.

    • Referer: Á¤º¸¿¡ »ó´ëÀûÀÎ URL ÂüÁ¶.
    • »õ·Î¿î base ¸ÊÁö½Ã¾î¸¦ »ç¿ëÇÏ¿© ±âº» <base> ÁöÁ¤.
    • imagemap.conf ÆÄÀÏ ÇÊ¿ä¾øÀ½.
    • Á¡(point) ÂüÁ¶.
    • À̹ÌÁö¸Ê ¸Þ´º Á¶Á¤ °¡´É.
    top

    À̹ÌÁö¸Ê ÆÄÀÏ

    À̹ÌÁö¸Ê ÆÄÀÏÀº ¾Æ·¡¿Í °°Àº Çü½ÄÀ¸·Î ÀÛ¼ºÇÑ´Ù.

    directive value [x,y ...]
    directive value "Menu text" [x,y ...]
    directive value x,y ... "Menu text"

    directive´Â base, default, poly, circle, rect, point Áß Çϳª´Ù. value¿¡´Â Àý´ë URLÀ̳ª »ó´ë URL ȤÀº ¾Æ·¡¿¡¼­ ¿­°ÅÇÒ Æ¯¼ö°ªÀ» »ç¿ëÇÑ´Ù. ÁÂÇ¥´Â °ø¹éÀ¸·Î ±¸ºÐÇÑ x,y ½ÖÀÌ´Ù. µû¿ÈÇ¥·Î ¹­Àº ¹®±¸´Â À̹ÌÁö¸Ê ¸Þ´º¸¦ ¸¸µé¶§ ¸µÅ© Á¦¸ñÀ¸·Î »ç¿ëÇÑ´Ù. '#'·Î ½ÃÀÛÇÏ´Â ÁÙÀº ÁÖ¼®ÀÌ´Ù.

    À̹ÌÁö¸Ê ÆÄÀÏ Áö½Ã¾î

    À̹ÌÁö¸Ê ÆÄÀÏ¿¡¼­ 6°¡Áö Áö½Ã¾î¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù. Áö½Ã¾î´Â Ưº°ÇÑ ¼ø¼­¾øÀÌ »ç¿ëÇÒ ¼ö ÀÖÁö¸¸, À̹ÌÁö¸Ê ÆÄÀÏ¿¡ ³ª¿Â ¼ø¼­´ë·Î ó¸®ÇÑ´Ù.

    base Áö½Ã¾î

    <base href="value"> ±â´ÉÀ» ÇÑ´Ù. ¸ÊÆÄÀÏ¿¡¼­ ³ª¿À´Â URLÀº Àý´ë URLÀÌ ¾Æ´Ï¶ó¸é ÀÌ °ª¿¡ »ó´ë URL·Î Ãë±ÞÇÑ´Ù. base Áö½Ã¾î´Â .htaccess ÆÄÀÏÀ̳ª ¼­¹ö¼³Á¤ÆÄÀÏ¿¡¼­ ¼³Á¤ÇÑ ImapBase °ªÀ» ¹«½ÃÇÑ´Ù. ImapBase ¼³Á¤Áö½Ã¾î°¡ ¾ø´Ù¸é ±âº» base °ªÀº http://server_name/ÀÌ´Ù.

    base_uri´Â base¿Í °°´Ù. URL¿¡¼­ ¸¶Áö¸· ½½·¡½¬¸¦ ÀØÁö¸¶¶ó.

    default Áö½Ã¾î
    ÇØ´ç ÁÂÇ¥°¡ poly, circle, rect Áö½Ã¾î¿¡ ÇØ´çÇÏÁö ¾Ê°í point Áö½Ã¾î¸¦ »ç¿ëÇÏÁö ¾ÊÀº °æ¿ì ÇൿÀ» ÁöÁ¤ÇÑ´Ù. ImapDefault ¼³Á¤ÀÌ ¾ø´Ù¸é ±âº»°ªÀº 204 No Content »óÅÂÄڵ带 ¹ÝȯÇÏ´Â nocontentÀÌ´Ù. ÀÌ °æ¿ì Ŭ¶óÀÌ¾ðÆ®´Â µ¿ÀÏÇÑ ÆäÀÌÁö¸¦ º¸¿©Áà¾ß ÇÑ´Ù.
    poly Áö½Ã¾î
    Á¡À» ¼¼°³¿¡¼­ ¹é°³±îÁö ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù. »ç¿ëÀÚ°¡ ÀÌ Á¡µé·Î ÀÌ·ç¾îÁø ´Ù°¢Çü ¾ÈÀÇ ÁÂÇ¥¸¦ ¼±ÅÃÇÑ °æ¿ì¿¡ »ç¿ëÇÑ´Ù.
    circle
    ¿øÀÇ Á߽ɰú ¿øÀ§ÀÇ ÇÑ Á¡ÀÇ ÁÂÇ¥¸¦ ¹Þ´Â´Ù. »ç¿ëÀÚ°¡ ¿ø ¾ÈÀÇ ÁÂÇ¥¸¦ ¼±ÅÃÇÑ °æ¿ì¿¡ »ç¿ëÇÑ´Ù.
    rect Áö½Ã¾î
    »ç°¢ÇüÀÇ µÎ ¸ð¼­¸® Á¡ÀÇ ÁÂÇ¥¸¦ ¹Þ´Â´Ù. »ç°¢Çü ¾ÈÀÇ ÁÂÇ¥¸¦ ¼±ÅÃÇÑ °æ¿ì¿¡ »ç¿ëÇÑ´Ù.
    point Áö½Ã¾î
    ÇÑ Á¡ÀÇ ÁÂÇ¥¸¦ ¹Þ´Â´Ù. ´Ù¸¥ Áö½Ã¾îµéÀ» ¸¸Á·ÇÏÁö ¾ÊÀº °æ¿ì »ç¿ëÀÚ°¡ ¼±ÅÃÇÑ ÁÂÇ¥¿¡ °¡Àå °¡±î¿î point Áö½Ã¾î¸¦ »ç¿ëÇÑ´Ù. point Áö½Ã¾î¸¦ »ç¿ëÇϰí À¯È¿ÇÑ ÁÂÇ¥¸¦ ¼±ÅÃÇÑ °æ¿ì default´Â Àý´ë·Î »ç¿ëµÇÁö ¾Ê´Â´Ù.

    Áö½Ã¾î¿¡ »ç¿ëÇÒ ¼ö ÀÖ´Â °ªµé

    Áö½Ã¾î¿¡ ¾Æ·¡ value¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    URL

    »ó´ë URLÀ̳ª Àý´ë URLÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù. »ó´ë URL¿¡ '..'À» »ç¿ëÇÒ ¼ö ÀÖÀ¸¸ç, base °ªÀ» ±âÁØÀ¸·Î ã´Â´Ù.

    base¸¦ ¼³Á¤ÇÒ¶§´Â ÇöÀç base°ªÀº ¹«½ÃÇÑ´Ù. ±×·¯³ª, base mailto: ¹®Àº »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    map
    À̹ÌÁö¸Ê ÆÄÀÏ ÀÚü URL°ú °°´Ù. ÁÂÇ¥°¡ ¾ø°í ImapMenu°¡ noneÀÌ ¾Æ´Ï¶ó¸é ¸Þ´º¸¦ ¸¸µç´Ù.
    menu
    map°ú °°´Ù.
    referer
    ÂüÁ¶(¸µÅ©¸¦ µû¶ó¿À±â Àü) ¹®¼­ URL°ú °°´Ù. Referer: Çì´õ°¡ ¾ø´Ù¸é ±âº»°ªÀº http://servername/ÀÌ´Ù.
    nocontent
    Ŭ¶óÀÌ¾ðÆ®¿¡°Ô µ¿ÀÏÇÑ ÆäÀÌÁö¸¦ ±×´ë·Î º¸¿©ÁÖ¶ó´Â 204 No Content »óÅÂÄڵ带 º¸³½´Ù. base¸¦ Á¦¿ÜÇÑ ¸ðµç Áö½Ã¾î¿¡¼­ »ç¿ëÇÒ ¼ö ÀÖ´Ù.
    error
    ½ÇÆÐ¸¦ ³ªÅ¸³»´Â 500 Server Error¸¦ º¸³½´Ù. base¸¦ Á¦¿ÜÇÑ ¸ðµç Áö½Ã¾î¿¡¼­ »ç¿ëÇÒ ¼ö ÀÖÁö¸¸, default ¿Ü¿¡´Â »ç¿ëÇÒ ÀÏÀÌ ¾ø´Ù.

    ÁÂÇ¥

    0,0 200,200
    ÁÂÇ¥´Â ½°Ç¥·Î ±¸ºÐÇÑ x¿Í y °ªÀÌ´Ù. ÁÂÇ¥µéÀº ¼­·Î °ø¹éÀ¸·Î ±¸ºÐÇÑ´Ù. À̹ÌÁö¸ÊÀ» ´Ù·ç´Â ¹æ½Ä»ó LynxÀÇ ÆíÀǸ¦ À§ÇØ »ç¿ëÀÚ°¡ 0,0 ÁÂÇ¥¸¦ ¼±ÅÃÇÏ¿´´Ù¸é ÁÂÇ¥¸¦ ¼±ÅÃÇÏÁö ¾ÊÀº °Íó·³ µ¿ÀÛÇÑ´Ù.

    µû¿ÈÇ¥·Î ¹­Àº ¹®±¸

    "Menu Text"

    value µÚ³ª ÁÂÇ¥ µÚ¿¡ ½Öµû¿ÈÇ¥·Î ¹­Àº ¹®±¸¸¦ ÀûÀ» ¼öµµ ÀÖ´Ù. ÀÌ ¹®ÀÚ¿­Àº ¸Þ´º¸¦ ¸¸µé¶§ ¸µÅ© Á¦¸ñÀ¸·Î »ç¿ëÇÑ´Ù.

    <a href="http://foo.com/">Menu text</a>

    µû¿ÈÇ¥·Î ¹­Àº ¹®±¸°¡ ¾ø´Ù¸é ´ÙÀ½°ú °°ÀÌ ¸µÅ©¸¦ ¸µÅ© Á¦¸ñÀ¸·Î »ç¿ëÇÑ´Ù.

    <a href="http://foo.com/">http://foo.com</a>

    ¹®±¸¿¡ ½Öµû¿ÈÇ¥¸¦ ¾²·Á¸é &quot;¿Í °°ÀÌ Àû¾î¾ß ÇÑ´Ù.

    top

    ¸ÊÆÄÀÏ ¿¹Á¦

    #'formatted'³ª 'semiformatted' ¸Þ´º´Â ÁÖ¼®À» Ãâ·ÂÇÑ´Ù.
    #±×¸®°í ÁÖ¼®¿¡ html ű׸¦ ¾µ ¼ö ÀÖ´Ù. <hr>
    base referer
    poly map "¸Þ´º¸¦ º¸¿©ÁÖ¼¼¿ä." 0,0 0,10 10,10 10,0
    rect .. 0,0 77,27 "ÂüÁ¶ ¹®¼­°¡ ÀÖ´Â µð·ºÅ丮"
    circle http://www.inetnebr.com/lincoln/feedback/ 195,0 305,27
    rect another_file "ÂüÁ¶ ¹®¼­¿Í °°Àº µð·ºÅ丮¿¡ ÀÖ´Â" 306,0 419,27
    point http://www.zyzzyva.com/ 100,100
    point http://www.tripod.com/ 200,200
    rect mailto:nate@tripod.com 100,150 200,0 "¹ö±×?"

    top

    ¸ÊÆÄÀÏ »ç¿ëÇϱâ

    HTML ¿¡Á¦

    <a href="/maps/imagemap1.map">
    <img ismap src="/images/imagemap1.gif">
    </a>

    XHTML ¿¹Á¦

    <a href="/maps/imagemap1.map">
    <img ismap="ismap" src="/images/imagemap1.gif" />
    </a>

    top

    ImapBase Áö½Ã¾î

    ¼³¸í:À̹ÌÁö¸Ê ÆÄÀÏ¿¡¼­ base ±âº»°ª
    ¹®¹ý:ImapBase map|referer|URL
    ±âº»°ª:ImapBase http://servername/
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_imagemap

    ImapBase Áö½Ã¾î´Â À̹ÌÁö¸Ê ÆÄÀÏ¿¡¼­ »ç¿ëÇÒ base ±âº»°ªÀ» ¼³Á¤ÇÑ´Ù. À̹ÌÁö¸Ê ÆÄÀÏ ¾È¿¡¼­ base Áö½Ã¾î¸¦ »ç¿ëÇÏ¸é ¿©±â¼­ ¼³Á¤ÇÑ °ªÀº ¹«½ÃÇÑ´Ù. µÑ ¸ðµÎ ¾ø´Ù¸é, base ±âº»°ªÀº http://servername/ÀÌ´Ù.

    Âü°í

    top

    ImapDefault Áö½Ã¾î

    ¼³¸í:À̹ÌÁö¸Ê¿¡ ¾î´À ¿µ¿ª¿¡µµ ÇØ´çÇÏÁö ¾Ê´Â ÁÂÇ¥¸¦ ÁØ °æ¿ì ±âº» Çൿ
    ¹®¹ý:ImapDefault error|nocontent|map|referer|URL
    ±âº»°ª:ImapDefault nocontent
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_imagemap

    ImapDefault Áö½Ã¾î´Â À̹ÌÁö¸Ê ÆÄÀÏ¿¡¼­ »ç¿ëÇÒ default ±âº»°ªÀ» ¼³Á¤ÇÑ´Ù. À̹ÌÁö¸Ê ÆÄÀÏ ¾È¿¡¼­ default Áö½Ã¾î¸¦ »ç¿ëÇÏ¸é ¿©±â¼­ ¼³Á¤ÇÑ °ªÀº ¹«½ÃÇÑ´Ù. µÑ ¸ðµÎ ¾ø´Ù¸é, default ÇൿÀº Ŭ¶óÀÌ¾ðÆ®¿¡°Ô 204 No Content¸¦ º¸³»´Â nocontentÀÌ´Ù. ÀÌ °æ¿ì Ŭ¶óÀÌ¾ðÆ®´Â ¿ø·¡ ÆäÀÌÁö¸¦ ±×´ë·Î º¸¿©Áà¾ß ÇÑ´Ù.

    top

    ImapMenu Áö½Ã¾î

    ¼³¸í:ÁÂÇ¥¾øÀÌ À̹ÌÁö¸Ê ¿äû½Ã ÃëÇÒ Çൿ
    ¹®¹ý:ImapMenu none|formatted|semiformatted|unformatted
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:Indexes
    »óÅÂ:Base
    ¸ðµâ:mod_imagemap

    ImapMenu Áö½Ã¾î´Â À̹ÌÁö¸Ê ÆÄÀÏ¿¡ À¯È¿ÇÑ ÁÂÇ¥¸¦ ÁÖÁö ¾ÊÀº °æ¿ì ÃëÇÒ ÇൿÀ» °áÁ¤ÇÑ´Ù.

    none
    ImapMenu°¡ noneÀ̸é, ¸Þ´º¸¦ ¸¸µéÁö¾Ê°í default ÇൿÀ» ÃëÇÑ´Ù.
    formatted
    formatted ¸Þ´º´Â °¡Àå °£´ÜÇÑ ¸Þ´º´Ù. À̹ÌÁö¸Ê ÆÄÀÏÀÇ ÁÖ¼®Àº ¹«½ÃÇÑ´Ù. °¡Àå Å« Ç¥Á¦¿Í ¼öÁ÷¼±À» Ãâ·ÂÇϰí, ¸µÅ©¸¦ ÇÑÁÙ¾¿ Ãâ·ÂÇÑ´Ù. ¸Þ´º´Â ÀϰüµÇ°í ÆòÀÌÇϸç, µð·ºÅ丮 ¸ñ·Ï°ú Èí»çÇÏ´Ù.
    semiformatted
    semiformatted ¸Þ´º´Â À̹ÌÁö¸Ê ÆÄÀÏ¿¡ ³ª¿À´Â ÁÖ¼®À» Ãâ·ÂÇÑ´Ù. ºóÁÙÀº HTML Çà¹Ù²ÞÀ¸·Î º¯È¯ÇÑ´Ù. Ç¥Á¦³ª ¼öÁ÷¼±À» ±×¸®Áö ¾ÊÁö¸¸, ³ª¸ÓÁö´Â formatted ¸Þ´º¿Í °°´Ù.
    unformatted
    ÁÖ¼®Àº Ãâ·ÂÇϰí, ºóÁÙÀº ¹«½ÃÇÑ´Ù. À̹ÌÁö¸Ê ÆÄÀÏ¿¡ ÀÖ´Â ³»¿ë¸¸ Ãâ·ÂÇÑ´Ù. À̹ÌÁö¸Ê ÆÄÀÏÀÇ ÁÖ¼®¿¡ ÇÊ¿äÇÑ ¸ðµç Çà¹Ù²Þ°ú Ç¥Á¦¸¦ Àû¾î¾ß ÇÑ´Ù. ¸Þ´ºÀÇ ¿Ü°üÀ» °¡Àå ÀÚÀ¯ÀÚÁ¦·Î ²Ù¹Ð ¼ö ÀÖÁö¸¸, À̹ÌÁö¸Ê ÆÄÀÏÀ» »ç½Ç»ó ÀÏ¹Ý ¹®ÀÚÆÄÀÏÀÌ ¾Æ´Ñ HTML·Î ºÁ¾ß ÇÑ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_alias.html.en0000644000000000000500000011151513412755316017452 0ustar rootsrc mod_alias - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_alias

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Provides for mapping different parts of the host filesystem in the document tree and for URL redirection
    Status:Base
    Module Identifier:alias_module
    Source File:mod_alias.c

    Summary

    The directives contained in this module allow for manipulation and control of URLs as requests arrive at the server. The Alias and ScriptAlias directives are used to map between URLs and filesystem paths. This allows for content which is not directly under the DocumentRoot served as part of the web document tree. The ScriptAlias directive has the additional effect of marking the target directory as containing only CGI scripts.

    The Redirect directives are used to instruct clients to make a new request with a different URL. They are often used when a resource has moved to a new location.

    When the Alias, ScriptAlias and Redirect directives are used within a <Location> or <LocationMatch> section, expression syntax can be used to manipulate the destination path or URL.

    mod_alias is designed to handle simple URL manipulation tasks. For more complicated tasks such as manipulating the query string, use the tools provided by mod_rewrite.

    top

    Order of Processing

    Aliases and Redirects occurring in different contexts are processed like other directives according to standard merging rules. But when multiple Aliases or Redirects occur in the same context (for example, in the same <VirtualHost> section) they are processed in a particular order.

    First, all Redirects are processed before Aliases are processed, and therefore a request that matches a Redirect or RedirectMatch will never have Aliases applied. Second, the Aliases and Redirects are processed in the order they appear in the configuration files, with the first match taking precedence.

    For this reason, when two or more of these directives apply to the same sub-path, you must list the most specific path first in order for all the directives to have an effect. For example, the following configuration will work as expected:

    Alias "/foo/bar" "/baz"
    Alias "/foo" "/gaq"

    But if the above two directives were reversed in order, the /foo Alias would always match before the /foo/bar Alias, so the latter directive would be ignored.

    When the Alias, ScriptAlias and Redirect directives are used within a <Location> or <LocationMatch> section, these directives will take precedence over any globally defined Alias, ScriptAlias and Redirect directives.

    top

    Alias Directive

    Description:Maps URLs to filesystem locations
    Syntax:Alias [URL-path] file-path|directory-path
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_alias

    The Alias directive allows documents to be stored in the local filesystem other than under the DocumentRoot. URLs with a (%-decoded) path beginning with URL-path will be mapped to local files beginning with directory-path. The URL-path is case-sensitive, even on case-insensitive file systems.

    Alias "/image" "/ftp/pub/image"

    A request for http://example.com/image/foo.gif would cause the server to return the file /ftp/pub/image/foo.gif. Only complete path segments are matched, so the above alias would not match a request for http://example.com/imagefoo.gif. For more complex matching using regular expressions, see the AliasMatch directive.

    Note that if you include a trailing / on the URL-path then the server will require a trailing / in order to expand the alias. That is, if you use

    Alias "/icons/" "/usr/local/apache/icons/"

    then the URL /icons will not be aliased, as it lacks that trailing /. Likewise, if you omit the slash on the URL-path then you must also omit it from the file-path.

    Note that you may need to specify additional <Directory> sections which cover the destination of aliases. Aliasing occurs before <Directory> sections are checked, so only the destination of aliases are affected. (Note however <Location> sections are run through once before aliases are performed, so they will apply.)

    In particular, if you are creating an Alias to a directory outside of your DocumentRoot, you may need to explicitly permit access to the target directory.

    Alias "/image" "/ftp/pub/image"
    <Directory "/ftp/pub/image">
        Require all granted
    </Directory>

    Any number slashes in the URL-path parameter matches any number of slashes in the requested URL-path.

    If the Alias directive is used within a <Location> or <LocationMatch> section the URL-path is omitted, and the file-path is interpreted using expression syntax.
    This syntax is available in Apache 2.4.19 and later.

    <Location "/image">
        Alias "/ftp/pub/image"
    </Location>
    <LocationMatch "/error/(?<NUMBER>[0-9]+)">
        Alias "/usr/local/apache/errors/%{env:MATCH_NUMBER}.html"
    </LocationMatch>
    top

    AliasMatch Directive

    Description:Maps URLs to filesystem locations using regular expressions
    Syntax:AliasMatch regex file-path|directory-path
    Context:server config, virtual host
    Status:Base
    Module:mod_alias

    This directive is equivalent to Alias, but makes use of regular expressions, instead of simple prefix matching. The supplied regular expression is matched against the URL-path, and if it matches, the server will substitute any parenthesized matches into the given string and use it as a filename. For example, to activate the /icons directory, one might use:

    AliasMatch "^/icons(/|$)(.*)" "/usr/local/apache/icons$1$2"

    The full range of regular expression power is available. For example, it is possible to construct an alias with case-insensitive matching of the URL-path:

    AliasMatch "(?i)^/image(.*)" "/ftp/pub/image$1"

    One subtle difference between Alias and AliasMatch is that Alias will automatically copy any additional part of the URI, past the part that matched, onto the end of the file path on the right side, while AliasMatch will not. This means that in almost all cases, you will want the regular expression to match the entire request URI from beginning to end, and to use substitution on the right side.

    In other words, just changing Alias to AliasMatch will not have the same effect. At a minimum, you need to add ^ to the beginning of the regular expression and add (.*)$ to the end, and add $1 to the end of the replacement.

    For example, suppose you want to replace this with AliasMatch:

    Alias "/image/" "/ftp/pub/image/"

    This is NOT equivalent - don't do this! This will send all requests that have /image/ anywhere in them to /ftp/pub/image/:

    AliasMatch "/image/" "/ftp/pub/image/"

    This is what you need to get the same effect:

    AliasMatch "^/image/(.*)$" "/ftp/pub/image/$1"

    Of course, there's no point in using AliasMatch where Alias would work. AliasMatch lets you do more complicated things. For example, you could serve different kinds of files from different directories:

    AliasMatch "^/image/(.*)\.jpg$" "/files/jpg.images/$1.jpg"
    AliasMatch "^/image/(.*)\.gif$" "/files/gif.images/$1.gif"

    Multiple leading slashes in the requested URL are discarded by the server before directives from this module compares against the requested URL-path.

    top

    Redirect Directive

    Description:Sends an external redirect asking the client to fetch a different URL
    Syntax:Redirect [status] [URL-path] URL
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_alias

    The Redirect directive maps an old URL into a new one by asking the client to refetch the resource at the new location.

    The old URL-path is a case-sensitive (%-decoded) path beginning with a slash. A relative path is not allowed.

    The new URL may be either an absolute URL beginning with a scheme and hostname, or a URL-path beginning with a slash. In this latter case the scheme and hostname of the current server will be added.

    Then any request beginning with URL-path will return a redirect request to the client at the location of the target URL. Additional path information beyond the matched URL-path will be appended to the target URL.

    # Redirect to a URL on a different host
    Redirect "/service" "http://foo2.example.com/service"
    
    # Redirect to a URL on the same host
    Redirect "/one" "/two"

    If the client requests http://example.com/service/foo.txt, it will be told to access http://foo2.example.com/service/foo.txt instead. This includes requests with GET parameters, such as http://example.com/service/foo.pl?q=23&a=42, it will be redirected to http://foo2.example.com/service/foo.pl?q=23&a=42. Note that POSTs will be discarded.
    Only complete path segments are matched, so the above example would not match a request for http://example.com/servicefoo.txt. For more complex matching using the expression syntax, omit the URL-path argument as described below. Alternatively, for matching using regular expressions, see the RedirectMatch directive.

    Note

    Redirect directives take precedence over Alias and ScriptAlias directives, irrespective of their ordering in the configuration file. Redirect directives inside a Location take precedence over Redirect and Alias directives with an URL-path.

    If no status argument is given, the redirect will be "temporary" (HTTP status 302). This indicates to the client that the resource has moved temporarily. The status argument can be used to return other HTTP status codes:

    permanent
    Returns a permanent redirect status (301) indicating that the resource has moved permanently.
    temp
    Returns a temporary redirect status (302). This is the default.
    seeother
    Returns a "See Other" status (303) indicating that the resource has been replaced.
    gone
    Returns a "Gone" status (410) indicating that the resource has been permanently removed. When this status is used the URL argument should be omitted.

    Other status codes can be returned by giving the numeric status code as the value of status. If the status is between 300 and 399, the URL argument must be present. If the status is not between 300 and 399, the URL argument must be omitted. The status must be a valid HTTP status code, known to the Apache HTTP Server (see the function send_error_response in http_protocol.c).

    Redirect permanent "/one" "http://example.com/two"
    Redirect 303 "/three" "http://example.com/other"

    If the Redirect directive is used within a <Location> or <LocationMatch> section with the URL-path omitted, then the URL parameter will be interpreted using expression syntax.
    This syntax is available in Apache 2.4.19 and later.

    <Location "/one">
        Redirect permanent "http://example.com/two"
    </Location>
    <Location "/three">
        Redirect 303 "http://example.com/other"
    </Location>
    <LocationMatch "/error/(?<NUMBER>[0-9]+)">
        Redirect permanent "http://example.com/errors/%{env:MATCH_NUMBER}.html"
    </LocationMatch>
    top

    RedirectMatch Directive

    Description:Sends an external redirect based on a regular expression match of the current URL
    Syntax:RedirectMatch [status] regex URL
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_alias

    This directive is equivalent to Redirect, but makes use of regular expressions, instead of simple prefix matching. The supplied regular expression is matched against the URL-path, and if it matches, the server will substitute any parenthesized matches into the given string and use it as a filename. For example, to redirect all GIF files to like-named JPEG files on another server, one might use:

    RedirectMatch "(.*)\.gif$" "http://other.example.com$1.jpg"

    The considerations related to the difference between Alias and AliasMatch also apply to the difference between Redirect and RedirectMatch. See AliasMatch for details.

    top

    RedirectPermanent Directive

    Description:Sends an external permanent redirect asking the client to fetch a different URL
    Syntax:RedirectPermanent URL-path URL
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_alias

    This directive makes the client know that the Redirect is permanent (status 301). Exactly equivalent to Redirect permanent.

    top

    RedirectTemp Directive

    Description:Sends an external temporary redirect asking the client to fetch a different URL
    Syntax:RedirectTemp URL-path URL
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Base
    Module:mod_alias

    This directive makes the client know that the Redirect is only temporary (status 302). Exactly equivalent to Redirect temp.

    top

    ScriptAlias Directive

    Description:Maps a URL to a filesystem location and designates the target as a CGI script
    Syntax:ScriptAlias [URL-path] file-path|directory-path
    Context:server config, virtual host, directory
    Status:Base
    Module:mod_alias

    The ScriptAlias directive has the same behavior as the Alias directive, except that in addition it marks the target directory as containing CGI scripts that will be processed by mod_cgi's cgi-script handler. URLs with a case-sensitive (%-decoded) path beginning with URL-path will be mapped to scripts beginning with the second argument, which is a full pathname in the local filesystem.

    ScriptAlias "/cgi-bin/" "/web/cgi-bin/"

    A request for http://example.com/cgi-bin/foo would cause the server to run the script /web/cgi-bin/foo. This configuration is essentially equivalent to:

    Alias "/cgi-bin/" "/web/cgi-bin/"
    <Location "/cgi-bin">
        SetHandler cgi-script
        Options +ExecCGI
    </Location>

    ScriptAlias can also be used in conjunction with a script or handler you have. For example:

    ScriptAlias "/cgi-bin/" "/web/cgi-handler.pl"

    In this scenario all files requested in /cgi-bin/ will be handled by the file you have configured, this allows you to use your own custom handler. You may want to use this as a wrapper for CGI so that you can add content, or some other bespoke action.

    It is safer to avoid placing CGI scripts under the DocumentRoot in order to avoid accidentally revealing their source code if the configuration is ever changed. The ScriptAlias makes this easy by mapping a URL and designating CGI scripts at the same time. If you do choose to place your CGI scripts in a directory already accessible from the web, do not use ScriptAlias. Instead, use <Directory>, SetHandler, and Options as in:
    <Directory "/usr/local/apache2/htdocs/cgi-bin">
        SetHandler cgi-script
        Options ExecCGI
    </Directory>
    This is necessary since multiple URL-paths can map to the same filesystem location, potentially bypassing the ScriptAlias and revealing the source code of the CGI scripts if they are not restricted by a Directory section.

    If the ScriptAlias directive is used within a <Location> or <LocationMatch> section with the URL-path omitted, then the URL parameter will be interpreted using expression syntax.
    This syntax is available in Apache 2.4.19 and later.

    <Location "/cgi-bin">
        ScriptAlias "/web/cgi-bin/"
    </Location>
    <LocationMatch "/cgi-bin/errors/(?<NUMBER>[0-9]+)">
        ScriptAlias "/web/cgi-bin/errors/%{env:MATCH_NUMBER}.cgi"
    </LocationMatch>

    See also

    top

    ScriptAliasMatch Directive

    Description:Maps a URL to a filesystem location using a regular expression and designates the target as a CGI script
    Syntax:ScriptAliasMatch regex file-path|directory-path
    Context:server config, virtual host
    Status:Base
    Module:mod_alias

    This directive is equivalent to ScriptAlias, but makes use of regular expressions, instead of simple prefix matching. The supplied regular expression is matched against the URL-path, and if it matches, the server will substitute any parenthesized matches into the given string and use it as a filename. For example, to activate the standard /cgi-bin, one might use:

    ScriptAliasMatch "^/cgi-bin(.*)" "/usr/local/apache/cgi-bin$1"

    As for AliasMatch, the full range of regular expression power is available. For example, it is possible to construct an alias with case-insensitive matching of the URL-path:

    ScriptAliasMatch "(?i)^/cgi-bin(.*)" "/usr/local/apache/cgi-bin$1"

    The considerations related to the difference between Alias and AliasMatch also apply to the difference between ScriptAlias and ScriptAliasMatch. See AliasMatch for details.

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/directives.html.ko.euc-kr0000644000000000000500000015526713523273316021071 0ustar rootsrc Áö½Ã¾î ¸ñ·Ï - Apache HTTP Server Version 2.4
    <-

    Áö½Ã¾î ¸ñ·Ï

    °¡´ÉÇÑ ¾ð¾î:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    ´ÙÀ½Àº Ç¥ÁØ ¾ÆÆÄÄ¡ ¹èÆ÷º»¿¡¼­ »ç¿ë°¡´ÉÇÑ Áö½Ã¾î ¸ñ·ÏÀÌ´Ù. À̵éÀ» µ¿ÀÏÇÑ Çü½ÄÀ¸·Î ¼³¸íÇÏ¿´°í, ¼³¸í¿¡ »ç¿ëÇÑ ¿ë¾î »çÀüµµ ÀÖ´Ù.

    °¢ Áö½Ã¾î¸¦ ¿ä¾àÇÏ¿© ¼³¸íÇÑ Áö½Ã¾î ºü¸¥ÂüÁ¶µµ ÀÖ´Ù.

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 

    °¡´ÉÇÑ ¾ð¾î:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_include.html.en0000644000000000000500000016743013412755316020013 0ustar rootsrc mod_include - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_include

    Available Languages:  en  |  fr  |  ja 

    Description:Server-parsed html documents (Server Side Includes)
    Status:Base
    Module Identifier:include_module
    Source File:mod_include.c

    Summary

    This module provides a filter which will process files before they are sent to the client. The processing is controlled by specially formatted SGML comments, referred to as elements. These elements allow conditional text, the inclusion of other files or programs, as well as the setting and printing of environment variables.

    top

    Enabling Server-Side Includes

    Server Side Includes are implemented by the INCLUDES filter. If documents containing server-side include directives are given the extension .shtml, the following directives will make Apache parse them and assign the resulting document the mime type of text/html:

    AddType text/html .shtml
    AddOutputFilter INCLUDES .shtml

    The following directive must be given for the directories containing the shtml files (typically in a <Directory> section, but this directive is also valid in .htaccess files if AllowOverride Options is set):

    Options +Includes

    For backwards compatibility, the server-parsed handler also activates the INCLUDES filter. As well, Apache will activate the INCLUDES filter for any document with mime type text/x-server-parsed-html or text/x-server-parsed-html3 (and the resulting output will have the mime type text/html).

    For more information, see our Tutorial on Server Side Includes.

    top

    PATH_INFO with Server Side Includes

    Files processed for server-side includes no longer accept requests with PATH_INFO (trailing pathname information) by default. You can use the AcceptPathInfo directive to configure the server to accept requests with PATH_INFO.

    top

    Available Elements

    The document is parsed as an HTML document, with special commands embedded as SGML comments. A command has the syntax:

    <!--#element attribute=value attribute=value ... -->

    The value will often be enclosed in double quotes, but single quotes (') and backticks (`) are also possible. Many commands only allow a single attribute-value pair. Note that the comment terminator (-->) should be preceded by whitespace to ensure that it isn't considered part of an SSI token. Note that the leading <!--# is one token and may not contain any whitespaces.

    The allowed elements are listed in the following table:

    ElementDescription
    comment SSI comment
    config configure output formats
    echo print variables
    exec execute external programs
    fsize print size of a file
    flastmod print last modification time of a file
    include include a file
    printenv print all available variables
    set set a value of a variable

    SSI elements may be defined by modules other than mod_include. In fact, the exec element is provided by mod_cgi, and will only be available if this module is loaded.

    The comment Element

    This command doesn't output anything. Its only use is to add comments within a file. These comments are not printed.

    This syntax is available in version 2.4.21 and later.

    <!--#comment Blah Blah Blah -->

    The config Element

    This command controls various aspects of the parsing. The valid attributes are:

    echomsg (Apache 2.1 and later)

    The value is a message that is sent back to the client if the echo element attempts to echo an undefined variable. This overrides any SSIUndefinedEcho directives.

    <!--#config echomsg="[Value Undefined]" -->

    errmsg

    The value is a message that is sent back to the client if an error occurs while parsing the document. This overrides any SSIErrorMsg directives.

    <!--#config errmsg="[Oops, something broke.]" -->

    sizefmt

    The value sets the format to be used when displaying the size of a file. Valid values are bytes for a count in bytes, or abbrev for a count in Kb or Mb as appropriate, for example a size of 1024 bytes will be printed as "1K".

    <!--#config sizefmt="abbrev" -->

    timefmt

    The value is a string to be used by the strftime(3) library routine when printing dates.

    <!--#config timefmt=""%R, %B %d, %Y"" -->

    The echo Element

    This command prints one of the include variables defined below. If the variable is unset, the result is determined by the SSIUndefinedEcho directive. Any dates printed are subject to the currently configured timefmt.

    Attributes:

    var
    The value is the name of the variable to print.
    decoding

    Specifies whether Apache should strip an encoding from the variable before processing the variable further. The default is none, where no decoding will be done. If set to url, then URL decoding (also known as %-encoding; this is appropriate for use within URLs in links, etc.) will be performed. If set to urlencoded, application/x-www-form-urlencoded compatible encoding (found in query strings) will be stripped. If set to base64, base64 will be decoded, and if set to entity, HTML entity encoding will be stripped. Decoding is done prior to any further encoding on the variable. Multiple encodings can be stripped by specifying more than one comma separated encoding. The decoding setting will remain in effect until the next decoding attribute is encountered, or the element ends.

    The decoding attribute must precede the corresponding var attribute to be effective.

    encoding

    Specifies how Apache should encode special characters contained in the variable before outputting them. If set to none, no encoding will be done. If set to url, then URL encoding (also known as %-encoding; this is appropriate for use within URLs in links, etc.) will be performed. If set to urlencoded, application/x-www-form-urlencoded compatible encoding will be performed instead, and should be used with query strings. If set to base64, base64 encoding will be performed. At the start of an echo element, the default is set to entity, resulting in entity encoding (which is appropriate in the context of a block-level HTML element, e.g. a paragraph of text). This can be changed by adding an encoding attribute, which will remain in effect until the next encoding attribute is encountered or the element ends, whichever comes first.

    The encoding attribute must precede the corresponding var attribute to be effective.

    In order to avoid cross-site scripting issues, you should always encode user supplied data.

    Example

    <!--#echo encoding="entity" var="QUERY_STRING" -->

    The exec Element

    The exec command executes a given shell command or CGI script. It requires mod_cgi to be present in the server. If Options IncludesNOEXEC is set, this command is completely disabled. The valid attributes are:

    cgi

    The value specifies a (%-encoded) URL-path to the CGI script. If the path does not begin with a slash (/), then it is taken to be relative to the current document. The document referenced by this path is invoked as a CGI script, even if the server would not normally recognize it as such. However, the directory containing the script must be enabled for CGI scripts (with ScriptAlias or Options ExecCGI).

    The CGI script is given the PATH_INFO and query string (QUERY_STRING) of the original request from the client; these cannot be specified in the URL path. The include variables will be available to the script in addition to the standard CGI environment.

    Example

    <!--#exec cgi="/cgi-bin/example.cgi" -->

    If the script returns a Location: header instead of output, then this will be translated into an HTML anchor.

    The include virtual element should be used in preference to exec cgi. In particular, if you need to pass additional arguments to a CGI program, using the query string, this cannot be done with exec cgi, but can be done with include virtual, as shown here:

    <!--#include virtual="/cgi-bin/example.cgi?argument=value" -->

    cmd

    The server will execute the given string using /bin/sh. The include variables are available to the command, in addition to the usual set of CGI variables.

    The use of #include virtual is almost always prefered to using either #exec cgi or #exec cmd. The former (#include virtual) uses the standard Apache sub-request mechanism to include files or scripts. It is much better tested and maintained.

    In addition, on some platforms, like Win32, and on unix when using suexec, you cannot pass arguments to a command in an exec directive, or otherwise include spaces in the command. Thus, while the following will work under a non-suexec configuration on unix, it will not produce the desired result under Win32, or when running suexec:

    <!--#exec cmd="perl /path/to/perlscript arg1 arg2" -->

    The fsize Element

    This command prints the size of the specified file, subject to the sizefmt format specification. Attributes:

    file
    The value is a path relative to the directory containing the current document being parsed.

    This file is <!--#fsize file="mod_include.html" --> bytes.

    The value of file cannot start with a slash (/), nor can it contain ../ so as to refer to a file above the current directory or outside of the document root. Attempting to so will result in the error message: The given path was above the root path.
    virtual
    The value is a (%-encoded) URL-path. If it does not begin with a slash (/) then it is taken to be relative to the current document. Note, that this does not print the size of any CGI output, but the size of the CGI script itself.

    This file is <!--#fsize virtual="/docs/mod/mod_include.html" --> bytes.

    Note that in many cases these two are exactly the same thing. However, the file attribute doesn't respect URL-space aliases.

    The flastmod Element

    This command prints the last modification date of the specified file, subject to the timefmt format specification. The attributes are the same as for the fsize command.

    The include Element

    This command inserts the text of another document or file into the parsed file. Any included file is subject to the usual access control. If the directory containing the parsed file has Options IncludesNOEXEC set, then only documents with a text MIME-type (text/plain, text/html etc.) will be included. Otherwise CGI scripts are invoked as normal using the complete URL given in the command, including any query string.

    An attribute defines the location of the document, and may appear more than once in an include element; an inclusion is done for each attribute given to the include command in turn. The valid attributes are:

    file
    The value is a path relative to the directory containing the current document being parsed. It cannot contain ../, nor can it be an absolute path. Therefore, you cannot include files that are outside of the document root, or above the current document in the directory structure. The virtual attribute should always be used in preference to this one.
    virtual

    The value is a (%-encoded) URL-path. The URL cannot contain a scheme or hostname, only a path and an optional query string. If it does not begin with a slash (/) then it is taken to be relative to the current document.

    A URL is constructed from the attribute, and the output the server would return if the URL were accessed by the client is included in the parsed output. Thus included files can be nested.

    If the specified URL is a CGI program, the program will be executed and its output inserted in place of the directive in the parsed file. You may include a query string in a CGI url:

    <!--#include virtual="/cgi-bin/example.cgi?argument=value" -->

    include virtual should be used in preference to exec cgi to include the output of CGI programs into an HTML document.

    If the KeptBodySize directive is correctly configured and valid for this included file, attempts to POST requests to the enclosing HTML document will be passed through to subrequests as POST requests as well. Without the directive, all subrequests are processed as GET requests.

    onerror

    The value is a (%-encoded) URL-path which is shown should a previous attempt to include a file or virtual attribute failed. To be effective, this attribute must be specified after the file or virtual attributes being covered. If the attempt to include the onerror path fails, or if onerror is not specified, the default error message will be included.

    # Simple example
    <!--#include virtual="/not-exist.html" onerror="/error.html" -->

    # Dedicated onerror paths
    <!--#include virtual="/path-a.html" onerror="/error-a.html" virtual="/path-b.html" onerror="/error-b.html" -->

    The printenv Element

    This prints out a plain text listing of all existing variables and their values. Special characters are entity encoded (see the echo element for details) before being output. There are no attributes.

    Example

    <pre> <!--#printenv --> </pre>

    The set Element

    This sets the value of a variable. Attributes:

    var
    The name of the variable to set.
    value
    The value to give a variable.
    decoding

    Specifies whether Apache should strip an encoding from the variable before processing the variable further. The default is none, where no decoding will be done. If set to url, urlencoded, base64 or entity, URL decoding, application/x-www-form-urlencoded decoding, base64 decoding or HTML entity decoding will be performed respectively. More than one decoding can be specified by separating with commas. The decoding setting will remain in effect until the next decoding attribute is encountered, or the element ends. The decoding attribute must precede the corresponding var attribute to be effective.

    encoding

    Specifies how Apache should encode special characters contained in the variable before setting them. The default is none, where no encoding will be done. If set to url, urlencoding, base64 or entity, URL encoding, application/x-www-form-urlencoded encoding, base64 encoding or HTML entity encoding will be performed respectively. More than one encoding can be specified by separating with commas. The encoding setting will remain in effect until the next encoding attribute is encountered, or the element ends. The encoding attribute must precede the corresponding var attribute to be effective. Encodings are applied after all decodings have been stripped.

    Example

    <!--#set var="category" value="help" -->

    top

    Include Variables

    In addition to the variables in the standard CGI environment, these are available for the echo command, for if and elif, and to any program invoked by the document.

    DATE_GMT
    The current date in Greenwich Mean Time.
    DATE_LOCAL
    The current date in the local time zone.
    DOCUMENT_ARGS
    This variable contains the query string of the active SSI document, or the empty string if a query string is not included. For subrequests invoked through the include SSI directive, QUERY_STRING will represent the query string of the subrequest and DOCUMENT_ARGS will represent the query string of the SSI document. (Available in Apache HTTP Server 2.4.19 and later.)
    DOCUMENT_NAME
    The filename (excluding directories) of the document requested by the user.
    DOCUMENT_PATH_INFO
    The trailing pathname information. See directive AcceptPathInfo for more information about PATH_INFO.
    DOCUMENT_URI
    The (%-decoded) URL path of the document requested by the user. Note that in the case of nested include files, this is not the URL for the current document. Note also that if the URL is modified internally (e.g. by an alias or directoryindex), the modified URL is shown.
    LAST_MODIFIED
    The last modification date of the document requested by the user.
    QUERY_STRING_UNESCAPED
    If a query string is present in the request for the active SSI document, this variable contains the (%-decoded) query string, which is escaped for shell usage (special characters like & etc. are preceded by backslashes). It is not set if a query string is not present. Use DOCUMENT_ARGS if shell escaping is not desired.
    USER_NAME
    The user name of the owner of the file.
    top

    Variable Substitution

    Variable substitution is done within quoted strings in most cases where they may reasonably occur as an argument to an SSI directive. This includes the config, exec, flastmod, fsize, include, echo, and set directives. If SSILegacyExprParser is set to on, substitution also occurs in the arguments to conditional operators. You can insert a literal dollar sign into the string using backslash quoting:

    <!--#set var="cur" value="\$test" -->

    If a variable reference needs to be substituted in the middle of a character sequence that might otherwise be considered a valid identifier in its own right, it can be disambiguated by enclosing the reference in braces, a la shell substitution:

    <!--#set var="Zed" value="${REMOTE_HOST}_${REQUEST_METHOD}" -->

    This will result in the Zed variable being set to "X_Y" if REMOTE_HOST is "X" and REQUEST_METHOD is "Y".

    top

    Flow Control Elements

    The basic flow control elements are:

    <!--#if expr="test_condition" -->
    <!--#elif expr="test_condition" -->
    <!--#else -->
    <!--#endif -->

    The if element works like an if statement in a programming language. The test condition is evaluated and if the result is true, then the text until the next elif, else or endif element is included in the output stream.

    The elif or else statements are used to put text into the output stream if the original test_condition was false. These elements are optional.

    The endif element ends the if element and is required.

    test_condition is a boolean expression which follows the ap_expr syntax. The syntax can be changed to be compatible with Apache HTTPD 2.2.x using SSILegacyExprParser.

    The SSI variables set with the var element are exported into the request environment and can be accessed with the reqenv function. As a short-cut, the function name v is also available inside mod_include.

    The below example will print "from local net" if client IP address belongs to the 10.0.0.0/8 subnet.

    <!--#if expr='-R "10.0.0.0/8"' -->
    from local net
    <!--#else -->
    from somewhere else
    <!--#endif -->

    The below example will print "foo is bar" if the variable foo is set to the value "bar".

    <!--#if expr='v("foo") = "bar"' -->
    foo is bar
    <!--#endif -->

    Reference Documentation

    See also: Expressions in Apache HTTP Server, for a complete reference and examples. The restricted functions are not available inside mod_include

    top

    Legacy expression syntax

    This section describes the syntax of the #if expr element if SSILegacyExprParser is set to on.

    string
    true if string is not empty
    -A string

    true if the URL represented by the string is accessible by configuration, false otherwise. This is useful where content on a page is to be hidden from users who are not authorized to view the URL, such as a link to that URL. Note that the URL is only tested for whether access would be granted, not whether the URL exists.

    Example

    <!--#if expr="-A /private" -->
    Click <a href="/private">here</a> to access private information.
    <!--#endif -->

    string1 = string2
    string1 == string2
    string1 != string2

    Compare string1 with string2. If string2 has the form /string2/ then it is treated as a regular expression. Regular expressions are implemented by the PCRE engine and have the same syntax as those in perl 5. Note that == is just an alias for = and behaves exactly the same way.

    If you are matching positive (= or ==), you can capture grouped parts of the regular expression. The captured parts are stored in the special variables $1 .. $9. The whole string matched by the regular expression is stored in the special variable $0

    Example

    <!--#if expr="$QUERY_STRING = /^sid=([a-zA-Z0-9]+)/" -->
    <!--#set var="session" value="$1" -->
    <!--#endif -->

    string1 < string2
    string1 <= string2
    string1 > string2
    string1 >= string2
    Compare string1 with string2. Note, that strings are compared literally (using strcmp(3)). Therefore the string "100" is less than "20".
    ( test_condition )
    true if test_condition is true
    ! test_condition
    true if test_condition is false
    test_condition1 && test_condition2
    true if both test_condition1 and test_condition2 are true
    test_condition1 || test_condition2
    true if either test_condition1 or test_condition2 is true

    "=" and "!=" bind more tightly than "&&" and "||". "!" binds most tightly. Thus, the following are equivalent:

    <!--#if expr="$a = test1 && $b = test2" -->
    <!--#if expr="($a = test1) && ($b = test2)" -->

    The boolean operators && and || share the same priority. So if you want to bind such an operator more tightly, you should use parentheses.

    Anything that's not recognized as a variable or an operator is treated as a string. Strings can also be quoted: 'string'. Unquoted strings can't contain whitespace (blanks and tabs) because it is used to separate tokens such as variables. If multiple strings are found in a row, they are concatenated using blanks. So,

    string1    string2 results in string1 string2

    and

    'string1    string2' results in string1    string2.

    Optimization of Boolean Expressions

    If the expressions become more complex and slow down processing significantly, you can try to optimize them according to the evaluation rules:

    • Expressions are evaluated from left to right
    • Binary boolean operators (&& and ||) are short circuited wherever possible. In conclusion with the rule above that means, mod_include evaluates at first the left expression. If the left result is sufficient to determine the end result, processing stops here. Otherwise it evaluates the right side and computes the end result from both left and right results.
    • Short circuit evaluation is turned off as long as there are regular expressions to deal with. These must be evaluated to fill in the backreference variables ($1 .. $9).

    If you want to look how a particular expression is handled, you can recompile mod_include using the -DDEBUG_INCLUDE compiler option. This inserts for every parsed expression tokenizer information, the parse tree and how it is evaluated into the output sent to the client.

    Escaping slashes in regex strings

    All slashes which are not intended to act as delimiters in your regex must be escaped. This is regardless of their meaning to the regex engine.

    top

    SSIEndTag Directive

    Description:String that ends an include element
    Syntax:SSIEndTag tag
    Default:SSIEndTag "-->"
    Context:server config, virtual host
    Status:Base
    Module:mod_include

    This directive changes the string that mod_include looks for to mark the end of an include element.

    SSIEndTag "%>"

    See also

    top

    SSIErrorMsg Directive

    Description:Error message displayed when there is an SSI error
    Syntax:SSIErrorMsg message
    Default:SSIErrorMsg "[an error occurred while processing this directive]"
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Base
    Module:mod_include

    The SSIErrorMsg directive changes the error message displayed when mod_include encounters an error. For production servers you may consider changing the default error message to "<!-- Error -->" so that the message is not presented to the user.

    This directive has the same effect as the <!--#config errmsg=message --> element.

    SSIErrorMsg "<!-- Error -->"
    top

    SSIETag Directive

    Description:Controls whether ETags are generated by the server.
    Syntax:SSIETag on|off
    Default:SSIETag off
    Context:directory, .htaccess
    Status:Base
    Module:mod_include
    Compatibility:Available in version 2.2.15 and later.

    Under normal circumstances, a file filtered by mod_include may contain elements that are either dynamically generated, or that may have changed independently of the original file. As a result, by default the server is asked not to generate an ETag header for the response by adding no-etag to the request notes.

    The SSIETag directive suppresses this behaviour, and allows the server to generate an ETag header. This can be used to enable caching of the output. Note that a backend server or dynamic content generator may generate an ETag of its own, ignoring no-etag, and this ETag will be passed by mod_include regardless of the value of this setting. SSIETag can take on the following values:

    off
    no-etag will be added to the request notes, and the server is asked not to generate an ETag. Where a server ignores the value of no-etag and generates an ETag anyway, the ETag will be respected.
    on
    Existing ETags will be respected, and ETags generated by the server will be passed on in the response.
    top

    SSILastModified Directive

    Description:Controls whether Last-Modified headers are generated by the server.
    Syntax:SSILastModified on|off
    Default:SSILastModified off
    Context:directory, .htaccess
    Status:Base
    Module:mod_include
    Compatibility:Available in version 2.2.15 and later.

    Under normal circumstances, a file filtered by mod_include may contain elements that are either dynamically generated, or that may have changed independently of the original file. As a result, by default the Last-Modified header is stripped from the response.

    The SSILastModified directive overrides this behaviour, and allows the Last-Modified header to be respected if already present, or set if the header is not already present. This can be used to enable caching of the output. SSILastModified can take on the following values:

    off
    The Last-Modified header will be stripped from responses, unless the XBitHack directive is set to full as described below.
    on
    The Last-Modified header will be respected if already present in a response, and added to the response if the response is a file and the header is missing. The SSILastModified directive takes precedence over XBitHack.
    top

    SSILegacyExprParser Directive

    Description:Enable compatibility mode for conditional expressions.
    Syntax:SSILegacyExprParser on|off
    Default:SSILegacyExprParser off
    Context:directory, .htaccess
    Status:Base
    Module:mod_include
    Compatibility:Available in version 2.3.13 and later.

    As of version 2.3.13, mod_include has switched to the new ap_expr syntax for conditional expressions in #if flow control elements. This directive allows to switch to the old syntax which is compatible with Apache HTTPD version 2.2.x and earlier.

    top

    SSIStartTag Directive

    Description:String that starts an include element
    Syntax:SSIStartTag tag
    Default:SSIStartTag "<!--#"
    Context:server config, virtual host
    Status:Base
    Module:mod_include

    This directive changes the string that mod_include looks for to mark an include element to process.

    You may want to use this option if you have 2 servers parsing the output of a file each processing different commands (possibly at different times).

    SSIStartTag "<%"
    SSIEndTag   "%>"

    The example given above, which also specifies a matching SSIEndTag, will allow you to use SSI directives as shown in the example below:

    SSI directives with alternate start and end tags

    <%printenv %>

    See also

    top

    SSITimeFormat Directive

    Description:Configures the format in which date strings are displayed
    Syntax:SSITimeFormat formatstring
    Default:SSITimeFormat "%A, %d-%b-%Y %H:%M:%S %Z"
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Base
    Module:mod_include

    This directive changes the format in which date strings are displayed when echoing DATE environment variables. The formatstring is as in strftime(3) from the C standard library.

    This directive has the same effect as the <!--#config timefmt=formatstring --> element.

    SSITimeFormat "%R, %B %d, %Y"

    The above directive would cause times to be displayed in the format "22:26, June 14, 2002".

    top

    SSIUndefinedEcho Directive

    Description:String displayed when an unset variable is echoed
    Syntax:SSIUndefinedEcho string
    Default:SSIUndefinedEcho "(none)"
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Base
    Module:mod_include

    This directive changes the string that mod_include displays when a variable is not set and "echoed".

    SSIUndefinedEcho "<!-- undef -->"
    top

    XBitHack Directive

    Description:Parse SSI directives in files with the execute bit set
    Syntax:XBitHack on|off|full
    Default:XBitHack off
    Context:server config, virtual host, directory, .htaccess
    Override:Options
    Status:Base
    Module:mod_include

    The XBitHack directive controls the parsing of ordinary html documents. This directive only affects files associated with the MIME-type text/html. XBitHack can take on the following values:

    off
    No special treatment of executable files.
    on
    Any text/html file that has the user-execute bit set will be treated as a server-parsed html document.
    full
    As for on but also test the group-execute bit. If it is set, then set the Last-modified date of the returned file to be the last modified time of the file. If it is not set, then no last-modified date is sent. Setting this bit allows clients and proxies to cache the result of the request.

    Note

    You would not want to use the full option, unless you assure the group-execute bit is unset for every SSI script which might #include a CGI or otherwise produces different output on each hit (or could potentially change on subsequent requests).

    The SSILastModified directive takes precedence over the XBitHack directive when SSILastModified is set to on.

    Available Languages:  en  |  fr  |  ja 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authnz_fcgi.html.en0000644000000000000500000006576613412755316020702 0ustar rootsrc mod_authnz_fcgi - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authnz_fcgi

    Available Languages:  en  |  fr 

    Description:Allows a FastCGI authorizer application to handle Apache httpd authentication and authorization
    Status:Extension
    Module Identifier:authnz_fcgi_module
    Source File:mod_authnz_fcgi.c
    Compatibility:Available in version 2.4.10 and later

    Summary

    This module allows FastCGI authorizer applications to authenticate users and authorize access to resources. It supports generic FastCGI authorizers which participate in a single phase for authentication and authorization as well as Apache httpd-specific authenticators and authorizors which participate in one or both phases.

    FastCGI authorizers can authenticate using user id and password, such as for Basic authentication, or can authenticate using arbitrary mechanisms.

    top

    Invocation modes

    The invocation modes for FastCGI authorizers supported by this module are distinguished by two characteristics, type and auth mechanism.

    Type is simply authn for authentication, authz for authorization, or authnz for combined authentication and authorization.

    Auth mechanism refers to the Apache httpd configuration mechanisms and processing phases, and can be AuthBasicProvider, Require, or check_user_id. The first two of these correspond to the directives used to enable participation in the appropriate processing phase.

    Descriptions of each mode:

    Type authn, mechanism AuthBasicProvider
    In this mode, FCGI_ROLE is set to AUTHORIZER and FCGI_APACHE_ROLE is set to AUTHENTICATOR. The application must be defined as provider type authn using AuthnzFcgiDefineProvider and enabled with AuthBasicProvider. When invoked, the application is expected to authenticate the client using the provided user id and password. Example application:
    #!/usr/bin/perl
    use FCGI;
    my $request = FCGI::Request();
    while ($request->Accept() >= 0) {
        die if $ENV{'FCGI_APACHE_ROLE'} ne "AUTHENTICATOR";
        die if $ENV{'FCGI_ROLE'}        ne "AUTHORIZER";
        die if !$ENV{'REMOTE_PASSWD'};
        die if !$ENV{'REMOTE_USER'};
    
        print STDERR "This text is written to the web server error log.\n";
    
        if ( ($ENV{'REMOTE_USER' } eq "foo" || $ENV{'REMOTE_USER'} eq "foo1") &&
            $ENV{'REMOTE_PASSWD'} eq "bar" ) {
            print "Status: 200\n";
            print "Variable-AUTHN_1: authn_01\n";
            print "Variable-AUTHN_2: authn_02\n";
            print "\n";
        }
        else {
            print "Status: 401\n\n";
        }
    }
    Example configuration:
    AuthnzFcgiDefineProvider authn FooAuthn fcgi://localhost:10102/
    <Location "/protected/">
      AuthType Basic
      AuthName "Restricted"
      AuthBasicProvider FooAuthn
      Require ...
    </Location>
    Type authz, mechanism Require
    In this mode, FCGI_ROLE is set to AUTHORIZER and FCGI_APACHE_ROLE is set to AUTHORIZER. The application must be defined as provider type authz using AuthnzFcgiDefineProvider. When invoked, the application is expected to authorize the client using the provided user id and other request data. Example application:
    #!/usr/bin/perl
    use FCGI;
    my $request = FCGI::Request();
    while ($request->Accept() >= 0) {
        die if $ENV{'FCGI_APACHE_ROLE'} ne "AUTHORIZER";
        die if $ENV{'FCGI_ROLE'}        ne "AUTHORIZER";
        die if $ENV{'REMOTE_PASSWD'};
    
        print STDERR "This text is written to the web server error log.\n";
    
        if ($ENV{'REMOTE_USER'} eq "foo1") {
            print "Status: 200\n";
            print "Variable-AUTHZ_1: authz_01\n";
            print "Variable-AUTHZ_2: authz_02\n";
            print "\n";
        }
        else {
            print "Status: 403\n\n";
        }
    }
    Example configuration:
    AuthnzFcgiDefineProvider authz FooAuthz fcgi://localhost:10103/
    <Location "/protected/">
      AuthType ...
      AuthName ...
      AuthBasicProvider ...
      Require FooAuthz
    </Location>
    Type authnz, mechanism AuthBasicProvider + Require
    In this mode, which supports the web server-agnostic FastCGI AUTHORIZER protocol, FCGI_ROLE is set to AUTHORIZER and FCGI_APACHE_ROLE is not set. The application must be defined as provider type authnz using AuthnzFcgiDefineProvider. The application is expected to handle both authentication and authorization in the same invocation using the user id, password, and other request data. The invocation occurs during the Apache httpd API authentication phase. If the application returns 200 and the same provider is invoked during the authorization phase (via Require), mod_authnz_fcgi will return success for the authorization phase without invoking the application. Example application:
    #!/usr/bin/perl
    use FCGI;
    my $request = FCGI::Request();
    while ($request->Accept() >= 0) {
        die if $ENV{'FCGI_APACHE_ROLE'};
        die if $ENV{'FCGI_ROLE'} ne "AUTHORIZER";
        die if !$ENV{'REMOTE_PASSWD'};
        die if !$ENV{'REMOTE_USER'};
    
        print STDERR "This text is written to the web server error log.\n";
    
        if ( ($ENV{'REMOTE_USER' } eq "foo" || $ENV{'REMOTE_USER'} eq "foo1") &&
            $ENV{'REMOTE_PASSWD'} eq "bar" &&
            $ENV{'REQUEST_URI'} =~ m%/bar/.*%) {
            print "Status: 200\n";
            print "Variable-AUTHNZ_1: authnz_01\n";
            print "Variable-AUTHNZ_2: authnz_02\n";
            print "\n";
        }
        else {
            print "Status: 401\n\n";
        }
    }
    Example configuration:
    AuthnzFcgiDefineProvider authnz FooAuthnz fcgi://localhost:10103/
    <Location "/protected/">
      AuthType Basic
      AuthName "Restricted"
      AuthBasicProvider FooAuthnz
      Require FooAuthnz
    </Location>
    Type authn, mechanism check_user_id
    In this mode, FCGI_ROLE is set to AUTHORIZER and FCGI_APACHE_ROLE is set to AUTHENTICATOR. The application must be defined as provider type authn using AuthnzFcgiDefineProvider. AuthnzFcgiCheckAuthnProvider specifies when it is called. Example application:
    #!/usr/bin/perl
    use FCGI;
    my $request = FCGI::Request();
    while ($request->Accept() >= 0) {
        die if $ENV{'FCGI_APACHE_ROLE'} ne "AUTHENTICATOR";
        die if $ENV{'FCGI_ROLE'} ne "AUTHORIZER";
    
        # This authorizer assumes that the RequireBasicAuth option of 
        # AuthnzFcgiCheckAuthnProvider is On:
        die if !$ENV{'REMOTE_PASSWD'};
        die if !$ENV{'REMOTE_USER'};
    
        print STDERR "This text is written to the web server error log.\n";
    
        if ( ($ENV{'REMOTE_USER' } eq "foo" || $ENV{'REMOTE_USER'} eq "foo1") &&
            $ENV{'REMOTE_PASSWD'} eq "bar" ) {
            print "Status: 200\n";
            print "Variable-AUTHNZ_1: authnz_01\n";
            print "Variable-AUTHNZ_2: authnz_02\n";
            print "\n";
        }
        else {
            print "Status: 401\n\n";
            # If a response body is written here, it will be returned to
            # the client.
        }
    }
    Example configuration:
    AuthnzFcgiDefineProvider authn FooAuthn fcgi://localhost:10103/
    <Location "/protected/">
      AuthType ...
      AuthName ...
      AuthnzFcgiCheckAuthnProvider FooAuthn \
                                   Authoritative On \
                                   RequireBasicAuth Off \
                                   UserExpr "%{reqenv:REMOTE_USER}"
      Require ...
    </Location>
    top

    Additional examples

    1. If your application supports the separate authentication and authorization roles (AUTHENTICATOR and AUTHORIZER), define separate providers as follows, even if they map to the same application:
      AuthnzFcgiDefineProvider authn  FooAuthn  fcgi://localhost:10102/
      AuthnzFcgiDefineProvider authz  FooAuthz  fcgi://localhost:10102/
      Specify the authn provider on AuthBasicProvider and the authz provider on Require:
      AuthType Basic
      AuthName "Restricted"
      AuthBasicProvider FooAuthn
      Require FooAuthz
    2. If your application supports the generic AUTHORIZER role (authentication and authorizer in one invocation), define a single provider as follows:
      AuthnzFcgiDefineProvider authnz FooAuthnz fcgi://localhost:10103/
      Specify the authnz provider on both AuthBasicProvider and Require:
      AuthType Basic
      AuthName "Restricted"
      AuthBasicProvider FooAuthnz
      Require FooAuthnz
    top

    Limitations

    The following are potential features which are not currently implemented:

    Apache httpd access checker
    The Apache httpd API access check phase is a separate phase from authentication and authorization. Some other FastCGI implementations implement this phase, which is denoted by the setting of FCGI_APACHE_ROLE to ACCESS_CHECKER.
    Local (Unix) sockets or pipes
    Only TCP sockets are currently supported.
    Support for mod_authn_socache
    mod_authn_socache interaction should be implemented for applications which participate in Apache httpd-style authentication.
    Support for digest authentication using AuthDigestProvider
    This is expected to be a permanent limitation as there is no authorizer flow for retrieving a hash.
    Application process management
    This is expected to be permanently out of scope for this module. Application processes must be controlled by other means. For example, fcgistarter can be used to start them.
    AP_AUTH_INTERNAL_PER_URI
    All providers are currently registered as AP_AUTH_INTERNAL_PER_CONF, which means that checks are not performed again for internal subrequests with the same access control configuration as the initial request.
    Protocol data charset conversion
    If mod_authnz_fcgi runs in an EBCDIC compilation environment, all FastCGI protocol data is written in EBCDIC and expected to be received in EBCDIC.
    Multiple requests per connection
    Currently the connection to the FastCGI authorizer is closed after every phase of processing. For example, if the authorizer handles separate authn and authz phases then two connections will be used.
    URI Mapping
    URIs from clients can't be mapped, such as with the ProxyPass used with FastCGI responders.
    top

    Logging

    1. Processing errors are logged at log level error and higher.
    2. Messages written by the application are logged at log level warn.
    3. General messages for debugging are logged at log level debug.
    4. Environment variables passed to the application are logged at log level trace2. The value of the REMOTE_PASSWD variable will be obscured, but any other sensitive data will be visible in the log.
    5. All I/O between the module and the FastCGI application, including all environment variables, will be logged in printable and hex format at log level trace5. All sensitive data will be visible in the log.

    LogLevel can be used to configure a log level specific to mod_authnz_fcgi. For example:

    LogLevel info authnz_fcgi:trace8
    top

    AuthnzFcgiCheckAuthnProvider Directive

    Description:Enables a FastCGI application to handle the check_authn authentication hook.
    Syntax:AuthnzFcgiCheckAuthnProvider provider-name|None option ...
    Default:none
    Context:directory
    Status:Extension
    Module:mod_authnz_fcgi

    This directive is used to enable a FastCGI authorizer to handle a specific processing phase of authentication or authorization.

    Some capabilities of FastCGI authorizers require enablement using this directive instead of AuthBasicProvider:

    • Non-Basic authentication; generally, determining the user id of the client and returning it from the authorizer; see the UserExpr option below
    • Selecting a custom response code; for a non-200 response from the authorizer, the code from the authorizer will be the status of the response
    • Setting the body of a non-200 response; if the authorizer provides a response body with a non-200 response, that body will be returned to the client; up to 8192 bytes of text are supported
    provider-name
    This is the name of a provider defined with AuthnzFcgiDefineProvider.
    None
    Specify None to disable a provider enabled with this directive in an outer scope, such as in a parent directory.
    option
    The following options are supported:
    Authoritative On|Off (default On)
    This controls whether or not other modules are allowed to run when this module has a FastCGI authorizer configured and it fails the request.
    DefaultUser userid
    When the authorizer returns success and UserExpr is configured and evaluates to an empty string (e.g., authorizer didn't return a variable), this value will be used as the user id. This is typically used when the authorizer has a concept of guest, or unauthenticated, users and guest users are mapped to some specific user id for logging and other purposes.
    RequireBasicAuth On|Off (default Off)
    This controls whether or not Basic auth is required before passing the request to the authorizer. If required, the authorizer won't be invoked without a user id and password; 401 will be returned for a request without that.
    UserExpr expr (no default)
    When Basic authentication isn't provided by the client and the authorizer determines the user, this expression, evaluated after calling the authorizer, determines the user. The expression follows ap_expr syntax and must resolve to a string. A typical use is to reference a Variable-XXX setting returned by the authorizer using an option like UserExpr "%{reqenv:XXX}". If this option is specified and the user id can't be retrieved using the expression after a successful authentication, the request will be rejected with a 500 error.
    top

    AuthnzFcgiDefineProvider Directive

    Description:Defines a FastCGI application as a provider for authentication and/or authorization
    Syntax:AuthnzFcgiDefineProvider type provider-name backend-address
    Default:none
    Context:server config
    Status:Extension
    Module:mod_authnz_fcgi

    This directive is used to define a FastCGI application as a provider for a particular phase of authentication or authorization.

    type
    This must be set to authn for authentication, authz for authorization, or authnz for a generic FastCGI authorizer which performs both checks.
    provider-name
    This is used to assign a name to the provider which is used in other directives such as AuthBasicProvider and Require.
    backend-address
    This specifies the address of the application, in the form fcgi://hostname:port/. The application process(es) must be managed independently, such as with fcgistarter.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_dbm.html0000644000000000000500000000063313362070302017704 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authn_dbm.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authn_dbm.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_authn_dbm.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_authn_dbm.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_nw_ssl.html0000644000000000000500000000033013362070302017242 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_nw_ssl.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_nw_ssl.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_authn_anon.html.fr.utf80000644000000000000500000004375013412755316021412 0ustar rootsrc mod_authn_anon - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authn_anon

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Permet un accès "anonyme" à des zones protégées
    Statut:Extension
    Identificateur de Module:authn_anon_module
    Fichier Source:mod_authn_anon.c
    Compatibilité:Disponible depuis la version 2.1 d'Apache

    Sommaire

    Ce module permet aux frontaux d'authentification comme mod_auth_basic d'authentifier les utilisateurs à la manière des sites FTP anonymes, c'est à dire en fournissant l'identifiant utilisateur spécial 'anonymous' et l'adresse email comme mot de passe. Ces adresses email peuvent être journalisées.

    En combinaison avec d'autres méthodes de contrôle d'accès (base de données), ce module permet d'effectuer un véritable suivi des utilisateurs et une personnalisation de leurs accès en fonction de leur profil, tout en conservant l'accessibilité du site aux utilisateurs 'non enregistrés'. Un avantage du suivi des utilisateurs basé sur l'authentification réside dans le fait qu'il est, à l'opposé des cookies magiques et des drôles d'URLs avec préfixes ou suffixes, entièrement indépendant du navigateur et qu'il permet de partager des URLs entre plusieurs utilisateurs.

    Si l'on utilise le module mod_auth_basic, le module mod_authn_anon est invoqué en affectant la valeur anon à la directive AuthBasicProvider.

    top

    Exemple

    L'exemple ci-dessous présente un exemple de combinaison avec l'authentification à base de fichier htpasswd "normale", et permet la connexion d'utilisateurs en tant qu'invités avec les propriétés suivantes :

    • Il incite l'utilisateur à fournir un identifiant. (Anonymous_NoUserID)
    • Il incite l'utilisateur à fournir un mot de passe. (Anonymous_MustGiveEmail)
    • Le mot de passe fourni doit être une adresse email valide, c'est à dire contenant au moins un '@' et un '.'. (Anonymous_VerifyEmail)
    • Les valeurs possibles pour l'identifiant utilisateur sont anonymous, guest, www, test ou welcome, et la vérification n'est pas sensible à la casse. (Anonymous)
    • Les adresses email entrées dans le champ passwd sont enregistrées dans le fichier journal des erreurs. (Anonymous_LogEmail)

    Exemple

    <Directory "/var/www/html/private">
        AuthName "Use 'anonymous' & Email address for guest entry"
        AuthType Basic
        AuthBasicProvider file anon
        AuthUserFile "/path/to/your/.htpasswd"
    
        Anonymous_NoUserID off
        Anonymous_MustGiveEmail on
        Anonymous_VerifyEmail on
        Anonymous_LogEmail on
        Anonymous anonymous guest www test welcome
    
        Require valid-user
    </Directory>
    top

    Directive Anonymous

    Description:Définit la liste des identifiants utilisateur autorisés à accéder sans vérification du mot de passe
    Syntaxe:Anonymous utilisateur [utilisateur] ...
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authn_anon

    Une liste d'un ou plusieurs identifiants utilisateur spéciaux autorisés à accéder sans vérification du mot de passe. Les identifiants doivent être séparés par un espace. Pour spécifier un identifiant contenant un espace, on peut utiliser les guillemets ' ou ", ou le caractère d'échappement \.

    Veuillez noter que la vérification n'est pas sensible à la casse.
    Il est fortement conseillé d'intégrer l'utilisateur spécial 'anonymous' dans la liste des identifiants.

    Exemple:

    Anonymous anonymous "Not Registered" "I don't know"

    Dans cet exemple, l'utilisateur peut accéder au site sans vérification du mot de passe en utilisant l'identifiant "anonymous", "Not Registered", "I Don't Know" ou encore "AnonyMous".

    Depuis Apache 2.1, il est possible de remplacer la liste des identifiants autorisés par le caractère "*", ce qui permet d'utiliser n'importe quel identifiant pour pouvoir accéder au site.

    top

    Directive Anonymous_LogEmail

    Description:Détermine si le mot de passe fourni sera enregistré dans le journal des erreurs
    Syntaxe:Anonymous_LogEmail On|Off
    Défaut:Anonymous_LogEmail On
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authn_anon

    Lorsque cette directive est définie à On, valeur par défaut, le 'mot de passe' fourni (censé contenir une adresse email valide) est enregistré dans le journal des erreurs.

    top

    Directive Anonymous_MustGiveEmail

    Description:Détermine si l'abscence de mot de passe est autorisée
    Syntaxe:Anonymous_MustGiveEmail On|Off
    Défaut:Anonymous_MustGiveEmail On
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authn_anon

    Détermine si l'utilisateur doit spécifier une adresse email comme mot de passe. Lorsque cette directive est définie à On, l'abscence de mot de passe est interdite.

    top

    Directive Anonymous_NoUserID

    Description:Détermine si le champ identifiant peut être vide
    Syntaxe:Anonymous_NoUserID On|Off
    Défaut:Anonymous_NoUserID Off
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authn_anon

    Lorsque cette directive est définie à On, les utilisateurs peuvent laisser le champ identifiant vide (et peut-être aussi le champ mot de passe selon la définition de la directive Anonymous_MustGiveEmail). Ceci peut s'avérer très utile pour les utilisateurs de MS-Explorer qui n'ont pour seule possibilité que d'appuyer sur Entrée ou de cliquer directement sur le bouton OK, ce qui semble être une réaction naturelle.

    top

    Directive Anonymous_VerifyEmail

    Description:Détermine s'il faut vérifier que le format de l'adresse email fournie comme mot de passe est correct
    Syntaxe:Anonymous_VerifyEmail On|Off
    Défaut:Anonymous_VerifyEmail Off
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Extension
    Module:mod_authn_anon

    Lorsque cette directive est définie à On, Apache vérifie que le 'mot de passe' entré contient au moins un '@' et un '.' afin d'inciter les utilisateurs à fournir des adresses email valides (voir ci-dessus la directive Anonymous_LogEmail).

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_lbmethod_heartbeat.html.fr.utf80000644000000000000500000002123313412755316023065 0ustar rootsrc mod_lbmethod_heartbeat - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_lbmethod_heartbeat

    Langues Disponibles:  en  |  fr 

    Description:Algorithme d'ordonnancement de répartition de charge pour mod_proxy_balancer basé sur le comptage de trafic Heartbeat
    Statut:Expérimental
    Identificateur de Module:lbmethod_heartbeat_module
    Fichier Source:mod_lbmethod_heartbeat.c
    Compatibilité:Disponible depuis la version 2.3 d'Apache

    Sommaire

    lbmethod=heartbeat utilise les services du module mod_heartmonitor pour répartir la charge entre les serveurs d'origine qui fournissent des données heartbeat via le module mod_heartbeat.

    Son algorithme de répartition de charge favorise les serveurs dont la capacité de traitement moyenne répartie dans le temps est la plus importante, mais il ne sélectionne pas forcément le serveur qui présente la disponibilité instantanée la plus importante. Les serveurs qui ne possèdent aucun client actif sont pénalisés, car ils sont considérés comme non entièrement initialisés.

    top

    Directive HeartbeatStorage

    Description:Indique le chemin permettant de lire les données heartbeat
    Syntaxe:HeartbeatStorage chemin-fichier
    Défaut:HeartbeatStorage logs/hb.dat
    Contexte:configuration globale
    Statut:Expérimental
    Module:mod_lbmethod_heartbeat

    La directive HeartbeatStorage permet de spécifier le chemin d'accès aux données heartbeat. Ce fichier texte n'est utilisé que si le module mod_slotmem_shm n'est pas chargé.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/index.html0000644000000000000500000000132513362070302016212 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: index.html.de Content-Language: de Content-type: text/html; charset=ISO-8859-1 URI: index.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: index.html.es Content-Language: es Content-type: text/html; charset=ISO-8859-1 URI: index.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: index.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: index.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: index.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 URI: index.html.zh-cn.utf8 Content-Language: zh-cn Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_unique_id.html0000644000000000000500000000063313362070302017725 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_unique_id.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_unique_id.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_unique_id.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_unique_id.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/directive-dict.html.tr.utf80000644000000000000500000004616413447004010021322 0ustar rootsrc Yönergeleri Tanımlamakta Kullanılan Terimler - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Yönergeleri Tanımlamakta Kullanılan Terimler

    Mevcut Diller:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    Bu belgede Apache yapılandırma yönergelerini tanımlamakta kullanılan terimler açıklanmıştır.

    top

    Açıklama

    Yönergenin kullanım amacının kısa bir açıklaması.

    top

    Sözdizimi

    Yönergenin bir yapılandırma dosyasında hangi söz dizimiyle görünebileceği belirtilir. Bu sözdizimi yönergeye özeldir ve ayrıntıları yönerge tanımında açıklanır. Genelde yönerge ismini aralarında boşluklar bırakılmış bir dizi argüman izler. Eğer argümanlardan biri kendi içinde boşluk içeriyorsa çift tırnak içine alınır. İsteğe bağlı argümanlar sözdiziminde köşeli ayraçların arasında gösterilmiştir. Birden fazla olası değeri olan argümanlarda değerler aralarına | karakteri konarak ayrılmıştır. Değerin yerine ismi belirtilen argümanlarda bu isimler eğik yazılırken, kendisi değer olan dizgeler öntanımlı yazıtipi ile gösterilmiştir. Değişik sayıda argüman alan yönergelerde bu durum son argümanı takibeden “...†ile belirtilmiştir.

    Yönergelerde kullanılan argüman türleri çok çeşitlidir. Çok kullanılanlardan bazıları aşağıda tanımlanmıştır.

    URL
    http://host.example.com/yol/yordam/dosya.html örneğindeki gibi protokol şeması ve konak ismini isteğe bağlı bir dosya yolunun izlediği, açılımı “Uniform Resource Locator†olan ve Türkçe’ye “Tektip Özkaynak Konumlayıcı†şeklinde çevrilebilecek adresleri betimler.
    URL-yolu
    /yol/yordam/dosya.html örneğindeki gibi bir url’nin parçası olarak protokol şeması ve konak ismini izleyen bir yol dizgesini betimler. url-yolu, bir dosya sisteminin kök dizinine göre değil, DocumentRoot ile belirtilen dizine göre bir dosya yolu betimler.
    dosya-yolu
    /usr/local/apache/htdocs/yol/yordam/dosya.html örneğindeki gibi yerel dosya sisteminin kök dizini ile başlayan bir dosya yolunu betimler. Aksi belirtilmedikçe, bir / ile başlamayan bir dosya-yolu ServerRoot ile belirtilen dizine göre ele alınır.
    dizin-yolu
    /usr/local/apache/htdocs/yol/yordam/ örneğindeki gibi kök dizin ile başlayan, yerel dosya sistemindeki bir dizin yolunu betimler.
    dosya-ismi
    dosya.html örneğindeki gibi dizin yolu içermeyen bir dosya ismini betimler.
    düzifd
    Bir Perl uyumlu düzenli ifade betimler. Yönerge tanımında düzifd ile eşleşenler argüman olarak ele alınır.
    uzantı
    Bu genelde, dosya-ismi’nin bir parçası olarak son noktadan sonraki kısmı betimler. Bununla birlikte, Apache çok sayıda nokta içeren dosya isimlerinde ilk noktadan sonrasını uzantı kabul eden çoklu dosya ismi uzantılarını da tanır. Örneğin, dosya- ismi olarak dosya.html.tr değeri iki uzantı içerir: .html ve .tr. Apache yönergelerinde uzantı’ları başında noktası olmaksızın da belirtebilirsiniz. Ayrıca, uzantı’lar harf büyüklüğüne de duyarlı değildir.
    MIME-türü
    Dosya biçiminin, text/html örneğindeki gibi aralarına bir / konulmuş asıl ve alt biçimler şeklinde açıklandığı yönteme göre belirtileceğini betimler.
    ortam-deÄŸiÅŸkeni
    Apache yapılandırma sürecinde tanımlanmış bir ortam değişkeninin ismini betimler. Daha ayrıntılı bilgi için ortam değişkenleri belgesine bakınız.
    top

    Öntanımlı

    Eğer yönerge öntanımlı bir değere sahipse o burada belirtilir (öntanımlı değer, yönergede kullanıcı tarafından belirtilmediği halde Apache tarafından belirtildiği varsayılarak işlem yapılan değerdir). Eğer öntanımlı bir değer yoksa bu bölümde bu durum “Yok†şeklinde belirtilir. Burada belirtilen öntanımlı değerin sunucu ile dağıtılan öntanımlı httpd.conf içindeki yönergede kullanılan değerle aynı olmasının gerekmediğine dikkat ediniz.

    top

    BaÄŸlam

    Yönergenin sunucunun yapılandırma dosyalarının nerelerinde meşru kabul edildiği aşağıdaki değerlerin virgül ayraçlı bir listesi halinde burada belirtilir.

    sunucu geneli
    Yönergenin sunucunun (httpd.conf gibi) yapılandırma dosyalarında <VirtualHost> ve <Directory> bölümleri dışında her yerde kullanılabileceğini belirtir. Ayrıca, .htaccess dosyalarında bulunmasına da izin verilmez.
    sanal konak
    Yönergenin sunucunun yapılandırma dosyalarının sadece <VirtualHost> bölümlerinde kullanıldığında geçerli kabul edileceğini belirtir.
    dizin
    Yönergenin sunucunun yapılandırma dosyalarında sadece <Directory>, <Location>, <Files>, <If> ve <Proxy> bölümlerinde kullanıldığında geçerli kabul edileceğini belirtir. Bu bağlama konu sınırlamaların çerçevesi Yapılandırma Bölümleri içinde çizilmiştir.
    .htaccess
    Bu bağlamda geçerli olacağı kabul edilen bir yönerge sadece dizin içi .htaccess dosyalarında görüldüğü zaman işleme sokulur. Üzerinde bir geçersizleştirme etkin kılınmışsa yönerge her şeye rağmen işleme sokulmayabilir.

    Yönergeye sadece tasarlandığı bağlam içinde izin verilir; başka bir yerde kullanmayı denerseniz ya sunucunun bu bağlamı doğru şekilde işlemesine engel olan ya da sunucunun tamamen işlevsiz kalmasına sebep olan -- sunucu hiç başlatılamayabilir -- bir yapılandırma hatası alırsınız.

    Yönergenin geçerli olacağı konumlar, aslında, listelenen bağlamların tamamına mantıksal VEYA uygulanarak bulunur. Başka bir deyişle, bir yönergenin geçerli olacağı yerler "sunucu geneli, .htaccess" şeklinde belirtilmişse yönerge httpd.conf dosyasında ve .htaccess dosyalarında, <Directory> veya <VirtualHost> bölümleri haricinde her yerde kullanılabilir.

    top

    Geçersizleştirme

    Bir .htaccess dosyasında göründüğü takdirde yönerge işlenirken hangi yapılandırma geçersizleşirmesinin etkin olacağı burada belirtilir. Eğer yönerge bağlamının .htaccess dosyalarında görünmesine izin verilmiyorsa hiçbir bağlam listelenmez.

    Geçersizleştirmeler AllowOverride yönergesi tarafından etkinleştirilir ve belli bir bağlama ve alt seviyelerde başka AllowOverride yönergeleri ile değiştirilmedikçe tüm çocuklarına uygulanır. Yönergenin belgesinde ayrıca kullanılabilecek tüm olası geçersizleştirme isimleri belirtilir.

    top

    Durum

    Yönergenin Apache HTTP sunucusuna ne kadar sıkı bağlı olduğunu belirtir. Başka bir deyişle, yönergeye ve işlevselliğine erişim kazanmak için sunucuyu belli bir modül kümesiyle yeniden derlemek gerekip gerekmediği ile ilgili durumu belirtir. Bu özniteliğin olası değerleri şunlardır:

    Çekirdek
    Eğer bir yönerge “Çekirdek†durumuna sahip olarak listelenmişse bu, yönergenin Apache HTTP sunucusunun en iç kısımlarının bir parçası olduğu ve daima kullanılabilir olacağı anlamına gelir.
    MPM
    “MPM†durumuna sahip bir yönerge Çok Süreklilik Modülü tarafından sağlanır. Bu yönerge türü sadece ve sadece yönerge tanımının Modül satırında listelenmiş MPM’lerden birini kullanıyorsanız mevcut olacaktır.
    Temel
    “Temel†durumuna sahip bir yönerge, sunucuda öntanımlı derlenmiş standart Apache modüllerinden biri tarafından destekleniyor demektir. Bu nedenle sunucuyu derlemek için yapılandırırken yönergeyi içeren modülü yapılandırmadan özellikle kaldırmazsanız yönerge normal olarak kullanılabilir olacaktır.
    Eklenti
    “Eklenti†durumuna sahip bir yönerge, Apache sunucu kitinde bulunan ancak normalde sunucuyla birlikte derlenmeyen modüllerden biri tarafından sağlanır. Yönergeyi ve işlevselliğini etkin kılmak için sunucunun derleme öncesi paket yapılandırması sırasında modülün derleneceğini açıkça belirttikten sonra gerekirse sunucuyu yeniden derlemeniz gerekir.
    Deneysel
    “Deneysel†durumuna sahip bir yönerge, Apache sunucu kitinde bulunan modüllerden biri tarafından sağlanır ve modülün denenmesi tamamen sizin insiyatifinize bırakılır. Böyle bir yönerge her şeyiyle belgelenmiştir fakat gerektiği gibi desteklenmemiştir. Yönergeyi içeren modül öntanımlı olarak sunucuyla birlikte derlenebileceği gibi derlenmeyebilir de; bunun için yönergenin açıklandığı sayfanın başına ve kullanılabilirliği hakkında bilgi edinmek için yönergeyi içeren modüle bakın.
    top

    Modül

    Burada sadece yönergeyi tanımlayan kaynak modülün ismi yazılır.

    top

    Uyumluluk

    Eğer yönerge Apache’nin 2. sürüm dağıtımının özgün parçası değilse söz konusu sürüm burada belirtilir. Ayrıca, yönergenin kullanımı belli platformlarla sınırlıysa bunun ayrıntıları da burada belirtilir.

    Mevcut Diller:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cgid.html.ko.euc-kr0000644000000000000500000002526213412755316020466 0ustar rootsrc mod_cgid - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_cgid

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:¿ÜºÎ CGI µ¥¸óÀ» »ç¿ëÇÏ¿© CGI ½ºÅ©¸³Æ®¸¦ ½ÇÇà
    »óÅÂ:Base
    ¸ðµâ¸í:cgid_module
    ¼Ò½ºÆÄÀÏ:mod_cgid.c
    Áö¿ø:À¯´Ð½º¿¡¼­ ¾²·¹µå¸¦ »ç¿ëÇÏ´Â MPMs Àü¿ë

    ¿ä¾à

    ¾Æ·¡¿¡¼­ ¼³¸íÇÏ´Â Ãß°¡µÈ ScriptSock Áö½Ã¾î¸¦ Á¦¿ÜÇϰí mod_cgid´Â mod_cgi¿Í ºñ½ÁÇÏ°Ô µ¿ÀÛÇÑ´Ù. ¾ÆÆÄÄ¡¿Í CGI¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ¼³¸íÀº mod_cgi¸¦ Âü°íÇ϶ó.

    ¾î¶² À¯´Ð½º ¿î¿µÃ¼Á¦ÀÇ °æ¿ì ´ÙÁß¾²·¹µå ¼­¹ö¿¡¼­ ÇÁ·Î¼¼½º¸¦ Æ÷Å©(fork)ÇÏ¸é »õ·Î¿î ÇÁ·Î¼¼½º°¡ ºÎ¸ð ÇÁ·Î¼¼½ºÀÇ ¸ðµç ¾²·¹µå¸¦ º¹Á¦ÇØ¾ß ÇϹǷΠºÎ´ãÀÌ µÈ´Ù. CGI ½ÇÇึ´Ù ÀÌ·± ºÎ´ãÀ» ÁÖÁö ¾Ê±âÀ§ÇØ mod_cgid´Â CGI ½ºÅ©¸³Æ®¸¦ ½ÇÇàÇÏ´Â ÀÚ½Ä ÇÁ·Î¼¼½º¸¦ Æ÷Å©ÇÏ´Â ¿ÜºÎ µ¥¸óÀ» ¸¸µç´Ù. ÁÖ¼­¹ö´Â ÀÌ µ¥¸ó°ú À¯´Ð½º¼ÒÄÏ(unix domain socket)À» »ç¿ëÇÏ¿© Åë½ÅÇÑ´Ù.

    ÄÄÆÄÀÏÇÒ¶§ ´ÙÁß¾²·¹µå MPMÀ» ¼±ÅÃÇÏ¸é ±âº»ÀûÀ¸·Î mod_cgi ´ë½Å ÀÌ ¸ðµâÀ» »ç¿ëÇÑ´Ù. »ç¿ëÀÚ ÀÔÀå¿¡¼­ ÀÌ ¸ðµâÀÇ ¼³Á¤°ú µ¿ÀÛÀº mod_cgi¿Í µ¿ÀÏÇÏ´Ù. À¯ÀÏÇÑ Â÷ÀÌÁ¡Àº cgi µ¥¸ó°ú Åë½ÅÀ» À§ÇØ »ç¿ëÇÒ ¼ÒÄÏÀÇ À̸§À» ¼³Á¤ÇÏ´Â ScriptSock Áö½Ã¾î°¡ Ãß°¡µÈ Á¡ÀÌ´Ù.

    top

    CGIDScriptTimeout Áö½Ã¾î

    ¼³¸í:The length of time to wait for more output from the CGI program
    ¹®¹ý:CGIDScriptTimeout time[s|ms]
    ±âº»°ª:value of Timeout directive when unset
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Base
    ¸ðµâ:mod_cgid
    Áö¿ø:CGIDScriptTimeout defaults to zero in releases 2.4 and earlier

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    ScriptSock Áö½Ã¾î

    ¼³¸í:cgi µ¥¸ó°ú Åë½ÅÀ» À§ÇØ »ç¿ëÇÒ ¼ÒÄÏÀÇ À̸§
    ¹®¹ý:ScriptSock file-path
    ±âº»°ª:ScriptSock logs/cgisock
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Base
    ¸ðµâ:mod_cgid

    ÀÌ Áö½Ã¾î´Â CGI µ¥¸ó°ú Åë½ÅÀ» À§ÇØ »ç¿ëÇÒ ¼ÒÄÏÀÇ À̸§À» ÁöÁ¤ÇÑ´Ù. ¾ÆÆÄÄ¡¸¦ ½ÃÀÛÇÑ »ç¿ëÀÚ (º¸Åë root) ±ÇÇÑÀ¸·Î ¼ÒÄÏÀ» ¿¬´Ù. CGI ½ºÅ©¸³Æ®¿Í Åë½ÅÀÇ º¸¾ÈÀ» À§ÇØ ´Ù¸¥ »ç¿ëÀÚ°¡ ¼ÒÄÏÀÌ ÀÖ´Â µð·ºÅ丮¿¡ ¾²±â±ÇÇÑÀ» °¡ÁöÁö¾Ê´Â °ÍÀÌ Áß¿äÇÏ´Ù.

    ¿¹Á¦

    ScriptSock /var/run/cgid.sock

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_express.html.fr.utf80000644000000000000500000003412713423336600022201 0ustar rootsrc mod_proxy_express - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_proxy_express

    Langues Disponibles:  en  |  fr 

    Description:Extension à mod_proxy pour le mandatement dynamique inverse de masse
    Statut:Extension
    Identificateur de Module:proxy_express_module
    Fichier Source:mod_proxy_express.c
    Compatibilité:Disponible à partir de la version 2.3.13 du serveur HTTP Apache

    Sommaire

    Ce module crée dynamiquement en masse des mandataires inverses en faisant correspondre l'en-tête Host: de la requête HTTP à un nom de serveur et une URL d'arrière-plan stockés dans un fichier DBM. Il est ainsi plus aisé d'utiliser un grand nombre de mandataires inverses sans avoir à modifier la configuration. Il est loin de posséder autant de fonctionnalités que mod_proxy_balancer qui propose aussi la croissance dynamique, mais il est conçu pour gérer un nombre beaucoup plus important de serveurs d'arrière-plan. Il convient parfaitement pour créer un commutateur HTTP frontal et pour les architectures Microservices.

    Pour pouvoir être utilisé, ce module nécessite le chargement de mod_proxy.

    Avertissement

    N'activez le mandatement que si vous avez sécurisé votre serveur. Les serveurs mandataires ouverts sont dangereux pour votre réseau, et dans une plus large mesure pour Internet.

    Limitations

    • Ce module n'est pas conçu pour remplacer les fonctionnalités dynamiques de mod_proxy_balancer. Par contre, il peut constituer une alternative légère et rapide à mod_rewrite lorsque ce dernier utilise la directive RewriteMap et le drapeau [P] pour le mandatement inverse à partir d'une table de correspondances.
    • Il ne supporte pas les mises en correspondance basées sur les expressions rationnelles ou les modèles.
    • Il émule :
      <VirtualHost *:80>
         ServerName front.end.server
         ProxyPass "/" "back.end.server:port"
         ProxyPassReverse "/" "back.end.server:port"
      </VirtualHost>
      En d'autres termes, l'URL dans son ensemble est ajoutée à l'URL d'arrière-plan correspondante, tout ceci dans le but de proposer un commutateur mandataire inverse simple mais rapide.
    top

    Directive ProxyExpressDBMFile

    Description:Chemin du fichier DBM.
    Syntaxe:ProxyExpressDBMFile pathname
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy_express

    La directive ProxyExpressDBMFile permet de définir le chemin du fichier DBM de correspondance Express. Ce fichier permet de faire correspondre le nom de serveur extrait de l'en-tête Host: de la requête entrante avec une URL d'arrière-plan.

    Note

    Ce fichier est élaboré à partir d'un fichier texte à l'aide de l'utilitaire httxt2dbm.

    Fichier de correspondances ProxyExpress

    ##
    ##express-map.txt:
    ##

    www1.example.com http://192.168.211.2:8080
    www2.example.com http://192.168.211.12:8088
    www3.example.com http://192.168.212.10

    Création du fichier DBM

    httxt2dbm -i express-map.txt -o emap

    Configuration

    ProxyExpressEnable on
    ProxyExpressDBMFile emap
    top

    Directive ProxyExpressDBMType

    Description:Type de fichier DBM.
    Syntaxe:ProxyExpressDBMType type
    Défaut:ProxyExpressDBMType default
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy_express

    La directive ProxyExpressDBMType permet de définir le type de fichier DBM requis par le module. La valeur par défaut correspond au type DBM par défaut du fichier créé par l'utilitaire httxt2dbm.

    Les valeurs possibles sont (mais toutes ne seront pas disponibles à l'exécution) :

    ValueDescription
    dbFichiers Berkeley DB
    gdbmFichiers GDBM
    ndbmFichiers NDBM
    sdbmFichiers SDBM (toujours disponible)
    defaulttype DBM par défaut
    top

    Directive ProxyExpressEnable

    Description:Active la fonctionnalité du module.
    Syntaxe:ProxyExpressEnable on|off
    Défaut:ProxyExpressEnable off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy_express

    La directive ProxyExpressEnable permet d'activer/désactiver le module.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_slotmem_shm.html.fr.utf80000644000000000000500000002215413412755316021602 0ustar rootsrc mod_slotmem_shm - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_slotmem_shm

    Langues Disponibles:  en  |  fr 

    Description:Fournisseur de mémoire partagée basée sur les slots.
    Statut:Extension
    Identificateur de Module:slotmem_shm_module
    Fichier Source:mod_slotmem_shm.c

    Sommaire

    mod_slotmem_shm est un fournisseur de mémoire qui permet la création et l'accès à un segment de mémoire partagée dans lequel les ensembles de données sont organisés en "slots".

    L'ensemble de la mémoire partagée est effacé à chaque redémarrage, que ce dernier soit graceful ou non. Les données sont stockées et restituées dans/à partir d'un fichier défini par le paramètre name des appels create et attach. Si son chemin absolu n'est pas spécifié, le chemin du fichier sera relatif au chemin défini par la directive DefaultRuntimeDir.

    mod_slotmem_shm fournit les fonctions d'API suivantes :

    /* appelle le callback pour tous les slots actifs */
    apr_status_t doall(ap_slotmem_instance_t *s, ap_slotmem_callback_fn_t *func, void *data, apr_pool_t *pool)
    
    /* crée un nouveau slot de mémoire dont chaque taille d'item est
          item_size. 'name' est utilisé pour générer le nom du fichier
          permettant de stocker/restaurer le contenu de la mémoire partagée,
          si elle est configurée. Les valeurs possibles sont :
          "none"                - Mémoire partagée anonyme et pas de stockage permanent
          "file-name"           - [DefaultRuntimeDir]/file-name
          "/absolute-file-name" - Chemin absolu du fichier */
    apr_status_t create(ap_slotmem_instance_t **new, const char *name, apr_size_t item_size, unsigned int item_num, ap_slotmem_type_t type, apr_pool_t *pool)
    
    /* attache à un slot de mémoire existant. Voir
          'create' pour la description du paramètre
          'name'. */
    apr_status_t attach(ap_slotmem_instance_t **new, const char *name, apr_size_t *item_size, unsigned int *item_num, apr_pool_t *pool)
    
    /* obtient la mémoire associée à ce slot actif. */
    apr_status_t dptr(ap_slotmem_instance_t *s, unsigned int item_id, void **mem)
    
    /* lit la mémoire depuis ce slot et la transfert vers dest */
    apr_status_t get(ap_slotmem_instance_t *s, unsigned int item_id, unsigned char *dest, apr_size_t dest_len)
    
    /* écrit dans ce slot la mémoire en provenance de src */
    apr_status_t put(ap_slotmem_instance_t *slot, unsigned int item_id, unsigned char *src, apr_size_t src_len)
    
    /* renvoie le nombre total de slots contenus dans ce segment */
    unsigned int num_slots(ap_slotmem_instance_t *s)
    
    /* renvoie la taille totale des données, en octets, contenues
          dans un slot de ce segment */
    apr_size_t slot_size(ap_slotmem_instance_t *s)
    
    /* alloue le premier slot libre et le marque comme utilisé (n'effectue aucune
          copie de données) */
    apr_status_t grab(ap_slotmem_instance_t *s, unsigned int *item_id)
    
    /* appropriation ou allocation forcée du slot spécifié et marquage comme
          utilisé (n'effectue aucune copie de données) */
    apr_status_t fgrab(ap_slotmem_instance_t *s, unsigned int item_id)
    
    /* libère un slot et le marque comme non utilisé (n'effectue aucune
          copie de données) */
    apr_status_t release(ap_slotmem_instance_t *s, unsigned int item_id)
    Support Apache!

    Directives

    Ce module ne fournit aucune directive.

    Traitement des bugs

    Voir aussi

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_socache_dbm.html.en0000644000000000000500000001425013412755316020606 0ustar rootsrc mod_socache_dbm - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_socache_dbm

    Available Languages:  en  |  fr 

    Description:DBM based shared object cache provider.
    Status:Extension
    Module Identifier:socache_dbm_module
    Source File:mod_socache_dbm.c

    Summary

    mod_socache_dbm is a shared object cache provider which provides for creation and access to a cache backed by a DBM database.

    dbm:/path/to/datafile

    Details of other shared object cache providers can be found here.

    Support Apache!

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_vhost_alias.html.fr.utf80000644000000000000500000005444213412755316021574 0ustar rootsrc mod_vhost_alias - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_vhost_alias

    Langues Disponibles:  en  |  fr  |  tr 

    Description:Permet de configurer dynamiquement l'hébergement virtuel de masse
    Statut:Extension
    Identificateur de Module:vhost_alias_module
    Fichier Source:mod_vhost_alias.c

    Sommaire

    Ce module permet de créer des serveurs virtuels configurés dynamiquement, en autorisant l'utilisation de l'adresse IP et/ou de l'en-tête Host: de la requête HTTP comme partie du nom de chemin afin de déterminer les fichiers à servir. Ceci facilite la gestion d'un grand nombre de serveurs virtuels possèdant des configurations similaires.

    Note

    Si les modules mod_alias ou mod_userdir sont utilisés pour traduire les URIs en noms de fichiers, ils l'emportent sur les directives du module mod_vhost_alias décrites ci-dessous. Par exemple, la configuration suivante fera correspondre /cgi-bin/script.pl à /usr/local/apache2/cgi-bin/script.pl dans tous les cas :

    ScriptAlias "/cgi-bin/" "/usr/local/apache2/cgi-bin/"
    VirtualScriptAlias "/never/found/%0/cgi-bin/"
    top

    Interpolation du nom de répertoire

    Toutes les directives de ce module insèrent une chaîne dans un nom de chemin. La chaîne insérée (que nous appellerons maintenant le "nom") peut être soit le nom du serveur (voir la directive UseCanonicalName pour les détails sur la manière dont il est déterminé), soit l'adresse IP du serveur virtuel hébergé par le serveur sous la forme d'un quadruplet d'octets séparés par des points. L'insertion est contrôlée par des spécificateurs inspirés de printf et possèdant de nombreux formats :

    %% insère un %
    %p insère le numéro de port du serveur virtuel
    %N.M insère le nom (en partie)

    N et M permettent de spécifier des sous-chaînes du nom. N sélectionne un des composants du nom séparés par des points, et M sélectionne des caractères à l'intérieur de ce que N a sélectionné. M est optionnel et sa valeur par défaut est 0 s'il n'est pas spécifié ; le point doit être présent si et seulement si M l'est aussi. Les modes d'insertion sont les suivants :

    0 le nom en entier
    1 la première partie
    2 la seconde partie
    -1 la dernière partie
    -2 l'avant-dernière partie
    2+ toutes les parties à partir de la seconde
    -2+ toutes les parties jusqu'à l'avant-dernière
    1+ et -1+ identique à 0

    Si N ou M est plus grand que le nombre de parties disponibles, seul un caractère de soulignement est inséré.

    top

    Exemples

    Pour des serveurs virtuels simples à base de nom, utilisez les directives suivantes dans le fichier de configuration de votre serveur :

    UseCanonicalName    Off
    VirtualDocumentRoot "/usr/local/apache/vhosts/%0"

    Une requête pour http://www.example.com/repertoire/fichier.html concernera alors la ressource /usr/local/apache/vhosts/www.example.com/repertoire/fichier.html.

    Pour un très grand nombre de serveurs virtuels, il est avantageux d'organiser les fichiers de façon à réduire la taille du répertoire vhosts. Pour ce faire, insérez les lignes suivantes dans votre fichier de configuration :

    UseCanonicalName    Off
    VirtualDocumentRoot "/usr/local/apache/vhosts/%3+/%2.1/%2.2/%2.3/%2"

    Une requête pour http://www.domaine.example.com/repertoire/fichier.html concernera alors la ressource /usr/local/apache/vhosts/example.com/d/o/m/domaine/repertoire/fichier.html.

    Une répartition plus régulière des fichiers peut être obtenue en partant de la fin d'un composant du nom, comme dans l'exemple suivant :

    VirtualDocumentRoot "/usr/local/apache/vhosts/%3+/%2.-1/%2.-2/%2.-3/%2"

    La requête précédente concernerait alors /usr/local/apache/vhosts/example.com/e/n/i/domaine/repertoire/fichier.html.

    Vous pouvez également utiliser :

    VirtualDocumentRoot "/usr/local/apache/vhosts/%3+/%2.1/%2.2/%2.3/%2.4+"

    La requête précédente concernerait alors /usr/local/apache/vhosts/example.com/d/o/m/aine/repertoire/fichier.html.

    Une demande très courante des utilisateurs concerne la possibilité de faire correspondre plusieurs racines de documents à plusieurs domaines, sans avoir à se préoccuper de la longueur ou du nombre de parties du nom d'hôte faisant partie de la requête. Si le nom d'hôte de la requête est sub.www.domain.example.com au lieu de simplement www.domain.example.com, alors en utilisant %3+, la racine des documents sera /usr/local/apache/vhosts/domain.example.com/... au lieu du répertoire example.com attendu. Dans ce genre de situation, il peut s'avérer préférable d'utiliser la combinaison %-2.0.%-1.0 qui fournira toujours le nom de domaine et le tld, par exemple example.com sans tenir compte du nombre de sous-domaines ajoutés au nom d'hôte. Dans ces conditions, il est possible d'élaborer une configuration qui associera les sous-domaines de premier, second et troisième niveau au même répertoire :

    VirtualDocumentRoot "/usr/local/apache/vhosts/%-2.0.%-1.0"

    Dans l'exemple ci-dessus, www.example.com, www.sub.example.com ou example.com correspondront tous au répertoire /usr/local/apache/vhosts/example.com.

    Pour l'hébergement virtuel à base d'adresse IP, vous pouvez insérer les lignes suivantes dans votre fichier de configuration :

    UseCanonicalName DNS
    VirtualDocumentRootIP "/usr/local/apache/vhosts/%1/%2/%3/%4/docs"
    VirtualScriptAliasIP  "/usr/local/apache/vhosts/%1/%2/%3/%4/cgi-bin"

    Si l'adresse IP de www.domaine.example.com est 10.20.30.40, une requête pour http://www.domaine.example.com/repertoire/fichier.html concernera la ressource /usr/local/apache/vhosts/10/20/30/40/docs/repertoire/fichier.html. Une requête pour http://www.domaine.example.com/cgi-bin/script.pl concernera la ressource /usr/local/apache/vhosts/10/20/30/40/cgi-bin/script.pl.

    Si vous voulez insérer le caractère . dans une directive VirtualDocumentRoot, et si cela crée un conflit avec un spécificateur %, vous pouvez contourner le problème de la manière suivante :

    VirtualDocumentRoot "/usr/local/apache/vhosts/%2.0.%3.0"

    Une requête pour http://www.domaine.example.com/repertoire/fichier.html concernera alors la ressource /usr/local/apache/vhosts/domaine.exemple/repertoire/fichier.html.

    Les spécificateurs de format %V et %A de la directive LogFormat s'avèrent très utiles lorsqu'ils sont utilisés en conjonction avec ce module.

    top

    Directive VirtualDocumentRoot

    Description:Permet une configuration dynamique de la racine des documents d'un serveur virtuel donné
    Syntaxe:VirtualDocumentRoot répertoire-interpolé|none
    Défaut:VirtualDocumentRoot none
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_vhost_alias

    La directive VirtualDocumentRoot vous permet de spécifier où le serveur HTTP Apache pourra trouver vos documents en se basant sur le nom du serveur. Le résultat de l'expansion du répertoire-interpolé est utilisé comme racine de l'arborescence des documents d'une manière similaire à l'argument de la directive DocumentRoot. Si répertoire-interpolé a pour valeur none, la directive VirtualDocumentRoot est désactivée. Cette directive ne peut pas être utilisée dans le même contexte que la directive VirtualDocumentRootIP.

    Note

    La directive VirtualDocumentRoot l'emporte sur toute directive DocumentRoot définie dans le même contexte ou dans des contextes enfants. Le fait de définir une directive VirtualDocumentRoot dans le contexte du serveur principal va effectivement l'emporter sur toute directive DocumentRoot définie dans un serveur virtuel quelconque, si vous n'avez pas défini VirtualDocumentRoot à None dans ce serveur virtuel.
    top

    Directive VirtualDocumentRootIP

    Description:Configuration dynamique de la racine des documents pour un serveur virtuel donné
    Syntaxe:VirtualDocumentRootIP répertoire-interpolé|none
    Défaut:VirtualDocumentRootIP none
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_vhost_alias

    La directive VirtualDocumentRootIP est identique à la directive VirtualDocumentRoot à l'exception près qu'elle utilise l'adresse IP du serveur virtuel pour l'interpolation du répertoire à la place du nom du serveur.

    top

    Directive VirtualScriptAlias

    Description:Configuration dynamique du répertoire des scripts CGI pour un serveur virtuel donné
    Syntaxe:VirtualScriptAlias répertoire-interpolé|none
    Défaut:VirtualScriptAlias none
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_vhost_alias

    La directive VirtualScriptAlias vous permet de spécifier où Apache httpd pourra trouver les scripts CGI selon une méthode similaire à celle qu'utilise la directive VirtualDocumentRoot pour les autres documents. Elle recherche des requêtes dont l'URI commence par /cgi-bin/, comme le ferait la directive ScriptAlias.

    top

    Directive VirtualScriptAliasIP

    Description:Configuration dynamique du répertoire des scripts CGI pour un serveur virtuel donné
    Syntaxe:VirtualScriptAliasIP répertoire-interpolé|none
    Défaut:VirtualScriptAliasIP none
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_vhost_alias

    La directive VirtualScriptAliasIP est identique à la directive VirtualScriptAlias à l'exception près qu'elle utilise l'adresse IP du serveur virtuel pour l'interpolation du répertoire à la place du nom du serveur.

    Langues Disponibles:  en  |  fr  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_suexec.html.fr.utf80000644000000000000500000002057213412755316020551 0ustar rootsrc mod_suexec - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_suexec

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Permet l'exécution des scripts CGI sous l'utilisateur et le groupe spécifiés
    Statut:Extension
    Identificateur de Module:suexec_module
    Fichier Source:mod_suexec.c

    Sommaire

    Ce module, en combinaison avec son programme support suexec, permet l'exécution des scripts CGI sous l'utilisateur et le groupe spécifiés.

    top

    Directive SuexecUserGroup

    Description:L'utilisateur et le groupe sous lesquels les programmes CGI doivent s'exécuter
    Syntaxe:SuexecUserGroup Utilisateur Groupe
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_suexec

    La directive SuexecUserGroup permet de spécifier l'utilisateur et le groupe sous lesquels les programmes CGI doivent s'exécuter. Les requêtes non CGI seront toujours traitées avec l'utilisateur spécifié par la directive User.

    Exemple

    SuexecUserGroup nobody nogroup

    Le démarrage échouera si cette directive est spécifiée et si la fonctionnalité suEXEC est désactivée.

    Voir aussi

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_env.html.fr.utf80000644000000000000500000003013013412755316020034 0ustar rootsrc mod_env - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_env

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Modifie l'environnement transmis aux scripts CGI et aux pages SSI
    Statut:Base
    Identificateur de Module:env_module
    Fichier Source:mod_env.c

    Sommaire

    Ce module permet de contrôler les variables d'environnement internes utilisées par divers modules du serveur HTTP Apache. Ces variables sont aussi accessibles aux scripts CGI en tant que variables d'environnement système natives, et disponibles dans les pages SSI. Les variables d'environnement peuvent être transmises depuis le shell qui a lancé le processus httpd. Elles peuvent également être définies ou supprimées au cours du processus de configuration.

    top

    Directive PassEnv

    Description:Transmet des variables d'environnement depuis le shell
    Syntaxe:PassEnv var-env [var-env] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_env

    Cette directive permet de spécifier quelles variables d'environnement système natives doivent être disponibles en tant que variables d'environnement internes pour les modules du serveur HTTP Apache, et propagées vers les scripts CGI et les pages SSI. Leurs valeurs sont issues de l'environnement natif de l'OS associé au shell qui a invoqué le processus httpd.

    Exemple

    PassEnv LD_LIBRARY_PATH
    top

    Directive SetEnv

    Description:Définit des variables d'environnement
    Syntaxe:SetEnv var-env [valeur]
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_env

    Définit une variable d'environnement interne, cette dernière étant ensuite disponible pour les modules du serveur HTTP Apache et transmise aux scripts CGI et aux pages SSI.

    Exemple

    SetEnv SPECIAL_PATH /foo/bin

    Si l'argument valeur est absent, la variable est définie à la valeur d'une chaîne vide.

    Les variables d'environnement internes définies par cette directive le sont après l'exécution de la plupart des directives du traitement initial des requêtes, comme les contrôles d'accès et la mise en correspondance des URIs avec les noms de fichiers. Si la variable d'environnement est sensée intervenir au cours de cette phase initiale du traitement, par exemple pour la directive RewriteRule, vous devez plutôt utiliser la directive SetEnvIf pour définir cette variable.

    Voir aussi

    top

    Directive UnsetEnv

    Description:Supprime des variables de l'environnement
    Syntaxe:UnsetEnv var-env [var-env] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_env

    Supprime une ou plusieurs variables d'environnement internes parmi celles qui sont transmises aux scripts CGI et aux pages SSI.

    Exemple

    UnsetEnv LD_LIBRARY_PATH

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_expires.html0000644000000000000500000000062313362070302017421 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_expires.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_expires.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_expires.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_expires.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_socache_dbm.html0000644000000000000500000000034213362070302020167 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_socache_dbm.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_socache_dbm.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/overrides.html.en0000644000000000000500000020675113520523022017516 0ustar rootsrc Override Class Index for .htaccess - Apache HTTP Server Version 2.4
    <-

    Override Class Index for .htaccess

    Available Languages:  en  |  fr 

    This is an index of the directives that are allowed in .htaccess files for various AllowOverride settings, organized by class. Its intended purpose is to help server administrators verify the privileges they're granting to .htaccess users. For an overview of how .htaccess works, see the .htaccess tutorial.

    To determine the set of directives that your server configuration allows .htaccess users to use:

    1. Start with the set of directives in the AllowOverrideList for the directory in question. (By default, this is set to None.)
    2. Find the AllowOverride setting for the directory in question. (By default, it is set to None.) There are two special cases:
      1. If your AllowOverride setting is All, add every directive listed on this page to the list.
      2. If your AllowOverride setting is None, you're done. Only the directives in the AllowOverrideList (if any) will be allowed.
    3. For each override class listed in AllowOverride, look up the corresponding set of directives below and add them to the list.
    4. Finally, add the set of directives that is always allowed in .htaccess (these are listed in the All section, below).

    Several of the override classes are quite powerful and give .htaccess users a large amount of control over the server. For a stricter approach, set AllowOverride None and use AllowOverrideList to specify the exact list of directives that .htaccess users are allowed to use.

    top

    All

    The following directives are allowed in any .htaccess file, as long as overrides are enabled in the server configuration.

    <Else>core
    Contains directives that apply only if the condition of a previous <If> or <ElseIf> section is not satisfied by a request at runtime
    <ElseIf>core
    Contains directives that apply only if a condition is satisfied by a request at runtime while the condition of a previous <If> or <ElseIf> section is not satisfied
    <Files>core
    Contains directives that apply to matched filenames
    <FilesMatch>core
    Contains directives that apply to regular-expression matched filenames
    <If>core
    Contains directives that apply only if a condition is satisfied by a request at runtime
    <IfDefine>core
    Encloses directives that will be processed only if a test is true at startup
    <IfDirective>core
    Encloses directives that are processed conditional on the presence or absence of a specific directive
    <IfFile>core
    Encloses directives that will be processed only if file exists at startup
    <IfModule>core
    Encloses directives that are processed conditional on the presence or absence of a specific module
    <IfSection>core
    Encloses directives that are processed conditional on the presence or absence of a specific section directive
    <IfVersion>mod_version
    contains version dependent configuration
    LimitRequestBodycore
    Restricts the total size of the HTTP request body sent from the client
    LimitXMLRequestBodycore
    Limits the size of an XML-based request body
    LogIOTrackTTFBmod_logio
    Enable tracking of time to first byte (TTFB)
    LuaCodeCachemod_lua
    Configure the compiled code cache.
    LuaHookAccessCheckermod_lua
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthCheckermod_lua
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserIDmod_lua
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixupsmod_lua
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFiltermod_lua
    Provide a hook for the insert_filter phase of request processing
    LuaHookLogmod_lua
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStoragemod_lua
    Provide a hook for the map_to_storage phase of request processing
    LuaHookTranslateNamemod_lua
    Provide a hook for the translate name phase of request processing
    LuaHookTypeCheckermod_lua
    Provide a hook for the type_checker phase of request processing
    LuaInheritmod_lua
    Controls how parent configuration sections are merged into children
    LuaMapHandlermod_lua
    Map a path to a lua handler
    LuaPackageCPathmod_lua
    Add a directory to lua's package.cpath
    LuaPackagePathmod_lua
    Add a directory to lua's package.path
    LuaQuickHandlermod_lua
    Provide a hook for the quick handler of request processing
    LuaRootmod_lua
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScopemod_lua
    One of once, request, conn, thread -- default is once
    RLimitCPUcore
    Limits the CPU consumption of processes launched by Apache httpd children
    RLimitMEMcore
    Limits the memory consumption of processes launched by Apache httpd children
    RLimitNPROCcore
    Limits the number of processes that can be launched by processes launched by Apache httpd children
    ServerSignaturecore
    Configures the footer on server-generated documents
    SSIErrorMsgmod_include
    Error message displayed when there is an SSI error
    SSITimeFormatmod_include
    Configures the format in which date strings are displayed
    SSIUndefinedEchomod_include
    String displayed when an unset variable is echoed
    top

    AuthConfig

    The following directives are allowed in .htaccess files when AllowOverride AuthConfig is in effect. They give .htaccess users control over the authentication and authorization methods that are applied to their directory subtrees, including several related utility directives for session handling and TLS settings.

    Anonymousmod_authn_anon
    Specifies userIDs that are allowed access without password verification
    Anonymous_LogEmailmod_authn_anon
    Sets whether the password entered will be logged in the error log
    Anonymous_MustGiveEmailmod_authn_anon
    Specifies whether blank passwords are allowed
    Anonymous_NoUserIDmod_authn_anon
    Sets whether the userID field may be empty
    Anonymous_VerifyEmailmod_authn_anon
    Sets whether to check the password field for a correctly formatted email address
    AuthBasicAuthoritativemod_auth_basic
    Sets whether authorization and authentication are passed to lower level modules
    AuthBasicFakemod_auth_basic
    Fake basic authentication using the given expressions for username and password
    AuthBasicProvidermod_auth_basic
    Sets the authentication provider(s) for this location
    AuthBasicUseDigestAlgorithmmod_auth_basic
    Check passwords against the authentication providers as if Digest Authentication was in force instead of Basic Authentication.
    AuthDBMGroupFilemod_authz_dbm
    Sets the name of the database file containing the list of user groups for authorization
    AuthDBMTypemod_authn_dbm
    Sets the type of database file that is used to store passwords
    AuthDBMUserFilemod_authn_dbm
    Sets the name of a database file containing the list of users and passwords for authentication
    AuthDigestAlgorithmmod_auth_digest
    Selects the algorithm used to calculate the challenge and response hashes in digest authentication
    AuthDigestDomainmod_auth_digest
    URIs that are in the same protection space for digest authentication
    AuthDigestNonceLifetimemod_auth_digest
    How long the server nonce is valid
    AuthDigestProvidermod_auth_digest
    Sets the authentication provider(s) for this location
    AuthDigestQopmod_auth_digest
    Determines the quality-of-protection to use in digest authentication
    AuthFormAuthoritativemod_auth_form
    Sets whether authorization and authentication are passed to lower level modules
    AuthFormProvidermod_auth_form
    Sets the authentication provider(s) for this location
    AuthGroupFilemod_authz_groupfile
    Sets the name of a text file containing the list of user groups for authorization
    AuthLDAPAuthorizePrefixmod_authnz_ldap
    Specifies the prefix for environment variables set during authorization
    AuthLDAPBindAuthoritativemod_authnz_ldap
    Determines if other authentication providers are used when a user can be mapped to a DN but the server cannot successfully bind with the user's credentials.
    AuthLDAPBindDNmod_authnz_ldap
    Optional DN to use in binding to the LDAP server
    AuthLDAPBindPasswordmod_authnz_ldap
    Password used in conjunction with the bind DN
    AuthLDAPCompareAsUsermod_authnz_ldap
    Use the authenticated user's credentials to perform authorization comparisons
    AuthLDAPCompareDNOnServermod_authnz_ldap
    Use the LDAP server to compare the DNs
    AuthLDAPDereferenceAliasesmod_authnz_ldap
    When will the module de-reference aliases
    AuthLDAPGroupAttributemod_authnz_ldap
    LDAP attributes used to identify the user members of groups.
    AuthLDAPGroupAttributeIsDNmod_authnz_ldap
    Use the DN of the client username when checking for group membership
    AuthLDAPInitialBindAsUsermod_authnz_ldap
    Determines if the server does the initial DN lookup using the basic authentication users' own username, instead of anonymously or with hard-coded credentials for the server
    AuthLDAPInitialBindPatternmod_authnz_ldap
    Specifies the transformation of the basic authentication username to be used when binding to the LDAP server to perform a DN lookup
    AuthLDAPMaxSubGroupDepthmod_authnz_ldap
    Specifies the maximum sub-group nesting depth that will be evaluated before the user search is discontinued.
    AuthLDAPRemoteUserAttributemod_authnz_ldap
    Use the value of the attribute returned during the user query to set the REMOTE_USER environment variable
    AuthLDAPRemoteUserIsDNmod_authnz_ldap
    Use the DN of the client username to set the REMOTE_USER environment variable
    AuthLDAPSearchAsUsermod_authnz_ldap
    Use the authenticated user's credentials to perform authorization searches
    AuthLDAPSubGroupAttributemod_authnz_ldap
    Specifies the attribute labels, one value per directive line, used to distinguish the members of the current group that are groups.
    AuthLDAPSubGroupClassmod_authnz_ldap
    Specifies which LDAP objectClass values identify directory objects that are groups during sub-group processing.
    AuthLDAPURLmod_authnz_ldap
    URL specifying the LDAP search parameters
    AuthMergingmod_authz_core
    Controls the manner in which each configuration section's authorization logic is combined with that of preceding configuration sections.
    AuthNamemod_authn_core
    Authorization realm for use in HTTP authentication
    AuthnCacheProvideFormod_authn_socache
    Specify which authn provider(s) to cache for
    AuthnCacheTimeoutmod_authn_socache
    Set a timeout for cache entries
    AuthTypemod_authn_core
    Type of user authentication
    AuthUserFilemod_authn_file
    Sets the name of a text file containing the list of users and passwords for authentication
    AuthzDBMTypemod_authz_dbm
    Sets the type of database file that is used to store list of user groups
    CGIPassAuthcore
    Enables passing HTTP authorization headers to scripts as CGI variables
    LDAPReferralHopLimitmod_ldap
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferralsmod_ldap
    Enable referral chasing during queries to the LDAP server.
    <Limit>core
    Restrict enclosed access controls to only certain HTTP methods
    <LimitExcept>core
    Restrict access controls to all HTTP methods except the named ones
    Requiremod_authz_core
    Tests whether an authenticated user is authorized by an authorization provider.
    <RequireAll>mod_authz_core
    Enclose a group of authorization directives of which none must fail and at least one must succeed for the enclosing directive to succeed.
    <RequireAny>mod_authz_core
    Enclose a group of authorization directives of which one must succeed for the enclosing directive to succeed.
    <RequireNone>mod_authz_core
    Enclose a group of authorization directives of which none must succeed for the enclosing directive to not fail.
    Satisfymod_access_compat
    Interaction between host-level access control and user authentication
    Sessionmod_session
    Enables a session for the current directory or location
    SessionEnvmod_session
    Control whether the contents of the session are written to the HTTP_SESSION environment variable
    SessionHeadermod_session
    Import session updates from a given HTTP response header
    SessionIncludemod_session
    Define URL prefixes for which a session is valid
    SessionMaxAgemod_session
    Define a maximum age in seconds for a session
    SSLCipherSuitemod_ssl
    Cipher Suite available for negotiation in SSL handshake
    SSLRenegBufferSizemod_ssl
    Set the size for the SSL renegotiation buffer
    SSLRequiremod_ssl
    Allow access only when an arbitrarily complex boolean expression is true
    SSLRequireSSLmod_ssl
    Deny access when SSL is not used for the HTTP request
    SSLUserNamemod_ssl
    Variable name to determine user name
    SSLVerifyClientmod_ssl
    Type of Client Certificate verification
    SSLVerifyDepthmod_ssl
    Maximum depth of CA Certificates in Client Certificate verification
    top

    FileInfo

    The following directives are allowed in .htaccess files when AllowOverride FileInfo is in effect. They give .htaccess users a wide range of control over the responses and metadata given by the server.

    AcceptPathInfocore
    Resources accept trailing pathname information
    Actionmod_actions
    Activates a CGI script for a particular handler or content-type
    AddCharsetmod_mime
    Maps the given filename extensions to the specified content charset
    AddDefaultCharsetcore
    Default charset parameter to be added when a response content-type is text/plain or text/html
    AddEncodingmod_mime
    Maps the given filename extensions to the specified encoding type
    AddHandlermod_mime
    Maps the filename extensions to the specified handler
    AddInputFiltermod_mime
    Maps filename extensions to the filters that will process client requests
    AddLanguagemod_mime
    Maps the given filename extension to the specified content language
    AddOutputFiltermod_mime
    Maps filename extensions to the filters that will process responses from the server
    AddOutputFilterByTypemod_filter
    assigns an output filter to a particular media-type
    AddTypemod_mime
    Maps the given filename extensions onto the specified content type
    BrowserMatchmod_setenvif
    Sets environment variables conditional on HTTP User-Agent
    BrowserMatchNoCasemod_setenvif
    Sets environment variables conditional on User-Agent without respect to case
    CGIMapExtensioncore
    Technique for locating the interpreter for CGI scripts
    CGIVarcore
    Controls how some CGI variables are set
    CharsetDefaultmod_charset_lite
    Charset to translate into
    CharsetOptionsmod_charset_lite
    Configures charset translation behavior
    CharsetSourceEncmod_charset_lite
    Source charset of files
    CookieDomainmod_usertrack
    The domain to which the tracking cookie applies
    CookieExpiresmod_usertrack
    Expiry time for the tracking cookie
    CookieNamemod_usertrack
    Name of the tracking cookie
    CookieStylemod_usertrack
    Format of the cookie header field
    CookieTrackingmod_usertrack
    Enables tracking cookie
    DefaultLanguagemod_mime
    Defines a default language-tag to be sent in the Content-Language header field for all resources in the current context that have not been assigned a language-tag by some other means.
    DefaultTypecore
    This directive has no effect other than to emit warnings if the value is not none. In prior versions, DefaultType would specify a default media type to assign to response content for which no other media type configuration could be found.
    EnableMMAPcore
    Use memory-mapping to read files during delivery
    EnableSendfilecore
    Use the kernel sendfile support to deliver files to the client
    ErrorDocumentcore
    What the server will return to the client in case of an error
    FileETagcore
    File attributes used to create the ETag HTTP response header for static files
    ForceLanguagePrioritymod_negotiation
    Action to take if a single acceptable document is not found
    ForceTypecore
    Forces all matching files to be served with the specified media type in the HTTP Content-Type header field
    Headermod_headers
    Configure HTTP response headers
    ISAPIAppendLogToErrorsmod_isapi
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log
    ISAPIAppendLogToQuerymod_isapi
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field
    ISAPIFakeAsyncmod_isapi
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupportedmod_isapi
    Log unsupported feature requests from ISAPI extensions
    ISAPIReadAheadBuffermod_isapi
    Size of the Read Ahead Buffer sent to ISAPI extensions
    LanguagePrioritymod_negotiation
    The precedence of language variants for cases where the client does not express a preference
    MultiviewsMatchmod_mime
    The types of files that will be included when searching for a matching file with MultiViews
    PassEnvmod_env
    Passes environment variables from the shell
    QualifyRedirectURLcore
    Controls whether the REDIRECT_URL environment variable is fully qualified
    Redirectmod_alias
    Sends an external redirect asking the client to fetch a different URL
    RedirectMatchmod_alias
    Sends an external redirect based on a regular expression match of the current URL
    RedirectPermanentmod_alias
    Sends an external permanent redirect asking the client to fetch a different URL
    RedirectTempmod_alias
    Sends an external temporary redirect asking the client to fetch a different URL
    RemoveCharsetmod_mime
    Removes any character set associations for a set of file extensions
    RemoveEncodingmod_mime
    Removes any content encoding associations for a set of file extensions
    RemoveHandlermod_mime
    Removes any handler associations for a set of file extensions
    RemoveInputFiltermod_mime
    Removes any input filter associations for a set of file extensions
    RemoveLanguagemod_mime
    Removes any language associations for a set of file extensions
    RemoveOutputFiltermod_mime
    Removes any output filter associations for a set of file extensions
    RemoveTypemod_mime
    Removes any content type associations for a set of file extensions
    RequestHeadermod_headers
    Configure HTTP request headers
    RewriteBasemod_rewrite
    Sets the base URL for per-directory rewrites
    RewriteCondmod_rewrite
    Defines a condition under which rewriting will take place
    RewriteEnginemod_rewrite
    Enables or disables runtime rewriting engine
    RewriteOptionsmod_rewrite
    Sets some special options for the rewrite engine
    RewriteRulemod_rewrite
    Defines rules for the rewriting engine
    ScriptInterpreterSourcecore
    Technique for locating the interpreter for CGI scripts
    SetEnvmod_env
    Sets environment variables
    SetEnvIfmod_setenvif
    Sets environment variables based on attributes of the request
    SetEnvIfExprmod_setenvif
    Sets environment variables based on an ap_expr expression
    SetEnvIfNoCasemod_setenvif
    Sets environment variables based on attributes of the request without respect to case
    SetHandlercore
    Forces all matching files to be processed by a handler
    SetInputFiltercore
    Sets the filters that will process client requests and POST input
    SetOutputFiltercore
    Sets the filters that will process responses from the server
    Substitutemod_substitute
    Pattern to filter the response content
    SubstituteInheritBeforemod_substitute
    Change the merge order of inherited patterns
    SubstituteMaxLineLengthmod_substitute
    Set the maximum line size
    UnsetEnvmod_env
    Removes variables from the environment
    top

    Indexes

    The following directives are allowed in .htaccess files when AllowOverride Indexes is in effect. They allow .htaccess users to control aspects of the directory index pages provided by the server, including autoindex generation.

    AddAltmod_autoindex
    Alternate text to display for a file, instead of an icon selected by filename
    AddAltByEncodingmod_autoindex
    Alternate text to display for a file instead of an icon selected by MIME-encoding
    AddAltByTypemod_autoindex
    Alternate text to display for a file, instead of an icon selected by MIME content-type
    AddDescriptionmod_autoindex
    Description to display for a file
    AddIconmod_autoindex
    Icon to display for a file selected by name
    AddIconByEncodingmod_autoindex
    Icon to display next to files selected by MIME content-encoding
    AddIconByTypemod_autoindex
    Icon to display next to files selected by MIME content-type
    DefaultIconmod_autoindex
    Icon to display for files when no specific icon is configured
    DirectoryCheckHandlermod_dir
    Toggle how this module responds when another handler is configured
    DirectoryIndexmod_dir
    List of resources to look for when the client requests a directory
    DirectoryIndexRedirectmod_dir
    Configures an external redirect for directory indexes.
    DirectorySlashmod_dir
    Toggle trailing slash redirects on or off
    ExpiresActivemod_expires
    Enables generation of Expires headers
    ExpiresByTypemod_expires
    Value of the Expires header configured by MIME type
    ExpiresDefaultmod_expires
    Default algorithm for calculating expiration time
    FallbackResourcemod_dir
    Define a default URL for requests that don't map to a file
    HeaderNamemod_autoindex
    Name of the file that will be inserted at the top of the index listing
    ImapBasemod_imagemap
    Default base for imagemap files
    ImapDefaultmod_imagemap
    Default action when an imagemap is called with coordinates that are not explicitly mapped
    ImapMenumod_imagemap
    Action if no coordinates are given when calling an imagemap
    IndexHeadInsertmod_autoindex
    Inserts text in the HEAD section of an index page.
    IndexIgnoremod_autoindex
    Adds to the list of files to hide when listing a directory
    IndexIgnoreResetmod_autoindex
    Empties the list of files to hide when listing a directory
    IndexOptionsmod_autoindex
    Various configuration settings for directory indexing
    IndexOrderDefaultmod_autoindex
    Sets the default ordering of the directory index
    IndexStyleSheetmod_autoindex
    Adds a CSS stylesheet to the directory index
    MetaDirmod_cern_meta
    Name of the directory to find CERN-style meta information files
    MetaFilesmod_cern_meta
    Activates CERN meta-file processing
    MetaSuffixmod_cern_meta
    File name suffix for the file containing CERN-style meta information
    ReadmeNamemod_autoindex
    Name of the file that will be inserted at the end of the index listing
    top

    Limit

    The following directives are allowed in .htaccess files when AllowOverride Limit is in effect. This extremely narrow override type mostly allows the use of the legacy authorization directives provided by mod_access_compat.

    Allowmod_access_compat
    Controls which hosts can access an area of the server
    Denymod_access_compat
    Controls which hosts are denied access to the server
    <Limit>core
    Restrict enclosed access controls to only certain HTTP methods
    <LimitExcept>core
    Restrict access controls to all HTTP methods except the named ones
    Ordermod_access_compat
    Controls the default access state and the order in which Allow and Deny are evaluated.
    top

    Options

    The following directives are allowed in .htaccess files when AllowOverride Options is in effect. They give .htaccess users access to Options and similar directives, as well as directives that control the filter chain.

    CheckCaseOnlymod_speling
    Limits the action of the speling module to case corrections
    CheckSpellingmod_speling
    Enables the spelling module
    ContentDigestcore
    Enables the generation of Content-MD5 HTTP Response headers
    FilterChainmod_filter
    Configure the filter chain
    FilterDeclaremod_filter
    Declare a smart filter
    FilterProtocolmod_filter
    Deal with correct HTTP protocol handling
    FilterProvidermod_filter
    Register a content filter
    Optionscore
    Configures what features are available in a particular directory
    ReflectorHeadermod_reflector
    Reflect an input header to the output headers
    SSLOptionsmod_ssl
    Configure various SSL engine run-time options
    XBitHackmod_include
    Parse SSI directives in files with the execute bit set

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/core.html.en0000644000000000000500000107065413521115051016446 0ustar rootsrc core - Apache HTTP Server Version 2.4
    <-

    Apache Core Features

    Available Languages:  de  |  en  |  es  |  fr  |  ja  |  tr 

    Description:Core Apache HTTP Server features that are always available
    Status:Core
    top

    AcceptFilter Directive

    Description:Configures optimizations for a Protocol's Listener Sockets
    Syntax:AcceptFilter protocol accept_filter
    Context:server config
    Status:Core
    Module:core

    This directive enables operating system specific optimizations for a listening socket by the Protocol type. The basic premise is for the kernel to not send a socket to the server process until either data is received or an entire HTTP Request is buffered. Only FreeBSD's Accept Filters, Linux's more primitive TCP_DEFER_ACCEPT, and Windows' optimized AcceptEx() are currently supported.

    Using none for an argument will disable any accept filters for that protocol. This is useful for protocols that require a server send data first, such as ftp: or nntp:

    AcceptFilter nntp none

    The default protocol names are https for port 443 and http for all other ports. To specify that another protocol is being used with a listening port, add the protocol argument to the Listen directive.

    The default values on FreeBSD are:

    AcceptFilter http httpready
    AcceptFilter https dataready

    The httpready accept filter buffers entire HTTP requests at the kernel level. Once an entire request is received, the kernel then sends it to the server. See the accf_http(9) man page for more details. Since HTTPS requests are encrypted, only the accf_data(9) filter is used.

    The default values on Linux are:

    AcceptFilter http data
    AcceptFilter https data

    Linux's TCP_DEFER_ACCEPT does not support buffering http requests. Any value besides none will enable TCP_DEFER_ACCEPT on that listener. For more details see the Linux tcp(7) man page.

    The default values on Windows are:

    AcceptFilter http connect
    AcceptFilter https connect

    Window's mpm_winnt interprets the AcceptFilter to toggle the AcceptEx() API, and does not support http protocol buffering. connect will use the AcceptEx() API, also retrieve the network endpoint addresses, but like none the connect option does not wait for the initial data transmission.

    On Windows, none uses accept() rather than AcceptEx() and will not recycle sockets between connections. This is useful for network adapters with broken driver support, as well as some virtual network providers such as vpn drivers, or spam, virus or spyware filters.

    The data AcceptFilter (Windows)

    For versions 2.4.23 and prior, the Windows data accept filter waited until data had been transmitted and the initial data buffer and network endpoint addresses had been retrieved from the single AcceptEx() invocation. This implementation was subject to a denial of service attack and has been disabled.

    Current releases of httpd default to the connect filter on Windows, and will fall back to connect if data is specified. Users of prior releases are encouraged to add an explicit setting of connect for their AcceptFilter, as shown above.

    See also

    top

    AcceptPathInfo Directive

    Description:Resources accept trailing pathname information
    Syntax:AcceptPathInfo On|Off|Default
    Default:AcceptPathInfo Default
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Core
    Module:core

    This directive controls whether requests that contain trailing pathname information that follows an actual filename (or non-existent file in an existing directory) will be accepted or rejected. The trailing pathname information can be made available to scripts in the PATH_INFO environment variable.

    For example, assume the location /test/ points to a directory that contains only the single file here.html. Then requests for /test/here.html/more and /test/nothere.html/more both collect /more as PATH_INFO.

    The three possible arguments for the AcceptPathInfo directive are:

    Off
    A request will only be accepted if it maps to a literal path that exists. Therefore a request with trailing pathname information after the true filename such as /test/here.html/more in the above example will return a 404 NOT FOUND error.
    On
    A request will be accepted if a leading path component maps to a file that exists. The above example /test/here.html/more will be accepted if /test/here.html maps to a valid file.
    Default
    The treatment of requests with trailing pathname information is determined by the handler responsible for the request. The core handler for normal files defaults to rejecting PATH_INFO requests. Handlers that serve scripts, such as cgi-script and isapi-handler, generally accept PATH_INFO by default.

    The primary purpose of the AcceptPathInfo directive is to allow you to override the handler's choice of accepting or rejecting PATH_INFO. This override is required, for example, when you use a filter, such as INCLUDES, to generate content based on PATH_INFO. The core handler would usually reject the request, so you can use the following configuration to enable such a script:

    <Files "mypaths.shtml">
      Options +Includes
      SetOutputFilter INCLUDES
      AcceptPathInfo On
    </Files>
    top

    AccessFileName Directive

    Description:Name of the distributed configuration file
    Syntax:AccessFileName filename [filename] ...
    Default:AccessFileName .htaccess
    Context:server config, virtual host
    Status:Core
    Module:core

    While processing a request, the server looks for the first existing configuration file from this list of names in every directory of the path to the document, if distributed configuration files are enabled for that directory. For example:

    AccessFileName .acl

    Before returning the document /usr/local/web/index.html, the server will read /.acl, /usr/.acl, /usr/local/.acl and /usr/local/web/.acl for directives unless they have been disabled with:

    <Directory "/">
        AllowOverride None
    </Directory>

    See also

    top

    AddDefaultCharset Directive

    Description:Default charset parameter to be added when a response content-type is text/plain or text/html
    Syntax:AddDefaultCharset On|Off|charset
    Default:AddDefaultCharset Off
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Core
    Module:core

    This directive specifies a default value for the media type charset parameter (the name of a character encoding) to be added to a response if and only if the response's content-type is either text/plain or text/html. This should override any charset specified in the body of the response via a META element, though the exact behavior is often dependent on the user's client configuration. A setting of AddDefaultCharset Off disables this functionality. AddDefaultCharset On enables a default charset of iso-8859-1. Any other value is assumed to be the charset to be used, which should be one of the IANA registered charset values for use in Internet media types (MIME types). For example:

    AddDefaultCharset utf-8

    AddDefaultCharset should only be used when all of the text resources to which it applies are known to be in that character encoding and it is too inconvenient to label their charset individually. One such example is to add the charset parameter to resources containing generated content, such as legacy CGI scripts, that might be vulnerable to cross-site scripting attacks due to user-provided data being included in the output. Note, however, that a better solution is to just fix (or delete) those scripts, since setting a default charset does not protect users that have enabled the "auto-detect character encoding" feature on their browser.

    See also

    top

    AllowEncodedSlashes Directive

    Description:Determines whether encoded path separators in URLs are allowed to be passed through
    Syntax:AllowEncodedSlashes On|Off|NoDecode
    Default:AllowEncodedSlashes Off
    Context:server config, virtual host
    Status:Core
    Module:core
    Compatibility: NoDecode option available in 2.3.12 and later.

    The AllowEncodedSlashes directive allows URLs which contain encoded path separators (%2F for / and additionally %5C for \ on accordant systems) to be used in the path info.

    With the default value, Off, such URLs are refused with a 404 (Not found) error.

    With the value On, such URLs are accepted, and encoded slashes are decoded like all other encoded characters.

    With the value NoDecode, such URLs are accepted, but encoded slashes are not decoded but left in their encoded state.

    Turning AllowEncodedSlashes On is mostly useful when used in conjunction with PATH_INFO.

    Note

    If encoded slashes are needed in path info, use of NoDecode is strongly recommended as a security measure. Allowing slashes to be decoded could potentially allow unsafe paths.

    See also

    top

    AllowOverride Directive

    Description:Types of directives that are allowed in .htaccess files
    Syntax:AllowOverride All|None|directive-type [directive-type] ...
    Default:AllowOverride None (2.3.9 and later), AllowOverride All (2.3.8 and earlier)
    Context:directory
    Status:Core
    Module:core

    When the server finds an .htaccess file (as specified by AccessFileName), it needs to know which directives declared in that file can override earlier configuration directives.

    Only available in <Directory> sections

    AllowOverride is valid only in <Directory> sections specified without regular expressions, not in <Location>, <DirectoryMatch> or <Files> sections.

    When this directive is set to None and AllowOverrideList is set to None, .htaccess files are completely ignored. In this case, the server will not even attempt to read .htaccess files in the filesystem.

    When this directive is set to All, then any directive which has the .htaccess Context is allowed in .htaccess files.

    The directive-type can be one of the following groupings of directives. (See the override class index for an up-to-date listing of which directives are enabled by each directive-type.)

    AuthConfig
    Allow use of the authorization directives (AuthDBMGroupFile, AuthDBMUserFile, AuthGroupFile, AuthName, AuthType, AuthUserFile, Require, etc.).
    FileInfo
    Allow use of the directives controlling document types (ErrorDocument, ForceType, LanguagePriority, SetHandler, SetInputFilter, SetOutputFilter, and mod_mime Add* and Remove* directives), document meta data (Header, RequestHeader, SetEnvIf, SetEnvIfNoCase, BrowserMatch, CookieExpires, CookieDomain, CookieStyle, CookieTracking, CookieName), mod_rewrite directives (RewriteEngine, RewriteOptions, RewriteBase, RewriteCond, RewriteRule), mod_alias directives (Redirect, RedirectTemp, RedirectPermanent, RedirectMatch), and Action from mod_actions.
    Indexes
    Allow use of the directives controlling directory indexing (AddDescription, AddIcon, AddIconByEncoding, AddIconByType, DefaultIcon, DirectoryIndex, FancyIndexing, HeaderName, IndexIgnore, IndexOptions, ReadmeName, etc.).
    Limit
    Allow use of the directives controlling host access (Allow, Deny and Order).
    Nonfatal=[Override|Unknown|All]
    Allow use of AllowOverride option to treat syntax errors in .htaccess as nonfatal. Instead of causing an Internal Server Error, disallowed or unrecognised directives will be ignored and a warning logged:
    • Nonfatal=Override treats directives forbidden by AllowOverride as nonfatal.
    • Nonfatal=Unknown treats unknown directives as nonfatal. This covers typos and directives implemented by a module that's not present.
    • Nonfatal=All treats both the above as nonfatal.

    Note that a syntax error in a valid directive will still cause an internal server error.

    Security

    Nonfatal errors may have security implications for .htaccess users. For example, if AllowOverride disallows AuthConfig, users' configuration designed to restrict access to a site will be disabled.
    Options[=Option,...]
    Allow use of the directives controlling specific directory features (Options and XBitHack). An equal sign may be given followed by a comma-separated list, without spaces, of options that may be set using the Options command.

    Implicit disabling of Options

    Even though the list of options that may be used in .htaccess files can be limited with this directive, as long as any Options directive is allowed any other inherited option can be disabled by using the non-relative syntax. In other words, this mechanism cannot force a specific option to remain set while allowing any others to be set.

    AllowOverride Options=Indexes,MultiViews

    Example:

    AllowOverride AuthConfig Indexes

    In the example above, all directives that are neither in the group AuthConfig nor Indexes cause an internal server error.

    For security and performance reasons, do not set AllowOverride to anything other than None in your <Directory "/"> block. Instead, find (or create) the <Directory> block that refers to the directory where you're actually planning to place a .htaccess file.

    See also

    top

    AllowOverrideList Directive

    Description:Individual directives that are allowed in .htaccess files
    Syntax:AllowOverrideList None|directive [directive-type] ...
    Default:AllowOverrideList None
    Context:directory
    Status:Core
    Module:core

    When the server finds an .htaccess file (as specified by AccessFileName), it needs to know which directives declared in that file can override earlier configuration directives.

    Only available in <Directory> sections

    AllowOverrideList is valid only in <Directory> sections specified without regular expressions, not in <Location>, <DirectoryMatch> or <Files> sections.

    When this directive is set to None and AllowOverride is set to None, then .htaccess files are completely ignored. In this case, the server will not even attempt to read .htaccess files in the filesystem.

    Example:

    AllowOverride None
    AllowOverrideList Redirect RedirectMatch

    In the example above, only the Redirect and RedirectMatch directives are allowed. All others will cause an internal server error.

    Example:

    AllowOverride AuthConfig
    AllowOverrideList CookieTracking CookieName

    In the example above, AllowOverride grants permission to the AuthConfig directive grouping and AllowOverrideList grants permission to only two directives from the FileInfo directive grouping. All others will cause an internal server error.

    See also

    top

    CGIMapExtension Directive

    Description:Technique for locating the interpreter for CGI scripts
    Syntax:CGIMapExtension cgi-path .extension
    Context:directory, .htaccess
    Override:FileInfo
    Status:Core
    Module:core
    Compatibility:NetWare only

    This directive is used to control how Apache httpd finds the interpreter used to run CGI scripts. For example, setting CGIMapExtension sys:\foo.nlm .foo will cause all CGI script files with a .foo extension to be passed to the FOO interpreter.

    top

    CGIPassAuth Directive

    Description:Enables passing HTTP authorization headers to scripts as CGI variables
    Syntax:CGIPassAuth On|Off
    Default:CGIPassAuth Off
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Core
    Module:core
    Compatibility:Available in Apache HTTP Server 2.4.13 and later

    CGIPassAuth allows scripts access to HTTP authorization headers such as Authorization, which is required for scripts that implement HTTP Basic authentication. Normally these HTTP headers are hidden from scripts. This is to disallow scripts from seeing user ids and passwords used to access the server when HTTP Basic authentication is enabled in the web server. This directive should be used when scripts are allowed to implement HTTP Basic authentication.

    This directive can be used instead of the compile-time setting SECURITY_HOLE_PASS_AUTHORIZATION which has been available in previous versions of Apache HTTP Server.

    The setting is respected by any modules which use ap_add_common_vars(), such as mod_cgi, mod_cgid, mod_proxy_fcgi, mod_proxy_scgi, and so on. Notably, it affects modules which don't handle the request in the usual sense but still use this API; examples of this are mod_include and mod_ext_filter. Third-party modules that don't use ap_add_common_vars() may choose to respect the setting as well.

    top

    CGIVar Directive

    Description:Controls how some CGI variables are set
    Syntax:CGIVar variable rule
    Context:directory, .htaccess
    Override:FileInfo
    Status:Core
    Module:core
    Compatibility:Available in Apache HTTP Server 2.4.21 and later

    This directive controls how some CGI variables are set.

    REQUEST_URI rules:

    original-uri (default)
    The value is taken from the original request line, and will not reflect internal redirects or subrequests which change the requested resource.
    current-uri
    The value reflects the resource currently being processed, which may be different than the original request from the client due to internal redirects or subrequests.
    top

    ContentDigest Directive

    Description:Enables the generation of Content-MD5 HTTP Response headers
    Syntax:ContentDigest On|Off
    Default:ContentDigest Off
    Context:server config, virtual host, directory, .htaccess
    Override:Options
    Status:Core
    Module:core

    This directive enables the generation of Content-MD5 headers as defined in RFC1864 respectively RFC2616.

    MD5 is an algorithm for computing a "message digest" (sometimes called "fingerprint") of arbitrary-length data, with a high degree of confidence that any alterations in the data will be reflected in alterations in the message digest.

    The Content-MD5 header provides an end-to-end message integrity check (MIC) of the entity-body. A proxy or client may check this header for detecting accidental modification of the entity-body in transit. Example header:

    Content-MD5: AuLb7Dp1rqtRtxz2m9kRpA==

    Note that this can cause performance problems on your server since the message digest is computed on every request (the values are not cached).

    Content-MD5 is only sent for documents served by the core, and not by any module. For example, SSI documents, output from CGI scripts, and byte range responses do not have this header.

    top

    DefaultRuntimeDir Directive

    Description:Base directory for the server run-time files
    Syntax:DefaultRuntimeDir directory-path
    Default:DefaultRuntimeDir DEFAULT_REL_RUNTIMEDIR (logs/)
    Context:server config
    Status:Core
    Module:core
    Compatibility:Available in Apache 2.4.2 and later

    The DefaultRuntimeDir directive sets the directory in which the server will create various run-time files (shared memory, locks, etc.). If set as a relative path, the full path will be relative to ServerRoot.

    Example

    DefaultRuntimeDir scratch/

    The default location of DefaultRuntimeDir may be modified by changing the DEFAULT_REL_RUNTIMEDIR #define at build time.

    Note: ServerRoot should be specified before this directive is used. Otherwise, the default value of ServerRoot would be used to set the base directory.

    See also

    • the security tips for information on how to properly set permissions on the ServerRoot
    top

    DefaultType Directive

    Description:This directive has no effect other than to emit warnings if the value is not none. In prior versions, DefaultType would specify a default media type to assign to response content for which no other media type configuration could be found.
    Syntax:DefaultType media-type|none
    Default:DefaultType none
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Core
    Module:core
    Compatibility:The argument none is available in Apache httpd 2.2.7 and later. All other choices are DISABLED for 2.3.x and later.

    This directive has been disabled. For backwards compatibility of configuration files, it may be specified with the value none, meaning no default media type. For example:

    DefaultType None

    DefaultType None is only available in httpd-2.2.7 and later.

    Use the mime.types configuration file and the AddType to configure media type assignments via file extensions, or the ForceType directive to configure the media type for specific resources. Otherwise, the server will send the response without a Content-Type header field and the recipient may attempt to guess the media type.

    top

    Define Directive

    Description:Define a variable
    Syntax:Define parameter-name [parameter-value]
    Context:server config, virtual host, directory
    Status:Core
    Module:core

    In its one parameter form, Define is equivalent to passing the -D argument to httpd. It can be used to toggle the use of <IfDefine> sections without needing to alter -D arguments in any startup scripts.

    In addition to that, if the second parameter is given, a config variable is set to this value. The variable can be used in the configuration using the ${VAR} syntax. The variable is always globally defined and not limited to the scope of the surrounding config section.

    <IfDefine TEST>
      Define servername test.example.com
    </IfDefine>
    <IfDefine !TEST>
      Define servername www.example.com
      Define SSL
    </IfDefine>
    
    DocumentRoot "/var/www/${servername}/htdocs"

    Variable names may not contain colon ":" characters, to avoid clashes with RewriteMap's syntax.

    Virtual Host scope and pitfalls

    While this directive is supported in virtual host context, the changes it makes are visible to any later configuration directives, beyond any enclosing virtual host.

    See also

    top

    <Directory> Directive

    Description:Enclose a group of directives that apply only to the named file-system directory, sub-directories, and their contents.
    Syntax:<Directory directory-path> ... </Directory>
    Context:server config, virtual host
    Status:Core
    Module:core

    <Directory> and </Directory> are used to enclose a group of directives that will apply only to the named directory, sub-directories of that directory, and the files within the respective directories. Any directive that is allowed in a directory context may be used. Directory-path is either the full path to a directory, or a wild-card string using Unix shell-style matching. In a wild-card string, ? matches any single character, and * matches any sequences of characters. You may also use [] character ranges. None of the wildcards match a `/' character, so <Directory "/*/public_html"> will not match /home/user/public_html, but <Directory "/home/*/public_html"> will match. Example:

    <Directory "/usr/local/httpd/htdocs">
      Options Indexes FollowSymLinks
    </Directory>

    Directory paths may be quoted, if you like, however, it must be quoted if the path contains spaces. This is because a space would otherwise indicate the end of an argument.

    Be careful with the directory-path arguments: They have to literally match the filesystem path which Apache httpd uses to access the files. Directives applied to a particular <Directory> will not apply to files accessed from that same directory via a different path, such as via different symbolic links.

    Regular expressions can also be used, with the addition of the ~ character. For example:

    <Directory ~ "^/www/[0-9]{3}">
    
    </Directory>

    would match directories in /www/ that consisted of three numbers.

    If multiple (non-regular expression) <Directory> sections match the directory (or one of its parents) containing a document, then the directives are applied in the order of shortest match first, interspersed with the directives from the .htaccess files. For example, with

    <Directory "/">
      AllowOverride None
    </Directory>
    
    <Directory "/home">
      AllowOverride FileInfo
    </Directory>

    for access to the document /home/web/dir/doc.html the steps are:

    • Apply directive AllowOverride None (disabling .htaccess files).
    • Apply directive AllowOverride FileInfo (for directory /home).
    • Apply any FileInfo directives in /home/.htaccess, /home/web/.htaccess and /home/web/dir/.htaccess in that order.

    Regular expressions are not considered until after all of the normal sections have been applied. Then all of the regular expressions are tested in the order they appeared in the configuration file. For example, with

    <Directory ~ "abc$">
      # ... directives here ...
    </Directory>

    the regular expression section won't be considered until after all normal <Directory>s and .htaccess files have been applied. Then the regular expression will match on /home/abc/public_html/abc and the corresponding <Directory> will be applied.

    Note that the default access for <Directory "/"> is to permit all access. This means that Apache httpd will serve any file mapped from an URL. It is recommended that you change this with a block such as

    <Directory "/">
      Require all denied
    </Directory>

    and then override this for directories you want accessible. See the Security Tips page for more details.

    The directory sections occur in the httpd.conf file. <Directory> directives cannot nest, and cannot appear in a <Limit> or <LimitExcept> section.

    See also

    top

    <DirectoryMatch> Directive

    Description:Enclose directives that apply to the contents of file-system directories matching a regular expression.
    Syntax:<DirectoryMatch regex> ... </DirectoryMatch>
    Context:server config, virtual host
    Status:Core
    Module:core

    <DirectoryMatch> and </DirectoryMatch> are used to enclose a group of directives which will apply only to the named directory (and the files within), the same as <Directory>. However, it takes as an argument a regular expression. For example:

    <DirectoryMatch "^/www/(.+/)?[0-9]{3}/">
        # ...
    </DirectoryMatch>

    matches directories in /www/ (or any subdirectory thereof) that consist of three numbers.

    Compatibility

    Prior to 2.3.9, this directive implicitly applied to sub-directories (like <Directory>) and could not match the end of line symbol ($). In 2.3.9 and later, only directories that match the expression are affected by the enclosed directives.

    Trailing Slash

    This directive applies to requests for directories that may or may not end in a trailing slash, so expressions that are anchored to the end of line ($) must be written with care.

    From 2.4.8 onwards, named groups and backreferences are captured and written to the environment with the corresponding name prefixed with "MATCH_" and in upper case. This allows elements of paths to be referenced from within expressions and modules like mod_rewrite. In order to prevent confusion, numbered (unnamed) backreferences are ignored. Use named groups instead.

    <DirectoryMatch "^/var/www/combined/(?<sitename>[^/]+)">
        Require ldap-group cn=%{env:MATCH_SITENAME},ou=combined,o=Example
    </DirectoryMatch>

    See also

    top

    DocumentRoot Directive

    Description:Directory that forms the main document tree visible from the web
    Syntax:DocumentRoot directory-path
    Default:DocumentRoot "/usr/local/apache/htdocs"
    Context:server config, virtual host
    Status:Core
    Module:core

    This directive sets the directory from which httpd will serve files. Unless matched by a directive like Alias, the server appends the path from the requested URL to the document root to make the path to the document. Example:

    DocumentRoot "/usr/web"

    then an access to http://my.example.com/index.html refers to /usr/web/index.html. If the directory-path is not absolute then it is assumed to be relative to the ServerRoot.

    The DocumentRoot should be specified without a trailing slash.

    See also

    top

    <Else> Directive

    Description:Contains directives that apply only if the condition of a previous <If> or <ElseIf> section is not satisfied by a request at runtime
    Syntax:<Else> ... </Else>
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core
    Compatibility:Nested conditions are evaluated in 2.4.26 and later

    The <Else> applies the enclosed directives if and only if the most recent <If> or <ElseIf> section in the same scope has not been applied. For example: In

    <If "-z req('Host')">
      # ...
    </If>
    <Else>
      # ...
    </Else>

    The <If> would match HTTP/1.0 requests without a Host: header and the <Else> would match requests with a Host: header.

    See also

    top

    <ElseIf> Directive

    Description:Contains directives that apply only if a condition is satisfied by a request at runtime while the condition of a previous <If> or <ElseIf> section is not satisfied
    Syntax:<ElseIf expression> ... </ElseIf>
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core
    Compatibility:Nested conditions are evaluated in 2.4.26 and later

    The <ElseIf> applies the enclosed directives if and only if both the given condition evaluates to true and the most recent <If> or <ElseIf> section in the same scope has not been applied. For example: In

    <If "-R '10.1.0.0/16'">
      #...
    </If>
    <ElseIf "-R '10.0.0.0/8'">
      #...
    </ElseIf>
    <Else>
      #...
    </Else>

    The <ElseIf> would match if the remote address of a request belongs to the subnet 10.0.0.0/8 but not to the subnet 10.1.0.0/16.

    See also

    top

    EnableMMAP Directive

    Description:Use memory-mapping to read files during delivery
    Syntax:EnableMMAP On|Off
    Default:EnableMMAP On
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Core
    Module:core

    This directive controls whether the httpd may use memory-mapping if it needs to read the contents of a file during delivery. By default, when the handling of a request requires access to the data within a file -- for example, when delivering a server-parsed file using mod_include -- Apache httpd memory-maps the file if the OS supports it.

    This memory-mapping sometimes yields a performance improvement. But in some environments, it is better to disable the memory-mapping to prevent operational problems:

    • On some multiprocessor systems, memory-mapping can reduce the performance of the httpd.
    • Deleting or truncating a file while httpd has it memory-mapped can cause httpd to crash with a segmentation fault.

    For server configurations that are vulnerable to these problems, you should disable memory-mapping of delivered files by specifying:

    EnableMMAP Off

    For NFS mounted files, this feature may be disabled explicitly for the offending files by specifying:

    <Directory "/path-to-nfs-files">
      EnableMMAP Off
    </Directory>
    top

    EnableSendfile Directive

    Description:Use the kernel sendfile support to deliver files to the client
    Syntax:EnableSendfile On|Off
    Default:EnableSendfile Off
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Core
    Module:core
    Compatibility:Default changed to Off in version 2.3.9.

    This directive controls whether httpd may use the sendfile support from the kernel to transmit file contents to the client. By default, when the handling of a request requires no access to the data within a file -- for example, when delivering a static file -- Apache httpd uses sendfile to deliver the file contents without ever reading the file if the OS supports it.

    This sendfile mechanism avoids separate read and send operations, and buffer allocations. But on some platforms or within some filesystems, it is better to disable this feature to avoid operational problems:

    • Some platforms may have broken sendfile support that the build system did not detect, especially if the binaries were built on another box and moved to such a machine with broken sendfile support.
    • On Linux the use of sendfile triggers TCP-checksum offloading bugs on certain networking cards when using IPv6.
    • On Linux on Itanium, sendfile may be unable to handle files over 2GB in size.
    • With a network-mounted DocumentRoot (e.g., NFS, SMB, CIFS, FUSE), the kernel may be unable to serve the network file through its own cache.

    For server configurations that are not vulnerable to these problems, you may enable this feature by specifying:

    EnableSendfile On

    For network mounted files, this feature may be disabled explicitly for the offending files by specifying:

    <Directory "/path-to-nfs-files">
      EnableSendfile Off
    </Directory>

    Please note that the per-directory and .htaccess configuration of EnableSendfile is not supported by mod_cache_disk. Only global definition of EnableSendfile is taken into account by the module.

    top

    Error Directive

    Description:Abort configuration parsing with a custom error message
    Syntax:Error message
    Context:server config, virtual host, directory, .htaccess
    Status:Core
    Module:core
    Compatibility:2.3.9 and later

    If an error can be detected within the configuration, this directive can be used to generate a custom error message, and halt configuration parsing. The typical use is for reporting required modules which are missing from the configuration.

    # Example
    # ensure that mod_include is loaded
    <IfModule !include_module>
      Error "mod_include is required by mod_foo.  Load it with LoadModule."
    </IfModule>
    
    # ensure that exactly one of SSL,NOSSL is defined
    <IfDefine SSL>
    <IfDefine NOSSL>
      Error "Both SSL and NOSSL are defined.  Define only one of them."
    </IfDefine>
    </IfDefine>
    <IfDefine !SSL>
    <IfDefine !NOSSL>
      Error "Either SSL or NOSSL must be defined."
    </IfDefine>
    </IfDefine>
    top

    ErrorDocument Directive

    Description:What the server will return to the client in case of an error
    Syntax:ErrorDocument error-code document
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Core
    Module:core

    In the event of a problem or error, Apache httpd can be configured to do one of four things,

    1. output a simple hardcoded error message
    2. output a customized message
    3. internally redirect to a local URL-path to handle the problem/error
    4. redirect to an external URL to handle the problem/error

    The first option is the default, while options 2-4 are configured using the ErrorDocument directive, which is followed by the HTTP response code and a URL or a message. Apache httpd will sometimes offer additional information regarding the problem/error.

    From 2.4.13, expression syntax can be used inside the directive to produce dynamic strings and URLs.

    URLs can begin with a slash (/) for local web-paths (relative to the DocumentRoot), or be a full URL which the client can resolve. Alternatively, a message can be provided to be displayed by the browser. Note that deciding whether the parameter is an URL, a path or a message is performed before any expression is parsed. Examples:

    ErrorDocument 500 http://example.com/cgi-bin/server-error.cgi
    ErrorDocument 404 /errors/bad_urls.php
    ErrorDocument 401 /subscription_info.html
    ErrorDocument 403 "Sorry, can't allow you access today"
    ErrorDocument 403 Forbidden!
    ErrorDocument 403 /errors/forbidden.py?referrer=%{escape:%{HTTP_REFERER}}

    Additionally, the special value default can be used to specify Apache httpd's simple hardcoded message. While not required under normal circumstances, default will restore Apache httpd's simple hardcoded message for configurations that would otherwise inherit an existing ErrorDocument.

    ErrorDocument 404 /cgi-bin/bad_urls.pl
    
    <Directory "/web/docs">
      ErrorDocument 404 default
    </Directory>

    Note that when you specify an ErrorDocument that points to a remote URL (ie. anything with a method such as http in front of it), Apache HTTP Server will send a redirect to the client to tell it where to find the document, even if the document ends up being on the same server. This has several implications, the most important being that the client will not receive the original error status code, but instead will receive a redirect status code. This in turn can confuse web robots and other clients which try to determine if a URL is valid using the status code. In addition, if you use a remote URL in an ErrorDocument 401, the client will not know to prompt the user for a password since it will not receive the 401 status code. Therefore, if you use an ErrorDocument 401 directive, then it must refer to a local document.

    Microsoft Internet Explorer (MSIE) will by default ignore server-generated error messages when they are "too small" and substitute its own "friendly" error messages. The size threshold varies depending on the type of error, but in general, if you make your error document greater than 512 bytes, then MSIE will show the server-generated error rather than masking it. More information is available in Microsoft Knowledge Base article Q294807.

    Although most error messages can be overridden, there are certain circumstances where the internal messages are used regardless of the setting of ErrorDocument. In particular, if a malformed request is detected, normal request processing will be immediately halted and the internal error message returned. This is necessary to guard against security problems caused by bad requests.

    If you are using mod_proxy, you may wish to enable ProxyErrorOverride so that you can provide custom error messages on behalf of your Origin servers. If you don't enable ProxyErrorOverride, Apache httpd will not generate custom error documents for proxied content.

    See also

    top

    ErrorLog Directive

    Description:Location where the server will log errors
    Syntax: ErrorLog file-path|syslog[:[facility][:tag]]
    Default:ErrorLog logs/error_log (Unix) ErrorLog logs/error.log (Windows and OS/2)
    Context:server config, virtual host
    Status:Core
    Module:core

    The ErrorLog directive sets the name of the file to which the server will log any errors it encounters. If the file-path is not absolute then it is assumed to be relative to the ServerRoot.

    ErrorLog "/var/log/httpd/error_log"

    If the file-path begins with a pipe character "|" then it is assumed to be a command to spawn to handle the error log.

    ErrorLog "|/usr/local/bin/httpd_errors"

    See the notes on piped logs for more information.

    Using syslog instead of a filename enables logging via syslogd(8) if the system supports it. The default is to use syslog facility local7, but you can override this by using the syslog:facility syntax where facility can be one of the names usually documented in syslog(1). The facility is effectively global, and if it is changed in individual virtual hosts, the final facility specified affects the entire server. Same rules apply for the syslog tag, which by default uses the Apache binary name, httpd in most cases. You can also override this by using the syslog::tag syntax.

    ErrorLog syslog:user
    ErrorLog syslog:user:httpd.srv1
    ErrorLog syslog::httpd.srv2

    Additional modules can provide their own ErrorLog providers. The syntax is similar to the syslog example above.

    SECURITY: See the security tips document for details on why your security could be compromised if the directory where log files are stored is writable by anyone other than the user that starts the server.

    Note

    When entering a file path on non-Unix platforms, care should be taken to make sure that only forward slashes are used even though the platform may allow the use of back slashes. In general it is a good idea to always use forward slashes throughout the configuration files.

    See also

    top

    ErrorLogFormat Directive

    Description:Format specification for error log entries
    Syntax: ErrorLogFormat [connection|request] format
    Context:server config, virtual host
    Status:Core
    Module:core

    ErrorLogFormat allows to specify what supplementary information is logged in the error log in addition to the actual log message.

    #Simple example
    ErrorLogFormat "[%t] [%l] [pid %P] %F: %E: [client %a] %M"

    Specifying connection or request as first parameter allows to specify additional formats, causing additional information to be logged when the first message is logged for a specific connection or request, respectively. This additional information is only logged once per connection/request. If a connection or request is processed without causing any log message, the additional information is not logged either.

    It can happen that some format string items do not produce output. For example, the Referer header is only present if the log message is associated to a request and the log message happens at a time when the Referer header has already been read from the client. If no output is produced, the default behavior is to delete everything from the preceding space character to the next space character. This means the log line is implicitly divided into fields on non-whitespace to whitespace transitions. If a format string item does not produce output, the whole field is omitted. For example, if the remote address %a in the log format [%t] [%l] [%a] %M  is not available, the surrounding brackets are not logged either. Space characters can be escaped with a backslash to prevent them from delimiting a field. The combination '% ' (percent space) is a zero-width field delimiter that does not produce any output.

    The above behavior can be changed by adding modifiers to the format string item. A - (minus) modifier causes a minus to be logged if the respective item does not produce any output. In once-per-connection/request formats, it is also possible to use the + (plus) modifier. If an item with the plus modifier does not produce any output, the whole line is omitted.

    A number as modifier can be used to assign a log severity level to a format item. The item will only be logged if the severity of the log message is not higher than the specified log severity level. The number can range from 1 (alert) over 4 (warn) and 7 (debug) to 15 (trace8).

    For example, here's what would happen if you added modifiers to the %{Referer}i token, which logs the Referer request header.

    Modified TokenMeaning
    %-{Referer}i Logs a - if Referer is not set.
    %+{Referer}i Omits the entire line if Referer is not set.
    %4{Referer}i Logs the Referer only if the log message severity is higher than 4.

    Some format string items accept additional parameters in braces.

    Format String Description
    %% The percent sign
    %a Client IP address and port of the request
    %{c}a Underlying peer IP address and port of the connection (see the mod_remoteip module)
    %A Local IP-address and port
    %{name}e Request environment variable name
    %E APR/OS error status code and string
    %F Source file name and line number of the log call
    %{name}i Request header name
    %k Number of keep-alive requests on this connection
    %l Loglevel of the message
    %L Log ID of the request
    %{c}L Log ID of the connection
    %{C}L Log ID of the connection if used in connection scope, empty otherwise
    %m Name of the module logging the message
    %M The actual log message
    %{name}n Request note name
    %P Process ID of current process
    %T Thread ID of current thread
    %{g}T System unique thread ID of current thread (the same ID as displayed by e.g. top; currently Linux only)
    %t The current time
    %{u}t The current time including micro-seconds
    %{cu}t The current time in compact ISO 8601 format, including micro-seconds
    %v The canonical ServerName of the current server.
    %V The server name of the server serving the request according to the UseCanonicalName setting.
    (backslash space) Non-field delimiting space
    (percent space) Field delimiter (no output)

    The log ID format %L produces a unique id for a connection or request. This can be used to correlate which log lines belong to the same connection or request, which request happens on which connection. A %L format string is also available in mod_log_config to allow to correlate access log entries with error log lines. If mod_unique_id is loaded, its unique id will be used as log ID for requests.

    #Example (default format for threaded MPMs)
    ErrorLogFormat "[%{u}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% ,\ referer\ %{Referer}i"

    This would result in error messages such as:

    [Thu May 12 08:28:57.652118 2011] [core:error] [pid 8777:tid 4326490112] [client ::1:58619] File does not exist: /usr/local/apache2/htdocs/favicon.ico

    Notice that, as discussed above, some fields are omitted entirely because they are not defined.

    #Example (similar to the 2.2.x format)
    ErrorLogFormat "[%t] [%l] %7F: %E: [client\ %a] %M% ,\ referer\ %{Referer}i"
    #Advanced example with request/connection log IDs
    ErrorLogFormat "[%{uc}t] [%-m:%-l] [R:%L] [C:%{C}L] %7F: %E: %M"
    ErrorLogFormat request "[%{uc}t] [R:%L] Request %k on C:%{c}L pid:%P tid:%T"
    ErrorLogFormat request "[%{uc}t] [R:%L] UA:'%+{User-Agent}i'"
    ErrorLogFormat request "[%{uc}t] [R:%L] Referer:'%+{Referer}i'"
    ErrorLogFormat connection "[%{uc}t] [C:%{c}L] local\ %a remote\ %A"

    See also

    top

    ExtendedStatus Directive

    Description:Keep track of extended status information for each request
    Syntax:ExtendedStatus On|Off
    Default:ExtendedStatus Off[*]
    Context:server config
    Status:Core
    Module:core

    This option tracks additional data per worker about the currently executing request and creates a utilization summary. You can see these variables during runtime by configuring mod_status. Note that other modules may rely on this scoreboard.

    This setting applies to the entire server and cannot be enabled or disabled on a virtualhost-by-virtualhost basis. The collection of extended status information can slow down the server. Also note that this setting cannot be changed during a graceful restart.

    Note that loading mod_status will change the default behavior to ExtendedStatus On, while other third party modules may do the same. Such modules rely on collecting detailed information about the state of all workers. The default is changed by mod_status beginning with version 2.3.6. The previous default was always Off.

    top

    FileETag Directive

    Description:File attributes used to create the ETag HTTP response header for static files
    Syntax:FileETag component ...
    Default:FileETag MTime Size
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Core
    Module:core
    Compatibility:The default used to be "INode MTime Size" in 2.3.14 and earlier.

    The FileETag directive configures the file attributes that are used to create the ETag (entity tag) response header field when the document is based on a static file. (The ETag value is used in cache management to save network bandwidth.) The FileETag directive allows you to choose which of these -- if any -- should be used. The recognized keywords are:

    INode
    The file's i-node number will be included in the calculation
    MTime
    The date and time the file was last modified will be included
    Size
    The number of bytes in the file will be included
    All
    All available fields will be used. This is equivalent to:
    FileETag INode MTime Size
    None
    If a document is file-based, no ETag field will be included in the response

    The INode, MTime, and Size keywords may be prefixed with either + or -, which allow changes to be made to the default setting inherited from a broader scope. Any keyword appearing without such a prefix immediately and completely cancels the inherited setting.

    If a directory's configuration includes FileETag INode MTime Size, and a subdirectory's includes FileETag -INode, the setting for that subdirectory (which will be inherited by any sub-subdirectories that don't override it) will be equivalent to FileETag MTime Size.

    Warning

    Do not change the default for directories or locations that have WebDAV enabled and use mod_dav_fs as a storage provider. mod_dav_fs uses MTime Size as a fixed format for ETag comparisons on conditional requests. These conditional requests will break if the ETag format is changed via FileETag.

    Server Side Includes

    An ETag is not generated for responses parsed by mod_include since the response entity can change without a change of the INode, MTime, or Size of the static file with embedded SSI directives.
    top

    <Files> Directive

    Description:Contains directives that apply to matched filenames
    Syntax:<Files filename> ... </Files>
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core

    The <Files> directive limits the scope of the enclosed directives by filename. It is comparable to the <Directory> and <Location> directives. It should be matched with a </Files> directive. The directives given within this section will be applied to any object with a basename (last component of filename) matching the specified filename. <Files> sections are processed in the order they appear in the configuration file, after the <Directory> sections and .htaccess files are read, but before <Location> sections. Note that <Files> can be nested inside <Directory> sections to restrict the portion of the filesystem they apply to.

    The filename argument should include a filename, or a wild-card string, where ? matches any single character, and * matches any sequences of characters.

    <Files "cat.html">
        # Insert stuff that applies to cat.html here
    </Files>
    
    <Files "?at.*">
        # This would apply to cat.html, bat.html, hat.php and so on.
    </Files>

    Regular expressions can also be used, with the addition of the ~ character. For example:

    <Files ~ "\.(gif|jpe?g|png)$">
        #...
    </Files>

    would match most common Internet graphics formats. <FilesMatch> is preferred, however.

    Note that unlike <Directory> and <Location> sections, <Files> sections can be used inside .htaccess files. This allows users to control access to their own files, at a file-by-file level.

    See also

    top

    <FilesMatch> Directive

    Description:Contains directives that apply to regular-expression matched filenames
    Syntax:<FilesMatch regex> ... </FilesMatch>
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core

    The <FilesMatch> directive limits the scope of the enclosed directives by filename, just as the <Files> directive does. However, it accepts a regular expression. For example:

    <FilesMatch ".+\.(gif|jpe?g|png)$">
        # ...
    </FilesMatch>

    would match most common Internet graphics formats.

    The .+ at the start of the regex ensures that files named .png, or .gif, for example, are not matched.

    From 2.4.8 onwards, named groups and backreferences are captured and written to the environment with the corresponding name prefixed with "MATCH_" and in upper case. This allows elements of files to be referenced from within expressions and modules like mod_rewrite. In order to prevent confusion, numbered (unnamed) backreferences are ignored. Use named groups instead.

    <FilesMatch "^(?<sitename>[^/]+)">
        Require ldap-group cn=%{env:MATCH_SITENAME},ou=combined,o=Example
    </FilesMatch>

    See also

    top

    ForceType Directive

    Description:Forces all matching files to be served with the specified media type in the HTTP Content-Type header field
    Syntax:ForceType media-type|None
    Context:directory, .htaccess
    Override:FileInfo
    Status:Core
    Module:core

    When placed into an .htaccess file or a <Directory>, or <Location> or <Files> section, this directive forces all matching files to be served with the content type identification given by media-type. For example, if you had a directory full of GIF files, but did not want to label them all with .gif, you might want to use:

    ForceType image/gif

    Note that this directive overrides other indirect media type associations defined in mime.types or via the AddType.

    You can also override more general ForceType settings by using the value of None:

    # force all files to be image/gif:
    <Location "/images">
      ForceType image/gif
    </Location>
    
    # but normal mime-type associations here:
    <Location "/images/mixed">
      ForceType None
    </Location>

    This directive primarily overrides the content types generated for static files served out of the filesystem. For resources other than static files, where the generator of the response typically specifies a Content-Type, this directive has no effect.

    Note

    When explicit directives such as SetHandler or AddHandler do not apply to the current request, the internal handler name normally set by those directives is set to match the content type specified by this directive. This is a historical behavior that some third-party modules (such as mod_php) may use "magic" content types used only to signal the module to take responsibility for the matching request. Configurations that rely on such "magic" types should be avoided by the use of SetHandler or AddHandler.

    top

    GprofDir Directive

    Description:Directory to write gmon.out profiling data to.
    Syntax:GprofDir /tmp/gprof/|/tmp/gprof/%
    Context:server config, virtual host
    Status:Core
    Module:core

    When the server has been compiled with gprof profiling support, GprofDir causes gmon.out files to be written to the specified directory when the process exits. If the argument ends with a percent symbol ('%'), subdirectories are created for each process id.

    This directive currently only works with the prefork MPM.

    top

    HostnameLookups Directive

    Description:Enables DNS lookups on client IP addresses
    Syntax:HostnameLookups On|Off|Double
    Default:HostnameLookups Off
    Context:server config, virtual host, directory
    Status:Core
    Module:core

    This directive enables DNS lookups so that host names can be logged (and passed to CGIs/SSIs in REMOTE_HOST). The value Double refers to doing double-reverse DNS lookup. That is, after a reverse lookup is performed, a forward lookup is then performed on that result. At least one of the IP addresses in the forward lookup must match the original address. (In "tcpwrappers" terminology this is called PARANOID.)

    Regardless of the setting, when mod_authz_host is used for controlling access by hostname, a double reverse lookup will be performed. This is necessary for security. Note that the result of this double-reverse isn't generally available unless you set HostnameLookups Double. For example, if only HostnameLookups On and a request is made to an object that is protected by hostname restrictions, regardless of whether the double-reverse fails or not, CGIs will still be passed the single-reverse result in REMOTE_HOST.

    The default is Off in order to save the network traffic for those sites that don't truly need the reverse lookups done. It is also better for the end users because they don't have to suffer the extra latency that a lookup entails. Heavily loaded sites should leave this directive Off, since DNS lookups can take considerable amounts of time. The utility logresolve, compiled by default to the bin subdirectory of your installation directory, can be used to look up host names from logged IP addresses offline.

    Finally, if you have hostname-based Require directives, a hostname lookup will be performed regardless of the setting of HostnameLookups.

    top

    HttpProtocolOptions Directive

    Description:Modify restrictions on HTTP Request Messages
    Syntax:HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0]
    Default:HttpProtocolOptions Strict LenientMethods Allow0.9
    Context:server config, virtual host
    Status:Core
    Module:core
    Compatibility:2.2.32 or 2.4.24 and later

    This directive changes the rules applied to the HTTP Request Line (RFC 7230 §3.1.1) and the HTTP Request Header Fields (RFC 7230 §3.2), which are now applied by default or using the Strict option. Due to legacy modules, applications or custom user-agents which must be deprecated the Unsafe option has been added to revert to the legacy behaviors.

    These rules are applied prior to request processing, so must be configured at the global or default (first) matching virtual host section, by IP/port interface (and not by name) to be honored.

    The directive accepts three parameters from the following list of choices, applying the default to the ones not specified:

    Strict|Unsafe

    Prior to the introduction of this directive, the Apache HTTP Server request message parsers were tolerant of a number of forms of input which did not conform to the protocol. RFC 7230 §9.4 Request Splitting and §9.5 Response Smuggling call out only two of the potential risks of accepting non-conformant request messages, while RFC 7230 §3.5 "Message Parsing Robustness" identify the risks of accepting obscure whitespace and request message formatting. As of the introduction of this directive, all grammar rules of the specification are enforced in the default Strict operating mode, and the strict whitespace suggested by section 3.5 is enforced and cannot be relaxed.

    Security risks of Unsafe

    Users are strongly cautioned against toggling the Unsafe mode of operation, particularly on outward-facing, publicly accessible server deployments. If an interface is required for faulty monitoring or other custom service consumers running on an intranet, users should toggle the Unsafe option only on a specific virtual host configured to service their internal private network.

    Example of a request leading to HTTP 400 with Strict mode

    # Missing CRLF
    GET / HTTP/1.0\n\n

    Command line tools and CRLF

    Some tools need to be forced to use CRLF, otherwise httpd will return a HTTP 400 response like described in the above use case. For example, the OpenSSL s_client needs the -crlf parameter to work properly.

    The DumpIOInput directive can help while reviewing the HTTP request to identify issues like the absence of CRLF.

    RegisteredMethods|LenientMethods

    RFC 7231 §4.1 "Request Methods" "Overview" requires that origin servers shall respond with a HTTP 501 status code when an unsupported method is encountered in the request line. This already happens when the LenientMethods option is used, but administrators may wish to toggle the RegisteredMethods option and register any non-standard methods using the RegisterHttpMethod directive, particularly if the Unsafe option has been toggled.

    Forward Proxy compatibility

    The RegisteredMethods option should not be toggled for forward proxy hosts, as the methods supported by the origin servers are unknown to the proxy server.

    Example of a request leading to HTTP 501 with LenientMethods mode

    # Unknown HTTP method
    WOW / HTTP/1.0\r\n\r\n

    # Lowercase HTTP method
    get / HTTP/1.0\r\n\r\n

    Allow0.9|Require1.0

    RFC 2616 §19.6 "Compatibility With Previous Versions" had encouraged HTTP servers to support legacy HTTP/0.9 requests. RFC 7230 supersedes this with "The expectation to support HTTP/0.9 requests has been removed" and offers additional comments in RFC 7230 Appendix A. The Require1.0 option allows the user to remove support of the default Allow0.9 option's behavior.

    Example of a request leading to HTTP 400 with Require1.0 mode

    # Unsupported HTTP version
    GET /\r\n\r\n

    Reviewing the messages logged to the ErrorLog, configured with LogLevel debug level, can help identify such faulty requests along with their origin. Users should pay particular attention to the 400 responses in the access log for invalid requests which were unexpectedly rejected.

    top

    <If> Directive

    Description:Contains directives that apply only if a condition is satisfied by a request at runtime
    Syntax:<If expression> ... </If>
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core
    Compatibility:Nested conditions are evaluated in 2.4.26 and later

    The <If> directive evaluates an expression at runtime, and applies the enclosed directives if and only if the expression evaluates to true. For example:

    <If "-z req('Host')">

    would match HTTP/1.0 requests without a Host: header. Expressions may contain various shell-like operators for string comparison (==, !=, <, ...), integer comparison (-eq, -ne, ...), and others (-n, -z, -f, ...). It is also possible to use regular expressions,

    <If "%{QUERY_STRING} =~ /(delete|commit)=.*?elem/">

    shell-like pattern matches and many other operations. These operations can be done on request headers (req), environment variables (env), and a large number of other properties. The full documentation is available in Expressions in Apache HTTP Server.

    Only directives that support the directory context can be used within this configuration section.

    Certain variables, such as CONTENT_TYPE and other response headers, are set after <If> conditions have already been evaluated, and so will not be available to use in this directive.

    See also

    top

    <IfDefine> Directive

    Description:Encloses directives that will be processed only if a test is true at startup
    Syntax:<IfDefine [!]parameter-name> ... </IfDefine>
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core

    The <IfDefine test>...</IfDefine> section is used to mark directives that are conditional. The directives within an <IfDefine> section are only processed if the test is true. If test is false, everything between the start and end markers is ignored.

    The test in the <IfDefine> section directive can be one of two forms:

    • parameter-name
    • !parameter-name

    In the former case, the directives between the start and end markers are only processed if the parameter named parameter-name is defined. The second format reverses the test, and only processes the directives if parameter-name is not defined.

    The parameter-name argument is a define as given on the httpd command line via -Dparameter at the time the server was started or by the Define directive.

    <IfDefine> sections are nest-able, which can be used to implement simple multiple-parameter tests. Example:

    httpd -DReverseProxy -DUseCache -DMemCache ...

    <IfDefine ReverseProxy>
      LoadModule proxy_module   modules/mod_proxy.so
      LoadModule proxy_http_module   modules/mod_proxy_http.so
      <IfDefine UseCache>
        LoadModule cache_module   modules/mod_cache.so
        <IfDefine MemCache>
          LoadModule mem_cache_module   modules/mod_mem_cache.so
        </IfDefine>
        <IfDefine !MemCache>
          LoadModule cache_disk_module   modules/mod_cache_disk.so
        </IfDefine>
      </IfDefine>
    </IfDefine>
    top

    <IfDirective> Directive

    Description:Encloses directives that are processed conditional on the presence or absence of a specific directive
    Syntax:<IfDirective [!]directive-name> ... </IfDirective>
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core
    Compatibility:Available in 2.4.34 and later.

    The <IfDirective test>...</IfDirective> section is used to mark directives that are conditional on the presence of a specific directive. The directives within an <IfDirective> section are only processed if the test is true. If test is false, everything between the start and end markers is ignored.

    The test in the <IfDirective> section can be one of two forms:

    • directive-name
    • !directive-name

    In the former case, the directives between the start and end markers are only processed if a directive of the given name is available at the time of processing. The second format reverses the test, and only processes the directives if directive-name is not available.

    This section should only be used if you need to have one configuration file that works across multiple versions of httpd, regardless of whether a particular directive is available. In normal operation, directives need not be placed in <IfDirective> sections.

    See also

    top

    <IfFile> Directive

    Description:Encloses directives that will be processed only if file exists at startup
    Syntax:<IfFile [!]filename> ... </IfFile>
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core
    Compatibility:Available in 2.4.34 and later.

    The <IfFile filename>...</IfFile> section is used to mark directives that are conditional on the existence of a file on disk. The directives within an <IfFile> section are only processed if filename exists. If filename doesn't exist, everything between the start and end markers is ignored. filename can be an absolute path or a path relative to the server root.

    The filename in the <IfFile> section directive can take the same forms as the test variable in the <IfDefine> section, i.e. the test can be negated if the ! character is placed directly before filename.

    If a relative filename is supplied, the check is ServerRoot relative. In the case where this directive occurs before the ServerRoot, the path will be checked relative to the compiled-in server root or the server root passed in on the command line via the -d parameter.

    top

    <IfModule> Directive

    Description:Encloses directives that are processed conditional on the presence or absence of a specific module
    Syntax:<IfModule [!]module-file|module-identifier> ... </IfModule>
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core
    Compatibility:Module identifiers are available in version 2.1 and later.

    The <IfModule test>...</IfModule> section is used to mark directives that are conditional on the presence of a specific module. The directives within an <IfModule> section are only processed if the test is true. If test is false, everything between the start and end markers is ignored.

    The test in the <IfModule> section directive can be one of two forms:

    • module
    • !module

    In the former case, the directives between the start and end markers are only processed if the module named module is included in Apache httpd -- either compiled in or dynamically loaded using LoadModule. The second format reverses the test, and only processes the directives if module is not included.

    The module argument can be either the module identifier or the file name of the module, at the time it was compiled. For example, rewrite_module is the identifier and mod_rewrite.c is the file name. If a module consists of several source files, use the name of the file containing the string STANDARD20_MODULE_STUFF.

    <IfModule> sections are nest-able, which can be used to implement simple multiple-module tests.

    This section should only be used if you need to have one configuration file that works whether or not a specific module is available. In normal operation, directives need not be placed in <IfModule> sections.
    top

    <IfSection> Directive

    Description:Encloses directives that are processed conditional on the presence or absence of a specific section directive
    Syntax:<IfSection [!]section-name> ... </IfSection>
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core
    Compatibility:Available in 2.4.34 and later.

    The <IfSection test>...</IfSection> section is used to mark directives that are conditional on the presence of a specific section directive. A section directive is any directive such as <VirtualHost> which encloses other directives, and has a directive name with a leading "<".

    The directives within an <IfSection> section are only processed if the test is true. If test is false, everything between the start and end markers is ignored.

    The section-name must be specified without either the leading "<" or closing ">". The test in the <IfSection> section can be one of two forms:

    • section-name
    • !section-name

    In the former case, the directives between the start and end markers are only processed if a section directive of the given name is available at the time of processing. The second format reverses the test, and only processes the directives if section-name is not an available section directive.

    For example:

    <IfSection VirtualHost>
       ...
    </IfSection>
    This section should only be used if you need to have one configuration file that works across multiple versions of httpd, regardless of whether a particular section directive is available. In normal operation, directives need not be placed in <IfSection> sections.

    See also

    top

    Include Directive

    Description:Includes other configuration files from within the server configuration files
    Syntax:Include file-path|directory-path|wildcard
    Context:server config, virtual host, directory
    Status:Core
    Module:core
    Compatibility:Directory wildcard matching available in 2.3.6 and later

    This directive allows inclusion of other configuration files from within the server configuration files.

    Shell-style (fnmatch()) wildcard characters can be used in the filename or directory parts of the path to include several files at once, in alphabetical order. In addition, if Include points to a directory, rather than a file, Apache httpd will read all files in that directory and any subdirectory. However, including entire directories is not recommended, because it is easy to accidentally leave temporary files in a directory that can cause httpd to fail. Instead, we encourage you to use the wildcard syntax shown below, to include files that match a particular pattern, such as *.conf, for example.

    The Include directive will fail with an error if a wildcard expression does not match any file. The IncludeOptional directive can be used if non-matching wildcards should be ignored.

    The file path specified may be an absolute path, or may be relative to the ServerRoot directory.

    Examples:

    Include /usr/local/apache2/conf/ssl.conf
    Include /usr/local/apache2/conf/vhosts/*.conf

    Or, providing paths relative to your ServerRoot directory:

    Include conf/ssl.conf
    Include conf/vhosts/*.conf

    Wildcards may be included in the directory or file portion of the path. This example will fail if there is no subdirectory in conf/vhosts that contains at least one *.conf file:

    Include conf/vhosts/*/*.conf

    Alternatively, the following command will just be ignored in case of missing files or directories:

    IncludeOptional conf/vhosts/*/*.conf

    See also

    top

    IncludeOptional Directive

    Description:Includes other configuration files from within the server configuration files
    Syntax:IncludeOptional file-path|directory-path|wildcard
    Context:server config, virtual host, directory
    Status:Core
    Module:core
    Compatibility:Available in 2.3.6 and later. Not existent file paths without wildcards do not cause SyntaxError after 2.4.30

    This directive allows inclusion of other configuration files from within the server configuration files. It works identically to the Include directive, but it will be silently ignored (instead of causing an error) if wildcards are used and they do not match any file or directory or if a file path does not exist on the file system.

    See also

    top

    KeepAlive Directive

    Description:Enables HTTP persistent connections
    Syntax:KeepAlive On|Off
    Default:KeepAlive On
    Context:server config, virtual host
    Status:Core
    Module:core

    The Keep-Alive extension to HTTP/1.0 and the persistent connection feature of HTTP/1.1 provide long-lived HTTP sessions which allow multiple requests to be sent over the same TCP connection. In some cases this has been shown to result in an almost 50% speedup in latency times for HTML documents with many images. To enable Keep-Alive connections, set KeepAlive On.

    For HTTP/1.0 clients, Keep-Alive connections will only be used if they are specifically requested by a client. In addition, a Keep-Alive connection with an HTTP/1.0 client can only be used when the length of the content is known in advance. This implies that dynamic content such as CGI output, SSI pages, and server-generated directory listings will generally not use Keep-Alive connections to HTTP/1.0 clients. For HTTP/1.1 clients, persistent connections are the default unless otherwise specified. If the client requests it, chunked encoding will be used in order to send content of unknown length over persistent connections.

    When a client uses a Keep-Alive connection, it will be counted as a single "request" for the MaxConnectionsPerChild directive, regardless of how many requests are sent using the connection.

    See also

    top

    KeepAliveTimeout Directive

    Description:Amount of time the server will wait for subsequent requests on a persistent connection
    Syntax:KeepAliveTimeout num[ms]
    Default:KeepAliveTimeout 5
    Context:server config, virtual host
    Status:Core
    Module:core

    The number of seconds Apache httpd will wait for a subsequent request before closing the connection. By adding a postfix of ms the timeout can be also set in milliseconds. Once a request has been received, the timeout value specified by the Timeout directive applies.

    Setting KeepAliveTimeout to a high value may cause performance problems in heavily loaded servers. The higher the timeout, the more server processes will be kept occupied waiting on connections with idle clients.

    If KeepAliveTimeout is not set for a name-based virtual host, the value of the first defined virtual host best matching the local IP and port will be used.

    top

    <Limit> Directive

    Description:Restrict enclosed access controls to only certain HTTP methods
    Syntax:<Limit method [method] ... > ... </Limit>
    Context:directory, .htaccess
    Override:AuthConfig, Limit
    Status:Core
    Module:core

    Access controls are normally effective for all access methods, and this is the usual desired behavior. In the general case, access control directives should not be placed within a <Limit> section.

    The purpose of the <Limit> directive is to restrict the effect of the access controls to the nominated HTTP methods. For all other methods, the access restrictions that are enclosed in the <Limit> bracket will have no effect. The following example applies the access control only to the methods POST, PUT, and DELETE, leaving all other methods unprotected:

    <Limit POST PUT DELETE>
      Require valid-user
    </Limit>

    The method names listed can be one or more of: GET, POST, PUT, DELETE, CONNECT, OPTIONS, PATCH, PROPFIND, PROPPATCH, MKCOL, COPY, MOVE, LOCK, and UNLOCK. The method name is case-sensitive. If GET is used, it will also restrict HEAD requests. The TRACE method cannot be limited (see TraceEnable).

    A <LimitExcept> section should always be used in preference to a <Limit> section when restricting access, since a <LimitExcept> section provides protection against arbitrary methods.

    The <Limit> and <LimitExcept> directives may be nested. In this case, each successive level of <Limit> or <LimitExcept> directives must further restrict the set of methods to which access controls apply.

    When using <Limit> or <LimitExcept> directives with the Require directive, note that the first Require to succeed authorizes the request, regardless of the presence of other Require directives.

    For example, given the following configuration, all users will be authorized for POST requests, and the Require group editors directive will be ignored in all cases:

    <LimitExcept GET>
      Require valid-user
    </LimitExcept>
    <Limit POST>
      Require group editors
    </Limit>
    top

    <LimitExcept> Directive

    Description:Restrict access controls to all HTTP methods except the named ones
    Syntax:<LimitExcept method [method] ... > ... </LimitExcept>
    Context:directory, .htaccess
    Override:AuthConfig, Limit
    Status:Core
    Module:core

    <LimitExcept> and </LimitExcept> are used to enclose a group of access control directives which will then apply to any HTTP access method not listed in the arguments; i.e., it is the opposite of a <Limit> section and can be used to control both standard and nonstandard/unrecognized methods. See the documentation for <Limit> for more details.

    For example:

    <LimitExcept POST GET>
      Require valid-user
    </LimitExcept>
    top

    LimitInternalRecursion Directive

    Description:Determine maximum number of internal redirects and nested subrequests
    Syntax:LimitInternalRecursion number [number]
    Default:LimitInternalRecursion 10
    Context:server config, virtual host
    Status:Core
    Module:core

    An internal redirect happens, for example, when using the Action directive, which internally redirects the original request to a CGI script. A subrequest is Apache httpd's mechanism to find out what would happen for some URI if it were requested. For example, mod_dir uses subrequests to look for the files listed in the DirectoryIndex directive.

    LimitInternalRecursion prevents the server from crashing when entering an infinite loop of internal redirects or subrequests. Such loops are usually caused by misconfigurations.

    The directive stores two different limits, which are evaluated on per-request basis. The first number is the maximum number of internal redirects that may follow each other. The second number determines how deeply subrequests may be nested. If you specify only one number, it will be assigned to both limits.

    LimitInternalRecursion 5
    top

    LimitRequestBody Directive

    Description:Restricts the total size of the HTTP request body sent from the client
    Syntax:LimitRequestBody bytes
    Default:LimitRequestBody 0
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core

    This directive specifies the number of bytes from 0 (meaning unlimited) to 2147483647 (2GB) that are allowed in a request body. See the note below for the limited applicability to proxy requests.

    The LimitRequestBody directive allows the user to set a limit on the allowed size of an HTTP request message body within the context in which the directive is given (server, per-directory, per-file or per-location). If the client request exceeds that limit, the server will return an error response instead of servicing the request. The size of a normal request message body will vary greatly depending on the nature of the resource and the methods allowed on that resource. CGI scripts typically use the message body for retrieving form information. Implementations of the PUT method will require a value at least as large as any representation that the server wishes to accept for that resource.

    This directive gives the server administrator greater control over abnormal client request behavior, which may be useful for avoiding some forms of denial-of-service attacks.

    If, for example, you are permitting file upload to a particular location and wish to limit the size of the uploaded file to 100K, you might use the following directive:

    LimitRequestBody 102400

    For a full description of how this directive is interpreted by proxy requests, see the mod_proxy documentation.

    top

    LimitRequestFields Directive

    Description:Limits the number of HTTP request header fields that will be accepted from the client
    Syntax:LimitRequestFields number
    Default:LimitRequestFields 100
    Context:server config, virtual host
    Status:Core
    Module:core

    Number is an integer from 0 (meaning unlimited) to 32767. The default value is defined by the compile-time constant DEFAULT_LIMIT_REQUEST_FIELDS (100 as distributed).

    The LimitRequestFields directive allows the server administrator to modify the limit on the number of request header fields allowed in an HTTP request. A server needs this value to be larger than the number of fields that a normal client request might include. The number of request header fields used by a client rarely exceeds 20, but this may vary among different client implementations, often depending upon the extent to which a user has configured their browser to support detailed content negotiation. Optional HTTP extensions are often expressed using request header fields.

    This directive gives the server administrator greater control over abnormal client request behavior, which may be useful for avoiding some forms of denial-of-service attacks. The value should be increased if normal clients see an error response from the server that indicates too many fields were sent in the request.

    For example:

    LimitRequestFields 50

    Warning

    When name-based virtual hosting is used, the value for this directive is taken from the default (first-listed) virtual host for the local IP and port combination.

    top

    LimitRequestFieldSize Directive

    Description:Limits the size of the HTTP request header allowed from the client
    Syntax:LimitRequestFieldSize bytes
    Default:LimitRequestFieldSize 8190
    Context:server config, virtual host
    Status:Core
    Module:core

    This directive specifies the number of bytes that will be allowed in an HTTP request header.

    The LimitRequestFieldSize directive allows the server administrator to set the limit on the allowed size of an HTTP request header field. A server needs this value to be large enough to hold any one header field from a normal client request. The size of a normal request header field will vary greatly among different client implementations, often depending upon the extent to which a user has configured their browser to support detailed content negotiation. SPNEGO authentication headers can be up to 12392 bytes.

    This directive gives the server administrator greater control over abnormal client request behavior, which may be useful for avoiding some forms of denial-of-service attacks.

    For example:

    LimitRequestFieldSize 4094
    Under normal conditions, the value should not be changed from the default.

    Warning

    When name-based virtual hosting is used, the value for this directive is taken from the default (first-listed) virtual host best matching the current IP address and port combination.

    top

    LimitRequestLine Directive

    Description:Limit the size of the HTTP request line that will be accepted from the client
    Syntax:LimitRequestLine bytes
    Default:LimitRequestLine 8190
    Context:server config, virtual host
    Status:Core
    Module:core

    This directive sets the number of bytes that will be allowed on the HTTP request-line.

    The LimitRequestLine directive allows the server administrator to set the limit on the allowed size of a client's HTTP request-line. Since the request-line consists of the HTTP method, URI, and protocol version, the LimitRequestLine directive places a restriction on the length of a request-URI allowed for a request on the server. A server needs this value to be large enough to hold any of its resource names, including any information that might be passed in the query part of a GET request.

    This directive gives the server administrator greater control over abnormal client request behavior, which may be useful for avoiding some forms of denial-of-service attacks.

    For example:

    LimitRequestLine 4094
    Under normal conditions, the value should not be changed from the default.

    Warning

    When name-based virtual hosting is used, the value for this directive is taken from the default (first-listed) virtual host best matching the current IP address and port combination.

    top

    LimitXMLRequestBody Directive

    Description:Limits the size of an XML-based request body
    Syntax:LimitXMLRequestBody bytes
    Default:LimitXMLRequestBody 1000000
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core

    Limit (in bytes) on maximum size of an XML-based request body. A value of 0 will disable any checking.

    Example:

    LimitXMLRequestBody 0
    top

    <Location> Directive

    Description:Applies the enclosed directives only to matching URLs
    Syntax:<Location URL-path|URL> ... </Location>
    Context:server config, virtual host
    Status:Core
    Module:core

    The <Location> directive limits the scope of the enclosed directives by URL. It is similar to the <Directory> directive, and starts a subsection which is terminated with a </Location> directive. <Location> sections are processed in the order they appear in the configuration file, after the <Directory> sections and .htaccess files are read, and after the <Files> sections.

    <Location> sections operate completely outside the filesystem. This has several consequences. Most importantly, <Location> directives should not be used to control access to filesystem locations. Since several different URLs may map to the same filesystem location, such access controls may by circumvented.

    The enclosed directives will be applied to the request if the path component of the URL meets any of the following criteria:

    • The specified location matches exactly the path component of the URL.
    • The specified location, which ends in a forward slash, is a prefix of the path component of the URL (treated as a context root).
    • The specified location, with the addition of a trailing slash, is a prefix of the path component of the URL (also treated as a context root).

    In the example below, where no trailing slash is used, requests to /private1, /private1/ and /private1/file.txt will have the enclosed directives applied, but /private1other would not.

    <Location "/private1">
        #  ...
    </Location>

    In the example below, where a trailing slash is used, requests to /private2/ and /private2/file.txt will have the enclosed directives applied, but /private2 and /private2other would not.

    <Location "/private2/">
        # ...
    </Location>

    When to use <Location>

    Use <Location> to apply directives to content that lives outside the filesystem. For content that lives in the filesystem, use <Directory> and <Files>. An exception is <Location "/">, which is an easy way to apply a configuration to the entire server.

    For all origin (non-proxy) requests, the URL to be matched is a URL-path of the form /path/. No scheme, hostname, port, or query string may be included. For proxy requests, the URL to be matched is of the form scheme://servername/path, and you must include the prefix.

    The URL may use wildcards. In a wild-card string, ? matches any single character, and * matches any sequences of characters. Neither wildcard character matches a / in the URL-path.

    Regular expressions can also be used, with the addition of the ~ character. For example:

    <Location ~ "/(extra|special)/data">
        #...
    </Location>

    would match URLs that contained the substring /extra/data or /special/data. The directive <LocationMatch> behaves identical to the regex version of <Location>, and is preferred, for the simple reason that ~ is hard to distinguish from - in many fonts.

    The <Location> functionality is especially useful when combined with the SetHandler directive. For example, to enable status requests but allow them only from browsers at example.com, you might use:

    <Location "/status">
      SetHandler server-status
      Require host example.com
    </Location>

    Note about / (slash)

    The slash character has special meaning depending on where in a URL it appears. People may be used to its behavior in the filesystem where multiple adjacent slashes are frequently collapsed to a single slash (i.e., /home///foo is the same as /home/foo). In URL-space this is not necessarily true. The <LocationMatch> directive and the regex version of <Location> require you to explicitly specify multiple slashes if that is your intention.

    For example, <LocationMatch "^/abc"> would match the request URL /abc but not the request URL //abc. The (non-regex) <Location> directive behaves similarly when used for proxy requests. But when (non-regex) <Location> is used for non-proxy requests it will implicitly match multiple slashes with a single slash. For example, if you specify <Location "/abc/def"> and the request is to /abc//def then it will match.

    See also

    top

    <LocationMatch> Directive

    Description:Applies the enclosed directives only to regular-expression matching URLs
    Syntax:<LocationMatch regex> ... </LocationMatch>
    Context:server config, virtual host
    Status:Core
    Module:core

    The <LocationMatch> directive limits the scope of the enclosed directives by URL, in an identical manner to <Location>. However, it takes a regular expression as an argument instead of a simple string. For example:

    <LocationMatch "/(extra|special)/data">
        # ...
    </LocationMatch>

    would match URLs that contained the substring /extra/data or /special/data.

    If the intent is that a URL starts with /extra/data, rather than merely contains /extra/data, prefix the regular expression with a ^ to require this.

    <LocationMatch "^/(extra|special)/data">

    From 2.4.8 onwards, named groups and backreferences are captured and written to the environment with the corresponding name prefixed with "MATCH_" and in upper case. This allows elements of URLs to be referenced from within expressions and modules like mod_rewrite. In order to prevent confusion, numbered (unnamed) backreferences are ignored. Use named groups instead.

    <LocationMatch "^/combined/(?<sitename>[^/]+)">
        Require ldap-group cn=%{env:MATCH_SITENAME},ou=combined,o=Example
    </LocationMatch>

    Note about / (slash)

    The slash character has special meaning depending on where in a URL it appears. People may be used to its behavior in the filesystem where multiple adjacent slashes are frequently collapsed to a single slash (i.e., /home///foo is the same as /home/foo). In URL-space this is not necessarily true. The <LocationMatch> directive and the regex version of <Location> require you to explicitly specify multiple slashes if that is your intention.

    For example, <LocationMatch "^/abc"> would match the request URL /abc but not the request URL //abc. The (non-regex) <Location> directive behaves similarly when used for proxy requests. But when (non-regex) <Location> is used for non-proxy requests it will implicitly match multiple slashes with a single slash. For example, if you specify <Location "/abc/def"> and the request is to /abc//def then it will match.

    See also

    top

    LogLevel Directive

    Description:Controls the verbosity of the ErrorLog
    Syntax:LogLevel [module:]level [module:level] ...
    Default:LogLevel warn
    Context:server config, virtual host, directory
    Status:Core
    Module:core
    Compatibility:Per-module and per-directory configuration is available in Apache HTTP Server 2.3.6 and later

    LogLevel adjusts the verbosity of the messages recorded in the error logs (see ErrorLog directive). The following levels are available, in order of decreasing significance:

    Level Description Example
    emerg Emergencies - system is unusable. "Child cannot open lock file. Exiting"
    alert Action must be taken immediately. "getpwuid: couldn't determine user name from uid"
    crit Critical Conditions. "socket: Failed to get a socket, exiting child"
    error Error conditions. "Premature end of script headers"
    warn Warning conditions. "child process 1234 did not exit, sending another SIGHUP"
    notice Normal but significant condition. "httpd: caught SIGBUS, attempting to dump core in ..."
    info Informational. "Server seems busy, (you may need to increase StartServers, or Min/MaxSpareServers)..."
    debug Debug-level messages "Opening config file ..."
    trace1 Trace messages "proxy: FTP: control connection complete"
    trace2 Trace messages "proxy: CONNECT: sending the CONNECT request to the remote proxy"
    trace3 Trace messages "openssl: Handshake: start"
    trace4 Trace messages "read from buffered SSL brigade, mode 0, 17 bytes"
    trace5 Trace messages "map lookup FAILED: map=rewritemap key=keyname"
    trace6 Trace messages "cache lookup FAILED, forcing new map lookup"
    trace7 Trace messages, dumping large amounts of data "| 0000: 02 23 44 30 13 40 ac 34 df 3d bf 9a 19 49 39 15 |"
    trace8 Trace messages, dumping large amounts of data "| 0000: 02 23 44 30 13 40 ac 34 df 3d bf 9a 19 49 39 15 |"

    When a particular level is specified, messages from all other levels of higher significance will be reported as well. E.g., when LogLevel info is specified, then messages with log levels of notice and warn will also be posted.

    Using a level of at least crit is recommended.

    For example:

    LogLevel notice

    Note

    When logging to a regular file, messages of the level notice cannot be suppressed and thus are always logged. However, this doesn't apply when logging is done using syslog.

    Specifying a level without a module name will reset the level for all modules to that level. Specifying a level with a module name will set the level for that module only. It is possible to use the module source file name, the module identifier, or the module identifier with the trailing _module omitted as module specification. This means the following three specifications are equivalent:

    LogLevel info ssl:warn
    LogLevel info mod_ssl.c:warn
    LogLevel info ssl_module:warn

    It is also possible to change the level per directory:

    LogLevel info
    <Directory "/usr/local/apache/htdocs/app">
      LogLevel debug
    </Directory>
    Per directory loglevel configuration only affects messages that are logged after the request has been parsed and that are associated with the request. Log messages which are associated with the connection or the server are not affected.

    See also

    top

    MaxKeepAliveRequests Directive

    Description:Number of requests allowed on a persistent connection
    Syntax:MaxKeepAliveRequests number
    Default:MaxKeepAliveRequests 100
    Context:server config, virtual host
    Status:Core
    Module:core

    The MaxKeepAliveRequests directive limits the number of requests allowed per connection when KeepAlive is on. If it is set to 0, unlimited requests will be allowed. We recommend that this setting be kept to a high value for maximum server performance.

    For example:

    MaxKeepAliveRequests 500
    top

    MaxRangeOverlaps Directive

    Description:Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    Syntax:MaxRangeOverlaps default | unlimited | none | number-of-ranges
    Default:MaxRangeOverlaps 20
    Context:server config, virtual host, directory
    Status:Core
    Module:core
    Compatibility:Available in Apache HTTP Server 2.3.15 and later

    The MaxRangeOverlaps directive limits the number of overlapping HTTP ranges the server is willing to return to the client. If more overlapping ranges than permitted are requested, the complete resource is returned instead.

    default
    Limits the number of overlapping ranges to a compile-time default of 20.
    none
    No overlapping Range headers are allowed.
    unlimited
    The server does not limit the number of overlapping ranges it is willing to satisfy.
    number-of-ranges
    A positive number representing the maximum number of overlapping ranges the server is willing to satisfy.
    top

    MaxRangeReversals Directive

    Description:Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    Syntax:MaxRangeReversals default | unlimited | none | number-of-ranges
    Default:MaxRangeReversals 20
    Context:server config, virtual host, directory
    Status:Core
    Module:core
    Compatibility:Available in Apache HTTP Server 2.3.15 and later

    The MaxRangeReversals directive limits the number of HTTP Range reversals the server is willing to return to the client. If more ranges reversals than permitted are requested, the complete resource is returned instead.

    default
    Limits the number of range reversals to a compile-time default of 20.
    none
    No Range reversals headers are allowed.
    unlimited
    The server does not limit the number of range reversals it is willing to satisfy.
    number-of-ranges
    A positive number representing the maximum number of range reversals the server is willing to satisfy.
    top

    MaxRanges Directive

    Description:Number of ranges allowed before returning the complete resource
    Syntax:MaxRanges default | unlimited | none | number-of-ranges
    Default:MaxRanges 200
    Context:server config, virtual host, directory
    Status:Core
    Module:core
    Compatibility:Available in Apache HTTP Server 2.3.15 and later

    The MaxRanges directive limits the number of HTTP ranges the server is willing to return to the client. If more ranges than permitted are requested, the complete resource is returned instead.

    default
    Limits the number of ranges to a compile-time default of 200.
    none
    Range headers are ignored.
    unlimited
    The server does not limit the number of ranges it is willing to satisfy.
    number-of-ranges
    A positive number representing the maximum number of ranges the server is willing to satisfy.
    top

    MergeSlashes Directive

    Description:Controls whether the server merges consecutive slashes in URLs.
    Syntax:MergeSlashes ON|OFF
    Default:MergeSlashes ON
    Context:server config, virtual host
    Status:Core
    Module:core
    Compatibility:Added in 2.4.39

    By default, the server merges (or collapses) multiple consecutive slash ('/') characters in the path component of the request URL.

    When mapping URL's to the filesystem, these multiple slashes are not significant. However, URL's handled other ways, such as by CGI or proxy, might prefer to retain the significance of multiple consecutive slashes. In these cases MergeSlashes can be set to OFF to retain the multiple consecutive slashes. In these configurations, regular expressions used in the configuration file that match the path component of the URL (LocationMatch, RewriteRule, ...) need to take into account multiple consecutive slashes.

    top

    MergeTrailers Directive

    Description:Determines whether trailers are merged into headers
    Syntax:MergeTrailers [on|off]
    Default:MergeTrailers off
    Context:server config, virtual host
    Status:Core
    Module:core
    Compatibility:2.4.11 and later

    This directive controls whether HTTP trailers are copied into the internal representation of HTTP headers. This merging occurs when the request body has been completely consumed, long after most header processing would have a chance to examine or modify request headers.

    This option is provided for compatibility with releases prior to 2.4.11, where trailers were always merged.

    top

    Mutex Directive

    Description:Configures mutex mechanism and lock file directory for all or specified mutexes
    Syntax:Mutex mechanism [default|mutex-name] ... [OmitPID]
    Default:Mutex default
    Context:server config
    Status:Core
    Module:core
    Compatibility:Available in Apache HTTP Server 2.3.4 and later

    The Mutex directive sets the mechanism, and optionally the lock file location, that httpd and modules use to serialize access to resources. Specify default as the second argument to change the settings for all mutexes; specify a mutex name (see table below) as the second argument to override defaults only for that mutex.

    The Mutex directive is typically used in the following exceptional situations:

    • change the mutex mechanism when the default mechanism selected by APR has a functional or performance problem
    • change the directory used by file-based mutexes when the default directory does not support locking

    Supported modules

    This directive only configures mutexes which have been registered with the core server using the ap_mutex_register() API. All modules bundled with httpd support the Mutex directive, but third-party modules may not. Consult the documentation of the third-party module, which must indicate the mutex name(s) which can be configured if this directive is supported.

    The following mutex mechanisms are available:

    • default | yes

      This selects the default locking implementation, as determined by APR. The default locking implementation can be displayed by running httpd with the -V option.

    • none | no

      This effectively disables the mutex, and is only allowed for a mutex if the module indicates that it is a valid choice. Consult the module documentation for more information.

    • posixsem

      This is a mutex variant based on a Posix semaphore.

      Warning

      The semaphore ownership is not recovered if a thread in the process holding the mutex segfaults, resulting in a hang of the web server.

    • sysvsem

      This is a mutex variant based on a SystemV IPC semaphore.

      Warning

      It is possible to "leak" SysV semaphores if processes crash before the semaphore is removed.

      Security

      The semaphore API allows for a denial of service attack by any CGIs running under the same uid as the webserver (i.e., all CGIs, unless you use something like suexec or cgiwrapper).

    • sem

      This selects the "best" available semaphore implementation, choosing between Posix and SystemV IPC semaphores, in that order.

    • pthread

      This is a mutex variant based on cross-process Posix thread mutexes.

      Warning

      On most systems, if a child process terminates abnormally while holding a mutex that uses this implementation, the server will deadlock and stop responding to requests. When this occurs, the server will require a manual restart to recover.

      Solaris and Linux are notable exceptions as they provide a mechanism which usually allows the mutex to be recovered after a child process terminates abnormally while holding a mutex.

      If your system is POSIX compliant or if it implements the pthread_mutexattr_setrobust_np() function, you may be able to use the pthread option safely.

    • fcntl:/path/to/mutex

      This is a mutex variant where a physical (lock-)file and the fcntl() function are used as the mutex.

      Warning

      When multiple mutexes based on this mechanism are used within multi-threaded, multi-process environments, deadlock errors (EDEADLK) can be reported for valid mutex operations if fcntl() is not thread-aware, such as on Solaris.

    • flock:/path/to/mutex

      This is similar to the fcntl:/path/to/mutex method with the exception that the flock() function is used to provide file locking.

    • file:/path/to/mutex

      This selects the "best" available file locking implementation, choosing between fcntl and flock, in that order.

    Most mechanisms are only available on selected platforms, where the underlying platform and APR support it. Mechanisms which aren't available on all platforms are posixsem, sysvsem, sem, pthread, fcntl, flock, and file.

    With the file-based mechanisms fcntl and flock, the path, if provided, is a directory where the lock file will be created. The default directory is httpd's run-time file directory relative to ServerRoot. Always use a local disk filesystem for /path/to/mutex and never a directory residing on a NFS- or AFS-filesystem. The basename of the file will be the mutex type, an optional instance string provided by the module, and unless the OmitPID keyword is specified, the process id of the httpd parent process will be appended to make the file name unique, avoiding conflicts when multiple httpd instances share a lock file directory. For example, if the mutex name is mpm-accept and the lock file directory is /var/httpd/locks, the lock file name for the httpd instance with parent process id 12345 would be /var/httpd/locks/mpm-accept.12345.

    Security

    It is best to avoid putting mutex files in a world-writable directory such as /var/tmp because someone could create a denial of service attack and prevent the server from starting by creating a lockfile with the same name as the one the server will try to create.

    The following table documents the names of mutexes used by httpd and bundled modules.

    Mutex name Module(s) Protected resource
    mpm-accept prefork and worker MPMs incoming connections, to avoid the thundering herd problem; for more information, refer to the performance tuning documentation
    authdigest-client mod_auth_digest client list in shared memory
    authdigest-opaque mod_auth_digest counter in shared memory
    ldap-cache mod_ldap LDAP result cache
    rewrite-map mod_rewrite communication with external mapping programs, to avoid intermixed I/O from multiple requests
    ssl-cache mod_ssl SSL session cache
    ssl-stapling mod_ssl OCSP stapling response cache
    watchdog-callback mod_watchdog callback function of a particular client module

    The OmitPID keyword suppresses the addition of the httpd parent process id from the lock file name.

    In the following example, the mutex mechanism for the MPM accept mutex will be changed from the compiled-in default to fcntl, with the associated lock file created in directory /var/httpd/locks. The mutex mechanism for all other mutexes will be changed from the compiled-in default to sysvsem.

    Mutex sysvsem default
    Mutex fcntl:/var/httpd/locks mpm-accept
    top

    NameVirtualHost Directive

    Description:DEPRECATED: Designates an IP address for name-virtual hosting
    Syntax:NameVirtualHost addr[:port]
    Context:server config
    Status:Core
    Module:core

    Prior to 2.3.11, NameVirtualHost was required to instruct the server that a particular IP address and port combination was usable as a name-based virtual host. In 2.3.11 and later, any time an IP address and port combination is used in multiple virtual hosts, name-based virtual hosting is automatically enabled for that address.

    This directive currently has no effect.

    See also

    top

    Options Directive

    Description:Configures what features are available in a particular directory
    Syntax:Options [+|-]option [[+|-]option] ...
    Default:Options FollowSymlinks
    Context:server config, virtual host, directory, .htaccess
    Override:Options
    Status:Core
    Module:core
    Compatibility:The default was changed from All to FollowSymlinks in 2.3.11

    The Options directive controls which server features are available in a particular directory.

    option can be set to None, in which case none of the extra features are enabled, or one or more of the following:

    All
    All options except for MultiViews.
    ExecCGI
    Execution of CGI scripts using mod_cgi is permitted.
    FollowSymLinks
    The server will follow symbolic links in this directory. This is the default setting.

    Even though the server follows the symlink it does not change the pathname used to match against <Directory> sections.

    The FollowSymLinks and SymLinksIfOwnerMatch Options work only in <Directory> sections or .htaccess files.

    Omitting this option should not be considered a security restriction, since symlink testing is subject to race conditions that make it circumventable.

    Includes
    Server-side includes provided by mod_include are permitted.
    IncludesNOEXEC
    Server-side includes are permitted, but the #exec cmd and #exec cgi are disabled. It is still possible to #include virtual CGI scripts from ScriptAliased directories.
    Indexes
    If a URL which maps to a directory is requested and there is no DirectoryIndex (e.g., index.html) in that directory, then mod_autoindex will return a formatted listing of the directory.
    MultiViews
    Content negotiated "MultiViews" are allowed using mod_negotiation.

    Note

    This option gets ignored if set anywhere other than <Directory>, as mod_negotiation needs real resources to compare against and evaluate from.

    SymLinksIfOwnerMatch
    The server will only follow symbolic links for which the target file or directory is owned by the same user id as the link.

    Note

    The FollowSymLinks and SymLinksIfOwnerMatch Options work only in <Directory> sections or .htaccess files.

    This option should not be considered a security restriction, since symlink testing is subject to race conditions that make it circumventable.

    Normally, if multiple Options could apply to a directory, then the most specific one is used and others are ignored; the options are not merged. (See how sections are merged.) However if all the options on the Options directive are preceded by a + or - symbol, the options are merged. Any options preceded by a + are added to the options currently in force, and any options preceded by a - are removed from the options currently in force.

    Note

    Mixing Options with a + or - with those without is not valid syntax and will be rejected during server startup by the syntax check with an abort.

    For example, without any + and - symbols:

    <Directory "/web/docs">
      Options Indexes FollowSymLinks
    </Directory>
    
    <Directory "/web/docs/spec">
      Options Includes
    </Directory>

    then only Includes will be set for the /web/docs/spec directory. However if the second Options directive uses the + and - symbols:

    <Directory "/web/docs">
      Options Indexes FollowSymLinks
    </Directory>
    
    <Directory "/web/docs/spec">
      Options +Includes -Indexes
    </Directory>

    then the options FollowSymLinks and Includes are set for the /web/docs/spec directory.

    Note

    Using -IncludesNOEXEC or -Includes disables server-side includes completely regardless of the previous setting.

    The default in the absence of any other settings is FollowSymlinks.

    top

    Protocol Directive

    Description:Protocol for a listening socket
    Syntax:Protocol protocol
    Context:server config, virtual host
    Status:Core
    Module:core
    Compatibility:Available in Apache 2.1.5 and later. On Windows, from Apache 2.3.3 and later.

    This directive specifies the protocol used for a specific listening socket. The protocol is used to determine which module should handle a request and to apply protocol specific optimizations with the AcceptFilter directive.

    You only need to set the protocol if you are running on non-standard ports; otherwise, http is assumed for port 80 and https for port 443.

    For example, if you are running https on a non-standard port, specify the protocol explicitly:

    Protocol https

    You can also specify the protocol using the Listen directive.

    See also

    top

    Protocols Directive

    Description:Protocols available for a server/virtual host
    Syntax:Protocols protocol ...
    Default:Protocols http/1.1
    Context:server config, virtual host
    Status:Core
    Module:core
    Compatibility:Only available from Apache 2.4.17 and later.

    This directive specifies the list of protocols supported for a server/virtual host. The list determines the allowed protocols a client may negotiate for this server/host.

    You need to set protocols if you want to extend the available protocols for a server/host. By default, only the http/1.1 protocol (which includes the compatibility with 1.0 and 0.9 clients) is allowed.

    For example, if you want to support HTTP/2 for a server with TLS, specify:

    Protocols h2 http/1.1

    Valid protocols are http/1.1 for http and https connections, h2 on https connections and h2c for http connections. Modules may enable more protocols.

    It is safe to specify protocols that are unavailable/disabled. Such protocol names will simply be ignored.

    Protocols specified in base servers are inherited for virtual hosts only if the virtual host has no own Protocols directive. Or, the other way around, Protocols directives in virtual hosts replace any such directive in the base server.

    See also

    top

    ProtocolsHonorOrder Directive

    Description:Determines if order of Protocols determines precedence during negotiation
    Syntax:ProtocolsHonorOrder On|Off
    Default:ProtocolsHonorOrder On
    Context:server config, virtual host
    Status:Core
    Module:core
    Compatibility:Only available from Apache 2.4.17 and later.

    This directive specifies if the server should honor the order in which the Protocols directive lists protocols.

    If configured Off, the client supplied list order of protocols has precedence over the order in the server configuration.

    With ProtocolsHonorOrder set to on (default), the client ordering does not matter and only the ordering in the server settings influences the outcome of the protocol negotiation.

    See also

    top

    QualifyRedirectURL Directive

    Description:Controls whether the REDIRECT_URL environment variable is fully qualified
    Syntax:QualifyRedirectURL ON|OFF
    Default:QualifyRedirectURL OFF
    Context:server config, virtual host, directory
    Override:FileInfo
    Status:Core
    Module:core
    Compatibility:Directive supported in 2.4.18 and later. 2.4.17 acted as if 'QualifyRedirectURL ON' was configured.

    This directive controls whether the server will ensure that the REDIRECT_URL environment variable is fully qualified. By default, the variable contains the verbatim URL requested by the client, such as "/index.html". With QualifyRedirectURL ON, the same request would result in a value such as "http://www.example.com/index.html".

    Even without this directive set, when a request is issued against a fully qualified URL, REDIRECT_URL will remain fully qualified.

    top

    RegexDefaultOptions Directive

    Description:Allow to configure global/default options for regexes
    Syntax:RegexDefaultOptions [none] [+|-]option [[+|-]option] ...
    Default:RegexDefaultOptions DOTALL DOLLAR_ENDONLY
    Context:server config
    Status:Core
    Module:core
    Compatibility:Only available from Apache 2.4.30 and later.

    This directive adds some default behavior to ANY regular expression used afterwards.

    Any option preceded by a '+' is added to the already set options.
    Any option preceded by a '-' is removed from the already set options.
    Any option without a '+' or a '-' will be set, removing any other already set option.
    The none keyword resets any already set options.

    option can be:

    ICASE
    Use a case-insensitive match.
    EXTENDED
    Perl's /x flag, ignore (unescaped-)spaces and comments in the pattern.
    DOTALL
    Perl's /s flag, '.' matches newline characters.
    DOLLAR_ENDONLY
    '$' matches at end of subject string only.
    # Add the ICASE option for all regexes by default
    RegexDefaultOptions +ICASE
    ...
    # Remove the default DOLLAR_ENDONLY option, but keep any other one
    RegexDefaultOptions -DOLLAR_ENDONLY
    ...
    # Set the DOTALL option only, resetting any other one
    RegexDefaultOptions DOTALL
    ...
    # Reset all defined options
    RegexDefaultOptions none
    ...
    top

    RegisterHttpMethod Directive

    Description:Register non-standard HTTP methods
    Syntax:RegisterHttpMethod method [method [...]]
    Context:server config
    Status:Core
    Module:core
    Compatibility:Available in Apache HTTP Server 2.4.24 and later

    This directive may be used to register additional HTTP methods. This is necessary if non-standard methods need to be used with directives that accept method names as parameters, or to allow particular non-standard methods to be used via proxy or CGI script when the server has been configured to only pass recognized methods to modules.

    See also

    top

    RLimitCPU Directive

    Description:Limits the CPU consumption of processes launched by Apache httpd children
    Syntax:RLimitCPU seconds|max [seconds|max]
    Default:Unset; uses operating system defaults
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core

    Takes 1 or 2 parameters. The first parameter sets the soft resource limit for all processes and the second parameter sets the maximum resource limit. Either parameter can be a number, or max to indicate to the server that the limit should be set to the maximum allowed by the operating system configuration. Raising the maximum resource limit requires that the server is running as root or in the initial startup phase.

    This applies to processes forked from Apache httpd children servicing requests, not the Apache httpd children themselves. This includes CGI scripts and SSI exec commands, but not any processes forked from the Apache httpd parent, such as piped logs.

    CPU resource limits are expressed in seconds per process.

    See also

    top

    RLimitMEM Directive

    Description:Limits the memory consumption of processes launched by Apache httpd children
    Syntax:RLimitMEM bytes|max [bytes|max]
    Default:Unset; uses operating system defaults
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core

    Takes 1 or 2 parameters. The first parameter sets the soft resource limit for all processes and the second parameter sets the maximum resource limit. Either parameter can be a number, or max to indicate to the server that the limit should be set to the maximum allowed by the operating system configuration. Raising the maximum resource limit requires that the server is running as root or in the initial startup phase.

    This applies to processes forked from Apache httpd children servicing requests, not the Apache httpd children themselves. This includes CGI scripts and SSI exec commands, but not any processes forked from the Apache httpd parent, such as piped logs.

    Memory resource limits are expressed in bytes per process.

    See also

    top

    RLimitNPROC Directive

    Description:Limits the number of processes that can be launched by processes launched by Apache httpd children
    Syntax:RLimitNPROC number|max [number|max]
    Default:Unset; uses operating system defaults
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core

    Takes 1 or 2 parameters. The first parameter sets the soft resource limit for all processes, and the second parameter sets the maximum resource limit. Either parameter can be a number, or max to indicate to the server that the limit should be set to the maximum allowed by the operating system configuration. Raising the maximum resource limit requires that the server is running as root or in the initial startup phase.

    This applies to processes forked from Apache httpd children servicing requests, not the Apache httpd children themselves. This includes CGI scripts and SSI exec commands, but not any processes forked from the Apache httpd parent, such as piped logs.

    Process limits control the number of processes per user.

    Note

    If CGI processes are not running under user ids other than the web server user id, this directive will limit the number of processes that the server itself can create. Evidence of this situation will be indicated by cannot fork messages in the error_log.

    See also

    top

    ScriptInterpreterSource Directive

    Description:Technique for locating the interpreter for CGI scripts
    Syntax:ScriptInterpreterSource Registry|Registry-Strict|Script
    Default:ScriptInterpreterSource Script
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Core
    Module:core
    Compatibility:Win32 only.

    This directive is used to control how Apache httpd finds the interpreter used to run CGI scripts. The default setting is Script. This causes Apache httpd to use the interpreter pointed to by the shebang line (first line, starting with #!) in the script. On Win32 systems this line usually looks like:

    #!C:/Perl/bin/perl.exe

    or, if perl is in the PATH, simply:

    #!perl

    Setting ScriptInterpreterSource Registry will cause the Windows Registry tree HKEY_CLASSES_ROOT to be searched using the script file extension (e.g., .pl) as a search key. The command defined by the registry subkey Shell\ExecCGI\Command or, if it does not exist, by the subkey Shell\Open\Command is used to open the script file. If the registry keys cannot be found, Apache httpd falls back to the behavior of the Script option.

    Security

    Be careful when using ScriptInterpreterSource Registry with ScriptAlias'ed directories, because Apache httpd will try to execute every file within this directory. The Registry setting may cause undesired program calls on files which are typically not executed. For example, the default open command on .htm files on most Windows systems will execute Microsoft Internet Explorer, so any HTTP request for an .htm file existing within the script directory would start the browser in the background on the server. This is a good way to crash your system within a minute or so.

    The option Registry-Strict which is new in Apache HTTP Server 2.0 does the same thing as Registry but uses only the subkey Shell\ExecCGI\Command. The ExecCGI key is not a common one. It must be configured manually in the windows registry and hence prevents accidental program calls on your system.

    top

    SeeRequestTail Directive

    Description:Determine if mod_status displays the first 63 characters of a request or the last 63, assuming the request itself is greater than 63 chars.
    Syntax:SeeRequestTail On|Off
    Default:SeeRequestTail Off
    Context:server config
    Status:Core
    Module:core
    Compatibility:Available in Apache httpd 2.2.7 and later.

    mod_status with ExtendedStatus On displays the actual request being handled. For historical purposes, only 63 characters of the request are actually stored for display purposes. This directive controls whether the 1st 63 characters are stored (the previous behavior and the default) or if the last 63 characters are. This is only applicable, of course, if the length of the request is 64 characters or greater.

    If Apache httpd is handling GET /disk1/storage/apache/htdocs/images/imagestore1/food/apples.jpg HTTP/1.1 mod_status displays as follows:

    Off (default) GET /disk1/storage/apache/htdocs/images/imagestore1/food/apples
    On orage/apache/htdocs/images/imagestore1/food/apples.jpg HTTP/1.1
    top

    ServerAdmin Directive

    Description:Email address that the server includes in error messages sent to the client
    Syntax:ServerAdmin email-address|URL
    Context:server config, virtual host
    Status:Core
    Module:core

    The ServerAdmin sets the contact address that the server includes in any error messages it returns to the client. If the httpd doesn't recognize the supplied argument as an URL, it assumes, that it's an email-address and prepends it with mailto: in hyperlink targets. However, it's recommended to actually use an email address, since there are a lot of CGI scripts that make that assumption. If you want to use an URL, it should point to another server under your control. Otherwise users may not be able to contact you in case of errors.

    It may be worth setting up a dedicated address for this, e.g.

    ServerAdmin www-admin@foo.example.com

    as users do not always mention that they are talking about the server!

    top

    ServerAlias Directive

    Description:Alternate names for a host used when matching requests to name-virtual hosts
    Syntax:ServerAlias hostname [hostname] ...
    Context:virtual host
    Status:Core
    Module:core

    The ServerAlias directive sets the alternate names for a host, for use with name-based virtual hosts. The ServerAlias may include wildcards, if appropriate.

    <VirtualHost *:80>
      ServerName server.example.com
      ServerAlias server server2.example.com server2
      ServerAlias *.example.com
      UseCanonicalName Off
      # ...
    </VirtualHost>

    Name-based virtual hosts for the best-matching set of <virtualhost>s are processed in the order they appear in the configuration. The first matching ServerName or ServerAlias is used, with no different precedence for wildcards (nor for ServerName vs. ServerAlias).

    The complete list of names in the <VirtualHost> directive are treated just like a (non wildcard) ServerAlias.

    See also

    top

    ServerName Directive

    Description:Hostname and port that the server uses to identify itself
    Syntax:ServerName [scheme://]domain-name|ip-address[:port]
    Context:server config, virtual host
    Status:Core
    Module:core

    The ServerName directive sets the request scheme, hostname and port that the server uses to identify itself.

    ServerName is used (possibly in conjunction with ServerAlias) to uniquely identify a virtual host, when using name-based virtual hosts.

    Additionally, this is used when creating self-referential redirection URLs when UseCanonicalName is set to a non-default value.

    For example, if the name of the machine hosting the web server is simple.example.com, but the machine also has the DNS alias www.example.com and you wish the web server to be so identified, the following directive should be used:

    ServerName www.example.com

    The ServerName directive may appear anywhere within the definition of a server. However, each appearance overrides the previous appearance (within that server).

    If no ServerName is specified, the server attempts to deduce the client visible hostname by first asking the operating system for the system hostname, and if that fails, performing a reverse lookup on an IP address present on the system.

    If no port is specified in the ServerName, then the server will use the port from the incoming request. For optimal reliability and predictability, you should specify an explicit hostname and port using the ServerName directive.

    If you are using name-based virtual hosts, the ServerName inside a <VirtualHost> section specifies what hostname must appear in the request's Host: header to match this virtual host.

    Sometimes, the server runs behind a device that processes SSL, such as a reverse proxy, load balancer or SSL offload appliance. When this is the case, specify the https:// scheme and the port number to which the clients connect in the ServerName directive to make sure that the server generates the correct self-referential URLs.

    See the description of the UseCanonicalName and UseCanonicalPhysicalPort directives for settings which determine whether self-referential URLs (e.g., by the mod_dir module) will refer to the specified port, or to the port number given in the client's request.

    Failure to set ServerName to a name that your server can resolve to an IP address will result in a startup warning. httpd will then use whatever hostname it can determine, using the system's hostname command. This will almost never be the hostname you actually want.

    httpd: Could not reliably determine the server's fully qualified domain name, using rocinante.local for ServerName

    See also

    top

    ServerPath Directive

    Description:Legacy URL pathname for a name-based virtual host that is accessed by an incompatible browser
    Syntax:ServerPath URL-path
    Context:virtual host
    Status:Core
    Module:core

    The ServerPath directive sets the legacy URL pathname for a host, for use with name-based virtual hosts.

    See also

    top

    ServerRoot Directive

    Description:Base directory for the server installation
    Syntax:ServerRoot directory-path
    Default:ServerRoot /usr/local/apache
    Context:server config
    Status:Core
    Module:core

    The ServerRoot directive sets the directory in which the server lives. Typically it will contain the subdirectories conf/ and logs/. Relative paths in other configuration directives (such as Include or LoadModule, for example) are taken as relative to this directory.

    ServerRoot "/home/httpd"

    The default location of ServerRoot may be modified by using the --prefix argument to configure, and most third-party distributions of the server have a different default location from the one listed above.

    See also

    top

    ServerSignature Directive

    Description:Configures the footer on server-generated documents
    Syntax:ServerSignature On|Off|EMail
    Default:ServerSignature Off
    Context:server config, virtual host, directory, .htaccess
    Override:All
    Status:Core
    Module:core

    The ServerSignature directive allows the configuration of a trailing footer line under server-generated documents (error messages, mod_proxy ftp directory listings, mod_info output, ...). The reason why you would want to enable such a footer line is that in a chain of proxies, the user often has no possibility to tell which of the chained servers actually produced a returned error message.

    The Off setting, which is the default, suppresses the footer line (and is therefore compatible with the behavior of Apache-1.2 and below). The On setting simply adds a line with the server version number and ServerName of the serving virtual host, and the EMail setting additionally creates a "mailto:" reference to the ServerAdmin of the referenced document.

    After version 2.0.44, the details of the server version number presented are controlled by the ServerTokens directive.

    See also

    top

    ServerTokens Directive

    Description:Configures the Server HTTP response header
    Syntax:ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full
    Default:ServerTokens Full
    Context:server config
    Status:Core
    Module:core

    This directive controls whether Server response header field which is sent back to clients includes a description of the generic OS-type of the server as well as information about compiled-in modules.

    ServerTokens Full (or not specified)
    Server sends (e.g.): Server: Apache/2.4.2 (Unix) PHP/4.2.2 MyMod/1.2
    ServerTokens Prod[uctOnly]
    Server sends (e.g.): Server: Apache
    ServerTokens Major
    Server sends (e.g.): Server: Apache/2
    ServerTokens Minor
    Server sends (e.g.): Server: Apache/2.4
    ServerTokens Min[imal]
    Server sends (e.g.): Server: Apache/2.4.2
    ServerTokens OS
    Server sends (e.g.): Server: Apache/2.4.2 (Unix)

    This setting applies to the entire server, and cannot be enabled or disabled on a virtualhost-by-virtualhost basis.

    After version 2.0.44, this directive also controls the information presented by the ServerSignature directive.

    Setting ServerTokens to less than minimal is not recommended because it makes it more difficult to debug interoperational problems. Also note that disabling the Server: header does nothing at all to make your server more secure. The idea of "security through obscurity" is a myth and leads to a false sense of safety.

    See also

    top

    SetHandler Directive

    Description:Forces all matching files to be processed by a handler
    Syntax:SetHandler handler-name|none|expression
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Core
    Module:core
    Compatibility:expression argument 2.4.19 and later

    When placed into an .htaccess file or a <Directory> or <Location> section, this directive forces all matching files to be parsed through the handler given by handler-name. For example, if you had a directory you wanted to be parsed entirely as imagemap rule files, regardless of extension, you might put the following into an .htaccess file in that directory:

    SetHandler imap-file

    Another example: if you wanted to have the server display a status report whenever a URL of http://servername/status was called, you might put the following into httpd.conf:

    <Location "/status">
      SetHandler server-status
    </Location>

    You could also use this directive to configure a particular handler for files with a particular file extension. For example:

    <FilesMatch "\.php$">
        SetHandler application/x-httpd-php
    </FilesMatch>

    String-valued expressions can be used to reference per-request variables, including backreferences to named regular expressions:

    <LocationMatch ^/app/(?<sub>[^/]+)/>
         SetHandler "proxy:unix:/var/run/app_%{env:MATCH_sub}.sock|fcgi://localhost:8080"
    </LocationMatch>

    You can override an earlier defined SetHandler directive by using the value None.

    Note

    Because SetHandler overrides default handlers, normal behavior such as handling of URLs ending in a slash (/) as directories or index files is suppressed.

    See also

    top

    SetInputFilter Directive

    Description:Sets the filters that will process client requests and POST input
    Syntax:SetInputFilter filter[;filter...]
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Core
    Module:core

    The SetInputFilter directive sets the filter or filters which will process client requests and POST input when they are received by the server. This is in addition to any filters defined elsewhere, including the AddInputFilter directive.

    If more than one filter is specified, they must be separated by semicolons in the order in which they should process the content.

    See also

    top

    SetOutputFilter Directive

    Description:Sets the filters that will process responses from the server
    Syntax:SetOutputFilter filter[;filter...]
    Context:server config, virtual host, directory, .htaccess
    Override:FileInfo
    Status:Core
    Module:core

    The SetOutputFilter directive sets the filters which will process responses from the server before they are sent to the client. This is in addition to any filters defined elsewhere, including the AddOutputFilter directive.

    For example, the following configuration will process all files in the /www/data/ directory for server-side includes.

    <Directory "/www/data/">
      SetOutputFilter INCLUDES
    </Directory>

    If more than one filter is specified, they must be separated by semicolons in the order in which they should process the content.

    See also

    top

    TimeOut Directive

    Description:Amount of time the server will wait for certain events before failing a request
    Syntax:TimeOut seconds
    Default:TimeOut 60
    Context:server config, virtual host
    Status:Core
    Module:core

    The TimeOut directive defines the length of time Apache httpd will wait for I/O in various circumstances:

    • When reading data from the client, the length of time to wait for a TCP packet to arrive if the read buffer is empty.

      For initial data on a new connection, this directive doesn't take effect until after any configured AcceptFilter has passed the new connection to the server.

    • When writing data to the client, the length of time to wait for an acknowledgement of a packet if the send buffer is full.
    • In mod_cgi and mod_cgid, the length of time to wait for any individual block of output from a CGI script.
    • In mod_ext_filter, the length of time to wait for output from a filtering process.
    • In mod_proxy, the default timeout value if ProxyTimeout is not configured.
    top

    TraceEnable Directive

    Description:Determines the behavior on TRACE requests
    Syntax:TraceEnable [on|off|extended]
    Default:TraceEnable on
    Context:server config, virtual host
    Status:Core
    Module:core

    This directive overrides the behavior of TRACE for both the core server and mod_proxy. The default TraceEnable on permits TRACE requests per RFC 2616, which disallows any request body to accompany the request. TraceEnable off causes the core server and mod_proxy to return a 405 (Method not allowed) error to the client.

    Finally, for testing and diagnostic purposes only, request bodies may be allowed using the non-compliant TraceEnable extended directive. The core (as an origin server) will restrict the request body to 64Kb (plus 8Kb for chunk headers if Transfer-Encoding: chunked is used). The core will reflect the full headers and all chunk headers with the response body. As a proxy server, the request body is not restricted to 64Kb.

    Note

    Despite claims to the contrary, enabling the TRACE method does not expose any security vulnerability in Apache httpd. The TRACE method is defined by the HTTP/1.1 specification and implementations are expected to support it.

    top

    UnDefine Directive

    Description:Undefine the existence of a variable
    Syntax:UnDefine parameter-name
    Context:server config
    Status:Core
    Module:core

    Undoes the effect of a Define or of passing a -D argument to httpd.

    This directive can be used to toggle the use of <IfDefine> sections without needing to alter -D arguments in any startup scripts.

    While this directive is supported in virtual host context, the changes it makes are visible to any later configuration directives, beyond any enclosing virtual host.

    See also

    top

    UseCanonicalName Directive

    Description:Configures how the server determines its own name and port
    Syntax:UseCanonicalName On|Off|DNS
    Default:UseCanonicalName Off
    Context:server config, virtual host, directory
    Status:Core
    Module:core

    In many situations Apache httpd must construct a self-referential URL -- that is, a URL that refers back to the same server. With UseCanonicalName On Apache httpd will use the hostname and port specified in the ServerName directive to construct the canonical name for the server. This name is used in all self-referential URLs, and for the values of SERVER_NAME and SERVER_PORT in CGIs.

    With UseCanonicalName Off Apache httpd will form self-referential URLs using the hostname and port supplied by the client if any are supplied (otherwise it will use the canonical name, as defined above). These values are the same that are used to implement name-based virtual hosts and are available with the same clients. The CGI variables SERVER_NAME and SERVER_PORT will be constructed from the client supplied values as well.

    An example where this may be useful is on an intranet server where you have users connecting to the machine using short names such as www. You'll notice that if the users type a shortname and a URL which is a directory, such as http://www/splat, without the trailing slash, then Apache httpd will redirect them to http://www.example.com/splat/. If you have authentication enabled, this will cause the user to have to authenticate twice (once for www and once again for www.example.com -- see the FAQ on this subject for more information). But if UseCanonicalName is set Off, then Apache httpd will redirect to http://www/splat/.

    There is a third option, UseCanonicalName DNS, which is intended for use with mass IP-based virtual hosting to support ancient clients that do not provide a Host: header. With this option, Apache httpd does a reverse DNS lookup on the server IP address that the client connected to in order to work out self-referential URLs.

    Warning

    If CGIs make assumptions about the values of SERVER_NAME, they may be broken by this option. The client is essentially free to give whatever value they want as a hostname. But if the CGI is only using SERVER_NAME to construct self-referential URLs, then it should be just fine.

    See also

    top

    UseCanonicalPhysicalPort Directive

    Description:Configures how the server determines its own port
    Syntax:UseCanonicalPhysicalPort On|Off
    Default:UseCanonicalPhysicalPort Off
    Context:server config, virtual host, directory
    Status:Core
    Module:core

    In many situations Apache httpd must construct a self-referential URL -- that is, a URL that refers back to the same server. With UseCanonicalPhysicalPort On, Apache httpd will, when constructing the canonical port for the server to honor the UseCanonicalName directive, provide the actual physical port number being used by this request as a potential port. With UseCanonicalPhysicalPort Off, Apache httpd will not ever use the actual physical port number, instead relying on all configured information to construct a valid port number.

    Note

    The ordering of the lookup when the physical port is used is as follows:

    UseCanonicalName On
    1. Port provided in Servername
    2. Physical port
    3. Default port
    UseCanonicalName Off | DNS
    1. Parsed port from Host: header
    2. Physical port
    3. Port provided in Servername
    4. Default port

    With UseCanonicalPhysicalPort Off, the physical ports are removed from the ordering.

    See also

    top

    <VirtualHost> Directive

    Description:Contains directives that apply only to a specific hostname or IP address
    Syntax:<VirtualHost addr[:port] [addr[:port]] ...> ... </VirtualHost>
    Context:server config
    Status:Core
    Module:core

    <VirtualHost> and </VirtualHost> are used to enclose a group of directives that will apply only to a particular virtual host. Any directive that is allowed in a virtual host context may be used. When the server receives a request for a document on a particular virtual host, it uses the configuration directives enclosed in the <VirtualHost> section. Addr can be any of the following, optionally followed by a colon and a port number (or *):

    • The IP address of the virtual host;
    • A fully qualified domain name for the IP address of the virtual host (not recommended);
    • The character *, which acts as a wildcard and matches any IP address.
    • The string _default_, which is an alias for *
    <VirtualHost 10.1.2.3:80>
      ServerAdmin webmaster@host.example.com
      DocumentRoot "/www/docs/host.example.com"
      ServerName host.example.com
      ErrorLog "logs/host.example.com-error_log"
      TransferLog "logs/host.example.com-access_log"
    </VirtualHost>

    IPv6 addresses must be specified in square brackets because the optional port number could not be determined otherwise. An IPv6 example is shown below:

    <VirtualHost [2001:db8::a00:20ff:fea7:ccea]:80>
      ServerAdmin webmaster@host.example.com
      DocumentRoot "/www/docs/host.example.com"
      ServerName host.example.com
      ErrorLog "logs/host.example.com-error_log"
      TransferLog "logs/host.example.com-access_log"
    </VirtualHost>

    Each Virtual Host must correspond to a different IP address, different port number, or a different host name for the server, in the former case the server machine must be configured to accept IP packets for multiple addresses. (If the machine does not have multiple network interfaces, then this can be accomplished with the ifconfig alias command -- if your OS supports it).

    Note

    The use of <VirtualHost> does not affect what addresses Apache httpd listens on. You may need to ensure that Apache httpd is listening on the correct addresses using Listen.

    A ServerName should be specified inside each <VirtualHost> block. If it is absent, the ServerName from the "main" server configuration will be inherited.

    When a request is received, the server first maps it to the best matching <VirtualHost> based on the local IP address and port combination only. Non-wildcards have a higher precedence. If no match based on IP and port occurs at all, the "main" server configuration is used.

    If multiple virtual hosts contain the best matching IP address and port, the server selects from these virtual hosts the best match based on the requested hostname. If no matching name-based virtual host is found, then the first listed virtual host that matched the IP address will be used. As a consequence, the first listed virtual host for a given IP address and port combination is the default virtual host for that IP and port combination.

    Security

    See the security tips document for details on why your security could be compromised if the directory where log files are stored is writable by anyone other than the user that starts the server.

    See also

    Available Languages:  de  |  en  |  es  |  fr  |  ja  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_host.html.fr.utf80000644000000000000500000003426713412755316021453 0ustar rootsrc mod_authz_host - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authz_host

    Langues Disponibles:  en  |  fr 

    Description:Autorisations de groupe basées sur l'hôte (nom ou adresse IP)
    Statut:Base
    Identificateur de Module:authz_host_module
    Fichier Source:mod_authz_host.c
    Compatibilité:Le fournisseur forward-dns est disponible à partir de la version 2.4.19 du serveur HTTP Apache

    Sommaire

    Les fournisseurs d'autorisation implémentés par le module mod_authz_host sont enregistrés à l'aide de la directive Require. On peut utiliser cette directive à l'intérieur de sections <Directory>, <Files>, ou <Location> ou de fichiers .htaccess pour contrôler l'accès à certaines zones du serveur. Le contrôle d'accès peut être effectué en fonction du nom d'hôte ou de l'adresse IP.

    En général, les directives de restriction d'accès s'appliquent à toutes les méthodes d'accès (GET, PUT, POST, etc...). C'est d'ailleurs ce que l'on souhaite dans la plupart des cas. Il est cependant possible de ne restreindre l'accès que pour certaines méthodes, tout en laissant les autres méthodes sans protection, en plaçant les directives dans une section <Limit>.

    top

    Les directives Require

    La directive Apache Require est utilisée au cours de la phase d'autorisation pour vérifier si un utilisateur se voit accorder ou refuser l'accès à une ressource. mod_authz_host fournit les types d'autorisation ip, host, forward-dns et local. D'autres types d'autorisation sont aussi disponibles, mais nécessitent le chargement des modules d'autorisation appropriés.

    Ces fournisseurs d'autorisation permettent de déterminer quels hôtes peuvent accéder à une zone du serveur. On peut contrôler l'accès en fonction du nom d'hôte, de l'adresse IP, ou d'un intervalle d'adresses IP.

    A partir de la version 2.4.8, les directives require host supportent les expressions.

    Require ip

    Le fournisseur ip permet de contrôler l'accès au serveur en fonction de l'adresse IP du client distant. Lorsque Require ip adresse-ip est spécifié, la requête est autorisée si l'adresse IP du client distant correspond à

    Une adresse IP complète :

    Require ip 10.1.2.3
    Require ip 192.168.1.104 192.168.1.205

    L'adresse IP d'un hôte pour qui l'accès est accordé

    Une adresse IP partielle :

    Require ip 10.1
    Require ip 10 172.20 192.168.2

    Les 1 à 3 premiers octets d'une adresse IP, pour une restriction à un sous-réseau.

    Une paire réseau/masque de sous-réseau :

    Require ip 10.1.0.0/255.255.0.0

    Un réseau a.b.c.d, et un masque de sous-réseau w.x.y.z. pour une restriction de sous-réseau plus fine.

    Une spécification CIDR réseau/nnn :

    Require ip 10.1.0.0/16

    Identique au cas précédent, excepté que le masque de sous-réseau représente les nnn premiers bits de poids fort.

    Notez que les trois derniers exemples correspondent exectement au même ensemble d'hôtes.

    On peut spécifier des adresses et des sous-réseaux IPv6 comme suit :

    Require ip 2001:db8::a00:20ff:fea7:ccea
    Require ip 2001:db8:1:1::a
    Require ip 2001:db8:2:1::/64
    Require ip 2001:db8:3::/48

    Note: comme les adresses IP sont lues au démarrage, les expressions ne sont pas évaluées au moment de la requête.

    Require host

    Le fournisseur host permet de contrôler l'accès au serveur en fonction du nom d'hôte du client distant. Lorsque Require host nom-hôte est spécifié, la requête est autorisée si le nom d'hôte correspond à

    Un nom de domaine (éventuellement partiel)

    Require host example.org
    Require host .net example.edu

    Les hôtes dont les noms correspondent ou se terminent par la chaîne spécifiée se voient accorder l'accès. Seuls les élément de nom de domaine complets sont mis en correspondance ; ainsi, l'exemple ci-dessus correspondra à foo.example.org, mais ne correspondra pas à fooexample.org. Avec cette configuration, Apache va effectuer une double recherche DNS sur l'adresse IP du client, sans tenir compte de la définition de la directive HostnameLookups. Il va effectuer une recherche DNS inverse sur l'adresse IP pour trouver le nom d'hôte associé, puis une recherche DNS directe sur le nom d'hôte pour vérifier qu'il correspond bien à l'adresse IP originale. L'accès ne sera accordé que si le nom d'hôte correspond et si les recherches DNS inverse et directe sont cohérentes.

    Require forward-dns

    Le fournisseur forward-dns permet d'accéder au serveur sécurisé en fonction de simples noms d'hôte. Lorsque Require forward-dns host-name est spécifié, toute adresse IP correspondant à host-name se voit autoriser l'accès.

    A la différence du fournisseur host, ce fournisseur n'effectue pas de recherche DNS inverse : il effectue simplement une requête DNS directe pour le nom d'hôte spécifié et donne accès au client si son adresse IP correspond. Il ne fonctionnera donc qu'avec des noms d'hôte, et non avec des noms de domaine. Par contre, comme le DNS inverse n'est pas sollicité, il fonctionnera avec des clients qui utilisent un service de DNS dynamique.

    Require forward-dns bla.example.org

    Un client dont l'adresse IP correspond au nom d'hôte bla.example.org se verra autoriser l'accès.

    Require local

    Le fournisseur local autorise l'accès au serveur si l'une au moins de ces conditions est satisfaite :

    • l'adresse IP du client correspond à 127.0.0.0/8
    • l'adresse IP du client est ::1
    • les adresses IP du client et du serveur sont identiques

    L'exemple suivant montre une méthode simple pour sélectionner les connexions en provenance de l'hôte local :

    Require local

    Note concernant la sécurité

    Si le contenu de votre serveur est mandaté, vous devez garder à l'esprit que l'adresse client correspondra à l'adresse de votre serveur mandataire et non à l'adresse du client, et l'utilisation de la directive Require dans ce contexte ne provoquera pas forcément l'effet désiré. Voir mod_remoteip pour une solution possible à ce problème.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_html.html.fr.utf80000644000000000000500000011453513412755316021465 0ustar rootsrc mod_proxy_html - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_proxy_html

    Langues Disponibles:  en  |  fr 

    Description:Réécrit les liens HTML afin de s'assurer qu'ils soient bien adressables depuis les réseaux des clients dans un contexte de mandataire.
    Statut:Base
    Identificateur de Module:proxy_html_module
    Fichier Source:mod_proxy_html.c
    Compatibilité:Disponible depuis la version 2.4 du serveur HTTP Apache. Disponible en tant que module tiers dans les versions 2.x antérieures

    Sommaire

    Ce module fournit un filtre en sortie permettant de réécrire les liens HTML dans un contexte de mandataire, afin de s'assurer que ces liens fonctionnent pour les utilisateurs en dehors du mandataire. Il accomplit la même tâche que la directive ProxyPassReverse d'Apache accomplit pour les en-têtes HTTP, et fait partie des composants essentiels d'un mandataire inverse.

    Par exemple, si une entreprise possède un serveur d'applications nommé appserver.example.com qui n'est visible que depuis son réseau interne, et un serveur web public www.example.com, il peut être souhaitable de fournir une passerelle vers le serveur d'application à l'adresse http://www.example.com/appserver/. Lorsque le serveur d'applications présente un lien vers lui-même, ce lien doit être réécrit pour fonctionner à travers la passerelle. A cet effet, mod_proxy_html permet de réécrire <a href="http://appserver.example.com/foo/bar.html">foobar</a> en <a href="http://www.example.com/appserver/foo/bar.html">foobar</a>, ce qui permet de rendre le serveur d'applications accessible depuis l'extérieur.

    mod_proxy_html a été développé à l'origine à WebÞing, dont la documentation détaillée pourra s'avérer utile aux utilisateurs.

    top

    Directive ProxyHTMLBufSize

    Description:Définit l'incrément de la taille du tampon, ainsi que sa taille initiale, pour la mise en tampon des scripts en ligne et des feuilles de style.
    Syntaxe:ProxyHTMLBufSize nb-octets
    Défaut:ProxyHTMLBufSize 8192
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_proxy_html
    Compatibilité:Disponible depuis la version 2.4 du serveur HTTP Apache. Disponible en tant que module tiers dans les versions 2.x antérieures.

    Pour pouvoir interpréter du contenu non HTML (feuilles de style et scripts) embarqué dans des documents HTML, mod_proxy_html doit le lire et le mémoriser en entier dans un tampon. Ce tampon devra être étendu autant que nécessaire afin de pouvoir accueillir le plus grand script ou la plus grande feuille de style de la page, selon un incrément de nb-octets que cette directive permet de définir.

    La valeur par défaut est 8192 et sera suffisante pour la plupart des pages. Cependant, si vous savez que vous allez mandater des pages contenant des feuilles de style et/ou scripts plus grands que 8k (cette taille s'entend pour chaque script ou feuilles de style, non pour leur ensemble), il sera plus efficace de définir une taille de tampon initiale plus grande afin d'éviter d'avoir à le redimensionner dynamiquement au cours du traitement d'une requête.

    top

    Directive ProxyHTMLCharsetOut

    Description:Spécifie un jeu de caractères pour la sortie de mod_proxy_html.
    Syntaxe:ProxyHTMLCharsetOut jeu-de-caractères | *
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_proxy_html
    Compatibilité:Disponible depuis la version 2.4 du serveur HTTP Apache. Disponible en tant que module tiers dans les versions 2.x antérieures.

    Cette directive permet de spécifier un jeu de caractères pour la sortie de mod_proxy_html. Elle ne devrait jamais être utilisée, car tout changement par rapport à la valeur par défaut UTF-8 (Unicode - utilisé en interne par libxml2) induit une charge supplémentaire de traitement. La définition spéciale ProxyHTMLCharsetOut * permet de générer une sortie qui utilisera le même encodage que l'entrée.

    Notez que tout ceci ne fonctionne que si le module mod_xml2enc est chargé.

    top

    Directive ProxyHTMLDocType

    Description:Définit une déclaration de type de document HTML ou XHTML.
    Syntaxe:ProxyHTMLDocType HTML|XHTML [Legacy]
    OR
    ProxyHTMLDocType fpi [SGML|XML]
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_proxy_html
    Compatibilité:Disponible depuis la version 2.4 du serveur HTTP Apache. Disponible en tant que module tiers dans les versions 2.x antérieures.

    Avec la première syntaxe, les documents seront déclarés de type HTML 4.01 ou XHTML 1.0 selon l'option spécifiée. Cette option détermine aussi si la syntaxe utilisée en sortie est HTML ou XHTML. Notez que le format des documents en provenance du serveur d'arrière-plan n'est pas important, car l'interpréteur le détectera automatiquement. Si le second argument optionnel est défini à Legacy, les documents seront déclarés de type "Transitional" ; cette option peut être nécessaire si vous mandatez du contenu datant d'avant 1998, ou si vous travaillez avec des outils de création/publication déficients.

    Avec la deuxième syntaxe, cette directive vous permet d'insérer votre propre FPI (Formal Public Identifier). Le second argument optionnel détermine si la syntaxe utilisée sera SGML/HTML ou XML/XHTML.

    Par défaut, aucun FPI n'est inséré, étant donné qu'il vaut mieux pas de FPI du tout qu'un FPI bogué. Si par contre votre serveur d'arrière-plan génère du contenu HTML ou XHTML correct, vous pouvez définir cette directive en conséquence.

    Avec la première syntaxe, mod_proxy_html va aussi mettre le code HTML en conformité avec le standard spécifié. Il ne pourra pas corriger toutes les erreurs, mais il va supprimer les éléments et attributs non conformes. Il peut aussi journaliser les autres erreurs si la directive LogLevel est définie à Debug.

    top

    Directive ProxyHTMLEnable

    Description:Permet d'activer/désactiver le filtre proxy_html.
    Syntaxe:ProxyHTMLEnable On|Off
    Défaut:ProxyHTMLEnable Off
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_proxy_html
    Compatibilité:Disponible depuis la version 2.4 du serveur HTTP Apache. Disponible en tant que module tiers dans les versions 2.x antérieures.

    Cette directive est un simple commutateur permettant d'activer/désactiver le filtre proxy_html. Si mod_xml2enc est chargé, elle va aussi activer automatiquement le support de l'internationalisation.

    Notez que le filtre proxy_html s'agira que si les données sont de type HTML (Content-Type text/html ou application/xhtml+xml), et si elles passent par un mandataire. Vous pouvez passer outre ces contraintes (à vos risques et périls) en définissant la variable d'environnement PROXY_HTML_FORCE.

    top

    Directive ProxyHTMLEvents

    Description:Spécifie les attributs à traiter comme des évènements de type scripting.
    Syntaxe:ProxyHTMLEvents attribut [attribut ...]
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_proxy_html
    Compatibilité:Disponible depuis la version 2.4 du serveur HTTP Apache. Disponible en tant que module tiers dans les versions 2.x antérieures.

    Cette directive permet de spécifier un ou plusieurs attributs à traiter comme des évènements de type scripting et de leur appliquer les règles ProxyHTMLURLMap lorsqu'elles ont été définies. Vous pouvez spécifier un nombre quelconque d'attributs dans une ou plusieurs directives ProxyHTMLEvents.

    Normalement, cette directive est définie globalement. Si vous définissez ProxyHTMLEvents à plusieurs niveaux, certains niveaux l'emportant sur d'autres, vous devrez spécifier un jeu complet d'évènements pour chaque niveau.

    Le fichier proxy-html.conf fournit une configuration par défaut et définit les évènements selon les standards HTML 4 et XHTML 1.

    top

    Directive ProxyHTMLExtended

    Description:Détermine si l'on doit corriger les liens dans les scripts en ligne, les feuilles de style et les évènements de type scripting.
    Syntaxe:ProxyHTMLExtended On|Off
    Défaut:ProxyHTMLExtended Off
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_proxy_html
    Compatibilité:Disponible depuis la version 2.4 du serveur HTTP Apache. Disponible en tant que module tiers dans les versions 2.x antérieures.

    Si cette directive est définie à Off, les liens HTML sont réécrits en fonction des directives ProxyHTMLURLMap, mais les liens qui apparaissent dans le code Javascript et les feuilles de style restent inchangés.

    Si elle est définie à On, tous les évènements de type scripting (définis par la directive ProxyHTMLEvents) et les scripts inclus ou les feuilles de style sont aussi traités par les règles ProxyHTMLURLMap, en fonction des drapeaux définis pour chacune d'entre elles. Ne définissez cette directive à On qu'en cas de nécessité absolue, car la charge supplémentaire induite impacte les performances.

    Vous devez aussi prêter attention aux modèles de comparaison, car l'interpréteur n'a aucune notion de la forme que pourrait prendre une URL dans un script embarqué ou une feuille de style. En particulier, la comparaison étendus du caractère / a de fortes chances d'induire des correspondances erronées.

    top

    Directive ProxyHTMLFixups

    Description:Corrige les erreurs HTML simples.
    Syntaxe:ProxyHTMLFixups [lowercase] [dospath] [reset]
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_proxy_html
    Compatibilité:Disponible depuis la version 2.4 du serveur HTTP Apache. Disponible en tant que module tiers dans les versions 2.x antérieures.

    Cette directive accepte un à trois arguments parmi les suivants :

    • lowercaseLes Urls sont réécrites en minuscules
    • dospathLes slashes inversés dans les URLs sont remplacés par des slashes directs.
    • resetAnnule toute option définie à un niveau supérieur dans la configuration

    Cette directive doit être utilisée avec prudence. Elle peut corriger certaines erreurs de création, mais risque aussi de modifier par erreur des liens corrects. Ne l'utilisez que si vous êtes sûr que le serveur d'arrière-plan est déficient.

    top

    Directive ProxyHTMLInterp

    Description:Active la réinterprétation des règles ProxyHTMLURLMap pour chaque requête.
    Syntaxe:ProxyHTMLInterp On|Off
    Défaut:ProxyHTMLInterp Off
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_proxy_html
    Compatibilité:Disponible depuis la version 2.4 du serveur HTTP Apache. Disponible en tant que module tiers dans les versions 2.x antérieures.

    Cette directive permet d'activer le réinterprétation pour chaque requête des modèles source et cible de la directive ProxyHTMLURLMap.

    Si la réinterprétation n'est pas activée, toutes les règles sont précompilées au démarrage du serveur. Si elle est activée, les règles doivent être recompilées pour chaque requête, ce qui induit une charge de traitement supplémentaire. Elle ne doit donc être activée que si cela s'avère nécessaire.

    top

    Directive ProxyHTMLLinks

    Description:Spécifie les éléments HTML dont les attributs d'URL doivent être réécrits.
    Syntaxe:ProxyHTMLLinks élément attribut [attribut2 ...]
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_proxy_html
    Compatibilité:Disponible depuis la version 2.4 du serveur HTTP Apache. Disponible en tant que module tiers dans les versions 2.x antérieures.

    Cette directive permet de spécifier les éléments dont les attributs d'URL doivent être réécrits en utilisant les règles standards ProxyHTMLURLMap. Vous devez définir une directive ProxyHTMLLinks pour chaque élément, mais chacune d'entre elles peut spécifier un nombre quelconque d'attributs

    Normalement, cette directive est définie globalement. Si vous définissez ProxyHTMLLinks à plusieurs niveaux, certains niveaux l'emportant sur d'autres, vous devrez spécifier un jeu complet de liens pour chaque niveau.

    Le fichier proxy-html.conf fournit une configuration par défaut et définit les liens HTML selon les standards HTML 4 et XHTML 1.

    Exemples issus de proxy-html.conf

    ProxyHTMLLinks  a          href
    ProxyHTMLLinks  area       href
    ProxyHTMLLinks  link       href
    ProxyHTMLLinks  img        src longdesc usemap
    ProxyHTMLLinks  object     classid codebase data usemap
    ProxyHTMLLinks  q          cite
    ProxyHTMLLinks  blockquote cite
    ProxyHTMLLinks  ins        cite
    ProxyHTMLLinks  del        cite
    ProxyHTMLLinks  form       action
    ProxyHTMLLinks  input      src usemap
    ProxyHTMLLinks  head       profile
    ProxyHTMLLinks  base       href
    ProxyHTMLLinks  script     src for
    top

    Directive ProxyHTMLMeta

    Description:Active ou désactive une préinterprétation supplémentaire des métadonnées dans les sections HTML <head>.
    Syntaxe:ProxyHTMLMeta On|Off
    Défaut:ProxyHTMLMeta Off
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_proxy_html
    Compatibilité:Disponible à partir de la version 2.4 du serveur HTTP Apache ; proposé en tant que module tiers dans les versions 2.x précédentes.

    Cette directive permet d'activer ou désactiver une préinterprétation supplémentaire des métadonnées dans les sections HTML <head>. Si cette préinterprétation n'est pas requise, définissez ProxyHTMLMeta à Off et les performances seront légèrement améliorées. Cependant, elle s'avère parfois nécessaire pour assurer un fonctionnement correct de l'internationalisation.

    La directive ProxyHTMLMeta a deux effets. Le premier et le plus important est la détection des codages de caractères déclarés sous la forme

    <meta http-equiv="Content-Type" content="text/html;charset=foo">

    ou, dans le cas d'un document XHTML, sous la forme d'une déclaration XML. Elle n'est pas nécessaire si le jeu de caractères est déclaré explicitement dans un en-tête HTTP (ce qui est préférable) en provenance du serveur d'arrière-plan, ou si le document est en utf-8 (unicode) ou un de ses sous-ensembles comme ASCII. Vous pourrez aussi vous en passer lorsque le document utilise une valeur par défaut déclarée via la directive xml2EncDefault, avec le risque de propager une déclaration incorrecte. Une directive ProxyHTMLCharsetOut permettra d'annuler ce risque, mais pourra induire une surcharge de traitement supérieure à celle de ProxyHTMLMeta.

    Le deuxième effet est l'interprétation de toutes les déclarations <meta http-equiv=...> et leur conversion en en-têtes HTTP, afin de conserver le but original de cette forme de métaélément HTML.

    Avertissement

    Compte tenu du fait que la directive ProxyHTMLMeta promeut tous les éléments http-equiv au rang d'en-têtes HTTP, il est conseillé de ne l'activer que si vous faites autant confiance au contenu HTML qu'à votre serveur mandataire. Avec cette directive en effet, si ce contenu est géré par des gens malintentionnés, ces derniers seront en mesure d'injecter des en-têtes HTTP arbitraires et peut-être malveillants dans les réponses de votre serveur.
    top

    Directive ProxyHTMLStripComments

    Description:Détermine si les commentaires HTML doivent être supprimés.
    Syntaxe:ProxyHTMLStripComments On|Off
    Défaut:ProxyHTMLStripComments Off
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_proxy_html
    Compatibilité:Disponible depuis la version 2.4 du serveur HTTP Apache. Disponible en tant que module tiers dans les versions 2.x antérieures.

    Si cette directive est définie à On, mod_proxy_html supprimera les commentaires HTML. Notez que cela supprimera aussi tout script ou style inclus dans les commentaires (une monstruosité introduite en 1995/1996 avec Netscape 2 pour les navigateurs plus anciens, et encore utilisée de nos jours). Cette directive peut aussi interférer avec des processeurs basés sur les commentaires comme SSI ou ESI : assurez-vous d'exécuter ces derniers avant mod_proxy_html dans la chaîne de filtrage si vous supprimez les commentaires !

    top

    Directive ProxyHTMLURLMap

    Description:Définit une règle de réécriture des liens HTML
    Syntaxe:ProxyHTMLURLMap modèle-source modèle-cible [drapeaux] [cond]
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Base
    Module:mod_proxy_html
    Compatibilité:Disponible depuis la version 2.4 du serveur HTTP Apache. Disponible en tant que module tiers dans les versions 2.x antérieures.

    Il s'agit de la directive la plus importante pour la réécriture des liens HTML. Lors de l'interprétation d'un document, chaque fois qu'un lien correspond à modèle-source, la partie du lien concernée sera réécrite en modèle-cible, en tenant compte des modifications induites par les drapeaux éventuellement spécifiés et par la directive ProxyHTMLExtended. Ne seront considérés comme des liens HTML que les éléments spécifiés via la directive ProxyHTMLLinks.

    Le troisième argument optionnel permet de définir un des drapeaux suivants (les drapeaux sont sensibles à la casse) :

    h

    Ignore les liens HTML (les traverse sans les modifier)

    e

    Ignore les évènements de scripting (les traverse sans les modifier)

    c

    Traverse les sections de type style ou script sans les modifier.

    L

    Last-match. Si cette règle s'applique, aucune autre règle ne sera prise en compte (notez qu'il s'agit du comportement automatique pour les liens HTML).

    l

    L'opposé de L. Passe outre le comportement par défaut du changement unique pour les liens HTML.

    R

    Utilise des expressions rationnelles pour les modèles. modèle-source est une expression rationnelle, et modèle-cible une chaîne de remplacement qui peut être basée elle aussi sur une expression rationnelle. La mémorisation dans les expressions rationnelles est supportée : vous pouvez utiliser des parenthèses () dans le modèle-source, et récupérer la correspondance de leur contenu via les variables $1 à $9 dans le modèle-cible.

    Si le drapeau R n'est pas fourni, la directive utilisera des chaînes littérales pour les différents modèles de recherche/remplacement. La logique de recherche est "commence par" dans les liens HTML, et "contient" dans les évènements de scripting et les sections de type style ou script.

    x

    Utilise les expressions rationnelles étendues POSIX. Ne s'applique qu'avec R.

    i

    Recherche de correspondance sensible à la casse. Ne s'applique qu'avec R.

    n

    Désactive la mémorisation dans les expressions rationnelles (pour améliorer les performances). Ne s'applique qu'avec R.

    s

    Recherche de correspondance dans les expressions rationnelles basée sur la ligne. Ne s'applique qu'avec R.

    ^

    Recherche de correspondance au début seulement. Ne concerne que les recherches de correspondance par rapport à des chaînes, et ne s'applique pas aux liens HTML.

    $

    Recherche de correspondance à la fin seulement. Ne concerne que les recherches de correspondance par rapport à des chaînes, et ne s'applique pas aux liens HTML.

    V

    Insère des variables d'environnement dans le modèle-cible. Un modèle-cible de la forme ${varname|default} sera remplacé par la valeur de la variable d'environnement varname. Si cette dernière n'est pas définie, modèle-cible sera remplacé par default. La spécification de |default est facultative.

    NOTE: l'insertion de variables d'environnement n'est possible que si la directive ProxyHTMLInterp a été définie à On.

    v

    Insère des variables d'environnement dans le modèle-source. La syntaxe du modèle est identique à la syntaxe précédente.

    NOTE: l'insertion de variables d'environnement n'est possible que si la directive ProxyHTMLInterp a été définie à On.

    Le quatrième argument optionnel cond définit une condition qui sera évaluée pour chaque requête, sous réserve que la directive ProxyHTMLInterp ait été définie à On. Si la condition est évaluée à FALSE, la règle ne sera pas appliquée à la requête. Si elle est évaluée à TRUE, ou si aucune condition n'est définie, la règle s'applique.

    La condition est évaluée par l'interpréteur d'expression. La syntaxe simple des conditions dans mod_proxy_html 3.x pour HTTPD 2.0 et 2.2 est aussi supportée.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/directive-dict.html.en0000644000000000000500000004346013412755316020424 0ustar rootsrc Terms Used to Describe Directives - Apache HTTP Server Version 2.4
    <-

    Terms Used to Describe Directives

    Available Languages:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    This document describes the terms that are used to describe each Apache configuration directive.

    top

    Description

    A brief description of the purpose of the directive.

    top

    Syntax

    This indicates the format of the directive as it would appear in a configuration file. This syntax is extremely directive-specific, and is described in detail in the directive's definition. Generally, the directive name is followed by a series of one or more space-separated arguments. If an argument contains a space, the argument must be enclosed in double quotes. Optional arguments are enclosed in square brackets. Where an argument can take on more than one possible value, the possible values are separated by vertical bars "|". Literal text is presented in the default font, while argument-types for which substitution is necessary are emphasized. Directives which can take a variable number of arguments will end in "..." indicating that the last argument is repeated.

    Directives use a great number of different argument types. A few common ones are defined below.

    URL
    A complete Uniform Resource Locator including a scheme, hostname, and optional pathname as in http://www.example.com/path/to/file.html
    URL-path
    The part of a url which follows the scheme and hostname as in /path/to/file.html. The url-path represents a web-view of a resource, as opposed to a file-system view.
    file-path
    The path to a file in the local file-system beginning with the root directory as in /usr/local/apache/htdocs/path/to/file.html. Unless otherwise specified, a file-path which does not begin with a slash will be treated as relative to the ServerRoot.
    directory-path
    The path to a directory in the local file-system beginning with the root directory as in /usr/local/apache/htdocs/path/to/.
    filename
    The name of a file with no accompanying path information as in file.html.
    regex
    A Perl-compatible regular expression. The directive definition will specify what the regex is matching against.
    extension
    In general, this is the part of the filename which follows the last dot. However, Apache recognizes multiple filename extensions, so if a filename contains more than one dot, each dot-separated part of the filename following the first dot is an extension. For example, the filename file.html.en contains two extensions: .html and .en. For Apache directives, you may specify extensions with or without the leading dot. In addition, extensions are not case sensitive.
    MIME-type
    A method of describing the format of a file which consists of a major format type and a minor format type, separated by a slash as in text/html.
    env-variable
    The name of an environment variable defined in the Apache configuration process. Note this is not necessarily the same as an operating system environment variable. See the environment variable documentation for more details.
    top

    Default

    If the directive has a default value (i.e., if you omit it from your configuration entirely, the Apache Web server will behave as though you set it to a particular value), it is described here. If there is no default value, this section should say "None". Note that the default listed here is not necessarily the same as the value the directive takes in the default httpd.conf distributed with the server.

    top

    Context

    This indicates where in the server's configuration files the directive is legal. It's a comma-separated list of one or more of the following values:

    server config
    This means that the directive may be used in the server configuration files (e.g., httpd.conf), but not within any <VirtualHost> or <Directory> containers. It is not allowed in .htaccess files at all.
    virtual host
    This context means that the directive may appear inside <VirtualHost> containers in the server configuration files.
    directory
    A directive marked as being valid in this context may be used inside <Directory>, <Location>, <Files>, <If>, and <Proxy> containers in the server configuration files, subject to the restrictions outlined in Configuration Sections.
    .htaccess
    If a directive is valid in this context, it means that it can appear inside per-directory .htaccess files. It may not be processed, though depending upon the overrides currently active.

    The directive is only allowed within the designated context; if you try to use it elsewhere, you'll get a configuration error that will either prevent the server from handling requests in that context correctly, or will keep the server from operating at all -- i.e., the server won't even start.

    The valid locations for the directive are actually the result of a Boolean OR of all of the listed contexts. In other words, a directive that is marked as being valid in "server config, .htaccess" can be used in the httpd.conf file and in .htaccess files, but not within any <Directory> or <VirtualHost> containers.

    top

    Override

    This directive attribute indicates which configuration override must be active in order for the directive to be processed when it appears in a .htaccess file. If the directive's context doesn't permit it to appear in .htaccess files, then no context will be listed.

    Overrides are activated by the AllowOverride directive, and apply to a particular scope (such as a directory) and all descendants, unless further modified by other AllowOverride directives at lower levels. The documentation for that directive also lists the possible override names available.

    top

    Status

    This indicates how tightly bound into the Apache Web server the directive is; in other words, you may need to recompile the server with an enhanced set of modules in order to gain access to the directive and its functionality. Possible values for this attribute are:

    Core
    If a directive is listed as having "Core" status, that means it is part of the innermost portions of the Apache Web server, and is always available.
    MPM
    A directive labeled as having "MPM" status is provided by a Multi-Processing Module. This type of directive will be available if and only if you are using one of the MPMs listed on the Module line of the directive definition.
    Base
    A directive labeled as having "Base" status is supported by one of the standard Apache modules which is compiled into the server by default, and is therefore normally available unless you've taken steps to remove the module from your configuration.
    Extension
    A directive with "Extension" status is provided by one of the modules included with the Apache server kit, but the module isn't normally compiled into the server. To enable the directive and its functionality, you will need to change the server build configuration files and re-compile Apache.
    Experimental
    "Experimental" status indicates that the directive is available as part of the Apache kit, but you're on your own if you try to use it. The directive is being documented for completeness, and is not necessarily supported. The module which provides the directive may or may not be compiled in by default; check the top of the page which describes the directive and its module to see if it remarks on the availability.
    top

    Module

    This quite simply lists the name of the source module which defines the directive.

    top

    Compatibility

    If the directive wasn't part of the original Apache version 2 distribution, the version in which it was introduced should be listed here. In addition, if the directive is available only on certain platforms, it will be noted here.

    Available Languages:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/core.html.ja.utf80000644000000000000500000076152613521115051017327 0ustar rootsrc core - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache コア機能

    翻訳済ã¿è¨€èªž:  de  |  en  |  es  |  fr  |  ja  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:常ã«ä½¿ç”¨å¯èƒ½ãª Apache HTTP サーãƒã®ã‚³ã‚¢æ©Ÿèƒ½
    ステータス:Core
    top

    AcceptFilter ディレクティブ

    説明:プロトコルを Listen ã—ã¦ã„ã‚‹ã‚½ã‚±ãƒƒãƒˆã®æœ€é©åŒ–を設定ã™ã‚‹
    æ§‹æ–‡:AcceptFilter protocol accept_filter
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:2.1.5 以é™

    Listen ã—ã¦ã„るソケットã«å¯¾ã—ã¦ã€OS ãŒå›ºæœ‰ã«æŒã£ã¦ã„るプロトコルã«ã¤ã„ã¦ã®æœ€é©åŒ–ã‚’ 有効ã«ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§ã™ã€‚大剿ã¨ãªã‚‹æ¡ä»¶ã¯ã€ãƒ‡ãƒ¼ã‚¿ãŒå—ä¿¡ã•れる㋠HTTP リクエスト全体ãŒãƒãƒƒãƒ•ã‚¡ã•れるã‹ã™ã‚‹ã¾ã§ã€ã‚«ãƒ¼ãƒãƒ«ãŒã‚µãƒ¼ãƒãƒ—ロセス㫠ソケットをé€ã‚‰ãªã„よã†ã«ãªã£ã¦ã„ã‚‹ã€ã¨ã„ã†ã“ã¨ã§ã™ã€‚ç¾åœ¨ã‚µãƒãƒ¼ãƒˆã•れã¦ã„ã‚‹ã®ã¯ã€ FreeBSD ã® Accept Filter 㨠Linux ã®ãƒ—リミティブ㪠TCP_DEFER_ACCEPT ã®ã¿ã§ã™ã€‚

    FreeBSD ã®ãƒ‡ãƒ•ォルト値㯠:

    AcceptFilter http httpready
    AcceptFilter https dataready

    httpready Accept Filter 㯠HTTP リクエスト全体を〠カーãƒãƒ«ãƒ¬ãƒ™ãƒ«ã§ãƒãƒƒãƒ•ァリングã—ã¾ã™ã€‚リクエスト全体をå—ä¿¡ã—終ã‚ã‚‹ã¨ã€ ãã®å¾Œã‚µãƒ¼ãƒãƒ—ロセスã«ãれをé€ã‚Šã¾ã™ã€‚詳細ã«ã¤ã„ã¦ã¯ accf_http(9) ã‚’å‚ç…§ã—ã¦ãã ã•ã„。HTTPS ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯æš—å·åŒ–ã•れã¦ã„ã‚‹ã®ã§ accf_data(9) フィルタã®ã¿ãŒä½¿ç”¨ã•れã¾ã™ã€‚

    Linux ã§ã®ãƒ‡ãƒ•ォルト値㯠:

    AcceptFilter http data
    AcceptFilter https data

    Linux ã® TCP_DEFER_ACCEPT 㯠HTTP リクエストã®ãƒãƒƒãƒ•ァリングを サãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã›ã‚“。none 以外ã®å€¤ã§ TCP_DEFER_ACCEPT ãŒæœ‰åйã«ãªã‚Šã¾ã™ã€‚詳細ã«ã¤ã„ã¦ã¯ Linux man ページ tcp(7) ã‚’å‚ç…§ã—ã¦ãã ã•ã„。

    引数㫠none を指定ã™ã‚‹ã¨ã€ãƒ—ロトコルã«å¯¾ã™ã‚‹å…¨ã¦ã® Accept Filter ãŒç„¡åйã«ãªã‚Šã¾ã™ã€‚nntp ã¨ã„ã£ãŸã€å…ˆã«ã‚µãƒ¼ãƒã«ãƒ‡ãƒ¼ã‚¿ã‚’ é€ã‚‹å¿…è¦ã®ã‚ã‚‹ãƒ—ãƒ­ãƒˆã‚³ãƒ«ã«æœ‰åйã§ã™ :

    AcceptFilter nntp none

    top

    AcceptPathInfo ディレクティブ

    説明:後ã«ç¶šããƒ‘ã‚¹åæƒ…報をå—ã‘付ã‘ã‚‹ãƒªã‚½ãƒ¼ã‚¹ã®æŒ‡å®š
    æ§‹æ–‡:AcceptPathInfo On|Off|Default
    デフォルト:AcceptPathInfo Default
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Apache 2.0.30 以é™ã§ä½¿ç”¨å¯èƒ½

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯å®Ÿéš›ã®ãƒ•ァイルå (ã‚‚ã—ãã¯å­˜åœ¨ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã® 存在ã—ãªã„ファイル) ã®å¾Œã«ç¶šããƒ‘ã‚¹åæƒ…å ±ãŒã‚るリクエストをå—ã‘付ã‘ã‚‹ã‹ æ‹’å¦ã™ã‚‹ã‹ã‚’制御ã—ã¾ã™ã€‚ç¶šãã®ãƒ‘ã‚¹åæƒ…å ±ã¯ã‚¹ã‚¯ãƒªãƒ—トã«ã¯ PATH_INFO 環境変数ã¨ã—ã¦åˆ©ç”¨å¯èƒ½ã«ãªã‚Šã¾ã™ã€‚

    例ãˆã°ã€/test/ ãŒã€here.html ã¨ã„ã†ãƒ•ァイル 一ã¤ã®ã¿ãŒã‚るディレクトリを指ã—ã¦ã„ã‚‹ã¨ã—ã¾ã™ã€‚ãã†ã™ã‚‹ã¨ã€ /test/here.html/more 㨠/test/nothere.html/more ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ä¸¡æ–¹ã¨ã‚‚ /more ã‚’ PATH_INFO ã¨ã—ã¾ã™ã€‚

    AcceptPathInfo ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«æŒ‡å®šå¯èƒ½ãª 三ã¤ã®å¼•æ•°ã¯:

    Off
    リクエストã¯å­˜åœ¨ã™ã‚‹ãƒ‘スã«ãã®ã¾ã¾ マップã•れる場åˆã«ã®ã¿å—ã‘付ã‘られã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€ä¸Šã®ä¾‹ã® /test/here.html/more ã®ã‚ˆã†ã«ã€æœ¬å½“ã®ãƒ•ァイルå㮠後ã«ãƒ‘ã‚¹åæƒ…å ±ãŒç¶šãリクエストã«ã¯ 404 NOT FOUND エラーãŒè¿”りã¾ã™ã€‚
    On
    å‰ã®æ–¹ã®ãƒ‘スãŒå­˜åœ¨ã™ã‚‹ãƒ•ァイルã«ãƒžãƒƒãƒ—ã™ã‚‹å ´åˆã¯ リクエストãŒå—ã‘付ã‘られã¾ã™ã€‚上ã®ä¾‹ã® /test/here.html/more 㯠/test/here.html ãŒæœ‰åйãªãƒ•ァイルã«ãƒžãƒƒãƒ—ã™ã‚Œã° å—ã‘付ã‘られã¾ã™ã€‚
    Default
    ç¶šãã®ãƒ‘ã‚¹åæƒ…å ±ã®æ‰±ã„ã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã® ãƒãƒ³ãƒ‰ãƒ©ã§æ±ºã¾ã‚Šã¾ã™ã€‚ 普通ã®ãƒ•ァイルã®ãŸã‚ã®ã‚³ã‚¢ãƒãƒ³ãƒ‰ãƒ©ã®ãƒ‡ãƒ•ォルト㯠PATH_INFO ã‚’æ‹’å¦ã—ã¾ã™ã€‚ cgi-script ã‚„ isapi-handler ã®ã‚ˆã†ã«ã‚¹ã‚¯ãƒªãƒ—トを扱ã†ãƒãƒ³ãƒ‰ãƒ©ã¯ 一般的ã«ãƒ‡ãƒ•ォルト㧠PATH_INFO ã‚’å—ã‘付ã‘ã¾ã™ã€‚

    AcceptPathInfo ã®ä¸»ãªç›®çš„ã¯ãƒãƒ³ãƒ‰ãƒ©ã® PATH_INFO ã‚’ å—ã‘付ã‘ã‚‹ã‹æ‹’å¦ã™ã‚‹ã‹ã®é¸æŠžã‚’上書ãã§ãるよã†ã«ã™ã‚‹ã“ã¨ã§ã™ã€‚ 例ãˆã°ã€ã“れã¯ä¾‹ãˆã° INCLUDES ã®ã‚ˆã†ãª フィルタを使ã£ã¦ PATH_INFO 㫠基ã¥ã„ã¦ã‚³ãƒ³ãƒ†ãƒ³ãƒ„を生æˆã—ã¦ã„ã‚‹ã¨ãã«å¿…è¦ã«ãªã‚Šã¾ã™ã€‚ コアãƒãƒ³ãƒ‰ãƒ©ã§ã¯é€šå¸¸æ‹’å¦ã•れるã®ã§ã€ãã†ã„ã£ãŸã‚¹ã‚¯ãƒªãƒ—トを動作ã•ã›ã‚‹ã«ã¯ 次ã®ã‚ˆã†ãªè¨­å®šã‚’使ã„ã¾ã™ã€‚

    <Files "mypaths.shtml">
    Options +Includes
    SetOutputFilter INCLUDES
    AcceptPathInfo On
    </Files>

    top

    AccessFileName ディレクティブ

    説明:分散設定ファイルã®åå‰
    æ§‹æ–‡:AccessFileName filename [filename] ...
    デフォルト:AccessFileName .htaccess
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    リクエストを処ç†ã™ã‚‹ã¨ãã€ã‚µãƒ¼ãƒã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã« 対ã—ã¦åˆ†æ•£è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ãŒæœ‰åйã«ãªã£ã¦ã„れã°ã€ ãã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã¸ã® パス上ã«ã‚ã‚‹å…¨ã¦ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‹ã‚‰ã€ã“ã“ã§æŒ‡å®šã•れãŸåå‰ã®ä¸€è¦§ã®ä¸­ã§ 最åˆã«è¦‹ã¤ã‹ã£ãŸãƒ•ァイルをãれãžã‚Œè¨­å®šãƒ•ァイルã¨ã—ã¦èª­ã¿è¾¼ã¿ã¾ã™ã€‚例ãˆã°:

    AccessFileName .acl

    ã¨ã„ã†è¨­å®šãŒã‚ã‚‹ã¨ã€ä»¥ä¸‹ã®ã‚ˆã†ã«ã—ã¦ç„¡åйã«ã•れã¦ã„ãªã„é™ã‚Šã€ ドキュメント /usr/local/web/index.html ã‚’è¿”ã™å‰ã«ã€ã‚µãƒ¼ãƒã¯ /.acl, /usr/.acl, /usr/local/.acl, /usr/local/web/.acl ã‹ã‚‰ ディレクティブを読ã¿è¾¼ã¿ã¾ã™ã€‚

    <Directory />
    AllowOverride None
    </Directory>

    å‚ç…§

    top

    AddDefaultCharset ディレクティブ

    説明:レスãƒãƒ³ã‚¹ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—㌠text/plain ã‚ã‚‹ã„㯠text/html ã®å ´åˆã«è¿½åŠ ã™ã‚‹ãƒ‡ãƒ•ォルト㮠charset パラメータ
    æ§‹æ–‡:AddDefaultCharset On|Off|charset
    デフォルト:AddDefaultCharset Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Core
    モジュール:core

    レスãƒãƒ³ã‚¹ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—㌠text/plain ã‚ã‚‹ã„㯠text/html ã®å ´åˆã«é™ã‚Šã¾ã™ãŒã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã«è¿½åŠ ã™ã‚‹ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã®æ–‡å­—セットパラメータ (文字エンコーディングã®åå‰) ã®ãƒ‡ãƒ•ォルト値をã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã—ã¾ã™ã€‚ ã“れã¯ãƒ¬ã‚¹ãƒãƒ³ã‚¹ (訳注: レスãƒãƒ³ã‚¹ã® HTML) 内㧠META è¦ç´ ã§æŒ‡å®šã•れãŸã€ã©ã®ã‚ˆã†ãªæ–‡å­—セットも無効ã«ã—ã¾ã™ãŒã€ æœ€çµ‚çš„ãªæŒ™å‹•ã¯ãƒ¦ãƒ¼ã‚¶ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã®è¨­å®šã§æ±ºã¾ã‚Šã¾ã™ã€‚ ã“ã®æ©Ÿèƒ½ã¯ AddDefaultCharset Off ã¨ã„ã†è¨­å®šã§ç„¡åйã«ãªã‚Šã¾ã™ã€‚ AddDefaultCharset On ã«ã™ã‚Œã°ã€ Apache 内部ã®ãƒ‡ãƒ•ォルト文字セット iso-8859-1 ã«è¨­å®šã•れã¾ã™ã€‚ ãã®ä»– charset ã«æŒ‡å®šã§ãる値ã§ã‚れã°ã€ã©ã‚“ãªå€¤ã§ã‚‚使ãˆã¾ã™ã€‚ 指定ã™ã‚‹å€¤ã¯ã€MIME メディアタイプã¨ã—ã¦ä½¿ã‚れる IANA ã«ç™»éŒ²ã•れã¦ã„る文字セットåã®ã†ã¡ã®ä¸€ã¤ã«ã™ã¹ãã§ã™ã€‚ 例ãˆã°:

    AddDefaultCharset utf-8

    AddDefaultCharset を使ã†ã¨ãã¯ã€å…¨ã¦ã®ãƒ†ã‚­ã‚¹ãƒˆãƒªã‚½ãƒ¼ã‚¹ãŒ 指定ã™ã‚‹æ–‡å­—エンコードã«ãªã£ã¦ã„ã‚‹ã¨åˆ†ã‹ã£ã¦ã„ã¦ã€ã‹ã¤ã€ リソースã®å€‹ã€…ã«æ–‡å­—セットを指定ã™ã‚‹ã®ãŒå¤§å¤‰ãªå ´åˆã®ã¿ã§ã™ã€‚ 例を挙ã’ã‚‹ã¨ã€ãƒ¬ã‚¬ã‚·ãƒ¼ãª CGI スクリプトãªã©ã®ã€å‹•çš„ã«ç”Ÿæˆã•れる コンテンツをå«ã‚€ãƒªã‚½ãƒ¼ã‚¹ã«æ–‡å­—セットパラメータを追加ã™ã‚‹å ´åˆã§ã€ ユーザã®å…¥åŠ›ãƒ‡ãƒ¼ã‚¿ãŒå‡ºåŠ›ã«å…¥ã‚Šã€ã‚¯ãƒ­ã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ティング㌠引ãèµ·ã“ã•れã†ã‚‹å ´åˆã§ã™ã€‚デフォルト文字セットをセットã—ãŸã¨ã—ã¦ã‚‚〠ブラウザ㮠"文字エンコードã®è‡ªå‹•é¸æŠž" æ©Ÿèƒ½ãŒæœ‰åйã«ãªã£ã¦ã„るユーザを 守るã“ã¨ã«ã¯ãªã‚‰ãªã„ã®ã§ã€ã‚‚ã¡ã‚んより良ã„解決策ã¯å˜ã«ã‚¹ã‚¯ãƒªãƒ—トを修正 (ã‚ã‚‹ã„ã¯å‰Šé™¤) ã™ã‚‹ã“ã¨ã§ã™ã€‚

    å‚ç…§

    top

    AllowEncodedSlashes ディレクティブ

    説明:URL 中ã®ç¬¦å·åŒ–ã•れãŸãƒ‘ス分離文字ãŒå…ˆã«ä¼ãˆã‚‰ã‚Œã‚‹ã®ã‚’許å¯ã™ã‚‹ã‹ã©ã†ã‹ã‚’ 決定ã™ã‚‹
    æ§‹æ–‡:AllowEncodedSlashes On|Off
    デフォルト:AllowEncodedSlashes Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Apache 2.0.46 以é™ã§ä½¿ç”¨å¯èƒ½

    AllowEncodedSlashes ディレクティブã¯ç¬¦å·åŒ–ã•れ㟠パス分離文字 (/ 㯠%2Fã€ã•らã«ã‚·ã‚¹ãƒ†ãƒ ã«ã‚ˆã£ã¦ã¯ \ ã«å¯¾å¿œã™ã‚‹ %5C) ãŒå­˜åœ¨ã™ã‚‹ URL ã®ä½¿ç”¨ã‚’ 許å¯ã™ã‚‹ã‹ã©ã†ã‹ã‚’決定ã—ã¾ã™ã€‚通常ã¯ãã®ã‚ˆã†ãª URL 㯠404 (Not found) エラー ã§æ‹’å¦ã•れã¾ã™ã€‚

    AllowEncodedSlashes On ã«ã‚ˆã‚‹ パス分離文字ã®ä½¿ç”¨ã¯ã€PATH_INFO ã¨åˆã‚ã›ã¦ 使ã†ã¨ãã«ä¸€ç•ªå½¹ã«ç«‹ã¡ã¾ã™ã€‚

    注

    符å·åŒ–ã•れãŸã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã‚’許å¯ã™ã‚‹ã“ã¨ã¯ã€å¾©å·ã‚’ã™ã‚‹ã“ã¨ã‚’ æ„味ã—ã¾ã›ã‚“。%2F ã‚„ (関係ã™ã‚‹ã‚·ã‚¹ãƒ†ãƒ ã§ã®) %5C ã¯ã€ä»–ã®éƒ¨åˆ†ãŒå¾©å·ã•れ㟠URL ã®ä¸­ã§ã‚‚ãã®ã¾ã¾ã®å½¢å¼ã§ 残ã•れã¾ã™ã€‚

    å‚ç…§

    top

    AllowOverride ディレクティブ

    説明:.htaccess ã§è¨±å¯ã•れるディレクティブã®ç¨®é¡ž
    æ§‹æ–‡:AllowOverride All|None|directive-type [directive-type] ...
    デフォルト:AllowOverride All
    コンテキスト:ディレクトリ
    ステータス:Core
    モジュール:core

    サーãƒãŒ (AccessFileName ã«ã‚ˆã£ã¦æŒ‡å®šã•れãŸ) .htaccess ファイルを見ã¤ã‘ãŸæ™‚ã€ãã®ãƒ•ァイルã®ä¸­ã§ 宣言ã•れãŸã©ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒã‚ˆã‚Šå‰ã«å®šç¾©ã•れãŸè¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ 上書ãã§ãã‚‹ã‹ã‚’知る必è¦ãŒã‚りã¾ã™ã€‚

    <Directory> セクションã§ã®ã¿ä½¿ç”¨å¯èƒ½

    AllowOverride ã¯æ­£è¦è¡¨ç¾ç„¡ã—ã®<Directory> セクションã§ã®ã¿æœ‰åйã§ã€<Location> ã‚„ <DirectoryMatch> ã‚„ <Files> セクションã§ã¯ç„¡åйã§ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ None ã«è¨­å®šã™ã‚‹ã¨ã€.htaccess ファイルã¯å®Œå…¨ã« 無視ã•れã¾ã™ã€‚ ã“ã®å ´åˆã€ã‚µãƒ¼ãƒã¯ãƒ•ァイルシステム㮠.htaccess ファイルを読むã“ã¨ã‚’ 試ã¿ã•ãˆã—ã¾ã›ã‚“。

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㌠All ã«è¨­å®šã•れã¦ã„る時ã«ã¯ã€ .htaccess ã¨ã„ㆠコンテキスト ã‚’æŒã¤ å…¨ã¦ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒåˆ©ç”¨ã§ãã¾ã™ã€‚

    directive-type ã«ã¯ã€ä»¥ä¸‹ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–群㮠キーワードã®ã©ã‚Œã‹ã‚’指定ã—ã¾ã™ã€‚

    AuthConfig
    èªè¨¼ã«é–¢ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®ä½¿ç”¨ã‚’許å¯ã™ã‚‹ (AuthDBMGroupFile, AuthDBMUserFile, AuthGroupFile, AuthName, AuthType, AuthUserFile, Require ãªã©)。
    FileInfo
    ドキュメントタイプを制御ã™ã‚‹ãŸã‚ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®ä½¿ç”¨ã‚’許å¯ã™ã‚‹ (DefaultType, ErrorDocument, ForceType, LanguagePriority, SetHandler, SetInputFilter, SetOutputFilter, mod_mime ã® Add* 㨠Remove* ディレクティブãªã©), ドキュメントã®ãƒ¡ã‚¿ãƒ‡ãƒ¼ã‚¿ (Header, RequestHeader, SetEnvIf, SetEnvIfNoCase, BrowserMatch, CookieExpires, CookieDomain, CookieStyle, CookieTracking, CookieName), mod_rewrite ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ– RewriteEngine, RewriteOptions, RewriteBase, RewriteCond, RewriteRule) 㨠mod_actions ã® Action ディレクティブ。
    Indexes
    ディレクトリインデックスを制御ã™ã‚‹ãŸã‚ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®ä½¿ç”¨ã‚’許å¯ã™ã‚‹ (AddDescription, AddIcon, AddIconByEncoding, AddIconByType, DefaultIcon, DirectoryIndex, FancyIndexing, HeaderName, IndexIgnore, IndexOptions, ReadmeName ãªã©)。
    Limit
    ホストã¸ã®ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã‚’行ã†ãŸã‚ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®ä½¿ç”¨ã‚’許å¯ã™ã‚‹ (Allow, Deny, Order).
    Options[=Option,...]
    特定ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ãŠã‘る機能を指定ã™ã‚‹ãŸã‚ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®ä½¿ç”¨ã‚’許å¯ã™ã‚‹ (Options 㨠XBitHack)。 Options ã§è¨­å®šã™ã‚‹ã‚ªãƒ—ション ã‚’ã€(空白をå«ã‚ãªã„) コンマ区切りã®ãƒªã‚¹ãƒˆã«ã—ã¦ç­‰å·ã®å¾Œã«ç¶šã‘ã‚‹ã“ã¨ã§ 設定ã§ãã¾ã™ã€‚

    例:

    AllowOverride AuthConfig Indexes

    上ã®ä¾‹ã§ã¯ AuthConfig 㨠Indexes ã®ã©ã¡ã‚‰ã«ã‚‚ 属ã•ãªã„ディレクティブã¯ã™ã¹ã¦å†…部サーãƒã‚¨ãƒ©ãƒ¼ã‚’引ãèµ·ã“ã—ã¾ã™ã€‚

    å‚ç…§

    top

    AllowOverrideList ディレクティブ

    説明:Individual directives that are allowed in .htaccess files
    æ§‹æ–‡:AllowOverrideList None|directive [directive-type] ...
    デフォルト:AllowOverrideList None
    コンテキスト:ディレクトリ
    ステータス:Core
    モジュール:core

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    å‚ç…§

    top

    CGIMapExtension ディレクティブ

    説明:CGI スクリプトã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ—リタã®ä½ç½®ã‚’調ã¹ã‚‹ãŸã‚ã®æ‰‹æ³•
    æ§‹æ–‡:CGIMapExtension cgi-path .extension
    コンテキスト:ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:NetWare ã®ã¿

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠Apache ㌠CGI スクリプトを実行ã™ã‚‹ãŸã‚ã® ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ—ãƒªã‚¿ã‚’æŽ¢ã™æ–¹æ³•を制御ã—ã¾ã™ã€‚ 例ãˆã°ã€CGIMapExtension sys:\foo.nlm .foo ã¨è¨­å®šã™ã‚‹ã¨ .foo ã¨ã„ã†æ‹¡å¼µå­ã®ã™ã¹ã¦ã® CGI スクリプト㯠FOO インタープリタ㫠渡ã•れã¾ã™ã€‚

    top

    CGIPassAuth ディレクティブ

    説明:Enables passing HTTP authorization headers to scripts as CGI variables
    æ§‹æ–‡:CGIPassAuth On|Off
    デフォルト:CGIPassAuth Off
    コンテキスト:ディレクトリ, .htaccess
    上書ã:AuthConfig
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Available in Apache HTTP Server 2.4.13 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    CGIVar ディレクティブ

    説明:Controls how some CGI variables are set
    æ§‹æ–‡:CGIVar variable rule
    コンテキスト:ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Available in Apache HTTP Server 2.4.21 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    ContentDigest ディレクティブ

    説明:Content-MD5 HTTP 応答ヘッダã®ç”Ÿæˆã‚’有効ã«ã™ã‚‹
    æ§‹æ–‡:ContentDigest On|Off
    デフォルト:ContentDigest Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Options
    ステータス:Core
    モジュール:core

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€RFC1864 åŠã³ RFC2616 ã«ãŠã„ã¦å®šç¾©ã•れã¦ã„ã‚‹ Content-MD5 ヘッダーã®ç”Ÿæˆã‚’有効ã«ã—ã¾ã™ã€‚

    MD5 ã¯ã€ä»»æ„é•·ã®ãƒ‡ãƒ¼ã‚¿ã®ã€Œãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã€(「指紋〠ã¨è¡¨ç¾ã•れるã“ã¨ã‚‚ã‚ã‚‹) を計算ã™ã‚‹ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã§ã€ データã®å¤‰æ›´ãŒã‚ã£ãŸå ´åˆã«ã¯éžå¸¸ã«é«˜ã„信頼度ã§ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã«å¤‰æ›´ãŒ åæ˜ ã•れã¾ã™ã€‚

    Content-MD5 ヘッダã¯ã€ã‚¨ãƒ³ãƒ‰ãƒ„ーエンド㧠エンティティボディーã«å«ã¾ã‚Œã‚‹ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®å®Œå…¨æ€§ãƒã‚§ãƒƒã‚¯ (Message Integrity Check - MIC)ã‚’æä¾›ã—ã¾ã™ã€‚ ã“ã®ãƒ˜ãƒƒãƒ€ã‚’調ã¹ã‚‹ã“ã¨ã§ã€ãƒ—ロキシやクライアントã¯ã€ 途中経路ã«ãŠã‘るエンティティボディã®äºˆæœŸã›ã¬å¤‰æ›´ãªã©ã‚’ 検出ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ヘッダã®ä¾‹:

    Content-MD5: AuLb7Dp1rqtRtxz2m9kRpA==

    リクエスト毎ã«ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã‚’計算ã™ã‚‹ (値ã¯ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã•れã¾ã›ã‚“) ã“ã¨ã‹ã‚‰ã€ サーãƒãƒ‘フォーマンスãŒä½Žä¸‹ã™ã‚‹ã“ã¨ã«ã¤ã„ã¦æ³¨æ„ã—ã¦ãã ã•ã„。

    Content-MD5ã¯ã€core 機能ã«ã‚ˆã‚Šå‡¦ç†ã•れ㟠ドキュメントをé€ã‚‹ã¨ãã®ã¿æœ‰åйã§ã‚り〠SSI ドキュメントや CGI スクリプトã®å‡ºåŠ›ã€ãƒã‚¤ãƒˆãƒ¬ãƒ³ã‚¸ã‚’指定ã—㟠応答ã®å ´åˆã«ã¯ã“ã®ãƒ˜ãƒƒãƒ€ã¯ä»˜ä¸Žã•れã¾ã›ã‚“。

    top

    DefaultRuntimeDir ディレクティブ

    説明:Base directory for the server run-time files
    æ§‹æ–‡:DefaultRuntimeDir directory-path
    デフォルト:DefaultRuntimeDir DEFAULT_REL_RUNTIMEDIR (logs/)
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Available in Apache 2.4.2 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    å‚ç…§

    • the security tips for information on how to properly set permissions on the ServerRoot
    top

    DefaultType ディレクティブ

    説明:サーãƒãŒã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—を決定ã§ããªã„ã¨ãã« é€ã‚‰ã‚Œã‚‹ MIME コンテントタイプ
    æ§‹æ–‡:DefaultType MIME-type|none
    デフォルト:DefaultType text/plain
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:引数 none 㯠Apache 2.2.7 以é™ã§åˆ©ç”¨å¯èƒ½

    サーãƒã¯ã€MIME タイプ ã®ãƒžãƒƒãƒ—ã‹ã‚‰ã¯æ±ºå®šã§ããªã„ドキュメントã®é€ä¿¡ã‚’è¦æ±‚ã•れるã“ã¨ãŒã‚りã¾ã™ã€‚

    サーãƒã¯ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—をクライアントã«é€šçŸ¥ã™ã‚‹ã¹ãã§ã™ã€‚ サーãƒã§é€šå¸¸ã®æ–¹æ³•ã§ã¯ã“れãŒåˆ¤å®šã§ããªã„å ´åˆã¯ã€ DefaultType ã§æŒ‡å®šã•れãŸã‚¿ã‚¤ãƒ—を利用ã—ã¾ã™ã€‚ 例:

    DefaultType image/gif

    ã“れ㯠.gif ã¨ã„ã†æ‹¡å¼µå­ãŒãƒ•ァイルåã«å«ã¾ã‚Œã¦ã„ãªã„ 多ãã® GIF ç”»åƒãŒå«ã¾ã‚Œã¦ã„るディレクトリã«é©ã—ã¦ã„ã‚‹ã§ã—ょã†ã€‚

    サーãƒã§ã‚‚管ç†è€…ã§ã‚‚判定ã™ã‚‹ã“ã¨ãŒã§ããªã„ (例ãˆã°ãƒ—ロクシã®) å ´åˆã€ 誤ã£ãŸæƒ…報を与ãˆã‚‹ã‚ˆã‚Šã¯ MIME ã‚¿ã‚¤ãƒ—ã®æŒ‡å®šãŒãªã„çŠ¶æ…‹ãŒæœ›ã¾ã—ã„ã“ã¨ã‚‚ ã‚りã¾ã™ã€‚ã“ã®å ´åˆã¯æ¬¡ã®ã‚ˆã†ã«ã—ã¾ã™ :

    DefaultType None

    DefaultType None 㯠httpd-2.2.7 以é™ã§ã®ã¿åˆ©ç”¨ã§ãã¾ã™ã€‚

    ForceType ディレクティブ㨠é•ã£ã¦ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãƒ‡ãƒ•ォルト㮠MIME タイプをæä¾›ã™ã‚‹ã ã‘ã§ ã‚ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。ファイルåã®æ‹¡å¼µå­ã‚’å«ã‚〠メディアタイプを決定ã§ãã‚‹ä»–ã® MIME タイプã®å®šç¾©ãŒã‚れ㰠ã“ã®ãƒ‡ãƒ•ォルトã¯ä¸Šæ›¸ãã•れã¾ã™ã€‚

    top

    Define ディレクティブ

    説明:変数ã®å­˜åœ¨ã‚’宣言ã™ã‚‹
    æ§‹æ–‡:Define parameter-name
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core

    httpd ã® -D 引数ã¨åŒã˜ã‚‚ã®ã§ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を使ã†ã¨ã€ã‚¹ã‚¿ãƒ¼ãƒˆã‚¢ãƒƒãƒ—スクリプト㫠記載ã•れã¦ã„ã‚‹ -D å¼•æ•°ã‚’æ›¸ãæ›ãˆã‚‹å¿…è¦ãªã〠<IfDefine> セクションを切り替ãˆã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    top

    <Directory> ディレクティブ

    説明:指定ã®ãƒ•ァイルシステムã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¨ã‚µãƒ–ディレクトリã¨ã®ã¿ã« é©ç”¨ã•れるディレクティブを囲む
    æ§‹æ–‡:<Directory directory-path> ... </Directory>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    指定ã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¨ãã®ã‚µãƒ–ディレクトリã«ã®ã¿ ディレクティブをé©ç”¨ã•ã›ã‚‹ãŸã‚ã«ã¯ã€ <Directory> 㨠</Directory> を対ã¨ã—ã¦ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–群を囲ã„ã¾ã™ã€‚ ãã®ä¸­ã«ã¯ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆã§è¨±å¯ã•れãŸå…¨ã¦ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ 利用ã§ãã¾ã™ã€‚ directive-path ã¯ã€ãƒ•ルパスもã—ã㯠Unix ã®ã‚·ã‚§ãƒ«å½¢å¼ã® ワイルドカードを指定ã—ã¾ã™ã€‚ ? ã¯ä»»æ„ã® 1 文字ã€* ã¯ä»»æ„ã®æ–‡å­—列ã«ãƒžãƒƒãƒã—ã¾ã™ã€‚ シェルã«ãŠã‘ã‚‹æŒ‡å®šåŒæ§˜ã€æ–‡å­—ã®ç¯„囲を [] ã§æŒ‡å®šã§ãã¾ã™ã€‚ ワイルドカード㯠`/' 文字ã«ã¯ãƒžãƒƒãƒã—ã¾ã›ã‚“ã®ã§ã€ /home/user/public_html ã«ã¯ <Directory /*/public_html> ã¯ãƒžãƒƒãƒã—ã¾ã›ã‚“ãŒã€ <Directory /home/*/public_html> ã¯ãƒžãƒƒãƒã—ã¾ã™ã€‚ 例:

    <Directory /usr/local/httpd/htdocs>
    Options Indexes FollowSymLinks
    </Directory>

    directory-path 引数ã«ã¯æ³¨æ„ã—ã¦ãã ã•ã„: ãã®å¼•数㯠Apache ãŒãƒ•ァイルをアクセスã™ã‚‹ãŸã‚ã«ä½¿ã†ãƒ•ァイルシステムã®ãƒ‘ス㫠ãã®ã¾ã¾ãƒžãƒƒãƒã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚ã‚ã‚‹ <Directory> ã« é©ç”¨ã•れるディレクティブã¯ã€åˆ¥ã®ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯ã‚’ãŸã©ã£ãŸã‚Šã—㦠åŒã˜ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’é•ã†ãƒ‘スã§ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸå ´åˆã«ã¯é©ç”¨ã•れã¾ã›ã‚“。

    ~ ã¨ã„ã†æ–‡å­—ã‚’ 付加ã™ã‚‹ã“ã¨ã§æ­£è¦è¡¨ç¾ã‚’利用ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ 例ãˆã°:

    <Directory ~ "^/www/.*/[0-9]{3}">

    ã¨ã„ã£ãŸæŒ‡å®šã®å ´åˆã€/www/ 以下ã«ã‚ã‚‹æ•°å­— 3 文字ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ãƒžãƒƒãƒã—ã¾ã™ã€‚

    ã‚‚ã—複数㮠(æ­£è¦è¡¨ç¾ä»¥å¤–ã®) <Directory>セクション㌠ドキュメントをå«ã‚€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒª (ã‚„ãã®ä¸Šä½ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ã©ã‚Œã‹) ã¨ãƒžãƒƒãƒã—ãŸãªã‚‰ã°ã€ .htaccess ファイルã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–も読ã¿è¾¼ã¿ã¤ã¤ã€ 短ã„パスã‹ã‚‰é †ã«é©ç”¨ã•れã¾ã™ã€‚ 例ãˆã°ã€

    <Directory />
    AllowOverride None
    </Directory>

    <Directory /home/>
    AllowOverride FileInfo
    </Directory>

    ã¨è¨­å®šã—ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆ /home/web/dir/doc.html ã¸ã® アクセスãŒã‚ã£ãŸå ´åˆã«ã¯ä»¥ä¸‹ã®ã‚ˆã†ã«å‹•作ã—ã¾ã™:

    • AllowOverride None ãŒé©ç”¨ã•れる。 (.htaccess ファイルã¯ç„¡åйã«ãªã‚‹)
    • AllowOverride FileInfo ãŒé©ç”¨ã•れる (/home ディレクトリã«å¯¾ã—ã¦)。
    • /home/.htaccess, /home/web/.htaccess, /home/web/dir/.htaccess ã®é †ã«ãれらã®ãƒ•ァイル中㮠FileInfo ディレクティブãŒé©ç”¨ã•れる。

    æ­£è¦è¡¨ç¾ã¯ã€é€šå¸¸ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ãŒã™ã¹ã¦é©ç”¨ã•れるã¾ã§ 考慮ã•れã¾ã›ã‚“。 ãã®å¾Œã€å…¨ã¦ã®æ­£è¦è¡¨ç¾ãŒè¨­å®šãƒ•ァイルã«ç¾ã‚ŒãŸé †ã§è©¦ã•れã¾ã™ã€‚ 例ãˆã°ã€ä»¥ä¸‹ã®ã‚ˆã†ãªå ´åˆã«

    <Directory ~ abc$>
    # ... directives here ...
    </Directory>

    æ­£è¦è¡¨ç¾ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã¯ã™ã¹ã¦ã®é€šå¸¸ã® <Directory> 㨠.htaccess ã®é©ç”¨ãŒçµ‚ã‚ã‚‹ã¾ã§è€ƒæ…®ã•れã¾ã›ã‚“。 ãã®å¾Œã§ã€æ­£è¦è¡¨ç¾ã¯ /home/abc/public_html/abc ã«ãƒžãƒƒãƒã—〠対応ã™ã‚‹ <Directory> ãŒé©ç”¨ã•れã¾ã™ã€‚

    Apache ã®ãƒ‡ãƒ•ォルトã§ã¯ <Directory /> ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã¯ Allow from All ã«ãªã£ã¦ã„ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。 ã“れã¯ã€URL ã‹ã‚‰ãƒžãƒƒãƒ—ã•れãŸã©ã®ãƒ•ァイルã§ã‚‚ Apache ã¯é€ã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚ ã“れã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ã—ã¦å¤‰æ›´ã™ã‚‹ã“ã¨ãŒæŽ¨å¥¨ã•れã¦ã„ã¾ã™ã€‚

    <Directory />
    Order Deny,Allow
    Deny from All
    </Directory>

    ãã—ã¦ã‚¢ã‚¯ã‚»ã‚¹ã‚’å¯èƒ½ã«ã—ãŸã„ディレクトリã«å¯¾ã—㦠個別ã«è¨­å®šã™ã‚Œã°ã‚ˆã„ã§ã—ょã†ã€‚ ã“ã®ã‚ãŸã‚Šã«ã¤ã„ã¦ã¯ã€ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹ã‚³ãƒ„ã‚’ å‚ç…§ã—ã¦ãã ã•ã„。

    ディレクトリセクション㯠httpd.conf ãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ãã¾ã™ã€‚ <Directory> ディレクティブã¯å…¥ã‚Œå­ã«ã™ã‚‹ã“ã¨ãŒã§ããšã€ <Limit> ã‚„ <LimitExcept> セクションã®ä¸­ã«ã‚‚ 記述ã§ãã¾ã›ã‚“。

    å‚ç…§

    top

    <DirectoryMatch> ディレクティブ

    説明:æ­£è¦è¡¨ç¾ã«ãƒžãƒƒãƒã™ã‚‹ãƒ•ァイルシステムã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¨ サブディレクトリã¨ã®ã¿ã«é©ç”¨ã•れるディレクティブを囲む
    æ§‹æ–‡:<DirectoryMatch regex> ... </DirectoryMatch>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    <Directory> ディレクティブã¨åŒæ§˜ã«ã€<DirectoryMatch> 㨠</DirectoryMatch> ã¯æŒ‡å®šã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¨ ãã®ã‚µãƒ–ディレクトリã«ã®ã¿é©ç”¨ã•れるディレクティブ群を囲ã„ã¾ã™ã€‚ ã—ã‹ã—ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯å¼•æ•°ã¨ã—ã¦æ­£è¦è¡¨ç¾ã‚’ã¨ã‚Šã¾ã™ã€‚例ãˆã°:

    <DirectoryMatch "^/www/(.+/)?[0-9]{3}">

    㯠/www/ 以下ã«ã‚ã‚‹æ•°å­— 3 文字ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ãƒžãƒƒãƒã—ã¾ã™ã€‚

    å‚ç…§

    top

    DocumentRoot ディレクティブ

    説明:ウェブã‹ã‚‰è¦‹ãˆã‚‹ãƒ¡ã‚¤ãƒ³ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ„リーã«ãªã‚‹ ディレクトリ
    æ§‹æ–‡:DocumentRoot directory-path
    デフォルト:DocumentRoot /usr/local/apache/htdocs
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€httpd ãŒãƒ•ァイルをæä¾›ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’設定ã—ã¾ã™ã€‚ Alias ã®ã‚ˆã†ãªãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«ãƒžãƒƒãƒã—ãªã„å ´åˆã«ã¯ã€ ドキュメント㮠(訳注:ファイルシステム上ã®) パスを生æˆã™ã‚‹ãŸã‚ã«ã€ リクエストã•れ㟠URL ã®ãƒ‘ス部分をドキュメントルートã«ä»˜ä¸Žã—ã¾ã™ã€‚ 例:

    DocumentRoot /usr/web

    ã“ã®å ´åˆã€ http://www.my.host.com/index.html ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒã‚れ㰠/usr/web/index.html ãŒè¿”ã•れã¾ã™ã€‚ directory-path ãŒçµ¶å¯¾ãƒ‘スã§ãªã„å ´åˆã¯ã€ ServerRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ã¿ãªã•れã¾ã™ã€‚

    DocumentRoot ã¯æœ€å¾Œã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ç„¡ã—㧠指定ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚

    å‚ç…§

    top

    <Else> ディレクティブ

    説明:Contains directives that apply only if the condition of a previous <If> or <ElseIf> section is not satisfied by a request at runtime
    æ§‹æ–‡:<Else> ... </Else>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Nested conditions are evaluated in 2.4.26 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    å‚ç…§

    top

    <ElseIf> ディレクティブ

    説明:Contains directives that apply only if a condition is satisfied by a request at runtime while the condition of a previous <If> or <ElseIf> section is not satisfied
    æ§‹æ–‡:<ElseIf expression> ... </ElseIf>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Nested conditions are evaluated in 2.4.26 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    å‚ç…§

    top

    EnableMMAP ディレクティブ

    説明:é…é€ä¸­ã«ãƒ•ァイルを読ã¿è¾¼ã‚€ãŸã‚ã«ãƒ¡ãƒ¢ãƒªãƒžãƒƒãƒ”ングを 使ã†ã‹ã©ã†ã‹
    æ§‹æ–‡:EnableMMAP On|Off
    デフォルト:EnableMMAP On
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Core
    モジュール:core

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯é…é€ä¸­ã«ãƒ•ァイルã®å†…容を読ã¿è¾¼ã‚€å¿…è¦ãŒã‚ã‚‹ã¨ãã« httpd ãŒãƒ¡ãƒ¢ãƒªãƒžãƒƒãƒ”ングを使ã†ã‹ã©ã†ã‹ã‚’制御ã—ã¾ã™ã€‚ デフォルトã§ã¯ã€ 例ãˆã°ã€mod_include を使ã£ã¦ SSI ファイルをé…é€ ã™ã‚‹ã¨ãã®ã‚ˆã†ã«ã€ãƒ•ァイルã®é€”中ã®ãƒ‡ãƒ¼ã‚¿ã‚’アクセスã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã¨ãã«ã¯ Apache 㯠OS ãŒã‚µãƒãƒ¼ãƒˆã—ã¦ã„れã°ãƒ•ァイルをメモリã«ãƒžãƒƒãƒ—ã—ã¾ã™ã€‚

    ã“ã®ãƒ¡ãƒ¢ãƒªãƒžãƒƒãƒ—ã¯æ€§èƒ½ã®å‘上をもãŸã‚‰ã™ã“ã¨ãŒã‚りã¾ã™ã€‚ ã—ã‹ã—ã€ç’°å¢ƒã«ã‚ˆã£ã¦ã¯é‹ç”¨ä¸Šã®å•題を防ããŸã‚ã«ãƒ¡ãƒ¢ãƒªãƒžãƒƒãƒ”ングを 使用ã—ãªã„よã†ã«ã—ãŸæ–¹ãŒè‰¯ã„å ´åˆã‚‚ã‚りã¾ã™:

    • マルãƒãƒ—ロセッサシステムã®ä¸­ã«ã¯ãƒ¡ãƒ¢ãƒªãƒžãƒƒãƒ”ングをã™ã‚‹ã¨ httpd ã®æ€§èƒ½ãŒè½ã¡ã‚‹ã‚‚ã®ãŒã‚りã¾ã™ã€‚
    • NFS マウントã•れ㟠DocumentRoot ã§ã¯ã€httpd ãŒãƒ¡ãƒ¢ãƒªãƒžãƒƒãƒ—ã—ã¦ã„ã‚‹é–“ã«ãƒ•ァイルãŒå‰Šé™¤ã•れãŸã‚Š çŸ­ããªã£ãŸã‚Šã—ãŸã¨ãã«èµ·ã“るセグメンテーションフォールトã®ãŸã‚ã« httpd ãŒã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã™ã‚‹å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚

    ã“れらã®å•題ã«å½“ã¦ã¯ã¾ã‚‹ã‚µãƒ¼ãƒã®è¨­å®šã®å ´åˆã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ã«ã—㦠ファイルã®é…逿™‚ã®ãƒ¡ãƒ¢ãƒªãƒžãƒƒãƒ”ングを使用ä¸å¯ã«ã—ã¦ãã ã•ã„:

    EnableMMAP Off

    NFS マウントã•れãŸãƒ•ァイルã«ã¯ã€å•題ã®ã‚るファイルã«ã®ã¿æ˜Žç¤ºçš„ã« ã“ã®æ©Ÿèƒ½ã‚’使用ä¸å¯ã«ã—ã¾ã™:

    <Directory "/path-to-nfs-files"> EnableMMAP Off </Directory>

    top

    EnableSendfile ディレクティブ

    説明:ファイルã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¸ã®é…逿™‚ã«ã‚«ãƒ¼ãƒãƒ«ã® sendfile サãƒãƒ¼ãƒˆã‚’ 使ã†ã‹ã©ã†ã‹
    æ§‹æ–‡:EnableSendfile On|Off
    デフォルト:EnableSendfile On
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.0.44 以é™ã§ä½¿ç”¨å¯èƒ½

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«ãƒ•ァイルã®å†…容をé€ã‚‹ã¨ãã« httpd ãŒã‚«ãƒ¼ãƒãƒ«ã® sendfile サãƒãƒ¼ãƒˆã‚’使ã†ã‹ã©ã†ã‹ã‚’制御ã—ã¾ã™ã€‚デフォルトã§ã¯ã€ 例ãˆã°é™çš„ãªãƒ•ァイルã®é…é€ã®ã‚ˆã†ã«ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®å‡¦ç†ã«ãƒ•ァイル㮠途中ã®ãƒ‡ãƒ¼ã‚¿ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’å¿…è¦ã¨ã—ãªã„ã¨ãã«ã¯ã€Apache 㯠OS ㌠サãƒãƒ¼ãƒˆã—ã¦ã„れã°ãƒ•ァイルを読ã¿è¾¼ã‚€ã“ã¨ãªã sendfile を使ã£ã¦ ファイルã®å†…容をé€ã‚Šã¾ã™ã€‚

    sendfile 㯠read 㨠send を別々ã«è¡Œãªã†ã“ã¨ã¨ã€ãƒãƒƒãƒ•ã‚¡ã®å‰²ã‚Šå½“ã¦ã‚’ 回é¿ã—ã¾ã™ã€‚ã—ã‹ã—ã€ãƒ—ラットフォームやファイルシステムã®ä¸­ã«ã¯ é‹ç”¨ä¸Šã®å•題をé¿ã‘ã‚‹ãŸã‚ã«ã“ã®æ©Ÿèƒ½ã‚’使用ä¸å¯ã«ã—ãŸæ–¹ãŒè‰¯ã„å ´åˆãŒã‚りã¾ã™:

    • プラットフォームã®ä¸­ã«ã¯ãƒ“ãƒ«ãƒ‰ã‚·ã‚¹ãƒ†ãƒ ãŒæ¤œçŸ¥ã§ããªã‹ã£ãŸã€å£Šã‚ŒãŸ sendfile ã®ã‚µãƒãƒ¼ãƒˆãŒå­˜åœ¨ã™ã‚‹ã‚‚ã®ãŒã‚りã¾ã™ã€‚ã“れã¯ç‰¹ã« ãƒã‚¤ãƒŠãƒªãŒåˆ¥ã®ãƒžã‚·ãƒ³ã§ãƒ“ルドã•れã€å£Šã‚ŒãŸ sendfile ã®ã‚るマシン㫠移動ã—ãŸã¨ãã«èµ·ã“りã¾ã™ã€‚
    • Linux ã§ã¯ã€sendfile を用ã„ã‚‹ã¨ã€ IPv6 使用時ã«å­˜åœ¨ã™ã‚‹ç‰¹å®šãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚«ãƒ¼ãƒ‰ã® TCP-checksum オフロードã®ãƒã‚°ã‚’è¸ã‚“ã§ã—ã¾ã„ã¾ã™ã€‚
    • Itanium 上㮠Linux ã§ã¯ã€sendfile ã§ã¯ 2GB 以上㮠ファイルを扱ã†ã“ã¨ãŒã§ãã¾ã›ã‚“。
    • ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒžã‚¦ãƒ³ãƒˆã•れ㟠DocumentRoot (例ãˆã° NFS ã‚„ SMB) ã§ã¯ã€ã‚«ãƒ¼ãƒãƒ«ã¯è‡ªèº«ã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’使ã£ã¦ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‹ã‚‰ã®ãƒ•ァイルを é€ã‚‹ã“ã¨ãŒã§ããªã„ã“ã¨ãŒã‚りã¾ã™ã€‚

    ã“れらã®å•題ã«å½“ã¦ã¯ã¾ã‚‹ã‚µãƒ¼ãƒã®è¨­å®šã®å ´åˆã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ã«ã—㦠ã“ã®æ©Ÿèƒ½ã‚’使用ä¸å¯ã«ã—ã¦ãã ã•ã„:

    EnableSendfile Off

    NFS ã‚„ SMB マウントã•れãŸãƒ•ァイルã«ã¯ã€å•題ã®ã‚るファイルã«ã®ã¿æ˜Žç¤ºçš„ã« ã“ã®æ©Ÿèƒ½ã‚’使用ä¸å¯ã«ã—ã¾ã™:

    <Directory "/path-to-nfs-files"> EnableSendfile Off </Directory>

    top

    Error ディレクティブ

    説明:Abort configuration parsing with a custom error message
    æ§‹æ–‡:Error message
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:2.3.9 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    ErrorDocument ディレクティブ

    説明:エラーãŒç™ºç”Ÿã—ãŸã¨ãã«ã‚µãƒ¼ãƒãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚‹ã‚‚ã®
    æ§‹æ–‡:ErrorDocument error-code document
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Core
    モジュール:core

    å•題やエラーãŒç™ºç”Ÿã—ãŸã¨ãã®å‹•作ã¨ã—ã¦ã€ Apache ã«ã¯ä»¥ä¸‹ã®å››ã¤ã®ã†ã¡ä¸€ã¤ã®å‹•作を設定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    1. Apache 標準ã®ç°¡å˜ãªã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’表示
    2. è‡ªåˆ†ã§æŒ‡å®šã—ãŸãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’表示
    3. å•題やエラーã®å‡¦ç†ã‚’ã™ã‚‹ç‚ºã«ã€è‡ªã‚µãƒ¼ãƒå†…ã® URL-path ã¸ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆ
    4. å•題やエラーã®å‡¦ç†ã‚’ã™ã‚‹ç‚ºã«ã€å¤–部㮠URL ã¸ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆ

    最åˆã®ã‚‚ã®ãŒãƒ‡ãƒ•ォルトã®å‹•作ã§ã€2 番目ã‹ã‚‰ 4 番目ã¯ã€ ErrorDocumentディレクティブã«ã‚ˆã‚Šã€ HTTP ã®ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚³ãƒ¼ãƒ‰ã¨ã€ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‹ URL を指定ã™ã‚‹ã“ã¨ã§è¨­å®šã—ã¾ã™ã€‚ Apache ãŒå•題もã—ãã¯ã‚¨ãƒ©ãƒ¼ã«é–¢ã™ã‚‹è¿½åŠ æƒ…å ±ã‚’æä¾›ã™ã‚‹ã“ã¨ãŒã‚りã¾ã™ã€‚

    URL ã®å ´åˆã¯ã€ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§å§‹ã¾ã‚‹ (/) ローカル㮠web-path ( DocumentRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘ス ) ã‹ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒè§£æ±ºã§ãる完全㪠URL を指定ã—ã¾ã™ã€‚ ã‚‚ã—ãã¯ã€ãƒ–ラウザã«è¡¨ç¤ºã•れるメッセージを指定ã§ãã¾ã™ã€‚ 例:

    ErrorDocument 500 http://foo.example.com/cgi-bin/tester
    ErrorDocument 404 /cgi-bin/bad_urls.pl
    ErrorDocument 401 /subscription_info.html
    ErrorDocument 403 "Sorry can't allow you access today"

    加ãˆã¦ã€ç‰¹åˆ¥ãªå€¤ default を使ã£ã¦ Apache ã« ãƒãƒ¼ãƒ‰ã‚³ãƒ¼ãƒ‰ã•れã¦ã„ã‚‹ç°¡å˜ãªãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ 通常ã¯å¿…è¦ã§ã¯ã‚りã¾ã›ã‚“ãŒã€default を使ã†ã¨ 既存㮠ErrorDocument ディレクティブã®è¨­å®šã‚’ 継承ã™ã‚‹ã¨ã“ã‚ã§ã€Apache ã®ãƒãƒ¼ãƒ‰ã‚³ãƒ¼ãƒ‰ã•れãŸç°¡å˜ãªãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã« 戻ã™ã“ã¨ãŒã§ãã¾ã™ã€‚

    ErrorDocument 404 /cgi-bin/bad_urls.pl

    <Directory /web/docs>
    ErrorDocument 404 default
    </Directory>

    リモート URL (例ãˆã°ã€é ­ã« http ã¨ä»˜ä¸Žã—ãŸæ–¹æ³•) ã‚’ ErrorDocument ã«æŒ‡å®šã™ã‚‹ã¨ã〠ãŸã¨ãˆæ–‡æ›¸ãŒåŒã˜ã‚µãƒ¼ãƒã«ã‚ã‚ã†ã¨ã‚‚ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãŒã©ã“ã«ã‚ã‚‹ã‹ã‚’通知ã™ã‚‹ãŸã‚ã«ã€ Apache ã¯ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’クライアントã«é€å‡ºã™ã‚‹ã¨ã„ã†ã“ã¨ã«ã€æ³¨æ„ã—ã¦ãã ã•ã„。 ã“れã«ã¯ã„ã‚ã„ã‚ã¨é–¢é€£ã—ã¦èµ·ã“ã‚‹å•題ãŒã‚りã¾ã™ã€‚ 中ã§ã‚‚最もé‡è¦ãªã®ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯å…ƒã€…ã®ã‚¨ãƒ©ãƒ¼ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’å—ã‘å–らãšã€ 代ã‚りã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’å—ã‘å–ã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚ ã“れã«ã‚ˆã‚Šã€ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’使ã£ã¦ URL ãŒæœ‰åйã§ã‚ã‚‹ã‹ã©ã†ã‹ã‚’決定ã—よã†ã¨ã™ã‚‹ ウェブロボットやãã®ä»–ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’ã€æ··ä¹±ã•ã›ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。 ã•らã«ã€ErrorDocument 401 ã«ãƒªãƒ¢ãƒ¼ãƒˆã® URL を指定ã™ã‚‹ã¨ã€ クライアント㯠401 ã¨ã„ã†ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’å—ã‘å–らãªã„ãŸã‚〠パスワードをユーザーã«å…¥åŠ›è¦æ±‚ã—ãªã‘れã°ãªã‚‰ãªã„ã“ã¨ãŒã‚ã‹ã‚Šã¾ã›ã‚“。 従ã£ã¦ã€ErrorDocument 401 ã¨ã„ã†ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を使ã†å ´åˆã¯ã€ å¿…ãšãƒ­ãƒ¼ã‚«ãƒ«ãªæ–‡æ›¸ã‚’å‚ç…§ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    Microsoft Internet Explorer (MSIE) ã¯ãƒ‡ãƒ•ォルトã§ã¯ã‚µãƒ¼ãƒãŒç”Ÿæˆã—ãŸã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒ 「å°ã•ã™ãŽã‚‹ã€ã¨ãã«ã¯ç„¡è¦–ã‚’ã—ã¦è‡ªåˆ†è‡ªèº«ã®ã€Œã‚„ã•ã—ã„ã€ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã§ ç½®æ›ã—ã¾ã™ã€‚サイズã®ã—ãã„値ã¯ã‚¨ãƒ©ãƒ¼ã®ç¨®é¡žã«ã‚ˆã£ã¦ç•°ãªã‚Šã¾ã™ãŒã€ 一般的ã«ã¯ã‚¨ãƒ©ãƒ¼ã®æ–‡æ›¸ã‚’ 512 ãƒã‚¤ãƒˆã‚ˆã‚Šã‚‚大ããã™ã‚‹ã¨ã€MSIE 㯠サーãƒãŒç”Ÿæˆã—ãŸã‚¨ãƒ©ãƒ¼ã‚’éš ã•ãšã«è¡¨ç¤ºã—ã¾ã™ã€‚詳ã—ã„æƒ…報㯠Microsoft Knowledge Base ã®è¨˜äº‹ Q294807 ã«ã‚りã¾ã™ã€‚

    ã»ã¨ã‚“ã©ã®ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’上書ãã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ãŒã€ç‰¹å®šã®çжæ³ä¸‹ã§ã¯ ErrorDocument ã®è¨­å®šã«ã‹ã‹ã‚ら㚠内蔵ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒä½¿ã‚れã¾ã™ã€‚ 特ã«ã€ä¸æ­£ãªå½¢å¼ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæ¤œå‡ºã•れãŸå ´åˆã€é€šå¸¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆå‡¦ç†ã¯ å³åº§ã«ä¸­æ­¢ã•れã€å†…蔵ã®ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒè¿”ã•れã¾ã™ã€‚ ã“ã®å‡¦ç½®ã¯ä¸æ­£ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ã‚ˆã£ã¦å¼•ãèµ·ã“ã•れるã€ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£å•題ã‹ã‚‰ 守るãŸã‚ã«å¿…è¦ãªæŽªç½®ã§ã™ã€‚

    2.0 よりå‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯ã€å¯¾ã«ãªã£ã¦ã„ãªã„二é‡å¼•用符を 先頭ã«ä»˜ã‘ã‚‹ã“ã¨ã«ã‚ˆã‚Šãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã§ã‚ã‚‹ã“ã¨ã‚’指定ã—ã¦ã„ã¾ã—ãŸã€‚

    å‚ç…§

    top

    ErrorLog ディレクティブ

    説明:サーãƒãŒã‚¨ãƒ©ãƒ¼ã‚’ログåŽé›†ã™ã‚‹å ´æ‰€
    æ§‹æ–‡: ErrorLog file-path|syslog[:facility]
    デフォルト:ErrorLog logs/error_log (Unix) ErrorLog logs/error.log (Windows and OS/2)
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    ErrorLog ディレクティブã¯ã€ サーãƒã«ç”Ÿã˜ãŸã•ã¾ã–ã¾ãªã‚¨ãƒ©ãƒ¼ã‚’ 記録ã™ã‚‹ç‚ºã®ãƒ•ァイルã®åå‰ã‚’設定ã—ã¾ã™ã€‚ file-path ãŒçµ¶å¯¾ãƒ‘スã§ãªã„ã¨ãã¯ã€ServerRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ã¿ãªã•れã¾ã™ã€‚

    例

    ErrorLog /var/log/httpd/error_log

    file-path ãŒãƒ‘イプ (|) ã‹ã‚‰å§‹ã¾ã‚‹å ´åˆã¯ã€ エラーログを処ç†ã™ã‚‹ãŸã‚ã«å®Ÿè¡Œã•れるコマンド㌠指定ã•れã¦ã„ã‚‹ã¨è§£é‡ˆã•れã¾ã™ã€‚

    例

    ErrorLog "|/usr/local/bin/httpd_errors"

    ファイルåã®å¤‰ã‚り㫠syslog ã¨æŒ‡å®šã™ã‚‹ã“ã¨ã«ã‚ˆã£ã¦ã€ システムãŒã‚µãƒãƒ¼ãƒˆã—ã¦ã„れ㰠syslogd(8) を利用ã—ãŸãƒ­ã‚®ãƒ³ã‚°ãŒæœ‰åйã«ãªã‚Šã¾ã™ã€‚ デフォルトã§ã¯ã€local7 ファシリティã¨ãªã‚Šã¾ã™ãŒã€ syslog:facility ã¨ã„ã£ãŸå½¢ã§è¨˜è¿°ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ 通常 syslog(1) ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã§èª¬æ˜Žã•れã¦ã„るファシリティã®ä¸€ã¤ã‚’使ã†ã‚ˆã†ã« ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    例

    ErrorLog syslog:user

    セキュリティ: ログファイルを格ç´ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãŒã€ã‚µãƒ¼ãƒã‚’èµ·å‹•ã—ãŸãƒ¦ãƒ¼ã‚¶ä»¥å¤–㮠ユーザã«ã‚ˆã£ã¦æ›¸ãè¾¼ã‚ã‚‹å ´åˆã«ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ãŒç ´ã‚‰ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã“ã¨ã« é–¢ã™ã‚‹è©³ç´°ã¯ セキュリティã«é–¢ã™ã‚‹ã‚³ãƒ„ ã‚’ å‚ç…§ã—ã¦ãã ã•ã„。

    注

    Unix 以外ã®ãƒ—ラットフォームã§ãƒ•ァイルã®ãƒ‘スを入力ã™ã‚‹ã¨ãã¯ã€ プラットフォームãŒãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã®ä½¿ç”¨ã‚’許ã—ã¦ã„ãŸã¨ã—ã¦ã‚‚〠確実ã«ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã®ã¿ãŒä½¿ç”¨ã•れるよã†ã«æ³¨æ„ã—ã¦ãã ã•ã„。一般的ã«ã¯ã€ 設定ファイル全般ã§ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã®ã¿ã‚’ä½¿ã†æ–¹ãŒè‰¯ã„ã§ã—ょã†ã€‚

    å‚ç…§

    top

    ErrorLogFormat ディレクティブ

    説明:Format specification for error log entries
    æ§‹æ–‡: ErrorLogFormat [connection|request] format
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    å‚ç…§

    top

    ExtendedStatus ディレクティブ

    説明:Keep track of extended status information for each request
    æ§‹æ–‡:ExtendedStatus On|Off
    デフォルト:ExtendedStatus Off[*]
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    FileETag ディレクティブ

    説明:ETag HTTP 応答ヘッダを作æˆã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã•れる ファイルã®å±žæ€§
    æ§‹æ–‡:FileETag component ...
    デフォルト:FileETag INode MTime Size
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Core
    モジュール:core

    FileETag ディレクティブ㯠ドキュメントãŒãƒ•ァイルã«åŸºã¥ã„ãŸã‚‚ã®ã§ã‚ã‚‹ã¨ãã«ã€ ETag (エンティティタグ) 応答ヘッダフィールドを作æˆã™ã‚‹ã¨ãã«ä½¿ç”¨ã™ã‚‹ ファイルã®å±žæ€§ã‚’設定ã—ã¾ã™ã€‚ (ETag ã®å€¤ã¯ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®å¸¯åŸŸã‚’節約ã™ã‚‹ãŸã‚㮠キャッシュã®ç®¡ç†ã§ä½¿ã‚れã¾ã™ã€‚) Apache 1.3.22 以å‰ã§ã¯ã€ETag ã®å€¤ã¯ 常ã«ãƒ•ァイル㮠inode, ã‚µã‚¤ã‚ºã€æœ€çµ‚修正時刻 (mtime) ã‹ã‚‰ä½œæˆ ã•れã¦ã„ã¾ã—ãŸã€‚FileETag ディレクティブã«ã‚ˆã‚Šã€ã“れらã®ã©ã‚Œã‚’使ã†ã‹ã‚’ é¸ã¶ã“ã¨ãŒã§ãã¾ã™ã€‚èªè­˜ã•れるキーワードã¯:

    INode
    ファイル㮠inode 番å·ã‚’計算ã«ä½¿ã„ã¾ã™
    MTime
    ãƒ•ã‚¡ã‚¤ãƒ«ã®æœ€çµ‚修正時刻を使ã„ã¾ã™
    Size
    ファイルã®ä¸­èº«ã®ãƒã‚¤ãƒˆæ•°ã‚’使ã„ã¾ã™
    All
    使用å¯èƒ½ãªã™ã¹ã¦ã®ãƒ•ィールドを使ã„ã¾ã™ã€‚ ã“れã¯

    FileETag INode MTime Size

    ã¨ç­‰ä¾¡ã§ã™ã€‚
    None
    ドキュメントãŒãƒ•ァイルã«åŸºã¥ã„ãŸã‚‚ã®ã§ã‚‚ã€ETag フィールドを 応答ã«ä»˜åŠ ã—ã¾ã›ã‚“

    INode, MTime, Size キーワードã«ã¯ + ã‚„ - ã‚’å‰ã«ä»˜ã‘㦠指定ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ã“ã®å ´åˆã¯ã€ã‚ˆã‚Šåºƒã„範囲ã‹ã‚‰ç¶™æ‰¿ã•れ㟠デフォルトã®è¨­å®šã«å¤‰æ›´ã‚’加ãˆã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ãã®ã‚ˆã†ãªæŽ¥é ­è¾žã® ç„¡ã„キーワードを指定ã™ã‚‹ã¨ã€å³åº§ã«ç¶™æ‰¿ã—ãŸè¨­å®šã‚’無効ã«ã—ã¾ã™ã€‚

    ã‚るディレクトリã®è¨­å®šã« FileETag INode MTime Size ãŒã‚り〠サブディレクトリã®è¨­å®šã« FileETag -INode ãŒã‚ã‚‹ã¨ãã¯ã€ ãã®ã‚µãƒ–ディレクトリã®è¨­å®šã¯ (設定ãŒä¸Šæ›¸ãã•れãªã‘れã°ã‚µãƒ–ディレクトリ㮠サブディレクトリã«ã‚‚継承ã•れã¾ã™) FileETag MTime Size ã¨åŒã˜ã«ãªã‚Šã¾ã™ã€‚

    警告

    WebDAV を使ã£ã¦ã„ã¦ã€mod_dav_fs をストレージプロãƒã‚¤ãƒ€ã¨ã—㦠使ã£ã¦ã„るよã†ãª Directory ã‚„ Location ã§ã¯ã€ãƒ‡ãƒ•ォルト値を変更ã—ãªã„ã§ãã ã•ã„。 mod_dav_fs ã§ã¯ã€æ¡ä»¶ä»˜ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§ã®æ¯”較演算㫠INode MTime Size ã®å›ºå®šãƒ•ォーマットを使ã£ã¦ã„ã¾ã™ã€‚ FileETag ã§ ETag フォーマットを 変更ã—ã¦ã—ã¾ã†ã¨ã€æ¡ä»¶ä»˜ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§ã†ã¾ã動作ã—ãªããªã‚Šã¾ã™ã€‚
    top

    <Files> ディレクティブ

    説明:マッãƒã™ã‚‹ãƒ•ァイルåã«é©ç”¨ã•れるディレクティブを囲む
    æ§‹æ–‡:<Files filename> ... </Files>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core

    <Files> ディレクティブã¯ã€ ãã®ä¸­ã«ã‚るディレクティブã®é©ç”¨ç¯„囲をファイルåã§åˆ¶é™ã—ã¾ã™ã€‚ <Directory> ディレクティブや <Location> ディレクティブ㨠åŒã˜ã‚ˆã†ãªæ©Ÿèƒ½ã‚’æŒã¡ã¾ã™ã€‚ ã“れã¯ã€</Files> ディレクティブã¨å¯¾ã« ãªã£ã¦ã„ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 ã“ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ä¸­ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ãƒ™ãƒ¼ã‚¹å (ファイルåã®æœ€å¾Œã®éƒ¨åˆ†) ãŒæŒ‡å®šã•れãŸãƒ•ァイルåã«ãƒžãƒƒãƒã™ã‚‹ã™ã¹ã¦ã®ã‚ªãƒ–ジェクトã«é©ç”¨ã•れã¾ã™ã€‚ <Files> セクション㯠<Directory> セクション㨠.htaccess ãŒèª­ã¿è¾¼ã¾ã‚ŒãŸå¾Œã€ <Location> セクションよりã¯å…ˆã« 設定ファイルã«ç¾ã‚ŒãŸé †ã«é©ç”¨ã•れã¾ã™ã€‚ <Files> ã¯ã€ <Directory> セクション内㫠ãƒã‚¹ãƒˆã•ã›ã‚‹ã“ã¨ãŒã§ã〠ファイルシステムã®ä¸€éƒ¨ã«ã®ã¿é™å®šã—ã¦é©ç”¨ã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    filename 引数ã¯ã€ãƒ•ァイルåã‹ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰æ–‡å­—列 ã§ã€ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã§ã¯ ? ã¯ä¸€ã¤ã®æ–‡å­—ã€* ã¯ä»»æ„ã®æ–‡å­—列ã«ãƒžãƒƒãƒã—ã¾ã™ã€‚ ~ ã¨ã„ã†æ–‡å­—を付加ã™ã‚‹ã“ã¨ã§æ­£è¦è¡¨ç¾ã‚’使ã†ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ 例ãˆã°ã€

    <Files ~ "\.(gif|jpe?g|png)$">

    ã¨ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ä¸€èˆ¬çš„ãªã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ç”»åƒãƒ•ォーマットã«ãƒžãƒƒãƒã—ã¾ã™ã€‚ ãŸã ã—〠<FilesMatch> ã‚’ä½¿ã†æ–¹ãŒ 推奨ã•れã¦ã„ã¾ã™ã€‚

    ã¡ãªã¿ã«ã€<Directory> 㨠<Location> セクションã¨ã¯ç•°ãªã‚Šã€ <Files> 㯠.htaccess ファイル内ã§åˆ©ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“れã«ã‚ˆã‚Šã€ãƒ¦ãƒ¼ã‚¶ãŒãƒ•ァイル毎ã«ã‚¢ã‚¯ã‚»ã‚¹ã®åˆ¶å¾¡ã‚’行ãªã†ã“ã¨ãŒã§ãるよã†ã« ãªã£ã¦ã„ã¾ã™ã€‚

    å‚ç…§

    top

    <FilesMatch> ディレクティブ

    説明:æ­£è¦è¡¨ç¾ã«ãƒžãƒƒãƒã™ã‚‹ãƒ•ァイルåã«é©ç”¨ã•れる ディレクティブを囲む
    æ§‹æ–‡:<FilesMatch regex> ... </FilesMatch>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core

    <FilesMatch> ディレクティブã¯ã€ <Files> ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–åŒæ§˜ã«ãã®ä¸­ã«ã‚るディレクティブã®é©ç”¨ç¯„囲をファイルåã§åˆ¶é™ã—ã¾ã™ã€‚ãŸã ã—〠ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«ã¯æ­£è¦è¡¨ç¾ã‚’指定ã—ã¾ã™ã€‚ 例ãˆã°:

    <FilesMatch "\.(gif|jpe?g|png)$">

    ã¯ä¸€èˆ¬çš„ãªã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ç”»åƒå½¢å¼ã«ãƒžãƒƒãƒã—ã¾ã™ã€‚

    å‚ç…§

    top

    ForceType ディレクティブ

    説明:ã™ã¹ã¦ã®ãƒžãƒƒãƒã™ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ãŒæŒ‡å®šã® MIME コンテントタイプ㧠é€ã‚‰ã‚Œã‚‹ã‚ˆã†ã«ã™ã‚‹
    æ§‹æ–‡:ForceType MIME-type|None
    コンテキスト:ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Apache 2.0 ã§ core ã«ç§»å‹•

    .htaccess ã‚„ <Directory> セクション〠<Location> セクション〠<Files> セクション㫠書ã‹ã‚ŒãŸå ´åˆã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãã“ã«ã‚ã‚‹ã™ã¹ã¦ã®ãƒ•ァイル㌠MIME-type ã§æŒ‡å®šã•れãŸã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã¨ã—ã¦æ‰±ã‚れるよã†ã«ã—ã¾ã™ã€‚ãŸã¨ãˆã°ã€ GIF ファイルã°ã‹ã‚Šã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãŒã‚ã£ã¦ã€ã™ã¹ã¦ã®ãƒ•ァイルを .gif ã§çµ‚ã‚らã›ãŸãã¯ãªã„ã¨ãã«ã€ä»¥ä¸‹ã®ã‚‚ã®ã‚’使用ã—ã¾ã™:

    ForceType image/gif

    DefaultType ã¨é•ã£ã¦ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—を決ã‚ã‚‹ã“ã¨ãŒã§ãã‚‹ã‹ã‚‚ã—れãªã„ ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã‚‚å«ã‚ã€ã™ã¹ã¦ã® MIME タイプã®é–¢é€£ä»˜ã‘ã‚’ 上書ãã™ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。

    None ã¨ã„ã†å€¤ã‚’使ã†ã“ã¨ã§ ForceType 㮠設定を無効ã«ã§ãã¾ã™:

    # force all files to be image/gif:
    <Location /images>
    ForceType image/gif
    </Location>

    # but normal mime-type associations here:
    <Location /images/mixed>
    ForceType None
    </Location>

    top

    GprofDir ディレクティブ

    説明:Directory to write gmon.out profiling data to.
    æ§‹æ–‡:GprofDir /tmp/gprof/|/tmp/gprof/%
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    HostnameLookups ディレクティブ

    説明:クライアント㮠IP アドレス㮠DNS ルックアップを 有効ã«ã™ã‚‹
    æ§‹æ–‡:HostnameLookups On|Off|Double
    デフォルト:HostnameLookups Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Core
    モジュール:core

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ãƒ›ã‚¹ãƒˆåをログåŽé›†ã§ãるよã†ã« DNS ルックアップを有効ã«ã—ã¾ã™ (ã•らã«ã€CGI/SSI ã« REMOTE_HOST 変数ã¨ã—ã¦æ¸¡ã—ã¾ã™)。 Doubleを指定ã—ãŸå ´åˆã€2 é‡ã®é€†å¼•ãを行ãªã„ã¾ã™ã€‚ ã¤ã¾ã‚Šã€é€†å¼•ãã®å¾Œã«ã€ãã®çµæžœã«å¯¾ã—ã¦æ­£å¼•ãを行ãªã„ã¾ã™ã€‚正引ãã® çµæžœã® IP アドレスã®ä¸­ã«ã‚ªãƒªã‚¸ãƒŠãƒ«ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ä¸€è‡´ã™ã‚‹ã‚‚ã®ãŒãªã‘れ㰠ãªã‚Šã¾ã›ã‚“。("tcpwrappers" ã®ç”¨èªžã§ã¯ PARANOID ã¨å‘¼ã°ã‚Œã¦ã„ã¾ã™ã€‚)

    mod_authz_host ã§ãƒ›ã‚¹ãƒˆåã«ã‚ˆã‚‹ã‚¢ã‚¯ã‚»ã‚¹ 制御を行ãªã†å ´åˆã«ã¯ã€ 設定ã®å¦‚何ã«ã‚ˆã‚‰ãš 2 é‡ã®é€†å¼•ããŒå®Ÿè¡Œã•れã¾ã™ã€‚ ã“れã¯ã€ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã‚’ä¿ã¤ãŸã‚ã«å¿…è¦ã§ã™ã€‚ HostnameLookups Double を設定ã—ãªã„é™ã‚Šã€ ä»–ã®éƒ¨åˆ†ã¯ã“ã® 2 é‡é€†å¼•ãã®çµæžœã‚’使ã†ã“ã¨ã¯ã§ãã¾ã›ã‚“。 例ãˆã°ã€HostnameLookups On ã¨è¨­å®šã—ã¦ã‚る状態ã§ã€ ホストåã«ã‚ˆã‚‹ã‚¢ã‚¯ã‚»ã‚¹åˆ¶é™ã‚’行ãªã£ãŸã‚ªãƒ–ジェクトã¸ã® リクエストをå—ã‘ãŸã¨ã™ã‚‹ã¨ã€2 é‡ã®é€†å¼•ããŒæˆåŠŸã™ã‚‹ã‹å¦ã‹ã«ã‚ˆã‚‰ãšã€ REMOTE_HOST ã«ã¯é€šå¸¸ã®é€†å¼•ãçµæžœãŒæ¸¡ã•れã¾ã™ã€‚

    ディレクティブã®ãƒ‡ãƒ•ォルト㯠本当ã«é€†å¼•ãã‚’å¿…è¦ã¨ã—ã¦ã„ã‚‹ã‚ã‘ã§ã¯ãªã„サイト㮠ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒˆãƒ©ãƒ•ィックを低減ã•ã›ã‚‹ãŸã‚ã«ã€Off ã«ãªã£ã¦ã„ã¾ã™ã€‚ ルックアップã«ã‚ˆã‚‹ä½™è¨ˆãªé…å»¶ãŒãªããªã‚‹ãŸã‚〠エンドユーザã«ã¨ã£ã¦ã‚‚良ã„ã§ã—ょã†ã€‚ DNS ã®ãƒ«ãƒƒã‚¯ã‚¢ãƒƒãƒ—ã«ã¯ã€ã‹ãªã‚Šã®æ™‚é–“ãŒå¿…è¦ã¨ãªã‚‹å ´åˆãŒå¤šã〠負è·ã®é«˜ã„サイトã§ã¯ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠Off ã«ã™ã¹ãã§ã™ã€‚ ãªãŠã€/support ディレクトリã«å«ã¾ã‚Œã€ãƒ‡ãƒ•ォルトã§ã¯ インストールディレクトリ㮠bin サブディレクトリ㫠インストールã•れる logresolve ユーティリティã«ã‚ˆã‚Šã€ Apache ã®å‹•作ã¨ã¯åˆ¥ã«ã€ãƒ­ã‚°ã«æ®‹ã•れã¦ã„ã‚‹ IP アドレスã‹ã‚‰ãƒ›ã‚¹ãƒˆåã‚’ ルックアップã™ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã™ã€‚

    top

    HttpProtocolOptions ディレクティブ

    説明:Modify restrictions on HTTP Request Messages
    æ§‹æ–‡:HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0]
    デフォルト:HttpProtocolOptions Strict LenientMethods Allow0.9
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:2.2.32 or 2.4.24 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    <If> ディレクティブ

    説明:実行時ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæ¡ä»¶ã‚’満ãŸã—ãŸå ´åˆã«ã®ã¿é©ç”¨ã•れる ディレクティブを包å«ã™ã‚‹
    æ§‹æ–‡:<If expression> ... </If>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core

    <If> ディレクティブ㯠実行時ã«å¼ã‚’評価ã—ã€æ¡ä»¶å¼ãŒçœŸã«ãªã‚‹ã¨ãã«ã®ã¿ 内包ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’é©ç”¨ã—ã¾ã™ã€‚ 例ãˆã°

    <If "$req{Host} = ''">

    上記例㯠Host: ヘッダã®å­˜åœ¨ã—ãªã„ HTTP/1.0 ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã« マッãƒã—ã¾ã™ã€‚

    å‚ç…§

    top

    <IfDefine> ディレクティブ

    説明:起動時ã«ãƒ†ã‚¹ãƒˆãŒçœŸã§ã‚ã‚‹ã¨ãã®ã¿ã«å‡¦ç†ã•れるディレクティブを 囲む
    æ§‹æ–‡:<IfDefine [!]parameter-name> ... </IfDefine>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core

    <IfDefine test>...</IfDefine> セクションã¯ã€ ディレクティブをæ¡ä»¶ä»˜ãã§æŒ‡å®šã™ã‚‹ãŸã‚ã«åˆ©ç”¨ã—ã¾ã™ã€‚ <IfDefine> セクション㫠å«ã¾ã‚Œã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€test㌠定義ã•れã¦ã„ã‚‹ã¨ãã®ã¿å‡¦ç†ã•れã¾ã™ã€‚ ã‚‚ã— test ãŒå®šç¾©ã•れã¦ã„ãªã‘れã°ã€ é–‹å§‹ã¨çµ‚äº†ã®æŒ‡å®šã®é–“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ç„¡è¦–ã•れã¾ã™ã€‚

    <IfDefine> セクションディレクティブ㫠指定ã™ã‚‹ test ã¯ã€ 次ã®äºŒã¤ã®å½¢å¼ã®ã†ã¡ã®ä¸€ã¤ã‚’ã¨ã‚Šã¾ã™:

    • parameter-name
    • !parameter-name

    å‰è€…ã®å ´åˆã«ã¯ã€parameter-name ã¨å付ã‘られãŸãƒ‘ラメータ㌠定義ã•れã¦ã„れã°é–‹å§‹ã¨çµ‚了ã®é–“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒå‡¦ç†ã•れã¾ã™ã€‚ 後者ã®å ´åˆã¯é€†ã§ã€parameter-name ãŒæŒ‡å®šã•れã¦ã„ãªã„ å ´åˆã«å‡¦ç†ã•れã¾ã™ã€‚

    parameter-name 引数ã¯ã€ã‚µãƒ¼ãƒã‚’èµ·å‹•ã™ã‚‹éš›ã« httpd ã®ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã« -Dparameter ã¨ã„ã†å½¢ã§æŒ‡å®šã™ã‚‹ã‹ ã‚ã‚‹ã„㯠Define ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã•れるã¨å®šç¾©ã•れã¾ã™ã€‚

    <IfDefine> セクション㯠入れå­ã«ã™ã‚‹ã“ã¨ãŒã§ãã€è¤‡æ•°ã®ãƒ‘ラメータã«ã‚ˆã‚‹ãƒ†ã‚¹ãƒˆã‚’ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã§ãã¾ã™ã€‚ 例:

    httpd -DReverseProxy -DUseCache -DMemCache ...

    # httpd.conf
    <IfDefine ReverseProxy>
    LoadModule proxy_module modules/mod_proxy.so
    LoadModule proxy_http_module modules/mod_proxy_http.so
    <IfDefine UseCache>
    LoadModule cache_module modules/mod_cache.so
    <IfDefine MemCache>
    LoadModule mem_cache_module modules/mod_mem_cache.so
    </IfDefine>
    <IfDefine !MemCache>
    LoadModule cache_disk_module modules/mod_cache_disk.so
    </IfDefine>
    </IfDefine>
    </IfDefine>

    top

    <IfDirective> ディレクティブ

    説明:Encloses directives that are processed conditional on the presence or absence of a specific directive
    æ§‹æ–‡:<IfDirective [!]directive-name> ... </IfDirective>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Available in 2.4.34 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    å‚ç…§

    top

    <IfFile> ディレクティブ

    説明:Encloses directives that will be processed only if file exists at startup
    æ§‹æ–‡:<IfFile [!]filename> ... </IfFile>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Available in 2.4.34 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    <IfModule> ディレクティブ

    説明:モジュールã®å­˜åœ¨ã™ã‚‹ã‹ã—ãªã„ã‹ã«å¿œã˜ã¦å‡¦ç†ã•れる ディレクティブを囲む
    æ§‹æ–‡:<IfModule [!]module-file|module-identifier> ... </IfModule>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:モジュール識別å­ã¯ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.1 以é™ã§ä½¿ç”¨å¯èƒ½ã€‚

    <IfModule test>...</IfModule> セクションã¯ã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒå­˜åœ¨ã™ã‚‹ã¨ãã«å‡¦ç†ã•れるディレクティブを 指定ã™ã‚‹ãŸã‚ã«åˆ©ç”¨ã—ã¾ã™ã€‚ <IfModule> セクション㫠å«ã¾ã‚Œã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€test ã§æŒ‡å®šã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒçµ„ã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹ã¨ãã®ã¿å‡¦ç†ã•れã¾ã™ã€‚ ã‚‚ã— test ãŒçµ„ã¿è¾¼ã¾ã‚Œã¦ã„ãªã‘れã°ã€é–‹å§‹ã¨çµ‚了ã®é–“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ– ã¯ç„¡è¦–ã•れã¾ã™ã€‚

    <IfModule> セクションディレクティブ㫠指定ã™ã‚‹ test ã¯ã€ 次ã®äºŒã¤ã®å½¢å¼ã®ã†ã¡ã®ä¸€ã¤ã‚’ã¨ã‚Šã¾ã™ã€‚

    • module
    • !module

    å‰è€…ã®å ´åˆã¯ã€module ã¨å付ã‘られãŸãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒ Apache ã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„れ㰠(コンパイル済ã¿ã®ã‚‚ã®ã¨ã€LoadModule を利用ã—㦠動的ã«èª­ã¿è¾¼ã‚“ã ã‚‚ã®ã®ä¸¡æ–¹)〠開始ã¨çµ‚了ã®é–“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒå‡¦ç†ã•れã¾ã™ã€‚ 後者ã®å ´åˆã¯é€†ã§ã€module ãŒçµ„ã¿è¾¼ã¾ã‚Œã¦ã„ãªã„ å ´åˆã«å‡¦ç†ã•れã¾ã™ã€‚

    module 引数ã¯ã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«è­˜åˆ¥å­ã‹ コンパイルをã—ãŸæ™‚ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ãƒ•ァイルåã§ã™ã€‚ 例ãˆã°ã€rewrite_module ã¯è­˜åˆ¥å­ã§ mod_rewrite.c ã¯ãƒ•ァイルåã§ã™ã€‚ モジュールãŒè¤‡æ•°ã®ã‚½ãƒ¼ã‚¹ãƒ•ァイルã‹ã‚‰æ§‹æˆã•れã¦ã„ã‚‹å ´åˆã¯ã€æ–‡å­—列 STANDARD20_MODULE_STUFF ãŒã‚るファイルã®åå‰ã‚’ 使ã£ã¦ãã ã•ã„。

    <IfModule> セクション㯠入れå­ã«ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã‚り〠複数ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ãƒ†ã‚¹ãƒˆã‚’行ãªã†ãŸã‚ã«ä½¿ç”¨ã§ãã¾ã™ã€‚

    特定ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®å­˜åœ¨ã«é–¢ã‚らãšå‹•作ã™ã‚‹ 設定ファイルã®åŽŸæœ¬ãŒå¿…è¦ãªã¨ãã«ã®ã¿ã“ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã‚’使用ã—ã¦ãã ã•ã„。 通常ã®å‹•作ã§ã¯ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ <IfModule> セクションã®ä¸­ã« 入れる必è¦ã¯ã‚りã¾ã›ã‚“。
    top

    <IfSection> ディレクティブ

    説明:Encloses directives that are processed conditional on the presence or absence of a specific section directive
    æ§‹æ–‡:<IfSection [!]section-name> ... </IfSection>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Available in 2.4.34 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    å‚ç…§

    top

    Include ディレクティブ

    説明:サーãƒè¨­å®šãƒ•ァイル中ã‹ã‚‰ä»–ã®è¨­å®šãƒ•ァイルをå–り込む
    æ§‹æ–‡:Include file-path|directory-path
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:ワイルドカードã«ã‚ˆã‚‹ãƒžãƒƒãƒã¯ 2.0.41 以é™ã§ä½¿ç”¨å¯èƒ½

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«ã‚ˆã‚Šã€ã‚µãƒ¼ãƒã®è¨­å®šãƒ•ァイルã‹ã‚‰ ä»–ã®è¨­å®šãƒ•ァイルをインクルードã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    複数ã®ãƒ•ァイルをアルファベット順ã«ä¸€åº¦ã«èª­ã¿è¾¼ã‚€ãŸã‚ã«ã€ ã‚·ã‚§ãƒ«å½¢å¼ (fnmatch) ã®ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰æ–‡å­—を使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚ ã•らã«ã€Include ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’指定ã—ãŸå ´åˆã¯ã€ ディレクトリã¨ãã®ã‚µãƒ–ディレクトリ内ã®å…¨ã¦ã®ãƒ•ァイルを アルファベット順ã«èª­ã¿è¾¼ã‚“ã§ã€è¨­å®šãƒ•ァイルã¨ã—ã¦å‡¦ç†ã—ã¾ã™ã€‚ ã—ã‹ã—ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªå…¨ä½“を読ã¿è¾¼ã‚€ã®ã¯ãŠå‹§ã‚ã§ãã¾ã›ã‚“。 ãµã¨ã—ãŸã“ã¨ã‹ã‚‰ httpd ãŒèª­ã¿è¾¼ã¿ã«å¤±æ•—ã™ã‚‹ã‚ˆã†ãª ä¸€æ™‚ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«æ®‹ã—ã¦ã—ã¾ã†ã‚ˆã†ãªã“ã¨ãŒã‚ˆãã‚ã‚‹ã‹ã‚‰ã§ã™ã€‚

    指定ã™ã‚‹ãƒ•ァイルパスã¯çµ¶å¯¾ãƒ‘スã‹ã€ ServerRoot ディレクトリã‹ã‚‰ã® 相対パスã‹ã€ã®ã©ã¡ã‚‰ã‹ã§ã™ã€‚

    例:

    Include /usr/local/apache2/conf/ssl.conf
    Include /usr/local/apache2/conf/vhosts/*.conf

    ServerRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã®å ´åˆã¯:

    Include conf/ssl.conf
    Include conf/vhosts/*.conf

    å‚ç…§

    top

    IncludeOptional ディレクティブ

    説明:Includes other configuration files from within the server configuration files
    æ§‹æ–‡:IncludeOptional file-path|directory-path|wildcard
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Available in 2.3.6 and later. Not existent file paths without wildcards do not cause SyntaxError after 2.4.30

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    å‚ç…§

    top

    KeepAlive ディレクティブ

    説明:HTTP ã®æŒç¶šçš„ãªæŽ¥ç¶šã‚’æœ‰åŠ¹ã«ã™ã‚‹
    æ§‹æ–‡:KeepAlive On|Off
    デフォルト:KeepAlive On
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    HTTP/1.0 ã® Keep-Alive 拡張㨠HTTP/1.1 ã®æŒç¶šçš„æŽ¥ç¶šã®æ©Ÿèƒ½ã¯ã€ 複数ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒåŒã˜ TCP ã®æŽ¥ç¶šã§é€ã‚‰ã‚Œã‚‹ã€é•·æ™‚é–“æŒç¶šã™ã‚‹ HTTP セッションをæä¾›ã—ã¾ã™ã€‚ãŸãã•ã‚“ã®ç”»åƒãŒ å«ã¾ã‚Œã‚‹ HTML ドキュメントã§ã¯å ´åˆã«ã‚ˆã£ã¦ã¯é…延時間㌠50% 短縮ã•ã‚Œã‚‹çµæžœã‚‚ ã§ã¦ã„ã¾ã™ã€‚Keep-Alive 接続を有効ã«ã™ã‚‹ã«ã¯ KeepAlive On ã¨è¨­å®šã—ã¾ã™ã€‚

    HTTP/1.0 ã«å¯¾å¿œã—ãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®éš›ã«ã¯ã€ クライアントより特ã«è¦æ±‚ãŒã‚ã£ãŸå ´åˆã®ã¿ Keep-Alive 接続ã¨ãªã‚Šã¾ã™ã€‚ ã•らã«ã€HTTP/1.0 クライアントã§ã¯ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®å®¹é‡ãŒå…ˆã« (訳注: è¦æ±‚ã«å¯¾ã—ã¦å¿œç­”ã‚’è¿”ã™å‰ã«) ã‚ã‹ã‚‹å ´åˆã®ã¿ Keep-Alive 接続を利用ã§ãã¾ã™ã€‚ ã“れã¯ã€CGI ã®å‡ºåŠ›ã‚„ SSI ã®ãƒšãƒ¼ã‚¸ã€ サーãƒãŒç”Ÿæˆã—ãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ãƒªã‚¹ãƒˆã®ã‚ˆã†ãªå‹•的コンテンツを HTTP/1.0 クライアントã«é€ã‚‹å ´åˆã«ã¯ Keep-Alive 接続を使ãˆãªã„ã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚ HTTP/1.1 ã«å¯¾å¿œã—ãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®éš›ã«ã¯ã€ ç‰¹ã«æŒ‡å®šã•れãªã„é™ã‚Šã¯ãƒ‡ãƒ•ォルトã¨ã—ã¦æŒç¶šçš„ãªæŽ¥ç¶šãŒè¡Œãªã‚れã¾ã™ã€‚ クライアントãŒè¦æ±‚ã™ã‚Œã°ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®å®¹é‡ã‚’判別ã§ããªã„ã‚‚ã®ã‚’ æŒç¶šçš„ãªæŽ¥ç¶šã‚’é€šã—ã¦é€ã‚‹ãŸã‚ã«ã€ãƒãƒ£ãƒ³ã‚¯ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãŒç”¨ã„られã¾ã™ã€‚

    クライアント㌠Keep-Alive コãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’使用ã—ã¦ã„ã‚‹å ´åˆã€ ãã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’通ã—ã¦ã©ã‚Œã ã‘ãŸãã•ã‚“ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒå‡¦ç†ã•れã¦ã‚‚〠ãれã¯ã€Œãƒªã‚¯ã‚¨ã‚¹ãƒˆã€1 ã¤ã¨ã—ã¦ã€MaxRequestsPerChild ディレクティブã§ã¯ æ•°ãˆã‚‰ã‚Œã¾ã™ã€‚

    å‚ç…§

    top

    KeepAliveTimeout ディレクティブ

    説明:æŒç¶šçš„ãªæŽ¥ç¶šã§æ¬¡ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæ¥ã‚‹ã¾ã§ã‚µãƒ¼ãƒãŒå¾…ã¤æ™‚é–“
    æ§‹æ–‡:KeepAliveTimeout seconds
    デフォルト:KeepAliveTimeout 5
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    接続を閉ã˜ã‚‹å‰ã«ã€Apache ãŒæ¬¡ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’何秒待ã¤ã‹ã‚’指定ã—ã¾ã™ã€‚ リクエストをå—ã‘付ã‘ãŸå¾Œã¯ã€Timeout ディレクティブã«ã‚ˆã£ã¦ 指定ã•れãŸã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆå€¤ãŒä½¿ã‚れã¾ã™ã€‚

    KeepAliveTimeout を大ããªå€¤ã«è¨­å®šã™ã‚‹ã¨ã€ è² è·ã®é«˜ã„サーãƒã«ãŠã„ã¦ã¯ãƒ‘フォーマンスã®å•題を引ãèµ·ã“ã™å ´åˆãŒã‚りã¾ã™ã€‚ タイムアウトãŒé•·ã‘れã°é•·ã„ã»ã©ã€ã‚ˆã‚Šå¤šãã®ã‚µãƒ¼ãƒãƒ—ロセス㌠活性ã§ãªã„クライアントã‹ã‚‰ã®æŽ¥ç¶šã®çµ‚了を待ã¡ç¶šã‘ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚

    åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆã§ã¯ã€ NameVirtualHost ã®ã‚»ãƒƒãƒˆã®ä¸­ã§æœ€åˆã«å®šç¾©ã•れãŸãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®å€¤ (デフォルトホスト) ãŒä½¿ã‚れã¾ã™ã€‚ ãã®ä»–ã®å€¤ã¯ç„¡è¦–ã•れã¾ã™ã€‚

    top

    <Limit> ディレクティブ

    説明:囲ã„ã®ä¸­ã«ã‚るアクセス制御ã®é©ç”¨ã‚’特定㮠HTTP メソッドã®ã¿ã« 制é™ã™ã‚‹
    æ§‹æ–‡:<Limit method [method] ... > ... </Limit>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core

    アクセス制御ã¯ã€é€šå¸¸å…¨ã¦ã®ã‚¢ã‚¯ã‚»ã‚¹ãƒ¡ã‚½ãƒƒãƒ‰ã«å¯¾ã—㦠影響ã—ã€æ™®é€šã¯ã“ã‚ŒãŒæœ›ã¾ã—ã„æŒ™å‹•ã§ã™ã€‚ ãã†ã—ãŸã“ã¨ã‹ã‚‰ã€å¤§éƒ¨åˆ†ã®å ´åˆã«ã¯ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã«é–¢ã‚るディレクティブを <Limit> セクション内㫠書ãã¹ãã§ã¯ã‚りã¾ã›ã‚“。

    <Limit> ディレクティブ㮠目的ã¯ã€ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã®ç¯„囲を 指定ã•れ㟠HTTP メソッドã«é™å®šã™ã‚‹ãŸã‚ã§ã™ã€‚ ãれ以外ã®ãƒ¡ã‚½ãƒƒãƒ‰ã¯ã€<Limit> ã§å›²ã‚れãŸã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã® 影響をå—ã‘ã¾ã›ã‚“。 以下ã®ä¾‹ã¯ã€POST, PUT, DELETE ã®ãƒ¡ã‚½ãƒƒãƒ‰ã«å¯¾ã—ã¦ã®ã¿ã‚¢ã‚¯ã‚»ã‚¹ã®åˆ¶å¾¡ã‚’行ãªã„〠ãれ以外ã®ãƒ¡ã‚½ãƒƒãƒ‰ã«ã¤ã„ã¦ã¯åˆ¶é™ã—ã¾ã›ã‚“:

    <Limit POST PUT DELETE>
    Require valid-user
    </Limit>

    メソッドåã«ã¯ä»¥ä¸‹ã®ä¸­ã‹ã‚‰ä¸€ã¤ä»¥ä¸Šã‚’列挙ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™: GET, POST, PUT, DELETE, CONNECT, OPTIONS, PATCH, PROPFIND, PROPPATCH, MKCOL, COPY, MOVE, LOCK, UNLOCK. メソッドåã¯ å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã™ã€‚ GET を指定ã—ãŸå ´åˆã«ã¯ HEAD リクエストã«ã‚‚制é™ãŒã‹ã‹ã‚Šã¾ã™ã€‚TRACE メソッドã«åˆ¶é™ã‚’ã‹ã‘ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“ (<TraceEnable> å‚ç…§)。

    アクセス制御ãŒç›®çš„ã®å ´åˆã¯ <Limit> セクションã®ä»£ã‚り㫠<LimitExcept> セクションを使用ã—ãŸæ–¹ãŒè‰¯ã„ã§ã—ょã†ã€‚ <LimitExcept> セクションã§ã¯ä¸ç‰¹å®šã®ãƒ¡ã‚½ãƒƒãƒ‰ã«å¯¾ã—ã¦ã‚‚防御ã§ãã‚‹ã‹ã‚‰ã§ã™ã€‚
    top

    <LimitExcept> ディレクティブ

    説明:指定ã•れãŸã‚‚ã®ä»¥å¤–ã® HTTP メソッドã«ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã‚’ 制é™ã™ã‚‹
    æ§‹æ–‡:<LimitExcept method [method] ... > ... </LimitExcept>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core

    <LimitExcept> 㨠</LimitExcept> ã¯ã€å¼•æ•°ã« å«ã¾ã‚Œã¦ã„ãªã„ HTTP ã®ã‚¢ã‚¯ã‚»ã‚¹ãƒ¡ã‚½ãƒƒãƒ‰ã«é©ç”¨ã™ã‚‹ãŸã‚ã®ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ ディレクティブを括るãŸã‚ã«åˆ©ç”¨ã—ã¾ã™ã€‚ ã¤ã¾ã‚Šã€<Limit> セクションã®å対ã®å‹•作をã—〠標準ã®ãƒ¡ã‚½ãƒƒãƒ‰ã¨æ¨™æº–外や未èªè­˜ã®ãƒ¡ã‚½ãƒƒãƒ‰ã®å ´åˆã®ä¸¡æ–¹ã‚’設定ã§ãã¾ã™ã€‚ <Limit> ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚‚ ä½µã›ã¦å‚ç…§ã—ã¦ãã ã•ã„。

    例:

    <LimitExcept POST GET>
    Require valid-user
    </LimitExcept>

    top

    LimitInternalRecursion ディレクティブ

    説明:内部リダイレクトã¨å…¥ã‚Œå­ã«ãªã£ãŸã‚µãƒ–ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æœ€å¤§æ•°ã‚’決定ã™ã‚‹
    æ§‹æ–‡:LimitInternalRecursion number [number]
    デフォルト:LimitInternalRecursion 10
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Apache 2.0.47 以é™ã§ä½¿ç”¨å¯èƒ½

    内部リダイレクトã¯ä¾‹ãˆã° Action ディレクティブを 使ã£ã¦ã„ã‚‹ã¨ãã«èµ·ã“りã¾ã™ã€‚Action ディレクティブ㯠元々ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ CGI スクリプトã«å†…部リダイレクトを行ãªã„ã¾ã™ã€‚ サブリクエストã¯ã„ãã¤ã‹ã® URI ã«å¯¾ã—ã¦ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã•れãŸã¨ã㫠何ãŒèµ·ã“ã‚‹ã‹ã‚’調ã¹ã‚‹ãŸã‚ã® Apache ã®æ©Ÿæ§‹ã§ã™ã€‚例ãˆã°ã€mod_dir 㯠DirectoryIndex ディレクティブ ãŒãƒªã‚¹ãƒˆã™ã‚‹ãƒ•ァイルを調ã¹ã‚‹ãŸã‚ã«ã‚µãƒ–リクエストを使ã„ã¾ã™ã€‚

    LimitInternalRecursion ã¯å†…部リダイレクトや サブリクエストãŒç„¡é™ãƒ«ãƒ¼ãƒ—ã«é™¥ã£ãŸã¨ãã®ã‚µãƒ¼ãƒã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã‚’防ãŽã¾ã™ã€‚ 普通ã€ãã®ã‚ˆã†ãªãƒ«ãƒ¼ãƒ—ã¯è¨­å®šã«å¤±æ•—ã—ãŸã¨ãã«ç™ºç”Ÿã—ã¾ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆæ¯Žã«è©•価ã•れるã€äºŒã¤ã®é•ã†é™ç•Œå€¤ã‚’ 設定ã—ã¾ã™ã€‚最åˆã® number ã¯ã€èµ·ã“り得る å†…éƒ¨ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æœ€å¤§å€¤ã‚’設定ã—ã¾ã™ã€‚二ã¤ã‚ã® number 㯠サブリクエストãŒå…¥ã‚Œå­ã«ã§ãã‚‹æ·±ã•を設定ã—ã¾ã™ã€‚number ã‚’ 一ã¤ã ã‘指定ã—ãŸã¨ãã¯ã€ä¸¡æ–¹ã®é™ç•Œå€¤ã«ãã®å€¤ãŒè¨­å®šã•れã¾ã™ã€‚

    例

    LimitInternalRecursion 5

    top

    LimitRequestBody ディレクティブ

    説明:クライアントã‹ã‚‰é€ã‚‰ã‚Œã‚‹ HTTP リクエストã®ãƒœãƒ‡ã‚£ã® ç·é‡ã‚’制é™ã™ã‚‹
    æ§‹æ–‡:LimitRequestBody bytes
    デフォルト:LimitRequestBody 0
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒœãƒ‡ã‚£ã«è¨±ã•れるãƒã‚¤ãƒˆæ•°ã€bytes ã‚’ 0 (無制é™ã‚’æ„味ã—ã¾ã™) ã‹ã‚‰ 2147483647 (2GB) ã¾ã§ã®æ•°å€¤ã§æŒ‡å®šã—ã¾ã™ã€‚

    LimitRequestBody ディレクティブã¯ã€ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæ›¸ã‹ã‚ŒãŸã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆ (サーãƒå…¨ä½“ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã€ãƒ•ァイルã€ãƒ­ã‚±ãƒ¼ã‚·ãƒ§ãƒ³) 内㧠許容ã™ã‚‹ HTTP リクエストメッセージボディã®ã‚µã‚¤ã‚ºã«åˆ¶é™ã‚’ã‹ã‘ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ クライアントã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒãã®åˆ¶é™å€¤ã‚’è¶Šãˆã¦ã„れã°ã€ サーãƒã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’処ç†ã›ãšã«ã‚¨ãƒ©ãƒ¼ã‚’è¿”ã—ã¾ã™ã€‚ 普通ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãƒœãƒ‡ã‚£ã®ã‚µã‚¤ã‚ºã¯ã€ãƒªã‚½ãƒ¼ã‚¹ã®ç¨®é¡žã‚„ 許å¯ã•れã¦ã„るメソッドã«ã‚ˆã£ã¦å¤§ãã変ã‚りã¾ã™ã€‚ CGI スクリプトã¯ã€ã‚ˆã情報をå—ä¿¡ã™ã‚‹ãŸã‚㫠メッセージボディを使ã„ã¾ã™ã€‚ PUT メソッドã®å®Ÿè£…ã¯ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®å€¤ã¨ã—㦠少ãªãã¨ã‚‚ã‚るリソースã«å¯¾ã—ã¦ã‚µãƒ¼ãƒãŒå—ã‘付ã‘よã†ã¨ã™ã‚‹ 表ç¾ã®å¤§ãã•ã»ã©ã®å€¤ã‚’å¿…è¦ã¨ã—ã¾ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ 管ç†è€…ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®ç•°å¸¸ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’制御ã§ãるよã†ã«ã—〠何らã‹ã®å½¢ã®ã‚µãƒ¼ãƒ“ã‚¹æ‹’å¦æ”»æ’ƒ (訳注:DoS) ã‚’é¿ã‘ã‚‹ã®ã«æœ‰åйã§ã™ã€‚

    ã‚る場所ã¸ã®ãƒ•ァイルアップロードを許å¯ã™ã‚‹å ´åˆã«ã€ アップロードã§ãるファイルã®ã‚µã‚¤ã‚ºã‚’ 100K ã«åˆ¶é™ã—ãŸã‘れã°ã€ 以下ã®ã‚ˆã†ã«æŒ‡å®šã—ã¾ã™:

    LimitRequestBody 102400

    top

    LimitRequestFields ディレクティブ

    説明:クライアントã‹ã‚‰ã® HTTP リクエストã®ãƒ˜ãƒƒãƒ€ãƒ•ã‚£ãƒ¼ãƒ«ãƒ‰ã®æ•°ã‚’ 制é™ã™ã‚‹
    æ§‹æ–‡:LimitRequestFields number
    デフォルト:LimitRequestFields 100
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core

    number ã«ã¯ã€0 (無制é™ã‚’æ„味ã—ã¾ã™) ã‹ã‚‰ 32767 ã¾ã§ã®æ•´æ•°ã‚’指定ã—ã¾ã™ã€‚ デフォルト値ã¯ã€å®šæ•° DEFAULT_LIMIT_REQUEST_FIELDS ã«ã‚ˆã‚Šã‚³ãƒ³ãƒ‘イル時ã«å®šç¾©ã•れã¾ã™ (é…布時ã«ã¯ 100 ã¨æŒ‡å®šã•れã¦ã„ã¾ã™)。

    LimitRequestBody ディレクティブã¯ã€ サーãƒç®¡ç†è€…㌠HTTP リクエスト中ã«ãŠã„ã¦è¨±å¯ã™ã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ãƒ•ィールド数を 指定ã—ã¾ã™ã€‚ サーãƒã¯ã“ã®å€¤ã«ã¯é€šå¸¸ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å«ã¾ã‚Œã‚‹ã§ã‚ã‚ã† ãƒ•ã‚£ãƒ¼ãƒ«ãƒ‰ã®æ•°ã‚ˆã‚Šå¤§ããªå€¤ãŒå¿…è¦ã¨ã—ã¾ã™ã€‚ クライアントã«ã‚ˆã‚Šä½¿ã‚れãŸè¦æ±‚ãƒ˜ãƒƒãƒ€ãƒ¼ãƒ•ã‚£ãƒ¼ãƒ«ãƒ‰ã®æ•°ãŒ 20 ã‚’è¶…ãˆã‚‹ã“ã¨ã¯ã»ã¨ã‚“ã©ã‚りã¾ã›ã‚“ãŒã€ ã“れã¯ç¨®ã€…ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®å®Ÿè£…ã«ã‚ˆã£ã¦å¤‰ã‚り〠詳細ãªã‚³ãƒ³ãƒ†ãƒ³ãƒˆãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ã™ã‚‹ãŸã‚ã®ãƒ–ラウザã®è¨­å®šã¾ã§ã«ã‚‚ 影響ã•れるã“ã¨ãŒã‚りã¾ã™ã€‚ オプション㮠HTTP æ‹¡å¼µã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ãƒ•ィールドを使ã£ã¦è¡¨ã•れる場åˆãŒ 多ãã‚りã¾ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ 管ç†è€…ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®ç•°å¸¸ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’制御ã§ãるよã†ã«ã—〠何らã‹ã®å½¢ã®ã‚µãƒ¼ãƒ“ã‚¹æ‹’å¦æ”»æ’ƒ (訳注:DoS) ã‚’é¿ã‘ã‚‹ã®ã«æœ‰åйã§ã™ã€‚ リクエストã®ãƒ•ィールドãŒå¤šéŽãŽã‚‹ã“ã¨ã‚’æ„味ã™ã‚‹ã‚¨ãƒ©ãƒ¼å¿œç­”㌠普通ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«è¿”ã•れるよã†ãªæ™‚ã¯ã“ã®å€¤ã‚’増やã—ã¦ãã ã•ã„。

    例:

    LimitRequestFields 50

    top

    LimitRequestFieldSize ディレクティブ

    説明:クライアントã‹ã‚‰ã® HTTP リクエストã®ãƒ˜ãƒƒãƒ€ã® サイズを制é™ã™ã‚‹
    æ§‹æ–‡:LimitRequestFieldSize bytes
    デフォルト:LimitRequestFieldSize 8190
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€HTTP リクエストヘッダ一ã¤ã§å—付ã‘ã‚‹ ãƒã‚¤ãƒˆæ•° bytes を指定ã—ã¾ã™ã€‚

    LimitRequestFieldSize ディレクティブã¯ã€ HTTP リクエストヘッダã§è¨±å®¹ã•れるサイズを増減ã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ サーãƒã¯ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®å€¤ã¨ã—ã¦ã€ 一般的ãªã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒé€ã‚‰ã‚ŒãŸéš›ã«ã€ãã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã« 付属ã—ã¦ã„ã‚‹ã©ã®ãƒ˜ãƒƒãƒ€ãƒ•ィールドã«ã¤ã„ã¦ã‚‚〠å分足りる大ãã•ã«ãªã£ã¦ã„ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 一般的ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ã®ã‚µã‚¤ã‚ºã¨ã„ã£ã¦ã‚‚ã€ãã®å¤§ãã•ã¯å€‹ã€…㮠クライアントã®å®Ÿè£…ã«ã‚ˆã£ã¦å¤§ããç•°ãªã‚Šã€ 詳細ãªã‚³ãƒ³ãƒ†ãƒ³ãƒˆãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã‚’サãƒãƒ¼ãƒˆã™ã‚‹ã‹ã©ã†ã‹ã®ã€ ブラウザã®è¨­å®šã«ã‚‚影響ã•れãŸã‚Šã—ã¾ã™ã€‚ SPNEGO èªè¨¼ãƒ˜ãƒƒãƒ€ã§ã¯ 12392 ãƒã‚¤ãƒˆã«ã¾ã§åŠã¶ã“ã¨ã™ã‚‰ã‚りã¾ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ 管ç†è€…ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®ç•°å¸¸ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’制御ã§ãるよã†ã«ã—〠何らã‹ã®å½¢ã®ã‚µãƒ¼ãƒ“ã‚¹æ‹’å¦æ”»æ’ƒ (訳注:DoS) ã‚’é¿ã‘ã‚‹ã®ã«æœ‰åйã§ã™ã€‚

    例:

    LimitRequestFieldSize 4094

    通常ã¯ãƒ‡ãƒ•ォルトã‹ã‚‰å¤‰æ›´ã™ã‚‹å¿…è¦ã¯ã‚りã¾ã›ã‚“。
    top

    LimitRequestLine ディレクティブ

    説明:クライアントã‹ã‚‰ã® HTTP リクエスト行ã®ã‚µã‚¤ã‚ºã‚’制é™ã™ã‚‹
    æ§‹æ–‡:LimitRequestLine bytes
    デフォルト:LimitRequestLine 8190
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€HTTP リクエスト行内ã§è¨±å®¹ã•れるãƒã‚¤ãƒˆæ•° bytes を指定ã—ã¾ã™ã€‚

    LimitRequestLine ディレクティブã«ã‚ˆã‚Šã€ クライアントã‹ã‚‰ã® HTTP リクエスト行ã®è¨±å®¹ã‚µã‚¤ã‚ºã‚’増減ã§ãã¾ã™ã€‚ リクエスト行ã¯ã€HTTPメソッドã€URIã€ãƒ—ロトコルãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‹ã‚‰æˆã£ã¦ãŠã‚Šã€ LimitRequestLine ã¯ã‚µãƒ¼ãƒã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—㦠許容ã™ã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆ URI ã®é•·ã•を制é™ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ サーãƒã¯ã€GET リクエストã®ã‚¯ã‚¨ãƒªéƒ¨åˆ†ã‚‚å«ã‚ã¦ã€ãƒªã‚½ãƒ¼ã‚¹ã®åå‰ãŒå…¥ã‚‹ã«è¶³ã‚‹ 大ãã•ã‚’å¿…è¦ã¨ã—ã¾ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ 管ç†è€…ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®ç•°å¸¸ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’制御ã§ãるよã†ã«ã—〠何らã‹ã®å½¢ã®ã‚µãƒ¼ãƒ“ã‚¹æ‹’å¦æ”»æ’ƒ (訳注:DoS) ã‚’é¿ã‘ã‚‹ã®ã«æœ‰åйã§ã™ã€‚

    例:

    LimitRequestLine 4094

    通常ã¯ãƒ‡ãƒ•ォルトã‹ã‚‰å¤‰æ›´ã™ã‚‹å¿…è¦ã¯ã‚りã¾ã›ã‚“。
    top

    LimitXMLRequestBody ディレクティブ

    説明:XML å½¢å¼ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒœãƒ‡ã‚£ã®ã‚µã‚¤ã‚ºã‚’制é™ã™ã‚‹
    æ§‹æ–‡:LimitXMLRequestBody bytes
    デフォルト:LimitXMLRequestBody 1000000
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core

    XML å½¢å¼ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒœãƒ‡ã‚£ã®æœ€å¤§å€¤ã‚’ (ãƒã‚¤ãƒˆå˜ä½ã§) 制é™ã—ã¾ã™ã€‚ 値㫠0 を指定ã™ã‚‹ã¨ãƒã‚§ãƒƒã‚¯ã‚’無効ã«ã—ã¾ã™ã€‚

    例:

    LimitXMLRequestBody 0

    top

    <Location> ディレクティブ

    説明:囲んã ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–をマッãƒã™ã‚‹ URL ã®ã¿ã«é©ç”¨
    æ§‹æ–‡:<Location URL-path|URL> ... </Location>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    <Location> ディレクティブã¯ã€ URL ã«ã‚ˆã‚Šä¸­ã«æ›¸ã‹ã‚ŒãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®é©ç”¨ç¯„囲を制é™ã—ã¾ã™ã€‚ <Directory> ディレクティブã¨ä¼¼ã¦ã„ã¦ã€ </Location> ディレクティブã§çµ‚了ã™ã‚‹ サブセクションを開始ã—ã¾ã™ã€‚ <Location> セクションã¯ã€ <Directory> セクション㨠.htaccess ã®èª­ã¿è¾¼ã¿ã®å¾Œã€ <Files> セクションを é©ç”¨ã—ãŸå¾Œã«ã€è¨­å®šãƒ•ァイルã«ç¾ã‚ŒãŸé †ã«å‡¦ç†ã•れã¾ã™ã€‚

    <Location> セクション㯠完全ã«ãƒ•ァイルシステムã¨é–¢é€£ã›ãšã«å‹•作ã—ã¾ã™ã€‚ã“ã®ã“ã¨ã‹ã‚‰å°Žã‹ã‚Œã‚‹ çµæžœã«ã¯ã„ãã¤ã‹æ³¨æ„ã™ã‚‹ç‚¹ãŒã‚りã¾ã™ã€‚最もé‡è¦ãªã‚‚ã®ã¯ã€ ファイルシステムã®ä½ç½®ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã« <Location> ディレクティブを使ã†ã¹ãã§ã¯ãªã„ ã¨ã„ã†ã“ã¨ã§ã™ã€‚複数㮠URL ãŒãƒ•ァイルシステムã®åŒã˜ä½ç½®ã«ãƒžãƒƒãƒ—ã•れる å¯èƒ½ãŒã‚りã¾ã™ã®ã§ã€ãã®ã‚ˆã†ãªã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã¯å›žé¿ã•れã¦ã—ã¾ã†å¯èƒ½æ€§ãŒ ã‚りã¾ã™ã€‚

    ã„㤠<Location> を使ã†ã‹

    <Location> ディレクティブ㯠ファイルシステム外ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’é©ç”¨ã™ã‚‹ã¨ã㫠使用ã—ã¦ãã ã•ã„。ファイルシステムã«å­˜åœ¨ã™ã‚‹ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«å¯¾ã—ã¦ã¯ã€ <Directory> 㨠<Files> を使ã£ã¦ãã ã•ã„。 例外ã¯ã€<Location /> ã§ã€ã“れã¯ã‚µãƒ¼ãƒå…¨ä½“ã«å¯¾ã—㦠設定をé©ç”¨ã™ã‚‹ç°¡å˜ãªæ–¹æ³•ã§ã™ã€‚

    å…¨ã¦ã® (プロキシ以外ã®) リクエストã«å¯¾ã—〠URL 㯠/path/ ã¨ã„ã†ã€ 接頭辞 http://servername ã‚’å«ã¾ãªã„å½¢ã§ãƒžãƒƒãƒã—ã¾ã™ã€‚ プロキシリクエストã®å ´åˆã«ã¯ã€scheme://servername/path ã¨ã„ã†æŽ¥é ­è¾žã‚’å«ã‚€å½¢ã§ãƒžãƒƒãƒã—ã€æŽ¥é ­è¾žã‚’å«ã‚ã¦æŒ‡å®šã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚

    URL ã«ã¯ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã‚’利用ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ? ã¯ä»»æ„ã®ä¸€æ–‡å­—ã€* ã¯ä»»æ„ã®æ–‡å­—列ã«ãƒžãƒƒãƒã—ã¾ã™ã€‚ ã©ã¡ã‚‰ã®ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã‚‚ URL パス中㮠/ ã«ã¯ãƒžãƒƒãƒã—ã¾ã›ã‚“。

    ~ ã¨ã„ã†æ–‡å­—を追加ã™ã‚‹ã“ã¨ã§ã€æ­£è¦è¡¨ç¾ã‚’ 利用ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ 例ãˆã°:

    <Location ~ "/(extra|special)/data">

    㯠URL ã« /extra/data ã‹ /special/data ã¨ã„ã†æ–‡å­—列㌠å«ã¾ã‚Œã¦ã„ã‚‹å ´åˆã«ãƒžãƒƒãƒã—ã¾ã™ã€‚ <LocationMatch> ディレクティブ㯠<Location> ã®æ­£è¦è¡¨ç¾ 版ã¨ã¾ã£ãŸãåŒã˜å‹•作をã—ã¾ã™ã€‚

    <Location> 機能ã¯ã€SetHandler ディレクティブ㨠組åˆã‚ã›ã¦åˆ©ç”¨ã™ã‚‹ã¨ç‰¹ã«ä¾¿åˆ©ã§ã™ã€‚ 例ãˆã°ã€example.com ã®ãƒ–ラウザã‹ã‚‰ã®ã¿ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã®å‚照を有効ã«ã—ãŸã‘れã°ã€ 次ã®ã‚ˆã†ã«ã™ã‚Œã°è‰¯ã„ã§ã—ょã†ã€‚

    <Location /status>
    SetHandler server-status
    Order Deny,Allow
    Deny from all
    Allow from .example.com
    </Location>

    / (スラッシュ) ã«é–¢ã™ã‚‹æ³¨

    スラッシュ文字ã¯ã€URL 内ã«ç¾ã‚Œã‚‹å ´æ‰€ã«å¿œã˜ã¦å¤‰åŒ–ã™ã‚‹ ç‰¹åˆ¥ãªæ„味をæŒã£ã¦ã„ã¾ã™ã€‚ ファイルシステムã«ãŠã„ã¦åˆ©ç”¨ã™ã‚‹å ´åˆã«ã¯è¤‡æ•°ã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§ã‚‚一ã¤ã® スラッシュã¨ã—ã¦æ‰±ã‚れるã“ã¨ãŒå¤šã„ã§ã™ãŒã€ (ã™ãªã‚ã¡ã€/home///foo 㯠/home/foo ã¨åŒã˜ã¨ã„ã£ãŸã‚ˆã†ã«) URL ã«ãŠã„ã¦ã¯å¿…ãšã—ã‚‚ãã†ãªã‚‹ã‚ã‘ã§ã¯ã‚りã¾ã›ã‚“。 <LocationMatch> ディレクティブや正è¦è¡¨ç¾ã‚’利用ã—㟠<Location> ディレクティブã§ã€ 複数ã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã«ãƒžãƒƒãƒã•ã›ãŸã„ã¨ãã«ã¯ã€æ˜Žç¤ºçš„ã«è¨˜è¿°ã™ã‚‹ å¿…è¦ãŒã‚りã¾ã™ã€‚

    例ãˆã°ã€<LocationMatch ^/abc> ã¯ã€ /abc ã¨ã„ã†ãƒªã‚¯ã‚¨ã‚¹ãƒˆ URL ã«ãƒžãƒƒãƒã—ã¾ã™ãŒã€ //abc ã¨ã„ã†ãƒªã‚¯ã‚¨ã‚¹ãƒˆ URL ã«ã¯ãƒžãƒƒãƒã—ã¾ã›ã‚“。 (æ­£è¦è¡¨ç¾ã§ãªã„) <Location> ディレクティブã¯ã€ proxy リクエストã«å¯¾ã—ã¦åˆ©ç”¨ã™ã‚‹éš›ã«ã¯åŒæ§˜ã®æŒ¯ã‚‹èˆžã„ã‚’ã—ã¾ã™ãŒã€ (æ­£è¦è¡¨ç¾ã§ãªã„) <Location> ã‚’ proxy ã§ãªã„リクエストã«å¯¾ã—ã¦åˆ©ç”¨ã™ã‚‹éš›ã«ã¯ã€ 一ã¤ã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§è¤‡æ•°ã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã«ãƒžãƒƒãƒã—ã¾ã™ã€‚ 例ãˆã°ã€<Location /abc/def> ã¨æŒ‡å®šã—〠/abc//def ã¨ã„ã†ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒã‚れã°ã€ マッãƒã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚

    å‚ç…§

    top

    <LocationMatch> ディレクティブ

    説明:囲んã ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’æ­£è¦è¡¨ç¾ã«ãƒžãƒƒãƒã™ã‚‹ URL ã®ã¿ã« é©ç”¨
    æ§‹æ–‡:<LocationMatch regex> ... </LocationMatch>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    <LocationMatch> ディレクティブã¯ã€ <Location> ã¨åŒã˜æ§˜ã« URL ã«ã‚ˆã‚Šä¸­ã«æ›¸ã‹ã‚ŒãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®é©ç”¨ç¯„囲を制é™ã—ã¾ã™ã€‚ 但ã—ã€å¼•æ•°ã¯æ™®é€šã®æ–‡å­—列ã§ã¯ãªãã€æ­£è¦è¡¨ç¾ã¨ãªã‚Šã¾ã™ã€‚ 例ãˆã°ã€

    <LocationMatch "/(extra|special)/data">

    㯠URL ã« /extra/data ã‹ /special/data ã¨ã„ã†æ–‡å­—列ãŒå«ã¾ã‚Œã¦ã„ã‚‹å ´åˆã«ãƒžãƒƒãƒã—ã¾ã™ã€‚

    å‚ç…§

    top

    LogLevel ディレクティブ

    説明:ErrorLog ã®å†—長性を制御ã™ã‚‹
    æ§‹æ–‡:LogLevel level
    デフォルト:LogLevel warn
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    LogLevel ã¯ã€ã‚¨ãƒ©ãƒ¼ãƒ­ã‚° (ErrorLog ディレクティブを 見ã¦ãã ã•ã„) ã¸è¨˜éŒ²ã™ã‚‹ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®å†—長性を調整ã—ã¾ã™ã€‚ 以下㮠level を指定ã§ãã€é †ã«é‡è¦åº¦ãŒä¸‹ãŒã£ã¦ã„ãã¾ã™ã€‚

    レベル 説明 例
    emerg 緊急 - システムãŒåˆ©ç”¨ã§ããªã„ Child cannot open lock file. Exiting (å­ãƒ—ロセスãŒãƒ­ãƒƒã‚¯ãƒ•ァイルを開ã‘ãªã„ãŸã‚終了ã—ãŸ)
    alert ç›´ã¡ã«å¯¾å‡¦ãŒå¿…è¦ getpwuid: couldn't determine user name from uid (getpwuid: UID ã‹ã‚‰ãƒ¦ãƒ¼ã‚¶åを特定ã§ããªã‹ã£ãŸ)
    crit 致命的ãªçŠ¶æ…‹ socket: Failed to get a socket, exiting child (socket: ソケットãŒå¾—られãªã„ãŸã‚ã€å­ãƒ—ロセスを終了ã•ã›ãŸ)
    error エラー Premature end of script headers (スクリプトã®ãƒ˜ãƒƒãƒ€ãŒè¶³ã‚Šãªã„ã¾ã¾ã§çµ‚ã‚ã£ãŸ)
    warn 警告 child process 1234 did not exit, sending another SIGHUP (å­ãƒ—ロセス 1234 ãŒçµ‚了ã—ãªã‹ã£ãŸã€‚ã‚‚ã†ä¸€åº¦ SIGHUP ã‚’é€ã‚‹)
    notice 普通ã ãŒã€é‡è¦ãªæƒ…å ± httpd: caught SIGBUS, attempting to dump core in ... (httpd: SIGBUS シグナルをå—ã‘ã€... ã¸ã‚³ã‚¢ãƒ€ãƒ³ãƒ—ã‚’ã—ãŸ)
    info 追加情報 "Server seems busy, (you may need to increase StartServers, or Min/MaxSpareServers)..." (「サーãƒã¯è² è·ãŒé«˜ã„〠(StartServers ã‚„ Min/MaxSpareServers ã®å€¤ã‚’増やã™å¿…è¦ãŒã‚ã‚‹ã‹ã‚‚)ã€)
    debug デãƒãƒƒã‚°ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ "Opening config file ..." (設定ファイルを開ã„ã¦ã„ã‚‹...)

    特定ã®ãƒ¬ãƒ™ãƒ«ãŒæŒ‡å®šã•れãŸå ´åˆã€ãれより高ã„レベルã®å…¨ã¦ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒ 報告ã•れã¾ã™ã€‚ 例ãˆã°ã€LogLevel info ã«æŒ‡å®šã™ã‚‹ã¨ã€ notice 㨠warn も報告ã•れã¾ã™ã€‚

    ãªãŠ crit 以上ã®ãƒ¬ãƒ™ãƒ«ã‚’指定ã™ã‚‹ã“ã¨ãŒæŽ¨å¥¨ã•れã¾ã™ã€‚

    例:

    LogLevel notice

    注

    ファイルã«ãƒ­ã‚°ã‚’出力ã™ã‚‹å ´åˆã€notice レベルã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯æŠ‘制ã•れãšã€ã™ã¹ã¦ãƒ­ã‚°ã«å‡ºåŠ›ã•れã¾ã™ã€‚ ã—ã‹ã— syslog を使用ã—ã¦ã„ã‚‹å ´åˆã¯ã€ ã“れã¯å½“ã¦ã¯ã¾ã‚Šã¾ã›ã‚“。

    top

    MaxKeepAliveRequests ディレクティブ

    説明:æŒç¶šçš„ãªæŽ¥ç¶šä¸Šã§è¨±å¯ã•ã‚Œã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æ•°
    æ§‹æ–‡:MaxKeepAliveRequests number
    デフォルト:MaxKeepAliveRequests 100
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    MaxKeepAliveRequests ディレクティブã¯ã€ KeepAlive ãŒæœ‰åйãªå ´åˆã«ã€ ä¸€å›žã®æŽ¥ç¶šã§å—ã‘付ã‘å¯èƒ½ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æ•°ã‚’制é™ã—ã¾ã™ã€‚ 0 ã«è¨­å®šã—ã¦ã„れã°ã€å—ã‘付ã‘るリクエストã¯ç„¡åˆ¶é™ã«ãªã‚Šã¾ã™ã€‚ ã“ã®è¨­å®šã¯ã€ã‚µãƒ¼ãƒæ€§èƒ½ã‚’å‘上ã•ã›ã‚‹ãŸã‚ã«ã€å¤§ããªæ•°å€¤ã‚’指定ã™ã‚‹ã“ã¨ã‚’å‹§ã‚ã¾ã™ã€‚

    例:

    MaxKeepAliveRequests 500

    top

    MaxRangeOverlaps ディレクティブ

    説明:Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    æ§‹æ–‡:MaxRangeOverlaps default | unlimited | none | number-of-ranges
    デフォルト:MaxRangeOverlaps 20
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Available in Apache HTTP Server 2.3.15 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    MaxRangeReversals ディレクティブ

    説明:Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    æ§‹æ–‡:MaxRangeReversals default | unlimited | none | number-of-ranges
    デフォルト:MaxRangeReversals 20
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Available in Apache HTTP Server 2.3.15 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    MaxRanges ディレクティブ

    説明:Number of ranges allowed before returning the complete resource
    æ§‹æ–‡:MaxRanges default | unlimited | none | number-of-ranges
    デフォルト:MaxRanges 200
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Available in Apache HTTP Server 2.3.15 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    MergeSlashes ディレクティブ

    説明:Controls whether the server merges consecutive slashes in URLs.
    æ§‹æ–‡:MergeSlashes ON|OFF
    デフォルト:MergeSlashes ON
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Added in 2.4.39

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    MergeTrailers ディレクティブ

    説明:Determines whether trailers are merged into headers
    æ§‹æ–‡:MergeTrailers [on|off]
    デフォルト:MergeTrailers off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:2.4.11 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    Mutex ディレクティブ

    説明:Configures mutex mechanism and lock file directory for all or specified mutexes
    æ§‹æ–‡:Mutex mechanism [default|mutex-name] ... [OmitPID]
    デフォルト:Mutex default
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Available in Apache HTTP Server 2.3.4 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    NameVirtualHost ディレクティブ

    説明:åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ãŸã‚ã® IP アドレスを指定
    æ§‹æ–‡:NameVirtualHost addr[:port]
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core

    NameVirtualHost ディレクティブã¯ã€ åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®è¨­å®šã‚’行ãªã„ãŸã„å ´åˆã« å¿…è¦ã¨ãªã‚‹ã‚‚ã®ã§ã™ã€‚

    addr ã«ã¯ãƒ›ã‚¹ãƒˆåを指定ã§ãã¾ã™ãŒã€ 常㫠IP アドレスを指定ã™ã‚‹ã®ãŒæŽ¨å¥¨ã•れã¾ã™ã€‚ 例ãˆã°ã€

    NameVirtualHost 111.22.33.44

    NameVirtualHost ディレクティブã¯ã€ åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’ 利用ã—ã¦ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘付ã‘ã‚‹ IP アドレスを指定ã—ã¾ã™ã€‚ ã“れã¯ã€æ™®é€šã¯åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã™ã€‚ ãŸã ã—ã€ãƒ•ァイアーウォールや他ã®ãƒ—ロキシãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘付ã‘〠é•ㆠIP アドレスã®ã‚µãƒ¼ãƒã«ãƒ•ォワードã™ã‚‹ã¨ã„ã†å ´åˆã¯ã€ リクエストをæä¾›ã—ãŸã„マシン上ã®ç‰©ç†ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ェース㮠IP アドレスを指定ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚ 複数ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã§è¤‡æ•°ã®åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’指定ã™ã‚‹å ´åˆã¯ å„アドレスã«å¯¾ã—ã¦ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を書ã„ã¦ãã ã•ã„。

    中

    「主サーãƒã€ã‚„ã€ã©ã® _default_ サーãƒã‚‚〠NameVirtualHost ã§æŒ‡å®šã—㟠IP アドレスã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆ を処ç†ã™ã‚‹ã“ã¨ã¯ã‚りã¾ã›ã‚“ (ãªãœã‹ NameVirtualHost ã‚’ 指定ã—ãŸã‘ã©ãã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã« VirtualHost を定義ã—ãªã‹ã£ãŸå ´åˆã‚’除ã)。

    åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ãƒãƒ¼ãƒˆç•ªå·ã‚’指定ã™ã‚‹ã“ã¨ã‚‚å¯èƒ½ã§ã™ã€‚ 例ãˆã°

    NameVirtualHost 111.22.33.44:8080

    IPV6 ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã¯æ¬¡ã®ä¾‹ã®ã‚ˆã†ã«è§’括弧ã§å›²ã‚€å¿…è¦ãŒã‚りã¾ã™:

    NameVirtualHost [2001:db8::a00:20ff:fea7:ccea]:8080

    ã™ã¹ã¦ã®ã‚¤ãƒ³ã‚¿ãƒ•ェースã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘å–るよã†ã«ã™ã‚‹ãŸã‚ã«ã¯ã€ 引数ã¨ã—㦠* を使ã„ã¾ã™ã€‚

    NameVirtualHost *

    <VirtualHost> ディレクティブã®å¼•æ•°

    <VirtualHost> ディレクティブã®å¼•数㯠NameVirtualHost ディレクティブã®å¼•æ•°ã«æ­£ç¢ºã« åˆã£ã¦ã„ã‚‹å¿…è¦ãŒã‚ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。

    NameVirtualHost 1.2.3.4
    <VirtualHost 1.2.3.4>
    # ...
    </VirtualHost>

    å‚ç…§

    top

    Options ディレクティブ

    説明:ディレクトリã«å¯¾ã—ã¦ä½¿ç”¨å¯èƒ½ãªæ©Ÿèƒ½ã‚’設定ã™ã‚‹
    æ§‹æ–‡:Options [+|-]option [[+|-]option] ...
    デフォルト:Options All
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:Options
    ステータス:Core
    モジュール:core

    Options ディレクティブã¯ã€ç‰¹å®šã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«å¯¾ã—㦠ã©ã®æ©Ÿèƒ½ãŒä½¿ç”¨å¯èƒ½ã‹ã‚’制御ã—ã¾ã™ã€‚

    option ã‚’ Noneã«æŒ‡å®šã™ã‚‹ã¨ã€ ç‰¹åˆ¥ãªæ©Ÿèƒ½ã¯å…¨ã¦ç„¡åйã«ãªã‚Šã¾ã™ã€‚ ã¾ãŸã€ä»¥ä¸‹ã®ç¤ºã™ 1 個以上ã®ã‚‚ã®ã‚’指定ã§ãã¾ã™ã€‚

    All
    MultiViews を除ã„ãŸå…¨ã¦ã®æ©Ÿèƒ½ãŒæœ‰åйã¨ãªã‚Šã¾ã™ã€‚ ã“れãŒãƒ‡ãƒ•ォルトã§ã™ã€‚
    ExecCGI
    mod_cgi ã«ã‚ˆã‚‹ CGI スクリプトã®å®Ÿè¡Œã‚’許å¯ã—ã¾ã™ã€‚
    FollowSymLinks
    サーãƒãŒã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªå†…ã§ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯ã‚’ãŸã©ã‚Œã‚‹ã‚ˆã†ã«ã—ã¾ã™ã€‚

    サーãƒãŒã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯ã‚’ãŸã©ã‚‹å ´åˆã§ã‚‚〠<Directory> セクション㫠マッãƒã•ã›ã‚‹ãŸã‚㮠パスåã¯å¤‰æ›´ã•れã¾ã›ã‚“。

    <Location> 内㫠ã“ã®ã‚ªãƒ—ションを指定ã—ã¦ã‚‚無視ã•れるã“ã¨ã« 注æ„ã—ã¦ãã ã•ã„。

    ã“ã®ã‚ªãƒ—ションをçœç•¥ã—ãŸã‹ã‚‰ã¨ã„ã£ã¦ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã®å¼·åŒ–ã«ã¯ãªã‚Šã¾ã›ã‚“。 ãªãœãªã‚‰ symlink ã®æ¤œæŸ»ã¯ãƒ¬ãƒ¼ã‚¹ã‚³ãƒ³ãƒ‡ã‚£ã‚·ãƒ§ãƒ³ã‚’引ãèµ·ã“ã™å¯èƒ½æ€§ãŒã‚り〠ãã®ãŸã‚回é¿å¯èƒ½ã«ãªã‚‹ã‹ã‚‰ã§ã™ã€‚

    Includes
    mod_include ãŒæä¾›ã™ã‚‹ SSI を有効ã«ã—ã¾ã™ã€‚
    IncludesNOEXEC
    SSI ã¯æœ‰åйã«ãªã‚Šã¾ã™ãŒã€#exec コマンド 㨠#exec CGI ã¯ç„¡åйã«ãªã‚Šã¾ã™ã€‚ ãŸã ã—ã€#include virtual ã«ã‚ˆã‚Šã€ScriptAlias ã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã§ CGI を実行ã™ã‚‹ã“ã¨ã¯å¯èƒ½ã§ã™ã€‚
    Indexes
    ã‚‚ã—ã€URL ãŒãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ãƒžãƒƒãƒ—ã™ã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§ã‚ã£ã¦ã€ 且㤠DirectoryIndex ã§æŒ‡å®šã—ãŸãƒ•ァイル (例ãˆã°ã€index.html) ㌠ディレクトリ内ã«ç„¡ã‘れã°ã€mod_autoindex ㌠ディレクトリ内ã®ä¸€è¦§ã‚’æ•´å½¢ã—ã¦è¿”ã—ã¾ã™ã€‚
    MultiViews
    mod_negotiation ã«ã‚ˆã‚‹ コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ ã•れ㟠"MultiViews" を許å¯ã—ã¾ã™ã€‚
    SymLinksIfOwnerMatch
    シンボリック先ã®ãƒ•ァイルã¾ãŸã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãŒã€ ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯ã®æ‰€æœ‰ãƒ¦ãƒ¼ã‚¶ ID ã¨åŒã˜å ´åˆã«ã®ã¿ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯ã‚’ ãŸã©ã‚Œã‚‹ã‚ˆã†ã«ã—ã¾ã™ã€‚

    注

    <Location> 内ã«ã“ã®ã‚ªãƒ—ションを 指定ã—ã¦ã‚‚無視ã•れã¾ã™ã€‚

    ã“ã®ã‚ªãƒ—ションã¯ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã®å¼·åŒ–ã«ã¯ãªã‚Šã¾ã›ã‚“。 ãªãœãªã‚‰ symlink ã®æ¤œæŸ»ã¯ãƒ¬ãƒ¼ã‚¹ã‚³ãƒ³ãƒ‡ã‚£ã‚·ãƒ§ãƒ³ã‚’引ãèµ·ã“ã™å¯èƒ½æ€§ãŒã‚り〠ãã®ãŸã‚回é¿å¯èƒ½ã«ãªã‚‹ã‹ã‚‰ã§ã™ã€‚

    通常ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«å¯¾ã—ã¦è¤‡æ•°ã® Options ㌠é©ç”¨å¯èƒ½ãªå ´åˆã€ 最も近ã„ã‚‚ã®ä¸€ã¤ã®ã¿ãŒé©ç”¨ã•れã€ä»–ã®ã‚‚ã®ã¯ç„¡è¦–ã•れã¾ã™ã€‚ è¤‡æ•°ã®æŒ‡å®šãŒãƒžãƒ¼ã‚¸ã•れるã‚ã‘ã§ã¯ã‚りã¾ã›ã‚“。(セクションã®ãƒžãƒ¼ã‚¸æ–¹æ³•ã‚’å‚ç…§ã—ã¦ãã ã•ã„。) ã—ã‹ã—ã€ã™ã¹ã¦ã® Options ディレクティブ㌠+ ã‚„ - 付ã㧠指定ã•れãŸå ´åˆã¯ã‚ªãƒ—ションã®å€¤ã¯ãƒžãƒ¼ã‚¸ã•れã¾ã™ã€‚ + ã‚’é ­ã«ã¤ã‘れã°ç¾åœ¨ã®è¨­å®šã«åŠ ãˆã‚‰ã‚Œã€ - を付ã‘れã°ç¾åœ¨ã®è¨­å®šã‹ã‚‰å‰Šé™¤ã•れã¾ã™ã€‚

    警告

    Options ã§ + ã‚„ - ã®ã¤ã„ãŸã‚‚ã®ã‚’ã€ã¤ã‘ãªã„ã‚‚ã®ã¨çµ„ã¿åˆã‚ã›ã¦ 指定ã™ã‚‹æ§‹æ–‡ã¯æ­£ã—ã„æ§‹æ–‡ã§ã¯ã‚りã¾ã›ã‚“ã®ã§ã€æœŸå¾…ã™ã‚‹çµæžœã« ãªã‚‰ãªã„ã“ã¨ãŒã‚りã¾ã™ã€‚

    例ãˆã°ã€+ ã‚„ - を利用ã—ãªã„å ´åˆã¯:

    <Directory /web/docs>
    Options Indexes FollowSymLinks
    </Directory>

    <Directory /web/docs/spec>
    Options Includes
    </Directory>

    /web/docs/spec ã¨ã„ã†ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã¯ã€ Includes ã ã‘ãŒé©ç”¨ã•れã¾ã™ã€‚ ã—ã‹ã—ã€2 番目㮠Options ã§ + ã‚„ - を利用ã—ã¦ã¿ã‚‹ã¨:

    <Directory /web/docs>
    Options Indexes FollowSymLinks
    </Directory>

    <Directory /web/docs/spec>
    Options +Includes -Indexes
    </Directory>

    /web/docs/spec ã¨ã„ã†ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã¯ã€ FollowSymLinks 㨠Includes ãŒé©ç”¨ã•れã¾ã™ã€‚

    注

    -IncludesNOEXEC ã‚‚ã—ã㯠-Includes を指定ã™ã‚‹ã¨ã€ å‰ã®è¨­å®šãŒã©ã®ã‚ˆã†ã«ãªã£ã¦ã„よã†ã¨ã‚‚ SSI ã¯ç„¡åйã¨ãªã‚Šã¾ã™ã€‚

    ã©ã®ã‚ˆã†ãªè¨­å®šã‚‚ã•れã¦ã„ãªã‘れã°ã€ãƒ‡ãƒ•ォルトã§ã¯ All ã« ãªã‚Šã¾ã™ã€‚

    top

    Protocol ディレクティブ

    説明:Protocol for a listening socket
    æ§‹æ–‡:Protocol protocol
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Available in Apache 2.1.5 and later. On Windows, from Apache 2.3.3 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    å‚ç…§

    top

    Protocols ディレクティブ

    説明:Protocols available for a server/virtual host
    æ§‹æ–‡:Protocols protocol ...
    デフォルト:Protocols http/1.1
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Only available from Apache 2.4.17 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    å‚ç…§

    top

    ProtocolsHonorOrder ディレクティブ

    説明:Determines if order of Protocols determines precedence during negotiation
    æ§‹æ–‡:ProtocolsHonorOrder On|Off
    デフォルト:ProtocolsHonorOrder On
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Only available from Apache 2.4.17 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    å‚ç…§

    top

    QualifyRedirectURL ディレクティブ

    説明:Controls whether the REDIRECT_URL environment variable is fully qualified
    æ§‹æ–‡:QualifyRedirectURL ON|OFF
    デフォルト:QualifyRedirectURL OFF
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    上書ã:FileInfo
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Directive supported in 2.4.18 and later. 2.4.17 acted as if 'QualifyRedirectURL ON' was configured.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    RegexDefaultOptions ディレクティブ

    説明:Allow to configure global/default options for regexes
    æ§‹æ–‡:RegexDefaultOptions [none] [+|-]option [[+|-]option] ...
    デフォルト:RegexDefaultOptions DOTALL DOLLAR_ENDONLY
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Only available from Apache 2.4.30 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    RegisterHttpMethod ディレクティブ

    説明:Register non-standard HTTP methods
    æ§‹æ–‡:RegisterHttpMethod method [method [...]]
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Available in Apache HTTP Server 2.4.24 and later

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    å‚ç…§

    top

    RLimitCPU ディレクティブ

    説明:Apache ã®å­ãƒ—ロセスã‹ã‚‰èµ·å‹•ã•れãŸãƒ—ロセス㮠CPU 消費é‡ã‚’ 制é™ã™ã‚‹
    æ§‹æ–‡:RLimitCPU seconds|max [seconds|max]
    デフォルト:未設定。オペレーティングシステムã®ãƒ‡ãƒ•ォルトを使用
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core

    一ã¤ã‹äºŒã¤ã®ãƒ‘ラメータをã¨ã‚Šã¾ã™ã€‚ 最åˆã®ãƒ‘ラメータã¯å…¨ãƒ—ロセスã«å¯¾ã™ã‚‹ãƒªã‚½ãƒ¼ã‚¹ã®ã‚½ãƒ•トリミットを設定ã—〠2 番目ã®ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã¯æœ€å¤§ã®ãƒªã‚½ãƒ¼ã‚¹ãƒªãƒŸãƒƒãƒˆã‚’設定ã—ã¾ã™ã€‚ パラメータã«ã¯æ•°å­—ã‹ã€ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ã®æœ€å¤§ã¨ãªã‚‹ max ã®ã©ã¡ã‚‰ã‹ã‚’指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ 最大ã®ãƒªã‚½ãƒ¼ã‚¹ãƒªãƒŸãƒƒãƒˆã‚’上ã’ã‚‹ãŸã‚ã«ã¯ã€ã‚µãƒ¼ãƒã‚’ root ã§å®Ÿè¡Œã™ã‚‹ã‹èµ·å‹•ã•れãªã‘れã°ã„ã‘ã¾ã›ã‚“。

    ã¡ãªã¿ã«ã€ã“ã®è¨­å®šã¯ Apache ã®å­ãƒ—ロセス自体ã§ã¯ãªã〠リクエストをå—ã‘付ã‘㟠Apache ã®å­ãƒ—ロセスã‹ã‚‰ fork ã•れãŸãƒ—ロセス㫠é©ç”¨ã•れã¾ã™ã€‚ ã“れã«ã¯ CGI ã‚„ SSI ã‹ã‚‰å®Ÿè¡Œã•れãŸã‚³ãƒžãƒ³ãƒ‰ãŒå«ã¾ã‚Œã¾ã™ãŒã€Apache 㮠親プロセスã‹ã‚‰ fork ã•れãŸãƒ­ã‚°ã®ãƒ‘イププロセスãªã©ã«ã¯é©ç”¨ã•れã¾ã›ã‚“。

    CPU リソースã®ãƒªãƒŸãƒƒãƒˆã¯ãƒ—ロセスã‚ãŸã‚Šã®ç§’æ•°ã§è¡¨ã‚ã•れã¾ã™ã€‚

    å‚ç…§

    top

    RLimitMEM ディレクティブ

    説明:Apache ã®å­ãƒ—ロセスã‹ã‚‰èµ·å‹•ã•れãŸãƒ—ロセスã®ãƒ¡ãƒ¢ãƒªæ¶ˆè²»é‡ã‚’ 制é™ã™ã‚‹
    æ§‹æ–‡:RLimitMEM bytes|max [bytes|max]
    デフォルト:未設定。オペレーティングシステムã®ãƒ‡ãƒ•ォルトを使用
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core

    一ã¤ã‹äºŒã¤ã®ãƒ‘ラメータをã¨ã‚Šã¾ã™ã€‚ 最åˆã®ãƒ‘ラメータã¯å…¨ãƒ—ロセスã«å¯¾ã™ã‚‹ãƒªã‚½ãƒ¼ã‚¹ã®ã‚½ãƒ•トリミットを設定ã—〠2 番目ã®ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã¯æœ€å¤§ã®ãƒªã‚½ãƒ¼ã‚¹ãƒªãƒŸãƒƒãƒˆã‚’設定ã—ã¾ã™ã€‚ パラメータã«ã¯æ•°å­—ã‹ã€ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ã®æœ€å¤§ã¨ãªã‚‹ max ã®ã©ã¡ã‚‰ã‹ã‚’指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ 最大ã®ãƒªã‚½ãƒ¼ã‚¹ãƒªãƒŸãƒƒãƒˆã‚’上ã’ã‚‹ãŸã‚ã«ã¯ã€ã‚µãƒ¼ãƒã‚’ root ã§å®Ÿè¡Œã™ã‚‹ã‹èµ·å‹•ã•れãªã‘れã°ã„ã‘ã¾ã›ã‚“。

    ã“ã®è¨­å®šã¯ Apache ã®å­ãƒ—ロセス自体ã§ã¯ãªã〠リクエストをå—ã‘付ã‘㟠Apache ã®å­ãƒ—ロセスã‹ã‚‰ fork ã•れãŸãƒ—ロセス㫠é©ç”¨ã•れã¾ã™ã€‚ ã“れã«ã¯ CGI ã‚„ SSI ã‹ã‚‰å®Ÿè¡Œã•れãŸã‚³ãƒžãƒ³ãƒ‰ãŒå«ã¾ã‚Œã¾ã™ãŒã€Apache 㮠親プロセスã‹ã‚‰ fork ã•れãŸãƒ­ã‚°ã®ãƒ‘イププロセスãªã©ã«ã¯é©ç”¨ã•れã¾ã›ã‚“。

    メモリリソースã®ãƒªãƒŸãƒƒãƒˆã¯ãƒ—ロセスã‚ãŸã‚Šã®ãƒã‚¤ãƒˆæ•°ã§è¡¨ã‚ã•れã¾ã™ã€‚

    å‚ç…§

    top

    RLimitNPROC ディレクティブ

    説明:Apache ã®å­ãƒ—ロセスã‹ã‚‰èµ·å‹•ã•れãŸãƒ—ロセスãŒèµ·å‹•ã™ã‚‹ãƒ—ロセス㮠数を制é™ã™ã‚‹
    æ§‹æ–‡:RLimitNPROC number|max [number|max]
    デフォルト:未設定。オペレーティングシステムã®ãƒ‡ãƒ•ォルトを使用
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core

    一ã¤ã‹äºŒã¤ã®ãƒ‘ラメータをã¨ã‚Šã¾ã™ã€‚ 最åˆã®ãƒ‘ラメータã¯å…¨ãƒ—ロセスã«å¯¾ã™ã‚‹ãƒªã‚½ãƒ¼ã‚¹ã®ã‚½ãƒ•トリミットを設定ã—〠2 番目ã®ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã¯æœ€å¤§ã®ãƒªã‚½ãƒ¼ã‚¹ãƒªãƒŸãƒƒãƒˆã‚’設定ã—ã¾ã™ã€‚ パラメータã«ã¯æ•°å­—ã‹ã€ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ã®æœ€å¤§ã¨ãªã‚‹ max ã®ã©ã¡ã‚‰ã‹ã‚’指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ 最大ã®ãƒªã‚½ãƒ¼ã‚¹ãƒªãƒŸãƒƒãƒˆã‚’上ã’ã‚‹ãŸã‚ã«ã¯ã€ã‚µãƒ¼ãƒã‚’ root ã§å®Ÿè¡Œã™ã‚‹ã‹èµ·å‹•ã•れãªã‘れã°ã„ã‘ã¾ã›ã‚“。

    ã“ã®è¨­å®šã¯ Apache ã®å­ãƒ—ロセス自体ã§ã¯ãªã〠リクエストをå—ã‘付ã‘㟠Apache ã®å­ãƒ—ロセスã‹ã‚‰ fork ã•れãŸãƒ—ロセス㫠é©ç”¨ã•れã¾ã™ã€‚ ã“れã«ã¯ CGI ã‚„ SSI ã‹ã‚‰å®Ÿè¡Œã•れãŸã‚³ãƒžãƒ³ãƒ‰ãŒå«ã¾ã‚Œã¾ã™ãŒã€Apache 㮠親プロセスã‹ã‚‰ fork ã•れãŸãƒ­ã‚°ã®ãƒ‘イププロセスãªã©ã«ã¯é©ç”¨ã•れã¾ã›ã‚“。

    プロセスã®åˆ¶é™ã¯ã€ãƒ¦ãƒ¼ã‚¶ã‚ãŸã‚Šã®ãƒ—ロセス数ã§åˆ¶å¾¡ã•れã¾ã™ã€‚

    注

    CGI プロセスãŒã‚¦ã‚§ãƒ–サーãƒã®ãƒ¦ãƒ¼ã‚¶ ID 以外ã§å®Ÿè¡Œã•れるã®ã§ ç„¡ã‘れã°ã€ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ã‚µãƒ¼ãƒè‡ªèº«ãŒç”Ÿæˆã§ãã‚‹ãƒ—ãƒ­ã‚»ã‚¹ã®æ•°ã‚’制é™ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ ãã®ã‚ˆã†ãªçжæ³ã«ãªã£ã¦ã„ã‚‹ã‹ã©ã†ã‹ã¯ã€error_log 中㮠cannot fork ã¨ã„ã†ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã«ã‚ˆã‚Š ç¢ºèªã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    å‚ç…§

    top

    ScriptInterpreterSource ディレクティブ

    説明:CGI スクリプトã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ—リタã®ä½ç½®ã‚’調ã¹ã‚‹ãŸã‚ã®æ‰‹æ³•
    æ§‹æ–‡:ScriptInterpreterSource Registry|Registry-Strict|Script
    デフォルト:ScriptInterpreterSource Script
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Win32 ã®ã¿ã€‚ オプション Registry-Strict 㯠Apache 2.0 以é™ã§ä½¿ç”¨å¯èƒ½

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€Apache ã§ CGI スクリプトを 実行ã™ã‚‹å ´åˆã«åˆ©ç”¨ã™ã‚‹ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ—リタを〠ã©ã®ã‚ˆã†ã«æŽ¢ã—出ã™ã‹ã«ã¤ã„ã¦åˆ¶å¾¡ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã—ã¾ã™ã€‚ デフォルトã®è¨­å®šã¯ Script ã§ã™ã€‚ã“れã¯ã‚¹ã‚¯ãƒªãƒ—ト㮠shebang 行 (最åˆã®è¡Œã§ #! ã‹ã‚‰å§‹ã¾ã‚‹ã‚‚ã®) ã«æŒ‡ã•れã¦ã„るインタープリタを使用ã—ã¾ã™ã€‚Win32 ã§ã¯ãã®è¡Œã¯ ä»¥ä¸‹ã®æ§˜ã«ãªã‚Šã¾ã™ã€‚

    #!C:/Perl/bin/perl.exe

    ã‚‚ã—ãã¯ã€perl ㌠PATH ã«ã‚ã‚‹å ´åˆã¯å˜ã«:

    #!perl

    ScriptInterpreterSource Registry を指定ã™ã‚‹ã¨ã€ ã‚¹ã‚¯ãƒªãƒ—ãƒˆãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ (例ãˆã°ã€.pl) ã‚’ キーã¨ã—ã¦ã€Windows ã®ãƒ¬ã‚¸ã‚¹ãƒˆãƒªãƒ„リー HKEY_CLASSES_ROOT を検索ã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚レジストリã®ã‚µãƒ–キー Shell\ExecCGI\Command ã‹ã€ãれãŒå­˜åœ¨ã—ãªã„å ´åˆã¯ Shell\Open\Command ãŒã‚¹ã‚¯ãƒªãƒ—トファイルを開ããŸã‚㫠使ã‚れã¾ã™ã€‚レジストリキーãŒè¦‹ã¤ã‹ã‚‰ãªã„ã¨ãã¯ã€Apache 㯠Script ã‚ªãƒ—ã‚·ãƒ§ãƒ³ãŒæŒ‡å®šã•れãŸã¨ãã®å‹•ä½œã«æˆ»ã‚Šã¾ã™ã€‚

    セキュリティ

    ScriptInterpreterSource Registry ã‚’ ScriptAlias ã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã§ä½¿ã†ã¨ã㯠注æ„ã—ã¦ãã ã•ã„。Apache ã¯ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªä¸­ã®ã™ã¹ã¦ã®ãƒ•ァイルを 実行ã—よã†ã¨ã—ã¾ã™ã€‚Registry ã¨ã„ã†è¨­å®šã¯é€šå¸¸ã¯å®Ÿè¡Œã•れãªã„ ファイルã«å¯¾ã—ã¦æœ›ã¾ã—ããªã„プログラムã®å®Ÿè¡ŒãŒç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 例ãˆã°ã€ã»ã¨ã‚“ã©ã® Windows システムã§ã€ .htm ファイルã®ãƒ‡ãƒ•ォルトã®ã€Œé–‹ãã€ã‚³ãƒžãƒ³ãƒ‰ã¯ Microsoft Internet Explorer を実行ã—ã¾ã™ã®ã§ã€ã‚¹ã‚¯ãƒªãƒ—ãƒˆã«æŒ‡å®šã•れ㟠ディレクトリã«ã‚ã‚‹ .htm ファイルã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ã‚µãƒ¼ãƒã® ãƒãƒƒã‚¯ã‚°ãƒ©ã‚¦ãƒ³ãƒ‰ã§ãƒ–ラウザを実行ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ã“れã¯ã€ä¸€åˆ†å†…ãらã„㧠システムをクラッシュã•ã‚‹ãŸã‚ã®è‰¯ã„方法ã§ã™ã€‚

    Apache 2.0 ã‹ã‚‰å°Žå…¥ã•れãŸã‚ªãƒ—ション Registry-Strict 㯠Registry ã¨åŒã˜ã“ã¨ã‚’行ãªã„ã¾ã™ãŒã€ã‚µãƒ–キー Shell\ExecCGI\Command ã®ã¿ã‚’使ã„ã¾ã™ã€‚ ExecCGI ã‚­ãƒ¼ã¯æ™®é€šã«ä½¿ã‚れるキーã§ã¯ã‚りã¾ã›ã‚“。Windows ãƒ¬ã‚¸ã‚¹ãƒˆãƒªã«æ‰‹å‹•ã§è¨­å®šã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã®ã§ã€ã‚·ã‚¹ãƒ†ãƒ ã§ã®å¶ç™ºçš„ãªãƒ—ログラム㮠実行を防ãã“ã¨ãŒã§ãã¾ã™ã€‚

    top

    SeeRequestTail ディレクティブ

    説明:Determine if mod_status displays the first 63 characters of a request or the last 63, assuming the request itself is greater than 63 chars.
    æ§‹æ–‡:SeeRequestTail On|Off
    デフォルト:SeeRequestTail Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Available in Apache httpd 2.2.7 and later.

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    top

    ServerAdmin ディレクティブ

    説明:サーãƒãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚‹ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã«å«ã‚ã‚‹é›»å­ãƒ¡ãƒ¼ãƒ«ã® アドレス
    æ§‹æ–‡:ServerAdmin email-address|URL
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    ServerAdmin ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«è¿”ã™ã•ã¾ã–ã¾ãª エラーメッセージ中ã«è¨˜è¿°ã™ã‚‹ã€ å•åˆã›ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’設定ã—ã¾ã™ã€‚与ãˆã‚‰ã‚ŒãŸå¼•æ•°ã‚’ httpd ㌠URL ã¨èªè­˜ã—ãªã„å ´åˆã¯ã€email-address ã ã¨è§£é‡ˆã—ã¦ã€ ãƒã‚¤ãƒ‘ーリンクã®ã‚¿ãƒ¼ã‚²ãƒƒãƒˆã« mailto: を付ã‘ã¾ã™ã€‚ 実際ã«ã¯ã€ã“ã“ã«ã¯é›»å­ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’使ã†ã“ã¨ãŒæŽ¨å¥¨ã•れã¦ã„ã¾ã™ã€‚ 多ãã® CGI スクリプトã¯ãã†ãªã£ã¦ã„ã‚‹ã“ã¨ã‚’仮定ã—ã¦ã„ã¾ã™ã€‚ URL を使ã†å ´åˆã¯ã€ã‚ãªãŸã®ç®¡ç†ä¸‹ã«ã‚る別サーãƒã‚’指ã™ã‚ˆã†ã«ã—ã¦ãã ã•ã„。 ãã†ã§ãªã„ã¨ã€ã‚¨ãƒ©ãƒ¼ãŒèµ·ã“ã£ãŸã¨ãã«é€£çµ¡ã‚’ã™ã‚‹ã“ã¨ãŒã§ããªããªã£ã¦ ã—ã¾ã„ã¾ã™ã€‚

    ãã®éš›ã€ã“れã®ãŸã‚ã«å°‚用ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’設定ã™ã‚‹ã®ãŒè‰¯ã„ã§ã—ょã†ã€‚ 例ãˆã°ã€

    ServerAdmin www-admin@foo.example.com

    ã¨ã„ã£ãŸã‚ˆã†ã«ã—ã¾ã™ã€‚ユーザã¯ã„ã¤ã‚‚サーãƒã«é–¢ã™ã‚‹è©±ã§ã‚ã‚‹ã¨ã„ã†ã“ã¨ã‚’ 明記ã—ã¦ãã‚‹ã‚ã‘ã§ã¯ã‚りã¾ã›ã‚“ã®ã§ã€‚

    top

    ServerAlias ディレクティブ

    説明:リクエストをåå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ãƒžãƒƒãƒã•ã›ã¦ã„ã‚‹ã¨ã㫠使用ã•れるホストã®åˆ¥å
    æ§‹æ–‡:ServerAlias hostname [hostname] ...
    コンテキスト:ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    ServerAlias ディレクティブã¯ã€ãƒãƒ¼ãƒ ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ãŠã„㦠使用ã™ã‚‹ãƒ›ã‚¹ãƒˆã®åˆ¥åを指定ã—ã¾ã™ã€‚ é©åˆ‡ã§ã‚れã°ã€ServerAlias ディレクティブã§ã¯ ワイルドカードを使ã†ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    <VirtualHost *>
    ServerName server.domain.com
    ServerAlias server server2.domain.com server2
    # ...
    </VirtualHost>

    å‚ç…§

    top

    ServerName ディレクティブ

    説明:サーãƒãŒè‡ªåˆ†è‡ªèº«ã‚’示ã™ã¨ãã«ä½¿ã†ãƒ›ã‚¹ãƒˆåã¨ãƒãƒ¼ãƒˆ
    æ§‹æ–‡:ServerName [scheme://]fully-qualified-domain-name[:port]
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.0 ã§ã¯ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 1.3 ã® Port ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æ©Ÿèƒ½ã‚‚å«ã¿ã¾ã™ã€‚

    ServerName ディレクティブã¯ã€ サーãƒãŒè‡ªåˆ†è‡ªèº«ã‚’示ã™ã‚¹ã‚­ãƒ¼ãƒ åã€ãƒ›ã‚¹ãƒˆåã¨ãƒãƒ¼ãƒˆç•ªå·ã‚’設定ã—ã¾ã™ã€‚ ã“れã¯ã€ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã™ã‚‹ URL を生æˆã™ã‚‹éš›ã«åˆ©ç”¨ã•れã¾ã™ã€‚ 例ãˆã°ã€ã‚¦ã‚§ãƒ–サーãƒã‚’å‹•ã‹ã—ã¦ã„るマシン㯠simple.example.com ã§ã€DNS ã®ã‚¨ã‚¤ãƒªã‚¢ã‚¹ www.example.com ã‚‚ã‚ã‚‹ã¨ãã«ã€ ウェブサーãƒãŒå¾Œè€…ã¨ã—ã¦èªè­˜ã•ã‚Œã¦æ¬²ã—ã„ã¨ãã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ 使ã„ã¾ã™ã€‚

    ServerName www.example.com:80

    ServerName ãŒæŒ‡å®šã•れã¦ã„ãªã„ã¨ãã¯ã€ サーãƒã¯ IP アドレスã‹ã‚‰é€†å¼•ãを行ãªã†ã“ã¨ã§ãƒ›ã‚¹ãƒˆåを知ã‚ã†ã¨ã—ã¾ã™ã€‚ ServerName ã«ãƒãƒ¼ãƒˆãŒæŒ‡å®šã•れã¦ã„ãªã„ã¨ãã¯ã€ サーãƒã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæ¥ã¦ã„ã‚‹ ãƒãƒ¼ãƒˆã‚’使ã„ã¾ã™ã€‚最高ã®ä¿¡é ¼æ€§ã¨ç¢ºå®Ÿæ€§ã‚’ã‚‚ãŸã‚‰ã™ãŸã‚ã«ã¯ã€ ServerName を使ã£ã¦ãƒ›ã‚¹ãƒˆåã¨ãƒãƒ¼ãƒˆã‚’明示的㫠指定ã—ã¦ãã ã•ã„。

    åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ を利用ã—ã¦ã„ã‚‹å ´åˆã€<VirtualHost> セクション内㮠ServerName ã¯ã“ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ãƒžãƒƒãƒã™ã‚‹ãŸã‚㫠何ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã® Host: ヘッダã«ç¾ã‚Œã‚‹å¿…è¦ãŒã‚ã‚‹ã®ã‹ã‚’指定ã—ã¾ã™ã€‚

    SSL を処ç†ã™ã‚‹ãƒ‡ãƒã‚¤ã‚¹ã€ä¾‹ãˆã°ãƒªãƒãƒ¼ã‚¹ãƒ—ロクシやロードãƒãƒ©ãƒ³ã‚µã‚„ SSL 処ç†è»½æ¸›ã‚¢ãƒ—ライアンスã®è£å´ã§ã‚µãƒ¼ãƒãŒç¨¼å‹•ã™ã‚‹å ´åˆã‚‚ã‚ã‚‹ã§ã—ょã†ã€‚ ãã†ã„ã£ãŸå ´åˆã§ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒæŽ¥ç¶šã™ã‚‹ã¨ãã«ä½¿ã† https:// スキームã¨ãƒãƒ¼ãƒˆç•ªå·ã‚’ ServerName ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã—ã¦ã€è‡ªå·±å‚ç…§ URL ãŒæ­£ã—ã生æˆã§ãるよã†ã«ã—ã¾ã™ã€‚

    自己å‚ç…§ URL (例ãˆã° mod_dir モジュールã«ã‚ˆã‚‹ã‚‚ã®ãªã©) ãŒæŒ‡å®šã•れãŸãƒãƒ¼ãƒˆã‚’使ã†ã‹ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒãƒ¼ãƒˆç•ªå·ã‚’使ã†ã‹ã‚’ 決定ã™ã‚‹è¨­å®šã¯ UseCanonicalName ディレクティブ㨠UseCanonicalPhysicalPort ディレクティブをå‚ç…§ã—ã¦ãã ã•ã„。

    å‚ç…§

    top

    ServerPath ディレクティブ

    説明:éžäº’æ›ã®ãƒ–ラウザãŒåå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸã¨ãã® ãŸã‚ã®äº’æ›ç”¨ URL パスå
    æ§‹æ–‡:ServerPath URL-path
    コンテキスト:ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    ServerPath ディレクティブã¯ã€ãƒãƒ¼ãƒ ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ãŠã„ã¦åˆ©ç”¨ã™ã‚‹ 互æ›ç”¨ URL パスåを設定ã—ã¾ã™ã€‚

    å‚ç…§

    top

    ServerRoot ディレクティブ

    説明:インストールã•れãŸã‚µãƒ¼ãƒã®ãƒ™ãƒ¼ã‚¹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒª
    æ§‹æ–‡:ServerRoot directory-path
    デフォルト:ServerRoot /usr/local/apache
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core

    ServerRoot ディレクティブã¯ã€ サーãƒãŒå­˜åœ¨ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’設定ã—ã¾ã™ã€‚ 通常ã€conf/ ã‚„ logs/ ã¨ã„ã£ãŸã‚µãƒ–ディレクトリ㌠存在ã—ã¾ã™ã€‚ ã¾ãŸã€ä»–ã®è¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ– (例ãˆã° Include ã‚„ LoadModule ãªã©) ã«ãŠã‘る相対パスã¯ã€ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‹ã‚‰ã®ç›¸å¯¾ä½ç½®ã¨ãªã‚Šã¾ã™ã€‚

    例

    ServerRoot /home/httpd

    å‚ç…§

    top

    ServerSignature ディレクティブ

    説明:サーãƒãŒç”Ÿæˆã™ã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®ãƒ•ッタを設定
    æ§‹æ–‡:ServerSignature On|Off|EMail
    デフォルト:ServerSignature Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:All
    ステータス:Core
    モジュール:core

    ServerSignature ディレクティブã¯ã€ サーãƒãŒç”Ÿæˆã™ã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆ (エラーメッセージã€mod_proxy ã«ãŠã‘ã‚‹ FTP ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒªã‚¹ãƒˆã€ mod_info ã®å‡ºåŠ›ã€ç­‰ã€…) ã®æœ€ä¸‹è¡Œã«ä»˜ä¸Žã™ã‚‹ãƒ•ッタã®è¨­å®šã‚’行ãªã„ã¾ã™ã€‚ ãã®ã‚ˆã†ãªãƒ•ッタ行を有効ã«ã—ãŸã„ç†ç”±ã«ã¯ã€ プロキシãŒè¤‡æ•°é€£ãªã£ã¦ã„ã‚‹å ´åˆã«ã€ãƒ¦ãƒ¼ã‚¶ã¯ã©ã®ã‚µãƒ¼ãƒãŒè¿”ã—㟠エラーメッセージã‹ã‚’知る手段ãŒã»ã¨ã‚“ã©ç„¡ã„ã¨ã„ã†ã‚‚ã®ãŒã‚りã¾ã™ã€‚

    デフォルトã§ã‚ã‚‹ Off ã«è¨­å®šã‚’ã™ã‚‹ã¨ã€ãƒ•ãƒƒã‚¿è¡ŒãŒæŠ‘åˆ¶ã•れã¾ã™ (ãã—ã¦ã€Apache-1.2 以å‰ã¨äº’æ›ã®å‹•作をã—ã¾ã™)。 On ã«è¨­å®šã—ãŸå ´åˆã¯ã€å˜ã«ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®ä¸­ã«ã€ã‚µãƒ¼ãƒã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã€ 稼動中ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã® ServerName ã®æ›¸ã‹ã‚ŒãŸè¡Œã‚’追加ã—〠EMail ã«ã—ãŸå ´åˆã¯ã•らã«å‚ç…§ã•れãŸãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã«å¯¾ã™ã‚‹ ServerAdmin を指㙠"mailto:" ãŒè¿½åŠ ã•れã¾ã™ã€‚

    ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.0.44 以é™ã§ã¯ã€è¡¨ç¤ºã•れるサーãƒãƒ¼ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ç•ªå·ã®è©³ç´°ã¯ServerTokens ディレクティブã«ã‚ˆã‚Šåˆ¶å¾¡ã•れã¾ã™ã€‚

    å‚ç…§

    top

    ServerTokens ディレクティブ

    説明:Server HTTP 応答ヘッダを設定ã™ã‚‹
    æ§‹æ–‡:ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full
    デフォルト:ServerTokens Full
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚Šè¿”ã™ Server 応答ヘッダ内ã«ã€ã‚µãƒ¼ãƒã®ä¸€èˆ¬çš„㪠OS 種別や〠コンパイルã•れã¦çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æƒ…報を å«ã‚ã‚‹ã‹ã©ã†ã‹ã‚’指定ã—ã¾ã™ã€‚

    ServerTokens Prod[uctOnly]
    サーãƒã¯ (例ãˆã°): Server: Apache ã¨ã„ã£ãŸã‚ˆã†ã«é€ã‚Šã¾ã™ã€‚
    ServerTokens Major
    Server sends (e.g.): Server: Apache/2
    ServerTokens Minor
    Server sends (e.g.): Server: Apache/2.0
    ServerTokens Min[imal]
    サーãƒã¯ (例ãˆã°): Server: Apache/2.0.41 ã¨ã„ã£ãŸã‚ˆã†ã«é€ã‚Šã¾ã™ã€‚
    ServerTokens OS
    サーãƒã¯ (例ãˆã°): Server: Apache/2.0.41 (Unix) ã¨ã„ã£ãŸã‚ˆã†ã«é€ã‚Šã¾ã™ã€‚
    ServerTokens Full (ã‚‚ã—ãã¯æœªæŒ‡å®š)
    サーãƒã¯ (例ãˆã°): Server: Apache/2.0.41 (Unix) PHP/4.2.2 MyMod/1.2 ã¨ã„ã£ãŸã‚ˆã†ã«é€ã‚Šã¾ã™ã€‚

    ã“ã®è¨­å®šã¯ã‚µãƒ¼ãƒå…¨ä½“ã«é©ç”¨ã•れã€ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆä¸Šã§æœ‰åйã«ã—ãŸã‚Š ç„¡åŠ¹ã«ã—ãŸã‚Šã¯ã§ãã¾ã›ã‚“。

    ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.0.44 以é™ã§ã¯ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠ServerSignature ディレクティブã«ã‚ˆã‚Šè¡¨ç¤ºã•れる情報も制御ã—ã¾ã™ã€‚

    å‚ç…§

    top

    SetHandler ディレクティブ

    説明:マッãƒã™ã‚‹ãƒ•ァイルãŒãƒãƒ³ãƒ‰ãƒ©ã§å‡¦ç†ã•れるよã†ã«ã™ã‚‹
    æ§‹æ–‡:SetHandler handler-name|None
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Apache 2.0 ã§ core ã«ç§»å‹•

    .htaccess ã‚„ <Directory> セクションã€<Location> ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã«æ›¸ã‹ã‚ŒãŸå ´åˆã€ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãã“ã«ã‚ã‚‹ã™ã¹ã¦ã®ãƒ•ァイル㌠handler-name ã§æŒ‡å®šã•れãŸãƒãƒ³ãƒ‰ãƒ©ã§æ‰±ã‚れるã“ã¨ã‚’強制ã—ã¾ã™ã€‚例ãˆã°ã€æ‹¡å¼µå­ã«é–¢ã‚らãšã€ ディレクトリ全体ãŒã‚¤ãƒ¡ãƒ¼ã‚¸ãƒžãƒƒãƒ—ファイルã¨ã—ã¦è§£æžã—ã¦æ¬²ã—ã„å ´åˆã«ã¯ã€ 以下をãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã® .htaccess ファイルã«è¨˜è¿°ã—ã¾ã™:

    SetHandler imap-file

    別ã®ä¾‹: URL http://servername/status ãŒæŒ‡å®šã•れãŸã¨ãã«ã‚µãƒ¼ãƒãŒçŠ¶æ…‹å ±å‘Šã‚’ã™ã‚‹ã‚ˆã†ã«ã—ãŸã„ã¨ãã¯ã€ä»¥ä¸‹ã‚’ httpd.conf ã«è¨˜è¿°ã—ã¾ã™:

    <Location /status>
    SetHandler server-status
    </Location>

    None ã¨ã„ã†å€¤ã‚’設定ã™ã‚‹ã“ã¨ã§ã€ å‰ã®æ–¹ã® SetHandler ã§å®šç¾©ã•れãŸè¨­å®šã‚’無効ã«ã™ã‚‹ã“ã¨ãŒ ã§ãã¾ã™ã€‚

    注æ„:SetHandler ã¯ãƒ‡ãƒ•ォルトã®ãƒãƒ³ãƒ‰ãƒ©ã‚’オーãƒãƒ¼ãƒ©ã‚¤ãƒ‰ ã—ã¾ã™ã®ã§ã€é€šå¸¸ã®æŒ™å‹•ã€ãŸã¨ãˆã°ã€ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ (/) ã§çµ‚ã‚ã‚‹ URL ㌠リクエストã•れãŸã¨ãã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚„インデックスファイルを返ã™ã‚ˆã†å–ã‚Šæ‰±ã†æŒ™å‹•ã¯ã€ 行ã‚れãªããªã‚Šã¾ã™ã€‚

    å‚ç…§

    top

    SetInputFilter ディレクティブ

    説明:クライアントã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚„ POST ã®å…¥åŠ›ã‚’å‡¦ç†ã™ã‚‹ãƒ•ィルタを設定ã™ã‚‹
    æ§‹æ–‡:SetInputFilter filter[;filter...]
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Core
    モジュール:core

    SetInputFilter ディレクティブã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã® リクエストや POST ã®å…¥åŠ›ã‚’ã‚µãƒ¼ãƒãŒå—ã‘å–ã£ãŸã¨ãã«å‡¦ç†ã™ã‚‹ãƒ•ィルタを 設定ã—ã¾ã™ã€‚ã“れ㯠AddInputFilter ディレクティブをå«ã‚ã€ä»–ã®å ´æ‰€ã§å®šç¾©ã•れã¦ã„るフィルタã®è¨­å®šã« 追加ã•れã¾ã™ã€‚

    複数ã®ãƒ•ィルタを指定ã™ã‚‹ã¨ãã¯ã€ãƒ‡ãƒ¼ã‚¿ã‚’処ç†ã™ã‚‹é †ç•ªã« セミコロンã§åŒºåˆ‡ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚

    å‚ç…§

    top

    SetOutputFilter ディレクティブ

    説明:サーãƒã®å¿œç­”を処ç†ã™ã‚‹ãƒ•ィルタを設定ã™ã‚‹
    æ§‹æ–‡:SetOutputFilter filter[;filter...]
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Core
    モジュール:core

    SetOutputFilter ディレクティブ㯠サーãƒã®å¿œç­”をクライアントã«é€ã‚Šè¿”ã•れるå‰ã«å‡¦ç†ã™ã‚‹ãƒ•ィルタを設定ã—ã¾ã™ã€‚ ã“れ㯠AddOutputFilter ディレクティブをå«ã‚ã€ä»–ã®å ´æ‰€ã§å®šç¾©ã•れã¦ã„るフィルタã®è¨­å®šã« 追加ã•れã¾ã™ã€‚

    例ãˆã°ã€ä»¥ä¸‹ã®è¨­å®šã¯ /www/data/ ディレクトリã®ã™ã¹ã¦ã® ファイルを SSI ã§å‡¦ç†ã—ã¾ã™ã€‚

    <Directory /www/data/>
    SetOutputFilter INCLUDES
    </Directory>

    複数ã®ãƒ•ィルタを指定ã™ã‚‹ã¨ãã¯ã€ãƒ‡ãƒ¼ã‚¿ã‚’処ç†ã™ã‚‹é †ç•ªã« セミコロンã§åŒºåˆ‡ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚

    å‚ç…§

    top

    TimeOut ディレクティブ

    説明:å„イベントã«ã¤ã„ã¦ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’失敗ã•ã›ã‚‹ã¾ã§ã«ã‚µãƒ¼ãƒãŒ å¾…ã¤æ™‚間を設定
    æ§‹æ–‡:TimeOut seconds
    デフォルト:TimeOut 60
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Core
    モジュール:core

    TimeOut ディレクティブã¯ã€ æ§˜ã€…ãªæ¡ä»¶ä¸‹ã§ã® I/O å¾…ã¡æ™‚間を定義ã—ã¾ã™:

    1. クライアントã‹ã‚‰ã®ãƒ‡ãƒ¼ã‚¿ã‚’読ã¿è¾¼ã‚€æ™‚。 å—ä¿¡ãƒãƒƒãƒ•ã‚¡ãŒç©ºã«ãªã£ã¦ã„ã¦ã€TCP パケットãŒå±Šãã¾ã§ å¾…ã¤æ™‚é–“ã®é•·ã•
    2. クライアントã«å¯¾ã—ã¦ãƒ‡ãƒ¼ã‚¿ã‚’é€ã‚Šå‡ºã™æ™‚。 é€ä¿¡ãƒãƒƒãƒ•ã‚¡ãŒã„ã£ã±ã„ã§ã€ãƒ‘ケットã®å—信完了 (訳注: ACK) ãŒå±Šãã¾ã§å¾…ã¤æ™‚é–“ã®é•·ã•
    3. mod_cgi 内ã§ã€CGI スクリプトãŒå‡ºåŠ›ã‚’ è¿”ã™ã¾ã§ã®å¾…ã¡æ™‚é–“ã®é•·ã•
    4. mod_ext_filter 内ã§ã€ãƒ•ィルタ処ç†ã§å‡ºåŠ›ã‚’ å¾…ã¤æ™‚é–“ã®é•·ã•
    5. mod_proxy 内ã§ã€ ProxyTimeout ãŒè¨­å®šã•れã¦ã„ãªã„å ´åˆã®ãƒ‡ãƒ•ォルトã®å¾…ã¡æ™‚é–“
    top

    TraceEnable ディレクティブ

    説明:TRACE メソッドã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã™ã‚‹å¿œç­”方法を決ã‚ã‚‹
    æ§‹æ–‡:TraceEnable [on|off|extended]
    デフォルト:TraceEnable on
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core
    äº’æ›æ€§:Apache 1.3.34, 2.0.55 以é™

    Apache ã®ã‚³ã‚¢æ©Ÿèƒ½(訳注: core)㨠mod_proxy 両方㮠TRACE ã®æŒ™å‹•をオーãƒãƒ¼ãƒ©ã‚¤ãƒ‰ã—ã¾ã™ã€‚デフォルト㮠TraceEnable on ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒœãƒ‡ã‚£ã‚’å—ã‘入れãªã„よã†ãªã€RFC2616 ã«æº–æ‹ ã—㟠TRACE リクエストをå—ã‘付ã‘ã¾ã™ã€‚ TraceEnable off ã¨è¨­å®šã™ã‚‹ã¨ã€ã‚³ã‚¢ã‚µãƒ¼ãƒã¨ mod_proxy 㯠405 (メソッドä¸è¨±å¯) エラーをクライアントã«è¿”ã—ã¾ã™ã€‚

    最後ã«ã€ãƒ†ã‚¹ãƒˆã‚„調査目的ãªã©ã®é™å®šç”¨é€”ã¨ã—ã¦ã€ä»•æ§˜ã«æº–æ‹ ã—ãªã„ TraceEnable extended を使ã£ã¦ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒœãƒ‡ã‚£ã‚’ å—ã‘付ã‘るよã†ã«æŒ™å‹•を変更ã§ãã¾ã™ã€‚(オリジンサーãƒã¨ã—ã¦ã®) Apache ã®ã‚³ã‚¢ã§ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒœãƒ‡ã‚£ã®ã‚µã‚¤ã‚ºã¯ 64k ( Transfer-Encoding: chunked ãŒä½¿ã‚れã¦ã„ã‚‹å ´åˆã¯ chunk ヘッダ用㫠+8k) ã«åˆ¶é™ã•れã¾ã™ã€‚ Apache ã®ã‚³ã‚¢ã¯ã€ãƒ˜ãƒƒãƒ€ã¨å…¨ã¦ã® chunk ヘッダをレスãƒãƒ³ã‚¹ã® ボディã¨ã—ã¦è¿”å´ã—ã¾ã™ã€‚ proxy サーãƒã¨ã—ã¦ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒœãƒ‡ã‚£ã®ã‚µã‚¤ã‚ºã¯ 64k ã«åˆ¶é™ã•れã¾ã›ã‚“。

    top

    UnDefine ディレクティブ

    説明:Undefine the existence of a variable
    æ§‹æ–‡:UnDefine parameter-name
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è§£èª¬æ–‡æ›¸ã¯ ã¾ã ç¿»è¨³ã•れã¦ã„ã¾ã›ã‚“。英語版をã”覧ãã ã•ã„。

    å‚ç…§

    top

    UseCanonicalName ディレクティブ

    説明:サーãƒãŒè‡ªåˆ†è‡ªèº«ã®åå‰ã¨ãƒãƒ¼ãƒˆã‚’決定ã™ã‚‹æ–¹æ³•を設定ã™ã‚‹
    æ§‹æ–‡:UseCanonicalName On|Off|Dns
    デフォルト:UseCanonicalName Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Core
    モジュール:core

    多ãã®çжæ³ã§ Apache ã¯è‡ªå·±å‚ç…§ URLã€ã™ãªã‚ã¡ åŒã˜ã‚µãƒ¼ãƒã‚’指㙠URLã€ã‚’作æˆã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚ UseCanonicalName On ã®å ´åˆã¯ã€ServerName ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã•れã¦ã„ã‚‹ ホストåã¨ãƒãƒ¼ãƒˆç•ªå·ã‚’使ã£ã¦ã€ãã®æ­£è¦å (自己å‚ç…§ã®åå‰) を生æˆã—ã¾ã™ã€‚ ã“ã®åå‰ã¯ã€ã™ã¹ã¦ã®è‡ªå·±å‚ç…§ URL ã§ä½¿ã‚れã¾ã™ã—ã€CGI ã® SERVER_NAME 㨠SERVER_PORT ã§ã‚‚使ã‚れã¾ã™ã€‚

    UseCanonicalName Off ã®å ´åˆã€ クライアントãŒãƒ›ã‚¹ãƒˆåã¨ãƒãƒ¼ãƒˆã‚’指定ã—ãŸã¨ãã«ã¯ã€ ãれらを元ã«è‡ªå·±å‚ç…§ URL を作æˆã—ã¾ã™ (指定ãŒãªã‹ã£ãŸã¨ã㯠上ã®å®šç¾©ã¨åŒæ§˜ã«ã—ã¦æ­£è¦åを解決ã—ã¾ã™)。 ã“れらã®å€¤ã¯åå‰ãƒ™ãƒ¼ã‚¹ã® ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’実装ã§ä½¿ã‚れã¦ã„ã‚‹ã®ã¨åŒã˜å€¤ã§ã€ åŒã˜ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã§å–å¾—ã§ãる値ã«ãªã£ã¦ã„ã¾ã™ã€‚ CGI 変数 SERVER_NAME 㨠SERVER_PORT もクライアントã‹ã‚‰ä¸Žãˆã‚‰ã‚ŒãŸå€¤ã‹ã‚‰ä½œæˆã•れã¾ã™ã€‚

    ã“ã®ã‚ˆã†ãªæŒ™å‹•ãŒä¾¿åˆ©ãªä¾‹ã¯ã€ã‚¤ãƒ³ãƒˆãƒ©ãƒãƒƒãƒˆã®ã‚µãƒ¼ãƒã§ www ã®ã‚ˆã†ãªçŸ­ã„åå‰ã§ãƒ¦ãƒ¼ã‚¶ãŒãƒžã‚·ãƒ³ã«æŽ¥ç¶šã™ã‚‹ã¨ãã§ã™ã€‚ ユーザã®å…¥åŠ›ã§çŸ­ã„ホストåãŒä½¿ã‚れã¦ã„ã¦ã€URL ãŒæœ€å¾Œã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ç„¡ã—㮠ディレクトリã«ãªã£ã¦ã„ã‚‹ http://www/splat ã®ã‚ˆã†ãªã¨ã〠Apache ã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ http://www.domain.com/splat/ ã¸ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã—ã¾ã™ã€‚ èªè¨¼ã‚’ã™ã‚‹ã‚ˆã†ã«è¨­å®šã—ã¦ã„ã‚‹ã¨ã€ã“ã®å ´åˆ ユーザ㯠2 回èªè¨¼ã‚’ã—ãªã‘れã°ãªã‚‰ãªããªã‚Šã¾ã™ (www 㫠対ã—㦠1 回ã€www.domain.com ã«å¯¾ã—ã¦ã‚‚ㆠ1 回 -- 詳細㯠ã“ã®è©±é¡Œã® FAQ ã‚’å‚ç…§ã—ã¦ãã ã•ã„)。 ã—ã‹ã— UseCanonicalName ㌠Off ã«ãªã£ã¦ã„ã‚‹ã¨ã€ Apache 㯠http://www/splat/ ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã—ã¾ã™ã€‚

    三ã¤ç›®ã®ã‚ªãƒ—ション UseCanonicalName DNS ã¯ã€ å¤§è¦æ¨¡ãª IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒ†ã‚£ãƒ³ã‚°ã§ã€ Host: ヘッダをæä¾›ã—ãªã„å¤ã„クライアントを サãƒãƒ¼ãƒˆã™ã‚‹å ´åˆã‚’想定ã—ã¦ã„ã¾ã™ã€‚ ã“ã®ã‚ªãƒ—ションã§ã¯ Apache ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒæŽ¥ç¶šã—㟠IP アドレスã«å¯¾ã—㦠DNS ã®é€†å¼•ãを行ãªã£ã¦ã€è‡ªå·±å‚ç…§ URL を作æˆã—ã¾ã™ã€‚

    警告

    CGI ㌠SERVER_NAME ã«é–¢ã—ã¦ä½•らã‹ã®å‰ææ¡ä»¶ã‚’ 仮定ã—ã¦ã„ã‚‹ã¨ãã«ã¯ã€ã“ã®ã‚ªãƒ—ションã®è¨­å®šã«ã‚ˆã£ã¦ã¯å‹•作ã—ãªã ãªã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。クライアントã¯å®Ÿè³ªçš„ã«ã¯ãƒ›ã‚¹ãƒˆåã¨ã—㦠何ã§ã‚‚望ã¿ã®å€¤ã‚’指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚CGI ㌠SERVER_NAME を使ã£ã¦è‡ªå·±å‚ç…§ URL を作æˆã™ã‚‹ã“ã¨ã—ã‹ã—ãªã„ å ´åˆã¯ã€ã©ã®è¨­å®šã‚’行ãªã£ã¦ã‚‚大丈夫ãªã¯ãšã§ã™ã€‚

    å‚ç…§

    top

    UseCanonicalPhysicalPort ディレクティブ

    説明:自分自身ã®åå‰ã¨ãƒãƒ¼ãƒˆç•ªå·ã‚’解決ã™ã‚‹æ–¹æ³•を設定ã™ã‚‹
    æ§‹æ–‡:UseCanonicalPhysicalPort On|Off
    デフォルト:UseCanonicalPhysicalPort Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Core
    モジュール:core

    ã•ã¾ã–ã¾ãªå±€é¢ã§ 自己å‚ç…§ URL -- ãれ自体ã®ã‚µãƒ¼ãƒã‚’å‚ç…§ã™ã‚‹ URL を作るã“ã¨ã«ãªã‚Šã¾ã™ã€‚UseCanonicalPhysicalPort On ã¨è¨­å®šã™ã‚‹ã¨ã€ UseCanonicalName ã«å¾“ã£ã¦åˆ¥åã‚’ 生æˆã™ã‚‹å ´åˆã«ã€å®Ÿéš›ã®ç‰©ç†ãƒãƒ¼ãƒˆç•ªå·ã‚’使ã£ã¦æ§‹æˆã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ UseCanonicalPhysicalPort Off ã®å ´åˆã¯ã€å®Ÿéš›ã®ç‰©ç†ãƒãƒ¼ãƒˆç•ªå·ã¯ 使用ã›ãšã€è¨­å®šã•ã‚ŒãŸæƒ…報を元ã«ãƒãƒ¼ãƒˆç•ªå·ã‚’決ã‚ã¾ã™ã€‚

    注æ„

    物ç†ãƒãƒ¼ãƒˆãŒä½¿ã‚れる場åˆã®é †ç•ªã¯æ¬¡ã®ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™:

    UseCanonicalName On

    • ServerName ã§æŒ‡å®šã•れã¦ã„ã‚‹ãƒãƒ¼ãƒˆç•ªå·
    • 物ç†ãƒãƒ¼ãƒˆç•ªå·
    • デフォルトã®ãƒãƒ¼ãƒˆç•ªå·
    UseCanonicalName Off | DNS
    • Host: ヘッダをパースã—ã¦å–å¾—ã•れるãƒãƒ¼ãƒˆç•ªå·
    • 物ç†ãƒãƒ¼ãƒˆç•ªå·
    • ServerName ã§æŒ‡å®šã•れã¦ã„ã‚‹ãƒãƒ¼ãƒˆç•ªå·
    • デフォルトã®ãƒãƒ¼ãƒˆç•ªå·

    UseCanonicalPhysicalPort Off ã§ã€ 物ç†ãƒãƒ¼ãƒˆç•ªå·ãŒä¸Šè¨˜ã®é †åºä»˜ã‘ã‹ã‚‰é™¤å¤–ã•れã¾ã™ã€‚

    å‚ç…§

    top

    <VirtualHost> ディレクティブ

    説明:特定ã®ãƒ›ã‚¹ãƒˆåã‚„ IP アドレスã®ã¿ã«é©ç”¨ã•れるディレクティブを 囲む
    æ§‹æ–‡:<VirtualHost addr[:port] [addr[:port]] ...> ... </VirtualHost>
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:Core
    モジュール:core

    <VirtualHost> åŠã³ </VirtualHost> ã¯ã€ 特定ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«å¯¾ã—ã¦ã®ã¿é©ç”¨ã•れるディレクティブ群を括る ãŸã‚ã«ä½¿ã‚れã¾ã™ã€‚ ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆã§è¨±å¯ã•れる全ã¦ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を指定å¯èƒ½ã§ã™ã€‚ サーãƒãŒã€æŒ‡å®šã•れãŸãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ã‚るドキュメントã¸ã® リクエストをå—ã‘付ã‘ãŸå ´åˆã€ <VirtualHost> セクションã®ä¸­ã«ã‚ã‚‹ ディレクティブãŒé©ç”¨ã•れã¾ã™ã€‚ Addrã¯ã€æ¬¡ã®ã‚‚ã®ãŒåˆ©ç”¨ã§ãã¾ã™:

    • ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã® IP アドレス
    • ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã® IP ã«å¯¾å¿œã™ã‚‹å®Œå…¨ãªãƒ‰ãƒ¡ã‚¤ãƒ³å (éžæŽ¨å¥¨)
    • NameVirtualHost * ã¨å…±ã«ä½¿ã‚れる〠ã™ã¹ã¦ã® IP アドレスã«ãƒžãƒƒãƒã™ã‚‹æ–‡å­— *
    • IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã§ä»–ã®ã‚‚ã®ã«ãƒžãƒƒãƒã—ãªã„ IP アドレス ã®ãŸã‚ã®æ–‡å­—列 _default_

    例

    <VirtualHost 10.1.2.3>
    ServerAdmin webmaster@host.example.com
    DocumentRoot /www/docs/host.example.com
    ServerName host.example.com
    ErrorLog logs/host.example.com-error_log
    TransferLog logs/host.example.com-access_log
    </VirtualHost>

    IPv6 アドレスã¯ã‚ªãƒ—ションã®ãƒãƒ¼ãƒˆç•ªå·ã®æŒ‡å®šã¨åŒºåˆ¥ã™ã‚‹ãŸã‚ã«ã€ è§’æ‹¬å¼§ã§æ‹¬ã£ã¦æŒ‡å®šã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚次㯠IPv6 ã®ä¾‹ã§ã™:

    <VirtualHost [2001:db8::a00:20ff:fea7:ccea]>
    ServerAdmin webmaster@host.example.com
    DocumentRoot /www/docs/host.example.com
    ServerName host.example.com
    ErrorLog logs/host.example.com-error_log
    TransferLog logs/host.example.com-access_log
    </VirtualHost>

    å„々ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ã¯ãれãžã‚Œé•ㆠIP アドレスã€ãƒãƒ¼ãƒˆç•ªå· ã‚‚ã—ãã¯ãƒ›ã‚¹ãƒˆåã«å¯¾å¿œã™ã‚‹å¿…è¦ãŒã‚り〠1 番目ã®å ´åˆã«ã¯è¤‡æ•°ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã§ IP パケットをå—ä¿¡ã§ãるよã†ã« サーãƒãƒžã‚·ãƒ³ã‚’設定ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 (ã‚‚ã—ã€ãƒžã‚·ãƒ³ãŒè¤‡æ•°ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ェースをæŒãŸãªã„å ´åˆã¯ã€ (OSãŒã‚µãƒãƒ¼ãƒˆã—ã¦ã„れã°) ifconfig alias コマンドã«ã‚ˆã‚Р锿ˆã§ãã¾ã™)。

    注æ„点

    <VirtualHost> 㯠Apache ㌠Listen ã™ã‚‹ IP アドレスã«ã¯å½±éŸ¿ã‚’与ãˆã¾ã›ã‚“。 Listen ã‚’ 使ã£ã¦ Apache ãŒæ­£ã—ã„アドレスを listen ã™ã‚‹ã‚ˆã†ã«è¨­å®šã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚

    IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’使ã£ã¦ã„ã‚‹å ´åˆã¯ã€ç‰¹åˆ¥ãªåå‰ _default_ を指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ãã®å ´åˆã¯ ãã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¯ä»–ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã§æ˜Žç¤ºçš„ã«æŒ™ã’られã¦ã„ãªã„ ã™ã¹ã¦ã® IP アドレスã«ãƒžãƒƒãƒã—ã¾ã™ã€‚_default_ ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãŒç„¡ã„ å ´åˆã« IP ãŒãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã§æŒ‡å®šã•れãŸã‚‚ã®ã«ãƒžãƒƒãƒã—ãªã„ã¨ãã¯ã€ VirtualHost セクションã®å¤–ã®ã™ã¹ã¦ã®å®šç¾©ã‹ã‚‰ãªã‚‹ã€Œä¸»ã€ã‚µãƒ¼ãƒè¨­å®šãŒ 使ã‚れã¾ã™ã€‚(ãŸã ã—ã€NameVirtualHost ディレクティブã«ãƒžãƒƒãƒã™ã‚‹ ã™ã¹ã¦ã® IP アドレスã¯ã€Œä¸»ã€ã‚µãƒ¼ãƒè¨­å®šã‚‚ _default_ ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚‚ 使ã‚ãªã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。詳ã—ã㯠ãƒãƒ¼ãƒ ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ ã‚’ å‚ç…§ã—ã¦ãã ã•ã„。)

    :port ã¨ã„ã£ãŸå½¢å¼ã§è¨˜è¿°ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ マッãƒã•ã›ã‚‹ãƒãƒ¼ãƒˆã‚’変更å¯èƒ½ã§ã™ã€‚ ã“ã®æŒ‡å®šã‚’ã—ãªã„å ´åˆã«ã¯ã€ä¸»ã‚µãƒ¼ãƒè¨­å®šã«ãŠã‘ã‚‹ 一番最後㫠Port ã§æŒ‡å®šã•れãŸãƒãƒ¼ãƒˆãŒ デフォルトã¨ãªã‚Šã¾ã™ã€‚ :* を指定ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ アドレス上ã®å…¨ã¦ã®ãƒãƒ¼ãƒˆã«ãƒžãƒƒãƒã—ã¾ã™ã€‚(_default_ ã®ã¨ã㯠ã“れを使ã†ã“ã¨ãŒæŽ¨å¥¨ã•れã¦ã„ã¾ã™ã€‚)

    <VirtualHost> ブロックã”ã¨ã« ServerName を指定ã™ã¹ãã§ã™ã€‚ ã‚‚ã—ãªã‘れã°ã€ãƒ¡ã‚¤ãƒ³ã‚µãƒ¼ãƒè¨­å®šã® ServerName ãŒç¶™æ‰¿ã•れã¾ã™

    セキュリティ

    サーãƒãƒ¼ã‚’èµ·å‹•ã—ãŸä»¥å¤–ã®ãƒ¦ãƒ¼ã‚¶ãŒãƒ­ã‚°ãƒ•ァイルãŒä¿ç®¡ã•れるディレクトリ㫠書ãè¾¼ã¿å¯èƒ½ãªã¨ãã«ãªãœã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ãŒç ´ã‚‰ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã‹ã®è©³ç´°ã¯ セキュリティã«é–¢ã™ã‚‹ã‚³ãƒ„ ã‚’ å‚ç…§ã—ã¦ãã ã•ã„。

    å‚ç…§

    翻訳済ã¿è¨€èªž:  de  |  en  |  es  |  fr  |  ja  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dialup.html.fr.utf80000644000000000000500000001747513412755316020543 0ustar rootsrc mod_dialup - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_dialup

    Langues Disponibles:  en  |  fr 

    Description:Envoie le contenu statique avec une bande passante limitée définie par les différents standards des anciens modems.
    Statut:Expérimental
    Identificateur de Module:dialup_module
    Fichier Source:mod_dialup.c

    Sommaire

    Il s'agit d'un module qui envoie le contenu statique avec une bande passante limitée définie par les différents standards des anciens modems. Ainsi, il est possible de naviguer sur votre site avec un modem 56k V.92 en positionnant une configuration de ce type :

    <Location "/mysite">
        ModemStandard "V.92"
    </Location>

    Auparavant, pour faire des modules de limitation de bande passante, il fallait monopoliser un thread, pour chaque client, et insérer des temporisations pour diminuer la bande passante. Grâce à cette nouvelle fonctionnalité, un gestionnaire peut recevoir les réponses à ses callbacks après N millisecondes, et il sera invoqué par le module MPM Event dans un thread différent à la fin du délai indiqué. À partir de ce moment, le gestionnaire peut continuer à envoyer des données au client.

    top

    Directive ModemStandard

    Description:Standard de modem à simuler
    Syntaxe:ModemStandard V.21|V.26bis|V.32|V.34|V.92
    Contexte:répertoire
    Statut:Expérimental
    Module:mod_dialup

    Cette directive permet de spécifier le standard de modem que vous souhaitez simuler.

    <Location "/mysite">
        ModemStandard "V.26bis"
    </Location>

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_include.html0000644000000000000500000000046513362070302017371 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_include.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_include.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_include.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mpm_common.html.de0000644000000000000500000017367113412755316017664 0ustar rootsrc mpm_common - Apache HTTP Server Version 2.4
    <-

    Allgemeine Direktiven der Apache-MPMs

    Verfügbare Sprachen:  de  |  en  |  fr  |  ja  |  tr 

    Diese Übersetzung ist möglicherweise nicht mehr aktuell. Bitte prüfen Sie die englische Version auf die neuesten Änderungen.
    Beschreibung:Eine Sammlung von Direktiven, die in mehr als einem Multi-Processing-Modul (MPM) implementiert sind.
    Status:MPM
    top

    CoreDumpDirectory-Direktive

    Beschreibung:Verzeichnis, in das der Apache zu wechseln versucht, bevor er einen Hauptspeicherauszug erstellt
    Syntax:CoreDumpDirectory Verzeichnis
    Voreinstellung:Für die Voreinstellung siehe Beschreibung
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:beos, leader, mpm_winnt, perchild, prefork, threadpool, worker

    Dies beeinflusst das Verzeichnis, in welches der Apache zu wechseln versucht, bevor er einen Hauptspeicherauszug (Anm.d.Ü.: einen so genannten Core-Dump) erstellt. Die Voreinstellung ist das ServerRoot-Verzeichnis. Da dieses jedoch nicht für den Benutzer beschreibbar sein soll, unter dem der Server läuft, werden normalerweise keine Hauptspeicherauszüge geschrieben. Wenn Sie zum Debuggen einen Hauptspeicherauszug haben möchten, können Sie ihn mit dieser Direktive an einem anderen Ort ablegen lassen.

    Hauptspeicherauszüge unter Linux

    Wenn Apache als root startet und zu einem anderen Benutzer wechselt, deaktiviert der Linux-Kernel Hauptspeicherauszüge auch dann, wenn der Prozess in dem Verzeichnis schreiben darf. Ab Linux 2.4 reaktiviert Apache (ab 2.0.46) Hauptspeicherauszüge wieder, jedoch nur dann, wenn Sie explizit CoreDumpDirectory konfigurieren.

    top

    EnableExceptionHook-Direktive

    Beschreibung:Aktiviert einen Hook, der nach einem Absturz noch Ausnahmefehler behandeln lassen kann
    Syntax:EnableExceptionHook On|Off
    Voreinstellung:EnableExceptionHook Off
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:leader, perchild, prefork, threadpool, worker
    Kompatibilität:Verfügbar seit Version 2.0.49

    Diese Direktive ist aus Sicherheitsgründen nur verfügbar, wenn der Server mit der Option --enable-exception-hook konfiguriert wurde. Sie aktiviert einen Hook, der es externen Modulen erlaubt, sich dort einzuhängen und nach dem Absturz eines Kindprozesses noch Aktionen durchzuführen.

    Es existieren bereits zwei Module, mod_whatkilledus und mod_backtrace, welche diesen Hook verwenden. Weitere Informationen hierzu finden Sie auf Jeff Trawicks EnableExceptionHook-Seite.

    top

    GracefulShutdownTimeout-Direktive

    Beschreibung:Specify a timeout after which a gracefully shutdown server will exit.
    Syntax:GracefulShutdownTimeout seconds
    Voreinstellung:GracefulShutdownTimeout 0
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:event, worker, prefork
    Kompatibilität:Available in version 2.2 and later

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    Listen-Direktive

    Beschreibung:IP-Adressen und Ports, an denen der Server lauscht
    Syntax:Listen [IP-Addresse:]Port
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:beos, leader, mpm_netware, mpm_winnt, mpmt_os2, perchild, prefork, threadpool, worker
    Kompatibilität:Seit Apache 2.0 vorgeschrieben

    Die Direktive Listen weist den Apache an, nur an den angegebenen IP-Adressen oder Ports zu lauschen. Standardmäßig antwortet er auf alle Anfragen an allen IP-Interfaces. Listen ist nun eine notwendige Anweisung. Wenn sie nicht in der Konfigurationsdatei enthalten ist, wird der Server-Start fehlschlagen. Dies ist eine Änderung gegenüber früheren Versionen des Apache.

    Die Direktive Listen weist den Server an, ankommende Anfragen am angegebenen Port oder der Kombination aus Adresse und Port entgegenzunehmen. Wenn nur eine Portnummer angegeben ist, dann lauscht der Server am angegebenen Port an allen Interfaces. Wenn sowohl eine IP-Adresse als auch ein Port angegeben sind, dann lauscht der Server am angegeben Port und Interface.

    Es können mehrere Listen-Anweisungen verwendet werden, um eine Reihe von Adressen und Port anzugeben, an denen gelauscht werden soll. Der Server antwortet auf Anfragen von jedem der aufgeführten Adressen und Ports.

    Um beispielsweise den Server Verbindungen an den beiden Ports 80 und 8000 annehmen zu lassen, verwenden Sie:

    Listen 80
    Listen 8000

    Um den Server Verbindungen an zwei angegebenen Interfaces und Ports annehmen zu lassen, verwenden Sie:

    Listen 192.170.2.1:80
    Listen 192.170.2.5:8000

    IPv6-Adressen müssen wie in dem folgenden Beispiel in eckige Klammern eingeschlossen werden:

    Listen [2001:db8::a00:20ff:fea7:ccea]:80

    Fehlermöglichkeit

    Mehrere Listen-Direktiven für gleiche IP-Adresse und Port führen zur Fehlermeldung Address already in use (Anm.d.Ü.: Adresse schon in Benutzung).

    Siehe auch

    top

    ListenBackLog-Direktive

    Beschreibung:Maximale Länge der Warteschlange schwebender Verbindungen
    Syntax:ListenBacklog backlog
    Voreinstellung:ListenBacklog 511
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:beos, leader, mpm_netware, mpm_winnt, mpmt_os2, perchild, prefork, threadpool, worker

    Die maximale Länge der Warteschlange schwebender Verbindungen. Üblicherweise ist keine Feineinstellung notwendig oder sinnvoll, auf einigen System kann es jedoch gewünscht sein, diesen Wert bei TCP-SYN-Angriffen zu erhöhen. Beachten Sie auch die Beschreibung des backlog-Parameters der Systemfunktion listen(2).

    Der Wert wird vom Betriebssystem oft auf eine niedrigere Einstellung begrenzt. Dies variiert von Betriebssystem zu Betriebssystem. Beachten Sie auch, dass viele Betriebssyteme nicht genau beachten, was für backlog angegeben ist, jedoch einen Wert basierend auf der Angabe (normalerweiseweise jedoch größer als diese) verwenden.

    top

    ListenCoresBucketsRatio-Direktive

    Beschreibung:Ratio between the number of CPU cores (online) and the number of listeners' buckets
    Syntax:ListenCoresBucketsRatio ratio
    Voreinstellung:ListenCoresBucketsRatio 0 (disabled)
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:event, worker, prefork
    Kompatibilität:Available in Apache HTTP Server 2.4.17, with a kernel supporting the socket option SO_REUSEPORT and distributing new connections evenly across listening processes' (or threads') sockets using it (eg. Linux 3.9 and later, but not the current implementations of SO_REUSEPORT in *BSDs.

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    MaxConnectionsPerChild-Direktive

    Beschreibung:Limit on the number of connections that an individual child server will handle during its life
    Syntax:MaxConnectionsPerChild number
    Voreinstellung:MaxConnectionsPerChild 0
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2
    Kompatibilität:Available Apache HTTP Server 2.3.9 and later. The old name MaxRequestsPerChild is still supported.

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    MaxMemFree-Direktive

    Beschreibung:Maximale Menge des Arbeitsspeichers, den die Haupt-Zuteilungsroutine verwalten darf, ohne free() aufzurufen
    Syntax:MaxMemFree KBytes
    Voreinstellung:MaxMemFree 0
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:beos, leader, mpm_netware, prefork, threadpool, worker, mpm_winnt

    Die Direktive MaxMemFree gibt die maximale Menge freier Kilobytes an, welche die Haupt-Zuteilungsroutine verwalten darf, ohne free() aufzurufen. Wenn keine Angabe gemacht wird, oder Null angegeben ist, wird dieser Wert nicht eingeschränkt.

    top

    MaxRequestWorkers-Direktive

    Beschreibung:Maximum number of connections that will be processed simultaneously
    Syntax:MaxRequestWorkers number
    Voreinstellung:See usage for details
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:event, worker, prefork

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    MaxSpareThreads-Direktive

    Beschreibung:Maximale Anzahl unbeschäftigter Threads
    Syntax:MaxSpareThreads Anzahl
    Voreinstellung:Für Details siehe Beschreibung
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:beos, leader, mpm_netware, mpmt_os2, perchild, threadpool, worker

    Maximale Anzahl unbeschäftigter Threads. Die verschiedenen MPMs behandeln diese Anweisung unterschiedlich.

    Die Voreinstellung für perchild ist MaxSpareThreads 10. Das MPM überwacht die Anzahl der unbeschäftigten Threads auf der Basis einzelner Kindprozesse. Wenn zu viele unbeschäftigte Threads in einem Kindprozess existieren, beendet der Server Threads innerhalb dieses Kindprozesses.

    Die Voreinstellung für worker, leader und threadpool ist MaxSpareThreads 250. Diese MPMs behandeln Threads auf einer serverweiten Basis. Wenn zu viele unbeschäftigte Threads im Server existieren, dann werden solange Kindprozesse beendet, bis die Anzahl der unbeschäftigten Threads kleiner als der angegebene Wert ist.

    Die Voreinstellung für mpm_netware ist MaxSpareThreads 100. Da dieses MPM nur einen einzigen Prozess ausführt, ist die Zählung überschüssiger Threads ebenfalls serverweit.

    beos and mpmt_os2 arbeiten ähnlich wie mpm_netware. Die Voreinstellung für beos ist MaxSpareThreads 50. Die Voreinstellung für mpmt_os2 ist 10.

    Restriktionen

    Der Wertebereich von MaxSpareThreads ist eingeschränkt. Apache korrigiert den angegebenen Wert automatisch gemäß den folgenden Regeln:

    Siehe auch

    top

    MinSpareThreads-Direktive

    Beschreibung:Minimale Anzahl unbeschäftigter Threads, die zur Bedienung von Anfragespitzen zur Verfügung stehen
    Syntax:MinSpareThreads Anzahl
    Voreinstellung:Für Details siehe Beschreibung
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:beos, leader, mpm_netware, mpmt_os2, perchild, threadpool, worker

    Minimale Anzahl unbeschäftigter Threads, um Anfragespitzen zu bedienen. Die verschiedenen MPMs behandeln die Anweisung unterschiedlich.

    perchild verwendet die Voreinstellung MinSpareThreads 5 und überwacht die Anzahl der unbeschäftigten Threads auf der Basis einzelner Kindprozesse. Wenn in einem Kindprozess nicht genügend unbeschäftigte Threads vorhanden sind, erstellt der Server neue Threads innerhalb dieses Kindprozesses. Wenn Sie also NumServers auf 10 und MinSpareThreads auf einen Wert von 5 setzen, haben Sie mindestens 50 unbeschäftigte Threads auf Ihrem System.

    worker, leader und threadpool verwenden eine Voreinstellung von MinSpareThreads 75 und behandeln unbeschäftigte Threads auf serverweiter Basis. Wenn nicht genügend unbeschäftigte Threads im Server vorhanden sind, dann werden solange Kindprozesse erzeugt, bis die Anzahl unbeschäftigter Threads größer als der angegebene Wert ist.

    mpm_netware verwendet die Voreinstellung MinSpareThreads 10 und verfolgt dies serverweit, da es ein Einzelprozess-MPM ist.

    beos und mpmt_os2 arbeiten ähnlich wie mpm_netware. Die Voreinstellung für beos ist MinSpareThreads 1. Die Voreinstellung für mpmt_os2 ist 5.

    Siehe auch

    top

    PidFile-Direktive

    Beschreibung:Datei, in welcher der Server die Prozess-ID des Daemons ablegt
    Syntax:PidFile Dateiname
    Voreinstellung:PidFile logs/httpd.pid
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:beos, leader, mpm_winnt, mpmt_os2, perchild, prefork, threadpool, worker

    Die Direktive PidFile bestimmt die Datei, in welcher der Server die Prozess-ID des Daemons ablegt. Wenn der Dateiname nicht absolut angegeben wird, wird er relativ zu ServerRoot interpretiert.

    Beispiel

    PidFile /var/run/apache.pid

    Es ist oft hilfreich, dem Server ein Signal senden zu können, damit er seine ErrorLogs und TransferLogs schließt und dann neu öffnet und seine Konfigurationsdateien neu einliest. Dies kann durch Senden eines SIGHUP-Signals (kill -1) an die Prozess-ID geschehen, die im PidFile eingetragen ist.

    Die PidFile-Datei unterliegt den gleichen Warnungen über die Ablage von Protokolldateien und Sicherheit.

    Anmerkung

    Ab Apache 2 wird empfohlen, nur das Skript apachectl zum (Neu-)Starten und Stoppen des Servers zu verwenden.

    top

    ReceiveBufferSize-Direktive

    Beschreibung:TCP receive buffer size
    Syntax:ReceiveBufferSize bytes
    Voreinstellung:ReceiveBufferSize 0
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:event, worker, prefork, mpm_winnt, mpm_netware, mpmt_os2

    Die Dokumentation zu dieser Direktive wurde noch nicht übersetzt. Bitte schauen Sie in die englische Version.

    top

    ScoreBoardFile-Direktive

    Beschreibung:Ablageort der Datei, die zur Speicherung von Daten zur Koordinierung der Kindprozesse verwendet wird
    Syntax:ScoreBoardFile Dateipfad
    Voreinstellung:ScoreBoardFile logs/apache_status
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:beos, leader, mpm_winnt, perchild, prefork, threadpool, worker

    Apache verwendet ein Scoreboard zur Kommunikation zwischen seinen Eltern- und Kindprozessen. Einige Architekturen erfordern eine Datei zur Unterstützung der Kommunikation. Wenn die Datei undefiniert bleibt, versucht der Apache zuerst, das Scoreboard im Arbeitsspeicher zu erstellen (Verwendung von anonymem Shared-Memory), und versucht bei einem Fehlschlag anschließend die Datei auf der Festplatte zu erstellen (Verwendung von Datei-basiertem Shared-Memory). Die Angabe dieser Direktive veranlaßt den Apache stets, die Datei auf der Festplatte zu erstellen.

    Beispiel

    ScoreBoardFile /var/run/apache_status

    Datei-basiertes Shared-Memory ist für Applikationen von Drittanbietern hilfreich, die direkten Zugriff auf das Scoreboard benötigen.

    Wenn Sie eine ScoreBoardFile-Anweisung verwenden, erreichen Sie eventuell eine höhere Geschwindigkeit, wenn Sie die Datei auf einer RAM-Disk ablegen. Achten Sie darauf, die gleichen Warnungen wie über die Ablage von Protokolldateien und Sicherheit zu beherzigen.

    Siehe auch

    top

    SendBufferSize-Direktive

    Beschreibung:Größe des TCP-Puffers
    Syntax:SendBufferSize Bytes
    Voreinstellung:SendBufferSize 0
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:beos, leader, mpm_netware, mpm_winnt, mpmt_os2, perchild, prefork, threadpool, worker

    Der Server setzt die Größe des TCP-Puffers auf die angegebene Anzahl Bytes. Dies ist sehr hilfreich, um Voreinstellungen alter Standardbetriebssysteme für Hochgeschwindigkeitsverbindungen mit hoher Latenzzeit anzuheben (d.h. 100ms oder so, wie bei Interkontinentalverbindungen).

    Wird der Wert auf 0 gesetzt, dann verwendet der Server die Voreinstellung des Betriebssystems.

    top

    ServerLimit-Direktive

    Beschreibung:Obergrenze für die konfigurierbare Anzahl von Prozessen
    Syntax:ServerLimit Anzahl
    Voreinstellung:Für Details siehe Beschreibung
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:leader, perchild, prefork, threadpool, worker

    Bei dem MPM prefork bestimmt die Direktive den während der Lebensdauer des Apache-Prozesses maximal einstellbaren Wert für MaxClients. Beim MPM worker bestimmt die Direktive in Verbindung mit ThreadLimit den Maximalwert für MaxClients für die Lebensdauer des Apache-Prozesses. Jeder Versuch, diese Anweisung während eines Neustarts zu ändern, wird ignoriert. MaxClients kann jedoch während eines Neustarts geändert werden.

    Lassen Sie besondere Vorsicht bei der Verwendung dieser Direktive walten. Wenn ServerLimit auf einen Wert deutlich höher als notwendig gesetzt wird, wird zusätzliches, unbenutztes Shared-Memory belegt. Wenn sowohl ServerLimit als auch MaxClients auf Werte gesetzt werden, die größer sind, als das System sie handhaben kann, dann kann der Apache möglicherweise nicht starten, oder das System kann instabil werden.

    Verwenden Sie die Direktive bei dem MPM prefork nur, wenn Sie MaxClients auf mehr als 256 (Voreinstellung) setzen müssen. Setzen Sie den Wert nicht höher als den Wert, den Sie für MaxClients angeben möchten.

    Verwenden Sie die Direktive bei worker, leader und threadpool nur, wenn Ihre MaxClients- und ThreadsPerChild-Einstellungen mehr als 16 Serverprozesse (Voreinstellung) erfordern. Setzen Sie den Wert dieser Direktive nicht höher, als die Anzahl der Serverprozesse, die dafür erforderlich ist, was Sie bei MaxClients und ThreadsPerChild angeben möchten.

    Verwenden Sie die Direktive beim MPM perchild nur, wenn Sie NumServers auf einen Wert größer als 8 (Voreinstellung) setzen müssen.

    Anmerkung

    Eine feste Begrenzung von ServerLimit 20000 ist in den Server einkompiliert (bei dem MPM prefork 200000). Dies soll unangenehme Effekte durch Tippfehler verhindern.

    Siehe auch

    top

    StartServers-Direktive

    Beschreibung:Anzahl der Kindprozesse des Servers, die beim Start erstellt werden
    Syntax:StartServers Anzahl
    Voreinstellung:Für Details siehe Beschreibung
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:leader, mpmt_os2, prefork, threadpool, worker

    Die Direktive StartServers bestimmt die Anzahl der Kindprozesse des Servers, die beim Start erstellt werden. Da die Anzahl der Prozesse abhängig von der Last dynamisch kontrolliert wird, besteht normalerweise wenig Grund für eine Änderung dieses Parameters.

    Die Voreinstellung unterscheidet sich von MPM zu MPM. Bei leader, threadpool und worker ist die Voreinstellung StartServers 3. Die Voreinstellung bei prefork ist 5 und bei mpmt_os2 2.

    top

    StartThreads-Direktive

    Beschreibung:Anzahl der Threads, die beim Start erstellt werden
    Syntax:StartThreads Anzahl
    Voreinstellung:Für Details siehe Beschreibung
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:beos, mpm_netware, perchild

    Anzahl der Threads, die beim Start erstellt werden. Da die Anzahl der Threads abhängig von der Last dynamisch kontrolliert wird, besteht normalerweise wenig Grund für eine Änderung dieses Parameters.

    Die Voreinstellung für perchild ist StartThreads 5. Die Direktive setzt während des Starts die Anzahl der Threads pro Prozess.

    Die Voreinstellung bei mpm_netware ist StartThreads 50. Da hier lediglich ein einzelner Prozess existiert, ist dies die Gesamtzahl der Threads, die beim Start erstellt wird, um Anfragen zu bedienen.

    Die Voreinstellung für beos ist StartThreads 10. Die Einstellung reflektiert ebenfalls die Gesamtzahl der Threads, die beim Start erstellt werden, um Anfragen zu bedienen.

    top

    ThreadLimit-Direktive

    Beschreibung:Bestimmt die Obergrenze der konfigurierbaren Anzahl von Threads pro Kindprozess
    Syntax:ThreadLimit Anzahl
    Voreinstellung:Für Details siehe Beschreibung
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:leader, mpm_winnt, perchild, threadpool, worker
    Kompatibilität:Verfügbar für mpm_winnt ab Apache 2.0.41

    Die Direktive bestimmt den während der Lebensdauer des Apache-Prozesses maximal einstellbaren Wert für ThreadsPerChild. Jeder Versuch, diese Direktive während eines Neustarts zu ändern, wird ignoriert. ThreadsPerChild kann jedoch während eines Neustarts modifiziert werden bis zu dem Wert dieser Anweisung.

    Lassen Sie besondere Vorsicht bei der Verwendung dieser Direktive walten. Wenn ThreadLimit auf einen Wert deutlich höher als ThreadsPerChild gesetzt wird, wird zusätzliches, ungenutztes Shared-Memory belegt. Wenn sowohl ThreadLimit als auch ThreadsPerChild auf Werte gesetzt werden, die größer sind, als das System sie handhaben kann, dann kann der Apache möglicherweise nicht starten oder das System kann instabil werden. Setzen Sie den Wert dieser Direktive nicht höher als Ihre größte erwartete Einstellung für ThreadsPerChild während der aktuellen Ausführung des Apache.

    Die Voreinstellung für ThreadLimit ist 1920 wenn sie zusammen mit mpm_winnt verwendet wird, und 64 bei der Verwendung mit anderen MPMs.

    Anmerkung

    Eine feste Begrenzung von ThreadLimit 20000 (oder ThreadLimit 15000 bei mpm_winnt) ist in den Server einkompiliert. Dies soll unangenehme Effekte durch Tippfehler verhindern.

    top

    ThreadsPerChild-Direktive

    Beschreibung:Anzahl der Threads, die mit jedem Kindprozess gestartet werden
    Syntax:ThreadsPerChild Anzahl
    Voreinstellung:Für Details siehe Beschreibung
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:leader, mpm_winnt, threadpool, worker

    Die Direktive legt die Anzahl der Threads fest, die mit jedem Kindprozess gestartet werden. Der Kindprozess erstellt diese Threads beim Start und erstellt später keine weiteren mehr. Wenn Sie ein MPM wie mpm_winnt verwenden, wo nur ein Kindprozess existiert, dann sollte diese Angabe hoch genug sein, die gesamte Last des Servers zu bewältigen. Wenn Sie ein MPM wie worker verwenden, wo mehrere Kindprozesse existieren, dann sollte die Gesamtzahl der Thread groß genug sein, die übliche Last auf dem Server zu bewältigen.

    Die Voreinstellung für ThreadsPerChild ist 64, wenn mpm_winnt verwendet wird, und 25 bei der Verwendung der anderen MPMs.

    top

    ThreadStackSize-Direktive

    Beschreibung:Die Größe des Stacks in Bytes, der von Threads verwendet wird, die Client-Verbindungen bearbeiten.
    Syntax:ThreadStackSize size
    Voreinstellung:65536 unter NetWare; variiert bei anderen Betriebssystemen.
    Kontext:Serverkonfiguration
    Status:MPM
    Modul:leader, mpm_netware, mpm_winnt, perchild, threadpool, worker
    Kompatibilität:Verfügbar seit Version 2.1

    Die Direktive ThreadStackSize legt die Größe des Stacks (für Autodaten) der Threads fest, die Client-Verbindungen bearbeiten und Module aufrufen, welche bei der Verarbeitung dieser Verbindungen helfen. In den meisten Fällen ist die Voreinstellung des Betriebssystems angemessen, doch unter bestimmten Umständen kann es sinnvoll sein, den Wert anzupassen:

    • Auf Plattformen mit einer relativ kleinen Voreingestellung für die Größe des Thread-Stacks (z.B. HP-UX) kann der Apache bei der Verwendung einiger Drittanbietermodule, die einen relativ hohen Bedarf an Speicherplatz haben, abstürzen. Ebendiese Module arbeiten möglicherweise problemlos auf anderen Plattformen, wo der voreingestellte Thread-Stack größer ist. Derartige Abstürze können Sie vermeiden, indem Sie ThreadStackSize auf einen höheren Wert als die Betriebssystemvoreinstellung setzen. Eine solche Anpassung ist nur notwendig, wenn es vom Anbieter des Moduls so spezifiziert wurde oder die Diagnose eines Apache-Absturzes ergeben hat, das die Thread-Stackgröße zu klein war.
    • Auf Plattformen, wo die voreingestellte Thread-Stackgröße für die Webserverkonfiguration deutlich größer als notwendig ist, kann eine größere Anzahl von Threads pro Kindprozess erreicht werden, wenn ThreadStackSize auf einen Wert kleiner als die Betriebssystemvoreinstellung gesetzt wird. Da es einzelne Anfragen geben kann, die mehr Stack zur Verarbeitung benötigen, sollte eine derartige Korrektur ausschließlich in Testumgebungen zum Einsatz kommen, auf denen die gesamte Webserververarbeitung ausprobiert werden kann. Eine Änderung der Webserverkonfiguration kann den aktuellen Wert der ThreadStackSize ungültig machen.

    Verfügbare Sprachen:  de  |  en  |  fr  |  ja  |  tr 

    top

    Kommentare

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dav_fs.html.en0000644000000000000500000002231013412755316017615 0ustar rootsrc mod_dav_fs - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_dav_fs

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Filesystem provider for mod_dav
    Status:Extension
    Module Identifier:dav_fs_module
    Source File:mod_dav_fs.c

    Summary

    This module requires the service of mod_dav. It acts as a support module for mod_dav and provides access to resources located in the server's file system. The formal name of this provider is filesystem. mod_dav backend providers will be invoked by using the Dav directive:

    Example

    Dav filesystem

    Since filesystem is the default provider for mod_dav, you may simply use the value On instead.

    top

    DavLockDB Directive

    Description:Location of the DAV lock database
    Syntax:DavLockDB file-path
    Context:server config, virtual host
    Status:Extension
    Module:mod_dav_fs

    Use the DavLockDB directive to specify the full path to the lock database, excluding an extension. If the path is not absolute, it will be taken relative to ServerRoot. The implementation of mod_dav_fs uses a SDBM database to track user locks.

    Example

    DavLockDB "var/DavLock"

    The directory containing the lock database file must be writable by the User and Group under which Apache is running. For security reasons, you should create a directory for this purpose rather than changing the permissions on an existing directory. In the above example, Apache will create files in the var/ directory under the ServerRoot with the base filename DavLock and extension name chosen by the server.

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_user.html.en0000644000000000000500000002016413412755316020551 0ustar rootsrc mod_authz_user - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authz_user

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:User Authorization
    Status:Base
    Module Identifier:authz_user_module
    Source File:mod_authz_user.c
    Compatibility:Available in Apache 2.1 and later

    Summary

    This module provides authorization capabilities so that authenticated users can be allowed or denied access to portions of the web site. mod_authz_user grants access if the authenticated user is listed in a Require user directive. Alternatively Require valid-user can be used to grant access to all successfully authenticated users.

    Support Apache!

    Topics

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    top

    The Require Directives

    Apache's Require directives are used during the authorization phase to ensure that a user is allowed to access a resource. mod_authz_user extends the authorization types with user and valid-user.

    Since v2.4.8, expressions are supported within the user require directives.

    Require user

    This directive specifies a list of users that are allowed to gain access.

    Require user john paul george ringo

    Require valid-user

    When this directive is specified, any successfully authenticated user will be allowed to gain access.

    Require valid-user

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_file.html.fr.utf80000644000000000000500000003033613412755316021372 0ustar rootsrc mod_authn_file - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authn_file

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Authentification utilisateur à l'aide de fichiers texte
    Statut:Base
    Identificateur de Module:authn_file_module
    Fichier Source:mod_authn_file.c
    Compatibilité:Disponible depuis les versions 2.1 et supérieures d'Apache

    Sommaire

    Ce module permet aux frontaux d'authentification comme mod_auth_digest et mod_auth_basic d'authentifier les utilisateurs en les recherchant dans des fichiers de mots de passe au format texte. mod_authn_dbm fournit une fonctionnalité similaire.

    Lorsqu'on utilise mod_auth_basic ou mod_auth_digest, ce module peut être invoqué en affectant la valeur file à la directive AuthBasicProvider ou AuthDigestProvider.

    top

    Directive AuthUserFile

    Description:Définit le nom d'un fichier texte pour l'authentification contenant la liste des utilisateurs et de leurs mots de passe
    Syntaxe:AuthUserFile chemin-fichier
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_authn_file

    La directive AuthUserFile permet de définir le nom d'un fichier texte pour l'authentification contenant la liste des utilisateurs et de leurs mots de passe. chemin-fichier est le chemin vers le fichier des utilisateurs. S'il n'est pas absolu, il est considéré comme relatif au répertoire défini par la directive ServerRoot.

    Chaque ligne du fichier des utilisateurs se compose du nom de l'utilisateur, du caractère ':' et du mot de passe chiffré. Si le même identifiant utilisateur est référencé plusieurs fois, mod_authn_file utilisera la première occurrence pour vérifier le mot de passe.

    Le format du mot de passe chiffré dépend du frontal d'authentification utilisé (par exemple mod_auth_basic ou mod_auth_digest). Voir la documentation sur les Formats de mots de passe pour plus de détails.

    Pour mod_auth_basic, utilisez le programme htpasswd fourni avec la distribution binaire, mais que vous trouverez aussi dans le répertoire src/support de l'arborescence des sources. Voir sa page de manuel pour plus de détails. En bref :

    On crée un fichier de mots de passe nom-fichier avec nom-utilisateur comme identifiant initial. Le mot de passe correspondant sera alors demandé :

    htpasswd -c nom-fichier nom-utilisateur

    Pour ajouter ou modifier nom-utilisateur2 dans le fichier de mots de passe nom-fichier :

    htpasswd nom-fichier nom-utilisateur2

    Noter qu'une recherche dans de grands fichiers texte peut être très longue ; dans ce cas, il vaut mieux utiliser les fichiers DBM avec la directive AuthDBMUserFile.

    Pour mod_auth_digest, vous devez utiliser le programme htdigest. Notez que vous ne pouvez pas mélanger des données utilisateur pour l'Authentification HTTP à base de condensé et des données pour l'Authentification de Base dans le même fichier.

    Sécurité

    Assurez-vous que le fichier AuthUserFile soit bien stocké en dehors de l'arborescence des documents du serveur web. Ne placez pas ce fichier dans le répertoire qu'il protège. Dans le cas contraire, les clients seraient en mesure de télécharger le fichier des mots de passe.

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_actions.html.de0000644000000000000500000003313513412755316020010 0ustar rootsrc mod_actions - Apache HTTP Server Version 2.4
    <-

    Apache-Modul mod_actions

    Verfügbare Sprachen:  de  |  en  |  fr  |  ja  |  ko 

    Diese Übersetzung ist möglicherweise nicht mehr aktuell. Bitte prüfen Sie die englische Version auf die neuesten Änderungen.
    Beschreibung:Dieses Modul ermöglicht die Ausführung von CGI-Skripten in Abhängigkeit von Medientypen und Anfragemethoden.
    Status:Basis
    Modulbezeichner:actions_module
    Quelltext-Datei:mod_actions.c

    Zusammenfassung

    Das Modul besitzt zwei Direktiven. Die Direktive Action erlaubt die Ausführung von CGI-Skripten immer dann, wenn eine Anfrage zu einem bestimmten MIME-Type erfolgt. Die Direktive Script erlaubt die Ausführung von CGI-Skripten abhängig von einer bestimmten Methode, die in der Anfrage verwendet wird. Dies macht es deutlich einfacher, Skripte auszuführen, die Dateien verarbeiten.

    top

    Action-Direktive

    Beschreibung:Aktiviert ein CGI-Skript für einen bestimmten Handler oder Content-Type
    Syntax:Action Aktionsart CGI-Skript [virtual]
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis, .htaccess
    AllowOverride:FileInfo
    Status:Basis
    Modul:mod_actions
    Kompatibilität:Der Schalter virtual und die Übergabe des Handlers wurden in Apache 2.1 eingeführt.

    Die Direktive fügt eine Aktion hinzu, welche das CGI-Skript aktiviert, sobald die Aktionsart durch eine Anfrage ausgelöst wird. CGI-Skript ist der URL-Pfad zu einer Ressource, die unter Verwendung von ScriptAlias oder AddHandler als CGI-Skript gekennzeichnet wurde. Die Aktionsart kann entweder ein Handler oder ein MIME-Type sein. Die URL und den Dateipfad des angeforderten Dokuments in den Standard-CGI-Umgebungsvariablen PATH_INFO und PATH_TRANSLATED übergeben. Der für die jeweilige Anfrage verwendete Handler wird in der Umgebungsvariablen REDIRECT_HANDLER übergeben.

    Beispiele

    # Anfragen für Dateien eines bestimmten MIME-Types:
    Action image/gif /cgi-bin/images.cgi

    # Dateien einer bestimmten Dateiendung
    AddHandler my-file-type .xyz
    Action my-file-type /cgi-bin/program.cgi

    Im ersten Beispiel werden Anfragen für Dateien mit dem MIME-Type image/gif von dem angegebenen CGI-Skript /cgi-bin/images.cgi bearbeitet.

    Im zweiten Beispiel werden Anfragen für Dateien mit der Dateiendung .xyz von dem angegebenen CGI-Skript /cgi-bin/program.cgi bearbeitet.

    Der optionale Schalter virtual deaktiviert die Prüfung auf Existenz der angeforderten Datei. Dies ist beispielsweise nützlich, wenn Sie die Direktive Action in Verbindung mit virtuellen Adressräumen verwenden möchten.

    Beispiel

    <Location /news>
    SetHandler news-handler
    Action news-handler /cgi-bin/news.cgi virtual
    </Location>

    Siehe auch

    top

    Script-Direktive

    Beschreibung:Aktiviert ein CGI-Skript für eine bestimmte Anfragemethode.
    Syntax:Script Methode CGI-Skript
    Kontext:Serverkonfiguration, Virtual Host, Verzeichnis
    Status:Basis
    Modul:mod_actions

    Die Direktive fügt eine Aktion hinzu, welche das CGI-Skript aktiviert, wenn eine Datei unter der Verwendung der Methode Methode angefordert wird. CGI-Skript ist der URL-Pfad zu einer Ressource, die unter Verwendung von ScriptAlias oder AddHandler als CGI-Skript gekennzeichnet wurde. Die URL und der Dateipfad des angeforderten Dokuments werden in den Standard-CGI-Umgebungsvariablen PATH_INFO und PATH_TRANSLATED übergeben.

    Der Methodenname kann frei gewählt werden. Bei Methodennamen wird zwischen Groß- und Kleinschreibung unterschieden, so dass Script PUT und Script put zu vollkommen unterschiedlichen Ergebnissen führen.

    Beachten Sie, dass der Script-Befehl nur Voreinstellungen für Aktionen definiert. Wird ein CGI-Skript - oder eine andere Ressource, die in der Lage ist, die angeforderte Methode intern zu bearbeiten - aufgerufen, so wird diese(s) verwendet. Beachten Sie auch, dass Script mit der Methode GET nur dann aufgerufen wird, wenn Query-Argumente vorhanden sind (z.B. foo.html?hi). Andernfalls wird die Anfrage normal bearbeitet.

    Beispiele

    # Für <ISINDEX>-ähnliches Suchen
    Script GET /cgi-bin/search

    # Ein CGI-PUT-Handler
    Script PUT /~bob/put.cgi

    Verfügbare Sprachen:  de  |  en  |  fr  |  ja  |  ko 

    top

    Kommentare

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_version.html0000644000000000000500000000062313362070302017427 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_version.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_version.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_version.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_version.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mod_setenvif.html.ko.euc-kr0000644000000000000500000004264213412755316021404 0ustar rootsrc mod_setenvif - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_setenvif

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:¿äûÀÇ ¼º°Ý¿¡ µû¶ó ȯ°æº¯¼ö ¼³Á¤À» º¯°æÇÑ´Ù
    »óÅÂ:Base
    ¸ðµâ¸í:setenvif_module
    ¼Ò½ºÆÄÀÏ:mod_setenvif.c

    ¿ä¾à

    mod_setenvif ¸ðµâÀº ¿äûÀÇ ¼º°ÝÀÌ Á¤±ÔÇ¥Çö½Ä¿¡ ÇØ´çÇÏ´ÂÁö ¿©ºÎ·Î ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù. ¼­¹öÀÇ ´Ù¸¥ ºÎºÐÀÌ ÇൿÀ» °áÁ¤ÇÒ¶§ ÀÌ È¯°æº¯¼ö¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    ¼³Á¤ÆÄÀÏ¿¡ ³ª¿À´Â ¼ø¼­´ë·Î Áö½Ã¾î¸¦ ó¸®ÇÑ´Ù. ±×·¡¼­ ºê¶ó¿ìÀú°¡ MSIE°¡ ¾Æ´Ï¶ó mozillaÀÎ °æ¿ì netscape¸¦ ¼³Á¤ÇÏ´Â ¾Æ·¡ ¿¹¿Í °°ÀÌ ¿©·¯ Áö½Ã¾î¸¦ ÇÔ²² »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    BrowserMatch ^Mozilla netscape
    BrowserMatch MSIE !netscape

    top

    BrowserMatch Áö½Ã¾î

    ¼³¸í:HTTP User-Agent¿¡ µû¶ó ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù
    ¹®¹ý:BrowserMatch regex [!]env-variable[=value] [[!]env-variable[=value]] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_setenvif

    BrowserMatch´Â SetEnvIf Áö½Ã¾îÀÇ Æ¯º°ÇÑ °æ¿ì·Î, HTTP ¿äû Çì´õ User-Agent¿¡ µû¶ó ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù. ´ÙÀ½ µÎ ÁÙÀº °°´Ù:

    BrowserMatchNoCase Robot is_a_robot
    SetEnvIfNoCase User-Agent Robot is_a_robot

    Ãß°¡ ¿¹Á¦:

    BrowserMatch ^Mozilla forms jpeg=yes browser=netscape
    BrowserMatch "^Mozilla/[2-3]" tables agif frames javascript
    BrowserMatch MSIE !javascript

    top

    BrowserMatchNoCase Áö½Ã¾î

    ¼³¸í:´ë¼Ò¹®ÀÚ¸¦ ±¸º°ÇÏÁö¾Ê°í User-Agent¿¡ µû¶ó ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù
    ¹®¹ý:BrowserMatchNoCase regex [!]env-variable[=value] [[!]env-variable[=value]] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_setenvif

    BrowserMatchNoCase Áö½Ã¾î´Â BrowserMatch Áö½Ã¾î¿Í ÀÇ¹Ì»ó °°´Ù. ±×·¯³ª ÀÌ Áö½Ã¾î´Â ´ë¼Ò¹®ÀÚ¸¦ ±¸º°ÇÏÁö¾Ê´Â´Ù. ¿¹¸¦ µé¾î:

    BrowserMatchNoCase mac platform=macintosh
    BrowserMatchNoCase win platform=windows

    BrowserMatch¿Í BrowserMatchNoCase Áö½Ã¾î´Â SetEnvIf¿Í SetEnvIfNoCase Áö½Ã¾îÀÇ Æ¯º°ÇÑ °æ¿ì´Ù. ´ÙÀ½ ÁÖ ÁÙÀº °°´Ù:

    BrowserMatchNoCase Robot is_a_robot
    SetEnvIfNoCase User-Agent Robot is_a_robot

    top

    SetEnvIf Áö½Ã¾î

    ¼³¸í:¿äûÀÇ ¼ºÁú¿¡ µû¶ó ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù
    ¹®¹ý:SetEnvIf attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_setenvif

    SetEnvIf Áö½Ã¾î´Â ¿äûÀÇ ¼ºÁú¿¡ µû¶ó ȯ°æº¯¼ö¸¦ Á¤ÀÇÇÑ´Ù. ù¹øÂ° ¾Æ±Ô¸ÕÆ® attribute´Â ´ÙÀ½ ¼¼°¡ÁöÁß Çϳª´Ù:

    1. HTTP ¿äû Çì´õ (´õ ÀÚ¼¼ÇÑ Á¤º¸´Â RFC2616 Âü°í); ¿¹¸¦ µé¾î: Host, User-Agent, Referer, Accept-Language. Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÏ¿© ¿©·¯ ¿äû Çì´õ¸¦ ÁöĪÇÒ ¼ö ÀÖ´Ù.
    2. ¿äûÀÇ ´ÙÀ½ ¼ºÁúÁß Çϳª:
      • Remote_Host - (ÀÖ´Ù¸é) ¿äûÇϴ Ŭ¶óÀ̾ðÆ®ÀÇ È£½ºÆ®¸í
      • Remote_Addr - ¿äûÇϴ Ŭ¶óÀ̾ðÆ®ÀÇ IP ÁÖ¼Ò
      • Server_Addr - ¿äûÀ» ¹Þ´Â ¼­¹öÀÇ IP ÁÖ¼Ò (2.0.43 ¹öÀü ÀÌÈÄ¿¡¸¸)
      • Request_Method - »ç¿ëÇÑ ¸Þ½áµå À̸§ (GET, POST, µîµî)
      • Request_Protocol - ¿äûÀÇ ÇÁ·ÎÅäÄÝ À̸§°ú ¹öÀü (¿¹¸¦ µé¾î, "HTTP/0.9", "HTTP/1.1", µî.)
      • Request_URI - HTTP ¿äû¿¡¼­ ¿äûÇÑ ÀÚ¿ø -- ÀϹÝÀûÀ¸·Î URL¿¡¼­ ÁúÀǹ®ÀÚ¿­À» Á¦¿ÜÇÑ ½ºÅ´(scheme)°ú È£½ºÆ® ÀÌÈÄ ºÎºÐ
    3. ¿äû°ú ¿¬°üµÈ ȯ°æº¯¼ö À̸§. ±×·¡¼­ SetEnvIf Áö½Ã¾î´Â ÀÌÀü Áö½Ã¾îÀÇ °á°ú¸¦ °Ë»çÇÒ ¼ö ÀÖ´Ù. ÀÌÀü¿¡ SetEnvIf[NoCase] Áö½Ã¾î·Î Á¤ÀÇÇÑ È¯°æº¯¼ö¸¸À» °Ë»çÇÒ ¼ö ÀÖ´Ù. 'ÀÌÀü'À̶õ (¼­¹öÀü¿ª°ú °°ÀÌ) ´õ ³ÐÀº ¿µ¿ª ȤÀº Áö½Ã¾îÀÇ ÇöÀç ¿µ¿ª ÀÌÀüÀ» ¶æÇÑ´Ù. ¿äû ¼ºÁúÀÌ ¾Æ´Ï°í Á¤±ÔÇ¥Çö½ÄÀÌ ¾Æ´Ñ attribute´Â ȯ°æº¯¼ö·Î Ãë±ÞÇÑ´Ù.

    µÎ¹øÂ° ¾Æ±Ô¸ÕÆ®´Â (regex) Perl ȣȯ Á¤±ÔÇ¥Çö½ÄÀÌ´Ù. ÀÌ´Â POSIX.2 egrepÀÇ Á¤±ÔÇ¥Çö½Ä°ú ºñ½ÁÇÏ´Ù. regex°¡ attribute¿¡ ´ëÀÀÇÏ¸é ³ª¸ÓÁö ¾Æ±Ô¸ÕÆ®¸¦ ó¸®ÇÑ´Ù.

    ³ª¸ÓÁö ¾Æ±Ô¸ÕÆ®´Â ¼³Á¤ÇÒ º¯¼ö¸í°ú (¼±ÅÃÀûÀÎ) ¼³Á¤°ªµéÀÌ´Ù. ´ÙÀ½°ú °°Àº Çü½ÄÀÌ´Ù

    1. varname, ȤÀº
    2. !varname, ȤÀº
    3. varname=value

    ù¹øÂ° ÇüÅ´ °ªÀ¸·Î "1"À» »ç¿ëÇÑ´Ù. µÎ¹øÂ° ÇüÅ´ º¯¼ö°¡ ÀÌ¹Ì Á¤ÀÇµÈ °æ¿ì º¯¼ö¸¦ Á¦°ÅÇϰí, ¼¼¹øÂ°´Â º¯¼öÀÇ °ªÀ¸·Î value¸¦ ¼³Á¤ÇÑ´Ù. ¾ÆÆÄÄ¡ 2.0.51ºÎÅÍ value¿¡ ÀÖ´Â $1..$9¸¦ regexÀÇ °ýȣģ ÇÏÀ§Ç¥Çö½ÄÀ¸·Î ´ëüÇÑ´Ù.

    ¿¹Á¦:

    SetEnvIf Request_URI "\.gif$" object_is_image=gif
    SetEnvIf Request_URI "\.jpg$" object_is_image=jpg
    SetEnvIf Request_URI "\.xbm$" object_is_image=xbm
    :
    SetEnvIf Referer www\.mydomain\.com intra_site_referral
    :
    SetEnvIf object_is_image xbm XBIT_PROCESSING=1
    :
    SetEnvIf ^TS* ^[a-z].* HAVE_TS

    óÀ½ ¼¼ ÁÙÀº À̹ÌÁö ÆÄÀÏÀ» ¿äûÇÑ °æ¿ì ȯ°æº¯¼ö object_is_image¸¦ ¼³Á¤ÇÑ´Ù. ³×¹øÂ° ÁÙÀº ÆäÀÌÁö¸¦ www.mydomain.com À¥»çÀÌÆ®¿¡¼­ ÂüÁ¶ÇÑ °æ¿ì intra_site_referralÀ» ¼³Á¤ÇÑ´Ù.

    ¸¶Áö¸· ¿¹´Â ¿äû¿¡ À̸§¿¡ "TS"·Î ½ÃÀÛÇÏ°í °ªÀÌ [a-z] Áß Çϳª·Î ½ÃÀÛÇÏ´Â Çì´õ°¡ ÀÖ´Â °æ¿ì ȯ°æº¯¼ö HAVE_TS¸¦ ¼³Á¤ÇÑ´Ù.

    Âü°í

    top

    SetEnvIfExpr Áö½Ã¾î

    ¼³¸í:Sets environment variables based on an ap_expr expression
    ¹®¹ý:
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Base
    ¸ðµâ:mod_setenvif

    Documentation not yet translated. Please see English version of document.

    top

    SetEnvIfNoCase Áö½Ã¾î

    ¼³¸í:´ë¼Ò¹®ÀÚ¸¦ ±¸º°ÇÏÁö¾Ê°í ¿äûÀÇ ¼ºÁú¿¡ µû¶ó ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù
    ¹®¹ý:SetEnvIfNoCase attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_setenvif

    SetEnvIfNoCase´Â Àǹ̻ó SetEnvIf Áö½Ã¾î¿Í °°Áö¸¸, ´ë¼Ò¹®ÀÚ¸¦ ±¸º°ÇÏÁö¾Ê°í Á¤±ÔÇ¥Çö½ÄÀ» ã´Â´Ù. ¿¹¸¦ µé¾î:

    SetEnvIfNoCase Host Apache\.Org site=apache

    ÀÌ °æ¿ì HTTP ¿äû Çì´õ Host:°¡ Apache.Org, apache.org µîÀ» Æ÷ÇÔÇϸé site ȯ°æº¯¼ö¸¦ "apache"·Î ¼³Á¤ÇÑ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mpm_winnt.html0000644000000000000500000000061013362070302017107 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mpm_winnt.html.de Content-Language: de Content-type: text/html; charset=ISO-8859-1 URI: mpm_winnt.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mpm_winnt.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mpm_winnt.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_negotiation.html.ja.utf80000644000000000000500000005503713412755316021564 0ustar rootsrc mod_negotiation - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_negotiation

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ 機能をæä¾›ã™ã‚‹
    ステータス:Base
    モジュール識別å­:negotiation_module
    ソースファイル:mod_negotiation.c

    概è¦

    コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã€ã‚ˆã‚Šæ­£ç¢ºã«ã¯ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®é¸æŠžæ©Ÿèƒ½ã¯ã€ 複数用æ„ã•れã¦ã„るドキュメントã‹ã‚‰ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®èƒ½åŠ›ã«ä¸€ç•ªåˆã£ãŸ ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’é¸æŠžã™ã‚‹æ©Ÿèƒ½ã§ã™ã€‚ã“ã®å®Ÿè£…ã¯äºŒã¤ã‚りã¾ã™ã€‚

    • タイプマップ (type-map ãƒãƒ³ãƒ‰ãƒ©ã§æ‰±ã‚れるファイル)。ã“れ㯠variants ã‚’å«ã‚“ã§ã„ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æ˜Žç¤ºçš„ã«æŒ‡å®šã—ã¾ã™ã€‚
    • MultiViews ã®æŽ¢ç´¢ (MultiViews Option ã§æœ‰åйã«ãªã‚Šã¾ã™)。 サーãƒãŒæš—é»™ã®å†…ã«ãƒ•ァイルåã®ãƒ‘ターンマッãƒã‚’行ãªã„〠ãã®çµæžœã‹ã‚‰é¸æŠžã—ã¾ã™ã€‚
    top

    タイプマップ

    タイプマップ㯠RFC 822 ã®ãƒ¡ãƒ¼ãƒ«ãƒ˜ãƒƒãƒ€ã«é¡žä¼¼ã—ãŸæ›¸å¼ã§ã™ã€‚ ドキュメントã®è¨˜è¿°ãŒç©ºè¡Œã§åˆ†é›¢ã•ã‚Œã¦æ›¸ã‹ã‚Œã¦ã„ã¦ã€ãƒãƒƒã‚·ãƒ¥æ–‡å­— ('#') ã§å§‹ã¾ã‚‹è¡Œã¯ã‚³ãƒ¡ãƒ³ãƒˆã¨ã—ã¦æ‰±ã‚れã¾ã™ã€‚ ドキュメントã®èª¬æ˜Žã¯è¤‡æ•°ã®ãƒ˜ãƒƒãƒ€ãƒ¬ã‚³ãƒ¼ãƒ‰ã‹ã‚‰æ§‹æˆã•れã¾ã™ã€‚ レコードã¯ã€ç¶šãã®è¡ŒãŒç©ºç™½ã§å§‹ã¾ã£ã¦ã„ã‚‹ã¨è¤‡æ•°ã®è¡Œã«ã¾ãŸãŒã‚Šã¾ã™ã€‚ 最åˆã®ç©ºç™½ãŒæ¶ˆåŽ»ã•れã¦ã€å‰ã®è¡Œã¨ã¤ãªã’㦠1 行ã¨ã—ã¦æ‰±ã‚れã¾ã™ã€‚ ヘッダレコードã¯ã‚­ãƒ¼ãƒ¯ãƒ¼ãƒ‰åã®å¾Œã«å€¤ãŒç¶šãã¨ã„ã†å½¢å¼ã§ã€ キーワードåã¯å¸¸ã«ã‚³ãƒ­ãƒ³ã§çµ‚ã‚りã¾ã™ã€‚空白ã¯ãƒ˜ãƒƒãƒ€åã¨å€¤ã®é–“〠値ã®ãƒˆãƒ¼ã‚¯ãƒ³ã®é–“ã«å…¥ã‚Œã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ 使用å¯èƒ½ãªãƒ˜ãƒƒãƒ€ã¯ä»¥ä¸‹ã®ã¨ãŠã‚Šã§ã™:

    Content-Encoding:
    ファイルã®ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã€‚Apache 㯠AddEncoding ディレクティブ ã§å®šç¾©ã•れãŸã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã ã‘ã‚’èªè­˜ã—ã¾ã™ã€‚通常 compress ã•れãŸãƒ•ァイルã®ãŸã‚ã® x-compress 㨠gzip ã•れãŸãƒ•ァイルã®ãŸã‚ã® x-gzip ã‚’å«ã¿ã¾ã™ã€‚ ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã®æ¯”較をã™ã‚‹ã¨ãã¯ã€æŽ¥é ­è¾ž x- ã¯ç„¡è¦–ã•れã¾ã™ã€‚
    Content-Language:
    インターãƒãƒƒãƒˆæ¨™æº–ã®è¨€èªžã‚¿ã‚° (RFC 1766) ã§å®šç¾©ã•れã¦ã„る言語ã®ç¨®é¡žã€‚例ãˆã°ã€en ã¯è‹±èªžã‚’表ã—ã¾ã™ã€‚ 複数ã®è¨€èªžãŒæ ¼ç´ã•れる場åˆã¯ã‚³ãƒ³ãƒžã§åŒºåˆ‡ã‚‰ã‚Œã¾ã™ã€‚
    Content-Length:
    ファイルã®é•·ã• (ãƒã‚¤ãƒˆæ•°)。 ã“ã®ãƒ˜ãƒƒãƒ€ãŒãªã„å ´åˆã€ãƒ•ァイルã®å®Ÿéš›ã®é•·ã•ãŒä½¿ç”¨ã•れã¾ã™ã€‚
    Content-Type:
    ドキュメント㮠MIME メディアタイプã€ã‚ªãƒ—ショナルãªãƒ‘ラメータ付ãã€‚ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã®æ§‹æ–‡ã¯ name=value ã§ã€ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã‚„ä»–ã®ãƒ‘ラメータã¨ã¯ã‚»ãƒŸã‚³ãƒ­ãƒ³ã§åˆ†é›¢ã•れã¾ã™ã€‚ 共通ã®ãƒ‘ラメータã¯ä»¥ä¸‹ã®ã¨ãŠã‚Š:
    level
    メディアタイプã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’ç¤ºã™æ•´æ•°ã€‚ text/html ã§ã¯ 2 ãŒãƒ‡ãƒ•ォルトã§ã€ãã®ä»–ã®å ´åˆã¯ 0 ãŒãƒ‡ãƒ•ォルトã§ã™ã€‚
    qs
    クライアントã®èƒ½åŠ›ã«é–¢ä¿‚ãªãã€variant ã‚’ä»–ã¨æ¯”較ã—ãŸã¨ãã®ç›¸å¯¾çš„ãªã€Œå“質ã€ã§ã€0.0 ã‹ã‚‰ 1.0 ã®ç¯„å›²ã®æµ®å‹•ç‚¹å°æ•°ã€‚ 例ãˆã°ã€å†™çœŸã‚’表ç¾ã—よã†ã¨ã—ã¦ã„ã‚‹ã¨ãã¯æ™®é€šã¯ JPEG ãƒ•ã‚¡ã‚¤ãƒ«ã®æ–¹ãŒ ASCII ファイルよりも高ã„å“質ã«ãªã‚Šã¾ã™ã€‚ ã—ã‹ã—ã€ãƒªã‚½ãƒ¼ã‚¹ãŒ ASCII アートã§è¡¨ç¾ã•れã¦ã„ã‚‹ã¨ãã¯ã€ASCII ãƒ•ã‚¡ã‚¤ãƒ«ã®æ–¹ãŒ JPEG ファイルよりも高ã„å“質ã«ãªã‚Šã¾ã™ã€‚ã“ã®ã‚ˆã†ã«ã€qs ã¯ãƒªã‚½ãƒ¼ã‚¹æ¯Žã«ç‰¹æœ‰ã®å€¤ã‚’å–りã¾ã™ã€‚

    例

    Content-Type: image/jpeg; qs=0.8

    URI:
    (指定ã®ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã®) variant 㮠ファイル㮠uri. ã“れã¯ã€ãƒžãƒƒãƒ—ファイルã‹ã‚‰ã®ç›¸å¯¾ URL ã¨ã—㦠解釈ã•れã¾ã™ã€‚åŒã˜ã‚µãƒ¼ãƒã«å­˜åœ¨ã—ãªã‘れã°ãªã‚‰ãšã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒ 直接リクエストã—ãŸã¨ãã«ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã•れるもã®ã§ãªã‘れã°ãªã‚Šã¾ã›ã‚“。
    Body:
    Apache 2.0 ã§æ–°è¨­ã•れãŸã“ã® Body ヘッダを使ã£ã¦ã€ リソースã®å®Ÿéš›ã®å†…å®¹ã‚’ã‚¿ã‚¤ãƒ—ãƒžãƒƒãƒ—ãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ãã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã®ãƒ˜ãƒƒãƒ€ã¯æœ¬æ–‡ã®å†…容ã®åŒºåˆ‡ã‚Šã¨ãªã‚‹æ–‡å­—列ã§å§‹ã¾ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚ タイプマップファイルã®ç¶šã行ã¯ã€åŒºåˆ‡ã‚Šæ–‡å­—列ãŒè¦‹ã¤ã‹ã‚‹ã¾ã§ã€ ãƒªã‚½ãƒ¼ã‚¹ã®æœ¬æ–‡ã«ãªã‚Šã¾ã™ã€‚

    Example:

    Body:----xyz----
    <html>
    <body>
    <p>Content of the page.</p>
    </body>
    </html>
    ----xyz----

    top

    MultiViews

    MultiViews 探索ã¯ã€Multiviews Options ディレクティブã«ã‚ˆã‚Šæœ‰åйã«ãªã‚Šã¾ã™ã€‚ サーãƒãŒ /some/dir/foo ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘å–りã€/some/dir/foo ãŒå­˜åœ¨ ã—ãªã„å ´åˆã€ã‚µãƒ¼ãƒã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’読んã§ã€ foo.* ã«ã‚ã¦ã¯ã¾ã‚‹å…¨ã¦ã®ãƒ•ァイルを探ã—〠事実上ãれらã®ãƒ•ァイルをマップã™ã‚‹ã‚¿ã‚¤ãƒ—マップを作りã¾ã™ã€‚ ãã®ã¨ãã€ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã¨ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã¯ã€ ãã®ãƒ•ァイルåを直接指定ã—ãŸã¨ãã¨åŒã˜ã‚‚ã®ãŒå‰²ã‚Šå½“ã¦ã‚‰ã‚Œã¾ã™ã€‚ ãれã‹ã‚‰ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®è¦æ±‚ã«ä¸€ç•ªåˆã†ã‚‚ã®ã‚’é¸ã³ã€ ãã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’è¿”ã—ã¾ã™ã€‚

    ãƒ•ã‚¡ã‚¤ãƒ«ã‚’é¸æŠžã™ã‚‹éš›ã«ã€é–¢é€£ã™ã‚‹ã‚³ãƒ³ãƒ†ãƒ³ãƒˆãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã® メタ情報をæŒãŸãªã„ファイルã«ã¤ã„ã¦ã€åˆ¤å®šã‚’行ã†ã‹ã©ã†ã‹ã‚’ MultiViewsMatch ディレクティブã§è¨­å®šã—ã¾ã™ã€‚

    top

    CacheNegotiatedDocs ディレクティブ

    説明:コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã•れãŸãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’プロキシサーãƒãŒ キャッシュã§ãるよã†ã«ã™ã‚‹
    æ§‹æ–‡:CacheNegotiatedDocs On|Off
    デフォルト:CacheNegotiatedDocs Off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Base
    モジュール:mod_negotiation
    äº’æ›æ€§:ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.0ã§æ§‹æ–‡ãŒå¤‰ã‚りã¾ã—ãŸ

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒè¨­å®šã•れã¦ã„ã‚‹ã¨ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒˆãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ ã‚’ã—ãŸçµæžœã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’許å¯ã—ã¾ã™ã€‚ ã“れã¯ã€ãƒ—ロキシã®å¾Œã‚ã«ã„るクライアントãŒèƒ½åŠ›ã«ä¸€ç•ªåˆã£ãŸ ドキュメントã§ã¯ãªã〠キャッシュをより効果的ã«ã™ã‚‹ã‚‚ã®ã‚’å¾—ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠HTTP/1.0 ブラウザã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆ ã®ã¿ã«é©ç”¨ã•れã¾ã™ã€‚HTTP/1.1 ã¯ã€ 交渉ã•れãŸãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã«å¯¾ã—ã¦ãšã£ã¨ã‚ˆã„制御ãŒå¯èƒ½ãªã®ã§ã€ ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠HTTP/1.1 ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ã¯å½±éŸ¿ã—ã¾ã›ã‚“。

    2.0 よりå‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯ã€ CacheNegotiatedDocs ã¯å¼•æ•°ã‚’å–らãšã€ ディレクティブãŒå­˜åœ¨ã™ã‚‹ã“ã¨ã§ on ã®å‹•作をã—ã¦ã„ã¾ã—ãŸã€‚

    top

    ForceLanguagePriority ディレクティブ

    説明:è¦æ±‚ã«åˆã†å˜ç‹¬ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãŒè¦‹ã¤ã‹ã‚‰ãªã‹ã£ãŸã¨ãã«è¡Œãªã†ã“ã¨ã‚’指定
    æ§‹æ–‡:ForceLanguagePriority None|Prefer|Fallback [Prefer|Fallback]
    デフォルト:ForceLanguagePriority Prefer
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Base
    モジュール:mod_negotiation
    äº’æ›æ€§:ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.0.30 以é™ã§ä½¿ç”¨å¯èƒ½

    ForceLanguagePriority ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ è¦æ±‚ã«åˆã†ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’一ã¤ã ã‘è¿”ã™ã“ã¨ãŒã§ããªã„ã¨ãã«ã€ LanguagePriority ディレクティブを使ã£ã¦ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã®çµæžœã‚’è¿”ã—ã¾ã™ã€‚

    ForceLanguagePriority Prefer ã¯ã€åŒç­‰ã®é¸æŠžè‚¢ãŒ ã„ãã¤ã‹ã‚ã‚‹ã¨ãã«ã€HTTP ã® 300 (MULTIPLE CHOICES) ã‚’è¿”ã™ä»£ã‚りã«ã€ LanguagePriority を使ã£ã¦ä¸€ã¤ã ã‘ドキュメントを返ã™ã‚ˆã†ã« ã—ã¾ã™ã€‚以下ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæŒ‡å®šã•れã¦ã„ã¦ã€ãƒ¦ãƒ¼ã‚¶ã® Accept-Language ヘッダã§ã¯ en 㨠de ã®å“質ãŒå…±ã« .500 (åŒã˜ãらã„許容) ã§ã‚ã‚‹ã¨ãã¯ã€ 最åˆã«ãƒžãƒƒãƒã™ã‚‹ variant ã® en ãŒé€ã‚‰ã‚Œã¾ã™ã€‚

    LanguagePriority en fr de
    ForceLanguagePriority Prefer

    ForceLanguagePriority Fallback ã§ã¯ã€HTTP 406 (NOT ACCEPTABLE) ã‚’é€ä¿¡ã™ã‚‹ä»£ã‚りã«ã€ LanguagePriority ãŒæ­£ã—ã„çµæžœã‚’é€ã‚Šã¾ã™ã€‚ 以下ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæŒ‡å®šã•れã¦ã„ã¦ã€ãƒ¦ãƒ¼ã‚¶ã® Accept-Language ㌠es 言語ã®ã¿ã‚’許å¯ã—ã¦ã„ã¦ã€ã•らã«ãã®ã‚ˆã†ãª variant ãŒãªã„ã¨ãã«ã¯ã€ 以下㮠LanguagePriority ã®ãƒªã‚¹ãƒˆã®æœ€åˆã® variant ãŒé€ã‚‰ã‚Œã¾ã™ã€‚

    LanguagePriority en fr de
    ForceLanguagePriority Fallback

    Prefer 㨠Fallback ã®ä¸¡æ–¹ã®ã‚ªãƒ—ションを åŒæ™‚ã«æŒ‡å®šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã§ã™ã‹ã‚‰ã€è¤‡æ•°ã® variant ãŒã‚ã‚‹ã¨ã㯠LanguagePriority ã®æœ€åˆã® variant ãŒé€ã‚‰ã‚Œã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®è¨±å®¹è¨€èªžã«åˆã† vaiant ãŒãªã„ã¨ã㯠存在ã™ã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã§æœ€åˆã®ã‚‚ã®ãŒé€ã‚‰ã‚Œã‚‹ã€ã¨ã„ã†æ§˜ã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    å‚ç…§

    top

    LanguagePriority ディレクティブ

    説明:クライアントãŒå„ªå…ˆåº¦ã‚’示ã•ãªã‹ã£ãŸã¨ãã®è¨€èªžã® variant ã®å„ªå…ˆåº¦ã‚’ 指定
    æ§‹æ–‡:LanguagePriority MIME-lang [MIME-lang] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Base
    モジュール:mod_negotiation

    LanguagePriority ã¯ã€MultiViews リクエストを扱ã†ã¨ãã«ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒå„ªå…ˆé †ä½ã‚’æä¾›ã—ã¦ã„ãªã„å ´åˆã® 言語ã®å„ªå…ˆé †ä½ã‚’設定ã—ã¾ã™ã€‚MIME-lang ã®ãƒªã‚¹ãƒˆãŒå„ªå…ˆåº¦ã®é™é †ã«ä¸¦ã³ã¾ã™ã€‚

    Example:

    LanguagePriority en fr de

    foo.html ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã•れã€foo.html.fr 㨠foo.html.de ãŒä¸¡æ–¹å­˜åœ¨ã—〠ブラウザãŒè¨€èªžã®å„ªå…ˆé †ä½ã‚’æä¾›ã—ã¦ãªã„å ´åˆã¯ foo.html.fr ãŒè¿”ã•れã¾ã™ã€‚

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ä»–ã®æ–¹æ³•ã§ã€Œæœ€å–„〠ã®è¨€èªžãŒæ±ºå®šã§ããªã„ã¨ãã‹ã€ForceLanguagePriority ディレクティブ㌠None 以外ã®ã¨ãã«ã®ã¿åŠ¹æžœãŒã‚ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。 一般的ã«ã¯ã€ã‚µãƒ¼ãƒå´ã§ã¯ãªãクライアントå´ã§å¥½ã¿ã®è¨€èªžã‚’決定ã—ã¾ã™ã€‚

    å‚ç…§

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cgi.html.en0000644000000000000500000004466613412755316017137 0ustar rootsrc mod_cgi - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_cgi

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Execution of CGI scripts
    Status:Base
    Module Identifier:cgi_module
    Source File:mod_cgi.c

    Summary

    Any file that has the handler cgi-script will be treated as a CGI script, and run by the server, with its output being returned to the client. Files acquire this handler either by having a name containing an extension defined by the AddHandler directive, or by being in a ScriptAlias directory.

    For an introduction to using CGI scripts with Apache, see our tutorial on Dynamic Content With CGI.

    When using a multi-threaded MPM under unix, the module mod_cgid should be used in place of this module. At the user level, the two modules are essentially identical.

    For backward-compatibility, the cgi-script handler will also be activated for any file with the mime-type application/x-httpd-cgi. The use of the magic mime-type is deprecated.

    top

    CGI Environment variables

    The server will set the CGI environment variables as described in the CGI specification, with the following provisions:

    PATH_INFO
    This will not be available if the AcceptPathInfo directive is explicitly set to off. The default behavior, if AcceptPathInfo is not given, is that mod_cgi will accept path info (trailing /more/path/info following the script filename in the URI), while the core server will return a 404 NOT FOUND error for requests with additional path info. Omitting the AcceptPathInfo directive has the same effect as setting it On for mod_cgi requests.
    REMOTE_HOST
    This will only be set if HostnameLookups is set to on (it is off by default), and if a reverse DNS lookup of the accessing host's address indeed finds a host name.
    REMOTE_IDENT
    This will only be set if IdentityCheck is set to on and the accessing host supports the ident protocol. Note that the contents of this variable cannot be relied upon because it can easily be faked, and if there is a proxy between the client and the server, it is usually totally useless.
    REMOTE_USER
    This will only be set if the CGI script is subject to authentication.

    This module also leverages the core functions ap_add_common_vars and ap_add_cgi_vars to add environment variables like:

    DOCUMENT_ROOT
    Set with the content of the related DocumentRoot directive.
    SERVER_NAME
    The fully qualified domain name related to the request.
    SERVER_ADDR
    The IP address of the Virtual Host serving the request.
    SERVER_ADMIN
    Set with the content of the related ServerAdmin directive.

    For an exhaustive list it is suggested to write a basic CGI script that dumps all the environment variables passed by Apache in a convenient format.

    top

    CGI Debugging

    Debugging CGI scripts has traditionally been difficult, mainly because it has not been possible to study the output (standard output and error) for scripts which are failing to run properly. These directives provide more detailed logging of errors when they occur.

    CGI Logfile Format

    When configured, the CGI error log logs any CGI which does not execute properly. Each CGI script which fails to operate causes several lines of information to be logged. The first two lines are always of the format:

    %% [time] request-line
    %% HTTP-status CGI-script-filename

    If the error is that CGI script cannot be run, the log file will contain an extra two lines:

    %%error
    error-message

    Alternatively, if the error is the result of the script returning incorrect header information (often due to a bug in the script), the following information is logged:

    %request
    All HTTP request headers received
    POST or PUT entity (if any)
    %response
    All headers output by the CGI script
    %stdout
    CGI standard output
    %stderr
    CGI standard error

    (The %stdout and %stderr parts may be missing if the script did not output anything on standard output or standard error).

    top

    ScriptLog Directive

    Description:Location of the CGI script error logfile
    Syntax:ScriptLog file-path
    Context:server config, virtual host
    Status:Base
    Module:mod_cgi, mod_cgid

    The ScriptLog directive sets the CGI script error logfile. If no ScriptLog is given, no error log is created. If given, any CGI errors are logged into the filename given as argument. If this is a relative file or path it is taken relative to the ServerRoot.

    Example

    ScriptLog logs/cgi_log

    This log will be opened as the user the child processes run as, i.e. the user specified in the main User directive. This means that either the directory the script log is in needs to be writable by that user or the file needs to be manually created and set to be writable by that user. If you place the script log in your main logs directory, do NOT change the directory permissions to make it writable by the user the child processes run as.

    Note that script logging is meant to be a debugging feature when writing CGI scripts, and is not meant to be activated continuously on running servers. It is not optimized for speed or efficiency, and may have security problems if used in a manner other than that for which it was designed.

    top

    ScriptLogBuffer Directive

    Description:Maximum amount of PUT or POST requests that will be recorded in the scriptlog
    Syntax:ScriptLogBuffer bytes
    Default:ScriptLogBuffer 1024
    Context:server config, virtual host
    Status:Base
    Module:mod_cgi, mod_cgid

    The size of any PUT or POST entity body that is logged to the file is limited, to prevent the log file growing too big too quickly if large bodies are being received. By default, up to 1024 bytes are logged, but this can be changed with this directive.

    top

    ScriptLogLength Directive

    Description:Size limit of the CGI script logfile
    Syntax:ScriptLogLength bytes
    Default:ScriptLogLength 10385760
    Context:server config, virtual host
    Status:Base
    Module:mod_cgi, mod_cgid

    ScriptLogLength can be used to limit the size of the CGI script logfile. Since the logfile logs a lot of information per CGI error (all request headers, all script output) it can grow to be a big file. To prevent problems due to unbounded growth, this directive can be used to set an maximum file-size for the CGI logfile. If the file exceeds this size, no more information will be written to it.

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_express.html0000644000000000000500000000034613362070302020676 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy_express.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_proxy_express.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_include.html.fr.utf80000644000000000000500000020252713412755316020702 0ustar rootsrc mod_include - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_include

    Langues Disponibles:  en  |  fr  |  ja 

    Description:Documents html interprétés par le serveur (Server Side Includes ou SSI)
    Statut:Base
    Identificateur de Module:include_module
    Fichier Source:mod_include.c

    Sommaire

    Ce module fournit un filtre qui va traiter les fichiers avant de les envoyer au client. Le traitement est contrôlé via des commentaires SGML spécialement formatés, aussi nommés éléments. Ces éléments permettent l'insertion conditionnelle de texte, l'inclusion d'autres fichiers ou programmes, ainsi que la définition et l'affichage de variables d'environnement.

    top

    Activation des SSI

    Les SSI sont implémentés par le filtre INCLUDES. Si des documents contenant des directives SSI possèdent une extension .shtml, les directives suivantes indiqueront à Apache de les interpréter et d'assigner le type MIME text/html au document obtenu :

    AddType text/html .shtml
    AddOutputFilter INCLUDES .shtml

    L'option suivante doit être définie pour les répertoires qui contiennent les fichiers shtml (en général dans une section <Directory>, mais cette option peut également être définie dans un fichier .htaccess si AllowOverride Options a été défini pour le répertoire considéré) :

    Options +Includes

    Pour des raisons de compatibilité ascendante, le gestionnaire server-parsed peut aussi activer le filtre INCLUDES. Ainsi, Apache va activer le filtre INCLUDES pour tout document de type MIME text/x-server-parsed-html ou text/x-server-parsed-html3 (et le document obtenu aura pour type MIME text/html).

    Pour plus d'informations, voyez notre Tutoriel SSI.

    top

    PATH_INFO et SSI

    Les fichiers traités dans le cadre des SSI n'acceptent plus par défaut les requêtes avec PATH_INFO (les informations relatives au chemin en fin de requête). La directive AcceptPathInfo permet de configurer le serveur de façon à ce qu'il accepte ce genre de requête.

    top

    Eléments disponibles

    Le document est interprété comme un document HTML, avec des commandes spéciales incluses sous forme de commentaires SGML. La syntaxe d'une commande est la suivante :

    <!--#élément attribut=valeur attribut=valeur ... -->

    Les valeurs sont souvent entourées de guillemets, mais on peut aussi utiliser des apostrophes (') ou des apostrophes inverses (`). De nombreuses commandes n'acceptent qu'une seule paire attribut-valeur. Notez que le terminateur de commentaire (-->) doit être précédé d'un espace afin d'être sûr qu'il ne soit pas considéré comme un élément de commande SSI. Notez aussi que le délimiteur de début <!--# est un élément de commande et ne doit donc pas contenir d'espace.

    La table suivante contient la liste des éléments autorisés :

    ElémentDescription
    comment commentaire SSI
    config configure les formats de sortie
    echo affiche le contenu de variables
    exec exécute des programmes externes
    fsize affiche la taille d'un fichier
    flastmod affiche la date de dernière modification d'un fichier
    include inclut un fichier
    printenv affiche toutes les variables disponibles
    set définit la valeur d'une variable

    Les éléments SSI peuvent être définis par d'autres modules que mod_include. À ce titre, l'élément exec est fourni par mod_cgi, et ne sera disponible que si ce module est chargé.

    L'élément comment

    Cette commande n'affiche aucune information. Elle n'a pour but que l'ajout de commentaires dans un fichier et ces commentaires ne sont pas affichés.

    Cette syntaxe est disponible à partir de la version 2.4.21 du serveur HTTP Apache.

    <!--#comment Blah Blah Blah -->

    L'élément config

    Cette commande contrôle divers aspects de l'interprétation. Les attributs valides sont :

    echomsg (Versions 2.1 et supérieures d'Apache)

    La valeur est un message qui sera envoyé au client si l'élément echo tente d'afficher le contenu d'une variable non définie. Cet attribut l'emporte sur toute directive SSIUndefinedEcho.

    <!--#config echomsg="[Valeur non définie]" -->

    errmsg

    La valeur est un message qui sera envoyé au client si une erreur survient lors de l'interprétation du document. Cet attribut l'emporte sur toute directive SSIErrorMsg.

    <!--#config errmsg="[Zut, quelque chose s'est mal passé.]" -->

    sizefmt

    La valeur définit l'unité employée lors de l'affichage de la taille d'un fichier. Les valeurs possibles sont bytes pour une taille en octets, ou abbrev pour une taille en Ko ou Mo selon son importance ; par exemple, une taille de 1024 octets sera affichée sous la forme "1K".

    <!--#config sizefmt="abbrev" -->

    timefmt

    La valeur est une chaîne que pourra utiliser la fonction de la bibliothèque standard strftime(3) lors de l'affichage des dates.

    <!--#config timefmt=""%R, %B %d, %Y"" -->

    L'élément echo

    Cette commande affiche le contenu d'une des variables include définies ci-dessous. Si la variable n'est pas définie, le résultat est déterminé par la valeur de la directive SSIUndefinedEcho. Le format d'affichage des dates est défini par l'attribut timefmt de la commande config.

    Attributs:

    var
    La valeur est le nom de la variable à afficher.
    decoding

    Spécifie si Apache doit effectuer un décodage dans la variable avant son traitement ultérieur. La valeur par défaut est none, et dans ce cas, aucun décodage n'est effectué. Si la valeur est url, un décodage de type URL sera effectué (il s'agit du codage de type %-encoding utilisé dans les URLs des liens, etc...). Si la valeur est urlencoded, c'est un décodage des éléments de type application/x-www-form-urlencode (que l'on trouve dans les chaînes de paramètres) qui sera effectué. Si la valeur est base64, un decodage de type base64 sera effectué, et si elle est entity, c'est un décodage des entités HTML qui sera effectué. Ce décodage est effectué avant tout codage ultérieur de la variable. Il est possible d'effectuer plusieurs décodages en spécifiant plusieurs valeurs séparées par des virgules. Les spécifications de décodages restent valables jusqu'au prochain attribut de décodage, ou la fin de l'élément.

    Pour être pris en compte, l'attribut de décodage doit précéder l'attribut var correspondant.

    encoding

    Spécifie la manière dont Apache va coder les caractères spéciaux que la variable contient avant leur affichage. S'il est défini à none, aucun codage ne sera effectué. S'il est défini à url, un codage de type URL sera effectué (aussi connu sous le nom de codage avec caractères % , il convient pour les URLS des liens, etc...). S'il est défini à urlencoded, c'est un codage compatible application/x-www-form-urlencoded qui sera effectué (à utiliser dans les chaînes de paramètres). S'il est défini à base64, c'est un encodage de type base64 qui sera effectué. Au début d'un élément echo, la valeur par défaut est définie à entity, ce qui correspond à un codage de type entité (codage qui convient pour un élément HTML de type bloc, comme le paragraphe d'un texte). Cette valeur par défaut peut être modifiée en ajoutant un attribut encoding, qui fera effet jusqu'à la définition d'un nouvel attribut encoding ou la fin de l'élément echo.

    Pour produire son effet, l'attribut encoding doit précéder l'attribut var concerné.

    Afin de prévenir les attaques de type cross-site scripting, il est recommandé de toujours encoder les données fournies par les utilisateurs.

    Example

    <!--#echo encoding="entity" var="QUERY_STRING" -->

    L'élément exec

    La commande exec exécute la commande shell ou le script spécifié. Elle nécessite le chargement du module mod_cgi. Si Options IncludesNOEXEC est définie, cette commande est désactivée. Les attributs disponibles sont :

    cgi

    La valeur spécifie un chemin URL vers le script CGI (encodé avec caractères %). Si le chemin ne commence pas par un slash (/), il est considéré comme relatif au document courant. Le document référencé par ce chemin est invoqué en tant que script CGI, même s'il n'est pas censé être reconnu comme tel par le serveur. Les scripts CGI doivent cependant être activés dans le répertoire qui contient les scripts (via la directive ScriptAlias ou l'Options ExecCGI).

    Le PATH_INFO et la chaîne d'arguments (QUERY_STRING) de la requête originale du client sont fournis au script CGI ; ils ne peuvent pas être spécifiés dans le chemin de l'URL. Le script disposera des variables include en plus de l'environnement standard CGI.

    Exemple

    <!--#exec cgi="/cgi-bin/exemple.cgi" -->

    Si, à la place d'un flux de sortie, le script renvoie un en-tête Location:, ce dernier sera traduit en ancrage HTML.

    L'élément include virtual doit être préféré à exec cgi. En particulier, si vous devez transmettre des arguments supplémentaires à un programme CGI en utilisant la chaîne d'arguments de la requête, c'est impossible avec exec cgi, mais vous pouvez y parvenir avec include virtual comme suit :

    <!--#include virtual="/cgi-bin/exemple.cgi?argument=valeur" -->

    cmd

    Le serveur va exécuter la commande fournie en utilisant /bin/sh. La commande dispose des variables include, en plus du jeu habituel de variables CGI.

    Il est toujours préférable d'utiliser #include virtual à la place de #exec cgi ou #exec cmd. #include virtual utilise le mécanisme standard des sous-requêtes d'Apache pour inclure des fichiers ou des scripts. Il a fait l'objet de tests plus approfondis et sa maintenance est mieux suivie.

    De plus, sur certaines plate-formes, comme Win32, et sous unix, si l'on utilise suexec, il est impossible de transmettre des arguments à une commande dans une directive exec, à moins d'insérer des espaces dans la commande. Ainsi, alors que ce qui suit fonctionnera sous unix avec une configuration sans suexec, l'effet produit ne sera pas celui désiré sous Win32, ou dans le cas de l'utilisation de suexec :

    <!--#exec cmd="perl /chemin/vers/script_perl arg1 arg2" -->

    L'élément fsize

    Cette commande permet d'afficher la taille du fichier spécifié en fonction des spécifications de format de sizefmt. Attributs :

    file
    La valeur est le chemin du fichier, relatif au répertoire contenant le document en cours d'interprétation.

    Ce fichier a une taille de <!--#fsize file="mod_include.html" --> octets.

    La valeur de file ne peut pas faire référence à un fichier situé à un niveau supérieur de l'arborescence du répertoire courant ou en dehors de la racine des documents ; il ne peut donc ni commencer par un slash, ni contenir la séquence de caractères ../. Si c'est le cas, le message d'erreur The given path was above the root path sera renvoyé.
    virtual
    La valeur est un chemin URL (codé avec caractères %). S'il ne commence pas par un slash (/), il est considéré comme relatif au document courant. Notez que cette commande n'affiche pas la taille de la sortie d'un programme CGI, mais la taille du programme CGI lui-même.

    Ce fichier a une taille de <!--#fsize virtual="/docs/mod/mod_include.html" --> octets.

    Notez que dans la plupart des cas, ces deux attributs sont identiques. Cependant, l'attribut file ne respecte pas les aliases URL-space.

    L'élément flastmod

    Cette commande permet d'afficher la date de dernière modification du fichier spécifié, en fonction des spécifications de format de timefmt. Les attributs sont les mêmes que ceux de la commande fsize.

    L'élément include

    Cette commande permet d'insérer le texte d'un autre document ou fichier dans le fichier en cours d'interprétation. Tout fichier inclus est soumis au contrôle d'accès habituel. Si Options IncludesNOEXEC est défini pour le répertoire contenant le fichier interprété, seuls les documents possèdant un type MIME de type texte (text/plain, text/html, etc...) seront inclus. Les scripts CGI, quant à eux, sont invoqués de manière habituelle en utilisant l'URL complète fournie avec la commande, y compris toute chaîne d'arguments éventuelle.

    Un attribut définit le chemin du document à inclure, et peut apparaître plusieurs fois dans l'élément à inclure ; en retour, pour chaque attribut fourni à la commande include, une inclusion est effectuée. Les attributs disponibles sont :

    file
    La valeur est un chemin relatif au répertoire contenant le fichier en cours d'interprétation. Elle ne peut ni contenir ../, ni être un chemin absolu. Ainsi, vous ne pouvez pas inclure de fichiers situés en dehors de l'arborescence du site web ou dans un niveau supérieur à celui du fichier courant dans cette arborescence. Il est toujours préférable d'utiliser l'attribut virtual.
    virtual

    La valeur est un chemin URL (codé avec caractères %). L'URL ne peut contenir qu'un chemin et une chaîne d'arguments éventuelle, à l'exclusion de tout protocole ou nom d'hôte. S'il ne commence pas par un slash (/), il est considéré comme relatif au document courant.

    Une URL est construite à partir de l'attribut, et la sortie que renverrait le serveur si l'URL était accédée par le client est incluse dans la sortie interprétée. Les inclusions de fichiers peuvent ainsi être imbriquées.

    Si l'URL spécifiée correspond à un programme CGI, le programme sera exécuté, et son flux de sortie inséré à la place de la directive dans le fichier interprété. Vous pouvez insérer une chaîne d'arguments dans une URL correspond à un programme CGI :

    <!--#include virtual="/cgi-bin/exemple.cgi?argument=valeur" -->

    include virtual doit être préféré à exec cgi pour inclure le flux de sortie d'un programme CGI dans un document HTML.

    Si la directive KeptBodySize est correctement définie et valide pour le fichier inclus, les tentatives de requêtes POST vers le document HTML qui inclut des fichiers seront transmises aux sous-requêtes en tant que requêtes POST elles-mêmes. Sans cette directive, toutes les sous-requêtes sont traitées en tant que requêtes GET.

    onerror

    La valeur est un chemin-URL (codé-%) qui est affiché si une tentative précédente d'inclure un fichier ou un attribut virtuel a échoué. Pour produire son effet, cet attribut doit être spécifié après le fichier ou les attributs virtuels concernés. Si la tentative d'inclure le chemin onerror échoue, ou si onerror n'est pas spécifié, c'est le message d'erreur par défaut qui sera inclus.

    # Exemple simple
    <!--#include virtual="/not-exist.html" onerror="/error.html" -->

    # Chemins onerror dédiés
    <!--#include virtual="/path-a.html" onerror="/error-a.html" virtual="/path-b.html" onerror="/error-b.html" -->

    L'élément printenv

    Cette commande affiche la liste en mode texte de toutes les variables et de leurs valeurs. Les caractères spéciaux sont encodés entity avant d'être affichés (se reporter à l'élément echo pour plus de détails). Cette commande ne comporte pas d'attributs.

    Exemple

    <pre> <!--#printenv --> </pre>

    L'élément set

    Cette commande permet de définir la valeur d'une variable. Les attributs sont :

    var
    Le nom de la variable à définir.
    value
    La valeur à affecter à la variable.
    decoding

    Spécifie si Apache doit effectuer un décodage dans la variable avant son traitement ultérieur. La valeur par défaut est none, et dans ce cas, aucun décodage n'est effectué. Si la valeur est url, urlencoded, base64 ou entity, c'est un décodage de type URL, application/x-www-form-urlencoded, base64 ou entité HTML qui sera respectivement effectué. Il est possible d'effectuer plusieurs décodages en spécifiant plusieurs valeurs séparées par des virgules. Les spécifications de décodages restent valables jusqu'au prochain attribut de décodage, ou la fin de l'élément. Pour être pris en compte, l'attribut de décodage doit précéder l'attribut var correspondant.

    encoding

    Spécifie la manière dont Apache va encoder les caractères spéciaux que la variable contient avant leur affichage. S'il est défini à none, aucun encodage ne sera effectué. Si la valeur est url, urlencoding, base64 ou entity, c'est un encodage de type URL, application/x-www-form-urlencoded, base64 ou entité HTML qui sera respectivement effectué. Il est possible de spécifier plusieurs types d'encodage en les séparant par des virgules. La spécification du type d'encodage fera effet jusqu'à la définition d'un nouvel attribut encoding ou la fin de l'élément. Pour produire son effet, l'attribut encoding doit précéder l'attribut var concerné. Les encodages sont effectués après les opérations de décodage.

    Exemple

    <!--#set var="category" value="help" -->

    top

    Variables include

    À l'instar des variables de l'environnement CGI standard, ces variables sont mises à la disposition de la commande echo, des opérateurs conditionnels if et elif, et de tout programme invoqué par le document.

    DATE_GMT
    La date GMT (Greenwich Mean Time) courante.
    DATE_LOCAL
    La date locale courante.
    DOCUMENT_ARGS
    Cette variable contient la chaîne de paramètres de la requête du document SSI actif, ou la chaîne vide si aucune chaîne de paramètres de requête n'est incluse. Pour les sous-requêtes invoquées par la directive SSI include, QUERY_STRING contiendra la chaîne de paramètres de la sous-requête et DOCUMENT_ARGS la chaîne de paramètres du document SSI (disponible à partir de la version 2.4.19 du serveur HTTP Apache).
    DOCUMENT_NAME
    Le nom de base du fichier demandé par l'utilisateur (sans son chemin).
    DOCUMENT_PATH_INFO
    La partie terminale du chemin du fichier. Voir la directive AcceptPathInfo pour plus d'informations à propos de PATH_INFO.
    DOCUMENT_URI
    Le chemin URL (caractères % décodés) du document demandé par l'utilisateur. Notez que dans le cas d'inclusions de fichiers imbriquées, il ne s'agit pas de l'URL du document courant. Notez également que si l'URL est modifiée en interne (par exemple via une directive alias ou directoryindex), c'est l'URL modifiée que contiendra la variable.
    LAST_MODIFIED
    La date de dernière modification du document demandé par l'utilisateur.
    QUERY_STRING_UNESCAPED
    Si une chaîne d'arguments est présente dans la requête pour le document SSI actif, elle sera affectée à cette variable, les caractères %-décodés, et éventuellement échappés pour qu'ils ne soient pas interprétés par le shell (les caractères spéciaux comme &,etc... sont précédés d'anti-slashes). Cette variable n'est pas définie si aucune chaîne d'arguments n'est présente. Utilisez DOCUMENT_ARGS si l'échappement des caractères du shell n'est pas souhaité.
    USER_NAME
    Le nom d'utilisateur du propriétaire du fichier.
    top

    Substitution de variable

    Une substitution de variable à l'intérieur d'une chaîne entre guillemets s'effectue dans la plupart des situations où cette dernière peut raisonablement constituer un argument d'une directive SSI. Sont concernées les directives config, exec, flastmod, fsize, include, echo, et set. Si la directive SSILegacyExprParser est définie à on, la substitution s'effectue aussi dans les arguments des opérateurs conditionnels. Vous pouvez insérer un signe dollar en tant que caractère littéral dans une chaîne en utilisant un anti-slash :

    <!--#set var="cur" value="\$test" -->

    Si une référence de variable doit être substituée au beau milieu d'une séquence de caractères qui pourrait être elle-même considérée comme un identifiant valide, l'ambiguïté peut être levée en entourant la référence d'accolades, à la manière du shell :

    <!--#set var="Zed" value="${REMOTE_HOST}_${REQUEST_METHOD}" -->

    Dans cet exemple, la variable Zed se verra affecter la valeur "X_Y" si REMOTE_HOST et REQUEST_METHOD contiennent respectivement "X" et "Y".

    top

    Eléments de contrôle d'inclusion conditionnelle

    Les éléments de base du contrôle d'inclusion conditionnelle sont :

    <!--#if expr="test_condition" -->
    <!--#elif expr="test_condition" -->
    <!--#else -->
    <!--#endif -->

    L'élément if fonctionne de la même manière que la directive if d'un langage de programmation. La condition est évaluée et si le résultat est vrai, le texte qui suit jusqu'au prochain élément elif, else ou endif sera inclus dans le flux de sortie.

    Les éléments elif ou else permettent d'insérer du texte dans le flux de sortie si test_condition s'est révélé faux. Ces éléments sont optionnels.

    L'élément endif termine le bloc de traitement conditionnel if et est obligatoire.

    test_condition est une expression booléenne qui emprunte la syntaxe ap_expr. La directive SSILegacyExprParser permet de modifier cette syntaxe pour la rendre compatible avec Apache HTTPD 2.2.x.

    Le jeu de variables SSI avec l'élément var sont exportées vers l'environnement de la requête et sont accessibles via la fonction reqenv. Pour faire simple, le nom de fonction v est aussi disponible dans le module mod_include.

    Dans l'exemple suivant, "depuis le réseau local" sera affiché si l'adresse IP du client appartient au sous-réseau 10.0.0.0/8.

    <!--#if expr='-R "10.0.0.0/8"' -->
    depuis le réseau local
    <!--#else -->
    depuis ailleurs
    <!--#endif -->

    Dans l'exemple suivant, "foo vaut bar" sera affiché si la variable foo contient la valeur "bar".

    <!--#if expr='v("foo") = "bar"' -->
    foo vaut bar
    <!--#endif -->

    Documentation de référence

    Voir aussi Les expressions dans le serveur HTTP Apache pour une référence complète et des exemples. Les fonctions restricted ne sont pas disponibles dans mod_include.

    top

    Syntaxe des expressions héritée

    Cette section décrit la syntaxe de l'élément #if expr dans le cas où la directive SSILegacyExprParser est définie à on.

    chaîne
    vrai si chaîne n'est pas vide
    -A string

    vrai si l'URL que contient la chaîne est accessible du point de vue de la configuration, faux sinon. Il s'avère utile lorsqu'un lien vers une URL doit être caché aux utilisateurs qui ne sont pas autorisés à voir cette URL. Notez que le test porte sur l'autorisation d'accès à l'URL, et non sur son existence.

    Exemple

    <!--#if expr="-A /prive" -->
    Cliquez <a href="/prive">ici</a> pour accéder aux informations privées.
    <!--#endif -->

    chaîne1 = chaîne2
    chaîne1 == chaîne2
    chaîne1 != chaîne2

    Compare chaîne1 à chaîne2. Si chaîne2 est de la forme /chaîne2/, elle est traitée comme une expression rationnelle. Les expressions rationnelles sont implémentées par le moteur PCRE et possèdent la même syntaxe que celles de perl 5. Notez que == n'est qu'un alias pour = et se comporte exactement de la même manière que ce dernier.

    Si vous faites une comparaison directe (= ou ==), vous pouvez extraire des parties de l'expression rationnelle. Les parties extraites sont stockées dans les variables spéciales $1 .. $9. L'ensemble de la chaîne correspondant à l'expression rationnelle est stocké dans la variable spéciale $0.

    Exemple

    <!--#if expr="$QUERY_STRING = /^sid=([a-zA-Z0-9]+)/" -->
    <!--#set var="session" value="$1" -->
    <!--#endif -->

    chaîne1 < chaîne2
    chaîne1 <= chaîne2
    chaîne1 > chaîne2
    chaîne1 >= chaîne2
    Compare chaîne1 à chaîne2. Notez que les chaînes sont comparées de manière littérale (en utilisant strcmp(3)). Ainsi, la chaîne "100" est inférieure à "20".
    ( test_condition )
    vrai si test_condition est vrai
    ! test_condition
    vrai si test_condition est faux
    test_condition1 && test_condition2
    vrai si test_condition1 et test_condition2 sont tous les deux vrais
    test_condition1 || test_condition2
    vrai si au moins un des tests test_condition1 ou test_condition2 est vrai

    "=" et "!=" ont une priorité supérieure à "&&" et "||". "!" a la priorité la plus haute. Ainsi, les deux directives suivantes sont équivalentes :

    <!--#if expr="$a = test1 && $b = test2" -->
    <!--#if expr="($a = test1) && ($b = test2)" -->

    Les opérateurs booléens && et || ont la même priorité. Ainsi, si vous voulez augmenter la priorité d'un de ces opérateurs, vous devez utiliser des parenthèses.

    Tout ce qui n'est pas reconnu comme variable ou opérateur est traité comme une chaîne. Les chaînes peuvent aussi être entourées d'apostrophes : 'chaîne'. Les chaînes sans apostrophe ne peuvent pas contenir d'espaces (espaces ou tabulations) car ceux-ci servent à séparer certains éléments comme les variables. Si plusieurs chaînes se trouvent dans une ligne, elles sont concaténées en utilisant des espaces. Ainsi,

    chaîne1    chaîne2 devient chaîne1 chaîne2

    et

    'chaîne1    chaîne2' devient chaîne1    chaîne2.

    Optimisation des expressions booléennes

    Si les expressions atteignent une complexité suffisante pour ralentir les traitements de manière significative, vous pouvez essayer de les optimiser en fonction des règles d'évaluation :

    • Les expressions sont évaluées de la gauche vers la droite
    • Les opérateurs booléens binaires (&& et ||) font l'objet d'une évaluation abrégée chaque fois que cela est possible. En d'autres termes, et selon la règle ci-dessus, mod_include évalue tout d'abord la partie gauche de l'expression. Si le résultat de l'évaluation de cette partie gauche suffit à déterminer le résultat final, l'évaluation s'arrête ici. Dans le cas contraire, la partie droite est évaluée, et le résultat final tient compte des résultats des évaluations des parties gauche et droite.
    • L'évaluation abrégée est désactivée tant qu'il reste des expressions régulières à traiter. Ces dernières doivent être évaluées afin de définir les variables correspondant aux références arrières ($1 .. $9).

    Si vous voulez déterminer la manière dont une expression est traitée, vous pouvez recompiler mod_include en utilisant l'option de compilation -DDEBUG_INCLUDE. Ceci a pour effet d'insérer, pour chaque expression interprétée, des informations étiquetées, l'arbre d'interprétation et la manière dont elle est évaluée au sein du flux de sortie envoyé au client.

    Slashes d'échappement dans les expressions rationnelles

    Tous les caractères slashes qui ne sont pas des séparateurs dans votre expression rationnelle doivent être échappés, et ceci sans tenir compte de leur signification du point de vue du moteur d'expressions rationnelles.

    Documentation de référence

    Voir le document Les expressions dans le serveur HTTP Apache, pour une référence complète et des exemples.

    top

    Directive SSIEndTag

    Description:Chaîne qui termine l'élément include
    Syntaxe:SSIEndTag tag
    Défaut:SSIEndTag "-->"
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_include

    Cette directive permet de modifier la chaîne que mod_include interprète comme la fin d'un élément include.

    SSIEndTag "%>"

    Voir aussi

    top

    Directive SSIErrorMsg

    Description:Message d'erreur affiché lorsqu'une erreur SSI survient
    Syntaxe:SSIErrorMsg message
    Défaut:SSIErrorMsg "[an error occurred while processing this directive]"
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Base
    Module:mod_include

    La directive SSIErrorMsg permet de modifier le message d'erreur affiché lorsqu'une erreur SSI survient. Pour les serveurs en production, il est recommandé de modifier le message d'erreur par défaut en "<!-- Error -->", de façon à ce que le message ne soit pas présenté à l'utilisateur.

    Cette directive a le même effet que l'élément <!--#config errmsg=message -->.

    SSIErrorMsg "<!-- Error -->"
    top

    Directive SSIETag

    Description:Définit si des en-têtes ETags sont générés par le serveur.
    Syntaxe:SSIETag on|off
    Défaut:SSIETag off
    Contexte:répertoire, .htaccess
    Statut:Base
    Module:mod_include
    Compatibilité:Disponible à partir de la version 2.2.15 du serveur HTTP Apache.

    Dans le cas général, un fichier filtré par mod_include peut contenir des éléments soit générés dynamiquement, soit éventuellement modifiés indépendemment du fichier original. En conséquence, il est demandé par défaut au serveur de ne pas générer d'en-tête ETag à la réponse en ajoutant no-etag aux informations de requête.

    Ce comportement peut être modifié via la directive SSIETag qui permet au serveur de générer un en-tête ETag. On peut aussi l'utiliser pour la mise en cache de la sortie. Notez qu'un serveur d'arrière-plan ou un générateur de contenu dynamique peut lui-même générer un en-tête ETag, en ignorant l'information no-etag, cet en-tête ETag étant transmis par mod_include sans tenir compte de la définition de la présente directive. La directive SSIETag peut prendre une des valeurs suivantes :

    off
    no-etag sera ajouté aux informations de requête, et il sera demandé au serveur de ne pas générer d'en-tête ETag. Lorsqu'un serveur ignore la valeur de no-etag et génère tout de même un en-tête ETag, ce dernier sera respecté.
    on
    Les en-têtes ETag existants seront respectés, et ceux générés par le serveur seront ajoutés à la réponse.
    top

    Directive SSILastModified

    Description:Définit si des en-têtes Last-Modified sont générés par le serveur.
    Syntaxe:SSILastModified on|off
    Défaut:SSILastModified off
    Contexte:répertoire, .htaccess
    Statut:Base
    Module:mod_include
    Compatibilité:Disponible à partir de la version 2.2.15 du serveur HTTP Apache.

    Dans le cas général, un fichier filtré par mod_include peut contenir des éléments soit générés dynamiquement, soit éventuellement modifiés indépendemment du fichier original. En conséquence, l'en-tête Last-Modified est supprimé par défaut de la réponse.

    La directive SSILastModified permet de modifier ce comportement en faisant en sorte que l'en-tête Last-Modified soit respecté s'il est déjà présent, ou défini dans le cas contraire. On peut aussi l'utiliser pour la mise en cache de la sortie. La directive SSILastModified peut prendre une des valeurs suivantes :

    off
    L'en-tête Last-Modified sera supprimé des réponses, à moins que la directive XBitHack ne soit définie à full comme décrit plus loin.
    on
    L'en-tête Last-Modified sera respecté s'il est déjà présent, et ajouté à la réponse si cette dernière est un fichier et si l'en-tête est manquant. La directive SSILastModified l'emporte sur la directive XBitHack.
    top

    Directive SSILegacyExprParser

    Description:Active le mode de compatibilité pour les expressions conditionnelles.
    Syntaxe:SSILegacyExprParser on|off
    Défaut:SSILegacyExprParser off
    Contexte:répertoire, .htaccess
    Statut:Base
    Module:mod_include
    Compatibilité:Disponible à partir de la version 2.3.13.

    Depuis la version 2.3.13, mod_include a adopté la nouvelle syntaxe ap_expr pour ses expressions conditionnelles dans les éléments de contrôle de flux #if. Cette directive permet de réactiver l'ancienne syntaxe qui est compatible avec les versions 2.2.x et antérieures d'Apache HTTPD.

    top

    Directive SSIStartTag

    Description:Chaîne qui marque le début d'un élément include
    Syntaxe:SSIStartTag tag
    Défaut:SSIStartTag "<!--#"
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_include

    Cette directive permet de modifier la chaîne que mod_include interprète comme le début d'un élément include.

    Cette option peut vous être utile si vous avez deux serveurs qui interprètent un fichier avec des commandes différentes (et éventuellement à des moments différents).

    SSIStartTag "<%"
    SSIEndTag   "%>"

    Avec l'exemple ci-dessus, qui définit aussi une directive SSIEndTag, vous pourrez inscrire des directives SSI comme dans l'exemple suivant :

    Directives SSI avec marques de début et de fin personnalisées

    <%printenv %>

    Voir aussi

    top

    Directive SSITimeFormat

    Description:Configuration du format d'affichage des dates
    Syntaxe:SSITimeFormat chaîne de formatage
    Défaut:SSITimeFormat "%A, %d-%b-%Y %H:%M:%S %Z"
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Base
    Module:mod_include

    Cette directive permet de modifier le format d'affichage des variables d'environnement DATE. La chaîne de formatage est identique à celle de la fonction strftime(3) de la bibliothèque C standard.

    Cette directive a le même effet que l'élément <!--#config timefmt=chaîne de formatage -->.

    SSITimeFormat "%R, %B %d, %Y"

    Avec l'exemple ci-dessus, les dates seront affichées dans le style "22:26, June 14, 2002".

    top

    Directive SSIUndefinedEcho

    Description:Chaîne à afficher lorsqu'on tente d'extraire le contenu d'une variable non définie
    Syntaxe:SSIUndefinedEcho chaîne
    Défaut:SSIUndefinedEcho "(none)"
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:All
    Statut:Base
    Module:mod_include

    Cette directive permet de modifier la chaîne affichée par mod_include lorsqu'on tente d'extraire le contenu d'une variable non définie.

    SSIUndefinedEcho "<!-- nondef -->"
    top

    Directive XBitHack

    Description:Interprète les directives SSI dans les fichiers dont le bit d'exécution est positionné
    Syntaxe:XBitHack on|off|full
    Défaut:XBitHack off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:Options
    Statut:Base
    Module:mod_include

    La directive XBitHack permet de contrôler l'interprétation des documents html standards. Elle n'affecte que les fichiers dont le type MIME est text/html. XBitHack peut prendre les valeurs suivantes :

    off
    Aucun traitement particulier pour les fichiers exécutables.
    on
    Tout fichier text/html dont le bit d'exécution est positionné pour le propriétaire sera traité en tant que document html interprété par le serveur.
    full
    Identique à on, avec test du bit d'exécution pour le groupe. Si ce dernier est positionné, la date de dernière modification du fichier renvoyé est définie à la date de dernière modification du fichier. Dans le cas contraire, aucune date de dernière modification n'est renvoyée. Le positionnement de ce bit permet aux clients et aux mandataires de gérer la mise en cache du résultat de la requête.

    Note

    Il est recommandé de n'utiliser l'option full que dans le cas où vous êtes certain que le bit d'exécution du groupe est non positionné pour les scripts SSI qui pourraient effectuer l'#include d'un programme CGI ou bien produire des sorties différentes à chaque accès (ou seraient susceptibles d'être modifiées au cours des requêtes ultérieures).

    Lorsqu'elle est définie à on, la directive SSILastModified l'emporte sur la directive XBitHack.

    Langues Disponibles:  en  |  fr  |  ja 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_deflate.html.ko.euc-kr0000644000000000000500000006425613435243454021172 0ustar rootsrc mod_deflate - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_deflate

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:³»¿ëÀ» Ŭ¶óÀÌ¾ðÆ®·Î º¸³»±â Àü¿¡ ¾ÐÃàÇÑ´Ù
    »óÅÂ:Extension
    ¸ðµâ¸í:deflate_module
    ¼Ò½ºÆÄÀÏ:mod_deflate.c

    ¿ä¾à

    mod_deflate ¸ðµâÀº ¼­¹öÀÇ Ãâ·ÂÀ» ³×Æ®¿÷À¸·Î Ŭ¶óÀÌ¾ðÆ®¿¡ º¸³»±â Àü¿¡ ¾ÐÃàÇÏ´Â DEFLATE Ãâ·ÂÇÊÅ͸¦ Á¦°øÇÑ´Ù.

    top

    °ßº» ¼³Á¤

    ±ÞÇÑ »ç¶÷À» À§ÇÑ °ßº» ¼³Á¤ÀÌ´Ù.

    ÀϺΠtype¸¸ ¾ÐÃà

    AddOutputFilterByType DEFLATE text/html text/plain text/xml

    ¾Æ·¡ ¼³Á¤Àº ¿ä¾àÇÏ¿´Áö¸¸ ±×·¡µµ º¹ÀâÇÏ´Ù. ¼³Á¤À» ¿ÏÀüÈ÷ ÀÌÇØÇÑ ÈÄ »ç¿ëÇ϶ó.

    À̹ÌÁö¸¦ Á¦¿ÜÇÑ ¸ðµç °ÍÀ» ¾ÐÃà

    <Location />
    # ÇÊÅ͸¦ Ãß°¡ÇÑ´Ù
    SetOutputFilter DEFLATE

    # Netscape 4.x¿¡ ¹®Á¦°¡ ÀÖ´Ù...
    BrowserMatch ^Mozilla/4 gzip-only-text/html

    # Netscape 4.06-4.08¿¡ ´õ ¹®Á¦°¡ ÀÖ´Ù
    BrowserMatch ^Mozilla/4\.0[678] no-gzip

    # MSIEÀº Netscape¶ó°í ÀÚ½ÅÀ» ¾Ë¸®Áö¸¸, ¹®Á¦°¡ ¾ø´Ù
    # BrowserMatch \bMSIE !no-gzip !gzip-only-text/html

    # ÁÖÀÇ: ¾ÆÆÄÄ¡ 2.0.48±îÁö mod_setenvifÀÇ ¹ö±×¶§¹®¿¡
    # À§ÀÇ Á¤±ÔÇ¥Çö½ÄÀº µ¿ÀÛÇÏÁö ¾Ê´Â´Ù. ¿øÇÏ´Â È¿°ú¸¦
    # ¾ò±âÀ§ÇØ ´ÙÀ½°ú °°ÀÌ ¼öÁ¤ÇÏ¿© »ç¿ëÇÑ´Ù:
    BrowserMatch \bMSI[E] !no-gzip !gzip-only-text/html

    # À̹ÌÁö¸¦ ¾ÐÃàÇÏÁö ¾Ê´Â´Ù
    SetEnvIfNoCase Request_URI \
    \.(?:gif|jpe?g|png)$ no-gzip dont-vary

    # ÇÁ·Ï½Ã°¡ À߸øµÈ ³»¿ëÀ» Àü´ÞÇÏÁö¾Êµµ·Ï ÇÑ´Ù
    Header append Vary User-Agent env=!dont-vary
    </Location>

    top

    ¾ÐÃàÇϱâ

    Ãâ·Â ¾ÐÃà

    DEFLATE ÇÊÅͰ¡ ¾ÐÃàÀ» ÇÑ´Ù. ´ÙÀ½ Áö½Ã¾î´Â Áö½Ã¾î°¡ ÀÖ´Â À§Ä¡ÀÇ ¹®¼­¸¦ ¾ÐÃàÇÑ´Ù:

    SetOutputFilter DEFLATE

    ¸ðµç ³»¿ëÀ» ¾ÐÃàÇϸé ó¸®ÇÏÁö ¸øÇÏ´Â ºê¶ó¿ìÀú°¡ Àֱ⶧¹®¿¡ html ÆÄÀϸ¸À» ¾ÐÃàÇϱâÀ§ÇØ (¾Æ·¡ Âü°í) gzip-only-text/htmlÀ» 1·Î ¼³Á¤ÇÒÁöµµ ¸ð¸¥´Ù. À̸¦ 1ÀÌ ¾Æ´Ñ °ªÀ¸·Î ¼³Á¤ÇÏ¸é ¹«½ÃÇÑ´Ù.

    º¸Åë Æ¯º°ÇÑ MIME type¸¸ ¾ÐÃàÇÏ·Á¸é AddOutputFilterByType Áö½Ã¾î¸¦ »ç¿ëÇÑ´Ù. ´ÙÀ½ ¼³Á¤Àº html ÆÄÀϸ¸À» ¾ÐÃàÇÑ´Ù:

    <Directory "/your-server-root/manual">
    AddOutputFilterByType DEFLATE text/html
    </Directory>

    ¾ÐÃàÇÑ ÆÄÀÏÀ» ó¸®ÇÏÁö ¸øÇÏ´Â ºê¶ó¿ìÀú¿¡°Ô´Â ¾ÐÃàÇÏÁö¾Ê°í º¸³»±æÀ§ÇØ BrowserMatch Áö½Ã¾î¿¡ no-gzipÀ» ¼³Á¤ÇÑ´Ù. ÃÖÀûÀÇ °á°ú¸¦ ¾ò±âÀ§ÇØ no-gzip°ú gzip-only-text/htmlÀ» °°ÀÌ »ç¿ëÇÒ ¼ö ÀÖ´Ù. ÀÌ °æ¿ì ÀüÀÚ°¡ ÈÄÀÚ¸¦ ¹«½ÃÇÑ´Ù. À§ ÀýÀÇ ¼³Á¤ ¿¹Á¦ ÀϺθ¦ »ìÆìº¸ÀÚ:

    BrowserMatch ^Mozilla/4 gzip-only-text/html
    BrowserMatch ^Mozilla/4\.0[678] no-gzip
    BrowserMatch \bMSIE !no-gzip !gzip-only-text/html

    ¸ÕÀú User-Agent ¹®ÀÚ¿­À» º¸°í Netscape Navigator ¹öÀü 4.xÀÎÁö °Ë»çÇÑ´Ù. ÀÌ ¹öÀüÀº text/htmlÀÌ ¾Æ´Ñ typeÀÇ ¾ÐÃàÀ» ó¸®ÇÏÁö ¸øÇÑ´Ù. ¹öÀü 4.06, 4.07, 4.08Àº html ÆÄÀÏ ¾ÐÃàÀ» ó¸®Çϴ´뵵 ¹®Á¦°¡ ÀÖ´Ù. ±×·¡¼­ ¿ì¸®´Â ÀÌ °æ¿ì deflate ÇÊÅ͸¦ ¿ÏÀüÈ÷ »ç¿ëÇÏÁö¾Ê´Â´Ù.

    ¼¼¹øÂ° BrowserMatch Áö½Ã¾î´Â Microsoft Internet Explorer°¡ ÀÚ½ÅÀ» "Mozilla/4"·Î ¾Ë¸®Áö¸¸ ¾ÐÃàµÈ ¿äûÀ» ó¸®ÇÒ ¼ö Àֱ⶧¹®¿¡ user agent ÃßÃøÀ» ¼öÁ¤ÇÑ´Ù. User-Agent Çì´õ¿¡¼­ "MSIE" (\b´Â "´Ü¾î °æ°è"¸¦ ¶æÇÑ´Ù) ¹®ÀÚ¿­À» ¹ß°ßÇÏ¸é ¾Õ¿¡¼­ ¼³Á¤ÇÑ Á¦¾àÀ» Ǭ´Ù.

    ÁÖÀÇ

    DEFLATE ÇÊÅÍ´Â Ç×»ó PHP³ª SSI¿Í °°Àº RESOURCE ÇÊÅÍ µÚ¿¡ µé¾î°£´Ù. ¶Ç, ³»ºÎ ÇÏÀ§¿äû(subrequest)¿¡ ¿µÇâÀ» ÁÖÁö ¾Ê´Â´Ù.

    ÁÖÀÇ

    SetEnv·Î force-gzip ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÏ¸é ºê¶ó¿ìÀúÀÇ accept-encoding ¼³Á¤À» ¹«½ÃÇÏ°í ¾ÐÃàµÈ °á°ú¸¦ º¸³½´Ù.

    Ãâ·Â ¾ÐÃàÇ®±â

    mod_deflate ¸ðµâÀº gzipÀ¸·Î ¾ÐÃàµÈ ÀÀ´ä ³»¿ëÀ» Ǫ´Â ÇÊÅ͵µ Á¦°øÇÑ´Ù. ÀÌ ±â´ÉÀ» »ç¿ëÇÏ·Á¸é ´ÙÀ½°ú °°ÀÌ SetOutputFilter³ª AddOutputFilter¸¦ »ç¿ëÇÏ¿© Ãâ·ÂÇÊÅͼø¼­¿¡ INFLATE ÇÊÅ͸¦ Ãß°¡ÇÑ´Ù.

    <Location /dav-area>
    ProxyPass http://example.com/
    SetOutputFilter INFLATE
    </Location>

    ÀÌ ¿¹Á¦´Â example.comÀÌ º¸³½ gzipÀ¸·Î ¾ÐÃàµÈ °á°úÀÇ ¾ÐÃàÀ» Ç®¾î¼­, ´Ù¸¥ ÇÊÅͰ¡ ´õ ó¸®ÇÒ ¼ö ÀÖµµ·Ï ÇÑ´Ù.

    ÀÔ·Â ¾ÐÃàÇ®±â

    mod_deflate ¸ðµâÀº gzipÀ¸·Î ¾ÐÃàµÈ ¿äû ³»¿ëÀ» Ǫ´Â ÇÊÅ͵µ Á¦°øÇÑ´Ù. ÀÌ ±â´ÉÀ» »ç¿ëÇÏ·Á¸é ´ÙÀ½°ú °°ÀÌ SetInputFilter³ª AddInputFilter¸¦ »ç¿ëÇÏ¿© ÀÔ·ÂÇÊÅͼø¼­¿¡ DEFLATE ÇÊÅ͸¦ Ãß°¡ÇÑ´Ù.

    <Location /dav-area>
    SetInputFilter DEFLATE
    </Location>

    ¿äû¿¡ Content-Encoding: gzip Çì´õ°¡ ÀÖ´Ù¸é ÀÚµ¿À¸·Î ¾ÐÃàµÈ ³»¿ëÀ» Ǭ´Ù. gzip ¿äûÀ» ÇÒ ¼ö ÀÖ´Â ºê¶ó¿ìÀú´Â µå¹°´Ù. ±×·¯³ª ¾î¶² WebDAV Ŭ¶óÀÌ¾ðÆ®¿Í °°Àº Ưº°ÇÑ ÇÁ·Î±×·¥Àº ¿äû ¾ÐÃàÀ» Áö¿øÇÑ´Ù.

    Content-Length¿¡ ´ëÇÑ ÁÖÀÇ

    ¿äû ³»¿ëÀ» Á÷Á¢ »ìÆìº»´Ù¸é, Content-Length Çì´õ¸¦ ¹ÏÁö¸¶¶ó! Content-Length Çì´õ´Â Ŭ¶óÀÌ¾ðÆ®°¡ º¸³½ ³»¿ëÀÇ ±æÀÌÀÌÁö, ¾ÐÃàÀ» Ǭ °á°úÀÇ ¹ÙÀÌÆ®¼ö°¡ ¾Æ´Ï´Ù.

    top

    ÇÁ·Ï½Ã ¼­¹ö ´Ù·ç±â

    mod_deflate ¸ðµâÀº ÇÁ·Ï½Ã°¡ ÀÚ½ÅÀÌ Ä³½¬ÇÑ ÀÀ´äÀ» ÀûÀýÇÑ Accept-Encoding ¿äû Çì´õ¸¦ º¸³½ Ŭ¶óÀÌ¾ðÆ®¿¡°Ô¸¸ º¸³»µµ·Ï Vary: Accept-Encoding HTTP ÀÀ´ä Çì´õ¸¦ Ãß°¡ÇÑ´Ù. ±×·¡¼­ ¾ÐÃàµÈ ³»¿ëÀ» ÀÌÇØÇÒ ¼ö ¾ø´Â Ŭ¶óÀÌ¾ðÆ®¿¡ ¾ÐÃàµÈ ³»¿ëÀ» º¸³»Áö¾Êµµ·Ï ÇÑ´Ù.

    ¿¹¸¦ µé¾î, User-Agent Çì´õ µî¿¡ µû¶ó Ưº°È÷ ÇÊÅÍ Àû¿ëÀ» Ãë¼ÒÇÑ´Ù¸é, ÇÁ·Ï½Ã¿¡°Ô ÀÌ·¯ÇÑ Á¦ÇÑÀ» ¾Ë·ÁÁÖ±âÀ§ÇØ Á÷Á¢ Vary Çì´õ¿¡ Ãß°¡ÇØ¾ß ÇÑ´Ù. ¿¹¸¦ µé¾î, ¼³Á¤ÀÌ User-Agent¿¡ µû¶ó DEFLATE ÇÊÅ͸¦ Ãß°¡ÇÑ´Ù¸é ´ÙÀ½À» »ç¿ëÇÑ´Ù:

    Header append Vary User-Agent

    ¿äû Çì´õ¿ÜÀÇ ´Ù¸¥ Á¤º¸¿¡ (¿¹¸¦ µé¾î, HTTP ¹öÀü) µû¶ó ¾ÐÃà ¿©ºÎ°¡ °áÁ¤µÈ´Ù¸é, Vary Çì´õ°ªÀ» *·Î ¼³Á¤ÇØ¾ß ÇÑ´Ù. ±×·¯¸é Ç¥ÁØÀ» µû¸£´Â ÇÁ·Ï½Ã´Â ij½¬¸¦ ÇÏÁö ¾Ê°Ô µÈ´Ù.

    ¿¹Á¦

    Header set Vary *

    top

    DeflateBufferSize Áö½Ã¾î

    ¼³¸í:zlibÀÌ Çѹø¿¡ ¾ÐÃàÇÒ Å©±â
    ¹®¹ý:DeflateBufferSize value
    ±âº»°ª:DeflateBufferSize 8096
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Extension
    ¸ðµâ:mod_deflate

    DeflateBufferSize Áö½Ã¾î´Â zlibÀÌ Çѹø¿¡ ¾ÐÃàÇÒ ¹ÙÀÌÆ®¼ö¸¦ ÁöÁ¤ÇÑ´Ù.

    top

    DeflateCompressionLevel Áö½Ã¾î

    ¼³¸í:Ãâ·ÂÀ» ¾î´ÀÁ¤µµ ¾ÐÃàÇϴ°¡
    ¹®¹ý:DeflateCompressionLevel value
    ±âº»°ª:Zlib's default
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Extension
    ¸ðµâ:mod_deflate
    Áö¿ø:¾ÆÆÄÄ¡ 2.0.45 ºÎÅÍ

    DeflateCompressionLevel Áö½Ã¾î´Â »ç¿ëÇÒ ¾ÐÃà¼öÁØÀ» ¼±ÅÃÇÑ´Ù. °ªÀÌ Å¬¼ö·Ï ¾ÐÃà·üÀÌ Áõ°¡ÇÏÁö¸¸, CPU¸¦ ´õ ¸¹ÀÌ »ç¿ëÇÑ´Ù.

    (°¡Àå ´ú ¾ÐÃà) 1°ú (°¡Àå ¸¹ÀÌ ¾ÐÃà) 9 »çÀÌÀÇ °ªÀ» ÁöÁ¤ÇÑ´Ù.

    top

    DeflateFilterNote Áö½Ã¾î

    ¼³¸í:¾ÐÃà·üÀ» ·Î±×¿¡ ±â·ÏÇÑ´Ù
    ¹®¹ý:DeflateFilterNote [type] notename
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Extension
    ¸ðµâ:mod_deflate
    Áö¿ø:typeÀº ¾ÆÆÄÄ¡ 2.0.4 ºÎÅÍ

    DeflateFilterNote Áö½Ã¾î´Â ¿äûÀÇ ¾ÐÃà·üÀ» ·Î±×¿¡ ±â·ÏÇÏ´Â ±âÈ£¸¦ ÁöÁ¤ÇÑ´Ù. ±âÈ£ À̸§Àº Áö½Ã¾î·Î ÁöÁ¤ÇÑ °ªÀÌ´Ù. Åë°è¸¦ À§ÇØ Á¢±Ù ·Î±×¿¡¼­ ±âÈ£¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    ¿¹Á¦

    DeflateFilterNote ratio

    LogFormat '"%r" %b (%{ratio}n) "%{User-agent}i"' deflate
    CustomLog logs/deflate_log deflate

    ·Î±×¿¡¼­ ´õ Á¤È®ÇÑ °ªÀ» ÃßÃâÇÏ·Á¸é type ¾Æ±Ô¸ÕÆ®·Î ±â·ÏÇÒ ÀڷḦ ¼±ÅÃÇÑ´Ù. type´Â ´ÙÀ½Áß ÇϳªÀÌ´Ù:

    Input
    ÇÊÅÍ ÀԷ½ºÆ®¸²ÀÇ ¹ÙÀÌÆ®¼ö¸¦ ÀúÀåÇÑ´Ù.
    Output
    ÇÊÅÍ Ãâ·Â½ºÆ®¸²ÀÇ ¹ÙÀÌÆ®¼ö¸¦ ÀúÀåÇÑ´Ù..
    Ratio
    ¾ÐÃà·üÀ» (output/input * 100) ÀúÀåÇÑ´Ù. type ¾Æ±Ô¸ÕÆ®¸¦ »ý·«ÇÏ¸é »ç¿ëÇÏ´Â ±âº»°ªÀÌ´Ù.

    ±×·¡¼­ ÀÌ·¸°Ô ·Î±×¿¡ ±â·ÏÇÒ ¼ö ÀÖ´Ù:

    Á¤¹ÐÇÑ ·Î±×

    DeflateFilterNote Input instream
    DeflateFilterNote Output outstream
    DeflateFilterNote Ratio ratio

    LogFormat '"%r" %{outstream}n/%{instream}n (%{ratio}n%%)' deflate
    CustomLog logs/deflate_log deflate

    Âü°í

    top

    DeflateInflateLimitRequestBody Áö½Ã¾î

    ¼³¸í:Maximum size of inflated request bodies
    ¹®¹ý:DeflateInflateLimitRequestBody value
    ±âº»°ª:None, but LimitRequestBody applies after deflation
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Extension
    ¸ðµâ:mod_deflate
    Áö¿ø:2.4.10 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    DeflateInflateRatioBurst Áö½Ã¾î

    ¼³¸í:Maximum number of times the inflation ratio for request bodies can be crossed
    ¹®¹ý:DeflateInflateRatioBurst value
    ±âº»°ª:DeflateInflateRatioBurst 3
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Extension
    ¸ðµâ:mod_deflate
    Áö¿ø:2.4.10 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    DeflateInflateRatioLimit Áö½Ã¾î

    ¼³¸í:Maximum inflation ratio for request bodies
    ¹®¹ý:DeflateInflateRatioLimit value
    ±âº»°ª:DeflateInflateRatioLimit 200
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    »óÅÂ:Extension
    ¸ðµâ:mod_deflate
    Áö¿ø:2.4.10 and later

    The documentation for this directive has not been translated yet. Please have a look at the English version.

    top

    DeflateMemLevel Áö½Ã¾î

    ¼³¸í:zlibÀÌ ¾ÐÃàÇÒ¶§ »ç¿ëÇÏ´Â ¸Þ¸ð¸®·®
    ¹®¹ý:DeflateMemLevel value
    ±âº»°ª:DeflateMemLevel 9
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Extension
    ¸ðµâ:mod_deflate

    DeflateMemLevel Áö½Ã¾î´Â zlibÀÌ ¾ÐÃàÇÒ¶§ ¾ó¸¶¸¸Å­ ¸Þ¸ð¸®¸¦ »ç¿ëÇÒÁö °áÁ¤ÇÑ´Ù. (1°ú 9 »çÀÌÀÇ °ª)

    top

    DeflateWindowSize Áö½Ã¾î

    ¼³¸í:Zlib ¾ÐÃà window size
    ¹®¹ý:DeflateWindowSize value
    ±âº»°ª:DeflateWindowSize 15
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Extension
    ¸ðµâ:mod_deflate

    DeflateWindowSize Áö½Ã¾î´Â zlib ¾ÐÃà window size¸¦ (1°ú 15 »çÀÌÀÇ °ª) ÁöÁ¤ÇÑ´Ù. ÀϹÝÀûÀ¸·Î window size°¡ Ŭ¼ö·Ï ¾ÐÃà·üÀÌ Áõ°¡ÇÑ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_reflector.html0000644000000000000500000000033613362070302017730 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_reflector.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_reflector.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_so.html.en0000644000000000000500000003324713412755316017007 0ustar rootsrc mod_so - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_so

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Loading of executable code and modules into the server at start-up or restart time
    Status:Extension
    Module Identifier:so_module
    Source File:mod_so.c
    Compatibility:This is a Base module (always included) on Windows

    Summary

    On selected operating systems this module can be used to load modules into Apache HTTP Server at runtime via the Dynamic Shared Object (DSO) mechanism, rather than requiring a recompilation.

    On Unix, the loaded code typically comes from shared object files (usually with .so extension), on Windows this may either be the .so or .dll extension.

    Warning

    Modules built for one major version of the Apache HTTP Server will generally not work on another. (e.g. 1.3 vs. 2.0, or 2.0 vs. 2.2) There are usually API changes between one major version and another that require that modules be modified to work with the new version.

    top

    Creating Loadable Modules for Windows

    Note

    On Windows, where loadable files typically have a file extension of .dll, Apache httpd modules are called mod_whatever.so, just as they are on other platforms. However, you may encounter third-party modules, such as PHP for example, that continue to use the .dll convention.

    While mod_so still loads modules with ApacheModuleFoo.dll names, the new naming convention is preferred; if you are converting your loadable module for 2.0, please fix the name to this 2.0 convention.

    The Apache httpd module API is unchanged between the Unix and Windows versions. Many modules will run on Windows with no or little change from Unix, although others rely on aspects of the Unix architecture which are not present in Windows, and will not work.

    When a module does work, it can be added to the server in one of two ways. As with Unix, it can be compiled into the server. Because Apache httpd for Windows does not have the Configure program of Apache httpd for Unix, the module's source file must be added to the ApacheCore project file, and its symbols must be added to the os\win32\modules.c file.

    The second way is to compile the module as a DLL, a shared library that can be loaded into the server at runtime, using the LoadModule directive. These module DLLs can be distributed and run on any Apache httpd for Windows installation, without recompilation of the server.

    To create a module DLL, a small change is necessary to the module's source file: The module record must be exported from the DLL (which will be created later; see below). To do this, add the AP_MODULE_DECLARE_DATA (defined in the Apache httpd header files) to your module's module record definition. For example, if your module has:

    module foo_module;

    Replace the above with:

    module AP_MODULE_DECLARE_DATA foo_module;

    Note that this will only be activated on Windows, so the module can continue to be used, unchanged, with Unix if needed. Also, if you are familiar with .DEF files, you can export the module record with that method instead.

    Now, create a DLL containing your module. You will need to link this against the libhttpd.lib export library that is created when the libhttpd.dll shared library is compiled. You may also have to change the compiler settings to ensure that the Apache httpd header files are correctly located. You can find this library in your server root's modules directory. It is best to grab an existing module .dsp file from the tree to assure the build environment is configured correctly, or alternately compare the compiler and link options to your .dsp.

    This should create a DLL version of your module. Now simply place it in the modules directory of your server root, and use the LoadModule directive to load it.

    top

    LoadFile Directive

    Description:Link in the named object file or library
    Syntax:LoadFile filename [filename] ...
    Context:server config, virtual host
    Status:Extension
    Module:mod_so

    The LoadFile directive links in the named object files or libraries when the server is started or restarted; this is used to load additional code which may be required for some module to work. Filename is either an absolute path or relative to ServerRoot.

    For example:

    LoadFile "libexec/libxmlparse.so"
    top

    LoadModule Directive

    Description:Links in the object file or library, and adds to the list of active modules
    Syntax:LoadModule module filename
    Context:server config, virtual host
    Status:Extension
    Module:mod_so

    The LoadModule directive links in the object file or library filename and adds the module structure named module to the list of active modules. Module is the name of the external variable of type module in the file, and is listed as the Module Identifier in the module documentation.

    For example:

    LoadModule status_module "modules/mod_status.so"

    loads the named module from the modules subdirectory of the ServerRoot.

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mpmt_os2.html.en0000644000000000000500000001744013412755316017264 0ustar rootsrc mpmt_os2 - Apache HTTP Server Version 2.4
    <-

    Apache MPM os2

    Available Languages:  en  |  fr 

    Description:Hybrid multi-process, multi-threaded MPM for OS/2
    Status:MPM
    Module Identifier:mpm_mpmt_os2_module
    Source File:mpmt_os2.c

    Summary

    The Server consists of a main, parent process and a small, static number of child processes.

    The parent process' job is to manage the child processes. This involves spawning children as required to ensure there are always StartServers processes accepting connections.

    Each child process consists of a pool of worker threads and a main thread that accepts connections and passes them to the workers via a work queue. The worker thread pool is dynamic, managed by a maintenance thread so that the number of idle threads is kept between MinSpareThreads and MaxSpareThreads.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_request.html.fr.utf80000644000000000000500000002364613412755316020752 0ustar rootsrc mod_request - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_request

    Langues Disponibles:  en  |  fr  |  tr 

    Description:Filtres permettant de traiter et de mettre à disposition les corps de requêtes HTTP
    Statut:Base
    Identificateur de Module:request_module
    Fichier Source:mod_request.c
    Compatibilité:Disponible depuis la version 2.3 d'Apache
    top

    Directive KeptBodySize

    Description:Conserve le corps de la requête à concurrence de la taille maximale spécifiée, pour une utilisation éventuelle par des filtres comme mod_include.
    Syntaxe:KeptBodySize taille maximale en octets
    Défaut:KeptBodySize 0
    Contexte:répertoire
    Statut:Base
    Module:mod_request

    Dans une situation normale, les gestionnaires de requête tels que le gestionnaire par défaut des fichiers statiques suppriment le corps de la requête s'il n'est pas nécessaire au gestionnaire de requête. Il en résulte que les filtres comme mod_include sont limités à des requêtes GET lors de l'inclusion d'autres URLs en tant que sous-requêtes, et ceci même si la requête originale était une requête POST, car le corps de la requête a été supprimé et n'est donc plus disponible une fois le traitement du filtre mis en oeuvre.

    Lorsque l'argument de cette directive a une valeur supérieure à zéro, les gestionnaires de requête qui suppriment habituellement les corps de requête vont alors conserver ces corps de requête, à concurrence de la taille maximale spécifiée, pour être éventuellement utilisés par des filtres. Dans le cas du filtre mod_include, une tentative de requête POST pour un fichier shtml statique se traduira par des sous-requêtes POST, et non par des sous-requêtes GET comme avant.

    Cette fonctionnalité permet de découper des pages web complexes et des applications web en petits éléments individuels, et de combiner ces éléments avec la structure de la page web sous-jacente en utilisant mod_include. Les éléments peuvent se présenter sous la forme de programmes CGI, de langages de scripts, ou d'URLs issues d'un mandataire inverse dans l'espace d'URL d'un autre serveur en utilisant mod_proxy.

    Note : Chaque requête dont le corps est ainsi conservé doit être enregistrée temporairement en mémoire vive jusqu'à la fin du traitement de la requête. Il faut donc s'assurer que la mémoire RAM du serveur est suffisante pour pouvoir supporter la charge induite. L'utilisation de cette directive doit être limitée à certaines portions de votre espace d'URL bien précises qui le nécessitent, et en spécifiant comme taille maximale une valeur la plus petite possible, mais tout de même suffisante pour un corps de requête.

    Si la taille de la requête envoyée par le client dépasse la taille maximale autorisée par cette directive, le serveur renverra l'erreur 413 Request Entity Too Large.

    Voir aussi

    Langues Disponibles:  en  |  fr  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dir.html.tr.utf80000644000000000000500000005642413447004010020040 0ustar rootsrc mod_dir - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_dir

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    Açıklama:Bölü çizgisiyle biten yönlendirmeleri yapar ve dizin içeriği dosyalarını sunar.
    Durum:Temel
    Modül Betimleyici:dir_module
    Kaynak Dosyası:mod_dir.c

    Özet

    Bir dizin içerik dosyası şu iki kaynaktan birinden gelebilir:

    • Kullanıcı tarafından yazılmış ve ismi genellikle index.html olan bir dosya. Dosya ismi DirectoryIndex yönergesi ile belirlenir. Bu, mod_dir modülü tarafından denetlenir.
    • Aksi takdirde içerik listesi sunucu tarafından üretilir. Bu, mod_autoindex modülü tarafından saÄŸlanır.

    Bu iki işlev tamamen birbirinden ayrıdır, dolayısıyla eğer isterseniz kendiliğinden dizin içerik listesi üretimini tamamen iptal edebilirsiniz.

    Sunucu http://example.com/filanca/birdizin şeklinde bir istek aldığında birdizin bir dizinin ismiyse ‘bölü çizgisiyle biten’ bir yönlendirme söz konusudur. Dizinler URL sonuna bir bölü çizgisi eklenmesini gerektirir, bu bakımdan mod_dir modülü isteği http://example.com/filanca/birdizin/ şeklinde yönlendirir.

    top

    DirectoryCheckHandler Yönergesi

    Açıklama:Başka bir eylemci yapılandırılmışsa bu modülün nasıl yanıt vereceğini belirler
    Sözdizimi:DirectoryCheckHandler On|Off
    Öntanımlı:DirectoryCheckHandler Off
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_dir
    Uyumluluk:2.4.8 ve sonrasında kullanılabilmektedir. 2.4 öncesi sürümler örtük olarak "DirectoryCheckHandler ON" belirtilmiş gibi davranır.

    DirectoryCheckHandler yönergesi, geçerli URL için başka bir eylemcinin yapılandırılmış olması durumunda, mod_dir modülünün index dosyaları için dizine mi bakacağını yoksa URL'nin sonuna bölü çizgisi mi ekleyeceğini belirler. Eylemciler SetHandler gibi yönergelerle atanabileceği gibi dizin işlemleri sırasında mod_rewrite gibi modüller tarafından da atanabilir.

    2.4 öncesi sürümlerde, bir URL için başka bir eylemcinin yapılandılmış olması durumunda bu modül herhangi bir eylemde bulunmaz ve sonuç olarak, tüm dizin için bir SetHandler belirtildiği durumda index dosyalarının sunulmasının yanında mod_rewrite gibi modüller de ayrıca bazı çelişkili sonuçlar oluşturabilir.

    top

    DirectoryIndex Yönergesi

    Açıklama:İstemci bir dizin istediğinde dizin içeriğini listeler.
    Sözdizimi:DirectoryIndex disabled | yerel-url [yerel-url] ...
    Öntanımlı:DirectoryIndex index.html
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_dir

    DirectoryIndex yönergesi, istemci, dizinin sonuna bir bölü çizgisi ekleyerek dizin içeriğinin listelenmesini istediğinde bakılmak üzere özkaynakları listeler. yerel-url, sunucu üstünde istenen dizine göreli bir belgenin URL’sidir; normal olarak dizin içindeki bir dosyanın ismidir. Çeşitli URL’ler verilebilirse de sunucu daima ilk bulduğuyla dönecektir. Eğer özkaynakların hiçbiri yoksa ve Indexes seçeneği atanmışsa sunucu dizin içeriğinden bir liste üretecektir.

    DirectoryIndex index.html

    Bu yapılandırmadan sonra yapılan bir http://sunucum/belgeler/ isteğine karşılık, sunucu, mevcutsa http://sunucum/belgeler/index.html dosyasını döndürecek, değilse ürettiği dizin içerik listesini gönderecektir.

    Belgelerin dizine göreli olmasının gerekmediğine dikkat ediniz.

    DirectoryIndex index.html index.txt  /cgi-bin/index.pl

    Bu örnekte ise dizin içinde ne index.html ne de index.txt mevcut olduğunda /cgi-bin/index.pl CGI betiği çalıştırılacaktır.

    disabled değeri tek başına mod_dir’in bir dizin listesi aramasını engeller. disabled değiştirgesi öncesinde ve sonrasında başka bir değiştirge hatta bir disabled daha olsa bile sadece bir disabled verilmiş gibi yorumlanır.

    Bilginize: Aynı bağlamdaki çok sayıda DirectoryIndex yönergesi bir öncekini değiştirmek yerine onun bulunduğu listeye eklenir:

    # 1. örnek: İçerik dosyası olarak index.html atayıp sonraki satırda buna
    # index.php'yi ekleyebilirsiniz.
    <Directory "/foo">
        DirectoryIndex index.html
        DirectoryIndex index.php
    </Directory>
    
    # 2. Örnek: Atamaların tet bir satırda yapıldığı bu örnek 1. örneğe denktir.
    <Directory "/foo">
        DirectoryIndex index.html index.php
    </Directory>
    
    # 3. Örnek: Listeyi tamamen değiştirmek için, listeyi önce sıfırlamalısınız:
    # Bu örnekte içerik dosyası olarak listede sadece index.php kalır.
    <Directory "/foo">
        DirectoryIndex index.html
        DirectoryIndex disabled
        DirectoryIndex index.php
    </Directory>
    top

    DirectoryIndexRedirect Yönergesi

    Açıklama:Dizin içerik listeleri için harici bir yönlendirme yapılandırır.
    Sözdizimi:DirectoryIndexRedirect on | off | permanent | temp | seeother | 3xx-kodu
    Öntanımlı:DirectoryIndexRedirect off
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_dir
    Uyumluluk:Apache HTTP Sunucusunun 2.3.14 ve sonraki sürümlerinde kullanılabilmektedir.

    Öntanımlı olarak, DirectoryIndex listeyi istemciye şeffaf olarak seçip gönderir. DirectoryIndexRedirect ise harici bir yönlendirmeye sebep olur.

    Bunlardan biri kullanılabilir:

    • on: Dizin listesi kaynağına bir 302 yönlendirmesi yapılır.
    • off: Bir yönlendirme yapılmaz. mod_dir için eski davranış böyleydi.
    • permanent: Dizin listesi kaynağına bir 301 (kalıcı) yönlendirmesi yapılır.
    • temp: Bu on ile aynı etkiye sahiptir.
    • seeother: Dizin listesi kaynağına bir 303 yönlendirmesi ("diÄŸerine bak" olarak da bilinir)yapılır.
    • 3xx-code: 3xx kodu ile seçilen yönlendirme yapılır.

    Örnek

    DirectoryIndexRedirect on

    http://example.com/docs/ için yapılan bir istek, http://example.com/docs/index.html (mevcutsa) adresine geçici bir yönlendirme döndürür.

    top

    DirectorySlash Yönergesi

    Açıklama:Bölü çizgisi ile biten yönlendirmeleri açar/kapar.
    Sözdizimi:DirectorySlash On|Off
    Öntanımlı:DirectorySlash On
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_dir

    DirectorySlash yönergesi, bir dizin isteğinde bulunan URL’lerin sonuna mod_dir modülü tarafından bir bölü çizgisi eklenip eklenmeyeceğini belirler.

    Normalde, bir kullanıcı sona bir bölü çizgisi eklemeden bir dizin için istekte bulunursa mod_dir zaten onu aynı özkaynağa yönlendirir, fakat isteğin sonuna bir bölü çizgisi eklenmesinin bazı iyi sebepleri vardır:

    • Kullanıcı bunun sonucunda meÅŸru bir URL ile istekte bulunmuÅŸ olur.
    • mod_autoindex gerektiÄŸi gibi çalışır. Yoksa baÄŸlantıdaki yolu sunamayacağından yanlış yolu gösterirdi.
    • DirectoryIndex yönergesi sadece bölü çizgisi ile biten dizin istekleri için deÄŸerlendirilir.
    • HTML sayfa içindeki göreli URL baÅŸvuruları gerektiÄŸi gibi çalışacaktır.

    Siz yine de bu etkiyi istemezseniz ve yukarıdaki sebepler de size uygun değilse yönlendirmeyi aşağıdaki gibi kapatabilirsiniz. Ancak bunu yaparken dikkatli olun, bununla ilgili bazı güvenlik sorunları olasılığı vardır.

    # Aşağıdaki güvenlik uyarısına bakınız!
    <Location "/bir/yol">
    DirectorySlash Off
    SetHandler bir-eylemci
    </Location>

    Güvenlik Uyarı

    Bölü çizgisi ile biten yönlendirmelerin kapatılması bir bilginin istemeyek açığa çıkmasına sebep olabilir. mod_autoindex modülünün etkin olduğunu (Options +Indexes) ve DirectoryIndex ile geçerli bir özkaynağın (index.html olsun) atandığını ama bu URL için başka hiçbir özel eylemci tanımlanmadığını varsayalım. Bu durumda bölü çizgisi ile biten bir istek olduğunda index.html dosyası sunulurdu. Fakat bölü çizgisi ile bitmeyen bir istek dizin içeriğinin listelenmesi ile sonuçlanırdı.

    Bir yönlendirme sözkonusu olduğunda bazı tarayıcıların yanlışlıkla POST isteklerini GET istekleri haline getirme (böylece POST verisi iptal olur) olasılığı olduğuna da dikkat edin.

    top

    FallbackResource Yönergesi

    Açıklama:Bir dosya ile eşleşmeyen istekler için öntanımlı URL tanımlar
    Sözdizimi:FallbackResource disabled | yerel-url
    Öntanımlı:disabled - httpd 404 döndürecektir (Yok)
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:Indexes
    Durum:Temel
    Modül:mod_dir
    Uyumluluk:disabled değiştirgesi 2.4.4 sürümü ve sonrasında kullanılabilmektedir.

    Dosya sisteminde bulunmayan bir dosya için istek yapıldığında HTTP'nin 404 (Yok) hatasını döndürmemesi için sunulacak dosyanın yolunu tanımlar. Örnek:

    FallbackResource /not-404.php

    Bu satırla, (mevcut dosyaları etkilemeden) mevcut olmayan dosyaların yerine not-404.php dosyası sunulacaktır.

    Belli bir dizindeki mevcut bir dosya veya betik için yapılanlar dışındaki tüm isteklerin tek bir dosya veya özkaynakla yerine getirilmesi sıkça istenen bir durum olup bu mekanizmaya 'ön denetleyici' adı verilir.

    httpd'nin önceki sürümlerinde bir dosya veya dizinin varlığının sınanması için genellikle mod_rewrite modülü ve -f ve -d kullanımı gerekirdi. Bunun için şimdi tek satırlık bir yapılandırma yeterli olmaktadır.

    FallbackResource /index.php

    Resim, CSS dosyaları gibi mevcut dosyalar normal olarak sunulur.

    Üst dizinden hiçbir şeyin miras alınmaması isteniyorsa bu özelliği kapatmak için disabled değiştirgesini kullanın.

    http://example.com/blog/ gibi bir alt URI yerel-url olarak sağlanır:

    <Directory "/web/example.com/htdocs/blog">
      FallbackResource /blog/index.php
    </Directory>

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_alias.html.tr.utf80000644000000000000500000011653013447004010020346 0ustar rootsrc mod_alias - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_alias

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    Açıklama:Belge ağacının parçalarının dosya sisteminin parçalarıyla eşlenmesini sağlar ve URL yönlendirmesi yapar.
    Durum:Temel
    Modül Betimleyici:alias_module
    Kaynak Dosyası:mod_alias.c

    Özet

    Bu modülde bulunan yönergeler sunucuya istek olarak gelen URL’lerin denetlenmesini ve değiştirilmesini mümkün kılar. Alias ve ScriptAlias yönergeleri URL’lerin dosya sisteminin dizinlerine eşlenmesini sağlar. Böylece, kök dizini DocumentRoot ile belirtilen site belge ağacı altında bulunmayan içeriğe erişmek mümkün olur. ScriptAlias yönergesi buna ek olarak hedef dizini sadece CGI betiklerini içeren dizin olarak imler.

    Redirect yönergesi, farklı bir URL ile yeni bir istek yapmaları için istemcileri yönlendirmekte kullanılır. Çoğunlukla özkaynak başka bir yere taşındığında kullanılır.

    Alias, ScriptAlias ve Redirect yönergeleri <Location> veya <LocationMatch> bölümleri içinde kullanıldığında hedef yolu veya URL'yi betimlemek için ifade sözdizimi kullanılabilir.

    mod_alias modülü basit URL değiştirme görevlerini yerine getirmek için tasarlanmıştır. Sorgu dizgelerini işleme sokmak gibi daha karmaşık görevler için mod_rewrite modülü ile sağlanan araçlar kullanılır.

    top

    İşlem Sırası

    Farklı bağlamlarda bulunan Alias ve Redirect yönergeleri standart katıştırma kuralları ile ilgili diğer yönergeler gibi işleme sokulur. Fakat aynı bağlam dahilinde (örneğin, aynı <VirtualHost> bölümünde) çok fazla Alias ve Redirect varsa bunlar belli bir sıraya göre işleme sokulurlar.

    İlk adımda, Alias’lardan önce bütün Redirect yönergeleri işleme sokulur. Bu bakımdan bir Redirect veya RedirectMatch ile eşleşen bir istek için hiçbir Alias uygulanmayacaktır. İkinci adımda yapılandırma dosyasında yer aldıkları sıraya göre Redirect ve Alias yönergeleri işleme sokulurlar, dolayısıyla ilk eşleşme öncelikli olmuş olur.

    İlk eşleşmenin öncelikli olması sebebiyle, bu yönergelerin birden fazlası aynı alt yola uygulandığı takdirde, tüm yönergelerin etkili olabilmesi için en uzun yolu sıralamada en öne almalısınız. Örneğin aşağıdaki yapılandırma beklendiği gibi çalışacaktır:

    Alias "/foo/bar" "/baz"
    Alias "/foo" "/gaq"

    Ama yukarıdaki iki satır ters sırada yerleştirilmiş olsaydı, /foo rumuzu daima /foo/bar rumuzundan önce eşleşecek, dolayısıyla ikinci yönerge yok sayılacaktı.

    Alias, ScriptAlias ve Redirect yönergeleri <Location> veya <LocationMatch> bölümleri içinde kullanıldığında bu yönergeler küresel olarak tanımlı Alias, ScriptAlias ve Redirect yönergelerinden öncelikli olur.

    top

    Alias Yönergesi

    Açıklama:URL’leri dosya sistemi konumlarıyla eşler.
    Sözdizimi:Alias [URL-yolu] dosya-yolu | dizin-yolu
    BaÄŸlam:sunucu geneli, sanal konak, dizin
    Durum:Temel
    Modül:mod_alias

    Alias yönergesi, belgelerin DocumentRoot dizininden farklı bir yerde saklanmasını mümkün kılar. URL-yolu ile başlayan URL’ler (% imlemesi çözüldükten sonra) dizin-yolu ile başlayan yerel dosyalarla eşlenir. URL-yolu, harf büyüklüğüne duyarsız sistemlerde bile harf büyüklüğüne duyarlıdır.

    Alias "/image" "/ftp/pub/image"

    http://example.com/image/foo.gif şeklinde bir istek, sunucunun /ftp/pub/image/foo.gif dosyasıyla yanıt vermesine sebep olurdu. Sadece tam yol parçaları eşleştirilir; bu bakımdan yukarıdaki Alias yapılandırması http://example.com/imagefoo.gif ile eşleşmez. Düzenli ifadelerin kullanıldığı daha karmaşık eşleşmeler için AliasMatch yönergesine bakınız.

    URL-yolu’nu bir / ile sonlandırırsanız Alias yönergesini yorumlarken sunucunun da sona bir / ekleyeceğine dikkat ediniz. Yani, eğer

    Alias "/icons/" "/usr/local/apache/icons/"

    diye bir tanım yaparsanız sona bir / ekleme ihtiyacından dolayı /icons URL’si için bir Alias kullanılmayacaktır.

    Alias hedefleri için ek <Directory> bölümleri belirtmeniz gerekebileceğine dikkat ediniz. <Directory> bölümlerinden önce yer alan Alias yönergelerine özellikle bakılır, dolayısıyla sadece Alias hedefleri etkilenir. (Bununla birlikte, Alias yönergelerinden önce işleme sokulan <Location> bölümlerinin uygulanacağına dikkat ediniz.)

    Özellikle, DocumentRoot dışında bir dizine bir Alias oluşturuyorsanız hedef dizine doğrudan erişim izni vermeniz gerekebilir.

    Alias "/image" "/ftp/pub/image"
    <Directory "/ftp/pub/image">
        Require all granted
    </Directory>

    URL-yolu değiştirgesindeki bölü çizgilerinin sayısı istek URL-yolundakiler kadardır.

    Eğer Alias yönergesi <Location> veya <LocationMatch> bölümleri içinde kullanılırsa URL-yolu yoksayılır ve dosya-yolu ifade sözdizimi kullanılarak yorumlanır.
    Bu sözdizimi Apache 2.4.19 ve sonrasında kulanılabilir.

    <Location "/image">
        Alias "/ftp/pub/image"
    </Location>
    <LocationMatch "/error/(?<NUMBER>[0-9]+)">
        Alias "/usr/local/apache/errors/%{env:MATCH_NUMBER}.html"
    </LocationMatch>
    top

    AliasMatch Yönergesi

    Açıklama:URL’leri dosya sistemi konumlarıyla düzenli ifadeleri kullanarak eşler.
    Sözdizimi:AliasMatch "düzenli-ifade" "dosya-yolu|dizin-yolu"
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Temel
    Modül:mod_alias

    Bu yönerge URL-yolu ile eşleşmek üzere bir düzenli ifade kabul etmesi dışında Alias yönergesine eşdeğerdir. Belirtilen düzenli ifade URL-yolu ile eşleşiyorsa sunucu parantezli eşleşmeleri belirtilen dizgede kullanarak dosya yolunu elde eder. Örneğin, /icons dizinini etkinleştirmek için şu yazılabilir:

    AliasMatch "^/icons(.*)" "/usr/local/apache/icons$1"

    Düzenli ifadelerin tamamı kullanılabilmektedir. Örneğin, URL-yolu ile harf büyüklüğüne duyarsız eşleşmeler sağlayacak takma adlar kullanılabilir:

    AliasMatch "(?i)^/image(.*)" "/ftp/pub/image$1"

    Alias ve AliasMatch yönergeleri arasındaki başlıca fark Alias yönergesinin, URI'nin ek parçasını, eşleşen parçayı geçip sağ tarafta dosya yolunun ucuna kendiliğinden kopyalamasıdır. AliasMatch bunu böyle yapmaz. Yani hemen her durumda, düzenli ifadenin istenen URI'nin tamamıyla baştan sona eşleşmesi ve yer değiştirmeyi sağ tarafta yapması istenir.

    Başka bir deyişle, basitçe Alias yerine AliasMatch yazmakla aynı etkiyi alamazsınız. En azından düzenli ifadenin başına bir ^ ve sonuna bir (.*)$, ikinci değiştirgenin sonuna da bir $1 eklemeniz gerekir.

    Örneğin aşağıdakini AliasMatch ile değiştirmek isteyelim:

    Alias "/image/" "/ftp/pub/image/"

    Bu eşdeğer DEĞİLdir - bunu yapmayın! Bu herhangi bir yerinde /image/ dizgesi bulunan tüm istekleri /ftp/pub/image/ altına gönderecektir:

    AliasMatch "/image/" "/ftp/pub/image/"

    Aynı etkiyi elde etmek için bu gerekiyor:

    AliasMatch "^/image/(.*)$" "/ftp/pub/image/$1"

    Şüphesiz, Alias yönergesini çalıştığı yerde AliasMatch kullanmanın hiç gereği yoktur. AliasMatch daha karmaşık şeyler yapmamızı sağlar. Örneğin farklı dosya çeşitlerini farklı dizinlerden sunmak isteyelim:

    AliasMatch "^/image/(.*)\.jpg$" "/files/jpg.images/$1.jpg"
    AliasMatch "^/image/(.*)\.gif$" "/files/gif.images/$1.gif"

    İstek URL'sinin başındaki bölü çizgileri, bu modüldeki yönergeler istek URL-yolu ile eşleştirilmeye çalışılmadan önce sunucu tarafından yokedilir.

    top

    Redirect Yönergesi

    Açıklama:İstemciyi, bir yönlendirme isteği döndürerek farklı bir URL’ye yönlendirir.
    Sözdizimi:Redirect [durum] [URL-yolu] URL
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Temel
    Modül:mod_alias

    Redirect yönergesi istemciye bir yönlendirme isteği döndürerek eski URL’yi yenisiyle eşler.

    Eski URL-yolu bir bölü çizgisi ile başlar ve harf büyüklüğüne duyarlıdır (% imlemesi çözüldükten sonra). URL-yolu olarak göreli yollara izin verilmez.

    URL ise ya bir şema ve konak ismi ile başlayan bir mutlak URL ya da bir bölü çizgisi ile başlayan bir URL yolu olabilir. İkinci durumda URL yolunun başına geçerli sunucu ismi ve şemayı sunucu ekler.

    URL-yolu ile başlayan istekler istemciye hedef URL konumuna bir yönlendirme isteği olarak dönecektir. URL-yolu’nun devamı niteliğindeki ek yol hedef URL’ye eklenir.

    # Farklı bir konaktaki bir URL'ye yönlendirme
    Redirect "/hizmet" "http://iki.example.com/hizmet"
    
    # Aynı konak üzerinde yönlendirme
    Redirect "/bir" "/iki"

    İstemcinin yaptığı http://example.com/hizmet/fesmekan.txt isteğine karşılık istemciye isteği http://iki.example.com/hizmet/fesmekan.txt olarak yapması söylenecektir. Bu GET isteklerinde de geçerlidir. Örneğin, http://example.com/hizmet/foo.pl?q=23&a=42 isteği http://iki.example.com/hizmet/foo.pl?q=23&a=42 adresine yönlendirilir. POST'ların iptal edileceğini unutmayın.
    Sadece tam yol parçaları eşleştirilir, bu nedenle http://example.com/hizmetfesmekan.txt isteği yukarıdaki yönlendirme ile eşleşmeyecektir. İfade sözdizimi kullanılan daha karmaşık eşleşmeler için URL-yolu seçeneği aşağıda açıklandığı gibi yoksayılır. Düzenli ifadelerin kullanıldığı daha karmaşık eşleşmeler için RedirectMatch yönergesine de bakınız.

    Bilginize

    Yapılandırma dosyasında yer alış sırasına bakmaksızın Redirect yönergeleri Alias ve ScriptAlias yönergelerinden önce ele alınır. <Location> bölümü içinde kullanılmış bir Redirect yönergesi URL-yolu belirtilmiş Redirect ve Alias yönergelerine göre önceliklidir.

    Herhangi bir durum belirtilmemişse "geçici" yönlendirme (HTTP durum kodu: 302) yapılır. Bu, istemciye özkaynağın geçici olarak başka yere taşındığını belirtir. Diğer HTTP durum kodlarını döndürmek için kullanılabilecek durum değerleri:

    permanent
    İstemciye özkaynağın kalıcı olarak taşındığını belirten kalıcı yönlendirme durumu (301) döndürülür.
    temp
    İstemciye geçici yönlendirme durumu (302) döner. Bu öntanımlıdır.
    seeother
    İstemciye özkaynağın yerine başka bir şey konduğunu belirten "diğerine bak" durumu (303) döndürülür.
    gone
    İstemciye özkaynağın kalıcı olarak kaldırıldığını belirten "ölü bağlantı" durumu (410) döner. Bu durumda URL belirtilmez.

    Diğer durum kodları için durum değiştirgesiyle sayısal durum kodu belirtilir. Eğer durum 300 ile 399 arasındaysa bir URL belirtmek gereklidir. Aksi takdirde, URL bileşeni ihmal edilmelidir. Belirtilecek durum kodunun geçerli bir HTTP Status kodu olmalı ve Apache HTTP Sunucusu kodu bilmelidir (http_protocol.c dosyasında bulunan send_error_response işlevine bakınız).

    Redirect permanent "/bir" "http://example.com/iki"
    Redirect 30" "/yedi" http://example.com/baskabisey"

    Eğer Redirect yönergesi URL-yolu belirtilmemiş bir <Location> veya <LocationMatch> bölümü içinde yer alıyorsa, URL seçeneği ifade sözdizimi kullanılarak yorumlanır.
    Bu sözdizimi Apache 2.4.19 ve sonrasında kullanılabilir.

    <Location "/bir">
        Redirect permanent "http://example.com/iki"
    </Location>
    <Location "/yedi">
        Redirect 303 "http://example.com/baskabisey"
    </Location>
    <LocationMatch "/error/(?<NUMBER>[0-9]+)">
        Redirect permanent "http://example.com/errors/%{env:MATCH_NUMBER}.html"
    </LocationMatch>
    top

    RedirectMatch Yönergesi

    Açıklama:Geçerli URL ile eşleşen bir düzenli ifadeye dayanarak bir harici yönlendirme gönderir.
    Sözdizimi:RedirectMatch [durum] düzenli-ifade URL
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Temel
    Modül:mod_alias

    Bu yönerge URL-yolu ile eşleşmek üzere bir düzenli ifade kabul etmesi dışında Redirect yönergesine eşdeğerdir. Belirtilen düzenli ifade URL-yolu ile eşleşiyorsa sunucu parantezli eşleşmeleri belirtilen dizgede kullanarak dosya yolunu elde eder. Örneğin, tüm GIF dosyası isteklerini başka bir sunucudaki aynı isimli JPEG dosyalarına yönlendirmek için şu yazılabilir:

    RedirectMatch "(.*)\.gif$" "http://baska.example.com$1.jpg"

    Alias ve AliasMatch arasındaki farklarla ilgili hususlar Redirect ve RedirectMatch arasındakilere de uygulanır. Ayrıntılar için AliasMatch yönergesine bakınız.

    top

    RedirectPermanent Yönergesi

    Açıklama:İstemciyi, kalıcı bir yönlendirme isteği döndürerek farklı bir URL’ye yönlendirir.
    Sözdizimi:RedirectPermanent URL-yolu URL
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Temel
    Modül:mod_alias

    Bu yönerge istemciye daima kalıcı yönlendirme durumu (301) döndürür. Yani, Redirect permanent ile aynı işi yapar.

    top

    RedirectTemp Yönergesi

    Açıklama:İstemciyi, geçici bir yönlendirme isteği döndürerek farklı bir URL’ye yönlendirir.
    Sözdizimi:RedirectTemp URL-yolu URL
    BaÄŸlam:sunucu geneli, sanal konak, dizin, .htaccess
    Geçersizleştirme:FileInfo
    Durum:Temel
    Modül:mod_alias

    Bu yönerge istemciye daima geçici yönlendirme durumu (302) döndürür. Yani, Redirect temp ile aynı işi yapar.

    top

    ScriptAlias Yönergesi

    Açıklama:Bir URL’yi dosya sistemindeki bir yere eşler ve hedefi bir CGI betiği olarak çalıştırır.
    Sözdizimi:ScriptAlias [URL-yolu] dosya-yolu|dizin-yolu
    BaÄŸlam:sunucu geneli, sanal konak, dizin
    Durum:Temel
    Modül:mod_alias

    Hedef dizini, mod_cgi modülünün CGI betiği yorumlayıcısı tarafından çalıştırılacak betikleri içeren dizin olarak imlemesi dışında Alias yönergesinin yaptığı işi yapar. URL-yolu ile başlayan harf büyüklüğüne duyarlı URL’ler (% imlemesi çözüldükten sonra), dosya sistemindeki bir tam yol olarak belirtilmiş dizin-yolu ile başlayan betiklerle eşlenir.

    ScriptAlias "/cgi-bin/" "/siteler/cgi-bin/"

    http://example.com/cgi-bin/foo şeklindeki bir istek sunucunun /siteler/cgi-bin/foo betiğini çalıştırmasına sebep olur. Bu yapılandırma aslında şuna eşdeğerdir:

    Alias "/cgi-bin/" "/siteler/cgi-bin/"
    <Location "/cgi-bin">
        SetHandler cgi-script
        Options +ExecCGI
    </Location>

    ScriptAlias yönergesini bir betik veya eylemci ile birlikte de kullanabilirsiniz. Örnek:

    ScriptAlias "/cgi-bin/" "/siteler/cgi-handler.pl"

    Bu senaryoda /cgi-bin/’den istenen tüm dosyalar sizin belirttiğiniz dosya tarafından işleme sokulacaktır. Bu yöntemle kendi özel eylemcinizi kullanabilirsiniz. İsterseniz, bunu içerik eklemek ya da ısmarlama bir eylem için bir CGI sarmalayıcısı olarak da kullanabilirsiniz.

    Yapılandırma değiştiğinde kaynak kodlarının ister istemez açığa çıkmasını istemiyorsanız CGI betiklerinizi DocumentRoot altına koymayınız. ScriptAlias yönergesi URL’yi doğru yere eşlemekten başka orayı bir CGI betikleri dizini olarak imler. CGI betiklerinizi DocumentRoot altına koyarsanız çalıştırmak için ScriptAlias değil, <Directory>, SetHandler ve Options yönergelerini örnekteki gibi kullanın:
    <Directory "/usr/local/apache2/htdocs/cgi-bin" >
        SetHandler cgi-script
        Options ExecCGI
    </Directory>
    Aynı dosya sistemi konumu ile çok sayıda URL-yolu eşleşebileceğinden, bir Directory bölümü ile sınırlanmadığı takdirde CGI betiklerinin kaynak kodları açığa çıkabilir; bu bakımdan ScriptAlias yönergesini yok sayan URL yollarının belirtilebilme olasılığı gözardı edilmemelidir.

    Eğer ScriptAlias yönergesi URL-yolu belirtilmemiş bir <Location> veya <LocationMatch> bölümü içinde yer alıyorsa, URL seçeneği ifade sözdizimi kullanılarak yorumlanır.
    Bu sözdizimi Apache 2.4.19 ve sonrasında kullanılabilir.

    <Location "/cgi-bin">
        ScriptAlias "/siteler/cgi-bin/"
    </Location>
    <LocationMatch "/cgi-bin/errors/(?<NUMBER>[0-9]+)">
        ScriptAlias "/siteler/cgi-bin/errors/%{env:MATCH_NUMBER}.cgi"
    </LocationMatch>

    Ayrıca bakınız:

    top

    ScriptAliasMatch Yönergesi

    Açıklama:Bir URL’yi dosya sistemindeki bir yere düzenli ifade kullanarak eşler ve hedefi bir CGI betiği olarak çalıştırır.
    Sözdizimi:ScriptAliasMatch düzenli-ifade dosya-yolu|dizin-yolu
    BaÄŸlam:sunucu geneli, sanal konak
    Durum:Temel
    Modül:mod_alias

    Bu yönerge URL-yolu ile eşleşmek üzere bir düzenli ifade kabul etmesi dışında ScriptAlias yönergesine eşdeğerdir. Belirtilen düzenli ifade URL-yolu ile eşleşiyorsa sunucu parantezli eşleşmeleri belirtilen dizgede kullanarak dosya yolunu elde eder. Örneğin, standart /cgi-bin dizinini etkin kılmak için şu yazılabilir:

    ScriptAliasMatch "^/cgi-bin(.*)" "/usr/local/apache/cgi-bin$1"

    AliasMatch yönergesindeki gibi, düzenli ifadelerin tamamı tüm güçleriyle kullanılabilmektedir. Örneğin, URL-yolu için harf büyüklüğüne duyarsız eşleşmeli bir takma ad oluşturmak mümkünür:

    ScriptAliasMatch "(?i)^/cgi-bin(.*)" "/usr/local/apache/cgi-bin$1"

    Alias ve AliasMatch arasındaki farklarla ilgili hususlar ScriptAlias ve ScriptAliasMatch arasındakilere de uygulanır. Ayrıntılar için AliasMatch yönergesine bakınız.

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_privileges.html.fr.utf80000644000000000000500000010135313434266145021424 0ustar rootsrc mod_privileges - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_privileges

    Langues Disponibles:  en  |  fr 

    Description:Support des privilèges de Solaris et de l'exécution des serveurs virtuels sous différents identifiants utilisateurs.
    Statut:Expérimental
    Identificateur de Module:privileges_module
    Fichier Source:mod_privileges.c
    Compatibilité:Disponible depuis la version 2.3 d'Apache sur les plates-formes Solaris 10 et OpenSolaris

    Sommaire

    Ce module permet l'exécution de différents serveurs virtuels sous différents identifiants Unix User et Group, et avec différents Privilèges Solaris. En particulier, il apporte au problème de séparation des privilèges entre les différents serveurs virtuels la solution que devait apporter le module MPM abandonné perchild. Il apporte aussi d'autres améliorations en matière de sécurité.

    À la différence de perchild, mod_privileges n'est pas un module MPM. Il travaille au sein d'un modèle de traitement pour définir les privilèges et les User/Group pour chaque requête dans un même processus. Il n'est donc pas compatible avec les MPM threadés, et refusera de s'exécuter en cas d'utilisation d'un de ces derniers.

    mod_privileges traite des problèmes de sécurité similaires à ceux de suexec ; mais à la différence de ce dernier, il ne s'applique pas seulement aux programmes CGI, mais à l'ensemble du cycle de traitement d'une requête, y compris les applications in-process et les sous-processus. Il convient particulièrement à l'exécution des applications PHP sous mod_php, qui est lui-même incompatible avec les modules MPM threadés. Il est également bien adapté aux autres applications de type script in-process comme mod_perl, mod_python, et mod_ruby, ainsi qu'aux applications en langage C telles que les modules Apache pour lesquels la séparation des privilèges constitue un problème.

    top

    Considérations à propos de sécurité

    mod_privileges introduit de nouveaux problèmes de sécurité dans les situations où du code non sûr peut s'exécuter à l'intérieur du processus du serveur web. Ceci s'applique aux modules non sûrs, et aux scripts s'exécutant sous des modules comme mod_php ou mod_perl. Les scripts s'exécutant en externe (comme par exemple les scripts CGI ou ceux s'exécutant sur un serveur d'applications derrière mod_proxy ou mod_jk) ne sont pas concernés.

    Les principaux problèmes de sécurité que l'on rencontre avec mod_privileges sont :

    • L'exécution sous un utilisateur système pose les mêmes problèmes de sécurité que mod_suexec, et pratiquement les mêmes que cgiwrap et suphp.
    • Une extension utilisateur (module ou script) malveillante, écrite en connaissant les mécanismes utilisés par mod_privileges, pourrait élever ses privilèges à tout niveau accessible au processus httpd dans tout serveur virtuel. Ceci introduit de nouveaux risques si (et seulement si) mod_privileges est compilé avec l'option BIG_SECURITY_HOLE.
    • Une extension utilisateur (module ou script) malveillante, écrite en connaissant les mécanismes utilisés par mod_privileges, pourrait élever ses privilèges pour s'attribuer l'identifiant utilisateur d'un autre utilisateur (et/ou groupe) système.

    La directive PrivilegesMode vous permet de sélectionner soit le mode FAST, soit le mode SECURE. Vous pouvez panacher les modes en utilisant par exemple le mode FAST pour les utilisateurs de confiance et les chemins contenant du code entièrement audité, tout en imposant le mode SECURE où un utilisateur non sûr a la possibilité d'introduire du code.

    Avant de décrire les modes, il nous faut présenter les cas d'utilisation de la cible : "Benign" ou "Hostile". Dans une situation "Benign", vous voulez séparer les utilisateurs pour leur confort, et les protéger, ainsi que le serveur, contre les risques induits par les erreurs involontaires. Dans une situation "Hostile" - par exemple l'hébergement d'un site commercial - il se peut que des utilisateurs attaquent délibérément le serveur ou s'attaquent entre eux.

    Mode FAST
    En mode FAST, les requêtes sont traitées "in-process" avec les uid/gid et privilèges sélectionnés, si bien que la surcharge est négligeable. Ceci convient aux situations "Benign", mais n'est pas sécurisé contre un attaquant augmentant ses privilèges avec un module ou script "in-process".
    Mode SECURE
    Une requête en mode SECURE génère un sous-processus qui supprime les privilèges. Ce comportement est très similaire à l'exécution d'un programme CGI avec suexec, mais il reste valable tout au long du cycle de traitement de la requête, avec en plus l'avantage d'un contrôle précis des privilèges.

    Vous pouvez sélectionner différents PrivilegesModes pour chaque serveur virtuel, et même dans un contexte de répertoire à l'intérieur d'un serveur virtuel. Le mode FAST convient lorsque les utilisateurs sont sûrs et/ou n'ont pas le privilège de charger du code "in-process". Le mode SECURE convient dans les cas où du code non sûr peut s'exécuter "in-process". Cependant, même en mode SECURE, il n'y a pas de protection contre un utilisateur malveillant qui a la possibilité d'introduire du code supportant les privilèges avant le début du cycle de traitement de la requête.

    top

    Directive DTracePrivileges

    Description:Détermine si les privilèges requis par dtrace sont activés.
    Syntaxe:DTracePrivileges On|Off
    Défaut:DTracePrivileges Off
    Contexte:configuration globale
    Statut:Expérimental
    Module:mod_privileges
    Compatibilité:>Disponible sous Solaris 10 et OpenSolaris avec les modules MPM non-threadés (prefork ou MPM personnalisé).

    Cette directive qui s'applique à l'ensemble du serveur permet de déterminer si Apache s'exécutera avec les privilèges requis pour exécuter dtrace. Notez que la définition DTracePrivileges On n'activera pas à elle-seule DTrace, mais que DTracePrivileges Off l'empêchera de fonctionner.

    top

    Directive PrivilegesMode

    Description:Fait un compromis entre d'une part l'efficacité et la vitesse de traitement et d'autre part la sécurité à l'encontre des codes malicieux supportant les privilèges.
    Syntaxe:PrivilegesMode FAST|SECURE|SELECTIVE
    Défaut:PrivilegesMode FAST
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Expérimental
    Module:mod_privileges
    Compatibilité:Disponible sous Solaris 10 et OpenSolaris avec des modules MPMs non threadés (comme prefork ou un module personnalisé).

    Cette directive permet de faire un compromis entre les performances et la sécurité à l'encontre des codes malicieux supportant les privilèges. En mode SECURE, chaque requête est traitée dans un sous-processus sécurisé, ce qui induit une dégradation sensible des performances. En mode FAST, le serveur n'est pas protégé contre l'augmentation de privilège comme décrit plus haut.

    Cette directive est sensiblement différente selon qu'elle se trouve dans une section <Directory> (ou Location/Files/If) ou au niveau global ou dans un <VirtualHost>.

    Au niveau global, elle définit un comportement par défaut dont hériteront les serveurs virtuels. Dans un serveur virtuel, les modes FAST ou SECURE agissent sur l'ensemble de la requête HTTP, et toute définition de ces modes dans une section <Directory> sera ignorée. Le pseudo-mode SELECTIVE confie le choix du mode FAST ou SECURE aux directives contenues dans une section<Directory>.

    Dans une section <Directory>, elle ne s'applique que lorsque le mode SELECTIVE a été défini pour le serveur virtuel. Seuls FAST ou SECURE peuvent être définis dans ce contexte (SELECTIVE n'aurait pas de sens).

    Avertissement

    Lorsque le mode SELECTIVE a été défini pour un serveur virtuel, l'activation des privilèges doit être reportée après la détermination, par la phase de comparaison du traitement de la requête, du contexte <Directory> qui s'applique à la requête. Ceci peut donner à un attaquant l'opportunité d'introduire du code via une directive RewriteMap s'exécutant au niveau global ou d'un serveur virtuel avant que les privilèges n'aient été supprimés et l'uid/gid défini.
    top

    Directive VHostCGIMode

    Description:Détermine si le serveur virtuel peut exécuter des sous-processus, et définit les privilèges disponibles pour ces dernier.
    Syntaxe:VHostCGIMode On|Off|Secure
    Défaut:VHostCGIMode On
    Contexte:serveur virtuel
    Statut:Expérimental
    Module:mod_privileges
    Compatibilité:Disponible sous Solaris 10 et OpenSolaris avec les modules MPM non-threadés (prefork ou MPM personnalisé).

    Détermine si le serveur virtuel est autorisé à exécuter fork et exec, et définit les privilèges requis pour exécuter des sous-processus. Si cette directive est définie à Off le serveur virtuel ne disposera d'aucun privilège et ne pourra exécuter ni des programmes ou scripts CGI classiques via le module traditionnel mod_cgi, ni des programmes externes similaires tels que ceux créés via le module mod_ext_filter ou les programmes de réécriture externes utilisés par la directive RewriteMap. Notez que ceci n'empêche pas l'exécution de programmes CGI via d'autres processus et sous d'autres modèles de sécurité comme mod_fcgid, ce qui est la solution recommandée sous Solaris.

    Si cette directive est définie à On ou Secure, le serveur virtuel pourra exécuter les scripts et programmes externes cités ci-dessus. Définir la directive VHostCGIMode à Secure a pour effet supplémentaire de n'accorder aucun privilège aux sous-processus, comme décrit dans la directive VHostSecure.

    top

    Directive VHostCGIPrivs

    Description:Assigne des privilèges au choix aux sous-processus créés par un serveur virtuel.
    Syntaxe:VHostCGIPrivs [+-]?privilege-name [[+-]?privilege-name] ...
    Défaut:Aucun
    Contexte:serveur virtuel
    Statut:Expérimental
    Module:mod_privileges
    Compatibilité:Disponible sous Solaris 10 et OpenSolaris avec les modules MPM non-threadés (prefork ou MPM personnalisé) et lorsque mod_privileges est construit avec l'option de compilation BIG_SECURITY_HOLE.

    La directive VHostCGIPrivs permet d'assigner des privilèges au choix aux sous-processus créés par un serveur virtuel, comme décrit dans la directive VHostCGIMode. Chaque privilege-name correspond à un privilège Solaris tel que file_setid ou sys_nfs.

    privilege-name peut être éventuellement préfixé par + ou -, ce qui va respectivement accorder ou refuser le privilège. Si nom-privilège est spécifié sans + ni -, tous les autres privilèges préalablement assignés au serveur virtuel seront refusés. Cette directive permet de construire aisément votre propre jeu de privilèges en annulant tout réglage par défaut.

    Sécurité

    L'utilisation de cette directive peut ouvrir d'immenses trous de sécurité dans les sous-processus Apache, jusqu'à leur exécution avec les droits de root. Ne l'utilisez que si vous êtes absolument sûr de comprendre ce que vous faites !

    top

    Directive VHostGroup

    Description:Définit l'identifiant du groupe sous lequel s'exécute un serveur virtuel.
    Syntaxe:VHostGroup identifiant-groupe-unix
    Défaut:Hérite de l'identifiant du groupe spécifié par la directive Group
    Contexte:serveur virtuel
    Statut:Expérimental
    Module:mod_privileges
    Compatibilité:Disponible sous Solaris 10 et OpenSolaris avec les modules MPM non-threadés (prefork ou MPM personnalisé).

    La directive VHostGroup permet de définir l'identifiant du groupe unix sous lequel le serveur va traiter les requêtes par l'intermédiaire d'un serveur virtuel. L'identifiant du groupe est défini avant le traitement de la requête, puis restauré à sa valeur de départ via les Privilèges Solaris. Comme la définition s'applique au processus, cette directive est incompatible avec les modules MPM threadés.

    Unix-group peut être :

    Un nom de groupe
    Fait référence au groupe donné par son nom.
    # suivi d'un numéro de groupe.
    Fait référence au groupe donné par son numéro.

    Sécurité

    Cette directive ne peut pas être utilisée pour exécuter Apache en tant que root ! Elle est tout de même susceptible de poser des problèmes de sécurité similaires à ceux décrits dans la documentation de suexec.

    Voir aussi

    top

    Directive VHostPrivs

    Description:Assigne des privilèges à un serveur virtuel.
    Syntaxe:VHostPrivs [+-]?nom-privilège [[+-]?nom-privilège] ...
    Défaut:Aucun
    Contexte:serveur virtuel
    Statut:Expérimental
    Module:mod_privileges
    Compatibilité:Disponible sous Solaris 10 et OpenSolaris avec les modules MPM non-threadés (prefork ou MPM personnalisé) et lorsque mod_privileges est construit avec l'option de compilation BIG_SECURITY_HOLE.

    La directive VHostPrivs permet d'assigner des privilèges au choix à un serveur virtuel. Chaque nom-privilège correspond à un privilège Solaris tel que file_setid ou sys_nfs.

    nom-privilège peut être éventuellement préfixé par + ou -, ce qui va respectivement accorder ou refuser le privilège. Si nom-privilège est spécifié sans + ni -, tous les autres privilèges préalablement assignés au serveur virtuel seront refusés. Cette directive permet de construire aisément votre propre jeu de privilèges en annulant tout réglage par défaut.

    Sécurité

    L'utilisation de cette directive peut ouvrir d'immenses trous de sécurité dans Apache, jusqu'au traitement de requêtes avec les droits de root. Ne l'utilisez que si vous êtes absolument sûr de comprendre ce que vous faites !

    top

    Directive VHostSecure

    Description:Détermine si le serveur s'exécute avec une sécurité avancée pour les serveurs virtuels.
    Syntaxe:VHostSecure On|Off
    Défaut:VHostSecure On
    Contexte:serveur virtuel
    Statut:Expérimental
    Module:mod_privileges
    Compatibilité:Disponible sous Solaris 10 et OpenSolaris avec les modules MPM non-threadés (prefork ou MPM personnalisé).

    Détermine si les serveurs virtuels traitent les requêtes avec une sécurité avancée en supprimant les Privilèges rarement requis par un serveur web, mais disponibles par défaut pour un utilisateur Unix standard, et donc susceptibles d'être demandés par des modules et des applications. Il est recommandé de conserver la définition par défaut (On), sauf si elle empêche une application de fonctionner. Comme la définition s'applique au processus, cette directive est incompatible avec les modules MPM threadés.

    Note

    Le fait que la directive VHostSecure empêche une application de fonctionner peut constituer un signal d'avertissement indiquant que la sécurité de l'application doit être revue.

    top

    Directive VHostUser

    Description:Définit l'identifiant utilisateur sous lequel s'exécute un serveur virtuel.
    Syntaxe:VHostUser identifiant-utilisateur-unix
    Défaut:Hérite de l'identifiant utilisateur spécifié par la directive User
    Contexte:serveur virtuel
    Statut:Expérimental
    Module:mod_privileges
    Compatibilité:Disponible sous Solaris 10 et OpenSolaris avec les modules MPM non-threadés (prefork ou MPM personnalisé).

    La directive VHostUser permet de définir l'identifiant utilisateur unix sous lequel le serveur va traiter les requêtes par l'intermédiaire d'un serveur virtuel. L'identifiant utilisateur est défini avant le traitement de la requête, puis restauré à sa valeur de départ via les Privilèges Solaris. Comme la définition s'applique au processus, cette directive est incompatible avec les modules MPM threadés.

    identifiant-utilisateur-unix peut être :

    Un nom d'utilisateur
    Fait référence à l'utilisateur donné par son nom.
    # suivi d'un numéro d'utilisateur.
    Fait référence à l'utilisateur donné par son numéro.

    Sécurité

    Cette directive ne peut pas être utilisée pour exécuter Apache en tant que root ! Elle est tout de même susceptible de poser des problèmes de sécurité similaires à ceux décrits dans la documentation de suexec.

    Voir aussi

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dav_fs.html.ko.euc-kr0000644000000000000500000002167013412755316021021 0ustar rootsrc mod_dav_fs - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_dav_fs

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:mod_davÀ» À§ÇÑ ÆÄÀϽýºÅÛ Á¦°øÀÚ
    »óÅÂ:Extension
    ¸ðµâ¸í:dav_fs_module
    ¼Ò½ºÆÄÀÏ:mod_dav_fs.c

    ¿ä¾à

    ÀÌ ¸ðµâÀº mod_dav ¼­ºñ½º¿¡ ÇÊ¿äÇÏ´Ù. mod_dav¸¦ Áö¿øÇÏ´Â ¸ðµâ·Î ¼­¹öÀÇ ÆÄÀϽýºÅÛ¿¡ ÀÖ´Â ÀÚ¿øÀ» Á¢±ÙÇÒ ¼ö ÀÖµµ·Ï ÇÑ´Ù. ÀÌ Á¦°øÀÚ(provider)ÀÇ Á¤½Ä¸íĪÀº filesystemÀÌ´Ù. Dav Áö½Ã¾î¸¦ ÁöÁ¤ÇÏ¿© mod_dav µÞ´Ü Á¦°øÀÚ¸¦ »ç¿ëÇÑ´Ù:

    ¿¹Á¦

    Dav filesystem

    filesystemÀÌ mod_davÀÇ ±âº» Á¦°øÀÚÀ̹ǷΠ´ë½Å OnÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    Support Apache!

    Áö½Ã¾îµé

    Bugfix checklist

    Âü°í

    top

    DavLockDB Áö½Ã¾î

    ¼³¸í:DAV Àá±Ý µ¥ÀÌÅͺ£À̽º À§Ä¡
    ¹®¹ý:DavLockDB file-path
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Extension
    ¸ðµâ:mod_dav_fs

    DavLockDB Áö½Ã¾î´Â Àá±Ý µ¥ÀÌÅͺ£À̽ºÀÇ Àüü °æ·Î¸¦ È®ÀåÀÚ¸¦ Á¦¿ÜÇϰí ÁöÁ¤ÇÑ´Ù. Àý´ë°æ·Î°¡ ¾Æ´Ï¸é ServerRoot¿¡ »ó´ë°æ·Î·Î ó¸®ÇÑ´Ù. mod_dav_fs´Â Àá±ÝÀ» SDBM µ¥ÀÌÅͺ£À̽º¿¡ ±â·ÏÇÑ´Ù.

    ¿¹Á¦

    DavLockDB var/DavLock

    ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÏ´Â User¿Í GroupÀº Àá±Ý µ¥ÀÌÅͺ£À̽º°¡ ÀÖ´Â µð·ºÅ丮¿¡ ¾²±â ±ÇÇÑÀ» °¡Á®¾ß ÇÑ´Ù. º¸¾È»ó ÀÌÀ¯·Î ±âÁ¸ µð·ºÅ丮ÀÇ ±ÇÇÑÀ» ¹Ù²Ù±âº¸´Ù´Â Àá±Ý µ¥ÀÌÅͺ£À̽º¿ë µð·ºÅ丮¸¦ ¸¸µé¾î¾ß ÇÑ´Ù. À§ÀÇ °æ¿ì ¾ÆÆÄÄ¡´Â ServerRoot ¾Æ·¡ var/ µð·ºÅ丮¿¡ ¼­¹ö°¡ ¼±ÅÃÇÑ È®Àå¸íÀ» °¡Áø DavLock ÆÄÀÏÀ» ¸¸µç´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_negotiation.html.fr.utf80000644000000000000500000005613713412755316021603 0ustar rootsrc mod_negotiation - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_negotiation

    Langues Disponibles:  en  |  fr  |  ja 

    Description:Effectue la négociation de contenu
    Statut:Base
    Identificateur de Module:negotiation_module
    Fichier Source:mod_negotiation.c

    Sommaire

    La négociation de contenu, ou plus précisément la sélection de contenu, est la sélection parmi plusieurs documents disponibles, du document qui "colle" au plus près des possibilités du client. Pour y parvenir, deux méthodes sont employées.

    • Une table de correspondances de types (un fichier associé au gestionnaire type-map) qui contient une liste explicite des fichiers contenant les différentes variantes.
    • Une recherche multivues (Multiviews) (activée par l'Options Multiviews), où le serveur effectue une recherche de correspondance de modèle de nom de fichier implicite, et fait son choix parmi les résultats.
    top

    Tables de correspondances de types

    Une table de correspondances de types possède un format similaire à celui des en-têtes de messagerie RFC822. Elle contient des descriptions de documents séparées par des lignes vides, toute ligne commençant par un dièse ('#') étant considérée comme un commentaire. Une description de document comporte plusieurs enregistrements d'en-têtes ; chaque enregistrement peut être réparti sur plusieurs lignes à condition que les lignes supplémentaires commencent par un ou plusieurs espaces. Lors du traitement, les espaces de début de ligne seront supprimés et les lignes concaténées. L'enregistrement d'un en-tête comprend un mot-clé qui se termine toujours par un caractère "deux-points" ':', suivi d'une valeur. Les espaces sont autorisés entre le nom d'en-tête et sa valeur, ainsi qu'entre les différents éléments de la valeur. Les en-têtes autorisés sont :

    Content-Encoding:
    Le codage du fichier. Apache ne reconnaît que les codages définis par une directive AddEncoding. Sont normalement inclus les codages x-compress pour les fichiers compressés avec compress, et x-gzip pour les fichiers compressés avec gzip. Le préfixe x- est ignoré lors des comparaisons de codages.
    Content-Language:
    Le(s) langage(s) de la variante, sous la forme d'un symbole de langage Internet standard (RFC 1766). Par exemple, en correspond à l'anglais. Si la variante contient plusieurs langages, ils sont séparés par des virgules.
    Content-Length:
    La taille du fichier en octets. Si cet en-tête n'est pas présent, c'est la taille réelle du fichier qui est utilisée.
    Content-Type:
    Le type MIME du document avec des paramètres optionnels. Les paramètres sont séparés du type de médium ainsi qu'entre eux par un point-virgule, et possèdent la syntaxe nom=valeur. Les paramètres courants sont :
    level
    un entier spécifiant la version du type de média. Pour text/html, la valeur par défaut est 2, sinon 0.
    qs
    un nombre en virgule flottante de 0[.000] à 1[.000], indiquant la "qualité" relative de la variante courante par rapport aux autres variantes disponibles, indépendamment des possibilités du client. Par exemple, un fichier jpeg est en général une source de qualité supérieure à un fichier ascii s'il est censé représenter une image. Cependant, si la ressource représentée est une image ascii, un fichier ascii possèdera une qualité supérieure à un fichier jpeg. Toutes les valeurs de qs sont donc spécifiques à une certaine ressource.

    Exemple

    Content-Type: image/jpeg; qs=0.8

    URI:
    l'URI du fichier contenant la variante (du type de médium donné, codé selon le codage de contenu donné). Cet URI est considéré comme relatif au fichier de correspondances ; il doit être situé sur le même serveur, et doit faire référence au fichier auquel le client se verrait accorder l'accès s'il était requis directement.
    Body:
    Le contenu réel de la ressource peut être inclus dans la table de correspondances en utilisant l'en-tête Body. Cet en-tête doit contenir une chaîne désignant un délimiteur pour le contenu du corps. Les lignes suivantes du fichier de correspondances de types seront alors considérées comme parties du corps de la ressource jusqu'à ce que le délimiteur soit détecté.

    Exemple:

    Body:----xyz----
    <html>
    <body>
    <p>Contenu de la page.</p>
    </body>
    </html>
    ----xyz----

    Considérons une ressource, document.html, disponible en anglais, en français et en allemand. Les fichiers correspondants se nomment respectivement document.html.en, document.html.fr, et document.html.de. Le fichier de correspondances de types se nommera document.html.var et contiendra ce qui suit :

    URI: document.html

    Content-language: en
    Content-type: text/html
    URI: document.html.en

    Content-language: fr
    Content-type: text/html
    URI: document.html.fr

    Content-language: de
    Content-type: text/html
    URI: document.html.de

    Ces quatre fichiers doivent se trouver dans le même répertoire, et le fichier .var doit être associé au gestionnaire type-map via une directive AddHandler :

    AddHandler type-map .var

    A l'arrivée d'une requête pour la ressource document.html.var, la variante de document.html qui correspond le mieux à la préference de langage spécifiée dans l'en-tête de la requête de l'utilisateur Accept-Language sera choisie.

    Si Multiviews est activée, et si MultiviewsMatch est définie à "handlers" ou "any", une requête pour document.html va rechercher document.html.var, et continuer la négociation avec le gestionnaire explicite type-map.

    D'autres directives de configuration, comme Alias, peuvent être utilisées pour associer document.html avec document.html.var.

    top

    Multivues

    Une recherche Multivues est activée par l'Options Multiviews. Si le serveur reçoit une requête pour /un/répertoire/foo, et si /un/répertoire/foo n'existe pas, le serveur parcourt le répertoire à la recherche de tous les fichiers de nom foo.*, et simule véritablement une correspondance de type qui nomme tous ces fichiers en leur assignant les mêmes type de média et codage de contenu qu'ils auraient eus si le client avait requis l'un d'entre eux avec son nom complet. Il choisit ensuite le fichier qui correspond le mieux au profile du client, puis renvoie le document.

    La directive MultiviewsMatch définit si Apache doit prendre en compte les fichiers qui ne comportent pas de métadonnées de négociation de contenu lors du choix du fichier à servir.

    top

    Directive CacheNegotiatedDocs

    Description:Permet la mise en cache au niveau des serveurs mandataires des documents dont le contenu a été négocié
    Syntaxe:CacheNegotiatedDocs On|Off
    Défaut:CacheNegotiatedDocs Off
    Contexte:configuration globale, serveur virtuel
    Statut:Base
    Module:mod_negotiation

    Si elle est définie à "on", cette directive permet la mise en cache au niveau des serveurs mandataires des documents dont le contenu a été négocié. Le processus de mise en cache sera alors plus efficace, mais des clients se trouvant derrière le mandataire seront alors susceptibles de se voir servir des versions de documents qui ne correspondent pas forcément à leurs attentes.

    Cette directive ne s'applique qu'aux requêtes en provenance de navigateurs HTTP/1.0. HTTP/1.1 fournit un bien meilleur contrôle de la mise en cache des documents au contenu négocié, et cette directive n'a aucun effet sur les réponses aux requêtes HTTP/1.1.

    top

    Directive ForceLanguagePriority

    Description:Action à entreprendre si un document acceptable unique n'est pas trouvé
    Syntaxe:ForceLanguagePriority None|Prefer|Fallback [Prefer|Fallback]
    Défaut:ForceLanguagePriority Prefer
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_negotiation

    La directive ForceLanguagePriority utilise le langage défini par la directive LanguagePriority pour terminer la négociation lorsque le serveur n'est pas en mesure de trouver une solution satisfaisante unique.

    ForceLanguagePriority Prefer utilise la directive LanguagePriority pour servir le résultat d'un choix unique, au lieu de renvoyer un résultat HTTP 300 (MULTIPLE CHOICES), lorsque que plusieurs choix équivalents sont disponibles. Par exemple, avec les deux directives ci-dessous, si l'en-tête Accept-Language de l'utilisateur assigne à en et de une qualité de .500 (les deux langages sont également acceptables), alors c'est la première variante acceptable de langue en qui sera servie.

    LanguagePriority en fr de
    ForceLanguagePriority Prefer

    ForceLanguagePriority Fallback utilise la directive LanguagePriority pour servir un résultat valide, au lieu de renvoyer un résultat HTTP 406 (NOT ACCEPTABLE). Avec les deux directives ci-dessous, si l'en-tête Accept-Language de l'utilisateur ne mentionne que les réponses de langage es, et si aucune variante dans cette langue n'est trouvée, c'est la première variante de la liste définie par la directive LanguagePriority qui sera servie.

    LanguagePriority en fr de
    ForceLanguagePriority Fallback

    Les deux options, Prefer et Fallback, peuvent être spécifiées, de façon à ce que la variante servie soit la première variante qui convient définie par la directive LanguagePriority si plusieurs variantes sont également acceptables, ou le premier document disponible si aucune variante ne convient à la liste de langages acceptables fournie par le client.

    Voir aussi

    top

    Directive LanguagePriority

    Description:L'ordre de priorité des variantes de langages pour les cas où le client n'a pas formulé de préférences
    Syntaxe:LanguagePriority langage-MIME [langage-MIME] ...
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Base
    Module:mod_negotiation

    La directive LanguagePriority permet de définir, au cours du traitement d'une requête Multivues, l'ordre de priorité des variantes de langages pour les cas où le client n'a pas formulé de préférences. La liste énumère les langages-MIME dans un ordre de préférences décroissantes.

    LanguagePriority en fr de

    Dans le cas d'une requête pour foo.html, si foo.html.fr et foo.html.de existent, et si le client n'a pas formulé de préférences, c'est le fichier foo.html.fr qui sera renvoyé.

    Notez que cette directive n'a d'effet que si le 'meilleur' langage n'a pas pu être déterminé d'une autre manière ou si la valeur de la directive ForceLanguagePriority est différente de None. En général, c'est le client qui détermine le langage préféré, non le serveur.

    Voir aussi

    Langues Disponibles:  en  |  fr  |  ja 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_reqtimeout.html.en0000644000000000000500000003141213444161410020543 0ustar rootsrc mod_reqtimeout - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_reqtimeout

    Available Languages:  en  |  fr 

    Description:Set timeout and minimum data rate for receiving requests
    Status:Extension
    Module Identifier:reqtimeout_module
    Source File:mod_reqtimeout.c
    Compatibility:Available in Apache HTTPD 2.2.15 and later

    Summary

    This module provides a convenient way to set timeouts and minimum data rates for receiving requests. Should a timeout occur or a data rate be to low, the corresponding connection will be closed by the server.

    This is logged at LogLevel info.

    If needed, the LogLevel directive can be tweaked to explicitly log it:

    LogLevel reqtimeout:info
    top

    Examples

    1. Allow for 5 seconds to complete the TLS handshake, 10 seconds to receive the request headers and 30 seconds for receiving the request body:
      RequestReadTimeout handshake=5 header=10 body=30
    2. Allow at least 10 seconds to receive the request body. If the client sends data, increase the timeout by 1 second for every 1000 bytes received, with no upper limit for the timeout (except for the limit given indirectly by LimitRequestBody):
      RequestReadTimeout body=10,MinRate=1000
    3. Allow at least 10 seconds to receive the request headers. If the client sends data, increase the timeout by 1 second for every 500 bytes received. But do not allow more than 30 seconds for the request headers:
      RequestReadTimeout header=10-30,MinRate=500
    4. Usually, a server should have both header and body timeouts configured. If a common configuration is used for http and https virtual hosts, the timeouts should not be set too low:
      RequestReadTimeout header=20-40,MinRate=500 body=20,MinRate=500
    top

    RequestReadTimeout Directive

    Description:Set timeout values for completing the TLS handshake, receiving the request headers and/or body from client.
    Syntax:RequestReadTimeout [handshake=timeout[-maxtimeout][,MinRate=rate] [header=timeout[-maxtimeout][,MinRate=rate] [body=timeout[-maxtimeout][,MinRate=rate]
    Default:RequestReadTimeout handshake=0 header=20-40,MinRate=500 body=20,MinRate=500
    Context:server config, virtual host
    Status:Extension
    Module:mod_reqtimeout
    Compatibility:Available in version 2.2.15 and later; defaulted to disabled in version 2.3.14 and earlier. The handshake stage is available since version 2.4.39.

    This directive can set various timeouts for completing the TLS handshake, receiving the request headers and/or the request body from the client. If the client fails to complete each of these stages within the configured time, a 408 REQUEST TIME OUT error is sent.

    For SSL virtual hosts, the handshake timeout values is the time needed to do the initial SSL handshake. If the user's browser is configured to query certificate revocation lists and the CRL server is not reachable, the initial SSL handshake may take a significant time until the browser gives up waiting for the CRL. Therefore the handshake timeout should take this possible overhead into consideration for SSL virtual hosts (if necessary). The body timeout values include the time needed for SSL renegotiation (if necessary).

    When an AcceptFilter is in use (usually the case on Linux and FreeBSD), the socket is not sent to the server process before at least one byte (or the whole request for httpready) is received. The handshake and header timeouts configured with RequestReadTimeout are only effective after the server process has received the socket.

    For each of the three timeout stages (handshake, header or body), there are three ways to specify the timeout:

    • Fixed timeout value:

      stage=timeout

      The time in seconds allowed for completing the whole stage (handshaking, reading all of the request headers or body). A value of 0 means no limit.

    • Disable module for a vhost:

      handshake=0 header=0 body=0

      This disables mod_reqtimeout completely (note that handshake=0 is the default already and could be omitted).

    • Timeout value that is increased when data is received:

      stage=timeout,MinRate=data_rate

      Same as above, but whenever data is received, the timeout value is increased according to the specified minimum data rate (in bytes per second).

    • Timeout value that is increased when data is received, with an upper bound:

      stage=timeout-maxtimeout,MinRate=data_rate

      Same as above, but the timeout will not be increased above the second value of the specified timeout range.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_unique_id.html.ja.utf80000644000000000000500000004472013412755316021223 0ustar rootsrc mod_unique_id - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_unique_id

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:ãれãžã‚Œã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã™ã‚‹ä¸€æ„ãªè­˜åˆ¥å­ã®å…¥ã£ãŸç’°å¢ƒå¤‰æ•°ã‚’ æä¾›ã™ã‚‹
    ステータス:Extension
    モジュール識別å­:unique_id_module
    ソースファイル:mod_unique_id.c

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯éžå¸¸ã«åˆ¶é™ã•ã‚ŒãŸæ¡ä»¶ä¸‹ã§ã€ ãれãžã‚Œã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ã€Œã™ã¹ã¦ã€ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—㦠一æ„ã«æ±ºã¾ã‚‹ã“ã¨ãŒä¿è¨¼ã•れã¦ã„る魔法ã®ãƒˆãƒ¼ã‚¯ãƒ³ã‚’æä¾›ã—ã¾ã™ã€‚ ã“ã®ä¸€æ„ãªè­˜åˆ¥å­ã¯ã€é©åˆ‡ã«è¨­å®šã•れãŸã‚¯ãƒ©ã‚¹ã‚¿ã§ã¯è¤‡æ•°ã® マシンã®é–“ã§ã•ãˆã‚‚一æ„ã«ãªã‚Šã¾ã™ã€‚ãれãžã‚Œã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—ã¦ç’°å¢ƒå¤‰æ•° UNIQUE_ID ã«è­˜åˆ¥å­ãŒè¨­å®šã•れã¾ã™ã€‚ 一æ„ãªè­˜åˆ¥å­ãŒä¾¿åˆ©ãªç†ç”±ã¯ã„ã‚ã„ã‚ã‚りã¾ã™ãŒã€ ã“ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®ç›®çš„ã‹ã‚‰ã¯å¤–れるãŸã‚ã€ã“ã“ã§ã¯èª¬æ˜Žã—ã¾ã›ã‚“。

    Support Apache!

    トピック

    ディレクティブ

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã‚りã¾ã›ã‚“。

    Bugfix checklist

    å‚ç…§

    top

    ç†è«–

    ã¾ãšã¯ã˜ã‚ã«ã€Apache サーãƒãŒ Unix マシンã§ã©ã®ã‚ˆã†ã«å‹•作をã™ã‚‹ã‹ã‚’ç°¡å˜ã«èª¬æ˜Žã—ã¾ã™ã€‚ ã“ã®æ©Ÿèƒ½ã¯ç¾æ™‚点ã§ã¯ Windows NT ã§ã¯ã‚µãƒãƒ¼ãƒˆã•れã¦ã„ã¾ã›ã‚“。 Unix マシンã§ã¯ Apache ã¯ã„ãã¤ã‹ã®å­ãƒ—ロセスを作æˆã—〠ãã®å­ãƒ—ロセスãŒä¸€ã¤ãšã¤ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’処ç†ã—ã¾ã™ã€‚ãれãžã‚Œã®å­ãƒ—ロセスã¯ã€ 生存期間中ã«è¤‡æ•°ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã†ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã®è­°è«–ã§ã¯å­ãƒ—ロセス間ã§ã¯ä¸€åˆ‡ãƒ‡ãƒ¼ã‚¿ã‚’共有ã—ãªã„ã“ã¨ã«ã—ã¾ã™ã€‚ 以後ã€ã“ã®å­ãƒ—ロセスã®ã“ã¨ã‚’ httpd プロセス ã¨å‘¼ã³ã¾ã™ã€‚

    ã‚ãªãŸã®ã‚¦ã‚§ãƒ–サイトã«ã¯ã‚ãªãŸãŒç®¡ç†ã™ã‚‹ã„ãã¤ã‹ã®ãƒžã‚·ãƒ³ãŒã‚ã‚‹ã¨ã—ã¾ã™ã€‚ ãれらをã¾ã¨ã‚ã¦ã‚¯ãƒ©ã‚¹ã‚¿ã¨å‘¼ã¶ã“ã¨ã«ã—ã¾ã™ã€‚ãれãžã‚Œã®ãƒžã‚·ãƒ³ã¯è¤‡æ•°ã® Apache を実行ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ ã“れらã™ã¹ã¦ã‚’ã¾ã¨ã‚ãŸã‚‚ã®ãŒã€Œå®‡å®™ã€ã§ã‚ã‚‹ã¨è€ƒãˆã‚‰ã‚Œã¾ã™ã€‚ ã„ãã¤ã‹ã®ä»®å®šã®ä¸‹ã§ã€ã‚¯ãƒ©ã‚¹ã‚¿ã®ãƒžã‚·ãƒ³é–“ãŒãŸãã•ん通信をã™ã‚‹ã“ã¨ãªã〠ã“ã®å®‡å®™ã®ä¸­ã§ãれãžã‚Œã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ä¸€æ„ãªè­˜åˆ¥å­ã‚’生æˆã§ãã‚‹ã“ã¨ã‚’示ã—ã¾ã™ã€‚

    クラスタã«ã‚るマシンã¯ä»¥ä¸‹ã®è¦æ±‚を見ãŸã•ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 (マシンãŒä¸€ã¤ã ã‘ã ã¨ã—ã¦ã‚‚ã€NTP ã§æ™‚計をåˆã‚ã›ã‚‹æ–¹ãŒè‰¯ã„ã§ã™ã€‚)

    • NTP ã‚„ä»–ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã§æ™‚é–“ã‚’åˆã‚ã›ã‚‹ãƒ—ロトコルã«ã‚ˆã£ã¦ å„ãƒžã‚·ãƒ³ã®æ™‚é–“ã®åŒæœŸãŒå–られã¦ã„ã‚‹ã“ã¨ã€‚
    • モジュールãŒãƒ›ã‚¹ãƒˆåを引ã„ã¦é•ㆠIP アドレスをå—ã‘å–ã‚‹ã“ã¨ãŒã§ãるよã†ã«ã€ クラスタã®ãれãžã‚Œã®ãƒžã‚·ãƒ³ã®ãƒ›ã‚¹ãƒˆåãŒé•ã†ã“ã¨ã€‚

    オペレーティングシステムã«ãŠã„ã¦ã¯ã€pid (プロセス ID) ㌠32 ビットã®ç¯„囲内ã§ã‚ã‚‹ã“ã¨ã‚’仮定ã—ã¾ã™ã€‚オペレーティングシステム㮠pid ㌠32 ビットを超ãˆã‚‹å ´åˆã¯ã€ç°¡å˜ãªä¿®æ­£ã§ã¯ã‚りã¾ã™ãŒã€ コードを変更ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚

    ã“れらã®ä»®å®šãŒæº€ãŸã•れã¦ã„ã‚‹ã¨ã€ã‚る時点ã«ãŠã„ã¦ã€ クラスタ内ã®ã©ã®ãƒžã‚·ãƒ³ã®ã©ã® httpd プロセスã§ã‚‚ã€ä¸€æ„ã«åŒå®šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã“れã¯ãƒžã‚·ãƒ³ã® IP アドレス㨠httpd プロセス㮠pid ã§å分ã«è¡Œãªã†ã“ã¨ãŒã§ãã¾ã™ã€‚ ã§ã™ã‹ã‚‰ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ä¸€æ„ãªè­˜åˆ¥å­ã‚’生æˆã™ã‚‹ãŸã‚ã«ã¯ã€ 時刻を区別ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã ã‘ã§ã™ã€‚

    時刻を区別ã™ã‚‹ãŸã‚ã«ã€Unix ã®ã‚¿ã‚¤ãƒ ã‚¹ã‚¿ãƒ³ãƒ— (UTC ã® 1970 å¹´ 1 月 1 æ—¥ã‹ã‚‰ã®ç§’æ•°) ã¨ã€16 ビットã®ã‚«ã‚¦ãƒ³ã‚¿ã‚’使ã„ã¾ã™ã€‚ タイムスタンプã®ç²’度ã¯ä¸€ç§’ã§ã™ã®ã§ã€ä¸€ç§’é–“ã® 65536 ã¾ã§ã®å€¤ã‚’表ç¾ã™ã‚‹ãŸã‚ã«ã‚«ã‚¦ãƒ³ã‚¿ã‚’使用ã—ã¾ã™ã€‚å››ã¤ã®å€¤ ( ip_addr, pid, time_stamp, counter ) ã§å„ httpd プロセスã§ä¸€ç§’ã®é–“ã« 65536 リクエストを数ãˆã‚ã’ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ 時間ãŒçµŒã¤ã¨ pid ãŒå†åˆ©ç”¨ã•れるã¨ã„ã†å•題ãŒã‚りã¾ã™ãŒã€ ã“ã®å•題を解決ã™ã‚‹ãŸã‚ã«ã‚«ã‚¦ãƒ³ã‚¿ãŒä½¿ç”¨ã•れã¾ã™ã€‚

    httpd ã®å­ãƒ—ロセスãŒä½œæˆã•れるã¨ã€ã‚«ã‚¦ãƒ³ã‚¿ã¯ (ãã®æ™‚点ã®ãƒžã‚¤ã‚¯ãƒ­ç§’ ÷ 10) modulo 65536 ã§åˆæœŸåŒ–ã•れã¾ã™ (ã“ã®å¼ã¯ã„ãã¤ã‹ã®ã‚·ã‚¹ãƒ†ãƒ ã«ã‚ã‚‹ã€ãƒžã‚¤ã‚¯ãƒ­ç§’㮠タイマã®ä¸‹ä½ãƒ“ットãŒç•°ãªã‚‹ã¨ã„ã†å•題を解決ã™ã‚‹ãŸã‚ã«é¸ã°ã‚Œã¾ã—ãŸ)。 一æ„ãªè­˜åˆ¥å­ãŒç”Ÿæˆã•れãŸã¨ãã€ä½¿ç”¨ã•れるタイムスタンプ㯠ウェブサーãƒã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒåˆ°ç€ã—ãŸæ™‚刻ã«ãªã‚Šã¾ã™ã€‚ カウンタã¯è­˜åˆ¥å­ãŒç”Ÿæˆã•れるãŸã³ã«å¢—加ã—ã¾ã™ (ã‚ãµã‚ŒãŸå ´åˆã¯ 0 ã«æˆ»ã‚Šã¾ã™)。

    カーãƒãƒ«ã¯ãƒ—ロセスをフォークã™ã‚‹ã¨ã€ãれãžã‚Œã®ãƒ—ロセスã®ãŸã‚ã« pid を生æˆã—ã¾ã™ã€‚pid ã¯ç¹°ã‚Šè¿”ã•れるã“ã¨ãŒè¨±å¯ã•れã¦ã„ã¾ã™ (pid ã®å€¤ã¯å¤šãã® Unix ã§ã¯ 16 ビットã§ã™ãŒã€æ–°ã—ã„システムã§ã¯ 32 ãƒ“ãƒƒãƒˆã«æ‹¡å¼µã•れã¦ã„ã¾ã™)。 ã§ã™ã‹ã‚‰ã€ã‚ã‚‹ç¨‹åº¦ã®æ™‚é–“ãŒçµŒéŽã™ã‚‹ã¨åŒã˜ pid ãŒå†ã³ä½¿ç”¨ã•れã¾ã™ã€‚ ã—ã‹ã—ã€ä¸€ç§’内ã«å†ä½¿ç”¨ã•れãªã‘れã°ã€ å››ã¤ã®å€¤ã®ä¸€æ„性ã¯ä¿ãŸã‚Œã¾ã™ã€‚ã¤ã¾ã‚Šã€æˆ‘々ã¯ã‚·ã‚¹ãƒ†ãƒ ãŒä¸€ç§’é–“ ã« 65536 個ã®ãƒ—ロセスを起動ã—ãªã„ã¨ä»®å®šã—ã¦ã„ã¾ã™ (ã„ãã¤ã‹ã® Unix ã§ã¯ 32768 プロセスã§ã™ãŒã€ãれã§ã™ã‚‰ã»ã¨ã‚“ã©ã‚り得ãªã„ã§ã—ょã†)。

    何らã‹ã®ç†ç”±ã§ã€åŒã˜æ™‚刻ãŒç¹°ã‚Šè¿”ã•れãŸã¨ã—ã¾ã—ょã†ã€‚ ã¤ã¾ã‚Šã€ã‚·ã‚¹ãƒ†ãƒ ã®æ™‚計ãŒç‹‚ã£ã¦ã„ã¦ã€ã‚‚ã†ä¸€åº¦éŽåŽ»ã®æ™‚刻ã«ãªã£ã¦ã—ã¾ã£ãŸ (ã‚‚ã—ãã¯é€²ã¿ã™ãŽã¦ã„ãŸã¨ãã«ã€ æ­£ã—ã„æ™‚åˆ»ã«æˆ»ã—ãŸãŸã‚ã«å†ã³å°†æ¥ã®æ™‚刻ã«ãªã£ã¦ã—ã¾ã£ãŸ) ã¨ã—ã¾ã™ã€‚ ã“ã®å ´åˆã€pid ã¨ã‚¿ã‚¤ãƒ ã‚¹ã‚¿ãƒ³ãƒ—ãŒå†ä½¿ç”¨ã•れるã“ã¨ãŒç°¡å˜ã«ç¤ºã•れã¾ã™ã€‚ ã‚«ã‚¦ãƒ³ã‚¿åˆæœŸåŒ–用ã®é–¢æ•°ã¯ã€ã“ã®å•題ã®å›žé¿ã‚’手助ã‘ã—よã†ã¨é¸æŠžã•れã¦ã„ã¾ã™ã€‚ 本当ã¯ã‚«ã‚¦ãƒ³ã‚¿ã®åˆæœŸåŒ–ã‚’ã™ã‚‹ãŸã‚ã«ãƒ©ãƒ³ãƒ€ãƒ ãªæ•°å­—を使ã„ãŸã„ã®ã§ã™ãŒã€ ã»ã¨ã‚“ã©ã®ã‚·ã‚¹ãƒ†ãƒ ã§ã¯ç°¡å˜ã«ä½¿ç”¨ã§ãã‚‹æ•°ã¯ç„¡ã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„ (ã™ãªã‚ã¡ã€rand ()ã¯ä½¿ãˆã¾ã›ã‚“。rand () ã«ã¯ seed を与ãˆã‚‹å¿…è¦ãŒã‚りã€seed ã«ã¯æ™‚刻を使ãˆã¾ã›ã‚“。一秒å˜ä½ã§ã¯ã€ ãã®æ™‚刻ã¯ã™ã§ã«ç¹°ã‚Šè¿”ã•れã¦ã„ã‚‹ã‹ã‚‰ã§ã™)。 ã“れã¯ã€å®Œç’§ãªå¯¾ç­–ã§ã¯ã‚りã¾ã›ã‚“。

    ã“ã®å¯¾ç­–ã¯ã©ã®ãらã„効果ãŒã‚ã‚‹ã§ã—ょã†ã‹? ã“ã“ã§ã¯ã€ãƒžã‚·ãƒ³ç¾¤ã®ä¸­ã®ä¸€ã¤ã¯æœ€å¤§ã§ä¸€ç§’ã« 500 リクエストを扱ã†ã¨ä»®å®šã—ã¾ã™ (ã“れを書ã„ã¦ã„る時点ã§ã¯å¦¥å½“ãªä¸Šé™ã§ã™ã€‚ 通常システムãŒã™ã‚‹ã“ã¨ã¯é™çš„ãªãƒ•ァイルをå–りã ã™ã ã‘ã§ã¯ã‚りã¾ã›ã‚“ã‹ã‚‰)。 ãれを行ãªã†ãŸã‚ã«ã€ãã®ãƒžã‚·ãƒ³ã¯ä¸¦è¡Œã—ã¦æ¥ã‚‹ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®æ•°ã« 応ã˜ãŸæ•°ã®å­ãƒ—ãƒ­ã‚»ã‚¹ã‚’è¦æ±‚ã—ã¾ã™ã€‚ ã—ã‹ã—ãªãŒã‚‰ã€æ‚²è¦³çš„ã«è€ƒãˆã¦ã€ä¸€ã¤ã®å­ãƒ—ロセスãŒä¸€ç§’ã« 500 リクエストを扱ãˆã‚‹ã¨ã—ã¾ã™ã€‚ãã†ã™ã‚‹ã¨ã€(一秒ã®ç²¾åº¦ã«ãŠã„ã¦) 時刻ãŒåŒã˜æ™‚を繰り返ã™ã¨ã€ã“ã®å­ãƒ—ロセスãŒã‚«ã‚¦ãƒ³ã‚¿ã®å€¤ã‚’å†ã³ä½¿ã„ã€ ä¸€æ„æ€§ãŒå£Šã‚Œã‚‹å¯èƒ½æ€§ãŒ 1.5% ã‚りã¾ã™ã€‚ ã“れã¯éžå¸¸ã«æ‚²è¦³çš„ãªä¾‹ã§ã€å®Ÿä¸–界ã®å€¤ã§ã¯ã€ã»ã¨ã‚“ã©èµ·ã“りãã†ã«ã‚りã¾ã›ã‚“。 ãれã§ã‚‚ã“れãŒèµ·ã“ã‚‹å¯èƒ½æ€§ã®ã‚るよã†ãªã‚·ã‚¹ãƒ†ãƒ ãªã‚‰ã€ (プログラムコードを編集ã—ã¦) カウンタを 32 ビットã«ã™ã‚‹ã®ãŒè‰¯ã„ã§ã—ょã†ã€‚

    サマータイムã«ã‚ˆã‚Šæ™‚計ãŒã€Œæˆ»ã•れるã€ã“ã¨ã‚’æ°—ã«ã—ã¦ã„る人㌠ã„ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。ã“ã“ã§ä½¿ç”¨ã•れる時間㯠UTC ã§ã‚り〠ãれã¯ã€Œå¸¸ã«ã€é€²ã‚€ã®ã§ã“ã“ã§ã¯å•題ã«ãªã‚Šã¾ã›ã‚“。x86 上㮠Unix ã¯ã“ã®æ¡ä»¶ã‚’満ãŸã™ãŸã‚ã«é©åˆ‡ãªè¨­å®šãŒå¿…è¦ã‹ã‚‚ã—れãªã„ã“ã¨ã« 注æ„ã—ã¦ãã ã•ã„ã€‚ãƒžã‚¶ãƒ¼ãƒœãƒ¼ãƒ‰ã®æ™‚計㯠UTC ã«ãªã£ã¦ã„ã¦ã€ ä»–ã®æ™‚é–“ã¯ãã“ã‹ã‚‰é©åˆ‡ã«è£œæ­£ã•れるã“ã¨ã‚’仮定ã§ãるよã†ã« 設定ã•れãªã‘れã°ãªã‚Šã¾ã›ã‚“。ãã®ã‚ˆã†ãªå ´åˆã§ã•ãˆã€NTP を使ã£ã¦ã„ã‚‹ãªã‚‰ã°ãƒªãƒ–ート後ã«ã™ãæ­£ã—ã„ UTC ã®æ™‚é–“ã«ãªã‚‹ã§ã—ょã†ã€‚

    UNIQUE_ID 環境変数㯠112 ビット (32 ビット IP アドレスã€32 ビット pid, 32 ビットタイムスタンプã€16 ビットカウンタã®å››ã¤ã®çµ„) をアルファベット [A-Za-z0-9@-] を用ã„㦠MIME ã® base64 符å·åŒ–ã¨åŒæ§˜ã®æ–¹æ³•ã«ã‚ˆã‚Šç¬¦å·åŒ–ã—ã€19 ã®æ–‡å­—を生æˆã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šä½œæˆã•れã¾ã™ã€‚MIME ã® base64 ã®ã‚¢ãƒ«ãƒ•ァベットã¯å®Ÿéš›ã¯ [A-Za-z0-9+/] ã§ã™ãŒã€ + 㨠/ ã¨ã¯ URL ã§ã¯ç‰¹åˆ¥ãªç¬¦å·åŒ–ãŒå¿…è¦ãªã®ã§ã€ã‚ã¾ã‚Šæœ›ã¾ã—ãã‚りã¾ã›ã‚“。 å…¨ã¦ã®å€¤ã¯ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒã‚¤ãƒˆã‚ªãƒ¼ãƒ€ã§ç¬¦å·åŒ–ã•れã¾ã™ã®ã§ã€ 符å·ã¯é•ã£ãŸãƒã‚¤ãƒˆã‚ªãƒ¼ãƒ€ã®ã‚¢ãƒ¼ã‚­ãƒ†ã‚¯ãƒãƒ£é–“ã§æ¯”較å¯èƒ½ã§ã™ã€‚ 実際ã®ç¬¦å·åŒ–ã®é †ç•ªã¯: タイムスタンプã€IP アドレスã€pid, カウンタã§ã™ã€‚ã“ã®é †ã«ã¯ç›®çš„ãŒã‚りã¾ã™ãŒã€ アプリケーションã¯ç¬¦å·ã‚’è§£æžã™ã‚‹ã¹ãã§ã¯ãªã„ã“ã¨ã‚’強調ã—ã¦ãŠãã¾ã™ã€‚ アプリケーションã¯ç¬¦å·åŒ–ã•れ㟠UNIQUE_ID 全体をé€éŽçš„ãªãƒˆãƒ¼ã‚¯ãƒ³ã¨ã—ã¦æ‰±ã†ã¹ãã§ã™ã€‚ UNIQUE_ID ã¯ä»–ã® UNIQUE_ID ã¨ã®ç­‰ä¾¡æ€§ã‚’調ã¹ã‚‹ãŸã‚ã ã‘ã«ã®ã¿ä½¿ç”¨ã§ãã¾ã™ã€‚

    ã“ã®é †ç•ªã¯å°†æ¥ã€æ—¢å­˜ã® UNIQUE_ID ã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã¨ã®è¡çªã‚’心é…ã™ã‚‹ã“ã¨ãªã符å·ã‚’変更ã™ã‚‹ã“ã¨ãŒ å¯èƒ½ã«ãªã‚‹ã‚ˆã†ã«é¸æŠžã—ã¦ã„ã¾ã™ã€‚ æ–°ã—ã„符å·ã¯ã‚¿ã‚¤ãƒ ã‚¹ã‚¿ãƒ³ãƒ—を最åˆã®è¦ç´ ã¨ã—ã¦æ®‹ã™ã®ãŒæœ›ã¾ã—ã〠ãれ以外ã¯åŒã˜ã‚¢ãƒ«ãƒ•ァベットã¨ãƒ“ット長を使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚ ã‚¿ã‚¤ãƒ ã‚¹ã‚¿ãƒ³ãƒ—ã¯æœ¬è³ªçš„ã«å¢—加系列ã§ã™ã®ã§ã€ クラスタã®å…¨ã¦ã®ãƒžã‚·ãƒ³ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã¨ã‚µãƒ¼ãƒæ©Ÿèƒ½ã‚’åœæ­¢ã—ã¦ã€ å¤ã„符å·åŒ–æ–¹å¼ã‚’使用ã™ã‚‹ã®ã‚’ã‚„ã‚るフラグ秒ãŒã‚れã°å分ã§ã™ã€‚ ãã®å¾Œã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å†é–‹ã—〠新ã—ã„符å·ã‚’発行ã™ã‚‹ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚

    我々ã¯ã“れãŒã€ ã“ã®å•題ã«å¯¾ã™ã‚‹æ¯”è¼ƒçš„ç§»æ¤æ€§ã®é«˜ã„解決法ã ã¨è€ƒãˆã¦ã„ã¾ã™ã€‚ Windows NT ã®ã‚ˆã†ãªãƒžãƒ«ãƒã‚¹ãƒ¬ãƒƒãƒ‰ã®ã‚·ã‚¹ãƒ†ãƒ ã«æ‹¡å¼µã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã—〠将æ¥å¿…è¦ã«ãªã‚Œã°ã•らã«å¢—ã‚„ã™ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ ID ã¯å¿…è¦ã«å¿œã˜ã¦é•·ãã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã®ã§ã€ç”Ÿæˆã•れ㟠ID ã¯å®Ÿè³ªä¸Šã€ç„¡é™ã«æœ‰åйã§ã™ã€‚ã¾ãŸã€ã‚¯ãƒ©ã‚¹ã‚¿ã®ãƒžã‚·ãƒ³é–“ã®é€šä¿¡ã‚‚事実上必è¦ãªã (NTP ã«ã‚ˆã‚‹åŒæœŸã®ã¿ãŒå¿…è¦ã§ã€ã“れã¯ã‚ªãƒ¼ãƒãƒ˜ãƒƒãƒ‰ã¯ã‚ã¾ã‚Šã‚りã¾ã›ã‚“)ã€httpd プロセス間ã®é€šä¿¡ã‚‚å¿…è¦ã‚りã¾ã›ã‚“ (通信ã¯ã‚«ãƒ¼ãƒãƒ«ã«ã‚ˆã‚Šå‰²ã‚Šå½“ã¦ã‚‰ã‚ŒãŸ pid ã®å€¤ã«ã‚ˆã‚Šæš—é»™ã®å†…ã«è¡Œãªã‚ã¦ã„ã¾ã™)。 ã•らã«é™ã‚‰ã‚ŒãŸçжæ³ä¸‹ã§ã¯ã€ID ã¯ã•らã«çŸ­ãã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ãŒã€ より多ãã®æƒ…報を仮定ã™ã‚‹å¿…è¦ãŒã§ã¦ãã¾ã™ (例ãˆã°ã€32 ビット IP アドレスã¯ã©ã®ã‚µã‚¤ãƒˆã«ãŠã„ã¦ã‚‚éŽå‰°ãªæƒ…å ±ã§ã™ãŒã€ ãれã®ä»£ã‚りã«ãªã‚‹ç§»æ¤æ€§ã®ã‚ã‚‹ã‚‚ã®ã¯ã‚りã¾ã›ã‚“)。

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_session_cookie.html0000644000000000000500000000035013362070302020753 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_session_cookie.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_session_cookie.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_dir.html.en0000644000000000000500000005420713412755316017143 0ustar rootsrc mod_dir - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_dir

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    Description:Provides for "trailing slash" redirects and serving directory index files
    Status:Base
    Module Identifier:dir_module
    Source File:mod_dir.c

    Summary

    The index of a directory can come from one of two sources:

    • A file written by the user, typically called index.html. The DirectoryIndex directive sets the name of this file. This is controlled by mod_dir.
    • Otherwise, a listing generated by the server. This is provided by mod_autoindex.

    The two functions are separated so that you can completely remove (or replace) automatic index generation should you want to.

    A "trailing slash" redirect is issued when the server receives a request for a URL http://servername/foo/dirname where dirname is a directory. Directories require a trailing slash, so mod_dir issues a redirect to http://servername/foo/dirname/.

    top

    DirectoryCheckHandler Directive

    Description:Toggle how this module responds when another handler is configured
    Syntax:DirectoryCheckHandler On|Off
    Default:DirectoryCheckHandler Off
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_dir
    Compatibility:Available in 2.4.8 and later. Releases prior to 2.4 implicitly act as if "DirectoryCheckHandler ON" was specified.

    The DirectoryCheckHandler directive determines whether mod_dir should check for directory indexes or add trailing slashes when some other handler has been configured for the current URL. Handlers can be set by directives such as SetHandler or by other modules, such as mod_rewrite during per-directory substitutions.

    In releases prior to 2.4, this module did not take any action if any other handler was configured for a URL. This allows directory indexes to be served even when a SetHandler directive is specified for an entire directory, but it can also result in some conflicts with modules such as mod_rewrite.

    top

    DirectoryIndex Directive

    Description:List of resources to look for when the client requests a directory
    Syntax:DirectoryIndex disabled | local-url [local-url] ...
    Default:DirectoryIndex index.html
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_dir

    The DirectoryIndex directive sets the list of resources to look for, when the client requests an index of the directory by specifying a / at the end of the directory name. Local-url is the (%-encoded) URL of a document on the server relative to the requested directory; it is usually the name of a file in the directory. Several URLs may be given, in which case the server will return the first one that it finds. If none of the resources exist and the Indexes option is set, the server will generate its own listing of the directory.

    Example

    DirectoryIndex index.html

    then a request for http://example.com/docs/ would return http://example.com/docs/index.html if it exists, or would list the directory if it did not.

    Note that the documents do not need to be relative to the directory;

    DirectoryIndex index.html index.txt  /cgi-bin/index.pl

    would cause the CGI script /cgi-bin/index.pl to be executed if neither index.html or index.txt existed in a directory.

    A single argument of "disabled" prevents mod_dir from searching for an index. An argument of "disabled" will be interpreted literally if it has any arguments before or after it, even if they are "disabled" as well.

    Note: Multiple DirectoryIndex directives within the same context will add to the list of resources to look for rather than replace:

    # Example A: Set index.html as an index page, then add index.php to that list as well.
    <Directory "/foo">
        DirectoryIndex index.html
        DirectoryIndex index.php
    </Directory>
    
    # Example B: This is identical to example A, except it's done with a single directive.
    <Directory "/foo">
        DirectoryIndex index.html index.php
    </Directory>
    
    # Example C: To replace the list, you must explicitly reset it first:
    # In this example, only index.php will remain as an index resource.
    <Directory "/foo">
        DirectoryIndex index.html
        DirectoryIndex disabled
        DirectoryIndex index.php
    </Directory>
    top

    DirectoryIndexRedirect Directive

    Description:Configures an external redirect for directory indexes.
    Syntax:DirectoryIndexRedirect on | off | permanent | temp | seeother | 3xx-code
    Default:DirectoryIndexRedirect off
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_dir
    Compatibility:Available in version 2.3.14 and later

    By default, the DirectoryIndex is selected and returned transparently to the client. DirectoryIndexRedirect causes an external redirect to instead be issued.

    The argument can be:

    • on: issues a 302 redirection to the index resource.
    • off: does not issue a redirection. This is the legacy behaviour of mod_dir.
    • permanent: issues a 301 (permanent) redirection to the index resource.
    • temp: this has the same effect as on
    • seeother: issues a 303 redirection (also known as "See Other") to the index resource.
    • 3xx-code: issues a redirection marked by the chosen 3xx code.

    Example

    DirectoryIndexRedirect on

    A request for http://example.com/docs/ would return a temporary redirect to http://example.com/docs/index.html if it exists.

    top

    DirectorySlash Directive

    Description:Toggle trailing slash redirects on or off
    Syntax:DirectorySlash On|Off
    Default:DirectorySlash On
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_dir

    The DirectorySlash directive determines whether mod_dir should fixup URLs pointing to a directory or not.

    Typically if a user requests a resource without a trailing slash, which points to a directory, mod_dir redirects him to the same resource, but with trailing slash for some good reasons:

    • The user is finally requesting the canonical URL of the resource
    • mod_autoindex works correctly. Since it doesn't emit the path in the link, it would point to the wrong path.
    • DirectoryIndex will be evaluated only for directories requested with trailing slash.
    • Relative URL references inside html pages will work correctly.

    If you don't want this effect and the reasons above don't apply to you, you can turn off the redirect as shown below. However, be aware that there are possible security implications to doing this.

    # see security warning below!
    <Location "/some/path">
        DirectorySlash Off
        SetHandler some-handler
    </Location>

    Security Warning

    Turning off the trailing slash redirect may result in an information disclosure. Consider a situation where mod_autoindex is active (Options +Indexes) and DirectoryIndex is set to a valid resource (say, index.html) and there's no other special handler defined for that URL. In this case a request with a trailing slash would show the index.html file. But a request without trailing slash would list the directory contents.

    Also note that some browsers may erroneously change POST requests into GET (thus discarding POST data) when a redirect is issued.

    top

    FallbackResource Directive

    Description:Define a default URL for requests that don't map to a file
    Syntax:FallbackResource disabled | local-url
    Default:disabled - httpd will return 404 (Not Found)
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Base
    Module:mod_dir
    Compatibility:The disabled argument is available in version 2.4.4 and later

    Use this to set a handler for any URL that doesn't map to anything in your filesystem, and would otherwise return HTTP 404 (Not Found). For example

    FallbackResource /not-404.php

    will cause requests for non-existent files to be handled by not-404.php, while requests for files that exist are unaffected.

    It is frequently desirable to have a single file or resource handle all requests to a particular directory, except those requests that correspond to an existing file or script. This is often referred to as a 'front controller.'

    In earlier versions of httpd, this effect typically required mod_rewrite, and the use of the -f and -d tests for file and directory existence. This now requires only one line of configuration.

    FallbackResource /index.php

    Existing files, such as images, css files, and so on, will be served normally.

    Use the disabled argument to disable that feature if inheritance from a parent directory is not desired.

    In a sub-URI, such as http://example.com/blog/ this sub-URI has to be supplied as local-url:

    <Directory "/web/example.com/htdocs/blog">
        FallbackResource /blog/index.php
    </Directory>
    <Directory "/web/example.com/htdocs/blog/images">
        FallbackResource disabled
    </Directory>

    Available Languages:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/quickreference.html.en0000644000000000000500000055425213523273316020524 0ustar rootsrc Directive Quick Reference - Apache HTTP Server Version 2.4
    <-

    Directive Quick Reference

    Available Languages:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    The directive quick reference shows the usage, default, status, and context of each Apache configuration directive. For more information about each of these, see the Directive Dictionary.

    The first column gives the directive name and usage. The second column shows the default value of the directive, if a default exists. If the default is too large to display, it will be truncated and followed by "+".

    The third and fourth columns list the contexts where the directive is allowed and the status of the directive according to the legend tables below.

     A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X 
    sserver config
    vvirtual host
    ddirectory
    h.htaccess
    pproxy section
    CCore
    MMPM
    BBase
    EExtension
    XExperimental
    TExternal
    AcceptFilter protocol accept_filtersC
    Configures optimizations for a Protocol's Listener Sockets
    AcceptPathInfo On|Off|Default Default svdhC
    Resources accept trailing pathname information
    AccessFileName filename [filename] ... .htaccess svC
    Name of the distributed configuration file
    Action action-type cgi-script [virtual]svdhB
    Activates a CGI script for a particular handler or content-type
    AddAlt string file [file] ...svdhB
    Alternate text to display for a file, instead of an icon selected by filename
    AddAltByEncoding string MIME-encoding [MIME-encoding] ...svdhB
    Alternate text to display for a file instead of an icon selected by MIME-encoding
    AddAltByType string MIME-type [MIME-type] ...svdhB
    Alternate text to display for a file, instead of an icon selected by MIME content-type
    AddCharset charset extension [extension] ...svdhB
    Maps the given filename extensions to the specified content charset
    AddDefaultCharset On|Off|charset Off svdhC
    Default charset parameter to be added when a response content-type is text/plain or text/html
    AddDescription string file [file] ...svdhB
    Description to display for a file
    AddEncoding encoding extension [extension] ...svdhB
    Maps the given filename extensions to the specified encoding type
    AddHandler handler-name extension [extension] ...svdhB
    Maps the filename extensions to the specified handler
    AddIcon icon name [name] ...svdhB
    Icon to display for a file selected by name
    AddIconByEncoding icon MIME-encoding [MIME-encoding] ...svdhB
    Icon to display next to files selected by MIME content-encoding
    AddIconByType icon MIME-type [MIME-type] ...svdhB
    Icon to display next to files selected by MIME content-type
    AddInputFilter filter[;filter...] extension [extension] ...svdhB
    Maps filename extensions to the filters that will process client requests
    AddLanguage language-tag extension [extension] ...svdhB
    Maps the given filename extension to the specified content language
    AddModuleInfo module-name stringsvE
    Adds additional information to the module information displayed by the server-info handler
    AddOutputFilter filter[;filter...] extension [extension] ...svdhB
    Maps filename extensions to the filters that will process responses from the server
    AddOutputFilterByType filter[;filter...] media-type [media-type] ...svdhB
    assigns an output filter to a particular media-type
    AddType media-type extension [extension] ...svdhB
    Maps the given filename extensions onto the specified content type
    Alias [URL-path] file-path|directory-pathsvdB
    Maps URLs to filesystem locations
    AliasMatch regex file-path|directory-pathsvB
    Maps URLs to filesystem locations using regular expressions
    Allow from all|host|env=[!]env-variable [host|env=[!]env-variable] ...dhE
    Controls which hosts can access an area of the server
    AllowCONNECT port[-port] [port[-port]] ... 443 563 svE
    Ports that are allowed to CONNECT through the proxy
    AllowEncodedSlashes On|Off|NoDecode Off svC
    Determines whether encoded path separators in URLs are allowed to be passed through
    AllowMethods reset|HTTP-method [HTTP-method]... reset dX
    Restrict access to the listed HTTP methods
    AllowOverride All|None|directive-type [directive-type] ... None (2.3.9 and lat +dC
    Types of directives that are allowed in .htaccess files
    AllowOverrideList None|directive [directive-type] ... None dC
    Individual directives that are allowed in .htaccess files
    Anonymous user [user] ...dhE
    Specifies userIDs that are allowed access without password verification
    Anonymous_LogEmail On|Off On dhE
    Sets whether the password entered will be logged in the error log
    Anonymous_MustGiveEmail On|Off On dhE
    Specifies whether blank passwords are allowed
    Anonymous_NoUserID On|Off Off dhE
    Sets whether the userID field may be empty
    Anonymous_VerifyEmail On|Off Off dhE
    Sets whether to check the password field for a correctly formatted email address
    AsyncRequestWorkerFactor factorsM
    Limit concurrent connections per process
    AuthBasicAuthoritative On|Off On dhB
    Sets whether authorization and authentication are passed to lower level modules
    AuthBasicFake off|username [password]dhB
    Fake basic authentication using the given expressions for username and password
    AuthBasicProvider provider-name [provider-name] ... file dhB
    Sets the authentication provider(s) for this location
    AuthBasicUseDigestAlgorithm MD5|Off Off dhB
    Check passwords against the authentication providers as if Digest Authentication was in force instead of Basic Authentication.
    AuthDBDUserPWQuery querydE
    SQL query to look up a password for a user
    AuthDBDUserRealmQuery querydE
    SQL query to look up a password hash for a user and realm.
    AuthDBMGroupFile file-pathdhE
    Sets the name of the database file containing the list of user groups for authorization
    AuthDBMType default|SDBM|GDBM|NDBM|DB default dhE
    Sets the type of database file that is used to store passwords
    AuthDBMUserFile file-pathdhE
    Sets the name of a database file containing the list of users and passwords for authentication
    AuthDigestAlgorithm MD5|MD5-sess MD5 dhE
    Selects the algorithm used to calculate the challenge and response hashes in digest authentication
    AuthDigestDomain URI [URI] ...dhE
    URIs that are in the same protection space for digest authentication
    AuthDigestNonceLifetime seconds 300 dhE
    How long the server nonce is valid
    AuthDigestProvider provider-name [provider-name] ... file dhE
    Sets the authentication provider(s) for this location
    AuthDigestQop none|auth|auth-int [auth|auth-int] auth dhE
    Determines the quality-of-protection to use in digest authentication
    AuthDigestShmemSize size 1000 sE
    The amount of shared memory to allocate for keeping track of clients
    AuthFormAuthoritative On|Off On dhB
    Sets whether authorization and authentication are passed to lower level modules
    AuthFormBody fieldnamedB
    The name of a form field carrying the body of the request to attempt on successful login
    AuthFormDisableNoStore On|Off Off dB
    Disable the CacheControl no-store header on the login page
    AuthFormFakeBasicAuth On|Off Off dB
    Fake a Basic Authentication header
    AuthFormLocation fieldnamedB
    The name of a form field carrying a URL to redirect to on successful login
    AuthFormLoginRequiredLocation urldB
    The URL of the page to be redirected to should login be required
    AuthFormLoginSuccessLocation urldB
    The URL of the page to be redirected to should login be successful
    AuthFormLogoutLocation uridB
    The URL to redirect to after a user has logged out
    AuthFormMethod fieldnamedB
    The name of a form field carrying the method of the request to attempt on successful login
    AuthFormMimetype fieldnamedB
    The name of a form field carrying the mimetype of the body of the request to attempt on successful login
    AuthFormPassword fieldnamedB
    The name of a form field carrying the login password
    AuthFormProvider provider-name [provider-name] ... file dhB
    Sets the authentication provider(s) for this location
    AuthFormSitePassphrase secretdB
    Bypass authentication checks for high traffic sites
    AuthFormSize sizedB
    The largest size of the form in bytes that will be parsed for the login details
    AuthFormUsername fieldnamedB
    The name of a form field carrying the login username
    AuthGroupFile file-pathdhB
    Sets the name of a text file containing the list of user groups for authorization
    AuthLDAPAuthorizePrefix prefix AUTHORIZE_ dhE
    Specifies the prefix for environment variables set during authorization
    AuthLDAPBindAuthoritative off|on on dhE
    Determines if other authentication providers are used when a user can be mapped to a DN but the server cannot successfully bind with the user's credentials.
    AuthLDAPBindDN distinguished-namedhE
    Optional DN to use in binding to the LDAP server
    AuthLDAPBindPassword passworddhE
    Password used in conjunction with the bind DN
    AuthLDAPCharsetConfig file-pathsE
    Language to charset conversion configuration file
    AuthLDAPCompareAsUser on|off off dhE
    Use the authenticated user's credentials to perform authorization comparisons
    AuthLDAPCompareDNOnServer on|off on dhE
    Use the LDAP server to compare the DNs
    AuthLDAPDereferenceAliases never|searching|finding|always always dhE
    When will the module de-reference aliases
    AuthLDAPGroupAttribute attribute member uniqueMember +dhE
    LDAP attributes used to identify the user members of groups.
    AuthLDAPGroupAttributeIsDN on|off on dhE
    Use the DN of the client username when checking for group membership
    AuthLDAPInitialBindAsUser off|on off dhE
    Determines if the server does the initial DN lookup using the basic authentication users' own username, instead of anonymously or with hard-coded credentials for the server
    AuthLDAPInitialBindPattern regex substitution (.*) $1 (remote use +dhE
    Specifies the transformation of the basic authentication username to be used when binding to the LDAP server to perform a DN lookup
    AuthLDAPMaxSubGroupDepth Number 10 dhE
    Specifies the maximum sub-group nesting depth that will be evaluated before the user search is discontinued.
    AuthLDAPRemoteUserAttribute uiddhE
    Use the value of the attribute returned during the user query to set the REMOTE_USER environment variable
    AuthLDAPRemoteUserIsDN on|off off dhE
    Use the DN of the client username to set the REMOTE_USER environment variable
    AuthLDAPSearchAsUser on|off off dhE
    Use the authenticated user's credentials to perform authorization searches
    AuthLDAPSubGroupAttribute attribute member uniqueMember +dhE
    Specifies the attribute labels, one value per directive line, used to distinguish the members of the current group that are groups.
    AuthLDAPSubGroupClass LdapObjectClass groupOfNames groupO +dhE
    Specifies which LDAP objectClass values identify directory objects that are groups during sub-group processing.
    AuthLDAPURL url [NONE|SSL|TLS|STARTTLS]dhE
    URL specifying the LDAP search parameters
    AuthMerging Off | And | Or Off dhB
    Controls the manner in which each configuration section's authorization logic is combined with that of preceding configuration sections.
    AuthName auth-domaindhB
    Authorization realm for use in HTTP authentication
    AuthnCacheContext directory|server|custom-stringdB
    Specify a context string for use in the cache key
    AuthnCacheEnablesB
    Enable Authn caching configured anywhere
    AuthnCacheProvideFor authn-provider [...]dhB
    Specify which authn provider(s) to cache for
    AuthnCacheSOCache provider-name[:provider-args]sB
    Select socache backend provider to use
    AuthnCacheTimeout timeout (seconds)dhB
    Set a timeout for cache entries
    <AuthnProviderAlias baseProvider Alias> ... </AuthnProviderAlias>sB
    Enclose a group of directives that represent an extension of a base authentication provider and referenced by the specified alias
    AuthnzFcgiCheckAuthnProvider provider-name|None option ...dE
    Enables a FastCGI application to handle the check_authn authentication hook.
    AuthnzFcgiDefineProvider type provider-name backend-addresssE
    Defines a FastCGI application as a provider for authentication and/or authorization
    AuthType None|Basic|Digest|FormdhB
    Type of user authentication
    AuthUserFile file-pathdhB
    Sets the name of a text file containing the list of users and passwords for authentication
    AuthzDBDLoginToReferer On|Off Off dE
    Determines whether to redirect the Client to the Referring page on successful login or logout if a Referer request header is present
    AuthzDBDQuery querydE
    Specify the SQL Query for the required operation
    AuthzDBDRedirectQuery querydE
    Specify a query to look up a login page for the user
    AuthzDBMType default|SDBM|GDBM|NDBM|DB default dhE
    Sets the type of database file that is used to store list of user groups
    <AuthzProviderAlias baseProvider Alias Require-Parameters> ... </AuthzProviderAlias> sB
    Enclose a group of directives that represent an extension of a base authorization provider and referenced by the specified alias
    AuthzSendForbiddenOnFailure On|Off Off dhB
    Send '403 FORBIDDEN' instead of '401 UNAUTHORIZED' if authentication succeeds but authorization fails
    BalancerGrowth # 5 svE
    Number of additional Balancers that can be added Post-configuration
    BalancerInherit On|Off On svE
    Inherit ProxyPassed Balancers/Workers from the main server
    BalancerMember [balancerurl] url [key=value [key=value ...]]dE
    Add a member to a load balancing group
    BalancerPersist On|Off Off svE
    Attempt to persist changes made by the Balancer Manager across restarts.
    BrotliAlterETag AddSuffix|NoChange|Remove AddSuffix svE
    How the outgoing ETag header should be modified during compression
    BrotliCompressionMaxInputBlock valuesvE
    Maximum input block size
    BrotliCompressionQuality value 5 svE
    Compression quality
    BrotliCompressionWindow value 18 svE
    Brotli sliding compression window size
    BrotliFilterNote [type] notenamesvE
    Places the compression ratio in a note for logging
    BrowserMatch regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables conditional on HTTP User-Agent
    BrowserMatchNoCase regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables conditional on User-Agent without respect to case
    BufferedLogs On|Off Off sB
    Buffer log entries in memory before writing to disk
    BufferSize integer 131072 svdhE
    Maximum size in bytes to buffer by the buffer filter
    CacheDefaultExpire seconds 3600 (one hour) svdhE
    The default duration to cache a document when no expiry date is specified.
    CacheDetailHeader on|off off svdhE
    Add an X-Cache-Detail header to the response.
    CacheDirLength length 2 svE
    The number of characters in subdirectory names
    CacheDirLevels levels 2 svE
    The number of levels of subdirectories in the cache.
    CacheDisable url-string | onsvdhE
    Disable caching of specified URLs
    CacheEnable cache_type [url-string]svdE
    Enable caching of specified URLs using a specified storage manager
    CacheFile file-path [file-path] ...sX
    Cache a list of file handles at startup time
    CacheHeader on|off off svdhE
    Add an X-Cache header to the response.
    CacheIgnoreCacheControl On|Off Off svE
    Ignore request to not serve cached content to client
    CacheIgnoreHeaders header-string [header-string] ... None svE
    Do not store the given HTTP header(s) in the cache.
    CacheIgnoreNoLastMod On|Off Off svdhE
    Ignore the fact that a response has no Last Modified header.
    CacheIgnoreQueryString On|Off Off svE
    Ignore query string when caching
    CacheIgnoreURLSessionIdentifiers identifier [identifier] ... None svE
    Ignore defined session identifiers encoded in the URL when caching
    CacheKeyBaseURL URLsvE
    Override the base URL of reverse proxied cache keys.
    CacheLastModifiedFactor float 0.1 svdhE
    The factor used to compute an expiry date based on the LastModified date.
    CacheLock on|off off svE
    Enable the thundering herd lock.
    CacheLockMaxAge integer 5 svE
    Set the maximum possible age of a cache lock.
    CacheLockPath directory /tmp/mod_cache-lock +svE
    Set the lock path directory.
    CacheMaxExpire seconds 86400 (one day) svdhE
    The maximum time in seconds to cache a document
    CacheMaxFileSize bytes 1000000 svdhE
    The maximum size (in bytes) of a document to be placed in the cache
    CacheMinExpire seconds 0 svdhE
    The minimum time in seconds to cache a document
    CacheMinFileSize bytes 1 svdhE
    The minimum size (in bytes) of a document to be placed in the cache
    CacheNegotiatedDocs On|Off Off svB
    Allows content-negotiated documents to be cached by proxy servers
    CacheQuickHandler on|off on svE
    Run the cache from the quick handler.
    CacheReadSize bytes 0 svdhE
    The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    CacheReadTime milliseconds 0 svdhE
    The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    CacheRoot directorysvE
    The directory root under which cache files are stored
    CacheSocache type[:args]svE
    The shared object cache implementation to use
    CacheSocacheMaxSize bytes 102400 svdhE
    The maximum size (in bytes) of an entry to be placed in the cache
    CacheSocacheMaxTime seconds 86400 svdhE
    The maximum time (in seconds) for a document to be placed in the cache
    CacheSocacheMinTime seconds 600 svdhE
    The minimum time (in seconds) for a document to be placed in the cache
    CacheSocacheReadSize bytes 0 svdhE
    The minimum size (in bytes) of the document to read and be cached before sending the data downstream
    CacheSocacheReadTime milliseconds 0 svdhE
    The minimum time (in milliseconds) that should elapse while reading before data is sent downstream
    CacheStaleOnError on|off on svdhE
    Serve stale content in place of 5xx responses.
    CacheStoreExpired On|Off Off svdhE
    Attempt to cache responses that the server reports as expired
    CacheStoreNoStore On|Off Off svdhE
    Attempt to cache requests or responses that have been marked as no-store.
    CacheStorePrivate On|Off Off svdhE
    Attempt to cache responses that the server has marked as private
    CGIDScriptTimeout time[s|ms]svdhB
    The length of time to wait for more output from the CGI program
    CGIMapExtension cgi-path .extensiondhC
    Technique for locating the interpreter for CGI scripts
    CGIPassAuth On|Off Off dhC
    Enables passing HTTP authorization headers to scripts as CGI variables
    CGIVar variable ruledhC
    Controls how some CGI variables are set
    CharsetDefault charsetsvdhE
    Charset to translate into
    CharsetOptions option [option] ... ImplicitAdd svdhE
    Configures charset translation behavior
    CharsetSourceEnc charsetsvdhE
    Source charset of files
    CheckCaseOnly on|off Off svdhE
    Limits the action of the speling module to case corrections
    CheckSpelling on|off Off svdhE
    Enables the spelling module
    ChrootDir /path/to/directorysB
    Directory for apache to run chroot(8) after startup.
    ContentDigest On|Off Off svdhC
    Enables the generation of Content-MD5 HTTP Response headers
    CookieDomain domainsvdhE
    The domain to which the tracking cookie applies
    CookieExpires expiry-periodsvdhE
    Expiry time for the tracking cookie
    CookieName token Apache svdhE
    Name of the tracking cookie
    CookieStyle Netscape|Cookie|Cookie2|RFC2109|RFC2965 Netscape svdhE
    Format of the cookie header field
    CookieTracking on|off off svdhE
    Enables tracking cookie
    CoreDumpDirectory directorysM
    Directory where Apache HTTP Server attempts to switch before dumping core
    CustomLog file|pipe format|nickname [env=[!]environment-variable| expr=expression]svB
    Sets filename and format of log file
    Dav On|Off|provider-name Off dE
    Enable WebDAV HTTP methods
    DavDepthInfinity on|off off svdE
    Allow PROPFIND, Depth: Infinity requests
    DavGenericLockDB file-pathsvdE
    Location of the DAV lock database
    DavLockDB file-pathsvE
    Location of the DAV lock database
    DavMinTimeout seconds 0 svdE
    Minimum amount of time the server holds a lock on a DAV resource
    DBDExptime time-in-seconds 300 svE
    Keepalive time for idle connections
    DBDInitSQL "SQL statement"svE
    Execute an SQL statement after connecting to a database
    DBDKeep number 2 svE
    Maximum sustained number of connections
    DBDMax number 10 svE
    Maximum number of connections
    DBDMin number 1 svE
    Minimum number of connections
    DBDParams param1=value1[,param2=value2]svE
    Parameters for database connection
    DBDPersist On|OffsvE
    Whether to use persistent connections
    DBDPrepareSQL "SQL statement" labelsvE
    Define an SQL prepared statement
    DBDriver namesvE
    Specify an SQL driver
    DefaultIcon url-pathsvdhB
    Icon to display for files when no specific icon is configured
    DefaultLanguage language-tagsvdhB
    Defines a default language-tag to be sent in the Content-Language header field for all resources in the current context that have not been assigned a language-tag by some other means.
    DefaultRuntimeDir directory-path DEFAULT_REL_RUNTIME +sC
    Base directory for the server run-time files
    DefaultType media-type|none none svdhC
    This directive has no effect other than to emit warnings if the value is not none. In prior versions, DefaultType would specify a default media type to assign to response content for which no other media type configuration could be found.
    Define parameter-name [parameter-value]svdC
    Define a variable
    DeflateBufferSize value 8096 svE
    Fragment size to be compressed at one time by zlib
    DeflateCompressionLevel valuesvE
    How much compression do we apply to the output
    DeflateFilterNote [type] notenamesvE
    Places the compression ratio in a note for logging
    DeflateInflateLimitRequestBody valuesvdhE
    Maximum size of inflated request bodies
    DeflateInflateRatioBurst value 3 svdhE
    Maximum number of times the inflation ratio for request bodies can be crossed
    DeflateInflateRatioLimit value 200 svdhE
    Maximum inflation ratio for request bodies
    DeflateMemLevel value 9 svE
    How much memory should be used by zlib for compression
    DeflateWindowSize value 15 svE
    Zlib compression window size
    Deny from all|host|env=[!]env-variable [host|env=[!]env-variable] ...dhE
    Controls which hosts are denied access to the server
    <Directory directory-path> ... </Directory>svC
    Enclose a group of directives that apply only to the named file-system directory, sub-directories, and their contents.
    DirectoryCheckHandler On|Off Off svdhB
    Toggle how this module responds when another handler is configured
    DirectoryIndex disabled | local-url [local-url] ... index.html svdhB
    List of resources to look for when the client requests a directory
    DirectoryIndexRedirect on | off | permanent | temp | seeother | 3xx-code off svdhB
    Configures an external redirect for directory indexes.
    <DirectoryMatch regex> ... </DirectoryMatch>svC
    Enclose directives that apply to the contents of file-system directories matching a regular expression.
    DirectorySlash On|Off On svdhB
    Toggle trailing slash redirects on or off
    DocumentRoot directory-path "/usr/local/apache/ +svC
    Directory that forms the main document tree visible from the web
    DTracePrivileges On|Off Off sX
    Determines whether the privileges required by dtrace are enabled.
    DumpIOInput On|Off Off sE
    Dump all input data to the error log
    DumpIOOutput On|Off Off sE
    Dump all output data to the error log
    <Else> ... </Else>svdhC
    Contains directives that apply only if the condition of a previous <If> or <ElseIf> section is not satisfied by a request at runtime
    <ElseIf expression> ... </ElseIf>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime while the condition of a previous <If> or <ElseIf> section is not satisfied
    EnableExceptionHook On|Off Off sM
    Enables a hook that runs exception handlers after a crash
    EnableMMAP On|Off On svdhC
    Use memory-mapping to read files during delivery
    EnableSendfile On|Off Off svdhC
    Use the kernel sendfile support to deliver files to the client
    Error messagesvdhC
    Abort configuration parsing with a custom error message
    ErrorDocument error-code documentsvdhC
    What the server will return to the client in case of an error
    ErrorLog file-path|syslog[:[facility][:tag]] logs/error_log (Uni +svC
    Location where the server will log errors
    ErrorLogFormat [connection|request] formatsvC
    Format specification for error log entries
    ExamplesvdhX
    Demonstration directive to illustrate the Apache module API
    ExpiresActive On|Off Off svdhE
    Enables generation of Expires headers
    ExpiresByType MIME-type <code>secondssvdhE
    Value of the Expires header configured by MIME type
    ExpiresDefault <code>secondssvdhE
    Default algorithm for calculating expiration time
    ExtendedStatus On|Off Off[*] sC
    Keep track of extended status information for each request
    ExtFilterDefine filtername parameterssE
    Define an external filter
    ExtFilterOptions option [option] ... NoLogStderr dE
    Configure mod_ext_filter options
    FallbackResource disabled | local-urlsvdhB
    Define a default URL for requests that don't map to a file
    FileETag component ... MTime Size svdhC
    File attributes used to create the ETag HTTP response header for static files
    <Files filename> ... </Files>svdhC
    Contains directives that apply to matched filenames
    <FilesMatch regex> ... </FilesMatch>svdhC
    Contains directives that apply to regular-expression matched filenames
    FilterChain [+=-@!]filter-name ...svdhB
    Configure the filter chain
    FilterDeclare filter-name [type]svdhB
    Declare a smart filter
    FilterProtocol filter-name [provider-name] proto-flagssvdhB
    Deal with correct HTTP protocol handling
    FilterProvider filter-name provider-name expressionsvdhB
    Register a content filter
    FilterTrace filter-name levelsvdB
    Get debug/diagnostic information from mod_filter
    ForceLanguagePriority None|Prefer|Fallback [Prefer|Fallback] Prefer svdhB
    Action to take if a single acceptable document is not found
    ForceType media-type|NonedhC
    Forces all matching files to be served with the specified media type in the HTTP Content-Type header field
    ForensicLog filename|pipesvE
    Sets filename of the forensic log
    GlobalLogfile|pipe format|nickname [env=[!]environment-variable| expr=expression]sB
    Sets filename and format of log file
    GprofDir /tmp/gprof/|/tmp/gprof/%svC
    Directory to write gmon.out profiling data to.
    GracefulShutdownTimeout seconds 0 sM
    Specify a timeout after which a gracefully shutdown server will exit.
    Group unix-group #-1 sB
    Group under which the server will answer requests
    H2CopyFiles on|off off svdhE
    Determine file handling in responses
    H2Direct on|off on for h2c, off for +svE
    H2 Direct Protocol Switch
    H2EarlyHints on|off off svE
    Determine sending of 103 status codes
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] svdhE
    Configure HTTP response headers
    HeaderName filenamesvdhB
    Name of the file that will be inserted at the top of the index listing
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending heartbeat requests to this server
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Enables DNS lookups on client IP addresses
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    Enables logging of the RFC 1413 identity of the remote user
    IdentityCheckTimeout seconds 30 svdE
    Determines the timeout duration for ident requests
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime
    <IfDefine [!]parameter-name> ... </IfDefine>svdhC
    Encloses directives that will be processed only if a test is true at startup
    <IfDirective [!]directive-name> ... </IfDirective>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific directive
    <IfFile [!]filename> ... </IfFile>svdhC
    Encloses directives that will be processed only if file exists at startup
    <IfModule [!]module-file|module-identifier> ... </IfModule>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific module
    <IfSection [!]section-name> ... </IfSection>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific section directive
    <IfVersion [[!]operator] version> ... </IfVersion>svdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates that are not explicitly mapped
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling an imagemap
    Include file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IndexHeadInsert "markup ..."svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ... "." svdhB
    Adds to the list of files to hide when listing a directory
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing a directory
    IndexOptions [+|-]option [[+|-]option] ...svdhB
    Various configuration settings for directory indexing
    IndexOrderDefault Ascending|Descending Name|Date|Size|Description Ascending Name svdhB
    Sets the default ordering of the directory index
    IndexStyleSheet url-pathsvdhB
    Adds a CSS stylesheet to the directory index
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field
    ISAPICacheFile file-path [file-path] ...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI extensions
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI extensions
    KeepAlive On|Off On svC
    Enables HTTP persistent connections
    KeepAliveTimeout num[ms] 5 svC
    Amount of time the server will wait for subsequent requests on a persistent connection
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to the specified maximum size, for potential use by filters such as mod_include.
    LanguagePriority MIME-lang [MIME-lang] ...svdhB
    The precedence of language variants for cases where the client does not express a preference
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare operations
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain valid
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted Certificate Authority or global client certificates
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... </Limit>dhC
    Restrict enclosed access controls to only certain HTTP methods
    <LimitExcept method [method] ... > ... </LimitExcept>dhC
    Restrict access controls to all HTTP methods except the named ones
    LimitInternalRecursion number [number] 10 svC
    Determine maximum number of internal redirects and nested subrequests
    LimitRequestBody bytes 0 svdhC
    Restricts the total size of the HTTP request body sent from the client
    LimitRequestFields number 100 svC
    Limits the number of HTTP request header fields that will be accepted from the client
    LimitRequestFieldSize bytes 8190 svC
    Limits the size of the HTTP request header allowed from the client
    LimitRequestLine bytes 8190 svC
    Limit the size of the HTTP request line that will be accepted from the client
    LimitXMLRequestBody bytes 1000000 svdhC
    Limits the size of an XML-based request body
    Listen [IP-address:]portnumber [protocol]sM
    IP addresses and ports that the server listens to
    ListenBackLog backlog 511 sM
    Maximum length of the queue of pending connections
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of listeners' buckets
    LoadFile filename [filename] ...svE
    Link in the named object file or library
    LoadModule module filenamesvE
    Links in the object file or library, and adds to the list of active modules
    <Location URL-path|URL> ... </Location>svC
    Applies the enclosed directives only to matching URLs
    <LocationMatch regex> ... </LocationMatch>svC
    Applies the enclosed directives only to regular-expression matching URLs
    LogFormat format|nickname [nickname] "%h %l %u %t \"%r\" +svB
    Describes a format for use in a log file
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel [module:]level [module:level] ... warn svdC
    Controls the verbosity of the ErrorLog
    LogMessage message [hook=hook] [expr=expression] dX
    Log user-defined message to error log
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    <Macro name [par1 .. parN]> ... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server will handle during its life
    MaxKeepAliveRequests number 100 svC
    Number of requests allowed on a persistent connection
    MaxMemFree KBytes 2048 sM
    Maximum amount of memory that the main allocator is allowed to hold without calling free()
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete resource
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed simultaneously
    MaxSpareServers number 10 sM
    Maximum number of idle child server processes
    MaxSpareThreads numbersM
    Maximum number of idle threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDBaseServer on|off off sE
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sE
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsE
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url https://acme-v02.ap +sE
    The URL of the ACME Certificate Authority service.
    MDCertificateFile path-to-pem-filesE
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesE
    Specify a static private key for for the static cerrtificate.
    MDCertificateProtocol protocol ACME sE
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sE
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsE
    -
    MDDriveMode always|auto|manual auto sE
    former name of MDRenewMode.
    MDHttpProxy urlsE
    Define a proxy for outgoing connections.
    MDMember hostnamesE
    Additional hostname for the managed domain.
    MDMembers auto|manual auto sE
    Control if the alias domain names are automatically added.
    MDMessageCmd path-to-cmd optional-argssE
    Handle events for Manage Domains
    MDMustStaple on|off off sE
    Control if new certificates carry the OCSP Must Staple flag.
    MDNotifyCmd path [ args ]sE
    Run a program when a Managed Domain is ready.
    MDomain dns-name [ other-dns-name... ] [auto|manual]sE
    Define list of domain names that belong to one group.
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sE
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sE
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sE
    Set type and size of the private keys generated.
    MDRenewMode always|auto|manual auto sE
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sE
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sE
    Redirects http: traffic to https: for Managed Domains.
    MDServerStatus on|off on sE
    Control if Managed Domain information is added to server-status.
    MDStoreDir path md sE
    Path on the local file system to store the Managed Domains data.
    MDWarnWindow duration 10% sE
    Define the time window when you want to be warned about an expiring certificate.
    MemcacheConnTTL num[units] 15s svE
    Keepalive time for idle connections
    MergeSlashes ON|OFF ON svC
    Controls whether the server merges consecutive slashes in URLs.
    MergeTrailers [on|off] off svC
    Determines whether trailers are merged into headers
    MetaDir directory .web svdhE
    Name of the directory to find CERN-style meta information files
    MetaFiles on|off off svdhE
    Activates CERN meta-file processing
    MetaSuffix suffix .meta svdhE
    File name suffix for the file containing CERN-style meta information
    MimeMagicFile file-pathsvE
    Enable MIME-type determination based on file contents using the specified magic file
    MinSpareServers number 5 sM
    Minimum number of idle child server processes
    MinSpareThreads numbersM
    Minimum number of idle threads available to handle request spikes
    MMapFile file-path [file-path] ...sX
    Map a list of files into memory at startup time
    ModemStandard V.21|V.26bis|V.32|V.34|V.92dX
    Modem standard to simulate
    ModMimeUsePathInfo On|Off Off dB
    Tells mod_mime to treat path_info components as part of the filename
    MultiviewsMatch Any|NegotiatedOnly|Filters|Handlers [Handlers|Filters] NegotiatedOnly svdhB
    The types of files that will be included when searching for a matching file with MultiViews
    Mutex mechanism [default|mutex-name] ... [OmitPID] default sC
    Configures mutex mechanism and lock file directory for all or specified mutexes
    NameVirtualHost addr[:port]sC
    DEPRECATED: Designates an IP address for name-virtual hosting
    NoProxy host [host] ...svE
    Hosts, domains, or networks that will be connected to directly
    NWSSLTrustedCerts filename [filename] ...sB
    List of additional client certificates
    NWSSLUpgradeable [IP-address:]portnumbersB
    Allows a connection to be upgraded to an SSL connection upon request
    Options [+|-]option [[+|-]option] ... FollowSymlinks svdhC
    Configures what features are available in a particular directory
    Order ordering Deny,Allow dhE
    Controls the default access state and the order in which Allow and Deny are evaluated.
    OutputSed sed-commanddhX
    Sed command for filtering response content
    PassEnv env-variable [env-variable] ...svdhB
    Passes environment variables from the shell
    PidFile filename logs/httpd.pid sM
    File where the server records the process ID of the daemon
    PrivilegesMode FAST|SECURE|SELECTIVE FAST svdX
    Trade off processing speed and efficiency vs security against malicious privileges-aware code.
    Protocol protocolsvC
    Protocol for a listening socket
    ProtocolEcho On|Off Off svX
    Turn the echo server on or off
    Protocols protocol ... http/1.1 svC
    Protocols available for a server/virtual host
    ProtocolsHonorOrder On|Off On svC
    Determines if order of Protocols determines precedence during negotiation
    <Proxy wildcard-url> ...</Proxy>svE
    Container for directives applied to proxied resources
    Proxy100Continue Off|On On svdE
    Forward 100-continue expectation to the origin server
    ProxyAddHeaders Off|On On svdE
    Add proxy information in X-Forwarded-* headers
    ProxyBadHeader IsError|Ignore|StartBody IsError svE
    Determines how to handle bad header lines in a response
    ProxyBlock *|word|host|domain [word|host|domain] ...svE
    Words, hosts, or domains that are banned from being proxied
    ProxyDomain DomainsvE
    Default domain name for proxied requests
    ProxyErrorOverride On|Off Off svdE
    Override error pages for proxied content
    ProxyExpressDBMFile pathnamesvE
    Pathname to DBM file.
    ProxyExpressDBMType type default svE
    DBM type of file.
    ProxyExpressEnable on|off off svE
    Enable the module functionality.
    ProxyFCGIBackendType FPM|GENERIC FPM svdhE
    Specify the type of backend FastCGI application
    ProxyFCGISetEnvIf conditional-expression [!]environment-variable-name [value-expression]svdhE
    Allow variables sent to FastCGI servers to be fixed up
    ProxyFtpDirCharset character_set ISO-8859-1 svdE
    Define the character set for proxied FTP listings
    ProxyFtpEscapeWildcards on|off on svdE
    Whether wildcards in requested filenames are escaped when sent to the FTP server
    ProxyFtpListOnWildcard on|off on svdE
    Whether wildcards in requested filenames trigger a file listing
    ProxyHCExpr name {ap_expr expression}svE
    Creates a named condition expression to use to determine health of the backend based on its response
    ProxyHCTemplate name parameter=setting [...]svE
    Creates a named template for setting various health check parameters
    ProxyHCTPsize size 16 sE
    Sets the total server-wide size of the threadpool used for the health check workers
    ProxyHTMLBufSize bytes 8192 svdB
    Sets the buffer size increment for buffering inline scripts and stylesheets.
    ProxyHTMLCharsetOut Charset | *svdB
    Specify a charset for mod_proxy_html output.
    ProxyHTMLDocType HTML|XHTML [Legacy]
    OR
    ProxyHTMLDocType fpi [SGML|XML]
    svdB
    Sets an HTML or XHTML document type declaration.
    ProxyHTMLEnable On|Off Off svdB
    Turns the proxy_html filter on or off.
    ProxyHTMLEvents attribute [attribute ...]svdB
    Specify attributes to treat as scripting events.
    ProxyHTMLExtended On|Off Off svdB
    Determines whether to fix links in inline scripts, stylesheets, and scripting events.
    ProxyHTMLFixups [lowercase] [dospath] [reset]svdB
    Fixes for simple HTML errors.
    ProxyHTMLInterp On|Off Off svdB
    Enables per-request interpolation of ProxyHTMLURLMap rules.
    ProxyHTMLLinks element attribute [attribute2 ...]svdB
    Specify HTML elements that have URL attributes to be rewritten.
    ProxyHTMLMeta On|Off Off svdB
    Turns on or off extra pre-parsing of metadata in HTML <head> sections.
    ProxyHTMLStripComments On|Off Off svdB
    Determines whether to strip HTML comments.
    ProxyHTMLURLMap from-pattern to-pattern [flags] [cond]svdB
    Defines a rule to rewrite HTML links
    ProxyIOBufferSize bytes 8192 svE
    Determine size of internal data throughput buffer
    <ProxyMatch regex> ...</ProxyMatch>svE
    Container for directives applied to regular-expression-matched proxied resources
    ProxyMaxForwards number -1 svE
    Maximium number of proxies that a request can be forwarded through
    ProxyPass [path] !|url [key=value [key=value ...]] [nocanon] [interpolate] [noquery]svdE
    Maps remote servers into the local server URL-space
    ProxyPassInherit On|Off On svE
    Inherit ProxyPass directives defined from the main server
    ProxyPassInterpolateEnv On|Off Off svdE
    Enable Environment Variable interpolation in Reverse Proxy configurations
    ProxyPassMatch [regex] !|url [key=value [key=value ...]]svdE
    Maps remote servers into the local server URL-space using regular expressions
    ProxyPassReverse [path] url [interpolate]svdE
    Adjusts the URL in HTTP response headers sent from a reverse proxied server
    ProxyPassReverseCookieDomain internal-domain public-domain [interpolate]svdE
    Adjusts the Domain string in Set-Cookie headers from a reverse- proxied server
    ProxyPassReverseCookiePath internal-path public-path [interpolate]svdE
    Adjusts the Path string in Set-Cookie headers from a reverse- proxied server
    ProxyPreserveHost On|Off Off svdE
    Use incoming Host HTTP request header for proxy request
    ProxyReceiveBufferSize bytes 0 svE
    Network buffer size for proxied HTTP and FTP connections
    ProxyRemote match remote-serversvE
    Remote proxy used to handle certain requests
    ProxyRemoteMatch regex remote-serversvE
    Remote proxy used to handle requests matched by regular expressions
    ProxyRequests On|Off Off svE
    Enables forward (standard) proxy requests
    ProxySCGIInternalRedirect On|Off|Headername On svdE
    Enable or disable internal redirect responses from the backend
    ProxySCGISendfile On|Off|Headername Off svdE
    Enable evaluation of X-Sendfile pseudo response header
    ProxySet url key=value [key=value ...]svdE
    Set various Proxy balancer or member parameters
    ProxySourceAddress addresssvE
    Set local IP address for outgoing proxy connections
    ProxyStatus Off|On|Full Off svE
    Show Proxy LoadBalancer status in mod_status
    ProxyTimeout secondssvE
    Network timeout for proxied requests
    ProxyVia On|Off|Full|Block Off svE
    Information provided in the Via HTTP response header for proxied requests
    QualifyRedirectURL ON|OFF OFF svdC
    Controls whether the REDIRECT_URL environment variable is fully qualified
    ReadmeName filenamesvdhB
    Name of the file that will be inserted at the end of the index listing
    ReceiveBufferSize bytes 0 sM
    TCP receive buffer size
    Redirect [status] [URL-path] URLsvdhB
    Sends an external redirect asking the client to fetch a different URL
    RedirectMatch [status] regex URLsvdhB
    Sends an external redirect based on a regular expression match of the current URL
    RedirectPermanent URL-path URLsvdhB
    Sends an external permanent redirect asking the client to fetch a different URL
    RedirectTemp URL-path URLsvdhB
    Sends an external temporary redirect asking the client to fetch a different URL
    RedisConnPoolTTL num[units] 15s svE
    TTL used for the connection pool with the Redis server(s)
    RedisTimeout num[units] 5s svE
    R/W timeout used for the connection with the Redis server(s)
    ReflectorHeader inputheader [outputheader]svdhB
    Reflect an input header to the output headers
    RegexDefaultOptions [none] [+|-]option [[+|-]option] ... DOTALL DOLLAR_ENDON +sC
    Allow to configure global/default options for regexes
    RegisterHttpMethod method [method [...]]sC
    Register non-standard HTTP methods
    RemoteIPHeader header-fieldsvB
    Declare the header field which should be parsed for useragent IP addresses
    RemoteIPInternalProxy proxy-ip|proxy-ip/subnet|hostname ...svB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPInternalProxyList filenamesvB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPProxiesHeader HeaderFieldNamesvB
    Declare the header field which will record all intermediate IP addresses
    RemoteIPProxyProtocol On|OffsvB
    Enable or disable PROXY protocol handling
    RemoteIPProxyProtocolExceptions host|range [host|range] [host|range]svB
    Disable processing of PROXY header for certain hosts or networks
    RemoteIPTrustedProxy proxy-ip|proxy-ip/subnet|hostname ...svB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoteIPTrustedProxyList filenamesvB
    Declare client intranet IP addresses trusted to present the RemoteIPHeader value
    RemoveCharset extension [extension] ...vdhB
    Removes any character set associations for a set of file extensions
    RemoveEncoding extension [extension] ...vdhB
    Removes any content encoding associations for a set of file extensions
    RemoveHandler extension [extension] ...vdhB
    Removes any handler associations for a set of file extensions
    RemoveInputFilter extension [extension] ...vdhB
    Removes any input filter associations for a set of file extensions
    RemoveLanguage extension [extension] ...vdhB
    Removes any language associations for a set of file extensions
    RemoveOutputFilter extension [extension] ...vdhB
    Removes any output filter associations for a set of file extensions
    RemoveType extension [extension] ...vdhB
    Removes any content type associations for a set of file extensions
    RequestHeader add|append|edit|edit*|merge|set|setifempty|unset header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] svdhE
    Configure HTTP request headers
    RequestReadTimeout [handshake=timeout[-maxtimeout][,MinRate=rate] [header=timeout[-maxtimeout][,MinRate=rate] [body=timeout[-maxtimeout][,MinRate=rate] handshake=0 header= +svE
    Set timeout values for completing the TLS handshake, receiving the request headers and/or body from client.
    Require [not] entity-name [entity-name] ...dhB
    Tests whether an authenticated user is authorized by an authorization provider.
    <RequireAll> ... </RequireAll>dhB
    Enclose a group of authorization directives of which none must fail and at least one must succeed for the enclosing directive to succeed.
    <RequireAny> ... </RequireAny>dhB
    Enclose a group of authorization directives of which one must succeed for the enclosing directive to succeed.
    <RequireNone> ... </RequireNone>dhB
    Enclose a group of authorization directives of which none must succeed for the enclosing directive to not fail.
    RewriteBase URL-pathdhE
    Sets the base URL for per-directory rewrites
    RewriteCond TestString CondPattern [flags]svdhE
    Defines a condition under which rewriting will take place
    RewriteEngine on|off off svdhE
    Enables or disables runtime rewriting engine
    RewriteMap MapName MapType:MapSource [MapTypeOptions] svE
    Defines a mapping function for key-lookup
    RewriteOptions OptionssvdhE
    Sets some special options for the rewrite engine
    RewriteRule Pattern Substitution [flags]svdhE
    Defines rules for the rewriting engine
    RLimitCPU seconds|max [seconds|max]svdhC
    Limits the CPU consumption of processes launched by Apache httpd children
    RLimitMEM bytes|max [bytes|max]svdhC
    Limits the memory consumption of processes launched by Apache httpd children
    RLimitNPROC number|max [number|max]svdhC
    Limits the number of processes that can be launched by processes launched by Apache httpd children
    Satisfy Any|All All dhE
    Interaction between host-level access control and user authentication
    ScoreBoardFile file-path logs/apache_runtime +sM
    Location of the file used to store coordination data for the child processes
    Script method cgi-scriptsvdB
    Activates a CGI script for a particular request method.
    ScriptAlias [URL-path] file-path|directory-pathsvdB
    Maps a URL to a filesystem location and designates the target as a CGI script
    ScriptAliasMatch regex file-path|directory-pathsvB
    Maps a URL to a filesystem location using a regular expression and designates the target as a CGI script
    ScriptInterpreterSource Registry|Registry-Strict|Script Script svdhC
    Technique for locating the interpreter for CGI scripts
    ScriptLog file-pathsvB
    Location of the CGI script error logfile
    ScriptLogBuffer bytes 1024 svB
    Maximum amount of PUT or POST requests that will be recorded in the scriptlog
    ScriptLogLength bytes 10385760 svB
    Size limit of the CGI script logfile
    ScriptSock file-path cgisock sB
    The filename prefix of the socket to use for communication with the cgi daemon
    SecureListen [IP-address:]portnumber Certificate-Name [MUTUAL]sB
    Enables SSL encryption for the specified port
    SeeRequestTail On|Off Off sC
    Determine if mod_status displays the first 63 characters of a request or the last 63, assuming the request itself is greater than 63 chars.
    SendBufferSize bytes 0 sM
    TCP buffer size
    ServerAdmin email-address|URLsvC
    Email address that the server includes in error messages sent to the client
    ServerAlias hostname [hostname] ...vC
    Alternate names for a host used when matching requests to name-virtual hosts
    ServerLimit numbersM
    Upper limit on configurable number of processes
    ServerName [scheme://]domain-name|ip-address[:port]svC
    Hostname and port that the server uses to identify itself
    ServerPath URL-pathvC
    Legacy URL pathname for a name-based virtual host that is accessed by an incompatible browser
    ServerRoot directory-path /usr/local/apache sC
    Base directory for the server installation
    ServerSignature On|Off|EMail Off svdhC
    Configures the footer on server-generated documents
    ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full Full sC
    Configures the Server HTTP response header
    Session On|Off Off svdhE
    Enables a session for the current directory or location
    SessionCookieName name attributessvdhE
    Name and attributes for the RFC2109 cookie storing the session
    SessionCookieName2 name attributessvdhE
    Name and attributes for the RFC2965 cookie storing the session
    SessionCookieRemove On|Off Off svdhE
    Control for whether session cookies should be removed from incoming HTTP headers
    SessionCryptoCipher name aes256 svdhX
    The crypto cipher to be used to encrypt the session
    SessionCryptoDriver name [param[=value]]sX
    The crypto driver to be used to encrypt the session
    SessionCryptoPassphrase secret [ secret ... ] svdhX
    The key used to encrypt the session
    SessionCryptoPassphraseFile filenamesvdX
    File containing keys used to encrypt the session
    SessionDBDCookieName name attributessvdhE
    Name and attributes for the RFC2109 cookie storing the session ID
    SessionDBDCookieName2 name attributessvdhE
    Name and attributes for the RFC2965 cookie storing the session ID
    SessionDBDCookieRemove On|Off On svdhE
    Control for whether session ID cookies should be removed from incoming HTTP headers
    SessionDBDDeleteLabel label deletesession svdhE
    The SQL query to use to remove sessions from the database
    SessionDBDInsertLabel label insertsession svdhE
    The SQL query to use to insert sessions into the database
    SessionDBDPerUser On|Off Off svdhE
    Enable a per user session
    SessionDBDSelectLabel label selectsession svdhE
    The SQL query to use to select sessions from the database
    SessionDBDUpdateLabel label updatesession svdhE
    The SQL query to use to update existing sessions in the database
    SessionEnv On|Off Off svdhE
    Control whether the contents of the session are written to the HTTP_SESSION environment variable
    SessionExclude pathsvdhE
    Define URL prefixes for which a session is ignored
    SessionExpiryUpdateInterval interval 0 (always update) svdhE
    Define the number of seconds a session's expiry may change without the session being updated
    SessionHeader headersvdhE
    Import session updates from a given HTTP response header
    SessionInclude pathsvdhE
    Define URL prefixes for which a session is valid
    SessionMaxAge maxage 0 svdhE
    Define a maximum age in seconds for a session
    SetEnv env-variable [value]svdhB
    Sets environment variables
    SetEnvIf attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables based on attributes of the request
    SetEnvIfExpr expr [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables based on an ap_expr expression
    SetEnvIfNoCase attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ...svdhB
    Sets environment variables based on attributes of the request without respect to case
    SetHandler handler-name|none|expressionsvdhC
    Forces all matching files to be processed by a handler
    SetInputFilter filter[;filter...]svdhC
    Sets the filters that will process client requests and POST input
    SetOutputFilter filter[;filter...]svdhC
    Sets the filters that will process responses from the server
    SSIEndTag tag "-->" svB
    String that ends an include element
    SSIErrorMsg message "[an error occurred +svdhB
    Error message displayed when there is an SSI error
    SSIETag on|off off dhB
    Controls whether ETags are generated by the server.
    SSILastModified on|off off dhB
    Controls whether Last-Modified headers are generated by the server.
    SSILegacyExprParser on|off off dhB
    Enable compatibility mode for conditional expressions.
    SSIStartTag tag "<!--#" svB
    String that starts an include element
    SSITimeFormat formatstring "%A, %d-%b-%Y %H:%M +svdhB
    Configures the format in which date strings are displayed
    SSIUndefinedEcho string "(none)" svdhB
    String displayed when an unset variable is echoed
    SSLCACertificateFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for Client Auth
    SSLCACertificatePath directory-pathsvE
    Directory of PEM-encoded CA Certificates for Client Auth
    SSLCADNRequestFile file-pathsvE
    File of concatenated PEM-encoded CA Certificates for defining acceptable CA names
    SSLCADNRequestPath directory-pathsvE
    Directory of PEM-encoded CA Certificates for defining acceptable CA names
    SSLCARevocationCheck chain|leaf|none [flags ...] none svE
    Enable CRL-based revocation checking
    SSLCARevocationFile file-pathsvE
    File of concatenated PEM-encoded CA CRLs for Client Auth
    SSLCARevocationPath directory-pathsvE
    Directory of PEM-encoded CA CRLs for Client Auth
    SSLCertificateChainFile file-pathsvE
    File of PEM-encoded Server CA Certificates
    SSLCertificateFile file-pathsvE
    Server PEM-encoded X.509 certificate data file
    SSLCertificateKeyFile file-pathsvE
    Server PEM-encoded private key file
    SSLCipherSuite [protocol] cipher-spec DEFAULT (depends on +svdhE
    Cipher Suite available for negotiation in SSL handshake
    SSLCompression on|off off svE
    Enable compression on the SSL level
    SSLCryptoDevice engine builtin sE
    Enable use of a cryptographic hardware accelerator
    SSLEngine on|off|optional off svE
    SSL Engine Operation Switch
    SSLFIPS on|off off sE
    SSL FIPS mode Switch
    SSLHonorCipherOrder on|off off svE
    Option to prefer the server's cipher preference order
    SSLInsecureRenegotiation on|off off svE
    Option to enable support for insecure renegotiation
    SSLOCSPDefaultResponder urisvE
    Set the default responder URI for OCSP validation
    SSLOCSPEnable on|leaf|off off svE
    Enable OCSP validation of the client certificate chain
    SSLOCSPNoverify On/Off Off svE
    skip the OCSP responder certificates verification
    SSLOCSPOverrideResponder on|off off svE
    Force use of the default responder URI for OCSP validation
    SSLOCSPProxyURL urlsvE
    Proxy URL to use for OCSP requests
    SSLOCSPResponderCertificateFile filesvE
    Set of trusted PEM encoded OCSP responder certificates
    SSLOCSPResponderTimeout seconds 10 svE
    Timeout for OCSP queries
    SSLOCSPResponseMaxAge seconds -1 svE
    Maximum allowable age for OCSP responses
    SSLOCSPResponseTimeSkew seconds 300 svE
    Maximum allowable time skew for OCSP response validation
    SSLOCSPUseRequestNonce on|off on svE
    Use a nonce within OCSP queries
    SSLOpenSSLConfCmd command-name command-valuesvE
    Configure OpenSSL parameters through its SSL_CONF API
    SSLOptions [+|-]option ...svdhE
    Configure various SSL engine run-time options
    SSLPassPhraseDialog type builtin sE
    Type of pass phrase dialog for encrypted private keys
    SSLProtocol [+|-]protocol ... all -SSLv3 (up to 2 +svE
    Configure usable SSL/TLS protocol versions
    SSLProxyCACertificateFile file-pathsvpE
    File of concatenated PEM-encoded CA Certificates for Remote Server Auth
    SSLProxyCACertificatePath directory-pathsvpE
    Directory of PEM-encoded CA Certificates for Remote Server Auth
    SSLProxyCARevocationCheck chain|leaf|none none svpE
    Enable CRL-based revocation checking for Remote Server Auth
    SSLProxyCARevocationFile file-pathsvpE
    File of concatenated PEM-encoded CA CRLs for Remote Server Auth
    SSLProxyCARevocationPath directory-pathsvpE
    Directory of PEM-encoded CA CRLs for Remote Server Auth
    SSLProxyCheckPeerCN on|off on svpE
    Whether to check the remote server certificate's CN field
    SSLProxyCheckPeerExpire on|off on svpE
    Whether to check if remote server certificate is expired
    SSLProxyCheckPeerName on|off on svpE
    Configure host name checking for remote server certificates
    SSLProxyCipherSuite [protocol] cipher-spec ALL:!ADH:RC4+RSA:+H +svpE
    Cipher Suite available for negotiation in SSL proxy handshake
    SSLProxyEngine on|off off svpE
    SSL Proxy Engine Operation Switch
    SSLProxyMachineCertificateChainFile filenamesvpE
    File of concatenated PEM-encoded CA certificates to be used by the proxy for choosing a certificate
    SSLProxyMachineCertificateFile filenamesvpE
    File of concatenated PEM-encoded client certificates and keys to be used by the proxy
    SSLProxyMachineCertificatePath directorysvpE
    Directory of PEM-encoded client certificates and keys to be used by the proxy
    SSLProxyProtocol [+|-]protocol ... all -SSLv3 (up to 2 +svpE
    Configure usable SSL protocol flavors for proxy usage
    SSLProxyVerify level none svpE
    Type of remote server Certificate verification
    SSLProxyVerifyDepth number 1 svpE
    Maximum depth of CA Certificates in Remote Server Certificate verification
    SSLRandomSeed context source [bytes]sE
    Pseudo Random Number Generator (PRNG) seeding source
    SSLRenegBufferSize bytes 131072 dhE
    Set the size for the SSL renegotiation buffer
    SSLRequire expressiondhE
    Allow access only when an arbitrarily complex boolean expression is true
    SSLRequireSSLdhE
    Deny access when SSL is not used for the HTTP request
    SSLSessionCache type none sE
    Type of the global/inter-process SSL Session Cache
    SSLSessionCacheTimeout seconds 300 svE
    Number of seconds before an SSL session expires in the Session Cache
    SSLSessionTicketKeyFile file-pathsvE
    Persistent encryption/decryption key for TLS session tickets
    SSLSessionTickets on|off on svE
    Enable or disable use of TLS session tickets
    SSLSRPUnknownUserSeed secret-stringsvE
    SRP unknown user seed
    SSLSRPVerifierFile file-pathsvE
    Path to SRP verifier file
    SSLStaplingCache typesE
    Configures the OCSP stapling cache
    SSLStaplingErrorCacheTimeout seconds 600 svE
    Number of seconds before expiring invalid responses in the OCSP stapling cache
    SSLStaplingFakeTryLater on|off on svE
    Synthesize "tryLater" responses for failed OCSP stapling queries
    SSLStaplingForceURL urisvE
    Override the OCSP responder URI specified in the certificate's AIA extension
    SSLStaplingResponderTimeout seconds 10 svE
    Timeout for OCSP stapling queries
    SSLStaplingResponseMaxAge seconds -1 svE
    Maximum allowable age for OCSP stapling responses
    SSLStaplingResponseTimeSkew seconds 300 svE
    Maximum allowable time skew for OCSP stapling response validation
    SSLStaplingReturnResponderErrors on|off on svE
    Pass stapling related OCSP errors on to client
    SSLStaplingStandardCacheTimeout seconds 3600 svE
    Number of seconds before expiring responses in the OCSP stapling cache
    SSLStrictSNIVHostCheck on|off off svE
    Whether to allow non-SNI clients to access a name-based virtual host.
    SSLUserName varnamesdhE
    Variable name to determine user name
    SSLUseStapling on|off off svE
    Enable stapling of OCSP responses in the TLS handshake
    SSLVerifyClient level none svdhE
    Type of Client Certificate verification
    SSLVerifyDepth number 1 svdhE
    Maximum depth of CA Certificates in Client Certificate verification
    StartServers numbersM
    Number of child server processes created at startup
    StartThreads numbersM
    Number of threads created on startup
    Substitute s/pattern/substitution/[infq]dhE
    Pattern to filter the response content
    SubstituteInheritBefore on|off off dhE
    Change the merge order of inherited patterns
    SubstituteMaxLineLength bytes(b|B|k|K|m|M|g|G) 1m dhE
    Set the maximum line size
    Suexec On|OffsB
    Enable or disable the suEXEC feature
    SuexecUserGroup User GroupsvE
    User and group for CGI programs to run as
    ThreadLimit numbersM
    Sets the upper limit on the configurable number of threads per child process
    ThreadsPerChild numbersM
    Number of threads created by each child process
    ThreadStackSize sizesM
    The size in bytes of the stack used by threads handling client connections
    TimeOut seconds 60 svC
    Amount of time the server will wait for certain events before failing a request
    TraceEnable [on|off|extended] on svC
    Determines the behavior on TRACE requests
    TransferLog file|pipesvB
    Specify location of a log file
    TypesConfig file-path conf/mime.types sB
    The location of the mime.types file
    UnDefine parameter-namesC
    Undefine the existence of a variable
    UndefMacro namesvdB
    Undefine a macro
    UnsetEnv env-variable [env-variable] ...svdhB
    Removes variables from the environment
    Use name [value1 ... valueN] svdB
    Use a macro
    UseCanonicalName On|Off|DNS Off svdC
    Configures how the server determines its own name and port
    UseCanonicalPhysicalPort On|Off Off svdC
    Configures how the server determines its own port
    User unix-userid #-1 sB
    The userid under which the server will answer requests
    UserDir directory-filename [directory-filename] ... svB
    Location of the user-specific directories
    VHostCGIMode On|Off|Secure On vX
    Determines whether the virtualhost can run subprocesses, and the privileges available to subprocesses.
    VHostCGIPrivs [+-]?privilege-name [[+-]?privilege-name] ...vX
    Assign arbitrary privileges to subprocesses created by a virtual host.
    VHostGroup unix-groupidvX
    Sets the Group ID under which a virtual host runs.
    VHostPrivs [+-]?privilege-name [[+-]?privilege-name] ...vX
    Assign arbitrary privileges to a virtual host.
    VHostSecure On|Off On vX
    Determines whether the server runs with enhanced security for the virtualhost.
    VHostUser unix-useridvX
    Sets the User ID under which a virtual host runs.
    VirtualDocumentRoot interpolated-directory|none none svE
    Dynamically configure the location of the document root for a given virtual host
    VirtualDocumentRootIP interpolated-directory|none none svE
    Dynamically configure the location of the document root for a given virtual host
    <VirtualHost addr[:port] [addr[:port]] ...> ... </VirtualHost>sC
    Contains directives that apply only to a specific hostname or IP address
    VirtualScriptAlias interpolated-directory|none none svE
    Dynamically configure the location of the CGI directory for a given virtual host
    VirtualScriptAliasIP interpolated-directory|none none svE
    Dynamically configure the location of the CGI directory for a given virtual host
    WatchdogInterval time-interval[s] 1 sB
    Watchdog interval in seconds
    XBitHack on|off|full off svdhB
    Parse SSI directives in files with the execute bit set
    xml2EncAlias charset alias [alias ...]sB
    Recognise Aliases for encoding values
    xml2EncDefault namesvdhB
    Sets a default encoding to assume when absolutely no information can be automatically detected
    xml2StartParse element [element ...]svdhB
    Advise the parser to skip leading junk.

    Available Languages:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_allowmethods.html.fr.utf80000644000000000000500000002063613412755316021760 0ustar rootsrc mod_allowmethods - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_allowmethods

    Langues Disponibles:  en  |  fr 

    Description:Ce module permet de restreindre aisément les méthodes HTTP pouvant être utilisées sur le serveur
    Statut:Expérimental
    Identificateur de Module:allowmethods_module
    Fichier Source:mod_allowmethods.c
    Compatibilité:Disponible à partir de la version 2.3 du serveur HTTP Apache

    Sommaire

    Ce module permet de restreindre aisément les méthodes HTTP pouvant être utilisées sur le serveur. La configuration la plus courante est du style :

    <Location "/">
       AllowMethods GET POST OPTIONS
    </Location>
    top

    Directive AllowMethods

    Description:Restreint l'accès aux méthodes HTTP spécifiées
    Syntaxe:AllowMethods reset|HTTP-method [HTTP-method]...
    Défaut:AllowMethods reset
    Contexte:répertoire
    Statut:Expérimental
    Module:mod_allowmethods

    Les noms des méthodes HTTP sont sensibles à la casse, et sont en général définis en majuscules, comme dans les RFCs. Les méthodes GET et HEAD sont considérées comme équivalentes. Le mot-clé reset permet de désactiver mod_allowmethods dans les niveaux inférieurs d'imbrication :

    <Location "/svn">
       AllowMethods reset
    </Location>

    Avertissement

    La méthode TRACE ne peut pas être rejetée par ce module ; pour ce faire, vous devez utiliser la directive TraceEnable.

    Le module mod_allowmethods a été écrit pour remplacer l'implémentation "bricolée" des directives Limit et LimitExcept.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_socache_dc.html.fr.utf80000644000000000000500000001453313412755316021330 0ustar rootsrc mod_socache_dc - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_socache_dc

    Langues Disponibles:  en  |  fr 

    Description:Fournisseur de cache d'objets partagés basé sur dc.
    Statut:Extension
    Identificateur de Module:socache_dc_module
    Fichier Source:mod_socache_dc.c

    Sommaire

    Le module mod_socache_dc est un fournisseur de cache d'objets partagés qui permet la création et l'accès à un cache maintenu par les bibliothèques de mise en cache de sessions distribuées distcache.

    Vous trouverez des détails à propos des autres fournisseurs de cache d'objets partagés ici.

    Support Apache!

    Directives

    Ce module ne fournit aucune directive.

    Traitement des bugs

    Voir aussi

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_owner.html.en0000644000000000000500000002646313412755316020735 0ustar rootsrc mod_authz_owner - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_authz_owner

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Authorization based on file ownership
    Status:Extension
    Module Identifier:authz_owner_module
    Source File:mod_authz_owner.c
    Compatibility:Available in Apache 2.1 and later

    Summary

    This module authorizes access to files by comparing the userid used for HTTP authentication (the web userid) with the file-system owner or group of the requested file. The supplied username and password must be already properly verified by an authentication module, such as mod_auth_basic or mod_auth_digest. mod_authz_owner recognizes two arguments for the Require directive, file-owner and file-group, as follows:

    file-owner
    The supplied web-username must match the system's name for the owner of the file being requested. That is, if the operating system says the requested file is owned by jones, then the username used to access it through the web must be jones as well.
    file-group
    The name of the system group that owns the file must be present in a group database, which is provided, for example, by mod_authz_groupfile or mod_authz_dbm, and the web-username must be a member of that group. For example, if the operating system says the requested file is owned by (system) group accounts, the group accounts must appear in the group database and the web-username used in the request must be a member of that group.

    Note

    If mod_authz_owner is used in order to authorize a resource that is not actually present in the filesystem (i.e. a virtual resource), it will deny the access.

    Particularly it will never authorize content negotiated "MultiViews" resources.

    Support Apache!

    Topics

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    top

    Configuration Examples

    Require file-owner

    Consider a multi-user system running the Apache Web server, with each user having his or her own files in ~/public_html/private. Assuming that there is a single AuthDBMUserFile database that lists all of their web-usernames, and that these usernames match the system's usernames that actually own the files on the server, then the following stanza would allow only the user himself access to his own files. User jones would not be allowed to access files in /home/smith/public_html/private unless they were owned by jones instead of smith.

    <Directory "/home/*/public_html/private">
        AuthType Basic
        AuthName MyPrivateFiles
        AuthBasicProvider dbm
        AuthDBMUserFile "/usr/local/apache2/etc/.htdbm-all"
        Require file-owner
    </Directory>

    Require file-group

    Consider a system similar to the one described above, but with some users that share their project files in ~/public_html/project-foo. The files are owned by the system group foo and there is a single AuthDBMGroupFile database that contains all of the web-usernames and their group membership, i.e. they must be at least member of a group named foo. So if jones and smith are both member of the group foo, then both will be authorized to access the project-foo directories of each other.

    <Directory "/home/*/public_html/project-foo">
        AuthType Basic
        AuthName "Project Foo Files"
        AuthBasicProvider dbm
        
        # combined user/group database
        AuthDBMUserFile  "/usr/local/apache2/etc/.htdbm-all"
        AuthDBMGroupFile "/usr/local/apache2/etc/.htdbm-all"
        
        Satisfy All
        Require file-group
    </Directory>

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_connect.html.fr.utf80000644000000000000500000002507413412755316022151 0ustar rootsrc mod_proxy_connect - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_proxy_connect

    Langues Disponibles:  en  |  fr  |  ja 

    Description:Extension de mod_proxy pour le traitement des requêtes CONNECT
    Statut:Extension
    Identificateur de Module:proxy_connect_module
    Fichier Source:mod_proxy_connect.c

    Sommaire

    Pour fonctionner, ce module nécessite le chargement de mod_proxy. Il fournit le support de la méthode HTTP CONNECT. Cette méthode est principalement utilisée pour faire franchir les serveurs mandataires aux requêtes SSL à l'aide d'un tunnel.

    Ainsi, pour pouvoir traiter les requêtes CONNECT, mod_proxy et mod_proxy_connect doivent être chargés dans le serveur.

    CONNECT est aussi utilisée lorsque le serveur doit envoyer une requête HTTPS via un mandataire. Dans ce cas, le serveur se comporte comme un client CONNECT. Cette fonctionnalité étant fournie par le module mod_proxy, le module mod_proxy_connect n'est dans ce cas pas nécessaire.

    Avertissement

    N'activez pas la fonctionnalité de mandataire avant d'avoir sécurisé votre serveur. Les serveurs mandataires ouverts sont dangereux non seulement pour votre réseau, mais aussi pour l'Internet au sens large.

    top

    Informations sur les requêtes

    mod_proxy_connect enregistre les informations suivantes pour journalisation via le format %{NOMVAR}n dans les directives LogFormat ou ErrorLogFormat :

    proxy-source-port
    Le port local utilisé pour la connexion vers le serveur d'arrière-plan.
    top

    Directive AllowCONNECT

    Description:Ports autorisés à se CONNECTer à travers le mandataire
    Syntaxe:AllowCONNECT port[-port] [port[-port]] ...
    Défaut:AllowCONNECT 443 563
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_proxy_connect
    Compatibilité:Déplacé depuis mod_proxy à partir d'Apache 2.3.5. Plages de ports disponibles depuis Apache 2.3.7.

    La directive AllowCONNECT permet de spécifier une liste de numéros ou de plages de ports auxquels la méthode de mandataire CONNECT pourra se connecter. Les navigateurs récents utilisent cette méthode dans le cas où une connexion https est requise et où le tunneling mandataire sur HTTP est en service.

    Par défaut, seuls les ports par défauts https (443) et snews (563) sont pris en compte. Vous pouvez utiliser la directive AllowCONNECT pour outrepasser ces valeurs par défaut et n'autoriser les connexions que vers les ports spécifiés.

    Langues Disponibles:  en  |  fr  |  ja 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_core.html0000644000000000000500000000034013362070302020065 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authn_core.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authn_core.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_status.html.tr.utf80000644000000000000500000003122513447004010020575 0ustar rootsrc mod_status - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache Modülü mod_status

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    Açıklama:Sunucu etkinliği ve başarımı hakkında bilgi sağlar.
    Durum:Temel
    Modül Betimleyici:status_module
    Kaynak Dosyası:mod_status.c

    Özet

    mod_status modülü, sunucu yöneticisinin, HTTP sunucusunun ne kadar başarılı olduğu hakkında bilgi edinmesini sağlar. Bilgiler, kolayca okunabilen bir HTML sayfası olarak sunulur ve o anki sunucu istatistiklerinden oluşur. Gerekirse sayfa kendiliğinden tazelenebilir (uyumlu bir tarayıcı gerekir). Diğer sayfa o anki sunucu durumunu makine tarafından okunabilen biçimde listeler.

    Sunulan bilgiler şunlardır:

    • İstekleri sunan çocuk süreç sayısı
    • BoÅŸtaki çocuk süreçlerin sayısı
    • Her çocuk sürecin durumu, çocuk sürecin iÅŸleme tabi tuttuÄŸu istek sayısı ve sunduÄŸu bayt sayısı (*)
    • Toplam eriÅŸim sayısı ve sunulan toplam bayt sayısı (*)
    • Sunucunun kaç kere baÅŸlatıldığı/yeniden baÅŸlatıldığı ve ne kadar zamandır çalışmakta olduÄŸu
    • Saniyedeki ortalama istek sayısı, saniyedeki bayt sayısı ve istek başına ortalama bayt sayısı (*)
    • Birlikte tüm çocuk süreçler tarafınan toplamda ve her çocuk süreç tarafından ayrı ayrı kullanılan o anki iÅŸlemci zamanı yüzdesi (*)
    • O an iÅŸlem görmekte olan konakların ve isteklerin sayısı (*)

    "(*)" imli bilgiler sadece ExtendedStatus yönergesinin değeri On olduğu takdirde mevcuttur. 2.3.6 sürümünde, bu modulün yüklenmesi öntanımlı olarak ExtendedStatus yönergesinin değerini On yapacaktır.

    top

    Durum Bilgisi DesteÄŸinin EtkinleÅŸtirilmesi

    Durum raporları, sadece example.com alanından ve sadece tarayıcılar için etkin kılınmak istenirse httpd.conf dosyasına şu satırlar eklenebilir:

    <Location "/server-status">
        SetHandler server-status
        Require host example.com
    </Location>

    Sunucu istatistiklerine tarayıcınızla erişmek isterseniz, http://sunucunuzun.ismi.buraya/server-status şeklinde bir istek yapabilirsiniz.

    top

    Sayfanın Tazelenmesi

    Tarayıcınız “tazeleme†yeteneğine sahipse durum sayfası düzenli aralıklarla güncellenecektir. Sayfanın N saniyede bir güncellenmesini isterseniz isteği şöyle yapabilirsiniz:
    http://sunucunuzun.ismi.buraya/server-status?refresh=N

    top

    Makine Tarafından Okunabilen Durum Dosyası

    Durum dosyasının makine tarafından okunabilen sürümüne http://sunucunuzun.ismi.buraya/server-status?auto şeklinde bir istek yaparak erişebilirsiniz. Bu, kendiliğinden çalıştığı takdirde yararlıdır; Apache HTTP Sunucusu kurulumunuzun /support dizininde bulunan log_server_status isimli Perl betiğine bakınız.

    Güvenlik

    mod_status sunucuya yüklendiği takdirde istatistikleri raporlama yeteneği dizin içi yapılandırma dosyaları (.htaccess gibi) dahil tüm yapılandırma dosyaları için kullanılabilir olacaktır. Bu durum güvenlik ile ilgili olarak siteniz için içinden çıkılması güç durumlara yol açabilir (çapanoğlu durumu).
    top

    Sorun gidermek için server-status kullanımı

    Sunucunuzun kullanılabilir tüm özkaynakları (işlemci veya bellek) sömürdüğü ve sizin de bu soruna hangi istemcilerin veya isteklerin yol açtığını saptamak istediğiniz durumda sorunu gidermek için başlangıç yeri olarak server-status sayfası kullanılabilir.

    Önce ExtendedStatus yönergesine On atadığınızsan emin olun. Böylece her çocuk süreç veya evre için tüm istek ve istemci bilgilerini görebilirsiniz.

    (top veya benzeri bir süreç izleme aracı kullanarak) Artık kendi süreç listenize ana zanlılar olan süreçleri bulmak için bakabilirsiniz. Sorunun çeşidine bağlı olarak top çıktısını işlemci kullanımına veya bellek kullanımına göre sıralatabilirsiniz.

    server-status sayfasını yeniden yükleyip bu süreç kimliklerine bakın. Böylece, bu süreçler tarafından hangi isteklerin hangi istemcilere sunulduğunu görebilirsiniz. İstekler kısa sürelerle görünürler, bu bakımdan iş üstünde yakalamak için çeşitli denemeler yapmanız gerekebilir.

    Bu işlem, yük sorununuzdan birinci derecede sorumlu istek türleri veya istemciler hakkında bir fikir verecektir. Çoğu durumda belli bir HTTP uygulamasının yanlış davrandığını veya belli bir istemcinin sitenize saldırmakta olduğunu farkedersiniz.

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_so.html.ja.utf80000644000000000000500000004045713412755316017665 0ustar rootsrc mod_so - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_so

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:起動時やå†èµ·å‹•時ã«å®Ÿè¡Œã‚³ãƒ¼ãƒ‰ã¨ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’サーãƒã«ãƒ­ãƒ¼ãƒ‰ã™ã‚‹
    ステータス:Extension
    モジュール識別å­:so_module
    ソースファイル:mod_so.c
    äº’æ›æ€§:ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ Window ã§ã¯ (常ã«å«ã¾ã‚Œã¦ã„ã‚‹) Base モジュールã§ã™

    概è¦

    ã„ãã¤ã‹ã®ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ã§ã¯ã€ã‚µãƒ¼ãƒã®å†ã‚³ãƒ³ãƒ‘イルをã™ã‚‹ä»£ã‚りã«ã€ ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’使用ã—㦠動的共有オブジェクト (DSO) 機構ã«ã‚ˆã‚Šã€å®Ÿè¡Œæ™‚ã« Apache HTTP Server ã«ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’読ã¿è¾¼ã¾ã›ã‚‹ã“ã¨ãŒ ã§ãã¾ã™ã€‚

    Unix 上ã§ã¯ã€èª­ã¿è¾¼ã¾ã‚Œã‚‹ã‚³ãƒ¼ãƒ‰ã¯é€šå¸¸ã¯å…±æœ‰ã‚ªãƒ–ジェクトファイル (普通 .so ã¨ã„ã†æ‹¡å¼µå­ãŒä»˜ã„ã¦ã„ã¾ã™) ã‹ã‚‰ã§ã™ã€‚ Windows 上ã§ã¯ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æ‹¡å¼µå­ã¯ .so ã‹ .dll ã§ã™ã€‚

    警告

    Apache HTTP Server ã®ã‚るメジャーãƒãƒ¼ã‚¸ãƒ§ãƒ³å‘ã‘ã«ãƒ“ルドã•れãŸãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ä¸€èˆ¬ã« ä»–ã®ãƒ¡ã‚¸ãƒ£ãƒ¼ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯å‹•ãã¾ã›ã‚“。(例ãˆã° 1.3 㨠2.0〠2.0 㨠2.2) ã¾ãŸãƒ¡ã‚¸ãƒ£ãƒ¼ãƒãƒ¼ã‚¸ãƒ§ãƒ³é–“ã§ã¯APIã®å¤‰æ›´ãŒã—ã°ã—ã°ç™ºç”Ÿã—ã€ãã®ãŸã‚æ–°ã—ㄠメジャーãƒãƒ¼ã‚¸ãƒ§ãƒ³å‘ã‘ã«ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ä¿®æ­£ãŒå¿…è¦ã«ãªã‚‹ã“ã¨ãŒã‚りã¾ã™ã€‚

    Support Apache!

    トピック

    • Windows 用ã®ãƒ­ãƒ¼ãƒ‰å¯èƒ½ãªãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’作æˆã™ã‚‹

    ディレクティブ

    Bugfix checklist

    å‚ç…§

    top

    Windows 用ã®ãƒ­ãƒ¼ãƒ‰å¯èƒ½ãªãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’作æˆã™ã‚‹

    注

    Windows ã«ãŠã„ã¦å‹•çš„ã«ãƒ­ãƒ¼ãƒ‰ã•ã‚Œã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æ‹¡å¼µå­ã¯æ™®é€š .dll ã§ã™ãŒã€Apache httpd ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ mod_whatever.so ã¨ã„ã£ãŸåå‰ã‚’æŒã¡ã¾ã™ã€‚ã“れã¯ã€ä»–ã®ãƒ—ラットフォームã§ã®é€šå¸¸ã®å½¢å¼ã« ã‚ã‚ã›ãŸã‚‚ã®ã§ã™ã€‚ã—ã‹ã—ãªãŒã‚‰ã€ã‚µãƒ¼ãƒ‰ãƒ‘ーティ製モジュールã€ä¾‹ãˆã°PHPãªã©ã€ ã¯ä»Šã§ã‚‚ .dll ã®æ‹¡å¼µå­ã‚’使ã£ã¦ã„ã¾ã™ã€‚

    ã¾ã  mod_so ã§ ApacheModuleFoo.dll ã¨ã„ã†åå‰ã® モジュールもロードã•れã¾ã™ãŒã€æ–°ã—ã„åå‰ã®ä»˜ã‘æ–¹ã‚’ä½¿ã†æ–¹ãŒå¥½ã¾ã‚Œã¾ã™ã€‚ モジュールを 2.0 用ã«ç§»æ¤ã—ã¦ã„ã‚‹ã®ã§ã‚れã°ã€2.0 ã®ç¿’æ…£ã«åˆã†ã‚ˆã†ã«åå‰ã‚’ 修正ã—ã¦ãã ã•ã„。

    Apache httpd ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« API 㯠UNIX 㨠Windows é–“ã§ã¯å¤‰æ›´ã•れã¦ã„ã¾ã›ã‚“。 多ãã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯å…¨ã変更ãªã—ã€ã‚‚ã—ãã¯ç°¡å˜ãªå¤‰æ›´ã«ã‚ˆã‚Š Windows ã§å®Ÿè¡Œã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ãŸã ã—ã€ãれ以外㮠Windows ã«ã¯ç„¡ã„ Unix アーキテクãƒãƒ£ãƒ¼ã®æ©Ÿèƒ½ã«ä¾å­˜ã—ãŸãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯å‹•作ã—ã¾ã›ã‚“。

    モジュールãŒå®Ÿéš›ã«å‹•作ã™ã‚‹ã¨ãã¯ã€ 二ã¤ã®æ–¹æ³•ã®ã©ã¡ã‚‰ã‹ã§ã‚µãƒ¼ãƒã«è¿½åŠ ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã¾ãšã€Unix ã¨åŒæ§˜ã«ã‚µãƒ¼ãƒã«ã‚³ãƒ³ãƒ‘イルã—ã¦çµ„ã¿è¾¼ã‚€ã“ã¨ãŒã§ãã¾ã™ã€‚Windows 用㮠Apache httpd 㯠Unix 用㮠Apache ã«ã‚ã‚‹ Configure プログラムãŒã‚りã¾ã›ã‚“ã®ã§ã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ã‚½ãƒ¼ã‚¹ãƒ•ァイルを ApacheCore プロジェクトファイルã«è¿½åŠ ã—ã€ã‚·ãƒ³ãƒœãƒ«ã‚’ os\win32\modules.c ファイルã«è¿½åŠ ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚

    二ã¤ç›®ã¯ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ DLL ã¨ã—ã¦ã‚³ãƒ³ãƒ‘イルã™ã‚‹æ–¹æ³•ã§ã™ã€‚ DLL ã¯å…±æœ‰ãƒ©ã‚¤ãƒ–ラリã§ã€å®Ÿè¡Œæ™‚ã« LoadModule ディレクティブã«ã‚ˆã‚Šã‚µãƒ¼ãƒã«èª­ã¿è¾¼ã‚€ã“ã¨ãŒã§ãã¾ã™ã€‚ã“れらã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« DLL ã¯ãã®ã¾ã¾é…布ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã€ã‚µãƒ¼ãƒã‚’å†ã‚³ãƒ³ãƒ‘イルã™ã‚‹ã“ã¨ãªãã€Windows 用㮠Apache httpd ã®ã™ã¹ã¦ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã§å®Ÿè¡Œã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    モジュール DLL を作æˆã™ã‚‹ãŸã‚ã«ã¯ã€ モジュールã®ä½œæˆã«å°ã•ãªå¤‰æ›´ã‚’行ãªã†å¿…è¦ãŒã‚りã¾ã™ã€‚ ã¤ã¾ã‚Šã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ãƒ¬ã‚³ãƒ¼ãƒ‰ (ã“れã¯å¾Œã§ä½œæˆã•れã¾ã™ã€‚ 以下をå‚ç…§ã—ã¦ãã ã•ã„) ㌠DLL ã‹ã‚‰ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã•れãªã‘れã°ãªã‚Šã¾ã›ã‚“。 ã“れを行ãªã†ã«ã¯ã€AP_MODULE_DECLARE_DATA (Apache httpd ã®ãƒ˜ãƒƒãƒ€ãƒ•ァイルã§å®šç¾©ã•れã¦ã„ã¾ã™) をモジュールã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãƒ¬ã‚³ãƒ¼ãƒ‰ 定義ã®éƒ¨åˆ†ã«è¿½åŠ ã—ã¦ãã ã•ã„。ãŸã¨ãˆã°ã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«

    module foo_module;

    ãŒã‚ã‚‹ã¨ã™ã‚‹ã¨ã€ãれを次ã®ã‚‚ã®ã§ç½®ãæ›ãˆã¦ãã ã•ã„。

    module AP_MODULE_DECLARE_DATA foo_module;

    Unix 上ã§ã‚‚ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ 変更無ã—ã§ä½¿ã„ç¶šã‘られるよã†ã«ã€ã“ã®ãƒžã‚¯ãƒ­ã¯ Windows 上ã§ã®ã¿åŠ¹åŠ›ã‚’æŒã¡ã¾ã™ã€‚.DEF ãƒ•ã‚¡ã‚¤ãƒ«ã®æ–¹ã‚’良ã知ã£ã¦ã„ã‚‹ã¨ã„ã†å ´åˆã¯ã€ 代ã‚りã«ãれを使ã£ã¦ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãƒ¬ã‚³ãƒ¼ãƒ‰ã‚’ エクスãƒãƒ¼ãƒˆã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    ã•ã‚ã€ã‚ãªãŸã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã® DLL を作æˆã—ã¾ã—ょã†ã€‚ã“れを〠libhttpd.lib 共有ライブラリãŒã‚³ãƒ³ãƒ‘イルã•れãŸã¨ãã«ä½œæˆã•れ㟠ibhttpd.lib エクスãƒãƒ¼ãƒˆãƒ©ã‚¤ãƒ–ラリã¨ãƒªãƒ³ã‚¯ã—ã¦ãã ã•ã„。ã“ã®æ™‚ã«ã€ Apache httpd ã®ãƒ˜ãƒƒãƒ€ãƒ•ã‚¡ã‚¤ãƒ«ãŒæ­£ã—ã„ä½ç½®ã«ã‚るよã†ã«ã€ コンパイラã®è¨­å®šã‚’変ãˆã‚‹å¿…è¦ãŒã‚ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。 ã“ã®ãƒ©ã‚¤ãƒ–ラリã¯ã‚µãƒ¼ãƒãƒ«ãƒ¼ãƒˆã® modules ディレクトリã«ã‚りã¾ã™ã€‚ ãƒ“ãƒ«ãƒ‰ç’°å¢ƒãŒæ­£ã—ã設定ã•れるよã†ã«ã€æ—¢å­˜ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ç”¨ã® .dsp ã‚’ å–ã£ã¦ãã‚‹ã®ãŒä¸€ç•ªè‰¯ã„ã§ã—ょã†ã€‚ã‚‚ã—ãã¯ã€ã‚ãªãŸã® .dsp 㨠コンパイラã¨ãƒªãƒ³ã‚¯ã®ã‚ªãƒ—ションを比較ã™ã‚‹ã€ã¨ã„ã†ã‚‚ã®ã§ã‚‚良ã„ã§ã™ã€‚

    ã“れ㧠DLL 版ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒä½œæˆã•れã¦ã„ã‚‹ã¯ãšã§ã™ã€‚ サーãƒãƒ«ãƒ¼ãƒˆã® modules ディレクトリã«ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ç½®ã„ã¦ã€ LoadModule ディレクティブを使ã£ã¦èª­ã¿è¾¼ã‚“ã§ãã ã•ã„。

    top

    LoadFile ディレクティブ

    説明:指定ã•れãŸã‚ªãƒ–ジェクトファイルやライブラリをリンクã™ã‚‹
    æ§‹æ–‡:LoadFile filename [filename] ...
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_so

    LoadFile ディレクティブã¯ã€ã‚µãƒ¼ãƒãŒèµ·å‹•ã•れãŸã¨ãã‚„å†èµ·å‹•ã•れãŸã¨ãã«ã€ 指定ã•れãŸã‚ªãƒ–ジェクトファイルやライブラリをリンクã—ã¾ã™ã€‚ ã“れã¯ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒå‹•作ã™ã‚‹ãŸã‚ã«å¿…è¦ã«ãªã‚‹ã‹ã‚‚ã—れãªã„追加㮠コードを読ã¿è¾¼ã‚€ãŸã‚ã«ä½¿ç”¨ã•れã¾ã™ã€‚Filename ã¯çµ¶å¯¾ãƒ‘スã‹ã€ServerRoot ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã§ã™ã€‚

    例:

    LoadFile libexec/libxmlparse.so
    top

    LoadModule ディレクティブ

    説明:オブジェクトファイルやライブラリをリンクã—ã€ä½¿ç”¨ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã® リストã«è¿½åŠ ã™ã‚‹
    æ§‹æ–‡:LoadModule module filename
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
    ステータス:Extension
    モジュール:mod_so

    LoadModule ディレクティブ㯠filename ã¨ã„ã†ã‚ªãƒ–ジェクトファイルãŠã‚ˆã³ãƒ©ã‚¤ãƒ–ラリをリンクã—ã€module ã¨ã„ã†åå‰ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æ§‹é€ ã‚’アクティブãªãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ãƒªã‚¹ãƒˆã«è¿½åŠ ã—ã¾ã™ã€‚ Module ã¯ãƒ•ァイル中㮠module åž‹ã®å¤–部変数ã®åå‰ã§ã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã« モジュール識別å­ã¨ã—ã¦æ›¸ã‹ã‚Œã¦ã„ã‚‹ã‚‚ã®ã§ã™ã€‚例 :

    LoadModule status_module modules/mod_status.so

    ã“れ㯠ServerRoot ã® modules サブディレクトリã‹ã‚‰æŒ‡å®šã•れãŸåå‰ã® モジュールをロードã—ã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_actions.html.ja.utf80000644000000000000500000003467313412755316020707 0ustar rootsrc mod_actions - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_actions

    翻訳済ã¿è¨€èªž:  de  |  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:メディアタイプやリクエストメソッドã«å¿œã˜ã¦ CGI スクリプトを実行ã™ã‚‹æ©Ÿèƒ½ã‚’æä¾›
    ステータス:Base
    モジュール識別å­:actions_module
    ソースファイル:mod_actions.c

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ã¯äºŒã¤ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒã‚りã¾ã™ã€‚Action ディレクティブã¯ç‰¹å®šã® MIME タイプã®ãƒ•ァイルをリクエストã•れãŸå ´åˆã« CGI スクリプトãŒå®Ÿè¡Œã•れるよã†ã«ã—ã¾ã™ã€‚Script ディレクティブã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§ç‰¹å®šã®ãƒ¡ã‚½ãƒƒãƒ‰ãŒä½¿ç”¨ã•れãŸã¨ãã« CGI スクリプトãŒå®Ÿè¡Œã•れるよã†ã«ã—ã¾ã™ã€‚ ã“れã¯ãƒ•ァイルを処ç†ã™ã‚‹ã‚¹ã‚¯ãƒªãƒ—トã®å®Ÿè¡Œã‚’ãšã£ã¨ç°¡å˜ã«ã—ã¾ã™ã€‚

    top

    Action ディレクティブ

    説明:特定ã®ãƒãƒ³ãƒ‰ãƒ©ã‚„コンテントタイプã«å¯¾ã—㦠CGI を実行ã™ã‚‹ã‚ˆã†ã« 設定
    æ§‹æ–‡:Action action-type cgi-script [virtual]
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ, .htaccess
    上書ã:FileInfo
    ステータス:Base
    モジュール:mod_actions
    äº’æ›æ€§:virtual 修飾å­ã¨ãƒãƒ³ãƒ‰ãƒ©æ¸¡ã—㯠Apache 2.1 ã§å°Žå…¥ã•れã¾ã—ãŸ

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠action-type ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã•れãŸã¨ãã« cgi-script ãŒå®Ÿè¡Œã•れるã¨ã„ã†å‹•作を追加ã—ã¾ã™ã€‚cgi-script 㯠ScriptAlias ã‚„ AddHandler ã«ã‚ˆã£ã¦ CGI スクリプトã«è¨­å®šã•れãŸãƒªã‚½ãƒ¼ã‚¹ã¸ã® URL-path ã§ã™ã€‚ Action-type ã«ã¯ handler ã‹ MIME コンテントタイプを指定ã§ãã¾ã™ã€‚リクエストã•れãŸãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã® URL ã¨ãƒ•ァイルã®ãƒ‘ã‚¹ã¯æ¨™æº– CGI 環境変数 PATH_INFO 㨠PATH_TRANSLATED を使ã£ã¦ä¼ãˆã‚‰ã‚Œã¾ã™ã€‚ 特定ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—ã¦ä½¿ç”¨ã•れるãƒãƒ³ãƒ‰ãƒ©ã¸ã¯ã€ REDIRECT_HANDLER 変数を使ã£ã¦æ¸¡ã›ã¾ã™ã€‚

    例

    # Requests for files of a particular MIME content type:
    Action image/gif /cgi-bin/images.cgi

    # Files of a particular file extension
    AddHandler my-file-type .xyz
    Action my-file-type /cgi-bin/program.cgi

    最åˆã®ä¾‹ã§ã¯ã€MIME コンテントタイプ㌠image/gif ã®ãƒ•ァイルã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ã€æŒ‡å®šã—ãŸã‚¹ã‚¯ãƒªãƒ—ト /cgi-bin/images.cgi ã§å‡¦ç†ã•れã¾ã™ã€‚

    2 番目ã®ä¾‹ã§ã¯ã€æ‹¡å¼µå­ãŒ .xyz ã®ãƒ•ァイルã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ã€æŒ‡å®šã—ãŸã‚¹ã‚¯ãƒªãƒ—ト /cgi-bin/program.cgi ã§å‡¦ç†ã•れã¾ã™ã€‚

    オプション㮠virtual 修飾å­ã‚’使用ã™ã‚‹ã¨ã€ リクエストã•れãŸãƒ•ァイルãŒå®Ÿéš›ã«å­˜åœ¨ã™ã‚‹ã‹ã©ã†ã‹ã‚’検査ã—ãªã„よã†ã«ã§ãã¾ã™ã€‚ ã“れã¯ä¾‹ãˆã°ã€Action ディレクティブをãƒãƒ¼ãƒãƒ£ãƒ«ãª Location ã«ä½¿ç”¨ã—ãŸã„ã€ã¨ã„ã£ãŸå ´åˆã«ä¾¿åˆ©ã§ã™ã€‚

    例

    <Location /news>
    SetHandler news-handler
    Action news-handler /cgi-bin/news.cgi virtual
    </Location>

    å‚ç…§

    top

    Script ディレクティブ

    説明:特定ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ¡ã‚½ãƒƒãƒ‰ã«å¯¾ã—㦠CGI スクリプトを 実行ã™ã‚‹ã‚ˆã†ã«è¨­å®š
    æ§‹æ–‡:Script method cgi-script
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Base
    モジュール:mod_actions

    ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠method ã¨ã„ã†ãƒ¡ã‚½ãƒƒãƒ‰ã‚’使ã£ã¦ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒè¡Œãªã‚れãŸã¨ãã« cgi-script を実行ã™ã‚‹ã¨ã„ã†å‹•作を追加ã—ã¾ã™ã€‚ cgi-script 㯠ScriptAlias ã‚„ AddHandler ã«ã‚ˆã£ã¦ CGI スクリプトã«è¨­å®šã•れãŸãƒªã‚½ãƒ¼ã‚¹ã¸ã® URL-path ã§ã™ã€‚ リクエストã•れãŸãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã® URL ã¨ãƒ•ァイルã®ãƒ‘ã‚¹ã¯æ¨™æº– CGI 環境変数 PATH_INFO 㨠PATH_TRANSLATED を使ã£ã¦ä¼ãˆã‚‰ã‚Œã¾ã™ã€‚

    ä»»æ„ã®ãƒ¡ã‚½ãƒƒãƒ‰åを使用ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ メソッドåã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€ Script PUT 㨠Script put ã¯ã¾ã£ãŸãé•ã£ãŸåŠ¹æžœã«ãªã‚Šã¾ã™ã€‚

    Script コマンドã¯ãƒ‡ãƒ•ォルトã®å‹•作を 追加ã™ã‚‹ã ã‘ã§ã‚ã‚‹ã“ã¨ã« 注æ„ã—ã¦ãã ã•ã„。も㗠CGI スクリプトãŒå‘¼ã°ã‚ŒãŸã‚Šã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã•ã‚ŒãŸ ãƒ¡ã‚½ãƒƒãƒ‰ã‚’å†…éƒ¨ã§æ‰±ã†ã“ã¨ã®ã§ãã‚‹ä»–ã®ãƒªã‚½ãƒ¼ã‚¹ãŒã‚れã°ã€ãれãŒè¡Œãªã‚れã¾ã™ã€‚ GET メソッド㮠Script ã¯å•åˆã› 引数ãŒã‚ã‚‹å ´åˆã«ã®ã¿ (ãŸã¨ãˆã°ã€foo.html?hi) 呼ã°ã‚Œã‚‹ã¨ã„ã†ã“ã¨ã«ã‚‚注æ„ã—ã¦ãã ã•ã„。 ãã†ã§ãªã„å ´åˆã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯é€šå¸¸é€šã‚Šå‡¦ç†ã•れã¾ã™ã€‚

    例

    # For <ISINDEX>-style searching
    Script GET /cgi-bin/search

    # A CGI PUT handler
    Script PUT /~bob/put.cgi

    翻訳済ã¿è¨€èªž:  de  |  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/index.html.ko.euc-kr0000644000000000000500000005413013520523022020007 0ustar rootsrc ¸ðµâ ¸ñ·Ï - Apache HTTP Server Version 2.4
    <-

    ¸ðµâ ¸ñ·Ï

    °¡´ÉÇÑ ¾ð¾î:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.

    ´ÙÀ½Àº ¾ÆÆÄÄ¡ ¹èÆ÷º»¿¡ Æ÷ÇÔµÈ ¸ðµç ¸ðµâ ¸ñ·ÏÀÌ´Ù. ¸ðµç ¾ÆÆÄÄ¡ Áö½Ã¾î ¸ñ·Ïµµ Âü°íÇ϶ó.

    top

    ÇÙ½É ±â´É°ú ´ÙÁßó¸® ¸ðµâ

    core
    Core Apache HTTP Server features that are always available
    mpm_common
    A collection of directives that are implemented by more than one multi-processing module (MPM)
    event
    A variant of the worker MPM with the goal of consuming threads only for connections with active processing
    mpm_netware
    Multi-Processing Module implementing an exclusively threaded web server optimized for Novell NetWare
    mpmt_os2
    Hybrid multi-process, multi-threaded MPM for OS/2
    prefork
    Implements a non-threaded, pre-forking web server
    mpm_winnt
    Multi-Processing Module optimized for Windows NT.
    worker
    Multi-Processing Module implementing a hybrid multi-threaded multi-process web server
    top

    ´Ù¸¥ ¸ðµâ

     A  |  B  |  C  |  D  |  E  |  F  |  H  |  I  |  L  |  M  |  N  |  P  |  R  |  S  |  U  |  V  |  W  |  X 

    mod_access_compat
    Group authorizations based on host (name or IP address)
    mod_actions
    ÀÌ ¸ðµâÀº ¹Ìµð¾îÁ¾·ù³ª ¿äû¸Þ¼­µå¿¡ µû¶ó CGI ½ºÅ©¸³Æ®¸¦ ½ÇÇàÇÑ´Ù.
    mod_alias
    ÆÄÀϽýºÅÛÀÇ ´Ù¸¥ ºÎºÐµéÀ» ¹®¼­ °èÃþ±¸Á¶¿¡ Æ÷ÇÔÇϰí, URL ¸®´ÙÀÌ·º¼ÇÀ» Á¦°øÇÑ´Ù
    mod_allowmethods
    Easily restrict what HTTP methods can be used on the server
    mod_asis
    HTTP Çì´õ¸¦ Æ÷ÇÔÇÑ ÆÄÀÏÀ» º¸³½´Ù
    mod_auth_basic
    Basic authentication
    mod_auth_digest
    MD5 Digest AuthenticationÀ» »ç¿ëÇÑ »ç¿ëÀÚÀÎÁõ.
    mod_auth_form
    Form authentication
    mod_authn_anon
    ÀÎÁõ¿µ¿ª¿¡ "À͸í(anonymous)" »ç¿ëÀÚÀÇ Á¢±ÙÀ» Çã¿ëÇÑ´Ù
    mod_authn_core
    Core Authentication
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    DBM ÆÄÀÏÀ» »ç¿ëÇÑ »ç¿ëÀÚ ÀÎÁõ
    mod_authn_file
    ¹®ÀÚÆÄÀÏÀ» ÀÌ¿ëÇÑ »ç¿ëÀÚ ÀÎÁõ
    mod_authn_socache
    Manages a cache of authentication credentials to relieve the load on backends
    mod_authnz_fcgi
    Allows a FastCGI authorizer application to handle Apache httpd authentication and authorization
    mod_authnz_ldap
    Allows an LDAP directory to be used to store the database for HTTP Basic authentication.
    mod_authz_core
    Core Authorization
    mod_authz_dbd
    Group Authorization and Login using SQL
    mod_authz_dbm
    DBM ÆÄÀÏÀ» »ç¿ëÇÑ ±×·ì ÀÎÁõ
    mod_authz_groupfile
    ÀÏ¹Ý ¹®ÀÚÆÄÀÏÀ» ÀÌ¿ëÇÑ ±×·ì ±ÇÇѺο©
    mod_authz_host
    Group authorizations based on host (name or IP address)
    mod_authz_owner
    ÆÄÀÏ ¼ÒÀ¯ÀÚ¸¦ ÀÌ¿ëÇÑ ±ÇÇѺο©
    mod_authz_user
    »ç¿ëÀÚ ±ÇÇѺο©
    mod_autoindex
    ÀÚµ¿À¸·Î À¯´Ð½ºÀÇ ls ¸í·É¾î³ª Win32ÀÇ dir ½©¸í·É¾î¿Í À¯»çÇÑ µð·ºÅ丮 ¸ñ·ÏÀ» ¸¸µç´Ù
    mod_brotli
    Compress content via Brotli before it is delivered to the client
    mod_buffer
    Support for request buffering
    mod_cache
    URI¸¦ Ű·Î »ç¿ëÇÏ¿© ³»¿ëÀ» ij½¬ÇÑ´Ù.
    mod_cache_disk
    Content cache storage manager keyed to URIs
    mod_cache_socache
    Shared object cache (socache) based storage module for the HTTP caching filter.
    mod_cern_meta
    CERN À¥¼­¹ö ¸ÞŸÆÄÀÏ Áö¿ø
    mod_cgi
    CGI ½ºÅ©¸³Æ® ½ÇÇà
    mod_cgid
    ¿ÜºÎ CGI µ¥¸óÀ» »ç¿ëÇÏ¿© CGI ½ºÅ©¸³Æ®¸¦ ½ÇÇà
    mod_charset_lite
    ¹®ÀÚÁýÇÕ º¯È¯À» ÁöÁ¤
    mod_data
    Convert response body into an RFC2397 data URL
    mod_dav
    Distributed Authoring and Versioning (WebDAV) ±â´É
    mod_dav_fs
    mod_davÀ» À§ÇÑ ÆÄÀϽýºÅÛ Á¦°øÀÚ
    mod_dav_lock
    Generic locking module for mod_dav
    mod_dbd
    Manages SQL database connections
    mod_deflate
    ³»¿ëÀ» Ŭ¶óÀÌ¾ðÆ®·Î º¸³»±â Àü¿¡ ¾ÐÃàÇÑ´Ù
    mod_dialup
    Send static content at a bandwidth rate limit, defined by the various old modem standards
    mod_dir
    "¸¶Áö¸· ½½·¡½¬" ¸®´ÙÀÌ·º¼ÇÀ» Á¦°øÇÏ°í µð·ºÅ丮 index ÆÄÀÏÀ» ¼­ºñ½ºÇÑ´Ù
    mod_dumpio
    Dumps all I/O to error log as desired.
    mod_echo
    ÇÁ·ÎÅäÄÝ ¸ðµâÀ» ¼³¸íÇϱâÀ§ÇÑ °£´ÜÇÑ echo ¼­¹ö
    mod_env
    CGI ½ºÅ©¸³Æ®³ª SSI ÆäÀÌÁö¿¡ Àü´ÞÇÒ È¯°æº¯¼ö¸¦ ¼öÁ¤ÇÑ´Ù
    mod_example_hooks
    ¾ÆÆÄÄ¡ ¸ðµâ API¸¦ ¼³¸íÇÑ´Ù
    mod_expires
    »ç¿ëÀÚ°¡ ÁöÁ¤ÇÑ ±âÁØ¿¡ µû¶ó Expires¿Í Cache-Control HTTP Çì´õ¸¦ »ý¼ºÇÑ´Ù
    mod_ext_filter
    ÀÀ´ä ³»¿ëÀ» ¿ÜºÎ ÇÁ·Î±×·¥À¸·Î ó¸®ÇÑ ÈÄ Å¬¶óÀÌ¾ðÆ®·Î º¸³½´Ù
    mod_file_cache
    ¸Þ¸ð¸®¿¡ Á¤Àû ÆÄÀϵéÀ» ij½¬
    mod_filter
    Context-sensitive smart filter configuration module
    mod_headers
    HTTP ¿äû Çì´õ¿Í ÀÀ´ä Çì´õ ¼öÁ¤
    mod_heartbeat
    Sends messages with server status to frontend proxy
    mod_heartmonitor
    Centralized monitor for mod_heartbeat origin servers
    mod_http2
    Support for the HTTP/2 transport layer
    mod_ident
    RFC 1413 ident °Ë»ö
    mod_imagemap
    ¼­¹öÃø À̹ÌÁö¸Ê(imagemap) ó¸®
    mod_include
    Server-parsed html documents (Server Side Includes)
    mod_info
    ¼­¹ö ¼³Á¤¿¡ ´ëÇÑ Á¾ÇÕÀûÀÎ Á¤º¸¸¦ º¸¿©ÁØ´Ù
    mod_isapi
    Windows¿ë ¾ÆÆÄÄ¡¿¡¼­ ISAPI Extension »ç¿ë
    mod_lbmethod_bybusyness
    Pending Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_byrequests
    Request Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_bytraffic
    Weighted Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_lbmethod_heartbeat
    Heartbeat Traffic Counting load balancer scheduler algorithm for mod_proxy_balancer
    mod_ldap
    LDAP connection pooling and result caching services for use by other LDAP modules
    mod_log_config
    ¼­¹ö·ÎÀÇ ¿äûÀ» ·Î±×¿¡ ±â·ÏÇÑ´Ù
    mod_log_debug
    Additional configurable debug logging
    mod_log_forensic
    Forensic Logging of the requests made to the server
    mod_logio
    ¿äû´ç ÀÔÃâ·Â ¹ÙÀÌÆ®¼ö¸¦ ±â·Ï
    mod_lua
    Provides Lua hooks into various portions of the httpd request processing
    mod_macro
    Provides macros within apache httpd runtime configuration files
    mod_md
    Managing domains across virtual hosts, certificate provisioning via the ACME protocol
    mod_mime
    Associates the requested filename's extensions with the file's behavior (handlers and filters) and content (mime-type, language, character set and encoding)
    mod_mime_magic
    Determines the MIME type of a file by looking at a few bytes of its contents
    mod_negotiation
    Provides for content negotiation
    mod_nw_ssl
    Enable SSL encryption for NetWare
    mod_privileges
    Support for Solaris privileges and for running virtual hosts under different user IDs.
    mod_proxy
    Multi-protocol proxy/gateway server
    mod_proxy_ajp
    AJP support module for mod_proxy
    mod_proxy_balancer
    mod_proxy extension for load balancing
    mod_proxy_connect
    mod_proxy extension for CONNECT request handling
    mod_proxy_express
    Dynamic mass reverse proxy extension for mod_proxy
    mod_proxy_fcgi
    FastCGI support module for mod_proxy
    mod_proxy_fdpass
    fdpass external process support module for mod_proxy
    mod_proxy_ftp
    FTP support module for mod_proxy
    mod_proxy_hcheck
    Dynamic health check of Balancer members (workers) for mod_proxy
    mod_proxy_html
    Rewrite HTML links in to ensure they are addressable from Clients' networks in a proxy context.
    mod_proxy_http
    HTTP support module for mod_proxy
    mod_proxy_http2
    HTTP/2 support module for mod_proxy
    mod_proxy_scgi
    SCGI gateway module for mod_proxy
    mod_proxy_uwsgi
    UWSGI gateway module for mod_proxy
    mod_proxy_wstunnel
    Websockets support module for mod_proxy
    mod_ratelimit
    Bandwidth Rate Limiting for Clients
    mod_reflector
    Reflect a request body as a response via the output filter stack.
    mod_remoteip
    Replaces the original client IP address for the connection with the useragent IP address list presented by a proxies or a load balancer via the request headers.
    mod_reqtimeout
    Set timeout and minimum data rate for receiving requests
    mod_request
    Filters to handle and make available HTTP request bodies
    mod_rewrite
    Provides a rule-based rewriting engine to rewrite requested URLs on the fly
    mod_sed
    Filter Input (request) and Output (response) content using sed syntax
    mod_session
    Session support
    mod_session_cookie
    Cookie based session support
    mod_session_crypto
    Session encryption support
    mod_session_dbd
    DBD/SQL based session support
    mod_setenvif
    ¿äûÀÇ ¼º°Ý¿¡ µû¶ó ȯ°æº¯¼ö ¼³Á¤À» º¯°æÇÑ´Ù
    mod_slotmem_plain
    Slot-based shared memory provider.
    mod_slotmem_shm
    Slot-based shared memory provider.
    mod_so
    ½ÃÀÛÇÒ¶§ ȤÀº Àç½ÃÀÛÇÒ¶§ ½ÇÇà°¡´ÉÇÑ ÄÚµå¿Í ¸ðµâÀ» ¼­¹ö·Î ÀоîµéÀδÙ
    mod_socache_dbm
    DBM based shared object cache provider.
    mod_socache_dc
    Distcache based shared object cache provider.
    mod_socache_memcache
    Memcache based shared object cache provider.
    mod_socache_redis
    Redis based shared object cache provider.
    mod_socache_shmcb
    shmcb based shared object cache provider.
    mod_speling
    »ç¿ëÀÚ°¡ ´ë¼Ò¹®ÀÚ¸¦ À߸ø »ç¿ëÇϰųª ¸ÂÃã¹ýÀÌ Æ²¸®´Â °ÍÀ» Çѹø±îÁö Çã¿ëÇÏ¿© À߸øµÈ URLÀ» °íÄ¡·Á°í ½ÃµµÇÑ´Ù
    mod_ssl
    Strong cryptography using the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols
    mod_status
    ¼­¹ö Ȱµ¿°ú ¼º´É¿¡ ´ëÇÑ Á¤º¸¸¦ Á¦°øÇÑ´Ù
    mod_substitute
    Perform search and replace operations on response bodies
    mod_suexec
    CGI ½ºÅ©¸³Æ®¸¦ ƯÁ¤ »ç¿ëÀÚ¿Í ±×·ì ±ÇÇÑÀ¸·Î ½ÇÇàÇÑ´Ù
    mod_unique_id
    °¢ ¿äû¸¶´Ù À¯ÀÏÇÑ ½Äº°ÀÚ¸¦ °¡Áö´Â ȯ°æº¯¼ö¸¦ Á¦°øÇÑ´Ù
    mod_unixd
    Basic (required) security for Unix-family platforms.
    mod_userdir
    »ç¿ëÀÚº° µð·ºÅ丮
    mod_usertrack
    Clickstream logging of user activity on a site
    mod_version
    ¹öÀüº° ¼³Á¤
    mod_vhost_alias
    Provides for dynamically configured mass virtual hosting
    mod_watchdog
    provides infrastructure for other modules to periodically run tasks
    mod_xml2enc
    Enhanced charset/internationalisation support for libxml2-based filter modules

    °¡´ÉÇÑ ¾ð¾î:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/mod/mod_socache_memcache.html0000644000000000000500000000035413362070302021172 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_socache_memcache.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_socache_memcache.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_file_cache.html.ko.euc-kr0000644000000000000500000003472213412755316021623 0ustar rootsrc mod_file_cache - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_file_cache

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:¸Þ¸ð¸®¿¡ Á¤Àû ÆÄÀϵéÀ» ij½¬
    »óÅÂ:Experimental
    ¸ðµâ¸í:file_cache_module
    ¼Ò½ºÆÄÀÏ:mod_file_cache.c

    ¿ä¾à

    ÀÌ ¸ðµâÀº Á¶½ÉÇØ¼­ »ç¿ëÇØ¾ß ÇÑ´Ù. mod_file_cache¸¦ »ç¿ëÇÏ¿© »çÀÌÆ®¸¦ ¾û¸ÁÀ¸·Î ¸¸µé±â ½±±â¶§¹®¿¡ ÀÌ ¹®¼­¸¦ ²Ä²ÄÈ÷ ÀÐ±æ ¹Ù¶õ´Ù.

    °ÅÀÇ º¯ÇÏÁö ¾Ê°í ÀÚÁÖ ¿äûµÇ´Â ÆÄÀÏÀ» ij½¬¿¡ ÀúÀåÇÏ¿© ¼­¹ö ºÎÇϸ¦ ÁÙÀÏ ¼ö ÀÖ´Ù. mod_file_cache´Â ÀÚÁÖ ¿äûµÇ´Â Á¤Àû ÆÄÀÏÀ» µÎ°¡Áö ¹æ½ÄÀ¸·Î ij½¬¿¡ ÀúÀåÇÑ´Ù. ¼³Á¤ Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© mod_file_cache°¡ ÆÄÀÏÀ» ¿­°í(open) mmap()ÇÒÁö ¾Æ´Ï¸é ÆÄÀÏÀ» ¿­°í ÆÄÀÏ ÇÚµéÀ» ÀúÀåÇÒÁö °áÁ¤ÇÑ´Ù. µÎ ¹æ½Ä ¸ðµÎ ÆÄÀÏÀ» ¼­ºñ½ºÇϱâÀ§ÇØ ÇÊ¿äÇÑ ÀÛ¾÷ÀÇ ÀϺθ¦ (ƯÈ÷ ÆÄÀÏ ÀÔÃâ·Â ÀÛ¾÷) ÆÄÀÏÀ» ¿äûÇÒ ¶§¸¶´Ù ¸Å¹ø ÇÏ´Â ´ë½Å ¼­¹ö°¡ ½ÃÀÛÇÒ¶§ Çѹø¸¸ ÇÏ¿© ¼­¹ö ºÎÇϰ¡ °¨¼ÒÇÑ´Ù.

    ÁÖÀÇ: ÀÌ ¹æ¹ýÀº CGI ÇÁ·Î±×·¥À̳ª Ưº°ÇÑ ³»¿ëÇڵ鷯¸¦ ÅëÇØ ¼­ºñ½ºÇÏ´Â ÆÄÀÏÀÇ ¼­ºñ½º ¼Óµµ¸¦ ³ôÀÏ ¼ö ¾ø´Ù. ÀÌ ¹æ¹ýÀº º¸Åë ¾ÆÆÄÄ¡ core ³»¿ëÇڵ鷯°¡ ¼­ºñ½ºÇÏ´Â ÀÏ¹ÝÆÄÀÏ¿¡¸¸ Àû¿ëµÈ´Ù.

    ÀÌ ¸ðµâÀº ¾ÆÆÄÄ¡ 1.3¿¡ ÀÖ´Â mod_mmap_static ¸ðµâÀÇ ±â´ÉÀ» È®ÀåÇÑ °á°ú´Ù.

    top

    mod_file_cache »ç¿ëÇϱâ

    mod_file_cache´Â ÁÖ¼­¹ö ¼³Á¤¿¡¼­ MMapFile°ú CacheFile Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ¼³Á¤ÇÑ Á¤Àû ÆÄÀϵéÀ» ij½¬¿¡ ÀúÀåÇÑ´Ù.

    ¸ðµç Ç÷¡ÆûÀÌ µÎ Áö½Ã¾î¸¦ ¸ðµÎ Áö¿øÇÏ´Â °ÍÀº ¾Æ´Ï´Ù. ¿¹¸¦ µé¾î, À©µµ¿ìÁî¿ë ¾ÆÆÄÄ¡´Â ÇöÀç MMapStatic Áö½Ã¾î¸¦ Áö¿øÇÏÁö ¾ÊÁö¸¸, AIX °°Àº ´Ù¸¥ Ç÷¡ÆûÀº µÑ ¸ðµÎ¸¦ Áö¿øÇÑ´Ù. Áö¿øÇÏÁö¾Ê´Â Áö½Ã¾î¸¦ »ç¿ëÇÒ °æ¿ì ¼­¹ö ¿À·ù ·Î±×¿¡ ¿À·ù¹®À» ³²±ä´Ù. Áö¿øÇÏÁö¾Ê´Â Áö½Ã¾î¸¦ »ç¿ëÇØµµ ¼­¹ö´Â µ¿ÀÛÇÏÁö¸¸ ÆÄÀÏÀ» ij½¬¿¡ ÀúÀåÇÏÁö ¾Ê´Â´Ù. µÎ Áö½Ã¾î¸¦ ¸ðµÎ Áö¿øÇÏ´Â Ç÷¡ÆûÀ» »ç¿ëÇÑ´Ù¸é ¾î¶² ¹æ½ÄÀÌ ´õ ÁÁÀºÁö ½ÇÇèÇØº¸¶ó.

    MMapFile Áö½Ã¾î

    mod_file_cacheÀÇ MMapFile Áö½Ã¾î´Â ¼³Á¤ÇÑ Á¤Àû ÆÄÀϵéÀ» mmap() ½Ã½ºÅÛÈ£ÃâÀ» »ç¿ëÇÏ¿© ¸Þ¸ð¸®¿¡ ´ëÀÀÇÑ´Ù. ÃֽŠÀ¯´Ð½º·ù ¿î¿µÃ¼Á¦¶ó¸é º¸Åë ÀÌ ½Ã½ºÅÛÈ£ÃâÀÌ ÀÖÁö¸¸, ¾ø´Â ¿î¿µÃ¼Á¦µµ ÀÖ´Ù. ¶Ç, mmap()ÇÒ ¼ö ÀÖ´Â ÆÄÀÏ Å©±â¿Í °³¼ö¸¦ ½Ã½ºÅÛÀÌ Á¦ÇÑÇÒ ¼ö ÀÖÀ¸¹Ç·Î ¹Ì¸® ½ÇÇèÇØº¸´Â °ÍÀÌ ÁÁ´Ù.

    ¼­¹ö´Â ½ÃÀÛÇÒ¶§¿Í Àç½ÃÀÛÇÒ¶§¸¸ mmap()ÇÑ´Ù. ±×·¡¼­ ÆÄÀϽýºÅÛ¿¡¼­ ÇØ´ç ÆÄÀÏÁß Çϳª¶óµµ º¯°æµÇ¸é ¼­¹ö¸¦ Àç½ÃÀÛÇØ¾ß ÇÑ´Ù (Áߴܰú Àç½ÃÀÛ ¹®¼­ Âü°í). ´Ù½Ã ¸»Çؼ­ ÆÄÀÏÀÌ º¯°æµÇ¾ú´Âµ¥ ¼­¹ö¸¦ Àç½ÃÀÛÇÏÁö ¾ÊÀ¸¸é ¿ÏÀüÈ÷ ÀÌ»óÇÏ°Ô ¿äûÀ» ¼­ºñ½ºÇÒÁöµµ ¸ð¸¥´Ù. ÀÌÀü ÆÄÀÏÀ» Áö¿ì°í(unlink) ±× ÀÚ¸®¿¡ »õ·Î¿î ÆÄÀÏÀ» ¸¸µé´Â ¹æ½ÄÀ¸·Î ÆÄÀÏÀ» ¼öÁ¤ÇØ¾ß ÇÑ´Ù. rdist³ª mv¿Í °°Àº ´ë´Ù¼öÀÇ µµ±¸°¡ ÀÌ·± ¹æ½ÄÀ¸·Î µ¿ÀÛÇÑ´Ù. ¸Å¹ø Ãß°¡·Î ºÒÇÊ¿äÇÑ stat() °Ë»ç°¡ ÇÊ¿äÇϰí ÀÔÃâ·Â °¨¼Ò¶ó´Â ¿ø·¡ Àǵµ¿¡ ¹ÝÇϱ⶧¹®¿¡ ÀÌ ¸ðµâÀº ÆÄÀÏÀÇ º¯È­¸¦ ¹«½ÃÇÑ´Ù.

    CacheFile Áö½Ã¾î

    mod_file_cacheÀÇ CacheFile Áö½Ã¾î´Â ¼³Á¤ Áö½Ã¾î¿¡ ¿­°ÅÇÑ ÆÄÀÏ(°ú ÆÄÀϵé)À» ¿­¾î¼­ ÆÄÀÏÀÇ ÇÚµé(handle) ȤÀº ÆÄÀÏ ±â¼úÀÚ(file descriptor)¸¦ ij½¬¿¡ ÀúÀåÇÑ´Ù. ÆÄÀÏÀ» ¿äûÇÏ¸é ¼­¹ö´Â ij½¬¿¡¼­ ÇÚµéÀ» ã¾Æ¼­ ¼ÒÄÏ API sendfile()¿¡ (À©µµ¿ìÁî¿¡¼­´Â TransmitFile()) ³Ñ±ä´Ù.

    ¼­¹ö´Â ½ÃÀÛÇÒ¶§¿Í Àç½ÃÀÛÇÒ¶§¸¸ ÆÄÀÏ ÇÚµéÀ» ij½¬ÇÑ´Ù. ±×·¡¼­ ÆÄÀϽýºÅÛ¿¡¼­ ij½¬ÇÑ ÆÄÀÏÁß Çϳª¶óµµ º¯°æµÇ¸é ¼­¹ö¸¦ Àç½ÃÀÛÇØ¾ß ÇÑ´Ù (Áߴܰú Àç½ÃÀÛ ¹®¼­ Âü°í). ´Ù½Ã ¸»Çؼ­ ÆÄÀÏÀÌ º¯°æµÇ¾ú´Âµ¥ ¼­¹ö¸¦ Àç½ÃÀÛÇÏÁö ¾ÊÀ¸¸é ¿ÏÀüÈ÷ ÀÌ»óÇÏ°Ô ¿äûÀ» ¼­ºñ½ºÇÒÁöµµ ¸ð¸¥´Ù. ÀÌÀü ÆÄÀÏÀ» Áö¿ì°í(unlink) ±× ÀÚ¸®¿¡ »õ·Î¿î ÆÄÀÏÀ» ¸¸µå´Â ¹æ½ÄÀ¸·Î ÆÄÀÏÀ» ¼öÁ¤ÇØ¾ß ÇÑ´Ù. rdist³ª mv¿Í °°Àº ´ë´Ù¼öÀÇ µµ±¸°¡ ÀÌ·± ¹æ½ÄÀ¸·Î µ¿ÀÛÇÑ´Ù.

    ÁÖÀÇ

    µð·ºÅ丮ÀÇ ¸ðµç ÆÄÀÏÀ» Àç±ÍÀûÀ¸·Î ij½¬¿¡ ÀúÀåÇÏ´Â Áö½Ã¾î´Â ¾ø´Ù. ´ë½Å ´ÙÀ½°ú °°ÀÌ ÇØº¸¶ó... Include Áö½Ã¾î¸¦ Âü°íÇÏ¿© ´ÙÀ½°ú °°Àº ¸í·É¾î¸¦ ½ÇÇàÇÑ´Ù:

    find /www/htdocs -type f -print \
    | sed -e 's/.*/mmapfile &/' > /www/conf/mmap.conf

    top

    CacheFile Áö½Ã¾î

    ¼³¸í:½ÃÀ۽à ¿©·¯ ÆÄÀÏ ÇÚµéÀ» ij½¬ÇÑ´Ù
    ¹®¹ý:CacheFile file-path [file-path] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤
    »óÅÂ:Experimental
    ¸ðµâ:mod_file_cache

    CacheFile Áö½Ã¾î´Â ¼­¹ö°¡ ½ÃÀÛÇÒ¶§ ¿©·¯ ÆÄÀÏÀ» ¿­°í(open) ÆÄÀϵéÀÇ ÇÚµéÀ» ij½¬¿¡ ÀúÀåÇÑ´Ù. ¼­¹ö Á¾·á½Ã ÀÚµ¿À¸·Î ij½¬ÇÑ ÆÄÀÏÀÇ ÇÚµéÀ» ´Ý´Â´Ù(close). ÆÄÀϽýºÅÛ¿¡¼­ ÆÄÀÏÀÌ º¯°æµÇ¸é ÆÄÀÏÀ» ´Ù½Ã ij½¬ÇϱâÀ§ÇØ ¼­¹ö¸¦ Àç½ÃÀÛÇØ¾ß ÇÑ´Ù.

    file-path ¾Æ±Ô¸ÕÆ®¸¦ Á¶½ÉÇØ¶ó. ¾Æ±Ô¸ÕÆ®´Â ¾ÆÆÄÄ¡ÀÇ URL-ÆÄÀÏ¸í º¯È¯ Çڵ鷯°¡ ¸¸µç ÆÄÀϽýºÅÛ °æ·Î¿Í Á¤È®È÷ ÀÏÄ¡ÇØ¾ß ÇÑ´Ù. Çѹø ´õ ºÒÇÊ¿äÇÑ stat() ½Ã½ºÅÛÈ£ÃâÀÌ ÇÊ¿äÇϱ⶧¹®¿¡ inode³ª ½Éº¼¸µÅ© µîÀ» °æ·Î¸¦ ÁöÁ¤ÇÒ ¼ö ¾ø´Ù. ÀÌ ¸ðµâÀº mod_alias³ª mod_rewrite·Î ÀçÀÛ¼ºÇÑ ÆÄÀϸíÀ» ´Ù·ê ¼ö Àֱ⵵ ¾ø±âµµ ÇÏ´Ù.

    ¿¹Á¦

    CacheFile /usr/local/apache/htdocs/index.html

    top

    MMapFile Áö½Ã¾î

    ¼³¸í:½ÃÀ۽à ¿©·¯ ÆÄÀÏÀ» ¸Þ¸ð¸®¿¡ ´ëÀÀÇÑ´Ù
    ¹®¹ý:MMapFile file-path [file-path] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤
    »óÅÂ:Experimental
    ¸ðµâ:mod_file_cache

    MMapFile Áö½Ã¾î´Â ¼­¹ö°¡ ½ÃÀÛÇÒ¶§ (°ø¹éÀ¸·Î ±¸ºÐÇÑ ¾Æ±Ô¸ÕÆ®·Î ÁöÁ¤ÇÑ) ¿©·¯ ÆÄÀÏÀ» ¸Þ¸ð¸®¿¡ ´ëÀÀÇÑ´Ù(map). ¼­¹ö Á¾·á½Ã ÀÚµ¿À¸·Î ´ëÀÀÀ» Ǭ´Ù(unmap). ÆÄÀϽýºÅÛ¿¡¼­ ÆÄÀÏÀÌ º¯°æµÇ¸é ÆÄÀϵéÀ» ´Ù½Ã mmap()ÇϱâÀ§ÇØ ÃÖ¼ÒÇÑ ¼­¹ö¿¡ HUPÀ̳ª USR1 ½Ã±×³ÎÀ» º¸³»¾ß ÇÑ´Ù.

    file-path ¾Æ±Ô¸ÕÆ®¸¦ Á¶½ÉÇØ¶ó. ¾Æ±Ô¸ÕÆ®´Â ¾ÆÆÄÄ¡ÀÇ URL-ÆÄÀÏ¸í º¯È¯ Çڵ鷯°¡ ¸¸µç ÆÄÀϽýºÅÛ °æ·Î¿Í Á¤È®È÷ ÀÏÄ¡ÇØ¾ß ÇÑ´Ù. Çѹø ´õ ºÒÇÊ¿äÇÑ stat() ½Ã½ºÅÛÈ£ÃâÀÌ ÇÊ¿äÇϱ⶧¹®¿¡ inode³ª ½Éº¼¸µÅ© µîÀ» °æ·Î¸¦ ÁöÁ¤ÇÒ ¼ö ¾ø´Ù. ÀÌ ¸ðµâÀº mod_alias³ª mod_rewrite·Î ÀçÀÛ¼ºÇÑ ÆÄÀϸíÀ» ´Ù·ê ¼ö Àֱ⵵ ¾ø±âµµ ÇÏ´Ù.

    ¿¹Á¦

    MMapFile /usr/local/apache/htdocs/index.html

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mpmt_os2.html0000644000000000000500000000032413362070302016641 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mpmt_os2.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mpmt_os2.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_socache_shmcb.html.en0000644000000000000500000001437513412755316021150 0ustar rootsrc mod_socache_shmcb - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_socache_shmcb

    Available Languages:  en  |  fr 

    Description:shmcb based shared object cache provider.
    Status:Extension
    Module Identifier:socache_shmcb_module
    Source File:mod_socache_shmcb.c

    Summary

    mod_socache_shmcb is a shared object cache provider which provides for creation and access to a cache backed by a high-performance cyclic buffer inside a shared memory segment.

    shmcb:/path/to/datafile(512000)

    Details of other shared object cache providers can be found here.

    Support Apache!

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cern_meta.html.en0000644000000000000500000002600613412755316020316 0ustar rootsrc mod_cern_meta - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_cern_meta

    Available Languages:  en  |  fr  |  ko 

    Description:CERN httpd metafile semantics
    Status:Extension
    Module Identifier:cern_meta_module
    Source File:mod_cern_meta.c

    Summary

    Emulate the CERN HTTPD Meta file semantics. Meta files are HTTP headers that can be output in addition to the normal range of headers for each file accessed. They appear rather like the Apache .asis files, and are able to provide a crude way of influencing the Expires: header, as well as providing other curiosities. There are many ways to manage meta information, this one was chosen because there is already a large number of CERN users who can exploit this module.

    More information on the CERN metafile semantics is available.

    top

    MetaDir Directive

    Description:Name of the directory to find CERN-style meta information files
    Syntax:MetaDir directory
    Default:MetaDir .web
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Extension
    Module:mod_cern_meta

    Specifies the name of the directory in which Apache can find meta information files. The directory is usually a 'hidden' subdirectory of the directory that contains the file being accessed. Set to "." to look in the same directory as the file:

    MetaDir .

    Or, to set it to a subdirectory of the directory containing the files:

    MetaDir .meta
    top

    MetaFiles Directive

    Description:Activates CERN meta-file processing
    Syntax:MetaFiles on|off
    Default:MetaFiles off
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Extension
    Module:mod_cern_meta

    Turns on/off Meta file processing on a per-directory basis.

    top

    MetaSuffix Directive

    Description:File name suffix for the file containing CERN-style meta information
    Syntax:MetaSuffix suffix
    Default:MetaSuffix .meta
    Context:server config, virtual host, directory, .htaccess
    Override:Indexes
    Status:Extension
    Module:mod_cern_meta

    Specifies the file name suffix for the file containing the meta information. For example, the default values for the two directives will cause a request to DOCUMENT_ROOT/somedir/index.html to look in DOCUMENT_ROOT/somedir/.web/index.html.meta and will use its contents to generate additional MIME header information.

    Example:

    MetaSuffix .meta

    Available Languages:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_fcgi.html0000644000000000000500000000034013362070302020107 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy_fcgi.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_proxy_fcgi.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_charset_lite.html0000644000000000000500000000050713362070302020411 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_charset_lite.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_charset_lite.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_charset_lite.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/mod/mpm_winnt.html.ja.utf80000644000000000000500000002035313412755316020406 0ustar rootsrc mpm_winnt - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache MPM winnt

    翻訳済ã¿è¨€èªž:  de  |  en  |  fr  |  ja 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:Windows NT å‘ã‘ã«æœ€é©åŒ–ã•れãŸãƒžãƒ«ãƒãƒ—ロセッシングモジュール
    ステータス:MPM
    モジュール識別å­:mpm_winnt_module
    ソースファイル:mpm_winnt.c

    概è¦

    ã“ã®ãƒžãƒ«ãƒãƒ—ロセッシングモジュール (MPM) 㯠Windows NT ã§ã®ãƒ‡ãƒ•ォルトã«ãªã‚Šã¾ã™ã€‚ 一ã¤ã®åˆ¶å¾¡ç”¨ãƒ—ロセスを用ã„ã€ã“れãŒä¸€ã¤ã®å­ãƒ—ロセスを起動ã—〠ãã—ã¦å­ãƒ—ロセスãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å–り扱ã†ãŸã‚ã«ã‚¹ãƒ¬ãƒƒãƒ‰ã‚’ èµ·å‹•ã—ã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  de  |  en  |  fr  |  ja 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_dbm.html.ko.euc-kr0000644000000000000500000002613513412755316021521 0ustar rootsrc mod_authn_dbm - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_authn_dbm

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:DBM ÆÄÀÏÀ» »ç¿ëÇÑ »ç¿ëÀÚ ÀÎÁõ
    »óÅÂ:Extension
    ¸ðµâ¸í:authn_dbm_module
    ¼Ò½ºÆÄÀÏ:mod_authn_dbm.c
    Áö¿ø:¾ÆÆÄÄ¡ 2.1 ÀÌÈĺÎÅÍ

    ¿ä¾à

    ÀÌ ¸ðµâÀº mod_auth_digest³ª mod_auth_basic ÀÎÁõ¾Õ´Ü¸ðµâÀ» À§ÇØ dbm ¾ÏÈ£ÆÄÀÏ¿¡¼­ »ç¿ëÀÚ¸¦ ã¾Æ¼­ ÀÎÁõÇÑ´Ù. mod_authn_file°ú ±â´ÉÀÌ ºñ½ÁÇÑ´Ù.

    mod_auth_basicÀ̳ª mod_auth_digest¸¦ »ç¿ëÇÒ¶§ AuthBasicProvider³ª AuthDigestProviderÀÇ °ªÀ¸·Î dbmÀ» ¼³Á¤Çϸé ÀÌ ¸ðµâÀ» »ç¿ëÇÑ´Ù.

    top

    AuthDBMType Áö½Ã¾î

    ¼³¸í:¾ÏÈ£¸¦ ÀúÀåÇÏ´Â µ¥ÀÌÅͺ£À̽º ÆÄÀÏ Á¾·ù¸¦ ÁöÁ¤ÇÑ´Ù
    ¹®¹ý:AuthDBMType default|SDBM|GDBM|NDBM|DB
    ±âº»°ª:AuthDBMType default
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Extension
    ¸ðµâ:mod_authn_dbm

    ¾ÏÈ£¸¦ ÀúÀåÇÏ´Â µ¥ÀÌÅͺ£À̽º ÆÄÀÏ Á¾·ù¸¦ ÁöÁ¤ÇÑ´Ù. ±âº» µ¥ÀÌÅͺ£À̽º Á¾·ù´Â ÄÄÆÄÀ϶§ ÆÇ´ÜÇÑ´Ù. »ç¿ëÇÒ ¼ö ÀÖ´Â ´Ù¸¥ µ¥ÀÌÅͺ£À̽º ÆÄÀÏ Á¾·ùµµ ÄÄÆÄÀÏ ¼³Á¤¿¡ ´Þ·È´Ù.

    ¾ÏÈ£ÆÄÀÏÀ» ¸¸µå´Â ÇÁ·Î±×·¥ÀÌ °°Àº Á¾·ùÀÇ µ¥ÀÌÅͺ£À̽º¸¦ »ç¿ëÇϵµ·Ï ¼³Á¤ÇØ¾ß ÇÑ´Ù.

    top

    AuthDBMUserFile Áö½Ã¾î

    ¼³¸í:ÀÎÁõÇÒ »ç¿ëÀÚ¿Í ¾ÏÈ£ ¸ñ·ÏÀ» ÀúÀåÇÏ´Â µ¥ÀÌÅͺ£À̽º ÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù
    ¹®¹ý:AuthDBMUserFile file-path
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Extension
    ¸ðµâ:mod_authn_dbm

    AuthDBMUserFile Áö½Ã¾î´Â »ç¿ëÀÚ ÀÎÁõ¿¡ »ç¿ëÇÒ »ç¿ëÀÚ¿Í ¾ÏÈ£ ¸ñ·ÏÀ» ÀúÀåÇÏ´Â DBM ÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù. File-path´Â ÆÄÀÏÀÇ Àý´ë°æ·ÎÀÌ´Ù.

    ÆÄÀÏÀº »ç¿ëÀÚ¸íÀ» Ű·Î »ç¿ëÇÑ´Ù. »ç¿ëÀÚ¿¡ ´ëÇÑ °ªÀº ÀÎÄÚµùµÈ ¾ÏÈ£ÀÌ´Ù. ¾ÏÈ£ µÚ¿¡ Äݷаú ÀÓÀÇÀÇ Á¤º¸°¡ ³ª¿Ã ¼ö ÀÖ´Ù. ¼­¹ö´Â Äݷаú µÚ¿¡ ³ª¿À´Â Á¤º¸¸¦ ¹«½ÃÇÑ´Ù.

    º¸¾È:

    AuthDBMUserFileÀÌ À¥¼­¹öÀÇ ¹®¼­µé ¹Û¿¡ ÀÖÀ½À» È®ÀÎÇ϶ó. ÀÌ ÆÄÀÏÀ» º¸È£ÇÒ µð·ºÅ丮 ¾È¿¡ °°ÀÌ µÎÁö ¸¶¶ó. ±×·¸Áö ¾ÊÀ¸¸é, Ŭ¶óÀÌ¾ðÆ®°¡ AuthDBMUserFileÀ» ´Ù¿î·ÎµåÇÒ ¼ö ÀÖ´Ù.

    Áß¿äÇÑ È£È¯¼º ÁÖÀÇ: ¾ÆÆÄÄ¡ ¸ðµâÀÇ dbmopen ±¸ÇöÀº ¹®ÀÚ¿­ ³¡ÀÇ NULL¿¡ ÀÇÁ¸ÇÏÁö¾Ê°í DBM ÀڷᱸÁ¶¿¡¼­ ÇØ½Ì°ªÀÇ ¹®ÀÚ¿­ ±æÀ̸¦ Àд´Ù. Netscape À¥¼­¹ö µî ¾î¶² ÇÁ·Î±×·¥Àº ¹®ÀÚ¿­ÀÌ NULL·Î ³¡³­´Ù°í °¡Á¤Çϱ⶧¹®¿¡ ¿©·¯ ÇÁ·Î±×·¥ÀÌ DBM ÆÄÀÏÀ» »ç¿ëÇÏ¸é ¹®Á¦°¡ µÉ ¼ö ÀÖ´Ù.

    ¾ÆÆÄÄ¡´Â dbmmanage¶ó´Â Perl ½ºÅ©¸³Æ®¸¦ Æ÷ÇÔÇÑ´Ù. ÀÌ ÇÁ·Î±×·¥Àº ÀÌ ¸ðµâÀÌ »ç¿ëÇÒ DBMÇü½Ä ¾ÏÈ£ÆÄÀÏÀ» ¸¸µé°í ¼öÁ¤ÇÑ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_connect.html.en0000644000000000000500000002407613412755316021260 0ustar rootsrc mod_proxy_connect - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy_connect

    Available Languages:  en  |  fr  |  ja 

    Description:mod_proxy extension for CONNECT request handling
    Status:Extension
    Module Identifier:proxy_connect_module
    Source File:mod_proxy_connect.c

    Summary

    This module requires the service of mod_proxy. It provides support for the CONNECT HTTP method. This method is mainly used to tunnel SSL requests through proxy servers.

    Thus, in order to get the ability of handling CONNECT requests, mod_proxy and mod_proxy_connect have to be present in the server.

    CONNECT is also used when the server needs to send an HTTPS request through a forward proxy. In this case the server acts as a CONNECT client. This functionality is part of mod_proxy and mod_proxy_connect is not needed in this case.

    Warning

    Do not enable proxying until you have secured your server. Open proxy servers are dangerous both to your network and to the Internet at large.

    top

    Request notes

    mod_proxy_connect creates the following request notes for logging using the %{VARNAME}n format in LogFormat or ErrorLogFormat:

    proxy-source-port
    The local port used for the connection to the backend server.
    top

    AllowCONNECT Directive

    Description:Ports that are allowed to CONNECT through the proxy
    Syntax:AllowCONNECT port[-port] [port[-port]] ...
    Default:AllowCONNECT 443 563
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy_connect
    Compatibility:Moved from mod_proxy in Apache 2.3.5. Port ranges available since Apache 2.3.7.

    The AllowCONNECT directive specifies a list of port numbers or ranges to which the proxy CONNECT method may connect. Today's browsers use this method when a https connection is requested and proxy tunneling over HTTP is in effect.

    By default, only the default https port (443) and the default snews port (563) are enabled. Use the AllowCONNECT directive to override this default and allow connections to the listed ports only.

    Available Languages:  en  |  fr  |  ja 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_brotli.html.fr.utf80000644000000000000500000005500513412755316020547 0ustar rootsrc mod_brotli - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_brotli

    Langues Disponibles:  en  |  fr 

    Description:Compression du contenu via Brotli avant sa livraison au client
    Statut:Extension
    Identificateur de Module:brotli_module
    Fichier Source:mod_brotli.c
    Compatibilité:Disponible à partir de la version 2.4.26 du serveur HTTP Apache

    Sommaire

    Le module mod_brotli fournit le filtre en sortie BROTLI_COMPRESS qui permet de compresser un contenu avant sa livraison au client en utilisant la bibliothèque brotli. Ce filtre est implémenté en utilisant la bibliothèque Brotli que l'on peut trouver à https://github.com/google/brotli.

    top

    Exemples de configurations

    Compression et TLS

    Certaines applications web sont vulnérables à une attaque de type vol d'informations lorsqu'une connexion TLS transmet des données compressées. Pour plus d'informations, étudiez en détail la famille d'attaques "BREACH".

    Voici une configuration simple qui compresse des types de contenus courants au format texte :

    Compression de certains types seulement

    AddOutputFilterByType BROTLI_COMPRESS text/html text/plain text/xml text/css text/javascript application/javascript
    top

    Activation de la compression

    Compression et TLS

    Certaines applications web sont vulnérables à une attaque de type vol d'informations lorsqu'une connexion TLS transmet des données compressées. Pour plus d'informations, étudiez en détail la famille d'attaques "BREACH".

    Compression en sortie

    La compression est implémentée par le filtre BROTLI_COMPRESS. La directive suivante active la compression pour les documents correspondant au conteneur dans lequel elle est placée :

    SetOutputFilter BROTLI_COMPRESS
    SetEnvIfNoCase Request_URI \.(?:gif|jpe?g|png)$ no-brotli

    Si vous voulez restreindre la compression à certains types MIME particuliers, vous pouvez utiliser la directive AddOutputFilterByType. Dans l'exemple suivant, l'activation de la compression est restreinte aux fichiers html de la documentation d'Apache :

    <Directory "/your-server-root/manual">
        AddOutputFilterByType BROTLI_COMPRESS text/html
    </Directory>

    Note

    Le filtre BROTLI_COMPRESS est toujours inséré après les filtres RESOURCE comme PHP ou SSI. Il n'affecte jamais les sous-requêtes internes.

    Note

    Définie via SetEnv, la variable d'environnement no-brotli permet de désactiver la compression brotli pour une requête particulière, et ceci même si elle est supportée par le client.
    top

    Interaction avec les serveurs mandataires

    Le module mod_brotli envoie un en-tête de réponse HTTP Vary:Accept-Encoding pour indiquer aux mandataires qu'une réponse mise en cache ne doit être envoyée qu'aux clients qui envoient l'en-tête de requête Accept-Encoding approprié. Ceci permet d'éviter d'envoyer du contenu compressé à un client qui ne sera pas en mesure de le décompresser.

    Si vous utilisez des exclusions spéciales dépendant, par exemple, de l'en-tête User-Agent, vous devez faire un ajout manuel à l'en-tête Vary afin d'informer les mandataires des restrictions supplémentaires. Par exemple, dans une configuration typique où l'addition du filtre BROTLI_COMPRESS dépend de l'en-tête User-Agent, vous devez ajouter :

    Header append Vary User-Agent

    Si votre décision d'utiliser la compression ou non dépend d'autres informations que le contenu d'en-têtes de requêtes (par exemple la version HTTP), vous devez affecter la valeur * à l'en-tête Vary. Ceci permet d'éviter que des mandataires qui le supportent n'effectuent une mise en cache intégrale.

    Exemple

    Header set Vary *
    top

    Servir un contenu pré-compressé

    comme mod_brotli compresse systématiquement un contenu pour chaque requête le concernant, il est possible d'obtenir un gain en performance en pré-compressant le contenu et en disant à mod_brotli de le servir sans le recompresser. Pour cela, vous pouvez utiliser une configuration du style :

    <IfModule mod_headers.c>
        # Sert des fichiers CSS compressés par brotli, s'ils existent
        # et si le client supporte brotli.
        RewriteCond "%{HTTP:Accept-encoding}" "br"
        RewriteCond "%{REQUEST_FILENAME}\.br" "-s"
        RewriteRule "^(.*)\.css"              "$1\.css\.br" [QSA]
    
        # Sert des fichiers JS compressés par brotli, s'ils existent
        # et si le client supporte brotli.
        RewriteCond "%{HTTP:Accept-encoding}" "br"
        RewriteCond "%{REQUEST_FILENAME}\.br" "-s"
        RewriteRule "^(.*)\.js"               "$1\.js\.br" [QSA]
    
    
        # Sert des types de contenu corrects, et évite la double compression.
        RewriteRule "\.css\.gz$" "-" [T=text/css,E=no-brotli:1]
        RewriteRule "\.js\.gz$"  "-" [T=text/javascript,E=no-brotli:1]
    
    
        <FilesMatch "(\.js\.br|\.css\.br)$">
          # Sert un type d'encodage correct.
          Header append Content-Encoding br
    
          # Force les mandataires à mettre en cache séparément les fichiers css/js
          # compressés ou non par brotli.
          Header append Vary Accept-Encoding
        </FilesMatch>
    </IfModule>
    top

    Directive BrotliAlterETag

    Description:Comment l'en-tête de réponse ETag doit être modifié au cours de la compression
    Syntaxe:BrotliAlterETag AddSuffix|NoChange|Remove
    Défaut:BrotliAlterETag AddSuffix
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_brotli

    La directive BrotliAlterETag permet d'indiquer comment l'en-tête ETag doit être modifié lorsqu'une réponse est compressée.

    AddSuffix

    Ajoute la méthode de compression à la fin de l'en-tête ETag, ce qui implique que les représentations compressées et non compressées possèderont des en-têtes ETag uniques. C'était le comportement par défaut depuis la version 2.4.0 avec un autre module de compression dynamique, mod-deflate. Ce paramètre permet d'éviter l'envoi de messages "HTTP Not Modified" (304) en réponse aux requêtes conditionnelles pour des contenus compressés.

    NoChange

    Ne modifie pas l'en-tête ETag d'une réponse compressée. C'était le comportement par défaut depuis la version 2.4.0 avec un autre module de compression dynamique, mod-deflate. Ce paramètre ne respecte pas la propriété HTTP/1.1 selon laquelle toutes les représentations d'une même ressource ont des en-têtes ETag uniques.

    Remove

    Supprime l'en-tête ETag des réponses compressées, ce qui rend impossibles certaines requêtes conditionnelles, mais évite les inconvénients des options précédentes.

    top

    Directive BrotliCompressionMaxInputBlock

    Description:Taille maximale du bloc de données en entrée
    Syntaxe:BrotliCompressionMaxInputBlock value
    Défaut:(automatic)
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_brotli

    La directive BrotliCompressionMaxInputBlock permet de spécifier la taille maximale du bloc de données en entrée entre 16 et 24, sachant que plus cette taille sera grande, plus grande sera la quantité de mémoire consommée.

    top

    Directive BrotliCompressionQuality

    Description:Qualité de la compression
    Syntaxe:BrotliCompressionQuality value
    Défaut:BrotliCompressionQuality 5
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_brotli

    La directive BrotliCompressionQuality permet de spécifier la qualité de la compression (une valeur entre 0 et 11). Les valeurs les plus hautes correspondent à une compression de meilleure qualité mais plus lente.

    top

    Directive BrotliCompressionWindow

    Description:Taille de la fenêtre de compression glissante brotli
    Syntaxe:BrotliCompressionWindow value
    Défaut:BrotliCompressionWindow 18
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_brotli

    La directive BrotliCompressionWindow permet de spécifier la taille de la fenêtre de compression glissante brotli (une valeur comprise entre 10 et 24). Une taille de fenêtre plus grande peut améliorer la qualité de la compression mais consomme d'avantage de mémoire.

    top

    Directive BrotliFilterNote

    Description:Enregistre le taux de compression dans une note à des fins de journalisation
    Syntaxe:BrotliFilterNote [type] notename
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_brotli

    La directive BrotliFilterNote permet d'indiquer qu'une note à propos du taux de compression doit être attachée à la requête. L'argument notename permet de spécifier le nom de la note. Vous pouvez utiliser cette note à des fins de statistiques en ajoutant l'information correspondante à votre access log.

    Exemple

    BrotliFilterNote ratio
    
    LogFormat '"%r" %b (%{ratio}n) "%{User-agent}i"' brotli
    CustomLog "logs/brotli_log" brotli

    Si vous souhaitez que l'information enregistrée dans vos journaux soit plus pertinente, vous pouvez renseigner l'argument optionnel type afin de spécifier le type de données à enregistrer dans la note à journaliser. L'argument type accepte les valeurs suivantes :

    Input
    Enregistre dans la note le nombre d'octets contenus dans le flux d'entrée du filtre.
    Output
    Enregistre dans la note le nombre d'octets contenus dans le flux de sortie du filtre.
    Ratio
    Enregistre dans la note le taux de compression (output/input * 100). Il s'agit de l'option par défaut si l'argument type est omis.

    Vous pouvez alors configurer vos journaux de la manière suivante :

    Journalisation spécifique

    BrotliFilterNote Input instream
    BrotliFilterNote Output outstream
    BrotliFilterNote Ratio ratio
    
    LogFormat '"%r" %{outstream}n/%{instream}n (%{ratio}n%%)' brotli
    CustomLog "logs/brotli_log" brotli

    Voir aussi

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_substitute.html.fr.utf80000644000000000000500000003706113412755316021471 0ustar rootsrc mod_substitute - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_substitute

    Langues Disponibles:  en  |  fr 

    Description:Effectue des opérations de recherche/remplacement sur les corps de réponses
    Statut:Extension
    Identificateur de Module:substitute_module
    Fichier Source:mod_substitute.c
    Compatibilité:Disponible depuis la version 2.2.7 du serveur HTTP Apache

    Sommaire

    mod_substitute fournit un mécanisme permettant d'effectuer des substitutions de chaînes fixes ou d'expressions rationnelles sur les corps de réponses.

    top

    Directive Substitute

    Description:Modèle de substition dans le contenu de la réponse
    Syntaxe:Substitute s/modèle/substitution/[infq]
    Contexte:répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_substitute

    La directive Substitute permet de spécifier un modèle de recherche/remplacement à appliquer au corps de la réponse.

    La signification du modèle peut être modifiée via toute combinaison de ces drapeaux :

    i
    Effectue une comparaison sans tenir compte de la casse.
    n
    Par défaut, le modèle est traité en tant qu'expression rationnelle. Le drapeau n force le traitement du modèle en tant que chaîne fixe.
    f
    Avec le drapeau f, mod_substitute met à plat le résultat d'une substitution (les conteneurs ou buckets ne sont pas dissociés), ce qui permet à d'éventuelles substitutions ultérieures de s'effectuer sur cette dernière. C'est le comportement par défaut.
    q
    Avec le drapeau q, mod_substitute dissocie les conteneurs (ou buckets) après chaque substitution. Ceci peut améliorer la rapidité de la réponse et diminuer la quantité de mémoire utilisée, mais ne doit être utilisé que s'il n'existe aucune possibilité pour que le résultat d'une substitution ne corresponde au modèle ou à l'expression rationnelle d'une substitution ultérieure.

    substitution peut contenir du texte et des références arrières d'expressions rationnelles.

    Exemple

    <Location "/>
        AddOutputFilterByType SUBSTITUTE text/html
        Substitute "s/foo/bar/ni"
    </Location>

    Le caractère utilisé pour séparer (ou "délimiter") les différentes partie de la valeur de substitution est référencé sous le nom de "délimiteur", et il s'agit le plus souvent d'un "slash".

    Si le modèle ou la chaîne de substitution contient un caractère slash '/', il est possible d'utiliser un autre délimiteur afin de rendre la directive plus lisible :

    Exemple d'utilisation d'un délimiteur alternatif

    <Location "/">
        AddOutputFilterByType SUBSTITUTE text/html
        Substitute "s|<BR */?>|<br />|i"
    </Location>

    Lorsqu'on utilise des expressions rationnelles, on peut insérer des références arrières dans les opérations de comparaison et de substitution, comme illustré dans l'exemple suivant :

    Exemple d'utilisation de références arrières et de captures

    <Location "/">
        AddOutputFilterByType SUBSTITUTE text/html
        # "foo=k,bar=k" -> "foo/bar=k"
        Substitute "s|foo=(\w+),bar=\1|foo/bar=$1|"
    </Location>

    Un scénario courant d'utilisation de mod_substitute est la situation où un serveur frontal mandate des requêtes pour un serveur d'arrière-plan qui renvoie des documents HTML contenant des URLs intégrées codées en dur qui font référence à ce serveur d'arrière-plan. Ces URLs ne fonctionnent pas pour l'utilisateur final car le serveur d'arrière-plan est hors d'atteinte.

    On peut, dans ce cas, utiliser mod_substitute pour réécrire ces URLs afin qu'elles soit utilisables dans la partie située derrière le mandataire :

    Réécriture des URLs intégrées à un contenu mandaté

    ProxyPass        "/blog/" "http://internal.blog.example.com/"
    ProxyPassReverse "/blog/" "http://internal.blog.example.com/"
    
    Substitute "s|http://internal.blog.example.com/|http://www.example.com/blog/|i"

    La directive ProxyPassReverse modifie tout en-tête Location (redirection) envoyé par le serveur d'arrière-plan et, dans cet exemple, la directive Substitute se charge à son tour de la modification de la réponse HTML.

    top

    Directive SubstituteInheritBefore

    Description:Modifie l'ordre de fusion des modèles hérités
    Syntaxe:SubstituteInheritBefore on|off
    Défaut:SubstituteInheritBefore on
    Contexte:répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_substitute
    Compatibilité:Disponible à partir de la version 2.4.17 du serveur HTTP Apache

    Cette directive permet de définir si l'on applique les modèles Substitute hérités en premier (valeur on), ou après ceux du contexte courant (valeur off). La valeur de la directive SubstituteInheritBefore est elle-même héritée, et les contextes qui en héritent (ceux qui ne définissent pas explicitement leur propre directive SubstituteInheritBefore) appliqueront donc l'ordre de fusion défini le plus proche.

    top

    Directive SubstituteMaxLineLength

    Description:Définit la longueur de ligne maximale
    Syntaxe:SubstituteMaxLineLength octets(b|B|k|K|m|M|g|G)
    Défaut:SubstituteMaxLineLength 1m
    Contexte:répertoire, .htaccess
    Surcharges autorisées:FileInfo
    Statut:Extension
    Module:mod_substitute
    Compatibilité:Disponible à partir de la version 2.4.11 du serveur HTTP Apache

    La taille de la ligne traitée par mod_substitute est limitée afin de restreindre l'utilisation des ressources mémoire. La directive SubstituteMaxLineLength permet de définir cette limite. La valeur de la limite peut être spécifiée sous la forme d'un nombre d'octets, et peut être suffixée par une des lettres b, B, k, K, m, M, g ou G pour fournir une valeur respectivement en octets, kiloOctets, mégaOctets ou gigaOctets.

    Example

    <Location "/">
        AddOutputFilterByType SUBSTITUTE text/html
        SubstituteMaxLineLength 10m
        Substitute "s/foo/bar/ni"
    </Location>

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_owner.html.ko.euc-kr0000644000000000000500000002614513412755316022126 0ustar rootsrc mod_authz_owner - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_authz_owner

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:ÆÄÀÏ ¼ÒÀ¯ÀÚ¸¦ ÀÌ¿ëÇÑ ±ÇÇѺο©
    »óÅÂ:Extension
    ¸ðµâ¸í:authz_owner_module
    ¼Ò½ºÆÄÀÏ:mod_authz_owner.c
    Áö¿ø:¾ÆÆÄÄ¡ 2.1 ÀÌÈĺÎÅÍ

    ¿ä¾à

    ÀÌ ¸ðµâÀº HTTP ÀÎÁõ¿¡ »ç¿ëÇÑ »ç¿ëÀÚ ¾ÆÀ̵ð(À¥ »ç¿ëÀÚ ¾ÆÀ̵ð)¸¦ ¿äûÇÑ ÆÄÀÏÀÇ ÆÄÀϽýºÅÛ ¼ÒÀ¯ÀÚ/±×·ì°ú ºñ±³ÇÏ¿© ÆÄÀÏÀÇ Á¢±Ù±ÇÇÑÀ» ºÎ¿©ÇÑ´Ù. ¿©±â¼­ »ç¿ëÀÚ¸í°ú ¾ÏÈ£´Â ÀÌ¹Ì mod_auth_basicÀ̳ª mod_auth_digest °°Àº ÀÎÁõ¸ðµâÀÇ È®ÀÎÀ» °ÅÃÆ´Ù. mod_authz_owner´Â Require Áö½Ã¾îÀÇ ´ÙÀ½ µÎ ¾Æ±Ô¸ÕÆ®, file-owner¿Í file-groupÀ» ó¸®ÇÑ´Ù:

    file-owner
    À¥ »ç¿ëÀÚ¸íÀÌ ¿äûÇÑ ÆÄÀÏ ¼ÒÀ¯ÀÚÀÇ ½Ã½ºÅÛ À̸§°ú °°¾Æ¾ß ÇÑ´Ù. Áï, ¿î¿µÃ¼Á¦°¡ ¿äûÇÑ ÆÄÀÏÀÇ ¼ÒÀ¯ÀÚ°¡ jones¶ó¸é, À¥À» ÅëÇØ ÆÄÀÏ¿¡ Á¢±ÙÇÏ´Â »ç¿ëÀÚµµ ¸¶Âù°¡Áö·Î jonesÀ̾î¾ß ÇÑ´Ù.
    file-group
    ÆÄÀÏÀ» ¼ÒÀ¯ÇÑ ½Ã½ºÅÛ ±×·ì¸íÀÌ mod_authz_groupfileÀ̳ª mod_authz_dbm°ú °°Àº ±×·ì µ¥ÀÌÅͺ£À̽º¿¡ ÀÖ°í, À¥ »ç¿ëÀÚ¸íÀÌ ÇØ´ç ±×·ì¿¡ ¼ÓÇØ¾ß ÇÑ´Ù. ¿¹¸¦ µé¾î, ¿î¿µÃ¼Á¦°¡ ¿äûÇÑ ÆÄÀÏÀ» accounts (½Ã½ºÅÛ) ±×·ìÀÌ ¼ÒÀ¯Çϰí ÀÖ´Ù¸é, ±×·ì µ¥ÀÌÅͺ£À̽º¿¡ accounts¶ó´Â ±×·ìÀÌ ÀÖ°í ¿äû¿¡ »ç¿ëÇÑ À¥ »ç¿ëÀÚ¸íÀÌ ±× ±×·ì¿¡ ¼ÓÇØ¾ß ÇÑ´Ù.

    ÁÖÀÇ

    mod_authz_owner°¡ ½ÇÁ¦·Î ÆÄÀϽýºÅÛ¿¡ ÀÖÁö ¾Ê´Â ÀÚ¿øÀ» (Áï, °¡»ó ÀÚ¿ø) ±ÇÇѺο©ÇÑ´Ù¸é, Á¢±ÙÀ» °ÅºÎÇÑ´Ù.

    ƯÈ÷ ³»¿ëÇù»óÇÑ "MultiViews" ÀÚ¿øÀ» ±ÇÇѺο©ÇÏÁö ¾Ê´Â´Ù.

    Support Apache!

    ÁÖÁ¦

    Áö½Ã¾îµé

    ÀÌ ¸ðµâ¿¡´Â Áö½Ã¾î°¡ ¾ø½À´Ï´Ù.

    Bugfix checklist

    Âü°í

    top

    ¼³Á¤ ¿¹Á¦

    Require file-owner

    ¾ÆÆÄÄ¡ À¥¼­¹ö¸¦ ¿î¿µÇÏ´Â ´ÙÁß»ç¿ëÀÚ ½Ã½ºÅÛ¿¡¼­ °¢ »ç¿ëÀÚ°¡ ~/public_html/private¿¡ ÀÚ½ÅÀÇ ÆÄÀÏÀ» ÀúÀåÇÑ´Ù°í °¡Á¤ÇÏÀÚ. ¸ðµç À¥ »ç¿ëÀÚ¸íÀ» ÀúÀåÇÏ´Â AuthDBMUserFile µ¥ÀÌÅͺ£À̽º°¡ ÀÖ°í, ¿©±â¿¡ ÀúÀåµÈ »ç¿ëÀÚ¸íÀº ¼­¹ö¿¡¼­ ½ÇÁ¦ ÆÄÀÏÀ» ¼ÒÀ¯ÇÏ´Â ½Ã½ºÅÛ »ç¿ëÀÚ¸í°ú µ¿ÀÏÇÏ´Ù. ÀÌ °æ¿ì ¾Æ·¡ ¼³Á¤Àº ÆÄÀÏ ¼ÒÀ¯ÀÚ¿¡°Ô¸¸ Á¢±ÙÀ» Çã¿ëÇÑ´Ù. »ç¿ëÀÚ jones´Â ÆÄÀÏÀ» jones°¡ ¾Æ´Ñ smith°¡ ¼ÒÀ¯Çϰí ÀÖ´Â ÇÑ /home/smith/public_html/private¿¡ ÀÖ´Â ÆÄÀÏ¿¡ Á¢±ÙÇÒ ¼ö ¾ø´Ù.

    <Directory /home/*/public_html/private>
    AuthType Basic
    AuthName MyPrivateFiles
    AuthBasicProvider dbm
    AuthDBMUserFile /usr/local/apache2/etc/.htdbm-all
    Satisfy All
    Require file-owner
    </Directory>

    Require file-group

    À§¿Í »óȲÀÌ ºñ½ÁÇÏÁö¸¸ ¿©·¯¸íÀÌ ~/public_html/project-foo¿¡ ÇÁ·ÎÁ§Æ® ÆÄÀÏÀ» °øÀ¯ÇÑ´Ù°í °¡Á¤ÇÏÀÚ. ÆÄÀϵéÀº ½Ã½ºÅÛ ±×·ì foo°¡ ¼ÒÀ¯Çϸç, ¸ðµç À¥ »ç¿ëÀÚ¸í°ú »ç¿ëÀÚ ±×·ìÀ» ±â·ÏÇÏ´Â AuthDBMGroupFile µ¥ÀÌÅͺ£À̽º°¡ ÀÖ´Ù. Áï, ÃÖ¼ÒÇÑ foo¶ó´Â ±×·ì¿¡ ±¸¼º¿øÀÌ ÀÖ´Ù. jones¿Í smith°¡ ¸ðµÎ ±×·ì fooÀÇ ±¸¼º¿øÀ̶ó¸é, µÑ ¸ðµÎ project-foo µð·ºÅ丮¿¡ Á¢±ÙÇÒ ¼ö ÀÖ´Ù.

    <Directory /home/*/public_html/project-foo>
    AuthType Basic
    AuthName "Project Foo Files"
    AuthBasicProvider dbm

    # combined user/group database
    AuthDBMUserFile /usr/local/apache2/etc/.htdbm-all
    AuthDBMGroupFile /usr/local/apache2/etc/.htdbm-all

    Satisfy All
    Require file-group
    </Directory>

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_cache.html.fr.utf80000644000000000000500000022421713416404674020324 0ustar rootsrc mod_cache - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_cache

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    Description:Filtre de mise en cache HTTP conforme à la RFC 2616
    Statut:Extension
    Identificateur de Module:cache_module
    Fichier Source:mod_cache.c

    Sommaire

    Ce module doit être utilisé avec précautions car lorsque la directive CacheQuickHandler est définie à sa valeur par défaut on, les directives Allow and Deny sont court-circuitées. Vous ne devez donc pas activer la gestion rapide de la mise en cache pour un contenu auquel vous souhaitez limiter l'accès en fonction du nom d'hôte du client, de l'adresse IP ou d'une variable d'environnement.

    mod_cache implémente un filtre de mise en cache de contenu HTTP conforme à la RFC 2616, avec support de la mise en cache des réponses dont le contenu a été négocié et comportant l'en-tête Vary.

    La mise en cache conforme à la RFC 2616 fournit un mécanisme permettant de vérifier si un contenu expiré ou dépassé est encore à jour, et peut apporter un gain de performances significatif si le serveur original supporte les requêtes conditionnelles en prenant en compte l'en-tête de requête HTTP If-None-Match. Le contenu n'est ainsi régénéré que lorsqu'il a été modifié, et non lorsqu'il a expiré.

    En tant que filtre, mod_cache peut être placé en face d'un contenu issu de tout gestionnaire, y compris des fichiers à accès séquentiel (servis depuis un disque lent mis en cache sur un gros disque), la sortie d'un script CGI ou d'un générateur de contenu dynamique, ou du contenu mandaté depuis un autre serveur.

    Dans la configuration par défaut, mod_cache place le filtre de mise en cache aussi loin que possible dans la pile de filtres, utilisant le gestionnaire rapide pour court-circuiter tout traitement par requête lors de l'envoi du contenu au client. Dans ce mode opératoire, mod_cache peut être considéré comme un serveur mandataire avec cache fixé en tête du serveur web, alors qu'il s'exécute dans ce même serveur web.

    Lorsque le gestionnaire rapide est désactivé via la directive CacheQuickHandler, il devient possible d'insérer le filtre CACHE à un point de la pile de filtres choisi par l'administrateur. Ceci permet de mettre en cache un contenu avant que celui-ci ne soit personnalisé par le filtre mod_include, ou éventuellement compressé par le filtre mod_deflate.

    Dans le mode de fonctionnement normal, mod_cache peut être contrôlé par les en-têtes Cache-Control et Pragma envoyés par un client dans une requête, ou par un serveur dans une réponse. Dans des circonstances exceptionnelles, mod_cache peut cependant être configuré pour outrepasser ces en-têtes et forcer un comportement spécifique au site, bien qu'un tel comportement sera limité à ce cache seulement, et n'affectera pas les opérations des autres caches qui peuvent s'insérer entre le client et le serveur, et ce type de configuration ne doit donc être utiliser qu'en cas de nécessité absolue.

    La RFC 2616 permet au cache de renvoyer des données périmées pendant que l'entrée périmée correspondante est mise à jour depuis le serveur original, et mod_cache supporte cette fonctionnalité lorsque la directive CacheLock est configurée en conséquence. De telles réponses comportent un en-tête HTTP Warning contenant un code de réponse 110. La RFC 2616 permet aussi au cache de renvoyer des données périmées lorsque la tentative de mise à jour des données périmées renvoie une erreur 500 ou supérieure, et cette fonctionnalité est supportée par défaut par mod_cache. De telles réponses comportent un en-tête HTTP Warning contenant un code de réponse 111.

    mod_cache requiert les services d'un ou plusieurs modules de gestion de stockage. La distribution Apache de base inclut les modules de gestion de stockage suivants :

    mod_cache_disk
    implémente un gestionnaire de stockage sur disque. Les en-têtes et corps sont stockés séparément sur le disque dans une structure de répertoires basée sur le condensé md5 de l'URL mise en cache. Plusieurs réponses à contenu négocié peuvent être stockées en même temps, mais la mise en cache de contenus partiels n'est pas supportée par ce module. L'utilitaire htcacheclean permet de lister et de supprimer les URLs mises en cache, et de maintenir le cache en deçà de certaines limites de taille et de nombre d'inodes.
    mod_cache_socache
    Implémente un gestionnaire de stockage basé sur un cache d'objets partagés. Les en-têtes et corps sont stockés ensemble sous une seule clé basée sur l'URL de la réponse mise en cache. Des réponses à contenus multiples négociés peuvent être stockées simultanément, mais ce module ne supporte pas la mise en cache de contenus partiels.

    Pour de plus amples détails, une description, et des exemples, reportez-vous au Guide de la mise en cache.

    top
    top

    Exemple de configuration

    Extrait de httpd.conf

    #
    # Exemple de configuration du cache
    #
    LoadModule cache_module modules/mod_cache.so
    <IfModule mod_cache.c>
        LoadModule cache_disk_module modules/mod_cache_disk.so
        <IfModule mod_cache_disk.c>
            CacheRoot "c:/cacheroot"
            CacheEnable disk  "/"
            CacheDirLevels 5
            CacheDirLength 3
        </IfModule>
        
        # Lorsqu'on sert de mandataire, on ne met pas en cache la liste
    # des mises à jour de sécurité
        CacheDisable "http://security.update.server/update-list/"
    </IfModule>
    top

    Eviter une tempête de requête

    Lorsqu'une entrée du cache est périmée, mod_cache soumet une requête conditionnelle au processus d'arrière-plan, qui est censé confirmer la validité de l'entrée du cache, ou dans la négative envoyer une entrée mise à jour.

    Un court mais non négligeable laps de temps existe entre le moment où l'entrée du cache est périmée, et le moment où elle est mise à jour. Sur un serveur fortement chargé, un certain nombre de requêtes peut arriver pendant ce laps de temps, et provoquer une tempête de requêtes susceptibles de saturer le processus d'arrière-plan de manière soudaine et imprédictible.

    Pour contenir cette tempête, on peut utiliser la directive CacheLock afin de définir un répertoire où seront créés à la volée des verrous pour les URLs. Ces verrous sont utilisés comme autant d'indications par les autres requêtes, soit pour empêcher une tentative de mise en cache (un autre processus est en train de récupérer l'entité), soit pour indiquer qu'une entrée périmée est en cours de mise à jour (pendant ce temps, c'est le contenu périmé qui sera renvoyé).

    Mise en cache initiale d'une entrée

    Lorsqu'une entité est mise en cache pour la première fois, un verrou est créé pour cette entité jusqu'à ce que la réponse ait été entièrement mise en cache. Pendant la durée de vie du verrou, le cache va empêcher une seconde tentative de mise en cache de la même entité. Bien que cela ne suffise pas à contenir la tempête de requêtes, toute tentative de mettre en cache la même entité plusieurs fois simultanément est stoppée.

    Mise à jour d'une entrée périmée

    Lorsqu'une entrée atteint la limite de sa durée de vie, et devient par conséquent périmée, un verrou est créé pour cette entité jusqu'à ce que la réponse ait été soit confirmée comme encore valide, soit remplacée par le processus d'arrière-plan. Pendant la durée de vie du verrou, une seconde requête entrante va provoquer le renvoi de la donnée périmée, et la tempête de requêtes sera contenue.

    Verrous et en-tête Cache-Control: no-cache

    Les verrous ne sont utilisés qu'à titre indicatif pour enjoindre le cache à être plus coopératif avec les serveurs d'arrière-plan, et il est possible de passer outre si nécessaire. Si le client envoie une requête contenant un en-tête Cache-Control imposant un nouveau téléchargement de l'entité, tout verrou éventuel sera ignoré, la requête du client sera honorée immédiatement, et l'entrée du cache mise à jour.

    Comme mécanisme de sécurité supplémentaire, la durée de vie maximale des verrous est configurable. Lorsque cette limite est atteinte, le verrou est supprimé et une autre requête peut alors en créer un nouveau. Cette durée de vie peut être définie via la directive CacheMaxExpire, et sa valeur par défaut est de 5 secondes.

    Exemple de configuration

    Activation du verrouillage du cache

    #
    # Active le verrouillage du cache
    #
    <IfModule mod_cache.c>
        CacheLock on
        CacheLockPath "/tmp/mod_cache-lock"
        CacheLockMaxAge 5
    </IfModule>
    top

    Contrôle fin via le filtre CACHE

    Dans son mode de fonctionnement par défaut, le cache s'exécute sous la forme d'un gestionnaire rapide, court-circuitant la majorité des traitements du serveur et fournissant ainsi une mise en cache possédant les plus hautes performances disponibles.

    Dans ce mode, le cache s'incruste devant le serveur, comme si un mandataire de mise en cache indépendant RFC 2616 était placé devant ce dernier.

    Bien que que ce mode offre les meilleures performances, les administrateurs peuvent souhaiter, dans certaines circonstances, effectuer des traitements sur la requête après que cette dernière ait été mise en cache, comme ajouter du contenu personnalisé à la page mise en cache, ou appliquer des restrictions d'autorisations au contenu. Pour y parvenir, l'administrateur sera alors souvent forcé de placer des serveurs mandataires inverses indépendants soit derrière, soit devant le serveur de mise en cache.

    Pour résoudre ce problème, la directive CacheQuickHandler peut être définie à off, afin que le serveur traite toutes les phases normalement exécutées par une requête non mise en cache, y compris les phases d'authentification et d'autorisation.

    En outre, l'administrateur peut éventuellement spécifier le point précis dans la chaîne de filtrage où devra intervenir la mise en cache en ajoutant le filtre CACHE à la chaîne de filtrage en sortie.

    Par exemple, pour mettre en cache le contenu avant d'appliquer une compression à la réponse, placez le filtre CACHE avant le filtre DEFLATE comme dans l'exemple suivant :

    # Mise en cache du contenu avant la compression optionnelle
    CacheQuickHandler off
    AddOutputFilterByType CACHE;DEFLATE text/plain

    Une autre possibilité consiste à mettre en cache le contenu avant l'ajout de contenu personnalisé via mod_include (ou tout autre filtre de traitement de contenu). Dans l'exemple suivant, les modèles contenant des balises comprises par mod_include sont mis en cache avant d'être interprétés :

    # Mise en cache du contenu avant l'intervention de mod_include et
       # mod_deflate
    CacheQuickHandler off
    AddOutputFilterByType CACHE;INCLUDES;DEFLATE text/html

    Vous pouvez insérer le filtre CACHE en tout point de la chaîne de filtrage. Dans l'exemple suivant, le contenu est mis en cache après avoir été interprété par mod_include, mais avant d'être traité par mod_deflate :

    # Mise en cache du contenu entre les interventions de mod_include et
       # mod_deflate
    CacheQuickHandler off
    AddOutputFilterByType INCLUDES;CACHE;DEFLATE text/html

    Avertissement :

    Si pour une raison ou pour une autre, le point d'insertion du filtre CACHE dans la chaîne de filtrage est modifié, vous devez vider votre cache pour être sûr que les données servies soient à jour. En effet, mod_cache n'est pas en mesure d'effectuer cette opération à votre place.
    top

    Etat du cache et journalisation

    Lorsque mod_cache a décidé s'il devait ou non servir une entité depuis le cache, les raisons précises de cette décision sont enregistrées dans l'environnement du sous-processus interne à la requête sous la clé cache-status. Cette information peut être journalisée via la directive LogFormat comme suit :

    LogFormat "%{cache-status}e ..."

    En fonction de la décision prise, l'information est aussi écrite dans l'environnement du sous-processus sous une des quatre clés suivantes :

    cache-hit
    Le contenu a été servi depuis le cache.
    cache-revalidate
    Le contenu du cache était périmé, a été mis à jour avec succès, puis servi depuis le cache.
    cache-miss
    Le contenu n'était pas dans le cache et a été servi directement depuis le serveur demandé.
    cache-invalidate
    L'entité du cache est devenue invalide suite à une requête d'un type autre que GET ou HEAD.

    Il est alors possible d'envisager une journalisation conditionnelle du traitement des requêtes par rapport au cache comme dans l'exemple suivant :

    CustomLog "cached-requests.log" common env=cache-hit
    CustomLog "uncached-requests.log" common env=cache-miss
    CustomLog "revalidated-requests.log" common env=cache-revalidate
    CustomLog "invalidated-requests.log" common env=cache-invalidate

    Pour les concepteurs de modules, une accroche (hook) nommée cache_status est disponible et permet aux modules de répondre aux résultats de la vérification du cache ci-dessus de manière personnalisée.

    top

    Directive CacheDefaultExpire

    Description:La durée par défaut de mise en cache d'un document lorsqu'aucune date d'expiration n'a été spécifiée.
    Syntaxe:CacheDefaultExpire secondes
    Défaut:CacheDefaultExpire 3600 (une heure)
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache

    La directive CacheDefaultExpire permet de spécifier un temps par défaut, en secondes, pendant lequel sera conservé dans le cache un document qui ne possède ni date d'expiration, ni date de dernière modification. La valeur de cette directive n'est pas écrasée par la valeur de la directive CacheMaxExpire, même si cette dernière est utilisée.

    CacheDefaultExpire 86400
    top

    Directive CacheDetailHeader

    Description:Ajoute un en-tête X-Cache-Detail à la réponse.
    Syntaxe:CacheDetailHeader on|off
    Défaut:CacheDetailHeader off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache
    Compatibilité:Disponible depuis la version 2.3.9 d'Apache

    Lorsque la directive CacheDetailHeader est définie à on, un en-tête X-Cache-Detail est ajouté à la réponse et contient les raisons précises d'une décision d'utilisation du cache vis à vis de cette dernière.

    Ceci peut s'avérer utile au cours du développement de services RESTful mis en cache pour obtenir des informations supplémentaires à propos des décisions vis à vis du cache écrites dans les en-têtes de la réponse. Il est ainsi possible de vérifier si Cache-Control et d'autres en-têtes ont été correctement utilisés par le service et le client.

    Si le gestionnaire normal est utilisé, cette directive peut se situer dans une section <Directory> ou <Location>. Si c'est le gestionnaire rapide qui est utilisé, elle doit se situer dans un contexte de serveur principal ou de serveur virtuel, sinon elle sera ignorée.

    # Active l'en-tête X-Cache-Detail
    CacheDetailHeader on

    X-Cache-Detail: "conditional cache hit: entity refreshed" from localhost

    top

    Directive CacheDisable

    Description:Désactive la mise en cache des URLs spécifiées
    Syntaxe:CacheDisable chaîne-url | on
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache

    La directive CacheDisable enjoint mod_cache de ne pas mettre en cache l'URL spécifiée par chaîne URL, ainsi que les URLs de niveaux inférieurs.

    Exemple

    CacheDisable "/fichiers_locaux"

    Si la directive se trouve à l'intérieur d'une section <Location>, le chemin doit être spécifié en dessous de la Location, et si le mot "on" est utilisé, la mise en cache sera désactivée pour l'ensemble de l'arborescence concernée par la section Location.

    Exemple

    <Location "/foo">
        CacheDisable on
    </Location>

    Avec les versions 2.2.12 et ultérieures, on peut définir la variable d'environnement no-cache pour une définition plus fine des ressources à mettre en cache.

    Voir aussi

    top

    Directive CacheEnable

    Description:Active la mise en cache des URLs spécifiées en utilisant le gestionnaire de stockage précisé
    Syntaxe:CacheEnable type de cache [chaîne URL]
    Contexte:configuration globale, serveur virtuel, répertoire
    Statut:Extension
    Module:mod_cache
    Compatibilité:Une chaîne URL telle que '/' s'appliquait à tout contenu en mandat direct dans les versions 2.2 et antérieures.

    La directive CacheEnable enjoint mod_cache de mettre en cache l'URL précisée par chaîne URL, ainsi que les URLs de niveaux inférieurs. Le gestionnaire de stockage du cache est spécifié à l'aide de l'argument type de cache. La directive CacheEnable peut être placée à l'intérieur d'une section <Location> ou <LocationMatch> pour indiquer que le contenu considéré peut être mis en cache. Si type de cache a pour valeur disk, mod_cache utilisera le gestionnaire de stockage sur disque implémenté par mod_cache_disk. Pour que mod_cache utilise le gestionnaire de stockage basé sur le cache d'objets partagés implémenté par mod_cache_socache, spécifiez socache comme valeur du paramètre type de cache.

    Si les différentes directives CacheEnable spécifient des URLs qui se recoupent (comme dans l'exemple ci-dessous), tous les gestionnaires de stockage possibles seront lancés, jusqu'au premier d'entre eux qui traitera effectivement la requête. L'ordre dans lequel les gestionnaires de stockage sont lancés est déterminé par l'ordre dans lequel apparaissent les directives CacheEnable dans le fichier de configuration. Les directives CacheEnable situées à l'intérieur de sections <Location> ou <LocationMatch> sont traitées avant les directives CacheEnable définies au niveau global.

    En fonctionnement du type serveur mandataire direct, chaîne URL doit au moins débuter par un protocole pour lequel la mise en cache doit être activée.

    # Mise en cache de contenu (gestionnaire normal seulement)
    CacheQuickHandler off
    <Location "/foo">
        CacheEnable disk
    </Location>
    
    # Mise en cache via une expression rationnelle (gestionnaire normal seulement)
    CacheQuickHandler off
    <LocationMatch "foo$">
        CacheEnable disk
    </LocationMatch>
    
    # Mise en cache de tous les contenus, à l'exception des URLs
    # mandatées en direct (gestionnaire normal ou rapide)
    CacheEnable  disk  /
    
    # Mise en cache des URLs FTP mandatées (gestionnaire normal ou rapide)
    CacheEnable  disk  ftp://
    
    # Mise en cache des contenus mandatés en direct depuis www.example.org (gestionnaire normal ou rapide)
    CacheEnable  disk  http://www.example.org/

    Un nom d'hôte commençant par un caractère "*" correspondra à tout nom d'hôte se terminant par le suffixe considéré. Un nom d'hôte commençant par un caractère "." correspondra à tout nom d'hôte contenant le composant de nom de domaine qui suit ce caractère.

    # Correspond à www.example.org et fooexample.org
    CacheEnable  disk  "http://*example.org/"
    # Correspond à www.example.org, mais pas à fooexample.org
    CacheEnable  disk  "http://.example.org/"

    Depuis la version 2.2.12, on peut définir la variable d'environnement no-cache pour une définition plus fine des ressources à mettre en cache.

    Voir aussi

    top

    Directive CacheHeader

    Description:Ajoute un en-tête X-Cache à la réponse.
    Syntaxe:CacheHeader on|off
    Défaut:CacheHeader off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache
    Compatibilité:Disponible depuis la version 2.3.9 d'Apache

    Lorsque la directive CacheHeader est définie à on, un en-tête X-Cache est ajouté à la réponse et contient l'état du cache pour cette dernière. Si le gestionnaire normal est utilisé, cette directive peut se situer dans une section <Directory> ou <Location>. Si c'est le gestionnaire rapide qui est utilisé, elle doit se situer dans un contexte de serveur principal ou de serveur virtuel, sinon elle sera ignorée.

    HIT
    Le contenu était à jour et a été servi depuis le cache.
    REVALIDATE
    Le contenu était périmé, a été mis à jour, puis a été servi depuis le cache.
    MISS
    Le contenu n'a pas été servi depuis le cache, mais directement depuis le serveur demandé.
    # Active l'en-tête X-Cache
    CacheHeader on
    X-Cache: HIT from localhost
    top

    Directive CacheIgnoreCacheControl

    Description:Ignore les en-têtes de requête enjoignant de ne pas servir le contenu au client depuis le cache
    Syntaxe:CacheIgnoreCacheControl On|Off
    Défaut:CacheIgnoreCacheControl Off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_cache

    Normalement, les requêtes contenant des en-têtes tels que Cache-Control: no-cache ou Pragma: no-cache ne sont pas servies depuis le cache. La directive CacheIgnoreCacheControl permet de modifier ce comportement. Avec CacheIgnoreCacheControl On, le serveur tentera de servir la ressource depuis le cache, même si la requête contient un des en-têtes cités plus haut. Les ressources qui requièrent une autorisation ne seront jamais mises en cache.

    CacheIgnoreCacheControl On

    Avertissement :

    Cette directive permet de servir des ressources depuis le cache, même si le client a demandé à ce qu'il n'en soit pas ainsi. Le contenu servi est ainsi susceptible d'être périmé.

    Voir aussi

    top

    Directive CacheIgnoreHeaders

    Description:Ne pas stocker le(s) en-tête(s) spécifié(s) dans le cache.
    Syntaxe:CacheIgnoreHeaders en-tête [en-tête] ...
    Défaut:CacheIgnoreHeaders None
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_cache

    En accord avec la RFC 2616, les en-têtes HTTP hop-by-hop ne sont pas stockés dans le cache. Les en-têtes HTTP suivant sont des en-têtes hop-by-hop, et en tant que tels, ne sont en aucun cas stockés dans le cache, quelle que soit la définition de la directive CacheIgnoreHeaders :

    • Connection
    • Keep-Alive
    • Proxy-Authenticate
    • Proxy-Authorization
    • TE
    • Trailers
    • Transfer-Encoding
    • Upgrade

    La directive CacheIgnoreHeaders permet de spécifier quels en-têtes HTTP ne doivent pas être stockés dans le cache. Par exemple, il peut s'avérer pertinent dans certains cas de ne pas stocker les cookies dans le cache.

    La directive CacheIgnoreHeaders accepte une liste d'en-têtes HTTP séparés par des espaces, qui ne doivent pas être stockés dans le cache. Si les en-têtes hop-by-hop sont les seuls à ne pas devoir être stockés dans le cache (le comportement compatible RFC 2616), la directive CacheIgnoreHeaders peut être définie à None.

    Exemple 1

    CacheIgnoreHeaders Set-Cookie

    Exemple 2

    CacheIgnoreHeaders None

    Avertissement :

    Si des en-têtes nécessaires à la bonne gestion du cache, comme Expires, ne sont pas stockés suite à la définition d'une directive CacheIgnoreHeaders, le comportement de mod_cache sera imprévisible.
    top

    Directive CacheIgnoreNoLastMod

    Description:Ignore le fait qu'une réponse ne possède pas d'en-tête Last Modified.
    Syntaxe:CacheIgnoreNoLastMod On|Off
    Défaut:CacheIgnoreNoLastMod Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache

    Normalement, les documents qui ne possèdent pas de date de dernière modification ne sont pas mis en cache. Dans certaines circonstances, la date de dernière modification est supprimée (au cours des traitements liés à mod_include par exemple), ou n'existe tout simplement pas. La directive CacheIgnoreNoLastMod permet de spécifier si les documents ne possèdant pas de date de dernière modification doivent être mis en cache, même sans date de dernière modification. Si le document ne possède ni date d'expiration, ni date de dernière modification, la valeur spécifiée par la directive CacheDefaultExpire servira à générer une date d'expiration.

    CacheIgnoreNoLastMod On
    top

    Directive CacheIgnoreQueryString

    Description:Ignore la chaîne de paramètres lors de la mise en cache
    Syntaxe:CacheIgnoreQueryString On|Off
    Défaut:CacheIgnoreQueryString Off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_cache

    Normalement, les requêtes comportant une chaîne de paramètres sont mises en cache séparément si leurs chaînes de paramètres diffèrent. En accord avec la RFC 2616/13.9, cette mise en cache n'est effectuée séparément que si une date d'expiration est spécifiée. La directive CacheIgnoreQueryString permet la mise en cache de requêtes même si aucune date d'expiration est spécifiée, et de renvoyer une réponse depuis la cache même si les chaînes de paramètres diffèrent. Du point de vue du cache, la requête est traitée comme si elle ne possèdait pas de chaîne de paramètres lorsque cette directive est activée.

    CacheIgnoreQueryString On
    top

    Directive CacheIgnoreURLSessionIdentifiers

    Description:Ignore les identifiants de session définis encodés dans l'URL lors de la mise en cache
    Syntaxe:CacheIgnoreURLSessionIdentifiers identifiant [identifiant] ...
    Défaut:CacheIgnoreURLSessionIdentifiers None
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_cache

    Certaines applications encodent l'identifiant de session dans l'URL comme dans l'exemple suivant :

    • /une-application/image.gif;jsessionid=123456789
    • /une-application/image.gif?PHPSESSIONID=12345678

    Ceci implique la mise en cache des ressources séparément pour chaque session, ce qui n'est en général pas souhaité. La directive CacheIgnoreURLSessionIdentifiers permet de définir une liste d'identifiants qui seront supprimés de la clé utilisée pour identifier une entité dans le cache, de façon à ce que les ressources ne soient pas stockées séparément pour chaque session.

    CacheIgnoreURLSessionIdentifiers None vide la liste des identifiants ignorés. Autrement, chaque identifiant spécifié est ajouté à la liste.

    Exemple 1

    CacheIgnoreURLSessionIdentifiers jsessionid

    Exemple 2

    CacheIgnoreURLSessionIdentifiers None
    top

    Directive CacheKeyBaseURL

    Description:Remplace l'URL de base des clés du cache mandatées en inverse
    Syntaxe:CacheKeyBaseURL URL
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_cache
    Compatibilité:Disponible depuis la version 2.3.9 d'Apache

    Lorsque la directive CacheKeyBaseURL est utilisée, l'URL spécifiée sera utilisée comme URL de base pour calculer l'URL des clés du cache dans la configuration du mandataire inverse. Par défaut, c'est le protocole/nom d'hôte/port du serveur virtuel courant qui sera utilisé pour construire la clé de cache. Dans le cas d'un cluster de machines, si toutes les entrées du cache doivent posséder la même clé, cette directive permet de spécifier une nouvelle URL de base.

    # Remplace l'URL de base de la clé de cache.
    CacheKeyBaseURL "http://www.example.com/"
    Prenez garde en définissant cette directive. Si deux serveurs virtuels distincts possèdent accidentellement la même URL de base, les entrées en provenance d'un serveur virtuel seront servies par l'autre.
    top

    Directive CacheLastModifiedFactor

    Description:Le facteur utilisé pour générer une date d'expiration en fonction de la date de dernière modification.
    Syntaxe:CacheLastModifiedFactor flottant
    Défaut:CacheLastModifiedFactor 0.1
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache

    Si un document ne possède pas de date d'expiration, elle peut être calculée en fonction de la date de dernière modification, si elle existe. La directive CacheLastModifiedFactor permet de spécifier un facteur à utiliser pour la génération de cette date d'expiration au sein de la formule suivante : délai-expiration = durée-depuis-date-dernière-modification * facteur date-expiration = date-courante + délai-expiration Par exemple, si la dernière modification du document date de 10 heures, et si facteur a pour valeur 0.1, le délai d'expiration sera de 10*0.1 = 1 heure. Si l'heure courante est 3:00pm, la date d'expiration calculée sera 3:00pm + 1 heure = 4:00pm. Si le délai d'expiration est supérieur à celui spécifié par la directive CacheMaxExpire, c'est ce dernier qui l'emporte.

    CacheLastModifiedFactor 0.5
    top

    Directive CacheLock

    Description:Active la protection contre les tempêtes de requêtes.
    Syntaxe:CacheLock on|off
    Défaut:CacheLock off
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_cache
    Compatibilité:Disponible depuis la version 2.2.15 d'Apache

    La directive CacheLock active la protection contre les tempêtes de requêtes pour l'espace d'adressage donné.

    La configuration minimale pour activer le verrouillage contre les tempêtes de requêtes dans le répertoire temp par défaut du système est la suivante :

    # Active le verrouillage du cache
    CacheLock on
    top

    Directive CacheLockMaxAge

    Description:Définit la durée de vie maximale d'un verrou de cache.
    Syntaxe:CacheLockMaxAge entier
    Défaut:CacheLockMaxAge 5
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_cache

    La directive CacheLockMaxAge permet de spécifier la durée de vie maximale d'un verrou de cache.

    Un verrou plus ancien que cette valeur exprimée en secondes sera ignoré, et la prochaine requête entrante sera alors en mesure de recréer le verrou. Ce mécanisme permet d'éviter les mises à jour trop longues initiées par des clients lents.

    top

    Directive CacheLockPath

    Description:Définit le répertoire des verrous.
    Syntaxe:CacheLockPath répertoire
    Défaut:CacheLockPath /tmp/mod_cache-lock
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_cache

    La directive CacheLockPath permet de spécifier le répertoire dans lequel les verrous sont créés. Par défaut, c'est le répertoire temporaire du système qui est utilisé. Les verrous sont des fichiers vides qui n'existent que pour les URLs périmées en cours de mise à jour, et consomment donc bien moins de ressources que le traditionnel cache sur disque.

    top

    Directive CacheMaxExpire

    Description:La durée maximale en secondes de mise en cache d'un document
    Syntaxe:CacheMaxExpire secondes
    Défaut:CacheMaxExpire 86400 (une journée)
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache

    La directive CacheMaxExpire permet de spécifier le nombre maximum de secondes pendant lequel les documents HTTP suceptibles d'être mis en cache seront conservés sans vérifier leur contenu sur le serveur d'origine. Ce nombre de secondes correspond donc à la durée maximale pendant laquelle un document ne sera pas à jour. L'utilisation de cette valeur maximale est forcée, même si le document possède une date d'expiration.

    CacheMaxExpire 604800
    top

    Directive CacheMinExpire

    Description:La durée minimale en secondes de mise en cache d'un document
    Syntaxe:CacheMinExpire secondes
    Défaut:CacheMinExpire 0
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache

    La directive CacheMinExpire permet de spécifier le nombre minimum de secondes pendant lequel les documents HTTP susceptibles d'être mis en cache seront conservés sans vérifier leur contenu sur le serveur d'origine. Elle n'est prise en compte que dans le cas où le document ne possède aucune date d'expiration valide.

    CacheMinExpire 3600
    top

    Directive CacheQuickHandler

    Description:Exécute le cache à partir d'un gestionnaire rapide.
    Syntaxe:CacheQuickHandler on|off
    Défaut:CacheQuickHandler on
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_cache
    Compatibilité:Disponible à partir de la version 2.3.3 du serveur HTTP Apache

    La directive CacheQuickHandler permet de contrôler la phase au cours de laquelle la mise en cache est effectuée.

    Avec la configuration par défaut, le cache agit au cours de la phase du gestionnaire rapide. Cette phase court-circuite la majorité des traitements du serveur, et constitue le mode d'opération le plus performant pour un serveur typique. Le cache s'incruste devant le serveur, et la majorité des traitements du serveur est court-circuitée.

    Lorsque cette directive est définie à off, le cache agit comme un gestionnaire normal, et est concerné par toutes les phases de traitement d'une requête. Bien que ce mode soit moins performant que le mode par défaut, il permet d'utiliser le cache dans les cas où un traitement complet de la requête est nécessaire, comme par exemple lorsque le contenu est soumis à autorisation.

    # Exécute le cache comme un gestionnaire normal
    CacheQuickHandler off

    Lorsque le gestionnaire rapide est désactivé, l'administrateur a aussi la possibilité de choisir avec précision le point de la chaîne de filtrage où la mise en cache sera effectuée, en utilisant le filtre CACHE.

    # Mise en cache du contenu avant l'intervention de mod_include et
         # mod_deflate
    CacheQuickHandler off
    AddOutputFilterByType CACHE;INCLUDES;DEFLATE text/html

    Si le filtre CACHE est spécifié plusieurs fois, c'est la dernière instance qui sera prise en compte.

    top

    Directive CacheStaleOnError

    Description:Sert du contenu non à jour à la place de réponses 5xx.
    Syntaxe:CacheStaleOnError on|off
    Défaut:CacheStaleOnError on
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache
    Compatibilité:Disponible depuis la version 2.3.9 d'Apache

    Lorsque la directive CacheStaleOnError est définie à on, et si des données non mises à jour sont disponibles dans le cache, ce dernier renverra ces données, plutôt qu'une éventuelle réponse 5xx en provenance du serveur d'arrière-plan. Alors que l'en-tête Cache-Control envoyé par les clients sera respecté, et que les clients recevront donc dans ce cas la réponse 5xx brute à leur requête, cette réponse 5xx renvoyée au client n'invalidera pas le contenu dans le cache.

    # Sert des données non mises à jour en cas d'erreur.
    CacheStaleOnError on
    top

    Directive CacheStoreExpired

    Description:Tente de mettre en cache les réponses que le serveur considère comme arrivées à expiration
    Syntaxe:CacheStoreExpired On|Off
    Défaut:CacheStoreExpired Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache

    Depuis la version 2.2.4, les réponses qui sont arrivées à expiration ne sont pas stockées dans le cache. La directive CacheStoreExpired permet de modifier ce comportement. Avec CacheStoreExpired On, le serveur tente de mettre en cache la ressource si elle est périmée. Les requêtes suivantes vont déclencher une requête si-modifié-depuis de la part du serveur d'origine, et la réponse sera renvoyée à partir du cache si la ressource d'arrière-plan n'a pas été modifiée.

    CacheStoreExpired On
    top

    Directive CacheStoreNoStore

    Description:Tente de mettre en cache les requêtes ou réponses dont l'entête Cache-Control: a pour valeur no-store.
    Syntaxe:CacheStoreNoStore On|Off
    Défaut:CacheStoreNoStore Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache

    Normalement, les requêtes ou réponses dont l'en-tête Cache-Control: no-store ne sont pas stockées dans le cache. La directive CacheStoreNoStore permet de modifier ce comportement. Si CacheStoreNoStore est définie à On, le serveur tente de mettre la ressource en cache même si elle contient des en-têtes ayant pour valeur no-store. Les ressources nécessitant une autorisation ne sont jamais mises en cache.

    CacheStoreNoStore On

    Avertissement :

    Selon la RFC 2616, la valeur d'en-tête no-store est censée "prévenir la suppression ou la rétention par inadvertance d'informations sensibles (par exemple, sur des bandes de sauvegarde)". Autrement dit, l'activation de la directive CacheStoreNoCache pourrait provoquer le stockage d'informations sensibles dans le cache. Vous avez donc été prévenus.

    Voir aussi

    top

    Directive CacheStorePrivate

    Description:Tente de mettre en cache des réponses que le serveur a marquées comme privées
    Syntaxe:CacheStorePrivate On|Off
    Défaut:CacheStorePrivate Off
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Extension
    Module:mod_cache

    Normalement, les réponse comportant un en-tête Cache-Control: private ne seront pas stockées dans le cache. La directive CacheStorePrivate permet de modifier ce comportement. Si CacheStorePrivate est définie à On, le serveur tentera de mettre la ressource en cache, même si elle contient des en-têtes ayant pour valeur private. Les ressources nécessitant une autorisation ne sont jamais mises en cache.

    CacheStorePrivate On

    Avertissement :

    Cette directive autorise la mise en cache même si le serveur indique que la ressource ne doit pas être mise en cache. Elle n'est de ce fait appropriée que dans le cas d'un cache 'privé'.

    Voir aussi

    Langues Disponibles:  en  |  fr  |  ja  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_fdpass.html0000644000000000000500000000034413362070302020463 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_proxy_fdpass.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_proxy_fdpass.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mpm_common.html0000644000000000000500000000074613362070302017252 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mpm_common.html.de Content-Language: de Content-type: text/html; charset=ISO-8859-1 URI: mpm_common.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mpm_common.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mpm_common.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mpm_common.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_example_hooks.html.fr.utf80000644000000000000500000002762713412755316022123 0ustar rootsrc mod_example_hooks - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_example_hooks

    Langues Disponibles:  en  |  fr  |  ko 

    Description:Illustration de l'API des modules Apache
    Statut:Expérimental
    Identificateur de Module:example_hooks_module
    Fichier Source:mod_example_hooks.c

    Sommaire

    Certains fichiers situés dans le répertoire modules/examples de l'arborescence de la distribution d'Apache sont fournis à titre d'exemples pour ceux qui souhaitent écrire des modules qui utilisent l'API d'Apache.

    Le fichier principal est mod_example_hooks.c, qui constitue une illustration exhaustive des différents mécanismes et syntaxes d'appels. En aucun cas un module additionnel n'aura à inclure des routines pour tous les appels - il n'en nécessitera au contraire qu'un petit nombre !

    Le module example_hooks fonctionne réellement. Si vous le chargez dans votre serveur, activez le gestionnaire "example-hooks-handler" dans une section location, et essayez d'accéder à la zone du site web correspondante, vous verrez s'afficher certaines sorties que le module example_hooks produit au cours des différents appels.

    top

    Compilation du module example_hooks

    Pour inclure le module example_hooks dans votre serveur, effectuez les étapes suivantes :

    1. Exécutez configure avec l'option --enable-example-hooks.
    2. Compilez le serveur (exécutez la commande "make").

    Pour ajouter votre propre module :

    1. cp modules/examples/mod_example_hooks.c modules/nouveau_module/mod_monexemple.c
    2. Modifiez le fichier.
    3. Créez modules/nouveau_module/config.m4.
      1. Ajoutez APACHE_MODPATH_INIT(nouveau_module).
      2. Copiez la ligne APACHE_MODULE contenant "example_hooks" depuis modules/examples/config.m4.
      3. Remplacez le premier argument "example-hooks" par monexemple.
      4. Remplacez le second argument par une brève description de votre module. Cette description sera utilisée par la commande configure --help.
      5. Si la compilation de votre module nécessite des drapeaux de compilation C, des drapeaux d'édition de liens, ou de bibliothèques supplémentaires, ajoutez les respectivement à CFLAGS, LDFLAGS et LIBS. Reportez-vous aux fichiers config.m4 des répertoires des autres modules pour plus d'exemples.
      6. Ajoutez APACHE_MODPATH_FINISH.
    4. Créez le fichier module/nouveau_module/Makefile.in. Si la compilation de votre module ne nécessite pas d'instructions particulières, ce fichier ne doit contenir que la ligne include $(top_srcdir)/build/special.mk.
    5. Exécutez ./buildconf à la racine du répertoire.
    6. Compilez le serveur après avoir exécuté la commande configure avec l'option --enable-monexemple.
    top

    Utilisation du module mod_example_hooks

    Pour activer le module example_hooks, ajoutez à votre fichier httpd.conf un bloc du style :

    <Location "/example-hooks-info">
       SetHandler example-hooks-handler
    </Location>

    Vous pouvez aussi ajouter ce qui suit dans un fichier .htaccess, puis accéder au fichier "test.example" à partir du répertoire correspondant :

    AddHandler example-hooks-handler ".example"

    Après avoir rechargé la configuration ou redémarré votre serveur, vous devriez pouvoir accéder à ce fichier et voir s'afficher ce qui a été décrit plus haut.

    top

    Directive Example

    Description:Directive de démonstration pour illustrer l'API des modules Apache
    Syntaxe:Example
    Contexte:configuration globale, serveur virtuel, répertoire, .htaccess
    Statut:Expérimental
    Module:mod_example_hooks

    La directive Example n'a pour fonction que de définir un drapeau de démonstration que le gestionnaire de contenu du module example_hooks va afficher. Elle ne possède aucun argument. Si vous naviguez vers une URL à laquelle le gestionnaire de contenu example_hooks s'applique, vous verrez s'afficher les routines du module, ainsi que l'ordre dans lequel elles ont été appelées pour servir le document demandé. On peut observer l'effet de cette directive dans la phrase "Example directive declared here: YES/NO".

    Langues Disponibles:  en  |  fr  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_suexec.html.ko.euc-kr0000644000000000000500000002010713412755316021045 0ustar rootsrc mod_suexec - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_suexec

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:CGI ½ºÅ©¸³Æ®¸¦ ƯÁ¤ »ç¿ëÀÚ¿Í ±×·ì ±ÇÇÑÀ¸·Î ½ÇÇàÇÑ´Ù
    »óÅÂ:Extension
    ¸ðµâ¸í:suexec_module
    ¼Ò½ºÆÄÀÏ:mod_suexec.c
    Áö¿ø:¾ÆÆÄÄ¡ 2.0 ÀÌÈĺÎÅÍ

    ¿ä¾à

    ÀÌ ¸ðµâÀº suexec Áö¿ø ÇÁ·Î±×·¥À» »ç¿ëÇÏ¿© CGI ½ºÅ©¸³Æ®¸¦ ƯÁ¤ »ç¿ëÀÚ¿Í ±×·ì ±ÇÇÑÀ¸·Î ½ÇÇàÇÑ´Ù.

    top

    SuexecUserGroup Áö½Ã¾î

    ¼³¸í:CGI ÇÁ·Î±×·¥ÀÌ »ç¿ëÇÒ »ç¿ëÀÚ¿Í ±×·ì ±ÇÇÑ
    ¹®¹ý:SuexecUserGroup User Group
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Extension
    ¸ðµâ:mod_suexec
    Áö¿ø:SuexecUserGroupÀº 2.0 ÀÌÈÄ¿¡¸¸ ÀÖ´Ù.

    SuexecUserGroup Áö½Ã¾î´Â CGI ÇÁ·Î±×·¥ÀÌ »ç¿ëÇÒ »ç¿ëÀÚ¿Í ±×·ìÀ» ¼³Á¤ÇÑ´Ù. CGI°¡ ¾Æ´Ñ ¿äûÀº °è¼Ó User Áö½Ã¾î·Î ÁöÁ¤ÇÑ »ç¿ëÀÚ°¡ ó¸®ÇÑ´Ù. ÀÌ Áö½Ã¾î´Â ¾ÆÆÄÄ¡ 1.3¿¡¼­ VirtualHost ¾È¿¡ »ç¿ëÇÑ User¿Í Group Áö½Ã¾î¸¦ ´ëüÇÑ´Ù.

    ¿¹Á¦

    SuexecUserGroup nobody nogroup

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_unique_id.html.en0000644000000000000500000003623013412755316020343 0ustar rootsrc mod_unique_id - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_unique_id

    Available Languages:  en  |  fr  |  ja  |  ko 

    Description:Provides an environment variable with a unique identifier for each request
    Status:Extension
    Module Identifier:unique_id_module
    Source File:mod_unique_id.c

    Summary

    This module provides a magic token for each request which is guaranteed to be unique across "all" requests under very specific conditions. The unique identifier is even unique across multiple machines in a properly configured cluster of machines. The environment variable UNIQUE_ID is set to the identifier for each request. Unique identifiers are useful for various reasons which are beyond the scope of this document.

    Support Apache!

    Topics

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    top

    Theory

    First a brief recap of how the Apache server works on Unix machines. This feature currently isn't supported on Windows NT. On Unix machines, Apache creates several children, the children process requests one at a time. Each child can serve multiple requests in its lifetime. For the purpose of this discussion, the children don't share any data with each other. We'll refer to the children as httpd processes.

    Your website has one or more machines under your administrative control, together we'll call them a cluster of machines. Each machine can possibly run multiple instances of Apache. All of these collectively are considered "the universe", and with certain assumptions we'll show that in this universe we can generate unique identifiers for each request, without extensive communication between machines in the cluster.

    The machines in your cluster should satisfy these requirements. (Even if you have only one machine you should synchronize its clock with NTP.)

    • The machines' times are synchronized via NTP or other network time protocol.
    • The machines' hostnames all differ, such that the module can do a hostname lookup on the hostname and receive a different IP address for each machine in the cluster.

    As far as operating system assumptions go, we assume that pids (process ids) fit in 32-bits. If the operating system uses more than 32-bits for a pid, the fix is trivial but must be performed in the code.

    Given those assumptions, at a single point in time we can identify any httpd process on any machine in the cluster from all other httpd processes. The machine's IP address and the pid of the httpd process are sufficient to do this. A httpd process can handle multiple requests simultaneously if you use a multi-threaded MPM. In order to identify threads, we use a thread index Apache httpd uses internally. So in order to generate unique identifiers for requests we need only distinguish between different points in time.

    To distinguish time we will use a Unix timestamp (seconds since January 1, 1970 UTC), and a 16-bit counter. The timestamp has only one second granularity, so the counter is used to represent up to 65536 values during a single second. The quadruple ( ip_addr, pid, time_stamp, counter ) is sufficient to enumerate 65536 requests per second per httpd process. There are issues however with pid reuse over time, and the counter is used to alleviate this issue.

    When an httpd child is created, the counter is initialized with ( current microseconds divided by 10 ) modulo 65536 (this formula was chosen to eliminate some variance problems with the low order bits of the microsecond timers on some systems). When a unique identifier is generated, the time stamp used is the time the request arrived at the web server. The counter is incremented every time an identifier is generated (and allowed to roll over).

    The kernel generates a pid for each process as it forks the process, and pids are allowed to roll over (they're 16-bits on many Unixes, but newer systems have expanded to 32-bits). So over time the same pid will be reused. However unless it is reused within the same second, it does not destroy the uniqueness of our quadruple. That is, we assume the system does not spawn 65536 processes in a one second interval (it may even be 32768 processes on some Unixes, but even this isn't likely to happen).

    Suppose that time repeats itself for some reason. That is, suppose that the system's clock is screwed up and it revisits a past time (or it is too far forward, is reset correctly, and then revisits the future time). In this case we can easily show that we can get pid and time stamp reuse. The choice of initializer for the counter is intended to help defeat this. Note that we really want a random number to initialize the counter, but there aren't any readily available numbers on most systems (i.e., you can't use rand() because you need to seed the generator, and can't seed it with the time because time, at least at one second resolution, has repeated itself). This is not a perfect defense.

    How good a defense is it? Suppose that one of your machines serves at most 500 requests per second (which is a very reasonable upper bound at this writing, because systems generally do more than just shovel out static files). To do that it will require a number of children which depends on how many concurrent clients you have. But we'll be pessimistic and suppose that a single child is able to serve 500 requests per second. There are 1000 possible starting counter values such that two sequences of 500 requests overlap. So there is a 1.5% chance that if time (at one second resolution) repeats itself this child will repeat a counter value, and uniqueness will be broken. This was a very pessimistic example, and with real world values it's even less likely to occur. If your system is such that it's still likely to occur, then perhaps you should make the counter 32 bits (by editing the code).

    You may be concerned about the clock being "set back" during summer daylight savings. However this isn't an issue because the times used here are UTC, which "always" go forward. Note that x86 based Unixes may need proper configuration for this to be true -- they should be configured to assume that the motherboard clock is on UTC and compensate appropriately. But even still, if you're running NTP then your UTC time will be correct very shortly after reboot.

    The UNIQUE_ID environment variable is constructed by encoding the 144-bit (32-bit IP address, 32 bit pid, 32 bit time stamp, 16 bit counter, 32 bit thread index) quadruple using the alphabet [A-Za-z0-9@-] in a manner similar to MIME base64 encoding, producing 24 characters. The MIME base64 alphabet is actually [A-Za-z0-9+/] however + and / need to be specially encoded in URLs, which makes them less desirable. All values are encoded in network byte ordering so that the encoding is comparable across architectures of different byte ordering. The actual ordering of the encoding is: time stamp, IP address, pid, counter. This ordering has a purpose, but it should be emphasized that applications should not dissect the encoding. Applications should treat the entire encoded UNIQUE_ID as an opaque token, which can be compared against other UNIQUE_IDs for equality only.

    The ordering was chosen such that it's possible to change the encoding in the future without worrying about collision with an existing database of UNIQUE_IDs. The new encodings should also keep the time stamp as the first element, and can otherwise use the same alphabet and bit length. Since the time stamps are essentially an increasing sequence, it's sufficient to have a flag second in which all machines in the cluster stop serving any request, and stop using the old encoding format. Afterwards they can resume requests and begin issuing the new encodings.

    This we believe is a relatively portable solution to this problem. The identifiers generated have essentially an infinite life-time because future identifiers can be made longer as required. Essentially no communication is required between machines in the cluster (only NTP synchronization is required, which is low overhead), and no communication between httpd processes is required (the communication is implicit in the pid value assigned by the kernel). In very specific situations the identifier can be shortened, but more information needs to be assumed (for example the 32-bit IP address is overkill for any site, but there is no portable shorter replacement for it).

    Available Languages:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy_http2.html.en0000644000000000000500000002440413420146431020652 0ustar rootsrc mod_proxy_http2 - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy_http2

    Available Languages:  en  |  fr 

    Description:HTTP/2 support module for mod_proxy
    Status:Extension
    Module Identifier:proxy_http2_module
    Source File:mod_proxy_http2.c
    Compatibility:Available in httpd 2.4.19 and later

    Summary

    mod_proxy_http2 supports HTTP/2 only, it does not provide any downgrades to HTTP/1.1. This means that the backend needs to support HTTP/2 because HTTP/1.1 will not be used instead.

    This module requires the service of mod_proxy, so in order to get the ability of handling HTTP/2 proxy requests, mod_proxy and mod_proxy_http2 need to be both loaded by the server.

    mod_proxy_http2 works with incoming fronted requests using HTTP/1.1 or HTTP/2. In both cases, requests proxied to the same backend are sent over a single TCP connection whenever possible (namely when the connection can be re-used).

    Caveat: there will be no attempt to consolidate multiple HTTP/1.1 frontend requests (configured to be proxied to the same backend) into HTTP/2 streams belonging to the same HTTP/2 request. Each HTTP/1.1 frontend request will be proxied to the backend using a separate HTTP/2 request (trying to re-use the same TCP connection if possible).

    This module relies on libnghttp2 to provide the core http/2 engine.

    Warning

    This module is experimental. Its behaviors, directives, and defaults are subject to more change from release to release relative to other standard modules. Users are encouraged to consult the "CHANGES" file for potential updates.

    Warning

    Do not enable proxying until you have secured your server. Open proxy servers are dangerous both to your network and to the Internet at large.

    Support Apache!

    Topics

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    top

    Basic Examples

    The examples below demonstrate how to configure HTTP/2 for backend connections for a reverse proxy.

    HTTP/2 (TLS)

    ProxyPass "/app" "h2://app.example.com"
    ProxyPassReverse "/app" "https://app.example.com"

    HTTP/2 (cleartext)

    ProxyPass "/app" "h2c://app.example.com"
    ProxyPassReverse "/app" "http://app.example.com"

    The schemes to configure above in ProxyPassReverse for reverse proxying h2 (or h2c) protocols are the usual https (resp. http) as expected/used by the user agent.

    top

    Request notes

    mod_proxy_http creates the following request notes for logging using the %{VARNAME}n format in LogFormat or ErrorLogFormat:

    proxy-source-port
    The local port used for the connection to the backend server.
    proxy-status
    The HTTP/2 status received from the backend server.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mpm_winnt.html.de0000644000000000000500000001770513412755316017526 0ustar rootsrc mpm_winnt - Apache HTTP Server Version 2.4
    <-

    Apache-MPM winnt

    Verfügbare Sprachen:  de  |  en  |  fr  |  ja 

    Diese Übersetzung ist möglicherweise nicht mehr aktuell. Bitte prüfen Sie die englische Version auf die neuesten Änderungen.
    Beschreibung: Das Multi-Processing-Modul ist optimiert für Windows NT.
    Status:MPM
    Modulbezeichner:mpm_winnt_module
    Quelltext-Datei:mpm_winnt.c

    Zusammenfassung

    Dieses Multi-Processing-Modul (MPM) ist die Voreinstellung für das Betriebssystem Windows NT. Es verwendet einen einzelnen Steuerprozess, der einen einzelnen Kindprozess startet, welcher wiederum Threads zur Bedienung von Anfragen erstellt.

    Verfügbare Sprachen:  de  |  en  |  fr  |  ja 

    top

    Kommentare

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/prefork.html.tr.utf80000644000000000000500000004154613447004010020072 0ustar rootsrc prefork - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache MPM prefork

    Mevcut Diller:  de  |  en  |  fr  |  ja  |  tr 

    Açıklama:Evresiz ön çatallamalı HTTP sunucusu oluşturur
    Durum:MPM
    Modül Betimleyici:mpm_prefork_module
    Kaynak Dosyası:prefork.c

    Özet

    Bu çok süreçlilik modülü (MPM) evresiz ve çocuk süreçlerin önceden çatallandığı bir HTTP sunucusu oluşturur. Her çocuk süreç gelen bir isteğe yanıt verirken ebeveyn süreç çocuk süreç havuzunu yönetir. Evresiz kütüphanelerle uyumluluk için evrelemeden kaçınma ihtiyacında olan siteler için uygundur. Ayrıca istekleri birbirlerinden yalıtmak için en iyi MPM’dir, dolayısıyla herhangi bir istekle ilgili bir sorun diğerlerini etkilemez.

    Bu MPM kendi kendine her duruma çok iyi uyum sağladığından yapılandırma yönergeleri ile yapılandırılmaya nadiren ihtiyaç gösterir. Yönergelerin en önemlisi MaxRequestWorkers olup, değeri aynı anda almayı umduğunuz istek sayısını işleyebilecek kadar büyük, fiziksel belleğin tüm süreçlerin ihtiyaçlarını karşılamasına yetecek kadar da küçük olması gerekir.

    top

    Nasıl çalışır?

    Bağlantıları dinleyip gerektiğinde onlara hizmet sunan çocuk süreçleri devreye almak tek bir denetim sürecinin sorumluluğundadır. Apache httpd daima, gelen isteklere hizmet vermeye hazır bekleyen en fazla sayıda sunucu sürecini yedekte tutmaya veya boşta bekletmeye çalışır. Bu suretle, istemcilere isteklerinin sunulması için yeni çocuk süreçlerin çatallanmasını beklemek gerekmez.

    Ana sürecin istekleri sunacak çocuk süreçleri oluşturma işlemini nasıl gerçekleştireceği StartServers, MinSpareServers, MaxSpareServers ve MaxRequestWorkers yönergeleri ile düzenlenir. Apache httpd kendiliğinden her duruma çok iyi uyum sağladığından, genelde, çoğu sitenin bu yönergelerin öntanımlı değerlerini değiştirmesi gerekmez. Aynı anda 256’dan fazla isteğe hizmet sunacak sitelerin MaxRequestWorkers değerini arttırmaları gerekebilir. Ancak, fiziksel belleği yeterli olmayan sitelerin de sunucunun belleği diske takaslamasını önlemek için bu değeri azaltmaları gerekebilir. Süreç oluşturmanın ayarlanması ile ilgili daha fazla bilgi edinmek için başarım arttırma ipuçları belgesine bakınız.

    Unix altında 80. portu dinleyebilmek için ana sürecin root tarafından çalıştırılmış olması gerekirse de çocuk süreçler Apache httpd tarafından daha az yetkili bir kullanıcının aidiyetinde çalıştırılırlar. Apache httpd’nin çocuk süreçlerinin kullanıcı ve gruplarını ayarlamak için User ve Group yönergeleri kullanılır. Çocuk süreçlerin sunacakları içeriği okumaya yetkili olmaları gerekir, fakat bu yetkinin mümkün olduğunca kısıtlı tutulmasına çalışılmalıdır.

    MaxConnectionsPerChild yönergesi ana sunucunun eski süreçleri öldürüp yenilerini oluşturmayı ne kadar sıklıkla yapacağını denetler.

    Bu MPM, gürleyen sürü sorunu ortaya çıktığında (genelde çok sayıda dinlenen soket varlığında) gelen bağlantılara erişimi dizgileştirmek için mpm-accept muteksini kullanır. Bu muteksin gerçeklenimle ilgili hususları Mutex yönergesi ile yapılandırılabilir. Bu muteks hakkında ek bilgi için başarımın arttırılması belgesine bakınız.

    top

    MaxSpareServers Yönergesi

    Açıklama:Boştaki çocuk süreçlerin azami sayısı
    Sözdizimi:MaxSpareServers sayı
    Öntanımlı:MaxSpareServers 10
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:prefork

    MaxSpareServers yönergesi boştaki çocuk sunucu süreçlerinin azami sayısını belirler. Boştaki süreç, o an bir isteğe hizmet sunmayan süreçtir. Eğer MaxSpareServers sayıda süreçten daha fazla boşta süreç varsa ana süreç bu fazlalıkları öldürecektir.

    Bu parametrenin ayarlanması sadece çok meşgul siteler için gerekli olabilir. Bu parametreye çok büyük bir değerin atanması oldukça kötü bir fikirdir. Eğer bu değeri MinSpareServers değerine eşit veya daha küçük bir değere ayarlarsanız, Apache HTTP Sunucusu bu değeri kendiliğinden MinSpareServers + 1 olarak değiştirecektir.

    Ayrıca bakınız:

    top

    MinSpareServers Yönergesi

    Açıklama:Boştaki çocuk süreçlerin asgari sayısı
    Sözdizimi:MinSpareServers sayı
    Öntanımlı:MinSpareServers 5
    BaÄŸlam:sunucu geneli
    Durum:MPM
    Modül:prefork

    MinSpareServers yönergesi boştaki çocuk sunucu süreçlerinin asgari sayısını belirler. Boştaki süreç, o an bir isteğe hizmet sunmayan süreçtir. Eğer MinSpareServers sayıda süreçten daha az boşta süreç varsa ana süreç sayıyı tamamlamak için yeni çocuk süreçler oluşturacaktır: Bir tane oluşturur, 1 saniye bekler, sonra 2 tane oluşturur, 1 saniye bekler, sonra 4 tane oluşturur ve saniyede 32 çocuk süreç oluşturuluncaya kadar böyle üstel olarak artar. Artış MinSpareServers ile belirlenen sayıda duracaktır.

    Bu parametrenin ayarlanması sadece çok meşgul siteler için gerekli olabilir. Bu parametreye çok büyük bir değerin atanması oldukça kötü bir fikirdir.

    Ayrıca bakınız:

    Mevcut Diller:  de  |  en  |  fr  |  ja  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/prefork.html.fr.utf80000644000000000000500000004264313412755316020071 0ustar rootsrc prefork - Serveur HTTP Apache Version 2.4
    <-

    Apache MPM prefork

    Langues Disponibles:  de  |  en  |  fr  |  ja  |  tr 

    Description:Implémente un serveur web avec démarrage anticipé de processus, sans thread
    Statut:MPM
    Identificateur de Module:mpm_prefork_module
    Fichier Source:prefork.c

    Sommaire

    Ce module multi-processus (MPM) implémente un serveur web avec démarrage anticipé de processus. Chaque processus du serveur peut répondre aux requêtes entrantes, et un processus parent contrôle la taille du jeu de processus enfants. Il est particulièrement indiqué pour les sites qui ne doivent pas utiliser les threads afin de maintenir une compatibilité avec certaines bibliothèques non sûres du point de vue des threads. C'est également le MPM le plus approprié si l'on veut isoler les requêtes les unes des autres, de façon à ce qu'un problème concernant une requête n'affecte pas les autres.

    Ce MPM s'auto-contrôle de manière efficace, de sorte qu'il est rarement nécessaire d'ajuster ses directives de configuration. Le plus important est la définition de la directive MaxRequestWorkers ; sa valeur doit être assez grande pour pouvoir traiter autant de requêtes simultanées que vous pensez recevoir, mais assez petite pour conserver suffisamment de mémoire RAM pour tous les processus.

    top

    Comment ça marche

    Un processus de contrôle unique a pour tâche de lancer les processus enfants qui attendent les connexions et les traitent au fur et à mesure qu'elles arrivent. Apache httpd essaie toujours de maintenir plusieurs processus serveurs inactifs ou en réserve, afin de pouvoir traiter les requêtes entrantes. De cette façon, les clients n'ont pas besoin d'attendre le démarrage d'un nouveau processus enfant pour que leurs requêtes puissent être traitées.

    Les directives StartServers, MinSpareServers, MaxSpareServers et MaxRequestWorkers permettent de contrôler la manière dont le processus parent crée les processus enfants pour traiter les requêtes. En général, Apache httpd s'auto-contrôle de manière efficace, de sorte que la plupart des sites peuvent conserver les valeurs par défaut des directives. Les sites qui doivent traiter plus de 256 requêtes simultanées doivent augmenter la valeur de MaxRequestWorkers, alors que les sites dont la ressource mémoire est limitée doivent la diminuer afin d'éviter une hyperactivité du serveur (utilisation excessive de la mémoire virtuelle sur disque). Vous trouverez plus d'informations à propos du contrôle de la création de processus dans le document conseils en matière de performances

    Alors que le processus parent est en général démarré en tant que root sous Unix afin de pouvoir se mettre à l'écoute sur le port 80, les processus enfants sont lancés par Apache httpd sous un utilisateur avec privilèges restreints. On peut contrôler les privilèges accordés aux processus enfants d'Apache httpd à l'aide des directives User et Group. Les processus enfants doivent être en mesure de lire tous les contenus destinés à être servis, mais leurs privilèges doivent être aussi bas que possible.

    La directive MaxConnectionsPerChild permet de contrôler la fréquence à laquelle le serveur recycle ses processus en arrêtant les plus anciens et en en lançant de nouveaux.

    Ce module MPM utilise le mutex mpm-accept pour sérialiser l'accès aux connexions entrantes lorsque peut se présenter un problème d'afflux de requêtes (en général quand il y a plusieurs sockets en écoute). Les aspects de l'implémentation de ce mutex peuvent être configurés via la directive Mutex. Vous trouverez des informations supplémentaires à propos de ce mutex dans la documentation à propos des conseils en matière de performances

    top

    Directive MaxSpareServers

    Description:Nombre maximum de processus serveurs enfants inactifs
    Syntaxe:MaxSpareServers nombre
    Défaut:MaxSpareServers 10
    Contexte:configuration globale
    Statut:MPM
    Module:prefork

    La directive MaxSpareServers permet de définir le nombre maximum souhaité de processus serveurs enfants inactifs. Un processus inactif est un processus qui ne traite pas de requête. S'il y a plus de MaxSpareServers processus inactifs, le processus parent arrêtera les processus excédentaires.

    La modification de ce paramètre n'est nécessaire que dans le cas de sites très sollicités. Définir ce paramètre à une valeur très grande est cependant dans la plupart des cas une mauvaise idée. Si vous essayez d'affecter à ce paramètre une valeur égale ou inférieure à la valeur de MinSpareServers, le serveur HTTP Apache l'ajustera automatiquement à la valeur de MinSpareServers + 1.

    Voir aussi

    top

    Directive MinSpareServers

    Description:Nombre minimum de processus serveurs enfants inactifs
    Syntaxe:MinSpareServers nombre
    Défaut:MinSpareServers 5
    Contexte:configuration globale
    Statut:MPM
    Module:prefork

    La directive MinSpareServers permet de définir le nombre minimum désiré de processus serveurs enfants inactifs. Un processus inactif est un processus qui ne traite pas de requête. S'il y a moins de MinSpareServers processus inactifs, le processus parent va créer de nouveaux enfants de la manière suivante : il en crée un, attend une seconde, il en crée deux, attend une seconde, il en crée quatre, puis continue ainsi exponentiellement jusu'à ce que son taux de création de processus enfants soit de 32 par seconde. Il ne s'arrête que lorsque le nombre de processus enfants correspond à la définition de la directive MinSpareServers.

    La modification de ce paramètre n'est nécessaire que dans le cas de sites très sollicités. Définir ce paramètre à une valeur très grande est dans la plupart des cas une mauvaise idée.

    Voir aussi

    Langues Disponibles:  de  |  en  |  fr  |  ja  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_groupfile.html.ko.euc-kr0000644000000000000500000002146513412755316022770 0ustar rootsrc mod_authz_groupfile - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_authz_groupfile

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:ÀÏ¹Ý ¹®ÀÚÆÄÀÏÀ» ÀÌ¿ëÇÑ ±×·ì ±ÇÇѺο©
    »óÅÂ:Base
    ¸ðµâ¸í:authz_groupfile_module
    ¼Ò½ºÆÄÀÏ:mod_authz_groupfile.c
    Áö¿ø:¾ÆÆÄÄ¡ 2.1 ÀÌÈĺÎÅÍ

    ¿ä¾à

    ÀÌ ¸ðµâÀº ÀÎÁõÇÑ »ç¿ëÀÚÀÇ ±×·ì±ÇÇÑÀ¸·Î À¥»çÀÌÆ®ÀÇ ÀϺθ¦ Á¢±ÙÇÒ ¼ö ÀÖ´ÂÁö °áÁ¤ÇÏ¿© ±ÇÇѺο©¸¦ ÇÑ´Ù. mod_authz_dbm°ú ±â´ÉÀÌ ºñ½ÁÇÏ´Ù.

    top

    AuthGroupFile Áö½Ã¾î

    ¼³¸í:ÀÎÁõ¿¡ »ç¿ëÇÒ »ç¿ëÀÚ ±×·ì ¸ñ·ÏÀ» ÀúÀåÇÏ´Â ¹®ÀÚÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù
    ¹®¹ý:AuthGroupFile file-path
    »ç¿ëÀå¼Ò:directory, .htaccess
    Override ¿É¼Ç:AuthConfig
    »óÅÂ:Base
    ¸ðµâ:mod_authz_groupfile

    AuthGroupFile Áö½Ã¾î´Â »ç¿ëÀÚ ÀÎÁõ¿¡ »ç¿ëÇÒ »ç¿ëÀÚ ±×·ì ¸ñ·ÏÀ» ÀúÀåÇÏ´Â ¹®ÀÚÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù. File-path´Â ±×·ìÆÄÀÏ °æ·ÎÀÌ´Ù. Àý´ë°æ·Î¸¦ »ç¿ëÇÏÁö ¾ÊÀ¸¸é ServerRootÀÇ »ó´ë°æ·Î·Î ¹Þ¾ÆµéÀδÙ.

    ±×·ìÆÄÀÏÀÇ °¢ ÁÙ¿¡´Â ±×·ì¸í, ÄÝ·Ð, °ø¹éÀ¸·Î ±¸ºÐÇÑ »ç¿ëÀÚ¸íµéÀÌ ¼ø¼­´ë·Î ³ª¿Â´Ù.

    ¿¹Á¦:

    mygroup: bob joe anne

    ¸¹Àº ±×·ìÀ» ÀúÀåÇÑ Å« ¹®ÀÚÆÄÀÏÀ» °Ë»öÇÏ´Â °ÍÀº ¸Å¿ì ºñÈ¿À²ÀûÀÓÀ» ÁÖÀÇÇ϶ó. AuthDBMGroupFileÀÌ ´õ ¼º´ÉÀÌ ÁÁ´Ù.

    º¸¾È

    AuthGroupFileÀÌ À¥¼­¹öÀÇ ¹®¼­µé ¹Û¿¡ À§Ä¡ÇÔÀ» È®ÀÎÇ϶ó. ÀÌ ÆÄÀÏÀ» º¸È£ÇÒ µð·ºÅ丮 ¾È¿¡ °°ÀÌ µÎÁö ¸¶¶ó. ±×·¸Áö ¾ÊÀ¸¸é, Ŭ¶óÀÌ¾ðÆ®°¡ AuthGroupFileÀ» ´Ù¿î·ÎµåÇÒ ¼ö ÀÖ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ja  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_privileges.html.en0000644000000000000500000007257013435243454020541 0ustar rootsrc mod_privileges - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_privileges

    Available Languages:  en  |  fr 

    Description:Support for Solaris privileges and for running virtual hosts under different user IDs.
    Status:Experimental
    Module Identifier:privileges_module
    Source File:mod_privileges.c
    Compatibility:Available in Apache 2.3 and up, on Solaris 10 and OpenSolaris platforms

    Summary

    This module enables different Virtual Hosts to run with different Unix User and Group IDs, and with different Solaris Privileges. In particular, it offers a solution to the problem of privilege separation between different Virtual Hosts, first promised by the abandoned perchild MPM. It also offers other security enhancements.

    Unlike perchild, mod_privileges is not itself an MPM. It works within a processing model to set privileges and User/Group per request in a running process. It is therefore not compatible with a threaded MPM, and will refuse to run under one.

    mod_privileges raises security issues similar to those of suexec. But unlike suexec, it applies not only to CGI programs but to the entire request processing cycle, including in-process applications and subprocesses. It is ideally suited to running PHP applications under mod_php, which is also incompatible with threaded MPMs. It is also well-suited to other in-process scripting applications such as mod_perl, mod_python, and mod_ruby, and to applications implemented in C as apache modules where privilege separation is an issue.

    top

    Security Considerations

    mod_privileges introduces new security concerns in situations where untrusted code may be run within the webserver process. This applies to untrusted modules, and scripts running under modules such as mod_php or mod_perl. Scripts running externally (e.g. as CGI or in an appserver behind mod_proxy or mod_jk) are NOT affected.

    The basic security concerns with mod_privileges are:

    • Running as a system user introduces the same security issues as mod_suexec, and near-equivalents such as cgiwrap and suphp.
    • A privileges-aware malicious user extension (module or script) could escalate its privileges to anything available to the httpd process in any virtual host. This introduces new risks if (and only if) mod_privileges is compiled with the BIG_SECURITY_HOLE option.
    • A privileges-aware malicious user extension (module or script) could escalate privileges to set its user ID to another system user (and/or group).

    The PrivilegesMode directive allows you to select either FAST or SECURE mode. You can mix modes, using FAST mode for trusted users and fully-audited code paths, while imposing SECURE mode where an untrusted user has scope to introduce code.

    Before describing the modes, we should also introduce the target use cases: Benign vs Hostile. In a benign situation, you want to separate users for their convenience, and protect them and the server against the risks posed by honest mistakes, but you trust your users are not deliberately subverting system security. In a hostile situation - e.g. commercial hosting - you may have users deliberately attacking the system or each other.

    FAST mode
    In FAST mode, requests are run in-process with the selected uid/gid and privileges, so the overhead is negligible. This is suitable for benign situations, but is not secure against an attacker escalating privileges with an in-process module or script.
    SECURE mode
    A request in SECURE mode forks a subprocess, which then drops privileges. This is a very similar case to running CGI with suexec, but for the entire request cycle, and with the benefit of fine-grained control of privileges.

    You can select different PrivilegesModes for each virtual host, and even in a directory context within a virtual host. FAST mode is appropriate where the user(s) are trusted and/or have no privilege to load in-process code. SECURE mode is appropriate to cases where untrusted code might be run in-process. However, even in SECURE mode, there is no protection against a malicious user who is able to introduce privileges-aware code running before the start of the request-processing cycle.

    top

    DTracePrivileges Directive

    Description:Determines whether the privileges required by dtrace are enabled.
    Syntax:DTracePrivileges On|Off
    Default:DTracePrivileges Off
    Context:server config
    Status:Experimental
    Module:mod_privileges
    Compatibility:Available on Solaris 10 and OpenSolaris with non-threaded MPMs (prefork or custom MPM).

    This server-wide directive determines whether Apache will run with the privileges required to run dtrace. Note that DTracePrivileges On will not in itself activate DTrace, but DTracePrivileges Off will prevent it working.

    top

    PrivilegesMode Directive

    Description:Trade off processing speed and efficiency vs security against malicious privileges-aware code.
    Syntax:PrivilegesMode FAST|SECURE|SELECTIVE
    Default:PrivilegesMode FAST
    Context:server config, virtual host, directory
    Status:Experimental
    Module:mod_privileges
    Compatibility:Available on Solaris 10 and OpenSolaris with non-threaded MPMs (prefork or custom MPM).

    This directive trades off performance vs security against malicious, privileges-aware code. In SECURE mode, each request runs in a secure subprocess, incurring a substantial performance penalty. In FAST mode, the server is not protected against escalation of privileges as discussed above.

    This directive differs slightly between a <Directory> context (including equivalents such as Location/Files/If) and a top-level or <VirtualHost>.

    At top-level, it sets a default that will be inherited by virtualhosts. In a virtual host, FAST or SECURE mode acts on the entire HTTP request, and any settings in a <Directory> context will be ignored. A third pseudo-mode SELECTIVE defers the choice of FAST vs SECURE to directives in a <Directory> context.

    In a <Directory> context, it is applicable only where SELECTIVE mode was set for the VirtualHost. Only FAST or SECURE can be set in this context (SELECTIVE would be meaningless).

    Warning

    Where SELECTIVE mode is selected for a virtual host, the activation of privileges must be deferred until after the mapping phase of request processing has determined what <Directory> context applies to the request. This might give an attacker opportunities to introduce code through a RewriteMap running at top-level or <VirtualHost> context before privileges have been dropped and userid/gid set.
    top

    VHostCGIMode Directive

    Description:Determines whether the virtualhost can run subprocesses, and the privileges available to subprocesses.
    Syntax:VHostCGIMode On|Off|Secure
    Default:VHostCGIMode On
    Context:virtual host
    Status:Experimental
    Module:mod_privileges
    Compatibility:Available on Solaris 10 and OpenSolaris with non-threaded MPMs (prefork or custom MPM).

    Determines whether the virtual host is allowed to run fork and exec, the privileges required to run subprocesses. If this is set to Off the virtualhost is denied the privileges and will not be able to run traditional CGI programs or scripts under the traditional mod_cgi, nor similar external programs such as those created by mod_ext_filter or RewriteMap prog. Note that it does not prevent CGI programs running under alternative process and security models such as mod_fcgid, which is a recommended solution in Solaris.

    If set to On or Secure, the virtual host is permitted to run external programs and scripts as above. Setting VHostCGIMode Secure has the effect of denying privileges to the subprocesses, as described for VHostSecure.

    top

    VHostCGIPrivs Directive

    Description:Assign arbitrary privileges to subprocesses created by a virtual host.
    Syntax:VHostCGIPrivs [+-]?privilege-name [[+-]?privilege-name] ...
    Default:None
    Context:virtual host
    Status:Experimental
    Module:mod_privileges
    Compatibility:Available on Solaris 10 and OpenSolaris with non-threaded MPMs (prefork or custom MPM) and when mod_privileges is compiled with the BIG_SECURITY_HOLE compile-time option.

    VHostCGIPrivs can be used to assign arbitrary privileges to subprocesses created by a virtual host, as discussed under VHostCGIMode. Each privilege-name is the name of a Solaris privilege, such as file_setid or sys_nfs.

    A privilege-name may optionally be prefixed by + or -, which will respectively allow or deny a privilege. If used with neither + nor -, all privileges otherwise assigned to the virtualhost will be denied. You can use this to override any of the default sets and construct your own privilege set.

    Security

    This directive can open huge security holes in apache subprocesses, up to and including running them with root-level powers. Do not use it unless you fully understand what you are doing!

    top

    VHostGroup Directive

    Description:Sets the Group ID under which a virtual host runs.
    Syntax:VHostGroup unix-groupid
    Default:Inherits the group id specified in Group
    Context:virtual host
    Status:Experimental
    Module:mod_privileges
    Compatibility:Available on Solaris 10 and OpenSolaris with non-threaded MPMs (prefork or custom MPM).

    The VHostGroup directive sets the Unix group under which the server will process requests to a virtualhost. The group is set before the request is processed and reset afterwards using Solaris Privileges. Since the setting applies to the process, this is not compatible with threaded MPMs.

    Unix-group is one of:

    A group name
    Refers to the given group by name.
    # followed by a group number.
    Refers to a group by its number.

    Security

    This directive cannot be used to run apache as root! Nevertheless, it opens potential security issues similar to those discussed in the suexec documentation.

    See also

    top

    VHostPrivs Directive

    Description:Assign arbitrary privileges to a virtual host.
    Syntax:VHostPrivs [+-]?privilege-name [[+-]?privilege-name] ...
    Default:None
    Context:virtual host
    Status:Experimental
    Module:mod_privileges
    Compatibility:Available on Solaris 10 and OpenSolaris with non-threaded MPMs (prefork or custom MPM) and when mod_privileges is compiled with the BIG_SECURITY_HOLE compile-time option.

    VHostPrivs can be used to assign arbitrary privileges to a virtual host. Each privilege-name is the name of a Solaris privilege, such as file_setid or sys_nfs.

    A privilege-name may optionally be prefixed by + or -, which will respectively allow or deny a privilege. If used with neither + nor -, all privileges otherwise assigned to the virtualhost will be denied. You can use this to override any of the default sets and construct your own privilege set.

    Security

    This directive can open huge security holes in apache, up to and including running requests with root-level powers. Do not use it unless you fully understand what you are doing!

    top

    VHostSecure Directive

    Description:Determines whether the server runs with enhanced security for the virtualhost.
    Syntax:VHostSecure On|Off
    Default:VHostSecure On
    Context:virtual host
    Status:Experimental
    Module:mod_privileges
    Compatibility:Available on Solaris 10 and OpenSolaris with non-threaded MPMs (prefork or custom MPM).

    Determines whether the virtual host processes requests with security enhanced by removal of Privileges that are rarely needed in a webserver, but which are available by default to a normal Unix user and may therefore be required by modules and applications. It is recommended that you retain the default (On) unless it prevents an application running. Since the setting applies to the process, this is not compatible with threaded MPMs.

    Note

    If VHostSecure prevents an application running, this may be a warning sign that the application should be reviewed for security.

    top

    VHostUser Directive

    Description:Sets the User ID under which a virtual host runs.
    Syntax:VHostUser unix-userid
    Default:Inherits the userid specified in User
    Context:virtual host
    Status:Experimental
    Module:mod_privileges
    Compatibility:Available on Solaris 10 and OpenSolaris with non-threaded MPMs (prefork or custom MPM).

    The VHostUser directive sets the Unix userid under which the server will process requests to a virtualhost. The userid is set before the request is processed and reset afterwards using Solaris Privileges. Since the setting applies to the process, this is not compatible with threaded MPMs.

    Unix-userid is one of:

    A username
    Refers to the given user by name.
    # followed by a user number.
    Refers to a user by its number.

    Security

    This directive cannot be used to run apache as root! Nevertheless, it opens potential security issues similar to those discussed in the suexec documentation.

    See also

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_lbmethod_bytraffic.html0000644000000000000500000000036013362070302021567 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_lbmethod_bytraffic.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_lbmethod_bytraffic.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/prefork.html.ja.utf80000644000000000000500000004175413412755316020056 0ustar rootsrc prefork - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache MPM prefork

    翻訳済ã¿è¨€èªž:  de  |  en  |  fr  |  ja  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:スレッドを使ã‚ãšã€å…ˆè¡Œã—㦠fork を行ãªã†ã‚¦ã‚§ãƒ–サーãƒã‚’実装
    ステータス:MPM
    モジュール識別å­:mpm_prefork_module
    ソースファイル:prefork.c

    概è¦

    ã“ã®ãƒžãƒ«ãƒãƒ—ロセッシングモジュール (MPM) ã¯ã€ Unix 上ã§ã® Apache 1.3 ã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®æŒ™å‹•ã¨éžå¸¸ã«ã‚ˆãä¼¼ãŸæ–¹æ³•㧠リクエストを処ç†ã™ã‚‹ã€ã‚¹ãƒ¬ãƒƒãƒ‰ã‚’使ã‚ãšã€å…ˆè¡Œã—㦠fork を行ãªã† ウェブサーãƒã‚’実装ã—ã¦ã„ã¾ã™ã€‚ スレッドセーフã§ãªã„ライブラリã¨ã®äº’æ›æ€§ã‚’ã¨ã‚‹ãŸã‚ã«ã€ スレッドをé¿ã‘ã‚‹å¿…è¦ã®ã‚るサイトã§ã¯ã€ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ä½¿ç”¨ãŒé©åˆ‡ã§ã—ょã†ã€‚ ã‚るリクエストã§ç™ºç”Ÿã—ãŸå•題ãŒä»–ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å½±éŸ¿ã—ãªã„よã†ã«ã€ 個々ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å˜é›¢ã™ã‚‹ã®ã«ã‚‚ã€æœ€é©ãª MPM ã§ã™ã€‚

    ã“ã® MPM ã¯éžå¸¸ã«è‡ªå¾‹çš„ãªã®ã§ã€ã“ã® MPM ã®è¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ 調整ã™ã‚‹å¿…è¦ã¯ã»ã¨ã‚“ã©ãªã„ã§ã—ょã†ã€‚ã‚‚ã£ã¨ã‚‚é‡è¦ãªã“ã¨ã¯ã€ MaxClients ãŒã€äºˆæƒ³ã•ã‚Œã‚‹åŒæ™‚リクエスト数をå分扱ãˆã‚‹ãらã„ã¯å¤§ãã„ã‘れã©ã‚‚〠全プロセスã«å分ãªç‰©ç†ãƒ¡ãƒ¢ãƒªãŒç¢ºå®Ÿã«è¡Œã渡る程度ã«ã¯å°ã•ã„値ã«ã™ã‚‹ã€ ã¨ã„ã†ã“ã¨ã§ã™ã€‚

    top

    動作方法

    一ã¤ã®ã‚³ãƒ³ãƒˆãƒ­ãƒ¼ãƒ«ãƒ—ロセスãŒã€ コãƒã‚¯ã‚·ãƒ§ãƒ³ã«å¯¾ã—㦠listen ã—ã¦ã€ã—ã‹ã‚‹ã¹ã時ã«å¿œç­”ã™ã‚‹ å­ãƒ—ロセスを起動ã—ã¾ã™ã€‚Apache ã¯å¸¸ã«å¹¾ã¤ã‹ã®ã‚¹ãƒšã‚¢ ã‹ã‚¢ã‚¤ãƒ‰ãƒ«ãªã‚µãƒ¼ãƒãƒ—ロセスを維æŒã—ã¦ã„ã¦ã€ãれらã¯å…¥ã£ã¦ã㟠リクエストã«å¿œç­”ã§ãるよã†ã«å¾…機ã—ã¦ã„ã¾ã™ã€‚ ã“ã®ã‚ˆã†ã«ã—ã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒå¿œç­”ã•れるå‰ã«ã€ æ–°ã—ã„å­ãƒ—ロセス㌠fork ã•れるã®ã‚’å¾…ãŸãªãã¦ã‚‚よã„よã†ã« ãªã£ã¦ã„ã¾ã™ã€‚

    親プロセスãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¿œç­”ã™ã‚‹ã®å­ãƒ—ロセスを ã©ã®ã‚ˆã†ã«ç”Ÿæˆã™ã‚‹ã‹ã¯ã€ StartServers, MinSpareServers, MaxSpareServers, MaxClients ã§èª¿æ•´ã—ã¾ã™ã€‚一般的ã«ã€Apache ã¯éžå¸¸ã«è‡ªå¾‹çš„ãªã®ã§ã€ 大抵ã®ã‚µã‚¤ãƒˆã§ã¯ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–をデフォルト値ã‹ã‚‰èª¿æ•´ã™ã‚‹ å¿…è¦ã¯ãªã„ã§ã—ょã†ã€‚ åŒæ™‚ã« 256 ã‚’è¶…ãˆã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¿œç­”ã—ãªã„ã¨ã„ã‘ãªã„サイトã§ã¯ã€ MaxClients を増やã™å¿…è¦ãŒã‚ã‚‹ã§ã—ょã†ã€‚ 一方ã€ãƒ¡ãƒ¢ãƒªã®é™ã‚‰ã‚Œã¦ã„るサイトã§ã¯ã€ã‚¹ãƒ©ãƒƒã‚·ãƒ³ã‚° (メモリã¨ãƒ‡ã‚£ã‚¹ã‚¯é–“ã§ä½•度もスワップ) ãŒèµ·ã“ã‚‹ã®ã‚’防ããŸã‚ã« MaxClients を減らã™å¿…è¦ãŒã‚ã‚‹ã§ã—ょã†ã€‚プロセス生æˆã®ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã«é–¢ã™ã‚‹ 詳ã—ã„æƒ…å ±ã¯ã€æ€§èƒ½ã«é–¢ã™ã‚‹ãƒ’ント ã«ã‚りã¾ã™ã€‚

    通常 Unix ã§ã¯è¦ªãƒ—ロセス㯠80 番ãƒãƒ¼ãƒˆã«ãƒã‚¤ãƒ³ãƒ‰ã™ã‚‹ãŸã‚ã« root ã§èµ·å‹•ã•れã¾ã™ãŒã€å­ãƒ—ロセスやスレッド㯠もã£ã¨ä½Žã„権é™ã®ãƒ¦ãƒ¼ã‚¶ã§ Apache ã«ã‚ˆã£ã¦èµ·å‹•ã•れã¾ã™ã€‚ User 㨠Group ディレクティブ㯠Apache ã®å­ãƒ—ãƒ­ã‚»ã‚¹ã®æ¨©é™ã‚’設定ã™ã‚‹ã®ã«ç”¨ã„られã¾ã™ã€‚ å­ãƒ—ロセスã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚‹ã‚³ãƒ³ãƒ†ãƒ³ãƒ„å…¨ã¦ã‚’読ã‚ãªã„ã¨ã„ã‘ã¾ã›ã‚“ãŒã€ å¯èƒ½ãªé™ã‚Šå¿…è¦æœ€å°é™ã®æ¨©é™ã®ã¿ã‚’æŒã£ã¦ã„るよã†ã«ã™ã‚‹ã¹ãã§ã™ã€‚

    MaxRequestsPerChild ã¯ã€å¤ã„ãƒ—ãƒ­ã‚»ã‚¹ã‚’åœæ­¢ã—ã¦æ–°ã—ã„プロセスを起動ã™ã‚‹ã“ã¨ã«ã‚ˆã£ã¦ã€ ã©ã®ç¨‹åº¦ã®é »åº¦ã§ã‚µãƒ¼ãƒãŒãƒ—ロセスをリサイクルã™ã‚‹ã‹ã‚’制御ã—ã¾ã™ã€‚

    top

    MaxSpareServers ディレクティブ

    説明:アイドルãªå­ã‚µãƒ¼ãƒãƒ—ãƒ­ã‚»ã‚¹ã®æœ€å¤§å€‹æ•°
    æ§‹æ–‡:MaxSpareServers number
    デフォルト:MaxSpareServers 10
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:prefork

    MaxSpareServers ディレクティブã¯ã€ アイドルãªå­ã‚µãƒ¼ãƒãƒ—ロセスã®å¸Œæœ›æœ€å¤§å€‹æ•°ã‚’設定ã—ã¾ã™ã€‚ アイドルプロセスã¨ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã£ã¦ã„ãªã„プロセスã§ã™ã€‚ MaxSpareServers ã‚ˆã‚Šã‚‚å¤šã„æ•°ãŒã‚¢ã‚¤ãƒ‰ãƒ«ã§ã‚れã°ã€ 親プロセスã¯è¶…éŽãƒ—ロセスを kill ã—ã¾ã™ã€‚

    éžå¸¸ã«æ··ã‚“ã§ã„るサイトã§ã®ã¿ã€ã“ã®ãƒ‘ラメータをãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã™ã‚‹ã¹ãã§ã™ã€‚ ã“ã®ãƒ‘ラメータを大ããã™ã‚‹ã¨ã„ã†ã“ã¨ã¯ã€å¤§æŠµã®å ´åˆã¯æ‚ªã„発想ã§ã™ã€‚ MinSpareServers 以下ã«è¨­å®šã—ãŸå ´åˆã€MinSpareServers +1 ã«è‡ªå‹•調整ã•れã¾ã™ã€‚

    å‚ç…§

    top

    MinSpareServers ディレクティブ

    説明:アイドルãªå­ã‚µãƒ¼ãƒãƒ—ãƒ­ã‚»ã‚¹ã®æœ€å°å€‹æ•°
    æ§‹æ–‡:MinSpareServers number
    デフォルト:MinSpareServers 5
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル
    ステータス:MPM
    モジュール:prefork

    MaxSpareServers ディレクティブã¯ã€ アイドルãªå­ã‚µãƒ¼ãƒãƒ—ロセスã®å¸Œæœ›æœ€å°å€‹æ•°ã‚’設定ã—ã¾ã™ã€‚ アイドルプロセスã¨ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã£ã¦ã„ãªã„プロセスã§ã™ã€‚ MinSpareServers よりも少ãªã„æ•°ãŒã‚¢ã‚¤ãƒ‰ãƒ«ã§ã‚れã°ã€ è¦ªãƒ—ãƒ­ã‚»ã‚¹ã¯æœ€é«˜ã§ 1 ç§’ã«ã¤ã 1 個ã®å‰²åˆã§æ–°ã—ã„å­ãƒ—ロセスを生æˆã—ã¾ã™ã€‚

    éžå¸¸ã«æ··ã‚“ã§ã„るサイトã§ã®ã¿ã€ã“ã®ãƒ‘ラメータをãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã™ã‚‹ã¹ãã§ã™ã€‚ ã“ã®ãƒ‘ラメータを大ããã™ã‚‹ã¨ã„ã†ã“ã¨ã¯ã€å¤§æŠµã®å ´åˆã¯æ‚ªã„発想ã§ã™ã€‚

    å‚ç…§

    翻訳済ã¿è¨€èªž:  de  |  en  |  fr  |  ja  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/quickreference.html0000644000000000000500000000143513362070302020100 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: quickreference.html.de Content-Language: de Content-type: text/html; charset=ISO-8859-1 URI: quickreference.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: quickreference.html.es Content-Language: es Content-type: text/html; charset=ISO-8859-1 URI: quickreference.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: quickreference.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: quickreference.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: quickreference.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 URI: quickreference.html.zh-cn.utf8 Content-Language: zh-cn Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_slotmem_plain.html.en0000644000000000000500000002015613412755316021224 0ustar rootsrc mod_slotmem_plain - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_slotmem_plain

    Available Languages:  en  |  fr 

    Description:Slot-based shared memory provider.
    Status:Extension
    Module Identifier:slotmem_plain_module
    Source File:mod_slotmem_plain.c

    Summary

    mod_slotmem_plain is a memory provider which provides for creation and access to a plain memory segment in which the datasets are organized in "slots."

    If the memory needs to be shared between threads and processes, a better provider would be mod_slotmem_shm.

    mod_slotmem_plain provides the following API functions:

    /* call the callback on all worker slots */
    apr_status_t doall(ap_slotmem_instance_t *s, ap_slotmem_callback_fn_t *func, void *data, apr_pool_t *pool)
    
    /* create a new slotmem with each item size is item_size */
    apr_status_t create(ap_slotmem_instance_t **new, const char *name, apr_size_t item_size, unsigned int item_num, ap_slotmem_type_t type, apr_pool_t *pool)
    
    /* attach to an existing slotmem */
    apr_status_t attach(ap_slotmem_instance_t **new, const char *name, apr_size_t *item_size, unsigned int *item_num, apr_pool_t *pool)
    
    /* get the direct pointer to the memory associated with this worker slot */
    apr_status_t dptr(ap_slotmem_instance_t *s, unsigned int item_id, void **mem)
    
    /* get/read the memory from this slot to dest */
    apr_status_t get(ap_slotmem_instance_t *s, unsigned int item_id, unsigned char *dest, apr_size_t dest_len)
    
    /* put/write the data from src to this slot */
    apr_status_t put(ap_slotmem_instance_t *slot, unsigned int item_id, unsigned char *src, apr_size_t src_len)
    
    /* return the total number of slots in the segment */
    unsigned int num_slots(ap_slotmem_instance_t *s)
    
    /* return the total data size, in bytes, of a slot in the segment */
    apr_size_t slot_size(ap_slotmem_instance_t *s)
    
    /* grab or allocate the first free slot and mark as in-use (does not do any data copying) */
    apr_status_t grab(ap_slotmem_instance_t *s, unsigned int *item_id)
    
    /* forced grab or allocate the specified slot and mark as in-use (does not do any data copying) */
    apr_status_t fgrab(ap_slotmem_instance_t *s, unsigned int item_id)
    
    /* release or free a slot and mark as not in-use (does not do any data copying) */
    apr_status_t release(ap_slotmem_instance_t *s, unsigned int item_id)
    Support Apache!

    Directives

    This module provides no directives.

    Bugfix checklist

    See also

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authn_socache.html.fr.utf80000644000000000000500000005066413412755316022066 0ustar rootsrc mod_authn_socache - Serveur HTTP Apache Version 2.4
    <-

    Module Apache mod_authn_socache

    Langues Disponibles:  en  |  fr 

    Description:Gère un cache des données d'authentification pour diminuer la charge des serveurs d'arrière-plan
    Statut:Base
    Identificateur de Module:authn_socache_module
    Fichier Source:mod_authn_socache.c
    Compatibilité:Versions 2.3 et ultérieures

    Sommaire

    Maintient un cache des données d'authentification pour limiter les sollicitations du serveur d'arrière-plan.

    top

    Mise en cache des données d'authentification

    Certains utilisateurs qui mettent en oeuvre une authentification lourde s'appuyant par exemple sur des requêtes SQL (mod_authn_dbd) ont signalé une charge induite inacceptable sur leur fournisseur d'authentification. Cela se produit typiquement dans le cas où une page HTML contient des centaines d'objets (images, scripts, pages de styles, media, etc...), et où une requête pour cette page génère des centaines de sous-requêtes à effet immédiat pour des contenus supplémentaires authentifiés.

    Pour résoudre ce problème, mod_authn_socache fournit une solution qui permet de maintenir un cache des données d'authentification.

    top

    Utilisation

    Le cache d'authentification doit être utilisé lorsque les requêtes d'authentification induisent une charge significative sur le serveur, le serveur d'arrière-plan ou le réseau. Cette mise en cache n'apportera probablement aucune amélioration dans le cas d'une authentification à base de fichier (mod_authn_file) ou de base de données dbm (mod_authn_dbm) car ces méthodes sont de par leur conception rapides et légères (la mise en cache peut cependant s'avérer utile dans le cas où le fichier est situé sur un montage réseau). Les fournisseurs d'authentification basés sur SQL ou LDAP ont plus de chances de tirer parti de cette mise en cache, en particulier lorsqu'un problème de performances est détecté. mod_authnz_ldap gérant son propre cache, seul mod_authn_dbd est concerné par notre sujet.

    Les principales règles à appliquer pour la mise en cache sont :

    1. Inclure le fournisseur pour lequel vous voulez effectuer une mise en cache dans une directive AuthnCacheProvideFor.
    2. Mettre socache avant le fournisseur pour lequel vous voulez effectuer une mise en cache dans votre directive AuthBasicProvider ou AuthDigestProvider.

    Voici un exemple simple permettant d'accélérer mod_authn_dbd et utilisant dbm comme moteur de la mise en cache :

        #AuthnCacheSOCache est optionnel. S'il est défini, il l'est pour
        #l'ensemble du serveur
    AuthnCacheSOCache dbm
    <Directory "/usr/www/myhost/private">
        AuthType Basic
        AuthName "Cached Authentication Example"
        AuthBasicProvider socache dbd
        AuthDBDUserPWQuery "SELECT password FROM authn WHERE user = %s"
        AuthnCacheProvideFor dbd
        Require valid-user
        #Optionnel
        AuthnCacheContext dbd-authn-example
    </Directory>
    top

    La mise en cache avec les modules tiers

    Les développeurs de modules doivent savoir que la mise en cache avec mod_authn_socache doit être activée dans leurs modules. La fonction de l'API ap_authn_cache_store permet de mettre en cache les données d'authentification qu'un fournisseur vient de rechercher ou de générer. Vous trouverez des exemples d'utilisation à r957072, où trois fournisseurs authn sont activés pour la mise en cache.

    top

    Directive AuthnCacheContext

    Description:Spécifie une chaîne de contexte à utiliser dans la clé du cache
    Syntaxe:AuthnCacheContext directory|server|chaîne-personnalisée
    Défaut:directory
    Contexte:répertoire
    Statut:Base
    Module:mod_authn_socache

    Cette directive permet de spécifier une chaîne à utiliser avec le nom d'utilisateur fourni (et le domaine d'authentification - realm - dans le cas d'une authentification à base de condensés) lors de la construction d'une clé de cache. Ceci permet de lever l'ambiguïté entre plusieurs noms d'utilisateurs identiques servant différentes zones d'authentification sur le serveur.

    Il y a deux valeurs spéciales pour le paramètre : directory, qui utilise le contexte de répertoire de la requête comme chaîne, et server, qui utilise le nom du serveur virtuel.

    La valeur par défaut est directory, qui est aussi la définition la plus courante. Ceci est cependant loin d'être optimal, car par exemple, $app-base, $app-base/images, $app-base/scripts et $app-base/media possèderont chacun leur propre clé de cache. Il est préférable d'utiliser le fournisseur de mot de passe : par exemple un fichier htpasswd ou une table de base de données.

    Les contextes peuvent être partagés entre différentes zones du serveur, où les données d'authentification sont partagées. Ceci est cependant susceptible de créer des trous de sécurité de type cross-site ou cross-application, et cette directive n'est donc pas disponible dans les contextes .htaccess.

    top

    Directive AuthnCacheEnable

    Description:Active la mise en cache de l'authentification en tout endroit
    Syntaxe:AuthnCacheEnable
    Contexte:configuration globale
    Statut:Base
    Module:mod_authn_socache

    Normalement, cette directive n'est pas nécessaire : l'activation est implicite si la mise en cache de l'authentification a été activée en tout autre endroit du fichier httpd.conf. Par contre, si cette mise en cache n'a pas été activée, par défaut, elle ne sera pas initialisée, et ne sera donc pas disponible dans un contexte de fichier .htaccess. Cette directive permet d'être sûr que la mise en cache a bien été activée et pourra donc être utilisée dans les fichiers .htaccess.

    top

    Directive AuthnCacheProvideFor

    Description:Spécifie le fournisseur pour lequel on veut effectuer une mise en cache
    Syntaxe:AuthnCacheProvideFor fournisseur-authn [...]
    Défaut:None
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_authn_socache

    Cette directive permet de spécifier un ou plusieurs fournisseurs pour le(s)quel(s) on veut effectuer une mise en cache. Les données d'authentification trouvées par un fournisseur non spécifié dans une directive AuthnCacheProvideFor ne seront pas mises en cache.

    Par exemple, pour mettre en cache les données d'authentification trouvées par mod_authn_dbd ou par un fournisseur personnalisé mon-fournisseur, et ne pas mettre en cache celles trouvées par les fournisseurs légers comme file ou dbm :

    AuthnCacheProvideFor dbd mon-fournisseur
    top

    Directive AuthnCacheSOCache

    Description:Sélectionne le fournisseur socache d'arrière-plan à utiliser
    Syntaxe:AuthnCacheSOCache nom-fournisseur[:arguments-fournisseur]
    Contexte:configuration globale
    Statut:Base
    Module:mod_authn_socache
    Compatibilité:Les arguments optionnels du fournisseur sont disponibles à partir de la version 2.4.7 du serveur HTTP Apache

    Cette définition s'applique à l'ensemble du serveur et permet de sélectionner un fournisseur pour le cache d'objets partagés, ainsi que des arguments éventuels pour ce fournisseur. Les fournisseurs disponibles sont, entre autres, "dbm", "dc", "memcache", ou "shmcb", chacun d'entre eux nécessitant le chargement du module approprié. Si elle est absente, c'est la valeur par défaut pour votre plate-forme qui sera utilisée.

    top

    Directive AuthnCacheTimeout

    Description:Définit une durée de vie pour les entrées du cache
    Syntaxe:AuthnCacheTimeout durée-de-vie (secondes)
    Défaut:300 (5 minutes)
    Contexte:répertoire, .htaccess
    Surcharges autorisées:AuthConfig
    Statut:Base
    Module:mod_authn_socache

    La mise en cache des données d'authentification peut constituer un trou de sécurité, bien qu'un mise en cache de courte durée ne posera probablement pas de problème. En général, il est conseillé de conserver les entrées du cache de façon à ce que la charge du serveur d'arrière-plan reste normale, mais pas plus longtemps ; une durée de vie plus longue peut être paramétrée si les changements d'utilisateurs et de mots de passe sont peu fréquents. La durée de vie par défaut de 300 secondes (5 minutes) est à la fois raisonnable et suffisamment importante pour réduire la charge d'un serveur d'arrière-plan comme dbd (requêtes SQL).

    Cette durée de vie ne doit pas être confondue avec la durée de vie de session qui est un tout autre sujet. Cependant, vous devez utiliser votre logiciel de gestion de session pour vérifier si les données d'authentification mises en cache peuvent allonger accidentellement une session, et en tenir compte lorsque vous définissez la durée de vie.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_so.html0000644000000000000500000000072513362070302016366 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_so.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_so.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: mod_so.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: mod_so.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: mod_so.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/mod_dav_lock.html.en0000644000000000000500000002341713412755316020146 0ustar rootsrc mod_dav_lock - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_dav_lock

    Available Languages:  en  |  fr  |  ja 

    Description:Generic locking module for mod_dav
    Status:Extension
    Module Identifier:dav_lock_module
    Source File:mod_dav_lock.c
    Compatibility:Available in version 2.1 and later

    Summary

    This module implements a generic locking API which can be used by any backend provider of mod_dav. It requires at least the service of mod_dav. But without a backend provider which makes use of it, it's useless and should not be loaded into the server. A sample backend module which actually utilizes mod_dav_lock is mod_dav_svn, the subversion provider module.

    Note that mod_dav_fs does not need this generic locking module, because it uses its own more specialized version.

    In order to make mod_dav_lock functional, you just have to specify the location of the lock database using the DavGenericLockDB directive described below.

    Developer's Note

    In order to retrieve the pointer to the locking provider function, you have to use the ap_lookup_provider API with the arguments dav-lock, generic, and 0.

    top

    DavGenericLockDB Directive

    Description:Location of the DAV lock database
    Syntax:DavGenericLockDB file-path
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_dav_lock

    Use the DavGenericLockDB directive to specify the full path to the lock database, excluding an extension. If the path is not absolute, it will be interpreted relative to ServerRoot. The implementation of mod_dav_lock uses a SDBM database to track user locks.

    Example

    DavGenericLockDB var/DavLock

    The directory containing the lock database file must be writable by the User and Group under which Apache is running. For security reasons, you should create a directory for this purpose rather than changing the permissions on an existing directory. In the above example, Apache will create files in the var/ directory under the ServerRoot with the base filename DavLock and an extension added by the server.

    Available Languages:  en  |  fr  |  ja 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_isapi.html.ko.euc-kr0000644000000000000500000005317513412755316020671 0ustar rootsrc mod_isapi - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¸ðµâ mod_isapi

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.
    ¼³¸í:Windows¿ë ¾ÆÆÄÄ¡¿¡¼­ ISAPI Extension »ç¿ë
    »óÅÂ:Base
    ¸ðµâ¸í:isapi_module
    ¼Ò½ºÆÄÀÏ:mod_isapi.c
    Áö¿ø:Win32 only

    ¿ä¾à

    ÀÌ ¸ðµâÀº Internet Server extension API¸¦ ±¸ÇöÇÑ´Ù. ±×·¡¼­ Á¦¾àÀº ÀÖÁö¸¸ Windows¿ë ¾ÆÆÄÄ¡¿¡¼­ Internet Server extensionÀ» (Áï, ISAPI .dll ¸ðµâ) »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    ISAPI extension ¸ðµâ(.dll ÆÄÀÏ)Àº Á¦»ïÀÚ°¡ ÀÛ¼ºÇÑ´Ù. Apache GroupÀÌ ÀÌµé ¸ðµâÀ» ¸¸µéÁö ¾Ê¾ÒÀ¸¸ç, Áö¿øµµ ÇÏÁö ¾Ê´Â´Ù. ISAPI extension »ç¿ë¿¡ °üÇÑ ¹®Á¦´Â ISAPI Á¦ÀÛÀÚ¿¡°Ô Á÷Á¢ ¿¬¶ôÇÏ±æ ¹Ù¶õ´Ù. Á¦¹ß ÀÌ·± ¹®Á¦¸¦ ¾ÆÆÄÄ¡ ¸ÞÀϸµ¸®½ºÆ®³ª ¹ö±×º¸°í ÆäÀÌÁö¿¡ ¿Ã¸®Áö ¸¶¶ó.

    top

    »ç¿ë¹ý

    ¼­¹ö¼³Á¤ÆÄÀÏ¿¡¼­ AddHandler Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ISAPI ÆÄÀÏ È®ÀåÀÚ¿Í isapi-handler Çڵ鷯¸¦ ¿¬°áÇÑ´Ù. .dll ÆÄÀÏÀ» ISAPI extensionÀ¸·Î ó¸®ÇÏ·Á¸é httpd.conf ÆÄÀÏ¿¡ ´ÙÀ½°ú °°ÀÌ Ãß°¡ÇÑ´Ù.

    AddHandler isapi-handler .dll

    ¾ÆÆÄÄ¡ ¼­¹ö´Â ¿äûÇÑ ¸ðµâÀ» ¸Þ¸ð¸®¿¡ °è¼Ó µÑ ¼ö ¾ø´Ù. ±×·¯³ª httpd.conf¿¡¼­ ´ÙÀ½°ú °°Àº ¼³Á¤À¸·Î ƯÁ¤ ¸ðµâÀ» ¹Ì¸® ÀоîµéÀÏ ¼ö´Â ÀÖ´Ù.

    ISAPICacheFile c:/WebWork/Scripts/ISAPI/mytest.dll

    ISAPI extensionÀ» ¹Ì¸® ÀоîµéÀÌ´øÁö ¹Ì¸® ÀоîµéÀÌÁö ¾Ê´øÁö °ü°è¾øÀÌ ISAPI extensionÀº CGI ½ºÅ©¸³Æ®¿Í µ¿ÀÏÇÑ ±ÇÇѰú Á¦¾àÀ» µû¸¥´Ù. Áï, ISAPI .dll ÆÄÀÏÀÌ ÀÖ´Â µð·ºÅ丮¿¡ Options ExecCGI°¡ ÇÊ¿äÇÏ´Ù.

    mod_isapiÀÇ ISAPI Áö¿ø¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ³»¿ë°ú ¼³¸íÀº Ãß°¡ ¼³¸í°ú °³¹ßÀÚ Á¤º¸¸¦ Âü°íÇ϶ó.

    top

    Ãß°¡ ¼³¸í

    ¾ÆÆÄÄ¡ ISAPI ±¸ÇöÀº ºñµ¿±â ÀÔÃâ·Â¿¡ ´ëÇÑ "¸¶ÀÌÅ©·Î¼ÒÇÁÆ® ƯÀ¯ÀÇ" È®Àå±â´ÉÀ» Á¦¿ÜÇÑ ISAPI 2.0 ±Ô¾àÀ» ¸ðµÎ ¸¸Á·ÇÑ´Ù. ¾ÆÆÄÄ¡ÀÇ ÀÔÃâ·Â ±¸Á¶·Î´Â ISAPI°¡ »ç¿ëÇÒ ¼ö ÀÖ´Â ¹æ½ÄÀ¸·Î ºñµ¿±â ÀÔÃâ·ÂÀ» ÇÒ ¼ö ¾ø´Ù. ISA°¡ ºñµ¿±â ÀÔÃâ·Â°ú °°ÀÌ Áö¿øÇÏÁö ¾Ê´Â ±â´ÉÀ» »ç¿ëÇÏ·Á ÇÑ´Ù¸é, µð¹ö±ë¿¡ µµ¿òÀ» ÁÖ±âÀ§ÇØ ¿À·ù ·Î±×¿¡ ±â·ÏÀ» ³²±ä´Ù. ·Î±×°¡ ¸Å¿ì Ä¿Áú ¼ö Àֱ⶧¹®¿¡ ISAPILogNotSupported Off Áö½Ã¾î¸¦ »ç¿ëÇÏ¸é ·Î±×¿¡ ±â·ÏÇÏÁö ¾Ê´Â´Ù.

    Microsoft IIS¿Í °°Àº ¼­¹ö´Â ISAPI extensionÀ» ¸Þ¸ð¸®·Î Àоîµé¿©¼­ ¸Þ¸ð¸® »ç¿ë·®ÀÌ ¸Å¿ì ¸¹Áö ¾Ê°Å³ª Ưº°È÷ ¼³Á¤ÇÏÁö ¾Ê´ÂÇÑ ±×´ë·Î ¸Þ¸ð¸®¿¡ µÐ´Ù. ¾ÆÆÄÄ¡´Â ÇöÀç ISAPICacheFile Áö½Ã¾î¸¦ »ç¿ëÇÏÁö ¾Ê´Â´Ù¸é ¿äûÀ» ¹ÞÀ»¶§¸¶´Ù ISAPI extensionÀ» ¸Þ¸ð¸®¿¡ ÀоîµéÀÌ°í ¹ö¸°´Ù. ºñÈ¿À²ÀûÀÌÁö¸¸, ¾ÆÆÄÄ¡ÀÇ ¸Þ¸ð¸® ±¸Á¶»ó À̰ÍÀÌ °¡Àå È¿À²ÀûÀÎ ¹æ¹ýÀÌ´Ù. ¿©·¯ ISAPI ¸ðµâÀÌ ¾ÆÆÄÄ¡ ¼­¹ö¿Í ¾à°£ ȣȯÀÌ ¾È¸Â±â¶§¹®¿¡ ¼­¹öÀÇ ¾ÈÁ¤¼ºÀ» À§ÇØ ¸ðµâÀ» ¸Þ¸ð¸®¿¡¼­ ¹ö¸°´Ù.

    ¶Ç, ¾ÆÆÄÄ¡´Â ISAPI ExtensionÀ» Áö¿øÇÏÁö¸¸, ISAPI Filter¸¦ Áö¿øÇÏÁö ¾ÊÀ½À» ±â¾ïÇ϶ó. ³ªÁß¿¡ ÇÊÅ͸¦ Áö¿øÇÒ ¼ö ÀÖÁö¸¸, ÇöÀç´Â °èȹÀÌ ¾ø´Ù.

    top

    °³¹ßÀÚ Á¤º¸

    ¾ÆÆÄÄ¡ 2.0 mod_isapi ¸ðµâÀ» ÇÁ·Î±×·¡¹ÖÇÑ´Ù¸é, ServerSupportFunction È£ÃâÀ» ´ÙÀ½ Áö½Ã¾î·Î Á¦ÇÑÇØ¾ß ÇÑ´Ù.

    HSE_REQ_SEND_URL_REDIRECT_RESP
    »ç¿ëÀÚ¸¦ ´Ù¸¥ À§Ä¡·Î ¸®´ÙÀÌ·º¼ÇÇÑ´Ù.
    ¿ÏÀüÇÑ URLÀ» »ç¿ëÇØ¾ß ÇÑ´Ù (¿¹¸¦ µé¾î, http://server/location).
    HSE_REQ_SEND_URL
    »ç¿ëÀÚ¸¦ ´Ù¸¥ À§Ä¡·Î ¸®´ÙÀÌ·º¼ÇÇÑ´Ù.
    ¿ÏÀüÇÑ URLÀÌ ¾Æ´Ï¸ç, ÇÁ·ÎÅäÄݰú ¼­¹ö¸íÀ» ³Ñ±æ ¼ö ¾ø´Ù (¿¹¸¦ µé¾î, /location°°Àº °Í¸¸ °¡´É).
    ºê¶ó¿ìÀú°¡ ¾Æ´Ï¶ó ¼­¹ö°¡ ¸®´ÙÀÌ·º¼ÇÀ» ó¸®ÇÑ´Ù.

    °æ°í

    ÃÖ±Ù ¹®¼­¸¦ º¸¸é Microsoft°¡ µÎ HSE_REQ_SEND_URL ±â´É°£ÀÇ Â÷À̸¦ ¾ø¾Ø °Íó·³ º¸ÀδÙ. ¾ÆÆÄÄ¡´Â °è¼Ó ÀÌ µÑÀÇ ¾Æ±Ô¸ÕÆ® Á¶°Ç°ú ÇൿÀ» ´Ù¸£°Ô ó¸®ÇÒ °ÍÀÌ´Ù.

    HSE_REQ_SEND_RESPONSE_HEADER
    headers ¹®ÀÚ¿­ ¾Æ±Ô¸ÕÆ®¿¡ ºóÁÙÀÌ (Áٹٲ޹®ÀÚ°¡ µÎ¹ø ¿¬¼Ó) ÀÖ´Ù¸é ¾ÆÆÄÄ¡´Â Çì´õ ´ÙÀ½ ³»¿ëÀ» ÀÀ´ä ³»¿ëÀ¸·Î »ç¿ëÇÑ´Ù. headers ¾Æ±Ô¸ÕÆ®°¡ NULL·Î ³¡³ª±â¶§¹®¿¡, ÀÀ´ä ³»¿ë¿¡ NULLÀ» »ç¿ëÇÒ ¼ö ¾ø´Ù.
    HSE_REQ_DONE_WITH_SESSION
    ISAPI°¡ 󸮸¦ ¸¶Ä¡¸é ¼¼¼ÇÀÌ ³¡³ª±â¶§¹®¿¡ ¾ÆÆÄÄ¡´Â ¾Æ¹« Àϵµ ÇÏÁö ¾Ê´Â´Ù.
    HSE_REQ_MAP_URL_TO_PATH
    ¾ÆÆÄÄ¡´Â °¡»ó À̸§À» ¹°¸®Àû(½ÇÁ¦) À̸§À¸·Î º¯È¯ÇÑ´Ù.
    HSE_APPEND_LOG_PARAMETER
    ¹®±¸¸¦ ¾Æ·¡ ·Î±×Áß ÇѰ÷¿¡ ³²±ä´Ù.

    ù¹øÂ°·Î ³ª¿Â %{isapi-parameter}n Ç׸ñÀº ¾ðÁ¦³ª »ç¿ëÇÒ ¼ö ÀÖÀ¸¸ç ±ÇÀåÇÑ´Ù.

    HSE_REQ_IS_KEEP_CONN
    Çù»óµÈ Keep-Alive »óŸ¦ ¹ÝȯÇÑ´Ù.
    HSE_REQ_SEND_RESPONSE_HEADER_EX
    fKeepConn ¿É¼ÇÀ» ¹«½ÃÇÏ´Â °ÍÀ» Á¦¿ÜÇϰí´Â ¹®¼­¿¡ ³ª¿Âµ¥·Î µ¿ÀÛÇÑ´Ù.
    HSE_REQ_IS_CONNECTED
    ¿äûÀÌ Áß°£¿¡ ²÷¾îÁ³´Ù¸é false¸¦ ¹ÝȯÇÑ´Ù.

    Áö¿øÇÏÁö ¾Ê´Â ServerSupportFunction È£ÃâÀ» ÇÏ¸é ¾ÆÆÄÄ¡´Â FALSE¸¦ ¹ÝȯÇϰí GetLastError °ªÀ» ERROR_INVALID_PARAMETER·Î ¼³Á¤ÇÑ´Ù.

    ReadClient´Â (ISAPIReadAheadBuffer·Î Á¤ÀÇÇÑ) Ãʱâ¹öÆÛÅ©±â¸¦ ³Ñ¾î¼± ¿äû ³»¿ëÀ» °¡Á®¿Â´Ù. ISAPIReadAheadBuffer ¼³Á¤ (ISAPI Çڵ鷯¸¦ ºÎ¸£±âÀü ¹öÆÛÀÇ ¹ÙÀÌÆ®¼ö) º¸´Ù ªÀº ¿äûÀº extensionÀ» ºÎ¸¦¶§ ÀüºÎ Àü´ÞµÈ´Ù. ¿äûÀÌ ±æ¸é, ISAPI extensionÀº ReadClient·Î ³ª¸ÓÁö ¿äû ³»¿ëÀ» °¡Á®¿Í¾ß ÇÑ´Ù.

    WriteClient¸¦ Áö¿øÇÏÁö¸¸, HSE_IO_SYNC ¿É¼Ç¸¸ »ç¿ëÇϰųª (0 °ª) ¾Æ¹« ¿É¼Çµµ »ç¿ëÇÏÁö ¾Ê¾Æ¾ß ÇÑ´Ù. ´Ù¸¥ WriteClient ¿äûÀº FALSE¸¦ ¹ÝȯÇÏ¸ç ½ÇÆÐÇϰí, GetLastError °ªÀº ERROR_INVALID_PARAMETER°¡ µÈ´Ù.

    GetServerVariableÀº Áö¿øÇÏÁö¸¸, (´Ù¸¥ ¼­¹ö¿¡¼­ Á¤ÀÇÇÏ´Â) È®Àå ¼­¹öº¯¼ö´Â ¾ø´Ù. GetServerVariable¿¡¼­ ¸ðµç ÀϹÝÀûÀÎ ¾ÆÆÄÄ¡ CGI ȯ°æº¯¼ö¿Í ALL_HTTP, ALL_RAW °ªÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù.

    ¾ÆÆÄÄ¡ 2.0 mod_isapi´Â ÀÌÈÄ ISAPI ±Ô¾à¿¡ ³ª¿Â Ãß°¡ ±â´ÉÀ» Áö¿øÇϰí, ºñµ¿±â ÀÔÃâ·Â°ú TransmitFile ±â´ÉÀ» Á¶±Ý Èä³»³½´Ù. ¶Ç, ISAPI .dllÀ» ¹Ì¸® Àоîµé¿©¼­ ¼º´ÉÀ» ³ôÀÌ´Â ¾ÆÆÄÄ¡ 1.3 mod_isapi¿¡´Â ¾ø´Â ±â´ÉÀ» Áö¿øÇÑ´Ù.

    top

    ISAPIAppendLogToErrors Áö½Ã¾î

    ¼³¸í:ISAPI exntensionÀÇ HSE_APPEND_LOG_PARAMETER ¿äûÀ» ¿À·ù ·Î±×¿¡ ±â·ÏÇÑ´Ù
    ¹®¹ý:ISAPIAppendLogToErrors on|off
    ±âº»°ª:ISAPIAppendLogToErrors off
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_isapi

    ISAPI exntensionÀÇ HSE_APPEND_LOG_PARAMETER ¿äûÀ» ¿À·ù ·Î±×¿¡ ±â·ÏÇÑ´Ù.

    top

    ISAPIAppendLogToQuery Áö½Ã¾î

    ¼³¸í:ISAPI exntensionÀÇ HSE_APPEND_LOG_PARAMETER ¿äûÀ» ÁúÀǹ®ÀÚ¿­¿¡ ±â·ÏÇÑ´Ù
    ¹®¹ý:ISAPIAppendLogToQuery on|off
    ±âº»°ª:ISAPIAppendLogToQuery on
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_isapi

    ISAPI exntensionÀÇ HSE_APPEND_LOG_PARAMETER ¿äûÀ» ÁúÀǹ®ÀÚ¿­¿¡ ±â·ÏÇÑ´Ù (CustomLog %q Ç׸ñ¿¡ µ¡ºÙÀδÙ).

    top

    ISAPICacheFile Áö½Ã¾î

    ¼³¸í:¼­¹ö°¡ ½ÃÀÛÇÒ¶§ ¸Þ¸ð¸®·Î ÀоîµéÀÏ ISAPI .dll ÆÄÀϵé
    ¹®¹ý:ISAPICacheFile file-path [file-path] ...
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®
    »óÅÂ:Base
    ¸ðµâ:mod_isapi

    ¾ÆÆÄÄ¡ ¼­¹ö°¡ ½ÃÀÛÇÒ¶§ ¸Þ¸ð¸®·Î Àоîµé¿©¼­ ¼­¹ö¸¦ Á¾·áÇÒ¶§±îÁö ¸Þ¸ð¸®¿¡ ³²¾ÆÀÖÀ» ÆÄÀϸíÀ» °ø¹éÀ¸·Î ±¸ºÐÇÏ¿© ÁöÁ¤ÇÑ´Ù. ÀÌ Áö½Ã¾î´Â ISAPI .dll ÆÄÀϺ°·Î ¿©·¯¹ø »ç¿ëÇÒ ¼ö ÀÖ´Ù. ÆÄÀÏÀÇ Àüü °æ·Î¸¦ Àû´Â´Ù. Àý´ë °æ·Î°¡ ¾Æ´Ï¸é ServerRoot¿¡ »ó´ë °æ·Î·Î ¹Þ¾ÆµéÀδÙ.

    top

    ISAPIFakeAsync Áö½Ã¾î

    ¼³¸í:ºñµ¿±â ISAPI ÄݹéÀ» Áö¿øÇϴ ôÇÑ´Ù
    ¹®¹ý:ISAPIFakeAsync on|off
    ±âº»°ª:ISAPIFakeAsync off
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_isapi

    onÀ¸·Î ¼³Á¤ÇÏ¸é ºñµ¿±â ISAPI Äݹé Áö¿øÀ» Èä³»³½´Ù.

    top

    ISAPILogNotSupported Áö½Ã¾î

    ¼³¸í:ISAPI extensionÀÌ Áö¿øÇÏÁö ¾Ê´Â ±â´ÉÀ» ¿äûÇÏ¸é ·Î±×¿¡ ±â·ÏÇÑ´Ù
    ¹®¹ý:ISAPILogNotSupported on|off
    ±âº»°ª:ISAPILogNotSupported off
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_isapi

    ISAPI extensionÀÌ Áö¿øÇÏÁö ¾Ê´Â ±â´ÉÀ» ¿äûÇÏ¸é ¼­¹ö ¿À·ù ·Î±×¿¡ ±â·ÏÇÑ´Ù. ³ªÁß¿¡ °ü¸®ÀÚ°¡ ¹®Á¦¸¦ ÃßÀûÇϴµ¥ µµ¿òÀÌ µÈ´Ù. ¿øÇÏ´Â ¸ðµç ISAPI ¸ðµâÀÌ Á¤»óÀûÀ¸·Î µ¿ÀÛÇÏ¸é ´Ù½Ã off·Î µÇµ¹·Á¾ß ÇÑ´Ù.

    top

    ISAPIReadAheadBuffer Áö½Ã¾î

    ¼³¸í:ISAPI extensionÀÇ ¹Ì¸®Àбâ¹öÆÛ(read ahead buffer) Å©±â
    ¹®¹ý:ISAPIReadAheadBuffer size
    ±âº»°ª:ISAPIReadAheadBuffer 49152
    »ç¿ëÀå¼Ò:ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess
    Override ¿É¼Ç:FileInfo
    »óÅÂ:Base
    ¸ðµâ:mod_isapi

    ISAPI extensionÀ» óÀ½ È£ÃâÇÒ¶§ ¹Ì¸®Àбâ¹öÆÛÀÇ ÃÖ´ë Å©±â¸¦ ÁöÁ¤ÇÑ´Ù. (ÀÌ Å©±âº¸´Ù Å«) ³ª¸ÓÁö ÀÚ·á´Â ReadClient ÄݹéÀ» »ç¿ëÇÏ¿© Àоî¾ß ÇÑ´Ù. ¾î¶² ISAPI extensionÀº ReadClient ±â´ÉÀ» Áö¿øÇÏÁö ¾Ê´Â´Ù. ÀÌ °æ¿ì ISAPI extension Á¦ÀÛÀÚ¿¡°Ô ¹®ÀÇÇ϶ó.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_authz_core.html0000644000000000000500000000034013362070302020101 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: mod_authz_core.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: mod_authz_core.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/mod/worker.html.fr.utf80000644000000000000500000004042113412755316017722 0ustar rootsrc worker - Serveur HTTP Apache Version 2.4
    <-

    Apache MPM worker

    Langues Disponibles:  de  |  en  |  fr  |  ja  |  tr 

    Description:Module multi-processus implémentant un serveur web hybride multi-processus multi-thread
    Statut:MPM
    Identificateur de Module:mpm_worker_module
    Fichier Source:worker.c

    Sommaire

    Ce module multi-processus (MPM) implémente un serveur hybride multi-processus multi-thread. En utilisant les threads pour servir les requêtes, il peut en traiter un grand nombre tout en consommant moins de ressources qu'un serveur à base de processus. Cependant, il conserve une grande partie de la stabilité d'un serveur à base de processus en maintenant plusieurs processus disponibles, chacun de ces derniers possédant de nombreux threads.

    Les directives les plus importantes qui permettent de contrôler ce MPM sont ThreadsPerChild, qui définit le nombre de threads lancés par chaque processus enfant et MaxRequestWorkers, qui définit le nombre global maximum de threads qui peuvent être lancés.

    top

    Comment ça marche

    Un processus de contrôle unique (le parent) a pour tâche de lancer les processus enfants. Chaque processus enfant crée un nombre fixe de threads serveurs selon la valeur de la directive ThreadsPerChild, ainsi qu'un thread chargé d'attendre les connexions et de les passer à un thread serveur pour traitement au fur et à mesure de leur arrivée.

    Le serveur HTTP Apache essaie toujours de maintenir un jeu de threads serveurs inactifs ou en réserve, qui se tiennent prêts à traiter les requêtes entrantes. De cette façon, les clients n'ont pas besoin d'attendre la création d'un nouveau thread ou d'un nouveau processus pour que leurs requêtes puissent être traitées. Le nombre de processus lancés initialement est défini par la directive StartServers. En cours de fonctionnement, le serveur évalue le nombre total de threads inactifs dans tous les processus, et en crée ou en arrête de façon à maintenir ce nombre à l'intérieur des limites définies par les directives MinSpareThreads et MaxSpareThreads. Comme ce module s'auto-contrôle de manière efficace, on peut en général conserver les valeurs par défaut. Le nombre maximum de clients pouvant être servis simultanément (c'est à dire le nombre global maximum de threads pour tous les processus) est défini par la directive MaxRequestWorkers. Le nombre maximum de processus enfants actifs est défini par la valeur de la directive MaxRequestWorkers divisée par la valeur de la directive ThreadsPerChild.

    Deux directives permettent de fixer des limites absolues pour le nombre de processus enfants actifs et le nombre de threads serveurs par processus enfant, et ne peuvent être modifiées qu'en arrêtant complètement le serveur et en le démarrant à nouveau. La valeur de la directive ServerLimit constitue une limite absolue pour le nombre de processus enfants actifs, et doit être supérieure ou égale à la valeur de la directive MaxRequestWorkers divisée par la valeur de la directive ThreadsPerChild. La valeur de la directive ThreadLimit constitue une limite absolue pour le nombre de threads par processus enfant, et doit être supérieure ou égale à la valeur de la directive ThreadsPerChild.

    En plus du jeu de processus enfants actifs, il peut exister quelques processus enfants en cours d'arrêt, mais dont au moins un thread serveur est encore en train de traiter une connexion client existante. Il peut subsister en théorie jusqu'à MaxRequestWorkers processus en cours d'arrêt, bien qu'en réalité, ce nombre sera en général beaucoup plus petit. Ce comportement peut être évité en désactivant l'arrêt de processus enfants individuels de la manière suivante :

    Voici un exemple typique de configuration du contrôle processus-thread pour le MPM worker :

    ServerLimit         16
    StartServers         2
    MaxRequestWorkers  150
    MinSpareThreads     25
    MaxSpareThreads     75
    ThreadsPerChild     25

    Alors que le processus parent est en général démarré en tant que root sous Unix afin de se mettre en écoute du port 80, les processus enfants et les threads sont lancés par le serveur sous un utilisateur avec privilèges restreints. On peut utiliser les directives User et Group pour définir les privilèges des processus enfants. Les processus enfants doivent pouvoir être en mesure de lire tous les contenus destinés à être servis, mais doivent avoir des privilèges aussi bas que possible. De plus, ces directives définissent également les privilèges dont vont hériter les scripts CGI (sauf si on utilise suexec).

    La directive MaxConnectionsPerChild permet de définir la fréquence à laquelle le serveur recycle ses processus en arrêtant les plus anciens et en en lançant de nouveaux.

    Ce module MPM utilise le mutex mpm-accept pour sérialiser l'accès aux connexions entrantes lorsqu'un problème d'afflux de requêtes peut survenir (en général, lorsqu'il y a plusieurs sockets en écoute). Les différents aspects de l'implémentation de ce mutex peuvent être configurés via la directive Mutex. Vous trouverez des informations plus détaillées à propos de ce mutex dans la documentation sur les conseils en matière de performances.

    Langues Disponibles:  de  |  en  |  fr  |  ja  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_proxy.html.en0000644000000000000500000037201313520523022017527 0ustar rootsrc mod_proxy - Apache HTTP Server Version 2.4
    <-

    Apache Module mod_proxy

    Available Languages:  en  |  fr  |  ja 

    Description:Multi-protocol proxy/gateway server
    Status:Extension
    Module Identifier:proxy_module
    Source File:mod_proxy.c

    Summary

    Warning

    Do not enable proxying with ProxyRequests until you have secured your server. Open proxy servers are dangerous both to your network and to the Internet at large.

    mod_proxy and related modules implement a proxy/gateway for Apache HTTP Server, supporting a number of popular protocols as well as several different load balancing algorithms. Third-party modules can add support for additional protocols and load balancing algorithms.

    A set of modules must be loaded into the server to provide the necessary features. These modules can be included statically at build time or dynamically via the LoadModule directive). The set must include:

    In addition, extended features are provided by other modules. Caching is provided by mod_cache and related modules. The ability to contact remote servers using the SSL/TLS protocol is provided by the SSLProxy* directives of mod_ssl. These additional modules will need to be loaded and configured to take advantage of these features.

    top

    Forward Proxies and Reverse Proxies/Gateways

    Apache HTTP Server can be configured in both a forward and reverse proxy (also known as gateway) mode.

    An ordinary forward proxy is an intermediate server that sits between the client and the origin server. In order to get content from the origin server, the client sends a request to the proxy naming the origin server as the target. The proxy then requests the content from the origin server and returns it to the client. The client must be specially configured to use the forward proxy to access other sites.

    A typical usage of a forward proxy is to provide Internet access to internal clients that are otherwise restricted by a firewall. The forward proxy can also use caching (as provided by mod_cache) to reduce network usage.

    The forward proxy is activated using the ProxyRequests directive. Because forward proxies allow clients to access arbitrary sites through your server and to hide their true origin, it is essential that you secure your server so that only authorized clients can access the proxy before activating a forward proxy.

    A reverse proxy (or gateway), by contrast, appears to the client just like an ordinary web server. No special configuration on the client is necessary. The client makes ordinary requests for content in the namespace of the reverse proxy. The reverse proxy then decides where to send those requests and returns the content as if it were itself the origin.

    A typical usage of a reverse proxy is to provide Internet users access to a server that is behind a firewall. Reverse proxies can also be used to balance load among several back-end servers or to provide caching for a slower back-end server. In addition, reverse proxies can be used simply to bring several servers into the same URL space.

    A reverse proxy is activated using the ProxyPass directive or the [P] flag to the RewriteRule directive. It is not necessary to turn ProxyRequests on in order to configure a reverse proxy.

    top

    Basic Examples

    The examples below are only a very basic idea to help you get started. Please read the documentation on the individual directives.

    In addition, if you wish to have caching enabled, consult the documentation from mod_cache.

    Reverse Proxy

    ProxyPass "/foo" "http://foo.example.com/bar"
    ProxyPassReverse "/foo" "http://foo.example.com/bar"

    Forward Proxy

    ProxyRequests On
    ProxyVia On
    
    <Proxy "*">
      Require host internal.example.com
    </Proxy>
    top

    Access via Handler

    You can also force a request to be handled as a reverse-proxy request, by creating a suitable Handler pass-through. The example configuration below will pass all requests for PHP scripts to the specified FastCGI server using reverse proxy:

    Reverse Proxy PHP scripts

    <FilesMatch "\.php$">
        # Unix sockets require 2.4.7 or later
        SetHandler  "proxy:unix:/path/to/app.sock|fcgi://localhost/"
    </FilesMatch>

    This feature is available in Apache HTTP Server 2.4.10 and later.

    top

    Workers

    The proxy manages the configuration of origin servers and their communication parameters in objects called workers. There are two built-in workers: the default forward proxy worker and the default reverse proxy worker. Additional workers can be configured explicitly.

    The two default workers have a fixed configuration and will be used if no other worker matches the request. They do not use HTTP Keep-Alive or connection reuse. The TCP connections to the origin server will instead be opened and closed for each request.

    Explicitly configured workers are identified by their URL. They are usually created and configured using ProxyPass or ProxyPassMatch when used for a reverse proxy:

    ProxyPass "/example" "http://backend.example.com" connectiontimeout=5 timeout=30

    This will create a worker associated with the origin server URL http://backend.example.com that will use the given timeout values. When used in a forward proxy, workers are usually defined via the ProxySet directive:

    ProxySet "http://backend.example.com" connectiontimeout=5 timeout=30

    or alternatively using Proxy and ProxySet:

    <Proxy "http://backend.example.com">
      ProxySet connectiontimeout=5 timeout=30
    </Proxy>

    Using explicitly configured workers in the forward mode is not very common, because forward proxies usually communicate with many different origin servers. Creating explicit workers for some of the origin servers can still be useful if they are used very often. Explicitly configured workers have no concept of forward or reverse proxying by themselves. They encapsulate a common concept of communication with origin servers. A worker created by ProxyPass for use in a reverse proxy will also be used for forward proxy requests whenever the URL to the origin server matches the worker URL, and vice versa.

    The URL identifying a direct worker is the URL of its origin server including any path components given:

    ProxyPass "/examples" "http://backend.example.com/examples"
    ProxyPass "/docs" "http://backend.example.com/docs"

    This example defines two different workers, each using a separate connection pool and configuration.

    Worker Sharing

    Worker sharing happens if the worker URLs overlap, which occurs when the URL of some worker is a leading substring of the URL of another worker defined later in the configuration file. In the following example

    ProxyPass "/apps" "http://backend.example.com/" timeout=60
    ProxyPass "/examples" "http://backend.example.com/examples" timeout=10

    the second worker isn't actually created. Instead the first worker is used. The benefit is, that there is only one connection pool, so connections are more often reused. Note that all configuration attributes given explicitly for the later worker will be ignored. This will be logged as a warning. In the above example, the resulting timeout value for the URL /examples will be 60 instead of 10!

    If you want to avoid worker sharing, sort your worker definitions by URL length, starting with the longest worker URLs. If you want to maximize worker sharing, use the reverse sort order. See also the related warning about ordering ProxyPass directives.

    Explicitly configured workers come in two flavors: direct workers and (load) balancer workers. They support many important configuration attributes which are described below in the ProxyPass directive. The same attributes can also be set using ProxySet.

    The set of options available for a direct worker depends on the protocol which is specified in the origin server URL. Available protocols include ajp, fcgi, ftp, http and scgi.

    Balancer workers are virtual workers that use direct workers known as their members to actually handle the requests. Each balancer can have multiple members. When it handles a request, it chooses a member based on the configured load balancing algorithm.

    A balancer worker is created if its worker URL uses balancer as the protocol scheme. The balancer URL uniquely identifies the balancer worker. Members are added to a balancer using BalancerMember.

    DNS resolution for origin domains

    DNS resolution happens when the socket to the origin domain is created for the first time. When connection reuse is enabled, each backend domain is resolved only once per child process, and cached for all further connections until the child is recycled. This information should to be considered while planning DNS maintenance tasks involving backend domains. Please also check ProxyPass parameters for more details about connection reuse.

    top

    Controlling Access to Your Proxy

    You can control who can access your proxy via the <Proxy> control block as in the following example:

    <Proxy "*">
      Require ip 192.168.0
    </Proxy>

    For more information on access control directives, see mod_authz_host.

    Strictly limiting access is essential if you are using a forward proxy (using the ProxyRequests directive). Otherwise, your server can be used by any client to access arbitrary hosts while hiding his or her true identity. This is dangerous both for your network and for the Internet at large. When using a reverse proxy (using the ProxyPass directive with ProxyRequests Off), access control is less critical because clients can only contact the hosts that you have specifically configured.

    See Also the Proxy-Chain-Auth environment variable.

    top

    Slow Startup

    If you're using the ProxyBlock directive, hostnames' IP addresses are looked up and cached during startup for later match test. This may take a few seconds (or more) depending on the speed with which the hostname lookups occur.

    top

    Intranet Proxy

    An Apache httpd proxy server situated in an intranet needs to forward external requests through the company's firewall (for this, configure the ProxyRemote directive to forward the respective scheme to the firewall proxy). However, when it has to access resources within the intranet, it can bypass the firewall when accessing hosts. The NoProxy directive is useful for specifying which hosts belong to the intranet and should be accessed directly.

    Users within an intranet tend to omit the local domain name from their WWW requests, thus requesting "http://somehost/" instead of http://somehost.example.com/. Some commercial proxy servers let them get away with this and simply serve the request, implying a configured local domain. When the ProxyDomain directive is used and the server is configured for proxy service, Apache httpd can return a redirect response and send the client to the correct, fully qualified, server address. This is the preferred method since the user's bookmark files will then contain fully qualified hosts.

    top

    Protocol Adjustments

    For circumstances where mod_proxy is sending requests to an origin server that doesn't properly implement keepalives or HTTP/1.1, there are two environment variables that can force the request to use HTTP/1.0 with no keepalive. These are set via the SetEnv directive.

    These are the force-proxy-request-1.0 and proxy-nokeepalive notes.

    <Location "/buggyappserver/">
      ProxyPass "http://buggyappserver:7001/foo/"
      SetEnv force-proxy-request-1.0 1
      SetEnv proxy-nokeepalive 1
    </Location>

    In 2.4.26 and later, the "no-proxy" environment variable can be set to disable mod_proxy processing the current request. This variable should be set with SetEnvIf, as SetEnv is not evaluated early enough.

    top

    Request Bodies

    Some request methods such as POST include a request body. The HTTP protocol requires that requests which include a body either use chunked transfer encoding or send a Content-Length request header. When passing these requests on to the origin server, mod_proxy_http will always attempt to send the Content-Length. But if the body is large and the original request used chunked encoding, then chunked encoding may also be used in the upstream request. You can control this selection using environment variables. Setting proxy-sendcl ensures maximum compatibility with upstream servers by always sending the Content-Length, while setting proxy-sendchunked minimizes resource usage by using chunked encoding.

    Under some circumstances, the server must spool request bodies to disk to satisfy the requested handling of request bodies. For example, this spooling will occur if the original body was sent with chunked encoding (and is large), but the administrator has asked for backend requests to be sent with Content-Length or as HTTP/1.0. This spooling can also occur if the request body already has a Content-Length header, but the server is configured to filter incoming request bodies.

    LimitRequestBody only applies to request bodies that the server will spool to disk

    top

    Reverse Proxy Request Headers

    When acting in a reverse-proxy mode (using the ProxyPass directive, for example), mod_proxy_http adds several request headers in order to pass information to the origin server. These headers are:

    X-Forwarded-For
    The IP address of the client.
    X-Forwarded-Host
    The original host requested by the client in the Host HTTP request header.
    X-Forwarded-Server
    The hostname of the proxy server.

    Be careful when using these headers on the origin server, since they will contain more than one (comma-separated) value if the original request already contained one of these headers. For example, you can use %{X-Forwarded-For}i in the log format string of the origin server to log the original clients IP address, but you may get more than one address if the request passes through several proxies.

    See also the ProxyPreserveHost and ProxyVia directives, which control other request headers.

    Note: If you need to specify custom request headers to be added to the forwarded request, use the RequestHeader directive.

    top

    BalancerGrowth Directive

    Description:Number of additional Balancers that can be added Post-configuration
    Syntax:BalancerGrowth #
    Default:BalancerGrowth 5
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy
    Compatibility:BalancerGrowth is only available in Apache HTTP Server 2.3.13 and later.

    This directive allows for growth potential in the number of Balancers available for a virtualhost in addition to the number pre-configured. It only takes effect if there is at least one pre-configured Balancer.

    top

    BalancerInherit Directive

    Description:Inherit ProxyPassed Balancers/Workers from the main server
    Syntax:BalancerInherit On|Off
    Default:BalancerInherit On
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy
    Compatibility:BalancerInherit is only available in Apache HTTP Server 2.4.5 and later.

    This directive will cause the current server/vhost to "inherit" ProxyPass Balancers and Workers defined in the main server. This can cause issues and inconsistent behavior if using the Balancer Manager and so should be disabled if using that feature.

    The setting in the global server defines the default for all vhosts.

    top

    BalancerMember Directive

    Description:Add a member to a load balancing group
    Syntax:BalancerMember [balancerurl] url [key=value [key=value ...]]
    Context:directory
    Status:Extension
    Module:mod_proxy
    Compatibility:BalancerMember is only available in Apache HTTP Server 2.2 and later.

    This directive adds a member to a load balancing group. It can be used within a <Proxy balancer://...> container directive and can take any of the key value pair parameters available to ProxyPass directives.

    One additional parameter is available only to BalancerMember directives: loadfactor. This is the member load factor - a decimal number between 1.0 (default) and 100.0, which defines the weighted load to be applied to the member in question.

    The balancerurl is only needed when not within a <Proxy balancer://...> container directive. It corresponds to the url of a balancer defined in ProxyPass directive.

    The path component of the balancer URL in any <Proxy balancer://...> container directive is ignored.

    Trailing slashes should typically be removed from the URL of a BalancerMember.

    top

    BalancerPersist Directive

    Description:Attempt to persist changes made by the Balancer Manager across restarts.
    Syntax:BalancerPersist On|Off
    Default:BalancerPersist Off
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy
    Compatibility:BalancerPersist is only available in Apache HTTP Server 2.4.4 and later.

    This directive will cause the shared memory storage associated with the balancers and balancer members to be persisted across restarts. This allows these local changes to not be lost during the normal restart/graceful state transitions.

    top

    NoProxy Directive

    Description:Hosts, domains, or networks that will be connected to directly
    Syntax:NoProxy host [host] ...
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy

    This directive is only useful for Apache httpd proxy servers within intranets. The NoProxy directive specifies a list of subnets, IP addresses, hosts and/or domains, separated by spaces. A request to a host which matches one or more of these is always served directly, without forwarding to the configured ProxyRemote proxy server(s).

    Example

    ProxyRemote  "*"  "http://firewall.example.com:81"
    NoProxy         ".example.com" "192.168.112.0/21"

    The host arguments to the NoProxy directive are one of the following type list:

    Domain

    A Domain is a partially qualified DNS domain name, preceded by a period. It represents a list of hosts which logically belong to the same DNS domain or zone (i.e., the suffixes of the hostnames are all ending in Domain).

    Examples

    .com .example.org.

    To distinguish Domains from Hostnames (both syntactically and semantically; a DNS domain can have a DNS A record, too!), Domains are always written with a leading period.

    Note

    Domain name comparisons are done without regard to the case, and Domains are always assumed to be anchored in the root of the DNS tree; therefore, the two domains .ExAmple.com and .example.com. (note the trailing period) are considered equal. Since a domain comparison does not involve a DNS lookup, it is much more efficient than subnet comparison.

    SubNet

    A SubNet is a partially qualified internet address in numeric (dotted quad) form, optionally followed by a slash and the netmask, specified as the number of significant bits in the SubNet. It is used to represent a subnet of hosts which can be reached over a common network interface. In the absence of the explicit net mask it is assumed that omitted (or zero valued) trailing digits specify the mask. (In this case, the netmask can only be multiples of 8 bits wide.) Examples:

    192.168 or 192.168.0.0
    the subnet 192.168.0.0 with an implied netmask of 16 valid bits (sometimes used in the netmask form 255.255.0.0)
    192.168.112.0/21
    the subnet 192.168.112.0/21 with a netmask of 21 valid bits (also used in the form 255.255.248.0)

    As a degenerate case, a SubNet with 32 valid bits is the equivalent to an IPAddr, while a SubNet with zero valid bits (e.g., 0.0.0.0/0) is the same as the constant _Default_, matching any IP address.

    IPAddr

    A IPAddr represents a fully qualified internet address in numeric (dotted quad) form. Usually, this address represents a host, but there need not necessarily be a DNS domain name connected with the address.

    Example

    192.168.123.7

    Note

    An IPAddr does not need to be resolved by the DNS system, so it can result in more effective apache performance.

    Hostname

    A Hostname is a fully qualified DNS domain name which can be resolved to one or more IPAddrs via the DNS domain name service. It represents a logical host (in contrast to Domains, see above) and must be resolvable to at least one IPAddr (or often to a list of hosts with different IPAddrs).

    Examples

    prep.ai.example.edu
    www.example.org

    Note

    In many situations, it is more effective to specify an IPAddr in place of a Hostname since a DNS lookup can be avoided. Name resolution in Apache httpd can take a remarkable deal of time when the connection to the name server uses a slow PPP link.

    Hostname comparisons are done without regard to the case, and Hostnames are always assumed to be anchored in the root of the DNS tree; therefore, the two hosts WWW.ExAmple.com and www.example.com. (note the trailing period) are considered equal.

    See also

    top

    <Proxy> Directive

    Description:Container for directives applied to proxied resources
    Syntax:<Proxy wildcard-url> ...</Proxy>
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy

    Directives placed in <Proxy> sections apply only to matching proxied content. Shell-style wildcards are allowed.

    For example, the following will allow only hosts in yournetwork.example.com to access content via your proxy server:

    <Proxy "*">
      Require host yournetwork.example.com
    </Proxy>

    The following example will process all files in the foo directory of example.com through the INCLUDES filter when they are sent through the proxy server:

    <Proxy "http://example.com/foo/*">
      SetOutputFilter INCLUDES
    </Proxy>

    Differences from the Location configuration section

    A backend URL matches the configuration section if it begins with the the wildcard-url string, even if the last path segment in the directive only matches a prefix of the backend URL. For example, <Proxy "http://example.com/foo"> matches all of http://example.com/foo, http://example.com/foo/bar, and http://example.com/foobar. The matching of the final URL differs from the behavior of the <Location> section, which for purposes of this note treats the final path component as if it ended in a slash.

    For more control over the matching, see <ProxyMatch>.

    See also

    top

    Proxy100Continue Directive

    Description:Forward 100-continue expectation to the origin server
    Syntax:Proxy100Continue Off|On
    Default:Proxy100Continue On
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy
    Compatibility:Available in version 2.4.39 and later

    This directive determines whether the proxy should forward 100-continue Expect:ation to the origin server and thus let it decide when/if the HTTP request body should be read, or when Off the proxy should generate 100 Continue intermediate response by itself before forwarding the request body.

    Effectiveness

    This option is of use only for HTTP proxying, as handled by mod_proxy_http.

    top

    ProxyAddHeaders Directive

    Description:Add proxy information in X-Forwarded-* headers
    Syntax:ProxyAddHeaders Off|On
    Default:ProxyAddHeaders On
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy
    Compatibility:Available in version 2.3.10 and later

    This directive determines whether or not proxy related information should be passed to the backend server through X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server HTTP headers.

    Effectiveness

    This option is of use only for HTTP proxying, as handled by mod_proxy_http.

    top

    ProxyBadHeader Directive

    Description:Determines how to handle bad header lines in a response
    Syntax:ProxyBadHeader IsError|Ignore|StartBody
    Default:ProxyBadHeader IsError
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy

    The ProxyBadHeader directive determines the behavior of mod_proxy if it receives syntactically invalid response header lines (i.e. containing no colon) from the origin server. The following arguments are possible:

    IsError
    Abort the request and end up with a 502 (Bad Gateway) response. This is the default behavior.
    Ignore
    Treat bad header lines as if they weren't sent.
    StartBody
    When receiving the first bad header line, finish reading the headers and treat the remainder as body. This helps to work around buggy backend servers which forget to insert an empty line between the headers and the body.
    top

    ProxyBlock Directive

    Description:Words, hosts, or domains that are banned from being proxied
    Syntax:ProxyBlock *|word|host|domain [word|host|domain] ...
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy

    The ProxyBlock directive specifies a list of words, hosts and/or domains, separated by spaces. HTTP, HTTPS, and FTP document requests to sites whose names contain matched words, hosts or domains are blocked by the proxy server. The proxy module will also attempt to determine IP addresses of list items which may be hostnames during startup, and cache them for match test as well. That may slow down the startup time of the server.

    Example

    ProxyBlock "news.example.com" "auctions.example.com" "friends.example.com"

    Note that example would also be sufficient to match any of these sites.

    Hosts would also be matched if referenced by IP address.

    Note also that

    ProxyBlock "*"

    blocks connections to all sites.

    top

    ProxyDomain Directive

    Description:Default domain name for proxied requests
    Syntax:ProxyDomain Domain
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy

    This directive is only useful for Apache httpd proxy servers within intranets. The ProxyDomain directive specifies the default domain which the apache proxy server will belong to. If a request to a host without a domain name is encountered, a redirection response to the same host with the configured Domain appended will be generated.

    Example

    ProxyRemote  "*"  "http://firewall.example.com:81"
    NoProxy         ".example.com" "192.168.112.0/21"
    ProxyDomain     ".example.com"
    top

    ProxyErrorOverride Directive

    Description:Override error pages for proxied content
    Syntax:ProxyErrorOverride On|Off
    Default:ProxyErrorOverride Off
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy

    This directive is useful for reverse-proxy setups where you want to have a common look and feel on the error pages seen by the end user. This also allows for included files (via mod_include's SSI) to get the error code and act accordingly. (Default behavior would display the error page of the proxied server. Turning this on shows the SSI Error message.)

    This directive does not affect the processing of informational (1xx), normal success (2xx), or redirect (3xx) responses.

    top

    ProxyIOBufferSize Directive

    Description:Determine size of internal data throughput buffer
    Syntax:ProxyIOBufferSize bytes
    Default:ProxyIOBufferSize 8192
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy

    The ProxyIOBufferSize directive adjusts the size of the internal buffer which is used as a scratchpad for the data between input and output. The size must be at least 512.

    In almost every case, there's no reason to change that value.

    If used with AJP, this directive sets the maximum AJP packet size in bytes. Values larger than 65536 are set to 65536. If you change it from the default, you must also change the packetSize attribute of your AJP connector on the Tomcat side! The attribute packetSize is only available in Tomcat 5.5.20+ and 6.0.2+

    Normally it is not necessary to change the maximum packet size. Problems with the default value have been reported when sending certificates or certificate chains.

    top

    <ProxyMatch> Directive

    Description:Container for directives applied to regular-expression-matched proxied resources
    Syntax:<ProxyMatch regex> ...</ProxyMatch>
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy

    The <ProxyMatch> directive is identical to the <Proxy> directive, except that it matches URLs using regular expressions.

    From 2.4.8 onwards, named groups and backreferences are captured and written to the environment with the corresponding name prefixed with "MATCH_" and in upper case. This allows elements of URLs to be referenced from within expressions and modules like mod_rewrite. In order to prevent confusion, numbered (unnamed) backreferences are ignored. Use named groups instead.

    <ProxyMatch "^http://(?<sitename>[^/]+)">
        Require ldap-group cn=%{env:MATCH_SITENAME},ou=combined,o=Example
    </ProxyMatch>

    See also

    top

    ProxyMaxForwards Directive

    Description:Maximium number of proxies that a request can be forwarded through
    Syntax:ProxyMaxForwards number
    Default:ProxyMaxForwards -1
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy
    Compatibility:Default behaviour changed in 2.2.7

    The ProxyMaxForwards directive specifies the maximum number of proxies through which a request may pass if there's no Max-Forwards header supplied with the request. This may be set to prevent infinite proxy loops or a DoS attack.

    Example

    ProxyMaxForwards 15

    Note that setting ProxyMaxForwards is a violation of the HTTP/1.1 protocol (RFC2616), which forbids a Proxy setting Max-Forwards if the Client didn't set it. Earlier Apache httpd versions would always set it. A negative ProxyMaxForwards value, including the default -1, gives you protocol-compliant behavior but may leave you open to loops.

    top

    ProxyPass Directive

    Description:Maps remote servers into the local server URL-space
    Syntax:ProxyPass [path] !|url [key=value [key=value ...]] [nocanon] [interpolate] [noquery]
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy
    Compatibility:Unix Domain Socket (UDS) support added in 2.4.7

    This directive allows remote servers to be mapped into the space of the local server. The local server does not act as a proxy in the conventional sense but appears to be a mirror of the remote server. The local server is often called a reverse proxy or gateway. The path is the name of a local virtual path; url is a partial URL for the remote server and cannot include a query string.

    It is strongly suggested to review the concept of a Worker before proceeding any further with this section.
    This directive is not supported within <Directory>, <If> and <Files> containers.
    The ProxyRequests directive should usually be set off when using ProxyPass.

    In 2.4.7 and later, support for using a Unix Domain Socket is available by using a target which prepends unix:/path/lis.sock|. For example, to proxy HTTP and target the UDS at /home/www.socket, you would use unix:/home/www.socket|http://localhost/whatever/.

    Note: The path associated with the unix: URL is DefaultRuntimeDir aware.

    When used inside a <Location> section, the first argument is omitted and the local directory is obtained from the <Location>. The same will occur inside a <LocationMatch> section; however, ProxyPass does not interpret the regexp as such, so it is necessary to use ProxyPassMatch in this situation instead.

    Suppose the local server has address http://example.com/; then

    <Location "/mirror/foo/">
        ProxyPass "http://backend.example.com/"
    </Location>

    will cause a local request for http://example.com/mirror/foo/bar to be internally converted into a proxy request to http://backend.example.com/bar.

    If you require a more flexible reverse-proxy configuration, see the RewriteRule directive with the [P] flag.

    The following alternative syntax is possible; however, it can carry a performance penalty when present in very large numbers. The advantage of the below syntax is that it allows for dynamic control via the Balancer Manager interface:

    ProxyPass "/mirror/foo/" "http://backend.example.com/"

    If the first argument ends with a trailing /, the second argument should also end with a trailing /, and vice versa. Otherwise, the resulting requests to the backend may miss some needed slashes and do not deliver the expected results.

    The ! directive is useful in situations where you don't want to reverse-proxy a subdirectory, e.g.

    <Location "/mirror/foo/">
        ProxyPass "http://backend.example.com/"
    </Location>
    <Location "/mirror/foo/i">
        ProxyPass "!"
    </Location>
    ProxyPass "/mirror/foo/i" "!"
    ProxyPass "/mirror/foo" "http://backend.example.com"

    will proxy all requests to /mirror/foo to backend.example.com except requests made to /mirror/foo/i.

    Mixing ProxyPass settings in different contexts does not work:

    ProxyPass "/mirror/foo/i" "!"
    <Location "/mirror/foo/">
        ProxyPass "http://backend.example.com/"
    </Location>

    In this case, a request to /mirror/foo/i will get proxied, because the ProxyPass directive in the Location block will be evaluated first. The fact that ProxyPass supports both server and directory contexts does not mean that their scope and position in the configuration file will guarantee any ordering or override.

    Ordering ProxyPass Directives

    The configured ProxyPass and ProxyPassMatch rules are checked in the order of configuration. The first rule that matches wins. So usually you should sort conflicting ProxyPass rules starting with the longest URLs first. Otherwise, later rules for longer URLS will be hidden by any earlier rule which uses a leading substring of the URL. Note that there is some relation with worker sharing.

    Ordering ProxyPass Directives in Locations

    Only one ProxyPass directive can be placed in a Location block, and the most specific location will take precedence.

    Exclusions and the no-proxy environment variable

    Exclusions must come before the general ProxyPass directives. In 2.4.26 and later, the "no-proxy" environment variable is an alternative to exclusions, and is the only way to configure an exclusion of a ProxyPass directive in Location context. This variable should be set with SetEnvIf, as SetEnv is not evaluated early enough.

    ProxyPass key=value Parameters

    In Apache HTTP Server 2.1 and later, mod_proxy supports pooled connections to a backend server. Connections created on demand can be retained in a pool for future use. Limits on the pool size and other settings can be coded on the ProxyPass directive using key=value parameters, described in the tables below.

    Maximum connections to the backend

    By default, mod_proxy will allow and retain the maximum number of connections that could be used simultaneously by that web server child process. Use the max parameter to reduce the number from the default. The pool of connections is maintained per web server child process, and max and other settings are not coordinated among all child processes, except when only one child process is allowed by configuration or MPM design.

    Use the ttl parameter to set an optional time to live; connections which have been unused for at least ttl seconds will be closed. ttl can be used to avoid using a connection which is subject to closing because of the backend server's keep-alive timeout.

    Example

    ProxyPass "/example" "http://backend.example.com" max=20 ttl=120 retry=300
    Worker|BalancerMember parameters
    Parameter Default Description
    min 0 Minimum number of connection pool entries, unrelated to the actual number of connections. This only needs to be modified from the default for special circumstances where heap memory associated with the backend connections should be preallocated or retained.
    max 1...n Maximum number of connections that will be allowed to the backend server. The default for this limit is the number of threads per process in the active MPM. In the Prefork MPM, this is always 1, while with other MPMs, it is controlled by the ThreadsPerChild directive.
    smax max Retained connection pool entries above this limit are freed during certain operations if they have been unused for longer than the time to live, controlled by the ttl parameter. If the connection pool entry has an associated connection, it will be closed. This only needs to be modified from the default for special circumstances where connection pool entries and any associated connections which have exceeded the time to live need to be freed or closed more aggressively.
    acquire - If set, this will be the maximum time to wait for a free connection in the connection pool, in milliseconds. If there are no free connections in the pool, the Apache httpd will return SERVER_BUSY status to the client.
    connectiontimeout timeout Connect timeout in seconds. The number of seconds Apache httpd waits for the creation of a connection to the backend to complete. By adding a postfix of ms, the timeout can be also set in milliseconds.
    disablereuse Off This parameter should be used when you want to force mod_proxy to immediately close a connection to the backend after being used, and thus, disable its persistent connection and pool for that backend. This helps in various situations where a firewall between Apache httpd and the backend server (regardless of protocol) tends to silently drop connections or when backends themselves may be under round- robin DNS. When connection reuse is enabled each backend domain is resolved (with a DNS query) only once per child process and cached for all further connections until the child is recycled. To disable connection reuse, set this property value to On.
    enablereuse On This is the inverse of 'disablereuse' above, provided as a convenience for scheme handlers that require opt-in for connection reuse (such as mod_proxy_fcgi). 2.4.11 and later only.
    flushpackets off Determines whether the proxy module will auto-flush the output brigade after each "chunk" of data. 'off' means that it will flush only when needed; 'on' means after each chunk is sent; and 'auto' means poll/wait for a period of time and flush if no input has been received for 'flushwait' milliseconds. Currently, this is in effect only for mod_proxy_ajp and mod_proxy_fcgi.
    flushwait 10 The time to wait for additional input, in milliseconds, before flushing the output brigade if 'flushpackets' is 'auto'.
    iobuffersize 8192 Adjusts the size of the internal scratchpad IO buffer. This allows you to override the ProxyIOBufferSize for a specific worker. This must be at least 512 or set to 0 for the system default of 8192.
    responsefieldsize 8192 Adjust the size of the proxy response field buffer. The buffer size should be at least the size of the largest expected header size from a proxied response. Setting the value to 0 will use the system default of 8192 bytes.
    Available in Apache HTTP Server 2.4.34 and later.
    keepalive Off

    This parameter should be used when you have a firewall between your Apache httpd and the backend server, which tends to drop inactive connections. This flag will tell the Operating System to send KEEP_ALIVE messages on inactive connections and thus prevent the firewall from dropping the connection. To enable keepalive, set this property value to On.

    The frequency of initial and subsequent TCP keepalive probes depends on global OS settings, and may be as high as 2 hours. To be useful, the frequency configured in the OS must be smaller than the threshold used by the firewall.

    lbset 0 Sets the load balancer cluster set that the worker is a member of. The load balancer will try all members of a lower numbered lbset before trying higher numbered ones.
    ping 0 Ping property tells the webserver to "test" the connection to the backend before forwarding the request. For AJP, it causes mod_proxy_ajp to send a CPING request on the ajp13 connection (implemented on Tomcat 3.3.2+, 4.1.28+ and 5.0.13+). For HTTP, it causes mod_proxy_http to send a 100-Continue to the backend (only valid for HTTP/1.1 - for non HTTP/1.1 backends, this property has no effect). In both cases, the parameter is the delay in seconds to wait for the reply. This feature has been added to avoid problems with hung and busy backends. This will increase the network traffic during the normal operation which could be an issue, but it will lower the traffic in case some of the cluster nodes are down or busy. By adding a postfix of ms, the delay can be also set in milliseconds.
    receivebuffersize 0 Adjusts the size of the explicit (TCP/IP) network buffer size for proxied connections. This allows you to override the ProxyReceiveBufferSize for a specific worker. This must be at least 512 or set to 0 for the system default.
    redirect - Redirection Route of the worker. This value is usually set dynamically to enable safe removal of the node from the cluster. If set, all requests without session id will be redirected to the BalancerMember that has route parameter equal to this value.
    retry 60 Connection pool worker retry timeout in seconds. If the connection pool worker to the backend server is in the error state, Apache httpd will not forward any requests to that server until the timeout expires. This enables to shut down the backend server for maintenance and bring it back online later. A value of 0 means always retry workers in an error state with no timeout.
    route - Route of the worker when used inside load balancer. The route is a value appended to session id.
    status - Single letter value defining the initial status of this worker.
    D: Worker is disabled and will not accept any requests.
    S: Worker is administratively stopped.
    I: Worker is in ignore-errors mode and will always be considered available.
    R: Worker is a hot spare. For each worker in a given lbset that is unusable (draining, stopped, in error, etc.), a usable hot spare with the same lbset will be used in its place. Hot spares can help ensure that a specific number of workers are always available for use by a balancer.
    H: Worker is in hot-standby mode and will only be used if no other viable workers or spares are available in the balancer set.
    E: Worker is in an error state.
    N: Worker is in drain mode and will only accept existing sticky sessions destined for itself and ignore all other requests.
    Status can be set (which is the default) by prepending with '+' or cleared by prepending with '-'. Thus, a setting of 'S-E' sets this worker to Stopped and clears the in-error flag.
    timeout ProxyTimeout Connection timeout in seconds. The number of seconds Apache httpd waits for data sent by / to the backend.
    ttl - Time to live for inactive connections and associated connection pool entries, in seconds. Once reaching this limit, a connection will not be used again; it will be closed at some later time.
    flusher flush

    Name of the provider used by mod_proxy_fdpass. See the documentation of this module for more details.

    secret -

    Value of secret used by mod_proxy_ajp. See the documentation of this module for more details.

    upgrade WebSocket

    Protocol accepted in the Upgrade header by mod_proxy_wstunnel. See the documentation of this module for more details.

    If the Proxy directive scheme starts with the balancer:// (eg: balancer://cluster, any path information is ignored), then a virtual worker that does not really communicate with the backend server will be created. Instead, it is responsible for the management of several "real" workers. In that case, the special set of parameters can be added to this virtual worker. See mod_proxy_balancer for more information about how the balancer works.

    Balancer parameters
    Parameter Default Description
    lbmethod byrequests Balancer load-balance method. Select the load-balancing scheduler method to use. Either byrequests, to perform weighted request counting; bytraffic, to perform weighted traffic byte count balancing; or bybusyness, to perform pending request balancing. The default is byrequests.
    maxattempts One less than the number of workers, or 1 with a single worker. Maximum number of failover attempts before giving up.
    nofailover Off If set to On, the session will break if the worker is in error state or disabled. Set this value to On if backend servers do not support session replication.
    stickysession - Balancer sticky session name. The value is usually set to something like JSESSIONID or PHPSESSIONID, and it depends on the backend application server that support sessions. If the backend application server uses different name for cookies and url encoded id (like servlet containers) use | to separate them. The first part is for the cookie the second for the path.
    Available in Apache HTTP Server 2.4.4 and later.
    stickysessionsep "." Sets the separation symbol in the session cookie. Some backend application servers do not use the '.' as the symbol. For example, the Oracle Weblogic server uses '!'. The correct symbol can be set using this option. The setting of 'Off' signifies that no symbol is used.
    scolonpathdelim Off If set to On, the semi-colon character ';' will be used as an additional sticky session path delimiter/separator. This is mainly used to emulate mod_jk's behavior when dealing with paths such as JSESSIONID=6736bcf34;foo=aabfa
    timeout 0 Balancer timeout in seconds. If set, this will be the maximum time to wait for a free worker. The default is to not wait.
    failonstatus - A single or comma-separated list of HTTP status codes. If set, this will force the worker into error state when the backend returns any status code in the list. Worker recovery behaves the same as other worker errors.
    failontimeout Off If set, an IO read timeout after a request is sent to the backend will force the worker into error state. Worker recovery behaves the same as other worker errors.
    Available in Apache HTTP Server 2.4.5 and later.
    nonce <auto> The protective nonce used in the balancer-manager application page. The default is to use an automatically determined UUID-based nonce, to provide for further protection for the page. If set, then the nonce is set to that value. A setting of None disables all nonce checking.

    Note

    In addition to the nonce, the balancer-manager page should be protected via an ACL.

    growth 0 Number of additional BalancerMembers to allow to be added to this balancer in addition to those defined at configuration.
    forcerecovery On Force the immediate recovery of all workers without considering the retry parameter of the workers if all workers of a balancer are in error state. There might be cases where an already overloaded backend can get into deeper trouble if the recovery of all workers is enforced without considering the retry parameter of each worker. In this case, set to Off.
    Available in Apache HTTP Server 2.4.2 and later.

    A sample balancer setup:

    ProxyPass "/special-area" "http://special.example.com" smax=5 max=10
    ProxyPass "/" "balancer://mycluster/" stickysession=JSESSIONID|jsessionid nofailover=On
    <Proxy "balancer://mycluster">
        BalancerMember "ajp://1.2.3.4:8009"
        BalancerMember "ajp://1.2.3.5:8009" loadfactor=20
        # Less powerful server, don't send as many requests there,
        BalancerMember "ajp://1.2.3.6:8009" loadfactor=5
    </Proxy>

    Configuring hot spares can help ensure that a certain number of workers are always available for use per load balancer set:

    ProxyPass "/" "balancer://sparecluster/"
    <Proxy balancer://sparecluster>
        BalancerMember ajp://1.2.3.4:8009
        BalancerMember ajp://1.2.3.5:8009
        # The servers below are hot spares. For each server above that is unusable
        # (draining, stopped, unreachable, in error state, etc.), one of these spares
        # will be used in its place. Two servers will always be available for a request
        # unless one or more of the spares is also unusable.
        BalancerMember ajp://1.2.3.6:8009 status=+R
        BalancerMember ajp://1.2.3.7:8009 status=+R
    </Proxy>

    Setting up a hot-standby that will only be used if no other members (or spares) are available in the load balancer set:

    ProxyPass "/" "balancer://hotcluster/"
    <Proxy "balancer://hotcluster">
        BalancerMember "ajp://1.2.3.4:8009" loadfactor=1
        BalancerMember "ajp://1.2.3.5:8009" loadfactor=2.25
        # The server below is on hot standby
        BalancerMember "ajp://1.2.3.6:8009" status=+H
        ProxySet lbmethod=bytraffic
    </Proxy>

    Additional ProxyPass Keywords

    Normally, mod_proxy will canonicalise ProxyPassed URLs. But this may be incompatible with some backends, particularly those that make use of PATH_INFO. The optional nocanon keyword suppresses this and passes the URL path "raw" to the backend. Note that this keyword may affect the security of your backend, as it removes the normal limited protection against URL-based attacks provided by the proxy.

    Normally, mod_proxy will include the query string when generating the SCRIPT_FILENAME environment variable. The optional noquery keyword (available in httpd 2.4.1 and later) prevents this.

    The optional interpolate keyword, in combination with ProxyPassInterpolateEnv, causes the ProxyPass to interpolate environment variables, using the syntax ${VARNAME}. Note that many of the standard CGI-derived environment variables will not exist when this interpolation happens, so you may still have to resort to mod_rewrite for complex rules. Also note that interpolation is supported within the scheme/hostname/port portion of a URL only for variables that are available when the directive is parsed (like Define). Dynamic determination of those fields can be accomplished with mod_rewrite. The following example describes how to use mod_rewrite to dynamically set the scheme to http or https:

    RewriteEngine On
    
    RewriteCond "%{HTTPS}" =off
    RewriteRule "." "-" [E=protocol:http]
    RewriteCond "%{HTTPS}" =on
    RewriteRule "." "-" [E=protocol:https]
    
    RewriteRule "^/mirror/foo/(.*)" "%{ENV:protocol}://backend.example.com/$1" [P]
    ProxyPassReverse  "/mirror/foo/" "http://backend.example.com/"
    ProxyPassReverse  "/mirror/foo/" "https://backend.example.com/"
    top

    ProxyPassInherit Directive

    Description:Inherit ProxyPass directives defined from the main server
    Syntax:ProxyPassInherit On|Off
    Default:ProxyPassInherit On
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy
    Compatibility:ProxyPassInherit is only available in Apache HTTP Server 2.4.5 and later.

    This directive will cause the current server/vhost to "inherit" ProxyPass directives defined in the main server. This can cause issues and inconsistent behavior if using the Balancer Manager for dynamic changes and so should be disabled if using that feature.

    The setting in the global server defines the default for all vhosts.

    Disabling ProxyPassInherit also disables BalancerInherit.

    top

    ProxyPassInterpolateEnv Directive

    Description:Enable Environment Variable interpolation in Reverse Proxy configurations
    Syntax:ProxyPassInterpolateEnv On|Off
    Default:ProxyPassInterpolateEnv Off
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy
    Compatibility:Available in httpd 2.2.9 and later

    This directive, together with the interpolate argument to ProxyPass, ProxyPassReverse, ProxyPassReverseCookieDomain, and ProxyPassReverseCookiePath, enables reverse proxies to be dynamically configured using environment variables which may be set by another module such as mod_rewrite. It affects the ProxyPass, ProxyPassReverse, ProxyPassReverseCookieDomain, and ProxyPassReverseCookiePath directives and causes them to substitute the value of an environment variable varname for the string ${varname} in configuration directives if the interpolate option is set.

    The scheme/hostname/port portion of ProxyPass may contain variables, but only the ones available when the directive is parsed (for example, using Define). For all the other use cases, please consider using mod_rewrite instead.

    Performance warning

    Keep this turned off unless you need it! Adding variables to ProxyPass for example may lead to the use of the default mod_proxy's workers configured (that don't allow any fine tuning like connections reuse, etc..).

    top

    ProxyPassMatch Directive

    Description:Maps remote servers into the local server URL-space using regular expressions
    Syntax:ProxyPassMatch [regex] !|url [key=value [key=value ...]]
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy

    This directive is equivalent to ProxyPass but makes use of regular expressions instead of simple prefix matching. The supplied regular expression is matched against the url, and if it matches, the server will substitute any parenthesized matches into the given string and use it as a new url.

    Note: This directive cannot be used within a <Directory> context.

    Suppose the local server has address http://example.com/; then

    ProxyPassMatch "^/(.*\.gif)$" "http://backend.example.com/$1"

    will cause a local request for http://example.com/foo/bar.gif to be internally converted into a proxy request to http://backend.example.com/foo/bar.gif.

    Note

    The URL argument must be parsable as a URL before regexp substitutions (as well as after). This limits the matches you can use. For instance, if we had used

    ProxyPassMatch "^(/.*\.gif)$" "http://backend.example.com:8000$1"

    in our previous example, it would fail with a syntax error at server startup. This is a bug (PR 46665 in the ASF bugzilla), and the workaround is to reformulate the match:

    ProxyPassMatch "^/(.*\.gif)$" "http://backend.example.com:8000/$1"

    The ! directive is useful in situations where you don't want to reverse-proxy a subdirectory.

    When used inside a <LocationMatch> section, the first argument is omitted and the regexp is obtained from the <LocationMatch>.

    If you require a more flexible reverse-proxy configuration, see the RewriteRule directive with the [P] flag.

    Default Substitution

    When the URL parameter doesn't use any backreferences into the regular expression, the original URL will be appended to the URL parameter.

    Security Warning

    Take care when constructing the target URL of the rule, considering the security impact from allowing the client influence over the set of URLs to which your server will act as a proxy. Ensure that the scheme and hostname part of the URL is either fixed or does not allow the client undue influence.

    top

    ProxyPassReverse Directive

    Description:Adjusts the URL in HTTP response headers sent from a reverse proxied server
    Syntax:ProxyPassReverse [path] url [interpolate]
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy

    This directive lets Apache httpd adjust the URL in the Location, Content-Location and URI headers on HTTP redirect responses. This is essential when Apache httpd is used as a reverse proxy (or gateway) to avoid bypassing the reverse proxy because of HTTP redirects on the backend servers which stay behind the reverse proxy.

    Only the HTTP response headers specifically mentioned above will be rewritten. Apache httpd will not rewrite other response headers, nor will it by default rewrite URL references inside HTML pages. This means that if the proxied content contains absolute URL references, they will bypass the proxy. To rewrite HTML content to match the proxy, you must load and enable mod_proxy_html.

    path is the name of a local virtual path; url is a partial URL for the remote server. These parameters are used the same way as for the ProxyPass directive.

    For example, suppose the local server has address http://example.com/; then

    ProxyPass         "/mirror/foo/" "http://backend.example.com/"
    ProxyPassReverse  "/mirror/foo/" "http://backend.example.com/"
    ProxyPassReverseCookieDomain  "backend.example.com"  "public.example.com"
    ProxyPassReverseCookiePath  "/"  "/mirror/foo/"

    will not only cause a local request for the http://example.com/mirror/foo/bar to be internally converted into a proxy request to http://backend.example.com/bar (the functionality which ProxyPass provides here). It also takes care of redirects which the server backend.example.com sends when redirecting http://backend.example.com/bar to http://backend.example.com/quux . Apache httpd adjusts this to http://example.com/mirror/foo/quux before forwarding the HTTP redirect response to the client. Note that the hostname used for constructing the URL is chosen in respect to the setting of the UseCanonicalName directive.

    Note that this ProxyPassReverse directive can also be used in conjunction with the proxy feature (RewriteRule ... [P]) from mod_rewrite because it doesn't depend on a corresponding ProxyPass directive.

    The optional interpolate keyword, used together with ProxyPassInterpolateEnv, enables interpolation of environment variables specified using the format ${VARNAME}. Note that interpolation is not supported within the scheme portion of a URL.

    When used inside a <Location> section, the first argument is omitted and the local directory is obtained from the <Location>. The same occurs inside a <LocationMatch> section, but will probably not work as intended, as ProxyPassReverse will interpret the regexp literally as a path; if needed in this situation, specify the ProxyPassReverse outside the section or in a separate <Location> section.

    This directive is not supported in <Directory> or <Files> sections.

    top

    ProxyPassReverseCookieDomain Directive

    Description:Adjusts the Domain string in Set-Cookie headers from a reverse- proxied server
    Syntax:ProxyPassReverseCookieDomain internal-domain public-domain [interpolate]
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy

    Usage is basically similar to ProxyPassReverse, but instead of rewriting headers that are a URL, this rewrites the domain string in Set-Cookie headers.

    top

    ProxyPassReverseCookiePath Directive

    Description:Adjusts the Path string in Set-Cookie headers from a reverse- proxied server
    Syntax:ProxyPassReverseCookiePath internal-path public-path [interpolate]
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy

    Useful in conjunction with ProxyPassReverse in situations where backend URL paths are mapped to public paths on the reverse proxy. This directive rewrites the path string in Set-Cookie headers. If the beginning of the cookie path matches internal-path, the cookie path will be replaced with public-path.

    In the example given with ProxyPassReverse, the directive:

    ProxyPassReverseCookiePath  "/"  "/mirror/foo/"

    will rewrite a cookie with backend path / (or /example or, in fact, anything) to /mirror/foo/.

    top

    ProxyPreserveHost Directive

    Description:Use incoming Host HTTP request header for proxy request
    Syntax:ProxyPreserveHost On|Off
    Default:ProxyPreserveHost Off
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy
    Compatibility:Usable in directory context in 2.3.3 and later.

    When enabled, this option will pass the Host: line from the incoming request to the proxied host, instead of the hostname specified in the ProxyPass line.

    This option should normally be turned Off. It is mostly useful in special configurations like proxied mass name-based virtual hosting, where the original Host header needs to be evaluated by the backend server.

    top

    ProxyReceiveBufferSize Directive

    Description:Network buffer size for proxied HTTP and FTP connections
    Syntax:ProxyReceiveBufferSize bytes
    Default:ProxyReceiveBufferSize 0
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy

    The ProxyReceiveBufferSize directive specifies an explicit (TCP/IP) network buffer size for proxied HTTP and FTP connections, for increased throughput. It has to be greater than 512 or set to 0 to indicate that the system's default buffer size should be used.

    Example

    ProxyReceiveBufferSize 2048
    top

    ProxyRemote Directive

    Description:Remote proxy used to handle certain requests
    Syntax:ProxyRemote match remote-server
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy

    This defines remote proxies to this proxy. match is either the name of a URL-scheme that the remote server supports, or a partial URL for which the remote server should be used, or * to indicate the server should be contacted for all requests. remote-server is a partial URL for the remote server. Syntax:

    remote-server = scheme://hostname[:port]

    scheme is effectively the protocol that should be used to communicate with the remote server; only http and https are supported by this module. When using https, the requests are forwarded through the remote proxy using the HTTP CONNECT method.

    Example

    ProxyRemote "http://goodguys.example.com/" "http://mirrorguys.example.com:8000"
    ProxyRemote "*" "http://cleverproxy.localdomain"
    ProxyRemote "ftp" "http://ftpproxy.mydomain:8080"

    In the last example, the proxy will forward FTP requests, encapsulated as yet another HTTP proxy request, to another proxy which can handle them.

    This option also supports reverse proxy configuration; a backend webserver can be embedded within a virtualhost URL space even if that server is hidden by another forward proxy.

    top

    ProxyRemoteMatch Directive

    Description:Remote proxy used to handle requests matched by regular expressions
    Syntax:ProxyRemoteMatch regex remote-server
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy

    The ProxyRemoteMatch is identical to the ProxyRemote directive, except that the first argument is a regular expression match against the requested URL.

    top

    ProxyRequests Directive

    Description:Enables forward (standard) proxy requests
    Syntax:ProxyRequests On|Off
    Default:ProxyRequests Off
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy

    This allows or prevents Apache httpd from functioning as a forward proxy server. (Setting ProxyRequests to Off does not disable use of the ProxyPass directive.)

    In a typical reverse proxy or gateway configuration, this option should be set to Off.

    In order to get the functionality of proxying HTTP or FTP sites, you need also mod_proxy_http or mod_proxy_ftp (or both) present in the server.

    In order to get the functionality of (forward) proxying HTTPS sites, you need mod_proxy_connect enabled in the server.

    Warning

    Do not enable proxying with ProxyRequests until you have secured your server. Open proxy servers are dangerous both to your network and to the Internet at large.

    See also

    top

    ProxySet Directive

    Description:Set various Proxy balancer or member parameters
    Syntax:ProxySet url key=value [key=value ...]
    Context:server config, virtual host, directory
    Status:Extension
    Module:mod_proxy
    Compatibility:ProxySet is only available in Apache HTTP Server 2.2 and later.

    This directive is used as an alternate method of setting any of the parameters available to Proxy balancers and workers normally done via the ProxyPass directive. If used within a <Proxy balancer url|worker url> container directive, the url argument is not required. As a side effect the respective balancer or worker gets created. This can be useful when doing reverse proxying via a RewriteRule instead of a ProxyPass directive.

    <Proxy "balancer://hotcluster">
        BalancerMember "http://www2.example.com:8080" loadfactor=1
        BalancerMember "http://www3.example.com:8080" loadfactor=2
        ProxySet lbmethod=bytraffic
    </Proxy>
    <Proxy "http://backend">
        ProxySet keepalive=On
    </Proxy>
    ProxySet "balancer://foo" lbmethod=bytraffic timeout=15
    ProxySet "ajp://backend:7001" timeout=15

    Warning

    Keep in mind that the same parameter key can have a different meaning depending whether it is applied to a balancer or a worker, as shown by the two examples above regarding timeout.

    top

    ProxySourceAddress Directive

    Description:Set local IP address for outgoing proxy connections
    Syntax:ProxySourceAddress address
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy
    Compatibility:Available in version 2.3.9 and later

    This directive allows to set a specific local address to bind to when connecting to a backend server.

    top

    ProxyStatus Directive

    Description:Show Proxy LoadBalancer status in mod_status
    Syntax:ProxyStatus Off|On|Full
    Default:ProxyStatus Off
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy
    Compatibility:Available in version 2.2 and later

    This directive determines whether or not proxy loadbalancer status data is displayed via the mod_status server-status page.

    Note

    Full is synonymous with On

    top

    ProxyTimeout Directive

    Description:Network timeout for proxied requests
    Syntax:ProxyTimeout seconds
    Default:Value of Timeout
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy

    This directive allows a user to specifiy a timeout on proxy requests. This is useful when you have a slow/buggy appserver which hangs, and you would rather just return a timeout and fail gracefully instead of waiting however long it takes the server to return.

    top

    ProxyVia Directive

    Description:Information provided in the Via HTTP response header for proxied requests
    Syntax:ProxyVia On|Off|Full|Block
    Default:ProxyVia Off
    Context:server config, virtual host
    Status:Extension
    Module:mod_proxy

    This directive controls the use of the Via: HTTP header by the proxy. Its intended use is to control the flow of proxy requests along a chain of proxy servers. See RFC 2616 (HTTP/1.1), section 14.45 for an explanation of Via: header lines.

    • If set to Off, which is the default, no special processing is performed. If a request or reply contains a Via: header, it is passed through unchanged.
    • If set to On, each request and reply will get a Via: header line added for the current host.
    • If set to Full, each generated Via: header line will additionally have the Apache httpd server version shown as a Via: comment field.
    • If set to Block, every proxy request will have all its Via: header lines removed. No new Via: header will be generated.

    Available Languages:  en  |  fr  |  ja 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mod/mod_dav.html.ja.utf80000644000000000000500000005124613412755316020014 0ustar rootsrc mod_dav - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache モジュール mod_dav

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
    説明:分散オーサリングã¨ãƒãƒ¼ã‚¸ãƒ§ãƒ³ç®¡ç† (WebDAV) 機能
    ステータス:Extension
    モジュール識別å­:dav_module
    ソースファイル:mod_dav.c

    概è¦

    ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã‚¯ãƒ©ã‚¹ 1 ã¨ã‚¯ãƒ©ã‚¹ 2 ã® WebDAV ('ウェブベースã®åˆ†æ•£ã‚ªãƒ¼ã‚µãƒªãƒ³ã‚°ã¨ãƒãƒ¼ã‚¸ãƒ§ãƒ³ç®¡ç†') 機能を Apache ã«æä¾›ã—ã¾ã™ã€‚ ã“ã® HTTP ãƒ—ãƒ­ãƒˆã‚³ãƒ«ã®æ‹¡å¼µã«ã‚ˆã‚Šã€ãƒªãƒ¢ãƒ¼ãƒˆã®ã‚¦ã‚§ãƒ–サーãƒä¸Šã«ã‚ã‚‹ リソースやコレクションを 作æˆã€ç§»å‹•ã€è¤‡è£½ã€å‰Šé™¤ã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚

    top

    Enabling WebDAV

    mod_dav を有効ã«ã™ã‚‹ã«ã¯ã€httpd.conf ファイル中ã®ã‚³ãƒ³ãƒ†ãƒŠã«æ¬¡ã‚’加ãˆã¾ã™:

    Dav On

    ã“れ㯠DAV ファイルシステムプロãƒã‚¤ãƒ€ã‚’有効ã«ã—ã¾ã™ã€‚DAV ファイルシステムプロãƒã‚¤ãƒ€ã¯ mod_dav_fs モジュールã§å®Ÿè£…ã•れã¦ã„ã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã‚³ãƒ³ãƒ‘イル時㫠サーãƒã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹ã‹ã€ã‚ã‚‹ã„㯠LoadModule を使用ã—ã¦å®Ÿè¡Œæ™‚ã«ãƒ­ãƒ¼ãƒ‰ã•れã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚

    ã•らã«ã€DAV ロックデータベースã®å ´æ‰€ãŒ DavLockDB ディレクティブを使ã£ã¦ httd.conf ファイルã®ã‚°ãƒ­ãƒ¼ãƒãƒ«ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã«æŒ‡å®šã•れã¦ã„ã‚‹ å¿…è¦ãŒã‚りã¾ã™ã€‚

    DavLockDB /usr/local/apache2/var/DavLock

    ロックデータベースファイルã®ã‚るディレクトリ㯠Apache ãŒå®Ÿè¡Œã•れã¦ã„ã‚‹ User 㨠Group ã«æ›¸ãè¾¼ã¿æ¨©é™ãŒã‚ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚

    <Limit> 節を <Location> ディレクティブ内部ã«è¿½åŠ ã—ã¦ã€DAV ãŒæœ‰åйãªå ´æ‰€ã¸ã® アクセスを制é™ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚DAV クライアント㌠一度ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§é€ä¿¡ã§ãる最大ãƒã‚¤ãƒˆæ•°ã‚’指定ã—ãŸã„ã¨ãã¯ã€ LimitXMLRequestBody ディレクティブを使用ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚「通常ã®ã€ LimitRequestBody ディレクティブ㯠DAV リクエストã«å¯¾ã—ã¦ã¯åŠ¹åŠ›ã‚’æŒã¡ã¾ã›ã‚“。

    完全ãªä¾‹

    DavLockDB /usr/local/apache2/var/DavLock
    
    <Directory /usr/local/apache2/htdocs/foo>
        Require all granted
        Dav On
    
        AuthType Basic
        AuthName DAV
        AuthUserFile user.passwd
    
        <LimitExcept GET POST OPTIONS>
            Require user admin
        </LimitExcept>
    </Directory>
    top

    セキュリティã®å•題

    DAV ã®ã‚¢ã‚¯ã‚»ã‚¹ãƒ¡ã‚½ãƒƒãƒ‰ã¯é éš”クライアントãŒã‚µãƒ¼ãƒã®ãƒ•ァイルを æ“作ã™ã‚‹ã“ã¨ã‚’å¯èƒ½ã«ã—ã¾ã™ã®ã§ã€ mod_dav を使用ã™ã‚‹ å‰ã«ã€ã‚µãƒ¼ãƒãŒå®‰å…¨ã§ã‚ã‚‹ã“ã¨ã‚’ç‰¹ã«æ³¨æ„ã—ã¦ç¢ºèªã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    サーãƒä¸Šã® DAV ãŒä½¿ç”¨å¯èƒ½ã«ãªã£ã¦ã„る場所ã¯ã™ã¹ã¦èªè¨¼ã§ä¿è­·ã—ã¦ãã ã•ã„。 HTTP 基本èªè¨¼ã®ä½¿ç”¨ã¯æŽ¨å¥¨ã§ãã¾ã›ã‚“。少ãªãã¨ã‚‚ mod_auth_digest ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§æä¾›ã•れる HTTP ダイジェストèªè¨¼ã‚’用ã„ã‚‹ã¹ãã§ã™ã€‚WebDAV クライアントã®ã»ã¨ã‚“ã©ã¯ ã“ã®èªè¨¼æ–¹æ³•ã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚代ã‚りã«ã€SSL ㌠有効ãªã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’通ã—ãŸåŸºæœ¬èªè¨¼ã‚’使ã†ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    mod_dav ãŒãƒ•ァイルをæ“作ã§ãるよã†ã«ã™ã‚‹ãŸã‚ã«ã¯ã€ 管ç†ä¸‹ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¨ãƒ•ァイルã¨ã« Apache ãŒå®Ÿè¡Œã•れã¦ã„ã‚‹ User 㨠Group ã§æ›¸ãè¾¼ã¿å¯èƒ½ã§ã‚ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚ æ–°ã—ã作æˆã•れるファイルもã“ã® User 㨠Group ã«æ‰€æœ‰ã•れる ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ã“ã®ç†ç”±ã‹ã‚‰ã€ãã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’制御ã™ã‚‹ã“ã¨ã¯ é‡è¦ã§ã™ã€‚DAV リãƒã‚¸ãƒˆãƒªã¯ Apache 専用ã®ã‚‚ã®ã ã¨ã¿ãªã•れã¦ã„ã¾ã™ã€‚ Apache ä»¥å¤–ã®æ–¹æ³•ã§ãƒ•ァイルを修正ã™ã‚‹ã“㨠(例ãˆã° FTP やファイルシステム 用ã®ãƒ„ールãªã©ã‚’使ã£ã¦) ã¯è¨±å¯ã•れã¦ã„ã¾ã›ã‚“。

    mod_dav ã¯ã„ã‚ã„ã‚ãªç¨®é¡žã®ã‚µãƒ¼ãƒ“ã‚¹æ‹’å¦æ”»æ’ƒã«ã•らã•れる ã‹ã‚‚ã—れã¾ã›ã‚“。LimitXMLRequestBody ディレクティブを使ã†ã¨ 大ã㪠DAV リクエストを解æžã™ã‚‹ã¨ãã«æ¶ˆè²»ã•れるメモリã®é‡ã‚’制é™ã™ã‚‹ã“ã¨ãŒ ã§ãã¾ã™ã€‚DavDepthInfinity ディレクティブ㯠PROPFIND リクエストãŒå·¨å¤§ãƒªãƒã‚¸ãƒˆãƒªã§å¤§é‡ã®ãƒ¡ãƒ¢ãƒªã‚’消費ã™ã‚‹ã®ã‚’ 防ãã“ã¨ãŒã§ãã¾ã™ã€‚ä»–ã®ã‚µãƒ¼ãƒ“ã‚¹æ‹’å¦æ”»æ’ƒã«ã¯å˜ç´”ã«ä½¿ç”¨å¯èƒ½ãªãƒ‡ã‚£ã‚¹ã‚¯é ˜åŸŸã‚’ 多ãã®å¤§ããªãƒ•ァイルã§åŸ‹ã‚ã¦ã—ã¾ã†ã‚“ã‚‚ã®ãŒã‚りã¾ã™ã€‚ã“ã‚Œã‚’ç›´æŽ¥é˜²ãæ–¹æ³•㯠Apache ã«ã¯ã‚りã¾ã›ã‚“ã®ã§ã€ä¿¡ç”¨ã§ããªã„ユーザ㫠DAV アクセスをæä¾›ã™ã‚‹ã®ã¯ é¿ã‘ãŸæ–¹ãŒè‰¯ã„ã§ã—ょã†ã€‚

    top

    複雑ãªè¨­å®š

    よãã‚ã‚‹è¦æ±‚ã«ã€mod_dav を使ã£ã¦å‹•çš„ãªãƒ•ァイル (PHP スクリプトã€CGI スクリプトãªã©) ã‚’æ“作ã—ãŸã„ã¨ã„ã†ã‚‚ã®ãŒã‚りã¾ã™ã€‚ ã“れã®å®Ÿç¾ã¯ã€GET リクエストã¯ã‚¹ã‚¯ãƒªãƒ—トã®å†…容をダウンロードã•ã›ã‚‹ 代ã‚りã«ã€ã‚¹ã‚¯ãƒªãƒ—トを常ã«å®Ÿè¡Œã•ã›ã¦ã—ã¾ã†ã®ã§é›£ã—ããªã£ã¦ã„ã¾ã™ã€‚ ã“れを回é¿ã™ã‚‹æ–¹æ³•ã«ã¯ã€äºŒã¤ã®é•ㆠURL ã‚’åŒã˜ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«ãƒžãƒƒãƒ—ã—〠一ã¤ã¯ã‚¹ã‚¯ãƒªãƒ—トを実行ã•ã›ã€ã‚‚ã†ä¸€ã¤ã¯ãƒ€ã‚¦ãƒ³ãƒ­ãƒ¼ãƒ‰ã•ã›ãŸã‚Šã€DAV ã‹ã‚‰ æ“作ã•れãŸã‚Šã™ã‚‹ã‚ˆã†ã«è¨­å®šã™ã‚‹ã¨ã„ã†ã‚‚ã®ãŒã‚りã¾ã™ã€‚

    Alias /phparea /home/gstein/php_files
    Alias /php-source /home/gstein/php_files
    <Location /php-source>
        Dav On
        ForceType text/plain
    </Location>

    ã“ã®è¨­å®šã«ã‚ˆã‚Šã€http://example.com/phparea ã‚’ PHP スクリプト㮠出力をアクセスã™ã‚‹ãŸã‚ã«ä½¿ã†ã“ã¨ãŒã§ã〠http://example.com/php-source ã‚’ DAV クライアントã«ã‚ˆã‚‹ ãŒæ“作ã®ãŸã‚ã«ä½¿ã†ã“ã¨ãŒã§ãã¾ã™ã€‚

    top

    Dav ディレクティブ

    説明:WebDAV HTTP メソッドを有効ã«ã—ã¾ã™
    æ§‹æ–‡:Dav On|Off|provider-name
    デフォルト:Dav Off
    コンテキスト:ディレクトリ
    ステータス:Extension
    モジュール:mod_dav

    与ãˆã‚‰ã‚ŒãŸã‚³ãƒ³ãƒ†ãƒŠã§ WebDAV HTTP メソッドãŒä½¿ãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ã«ã¯ 次ã®ã‚ˆã†ã«ã—ã¾ã™ã€‚

    <Location /foo>
        Dav On
    </Location>

    On ã¨ã„ã†æŒ‡å®šã¯å®Ÿéš›ã«ã¯ mod_dav_fs ã§æä¾›ã•れã¦ã„るデフォルトã®ãƒ—ロãƒã‚¤ãƒ€ã€filesystem ã¸ã®ã‚¨ã‚¤ãƒªã‚¢ã‚¹ã«ãªã£ã¦ã„ã¾ã™ã€‚一度ã‚るロケーション㧠DAV を有効ã«ã—ãŸå¾Œã¯ã€ãã®ã‚µãƒ–ロケーションã§ç„¡åŠ¹åŒ–ã™ã‚‹ã“ã¨ã¯ã§ããªã„ ã¨ã„ã†ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。完全ãªè¨­å®šä¾‹ã¯ä¸Šè¨˜ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ ã‚’ã”覧下ã•ã„。

    サーãƒã®ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ãŒç¢ºä¿ã§ãã‚‹ã¾ã§ WebDAV を有効ã«ã—ãªã„ã§ãã ã•ã„。 ãã†ã—ãªã‘れã°èª°ã§ã‚‚ãã®ã‚µãƒ¼ãƒã§ãƒ•ァイルをé…布ã™ã‚‹ã“ã¨ãŒã§ãるよã†ã« ãªã£ã¦ã—ã¾ã„ã¾ã™ã€‚
    top

    DavDepthInfinity ディレクティブ

    説明:PROPFIND, Depth: Infinity リクエストを許å¯ã—ã¾ã™
    æ§‹æ–‡:DavDepthInfinity on|off
    デフォルト:DavDepthInfinity off
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Extension
    モジュール:mod_dav

    'Depth: Infinity' ã‚’å«ã‚“ã§ã„ã‚‹ PROPFIND リクエストを処ç†ã§ãるよã†ã«ã™ã‚‹ã«ã¯ã€ DavDepthInfinity ディレクティブを使ã„ã¾ã™ã€‚ã“ã®ã‚¿ã‚¤ãƒ—ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ denial-of-service アタックã¨ãªã‚Šã†ã‚‹ã®ã§ã€ デフォルトã§ã¯è¨±å¯ã•れã¦ã„ã¾ã›ã‚“。

    top

    DavMinTimeout ディレクティブ

    説明:サーãƒãŒ DAV リソースã®ãƒ­ãƒƒã‚¯ã‚’ç¶­æŒã™ã‚‹æœ€å°æ™‚é–“ã§ã™ã€‚
    æ§‹æ–‡:DavMinTimeout seconds
    デフォルト:DavMinTimeout 0
    コンテキスト:サーãƒè¨­å®šãƒ•ァイル, ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, ディレクトリ
    ステータス:Extension
    モジュール:mod_dav

    クライアント㌠DAV ãƒªã‚½ãƒ¼ã‚¹ãƒ­ãƒƒã‚¯ã‚’è¦æ±‚ã—ãŸå ´åˆã€ ロックãŒã‚µãƒ¼ãƒã«ã‚ˆã£ã¦è‡ªå‹•çš„ã«è§£é™¤ã•れるã¾ã§ã®æ™‚é–“ã‚’ åŒæ™‚ã«æŒ‡å®šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã“ã®å€¤ã¯å˜ãªã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§ã‚ã£ã¦ã€ サーãƒã¯ã“れを無視ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã—〠任æ„ã®å€¤ã‚’クライアントã«é€šçŸ¥ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«æˆ»ã™ãƒ­ãƒƒã‚¯ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã®æœ€å°æ™‚間を〠秒ã§ã€æŒ‡å®šã™ã‚‹ãŸã‚ã« DavMinTimeout ディレクティブを使ã„ã¾ã™ã€‚ マイクロソフトã®ã‚¦ã‚§ãƒ–フォルダã®ãƒ‡ãƒ•ォルトã§ã¯ 120 ç§’ã§ã™ãŒï¼› ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®é…å»¶ã®ã›ã„ã§ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒãƒ­ãƒƒã‚¯ã‚’失ã†ã®ã‚’減らã™ãŸã‚ã«ã€ DavMinTimeout を使ã£ã¦ ã“れをもã£ã¨å¤§ããªå€¤ (例ãˆã° 600 ç§’) ã«ä¸Šæ›¸ãã§ãã¾ã™ã€‚

    例

    <Location /MSWord>
        DavMinTimeout 600
    </Location>

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/filter.html.en0000644000000000000500000003566713412755316016245 0ustar rootsrc Filters - Apache HTTP Server Version 2.4
    <-

    Filters

    Available Languages:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    This document describes the use of filters in Apache.

    top

    Filtering in Apache 2

    The Filter Chain is available in Apache 2.0 and higher, and enables applications to process incoming and outgoing data in a highly flexible and configurable manner, regardless of where the data comes from. We can pre-process incoming data, and post-process outgoing data, at will. This is basically independent of the traditional request processing phases.

    Filters can be chained, in a Data Axis orthogonal to request processing

    Some examples of filtering in the standard Apache distribution are:

    Apache also uses a number of filters internally to perform functions like chunking and byte-range handling.

    A wider range of applications are implemented by third-party filter modules available from modules.apache.org and elsewhere. A few of these are:

    • HTML and XML processing and rewriting
    • XSLT transforms and XIncludes
    • XML Namespace support
    • File Upload handling and decoding of HTML Forms
    • Image processing
    • Protection of vulnerable applications such as PHP scripts
    • Text search-and-replace editing
    top

    Smart Filtering

    Smart filtering applies different filter providers according to the state of request processing

    mod_filter, included in Apache 2.1 and later, enables the filter chain to be configured dynamically at run time. So for example you can set up a proxy to rewrite HTML with an HTML filter and JPEG images with a completely separate filter, despite the proxy having no prior information about what the origin server will send. This works by using a filter harness, that dispatches to different providers according to the actual contents at runtime. Any filter may be either inserted directly in the chain and run unconditionally, or used as a provider and inserted dynamically. For example,

    • an HTML processing filter will only run if the content is text/html or application/xhtml+xml
    • A compression filter will only run if the input is a compressible type and not already compressed
    • A charset conversion filter will be inserted if a text document is not already in the desired charset
    top

    Exposing Filters as an HTTP Service

    Filters can be used to process content originating from the client in addition to processing content originating on the server using the mod_reflector module.

    mod_reflector accepts POST requests from clients, and reflects the content request body received within the POST request back in the response, passing through the output filter stack on the way back to the client.

    This technique can be used as an alternative to a web service running within an application server stack, where an output filter provides the transformation required on the request body. For example, the mod_deflate module might be used to provide a general compression service, or an image transformation filter might be turned into an image transformation service.

    top

    Using Filters

    There are two ways to use filtering: Simple and Dynamic. In general, you should use one or the other; mixing them can have unexpected consequences (although simple Input filtering can be mixed freely with either simple or dynamic Output filtering).

    The Simple Way is the only way to configure input filters, and is sufficient for output filters where you need a static filter chain. Relevant directives are SetInputFilter, SetOutputFilter, AddInputFilter, AddOutputFilter, RemoveInputFilter, and RemoveOutputFilter.

    The Dynamic Way enables both static and flexible, dynamic configuration of output filters, as discussed in the mod_filter page. Relevant directives are FilterChain, FilterDeclare, and FilterProvider.

    One further directive AddOutputFilterByType is still supported, but deprecated. Use dynamic configuration instead.

    Available Languages:  en  |  es  |  fr  |  ja  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/mpm.html.tr.utf80000644000000000000500000003430313447004010016425 0ustar rootsrc Çok Süreçlilik Modülleri (MPM’ler) - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Çok Süreçlilik Modülleri (MPM’ler)

    Mevcut Diller:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Bu belgede Çok Süreçlilik Modülü denince ne anlaşıldığı ve bunların Apache HTTP Sunucusu tarafından nasıl kullanıldıkları açıklanmıştır.

    top

    GiriÅŸ

    Apache HTTP Sunucusu çok çeşitli platformlar üstünde farklı ortamlarda çalışabilen güçlü ve esnek bir HTTP sunucusu olarak tasarlanmıştır. Farklı platformlar ve farklı ortamlar çoğunlukla farklı özellikler veya aynı özelliğin en yüksek verimlilikle gerçeklenmesi için farklı yöntemler gerektirir. Apache httpd, geniş ortam çeşitliliğini daima modüler tasarımı sayesinde uzlaştırmıştır. Bu tasarım, site yöneticilerine, sunucularında bulunmasını istedikleri özellikleri derleme sırasında veya çalışma anında gerekli modülleri yüklemek suretiyle seçebilme imkanı verir.

    Apache HTTP Sunucusu 2.0, bu modüler tasarımı sunucunun en temel işlevlerine kadar indirmiştir. Sunucu, Çok Süreçlilik Modülleri adı verilen ve makine üzerindeki ağ portlarının bağlanmasından, isteklerin kabul edilmesinden ve bu istekleri yanıtlayacak çocuklara dağıtmaktan sorumlu olan modüllerin seçimine imkan verecek bir yapılanma ile gelir.

    Sunucunun modüler tasarımının bu seviyede genişletilmesi iki önemli yarar sağlar:

    • Apache httpd geniÅŸ çeÅŸitlilikteki iÅŸletim sistemlerini daha temiz ve daha verimli bir ÅŸekilde destekleyebilmektedir. Özellikle, mpm_winnt modülü, Apache httpd 1.3’te kullanılan POSIX katmanının yerine iÅŸletim sistemine özgü özellikleri kullanabildiÄŸinden, Apache HTTP Sunucusunun Windows sürümü artık çok daha verimli bir duruma gelmiÅŸtir. Aynı fayda özelleÅŸtirilmiÅŸ MPM’lerle diÄŸer iÅŸletim sistemlerine de saÄŸlanmıştır.
    • Sunucu, belli bir sitenin ihtiyaçlarına uygun olarak daha iyi kiÅŸiselleÅŸtirilebilmektedir. ÖrneÄŸin, eski yazılım ile uyumluluk ve kararlılığa önem veren siteler prefork modülünü kullanabilirken, daha geniÅŸ ölçeklenebilirlik gerektiren siteler worker veya event gibi evreli MPM modüllerinden birini seçebilmektedir.

    Kullanıcı açısından MPM’lerin diğer Apache httpd modüllerinden görünüşte bir farkı yoktur. Asıl fark sunucuya yüklenebilecek azami MPM modülü sayısının bir ve yalnız bir olarak sınırlanmış olmasıdır. Mevcut MPM modülleri modül dizini sayfasında listelenmiştir.

    top

    Öntanımlı MPM’ler

    Aşağıdaki tabloda çeşitli işletim sistemlerinde öntanımlı olan MPM’ler listelenmiştir. Derleme sırasında başka bir seçim yapmadığınız takdirde bu işletim sistemlerinde bu MPM’ler seçilmiş olacaktır.

    Netwarempm_netware
    OS/2mpmt_os2
    UnixPlatformun yapabildiklerine bağlı olarak, prefork, worker veya event
    Windowsmpm_winnt

    'Unix' burada Unix benzeri işletim sistemleri anlamında kullanılmıştır (örn, Linux, BSD, Solaris, Mac OS X, vb.

    Unix durumunda, hangi MPM'nin kurulacağı kararı şu 2 soruya verilecek yanıta bağlıdır:

    1. Sistem evreleri destekliyor mu?

    2. Sistem evreleri "thread-safe polling" anlamında destekliyor mu (özellikle kqueue ve epoll işlevlerini)?

    Her iki soruya da verilen yanıt 'evet' ise, öntanımlı MPM'niz event modülüdür.

    Birincinin yanıtı 'evet' ikincinin 'hayır' ise öntanımlı MPM'niz worker modülüdür.

    Yanıtların her ikisi de 'hayır' ise öntanımlı MPM'niz prefork modülüdür.

    Uygulamada, günümüzdeki işletim sistemlerinin tümü bu iki özelliği desteklediğinden öntanımlı MPM'niz hemen hemen daima event modülü olacaktır.

    top

    Bir MPM'i bir duruk modül olarak derlemek

    MPM'ler tüm platformlarda duruk (static) modüller olarak derlenebilir. Derleme sırasında tek bir modül seçilir ve sunucu ile ilintilenir. MPM değiştirilmek istenirse sunucunun yeniden derlenmesi gerekir.

    Öntanımlı MPM seçimin değiştirmek için configure betiğinin --with-mpm=AD seçeneği kullanılır. Buradaki AD istenen MPM'in ismidir.

    Sunucu bir kere derlendi mi, hangi MPM'in seçilmiş olduğunu ./httpd -l komutuyla öğrenebilirsiniz. Bu komut, içerilen MPM dahil, sunucu içinde derlenmiş bütüm modülleri listeler.

    top

    Bir MPM'i bir DSO modülü olarak derlemek

    Unix ve benzeri platformlarda, MPM'ler DSO modülleri olarak derlenebilir ve diğer DSO modülleri gibi sunucuya devingen olarak yüklenebilir. DSO modülü olarak derlenen MPM'ler, sunucunun yeniden derlenmesini gerektirmeden LoadModule yönergesi güncellenerek değiştirilebilir.

    LoadModule mpm_prefork_module modules/mod_mpm_prefork.so

    LoadModule yönergesini birden fazla MPM için kullanmak sunucunun başlatılması sırasında aşağıdaki hatanın oluşmasına sebep olur.

    AH00534: httpd: Configuration error: More than one MPM loaded.

    Bu özellik configure betiğinin --enable-mpms-shared seçeneği ile etkinleştirilebilir. all değeri belirtilerek platform için kullanılabilen tüm modüller kurulur. İstenirse, değer olarak bir MPM listesi de belirtilebilir.

    Özdevinimli olarak seçilerek veya configure betiğine --with-mpm seçeneğiyle belirtilerek seçilen öntanımlı MPM üretilen sunucu yapılandırma dosyasıyla yüklenir. Farklı bir MPM seçmek için MPM'i LoadModule yönergesinde belirtin.

    Mevcut Diller:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/caching.html.tr.utf80000644000000000000500000015530413447004010017235 0ustar rootsrc Önbellek Kullanım Kılavuzu - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Önbellek Kullanım Kılavuzu

    Mevcut Diller:  en  |  fr  |  tr 

    Bu belge mod_cache, mod_cache_disk, mod_file_cache modülleri ve htcacheclean için bir başvuru kılavuzu niteliğindedir. HTTP sunucusu ve vekil olarak çalışmada işlemleri hızlandırmak için bilinen sorunlar ve yanlış yapılandırmalardan kaçınarak Apache HTTPD sunucusunun önbellekleme özelliklerinin nasıl kullanılacağı açıklanmıştır.

    top

    GiriÅŸ

    Apache HTTP sunucusu, sunucunun başarımını çeşitli yollarla arttırmak üzere tasarlanmış bir dizi önbellekleme özelliğine sahiptir.

    Üç durumlu RFC2616 HTTP önbelleklemesi
    mod_cache ve destek modülü mod_cache_disk akılcı ve HTTP'ye uygun önbellekleme sağlar. İçeriğin kendisi önbellekte saklanır ve mod_cache, RFC2616'nın 13. bölümünde açıklandığı gibi, içeriğin önbelleklenebilirliğini denetleyen çeşitli HTTP başlıklarının ve seçeneklerinin tümünü onurlandırmayı hedefler. Devingen yerel içerik veya vekalet edilen içerik ile ilgilendiğiniz durumda veya muhtemel bir yavaş disk üzerinde yerel dosyalara erişimi hızlandırmak ihtiyacında olduğunuz durumda mod_cache hem basit hem de karmaşık önbellekleme yapılandırmalarını hedefler.
    İki durumlu anahtar/değer paylaşımlı nesne önbellekleme
    Paylaşımlı nesne önbellek API'si (socache) ve destek modülleri sunucu taraflı bir anahtar/değer paylaşımlı nesne önbelleklemesi sağlar. Bu modüller SSL oturumları ve kimlik doğrulama bilgileri gibi düşük seviyeli verileri önbelleklemek için tasarlanmıştır. Destek modülleri verinin sunucu tarafı bir paylaşımlı bellekte veya veri merkezi tarafı memcache veya distcache gibi bir önbellekte saklanmasını mümkün kılar.
    Uzmanlaşmış dosya önbellekleme
    mod_file_cache dosyaların sunucunun başlatılması sırasında belleğe yüklenmesi ile ilgilenir. Böylece dosyalara erişim zamanını kısaltabilir, sıkça erişilen dosyaların dosya tanıtıcılarını kaydedebilir, her istekte diske gitme ihtiyacını ortadan kaldırır.

    Bu belgeden azami yararı sağlayabilmek için temel bir HTTP bilginizin olması ve URL’lerin Dosya Sistemine Eşlenmesi ile İçerik Uzlaşımı belgelerini okumuş olmanız gerekir.

    top

    Üç durumlu RFC2616 HTTP önbelleklemesi

    HTTP protokolü RFC2616'nın 13. bölümünde açıklanan satıriçi önbellekleme mekanizması için yerleşik bir destek içerir ve bunun getirilerinden yararlanmak için mod_cache modülü kullanılabilir.

    İçeriğin taze olmadığı durumda içeriğin kaybolmasına sebep olan basit iki durumlu anahtar/değer önbelleklemesinin tersine, HTTP önbelleği eskimiş içeriği tutan ve bu eski içeriğin değişip değişmediğini özgün sunucuya soran ve duruma göre onu tekrar taze duruma getiren bir mekanizma içerir.

    HTTP önbelleğinde bulunan bir girdi şu üç durumdan birinde olabilir:

    Taze
    İçerik yeteri kadar yeni (tazelik ömründen daha genç) ise taze sayılır. Bir HTTP önbelleği böyle bir içeriği özgün sunucuya birşey sormadan sunabilir.
    Bayat

    İçerik çok eski (tazelik ömründen daha yaşlı) ise bayat sayılır. Bir HTTP önbelleği böyle bir içeriği istemciye sunmadan önce özgün sunucuya bağlanıp bayat içeriğin hala yeterince taze olup olmadığına bakmalıdır. Özgün sunucu, içerik geçersizse yenisini gönderecektir, aksi takdirde, (ideal olanı budur) içeriğin hala geçerli olduğunu belirten bir kod ile yanıt verecektir. İçerik tekrar taze hale gelince süreç kaldığı yerden devam eder.

    HTTP protokolü belli koşullar altında önbelleğin bayat içeriği sunmasına izin vermez. Örneğin, bir içeriği özgün sunucuda tazeleme çabasının bir 5xx hatasıyla başarısız olması veya başka bir tazeleme isteğinin henüz sonuçlanmamış olması bu çeşit koşullardandır. Bu durumlarda yanıta bir Warning başlığı eklenir.

    Yok
    Önbellekte yer kalmazsa yer açmak için içeriğin silinmesi seçenek dahilindedir. İçerik taze olsun olmasın her zaman silinebilir. Önlem olarak htcacheclean elle veya bir artalan süreci olarak çalıştırılabilir. Böylece önbelleğin boyutunun belirtilen boyutta veya belirtilen dosya düğümü sayısında kalması sağlanabilir. Araç içeriği silerken bayat içeriğe öncelik verir.

    HTTP önbelleklemesinin çalışması ile ilgili bütün ayrıntılar RFC2616'nın 13. bölümünde bulunabilir.

    Sunucu ile etkileÅŸim

    mod_cache modülü CacheQuickHandler yönergesinin değerine bağlı olarak iki olası yerde sunucuya bağlanır:

    Çabuk eylem aşaması

    Bu aşama çok erken gerçekleşen bir aşama olup isteğin işlenmesi sırasında isteğin çözümlenmesinin hemen sonrasıdır. İçerik önbellekte mevcutsa hemen sunulur ve geri kalan istek işleme işlemi iptal edilir.

    Bu senaryoda önbellek sunucunun önüne vidalanmış gibi davranır.

    Sunucuda gerçekleşecek bir dizi işlemin büyük çoğunluğunun yapılmadan geçilmesi nedeniyle bu en yüksek başarımlı kiptir. Bu kip ayrıca, sunucu işlemlerinin kimlik doğrulama ve yetkilendirme aşamalarının da yapılmadan geçilmesini sağlar. Bu bakımdan bu kip seçilirken bu durum dikkate alınmalıdır.

    "Authorization" başlığı içeren istekler (örneğin, HTTP Temel Kimlik Kanıtlaması gibi) mod_cache bu kipte çalışırken önbelleğe alınmadıkları gibi önbellekten bir işleme de sokulmazlar.

    Normal eylem aşaması

    Bu aşama geç bir aşama olup, isteğin tamamen işlenmesinin sonrasıdır.

    Bu senaryoda önbellek sunucunun arkasına vidalanmış gibi davranır.

    Bu kip en esneğidir. Önbelleğin, süzme zincirinin hassas olarak denetlenen bir noktasında oluşması sağlanabilir ve önbelleklenen içerik istemciye gönderilmeden önce süzülüp kişiselleştirilebilir.

    URL önbellekte yoksa mod_cache modülü yanıtı önbelleğe kaydetme aşamasında süzgeç yığıtına bir süzgeç ekler ve geri çekilerek normal istek işlemlerinin devam etmesine izin verir. İçeriğin önbelleklenebilir olduğu saptanırsa içerik gelecekte sunulmak üzere önbelleğe kaydedilir, aksi takdirde içerik yok sayılır.

    Önbellekteki içerik bayatsa, mod_cache modülü isteği bir koşullu istek haline getirir. Özgün sunucu normal bir yanıt verirse bu yanıt mevcut içeriğin yerine önbelleklenir. Özgün sunucu bir 304 Not Modified yanıtı verirse içerik tekrar taze olarak imlenir ve önbellekteki içerik süzgeç tarafından kaydedilmeden sunulur.

    Önbelleğin Hızlandırılması

    Bir sanal konak birçok farklı sunucu takma adından biri olarak bilindiği takdirde UseCanonicalName yönergesine On değeri atanmışsa önbellekten sunulan sayfa sayısında büyük bir artış olduğu görülür. Bunun sebebi içeriği sunan sanal konağın isminin önbellek anahtarının içinde kullanılmasıdır. Yönergeye On değerini atamak suretiyle çok isimli ve rumuzlu sanal konaklar için farklı önbellek girdileri oluşturulmaz, bunun yerine her meşru sanal konak için ayrı bir önbellek tutulur.

    Tazelik Ömrü

    Önbelleklenmek üzere tasarlanmış iyi biçimli bir içerik tazelik ömrünü Cache-Control başlığının max-age veya s-maxage alanlarıyla ya da bir Expires başlığını içererek bildirmelidir.

    Aynı zamanda, özgün sunucunun tanımladığı tazelik ömrü, bir istemci tarafından istekte bir Cache-Control başlığı kullanılarak geçersiz kılınmak istenebilir. Bu durumda hangi tazelik ömrü daha kısaysa o geçerli olur.

    Tazelik ömrü istekte veya yanıtta mevcut değilse öntanımlı bir tazelik ömrü kullanılır. Öntanımlı tazelik ömrü önbellekli içerik için bir saat olmakla birlikte CacheDefaultExpire yönergesi kullanılarak kolayca değiştirilebilir.

    Bir yanıt Expires başlığını değil de Last-Modified başlığını içeriyorsa mod_cache tazelik ömrünü CacheLastModifiedFactor yönergesine bakarak saptar.

    Yerel içerik için, ya da kendi Expires başlığını tanımlamayan uzak içerik için tazelik ömrünü max-age ve Expires ekleyerek hassas olarak ayarlamak için mod_expires kullanılabilir.

    Tazelik ömrünün üst sınırı CacheMaxExpire yönergesi ile belirlenebilir.

    Şartlı İstekler için Özlü Kılavuz

    Önbellekteki içeriğin zaman aşımına uğrayıp bayat hale gelmesi, httpd’nin özgün isteği aktarmak yerine isteği değişikliğe uğratarak şartlı bir istek yapması sonucunu doğurur.

    Özgün önbellekli yanıtta bir ETag başlığı mevcutsa, mod_cache modülü özgün sunucuya yapılan isteğe bir If-None-Match başlığı ekler. Özgün önbellekli yanıtta bir Last-Modified başlığı mevcutsa, mod_cache modülü özgün sunucuya yapılan isteğe bir If-Modified-Since başlığı ekler. Bunlardan birinin varlığı isteği koşullu yapar.

    Bir koşullu istek özgün sunucu tarafından alındığında, özgün sunucu ETag veya Last-Modified başlığının isteğe uygun olarak değişip değişmediğine bakmalıdır. Değişmemişse, özgün sunucu kısa ve öz bir "304 Not Modified" yanıtı ile yanıt vermelidir. Bunun önbellekteki anlamı şudur: Eskimiş içerik hala tazedir ve içerik yeni tazelik ömrüne ulaşıncaya kadar sonraki isteklerde kullanılmalıdır.

    İçerik değişmişse, bir şartlı istek yapılmamış gibi içeriğin kendisi sunulur.

    Şartlı istekler çifte yarar sağlar. Birinci olarak, böyle bir istek özgün sunucuya yapılıyorsa ve iki içerik de aynıysa bunu saptamak kolay olur ve özkaynağın tamamını aktarma külfetinden kurtulunur.

    İkinci olarak, iyi tasarlanmış bir özgün sunucu, koşullu istekler tam bir yanıt üretmekten önemli ölçüde ucuz olacak şekilde tasarlanmış olacaktır. Durağan dosyalar için bu genellikle stat() veya benzeri bir sistem çağrısıyla dosya boyutları ve değişiklik zamanına bakmak şeklinde gerçekleşir. Böylelikle, yerel içeriği bir değişiklik olmadığı takdirde önbellekten sunmak daha hızlı olacaktır.

    Özgün sunucular koşullu istekleri desteklemek için her türlü çabayı göstermelidir. Ancak, koşullu istekler desteklenmiyorsa, özgün sunucu istek koşullu değilmiş gibi yanıt vermeli, önbellek ise, içerik değişmiş ve yani içerik önbelleğe kaydedilmiş gibi yanıt vermelidir. Bu durumda, önbellek basit bir iki durumlu (içerik ya tazedir ya da silinmiş) önbellek gibi davranacaktır.

    Neler Önbelleklenebilir?

    HTTP önbelleğin tarafından önbelleklenebilecek içerik RFC2616 Section 13.4 Response Cacheability belgesinde tanımlanmış olup, bunlar şöyle özetlenebilir:

    1. Önbellekleme bu URL ile etkin kılınabilmelidir. CacheEnable ve CacheDisable yönergelerine bakınız.
    2. Yanıtın HTTP durum kodu 200, 203, 300, 301 veya 410 olmalıdır.
    3. Yanıtın HTTP durum kodu 200, 203, 300, 301 veya 410 değilse yanıtın ayrıca, "Expires" veya "Cache-Control" başlığı da içermesi gerekir.
    4. İstek bir HTTP GET isteği olmalıdır.
    5. Eğer yanıt bir "Authorization:" başlığı içeriyorsa ayrıca "Cache-Control:" başlığında da "s-maxage", "must-revalidate" veya "public" değerlerinden birini içermelidir, aksi takdirde önbelleklenmez.
    6. Eğer URL (GET yöntemi kullanan bir HTML formunun yaptığı gibi) bir sorgu dizgesi içeriyorsa yanıt, RFC2616’nın 13.9. bölümünde açıklandığı gibi bir "Expires:" başlığı içermedikçe veya "Cache-Control:" başlığının max-age veya max-age yönergesini içermedikçe yanıt içeriği önbelleğe alınmayacaktır.
    7. CacheIgnoreNoLastMod yönergesinin kullanımını gerektiren bir durum olmadıkça 200 durum koduna sahip bir yanıtın "Etag", "Last-Modified" ve "Expires" başlıklarından birini veya "Cache-Control:" başlığının "max-age" veya "s-maxage" yönergelerinden birini (en azından) içermesi gerekir.
    8. CacheStorePrivate yönergesinin kullanımını gerektiren bir durum olmadıkça yanıt "private" değerli bir "Cache-Control:" başlığı içerdiği takdirde yanıtın içeriği önbelleğe alınmayacaktır.
    9. Benzer şekilde, CacheStoreNoStore yönergesi kullanılmamışsa yanıt "no-store" değerli bir "Cache-Control:" başlığı içeriyorsa yanıt içeriği önbelleğe alınmayacaktır.
    10. Herşeyle eşleşen "*" değerli bir "Vary:" başlığı içeren bir yanıtın içeriği önbelleğe alınmaz.

    Neler Önbelleklenmemeli?

    İçerik zamana bağımlıysa ya da istek kısmen bile olsa HTTP uzlaşımıyla bağdaşmıyorsa önbelleğe alınmamalıdır. Bu içerik önbelleklenemeyeceğini Cache-Control başlığını kullanarak sunucuya bildirmelidir.

    İçerik sıkça değişiyorsa, tazelik ömrü dakikalar veya saniyelerle ifade ediliyorsa, içerik yine de önbelleklenebilir. Ancak, tam yanıtların düzenli olarak üretilmemesinin temini için özgün sunucunun koşullu istekleri doğru olarak desteklemesi sağlanmalıdır.

    İstemcinin sağladığı istek başlıklarına dayanarak değişen içerik, Vary yanıt başlığının akıllıca kullanımıyla önbelleklenebilir.

    Değişken/Uzlaşımlı İçerik

    Özgün sunucu, istekteki başlık değerlerine dayanarak farklı içeriklerle yanıt vermeye ayarlandığı takdirde, örneğin aynı URL'de farklı dillerde içerik sunmak gibi, HTTP'nin önbellekleme mekanizması aynı URL'de aynı sayfanın değişik sürümlerini önbelleklemeyi mümkün kılar.

    Bu özgün sunucu tarafından bir Vary başlığı eklenerek yapılır. Bir sayfanın farklı sürümleri arasındaki farkları saptarken önbellek tarafından hangi başlıkların hesaba katılacağını Vary başlığı belirler.

    Örneğin, bir yanıt şöyle bir başlık ile alınmışsa,

    Vary: negotiate,accept-language,accept-charset

    mod_cache sadece accept-language ve accept-charset başlıkları özgün istekle eşleşen önbellekli içeriği sunacaktır.

    İçeriğin farklı sürümleri yan yana önbelleklenebilir. mod_cache modülü Vary başlığını kullanarak başlıkta listelenmiş istek başlıklarının uygun değerlerini saptar ve istemciye hangi sürümle yanıt verileceğine karar verir.

    top

    Önbellek Ayarlama Örnekleri

    Disk Üzerinde Önbellekleme

    mod_cache modülü önbelleği yönetmek için çeşitli depolama ortamlarına özgü gerçeklenimleri kullanır. Diske önbellekleme desteğini mod_cache_disk sağlar.

    Tipik olarak modül şöyle yapılandırılır:

    CacheRoot   "/var/cache/apache/"
    CacheEnable disk /
    CacheDirLevels 2
    CacheDirLength 1

    En önemlisi önbelleklenen dosyaların yerel olarak saklanması olup işletim sisteminin sağladığı bellekiçi önbelleklemeden de ayrıca faydalanılmış olur. Bu bakımdan, dosyalar disk üzerinde saklansa bile sıkça erişilen dosyalar işletim sistemi sayesinde aslında bellekten sunulmuş olacaklardır.

    Önbellekte Saklamanın Anlamı

    mod_cache_disk öğeleri önbellekte saklamak için istek yapılan URL’nin 22 karakterlik özetini oluşturur. Bu özet, çok sayıda URL’nin aynı özeti oluşturmaması için konak ismi, protokol, port ve varsa CGI argümanlarından başka Vary başlığında tanımlı elemanlardan oluşur.

    Özeti oluşturan karakterler 64 karakterlik bir karakter kümesinden seçildiğinden oluşturulması olası farklı özet sayısı 64^22’dir. Örneğin, bir URL’nin xyTGxSMO2b68mBCykqkp1w gibi bir özeti olabilir. Bu özet, bu URL ile erişilen dosyalar önbellek içinde saklanırken dosya ismi öneki olarak kullanılır. Ancak bununla yetinilmez ve içerik CacheDirLevels ve CacheDirLength yönergelerinin değerlerine göre önce dizinlere ayrılır.

    CacheDirLevels yönergesi kaç alt seviye dizin olacağını ve CacheDirLength her dizinde kaç karakter olacağını belirler. Örneğin, yukarıdaki özete sahip bir dosyanın isminin başına yukarıdaki yapılandırma örneğine uygun olarak /var/cache/apache/x/y/TGxSMO2b68mBCykqkp1w gibi bir önek getirilebilirdi.

    Bu tekniğin asıl amacı belli bir dizin içinde bulunabilecek dosyaların ve alt dizinlerin sayısını düşük tutmaktır. Bu sayının büyük olması çoğu işletim sisteminde başarımın düşmesine sebep olur. CacheDirLength yönergesi "1" değeriyle kullanıldığında her dizin altında en fazla 64 alt dizin veya dosya açılabilir. "2" değeriyle kullanıldığında ise bu sayı 64^2’ye yükselir ve böyle artarak gider. İyi bir sebebiniz olmadıkça CacheDirLength için değer olarak "1" belirtmenizi öneririz.

    CacheDirLevels yönergesine atanacak değer önbellekte saklamayı düşündüğünüz olası dosya sayısı ile ilgilidir. Yukarıdaki örnekte olduğu gibi "2" değerini belirtirseniz, toplamda en fazla 4096 dizin oluşturulabilir. 1 milyon dosyanın önbelleklendiği bir durumda bu, her dizinde yaklaşık olarak 245 önbelleklenmiş URL demektir.

    Her URL için önbellekte en az iki dosya saklanır. Biri genellikle URL hakkındaki temel verilerden oluşan ".header" dosyasıdır, diğeri ise sunulacak içeriğin bire bir kopyası olan ".data" dosyasıdır.

    "Vary" başlığı üzerinden içeriğin uzlaşıldığı durumda URL için bir ".vary" dizini oluşturulur. Bu dizin her biri farklı bir uzlaşıma ait çok sayıda ".data" dosyası içerebilir.

    Disk Önbelleğinin Bakımı

    mod_cache_disk zaman aşımına uğrayan önbellekli içeriği silse de önbelleğin toplam boyu ve ne kadar boş bellek kaldığı hakkında bilgi vermez.

    Bunun yerine httpd önbellek içeriğini düzenli aralıklarla temizleyebilmeniz için htcacheclean adında bir araç içerir. Önbellek için azami ne kadar yer kullanılacağının ve bunun üzerinde htcacheclean’i hangi sıklıkta çalıştırılacağının tespiti biraz karmaşık bir işlem olup uygun değerler genellikle deneme yanılma yoluyla bulunur.

    htcacheclean iki işlem kipine sahiptir. Kalıcı bir artalan süreci olarak çalışabileceği gibi cron üzerinden belli aralıklarla da çalıştırılabilir. Çok büyük (onlarca GB) önbelleklerde htcacheclean’in işini bitirmesi 1 saatten fazla sürebileceğinden, cron ile çalıştırma durumunda aynı anda birden fazla kopyanın çalışıyor durumda olmaması için htcacheclean’in çalıştırılma aralığını iyi belirlemek gerekir.

    Ayrıca, htcacheclean için uygun bir "nice" seviyesi seçilmesi önerilr. Böylece, sunucu çalışırken aracın ölçüsüz disk g/ç yapmasına sebebiyet verilmemiş olur.


    Şekil 1: Önbelleğin büyümesi ve düzenli aralıklarla temizlenmesi.

    mod_cache_disk ne kadar bellek kullanıldığı hakkında bilgi vermediğinden, htcacheclean'in bir temizliğin ardından yeterli bir büyüme alanı kalacak şekilde yapılandırılması temin edilmelidir.

    memcached ile önbellekleme

    mod_cache_socache modülünü kullanarak, mod_cache çeşitli gerçeklenimlerden (diğer adıyla: "sağlayıcılar"dan) gelen veriyi önbellekleyebilir. mod_socache_memcache modülü kullanılarak, örneğin, artalan saklama mekanizması olarak memcached kullanıldığı söylenebilir.

    Genelde modül şöyle yapılandırılır:

    CacheEnable socache /
    CacheSocache memcache:memcd.example.com:11211

    İlave memcached sunucular CacheSocache memcache: satırının ardına virgüllerle ayrılarak eklenebilir:

    CacheEnable socache /
    CacheSocache memcache:mem1.example.com:11211,mem2.example.com:11212

    Bu biçim diğer mod_cache_socache sağlayıcıları için de kullanılabilir:

    CacheEnable socache /
    CacheSocache shmcb:/path/to/datafile(512000)
    CacheEnable socache /
    CacheSocache dbm:/path/to/datafile
    top

    Genel İki durumlu Anahtar/Değer Paylaşımlı Nesne Önbellekleme

    Apache HTTP sunucusu, SSL oturumları, kimlik doğrulama bilgileri gibi önbelleklenebilen özel bilgiler için socache arayüzü içinde düşük seviyeli bir paylaşımlı nesne önbelleğine sahiptir.

    Her gerçeklenime uygun ek modüller de sağlanmıştır:

    mod_socache_dbm
    DBM tabanlı paylaşımlı nesne önbelleklemesi.
    mod_socache_dc
    Distcache tabanlı paylaşımlı nesne önbelleklemesi.
    mod_socache_memcache
    Memcache tabanlı paylaşımlı nesne önbelleklemesi.
    mod_socache_shmcb
    Paylaşımlı belleğe dayalı paylaşımlı nesne önbelleklemesi.

    Kimlik Doğrulama Bilgilerinin Önbelleklenmesi

    mod_authn_socache modülü kimlik doğrulama araçlarının yükünün hafifletilmesini, kimlik doğrulama sonucunun önbelleklenmesini sağlar.

    SSL Oturumlarının Önbelleklenmesi

    mod_ssl modülü, oturum önbelleği ve önbellek zımbalaması sağlamak için socache arayüzünü kullanır.

    top

    Uzmanlaşmış Dosya Önbellekleme

    Dosya sisteminin yavaş olabildiği veya dosya tanıtıcılarının kullanımının pahalıya mal olduğu sistemlerde, sunucunun başlatılması sırasında dosyaların belleğe yüklenmesi seçeneği vardır.

    Dosyaların açılmasının yavaş olduğu sistemlerde, dosyaların sunucunun başlatılması sırasında açılması ve dosya tanıtıcısını önbelleklenmesi seçeneği vardır. Bu seçeneklerin duruk dosyalara erişimin yavaş olduğu sistemlere de bir yardımı olabilir.

    Dosya Tanıtıcı Önbelleklemesi

    Bir dosyanın açılması işlemi, özellikle de ağ dosya sistemlerinde bulunan dosyalar için önemli bir gecikme kaynağı olabilir. Önbellekte, çok sunulan dosyaların kendilerinin değil, açık dosya tanıtıcılarının saklanması httpd’yi bu tür gecikmelerden koruyabilir. httpd’de tek türde dosya tanıtıcı önbelleklemesi yapılabilmektedir.

    CacheFile yönergesi ile

    httpd’de mevcut önbelleklemenin en temel şekli mod_file_cache tarafından sağlanan dosya tanıtıcı önbelleklemesidir. Bu önbellek türü dosyaların kendilerini değil açık dosya tanıtıcılarının bir listesini saklar. Dosyaların bu anlamda önbelleklenmesi, CacheFile yönergesi yapılandırma dosyasında belirtilerek sağlanabilir.

    CacheFile yönergesi belirtilen dosyanın httpd başlatıldığında açılmasını ve dosya için yapılan sonraki her istekte bu dosya tanıtıcısının kullanılmasını sağlar.

    CacheFile /usr/local/apache2/htdocs/index.html

    Büyük miktarda dosyayı bu anlamda önbelleklemeyi tasarlıyorsanız işletim sisteminizin açık dosya tanıtıcılarının sayısı ile ilgili sınırlamasını uygun bir değere ayarlamanız gerekebilir.

    CacheFile yönergesini kullandığınız takdirde dosya içeriğindeki değişiklikleri anında isteğe yansıtamazsınız. httpd dosyayı ilk başlatıldığındaki haliyle sunar.

    Eğer httpd çalışırken dosya silinmişse httpd ilk başlatıldığındaki haline ilişkin dosya tanıtıcıyı sağlamaya ve dolayısıyla dosya içeriğini sunmaya devam edecektir. Yani, dosya silinmiş ve artık dosya sisteminde görünmüyor olsa bile httpd durdurulup dosya tanıtıcıları kapanmadıkça dosyaların silinmesiyle açılan yer serbest kalmayacaktır.

    Sistem Belleğinde Önbellekleme

    İçeriğin sistem belleğinden sunulması içerik sunmanın evrensel olarak en hızlı yoludur. Dosyaların bir disk denetleyiciden okunması ya da daha kötüsü uzak bir ağdan okunması bellekten okumayla karşılaştırılamayacak ölçüde yavaş işlemlerdir. Disk denetleyiciler genellikle fiziksel süreçleri denetlerler. Ağ erişimi ise band genişliği sınırlamalarından etkilenir. Halbuki bellek erişimi sadece nano saniyeler mertebesinde gerçekleşir.

    Sistem belleği en pahalı saklama ortamı olması sebebiyle en verimli şekilde kullanımı önemlidir. Dosyaları sistem belleğinde saklamakla sistemin kullanabileceği bellek miktarını azaltmış olursunuz. İşletim sistemi önbelleklemesinde göreceğiniz gibi bu öyle basit bir konu değildir. httpd’nin kendi kullandığı belleğin bir kısmını önbellek olarak ayırırken çok fazla bellek kullanmamak önemlidir. Aksi takdirde işletim sistemi belleğin yetmediği noktada belleği diske takaslayacağından istenen başarım artışı sağlanamayacaktır.

    İşletim Sistemi Önbelleklemesi

    Günümüz iştetim sistemlerinin hemen hemen tamamında bellek içi dosya/veri saklama işlemlerini çekirdek yönetir. Bu güçlü bir özelliktir ve işletim sistemlerinin büyük çoğunluğu bunu böyle yapar. Örneğin, Linux’ta bir dosyanın ilk defa okunduğunda ve ikinci kez okunduğunda işlemcinin ne kadar meşgul edildiğine bakalım:

    colm@coroebus:~$ time cat testfile > /dev/null
    real 0m0.065s
    user 0m0.000s
    sys 0m0.001s
    colm@coroebus:~$ time cat testfile > /dev/null
    real 0m0.003s
    user 0m0.003s
    sys 0m0.000s

    Küçük bir dosya için bile okuma süresi bakımından büyük fark ortaya çıkmaktadır. Bunun sebebi çekirdeğin dosya içeriğini bellek daha güncel amaçlar için lazım olana dek bellek içinde saklamasıdır.

    Sisteminizde yeterince yedek bellek olduğundan eminseniz, bu önbellekte daha fazla dosya saklanacağından emin olabilirsiniz. Bundan, önbelleğin sistem belleğinde verimli biçimde tutulması için httpd’de ek bir yapılandırmaya gidilmesinin gerekmediği sonucu çıkarılabilir.

    Bundan başka, işletim sistemi dosyaların değiştiği ve silindiği zamanları bildiğinden bu tür dosyaların içerikleri gerektiğinde önbellekten kendiliğinden silinmiş olur. Bellek içinde dosya saklarken dosyaların değiştirilme zamanlarını bilme olanağı olmadığından bu durum httpd’ye büyük yarar sağlar.

    İşletim sisteminin dosyaların önbelleklenmesi için sağladığı bunca yarara ve başarım artışına karşın bellek içinde dosya önbelleklemenin httpd tarafından yerine getirilmesinin daha iyi olacağı bazı durumlar vardır.

    MMapFile yönergesi ile

    mod_file_cache modülü, bir durağan dosyanın içeriğini sunucunun başlatılması sırasında (mmap sistem çağrısıyla) belleğe eşlenmesini mümkün kılmak için MMapFile yönergesini sağlar. httpd bu dosyaya gelecek sonraki istekler için dosyanın bellekiçi içeriğini kullanacaktır.

    MMapFile /usr/local/apache2/htdocs/index.html

    CacheFile yönergesinde olduğu gibi bu dosyalarda httpd başlatıldıktan sonra yapılacak bir değişiklikten httpd’nin haberi olmayacaktır.

    MMapFile yönergesi ayırdığı belleğin toplam miktarı ile ilgilenmez, dolayısıyla yönergenin aşırı kullanımından kaçınmalısınız. httpd’nin çocuk süreçlerinin her biri bu belleğin kendilerine ait birer kopyasını yapacağından belleğe eşlenen dosyaların çok yer kaplamaması büyük önem taşımaktadır; aksi takdirde işletim sistemi belleği diske takaslayacağından beklenen fayda sağlanamayacaktır.

    top

    Güvenlik Kaygıları

    EriÅŸim Denetimi ve Yetkilendirme

    CacheQuickHandler yönergesine On değerinin atandığı öntanımlı durumda mod_cache kullanımı, daha çok sunucunun önüne vidalanmış önbelleklemeli bir karşı vekile sahip olmak gibidir. Özgün sunucunun bir harici önbellekmiş gibi sorgulanmasını gerektirmeyen tüm istekler önbellekleme modülü tarafından karşılanacaktır. Bu durum httpd'nin güvenlik modelini büyük ölçüde değiştirir.

    Olası .htaccess dosyalarının dosya sisteminin tamamında taranması çok pahalı bir işlem olduğundan mod_cache, (işlemi hızlandırmak için) önbelleğe almanın temel amacını kısmen gözardı ederek, önbellekteki içeriğin sunumu için gerekli yetkilendirmenin olup olmadığı konusunda bir karar üretmez. Başka bir deyişle, eğer mod_cache bir kısım içeriği önbelleğe almışsa içerik zaman aşımına uğramadığı sürece bu içerik önbellekten sunulacaktır.

    Örneğin, yapılandırmanız bir özkaynağa IP adresine göre erişime izin veriyorsa bu içeriğin önbelleğe alınmayacağından emin olmalısınız. Bunu CacheDisable yönergesini veya mod_expires modülünü kullanarak yapabilirsiniz. Bunu yapmaz, olayı kendi haline bırakırsanız mod_cache bir karşı vekil gibi çalışarak sunulan her içeriği önbelleğe alacak ve hangi IP adresinden gelirse gelsin her istemciye bunu sunacaktır.

    CacheQuickHandler yönergesine Off atandığı takdirde, istek işleme aşamalarının tamamı yerine getirilir ve güvenlik modeli değişmeden kalır.

    Yerel İstismarcılar

    Son kullanıcılarıın isteklerine önbellekten hizmet sunulduğundan önbelleğin kendisi içerikle etkileşime geçmek isteyenlerin veya içeriği tahrif etmek isteyenlerin hedefi haline gelebilir. httpd’yi çalıştıran kullanıcı tarafından her zaman önbelleğe yazılabileceğini akıldan çıkarmamak önemlidir. Bu durumda alışılmışın tersine tüm içeriğin Apache kullanıcısı tarafından yazılamamasının sağlanması önerilir.

    Eğer Apache kullanıcısı, örneğin bir CGI sürecindeki açık nedeniyle tehlikeye atılırsa, önbellek hedef alınabilir. mod_cache_disk kullanılırken önbellekteki bir öğeyi değiştirmek veya önbelleğe yeni bir öğe eklemek görece daha kolaydır.

    Bu risk, Apache kullanıcısını kullanan diğer saldırı türleriyle karşılaştırıldığında daha yüksektir. mod_cache_disk kullanıyorsanız şunları aklınızdan çıkarmayın: (1) httpd güvenlik güncellemelerini takip edin ve sunucunuzu buna göre güncelleyin. (2) Mümkünse suEXEC kullanarak CGI süreçlerini Apache kullanıcısı olmayan bir kullanıcının aidiyetinde çalıştırın.

    Önbellek Zehirlenmeleri

    httpd bir önbellekli vekil sunucu olarak çalıştığında önbellek zehirlenmesi adı verilen sorunla karşılaşılma olasılığı vardır. Önbellek zehirlenmesi, vekil sunucunun özgün sunucudan yanlış (ve genellikle istenmeyen) içerik almasına sebep olan bir saldırı türünü betimlemek için yaygın olarak kullanılan bir terimdir.

    Örneğin httpd’nin çalıştığı sistemin kullandığı DNS sunucuları DNS önbellek zehirlenmesinden etkilenebilecek durumdaysa, bir saldırgan httpd’nin istekleri almak için başvuracağı kaynak sunucunun yerini değiştirebilir. Diğer bir örnek, HTTP istek kaçakçılığı adı verilen bir saldırı türüdür.

    Bu belge HTTP istek kaçakçılığını derinliğine incelenmesi için uygun yer değildir (böyle kaynaklara arama motorunuzla erişebilirsiniz). Bununla birlikte, vekil tarafından kaynak sunucudan alınan içeriği tamamen denetim altına almak amacıyla kaynak sunucudaki bir açığı istismar etmeye yönelik bir dizi istek yapılabileceğinin olasılık dahilinde olduğunu bilmenizde yarar vardır.

    Hizmet Reddi / Önbelleğin Engellenmesi

    Vary mekanizması aynı URL'nin çok sayıda sürümünün yan yana önbelleklenmesini mümkün kılar. İstemci tarafından sağlanan başlık değerlerine bağlı olarak, önbellek istemciye gönderilecek doğru yanıtı bulacaktır. Normal kullanımda olası değerlerin çok geniş olduğunun bilindiği durumda bir başlığı (örn, User-Agent) değişikliğe uğratma çabası bu mekanizmayı bir sorun haline getirebilir. Sitenin tanınırlığına bağlı olarak aynı URL'nin binlerce hatta milyonlarca önbellek girdisi oluşabilir ve bunlar önbellekteki diğer girdilerin yerini alabilir.

    Diğer yandan, belli bir özkaynağın URL'sinin her istekte değiştirilmesi ihtiyacı ortaya çıkabilir. Bu normalde URL dizgesine bir "cachebuster" dizgesi eklenerek yapılır. Bu içerik sunucu tarafından anlamlı bir tazelik ömrüyle önbelleklenebilir olarak imlenmişse bu girdiler kısa zamanda önbellekteki meşru girdilerin yerini alabilir. mod_cache modülü bunun önlenmesi için CacheIgnoreURLSessionIdentifiers yönergesine sahipse de bu yönerge, yoldaki vekillerin veya tarayıcı önbelleklerinin aynı hizmet reddi saldırısına maruz kalmamaları için dikkatle kullanılmalıdır.

    Mevcut Diller:  en  |  fr  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/logs.html.fr.utf80000644000000000000500000013077513412755316016612 0ustar rootsrc Fichiers journaux - Serveur HTTP Apache Version 2.4
    <-

    Fichiers journaux

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    Pour véritablement gérer un serveur web, il est nécessaire de disposer d'un retour d'informations à propos de l'activité et des performances du serveur, ainsi que de tout problème qui pourrait survenir. Le serveur HTTP Apache propose des fonctionnalités de journalisation souples et très complètes. Ce document décrit comment configurer ces fonctionnalités de journalisation et interpréter le contenu des journaux.

    top

    Vue d'ensemble

    Le serveur HTTP Apache fournit toute une variété de mécanismes différents pour la journalisation de tout ce qui peut se passer au sein de votre serveur, depuis la requête initiale, en passant par le processus de mise en correspondance des URLs, et jusqu'à la fermeture de la connexion, y compris toute erreur pouvant survenir au cours du traitement. De plus, certains modules tiers fournissent des fonctionnalités de journalisation ou insèrent des entrées dans les fichiers journaux existants, et les applications comme les programmes CGI, les scripts PHP ou autres gestionnaires peuvent envoyer des messages vers le journal des erreurs du serveur.

    Ce document décrit le fonctionnement des modules de journalisation fournis en standard avec le serveur httpd.

    top

    Avertissement à propos de la sécurité

    Tout utilisateur qui a les droits en écriture sur le répertoire dans lequel Apache httpd écrit ses journaux pourra quasi certainement avoir accès à l'uid sous lequel le serveur est démarré, en l'occurrence habituellement root. N'accordez PAS aux utilisateurs l'accès en écriture au répertoire dans lequel les journaux sont stockés sans savoir exactement quelles en seraient les conséquences ; voir le document conseils sur la sécurité pour plus de détails.

    En outre, les journaux peuvent contenir des informations fournies directement par un client, sans caractères d'échappement. Des clients mal intentionnés peuvent donc insérer des caractères de contrôle dans les journaux, et il convient par conséquent d'être très prudent lors de la manipulation des journaux bruts.

    top

    Journal des erreurs

    Le journal des erreurs du serveur, dont le nom et la localisation sont définis par la directive ErrorLog, est le journal le plus important. C'est dans celui-ci que le démon Apache httpd va envoyer les informations de diagnostic et enregistrer toutes les erreurs qui surviennent lors du traitement des requêtes. Lorsqu'un problème survient au démarrage du serveur ou pendant son fonctionnement, la première chose à faire est de regarder dans ce journal, car il vous renseignera souvent sur le problème rencontré et la manière d'y remédier.

    Le journal des erreurs est habituellement enregistré dans un fichier (en général error_log sur les systèmes de type Unix et error.log sur Windows et OS/2). Sur les systèmes de type Unix, le serveur peut aussi enregistrer ses erreurs dans syslog ou les rediriger vers un programme par l'intermédiaire d'un tube de communication (pipe).

    Le format par défaut du journal des erreurs est descriptif et de forme relativement libre. Certaines informations apparaissent cependant dans la plupart des entrées du journal. Voici un message typique à titre d'exemple :

    [Wed Oct 11 14:32:52 2000] [error] [client 127.0.0.1] client denied by server configuration: /export/home/live/ap/htdocs/test

    Le premier champ de l'entrée du journal est la date et l'heure du message. Le second champ indique la sévérité de l'erreur rapportée. La directive LogLevel permet de restreindre le type des erreurs qui doivent être enregistrées dans le journal des erreurs en définissant leur niveau de sévérité. Le troisième champ contient l'adresse IP du client qui a généré l'erreur. Vient ensuite le message proprement dit, qui indique dans ce cas que le serveur a été configuré pour interdire l'accès au client. Le serveur indique le chemin système du document requis (et non son chemin web).

    Une grande variété de messages différents peuvent apparaître dans le journal des erreurs. La plupart d'entre eux sont similaires à l'exemple ci-dessus. Le journal des erreurs peut aussi contenir des informations de débogage en provenance de scripts CGI. Toute information qu'un script CGI écrit sur la sortie d'erreurs standard stderr sera recopiée telle quelle dans le journal des erreurs.

    La directive ErrorLogFormat vous permet de personnaliser le format du journal des erreurs, et de définir les informations à journaliser. Si mod_unique_id est présent, vous pouvez utiliser le drapeau %L à la fois dans le journal des erreurs et dans le journal des accès, ce qui aura pour effet de générer un identifiant d'entrée qui vous permettra de corréler les entrées du journal des erreurs avec celles du journal des accès.

    Pendant la phase de test, il est souvent utile de visualiser en continu le journal des erreurs afin de détecter tout problème éventuel. Sur les systèmes de type Unix, ceci s'effectue à l'aide de la commande :

    tail -f error_log

    top

    Journalisation par module

    La directive LogLevel permet de spécifier un niveau de sévérité de journalisation pour chaque module. Vous pouvez ainsi résoudre un problème propre à un module particulier en augmentant son volume de journalisation sans augmenter ce volume pour les autres modules. Ceci est particulièrement utile lorsque vous voulez obtenir des détails sur le fonctionnement de modules comme mod_proxy ou mod_rewrite.

    Pour ce faire, vous devez spécifier le nom du module dans votre directive LogLevel :

    LogLevel info rewrite:trace5

    Dans cet exemple, le niveau de journalisation général est défini à info, et à trace5 pour mod_rewrite.

    Cette directive remplace les directives de journalisation par module des versions précédentes du serveur, comme RewriteLog.
    top

    Journal des accès

    Le journal des accès au serveur enregistre toutes les requêtes que traite ce dernier. La localisation et le contenu du journal des accès sont définis par la directive CustomLog. La directive LogFormat permet de simplifier la sélection du contenu du journal. Cette section décrit comment configurer le serveur pour l'enregistrement des informations dans le journal des accès.

    Bien évidemment, le stockage d'informations dans le journal des accès n'est que le point de départ de la gestion de la journalisation. L'étape suivante consiste à analyser ces informations de façon à pouvoir en extraire des statistiques utiles. L'analyse de journaux en général est en dehors du sujet de ce document et ne fait pas vraiment partie intégrante du travail du serveur web lui-même. Pour plus d'informations à propos de ce sujet et des applications dédiées à l'analyse de journaux, vous pouvez vous référer à Open Directory.

    Différentes versions du démon Apache httpd utilisaient d'autres modules et directives pour contrôler la journalisation des accès, à l'instar de mod_log_referer, mod_log_agent, et de la directive TransferLog. La directive CustomLog rassemble désormais les fonctionnalités de toutes les anciennes directives.

    Le format du journal des accès est hautement configurable. Il est défini à l'aide d'une chaîne de format qui ressemble sensiblement à la chaîne de format de style langage C de printf(1). Vous trouverez quelques exemples dans les sections suivantes. Pour une liste exhaustive de ce que peut contenir une chaîne de format, vous pouvez vous référer au chapitre chaînes de format de la documentation du module mod_log_config.

    Format habituel du journal

    Voici une configuration typique pour le journal des accès :

    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    CustomLog logs/access_log common

    Ici est définie l'identité common qui est ensuite associée à une chaîne de format de journalisation particulière. La chaîne de format est constituée de directives débutant par le caractère %, chacune d'entre elles indiquant au serveur d'enregistrer un élément particulier d'information. Des caractères littéraux peuvent aussi être insérés dans la chaîne de format ; il seront copiés tels quels dans le flux de sortie destiné à la journalisation. Les guillemets (") doivent être échappées en les faisant précéder d'un anti-slash (\) afin qu'elles ne soient pas interprétées comme la fin de la chaîne de format. La chaîne de format peut aussi contenir les caractères de contrôle spéciaux "\n" et "\t" pour insérer respectivement un passage à la ligne et une tabulation.

    La directive CustomLog définit un nouveau fichier journal en l'associant à l'identité précédemment définie. Le chemin du nom de fichier associé au journal des accès est relatif au chemin défini par la directive ServerRoot, sauf s'il débute par un slash.

    La configuration ci-dessus va enregistrer les entrées de journalisation selon un format connu sous le nom de Common Log Format (CLF) pour "Format de journalisation standard". Ce format standard peut être produit par de nombreux serveurs web différents et lu par de nombreux programmes d'analyse de journaux. Les entrées de fichier journal générées selon le format CLF ressemblent à ceci :

    127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET /apache_pb.gif HTTP/1.0" 200 2326

    Chaque partie de cette entrée de journal est décrite dans ce qui suit.

    127.0.0.1 (%h)
    Il s'agit de l'adresse IP du client (l'hôte distant) qui a envoyé la requête au serveur. Si la directive HostnameLookups est positionnée à On, le serveur va essayer de déterminer le nom de l'hôte et de l'enregistrer à la place de l'adresse IP. Cette configuration n'est cependant pas recommandée car elle peut ralentir le serveur de manière significative. Il est par conséquent préférable d'utiliser un processeur d'analyse de journaux a posteriori tel que logresolve pour déterminer les noms d'hôte. L'adresse IP indiquée ici n'est pas nécessairement l'adresse IP de la machine devant laquelle se trouve l'utilisateur. Si un serveur mandataire s'intercale entre le serveur et l'utilisateur, l'adresse indiquée sera celle du mandataire et non celle de la machine à l'origine de la requête.
    - (%l)
    Le "trait d'union" indique que la portion d'information correspondante n'est pas disponible. Dans le cas présent, l'information non disponible est l'identité (RFC 1413) du client telle que déterminée par identd sur la machine cliente. Cette information est très peu fiable et ne devrait jamais être utilisée, sauf dans le cas de réseaux internes étroitement contrôlés. Le démon httpd ne cherchera d'ailleurs à obtenir cette information que si la directive IdentityCheck est positionnée à On.
    frank (%u)
    Il s'agit de l'identifiant utilisateur de la personne qui a demandé le document, issu d'une authentification HTTP. Ce même identifiant est en général fourni aux scripts CGI par l'intermédiaire de la valeur de la variable d'environnement REMOTE_USER. Si le statut de la requête (voir plus loin) est 401, cette identifiant n'est pas fiable car l'utilisateur n'est pas encore authentifié. Si le document n'est pas protégé par mot de passe, cette partie d'information sera représentée par "-", comme la partie précédente.
    [10/Oct/2000:13:55:36 -0700] (%t)
    L'heure à laquelle la requête a été reçue. Le format est le suivant :

    [jour/mois/année:heure:minutes:secondes zone]
    jour = 2*chiffre
    mois = 3*lettre
    année = 4*chiffre
    heure = 2*chiffre
    minutes = 2*chiffre
    secondes = 2*chiffre
    zone = (`+' | `-') 4*chiffre

    Il est possible de modifier le format d'affichage de l'heure en spécifiant %{format}t dans la chaîne de format du journal, où format est une chaîne de format de la forme de celle de la fonction strftime(3) de la bibliothèque C standard, ou choisie parmi les formats spéciaux supportés. Pour plus de détails, reportez-vous aux. chaînes de format de mod_log_config.
    "GET /apache_pb.gif HTTP/1.0" (\"%r\")
    La ligne de la requête du client est placée entre guillemets. Elle contient de nombreuses informations utiles. Tout d'abord, la méthode utilisée par le client est GET. Ensuite, le client a demandé la ressource /apache_pb.gif, et enfin, le client a utilisé le protocole HTTP/1.0. Il est aussi possible d'enregistrer séparément une ou plusieurs parties de la requête. Par exemple, la chaîne de format "%m %U %q %H" va enregistrer la méthode, le chemin, la chaîne de la requête et le protocole, ce qui donnera le même résultat que "%r".
    200 (%>s)
    C'est le code de statut que le serveur retourne au client. Cette information est très importante car elle indique si la requête a fait l'objet d'une réponse positive (codes commençant par 2), une redirection (codes commençant par 3), une erreur due au client (codes commençant par 4), ou une erreur due au serveur (codes commençant par 5). Vous trouverez la liste complète des codes de statut possibles dans la specification HTTP (RFC2616 section 10).
    2326 (%b)
    La dernière partie indique la taille de l'objet retourné au client, en-têtes non compris. Si aucun contenu n'a été retourné au client, cette partie contiendra "-". Pour indiquer l'absence de contenu par "0", utilisez %B au lieu de %b.

    Combined Log Format (Format de journalisation combiné)

    Une autre chaîne de format couramment utilisée est le "Combined Log Format" (Format de journalisation combiné). Il s'utilise comme suit :

    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"" combined
    CustomLog log/access_log combined

    Ce format est identique au Common Log Format, avec deux champs supplémentaires. Chacun de ces deux champs utilise la directive commençant par le caractère "%" %{header}i, où header peut être n'importe quel en-tête de requête HTTP. Avec ce format, le journal des accès se présentera comme suit :

    127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET /apache_pb.gif HTTP/1.0" 200 2326 "http://www.example.com/start.html" "Mozilla/4.08 [en] (Win98; I ;Nav)"

    Les champs supplémentaires sont :

    "http://www.example.com/start.html" (\"%{Referer}i\")
    L'en-tête "Referer" (sic) de la requête HTTP. Il indique le site depuis lequel le client prétend avoir lancé sa requête. (Ce doit être la page qui contient un lien vers /apache_pb.gif ou inclut ce dernier fichier).
    "Mozilla/4.08 [en] (Win98; I ;Nav)" (\"%{User-agent}i\")
    L'en-tête User-Agent de la requête HTTP. C'est une information d'identification que le navigateur du client envoie à propos de lui-même.

    Journaux d'accès multiples

    Plusieurs journaux d'accès peuvent être créés en spécifiant tout simplement plusieurs directives CustomLog dans le fichier de configuration. Par exemple, les directives suivantes vont créer trois journaux d'accès. Le premier contiendra les informations de base CLF, le second les informations du Referer, et le troisième les informations sur le navigateur. Les deux dernières directives CustomLog montrent comment simuler les effets des directives ReferLog et AgentLog.

    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    CustomLog logs/access_log common
    CustomLog logs/referer_log "%{Referer}i -> %U"
    CustomLog logs/agent_log "%{User-agent}i"

    Cet exemple montre aussi qu'il n'est pas obligatoire d'associer une chaîne de format à un alias au moyen de la directive LogFormat. Elle peut être définie directement dans la ligne de la directive CustomLog.

    Journalisation conditionnelle

    Il est parfois souhaitable d'exclure certaines entrées des journaux d'accès en fonction des caractéristiques de la requête du client. On peut aisément accomplir ceci à l'aide des variables d'environnement. Tout d'abord, une variable d'environnement doit être définie pour indiquer que la requête remplit certaines conditions. Pour ceci, on utilise en général la directive SetEnvIf, puis la clause env= de la directive CustomLog pour inclure ou exclure les requêtes pour lesquelles la variable d'environnement est définie. Quelques exemples :

    # Marque les requêtes en provenance de l'interface loop-back
    SetEnvIf Remote_Addr "127\.0\.0\.1" dontlog
    # Marque les requêtes pour le fichier robots.txt
    SetEnvIf Request_URI "^/robots\.txt$" dontlog
    # Journalise toutes les autres requêtes
    CustomLog logs/access_log common env=!dontlog

    Autre exemple, imaginons l'enregistrement des requêtes en provenance d'utilisateurs de langue anglaise dans un journal, et celles des autres utilisateurs dans un autre journal.

            SetEnvIf Accept-Language "en" english
            CustomLog logs/english_log common env=english
            CustomLog logs/non_english_log common env=!english

    Dans le contexte d'une mise en cache, il peut être intéressant de connaître l'efficacité du cache. Pour y parvenir, on pourrait utiliser cette méthode simple :

    SetEnv CACHE_MISS 1
    LogFormat "%h %l %u %t "%r " %>s %b %{CACHE_MISS}e" common-cache
    CustomLog logs/access_log common-cache

    mod_cache va s'exécuter avant mod_env, et si son action est couronnée de succès, il délivrera le contenu sans faire appel à ce dernier. Si l'URL se trouve dans le cache, la valeur journalisée sera alors -, tandis que dans le cas contraire elle sera 1.

    En plus de la syntaxe env=, la directive LogFormat supporte les valeurs de journalisation conditionnelles basées sur le code de la réponse HTTP :

    LogFormat "%400,501{User-agent}i" browserlog
    LogFormat "%!200,304,302{Referer}i" refererlog

    Dans le premier exemple, le User-agent sera enregistré si le code d'état HTTP est 400 ou 501. Dans le cas contraire, c'est un caractère "-" qui sera enregistré à la place. Dans le second exemple, le Referer sera enregistré si le code d'état HTTP n'est pas 200, 204, ou 302 (remarquez le caractère "!" avant les codes d'état).

    Bien que nous venions de montrer que la journalisation conditionnelle est souple et très puissante, cette méthode de contrôle du contenu des journaux n'est pas la seule. Les fichiers journaux sont plus utiles quand ils contiennent un enregistrement complet de l'activité du serveur, et il est souvent plus aisé de simplement traiter à posteriori les fichiers journaux pour supprimer les requêtes que vous ne voulez pas y voir apparaître.

    top

    Rotation des journaux

    Même dans le cas d'un serveur modérément sollicité, la quantité d'informations stockées dans les fichiers journaux est très importante. Le fichier journal des accès grossit en général d'1 Mo ou plus toutes les 10000 requêtes. Il est par conséquent nécessaire d'effectuer périodiquement la rotation des journaux en déplaçant ou supprimant les fichiers correspondants. On ne peut pas le faire pendant que le serveur est en cours d'exécution, car Apache httpd va continuer à écrire dans l'ancien fichier journal aussi longtemps qu'il le maintiendra ouvert. C'est pourquoi le serveur doit être redémarré après le déplacement ou la suppression des fichiers journaux de façon à ce qu'il en ouvre de nouveaux.

    Avec un redémarrage graceful, on peut faire en sorte que le serveur ouvre de nouveaux fichiers journaux sans perdre de connexions existantes ou en cours avec les clients. Cependant, pour que ceci soit possible, le serveur doit continuer à écrire dans les anciens fichiers journaux pendant qu'il termine le traitement des requêtes en cours. Il est donc nécessaire d'attendre un certain temps après le rédémarrage avant d'effectuer tout traitement sur les fichiers journaux. Voici un scénario typique dans lequel on effectue une simple rotation des journaux en compressant les anciens fichiers correspondants afin de gagner de l'espace disque :

    mv access_log access_log.old
    mv error_log error_log.old
    apachectl graceful
    sleep 600
    gzip access_log.old error_log.old

    La section suivante présente une autre méthode de rotation des journaux qui consiste à utiliser les journaux redirigés.

    top

    Journaux redirigés

    Nous avons vu que le démon httpd écrivait les informations de journalisation des erreurs et des accès dans un fichier journal ; il peut aussi rediriger ces informations vers un autre processus par l'intermédiaire d'un tube de communication (pipe). Cette fonctionnalité améliore considérablement la souplesse de la journalisation, sans ajouter de code au serveur principal. Pour rediriger les informations de journalisation vers un tube de communication, remplacez simplement le nom de fichier journal par le caractère pipe "|", suivi du nom de l'exécutable qui va recueillir les entrées de journal sur son entrée standard. Le serveur va lancer le processus de redirection des journaux au moment du démarrage du serveur, et le relancera s'il cesse de fonctionner pendant l'exécution du serveur. (Nous dénommons cette technique "journalisation redirigée fiable" grâce à cette dernière fonctionnalité.)

    Les processus de journalisation redirigée sont lancés par le processus httpd parent, et héritent de l'UID de ce dernier. Cela signifie que les programmes de journalisation dirigée s'exécutent généralement en tant que root. Il est donc très important que ces programmes soient simples et sécurisés.

    Un des grands avantages de la journalisation redirigée est la possibilité d'effectuer la rotation des journaux sans avoir à redémarrer le serveur. Pour accomplir cette tâche, le serveur HTTP Apache fournit un programme simple appelé rotatelogs. Par exemple, pour une rotation des journaux toutes les 24 heures, ajoutez ces lignes :

    CustomLog "|/usr/local/apache/bin/rotatelogs /var/log/access_log 86400" common

    Notez que l'ensemble de la commande qui sera appelée par le tube de communication a été placée entre guillemets. Bien que cet exemple concerne le journal des accès, la même technique peut être utilisée pour le journal des erreurs.

    Comme la journalisation conditionnelle, la journalisation redirigée est un outil très puissant, mais si elle existe, il est préférable d'utiliser une solution plus simple comme le traitement à posteriori hors ligne.

    Par défaut, le processus de redirection du journal est lancé sans invoquer un shell. Pour invoquer un shell, utilisez "|$" au lieu de "|" (en général avec /bin/sh -c) :

    # Invocation de "rotatelogs" en utilisant un shell
    CustomLog "|$/usr/local/apache/bin/rotatelogs   /var/log/access_log 86400" common

    Il s'agissait du comportement par défaut sous Apache 2.2. Selon les spécificités du shell, ceci peut générer un processus shell supplémentaire pour toute la durée du programme de redirection du journal, et induire des problèmes de gestion de signaux au cours du redémarrage. La notation "||" est aussi supportée pour des raisons de compatibilité avec Apache 2.2 et est équivalente à "|".

    Note à propos de la plateforme Windows

    Notez que sous Windows, la mémoire allouée au bureau (desktop heap) peut devenir insuffisante si vous utilisez de nombreux processus vers lesquels sont redirigés des journaux via un pipe, et ceci particulièrement si httpd s'exécute en tant que service. La quantité de mémoire du bureau allouée à chaque service est spécifiée dans le troisième argument du paramètre SharedSection de la clé de registre HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SessionManager\SubSystems\Windows. Modifiez cette valeur avec prudence ; les précautions d'usage s'imposent lorsqu'on modifie la base de registre, mais vous pouvez aussi saturer la mémoire du bureau si vous spécifiez une valeur trop élevée.

    top

    Hôtes virtuels

    Lorsqu'un serveur possède plusieurs hôtes virtuels, il existe de nombreuses solutions pour gérer les fichiers journaux. Par exemple, on peut utiliser les journaux comme s'il s'agissait d'un serveur avec un seul hôte. Il suffit pour cela de placer les directives de journalisation en dehors des sections <VirtualHost> au niveau du serveur principal, ce qui a pour effet de journaliser toutes les requêtes dans le même journal des accès et des erreurs. Cette technique est cependant inappropriée pour recueillir des statistiques sur chaque hôte virtuel individuellement.

    Si des directives CustomLog ou ErrorLog sont placées dans une section <VirtualHost>, toutes les requêtes ou erreurs pour cet hôte virtuel ne seront enregistrées que dans le fichier spécifié. Tout hôte virtuel qui ne possède pas de directives de journalisation verra ses requêtes enregistrées dans le journal du serveur principal. Cette technique est appropriée pour un petit nombre d'hôtes virtuels, mais si ce nombre est important, elle peut devenir compliquée à gérer. En outre, des problèmes de nombre de descripteurs de fichiers insuffisant peuvent rapidement apparaître.

    Il existe un très bon compromis pour le journal des accès. En intégrant les informations à propos de l'hôte virtuel à la chaîne de format du journal, il est possible de journaliser tous les hôtes dans le même journal, puis de séparer ultérieurement le journal en plusieurs journaux individuels. Considérons par exemple les directives suivantes :

    LogFormat "%v %l %u %t \"%r\" %>s %b" comonvhost
    CustomLog logs/access_log comonvhost

    Le champ %v sert à enregistrer le nom de l'hôte virtuel qui traite la requête. Un programme tel que split-logfile peut ensuite être utilisé pour générer "à froid" autant de journaux que d'hôtes virtuels.

    top

    Autres fichiers journaux

    Enregistrement du nombre réel d'octets envoyés et reçus

    Le module mod_logio fournit deux champs LogFormat supplémentaires (%I et %O) qui permettent d'enregistrer le nombre réel d'octets reçus et envoyés sur le réseau.

    Journalisation de style investigation judiciaire (forensic logging)

    Le module mod_log_forensic permet la journalisation à des fins d'investigation judiciaire des requêtes des clients. La journalisation est effectuée avant et après le traitement de la requête, qui fait donc l'objet de deux entrées dans le journal. Le générateur de journaux d'investigation est très strict et ne permet aucune personnalisation. C'est un inestimable outil de débogage et de sécurité.

    Fichier PID

    Au démarrage, le démon httpd Apache enregistre l'identifiant du processus httpd parent dans le fichier logs/httpd.pid. Le nom de ce fichier peut être modifié à l'aide de la directive PidFile. Cet identifiant permet à l'administrateur de redémarrer et arrêter le démon en envoyant des signaux au processus parent ; sous Windows, vous devez utiliser l'option de ligne de commande -k. Pour plus de détails, consulter la page Arrêt et redémarrage.

    Journal des scripts

    Afin de faciliter le débogage, la directive ScriptLog vous permet d'enregistrer les entrées et sorties des scripts CGI. Elle ne doit être utilisée que pendant la phase de test, et en aucun cas sur un serveur en production. Vous trouverez plus d'informations dans la documentation du module mod_cgi.

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/images/0002755000000000000500000000000013523273347014721 5ustar rootsrchttpd-2.4.41/docs/manual/images/mod_rewrite_fig2.png0000644000000000000500000000254510671421551020653 0ustar rootsrc‰PNG  IHDR}³‚$²sRGB®ÎégAMA± üa cHRMz&€„ú€èu0ê`:˜pœºQ< PLTE¯ÿÿÿÿ`pÏ pHYsÄÄ•+¶IDATxÚí›MŠã<†Úê*†Þ êM/s”¹{ÑGAmt•‚ÚVò~ 'ù'§ó† ïb?þ‘=õ*ûn94@4À‹B?8Щpü¨Ûò÷—°Ü]w)O¢€ÆÇ÷yün¦ËÑlrŠãÙ‘ÈuŸÏ®@üJtöðþ)Àå¨g9*¬Þðp|·_.7¡\ŽEb€ê €rPUíRÌ=àQ£‡ãxäQ»=Jè3ÏÙ{Î\Äc4÷<äèªjæÔ¦¦ê#à¤f…38§¾ó„R?€Sdæ@ffž´‹ló+ IÍÀ)ÀÜÜFÀa¼qV¬ÌâÚ»£ê/8§. ÅÌÜÔ»úG€(¼3pb­—ç˜Ù=qQU×9)õÎ%ó´¨Â;2pbç@'C©™Çë 1<¹yb°”b÷úž{QJLd`¦ŽTÕ\§€ÂI=LÌ1(’«›:ƒK)f¢K@v `ÖÄ1sŽUÇ^ty/3ïƒ3«¨’׷ȃGõ¾KŒ("JEã–±èxc‘ #Ð0 öm”;ý ²3@igÀÖ­à5§á©m`ß™]4À¿Xõƒ#N8}®úA¼çüàˆNÃ犸ÞóƒÄü` ŸK?0¿ãÞâãìfø½ô¿ç À-?8 Ã׊è=?pÞè§ákÍìžøV?8}­úA¹çö¤ð=?([ý`ôä¹8îùoõƒÑ“ç~`~ÇÝô¦Œž<÷ƒïøA6EWOÞÏΞ¼Ÿ—Çÿýàxh~ðr€j˜m€æmnº`ÚMà_xÈS?Ø0|î xšð×Áîâ».~°W7ýöƒ_ذó{Ð{žÉÚÌ®M )ïì¯7³k€Ø x0?pªÖ­æñºpá'ùÁ¥Éù+ùA•ü$?@´úå_Y_”7Ûòƒ¸²Vi’,åi¶j™ô3Àƒùk]]_ËÒÛì Ë&€Õü`x,?0ŸùAÂðX~`õòœµüÀ«¤íGùA@¬çeöˤ¬æsÀúXôL~€–´¹i4@¼ ï7·qBól†s{;^Ïï™Ùu4@4@4@ü­^¤'–µ„4œ‹I¶h¾Ôõ"gš.Çà‰×Ã'g@_\¯ÉÀë€ás\|ú€oœé{¶táa~CÏ5#‚Lÿ¨v«^”8JvŸ,ëuç ]Ì©—jÿXLR6³¨] PJÈN—€º^”›»Éô!»;˜RÌo5à €“™š¦RJQ³ºÉZ½¨ëaîÓÞ«0wprÎø\LŠ"b æBTL,Ë  ªybsŸ6Rˆª§èkš/ÅÜSG$Åd 0©Ñ (jîP”ª5“Ø$–âÉ™;b)R7Y­±¨ºê `æî ªïHþ*œüÆ\J¡@]/J”½Ói/dUOÑ@2©÷|D2OLD$™Iž‹¦¦ðk—Áîzì 8`_ÀûöûÁi€x9À´¨÷4d»IEND®B`‚httpd-2.4.41/docs/manual/images/custom_errordocs.png0000644000000000000500000004141710671421551021021 0ustar rootsrc‰PNG  IHDR®ÐWásRGB®ÎégAMA± üa cHRMz&€„ú€èu0ê`:˜pœºQ<>PLTEÿÿÿÃÃÃqqq‚‚‚uuuQQû‚}}ÿÿ‚ŽŽŽ0eešššëë릦¦‚00eeeÏššÿ ÿše‚‚‚‚Aš¦4<ÿe0ÿÿeÏÿÿÏï00000000ÿ000000e0e0eÿe0e00e0eeeee0eeeeešeš0ešeešššÿš0šeše0šeešeššššš0ššeššÏšÏšÏššÏÏÏÿÏ0ÿÏeÏe0ÏeeÏešÏeÏÏeÿϚϚ0ÏšeÏššÏšÏÏšÿÏÏÏÏ0ÏÏeÏÏšÏÏÏÏÏÿÏÿeÏÿÏÏÿÿÿ0ÿeÿšÿÿÿ0ÿ00ÿ0eÿ0šÿ0ÿÿeÿeeÿešÿeÿÿšÿš0ÿšeÿššÿšÏh×R pHYsÄÄ•+A.IDATxÚícÛÆ‘ïg)ÞU÷Jµ”ÔÛçˆrdSwVJ3¯ñQ)e_s'¿& ¥##襱ìö.m©8ÿÿ?ðfvÀþP¤DP3”ø¿ |8˜Ýý.4ØØêb ÁÆVû•´lõ0Æ•qec[&®M6¶7Æ•qec›eN‰ÜÏþ®¿øÅ/šúõÀg”m™¸:!©ûÙ_ÂÇUˆ_èW‰ÿMžŒÏÕüw²Z#õáøj¼·\{Ùí;Ëe}PáÖØîWH¬$®¯`^Ýášl%ÛµÍ9·Ÿ»Ü \Ó×ŕޫç\%¯\ ÷Ù~Ñ@fMïÜ4qm4]\­4…to7©K66^ÀžÐ0~8Ùû«³Ý®I=«á]‰TÉlW¼š¸Ú°j¤wwg¹J¸Ú ÙÛöwc¬Þ°Wó°&Y[ÌVõVg[ \ÊÛæâ*ãY¸6š^DëfÞfôšÅ¸î6ÿÇáÆdù Ìú¹ŸíŽqÕñ@®2~µpMnÈÜèÓöNnÑÉá±9/®Æpµ‚àÝ¡Á¸ÖλªòVW«PÒðøÈ üR¹‚Bç9Û»:³ƒθÖ+vµóX.MiªRìêÞfC™o£YÁ@ÃÇ5¼@ vmäíŠq½E\“<@>®³2ðhàãšµƒ™¬ÄÌ ò®M/ïjnñÉÏ4ƒ¾=´€“*°·_°:ÛíãZ1¦«ücÅÝWÊsÞrª“ù«E0P±V‹¼êܼ®*®ì.W×° ÜÏþ.®`Û‚p­6}¼2­+h0Ãü%¸E[­ÌÀu‹mÅÍÄ•;V°­¶m0®lŒ+ãÊÆ¸2®lŒ+ÛíàšÔÛBÖèÀ·¬º7Y0°,³g[¶Áùæ‡ö]4mµ œË%q-s‰¡`?³gänæŸ_™_¶µÂU{ŰOƒÌ穃‹ù`OÈ£iÆõ|H¯ao`í2Ùsú¤Ö`[]\“Ë”\Ë ¸B‘ãTKäE '3p±Ãt{üRÒ7îáX{v–`[]\ fqU»ÎÄ5 pp-Žs-< ×Ð_#%ØV×0S3qµ/1äÞæ=xB‹Aꃠl±l±¸Z%GÆuõ½«{Á*EàšM€ÛÅØ»Ö/hÜ×¹c×…ÐÈ%;‹U  3P„kðV¸®wìZ*3F¸`lzvq/W¹@þ³¼«Y$‚ i¶4ÌÌÛúdØØVŠ`Æ•qecc\ÙØW6Æ•qecspÝ`c[mk°Î[­u68*`«Oìʸ²Õ×6Y“qe»{Û ˜ë]ÛÛÛ‚½+[Mpm´l«`v¡ôë.½–Š]à ÂMðÒlC¹0$w'-ó¦Wi8³ƒxÉ5¡Qa׿W„ßtöñÍܧ¾õÅõ†¦D)½¶Ëã<«9¸¦é†Ù¸nìd¹¸ÎìÕÖ„ìæ9¾ûÜ ¼äF}o•íGTŒÍG»íGÏ8ÁÇUàhË`òÓNáÆ4z›‡+û\' ¯gàêtèÎkæmt9·¾‘Ù¯{ÆŠ §Exc¶`GÖ²vÇ…½à¼3ž­ž6d/ö[òœ[£>¸>zôP ¯èY ¢ÕÅ•žÚ¹¸ºI ÀeÒo;£RýgÓèíF×¢~+3qõ:tçßl=èìn3Ýz5¡¸¿Nè+ÂÌCáãk„{¥çÉýÎ:ñµÁµÝ~Ð~(â!rú@P<ðÀË ÌŠ]^_»6@é\5Ô OUضåà¸ób̸4áî¾Å+ÓiÌÛa~/ô¢Þ`ebWÂÇ0¼3ö¹•\‰ ûÄ××í&zUò¯×ÚÕƒ™¸êÐ5=CÉ‹|·±‘M Ðõؘå½BÒŠzœg€¦Í <®y:3£hä`7ëø p-Þ¥Ž]í‹Q{@”bÐbq}Ðl?œ;hÌ Ì3DѪr°[…¸{ì–ð^ù¸ÎŒ"̉kÉ¢V)\Ç—@qâÅpuÃõaûa“p%^<òc¹` (…«Œä¿íq—»Îº[Bá/Êu-‡¹b×ʸ{1—ÁuËõVy‚‡è^›ˆëCé_±Û, €ÕûÙ.§e¶Òs¦ßlh?[933Å=ÎÝàI·n¯^Óí!^)3,à•9¾FÃ×+ülèK°‘] ùR\‘χ»¢!¯ôú Y*¨déª*ûº•LÛJ¦m%o¹5øÍ­ð¢àô””'¶êsΉSÌ»6Ú»í]äµù°‰Ü– ØjIkþ¯Ö|ØÞE¿Úx¨ó>»šKlkAkÍ.«D”\«1Ææâƒ¶ÕµÚáêl5Æ•ƒ¶úàÊÁllK W¶6Æ•­®¸&R,çÂÆ*.ll¬â’_̵gub×­ÿŶfæ®ë¤â¸®›Å…¸ÞŠË´Eà*ØÖÈ⸫¸ˆÝeâºÍ¸²Uĵ(v5®2fX «;ba¸RÝ_fÆ•h}°‹›Ð¼.ÒµîÈX@:ö¤®¨v.w6y×Ò°‚õ²DƒÒ+/rp5óZdÉ^3H¬ò¯VÍnˆ¨|Öü-76 ×ÝæNY\ ‚ÒÞÕÄU½×«:[H–“Sƒó ׫†«¹ s£¡Ü3\76<\íY;Ú—Êy­;p3\w¨gîƒíæfcÛ],ÐÃÎ6ÖRRÞJ¹Ocn†ˆìߤ434ìuíõª:Wph½ß—‚ݽlc#”0ƒ ¬ØÙQ]½àþàªxM”‹šgï&ˆÖí`«ÄF¸ï<„dY¼èaGl6T,°½=WS¨×z¹¸føØ%œæÄ§àGž_‚P€õ9ùU8át^  Œ«ß<ÛÂõA{弫ƒ«¡A¥%,À ë.¦±6wŸBIïZˆkðî wàüø4gõÒ¸*øM\E)\áÞ¸W•ÈÚÚÒjг2&®ŠV7ƒU ѲuŸ0pmà¦71Øn6çˆ]çó®Ž/Í"—å‡]\Ýø1_D³Jt©Ç{×ðÞ#ÇZW¯¯V†kc‡:}·Kz× TUP:¯‰?„ÝÍM ‹w·3` i@'3 '3àµt¨šÝܳàU„qÍ"K3^Ì"Jð“Uæ<ãEøë%k™Ë$ ƒ»cIçÈ̸öžÅ®‰òçì`Àt¯8òš»†tžm©*°$Ó²èuw [ ,gmo›þuÞJX(“sç*‚õÀÕ«&ØÞI¢½»»Ðº¬ÄšííMtÞ7…µ¨–ëfk] »®„ tÜFŸ§xÛ»ËjáÒÜÝÙÙ½1¬ÜÄemqÍm@h3°³-­±½Ûl··›Kv´2®÷ ×¼6;M"¶Ýl6VÙטm­¬ך«¸l1­÷ ׺÷Õâ~øë.2°V¸r7üu`Y ¶šÊb´Z­¾ü—i\:e»[Ëǵ¯iM€m1®l«…ë–ë]û¦{mñéb»k\E¶¥ž·<ïj­˜ÏÛ àŠ}µ<\ïJ>]l«Š«»¶4ºì]ÙVWÙä5ß»¦î•OÛªâšz×,xÕëÄXð:” 0ۭ㪻k…¼«&õP†h‚>«>BͲ­ ®: @Óp¾Jj%¾Œ+Û]àšJ ¸ÞµßJãWå_ X|¦'zf\ÙV×Ì»ª§4(è§ÁÀáŠ}«s¦ôã耻¤0FkÊÝî-þ÷©vªž­ºàº•5aÉ‹]u“UìR¾veqõÞgaýéު߽kGY×À¥Î‚+"S~«ëFW#3 ß ¤±E­XÆ«‰«ïa,¡Óó„pÍóL‹¼®p\ˬ5®¿Ê,œwMÚcõûºšY*t]¹Ø5€««m9 W±l\«mÊ^J㺌cY‘` ‰/ÑǾhQM×Ó ®˜ ÀºÓî`xŒ/|Es&²8`«l‡ˆ+ôÉ£žÅªIT+Ç»d zŠÏGGƒA¯ÛLfa@[9‘U#Y ¶Õò®}lÕ}‹M¯. q}-S®o°>k8x’µ¢ù½k-d1ØVË» è¢ñd:DGùdÿó?åÇ®ØB€nþè`{²•l÷#Øá\‰¬r²À{ð¨XÖz;_ÇãÉÿ›L¢¯[ÔÉFYDhÔëõ"r­Q4G5A9Y `wÂf†«½hD°Ž'“Éwøf<8PyÕ×¾wE^G§²9Ö¿õd¡kU XƒífÖ‚£Q$½ëdr1AX¯Ç“9y×HµlÁ†®Q—(?zBY×aEïʲlsÛ9Ö£NÓ©ò­ìø(/Q€•®Ç=œžö¨+còµZ,‹Áv#û墦ìwdy½¾î†kac·R½@Ôí¾8B¯<|:”Ákyïʲl7±×Ð=–.uBñÀtz=Ÿ>ÁæDÎ¥ë]1 @^ÞDƾˆ¢#r±UY,‹ÁvâÖá‹Óé„ÜëutMà¾mý–úÃþîÀ!çO­Ó9WjàÚí÷ŽN0$FÿE“9bW–Å`› ×~üŠœFÀާ?Å1Ö¾úý¿ºÝaÑ»R ŠQ/iË-kõ6,‹Á6ŸAÿ"~E˜ÀÒÖõÅÑCå—èc÷ÝDõ ÀÞYÑH•ÆöU÷—êµZ,‹Á6/®¯Ïⷔ̚N~:‹¿F~âWÔÇ\µ²°ƒÖH–®NŽºTM0š#ïʲlsÇÔÞµuqööíÛ‹3Õ{ZˆË$ÍdºWÌ»RïWr®Ø‚PEczW¯ÕbY ¶ylŸe_Ưÿ€= TjIfªDÔr225vá eu8š«k!Ëb°Uµvž¡ñÙ×Ú·^šîÕ Z'ÔVÞÿ{Ð%n#ܤk!Ëb°Už\ œ{ñë‹ó¯%)Z¡­ŸtÇ:´ŠZª°…¢Ý#LÀ»9ÙqåÌËb°ÍC+ü^¨Ê€8áå’ð—O’„¯M\OdÉ ›g'} ‡ã*‰,–Å`›ß¨hó½H//ÅÞ¥vO|ž–„.Mï:T©€$ïŠìh̲l·`­}U”"ªUë½ÈÂÖ+|mdÇ,"ö`/ØîQÆ T«ÕbY ¶9CÃøR‡«{Ú«îipc_Ü­%ûe©¬ë`Œ9hòoøÁ뜱+Ëb°•µKYjéP`/kβ'KèØ‰‹X••í×åZ°ƒ£Áx€‘+Æ®Sî ˶lSiUÊÉ`_¥cÕ%õxÏï:Ô'°ß›c–Å`[zàšâ*ýj¬ŠZ*G·â×$ŽbY(O˜´Ô¦Z-Õñ{lõ&˜ ° …=gæ Xƒ­ŠsÅßby÷ß»ÜKJZ’Û=é`iÝRû‹$ˆd&`ü´‡2„XêùùÕ °•+gÀ«8)c‰äYf]¥‹•ý·÷³Ž0Ô€p¢úv# Â|Ö1Á;­œÈbY ¶*Ö—­Iâ”Q¡Üìå^B,:Ø–îK•áª`GÝîI¯{‚­#Ê”Xƒm.Û'[Ú·î £›‹®4 Â×/áà3ÖÞ—¼î}­"Wú;NšgGÔòpy²ll:€ÃKç¥N^]¦.uq,éž û±n3@‰€1…r®ì€0š§š ¤,FÞ 4s¤–ÍÕXû¥t®{YÄš®úIqû4éž*ùS0ðï#Y…ïPßõ{ÌP5AÅØµŠ,FÂ^ˆI‘‹ëUò®•d1 }¥06æòU^\%{IsXáë¥ò¯—²@––¶Pöu"ƒ"¶¨9$ë˜þKãZY 8•ÛÌ ã¦/#P1‚€‚P­~Fwønl”¬’è5I èÂWËÀµ/ƒ±làaÖ[¸à†£Š™ª²Ýß>Áu¼ÙdÐ1{×5+h% .X/EZîqÂqlà ±ªÕ¢./$ðŽ.ö3$¯5û–”ÅÈpí^³xÆÄ5{a\×ÍÚ4žfK$±êž¼ñ«À@díqök×V‹PUݰÝÀ@VxM׊y×J²–w5!¶we\×9‹ç —²oÖž°HÕM´â®ÂUVmµÿ@·~»F*ÛíaA«BìZ]œ’Ø´¦³T¤Ê¸®eäJ¡â÷"혥ïþ—É”4u?Õ£KŽÎTÖU§]‘U*lM¢9;n—“ÅH3Gp|«,XYE2Æu½¬º6q­±ª":K´Ð¿ïåèpÉHÜ_JA ªÀ¬ksT;Wö®åe1Ì~Ræ7gèB˜s¡`f¶:æ\åý}ï2Ë Äê%Í·&­½4t=؇§»RÒuBá*v(èa›ƒ›Îã]*‹‘—že«»Qñ å'è.,‰ÕþU÷+TàRWXù¦•´°¬%«³¦]âa”@yןª{×EËbp¥ëZg±Œ¬@u™„°{YnKç·“Xà u”Ñõ¯èbiH-¥@Hy¬y[d-PƒoýëŒ+ú×´{Ö^êaSXçJR„Ý}8|=&X1Ð-²žõdìzͲlËÃEY»Ò»¦Í´Û^‚jÂmœJÝ`лŽX \ÇØùåó¾âÄw>ïʲl%ì ˜v»ºK¡1ìޥιî%Í(Ÿ¿ê¦Å¡Cø½ë”Â)]ŒâÅãѵ &Õ{°,[9;Cwˆ5§ÝÖ¡ß’6zÕÓ_Ucz”âºß[”˜H•mì ‹¢ƒ1M@]ØÄ®Œ+[‘ÉZ~ž°{Ð'N/3±!¡ó¯Š Ý渧«ö»GãI‹Z RâCÅñ5ÇÂLÖœ±+Ëb°Í0ê¬BŒ£Ïd2K:R³ Î ˆ \nòÛDÉ¥‹ìžQ¨Š¬¦»J;¢‘n’àž°lö6¢x“rû“SU["ë¼hµ¬‡ƒ™¦Cf¼ÁPõUDý²è19¢ØÑðæ]§¼+Ëb°UÉ ¼¥›¹¯øZNx'Ѫn?„—ñwXŠBi!Eë€"ˆ·Ù{€*µº²eK4îžLi[ó,‹Á–k—RßJæ'²D?¢r+SÌFó×8Æ`#ÕãÁçØ û˜Ú¿¥n„8Wî’“E/}Q4ÀÁÛ£€ñt4U^_ަ)oõ‡­4öÕ¢^Ûg#*WҘŃH+¦"Êôއl50&g[:3À²l¥ìû Ÿ‰°w²x„ÄFª©®þÌê`eÎõ;,Q]Gʦºx†“&Ò?Ÿ$1­™“e1صF48±u";¬Ð›S·ï©N¾’&Fk@7~ÙO›’«j˜¸(éLØÓª*ž#veY ¶‚È•ð$PåÍ›°•ã¿¥í÷/Y •wÅØu Öit-_”OÆQcÉÁ"¹X±ÕÉÃ\Õåd1Øî«]S»Tv¢në×cùH\uì^RêÂ7­ªr™tÇ“±ªnËøu"ó Ôñ¸JQ«º,Ûý4oÅ4) /ñ£êÓ!Ö˜€\&Ðö¾R!«Ì\˜’wd|B¼˜*X¯Çsæ]ËÉb°ÝS\#Å×D:LÙ@>õ/DÖWëRû×=ìSxD­Y$ÔéâŠMÝ` &‘ÍÓq»¤,Ûý´ÑHe[¯ÇÊËŽ¯µƒ½Ðí[tý€Ô|±ÞõH®bI¸\ßEXÄÂ…] È”XyïZUƒí¾z×´¬•T(‡ÆB:•Õ—ý\ßDÓÄ»J*UÈ;ž 'Ôâ5’I9wïZR£´uÐDG¿¡÷Ù5ß_#¼c¶Üb§ÃðÜwEø(%A•¥&å,¯£¯ÅAÝ0û\5rDšhòŸ²l6!§< 2Ö#ïúfZ½V«’,FyZSÖ’§ô¯ ®ÂÀU=ãz‰¬h¢è£– :± %Q£^/-aa ]Ssðâ4" '×IîK:äëÑø¤+‰»4àfWú׊µZUd1Jã*LR…ElZµ d[¢íQ1_‘'c€$/…=P=Höìkµ~ÛÏúèw*vU~UU.D×O#£'?H‡]½V«´,F%Z3\=ÒäM]{ßÌ wôÄNEˆôîßiP‘­ÃvKv¡ªR§ºÈ”E£i«+Ëö¡{Eª%ÉÆÿÑÛ‘ô¥Çép†èƒÇãêͳËËbTÅ5b¸Š ÍNÇ 4²Þl{¶[ ¢S¼_#²Ó©l£ª[ºL£ÓãÞÏ+z×Ó(©Î¢–¯×¯â×”W¸ºG=ù÷›¸sË».T£“–¶ÂÞÕ˜n¾˜Þ¸c-i¯`–ÙØnÅ^ãÐB§pµ*EX®w•~ó ;@½á)e°m 6$lí]ž)W:JŸ;‘žV…•½ë¢e1Ü`@”ÂUt:%qe|îÀâ¯N§ˆá€"ÊÁNix¬ÞQŠé> RØ•¹ûƒÞ@.F­£ÓÞ†¿g*€Hj¸$´ŠÚÊÞuѲÎ\¸ŠN‡q]iûýìïôþ OñÓvŠý"¶1ùúü_ìè ú:8~¥JC2†ÕU²Ò®çm3°pYŒ@"K8Y¬ŽšÙ.³¸%²g+ààõ6Üéw£·o¿·(ÔÞïDjÑ·õŽ'o'£Ñd4¹–/¨€9š >'ª‡§-3šà̉®2ëš]K0©ÈZ¢,F^µV‘Ke:zª•#HxÕK$1pjiX̶Ü|:È!=Fø@g:¢Ñ²GØ }ꋞ‚õè•nƒ­Ú¶J]!‚àð¨7@õ&ºý– t L¡ªÜë<±ë-ê ”Nº–œÍ¶¤X5 ßP¬:P½XˆØÓ!Å£bxD6LA%¡a)Þ.UGTôÇeߩE—ö¨Iì:žÜ,v]®Û1&j¹¸¾£;=Œ†§4ø‚;¢ÏäjÑÇNÇC|•À¢Ø•Tq«±¨áh0P@:Ö¤mëD&nÇ:xÕ9‚9cW–Å`3“­o)ö$¯zJ^ˆæŠ ˆZ=±bUü.'ßQ3ì‘n#s^º®@y×±Ž÷:¿w寨l™wE§zh`QÇ"ÒÀž&¬U¦d'rØÌk-éÆÙË©ò¦×ã,ï*ßmV+j±,[®²h/s«½Ï{bu4èv{„êp$‹]ʱN´“+ne÷AUÀRzªÍë$ñ®ºAeïʲlEÁ€ŒSGÇGTÐHݪ VÓÖHi·+ w˜Ðh.×’Ók¶ª–²×cd¾Uǰ °-Ä»ŽÈ¹Ò®ØÉš²Y#9ÆP’º:Q¼'‘o€$Ǫw6)cFº/nq¨ZÊ&Éëæx²9W–Å`sqÅDÖÛ¶P³Äu@¬A÷iOK°žHß*ÇÑVå¬É5yÕ‘®¸NáLÓ®jÕ’T¿VÌ °,[A0€Þõƒ×“uZ»§ªâDQÕ ¬ƒ¡ ¢aOúÙcÊd)틉aQè:Ñi±v¯ã$…•F›,‹Á¶Û{%Ýi½!ïJµÿz¼ÁQ$›>ÙƒðX îJ-úzÃÀ‰Iìíã×Iš˜ÈÞ°i—™$lÝ$X',‹Á¶ ïú¤ “8ŠÅÑ@òJ þô­XÃ8ç 0 ‘=î“Hà:m`ûVbUu†eY ¶EÄ®o1ÑŠm\O‰ÄÃHµÀ‡Ž0‡Eùˆ¦GÄ.ªµá°¬*@²a¨«¯’ðu’Ä­i;•جÞ<›e1ØÂ¸¶NUã–¹LŒ ¨G*uE˜ÙFäJIþ‚’é]±.k(EÜÓ^°‰ÂÀÔp¯I즎^Kãʲl…Þu0:N†=°)UÈ.Ò›D$‰I+ìÓ£BÕ |%!¬‰ªÉÒa€®ÎÒ!¬íeË{W–Å`Ë÷®ÖSéRe}ë R¥.¼å£wt¥w•‘Á”>ô(E(kÙbL¦f0IcØM¥?‡w]´,Û:d¨¶ºÒ6 ýKJ(NÀé/¢É@z×iöHè PÁŒtsì©$Nus¢‹ZsÆ® –Å`[ïJÕ¯žÊÌ5Þ•e1Øêã]Yƒ­&Þ•e1Øj‚+Ëb°ÕÉ»²,[½+Ëb°Õ(veY ¶eXƒ­Þ•e1Øêä]Yƒ­vÞu‘²llËô®‹•Å`c[ªw]¬,ÛR3%e1ØØVÅ»–‘Å`c[صœ,FÒÃ.O ªLOðzo[;ðzŠB±ô ¸[ð·9×i˜½n®®"ˆBíÅ¢/Œë"e1|ÝÄr¸»ƒµÝ–Ä5´ÙùúÞ”ê4ÁcWJ!°ãzÓØµUWOh®ó 36_W‡Ï…éUB©uøړ€©\–wm•¸ˆ©x¸=û×h &]î³÷Âè‘oËœ©1a©[°{ó#WáŠ#Z€"_!PøJ‰tֶ¢ýe¬Û?@v>ÀU;©¸ó„«rȸÎ'‹aÄ®¦¼›£n檘˜B•ùZ}B˜²k®’¿Ûóš{5—_DP¸â™Æ=< Ø$„…Œ„ó-ÀÛ‘§´T)ʶ8¨&‹ˆ]}1>ájîå©L…dùÀÓøóeÕÀõ¼"Wúªø`B;wp…àöœ£ÊSžó•ƒBˆà}MÆuî` àU„s fàŒMÁM ñâ¸ûY¸†Æ.Ù„?×Ðìpi*pè§5'Li/Ž]o*‹±d\¡*®Z ®Âuâá` לóPWKèPØ‚yŒëÍd1‚Á€>:š{A ?áÊòÙ‰,€<ònŒ‘§è@ ðD´ÙBë ÷ ¶8cXuÐ’Ip£ocž}ÌŒë<²V2ÀÂʤåâÄq˜˜Û1JÆnñ,©Ã¬ŽÂžå.`©ú€" v…±+S!ÑÛ.äœ %†&¹÷÷lÀ}t²+ ‹±Â§œëç]—-‹±Ê¸²‚`ó®Ë”ÅXé„ +ÖW–Å`«“weY ¶:zW–Å`«Qìʲl5Ê °,[-¼+Ëb°ÕÉ»²,[í¼+Ëb°ÕÅ»²,[¼+Ëb°Õ(3À²l5ó®,‹ÁVŸØµœÎÛ*Å®Œ+[Mb×ãÊV+ïÊc²­6®•d1ØØV$˜-‹aôäË&ÕË åaÖî}ëæjýŸ§whKO,®cA`KNG?ÝÀ‚«ÓF; $&÷4fËCÎqá ¤}7-BCêeùŠhàëäè»ANûJ´¹¢˜Picé¤O7á5Œpg‘¸V’GôôMotÚ*‹Ð<…BÕ?˜ "câ’Ã2uÃuÛ­®sÊbØ2y†J2Ùس4 ³ˆ"°XI9BKÏÔp&-±eŠ¹Ø lÞaƒóµéÀàA¦[0°Òqús§aLì3€°'$ÓÍÙ´ƒŽ4#øè8ØÂÆY²t!Ü/æh5š˜§Ý’‡\ƒÀùª»–“Å(Ì3´G|-0‚‹•“#{/ÆdOtÊÁ k·dÑ xê4öa‹°Ä‹¸yÙì6›HéÔoÈÙŒä“Hç‰lºH^:¦ÖFŒeÌIÐá™™+"ifkî^× ‡×EÊb$»GLÏVÖ!mª\­Jr„¾@‘ NæågîÉ Æ!$8èK†·TµeXL¦ –OƒÚŒLcž¿pÇ) l×ZÞ¦&÷kz_Ú¸áÔ-°‚k¸Ò•¼kyY –yhóá*ýÍ K™ËŒ£íßJ¦WU´§ ®…ê›î'!5¹ ŽÜ,\…°fvDÇr¦ÖìN(K`oDdVX?ã^d‹œÍv6à°’§e¯˜×9d1ìôRq…\m43Žò½ÇL\ÃÚ•wˆkFmGà* §[×dùà9„ÅBwÀLp•é}À†o7v]SYŒøXú^â]ÿÝÕ;"öñdv+ïÚÇÿäëa×—o à¸%A¤y}è#Ã}¡–Kqíë\Ÿ€·šX[YŒÖÓît‡ï‹«—WïûWïÞõ%°Óþðµ„ñ %=d_û]šö5¾{úÁüŒ.¢ÚÅé‡-ЬØõ~‰+?açzkÞuÝe1âùP„îùó—ϯ^¾{ùîêJ†(·˜àÇÊ•âoŸÎ^ÿ¡%Ñçš­³–Ä:6qméÙ¹Þžw]YŒ¾¢ðÙ³ç/ÑÞ_=¿ºÂ¸ ÿø1NÿáÃ?OÏuJD•Ÿ$ƒDfë«ÏÐ}Ò ñm_‡VìŠî¶ÅR7·ï]×WCU”‚gD,"{Eľ¼ºêãí½ì/?¼¡`?&.?£ö—_ !…ßaë mã+Eæyßŵ%Yfçz«Þu­e1b*)õ_=ÓÈ¢½|In}÷òªÿ#YÌœþyz6¶Ò³ñk+Žó}7;×Ûõ®ë,‹ÑŠe/‰«çÏŸ=K}lÿY‘}O>ö9f 0ŒYþšN?|øsµïKËv‹™u–ňã×1ºF3%V9ÙçÏ^RéK"‹öø‡ˬ% JWÍþ¼Ï¾õ.¼ëúÊbÈï„<¾÷Ã€ç «˜¥Àà=!Kå¯+äÞQÚàÏ?¶Æñ9Ó³¢±ëZë ®X§…‘*²(pEf dÑË¢ŸÅ9ÏŸ¿{…ÖGí™ë*>!¸ò§ö”—¾ýlQÿóþý?ÿîß?êÜš~|LV‰ÿò׿þåÂ\ö+9>$S®¯’É?þݧØum˸q ) {þÕû—Wÿñ‘}–!+¡}NYƒ÷Ï_*gû®OÎöÝãwÓ¸ˆV\çìà ÀëKƒ×ÿ¾’f|þøïñQÏ"8ÿêáú!ÁõÇéôÇ©~R³5÷®÷D#ž~A ¯Wäd¯^Rd!«Ó\*Óõüý{šý²ÿNÖÚ~øçß¿ ¹YÅø³ÿñqýùÛŸÿ~þ©|¦™¾JÌä÷ñø‡ÄÇßÎðñ·¿ÐNã×Ç®M\"PÏ.Î.ÞªÿïÎ.~ºGÞu­Ë¸ñ‡þʱꮯœésèØÜ>W±ÿxÿòw2Ýuõ¡?ŒmbcrÇâ[\ð¹1ãS‰«üWâFi§?‹o^¥?5VùM8×ÇlÀ©µp%z¯ŠZ÷Jcò;ÌTý Â‚+*{‘Ÿ}O¾ôùËþ3[¤VÛ»ßM§ã§cXE«pyýVâúí§çß|ó_ßüýü›O \%­ßâ›ol^åÝß ÎΓ™2˜ž=¢@àzt-ílÍq½—²­iŸ Q) ƒ«wÉ ÁúYûeßÈ Ä?öÇÈ*þeö\Ó*Äÿ¯ç…±«ZégÚÇ7ÙÛy¸šäãzE®ÓÏîƒw½²ñH,üe ì;ŠgÉ×ê˜VƵ2ƒ€µÀöŸË&Ù²ÙÁo§?j^‰ÖÔùš¼pýô´äå¬ú`nV¥»0R LÖ»Çè~©ö×)!«¢O‰Öóós¬G8§—oˆ×Ÿ•21àïK¯þŽk¨¿øü#Mø[†«ö ;ûøßÿ—>Çep}K†­?]ütöÓÅÛøæ>Ä®÷X#–MÒ[ÓýWîþY…^½ûòñ;z(n^â³qk|~¦£ÕgF´ªcƒgÏþž>®~²U¼ä´¼ë_E®VÞõ­]uÎU¾×ß»²,F¾¿=ÿögŠóßÒ´sL¶~ëUÞžÿüÍÏßz)Õ«wäUÿh<'›?b*ÕÚ\,#Ø$Ê}‹éVü“¯¸ìÛ³õÍ»²,[Mó®÷Rƒ­V¸®·,Ûºy×µ–Å`[[ﺖ²lë»®©,ÛzfÖVƒm½¼ëŠÈb˜Ã=ͽ‰›/±ØõæÞ†=ü 㺲ÎPLÖÅ\þÜñMQýÜ9Öa¥ÃDA2š©¨ÏØŠ9ÞTH;34tª³7Èù&áõ Û.|]wÀ«Ùã·¦—!’+…«xüÖ»ó®w"‹‘Ô˜ •g Ff[êŒS– ™,ΈyÙ8hö5ÐËgC<ƒ1ð™1bðáNò™´Æx–É¥C£1ø%ÆÏxæX¯áñ[E¥ñ[ô#`ßzGÞõ®d1ÜHoŽ„ &Ïî¦Ö‘™p6•MƒÉ˜¦öÖ’QWÁy/TÕ<¬±¥MØìLú¬á/-‚ÀrLš=–½ñ[ˆ*ã·š£f¦ßÉœ›;~ëy×»’Å€tÈHaŽíàêæ{RÏWXøÛƒWLokŽrjÑæLÂ×7çÚc^ ÇA9az¸zßÐò˜Åã·:Þuöø­Ö·²~m¢püÖ;Ê Ü‘,˜¿c°;ó´º× üÛ·ñ„1D)Ø#V›W¼»aæ'ÓÛu=ša†µ^ìêŒÙšÝ¼Sw>ÅÁ`ÀÛHþø­öæø­F@’-žŽÕZ4~ëz×5“Å€ÕÊ ÜÎ^‡,Âý”ŸoùŸµù¾,‹Á¶FÞõžÈb°­Ÿw寨l«ë½’Å`[›`àžÈb°q0ÀÆvKÞµ¼,FšŸ‘,/`7ŽÈª£‹­ìrÞɧœEªl¯ì‘C¨ÅJ•#/µ”8w²]w6âíe1Ìjë²gÞ˜ÞeÛ]Aùk^f“U®Eù#‡ §¢>¸Q+J(ÜgÙšÿ»Äu#±›ÉbX-w*}Ópk¸…ÓZö:TŵԑCõS G%øí@Ô ×0®•e1 ÍÀ¬·ÎnFYËRç$¦-þÜk435WkƒÆŽ¬ýY ¦Ìƒs7h\c¿ÆòlïTêÈE6¬ƒt!díì/a×þƒ}4`·‚°÷k^á+XÞ:ݶ¹ï­Ðî×_ev3Y W°Úcdñ Ñx"kƒ&À8Cf+¿q xmD »%Œ°c~ÅܨµAÿø ¥ ä›J¹¶XµêÙÇäí*ÐèÕ?/NK^÷*XÞßhhµªqVuÏ¡Õâh¥p­.‹á¶.¶Z¹þ¬ßläÓh"dŸ6á4G^{6«©Ÿ{±ÜßBöëìÓg¹pZa›é—Ю ø œïÈÝù§ßo¬˜3Û¾•¬®•e1ìVÍÂmÛæœ«Àý×[ ÐÄÔ_ÎÞQpwÂòåÎuçïïמ’:ÕrG:V9£W„BJžtšÞ:ûõÚ¦Gâœ~ðœ«>8¿úüF¼wë]«Êbx½«¸Êcà¿:€Ù“!tš­‹î¹QðKfn+ks¢³_È+Õ•WÝ`-¾ÅíyבŸ9®°×bïzw²ó_Ó°Å:\-¸ç´–ô®w"‹ÁÆ6‡w½+Y 6¶9¼kiYŒN§£ŸfZGZîLz²?ÎÞ`ÎôÀæ²tîq»ÛÒŸË}3aT#ð­ü2åe1lÌŠñËv ?–Z§pNè˜;ùÛêäý":¥½j°Uô®åd1:¥i-ÄuZg.•GcÇÿ™urÜ}%\ãzg±k9„ÖŽz£.²ºÊê–ÛQ¯­Çu©:ã}²Ådåäž.•Ì5CÑécšµ3óÖnáª7è`¨¢cŸzê0wl*ÓÖRV£&à àÖb×Y¸¦tˆ 3ýÚIbW‹ìŒž„çdec‹™ûN7elÁüÍ$û17j¬žÝ \ÓMu\œâšSº^ÇóÎf5‘£w wÙœé>Å®­2ÞÕÃUX/æD$Óá:ÿö‹GvLè,ü¬]yD:·ñŽ~øc/á“ñCr‚ ·=ÓöšÝëMpÝ2í&=amo&Íá.ñ±"€k'ÿ£óƒ°£æŽ°W0Pí„Ô×d¾±xêè3 Ýƒ5VÊ¡ÕI†u!¸ÞTüŽNÔ™Ýà}À0àëü5òpu~.»¯Ž: 8Wë@:vœî—¹¬v}!MO¶›º+lònnY Õu²Â´F׈ù:ÞmÔŒ“¥½•;v<‘ø¼Ž[z3ÓYÆxÞØ(Úq´þOÈû&Æœ4–ÙV¼æl ŵj0”œ¨Ñ* e÷Ù”«Dž–°;Aœ;á;iÛw:Á ";6á¦üÍ€¸ȯvŒ\@z0ì 3Ïœ‰º[íý®XìdoTÔ’”¦oæ•ÅXºuøj1®¹¸V•Åè°1N·’ÈBL“×Èb,Û¹2lù¸V–Å`c»\µ¥_n$‹ÁÆvw¸V—Å`c»\µ±Y 6¶¥ãš_ [UƒmÙ¸nåáºÅƶâfâÚ`c[iÛ`\Ùj‹ë†gºuÁòí¶öÃVႬZ$àâê⼕B½dÛº¥ý°U¹ [¶c»s×ʸ²1®Œ+ãz«¸noo·ÛmÆõ¾ã*äa^›Í¶|jâÓvó&»ØÖ–»4šÍR¸n7NÚn3®÷Ý»¶%móÚˆö¦À©ÍÍí]w-ññXüæ±|iÀÜÖŒÑvv¶ÛþBÑúÊá*ðëíÆ•ƒÅ–um6Øöfã“]Ǥ2J¾ÉÇu[áúàÑ£G áãª0–´–õkì2® øÁÒº³+vÇÇ×ú§"\ÑJ\7%Ö.®’UÑØ”´Î T8¸n7¶W¼``s§½³¹Óloî6›¿ˆ³!\%];*ÑŸk[’Jfâ5ˆë¶€OÐp›À™ÆÕ š›è7áD.°áD¯¿I¢övfÆ2I¼J„n7”ݶpm¶Z¥oÝ,Ƶ­w·ókÆ•q Ív[y×Ýöæ'»nôJ0¢[m×]WÓ£n7vÈœX@óJ´*n‹qÝùßd¿fïʸæeÈ9în7)™%Ûqc×¶a»®2^ÕÅ«öŽZÂÙs“&d´nB±wýD{WÆ5'3ÐÜlìbòu³½»½ƒÞ³¹c˜Äj ¡»­®” ÐÅ«vNÆymBB+Š4°we›?3Ðò©¬6¦V›&­iÉß ÚM+vm¤¹ÖvÞ¾›ŸljZg%²Rïʸ2®á`@4v?Aﺻ»M©æÎN¸øŸàÚngµ öý 2Ø´v’b%2‘'Fb‹`™¥Ã1ßÊ?²P|I ôRI%RŒHª4NÆfà'¬vþ!z е~Åà)’ „^þ-Ä} ž$2 ¢E?jµóÅ€C_V"†À»„¢x×=?8 ðäR²Á°ø±9n'¾péyðV˜Ï‚Çåp>ëò¦–Zj©¥–ZjýÖŸõ©ö:úlw¿ŸgÏÍ53¬–Zj©¥–Zj©¥–ZjMb¹ŒÕߨW¡ôêoTVsý /ª¿±­×™œ®¿Q¯ÆèÕߨ­êú×…õ76õÆ¡úE{…£ï\bûú›èUëo½Å‘­õ)ƒõ7¾Rz¥[£m5׿zõ7†¬êÛcõ7Š,9Q£¾þ5RcÛ·d¬þF‘Õ±1P£¾86R£o‰ŒÕߨS¯ëoÔÇŽëoœ²Däîõ7Æ-­¿ñcëo¨¥–Zj©¥–Zj©¥–Zj©5Oý¨oY/­ý”Öwכߣ6ËîÁ¬}]Xd;Ǹjkâº=û§§ç]¶Y.‹|z«Ø<ç«òý¹ÜÍ`-³|U¾g³Xeö²*ßWsXûüéeUl—3X£ÛS[?¹~ÔÙ¢Lõc¸~Ôù¶¼‹•]o]3‡7ÖºÒº©~Ô-–ÖÒúQ·œÕ:Ý÷î–üãÖœõ`ïQ?êâv‡úQsµG¶t]¶Zj=Ʊ¬–Zÿš5óyãLþa³óí÷ÿ:ŸX·;Üÿk“K‘eù,÷ÿª¬å\÷ÿ:“X·ûÜÿëLþá!6îqÿ¯3ù‡‡yºæþ_8v,O•8hM”8lM“8hM”¨ï)j©¥Ö=-½Ÿ¯Æ†Æ¼ZójijÌ«¥q¨±¡1¯–Zj©¥ÖTí¦ç®ˆ${‘IEND®B`‚httpd-2.4.41/docs/manual/images/right.gif0000644000000000000500000000007310147723030016507 0ustar rootsrcGIF89a €ÿÿÿsÇ!ù, Œ™°lÜcrªJ%ÔÛ6;httpd-2.4.41/docs/manual/images/filter_arch.png0000644000000000000500000000455310671421551017707 0ustar rootsrc‰PNG  IHDR9ˆ™[ccPLTEÿÿÿUÂÓ~ IDATxÚíœOLÙÀßÌxíÉ–5H­ii˜x­hUõ`"U•&C°[»ê岇Æ,‚½T•æ`…I0‘¢{/TBJ•zéa{ëq¢D¤H[ºRo=Í©Ü*Ø^ˆ„ oÞ¼ùã?d3ó}YwžÛóó{ï{ß¿7Ï!IKZÒ’öuµ1ˆ.#€®3ÐÏ1z45²O~ñv”/Óõf$t}Æ@]¼Afp†¶’jªRc ·ÞF˜£Úwç§ÞÂÚ¹lFï‚ìôµ¤ƒžõ²Š$ ôF–©÷@ü5 QÉŠ‡@–k%¨GŒ 2=PÕ ?=ôØ^ªÖï<·Ì¿o(í£ÚÜÁ’òCú´}4ù« }uPõÉÁIuãÙ-óêÏOæN”kÖê‡Ç·—7¬s´6¼[Ýœ£Õ݉ݥáÛóûʸ5VŸx°¿¸iFÕ_¬Uí¯ÐåÅÏ2/샹á5¥h-nçF¬ê#;ÂО9 ç_Ðå>:bsÄAævî8ÈÜ–Öª›d‘š ”&#Y´¼=ü™Åžz6±ûÑÖ¿Çhb÷·¶çØ­Ó}6GÕ­(=z~p²¼ñìÐ2ûF¹Ôær' dÍ3©U£HÍüÂ^úqýŽÍ@ýî:Ê-9 9û?“Õ:¤´énÿ§chÛ5Òn7Ðò©¹GÇ]ž¥ÆµÈ [OJ6F‘uæ(‹Zp@’æH”K žÔ¤]ñ÷Aª ‚çëE$Q(È+<Û–™P *}Oiµó’=Ú« q,P†ªHR»…%þÌC¬•} K׿)–öC»äÛ£ в†e³X—B^d’ý\d†)æ’ üšÓ¥KñA!O˺d4~³þטc |?ë’Ѹ\Ž»ÈCÑÈ$bƒBñ‘…#64Ð¥¡ËÐÅw~°¶‰“A¦°RÑóêÙ¼ÿv d\À½¿uTÉÏR P­’/!õèê4H7(Ò•@[Ó‰®½D‘@ VF°@6H¡H ,©- À#ó@ÐÜ_9=ÁÙ1™:òÂRHëgCãû­ÐÕ.ÀG¦PÕBw~ú¸ÔØü@G&’¼ƒd¸?td’È ûÒÐÕ(z•‚Ò̱DÄèdÙP}Uhœ"l(H[`ß&@9,‰"çäIÐóòV¶D°t`i?äÛ#”h̀ﰆl6´ù^<Ûõ¾ÈÈ÷ýàæE#ðYòâ£ÏûPJ@ (% 74z*¤a…Çÿ/ åô †´¬NÐ1é·^v‰íEùAh–±É5: )Cæ 'eïÜGðn›+¶{Jµ«Áqeçýœ¯Iª'ÝòY$ÎÍWÿV¥ÂòOqFÀw5™ìí.ÎsMºí"ÉwêÙïÛî n8Î/´ƒäJqAÒPa§é€\Áé]©Ü¸b¸]u7ˆ?9þÛrAƒ…A‡’½ÔRò†HŸ,ÿW_ècuô‚ƒÔ ¥<ò±Y{ªŽ2PÑO” Ñê®y ÇäfZü´ÅÝpÖ[Pµ¼!Ò§œ7/" ¢~b¬I¼¡é´ïþ);R|úéç.ˆÏ‘åçR"G´ˆ¯)wí]^ržªòù'Ýý[#_)ìðá¨ï2©™â³SÄ?ªb´ƒü•=å>ë\q´þ0?•ºï§•ºw‰LüdS'þ,¹´"=ùIó‰a0AÓõ‡W‹OcƒäÂÎ'ËÈ9 ]-„@™Ómÿ”œ9º_lÓ¸WïQ¹Y0xêŽÔÖ?ÿ*Pûd“VP«±" ©Ý¥æƒvšlŽ‚^ðû)ï‰Åa}~^î.¬Ð‚äé¬ÊÅȤönø6×pÕà Sl¡yDÜ•Rþ>boe”©ö?[âJ«Ô‰²Ú‘γ¥PZåöHõí‘!ìQšáÃ`jeT[͈òNêF#_›á2å[HCXHÉR=S«ý¬quzg°Õ°½×24f׹͖ƒã%ýžñ×<㯕ôïQÈÔ¾w/ž£ËlŽZ½È”çE2ž;RÙÐ\PÈø—*…°Ô¾=þ‘ë×h‡_#×<™¹102ýç½VwTÓI‡z„©`ÕêmZÐê kc¹® ³dt.{µ’ê *~¨#ˆX½Wèêþs úÒ°fõ^îÌ}´H —n¶€¤xÁ¨r6(ZxìoúWÈ1ãl d¶_‘Š *bríW¨1A}X tûZLŒ’Ú¯Ðãæk dœiá"‚t,Öv RÏÐâÈ Tw)FÉg(hº.'[oˆeÅþþZ¡E©BÝ®C{tá§…?¾Ÿýž~ýf=››ùðãø Fá_4®è×gËBsv36èp Ð,¯äõZ‰ÅŒ«¥õØ i”6ò†Q*æf —–„€|›£Rü9’² ô»?PcÚ‘Zécèʦ@OÛa× _7ÂwA%ø&¤ÛnãƒÃrQ| Fì(dΑ,÷ ¸¥CÉ7¨åÒWót/¥bÜ3h§4ÀGü/yAAÞI°“Dù‡tôôÚABj&–øáçØÄÊNƒW¶Ð5i…"iÿ¯±ìÑE, ù 4› ¶þž{6ϯÁW O ?îåù~+©÷â#÷/Ö±@Y,üûžQ3±@9,P /Íàþ"¨ ¤`À>é5ìDȰÒ¯ôá_¾…še·£Q@¥û½ Ú¹‚úôŸH+›’ž‘^)_– ’ÁÉ¿ÜÛÄU† (s´WÔ‘zôe $§@ "Ì‘dËò{ñ‡æ×‰è‡­ë rì«A- `T÷˜„̯7 Ø‚ (À8;¨É¬7æW‰Æ´~Ýh.jŠ•ý‹¼Zþ&¨6dCÓG¡´ýX…”n!ÕÑ’hÏÖÑ:G óWF ­B^Í:OûÁ‰1Z]?´JƒhµѪ1¢Õ‡Ä«X‰VCóÕªzF‹z:I@ (% ”€’–4œö?)Å0ðê3IEND®B`‚httpd-2.4.41/docs/manual/images/up.gif0000644000000000000500000000007110147723030016014 0ustar rootsrcGIF89a €ÿÿÿ@Xq!ù, Œ©Ë âŠ4Ñ{®n¼£;httpd-2.4.41/docs/manual/images/pixel.gif0000644000000000000500000000007510147723030016515 0ustar rootsrcGIF89a€ÿÿÿÿÿÿ!þMade with GIMP!ù ,L;httpd-2.4.41/docs/manual/images/home.gif0000644000000000000500000000267110147723030016330 0ustar rootsrcGIF87ad çQQö=ÿ]áÿC ssÿßßÿ`½…9zz°°ËËææÿá½iÈú ¢>00œœ··ÿ¹¥+77"Eôôÿ‘ YYÿÓ ú^ÿ«ìë>*‹• E%?,11ÓÓEcÿmá-E3 õõ?/««ÆÆááüüàT $$ÿ3?%ÿ^ÿ´áÿ² Ò——?Í͵â?22ƒƒÿˆïïÿ†“ (!Ìÿ?8TT2?ÀÀÛÛöö áwÿbàÜ}tô.‘%%ýý{ ½ÿ’äÜŠJˆN¥cééÿÿ! õii„„ŸŸºº½„::/E¦¦½d¢?½P? ß6&&\\ùÅo,EHHcc½~næ—U­Ø»»ññ ÿ_ #Pÿà>' ;;qqŒŒÂÂ?6 &Eà4E& *50‘'']]ÿÿ 6œáí<ô]ddšš ÿ»,&  r kk?,òò?$?"?½Š…á7 ?:rrÿ@Œ•» ùùÿÿ…ö÷dÿbh ””¯¯€ ü@ÚSÿcávÿaÐ%MS//JJá^ÿ¾¨,d @þH° Áƒ*\ȰáBaÃ"Jœhäн ß*LÜñLYÂIœæ°¤É“ Õå[‡á|´B œI³¦MpнѡCÛ“'Žaãn Œs®(ÔC‚„/QTºòaIiR2…騋‘ؤзfÍ<< !r”8ÁÓÁd 8̱pǬK7ó:TË.€&€¬•˜†JEŸ† ÆN¯ãÇ#KžL¹2Áh2kÞœYH7Ë MªåHŽ‘Á8V0m0ŸaßB;½¸¶íaˆd?¶îsÁd¦8RÈsÐÇ.º“+_¾QK˜îœ~üèdÛJ 7< þ6 WïGÁUãùù*0’ƒAÆ-AT:Ã6%”0P;“xóÎAì²E+)Á 7UXsÍ5LPC Éóœ"äÂIœ8’ÅteR1å”@ª¤"2ð ò àÌQˆ]Á–R ø!m{òÄÓË¿½Ä€ËÀÄèÖ€ 4 HD&9@œCíTÜÎ&uÒ‚ "ˆ5¢@ ”¬À(ÿÑI¡,·Y@;httpd-2.4.41/docs/manual/images/feather.png0000644000000000000500000005123113154224322017032 0ustar rootsrc‰PNG  IHDRðŒƒ;ûèbKGD6668~úâ pHYs  šœtIMEá  -ã¬ØtEXtCommentCreated with GIMPW IDATxÚìwxUוöëœÛ$TˆB$Q ˆŽm ÆÛqlÇv'v§8“L&3™d2ó%“ɤM’Iq&™Ì¤×ql'ŽkÜm\q0# !‰Þ„z¹åìõýq¯„$TŽ„è¼ÏsmtÚîûÝkíµ×®¡ªÏ©;ø¼ÚòàÁƒƒ ñªÀ5y? \à-Ä)y˜Øá×Ñ–$s.þìËñͽñ[_ ˆHÔ«9Ð*…'Ôè­R¸ZI$oü&þ¹×"" Gв󤠢D½Öô0š°efÞT²P, :˜("©ÀÀŸ\|‰aˆ-@ƒ¢'ª²3&¦pyùÞ}£½>‹rò¥ ¼Ø›G<?'ˆ[€?·jKµFwÝ-±¿„H-Ò¾¶ZÉ»ÓJàìY—1溻r30KDމ/> ¤¦—¾Ðóï+Ë÷îv(ÌɵVZ*„ª¿‹ (Q ªi¡Z¡VUÌþXÔ`Õ¡·«Î¥~»#;/Cá=ÀZõ•lÐ_…-çÙ ÷í‹ãvÛŒü9b³AÐ5"2 dcûñ¹àpTÑ#¨¼èXúȲ}%%ƒÒ×gÍkëc@ГÍLø9ðbAEÉnËåä zÞË<ý·‚ŠÒÃýMkë¬9c}Æú°´—úvþøÜâòâêáÈ€§BïHÞ>àWÀ­©×èžû%ºó·H¤¶ç¥$Té’¸.;°çØÛø¦/KŽ ßbI>)Â]¶u4ˆ½øæð¯,Õd¶ˆ¼o–­Nb÷# „""Òla7ø¦aGv^µÂn…"cô¥eûK+Fr߉5ÇVý7&»yÞFR“ÕÚ<§¥Ã™ù}¿K€) ™ðÙ0˜!k}*·ïÈÎÛòÛÅÅOìÄÄ‚\æbŽzIU_î…D~È(YÄÇboõ1è€Ãg‘V2ÂU‚\9â9#®‹ý2àø0“wø)p›š˜:ûžØŽ_"-§3¾žÉ¢ ræ]" 8Gvà›¾  f8Ê´5kÎ,Öö¡ý º;4ñÛ·¶w†ŸÄuÍc·I]¬­X/PmÙr¢(;¯ ‘GêœÈŸÖî/¯I}wËŒÙI¶š+Dd²û‰‡wÕç*eç^ȧæƒL¬ALn,0‘EÀEEÙù…üxYEñ¦ZOºíëªç‚&[¢><•½ X^€ªŽ~|P§r“D ÿšOtz®Ý¿í"Öé¾*Ú&}‹€ˆâß3¬åòÙö‡i}<ÓçOɸuÄ,p‡A`2°PD®øvºØT”÷ÅíysSFJÿõû|3y_'IKä–¢œüÌsi¬nÏžW”“·ˆõsA6YC<ÍáFŸð›Ùùÿóbî‚´!îë:ÂÇãh#Þa-¯Gàq|ø Îá×$Zøc¨ßß}‹‰/^ujâÍ'§íמNíð 7[§ÌMxÜÇWC¨~Êë]"X&"ÿbEõ™ÂìÜ[†;CoLœk£¬XЕë¢jfž;RwÞ߈øž¸˜:ÌÙÉBøpZ4ú|QvÞ ÞÐðàøðHß“€‹bÇÞ–Èöß U»º‘Y±‘¤ °}ñÅW{©ÛJÔh+¡Gê†Oúš[œ~¼*"’·='ïJoxt‹1À*ŸX?*ÊÉýÎãã3Õ‘@’™ úú×Ð¿È E³òRGre¿1wFJQvÞEä›ïÓöÉZPD–ˆÈOвó¾â -y§ßnŽ:¤Moü‰–=›ãå]ÖVR¦€XH´©3µŸÖ¦$\cáa+›ˆÜ Œëçëiü­7uœ‰#–¼gΚlI~VDÞMÿ,ʇ“Eäwdçýî‘1SýÞ°ðàøà“w*ðcàC&ܨá7“æÂG‰ÕE1QëL; ˇ¤eø¡édüìX{o÷kû§=<‚Âöì¼ë¼³ø„ ²|[Nþ"oˆô.#Ü!aó—CéC:žŠ²ó&Xªgi¯ ý–ocaN~h¤UìÖœ¹‹‚–ïi„ÄÏod¤ òž¬‰)y § à .yÿ+ðA5ŽFŠ_¦Í¿‡–ZLT‰5s†.c&ƒ@w o‘3$šÓDîO¦F•÷ÓÏò3ã-åNoˆ¸«rùPÊäIŸÒ~,’%ôÍx­ëq§­dŒ¤ -š=翚Aærîø«€lœEÓýOÏZ˜ä ƒÑzŒlðy€hÅ6ixþ8uÇⳄ£ÄÁìÆµâþT$y¦á 8á¸ÝZgânU›‹&6Äiï}Ȱ-;ÿB„œƒ"l(Ìɸ¬¼ôøoÏ…½ M½.JÁ§q ó±ÀABý,"·åäm)(/ynÚ9M”[⬠]Y˜“ûè²òÒa?>¸5gNŽûÏH¿l8:-Ö)AxA•mŠ–¡Ähm„XK̶üA|ɶ‘L±t¦¹ «EeBzÿçT¹t‚ øšG1£B¶æ¨#ðÄ‘±ÏÄNTдùnbw'$šø3& Ñ&Áò JÆš°bMÐRÝÝxšÔ[Ï„+X)“†£7½/±@L²U>üÇoÖ"cœOSoG›bnT­m‡ÿD ©ÅJø"¹¶å_ºØ(BŽW-ä¯fÍÙ|áþ½-ƒZbc&`Y¸ÁߨÈKÀ©álÈW²sÓýjÝßÿ¢h¹*ÿ}(Y}{£b,UŒÅÐÕ‡J;ýÙ2}^…mi¡€e XVfĹDàvy/}Sß๻|‡¾áqÛPÌçæKa›»MÜîÐhÄRQ6Ï•¾ÑÕØšü¸IÃÚ¼õaiÞù8ÚF¾qã3pšÀI² LÉS]&’`im]݃Æ} GИ˜`bñoøÓæ iù¶ÏÌÍaõ¶kªÀM?eÒwîä˜3‚›Ö DìÚ­ôÏõbË–³Þ°a ð«ºHØN øÖ[bÿ#ÐWküõI¶½xxÐV+3óB׊ œÚ[ઘÑ9ÿ盺åý±ÃÃv¶u òK„…ý$îR”/í?|`îô¦XÞž²ÖrôØwW|;Ùà´w³mÙyÏ.©(yfkvÞ—}ðÿDä#ô¾å¨ªúR•Ýðžßìmô"ÉœNµ?¦—VîŽÆòûFOCkð à&5Ž6ïÜ$/݃¶„L;,*à„Á±§cü1ÇßBë[0ÆJ„«ÖÛ‚˜8tˆ ®FQñ!ãÚìȆD—.–ÜÌØJ֪챷Qqì7çsÿXq`ŸrÚ)ƒ<¹uVÞ3Wù”?‚¸uØ‘ zÅ`8ã}y ÛÛ’;LOÝM âFÉÉû¢ ú1/5*úíÃuc¾uuÕöøD~–>”–&‚-¯(©>¾mVÞ¯,#¿a~·ë´¨)j®¿¼âp † 2ŠCzŒ&#¶àKªJ¤|‡Ô?ókœºê¸ôlh DbAIf ™‹ o ù@á*‹È)‹pµ$~‘Z!R±Fpšãº:qr·Ò&âÏÌ&!Þ1Ø…{eFÎXâ¾”{õ¦ñÍ×qçO9Ñ÷ÆÁ±|_‰³l_Écë…C}˜P ŠròFž^ÍšeÕÕ7îr!•ò8𼻌ë‡#F†åHÙÖœ9‚| èË™tE)Žâ¬/(/ùZy–î+yíþŠ©‹~Ö͸ÙA¯½èÐÞ7"ƒçœÿÏé+-T7®¬æŒ˜ÜY\æ¨ò_.“˜&ÍÅÙ¥ð=—§ :{ ó°yÚ1†Kn(š•;dö1¢|˜à~MΖšpàßÞ|dØ + *ö¼3ÖÅÆ’Û–U¿îQ‰ÀO«*‘£•RÿôÝĪŽ%Ôå§I¹íoµðM›v€pYuÚˆ½ÈÓªö6©¼‘f_ˆoüÌÖÅÃõƒßˆ²p'ñ ?ÀŠ{¢¹¬¬²Å-)ec¬÷æÁ»e³+–¦ác@Ϫ2Y·šÍ*<ÛŽ$öºzÓÈgT­!qD²='ï½};2¦GÂ67®;òVx¸ûÃòý{ö,ÙWü¸G#<`¨jªªnVbŒ6¾ôME›ÛŒÕ:wâo{ü ü3=TŠSs¢ã}§ý¯ã{˜vDîóœ9ø>Ù>¨`vÞ*„ ]ÀɈ:)(/n;3±åGôrÌ&ëߘ•?e´#N£Š>ïn¤ãlLú¶sÀù¨K%³c”—”—·^Ø9&ô”k5º°@á¢m9sݼ·‘Å"Š|lUYñ'uOÝ Ž‰“¯#§%k0‚Rå­Dk —n?MÌ ÝÚv‚È;_÷g¯$0keëž÷Ê!hÀ«ZËéb¶üQP|í/­,ÛS¡ª¸LnvÀð¾Ñ:X¢5àÊPI‘ EÒ°Gø¸Ë‡ žhá¶];TŸÀå–Ž¥ü£ƒ3¨>½·gåÒŸýzAyñcÞ´íÁÃù/—D–QûØpêj;pBºn%cßäÙØã¦ÑRºÄÀéd™Þ‘·¿®BhÁ•H(%±†AµŽ-ÌÎËU‘u¸0þQ%Së‹Ë÷Dº¸÷—If l|6'kTúyŽª:@•KÉ2d!bÍ]˜“o+ÜŒˆ«=u£¼º¤¼x[ç뱘> ¹\ì] ý÷†æjò±d0ÃÝ‚ˆæü“7e{ðp¸ªTu«j¨{öšwmëH؈ÜJÍ$4ÿB¢G+‰T–œ~Æ!NäN;C·îŽžðg-%8ïRIJîì²Ú«ÜM€úk›ØÑ®î-©,Ù¬àÊG`Á8 Ý8Kc}ÄAqä]ˆH-˘1–è§]]‰¢vuoùÁÒ*› wG-øTþñá9Ùƒ¦FWôBÀ­ƒœ?¬(/9èMÙ<œÇ."ˆAhxå)jŸ¸¿É;!I[~Bs–"þÍo¾ÒŽ˜;“½´y]ë ~o%xµ-Þˆ•ÒæBûƒY΢¬Ù™ ë—8äWÍÆ4wugGξÔ‘Äýv×B ×Z|E«ôýTïPþ ^r¥Ëî]$ÊkUî뱓Ï//v^Ÿ‘{_ÈÖ¯"Ò«”)pñ¶™¹K+K‹FË`‘B«j‡zÇ'?KI5·ÞêTyfMyy¯{ôK*÷¾Q”W(ñó×ÒK;O´…÷?à꜆K¿ç*òJLâ ¶¤²t8BgFéÕÿä° Ê$|š±-gN”!ŠËíÄLĉjËê£åÃ^ç «j=@ìÔIjþz?N]};Â>“Èíä4Æ,_GôäšÞ,D¬„äÝ."ÙiÂQ=ýïÖë–b'¥¼âZì1mœ÷åÁ,ç]ä[4êZ ×ô-?q\ªóC~9e ?µà ._d‰u n­šÏL²˕ѠÄãjŸÕ6ʳòrP½Áͼ¤°; ÷¹/ ´áÒ‘ö&-ÿݶ¼Å¿ZZ²c ƒ…¸õ¼F4Û¾ò`™GàñEdîö켋pç»a`æÖx@¦@`ÖÇÕ‚5cë# ¶õ†mñî¼Xz¿K" Wí“ÐðÚ+ ]HÌV‚ÈmÁ?3ÿÔlªüu›#„„.m$ÞAjoGîqR‚—Z¸¶Uú^ 4fY×5è"DÞánàéAÇXÏ.¯ÜãJ•Û°c¡ˆù-ÊgÞ,¨ë¶eçÿniEñÎs¼<-ÇJ(™êf¯pÌ('ÏJÓbø[DÜX²‡}iE…{+í¿\šþØÍ/Ô½å†À™/‘–+ˆG6;k<7sJPÜZŸ«FèI<´Öm(×¥0œˆÏ˜Ž‹H‡C^p9ÈåCœèƒ"<ãøÀáÓ [·qòÏ÷£1Ó1BX«J\ãDn¥¦“ºz-å%„÷•&"Š%$tKèXÒŽ¼µK"÷MÉ!eÍXÉmšÀ탴$Ña/·bT~nc\ûb¿pÏÛZ43¿\…?‹¸rزR0ŸsžÃ…’mcúbÐUùÏM%ýŽNµ5gÎ8K¹Ý¥ˆT®F~ß—ïý7[ôÝÙù÷[ `\/}Eÿi ¬Ûqcäå(úÚÒýÅ;û1 Ý£àʘM„K gæ.Åå JïžÖ>V¯ªžú܃‡ó‘À[WBU’m9s ,øVzäÛv÷7½ÇgùAÜÆü>¢ð‡þ¤saEq=ñ#†.ÚÙ²Åúü@Ô§¨l—K¡¨Çß<œ‡®ª-@R¸ò 'ï{ŽabŠi’¸Þ)’v€”åk°SÓ©ù¹î]¢vrüÒÁ3›ßøé¤^önì±mRú`ŸûÞž;Ñ«pgHb@þRPQRݯNaÙM ?rùøTÖ?—3+x>í9y—Yè]â6Ú[|ñ´-Œnëoš©©¡wâÒHQ•K*JžíoZƘ_ ¸ "ïx='wæY¸˜ÖÀ¼.êR‚ˆ§.öàá¼"pUýçV©·ê¿Ò¸mgÜÔÂN³`"öiz‚Èí´q$¯¼˜úÍ/=YÕ»oó.ü¦cùHYûN’®n5\Ë‘ºA//,ÄehR…GUeWÓZRY3"¯¨ò¶ËÜ]‘½r¸»Ä€JÝYùË‹²ó¾*ÈÖõáÕzE_Z]YÒï>!ðy—”U¥ÈY¹ì]º¿ô Â³@ØE¾Rð·gMà†0ñP»nzšx¸]âœ4bSÕ ðE Pÿú6NÞÿWÔqÚtØê(¦YA4~ŒL>R.^Rÿâó¨ÓÕ3ÀÒ×;žR×]GÚÕïÃJNøÙÈA—< gå¦Z*— î‚Y(ÜóLuÓY…\4ŽžKþGà¿\ˆfó@Ö/ W0ÒwgŸ¿ÒúXÊÉd‹`ºˆ™ˆ0˜+ª ÌYÚ×E®ÂKŽá¯ýnëœÜ‹Yæ2­½Õ1ç¬}îÇTÿÇ'rƒôîͲ°Þóúôù_[upw¿(¶Ý¸È”FKmUED¦‹ÈñÁ.¬ÍWa4K½™¨ÞêÆG•b…—WU– ˆ«Å¥¥ ÛsòîÕÏ r±Þ°=;ïñ%%•£OÐG•o]VþV¸¿ßÄý¸q–Ñ¢ðÈòʽU•ÿ¥¥eç½%"õ²€`Ööì¼–T”MÝæ7P÷*§eï½Ý›´+¯D£Qê^|)nЦñ§EÓJäH‡·%—:•Xc€“~‚æ²½H,JÒ‚y³s{ð·å6åæˆÆd™À —¯<Ô3÷LšåO±å¬ kcj¢‡–üEàVËáw€ümþ˜£üòŠâ~;n)œ•›Ê¸;^U1ú›¯§gÙcüg=†¸æpYXáÿ è=DmÈù4ÐW*E¨!¿ 'XÈ»~–?í³ìß;êENU}Z1¿E†Î•jÔŠ´ÐÀ#À£!±[VØ7*šœkøÀä–ŠT=ö,&iÏÕ]¹oÒTRW¬¢ê/« 'æG9í;µÕjëÿ[ß—(á㕈”ŸV­[Bò¢Åø2Ç·Ÿû QÿÐ÷¹=F#Â{SýÖåóüs¸`FÜ<ÏÆeÔ3 $†3ç¾°¸rOÕ(?ªð‹úÕ•}pcÚl#A\û´å7ï—4`鎜|%îÞ4äâq XT43ÿ‚ÊâWûUqÂnâ¶,ã{ïØdß^rdù]ññ?Ú¼‡ú¥÷¥ÎŽìüæª,†Ð7¼Gàý[i-jm¤ªGŸ¦ùÍ·¡5@‘Ð5‘Û㮹’Xc3§žÚŒi²ïH‡®(íÿѦBÿ_Û©Öí±¤¬XŽ–°›Aö{®FçZ–\ׇW²¿ál§sðüyÎÜe*úïŠ<´²¼ä¬ Üû``é0WA:¢ŸúEàÆ˜¶eŸæºyÞ²ø4pDâÚ53ÔézU?òp.ÿ+0­qçÛT?¾ ÓîÈÚgjÏ NŸFúšUT=ø8¦¾é4áÓÑò¼58I«hÐÝÙð1 ’4/±,€+EäÈ`¶(;œXÖ-çš ™w¯š{~:°V=h0ÿlÔ\S瞥åÅgMÞÛgæ¿‘çÚâ_DÖÎÌÓŸ——Wî­BÕµe¹ 7¿1cV¶7e{ðpޏª~HRc8õØs4ï«ìeËn¸ IDATŠ³Ï òŒ«/Çij¢îùW{]@jç×[‰<áˆÔ5«ñg¶y_KÌ2Ç”éˆÞ~.v*nòÛ’Þp6QÕôýÆ8«TôGK+K÷¯¨(ðšbé'é}ßy$b‚Ï’÷÷e#¼¸ ¶ ø|ßö¦lÎ!WÕ$àKÀøúÂÔ<ûÚNúîŽÈƒYÓH_U?‰ÓÔœxNPÄ5™·®ýQ!eñBÒV¯Ä ~¬2oËÊO±…ëI:7»•ÌVo6ãœôô§J•ªnRÕï8è aËš |8Šó§%ûË/Ý··iÛúRAærnª(C ïÜž5+­?/Gcѧ׶‚ÜP”=w£7m{ðLjÝWUI„æü<0ÉD"T?±‰–ýGº%]ÚfAeÜÕW`ZÂÔmÚÜͳÝX®wñM+"ý²5¦Oiuð3©¼e•Žé¿d32¤Vnñ’ž†Âtøª¯(ÔºX”*h ±" AëUµ KN#‡[Ê޶÷²‰a"«ÊJÍ@Ʋù$p.Gs›"¶ïC¸ðØ×+”*ÊÎÛ""‹]ÎE~0?}eÖü¥ïÛ=Œ$=x87 \DTU§?¾”ÒP¸“šç_Å„ÃmÔÛù*˜>•ô+/áÄÝ­­ï(ÚH‰\„Ô‹–“¶þbµBAž-pÉöÙ³¢leÚ9ݳ”KUYµ|鱡n£¢œü¹ÄƒY\î"£´àW€Gà ïzà£YZYòÂpd³('ÿ_¾êâÑV\ ïWHÙF•¯ŒÖ'\¹öE‡ÈÖÂìüÛ—U¿6uð×%ùþ©Õ|M„ÏÆ`‰°t|²ýäkÓæoX}hw£×¹= Fœ =a¼v;°\£1ªŸ{•¦Š˜Ä°Î¿VÞU`ìº ±’“¨zr­jðÞŽµiÒm›ÀÌ錻úrÒ×®¢¥¼’~”Xu-  ŸÓÝž7Ƨr§K=pXáùá o€‚òâ=FyDÕU{f ÖÆíÙs“½áÖÖÖ·ŠËèr ;‡‹¼ZÔ÷ߪ¸ ýé‘ÕÛ³çæõ'‹+‹ëŒêç€>;G$×'lÚ‘“ÿ½¦ÌIˆro9G¶å̽rzµ¾i _3Éû4‰#«“ü±GÏÍJòz¸‡QIàÚe®¦4ï£zó6œæH»½iép¦»õg%%1þº Ô½òáòƒ]tÏgÀeL2vzѪST=øÕmÂ?iÉ ò5¡Š fÙ4Sà£.ߌá™á]hék"¹lÙˆèo¸µi}Þ‹뀢|w8óººb×)Dçòñ}ÓZZQò,Êý Õ>›²Ë¶gçÿ¿ísfOÙ‘5ßÞžk¿¤¼1j£Ô(zBúþp™5› iÚw ƒê<1&Tà§ã¹§­YI`òD|ÿg´oOéBâîÊâ\››iÙ[Ž ‡Á1Œ]1ãß¹A}©)ü70hRPÑÌüp›ˆ»ö0˜——T–îζ2±È6Û|w*Ï|U]µ5kvåòýe±Ñ<ÙÍÌ¿L„ùî¤o=\PQòÇaÏ´ê]¸óK0ذuÆì»–(ë×–ÉâŠâoåäÍä}@°‹£L¾ãûŠZΓ†üÁW gÌ9àóÛ¨QÓ6ƒˆªb DÕN̲˜Èúœúæ›Å²úãÚÖXŸšfOxÔ:$¤²DÒvääç¼"@Ýâò¡W?b¼ÝÞ÷j`BsùAN½´•h]C»sßÝ›Ìë7R_¸“¦â²áko‰\£14’çå2ñö›HΟ-ÄCcþJDmW-R>å–Då‰án¯¥*¢;rò^>=ûñ–ø>î³íMôCEzžé¼Þ¸#åGŒ€P¥oïÈÉ{¤W/hs|>û=Àÿö;½ò’eç¥&âOûûù¿× Öµ–m¡J Ê^„ã(M‰n9«H¶OÌØöõ,„Á"lëk³™Ð÷=LaO(u?Œ,éû“ÀuÛvÑP\NOjóÖ}îôUK3o'Ÿx';CÝÞJØ=AD̘Ɣ¿¹ôµ«[ÿ°}°Ê]83×VÕk&»œ!^+¨(Ù<Ú,fô Ežr¹D]§Fæ>1fѨj´5+w¾À*ÜœPm¬‹˜ŸŽ”¼åû.͸ö—¬<«¹å¢ŠŒ›}ÌüB¸@ËD¸VD®¸TD OxFU·F,s}AÙžCµè;RdÐá‘F €±áãUœza áÕ]®uø‰ñ×^Aîê¶ïîñÙž‰\HšŸGÖ>Ÿk®P±,!niýý„f`p: e%Yð÷.{H¹ÇGJc-«,­Vc6 n†šXÜ9qbxÔž™õYr+㊠à7kï­)yº¢äUÝå²W_°4§öú³I¯‰×µ ¼ä]Šþ‘AÛ;ˆ¨ò¼‰Y×­Ü·÷0<Œ&og¼Vа§œÚ]{»¶Ï”ÄÇÌÏeìEË8õܫě»‘Ò¥“![G"—@€ñ×_EÖç?EÚEËI÷÷ÏŠHË`•»0g(²‘%.W›…ÍAëÉÕÄz xÖ]þõ=*š5ÚkÙs' ràÆßQKþk$åÿšÙ ä?]>>ÓB¯ˆt ÊK>¬ªwá>jÙP£N•{_&tÕÒƒ{ŽâÁÃh#ð„úü³Àß:Í-œÚ¼æÊÃÝHÑÿ¿áZæÔ+…ñ0ÝJßg^¿ä…s™tÛM¤,šOÍ+oPóâë­Ì^6˜N["¦Ég©~Î¥è¤*O]\¼'<’:ÐâŠâý ÏÇ…ÆÞ)ÜV>X”7êŽÚÑ÷ äº[ÐòØÒ}Å%#)ÿ ÊviC?»'RY^”“·f@H¼¢äK(QØI<ÈÌHA…· *ŠoÿÛŠ£Ú8ÓÃ(%ðvÒ÷ ÐTqˆšÂÝÇt¹ï­í$êàŒ©Œ¿êN½¼hu]‡{=½×vœÌï'ÖØLõ¦—Ùÿ½ŸQû«øRÇ´n¬ ºw3¿Ø¹"úWõ;"b=4;‘}p·/¯Ü¡î<7xvêô ˆnƹyÞˆ|o$–#­Y[TÕ­f`Ê;*íÅÅ`.WÕ»éCÒAB Ê3¼» ¼ø›xµž¾?| vg)eû»•šOKÔãÖ­Âij¡jÓ«˜¨Ó£´ÝùžApšÂ4—¤yßœÆ&üÓ&“”?»U³îì²û°ÿAÜ™a4/¬,ûøHìDK*KÞ^tÙÞcë·åäúGË ó.A¹\¨m{©|Ï‹#± ÷—8*öïÀ•cKDÖfçæTú+ËKOT”|È w¨ê“ÀPï7×…¨~uqEñ•KË‹·yâaTx;éÛ>~Šê7v©nèRjnÿ³S’™pÍ¥ÔnÝIóÁã=JÛ=ÞK¨Ý­Ô1¤./ 8uR›ßóÁ,ð«³ò¦p9©ï1˜ûFrG2FŸv»"qåS;ŠÆÙ5Àtwm­ß]?gÞˆµÔ;¦ª¿qùx\;à Æò’§ *J6ø;Tÿ ”&¹ƒ…# ¯«êwšŒ¹|qEÉ<êð0ê ¼ú<дÿ0u»ËÏ Þ®$ê±kVàŸ0ŽªMoà$ü¤»Ù÷îîžâDR–\Кµ"2¨ç•C†Ï$޶¸©§×––—äŽTÄ÷’ºU£‹Ìaã¶ì¼Þ¶)Üú)1B£‘mÏλJ„K]¶óájb,Úû¶©íìD혪üÜåãɈ\S83oPbÛ/)/¾qEÉͪú!E¿§ÊÓÀàlÃ{:À!`›¢÷¨êZšÃWT”|ýÂÊÒÚÁXáÞiÍpùî°qh&8c±/õ1bֶÑè°:rI¨Ï?ü»qjv”Ò°ï ¦[×- Ïk"d^qõo–P»»ŒÓŽ×¤{¶—{cæç‘2?wÈ6"âz“ª-à„¿é½wmd·SDþ}Ä·’éá\¤€H¦ÄËçôÐ0û€‡èù,°Ÿø9ýº9ªE’—ùÔÇ¢ðèüÍ#¹—Þ£E³óßRÃ÷fÒ³ñ¢-pضdr‚ ¿›¯[’¯žšy1Jqow3Ò€T %±Ðó%~B~ªÝñ²¾Kß)ssÈþ໌KxYD¾âIß^MMñ6ÕºÒ“µ¹"b‘¹ry{'W-À—’D¤±_R Ù²¬à©Î=xðàÁÃùÁ4bs°¶”<óÛïyæÚ¦T`•iÓ©FT,!&6ÍV˜ø@…±s³HÉšHUÑ>Uwc¤Öñ—à5·EKu#“æMã¿½Š¤ŒÜXTxäíÁƒ<w!…7©ê,Èÿñ¼Ë°ç©yëP§øciÓÇ‘™?•#¥Ç¨8ÐBÄ‹ àõ•Mœ¨Ý‹ÿÕý `¢1¢b-"M4 #g"«þær&]0£5«Ed‹'}{ðàÁƒÀûFâ ªzðñ´)é̺d.GvŽïk»½mIÌ  |K 1 ˆXC˜–†pí·ªÝã”wá2iîV~l=9ëæcÙÀ)òÈÛƒ<œo*_èUÀÉ@r€Yç’2)=~üK? )c Y+gÑÒáèÛ‡Q!.}·9LmïãœÓ~ÐT„ìKòYÿÅw‘·a!þP ,‘¢Ä"Â#o|8iâĉ—Z–u)0 ˜˜à…ã‰1õZSSÓSç¶þö©žFO¥¤¤ޱÚvíÚåÏË˻жíˬļ“N\³|@U‹b±ØÓÁ`°¸—1;àóö ¸UÕtàûÆ1w->Æë|ƒo$cz©RhªnbïK¥D›#’|¬ùèZæ_¹€Ç¾õe›ËZÍÓÚ¾'ÚQ&o'3yÞ.ùÄzò.›‡í÷dˆHMOù3Æ|]D¾Ø.¿ÏZ–uE_ÊhŒyYD.n÷÷¿Ú¶ýõNÏ‘iT§¿µ,ëCƒùÝîêÇÅ7oªêsápøîÎ ‚@4]eÛö÷Eä"ùÙªª?Ü·oß}= Ö¾–³‡¼- oí÷UUýÀnU}*‰ÜßÝÂÒó[¹½ý»‘HdN(Ú××üïÚµË?oÞ¼"2©Ý÷Þ²,káùPWýÁPŒá,ssssV0ü2ð~ õ’®žqçË~¿ÿõ>Ôáƒ"ò®>”eýýpŒÕ®ÐØØ89))éŸ;D$ÕEþ·c¾éóùì¦ >oŠ›ˆÔ?´l‹)ó&sÕç®bÑu‹©9RËÖ?oc×S» 7GQ`Ì„4¦/šAõ‘ZŽ–žè`eÞJÓí­ÕÛ¨\„üËç±ñKבwùüVò^Òy{”öž."W[–õÝP(tÀó㪪ªÔú¾ã8Ÿ±m{³òNäg¹eY¿Ÿ={vQ4]qÕ£ˆÈLy‡eY?ƒûŒ1w?~|LuòÓÎïOô'ݹsçÞØž¼ÄOÏ—º:ÆÀ@•ù+_ùŠc¾ KEä#½‘w"]KD6ø|¾×Œ1÷t¹F"Çù§¤¤¤2ùŒòNÔÓ Û¶0Æ<ÞÔÔ4e(ò9˜Vèu‰B‘œžÄê÷®dÍk˜±x:–ߎ[—#L˜5‘ÔIéTl­¤ád=tˆ2ÖÉê\µ„©‹§s宿ºoÞLÖ²llŸ °ØáÑé°O¬¶ˆ|*##ãÕÚÚÚŒH·X–u—ˆXýÈË<Û¶ï/-- œ£ué‘ÏdffþõðáÃIíïùýþͪÚY’øpEEE°é|²y7Õ××ÿþ|©«s} T™O:•öå/ù!ù·öÛ/}L󖌌Œ×Ãápîù8?~|Œ1æ>˲¾-"Éý¬£¡PhK$Y<Øùð=pU ß> iŽòÖ3oóÖ“»(ßRA¸¾¥µ˜„Ò‚d¯ÊÁöYìßqƒ B›¥9‰¿ý!?©R˜¾h:³/šÍœ‹sI™ŠœvÅš4ÀóÞ›TuB7÷ƉȊNu÷dõºs¾ÛÝ3'€Í.ûõž Ìv‘èÄ RSSï®êoåmݺÕ'"?ì"?O©êoŒ1{UµÅ²¬‰"²XD.6´î3©ªc>êvÏKUŠ~ôù—ÏuU60†øäl±;ÕåºÉ“'ÿ ðåÎR²ˆü¨Ýs™3f̸pM¾‘Hdˆ¬ítùÞ±cÇÖžOu5óÚ Á,ó®]»ücÇŽ}XDÖu‘î>à^cÌ&cÌaUX–5Ù²¬Õ"ònYÕyaì÷ûŸojjZ™œœ|¨‡ò¼ôÔÞkú«RŒþ·uëV_ffæ"re7ïîžWÕÃ@ƒˆLf%æœÌNu4Íçó=ZZZ:»Ýü3¤óv*5IU¿¯ª‹:Z¶¥Bïù—ô[îÒÿùÀ/õÞ/ܯã¯zÿ—Ôï]ýCýÏ ?в×Êt׳oë¯ÿoýù‡­¿ýÔÿéÝÞÿ¥ôÉï?¥oÜ»EË^/ÓÚ#µj£] Ï*3cÌ×ÛÀóL?¾ñrûo8Žó¥¾¼‹Å.í\hƒøÆ"aõéIDATn_ë§±±q²ã8ÿhŒ©îœv,»ò,ʲ¡ó÷Çù\oy1Æ|Ó1ÆÜ5Øý` ¿_SS“î8Î'1Þmè,eÕÔÔ¤wñÜæ>æñÇë8®:ßêj$Ž¡,³1æWóeŒirçÓ[·nõõ2¯5Æìïâýmg³eaŒy°Ó÷î®±šHã']Œ1æH$²°»÷î»ï>+‹Ý`Œ)k÷N,‹½s¸ù ?þÇ1úö‹¥úâo_Õ‡vè‰Ê*†cm«9V«¿ûôõןøƒÖ­Õg~²I¿½áúæ»´Uuÿ®LÊ Ùdá¸+in¡1¦¹Ó»ýãê8Îç:OR½M6íòRpàÀйFàíÊ~kDp•›‰Ù­êîäÉ“)ƘÚNy,:_ëj¤¡*s,»º R:FWºM¯©©iŠ1¦°‹ïüÇù@à±Xìò.Êvçc}T¿ßàƒż=Ð{à 8±p”I³'pÉí«YzÝ"2³Æ_À޶MåUT¨föÊÒ'¥±ìú%ä¬Èæ?rðÿ·wþÁQUYÿž÷£“&’!A@ÐÁ_üŠè.l‰«Že9ë"Xº;î¸*–ŽZî”nÍnÍhÍÄrV×õÇŒµÎ®3:3:QÔqwuuEð(¤ÃO $äwÒéî÷î=gÿH‡êytBwÒIºá~ªòGº_ß{Ïy÷Üóî}çž»½>¹,@ïòÃüÄ»¥Þ@ŽvrŠP(´ À¯ÿõ@Ë#¢²àD§ªªJ¥Ù–-“'OŽå«.kkkkD¤3 óR äÇ›9ŽsG:u”––^OD£ƒËò'ª®òÑ+sMMeYÖ¿µ^êºîÆtë5jÔ¡h4z¥ˆ—Ì¿×ÝÝ]‰<¦ººš,Ëz8Å„ô&Û¶ÿ+ÝrÊËË#–e}[k½Ø¶íg‡£íYuàDpo(úÒIc4€H ¿`>Ä#qìþt?¼˜Â”¹='†•LƒËî¼c§ŒÅWï†VjœMD §]k\dî#"ï>ª\»v­=À²Úý«Üó¼¹'ƒ*{ò³ÖuÝ " Þ¼¾¥¥etöz{@ß‘öööߨºÊG¬ÌK—.½Œˆ‚Ë¿»®»>Ó:‹ŠŠ3óÍ:Ã………wä³­Ýwß}ÑüÀ=\aÛöª”ç8Î{ÃÕö¬G¡Qœˆþ5!YLD!"ºÀ ˆvÄðõŽC(Ÿ9ÏœQ±’‰c0ÉlX®¶Cí½m Áo¼5Шªªªl€eíHa«}ß_x²¨3ð¿Ý‡žžè¼h̘17ôW°ïû ‰(¸ÔþBYYYlj¬«|³ÁÊlYÖ·‚Å´BÇqÞ‘u¿•ÏF–BGÑh4Zm¦=À3‚†ÝM8r 3ÿbBáüÀíP>}¦ÍŸÒ{¨‚!9&6Áó¼ejll\“b0œæ8Îû̼Ak}w<Ÿq"*11c›°£”Ù°ÚÛÛŸODå&ë©ß=á¶mßü,Õrü‰¦«|³,ÈüÍÀÿoo‡Aãù ¾v^$©Ècs Ƭ)**jȇ†;ÃTO1€2/êcÏæÐZpÚœS{¿›@D?‘ñE?™xf…ÅJàô¤ªJ•R‹k¤À²¬¹c÷:«›4iRTkýC"z*ÅJÏ"Z …gæ}þÈÌo666¾9iÒ¤è›:3ÿ$ƒì mÛO …-ZtEŠ÷Ó)·Ž”••u0ó‹–'éçl¥ÔE©–󺺺ƣç¡ä²7»®û鉮«|³,È|Zàšµƒ­[)µ6úóÅÑP(t€Ãèælö¿ikßCž0\¼º;¢Ø·ý*gMÄÄå 4$œGDä#ǵÁµ Þ2˜2mÛ^¡µOD÷÷Ù&Ý¿ÓÜbÛö-ÌüÛX,öP{Tû(g*€LÒ5nu§äyÞy–e­ *‘–––>û¨Öz¥ã8ËŽävÇ Fápx9Ê_y²è*ßl` 2·µµIqŸë[WW×Á²²²`˜0œzÎVÿknn>…ˆ‚Ûïê‘' ¹‘ÙžgÍ8üUŽhÃ%7]ÛµàáÄì›7å}ïW˜ŸÎ»²²òY"šøêÍÁ–mÛö¾ï¿gÛö£Ád) {4€; oÖZß¶íŸçšÆ+¥–¤²ÃD¼ÈT \LÖ`Eyyy¤¯‚]×ý„™k‰(yö·4‰LH^¬©©±ˆè¶€v¶¶¶®Ê±.5dºÊaȪ̮ë¦Ú¬œ{ö쉦pà£òqÜ ‡ÃÅ)|VÞGí S!?®PW{d¦Î=º|^œ¸ùC.3Æ÷ýE)œå("*Oœ vM BGwwwV¨ëºë,ð}¡mÛàJ"šÖ#Ñ“ZëÒà!3#gÛö«xÞÖÒÒRÆu+‰hER}naaá-èÉŒØãÑ—.½"á’Y5nܸ®\êpC­«\´l˼sçΦyóæIòÊU"{Ø 8묳ƧhCc>llž1cFð>”ÞsS]ç@w{ û·7`òÙ1aúXèðE.(ADšlÈðgID¥8 ¢*ÇqÖg¨S‘ïÉf[\×ýÀîŠÅb§»®{1] à˜w‚‰¶ßïyÞkéœ@$"µÌü/ÈØ1 }óH$r]:¶­­mUiié£DTœ$ÿ­555õ jYÖ1[~”R+Ю¼ÖU>Û@º2WUU)fn06IŽs[g(:&+3çûï¬õ¿™3gzÌÜNDc’t4ÇÌÙz”vŽˆˆVZv¬¯“]þ ùpumo¢™Ç×Ðp·ËdbËL?™ÂÌZ뛇óžîÝ»·@k}S"—s°=O U?*=2ó»J©«Pçʺ®€X,6•™u žÃe3¹¦«‘¶á™™ßü®6 ºy"Pf[ºåäD&6f^(û@MM5œã×@Çí¡^BgP¾F]í×° Óæ}=4:ñ´c–ÏOœ¶F¿Çãdólæt˜:ujÀ³Ñhô[YÜæˆ~öx)ÅWEDÁ´–_:Ž“ñrªÖúiÇqnMþ,Ìöz(únðT·\ͼ6ºÊ5 ™Eä‰èŠäÙ¥RêÇqÖ D¾ÎÎα‚iBßJ7Cbpa#Ø}Gèž½™|È ºlÙ²ð›\s!TŠ`.D;âØ³íN;·¦•=‘ç&X-ó!oÑó¤CDê´ÖÛ>üðÃÏ/^¬G²­ápøkf^ 9‡ñ„Qå.˲Ž9Œ%‰T„ÃáÏ’ßOÑ­J©·Çy%“ \×ÝÄÌ›™¥.Çã³Ü\Vlnn~1G»Ýë*m ë2ÇãñW KŽF·,ë±\8TÃEEEÏÇfæ(oI@Çm#ÑÑ”R¯¸®û`òÃ-=‰DÞ.**:Œf(gà§xœ5£~wöµ¡êгz}•ˆž23ð¼às˲n!ãú˲nìèèX^RR’®#ms:ª´¨¨è°Rj¹mÛ¯fÎÏD£Ñápøë ÍJ"z:i0"×uW§`z~$¢µsIWù`ƒ‘yÔ¨QõÌü$€Nê³+++Ÿ©©©¹¡76"ÍÕ;ˆhy ¯mpçµàµÍÍͧŒ;¶³¯²çÖÓ"Hò”‚‚‚]Ìü<€’t4)¿ÖÖÖvy&‰o´Ö÷‘mYÖýÃÑö¡\ç·”kͨÛ|vÈÆŒyG£ÏKJ2ÎÛÐ'žçkYÖ*"Z:zôèÍJ©+Ž÷›Ä>Ü`jÇݹ.«ã8ÿ-"¶O•ˆJ žÏô}\kkë )º˜•âá(/3¯eSW'ƒÌ]]]ŠHCà·×_sÍ5«›ššŠWwuu51ó-ËúyÀy+­õ=)V &”––îÔZßÙW™“'O¾'8“×ZoÁ±æG)²^0zôè=Ï;ûx¿D"˜ù%˲ ¢j­õò¶³‰ˆ-"W‹ˆ´7uÉOo{I~ùƒÿé}7¿WD–dûLÛÐëg°tuu•3óÞÁ;ë´Ö×¥:¬Ãó¼ÙÌüNŠ3Äï 93-¿¾¾>ÌÌŸ§hÿ}¨û©ãA}”K}b$u5R60œ2û¾Að˜ÓDõZëï¶··—¦š%+¥®bæÍ©úÖúŽ>œý›Iå¿£”º´÷0—ÎÎÎqÌüPŠ`Ê}ý=ˆ ÇýPJ-afN¡#ÅÌÏ(¥'ëÕÔÔXžçÍcæ Ë›ÐÏ]#íêÀ+Däs­Y>߸Wî¾ôIY÷ÊÖÞvý:q TûŒÏ}îûþBfnëÇÅ™y3¿ÅÌo3ó}\·çðáãґsÁ+²¥GÏóæ0s<ð;ß÷ý 3œQÌé¯ÍZëÓ'N$]勬ÌJ©eÌëã¾øÌü 3ÿ™W3óûÌÜÙÏ}|¨%ä»û¸ÞcæÆ ãNêÿ4’ý/¹ý©œxÀ™Jü©~®kϤæÊyམŚeç–ýPcÆÜÊÞ5Ëç†ãáºî¾ïW‰HÊ™bâ”»sˆè›Dt‘âA²Ck}]EEEw¾È …¶ˆÈ½YÛ¶W¥sDh œ}<`·544ü>ßûH¶tu²Èì8Îj­õE©Ò©&N¬"¢«ˆh)-LÎ'ÔwâÌ|“eY}-³ˆpŠò]"Ü‘(óOëׯωŒ‰¶mÿ”™—‰HWãŽMD‰¿¾NÜ£”ZèºîÇCÝÞ¡r࣠Ú§mµ{0åœ LœZFvø™qO†´ž ¾zùå—1ó-"’Q^|ù\)µØuÝù&÷<𘈬 ÓJJJVd¨ƒ¾Þqÿv¾œº:Ydv]wCww÷\y2Ó”¡"òºRªÊ¶íçúq€O0ó•"²;Í2ÿÐÚÚºt¤w¯t^õ}žˆ¼”É ¦ˆø"òdkkëìtG夑ÿ)"øzï|ù圽` [þ>#¢?äò¹!¿¸öÚkÙ¶í_®[·ît­õY•ØÒ“ªïy"ò3/ß¿ÿ¼P(T›2WWWK,»!x<$ý½ÖúÓ-çÈ‘#/ŠÈ1´ù¼6”º:™d...n´,ë®x<>“™ï‘÷EDõaSÛEäQ¥T•eY›Žcrçÿêêêf1óm"²FDüvú®Öz‰eYKú‹VÁÉÃ.˲®UJÍ‘GDä³~|ÞNyÐó¼™–eÝ•‹òdâÀ+{²?i^õ«5²ì’ËÞ¯÷¾SxǸ$C6èêê*÷}ÿ|¥Ô%J©‹<Ï;7n02d×®]¡h4:Ù÷ýù¾ï_‹Å¦766e±ì)žçÍ‹Çã3ëëëÃù¨£–––Ññxü ß÷)¥.ñ}~[[[É ÕD¤PD$Ò•{îü…|ÿ®•¢µÙ!"ó© ƒÁ0x²º„."§xCD°ÿ@#¶î؃¹ fÀ²,ØGD›Ìò¹Á`0 9æÀ¸XDdKm<ßǼógö~W˜èsƒÁ`0rÑ7€ï+Ú´i¾1k ¦OŸÛ|Û¨Û`0 †sà"R`+44´bëÖ:\pÁ7àº4Ñn³|n0 CîÍÀmçÀ–Ú݈tÆPUu4·ÆÀ,Ÿ ƒÁsœˆ:€™ñé§_`úé1cf%Г¼å;FÕƒÁ`0䘑٠MMí¨­ý ç/8EE…ÐJD;Œª ƒÁ`Ƚ¸…ÄÙ®;¶ïEcCªæŸÙûcÔl0 Cn:ð£|òÉ—¨:ÿLœ7g:D¼aÔl0 C""áÞ#Ð^øÝ;²uk]ï¿»Œv ƒÁ`ÈžÄ~£ƒÁ`0r߉KrÞF ƒÁ`:²šXED޾S'"6ê5 ƒahøó&Êà^«ÕIEND®B`‚httpd-2.4.41/docs/manual/images/bal-man.png0000644000000000000500000076370512663316405016753 0ustar rootsrc‰PNG  IHDRèë\¨·csRGB®Îé pHYs%%IR$ð iTXtXML:com.adobe.xmp 2 5 1 2 †Ò®$@IDATxì½|^·uð}nRÔ¢öµ·%yÊ–mÉ{'Îðˆ³G“|ér›·Mw¾6ùµIšöM¾f4«Ij'vlÇ{'޼dËC[¶öÞ›¢¸×wþxx(ðê>‹¤eÙ¤‡ÎÂî½8.nâðáÃ}‰ÄÿßX__ß&ÉhC,,ðµ@[[›èµÝãÚw—owé{¼BaZ ´ošó”2óÛÎOwE‰îÒwEf”¦+:d¢ÉTÕáTçsÕ/Wü®ÖçTÉéª~o]®õο'õ>²O…Œllrºè‘®ï$œ`×ìZ+ÆNÎÿ.))I444ܯåŸ*hmmýÛòòò«««Ì+¬-/;ö+X X X X X X X X X X X X X X ‹P<ÑZ[[›À'?~üø†Äö nnnÆ{ïùå¶.jÈ‚‚‚‚‚‚‚‚‚‚‚‚‚ÞhSŸ<¡>ù~tóÖ°rþhöPÅ````````````Óά¤«Ryìi'qÚi xX }Á¼ =lk4x¨b°@°@°@°@°@°@°@°@°@°@°@°Àimúi­á;]¹`ßd ê– ñmÍû휮ÌÇ éžµv!X X X X X X X X X Xàí³@ÁÛ'úÝ''Ç~yyyoÉg®Þ}– 5:,@ÿÕ¯:¸‰bBpÚO‡– :        ¼W,ð®YAouŽß†CèqjÌ1Ç!'ÝØØ(ú;ÑïÊ‹žÄç`ÀC8-€NßÕ“#E¿Á(ÅÅÅRXXèT5‡Ý&NGýƒNÁÁÁÁÁÁÁÁÁï dï «ƒé¯¦9w§3çm±æ¨žp§q®»ò…·$”É­¹­Ò¾êwŠusÎqnpÄ9"‡vŽ9¶ÂÉÁéÉÏÏ·ô—Pw™è§8áüšššÜXii© 0@úõëçœwÊó !X X X X X X X X X Xà­±@b÷îÝæ1ÇK0'\Ì6VˆÛè ö–~„4wÇÂ9áŠçx°³^ßIvI©cÝÚ,ºÔœ–¢»`+Ö‰ÉKøзIs[‹´´&uz«œ ä›Ã‚B‡µ£sd,*HYYY‡ƒîou÷WÒ}ýâàq0äÅÁã`ép‘ M&|™psÑ!ßtºeÒÁçK:?ÖUÜ®ÖÙ—Ç#M&x¦ºùô¦°½Ž™dÂI¯©©‘ƒŠ~‚Ñõé‘#G:GÝhM†Åð !X Xài®ëL×r68ïÌÚ§×ú½ZïôV ¥ïD „¾üNlµ ó{Ù‰]»v¥vÐõÁíjœó£G$çIÔÔ:'ºµOoi9Zåå¢_TOï\ÃGC[~¡´57H¢z›äÕàëë"ùÒR>R¤×pu¶ ç:­³ßæœróuekívih©W„ô/ê'•½ÆJ¯Â2uÔ“[Ë3 <Ð+—ÀMç§§fË–-rìØ1™8q¢àȰòH\~q!ÕÍ2 7úh=ºã…™ÞÄ~Y:y>^*zƒGq[ðëî§ýrÒQ¹ê– }*yQ¦c4εQ¾qu‹ƒ!7Ü×É×ÇÒ#ÛäÓÇ?.Û·o—Í›7ËàÁƒeÔ¨Q¬|Ü`H          tˉ;w¦ò ÛW»õýÔ7VK¯'•²Mk%g\é–¢b©™>Gj¯¼VÚ*+“«é8£'9× CÎyí)Þõ ”×ÿB ó6ÀÆÕ·^,Çû~\š‡-”DAir5ý$>I$?/_ZÚZeÉ¡WåçÕ÷È#ù/©ž:iÀ×âZ‡ÊírµÜ<àF[>:餫u;ºe$ŸØVÎYm\·nsÆÏ<óLéß¿¿sØqvìgtæYÞâ880‚9J=…k|¢qœàÄÁãt‹ƒ¥¢O“•—²l쓎G}¶|Oç:÷„-Íùf¢‰ßþýûåµ×^s»BÆßa{›ˆÂn!          t߉;v$=Â^m¼?½b¹ øÉIqK“HÅ <7ç »?{wJͰÑräÓ_¶q:p×ÃÑbô<y&Ç׋I¨Aƒ [Ü·nÝêœuVÖƒ“nÖ q°@°@°@°@°@°@°@°@°@÷-ë «Ç Îp‹è*q>+âzÖ¬[ÜÞáé’Æa/(”ü=í¹ºZšp6T§…¨¦Žq¢±^W··kbh’O»sîÔ×wÇqäÝáp*¦ é€:ñMÒZ¤Ÿ&s:•Tÿ5«3~¸åˆ"é!mJ×ÈÊ8ïž»­ò`åI}k“ È/• ‰íRÓT£,’+”v'P'~œÖÎJâðáÃÝ÷ÎqPx÷DýúŸ,§ÇÇ5 ƒùN‘Á ‡Ø§÷Ó†…eâgtÑØdc]÷ êå M*eƃt4ég¸Ä†½#DFwÊFùu*ÔŒ•ÜäZžØäXì—ùå7ž>/Kû< :+·´•ùpÊr…C Q&ÃààÌh)3iú9+écÇŽu;Hx/C­ÿ]ˆƒ‚‚‚‚‚‚‚‚‚ºn<á6·tGœ_s£’|NÐ’Wíü“X† <5s§Äí8ɼïD¤&NºóIÞ`9\œšÆ×ÄÉjÇ·´9!µµµîÄö#FHqq±;΋Æçé§³)'ž·´ÅÈñÓ–Öo7úÚ/Š× ?),,ÒÝ'! åf`í¡“<Fb£‹Ãu0ÅW;ø›}#lNÊÆñó‘¬Üb¿ÌÒ”ˆ‘ki—h‡[ÚʌƇ[™ÁLf®•®Åô½\ðΧIÅÛà>®OopbìÀW 8oÉ)>-بgNGÇh0ÚTð=ß‚!n”6šÏ†Îpˆ-Ç'UY7šÒeÊGéãòÆÃbÉæ gÂMWž®Ì—• x\Y¶0_FwÒqò²áçÓùélh»‚'#–Š7¸†oq*Ü8¸O—öaqôQ˜á[-塚ñ'¶´ÏÛ‡ùiÇOŽÅqeÀâÊ ×/³´Å†ÓÕ8ŽO&X´<šG`qðlô4:‹ŸÑú¼}+÷ã¸òtô>¾Ÿöyúé(ŽŸ÷Ó> i¿ÌOGñRå}K[GÓÕ²8^q°žâŸŽOœ\ƒA×ZãCÜ>Fc±Ï¯+iãcqWxô4Mœ.À|¸ŸÎV¾O“MÚø¦ÂõË Çb¿,.m°L±Ï´ŸÒZy:£ñqü´•ÇÅÆŸ²T4><9Bö‘­:xnÑO†µjœÏœ­êÜÖî°hF¬u•[··–”I ûÓ䘃Ӟvy=Á½%Ás»”f JÓÕxoLÏ"¸s„”}s^·bïèT‚šTWqu‹¹¾ÏÞ+ÑKiukm¾¾®:éWÏõõ$^âTI –AR”W”¤Uýù,›_qÇ8Å´åyïœmîtN pß3<A™áùe©à>Ž¥ÓáFyÇáb-gIŽR›Ú¨YßçÇäÆ#¡6ËK´Ê±ª#z”@¡”–w8cð%ÀÁðÉœ´Á³…)µîFHö„Æî”pís¬à#‰(Oí¯=Q»]Òq“á˦¿&5=¡rÚÕïàëëèÓÜäPæ‡TåÀãh¢ðTô¾ ŸO”ÞÇ‹Kû´¤±)}˜4?œnòðåGÞ§1ž†OtéžâŸŽO:ù”u•6JÍg’ëËî mãcqΩ†¥ÒŇûélõói²IßT¸VNl8[™Ÿ÷ÓVž)ŽÒDóqô¹âdƒor ×bƒ[lðø-î:XVKIýØqR7p¨”WÕÜêIìuíƒh\fЫS¾k«ÔL9C‡êwÌuË9ŽžŽÂ“r”‡è¶ôÖâ¾r¼h¡”7ÜpáåÃù¶¹~^Qf̘á&›Ø®¾fÍ©¬¬”¡C‡vÈ0:Ÿ¿W¢r\¼îA¹/Ë×ÝÒàðc2ý™gžqßUŸ:uªk3èÝ„Œ„8X X X X X X X X Xà=hxCè ºuØ09zù5RüóèwËÕéÓÆ™ ‡Göí’ú¢29¶ðrië§eMzÎ…Ä;‡¸éJvíÀrlפoÃoÕ±?[ùèIî’Îõ1ýFú9Zô÷ÒÔ¦:ú¶­Gå¯FuÚÇ—WÊWê?.ZûEyµì™7À­®;NªÒâ–—d²w}Ÿ+ÕYïÝñ™5œƒ®èp~p*Øâ>f̷⌣bN|}þ7˜å£xä)3<òÒÁÒ•½ñõq±Žçѽ[ä¡§ž”÷ßüG2v@‘.å~ˆÒ‚k!Z< ³¼c[úí–-[Ü 6''Nt'³¿úê«®NƒëôZ§Ì—‰ Ó—ú÷ÓëýðáÃ|“^\€69y¢“"ê¤óšHEE…ƒ™cL|âxX°@°@°@°@°@°@°@°@°À»Å©tu’T×Ï=KöÉ¥ïKÙÎmº¦š Íê/ÔŒ™$G¯¹Aš&MÖ•V])Çy÷‰#©óÖV6D ýsiÚ?DúW‡_3q98D®¾yT]j‡^'‰‚ÒöÕóÎÎ9¼XE/HÈåýÊ÷ŽüHþoõ²¬èYÐÕSýÄš´ô•6_-Ÿî}«L,¯Ž—Êõü}rHP' N±Æ‰d»ØŠ!i 8ä}GÃò†cqÔñóFãó6:bׇ~T~G-Áyú¯UãɳΓ /¾P†ôÒ‰’c{åo”†ú:Y¹ò5yàñg¥QÛåŒó¯+/˜¦ó2¥¸¬Döê'õ¹ïÙ²¿Z'7Þx½Öì”ûþ®ªÈ®ûåÌ‹¯ë®¸PïÜ ÷ßÿ€ìŸYÛµk—ðVÓÑÏmð£r~Ð6éDžéÅ5Ñ!X X X X X X X X Xà½jÔ:Q§[½S©;ë©=FJôóJyµ5ÎVͺµµA·ÀË€úù5V¼“+뚈·eK“´”–ÃE_”ãÇ.“†½n¥µU»ÆÒ±ÒÜ»Rß/.R/¢}k{ Ǻ©­IŠuEþÊŠKdZídÙØ°Yü:710 °B&÷™(%ý3oNiWƒñ¨kßÞÏövœ ƒGùFáä͉â’âû°¸2+sdâð fÓ|ª®@_MؾúeùÕ/ûÈà’ùÕÿÞ-ûÊ7¥T':–¼ôºÌ»êƒ2¢¸Jþëɨaýœ³œhm”o¾)Òoœ|æ†9òÄ]?–ß½ûayæ_ÉxAÆ÷:.¿_s@¾ôéÏɺÅÉ]wÝ'×,˜&ËßX-ç^û9™>n¸æß,-ÚçZtá Ÿý’´îÛ v“*dõÊ•2æ×É܉Cäàž]²fí6¹ô†[¤Oë>ùÞ÷ɨ៕­o¾(ÛšgË—?z½[Øòî¿BÐÎ&DÁÁÁÁÁÁÁÁÁï ¤wÐ1:é¼7Ü6d˜Ô ÑϤµ;ànà­Å¬œ»÷γYùÒíDa¹4˜+ í|áx©ƒÏ6iÍJpÒ90nl¯Ñ2¦l”ê”D‡ï´7u8ùiÙd]ˆC‚SQªçá˜8Ûëlމ“ï97&€r~”,¥3|b7<+\ç¡' E{ê¶ó¾ºMyÈ€R¹ìŠ‹díêårÞôÑrÎüóeë¾Ý²A¿]_¨ueµ“•÷=ˆoìä©r¬v•¬}s­oJH?µsSK‘ÜtËÇäüsfJ¢j Ì[±U–-Y,[ÈM7Ý Ç •áŸÿK9vø€Üû³oéñ€#dû–MrðÈqÉkn=Èœó¯•Ë/:Wõ/–ªjlÑÝM 2nÆY2º_£¼±zž'0Z¶î>&¼é9¤[ð {÷—3Ïš%›wn•ƒUzºx±ÔÕ7HùÀ òÁÙ õ{Ý“ä‚ù äÑ%û¤pÁ™rö쩲cÓ:©?tTú”ÈöuoHáYrãµ—ÈÐ>Åò±/}MoØ/·l‘C5-²÷v©M“ݘ±w÷Aé7fªN"\)•#Kuµ~¾OÛÒzªµ£µS¦ö/J :ƒ×`†CÁ§³2æ§Y­æö7u²…Õo¶ª9rÄåéßœÒNÿ†OGÚò\LT‘7‡Þä&5:ù/¸\;ü¢¸”!“@Y´üdn,,,,,,,,,ðî´€n4ï3`vAÓšI:ຂÊa`ƒi8g¥·SyG¬öm¹8éÊç„{-ç‡ËÓ!¢=ßÁ#™pú)ÛÝùס+ÅJÂömXÀg½“œ$‹ŒÍæ(°¢W£ï4ã¼°5¸•ùÌ f+•qe3\ò~:®<,}îL PÓ¬ŽÙ°ñ³äÚ믗!ºuüÜ9“䟾úMyìQ}§{ç:™¢[Û—UèkÛ~Aq™ÔÛ/Ï<¹T4•ËEêŒ÷ÒUS&n@(LJsc‹4«ƒœ¯ïƒsÈ+áú~:¡QåÕkY[[¾ ×À,¥ùgÉ=ý¿­áÞ@ßE×Cá§µ´¨óŸÈ/‘ÙgÍ‘‡~{¯ülýR™ 4sfÚI²Š|©èãàÎÄZ'VÃõÝÙ¸ú5Yüâ‹R9¨—:°ÏH]ÙP=-½@^Þ´Mæ¿o<$¯¯Y/×ÞТŽs½¯¯’ýÛ·Hß)K¿òRÙ³iµô6WVk“£UÕî,N~ßµc·œ}ÉåRÖú²üòλ¤õ}˳Ü%ÅãæË´³æËý‹ÖºSúë«öÉöy2iT¹:ÇÉCé0@ò=y=o°¡Nvío’¡£ÆÉè> rËŸM^_·CúÔm’ý‡«¤wi¡ì=R#— $;wËŠõ[åÃê`×éánµõɉ&ôÖ‰•ƒûË‘º<<¨B6o¦^{ä#·\%cV-“_ßý[™?c¸ÜñÓïË„ëÿD¦L!+_zYw´JEq“¬X±R.¸èB©×W;õ•íc~øý8ÎîY5jHd¶ãÇÁŒeèãÛùÁwÌqÊ+++ÝAmlQŸ­ïú}”·_7Êqæûôé#p«ß\'>M4M¹¸Ž oã¥óiBºç-àÛîÑ|W%öŸ®Ê7н]6ôåú鮨´»ô]‘Ùš¨žÑ|”g¦ò(þ©Îçª_®øÔçTÐtEÆ©¶u6òr­G®øÙè-Ω}*dÄÕ7*7š£9`o§ž]‘+M®ø§C›ô„~½ý´ñÎÿã?þã¯Z&Ä-€Áp"ª««#‰×8%æè¶ÖwˆÒÁŒÎbÃ%ÇÇû¸FO ܧ5Ø ]ÙÔ 8|ï¼QW1wª3½cÛf9TW¬‡¸}@æ}† ìU /¼°DÔ69e˜Qî`À!c§è6ñY²iÙËòÆÖ½2zò2Uß[ط̽£>¶r´$ô”ýZ]‘=eºÌ™=SjvoW^[%cuµþŠKdòÄqRÜtXžùó²O2˜ñÅ2¬¢—4ëal£ÇŒ–b=¨­Eß‘Ož®^'Žú¨Ã\)½ûô•3λBÎÑÕôDcµÔK™œ3ï=`®M-zAšŠÊeÞ™³¥Ru-TǯbèH:°·TëiñEådÞùçèÊùY´x©”èpsgO“É“'Jï^%²yãfiUšâ’BÝÒÞG.]x‰ŒÖGžûÃïe͆]2ûÜ eæ„‘ºzÞ"ÃF•þº•Þ}^®Ýùk( ›,UšvòÛÏðO´ßÉ"Ã÷q æÓÌðø4«Þ8éôeVÃÉÓ·Áág4>KSÎ{ël‘ß±c‡sòmg‰áDcœz~èøÔ4|S`[Ü]&ü xZ ¡ï¢â·…c ômÛ¶¹o>/\¸°ãtÐ͉1ÇÇgAYÜÇy[Ò, kò ô<~u´n{¸ºï|B,?_xýN}ž:`îÓf|³¾ÝeÕ“­ë­ú>:ßSonÒO¤) >kÆÖd>½ÎV¾~ÎMYéîƒfý²™¾ 0~+*ÒC9¹;_ËuQYJ¨|õ[骋­ùò™6e«“ í¼øÌšÒ©òN^òûéIzdëNWùê &éôBT§¾ðåûç8–Z÷ê#{åÞ;îÆŠñ2wÂ`YôÄCR1ý¹õ}ºú¯/~°=ŸÝè˧äÛ¦¯Uð Å»!Dûg4ouLÇŽ|ݾgŽ£m×‹ÑÆÅð£ø;:Ÿ[K%#Ž>À‚‚‚‚‚‚‚‚‚ÞÍ8åz¦Õ¹·ÓØæPã0àlãx®ZµJFŽéÞÏõWú ?ª³ïp&DqSÁ£¼,ïó4X¶ñI²T§ç ¨~º5UaBÒÉVgTó|·Üh)Ã9eu›ù«È”Yý ßœ5&8Z[Õ±eb€ çÄãìªL]-Çyfó³ûF:ŒÚƒññù’¯ñÒtÔmöq][2).êðC—§ÛüwoÛ ¯/[%Õu2hÄ89÷ì¹Ò·T't¢¢@¿èê©8êÎ^*?*u;t¢~§ ˜ð DÛþTÕ!Èéºüö÷Ó]áØ]ú®Èì šLý÷t¯W®úeÂÏTž­Í»Ë§»ô¦gOñ1~™â\å功I~.å§Bö©‘MO=²Ñ5ÎéVîêÓ]út¶:ʲ©gì;èou%Pìt8t舣Á ×j5f̧²9žV‡8#3¸sÛt¿Î>Üp‰ l FÞà–¶rò–¶Áp”ÎÊ;Áµ~œ™íÃNðjU§éÄá{&›˜•r&(ÐçÕÊ|Ù> 'Üx9= S+õk×Åô4^È!mpðámüÉ3±/`´•iÚhn»í™ph¦])¡+ámꤚ0CÆNœ®«íÉoÝ·pœ®–CßÒ~X|©+“ L^˜|“a1pÒQÈŽ_…û|£<|:ã•«¼8ȉ†8¾à˜~†OÿÅÉ;v¬<ûì³ÎIg‹Ý¥7={ŠñËç*/WüLòs)?²O…Œlê|ºè‘®épN·ztWŸîÒ§³ÕéT–©žo‹ƒ~:(NsžYÝÛ¼y³sÎ+**Üj:ø”[ð`–'5~4ïã¤*n< Çbè-ÄÁ(Î/ʃ2`>ÜÇîóLâï˜BÞ)ø¸˜L‡ßžwTB”Ƈ™n†c±¯¯c¢¢0pù9È1DpÛñ™<¨ÓƒßÜ ¾’ÓÆ ? ¥é@™ƒYl4–7Ü!éŸ(=p£±ºfÂ¥Üäù¸V?ÇOۛݾCiü}y–†é8¾”O…ëÃ}ÐY0¾†k±áð8\ÊÓéàÓ“öù’6y†—*Gœ÷ÈqÌŸ|òIwVCee¥Û¶îã‘JN®pãmtјrƒ¥KŸlcŸgwhÒñ‰–eÊGëgzEé žM -Áú‰ÏËOƒÍ#Üâ$4û¿Qºh>ŽS68ÐG°ú¹L†?éxûe~Úg÷a~Ú§³4å„8£e>¯Tiã›Måo4¹ðŽòðiŸÇ•ÌbðS¥3ñòËÓ¥}þ†çÃü´•[le>¾Á£0Gàý1Z@Q\+‹ƒGaËŽd½Á²‘— ×àQº÷y}T7ƒû¸à¤‚SfÁp,ïóðË|8¸”EaÆÃ‡3žÄ†kx>Œ4ÁÊ2á‚Ç<—4pœô]»v ‡Æq-qfCÿþýÜv¤˜<“é‚‚‚‚‚‚‚‚‚‚:,xüñÇß“:`.?p‚#æÛÐôûÞãÆ“’’ó“ËiÂ`æ¨øåq0¿Ýõ{«êݾ§›ÍN7}ºc[£í©:õÓ+Û8W¹qøÙ²Õ)ŠÇ?Šsªò§“.=Uç·£No‡ÌLöB'[ -((HûìÏEÿ\p3éx*Ê êëë'øî¸‘çô0û ZÿgåQžÆÏèˆsÅ4/Ÿ·ÏÓ‡ÇÉʼnæM†ÅÆ?Š— nt¹ÄðâçˈãËEŽáË[lp_ÊRÁ.ÛØøDñ¿U2£²üü[)7]]ÑÁ¯¯áú0_Ïh:NoÃ1^–'6XÿT¼¢¸äm¢ËçMɤÜ`¤SÁ)³J'¿œ4|£¸qüã`ÆËbŸáûzƒg8~¹¥Oã—ùpãEì×Áø/?6^ÆÇò†7˜áGeŸt¸Fc¸ÆÏ§ñË|¸ášlâTå†kò,OÇ?æÓXÚÇ•oåÀI[lôQàßxX>]l¼| æó÷a><oŸ¯áš~Æ3Z_ŸÆp|™FÌOÿ¸Øø˜,“aphÒÁ¢ÜtîÃIUn¸QýŒÎÊ>Üð,6<«‹Ñ§+7Ãñiü2n¸~ n:œ8^q0x¦‚›<+GéTrãð f¼Œ6ÜðââT²}x”/|L&i¿ÜàQzƒƒŸ*ø4†ãóf|ÒÁ ÇxdŠM®ñ„ÞÒ¾LÒ©à&#S¹gzú4VNWn0Ê¡³¼Ÿ¦,UˆÃóå?èSÁw/+ócó˜2Ÿ7y“ëà F¹Œá¦Ã3:Ã1à#íãeä³ ÆÞœ Æb¯Núpãe0ËûúËTnt† ½ÑøiÊ}Þ†…“Ï%Äñ‰Âû÷ïïXÎò }AQåÀóß'µUgbøÖp¬:Ê|~&Ç—m冎•ûeFK…[Þlj¦§OÅ ù``ž³€]sv}FóHfåQɆoð8¼(½Ocø>Ž•[™ñ6¸å)÷é€[Þp‡åÁ‰Â,OY\0Z“N*“o|ŒÖhü¼‹ãÅ5|ãm±áËûø3£‹}\?Å–Y>\pRéà—ù¼2ñ3½Œ¯OëÃ,møÄ&3Ž&Ï`qøCŽŸ6?¦<žÑCczg3£ÉE&¸QzËãëà f8Ñ\pŒ&?ZfyãåÓÇÁ¢Ü§1ƒY>N¦Á Çh|Þ~iɦ—Ñ7X£#6<FÚè nx·¼›ftQ~––OÇr£1<ËS|†ëó$m´¤ Ç`–§ŒÜ‡ùy£Ibžø ¾g| #Êx:˜É1¾ÆÇ}zàF‡ce>M&˜•ûü,åãëie>½Á 7¸ÁRåÁ5£‹æ[ˆ–Yþ,ãGòÚ¤‡–¼éàó2˜á[q\Y.0ãi4>o+3X:+‹£ñaà%öíÛç¶¸ÃØ/4AÑ"o¶×ÖÖÊñãÇÝLGss³ƒo8Ì|”••¹ÑKKKè 'y9‹?©*i@ 8Åx»®×·SnOÞï²i®Pד­„Mh‹OÆHBâÊ£0òÒµ­á¥Ã1>ÙÄÙò‹ê› ït8=Í/,+˶®†ßSñé\W³ u͵OÅÕËø¥ã• N.¶Ï–_¶xq²¡Ö)~ÙàÄÉKË–_¶xqr íN]ᥓ“ –m²Å‹“×ÕºÂ+Ž6NF6°lë`xðÌÕÆqú¿L¼âh³©WΩ–‰<Î1ÂAça[üÓ ØÛUWdgjp² q6NìÝ»·cݘ"y_8Ž9ßøÎ6Žwyy¹‹™éÀ 8ëlOàDgxÞ%à³et1åðõå8ÆáO°@°@°@°@°@-`Ï«è³ÅàQ¶>^‡²8˜ñ°2ãAÞÒQË[Å3xˆƒÒYÀú\ÇúS´xÌè£e7~äsÅ1ZŸ.Nxû¸–î)™ð!__ŸdIòo¦rŸé(è}˜ñKr?opp-űÜ`”ûpŸ´'Jkùt8ð1¼(Oƒ½åÁ‹ƒ½_n0£5:à3+ÃwÄçd‘×wЭ<Ž6Ê#Šc´©dúpp£yãïà f¼-ïãX™/<ÖA7ÔÕpf4øÖ1÷àÁƒÝ¯wïÞΈ†qÔqèu"@ªªªdÀ€2dÈWquS0JòÁÁÁÁÁÙZ€ÉáwZðï4݃¾§ÎŒ“ÂXéÔÙ;H xû,À½N0ˆÃA:¶oŸf§VrbÏž='­ GUÀH8×;vìpŸ"«¬¬s«è6Èðhf@Hƒ£ÛéeÓ¦MÎèðàɧÊIG·ð€‹¶lÈ   ¼ó-Àýý¸3‹gkx.½óûß[]ƒwjÿ~«íø  ¼û,À3Ÿ“ç#;´ÍÇ|÷Õ4}:9较mdˆpœóqãÆÉرcÝ€‚UtszÓ 0ÀᇣÎ÷Ö׬YãûÙ³gw|s<Ó%ÄÁÁÁÁÁQ ðg·ÛâHó<±çYܳÅÊŒßÓDtöÚxùô3:+‹ÂýrÊxí‹WÄÞ‰+ÿV—Ÿ Ч]ÿfQ„þcýÌ4ˆÂ¬ÿÅáA“ î—FÚÙÈ5‹>Ž¿3¼8]}˜ÑÌòFOle¤ýrƒû°(¾Ocø™`Qqü£°(Mœ £ñõðñ¢<â𠮟Ÿ•gü8\xÜxš<¿Ì`Q>Ï6öeä"7Êßø+ƒÌp ‰ƒY¹Å†c2¢yð FÚðHâÊ|X+ù7J 4æÓŽòóóQz+‹ÂÃ1¿£Gv8è>­¥‡él´Vž‹\Ÿ‡¥}þQž†Cì—ùð®¦M®«ÏîÝ»£cÇ—Bœs<[¶l‘I“&ɨQ£œcmcdŠ˜¢Q8å”ñã=uœûåË—»mó8é!     tÇ<_ª««Ý3+î”–·Òìaxâø7J =Гm{}ûö=iÔüw§è7œëÃÖÏœûwÄ$ð"䇉$èŒ6Âò¤¬áå"ã$&)ÆÛ/FN<Šãç»›Ž“÷VÔ·»z¾UôVÿžª³ñ늾=¥²3éÑ“²ºR×îÒ ¦Ý[Ø_Ïü½T2í¾`ã©ðr£Ÿ­ 3‘©=|Þ¹à]O¶g®¼lTÑÚ~O6ˆ RU£3c»}ûv3fŒsÎÙBH#ÄÍøÃ8?𾢤ùÁ'}æÌ™òꫯº-ïãÇÏ©ó,ÿ “vðàAéß¿§#û³dЂ‚‚‚²´€Ý÷S=[²d“3rymÊVÑye¥FžOºÃ+O'¥Iw-kãPSžiíxe]H zò $ÎJ¿.È $ï> X¿¡fÝ 38§ï16Ê60ùÅYDôÝLý–rdp ú»-³•• Ïäcy~–7˜+| ÿÄéñŠëÄ:ZßN…§ còÙK4[tG4íg»mÓñ1YÖÞÈ·WœÒÑeSfõ¢ï¢ 2øçzAVw¯¿x=lz˜RïÜ-(Ÿ0cg´}ÊÌìhL©+×/g†±Ë‹ú¦ ¹ÜRñˆƒ£?‚ÅqxQ¸Ö^Vfõ3>–§˜Ñ~—bm²65Sssc;¿¼ÎzX“j•œäÛÓª齕þf:¢ƒsУ•¡˜¾ŸîÞ5;vlG§¤ÓFÇ›1ÉÙKýqzœtŽÎŸ:uª¼ñƇͥ2R*¸¯GŽ_Q¶Ö³baÁo ƒ…8X X X X {à^Ë}ž{|.Á¿_Cç?—2ݯ£´äíçëàótpªkž>¿Ztu²qëViÖ/”0›M  ’" Îç$Y^ëÒZBáQy¾ŒTi«´–×OGË¢¼2•GñCþÝeh_ɵvÐóã°_&³***2:é&óÀn‘ºtvú(N<+ýŒé5,ÓJ\\] ­Üu©×«ÓÏÇ38ÀÉ£s6NœÑúüL–GIè ñ'$2ñðù½‹¦}ÆÜ&¸_¥K—ï r©?m£‡G›§ë¾q2ñš‹ilo&q\@ÊÛspµM<Åá3~©Ê[½p^>ìveQ/»^úôéÓá‰g¦rxàk */Эm-격·×¹ë;Y GûUœŒT0à;wî”gžyÆÕ•úòU.mˆ ©;ᬳΒ3Ï<Ó½Ž̃aÿþýî>’é¾à³øcz[‰- ¹•û¬ ½&}œTihý{ƒñJ…oð(íV«÷»Í[·»û^….7꘡´T?×Òš¼/h?âšIä%与7#«:¦tõ2iÂ81|h§úérAçÆÆ4« ´f̘áò8Õ0Ž*F£Ò <òˆ,]ºT>õ©OÉ„ œQáGEü@ž›Ÿ]cU›÷Û§M›Ö¡˜ïÓÛƒ^vÁاÛÌX>­/Ó%¢åmª¿ >IGŸ6ë´Ö•¯ƒŸÎšO–ˆÑNë“¥.£³·cRo(ICáÉöðù%Ë=ÂTIäDEä¤Bð``w¦¸?Ø½Ž­i yøøðT5³{‹ÑƒŒ{¼ÿÌɆ—Ñú1i &‹<÷þ„>ë[óúëRóÐC¢&É׳VúljÒCMëôPSÒ…—]&½t×WfZqÒ•&×€l“o±Ï˜ñe+3_>± ï¡C‡º‰oÊ}<Ÿ>.íË1Þqx݃x¦¼u2º§á;ÚÚœØ~¹ÚÚÆL ÆðƒÈäɓ忛ovƒôTγßL.¶$•O8×>ýö‰'žp»$¿ð…/¸ñ ò-ÄÑ[™ƒg4pƦ›7ov2Èû8†ëÇè…cÎ׃Fíî)èÕßh2ñ3=p"9ôÞèÁ˜¶_¿~î¬&lN†ÉòãLrÁ¥Ÿ£û¶mÛœcL½pl¡OU'_N4\Ÿ†z¡÷æÕ«WËË/¿,þð‡Ýý>U?òéSɃ‹‚ô›7ººX},6>>Òôå~ðƒnÅ—vˆâÇÑÌbøP/|7ß|S^yå×¾\/´1‡•1ÂíþÅqåžL}3µ³¯«ÉêkocÒ7Ojj?ÒEÎÒARX ÏOIîF6üT¼âàQyìBlÛÇ™ÔX¿~½óÛXXe;9þÏú7;¨©û9çœÓá¤‹Ñ žöKe{«C¦ØôôùZÚ—éó¡ ¸©×VdçzÈæÞh‡ &Çw,3µ§ÉEO?´¨~äh•Õ «ÚšcRÑ··TÖÛcÇÈ‘šj7Ñ“¼nòUÖ0Ù³k§$t²çÈáê¬×ËŽ’béÛ§\˜2NÚânB™9Ây憓ꢃ ‰1|ðAùÖ·¾å.,n ÿøÿèp.–hðŒO‡âQYYéÞ‘§òFãó‰Oc\uDÛ'²§‹çæ ÚùóôדÁ*ÚéÑ×w”“y…´_€>¾ÕÍÇq:rQÁ¥&É/©¿ÃU¸ÕÆç—UýÐϣϊ&   ¼ã-À½"Ûû…Ý›¢•6<{X¡áYdÜlx_»çEù냂¥žÎrôᇥáùç¥üÖ[¥xâDÉÓç ey­úþ>Ëö=ó9öÑKâ?¿/½/¹$¹‚®zqË5¤ÒÇô…ÎÇ /¼àV%˜˜æ9|á…:#›úÃÇçiùä=ž\O…ÎÏ¡žâøt¶@´ÍSõ£ÎTɸÖO°kñÉ'Ÿt«h矾?Ù8Ѝ,`¾ùÉO ¯2r=C‡<~¹èÌ)ü«¿ú+7^då8NÁt7\ðù1v\¸p¡üõ_ÿµ[iE®xS_Îfúìg?ë5œ· 6È‚ ÜØ—­ÁÝ‘§›É¥>+W®”ý×u hŸùÌgœsá;éàödÀ®Ö^´1ãpØýèGîXt¢<[¹>ik7œBœtîwÈ¡ ;r´6fœÏä/m€\&ƒØÝcMðygkh‡ƒÇÁ½÷Þëøà“˜nlå^µj•<¯ÏŠ3Î8CnÕçÅôéÓ]yWd&u£ô9$-Ò”X"ÇZ~-5õ›¤¬åéWv­”ŽÔE?|¨ä³¦ œ¤ý‹ŽöÃv,nò¬yöÙgeÊ”)®ÿ>ú裮Nìnf!”ö`Ñ?oîܹnÕÕb³‚ Ö!´ ø™žÆ/DZ…nÉ’%ò‰O|ÂM¢³ù‹Fot¦38ø\C_þò—]¿‹óY.ULëÐÿëëÔVÒÒT¨þi©”ªÓ]WW+ Ú‹´ß–êØ¢Zw•±ã¤°@v=ODiû÷-—ãš®Öñ†íôFçN:Ž ‚Ù"òVI_9”1çü¯}íkîBå¦Å ‡‘ÄçÁ‡2\lLøºÍÚµkÝ`…Y2.¶gqÑ"ŸÉnÄsæÌ鸨֗×9YôA¡³:âR“€5d”>N‡Oruøšii¯¯áã°»!ŒÆ~°òÎr:óƒ7¶#€o¸~Úxf,óqº2@IDATèFºÎ‘’ŸÒDug–Èl“k<ýz‘nkU½]û+F;?“ ‚Ⱥú‘÷ùù¼(³78>£qq¤>Fã㟠sˆÕž'ã;¨«—jÒ^·dãñO´¹áƒB°À»Ý\;víqOgÕg§t¢:ÊÜï_|ñEçHÜrË-Î>M*û€ãÿRá!ûøsÏIõ¿(¥ÿ÷Rª„ÊnÓ×b~Y¹ì«Öô¥—Ëœk®•m_ýG©Òò¾_춺s‘›þÈ@f¦Iv“=þøãîÌ—K/½Ô=yæ1ðxì±Çä}ï{Ÿ›íÏÄU|ÝÐËòÉ;Ú } nº'둼wL±Ý=Íp­®y½Ï»‡I;ÁOЇTw,à·7i³¿ñÄÞQ˜•1† ŒqÛQ¹¦Xýéá ÿåš3ˆ1[\0¹ƒoÆbŒÑûÁ‡í³ë¤:1¾c+-NûE]äØ2>ä "Ê M§{Td3ÖÃIã«BУ/yÒp·¨ŽŸæÞÂØÖx¹_Oháͪ‹LÈc<ŠèC¹ÏZ >Ü`©b“ OøC‹CuÇwÈ>ð·üßÿýßå‹zc×*NªÙ´«2ÑÅäZÚx¢ƒ9±ô#ìʸ=URÁ£õý Z@. qì°e½èK¬ìÚa‰Àhc_çlåBcý¾,4þð‡?tòè/È`‡:‘Æa%OÿÎw¾#·ß~»›$±ÉÓ;S|BWê­¯R•.•^}? ½³KBtkôRi¬]'M #…ùƒÕ.|5‹ó´’}ÖºS¶õôõ1[SoôÀÆèiOÚ˜¾xà 7¸{Ž|ee¥ó £l´¿›NÄð÷ÉzûÐÎi£óùXº3æÉ9êpî¹çº:Pë·QL“a÷ &+ì>ieF“•l­'xÅÅEîzèÛ»Üé Pÿ¹Ù-0PŽ­òô^Á5ÄvxßæGU;}‘k2O\ í@”dæ„ÉD~¾¡Bå¹Ùáœõ«_uƒ):03›ÌF0ƒ7lðùùÁ yÌ–¡0 ‚)Gš ‘ [JÀå!Ã÷Ô·ê6uèÉÃÙëÖ­s‹ñ†>.X}ÚšêåÉ–~ãfʼ3§º­‹€¾ uÜ““äã<Ùé¸TœÞFÝRW}X}ðI™5ÿ"©Þ±Vö5”É5—ŸïÆ-I~ítJhN®ƒk½´ÒÎN®ÀŸØÞitV'tÇÒÚ,[7­“u›¶I^Q¹Lš2UFäÚ©¡ö˜¬}cìÚwXú ª7›©RÑGW…ô–ÝÛ6ËÚõ¥±­PÆOš"ãÆè$Œ»ˆZd놵òƺÍRÚwÌ:c– P§qk“ìÞ³[m\-{v‘YgΕý’7e÷®f{çÄ>NOÚZaÕ÷È+K×ÉÜyç:ùŒá¨7uÀvà2}¡Y—6[[]á|ëšõp}xҮХ IÉA§“ovôøCk~‡ÞƇzZÝH\cŸ¿æ:äß ¼›-@ÿçzáþÆ€“ ^ò8æ¬D]wÝu‚ƒz×]wɧ?ýéä=/ƒØ5GÂÖö<ÁnP95ê ÷×_ƒ~Uäð¾/ý?ù)iëU.Íúð¬;´Gv>ÿ” ;Az]ó!éûÇ&»¿þ/R¦_4)ÐgN«`T±8iaví’Ù‚A« ®¼òJ÷ì‡ç#ï ÿö·¿u_?a€È3ÀèŒÅo¬«–õ:Ü{𨔔÷ÓgÄÜ¿·$ÔööŽ=4î5¯ögy»uÜ»¼{4¼¹¹ç^û}¾¥þ˜,yy© ?]Æâ}c}Þ+RòYǺk{ΤâC»X°4c#ú ý ã:V‹þð‡?È'uEÉ Ví ^ðqvØÚàÖøùü Æ—ñØ÷¿ÿ}×?Áaõ g‘òL<±Ã’A?cºÿýßÿu×78Æ‹tªŽõKtô5{ ‡ŸºRÎ}g ùÀÑ“±£ñ0~©äÅÁMO‹‘Ãø–Ø~Øœ`8Ñ´+Ìáõ€ãmœ(v&0QwÓM7¹wû±3ãtœôÏþó®-±?s>r×êë áEÝsÿêW¿r+¯óæÍsÛÛmÒŸ®ƒY†4~ÿFžÕ›¶å~·`Á7+ì¼NK¿ÃþØ…ØäGù¥“Íêø¯ýk·‚Ì5pýõ×;R¶ð³ÍI%¾fÅ5D{0ÅŠ3“4ܣу~MHÚ {ñºB•ôëý¸”éVR)-…ú\,Ù,5%¿–ÚC×KkÃÅr¼±NíŸ/¥Å¼bEÿæ>¤8fêk× 8õb˜/j]qÅ®®\§óçÏ—KtÇmÀ5‹cnp³Ì™4J6,[,÷<ú¢Ì˜;[v®{MivÈM¸^ö)‘†ãGäµ—_•‚’RÙ¾e¿LÕ tAçh±×j«dÙ+Ëeòœ¹ê cƒd ­íL:Õ[YžÌ “ãÌäÒüñùøé/á—“Žæ=T—LUîÃ}×vìTÞnðèGíÕHËßçÒÁïF ø÷‹—^zÉ XÂIgÀÉ!A?ûÙÏÜ*;«˜ÕÏ%Àß‚Ÿ6˜ÞˆÜ xî¼*ÓÙöÞúÜ*4QŽþègr螤ä‚i’wp¹äïY$³>%m{DöÿLÚÆ/­cÆIÝÒeÒûª+õ¤|r)qoˆể¬ â4}öÙι ŽY¥b"ƒCž­<3};ZÝ ÖªÏ¢çžxH–n«’¹³¦È¶5/Ë¢ç—ÈÇ>q›ŒÒ¿“ól‡Þù÷.?­í¸wOÞ©~r0ÚªïL®Y¾LÊFLvjð—M®ÅÈe,È–ëþçvüE‹¹Åú±9oèø™,â ›ñ°8Z‡hÞðˆ+2fÄ¡àžÁ¤¯…à@1Nd,øÑ~ÔéA™í€Ö~QþÙäÍqÄ.üЃ˜úŒ<ƒc?Ó=QôŒ¯™ Ã‰üøÇ?ù—q“ìªa ÏÊïm·Ý&\psã0¢WwõÀYEî=?þñ]_ú¤Nððî2ŸKf2ÕlÚÕzúôÈÄ®Ø:P†ó„LÀ¡!0öÇ_ÀÎF<ÀÅ?±¸Ø¾Ü_©z³²Îë 8¬à/[¶Ìù+V¬p> Ž!!ÙŒ U¼Ö³A òö9úD›úJm»ôÞZ"zT›¾Ó¼U'A*eù¦<é߯¿\rN¡L›œTˆlZrôéþø6¢_`c®qsê̽›ó¬ÁÿŸç¯µ…ñnýÊxZl|·ê*<±6%àŸÁßò˜æñ%ÎàÉ=†ûX6ø>?ÓÛ`¹Ók]òÜ=ïÚ­Bï¥,jp÷*îWؘ>ÆY<Ǒõ]TT¬ÝÁ-Wª 'êz’ƒN%¹(è ×7$Ì€á?¤êüÝßý»A£Œ†dvMš.Ömð¬q-Og€Ö.8‡¨˜µ T¿×îVV¨ :Á›€lnöÌRÐ0<ˆpБ•åü?:è7d¨”÷buYd׿7äÕ¥«¤9¯T¦Ï>S¦Žá†»¶¬“W__.My½d¶žh8qÌ0iÕ­•Ë^•Õk·Jß!£ä¢é;Å2tüHwÓè3`°T¯Þ&‹_|V¶ïR§vÖY2kJ¥òk• «—ÉŠÕ륰¼BΘ{–Œ>@[·QÖ®\!ËV¾!åCÇÈ…çŸ'U;VË?æC2ýÓÿWþî‹‘ÊQ“Ž^k¬X¶\ÆÌœ/7\s¾jÞ ¿üî7dÃŽý2¼DõZ³V.ûø_ȬÑrlF¥üç÷+ûöî—ƒßâQÓå¦÷_ëê[è²vÝ6™>º¼øÂKrÆÅ×ȵÎ’¦êýò³Ÿü¼ºjƒ\}ÁL©:´_ zɸÑ#åø¡c²mÓZÙ¾¾ÁÙiÊÔ)RÑ[O8n®—-›6ÊÖ{¥´w…ÌVG¿@;]o=ô Yå¶FY³b¥ìÑÕœ~‡ËŒéS¤ ¥F¶mß%Íúž©ÎPæ—õ“iS'Kï2Õ]ëtõç@U­ 6ÊpX\£wëVØõR£¯åTNœ¢+6Cåø‘ƒ²m×=˜¡VJûéŽIct•HÚ×8ÔéøÑ²{ßA×o«ªjddåx)/j•º“ QÒW&kú——È‘ý»Üî‚Ú¦„TN˜$ã”÷á};dÿQ=ݹ®Fk<|t¥L7JtSvmÝ,7o“„î`˜8e² ¨Ým°i½ÚgÏ!©4DÊK uûR_=bTÙ'k´mªZeì„)®Ù¿Sw:’šã52dÌí ºÇIõnÓþÛ½G«kâð'Xà´µÿŸüä'nPù·û·n«(Ê2[Ï ˆû<Ûfy€e¸çGhµ<¡ñ}X6é¶½V]¥¯Wþlg/¼é}Rû•Š<¾A†HO´-*õå“Dޝ—÷Zê§|LJ‡élø¡#Ò¢NI‚k“îGd¬|s èH°˜´=kûypxžÙ`ÔðRälQ§êÀny}å&yÿý¹L¦³£ æÉS="W9ýОm²fÝFiÑà„ÉSeÔ ]îlÔ{øÙ¼}n· Sõýʾ¥ Ùºy«Õ“f›¥H¦Ï˜"U{·éέíRPÚGfœ1Gúès¯ÿ€¾²oçYq\wZÕ6Êäi3Üj½Ö0ùÌŠè²¹YÀúT~ŸñÓ>Gú ‹8o¬ãtó¹Ük¯½Ö9p¬*3îúîw¿ëœ>®9\œYVg¿ò•¯8Æd6–2Ù&“˜å ôáÇà‡’>Lžqšá3xÌÆŒÆÃ×=]ÚxÁ§Šw€9›Ý—\ìÆaìú±}Ì;+Ž;¶Cã“NV´ ^¶RKL]¢×"8Ô“v!`îø±Hõ›ßüÆ_>ô¡ Îïõ3™²fÍ7C›qPÛ=÷ÜãêÊûö8µQý²ÕÃìC=Ã3ÁñßÿýßÂ8üë_ÿº›ó.6ãn¿Àßh³•exF‡ÎæâİzÍ3€Éd1ØŸö§ °¯Ñ[Úø¦‹Á…'r°³õYü^EÒø/lkGö7ÿˆÉ&À˜$ ¿ìuhÒºö×C®’Þy÷ISËFin£÷Úm²sȯî-•oýZ¿>5bˆ>‡Êä¿7$äžO•)£ëtÌC—[@/ÓmË>ýŒmìÜ7¨#8œÛ€OÅAr”-q4ÃVÄ\Û<Û9ƒ‚Iú»˜8âu¸v}DyÅåãdFñìžG¿¤OØ=&ŠççÑ~Å.&)ã®i?u:9`ÂõzÍЧ¸Ð_Ñ…¾Å}—¾}œ6À¶Í-ºË‰Öä¿ÚÐêët”41D0„´•[#ýþ÷¿—?ýÓ?u†ÃÎ*Çëz.3MçGÃÐɹ ¹‰Úï$ò Ž,?Pf˜¥©(•„7rÑ‹†À!gV˜4 Átöùœn“Ɔ&)).ýº%ý/?¥‡>ÜøE,å¶oþB~q×÷5}@þäæËœ[ÿ\¶®•+¿y‡ÿÙ›äµ'ÿWÞÜuL>}ÝÙú¾O¿_—ß,_ÿ—ÿ#ƒÇüBû×É_}ënyê·ß×ôùÌ'n—[nÿ ©]ó¸üð×OËOþ¿ÿWê·-‘¯~û—rëG?"k~w—,WÇùª³'ÈÜˮыUg­²ùÍ¥²jk•\}ÕB™5{–¼ôÆNY¿u‡´Ví‘æ²Q2~˜~³PâéÓ§É–7WIÿ¼q²cÃ:3m²n‡(Eu“¤dç*Yµn“”'jõ@ŠB9sÚ©Ó“k½dæôñÎD…ú"Ìì“dݽCÈL9|`¿õê+*úJÕþMòô#2oÎÙòÆK²zÓnù؇®–+—ȃϮ’óÏ?[¶¯Y"û×ËœÊR¬‡$´57ÈÒçž•çßÜ/çΞ,+_ú©k’s& ”'~ûs9^>EΛ1J^~êÙwüZ¹zÞtYôÄý²jO³Ì2Z~ÿà]²óü«å¼iÃåéÇ•‚•2¸´E{ða¹NJEÇöÈ?úo>û<¹ø¢º:¤jëäKr³™Þ×ï”;q§Œq -o‘{ï|Aú ®ÎðY÷Ò ²÷X½\<»R»ÿ^)1M†—5É¿}@>tëMR»süðŽ'dþÂˤ¬õ¨ÜýÒkrÛ§>%åûä7÷>*3Ï™'M6Ëýë·»] û׿"w=ôœÌÕ‹ýèê%òÌó+ä†~N÷-'~PceXï„<ñÈ£’¸á:iÜû†üäWOÈœs/Ô¾’ÜH#$í¤Bx÷X€û=?îϬèýüç?wï«Úƒ›Á4+E¬ó@ge‚AB.þ„hìž x êàŽÜ›4½qÛv©Ú¶I&×-•1×ÊáçÈ¡å£eàÙêÔ­“íÇôÙ’_/“›I~é¥r$¯ÒmEc«¸«K»<_G“ ¹`>Üõ•3 fug‰w.yÆY`@Ã’OVñ $áøqqYoد@–¼ø‚Ÿ;[ W¼ÿÃåЮMòУ¿“aãu’´î <úÈú>ë r|Ç*¹ïéWå¼óÏ‘­«^’‡jäš gÈó¿»_–ïn‘¯¾RÖ­X"¿_´X&Ïœ#Õ[_••ë·Éû.Ÿ'Å¢+ö/iú&ƒx¶³rMÿe…ˆë›1<Æy8U8|6–4^~_FˆƒYôL0¡À5ÁøïSú\fÜJ½©ò˜t`•}l|i<ˆãd¤‚aÆ£lGš1.^è„ œGÒà£×µÏÓ´ÿ1]ürƒA‹øœž“ÁÀž-匱ï¾ûn·S€{c_v%|ï{ßs;pàÁae›…1xÄ9C&×kzY“Llüîw¿s»™8¿àÛßþ¶³;[Á±¯Ý¡±_Oxßh¹ÁžØú;"xpÏ£/A‹í¹?"›;üŸÖêa±ñÏ$þàÒ¦ìà9D»c |vyØBãs`_“£2M'b¥õ¡¯ëë ÇçK}Ów$±÷‡Ò¼ûM©Õ97ö~^¾µèL‘#eFyoÑÅuY³WäÉå:¡Z/e…úI¿vøžàjòãäRfpzcoêC¡Œ:QwlM0ühì—‘¦ÿÓ.¶ ŒseÉ*=0®lfz@ãø[iÿž•‘6]|8¾" ǹÚ“/–ÙáŽ&Çמ&ÓÊ}˜ª«g%}çÞe}.÷(ìŠM˜¬€?˜k›ëß™]gǪkœ““ë|ê(³øƒ¹)D/~à4¶]´42!Wþ¦£ÌÆÐ°l»Â0ÌLps‚/eǃ‡CN²tHA©nŸ¬?*Ï?ý¬ »êå¯ÿüsºNÐ$…M¯³–Heáóþ¿¯Üþ9)Ô•ë1c‘:]ÝT9Mþö¯Æ©S;Qú7í—=üšT-˜&E¥¼ç¤kÚú]»Oßþoò…Ï|\ŠšŽê*ô_Èó/.’+ËGþá›òÿÜ|…FtûòŸÈÓϽ&ã[7ÉÝkvË×fŸ-ó¦UÊîê„Ìš:L^Óû1óoq#‡ÈŽõûtµ¿—¨€ u–7­¼Wß[¨–¶ª:h.}Êõü<=ÄHWƒŸxü19´wªl{s…Œ;ïZéÅ»+}ûÉá-«å±ªãÒO·¸oÚß$—*]z–âB}¥¡ðÄ€°—òHÔéG»Ìƒ‡¤ÿˆ9R¦5u-²àú+dþì rlz¥üü—÷ÈÚmst…x¼\~é™0qœôn="‹·ì’ÃÊÜê9[q†ŽÖmuC&ë.€ÁÒ¤únЇ÷´Ñ:›4p¤œ=ÿr9gʪ =‹ÞÜ)o®j“õÛË·|TÆ í++GÈ΃5ºr©ì8Ò"7,œ¥Žv›¼¹äEY²l¥œ5¦¯Œ™z¶|Pg‘–çË®Ûuõœ›…¾ ¢;$4’A£'Ë•zÐÓp]äÞ·éÛÒwÔT¹ò²³eòð^òزmR3s’œuþ)4Rg2kdõš7e×þÃÒW×Ê'Ì:[®ºæ*)/hÚêŸËº ;dþ¬árñ¥—ɘq¤fO‰¬üUÙ³}£N&­‘³/»^®º`–ÔWíÖw÷è:¸ÖÝ ëv×ȇ.ž%£úåë+¯É˯.•‰C2wþeòÁ®‘^z/¤ÿú¿] !x·Y€AÕ=w¶Àqšªÿl±A08<² vùÏ?Ív4ÎÞ˜¨åã:À_»ä—R²éGrLß7¯8oìl™>Ö[ gèÙ"ª×è²zžÇRS4Kò²r¦×Òyð’J/“Ëumé(.p¡¼È{¦<ÀISw lmåÝüKt‹¥o(ž=„²þCåš÷}Pßë^¾_WÊõ~8ó¬‹eáù³d½¾u ¡X®ÒWŠÉŠW,/,(Ï+W]Õ_œJéÛ¦ŽÁÛ¤ªf¼NÎVȇo¾\'HGÊ=?ü®L<ër¹nái¬ž#ËÞÜâV ›óeþ‚ËåÒ çJòù¯ŸþJöª’>#’&]ËôÌŸTýȸ3c@ˆ£ÊuöÓŸþÔ9®¬2>£œþH_Â¡Ä Ä±ã•EÞ=%Ž/+Uš•Uœ}¶?ýôÓn¬ÆŠcBtÈb¡…S²ÍYv…íå–¶Ø—e0bî Ô1 8×+æÇ6dàÈ¢N¼*ƒ,[رkÞ–öy“ŽÊ%<&8ƒºr}²Ä×%Ȱ­è8¯Èg²âꫯv«¯¾ç"¢2)†Æ&Qij"ÉkL´°êÇ„|&'Љ&Y¾ô¥/¹Éx_‹#b;Ê uÅÆLÚpÆ»€ãø0Ñqß}÷¹ÉìÍ$ v$€“JŽñ7ÆÄ8Fcq´Í€Û}ƒÝ-´«ôøhÈ oüAÌãSÔ©ýrÓ‹g&×r¨K:^VêÉ„úÙ}ɧóÓ&3 Kæ“6À?-)JJIŸ .v ¿gÁ8}(?¿}l‹v[Âó¤-îi… •!OÙå—_î¶ØüÍßü›qE³‰ÜüÙjÄ )øüØvÃ̉5²cèý…)ççnªŠ0‹ÆA&¾‘ÈECÃSAù\Lt2BÒ`.™ò^šR¨ïU×UÕÙ‹Z¹táUêœ åÜK.“ç¿õ°4÷;.WþÑG’C1Ýú~ÍY…h“µKËËÏ<%/¾Ô_Zt…vØÐáZ_J¸Yqš{Ìž:1É/_O:M·ºï”êÖ¹úÜ3"‰ÒrÁÂòúŽ#r˧>,÷éÖÀ¿ÿ³/Èȉ3å–Û>¦œxm@oTú#Œš¤Îî¸l©=*‹_xIιêfY «#mõUòÌÉ Ýî4C·«¯ÞtHnûôçdúÄ‘r`ÇYò‡ç_“×V¯•ºÝºusÖBuLçKqBß¿_ô”¼¼äu9g|Iä#+ÙÞȪÓïò•õÒ­ÝÇåà‘:Ýò?@o Ç¥¸ÏP™¤[ÿ } —)ã‡ÈÑcUºê\¦+üËe“ÞÔšï—Ò^ÃÜÌ^²tËRKƒ¬Ö×6¬ÓCtR¥|Ø iÖvï[1P† J>äÊúô—²|}óà¨õhuÎ #ÇMÓ_›¼üô}ºê¥í¿f™¬W› œ0K·í U½IyÅPݦ®©èûòK¿¨»ô,…úF™sÁÅz«k“!Ckß u[¥O¿A2¤"ù>SY¿ é]r@WÄš¥úè>yeÅRѯL_(ÔI‹|i®ÑÁù˜QꜣI¾nå ßªÔ L·åïß¾^ÖmÜ$¥ =³Ag8›jëe2iâX¥¤ï`™¦8uºõ^œ’2õÀ7½¡ï,µh½Giý&Œ†ÃÛeðaÎ9wDáO°À»ØÜïíÞÌ‹û;[éX¹ãþo÷ïî˜þþÏ—©zíê$²vªkŽKÍ=•Wš‰‰“¥F7_UÜ(Å¥"Ã.-’Ã/T˾ßë{s ÇÈP½þ›‡]­[ÚÇIÛ®ÍªÞ ÉçaR'™*ãã²ÕŽÁ6'$³¥’8Ï9žw ¤pÒÙmÀª!zBo¡ƒ—†¬»}&ÈaÝ"ºsÓ›òˆî>*.NH}cB'[Ûô|ÅúFNƒŒyŽŒV¡÷Ë:Ù²v…˜ÖÙ-%ê˜ëQ ‹úʰÁzèkCµÔ´•ÈYÓô!¤¡¨÷@9÷œÒZ{P^j)’‰Ã’-jÀúº¤!ô¬RõëŽv÷Ä1ÃyÀ¡cÐÌ ówÞév¦€ÏÁ#+…_ýêW3ËIëÈŸÉ0ë_¾\K#ÊÒ\ËŒÓXq¥ÿ²°Bš±™ú/ *ÐŒÖòÀâêœ`x8Rü¨#Û¯¯òþ5mବÿ\wçgñf«nKž5k–»ß0Ž5^IÎé傃=°%'Dóy3^Áa"ƒñ§t'°ŠÇäÀ_þå_:}eciÃÍ&†Ž10NvÄ®Lzf›,ß—Çæ, ÛÍÉ“æ^ ^œÜt6¶>Á;ÖØ'{ô7Þ( ,pùE‹¹1;vF–ñCߨ]³©§áüÿì}`ŵö§.Y.’%Ù²lÉ–Ü{l¦÷žÐy„„@ä¥ý„ < $@(IH^è¡×PÍc÷nËMnj¶,ÉêÚÿ|³÷HsW÷ªØÆ±aÆÖv朙ofgçL[M¯ºý\åD•rÊbËEå™;#X^–QëTy(ÏÎØ”ǺeûàNN‚r5•6Û0ËI¾¬kîX`;æ6j®²3 ŽÐFb¢þ ­ñæÂNá_QŒÌ'žDòƒïÈìªô»‰ÂkîÛ¸¸×ÛØ’}+né}"Ê«eÜ=* ÇŒ®–Õs¹ÿ@VÏEªÈ r?íšúqäQêrÌñäË®Z>µm) Ó?†³Žˆõ6ºÉƒ6M¤ô&"ðÓÕ:e9ØVôÂKÅ8À¶—tücz¶…öL4ž~¸_6WÝYÆo›ûŸ'†l¿Äƒ;>ØŽ8)Àg+##S°é&Ÿ_K•>Æ—mãØ²Å™Rà”+L5ÓÌ„6fvú¤çŒ+W çÄ›¹"ÂÊ%= ; å­a&B~è'-eR–m¸=€cG¬ƒ7><œéâCÊ—Ïá°c¸½‰†ò:Zm‘j1ƒµ”^=EéMÀÜÏ—à´©cŒŠ½LΗgŽŒI[1û³…8y% X8o>*d°ôìC`ô—á›çŸŒO_ O¼ãÏ$ÆÇÇ™ô”ÝPz9Éù¾{÷“íä²E|ɲ5˜8HΔ4Wʪð$ý:vUÕcÂôÓq™—àýÂwü/Þý™uIüB¸È`‰[·ëd`¹iÓfÙN~z¦ÊhRþúË€hÅÖÍÈì¶;jù ’Árãc òdR£ÇìO±fm!w#{ØtdÈ7÷hòó²1gÖL‡øÆ*¬Y·Ò‡J1waÉòµÈŸ6 ur3}US<2E¡•W]Q‚¢meèÓsvï,•Uæj Ë­ÂÇ|Œ†´1øú‰‡aåœw0{£\€ u›œ",¥›ðü†z*fŒ„Ù¼†u52“&q¢Yð¡ilŠ(Á½d’eeá ËÄ@NzŠœ/–â¨iŽ“ÆœŽÉÓf@çQ¸fRz§£®Tv6õõžL ôÂQ'Ÿ*\9«ÝŒ^éiغªL:3™p¥qb˃À6EÓÔ,/Áx™p‘-úËÖ–àœsÏCïØ l-ZF‰KŒ•úåNœ'[ ÿ˜æ:|öÁû(ªŠ“KÏÄŽ KðÊ[ó‘”*¸ÖW¡p] úŒ’³üer}ò' F|B5bºËÖ÷#Ñ·{¬´Ý Hägœd7'`ˆ@뫞9sÆ!ðåD@ßœÌýö·¿mΡs Ã• 5,pÐÀw‰¾4Ò´g³ÿ×w_ôjÈ£YžýXy·ÄŠõoý»¥ï¬-Ý Ù…¢×asm2òËÿŽQÓšÐýÓžh|g ®ø⇞€O¾˜ Ù¶&»žða?ÃAVÐej^‚¶¦c¾Çw%•në§RÁ÷F~~¾xPQç/\¹9ùä“Û*é,³ô¨äµmýr|º¤ÇŸtzgö1 ×È=•è!ïÚžý0ã˜ã‘(»Â6Ëý$œ |÷í·’;YúðéX>çm|´¢œ/h3ÑÚ “’1½åâ¢féß6!_vCyrÝJÙ)Õ-)V¾ë*JDè}×$ýy£ôµz)¨–ÑÙû» Ñ­m‡Ü5ŽaüãØŠ“´íóY§<Íwxª¶>ò¡nÉIú5_Aê`½j4ããd·Í®:³»†yàd¢æ‘ðœðâ¤aéâdñ¶¡¡%eå¡6/Ÿi ÕÓ˜Z…¨ÍJaãS€í 3Ã)„«ã4·Þz«éüxV…å-“ì53͇ Z¡ÙP&†~ˆÛh¸r (i9kÅ­Fœ‘¥áà…Š;åÒD“e"õGw±\xÖÚñ8üèSðlÛë_¾±e¸á–—ñú»O#ÛÛŽ³G&áü™M[pß3ópÇÍ×`ðð\s‰Ù\À½ôôÃXT„<4Í()Ú‚:|wõ.ì¨ )ÖRIe›—!=ÿ(œ~ê¸áÚ«Q·óç¨Û8OÍ÷ðÔ5‡`ý‚wñ“{_Ãí·ß€»ª1Vúî2«+ÛïoÿÝ£ó‡£AVwn¨”ðé?n^ÿ×s¨;Jn–¥Ÿw?Y‚ãϹX.ë…ÏÆ³Ï=‹CÆ Ã¦²j]Òˆsž‚Ê‹ðòÛ/ɶ‰]²…¦Ë nÄ´S1 7Onú‰çÞx‰Ç¢|ý"loîsF |í<ÄÉJJZ²|3xg*Ë·à5ùÆiÍá±v᧨é6HVÑ P!iŠ‹· &Ë0oî<”§Å»¢¢Rz$ôì–‚í›7ayB•¼Pä›ÃŽ0ñìð¨7Óx²²\\&å;ús'À3O?‡©ãó1o–? ¦Œkž—] ŸbPVfÊ΀§ ÝE9¯ª’ 2º§t®¶i–3ð•Õò’4½™\2R%g?B³UœØ%»úöIG\ÃlX·›ª6cñŠõ;CÎøÔÕ Z¶ƒš~PÒ×Êeqµ‰M2ÉÑÕ[6cÍÊ(Z1+ ‹pZ¯3pè”Éxþ5¹(QvU4î’ íÖcÈa‰È“]i³`Ö¬O䮀T±?Ç´cNÞYÚŠ lý¬}çv|éໃW®êñ‚#nkçg‚8Î>ƒ$nëæ-ÓŒ“^ß'A:µmz#ï"O)¢7=ülÿt–첩”8rÚ)¥=RdP²e»ôa@Cå #÷Ë¥k•ãàÍYŠÚåK~Ý÷üßi¡Á‹-#èÖ|ÐVw†~}ïÑæûMWf”–Š ?õÖ[o™-Å-+énÞy¦ì1æ³-E >À£›¶ãH™t.Û¼ó ËqÑ‘r©§Ü¬²äé—ðÉgéè» –oÀáGŽL¹èmö-²r¿ sgÏB‰—'\ýAi ˜›ŽIS&á™WŸGlý±æ« …•É8ëøÃ¤_Ü-—}êDo¦•A’[Agu}!ÆnG¶[…i[ã‘ã5*]TP9X¤RÇܞͳ¡lg\äŠíIÛ¡ÍKÝjÛ2IOe•Û‚y)Û&•–éÓ§ÙJËÁ:Çlœ`²ºä©4Ê_m §M9, •'îÖäýFì+XNöQ™ã·©UáÒ•?Ž©Hq|H£cQå­²Ô†«Ÿé¨¨R!½üòËÍ­é,7'GÃÉ .^qÅ™ò9¾aÐ(ã‰ðŒ§ŸeVEƒ~Ž}ù§J#ã馡MÒwV&ÓÙréfy¸ FœÌ¡âÆK¡9aÈòge BË]lO¬O¦µy‘w4Ó^–zïÞàÄ$Ý,;ÝÜÚÎ÷1[9î(A¹ê'î@ NÃÉaÊ`]rb+??ß(š|†¸;‚“¤ç žO§i¯M© Å"è—0âËJýèdy É$jLµx³¤?Ý Ùw\>’A¤‰JÑ,çÖn1ÄÛOé7(‡~ý3©ÅOüCNæ_Ö;ë“~>oÚ¶5 y°nôÊѼ†iM¯ñùƒyµÓÙn•Ï|sò†_3ÐI[¶FÝ|fXß¼T‘;p8G<:cT.i}7å9…=Èä¼ôYÔÉ >S={öÂÈQ£eáS.”÷™Ÿ~f()߯5N.{ûe03dÈYó!`‚­†n æÌ;+Îð| gýù}KV2;CfH;=ù°@ £ÍŸ/v¼4JK› ?ùp°Få[p6vΜÁ$_”ɼۼU·\±<¬8¶i_† ddu¡_Þ ™‘Žér!ÛŽí[Pã¥âG?½‡ˆ‚ÚK¶qóµÓPºe#êc{âÊ+/чNÄà!ƒQ'«ÉÛvÔáУOÇÉGNDî€dÉŒcž<Ð’¯óÛ_nåè’R³ä%2DÎÎLÂäI#±EVÀÓòðý«¾‰á²’Õ¯?÷OÅ’ÅËœ5ß<ï,ädõ–-ÕYèéíFŸþyè•*[¸¥íä (²ÊMär>\:Y9ž2}&Œ*˜\ !·­7ÕVÊLr¹låì#g…!¹}‘%ç±3z¥ ´XfHyÓîÄi˜>YÎ9ʪföYOÂÆ ›D!Ïĉr!PŸ^ÉX4g6R²òÌméMRçY‡a¤ÜT_¹£\°ËÃ13G–¬®gõ‘ïWïÀN¹^}à‘!çûd¤£WZ/ä"gÏs䂹­rž3CGMÀÙ6ž‘Î {!S.˜é–Èó"1¦á*àŠQ>båó=årëzþ¨)˜vÈD¡O—6Ö¥ÛPZQƒQÁ˜²æî¡»œ¯ï—…8y²½² Ð6íA* »lŸçE6‚¡>a~Û4‚ûq4h»å„+_|PÑh¸Dý´ùÎàepÜ2ú£ýÈl1ä¹Q>¿TØ'M’sÒòB‹ÄGù©M~|ßprÙ~h|‹-tžôeqòΑ^µÏ½‚ôãÏB÷!‡!³q=ú'í@Ÿì\éKdKnµ¬:z2•¡é–_¢û­· IV¯šåýÓUÃü1_4|ñ½F£x¨[iìp-û0¾'9áv9¤ Ηôò_Ê$·jË%5ÃG@L½lÓ—wD“Ï:êØãd7Ýzf voÙ%´•µÍòe’Cä˃‘#ÀúŠR”VÖ¡@ŽYZ€¬ÌÞ¢hÈ…sòŽï.«äü¢Æ€¾iØ&ŠVbÏ>r,ìhäö‘Éø¸$ô•ºìÕ]f5Ĥˆüœ~òIä¶e4î§Ë°~9àäXFÛƒ¶•HÌÇçïAnæ8‹Ï'xî¸ãŽ–³Å|^yW‡ù<¨Ú9&ä˜ä­ü9ãj*•{ޝø,3ŸŒ§BÇ£‡üãÊ6åp!‡“œxÓwu¤üG S¹|8f|_øÌS‰äù±Œü㑊eqшŠ'Ãüç¤õYŒ$'Zå³läÅÉD*ÿ|©Œóè%'í•sœGãוpâÊÝ¢äIe’ç°ÙˆËÍÉö¥ ÛuÈò2ß5fŒ,ôÄ•Jû*¶#=ÍÏ»±œZ‡ÜRÌò“¦+r‚ùa¹xnŸ}'BÌØMòA¾l{Ü9ÀúÔÛÔµ\Ì'ûD¶_æ•õÓUÃ|³Ü|wðÌ=wEp‡.ïà7¹S€7és—Ï¡ó³ ÄZW‡5¯]•+€Á¹±rL´ÛÓÏÊħ|VNúXO²ž(ëMrÒîSOA¬=I–þ·©‘o¬½3,+'UØvø¼³î¨Gðåá{‰XwÖ-Ÿ+ƱÍSÿb[£Qüɇ4|æ4®39ÔôÑhÙöˆ+óÓ™vEZ‰à—)¸óŒí…ýËé홓’Ô-óóóÍd Ë¿'íÇ/ PF™Û¶¢b§ßVùœnß^ŒmÛ·‰‘atc¶¡DÑA†ˆÙMpÛ°q“ô!²+mPž™ldYµ¼1ÒÁ´<¹ +‡3¬8ôg8§m†<‚ÁY¥{î¹Ç<Äü”·±åÃLGÌyvî•3¹”Çp¥·ÝœEãÃFÀpÏÄNšr°v,Áôœ«ðl`šÞ”$P»lûÌM°EN8rûŒ»`! ·]‡X²2ÕÍúa£mkØüÁãlœé&BS_U‚ç_|]¶zžˆqƒýo *¶myî]ˆ‡½ãÔùÔ]“)˜—ØÏyÿ |^X†ÃdBawéFÌ^XˆS¾v¾|Ã?3ÚArí8(°Ÿ%²Ø·³o¶Ãƒ³ãø2åŠ_˜ì£ÙŸëÍî6]‡ú•†;¾ØçGêû”ÎØPJY)+zñKW"ãœSÑsÄ00É´ì¬iÞ%ß^0 ËžyÛ“Ðçºk?ušßH:ÓIj¢Ø”£†}§úù.â`Ró£4¶­´F¿–‰·4óͯ£p;œýïߕמØá2"sè Mä”.´=W*˨_ÓÐOc¿ŸùþçsÈ.oþ¾÷Þ{ÍvpîDäåeX?÷Üsf\űw±p%‰ÏŽòW›¼9ãÊÒpüÇÁ;¿Í Êh¸ýš "Çk‘ )NÆñ(LJ4v¾5M¤21ŽåâX†ç¯y†ž«º cy™ŽŠ8Ý\içj/û†Ùå1 ?¯¶FÓOÃ|긊ƒy*èýë_ÍŠ+WTÏ<óLó<sÒF*—ò´m›0œÏ<ãyÀï~÷;3ˆ?õÔS †ìk¯½öZ“„x³¸ê«ÛîÛ“¯eT[å²|4LË8mC§SQåÄÛ랆¸w[C,?äI£yS?ùðè*'hù.`ÿhç…nÒ²­jò RÍÝÜ’ÏI¢H:éµ<*×dB~È—²ùî Ãg‚;AxáËNåŽõɶO…‹;™ø 'Ÿƒ ?åKÛÎgÄpáቌQГ￱>.ÀH:¹J«^Ž\5É‚wï_ ß·”Ñ¥äÊööäu$SÓR)e?B½‹“¯|ŽxT‚8†˜°NyŸå&=i9!|fƒýó rÚËã‚Fë‰é9)ÃüP/´ÛFéi³]p²‘GØþívb§ ºY‡œ¨à;™Fy*]Я4´™Oç‘Ú E›å³¤…ص³Lôâ ’q ÛûCNvp2ýý÷?ÀX™4P¡à–°V²]†¯Qé¶›Ÿ†Ûa6sƇÇQén¥°ã”cípú•Ú SÓ «ð›·•!C>IÖ#ÅŸÅŠ”^éƒq.RDN+¶­áÑ\~Yl~˪ ›.ÇŽÂ#•¿½4Azb϶SSµËd–{kI¹\h';LFŽ1ß;÷1°ño[Æöä¹8‡ÀŒ€ý¹-œã"*x³qUJ?òUþ*—yäê7ÓqÌÅ´jHÏÕq®Hé’ݦl:¦ã€› 3óFGåÐô¶Mþ€³ýS6WU9ØÕ±!µáÇe’«{]Q m9ÑÜŠ Ǿìï8.Õ8ëHqˆ–~O¹RÏIâÅÉAƒÅ‘ ëŒJ'FéÞW†eÕ‰®&óÒgö_ìki˜Ÿ=©Ã`þȃŠ0eðøÛÃ"µ%•ËöC¬y¹!Û5Ûƒ¶Ý ÿöülK|>8AÀ{¬¸ úåSy’†²è矶öøv*Žï)kƒL€•?ÿÊîýƒ¹ó¨Ç·.Cæ×¾ŽT¹`Ú|ͬ«æÐ)ÎaDÌ/óO›z'yùŒp2w&°ü,# iXF½_€mœó(‰ê‚Z7Ñú…0á]ô7Û:ëÓVÐÛcÃ<³Í𯫆ee±7†ò·n/1;jdWrZ¯ž‚£\&—Àñyå_BB"–ÉDW¥lk,]kÖ¬FoéS©œó#ÛÄÈÌcxˆÄjAY)LÄËCXqœˆÔñ°ñ’Ž,0Î.ѰÐ:h”ž:g帱í*@k*æ'ŸV ?ÏÑh˜6"v*‰Ê’t+&¹bÒŠœV0¬AGÄp_Á²ó@š×0¾”^i4gCÊZK¸%›P’Æ)OŸ—•_K㔞îð4cZš®¦'½ÊoM+ñÿ~¯üÕßJ-Ÿ­e¶å˜Œ~ìxÛmË´å1ÜÏG¸"íÓør[èµbZ҈ï(² 3-it2(T¿Zæ0bçq„ð=À÷WÂ;cZŸ }æZû™Î>äAZÊæ@–›>§’×y©7Ëì{Æõh–]]æñ•ð8Ù• «1ܹ%ï?aÌL¶Ë2Z$óÇ|Ñp¸' :ÓjYéîÈDÂVÓhœ±†)‰3`„—Yé4-ýêfÚ _ù9{ïPcšÎ´oÖ iyÎ’c*®lƒŒ2Žã6Æs1†ƒa*ßZ·šS­WŽ¡IAïÊÀ˜òY}TNWmmc,± â yçxUǬªPt•Gô*Ÿýe±L#+^¥Æ3æ?G¿Ê¡›tÚÏúcZ†Êý¾‚Ö­²o~5oäo+@¾o¤øeäŠ8wÖÒ´ÇŸqlC¬{Nk[ÞÓ¼ËÆç€õÈçBó@[ëFmÊß—†“Åõòþ*•£(ÌK¦¼wRäˆ1ß;*s_Èc¾9™Å/ ÐMÝËîOFy´ùÇÉ'êNÜ­EeÞÆ…tº‚ìö&¯”«+èöNŠÎð be—GÓÛ4‘â•®=[Ó) ý»dR݆"yë*÷n ‚¦=ʼnÂ/}ÛVY¹l_'Ǻåˆ/Es,Àvgç©…§ì‡7:)™Ó(= Áç¶Î*ѯ© Ôf:vRLÇÆM¿òTÚäÁ‰Ûâ9KÆ™Tò&½¦¡½¯ óÀMè™ïÌók—Mej:®téý.š}eG’«¼U¾æ‡á¦4vz†Eò+­¦ §iç£ Ýeؾ¹Â1q·ëÐf¬Òé¸'¸’LZòµã•W?Ÿ-UÄmùt«LMÛ‘mó¦ÛN¯q¦þH»"ÈÑ~©`ûæ®CÞ×ÀA^WŒ*w‘Ò‘/ÿ"élªv¤ÀØiö—›ùšà4ÿeñkÝíòìY‘êˆ\y@IDAT²3eÛÛúV¹{˧3yJÃg1iô¹}øÞ±e²ŒÔï:[V>ó:1có¡û‹è˜/]A׻ɂrT?ó®m)ZI£tíÑšï GcÂY)žßá¶(^†Aÿ AƒŒ’Í­.vG­m^*˜6"üã!ÞFÉ™`^&B>üczÍ´Ú6?¥Q¾§´jÛáêV;˜VÃiÓk\0\ýj+ò M9v¼íVz S[Ãi3Œ&˜ßH´†P~ì¸héI«tjkú`œ†kYÔO;¦þ mÓ2ŽÆÎ›ºM„õ¤e”ò¶ÈÂÂ"¥Ñt´£Éê ?[¶-Ç·ùØn¥QÛŽ‹ä¶ùk|0­McÇi8ÓiýÚ¶òëȶyi5NeÙüƒaLkã®i®n; ÃFé®´t«\Û­a¶LÆk: ·y2žÆ¦ Æ·ç§Žüä£r4¶ß¦µÝ6MPН`\{þ`:[žíŽÄ££x;MVý´iìú²Ãô3Ì6v<ßEÜIå…³ù4o§éÈ­ƒ£6t¡ü¶ ߃–™ƒæÇÁ8P¢ÑüÚ˜´Çžô{BKžLG£<Œ'‚_Ãv0]¤x ‹&Kã#Ù6Œ$ϳÝA~íÅu†6˜ž~-ÝJ£6Ã:26­íÖt £¡¶o¶UÎ5Ni;²5¯ÑÒuOþÿu†®½¼0}´<´—ÎŽë,½•cË<ÐÝû³¬ûSVWpßWùÚW|º’÷H´æéõ‘â÷&ŒeäBiWŒ>ûÁ4ìh:û\ÓwÆ ÔIgóªXñ5© ÙŸwÆÄÈð6ce® P±æJ:Ï"PY4hY gUT˜ÒkzÚœ]á+‘³¿¼Œ€nže`¸¦íLfCÀ!àp8‚ðÝÃw weéŒ~&’_ßUúîj¡‘wUØ6á-{î LòåÄ4Í!cÏsçR¨°èyk»Íhf¾ípúµ­Ñ½¯ÊýOÈdY¹ûß`Y£á¾¯êWùåÒÿE•÷‹–-ß*7Ø–ö–‘ø¨LÆåFËg$>] S¹ÿ ™]-+óÚÑwòŒ†W{e”†í­Q™äÄxOyGTЃÌ(Œ³ü<¿Ä³ÜÌ·çQYçѶJpÀ¤g¸Mž³¿Ü®À³àŒ³W΃2mg ÞY:›w4w{¼gW€ÒÚaÑøv®¼H×?¥íˆn_Ê$¯`ù;â-^óÏx» ÞQX4¾Áp;¿Ê;(“~›Ný´iì¼ø!]û&WÃmþ‘º&­•:/†G’É”vx+§Î»Tf—†Ûü#…u^R+¥òÑ Œ ?†uŶåF’ÑQXWd)­-“aAA¿¦³Ã5¬+¶-7È‹qv˜ÒÚa•eóR>šÖæ§q £;¸­iT›y¶'¸µ<šß`YƒþHtÖÛ–kË ÆÙaJk‡uV–ÍKùhZ›ŸÆi˜úI«aš®«v{¼góWZ;¬«òH¯|4­ÍOã4Lý¤Õ0º~°µoæÛ‡€CÀ!ÐUØßñ²@.ó6}»/ì*¯ƒ™>F>+Ðf=RÁ¢á·æøG©pó rk!W/8èàv®º“ŽnÆñÜ/#a< iq8‡ÀÞ"p0îÆâ;”Î8:Bà`lß•ÉÅ; |'ò84uNîŠûª*è-gÐ H{ 0žŠ5m®šS!çê8oðã_ü#*ÞúÇ-Yü.#sÆÙ«æª¨+Çù‡€CÀ!°§ð=Eé|×ý{*“éº"—ô‘òÇpgÑˆÖÆöU;ŽÆŸù±eØîhyílx{2;ËcOèº"w_—7øìw–gé‚xü'ÊÚ™Áüî­?NÑÂU^GñJÉþO”·=™íÅiþ÷¤¼Ê—<ìv¼'¼4A[egdØôA^ôw)†EJË0;_J»¯lòYºti§VÐm¡Ì늺*窠k•t-„*ãô;ãp8‡€CÀ!àø2# ãå/s]Ùû.S‡ÔK_÷5ÿƒ_Ë zW3ËNGWét늹òa<•rÚ4ª˜«_éœíp8‡€CÀ!àø2"àÆ½_ÆZueÚ_|UŸŸN+躬§à©­Ê¸ÒFK«ñµ»Ê'}¤° üöhÚ‹ ò銟|il m·g?{š/;í&û ? r½äKc—OÝ ÿ¢ä’·šŽò tû¶Ëc»÷ïhמßNg»÷†g{ò:Ã7˜ ¿Žâƒôê·ÓÙîÎäIyì­”Û¿®Ò+?;íf|ЯiÔî(^é:²»Ê§«ô*¿½tíÅiú=µ÷†÷ž¦e:í ö”OW˼¯åt†_ÆöÛîHeé(>R k/m{qš~_ÛÉì(¾½üDK-¼=^ŒëLº í·ÝÑdE¢‰LoÓØîÎæ;ȯ3þöäã‚üO£Ïz0¾=4Þ{ó=y·7r£¥UÞÑìöÒµ§ü:C£´Ñl›Ý4íÕ›Mg¤ðöÒÙqöl;6M$þÑÂìtA7ÓØ2¢ñèj¸-‡iƒþŽøÅ,^¼¸Ë[Ü;bêâ##ÀÀ rÆ!p0#àÚñÁ\{ÑóþUªWWÖèí`_Åü'0þOÈÜWx9>"àÚ°kV…ù«¬3Å»†°ÿø*7´ý‡²“ôE#àÚñð†ÿW©^]Y¿ø6öŸÀø?!ó‹GÒIø*!àÚðW©¶]Y£!àžùÒY4p\¸CÀ!àp8‡€CÀ!àp8û§ ï?¬$‡€CÀ!àp8‡€CÀ!àpDEÀ)èQ¡q‡€CÀ!àp8‡€CÀ!àØ8}ÿaí$9‡€CÀ!àp8‡€C *NA ‹p8‡€CÀ!àp8‡ÀþCÀ)èûk'É!àp8‡€CÀ!àp8Qp zTh\„CÀ!àp8‡€CÀ!àp8öNAßX;I‡€CÀ!àp8‡€CÀ!àˆŠ€SУBã"‡€CÀ!àp8‡€CÀ!°ÿp úþÃÚIr8‡€CÀ!àp8‡@Tœ‚áp8‡€CÀ!àp8ý‡€SÐ÷ÖN’CÀ!àp8‡€CÀ!àp8¢"àô¨Ð¸‡€CÀ!àp8‡€CÀ!àpì?œ‚¾ÿ°v’‡€CÀ!àp8‡€CÀ!§ G…ÆE8‡€CÀ!àp8‡€C`ÿ!àôý‡µ“äp8‡€CÀ!àp8¨Ä{ž52RDLL ºš&ìk,÷†ßÞ¤íj]î/YûKNWËï臀CÀ!àp8‡@$âcc»¾ˆNÅÇ™}ƒÀ¾ÆroøíMÚ®¢±¿dí/9]-¿£w8‡€CÀ!àp8Aâ„Äù‡€CÀ!àp8‡€CÀ!°ÿˆ/))i#•J»ncWwÐf"Uî;C«ôÑhíøÎÈ"½›^Ã"Ù”­´v¼f»£Ñ0ܦS7í ‰&Ó¦³ÓwM«ò‚i¯<ÕM[é4LýJ«ü”VÃéߣéÕVA?Ã#…E¢·él·ÒÚ¼4^m›&’[éÔ¶y)½Æ©‰FimÛ¦·ÃíôJC›†õ£nú±ÃÕ­uiÓÑ­èXôèÊxû±{^>…Ü ¸öÃ>eÄÆ1ð€/ŠË`+þ³Ûñê+é”绽¼´×Zê×Õ^þG­ÚK{@•XÊá—ÄÊ•LJDsYtÎép8‡ÀA‡@§tdt°£%Œ‰=¨­ƒ³&®XŒåk7#)9 µ5Hï_€IcG!1Ž 3h{hnn3„ò¡ éd$Šã­ˆG·[ùxXµx>ÖnÚ†„ÄD4Ô×#£ß Lš0 ñf‘©3e‰.ÇŶÑ,á&±±íY_l/öÛƒýy ÇàKê“zóBŠÑîŠ2¬X±›·• zw â‹~ 0aÂX¤ÄÇv²ïøb±Ò¾¡¢t>Ÿ¿õ;)Gl&LšŒ¾½{ùÜøèñ*ݺ .FS\"bš“ÐS„ôî)†mÝîJ|þÙgØYׄ¹u¥¾1#ÇŽCþ€¾få]ëtOòðE§Ñú‹$§½¸Hô.Ì!àp8ƒv¶¸S)÷WŠÖ/›Wßþ±I©@S=šãRqÆY§cPN&<*($&!ÍX8ë%|íÛ¿lÉæ¹?¿ŽêXA×Rý®b¼òÊ«ØPR‹nɉ¢|5^<šAd¬‡„„¤tKEzï, 1s+Ê£Eø^9šñÙ[ÿÂ¥?º£…Ë?þî' ºL68³o rM%¼ª¼¯½ú:6•7¡g·455¡º¦GtS Âø ù+xš¦xãJ¼úÚ[ØÕ˜ˆn2ÔØØˆÚzà„SOÇØá¹¾Â *ÛŽ3R—¬ÉÒæ5‹qÿݷ㮇Ÿm“Á3®½Ž) z¢ß7Æýg+Rû—Û7â„OF“•ãÙKÖÄ zk}lß° 'œršU²c°jã3­ zõNüéâãñÏ­­$/¼ý™¯ Kж†ZóÉÅIݺݻ°­¤\2*xsbâ™ÕÝ’â÷ñû#R\˜CÀ!àp8ûè º(ªÂ–­À÷o¼ÑÊ[,¦Î(ôô–a«Õ)ƒ*QnÈWŽ$´ºdAzþE2I¯é¤©­ØŽ?ßõCÜõè¿‘˜‘ƒä²-ØeÑÕ54´úô¹“´ºÓBùˆüÚ“Û^Þí¸öxhfbãâq¬xÞÖñ%´3±Jþ¶ M#»Øf:c¢óˆTnÊk­× ÿö°Š‹ÇpI°²—LŠU£sg•yΘ0غÃ«Š¤Ïo™± ì~’Âqâ´#ÓZ6?ßZŧ5}¸¤–röô’•íëâ¼g ´ï ÄÎÿ±g]Žçî½ãe™¾±q®“piÎçp8‡Àˆ@tÝÊm|b²ñ¥ ‰º ËQ“v¢¬ÈvNùR6þª2å‘·Æ›øƒ#$¶ \”aÀnåypÕ’o):xŽó—™í’ùÊD@XÀ#¤>ƒ¦Š¡Ã†£¾¶ 6nPródl³ÄÍÇ焞ïÍÅyÇL6ƒ+–“eìLyIão‘Ž0X .dÐJc¼ª…ˆoùkzÃÜüè·mÝ…=BjZ¿Nà·‰P¾5޶*üARLÓ–"¥ ) Á ‚¶y§UžTa´sо›õÞoô`ñ¯Å„1CQVÙ„š …xò®?ãšKÎÂc¢S‚-«lÓZ¼òô&lü˜(ÛUy P´HL5¯íµ{Òøí ‚ÂcÕ¹(?Ч›†‚fQ Û–¿3yÔfÇHÔ|†ðeʕښæQèÉ+ÜXål§ÿˆš‡pf¦¼"ÆÈi++@L¯eIœëV.Âí¢œ£W.t«AaY7ÜpÓM8zê8”nX‹ØŒ<9Óš¶qʶE•¢ñÊ‡É B£Î¦QY±² ÕIˆEš¥í±'yþê‹ñÄ"jßc,¢G:îAþv¹é§ay¢—)(WeQ>báyM˜³E¶Ì2áØ\ŽÆ@üZÛœæ~‡€CÀ!à8X× ìRð}äëjguO±³Ñ¦lßÍÁ˜ð±¨ ²Mž‰¢OeRã98Q7åê …B8 oll2ƒ$ú+Ju“òGLÃ0›' Õ «\ KHJ¥! ɉþ¨­¶Á/WShÀÈ´í{¬Èæ&嬩¡Æ(ç_ÿ¯«qÂQ“'yÞµ³ï¾ö^ÿ` ²úåa¸¬n¯”Õí×ßœ‰SŸ„î¡•V#ÏRNššÑĘJÊ*qñ‚Ëmp‘|2«V6 Fä³»¶––¿rgØxþMþ`ÐÔ…¬:EäoåÉNoÈOk˜`[/ØJX<Ï䆩mêD2ÍI­3òi–íáòGCeŽm"¨˜3NëR³ÔÔØ éZ´<{¯«XTHEˆÁLJЂÌÄ?;~häv¤q¶ÝÜ´ÛxëëjDѮĞk-ZŽ×ÞùSÆ B²ˆdg%.™7 ý{#RǦ5«Û«/dçªo˜C¿ªi·b*§J¤°ÜÌ+ë‰GJ >Ú„·±–µMiIObügõ”àדD„ñavšekm“àLÆÅ‰¶Ã6©Š†ž4J«ø6K9L]IšD‘ËzŠl¤<,gˆ%*"dÚX(q²2/«¡ß’Ƴ¼ò4Ú>‚áÑüF~ˆOee‰!Ëí„Âu›pîõ¿ÂÏþßÿCVjHŽ<ïÌ»ÞÈo™”ðzé_|Lˆä[Ú…æÛ<!Z†Èy\¦hy·Ã«é圖œÕ&ʶÑçEó¬õ¥ùá3mê›ù”òùE Ç·õùlÅ£!Ôg³°‹DjÂÌ … ±¶«V,Çò•+Q¸~#jê¨ÐÆ µg:† †#F`È`Yab3P” -uÕX³f ¶—bû¶-ØVZŽzIËppÞ«w&òòbÈ!(”++Ôá[ÆUôšê°zÅ2Ì_°жšÁrVÿ!˜$g…‹¶•™ìràO>ä ÷‚6?Ìù­Ä8ãð£NÄ•Wœ-[è›EÉn‰GNCüwOÆË‹6¢wá¹ºÚ ò™ |KÁ±­hÖmØ„²ÒRmÝ‚ŠÊj –ÒJ|RJ7d÷€üü| 6½{¦š¼šY O:˜ei8¦‰!ÿMä_„Ò²l6üw[üS‘Óùƒ 0l¸ðïÑ©Í`Óh6Ë ârQDËÌ@›YÙƒ0¬ Ö¯^йó`½`[×ЄÌ~¹˜vø7rpX0¯Ìóç5ÖcÃúBbÝúõ()ßedq›~îÀ| .:ˆ4ɇ€#Jª*jÍ(Z·Ö\Òµfm!Ê+Y†&ᙀœ¼|Œ=£G÷ÏhR±5Jº‡ «WbãÖâ–¼§g ÀØ‘¨—3žk ס¸¸1)½0fìX9l•›èE6ž(:4ä{µhhöKÜyß“¸@Ž0L(èkꨪ´o¾ø¿†v`BVÔ6#=µrd=Ìø8{(Ù²k×mDyY™´ƒÍØYQm”tb—˜œ‚¾ýúcÐ Á~Ø0d¥÷ð›`Ëôl±›Ö®ÂúÍÛLY¥žÒ2`ä°½»KÛØˆ ›6£bW2ó†`Ìð|³CCój˜tøCT[ö“ á¥kË—/—IÄÕ¦¿5xÆ% »ÿéFJžGH›ënÚ™-“ý”N8”µk×bݺuÒ¿–˜v'çò³ûç"¿ Cä¯oVº)wõÎR¬’vVVZ&}Òfév¢Qú¢/“@½ûôÅÀ¨©©F\"û¬‘èÑ-©¥½ú„î×!àp8ƒ8D1Í^“ŒÚhæ¾ûÇJz ômç}¾|£‰“‹±ŒÝæGF4òߘò-…ÞŸ~ó³PZ3îjëΛæ=öôk^EMƒI#—g{ËŠÏ=¹þ§-}0lÐaÞ_ž}ë¬õÓÉʳÈ÷3PWYæ=óØ=QyŒ;Ü“¡“×77ßÐ\uç#^EŸwYÑñ~5®ºd÷½ '˜´#†ö5öÿúJxŠÝåÞÍ—oâ&M™lì+o~Ы6Å ÕXëýë·š8ƒw°Œ–ÿ×ÿÂ[¸j“‘¡ùð¼Fï™?ÝaÒç öËòãÛñjBe¨ßí=û‡_tŠÿ7oü¥·huQ€ƒ÷ø]? Kö¥?ðþòèƒÞ1c#ÕQŽ÷ô[³<¿FeýHÚJK›Ø¶ÑûÛý¿õ&äDJ×vçƒOxU~•š¼ÔïÞé½öÌ_¼#†Å…å#ˆ×­÷þÅÛR^Ê?­fïé?Ü–æ²îô>ÿü3ï÷¿¸¾5|ÌÙÞ¢ ¥&¬;ø#+ý&¨lÓïò3²LÚƒsŒÝ7=ËËÉ‘½ÔÕݽèië™óÞ¿|}ó½¾ýÒ»wF¦'ë`Æýæ‡ [Å47zo>½½Úe=÷;?ô>[¼ÖO+m5Ô’¼ù//ÄÿÈ3¾ãýõ±‡½³Ž®¼þòü;^m(³úÜ/~ÿ¥ˆ´šFíÃN½È{õý¹-eås§ùظj¡÷³«/ŒÈ§{èyS>´÷䛡öÒì5†˜Çí?¾*"M;lÆ×½7?ž/OŸ°tÓjïäPù•î¹×ÞñÞëï¼cýç•á?{ø_^½`KŸòÊ€ÏkåÂw[äô7î”ÔÔ–0ò™~ÉõÞÆ²JåämXù¹wËõ—‡Ñh>ÔìyÞËïÍöêBe•B&ýŽmë½óå0¥£ýä oy½ûŠwÉɇµ„ßð‡'¼šPZíï4ï´µÞ¸|žw\Çxó–m0¤Ú×zÍõÞ¼Þð.=íˆþ¶|u_tÕO½9K [Ęú=Ø µ•Þ»/?í]tê‘íò8ó²ÿö ‹w+g½Ù.­Ê{ì9Þóÿ–þD± ÕÍò9ï{CX¶”ÐûiäÅÞÚ"ÿ¦€]%EÞ÷OkdôK!¦ùÞ¿û£÷?wþ<¢Üc.úž7?Ô÷±ÃR ½¦Zoöÿ½â]p¼ßk¾‚öeßÿ¹7¥-ÛbKúÆ:ï“w^ö®¼àÔˆrm>ÿ”~sWåfï;gøýx¿¹ž¬•{ò¹ó®²iÑû|oÝ–rƒ%ûXg‡€CÀ!à8¸àŒ{AAïÙY½U9®,YïÝô“C’/·oÏ6ƒ“ü‚!-aw=ú/¯ÆÒ‹Š–ÍõN X†Z9P‘Õä–ôϾ3Ç/*WÕÞ3¶*fcÇórû$´Ðë@'=£—“›g¯ºóQKA# ¤Š±­ ’mxüö§½êÚzowU•WYQî}üöóÞô\æ=ÞK •çÅ®²•ÔçÞPã=s_û t¶(5¹r7ó}òwnñŠÊw›´þXµ½n·÷ÔÿÜdÒj¹ƒv¿¼|o€\ÎÏð3®¹ÕÛ¼£&ŒÿSø•Ÿ>«¿—‘Ö–WF®7~üxoìØ1¡¸éÞü5[}¡ÁãÎí뽟}û´–´¡É„`^è¿èÆ[½ÒPƒh¨©ðžüÓm-é”þâ˯ð.»ð?~d?CffŸ–¶¦ 75x¯?®`kYÕÎÈè ÊI1¼Æ}ýz¯pû.?Ï¡æúúßÿäËéãõ‹TO‰}Bõ4.”x/Zg•Òó¾ûBKœÊ ³“2¼!B4“½O–ù“vªð•nZá]uº¯`tË(òZeÙ|úöËö úúÊîŸ{§EAgf6­˜ë;ÙošfØ´ã¼k¾w•wÄ_öà–ç ÷Ñ‚µ-e(-Zã}3”¶_X/>3ß;îØ-e5Æo£wýïkQt™$)+>ÿwKº¡Cü~0µg¯–0æ­àì+½õ!}ã²ÙÞ¹‡ûùŽÏàõ‘ šµømþ§ßú$4­àW`Åö ÞÕǘ4ýÒ½˜´\ïX;ïãÆ›¸[{Þ« ÕyWôÏCõ¥:]Ë$’ä'¯`p›ü">˘zæ Îð>[¶Þ`ÝÚI_ûð-érúu¯å ·{ Öo7é—ôZKšpŬ‡7t°ß7=½÷Cu¬Šo§ôSü¶×¯O–—–>±B™ÃGyãÓуýþûâýÎ+ßí÷˾ÊÛäÍzóÉ–|Ÿn}åýæ?“˜r¥ä³˜ÍÞÌ×[Ó÷JëÝ‹ï„`¹ï}ò5oÇÎ"ïÒPÊÎäÉ>+/6¹{Zù„W¸Ùﳜ‚nš”ûq8‡ÀA@×¶¸Ë(¢3Æ“!·iÊÆv¼ûòSøõÃobðX)o™‡Âí5øÕ}áäSÐXUŠžxw=øFN˜‚ ²•ï'W|“ƯÀñSxêŽÆC1ÀEGýg=ƒò 59IÎVaÕÒøÇŸïÅ›³WaêÔCðé§sðÒ[àØ©Ð;Õ/ÚªŸàü«.|b0yâÌ›¿HÜù¸ûO7a¼lùݱm#Þ<þíÙwÐ3½U&%û†ã¡{&5ºÅöijêü3ï¼ùjw"¶¡¥ÅExõÉG±FΧ&5‹§Þxg9Þ¤6x)â–> ¿»ýFŒ1}2zË6Ðf”•lÁûo¾‚Û~ÿr†ŽÃðæExóá[±ðç¢ÿác„F´c“†üûŽÅï~q½Ï¿7·™6K7ãý7^Æí÷<ŒþÃÆcXãB¼òÀ¯ñ½ÿ:9ÓFµð7Õ*lzH$‡Îu"o"~xé™HõvãÕ'îÆ¼…›Þ§FÊöñåËgÉÒ?8ÛßþÚXƒ7žyw<ö ÆLD÷¦X´|N»øj\~ÑYè›Þ [7â÷^Äý¿ˆ$9:g9Ö;¸è{¿2G ½t†žú ÜöÓïa‚l£çVéóÎ>ß¼ðÛh>Ù+à×7Þž†d}M k’&V¶·æöï‡ùŸ….]’°«š¸ï­•­ÐJ©¶‰j÷§vófô<ç}æ¾õŠ·µÿ³ç~õ9ÀC÷xƒFbtîr,ú×}˜ûÝKÂ!-õÔÂõã¿@ÂPÜðƒó‘žÔŒ÷^ü+>X¸ÝÒ21vÜH,^´s,Áar±Ý)°5ÿ÷­¿ÅTyvrs²‘”‡jÙn>ÿÓðÇ;~Žeë20aìp,X<ï|4SFæÊÙjIÕ\‹÷^{½ºÃäÙŽ©Ø„… 7`ü çáºËÎGnVlY·Ï?ù^ù`)Æé/×UW›~ÃG]¶yKÿðøŸîÀsó [xGË6ù¥øùÝÆÅ_; }d[ùÖ+ñ÷ïÅíü&væÍž¿<óÆøz&qOŒpŠåYÝZ¤¤@ú®ux÷½u-Ð,[²Ä¸Ëªä²¾ˆ†ÇüÜôÊÌÃß}ŸÍ|üë HíÞÕ»*0åäóñ¯‚ä†*¤ôáq ÙÚÜX…§»ÏÍÆM9 …sg£¸Ç$<ôè͘6N.ܼ?ô[<þÒ,L™: s?ý|ï.Œ}÷ŒÌË49¡ÔÙVN“ܳ²ª¶à½÷6?–-òÛkñ.9ÞÑÚU‡ŸRvXC&Spß/¾nLŸvf}2SäùºùûßBAN:Ö,ž#ÏÓ•˜'ízúôC1kÖ+¸ï¯GIšëÑ]¦Å,œõ6ÎÿÎOÅ•ŒC‰ÏæÈyé‚#ðÐ-×É‚þòYÂb|þ釸é×÷ Mϰ‹FåÁù7ÿGL¼r;¾´³Ýr¼iÑÜYxønÁܵŘ8aŒQZ‚7ÞûÓÇÈ‘ ˸$í´áVô†’C?ãôóqÜÔñرi%îýóßMØÙ¢.O$žxø5üàÊ 1yhsôaûº¥¸û‡šéò®™%ïš#Ϲ?¾æR ìÓ+|Š[.»Ëw§`ú´)‚ßÓøÓ?ŽÄoò¤Ë'wm+Äßî¹Ò¤Ÿ"ÏÒÜùKðƒÛîÃù§žÉñ¨“;,¶Êñ¦93ßÇ-wÝ/Ÿk¬C|RO\üÃ'0øˆOð—?܆iµ²Í= ~þ‹1$'C0Ú…¤î9è™êŸI7ý»‘â~‡€CÀ!à8X°Çâû¼ [ ñÌß8`R›Ê°HŽÛýô·áÚï~ ½’|rp^?”mYƒG_š‹±rŽnñâåxýí1mâp¤Ê8?½ÿ`ÜýR!²úç¡{’XfòÄ H•KÞœ}#Ê«ýAvUéÔÖŠ;µ‡Ü„U‰™ïÿÛ¤,g=çÍ_,ãÂÃðÚëá¤éDá‘(¯ÉÍ¥FAOàwÞ÷ÒÈÑIôHMÄ¿EéçŸm†‚Õ«×¹½äsòu¨®mE׿4ÉÐÉ€üÈs¾…¢ó®E9Ón&`x~.ÖÍyÿøp‹>CS³Ëþȧ|\ýX_G‘›Œ×“3ÚG}ý ]x}DþÃä ÿÚO_ÆŸ,”A¹$ÙYÝ•6ÿL&™%ÇyX¿©ç|ã¿qó¯ÂÐAý‘’‹³N97^v*>(ÜŠìÞùFîÎ*9›-.ã·È@÷×ýJ\ÝÑëÄBQο)ßmÿÅ®B~vº¡ÇáG⤓NÂÔCÁÌ-qò y Þ]*xþÓÄ’Sƒ92NýÅMÿ-õ(ŸO ™Ó.¸¿Z;WÝô &‰"´mÑ Ì—3œÓEA—k¦ü ÷„–çÅ7oߊî9#qÙ…gcä<¤Ê7êëv•¡69iÝ|…#ˆ¥Ê‰dÇÊåSÛkRqü)g#«i>Y"õ,æ©<ŒOÒ MߘãO< 'ÉĆ1~ês¾‚n«Y±˜|Òùظù¿D)–KçfÔ|l]öþôâ'HÏ#8 ¨®×ò•[‚4òu›¶ã¨3¯Ä¿¼£†D7QÎ;ó$ü캯ãÅOJe¹Ôok;+y†^ÖóBzÏÀqÓ°ZÎÁó\l|x³ÂøÑ£P'Ÿ»ñޱ£Únªå qC£œ™âòÍëñöKšœ§zU˜¿n;Ž»øÜ÷«at>—\²U=EsŒ‚ž”Är°½J3.`õ¢Ù¸ùþç¹ç€ÊùÙWÝ„k¯¾}B“o½Ó{ãÛWoÿíøT”srýëKoàúï\ˆñe…乩޿¬©a7JvÇžvŽ9â0™ðH—rJ>K‹1xxžQÂBbÃ,sW‚ä©oîp\úí!èŸÖhôÌÌ,™¨Ø…‘“§â‹/•Kââäœx“\~ƒB™hüËïŸ>©¨/YbÎ?ððopÅ…'š³âr`ýû¦a휣åß`ÊÄ¢°½ˆ?»ÃòŽk9Oî5û¦›eR«¸¼3N:Ç5 9}2Œr»£d;òäð^1,ûíxB÷ Š&¹Àp&þ÷c ¿LnÍå»n» ÇNf(dGŒ<q8öœËñùÆ]È•6òÏ»ï‘2£' “º,ÆKÏ=îÓŽn”ó´CÏÄKÝ}Œ<îøqÜÑGâ÷¼hêšaýGNÆG…ë1`à@Hf&Žƒfy.çÞ|7Šw™[îPYRŠúF¹ä3!@–2àád˜”„*‰óÎûÇE_?EÎô÷‚W_…©“GãÂïü%»ÙS‰©ØŒJ¹#Ä7 rVýC¼°8r‚QÎÃpÇ/ÿމš±ãF‹¢ œ|ÁÕX±­Ùöèmâ›çž‚ÃÇ Ržõsª$4ÛÖ #1Cä<ÿ!“Ƶ´½ 'ã”SNʼnò½ú QÆ“’{àä³/ˆÁýðwQÚÑKžÓ *èÃpΗ`b~ð’Ì9¿®ûùㆽûq8‡€Cà E`Ÿ+è`«ÙVT„·>_FV/+Ç(œpÜQF9ç­ç\!Ể3N?Ï(èå5~Úe5¯¤|7R³º¡›\"—/µU;±le!Öo܈ÍE¼Ü©F.”‹Á† |q¡[Ôãå&\Õ%vÉEkËd†&)ÖìþôÖëpÂᢜû©d/7÷&Ÿ¹}Ù¸”=¶ÛD¶ûCjÞÉP9OJËBjéǸä¬ãqÅîÄ/~| r3{˜ ÀøÙ®ìMÒ­›Ö™‹Ó6lÜ„â’2¹ýZ.¹ªÙ…Í»(!5Õ~yôR&•׊~kˆ®z{ò©¡ì\ò÷Ì*uá¹(Ëðçg{„¿¬Xm‘Ï0Q•®­òËRî•›ÚI¡–3rÔXL=Dƒ1N–ÓμÜûO$t£Â-—¯Égæ¢uOo\½3%4}H–-ån†É¸ü’ BÊ9'xA™LrôÎÆ…WþÇí¨5G”ßmÛ0÷yQÖè^±A~ûaíòùx}g‘¬"UI[J”U7Eeþ­êqñþŠÒ–-;P'E‰—›òå<©IŸ! 8æKν7ßtL$t7á\qå­ù¼©™Fm?²ýß$Y DzeÈè7ÇŠò‹{ÿ.wÿeâ…þÍ$"úâšQPŽšŽ¼Ä l0côÞrÑ™l«£õ&[aÅ‹>9¹&¼xó¹Tѯ'^”Ø ŠIS}µìD©4ñu¡[æâ¢ÔSÑx(aÄð1²ƒd$¯#4fäøCD¸Dô? Îd^p•ÕØzQ°S+Ù>,ú@ßN°Mò°N¾N°I.‹Û._¨—ç§I&?øLK{— ÒhØVTA(…dá[$´7jKV˜ø«¾ýåœq²;‚·fÓðâ4ªçêZZáN‘›½8ýS[Žÿï߈o¬C\蘚Ú»J×!eä@”ŸÔlÑÀ—n¥[òCƯrÄ5Šb#¹þþõ?ÀéÇOõ'çÍK¥Þµ?Ðü3©møÔ1½#?óë‡POðS'†ì…ë°œäýs°bÃjàð qô‘‡¼°7™5}û»øøö?Ëú¾?Á1{Éj\pÚ1HK !êKPLnøÞµ7àk§Íh™,a{–Ýí-eÑ<âx‘ßê墱µr)Mº¬†oû’Ÿ^…Éc†™0~9ƒ7åO:l¾5]&Af­@ֈش¢ËÖ}Gñ6|üì †¾VžIš[¿U‹rNŒ™¿„äTvü9xp‘HéÁ‡FžõŒ¾òTî(ÆòÂu¦g;ã*2/÷["m4Mu¾Âl÷ñ&¢S?¡'¬ÁŸÈš4a"òú…ÚHRoqä±8Bø|,m¼ØÅX…¡Ò¿¬YºÌHé™âw|Wþò›˜0ªÀ„ùø$Ènˆ£qÁhàé¥K1qXl[µ+Öm1 zrмcL[¬A·¾Ò_îZƒ?ßs ÎÄP¹0/¿`rúe£ÿ€\L=öTÃWºdihÒÈ'Mo¯¹„é'Aù%g‡€CÀ!àør!à6:[&LÚ.5I¼Ð@bgU¹Q„²z'CtL¤O†Ì _ò?EÄ.äæíÃsóŽZc¯ÜZ! ¨ ÉEAo¬­ÄG&??ð ž~ãÃȲ»É6ðÐj“Y ÅvËJúv™$ ‘ËÅŒ=QVV9¤i–•)›trfÖĵªI!¯±B£$;¨»˜äDùä(„×üð6œwÆÑˆ‘|É1V3ÁðÞëÏá÷~1ýdé{+½û§8x0~üÝseåÈ”o]· O<þüñW¿ÇúÐÎä ¸>}sQ¿sS08ä¾%–+e¾Gt l)\‚ ÿûo»Ñ8]y´XŸ—NÄÈ H¨“g’ !9 ’:–•1 M>.Õr[¸Ÿe;ýµäì´$£Äý²¥•CbÙ,Š??E¥‰&6!}åð.MEåNÌ6Y’í Ý»#e×V\Å7M\¤Ÿ¹ŸËn 1»w×…d·RÅÅú¹IOÏ@¦*猖ƨÛé[©;çŠc6eÕ­Yv)Œ?d.œ"«çsK1@nÅOMK“›¾—¢ßWaâØ¨[û)’m\wYÍ÷ôÖÕz¹á^`+-Z-«ïÃ÷Þe¾~Ö&#¬§†¿žÚÖºO®J¿2PWßdv#4ËmÕ±rÕT†”Ÿ¦6ÔÎvóyf{¿CME1^þדxøÁðÞÜU>ÃÀoï>ýc”_yzŒæÔÈ–ÝÏèìÑ[·°ŒcŸ××D6ÉóÆz¦²Ú Ïž6R)ˆi5^ùrÄ‹’–Õ; /üíAóg˜DøY½óeU±õÁQ\š¤; 33³E¡eHp‚‹a‘ ùÈ´…i£Œ×ö/÷PÈ„œÈ“‰ÆfQÖe"°Lnn§Ð-ì}N>i\^cVäÅŽ‘[ð 4a»åFš’írK>¿$‘ÂI21!L¼Ð¢n–äÝÞÉÀ ¤8Ÿr~¥D!p¤Ÿ,óYR¼Ÿ—rœAtJÛÈ¥x~èiÀ¬×Ü­›‰ÚµÃŸœ©Ú]‰ þiغÏxFlhø¹6N>ú}³z†ì@PSWU†×_|<ôÞ˜ÉI»¶&-+qM¾,?Û~ßÒ–²ýP×"õèƒÚ$m0N&L’“R7YÒΓ­å!µ¬W1õ²ûb[évãNˆóÆåg#Q M 7muÇÈ#–I¢÷‘œÚCB‹Q½ÓÏsoÙvÄ%gàí_A‰|V à,üô}óJn¬cd‡Çw¯¾g8C&ýwB›gD ¡ï,>KÄ–“¡×®Í釀CÀ!à8 1:(Ah@Ç‘®FÊÝ7²0àêüÔ\•£hò-ݶ˜"m=Ói’Ð+FVgŒáþZ1U»e Ë0o¿øwœzѵ&¼õ'ç^x¹(‰¢ Ð$†”ä²²¤‹¿fVâX7äË­èäK…µIΘo5)SÍŠmMs Æ žÂòûÁñ²Ê*(¿µš‹g~&ŠQJ›êU<8H¯«o–ÕuÙþ.²t’«¹]ìšæ*y©¯oDÏ>øÚe?ýv¤¤õFâéúsNÆ€ÞÝäÓI>¢Išù?~%1;·âî›®ÂoÿþžLœ~,&Žb¶ô“wñΜ¥èŸFÁã#/—QKœ¸¥lþ°ŸŸ­ ÕS¨}ðÈW°iv—á܉ïþìãן¾Ã'áx¹ã!K¶o’Ï‹ýë­÷åÓ¡Æ(D!V-Xò{c~3’öá VV†¦EAö³i8'WÍek7MŠdŒŸgëŸ;Ù}3D±oDbR’ÙÖÛÒþ„®fÇ:,®gm}na*„œåê~ŸdÚ–V²ØºE˜TÑMëwË•3ÛŠ_áad4É._†*Óæ(Mˆ©Q¤è±¡~OûRé0%XôiH*›JŒ©íÌÙ³¼û<ì_•Ô,“ˆµõ>Ö±¡û ä l!µ`BlèûÛ¡Â"Ældå3–†CLªMÒ~²êîW¸ÿ<ù…௶;âÖ\_ ù¾qï[äÑ‘2p Ζ{Júf¦c‹|Âñ™WÿÄ~¡Ænøó'LXÊö=Z-îˆ0ï±P ö^Ú&xÔ ŸÐ».ŸP>ØŽDѧÑÝ7±ÒÙpÎ+.¹7¾uãmØ^RŽär‚Q²ùroÿîyüU\ý_§ÉÎ/–RûÏÖòj_E cØA:ãp8‡À—®)è-ãQÀeŒ&N•ë¤&sà.ë¢Ñl‘mÓ2¶6†+OFYÁE½¬rÒ$ÊÙÒzêÓò ÙÄnɨھ÷…”óC'ÁgŸ/Áõ·üŸs òûg£WÏXõé¿ñ´(èåMm·úÅ˲fÏTn³.—Á0N;åÛϾ-3 2Ô¢ò+Û†– íÞ„’ ·-sš™3CåÂÀç¨Ùí+mu¢¤5íÁìw^1Êùà ‡bׂÏÐ}ÚiøÕO¾/çñG#K.‹C]%ûu©(è…;ªdŖ܃Æeꔫ‰~ñ1ëí—r>TøïþiGœÛ~|¦Ž…¬Lá_SGn/ýYtgÕùsAá~”úƒ^Jü"@H¥ÃÏO¼(—i&}h=Ölß!J­_'ÄIuF3ð ]ÇI‰=0IìϥΒÌöþ$üêžp¨l3­‘³¢‚°/šÚ·dˆÛˆ9ˆM³ó#[ãTa ŸdTªü y~AüÈ=ü•O³™”‡}‚Ø·ËÑŽÅ!N“qÔT.ÑQ‰o0gT·…û km/͘÷á¿rž3z2bWÏCõˆcðû›€#>RO 2ÙôÏÿ©7 z2Ïc—ÚŠ>¹µ*ʾÏ/«_ÒP=Y¥UÆÕvø¯^4ÇWÎbDÿ¬Xß ¿yà—8ã¸#Í…u½ä›Ëï>ýg£ ïWSÙ…“_Ñr;ɯ¯êZäH[Z]±P¾§.«‰ì3B}GbRËV]•K†…\î–ÞÍï?å¢;šãϽ ?»áJtm…IŽÈ„ê‹J:'i¸˜S€=zñ™g™ÍüŽï6¿>t²¾ A(¼ÓÛ—eü–ícj¢bÑ3ÅÏweHy­»&BNQde»¸ä5F´îºj¿ßÓ-òñÝe•]gz,êÔò2ïÜ¥¤õ¦ñ]³[ÓÇËqÞò wšFÞ.¦šý¤_,sìƒ;KØe×ÈD MshçCL²¿ÌžœÐ]0É)¯\/ÆFTVù}gµ}û­9_¿ìóržŽQCºcÙšÝøå=wâk'ƒ~rÖ>­G7|üâãFA/nðÛ_­<˜ŸÎ­½6©Š ÆÅË»£wr 1´¾nð1By,FúXé[ä;ƒØ]æïj–•yšXi»Ú­ä€»ùN½àm|<ë3sÉ«¯¾ÁyVcú ,sþÉr±æ2Üx×#8ù„#0ÂL~…&¹t»„¼sµ-WºÍ_ˆ³‡€CÀ!à8¸ð5–ΖAG2’Ñ¥Œ™Ä@IDAT­³:¨‰Ä"33C®Ò‘Õ¸uÈ ßÀªÕ i¼lñä%M½§‹æ/4ayiþêértZ¯d”–nÅ[Œé7kD9çyåo]v) )”<¿Ú=µ[h妵(:Àê–"[¤Í™kÙpš,˜9s*e‹çßý²5•ÛJÅpÌîå@ŸíE·±HãÓé°×(!:JiÖ¯XŽÙ3g·^Uß#ʧŒ¼šå\ñúu&®or\ÿuá%¸è¬ekp)g º§õ’m•>/Õ]ƒ¹SùZU\85{ä–iåŸ%_êá‰\ÃÿŒ|þÝÈ? ¡e¿.kòéGåDŠS,:U¯éׯ¯I²¶¤¹rÚaù‹cîçþŽ*nÄM±Û¶~Þ}¦9™Ù»7ÆÏ`ÒrôÙ_ìjWÊø¾”_€‚ü|äóç9ÅÎ0qÍ ¨•èþ &U·ð:2ÙëŸgëÀßwõ"7õÿù÷øÑŠÜð}<ø›12t9š'íÁWƒ$m¨4î–3¸ëM®õ–-ÒÒV/=ïB\rÞé"—øõ잊¹“!I”QšØØÀ>dÚÂVÙ‡Bi…Úΰ<øíkó–&͸ñ¢œãˆóÏÁe—\„Ñà dk|/¹a:)!ÅY'¸Øæ‡4¡}Y” u@¾áõô3ÏcýV_áÙÖ°N.¡£Ñ•mòð§ó‘'HÒÔ6ûeµx-ê½$äÈ9Ý‚P=³®ÿ?{_çUѽÿlwÛ»,±K‡K Ò ((¾€b &( ‚(**¢‚ Ê+ˆE‡t/Ý,ÛÝÝ÷ÎÜ{÷ þïǘù°ß{ïÄ™3Ï̙̽9s߇……¢‰·;JŠ iÀ«’Œ*0 Z³µ†Š(}ÑHKÿ½fÔ,ð.,WÔ„4{8d§—ƒEõ=_íÃõx¡ÿM‹¤1Bq¥yYdÑüg#ã—â‚(R+wpPGÇÔŽ×:UQ=:ÐjÑ›ú5'£7ÁÎÎAÚ1#]Ýþ×ÝÇ‘™«îªÛ +Ô“i‰ØüñªËš´œT•ïà@ZØ£àææ†N½ø®^-Ãù†¬ÎïGøÖÒB¨ö^settb׎]Ȧ…µ¬\þÒ‘Á´v!$œ'¢åÀ¸wÒD¡1äMÇøÿ þŽ‹ -쨦ˆ¶é R3˜ýª­WÍ’´G=M¿jkwd¬Í!¡üÍ¡5RU9‚<Ä 'Ÿ,h1Jí³´äüôåŠsGAnè@.ΔÊ2Ùý3¹üz‡Š“€h©NHÞÚ n4çI×v!H/Z›´'!îz<"ƒé,&Móè\à^Màu§³Ÿ|ò“Uyu•?/´êHKkv¢„aÌÍ©üðÝIͺñ—Ïâ—_¶Š´òbšÜS0ºó¤HkŸH­ï‡JÐ_E%ênæ¹Óǰm§3¹ÿ"µZÚ5ËMO ƒa«ðÍoñlIª‹êLo@tg²JMS8:ï¨ïæ–ó!v )I‰HHÏCˆŸÊKŠqåÌqì×\ƒ‘ij;õ±v’V®agݳŠ[(9iJÆ#㣲èk íw+iÐH dwE9Y™8}d/FM~+¾Û‚i#›>ôE¥Òz°þÀB®å8†¯ú»`eïŽ1÷?‰‘šJ€% úÂ_ÕRåt†\-gò« ·²2•hjJâ“2Ñ,Èå¥$À_<ƒýG‹"e%*%“òô áb£¶šŠ4ôdÖO:>Æ´JKÕ]Ðt²zŸHú"hA« ™IqØG–Ó9¸Ð`1]Å›"hZÀ«Iºö™†5¿­„¥“<ã°úÍwíFí)´5~Ûò3Öý² V®ž($—ej0¼kQº×dö\¿„[:µÅ±í_âñg0—vÑÛèDgµz¿ŠI(OŠ¿†Éeã‚Ý™¸´}=ÜØ(ñBŸ#h}Š‚ú^©1î·R[ÔÍÕÕyxdL¸øïþ84®ãÓ/¿†ÿSîOFóÈàåÖ¿ÅÂÏ6“‰ªì‚™ždÑ›Ž­kß•_úLÖ ˜ê¦ÕCŒªo£žHG:hŠ`ã@n.»ˆÛKç³Ñ¶¹N~÷6ÖQ?M9Þ®ŽÈNÇ7_®ÂAÊÕ®ó-8}üÐ~,¹ª å\ü‚0ðîYørïbrñà?\ÇÛs&7‘Nçx‘VT%¹œÌNKÂ_,ÃÌÅŸâRZ&©Á« .Ð ²]'csñq t$5""YºWÇ™·U¥XXTGš¨Vý!üÅk‰Ö¿dèÐ<è ¢DR„º9èÿ -Kí.5lѺý?BáBbZ…9aÏš…X?°&ïG»ëdc%é:Ö‘Ç^j쉓G Ÿ[§ UÓ Q.#á*úué‹'—~„·÷A¹’s#®ôÖ4¥ñ"_µ½+½OÉÈ惣f‰“yø°¾ÔeÖãÈ‘ûɸh/úϸ9yd5>0¼3ðBçþ½ƒCT-$‰€D@" ø‹ P;lŒVåàÚ M}ìPD‚ì+sžm¬¶u郦~a9éQ¼DúÄ¢Iݽî}Œ!¡x꘡¨ÉOÁ¢Åï¢Â%·4÷ Ô3ü îè§N†\\|0„jÙ”‹V]É·ìácäÓ|fM¾MÈuÕþ_Öbí¦£Žì€ oÄR^'>Ó¬K¢ÖNèÖ«?Å.BÜå èJõŸ;zO=0‹¢nA çrì;zF´£SgÕ‡4¹à&•hcXnf²cAF“¼ß&aððôÃwŸ¾‚•ï¼"⌢ZE!;áN±ÀÐ}"&Ò\/Y9"4Pì–’UçVMý°êYd¥:½niEgí¯aî‚·©.]º ã`I9…´YhÊ<âæˆìø$²7EF×èÙŠTPCÂ8 ed̈\ô|üúsÈÏH@¯ÎQÈK½Š_]*Ò™~EI’òÈ€’¾$RxÇF¥„Ìødu'×lNhEªËüHƒâ ]mù|¸Æ¦«o8îz) ècp˜ÆD‡N‘tbÆ Ù†»ÆOEd˜®_<…õ?l4¿» ªÙ6©ª¼k"F¯Y‚oiç±YoR”ˆ'ïùQ·bÊðÛÈ;€xkË·_€”6Dp - =]µ:" 1ä ÀÎÜÊ“ZäwüR¿;7§ü™ð #5ïl>2¡5”"!”“`®]…œô0ЬŒ G 3‰1¤"«ãlíˆ`ÿPQ$¯Êmi!ë›Ю#¹)ëÑe9Ixþ¥E"ý–ènä"*‰éש¼&l‰ê'íØFY?•OF°Hå_¤éh!8ò ÍÁÔæ¯ÒÕQàÁ£Å’Ô‹ƒ9 W2+ѹCkÿík<þT9F“•qr›öõÛ³q0‰ÜKuìG«2¤%eˆ~Ö™¬<0`Ø8xÏ_‰GŽ iD3DùYaç†ÏÄŸ ®ý8“=]š™ÔD`óö˜¹æì™4C|:tlÝß®wOœJ‚d0ªJ‹páL ~Ø´SP‹è?ú@#L}áèÕ‚64†!ùù´®M4æàæï-5\ƒü‘œO Jô­ÐêÓ=ƒZâ¾'Þ'ýQrí˜*\i}J!¯œ;a}» ýÚ,]ñ9¼›¶B°C)bHªûϬ¥äk>²–æÓÞ5h[! ‚¼œp0Œ­Ú\7ÃZw•#gcEyNÄ5-öŒBFͤãÓ2Z «å[Í·öÇ=FœU)k–¼`RþþgÞQJ*Õ,ÉWO)÷ôh˜~“¨h%ÄŒþºŸ÷ѯT>[4Ó„þ´Yï)e‹êâ<å½g'˜ä™²ðc¥Hã‰ÕPŸl¡1A{K&ùêÃoÄ“¯(9å†>¸tr¿òàÝ·Þ°œNkÕÆíÿÕÊÚwæ™”›ðØ¥¸RÅ^ï£Æ6xKçˆEZVü)eH¨i~9zY-Çï½@LWÿÓß§˜mßšðÁ¼nÜq¬¶¾ì¤ËÊã#ÛÕÉ£· !”(3ìV|µ¹¶<ßlX¹Ä¤ü÷½¢á¨T”(k’$dDgгo(YÅU‚NYA†²ì¥i&éÆyÉ}šÒ5ÂÑ$ýáç—kcAûpÔT(¶~«D»›b¤ÓϽʸá½È/q}ïÛíŠ:TT%¹Ê7Ÿ¼mR^¾Þk›;”+éy¢  —”¾FíãüÛöŸi ™«×¸TŸùý'Òk”M_-2á¥ßcó•ôbmìskc£¢8[ùrù“¼õòKŒv‘{÷„aCoG‹PM™Tƒ-©ì QS°™ ‹}üñ*2HµGjÛ¹+ºtïÑ£GÁ×*Ÿö)*É¢;©G²J©µv€º†T¬Ù8Üð‰Óð³‹/>ý| ¾ûu ÈÍk`(&Mzˆ Î BAÊy|¹îx˨¼ÔXòa\ëΨÑÝmçŒÝuú4¬šç UN¶ÎÁ¸,ml×;¡t^ºUTktèÐ>šË9m×Ã/¼ |ƒ–Ÿ†—¿‹8Ö¸wòྷbàwcpÏN8»g#6¸?²úžœQ%¬i‹Ê´ß°˜0f,ùãö£3°™èØ&¬vG1 ¢^[uQŸŠ–½‡ÖŽvi‚Á}nÅ ;F`Эíqz÷øñp,üÜÉrf íp±ñ=XÀ/¼¥ ýöQ!} Úu jÕ£FW!(8™‰×Ý4°Öµ ;Ô¯4r2vži‹;vâÈÑœ>s ÇéŒ&/ÒBèBêï­ÚtÀ;pÀJÛhѾ^_±wNü û!×ãptïNd”¨ƒ50¢ÚDE¡EË(²òÞ ½;‘cb-ø†D`â˜1ð Ãy™¸¥]S“]D=ß®úÙ`k[Gôžü\ãÊÉê½%RKÈu©»Š@pp>}C_&œ<|ðؽãPbïg« ¤äJ¸[ý£\”Ç3°9^xó¿k÷9>þè\LaÕ]ôÒ}#CmÝqõð|»ë¼=‘’VŠ_u·M¡Oß÷ÐûáNšäB«í-͵¶2Ìœ%ü𶯍‘#¬„Kh×*6Ú»Ã;Ž÷>ñ"Ü›4Ã'«>Ážã—é[ûôGô­0~ä(I<¯¾ÿ6Îtæ6;—v]ƒ´ö²u2ÁHvº…_Ï]DZã'p=.y…%°wqG‡[º ©¯3>[ü¨ kC»¢\IF×`Ÿô6ôî¾ïœ¥úÝ»÷àØÉÓ¸pö Çжª–èÔ­;š7kލ6mÑ­[ø‘J6k[úö<ý0‚H›ÂÝ® é…ô]ruiôÇÓ¯)Æ__äf¦Ð€Ñn,Ix† ¹~ÿÀ „µlŸùûìÃÞ#:Ï4ÆC"1°_/ô0wÜÞþ^Ôÿb€¨ï‘•µz<ÿ8œè»'­ƒ¤äÚÀÓ]ý^ÞÕl7Ý [gdTÛÁF!cÖMÈ®…:Vy·žX†»g^^ŠŽÝâ×-dÈŒv…ÏŪFḢֺ“¿ð^2túßÖ Îöd”ßgÒ°¢ÿéøƒ‡È޽ðÆÊu¶{öî;„³gÏaÇ^õ¬=cêÑ»'Z·nƒ^ý  yX +j˜0ýy¸®«V¯Æ¶§D›ºõê‹ÎÝûÒûzª3.á«o~€BZ¥ä®C[þ¦p ñ÷ø¤±(uñƒUy.,ÜZ KÒ‰~t,“Šáådäv1¨¾oü*p°qpÄÐgBó|22H®ærË-IKKýöq÷2>>!Q˜õÚ{èÜk6mÝŽ}¿ýˆ‹ †óí»ôÄ­={aèÃз'i–ÐqzØR¼iŸýüíW8HZC×®^ÃÅ çpòë­¨¡}çžèÚ£;úôí‹Þt¤'€Ç}3¸^K2â7dÂ4üèæ ¿lÃ¥«qdì´Ž®ôÿ1¹}kyË C{pÑiË«D@" H$/È3•.64ÌxEyÄyØ›üÏŸædìˆ,±ÛÐÄ&púYÇŠ²bd¤§#3+›Ž•³˪áNðõó£ ¯cTA†…[fMrÓÉhUJjù&U\Wøù5!á„'µÕ(( I–ÎÏ*¨Žä£WWaäÉ2O@iŠ…ŒÔdA£‚ˆ0  ÝI…º …dmZh’`! ±J)ósã ÎÁ–”’5ßú.t Œƒ=Ò]½éЛ·µœ| ÇÇÅ#¿¨¬.îI~Åý›ø“:¹%Ï.Ø©eHuÓÞž&gªª2cÇg’ËÉT¾NSY"p™Öå%ˆ£sžDßšè{ÐY}ÿ&ä÷ø&è—ýŠúèë¤s¸¥¥¥fyè<%Y'Öá45Õ•ÈËÉEvN6õA)5TKɸ‡'ù('yGÍJ4)Nã1£ÃâÂäææÐ_žh3'ØR{\ÉØ‡»Ü\4aŒËQZß.׬3ö¬âíÄØèŒém¸ÁUå‚ϬV’ŸuîwAžÐ§EšèëÜ"SYA.©Êxb¯VÌìÙ;8Õ]1&ˆ!N©¤÷…ÇAnA‘“¿€8§_QZŒRré¦v;¦mãzë¶Õ†ÚJª¿z[©R‘Ǩ/Ç=óÁ´é 0âã‘•Ë’YHw'#ht~–àªé@oy#hh¬qzfVù÷®á˜/Ãû\<¶wE÷ÇeRPŽðHÅ5ªbËÁ3Ô­ õu Y*§wZ€ªÈ^MîËòòò“Cc…,÷ó»M BNÎðô þ&ÞìŽ-°ÿí¯ìæŠ›Í <„3¹ø£¡¼¬„ ªäÕ1d#¾7æß ãv–A‡ô´4dÓ8­ÌXÀÙž{MÈv‚»: o1®´ªå][Fcäwñ.ˆ’r)Èc•Õ@XÐx°!‹à"PýTU­à›Ÿ“‰4â9¿p¦BìkÛÎK7¡Å-7úfr0~Å3Ñ`¤õ1V˜Ÿ+ú*—¾ÏìŽi8S±?wwWmq’¿™ ¹ÕK"£é9¢ß9_úæ±÷êwþ6èãŒÙeñ>±­Q13k%ú¤v¡–——Ðx©”EßxT0Ï5„O1}·D[¹môÇßêÚc0òú ÞyÙŒO:}CU|øÿW2èÉAǧö]¢¸Òâ"äç.4JÉÆ„ê’Ò’Þ+Oú?ÍnÚ"Œ*–†ò rɾFn^™,áSéd`ÔÞnô­s%ìúÿy\· ‰€D@" ü}¸¡€n˜üþFêeÙ}OŽw=ê£Æ»«< ‚–A츚¯5”U'W†gÃ^7Ç4Jƒ'•úŒÒP\Ü5’dÈyS™ ÙùŽyüQ»Ä|OKñtßNÆmÒŠ¨—›äáÒo°^&ø¡áþ0Oc‚\M©‹'u™D˜4H»—Êéû¬&Yë<Ü<ïuŠ6Ñ(]†MÉ4VNOã+#ùGÇAc½ rsãÜ_ªY?Î:¯¦­SŸXcÁ¹¬ ËÌÅöØrŒ5AþªRAF¯^:Oßž]çªÑ1º+bÈè]øÐéØúñB4 p7ygYÐßs)¸¾Ê)§€ŸÓ|¯‰Ziõ’Ô"éVÑ_Æï2ß3³w¼>úuò5RQc¸×G›ã+cšÖxŸè7œéñßͼŸzÝôû|3mã< õµ^¿~5´ÏpgšÖp» %ø®n>S:¦¹ÍŸÄx Å)ã!Ú(FßS‡yòY" H$¿7ÜJâÉ SÔTÎOmÔÆµ1Ü3üŽqZ}ï ×ÇÓÙ0ØRƒßòýg"Îü'ªUk!œsü¼éA¹Z›ù^çIçWàc”nÚN~÷U¯c¨Æ¨ïÞ=îf¯L×¼Í\™èózˆp¼à¾ŸúXÖ³q<ÿqC¿h©DS¤kØëeD=zãôÈ›¸r{DÏ8Ô¥§õ¹ö½ogŽ¯Ã³FX/#¾Ùb;Úô4n7çåÀ´êgœÆß J¤~¬ÿ{Â4ê¶Më>ªæ ê˜2~ßêÒ0ÍüpŠwBðüñŸ6Ø(•iˆ\gŽÎ'·Sdjfe¹8Ó7/Ë4FT¯pågTŽÓôrÆô8^‰€D@" HþžÜP@çfñ$ÉÈ ík)OZêL,X½Q&« sz󉈱µ]=ùµQÄ—Á^¯yÉ›xæ¶ýi€ôzx‚¦MúxæEØÃVßäM/É×¥3±Ú~¨—~ãHܾ6‰5橱ûúéñ¤¾±Rêä¶¾~7ÆTê¯Ë8Çï»çºøÌýï 7û>™ókÜ6ó4sn”Îùo&ùûiÌÍF[O}X­¹ã3çO¾pžL˜;¶Ãê5o`äÀµ õñV_Ó1áI'¬Å×7FŒ²üî[Æ£Ñ6›Qc„T®ÍCC<ëùD¹?0¶ôòæW¦w³XÔ7>u!МnCÏâ{[·Ù ÷•Ùÿ¦ø4þÿÏÛvãïóiZjŒ å:¯úÕÓôŽÓú^ܨ,SjSÓZä“D@" H$wn¨âþwo ä_" øß"  -Õ%ˆ!kç¯Ä"Î#''§¢ˆÎ ³EG'²аð0´n×ÍÄq8½ìÿ–cY›D@" H$‰€DீÐÿý ¹ü³Ú5ˆ*ÚI¯ }l™dd‡º!/Ž“Â9£ ƒD@" H$‰À¿) ÿ›{_¶]"ð@€s7£æû`W² H$‰€D@" ø?Cà¦Î ÿŸÕ. K$ÿhtá»ñFÞØæ@ãåeªD@" H$‰€DàŸ€Ðÿý([!øK" wÅÿ’Ý"™’H$‰€D@" ø‹"ðÇ|LýE#Ù’H$‰€D@" H$‰Àß) ÿ]{Nò-H$‰€D@" H$ÿ(¤€þêNÙ‰€D@" H$‰€D@" ø»" ô¿kÏI¾%‰€D@" H$‰€Dà…€ÐÿQÝ)#H$‰€D@" H$W¤€þwí9É·D@" H$‰€D@" ü£ú?ª;ec$‰€D@" H$‰€DàÐÿ®='ù–H$‰€D@" H$R@ÿGu§lŒD@" H$‰€D@" ü]úßµç$߉€D@" H$‰€D@"ðB@ èÿ¨î”‘H$‰€D@" H$¿+R@ÿ»öœä[" H$‰€D@" HþQü.]Q(ÿ¨æËÆ4Žõ7÷9ýý™PúâþLæeUúæ±7÷ü¿áíÏazs-1Í¥(5¿»/¦dþgO7ꇥ7ÆèŸ)«Óý#4z•¸ojj~ÿè¼È«D@" H$‰À? šd6*)è“P ‹ÚëE,-—|_[þÿêÆ˜Wc~I*A ýqœIüŸ`DÇ€Iüÿ¢ySìhm¡Z©ÞÿaÝÊ$v·ÅTÖ¨Lm~=¯Q>N;âB0É×qéz2Ü<½`km)vÚ,x—¿¦ÏŸE~¹O7ªRU'U«çšæWÏ£óÃBŽ••%Jò3°ïÀ!X:¹ÃÝÙÑÐc¨=ŒŸ^Öøª×ÉWc o4ù¯®,Ãųg’]OOOX[©8s=Œ‰q|ÏË("^Ûyä|Q›F7&媫«i7Ò¥¹ÉØøãfÀѾÎ$àUqVK•kèVW›ÖëU“Užô|§lÁþsihÞ,¥yé8zäö8ˆ‹Wâ`mï /×Úñ"Úϼiuäe¦àì¹sˆOH@bRâ¯Ç"%+.ž°'a“ëÕÇšŽ]jÜ%ìØ¾ 1g¯ÂÚÁÞæô™Iã@4jjª¡ðmMöîø—SÊÑ4´‰h§®zlÞF=^¯—Iªqêx2®‚ãÓòÂ,|³æS$Y¢exÒ㯠6%^^ž$xªå*J páüTY9ÀÕÉ^åMt™qÿª;ÆùYÉØð<¼áâ`‡êª*‡ÎS õ%U ¥ª;~\‡½gЬEsØÑûÁ;»z>æ•Û'p'> rÒpäà~ìÛ×â’amç/w—Z¬)·É˜e‰†NOÇÊp5¤é¸Òx,rà±jʲ"œ=q{÷Àù‹—‘_[{G8:8ÀŠ@ª®(ÅùS'°gï~œ¹p Y9°±³‡3½‡5U¸Lã%W{ןLWÐgžÕ÷áÚ©ýØr𹮟;Œ÷ÄËË>ÇÅË—ðÛæïѱM$V®ýª"*Ïÿ-Mþx‚ªOf9ŸMòhéu“í×1ˆ;uÑ]»ã£Ï×áûï¾ÃgŸ|ˆ Û÷£ ´R”ÑùP…! þÜ!¢¾ã¾ÖÇ–%õ9ç´´±GhXî??ývB”µ´àñ'n5`TA6þÂq<~ÏP<<ÿ}Ä%&adžOÑ"¼'Öo=^¢aúæýÎ|×+Æ› nÌ“úÅ0´Á€+óÈý_šŸŽO–ÎCôÓp(æ,Μ<‚ç'uÁàÇæ!¹ú¼¢Ÿ/ mo½ûŽž$Aý8>9AÞBR¿‹•ø|ÁX·;Fk]´FªãœŸK±ñ³·q<>NV(+ÊÇÅ3'ðÞÂðÉ÷[Q¡a¢CÄôqÂ÷nÇØžm±óèYìß²Ãï} '.'q’Q]êcei>Y8.xW¯_Ç×ÌÁ€ÿ<#çâD†ÒÜ,™ó ‚1ê®p´3ÞAWûX¥$%‰€D@" Hþ ÏkÛ«NdirXSŒ_¼Ü ¡øö™ðuu@iQ&MšŒŒ"+TÓ –ÕMËŠóqåò!4ù‡#<˜v)¾0/GÄùx»#;= ¥•Õ$ìXÁÃÓî.Nj}´ã•šœ {4ññ ¸Ä]½Œä´,8{øÐ®k„˜´V•—"-#´»UE;Œ™9Eh g{!Øa„6o‹û{%cç“è+Mмs›ËcyT„¨“w(¯\¹‚Ü¢ ø…"<4€( åg#¯¸>^îÈ¡ÛrÅaÁþ(ÌI§]Ä$о2í®ù!48®îþ1b ¼ÜMâŠó³påêu”×X!´išPO±ós²QBm·#Ù>™v«,íѬysÚñd šÓ×T"=5 Š­aà)ʈí‡Æ“±9}ô á…fN±8tâ¢Bz‹Å†Š²RdeçÂŽvQs3Ó‘[PŠ ðøö\²¬´I‰É(**!1Ñ>A´Sç­ÑeÒ•ˆ£ÝéìÜBØ»¸£eËf¤‚mƒÖ·tGMYR¯#>%!áÍàKýDD™nív^¾|9…ehЦabLTÓà ÙqOb^GY·]Ûµ€£µ*X² ¬ G¥%øŸÇðò« äj…ÂâR1†œœˆQ$Ük¯*¯k–¡¢ÛL,k6\- áûüƒxç³ïÐÆ¯‹ -ÄhÚ\–å6îw™)qˆO˃«] µÅ‚Úâ, X¼åÝçë×® %3îÞ~hÙ¢l,kœkG7øi3 ¼[Z¦Ø Àß—Pæ  ÁÜ}YñgñÆsÏ`ý®t ÷iU¤‘QYI‚«Þ`Ž%ÆJ“/S”Ê[zj2,mPM}˜œšgO?D4 ÁEÚ"!=j<]IÐÌC|rCCÅ{Áµ—æ"15 aÍвslÿz¦¼þ!zE¿ w{mQŒ0äÚˆÉòü4¼óÂx\õ…Ÿ—ÌDxO”ÓûÝ»ë2ŒÜÎ' {T0µ3•Ʊ ,ªJ‘œœ{7/zW›.*Ï\7™¸„dØ8¹¡yóps²ƒBZiié°utBYaµ'‹vƒ v­ÏÚ…Gæ¬Ç¾S¿áÖvᨪ,ǃ÷MÆ‘³±p¤þ‹;÷?ó¶9þÑQ”^¬ïÃÁÃg`-iCT Š4"Ì÷7÷Cæõ‹Øt8¯N£w‡2Å]»ˆµŸï|‰g÷4/VûÌ-«.Íŗ(¯ÄÛs‚Uqæ=2}³ïÎ~v4ÕÅ>µ˜…… “@>¾3¡>ÈϘ„§Ç†ã›Ý#Ý: OìÅÊØòl4ÚF…ÂÕMýžÔ~ƒkk—7‰€D@" H$ÿêÐ…°À³QšgfÆ!¬éRÉT"gWtìÖ»›¼ô8,_üb²He×ß[wœÄüwßÅ·¶§ÝÌcxnöëèЫ Î>‚ ‘–œŒ¡Ã§`êø!àÊsS¯á©)÷âÞEŸávwüºv%^[±}ûvÁé½[ÑqøÃ˜õä½°(ÉÅòy³ëâ«‚|s¥ [¾X‰Ná>DEÝu¶÷ÄÈû_Ç̶â¾QàïFHy>vmÞH4& Â×%9IX¾d>Ä+hæ†-»O`Ö‚%5 éWáéù+Ñ2²í¾þ€vƒý´»vÅ»¸\àËLÚa+ı“kÑÖÏ>]Û)„ôŒëgðꋳq¥ØMJp1×ï¼µ][…âêɃxîñYðîØ …XÿãVÌ[ö%f<8nöÖ´Ëœ‡e³ú ~ëU´ õFü¥c5p¢G=‡Ê œL¬Äk _Aß[¢HèÈǺO?À‚¾EÏñÉÇ«°Šv‡õhw%·?þ îmïƒí_üawOÇÊwæ£U¨в’ðñ²EØu©"¼°iç1<¿`1F ì*Ž8ƒý;· Ïð;ìë,ÆLë]jÇŽ›Zw¤~>_JB­ö¤AÈã`ÚUd- K[xxð"Ž–—$.*uÁ«ˆ„Nì9†©‹ž‡«XûpÁàá±ö•µHÍ.„KW±˜¡—gaù#ÛðÈ„¡°ˆº -¼¬ðñëñÎç„ð†Ê"¬ûdVÿx=¢[c'©‰›õ¦î‡ý?Á¶t?¼ýò£p&á±²( Ë_y¾}¦ã‘±m!¬‘ÐÆáÔáÝPú<‡>·´Ïzº-š„4ÇúãP]–{÷Rá7û´ñ ÑúáøÝðë6‘á¢LPËö˜5!Z7 Æ!ÒÑÇ…H4û)ÊIÆÁsE˜óT_pïÀÉwŽ3>8Œœü2øó¢Õ%4&èjMýÛ±Ë-µTÜ|ƒÑ.z<Òi1¡ °û¶l£´ƒô-D`Ón˜óÂ#ðqS¿µµ…äD@" H$‰À¿šLÖ $U€H¡Zùí§ÏyoO2îeÙ‡+?mÚ®\¸¯•)SV-~Fýè<%9·˜â*”Ÿ>] 4]É)­V.Ú"Ê.^±F9uþ’’”œ¨¬ÿx‰Òfà}J|v© ±ó›å ºüGI/¬PbOî¤üáÊî“WDZܹýJ$Õ½ýD¬RQ˜©ÜÛJ¯ O*ûT.\º¬då—h|Ô(´)îÎP©ÌæÃÅsê¥#J0=.ž×-{A¹uÒ,%!£€ž«”mkßS<ûLRR +•ø3Û¿sÞ\¥œ¹pYI¸vAyïå{•.#ŸSÒóJ•êŠbåÄáÃJBZ¾R˜¯ %º[cT^ß}nœÒ}Êl%!³@)ÎKWÞž9AérÏ¥¨JQNíÚ è~³ý RPX¨ìÙȘ†(Ç®ežªKr”µ+_WÖü´“8Ru$˜’æ¿zéð&%¨ãp%1¿RÉK8¥´°!¬bEbvâeeD”Yo¯VR³ó•äkg”‰] <ûöEzQ~¦ríÚu%#+[IMŒU^¼o¨2eî2Qß±-k;ŽœSJJŠ”s')Æ(iÉ—•GFD)Ï,üDIÉÌU’®TºS›W|û› ùÃGó”ŽcžRâ+;¿Y©Dõ› \LÉéyÉ—”±}{+›\ÏÜ:ß®TVV‹ç”+Ç•¦Dï“÷ªé4êªE{«µñ§(Ç6}-x;åeÔð¡Êc/,TÎŦÔÒc|È.€xÎN¾  ëÒFÙz\í{޼rx›rK×áÊI 뢢B¥¸¸X)**e 2¯+§§—¬V2òŠ•¼´XeîÃw)¯®üI¤ÇlÿJAóÁÊñ‹‰âùüÁÍŠ3”ã±éʵ¯P_Rù¹r”Ç»¯røb’È+x«Òz”ÆÎ²çRº2„ ïÍU†O_¢–iLI¹ñ”»Âm”ûxlU).˜¬ ç}ÊÉ qJ~NºòîK4&Ç¿¤TRjæõ3 -y(û4þŽmWñúiÏQe õ¼ú)§®«ãLÔZ]ª¬X0Cyõƒuâ‘ÔÎ5ÌÕÇ=W(Ñá÷±\DTT”k}Q©¬}ëYeòÌ÷D½¿|ò:­.ôRœ¹ªæç*>~•ÚÞU¹žU¬ä$žUºœºnÛ!Q6'ù¢2ª«µòéO©ºråÕ)ý•^“ŸS.Ƨ*9i ÊÜûú+“^þ@ŒÅÌë§•»;ÐÊ…ugeþ¢7•ußnP?­–pk%+é¢òàͨ®fÊ‹ –(kׯì?rRÉ/.éU%yÊÜ{(¯­ùU_¦LŸ½DÑ¿*<9¨cL-ŸzñrkçÛ”ƒgÔñÀé'ö|¯D˜¨\Íà÷€zLïsñ¤Ö­Ÿ®ß!ÆÌ†=§EjÌŽ¯”Ö}Æ)ûŽ]Trsr•²rµÌ· ‰€D@" H$ÿ>̶™´… ÞBâ'ÚÉëuûÄÆ2Øtîø^,›þ øDïO{O¢o;_:»ùl<†áÄþ]8IÅâRr´u© ¿NFË,0lÔý¸wÊDøÚ«»ˆo¿>;§/¿€n!ضñK¼ñäø:Û`ËÙC@`3$_9ƒ_’.£¼(©®ä´4T6s¦]Å>˜óÌ4ôè¥1Êlª»¨d:Šâ¬‰û§öÇŽC§0¸KK\¢3ÌÕCA‡È0ÒóÎÑ›6'ý†Ótž<9)9»÷’zxÜH.è6lš<!>ö¢Žð¦‘82)¶Mì…¨fáio2–U– ß·ÁÑÞÕ%©øí•]ô‚½]¨œ î¾g:V™‹´¼BÂÑ ÷<øúõê[ }‡Î¸£[òsù̬©÷»aìÔg(Ÿ…ºkK±Æ»xê}Ž؉ÐV­aC'kÈ€Xôm•Øsø$z·‡ ‹sj5Ã÷CRw†gLyê=,ý5Õãábç€Ô¸£øáøi”TT`çæ_Ñõé(«(G |né—èÝJ´¹UǮ⚟|yV-1övÒF 5nx;aÔ¬{‘OgvËÊ‹pšŒˆyvFÌá=8G†¶R’paç/HË, m 7œ?±¹Á]Uì‰" :bLY“nv~ÆuÌžÒmž|wõSë#yˆÚÍ[ɺQ/ZÆhÓö #î(¤û7„Ë,ðÑ«ÏÂË‘vÖIewœ9¨)ŽiYÓ©A!Áì`kÄs{ñÄssQcëEªò5˜ÿÖY¦á·ÌØ1þ.Ú¹t$ñ:ž‚4mKûBÌ øyàʹH½vE¤QR„8\MÌÆØ[»àéQͰûÈ9tiácû¶aÊ /¡]sZ"¢À’·…C©É–X¢™Ÿ·¦ú.¢é‡¨júj iЕ½‡ÛWEG-Þ˜: í#CE–®½áóÃÛQHCÞšŽ!Dô@êîjmû¢÷ÏÑï¶h z4ïYva¤eB8#xt¼"„Ž7\ÉÌŸZw`þøl¸ZUU%©ÇÛƒ†“b'XÜ‘ÌlGÇIª+ŧº 3_Œè6Bã£ÏÐQØúg¤¤¥ ¤$GÊèhGj<~ý9‹Ê” ípbÉÐ_yU{Ø97ÁýC‡£eHA¹Ï€áXö[‡¡!Öï~scöî!#gñÙ–ÿbÓîãxúÕðÂ÷Ã;°%izüŠ»w#æÌ9¬ýd#~ÞºSg.Á¢—fÀ—Ïp34ÖX)Ã’¾$¢ žùc{á$b ¼ñH{Zú£@b·è:ü€rz/xüqÛ´nyŒª«jPQ,Nâ×F³Ö=µ(šhêß%´îŒgzì)ÜCÇ žX´šÞ5U‹ÂÝËMH[ 8$îôÍe©zã@mMòF" H$‰€DàŸŽ@ý:µšç‡bžjí€ÝûŠ¿Jr U¶d1>]:ï¬Þ€æÏƒ«O( „Þp²·En~!ÂÚöÁoûGÂßÓ™„š2rDê»4éäÀ¿îá;ƒ @>Œ0ÛTÄ$¹â•.íDzII ºuçÓ«ËKè|¯76mÞŠ6¤†]Ea üVÚÄ•¶ÄˆI:!¬=[’Æô-<ÐçöxþÛ#ˆ»»Ž:„ÇGƒ'Í}Ë *PYウ~dÊ…lÝ;öŒ@¸Ÿ+’3JÉZ´MØyj¯†Ác¦c³s¾Ûø5Þ:¸á°æ“¥u²E©sÓø\­µ[YÜ&O 6d<˜TêiN䩦³²´ Ú²YÐv%KÍ´u©æ&Þ­(N&XÏ优¬uïÞò öo¶ÇL+:“l©à«©¸­ÉA<:e  ¶(ËͫƂ°|íN<)tNøçµË1|ê7øêûWЦyK2‘ƼQæª*Kù{jõ³`CÆ»¨ÿ[ º©ªd„ƒB .(¤ó×|vººÚÍ‚ýàì¨béÙ ;÷ Aë0:_­”`×ÖM¸sÈðãU ®‰Ýœ”Ëxñ±1(ï¶½<ƒä~üHáó䔬{,H8jdæ¿¿ƒ^XŒüÐMUÖm¬h!Ȇlúñ·g}wªÛ+ žxæE6¤„Mc©y /ò®]F$evqÔÔŠYX¥vëgÓËÉbX¯æ!psq$Á¬žÁؾó74ð#)Ú ƒGLLJdÍÿ|g?ì;tw=üˆµ(êG^fP4Á™ÛÏ6 ¬ˆz7Û9Û wk6zÿSé³" –´¨ ò’†Jœ¹UöTþä¯D@" H$‰À¿ ztÞ}ba©¢ g/Æ"¸e+øº9Ñ$Ô†vË› |*¸š {:›jEŸƒ»úöX‹[i Åi»‚<¯e·]¼»ÍB‚µ•=x·íå…‹ñÔw¥è>ò!D†²Á,òæåìC)IèÔƒv]TÖªÊË`agÒLÚ‰¦ t&Ô áG”Ò~¨"NãÝÈV{ õºmXõÑG8kYt™¬IˆpuWPfë‰Ô–.%Cdtœ+ÐX¨ãPMÂA)¹”0bœ$ÎË'!oû‘{1¥_+2èäDy«É•—;\Šwáøù‹èÓ)L”MŠ=ƒ_OWá#{;”‘hÅâZm ¹¹¥0ˆ¦ÅÐî*»ƒ ʾ"'ËBjÒÊ]={[S"°õÀd,Nk[Ü?î. 2çæùsÉ®}í™ìj2 XDۼȠ™JiXˆ… K„7kƒ[²wcýÆí˜õàݵý/û 3ßÝ€ovÍ…**H8¦÷D'‘pé$¾Þ‹ù^d#¢:I§®!²CW´ Ñ~Èayµ¬Èð¤¾[¯Õ.1¬èÝ´&á8þê*®´ˆB‹V6â/"¢)¼)3´„«È,¶ ƒjµéMÃ#ЖÒŧ°áo—açß°’Ÿr ÛȺûÔW"- ÔfÃÂ^ha„>;ê—‡0¡… ÖHIJD5i¬„ùÃÉÝþUûp’ŒbölÊDhà܃ÃÈNÛY¨FBìuÒŠqF`@Ï¥ûðü#SÐåÁuxú¡±ôm4ðÄõ³gˆ›öíÎ|Ë H$‰€D@"ðE@Ÿ‹š4PÝ»¤I$ùÜþzÑTüP‰ÙSÇUrgÄ_<éO½ˆU?ìAh`í Þ‡ÎýFê|%ú݉ëdôi¬ ÞzíišœVcÇ©xƒpÊBÅF´îˆÖÞ9xyc ^xç3²®­VÝ{øj9Æ>83I¥×ª4 k¿ÙéÏ¿ŒÎAÖ¸þóv”ÏQ…g*ÌïÎrð n^]Â1uÖk˜0g9¢ÂU•c+¤ÇL{íi·Í†v÷ì€ë§àpR9¼<[»ö&Ö,³R*ð3¹Û“àŠÉdt®$ómüˆ^°/o;ŒâRÒ˵ŤÇ?DŸÑCàç¼ Á¥˜>d ^ûäºØ#.—¬»gä«ò6ñÇ»ÿWNo%õru®†Tï=Ð ý?ÆŠ‚P‘¥¼4Âö†/ÞÄm£¦b`wu±bA[ÀäRÌëÝfnC“,_¹åw÷Á…ý¿â…wcÈêöJLÝÑ,r|¼MÝÊI=ÿ&M£g.ÂROò3gDcn„F÷›€w‡~krÈ­[9Y Wƒ‚â¼ ¤åä‘J½-†O™È®ƒá\‘ƒ¡½;#îôAM®ÂÜçÇù“GÚ}0Z„ÒN3šÊÈwüK£:áÓ³À+ý'c+»ËÉLƒâà‡»ï@’ÂÞ›Û¯_…ÂKàl]Ž «^Åá,O ïì„ó˜ôàSXúÙöâïB¼;g ÞL‹ü_ÁÕÑ Ã'Ï@Ï;G‘*ù¯ð·ÈÆ]÷³ë¬Ý´àÃŒv±y¡€@eu{vµçÞ/OÆ Çç`ÍSã‘qùf½±ó?Ïl£çÐqhòj{L{¢SÇAQZ,¶í=ŽÉO½éãkòààˆI½…¡c¦Âï§Õ°+ŒÅ¤çÞÂ×䂎‡XU~&æÓ"MÖô%ønÉs¨ÈºŠ1{á ÕØkr!6®ÿ ä±Á±I8&ŒIÀŽŸ®¡z©Ñ ŒàNþH$‰€D@" ü°šG¡nÃiŠwvÈqD»v¶D\\<âP\e‡Ùó_ÇtnØštGýC›aÔýÉ_úI\¸| …å–è7 ?M®ƒh®\‰­›!*ª%íàiêËD×ÊÖ^þ-Ýg8zwnÔøü±£«º÷¾ƒ¾Lœ8y)éÙä'»;zvëG[ ¸¶m椾ëCgÀE Zš\¡?’Lq$<º{ú"‚¬?¼s"‚xÿ'À¤Û c‡ "÷_gpþÒUä—Õà¶>ýÑŽ&ûÕtµS‡´Šj®ú#&ÎŽxM‹¿‚ÓgÎàzR6¦Ìž$Ø[‘z­[ÛÄO]vF(©äöëщThélûÕdŒî%Ü3b0ìm,élk"›7E rÏÅ8°*¯_xg´ˆ¤²N,±ÃÚ£¹ïjƒä¦Lm“öKm¬ _Ê9•îÜ¿/ÈÒ} ©Ô 5t²jîÚnäšÉÇÝ§Å ÂÆ V•%(¬q«o,D÷vM‰ž5B"¨®Šd졳ù^A¸oâXÚímƒr€;GÞŽœäXòu•fôï×Á>®pñ Có–‘tîžø¤PCjäaaMNn±¼›bÜðAH¼rç/ÒÎ&Y±tÇp„¸Y`Õûï£ï¨)dÝv¬ya†ÚÁêʶþmÑÿŽ;áD»¥¹yä‹´*,ЪU”pÃ+ êÒm¢š •c^ÐI‰»Ž«W/‘%örÌx~>ÆÜÙ—vöi’p´´ Áí·´Ekê?>‡@ã±_׎8².%e‰üwê ;ÊÏŠúN¥*82vN$$÷@@I"Æ\"m0nÜh´o‰`Rwfí»Æ ‚¬ÿÇœ>‡t²UЮK/tëÜ–ÆId´3îîéƒÖí»¢ßÛàÁîßHƒw‰¹©Ù¢^Ö°³R0û…4q$¹Es&XHýÞÅ·Ü:®åYˆ‰9M6²0ìÑgñÀ=wÓܒ±ú´i|„7m†° U»‚Œ¡[§H´"Òš´ š¶ë„¶íÛ¡†¬ü_ɰÄK?€Pê;7ß@ÜÞ«32³óÑ´EKz‡¬p-f/î›»/¿BÕi1Aßég<ÔsÓ–iNïÍÐ~H»~§ÎQ›óÊñÝ¿ü0¸;ª WÏœ@rz&É [JR*nŸþ,¦NgÚÍ·"w»öBg/ÇÇ Ü°ùG´C²ÁàéJgMœüÞ<A~¼AB-­ÿ´ F$½þþAèÚ¹#2’è{OgÚsÑsÔ LŸ2ZØpñòCï]Nš6ñô=JNÉ@û>ãðôÓD ˆ¼`aëŽèá‚­‚ÞSKk;ÔeãÇõÿEo¬{µ‹ ZÕï·;+%GŽGPëÎd·¢ 2“SàáŒpÚ1gÍ«h×®=ù‚®íB""ѽS0ÙF؇¸´"Ìš÷:†ôîBã]¬ÕÀ.²%ÚÑ·*’lTÓbŠ_»¶rçݤYPмÂbRÒ(…•ƒ‹ó´(Ñ®S(Ý·„³ævQ›ù#H$‰€D@"ð/CÀ‚&åõnݨ“uUHdLx×·’fÒ¶tÖY<5¨’*tƺÒ$]ÏÇWu:lz§§«u±\CBVe%Ù¶´"W}[\ÏÌ´ˆå†'±êþ¿sCAórå$0ÚÚcÈY·Ž :sËçl…¯eãŒfüTÒ9s>ßl¯ÑÕ èEÌy06FJ/crå ­Ì%£zãÛõÄœ½‡q[ëðúŠPÂ*¯"õt£6kôô,üñhóP‡O³rŒ•0rwrç:L]²¾z¡^$šŒsʆg3’Fc†ö†é¨ƒ©ã[ó–#…:ü˜Å±l>ómG*ú å'"ª-2TÓB ùª7ÃF!¬u”+i‡Ç€~¦™y µc¶¡zjÛO.ÛÞ; ¿äµÄÚ·^ ÷x6„áÌ1cÈgåmxfâzý Ñçx&Í!Ìéå4)[˜§ÆÒîQŸá•GÇŠ¾ºþÒ ¦ïV “Ö¶öµã^¿xíÄX·ÀâYÓ`4šˆª—p×IV“€Ì‹I6¤Æ]'Ã|ôCÏkž.ðæo€¸yŸs:ÛhlLè4Ïï'C¯á½¯>G{2šÇ‚<»ð3ÆLÏ[{­'ј~× kê/µmÆi‚F=åki×só;³×CAFI$‰€D@" üÝP¥zZ¡ï¨±pÁ.é¹°LL³IÎyRÊB *†tšxólÓ(„ º3N£{UØfA„i©õÙ° ¤ çuh54£õ™ 4F,ˆz ü²½6U´à¸†êÐãmIødἡ¼j<Ÿ¶Ó„s¶ìLm#ŒŒƒù‚ù3ãØhÐÚ®—ÓÏä[Ñ.aô„Ñb‡^/ÏX2_dILm ¬Fmùˆ§©}HÚúšp®æ×)Wæ˜×–Sû‹ñÑE0gÿH|ôúst¦[U÷®SÖ@Öä®N”J¬‰ÀgÞ… Fj›êâÄõp—a{ªpÞp~j”¨@´• êØÔ2¥¥×ŽIZœReEÍ:<›G16ú%ðµqƸi³’u; œÆ¶80†ºpÎù¹=æ­l K½j çA”Jü¶éG7’ª>÷·K×(P3©ýÌåõñ`OFÅ¢”ˆcux5xG²ì¯?óB”¨—¢Ñxc²ò9r]88ëñ•Û§Ðâu‹ëühÃx ÀUz†þUÛÄéªp®¦×!¦Ñä‹•£¿ýZ mŠÐÞKóúŠþLžé¡–ºçw]ç„Úv³Æ4JÜœr½ÕÕÍ$c$‰€D@" HþÑ4¸ƒnÜj}b­OBë8­¾t=Θßs<‡Æhñ„›§¼zž†h Bæ?ÌQÙºÉ~õzˆ+âËPŸþÌekëÖx2‰Ó‰SaU Rc¾9‹þ\_ÙzñP™ÔEºQÝ"’~t¾ØJ|^~>Ús%ƒwvµñz>¾r^=¿oΓy¼¨—zA—5Ôçºm1¦kB“‹-zy½ýª—ÑÓõg½D¼h¿.[7¿ˆTÛªáe ¥×V÷Êtø¯6¯Öæéµù4R&eë’7¡Ÿ‰2?àãëM*Óê¢1¦aLŸãEʪæ•c´C9óñk É3I%Ý– îyÒ‘ +ÓÔHÖwaºÚFõSæÂ¼\²àn)ŽWP Dq–Ê7óªÖ£§«ñFôêiÓ0Ômh« ­åo(]¥¯sÁ„¨¼¶ØÇ±ÆåÔ\*nê½á×”_S˜†^°Ôn¤!^ÔŸ ”Õ;cúú½yù,H$‰€D@"ðïBà¦tóI&O(ÿŠ“JæóóÊ;qÚÎ¥‘ष“éê÷¿g˜üQžôvܨNs¾X}—¥9.×pY'jRm0ÏoÊ7Ñ"!ÇHåêçÑ ðèéÄØI®­ÌìÆ¤.wÊcˆçº‰®VΜW3râQÕôPSÌóèÖŸ^?=Ó±ucšUo¦'°à¶gü)êÿ80jF•ð;bÆÇïaàÃóïáèæò ü ‡ÿ{¼oŽ™K" H$‰€D@"`ŽÀ tUÐbAäïÌÄ–yrÞX;ÌÓMŸ£lRéÃMH2õS6‹eê‚…P1¦<æ>”MÛaÊ^}Oz~ýj’LjNçæÕÖÇÚ8á4õámÖ2ÊÕÀcú Ð`Úz0ªVÒhê bz›ôkmí¦¡xó|ÆÏzýjœV_Û8÷ce°ß`ZêÿæI]|bÚ|ìâϾѺÚÿÿ¶ ™ºƒïO”Å%‰€D@" H$ÿhT@×…Ÿjr·–@VÜó K`ëà_?x{º©“|M2eKŽXу¹c,¼éù8N¿å4ô¼ÆijR]!¬¤(Ÿ¬ƒ áŽóÛÒZOO/aá[˜˜¶N“¥La(‹„–òo˜˜$üºû’•í«çŽ!«Ò]:´€%¿bã|fW/k̯§·WH¯Ü2®——“ƒâ22¦ÞÙµ²±‡¯¡U]~éå™g!ôT—áä‰ã°r EÛAÄz ñY¿pÅeôòéIqHLÍ€³‡š†‡ƒ w LõtÆ¢€Ü¿%%§¢¤¬’,¹û#Œ|‰ó‰yñ^A]‹E1yÄ ‡¯§ê—Û¸¾â‚\WZÀ×Ë]æ4>Y¬! í qqÈ¢þðð $ËïþlÜÜ(°p®öaEI®ÅÆ¢¤Â!áMɺ½j©¿¼¤YÙ¹¨á³ÍZI®ÃÞÑ™úÕ΄ÎaÀ¢0'±q‰t¸ÛM#šÂÅÁ–êcß×ÜÊj$^EZV><}ɪxh h»Þ6ÑÊeŒ[qa’SPPR&¼„……?rí,7ŸªŠÄ^Å• E€¯ê\§©±//‰€D@" H$‰€D ^êšëÖ²éBEvÊ5|úÁ»XöÅtèÔ •EY8X%äÂkâð>Bh2bÔâuwEÍóèôŦ Yô8•ýšÅÓÐ’DVºh[x©Áé¿àá§^F›.ä繦I$¬v8ß7AÞ.:I­œ*Ì醲ØGôŠ…sÐiülŒÐÇw~ï’Úa= èyéqøü«q×½ ŒÜ9qPeQ]ldÑØ),ä².+°çõ+ÞÆ[_nB·ní…+·ìÌ´ê6/’lg;“ÔÚvU—à»O_…g™ª€NíS…[ƒP«ò  ¤dlï¦oñòKKàÄ«gq÷³ñøýàádS‹-«ðó®w2ùû~aæã8’JnƼü°) Ÿ¬_Ž w‚#¹~*ÈJÄÊ·^ŪMçîC>Ì]Zâ­…/¢SdµQ!VU(ÌMÅêË`ßìv<:q#"0a>Óã.âÃeo`ÃÞ‹¨È¼Œ¡/Å‚§'‘«/C?ë¼f$`ÅÒ×°jÇi„{X£Ú9‹^Ÿ‡Î-‘w/Ìyå°%×l..ˆ?sÑ£¦á¹G›;3,Ô°ÀÏ!áÂ1¼:çYœ+&·gY±h?ø!Ì~ú!1PS†-ß­Áó³—"0²Î_MÇü×cÂð¾âL¸¾@Átô1™›|Aøwßu© -›Øã‡Ÿ¶`éêïp»#÷XeøbÅR,Yµ•Üqy!§Æ‹-@ïÎ-ŘÐÖ-˜¤ ‰€D@" H$‰€D ^êÐ »Œeøyíûx~ܶþžd* voG~A>*‰¤-K”J5²³²PJnªÜi·ÚÙÁNÂ솨Šdg6ZV^Z‚Jq6š-‰Û ËΪТ ¬´”D;+8P9Å…ydð¬vN.ðò zªƒ}—•WÂÁÑ ¼*.­ {ÇZK¢ ‰B¹$ìÅ»uÆÏÏA Ò×NïG·þ#Дü”Oq*É]WE5ù\':L—Ý@•“»5;''Ø9{•íp  kâÈÂÚžü>«–Þ³Èïò¼gŸCÇÛ‡!ÐÕŽ|7׈vU=n£½½½éî0Kë,›Ø3û1` ”“‡Ã²Šë¯†á¤Ò®(-Âÿcï;À«*¶¶ßôÞÒiIh¡‚ ôÞ{Aº zU° (W¸DÄJQ" ½wBM !„JHï='}ÿkÍ>;99õ{îWüþoæ!çì½gfÍšwfóœwÖš5Y9yt~´ Ü\]„Uš‡¥­Z:G¬ïùù¹¤Ÿ3n-°Õ4â—pýºóÞØ‰s1ûÒÔë?[ˆ¹­ÂÉõŸÀ‹ŽSSô± „ÂòC" H$‰€D@" Ôƒ@½]˜A™•”#6r?&|í›7Õ1nÚ\ðÄô¤¢$;6­Ã¯DvìlˆxÙùãÕ/#„ܲï^=Ÿ~;„Öíš#òÔ)˜6ð"2^þFcD¿.‚h–d'ã_Kÿ‰.ã_ÀÀ.-qŸ}ñ-ªml‘›S„ ³ž'K}o”dbÍ—k`Û°1JSïâàµ,,_þÚ4tc3§žx’%•ˆç€¶Á jâN:`æ 6‚@sÎÚ‚+‰V˜ÿìDZ\ Ko| ¾ùy7ž|ñu4k`‚«OÁ'ÔM}]I?S¸PÄk]AïX<Š[ýÍ¿ÞÇÅÀ ¢wH Þ´ [®+ÞŸO–j"‡ÂrÎÄSMLFÍ­Œ&þ>Úãšï‡7#±æë¯W-Lt6s¦M‚wæääˆ=;6">bNþþaðÁ¢WѺ±·è³ éªY·££ÐeÊë5¤ìh#¸sl]ý66î;‰ ƒÃ`K®ôl Ö¼|C0–þ´Ô³/‘yº),ÔÑg1Î:€å‘õ¾‰—(2iæ|,ý9R^ gÂ<¨]w¼·¤)áä,+¸ y pŠŠ8‚퉾ØýÏyhÔÀ‰ˆ®-j¨˜hi&¬ÄåQY”‹³‡áÓ% ©_ž¢þø§à»Ëp?m6‚I~P3Õµž3s¯ãú­"†ô££MУßP<;â{D^½©ôêü¼r1Ú‡àg§‚lðpòÂøñÍÕé³k>×ÈÎ¥É@=¼tî^ÿô„µn"ÊŒ˜0 Ÿ,›…û ið ö§gb´DžüH$‰€D@" H$õ!P?A'R)’•Âú?13§ÀÙ¼[·€·7|¼¼àìhGEªp`ÛX±ó:V¯ø Mݬ°yõûXôÙØúõ;”]ŠeË–â©bÔÐqðõrÃù›±fÃNr÷…'1¬Q§±ø³(Ä¿éOîÌ×0{À0¼´õ(FôÁÍ‹ѯÿl4;‡öžæˆÙþ~ŠÃO›^ÅüŽ.µXUT¯/%+k[lùæ+tkï ' œ?´ ?ÜÀ«ÁÍDÑŒÔx\»á,è?(/.Àý{0ú™Ä¡ªqöà'õî)ʲ+wí7¶vpFH·þhèuÈxµôõ€‡J&++ª¡+%Ë0ó/NF<Œ÷Û98bã?À¦ =Š_j‚¡£ÆÃß®½1 †,ÄW“#7á:ž߀–˜Ø»̪ °çz æ?÷žž9 +Þœ†÷¿ôÄË^#¯î]ç• .kê÷Ù¨[´_›öTû8 E¬È¼D—ƒRöPð*ò#&Ë‘›©ó…ÓÇð}h:‘ÿâŠ7Pà\T$;W´u-D~1R7±Û™ö€ûxº"½œÎ ã$„R¼‚„;H)ÍÂï[~ă1(€#&OŸŽáa¥_(Ðà*£}Û¹%UèDÞZrrrE#ëRò(x€¼ÌÉ:Ž*6¯ý–a“Þ©•V\X§ó²tb>?,¦}ëÕ¾-iϼºŸq܄ܜ8‘LÞ7ß¶e ¬õë(¦V6ð BNný¨¨Ð «¼ú€Ñb [ýiYAxJ\½tÛâ,±¨-k¡ÏÊÉE£„>Y;¹ e+äŠ'ºâo™$‰€D@" H$‰@}ÔKÐU2Â{›-1pôÓØnî„í;vâ×umLÇ_‘õÚ×'l@ûŽ3€ÒB¤¦Áͧ ö/| éK^" ©zö%,B#g²dRjè `u‹Îˆ{íx¶ñÃñÝ›ñæ—¯"ÀÃGÅEÏðr²Frb2Lh•÷{ó.Úx5‡ggl?ùÆôèP·/Äzjˆ°(' '; •%æð脞±»ðû¾#œ;Ž®ä&nÐm"¨¾þþ"ØKqnÐÖ–j>G».%÷w&À-Z£S Ú‡ÿZzÕZtûNœƒnc8ÚªÖãú¢Z›ñIiÈÈÈ .GAìÊ,QE.Ù ·®cíïWñë¼HOM&"jŠFdl=~å&Æt $‚h‚ÏßxýÃ;‰þ¾ôÆÇè÷âwHΘ‹>zˆ4òþû–ºbŠóÌ~é-¼8y* Ò±i-í±îö*õ­.\|ÇG±™^ÌQo^:„~“^Ä7;O ±«%ŠÓuÐe’XµO\^1á`z%¨bo-QðÀ²ò ±§]{¤Ð}I~J+íÜ. Ç ÁÅÃÛ0¢w¦~õë îÉÖF¬ªºä©¡wPÅPUDÚÚF ’Þ2ç?ü'®ÞƒñuÀÇ:6 ŶÝki!D TW¥”#—VFÌô\/&´˜RMûJÉKÀÄÄQ8^po[§]õ´ÜÄߤ™™-&=·Õ¦°Òc§ÐVÊz&Þ¼€>&cé÷;Ю‘ ” ”ä•‘ÌZ J ‘|™$‰€D@" H$‰À_@À€©Ö-­Q [gOŒyê 5¹D¼r³’±òøxõf,{q8\¼š %3—ÎCfNíÙµÁwë6ÃÙÁIº2¸y¸“ë»upï¦-1ýÙ8) v¹8y! f=!ò‹Š ØØ ·¯]F$íq71·Ä»Ÿ®DÇà†(/+ƒbf'G}€6"gL˜4N$ˆì²’" {j!^yõ58±;¥‘}:£U·qÐ7´ÿÝÔ”êª`fFÐþv oF%‰„VUWpQQ_ ÞkÎEJulAv$2]I{žÍaïèÍN«¹o‹ºúÖ//;o¾þLêo˜…ˆ›Eh‚ä„›HŽ»HÑ͆~Š®maRUŽ ÅŒ¢ªkáâæ†V ,PNQ×µ$ösÓ{ÃVX¶>»÷ìG\Ü-4"+¿§«7¬íœ`­gèÚ˜ Wwýþí˜óûÑ6l–ý°S‡öbÍ(ô»“¿§XD¨i‡‰¹‰ í#פôŒgÇ×”£üBš'Ì›ázˆÇ-üqãÜADÄÜA_&è,BOôÍLiŸ¿µ“ˆ¯É`JkFÁßÌi?9'sbÚÕeùØòÝg˜ûþ7èܶ‰xÎûÒYGê÷ ?-YšÛÂÃÜì¾ OøÍœ^øÏÆÙŽ?C}Wè(öR§ˆ÷æúGÔÚ:!’>ð~±âÞõ³Õ¦;æ}ò#ž›Ù:ËÖó‡4ÌŠÈGü¦ AÂÌ-ÐoÌT¬ØðÖÄÑñWdoÈAÙ8™ÂÖÅ“f3ØÙQ0;}ÕÔ”d\ÌQÈR\KFÕ€kD"‰õú¶Á³/·¥uÙqâÇwÈâ +n›I(cFߪ¥· Q§àíE˱ù`&è¢o…Üåíáêdƒø‡ ôLµÞç$'á|©\Ém^K&t|™=•­¤{5‰Žóòõʼn˜XUŽûÄM©óU4ÌxAE+¨¿°±±#Wt3ܼ—ôV3³2“q¦Ò..µr㮜¢UqáæZXSÝj½õœÅpà¿Âb8zÍÖÚö4†™Ç‘˜’ƒŽú=ô âáìáBãd Ggl9w +É¢nG󳢸±—Ocpß—ThN‘ÝœdÙë­û nEžÂ»o¾‹¶œqýkúbBóÒÍÅ7îÝVxž1…éØs^‡Åôœ“6æâF~H$‰€D@" H$zx Aç³¢‰XÓ^äU‹æ¢,°/Fõ VñÌäx¼ÿäs÷Å4E÷ÞCÑoâø»ž@ÇþH¹ƒ+ñE˜MûÖMè请ñ‰FeØÂH¤'¸Cx|9­vœŒ‚»­Ê^Cº‚é¬Îøø‰@<5²±ß,?y݇L@ w3ÜþmJ_[ªvCOðêö‰¬–%ýç¯aôÀx8Ú €ÎÂ^¿b"Íû-"!½6|>Ãúw¢è俨´òMìÚ™ ¸M,ªšŽû~%o ±Åù©¸“¡î+¶#¢–ávíÞâ¸z7D€Ÿ'mü k/Ucão•öÔÑÅB˜§ÆmGeç©l¤¥%ˆj²L«Vá€61'4o°o>;™Ü¶«qò¼Cú¢Çƨ*¼ƒ¯Ù…NÍÉ:[HQà'áå…›àï¡nÐȹ ÜäÖsº*rîÈÇÚ^Dj³9Þ+Tô…ù¹‰°Æ«ÀEØ‹½Gƒfb¾Ñvò8yHÂ?¨BZ6BߣÐ}äx<|ÍÝMðÑ+cñÌôµGÀEÈKM¼GgœßCÄé½È¤€z][8ÁÇ×þg Sø@Lz±'V¶“;ãÊÑ-ø|ûCœY¬îg]x+“VSgô>½ÇŽBhóËrQ°ü±xvê÷ðwSвðþ¬xåÓŸÑ¡¹hú¡v ÷cÎcÂä¥X³ãtiíGcã±OÏÅè×?Æ•ÞCuú L~ùc|¿ë”lØ´E(ZžŸ‰5ë†búÐÎ8¶e 6Ým‡·Û‰¾ÑÄÇÆ¯á®}g|ðÊØRS·¯œD‹ÐÞ´'~žt2GÄ™S"ò¾gÃæèܾ9zõŽ{ŒFxÇ–èèŠUËÞÁàgŸBÓ†j=Õm@/?%‰€D@" H$‰@}˜-¦ôh£èã––°srFô…3ˆ¸t×c®âÂ¥ žÿ.¦²Vú5n†.í±mófDE_ÇÙsðjÖaDTJ sáéæŒNCélm•„³\ {’ÛNM:c܈A´ÛRp-goôÑWŽïÆ‘Su)©:ôérW/ `kÍCBáëÎVIÁ8õ”“ä²M½¤¨˜Ü£m‘ž–†[q±¸~óÚ˜sŸ„7YdÙšÞÄÓ_}µiyåð§c¼zïƒöàBL,·Ðš·G ¿;¹¦çÂÕámacԧ#»wáÜ•8Šb‚Æ^îxx;9•6èݽ#¬-jûÈäShrŸÏ+wEÃf­ÜTï)ÀºÒŸ•3:t鋌›ç±cïQÄ\DìƒL„÷î?Š~ž_PEžI¸…=´0ÐyòkxvÚXrÝg¼4K¸ÚL*qîØ^|úå·ˆ‰½‰€®°hþLøÒQs\–ÍÀµ8‰wãaCÖï!mã^ì5\ŽÁµèXغ7F»àã×­{aÛ¶ßhLÏÁ§ëÓ˜Ogª{:ñâ@nQp¿M;ÀµaGxZ— 2ö|¢¡·\( Ûàpü÷8}67 ðÏŸ¢g§–´@¡&î?™ÁÞþMк‰'¶R[ç""àF‹³&R?ÕS ñv4î”ûaÎŒ'Ñ€Ú¯¦zb¯¿˜&ÈÏJE|r -õ‚ŸQOMèX½ùqرû€˜»³_y‡÷%¯3Ø:»#¬oœÜ³Gétû9&ølù[x¢Uc#¥wâbÈ3À]:´†©šúð>,è¼Á}[ãá­XDÇÄàÒ•(X9û¡Mp ¼ý¢C³ÆØµmN^¦>ðÖK³Ñȃ÷º«c%ð×÷_~I$‰€D@" H$chû-³·G“F*8§’Î3/(,çÛÒÙäÎtô'Ã2…y9(¤ˆç6"ßA޾Íç…[Ñ׎÷ÒêTÑàJr7ç<&.Ús–[^ZLµóÉØngr¶47ÁÊ)™™…EÍù×\Ö8q›ìR¯%"‚|F¹JŽm&—ûRdffÃÊÖ.äš^A窛Ò~w^C(£½î¦fâœv>Ǩ ­mAD’’…=?\ÏSÚ{î ôâöx«³Ee´vµo‚·œä°çŸÑ­%ÃþVSûÙÙ9bº“³ l¬8Õ« ÙäuPDûñË«Mááá }tAp5aúov·Ï#+¸¥p¹¦óãù9Éa÷wµÿµªh့¨û¦ÕF‡÷ä×ö· Y™™(¥­î (xž4Žt#œÊ+èìq±—½h,éÌpKvý×7VLÇÓeç’K¹«>êÝqVÕÓ/4P?³(–í"PÛÒo-à2¼ÿŸÇÁš¶Iˆ:ôaØƨ’¶>p¤wSZˆPG™–ÊK‘‘™Eƒc ·ââ^DÑÜsó‹à@QãÕS ´|>[ãÐ"·ÅÛ6*h<ØUŸßÑ]p šêüV(FC&ŠJ+áêN±¬Y_Þ§ÿ(þÜ™$‰€D@" H$‰€!%è\ÈÌVâëjb¥I©,×eR£ØGóT’ÆÏ™ziåjÛÔ(—úĸ¾V®n)í©¾+Mp}úr)Ãú†ú ’E™ÆõŒõ0¬/Z­+„­ÑA´'úû¨\c]„,ý‡q›êãúI [š9"¿1žFjŠ×ZÑ«jHƒÕù ÔCøk„pƒq£LTëÁëÕ×'~FÈhÿ Äë ½þ‰q]Që1:heµï¡‘¥å?®¼–Ï߯[DžÐ£¾ùlXS^K$‰€D@" H$?$è\„É ÿiI "_šE\-£Fòf«’:+š-™Dq!+k]ªGr9*›H­=Ñ"µË2É$‚DzÔ{cišv¬oݨâœÃõY-1q5Nª\uá*ˆþiå´£Ó eólŒ—a]¹Lm †ÒIoMœdèP[B͸2Öú¶éKÔSñdÉ¢„h§¶nÝ+MAà¤é]·”z§qã ÖÓ륗Åå¸ÏZE[”g˜4Lø™:ŽŒ³ZãÏÆMÃZ“g¨»ª«jµf9*ZIµ-®/Æ€©.®hÐÿ?ÓOÓGÓÃpìk[æ¹¥áEzð\`Lô:Ô·8bX÷?ûºv®ügK–ò$‰€D@" H$ÿþA×1$FLLþN‚hQÿoô³ÖÊ«ñKµÿµÏÇZÇÉhÍL Êe×pÓÊißLØ9§?Óžkåµvøy}÷qåµz·o­jŸkzDÍ·_ÿnýGúox é\gýGÛ­™sŸ«ÿQ‘²¼D@" H$‰€Dà ?%èSŒ\“*òÆùT\2Ã2×kcÝÿ®zþ{z.·0Y®ãþæÕצ(ÏF‹6Ærjê’@ѺQùš|ƒ‹š¶k.´ÌºúkOÿN߯ý7¾ÿ¯Òõ¨þ«’r%‰€D@" H$ÿTþ” WV”S00 ˜Å¿ú)™[ZÁJ vFÏø©–' °…”\¹ÙVX“…¬übøÑ9ê–¡KsVË1Ÿc«—jUäj;ÜGî—Éæ³åÕ{ú¦À‚I‰É°tp§pà6Z뺊9ëªa émø-Æ€çµÇ5xÖ>êÿ¨,u {U_¾àíìÏ8k‰Û®¢€EâŒv;ñÞ<:~*F5óJ¿eBWC™ÆsH¸þScŒuNfòu üý|E°C 3Mþþ£÷Dß™šâ†s®æ¡þâÑ÷Jƒuûfˆ¥þÝep'­¯Ú·Ø>@YÚ¶–£%Ã> ù”ÁˆiejÆ—êTÑËÐäj2ä·D@" H$‰€Dà µaÅ 4?~ù‡.=»|â¶þ~¼ª•°BX¯þЧì‰ÔqãļçšIúȳøðûXýÝJxÙq„m•˜4%~hsýš<}»\Fü §{f=ü“½¦Œ^€öƒŸ³ZâçudR†±Žµe‰e2Éãv Òý˜‹xë“MX³a-ü‰prpJšl–g,“óè¡x®åißµuEwé‹®—OB(¿V­Ÿ\¦¾vµºü­ªP«[­¾5™5m—æ¤â‹¥Ëðĸù„#[?ÃÅÊžX±` n_Þ÷¶<ÄúÏ߆›ƒ™K€Dpû 5¿ï—°ãL ¦?ó"útRÏ7ÏJ¸‰_vÁ ‰ÓÑÂÇ…Ê•!2â֯߀ÛÉy Õ :&¯+¦Íx!A¾¸yé0¾úñ78¹{Qd~"šDh‰ä—Â̽)ž™7 ìEuŽ–^UV„>ZˆÆ£æÑùå=)Ú¾U^룆¿áXŠg„§Ñð2T58fÊ2ƺV–&O]H`Yj½GKÒc±|åzÌ|ùM´mä)H²¦7×ÓRb< x? }úõ„•~虋¹];jæŸhðÒâêGŸÝ‰oOé°zé8ZÓ" am¦uš®ùý©KºyÑÆè=ÑÊSYÎ{4ú¿R‹ËÔשյVY–¡%ãw—Ÿg'ßAĵq¬ £¨%M¦v/äP;b<ø!¿fú÷#?íNGÝCX·psT£ükõä·D@" H$‰€Dàµ¿Š£ybÜe|öÛ tï;£GBs_+ŒÒ ‡/Åékðýj°5T;Þ¬†\’…¶¬´œòk…3ã#ºØ"͉tóp&Z*+å|5I(•t)â4úÓéJPJǰqª‘Iç·+,•Tˆõ*+#]µ tvµBÇlÑoÌJ)“&›¯:Þ‹ûÂG|qR „J|ÄúÐ<´|…dr9–YÆVh¶Ó5ë¢ê£’¿j²—”UP/WOPXŽ©ï+ßÌ¢5Yœ¥¶ÅW”D»”¯ÇÅÌÊ]úô‡Ÿ§eÒQe|ô¾/Õ4¦º2OQ×àƒu»uéÖÿ°­þ)y¥"W—Ÿƒ_×ýˆÜµÞÅ£;ڃιîƒO?ÿË—¾ ‹ä#è<1÷SáÓ¤%FŒƒáCÃÓ$~¸-CºcÔ¨ÑÐý :ã¤×›qªª(£#íÔu¥òR4¨‰Š?õ„¼>ŠKtTZîDB¤Š‘¸d@PJsŽ“Eøh¸ñƒ%:]MžÀ·f^©dT¢êuE9{œÔâfcç†~}ûÁÅ–X3%•œ«óXÚŸß½vó—}‹ü2u.ñqn©-+-ŽÞ#N¬—XÓc¢z Ðqy••t\ Õ­™À¢¸è8Ír}ð{R.ÆX}Æ8¨A Õò|Ì ¿_*–ÆÂÔykXžÛcš®å¥¥Ô†:†¤§Š¥zÜ`é©¥Œ„h Ÿ³™¹%âQ¿ô”÷^ . Ÿã|™“rÃg.GJV!ß>â™"ʉ€D@" H$‰Àÿêµ ³î*Ýàs±MðÔœqÚ·‡xÖ±M~û.2 ŠEܼ„o¿ßŒjsrA®DóŽÝ0|𸓭\|N¶¹ T8°s3v¼ 77{T™ZcÀðÑèÞ©5Y+qbß>d”õ4? /]ƒ_pgL7M|\E»i ·°kç.ÜOË¥³Ðmнÿp Aqv2vlû‘·’`bf‰ðþÃ0¤wX¢ÇìG±© ìL q:↌‚N¤?³æXb!¡ª —ΞÀ¾#§ +¯„£gžzj2¬lìa^”޽¿mBÆíX$£ÇODï®!0'p.Ÿ9ˆÍ[÷ÁÊŽ,¼Dº;÷ˆþ½ºÁÎÒ©÷¢qôì5ØÚY#öÊy¤™cìä)ïÜ”œÔûØõÛ6DßË€»›+lÈ;¡s·¾èÖ¡9éV›WÎbÛ®}È),%}aü„ nêƒÊÒœ<¼GÏD‘{yœ}›c¸1ôs'’ÄäFµà&ÜŠÂÑó·0jÂx¸Ùš#êìÜÌ¬ÂØQaY¥ÃþíÛ`Ô=Û7¢´`¢'lft¼¥¢ÚdMLÍ`o­'Èb¤ >ˆY9yáýe"þüIì9~sG÷ç{ù5‚­ Pšƒ¯^ŸŒW>Ý€÷^ž m¢}øå&g´ÃªMñÕ§1Ô‡Çp)OAh¤9 OGU~.H6_Pb"ìÔÀ —NAIÂ5D^¼‚æaý1qÌpx¹Øtˆ<{;öEqY%<›cÂø1hâíʵéO] bÂX¡+Äá}ûQHgÚç$ÝCÔ{èÔ{0Æ Hs—ær…'`÷á³(£óÞý[„¬}iî> E«³Ñ‰hä…‹§À;¸tm…ˆãp˜ÆÆ‚Îpoд¦=9V¶¨"ÒZÉÊSJ¹‹]»öà^J¶X”ê1d:¸àÄÑC(.ÌÀªÏ–Ñ™ìî3y2|íìܼÑwÅ‚Uh¯A1°h\x.?°ûN^gWDØÏ®ó¨uho°è5Í×¼ôDìÞ¹Wo?¤9ë‚~CF W—v4þe8sô0’ri»Aa&._Ž‚WP(¦L'pcòÍxir]Aî? ooè2“pùV:¦Íž‹¦næ8¸k;õÿ -õ-;„c̈Áâÿ¬ä{Øûû.ÄÞO¦ <Ñ{zwiŽ£‡Ð°daÝšOáàæƒQ#‡¢2÷.¾§ÿO¬ÉƒÚí1ƒúõ€… b.žF\R6ü½œpù¸5 BÎÝ(øÆcÓºÕØkï@ÿ§ŒE‡~¤/x©‹]t#“D@" H$‰€DàjA7'‚qæøqü~èÎGœÁÚU_#Ác,º·g2 ”e¯a³64l8¹½wÁ—“Fâ×ý§Eï.)­P-hDžªˆ¦uéÙÃÉঠW·p#!‹¸„.ïþ“&ŒCV¥-YÃñëK³ñÕæ½‚Vå§ÜÂë3ºà@\>z÷é‡F.ÀɈdf¤ãço–ãèm¦Ïœ‹‘}:âŸÏÏÃñ+ñ$ÓѧÖcÄà>øýø%˜[X WiVL½‹lÄáíx¢ç Øû£ïîH¹q×o%”ÈêU"\ûOÇ EhWøš§y| 7ÉU›ÉO)YJ[uì‚¡#G¢K»&=°µ{Sô»0ó>¦MŸ†Í‡"ѺsOøX¤ _×W‘NV¾Š||ñÎ,Ìß^} eC,˜ÿ<ÎÆ$‰º÷®Æk¯-„Oëp<;oÜË`á²µÈÕ•áÚÙ}è7b9:÷‚ÑD$u‰¸Ÿ.êñ‚ ÷‹“IyfϘ‚»)¹tW]«§`Êè×UX…j]>˜8 ™…•ÄåtønÉX\¹™Båh*É×¼HYÔU‹&Ë4N…ÙYí‰Y3§bÞK+‘AFfk+dç‹x9¤ÛÆ`Ì ž‚œ³U›½,½0~Æ{8xâ"Ò‰jIGì’’R”ê­ÕUäYÀÝÑŠD9SÒyÅÒPeåŠ>}ºâåÙ“±zËa‘qó^]Šö½†cÞìé(‹?‰O×þ‚¼RÕ"^c¥ÒÕ¥Øñþ$Lž° 6´(Ó§k[Ì{r46î;+d]<²¯,]‡îƒÆböÓSñ+¾X·SÌÇâìûxjÊ8,ýz²J-a]]ˆß6®Æ×?ŸÀÀci¨’nÆ"#»eEÙ5~Òi±yXñÎóˆN7Åø‰Ö¶ ¢"oР<<=é=1‡{o4nÜ&eùرa5Ö¹ñSgâÉ1ýñã[ó°çT”ÐïÄïë0`ôT4 CÇv­aK+?¼P‹X­GFeIVÿóU,ßÁ´(ÖÜÓ}ÃÚã$¹—«ïÉL™8™eÖô~õÀžóðåú½4s(›È¹˜Wú¹UYZŒOF¿ž½s¶Ž¨*/ÆÑëññº#6ižž< §7¾ƒ-‡Î¡œÊoYý¶FfaäØIÔnÜŠ½JcR W÷´h/4òó&ÏP*Ѳc†Ñ{ÕµCÆ‘·Î±K7DŸSo_ÅdZpYµaJªMé6‡-ìÈÄÝà ý}E,Q¸îÌQÉO‰€D@" H$‰ÀßͰùX5MÍ­pÿÔ6ìlé g«j<¼‡K7²{Í}ÂЪ}Wx’4-# …pA§Á!¸›H?ü)™’Ö’ÌÍ•ìÖJD¿ÿ ‘HOKEN^<|a9‰Œ<"¼ÜaëàŠ÷Wo«ÏL?­Ê2ðöáÛ(&–sñ6æ EÒÇïÂ×٠ĤÉí¸ ÷£NaÞ¢•Øvø<ý8÷A¹“Â['aëÑ èÛÞN.^˜÷ÞZ¼ÿÆLr—¦}Ôz×dæÌÏË S±qÍ|øí.,˜=BèܽG(Ôç»! ûP,Y¼-½Ð·csœ?Üw¦¡µŸ3 (3é™Ù(wõD?wàaj*ÉhEœÇ¡ý§bÉ¢7Т¡3ú<„ßÖ@VN6,rðÁ÷7péÎ&„zRùnøìÆYX²Õ™ÒÉ=›‘êõºvj/w{t ïûŒÂõçŸD´½·›@IDATîZð DÛ¶mÐÄËÃû‘k¾žD3yU¾áÐ /뤤$4s(BRf&E÷ D|üÀ>ÞD"Û¶hBì«ÍûÁÑæ?¶w—I[¥.åŠy Æxe:ö»€ÁÍmàáb#p.+) ÒÕ®v4^”LÈ“‚ª‰ääæBó<”“û8M ñLA¾Òâ{­¼(ÀYôW”_ˆ•›VcÞ¤!âñqë2<÷ÝQÌÑÇ~ÿzGÇ6-àjo‰ž½{¡×˜ÙÂ’ýD ‘AÁøõJЗK‹XÿÉ{xj`W!˦"?œ¾€qáÍÈü3ýhÜŒb-½úôÁÐé_áù§ÇÑB„ <;Ã’÷£}3ÚsžûeNýÒ! œlÑ¬ÝæÈLHø°pØZY ´ ÿúå$¾Øð&•ëˆ'B;bymXZÒÂU·žO4ÃS³fÀ‰tK»sïÌy ¶E`c_š¬ÎdInŽGΣWOlùîs¬ÚrÏŽï#t·,KÆš“äÕ¢Fs\F_ 7¢°ð‹“¸x+šyQg:£ é:6í=…ðàñ°wöÆ?þõ ^}n2xÅÎq[>ÞÞpºÉp³©û_„)E¤slÜk½†ã‘§ ƒL¿ƒ—ÎÃ7·£e@cX›”¡wï>øfûa  ÷0îÒVX…ö!`×9h €acÞ=ebü”™ðvV½&ª½<à럎ôŒlT¸4@7í½ ¦:–è7n–.]‚FnŽÔ2y$Ä9`Ûñû5n šzÙŠgÚB•¸Ñ@Poä§D@" H$‰€Dào@Ý_ßõ¨ZADkÐ3ïâý ½9Y¡+1gÏz ô6âüdÄ᯼‡ NòÇ­;±è3\ý¡Ì„¨ŠÌ¦¼»Z—GÖî•øvû "Ýa£ð¾ÓFDàUxß¹‡»êÎÎj8{xÀÑ´•%EÈ/ÌÁËÑx&sU¨¨2…-‘¤2rn逸«gwîY½ÍQæ5]›ù“‹2íC&7çàæÍ9g™Lœ91wáTVœ‡ë ²€‹ûr²Š[Ù«4¥êêJ8{zÁÉA%ÎVVhÜ¢*Åa‡Éb¸üËõhÞ¡3|Üh,ˆ„©D·ª²ö.îpÐö›Û"$¬5ÊÊuÈ+ÎÄșϙ æÁíPªh¯¾àUÕå(,ª†[Uöý¾•"©“;¿i5Y¨ß ws;4ë;ÏxM½iïöØ~=a²ðp%K¢JJTòiN.̺…"æÆM8Y¢ÙÀ•øy¢"/C§%µèOWêWUí¡/¯³ÿ_(õgÔ CÉ{­í<ðÂ_ãíõá÷ôxûz ]̬lDÖaaÕeã…¾]ÚRÌŠ ñWRL 4¦dm?¹;–­X‹¦í:ÿfvÖê{Å'´hÕ¾zrÎmWлV.pã8´€Äü‰}±ýà9qznf*6ó^ÿü7<;i(ì‰SjÛ¸½«)EhÍg]ªË }ãrJÊ•tßú Z‘Ût“† Ñî‰P¼õùÄ?L…µ­-вSqþB„(˪‹èõú!á±15©@Ü­Û´@SŒû±±ü™çѦ]š6Aë¶Íðùºß@®ìÒžŸ‘Dý»@!Õˆ÷“=­€ ª*L¡€x'îE|jZµi‡nÝ»"„r ÉÀuN¿ +ZØ)ÍOÁ¾=ûQF÷Ð΢rÏÐ¥¹Kù¿þx×c㑟Ÿ 'w Ÿà…» —¼ø½yH.ê£ã`ãÞa éHµ_¶!9+Iñ1ØJÇ–+|ì¡~Ä´©GíûÁáÔvü²ýíw¯ÂC r÷îÜ÷Ñ5´õÍù¹™ªg•åÄÞ#Ùb^=:úL~‹²ÒÄBšZšŒß aøÀPløm?y’Á–¶k¤>¸…(ú?#51 ÇFv©Ú†„¢[·nT<+hžYÒ"ÏÙ]ß öVŠ‹‹š’ëæM¨¾ú^Ýà÷êëb¡…Ûª¤Å¶Z”ë3úwËœïø±7o"“¶œ–”#ƒþZúÎ[¸w_¨¨P—òC" H$‰€D@"ð·FàO-èö®Þx°÷=,±.€­i9Y" }?|üê\4£³¬‡Žž…>Eûà¯#ˆ$5@B‰Ú¸9 šÀ³)‡MÞ¹hܪ+–¼Ü¡D¶ÇNHÖ³J„P5K=A·s÷†)‘¦Ì-Ì-ìÐÞÏ Ä›†ôÄÎu_`ñ‚gq¼G7ÄžÙ€®Ó×Ð>×ÉXòõq¼4cvoëK{Å­ñýºÍØyú*:¶ð¡}í0Ñï6¶ó±n¦æv˜0ë ¤f¾‡yLÎüm‰ôܤˆïÛЀ¬¨ž´¡ãÆ„ÝË7€ôSàäן~ñ.F÷î@Öû p# ©k»@Ø“5•“™…5Ú6ö–dñ€Eƒfmé(¬*8º7ÆzÚß¾â‹/ñ-4pTù‘HM;š*|ð$lü*ÝÚ7ÃÔ³qãL[ŒÀwŸµ£Å:3z8Yן ÕI0 ™ƒ‰ƒÂÅ¢»l³ÅPÛëäჱÏEÿÆ#hO4[W-Ðmà,„d]‡Ÿï}g*o w¯"‡z«­­ÜÈâÉÉ‚"å7¡hÙì5ýH"räèÙŒÇjYÎoÕ¡;>[0¯^²€¹~•eðÄyجXbÚ Á7{ ªó±-¦Ûˆ°÷{¢…ËG€q2§¹2°µGë¸È¨óAÁÔà…W£(17)(œu³§ñÉ´aÂË ïØ9ø2õ_hÔ³æÅµk2óc|о³¢Í-qCXÙ:ØÑöŒ%ˆ8„ŠÊòÌç˜>¢'›FN_@Aì–¢Y›˜5±'.üò-ú¼µ Ýzv§¹iƒ š×š!Ÿ÷š§Þ¾ˆ^ý&á¹—ç¢ å6z¼÷9útlÓ¼ûpë.ÜùÍèý9¼q1F¿ç…ù}‚wý&¾ùõW4ö°'Ûw0Þ~¾†ÑiÃ)Xâ[‹àÍ¿Å?fŒBï;Ö›NKø ßþvÛ¶ÄŒ¬ÀŒ}0èì!tié˜d3ôé¬F>Wß ZÒcçâןŸØ…×_·/Bú ŠÑðÁJL{ïÉëÄÆÎªš«˜Q@EÚªPsŽº^±‚[“æd±Wç /z˜Û¸à™7?Å¿>Zˆö=wcbïÖX³æ;|¶~‚üàÚÑ_ÑgÀsXðúHÄÓ¢Ô¿¾ÙŒV^0×™ãÓ·ŸÃ¨ÞíiÛÇ›xnÚx¼ýöŒè× CF§mv°§ˆì¶ú9IÛOÜ]´ÿ²ÔÑôlÔ«>~ /Ï_ú?fÙÇß‚ö½³t9‚‡>©jNEy¡MÃà;òR" H$‰€D@"ð·B€ŽgûöãSqa>í‹.„–‹²Kª“‹k;ÐêÊr$’e=³@_Ø‘k:9™ö”–ÑþñB²t:ÓþV bz%tDÓÝ{÷).˜ü¼‰$’¥Ù’Ž)³#bžGQÁaiCDAÝ\Jõ"ŠïääL®ÝÄøÈª—žšLg&Ò¾gxyy!VIEAnDK¥ÃLáJ{×=éÏÂLAnN¹ÛÒ>rCWj}_©/ìÀ?ÚËJ ‘œL.Àd]tqó€—§í9.FAq)œ]\H¹¬“…7//æäîHǧU”‘ ò= bg ??X˜Ð>rskjËe´ç¸ ¸œ0Pug‹;×µ²µ‡=Yù\ëÂÂ"r¶¡ÓÈâ§"üÅo1¬"Q_““)¨Õ¡¾z6ð„‹“=Y¸K‘žž†¬ì\Ñ–£Fp}ãeƒZB&dPÿòór(àu-¦ÔÏbaJ}2§ñP¨O¹¤»¹;PŸ ©<…ï¢=Þä¦\€âRÚ£í⬖¥Y¢7ZÒ"@5ò[ üçd_‹mqA¹îWÀ…ÆÛJ¿ð:O>-%©é4¾|ÏÇמnÎzÙÅ\¥MÜ^éæìLxÓxöHÌ;*§.ùäò\JígÑþvS4 h?=õ—óñáCä’Uܖޝó¢èèŽöjnT“¥#öwfMGË©¯b@Ç$³>þþâh9­L%¹É'&$"¿X{š‡^“ÀžÈ¢16,·LW,Æ&›ÆÌÒÖ 6"bi)Æ,ÛÙ9¹À†\Íã´ôtš:8»yŠÈãäø!{p$§fL¶ðñó#ot3ä"11e´ÜÅÍæ¶;¬H§Ìä L˜WOo¸Ðvêjz_h+ ­~¼´¾ˆò©‰xð0ÖŽn K5Ë¡øy¨‘~~nv"*»Ùãö~6TsM} ó žçêŸÖé½¾ŸuÇÊX/Cˆþ(ÏY!›W9Œu`œ7? Û0¼æ:Æ÷üŒ .®ù` Ô‡kO«Rsžw^žíNÞ kÏct×6Z¶h[»©W–‘õêªðGyZüÍåx§¡QS5UþL®q½Ç•´]GÃ~Ê2–SsO…Ä‘qj4~ô¢¦î£Yõ>©[^ß•4Ô¯¾ŠuëÕWB>“H$‰€D@" ü}øC‚Îjò\ã¤ýèåòuòÅu•”æ‰üú4¸ÖäpNÆ÷,A¯z½ û Õ5ûYª|µ µ ܦ¾[uDËÕt#E!ª†Uyµ–w5OkÚâHyúþjõ Ûâú|ÏÃ/; Vä†í­ß ¯ŽŸ¨.ô6”E²I3mÎ Ùº ½è¡ÆQE;<Þ,G-Lír BCÝÅ }$µœ¦µú­é+î¨ ÷õçç†I+gØWã|Ã{q­×_“¥ÕÕîE[T"=õMkå¹×ÑtUôºªÕ¹‚† Ï:õÝ弚¶øÆ(iyÜÿÞÕž>£Â5XÕy.o$‰€D@" H$cþA7ü¬ýX®Û'õG»ávÎçzü§Sµ†*K#Tu¥ü•;!~¬§Ç=7.÷G÷ÿQj_˜<ªO½íÔ!-F%+ƒG!Ѿµ¶¸?Óž3ÑêÕ<rTŒù™aÇѳš½õ†™F×"€Û_,kTõ‘[Ö_ôá?Iž\Ž#Æ×—jÚÓgÎAÆŒ¬©¦éUû¤&K\p¾1ŽuKÔÞýµ²ŒÅ_ĘQuú oò¯µWW?¾û«ý©­ùW¯¸oõËÿ«ºr9Nÿu:þÕ¾Èr‰€D@" H$ÿ^þ” ×§ŽY%‰õåó3ããFœèqÕþO<7Ɔɦ8Ö톨Z\I¨üñÿ·€4,ãûK¸Zùß!a¦Ž1¾šºÆõ„DÔ]«ð7ø6Öùo ’TA" H$‰€D@" ø/B ~óãŸ4¦’ÉZ—S&:ÚŸV•­_¥tLYnnž8šŒ –Zí[+ËßüLKõå«y¶ó‡uŒdje©±]jžÕs¡éa¨›VÌð™á5çkõ´²ÆßÂ2HÝÕêpQ^èH–n½…¸²¢eús¯…%•­E̸…Çß×Õ­V‚ö\è$« ŒÒêÁcûT§žA³Ð×ô³¶¬jÕ,¤¢Í:uÕñ1xTsÉeY½âÂqt›z@c©QóUÊ]œŸƒû÷ï#3'Oä‹ni©¸(E÷š^5]çßäÖ¸¼ñ½VA{ÎßZÒt6|¦ekåµ²ôý¸²ÚsCù,GkC½þ£ñ¨Ûª&Ïð©¡lÃkÃ2òZ" H$‰€D@"  ¸Úõ‚À¤…˜˜¸È ¸MÒi÷tUE¨vD›öÑ68HDf×~pkdKu=fbi‚ø«øåÀ%¼úÖkp·1D¨ÆM—Ú0¶«÷z˰ȧƒÀH§Góªyek>Q¶—í:å¨j{0õG#¬«J’5âÁ÷¢™šã~‰º”«¹†sqn‹“Ö÷?Ô…Ê ™z\㯟Çѳ×Ð,¤+ztnCGZöEçáØÑSðh‡¶- üó3“qâØaœŒEy…¿ÀV0p‚ü™x»wíE©™%yf kkKT”•¡´¬¥å¦è;hZ7ó' (ƒéOŽ„¥YM>î3Ó`þÓÆ´nÔñâvµ6µñÖî9“6þâÆàÃXç?ª/d‘N:¥:f¬å™ÃÛq+×SÆ„- '¿ŸEC YµÚ{?zsD\ÎPÇO“ID>/cè!󷦯Tž{¯ÝÿéܧwE+Ï}Õê±N2I$‰€D@" H$*õZÐÅi=B×ÏÄŒ9sQ\mJGYâÚÉmm;ço<%ø‡¶ámþ¯‘j]A6ŒD9‘@Nœ§ºÑ þñ¯ýpùù©Ö×­“Ǫó}jO{®µA÷*w"Ý„>LU=ÛPŸ3?a-Ô¤Ã~ñ5·SSŽï dsÍÇëR+[m¡÷®ŸÂ3Ï>ƒ>ó>B|r®x\YV€Ÿ¿Z‚«qÅ}aÆ},yuF½üZ…vCÿ¾áxñ3ZŽCäíd:«œÎçE:³=3é:ž|òIœ¿õVtlѯZ]ÕFŧ¥µ ìø\i½J1^/. È´(Y¤¸ËÈ ãó´1Ó0d ø¯–TJÜë ¼ŸyDúYOU7 !æ8^ùt3¥I×ã§_a4O8³|-éò2}ûèô±šÄgÛ«ÒJ°kÓ*ä¹vÅ–_°¾aM䜓9ÿ¦«6¦š­?,‡“ÖÃ|C8Ÿÿj愾 vÿ—ëëÛ2@‚°$=…<–V6t¼[íQq¦„eýzhšªß¬‡†¡–£Ýs,=Ñßš uüŒu繡õ“¿9q±€Ws¯nѨ÷=¤ò¢¾Á»Â÷Z;B üH$‰€D@" Hõ[Ð À῞|û <7w& ŒÞW¾o„Ë·Þº 2’nãèñs(*)§í¦hÖ¦:‡†ÐÎ&0³°D?˜›q3Õˆ¼p W¢ni,lÑ%¼š7ò† Yv¯]‰D©‰9t¹i¸~ã.|‚Z£WxW¸:¨g—d!âÌÄ'¥ÃÆÞ:uAë †¨.+Æù³'uãåì€Î]ÃÒ*€¢g—!êò˜ØzÀE¸v=»ö„·“ Ž9†ÄŒ\X³7@ÇÎhOåÍ HˆâìTœŽË1·abi‡Ð°p„¶ ª—Ä™XØ`ìÓÏÃ:7[÷ÃÛóÆÒùßæpón{;õ,ø#;~§M}o Ú4i F¥o/ÂÄf ^üðì]»³_zE<ÏxxûvÁ“Ó¦£{«ÆâYÍΔÓÄÔÞ ôÔÌW³“ã{?ƒÆ ¸{:Ø¢[žôgŸ¦HÍHÄÉSÇp#*mÑ'< ®Ž*Y,ÎÏÄ©cÇÿ0î>èÞ£ý=QVœ‡+‘×áæë áx')á=»£qó`™:£ˆŽ8;~ì(nß©ÄÖ_6ÑYënèÚ= œ-p‘Úº}Š…5:v!üÚ6§s½iÂЙí×£.àÜ娻¸â™ ðo7Pœ‡-úIú2qå{þ4¾_ºÃ> ¥6кycÜŠ¾‚r{ؘ–Ð\¸ƒa½ØÐ רléjbé@ãÕ íƒÅ\ÈLŠÇ­„LX™U6ä½`鄞=ÃaU‘S'O!·Üaá=Båµ…A_iîðüIy»‰é´0  :ò*,\ýÑ£{gTePý³(1±E÷^½Ñ–æ° sñ .ÅÜA-fYÙº s·nhÙÔ—zc TÚT‘.@~F2-à܃ƒ½nÆD#¿Â]Ã{¡]‹ÆÔ®ê@Í Ìz”ÓXDœ=ƒ[÷“é}´B`«öx¢c;ñ~æ¤> ±=…‡éyp÷i‚Þ½zÂÇÝ%ô^މ§³Øý‘“z©Y43h¸7lж­‚>ü>Ç^9<Å]C阺ŠDœ>Hzwù=|"¬;:6ü^¥wÖnäé b߆›Z4õ¡¾±¾*§™$‰€D@" H$ÿç¨5I> S3 $ܽ·™‘Š‹çÏÃeØxôêÐBÔH&7ëSç¢`áà ¥óFMÄž“—Ež)†ì¼bÕÚW­CLÔyÜJÊ…‹»;îEÂÜá^F!›òpü—¯Ñ¥S(v½€¢üTŒÚëvrÊèþË`æG눘!úÄV¬Xw…EØ¿å¼ñ¯ hàÛæE1eú ¸t;•dVãÌîÕiÝ ~²ûÆ­ëQX¿f6î>'ggܸx?n>€üâJÑ»üj‰‰ÐéS§Qif'ò¡þþãWðͦ½‚è*åÅøeùëhŒ«¿Åžç‘‘™#¿­ÇK¿³WCØTd`欗p:êŽI6Cý·ÚBYIÛ†á¹^Ä;ϼ¸ÔB˜“…Y—Ÿ s+K"¤EtFúZüó‡7ôä\A%™‹-ì<0eޜ۰R35u¡®*)„§ö¡v¥õ«WÏýŽÕÛΈŒœäXô IçôÜ|üi1&½´ )ùå´‚bIĸ ‹_{;œD>-DŒFc²û¸èIͯ?Zˆ G¢Ð8(É×áù7—"¹€êV”⇷& E@_¬\óöžºˆÜü|\>± ;N\Cii)2Ò蘹ܽu·ÒQ¦+ĉñâ;+áàå;%sžšŽWã…®—ŽíD›NáˆKÎAAüõÛQ®m@§Z¹pa^>béûþk8q•ÚJÁ¹Ã¿ ¤m ,¡¹°m礥¥ã‘ßÐ>¬7 ª¬P’‡ÐÖ#p(â‹@NÒ „wïŠç?ú©998Hósô¸©xkñ2ÜLÊA̱_:ómÜLÈå…U™®˜prJ¾} =ztÇÒU¿ 37¿ÿø1ÆLœŒÅËVâaF6Îïþ}ž_‚Ä\•&²{ñ4nSßÜÜ\‘tý^|óCÜH̲nœ;ŒU?ïFÝå§?D¯^=0kÑ'´x”GrVcàü÷q+…½0Ø2­zN09Gu)výü >Z¹VvŽ¢OKWl@V~ÊrbÉÏãØµ4Aä¾ï°hùZððUê²ð-F 4+Ön@ôµœÜþ=Þùì{¤äRLJºœdüó™n¸Jýç¹ýûƯñúòõð ÷Т8 Sžzn¦J Îí]‹6ͱô³¯ñë–ÝHJÍ2X_™$‰€D@" H$ˆX<’È¥˜Ž“VÓžŸV2åPú £Œ3L\픓Q·DÊòR%/7GIIIVn߸¦¼0¬ƒ2ÿãoE^ô‰ß•A#g(iÅ⾤¸HÉÊÈP’“•S¶ YG®Æ‹¼•¯LUžY¼RÉ-å–«•­+*¡ÓßUŠéöòÁuT¶rõ^š(«+ÌQ&¦*q—N(­X*;O^Uåç¦*‹žì ¼±zmÓ-S¾ûh¦Ò÷éw”Û iJee¥ò ú¸hó׃Ey¥²\ÉÊÌVJË*Å=÷›ÛæTUQ¡æç)驩ʃø›ÊªŸU‡½¬ä”R‰âLå…¡aÊëËV+É™9J9ɾ}Vicå×C•*ª_Z©,{q¤2çõ U©²Šs8U+»~\¬¼°t£RR˜§,žÞEy{ÕoJqI–òéÕÝ'c”²‚te”ÍÇÔ¾Q‡¨jý”{×”ðæÍ•C‘*v,1ùÞe%¬EcåÄ5õYuU%m7VûRMuÕ« eû·ï)Ó~ÃU”Ûw(ðí¯\¼ž îoøœ‰M÷_½1G™÷ögJ¶NmwÛÊ·”4&E×Õ㛩l%2>Y”ÍHˆQºÑ<ÙJú–g+Ïõm¡,Zñƒ’šGý*U*Ë •?yNyåÓí¢ü¹½ß(Ãf/VÒrUt’ï\VB©þ¦ƒ ËX¶`Œò‡ë”üœTeþ`åÝUÛu&)ÊÖ/—(ó®raJ´w^üñuin‚²`Î(eÃî |«(e9ÊÊÅ3•s‹¹PNc›ž«Œh eåæÃj™jòÃ?_PºL]¤èèÉý«ûØuUÎEßù÷" l¶º$îóR┡”-‡.‹{ñÞ¨@+lU‚ÛöS®ÞOùWOîõ÷_ˆ÷iw"•vÔßýWîˆûÒâBš‹ê»qd›âCyÛ«e÷~ÿ‰2í¥÷Å<ì,ðɧ+p”¬i3^[†c›VÀ¦$k׬Alb¼½ÝqpO$ž¢ß/KæD:Æû^¡Tàâ‰ýøeÛï¨"wbK…-qΰ4Wø••Õhצ%œ­Ô–6ƒÓåû(/,&kgæ-~­›xŠ¥krq÷·¢î\ Wõr\>}±gö+½ ¢î&£#1År –V^m†áýû ¨áÿcï;«*²¿é½÷ÞjÐ{Q좨¨k ê⺊ºö²êmëZ×ÞVlˆJ‘^$tH!! „ôÞ“÷òr¿sæ¾ûrß#×ÏÝѼ{gæÌ™s~3÷rÏÌ™µ\xü@<³üZ\B›†e_5éÃGÑlä8¸°¿·êkK^×N3•µ¥øìÃ÷±!;ÁA(Ü»“/å AAk0¹bîäñäì'dêhkC»‰dÚ¾G³×°SvT <”v³ïThí51岿ÀnÑ Ímä®ïƒKo¼s®{SG…Ã3$RläÅëƒ 0ÕÙ}.Ì"rPzºÑÖi"—xÕ¥›Ó,nÖ,<žAåuÂÖÖÓrs¹r=.qт̗ÜÔ/5m†Nï6šhCÀø»ªm›<^; ÐÕÚ†r]G¸#¾ÿì}¬î6Ð\¨¥¢í6O2Û»„’Ëôx„úû˜E ºíH'•—“˜¡·§‰zZO¡¹¾ †”hdo\ƒÒ=?ÒÚòì¢ Þ†ÌSp¢¼¦Q¸|úË®†îžPju€šká ¯{gww®Cª³­£3§N¶ô[Px.&LWiì\1rü¼³õ´¶ÜV™ÓF .JÅÆÓÛ sÏ_H^‰‚ÞÃ׃FeA1Д³>˜!7™º1431QêÒw?,¼x1$ÆjoŒ¹`²ðŠàÊölùï|´F'¸™êQî›WÞ9‚=-}pvâ&4)NÄ%N‡Äøh÷ ˜ ç×@›ˆ‹™sóÌ´“g ¿ò(.¹é2T.ÃàAƒ1sÎøQ“”¯‚sSV~ô6ºè´š`˜Džê]è6á.Æ@?oÁ7jÀ`\|é\¬Ù²çŒIÁÎMkpë’+ãï†Ã94SNa÷–ï‘·uáo‡=…¥B#.¼i¡ö¯˜7­÷9Äô£ÊªÅäU" H$‰€D@" è×@× a#.*>SâÄtNŸ3>žxy) ìÃþ5ïáp[ ê^„ø¹c¿3Žvt‰âl:ÒW.Nö8‘³“æ^„w¿X‡ù3Æ ¹¼í%¥0v“1D7Å2ÒîãìµÌ&œ½ ’l8ó=­¡6hkŽÑôB†Í$y Æ×]ݸláUðö ¢õºè$ÛÖŒY¼ó5»‡ßöà³77G âÓçîÀ‡ß]„Wž¾¾îb—z±© &|ñÚsøÛ>#Þ}üq¤Fùá§uƒðèGänm6ÀœœyÇô^ãÌh £fÀxÌž·IÁhï4`áWÃÃÓ žf;‘7Üb˜/p$mYº”Œ ¸ýüoñÜ‹ÿ€g— £È€v¤uèñq~صÿ0ÎÈ c†ÒÌ­UQœ‡=Ç<ìçE¥µ`WO2¦ôF¹V™FÂWÊ×HxS;>d{yþö´æßWS‘Ö,;Áh ƒŠqÕ.Np¥vaù»»Èš8 .¾®öÝèî±Ã•WÿAaa0ÔŸ y7tSYbìƒtåm#1¶¼æ^ x"Z=`î¹ç ¼[Û;q9áŒêBZkÝl$—{3øDÏýÅ‘–1ôxPŠ= ÕlŠ;’±n¢£ê4HÈA䛨_hfŸ©Ÿ1ÃD8ÑÞ¬ƒ¥“Ž4ðÀîùŒdÄöÐŽób}¼H±þal{¨¾ÎN’¶Èƒ&êÃjyµ›Ûƒí9…t–y£ÑÓ?áÇ~ íë‰ÄÄDx‘×Amux–ØÛn=¾_ÿè¤9tÒ†{wí@Èo½¢” l@‹@DFê Fê—ZKøF"Á°šöØJ&#šAþqõ‡pI†¯«ƒµ¢•ú®¹Zil&ÝÍ8Ù@Þ%Ýæ D=ºÆ–iÄ §ÓsÔÚB3Õ~„uKg ©¾5бôløxºÜݱ{ãNKÝ'9;À•·ýi ±ðMðÁà V#%y2~àJ´?ˆ§Ö—âȆ/BFu3-¿ &‚¥æùáæŽñ4‡¿½©Æ À쑜Ž÷þõ:¦ÏÌĆe÷"1È÷ÿ鼺zÍÊ A!ëç™V=D³÷´¡äO94ÐÈÑÒ5=äU" H$‰€D@"𿆀}Ì÷Zí9Iý8¯,-¡]—«È–[n|TWd ¢Ãƒu{s=ödï ©Û’–o¶*\<‘…¦šr1«–Lé4)IGOåcç®=°÷ ¢µ¸±0‘ m@x ¹Æ{¡(ï0ì<èX¶PÁ·¡úNÔ¶#fR݉g'ÍîåÐQ`eU póòAÒ€TÄ„± &Í=Œœü"˜È œg_SSi-»§íž{rk‹ <ÙP(>Z€‚Âb2r:€aCÓ.íÎÂðb£F3nzèØ¨}»w!¯¸‚\ü“FÇO‘;’’hý|'rs à)Ö ³Ñ¤Î”*(9’ƒÃ¹…05L² HIF€-˜'˜ªf£§’v¿¯ïpD ­IÖ¼}›jË‘_TŽhª/4P4àA†#„MþÑ"°·uxt _Z»­ãÙÑÚ@zG͆™ëÓ ,¦Sï”;Š&ƒR“bÐ\[†’*ÚMž1¦3¼x–¹ ¿Q Ô&ž4CC(t^\T¸è –6!ï¦7Ñ,uΡ8ZRNîïîˆ ÙRSSàL;öçÿˆ˜Þ5è4û^Z\ˆvx %ž,zp¬ W´›³w022ÒI'g+aöEÅñ"4t(Ô—ÐÞXƒ"Z?G¸xÑ’î§…¤««o¢YW½„yÙñbäQ[ÔÑ.ý>Aá–ž.Ú–eìjkÂÁýû…\.´#6>)Iñèio@^Ñ á¹âOºj¯ƶµ¡šp >š˜LË!ÜiÀG]ºÀíÉÏpNþQš•§ç0,©ôÜûñsx„ŽVt @|”º×ÝRW‰â™DÇëy‰:˜¿ ‰€D@" H$ÿeú1ÐUH,v]Ÿ‘Á)ì¾~>ªm k&Q_¬¬H)"huë´1vï̳žUA}†°S,ö©•ÑbM&bšQ®eÙÆµtõj­‰F«]­iÍ19m¢VVžùqèÏhù„£o[·m\0â9\4°Àj#„m«lŠœÔ&¼\¡O4¾zÔ´4Û²z}^ô>_ÏùÂuš×m›‰µ|íªñÐ_mû›-íYÇ-F­Z«ÖzAèž69ïÅÙ†ð”rØÐZ±í£=­òu}ú{&ÑâÚUWÌrk%†9bKo·–7‰€D@" H$ÿ1Ni 3làðwµm`Ñÿøãšƒzo¦¥tmWqññM;\QEb^58ÙXì-ÇiìÆËW5_ýø·”%þ|ÏEˆ„ctOu¨¦›]z)‡+óäš[¹-¥ ãL7­N欦åÀyZ9Žóîê\?NZ=œÎA£é×Ë"t?*®ªZ²UyUQOÂt·ÕéTeµ<ýU_¯¥>n&"õ2óì(ï~fzKy2€Õ6Ñ0Q Ë“ða~T“m»YËgæA‰V²ôÕ:Ùô~Ú3ÈrÚò=YWM¾Z˨–å>,Z›x©íÁõpÛs>{‚P·ÂÞŠ£…NÃA͵Èż(¨¼Tš¾ú¬ž^Ô¯²‘¿‰€D@" H$ÿiNk 3:ü1­…¾>¦µü¾ò´rÚõçÐje´«V–ã¶uiy¶éZYýõÌiÕAªMQz§º?sþ½†Ì©øqžÆ“QM Ó•øíò5Ù,Øs1j§“B+«Ç¸7ͺûK×êà|‹ ZbWFkï£Èo’¤É¡Á§Ég[9Ó©´Ö<¶tZ\ãÛ_ßÑòû«Oãs&ןÃëçОIÝ’F" H$‰€D@"ðŸŽÀi tí#ZUÔl°’ñ¥ÍªþVèåÐîÙ ø5ŒŠ‡Ú¬'o<§Ôb&‘*Ó§éuùwÈñ[óÔôQëíØÐÒµöâ8ÿiXXâ<ƒK»†³‘zª ñÑhlùké¶Wf«µ‡mÞ/ëë^ÄHõ´ø¥û/'0;ÃÁþ¹ü>rô¸ý>$’RH$‰€D@" Hþÿ"pJýTÆÌoe(œ®žÓåÿÿ€×V&Žëgˆi>\ z#Ó¶Ìÿ¹Ï¶Î¾t89ídÝ­êe¬ÎÈ%>ìÙ@…m‹ØÆ­øS„ÿã}ìi·rn‹_j²Ûêvº8Ut’¬œ¦là›èÏÁΈ·IÐóïho§ýàâLgù"œ‹Sý·fÙ¢nÿ·Vþ ™ÿ'Èø U“Å$‰€D@" H~'ôm ÓW=¯=fû ôèÚ¥û¸8ÇØÁÑ™vAB\,\íÕõÐDÆ&lèЄ±¸× õªÎt3fdã”â¼ÎXX"|å{­6¤ìɈê¦ÝÞói÷òšzAïæáXÚ];:LÝ]›µ$–Àü5¹TÙ,Y”®ÎÒò:r}ÐÊèÓø^“Û’N¼UÒ‡xÉIlUæ ´6ÕÓ1qF™·i§´†ºZ:ÏÜ~dÚÓÎà5Xÿã$ Ë€è0a8ŠÂ–ŠU>å D-ÿ$9O7{oa©anIèåAˆµõBÑj“ªrÛ¨í¤ÖÛËDÕ¨¯*LJà‹!iÉb‡u:g Gí‡Á=£D¿í0^˜»?eïG]S;¢ã1*síDc[vþ´M&8;;ÃÕÅ…°1ÒÙæ:ý1)ƒ1()šNÔæþÄøGs²qøx¦L OÚÖÝDÇ’qº>hxìÝüöUºá²ó¦ÃÕ‰Ž)£³Òx]6ëÄ¡K¾œÏyæuôt;6ðiÇøm›6~q›1€Ú½Í´ãzpPíίòc¶Z_<ˆÖn\{Vð`Ó—äìÀ·ÛŠpÑÅ"ÈÛY”ÓÖìs™öæj|û¯OñÕ›‘8z&®¿êr„ù¸£^ÔF4B s¿dþ´úzuSÓÍ™ªnæ6×Óë¨Äm_ånTÖò4‘š‡M_ôªwAìÚ‚Šv'Lž8šNc§ë ±ÞZ5¹{SÔ»¾øªÏuoûqY¦c@„CKg·pãåXþ@å«jH¨»j:§©ùü1«ÑñU%Z9í* 6ºT Ø8çÐÝÞ„wŸ¾³ÿô<ö8€·ž}1£/Æw[÷‹|6¼Ôú{¯ÚG³V§>Ÿª£:4™O.#˜šôr[x0a’®æºù_ÕU-xßh¤¥$Â…ú¦ÀgçåæÐùÚ­ðöñ››‚BÂDçÈó,u y;+«‚ƒ³I‹èˆPÐÜB.ÏÆŽÉ؉’â"TVÕ‰ÙYOÿ ¤¤$ÑYóŽtzJKËà ¥½'ªš—œ 7Gò¤ÈÅ‘¢ã°£óÂS¤sá}ÉtaƒFYfþŒFÎ;;Š¿Æç«Ö#é–KI~Ò‰ÎõÖ\Š÷nÆÜËoÆß?[ƒ«ÏŸRoáÅ 0àÏ‹1ã®'‘óÏÇpòè¦ó´Û«¡.ûK ºâ:Ürñ$tuv~.”C Q¾RˆŽ‚iÍð¤óÙ»ÚZp¢²n¨.;Žšæ.$ (Ú 9ÓYãIAtæzQ1ªÊŽÇ Aiðrãy\=8^˜Gú–ÂÁÕKè@çÒÓÀAié 8¸ûÁÃÁ€’²DF„aÔ”Ùèq ‚±£û÷ìÄë›»qÍOûàëEíw'4TÀ¡Ü|´íÄ9îI±æþIg‚×Wâp^!¨Ï)¼ô82 UIø—Ôz6×”âë>Á˜±sŠÀtÖ—£‘lOwÒ§‘ˆ ¤3î+D}Ô·cS*êëhmFEU-ÜÜ]Q]~u­ÝH4Ž8"úVbèŒóĘpÑ¿µg€lWQ¾®ª‚çŒôüÐ9ö%%t¾¹Jg§>”ƒƒ+¤¦"Äß[ôºê £éçJ¼“LçµÃ)³àß®À…±›°+­¨ƒ‹›+aU†Ê::ƒ>%•έççXíê±®àŒKeiÉ~&8ѹ둈‹‰¤¾F=£ÇHºFIi%Ü}ÅyìÞîä‰ÓãÇËáC¸)]m¨ª®§þì:>:Rx0pj¬©gØÇÆ'‡…át ¹yb°-žžKPß)E' ÀúyìÝýÃ,ÚJÅ‹¥”A" H$‰€D@"pæ8Ä|Mdü:ñô]‹ðÞ–ch>¶ËûQ¿LŒ¢ú*Šqç9ƒðüêƒ8–³/?ñrÊê°wÇF|¾ò+¬úø9ܽòæO°ø±çý[Ö`úÈÑØ}¬©Ì_y­MX»ês|¿f–/ÿ#ê16+“}ì±aõ‡øÃíOÑ ˆ¶¯ý^_¹™YöõÀ®¾À'›r1sr:ëJ°âŽ‹±ð¹Uè,+À»ÏÜWÖW`ꤱñó´HÁÖ:¿™ò²7àOË–áHe v¯Ç¢^Ç‚ ç#Ì× _¿û2î~ì5xSk>~?æP;ŒWcžûó2¼øÉWرa ¾Ú°–ïäâ­×cÜ„qð÷r¥NÕ…OÿþÞÞR‰ógf¡éaeÚuVJª›”Žæå“—ÿBæÔD%¿´Z9¼ýs¶Î”·>û^9ZRªÔÕT*ï¿°B‰±XÉ?QOž×FeÍG/Íp%çD£àùáÿ-W0ô"eëO?)+n8G¹ù/¯)Ý”S–³EðZ»§HÐÞöÅí•CeMŠÒÕ¤,™3\yüí¯š½SªQ–]”©œwë“J³¡GéliPÊÊÊ•úzºVn¿8A¹çÅ/”î®å/×T-Qé4)ŠÉЮäçæ+µuMÊ—'=F_¥”ÖwŠúŠ r•â²JqO‚+´†YÜ?¼AÈõí–C"^WYªäæ£:•W¼VY¸ü9¥®¥‹òŒÊ7o>©ÄŸ{‹RÝÒ©ì\ý†’yÁíÊ‘’j¥££]éêlSÞûë åú??©œ¨kTº F¥±ú¸rõ`åˇïWï»AuÁÍJakèhQ^{è%óº•6¥0û!ÇW›÷“tŠRQ°[™=,RYµý¨¢t4(—ÅA¹ï•‘ŠB^ÊáCH®Á—ÖMÓÿª>†®v¥²²B©ª®Qêëj”¯ß}‘øŽRŠêÛ•î¶:åÚaP.¸õ%û@ŽRU[§äïݪ̟˜®¼ýÕ&Qo{C¹r÷EÕÿX©¤"0o3\ÊŽo?R®^r¿RQ_«üýþÅÊ¢ûÿ¡tÊ?º^yøÝï”S‡òÜ/RV¼ø±¹°I1R>‡®úãÊõ³‡)o±YÍ£ßVÂhɬtåÕÏÔ4“©ÛÒ6\¯Y-eǪ”QS*$T]Éae0õË¿}ø­ÒJýåDþne8ÅßY»Wð]÷É3 R(?<ªt;•ï?þa0G©h2(M')ƒˆöÃïvÚÖÚRåæéÊÓ®¥nÑ©¼òÀÅ †]¡lÚ¹G9Ný¥¥ö„ò<õƒû©¿qXóÑʤ«TŽ•×*]rD¨RY2_¹õñ7¨ïr'ìTÞ{úNeæÍ* íÊ'/Ü£`ÊbåH=/&ƒ²ñ‹×”± nSJkÔ¶ë¦òZÛ;š”'–\©<ðÒ?•ºÖÅÐÕ¡|õæs¢_¬\³I9VV¡Ð¬¸òܽ×*³®å6h£G°]y÷ù{Œ½Fa–eùJ&é÷ì{_+m]F¥èÐv%…â·>þªRÕÔ¦4T)W¶Sžþà;¡? úöÝòÕ»T_´².;—Ú­KYûÙ«¢þ÷WoQ:©n]-â›åùPQY¥Ô74(…‡w+³¨®—þµNä­zýieÞu÷*еVä(³Ò¡<üâ'JS[§R{"W™• å•UZ.ÐÝÍo ¤Ó3K(³—<®4òãÛcPòSomW öþ¨!JY·'_V—P&“Cȧ?î'è›”;ç U¦\¹LÉ>˜«TTÕ(Åù{•yTÏ›_oôeyÊ$O(_lÉ!¶ÊmçS|åc¥«6´(¯>r½rþmÏ ™×ô²ŠýÚ-Jñ±cJEuÒ­>f–6LåD@" H$‰€Dà p<ý'wo¬}ý~ÜÓ] cM ¾ü©ÿð ’#ƒðÓáFÌûÃ_pÞœ ‰+rn‘|š±»úV$Gø Ö™Sæá²Ñ¯¡°´©>¸ðÚ?¢Íð4ÆŽ…[yß¶HÌ8…'Áã7ÏÅêM?aò°(l_ó5ßÿ†{£›6Scwï?]} ŠvÌÁ¡MßÃ{È<<±ô x‘ jsS²7­ÁÎ}yäJÝ…?9Š'Ñ<8¹»HŸŽ·¼„ ƒ‚Èý>¡™_7†ÇÛWàý& #- É©ibƒ2Zïžêá„óRwÞ{†Æ‰ˆŽŽCúà´×–"{ó6¸¤GáûU_Іe=(>Rˆ¢Ý•h§õÃþäÖî⊀À@¸ºªÞÞžžðéò@ ¹Ç³3u7¹³{FdÀÉQ8lÓ&Y¸ü¼™H!l9¤ ;Z*ÐÙB®¹Åqî-OaÚè!b1 ˆ\Ó‡§ƒ 8š~vÃÈ—cÙëo!ÙωñqHK#×tÒÅ<“ÇJQà•Ó•ÅyøaýFÔÐælU%9ˆÈ ¡Þ Ž6e ‹ë®¼ƒIi 5yMرq/Æ\\€?:A3ºÝ¨ªÏA÷ñJÐ6p§Äu?d¢g7öÆZrUö À¹—/Æ©qýyãhÖŸ6Æ£=Èr›9Ì΂‡ƒ3ÑКz-Øó†~¼FØìóÍk€Ù­Þ6°{xx¹Ý“k¸‰0I™:“Æ‚‡‹#<¨Íæß0õÕM¢˜‰\Õž;ÃÅ‹¾—2x8Ò‡}M®Ûíh/Á!Ap²SןÛêèèêoO¸øøÁ߃f{)twuaÙ£/bî´ñäè t5V w×\ß„ú¹ š™çœ‡!¯.%×ö&ÄÐó3i&’g/k£%ÓÌÅÜéLnàðŽÁÄY7¡¨­\ÇÕþÂ.ÿì!Á¡Û`ÄîºÃ‡•€ùóaÂØ‘´q¤#âà†ó& ±­S¥ooÁ†õë°/·ÝÝ]øŽR/tTy9Q¿ ðîR9Ó¦^ñaÊ„Ñä9@ëêÝãH®Å¨onµ³Ç¿¥Õé¹I2 w]ÿÞNË@ã0`à`ÂÄ û ÷£†< ŽîÛ‰ê¼=äíÞŒ=ÕÔÔ†]¦h8º…ãÖ!cÐ!‚qå-Ëñúª¸âœÑ8zx6 » ŸLEKõ~ìÜ»ÓËñÍgS¿3áHqŠj\ÑJ.û¼¹à-+þŠs¦Ž%‡}-¨kﵘ¼J$‰€D@" H~½ß•ý”2»0üœ«pÝu€?¹©>ŠØ¨0Am¤²Èè2ií7¹R›:;ÅzP/Õ0`"> ÊÛ/Èbt9zø :*J” %ƒÃ¼î×É‹ÜE¯ÂÒg¿Á·)žØ°ûÞ{§ZO·‰>îXò—»pÕ9áxã-ˆŒ‰C ¯'LMxý‰?â­W<·üf$¹"سƒ\Ú›i͹+.ºn9¾ MÃúñîsëÑ5¯¿øÆÌ[„]‚ñÍ÷ëð÷Uoã_Çí±æÍ—1mTš°5ÙŃd^Y‹/W~‰o?{ÿxû}¼ôÑjÌËL„§4‚ãbiík4Z[Z2ë ìYJ»j;ãpk<]in6 ÍŸïÆnZUMkïÅ>fdm°¬ÉÐEØpMèÆ@q²{E 'wgZ»Îë·éX02žý}¼ÈÈ”bã*{'tÒq[°sÁþü,â3¾Å›Vã¥>AÔ´¥xúþ»â-Œb… ]*ºwë*Œ˜r!^~ç3Ì¿t8Êsw£ä‰še ã˜ÖŠÓŒ©Z ýòÚáøSi}~,Âhrkgnxd‚ÂáLû°Ù$Ö[JØ‘¡tv™6 /®XŒ7ßý1J5|£hCsK+¦^z. G[i”ßöÐDhÆii–«Ò-døYP‘g‰)Pg5Ò ÙÞ¤mèàäKëïÕÍã8Û‰/‚ƒhZØÜÑLä"ßE†=tà>ÚM{ˆ@WÖ‡—pQƒêV®ÅŒT¶‹p‡aLWÂÀÀü¼œa¤ö»&x¸»¡§£Þ±¥çàî?\Ž@OêËeGHµ¸Ë=1çÍ»X~¤§“ ´ä@èHIŒ:àä„s®\‚IX½n#¾üÇC(ö‡/_xˆœ0bd bãbïڲ ñiiè¡Ó L<¸c®¿Gì‹àˆ‘“fãùŸÄŽ]3p6"\qÅyð£×Rek+Ü¢²O^1Ñh¢²sÝÅaaðruØqÏ$Äó*ŽÇ#-NŒ·%BD2H$‰€D@" HNƒ@¿:óº‰6VJ4”ÖàŽ‚:g×Ë‘g3Ù˜Ó> yC­P2šWoÚ‚‹æf‰õÅŇñê·ëpÅ3¼1ˆ¾À“o­ÃK¯¼L믗#ŽŽJ[8;Kä%§Á¤Ð71oö9¸ñç1’f8E ÜÚøkhÆ(Z'Ôd\¶uucÚü…˜½`!*‹`jÂPl½~"ü300s FLœcs%î¼" _­Ûƒ)d ³)ˆ= ½¥.¾¸áö墯s'Å9/}Œ‰÷Ñjîè´ó@­±×Bss3œiS4´8V]‡nÝl0VÝÐB˜5Í>2n<€Á8s°ã )¦ÅùãÞDeì]…·[ˆ%ל‹ŒÄpÍÏÃæu¹˜¶˜Z…êh79âÜË®Á|ú;vàrÄŒk.[¨èT“j't£ààV̾ù \{åb¿§¦ímjýT±f‰úñ£ÙþíÙëþÆ ‰Q“Éjnï¢ÁURþÕúß;Òöè¦n6´Üpî¥×âóéYx« ø¿ñWRšFdMÅâ‰`ͳ0oÂP1h¡Ðû/ig÷œè 0„ö° æÁ5kRëµ¢¡4½ako–MÐòl—©pqc iÞu\!œ¹Q|ý¼q(+B"“0:5B7‘a×ÑC;{ÓÚnV”½ôA¿Ö˜¾µ 4P¥Êéîîw÷BÀÙY£Ç˜‹õ ­ÃgÅ^=uØ±ïæŒHý¨®(§¶$ã¸/IGö(^‚kÀ}µW/2øÛ±nÓ^LËH|DáÚMí´± mþG}ž[-¨õ°RæªWµãµ5]Õ†¡SëÔtæ«fø3%Ç» löh&/“¿}~›~‹Ñƒ"iú½®öì©¡ÊËœD—çrôǧ@X×#þ,)ê3I²›h¡¡¥Y3ÎDŽ٠Ð\ž‡i©øé×`mÔ–½’Žâ†ä0u }W{+'4¤>Û#ôSuÓtˆJŠËfÆàêk¯ÆÀ”‘XqÙ(Q© y}8”í ç?™£µgÜ„ææN2ÈÅ!, )Þ…¾‹6»+(,OP¢èÈ@ÒN0ȉ€D@" H$3@ _]+ÛÙÖŒìÒv´vôÀÕÍ^Ìd³Q)fŽhs¸ƒä6¬Íp:¸cÎ…‹ñÒ° x4Ä“†àùe °”6l9 Gvaøä ñ§?âæ '!ÅψisF#bÏLJ§Äý"(~>yƒ6ûš<‘v–V78#5ù›huÕE™¬)šy#C|lݽý0ãŽKððÏ óÄÔïÇ~ ÷ümMm5ãýþŒµáXtþdœ  ŸBÎY„áÉ‘Øúå{xêÝ Xvǵ ÝÞp°z8–f¦ ½ØZÑL…Úãûqý-÷â¼kî@ZŒ/6lÝ¥3f ..ç_q=™ƒ–Š'0™\bsv®G¡!Ï>~?íÞ=ß\çžGb\fÍœ‰Ôá¸èÖsMÓsS’1lHÚÈè4òœ9íæ]WæP2Íw\ß”[N®¹vŽøöãw0ò²;pÝùÓuWEÌHÆì:^M3Z¢¤ãæûÄú›DCk‡ œ5xÞƒs'Ããÿ÷†$cËêðøKâ›MûìEF G½Œ®U;v"~!Ðý# $­Ï¯õ²~ö¦µ4{ªI¡ ¹î\;T:¶ïh±67²‰è÷Ðægí4{›œ6¯üåŒIWÞ~!d×­|ç5̼õq,œ6­õ%0„YËÒÚT…F'òd †ÝÍÄ_‡øÐNèq˜:m*–Ѧr“§¢òèó=8;¿ÿ QcðÐ]7àÂ+oÁÈ—Á•–‡D¹qû ·¢qÂ-VF¯^ëæº2òšèí#mM¨j¤òͺ8zúãâ?ÜIÏÙÐ#ˆ·]x}%bý\È]¿y[7Y°aœË÷~OË·TÓÞH;ÃiÞœ¬ö¾£½PR­ºsœbvì(¶•F›  bë3À+*KæÀcÏ<‹«æP¿¤Ýûûð;¼pêÓÙÑ‚Bó².—sð eFy·ÔW¡)°W10ƒ =|úÊÓØ\jÂâËç¡¡äÚ†N Ó!b18&ÿ&RÈKäín€[wÞøç—¸ëÑç1y ?*÷Kº>ÀìÅ3Î]Ävñ?e–>ôw̸ôv ¢0~áIt¼ß«˜F®ï%ϼ‚ôÄÚ¼q%3 Þu9¹û·¢´®[}W˜­ðƪ 2O¼¹˯™*øðóÁÏ  ‰€D@" H$Ó!à@›¸?hKÄŸ’Úì’£«'ÆÓzͤ¸hq4hŠ™-.dïŒQ´~;1žòhÆ’?ãýB£1sÁ2Fò[TŽIäÎ{ýÂð¢ã¯Š hò˱`ÖD:¾ÈžŽ%KÆØ‘á8{ i¸0Ž+Šr°³Ò\zï¥è\U¹§H¡uÆ´V×<»ÆW>º)iàPøšPx¢É´6õÚ«¯ YØDÄàKLju6ÖÐÑbÅ4Ûí‰k¯¿#RãáNëU½œéh2:Ê­²¡]s¦MîÉÚŒëéâæ‰prÅ?QzŒhK‘0|*®¸èÒnàÁQñ¸ôü¹h®.GYE5Ü鈫Ù3¦ÑîÜ!­æ´ ¨¯ªD“7RS 11³†£¦¢~ÁHN&‡N¡u»‰¤Ñ]|‚˜”„ÈPÞIž­¡ŸB³ ñ±‘póðÆØ)´V8+ q)ƒh}õ4Væ"eôlZƒÿ@?´4TÓñlÅP<É0¢ÙÄ´¸PæBA5ÑYŸàðhL“Nǵå‘ve?÷Ò%¸ô2Ú >!ŽvÏw@(Íò&&'#ÐÇSÌt2¾iCGbÚ„,:Æ­˜Ö·!)}<& ÞÅ]L·Š^ÁÍAc5NtìÖ$[°+ûãÓAáaq9b$2Ò‡!œŽØ²spÁ ôQ˜5e<*Om¶†ÀØÁxø©g1aDªÐ]ueVšŒ1tÜ„™]Á©"5ǬGìÈ«aaêˆC&LARr¼ÝTWowßX$¶Á~T¿íŸˆø˜pšuWUȘ<q$³·›; Ï”q©(¦#ø[Ú1€<-&ɤ]Ü]àêE† ñ ¡~h.ž¡H¦¶¢üÃ0ÖQ×UÓÂgW Lˆ¤ÔÁX0g jËKA‰Á7"3§N¢S)Ô'ŽæçÃ…¨®[z#MÉ@\l\éh>¬žxéÆÕ7 tT÷.î@íÅÏ?v‹IÄù³'Ózê(.oÀ¢å+p鼩â2vÃN›4Uô3ó:ö°¡‘D}–PppñC2õÉ(’ëæ Z˜"v4¸”šL}2šNu È7Lôm^ÓÎ!&k"bhP*( úÎô4•áxU3†Qú5 /Áœ £þjO}khGº²è)C2¨áGÏgÚÿÛ,J{(q°wt¤çšÚ±«Qô÷ƒn^º™ƒáHx ÏšŒ1ñ^(.*¦EÆL™1™ÃÄ|þôILJF/ëªjÇ<½}0:s4#9>ÂKÂΞÖÔ§ ÄüYSPEûTÕ6"0*•žñ‰çcɳ%•t‰‹Žž â ž£FfbøÐA£Þµ ÚO‹È«D@" H$‰€D ìÈâ¯ú>ƒf¨j™êç¿ë+µÞQ^LkÔÍ ±[+»ÄkÁ6Îé e¸ùÜH$]û î½z.¥ÐÜUÚË““D“Ó­¾>^ZªX¹9 "óoæ@n·¶gîØ¸Ó =Oý=—ÓÖ˜ò½e†—#¬õÑ#¥æŸîW§–ÐQp`‹× tû.:SÝÙ7˜Œ/l]õ>žúô0Þÿç‹H‰è5lõÔë ¿ç5íö¤wA£Õ®*·™jšXVBŸÜ\–ƒUûõѦ¼ÑvtÓkujWNã`WSmÓ­±·-sº8í ßëjMò‹¹O‹¾T£ù^åCuS‚%›è­uÕ$ì½Zõ~ì½ ¯Që²)ÉZ/ÃZ6s¾•~4;N a«>w<­wo·¢åN’ߺNÛüÓÅ5=Xv‚•fù5¤lê²Vôd9tù¶uÚöcëö#å5ïž^aÄžþž3µ¸vÕŠZñÖÅUÅÉ–Þ6nUDF$‰€D@" H$} pJwÝ÷´(ÚûyÍF—57¥Dþ(åïi^Oªç¼æ”³‘À™8δ"P9._UV ·ÁË0J–HÖ—S éWW±0†ˆ‡øø§úÔ5ÈjýZžøt¦2šq.ÜdÍ<˜ÆÎl¤²ÁÍÆ–Þˆà|MF¾ç5¦ÂØ0ë£êªêf¥óºéŒY.Éi\§¦ŒNpKÐÑp!']s¶¯Ã÷ûJàG‡‡·Ûûá¹'ï3çŒ±Š¹¦'‚¢œŽ±EJÓŒsU?k9Y¦Õ®z^j²cA¥þhe´$-n­·Z·ƒÂrПfœëëÑêÖxõ×ò´zÔ¸È^=ú¦=9Ÿû­^Á°×ú‘-}m,‡µ®*5§ñ÷}?QéU#R3ΙNÓGÅÚR£v£^)S_7i"Ò5X^^«.ÆÇˆ§úŒô1±V(ØG\ãÙ_þéÊ ,Ì| Vsܪ¬µ¢'ÉE šæ¼ÞþgéÇü]oûñfmÖï}¶÷š¬\‘–ÇWñ^ A)æËôm$tØ«qsªNn}º¼—H$‰€D@" ô‡À)gйöáª}´Ú2:ùcU¥àt5¯wWã¾xéÓ:ÛÛÐES~^^^d\PÝÄJû4tôÁ«Åû’C¥7€Ѿ¹,ÿ±z=Ժ͵œ‚7²ÐEðÔó`9 k Õ:z?úµ8—c>×ø‰<9ôùÆ®:R®|üàÅÇQQÐhøªÝk<íÑÑqÍ¢Þ3‘AgÞ:>ýñçú9Øæ‹tݸ…™üt2kùºêû¼ÕÓéï™Ø*Ε’,ú`•oÎà4-èõáTëÒ•vUõâ˜U9â§ÕsªtF㦿j2éËëóõ÷ªqÉ2ô>ƒœoË_ð´i›> ²°¶-oÉ0ߨòÓŒ\†œåÖã§ç¥¿gV‚!mÓT–êÔ|5j‹‡>)´|‘n£«Æðty&/PÕÅF@æc¡Ñ˜Ë«D@" H$‰€Dà 8­~<~ÛZícøWaþ_ËD5¥1ð_ÛÀR1‰€D@" H$‰€DàSº¸ÿ–8°‘ÉFºj¨[Ïøý–rüžëb×k}`̤q®GDÞK$‰€D@" H$ÿ\~73èÿ¹JÉ%‰€D@" H$‰€D@"pöXïuöü$‰€D@" H$‰€D@" H~Ò@ÿ É"‰€D@" H$‰€D@" øµú¯¨ä'H$‰€D@" H$_€€4Ðh²ˆD@" H$‰€D@" H~m¤þk#*ùI$‰€D@" H$‰€Dà pÊcÖøÈ3$‰€D@" H$‰€D@" øu8ÕQÙ§4ÐOUð×Mr‘H$‰€D@" H$‰€D€.î²H$‰€D@" H$‰€Dàw€ÀI3èì֮͜ïß¿„»»;lÝÝõtúû¾tÒò5=­Fsº4η¥µëyœé½ÆC»öUÏ™òêNÏ»?Ûô¾Êô•f[N‹3-ÆÜö¾¯vÐÊé¯úr}¥kiZ?‡¯žV¯—þ^㯿ž._OÛß}zõGo›~:ôùÚ½ve^|ÏAH°ùÑÊØ^mÈDT£ÑòúŠsž¾N¦±M 6?¯ÓÑÛækñŸ[‡&£¾^Û4ET£ï+ÓN—ß_9}úÏåq&ô}Ñô•v:ú+£—¿¯û3-w::}>ßëƒÖ~Zš–o›®Ïï+O_G_´}åktgrÕ—×˨O·åÓWÞéÒúÊ·åû[Æõòôw¦òèËŸi™ßÝéä>]þïA‡Ÿ#Û>?GwIkÀoÑ~‹:¬µê;ö{‘£oé~›T‰Áoƒ³V‹†wOOøÏÈÈ@\\\¿ß¤'è#¾644 ºº0™Lú,y/H$‰€D@" H$‰Àià 6Ðù¯££CPsšf¼ë‹ÛQ¢õ‡.·³³SæööÒ^‹¼•H$‰€D@" H$‰ÀÏB€Mo¸¸¸ô[î”z¿¥d†D@" H$‰€D@" H$¿*§tq?Åäú¯*„d&H$‰€D@" H$ÿúÚcGÓû”ú© j äU" H$‰€D@" H$³G@..?{ %‰€D@" H$‰€D@" œ5Ò@?k%‰€D@" H$‰€D@" œ=Ò@?{ %‰€D@" H$‰€D@" œ5Ò@?k%‰€D@" H$‰€D@" œ=Ò@?{ %‰€D@" H$‰€D@" œ5Ò@?k%‰€D@" H$‰€D@" œ=Ò@?{ %‰€D@" H$‰€D@" œ5Ò@?k%‰€D@" H$‰€D@" œ=Ò@?{ %‰€D@" H$‰€D@" œ5Ò@?k%‰€D@" H$‰€D@" œ=ŽgÏâßÏAQðììèúû7T©Õ!øSÿudýþ›‚ÖnªNæþñoPQ­GtÁ³ÆyþAôióýé¥;nŸ¾•´`ÂùŒIßdâ=`~œu;ôSůš¬ê®56«¦öÑ_µ’³bÆïVU®S±íCÿmï¾tÖÚì÷×VôÚ Æâ?~Ž´vû_h“¾ÚI¦I$‰€Dà¿;úǾ÷ë±-µÎúý|°¨•šè,ßë¯ò£EmL­ýlñP±³ƒ½½ú¥×£uÂÒž¿þ~FPë衚üóÊÿŒª¬H…$ëoS›UÕ2r†ðËå´ísFDgXá9™ö<³šê3ÍÏÜÉJëé¸Äsn&Óò¬Þ ôü‹f°³·â§ôô˜ÓÕJÄ3G|ìí¥óÕɨˉ€D@" H$gÀ) tþ³úˆãúØëë‹ðìe9cgò=ß§ìg\áø˜>­{&hþþð8eûþgªôûù,%:e%ïÿôâ¿ä5Úž¶é¶q «þÒµ|¾2 ôüŠ?½ ;í»EÏù?÷þ—´Õ®¶Rr‰€D@" Hþ#Я®}”t¶5£¦®Fà?o~eîáÙñÇ6¼½Õ¬ â<-_cÂ' PfO Š#òdcÇžCð ŠÃä‰ãàíŠºê ´´w‰™{{â¡Îª»{zÃß×[°çº˜wõRìh&ÈÐÞŒ[6#¿¸Éé#1zä08Ó*ëclåÕë£ÖEôÐG.ÕÛ×,“­,}ñÓh´<¾ªAÕQÜ3nt£ÕßKc¦4ëαö–&TÕÔ ËÐ-ôurr†—·ü|}àè`/ôTn;ëvcžš,*WõW“‹cj~ñP?ìy¦N“E+¯•ÕÒ5™9]Kã{Ûº8OŸÏ4˜N¤› È?¼ÙûrÐÜÚw¿̘1a–¶SëRg­x–˜ƒšÞ‹­Fg©=(Ü“‡½û+áˆÌñ©ðõrBw·ÉÜÿ´ö1·1îå®ògž*BÀ±œbìÛU;dN„?w¡Ë¢ÊËw¨ŒÞ›AŸ'ø±Üh b¬D)«µ]TM¹Œ¦› ¢²ÂsBͦ¾aßW}\Nð8 ?«jEà¾ÐÙÔ„Ÿ6堼Έ¬ÃÎÏ&£CuñUQå®>V†mësá„ÑÒàëé$tãºL¦Øs?íêÀ¹È+lDTrFd&•T–“éø¹³ÈLqÛYcMB¦Õžm¾ç?–ò$·w­œ%Ÿløk4|Õä1Z°éÇ («m%9ÐÚÒ‚ø˜8. î´¸ˆÛÆ\µx–¹-èѶõóóÉïT*…šÊJ´vtÁÁÑA!!ps&f¢ ca¦SL¨"º6¢srqGpP\H=&šëÑÐÔ ƒÑ(ðuvuGxDÜ]œˆÂ, g2t ¬¼­í¢ÍÜܽ«ÉÂò=¡†?¿WmuàºyF^óÖaÜmß‘\^ãÁôXo '5Eýµþ÷æd^zÚSßÓs@}Œ:ì{ºp {~:T„¨$L7>îNBfÖGx°ŒÄÐV~½Üœ§éªÇÂ’ÖÇ¿,£úîÅŸña¾ÌÏØVOýi=JjÚáKÿ··¶"<1 ãF„‹h•îÔºÊ\‰€D@" H~÷Ð?þ}„…>ŠEzþ®ï• )â{DùæÇÝfÚúÎPó9Œi ½™@\èC°—NG¯§á{Ó™™¯ÉŠÖ¨|ùÖ£ü=D+'¹„òÆcËEÚÈ‘#ÌyP2ÆLP.¿úåÓÕ›”Ö.“ਗÓ\…åb4Å}k]¹r×cŸÛžþ‡ÒÚ­’hX ˜o„¼šÀºL[z®[«_èEzö4u™ïÉÛâät•_B­NÅdTîøQ¹ïöë-©8B?ûråëµ;Eu†æ å­—ŸV–ÿy…²vWŽE KJïÉÔMõ¨ñÒ‚ÝÊ#÷ߥ<òüß•ü²:‘È}âLé±±ÑQ`ªrÞ³á+½Â”ìÜJ‘ÙÝfýµ÷Së>§òïÕߨ|÷Ú§T×õʤÄו£Ç[­Tc: « ]„ë6?RÊÖÏÖ¯?ÐßÊ¢ZAÕ[—®ݪ¼m0àt™F.dè¥ãü¾xjij¾V¸÷jÛ‡µ9Ý•dÑÄËÝš­ ÅJ$^VŽžh%5ÙwL]ʪW?'<.WxtÒÜ©¦Óˆå½Àt=ÍÊkw½Lt×*wÞþÒТ>¨F£î=£rTÙžT´&°9QÉ£|ß.§ÃØÐV¡ÜraÉ«¾?ù:ué#Ju›ÚN½}æäþÃ2Y‚ÏâƒÛ”EsG žãÏ¿Vɯld,#?sZÈݵ^9rº ›ºè>åX¥Š=ìß®\þd+¹€påÞÇ_VŠ+ê-Õ¶ÔW(oÿíQ%Q'?¨<õ÷”ÊÆv]½¶ïl•…è3f%U u:™k±ú7ÂR³ÍÐ_ӌۣïoôõÙpè7ªâÖË[Q:”wž¹I`c7}©r¬ªM”5vw÷Óúî{ÌWÔ>f­¿h/3Yø² ×Í¡½¶DYrno_âþtå}Ï(M•‰UŸÑW.ï%‰€D@" øB ÿMâÌSFc6åÓ§…nc·z£û%m-3=¦ntvD®³‹›˜å}>XfSȰ3üÍgG3äÎÎNæY”ÞYž‘éé6 “ªsw<ýÏàÙáp ™4žEjk¬i»vecÂôÙp26b݆Mؽm>xûUlÞW€qCÅÌöU¯££ª>ÏpÐl ° ^½<Ç:i¦T|‹•¼ê쟄~ÄŒÍ\µÓl“éïäȲRQš5â:x„ƒ¡«dÀ‘f²yöŸ4¢¸6›¤æÓŒáãæê"øª8«å™ó2³ã¨%0åŠxá­—5MK? “³†Á FÜŠÏW€éãpÎÔQN;Þ¹ùnüHtáS0uDª(¯ÉÛ7&l«/Ç}?Cw¡˜2kžUY±üôÊfIý w³‹°aáää(ôÔë.î©] ´bÛ¦U‚Íüëÿ„eWχ‡‹3"ƒÔös ¼†.j;êD4[åæævR?Ódm£Eú¹ºxº!HåI¼¨SRhm逫»+õsÆ›gÕÔÙDno2 ·…³‹£¥m9Ñ™ÊÏCá '’“ƒ†µÑ`ú3N4›©ÍBê1ôŒ…Nò"±£>äB³¨B Ñþ¬²šO “ˆ»?®‡¬8K>?Óì À²³^j&]¸‰Ô­oê’ú½Ï;?;mØ·åöÃï|21^¢ŒÖ 4¼êË«°ùŸ¹ˆÄÌ9g ¼h:¬!êꌯ‘Þ)н#yÓØÁ'ŒgàƒààbÁÌž3–UÓ•±r¦çÆÁŒC¢Vƒê]„‹«;?_j´wE›ª¸ëÞITŠ “_Jœ¨¯©íNéTÖ~"ÓücG3²Aƒ(–ƒçßùS†ï/µûèdRŸån£Ax¹¸{¸ ™T¾¤ñçvi(/ij.Á;«öˆ6ç–Š¶¢a~þH†‘#G!*Ä¿ abCŽͼÒÇ$Ýôt`ó?bßÁTVÕ¢ÇÎ ¾þ~ˆ!yÇff"*,€äUph×ìË=ŸHÄ„ù#ÿnìÏ=J®Ð±˜3w%F‘1¤~œU” {÷n),B]c+üCÃ1dh2GŽ€‡Zª±sÛlÚ²ÇÊë€Ì1ã0i|üÉ@l©-Åú ›ÑjrAêÀ!ðuì®Ýû5h$2‡¦€?ã¸M„‘ÕÓ‰ìÍ«…qŽ¡¸ÿ¡qîäLrá¤@ÂäšÕ_¡Ó#MõµØ¾v Ú¸¾8º{+Þo/GxÂŒ’Œ‚ý;°qënÔ76’±k_j³èøDŒ=–Ü•PU”ƒÕ߯C0Õí4b ¶üð5JöøbHÖDù:cÛÆõ¨lêBúèqš ÅØŽì›q  IƒÓ‘5bˆXNPVr»vîÄÞƒ‡ÑØÚ‰Ð(¤¤ BæèL2º}Y1¡ciêjÇŽu_cíFÕ1R¼¢¢‚úÒ@„x¢ÇÐFulÖí»p¢²Š b¤R]'N2s?+;šÍ[wÀÁÛC‡Bws5ö,ˆÑã1 !RÔG*™ÔЇ5Åì{hÉÅÞ|쩪DΡ:øGaÒ9Ãí;Ê;´+û³“r ÙÁÝ×!±A6* ñ±‚,zJ”Fu.N,/:†› Py¢‰>àMpñp_¸¦Çcààh8“%TQX‚ÝÄÛÎͱq¨).á}•èqrAÖÌÁžC“ú¹nhkÃá=…8’Sª²V²`É-<CG¥~0u¶ã`vvm.DIA <Ü‘22Y""Äv&#r²sq8¯žäEÉ^‘_ŒÊN'Lš>=ÔW·m)„ÁÎÃǤ":Bu]g£ŠŸO•%eظ<ƒ‡ŒáÑ–þɃ–~JŽî?Š'¶UàÞ{g#!Ž.(Ø‘Q¢Ð Ý¡¹ÈÞ^‚VzôƒB=p¬¨d®‘ó‹Å8UÈ0ê³N\Ù`äÁËŽÆ ¼úô}xŸñÓfbóÚï‘êKƒSæ~ÁǤâÓ­¢wË(QE‡/Á¬À»_l¦ÑÔAuW¾|W5Îç/¾?t7¼zjábl“¯­¤¾ï1oú$†úÒóÖŽœƒûè½Þ³põôÃŒ‘˜:e2’þ{_Xű½ÿÅÝIHB<¸[hq-Ò–m©R¡Æ+¨;uÇK•B…:®ÅÝÁâžB\÷ÿÙ»I Ò÷ú~¯ðß›»wwäÌ7gfΙsf6Ä_)礉§b°‘qví=ˆrÍÍÛ´EŸ¾ýоUÅ·ù¹iØÌçÇNžÆ™¼Ør‘³AC?4oÕݺt‚;û„ª8ßâ|Ãùdßaò¶;Z¶m‹~ý MÓP¶™Î_Jᵤ¸ð«¶½*³6nÞŠŒ¼4 @Ë—PÂÅ髬9Ç%œ´ÐÏ2+¬Yf;Ž)}ѱµ,k8ºoöŠá¸7òâ~8‡ÐæíqÃëàP•Më×áyI„‡Þt#šù)z¥Œ”ÓDZeó&D‹EqY5Ã"ѽG/Duh Ù`mçŒÆÍôÅÓüôc’„¼¨¾Ì?&&&&&&WTê µ.ª1;—jT+D Ж¬ÝS·Ö®JÛ³~‘ÖÔGâÕ|ܯіn9 ÒœM>©u³K+:›¥ý0ýuu¯ûmOh‡cST~gâh´a©ûMÛt<¯ÜG^™¢£—{EA¶öƘÛÔ³×>ùNJÊ ’4ŠÓê^£¦­ÏKwϳjégKUþs>~ù¼g5ugÚžw?£Î*PñNØ¢ÝÕ¿q=q#´ãIù¤!S{÷©»õçžm´;o¿¥&î«ÓæhRZvÜîš{á{Ô´Ëó_ÌW4KAâ¬BE±öÝÇ:FÞÁÍ´7&~¢mÞ±[;¯ë´K¼ì¸ÃZ?K=7iZ“ÿfh i‰Ú×ë´îÜ©æ™Ôq]us ʵèõóôûž5ûÚ¶ÿfí^-5þ¤6Ä’÷§óV)²ª‹s´‰ÏTiýp–ªWfÜí¶n”p%®M°Ö»Wš²~Ù°W¥£µLã"Šº.?›¡½|G§u‡.´«êå>òöZYi‰¶ô»I5éë¶GÔ­jÑñº üÞÕókâô¸®WÍõo¿o¯-¯ÆMµR[ûý"­ÞÔîl1‰uz‹ñŸ!þ/i6x^{ä¾_´´¼r¦+ÖÞñŸ=¡l6E»3è#­;^×\çá»~¤‹·Î ;oÒ1mÿ éZL‚zÎB¦{@€´ûÚOÖú³¬æŒ…‰ÚÆ‰Š¦Cİ @IDATk6h^xZkÆgƒñ¶¢ŒÆüû5úLÛT¯[iþYí·)óØß^aœç´xCëÙ2F›õÃ!­ªœ.å32ÿIßÚó÷~­Ý†wøüymÜãóµtU—2í§wfñÞSÚ &iõšÎëQü|¢%ç”hñ{÷jáWà7µM;ô¾FçãÚíÕåÚºVðùãÚ“6h…¥T! Wqã»äl®6푌÷º¶|Í GÿS¥m_¼õ|ø í/°¼×´ni=YŸW_ú]ËW^ÖUÚ–E´á˜ 5"-OúZ{°íÇŒÿœvs™Ú±Dޤeös³yoóû@ë‚Wy­·_ÞÕ^þ×í~ÿ÷xo<±’g/hS¦mÒŠ¤IoÜ­=à%Ûl^P<д V×aª¶fc¬‰u7ØEÜ•%T”di¯½‰q¡-ܤóqe¹žié¹líµ{®SÏêò¨qýêÔ95®þZe‰¶h–ÐíÍé³µo>™¨§ë2B;‘¦o)Ñ ,ÔæL|Z=›ôÅ,mÖgï«ëÀ¡Ïjñi²5Hw§—†º6þTej¦â^ÿèkZNIµ–zr¿ÖÑÒ¯Þþz±•Û¦èe7ªí:–&9j¿ÿ"Ûô>8ò®»´v õëÖÃÆhÑ úŽƒ[—k×Zâ v«6¨§1¦¶ÒVí:®ò?ypUM>­ZŸ¿5`ú˵2kµ¶cõoš«%¯ëo©õí¡§k1TÛ~$A§•m`´G ñÆ…<³\ؼ”Û/tz:ß½î|QñºDݳa1ûoȈ‘Ú€®Í,´¶Ó6ŠW¹ý:MŸŒôu¿o¿ïam@G¯šúɳ{ž›¨eèmq‚óÃ-×:ž÷ÜHÿÍÂõš«JÓ‡÷Jmý²oUܧ¹%ëœéâ®ð7ÿ˜˜˜˜˜\-~w”.þI·fJм´Ó˜5i,NòúÎÇ'ààñÓ´€ïÃS÷ܜۅ§¦|‹ôü ¸7hˆ7­£…ô8V¯YÍýöaʛϪB¿~w&² hŸ¬*Ào³&aï†w„¹+· žV—OßNÅ£¿_;Ÿ¸³JHݾ íÂýàâé‡QO¾©îõéÒ!þêÚ‘÷¿¢µéà‘ãØ°j)ŽEïÅ´·õü¾š:‡WåÓ’#ñÀ1 bÝ÷B[/|µq=ŽÁ® «ÔadŸ}8AÅ™3q’iá–àì¦[òáÑ 1Û·mÁ‡¯<¥žmùq:’ÒÏçðËWïã§u±ðèz=æý¾É)ÉØºv1Æ?7Z¹˜ïÚ¸¯LùGŒÅ¾]ËñÃ?bõܯU>ïŒ{ÇãsH“#®Y†"Z0o÷žzj<:GÔà"†2‘Ü`ë„6{ËÎ$ŸÀÏ>^]» ÷àqÇÝ£1ó§%È+®@ƒˆ–˜¼e9®bOÄ[Ÿý€ƒ‡â½‡Fð0>OÜ?a+öìÆªÅKpêX4¾üHÇ`á'ŸãTb6ZwˆEßOÎÆ"·ñü¼|=¢Å QÍi1­FÃî  Nl;H ‹gˆºôóö¤¥¶û·­ÂoÛIupü¶è[ü:oiá^ðó·ñ¦(®'¬ñD°s÷Å#f`ü}qäÀn ý2¶î<€7Ç Aü‘]~ß3*Å„I³šŽÝ–áÆÎ~Ø3ïs|·pm×€ÝNõ`ƒÌL+Œö9Œúeе^…º.Þt¦å¾•´lÙá¡7"îĘ>±FÀž´¨Hb*GÜòÒ´„>…iëïÅëïÄs_vÁõpšŸRO^``z:ÈI„zk¡yT;ìØüf'Þ÷—Ü7–ÀÐA¾ØƒlDóp: âŽÝža9}ßì€Ý;¼ϯÅ5nžHMÍ©“ú¶c;cêS{A|LúxŸúƒÙ ‚·‹ bé0åáð@ ÞÙ:ï;ol‚G[zcÚŒƒ8|$•¥q{…»3Úî.Õplä‚_‚É›ñP2nË ËoÖ]êl¸’ 4䪟‘msò:Ý{Erû0¦î ÎÁSõ3‰˜|"¿}‡{oo†V­u×b¹&9sßÞ…x¢5ztZ]ÿ…5‡F¡û(7lÍéä#;²T^B¾¾‹hUŸ¶x8Þu?ÞYp3& o„[OaǶS¨¨¦ç‡Ÿ Ú’^ïnxê—i-¿cï ’ØöE*zØ»6Þ‹{ F'n9´!çJèþ_x &nÁì¼sxêÑŽøîØ#øùĽ˜òx$·„¤aÎôHæ¡]ÒªTV…ôzƒáESkÕµ‚W@¸ŠÛÿ·°jË.Ù¿ž¸KÝ{gü‡´®gªëkaøƒ/ãWgàé݇æá:Nv®ÎpptÔË£…wò_qϳ“ñüÔŸñØè»Ñ8ˆÞA ^ÎNp¦Ë¹i[n¡û·Ù¨[8°{;–ÏZ¬~toß>Ž<ܯ,º#=7®ø¹é\J÷t&§Â‰2z¾hÈŒ=€Çï«nýòûVÌùö;,Ú°wõðÆ‘Å_Ò¢|”^:iøqòƒØÉX~õ+~ùñü2o ^üNÞ9Š_—¬¦ÿË j…õk×ãø©ÓX½j5ݸ7àÙ‡ïPyÏ^µÜ9„ÂŒ8¼sÓm O¦}¿sþ ?ýº/><8¶+7n\¬=¨œ«>Xt& s¾ø)ŒÞᆻ°bÓ.Ä?Œ_z@•É!Ü:bÒÜ|öú0àÝI³çãçæà·Ëðʘ[xç®Ü€Rº³{X¶b!´&}õ#¶lZÃí:ý¿~7Ýïˆm[6àÍçTùÏ™¶Yù 0oöÌßYŠ.ÃÀæ}G‘’p“^£âõbâ…ô­Âkµ|¤¢˜LLLLLL®"(©ý… ÒÍØD¹rèB|xyšº¾žn|횉ÐŽA¼ž2g9bìCÊ;™h„ @8pÛé~ž•‘Šƒ»÷¨t ›¨¸gžÉÀ¾=ËÕ½Q#車ÒâÔØ´q¨Ïâ*.?D•àêÙ®–ƒáN·Õâö¸}?Þ}öUºÜúãž‘Càäé‹F~8tø¶¥ÑÝ7nÁ‡DÔ¢«gqS—Œ¤6z†òWW+;W„‡4¢²M×ã4žˆœ†èz:4'[=XÈ@ žö;òö[JwR׊\¼ðîFhkîïÍËJÅáè*Á«<ÀzõVnÝAèrÜnß…X½w“zÞ *+ÎÅ^ºžžŠÞ¥‚ãHKËFhOF®Ðo½úúT<0²?]®¹“nûFCÊ^OQ€ ½nÄæßÔ'aáz=¯ôSG±\> Ḟ³ðþó m‡vòA¿Á‘MЮMKK¹@£À*Ÿ莛†¬¬L*MÊínhÛÖ²jàèN·ô6hͽ›2sy&AqŽž—Á;ü–½£hÈ"Ö°¡‹¶ ÉG)˜/Gnz"üü|ÞæZ´hÖD=Γ¶’´¢†6m†¦M#Ô3ï€Pt¹Fö×SFßtZ)àè0ôA(jB½»bÐÐ[±lïgغ'ù\˜°íN… Lš1 ƒºµGEIq--š%šüL£czûv>ˆêÖ’[#à0„nÉ b‘³½g²Š$ÛÈûvÇáľ“8“YˆäYȱC09Y¶z¨ Yó†n몭xݰ‘rsèF½þ0ÎdÒ=yV£•{[ƒï™¾Œ4äSµî7¼ · ø"ÄÏk_9‚sTùu…¿ )q™ #<ú ÆM·]ƒÆ!ªØQã¡„ÛDvpsr¨|´Åþu‡‘Æ-g’rSÉxHL9ö âÞ_+¤*Ô£_3Œ›p"‚\¸§¶®ðo†C»énž™…Ôä*ø'Tº'.±ÁÓ’°\šÖ'ÇlÇwÅtëÏÄ~.¤JØ}ü$α;‘G/Œ¹+73Gb¶ªh÷ß~'÷êÂ6Ô¨îÙqŒ°f™Y<Åþ›Ír˱‡wâûâL$R€}ûv«x{ŽG÷`ØQ™—ЫgŒ¸y8¹mäL\4ðÅ/pí9£îº }]QN…˜ÅéÁžã ÏS9“Ø $)n2×vl©Æ²>ý‡ï|ÉÕØµˆMIGÛð†jRÍ?&&&&&&W-†^wÉ ŠØ.Aì‘ Ö š„ÚDˆ“àÛ@·ØÈµ‡a‰[_ùËÆl‹¥qòxè±§Ù˜W›¨É•+ÁþÙÂÕc„…„)Qr§Ó¶~Óò%?DI“ر'^}ÿ-´¤’špS?z?Ÿ1³aðu½awæ8Æ^ß ËcUt<8v<"""ùc-²ŠøÚ1ý6Å2=ó*~É~¿ÌÓ‡ñÔ½ýñÛ6]Á=ö „6#½ËWÑlÏ[”-ƒ$uà…NÃê[¬¢UWWÒʨ¬”s±`UW7Æ--¥0NK CAF,¢÷” ïì9¸zûã‰'G÷ý6pw E|Õ”žOZ³D Ô…Bý®þ×Pd«ªmÐsðHtê6IÉI´²¦Òƒà Ì]„ »ö`ꌕwßmhäXE¡]¤^ÂÏ×.‰JÈM‹;Œ7ž¦µ}‰nK»÷_#Dæekù´m £g (Ê•ðTÄÒ£#dðŽ|ëýqÿ$´jòR7ã½áå¾Â×3&ãk#ƒ–ƒ±ŽÖù~š©vR9Yp¯¦QÆÕ$H™%4›Ù9ñU\– åëм¼ôCÉäõIžÞº’Z%0‰÷…¡,SlàÛ€mÎ ]-ñ¥kžÄpO*ëGrI·”ë7'xø VÂÅÉrØÙ.ÁøéqèH…®ÏèP¾VËÉ.Ù8G^«›§Ô¥¢À°$ýŠoWáý'Ð^ô„½àZÀýîÄÓ …tU©Ö1–“ä )Gx…Û ý yY⑯DéO¡"ïì9´NùTòu{l”“¦„è*ªéШÀ¶ŽV¥A !ÝéPV¯5ôöqgÿ·†_/'ÁÙÝM[»«kõ‡eJ¹²×¹ì\>ö®ŽA"\Y—&ÜK-U\.påk½ô€ª2 g”(Uå5;'™ü'u>–‡LÖ‡ÕCÈà`¼ÚÃM›ø0’ôn‰Í\tŒ„ÃXgÚ‘™Ë’Å"æãH|¬ØÂGÂÝr_”¨rRçåeôkñœq!çT¢œy—Û/èµ±æWYi„´»a…ýÄ9nœfݦ2ÏÄkO?Œ3ãÒóy_›–¿ûwôú 6lä€uH: 7ã…Çîç~ïC8K¥ÛÉÑyk>CåŸañÆÃ¸©wö?á9 ‡yÐØ3÷ÆZêñƒï}OxÍCˆƒ­ Úñ[TÐ3gÅC@-ë–³:èÈø6…•—Òóâ(Ï-ÈçˆmžcÇ"ЇÁ5 äa\RÑÉØÓ\T9…‚„µˆµ­@`›n°ÓÊqpÓZtè3̳1ž~ñD4oŒM»€^ÜŠ+ ³~!NÄÆA XND‡Û¶;Bxn†ÔN‚´ß¥÷ÌÀм"!<8D¯é´éwå/¹Ð²]ü^ŽŸŒå¸x\è ït#iW‚ˆ.m¸GOɃìÙ§eqG‚ƒ½,»p´,!Šïèsbï¬î (ÂeÒ׌.îËW™s«³‹ýOdaS„05ßÕIE2ÿ˜˜˜˜˜˜\ѲÀÅ+AÉAì¡yü¨ÓÅ)„TòtlŒé:)¶!¦Ÿ>BÓR+Ƥ¥ƒÂ· m”%.zÏ6¥œ÷‰ß¦„k[†áÀÚù˜òù,&h}b>Vt57•“§Nð0´Þp¥0YNVBX#È)ß\èöíÀ¡ÇÖ¢¸‡y8£¢¬‡wlÑ•óÎC±ïçÏѱq#º¯.ÄÄO¾„›-v‰GÞ),AÞ.Â~ÌÞ ºrt6-ý½Ú‡ãèÞ5˜<ùSJÿB¯Šn9‰B•9ÐI‚t‚YmbR/[; ³º¼†CG¢1¨w'x:±.Ò3ÏP!½T ÏéíéÀSŠ«*ªQYm‡;ƼŒ[ï‡l¾¯ýäá=˜5ý9lY‰å«w tuø™À"{¡Ûà] ÖÄ^ÞÏ̸÷4R’³Ð:Ø•<>5)]Ýw¥¢.–1Kó‘i\ÎòP Ë¢Ž‰ŠnùCÞ¤fLÑÙŠfG{'š_’OÓR½YVLìÙ†ÖH:•ÓãÆÖwÓ-Ø+™ñq8öÞI¦´œÍز°A{ ª½xB3Ý Ó3°ú­h:ËÚâÃOúã±Ç{ðåõg1óíTºª¹³C¯“œ^íÌ8O97¯’ogž.´ 8âMAër8iÊ=šÓ‰9èØª!ël£¬Áç ĺèH…³äË[Ÿ€nQ¡l*ª¬j|ì<¼ˆ-¡V^{e¹¬P ‚= äBy=+! »·Ÿf.ˆêÝZЮ«´T(N'cÉÄ“¸å†¶hÝ&H "½²¸a¼ÓYîT!†ï4ŸÃeÇòà:z§½e¬•’Ã$YBB|¢¸±YÖƒ*xx{©â=ù-J¶,ËdÇVáÞ©ô”М}‘*6ë’’…2æåʶÑõ:Q¾uZ„‘„•¼˜—œÆ®ãÉoÞ ã=;1/³.(i\èò¥6•’,‹uáü°§dåq‰Ê~6psÑÇÉOòÿ«Az°£Û4êwÀ’܉‹Föpön€>[  egzåpëN0B²2ž G?OTqk-ÇBï¾¥¡"qî\âlNN§äÀÛÃÙÌO磪²¬]:O|€çË÷ŒÏŒ}­¸U¦´„#èïåé…È.TЩ¡:Àƒãn7z÷<¼WÑÞØ^ìKgR-crfFó¤÷¡}:óÍTܹh–š’kGTžMf+êá†[Gáþ[‡Ðíž EÃr³Ò‘WT —êBl\ñ­ŠtÛão⣠Ï"Ô×s¿™Œo¾Ÿ '¾@Ðuäéù*Tfá–;À½#@†RqgÏLKæwÜ9žª Æ6ý²¾¿Ö6|¿¹åÁñØSܧ-ì˜Fæ9 ŠX¦=û¨/gÓcØí÷áÞ[ÑÀVñXnfrI¿7-öÆâ¬ÉØ'Áè§nŒolË2î)ÂG¼yx&<¯xØaÂisÞãNzÒ¤(å\òñä!¡þ]S‰Í?&&&&&&Wª ‹PqÊR•Ïg|ŒÕK) Û —ÂPPÛ¸}x?ŒxýQlxósLút&|]¸Ç¸ú ¾˜ú²JõàðÞ nˆ”]ºé·€§%Ÿ:›³IX0žs¼œ^W¿ºÀÂ} ñ!ݲéåç |÷9•b†ôì bz’r*®¶üú;&{P€ö°¦åy'¬Ü¨îßÄÓÁ¸Ÿø(O‚V¡0.ðGP‘q Kæ/T· (d×äGwR å¤CIÙ÷SíK÷Ã8•¦`ÅüßT$PðÒ/ E9Š­(P*PXQž×ܳ\I+k(ú~ ¿mýï?÷li¥éwMÄØ€‡¾>‚£‹?åIöONžF·rºí÷‚—‹âè:íçµøôëoÑØÞy‡UÆJá‘+]éù£Z ‹ ‰û㩇žÄ wÜ=®áþj/$žŒÆ¢ßôz<5¢'òµdÕg³(üŸQ¯_ºþ¥ »\ÃpF̸“Çà¡åbõ TO !TWu˜žîÈ?¡¢ (ЯÆ"¦7Œ…øX,ðʨäóØ'^Ù ’.öƒ¸ˆ±*gfÏþ¶åC‘qr^üø[‰Š›t¡pmƒdZàU(ŽWB¯\×¼ JRç/­¤´ÒçCÈÜL¬² ~®•XùåA,ç›:SikÒÌå ylwZB/éx Çýkñ|†R¤S%7,­bÁNOy§vÞjzT~gR’ųì:‰¬§±ó3YTÐPT¤/ƈijä3©@–Kö ¶”Py(ãéï¢XX¡qëP4Ã>ÌÝ‘×çžü¶´ç—`îû»Ñé‘Þ|^8÷–ÛãûIüb3 ²[ÁŸ.Ú9É™˜÷ö!Ü:å7 Ey±ôB.¨È«³tÜïœÄdŒ»{NS…Þ°-XWÐɆO-ÞƒeT6¾Ñ„në²@£)ÅW:dcCå·0+¾9Âg< ½kÈêº£Š±¿/-«¶X]€“¸ëœö {B :´hŒŠ"¶ÑüŸ`Ô /Œ½I-dJæ¹Üþt4úªrèíó«*/Ÿ¯&“Eá È¦7¼¦-:†é3>ûVCPVKe~¢†ãÙ&$ˆAÆ'ñÖ©‹¹ÒÙeðækû¼ùæöúaÍ‘õxiÚØó —ª\Ìž1Q¥Ïà›6d: ĘáÙ«0qú ØkÅh×<‚0yXúË÷°€7ž¿—,K-\Ž$¯‹|†R^ÃùŲ` ¼S$bjÇ.ŽгïcøfÕT¼ûüt¾i‚‹#>¶øiæ' Moz-ÃCÔµèý¶6q-ýQÝ4ÿ˜˜˜˜˜˜\U\\AAYäMÃôËË5ËbMÝêÏÛ‹{î…;‡ãÑÑølÁ|ŒÜ:¿&ÆÈ‡ŸÇøÑ·Àï$nÕ©nî,Ø·žˆõ*N—.õ¸•TЩ„Øxâ¶ÇcÓº…Xs/£žGu»–ß -£z¡wÖXµõˆz¥ÊîîØôó»ṵ̈ä­yá ÜMgCÖW„ÞÚj뮡“g»‹¤6i‹w—,EÅ£C1wÖDõÑs^þð+ŒÒKýTïGWWgŒ¤F´z¾y ™½-sw“jü:z#R©€úPÉíÓ5~0€û¼½Pê‰;ŸhŠeŸ¤ãû1ë0›ÏÛõá+ØÜQœd {æ!Aòò¥šRBk ñw Âð/;"ù¡ÃØMÅoÅäChÛ͇ º#xU)ßé]7ìkó¢õÍ9Šùìá«ÙhM–Фk{¼±¢ ͨP›Ÿ‚WçÇsÉ ’Çq9`Þ«nmÝÏo½Svbïw XòÝ Z¡YGòt1ýaF»‹µŽÊ *—å¹é珞¼Å:/ÁÁÅQôàK y™XÿôK7ÿÕOÄ ‹CStíÙºÓ ½HÄ"]'ÄŽÅœ 9xöéžÜ׬žˆ÷‚e‰ >¡¡¸wr/œµI[s1uëF4jÿ¡îh¼´î|e›ÜÕ¿ÆÎކ_oǺé©xmÍ2.Uðõv¬K s›ÿˆ³ZP´s¹£Ý™sö% ´|7#&.tÛ×ë%ﬧuž÷àž„?øߥµ’ìÚa÷Ñ›`ÂxPŸä¥÷#zÞXêV;Jl3˜˜˜˜˜˜\ ÐÐZÿ/wEÏÌÏMG<݃é J+Ž.øˆÀ#Ê™]0C#Óï§=w&Gá{§³QE7[ÿF!hÛ¦5|ÄÜÒOÑE2ešßçÚ>Œ³³²¨:Ø#²I¾ \<ÓâO`Oÿ­¶sAófMáÌÛ²yhµƒš4á‰Ð”úèŸ{®H¹  U†òæäêŽà`îóÓ…3):-á$‰‹QïlŽlÒ”ÖvG¤óà'7nÖ ®v|óIêÅü¼ÒrEgffš‘‹C|zI¥ "HŸ÷óf¥§3ÒËz{Q‘IKŒCZV.ÝžÝTW*I…gyèßk]ÉxÁ!܇ìã¡(/>‡XÙ7IK`)÷Ó:ð}ÖÁ¡á£¥ÌA ÕH¥‹ã©Ó È/(¤»µ=Oæ>ÄFÁÜ“Ä3²òÔ;ÔK+­áOW×à€ÌWS½]T!uþ¨÷ƒ§¥Ò½<›VXZ T›Ù!0(Œô‡)AVš_°«àøã<ì(+Ç1K¾ƒ½UÓ0ä¥'`ïþÃ(®°býš©÷Œgó`À2¾`,<"²¦}Ïf§á؉Xî—/W­E4mÁ÷Â7@%ó=x`OSÏæ{ß¹·º)-gtßN£Ë»•«ˆ° uðUñÊ¢{û9©7÷m6 ¢˜ûÝÝ©¤ÌȺôÊ©û ñ§‘}æ\¼üÐ$"Ôâ’ª‘‡#GŽ!‡{ù%¿°ˆ&|u u¹Ä8›xZ5[„„E '÷][°Ðsàßh5d§f"ƒÁ‰rM› ò Q\®¡]Š÷›Kº‚œ\¾›<ÅUkˆ€wä±®%Ä/0ÔŸ{—‘ÃCÿòDSG0ÝŠÝ©(VÒzìài¤¥ÂÓß ¡átÍ/.FNn¼yÈaH§òrHLä‚5…À˃>· $Æ¥£ˆ®ß~A ÐPç5¡%+%ɉ¹(,뱜dÎà#üÉ·z?˧›ôéØ äáY|îJ~öièà0?ö+dp›J&O(wvwC¨r°SNôŠÛŠòÎò\ƒ\nï¶A`HCx{‰vX­óסç­+ñÁÇ×cìýàÆ¾[§ù„,TÃÌ—ƳÓ3ñÓï·aØàæêþÿTqv<8ã‘v^î—Ãæ¸–›S7¾ $”Žý–n^B·îÓ§R9žèVOGŽIÞô  ÷ç)ô¶H‹OG6­˜.ÌGîÉð‘¨ß³wqFX“F ·:Ýâ3Ùù<ÁÞÁ¬³œX/¡8ÿND'"=ƒ^<ì/^þÞhNOo9,¡†UäÚÂG•¥Ùxï¥'ðúÔ_±`ãnîÿŽRíåH»œ¼}þþkT6?Ãø·?ÆmCú¡Š¸”Ï&Í[ñB}߽䥂Dô¤DöŸlØ8ºðHÕGŒxzÙ\nán©É HIϽ‹7šD†Ã•nå4Û#%ñ4û9û™¨` 2HÞr€p߯+ôyÙ8~ü²rxp 9ßÛ×Íš7WýE-ÞZ¼†ÎÉÂI¾"3‹[Yxj¾‹«+üü 7gUJ™ŒŒ“œšÁ=Õ´;»À§¯>FJyÕô^ˆ9Ì÷ 'ÀŽJ}óæM¸hTÉÃ)³aïæƒ¦³,íQRÀ±ðä ¤q¾)«àv+4ðóç8©ýúœÔI¬Íúü ¤Ú‰õÏG7.|Z#áÄ<Êm(Îj¾±çIœ™Ó\½y^Iç}q¥¬(Ÿež$¦<ˆ[y-ô‡…G¢Ï'HOŠGrz&´¼86FÀ•‹B™)‰nì›R§ºmj´­ùm"`"`"`"`"`"pe!pQ]ªašV%}iýJ¢HGºPt‘çu2¿Üò,²j”¼4V<ÿzšµO]½»'¹\Š–Kbxê+ë"Që½m¤7¾ëô'7%­Höõ¡üŸäk[oaá3á·Ká¬èe´ ãÔWŽqïDL6ý wO•NÚJ1£·)ë­¡„'8óíúÞr*ÛòÚ1‰#VYñzýÔb@.-7ôJ ð´vÒêÊ8Å¥(£÷…ìkwpà^iæcC¥AáI\my-îÙ…å°çb…3-À¢f”–r¿0{£Å×…ùI™eŒWRH!º9Ë}fTÉ-ÒF*/. ÒL×_ynËtr€œÔĆôò¶Ê›¯Êæs9ßG7®õ¼.^^UA6¦¾û¾Z¶|ûG¾ÈX E3· ØÒâ0}¦}õ9®ïÖÁÈú¢ß—C}‰Uyx±{’þbõ7ïòÂ,üôýLlÜÏm)ǰ`Ùv<ôÆ4Lzù ¸› z}M`Þ30000¸"ÐM!]( ¥¾hG 1uS‰§§ÙH|dŸ¶X5D¯$Ÿºåé–€úâIz½¼ºéë^y©{¤_½÷ö¢å^˜ŸÔ‡´éX9QÂ.N¯¾¯VÊÒëv>fui ³Uõ¬[WI'eÖb¤c!yŠ‚§u¡ÃB“^Vmù]_0òc‰ 3#ŽÜ¯K×ù´\(‘«ÒUú‹a@*I§(F9F½NRnÝ2 :„®úë­ã]—ÆÚ4*3þ©Û&–6“Hux¶nzµïÓÂc­6‰{± Š¡œn_x®ö 3¡[‚ä#ÊšÚ+@¾¤2© ÿ0?Q˜¥ñx¬¢Š+iœ]íéÚÌ­ TY}¥¼;‰"O…Q”A‰S!Û%,ý£”é¥9RU[¨ KþáL¥QÊ/¥"É/*±|o3ã©Àô²Çº‚tè´Vë'A3/Y ²^Þc`-Z<©¬ WGÓ‰«¹#~Ù]QJ7l>¶µ§¸hzÓ*úD1—`M¥ÇAžqÑá¦ÙÝq+e©{±Xîé% ékËmé—~£k¶¾¸QJå܉¸\ÁBèÓ¨0W˜ðlv¾:‡¹‰›4‰’]Ê“üU]YžÔ­œàÉoG*ùR·rÒ$Xªt‡÷#U?æ%^3ÕTü y_øÈšîèNl[•?۵̲§YnHZy¥œÛ@[êã++„4¼ánU‚/¾úÿz£­¾°Ãöóð RU–Ód¿»Z a=ä@Brð‡ ÷ŒqDcÎyI’žÏã2ÎécÊyiêüxêÃzýZç!£l>'Ž*H\¶éãñïy fÝ:Íuèc⦯Ó+üd\ ³Õ… ã©¼È ŠV2Hß±Q‹H¡Í:ânuruv&_°ï©4F>‚M5Úw®€¯§¸37ޱÂP,UÍFLù®ÁWêhŒß–2 |:ÖÅÕHg¤©›—‘N¿§c­×I_H“ü$H<þQõ”ßÕrðÞ©½øî›m¸{Ô ôîT‚&|=£ÑÇ &&&&&&W>—´ ÿåêÕ& !ãÂ<”ÐÁ›{nÄ¿ÜxFü?ûþwóûwÓ]ŠžËÉÓˆC¤Î—//•ñEžÕæ¥G¸öFܺqê»WQ"ÄÖß¶* ž±¾ÞäF9ò°nùõF¾Ì›Fžÿn~’þßM{™$šÑ®.äyMÚÙ³r&¸è!Æ žîrè…zcAQq Lø:<Ž(Þ æñOæòú‘Þÿ š/ÖoŒ¼$^}qŒçõ=3ò6¾¸2NŠ’{9iŒ´u¿|.'½WÒ_Nüºå\Îumþúد"˜P^ wîÜ9ލ¿–­’‹Fö1—Lr~Tó×ÿgˆÒ~©Å“wþ?c³º&&&&W5¦‚~U7¯Y¹¿ Z«Öß•£™ÏÕ„@ýÊ“¾ £.ïH<Ý…½öYí½« ‘ÿ]]êâýgTÔßn–êôœZ¸¼NR”q#˜¼c a~›˜˜˜˜\=˜ úÕÓ–fMLLLLLLLLLLLL®`jß³sWÂ$ÝDÀDÀDÀDÀDÀDÀDÀDÀDÀDÀDÀDÀDàJGÀTЯô4é700000000000¸*0ô«¢ÍJ˜˜˜˜˜˜˜˜˜˜˜˜\é˜ ú•Þ‚&ý&&&&&&&&&&&&W¦‚~U4£Y +SA¿Ò[ФßDÀDÀDÀDÀDÀDÀDÀDÀDÀDÀDÀDàª@ÀTЯŠf4+a"`"`"`"`"`"`"`"`"`"`"`"p¥#`*èWz šô›˜˜˜˜˜˜˜˜˜˜˜\Ø^ªÕÕÕÐ4 VVV—Šf>»Lþ Xþ·iøoç™P›Ñ.€ÙF—Ç|tY\.]n¼Ë*´N¤úò­ï^$ÿõËÿuùõUðŸHS]:ÿSúþÓôui1®ÿ,Ï?{näóßü¬­­MÙì¿ ²™·‰€‰€‰Àÿ‹*èÆð?¤Í,ÚDÀDÀDÀDÀDÀDÀDÀD þ ‹õeÞ2000ø¸¨‚.VóÂÂBõùË0“ÿwY7¼þBR3êß„€ÑUUUSŽf6ÿmlll”·ô›ÿ‚Ô×#®Þ–6¬£WÛdŒ­ÿÞ½’qvuu…|Ì`"`"`"`"põ!ð½îŠìÁƒ!___\m‚Â?±)EX(//W‹"nnn°³³S¸‹Pc†ÿ¤ JKKQRRwwwµX"} ÿlΞ= '''õ¹š•t „¥¾ÎÎÎpttTŠú?»uLêþ 2Éâ¸Ì¹2]-ãOÝùMK{{ûÿéü&ô(|e¾½Rp–ʬ¬,tìØÝ»wW¬%´›rÂ_éef\6PÐë’[\\ 4mÚT)ŽæP¿÷Z” äææ"::!!!ðòòBYY™RÿÞÒÌÜêC@Ú@ž””ÄÅÅ!22R)|²h"œþYˆP*í"ßÛ¶mCÆ tÕŽUF}…O·nݪøSÆçŠŠ S8ÿg±æ¿M´±ÌG…Ì¿-Z´P 0ÒæWòükÌoyyy8tèšß¼½½ÿ'ó›`,Ad®­¬¬DË–-Õ÷¿ÝpÿG …v¡[”tá3˜˜˜˜\\RA—‰@V–]\\Ô¤puBðϨ•L¼¶¶¶¡¥U«VJ9‹ XѯdÁìŸîåQ!m xûùù)!Y¬WÒ&"0›áŸ‰€ô i7é3žžžjAEÆ­«5õmݺµ+ÄŠnz7]]­-Ê—,Њâ(í+ü-Ÿ+9ý2–Jø§Ìo‚sXX˜Z‘¹VþŽ`ôÑ¿#¯úò9Êð°«ï¹yÏDÀDÀDÀDàÊGà’ ºLXb=”Xiê ç+"@XÀ Àü÷8d׿y~Y¨CËú{ ûŸ·¤`+x‹P&õ•o±žWWQh`ëbokàb<3~Ïÿ/¿ .,óIÓ…´üÙo£ …Gø^ÚÄø]_ú+©~ÒInza]®¨zÔ!^è–v“oi'é3—j/Iz%ÕÕèWÍuë[3FTWIÓÖŒtõ>¼‚n8ÉÖÉxvþý‹Ïÿ×Õ®Ÿ¾‹S!Š£¤‘ð³4nuþ;êùWiº8µ—÷DÊ“~Yw~+//ãóq~=/]οSÃûFÒc½QŠ‘Ÿüþ+tH|#í_M'i/'ôŠ¢n«K*èRe™Äj?6¼ÖâjN¶†L(‘Äá—Rhª«'ÿ>hF™2‰’dLzRˆ*‹tˆòÄÏ#ØØØêueþ•¬ë;Hýt ­T} L¥îÖÖ6ti|uŒk0á3AZâ öÌ‚“•²VH[USx¿”$õ2ò—|«¸0ðW[OÑN¡Ò†t ü¯è¡Rèÿ¯&Vk~‹ð÷gŠÙŸÑa´ÄÓq'ïsØ ÏÙðn-2WÓª¯vïŸ iÞ¾A´6öŸ•üÇçÒÖ6¶Ä“¹H½þاHŸKÝ¥«d!çO‚´³´Ï…AêògídУ°fݤßI}ÿJù–ûwüÞ¯¥_S®Ÿ«§”§Úß¶äWI+üþßCþãú‘>Õ^5ýZïëÒVò1Æéq2>Ô$žÔùRAõ!ò­1VÔŽúâÔŸ$¿TÖÓ3½~ª­YŸ ÛKîcŽQS¹§ÀSýÔ¸û7‘ó³Q´¨4µ‹—ÊBæŧ¤]¿ì8–÷ÏŸ{e~ÖùDƈ?ëÇRn}ØHÿ¶åx‚õñæohtc̶©¬”múkÁ ÞÕŸÿql•qVâÔ[/…—Þþ2Rê‹zñª×]à0ò2ð¬åºn߯óËéCFÚzia^¶”'¬¬45/üq,7R_Þ·A[-_]^:3–‰€‰€‰€‰À•ƒÀŸ*èFUd+--VŠ€}{¥ÚŒòê}& se9’“_T ?øzK;qáè"|p~9uÛE¯›<7‚ÂSø„ÌUU^ÒJÙï'iô­ìiÁ°±¦ÐEZx0'=ÙgòàèêF~ÊDÑ7øÀÈ™¹H{1ï yGbHþÖTË‹ ‘žž†rØ#€ûŒ]œì™—,Qp¤2¦UU -1ùÅðñmˆ^r˜”nI¼j‚äÇ´Yûo%yU‡:|jmm«÷Yˆ2W“R]ôT2mrB K«àߨ¼Üœž’€³çJà-å{{H#þ¡ ¼ê¶¡Ñ‡Î¿§ãZ÷ž`¤—kYúäžþ›¼n©‡º!\Îñ¡´¬TÅ3âÈ·JÃÄ6Ÿ4òM±-*g]üYzªX%ïHû‚ü60­Kžÿù˜÷œé.lãzë<3ÒÔÔ4è5dk[‘‰Øw %AƧšú¨+á±JŽÍÒït %?^+Ë©Â ËØÂg¬82S“È·ùp÷öC`Ã(8“…ô¬8¸z!ÐÿòùبK«éƒÆ½šºYh–/£.µÏ„~ ­¼¨óÙî%Å%“dFó%½Q'}ü“ªèJž·,þ“ûR{½<Áò|,.Æ5ù[Ú£¶-u¾6ª¥]xL~Ké~Ó/U¹WÑÔø,ùñcð³%šÊÀȳ枺¨fß-W}WOd>”xª9ÔνvìÇú”^—.‰W·øKÍC¤VÑ$¸”ŸCZZ:WœØ'‰óª, Ê3Ik„‹å{ásÁ´¢´i騄-Ï‡ð‡§»KM›I|É·’VôRÎóB“QŽÌë"_Ørl­¢…] 5ÚBÒI8¯>ÌGæU‚KšmQ^*ãgÊ«­9§ÂÅQÆO™ÃkÛNedÉ˸–r$ïZùÊx;èó˜J­Ç¼&²´ iá|­Ó¢/®—q^L -¥UV j7'ËÁŽB7?jx¡æÞ…|*øèeëñkǤڻ敉€‰€‰€‰ÀÕ‚ÀŸ*èjÂâ$­U–aóŠ%Ø~8n B1|Ä04 õGuE)ŽÚ…e+×£°ÚýÝ„žQ­ÔäÊ©Î".N|2yVUQÈ¢æbLL¢tÈÄiEAÔ†›.4VàÐŽ­X±z=àê‡!7Þ„Ž­"iEÐx2 —¬@v~ Zwé¡×uƒ#kQÉ| K4ŽLxjrg¹"dÈǘT¥ ™ëÄz&“--¡§š UWô©èX·ãßûc^žŠÇî ]˜‘:0IM0ÒÊ e9µúF™z½im”tŠJ™³X+ô Wf/´Ò+Ü™¦º¤ÑGaãú5X4÷¤U6@¯îÑ®C ˆ0?7ìÛº Ç“²Õ£Z6æÞÅ¢<üþýg˜øãRŒ}uÆÜ~Õ:Ö•4{Ú%TíiN9}·ŽzÝo~ï¾ø8ºrϵ`VW"`Z½­tFY[ø\â”æáðþ=X»f-~˜·~ÁèÓ¥3:E]‹þý{ÃßËMY ³ÂªNûÈo‘> k¸ñ\ ܰëâ,tXÙØ¡¼0óg½…/çíÆ[ŸÎƈ~ÝÀU>³(zF s…§ÐËûB³.Y,,CYà•§'3þÊâCÒÉ#X°p *í©¬—¢’BŸŸ "›4E›6­àçã «ª2ìY·ϼ;G¿‚·»Â2•)–eGež_ :æJPä eU¡`iÈ]Â?²(%¼R†iwŽÀꢞ˜·ì-´oL7LcËÅHǺŸ&âýï7à½O~ÀðQ¨dÝ©Qêml©€òˆà=«ªìÛ¼ kv‚»‹O‰."ßÛ #5 ÝÇMCz+!V”á]E-Û¨‚yŠËmA~f0 s·_ü²½Ú†`ÃÒïðÎô_ðÖ bß_°§;î…åKŸ’>/¸‹M ¤ ½=Äj§—%˜ˆ’,‹B—‰,þ)…Šx‰à®ú)ã [HZiGµ „7dѤäl~˜ó-Ng•ÃÓà l?ÁUœRcO¡ËБ¸¦y~zÿIü¼#Ÿ}¿}£š°}X"?W®ÕxÁkÕ_‰‡â'–!¿…v#Mâ5!Aî+¼kž[¯$oynÉOR‹#ôË£_Õò&Ç,¦É͈džMÛáÒ Ý»FÁÓÍŠƒ(3t]úT^ú)ü6w!òËe ¤ÂSÁ…œªR–»áþG¡M³PT‹D:-”WhÑäïêŠl[>¯Lù¾8ãî‚ä˜Ý9æyô¹çE¼ÿäðp¶å¸¨ŸÏ pbéÒ^Ò6ìl:Ÿ«{º§‡ÄQÞüV˜3FÔò,XèéuÏ$c¬”¸r_ø_ê'^(¢å$ÇbÑÂÅHÉ=‡ÀÈV1ìøÈYÈ:‹]»¶!!»={uGXPCµ@™{Û÷†w@côèÖ ŽvTYgEùDçEi3ñvÑÇtÁÃVÚRèàGè’ºï¨>ÀúAøDò¯*+ÂŽõK±vÛQø…cèЛ8÷ÈÊ!Ž؉åÙµeŒ@IDAT«7²­­Ð÷ÆaèÙ¹y@¯§>Öë¹Iß’Å9{[¤%ÃÖ]áݻÀ“‹IѸiø]p¹öFüúÁKhD:¹H®Ú4 r-ÕŒ­ÌÚÀ¦æ9ãI½ìY÷ÜœX¼5zvçFaîÒ÷áëã¡òŠdDÆÇ„˜CX°l-*­)c”¢B³†§w4mÑ;¶ƒ·Ç\5·ëm¡jC:*É{‚·ÌC‰'bÛ®ýnÑÛµ†—³=’2Nbò‹7cÝQgÌ[½mÃPÅö¯–yGÆŸšFš[Ö¿¥jåÅØ²r)¶:{O 6í›…¡‚[ž$™D¯é¿\$á©äXb»s/ü#[#ªc{ø–¬„CxëÖ»±›Íòã²ÕèÜ,œMÇíSL#¼¤1clSx«þ"uû#Ÿ*B-s3˜˜˜˜\ˆ$ô'A¦2™œ«h;æÎ[§â{„¡qx0J Ó°vñ÷ønþ6u¿IÛž–©ORô œ‚ 'R9¼I¶M•Óʪ&%51‰€£ dê4bNNbÎMKÀÏó©<˼Ѥq88”cצ•øüëïÔýR·¦¸¡¿ ™G5–Â"îAåÄçààG®Âëåë{ßDØ¡¸ŒÖèÊj+uÔ2Zä‹h%µwp"T쨔“¶¸ÂRjDåj+;8Ëê7­œŽ•pPA¥©¨T,ÛVp ÅØÁR„-µßŽeÚSák IJ,"\ii‰öeb¶§ñÇÉ–-$ìÞ€»ÿõœªïí÷<_w{\÷9>Y·Û"ÄÛ[çOÅÌÕqxï«–hFAD;Z÷¸Ïò7;#±Œ«óH Eµ0aeEìuù¥Ä@$L¥*‰£4âæ-ô«#.‹"œ[U—aÇÚExì¥x7÷?<N\ X%/;–mmïŒN½GâÙ°~ˆ ôc=ªÙ&b)©@Q¡nqÅÞ‰e ÿ*ÁŒ‚]%ËeΆ–Éb¾ÎHc}(î‹ðE¬”࣠Ür]R‡™ßÿȧ@³6Q°-HÀÑ„lõû†{Ç“BxC„6ož}›±>‚—,ʈõK·\‹âa§ÚZʶ"-eŠ.%øR¨UB™̽²HŠ> rAl èáÈC£Ø—*%=ùI‚ò`†jˆô–•³+”ÐçHž”…**miûe¡JÙ¼PáÛµg?š]ÓŸåé¢:÷€¼«Ê%vjqÏlÝÐ{Ä;êZŒ.Hèž uË×J©X)ûW•ámñ¢°·ãO ÇljÕ~"ÈלmAºE¡ ÊÍô¤ŸñUzÖ×–‹c¢ ¯Oª¶“nZQÎ|tWuÁKò¬bßL>µKÖç"À6é,SB@ãæH=ßN½Ñ£c+ô¹ýIøwÏC#?ý5VÂÏÒ&Â/â‰RXT [{ÒïÀªV¢¸ˆ|BêÄsEZWÚ²Šé Y_±îÚÛ;’8æOK»±„§ËD°ço_Ä2ÉçÒ¯*Ù&R¦‡R¢X¶ô+G[œÍŒÇko¾ D Çš¶m”‚®+Ž‘\Yçò’LÿR­¢mPÊÏÅáXVÜu¯ôi+i : ÿ“;YVd».?Î-Z†p±A”.½]ÕÖ¨ÆWQpÅÚI~e¡êm¢„‰¢_^.žNç†â&å ÿÉðp¡ò°azŶä }VÆ5> ¦J‘ÒËåRâböcÒg3%+Zµï„nm"ˆ(ë^œe_?‡Å™?,@H?l‰mFÂa¼þæÛˆèó :Siu /²"äg–I¾)¢×M5cå­ 5mB¾—2¢âIÛUTòÍ2®³=ä·¤³“v:…d¶¶j×I‡£Àçé·§ãîaýáÄêȼ%<"TJ¹â9gÃö$·›Cxçý0hÌKhÉSh›@W¥9×Õ<ÍEI{'g.JË|¬÷)ÊÀ\Æ~É;'+?½ñvJ·epôoŒæ‘¡jþT†¶+%"bÄ=ôÄEÆn{Ž%ƒ·Þ}Qw=‰V<ÈÑ«Š}Ù­n{cú–ØÁÇÅQ¥“1@ ˆ“‘ˆ—wÉ~¤AxA¼ tÙpàü$|*ýMo)¶˜TÒ &&&&W%—¡ ËT$ó½œÜèBl K7nÇ º¢<5_R9oŠºÜ*×4*'§£wâ‡ß~G±Lä¶ððòFk V½¸b_ž—•+W"ã\5®íÕÝ:6Gâ±ýX¹v3ª|pÝÀ~põ ÀàÏ"ç5wŒŒj‡Bl˜ÿ…ÀÝÙ“«VHOŽÃÖM±cÏ!Švhܼ úõ뇶ÍÃ+7ÁÕ'ž.Ö8zø0­¡^èÙ»'|ùÊ¢M둘SŒÖ®Á€~½àëR KFÒqÌû9§NÅÁÝ? ý¯»-›„†‹‰§ŽaãºõØ}VT`Út茾}û qHC¤'ÇÒÅ+áÜ0MÂüË׿ø„·CÎÍpêÈ~lÙº™¹g©W#¢E;\à „øªIW&^k CÅyسsƒªï°žÆýw@Ÿ'ŠïºÇŽŸ„µ#°}ã:¬¤rÏFغ|NìÝŽÁÂÕʼnЀ¸EŠ E ‡’Ò±è#ص{/’èʨÊmÙ 7¨ ¤ «ö´°d$žÄâe¿Csl€–´ä¦âh\.Þx#ÚòwéÙt¬Z±Y%¶h†½[7)á!Œ6Þ®Ž5ê.¢ìúõ‘@˸§_#téÖ ½{^ O¶«£³Ôxäù×qûMƒ¸ÂCÕˆµ“³쪊(ì/Çš­‡èNeJH`£téÚí[5åo.,±¼ *h2H°¦ƒÁIʯ¤+ç¡}»±…혚ž7ï†hÕýzuAIN–¯X2{_òúòºÒN`ù²¨pà½Áô¬Â¶Ý† [˜ž ¯†Á¸¶G/ôìF+Ÿ³öïÜ‚;bв]xЀz8:=¯„‘\”"¢d;{âÉ _aüÖH‹ÝÛÏŽðþK#Òß›„këJÄWë}C”6ñÚMï‡CIgH~OÃщhÚ. ]:´@zÜQZÅöÁÁ½!ú°¼ö-"¨É–†DlÛ¼QYïŠ)ˆG4mE‘~Š§í¬¹ I¾Ýºu óŠƒfã„æm: G÷nh„üÌDzœ¬BâY; ~=˜ÐkhÖl?ˆ6×ôEë`gŽúeûgðõŒ©hÜ®êòEQ—QY4.JupµÄçÓÞD{zÑÈ¢#ÀÃÍGvn¢¥ËQPÁE*ž ü9ÖuFרŽp£âéÀEKYh0\¿eL•`Om]@DIŽe]6oÞŠ˜S‰°²e]ZµEÿàë¤aãš8ý߀N­£´ V­@LJ>ú ŒN­Â‘pü Ö¯_ƒ1q°qrG[zõëÛá|‘z*šXkáê‰È`?Ä; ¯ˆèßózÉd`?û„Àð¤q Ø{0Q­›Àº8›Ö,SʹWÃ,™÷3ûe‚ÝqVL Þ¥±˜1yšuº×켤SÄ} ö:†j[GÖ£úõïƒæÁÈM>…ßW®F•“7|½\púøäÓòݧ7‚8cï¶M8‘‰Ðí1h@„4t£{Öm9Àq¦DZBÄ;k—¸ž^_ýݱaå ¥œ‡6kƒ…sfb{`†  ûRlæ|}ô·©pK·²ô4½»v†ÛÃT%ØÁ]È»–ðýêm¸^æÞ´8zmœý¹2¡ D¹®.-ÂÑC{±a£Ð›®¶.tº¶öí†Ò¬SX´h‰Ê©“ufL†]¯¡EÞ­y÷,GçíÖ`Uv:RsòÑ‘ézsÎövsFqÁ½oß´ì³ðj€k»÷@—NíàéÊ· Ðò|”sÛæÍ;[Xg[. ’ áìn¡ü_6vìÈÚ ÄÛ½gk¬^ø3Þ˜ü6î9†a}» =5_Ͼ@%XÆo_Ž+× {—öH#_Í›;OeQ{“?J¢ßõhÖÈ>Á¾@¼+ìà˜Ÿ™Ž´œ<4iÓúö„¯‡s ¿KbÁ[øÞZ«DÜñ£J9woäs©ضcF ìÉEX.æñ_·DÚ½û!-# ÕÖNèÖ§yÚcåï+-¶iÇ0}âGJ¾‰jGÎ=dz¬aëºí8p${  ·a.$œÅŽMk阈^× Æµ2æÄÃÚµ”-Å ÚέڋlÑâ!B$ ê‡ùÇDÀDÀDÀDàªB V½Œj‰ÅϧÖoǦMQ¨ÊÛàëL•ß2uˆ,GÜ3&á¶Á½Q]œƒ_~.Ñ0uöoèß¹1\­Š0ó‹¯1s¾yôzl_ò%f.Ü;Ÿz‡®pžH§•C‚£w ‡íÛ¹`S€õ ¼éêæZ,¡6ÈË  ñúM˜·½ϼú&\*óðÖ⋵'°~æË´’æ`òôO$;J²P¦I|7ëS4mÖ'OœROæýú¼¾[ˆAQM•UKn®Xµ œOí݃sü½%6Ÿ½þ8p&ÏÜtŽ"¯¿û0ŠSŽâãw'`OÜ8|øüƒ(+ÊŤzUæüs߯å*}FÝÿü˨ÈMÄôßFóŽ(œ([=%],ÉÖ$ÄÓoÝg„†ßûùZ´RŠÆ’ýëÌç¾®vˆÞƒ-qatéì‰ü£Û1yÊ7¸ï¹ôŠjÍmÛq3­½®éOÑŠTLzg>:uPW´dÁ#/3 k¾™„©¿lƈG_Ãá¡Ø¸f}µÕ^AhÁʼnœÔÓxñÍ™SO|÷c8S‰”p<ú V9XÑŠ¨öýEuïwW䦯â³wÆà—)xú•7á¡Åëï±}¶œÄª©ÏÃúl"¿ý^¤2‡ž¶¥˜8õ4ꂆΕ˜6î6üžÜ>ú´iìAkÉÇð }³w%>™¹o4o‡6‘þøý·¯ðú´Ÿ€&q{û|;óSõ™:{.wmìÓј>ã3!vî¨8—¯®—Ådâ»wžAÓ@e‘V7?l ‹Þžž^܃w ¤çrŸÁæW'b;hÜ|]wä¦Äaò´èpû‹èsm;œØµ£Ç¾ÂÅ“&xjÌH”gý?ö®>Ëjÿ×Ýll¬h؈Ñ)‚„„(¢€pADÀT@,DEDETº‘nîîîf,XwÞÿsÞïÝ>&éE¯âw~Û÷ÖÉçÔÓç,ÆþuêÔ…Ÿ}oÛ ë25P¢ˆlX‚Ù³fR­x¾x«·Ò(È–Ùyu;™KÉ0ÏLÄÑ“Teþu¬ž‡æœC˜’ Rà<°mz …ÚϽL•õf8ðÛ, 8#¿†õC)ÝÒú)’¶òçÏ… µ R)ý,U>ŒÄzΟâÏuFõA¸vf?¾ýz6ÐëgŠBvYزx~Ý”©Q[1)DÓE‚™*?‡¶­Á+G¨w;wÆ‘ÅÓ1oöt 3ÊûàÔº Xy(Jb%ÈÇ—NìŘñÖáu´¥”üàÖ•x¹ÿpÔïð*Z´¨„=«&ã7fâãïg¢}Ãòd´ÆÏ?OVùë?Å*VGÙ’êQÔEÍÉ ,äíCi™ ñWÔû82ì< †/çq%¢ á—±eúû˜”m©\% ÛãôÎ…ø~ÑßÎÕ‘ªòĦ-€C‘¢ð´ÌÁÕk2:-W0ýó·a—…_F¿Žd޽9dÜ,’1òÓ¯ðËÂ#X=wìÓÂññó°›KfÓ6`c>^„Ù »bÆÇƒá˜•Š™£¾Á$êÅ¼çæ™øù—)xÑ!%hFtõìUfRb4Ö.؆fî¾h"¢{évŽI-C‰’Jµ\Fáêå‹°Ï¡¤—ãÚÑ«B\qã:¿f­!#&?Nü^%ýž&0M‚qƒ}ýÝ?¡Ë Ô®¢¤è|&JGY/28¶{²J6iÝV±—1æÓØq! #_{©1×1…ZMñ¶…J&W\ä5 þàUF“gÛ’ÁqÝ™>Ò± >öú9q×1ú«±ìè5Ìøt0‰ÜD|òÕ·*ñϼY“X²"8gRÕ‡_aëÆ~z¶&ÍÈøAÛ[B*…!ùÊ!\ŽvÞHÆGÝZ"!>N¥È!ãnßæµªÕõ¢#q`×B|8nª4yÍj”Ç‘µS±h£#Â*‘ص'çUúW›ÞjS­ E¹T_ß±;·WEzøõ®p![D\á-÷ ‘pݳ]ÿóB˜w×fÍpf÷J çuä~ó B½Í(A߯Ò%ÑdÞܳ(T¬8‚üœàB%¤{×á›ÃÛ©2¯ÄÏX0o~ä8iP)»Ö/Fÿa_1­ :wiÍ3'c.ÿ‡Œþ/¶i€kg£ã‹½TÞ¥+Õ€¯3Mhä‰óò¾!oóˆQOx»_" vd Šö@$çëšÓáèß¡)’¢®à§Ÿ8~ù?}áJ8Qʼ᠆ƒÄE\Çvj–•­R‡k*%ûÖÂÔ8‹‰ãÆ!öN4Õçù8w¬¿ãzB“ 3³||F€,ªù©Ä“‰+¡{çî?º 7þŠ3/¶'3© ‹]i:öÞ§*NóÖí±g8‹Q\ã…¹-!>òvoYàÐêH#ãtíÔXy d˜®¤vK$çùD„D[¡2ÇYq‘øzÐû”õ[>Çýò<>îÚ›ãìðáÇ"3êF‰í§{·èƒ€B𩀯ÄQÅ™~L0AÀž2 ðhÈ‚ Àº¼ú*¢Ïƨ¡$4]½ðü‹¯!ÀéÓWù•v˜T.Öߎ$w˜ª\âp­CóX´v®Y4«W-;¾‚Ä´L|òít¼ºo‘Ê·cï·Ñ·kkªÞZkÇËðm¥ iÿï‰Ðeò¹Ùó/Áªî“gÿJ€ 9ÞçŽïSÄy­¶/#¤\YX§Ç e˜VZŠs×{ÀªÐ”1 ²r3Ìÿø-Ø¥F᳞/bq§ƒF F /¬šó¾œ¼‘w”Ч¨Jhû|ô©¢¯œÄð.¯àèš“¸úâEÄ_ÞCâèÔó9”)Uiî y­ó¾Å—ÚÀÓÞ‘Œ "!u1äåö”|{¸sÀΕ¿ò-P»í+(Sº, »W¡°5¼| +XkPœqQ4wr%G½v¯]IIÜ:㿚wùôyM;tÁËDBoÆÀ 3ШZì̲±ñŒ&™ðvw¢Šv vü6W%}cØgx¾u8šg ã‰“(LY YÀ¼Œ•”BýHâ¼mPûtk‹âE\‘P³ 0a1¦n9€®­jâây !ê?òyT®Jb¥3~X´V/Vÿ*3þ¼:p$z½ÐŠ„ØEœWnÒBÊÀ:#­«+ö-Á•K”ʸ?…ëPb^º ‘EOT©Q…(ý޾rPç¶åj±oË!”ÄãÜ9áìá§ ƒdÉÅŽ¶ª7.iÄ9eAÓ?ûa%½Q»R) ö9o݃ê¡d ¹VÕkúÒ ¼Ý£-’"Î¢Ï ½E‰ée¹”èqPéM¸ûJis&m¿“¨ú)ÒdžU,átt2M2)e&—Š¡8¨"¸§iV‡ÖõJ»Ù*¨Õ¤Šx:ÑQ3zø ¦‘”@¤­6º„-§®"‘êùNÙ”ÂÀ÷FÒ†Ò«æMÁÈq“±÷ðÔ+矯ù@ÕGÑX3o”$@Ãê•Pºt²bëbÁÆ“X¸z/šU£ÄÑÀˆY:sä__Lž‡6µ+ M—~¨•@õrJ_í-2Qdùf:¢Û…; ‰ôK` Ÿ:L²CIꄀС$*£É ÑX7{„ÊrÔ·Sñ\Ã*8ߢžåu|þîb<³q(Úõ‰•'Î\@írEp–óVB϶a›„Ň«çú”Œ•.UéÑ °dÛE,_Ëú×,M‡‡…Ô÷6$š?S¶ìƒ¢ÔN‘5FŸ7B ¤S½?—mÍa!“p.e¤¥Qõ–fTk“ àê}gHÝ%­³W0#Á ãжaؼoÊUšbÈ€—H‰Xç—ûáÒåëH¤ºûíóGqÒ´BCÊÂ17 íkcñÎ 8}±;pë¤"Î[ôxCût†er }ôëçàD×¶¨^Ò!Ïpìl ¡4^<ñÓ,ÇA#LlÙŸ>A!èûÖx¬¥oç"•1vìwð£:‘8õ\Q«UAÖeö…•,>ôCñùC´÷òÚ›&}Œ*Ô\†edãö g´¨‚5»NàÆ­hdW †£«JãNɼ½_Å'‡ãýøþ-Š8ïÒç=¼Ñ« ²ãnÀÅêmÌ?—Û5B¥ÚMQòëéX´éútjB›[!åÉl2>ÎØ2"ùüÒ«9.K#Ž+²%¾ ¦ÌŽ×,Lû.殿Àº÷GÓ:!زr>†1×#"•’½ƒ&nÕ½?÷~ 91WÉDx K×Í@"×ÏV»áôú_±öÒuü2ª•ñ§ùÖ|@â\BõŠ¡(OÕî°ò唤T4Du^Ƥ"Ò%ïÅlGB½NÝHÀq/zïm>Y¡ë+¯RÕ=ó®\Qjù)Ô^X7O˜§d¦ÔªŠ2eJÁ"ƒe;0bÅ6lú¸?ú½=[z¾ Ï’ðÝÏÝáíéLæÅ œ“N²¯€ïf|‚@gsÌÿi &.ÚŠ¸ØÄFÞäú"Ä90öçѸf9´iT/¾67îA½°âÔÐ:¨¾wî7ÿ¡¶b/áÖÖ8MÇ’¢w¯Gd^"¾|)µ"î`ÎWãUÔŠÔ~sqwG™°†\ωK.×lÑ´^Eü¶í®ÞŽB»5ðãgï£ï°OQ¶A[|õý/ðãúyë<bµq8â› -ê•ÓÇcÌÔe¸u#\™.ØpÞqê0ˆJ¼˜˜ãæ+X6g=P²9Z´l‰[>æ$ÐbÏᓨ_3 iw±ðg8ÿtü$4®]ÙIýpæâUj•_°mÀ×jκü šÐÄD^!£¯8pêl¨M Z œÑ8¸ênö„YÔ5Eœ·ï÷!Jû{áØæù$Ή{tëEÜ¢² Û¡§æe“pµK[‘‰l &˜ `‚€ O7@— Ö A/[±¬ü\°a÷ ¤Kâ™gê!òøV)±¡Í¦ã¸KgOà×E˰÷Àaxø£¦nŒú.6šbcêæZ š´Äε³°ù,’ÂѺE¡ja=X+µl¦*]þvXºš›&CÃõa¡q©EœKÄ%6‘»CÂͳøé» HŒ%‘æÈºùÐ9mÓ1åw?Ww%Qe“d'•$AA pƒ:”›Ž¢’ÿÀ4…(}sÈMF¹ÊÄéÒ[yl,âcµ2¯Ò¡Ò¸c›iÍsËYdÉ2­•ã5ÉAØâL¬F:(æã¡l0Í“aí¤ùعtšú/Gàúõ¢¥'U$µðWîh×GD<¸\U|>ó7œ9s—/_Åå‹ç±gí2¬7‘joÐ¥IUÚ NÎp§)ÒâI“¤«w’OmäníTÏ•BËï°‡²ƒ«]·‰Ül¼˜¦¾íß´ û7iÉŠ+/2„ðôñ/†W[UÀÔU¿bûöЏ´o»Š&ªÏìï²ÕcãšT»?‹k7®áü™ÓX²j=¦Ž‰rÅ`COB䥣˜6ánFÅÃ"‡,³Â4‰°£d¢ž¯ãƒ…;–b0ÿ½) oT»:tð¦Zkô~þü¼p+>|{ÇI ´«_ í(ô÷5~g âw 5)EÝ—jZj®>p£$Æ·¨^ÀÅ„dnŒKi£woøõG"™=åø¼%’Ä›ØÞ²ã4è«hwÿiµØ¤Šã¦Ž ~ζ$–éŒÌw ámaëˆÊõ;“6c¥LòVãÔ­ßE…mëW`ݺ͸“abdJH(DFƒ>´šzÃHj_?ú|ðWqR“¥®B”jDšàò©´™NTâ*wìX=«¦)Ïÿ’ R°†Ðé*‘{¼ŽÖMŸÝ/Q‚žƒ€b4cˆ‰ To+V®û Ç.Å¢Õ’UvðÒ´I}Lå©W °¤ü Îù[×ä©‚‚ý9éÜ×ÇÀˆÙEoÊf*QNŒ±‚*£ÕŠ9Qk†s:¸ Šú!3ù:"NHzl[1Ëæ¥*Û}y ’0"Ñ)bq"ÂâpËž°4Ú¾Šýf^`]ÄW‚ö¯C’äát‘¼ÍÎÔÆŠF Pîhxö*\E‹â¦·³âAÁ\ožŒ’Lw.=[ÙÃÆÖœ´È‹˜<ñ;jSD± ɰ)Y‹þ0È”ä&¡BHIxyzÀÂ>—š U€õ—Ù.Úèg;ˆ7†$ÖMdR•ÜP]qò&öïNÎ-jHÐ9¡áéêâLç~)g¢Ž«>iã• öÞøè«a¡ }JbìÈ_RÊ¢bÙ’8{G#Ðű]Qb¢!QÞ”:ukÿ,Šxù¥Me¥E)ÍL¾­!ˆö”Œ¦S’FJ ‚4ÅhÏbלKÉ”*OÿÕËÔˆêö±±Ñ¸vP>Òùƒ=Û`@ÜÊ×@ûæõàâhG<b›GµÒŒ¸•“ƒÁ¾Sœ®‰SWŸ |@5»Ø˜hܺ~‹FÅûw‘)Œà¢M’.HŸ8äÉIÞý´o ,ƒšb«_/‡Ò—Ëp³JÄ„y›˜_Š’ÀŠ3 ÙD¦•³%"Ž‚pH¢L+û¢|ºŽ("ç)Ü𭨞Nû:G7U–Ä y¦ê—/Šï¿›„I‹W+›ì ¥(ÅðB•ÚÍI ÅÇc' ÷Î 4xa=ÆE‚Ø|ï;A)G4 VHÊ•3ǃB›ÓÊY™H)|Ї¢gŽd(8“ד(j+xx8óX2¼0€ÞÏ_ŠAäí›Ø´dfOþŽ~ÜñF·fhýbToÖ‘·HDnÁ¢ùÓqÛÒ£_oO'Er&^¯Å㺄³·#Èc™²²œ(V7\„©#ãIcÊÒ82‰h+Áe,Ç’|Ò>«8y?†4¢!¨‘ŒÝ3'Ž(;[‰Ó¤|)xP!Ò@(ÒŸ–"ö=}‹S=wââbqõÒyÌû=¾¥=pQ"ŠfÑñÕSQ÷žÓ£ /Ãö]»hF¡iPHE4¨±Lš’œHí…!S c˶ä;T}Lk&á1¨ÿlz3.£$³É$J’2Å!s3àu¾A¨H“ {"ýl> 5Jg6.ÁÐOƾͰ`êWp2Çv`ÿ­t5†.ºÍ». ûd ò,’]N †ó$ri‡OÇjdÄEŸ‘w…3ö Ä+]êã»y‹0Ÿäÿ¶;À+¯Ö'Ñㆸ¤« [JÝÂÑð¹¡$úèhkR| ‰!iÇö鈩•â .Ú3âë^]&¥êéĶÇ0˜™S}V®†š£Jö-óUオð²õgÎ-E.³É²6YiÀ†gÑÒxí…öÊ;·ø|¸#¶¹nˆ?§¥ŠŽQsÀ‚ª¸¢f+Aœv©9iGÀ“ˆ—±JxejzêJ’'4â[A‚95bÄy™œJ¡úPêlèK¹‘úhÍð MuÂh#ŸJØÛ’H¸yá(ÆõYºÆNš…° šÌ‹cWs 1 ¯µŠAÀ|uFŽêWéÂ,‹TYc¸ÎÅóhF â¸Ïɽ*×lL“€}X´x.ÎlÛ"5Û£$íº-rɬ2Ó`]¦R]´ª_.Öd¦òh·8x8L¾£ÁÊQÖJ:Á§zR§[×/cã’ªœ9?‹9êNûYD;ÞW:>KS®á©ÚZ›I˜ Í$ì@&N÷[®ýV†}" tetlÙˆvÈd´±osŸðqwD.jñ ÃNÒd_È1ÓÚ®žÉxãÒª‚ŒNò"—ù‹„4æqûÖ%GƯìC\.ÜX±ntŸˆÐZÍ0}ZUÄ܉ęc‡ðÓôùÔ>¢¶ËÊá^Ê_¥7þÑmµíÜi–å:nß ¸Gú3(Š+‡§‡ãDæ!Œeik^ý¦mPŸ6ÎBÔ¥¡—J- ŽßTj’HïLÖ/+›ë …¹°]²Gfdò(7îÓZÐÖVúHe8ƒx:Öß&©ô9qJ^‰ô™ JsÃ:KÆe*a%š,™Š­ç#‘ïy0,G&ì°¾ðåÞiFŸ ž^^pç) 7¨©÷óïa“ûeµ¢<ðëôpüô5µž ƒV;bPÆ¢À—ó$G[—hí 9e“½—ÜdU¸à Ú|á#oÄɦìIÔ8¼—ŠsõÀ¼Çÿ¼pj=Î_î‰J~vð”æÄ\à^z‡{¶û5 ·ãàD&šœz!!—ë‡8ÀÌÎÑ`ki%«GŒr*híàÂý´ @}Ùâ%È8±|MúA #:.ƹ†½ÛOÆé³àîÌ•šëG$>ô"3^œƒæÁM•fú1AÀLxÚ  íXÔ*"ÅDZ$$óÌó"A¡øqãzJ <”ƒ©¸h I’ãŒDMÇÔ —.àØ ÑÊàfhA´úäþ­èõæûÌ­<† mŽÍ³Æ`Ìx¦ò´®[;œF¸Ç$$ÁÇvu8¸Ùy¹Ùãp¢†€$Ò¹,l(™+«êµá×…tLc$Ç„c#¹Þ/ôí[…yRúŸBäX#ÄCûª · QÍÊÔñÚ˹éjÈñƒ{°Ì)í r/÷Ñ–¥Q¬tI¸škêœeÛQ:ÈW©eGÐÑÎ#·ñšqª™«*áËÉ”"nèVvãZªuÇÙ ^­J BPŽ¢´‹È´ Ä QÒXúÄ82°vúëX´è7è]ø{{"•ªÄ›HœK(U¬U7m”DNž÷îØŒäˆ+¡„QGºSÒaGÉR¹(º‡÷Æþ¤œý¸[¥QUœëO?#R 0/ª•àÙvᔉÏ^†© ‚ðNïHÕÚ<ö¦^C—oHQhR·*;DÒqÙà¯#Ó¹"ÞêÛŠ6Ú¨SMĹ03J–)—LMb³oÝ<­Š’H޾†-{/ã¹ö-q›Œš¥Ž¡Y³† ‚@)ª*P%˜HóÚÕ/[·55§öC mN5äÕƒ2ògˆiý–AäÌÝÇ/Ô¢™á®UX¾ªqhg%ЮǛèÌcyXbÌmÌøªÖPkéØé‹ð©R”ÒoøÙ±Î>/žE­:5x¢†¶ælسÕ–ùè"%Ë«‚–LY‡r<í¢d =å_ÃÖ]‡ñ2×wîáƒÒ`Î vx‰¿"oo¾á¸S$ˆïmžòÃ¥3ì£% }ù$f¯&gÚŒšE¼©å‘òž¸nÿ¶†êÿTÛ¦£ÒÍë6Á?„*èÜ;ҵ͈´d¶Ý’q%O-_I)AŸk‰²÷WÀ§‹ÖÃÒÁƒ‰ˆ§ ³Y¹×nÖ+NL'ãô |=áÉuúÌ¡]ˆ2÷BY2»…A.a a³|YauBŠ%ÿ¢oÆ«½Cˆ}aDJHKMçѪÅQ¥Y+lœ´ ‹–-¥ÓÇ 8¹{úގdžEÜEõüùÌDn!9ü"Ž©7ÔèÒ9ê9ÿG7›C*,+`/W2Äc;‰mßê_E÷¡†T<.ž¦ÉÅ õFÁ>±¢Ÿ '(i_DíŽ •*¡‰XµlËâ.{<ûŽæD“*ºj‘'3ÔŒ~&xDÚ”e»#&¿ƒ¢…ÝUš[WÑo*6Qc0ä…Æ¨Ó·6~û+¾ýe:M¾ê#ýÎl8pC?Æy­ÁöÈ‘CX²ÈåËW€¯™¹jõPZô”Áù‚¦Ü~Û·MÕé•gÐôÉ…s>—'ŸTá»ÙX8u5ÐüQÌ¿0b¯`ûþ‹èÜ'-(Õü¼¨ô¦L0AÀ§ ‚ ºGË˽6ÈÈåñ/œy/žy›´îŠ=;–cÍôé¬WÏù®ßÀ`Ômý¶Ÿ¿ºÏ£BébÄì³i7ë‚‘ïöÇè1ßãë/Žhùò·Ñs]ЩC{÷+D2Ý s§þ€y³¦ãKúÈ þMÐù%/6X¾h¦ú/R¸nQ¢Õ¹÷ ´iZ9tB¸aÉb,à¡B…(¡ŒE“vÝнMC¸‘P1·2IP03JòŠàå·g!gÒ˜<îsL6ôŸ·G¢MƒêT·%EO/Þ<)=Ë ä!'ŒÞÔ)y1Â{ˆ£ª Ì•j>fˆs+‹ßÿŒHâïÕk7F—úâ!½U> )陕a\Š{K:8²§ªå”ÏÇ` Õ,½¼ìšˆAÃ_G•ò‘ìi‡gk•ÂJžW¿fÁ ´i^å­aëO]Â`ñ­V„æX¿t Nœ½ÆºXcíÖT)GÕ`÷ä˜?笨KÚ¬C/Rÿ^õõD:›ªUž¿ý>üÖ ªi'{{%)Œ¨¯Š…h±òUÑï¥Ö˜0k z念D:÷ªOûýñî*­ŒNîìsJÈ•Ý6ÓØ9jsTðc+ªô7jß±éf´Q%2»X+¿å }Ћ¶¸ž.”d‘¶)N¯Ù/´¬¹«÷ }ôží§$²6Žž´×¥s<{O|BgV«æMÊ«ÿ€‘ß©9¤Ûø;ÑÄ@jÎFÜÕ_*¡Ïä^Ö(^Ýèí_Ôa.ÎgaÌ8*Ë»pM³@ÚââÍgή7¬¬µ5Æ…ãD‚¬<… áÅ”Zx‘ಘ9c"æÎ˜†o>®âh?ÅðÜ«Ö(]©:&ŒޝFŒÂÐÁÔ'ï õ1´O” ¤*4ò5mÛ;6 à Úh¯P›*³ÏàèÙå<‚Ú3‡ž>Å1¤ï‹Ã>;f?ª·ïIïë•”¤4¯1°2>«°9[²êq=Ó¤‡2†ä¨+Â<úð£·1xÄWx`?T®#&€“y”ÛJxYÆ­ Ç­€T—˜ûÑœº<(U±Æ6 ߌø CVm ¬Tï  -wP%möð B»Þ¯áðØ_P¢Z3Ô ¡f“5i‰Šœ+?~ÍcоŽÞÙœ«êm_Qs.‹õwæÛ0_Ž}Ö_ÖËĸh\ºtVÅmHªŠôÜOº„cÅ‘@3çÎSB\©q±jÍ;ø…žî%Ìâ¹Ú%JTÄë][á‡9«ðÙHžëÞo(Þ¤Äyî¤q˜0þk|òá»*®ú©Ð=)A5Ïd[}ÉDó¡ )Œ„”³Ge^·) ±¨E[ó¸+ ^N\{,v“ ×NÓ.œ'H(]µ ¾Ñ›Ì 7XdX ÍGCqñ³Ï1iüäG7Ç„7ž‡MN8>ùàm:8÷„Uz<¨Ð絞4ÛñPD©êéd®y©;Y£Ì {/v¤S[ÅÁI[Ä—…´{[9cìèïx²Ç\CÔVá:HÇ-ìÿrx¶þ?ÌZ†ÑD××ߥ—òÊhÈ)^ÊÇÐ.ªçëó›ÜÚÞó³Ó­0aæD¬˜©eÛ©ç›x±m#2àèS¡j= xå ÆO[‚ÏOîD‹ÖôµP©$ýðÔ5.uhåU‰øƒ5ùèÌ5”Œ·4 D -ÌY=©uóÂÈÁ84r,†ê‹êõš OCàøFµw ƒ=¨\¼ü\}¬X· _o\†þ~ƒÖµ‚áLB÷858„ e6ôû!Á‰}§CV™?b²tíÚeõ½ÛàN¨¢aÜ[È(µÉID1è+G÷öÍм}/ú¡à:GSµCëª45Û¾ªÝ®<ÎñµNÔBZFg{»×¡Ç;£Ñ¹Q<}k3Þ%2`È( óÁÙÃ-º Âo#¾/ý«Ô¢ß 'se²S¦RmLýñ+Lûé;|ôþÛ*ùñªÕ/s}Ò5‰ò>˜nL0AÀž:P[TG[µ¶i£¶}ɱ8¢¦Z¢D JØx&'íÓ‰ôÙÒšmeÅO6Q‘ö%'%’3-G69ÐÌ›m*n‡ßVŽt\i&RÃT:IJspTôdÚ´qg„#í¦¨²›N‰cÏyN»-ó°$¡/gÛЮÌA ¢ŠâÈ…¸ËJ¢ZS#²äH½Ze¿É6‘6…1´ —ó¼åÜP'WÚ×±.äœËÒfTKu¦§Ø %&$à7SåÛéI¦t)…’+i›#ë“Êöˆ*¸9{Q/“v;:¹ÐöŽG­ˆÍ&+bFÉUUcãâ)©ÒêíJ›H9â,‹ø:×2#AèÈ£Ž¬¹1 ¤å<ÖzXŽgš ÚY:Ó+¸Ø¨Ê¹ºD½6&&†žlÝÕ³¢Z)çÎ ¼DåRŽ™‘v¹±%ô@®É„¯¿»RÕŽ‡jµ­½ª:Ë–px‰ìS¢%´Ýse\'"½t|FÛV>´Úg¥¯y†,‘A7d'GbÆÄ¯0vòr¼9j<^¡s(kö‘Ø#«³  /æ+iÁwa»ö+A¢Äã¸ê–ŸF †52‰ý¨“ŠÃþ ñgÿÅæÝQqtä8&2ïø¸8¶/]õ¿9Ñ‹º¨© Œåf‘ÎÊ8<"ñȨh%´wtBáÂdøIx í„ScKk;uUË“¶ŠTÞcÓ‘ç\˳”ééI䙦 iL“L5di‡"j9=©[Nu6-%=ÒÙOI”NKÞÎj¤©zÇÇkcÍ…þ ÖDr.2ølËü’¸¤¥g©#âH4Ké©IÊ´$I΋f9…{–%6ó ~\+¶²Vˆý¨“#UZÙJ™Û–œ‡™T}¾s'†Žò’1áH›]ÚîJyRÿŽYdÞkh·¶Vݦ‹ÀÍ‘ù‰Vˆ'…ÀATÊæ/sPΟNd^äøÉú#ó_µ…c×NÍ¥ ‘D[9»Ü‰is²´ù,æTŽ !f“ kN*ç¦ÄuVóŸg-ó{¥×w¢"—Ⱦ0WÇCyQý]Ö …Œ½Ö;1%Swa¦ÉiÁóÔeü<ÓèY<†k…xŸ—µIl¬…v § WÚZÓ^›Z!rfµÌiÂKœÌ CPˆY3)  ÙG*‡©»‡; gž5ϵM¤Ì²Ö¥Ñé]Ë•g'Â5#5Y­bû.k¹œ÷žK){M,bÄÎX¦<êÊ‹ŒJi‹¬ÙÂH府̹¥Ö(ÂU9¿#ÀÅ4J`/k¥ÌªèJ[dþË|Ó D¦ÕfbŽ!*ð‰œw9”ÀËPs†yÉüKgý¤o´õÊ…ŒÐ,2îîplÓt‰Ò|±ý•ý)‰æq\ÄÈŽ6âôI!Ú[ª„©¬U¶l³ô™¬'9”ÜÊœ“y#cÞŠpRcžãDàlOó-15‘µ@˜qÔØ»y)^¡s¯t–Ö³KkØpM² ÙûIƵÚ¢u‡kºHn­Ø·Ò‡9T‹UpŸRgwOªt«5]k£ì"=ö"SR`—$s=o® cZÛ{ùQ}Ó÷^{ÂSL¿dÏŠ!Lôq!ë  ÷>[2…"¦?Òœ*°g_É‘ɪí–Ê÷Ìw)SÖ [®«Ž²¶rqßbj“LXÛpo)ÌEœè\PˆNÑØ“šp=&ŒªcK=²éBÁ}"Ú;úþfÏ5#ÙO3ªæ;’y/ŽÚô k“Œ_1åŠ .‘N3wâš#Hé;îµzìkÙ?DS†ë÷G2Úe½Èb'¶[æ~ ŸEûO[wDËœk͵&xòäY§E-_ðÂQ>Èx“ýMÖ,Q®“=BNð?9úž+ ™‹²—É>'xRœÀ–ñ¹— lS8¾e¿—q%krô¨œ/´õÔ‚@IDATû®ì%2ÆåDéWu*Ù¦âã$&–xa+¾ d¾H{m¨qþüyÖÅ YÁ`Œ·éð3]M0AÀþ¹x(.ª8 ®¶¨ß "&*bƒ&›—¾1&H±þM¸ÉæÊWj£“SO+h‹úFR6ví¬nÚerƒ—è‚`K8âàMœwq¯T›š ¶BlŠÊš ¡bs¨}£/¦—:èAT?•Ý&‘cù&é¤IÚ"¾²‘ÊwÙ°µú‹ ¸ö¬·OòÔÊ)· ¾Ì…ñ¥.=èq„qaÉ<$®ØÉ)ÇZŒ'eˆ”HRˆPÕQÚÁ8R'@BÌÆ†L¦—2ô Á\3#ÐU²¬µz(øÊø‰º ]:¥×W¯’WW±£ÌƒóÐTNÍyüÎ&txùu•ÏœeëQ©{‰H”mBBê ‡ØõI¿æÁÊÐ÷íGÉiù¯×ÛÆ*_~$F|BÔ“2à,‰ðÈXSAà¯â XW½_ 0×Ú®é)/‰È”N KþR¹²1Zž†_}lªG–k¡Æ¼>.E5Zæ@>\$}¶a<ËøºèðÐá$yÉxÉ5´CƨŒy­ídˆä¥—¶Ü=ç$­Œé ½åŒiED.‚@ª<8&ŒóÕú\K+iôúõ~ÔË“ú‰*øï`ϸ‚\ SË}£²´¾•†èùäÍ_‰m€íïë/sTú;Næ×Ÿy ` èòNÁŸ0Vpç<×ç‹1ìU[X¶>f„‰#¤´CúN5¶—™©8Ò²æH^R¶j¯>ÖX¦šS†ïzÿëuÔ×#ÍÉž¡~+æ#éä_Æ3WeÓB#Z R§ˆˆ…°Û“pRã“õ•ºÉ|•¾Î/S$„²–ikq^¿²L}­–þPkŸŒ-Ž 9CÖ}-“4j‹^=‰¯¯yÒ=|TcÒx’þÑóÏ_+Ù>–/ðÑÊ“:K^Z›$½o¤5ge.à(ßóǧñx&L¹‡ék‰/ý¢ÖHVVÆ´ø8P}Ìz«1Î6(¸ª1¨Í9i“u¨·ÓC{¯ã9ž@òᛯÁ•J BP lóúYÁß0'™Pïã5Óf§<ÌH)KæTþþ¤í½êë¬A5ÏeÍe› ®õÒNm5YÚIØÊ:ah¿š_C„†¡ï m7Úïeëë§ä'Áx.êßÕúÃJKûÎR†¾¶êû›0 mÉ “8V„¹qûóûF愾¦ÝüJ|˜$¨öÈ8æüÔÆ›V¶ÌW}|êu .óI˜¾2Žb˜G ÚÄüe¨µOÖ"mèuÕDzÔ÷.Ø2om핵^Òçeãq,ãKê!ù ,´2¥ÍÒ"-èeX’À¿@]Ä 4PU£¸zÓÕL0AàŸ Mlû€ºË¯A†ÄVQÛ0ôCßPD=Mß$äl‚ò¯ÉÆxÿdA/ºÚ4)!Ðó•tò%ĉF HÙ A„9/Cí›B²DÜw¯@)C%v´úŠÍîR§!êA‹£žåã=‚VG"ÜP3ù¯ Z†2å»V.‘¶[þ ÀÑá­_N÷+ƒ™ªÞ]þ ½U_ÂKò’ÿßãºJ=WÜhý#&¥´®Þ?n,ìÝ|¨¶îe”ÏÚÄ”¬ HðƒúÇh¬×ïA0–ªj -…cãwÆyI|ã~ÕâçR"õ+DÚ)ÆÚ÷ z³Ç¼Ÿó’³"ǫ̲ü’yG¢!“>î¤! 2çô ·ý~ãK¾‹$HcOiý¢—§§•ù– Ôˆ‘ –g g=ûµY¾«@ kk…ÔAÞæ6d¼=¸þd ª¥ò“SA¿y‘ïj *0µèB¬å÷§Ä-Ø–»Ú!•¹.6üroÈ_êkœN}0üä•q­êÎx×H™wÆùsÜ5^¥•:ªµFÐÑ%¿Kíôüy«­wÍ{-–6·ö2.È”`Ùr¯ç—aX'´w÷¨«dÎ ßµ«6· z†wbƒqî·F1uãµÒP¾ø×SeÊzJßdQª­•-eܽרxü¹{<ó…ÔUæ•Qßëqå*„y¦Áƒzftã±*ååÊŒ8ò~JTÁ·ßŒƒG‘¢´yNG‡•‡Ü6Xw¥G 2ĹœkíªÚÃüÇ *—í¸ßZ¯ÁLÒÏu­9yë6'%_cøË½ñúi\uÉ÷Aß™Ti7§‘{©gFÞÞ¥õ}~>Ë`œ¼=Sä†Hz¹Æ0ÐÓ«=Ñ_âݯîzü‚í5@Ù°Ïëk±öö^y=¶º!ÎܵưZzíz¯}O`(C8¯^òÂL0AÀžJ<”@·"·Öš*U²A !­oØÆWcÈèæÃ®’æaqôïW¯žþa×ÇÉ_ÏëqÒ¤ž÷ ‚I(üááH„1Lï›ß_ôA`-p×û@ž—ÉʓćþNm~8h%|2ýø¤Û-ùÉ¿ÞgÒ_z¯Ò΂ïîûlÔâûÆa¹2?ÃÃâ—tÆé¿=h}ÕǨ’î>¡ö>N'nÁ6=NZ‰[0ýýž'_=•F­SAm s=Ž~½_]üK!°xYÁ=RI„ L¾ågœ¯^wýô«üKý@öÞ\ªúÿeÁ“G*ï1âÊš*ÿú\}àþñH…k‘t¸=FU‡³òZ7ôüõ«$Öïv5®ÓÃâêß–¿>ÿó6Ý› `‚€ &<]x .Ƶk×Ô¦*¶¢ž&j×âñYáÂË&«KoeãdB6>‘À ‘)qõ«ŽlH¾$q\ñ>ü¿ä/yIž*!Ç‘}x  ýM¢Ï™¿I•þÔjüÛÚû§óo˜¹H–¥Ÿ– ¯­‚OH»þ.x…ÀYþÿiA‡ß?­Þ¦úš `‚€ &<(A—,ôU¿Õ=ãw.Fs.%ñõ4’^Ž3aÎ÷H*ï4ûô»>2 3Py(kÃó]q )ÅIO»ão~ÚÇ«¿Êà÷?Z³òëcƒ%±÷hƒQýV¯KÁ«|×á%Wý»žî~×Gw¯ôZ“Nù°ÓëÀ ÜÕ"½N÷Êç¼»_½óÊ1Àû~yß/ýýâß뽞‡~•8yí7$(ø¬çcœFÞ|Öãý•W©«^_©üßä;_ä½/ø|Wä?çáIÀé^yèíþsjŸ«xZÖa˜ÇüÏÊq{õvê×?£@ãòî—ÿ£Ä¹_Ú½×ó•ö©6r +/öYŒóÔó0~÷$îÿH¾šæ^ñ„ “÷PFÿ®|Ɇžéõ±®E•>É_?ô1x¯:êùéWI¯Ç—«ñ{i¢ä[0èñ ¾¿ßó£Ä/XW½N’§qŒËÐê—ßvãúêé%íà ¿üËÒï Æ-ø¬Ç3]M0AÀž<”@7nªl ô«ñ·{ßk™ØÑÝ´ýîW|º› Ìÿ¬m|bÓ§•ÿ ÍW?†(?µÜå(w#wÇzÔ'½ü{Á!¯ ÷hã½ò×óЯGîõç‚×{åaüNoüîQîµ6‰o-¶T_‡·¼Qß寍n:äõÿîUoýÝ£”£Çý_ê¡çQðªç©¿×Ÿ¯¿|6Žû§Þ³ãdŒÿnÎñGuåœ4tµVé×{Ä!\ Õã=> 8Ý+{½{¼šÝ?¶G9/Ü8èïßýY÷ÛWðùI–û(y?JœÇ­“Ï‚yëï5¿‚é5ÝÃâý‘|–FÚ&AâÇÍŸÏ2¿?Wï_ׂ³úþ1¿—­à]p½P{j~ ãøùoóï ~ן ^%…¾©Ô†EHÇULb¨O÷úÑdž_¾WÜ‚ïô4úû‚Ïò^«ŽôK_#¥œü>Ҿݿ–†ïz&ÚãõºH9¦`‚€ &˜ ðôCà±ôÇ7’\…dÐQQF*nܸ„” xzûÀÛÓ[¬Ñ0ìpò|óÒYœ¹t‰Ii(TaJ©­XßœâcïÀÂÆŽö¶¬ŠñF­ßç")>< ÖÕřҭÆÙ™éˆO€½£+ìmïí\E/ãw ´ÁÐpù¦Ž#²u§.E lHE¸ØgaÏÎ]¸}' N.®(U.~^îyÑcÁMZöoÂRž´?-1{ö„g`Y„÷%,c‘”šWzжµ¶RÍXÆÅ'ÁŽjl­4~ÛwoXê}¤!ŸZŽ#|Cꡜœ,;°ñ9ö¨V5 6<¶H¯cÁ²LÏùÐa$ã5=%7èé7%- ®^ð-RXIE'0ÎJKÂñÃpôìU”­Xaå‚pñÔì?z>AeP§feØX櫘_Ê¿ûN‡1W5ܤ èøxöA‘Âjåòpú3ó~òµýßr4nkô팓›ü‹ú¨qlüý+éï›ZÚ¨‡ËgN!.Ó¡¡¥aÉ÷²‰&šÐxz<}Ý•4ú;=½zÇ}/3~ÿ{‰­í ²^=¸'/Þ@©Ðª¨Z çOÄþãàXÁE`çä wWžzaT'}Õÿ#ý•Ÿ&NEŠ™+BË©6Ô(¶ëñ³3RpìÈq¸ù!°mË +…‹Ü¿¡üEàƒ´L3xxºåµUÊOMN@brÜ==xæ»™Rã7îýþ^}£{䊘"š `‚€ &<Õ( Ú~2m• Hçòß8 îƒîÝ»£|h–nÞMÔV‚ÚÅ™­•šƒ[Eããp#<šDz²ö-7Gmtá—Nà‹áCq˜‚ R†É¥úžÇ¦ES0nÊ2¤™•%†_ÆGo¿ƒƒgnâiD¢lŠú¿ "ú¯¿S›¦j‹†ðȳ‰ ñágÐí­/›*™!Çâƒaäkpø‚QóJ|ôUî£GÿŸbêm²°jÎwhÐïGØ:81ÏllX8ƒÎê¼±pýd@ë2¾üd$Ž_»£ÊÕÓÃLõ?ã¿ÓI Þò]‚\Œãᨾ™[Â<; õH$®ÝyLÅÕ:êÖôs(¸qJ¸ptÞîÛ ]zöȇ¡UóVøjâDÅ¥¤<ÙØ¸t&þ3ø#\¸v 1ÑØñÛR¼ûîûDÀ¯àò…«HË0š@÷(ïßøJ`¬æfv*VÏýížm·Þzm:÷Àêm‡Hä»>¾ÿ0zm΃3r°oãtëØÞŒvm;bú¢ H§CóœÇÑõ‹1qþ*mO䓵ÒÌLöÙü5Ô8¾¾®¦ÇÝÄô)“qòr´blèïåJ½vm¼³”õ‹¦¡Ç€¸z+‘·oaצèß³Îތµ“Gñ݈!XòÛ~¦Ð‚Úÿ¥žü×Ëzܱ!&$ÒãÂ1îÃÁ8z%Rc0'ÐÚoœ·xÁ×ö•Û—ŽcРaˆHÈPéá¢^ü¡É_KxëÂa¼üÒkØúºz!íËNÃ/£‡`ò’ÍÈ1H ÖQê!ÿ:<Œ¯¨J¦D&˜ `‚€ O-þ º¶IrÏBløy¼ób%86‡ió¿„½y6‘+#ÕZ‰$Tš ft“†^:¡oßW¡+f¥§`Íâyøá›áXw Mz½sÿÎ`^±$ …‹„!?Z6ó]5}:Z¼6T+‰å¦&'!5g´ÛÚÁÁÞŽ¿löò9—Äv,9ä9p¦4ÜÖZ“Ëf*!z+[$§¤ÂÛÕ¹”öNhJd½q Ïb¾¸™y, ¡R)ÿ†?‚0°ZÒ²§÷¡×Fb宓(î㌜Œ$܉¸­*ýö÷ÓQ±\I„æûT"ÍËÑüµwÕ7ABr²2)U‡™…5}r6 u$ùùž2qX²3©Ác&ÇÙ8©ï"Ræ„_LlÙê(?‘ŸN@µ ßÂÇņ°&rcø®"™~ò ˆŸÀ3âò1¼V±6 ü ³>ê†Â.ö8sd;j6l‹è”Y=øEdÅÝÀÂyÓÑ¥Ïpô}©r“nȧãQºqw¼×·½ÒX°¶Ñ4&ôqŸWпõ†ðÕÃ…£»Ñªk?Ì_¿­j”ÂÊYãÐêõQ8»~Jz»ä!ázü'uý·ô…NÄܹv o7n6S—ᵎ q|ó"ÔmÝ¥N\E­rþ«¬_²r?ýÁœæ޶6ÈàÖ’–ƒ\+;8;rß"±šÆ}ÌÊÊšGØåóÛ3äTY—‰iß ·b5ìÉ£Âx–7–kf+jÈdf¤“¨6‡5µ¡ÒÓRù/ÏfÔ6s‚•¶ §Æ^ÅüÙ“ÑsÐhôéÒY ·0îãÁ(ÿü;xoà °ÊJE¥j•/•·ô†”‘’œˆtî…vöyXÞSœoÊW Ž”ÔO ÀÀJe´ä|Ÿ“‰„Ädî9–pâ¹à²ö™SÓJÂ][X§%ÊóSÏ2só!£^ýgB¡›£xÙ0Ô ˆÅ»_OÁ²FÀÕسa1ÞüdöŸ}ºoúŒ´dÄ%$ÇàñÎŽyû¢žœ˜@!B6líì©ÕÇ LÁL0AÀ#2Ýú¼…—;4„yz–ÌŽEëvQRž ÿPôëÓe½‘›™Œ+bì÷ÓàP)—7"Ö© ¬‰äèAˆU+{¦5*\ÿøWÍ_⢕­l[‹!ߢAµ²ªh©C®…-¾øæ+Ä]=‰ùK7 dà‹êìewŸÀZe aÞc`TŸs»¾Ú;Ó¢0{ê8W„EÌi®¯çà;u,füd†ÿô>VQXµý4‚ý<°iÝJTnü× Ä×#‡ãfš#\¬³àR´z÷é…²…±yÅrL_s©…–"öÒ1¸d§aãúu°* }ÿ*^}é9¤ÆÜÄ­[i)HÁ{*Ö/_Œés—(Í+s'_ôéÛõ«pMQ+ÊÃG“0ce?EnvlÙˆ†Ï¶D·³J~å4fQ+`Ï©«È¦GøjM;¢×‹íQÈÕŽõ¸ÎºmC«^ÃI¶{®šSÚ‡—ù°ÂÕz ;7ô~÷K /^¿½Ô-B\ñEÿžø~Á&T)髲9Ç5âç_)©äª<ÿrothY–Ô¾Ù°|!f.XL2§cÓ­ÑлhU¯‚T–ãY<¬6¦ï&˜ `‚€ O3ž8®+'= §‡M®-MÿdžƒO¼Ðµ ª…WÈnAB477›ÒçLˆÚšÌ{ù.òÂ>¾$ø,àåËoštZ•s,8‡›^f½+Ë7C|oÆ“¸´FRÄ9ô¨×}f¯FûÆa8uh7npÍJÏÄÎå3ðÁœ˜5î3¸[bÆ·#ñÉ„9˜Ýï ­õóÎôw¥ü_¨ém¨BLl jU(G;Y ÌmP¢TYœQfRy¬íóÓû+}ž-›W£ ÝO[·ÆÊ©£P{ M¬}‰À¢hðê84¨Wþîv¸|z?zýgöÀ9ÙÁî.¨U¿%*•öG@n?†!o¿ú Á³ÍÚ!öãVÖöx®Ûë(ì[Ö9ɘ8j¾™ì‚ïGõG¹ŠQÙ¨Tµ6šÖ,œ¤H\¸PÅj¢s«†ô·âŒ%ë~ÃY³zèô,°÷·_Ñ´Ý+˜³b3Šy`ÿÎm¸~ÚX$ЕÖÔ#t”hÀÉV}íÖo;‡~£ßPÏÉw®aôÛpÉ«Fü±×°y×iÄħ)ý¥íçÓ|10´¤*%›üü¾¡ôûEâYcZ.†U3¿Á#?Ä– ;8µÿ›ÕQ o_<‚÷Þè…¦ý¿Á°f5qþàFÔl2.¬†{êâ/cù¦}¨Zʇ÷íFJB¢ÆÍÏO÷¿tMïM0AÀò!ð§èÙä²Ç$%ÒËÅBª¡v­ZX9{j”ßc§#4¸°°0ÞŒd4'ç<¿‚:––†,J¼EÑìAæê'?š`}æVLI‚%=GøEhsk[T«×õét.-öNŸ€æÂÎ*‰i™.‰ÁŸoÀû};bï¶ßðÆçÓðêóÍ•”Â.ó_?YFºôšÍ+ÿ“è¤%Å"ÁÎE}‰…ém0ËIGbz.BªÔÁ'ÝÃ0gùF¼Ù¢,‘8:Á¡£¼[çñݸU˜yä,*”Jã‡ÙDZ–®ÁkT…´²²B¥gßÀ›½{P*n…bÞ65 qI ˆ»•‚éŸNB9+©6ŸŒô\k:@*‰wWmÇ+ZÀËQ†¦5•¶בDK¾’ž}ÈÐ[ð﹆{&ÏóOÉ‚/r N”BÔ^-¬¨fI‰)Yf(„ŠõÚ  ô°J"Õ €ïJ::«PuëTWp{Nñâ¯kÃü{€ù–ãO‰I„¹»póãæÒ‡C–±vOþ§'v÷¯é 5Ás‘š•BUl®Óú„WÌ¢\:5bÒ>1èþ½3JKNÆëÃÇâÅŽ­cÈû͘†‹áÃHüµEݸÔ,¸ÿgB°cÝt~oéá¢ÈŠMG­& ÉŒ«Z5•ïG3P½Ã Œ5~Ôl“@ØZ‘>wá’’`në‚Ä„H¤Ô¥J!´VCTªR aaÁŒ›ˆMk|áRyVÉo†bžzy¸"›Zh«OÃG?-Å ÏÖ—œQªLRSÓսєQÏ÷úQA†uëÄÁÝ0+V ¡¥‚TÔ '÷aü/œ:2eü„‘Hg²ÕêÁŒ{9rÓ±wûfTkÜ…Uü'm%ø‰rPÇý¯Q›.صq>¶{N~BJdœ:° Koûáo$$ÄÃÁµªà(Ÿºˆ*î ª^9”ìÛÒim£Vh^ qÅÕšýÃTcL?&˜ `‚€ O®‘²á'FG£gß!hÕ¤¦ªx©@OÝX ÇÎ\Qº ^¢°®ã_Zëî½… Á›“­6G‰§pµ»ªŒ,m-•¶Fä "g¡¤½NEI„Sšèæ_ˆ@¼÷Vgü§k"Õ¨»ãÓÏ?D KÚŠù"!â2~[½‚¶æñÊóë/Ÿö…}v bSÒV£tžú}&íÇÄ3¬1’þ úkßþž¿9´··#“ÂÚV·ž“z’@#LdÍŒ„r§¾#ÐæÝɨâùlèMÙ‚’ñÔ²#Šx$®LåU¤|¬/ÑVRÔõr•Ö¨¢9D-Ë–òA:íSÈq#/ãÖ•SX~ãé-ÞÆ5?vªk³|3;j=¤ÒN2#“YÈh5 /Þ™‚Ã<°²´„«£¢¢4I®LˆlíÖæ$j’qáàm8Ù[ó]&’è„1=%¤¦Ò65“ÏiÚ³¹àÜ2|ù;]þ/ežÎT­å˜Îƒ‘6(­îâ,>yHý_Úûä›ñð8imI"+÷ŽÚ#$‘°gÅw…5ý‚üÛ‚€Ä†š0Üvè#°söD½æ “›ÒeðÚgý°nÓVT*”µ4Ñzåë·ˆ“R 53e_®Ã,'; … †“®’ƒCÛV¡g[2íº¾…Ú•Ë’9bGúZ‘!ž“‘4®b£.!Gîù.C_?r³Ø7²fp½á»4sgÔ(QLÅÍ¢V™÷;;Ð jßVw÷ÿ‘q.¸AvJ4¶lØ€¦MûR{N#bÓSЪ}}2|Å‘)¨-—¥|ÂÈ}Ô•sظý<ú}1PIÛsˆ/˜SìIÑÊÆÙÏ4è€mPÂ_SmŒ&%-¡n98Jí¼Ýë£(°FëOG£¤Ÿ7J—ª€…“¾BÛF5˜ƒ=^0ýûöDXé@ú ™wÞ²ò¤+nÊÏL0Aà?ÓѶ+‡æçã‰Sç¯#—j^òÖšŽlìçz x lOB3899ÂÑÅŽbŸL\€È°:jFræŸÂéHÁ¹X<²ëŠâüÛYj›s"Ût"9 ’`†Fí^Æö¦íO•Ô_ü o~6S†÷äFoŽªu›£O»gTúOvj4R¢q› =È&mCÄã÷8¹¡2zÄ?pý«%eäà§%“H3H9ô*[ÙØ!×’ía(Qùôo² CÞ| >5ë³/­(E·Ã¹Õ›E$±4ûÀX?w=ÙL3#}dO[é' ætLäBÇ{–DšÄvÿ ±œHà7¨¨¾ËO6MŒÛ/ŽüìèD‡8Ž´êL€ÀK['„„UÁs_ÌBÏÎ-äéçwáØÞmÔ±@[C¬ìغî'¥BÖô`¥?«Ùªõ™ ÂùP06³†›‡7Žn>…4¾åë :|:uðžyÕCE#_웟Þt÷pÈôÖ™¶žîX`»:ºÊƒÎ<ÍrSqêÄ!uíª°‡í$/ퟦ^v¶¶°3Л©´3?¸å^ä:,¡×Ñi¯¿a'ÖÀ½v7T )¦Þ ᜙™Egd,/Í™—™ ò^´”rRc°lÎh4ü`¾~ë•n·—~YRí­²¾È¥ú &â#à®õ‚fii«|¯XXÙÀ23®ß`>!°4Ô/“ @+ú€yøò-³Œœ[†«çŽcÏål|]9T=Ë­½3VmÛGí¼4¸98ÒÑ8q•5ô ±¹AUQ¾d€Š/ ?#H õœ­¬li~g—'8º[šeÁ̯,º½ÚžözL:M%cÄ’°ïÐs0’:öBtäMüøñ k_'Œ¤†˜æSÁxÿû3êoÊÓL0Aàïm'|Âõ” –öhЮ ¾x£3®Ý‰ˆð˜;cæÜh‰ŠeƒT‰¢ž¿}i•õ6MS”Û«”¶Þ¼~;vìÆ¦…Kq`ßœ>O5¼”4âÀLÍÝYÅ3¥ÊÓækÞhŒûe&Î]º‚ÓÇöâó{ Ö«¯¡\7¹ì‡ðí÷qñVï8ÂÝË f”özzûRݬþÓ¾7Ömß›7o`Ï–u˜91’-œQ§vc íñ,Öí<ˆ3D§þøÖ.¼~WýEõM£¥5í‘‚ÿȱÿ‡ˆ†zÚ8¹Ã5+—oÜÌÏŒ}{ûU¦3 K'<Û®#.°·/ž¥<кûÇzã­1ßã<ë:{xÞïô:ž§§e'"’)Â9'5‘¾=¿j=â“ÓàéŒ^ýÛ`ࣱÿØiܸ~•Îs~ÅÒõ[©în–TY<á "•ŸTîm~ûž¢;Q»Ôœ'š£vóÎèl· ]¼=GNâÚÕËX½` êµíY@'fŽdĤàÆåýH¥ƒr}ë$甦†úOÍ_‰Èªq§Ö3„V®‡-3>Ü%ëq;ü:æLž€µR:HÎ’°ü+Ûû$ëýXy©5]Ó )†ª—ÅÄ xôf8V-˜ñË®¡v…Òœ ÿ+BÏöþôË9Øò®]<Ç|WžxR&H“Üú—ªDŸ*Õ±pñ*4iÖ…5ÂÝÆÎ Ñ¿aÝÆ 8zâ$ÂoGQž‚S·bµu4ã±–.®~8ñÎ_¾Š£û·cìû]qšvÝDsíÌÎ5Ôd‚žñ¹Žß ?Íu<½HŠÇ͈:P£Úvóçñn÷X±e®\:‡E³§bÙúýZÚ‡t—æN"eaÿ®­(U»Šû ãK:,Y VaäØŸp–ûûÁ]›0eú|œ=sÇDƒÆ àfÇýƒu4çºøg‡2î— 7ÔN+-´F˜-ýßÿ<¯\Ã¥³'0“NûÎ\½AŸ7›1yÚ<Ü&ly≫g!x¹²þüªþÙ 0åo‚€ &˜ ð!`1’¡`~:"xéÒ%J<]àéé©¢èï Æ7~Vq D³wÑ T.SsæÌÞݻq&2ãÇCµ²ÆI-ðéCt&“^ÏÖ+ÏïÚNžÃ#Ò¶¬\Â3V·"¤IÄ^¿ˆ“n¡lÅ ä ÛªQ¯—\]½Š a½*ømþ lÛs›7¬‡m`SŒ|«7Šz:!#9k—ÌÆ¯+·â¿ì]`UEÖþÒ{¡·zPPPD X{w­«ëîZVwÕu×^{A¤ƒ€ ½Hï Iéõÿ¾¹o’KL)îx¹÷ÍræÌÌésß÷s¦cczî¾yÚð'Yê7JA«ÆAø¿ÿ{Ëù"É“&#®a+t=¹Ôk„štÞ?õï—°55¡1µÐ£WtëÒÑN¨`½ §ODLË®hÙ ‡D¡‚0ýŒLRŽ Á_̽l†•GGGÓ+á8Øñ•<‚7j;€ÑÙ©kðù¢=pæiÎ úø²½T†JÇÕKF›¦Ìbj S“Z(Ml†ÞgöâKybТMd®ø£ÆMÆŒ™sÐãÆû0bÈyüI @dîÝŽ£[—ˆà÷bþD[VXš´ïŒI‰hÙ® öþ€w>•|cóÄIߢ]·ÓÑ:¥!Cèù“v»7ãÉûnà³D›Æzgw ]‡‹Ï_ƒ&á£á›¹¹¹fí›7 ³¡ßs~ œUÖ!ìá }=¥÷…ÈY?_L˜‚¥‹æaúìå¸ûѧq5ߟÆh ýtaFN’[v@ãº~K‹°{o.j7nÃ×Ô.oúx³;ä;##áááæx‹pÄa'nm»±‰ míÔŸ½ÿß0ëÒüðâ#÷¢cS)KŽz~ÄûWË>º*8233ñûWËD|‡E' M×n˜>æL™5 óWlãÿù/i¢uy€Âïçc9lõ­1åð̹¢‰Ä•23öñç·`óæõ;êsì i…Çþ| R¸ÅfüéÉÍÞ³ïm‰ÃÓ÷Œ@,²h%SA¯Y§¦ýŸOYŒf<ž@å=2< 'ŸÔŽ¿šBzJïwšõ°lÒ;xó³IÈ8‹:¢k—Î8©}[¾èµû ÃмÝÉhX›Ç™J ½¨IÞØªIöRBü>D&ÔÇI­“Ñ q3´h„QcÆaé☽l#ºöèÉ0ðšæ§7ÈfD\T•üÍ®ñÜ´íx†ô~—]‡VõkÐPOÚψ¬ÐÈxtìz6Ö~7ÓçÌÇ´iÓߨ5âr1aæ \z¥~Z2 %¾whw‡JâµêSðn2”€s¤ky\­„tïzBƒh(e^tBmÊ=1ãËðõŒy44ÌÀ’-Yè{VoDúçãƒ×žÇW3¿Ç¼YS‘•‚[¯» v˜ò‚ÖǾ}ûx¾= ÉÉÉå`ÿ÷Bùà¼< üa€ÇžÄ*’eÊ™Âó_õë×Gs¾$Æ_Qºú»Šò´¶ïÙM¦Ÿ„µn*Ùçö*‹ùo<Œ1ëâ…‡Fðü›¿9»&Kx.…½™=!ë:WVÊ7)Ô½"$×£¢-þÎhVÒöeÂ!w5è%óý®³Jñœœœ~þ$ŽJgl”“¯¤ï݃,zy#¢cO%Ôþlš›»RÄ0»ž+æÀ`¾Õ\Öïb y©xþ¡[ÑꊿáÂ)Èðmò*G¡´°çñ|ßîÝ»Q§N#|Û|¶#ýWçÄp×úü‰˜“ñÊ·+p~÷68ž¼|¾E?¡ü=] G1σç3\1„¿íªßÑU*ÊËÆŽ©|QOêÖå}ÞýÆn!ç-”¡™Â¡æ.ŸmgúÝ]%EHìIåˈX.:61Œjp^ U†Q¯>Š¿NLÇôþm‡èü-8ó¬4àtóv؈Ȫ­Û¶o s#.ã}U?,¬³Õµê8‚óÜQTÕž<¦ñ5jòckú~ ä9Ý—?ðý¬:ŠòÓñùÇcÞ‚e÷ù<¼0ܧ|ª$Û”TU²øs_UNpرéjŸWÕ†;Ï]N÷J¶êÊ > Eµ›vÂkïü ç ¸›^×wÐ>¥6_WaL±mIH‹äÇùNqÄ 4nâ((Ê×¼«ÿ –ãkLzaO8½~Jš'áÅ? ˆ'LÓ<ðýY4m4ßô0¾ž¿Ê(çf^Ùfåñö8ÙneüTnKßÝeìs{hîç>PMžîm¹ªÊè¹;ß}¯g6¹óÝ÷öyåëAe ~ôƒŒŠ aªVú·óâ§y÷̓™ÿŸÌµ»¢»÷½-cóìÕæWuu—qßWUöpòl½ſê¹ïõÝ–Ó½;U—¯2Õ=³4&žÇ :áÐÊu*·}+_©2œöyu×êêUÕŽ»o{o¯¶ýªÚs—qßÛ:îkUõÝÏuïnÃ}X刧¨¸Dó±å¥x }UÙ–±Wwö^W%Õ·yU•W^åçÕ•³ù¶Ž®•ás·å¾w×µ÷•ë†ÐÈ)ªÁs×N<›Úב*îuGÑg¿þ ñEžJv¯;c  ÉÅÐøÜ¡ËΚeKèOðìœgžø/§ÛUÒ ?žq÷¹ùÜ1  ^†+þˆÚWàݎϯ"ßQª‹Pš€§ å\u…/Õטù‘‘¨[ßÇsøæøØ†pMû^F9¯ŽW°ƒ’Ó¦ð(Ø*®¶PUsT9/˜²„ÃâÜû_G4èíçÏ/Öç§"98 'ìüØdû×w(Õ®;[Ç»zð0àaÀÃÀ‡TÐ-ûµ(²+fi_¦v”'K¸aJâ¹0œ€Sû Ú5ƒø6éBDóMáŽ#–?«£ð¶JIJ¸˜¹Ãܤx;LVùÊ“€R‘üLŸ–¹üÌIÏôÑ37Ã4ùl“™?y¦öåa ŠÀ)Ýû 5ϦÞ|ç}H¢wÀ$#TøÄ’rXG‡úka9T™ÊÏTçW%\:ÇÜ÷ⱨU/*àæåñ–0d¼9~uañãà߇†b:Ø—œ'<2j ¼¬ðëàÖ΋©[NÙ‡?Ãúý^ÔKV¬AëVÍa©]ÞÙ~~ÕXQIpWžw[Ü·û¹}v<\Ëa'þœ#Z«œ²4'f pù<˜šbù„¯AuB^éŒÇÂPñÌ׫o¼eeèÎŸŽ³/¥¬ªã¬ ‡ç(ü¿<D`Ðalßy¦ñT—l;îç•á©üÝ]Ö}¯rvœÂƒmÛ¼D8¢Üâ"Á>ÚêÃ]yCŽmÝòl×…çHÒWóÞ­‡< ‡8¤‚.†ì{}¶eCu÷UO•ïų=.o£œ—úÑÊÏx~NbìUµà”*o‡€MÊ«®Î¡ž©¾UPl[åW¶YÑWy®¹ñArSŸ"ézT¹|åï*jól¿! Î-Þm¾-çj¾ÊÛÊå*·•ªÊÁI]N¶Eˆ Þ}B„:wR; ƒ¯*YØí3•uÏ‹©ëk×–1W¾´¨iý¾nE²ðÜûOŸWä8w¶žÍwwßë¹…×ÎAåwØòöjÛ´Ww¾ûÞ>×Õï¾ÿ¥eÜå+·ËNø¿ê9±e+σû»-ãîà «ûÞ]¦ªz•ŸW.s¨¶ªª[]žö‹æíPíW×Wuù•Ûr÷]]îm²íÚ«Íw_õÌ]N÷¶¬®ëÏ×]Ç}oÛQžM•óÜßÝ÷¶|åëÏ•q?wßÿ\;Rvª"/‡jãPmºëÙ{{µõ~î{uål¾½VnGùî¼êîUNsk鑾D‹•Q)Õ¬×KEdÂlü—4åß#8IÙü%•}Y_›ÎHnÙ²íÛ·7ç$‹ø[¾Gk~=ôÿ›5µw4o ,@ãÆÍÙVÍ×5iŠ.k¼)))HJJ2/–ü£Ž÷q\â:c¬÷‘´mÛ¶ÜKûó¸¿ö(ËŸ¦¼„›¿é冫V­BË–-g䊪h«¡ýâE\ïÜàåmUw£ò6r«º2•ó¥äŠ×êŬmÚ´9aö‘]ö‚•Çå}÷0àaÀÀ‡‡|IÜöíüMk~Ä$­ |âùøðlq}4”òã„NÚùahGrÞIl¶¬ÿ¿²gþׯ{tVÑñÓ‹QL Žc¤<~àú­.mU9¥ÃÝÏ¿´¼lj†gS8ѺÐKLíKíx¼«‡< ü10ðý1,o< xð0àaÀÀ‡< xð0àaàÄÂãǪO‡k½®¾ïɯÁ€‡÷_ƒµ#[Ç›ƒ#‹Ïß»µÿµùú_ïï½~¼ö¼µ{dpíáñÈàÑkÅÀ‡Ç#éA÷Àñ8eL< xð0àaÀÃÀÿ2lXÿÿ2¼±{ð0àaàŠC¾$ÎcÔi÷ÆåaÀÀ‡< xð0àaÀÀ‡Çâ~¼ëÁãaÀÀ‡< xð0àaÀÀ‡þ¨ðô?êÌzãò0àaÀÀ‡< xð0àaÀÀ‡ ž‚~BM—¬‡< xð0àaÀÀ‡< üQ1à)èÔ™õÆåaÀÀ‡< xð0àaÀÀ‡'<ý„š.X< xð0àaÀÀ‡< xø£bÀSÐÿ¨3ëËÀ‡< xð0àaÀÀ‡N( x ú 5]°< xð0àaÀÀ‡< xð0ðGÅ€§ ÿQgÖ—‡< xð0àaÀÃÀ1Ã@YYÙ/êû—–ÿEÿLá£Ñ÷Ñèãg†i/p¬'R¯Gn¶üˆÌj©Ç!9¼–< xð0àaÀÀ‡< xð0àaÀÃÀq‚??¿cI`u=K9?–€U——ïaÀÀ‡< xð0àaÀÀ‡~/ K]¸Z]Êyzz:222qÏ“ûþxɶã?nxN„{g¿m–, ³x´2—Íÿm­ÝÚf;–ã…Ï4çP3dùÚ]¦Õš‹‹C||ü¡Ðñ»>û‰‚. ´•–,Y‚E‹¡^½z(..6yv±ë‹ûÞ<¬ôǶ£67UUçpú±pW¾ªßÊynxªj»ª<7üö¹½êYU÷UåUÕŽ;ÏÞ»ëÚ¼ê®U•Už’{¬ÕÕW~Uå«j÷PmØgjÃýÜö}8pŠ0ìÝ»×ÀZ£F XQUUµëî·º:v UÕ?TžžUƒpVV–ùÔ©SGE~RÆdºþT†«òwuç¹ï+?s5[~{¨òö™½ÚJîïî{÷s{_6ß^Ýõ«»·e5ß………ؽ{7jÕª…àààŸf~® Û–-g¯•óíw{U9¥Ÿ»¼ÊÚö»hæ®]»””„ƒ`·åTß}oÛ³WûÌ^m¾½*_)55Õô‘P%­V™ªÚpçÙ{{­®Žò•l9{urúWÏ•Üø±uì3Áj˜¡å5?m©êÛVUOÝÏì½íÓ OUu•gëT¾ÿ¹òfßïß¿5kÖ„¾K0´íÙkuíØüÃ-w8åm[;wî4‚Gddd9 µõuµåÜyö^Ï”*ã®rÊßmýÊW÷>Mמܩʶ‡ © ‡»ÞáÜ«m}Dc´G%ŒНT†Åý]÷J&÷½òÜÉ]Ï_ù^ø)**2ðUEGTÞ¶åîßï¾?TY•;\8m;ª£äg•ÛujUü­ªŽžª^UuT^|·  ÀÈ šÏððp3§•ËWôîݹ1`ñd÷¦hsLL ¢££ o±ÏÝuŽ×{ «ÖDNNŽq8jI–Ð>·Ï6ü­ðñlKsŽ6¿´?á1--ÍÀ+LÑ­—£™~¢ Wî¼uëÖhÚ´©a•Ÿyß= M hÓ,[¶Ì5­K .Çsñݱc6oÞŒN:P%pÏc9°Y¦*a«]»v¨N¡8°ý\Ÿ‚=//Ï|Ú´iƒØØØrÅùçêîs+ŒªüâÅ‹MÍ›7G~~þQg$‡ ³»œ…_W‚ ¯9QàwÅÞ‹—––PÑ ÃöíÛÍÞ“—â)zu´¼…KW ……ß-Z£×±¦¡‚Iû[0iŸÈcñK 4î1þÒ{͇`X¸p¡éûx“uDGrss ~Ú¶mk¥£‰Ÿ_ŠÏcY^s©õ-C‹ ã’´Î¥Hh}iž½txM–ü"¼‰67nÜõë×7üìD£]¢¿Rˆ×®]kd‰¨¨(CwŽÕX$Ëʆ–-[÷²¬]5Z«V­2¸ëСÃQ¥Õ†£qÕ8%³ëðé.ûV@IDAT0Se ¬±uëV3•­Ê•Ëÿ¯~S²øú_ÅÃï=náY8ÖU„MÄ5$DÞÔ£oÑ:ܱº×†KYñ•ìX·ß£Ü±€Á‹Nªñ‚U5F[^Ï„;áPÌôXÀ^|‡Ê« »Öëï »úCQ?ºO8:\XäÑø%ð[»iïáöu¨¹û-ÏÔ¿—C«[DD„ù¨Ýc Ÿ—3: «Âµ”¿c“;TöwÃa÷Ò±pý–õð[ëºá;Ñhà¡ÆnÇõKq¬z•ëØ<Û¦»_»¦ŽÕ:wÃr¢Ü[|ºá=Öô Ëo¹×Ú±ôØ®#{ýµí„/Ñ5ô3rúT½ YÖ‰®û­°üÚ1²ž“–ã=Ö~ÿкPÒ˜®_Ùtû»ü±tDcÔñnÍQrrry_G{ŽéA° aÐÇn¯å/7U,$-f›äF¬ƒ;ï× ÃiG!r¾N~M#‡Q§*xmž¶÷»IyîF+ž+×–ù­cw÷p4î·”yeÇKu!6¿Ëø´˜,²cЂY}y©§`:ªð‚tÚuPyÕåÿV|:íVìóø8aWáKaîºê{¯ÀVŒà·ÂhZú…s\ÑûÁwUÂ.ø}•Ö½…Ù^n¥êoU1ÄŠ}áîá¿¶Ÿª{Ü¿h˜qV×–òŸöˆ˜¢Ru{DÏ,žTÇýÝ|á›o¿îõ—Ž©Êv}Ž÷E³ª—S•máL‹kÁ¦TV&þîtrÔà ~ÌöÑCáÅÒHÁg?Tö¯³–í·Ÿ\†–ü¤¼/C}inÔ¿ÃWœþ«›+7¿­®Í#™/øKu4Ð=g*뤃y>jð­ç¶¼½þÖ üiýJ9‚‰ssprú¨ÜþÁeªþæ†Á–0y즌r˜îí^+,tø®òÜóyp¿?7Þ X®g{ç•í[ÌWäVšƒŠÇõƒ_Í—³VìÞ´ôÂG÷@ªÅ»Ð1º·kBc°ûH T7=;œñ8¸:¸¬òT÷§ëA­:ÉÂc#aô]7<îþõLɧï6_WûÌ^õüȤƒ÷‡ÚÜÂ¥…Ù¡þÜýÛ|wžÊØ|]í3{Õsw²eÝyæþWÒûŸ´SM†æÂ=Õûݳ© «w!Î"Ï^w¨~Eþ´t[)JŠKPÊÉâ‡aM¼×¢Rž¿­"Ž XR¢…æ(N¿¤K-š€öÇvü(à©m 9DÕMê§^*{Ú>¯q``Ÿ‘0œ²˜ãõ㸠<.T_‹ÌW?â'ˆp N½”c?â@»ú?Ò·Z²h•¯C~âw1dw’Ði×@yYw_sϾü…8ᔟŸK–°HP—wÆÂ@x}ŠˆmÃÌ ^ çÊ–³Ï~ýU¡›‡¯ÆÅEDX¹¦5NW²kHpV~æ*Vå­êøsÍ9cæ>T˜¯Ýƒ|fˆ}ã¶øSòjÙ~µÏ+ãÏ騷ÇÃ’Vú¨oÛ•ƒ:ÌÌʰ›jOP°C—˜¡~´?KÅð£]?Λp ¬k“ö…>î$¼kXÜ)ôÚôE¢dö Û8œõlÛ-ïŸ{ÌÕ½}ü‹®Ç‚O{D{EyÍsèTå Ý"øÁV·~*×;Ôwõ¯èƯ“³?ñÏ}ÎYL6ï ½¯}àã=•ÓÜÙ½o[¯ú*˜¬2ª½hÖ‹:üåHÒ ƒû¯˜[ÑÎ]‘Óíü»é¸òlÒœ~+^^M28$MÃÕ”9T¶pb÷úŽ\0غ2«Ÿ£˜h …ÇÐS­#"F°ˆ>»avöy…S%€ëRëÎÁ©Coû§ƒð÷§\ãÃs¹|¤b.Þ }"™ãçyP€ˆ•Cc4ÿ’A„g±&Á`d—*ðüómûJhq¶À`µÉwßÞspæ¬s•ÔÚ2ûÓô[!÷ —n¹Q”ÑÀiÆ[ ;ï•…v•7ã©,ƒH.“|õ³ÉǧI7x¬ÒOö¦Á£¶“C›-½ð'Öx+v§ƒ/KôÿÜÏŽÕxªêWc0ûˆW·*YLõôÌð™êd »ŽI#4V»O´Ï¸°…‹Ã¡£5J›ý[.Ó;4FK[2œà_±¼[ð φfùdI+óŠ©ä¬m‰øÝÓš`ãfþµ•‡‡Á©CßOt ®m7G"¸­®bq-=Ì*Ú°tËý”ÆâXøPÿG:™¾µŽ‡¶)¬Kt¿´ö±.ï[¨#›/ãÉÍË'¡aøE$…äç@6ÏoL'*&Á\ÌÅ…yHß—M/œÂ#£nB¥^vXf‚؇¥Mê2mg¤þˆõ7Â?²Z5kÂvͦ´“ª«³ mÍŠkUíÚ§¶¾úA),Èž´”QRXIHP QÊ÷gîãù "„„G *2E,—¾/ÇŒË2rm’ˆˆ(„…q1Ki-DzÆ>—!Ò„¨„iìG~‘Ûñé«, Â‹6¦ˆVVf&ò™§±ÚQ˜5ÀhÉ0V8Ô\¸ŸUàß=ë'¤²Hr¨9¶ãQÓ9.%•ÏÏÍáËJ¸&??J"¹C(d8DùZU$§N…USs§fÜcpª^½×Ñ"E·¦?wÝŠ¤x••!=-E%R’lE?„†1Ä<"Ìi«Hü´?ÓAywz®ÃýûvaÝú( ŠFÛ¶-Q˜µ«Ö¬…X,Z4o†ØÈ¹œ¶T@äÜ© åÖÕà//û²ó8GQu/•8侤p©²•“Å5´ŸÝ媫WU¾ê™6«iOÏTO°ë;Jn˜¿?}/Ò3³ AÁ¡ˆ‰AxÃÅÔ?‡Jee«Peí¸tŽW÷Îw1Á@Ò„<ü¸ëGäæsϰïpÒ‚XÒÁ@ ¬kœ»3­jú·Üý»«Ú{ OÅ8ª[ŸN •WY?÷°övQa.DߤT¬CgGDEï$KX² 4å™ûÄØ(³o, î«…‡µ«Z•8·p¹Û²÷¶MÁ­„¬<òšu<›—çŒ&)MQ§FœQ´÷UFãÊËáÚ?2{ÖÙ_vïs¾$è±hyr÷c3—-£kuuõL0)dÚð—ü\d~èïð„à r…Oe•ÿO’ÖZuÏTØ÷\·n<äfbåºuØŸç-›¡FB,J òÍ>ÑK¨,ܪ§¤žµòs³‘“«}ozuðT Œ 14ÊT¬ô§r»z,¸l¾{ÿHØÝŸ¾4 ^òêU{&˜ïˆSe›3‹jÍÁy•¸ò=S™êžëYUIð©ŽèH)ÏDŠ·ççå í@ü(¸K&±J†ú,òö<Ê¡:VAUWÂsa~vïtžÉÀ‡è¨ŽÉQœ-Ô.×±áO”7"È“ÂBœ#3e¥Å”Cȸ)ƒBxDBGŽ8øCG4Æ•ʉ•&­]¾ i¹¥HnÂ}’‡RòHg^Z¡Õµka5ÏÙ¦ø~)åš5«–cÏþÔmœ‚äúµQVX@\ä›f³Î¹Æ2²ZLE#"2á¡Á¦ÜY”ó¹‘c’mBÆ ¿RdîKEÆ~ÊŠ\„¡”³âããB~fy à³ìg_…úZž‚CÃ9M/Ïtßpns*pTþ˜Ï´®ªÂÁAã/¯PÕÍ¡énå¢C2°œg´sJÑ´YsÔLp^ 'z¡pfƒGîÃÌô\PD0kQíH1 î$›:ÆÉÊ­û¾b\*qè±zû‘Rfß—Æ–HŸ}2¢•#T>=#“}ˆ.…›wh„SÖ—ã­Ì‡k§c7^~ŠGÁóÓµ&‡Tvn^‹ [w!&±š5KA8q"¸%;¨ž?áÎβºW(éŠößuR\„}¤¡E¿ÖFõ,íU9W²³2ùŒ{±¸ÔВظxîîGÎ w´ÙξféÆÐeé°Æ£ù %ÿ %½×_ª<³‡ìÃ*®•ËWQä˜gÐ º¦FŠI&6,ý÷Ýtθþ. ¿j’kEcÑŒYxãÕ×PX¯î¹ýtH©‡×.Á“Ü’†gáŽ[®E«Fµ©s£ÈæÛHÚ”Z€š|µ/¡_„Ô,|.² 1{·­ÃðënNŽiÿº‰Š‹E –å¹Ò ¿k3kÁ*Y–iW‹Õä;íjA:e¤0;JBöökñìSO!;±=î½í´ªÏžäf`îÔѸû¯ÏàÁ¿†¡z!s˽ø*Ò Â\J¡+§Zø"}úž“Z§ gߌ|÷%<;qÞ~î¯8¹Ms”1|˜=Ú± ŽÓ?›=÷"Éš1oÊWøxìdÄ&Æ‘¡îƒ UB tévz÷< ‰Ña _t-Í…6¥’ˆcm~Cؾµ@ŠI«¨Ö‚ˆèÖµËñé§#‘Ôªöï‹„ðô’:ßû¼ÎÚqmÁ+ka8…%Þò>[V/Ãk/¾‚²ø$’!æ’¯ÇÕà˱Zt@¿~}‘\—o§'q“*bV¼fMÒH¤¤5Eðc<ü"adžåøbÔ—Njƒ!õC\d(• Gˆ‡ÒÁñ µ*ü°¯‚©õá똽b7bBI3ƒµê£×Yg£[§ve¿²›6(¬¨OÓzm„4}7øäÂ(íØ»Ðöìùaÿ›pí 7µÏÆØwÿ†±‚äIàxÄÑxcˆ«¯2+ãu'ÃÚµqžyþFÖF^T”íò2· ¤N/<ñ÷[ѸžðW¡ìد„kC …oK xÕ‹çáÓÏÇ¡ý™ç᜞§""°Ì̱ʻ×Neú “à4ošÛ_$…e§?1õ,|ÿÝ·7v,FOšÅRLþqèÉyvõ•èÜ:™%¬V̽`+æ  ×=Ÿëeꄱ˜¿.—^yÚ&×5Âi1´Î[Š^°8× ñ´u&Oœ€Q#?ÀÚsLWMZ´Ç€ /ÆeŸdnÃ;ï¾Ðšmpá ~¨…¼ÜÚ2+è•©Ä!äïO#_Á~Ìœô%¦.Ùƒ!C.BGÒ”b ¾†îG×±aÞ9ë“@q]‡ÖxhçEW%Á¯:*“—¹¿ó*æ­ÏAbX Ò2sˆÓ,X”‹·>þ/Z7ÆãîÁ„࣯¾BÍÄX#ÈÈ2ϵ­}k= vÔû~ôØsL3¦LÀÔù›pá%CÐ¥}Sq }k\ó®³ÍÚÔÚw@vÖ“žë}Y{Ä+ïÁlÔÂ;£ßC½š‰ÆKà¼{B^ìÜ´/?ÿ2Š#c›•¼¢@ÔHŒGÓ¶'a×@ƒZ ì£Äà@<Àz,-2cÒþ`2¸Ô†1Éá!¸]Ó»à_qøö¨øJ™QÎå•>²önÁŸ|»Sp÷Ÿn暪O…ŽE!ÉLJìú÷!ÖÐMí S¶}K§Ž™sŸdªþD¯äIíÎIÛŠþ;cš€ZIñjÅ(R“]jǹçZ òÇrîÍ'n¿A'uG¨p³V„«ìý{0{S>žøëƒ8¿wgV¢(«93ðëkwèöÝßíú3c,)Âô/?×3Рa„I)ÁsçÍÇ=‡+ž…¨`†zJ6Hßw<Âj·bÍ8c°|FýiŒº .C+XÑ™WÑ,‡Î°–ÇÎÞPy5QrÄãžm«ðÈýÃxÊ ¸qÄåhR¯6 öïÆÌ¯?Ãý½€Ç^xçÙ¡þ¥Øºa%&Žé3¦`éš]Îè«®¸ =NéÀˆ:…¬’ž.±°µKæáÕ—^FvD\q՜գ3‚ͫWà­7ßÂÊ-»qÚÙ—aÄ¥ýN# 55³o}kQs"%>”ŠýöõË0rôXDÖi‹/8‰äA{ñõkWãÍ™À‹oB£zµPÂñiŸúɵଋ+­q=«˜G3.I‹Jò1ý“WñüèYxø¥÷‘Ü ž™c„R9Î]vÆ|ðÚ‹øpÅ<ÿ÷ûѵ}2Ê8Ï«ÎÅŸn¹ ƒîzW_<µ"©(¥aÁœ™˜0ákŒü­é.ºQ \rÞ \ráy¨_+ŽJŠŽD(š« fÇŸï~=Î;eX>.¹÷Y\Öÿt„vŽÍ“ä g¾Åsƒ¹R·®ÇŸ}†Ò„d ¾p êÆ†!Ÿ|Z3ïði¢œ8^]Kwœu$¼(iÚ¤¾ÌþäÕ¡y‡¾½hè™SZëPJµöLþþ4¼yËLÍÞÿb2'ÎK² ¹>$dìÞˆ7ßx›3hÀñ/@&ÔþúBJó¶8«o¤Ô¯I¼j:pûz1´ÓÈV‹’›ó\4£â(­¡)fŸð)aö0Ÿ»×…3^Ž“}Ùý¥¶Êër©²{ÿkïIsd ®éæâÅ7?Cpx,òÈ[ˈƒu æâ”7â®Û†9óÌyR=vn>ŽìCn”“…÷Òÿ¼9 kD`éÔÏñ—GâÁ'ßDú5ÍÔ|»£¦,?ÔX¬ÑƒPó_1æLƒ§ž{ WÜõ8†žßQ!Hݶo<ù–¶Â÷]ƒŽ­#?; ¿Ÿƒñ_OÄÈ/¿Ñ°É@ë`èáâÁ EÃZFf}1p‹®PnFœþ‰ŽÉ‘Ý„w­~7kÓY;þ4R¡ë–LÁÍyg]y þSD’ó%Œ2Šþ‹f,Ÿ;OÿýAt¿þ \wi?ÄÇ„!sï.¼ÿü¿ðåö@üƒ|¥{çV(Î?€å‹`ü„ øú‹/±W$ÄbàÐ qñ¥£c³F”gx,…¸ ¢Ñgz*>ë Ì]»qQ¡HKÏ‚_q>oÏÄ?ÿùÎ;£3õÔ_|kDõì8Ô²ÆjxoÿÏvŒŽ1¼¢¼Ý3f]i®“tB+衘›¬ÂQqQø‘ß?z}$Î=ï|4Œ ÂÚ•ßáÛ~6Œö)µñãö ˜¶|ZÔ  W0‚ Œ“F&•} “oKÍ㚦õŒ–|Y¢$è—p’ èe(£0F } …·\æi²MâÞÕ" ¥âœk—6†aølW^“¬Ù´8:Š(z" ³‘g•‚·<¡ôžæÓºËÅOå_Û•#3„Yÿoæ,ç÷<Ü~ãµ&K‹W£veÈÇÐ.Öÿrâl“wîà‹Q#©ߎi“¿Áœ-ðÆ#wÐúU† KÆ;Y|}ÄÒT:þˆQÉ“ «pNò‹ôÎÎ_¸Hì€ËÎi‹ô1áËQæøÂ[Úº™N /'›ÖòÍ1çžžy-e½/&Q("ÃU~ %¤Gs.,0(Älê=?nÃ[DLß`œÞãTD„š5!eX^q½5VVåpZçÑPFo˜àÔÙÆììZ7 º éžüýbƒí .Šš¥Y9j<&O´¼RÜyÝPÄ…É‹U†\Á+¯Õy#/¸R¶[Pdh¯à•¡§ˆcˆaåºËH݆—ßüˆ€~}»#,PkŠžU®¯–Ý—žfYF¦ýº´nh2í8@ nvn¾Qc¨È‡2@ʜڒ𳟖Ò|ó|ÂjR’¬»eH¬ÛÏüë F'!>Úy»užÆIü‡Qh)á¾(âf¡…T{åÀˆŽ‰ãüÐz[ƒés–°¹%èyv$ÇD!÷=ç4F‰øsl*_X(ü3¤íIÀðw…9–¶l–)`ǃÉúìçÇMëðéè18Ô§vî€À0îëâ—{<»šµ#&—O?çZoî.ãZÊ'Sa¿JYì'’¸  °¼jÑ·që=Ì Çw܇†IÑØ²v!^{ïSœ|Ztn“b :Rd9–(4”2ôv…¡j=Ì÷4>_T‚n} IíxhZµnõ¦ç`FÅ'!3u+¾xûßxéÓoÑ£ÿ…zc'”æíÇgO<…çŸ(Äyçž ¿ÌT¼úΧ„e/zžq qÍ9-+*!mÈwŒ9¤yšGy¡Ç réìÿ`ÌW8­{w4§@ë@4Ø1òú¥ï¹9TܹÞdø”á€Sc¼ Ú˜4/Ì(¶&|Ž 1—{($$Œs(ë{!6-‡Eœæn½z#¥Y3†Âä!,†B-\J‘æo-K)M?ª—±?‹ëš ×ul4×õAó^ˆܧ…|.¯OdT Jè Y>o4F}¾»õDëfõŒP#A‡¼cÚ¿Z›Q1±Æó¦0ZáÜ^¶\ã(¨çÐÃx$¦(ÂÄ‘k-rdó§}¢9ÿ†¦|=g¾)uÁ%W Yøø³±øfâx.‰ŒÜ—mPéd„ˆM'¬>ZDEˆx4á\ E\s²³ ÏÐ[« -#]r¤ý§}Î%ihE~ž~–YNBYvöÞ;±’⌞&þ²ù·\oà4òä³_ ^3¸_н$äRX‹åñç¾Éã¸òó |ôRI®WÑâÉLôÄdíÏ$ý r¢Üœ÷eOM’p¤±Èk%<Ù¤;#* ®£:' ÿ„¬œ2;LPR}ôïß§)?œás–cøD ñ–F„«„Eœ»ýò~اöð#š!þš±k3æÏÿþuZãü®-è9õCwâ5š^Q3fÒ½F¢Éx(¡R{^‚«Öº<ÜÄóÉÏÃ|njS—î-ñCÛ(lfgsßÒû‰Ò¢zË2PJ™ †kWôLÉà‡t$ʬ#ÒzFË}·žü7ຊ– F1ËfîÛfÊË %¥9Šüï¿W); ×Þ|;Â˲ðü+ï fÃ6èÚ¥½žFõ&#àìåky·~q б}4Œ÷Ç¢ï¦ãÓqSÔb[ì5^;á;ˆ¸“Œ£ñ–ò^{ÊxïIÒˆÃ×Þúh”‹¾½OC5}Íg`°"Šö“®RÑ¡G6#3ƒш$nEOòÀšÇ ™L‘€œGòSÑy7s¹f è¢ó+£,C(i šã2òÏ>Õœr/iŽ6~3žî§Â{ŒPÊý[˜»ûXgùæTV¤8ÌèœYGãOû·šCÏþƒÉóáû¯ŸÁÿ½ð/ô8ýtÕˆKY©âë¢×9­0vÜS猃Q¯•[â /Or#<ÈJ ¹.=§¨ÇÒ?=Oß³ Ïÿß{\(§ ç™g"!TÆ i Ñ¯”|0=c¿áÁ¤1Š~â:—\ZÀý_L^ªv‰ C?5z[FVÑ ­)"yy™Z\VÂÈî ‡NNFc QdRH/Ù].µöôód¢—Rº%Î3 [øì¬sÏCÍà|õÕX€ŸÕ»ào· GRT áÁäÅ$F¦ §¬L¸ä5ÕÚÔ|dî'Ÿ&-â…Q¶‘@ÆÉNYŒ0ÿýÿ‘œå(•+£T¦É¬#^ΆYw?ùßiÂ5!…Ü::dˆ-×nòr21ËGûž;ñ4 …ŸŽDFY‚øÏÎŒ íÖœ„pmÓY@Ä„„Gbð/ [f>š7¬aäÿ@g ²i&ñ¾@½óHûriD*!=gû§”e6¢y.D“%;fíÝTò¯]éÙ çjõ¤t„«¯ŒXÿ||ýÉÛx{Êüý¯ ¦ÿ~¼ùìßL? ÷¬ÆíÃ/ǃ†áš!I± ¾÷æÌ_‚ü²´ìØ—\z :·km. –ƒ„šÂuT=ÖKÅeôžœFlZñ=tÕáeü-Þ=ðkŸ‚"z®çͦÒþÅh¬Þ¶—uâqVÿ8 /ÕIDvæÌš:Ÿž@œðíÜ´+Õ¯¯±sò(˜®_¹…ñ­Ñ¡c'äf¤âÝWþƒÍ¥µqF§Öؾj²b[â†Ë#šë;Š¡]RÜ4ÿ2˜(µî{)î¼çF$׌7L0 G_±™·g_ú?Ä7hBfKÃ]b}œMAâônË0ªŒ½;ñ팩˜4u¶nߎ¼²(\1bÅãçŸdËþص`*®œ8—]7.:û†.wßÿK~ T…3úœ…óÏ?í[&cÿ®-øìÝWðCV4zÒ»×-BjpCÜxõ%Hˆ`Ø= KÅùÙX÷Ã÷‡]ƒçž‹ÆuÈ4ÎÅ€ó‡ ?€BQ“¾{¾?cÇOBz~ Â"“0ü†pj»Ì?Æ(ç š4ÇÇß KÂÝwÞÎH˜FFpð'³eŒwa2•sJ}8¯ÿô:µ3"ÈÐú÷ï-Ûw!g×|öæk-ÚfàÏ#.ÅI]‹k/=LÃuô&µ?©‹ …ŒMÂy^„Ó;5¥àú9Þ¤r^§~#|úæ³xïÃZ¸ïþ[á—¾o>GãÍå÷â²sÏDÑ~~áylÎÁ71J‰´hÙ‚Ù?þk¬Þ° yÜr BqûwãÌS:Ò ^lŒ(¤¥¢çbò±5´wà2âêäVÍ(ÜæSõò§¡&Ùû6ƒCö8!ÑôS·l”‰_aÌ„©HÏ.D½äDCeï'#†óžF¼NŸ2ÓfÍaØÿä5°!½Q’³›QTP#’0úý—ðùá¸ù¾{Ñ£]2–Ò3ðÙgâ ëÉ´ÏÂÅ DKz™K ²ñýìi&JeÛÞlFÁÔÀ:!´I—¸„"†ïQЉŒp”N­] Œ&µ8×ßtêÅä#1¼/¼3Á¤‰‘ºi%ž¥—=¢QwÜr=uA¥˜úÅÛxwÚZÜĨ“Þ§¶ÁŽõ+0á«ñ˜·t•QŒöì/"Í¿Mýèû -Nð+.A½¸`,û~6žÿ÷Ðêì«qÙàþŒ( ¥RÉ#`„M0 ×mÔÊ€öä/2z:ÉÙkA8žŠYS&bôØqØ´}7µæèþ œÓç züã°aÅb¼üä#Xšî‡$U ‹D ò¹ç÷£7­JiP[8&>ýl4#i²â¹g³úhC!JWGsŒ„޲(¾n¯º“2Ѭã)xâ…“ù½_7¯‡žy—‘öÝry?FõH)¡òÆ9Y±è;òÜQ˜¿t9üƒcià9›tó<´jR~T͘mûN/&OF<'Ô(ØKiŽÒ \Ã/ìEC˜ã'î²3vâãÞÅÊ]%è{fgl[µ ¨‹[n¸¹Ûéù)&seç–¡ÅI§âBò™Óºt G»“¿‰ 3–£}Çv”-6aæì…èÔ«?úö<©ë—⣑cŸŒ+¯¾ =»u¤P,pü¨ÀWÐ@£ˆ0» £]“O¡RÑQAŽåC riQ–Ìb”󘽩¨ßŽÎm)ÓÛ£[wlIsaM¸ƒe–ÞßmP7 K&¼‹ WFp^f{Ã)À¿ÑT´%—ø•ѽX2ÎhÌž¿ T›uê‰ë‡EdÉ^¼÷ÆM¶pûu× ×àË1¸/#“HÛeúþÛI˜;~¾_¼-ºöÁ•C.á<ÕC#ΣLöå,XºÁ5ЃÉAçöCs*T±nÅBÕFbÁ[P³2v¬1}I±Ò‹_ˆïR.Ò^”’Û¢60iŒsì¬TÞ7¶¦GljŒ{¶¯Å§ÿr”ó›ÿü† ìƒDFQ\À¾çÌžo訡Q”9Â\TâŽ]{Ò0 gcaZsF‡ÝŒ“¹FsÉ¿úä-ÌÙœ‹öÍÒºŽÎ„åhܱ;n¼þÄ!›^ýçLÿ­šäÓCyRºôÅí×_…Øü Œÿr4ÆN˜Œ<‚’X»νàbœÛ·'b‚K0u܇=gºÓPR˜ŽU[w¢výرb"’OÆÕC.@ýÄ,úv*^yý´ï3ý{vÂä^Ás_ÍG[zºe$ªLÔÀóqr‡Ögf %ÕîáQg£ß^ŒðCú0{%ákÞ~ô Û}©öå±Nݶžv‹q˜Ë9—2¾•ÇL.~®¼t8&ÄxÐ¥TJ™äbB0i§’ŒT<óŠ£>ó¶¡°!”_v`ì§Î¾ºì¦?cøyû ¬<‚?Ý~+ZÖetñìÉxú©wqéwâ‚sºcóŠ¹øïßD‡39G ¡˜1iλòJÔ*"™Æ4'·m׆{‹áåÆqâ}¼’½”bC%HÅ?Ç—äüˆjËÌ4¦soI&œJÚW̬~CoÂMÇ  £E¥Ù·òxüNÑ{}ŒžÃ=S“‹úÊ%— Ù]Z犜Q‘áÔ¹*/"W¿ S’0ç›Ñxï“ÑhÕs0®¢Á{ÝÜ øtÊ´nÙölÅ·ß}”§ã²+.Ã)íšÒa9o¼ý>jµ=-ëDböÌ8ù¼«pAŸn„ƒPhÀÇ0I‡8Á“B2¶G«X3"“·`מ½HôËdØ»ˆ¶„"žQZ·©iM±qíf¼“!œ£_8k†ßt/ój㎻‡c? ý;T&­IÅ'OÜ2¡ŸŒÅF–øœI¥KF4@ó¤Úf±5¥çiÔ¾zÿ|þõb ¿÷ ´%1ÞÁPúC†õºãÙBqÆ6Üó—`üº Lyõï¢ê«ÑÂÙÞ§¦U༛ÚKšäGwÑ=zN¡ÓÙwZ¾Ì§°¡¤±;‰–NsC¯+­íûÒʰk÷.“Ó½¡ñꖖЪ_BS—’­æ4çäç%¸‰Ðég¶a;Ÿžé,Zâsö¦bÇv ÜLµ)4G…úcõü¹¸âš[MÞ-ºEi›ðú;/ãã•©˜ôÌ=´æbÚ¼åØØW^¦b4î,ŸÄÍ» ™YBÝ$z&k7-.ƻѨyž9ŠaÈê*¼ýð¿¦þýâCÎMŽ÷ýß|û#FüZ7®e,zÙ´äÇÅÇ›þ9qΕžƒlZ‚Óø}çnÙ¶ 2=›~X€!Ãn4y7Þö'ºþéí|ë5|1i Æü$’H¸g¼ÿ%C|ë®##¤Œ±?u¶3t|Ï@µ­W± ¡gÐ6 Ký‘Ò¸¡ ¹Íg8èÄ·ŸÂÓïNÁ=ÿ£H"0þýÇñÐ]7!áÃqèšÂóCD•rèÉHOço‡î¦r®Š„¤ð§r=wÒhÜòпÑÿêÛðèµ°bÎD<ûïGP…›†ôÅòï¦àOdlÚ{W’p–eï5-ì/tBÏóé ~õƒÑÌËÀ¥ƒ!¬´K>š€9Ìÿ‰)Šf݈k¸àE Ís“$B©ôÆõTÈ"Œ´}H¡ß…F‘RŽ·×…W m‹d*mëðÌKo`Ê×£ñÁØi8©Q4&|ö}Ôëˆ[/ºû6,ÄÄé3pùÀ¾¨×¼=í]FÁ>­ÚuD™èjùóµ·b'û¼õ®{Q˜º¯¿ÉPÉ[0éå‡)dÑ3NãÞÄ €ú«Iý‡áZ 3Ú°Yœãz÷eÁˆŠ3Ï¿3 …»Ð¦uK4lÐМ÷kZ·ò)øôÊ4.ÍÄý'Ú6ˆÁç/ÝŒûo™‡'ŸÁÑTþ˜¶mÍ@ófÍÃ9–P)åäÒ2L¸µ7B鉢‡ c>zç-ü°tš6i„Æ<ŸÙªu;¦oa=GY,ÒúhÝIñôò²Yú/¹âtnߊƧÕxú…ÿÃÌ)ËñîÇÿFtBMÓÿÎíéhÙ¬)âxô!„‚Ȇ³M_¾½ÒHV4Gù\§c±¥¯¥`µ{ÇFý&êw9W8‹§~‚§¾i9OàŽaš¹ ­Ñ Wö?™Q ˜9aÞ|ñIä…Äâ¾áƒx¤l1®ºá.õ€Œ¨A`Íl}£×Ó×£úSÔ‹ ãæZ"``S1_’âÂÈ"¿RžÑäšW’² Å:œó%%l@—à±3¦[{lÞxëE|²t¾zú>4©oæ„ݱ}SÌ÷Çñ ok,‰)“¼”J+–ÌÃWÁÙ4"åã@A€9.–RŒås>À”•À¤±›rûÝ@|F¾x;>˜º ]y&ã™g_´ñ#ñÚGãpzûºØ·k=¦êHÅ”oqö9§Ñ ¼ ŸF~N;ãLò‰Ìš;‹óI«š6AJ½F 2‡2Žð¢*¥‹–â]ùèY-Êã;V;”Zx•§~Ûºµ¦Ü³z£cÛf&ܺ؎‚NÝДž&?zÄäÍW´Gyr˜¨0kÆ4lóÇœU@LÝF<ž´Åœ+Õ1š-kað×Íûàù¿>L¾º‘Çîþ…|¾‡áês: ^“ŽÀ‚oÌ»"š4Of´•#ÂÆÕŶsñíܹH®Ç³ºù1æýH æ—Â#‡ëÏÆ°›È÷¨®Ýv× Èݽo¾ò f­OÅ[þ ¡y;ñì}Ã0}+p° 0Ãt–wä!ƒ#îñ]!Ã×GQ¡3¶Ñ#ß±Ì+¡Ãf“©'<°6Ò÷Òøœ«¬SЫû)¨Å£sŠN‹Mª‹sÎ;—+¤M&Ú®g:V#/mqšêÉû)Š=¶;~˜o&mÂ7 qvíKwâë‘ï¢Q«¶Ø­jÕkÌ:+Q@¥£qýÆ<»\E až8émüõ™qË¡cr"¦Žz ?x¢?Aÿ“›!ƒ†„™“'ð3^-OÃÍZ kË$Œ¤ñ½Oï^¨íG}<D Ñuðõ¦‡°$˜Ç"¾ÍPþ• ¿Ã{4äÏÜSˆQO4¦≮L5Và£aޱCx”ò©ã›Ú«…Ù*³Ÿ´ZÇ"È•íúá1O)ÁE4¥t¿]»vEinÙŸÂsÿœfp8¸÷I˜ñåGøÛ³ïáä~Cqi߮ػa)–¤¦š³É›VÍÁ=û'Ÿv®r.»1næjcˆÜ¶—]sœ><üÒ·®À_» ‚xüe(VQé¼ç¯#¦KÜé…(`DÉÌ«°/Kðס1KÑŒŒÔÑ{LÌ>òÉ«WaÒ„ñ<ÖD'^šwîŽn4Ð*ú ëùCi¼hƒ¬ÔÍxú™—h䀺 Ç¡[³Ø0÷9|=U‘ƒáפ†YOÂŒhUav:3/ã©7¿Æ€¡Ã1˜Æû-«cõÆmŒî)BÍøpòlFSP.ˆ‰uð¬(¥9ÓÇ‘¿­2QAYŒ¤sâ-éËs€GDVΑÖôêu:ÔN4‡‘±5Ðó¬þÆÐ«D#rhœEŒzøîƒ/°ˆu®§óÛ2Óvü°y¶¥²-–ÉÉJìß›i\í_pösQ}z"¥amÒT¾C+"]Ï8Û‰RàwG=¯Ø[ETô•f|3ÛWÏ3ïÕ)(À¥C/Er³Vh׬þñʇ! ÜÕª^àQЂá÷=aŽ·Î¢Á{ê¤ñ˜Jùdè™ýRÇ|ˆmÅ¡xõ¡[è8aÈ4JžúøR£3ó®›,®'¼‚εezÏ7Jinp¸~Õj”кý æ-÷݃¬sñþ’¥è»´Ö­YÊ2§ InØüýX<ÿ[SçîÇÀ•<'•·s Ã.Æá«ébãÖ¡hS?õê“n¯ƒ'xn»EƒÚ´E!ƒžSÑñôí?ࣷÀçcÈÍà†¡çÓ^‚é œvûÞÒXœŠþÊf°}ùXlÛsR¸1›ñû¼Nxæ?· ¥nÏOG ŒaèâÚXJRJÄÎJyO›AçxÄâdV²Š<)'U(¥¸bPs§?uÚôÄßo¼ˆ!ûwî`x™”Z‘¹y%‰q9çÙ“¯ÏòÊÇÙ˜ƒ<èJºw®b¬Àè77ó…†Üp/útã•ü,¬XüɾñþaÄåç£4k'26ÎÆÈ¹_`Õ¦KÐ4Úi³n<½ñlWȰج³‰‚Z1ê7mGOÞu5óVD4i‡ûï¾ £©<Œù€Ê9pæù½h)FPY(ZF2ª"ÞÙ­»Ñ:¹¶±õ¢‹vå‘m‘À#;ÂmíäÞ\PS±e>.íÙw žç¾˜ƒATzÈ#Æ—Æ)TMaÅ —“ &£nxùIlºù~,]8Ç|œŽ€«ï|7]}!®ºæz¼óålä†%ãö?ßFA¹« ï=)(ïaØi&² Ö®!ñ·ui]Në5w^>Ï~¸˜ÊÖ0ôêq¨0M§õ])N!¬¢)nÃxÒºôv\ºG!ãS"™aªaF(½äº;ÇõÃùÕ^6ðËK£Ê"}\Js'~Foˆ¹åŸôæF|„Á(¿ÇÐËÏÙÐ åm{!šÖú â?6…Ï—aå¦m¨r¯Q9g@ ^˜gåNj‰ÌóÏÁnâ´fÃóR‚~îEWb@ïSPœ†^~åSSê2œ.Ø•Ð÷ÙŸLAê}y|j™¾â’›ÿ‚»®¹ÅûÄÆwÞÇŒ<›Ê5®u«G«tjŒšY÷¹+ðøÃ6õ?û°eË6œÔ¢!awhQ½V,É ¢Ó!‘µXl• ë+àK¼VQ9WRHp Å=û_Ìs”qhT;çÝ}¾{æ=¤×¡^d¾ÿh,õœžèÚ‘z³òò Í‘ãY@L§awâüèLg0£xö0ÚdÚ˜7M™yŽðÌN-íÓ“yñ­‘3pQ¿žhФ†»ÂÑö¦òeB5¹þ©pìKÏáYÉ,¬[ù½©?øúûp÷ WÀ?k+ö®ù_ÎË"PÏMgK½¥ë¦’ë”)E7û—ù~}D5µö¹ÞK%SAýaÙSãÆÿ…áC¢,c+òñôÁıX»q(’ëÐ3È.Í+µª8çòµlÿ24)Íþú3ó1_ø§e‡®¨Ñ8„†›ãÑÿ¼hÎíË«ôãúÅF9oÍ3Ú×1ê¥yDRXîÿçëX´l-:·LB4½pJw?ñ í׋&wÆ ÷ý§^z½}JR×àî ¯$ÏÚÅÈ ­ƒ`–ǨÂógÐ*ßÍIï^à ô2B=œ$¹@¡J‰¤ƒ).HÑ—=_aà vÂþòæ¯áÿΚhßõ ôêz ÞzíYóhÀå× %ÊϽú£¹O2ûÃBGàØ1™Þ½`äÒ“–ÄÒÓ?{…‘ ß]„×?ùe‰ípïŸo¢Á<¸¦ òÒM›×Þ|/ÎéÞ3ÆwÀ>… z=³xddG¥[~ÔœiÍþqÒ׎Áè)`ë5n7ÊyÝ>Cqß½·2R„Ç36`éöéfMiÅg)b×”‘m|4eýŠ¥X­ÐV?†ˆÓ¸£dþrèÂIíZ¢c3ŠNÏRعè•}ñ¬¯¤QVt”Í©êksÊø# mO>5k%å\ÑŒ¢ÇÖƒn óO6­Ïüs¡ýŠëþ’„.Z¡ yaTmÊtd†á”“’1{16¤Á%¨‰ðØŽ¬³„ûÏáU\t¦ g s`ãò¯Í÷¾8Mû¾{ŸóÑ3(ŒsÊ—âÒx«py»>Ë;çÍŽ4­óxH‰JömÝ‚9”й™Š)í35ù…íÞâÎãžÑüNÚÍ}%Ÿ¹Ži†p…š›N4²¶ÑtL+s§OÀ7Ù9æž3Œ>ýú£eÓ–8wèu<6’çÞ{_™§!xòå7pj‡æ(Êæ¸hfºÑg×^ÜÛŸkö0üðÕ"¤Ý˜AQÍá· zÁÃ× ¤ƒŒÇ-¢¹·ec÷³iàýù(èŽÅÝŸá¬I´ð¶&"?ùZ&mãϧu늴˜"žŸ}ï¿“ƒµ€^Cº ‰gÙŠ ÓÃP0¥FTØÃ©ü…Ä‘`´8]®u†ið~‘ÈÛ®ñhѺ5:6mh^¬¶œa¢YÌÍ\<VÍJJJä¦ãæ+؇,žPJݺŸÐ:¬5wÃb[3†(Š–:iáªZµÐŠÖÔÖ͹9sî] FϘ$ iûémÁd¬d%ùdô+IQ÷vFR ïí‡Us&`þêT´“‡¨Y²Ù¸éìÓn\+s.ƒLJ½iÙ¤™†Ã?‚]Ö; v†XFgáäÞç£uÍP¼ýÑgò¶m[£.­‹ù{·¡X©!CÀ¢HxJüãÑ QJÿßP`¥ÐQbžëXA ‰\°?CøH:”…A/úp¶J)…%ç¼ÏÒ«¤§Œúx g êŽÚ%àJ*ùWB-ÆÀ™²åšŸ†kº&cî„÷±z/U‡öÈP(ô•R1"qWjܨ®9+âM² s¾sÖ$-ˆxéd¨<CD«½’ù>B¯D“(Xè\·,µù>—¸Ó&|Aoi™8£m ÷©yA+^0ôrøgïÆã¦­ÎD«6-Ïul"ÃÍaX8W6CŸ¾Å²Y|#4™^ß³ú0¼Ÿš*•œT‡É6ONá¶£±×çñÏØÛdÖ*û7ÓÇ~‹~Ô“š|«;ÃÞyÎ]ç‹4%Ó9ĘX‘rÑogœI'Ÿ…'îF5ãxÖç|’Pr`/¾ûûï[HlÜŠÇLšC²B½%˜r®Ížks!š7jh~y!ãïêÇü@IDATHïH1é€ê†<›Ç0Ñz‹}û¸×N$Ï•4lØ–kçGóæ^n¾hL°×A3ÁÞ¾‰s~‹°ëm§¹Œøˆ¦uWë †Býµ÷þç\z-¶óøÅŽ­›0oÎtÌü~fÌ›‡NcД-­ÏÞ…i ×.¦@—Èwôà8yÞœslçUgŒõî ½{¢ˆûZûBÞ"mˆâÒt8µ/>›Ú›·l1‘4k¨P¾óñ(¼ûìÃèÓ£s.•6®z:«—ºý~õ)ùÏÿ!¢~+ôîÌ—ÀêÃR¤3Nèž‘à íк*eT„â‘¡OÌ–Qf¶Ü ZÇMñ—[®Àã/}€§{Ðô[£ù©øË=·¡N͌ڠòÀ0Ý.KŸüJÁàAzZNiÃÈ)2ä$PÈOã }L+:cÆpU* JñEøfÜhî bõЯ]4àYÐB®Í{‹sNB³F Lalº¨Y? y;£™@gL¤²è}KwúßHïôîÍK‰‡`œ{îÙˆªÑŠ{^hž»VjÛ®j&ÅcoΚ0”Z¢uª9×üë-þ—>ûU¤ÁxûÉ»iì5!›·Þó¾ç´oÕT6•v¯¢Ñ!Tª}¶Xó.‡è¤&òô_±éÞÇðúsÏàuS¸ïÑÿ¢_^Ö¶Ó©Ìy3¾…ÒŒ:˜DuŽQ—Bª<¢õ:o­Y\ûä&öGC„ø á6gÈM‡>S;Ô©dÖIR­šhÈœ­f}ç`óúuxäÚaXšIof†›3IIg›Ki,ÌËÈ0ß[6kÉPÌxìËû‘¡œÊrh§î$è &½‘ܤüƒ“ƒ?þ-Ï}Uyñ½?#—áôJ¢›ÄJcPŸã¡dȨC}TßY=*k“"³ŒÝ×¼5]~óCzn†¸ÓøY†:õH+¸?KŠÌL™ =½Ã~÷Î Žaµ]³Fˆ‹¥Ñ¶ÇAHÓ™ ¸F‹¹.mŠáÙ£ùNƒŸq3/ Œ£ìQV‡Úíé¹_¶‡xÄ2ö(B†øayÑhkœét ž¼ÿ4eÄTAæ.Œûü-<ûÖWNXOëGi÷žTvð¨G˜9­³˜¹ŒXÑ|;oªöáÇOÕIªŸ‚“'`Ò{ó  çö´îÏv Ñ Ïåb¥íë—à³´õÈ/ @·çòØP<é Ï~g9È”÷UB½d—lf•8nZŽ=šJF<ßä_Ó´“K:VÌ­y™6äzÅü°)×Þe&Àûš„W¬ÅŒâ'þS8ûò›qFädY=½yõbîŽ[EšUãQ³P¹w=ÕŒäJìxLZñ ¾üþ}\Ï §œ-.:ï .P±fùª‹õå`mH¥é8òoÄ÷bsDGÞøë6àŽ­lúb˜57ß÷gžÛbÒÈnÜ} ÔœÐj¿MD,†|žÑ®Y¿ N¼ðaNO¥_¬çÌ?}»nê¿pFS.òq·”úl]×u+.8á¬Ë9HÇ4t´H'ÑL¹”Ó³¼¥…<ªå:Ûso@rRªD7C¸ÉOb™+ß=†ƒ¶–Ðâ Ê íXÉ¡s\g']¬U 髽zq²$œ²˜‹˜u®wÐW–¥m좥•+«—õiä gãæ‹N2Nâ’âvâ…LÆÌ´Û„7;1Í#*$%¦ R×vÆ~Ñ„˜Vü³© Ô÷8ã÷¡™<·>ð<Ãu²}˜üyqr'‹7Y4hÒ ÃGÃú “®ï¤s8ՕǞȷ9Ä]mÅ …õ/QQyó w`nÈ0°$ç$N+ôìÑ 8y’ËÛÀ8Á\A1@þ„?V‹ü ¾"Ibvd2ßµ­wøiðæ“E\A£ò×-š4C­œhS\\r¼yöá™Fm',Ì ó­À J,WÑt-G3&ì\oÒUçyWž´’ƒD†ZFdHT’UNc‘Ã$4Nì×>òo<{ï“èÇsC»·à¹[+Fí»ÆÙ'ŽGTd c¸ÇÆÅ£QÝð8‰lÔ#gói<ä°3ÙKEf¼_²L©A©Èª•äM‘lì:¸Û…ŽÍ"y†'›9˪P›çRä ÇcÇÅÖLjاŸ{!òFöÇi\ƒo§=‡¾4"Ïãî)ÿÊ•k™|¹ì Ó¹J&/îbE9 ’³ˆ£9¨SÔ¤‚„ÊêB!¶cì3p .œÔÍë>ÿ!/}ŠNÚ¡wË:PÛ4q\áÉâ Í£CÀžGQÐÊGežaTˆ¥Ó=4(«V£¢ãàJA[¸T®VjÂXxV£§IšpUý’³Näv¸ºlKj±»y%‹ÝB§R7Ó«´Ú–©Ð¦]œ{ÑùÑ¿#.üû]xÊÕÇêLg%ŸØsåMj‰ñ±&Îð$ar‚’!‰ô\Ÿ‘AeÅöT°¼ §]ßZáÜÂJ…ªÁbuh {Âšà ®Àvå¹-ZѼ‚'–^Ñ›˜NZ瀎9áôhJÏï1³ðåÊÙ˜>£Ÿ¹¾¦.·YWËÞlÒŒ:ödsf<¼¥$ѰâaÎ@zÕò{ϬÇÓiWkß{iäP‚šq[-ŸêŒX26Óقޥñ^Îu†I²À3•ìL4(T™NL)Yw…֣Ц-·€ÒQZÛ4œ“^¿,üÖ ÎÑi^|ú^4¡ó¨W3çcå\:²c¾êLc(ÀÁêŽØ8ú ¨m®–Ù’˜ŒÆÍ›QX>¨LùÎã¤@8g°«v&ìb]²å…¼³›“> r*"“öÜσúq§Q*œe¬i»°Ç}?Í™‰êMº¢_·.èØµÂÄ`Ï@ÿ¸t ëÅYd:à2õ[áôÉqeŽŠ‡Ð® TlÌÕr´íZÀ‰ mc5•Ê!.¢— Ã~Ãòß¶cðÈáè7h(©»mšÔÇ<з̵ºfáD’?òˆ·e»6­1ƒsÔ×^¸-ëyxá±xžo\fä@<­)и•¾¬J‹N2¢Ÿ„4:è)âv\bFÁhmð+¢®ì;êDL:‘NšRðËâŸðß·> /´ÂW0[Ý B}ôªäGaõ¦úiZpHŒÝiâÂØ—ëÔpÀÆ6qþ?š¤Ò D°ª\Mš¶@ûötÞH': /Ã68a5¥°6pðA ,‹ë?¼ÆÕZ [bâé+jÁ„Ý^5â¦A¤è® GX’%MÀ+Èa‘¶KžÕæ°­4£ 6ã×îÌ  `tlPM›6ç µòÈÇ ÔÆmt—.|ûü0}{u¢çòÎ\ÎÇšŸ—"–ó&cÆ §Wfë¸ËÎïÚEв@tûθæŸW`^l8}ŸtDÌÏVŽjpò¥ õLx-£MѹßœÃÕàÈÚ\9ÌÀNžµÕN–”$Ë·Õ鮫ìDßê”S€“†äyÜ :.S…z0" ãÕæPÇè(Xì¶E&M5ž³¯¼×¶ÌŽX$%¥ AØ^Þæa騭÷*C4S›J柇ÿ*[Õ¤)wE¶à 7;Yš©læBè( ã|Á‚„_1óÇ<>P“žÝk#…GÈþ´úrU¶s+ê^]í*^2ÉòÙ_ÕhCÛ™Œv2‰¯«…×5xKwJ¦\]ë†É_õp@ŸÖ!=¥Ï÷²Ÿ®\ÙòѾŒZ8ýœ ѧs³SjOB‘q×f4v„&[4蔳G9¿jÝçNìC¿8o!³¿¢¿¥‘ÁõÌ_J_œŸzÅøûg#kÇlþæ+¬×dŠEÚº´ŸÃãdŒ((^tTÿ)Š÷¨’:á_/>ˆNÍ£Œª«ûä9)f¾yQƒsàÑþ‹±ÛñˆÇû˜=g1'í¬3²:M¢qÃÝϰ¾ÙˆÝ±?ò/¼ùüèEëߥ9.àίÓ/ɧƒéïòøÇKÿFÓ&!‚¾nz “cœæe§#.1ƒ°+c_í(œÍí8ã’æÝ…o?x’~EžGÇÎÝБYMpûQuc]ä…_¡9'£ÛµG3IW+ÊÞ£m/jpÎ}®¯ñxE÷ÖµðöËObÙÊ­–j‚êÖ–6“LéœÄéŠg9\kÒº+î}vÛ'1¼®ì‡žÀ³ߎî}x”ªO'SŽÑebXÙ êšS¦ëp€^DGvMÉšk÷qÁ‡S—<ÝF6ÃÚyq•xÜÑÑÈ+HOꇕ+ámûφ ¡YóhT7Iq`Å3ÝØi¯)¬U·!·¤ãÂ'ýÿ|?‹çÏys·¹ïeŸº|ÉE¶ÃhWvÔ?T°¶pMȵËJzS 7îÛ*}Ï.,Y4ßeÁÏ_~Ž%Ç ê˜¡Æ&rÛï5¡Ããfñ쇌L.é|¾›ì¬É˦ÞU¹²OC#ÜÍ&Cþs~XýsÊ>l¥J·¨Ñ´e§ (Q½BÙÓ:¶1«WÕ9HïÎ÷ß’ù—6TÛVì~ÈîÜÎÛkÀàÕ/ðÈmð¬ìn¤qËúÇ?&¢òpžqhÝŒJ<?š~i±9¤VªK[ŸvÖŽìZxz‰¨Ãí°·>ü2¦Üþ<¾ùïíè5p¹¾ñáÿþš\qéÞ¾%5lÂ{_.Ä/¾À3¢¼"LÈüÊmÔ"v$RŠª‹‚¿¶¨5jÚžs ž{o&þ~ñM¸ð’ ˆßü3¾û‘ƒ¤CеC[È‘Œ¶¹¬¡þÇîy€èt¦²ÑÀìáûѳe•÷åaÍ–\Ü{ÿ?1jHw33.}!\޶ œÌÌzšÂÐÙ…­<{]³^cwʹøù§ñõ¼/pfA8¾}äzt4š)ÞÃsüÕ‹xo$Ïʽ3s=uïDti×y»1ó?ÅãÿÊAM/‹g‹LëÐð–§}v\Aþü_Âó¼^dà€hÝ “zÑé{<X«:†µ¡#мñá"Üýà=\·w¦šN8@NyëWØþõ웎#Å­—­Àc/Oç™ÎÓñú‡3Сç`¦ø/^zäÔØÇûnsâñü»s7é *¢†Ç»Ã[ð}üQ|GcyÞŒ¯øÎÁwj&•WE9c¨°~î;xùÕЩ w“ÐÛçM‹'ßúÓ>ŠÂNâT÷²ñþ+¯àÄkF«Íž8ÏäKç º)•ý…7>‹//¼½ü8·tÕÕœÙ=þì[1cåcxàÙ×Qpщ`…ãçyß¡ io\wéÙèÒw<ðù:ÜþØØðë Ä­[a¶iå.§¡A0 r/°t' T>i”nasp³Z±Œ©SÉÔ ˜­Oü­÷"nMTX¶Šg¹xî:7—« 4úQ‰ÞZ“5ØðÏŽ®ÀÚÌÝxcn’IŸÉûìth…®>«þó).ºáÜzññHÙ² ïoÊÇç/>ÆV»jÚÇÓ‘Ÿ¼ ÆEtÁÜ–ü>ž»ÿ&„‘w 7bÚ̵\Ž=–ÎÂZp².;ªˆF^%Ç÷@{«í%OºStíÂ'ðÂ'©2ö8ôäª[~v2^ëcƒ_NÉ‹õé`pž£ƒ·w?øÇh®Lœþ泘ø÷Çqüà®4DD0àÓ§‘Ï㘉“лSK3¸ÓQu8{Ù©ßu×­&ÝYçM1‚[[fçO½ Ñ­šb=²+lœÿ!þ÷ŸJÄó‚ôsƒþŒ[ž=¿­<ö&bÚŒe&]. N­«^Í%Ÿ}ú!V,]„ÿv"ÒÀQ˜ùÖ¿Q=}3rI;ÞˆÆc¦K(;ôæJOõgœ{-îxð1:E¬Éz[™=uHG3É¡Y|s} ù@²¦Nx×ÚMæ·ÜÄŽ¼%÷ÌerU¨¯¿ÿº´¬ŠÙÛôy‘¹f¯Ïn^|\'¼öÍ·øàÓúGçZ•¸½mÆ;ÿà ×?Љ;à†óÇâé·gãü©ù¸còDlYð!¶ÕŒGn<+¶NÓ>xŸç¹—cø¸±0þL.DÏÅ‹O¦Ä›A7£õ.Ù75_>÷ß›‰úaùønÖOÊ…AtÄפ Ïãfd£ ßcwñêšGèû¢j>f|·À¤ÑyýÔ¸íxŒŽ,£/ºÃz´á¤’”>C¯Ifg–úÀaÎÀÛs5Ñ£O?‹:£§ºÇ‰Ðê¬pÒêÅò=Š_{îá®Íè´‘GjöÀ?¯>'_‡™÷?Ë­ÜÿÃ¥œ]þÝ;È c )¯’Ó …-›7bAÕ½XÄíä ›ãSydKƒÄ>|{¯7ò²ÚÃFªŒKNì`Ô(óOPç'¤q²œÿ馕jÕvë5ˆ¹ÞÂs÷ÝŒêùiÆ×«ÓÉ¿]ŽCG9‰SÁ2Xñý ›«¦Ll?e¥ì6?ÍäK.ý$Ðpcl¯Ì,®_~3ßéÈÝÈ;ïhBëv]p\‰?oDÕBÛ¨0å/˜tý8@ÖàT” Ù4à5À+àä¼ÂVznf„Ñ… }–™}ÔϹ-ÔBÝéÀÕ‚ìÈAˆ4ªì4ßœ´ê=x,Nþ)>ž?×\8ÇR&£nåL:Qšc&ÿcŽ‘¢à8C«\µß„Ó g^ŠÑœ¨áŽ›5tØ¥°&ŽmË…®Fñí-®>ɺU¦þjŽÄm«ñØw øâ¹©ÈÕ2éùîuü/ÊC—}¸rÝ{÷übâåÁ[»òyFVa ˬV}þ÷ žºóvTËKB¯}ŸÝRäèÉ\1æn…”".—°·ø€WƦ åèíOfYþÚôäsé«SаsþV›†žóå‰z=šgì‡mIºý¡;$ÚbòwbÁ?Ä«OÞ‡™sfbw†Ííuúôûö¯L»ÙÝ ÜmWµ‹üßu Öš®f¦\vø^ŒîÞŠçç­ìêè™ú×ÿÏOH5vŸ&Ÿ5åY0:^ý_ t'†õën8w=ý¦±H7Ä8-ûთÐớѡM3äqÇ„B'lÍê$a‹‡#6EÚžÓ¾ýóéœ í'Òñ^+Ê?8ÐVØ´e–-^€¿-1~lðËNÓïjExë¯J±Âðº“Mæj—”訕ú9†õ7 ^Ã(´lÕÊð°nxÈg_'G¥5ûóMè7;ß|ö_啲ô>Ÿ›Œ—ž¸{£`âȾ r“¸D ¯çâ­)?¼ÿ¾Ù˜ƒóOŸd&"~[mˆŠN:¡!wfàùixé©<¶ãn‚kySSL$î»þ$Ìýâ-^¹H‡Á'1ƒñ ÚÖÃмYCÊ(E‹u(¡;nælŽ3“l¹U91Ï3Ï'·Ô×inr [}Ýš•Hؘ‹·_›aàåp2FzF¬Tsƒƒd(7ÝŽ/´ë,+‰×nÞu"ú]‰Ñ»™£9FSFᤚԿÖÿ'–$Ô„—Í"…ÝÉôÜÏÉšê7äÒÆ™Å$´x¸“‡º¢ñ·É×ã£y·ñ ²§ññ÷³1娨üÓ«XÀ.óáW>2úÈje[gíp¬ÕŠ0bðï'å±ÝHLŸþ¥€ò|~61Wßde0–ö£tŽ µŠ\oõÁ®dÞ%5ax€»æ´‚.ª7¯œSذ›7Ïï¼½•i—å`ëê4† Ê[º0îÞ(ñî,ãOaÖ§ßáÜ)¼e1¾¿7=þ Æ’‡ÕHßI¯ëF‡ÝÖa nºc*Ïý7ãìí€-{ðäSOcL÷–øì§ðï—¿ÀÉ^ƒ¡ô ðàí÷bêµSPû­O1ºW4ù ªÁaѼoû ~žù_c~õ1hÆE‹í;,îsy©7q¨¤•€£$T¹—! ¢Â¶mÛ C×§ƒ«à–†ÐÔþ»°ó˜mÈÄ]ÞZ›óÜðDn»mË-PÕ9ãX3Ma5êÒx9…Ѩ¡35•Ѱ1šœKå'ámž!ÜÊËùΘ|î¸ø,´oÕØ0_z‡mÝs$öïÍ-5YØ> S:W¿Ч{o Ô-›7EgÑkpo§þ¤ÓpóÍ [‡6檥l®ìq--»Ä€þ=ÑŽ©s¦¸I=žM çõìP£¸Å°µgx½–Ü^ÉûG _+o渱¼³7½{÷ç*·cs¶±-;&M[CçI•êGc$WT»ó8EKθnþe!Þ|ç]¬Xþ ª´èn€´hPI©ÕPP5 ƒ)#-›6&~Ѓg¾ªðìT6·4¶â¹ŸÞ}ú oJÛñÚëobæÌ9ˆÏ ÃxÊ[/®G5âõi¼'>aËZ® ÖàíýÑ…TÝuçÄFOTáÖ)9é4r0oFàÝêônœY˜ŠÚÇbÄʘÎV© ²Ô™XmǬÉúTc›fñþèŒ= ¼æk(W…º£®_1™Ùç@«cËFtH%¾l5j6l‚áº#ŠW õ¡ºD·0÷¡fTåUIÑC0| ËÕ¯m š‘^r~¦«˜tîSÞ‹µ­3•«1 ~œC#8 ÇŸx!ÝLËÌÙàVº¡]˦œÁŸ7Þ~K¯@xë~7zÚiË'ÏVá@<ƒ;@æ®ßƒñ£¸U‘Ûüuu–ά똎Vn;rr±&Ïm\³ ³æüÄÝ pÞE—aÊiÇ¡9·}Wá´îäùj5±vötTnÞ£FC;£»·nÄ2^M© ¯áýz¡)ÖÞäÉÖÍšfC®&ê\y"¦ÏÞ€ã'C~kƒæu«qr(‹NUôáª}ѦÛ` Ø×xÏϦ“O?ÿóç-D>½kŸ|Öù8y›¶J®uα&å:ç‰3‹ªñ,|'t¦Ó(íš #(OC‡æ 8é™—f]†R×ÑñjÓ±/¢¹š³nÙxsÚûX¼l"Û ÀØÑÃI·Öh݉+ 8Ï-˜ ±`YÎ9÷dî.êNÝKýÈÒÜô$:Ž[‹áãÇ£ï^4”»"‚«…½ú*¾øn>6m߆‰ÇÜZÛ¼YsM^*W…åe¹c·Þè×5ѽ‡¢__ÞÂzieK;W´ÝZçÑ3y¿2;ÿ®}úÒàæª"·÷4;c2=ûNä½ÃõHƒ0´¡¼eÑYÑžäLÞ‘Þc†õF­Vµj*ßϹxù :ýY<1ɹÜFú7ÜÂsðºƒXçµÀ¼êÃO°›ª|ÊeWa@÷fK¬v(‡|œÀÓà —+Pª{û.½¹ûHžt5Fcº:WXG¡WÏÜ}‰ØµK1í½Q¹wü\~5wŒBÓ†\ýç$wUú!˜?k>·¯"š4£‰G·.Ý© :qb¸¯¬G=½‡×å¢]ç<ËÙMèDcûÍF¤“Ùٜնt¶uYuÉ”vƒ$ïÙc®™@>ëF>Óή‡Q'6ƶY%¼>`_þ+õü)Ôów^C/Îä#sn’õíÛ\¿"û!‚úRƒädî$à 5ýбW™W+^\ùˤíÖ° Ÿ ¢GæZF_ÕäUûŒ0¶Åìo¦Ó÷Œ9~n¼…Æe_¨\È]E)Hã 3C%Ï´M2y”bÏ® 6’¼8±”ƒœ*y¨Õj(FíÃí¢µÌ¥Õ#µÌª[6•Y)‰4~úÒ•ü‰˜+ÚÒ²¸r¿[އ›ÝN:ßÛ¹ç@¶GSîlª«~A\z!Æw2Θ¤c‚Ðp’í$]+öÈHI¦#»x :‚g<Ûškåì®5Ò=)‰»H20dÐôèÒé=}ôPÞŽAüå;¯àÓ¯~嵫qâ '`È€^ܺ^ÑÜ%R4•7ñzÑ=È8¡PiµÚ2ï îp¬Ç‰…$ä$îÄÐAÃIƒŽ\…kŽÞ]Ù¿ìËbÿò¶'äá´ÉSpËNL‘·ÔôìÑž“óiømÓv´â®‘‘ƒúЋyôî×m©41*ùÓÎýËã±±lŽO«FuÂp–kîøfÅÓÙ''ìÆˆá£ÈKÑÔ?hܬ5¯ÙäùoMÉçDÍÊ•kÐlÀ0úí¸ }{tFD˜<âÑ&ã䯵X³=cŽoú¤…ÉhÓs:µhÌöàFîÅ2[ÑBzrò8‰?zÈôêÜõ"yëAÚ¨a5yµä±2ížp¶Q}Ú¤ýhTádϬY³Ñ¶ÿxœwΙ”YÙxQÄ»àÂ#Ùï· -³ß/ø™>}"é/…5ÛàDúš9ë¤ Ü}À6¤ìçe%cÌ€!ä¿ö\áÑ,Úmê Rµ›–϶mÛZöæßо£øÃúAǽ¤´/èÕ!1{öl£ä´ÅKŒíâ}É®Ÿì`´U3Ÿ3\ª”f «™žå,³”9Åxͨ©®f‹ …#Š:‡[ eèël˜¶ëh – šmÕœŽ””¶É(謮¶#iÕÊlãÕÚ©3äf‹$™·:ÓÊ›a&t­ðë £Î0é ‘¶ñšÕNÂuÛD ðâ?v.I†«>=#ƒuàÀ… D÷b몚%ÖVxêú ]™£•—œª ¬ÜØv–,ëžÖöœ•8ЩS[[¢xÇ=W¾”Vr$ww¥kÅD~jpð'ÞQyZAÒ]Ýâ‰ê¤™ ÚZžÎXwx~T eN΀´{¥ˆu3z€õw¸k¶~šàÔ7M~éúÕ]Nb$Ǻ'¹å˜lÚ_wk6;“í³—u—¾Ršð@›Š·³éñÚàζ“£ÕIåÈ®KÝ¥NNúÀ ÌDœvÔb‡lîªçj‡½Úâiîk&èQµë¾n¶¦œh ¥¼;ú‰¯ÅW2ÅϺÛ^¼&ÞQ橽ygo5n³ŸŠÆÚ-¡£3Ú’)=”MºJgꪼº‘uMG.–ŒJ®…$yÙɈå·=Åzœ™©·üb·Æë,§V#uï¼ãkÉ¡ÎÛ‰‡ÕÑê»ê›ÏvÑvB úU¦d)›zÚÖ‰[wY9!Òª“nÄȦA¢]NjCÁ½my9Dó ë(G@E¬›Ò§7,W²¯ 40åKWi²NA¼F´(ï„K¹1wÑò›®Ëô¸]UºH÷aG’N’5µ·ú›Ž¾ hÜéˆA%nÓ¬MÝ «l¤;$랃Sλ–+ÇÇâ“§nGÞ&‘K9•þ&q ¥¶U]tM—í7¤f„“é‰!iFy3gbi(Éià^®€‰êÕ¯Çíä”5ê+fA&ï8Ï⎛ZÔ©Újj vâ%ÚKædh©>Zu5tâ6ÆB¢ê§ô]}¬pÒlÑXõ(ÛÖp}¹ÓùäIƒ²¶góX ùSƒ®,³«ÆêùºÔóêËÑjÀ÷Geå§.e‡}>ÛJ»:T_éñ©)‹<+š1Âò·•yɳx#›÷wËA–¾GpÒ°ÛP¼¤{ãEõá¦- Wr¢ÕGɹäHzÀ:s³úD“’¡zDòál㸌í*FÒ6ré#á¬þG«PÂGô·ýWq¥O8`Ö$ŒtI(M ?h·L !`So£‹ _}¢¾™þåŠßt¹ŽXé^néLí2Pß!ïæêƒdÿ¨Ò®.ïÂ_ºA:Güìä]¼/£É,ÑAí¨ãÖ&«K›ŒüʾHïêC¤3t …è«Eɵ¨ä!õ7)¼…DþÄç¶ +Ÿ*WtUPbô…Ê&¿’•X?ò‘ô,uBNž|ª½ÌD+ë\r±Ê®Êj——ô•‚áÊŽúBé½’uUyì¿åi…OÛÓÍ=òÒÔ¤Ÿ“sõ±yL¯­Æ4êL=IÎ~Š}HÀÞPZg»Kÿ›»ªÉjWWÛ/gðØoq _Ö$¨½Õw©ï–ì¨ÿ7z•tT‹÷Dgõ úgìIê)Mä騌˜.˜~ôíÒHû<ÞQ/ÿ+U‰°øU|#}"ÛY}“£'ÔWKFò¥¨×¤ßD7ÉOÝ:¼bP“p,S¬®»ÉKêdñ›µ©µ‚›ÃÉ>“—6¸Ë+}¦23¸°¦u¤÷uçµÆƆ7tUë[:ŠÔ?¦²/,ädœî ×n!kêXiÓ—[ž·ü$ÚË6ÛD¼*ÿCöØu‘ô´éë)S,GtU?I½'#;BùìI×X]¤6dpüAZŠwÔf³ÏÍ1v.ù†ý™¹k^LÂ2Š*P»ë·ˆiNÐÙúX&£žÑÕŒlÒ¢Xî [:E}¦‚?^ºYí­«d@6™xM²eìæu~<œm®þPò&YÊŸKû!‹t!{R?í/åQ;¹ I éYcP·P2idߊ´ËXúÂéaµxÍ8Í#Ï|÷ÎÓ˜úÌ»øÇýÏ㌠ƒXN§j°½E'#ÿêw%_¬ŸÑï”cñÇ–-[L4nÜ8ƒ’“/‡ßñ,w€.AÑÝ=,»ã<0º®rîyàÔöëÒîÿÍébuJ v€­ak i ¤|ÄÛF绌 ‰ 8ÇŠ“à*Èh±ß”¯È»Š—±#á"@¦Õö<4v@£2Ìy2 •‹SÁVÇ/Nq¢üê¸C;J›Ú* &18”T†:g¬Áš ÁzÛCð$ìnð/ÃGåJø„£ bJ œ¸¾ùÛÙ¥õǹ¼ú¦øÐ§û~ §Ës 4úæÒÉHHàu*/ŠgÅ„¯ÕÜßk読›ªb ÍÔ Œ0F1ãd4·± éçBq{2ÂO§ iVŠ1Ð!I1™N™é«‘Æâ-Ì7òŠð•Ðtv Í›77Ÿ ?øFŸíÔƒ¼£Dšý×"&—ªQ_kØúˆ§Ôš*OJNm):”ÄW|a·ª‰'ÜD“À‹¾ª§áaÒSôµüœØ1¼®´,Ële ‘~¡Â ð6Ó¹2DKÛ~hIVHó€!«É"Ñ@‘1*T˜†þ„¡úȘ‰çŠNS:V‘Òdf¦µ«l~9Vùª³ PW·ÒÚQt’¡âêÃW+“á-ÃÒVPys"ArìZØß¶=ù¸—Є!)ÜÅ«ZÅßu~¦ì /û®4û·:íxqƒ'sÂQñ»yUŸÊÐ`P4UÍ„\®jcÑWyüÙ6} êèß„«)‡}¬JÏÈ6×¾#ÄW’éb:ù±tS9²\_gèÀ±…±gýt`+³†ò*2Ⱦ6qúµ¸,¶£ë÷ ZZX<ƒ²©þºŠ™L_©_Ós?½ Ty¦‚6‚Å[º«¤½\ÜŒ Ò"V†µG>¦Nüãt®pS}4XWßè`Ë,ÊÍÀÇ/Þ»ÿû9n~è%zqkލoÞ VveOª¿ È?ãÕ.[¶l16ÕQ=@׬“€njuÿQCºÆ”;AvL)Ô¥À‚BlÇåqUs†£%83„ç/Ç¥õ—aã¬áæ`º§ùV®ŒY÷µô§ˆYL}®þzøñ‘p8x~œD —7´?­B¿-fï„«fU7×8å)\ý´Ð{Izû”—Bó(Ÿ‚Ÿ.® ì—\¾øiì¾)Ÿ„_[5É¥“J/¹6¶SI>1íêãb˜À·\:Xh=ßÕÓÕŽë[ Ú°^2„JÄ)‘Bà›~ÛEoÁP²-˜ÅÔ)X¹ú­ÎYªV×Ì,¹Ú\‚ÀàçWBiu3i KðJKcðÒ7Á7©ôÇvÈÌP¬ܧâ²}ßBqW' ÜÍŒ5¾á×îŽ)Å'¯z/ ?;”îoÉ…è##Êv>â3)jž l9A^Ô»ê¤L޾þÜÅy}õ5y0Kùø;8„I\8èt¼$ü5#ü±Š| £ÅC2à_J¶ÍPŒ7_÷ÑyU>¿ÃS®âþs!H/£¶ ÚÁX5§£ßþõv| ôNü´ðÃqßýy,Ê âXLÒœ/Åpî»`ûÛÑ}÷—é~k` I4NŽ©=5ñâçsÁÔ??‡sh¼I¨?Â/¯8Ž?JÖ1ð%Ví-‘/QWÒXÁ•çÇAñ®ž¡ñæáš8( §ruUþ _ë-l™>ÞÜ€lŠŽÚ… šh O<Êã¡ |ó+€ëøñ@u60|u B·¼ZV^¥“nÔêz&wD99’\¹àhîÞõ, žâÿ8ZºwW/÷î¾+ ’iá%½§´Áô¶>ÊãÇÁå5°J£Ci¼(Ø'xìO;Ç—JàϧxýÓ‚“pÕÊ¿©³ãEg/ÙŒÅýB ¼ù-XO%TÖ×¾þ–VÇÀ'ÁTì)¿ãE½› KáÊß q;‘”žÃíõM¸Íž> é5Ñbó;}WRÕh€®‰œ?s€n÷ÆTKÿ#e§bfG=Õp .{LÚCË£Æ*YŠÚPq‚'Ærpݳdjûæ¾é)FÒŒ\eqñþ<.Î=%l¢‹{ç–[)÷MϲàúËÐo›çàñ.ûáT /ˆ§§ƒiWCÒµ"yüi]y¡õ ÖuÜôMm¨ŽWO F´ºª-:AšKXµ"̯|.èzŒ`ÚÒÓ¸´Ç’ÏÒÛ ”ÆÊ£ú Gu J£ Uã’0í»ø$oùVÝLnóùpìÒÊ m‡ ¼Ðz[>µðùPQeÁu°Jäñáä§«IÃ6ò—ß=ƒm¨++ëÇ_¿¥wôÔ$¡f™RûûÓ–,§¤ ºò¤Ž‹%‘+â"lñ7=»DÚ𠾡´,]Ž[í$Üe8ý#p®\ÿogŸ¥óY•ù'ØFÈcêX´z$8‡+„Ò£d˺RJ=ÐWµ¡p÷ã/þÝ„¿ªÀ$¥fÛ?”éOVZ&û½¬¬eçðà þÞN>õT»¨~FþùM†zY¼„rà_‚WV‹à™Öî=TùZQѪ‡‚pS^é# \œ|)N8é»{*}ÏýùÑ¥U:‡‹ó?e,iåÞÁu0Yédû'¥×$¦›„“ŽW\YA«=~x®¼ÒÒ»oe=•GõwòãV¼šÇ?´Nþ´~]îÏãÊò§õ×Ã¥=•Æñ‘âE­îH–©»ôrðýϲpqñ%Ó–NwG Z÷[»üutpÝÓ¥#“ìGo—Æ=‹Óê‡ø#„go©íôOzP|îè¢8—Æ«Tøþåþv`úá©Ì#Ê[V©åá#°Âßñž~«Óà\öŒèW+\Ïrp/NYu++ŸpvºÎõåñDY°üñûÑ2¤^û}÷eVùÒs Ζuôuüúôe7mä?¸´þ4¡¿]šÐ§?]è7ÿ»xB8j,¨Ò•²¸É%dWé4nr´÷Ã.M.ú@v—òTâ1°’yµrïú›ªhÝ­¹#CKêo<Wð‡ÒppüâxÆŸþþ}À-îsæÌÁêիѦMc k‹ˆU«YIujª„DA )¦Ó¬ƒŒÍл´ jXǸšÕtÌYZ?|Í1uiiýðEtý|•éÇÅS(|ÕEq¯:¨.¡ðE‡‹h!œD£òà‹~Z–_ø«>¡´,¾¿®Â§"øj[9ø‡Ê ¢¡ø&´­D­t(v3:W“á¢ôþ6åM'pj[Á¿ˆoÊ¢Ÿöåµ­¶Õi‹ÚE< í¤NV*ŠOy¼àç5[ /j[•&+~^;¹õëÁ•¾ÑÑR+‘2¶ôOòå”|EhédÅß¶joÁq<æž*·¼¶uiýKãÁq»'ô[³äâÕC…_/HkETÁñ€Ûæn"4Ü)c¬ëOV¢£m‹傽[ñëÁüÝKÀ dV¼‚΋†’à€@¢ >Ê*ƒæ&!”Ž·+¿4Ü*Xì~ÉâO·‚®•Þ]î—ɇ£Ë¿šŠÅ”ÖL¦èëô§tÞ5ñ%Žïu„ÏÑXñ~½ð{å¶<½ã‡/9‘^‘ü ‡‹ôdIÛò%·ª‹&TÅ ¡éýºÓ¯GÄ/Ò9nÜ$|_ÿ>ú&|üv¾ß–ìÒà»<ŽžNç ¶ãqé^Wm ~ßo߾ݻwÇØ±c ¾òý‘¡Üt ‚¢££‹ LWQס8%+¤ýAE@UÜŸÇÏ ŽYý„?­¿,ø®{ †ˆ_Zã~YºÃß=£9Eïêê˜ó÷ÔUy|§4þ(øjGWGGK½+þpµÕá‚/:¹ö•‘"cJ8—F{?ïH°ÔÎÊ믯ÃËÑþp¶­”™Œ) 0%ô­x‰pPû–¥HBñùÿ+/¨ÔNêd¼k ®Î@ÿ¤üÕ^~¹=PÛŠ¦¥)åÉ­xG0Bu”k#÷t¼ÚVâI;vì0ççá0ru ½ 8â}ñ™&-4ÈÎ ê]4TP‡"~ ým"JùãÒ»§Kúî×oW†?>4Î}sOÁTœ¸Aš|5ˆþþà/ÛÿÛŸ¦¬ßþô®<‡—û枥Á(í[hœÞW¿Å jµ‰~«Nþvwéüå…â¤oþrü¿C¿ùá”öÛåU_*ãCƒ=¥CC'ŽÊêo¿®>BõUY’ñ«d\sýn*ÇÉ­úBñtEäV°ýð%G÷ôË­äFï²=¤§¥¯KëS*ÚHn„(|¥4yàt è#yQ=þ¨¶í=">v4<œ¼p îÚÊõÏâç²xA8‰>ÂS—:·¯~C0T'gª“?8qÏÐozwyËJs ï^iyݷЧ?­ÿwhºòÞ%¯Ë£þÅ Zñ~îÒ&;Ê+ÿp|> ŽÆ¥Át8û¿)ÎécÉ‘úiT/ý.'Ê‚ãÊ*.Õ_T¹¿.’[Ù6ò">•þsötСÊÕôÎá[á¦ö—M+ù“® /MgºïjÑïpɹtê$ø‚)ØúW.¢§±ÊAgi:3T';›J°]›—Û¸G(ÁWÐgΜi\Ì·mÛöÿ`ÿGòRª2.ÿ A†V@Ô¹ý_84 ÈI’üƒœªíųG2heT¤ŒÓ¿b1­Î_ãÿ+AF„&id|MAt Zd˜-A2.çMGZNʪïÑ.?eXÍt¼»@Fùÿ…C§€è¨‰< ˆþÊA`¤-¶˜p‘Ö„ä_)¨OÓ]“…ÿ/‡í\Aß´i¯oª©Áº&YþÈP®Õ¨Y7CñgÎ(”…ƒ‹ÿ# w(eý™´ Å÷HÑìHÔÑ«èð*‰²Bét¨ï7­|h»Œ\¾>ü@IDAT .Þ½ÿÏ£‡òêípÔ G‚fA\|yùÿÌïGéN †w—¿¼:øÓi€¡™m|y0Û÷À vè¶>áâþ…–åÇSø«ãWðLJæq便)-Î¥ÿ#ž®|­(håI²/ÃPÁ}7/ùçPóº|þ§äI¸)¸øƒD'œm{hM.W¶è#œ´ª¤àâõt¿Í‡ÃüÇ[DåÉÏ‘Æ'´z?Mò–FŸÐôGêý®wYõpôðs²§~C²çxÊÅûóéß¡¸U¤¼CÉS¸MãÊwOɦdC[² KQ*Ïž.ùQñü¿D°q!‘%R”|q8‹Äâ ¯\}Kæ,ëé+Âþ¥Á0¸š³Ï_ Ðý¶¬ÿ›îÑòÛá'œ…» .¾¬w|Zú‰þ¡yƒi*øËðu WÌÝžÁ²„ÃÉ}ƒ_ÿø_5µèf\ºšT°Â¥­PÁ—ÎåséôTZ—¯´t–?Miq¥åU\yðËÊw¸âCñö¿®2*ç`hVxþ4þ:z;\U†VØü«,*ëPÊ8”<þ:Vô·fHµ…ÉüôñÇë÷‘Â+ni8¸4îép }wñ¿÷Y¸jkÍÞ‡¶yieWžË§´T4O£Ö!™ûv¸ž*C¸k – ¥ÑÝ}>®“qé žÅ Êþ¡Yx­ »`< Ó0 C}*8åÁ -S¨ñŽªi\‡˜+À<¥ëeXY§n&ÊÐÔö®'på:ø%@óì©–ÈZ¼Òâ”Iñúçp :¼mï/ßÉ~h™þ4A<Êþå™v´uPªPxeç´_BËÓî#ÿªbè÷òàé»óžË_üMœÔï[v0Ù}?˧ú”t×èØ²,/¨Þú¦zèŸ~óƒWiù…›½MC|jé)þÓNM \ò·Ò»òýß\úЧKãð±OçLÉNà<™Qµsé]~x£ýùþwÉVNüßÐR°ŒNá»ÓÅg[· ž±imFAtÁ¦×ÙO«‹\~÷Ýÿ4tWá!ÁŸÇÑÊÅzªá„£úÝßËç!Åô«7ý6ï†?‰§¯~. pi‡CɃF8$ƒh*:ºÝ6¡4In^•ÆÕÕµ‰¿~&Q iƒ'¾°ÐLZѪ¸ãCË7ÁÁeuiõ.^P]ÿ*N×á9w8úó(MiA^ß\žÐ§ƒaž¦©mÈ£xívóó§èƒéÞCŸÊëÊ ýv$ÞCËÓN7Ç÷t凾ÛxÛÚú¦6ЛBéií·ÿ‡Ø³äJ'ý¤«Ö ÍÍ»å ÷®4 ¡é¯•rpßj€î@ï_k¹ïîšÎÅ—÷,-ŸtùÒóÛ½¡•–/ø5ø«¢é‚9ŽÜ¯?—?¢üC.ÃÊ_ âköÓï•Ø}<”2%+¯¼§nmr³ø.Oyå–÷ÝÁ9ØgEàº4îéÊ}wñ¿÷Y\G?=5{ïÞU^YyÊûæÇUWOé~îâûXK(ʃÿíp=Ü•¶¬«^ʪ¯+GŠÇœá¡xÓç•(E Ü~òO®*Ú?±PÜ›ÒëaʧR.‘Î}'¦´b¥½»9üU?í2ð+eÕÙ?Øçá†W‘òµúäVªýé+Š‹è£´•tC‰ cÏBKDàÅÑZI„“Ä.T›^íJ£H7!„‡¯‹ÅÚÅ»§ÃIOáäV´$ûCg.¦ Š}JÏÊc¸ãa‡‹xÐ5–Þ5áádÅAÿùùØÑÄÀ)W†ƒaž]þßø¢<þ²õ.A S~ó-ç`t`h™÷®VÓ¤[IœJƒQVKKW*íBU~Yi_:Ññ”@—•6¤Ø#òª ÇkÉÜ-~^®þöwT„F.í‘|ŠŽ¡Û°Ë¦¥½«]÷Ô‡Êbi8–¬£ôšMUV_¨ô *_ÿJæ·yCÿ:\-„ÁAb`R D–á ~‰Hû¢Ò]¼VщD1.%’ Oá§Ék Fù[rå×ÛÒ9îØ€ÃQ0ü¿KÀô½T$/ùïþé/O;zÜê²?¾ÜB4 Íú^.&°í^²ñ´˜à[ )Sq‰…K?\K»¯ü³ÂtÁ/ÿq j´lŠnš˜™'ÓQæóxÿj¯tñP=L—Ð[&Îß[À™çJŒ“×?Ëx®òªªm/;£êª®ïZ—Â2™QÅAq†x o+èÊ¢o–Y•G¿mœe2ƒ¿ ñ›@*ge^9¯+®CQ͆èÛ»™R˜r‹Ó8Aú›þ?\ž*Ó*c[—ýã޶bî»ÍÃoŽNÅplzÁõ ò°bþZ„5i]¢hÄKñ[ó͵‡µ£í·øØÍ6m¸ýðheXÏÃÄ7އRvïDn¥4olÏ Nžª(îÅeî+Àæ ë°eG<"5C·nQ+:¦ÊAµ°pÞémåÍoDãLXYé{°aýFìIËBzЩSGÔ¯[Ójª¢|,_°¨×ztfj»:J ( 3l­üøÛ˜ßÿ×ãžø8Ä%Ò‘žÎ]ŒÈú¼µq£H‹+éqÙÌ´‡3À¶6~Üc·cíúMðªÕB—n]ѤA]âɾå éáäoK_ÞS8‰@’Ä´¤8¬Y³¹^5tìÒ ­š402êÇ»Åd¾8ª†]ßu¯¦‚ú6Å1Ò<¾?î¬czêƒ »ðÊ¥?àooœmÞ­ ’ŒHágpãfÒ­xìo'‚ÌápÕR[øö{7¬„c ó•WråÃádë¦Ê™ê±n•}+$¥)šPüIW”y:¼\¤KテEÓ#¯MïÀ½´\‹¯!}qF[W•ï×î“åƒýgÝ]¼p) ? WÙÉ1±xñ¼Ù¸äëóMQû8 T꬧Cä({ª>ŽGj tD;ÿ*Èá@Z|••™ |^zì.t<ù\|ÒX‚6y8Š(†Q^û뻕‹BÌúüm\ã|ÜX¬Y2¦Ü›®<uÂåý_2ZRî‹ æ!|–’€_}ÍýMÛ÷Å?o¹Í ÐÕÁYÍíÏmoXµß¯ÉÄ4RÂØÑ½üü³vò娥©IàpÕÓ'c·þ¶ß}+~I©…}:`ý²ÙØ×z$î¿ý& êJ4ò¿}óYTv® 3o•À›ƒPüýßÇïÍ«–áßϼ„†Ñ­Ù±sK}D|ôÚ«¸å…鏿ü †&®~‡£<Á8Ô:útü¶ßâÖk®Zö2¶¡°aþ þqù¹hX‡»Àª”eCbDÛ$3+[Ö­ÀCÿ~ WÜr/Žs4÷½Qa¹xéõ÷ðü´¯pљǡáiâßMâK–ó8Ø~íÁkñÁæjÓµ óó°sOþ~Çf€¾øó×07¿=î¿æ\Ô`ߟ“Ǧ^ŠmuFáѩי2­. Ú/‡[ )ù`=¨Œh§'îÄ;¯¼€W>ýýôCx¥Bl^µ µºãµçA¯V5ñöcwâ™…1øÛà®D·2öÄ£EŸQèÐ$Šz`.R¹{x/žë¶Å¢G^¨Z” /¼n½í†?d€~H|^’"¿ëMåÝÎÝZY™YˆÝºÏ>r?Æ]uN5@ ÂØ•Ùɱxþá»ðɪ=èݲ6~Z‘€'_xÇ ëiÚ‚Éœºý]øjfÕ£Ze©Éé^fFŽ—ÎgFÖ^“Ÿ ÅKKÉðrs ÌûÞ¼\–ŸáååíõR‰G6qV(Ì/`~ÆðÊËžÄÓ"âȤ_‘·;f··~õv/.>ÍÀàÊ€—Ÿì¥¦åØ÷ÀßÔ¤Tƒ7é“îÅló¶mŠõââR½Â@=‹ ½4–/|R’½Ívy)i¹BFr*i¹Ó‹OHwdñ öÿäL/';Ïà±ec¼—¨³W˜ã½ñàÛÞ˯­(N_˜ŸïíÜë­_³ÃK" ]põÒ{°nž—•–ámۼˋ‰Iò²só]r/'=ÓÛº~‡·uËn/w¯m }Ì%½Ä¹lß–³cÇÏŽôßµ-ÎÛ²9žplp&¾Þï~íÝrÃç^6§ãvìˆñx=…ùíÇÇDEnt¦áÑd1f.¾8âÿ~”JG'i0:ˆÛÁL:_j¦r"ƒy÷y‹¾ÿ»ò¼Se%x¯~1;s_ /\™Ÿ]9Ü æ­_¿žºÅÊ©‹÷gä¶;óš¸u¥×¸¼ôÙ£¿Ö/ûÁàöùÂ5æ»d"  гûámÛ¶Í£ÇxóÍÁܶv¡9íÛžŸ¢B/%9ÙËÊÉ¡nKð6¬ßàÅ'¦ËٲÎ[úó*OR˜¼ýg“÷åæR7%{)©Åå;øé»·zç÷ƒwìåw{›c½üü½ÞSFyt¾·+]za¯÷äÍ—{ϾóEqþìÌ4o×ÎX/goPolݺգC=ƒ‹¿^ÅÈÊŸòÊHM¡®ÚAý±ÃÛ˜ämZ½ØHz?ÿÁ¬bȤÿþ=?þthémÞ¼ÙãÊ¡çâ˃íÒå¥y÷_:Ö;ýæ{©9^zÂVï’±Þ?Ÿ}ß´‘àTgSÏ 6°·}·‹/§€NÞ—ç½öð5^‹®óbSs¼½™‰Þ=—Ž÷&ßò”—eÕ·çø£|˜–ÞÜ.I9Yçe³oPHŠÛê}÷ÃloWB å±È[5ï3# sVX=êdÁá¾//Ýûê×¼I£;3]koÖ’ŽkÍOžºÕ›|Ïsžá6ÒôÑë(÷£Î÷ÖïÜcÒéÏÖmAù\ó/ð5nëjïûY?z ´òi}ÿÞs,§“÷˦x“ÂõW®Þ™ñÛ¼+&tõ^™ñ“G‡J^Ü®={)™V|øø Þü×È侜Tï¡«NðjŽ¿ÄÛkeQuî®~Ò#²Ã¤G¨þ®‡Ã??k÷èõ¤QÇ“¼Å«6}‘™‘îmÛ°Ò{àÎÛ¼ïoôŠrÓ½ë'D{·>ÿž—°'Å‹‹¥·ËÛä%íÙã팉ñ’’¼ï¦¿LZµóæþ¼ÖKØOÜÅ~>`{&yóWÚÑLý†ú]:i5Ÿ]ÝüiôoÇû ÷zs¾øÀ;÷Äц?ýqy‰¢g~ð ãG{«·'zû ²½·ž¸Ù«7ör/6`ßý)¸ÚFºK:LºLÁÑ·DøRÄÿ ÙÉÞgï<ïØuä-\¹ÃÄ;Z˜þqu*ÈÞãÝuáH£Ó&ž—¿Ù;¥=¼‡^ýÌ“ ³~©Ç½WÞk_-tÙ½µ‹¾"üÞÞ²q&ÎÁ+Nàûá¾Ñ ©á‰½["'%Ö›õÃ÷ÞÆí±´ãó½M¿ÌóZ°œ—?ûÉæ–²Z~]0ûÃg½ðáçyÛ“­®â€Ý»ù¬~Þe÷¼èeæïóRv­óŽoï±7fÆ!Ó¤îò.=&Ú{rÚw¬,­Ôñ^qW]}Õ8j~ÆÅÅQŽc*ŽÑ§6ùòYïz¨Œ7oÅz/#3óû}w(ykÖ¬õbw'à °”—•žìm þÛ´e;mÛÉåez/߃wÊÕwx›b“Œí·}7kÎ\o'ÇGù¹Þ‚/ß2òöÓ*;ftýFqeüpm±qãFïûï¿/Nåâ‹#þ€å® » =ø­ü»ÿ.Äo3–#fa2 ZÖÇmO„ÆUs°ä‹­HÛ] ¯LŽF sïúX>?ôbýèUï£í¨NøÛI±üëEX¸œwžÖ؇ ïïAóóÛâê‹èöÚ¬5ó~Æ3oÀ½ïèf5ÀM0fžmÓÊÍH¯‰nÕMåïËË¢¯6bàñ#Q7¼–ÍX‚o—äâÆ{ŽG­ª{ñéÓŸ£ M\2e ö&'â•Ç~Ĉ“û!~ådÖk‹óÏî‰ô¸X ý»6šyË1si.½e"ês (Ř²«ÄûòsñÃû?âËcФm ìú-»c<&Žiµs—bÚ'I˜úÜihÓDßÖâ_×ÌÅ…|ÀI»÷ŸœŽ9_f¡ëðZˆ[Ÿ…QW Á©§õA•½øâ…o±1~/ªpËê¦Yiètv4zt¯µó¶`ÓÂt®²ÔÁÕܶž»‡; …,nAÜ›œ­ÓÓÑý¦.¸â扜…äŠ\A$ˆºÜ~—™Š÷ŸŸ‰ŸWf¢~ƒÊô<íáü;Ž%n³âÜ!ç«Ì–7ºiÅj¼õøäTá]ÌqYh2ºþ~óx&ÆàÅ»¿CËÜ—–‹ÆCÚá«F£IýpÄü¶ o=³ 5›†#î—dd« “;£W2—|ƒÄ {1lê@\tÉ0Ô©aÙ2Ÿx-úv;†LÇ•q y0<¬øWY+ò6åÑñW3ƒ~çCœÊY,D/9% E=ý´ï6pîèÐ ¸ýR³»G"¨<µ½¿Ü’å°ÿlÙµí7䜂ãF 6ú®Sß!ø÷Í“±lùœ4¤«YiaPrÂLÇ´eNý¡™øoÔ8Š+½Ñ˜×WI|öäàÓW_ÀÂMqór°tÞ7¨Úñx<ù¯»1´G[$nÛ„ù›3Ñ©k[ü4w6Ö0ÏŒw_Àoâä)×ã¢SG1†8V>V-‹·W ú7¡]S{¦¹q«¸åÿà­Vݸt+ÎÓ •y¤¦  k2¶áÞÛþŽƒÏÃõŸIX„Èz‰Ny8þhšA׎¬gþ™þÙµr*péÝÏD±ó=,<æàë)Ù÷;îó«ÈïÌ=;1gáNÜþæIˆŒ NŒˆÆ×>…;ß]‚” OATíêæx|;°*÷Päɱ^nZ ?›+èo¢Y¤¶œFà´ó®Æù÷½‡ØäKб1;1CñŠ`bÓX9‰ ½ìjUæÑ8–ÿ\¨Q£&z¶ŽšA'ˆjYµ«‚W5Ã=í;tBƒGŸ%¯¹/ö{•ªahÍk yæó½gïÁmßÐö˜ó,:6× ˜ÒRN}òã—WñfÓèîügaéoßCÐsû½½Y"øÅþRþZQíÌõzrÈWòJPÊfµ´ŽlÌcÄçÉÛqÇ¢ZØôõhodHøØmœ®‚w(mŠ×ÞUOí®QØôëÜö̧X°:ƒº· d‹@­Ú=qçýݸu½ s’Q½v+´‹nƒ¨õ˜Fÿ|¡AóÍ-ñýFô@›èhDEº½•¤ºÊ ȧ/×aû)ØÒ)®ß8’e•‰tqý*£ß¨ hÅ­ë "îAQ½ÕÁä+ÌÁÏóæáî—®G÷Öö*Öc&®/]„-±IhVWôwœPfIGôƒtXè gh®ª•ª×ĘI“ѱcGÜ÷Ø«ÆÆTZ+e\F™X^Û¾îg¼1øêžqÅ;»’b7áçjñ¯ £PÉZvê‹©Ý€ù‹WaòqCxü èÒw¼®¾š½ý:œlÚÙö{Ò %ƒk{g‹9>lŠ±ÇØ#žÊѾGoL¹`8½ÖÓ–VP¥„+±§ŒÂÌÝøxÚxæ†'Ѻ¾tŸŽÏÄaéÒ\#ë£Aß–¸ê‘I8ûܾˆ¬Y‰Ôm(ª‰ón›„‡Œ¼¯7á“ÏVÂ^æFO‹<‹Ö¼Sm¬ U•ñÁ³ËfnAO”×Ó]ŒVaÅmŽÁjZ‘ýûµ25¨Å­4KÚ„äŒ|ä&§á›{—âõÖ#“ú09>?™Œ¨èƨQÍÃ⟶Cj2a{î~kV®Œ30¶¯Ú‰îºh‰ˆÊyX¼`—‰ÛƒG¦ÍÁšu‰6ÝšdU 3[%atN@Ký2{9Þ}%—ýûL}âl\Ìñ›·ÏÁ¶ø\ 9nj,ÛŽ×_Yˆø˜x¼y×·hz\ôîј0*cÔÙ#ñÐǧãê»N—tÀ«§ÿˆíñÙ¨ÌI€8n'ÛÉÛ Î¸åx<ðå‰È^´¯=»cxìàá¯ÎB×z9˜>}µ©Wež¯Yöìv„7mLúŸŠ{æNÀê—ãû9‰mT­LRhæ|8‹6ìà OŸA|ÏÂqëáõ'çcO)Ä:q:ßÖiSvÆà™sf rhgÜüÄ©¸ñ™‰èß«Òâvã³@J½&Œ?ÿxr"bßü}ü«)c‘/ßÛŠ6Cºàö·ÏÁ9µÁ}—ÍDZõHÜúÖdÜòÚ|yÝ"¬ÝšlÒëOÌÚíØ’†>}œ‘ÀmItX"§% êäö gºjÍ…¿Î×£á)å®ë·ô<\A jSµhÓŽç=#ϳ‘G"¨­ˆ»Ø×ª9d¦&£ ·_‡»mì¸×§^Mã€(ß §©²²ƒœlÉ¢B$ry>4+#¥ØQ™ ìZ=ïnÉÂù×Nŧ_ÏÅÀ*KñÊç³M¾?øn>Š*×Àá£0œ““μÏ<ý& åú¾ëdç ±sÇfœ{óÉhÉíe r£P/ª®¼x ¶nez9îÈ:ÈÎJÅC׎Ǫ°¾¸àô¸Ñv?ú.'Xä0þ=4êÛ¤ÇoÂçž)]€¶…;)Ð݇±XS^¨s¯òá[9—Ûb÷ÖlÁ ËàÝð5ëÕGaÛ4@ësE°4¿(žÔyàŠ‡ £îÍÏFr^U4®oÏX FÍšu‘›Ím¼V/9°b%HN²ˆWºLG¿Ì×…öýÅ5Þ‹>]l? ³¡ ¶Nj»ª¨S·Úµ¥üT•/œ’º¢rµ0dÄoÁÛ/=ÿ|•Œµ?¼lçÖQ¤U‚ÿü:ÚÑ­ˆÛè-^ø~ÆÇØ=áxD·jl2;|-$ÃMÈX?'ßp þqÃu¸æÆbÖ"gãÐ’âÄvZ'¬ÿ÷$^™ƒ _üÇ Î>¡¬èôˆ£+çð>5±aÇæÍqÞ?Ñ©­¥·äš»c(Ÿù(âVöª[Õ9<¢î{ð>Üqç]¸ýŽ;pãµW`êÃÏbs<”@ÈÍÍCjF–ÑEŠß©>Ž®.Ýá~ª¿P¿ëhæoÓÃ]VYð\9%ƒÚuê¢m»¶\˜ªÂ $ËçÊW@;{Ò2Ђ:ÔñQXX ´hFÝo‚㾕UÖ‘ŠݤÜî,‹Ž¶®l×*at@YmÙ—qiÜjPs¼¥ÁpÝܦի1†Ù6:²Ùi©hLZEß_ï¡nã¦HKIB¾íêu1x䱨´r%Òòô$ÜÒ‚ÃY¼'žpïJ«~«ÿ&Ûš%óðÐ[ó1 ¯äÉîU¿àÀ&ìÜõ‰uù½Kq1Ù¹™ðxÖ9²Vpò°~½Ø“˜Fǧ¶?TâöÝ sÊìä‘\ü}¶'÷ýh}ʹ³Á+‚£›©Y¿FO<m‡NÀ¥×Ü‚k/>™ÛÔçcÔ¤ópÙ=ã¹gŸÁWÀIŒáøu3锟†§þy2ZÆ3Ï>‹çž~¿Üu%^ýx&"›wÁ5·_‰N=àÞÄØþ]¬þâq;?ëaîw_bAƒѱ] ƒ¦¸ÃχÁýÏNc—*+„ÁeaüÑ·§UÜcOï„i³R9¨®‚–íè b] Ö …n¼]Qɰ®¼+ææ $2»³r±{êÊ+°ò\cz±/kžŒ3§ìÀÉg“¿(DôÃq¬»½û­óyùéBæO~J÷—X³•RH9šâWHwþGfIÞbrçóùµÅÔƒ™õæ>®î¬s=®«*C5'PšÖuºEÍ»ð,¼··ú ?ÕåÕÔÕáË ê(àê1‰3w:ñ—ãc¤­)ç !!ÅžÆNÂ<|Ãñâ-Waì`k2íükñج]4öÅ# e`H~]ÔŒ!HHJGRR’"+ƒˆ¦\ÏU"Ôß·qåCÛ%‘"ø…¢„{oëÉ¿_p86,›‹g–|Žòþ×ãß·ß„pjc =]áß®i¢2ìæ½B?gæÇX?ü:¼qâX•w°ÌÖdAwf)+ ²zjÇ¿+ôk8!^!“¤ºMðŽòW0k‰kW(5+mRcÑ<¤ã§zÚ/)¦À¦ØV ¶ ~g»Ê”®{¹‡„4¾'Òî]h¤ÐÛ/CGOÄM.X»rò'ŽFŒL 8Ú¡àbÑ7Ä¥e~šÐÒíË“†ËþþÐ-ŠÕQSoæJ°5á!ùh»öö§ùÒhP5’¼YC¥y3þ‹o~_Ì[­ö“’aVµe¹Šó ß—=ñ-.pñæ„m÷|öNw&l˜‡1±lç>xþþ?ª¸Çžw;üZáG5 [?¢ýîú‘ö¤Ø§@VZÁqˆ¿c"ŽßöuËðÊ+/c?üÙyáêoƈä@{j0´ÿ0 2”U ûƒ xFÀc7í¤í«?Çû%}áaá_gè¸JžòÝí+”.OÚ  []ËjsÜ<‰2”u(«õ0PÚ7 rÿŠ-æ/s+8J&}™¸öëŽïÌ~³®KËÊQÃ[]¦ÆæÕ¬µØ·¿ }R ^/+V5[y›R«·Œý^óoa'‚ÝjÖ¢ˆßξSTólF]?hž¥Ï³÷ÇJë•'?È:Õî¬å¸düé¸óoïaÜà+)ßgá_O]•p´Wtßf““uõÕ(‘ï‡.¨JI»9U,¼€€^”îRµ\üx´£‡cBóèìÑ9ê¸+¼R6™‘w?6>q1q8x88ÔÀÜÏæaêïžÂ9SÆÑÎ0yꅸ弱1k í›xcüôEœÀ¢1¾ˆQ¸ë½¿ãÑ?áºßœ‚´”4ì>ŒÁ© /™Œk`"§¬˜ó9Nûímx÷›…Hí-ÚÙº{4´-˜ëÚ¨„_e{Cô¢Š_F™Œ¯‘7Š£†ª Pб㩮¿zИ»rbàKþÔKlyÑê¯/Ä.„žÅò x__Qcfm9FëoBàà¤&[³lò¬àlÚü™»1ž«ê´¡¤œWi2†c-,.Y˜‹ã/ÓN‹ÆÒÙk°fñnªÅôVCààÈpDùWÑrä*ä6à²?Ÿˆ(ïJÌûz5Õ»ëB}q‘‰‘ð¢ºúüYk‘WÁÓƒ'¿¦?ÍZƒ½ TS‹ Žt\RÒ1zÓ!8Ì.¬#©yidpRGÄÜ*”û¨e°eýn¸†â¡™'"Ì¡ŠãÆÕ{=~­aeÆ C€¥N[ˉrü¨ø%ø!˜F<´ ó‡¯×òi”IýcTî¥WÁUUµðä ÝÅQž>»“wÝQ•pE~Á7{1~bšª35›É”²úc_‘ÖyõÔ«¬ rz#{GÓLi#Ó¿ÀÆI:Ý}œä:+!Ò®eb}†»¯šwYÅÞÛû˜‰ Άojk«•¦<è/Ö£½¸Ú¦gQU? ­ùVý®¼ûIì)«iÆDÔøè~äpôŠ!ùÑñ¦-Œöój”–[*übÝzÒ´‹1mÒh|ñâÓØYX¢úÍ jÄL9ý œîÙ8ÿ‚ ð›K/ÃÓNETˆŸ:Ø¢-«¥ÄéÕT_Vx÷þ:c¦Û¹öïÞܺFÍúÞXmE§tuóF¨w UšúBi}µœ‰óðrLtÐÃŽ N{$®Òö¤ÓÚQâè`ÔïLów±‰[ÛÛE=O?ÙŸ‰ã«£œ¯:¤ÆÖRø^ñ[èÍ­*¢ö¬œ.RËä;ÕžÓÎ!£ÒéŽg/ŸZ®øÄĈz¤ÌŒ–#o÷>TÖ°!röØ…­Á=Ð'=ç_~κä8L9c8­(Ëž7pÿú2Ì㾕Go†ÏŸ›ƒÍ;­—tkæzä…FâÖ‡ÏÁ “cìøTø±¼4–ÀT–µ÷Æý²ÒÙÀE@ÖÝ“b­†’­^"+ûk¸ŸÑ¿—µÜ”Ð,éݹe¡žƒ•„Hœzî18ï²ãqöô 8þÄè('k±'?g:-õE_Îöox;vïµfÝ©ï¦òåJ]ùÆ"ìØÞ$ŒîØX€ òí!›†¤äG·a¿ž¼ë‰‰ &¬Ñ6-ß„šxî¡MM +¹\eÔùLNñï©NV5C¸:¤ÝÑØIhÞäUã$³®½¸ŸQ¯BkÿnáEª¿6„ºi¤yABx׫8-x¶ ‚Ãcñ-Cç±ÿW_V‚Uó¾ClBœC@·ú€4²Z$3ÛvçÉ#Ö¼¼ee]þ¸¸Á{݇J\ 5r ’]޼Ñ÷òÆ•ZÇ2J<ÕÑ[Z«Ÿqá‘_Ãñó;O`î’µ*[]ÎÕK ßìÁ°þ)’’GÙìÇO¼ˆ¾ÿO]p2Þüòg+>ëV>œâdU×™+äЭ½‰ò5©Å·Ÿ¼…š þˆIã¹êG'rf3ùAùÚ®ýîK;è¼S»Šî†^¥?bSNncòìukߤöÞIæ5OB(44´qE¬‘p‡7VEùp?x?£+×e7¦ØÁãùö…#”‚YWœæI®òžèUý*na²º¥Íòt.TsrB\ME)víÎCv•öeýq²‰}­¬ôy:Ú»ãSÂIè*Œ3ãÆŒÁm½†¯>Œûž~eœ«Òuc4_êûIÞÄv÷½Škn{ ß.ZÇAßaC9™ä®$?»óò¨yV£5XÚÕìë(\”UÂ˱Z&“dãÇŽÆXòsÇ“ÿÂ7/݇ž}圻~ô¤®Zç~Dó§y莫Д‰qÃF«>ÀÇ_ÿ¤¨ˆ„Tœ8iN™v&¦_qªë ì®î8®t}ä˜ÝF&9fl¼ïþ|/¤ë6¥ý»?ÇÎP´J,ý±|oôj´¤t§Ödlbæ-ÛàØÊæïÀ'‹xœŸcëÐ/)¼IÛ“ñ‹æ¹}¥ýXeõâ{(ý_ã»È.P÷õMõO”!öR‹S–mdÜ,.°WVÎ|¹ün(DZëº%óˆS"|¥+uÄ+c?áN{¾ÞމAQ/jÅiž¥-HYô;ÏÏqæüþ·—cÊcŸá‰;®j\,“8 wI5XZR@‡¦ S¥¥‘7 YÛv;r¦L³~%¢ã£àïgÉ4PÃÉ÷E56UønË jËj[a¿ÇyÉø[Æá]qVÍZ“™^œÈµ`¥­ÿÌ^´¸˜(ŽF©9ûÇ-~ð§eöþ{³ÊÙÊ- ðuô¥râ—e¯C„ËÚéšûÕ{¸òòðÉËpÍÙ'4j÷Mø6–7ŸòæKQ¼£~\éÔ®¦²ŠgçòL¶×ˆ¬xe>fž¸q½¸ZHuP,ºn%þ;8€j ½BuÕ€:|÷é2„zU`' ‡ýíÎí¸û‡ ”ð-t×ü°wœµÿ̾‰þÈ^»Û÷yâÜÁ±*ÛV„K}}³CNˆÈ µþ£?Q錊 wz oú8ôâ °›g$‚k*0kC bb-ÙÍÇO ׇØÔžgJýäHüˆ\Lˆ>ž kØ‹Bxlª?~ÂÜ—ÉÁ+ã¥E` éO§ÊE°¿õf­X…ÓŽ™…-¹ÇŒèÑSã£Ñ_âÅhOœ01¥y»ñóÏ…8ïÚ‰ð­Ìí>ÇU3¦cê„üíêWp÷MÿÅ+oð˜püw#æÎ^…Ø^nøáÝùx~ñ~\+_j êE›JP)Z âØžËöV ²·Þ½ÏÆMՠ‚ ô\I—Aážü0cJâ±aî*üûÅR<½:CM”ìÛMZpå‹pÒEñ»Ó¿E g†ŽDîÆmX½¡¿ýÃd¹À]#ÿ‰´›Ço‡äiÜž¹ÿ+\yýàÙ°«7TaêEÃ0åºh<6}þ}2êxNîSW®Â¥Ÿž ?N$–sbÞ³bqÏ ‚:,.S¼ªâ°|û×s@ =p-Ò6Á¨ÓÆ!„F6D Ð/˜¬t诃T¾èô¨(Ù– ß–¦ÙÄÍø/ÌœÆIf»euMàµÿÁ±'­OV0€í›7 këjÃ|`x$³¯HMOç~ê^‡\GšGh ïöŽ3ß\P<%¥Åï§Uâ¡§þ{¯™†•³?ÂóŸû"óéÁ*I[p4=Y–§¥Öé†JNlþ<û{|úã $}÷úÄÇ 6ÐÛn6"@«41q5Wçï< ú“šªrlàV é?\|‘æŽw?äDzzWã0|û‹þº cÈ8¼öÄ­8“F ^ÿàKÏŒÇÖÕ‹0íâkpÛo`ìöÙõåÔÌÙ†ðÁgb≧âO_Á1g¯¯æâü)ã•F–à%+òÑïê‡_±ÓÞzߤO¶dþ„Kn}Ÿÿ¼ÆZÅgýèÁZ{$º¦ë_¿ûaaa•_¯8\ríŸpþ…÷"þë¿À­( çÿþ¼5cž2Š*•&+3]u²‚.[…ÄðXgî=üÃpÚ…×áøsNÇ ¤꘵ߟw®zãKj$hí)«•tD[ã$×½{öPÍ]&€õó¿ÃÛ_-ÂäÓ§ Уß|ð>-Ÿ‚û¦+’hàoÐØi–·`5ÐdòyÓ–ÍX¿r æ|óBúÄ!ÜH¤gôUDzUq¥7—elב)ðjÙ,d §áQ?/<ð»ß¨c ¥ý‰š»¼?êeë§çýœÌ­ '^u*÷åà«/7boQ2Á¨A)ØB~’ŸÙ˶áøa Ȧ‡ßÿ“O9FÁ0ã½ðqé™xx€LXñ»]´yõÔaFQé#±~É·è;r²Zu»çº @M2ÁDœõé·ú-pjÜT„nûÁÙÊ3:u¾þ÷ó˜rñl§Ÿ0^´Y³uõ<ýúWøï•ϨIùŠÂxù_ ¢¶€ƒc®ŒqoªG`8Ž;î8ôvLÖÔr¥k傟÷"³`Íϱï6þ›’ï†h®IŸ([gfÍót~Òyr© Ù›6býÚÕ˜óõg(Jà6?޵22úЀn Žr6®w:ŽšŠÑÉAxúÎé¸üO -:Ü"yï¸3/û,ß0ÁQ„mé3t™œé5úS;dÃæMX“9ß|ò>ÒFO†[õp¤§¥#$ÀªùˆHKóÏ1\úçGkxþ;Ï­öçä1ýc¸‚úàgàÖŸÁK÷\…¾_zi&~\ùw•­e8º[6¯{p,÷õ7ßÚÕo²‚.e‘ï±ë¹Wp2j£'áÜÛ\ðã×_aϾý蕊cÆŽàV Ñ^âxÍÁm¯È0Tfb[Î$:lp„Æ$â’nÆy7>€Ÿß~Õ9+qÍ}/Q@\®Æ½¢y&“Û{ó·áÇ õ¸’}œå¬t™øÉéFüœ™ïϲê/ò]몫£ýãÆBkÛ.;µWŒÆsC\ròHÌþðE¼—7 ÷÷Ï@xo\ñçã‚»þŒOÞ†êÝëpöµà홋hÜÿùØWAC©&–þôŽ=íb„N»®å…øê¿_àí_$pl5–{ÔåK)ݪô©G‹s{€Î™Yý1Þºu«0©iðk@\ŸxD…s14܈DZVïß!.“‡¸qFŠFÖh•­W¥ÓÒ£–^T7w ðGb|0¶¯ÏFÎîzxЊðμ*Ll2N8&¹‘Qe ìë…‘Çõ¡J ˜}ð3‚†eà¤cU÷ÀŽ|ô/V~w4M;ZÚOÔèe ª÷qïÝ™šcN:µEû8ù—†„˜P”Õº#:¥Rb{+2åTWKŽˆ¤ðÝ—6FJÑ›'Cô…·XšNížsþã•OÇ€49çÚròQtå±~CF`4÷³Ïþö;,^¶ ²óqÓ]᪋΀¿§;µd¸ºÎ !Q1œpC|ŸA8fp¯ÊBzßþ¢$®–v"0jþu¹Tà!üŸ­z¬Y±™†³N=žßY1´fô|›I%O­&)B‚žèL¹$Ž5`sCbj?¤G”á³/þ‹Ì5Y¸éî?ãì)¸‚ +­ä_/·ÉIËi+2ØîÊêbO.T§`XŸ|ñÙgX°| ΠÁÁßžs ¿£ªŸ×em™sKMW¶>pŒ ZõuUØ´z)æ,ZŠåË– >°žâæ¯Ú_yñn͈ÃÈÑ£%çÓöü¿Â™;pÜÉÓ€Ò]XŸSÌqI?„ø{Ó¾ ÛuT"Ûo²2pÖ‹&ÙϦºöò¥+Ÿ’NA¨[Žö§Û¸®«B®Ž÷ŽM@ÚqÙºa=íÖäbý¦,D&ôEßdž˜Rz®>1;n,¿Íþ\±¯Ä†UËðó‚ÅÈ\¶”ßí~xá‰Û085FP\ZŽÈèDôOM›!¢S0õÄ‘È\º’ï\z÷’Õ)ÕrUÛ•¶Ð]}`ËhòÑuáÂ}¹)}ãŒIÇb󪥘¿p1Vd.î¢zÜzçý8n4m¹SÍÔ=¾ueÈßµù…{‘›½ {ª\yæù …»P®¤ñÊ8¶áa#‡q"DÆjtlßcË£{u9äý“wOköèúìÞÜÚ¡Æz“<]¸EeùüñíœÅzòYð®)ÅúÛ‘6`¹×?<*G Ä÷3>Çó"ù˜éøÃ•!’§$ˆ€×•÷©nº¤q”¶'ã­öVÑõ·µ¾ºsfýó×à”©SQµ¶äUªoJ ¤µ–Õ/{s2êÛ®BŸS.A*ñdµÏÕÓ´mPOìó3±eWxâ9œ0v Ü”ÀëBº;ñ̽ÿ‡c/¸£”ñHõE’¦Õª“²H{ççç¯Æ%4À‰ã§ŒÁ¾];8aŸ )GCØC÷ïŽKu¹$½¿òhGbÅ^?LË3ê…WÕ“Òú!Ž@õÑ+7çâöûŸÄ'Žáö_Y °úþƒ—±Í/Wœ7…Z’P¾yìsøÍ–g…ôì_ù~È·C¾!sRÆ*j%s¢cè þ4°M›aQ˜xúÒëa@IDAT‰X6k&f|ûŠÝ£ñü_îÆàdŽOh{¤ßàQˆ.ÏÁ>þ™ëspë}á\žÚŽ(¢ð‡þ´þ.îÉÏç"l&¤Å 'kÔnÇÖìlø‡'a@F‚’C¤_í ÖG&²eâ6%%¥±˜IÛ¹n¨U"M°ÉYG£úþ{$ð˜Œ4Î~emÌUVZÝEP·'aTy–NPö;——V±Íºóe¦¥pÆ•=Î¥%Õ4äG3ùùxí~> c†G¨Õ`€egù% šï(9òä¾èâÝ»ñ©?`ôߎÁIâQI4î•^üù<¼ÿaîzé„ryVö¿7Çôr/%P*[¤%ƒ)¤â[n$ÐGBdÅÈÚGf}íªâÂbŠéÔl˜¬L‹c™…”ü4űT¸eÏšß [)¦j›‡ âÄ Bxn:Õ78a¦Rfby(¤Ú¯ïåÃÙ ÆÙGõq¾¸Áì e¥Yöjª /âTƼʳ¾:áÊÃÓû²·á…Û–ãì‡CF’? v¸Ð(…'냖øeºc`'eu“ú ”«¥‚1ÕØýýWåÍUšÆ¸4\ÂL½X7¢¦'j{n|Qý¼”Ú›Xšo`§³'¿˜ï–'¨U!£HU?z ©ùu.‹„3„sÞû‰«#.¸ýñ㸚À-5ˆè‚ª¼ó,còCc±–F…Uêž÷«ß#™±åùΜ-ÏPLjÿžÇqÏâHã$3µ<Ï©©©j_ûw·Òu3”æ×ôphÔ52cϳ4‘œL‹´ükÿ–Ôå­µú,™ ,¢1/ª†Z:m¥³ûËdª|0#9à°û·Ì«3>M`È{În€ØsëN#X {>b ª¬¼ ÞTn‹oÕ:Vƒä^¶îˆV’¸¬¬,5 Á­DvºVN‡þ+4¥Tz?ìáÈCs©iËÇ]Þ}©õ}$ß)¹«¦#Qxµ Ð(Ÿ8{˜òèàGÇ—ë† ¨A£&ߵɃíñËK‹QÓG‚(X‹³‡5&hçFÇ—Ÿ¼'‰‰TaµmÓ(ç„Q íøÐpaãg·k:g¯óTþÄB¾­2ñ'íO„¹v߯oñ8e`§_^ZBµüNò“Ç»c—¤ÍžüÈøA¢ë0ÝÈ@QôÚß)ën{lFŸï©ì9–J°qÔCwö—ÝÆ¸ 3Ñ^Éæà\Æ R¯"œýR‚n{å³c]UNk÷Ѱ¤$êD{kö¡„i¾D8—wCúåî\éUZ‘j,]ƒ÷ž»÷ýPŽŸÞ|’G7rË¥®+NlqË—‡·/ÕØerG—jñÉ?Áï?݉Eï?§Œ56¦i¥Ð:LöMó o$%%©É]ÆV’8yñÛ¡^}l^úÒ©íòÝÒM8ixší]ä‰-ÔbsáÇži­õ¶uåOH23¬Ã©cú2µª¾mÛ6ÅG4Ok9šÜÎ;• é¯ÅÙñ¯å¶ bÊK~<íÀK¤o:‘߬ïuŠöPØvæû§›ÉA2§ù’q§ÔÑ$nï§ý’ìA%£8Ô‘³¾,9Û —»O —zß°y ì‹V‘š¬„J¬¥Ð,{ŠEøsç4± ÷1—íáÌ7MxàýŽmTɦº| U¶UÁ\sšÀ´7ÆñcUU‹²¬4Á÷æàâª;ÜÇÙª]"Í;>~º$¢ê.‚§´&4%Šð¨œ$Þù§Ê"ÞŒ :p6 ½KâÊ€JâIå%Uñœéë8’'#YÖ$ƒµG»¹Y–ñ8yZZè’bá\&  r½¸g«¡¾¹[9ñÀ¼UYHWö[mÁµ‘_¦ÓåÒå”}çeTåIñBAîž!^IõwžEÌ:QEà Ùº­´N48Ç|%}…<¿^ârâB•Ÿ£ •¯àÇÿ‚òu¼¯%߃܋a OQ} †D~N¡òW| ÞŽ¶ÂhøKç)ùÈÀG¬G 6!}’pÉ@7ä¬ß¡ø­(£ˆaT}¢€îÅ=óz+ùõt'ƒ?gUң«ÔµžºÎ…¯îÀOè5ë6ÝA[c§y· Û¦Ïw‘ ]Ý<8²4bìqí÷š¾ý*w½"j÷·ß £¦gÖ÷òÒñmVIÝ9ÑænÍ´Š»¼¿¢Âçéå£þT"æ#}„гç)–ÚÿÎþÉÚïÞÄ3ÿš¿¦‡z'ýECÓÖ×C¥ìœ^—Y¿û¸2bWóÔƒK9¦ÉrVŸ­±uλ3Ï"km‰ßUžôàÚ׿i¢Õ¬úî ö8RáI¿'?_¿&­#SHûqvï|—[©¨š–<èrê«ä«qh¯ý5Ö_+™ØékÞ´Ÿ¯Uí-§Ú½Sz͇¾j~äÙùËv8ú@ÍokWá—o°ª™ ÑNñ&ï¶¼ÃÚ³•«½LV°ŒZ‰ØÍ^’¯à(ö6¥³Ñ|éç#umlC­dhñÄ…j'r=B9ý>МxræUÆ/ú=Ñø¶c[ïbóú—<¬¾Í§œ5~øö¼ÿÅ·¸qú™ÜNAÃÂJžATÿ'ï¿jlt–ÌÁy¯¼ó‘u’‚5P•H-Þ{Y„^çW«›ó«ê<§ ;ÿzöüõyÕø4·õ PÚ-B[Žnu0k —,GÉÞ\¼öüÓ¸ƒ6/ŽÙ×la$Ûô7[ã)ü¶vo¶~[‹c÷sŽ+Ïš¦=Lß·–¶5?‰/þ¢IaošŽï(/+¾ÕH\¹[X¡ü§ûJé_ô÷/ˆÛ,'ß?%.8žyqÐÞ”k¥cÒ<µU®&bMw:M“Ï‘¿kW@·fâÉ”ÕQ|â™Üâ„@›…C%kÒ·D@ö„pN1m„rEKO{·Œw´ùÈŒ®È5¾=¸ò’Ë ‘vGϚמr•$íº?©{'÷ÝI_xî ïò]±ºÂ‹´1ù˜‰³§ÓôœËf㜆ßm¥WÙòÒñ4-½R­ãi¡­¤Ñ|ØùoŒ«#vóUçÙÍd[“òÙß}‰ÐÕ¼u|¯ºóÕ×C£Ö2µ®{ýn£¥ÏÁò"yµ–ÏÁÒÓœu6}gãiºrµ§±óo÷·Ç?Zî5ÿºÝêzÑþSŽCI뜟æËÙ¿«ÏÝÅ“ð£ßÍCG´õxYÇ—kGiìqãw„‰¶ý^ÓlÉOÓTÇéèÚ]I£ñ‘ë‘wí—£Ï-A8âìj~t¢1ÓþGœ![†ñÐQ¸Ôa¿Õ¼è÷¢«8êôÍ…§¶Ù‰ˆæb’-ÜÑ–Z6)%ìÚbvøÞk^Új:ÜN³½{OÚ‹IM·¶,6Åký=ñî…tþigÏKc«ÃŽ–«àè<©q¨¼ÛqiI«ul[ÆŸ¦)šöi¶žÚî+õ£'míþGò¾]]™;w.vs/¸>‘P5ÎQH¸šý›6œ.³Ö¨B p2äç:œ“6Ñ”¹1yjšqŽÛÖs ³æ¡­­…·æ×Vúæþ×]ç»9yj‡ÖüšRJ§&/ƺ©¡J:qÍ¥åÛÒý¶üšÒZwMCShké›B­»¶âXmF:†uëÖ©‹ìénm6Ô™â/ù,üÊ»³cÇŒ1B±ÒÝÛ/Y¾Ã·tå42´|ùr 2D©ºë™ÛÃ÷¡Ò—I$Ù¹Œ†Ó ¤öWÞ%iS«W¯V¨eŸªäÛôÎjI_zá[êX®«V­RÇ"%%%5ü·…Œ”GÔe¿cNNf TÏÒ_ý’õ"mEÚàÒ¥K•M‡ððð_¼ždl!ïIÿþýÕ>×#Ù¯«±yX¹r¥zÄ^€}µº­:>Rþò~Tð8©ÌÌÌÃÚ©òî|äݵaÙ7¿víZÚOJS'€HŸ(m͸Î! 8ÊøEp“oK\\d¯ôáú¶Ô³_’Ѿl±ìȉ ´ÚŸL[D-ø–©u\XX¨ŒÀ  q>Ù2"ïùÁôÇMùËV­–ch;’·yºŸÑa‚­à**÷ÒF{RŸ£ylí*ï–Ø ‘v 8ɾº5~—Ÿ”së֭Ч/®|:¢ÛÂHœ=Á}"Zœ40ilújù‰ ¨‚[ý±Ún“ªAc¤–Ò[SÜi g¿Æ¼ÑáÎW‰£ýt|;ÿÚ¯Ë×vøZÎyZ~ÇA¥—Dí`+ÁÎÎ^6¹'uÖµ¿#z3œíôZÐèÈÑGk4œýœŸÛ#-›¸£¥c– Ž–¸=ì‰0iÒY ~­¶å_‚©òÔíYó.mõpÌÄê|„ÁÈ®zÖ‹=.øhçߨ®ýîKý;;íñĽæIò’=„‡«MLY÷{ÒžzrûÓøM}`g0?qt;טõ¤v~8Ê{¸i Ž2æ’‰=ù“çžàt=w…‡IŸ¬û㮤=¤¸­Œ·…ÞÑ6–Õ­|kþ»r•Iìƒ9N®+y´·M](ÚKl ƒ€AÀ `0 ƒ€AÀ ðkBà—”…ÛTq?˜ª_S¥˜² ƒ€AÀ `0 –&­àÐYm¶Ã!Gt•¦Ä?Tžíyê{}ÚúÞùª2îàG§±Óq¾×$$®8¿N«¯:ž¾:Ç×þökki;ëg§#÷­¥sŽs¨Ïö<ä^œ3­åá·µ8­ùét­…n¿6WÐ%c)´.øáfÄÐ7 ƒ€AÀ `0 ƒÀ¯þÛ›hW@ÿ5cÊf0 ƒ€AÀ `0 ž„@Ç&{·†ƒ€AÀ `0 ƒ€AÀ `0üJh±]TÚõ’ûŠ+ÔQ¾¾¾êî:ìWЇ)–AÀ а÷C=€ÂAÀ `0 ƒ€Aà ZŸˆ0|øpÈÑžmw[èö\‹ŠŠ G­…††6´‡ÿšîÛ¨;Ëx$òèN~†ÖÿB“Æ `øu#`ú¾_wýšÒý²˜÷ë—Å¿»rï)õØSøè.\{ ƒÁõ`Ò®ò ^$9·²²RC„öÖòmwºF/Däü@IlœAÀ `0 ƒ€AÀ `0 ]G@dj‘­½¼¼ÚLÜ®€Þf*`0 ƒ€AÀ `0 ƒ@·"Ð®Š»Hø­-»w+ÿCÄþ°ü_(ãÑÞdM5¯AÁÃîÚR7Ҹ髤±ßÛi8ßë<Ú¢m¯iê4ö0û½ÐÒÎ9=LDZ_5mçxšŽÄÕ÷ÎqŸ[‹+~ö²ÚÓ8Ó•¸ât|ë©éYó¨ÓI¸¾×tu¹Úé´v¯éÙÓÈ}k4[K/qµ¿–æEû9ÓkË_艳‡[>-óÑyèp}•´:?ñÓ÷:¾s¸Ng¿ê4ÚO§ÕÏúªùÔÏÎWMÇž^ç/qïÓëgMGžõ}k45?ö0MC®:Üî§é‰Ÿ¾×é;_ÓÒei-Žãœ‡ŽÛ^~:\íñu~Ú_ó.Ïâ4M¹×qõÕÙOžÛsvÚš®æ¥­t:s|í/ét˜3 ͧ=N§qŽÓV¸ÐÖttZçüô³Ž§ŸåªÓØó³û9ÇÕñÄ_Ók‹7{¸¦£ýô³s^úY‡ëüôÕî¯ïÛºÚùÒùj?I£óÒaÑi-M{4t˜¤Óyh¿¶Ê#á:®ÎÏ9®žÜ‹sNgùZ¿:Oy²Ó²ç#avö{&WÞžVÓ×a:žNgk÷k-„‹sN#~š'çtŵ‡·ECèk§ã·×.iœŸ[££ýtüÖhÛãtæÞNÃ΃ý^ç'W‰ïü,qµ¿ äöÓtÄßž—=^Gaöp;=MC_Û]AwfP'2Wƒ€AÀ p´#Ð^Çx´—Íðo0 ƒ€AÀ pt"Ðî ºÀ•j¸6 ƒ€AÀ `0 £vtYA#qÆ _2ù(:Œ3 ƒ€AÀ `0ô$ZèZ§^˜\¹re³sÐ{ㆃ€AÀ ÐUD0—3(ÅMš4 !!!ûˆºJËÄ7 ƒ€AÀ `0t7-t{jðšš{¹7 G²j^[[‹U«V¡¢¢B èG]! ÀAÀ `0 ¿ZÚÐ=<<‰ˆˆTWW7ZåûÕ¢a f0üjí ÐeÛŽ¬œg0 ƒ€AÀ `èi´+ Ë€VVÎåOVŽF'e×Ìàý”/Õ]›*:„ÒizÎù8‘Ô¼òãxôº«6,Ú‚’ðÚ ÌÚhwËm'1ï–¼z(‘Æú'=²Žz n" ‹Š»Vsï,– ƒ€AÀ `0þ‡hW@\dàoüÛï{2n"¼¯Ú”í«ûmU£äcÉ’·%¼ºQ +?°ÿyùqüñ‰—‘•³î´ B—DÖüʽ:&Ï©\z…_âYÇè9Ê%ɉ†+³VÎÇ®¹ Ÿ}·•5 €9ÇÀøRv•ÃM´ÐˆQ/íóa'%ühœ›Ò[¤„ žžî(Ìـ瞸Ͼò•Uªú¶ÍaØI6Þk5}WÄÂ×*—ÑÂOâÊŸ8‰ow Öуª-0@Ç~Åé|ä^%¥¿s=Øéëøš/•Ÿäo§EB:?¡ëææ‚M™óqÒ¸qxúµO°¿´žî4€¦,”[quû²êXR59˯‰¦.Ck¼8ó*T:º)'sg0 ƒ€AÀ `0t_¡€.‚•0®зáæÛîÄí7ÿ{J*(àp•¹® +æ}„ûî»óV¬G>ˆ<<½à©„\yv¥èI¡¢*‰É ¥———R)–0QU÷òæ³H­L[YV„?ÌÃëóÖqA×e{¶á‹ƒ«åÕ ðãŠyÕ°w¬™…u ¿§Ð^/Ò[kòµ€d¯8ñs÷ð´ò愃ð/|yzz ¾¦ «Þüó¿xœàмèRŽ&¾øìI¾=¹Z/aº\¢/‚© '¼¼¼•À+œL`xyyªÕè’½ùÈ\—…uÙyÖD„ð! ߤeçWÝë¼T¹4-/Ò añ!$t‹'iI¹EPÔ|y2oo®‹ê¶.‹Ô£Ð·xµ0üQ[¾ø ¾±‚öi¶çšhx+ …‡£^¥\ˆ­Ô±ü Ï$öÄuaaæ©x”úm ¡ï*íBð&Ç¢E¬dRAÕƒUGªü,«j_,¿Ô«.·Ôƒ´ ©ÅÛ›1ñ$&V1Œô…Gw/Lž|"bƒ&(Ä™üHû°œàl=ë:’ö!~’ŸLt/î|ÖeZãŪ}I¹Ü%C©Xã ƒ€AÀ `0 nC K*îÝ–ëa%DIÊE˜<Í»] Ç)`z\j¼©8ðóöd\ :”5 òv`ÝšµØ¾»žÞþHJMG¿>iðñÀþÂ]X³vöì/5ÔáC;*&i©Éõâ¾r zâNLíâÂØ¸,S=÷ªÙƒŸøùýû#:Ø!Qýè¿¥ò±hÞ>ìÌˇ¯( 8!þÞjõS&q"P‰ ZQ²[6o®‚=¨ª®ƒoP( o†õƈ[ŽAáî˜w`rvç£w|*ôË€ùJ{voÇšÕk“·W•+%½ú¦'SmÝ‹Bz-vnÛŒ-[·¡¨¤ŒKßnˆIJGß”xªáû ò÷¡@è®è¬Z·Õõ.Hë;q‘¡®ë”Œ&¶l….ܵ›·da_Q‰ ðÞ±èÓ7eóaú¬[¿{p+€'bS‘žŠí/ĆuPQïÞ6 wïBábôŽKÁÀ¾iäÕSñºcË:¬Ý¸U©Ý—nSuë5:\ ™í­éZ¹8€Ü­°zÍ:ì/_`úô„Œ¤hìÊ^[sàØ ýú£w°76­]…m»òáá‚äcÏŽ-ÈÝW†°ÐPTq»ÂÎÝÁÀÁ胜¬ Ø´m'‚Âc䜜„Å¥"=1 {ˆÍêU«‘›·>þHNc=d¤ÂÏÇ“J•ÈÊZOì¶*mOo_DÇ% OŸtxº‘îFlÚœ…½ÄÕÝà áQqп"xüáØ Mžåc%sbeqÎÙUˆªÿGFÇ o¿¾  ÏÅX·|5öqg@Dx/TíA®”!2ÙFC|iC¡ Ùlo›™ßþâ2x—¨˜8ôëßÞ.µX»zvï/EjŸþˆìEØ¥ Èäj.æÇ `0 ƒ€AÀ `8º$ +A§ÇÄõª%ª"+eäíyX½"Å»z¡¦¢YÙ;d5uTQç m^ö:¼ðÔŸðѬu8÷‚ ‘µø},Ïîû뫸àÔc°7g-®¾þ&Dô‹þ¡õøaî"•þ‰߯ÔIc¸¢lÕ€§» Ñ­xù¾g,²¸ïOß`Èy×ã‘+Ϥük­l¾øÜýØIž´ûÓSÿÀy§L€›K“9ÎËàËÞÆƒÏ¼¦£ªëO¾©#c- ÅsñÈMsQ`;¦þoo~„Éãcç¦xîÑÛñÅüí8ûü °}éX¶xäù71õÄQÈ^³OÞw~Þd',f|÷…r1zøqwɾ<|ûáKxä¥O1á¢qïàáJ(n%[™à`¹s·¬Á?ÿú0þóÃ;1|øÍh(ÍÇ?©ŽþÎ×ÖÄ…ŽpóýOá·çÆ:Ù‡§¯¸+ Pê”xÏ¿ý)NÓ[V-ƃ·\†E9âÛäR) *Õ{‡—¤µËŠz娓6ë2çá‘[®Cfy:.œ:ï¿÷cÄ›=†ï:¼|ÓÍî~ö O ÄkO\€OXÕ|âÚ¯ ¾x½û“#§¦Ëý;~3õxì\¿ 7Üög‚–†¨²ÍØÍ(÷¾ð6‚ÜÊñ—᣹…8ç¼ó±=ó?XšU?³Î<~$6,û—]ñ”3þiS§aÆçŸñ._üðŠËvážÓ/ÀbúL>ådÏœÉ)àí¿Cïº<ÜqϽèwÚuø'mÊìÆû¯½€g^û˜1šÜ…×߉ß]qê+1óå+ñæÏMaúîç^ǹ“ÇbËʸeúõØÆ€SÎœŠ™_|®¢ügÖ\d„xà‹®ÇÛóKñøk".*B,²¾œQ×TÍÕ `0 ƒ€AÀ `è ]ÐõênW2ø%㊮—b`îøÃ -XµöšÊÌÿî%œ_}ç#8ç¤ÑÈ¡p{õMwá¡·>Ç1£‡ *yÞ~û-øø ²xW ãðâëÿÁ¼åë0yµÒ-Ä÷—U#*±?îzñL¿áxr‰ûå×BJZ2|(UW‰FAkÚÕ˜2®–Ïû ÿí,^¹'?a><Šúê²"íêRõÜcl çÃñÒ·!#.«3—\¯§pìÐÇe÷üÃ3"0kƇxùÝXÏUÜqƒ’ðóŒ÷•p~ÝÝá¬FbËuíÍwãƒ9‹Ñ?±æ0¾çÓw.<}"jKò±pE–R­Öû–‹ sðÍ—Yx”ÂùÈ3¯ÄW_ŒØ°@i«Vb™¨£W—íÇO3?PÂù—ÞˆKÏ=®˜»`1Üê*±èÇo•p~üE¿Ãÿ]~ÊwoÆm¿½Ï>xÆŽŠÄj:P`%å÷»û+&„ãû÷_Ák_ÌÁæ¬\Œï…ù³?UÂùÙWÝŒéÓ&cö \ñû»QPÍ…N‰ˆ¨ö†7P‚ºn«" K=—îÀǯ>€Ì=ÀƒÏÝŽqýã18)w=ú<>ž½÷ßp1þüÎ ˜6ýw¸÷égpb¢fQ8?ïú{pöäcáçRN _U—ßt¦8›—ÏÇm÷?†'?ø“Æ ƒ—o€ ÷ˆ Á)Ç]‹^ááHvÇœo>VÂù w<‚i“Fs«Ã@\uó½¸÷½0ªo Ξ©„ó©—ߌ O;WM¿…ÅUðC5V.úQ ç'_p9'¦ ìúk‘›»‘Á¾¨Í³fej]©ªNÛ ›×-VÂyü±çà©Û®„_Ý<ÿàÅxÿ¥Ç1zÌ(Lì… 0Q»ÈÄÕ7߇Çd`ùüoñÄßÞÂÊMÛ0iL_,ùé[%œOùÍïpÉ™'àú˧s•=ÁÔb¨ç„WXÒ`þ ø*5zAÝ8ƒ€AÀ `0 ƒ€A »è’€Þ]™v:¹Aû+Ufñ¸ó¡«CÕä:® /™óþõåBîÛvCEE välS±6eÎÁß×/FQžõŒ=ûh%›çÀ»×!—*Èbôm˦,TQçíIkêJ4T(f\ßÀP$$&*wŸ`¤÷鋤¸HªGg¡¶ÚЇ ‰Ñ£À¥LÖXßA Ÿª¯»úZ«Ö²¸¾®;ów):×Þ{!ÆŒJugªGD)kñET]¯.‘àd 6cÅ ?k5ŸgP ¿¥¥û±uÇv•~Å‚ÙÈ[·…y–æjËH{'¶S[Ü©§œˆŒÔò¤ŒÁÐë±de• û÷»Ïåµêþ²óOErljª*,Í,û·+JK±}õ'*Îi'ˆÁýÒÕù˜Ä TWìÅlªh‹;áØÑTkOC…Ö³~3Ͻ»Šö£6Äz×ôˆÑ£14! {7Í( »×× ¬¤y›¿S4Nx•Ü Ð'5 )éýæ‡}ùVù¢‚|ضª±¿ÀÂäì& oZ|8I2ú˜KñõÊ·Yß{Q“E,,¡~ÈÐ7n ꊭ6v€ûëÜ›”¢xûúÝP·/©)‰TùÄ-ܧîåŠs¹æ5¤åüj·sï?gCä=3Î `0 ƒ€AÀ `8t~:qµ[µ7Z0ŠOÄøãN@߸(Ô”R˜Ú» €® _Q˜—=´âRû ŰŒ$%¸_zÏÿvó¡zr5~üâ-ÜýÔ;˜tÁu¸áÖ©Tç^Ž•«hŽ‚´•Òúõ¡1±úºZTW[­¨¼Û+W:ÅÉÞï6swóVÏJÄdÔë‘É)øQ ’p1h¦RQäzêSsÕ½Zßæéî£BTÙ«ç—‹ë3p8F÷K¦q4Wüö²xqﵯ{5÷·[™·BT„[¡/Ò·º2íàcàãRŠ…‹V`éòµÖ'!~\M­®„}ùuȦj5[6õGO SçÀóªÊÇ•£´*\âqu<–NŒ¾yRµÞrŒÁ4 µÖä†'÷ûˤ€l~4ë8i!ü×V–!wçnÔ”°°0µo]k8¡¾Tîê1dÄ8¤F‡³Ôquð €Uúë8PËãë´“}ù•œt!wêŸì¹WNpâLp;7Û‹ü‰¯L܈á?j8ð,ybîÒ`Me Š!2Xï§ã jHTÕº!00£?Ïù÷Æš5«‘Iëÿ3¿õ^xãƒ71pìd¼ü¼?V¬Z‹ÕT1øç‹ÿUy<ûú‡H¡}qj§¯ºeÎ k²£qU K‡GËYCm wW« VK¹i`ä„ÓðüÓaX³n-–g.ÅK_‰º=ðâ[câȾŽöM#‡>R‘ 5M\"g0 ƒ€AÀ `04±è Ó÷Ø„"¬ˆÊ³Awpŗªl"TÕ8„°ÊšZøø !>Y•c_Q%ÂzG#%9 ¾.Ø»§†Ùª·e™ 9d’âàZo­ k‡h©ð2 ­”€˜¯°©`7 ’­ÄºM[hͽÖ:æ1åx6‰R§V jÇÕï(óPtu÷F4‰ûçÃo⇟ÐØ&Ìøä̜Õ_ö•,¹—š¦g­tK¹¼}‘–’¦Ò—”J¹b¸ò› o·:äîP/{¥Â?þô¿XI#xk2âõ7ÞÃŽ¼bZž·6Œ<îtüþúßãô!ÀO߇­T†â´uuQµ÷ðGüÀs,Z_ÎÀ¢ÌÕØ´~5Þ|õŸÈ*(EzÆöÕ·?ÑØÞZNn¬À?Þ]H?/‡R¼J‹T¥º/⥬‚‹!ÒÛχªÕ'«çÙs~ÀÏsçcó +N””ï߉¯>§^þ8v Z{Ó9ó2O†~#R 96.&>‘+Õqh¨.¥1´NÖÔqËÁ,Ü|ßSˆ4§Mž€õ³?Ä_^yOES–Üõº+w–.^ˆY³¾…¬Á÷ŸÖA4ÂÖàhWÕ¬kô«¹ªíáã‹„þǪ|÷•סWd R¹ îãVOƒyeÔØ‹‹¸ÃÜ7SÏ»·Ür+ŽUó,{Q›‹UK—à@•;¦L=¸ù&nUè¯hí¡Á8}\žœPàNËê¡l»â^øêÖç:¬¡Ý…Ÿ¾{[ùÅE†Ñœœn-õ&­´ŽJâ[‡GﺯÇ&#€ªÍâJxƹ¬"ë|6(§¨î‚ ^18kL>]ø~íWyÁõ¸ÿ·gМ%¸«OJ6 4p&n?é4:µ KµÞýGŒÇÿw5xúÜzÝeQîyêMµR]ž%^»’LVïÅ•S`óÀÄ©á7ÛsðîëÏâcþ¹û»¡¶´ýμ/SΙÎ=ÈßࣗŸR*±Ï$LšrŠ|幄“} ÃY—þ ÿ]ñgÜ}ã_ôù_1„ûðe¢¢–‚´§o&œr!6mÊÆ¾Šoø§Ý‡'Oè “pùsñÆg¯â,þiwûÃO"#9eùq`³å+ÉJt}š}À² N„bÌ S׿Á{ÿü+ÿ$®£éæ–+A³žZ vŠÿl;w7kÁšîÕöZj†EáÜ«ïäÞî¨Æ~^¨wí]!i]&ž¸æ6åsÇM7a@´/¼Kæáã_ÄGTÙÿÍÉ£iÑÜO…¿øÄÝxQ'F?üáÜ“I5ý¬ Z§+§€«ã(;ÁæØ)ç³}íÆ¯?‡ø§]ü©7âîßœù%^zŸºb,dó<熻1tP:2¿zw>ó/¤HÏrÌ[´ƒ'_Œ±ƒ3€Ýk©ME¥¨sñ@Ú€Q¸ýÚ ð—~€éçÍÐÙàÒ›îÅÈþ©p©-BEñ6å¯Ï´×gºs‹…´¡mkÀ_‰sj¡”êûÀ±g_!ý©úÎúÞ·ÛRϯ¢¦ƒqƒ€AÀ `0 ƒ@÷"@ícDz ƒ®TÿOJIA°¯¶emF^á>¸SÈNˆ Ǭ?‹û_ú˜–ÚÀèI¬Û*â•H¬cx—»Ç›åÃ7$’Æð+õs9c¼´h/ËÛÂz؇Zn©ðP«øq¤»/Ÿu°=ûɓԑ´±Tî!çö¶™ìm9Ø·ÿ5-*x0¬wxŠ vasöjè‡")1~^ ËÍ7òȽBÔS=2:žÇ¹¥³í{£ª¼ ;²7coYâ’Ê#í$o¶Aá™m½xïnÖÅæW„:ò©4J¨yÂô¥ÈaÛ[\ޓ׻W0ÛÀÑsÌš¼Sr–¼LÒ-[¶ŒgÈOF4ª³÷yÝߊƒ€AÀ `0 Î#Ði½æ([1“A·÷++Õd®±ÖPýÜ~y,_àE½Wüe\í¦ŸV[—P@«îJj­Ò-|qJðã@¿š¸H¸‡Xµ–gmÝœy¨­Ò²–K^j©Æ.ç¥K¾²¢+{ÐݸOYø5mÁW­¬ÛêN—A<¹—?%`oQ“÷ðô¤8'jà\ɦ·‡‡'i2.Ã…/Ù[ïNú²×¾Y¹ßÖ꿇â“+ÖôAÛ…«ü‹ yõäjkO½ã™´¤Ü¢¾]K5z>XÜ o¼W:ò’x*.i ýô„ZÙcnä[ã'Ô¤,uD%¾ËÒ˜?1¶pÐ|ZôYI sêü«:àÔ†â_èJþÚ vò,Ç×IÞ4rÇúcgVœ©aÁ:dr#¾Œ+üÉ™áo>z5žþx|ö]\rÆxuf¸Ð-eUŸø»«•ó:…SÞœ0’ýèÎíKêÝѤ°4Vש6#üªtäQÚ‡j‡ª½Ôr—ƒÕ~’ÊOx6%¢Õ!e’òÕ“?i2I!mDڥڃμ…¾´Á †ñÜ„OÆ“í¢Í`µò¢êÛÂXêQµÆa#– ×øþ›ÌÌLLš4ÉèGEÍ& ƒ€AÀ `0üï Ð¡Š»22°µ¸£g0.UXG5i»Ñ/ÐD«®ªD•C`³„8ê(4SkW u A[ŽðRÂH­„™Îî$¾äSÃ#ÖÄéôÕ´Šm /V|ñAN+³«g¬ùgOל:y[êÄ’Fç/5QIí‰OÎoÊ8#‹KØ”ÔÖ3ùg¹ÄYÏnŸúÙ*ŸÊ‡–êÅ2¸Ž[O¡¼BxèTz;¼Á¶)/k_vg§+aî>þ´Up.ÿ¬v®¬Ü»pµ™‰œã¶õl§¯ïíq…'y§ýu<}^œËص¸MÆó4Ͷ°lg[WM[®mÅqöïJš®ÄÕùHÁÎÒfÐ¥¶S2÷ƒ€AÀ `0 _ôââb®\V¡’+g"¨ËjŸýj*´ðàG?ë¸ZÒg4ë8ö«]˜:K_Çm¾‰§Ó´Å‹”Y§Ñq%øÉ€¿¬¬¬ñ^TÄeB£µ4]¡ß™¸Åò`yé,ýî¨+ÁÒÞ¶Ž\[½êMº~ñ—:Õm@x³·ÝÿμØóÑ<îº:’ôG[þÇòòrÕŸéúS/¿ù1 ƒ€AÀ `0ô:зoßŽØØXìß¿þþþ(--UWH}||Ôþ_ĉÐ"+îbXÎÏϯY\___5(ÖBŽ –E°á_è=;}D{{{7Ò—Á´¾^ìX,_Rz¿;è,&AÀ `0 ƒ€A -:Ðe@+…¾Ú… ðʳ\íH[™ýZýõÀ_0Òvœ~­å>\åÒmÍ™þÑÛÎ\¨]ᦎF“I‡:ž[N1ݹxæù `ïËŽ@v& ƒ€AÀ `0 ƒ@—èP@×ÔD8’U'¹Ê ·5T‡1P‰òììã0 ñ¾ø’Þ9/‹®ÐÖBŽuæ¶/ç8:¶¦%áùÛx‘p•VÂ|é4ÂKc:¹w„ *D°9;}›·¹íÕÎd%\ðå_kNc«Ã[â¯kÜJÝq|ÆsÔ§ÄÕñuÞ:Ö:ÃmWüYá¶0ú ™lh¨¯Aa~ÊyŽ{`P0ü}…€ zÒ~´ÓùHZ•‘­üš'G§1×®# ðíz2“ `0 ƒ€AÀ pXèP@WBuÕ˜?{6ææÃËÓÖÕk(|¸ ¤¤ýFMÀÄ1ÃàåZÚ:Q1¶$ô_ƒ÷|»ÉjpÌ{7>(ˆÔIý]«õ”h8`C®iÙQ°hZ˜…–««eE¾ù‚µò/Y(Çxõ¤«Ê#|H^ s°EȲ󢞖éë¹ÚiEÑer¥á;«\ ¤Wç(¯ÓeÜ! @¥}xÆM«ãÇEkàáé…ºšji(/+EXL¦L>aÁ¾ªý5ÖkRêS ËB‡º>Ô½®kig*ÌŸìʳ8iSr¯ÃŸ¡ö«çª·ò—øü³¯ðë4rg“öèîîòýøøÕñÜ»sðô«ï`òø‘p©©Í-ÂÝÑÎ$m‹öËvÆŒUÞª|Nq$qƒ€AÀ `0 ƒÀ¯tUT^êk±nÞL<ÿÉ-Jmït3ª>"¸*aHVÛå¸'KhÁCa%¼0µ:–ÏÕ¾\Ý<Ô~mQýKýQà!X`¡c‰ErµœúE sg~µÜÿ]ˈž4Ò&uõ ps§Î.u mMz«~›ÚG½}H[”ú§Sm‘W=#G”ÉÄS Ûf]´#Ëø_]]­jÒ¤)› ÌÇÝ“C¤'mNî%¬FÝ'9²å|º{"eàL¿¼"B‚TWæãA¾eBÚ’««ä#´iï“>’Îz¬mµŒWË¢yª8ÒÆë8¨b˜ƒ€AÀ `0 ƒ€AàW€@çtJO"ðø‡ª"_yËÃ8wʸ¡5”ƒ°sÓ ¬Z½®¾¡=v,â"°fÙ¬ÜÀ°XŒ1ùÙk±zK>!ëâ½Øž» ¡QÉ8vü8ÄE!kã*,Zº‘q‰ˆ óǦõ[ßgöI¢l H" äånÁÂE+à†¦Û„’ZW <Ã÷‡·k-Öf.Äü%«QI])X‡„†¡ßÀA蟑ÊÕò*¬Î\‚õ[ ƒÊ’½ÈÊÚŽ°¸tŒ6E»³±dù*Ô{bËÒ75î,9ã­Ê\Še™«QZ]¨ødŒaxJ|>‘Ó,1Ó~5Bz×ßw/ª€Ó3í7øÃ•¡—·'*hxÏ×?>.øáë¹Øž)}bÔðA¨Ü¿ óæ-ÄžÒj : q½<1wΣ$㣙¯cPb V-š‰Gÿþi ÃGÁöEö!/ÆÝŽp¯J|þÎóxø…pÎ¥W#Ư?|/q2>{þnôIˆT)„G#”·€µkÔœWràvåîD¹·;ÊÊ+—ŠôDâ\YˆGyœ1úáÍ÷žõópÛƒÏá“1ó£É(+ʺ_Ñpþy÷³ï1 Ö_¾v¾Zeˆ/¿JÃòU³pÃOâ´ /GZ¸þòèŒ4ÿ™ù ’‚ðÆÓwàõ+0þä3H'}òE\s×3÷©Å{¿¯~±'ŸuÛG=^zéEüΫ7’£F`żÿà/¯ÍÆ#ÿxýÒ°rÞ7øÍw)ÆŽ‹ó¨ûûŸy ž:ûó³ñ§š¿ *†à£Ï``roTso»ÕÞ¬ók0 ƒ€AÀ `0Ýt^@§„îÏñÉÛÏó¯©à~öM\öá럗Á%û2žý®lºˆ¬ÌlÎ rîR§ºwîŒ0Ïä%ÄÜ_×àБ¨.Ü’iŰÐË?Š¨Û ¸«épxÓrL¢?Ú~3&F›®ýñVfž{s6žyz*’®\BPíöøˆú”œ9zÞ”)·Fk,xe b|Ÿ¿þ Ÿ·OœA¥ˆêˆ­Ö8²ÃÆ>Žj壎ŒÄóø„È9¢G×Έ ¤™û0ççµØwâ,\£9GD]tëÒuãÉû£uø…ãÆù‚œ#¼­“ïˆÊä%Ò®SwxDQ_-‚›W¨†m—v«|G<¿2ë+tm^ §ö¬Çð ÏãÕ/G«†5á嫽 ‘»àÍ'Ç·0 sg>Ž!ñFjVŒ þ¥½ÔÓ$DêªP( …€B@! Pü#pçدæ0pÔTôl߀\Ü ÈÍ×QÑ1ÈË3"®z}Œ÷*¶L|¯æ¢ièÓ­-|Ü‘›m¡-±´üaራX Ehìɸ­gΡ ÍÈ÷èÓ—\›h†žây±`äLzI€äX´|tªÖ¨`ä"¾Vs`ÿV²©P¬¾‘pë7nÂrGwpvCnj«¦µè¼¶òÓšzåâ* zÍš0]?'ž;5¨‹šT¾S¦;b‰S]I³Àb6"3-M¤W(JÆ7_|HõÍÆåó‡Eœ‹“¶‘?è©MEÒDwõ#1«Û¾7Æí‡@wrq7ßÜÄ-ÀÓí»ôˆû±`)ûh“Æ CÝjå`6Åfs¹L}3ñQÞ¨V½&ŬFŽ!ŸÖˆÓšqs>gCó¶íѾQ8Xò±gû8AqáÕ‹ðݼÏ`1æãìî½BŽ×¬û‡Å`d:˜¿ü¦Mž€ú-Ú£^í:èÚ­ ¢*UCÿV1X¼e&ƒ&m»¢^­ZèÔ%VôY±6ž49Ñ;d ÷öäéô†š5ãFƒEññ¨F1'O¤"ÏWëæqqåÉþªÕ¨g¡|e’8¸‡Þz'Ä`}„…êG! P( …€B@! ø_GàÎ :Õ”7€ã[) 5„S±¶.œ7IcfjÌÏEJŠtq#9 åÂĦ\bÇt¡öö² s228Ÿ6c£ ³¬ì–7ÏâM» ´M¿$a³fµ]œi£,“Á€—8{òœ)àN³î© 0sÌ0}~gö|T/çæ~€‹K¶Ûê 1}²ƒ6˜3ŒT–FØ-3ŒF\É¥Þ•'Ù‰—39s°&÷ (ô} ¢Â‚Ä&t™éð ‰â©LmÔ€Pá/#À/röÐÈÔ«ß¡ž®´×ï¤N°q;‚qONL°•sýúudçê禵¥ˆóÆ‹¨_æ!;St4±éo@(ÛŸ»œ…t:òzîb­=‚Ð{ÀÄEÑ ¹ÚgeÀ#(’Ö‰¢ÏˆgQ·]yj$àÀîMøêÓ÷q2Ý„iß‘“ßC³îgqãFvmøŸ}´ 7 œ0é!šIww·ÚÊ›¿Ñ©¢¨$¨ïñ{a¢…L!ÁÞQ"AÁ‘ú¸‘û¸«ÅÖǵíã8Õ*Ä·*( …€B@! P(ÿóÜ1Agþi¡Í9ìÚº¦k´qZ1²srP¹^s4«S{6þŽg¦ŒJ­z¡M%|5ï; {Á«>} åƒ]éæüçNÃgŽÒŒåYz®Û»Bü}qùr'ÃD„‰7ÀÒþ î/âåtN¤ðLæÉ2å‰dÞEÛ˜—‡«üäÒìRlÈÉÆÕ³ÛEºœÉäMç8ÈÝåiJ]<iã/A©¾FÁ˜.£˜vw)'ÒoZ†´Nm†BcN;† uƒP]Lí ÛOY 6uó'¸-yÇt»öìÆ¢ïý@=77>A±èLØç§_Ägo ÇÊ=f<ôÈ8\;´ ŸÍx>D Gôk+¼$8ÿ« Ø¿{Ndâ—OçrâiFÚÎrËÏIϼ:¦™ìh¶ïýi=; BtŠÌ¹8wú8¢kùâÚÙT¬Ý¸µ7ECòqs4cí¶Ãðv*ÂÑ]Ûi€ ±•ãј¼2`NÇÖÃßÒIÚÞ …4ëÍÁ@›úÒ†pÕïkƒU§7aõêõp1¦ãÄ® H¤ôZ=k ÈßéYüf°<Ÿ.psg›UP( …€B@! P(þßCàŽ º˜­³Î o[µÛt{½Mx5 ¾ä‚;çÉé¡©cG¡v9¸®ãÓVà‡¥MðÈÀ6ðp÷éKç¾y´ƒ6‡ »bêˆÞòñÄ9rgç Ï’f²ÆöA_7"ÎB€g¸é˜*DìCbËcÌÃ}1óË%xdøvT©Ig´gúQj–6ç(KÍÚUz8ñì%æÛÎbÒ³€fo‹ï¾üŸ}ð2^}~²‘?ÎkEå“뼦]F«ë_D@ŽudŸÞ‹÷gh.欪F§QhP¯ mZ‚%Dλx£F DòéªX¿g"f>75*ÿŒ(Ú=’ä¯_<ˆg'í³Y1áù·Ð¨v8¦Š£Ð8cøH3‹¹¡±1ùÛ9ðûd&f¼ô´-ß|°°)õ‡b|òùl€þªÓÒŠǃF£ð`Ÿnp˾€FOyêÔ®ÃGŽ#¼nG îÞ^.ä•¡ nññ}¾è:„²LøîÓô§U·}LÕ›Îy÷À³Ú …£õq¢k÷²¯j êW! P( …€B@! ø:*œçÆK‚~Ýô† ŸŸÊ•«ÐÚ^ÒR’‘o* Bã$,çâh//oò:6Ó,gœ\=i&2^´óvjrÒi3/>6+À×ë–Îà o/À3o¼C3îÕPDGgù…!<$æ/‹h3¶t¤¥Ófrä®B뇉$óÆt’°±¥ìžœ—“…Ô´ ±¶<,< ®EH%Û²ó è8µ ú!;#W._¥®iö;<”Üñ ií¯ þA!ð§Á€t’ÏÌɇo@ ‚ý‘+ÊÎ 7b„…„ЮñÜHJ¡³§ _o/±n=#-EÄç‘k²‹«;•GùƒƒÈ…ÙM¸"§¥§SýÃÄQZvЖ€¬îJE€;"qerGOCFV^É@ ÅÒÙànîžt€+²³2éø¼"ø!48Ær+O¦ý ŠàCæetî1ZöÆ´G‡ ÌÇ–b'DFGÓfnÔ—ó‘’œ"tÃÏÇKœuïHËx˜%+-•–f$#7Ï@ýÙ þÔGB¨O¸9R?KM¡¿4äÐl¹»—""£„B¡3i´WAN¾^>þˆˆˆ |´‘ÅDK?R›o‚õÏòá¾™žŠ«tBNž‰6Hô"ûbäO®öEÈ¥>ž’’Nƒž ¡>^ˆd²)Ï`ÛìïKýñæW·TLUd Œþ±ÍбcGDFF å _‰´ºS( …€B@! PüûÜv]|¸²û7‘òð¨X1Ûhof¯&!fØ‹i0­ë6YH›z…FÀÙÙ†Ü"^š[±·0ªT­'Zï]Hͼ†ÝBW߀`‡¦µÆÇä_ÿáÌD‰š=íG²üÁm¡²Šhk¸°ÈXDòL(¹Góšb_Ú¥½Vmžy$ƒ™üñ½(‹t‡GRúX'Û¹,"{Á¡Ö²i&ßÅåÊW¤•#‚iÛHª´¾éèä†èØòºþÀËh¯uÒÇ3ê!á ·µ%‰>P\L"ÆÄ!:¦¼èOšmÜi}¸›b¨¿Ä°2pÿä~Lý3<2F¼;ì¾o¡e¤Ô?(”úõwÑ_´^Êòü\ÒÇ‹„þ"8#"ºœØAëÚͲ¨»¹ª~©½›wƒ™’U( …€B@! PüÜ–  òÀ …HCA‰/42Á¤Fÿ±Ï$[aÎ"ä‰Û8éppA¦½ð|PT‰ …™6bs¤µ¿’„³¼ ¼æ–¸ºˆòm›ãˆd ’£¹ÃKÙ‚3ÌT¾þYÞk:4…¬™õ2±/òôl_6¯I绸®,ϺŠÉ^³I#FÇXH|œ¬ƒ”AY¦¼Šüœá_ ·*¯¬4ûxûç¿Ëô[éåÞ@ÐB;­ëX°V4N° b.qº¨]L4 ÄmUèìo¿¼ùêKpñ‡;yÞô¯€—OPq~ÞlÎL®æ¬ƒós÷ZšIÄÛìäv³Êq92>‘kN“ù¤N–ãþ)Ÿe:ÛPš<ÇÙú8ë£üüW`ÖÞ?N§Œ6}¬÷N‚,—eï4ÏÝèÕë/+ßÈ”•·´ø;ÕÇr2üu—:ÕU! P( …€B@!ðw p[‚γßìêdÝÅ\~ËkiFÈ4y24Ëy_ãÖô§å›µ‘N';¢!óÈ«^¿Œ+몗µ¿¿›òËÓÓÓVW¶‰ÿ+Ö£Çð¯ØRZž¿[?c) æ?ÕVÿ¤~Ù/Ùö¿jÿ?ÝV\ÿÒß•»ï÷KîûÿK}A¾WÒþ¿ÚVwŠ%c“C'OðÿgœG…€B@! P( …À½„Àm¿PóèÈ2WWWAr˜ 3ñá+H3Qä^þÈæ?2MÊ–äuyXžÿøã˜óË<¬—eKÓϲ·Ó/uñ•å¹ §·Eêçr9½4[¸nö¶°l‡^?˺ÑÙë¼Æ™ã|YYY¶zHýÒ~.óvúYVÚϲeÙ¯·…ïË’•ñ¬“å¤~Ö+ÓJÃ_ÊÙã_š¬KÎÇ¡4ý\žl–cÝü'ãʪë­ô˶â«ÔÏ6JÝKi“½ý¯×/má+ë“úõõá<Ò~©¿,,¥~¶G¶ÇI}·Ò/Û@ÚR>\®”“ú˲EÆK9™OÚb¯_b!å¸|/í·Ç’õsÖo/+Ë–yä3ëb²½d™ö¶ð3‡[é—Xʾ óèõ§ÓFŽ< ¦‚B@! P( …€Bà^Cà–3èü!ݦMÄÇÇ ¢"çoþ¸–W¯¿Ê4ûë­ddšÌ#ŸK»Þ‰ŒÌ'eí¯2½´ëÝÈr~–çY¹«W¯¢bÅŠ‚D0F2H}òY^ËŠ—é|µ—±.MVÊÈ«^Æþ^Ê”uÕËKgÿ,ãõW{ûg½¬ý½”•Wût~–iòJ1[zÿäÝìú.eåµ4½öq·’•iò*óÚ?Ëx¾Ú§Ù?ëeå½½Œý³”ã«}šý³^VÞÛËØ?K9¾Ê4û«^Æþ^ÊÊxûgÏW[½[ôŽ-ɯ—±¥–~#óðµAƒX±b…ØÌ²ti«P( …€B@! øo¸%Ag“xV‹Øêƒ|–W}š¼—iöW™ÎײÒd¼^ÖþþNdd)k•é¥]ïF–óó,ÏØÉF™_ê¶¾]¼Lç«}^ûçÒd¥Œ¼êeìï¥LYW½¼”‘qöÏ2^µ—±ÖËÚßKYyµOçg™&¯#ÄJžKriÛ®•–§D¦¬»ÒôIY™&¯öñòY½Y™ïnòÜìÿ~Y޼J]¥]íeìŸõylieüÿò6}ÆRî¥_å})b*J! P( …€B@!ðŸ!p[‚γèô³Áÿ¤µ7—ÃÒ½4¶]~ˆËë_×v뜬ŸËã?¹®øæº0†œN³·4èᨯÍòüà­lä¼b‘òɼ¬Ÿÿlù(M—-M§4Ív=¾IJØ$kǺlú(RËógÛôåÚʱ•¡É =\UÎf?Dr¶:^|DßMivPÒmƒ,_ òQiœOÆëëÃ2Òö’x>ÞMÃQ§å¿¹î2¯0Ø:©[’Gh'ýÎÃùdö éRÚUÊý—WiïÍu#‹¨\“?Å‹$­?²Ýœ.eÊj{–ã ÿá{}>~Ö{›øY‹ã²þl“^ž»‘´»$Ÿ^»ºW( …€B@! Pü÷Ü– ëM”Üú¸¿óž9ÌÍ䱄LÝU9¬ˆ¾ØåL¶ÌËæÿD$åèË÷,ãHgÉ[l$QØD‘’‡ !Y¯2¯>šå$ɽ)^WGY¶>½äžÉ ÃÄkŠKbùNØÐHn‰i™v•ñeÙ!5Jl¸î¥ûÂí„>̾J L¬K¼<ìE¤öñúgM¿E0ÐHŸ^öO÷Ò, Hk›j¸±lIÝÿ¼Õƒ¬Ÿ ƒŒ“ÏÿÕ•íž3lƒµzZýd_µá$$è§„sŒÖŒú:r¼†K ¾¥½§üþJxÙÑϬ/ÄéVíûç:°-Ü*Ÿ”QW…€B@! P( …ÀÀ]ôÒ@ùÑŸ•†£G!·ÐÕkÖFD?^2ËzóǵF2¥]œ&õp\ÒÕ 8qúÜýÂP·N x¸–lT'óü£W&–‚\häÅ—…ä” ø‡ÁßÛC¤±ÍEtîw¾Ñ //:vîf‹d}L”÷ô©ÓÈ/vCÍZµàíæ­y·jNÎ.ðôp·@h$ÚL縛èüo6ƒ ëâ«»»»u£-­¬ìÌ4dåäÁÅÕÁ¡Ápf"$dé qÚ™ž¶[ƒëâd/CŸo0ÂÍÃ.d0ËX´ô ¢¼Lüµr4jÌÏAzF6‘_GøøúÁ×ÛŤ'7/ŸG ¬vköH;ÝÜ=àêRB`µTë/ãJù„©3RRÓP@X¸yx!(Ð_ØšŸ— ÍŒë2„n2Ò™6öswsåŠúäàBå¹¹ÐgTD!é4èÜqº×÷9‘ŸêàFyù¼vGg¡‡ñb9K F³…ðò€“•PšHIK7•‡·7ý|µrM¹8~ü8ò Ý_-ÞÖ'(ñ¦ªþ›Üì\Ì”HLËA…Ê•àFm̃6LÚ¹Í yã<:RБò”€Ä«—p-)£Ñå*".6\˜n6æSÛgP>À?0>žn/é¹Ù™ÈÌΣ“+ƒƒá.ÚœI9õ ng¾$f:ÏÞRä@'$¸Ó(’ÏžBBrÜ=½]QaB¯´)?+—®§#6®"¼Ýù n#Q¤úQ( …€B@! PÜ“ÜI“Sö |þît¬Üs uÔ…³_¸ èì.¿«%yä€ µ'OÚÇ9pùļüì³( ©ˆÊ•ê!®BxÙÿ7“ â‚D¦\9…y_~‰Ãç¯#8¶;Õã"ÈœBlúíGœ7bä îÂXóË—øeÃqùº£°Ø²åÀ€0<7m ªÄ†àÀÖÕ˜;wN&dÂÏÇÆ" ~h$ªEúaÅO_ãR>]N„݉È1V‰Ðeç¹â±)ѸvEÛÀB ¹²’6ªeÂùcø~Á<¬Þr>~ÈË7¢m·èÒºŽn_…ÛÏ"62˜Èuu"‘´{wZj:Ú~C{´¿gmÅ+¯¿‹ÞcŸA¿.­àJíꩽøä³¯añD€‡FNÉ=+% nUп7$Ù ïò Ч]ß¼pr,Ù‰Ç&MD”ŸÎÛƒ…sçcÛá3ðöñ!Òî€ÚM;a옇é]ˆKçŽá×ÅËàQ©ž›<1ÁÞ¢¾ú~-:…õGëÿú˜›ïõù¤ìíâ¤Ù߸O®ýå lÏŒÄÌç*S2½Ÿb°¡›~ÿ?nMÀKÓžDT '‘^>n‘P¤¾µæ—Ùxgå5<Ô¹š»ù ‚~îð.|8ë]œNˇ1#15Zâ‰ÇÆR»V"½fl^µï¼;…nîHMIC‹ƒðØèa¨L䜖„ˆ÷ÇYIðÑÌ׬7†öo/úµ‹g±ûÐQ,[±Ã'¾1Z‰ªBOw{Ö.Æœ-iøìiÖø’A¡~ …€B@! P(÷ÌOþÓ IqñøaÌ\°¿¯ÿ5£Pè «T\XÍJºÓ¬¤6ZBИtˆœºÒ¬0“ÄY°sã2dFvÄœ·&À›Ô8»ÒŒ5=Yÿà°R›B¬ÿí[Ì ÅÌ™“ñëS0ï·xwâd];·^x O.\!ÈbŸå.ܾ)7ñ ®ÏYl˜üÅ)Û¹Õ‰8sœ1=›—¼çFïcèàHºtÏ÷„c‰ŸãÃÆRpáøÌݘõó'Ãé˜fÛ‰ ZŠQ>†g6-XúÍÇx`ü«øféZ´¨[™Iñö”6è¶ý$6~;‹¦3Îï߀Ý.m1rp PfšÍŸ>ó-t|p‚ÐspëB\Ìë€ñ@Q™fŠ-4ëîŠÈP$œÞ­ºbÄ' ñØsMà\dÆ¡][°}ÛĈ>CG"ŸlJ¼p| ,ø M«—G~ž Ña¶BKÈ9ÑEž ¥¶6d\ÃÓÁ9Ÿ¶˜ñáÇôvCÞ%+×ãBªhÒ¶'*Ô̓C~^ìÜ ±SÞÆ¸!ma1æÁ7"VàM£ضn~\¶‰>5дa}” ö‚op4ú'7/$߉~£&â£ù¿¢a•P»x"4È ¿¬]ˆ¸nq6ù&'ý:Þzå+Œ4¦Ì«xaxcxv|ïü¼œpùìÌ_¸W»uFdÍ è9p47mŽ1m«agûvˆi×€‡R¨íe_¾Iý÷ß²MxY;u›;ÊŸ›r‹\„ÁoþH­HÜ›ðæwë̾xŸЖo¿€èŠ•0õ‘Áð #Õ´PŒ¬Ìdôí3SëCš¦Ë)d’×D\ÝÕ©=|ò1ï½§ÑçùY8¼èc„z##;}F>Ž6Íë!?õ2¦viƒ¹>¡xmʃp!O*æœT|>ã)¼ôÁ¯x½\3B‡êáìŠ&ú E§ŽpG²sÈÃ8%/«–üŒÖý_†¿˜°'}'’ÂêªP( …€B@! ¸‡_×ÿ©ILš øþ›/äë…_¿Ÿ‹3õš£o÷¸ph;¾\ø’³ ˆ¨XC† 3ÏL6®œ9„ï¿ýg¯¥Á/$Š&µ*âÂáݘ=áMø‹Ï?žv]z¢e£¢ŽzâòWšˆ‘à…ùHJ½Ž¶Elt4Z´i…Yûó`&â³eÕbTò º4¬"Ìq´®ÉfNÅD„C¹[x°*±¶q ºñ j…-›£6¹¼ƒþÜ~HBëI›ñÚÄQð¤óà=1ah#´kÙLS¤û½vj—FÎWíÆÐ.´”r±øø»#hT¾6Vny÷lJîø‘§Íƒœ\Ð8ª\œyJΛwÆÀžÑ´±U¦Mü8±ç{ã‘‘C‰iSðUªÕD÷ì,¸xúÀUèR¢ÜѪaC4oÙ *h®Ñ¬ ´ö|“ÒÒ’ñÞO;±öàOhT7F”W©Re4kÓ¦"r¥'WèªkÊB«áÝÙ¤)ÙØPÈÉŸë—Ï`ÃîÌ]0;–/ÆãçP®u†—Csúãêïˆ5[¡y󖸯r°ˆ+2¥ÂË+Þìn­ Î.î¨Ñò>¸:9"íÊ9üx8øóHÔ­"¤*ÇWE‹¶Ýhð©Äu?4¦"º?ð Š „ŒF¨uJu·œ&0¡81SL/‚§và÷ˆû‡ÀÇÖQ4R.6($™²HªÔÁE>´ )áÔžuzDΑ›rÏnþonÇüz!Õ¼ ~*‡ÝÉ{€êâæöà—“ú1ë¬Ó¬-ê·édë?£Ç=·<ŠëiYÔеï0¸Ñùõ"Ä•G¿G‡bGb* &Ñ9ñQ¡!s?œŽ£yј4n8hŒC#èÜïø4˜âç‡lg‰'Ç—NÆŽAx¸ù}â™gâuˆ8õ£P( …€B@! ¸×¸':ƒââî…rª¡Âžt”¯ Ñ¡8O.ÄOvo¦ÏÌÇ„V5ðÛ‚™h?î üüüL×1e@=öš…ñ žÕߢiý±8~~ͼF F÷*Èð DÕªñðõr³~ÔÿÛðkd|·áA.¼gÏ] —݆¸|á2bC#‘f½^~O¼3Æœt\¸šŒðèXúj„˜g-9ä$_ÃÕ,L&^cÍq³äÒs³A±—®\@|ëXZûÍžE´¦Ü¿oØ€Ž¢áæH3èDôM….hÞ¢­Ï¿„ðû¢eƒš"AA8".¸\U<õÊ<~ …=Óztš­7i³¡ZAü[Œìk‚ò“»‡ –¯YƒøZ«Ì3èä¦nqðB»v-Q®>‘f¿EÇæõ„ÐxÑ:tbbÎD®Ì&ò22Å•ãyßš&¤“Ÿo VX½ý0˜øöœ¯æÂmhOZƒŒàP±¾)¯-g×v‹ÉLëäómºÙþ"š¡fxíÛŠÌàÚèÛ¯?œoì'¼v¡[«: %þÂãÀ™ˆ¦‰lËNÊÑå×ìf< ÙN]`"œJ³¹<ëìŽ:”öÕ‚¯1´w{„Ñúj®»·—·ÈÁÞ< SLúósn #)KÄ;ІzzÂÌ÷šçG1ö®_†ß6í…§—õÚ›öp¤å Y¹@Ï~÷£Yýª‚ˆf$]ÁÆ›‘ïèƒ6mÛ":Ää °oט]#h‰ñL¾ã[K.6­^‰n=† Ô[ûï¡Ð˜‰¯Þ{NÞF¿ŽÍàKà¾òÕ"Ôï0•¬AóZå)#‘éBê_´ï„-î >È}Qø’ˆ’NÛ˜NmJ}œ“s‹1G®Û°î²žz®7y|pj–,ü?Ÿó·3ŸÀÚ¯ßÀñ\3iåP,–S89К£E4o ô.ìÚ¼ :uGù0 k ?›„ºQ( …€B@! PÜ“Ü ˆ“G4h‚{’ñÀƒƒàOdá—¦¡¸çK˜2~üˆTŒxÛ[7ÂÁ£!Äp {¼Ķ)4+莺ñ18½§Vn=€©C: yûn¸èÑ ì)€;“óZösÊâ™;GšîÐë_ÿÏÞ8ˆóçÓ0éÙJعî7Tí2îyWñüï#Ö{†TÂäÇÇ¡JL0òrspíâ ,^¶ Ø¢&„3vö¥µç¿.û ž–8sh–ìNÂço½„ Á},äÖïŽË[¿ÇšºÁp¡º[LÙH1ø rµêÈÉ3¢zí b³/¨d×n'Ú¨«<Ò²a bΕ±ÓÑŸòȶPpquÃÚïV fXnú3fÁà‰šõê¡r½VXõÓxãµixvJ6ÊGÓà Å=þÄ£hG³›ÎÖAÖCUbÞuÛ ÛÐ?¢žûx>xû-´jú**T(ÀÈÊ3nèÝþ^Ú‰?)%»y&¹0?[Ö®@‡NÏÑ:sÜ×´ ¦<¾O?2U£È½ÞZ?ac~“eôä@V™’$±œÀL¾áÕðå†exûÍ7Ðôõ©4ðTQ±51î‰Çлkkxó¦…”ÑÁÍMº¡åK°£FyÔ®K¡•x-0,2„FÇ¡u+^¯Ï›´ÉPs¹Ýk{,Ò1ïý7q ÓÁ…Wñù/›ðÓï Êߌe ߀‹ç5‚N¶ëgá×—NaùÎD¼óh=©GvmƦKÞ˜ñÞœ³Í÷µïƒÅsÎáûÅKQ«Ú$ø’«;ªðà‚üž‘ BÐ(„ 9µ{5ºx߬܅H?4òŽ0Ó‚û·®Áø§ÞDËc©îÚr”m+~ÄëߟÄ⟿¤åžÈ&zçzá  °ð €y+èCæËX¾|;FÍ#–1Èr´A½¤ºW( …€B@! PÜ[Ü]0NÂ…g$ LÚ ›\ igî°tËônY ,G¶iûè¸m=š×«†Ï~\Ž‘t§á6[Ξ‹bÄ •È•üæc먿“m¶øê¤šy 'V jp1^7žyj…`óio|òtu¡L QE¢-Û7"¶ETÓ–°G@\Íf˜ûy[ùû²ET7nVô1ÍÒ3áÎÝ‘ú›fã¬Î+—lœÜóª7éŠé_.Æ€N5k;ð) =ñ †›Šy3ŸÁ{sÓþ ½°üÛgq¤¨%ŽîÞ€=ÔÇwºˆ3Æ%hX3 Z6¡% Úì<+Ó“ï“v!3ª1êU+/ÊÑŽÍ·êG! P( …€B@!pO#pt #>šË›ÝÑ™"÷XÚèìJ"‘HJfC™À]»xU;¹Á¥Ø—®^…™ø€6ßfAêK(i.”ñ‘M¼FZGË´Bþå_I§ºÅT¬&þØ„¯æ¾ˆûº?€ø¨@,>õ}šfăѨIkìÎL'ç^ 1‘»]›Ëaáó°v[3ôk×ȱF™4Íž<ô~ éÞõãË¡v«^hE.Î#{µ"Òç"fïƒà#\Þ‰ZÓQl2DÐúásŒÁѳO"ºQ¼p‡ç´<Ú lù³Ñòõ´Ø ®4’p5 ´¤›‚60`4æbïµ€®-£]ÃJظì|¾ø&|P ¬ìý0~íÓƒ:4Äñ+ðô‡‹°b÷T›bÚ=ú:rhÇðÿ2؈••dñ9ÌìŽ{z×*<·èvnhW/>SÛGŸ@ç*¾8¸w|ÛÐnçd¸‹(·êˆì„˜ñý:thV¾îÝ(&r–ra rèürµZöÀÚŸg£cïÖðYÚñ쬯݆ýšÐnÛ<ƒn3­±«Ð¬hc|üütk<ëw}F¤¹ŒY©Xðþ³XšÕo´Ð\œ+Öh„¥ãúàÇöõÐvÚ6ç$á‹§£æÀA(N3ª–,˜ÉEËÎÝèØ¸Í ›ÅÚm¯‹=+Àºsy¸¿ow„ùóT4¶üþ3öWéB³´|Ìœx½ø†]»ÄYæ"†ªØØÌŽˆqMÖÒà.ŸÞƒ÷ç­Æ€û j…(ÚpŽv®?º Ÿ}ºï®yM`Èò|\WÚÅðÉŒEÈI¾ŒOŸ™„çß߈ñ÷·±Æ-kÇ fó^Ò¯;í&#âyMý–Û?«·Å:’[z£V-ÑyÈ£hD3µ È5=õÊÌ2 ^øatäÜÉÍ¿á½ï7`ø˜ˆ ¢3Ýp|×zÌ^‚Õ¯V°•YLç¡oüeªu‡N­´ÙepÒ^,EýG h@K%jP[kdØM†ÉÜâ9DUmŒQ´¿ëà>牡ã¦`¨HÕ~X^ª%*-Ê9wt?Ž*â©ÚñBHô_"Ùš-El–Øút‘æyÁ Ö6ã̼6žw£ß»îg4¢wøIoÒ{8ö4-¯ ú+ÐÙä0aýšµ¨PcBÅ)Nƒ~ýæ 4,q=h'~ig>Þ½¾ ~ cÔÀ®¢ª¹ÎSÉ „ëÀáÆÅãXº#ó¦ÖÏ\ÿ’å"Jý( …€B@! P(îYî)‚îæí‡VÍjѧ=!'ÔnÞ‹¾œ‰·^y«ªÆâèQÚ›_µè@’ñ¡³šçaÆŒ—±ÿZ8yèfûÚ6¨DyÍ´™Üx½Ø%÷Þ b­l±{vïÁë/>…J´®–C÷!“ðÑì¯1íèj|㉖|Ô–¶»³Òºã¸Àێ眇]Œ«6…r5ÁÜáGâÇÙ)˜þáÔ­ô"…u*¥ÏÂôW_î×Eæ,œO÷Âᅫ6 «cد’ûÁǘ<á1´$ò¿ÕGpo4 'NCµZƒM¡F£Xþݧx‘ÖúoiÛ97ÎÂày//.6£RíΘÿÅJ¼–~„¶‘øDdzÖÂü^¡³Ùë`Á‰¾r¥pßÎI½„놬™ÿ6jÇ…Î3¹Î.6h(m¦g'XÖŽã4±/Báå’Ž1ÃF¢M‡ftÜ–{÷Ç ßý†n­µÝ»YÐfhã AH€Ä HJ¸—&#к1í€OIž# žT¨vž}?Î]¼j#è>þæ|›ôß{cÌÏE.iî@îÒÒ˜Žžº|ñ’Ò²‹rQaºBéüì+éƒ? ¡¨P>Z;â‰f—³³²Å9ê~Úº\ýŒ¡NÁßr+13 ¸víâââ´YÅR´ó™îi´n×Ë׿„ŒeJ¼rWiïØ¸Jf³ŸDB‡›£þÃßã̦¯P9R#ά'#3 ÎtN·/¹šóFnh®Í¥è.Ån[ù ÙSJl”q6YŠÐßËt¾r<‡?·«ˆ¦ Q í"ÿǪßñãO? 0¼)Þ˜6‘Žó/S¯Ìý÷]µî2'vÿ•û“0zä`Ðz9xp»²lrDÐ?Ÿ1 ãæ^Ç[㻢E›vhѰæ-³ÿ n«´†Ÿ~ ÚÁþ¶±}ý*ì£o}{)‚~˦Q‰ …€B@! P(ÿ·%èÑ4[ZµjUñÁ®ÿØý'ìåh¹N[êç8íƒ]‹áQÉ¡þœÆõÁbâÀ´RO@¥ÎâÊåæççãúõë(W®œ8S\o·¾LÞ1‰¦´Õ¾ú5³Lb¸ÙéI8vì,®>¨[§.|‰DYhM9㡯#ÏhÚÖÝ2ž¬À.°~[Ù„“˜Åæ×iWø gNâÒµdÚ-<5ªW…'íÀ;”Û½Œuiuå]½ÙÅšíátQ&ÛCXéÛ‘usº${,Çë— tv¹©€°¢tþÓj"ïÄQd¼l€óÙêCzôõcÝœ“mÐ÷[y䪮õ!(~ŠxguеՑtòyçZ}JäøŽñæ*‰À77µ‡]Ý­bl+ë.4åà0ÿ‘ïˆ5k Ï mæÚÞ"kÆèÂ¥ñùåÅä•àF›Û•Tèö2Ž'áér޼YRa2’'HeTŽ‹Ǭ•Ö¹ÿól:Æé²ý¸Dî7_‚¥3éF'>œ?}WndÀÅݓʫˆÈê«EZnÊ«=H[¹¿¬X±uëÖU3è¥à¤¢ …€B@! P(þ;nKÐ+Uª„òåËÿwþ•Ìàí8÷?dµ2U!ðÿ«W¯F5Aÿÿ¯éU …€B@! PÜÓÜr“8žÕ:uê”8J)ƒË¢]¢y–˜¯ìÎíææ&Î×ÎÏÖ΂vuu…Ñh„‡‡ÇM²ît6´Éd3ËrÆ•gÂÌf³ÐÃúJÓϳÄrFgrÿŠ~.[Ú-¯Ò~mZ›Ñäû[ég[¹®LÄùíç:±ÝŒO­ƒæº=zÁÁÁ>‹]Θò=cV>R?÷®«‹‹‹ÐïááŽÜÜöe²Í·è–·+òŽÒÅ;CnÔenVÖCà|‹Òìëu Ñ2ÛYlºožÞ¦;¯ÇßÔw`·‹´ËV'u£P( …€B@! ¸¸-A—í|•÷wk÷­òéÓô÷wU†ÆÎn"Š|Œ“S)JøÃü/—SŠ>Ž’ûReä++ÚÞFý³Ô]V^}ü?&+‡¨OðÚzûôåßêþnl»•NÓ—Ïz™x3O³ZZIû—&cŸç¯8~†bpýâ ¬^·iÙÆSaZ©?Œ'·©!;»vîBr¦A=®3ãÍ!3å*vîÞŒi+Ÿ_‚¾M8^þ üè™ÓKäu}ò¦ø’ õ؋ـK/>¹Â>©³T=ÖšivPg.²àÚÕ˸žœ¦4ˆr¬ïµë(3ØÉêëÆ÷²OÈvæ~Â;¢[ø}Óé.±“ã5L¸ÝQlÆÉ#ûqüìUá=ÁgÆs:ëæzçf¦a÷ŽôþÑæÅ¸tá:Y݃5’ÁîÔš;¼H£tÖ!¸#åI8½íGÏ#;# G÷oÇ[¯<‰žCÁ¯<‹ÆMºcáâ?`°0çùçHºf«ë‰Ý+0éýE((¢gGr{×l¶Õ‡ŒçÙ¯á*u–ÈëôX3iõa~ž‹¥ßÏÆªí¥:*ÇúNP»±ŽÒ‚ÀЬÕËJ[9ïeŸÐÚŸ½b ±qÅOX»ã¸HcÝ,[b'—˘XK¤Á¡¥ §ã—õG„÷„V––‡%²’®`tófHȤSL™˜ýîËØwæŠÍ\}ù¢[QÊéýkðè[ßÁTH…Üñ{¢õ’[Ù@GœÜ½Ï}¶‚‰[‡ÊLYøþ×±r÷i«W¾‡ÙLS7 …€BlkØB$ŸIDAT@! P( ÿÛº¸ÿýÒÇ1}„s8wb^øø¶î›‡Õ¢‰˜»ŠøÜl:S<Ço_øùx ‚Äü‰?è-f#RÓÒáè⎠ @"ñYdÆö5+aªÒSžz僼i&í’vÆ’G^Dtˆ¶ýþzÜßÕO\E*‹XЉ°htNû·ühú˜Q"㣜Éfr 9È·8!48ÀJð˜ô13!=# pr¯/\]è¼fc¾ýô-Lxs.†õi%ìrvsEËŽ]àæéN¶çÃ/,ÞîN(,0#95 ¾Áðr׎€c"Æi©©0Q †ë%fÊÄ•C^N& $–“Ÿà*ðp£®@³©yùt†=ëN”KØYh1Ãh*¤ó±]P1®Þ‚ DWǧ¬BÕ&CѹM4­¥z.Û$)öÈÈ2®%²d· Éq¾[çÕlDA6¬Yñ#‡#:€ðἤ!=- ήnÈÊÎG£¸pÑ8 §!/4³ëîåƒ@Â…1+¢ºšD?t >•‘™Mx{Sô¢ƒéÍHý΃pð³¶aL´s?ƳÈnÞÔ†ž\\=ÑÐD„‡ˆg“‘VáìXŒL:’¯Ø‰úo Ô£ÕCÖÕÁÉ-:ôƒƒw¨ÈK…ÁdÈ£w‚Ž/tv…¯/õ| œ8ƒÄï yÙÔ§Èvª[°ÕVŽ')deб‰Ä^=<<ÉVoΦß>ƒ±êchQ?.dŸ aV\`¤ãÖòa¢Ùu77*ÓGÊt÷ …·ÕÝLGfÀÙÃþÞ¢î_ñM[‰¾æäî‡>ƒF#<2X¤±­ù¹ÙÈɣ㠩 _?ƒaqC˜@‚؈£ž‚È´K'NÀ!0£Ãplçz|5ÿdOºr]FNÄ„¡½HŸ7voý`$ù=8•èˆgè=éÞ¾ \ ›ä˧°à«ÏqE¨=E8°k ¢›´Gµ ôLðå …€B@! P(÷ÿ:A—DÂÃÛµ4€O$´éÐuªWÂú8¨i'<8o ´­ƒË¿F‡&ÃpøÒzÔŽñÀœ7'cUÍܾð2,)gЫU7xúoÂöÕÑsüPì7†bÀ)œó2dgš1=°{;6&5ÂGå¬éÔVNø7¶‰F23¤Ò‡·­Å¨‘cЯo/lYú9z׎|H÷\¼ûÌrm‰·Ÿ}…éW±ëð9de¥âÜ™“èšöž}§ßÌzùWN`xãh7ã LîÓ©ç÷cÑÏÑš]„D„båÛ/¡r“6Û§%•“†Ÿ¿z†º“àM3ìM:õDí"7A{hNžhÑ® žœOk¿³#—w®×p•³›—Ïî§—¹0Ó¬°§;yÐâ`š6MNJBËÞaHßÎð¢ÑŠìÔD¬Y¾ûÏ¥¢c÷Þh×´Ž˜å+æ×ÎÀËϼ€î_CŸ¶ pþÀz<0þYÄW] ÿìSèöÀ(ü¶éW ƾÛQ`*@DLZ>Øù± 1¬Gø† ¯”˜ÍðÞ»€3ûסSÿþ(â ZT ‚ƒ%k÷\ı#1`@|úò(<õ®7–Ïy‘föaHϦ¶£ÁZ‡ÿó¸ ¶õ0ò³’0}dÔ™ú+žéÑ ×ÎÁ‰Ä<i6›NÎîÛ¿GÆarßÞØ¹b.úuœ+©?"ÆÇˆÙo=C\O̘ÙWðÒøáX‡‡{7Dzùï`üW—±þëWáUŒÇd\'l¬ãÈO»†µ«7¢ã#oÀKŒÏÐpõ™.T? …€B@! P( {ÿ„ ³;°““ªÖˆGýjк]'„û9à÷ßÃ{èK;´|hê8vôcغr Žœs‡.e 9‹Ö¸’g4‘{º*÷lO7Í‚z<xü-Œr?ü¸/žÏ’GGVŽ ‹ ŠFV€£¯·XÂzqr:SÝÉ}»r-Ä×i$ê¥u3&œ<_œ<´¿œvÅ#´Ä#%)î>È<¹‡ŸFý ²Bõ?´ïÑn®LðM¨Rã>£k£y3íÝa¹*5kâÌ©S8rø0R®§PŒ'r¹~¢¾’7^˜H^*Úò‹©/ÌB|˜˜þ‚Ée£˜\ÏÅÌ>½q=[ÁÛà “§OS/·Ðº ZÎQ½AK4ðЖ#deg£ÛÈñÐA"ïô0ïaxÿíáÈÈ˃Kú%¼6ç7ÌùéQ±·D±™H8½.[iS¹5ƒ±nÕ:üòåO4 S›ÍFë6-0w7m¤h¼9wü Ž"ñdª"]z]ˆõ£P( …€B@! ¸ÇоìÿU£ˆVX§®DdØý9ß ‘‡<Úu½qð3]$æê…*uZ‰õ§ùù9ˆëÖaþ¾6kC"+#Ä¥€fM0“+uÍœ™D*­1åÍ´h:òÜ‘­hW«¦}ô-îO˜ÒÅÎÿô¹Í.yÃÊÛ‹Ö$ Wmª£ .xÃBD17Ï„>ú!"Ì_ˆý‚SÛw!‘o_A˜’j¦j;`kº™”¹ÐzuÁnETpX(Í :#/3Å^!¨©‰Ò¯W@zµˆ†Ñ˜‡œÜ\ôiӈȦ–7ŸÉ¤ •I„™Cƒá´÷ìÚ ;·ïÀ°'†ÒÌt¨H“;kìP£‡Nnnp!ü-´Výæ ¥ÒŽäƒÚ™vÕ§õÚÜæ&qo€îÙ cÚuÌû"FŽ‘c&`ÇïóÑ¿}/L™: oÿ¸cõSIÞq\#þšÛ;—wþø>-¨Hý¦ ?ÂbÌG>yMÔªZÅŠQP3aëJD™ÚÁD{ô'·r?ký7ÄV¬‡¢Z#N70t&–ÌAÿ/R?]Dù¼hàæa΃<°öÚ;પ3ŽÿI„ä „„Ö°'°©H…(«•Z«vZ—ŽK]éŒR­´X§S«µ‚m™uµ:ÚZI"e È"VŠì «ȆÁG’~ß¹÷¼Ü<^hjpüß™¼{ïY¾óÝß=ïå~÷ûÎ9ÊF~¤Ïk-*9ˆ§'^)Cœ—N6 £dïFËÒe••ROtù9“{'ÊÉ|2£ü¡ÝXºl#œ÷ ÑÆL'}€ \¨ZÕ@×—ï?nŒX4dÄxäß2/L‰k' ÇêÅÏcÞ?öbÆïûÊLÐQ˜’×ÿî˜ÿèf ú}7Ü‹‹òᓇùJY¹¼Z (—ôÇE,ãÙ;\)áÜI±qý:TÈ,ØñÝ30°OcÙý–»9êÙÕÍ1NN~ŸÊºÜö¼N •ÿ®|_<þ§‘™Ñ·^²³~ý žxàÇð—íÃÊÛ1uÚÕè‘Úo.ý•§®B§vîb®L#^>>¯ØŽw Wbì D”Þ»¿w~øüR¤¥¦K¨òL™ö3 úðE¤wªÃ¼ßÌDÖw¯Aj÷dDïå/ý/Oƒ‰9½±þ½×Å#û®ºãI#:¬—æMÁí?…^ýYƒ{›tǬcgä};ÏdêÄpmÄc;HB õÏnÞ{eËöïÄÒ‚í˜9ï!ã‰×²aQq‘{).¿á*dg®Gº¯-=÷Ö.Ã[ ¿ôþÙUt潘‡;¯„íEKqß“¯béú9¦©ŠŠR™q?- «®g~Ь­î(_/k62|ûð_ø vîÚ…ŠèZümÁ\üsÃûâq–{&Æfé‡et5:Å¿}ê$ŸÐkBÈÙ÷þ2öß1^…ˆó6À”*ŽBD¿HTÉlûo¿ô Ĩ¡ýdBµ)‘,†«óBGXï¯^èAâ%º1Ï=Ÿ}g‚¼{8Õ«×#säDVcÅGŸbr|2)[l\OtîØÎ¼ Šé9oþ²’efù.ð‡E" ±gçvÄú»`õ; ñÜÂ|\y·2=OWàÍw 0iTo´­)ÁãÏÀ-wýiq‘()­ÁÎÿlr"äÞ~úÁ2„G=)/ÓöáµE#}¤%ˆQ.‘0#d^yÕqê3ì)Ó(˸Vþ 'küHÉ臙×į~;sîŸ./B"°iÍ ´íÖãeÖù)£’pÿoæbÁ#·ãó£{0ûƇÐm柤­× ¬ßeÜ7ÍPÕU¸‘ À…L í/d VÐzj÷ìٟχ®]e’lzpùó>—g|•U-¢E×·ÅèÜ™•<qÊ:ù¢,1tæ‹ç«@ÖO>§þô,Æ Í£-d\öñ–ã…Eo!¿p&ÿtn¾nª¬É݇öïCD§DdÍP,ÆÅ©Ïj0®ww|²iV­–Iâ–¯@T|od yî³zK]“ÊÑqÕ•âá×_5PK’ðqFe–eÎÂP#aúQ±4"I²TÔÐÑS±oór,^¶ï/{µ¾˜ø­ñð…ûqÏô0ù†ë‘ÒU–3f¿£°¶S'/6Ž–VcË¿·âã «ðâ˯cÊ=áæïO1K­¥¤÷EŸnÕ˜?ÿ,+(@»^“ðȽ²Ü•/¾Î =¤žó(VlÞ‰ðèNœ3£rs‘â†Û NlùÓ3¸fælŒØSl2 -ÿ¬ËÌ× PÖëþëG÷ìɘ:nP—+›eêxºu=rY^,ÄŸ‰x02]Án]•¯Æš·=+S£ 4ÄZóÖå¿M5ÉrÝ2œðUï´zª»õè‰Ô¸ü|Ö«”eäºaô¤Œ>ñ‰É}Å8™ìíe¼µô=,_¿¿øí³øö¥YÒoNãÐCh—‚ì!}ŒG¹L¼·aá>ŒÉqîáÉ*B ëÐç^|1z¥¥"¦n }âì,> _—DŒwF u`ï¯>ŒácžÔYú‚ȉìäé 8.‘CGA‚Ïy¹a®Ú\´¨¢Gl÷ÞÔ' Û×≧æbË–M((Ú†YÏ6“èéRcºiåã뚌1S/EÁÅK °¢ð]l•áã—Oš€˜65xeÞX¼¼…ËPÛ5wNŸ†¤.2“¿¯ ª·¯Â‚ç_ÆgQ)˜tÙ8dö—Ðú[ïÀöC}x²rÇ#'g¤ô‘;RŠ]Ûþ­âiuáBô¼è&<ð“'ôê Y¾/"ÙG ½Øw¢Y£ïÚ%¯È‹‘×ñÁº5ذ«O>|/†õMAÉ¡b1Ôc0fÄ0‰¨iƒSò=9!ãç3¥½dùí*/J·­Âs ^Åúµ+QXô±p¾D^r¥£gŸLXó6ž]ð7³îGϱ9È9zø°è/OcXÞõò+ÍíÃÚ§f;vì@R’Ì© ¿oC'ÝœðƒH€H€H€H€Z‰@˜CŽUå* §ö!6??=zô@¿~ýœ±®îÃmK骡Ä~Õ[C}M¬¯ó\y¢ ¥²Fµ¯sWÄÅʬQ²©–Úüiñ¶9rTŒöò€ï„K¦Çê‹TY*ECËkÅ{©^k§®š¹êi G¤ŽGnÁÍ2Ó±ÖDzzº„Û‹¹'ãÊu<¬ÑI”ª¯êi¿ŒEÛ:,ãëOÉzÛå~‰˜˜³º¾¿ŸuÖÖfcþã÷™ óϲ­c±OëµÉ5V”ŸqÒáHLŒ7¥ÕE×A/ùôj$â7!1Q ‰.p m œ.•°äSuáˆïÚYx #ùŒ#Z·u$«{ +ß^€ 1ÈjÅËkõ5ÝEn„2Þ”ÿ²'ÎÆæÝ…Ö+A®Ï1û!ðuÌ¿wÓþeõ´}ÍÈ©¶‹9çN-[FÏìZîþÊOq×.ÇˆÛæâæ©c5ÇÜgé%FFp=RrT&D‹‘1ã²v» Pϼ¾Ðí³Êrñöž@‡Ø8Äwvæ5Ð6ke3¹ŠÀø~=—.*çÒ¯Ü{è—{.¡ôêµVÏøÑce²æx,â|ÂJçy4\\CãõXCúCõGNC_0Š™zøeܼ¾ˆ0ó Ƚ¬(/—õÃO¢½D+èºíºY†ÁǪSÙqéS2潓¬5©±ú²©§ú¸ÌQ 3öwîÒÕ /1òQs² U'O!J¼é;H¨ºŒ?R"ÍE´¯ºÌ“ }W'úÓ×ýþÏͽ®ª(—þ%“¶Å'ÈìíWíã |„Ì ¦‘ROÇ£—KûÕ²~z¬/±u\¸|§C|O‚ÙhäBé±R³/Ã8:ÅÉ‹(Â/÷²ªÜü^ÄʤƒÑíå¾Èwo›DF\6ýi¾Ž~ɦ/}Sû‘íK‹/–e ‡šß7/G£?H€H€H€H€H •œ—®:ê®5ž¼Ç¡ô·ö¼-£†Ž5šmZ Œ>DÛDÝKA¯ygeÚ"j°IL±1žLš[>¸œ-¯{Û–¶ÔXº·TÓÇ¡®[ÓNÊììd,x¯^2®Ú5v)ŽñèÕ) ƒÂðlÖ>,Ë“]™ƒ›`Æ´ æE„™ÜNÊzåxª®Kӂ˨q.©¦xpžItnüÕÇðÈmÓ1î.+Û«—¦Ùs»·åìÞ¤Éh”gOd,#ø\‹†Jóˆ0‡Áe‚Ï›-¯ºÊß¹lN9çŸQ¾¹k‘×T›šÞ\ž·ÝÆj‡Ö+XVSçÁéÚŽI;C÷Ƭl=ï^Ã๑ À…F Y]×½Þ°a*dâ3Okp/´‹hm}싌ÒÒR¬]»ÕÕÕÆ“®ü¾03y9¢ãfE€8‡ñ½_ÉuÚ•¥´Ô[ÝĦÞP 77Kn5S®‰ê_:Y™ëö…ù~i (àB&ªhš~—ô{¹wï^ 2äB¾êF$@$@$@$ð $ÐìtðLÇTÓ:·ž¡ÿq /3¬pn5YŠHà«  ¿eúâ+22ÒL~Ù¡Có]åoÜWAŸm œÀº­ &Z- îI€H€H€H€H€H€HàÿK ÉØi5ÎÕH§'øüny/–&Ö ÀïikPg›$@$@$@$@g#Ф]+ò!ölø˜O$@$@$@$@$@$@çN ¹Hõf'‰k®â¹7Ï’$@$@$@$@$@$@$@g#ÐdˆûÙ*2ŸH€H€H€H€H€H€H åœáA×°vë9ß±cvíÚ…víÚ1ܽå˜S À7„€Ú×f m¹Þ %%ÅØ×Öîöb8Ã@÷f£¨¨ fí`oI€H€H€H€H€H€H€š'` tu†'%%=”q®Rš$®ªª ~¿º¾77       /F@½è‘‘‘ˆŽŽnR@³z“µ˜A$@$@$@$@$@$@$Тš qW¼wLz‹¶La$@$@$ÐBø¿ª…@R À׊û¾V·‹Ê’@€@SáíZ€ô& @ëààòÖcÏ–I€H€H€H€H€H€H @€zH€H€H€H€H€H€H õÐ@o=öl™H€H€H€H€H€H€h Pð€H€H€H€H€H€H€Z ôÖcÏ–I€H€H€H€H€H€H @€zH€H€H€H€H€H€H õüªŒf ^ñ<±IEND®B`‚httpd-2.4.41/docs/manual/images/ssl_intro_fig2.gif0000644000000000000500000000521410147723030020317 0ustar rootsrcGIF89a¬Ù³ÌÌÌÌÌÿÿÿÿ™™Ìÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ!þGIF SmartSaver Ver1.1a,¬ÙþPÈI«½8ëÍ»ÿ`(Ždižhª®lë¾p,Ïtmßx®ï|ïÿÀ pH,ȤrÉl:ŸÐ¨tJ­Z¯Ø¬vËíz¿à°¸E(›Ïè´zÍn»ßð¸|N¯Ûïø¼~ϯ%‚ƒ„…†‡ˆ‰Š‹Œ‘Ž’•–š›œžŸ ¡¢£šS¦”—«¬„ª­°—¯±´“¤·¸¹¸¨Q¼b³µÁˆÀÂÅ®ÆÈ†™ºÌͺ¾OÐ`ÄÉÁÔյר°ËÎÞßžÒMâ^ÚÛ¬æç«éê•ÝàðÞäKó\ìí‘÷ø˜ûÖñÿÎê%¨Eß03ƒÎ2Ȉa¿D*H1Á#±DLxLU þÃ$Ò)²QÅ“£2Qi…䬗ÅH–”)ñÊ››XÑIEf™B?9 £Y³d+›8oò ²T Ñ  jt]ÕuI³húƒ+”©”…zÕjYwZ“zí±Ö‰ËŽpÉF…ªpìAJ`.ªÛ¡ÝTïM‹³íÃL|úíÍÈÀã»°Ú5#C´«-RÂÿç­$o;ÊzS‹K·ñâŸR¡^}LõdÎ 36÷4<Ò7€#1­Îã+ÙÄ€é¦Ì<7îÚcÞܼ²î†¾O ¯±Ýñs/¥W¾M;6lŽÌùŽß+þ¯j©»5»–½b÷÷‰|ß–œµ`èòþˆ5÷ÀD`]ò­çY}僃Bì‡ jÖIVž‚cWa_ÏÍf[‚ BWauóMÆ @¾"0yØmÿMâÊk~9]B‡š†‹¹8ck®õx\†×q8X@œ,ƒÆVg”bÆo# ÁEM­ØŒ µ¸™$µ×Yh!™S’¼ÓMo»”P•$X郖œ‰—f}4'|qö¦z1‚yd3f’)h)c~Ã4f"À$š¨n²¥Œ$Òàrèu¨œŸ\rЉ«òÊß>ƒp£ë.ŒÊ££û0Å€à sÍ8t™ÌtzÙiÝ–,´Æs 0|æ1†ôÓ5 |b<í¦ÀÏ9g€upÙnY²´L3^x3±ÈY]¥$Ú25”NÁê32@KF«Bbèþâ¨÷ßö–ÑÛp÷"w×ÿm:íŠÐjÛã}RH'´€J¸¡ÿ§Žx¯;ª/µz>­¾‘n륔»}y@™7ÛпJ¿˜Ï¤ÍÙt‰éôÓ¤›m·ï5Ê«³·ë$ Þ»ìüŒ,W¿›U¼ñ†#ßxŽ· $Ô'3ÿ¼%sÓòôŸT‚ù£ o¼l§î}ô_#>>ùe¶>†g¯™^ùçÎï|¶ó£_Nì÷‹þi*C©kÛû྘Ð" ƒg.´¡öÍ€ÑkàP˜¦ãÝÏ€¹rÎî´g+ nNƒþà )ÐgrÍñ“ ¢ÂFp3üsÀºÐaÖc`uè« ð‡QÒ Qh Ö0%7üÃC'>1H„”þý7E*.ñŠXŒb9ªHÆ/‚±|bìB¹1Ä5åŒhôà/ú@Ç:ÚñŽxÌ£÷ÈÇ>úQè¢ IÈBÊ/†L¤"ÉÈ !²‘Œ¤$'9ŒGRò’˜Ì¤ YâFMzò“ lœ%CIÊRš<£<¥*WÉJY¤²•°Œ¥,òÊYÚò–¡ä$.wÉËOê²—À &$)Ìbs“µ<¦2—é)b2ó™Ð<‹3£IÍjîcšÖ̦6Å—Ìmzó›îè&8ÇIÎɈ³œè$'6Ëi£Y}Œv|ú'š<~ú«H…\VCÚSU£a¥æXZÖ´:µ­]UP@iÚV¬æªÞÜ(Gù´Ô4|ôG!œÕlê;élo7?B,ÚWŸZÖ˜‚½¬f™™ÙÍz¶˜ý¬hyÚÑšv–¥=­jY™ÚÕº¶”­}­l=ÛÙÚ–’µ½­n™ÛÝúÖ½ý­pÛXÙáw‰Å=®ryÿÐå:W‘Á}®t÷”ÜéZ·*ѽ®v’Ýíz·8Õý®xyÐ?š÷¼èM¯z×ËÞöò ˆ¯|çKßúÚ÷¾øÍ¯~÷Ëßþú÷¿°€LàøÀN°‚<_N2øÁް„'Lá [øÂ®°ƒ3Ìá{øÃ ±ˆGÌß “øÄ(N±ŠWÌ⛸Å0ޱŒgL㿸Æ8αŽwÌc߸Ç@²‡ÌâùÈHN²’lä%;ùÉP޲|›,å*[ùÊ9¦2–·Ìå.‹XË^³˜Çü`0“ùÌhNs‰Ñ¥æ6»ùÍ÷53œçLç+˹ÎxÎs’ï¬ç>ûyÇ|þ³ mc6þÉjh°}†C/9ÐŽ¦1ê;é)[ºÁ‘F´¡3MäJ_Óðt|EÍi CºÔ6¦/©AýiT÷øÔ®V1©WÝêPÇÚÔ›¾5 Uß4èúÕ¹þ5ŽgÝka ÖÆ1±ymëd¾Î®ñªEíiZG{ÆÈ¾6‡iÝèZkÛÁþ¶¸µíq›{Ðå>·ºõœîu»{Îí~·¼ÕïyÛ{Ìõ¾·¾¹œï}û»Êýþ·ÀðüÈ?¸Âq í…;\Ì ¸ÄÁÝð‰[àᾸƕñ{üËÿ¸ÈŸÝÒ‘›üØ!?¹ÊeÜñ•»¼Ì)¹ÌOÌI÷Úüæ8ϹÎwÎs5Äÿ|æ@q˃Nt½èHßïÑ“Îtû.½éPõÏ£Nõ?½êI¿:Ö‹®õ­½ë^Ÿ9ØÃþò±“}åf?ûÉÓ®ö‘³½í;Ü7.÷¹_¼îvŸ8Þ÷]m4ä}ïú®6³áø{ žÕm/¼½ïm²+~ÞŒµÝ/ï¾w{î”wäóê©G}ó÷<ÔA?yÑ7ô˜7=çÞùÕû»õ®¼êc_uØÓò³¿ýès¯{¦Û¾÷ëþ=ðÏ-üá»øÆÿ6ò“íå3ßÙξ±£/ý_S¿ú·¾>ö]­ýí—ºûÞÏ4øÃïèñ“ŸÐ5ï¹ú×Ïþö»ÿýƒ•üçOÿúÛÿþ.øÏ¿þ÷Ïÿþûÿÿ€8€X€x€˜€ ¸€ Ø€ø€8X?;httpd-2.4.41/docs/manual/images/build_a_mod_4.png0000644000000000000500000011637411740644603020116 0ustar rootsrc‰PNG  IHDRÚ…ÌøùtEXtSoftwareAdobe ImageReadyqÉe<"iTXtXML:com.adobe.xmp „hÆ™pIDATxÚÜX}LSW?˜BâøÝ”b *­ˆtË,]5˜Î™áGf\Ø­ÉšþáâÈ‚H6b\”°Qd#%À¶Rg£ì)±ñu¤•E²!mé€î¼÷J-m-OÀ?¶“—›ó~çÜûîý½{Ï9ïV«þ;277·ä {{{³ô\õ4¦>==ýïÈ’»ÿzûŠTåŠÆ5CCŽˆ@>ßºŠø¼|/rÍ–”ÃÓË¡àÙ0_'dpp0(z•æz‘¶Gþ¤4¼J¯Ó·‘-‡cee½* Ñ Ú.¾…‡É^Ô{‡.»%Åb±¬1¹Cë*äžXèÏR¼p7Z̳öKyy¶ŸQ8ö—&£¸ãË@Ž_Zi?Õrü,f šG„éâvÜ0áõ…\4"µ2[™¿5%—uÑ hR“»³É.F÷4_ãsB!¶ŠVÔ{ÁØý• ¢A+­‹ÏõŠ…BB˜gïB]ì„ÀSúGßÔrvJx¬¿¢ÓéÖòþtDÚö{oƒƒ§¾-{oS¯}ž_œXTª=¿ØW5¡R¨/DAýµ<®´ð6"""66¶¯¯Ï )£ÝËÚë“ 6µÎi?ŠÍãWáXгµ@Â(G ɉ£1þŸiQ—9õr]Ï ŸÏw»C)Rîµ» ùÛ¢9Uïrpâê!Fq/w>68uwwÇÇÇ?J…t)sd›MYÀÐÊ(Ç­NV'Œ<Ï^à9³yóæžž–¤$%%‘$é¾l5ÿí&H¥I Mäîµn}Pv5ú{ ‰DZ­ÖFŠeB#2²wïÞÚÚZÔÇÇÇïß¿Ï䔨¨(T:::L&Snnî¡C‡<ãïïï–”€€óÆ &Dbà 53ø¸R©tÑJí–}Ô¶ò||bbbpŸã[mjjbÁd6›ÙûÃòŸgoÙ‹@ XtÌÇI}}ý“>îIgH¬È¯æ”ÁÿEl¤ |ó:E’¸¸™T2ßd^†¸ àVjBíÁ†Sï`9Ñq‘[0 ¼çví§¿z ò.-ˆ¥2¸­o¶ÕioeQÕ:VIz¦„;{ç…®\›ç–BÆj ßÔô&Ÿrþº¡iÕik¹tÅÅ ¬SëH%•2²ùT[ѯËN¯¨hÈ}EvÚ DΦ|E9”Ë%ÀÛ8pd¨$­Ð˜Ëå~À;©(ùMŠcqÕ• }I{N;o•(4ítG?Ñ™F¸ñ9n%±eC‚øW1­A&`››ÌÈgdDé L&Ô_S¢‡A»ÄݻIJ½FųåJh*(S1~úøùÏ7V²]Ï+ÂŒÙ1}ÿT²ì™é’ŸyâtÅüLØØhx‰A^(ãá»v…‡®i‚†šÜ™êwþk¼ÏÀ V!À€½Êpù2%ý[Cƒ••°O™ºóׂ‡ˆnýÚ‘4'Ir€ÙÛ‚·~üÍ÷ž´ãÇß)ÞB ±%ðøxØ ˆ ¬Kùóþ0˜Ê‚IØÀÒw0[ìÕ H÷ è8ÓÖ@R¦†àÀÝš$'Fë!$éY×ϲÁãL7àjHXªMXZLþ,Ë ô®ÃóÇ‘¹RÌVKþSœ”–_xå ƒ‰eþ™ãÀà“þU¾ M Þ³RQGK%-°§‘}û(J#¶¶Ä¤P‚ÿõãšhX¼›Ú%†–Ma~·Vïg`ؽà±k‚,öL v˜ëäŽèÿÝ*[òúÖæ!«Ê“}@©ßH¢/_?·ÄêÖ‡ÊÊ7nÜ€´0=~!úJû7nøߟö¬DŒçÏŸgû.KvÀóÉ~—‘‘ÁÓ8ö_ÄÍAî [YY±²²R¥ð6·®[÷ŸÍÙÙØ»A¤ÙÅ1ìîµä›+¦ªkàUÚ;w¾=%Ïí‡ý2táW çM€½$666äŒðæÍÈ"y@AAØBÇÞ8||Æzb-W§Ã Ê°°²ô~ÒÖÍ jëçµÌ{r4‰aâÈ`hÆcÞ“c·ýo·‚æ, }ôÚ:ZZZh6ÝEQ|*Šaˆ$–*†(†e ó–%>x0ÿ!ƒ£~üH‹ñ4ú ¦Áµk× ÿ4b´þÿÿèDkÆ‚cÀ¶Ê1Hnz¼ 8n´œÛß*Âà9S!Øseй·‡A÷ ROTIüA ¨Õ¡ÐtùÁ¶&ä£ÿ²Úqþ^‹§tÙæ^ þ—-Ö$ Sͼ²¥ ·mœ»è†ü£Û½ n€ Y00¦Üº @’eЭ¿µ¢4>ÄfÎõ?¶ÿ„™ –‚Õ¾Û@«»3ßí›/”Ø–÷ž4\°ÊSÇ­>qWã|ˆ2€Ô LSWô2#3 LŒ–Bië$A‡n´jÙ,Ÿ9¦u~朡¬è\d“hS³¥èt.,!tÁj ‘D>.à””úéXbq(”fƒÄ¢”Ow^_)¯_ÚRè<9y¹ïÜß{÷œ{ï9çžû:yŒ@…Õíšÿ~ߥ~¶&d«CU`T_H¥^Öí›9é ~tA¡ë­†Ãòy;Ú‘îyñ sE´öKi äôwþVËå¼_bàv k!?˜Ý(ØÃÿš_y3¦ <íÁ¯¯Dt´e‚ò¦Ç–3@ÏŒ|xïž°½½ ˆõ ùçèÇ;ûVàí ç\»ÐØ¢£P\eV#<È„ŸZtø{ƒK´vÊ܉EWAìWHTÉžîâ´cÎò¿˜2ê®e¬¬6Ëa)Qt¹qÝ [íB)Ñ»Ž yÁ°´ÏXí|ú"è:B8Ú_à§âr£î@J^ÙkŒim™ˆç:Ñ•kª¼Ã˜¤ú bò$ [:K•JA9 `çҢ;8 xÉ«I Ê®ŽŸÏpóH Öÿ3ñ—‹õ–7}ã—…)ÂYøë„T:âaý/ô¡Œýsê`i؃zIc’4~òí¬ÀO›ŽÞž™Ó¯%©™Û¿ eõöÛÌË{;É«³orQÐÞZòÉZTÊR´–‘W³0OSë¿â‹Ôæ>lKg6‹È*wMMñ­‹ûb„ö¯%####Y§ì–«4¾^^^³ÿ??¿ÐÐP'`ÂŒþþþæææ¶G÷b7m¡P(ÀW‹3 ~°¦¦&**Ê-ó„Àð§2™léÒ¥K–,Ánù?ïqœ¶ã}°mkÑ´ÃàB±ðäæÒ>ŒN &ätw¢à´nš†70ðÑ;Yi¢nô‡¸»"-xŠ{¬®þ*Â) QZ,EwÐ?Ý((é Э˜üì¡YåAÞI_›q!¹Ž·Ù#FÁ)ä c£ðÏ;qJxEè ‚(™Þxr§Vq§£0vò$ôó“ÌÀÓ¨Ô%§(¦ZpÀ:`·þ’”””òòr ˜x‹â.¡ÿ&_|5k3ÎŽ`(¹*Œß €Õ)yÒäP/é«ÂGDŠ e8ë ‰)q`ÃEd``ÀÚÂ3¢A8îÈï8îŸnx}ÛßC”ÌÀÓ"9<;F4U€@?^ƒk!K. V&™ñw>ˆ;ü=€­á`‰©2µSãH\Dx<žµ5œT*OnD;ñ, KdÈÃÓ"‹XE.baYS%©<±˜Gë2ü¬  U}î [Ø&” ÒsG™F¢WÍ!8räHNNŽù4UORÝ5MO_œ^K `¾ûôôô8Ì$× ¨€û÷ïwHåm[§Î·-lXa¹Êð“2uöÙ:K<==#""Èd2Œªóz¹‹ucb\´ùb6…··‘ÃmrÃ( …‚Ïçgffé»wï.,,ÓtÌÙïS°n³Ù좢"×¹c^´µµ­’öÝð´]ÚL;ŸJ"‘f¼Xæ¤3›úááá÷ïßïëë °Æ€Kõ}ë×E ”Š%ìu“.d€m?#ƒÁ°vOÅhS*•¥¥¥ÕÕՉĵö$>Ps1C€ƒo°¹¸Y?755Íx v5¬·0Ljµ 3™Ìy>çuî6‹J¥Âm–GÞNÜq®:>‡§änØ¿`k€ bîætqöìÙøøøùÿµââbâ-É׈"CçTZ$y.Psé#b÷ex(µ*­¶)-2÷‡Èmb%GßfPBŽøkWq^¦T›”—”ð¶÷ÖTCm@Ì„b‡n›öê«CÐd<sdzBFê*m†:(ëÇP(¶5u;`NêvbuxÝÊ/ ¶ Uð’„ê8`áç ÀÓ|„®)´ð!lE«­“q©ln1÷<-žY´cЕ1 ½bz³$[0ˆ¿÷ 0ÔÁÝ^ ‰Ÿ]EÌ*anÐj«´Òx`­TGŠŽˆ|¯ ¤XŽ¥¤º²=‰Õïöb­ oÈgbYð æÕ£¯Ù$û¡ïëÐïmÁÛªr“‚mç ·Ëþo#ƒ"Bìÿ`ïX š:²ƒÐ²YÔj)V@øDë¿•€¶Xü jXÿ°»Z?kTŠŠÝŠ¥Z+¶Õv ¸§üÅj­ ¶µEƒQØå§ Ñc«¶&$`@JÁõ›ïÞy/Ä—@ B{vÎ=ïÌܹ3oÞ¼;ÿ{ïün¹d tÒ\d‡¦³ù Õøùܼ]ÚÏïúÇ‘ËØ1ÊAÚ­=e¿;úý0Oò™¯RËIÂÎbes¶@ú°]Þàžåº¨(Q/”ëaH&…½‘$ì2Š ˜nTL.×¥‚/—p=c¹Å€Q"y±—Û„€,éf-é .à‰äVžž%’_«ÍM“( ÈôÞE*—˜­ÿôóå_FŒn‘Ö™ói~ôÇ‹hÔ¶ü¾ E(Pô9òX!&$.Á‘ËÙ"â¹t}ikêô¢õ>§Ó±\f¨jI*B_ç×Ýì=(¯Hýþz솳©ÓżðõèÃÑÑÙ¡ërƒSoÌøülÙŠ"ÑçÁ+tª©ýÅaƙ֋ìýØbÛÿ 1º,íãaëÓ6M‚~Þrà“oÞê‹¢ÏÍQE\I7|Ô3ÝöáÀ"÷lúP®bë ]ŸªŒX·;™Ì"»÷XŒE† 5#‹ ’ÉdJ…J *%¦ÏÖ"ÕgœH‡mJE(#h+3ÒÉ4à‡g!AH¥(EYéÀI!r(a20R£B8)Ì ð“YÁŸú.Íé 7*$ï;دŠ5NГª•Éô€;q¯VpX`5q÷$«•‡~Þá7€Dò îÞ)W† ð𛼕É-‘‘IH~§·`0«³º{÷îÃS ±t1B3ÌQ×g»ì†^¤ÕÚ¸ý<)B·¨îo1)íŒPÖZB·$É™o¡]ù›ðômžõÞ|å_r¹¾¢2±03Aéo¼¶÷¼LîE¶ÇêÏ17/Gˆ=«¦—-q"pU½Êk@ÞDˆ<ÖâVV¥M}5–Ÿ_‰Þ#)¦í+ûWBN¨rš:RëEFŽ2ç@,òß&K.}GzØÒa‘ëÿt—aüCTïè|4*Ë­Ùð\ŒyåÛMÎØÈßÐŒÔòbÀ€¯QùI·,¸çk‹”.^øZd”Å3³H›”Ö¢ÿÂûÏ­º¹7~ÏÆ÷CŸ_mw«yB”øôÞE¥s¢W|öâªÃí‹Æn>y•G³N/1è°ÈmÇì],Uév÷Æ™Ä"W®\ßtÛ"EU)ã'˜qÑ‹Y䎄>}!B3I_ñt%õ…f} ø~éQqd,ðÝL*‹Ÿ]·,ó•òòr‡ ¿2ƒû¿Ò+¾p^ßD‰íÖ)ŸZ[ëàÆêLû§ŸÊÝ=ŽH¹>‹4 -¹{æ6n0%3¨ôúúzxR+üƒ¶çÎL¯¿ï¤PÈ.}×â2ÒÏÎή·ÛÏ66NNNÇ›¼)Ðyž¦¹QZÊöTD¼êôww–†{yyA»7‹|Ù7àñ¢÷ÈþÒÀ™S,ÂU—JWD.è±îTºT*…^}Ì<­¤ÚÚk~ëáááêê üav­“Þo“*O2RÕ Æ ¥áFT^WØ´Š,RTÕ½&ä> 3p:´N¡PHµH_"¾ÒèßµæfÁ·…£ƒ†ö¾+ƒ®ÛÏϦ9|#îáÇׯ_ˆˆHNN†æèèèhH{¥ªªÊÃÃ2ü¡¡¡ðv-g?¾¤¤ÄBÖ=ÈZl77ÁR ý«ÍHÍ!ݲFÁ3¾c½5l¥T]žÈ€ºeP~`”Ù³g‘Gšêêj&“i©‡J#'4XÃÊÖ–N—óøÀ FØ>ýzs™¢®¿¤‡äI7‹°Eðn¹š[‡XáxýìƒÃØÑ¥Ù›YåDpó“¶Ž©.Ä e§IªG’º€âie«»˜Þ Ÿ ƒ•‘vÓßô><00°Þ¥^PýoyË`5»»»/eÏ3Ô{_¯k<ä‹Týþã—xÜ)FìªkÛ.t0ùòó’Ì$ÖÚS„BÊä$ÏGŸíÄ7vòxkY,I&§(xËÍÀ‚/°²¤qœcNI7 ÄŠqæ˜SH«y…ÐÎÏÎK?r#•²2%A,$’ Šrzüø1É"/¿ü² RvJ™¤V¥jËt¬RAŒý Ì*¦T8¡è`Ì–éS6ã(î:´`Lµ0í Ï-æšX†”#°"7Ó ©d˜íÄ]×^÷'½0YÉÏÏçp8Ft¡ÖˆŸØaXªŽª©}#‚Ͱrnll¤ °…|÷…ä ‹µª$ßãêæ“ížèFœ¡®Šèɾ43";­þ*ñ|,+(‘àˆó±@¶š ƒaØÈJB`–H¾Šf±¢$êí0¬Ð_9?íEB,6Б3ô"t…V¬XaDäj_Üò ²œÁhÓÖ¾!ÑsRÞÝ‚…´··‡BÒ70¯a‘YÛ{÷Ú¼'Û3±ö¡;þ€ª7¶»¥Ô€(=@^Ä•+…;¹Z$@ñ;VOý¼\ɧFœsG’—u’PðGçÛQ´ „.]ö’%]F¿çi( Ü{Å:™èä)Ò'ÖÏÄe›ÌdŸÀ ”äÔ!¥<ü¸9$Æ4 '!ô‹ ß- [õfÙ˜‚°Cœ•*„˜Ü1L«ZïäÁN`âÿz¨¦èB-¢fÂQ@ÁÎS&ˆÈŽajø€ÌD¡Âž„œdZgˆEÀ-[¶ÌÐtD׉•â,¹¢Vˆs–_P*/ˆsrÄD”F¨AÔòå9dðBœ™0@¯RAh¹†ÈrÈT8›319z/C„X<‰ª._ËLÇ9²²p{¤…ì8AbLšs=×e? }øåzK4^ömzÃ|çrB!amÜ}^õ_Œ;äz%.°—E‚!Mï¼ÀÅÅ&+ôÕ&à×Ê‹'2š,U«’ç`‚ÕÁÄÎSB¨ýKbK²Èèmg‚¤Ê u”ñõõ=vì˜EJ(“ÉöìÙ“Rµ¶¶VVVÞ¿Ÿú›?iõ1¸2h¯>Uðü_z¿áàààïʮ&&&ÆÆÆRY¤\hI7ª ÑÓY‡/­««2]‰Šøøx#3ñôôôY³fõ²xÖÖÖnnn|>ÇŽ¦¦•ŽŠ™Öµk×&ßL¶õÒ1ŸQvóò † &Õ†v ˆä¶^ÏÅ›¡ÓÖ^? tmRùŸgO·(”ª÷ûz ß]7¤©žê=¹IC€ŸŸuz oooøµ&Ϻj”¹¹¹& èf «TÂþòåËó‡ÞPÞû唜íîîEæèKW=\KQºqC ”_÷Ââ™oÊ¡ºâk{™Y( ð†v²/^¼øÊ+¯t; ˆD¢#GŽoÛ¶mçÎЙL&ƒÁ0בMMt“Ü£G ØYYYЩã¡o ïôJI"%%%**Šä# T³ç³šÌÞ@{¶ 3Rãdhôä¥y¤b–ô|ƒ¬¡!$$¤OÌUôòR6›Ý­••JÕÖÖV]]]__ô¥¥¥ýlHâèÑ£=»Ý¾QïúÖhB‚´yÎ2÷qÐq°œë–†õ‚T$$¬T‹Éä V¿»9_ ÈOk44›ó³HûDõÀ>CÔÆÍ$¶ö¿jË“áå‰M…mË8‡Í‘ M»&,‚5ês{;#Œ0c¤gŠŸ:Ƕzã³$`n 6<4ÇVû$ UߢÕê¼\I (×çÍyV‹ -aäFž6y*¶m¤&s~ ¬º‚×9ùhÌ?r÷Ž}“u½[d_¸k¥:•¼ƒ—ž_õÃ’¥tu±þ'{Ocöõ-¤,±HúÖÏÚE,¡ÉGØ}KV¬ÄŸe—•ãW”E/+ŠvßMÉglEaWc55!"±5Ó$I¡MId¾Þófšj¦ÆœßÓí~œ{ÎóœçÜsŸ{Ÿ{?îRô>$ ÞprËΜ6´›Ô³ó–!w$”ݼñ8ùÒ—ûÃ{@«j½_ýMýYyÞû®/û雪Õ¿tcÿ7£w(ð;À¦ÀãñþÚúåÒåj¨WU\®èË/uuu;ñ y¾¡  ËËË5?©1ФÔMQTðšnóÝ‘´…ŠÝG«‘®©©©º“ƒø<ÙíñSÂèæææ8‡Øõ+•ÎæóÂfÏ&ŠÍÆEìC³qH&ëóႈ=q¢ BT¯#6[L–fNDt"®AÂø ‡Áç‰ógG!>;Œ#f #ÛÖ¨=bR²”î`#P-ê7‘ªhGˆ^´èeÂÁ«ywÊ^=¯WVrþ/þç­ah'µÊÊJmí^¿éuÑÇL Ja'Ñ!>-”q"dG±E|v¨‘©A'1ëóë0©ø«I42¬Ç¬«Ë g‹k­Öp#ÑÜVkµ¦ÙFA¨ë“Â¥Îj2 hbÖ$Œ‰+â*ÓÈ8Ô »HaÑÌ%äƒQž‡+¦Ìã·p ˆ…ïV[ˆüÆ s6°ÝiìÅ?Ïõ·:q‚(šB\$A©çKу ò9‡“<m±õù* Šî/ó—´:Áe2k.’obðX¡‹„Z[¾#óàl*"´¹î¢Æ>s#} ÅŒˆ†mkÔ1©W§læÛŠq ¸‹'ö1ÿc¯†ij'åFC{*Ê]I>~ü¸…Ô=Ò hÇË3:h»(ÌEè2MœN†a Ì|c˜+†¹DåÂI>±)$ç¸Áàù¹+, Lÿ-1 œâvL˜»"sš‰ëæhƒÐ!¬è¢U4–Ÿ›7$p¯0p&µuy gœ#é hÿ‡èÀšÀ÷5œ£(ÎóBîy ƬÍñœ@¤‹™ & d5‡ÝD(V˜Ûìá ñÉ[Üm"õôô”á{ƒ¢‚Îù‡ýŽ`õôvÙŸô411Qà±ÞŠ´#`䪪ªBÖœ]4·9ÎÁB oSô£[øž„UN&=²*{\ó# íA«¸öáÉnS½Rat|îpÒk ŠF[ï]ðâô7qAh|ÙãT¨xü–ßÂ#ÄáÞ{ì1µK©Ñÿët cÒã8B?¥×x£ðƒëüÎÝBÙd2oQëTúnÉ~€† ÃûOö³õlv š¶Ì'LÞCùŒìºå‡WÙãðF­rŠæ„£åf^Dä‚—ÔÝ#ªùϬۃ툾Ez*ú™äŸ:ÂŽnkm]Ú©âL#ÊD¼Æ@å¥J oo‰¦ ¦´±6WáwÝ”÷hz¶~o•µ#šwQÀ5{ D(þ_ߤ¾)IÝÌ­àLu⬠w]e—‚Ѧþô&3 ÷<çÍР}N^&’ˆ o=*á¼-^µK°ÊÉ•±Ôˆ@ÄtŽÞ ¥kÃÁÝ›÷Õ%DB˜%œD@[?9’ç}4z|ÉO_Õ%ÍÑ#T·â'<¢MZ…„"‰#|©—ÂÝE!ñ™i›/îoÓ™­«%Óléâc¶«å5to´‹º´+c»ÆX%1äÞèx‡tžÆŽËaì°A¼Ë —‘±ÐH|n—Gxdr òòkCqcÄÉ ^]>¦I#YHði'¸‚‚ÏØíì^ —5ÆzAQæÕ¤«™òþO•»Â3¿wí9úlõìEßj–*ÊÌc¤§yy;häy[\KE¦""ÜgûÇÉ7íÅ»Ä<Ë3åZ¸‹w©¼¸ 9lDs1ŠËäoêª|³¿øb‡bL“H®Íþ?Üûèôz ˜¦`ɱ]p޹§#ü‘ ›ÔSQÙƒ©ô¸Û‘eÜTW„E¿š8nšÿ[U°¾/z¯U¦X;ÒüT=ýf˜Rí ÀïýrÀÎfœ:¾ÈË}ðvæ,E Àõ³ý|¾bÝûä4d®ìŸQ»ÐoGê߯¯[Ðb$ñ]êÝW?ÆÄ/0óµÉ‚KCA‹OC_A]ÿ+–Ææ‹Wx G?M*eÚKqkÂó·9%ãÄ”IsÕMÑ…BÁОK”·õ-ȶG¦‹³òó… §5¹²ñ{8Öµ]㻪××~A Ëkû×Ñy=s–ÑÄÉæJ]ž£dѳT©aÌt4}rǰÒ-W”?‚¿‡öìYaaaEE¸'2&A‰ðú¦Mœäصk«-ÙÝ¿Ó+ zió,UáVuéÒEGGgÀ€¦¦¦úúúJ]v‰§ß¾}[[[+¤‰—í»w/_¾|þü¹îÉc“¿×"åG×®r55y´‰ðúô飫«« -î™@¼ÚÚÚ*½žÏ×$É?¦†îbÁ£'Cíz)Ö]ÄŸ5óù|Ù‹S ôÍ›7 è`w^2?o¢¯ßOòËò’{woêU9èéö-700E×ÒÒR…ÕÐxä@ËUm~¸ `n › —––j'ž¡M°ÕÒï V]Q‘’ü¯³[Ïþý H€¸<  $ÈÏ…÷÷9Qî¢r®:<2“ºMߤ٭Á.7âõ#eeeùùùw˜e%µ²©|ª7í›6¾¥¨©®IŠg …*±¿[÷.Vv=¬>7377ïÄåÆXþ¯_¿Æ¥´òAÿ•]D}ŒÌûݹùö‰a­Ï{÷î ZaÏž=ñ>y¨ö¢I×î{ÏøŒÚ‹&$$¶a—D<-uÈÂèBS/S½Ð>ú°hWW¯ÄÕ,d½…†ì‡dba´«©W¢1UlÏ¢Û%X¬B.2õ²')¬.L$È@iݘ\ !Ç‘G>PZÇ ¹FÞÊçbj—b`Å\:²'¼C‚Én9ÚÕØ,1ƒK-ŠŽöñò2Ó“ÆÆÆÔè•+WÚØØxzz*Ь¬¬ì~ÜUÇi[g)ŒÅÏœ Å-(™ P̾’ CCCcccoÞ¼Ù6:`áž>}ÊÓ6Aj ¾¿2O­·iÔ‹¢6mëŠíˆŒ!Ûœ9‡OŸ^BÉHKCS¦ü·H:ª¿ †ŠÔiGüÕS]Ù&;¢˜Wp·°ÊþHÂÔ©S­­­ÛpÛðk^W¤¶Ðì"}0" Rà¬_¿¾µvYZÑï¿/lXjg‡Tõ£ôöøt7nÜ8{ö¬²ðk•DØgØúˆÜaD¹?ÐŽ?Ëœ|# 9ûg3ÐGô,¬h`œÃÌÜ÷5F€s•óTäõ”m<(¿Ç×Xi’¥Ìp*e¢.55Œô¢wîÜiË}4½itÄÙg~$›Ïôœ-F>ÃŒ4¶0‰"ˆ 3¢ñl"âÇ€Ò‚HH¢4?È× +À<I##h¾Î!ˆ“µ|Òp-N PÈÒ0L€&Ÿ H`B&Ѳ"¦_×ù¸ é\ÈLŸæ~c "6mšŒÃé¤ à¥Bš¿$–Fžw˜+8ìî1rC˜æ¹PB"[ù§Qj‰ÁÝýpš¿•¤–¿•?Ž»[¹c¢A»ž ."é ÈBwøKkHSîþV˜,¥1$‚@&H$ððáÃ%Ô¦å»6li s µI!äðA8bû0'aˬ½÷ÿö" Á'Œ# àÓXÖ–å5*%NøC/ îekUŸxÿ#hz92Mh‚=[…ž#þrèµ³ DÂÅ>ï ò D‰ˆ#°\?Ú6{»#”ò„D-›í"Àa¦ ¹ñùëY"Èä™™]Ä0¦±ˆ"‚rAXT·¸Ïõ„hB¼h€,ÍÞî‹)ÐáJ›Ÿ89¢<-Èæ /HdIKÀ­Àmh@sü¨‚ˆæ~c bD ò¬ªª’ß‘œ¼Ï¶°øü ¿±ÿlÈ·ûZ98ä ‰ù£åó ù†ƒ9|qˆU‡R‹_pÄ¢–"!_D0µ.˜AfpŽ¥ÈúkÌè^ß#ÕÎÂE\DÒáˆá|o’¬„&¦´~µ„³ Ç(ዾ¶ãËüóa,ãââ¢ð¨P£gAø#ʹ,ç‰r~÷=ìñÌy}á×–d~fÎïïȯuÜLD ‡ÿs2¬ÇQRÛ„¯ËŒH:`_ÅS§NËó²êË‘J,ÓìxØvœ³vL‹ß§,Z´HKK+**J¶$‹ŠŠþúë/[[[5”$˜ð…ǧÔã‚jkk «o'X÷®íÒ×LMd+â½­~À̱Z öÏ £ŽÜŸnm÷îÝccc[´#¥|5µ#Á§ä²#¸§¥Ñh2¡Pøï¿ÿ>zôhþüùáááT¦§§ƒXÖ­[çì윗—§lvàûTWW¿zõ Bo£ðÊÚŠŠŠ%ñƒ¬FjtÓ–ëey飢—5÷úÍÐÕÕíÕ«W×®];}ù2>‘TT__Ÿz4aGïó nùÞ½{¥­‰À½h:Wßt Ú‘ÃÒx”ÿ{Y&Œü%Çæ6}iýîÝ»J@‰¥m³hàõë×\.7::z÷îÝò°†ÇfÞ¼y›6m>|8h¹ŽŽŽ*,Ї'í“O>O¤ŒH«&ðŒIŸ?^RRÒ¯8eø§]t?m€Æ¯­þçÊe½Yš½ñ×ð[àuëÖMþEÌc_:~¿xÐé#Fܼy³éQÍ’^ô×+|—Éãt{訉)(yþïÓœÙ4c333mmmù+fee1Œvj9H¾¦¦„*þâÅ‹•+WÆÄÄ4B;zôhAAÁš5k@¹AÅAÑ¡“Ä ‚[õAJôUÊ>ý´ÒÆ^ Ȥ}ÿ ãê•ËîßmÄ_?4’ꇢÀvîÄåË——-[Öô~·¶-yQy½Âdú˜Qr½Áåñc™Ó+LúõPÁ^û®m³ËŠzr@à ðÀKI€B¿~ý$Ý#^š¬²Ý#‘f»(Õ4( Ãïß¿™ÛÚÚ‚¨===? Û¡v˜èâRSS™Lfdd¤ì·'-ö¢§ru]í§4B»Ç)¨|ž?ÍìŠ÷¢í„ö,¢—fPx$€ÉÐÒÒ:wîÜæÍ›ûöí 7«§¥+U BÒzªÔê©S§<<<>˜¦«ÂÃ0ÆÞ¿{ŽIÆßàgggÿùçŸÎ+CÆÚŒ³"Áßß¿¼¼üíÛ·Ä c“SÊÿ›àäÉ“cÆŒ‘œ¨­ ’SF¹‘ÙYCx§gvŽZ‘e£€]”â|ÌGÈÛ»=/tž¤G Ö/XúŠ;_ÊÂTÚ¶38’ºÍ&x4qVÎÔÑaFº±|ôìÔ“â­½ÍQB6¬Ä’Ša´Žb“G¼<„ˆéª IiÊž-8i:#ž÷ärã~AÅ‹Ñ̸3ÉL"‡Ôêõå£g8»‚K­ßå§4¬"­:°F9"ÇL_©+q³"?{JI® œC$s6g!ôôˆ:G²Ö,h¨4:‹ÄiÕ)ÀrYúà;FËè-¨Õ÷-%Ø­Yº™Ê5Ž(4‰VµMÕ þÖ‡±Å1† Q+F!4#1âãQ53m€ÐÖ¼ü>W}æ”l7TE•ÕÖefÒ;Q±Faèî#tñv1BÅû¹E8~™?_” PãÜŸ»W4Gã@)„·W6žØÂùˆw”lQz1ÂQ»mL+â&Bƒ¡Ùñql ÷FŒš­¿r"‘¼þ!yA“ˆº¤dq§(|D’jÌ×´mì矤›88Å>ïèw×ÞIís@†:{ UÝ›‘äݹòé”6«Ä9hýæÐ]þÇóÿ`ïXàbÊÞg¼òXQ éý”ÄzljP[Ù-ì†éañW‘Xj­EòJ"ËZÖ#–ÛK‹õªÕ43a=–6ò˜{ÿß¹wæ6½¦çd2}¿ÛéÜs¾ï;çžùÎw¾sνßi^i†¦:W‡‡eÉ@ÅëÙªY.›¡ D"ÉZ8Oð½ÁjqLÊË…÷ÏžÕúÌEÛÖ¶ùûõ‚ nÞ9•s?ééwÔáyM»Úï=§u+ e :(‘Ëó-X¤nõæÅ‹×ݻԥ‹Êª’f=ÒÀðîÝ»ƒæÎ^¬VOý¢øaÉ dÜ­Ÿò¾W¢Ïy(INÖýXÏ‹9¿aÝÀ \Õ<Ü)ÕšzZ"Y‚ßǰƒID¨ÕÕ±ƒîÃ’koÞ¼QÞ°„**ÒíÓ;›«úÄMPŒ`ÊÄÙq¢JÓü‚‚ bÕÖMÁõJ$Rjó6ë‚·oßf?8I"‰^ÖÆC Ÿ+OÐéÁ!©æ‚ ’Ï8–…v‡KHxK- dyÆ!BÈI€“…HÂ-kiª|º`§'Ä!†,*"c(”"‹ð-{§.@æzJÑp®ÅRŒ|Ò–  ×ÓSZõJ%õ‘±ªæ¹zíV!=B>+Q ¿»ipA‡ãÕ›§Ð•\‰¡y$‘5~‹nSN“Ä\Vh¥˜eÓEs R'ÍJ$*g.»¶ ¯¡âå%‚ZÕ–ªâÕ‚Õ¢¸¸¸*? Ò¼˜¹¤º ʇ0K@fg#ßåç„Çð$âÄo(-6ЀÀœdY`K v~·døùtoâ;O[·¬ìì€4†alTÿþ€Ìv€*[3"žX È¿œŠ:•$gêOf‡cξ˹[ÈuiDå7tA¸bTÝÊÕ‡aUÍsQ- êzºV̪ž¼]ôD¢Wþ­§Gw^æÜoØß†öT^¹aÊYÅåÜœ%ëRó¸?~†ej¤»°ãpÈyq§(Lùô<î‚‚0ŸJH³ L=% [˜K1e´0äQTaKA…©4ó<@à-¥ðqnžž˜ SJH`’¼8§¨\ŽlÁä•ßò¬)oêXÍ…Ç|¬,JC‚½Úk1‡í°µBIX É£ åÓ#cqÈvæŠ $Ž÷`ËåRümQ?òæM¸¼#-l#ËJg“7÷ðÂzA<8äö‘ÓÑÖ°Älº ™=R¾> «jžKµE#³*ñ«oF¨Û4äeQI{mÔY»a §?úÞÑo¢ëêJF²wÛ,›êvÔúÄõÐü©óZ¬ØH¬¤Ã‘Üüm(Ä4p É§#Þ ÄYÉp˜ÇC9éIh¨ Âá æÜ·iÚml¯™ü}"®—©•M8—îÆ‘â» ümyù3‘8i]„˶Œ¸O®hÍãîv œê’·¿Ñh>•z4_»EœÝ§æ§øS´À“¼–ÌÁHʘ3æçç[¼z¥žSæÔ%‹úïÙWsŸ›m€ô¿|ùòG›z¶Mïj×Aã—¨ÔŸvVµ¹°OÄÿ8ÄgÁKв)”™Kʇ&{µ[XkÏ<#ŸNrVŒ„Ä^¤Ì2&щMT)툉B0 €P›"ÜÀ!i‹ƒ Xú“æS&¢hêɘÐu&OÌë Spë4•ë¥Ýb$òw>¹›¤x†Uõ€²”-QÓKÅíèE>lChWšíáŠÐ)!iÖ¤ôwrH»Ï¾{5zGÞÈ×lFjUh›–ï_üã„öíÛ×_Í3öÈ×ð¦9æMBŽ.õ –§¡t{¤èRKH]¾TÕí‘’’‚ +½HìÖqQq¯•IÑ—¨ŒÛs®­J+fn&#׃ŷAèDåj…¨šS‹[HÁÔFËàêöòH£ÎkjÚÏ3XvƒXv3pœDLÈÆ‰ƒ°È ŒDÂõ1FŽÈÀ[¿vƒp–&Å'åÿö/bÌ*#g!ÒÒ¸¤s} ÊáGüB3^NÄ¥È8@ Dxzžäù?oF| zDñ*8)Ë’hʾµٰχ Flï?|èç 7—A“®ŽhÌfëûyÅeÙŽ˜4þ3®·9…'å#ÚÂÏ+æ/w vµü-¾HgCË•)ÅÀpíPj_¹ŽÑÖæû¢…)¨\­$²õu ÙØ«àõéŠÑlo´ø¶VTŠñižÕ^£kYè{Z©á‹[ööu½‹E‡üHþ9>yŽÀ'мHîbŸ2Ÿ†ý([[2Ø/?ãCºóë9Š>€ÿmÉsÁì QxwvãD`Å:ãˆÑt³Ë-šo!ÃgûúAì)e¶sðzAp^ÆpH8‚¢ð9àõ ®é5 =RÕpí»?‰Š¸šäÚ\?š» ‡8ÝuíþM4ÚÚý³pâT3Ht¹øöñ-N¹B˜HM)ÃYb25É„&)½u¥#˜3.ÎÕ×®‘ÝRøÒ %ËÕŠ&‡*ÑöˆÞtÔý¢N#@è0„nì½$™‘ŒÓó£’n4Ϋ!ŒfO£â8ü‘"î4R°ÐJIx{“åxbÞjš-ÃAŽçÀ^'BêUsR•æ5w~Í=›ž;×¶Œ=2È‘{gy ’ÏpöB;¿K\`'íqHJC=ƒ¨_Óɳéуìȳ[yß±mA›œÅ)€08! ÂlèRz HdøüeN<Æ|m7Ú? ~‚Ã!úlz ž$€/‰>»°4_g}óæM~~~;¢»z._EGš¿Ñ½A–¯˜uVw—…uf3ÄÏ?c{p˵ë$‹qxÛDdþ¥ii®ƒEÆùCöÿžñ%¢7óÏÂmŸæ¬S7Œœ·Ÿ&mò3»áIߟ,°´4øÝ»”Í“G•XÏøOØEéë¬÷î©é:ëºïTyµc-6CÎkêLë2‘ԛɟÂlýš{Îmép ¡=’sSZâ¿ï#Â)žÐké€Ç}É"¾Í½–óV~ê!ÛÙ%äIšßz>Å“oCñt›à'9ç'ã€PÍ“‡ribR?x÷òe+U==GAj´yÓM•k9®·æe„òo6üž_ìºÃ n|ÂôRØ]yöÈ»wïîܹÓrÿ>c¼Æ©v‘œÔ'$TSSSE÷}eöÙ°WÈ’83WD;&»ÀíØÞšÆ½5¥YT|‡Ç!b~Z´Û…ÎeÐB&oÈØÝ§i„ƒ×Ÿ‹ND¦4t% %¬hj«çwzEÅ•;â±XmÛ¶hv“”ŠZ]9I´÷ü²g¶6þ¼¦¡{Ô¬ ¸~H@’û,‚½Å[¯Pi¡éäê!hõ–iûfïZµtëðGòþúÒ=÷šåýeFÈ¡¡«CVÚ·ÅýM[šètšÁ7áç«ö Ñ²eK# ·W¯‹44Ú«Û€y)ë$Û¨ŸòFË-ZtìØQgˆcâ­[šûöEÿ)Æ8v‚f÷:ZÙ·ù÷®ý¥*ÓdcrÜK6mÚ¨¬#©ið ßà›Á(Ú*:hGüF˜º/;ölš!eûhb´• ë™…÷OFC<Òr$¿‰ôÚˆ Ì´ehIlÜrpÚè¾7©º¹ Cªîp ~cø¥u´z\Nå÷oÛ£›¹šhׯ_^¸˜hĚܡCåù1‚æmß¾½(ë§úú ÎGÔ“I%%:¿ìúåWµ*%óØÑ‚ž½Z: n3t¸*tZ°A>úè£nݺéè訲="]A/º¨Tµ–œ÷íåPÐîÍÇj}„2ëˆÿýÚ³°°ðåË—Š½¼e=íöñc+ËOj[ÊÓg…YYgÛ=viÁzÿ‚íÖºuëÎ;÷èÑCCC¹ÞAA€yõê}誴çÏŸ?|ø°èúµþ/žÛö©feçù¿O<ýbl‡®]µµµµ´´`¥~ÇïÜ1;“ÖwsîÊɼ(ÔÐ|Êî«÷ç­û{–0¤ßûžI¼lci׺z™$™g¯õqéÔ³gÏùÞ·ƒ*ç/^¼xôèÑýû÷¼þÓÚT„^Ù¥‡’óžn÷̱s}°·!†}PRÐC­ß6i€Núšžã€aB¦$Ùwízýâ…'lG KÐ:::t“ÂÄ¡¶MŠ¿q½wK£èn‹.¦jÕª¯SÖ·œ°U~½† ¸P(ÌÍþþòõËj>~ýìsv—®Zu+>ëüÜ›bi -=¾ŸéZZZêéé½G7Ü`¶”””<}ú´°°dýq‡Çá£Þ¼~÷üÅÜk7:¦ímP"i×®=ò×¼ýôÓO111×®]Sùöôôܹsg¹Q6^½zõäÉ“³gÏFEE­]»V‹2ëè&¥•rFÐP-R"[÷Ÿ¨† ú¿[´6‡±ˆ¥þÐ`>r Ò\í28ýí´7njç§"åDF{ý—ÝL>R‘å"f¼k×® Iï·JðЫ*ÿüó&—®¥mß²ïûï¿§e4ØÛôŒ½Võž¶¶¶j%ß¹¹¹`⹺º–S ´õ×§OŸƒêêê‚MZŸ&è&Ð_ºü{“ÕA[ õȫà X3ŽAJ;=“ÓºŒÌ5YïÔéa椎„‰Uïj¶6‹žÿ—z’oé¨aí¬©­­ß¼ ^Õ„†D¡>ššš`iŸ>~îôéÓááá ìê`oÓRÎårÓÓÓ 5ûäÁÜÜ|óæÍÆ +·sqÐ/éÕ«½&XÏß¶¸¸X§]§š8+ãº{g¹ÿBT)oqÎÚ,æ6À`utÁ²šW†æ_L¦ š¤¶É=ÿ[0ǘFnÅô+Ð# ÇÕ.ƒÓ‹| w`¶yêwáp—á•®ªä ‚lóOÛ±'öh^¯ €dCû€B†:|øðÀW¬X)u«$Œ`ÀOžwxh0pÅV¸gbVF>ÑwâbM¤Ksã~ôYYl£Hþ%H¼8¸¥øXøø²ãŒ€ W<˜ú¨ëð´ rŠ •ë|V`âeÎN  ™‚h„!"„=v_üçX˜Z"§%µÒ¤¥~¹®U“‘œY×Ô,üù4§½{ ƒð×¥/ÉÆ};Ú÷2Ô©Ó28ÔïÄÅ»'/Šý§r϶é:Ï£WÛ6ØÆ)§U-Çsttüûï¿ë&â0VT5*ˆ¶aêwlû=üŽÝ‡¸È|¦ÈÔ¯ë†4ˆ,JAß;W‰¶ý‹/üŽSÀGBµ´•h°@ðä-_˜°?~üŒ‘†¢šzKèCæoç-±CóÜL(@([šØ#¤h,áÑ)ÅLò‰&%þ€ÁäN_„È|–ñÞÁ+&ÓçàÈ8˦ë!Rï–Pbƒ(rRB“{Lº.ÍE†¹¤Ä"5-ÐÉ‘ö€i%+Ñ$h,„¶—Eh BÃ¥‘ùµþò»Öº™6ÂiÕ!h“]üy1¥e‹¶Ïî½ÒëÃÒëßIKˬÎËà ã¿Ùš6åÓ~VÆê3„Þ,(Fïž °ìÊ´•™™™½½= ­±±±u`(=£ŠIÍÖ=×Î VôüyAÏHØšLð¾6X[P°ØÀ}m—>(Æ=V|ÔW+vò5I…0wFpw=zÔ—Ûc¹Ÿ“4Êsej*rrB¢¨XÓ£.IbP4&¾N²eNq¬»‰oŒú=‰Â1ñ5‘!PE¥C”º9­E²r:Š#‹×¬uw÷=zT•Ó¡_~ùedddÃÿr5ôÀL^g; ÛÏ!ÏII Mð6v8‡P¢ˆO¹2Áé¹;XÆó¢|ÁäF…Ù­º¼Ö/»=eŒÈ´@Ùq_DB¨Ãè}ˆñB’Âli@º¦bò4>‡8°§K|d¶JÇ™DѼSÒ‚ÜÜ0‰?¢Hc†‚¾–TAup+]GÄô( дa2sæL;;»Qƒ¾©Ï28Í‘Œ¼e“>U7?º:œ¾ü­ñùYýîÝ»{öìyïÞ=}}ý:Ïá+MÏh‰³ròbBbKc“\4RFL¾LPÞ·(:‚H>éã4 próà#X_Îu7X|äîÃ_J!õÛ5×Lj@¦Iq›|||Y50r)·TŠ7’!ì<7’©À°HDŒ¢Ã–ÉÊÉ ‡[ºò>GŽÔjé';;{ܸqïKþ–.û|¼EÂ÷ÖZ~^º”Éêtš•…÷VÒ[ÊYš ät J'©M0ï­ˆ¸à±:=z5ÆÄTRþ ɼ…X/v¬G葲‚8òÁ¿Õvp'õ˜Ã]k…PŸ%°ÀAèéé¸?~<==](öèÑôHÝ^m„Yý±Ì‡J;eU¥¯a}*žkÉçóë³X)¸‘ǰpÈØÀ#išöd ÑS.bèÚáCh—½Ä°5FÆšaÔYYøkNrCX6$õ$) ¨ü!5$)ÂxÚ!L’ìäFBXŽ›<Ðb—S—ç D±FFCÑ$—rY”uBÚ@P|Bˆª¡\;ÌŸ?ßÛÛ[)#Àû<ŒâŽÊœƒÁj/ÇôšÅÆÆ&!!¡n³Pú@ù¯~¸Àå‚ÔZ½”[„>&ÉþýûkÕ’ÏŸ?×ÒÒµ^9FþÎ|ãéòóÆ¥fK××|0- Ó:yO(0ÎÕm¥Iñ˜‡ý³‘ùê)«¯N®~ýõ惒†Y»nA^•¾v­oß¾™™™šššõ˜Õ«çOƒ*=×rÆ Ð À,¯ƒv®Òò7ô6,›÷­àÛu‡8>>ÞÅEi#¡ì³»3yxn¢¸^ó÷mx¿ÜÀ¯rÀt&%%ÅÎή^ƒ ¡¦WUÚÙÃãç5<È7BDDÄ–-[”¦G”7w¸ÀKñ{!.ˆ‚mÃë(¹^AH|˜'bRœ38‹íu¸§±æ5 ÿJ˜¾¾~ll, ¡uÿi*œh0)V¡A„ñî,‚äQx_îZA‘WzÑY•RU˶â%ŽeWŠ ¥L2`Ù°ª"T ½¼¼8Ž’õˆh—ˆ kËÓêB¶ÜJaMª¢ú²æz$))IGGG‰1µÛª”+ý\ ¡ÄbÊWÔ-UP¿!Þègaàžïié)2’†Cf¤LŒÃà(±zÊÖ#ŽŽŽsæÌ N]W[Ê_áëB°hÅ ˆ¯í™¡(–mkÈ‚H¸! "»…h·‹NaNÒ±ÅY@ˆ#‹ñ=D“ñ‰µ™Km’qæü)‹¹¶\AL•ÂpLN ¸)†¥ÅÑü™šÌÁõLA²Rvç“×ÎD¥×þˆ’ððp¡PxñâÅÚ.9UÖaét$Ì: Âx//úÈ0YHzÅç‡Y[ãˆWE!£JO§SÓã© ’¦¥¥äK³€?M/*WŽ'Îɇ*¥SÈ8d*ãè3*Ÿ¬˜˜={6ÈJÔ#ÊðÙ3Y½¿`ï–Èvy¥v é¬Þ?ZLŽÄ‘ðL·‘$„Rœ™¥8MØ¡áÿûß Aƒê¶×PÑùçÔ°’”u^Ó—¥“‚à¤Mçg‰ÓI´t§?|?ëu(7ø Iã8ä!48K-!-‚ Ίà€pe‰IrZÀ”aA@ru¥%`ö=í‘”ŠÈAY‡„P2rÎx»bZ€x‡·â^¥ªº2‰w°ø35!du`øÈ•ÂK7ü´ §Šf7_ýuCÙ#7W°ã½z!ˆÛýÌàvÊž=²YˆýÐyBÄ"KÐï€/ÿÛòT„8þŒ ·”J,ÄË.„ÁCr¨•Ê^vF<2bŠ\)Ò,’r+-(d:Q‘'dœùc Ff D¥•‘X½=rïÞ= š¤!$ä_ù“>æ‹Ik°‰Ó FC:ù—?@.ûréïàþu°NÓÖ#ô T¾¾¾õ_é1m™÷æ‚3ÎûKÃ2YÞ›m. IšŠ` [œKB~úN§rIYh \pÛ÷—!)͇A@«ÖÑ Û%qhÙñ‰C«©aÉ0ÔÃibz¹šRd†\)‡Ú¯0³°òØlvƒè‘Þ½{w± âç5do áÐÿ¿ãô–…øHgf¥–RšWÅrT„Áä™p—'{ß„¢2˜¼„âuF®«£™œÉò¥H³ð>2ÍŸ$üó8'Ç“âZ†FQMc—VFœvÒ fzf‚µÚçªÃ«’'"¼Ôª~×»¶]~ßWÀìÆÏÏÌ“îVNÞx)|ªšîûj‘‚jÏm€öŒŒŒtss«É¾ï_5Œ³bï?UÒPÜê[ï½ññÕ|7Ô¾}ûîÝ»8°Á·{å7×ÀÞÑúc¡æµ“TR’U¤e>`XÇŽrßW±5Þ³gÏ~ýú9::Ö|µ·§b=BƒƒƒCCmåîÌÊR´‹Ü¸°s§—⚈Åb[[Û &(q›†zסC‡׬ûfþÐÑÖ•¥ñ‘šH äé[ÿHÚøRþKÈÆp cˆ~JJJ ßï–¨íá~5›e‚=bgg—™™©§eË–aaa=êÒ¥‹ºµâ¢E‹NŸ>- •øÚ5©ÑØÀÀàÊ» gž½}ûViYŸ½8¢c;ŒÕªMm z“wþò+½;lU¡m)Ǻ[wïѵ«¼áÜHÇAèAôa,­É¢ѬG¸qã@•ìÛ·ÏËË«*‡±ÂÌÌì§Ÿ~ÒÕÕ1b„š´ß“'O`½cÇŽU«V-X°@©eÑÜ­[·¶mÛÂ,R0ÚUØ¢™/ïßs}“ÔÆÔ¡fS‡·Å×3:}Nj×4Ò´l×N÷´jÕ ¬°Î;ƒ•÷¢ôõ²³³=<<ÌW™õ‘E_©éúˆ~kAÍϵTü®w­NÀ€¡ûÆsçέm…¯\¹¾nÝ: 8sWþŒQ£FAã4‚©ŸçwïèW±«4±%’ââb0áç0ºª§~çU{Q“¼xP”#MwÒG´i§¼ššš*âHqmQN©5Þ(½zõ¢_ñV¼ôe¦ÛF=ç5O‹ŠõkóÂTlllß¾}«r¼ ?3Ÿ©©©––Vµ'`}üñÇK—.­á¢?šo§4¶A”G˜L&$$TÌ‚t±Xüû9aÝþV†ÝÕDƒ¼,y“~Áמ“ d¨VÓ`°ïj¸ê¤@¸Ë€±k×®þýû4¨Œ¹ôôéÌ™3A‰X[[«ò III?þøc¥Ò¥":½¤¤„9£+dÑÂÕ¡óÛê1­ z¹É+òô€££#Lsê3«ü’õ M?{«Ú–~ÿñ³ä̬ÏMµn©ÎúœkyõêUÐË 2ü–;cÖ¬Y»wï†ôŒŒŒ¸¸¸õë××çŒFƒú+ÖÆ1L`¦ þøñc@0wî\P´£oÕlUÕ#ôï sœŠ;µ=×ò÷¿Û µÚ^£Fó kñ£ÂœÏLJ>¤s-9޽½=4fCÉ7sFjj꯿þêíí=dÈúœ€Ñh Zµ©Ö2ü–‚óçÏÏž=;''§élöÞô­Jöïß߯_?D}ÜZ·YýƒGOäwöWPVÊ•,=Rü±Ak­ñ\KhÉ:û|©JG?þFKÐ)ÁÁÁ0ßY¹r¥§§§ŠÛ}ûöMIIQî¾J°M I>¼dÉÕ\ÖQu= ?<ŸÏ‡¾¶«*ÎêÏ Þh:èë–ÙnxõúMbÆ9W£':>às-…B!X% (…ô+ ©A§´¦`ܸq0Úƒ®W–ƒÂ§¦Û7oÞ If ¢nž«Þ¼Ï™íôˆþð TI•N«˜о¦A;˜˜˜X[[¨kAž;’š&!ЙßcÄ…Ž¥&w||Üß^ò‰­¹ ¨*CCCú,.•µÌë´sy°p¶&R»ví@çÒ³­„„è¢ÉÉÉÐŒ ñåðkëÐ@àìì¬Ôá• òŸÈƒN¬›çª÷iV½_¸pá‚••Õ?ü°fÍšºq Ï‚~úô):L飶ïsçcEÁÈ‘#ÿøã¢¢"úœ@òƒxÞþù^]RrëÖ-å4kÖ,(kÅŠLÊ'Ÿ|rüøñ÷þøÀèNA“{ô~xZwíÚÅúp;üåË—………ׯ_¿téÒíÛ·a¾sâĉQ£FÑÕYO5%B ¨æ¯¿þZÙÅ…„„@qóæÍ{Ý™›3f€}¿£““ cžŒ°%¡%!®@J›õˆ"…Ò |¤‡ªT YYYðk1ÖÐóçÏås!¥OŸ>MN£££é¹ Bù‡ù8q¼ó€RgV,Š9¸òØ\AuÌèò/)-¤RÆŒþIõñ7|>ßËQ?Y!¹<+ @/¶=ˆ;ô ¶4©µ&ywAî.hÆ„J±6V‘^V xr’À“Cà*(?Öj,„¾V‹­Œ=ˆ›U6Ñwl,ÇÆ–1 ™Ä û¬ËâXß@JI#`B'VYj©D¼R€PÁ&Qˆ¿q¾)½)Ø„‘ëIœê­§)´&U••.'ðØî­B¸ÑÑÑ5ë³ÙtL4uð'š/Ÿ˜² ‡Î^uB¿m†&Ûdš"ÿðië Š;>2Èã’+‡ÌåoDÓì8ˆÃ´@ç‹§* o-WP¶ôP?'ÔÝ'íR*“"ÏÓtÜ2\áóU)¼&ªÐœL1\4Û&·+|E2ÓCšX©z¬\gšø®+}mXÕðDZÛ^ââp’îÕZi ³¡7Ê™'>ðç2½ŒCdæI™ÞgåÓžûͤÑá§¼s¸hó%—GО¾§—-Ý…ww麊œÝT®ôJ ’'á|1Ïl­†Jµ8ÔÐ@Úí´jX:êoW¶>"à²,ƒèÏ£rƒ,G#ÿD²¬"¡?N‘á,ød4“È `Ž©H„œŒO½rÂÝW¢{N°CÐQ‡PÐøÓ2Ð&)cÇÃÀB&)WðŽ,+€WŽØ|OüŸÓèÍ¡1_Eøÿ*Oë*Iø¦/`ìâbŽÎXu”M‚õ–,žšø•Óè_©´n¡f#„}BÍ®G —P”q„®c&Àp×Ã*ÈW¡[œv==b³Êß ´ßÀ<Œ¬¨w³B=~zåNZA¸ opÜìû€-sËÎG4ž¢AÐÙ`x?°3s"¯DK^ÑP‰æˆÔžî“¹SÊ*oe[)O0ajYhÁ¦h¿EÚˆ4÷zçW¦t\Ðö×á~ü˜}ì(ÊÊ4v™Ä=â&BÙ§O½)ý¤?kv#Ûœƒ#q@„"ïJÞœ¼íßÏbAš½{_tæÚ–Q–~­[ª5ÐÍØñ®ŒEEEyöYàÕ¢bfsÔü…eKÌÃ"Û¶m«¬¬Ì‘TЏÌâ¨þb|peÂÝ îƒÕÚv!P)ç½k¡Òj@—S·×¼yó @ƒë/¢Ó+@ÿ/_¶PWCÂÒê8Áöñ¼íÕènð¿ùËwÁãÇgÖógr¬ÚùV§ØLQHíŽþâzûᨑŒ‹à.æ£×w4:›HXA—ìlœI_ò}T|NÓ·2·ðtòÁ“°P(v§ÝuÅ%œ|~Ö]]UÒ9o°ÂɤuUË‹X9W¶zÕ’Æd—D¾}Q×AM«àM6<úZ§ãU#ôÉäBauXO`ÿYw#cÞŸ™¤?sÏe‡€á9»BaùYðþ\Ás™œI13 耿L,ÁŸÅ¢ŒVðÙ)Êã—aepBl¿< Å™w ™Á¤ž8"+œaY$áÊ5SlÎ1q¾•QV«ê=/ê€z‹T”d_$L×Sò2^<É-x’WÀeS£¡ö_µí¢¥®©ßÑzˆIse¥ú¼Ͼ—””P~aÅ#ê-ô0W =½Ð8ÊÞú ¸1umP¦§â‡úXD¾‰« "-hüøoÿ¬‚ j}3+¨¿pZÁ.VÔ]äùj’ËO¹š¿áM¡ H4X‹« 3ó '„QnvvD¢§â™QBÐèœí?çÅË4éáïC±12Yé.¼ãïs‰t,V/}‡½‘?>•Š(_èpâ[Ê•Lš¥Â[‚¢¢¿7K),áAXO^æ(—Ø ”2}7ÆŸöÌòRœ³ƒ6Ó*0-ú{´Ã~ J¢å <1M:²”¤¢ëT¶ÁÕzñ¦[£RaµQÿI9àsY>M‹ôkêXÜŠO+ÒÛ2ñ¾ úÃÀd²`hR >/âœ1rGó’ ˉ%+Hä#Ÿ@±žòù¥Ù.Ä…¹Ì#4…¨.lœ\Üb ×”kK# `ËɼÛK -AËsÏø#ðÙjdï6Ðçd(­ªˆ™·’àAîeOéuË%6ÙÏá3f²2Š /DùVnD9Za£8úrp#ú¼ÌgG·_µwîkÚ×A• ^Ÿ>t}°SwÃîõs8sœ®T*ÕfáÆ÷à ;ãHŸvžÃRÃN{Îø§D­¢D‘Ÿç¾O`>ÿ£âϧ…«‡ã4©ù‚ÌàIîè·¡Ž¨z>_?ÊLM±v™­GÆ’ »m)ÑÈ$öÛ”tt‚æŠüBt9Í )¥`›X¦¡dºÙ¼¥(j? Jm*"ÿgõ£vBú4À^(\VÔpR‡ð¤ '¢—§mâ—nDa>=¾/0ÀšÐÆÊóPz^N#’°ÉЉ?e㉉;F îÞô™±}D"î I)äVu(q‰Ez¤‘Ú¢ôíØÓZ®ý8Ì˘̊JQ#é_–V»eB&”RrJ©W dû4<ýíy#Ý-þ¸ƒ4.'z8¢?ˆ¥ÔÃ,#–H¬á”¨å«{(˜S÷'üAø"¹ü2l+ˆÒÕ æx›CË wBµ±’Rq5FÙF#ͽÈ(S’üwóÌÍ/Ñ:Op›p ¹¥H°{ºÂJ7ÂwܦfôÛ¿"Ưh™å˜ÉÊ(ìAL¾•QCZ«Ø;¾\ ñ¥à³üò™{/òK¦/tÀ•£FLí:¨NpöϹäÔÛùö¬êù:p²ñ® éz~o®¸Ô~ ˆòƒ:iÁÆ?æñ–^ïñýK¡¨%&píÅö‹.…ºßŒDFg‚H8¶kòÒ¹Z˜gøÈÉWRÓ b°×ªkB3O…¤>¾ÞùضSñ>NÄ|¶4«µß&=ºýû¬ð!ZF¦X«ÌotçÇÓœø5Ç Ìþq–>9o>H¼yá´8AúãáÑëYÂ6Fù²r¶Ó*ãnyê¥Þ·2Õ¥ùõçþOšÏä§ì]]QBƒ7?òN¡Î­º0)–›WÔ2ùž*¸†1^/ÚÈóÞŠ¿ÄÕ¾ü¸y–ÁÙÕUE é»-;QΛÏÁ‘š©%—µ—7g¯ T´xS( §ýÝûÎ ÎÂ"ÿÅ@…€‹"ØÈ›ƒï^tg„à…¨Ÿÿÿ½Ù’ œ@>Íœ öÒEN†AJ2éˆ0j¹«`ïÈázJF¿w™i i "£Dz~VIœP?ç–8Ôøsá¨úp„®÷+ט!ªWÎnÛ(í¦‡vǻ귦ÜkñZ[ª^7öø±Èn8¡õƒ1v*q˜ —‰NvÔɵ˜ö’B?/¿;Ë }`Љ»,ÿ_£Ù=;†‰ð}‹ÿÖ§5ߎҧLDYÉ•¯Þ±uÄBÚdp â…úvŽÂ•CZwý锼»´´ŒíC¨ž+o"4é›! d)'¯˜Ôe=Ž¥_Âe‡ò¬:+RÎýu60!ž‰C¼ù"6ÁnGEšÍ@ï.Ѝè_6éøþ¢$Î’«P‰R=³äÂOàwßM*ÀÛ!/z†H“ΘM¬'-t) †Ì È"¡§þĥן€K]”¾+éï¦iq'3L=û®…¶ÍÜÕsëVÏñÞÄ⾨4'xî@PL–+ÀRÆpüL7$ë VX …Ùd¢ÊŠG '±[C‘„¾Þ±Bo÷¤œàÕñ.?7ü¬’"ëb/^í[ 0‘£ª’’ìÈbeHÎþV,û5ûíéÖƒ6å¥n’«å“ê/¿^]œ'œ8ºÎŒ„ú®ýšTq`Þ ¶®ðO|WÌyþïÝçÍÐg ‡2}7GMß=ÞU’C$Õ©ïkG.\±mÞŸÙ„ cÔÁ_L&ì8­‹& ×WÚB‚ÈMKéi2—^ ¢7kÇiñÉk¹['ŒNñø7èkDÍ«“uY玠%Û‹”dK^"ùÒàj–Ç=Êcg7~|\a(ÄÙÒù ‘dB•:ô#ùÕzóæÍ[´h¡×nxVÆ•^ÅþÇb07FÒÈû—ÂÒä—ß —)eSÜŠ>'†ÿ³Ñ¶™´+äX=\ÊÊTÁøƒ·oߪu\§ã ºj2KKKAÈ›fÉ¥m3Í»÷éÜI§ö¬È(ÈËMyWL(¶$t ¶jFW¡KÕéP•·jÕ PH›6mÀô| Ú:BD…0‡TWùu€ê` óFÀoIqq‹®µúÔ¤µjç*"ìyyù‚´—/^¼ên!42VnÕ GKŠàYÀ/\2ãU\Ñ•ê8aR—-Õ…#/^¼ˆÝñ? KónÚ¹|i"TXPœÈ¿ììÑ»>¯gTÀð þj€8ïÞ½#Ïi*.†š½èSV‰êM]]=½îÕWøÍ›×ÙÙ)g5/ÑiñÞ´EsUè<µ®Ö¹þ“T…È€š’ˆ¸6OnÑeð ¼P†šc\RXX¿P¤•þ¹ÖF ènmÝ¡Ûg¶Ô€ ?C›šúþ«.E=z6ëÔ™)¥©PÃ!@3Í-~dµdªê4Gõöí–úý ÊÊñË—/s2ó¯Ï6jP‹VÜ }ã'hÓO>k9¼³©vûöí¡ªçÑšª³d{™¸£ èäÍÇÇoÛ\×ÐÖÔÑ5VRªèÄOQÐÔÒ6ëiÐ\¹.–d?}ô"#5ûÉ£gê:„šF³fJܸ¸‚£×++Ce¤*¹¼ÉvÙ™©}—àIz¼äÝ«7ÍïÞM¾÷÷ÎG Õ^ñC»æoŒ[)jȨPÄžn¨¥Î%V899yΜ9VVV=zôWÈ ¥¥¥Ý½{÷Æ—.] 8pàgßPY„½lٲ˗/Ož6W¾à­¤Oø¶ûáÚ¡ìký·[Q-£ª$¡:mw¥Ô¨Uõê!õêÕëÖ­[ðèq«ü^ÖNŠúõë·eË–z[óÐ¥—¨A8BÕ ¡Vûz°ÛŒð`÷þžpñ:rÍ“JK@ïƒ Íü~žíÑ©¿è’Ÿ“»ÞµÐÀk±¨oŒý5²ÇŠ%*œþšÈYFq]vßs¶Œ¸Áˆl¹{0$ˆœ5­"rD b²²ÛOÓçßÈ@G"ˆÙÔ€„O_÷„k¡G£±+ÑFJÂöp’-ÁŸJý=náÓÛÝȸÆG®”JÚþü±ª’ÌÒuód¥‚ˆËðßx6VƒeDgÑÅ–E5ú˜é Wª›*žY¯Ð®];ö:ð.]ð:ðŒÓî<¹OèꘈÏ}”ÿ$'#§¨øµºê¤Û¢­‘Jÿ_Õý:püæä<- >–ªÑIU·³ªV§¶à¸V¼ÑÐã‚7ð|³Ÿ¦æ½üÞÑÐ\[= -U¢8°oß>??¿ .ðù|è¹~‘neå¡dVøÂcßl:¦ 1–j&ËwenîvÒ+ÿ·¡ KǤ}|ºÙêíí:Ô⇻SÓv‡žaoH™N=Kê&‰@‚¡™Ÿßn&›¾›Nˆ©Kk…ˆoO1„ˆÿ¯Æ©Xyü#NI d%;ÍÏ゚|õ¤u“ULd»” rŒa±%½{÷¾q£œXúác¶¢Ñ ¢,fÝeAMv+Ù`ffÕÞ=á§š“õ‰læ‰OÔƒŸ(hò‰ìè¬TÈ}>?‘—ÚÈÂå\˜§+ºÑÌ Î×Õ¸'‘ÿ«µ‰$Âá“ü¸PŽ.…RBøËÆz¢ÕQüYÿ¥G–ŒèˆÄd‡Ùš(û€ÿ§å¿RŒþ˜m°ÛÌð`7k2!6yÔ÷'ZgÆ/ŸYÆ"Ù\’Ekhʶhø¥ÐÚ?ƒM¡îûÇ寿xåXìaí®†3gMk¥ªüe×c Rü¶dÅî;“†v×ìÈAÆO…o?løëúÚY=ÕÚ¶,gž>??ßÉÉ©°°000ÐÙÙ¹n^fÇB##£ÜÜÜJ¢‘H'/3G—òJóÌ]#®`—i¢¿¬˜l1¼r%°ÂfìaÉ…˜9ˆ-±%ÉFqJ2ÄÈïÁqV\ Ø ým2ºE¡2ŠÉJosfPè~.[K2»ýn°ÅÔ(vÞW”´´´ÒÒÒÊß" ²««+ð$$$@UY?‡F˜b¬ÁŸÛò›_šd5sÅ]ÿ‚SƇ¦gù»¿Wä;„Ë-Æ_`#³ÿ7`‹víÚuîÜ^3CCCSŠ¦Íš¸r¥oÞ“t?ÿå÷îÝ377˜obb¢¯¯¯©© Ìjjj`ÀöˆHí½6€–ÖJf¥ß­}[¡q®Ñ»6-”§·ðÛsjL(eáu ëׯ4ÈÇÇgÆŒ_ WYYÒÖ5¹‘šŽ½ß-˜²gÆÒxúNF„ÓŒ+ÝSËÅÐžàˆ ¼gÊp:Œæbðð)"^If6/AJ6<—MÒ¹•½éÈÙqt {?HgÒ§‚¥êùùm—ˆ-£ž<ݤ“+¡ £ð½ÒˆÃßi ã—jAî•kK)ÈyÔ{%Ί «@Ÿ-÷ïß,(¤Þby帴I:ëPÁ"‡¦i{½)g*±”"üâíÛ·ï÷߇—*$$*}T·K±ØË¿ç†&oþÁŽ6hR´à¸Ð¹¦r—Kщ'-Z5&&@sŽdffVVBöŸã¡ ‡¾+gGü³?é¶Ï øš+õôôôÊR1t(5[–P—ˆÕ¹‚{²Mktää/eŽ(Õý˜£äA9Í¥*zø…žè®]»à·Ž_fž¾”[ñÙô¨"óô@£F¸ì@Ñüùó,XPg£#•íŸyðàg"Úú§Û"îs†F………€E û˜¸>cyõliÏûëî&IN)^ñ}íý v$ÍìVM‰5%§Á‘R}SH òoذÁÏÏoâĉð²õë×/<<¼Î!ÙË¿K¹ê¹éQYË¿eIUU5))ÉÇÇ'$$$>>þÀuPJ9ÌÀ&@!…á7""ÂÌ̬¡½f Ž\ؤàÆ'=.Ì׿Fúæ$ºN /¹¤…z!÷´½N†p9"”þ*Ø'2i‰3QÞFÉ”÷ àÄgÇ»¬&VYc9üö1vüPrbàað”õhÍzO$GGê” ®çóù÷ïߟ1cFÏž=ÝÜܼ½½ë¼eâ*=Ž>CcÇŽ>}:”R@$–––Žœ÷5ùÃàôþ™:5,tî„&†§¬¶­3ýE‰Nœx µ’U.²wNZŠ~«á,ðüùó-[¶àImŽÔ> QˆïOÜó .þq¾B[AŸÄP+$„(Úó7ùuqÖažC¸ø«àÀ9î:/ÉZ<y÷ºŠ‚û ©ëQàïžÚT†PrVúÅtæß›o´k]ôï$¡9¡ ð—C f/N@ýׯ_‡?,,ÌÄÄ$..®N_¢.Á½»SpåÏŠäu×âEeâ[|?-÷sžÏ:A”½‚Ž¥â ±]ÕbUGçJ8ÈÒ©‘¶§¶dO­¤iU£¾}ûÞ¾}[__Zˆ€€€:½«ó5‘ï9”µs’(hÒÎ,‰kß,?É®mЋJüœï¤;}ÙwX±D¢å¤Å£R#¯IXíªA¦dZÒŠÁ%Ö‡ÒËbÙ ­;Í% ëÏJtØlÚ"VTR¨”žì<9'Êɬ:'2P*g´g¬qà/¥U®:É-ÐIƒ®ÚO?ýdg×0×·‘Á64§­9ðàe>åDí£7;¡¾æ¥=bµºY ӠأÄ]Ú…Ú”ÚÚ 5ñÙ2%²û{…n%§.žyÒfç´Îrå4ÈÜkp“³³sJJÊäÉ“=<<¬­­322ê&ÝR¢îëЯ?ÀÏÿó¸Ëñ¿m㗒ͧÊÊ%)…m‹ÌÐ@Ž%±‹„V þòœ}7ä?Á½Ç2¾¬ì(2 ñWi“í1uW5–Ä ”Âi?èyP$N âj³9%%$À]&DZZ£jùjdJ‹’ÍŒJÅYQrm@…¶^†;B{ŽDµ– ©¨¨ðù|77·;wâéüÚ©‹#[á^>'“““WÚ@@ÖÎÉ#n‰ÄÞ á{NkÚž“>½(ž•ÓX~j‹lˆÉ¿·:+“) %Ü|Ï‹ 0 ¥®\K(Å+“I6+ImÙNí•8†LZ²Š%P*a»'9yÏ4-‘,2iÒˆeü‘ÓY[(Y±°þ6âDmp¤¶ŒÄöPÊJéyÖ–¥ ç|M#uöÐq’‡Æ™’ÉÉæŒP¨e;ñÏf «E²eªÁ«W¯Î¤¨¡öˆ…ŸžÓtHºíæ@ù §þJ°üIS;Ñ Q†4ÏÐÛ¿zj–)r<£Ä-9SZtÖÝJž-8‹êrrÃÛÛÛÑÑŠhÏž=#""jc½ª“5<ß»w})çVZ$ ½»r¶!²´Ý=][ê¢A¶_|A+K?m"##mÂ_2RàaõdÓB(g×´­z±wïjS^ÇSBIY¬´4eƒ|$Ù2ó|·ÆYL™b‰FìÖ"y¶ä°Õ'À$ŠC4ÛŽ‘禮Ĥ%GOZíã ™à¾uç,ÞtŠikôw_99#”Ê΢€€€¸¸8"?ýôS…"„R âÃ[%ÄG Žà>hLL ÞŠ j|ggçÀÀÀZ©`-¢å9ÇDaáßAG’QÌ êhIt"ŸßP&ÑÁÔ¯_¿†ÂüòåË’‚Gæ‰j+,®¦pEÕ¯šk[)¶©ëÍWˆ÷ÅŸž¤|x˜¢ˆJ¹â*1"Ò¬åkå¯î«Ù*ªk·oß¾C‡íÚµ“{0µBc:Óª{ .èëë(QUU­)8òÓŽ4- Ø[“p“««+Î~ýúUíl3©nåÁƒAÚªU«¸1’ÆM>|X»vm—.]ÜÜÜ çÎÛ©S§„„è\6à®2U˜Á4|–jQQx |üøï÷S…†‰ÙÚ„h¿¾aüá^kžÍÔ5k±¡}žQú<ëÕÅ*=Ÿ·6‡ɗsÐUS#|.:ÔŸPV@MÕ¦Mð(++ËÍ%…ÆwÄ<ôD§OŸ¿vvvU>_[ Ž,ÌÁ‘¦E¿í«y8‚ª½£¼l·2;;;22255J5u333[¼x±……Egõ£GvïÞ}ôèQhE¸‚Ç&uuuccc¨ÍLMM¡[YPPàîî5;`@$À@@@©†§¿øêÀ€8ïÞ½ƒªP@œ¶¯S­ŠÏ¶üʰùWFÕWXXRTú,½äE^N ãŒ6VD 5x—[Š 4´Šq¥‰Î§ä@MID圹Ñá&è8zxx@WÒÛÛzÕ#ÿÝŸã6ÚV¥¹W¼šý~ Và¢ÎùöÛoá·Ê%³V»• çÏŸok[‹’,;tèÔS#FŒ0`×­ül·ž¸³³3üÑÔÔldöâBËþ­¾ªŸ_L>+^¹(Ïòu¼zÇÎÍ:ê*4k^a‰¥Ÿ òKŸg¿øÔ"¥¥å«6€?ð9ó­(bP.ÃåŸoÕ4K²ÔoyÌŽ` [¿~= ˆˆˆ¾}ûVªX3óôû.ä5k­mmªË•­&B÷²>|(p³ÓìСƒÜ9Îê“ÏáÇ«ü™zt+¯\¹ MàÔ©S«oovvöþýû/^¼(ç›o¾éܹ3×­¬x·îÈ‘#¡.Љ‰ixÛÀ pƒ+px/p©Æ £á›V§:´RhÞÕTî7ÆÂw…¥y%/f¶4ÏnóÔR—U6þ€(±øTy‚p@¤ºÅ¾qÃLqqq•:‡OjžþâýçiE†õîÁ‘4núT*¼pûšð¡ýÚ—µü»¦èÚµkÓ§OOuv”¯ƒnåƒÖ÷ïßÒ¤ImÚ´© @hðñ=ªªªÖÖÖ\·²ÊÝJ¼ |CÝzõ‹â\°Ùhìů¯è+>¾WÜÆ¤cs¢ §@±CZë^…­ue˪ EìéL\&sp¤ÒTXXèä䔟Ÿ?hÐ x«+Ò•§ü¢èR^Ëgo›½¯îö]Ú·åõ4í¢Þ®®óáí»ÛéÙwÓó¸3Š¥¨es…έ‰~ÝÞjvl]þòï$hû¡XfddԓͬÊïV>zô($$ªæÅ‹CÉFGŽIJJ‚VsĈ_}õ×­¬>A ¹ÿ¾ŸŸßäÉ“¹Ü¨jǸŸÓÎà’ÜÜÜ 6@õÞ§OŸï¿ÿ^¶¬âiD‚p™ÉÁ‘š!x«'Nœm@Ïá«íyúÿ=VJ+TíßÃ\¯kçÚ³:%çáýì\ô±È´]¡~{‚›§—í†VjùwþF]CCƒÏç×ÙÕÕéV>{ö쯿þemm ÅøÔ©SÚÚÚŽŽŽ–––\·²f ìTmÀÛÀ×?hÂÔÀP¶¡9€BHZ(áÐ4@žcü§¹²ÊÁ‘Z¤}ûöAW<ü¬ƒyúôg¥W·37Ðëa [}_¿¹›™•ÿH¿]INïÛµRâæéˇ#•Zþ]«@¹–v”¯nåëׯϞ={æÌð®®îøñãííí¹neMÑ¢E‹Nœ8Ñ ·¯ç¸„}1@@µ^õ 88Ò˜©°°ÏÍ|àðüùsžÛ·o× 6/kžþeÑû³¹m”[w°6ëÞREÎöÉ/‹ŠÒrs³>2V+1ïø^­usnž¾ÑT…ÕßQ¾Ž»•RS0qqq!!!ðf¬˜4i@üêlKØÔ÷‹ª³sGµÑ_ÍÏÏ:t¨¥¥%´\qp¤æ)##câĉMp¯OÖBú%uY¹—5OÿªèÝGÊÏ?´»¼Ý½ôã²3ªÒJÏÀȲ»qÏž=;uêÄÍÓ72ª‘åë]»v  ÉÕ«Wuò%@777¹H jh¸ñœ ôHšÆDr·ùÆ+‹wíÚU©#8âàHyã"ðÂC[îèèˆKÞ.<Ð#8R弫‰KPóôoß¾¤w›7oþòåËÔÔÔ»wïÞ¼y“‰ ¯Šµµµ­­mãÛ%© ’ìŽòøÃàAƒEDD4P£ hï¾°5þ|ö·÷¸%®çƒC5ÛàAóȃA`ø@P°=!!›êª'ôW¡×Š¿Ê„–Š(7pÅÁ‘‚ U4üPAàK>Ÿ_…m¼kš”3Oßœ"öò?þâŋІ1&@u¯ÀÀ(Üp…£úÖK†‡ETð@CÕ¬ËÏÏhï .®P¿4†ùùóç`&´u9BùÉÄÄ~oß¾ à ‹Ôú÷ßáq05'{ #xàq•*Gê Tðcà:À%åÏÓ—_ãF¹~ý:`x˜ðA"ª ÞêÙ³'¢>DâvÕ1±w”Ÿ9s&~)))ÏÌ;wîß¿—Ò~ýúAKþ=TA‚FZ¾]»vÁˈ®A;‡G† :‚<ú¦0PTáHTT»æ„§ ªªÊt_¹/ž88ÂQ TýÌ8 £XZZ6 ¹»P3 »àå¶©®U“ӸUž?~ß¾}™åŸ={¯‘uËÀ"\Å¿ÿÚ€¢¢"h†!ß…"Ççóq{ìçç·oß>hÛAÄÄÄ€íË–-ƒ_°=÷Åi=!x+ãââ˜þ*GèéqƒXᨆ p  À(€T˜–ch¦à]Ì9PR—OdçÎÏ2B­ÇÌÁ5¦etx© ³G¾µµ5ö@éÂ+5(jÄOÉa?~Êð 0´ Ç+rÄG8jœ5#ƒQòóó¥îB‡5::š›=­›qâĉü¸=šYŸÛÉÉ û'OžŒW qÙÂG8âH=þüêիׯ_—Â%€EÆŽ»`Á.‹êøqp‹ ¹ººnذۗ…£&N•Ù&\Ì£×Pò‚L(ß½ºÒ_Ž&>–! ¡¤1ÂÅᜉ )$(ÉwÜ+ 7Ô÷Bùû¦P~«à$šñZ ‹'ð<Í WÌOJjå½/[~Þ0 aUÝùTΔ›!µ@ÏÂæûê:‚Û–W[òbGÌÆ¸ƒñ2LÐi3¡ÈÁÁ!66VOOoË–-)@ñáFßøÿœ ‰E*˜º¬&4ÿͺÊRÖ!?3§9fßÎèqm§•¸‘•J­`‘ÇÛ½H[~ºZf‚¶UɹµØÇ{ÙµSLäV˜"Œ\ Enll–ô­UÆKo•ljn-£nˆ]fQî÷OlÎþS"T_F¯’»ôVVBÉOXÊ„ÇFŒe±RŠeVÖZ™ídœƒJ¨C –û¾Bó6$£ËFÜôÀbÝÌû²o+6P¬FAô ÊÙXï,•¶èËQ%l—_ÃóÝéÖ“¨$ t‹%b݉ƒÒ¨0Lä´ H`ˆŒÀD’¼%}Éð—/ÿâ ç!+®Y‡\{-Ú›%º$)oïäE{Ïr|(‡æ½@ñÐ~š ¯sÀŸ $è"#Z$SV)ÄÖ2„R2h +ør´ŽÃ ì¼/“B¨ËÐËçFQá£<%ˆ§¡+DœÑqÀ—KÝ]íMFÄw£ãp ØCˤ‰ Íe…ȤN÷¼Iž{¤ØÀiaáŒ>Œ•è$¢ãDb+Ÿº8Ðû2֤쬫,Ýôùv¶)vnRþïqà3{Ü_7#=©pÏ¿3 "ó¯•4Û˜Ù>W€ïywL˜Ï2"y— Ç"#“&2pÜ_ÊK½"zŽY™WVtQºÒœ²[A>F¬ªŒítB>WDªb¦8nÂ)þ ‘ÜÚ@â•—ªkˆÊ×e l§™RþŒN†áñŸç¼¹ÔpŽS8c1\ÊÄß’ád ¤ò;܉äÉ ÷3ròs·Ä<äÝ¥ñÑ/<ÿVÚV9/ÿÌH›¹ð«|æ@pôÈyDÚ”·Aàe¸¤<ôKÃU(7N;—Šry?#Q!À-&.~÷牢KrÊ¥\œºŠXQșˤ¶Ÿ"V ÈÖ¿L­¶ýü²Î,Åæ¬Gæüeœ";-UåXôÛ™Ô_°¡¥ÑÏT%ú@š3åªD+Ãxªd{5<4¡ðÚ+VS'/u@¡Ë“%F'Âé^‰¿y’§aeÁ•Ch’ñº2G;*K¼Õ‡V÷•½Lò]˜`¿h²­³¯}Òꬕ‰ÁC¬ÆÍÝ¡á³Zfy ¾søMOÞg{uþanNâkCϤ$Oøë™D„RÁñ¿ûꮾÃÜÿkµï7ÑÏô\<²bW'ÎB«ãЬàÿÛ¥B†Û~%b¼3ç÷d¤i»y„tÿ=ÌîÁêh´luäÐ;/™ýfgž¦#Û¿cWC\‡‹¾ºÀ,ä¦.Á¡ B& CÜB&GOR±Ì°ÇÜð‰ŒJ4=MלE¥î‘³¥R©“»ã¸¿k>PvÖU–®†›9…a.Ï…˜yÈÒõWLäý?œÑ®uÈ™þ Qºéö·îNÏY¢#ቨËì%Î2üÇ_—d‡,FóîÿÔÿȾCƒ~]¢‡RóÐì Èûwà?fßs…S/spå(ÍI ±?ùÍÖ(+zH÷Á¨ûô_ÉÔRœNóûãkt/‡Rþ诎~Æã2¶Ó”š×5 †2ÓåáøJ™ ßþ3Çý±kfvUßßš­ *IwÛã!‡S½S8BAzŽGÒ\õ#DCKo•ɉ‰~‘ ^kÒ\‡–NÅ9‘ñ˜#Gºn“ƒaD_éªWiCËÑ´NàoÕC†V[Ž k/\¾wŸ> ê fªÊ?O¯;Éä^æVw~ ¸Þ9ƒBÅᔹN%tÕŸÌeúª£Ë|ØäÆ>c2uRìŸ(P…dÖ}îYëéuË®?*3­ ßb•ì4S DÆ[msÖ¶—êâïÚ.òg¿e¡zYª¹Ðî;Hå[»ðu«¾C>ïí‡nÿ'Z ×ö2,ªhêê. ¢Ëwèúªÿ¢ïî‚‹¡3åªtÉqBøºö`;.üƒ *•¶½Œ‚çàäv)úDå&kfR`×Ë“gŠ« çP)U¹Š®µj&w‡÷ ÁTßYdM®5kÑÐÓ Ï‹î ñL¼yÈm:åp®8F_Ÿ›‡|l¯–1;#QaX »©åUŸÃlzÀïxßÕT M>2ÕîD>³è-CÎ÷HŒ]0æüf D!4ÛçèIÀ~ ’ù h¼y¥R§Èüwý“‹§W¾2–ÜÓµl•ž»„aMò–O*•:˜pOe^ºs÷svV|ò¦_Ÿ±ð;xþ}ª]„Vét#ÛŠüã¸î¸%’?躆¢šíst/ê8n›/]A_÷R©Ôå Ö‡E¡%Tê€ ÷QSeG×ÓÖº—óˆ†eAœ²£w×î*ÁY¶í÷.ÜÀ£߫”™dà•3x®'ÿFlf•Ÿ¼ÚÀÁÉ‹Ž,޶prW>äàV`…°p>-ˆHDlC[ð, 9c26¹®LM‹8½L ¥>Ê’ÏÙkÍiçw×±Es1eÍ¡ÈãÌ€îzœ˜ÿ‘à®d@$îW>DjbŽs$4ðvýOƉÞû¶×”†Ñç&¸-bŒb/=¼–~ gøÉ^34RnzƒfïÁÊw‘uí2{°ê'´Oø6[~eýõŒ¾ÅÌe%!‘VÂQœ­—¾,‡„£u”Q%îáfÿPæ×¥¥´½â••ºÈ¨»çºcˆP¶™réÚõ}‚œLO@5i»…1·”µFê§*öç«Jyç¿q{ò#9ªÑØIÌ3ŠvI«Â¸[Í­«øY092 WÒâãûâ pfrÔ8(oÓÁ¹÷û#gµÒ€Ö!ß ¯K2Án±5Ý\×YBqÄGqÄQmÒÿ Y¹µ=$©=IEND®B`‚httpd-2.4.41/docs/manual/images/mod_filter_old.png0000644000000000000500000000134212272200752020375 0ustar rootsrc‰PNG  IHDR 6ÜI „gAMA± üa cHRMz&€„ú€èu0ê`:˜pœºQ<PLTEÿÿÿUÂÓ~bKGDˆHìIDATXÃ혽nÂ0Çí|4*â2u@$•{7†Š† ¦>C‡>c†U¥ÒÉï*cºe¢u€4v|‘n)¹Ÿ~Øþ;—»“„ÎÇÔ¡nã"E]„zZäxŒì2{$üèûãæî„ã^Bïë¾ò~±OJžr?}ú,û¹å Î#C¥/ÉÂï_匽Ƽn “ûò¦î-õÌ»/ãÞÛM0MÜúà9I˜lÿüIìÓÈçü)ËiôtÞ̶™â/\_¾,~Íÿæò4Ë4›>Ç6—òƒáGμÄü³…ÊŸWW—Öh§˜‚‹ÈV¤å…¶ÅDc‡ñ‰ôQŒ7™yX Ùy8ü8“¶Æðhóñ«dß © ŸYµk•HÝ1+e·³UzÛîc2c²êr™òïe•”›TæÔ$Õj$Ã]ðZ£C$íÕµÞç­¡Ÿ°?ÝàŒa‘Q™q…I¥é%³:óû#–ß­q6\¶Ûî±S?¸ÏÞ䵃ƒ#ÙÉß9Äå(9õȭÆýžGç¯zï"ŸDß ?Óõ@©ÃüV*šº4<2ú2ìEøóˆÁ#Ý‘MQÑ1v±jG…ããæâG=>Þ˜P~"ýdD¢G’I²B oÊZêXZKzaFR¦–õ)•l3zúvî™3‡ÏêåñçÍž»ŸŸSà^(W„*ê=_T|¸ÄªT­l[9sùü…‘‹÷***Sª/YV+^æ¹¼|åuÍÝÚ’«qu®×HõÂõK×Ý8Ûà{S£‘½ñã­Ö¦‚æˆÛ¶w”ïò· [>¶v·Ý¼WØ~ò>µÃîR'K织 ]§<6ê–ìÙÔ3ÓÛ×WÓŸ:àñD}póàøÓšg¡ÏUž/¿hºü2oøÄ«Ã#6¯UF¹GçÆzߔ 1N?>ðþô„íÞ#“í? ~šûüp*kÚf†{æù—ì¯&ßðßÚ¿ÕœÃÌ ü¨šO_Hø™³øð—ñŠß:ÿÌ@ÁE°ˆ‘W¨ãhL¶ŸJï˨Ì4Üĺ‰Íwsû ‡8ÁÓ‡ëÈÖ8îžTÞÓ|%ü—‰÷ õ ÷‹tmk­ËÙ)î,AÚ!!É&ùKêÃÎÁ]w¤‹v‡Ë˜íÚ3#Û #¯«À¨0¨X¤ä¯LRTE©¾WëT¯Ò8±×ISZsAë¦ös’‚.ÿ>º}³z£ú÷ß48o˜`äa¬cüÑ$Õté³Óæ¦[,†-ˬü­l€Íãy¶îvÒvóoÙ9¤vhÕ¡Õñ¸“¡3»óKÙÁ•×uÈí´»¹ÇfAÏ\¯CÞDïQŸ|_?¿ÿ腀﵇Sä)?©7‚ƒE‚Ÿ‡$„Ê„Ž„ — ‘u„‰‹ì:í£Ë;t´4Î=^0þù±Äã¶ Ò'6˜:Ù“x5);9,Å&U.%íEzj†HÆíL‡,|Vý)ïl‘ì79çO;æ 䎟©>KÍSÈ[<טZ W0WX_|^éüjñý’äR³2BÙpyñ¯‹ò¸Š—•uUi—¼«u.ó_^¸ò¤¦¶6ãjÜ_6õ&×õn¨7ì¾Ildhüzk°éFsþíØ;wÍ[4[ÛdïɶËßWêP~ Ø)óP´kK×Ò£±n©žÊ>½æÁMÏÈC„Wžc'ßwL}Xˆ¢ñ¿‘ûh9'@îGš`y€4kÄÊàpÀt”)”ýv€Ü?ø“?¸"0‡9$d‚RPÚÁð|«ƒH"ªˆ1â„!'‘B¤yŒL P(”:ʇª@õ¢~¢…Ð&èHô%ô0fF‚©ÆŒcù±¶Øll?Žg„KÆuáéñûñ)ø~º­tdººUzúRúE3†KŒXFgÆ;LA¾küzüÃD<±XPMpD(VØXDq÷¶9Ñpg;ˆ‹ŠÏH4ì8.i%%"5¿³{W¥tòî —=²ºr*ò;Dy”¸”¹U„T¥ÔTÔõ5,÷:hzhùkGéä®ê>Óú»÷»Á÷_—Ñ’‰¸©›Y°´³j¶=a»tÐɾÃÃÑÁ©ÜyŠ,ïzÂmÔÃÀ³ÓÛÞgÐOîӾüjK0!$(ôY8)b8²1:9–tt&>á8!¡ä¤tbK²eÊû´øŒ™£§Šr|sÕÏrä}Íï-l=ßPÒTvïBoÅ@Õ“ê®+íµƒuÓ×9´CšÎßn½;Ôú³]¬Ã³³ù‘pwJïÒ€ãà­góCޝ”G[Þݘðž4ýä2ýðeîú‚ý"õÛ²óŠÔÊÏÕ¤5ÜZüúûChC ¤Bö@3@Ø!D!!6ˆ‰¤#eH#Ò‡|D¡!÷j(È}%ê9‡VDû  ѳ‘éÑ21=G}ãé•&(xœè4‘†O?›)˜UŸ­•Ó“ëy–/o$¿¨Ðì<¶¸¡Ô»œûBwEB©šõòxMÛÕºk—¯ßmèh¤4‰6ß)h!·)´o½¿ú`îáâcÆ‘>ã#ƒµÏ¦‡$‡•GH£!oêÆ±ö“÷?‹LGøŽ™ãœgXè_ X]&¬àVFV ÖŒ×ùW~ žû>ð òN€'^±GB‘SÈUdùâE風¨RÔ 4+z?:ÝáÀ8`*1?°ÚØSØ÷8e\no€¯…gûÝ"}ýG7†·ŒNŒ£LNL6…133W³˜±¬°^fsÞ̱¹‹=|‹è–~Žh‚á-g!—ÛV%n^î<y=øÄø&ù/ •ñ‚¯„n ØÆ!*+¦·ÝLü€„ÃoÉ0©¸™».JwìžÞÃ%K’£Ê*t+eu•xÕu> Ͻuð»UOç‚.þP½ÉývŒ¤³M³8 Ë*k‹(Ûºƒ‡ÐqŽKÎþ.o\º½ò z x¿÷õñ 0 ¼C‘¤æ3„ć!á)GÜ£ÊcZŽÞ‰/;uÂ,Q,i)ånZr†s–f¶ÄiÂpöÓ¹Þ‚Ú¢œâ¨RßrÛ‹Z•Ī…êö+)µ–u"×®w6ä6:7ñ5÷Ý oámm»x_´c²³¾+é±krß–þOn< ¾ëÅØËôW*#G‹Þ|'2¾8ñvrô“öçÈ©â鯙¶/w¿V|Kþn5Ë5Û3òCàGͼÒ|ûÂÞ…šŸ?Ó~Î.î_,Y\\2]*[ÿ%òËíWù¯‰eÑe÷åÌåÛË“+ì++Þ+9+­+S«\«z«1«7V§Ö„×ìÖ2×:iüoÔK´ü´|(DCmõîÿîÇÏ7Ödëþ2ù»›ÀûfxõQC,HðN“¿u÷ÒÕÿ¿»:ë@Ì K#T„§¶1İ6CøÝ)ºæ –ðvÞs`†x¯›¿•ÄÐ'b¤EÓá‚ØÉJú#‹ð´´ù­ŸD 6·‚Xêœñ 0 éÓü7»ºéüžÒéïklå´X/¼‚ô-!Þñ Ð΀<€†@è@ÉøºäOßz½ïõw|CK ¸¯[†@K*ðÐÆÏÑ+Žˆ¿ýlèá]¾P/P¤/I”^þ«£ Ç|áõïVÿŒxW¨ñ½­[ÐbùÕ¹‡œ W¶öĈbd0r-ŒF£ˆ†Had1Š0k`Tà˜¬÷§þFÞX·ËßUü™!œ§ÿ_é¿E…_`£þ†Oà ×ù´š´±Aêþ_ r ƒµ9Úá/Ï ¢&ü÷ÁM’¨ïOÞ)I”‘–VÿE#k¬é” pHYs  šœ IDATxìœMÇÇo‚(Y=$ˆ(KB°‰½­ˆn«¯ÅZ½5¢$jt¢÷ÎF‹„"!YDOˆè-ÊŸewåÿ}ï¬ëyûvmyýÍ|¸;oîÜ™sÎÌüî™3gæ¾ðßÿi*( ( ( 8^tJ!JJJ (TRý@I@IÀ¹$ PɹÚCQ£$ $ PIõ%%ç’€B%çjE’€’€B%Õ””œK •œ«=5JJ •TPPp. (Tr®öPÔ( ( (TR}@I@IÀ¹$ PɹÚCQ£$ $ PIõ%%ç’€B%çjE’€’€B%Õ””œK •œ«=5JJ •TPPp. (Tr®öPÔ( ( (TR}@I@IÀ¹$ PɹÚCQ£$ $ PIõ%%ç’€B%çjE’€’€B%Õ””œK •œ«=5JJ •TPPp. (Tr®öPÔ( ( (TR}@I@IÀ¹$ PɹÚCQ£$ $ PIõ%%ç’€B%çjE’€’€B%Õ””œK •œ«=5JJ •TPPp. (Tr®öPÔ( ( (TR}À¦¸» Þ U&|ZGøÁz/¼0óð]-üpÐ Ï„w‚†ï¾NÎÆgfÞ}úŒŠy–’{»Š[»Kàáó*Ix©iàNÏÕûºM¡i÷/. ~¿bÍôw~ï®ñÌ ó§ÔoÏ‘€B%Ïik§ãxÊóÖ;ÞÞ©Œ”è5ºçÈšG/´%Zÿ©›ÕÎL`øS¡’6º=YNëSÏwÇÜú‚ÚÝ?Ñ´Ì/utìJé³æÈ˜1 !»w©f}µ°ëžP—âIDýõ4 ¨œ§µ¸½ùÍœ»´ֱς·G5-yö»Þ¥ûk>£s2O‹VŠXŒ‹‰¤4öÈtZØñŸÌ¡E¤0üÏùN±ìÊÞôDPnÿW¡’Û7±ƒÌå÷ù¯ó®8+ØH‰ÏÀ°ûe7D &M{Ú_+Œ®ÔqǹVyRZß/>Ñpß&…Ýé^DYœžˆÃÝÿ¾ðßÿ¹;Š?ÇK üÚÅ+÷ñJJñj.¥ô8¾9œœ…JNÞ@Š<%“€²v{\“+†•œ\ •œ¼yJ'…J×äŠa%'—€B%'o 7'oÕªUÇŽss&{ ”ÀÓuÙ>¨²+ XAëÖ­‹ŒŒ,X° ÊRE¸‹”®ä.-éš|¼ôÒK=rMÚÕ¶’€B%[IV• ¤L™òáCƒO· Jº*é¢PH@éJºÓW©PÉé›È­ Tº’[7o"™S¨”HÁ©Ç¬"¥+YEŒnVˆB%7kPcGéJ.Ö`v!W¡’]Ĭ*‰E •bŒG'+Tòèæw8ójçð&pB*9a£xIJWò ÆŽ7« •â-*•ÑPº’ „êòE*Trù&ti”®äÒÍg#â*ÙH°ªØxI@éJñ“‡eR¨äa îdì*]ÉÉÄ)ÈQ¨äÍà±D(]Éc›>Æ*Å!uËæPº’ÍEì‚(TrÁFs#’*¹QcZ…JV¥*(P3¸DÍíQgQº};)ƒû÷ï?sæÌéÓ§/^¼8eÊNYª[·î[o½å¤ä*²ì(õ=8; [UõDׯ_Ï’%ËË/¿LBTTŸJåúÆo€SO²¨¿ž+5ƒóܶw 篼òJµjÕþg ááá(J©S§þì³ÏH’ªÚy$ t%çi Ï¢dÛ¶m 4¸wïž°ÙûæÍ›iÒ¤ñ,)(n-I@éJ–¤¢Òl/ªU«šbÐ|`úÓöõ«œW •œ·mÜ›²^x¡gÏžLÜ`3mÚ´íÚµso~wñ—€šÁÅ_V*§•%píÚµœ9sŠQéßÿÅKÀʨâ\SÊ3À5Û-±T³Ú¥?j×íÉœ93·M›6ùûû'OžüñãÇö¬=f]¨of‰1SÌ2¨Ÿ¶€Ò•l!U§+Sˆ«¡8Ó«ýéÞµk‹q_ý5f&û×®×øâ‹OM‚D\c&êùUĦP¨dSñ:Eá‚D¢‰'¢_uH’ˆýÉÅMéäÉ“ùòåK‘"…ýk§F]"B$âJ¹šætU©B%ë4÷ÝÓӵÐîüÞ=mtywTI·¨IØö¹—u(8+ìi5>þ“Fѽ†·~°Jê>#ïl/õä™§y¬n:~ê)D¨M²Y¯Z—)Éz•À£dÉ’q):¢€ÉÎÍ©ìJÖ¸ òP¨á3Õ#¸Ü=æ3põÊ¢Z?#ŽlÓ¨f¾Üg#ü^µ^Õ±—¤C’àQddd† bÏ®îDKë;Ø$?@("`“’Ž}$๨~fM»1Ö,öo`Ç‘šæ¿úØü†2jZäÁe#ƒ‡i>=gLÖ¡JŠ3kš¶;8|ýçEÒ†oø¨éê Ýç÷«’üîÁ^þ‹ƒÖO(?5'ókoðö–-P Ÿÿ%Ç/ßµ*‰ÄH"Œ2Æþ÷•}º—‹ÖÒ÷…=Â脙й(;.GöS#ŸË‘žD‚#îßX2«àÊÔßïÛ5Ú}£&‹ïjÚ™5]ŠY¿ï×ï;Oìø~ÐÌérä½³cäæSwµÈS«G®_ÒãÔŸ?¾›¸CËlpµ‰W¸þïÝÈð»†pmÿ²yë5ßyA@›A%]Kb¤± oóZÝ¢‚€á‚æ2ÛaºsÎ΄çêJÆ–ñÙúI…ŒZÙá3úû€k–ŒÑù«4ÖúÏÑ—Áí° Îp›dú¦t%“6‹+Š °+¡%qÅkA >®Ô=ëIÀ“u%s)F$ÏU»½6kø†sR¥8;¡`éšKÎÛÉs•¦iØ¿K¼™1W©J†¨½·Ÿµs§ÍSÊ_ «4ùø­ðð[çôm2KÓ f6“±Âä9 øj;þ¹+jÕŽ°ŸöïçßþÃ第AÉ^fp“¨Kæl«ß–$€R)Š’`:WL–äd“4ÏÖ•ž±¥K‘"¹ß¸°å}ò‰ÈgرI5ŒRÏ^y´¯¶´F¦{©‹¡)Ýo\Úo2–Z|z½>ÿ‚™zHCÍØwµ¡w*\Ò¦3o9Vï<í×@Ë¡iÁï×ocÒÚÞ“–Õ‰ ãJƘšÁÅS¸ˆ í’óU@s’&Sûx– ²%ZÊ‹2¦è"o]»™%ýG·._ãµ§)&±K“/غw¿¼&i‰ %Nb‰¯U=i”€B%wë O:u°†` àlì¢E‹êÀD$q 7Þ7%oz- ßÏ“¿Mñ{7ý„Ör%®(žJï×®sû£Nø =nl,PòðÔ¹lû¶É£EPsäå ë×ìœéìê·sEïP3%Àº‡3飊D Í”<¿Ô .þ²rœ,a—Ŷ}ûöíùóç7kÖ,þüœE»{÷n•ËCÉ×ßÉ‘¹@ެr¼áW»¹¯vó!0D];Ðk¶á¾ïL:´ÿ¦¦ÝÞ4êÇÝD´[Û×ͨ²ôªÁôѽF}·áòÕ5KCÇlßÔ`Áä?ž÷Ê ç#‹|Ô TÒŸ/^¼8耞(¤K÷ÔI©^½z|Sˆl`¤çç Æ}ûöa~fñÞôó ìÝ»7‰ðÚkOm(¬O¿þúëXayÄ´~²ð䨂ò!EI¯’H÷õõmÒ¤‰ž˜Àȹ™¹ Àú$îÝ8GÄñí¡;´ Óù¼_ÒŠUïÿÃÁ-WÖÕjžy0!Çʼn†¼¾Y2݉£Z¥ZSGýt_óí8bq5ðìÂî´Ù´ä)½sçóÕn×,š#{Ô÷zOWޫЛ=gœ8ýȃU’¥Ó.õÿxÐ3[æË¢=¼l(MûN*ªi8šÊ, ®ý¾óòÛÍË´˜»ªxð*MóöÎ]fÚ¼©2+Gýtf xâ>8Ô¢.]º4mÚ´M›6ÎÜ6I¤ TbîÆbûàd'v%lLÖÜþàÎÍG)Òz¥Nûdj•@º#Â%Kõ’S¢\»• EI~œo‡:)‰@?­zòI‚%ä¨÷‡Öœ’.¨„_ŸLº$%¸Qû€;£ÒÒ¥K+·zŽqú0Ì€ÎçP I•8¾"8Šs‹‡ Û¤ã5òžLH =3ÂX’QÇÐbàÉØ€†hI(I¢:9PJfäÚ‘Aä#À*ˆƒJ¤K CÈóÌJÝ•èR ’¤CAWHBKªDuHÀ)‚%Håƒ1"®ÈG”#Ãü-U*t%z‰ÈŠ»eI¹Ø«…Ü•ì%=§®‡QÄpkW¼ð‰0Ì X~2{@AìÜd 8Š¥L™b;ÛÛ†¡ÆpA&"Á&q¢Ó‘‹œ6¤FýD •žHÂMÿ2T -ø“AÅOF ýH IG%Ê€/î9ªvd"‚BV€ò!ÂUÒÙ³uÜ•ø|ÛâÅ‹sçÎmOQ:g]‚JÐ&z?E)‰@%®£’äHE òL¿ëigI *‰ ˜‘H‰+)\*Ù³QÜðk 3æ&8ã𢳧(³.q‹týHðˆ+” f9Š>Ì&jGÕN½@\¡LÁH TRÀd·rC]éŸþÉš5«‚$éCúX’ÑIŠ@’€‘éÕn=Ϭ"¬Ëf)vø© ‡º˜H!ׯÆÃÅô¨*DnˆJgÏžUs7Óþ-ã èE€ zD2K¢éƒöŒ‹%Þž5êuéˆ#‚Ò N‘MOÑQ›JÀ gpl¡À3Ðv ›6XÒ ‰>1S’^K‚J@cv™ G¬˜96Љ-ÝŠU«¢,JÀ QÉ"Ÿ*Ñ™%Àøw82:³|<6å±êi-®øUpv (TröRô) xšÜ•ºtéÂ&8OkHů’€ÛHÀ QéÊ•+XOݦ…#Jž&7D¥ÿýï깞ֿî$7D%>KÉIîÔHŠ%’€®Èrü+º’ìGõ¨¶t]f•g€ë¶-(wCßnGµj‹æqï29®[váÁæÌ™3¹vèÐÁ½YVÜÅGn¨+Ňm•Çáà£7–¹¶Lº9?dÚ´i§MàX (Tr¬ü=·v%8’íAºØ wõêUµUHˆÇFÜÐÚ]¦L™3gÎxl‹º ãØþüüüô½fDjÔ¨¡ ÉUšÏ¦tº!*]¿~]·VØTvªð$J sçκ‡——î¯I,P=îpCTbŸ§þvFrW.*V¬¨«Äšéûï¿ï®œ*¾$…J —ÊlM ðò`ÑóùmÛ¶ÕÏ3²fª,”€Z»oܸÁÑôª‹»Do䈾 O‡Η/ŸKЬˆ´µÜ•l-2U¾U$ ¨”?~¾*ú÷ßëŪ ¸. ÏŒ(TòÌvw$ׂGre]âÒ¥KÄsäÈM¦®Â&G6’CëV¨äPñ{Xå `]–JI1$Fžˆ{˜»šZ»K–,yñâEÕ¶Î&Á#ˆÀ)Ýœ­/e£Fõ›7ƽ[RôC Zé˜ålì(zl'7D% ‰~o;‘©’!ÀEÀ<Œ€øf_ófÿ‹¸¤=¾Ø¤qƒ;wîp TâJ¯×Q—¦DÜ¥qCT¢7«SßœªS $ *:@£Z´hš2ùÕ‹[/䕿Ó¿ÿþ+Ÿ¨!íHHRÀäT jkbÜ•èýºUÂÖâSå?W! ôiÕ²yÚÔwV,h•<9/‘—Ïk•9CxP‹¦·nÝbINW—0=WÂî—Á ­Ý×®]cÛ§²’:Cg5…$Ñ’Ú†´z-KÔ’9Aà‘N'¯“V–þ}A›3wg¸VrŠ>ßpKT5«..7ޏ!*¹qk¹k¦J(AhImCZçÌ®-šÕÂ’„5€©M§å§Î>š;w!À”*U*°I“kµ{Ò©}ú¦JzYª%]! ·û6Á-ó¾‘lñl ijL½çÏh^0ªàà 2ë6&13Q&yäªW¤"î'…JîצŽçÈ"$q–”?oŠy_6‹ÃðÇmö”¦E ¾ 0ñˆ&Ç7§Ý)p7TÂíÅÛÛÛîbT>•€EHÂØÊ.˜fÞôæq@’”0͜Ԥ¸OúÖ­[𠦧ÂõŒ˜»¡f‹xFÛ9#—!‰&[·jñnát³&7§¹šlÓ'4.]ân¨„°:eÕ!½Ö"$&-[6/W2Ë´/%Žª‰£Þ¯˜ƒBØÄ 0±Š‡å[¿'LWyÊÝ<X~Æ´¤Ô%;÷¿˜‚€#hIïW|}üÈúI¤gÀà ›¶þµhñ²ìÙ³óÑ‚rH¢HùqwC%g–µ»Òf’.\¸€I¨FÕ\cGÔ³ ãݸöëS‹—,çÌü˜0YEªÎYˆ»ÍàœSÊnL•$á-‰–ôÏ?ÿ0çª[#¯µ ~6¤n£zš7o ÞÉT½X¦rø^’JÜXÎÅšB%jn+3 H`·x„ч$µlR¯V¾Ï?­kÝú†~\+¨‰OÓ¦ 9¸`q€Ih .LÖ¸£J³þ½cöŒ˜)¶ã–ϱ†„„T¯^ÝU˜.!™ÆmQ—ó— в\M!éüùóM2°¦-XÔ¯z²_@cZºte®\¹ô*ä”<¡ I5.XÍ®d =Ò_‘ˆY¢dôÖ[omÚ´ÉŠçÒK7½Â?%HÜ|9[:$¡ªÈ7´$T ©uów>î[æôÝŒy–,Y‘'OÙ+Ç>^€‰ .š´ŽM P…ÛTÖÑ•}¸ê^K€t®’(l·?øO²îƒ5”b­ZLч8^¿R…gŽiS®¦Ä×Jp,jתxÿ^XKø±•Ó·GUð`2ËæX ™0‡Í;·UüÄ"V¸paŽj‰yK¥˜JÀ ¨$@#ÐCOEŸçj‘[úÕ´zëÆ9ÂË‹ƒµŠÕ!‰ŽN<"¢¿–a“ŸTÇ-kUêäåÀ2MÉÕ’þüóO ©sH©>=ìô¥ÉÞ]«$Lyóæ5‘i¼Fé„ÔnF’üdïÅt•h*+ Å âÑY¦ 2˜VcÏx¶lÙl]} –›˜2lÍfÌò-BÒ™3g€¤îËöêâóÛ¥tïT‰3vqàóMfY˜ÐkZ¶lY³fM¾6Η~gϞɭpÚ´i|Žœ¿ûî»>0è†ï¼óÎO?ýÄ1䯿þ:?›7o¾lÙ²_~ùå½÷Þãg:uÖ®]K„0vìØ~ýúa#N–,YŒiêòŒ¬`Wb|ÒY €‘,ÖLY³Öfͱ IDATfûßWÏTå.?ú¾Ð€÷!† ‚HÆ ¸=0ÑÄÒÖ¦ZÒ©S§Z6íÓ½b·Ž•ÒÂ3æþøù¸íÓ›o¾É÷Áå¬8]™…¤¤´ s.PÄY¼x±¥ÍŸ??sæÌ~~~` ­Ÿ)S¦•+WLõêÕc·ÓÁƒ¿øâ @çĉ/¿ü2Ï‚_µjÕB{úðÃ{õê%¥­[·®U«Vaaaj6g±Ï$Õ3@´$½³ 0¹ýþXìV,K‹VË"‹òu›D‹ÄØ lÞ¤¯ÊŽ‚$ÄÛ1¤üàþǧãÑ4¼i‚ÐLë$±Àš"EŠŒ3xjݺuݺÔ¢´iÓnÛ¶e_f¾¾¾çÎãåDî‘(VX—P©¸@: ”FÊš5kи¡POW]IE%)áèºÓŠ^[Fèý¦Î2΃JPÂha÷YL±Ó:0]M™'¶i_®¦Z(Ô¢Ù ~U:·«`ñÁðï]»~ïÚ¿V[y°X ‰m[—úqµ-šýñǺƒ¥–ž¼0’L`THD/ôyóæ¡‹:t¨X-è’yáÂ…}ûö•8 6nÜ8‰Kiz6ITWS X•謴ýUº,âö]IÞɰ,½™êÕT¾vŽ£&lÞ¼¹iÓ¦륥˜eX¼G¢@’4±80òÿ@ÒUÛ—·ðläÍ…MN›g`öü³çé“"ð»#ÿ”‚#3'›|ÞBþç%ÝûcgŠò;ïÅž­MP™‘ŸÖlÔœ[“Ô â›’°hÑ¢åË—³!áìÞ½ÛÌ’ÍrÛï¿ÿ.ù1EMŸ>ÝôYCV@%J§U‚J W·G%™)€¿@ƒ6ùê·è²Mš4™4iRš4ix»b!–gΜ‰m‚”>úˆþ­ç'r÷î]^¶#FŒ`:ðî»ïb°øä“O8ͺvíÚh=dغu+ij9sæüòË/’5jtìØ±îÝ»CÞÆ¹Kx–Ò:œD60sÒ£iuã!éèÑ£Œÿaƒª…´*ké©{S iûe†µ;‡Þº4þâÁžýÏ­/Zg×5M‹ wÊd–‰GÚÑçäiÙ¬Ô˜áµ[¶ <|ø°í€É”öó“y‘ *ˆ®D+ˆÜú÷ï?kÖ,‡"Ž]IG(ÓTÜ¢¬€Jàr—ñ©“ÅÊÜ&Q%X†_}ÜÆÍwË–-ãÇß³gOÙ²eYšÁ’ $ 8044”„Â?jÔ(S`bh‘™t€ ËzŸ>}Pf̘ ¬^½‹“^¬Ê9rΜ9D¯Ž;b¶èÖ­Û¡C‡°q0Å 'VŒÑ£GC!PÀ ¶ÛâÅ‹ÇM³ÎšÞ¬©AAÍ?ÿ´fp‹2¿õû/½vk+¶¨óN&¯T)²äñþtyûÊÚÍ+÷´/¥>¼+lD¯‘)2v+ÖaçßâÂŽb5›”å­ø%Z•û{מHÉØíƒ^;›.¦GÞœÝkrÀ˜c½?›”œ8ʯU«@¤ÀQfïMÃÅ"Íq$ƱšÜ¬Y3â1l·oßž¶`}MΫÀÜ^¾|yYö!N!˜½ÉlVÏÆQµÇÞJªg€43W&º/ý^^n,SP‰åØdÅÆ =~ÝK'+8`JÁ‚y4a @÷t@¨ž={vêÔÉì|(Þ·XR©å›o¾ÎP¸0è°vS @^}õUöy@ÒÞ½{1|Ô¨Q]‰%g¤–àà`*‰À&Z„;s  @%ŠÕ&fíÅ-|I›Ò¬ r¬¶Á­ƒ¾ø¬nóÆï™åמݦ ðÍóô…——ké¦BÓ)S¦ Å"C=E":j`1EÁ1Vý§ÓOž<™ïb“‡ÞÃÜEþüÄÂüõŠ8Gá%K–Ä}†ŸH¶¸Û2d3…$”¯Ö(#Œ|ʉ-¤xIÓŽf‹£µÖív0 Ô˜¡ÛBjá'Ã:«º¾yRhoûr`éw—óÜÝ¡Uü¦—¦û&àåÝÂS¤ÐŽþñq‡“wW;|©nØ0ÉXeãÅñc=çÍ_T¬X1S2L¦[Œ3A–t½¥LQÏ´Å->®cJàé -æ½x¦È8Ñû1ºr<ŸuÑl2)q+Œ'š Dz3cž3ƒôž³@3¸ÇzúÃ? 2iïÛ·å]F $–ÒD ˆàq£ß;¢7¥9$µi5yL½¸!ÉPrÊÔ\žé‘7WÌ܃Á¼,R Ú½6EÊ— ™ùšëm˜Áe4””G~ùîbåúoI„,e*Oï'šQØäU$ü/>+À¿è¬)Û´i…-Ò*S9#9êb X•„L›dÄÚƒvÇÕÁp•¡Ë5ÑT@øÔaz`!ŸÛ¶mËLÍËKc¼Jåqz˜A`F‘S‡ ùó03µ-Z,Y²„¯ª1¿CQ„zn¹! %+8¸å´ñê?£zX,-_ T¡õëþxêpñ‡=AvýO3v¶'ÉPŠI³o=6þÁùqw/;ôMçAµ^Íæ­íü'zÁíÖï¿›&Ü`(÷=tj`wmOÑÏ=y‰Ð4ÿÚïÌÚ¤]»6û÷ï× 9ë.=6–GU²ƒ%`5T‚½C'e¬šË#üÏå/4˜ñÑ!}ô_]0©o•­Oú¶yö¿£n>y霕¿z¢s*X£RË ØAMu{âØzX›\Pm°˜¢ø°Äfú0 Û€­ 66C°„‡%›c0t”ƒ…E Œcaˆ›s ½iذaÜ[¬^…)=$ _\Mµ¤Ÿþ¹mÛàY“5ð{W0ŽHª7 O¨ u.7sÅ/×ï…?<³wO®†[µÖuŠ[Úƒäåíí§]œºþïH¯”wO*Zkú÷W^,VÇWúõÉû‘÷®|QyîÀ4ÃŒ­P¦|¯dð¿öåô¿¿žêÔ,²àËfÚ‡`qSÀô\q9OëØ•àGÞ<2J­û€ÎŒþsÃE¥‹ôˆ¨‡7´ñ`Ô Ÿ¡£Çí—7þÏ<7§Îfü9åÀiú’‰ë~C8ãg@9b15­šI¶!I1uAúôÓO%‘Y‚#ؼI!î°åŠˆÀÍÒ¥KYÂã–@ TÇOî[fþ5RW´ ¬N&>(íۇ̟ެvÂRi<®^]— ÿp^І Áo`ÈŒ~Eèj)ä·ñ÷Ê9c[ÓìLL;À˜sh·ž%Ò$×j¬ìýOýRý I…|î–G»hðrBEÊR¦ÂâÖëƒ*ïò»Uã Ãíç„šÕ -šØ¢]Û3f³V`šÛŠ6&$vóæM |–&àJ |"øiZ©ŠÇGOWâ“;f:1ö^DÌ#°°²°M_gր׌uöÁ…ÿ¹ uÍ_;º>à£ÿQ$.Í<~zù¿WK©E]Xº2pÅ%-W…mªw(r˺ùc.û-i—/{²Ö-œø¿Z­Ím½²«¬žR³aŽ˜ô'"…}p,¢¡¡ ×°^†: `tæÎ‹ÚÂ|繋צЎ £I4(í¦:´]43±ˆÚïý{ïNxTŠTi²d0…#K%…?¼øoDj¯4½žŽa ¥È’!¥¥–öÝŽãÍÛ,š:mÊ#%{å@j CP‰»DÜŽ8ŸD“e"œ™C?'ÑÐCej¯¿´Ø/É«…«•*UªV­§AÅ]‘º‹¬¦+ÙNšáZɺÓ§]ßgýÌ2­;'õJJYˆ½wløVïIãÊûSoöœqpâô#:Ô®Öu·Ï„ÁK°†´ï7¥ö(Ÿ¯v»fÑÙ CV t8f7O‡·®¾A_'¶b]¶.JÞí A,JhI;µ_6¯%ãÙÖµÛ§ü*•ÞZ½(¸I«.½z÷}˜œŠvÏK…Ù´ Kƒ#胻|¹råð“|ÃаA'“¸×Œ- w'«Ï?ÿœbqm•-¾‰(Óq TÒ¢h^5ø‡Î°½Ccÿ¿q>L;Ó£OßOšÉ×°<”¢H¥àžçO<0éãj–qEê¡aYʺ…-<åeËdG/œ¾Žw5AOqÑÈŠmÜ’¤ *•Ï?kr“ öŸuèÐèAÓÁ-ƒiúŽ€Óp›6±m¨C‡œãŒÉ3˜lZëî¨d”oê’“þ”{äÌY¬úÔ’§ÄÀ[zõ”úõ²DDjgÏ^¸ö2}*âÌÏ@ùCÇüXtqÛõ2Þ¥lþ@WÚ¹s'¯DÀH:ºÛJèy.Ô'P‘Pý˜¸‰…½ÿïN=»§O—Ú€içî“m»­˜:u«4“XÑsi>Ã\îy¦%k5(Ó·“'Obl"R¢D\þ¨ÖªÑåÊyj\t~Ò_Ìõ^“%£éLž¥`{mßð·¼”2âÚî‚æ,¹ú¢ví‡|cµö}?9ÝW[2õë5—Y²cÁîþíÛO•+ñIWÆ ˆýì)ãä¼®åX{F¸•j°_1ºul’€Ô§CG4 ^øíwÄŸŽ{ì1:Cö¯þ•_ôÕÑnG1 yü÷gœ74Kä¿×÷ÿ~=>.H1 I@Â÷;7j9ðàa¸È‹MZ°ÞPŠ•²âˆÏymÚ´áM`¥"ݪWB%Ÿ#¤uÉ€„do›PE[4*]ƒ¾éºm÷iÚwRÑ«ËB¿Õ wQ&w™n“Jîk´àï[^9;Wº4xø´1ÊcV¿²„SÛV9oƒ…+¾˜Ž˜–À&öÙ}ا‹¶‹7o}Þnýge:gÛ ãûÞÿáôŠš”ûên’BÔ·å¾(ºöªáÎÅßÊWþͦ¨´mû±&­ôêÕ÷í·ß†5S<Ò·@£-“˜¾1md×´-+qÕ²Þ3à9‚zpívTòÔi2¦Ž_#Â%KõRžSɳ·có `õM–™ŸÍîì¿–‚DLß0á<Å *€ 8y°fÆŒi gâ‘ø\NЕ2–ûãÐ¥v…eùûúáùg-Þ?¾iÞû+Ưi8}¥ùÀqýÞ½±æ«"ívðóÃQ¿Ý©i•;µZûy‰ˆ“Ç>î3}ön­rë€ C*Îðâñ 'ŸÍ’÷èÒ½Åú}–í·‘ÇÓ¹6pÁ©"VOªì-ÅIÙ–mG›‡,êØ± ËóbKÒý9˜ÄÑj¨½»ÍàtbQ—@¥ 6è)*"°ÖPu”<“¥Î’É+NH‚²Öƒ$Gñiëzv•hŸâÀ«¤àÞ²ep«ŽK7l ‹ ׯýÁ×Q²ò¿õFŠ#s§|¸vç ÃÛBîœ;i×í׋6Xzkù7¬Z Ç¨ršö^¹S]?ù~©é§Ê‡Ú߳ԙТu¶_c~wãòì!KjµƒKg$¾ldèÞ<¾?®̼*´ãBƒkeÜaÓ–#@RPPk¾ƒ"L‘_XãªÇã.ÄFwñŒe×Ì—ÕFu¹V±.dív-Áº µ28!—ãVºJ„„ܹs7iÒ¼u§%³§4c×ëó»X­`o=O»ñI¥ÝªðõÎW«¿“öÞ¿ZÑBÚW¿ÝQ1O• ÚŪo—ð~-2ê5^UK¼r|þÚÃZísýÞÍ®iƒ¦…Œö™»ÿ|•ÜÚ­BÓ[3˱¢zdß­qÈÊî7ñ1Cwpä@Ü$ î´â$xÁ°-Wxfu`Š»ÝÅ™³P¡Bx3a}·Q.Z¬B%m8+“Íø$0\Á#F¯x?se±œÀiß 6mßm6Î ‰»î•{†–NËîÇÉS§ÏþŠxu?\ßeP'æ)¿´É°_=¢”GpƒI‰uTK¦›reÜdˆÃÙ›9iEªFŸ€e¸H±ÌÒe GĉJk7þÒeyƒ@Uá‚«ðeŠMOªrÌ_&•Ì‘*™I_¡’™@<ñ'`„uI I×’Ø]°4±NÄ¢c»~ƒF{­ÆÕ´á{±‹)ž¼™²?cîy¸²ý¬}ÕÛŸûº@ö ÚB¿ÞK €d!DpúR¡€‹;+¦Jywﯷ JùϾgs>A¢¸×®Ö¬;ؾûÊúõ¢%±]YüX$`oø• ˆül5vúÅÙ¡rè•ês‘j\Ý®ä"bvz2Í%t Æ0¨ÄÖÀT¯~Ã.†.Y±?†™/§¢<Þ²fHvfמ¶»9<œ”(í¦vã¶ñÀ:Àܽrïñë>ojG÷~ò>U~Y¹¤ZÃí Ø…mBÐÊÐ_¤zõ âY$%%€If¦à/¨ã&Ú;Š_%[Rì]«Ó×§t%§o"»(ú‚LßІ€$®zås®ŒsæD=û¯Žzü_«æ¥-‘–úeó>•¦\gß^]ƤîÂï é”èåûÛ ,òÞáÞÓ+¦ê÷S]Ž8 -3íÕ[ï=ô|rƒŒåÎÙ9²@rÕ}L÷øšÆŸæÐ´e«~îÖ÷+´$He­M$L\ј‚Jººdú¬ýãìÝU¨Sì®î“#›§¸™g€ÈKü€!™¯‰‹¾Wøyã( !lcÏjhèª1ÃýBZ–§¸ù6ÜÝÈ3¾Â)%ïÝ‹Hå•ìâ°ÿä©8[cÍ.2y²TÉ š;9oFjéØÙkŽnϯjñòý½¬E¡Ã&Ëÿ\% . *‰³+Ê Lp¬ºÄQ|œ®ÁG"žÏ›'åHxËÇ"Ñ„«ÇBšM’ÝŒ_Ñ•¢Ìnž+/ö«40xõã¨Çí,~.F©2x=±5½èå½(Uªèº›ä!r²—ˆ0ÉÞ¾¯Çøy ZA"q@R"*²â#ˆ› t¢¬€JÒ¡åŠPôˆ{È"ò‚…S¹«KÀbfWI„)t%®Ìn,Ò¬óË]F~ƒ€Æ3Lå:†T°˜ßž‰sî8äkHb¢)$7ƒ$`WT$8…BS¦ìI°Ô…¨*Å»åþ3_|Rh`®´z|ò»nØN\—3Êa `¢ùâ3Vÿ Àà«""wëXɬ({þœ5ÿLJn‚Î<HÒ¯f$7Ø”.6mʨÄÜÙ¦U¸báV@%™úÕ0^ÝîTÐÓ;{W.¬wbᑫε+¶½EšaJ4¦øLå@€†MFŒ]Åæ²ž]ªX,ÐÖ‰Ógïúôó- 5åpŒdîf’DQ‚*½5mMa峿 Œ#ƒgÞ²*é‚“±*Ë®$bÖo¹YDf¢S8Cç¶®x-“E6Iä`Æ€€&#ǯŒŒzܧ{UëRòÜÒ&¹cĘm@;]]’àŽõ¬ïÏeÓÓ2$•¤³r•W,¸2h94–í,Ù°ˆÃ 5‚œ’á**+L1>d9“Ÿo¨òî廜ŒC"œrW®ä$¸S×±L±1ˆ’Ò¨Q³q“ žßý{U‹-›ÕÓ'LÝ>jÂ÷¢%é†mWÑ’D <¬.W/0©¨ÿ2&¹Ò•Á&F¬øà ‘AÆ6Ò—sml!2Nt2¬® îÀ+Ío ÈŽ1¢W¯^µk×&Q×•Èæf¨$­ÇTNçWL§¯àCy÷­a‹&6+sì¤m_Lù}0hI±A’ ¶$ykRˆN°Yù©t%‹b·*IKÓØ(Iôq{!‘ÞP¤ÈÑ6éHJ"º!W®\¹jUkÎ ^è‡)Ž äø$Xฉ'òý¢?þXº;”âùYX‹0Á‚â 0Mµið€Z6åkÔø­§ïbæèÒ„ˆ”®d±ŸX•D§ LŒUt"<Ö¨Hâ§@’(Jä±HGR9Îàøõ×_7n,Ã#)¥™>Kip´LTâ.ì¬[·îĉ|#M^ÂÖ­×”ÇÆ-“)³ÄML3ç4¦aƒê؈ò£7O›ó“hIÈs’X”И¼é{ί%M:õôéÓô">ãïïo*:8ßò³‘Ð\«X+ ’ôKº/ãtwÄr$?E¿àJº« èǤ|ª»zõ*GCX±|X£XgÎFzÉ(ÞŒ úùùÁ8A¿å~¸£á¸Ò¸Ïå‰5lÔlÞblLÿ}6¤îsó'4çŸ3{Á> ‰O‡è*’œ’£nݺé¼ÿõ×_¼¼9pY¡’È$©¨D/¤¿C\Ñ&è¾Ä§Do/Ð’t;7w z{$=§»”Rðl>C˜ô2¥áB„Ž1Ä´Ä-'?™ÁñQ0"`–äáj­ª­œx“H€+À´hùJš}ôðzVäå“á_Ï_òK@æ|“Ö¨\· ÄA%W$‚êÍ1ʦ§ ávíÚYQV.]TRQI˜—aIÈ犈IT’‰›X”À,« kÅŠz™žM¥ôQ=%‰¸ À#Ÿ™*²ŽËW ±vwéÒ…ºÜ"O+rþÇaS^'f“)ï¦qü˜–¯Y5~d€U¸ûèÓ ‹WÂUH‰tEÉå I¤Ñ¿ÿ6mÚ°ÁP~â+Ï¡+V”b5TBeqÐke$ÑmIthMß0ñ ŽIÕ`ÄöíÛ9ÛßZ #“À¨´jÕ*zYçÎyãÁµ‡ "E0KÄ ˜b“6kö¡¡+™ÊMÓ0¶<ñLï7híò5a ›ìE9Œž«%Ap<Ë·¶zõêµmÛVêåUbœ¶Æ¤ž ŒfeÆ€NÄ_ÑŒtýHT$[(JXvØr­‹ bòäɳwï^+Š[z¶=¢MŸ>ÙâæÍ›%]ËŠ•:sQ´¯¼`dn޹À2(­À›«­á`c ŽÇÆšÕ+jWÏ?m|“D3Õ{`èšuG’# ¦ÄÜ V¢ªóžp•WF>Z‰ôX¤æ q¨K‰‘›=hTB(‚Jr¥×Jß•ŸÜ5…$­%D¾Ú¾eËÆÆXÈ·JzÉ”&勲;Ø&‡  éV©ÎU ‘ÆEèÂ`“|ÛÒ ˜@(Üh˜Ð˜ª¿ïýå„&"ϱ٣ߚu_’^yå•'ˆmNâÈ$¶mW„$„páÂoooP ã‹' ‹{g¶*!&nt TÒÓõˆµdʢ߮á݈òòÁð¬Y³Ö¬YÓZ囎"}$Âl.00W/jkUçBåД´2Á˜Xpó˜#PI4&"hL_…®z¿rîY“›™Šô¹üvýpÕ¦oOaKâÌF$CÅ¢äê$¼W«Vm×®]Ÿ}ö_|®4<'ƒ5QI—Zlè[ºþ`¢#åË—=zt¹rå]BÆH’‚‹í©#GŽŒãY7¾Ek˜§Ç&A%S`b¿ÎW_­ªT.çÜi1åSJ”ܱçʭߟ±I²âÆû€¹³6ænÆy› ØøàK˜•ÈŽ;pýEiÂ4>b‰)(·L± *Ù_R|+÷n®ö¬úÊ•+¸GíÙ³³·=ëužºZ„øÓÚ¯V—-•}ÁŒ2ŽÊlßmùöÝçê×oÄŠ'ZV$ à‘+BÁ¬AX&Á”}¢ËD˜f𨸛¸ÿaN²ÿLŠ%êO>ù¤k×®ÕcL™åõN@Oa@ŒÍ˜xL¯ÀS4SpøBñÙûó¥ v‹˜ú™–cgضé¼tû®³ñ„$ªvró6Á q¾k˜ðâ‚ãÓ§Oãq™Ë-Éi*Œ» *aÎ`$Ø¿ý€$4&H°ÕNR£01¥ó³Ø$:Ž T† 8Áö—Cך/`0ÆdñÙ²ýâÝ?¯ß Ú–­#”Ì´$æn²$Šr1Ks†$#E_äËé“'OšðÅHþMš4ƒ·îl 6ñH¨í LÙšëø+ÙšÊç–ï] ªxKùå—Mš4©U«–C`ñ¹’±CADaZ—1#œö¿~Ýš&­ç¯˜ßEGŠ¡Ø¢í¢_]’˜¸éˆ0jˆu˜ ¶$q0L{\’@Q‹P‘æÍ¾ãƒ–í[{8Õ¥KW½Ta’¢ Ç£"nbWbÖÀ÷Ú¹:¤ñZµjŶ,Ìí©ÝI*e,dnÂðÓÝPc Ø¿qû·Ä¦‚o¦_¹0X€ Õ)0dáo‡¯û×kÈ\ÒQI TB ’bÞ6’‹@! ¦OŸ¶tÉœí_wyMoÊ IDAT=GFÚîŸ ·ªÔ™Ö<0¤k×n ÁÔë ¤}íI†; #†äjOÁ™Ö…ƒ.'l.P €iº§Å-îÀ“î] <Ö®]/wš5KÚ‚-M[Ï?|쇓°ö‰~dâæÒFƒG\™¸…®Y¼ýë®9øŽð“páâ¿UêL hÔ­[w0—Î ìOb/ó@`rT¢s"×'­ì€¿S¦LaïË÷ß©Êø“ø 0éªðüÎõúK/&{ñÌÙûœ1G-‰«I$2V]TKŒ°q8qü†õ+wlêšíµôfvéòmßÚSýü›ôèÑ •f  Lî Ò¹nÓa[' ¬\¹Ò¬·yÚO¬H^ò†©ˆq2Â#1´‘À zfot"fjA-ƒ/^ýïï AAÁ¸J’HÐ%ò,I®I Òر£¿Þ°ò‡ÍÝbB„Dn‘aܸ1xÉa&}Ì0E<ª#¹ƒµ›w/]Ù±ÍÆ8Ä¿œcç8N€±äXb[;¨b¯5£ÄYO= Ð}®:tAض0Mƒ¿Œpä&4zôÈíßoܹ¹{Ö,±hñjÖtd`*õë7ÀLtüôœ©œ; _jgÉ&f+Ú9¥lÙ²ìz:tèØ±cí\µ³U01´,*amƒ )ÌYHA±Òñ’DW4o£ì€¹„‘#Gü°s3·,¯Ä IÒ‚`Ù0~ã0?pà ˜Íê!Àä¨týúu¶nÆlBû§Œ3³wpp0Wû×îT5Z&Ñ•˜nd’å ê’ ’qΗJÌÛds]HÂÒ?|øÐ}{¿ÛùM·Ì™âåOr‘ùý:S‡GF}òɘmê À¤P)f»'>…ÓЕ°1íܹ3ñ¥¸Ë“fÀ$ÄÕ )5#Ð]IŒ& 6±CLXDÀ#×…$ÌCÆ}ú˨?™2Æ ’¤åÁ¯í›º¾_wÚ§ŸF}úé0¦·f=Âíɬݘ™1”šµœ£~vìØ‘õïeË–9ЧªW q‰Ð€XŽd} öÑÀm°p0ÉIÁ&W„$™µIC† :øË΄B’4(ƃ¿Ü5xðÇ(\2~»*9Ï Ž.Å{ oo>féXOçÁ&S`›2M}À bÞæJ"F%$rdÈ“@!ÎÑ)%¢È`# ÷IÀ4hÐÀ#a?á—”!}"ºáÁï7v¡>êO±WY•S¨dÚǬ/UªP8Î:Ź~)¦À„ú#41A‚D!Q×’@%ׂ$ðˆ€ÖGûŸ8öów:§OŸ:)­Çãròøú *y0)TJJ·‰õÙQ£F-Y²äÈ‘#±æð°L  êA°I0HàIÀˆ+·DKâ'×’P”t-I‡¤úþyæà¶õÓ¥K$I¡ï6t¡Àþýû ‚JY¸¤jwõcR¨dx`Mpذa˜½mRºk*(Ð:z%6¹ qKËù! PÝm:$õíÛûü¹°o×vJ›Öj[2½¼RR ÅR8ЍDu²Jà®Àä¨äTÖn1Ú·oOBcÒST €5€ ˜`DÑ­œSb¨H$P Œ)påíÝ»Çå‹lùª#8b]ʘ(üÃ{²“ÁíÉöÁqú‡±;‰Ë’iwä»|\—¥²ºdš®âºÞzœ`dúÓ ãFD2‡$âÃ{ܺ~fÓšö8~Úˆl6¢Ôn8+C¦¼_ŒŸÄ*n€Äx®6ª×þź<*ñ¦¢…x{8g‡FcÂŽ;qâDû7­ªÑê°IhI={v½÷ü†•mmIÂKxxDÝÆ³_N÷Æøñ“q­pW`ryT:wîߌüûï¿­Þ­R ³Ë‚ r–ß_±JªGIÀ"$áÿÑ£G×GáÖ/oË'éì@Ænÿ¦s’§Ì>iÒTtp·&—×ú.^¼È1&vè ‰«÷Î#FtêÔ)q«§œD@†$3[Ô½{ç¨G—6¬°$! V)ׯhû_äåÝ»à¯ÓÆ©N"´D“¡P)Ñ¢‹ïƒ|¸™iæ¢E‹âû€ÊçdHâŠm[7os´f—.´¨+ë–‡€ö$™êÖ. Ñ_ÈÏo}U: ö¤Çêu¹<*ñ-­9rX].V,3$‡œôïߟdÅbUQö‘#‰«)$qs—ÎR¼xsí²¶œÎfJLk¡RªN™üVçNíݘ\•œ|'=©D‰þþþ|¦É´c©¸óK 6HêÔ©ÝË©nµ´ ßÇtTº¤MÚ4w;vl Jº“ƤPÉNêóÏ?ç¤ÊßÿÝNõ¹l5•*Uâ€*Ž©dQuÁ‚ÂÇáÇщ»è,öaÎ"$ñàíÛdL{Õ¢èï Ø‡‹µàpºraëÌéÃ;tq'`R¨d±¹­ŸÈ¹tfoúºõKw—™+íÚµ«_¿~7nœ6m'Uq¤ÁÇLJŸ7oÞd±¯K;°’PF€¤ö킳dŽX±à™oFٞت˜–Ïo•-K„Ažl—su“Ë£’óÛ•ôþÔ¦M¶,\¸POQ3 ˆÓÙîݻ˗//ûupPÞyç~¢@:uŠGÀ)³­ûS ÉtÅM ©mHëì¯>^6·%N‹Ö­1)¥AÌâÙ-^ϦAÀĪAß+/„¤”oÿgH¸‰cÞ%ìJÂCnÆŒ˜½Q¶Ǭ‡<•'Oá”ÇqF•œ˜‰UòÓWÆ0xDàÂØfýHBM iÓ*wÎ–Ì r*Hz"–Í ôΕ¼MpK\ä˜Ä<F\r%`rmTb5B—¾k‹jõ2‹-Ú°aÃ?þØê%»S`);… þóÏ?%E^ûœÄdšÁŠq3H‚ ‰¼Ú´i™?oŠ3vc„͟Ѽ@¾” 01:À&—&×F¥³gϾþúëVì”v(ê³Ï>[³fÍ¡C‡ìP—{TÑ£G/¾øBfmâÊIĶ`Í"$QoppÐÛo¦ž7½¹ÓB’He|δfEÞ~‚!ÛuɵQ Ûço¼a‹j»2Ñì8}I™½ã°™=»jժ͚5Ëš5+£nÖ¬YÿüóOÏ&ú–$Éį"3Âß-œnö”¦bóеüð‡×.ß»vý^x¬9¬rã1[áâXƒ„È™“š-’®u«ï¢S9…JVé+ +¤uëÖ¼uçÍ›—°Ç< 7ƒ tÐÝb±ÝæÎ¾9™,LïZQ1!‰ñ|åÊ•V-K¼›‘q7$Ù°%E¶>Ù Ìž`ÚŒ“þ’hwÙ‡³Ëw÷û}‹¬Ý;y8 c´Ùz§ÎØmÜæ+ó©3&6)U"3ÄLÈ „u-“B¥Ø׆éô¼½?úè#F «q¯¢Ù†Ê.y[ðdI¢_\¾|¹eËæåJe™>¾QÜ•_³¢h«Mýgxñüø[ ];4uÛ}}9q_»}´ 09‹(=•3HB­ \ºt)(¨YårÙ&møÁD^™Ünßø#æÎâ•Â+C¦:Ý›MhœÿøÉ»<ø÷Þ}dì–"c·b¾;ò¯§ŽoØØjÌÎq½&wž1Î÷"¯Ÿ8’”Γ÷:ªN±Œ¼÷õä¤ðïÃeÆ\‘®h>C[½™1UÊÂUøÚà©ãÆMÛ¤1U*f[a¨…/Wј\•8Æ$W®\q·ÓÞå,µk×þúë¯NK¡ˆà Â’ÜñãÇq”ÿùçŸúé§°°°¿þúKžD3¥‘Ÿ++~”ÏH®æ›s¨Ï/íßÛû4ͯœé‡¿¼ºÎìÞ§bú{'÷y×Zš|·ã?lpi}Ñ<[/‚67./º7ïë3¯ í¸ð¼y¥{þ/Fß-¼u[ϼGCg«¼öÓŽúCî~½gÈ¡õ“»L±÷¾–*{è­v… ˆuá‡×UÍ÷ÍçŸxùÅçõk¼ÿFË æ00Á 8=ËÏçÎA9°±ÐŠœº®®„øÚèÑ£1{ïß¿?n³…%ærEáš„Ÿ7;NN^”xÉsÎ79¶§r¨ˆälÒl±n‰Ç“.¥²|ΠE­hÑ¢iÝêyGõÓóĹwõâaÍÇç qtË­V«ÉÁo2Æ-êùUž‰ÛNúô@k²²{Ç ÝòP ?yz¶–ýÇeuKyi¾ïÜ»j$ÕÝø‡©=e¦(P±â¹=¹o>¹>Þ1|RÛU>;NÕŽç*ÏèaþÉ’m lÞxùŠ5,XÃ>@l"wŽºå¨D±;gÎœŽ’]ÒëmÙ²åìÙ³ç̙Ӯ]»¤—æN%à ¸eË\(80Ï××—íÍøy½i q;+/ô ÀE€¾g½œµ<½Â·€À©ÊÄŸ¬ú±þ@˜1cZý:oÆ’¸×Þ•µÐ_þ|Xôm˜ï_³ëx޾»X¹~öè–*5Ž¡×DáˆU¤XfIL‘òeí¡©‘ö^^/cë%Ï\£†©¼€_Õ!›FÖ)w€ÔÊ­Æ|ü‚îýýáø‹sö÷.ÿJf9Ÿ©«ý·±Y³Æß¿SØ4ƒfgë9.ŒJ˜ñäµél2?=¼©0{³ò/ñÐs²Ð†ç_úäˆQhþüù ò’å Lêc›×ó&˜X™’+œ¶QÇøîÈ»ïÛøÍþÞ]}_Í¿£Ö“¿Ä‘ƒ_~ýO»·½£åÞ߃څú,ûÄ×[ÛyíAtb䣿˜è¥60ðÄí*jøsñF¤–Å0ïbWÂhtïV²f“ƘùðøáÓÓkÍ Éã}°»ñí›Ê«y§€òyuŒ.>î?W®ÞY÷õáªû£ ¢cŠzÈÕ 2)])nÙ%ô®KOßtfÙwŠ3ÎÀgΜ©'zf„q2~üø1cÆÔ­[÷ôéÓ¶øJ;š“8ÛŠ˜“°¹°PÅ ÜL¿ürZ¥“wnîþÚ«ñ¦T¯œ]®H»‰³tÚ(Oò[¾èòÅNÍgL…¬™5_­ùª¯ëõ¨óf²¯',?¬ùb º±Ã¼m½rd/¢…Î^çûYç7ì­i4íèòå7œÛY¹p™7+6Ö0]Iˆ¼÷èõ™ô¹ËWîT®9¹r•Z!!í@%Š!¢vfÓ’ ëJçÏŸg–'M檇þÖ[oqdå{ï½çª<$™nœƒ™YìØ±£P¡BI./^02ÉÇ•Qʶ  Õ¨Qv2•û`üîo{eÏ–þ¹h°ãîK¾½§ÌîmÌ[ÈwGXÝ¢ÌÈjÖXÜéDýRý©ùWî©Á4ìŽIqÑG¼òæêeµ 43Ù0‰7œõœRKV¼e7¿‘Sre 5fokØkò\øÅ¿‚ºìúѯHv™ñIjì׋—nW¨>¡|…7n Á p*Œó'T—\øk¼TÑÃ9‹'öFq™;‹/žÄGwX%`*Çl—þf7ǃäè,.<\Ú-À¬…‚‚‚ø°5–o³tOøÉax@ÞÛC‡uÔ‘Á)µ'T­úÏ;¥ËW›pÞ°*Mö×Òg’xÌë•ôoä|$‘-¹—WvsôI‘=g¦7ÌãA‰1 dC|ŸRÕªU‡/LqGâ\ã[#ò)Tr„Ô-Õ‰}—#tqº±tÓmÓ€¤^½zq  mögÒtˆJœ¡Ë,’+zDÅŠ• .ÁTîÜß7íO[Rj„`È.\ä½J•*ÃŽ®Á—β3“ £¸‡]Iúçu´hÑbÀ€I鎮õ,'5mÚtÓ¦Mùòåså22¹2teô2¯ÁüÄ*eùò .^¾Úø¿Î¹ÌÛR!²Ë•+/ŒÀ| k°i LΉM.ŒJî4ƒ“1Éæ›o¾Áºä!jçJW¯^͆¼"9sÊÎU›V'êƒ(G2z™JKÀþ’:uê²eË¡1U¨6ñÌ_×LtÎ8DB*—)SVè‡ÁJ`‚_ç¤_¨rjâân&È—o‡Æ‘Çån±ûtܸqx{³PârÄ'ˆ`Ú8ñ?IGiIP+*ƒšd ô( ô †1CwMlÃ\Ë”)S¸H‰ŠÕ'ž:s5AlÚ93äU¨6RK—. å›Ä¼ 0 §ð.plg ãY«¢’›MßôÖjÞ¼9PËAºzŠûEИ¸±Ä¾r.S†¨(JŒ^Ô ˆ7„\‰0¼K•*õλ%+Õ˜tò´“„›ï-$A3APâM ä…Y‚3÷«8—+˜p÷›¾éÂÆÛ›ï 5jÔˆ-z¢ÛDðWä°ìú g`Šñ)Î;\&®âa(®=P¨ë­%K–Âù;¾é^ð­h"g`ޏ\¹æ¤÷J–-Qâ=$¹I`¨Ô¸@u ®uUÑIX0%é!Ó”P³¸£ÒÛo¿ÝªU+>:`Ʋ{üìÖ­.£]»vuvtE‰QÊp• `fp2ýal‹ ,ñ÷Þ+Y¼DßZ“»ä ô ¿ä[ H*§C’P+WQ”•àN‡$gV—”®ä<½ë)%82t÷îÝ‹EãiªëÇpýᇜêð˜.ƒö¹2Æÿžñ\¹Ö¤í_w/RÈàŠíØpøèÅ*u&—.]¡xñ⢙A’>}ƒ;]QrfHBž®ŠJؕؽéØa»ÚyQs~>öà_~ù…—›í*²gÉœFòá‡bç†;{Öûܺâ L’ÒÿŒê÷ëLÞ¶¡ë;Eù1‹°#ªÖR¶l¥bÅŠ!UÁ#°I×’\’°šÁ=·Ó:&ö`v àZé˜ê­]+»^4h0qâD»íqK ¬! S{^’•8F»®ƒ0ÚeÀãÍP¶\åª~S…OPEVÌLÕhIa IÇ”‚Åœ ˜“\HKù¸ê>86”Ÿ8q‚óq¬ØÌÎVÔ±cÇ*V¬xôèQŽr6ÚJk‹4Ù”)Sú =ócêk7n6ÇË5|¢R9‘S帲WŽ@„30øá»­ë»÷ÉùGö"÷×ßþ®î?­BÅ*µ¬kIFÌ4Ø¿DErQHB„.9ƒc%}Ž!‰¶)X°`ppp¿~ý,X`¯Þn“z–/_~ðàÁß~ûÍ&¥[¯PÔ% C]âªÛ˜$Q*1“ÂwÆÉ\Íoê–u]Þ+–KòØázà๚ ¦Wª\•cpDã**’@¨¤›·]Å–d*7—D%wuV2m‰<lÚ³gO¹råbÞu‰œaÝí»ï¾cœ8?Á‚;b˘Ì`úõ‰àrE¤Fýé›Öt,ýçMÚ<ìÿålí€/+û~@ÕIºŠ’`^ P ÖæÄY©—D%7v 0kV”s1{£k¸¢Ù›©§&áåÀDÃŒ5§ýÉf'ÒFÑ0¥Sˆ=B\€©vÃV¶/Wúɉ”¦Y/þÓþ?ë6žùþûÕ1Ï $é*’@æ$ IbKrQHBZ.iíö]‰ÂçwÊiÓ¦Y¯oÛ¶$ü$»wïŽ]†j8‹áÍÒ›m«´vé:PŽŠ0É ÇLCà=ÁÈ×ÕñfbguÕª5üšÌÚýÓikÓò´¼÷ž’¨H I7l <1ksH‚ág^OàÜ1ÏÑ•¤€$fpMš4‘£]»q4ŽÖä0€]»vñ½C‡¹ÖôAćÆDS]Iòƒ$ú7µvY»Jåó[½~øñTý泫U«ÅŒÒa‘@i I, Š- z\QòˆÎUQ‰ÕP«7¼ÓˆG%AéÓ§^ˆNK¤Nç·±DÅÒ¡ŸŸ¨Ä×~ô[®‰ L1ÁŽôDœòA°#tIˆoÅ·¬ÈìÎÝ'çV¯^»@:$GÄÝ’›K¢’GÍà¤s³q lât4'÷¥iøÌ4s6×¾}ûéÙ³§pár×x“ΨÁ#-æ®Zئªo==)‘ïwoÔr^uè±A+ âcåêZ’Ê%íJž6ƒ£©PÑqAÄÛ[F{Rz¹MŸ Õu*ƒ£&mZ£­ vt&dÌL˜dÒ„ª":‹L©ø vÔªå׸弭ßK:mÛ¶’jÖ¬K±R…\Mµ$ˆq'HBh®‡JSùV*ßFMz“»V |3.{öìNîˆÈ“cùE° †îÔ©S]KÎ1©µL¨'1IŒß|L³vÿ&­çoÞz4fiñOÙ²íhãVóÁ8 4Å>3H(ÝÀ–d*×óí>sæÌ|À—æMÙ°[œ5c³ºb¦˜e°âON&*[¶,.ÅÎ Ê:ΧŒq‰†e^àµk×’LÏc1U£LãV‘튒†–NÐXYdäI\ŠÏ·øóÖÄÑ—OÚ}½qÝâÙ-k×(œª6m9ÔnQºõ¼½½cBJ&¸$!+׳+ýóÏ?ö7 šBœ¿ƒìÌÑóúç”óÙ8ÚYäJè³vÈ¿víZì¾Ì7oÅ&SNÁ ‰ˆH€*"v -éU@'-nÑI/\gŠŽÙ¬ëW¿E»E g´ð«í£ç‰Odæ°àNKcBðÄò¿{Còq=Tâ+ò9räˆOÓZ+ W=LÊç*‰RqkU[9˜i8Lãûï¿/_¾|ly•>oÞ<¶Œ 4ó6ïpô(ѪDX¥""WîÊÒ5)Ž¢9AõB'M70™ˆšãïß u§¥³§DøÇ÷xòµkÛe9”7o^ÝŠ$O€$èz¨dg]I€F  Þ4"·ô«i§´Qœ€MZ‰ªH\±àSK4Yf7 $"úˆ0° D$WÉ™¸JíüT|€‰\06)i±q—­ú¹[߯ê×o$DFrõ-I$ã’¨d7k·ŒA%À- `ÂÇb¯R‰ñ—¨„T±2h¹ÊÏø—àðœB3 %úTZØÚÌâ¹rå˜zô[ 0µlnþ%…ÅË÷÷°V c6`$NhLü•ÜxÅ-fS*TŠ)óÞê ‰5o†Á<‡ú@ ˆO“XšdxƒJ ,ÃñÙÍ€É †túôt€) a“?Zõ¸MPY=Ãü%{û ÚÀ-fåf<á%„SÚ%R¦ØãôBÜ)âb¨„‚SÌk¯Ùï»7àÆ0m3º¨Lº— ;õ;ó²3¨]\õàrêB3&~qKò7Þhبé€!+##·6¬¢ÎY¸ç£¡›Hde •Ì'H¡<òHB&.†Jì±â¸XQ›ãn~+Þe´•N •’.[dÉ0÷“^ Kˆ'0‘ ,7kôÉð%¼ïX–4웦ÍZIèD‚J\%èZ’GAMéb¨„³o{vAðH¦o\u`²'nYàŽZÁ¤‘2+…Ôu9nè'úË2¦ÆdD$ƒ»y°Ü:¸íÐQó®_ÿ·wïÞèþ²0BW"ñXHBJ.†JW®\±çqÝt5d¤Cˆœxâ¸îrÊA%&&H’,$¢vÚGCÜÀ$¨„z($û{;wî>lØ0–稄I›$qõdHBþ.†JW¯^µÿ?dÀˆÆÄ@’}^‰ë»ê)‘€€;º²ñÊÕ¥å`b‡¢*Ñ‘°Á/ß×"T¦Á#¹ÊOO›¸é­¯PI…åˆqÔ&qâ\ј,gU©ñ–xDÐEJ$Þ:uÆ8€ E‰»‚J¨Š €}Í *¡1‘Â$’¸ø)vqf|ò¬Kðn-"]ì|%‡ÌàDÖ2„D]2“~ÄñÝø+÷ ÚnâÈô(¬C/Ž>lÈì‘K“Ϙü§Ybœ?ž<£º–C³ÎÔ´o½U®ÅŽáÎxaðßwã,Ìp3êÖá“—ÎÈ»0¦Wßa'MS,=3¿¥\ñKÓ…)p¿‡\&8­Š Ckdv†%ßHÀˆ@6®²¹„é¨D ³'C2Q¨¯¾Îà!Ÿ !‰›>ö8Â=K6ž¿ö$ùîÙŸfãGT„eì`Ær?!.âw¶¬žÙãDó}ÓGUß.õZÊT/yy¬y¬W±ü‘"µ«ËæoXf€?‚1~H*íȱéÑEíÜ`H!ÜØ²5š† MWï’yi(©ýûl^sááÉgNÜ3M‰Y¬é]ÉÏÓ¯ýù]=ƒJØ÷…Qöß$%âÌÞåÖš¹TÃŽß#Ñb0cL![|ĵM ¥I¦ièA`“(MÀYÄ#O†$d¢PÉZ]½RÀ¤jûFÿjÔš˜ZhtçV`|f÷Xÿ¹Ù—~öÑéq%Ó†Né­ã¤IŸ2ââAÇÞnب\•,7ÖÌž¸¢äúQ=¿¯¹»ãå3£±FèK[¸°6wP•?.;páøµÇù*4›Y-]r-âzØî¢ÌÿùSjÚ·=þ¬ºo\ÛIomòï¶ïà=-üÏÕ5gä[?î£ÓŸ\2wlç½iK•0«áßÒ§l¦ð¿v}ûçÿÒ›¤Ä,Öô®ä×´kßfíó­V©çéém'¥^Uºí¡ãß¿{pÖ¢e+StØ÷YmÿŸ7ùÁ ^­%n—(G&P†€$“LÓ¸ÂW%€Y’“2—àÑDºçXoÞ¼izâª-$’è2³×.—-lîß(=wÏì^Ÿ«Œß“‚eʼ~TõæÓçÈúZ‘ÂÚ_¨8Ú‹)Óœé¸xnŽ‘ÚÀOÚR$…vïØð­Þ“Æ•÷{3G•j=g”<:ýˆà¢ÉIW¥ñ€ï{UHwq}àȉ; JÑ`ó­´Ùž,Y¼¨EÇoómËc½}Jå}«{«í§ï®jÆuÃG‘©r¬zuz·^yRz¿•ÏWó®Y4Gv&{†c¦HÝRl̻ڮå궸^ï×Þêâï£íØ`˜jZ®Î¡ó•*XnxG-ìðõç[¸¤÷¼ 01A°I Þ <ƒD™²I‡$dâJkpì€ãèUZÎ)ûïƒ9òUðÕþp9G¦}—´ªoä~y¯‘Г'»³cÉ ÿ#Ñdû–72üÀ,/›£øÈóaÚ™}úöˆÎ¥ù>sBØÃk·½*Vð«RÁ/òÑsgÿ˜º$´ÑÜBw†v¬? ÿ»|D‹>÷©pöܲH—:g`.Ãý´9}'U›ÓhÀ·Ä}*5ŸÚü ͸.ýÐt:3Åðè“bcÞÅ®U)KZCW:΀5¼ûI¬š=£!ɸÚßóì b¹*ìý"ðˆˆÞ«õˆÜõÌ«sŽpËmqãÆ 'þxìýÇÉS¿Õ¹ÚÁáë¶ØXh~ñÔ©"Åœ}5tAèÄìÏÎýßWŸl®«Ý0©ÞÐz~òѯ/M¹k÷m4P¤ôê)£#VìÙÇFµZÈð&÷öf 4Þ¸f—ü¥tÞo–ÜHÓŽÜ»iÄ”TM®oÒÒppä¶ÁÈCxtq‹A¥Â¥ cífc#V|tlTãÚ7–Uüú† yb¹X(öÙœ>ÎÝ}RÎýhûÕ³yÔ¯'›€ŽQޏÉOt¨'É®4Ÿpfý¿®$¾È*Bë‹Á*%FjéÞg·u÷­dµ×´ðh5$Ê`YI›!Gú¨‹'·Õܨe6¨¼(³eKŸ±XµàžÚ¦ŠË¯Ff)Ø^Û7üÀ­/¥Œ¸¶»à€9K®š´WÞÑ…µþSöí¾õðÖµ°±«5­dÆW xtiîþw£nmÿ64̨¬U–ùý·Þ‰ÔîìÿqÄTÍuöç±ù‚ÿ8•±À›ùŒŸu}1y”vC»û¶‰Ýç™”Å>s—zSæ|#›öþUÂËÝÛBwhe}³Å¤©2ó®¦< BÁ>xDÜåË®4ƒ•ð숃GÝz1bLc›Œù*´ÐþßÞ™FQ¤m|V@•EXuñäfUôT”ûH $$ˆ\Š  ¬ ¢°Ž  „pÂ)ˆ(‡AC× PPÄEÉBÀï—yCÑL&Ç$3“îéª?zjª«««žªzú­·ªÞZôC÷jU”esDé2¥®oöÈ-ŽÑ¯”Éžòj2ìQÇè¤7&ßÉN¹æ®ç_®9é¹Õ)-c&>Üø©1WÍÉ.EˆÁ‰—Ÿ¿ù™v92iþ}²SÉvµÂ¶ÅWrü¯uÛ[ŒsU! ê8.RÌîi/•™F¼‰/ÿ_ƒ²—9‡Å¯Ÿ]£«óYÇÃé¯VpßÔçÁ#½^šrEBdŽTv1¤ohîd/Þ͉_±vÌŠˆ1í½ïLõ¾icî­]öì2//‘k¹ReŒµ_#P0Ù{ ŽeŽ‹/NKKãê·ì0øggû8ºƒc¿ E N3ìܹ³gr³NŸúéL™k¯¾"ˆÁÔésãåþspîô±“çJ—-WqãΞ8yê·3¥Ê• ®|1‰Ÿ8wE…`—4%©`Ã*ðÓÇ~ÉüÃtíÕeËçè£Îfž)tùŤP ©wÉ^¼{!wŒ Oý÷Ìeeƒ/ºpÓý/‹ÒÓÓQ²Ll-2SŽê0‚ƒûg4)ÉBÐo•à¾søíõ½È´²RÁ¥(]68{ª+Û]VÞ=ã8o–*[ñZ§Çý¥L…«+8É—Ü&ñŠ—ÈŸ²³—‰»,®,äºsåbˆ»d/Þ½îe僯ÊQx_Ò¿â!`¥O“²¶xåÕOk,†@Û¶mׯ_/™ÎÈÈà/þcÇŽaQ‹¿²]q¾^½z„à¾ùæ‹òÒìZ‰•,,+] ºþ§(<·ß~;‰]¥JT Øó e[èÞ½{eG½=G+CX–jV*|óÐ15%€À!CÐfÂDÈDA£FJJJ" ðÑîÝ»¹Ë0âÛo¿å0~àÀ$¦È«—^©YÉK@êd4¾A@D¡?üp×®]¼AímpŽÕþ"³ÒÌÀlß¾}ÕªUì_!\ø|“#Ÿ§j%m·Ö+ù¼9蘱cÇöë×›'xÈ Ã4lÅ8qB ÂlÛ¶­jÕªhšµ¡]‚›ÂÃÃÛ·oÏ ¦,MÁ™²’¬têÔ)1ISp±t @!ЫW¯O?ýtóæÍx(V‹-µq² )&NœØ¤IÑ4M: ð‘Õ‹n%Y‰¥C%µžEFé–«›­¥jH _#L=# _æ k×®=bÄu‚ô×_Í­uëÖ5oÞ¼oß¾øÛ´ic]A‰ü[‰•WýÏJtåÀKüx´+Ô£I#ÂÅI6€ŸEÏýæ›oªŽ9røðáXÑÄ7kÖŒ¿ î°@ U|ky¬4‚+VRÕIÏ‘¾Ä4‡ Ôž¢!’¦‘›Š–TÀ?…”(¦¬TRåe¯ û)”K Šo!f¥*K}ÆÅãìMV­€â•ÐmQSaàgG:Jnë&r`ÄÑ#¸ÂÖ£t$öjáx†Í\…}RÇË…Š 4-+åÂÆ5öàÁƒ]Cú¿f¥üªW$g®bGlâУØ\zòäI>_ ãOŸ>Í 7£zœ¥×Ôæ‡…ç÷À *Ïfñ §0Š }&R LîÊUs“çèòš• ¨]é0ÒÁà&ºÚDÖª ñ°t<órÆYÉîm–ùmÚ´©wïÞFXÂ;€>€†m1À_ÁSà%žÀÅF—Ì34+Œ—ô¾êBIô+Ö(ÀA„Ó¯è`0”…Š>¾àä4FåÊ•ÁgÞ¼yO>ù$QJÁÍHå„ÃY I ¿sJ PHt±Šˆ€f¥‚“>Œ1Ñ‘à#úÑ£ø+”$‚’Y‰ÙaH›ššŠ¬€b£ˆ V +Aa8¹«e¥‚[¡bX‰•PÙH[÷gÉŸn#] ÞÍ‘üED:sæ WÂÅù3o¦z²À ÍÚÑ£G!¦Aƒ)Y ¬¨88HD$†r8ü„p lq¦*‹ÎLÉ"`%VBWŠŽÙŸxѯè0ÐWú¼ƒ_:”d(çTsgë¹Åù3‡æyµ2äšf{è˜+AOˆ ÐdìÆ•Ä$8Ëãæ)‘ÎII!`%VbŒÀ]ÿ#%}†÷Ò£¸ÒÇ¡;ñWn°’Í%`Aa¤h…Q- ‘kÔ¨&è 1)¡ ) ôœ¤”=§ôåê7š+±c„YKFŸ¡;IåѤ›áQº$D$ÍJ¢kSMb=ztÆ ëÔ©£ˆIÆkBFøÅiVR i  Y©€– >ãt!¢BFô"8ù¿"#<$è·Q VBÜ5kÖ|æ™gî»ï> êá*b"Hù‹G\ #¤ËWX4+Œ}F"Ñ‹‹øËUüx¸e¤$ )8Ñ€‹52LÍ`O£qãÆGŽY³f EèÔ4Dx99ýâ] ¢#`1Vúå—œ3a‹^â"=)ÝÆx%Hœ$‰¿HiÈC=öæÇ0h7ýýïg@é¿¥„ÙÜãdŸÜž@ÃKXŒ•JððéQÀ._ûÜøÛœ•äž{îáÊ)oX¶ß°aCHHÎVA-wˆºeÏôéÓU1ÅÿÄO¨í±+•ÔœK+É«Gåîò¸þbscõêÕ:u²Ca=-ãÂ… 1)©&ˆY[öFDDxšT Æ·Òêµ’šƒ Ôº÷]¹°…øÖ[oiáÑ-­[·f­L„#Wþè6²=­ÄJ•*U–=ëÉZ¥®V­Úõ×_Ï~]keÛ?¹EÝk+ÉO«V­øçí–x‹•X©zõê´¬:“|ü—4nÀº¶²¬I‰±m·1íh%Vbî™™Nw°gUY«Ô¢Z²Vžý–Û‡zˆQ›¼Žå]?ü°ß^m‰Y‰•ô–[nùòË/-¬Í3É4go:tÈæ8¸->£¶ž={²ç‡GæÜF¶a f%Vº?ŠÌ*Ó:,Y²Ä/³à;zôè!KIa% fß·YÖ¬ä[|íœzhh¨f%— Ën¹¢$eö†¥ðx$Ð%¦ÿjV²síû¶ìœP¶oß¾üÑ·¯±HêFê‘í“ï;*Uá±Hi|›MÍJ¾Å×Ω£Çe!err²A ìŠ #8HLMpEPB\"ÐÅŽæ&ë±R n:±yï*BñãââfÏžûAìd±1k'r«K—.‹-ÂÏÕ/nêÔ©r+##CB|ðAã.èÜiš3D(†«ÈGóÈÆãhœvBÛcSXB”•.Åbæ,‘re1VbÛ'&–Ø’îhô+Š3qô±­[·º$Å¢AVx¬X±‚p¸iÁ‚5Z¹rexxøºuëX~Ɉ‰g›4iB»²7oÞÜ´iS—tLþ—ü“C®0ÔƒV‚”ÃÂBÊüåØeþÊ~fn‰©ebâ 0yÖäôQö,ÆJ|6xàNøñ:Y¯#€¸4kÖ¬ÜÉŽ1bÈ!„£]áú·¿ý­[·n‹6êî»ïž2eÊsÏ='=±âšk®ÉÌÌLIIÉŽiCŒ”ÑÀGð¥ÀÊs×.aWLKŽY˜ƒ‡¿rG4a%;S¶© ÓÖ«ÛŒ%&&~þùçÓ¦Ms{Wš 'N°Êl÷îÝ7Þx£1olB±BlРk )c U«VeÅÓ¸qã°ǃâRíÚµ‰˜ÖïBI"%A:HI=ºÇT¼öÌÜ™ÑØ¼#ÿF]»§û¥LÒ¬9ìôËË\Å$˜ð%6m1}”1‹ÉJ €~AËJ>j ¾Hýks —ÄY©OÈøñã9z`À€Ò÷°öMFLøé§ŸðãáYBø‹ pŒíº$bοFJ’!¬„”AÇÆtýëõg%‘¸i^Rt¥ŠYÜb Êxò"¾%&ëÉJ´Ôë®»îÀ|iÍÙ(u®\`qÀwÜÁFa"uÍú#„ º+lRA·ýóÏ?ãGR` +1}jã:&éð*z\(I ÜУ!%U»¹tò´..R!¥ UÇöšÿõ¡¬3“¯½öZö£0ƒÉÊo{JLÖ“•¨QTK7n4a‹ÔYr‹óßQQQ£Fr¹KÈĉ%\”ßôCT…¬„² n¢—"IAI„¸¤`¶¿yQÄU£Z·”D)hÕÜ"ÂãqÑÇGbý·=%&ëÉJTá„ Ø ‡BÔlRç'/ÐæÞyç,õ¾ÿþûU”,hRè~¨QT Vr aPÃ&ûÜ"†zÊ ž¼( é/..ºöÁ3^È_ID =ŸLÛ»ÿ÷¤¤äJÛJLÖ“•hZµd†NèQ°µÈ4J"F4ò ‡ëBIñññFâ]1w+ ,JI>±±Qõj]U %Qv8‹huk–‡ÅP¥ÙVb²¤¬Ä Ùþƒ>Àº˜G}CG.A¨µ-Z`µcèСdcýúõßÿ½ âJ0W^yu^RóŒPÒ½ ®›2¾SþR’1¤Ö÷éÅ;>ùyöìT¿6”˜,ÉJT!³6輟þycuj¿É@í͉ L¨™<«…Ï^^”„°Ó­kãû*MZøÔTÌþƒ—dlû19eî 7Ü`7b²*+íØ±#::š™8U‹Úc öìÙƒ¸„ÞÚ¨`²DÎÝf27%1ìÂ=z4&¦kÓÆU&ŽÉ9èÅíãù>5t醌ÃÉÉs«T©b+b²¤^‰º¼÷Þ{iŸ|òIþõªïš –AΙ3‡ µ?þØlyó4?yQ;¢¢£#›=xcq(‰Ìðxó‡nìÖ­ C]–;ÙgVΪ¬Da.KM*{ÚžtüD eË–lmc[‰¥ {»¥$¸ã‡~€’Z7¯šðr‡âƒÍù˜ñkg¦~2wn„Î8V,:eHC9˳K`ØÊ°sçN Âù´AèÄ}ÀöíÛ±gòÑGaš«Lõë×÷õ=J?/JÂÜJTTD¯Çï< ™G -rB⻯ÏÚ1±„8P‰Éò¬DÕòe[\jjjѪY?e*;°î†µov™°òSp^â9tKI˜£JêßÀ~û-“^{ïµ7¶¡üÆpU@S °Òüå,õ´oßÞo-C¿È§ÀØxƒ›0$P¯^½GyDlT²q×§ïu›x^”ôÕW_1pØ·qÿÞ¹}Ðw¯NÛ”0yóÜyi·ÞzkàS °uÏž8Ncݰ¾«¾k‹6L™OVkÞ}÷]öÍ¡èå,lèéÑG¥7~gYqpË‹’¾øâ‹è¨Ègþù`ßøŠ“~‘Ÿ:ãý16¤Î]pûí·1+QµFø_¸pa‘«Y?hrØì*ôCa±èç#’‚’Ä¡ÛVêmnX°ƒ’žôp¯îK´é³2^÷ÞœÔùÕ3“h¾­»Ž)pX‰¶‚5¸aÆ•`Cѯö°zq¶­ˆÃ†û~kÕªÅê'qØ+fN.0Rö %BILÉ3ã¶ÿþnÑ]F mÖ#¶Q1_QüÇ“R>9z]ÊœyÌùÁM2+gib V¢‚ÙDÓœúÈ}HKÞrá¡w3X{üñ˜¤¤d *YËS`²õÁ™ôÈJ‘‘‘ìÿÄ S‰¬¾SÍB{Ì€ ÜÐ4a+ìqûí·ßØÉ„¦rÈÁoL m_Ü0Ç>Ü3 Úûw;><~_S/Ò’ÃѹctLÝ»ÇΘ1Ë8P°1YÛf@þmZaò˜¥w(A¹æYßµ3nuI²)éÒô¤)ŧ$‡ãì»É+±]wn¶s˰=ãÛ9¾HÞø£×aiWozb§=âPó3üÄ´€X 8(¿Eÿíõ—z7Á@f%âÀŸåË—£òDçPi™wáÓ©FJã$¢Kb·p÷î±I¯…wh“­?.®;þõØEމ±õkÝV¥Ö]Uî¨[»ß@ÇüI{Ž]šî™Kÿí_ûÖugM‰èÙ3Ž"°ŽO“°’ù‰)ÀY‰Je9Gý°ÖŽiã)ZMë§¼(‰ÿñÝ“_lÓ²¶W þåÆOö8š¶¬y…JížvŽ}+ÞÿþÏ¿TFzbÙ+/’S‘=õ´nQkÎô®ññÝÑ‘%&KS@­¢,°æ,XÀÆv{bfÀ¨,ðA! €’(—tT‘’+.ØVÙ»WÏÔQ5»ËÒ_ûîçQ=R§LÎñ ²%Ŧu_V2¶*”ß`†®mÛ¶:tÐG¤Á±§_d%6”ÀJPë’222 ¤ù³ºY’¨ÐG¹sÁìn}û<І GaM>ˆ³—¬¤:54}útææ8êk–¬(Wιü_ÅÐk" }~¡û¹\éLÅÊ61¹23Å_ægé¨D@JêÓ;>-9æáo·&nr½aóˆ¸9¯½6 ‹ ²%…"Sv–P|7”tMYI`ç;ÉzËiÓ¦mÚ´ ì̳tE¯!(Ù6 5°¸ÇÖ¶_ý•“l°ËÎ"lqÊoôà.Ï2BqÜ^ ž’ÁšSn8«üâ¹¼LéÔ™Ñh‹K¯¿}Å[ŸÆ?™¾s×n¾¾j/¬„óú»ŠŸ ­YIÁÇ^Ø?\ºt) ÙuîÜ™ÀTžŠ =ÅDI–9~ü8ÖH¸Š_¨G]Åóû￳ݟõlþ@’Å(;Ž%×â”ßèa¦ÆÁñý/|>c7$,x [N|Ÿž8`aJ¬id¥ó™™çJ•ñ `¹ xoÓð˜ä 'óѽòÊ+—À îæ¬Y)Zæ €•–,Y=íÚµ‹mœ=ÃcÎÊ3 ~ðˆp"åQá0\îýŠ+ÊÞêQWñ\uÕUþV+‰:  VùkË–-#G _0;¦YÓ;_øqÌ“3cþþÃÚµõc¾Îø®C‚¯Y·9¸§ áËŠD)ò¦q§Yɪ½í«œ”1¾ÿ·Ýv܄Ֆ1Ø£ÀpÃ*Å£7Ò÷De¿à„zÔUyÑÀ&B1ÊÃ_ û]ùðZ¥ìÆ|‚z(ä‹ $²’ ƒdÇ^“éÓ§¦¾Õê±ZƧ éÏ<¸¥|Ãwé_߉Íþ7WNþ¦bõ}ó¶Ö‰¯ÿζ»»…T»Â‘y|T÷ÕõFE¶©VÆ‘ùKÊ‹Kz¼¾ÛQóžÔIí#î¾»K¡•ßzáHÏlsK§¾,sÓ¤™Ûÿ„û ÙIDATbnó@«°ú½ÝâçöŒïÍ×AVb*[¶,Ú ðò©ðdZHÜ$šÇ îQê™Åš=NŠÃ·S8`û͘òá3Ëé¯nŽ#9ÓpÞD¾ðp‡ó3ÿ»x¸2¡_Á;F§Bèx(e(LÊ  rÆáˆ1äAüò—+Ø»6[jtHé“âQ~ú*ûr££c£zÎN™Õ¶•Ç )s6\ØJõóÑ#Ö:ÂZ/ûÇå‰Ãwýæ´¢”uzÓꃞéÔÆqvF؈>¿4]»eØïë×wl>üò݉!7UYr¢§±?RžžÄ,SO(iåê=1½ævëÇ9(R:#IˆÙªCåG³’‚¢°ú*ò0ÎøqôR‡YŒuëÖƉu°Ÿb–Øò‚›.œuÑÃhŸÑŽOwþW†–ІPîò 9Wåá/9„ᎥÇr$îšm0eDÒŸ~# á´-8€åÊkáá]b{Í9%²cÛzÅËØiG“ˆÓg~—èpäȖη?óàî>ï;~Ò¶)BÓ]íGŒøpÞú£!qUœo<¿á¥Ä‹êlø¢µ{ uî²µ|Õ§ÝûÌ'óÁY ì‹è¶)#N ΣÊã.™ Ó¬ä衎É,ð¤LˆIè){Ààä)åa@As‘¦“שÒÁ ™S)à@ý˜Šð‘0W@¦6Å!?†„†õ軀E§mƒxš»³gµ›ÝlP åì+¹JrŠTá ªdÛ¹`’òÔ¡§'ž¹}`ãë ;…¿xù'ñý†††©óueÆM†lÒ´(2N½ÎlÍJ~­¤$œ__©_–Ò-¢Cö…îª(‰:‚ú™˜CޏÑ1¤3ýüܹ?ÃC‹g_‰œ8 è׳9¤ó›3oYg3Ž*k?Ô$ø|ViÇv~uöÆ¿æä:(¸KïÐÆÕ «NZ´ôã^ÿ\Ô±c'²-Ÿ.‘Ê!Yš(&ŽòR|®y`SÂÁ&ÍV £¢_o¤sÒQ¥ÓŠˆDO†•оáèÛˆÀôó¾Ó¤X\`‚ÊÞêpìüøH¦ã¥/ÎÝèL.ø–[Ú9¿¶âPVðÿ=°³~«©ïþ˜C[Y§ÎÜXëºBê#É^Ÿ§Ò”¤ˆ žEVr—Š[Ÿ=¯e%ŸA«¶"(1‚†˜œÊ½ížø¹RFC:vê7hqVÖùèÂ%p‘L² Wúúþ)ÖŽ™T~¨ÃÑ‚r\Q¦”#ø¦ië"ª4w:í^xòŸwçìÊ<üutßÍíjW1 ÿ.¤uÉïÜ´í†,ƒ’È*dªBL0¬h3) ò  ã.yÞLôz%3Ն΋߀Œdzy†l8tÌ'àN:Å|%N6»à9tèв¥é ¯´íZÄc—¤|™¿þñ_G©Š×\:.Ëüßá_Ï– .W!ØãLò¼­ƒž]ÁH±Jb®—³¾|yˆ Y bBõDŒ3-1iYÉïý@¿ÐdÐ?%G pòÏösQ~~.‰©GLѨ º¦œåbÐUn¸”§òÏÍ…»Is>úüJ2Fö IINQɼ²’f¥ u«m‰ýSf?¹c·0(±‚óœI†H?þÏø¸Æn#û3ðÙϽðY2R‚’ â\¤$%‘û3«…—Dzbá“¶aÌ•+W4ãM4bö÷JCg)væäëÄùô6„ÅäEÆ‘™)™†Ch’i8ÑyËhH]!¦ÐNáÃ_Z=uÆæ’-Úë3ß'.RR>”$%“SjVòf»b‘÷øñãYàÏI™l£KHH uÚ7WvÉ;–*lXñæ+uZÞ@@ý—=Y•/1±Ç(44|ä+k&¿¾Ñï/J¯NÛ4âå·CBÂ`I5pË‹’)Å4?%E)lÅýŒ;8°É£(ì2á>¬n½õÖ &>|˜¯.›¶ißr÷´+I„˜¸ŠGz¯úkôKþB[7ß\uzÒ›¥Kýåþ{«ù9듦¼÷Êøõ:EÀ…¡$ŠCž-AI ©õJ^nNmÚ´‘Ò³=Müª5pÔ8á^~¥NÎKÐoEÇ$éÁ;x̼r…ÆNZ˜uîÜàÍsGóQȸÄu “7òêÊ•+ËD"’QJ’uÆ7²ª¡råÅd5+yÌì¤IºˆKÆ0µlü«ýfC€Þ››˜òÏdHhøøW³W~øhþ1½r÷ß×Nœ²¹sçH¶‚$%’f%¯4•<ákƽE‹………±_—£õ ãy‚eŽ…!&âàT~[__˜uöÜð!-U /S"ãä%19éè"Iö „˜^Ob(÷çÈg[ù¨L/Žyûõ¤ $lZ)>VJBw);fÔRI2f¡›Â-}õG{|„«‡Y1Œž‚æâ£Wèd½Ž€t ãÊoeNV~³æÛ¹ö;ûÂBpLÖ,]²(.êî—þ•£[ôb–žµ*iÎŽÐNFJn 0J4ÝI¼ØròLŠïß±Ñò¿5à™ÅËW}NRØV·%‰f¥ü†¾«ÈA /b¡Éx•Ê¡ü>wnÑ” aE±ß ôUo8ÖAQêmüŒÝPS¤”$@é'Eh0ú›"õˆ£ü2Pâ¯òà—p™¼cßYÕªÕß\õþç·iQSî8ïýÔ·×~.I(Iއp¡$öW2pcƒŽ
    :Â^_¡$d#!&Bt"D®ò JìÍ…­ð@F\qÄ‘G¼œ!‹$§WX¤¢t6-‹€pñ 7ñG™„¹m +Ù™’²1h,[ã:ã ½LÔÛFJ"¢Š•ðKˆJå³,jVò´:aÀ¥7qº %‰_ó‘à YIµ íÑø ¼XÉO¯7ýk4+™¾Št56Cà¢é)›\W# 0)š•LZ1:[Û" YɶU¯ ®0)š•LZ1:[Û" YɶU¯ ®0)š•LZ1:[Û" YɶU¯ ®0)š•LZ1:[Û" YɶU¯ ®0)š•LZ1:[Û" YɶU¯ ®0)š•LZ1:[Û" YɶU¯ ®0)š•LZ1:[Û" YɶU¯ ®0)ÿd$5,¨ß%TIEND®B`‚httpd-2.4.41/docs/manual/images/index.gif0000644000000000000500000000300410147723030016476 0ustar rootsrcGIF87ad 燇½½. ØØóóä +›""ýÜúúç„"ùa. ï\ __¹è°°.#ÿáøÇù··ííÞë77%Ýmm#FÙÙ&ôôú„.),'óQûûizÿ**``ççÿAN‘ÿlÈ .LL*ÿ‚‚õõêk-›ÿ†ZZ««üüø .§@šmŒÞ²²èè.!Ïÿä22hh"ŒLtñü¦2¥¥ÛÛööü† %%vv¨S‘‘ÇÇ ObøÝëü`ä ¡ÿžüø¶ ƒtyÿ33ººÕÕ øŽ0ppÁÁ÷÷)ÿMˆªãã.þþÄiÄn-F䨰_cc~~ÏÏêê 44úS&.."ÿà ø® ;;VVqqŒŒøø. =_þ„ý‹ ''BB““dŒÿÿ&ÝôØ`II°cššµµëë–9. Rf. {ÿPP. kk!F¼¼.rrÿ@ùù!µaø` **ÿ{^^ÊÊX3Õiú*^.ÿ.í‡ì†+ø,d @þH° Áƒ*\Ȱ¡ÃƒÇføò‹à°‰¾ü<Üȱ£ÃWÐÆ`d30ÑÄ ¤ÉÊWcÊœ9ÐÕ¶‰‰š`„`à´Ͼࡲ¬”À7Xâ¶jA=†,%1§G`£lÙhÜÙ ãœAQäÈQSéÖ&f«ø2ÂKÍ·p7ʘ"Á"0b¤FZÜ¿€ bÃH¯/Pl`mY!KGàÇvéRg`(vìž•*Á/^¨Ò êʤwš ®¡E‹@תɎ ]4(‚ BP¦Œ[Ãkà" N c›áÈc‚ƒõÈÀ"LÜÀ5Œe8%ßnð‚Þ¹þrÂ8‘@ ¸«?XÌDΈÈkX/“õø– ¤·Ê(†Ž8BÈ@ ÔÂA¡”¢ Aßüñ,° ŒWí „dI!lPˆ6ä`5é¤C XÐ'ãˆñÐN= „ϰÀ©ôâ;*5SNdJ1Iø`ŠU<ð@C3L6ƒ‰Aé„E:j¸à‚µä§å–\âwHžhÑå˜Å‚‘¤Ù¥ L´Í¡±‹Òpᢚ1Ð °ð‡Ã!qÃ,ƒç_Eð²ÂD%´ÄDDZˆ^c XÈÐe×@7èe"`s¥€‰AŽäé)"¾ÌÓ@ë}£*©p]s #.‘óA†Yñ ­mAhFbpQF}e0*±q‰ñI} ¤QÁ@ĈícÆ`$ t ™0>=ÃG—ˆBR>  Àd"o&î´cŽ tU6èdáïs\ -$€ŠQ„&ê– à‹$8ôË1ðÓ3!ØòƒxÕ1119))!JR{Z1R){!kRkcBB1RJJ{JkkRRRccc{{{¥Œ1½1çÿÿÆ)ÿ!ÿ9„c­c½{ÖBÿcœBÿBÖkÿkœŒÿ„ÿµïÎÿÞ”R”)ÿRÿ{ÿ„œœœÿŒœÆ­ÿçÎÿÎÎÿÿïïÿ”””¥¥¥ÿÿÿ!ù,X>ÿÀŸpH,ȤrÉl:ŸÐ¨tJ­Z¯Ø¬vËíz¿C xL.›Ïè´zÍn»ßp§Ï¯Ûïø¼~Ïïû­>>B==?UbŽ‘’“”I=?†P>œ•¦§¨©ª«‘= …˜ B›=b>¶L„‰¬ÅÆÇÈÉÊI¯Ò $ *#D΢½M¿Ëéêëìík=Ù$#  .xÐÀÈǃ„z1JÌw#JœHqHY P P­#< <À€ƒ Jp81`_‰[ß6õÊD¬ˆ¨rUÜɳ§ÏÿG¢â ‚„Q{ˆä áÀ¾} J @QcÁ  2L5´ÈÂ_¹Œd2'ìÛϳhÓª5ƒÉ+TÈURä¿ 4ìËpàäÔ'jÔ8Q`°„9,üÐø¬B6G‘`v­å˘33{ Ãˆ(0*­Ã€ OWÈ`k Áƒ äȱchsªÏS!!7' S³ñãÈ+^ü8à´Hw£ÙÝ@ÒïÔTY"ž=c:"è˜`C' pÎÉ'ŸO¿¾±M À íƒèµJ%=eBT°Å6Û·íÀƒÜ Ã È0à 7ðƒ ÿÜd c߈$–¨‡€`€ö§éÃÔ¬µ†‚X‡Õ ³ÍFÃm: ð ãa(à ÄP€’B|hN|&F)å”lX€Œt Mh hàÁŒ%d` ’™`n;8ÈCDF0à pʰd 1@.ð€“”ÉG埀j&€Á  €äe’ 0@•`€õHÃa=æðãƒpF`$2È@§1Àƒxèd.Å êê«°þà ê Ѐ*ÐAî5€b®6U `šÃ h:¸iªœ7„*€¨¤–z§ .¨Ê'!âíB±†+®q¾P`„àÿâ ` åH ´và¤U†˜<¦iÛ6xG$œ3T(j ˜êž©n_98±·Þz5+ñÄÁbo(på•ÀQ€túh°@¯ü 0iÛåP=FÀÃÌB{C6@ꜥâ‰í¶’ ½{¯ð&"ÅL7­Š•žÝ@ €€,üI#RhY~ÐÁ¢b–ÀUS½œɆ§ÃÌ3¼ °ÀG*1¼à Ø  ­p¨.)C6Ì 8ð@h´‰ÓŒ7I¹´*@@g$›ì€\Ö°›jOe0@&¿&Köž0ƒ4ø«ƒ âÁ)w¨2@@7ÁtãíÿÐAÃ@g„7t7žž(‰zͨçøñÈ×!JÌ#0À­¹¾xÀz¡tÀ»ÐqkSaÕ×TÅZjö8L0!Îqz:7ÏwšŠ7Â@ À tª/§„¤·„ T¡ Àl¦ÜTEIƒG/è øÉ€@ ¢áŠ@dîJ”¢ ’“œà(K™½h˜ÖÀ†È×$0Úà¦<®Ë™ëèú…ÙJÐPU-7ÝÀ¼{£wxp©ÿk* ¼r],Mˆ€ ä†`a€,%€ Àœ5x% “ðE*T)ÁjlÄ’Ó‘¯¢ëÚp0¤ àà_Ï Õ ^W7Ì`zÃ]‡"0¿ ClÒAùÖžÓå ¢“@8Gà-¤1‚ f  h€kØ@høc—ÿ”ÀF5¸Ña¶3$hâyP^¦¦¡/ZÏŠÖ ÌX§Ú oª4G^à¶iÉ w9“ùf°ƒÙà@v,AÌ Á Be„IÐäõ Šò\¼LP‚P°¡öš ²˜å p3M4€GIƒ A †u#§ †­T­O¨Ð… E$Hhuÿ4Ìͱº(\ ¦@¼ô@"®‚ú´q(¢€äšÃ€ 6 ÍŽUèE-‚pC²¨ øµÎõÁŒÖéÁvR>­3`nkÛÚhƦ™ÑÀ9Ø` J0M賂øÇ ±ŸÚ5\¾pÌ Ðä‡#ˆZÊ1§Ç£ÙìÀËšMJУÒ`HbgœäÎ@wï3ãµÖÕmé­B7ƒ–xˆdƒÇ¦él–Ì``°ãÖ™À)PñÀðÇ»ÚvJâ @Œy €ï*_ðñ¨©œ`ËRëBøXšQh:‹ÛìF΃a+ozë,JSêÂûµ‰H<˜ã<™©РG¸ÿNd²¸v ¨ëmçk¢9"PõľÏËŠÇ5ÓvÐFpÆ IÑ­êì®å>ÎBàÁÚõ¬›&ð:¹A«!ünê™|ÙQ0jæN[ØzàzÒ@Fjë“tºøÅ0ޱŒgLãÛøÆ8αŽwÌc>¥€,HAðc @tÛÁ¢U‹6 ¤É¹Xý6Ê•j~%…° ?7±®ûùÏ€´ ½g¿ h ZЂ<ÀA6€'Õ´ºxÒ¹ž¬œ\`­Í:8»^cÿ/‹pf£ÍŸ†Ë̃}Õfæ‘a`ÃZ0ô™$Þ€võ¢èŠÐÀ¶°‡MìbûØÇ.Z~Ü4à‹nÁ  hGn²1ˆ€”ÉèÂRÞN5æ²üJݶttf~ÈçòÉ4­ÌЬKkØHj*¯Z²\@YêÀ[ðŒì‚üàO¸ÂŽc"G;ÒŠnö@Àè¨`ÙÍvÀ:éd;.›”ÆÙr Â~Au<ª´†3ˆfÍFçÍ c³€cÙ°^ÑÄ¥­Ç$¦ÿ<¥·q½@‹TPg‚3üèHOºÒ—Îô Bžø *žL½"0€X°ÿ‚È"Ñï‰1—·Y€¶á¬Ãªg036k3X›Ë«æªÀ¦0‚Á;Îñ5:•d'ÑžJú]@×x Ñ›ÎøÆ;þñ?¸àHK<ÍAÕAðìP“¥eŸJ^ZÞÁQ´:hÚf–¦MÖÐÌi5íûazƒ80;ʹ¤P2ã{’(èzµ¦È¶ÑðšÇùæ;ÿùÐþŒ àpxÌ{bþ“†3œ¯'®jÜT±H›î´8XÀ À! -Sðîa˜¥)Ú× hÆ‚XB·î¾¨¶¦€gx(ÁÁ:ð:%²Õ5¦! F'}ÿXxMg+€` PuÀhœmCÖ €3­³Q1ô'oäS)¶dvÔT/Gn&°&¯Ñ=¤sMa h„¸KM¡„Å À€! ÌCg†Ò £}˜…Z¸…\lˆCy° `u) Ñæhͦ×lOWu1—A!v\ö‚,s07Y(PT°A:‚±XÑt\8 ø²s&p€±M¡>WøP|Ä^Âk^ˆbp%ž×…œØ‰žø‰2")‚‹æl mOÇhUçh‰u,M¾ub@x{Ñdk|8ÿ VÇ%(w(pˆ„È¥Ê ÿ‘#!¦á%ÿ†ˆ#0Úv ¸ÜØÞ4‡ ðcB¦h,ÀWŒ6mCfn9„øöHç9¢³‡¯!‡úVTaƒƒ FhAÆõ+? ˆü Z2Ì  Ñ1`…ß‘9‘I†_€y§è  ¢s`FXL¤ˆ¡qÆÅDÖ“’d€`2 ň*i=Œˆˆ¸ ,â<°+ÚX‘>ù“@ù°âè0MÇŸs¤6¤&ø¸s$y¼D=û€ˆü䄯È{¨a2 ÅKü$tèÂ. ”fy–ÿhù“=)à°Eu ÂEr ‘²`à[§ ÆÄ ·ž„¸T/†\‰‰KP™$y]%p™ˆˆ;°1!ó!œ¹1!š¢9šP7iyš¨‰–œF'¯T¸£RÔ63 Fd¦mä13î4o(Qk9€Ñ=Ý#&©op—d!ÿð €;ðFAð!¸"Ô ]w×i‚©¹Üé“«Y7°;@NDbQ wžç‰¸™?|RXš"½i„G‘RŸöÉÈ|“œ°œ@ÓœÏÂ1s‘hz ‰6yXØ Ú žX]¥žÿ®É'á$!¢·-œ„j2°–V@{²¸-ó‰@/ЏBÈ™œþ¹-j:ª:£4‘Ó¥Ná '剞>ec^ÂÁ¡¶æ fv4¡2¢àX–,ÄŸÅgLÐTÚ*Õ)š"°¥[jš5ú¥`ê|ÕrB“áN¢ä$ä9fj ^뉛Â!o=b¤dQwÄâ$L rPšœ²U¥Tz¥ZÔ‰b¦„Z¨Ž7¦³“¨áy$Bžo$›ú#’š:Ú(S§u˜š©…°¤À 4Y MyœüvéW¨Šªüá§0Z‡óª¯º‰†:«´:l²“¨³³¨á9ÿoÊ£á!c]T~ð7¬ ¢˜“q§|b¢û0ªÂ¢ÊÉœÎé¢XJµZ­ÖºpvB7&jÝZ0;“Q¡¿ cfæn 7ç©®£VÓTSÇ œ÷9¯ù©ûÉ€+Ê'- Ó*S5Ë‘ °p­{°{†Bº#«®ôNrbiz¡.v^õ„ñùyû§-#œø6œÂé÷ú¬ÿ­üú§€j‚Úu‡°,Û²7ö`c>jâz²*  mÚöb€\ØÄ¬à³>k—DK´úÚÍ;ð[G´–€PµRë¥.[µV{µX›µZ»µ\Ûµ^ûµ`¶b;¶d[¶f{¶h›¶j»¶lÛ¶n‹šA;httpd-2.4.41/docs/manual/images/caching_fig1.tr.png0000644000000000000500000002630411035423623020346 0ustar rootsrc‰PNG  IHDRX–“² ·îPLTEþþþ+++ÓÓÓÐÏÐ%&&MMMgghsssxƒ‘´´´®®®555»»¼õùýìôüâîüÜëüò÷üæðýÖèýÒæü¼Ùü³Õü£Ìü“Ãü”Áö£ÉöÃÝüÌâü¨Ïü™Çü¬ÑüÉüŽÀü~¸üu¬í[†¸”¹åÇàýоüƒºüt§äQz«fе—Àïzµûs²ûk­ûY‘Ô,Fe'>Yo°üm«öXŒÉ3Opcžã{³ôfªû€·ø‹»óŒ¹íyÆ1;G(6HZφ¹õp’¸X”Û‚¶ô“»ë£ÀãÔãôv°õƒ³ë…±å™¾é«ÁÚ–¥µ4L~±íƒ”¨4694AQŸÀç¦ÀÞ³ÁÒ½ÊÙæèêc§ùž¸×«½Ò­¼Í³¾ÊºÂ˽ÀÄÄÆÉŸ  g¨öºÜ¤ºÔ¶½Æ•—šx¯ðœ½ä£½ÛŒ´ã©¿Ù¯ÀÕµÁÍu‹¤Š¶ë‘·ã789Š¡»×ØÚìì츿ÈÜß㈷ðÎÑÔÓÖÚÜÜÜEFH£©°›ÁííñôëîñNRX>@B»ÅÑ·¸ºœ·Ös®óUUU¶·¹ÈÈÇÆÉËÜàå¾ÈÔ¥·Ì]]]ÄËÓŽ³Þ”µÜ´ÆÛäæép¯ùø÷÷{¯ì™·Ù¡¿á»¿Ä¢·ÐÃÌÖ•µÚ„¬Û­Ñwxx£Äëk¤èkˆ¬„—‡‡ˆeŠ´&'(IgŠ\šãSk‡IWhIOVO^qPr™Lb}Ox¨ kkky~ƒLpšw¦ßopp’†»Õòa¥ôccd»Øù›ÄõÊÎÒ‰©ÎÅÔæÖÜãµÉáÈÒÞ¶ÉßÊÕâÛãì¸Ëá¹×û©ÄãÒÞì¯æÞéöÈßù¼ÒìÁ×ðËÝóÕáï³ÍëäëóËÚìÛæó¡Æòèïø«Íô­Êì·ÐîÄÚó©ÇêÃÖë±Îñ¸ÏéµÒô¯°°¤§ª’¾óÏáö‹imq]`eøø÷ ‹‹‹ÿÿÿóóóÈÇÇ333†††ããä“””ÊÊÊ£££:::ÃÄÄDDD‡ˆˆøÎUé)‘IDATx^ìÖɪÃ0 …a½ÿ‹ÊÎÔáλ!Œ ÄJý`¢CDW‡¸Ò3`l$ÅÅÅ((Ök Ï«Z´íÙs;Ƴ¿·É÷ÆËš/ž»UilVÛ{úƒøÉ±±<=ÏÕ)Á³1ªjµ×Še%ˆ9îÅbÅ9+žîP¬âX±ÊH± â5¥…ìËöö¿Xñ í´¨‡-yvõ¯jÇsÝÆ¸ò{BšÍâ5R[‹ûþ>‡ëßuõu“ÓóýcÊyÊÓï"§æ!ëæûGžk<ô +Ééð¿\òb-ràŸ²Y†a°?{ÿ×¥žÒÝU2z)®Rð¤YùÒSÈ`Ì~¬±NMjÞa(M²«ù„’AÆß?ͧñJ߃‡µÀiàâH\â6Hó>¦ ßgûÓ_êïï!EÊÁ.« Â@´ÚøÿY,7¶›`‚ ) >Зᔂ¬.–ÅÂ?,VºÂND¨‡šÇ™ïÙ=%³–YýŸ‰Ú»÷ý ÿîÏþ¢¿´ÌÞ®°gÇ8‚0E;Þÿˆ€ÑÉVG‡÷Îð“¶éÇ(¼R,ç~<+VŽõp–-^_!ÂBX ,ڿºٹö§6Î+ÊÈã_Ò²B«J*R" mv7ÍnZÉ(I€+‰´´1„èIõhH…¹”Ú´Žq'¶UÇ!¯öß«ú@3šQ‹ì=ß'Ø`—‡ÊHŸ24vrç~gÏ=÷Ü+¬Ó¡»{ÝÓVëO×Çê«{ºŒÕž§{ºÀêž.°º§ ¬.°º§ ,A0ûL¦>£ÐnD£Ùl1™mˆA›Øí ’h4Ymö~dzÏ}Ë,´¬Ì§}`ÐñœÓ,¶U`ôÑbµ õ;†]Æz<9xàœN›Í>4ìp¹ŸáÍÒ÷‡Ð¬Î›"ûöw¾ûb»D†çÐl² k”5IrÛºÀÒ+Ÿ("=VJΠË-+ìõÒ÷^~É5d9÷ò‚Ð,NPè˜$+ªªi¯¼üýŒ ™Î›¥ŠßÁÝå–(gt4¯Mì–½'Îêd,åpº%MõùéÒ¸ÿÕ×^ÿ¡â²‰çKTÚ 1(¡Š"“Ý—ýo¼þò›²Ëv¾ P ´¤@Sc,6E‘&Æ'=W~$t:c‘B7ƒÅ9OIŠOUeMÁgêÊ[?~í'¯øä~ç9èdiô>‹d@D¥Ô#óNÙOöö›Š<ŒÈÎáˆâ^Úú)mŠª¨²¬Ó^¿çêÌ[³ïÌux)Œû’dbqõ]EÆw5‰Æ¢ñÄüϽþF é2Ÿ‹F¤M© Q¨¡M¥Ò‘X&“Hüâ›o¿úˤÔo΃¨ú¶a»¬!4Uºì÷dXlñD¢R-wèÚŒ`Œ Â¸ ZØ#çõC‹žìÌR.ŸØMìîVjµg½ö«FÅð ‰^ÕetW¬ö©- -¯\‰äâ Šl·vá?¿~û7Ù˜Ít¦¡±´9FÞe9àõ†B‹Ù+oåf½‡º$‚”¬hª¢M‡^ŸYŠfò,k@•¡X­n”;lÑÏH¥oÄN÷öU<îñ¤ÒéhŒÒÓK¹Y7 9sÕÂæÎŽáüÆÍ•@R²ˆ-çÐzûàrɲJ¡I¬¾PíËÍfÀ¡)Ã*…Æ"Û}tñýø­d–ØzCÖbEÚ¡Ñ)4ÄvyÜïI…Ñ\  "D­ŠEÚN¹|â Ò¯›˜è ;)U!.Ø Ø$Ïש Rc<…ìÔX½ýèOëÑæsÙÌ­UÂÐèÐÁè¬(6jÖüÄ¡³ñÞ½ØU„©zh~tûCnQ#hZ‰)nÁPY–(4¡iï2iô\>ŽÐ*<¶bu® #ªc€%¦ §Ünè)Ÿ&»Ç'³WÒÑh,‡jîàÞpÊû *Þ¾X¹óá­iEv­1«Å>ÜÛਪ€ .OeÑ¢Ô=àêR«E„V(ßЯ®öÞÝê½Èý¤ÏmkÕl@$‚‡º‰§(oŒ¨ž ‡£Ñ|<ÅU‘DðOZçK ¢âöÃ$:4zvfa6VOÍ^aæÀëv­°1[ÚòÉ †¦‡ÆÊ™ nhJ ´P);ó—XU™3(n®‘ *ïÝ-Šñ[Óš<Ø(MÜèp1¼Ëð9‚!Æ¡R ic±fƒô묲@ÊeÄÞLáhc—ǧ¨µŠe8P-›Q“ƪ s둦ŽÚMe*X,4¡},»Ç&§®DrLó΢…B{XÉÀªö ³¥çy°Ohª™N©Å6„¾éÒ˜òÊL.šéÍðØ ö6Šë@hÁXobPddŸ]°\ /,-‰3Íb θCŸ80ÖECÏNõÃ…O4Íam²3ï!puIU¥ž4´’¢Øfó(ˬ_Gh„ªÍrÏ!ÁÕ¬êzdQSÜvK3{ˆxTp‹éH^ÿri;•FÚÚk«õØ6umg`5žSïnU9ÜŒ¨>Þò®M}º”†ÜÌWˆ§ ”ލ§f¥°§\؈ooù¤!k“z+éôQÜ›¬)Tb&³3¹8g‚ C® ·ö”›°îôôܨΧ§£¦õ”5Y…Í¿EN‡çÓ™|Ü>ÏÓÆËrK>LÑþÀMNÊŸtw>M÷gÓ$Óã×>£›3àÚæ6wŽ&6Q /öæ ‘Å-Å=tÚë3š¬÷ƒ™îKÊÒø‹ÙðGÔ@d*BÔ1úõÚ£»EúR(~†Ïæ4ž~o¼tI…Lwû'S颈=–6´} iëÆá¨Sýs!;ªæ L/“Ÿ0{)á {Ù9zj,0ö{颜æúøæ¬OÖ_A #4Ð+~†"5¥›G­rñn•¾<œ3äï|Ò€E8ÍôÈ„öø0j€²¶;¡Á âMéC=¶Îô°‰·² ›jmò*lOf'@¤‡ƒ Ž“ŸU¬òb¼D6i¿U8á–ñÁE½ç¿žŠDYd ƒ"¯ËÇ!.Þùê‘ûšÏm7 'õûÍÖºR×ôžçúB4šà’ "½@FúIUzùë,,—Ôg!˜­­…JÛ ‘ÙkàÃþÍñà ,œ¹%Ã\œ*fÌ ’%/ÍüJ)¡Ä€ ªÔ^m?4Ø ünP 5Õq¢q&²fç›Tš,M,/®¤"QZªºR=€Nc,Adý1ª ˜j‚šcâÊÎ<5Æ ªˆêX¥ÄPKO'‡M<þâ¼Ó>ì¨äÖ®.äØ`m~žÙÕÜé8Á©q`M ùÜ,‹pü‡xY“1-¥!ÄB,ß›ˆïu7Ð ˆ­SÙIpK Óœ¹kŽk†êœî-ž„ÈWïÖUÞ)Æ·§}ò𱊡`D•W¥Reö¤Òð¬{1ôã#þ„vC=ÊÑûšŠÑÎ1[¾êSešlaêÇÃÈzˆ‚Nð ,èN'¸ éѰG;³©*ÜQhÈõÉ áz×wäbÈ\À;þBY~—N}èwìêרÖ%ìT+ì9ØÜ´r7fx”ͺÑà,ìM! t?¡#% ¢ŽILKÄ *ðÞµ7X@V{XFG©€={¡Á­šðWÅó½ÌRàÃÚÓt…Žï7i´Änñˆ£Õ†<ê÷@ª37LµYÆ:X‚™²0Ѽ÷W¨&X‘älÎC§‹w®’o¦¦UÒ2âQöRyhªàb)EU â5¦)צ‹w`¾P¼Y (Òê´ª¢PV¨8{C‹ÛéXfqÏ•máiƒ6©ªdRZ›š‰ÖG£uÍ©Ÿf1(k#ÆŠáÓµŒH„`¨"„µl:¦GÖD1ÌíM1Ú‘P§ŸÞJÔÓ¦(ÉÀÄäÕH¾>ù£òÇŒþ–žöŸŠÜxÁSwiͳýyZ½RãögSÓƒY¡ž…µÈÿÛSûØdY"ÄKZ:Â¥¹É|ç]ÖNõ‹ô4…öÔA9¼uJ›‚ÕOéV$‡î”eMŸûu0°D>yçF#‰õY’U¼?žk¾èÔK!Îâ;˜Ÿ [ŧª Ûp^Rë‘ ›)·@ë]¡.³¾¤:}ø œVtF(m*ÛR÷g—`ñ¡¨Vu£ª£etÚ™x‘.ùIvf2ñ]ë°‡™"n-°„ÂÍO÷€éý2Ò•Ýk“ÔGÄX,î »[ ¬2…F³yà™EÒZ M•/ù³áhìZïgŒG‘µóüdb¹=€%`¼<ì"ezR´WÅwLXlMŠ(…úª_ðbh~’b·ÙnÕ'{©{_ªjë-ìÝ+oX:›>¨¥±56ô™…%Õ~y Ë‹ÔãdõŠl–…vÿ­Ég±m…"hw` ¸5á‰d°®j©AÌÅ»~ wîÝ¢b8èo&úlÔÀS ô§¢$Í×hŤ%,Ú(Þ÷F;é`RqÁshPìl(!{=K,¶Ê:Q<­ ,C¤Š‘žÐv:z |À`Zšºó®ŸÂêÍÒ–*õ÷‰ vû  ¶ÐÚJ8’gîµnyœ °à9äK^€^8h°ÃO#Xy—©•¸†oéuÏ{}Û9äb› Ál$.oµCÜØò™!ö”“(†ºb'ȻդBv*Çç5Zš>+Ô‘U]§åü¤l7 _I›Õî’|Ie+èIǰЧ@X óa’Åh“ÑÔ:sÖ[¯tñ®# Ëòþ4Z4;í(4¾ÀÚ ù žBk5®ø>ÖÁs£J[c[ä9˜÷aE$/q¶ŠPªö+`XÔÃcäæS¶¦CÛÔÁW úSwöÀê)lÜÜfÅPàDjt+ª­„£„ø ņ)à•B>(Óh‡Ë,n˸U"ÒP6MT8¬Úö÷¼Ÿ[Ùǰ¸ç¤9z ÞúÙ•BäÚI*£är‹fÔgYMüž4í‚V¸»ÞâÓ8+Ô øÕü¶¦ÈCN£‰~H«¤×Žf¸%³ßåtK´8‡Øn`ù>“ž†"Åç,Tœ/ÂAL£öÖmy¿dlµz§ºyV¡ñYaCh…õÙû[ÊXÿÛS|RгMÚ¡‚EÐ}"íKÑ(+˜2û2 ¸ œÎXŠ¡æSƒÌþßZËFÐÂóy?çR qïÑ>¢OdŸO S„ø ŶƒØÚXe¼ð/ý+~ÂWöNý§½÷¾¾ðÏ<þ·B²»5—.—èã"½ó|Ú@ÿcÿïÆWc ú·‡ý7öðÞ2ÐV)²ñ åÂ…è_ŸW“”äÇÓ+éèû½¬Ðlˆ¥!/ 9)³oŸ'~ä?žCÎXí@~ Åøß>Ñ|ØÖÑü¥Ï)m» yàª1;÷vh¾Ê ï7Þ¡žØÇóèù±T³Ò0„-laëˆgOÉÅC÷*}Œ^æ’c@¼ÄÃz0‘ÚÖ¤ýѧ’„¥¥Eo&,ftl)¡·3;ûÍ·[?,–ÜT±.ÿ_¸Ìm ÈL ÒÜv{§'÷Jzýp04œsSßhª¤N /"•Bùàk„‚—»„giœÐ“JËÇR›qx‹e@ìôÅ"¥:Á¦kR'®òÖæ£l°¸ÆéK_)ÿÌ á‰µmŸí¸¬ëõøIÕ·ƒޝ÷?¬×û{¤ ZSv‘ùÎHºã<׺}'Ø!bµXl»qëòi’¹ît–ë¸mÄa”m7WDùxêγ‰Öqü.Röü¿ƒÓÆ^®>™µbÖb(,‡íz'ÁQìZ\ú:6›ƒ`[è ¥´‡s(w.:tp6‹£Úæì/jTžr6¾Í»@¡„+—¥œß^’——ïAøѸ±‘¢„´Z  :Ô>(±`2šׯÜ×B8_G·§€z€¿òƒ êxüiÌBöMõ c6óIÇ"·7—6—@Ù'™%ˆ™¡·rœ-˜2€‚-ÆH‡øCI›Í“êA5+¨Ï;Rú;2Ï744–µøW8Žlœ³YÙ}?­¶Ÿ®-q„²8%ÞÁ2Î{X¹þ@FZ¹‰­gÄôV†èç…xè6{—Ï}yÇ:*–¢OMçÏÍV$=CU¼cïjzÛ¨¢he”í›Äާö‰c[¡Îbæ-2³ÕØBš%ÆvbëáŠÊUÄ"Q¥ÄHé&ŽŠÈwªø¬€¶I)ðSx ¨dÉ¢Y2Sº€N°\Ï3Ïöœ»ÍÊÑѽçžsî›k’ªî÷«jó p»´mëù§ß¶®þË‘ ­¿3`Gø&ô¿*Žß ô0»µT¶ÕÐ5Uò€µ}5°8_kÉrÝÜ^¡KÃmå]ÿ6+¤NkÔ0k;K•õ–¤Ì¬[Çr—ÓÍôsá®s}K±íxÙ“b¹í!$ 2%°St[QÂ3Ú<3>)¬Ø¸’o™®z–¼Q`¹Ï¾Õ¨F©µwºü"Ðq X:–ßÒ D‰½ƒ%»]åa§©°Ð±ì#—$¥fîôö‹õ{]ç¸ò.¡À±z-b_J¼¯Šåç]„0 ·GX¼ïÀ"ÁÉxRgÔƒÏWÅPÀ±,RçÌÚéR% Uußúv+äÃ? Ë76ÇIKÅ’ûüKBc ¸òеoÝ.·›kR·A>:[!È»sÎò¬ZuÙƒPá§­°} ´sW̰ÎÖÞí'AÞŸ¡cu.EY0­Ý­R%PwmƒHÁ±z¬`8ªÖÞŽ}¢Ôì¬àr‹Ä"š1wæx8or¦ Žõà^aG×9žžO}µãlƒo+kÌOä¼¹“̰\±—¼‚WŽE5¡Va% Yíü½Â¬6Fa§rtž}|²ÒÎó.¨¶BŽ Ÿ7a4ªg¬ZiÝs¿’,t,>0ÀR™»Åv/o´@ EÇú¯šˆèófn§Ò¼/e´ AÊGXÎBH\á³Õ.tŒBºÛÖõmX…òFË+ ä½÷…0A©u2¸B—ʱ cõœÀŠê†¹·"r!Ä•€¥Ä":mœ•¾p\] ÕCqYip2’dZµ]_ðV]—MFËÃB¨eŒ\µRï}!„Wx `¹ÂÔÈn-o¸ŽGB åR¶B‹„ÔD†9γ@\á®w…Á·:;¶Â/¸Â(CÇz}!¤¬±Wl7=%°yÇ•Îk á´FÍZ©-úÎKþ(ä^xt,¯ aÜq‹•.Uɽl`ñ¡Vp<ž¦F¶ê,„ òXÛèXÿtç3VUäBˆ»BD“‰¢F)³öV бœ(23÷>h»BÈ iÏŒMë4U+9Bƒ…+Þ`'ãZ¦a/„=;Ï2ïî"ñ$5sÕe/¸°À±ÜѾeÙÂr ¿ ` 3¡,Žh†uV^õ@Ü%}¤É‡‹ °Hè»wRÇBÈ Ð±ÜƒðûÔ7_/=j‰œƒx £p"¾0÷xÇv €%Nn°H8ј{|; ,ŠŒç¸‘ywJQ5–*<ÊsQÀâ:–|›y,wX†²…÷î %îàXèXŽùܘ}2`‘>4Àâî åo…¼ `Íh̺{.¯añÑ»+|Že»„ Êr‹}a'xƒT~qIÀ ©If¾¿!Z‚Žåóó/›ÖÜÅèIËçÀ ªIj~ôäÿÒ°¸?¢ÉØ I(®3k¿.Wȼ#¥Ä¢Ô¨}™ ,ŒBt¬P<ͬ›ç^°Å]¡0‹°Èˆu‘JÝ1 áU-cÜz*WÞ %“S:³~h íÁàXøt¯¢FÔì³¼h óîói(¢Sëî›–ÈÂûXÁð fÔïX" :VHMḟB©;€òNb3º‘½hX ïB½Â š¦“'}¸}Æ]¡¯u,eJÿð¸x.ƒañ—øùJG™Œ2£Ö—„VÇ|ü¢ßÄõ4;¾#Ô&”¯¼Ë7Þ@Þc ýp÷'ï¹KŸ‡Wæ]ú°8QµŒY}º)rÂ+„¥CÆ#:Ëî7=7, [¡ûšðY~ ï—¾õ ǧ4#{ë\¨MˆŽ…­ð(œ ‡³‹®†å7å]ìïyçã?§3‡›C”ÅÃk|x€E½‘½hɤîú‰/.Û+TÔ4MÝyv_hSÂ1¶ÂPä AÞñMhçšððÝaº&äÃ0 ‘ ]O²ÔM‘Zƒü­ð/öΧµ‰ ã¥%ךÆIªFÒbô°;‡Ì!‹^ IÚž<™êq/Õ7%SÐÓŠD„*­‚?G[èJi55iüúi=º9z*È»ì¸ûì7Xø1ï»ûð{æk8Lè¿mBËswýªµŒBMÁÒzª€ÀbÜ*îïv`¬ç‰H6úm–í[¯ZÔ– aê V,…UÆó¶WܦXݱcýs?–ŠXãËsööiï%XÈ ³ù²ã6HWw€…¬Ð`ܲ½:Ié¨Ò,€¥Bë|F†iRð¬'Xôå¶ê…Éô5±àÛ„“P¯P°Ðè71%Ês ñ»AÿÖdEÝ6“vøß×\°T,³ÂTúŠœ­·iåD:È ³“Òs·ôˆ ¼BMÀ‚Wȸ)ü˜ô“'¼Â¡MhWn·H!À‚WÈ.å¥WÛú‚„Ðqó SS®Ô;áÛ„*J£¤ÆÕ’”K Z‡‘–wÆ­3lBŒBz°Tä«"TFHß&$}S€…RÆó¢PÜ!XÝõñ cþU¨´…,g:šeÒ·LÒëÒv_ÐÆ„…ð “37y÷ñ£È€ÕާW¨t‹u«Îõ&mé(F!²B5±Vu »Ä¥£ Yá¹tÅ)Xر¦.šrî턆L¬ÐÈ®›³µž°àÒîXÝ Vå^€…¬O‹Êû~¤Fá³_º‚µŸå]qSVرÐ6C›iKL h€Wˆ¶#'ìÒgâ˾é +d9qçFÿI”N¬Dø£ð{gÐÓ6Äq7[´Õì„$„$-]ÊJ„‹ý.ï4¹D*‚ŠÃáš/°‡"m%ª†SP/\6ìué7ØÞ¨ÈµZUM %¡”–î)Ý¥.¢[ÚÛš¨²ÞZ&àØÎ{3RpìØ’šýgÞ<†j…ä¬` ¡L⥳ës`7”tÄà •q”jÇ `I‘k¸´Y÷ÒÏ: agŠÓé,X£qTjHÎâ¡j…áÕNoÙ€EºÊ›ü»—Î]~j…¡X¾|ëU‘)µø¿KUUý›@}Ÿý/ô úÑ ,n”÷PC.çžQ`±¸_!– ´Ë´Ëñät+X‘M¥4¾Ýݽ ÄB ¥°h‘¡¶L;7…çõ»ªƒcœ›oWO:,•{¹D+ ¾·±Ô‰·í²Ùƒ¥c` £Ÿë÷µÎ©Gè猇5ã!’Ó•Âòëu‘“PHQbx óùW Z¦_78ÒP-Á‚¤£y¤¼ø…°h”‹òHúG?Ñ¢Y4_o¬÷õ¼ŽÌÈ+uâ–ç¡Ðä–¨ËH¾ŒûèKµxÎ –~çK¼"gäm—¶9”eEšÉ¯í ̇BªûÀãØc‘pLÁÙ‰%«;‹Ðįʻù^ÁãQ"°žcÑ`Y ë_¦Sñ6xä]y£ÃJ©2!°V  °(‚èËír¡PªVÊ“÷žr –YŽ:AYˆW ¡^8)´«fþÔÉ;7`­f•ôk.ÁRUÊ'ÑÊ]c4 óæR•÷p¾3…˗Hq ͇ÉcQ`™)4É_>…İ2Î>«~CáW6,º^Œàg –ñ¼ac…“ ÊíÔµÖÖÚƒepcN–ô£)ÒQ×M`éÏŸ¬^Àº†På‰$p)7¨¶}Y°˜â¬:V8ŽÐæã"‡`Ùšz®@Ç ^Ï Æô’À¼òîèÚSÚ”È9ÁšÁ"a ¬À¢_ÁzÏÍ*àõGÞ, \{,*J:Qžã¼KŒ¦=Xm|"ë`ÙgZ-2ÍÚõ “ré~°‚«cø×çD`Ën;-ªëwŸ‘¬œÌ %‘!ÿ´-p ©7ÖõC³æuçrŸ“¤b49Y_cÐcÚ‹K­ë‡Æu+ƒ¡ b5¡LN­  Í nôs°Øj›!N†Bq «¤—' ÇÒ1QcU˜¶ zÞûWoàôÖs9V›¡Ð6tý& t,K°b ºù¶Æjò¾?íô"õØÎ]>öÍsÔÕÿ=F©yú{H‡•÷éo/\òMóyoa–Ÿ¶i¡ìF‘ÍPø¼×\ô X=Íæâ,7Ehi0“©LŽ&ïÄ£PxÔÛlþsÙ7°÷]<&‹%‡3¸Rë‚R!i¬5q¸÷ˆø'Lw¨‘ÕÇXR$ŽJÉ:aOÇútw¯¹·pà+æû~×ÞÄ'.B¡t5^ÐÀbfâšÖ±€wé`¿e³­ƒíw³Í[ÿ×–÷ÏÒOµ>—5'ºç¥Ç"nÕ ¥Taò…$°ç±šš]èõ›óz,Ò +´;Vøq…=°æz›þ´½C.BáÓ¡œ[)vÞÕ×K:µëËe_ÙoÚÛXà#yVäòøN?ƒ¡°§OÓü5$k®Wãê%b VBQ¦¼ÔGIçæ¼hïñ󴸚}¨quÀɺÂj ã×ëK,z¬€Ö^Þl~ðÏ@¹Ÿ›Í œôc‘ꂼõ²kÀ"íµÍÜÖ´nÿ(rS+3éW5Q`´ÑïËE•t޾¼ãgÁê€2#?/Õ~¬¹@›¡f'Àê)™‘57&ÃF˜\x¬p ¡|—÷%ËPè•Á#18¨à\ÔM `Î{G=ñǺB12ˆð¸Ã ï ÁcIÕ8þÁݹ¶cqÖj¢œ^1äXÞƒµ›G·¶j,‚{éxY+ 7FPîmÀ²3Vçc‘y¬ð°‚ÆwŠ–³ït¬`¢Œ§6$ËYƒ+”ðb®-äXìƒ5–AI}®-ssÞ½2ðX‘±™ò›yrƒ£sÞ¥èXFÙݰœ5˜ó.])¤·å ”wØVŽd|Ó~ü(a`λ›ó±"1çÖœ<èXäjR)X„B±ZQJSî7Í@òÎ:XWR8½<«{r,ÒÆÞÕË£›[/Ýý× ÍþÎ⮌î8=×B!„BiHAÙyËaƒä=‰Qö ›`Íù¸‹}5Œf÷!ywÖ@Ç ÇQf³Æ@E‡@ÚO`-…â™BòD$„PH ëÜÝ R4^(5ÜnåùZa}ô:ž|SôM<ã¬ûÌ—tBhsmwE—ùF¿žÆÒÖž½Ï; å½£É;ñàÍÙ{¬hR.åv\÷ë¡°šPJS"€«t+«àåuXÿ±w÷ª CQÀƒÒ5Ñ#Zµ‹.ñ,ÔNRú®}ºYtS\|¡:9HÁb@#D,¸xýhAíXòWîõxî3ürnNþœ“„¬>ú®Ð¬BðÏ^‚ÅõPW¨šXK—I‹]×\!e…‰býaÜÄU±(ÒKO@½òõC°¸öçKÕ2ðòøÄ$‡…qU$î¬P°>‘Â?WÈ$ØÝÀDT,ÝÈBwU°V¬;1°è*ÔÒIè¶]åö>7PWÈ. ë=e—ü.X4 -~iì;Ïþ -, Y!»Æ«0âàuÂ]…”÷Ô>4̰D<ù”Ž Î¢ƒÖ‘²B!°rÓgXôŽEYa<_¶½¡*;¬öÎß§‘#ŠãèNiwX›µ1Ë Ÿ-a»ñL3Å.¦AÙ§+(CëÀEšH‰B*£4©LOþ йI%ÑÙ8îâ‹-¤L~J‘P’2Ahä•7?äøåÆžû>Ë ^MÁGoÞ|gÞ›ÿì± ¤Ð±¼üž ¯k‹,€U:‘Çz&Ä R*-y……üɧģ!Ky…,U–Agþ€A©H5Ó`)7Ëå£«ÛÆõõÝm×ú÷h~Æ{'}oLßW;æÛc¡>–ãù¼¹y¥bHD ‹÷Ä?7Ñ{ögé`¯Ð)dx°^Õ@üùu÷¸ó^‘g èߣÈèv´;þÞBdœÑp£ø|“`AnH¤*<8ªF¦ÂñoÝ$U”+Ýþ[°bcéæ­é6ò ç¬aQ¾Ù?ÿ°bÿðm1Gö¯žN75¡¤`ÜÄ¿¾U!¢òa/êiâ`ýe¬¤z,Ýÿÿ‚¥Pmf*SÓƒåsQéö"«·(Pc1ÖØsä°¢(è¶šbïéþ(azÈhÛþ:ï6{¬e!¾ùbßjôf‚we›òž\a›º®-R¬ “™Pø=›Ášá¢ 6 ¤n&”þ… G °löXÌË…ÍËù±ÔT[:X*r° Åz@]~1N.¦Jr÷8°HõÜLá¸Ù’lœ*€EkX.ùåæÎ Çà|NoØ+TFu,}goíñ­Ç Rì:…Ž>X¸a•,ÕÙ’A¿J;t,¬ TI–çÞ¼SƒU ·©ïìÅT°Xš‡[g?)L…¤†¼B–åõbõÐ:šp_!½© <–Jf…\©*€Ej¨6ã,- Ùî÷Z›þ•x°&šG.íH¸ý y…l5#‚þÀ¢5È ,]”ÛŸ/Ξ{%˶{5ë`%/7Zç Ë Xöz,×/ËÍû‹ÖÖÓ6o=¶-÷Ëü}…È+\Êq©ëÚ’äï^QðË_Jô °Ô+ÖF(ÉëÚByÇ}…6öøñ¾2íyÆ'¸¯ÐÆà]™ñXl5§–eA›¿¯Y:,U·;ŠkdBCnpÓåzãjÁn»÷ŠdB«ÙÙ+TÞ2oV<ËÁzk†c,Ku,§ÐæÍâL (ïбØê ¯ƒ1VbXlŸœÃcѪ&³l^nzËØ^¡­S¡ˆJ—ø4”wèX[r‡úÐ b,ÄXÉŒíªA°Wø‹•{…‹¹°þåù!¦BZÃy,7·'ü™<Û æ,èX ¯x[×V!Æ"5ÄX¬P kC¶¹ÁØ^¡y…nªTŽÍ…XËNK-¥óòuÁd€Ë»­kû•c?X7^&X…6o­ŸÑ‚…àÝ鬈à]Ây…TÚt¬'[¢Ö7X0y…v*ïêã²(ô¡$S ý‹j*Ls‘ï¾nìÚVV†[Ôut,gY„ÅO‰“ ± ‹=áJU)€EiwMÈöSÚA°*Ä™wæed³M\~ gÞY!'k>ƒÇB^!­Ž•|R»Ïˆ=ö 1ºÃ¼l ƒ…½B Áòór³;õT :ÖÜÒ=„ `Ý ³1á<\eÏ`Íì¶ã†Ðr: Oàö7bc¢”ânlˆ‘ ¾æÍ¼L9ÛcajU])DÝ´4zCfæê?ê_ÜlnóÙÞÝÝþ6÷ …ö>VÏÀâIˆ|Bô¸BH­ ;Nôþ;/6¦9„_‹÷Â~£Ã`uì±½‰Ç‹¿Ô;H¦8”Då{´fjKmVXcòáÓIöŸ8Žx "¼Ÿõ(½·õêû4µ=ùZæ¤c•yÇ’jv,PXëg t,ðÆ:xw@†NY¼x®êâè.ƒ?PÄ…6m¡õް묱 Õ‘Ç”_úc“ç9ßÞ-Uú~•ýïOÿïs 1Trå×ûãJ¥ý›˜øÛ䆔މ"wž%¿öË#>½æÏ. Jºí]vë}êOßÿûŸ?coH†Ù?µ9ÛJ8ã£Lîê‚ÞIEND®B`‚httpd-2.4.41/docs/manual/images/caching_fig1.gif0000644000000000000500000004020310302702336017672 0ustar rootsrcGIF89aX–÷ÿ  %&&+++&'(555469:::7894L(6H'>Y1;G>@B=CK4AQ,Fe3OpDDDEFHMMMNRXUUU]]]IOVIWhO^q]`eLb}ccdkkkgghimqoppssswxxIgŠLpšSk‡Pr™Ox¨Qz«L¼y~ƒ[†¸xƒ‘kˆ¬eŠ´fеu‹¤p’¸XŒÉX”ÛY‘ÔZÏ\šã`—×yÆcžãw¦ßk¤èa¥ôg¨öfªûm«ök­ûc§ùo°üu¬í{¯ìt§äs®óp¯ùx¯ð~±ív°õs²û{³ôzµû~¸ü†††‡ˆˆ‹‹‹‡‡ˆ„—’†“””•—šƒ”¨œž¡ Š¡»Ÿ  –¥µ£££®®®¤§ª¯°°´´´·¸º»»¼¶·¹£©°‰©Î„¬ÛŽ³Þ”µÜœ·Ö™·Ùž¸×ºÜ•µÚ­Ñ…±åƒ³ëŒ´ãŠ¶ëŒ¹í‚¶ô€·ø†¹õƒºü‹»óоüˆ·ð‘·ã”¹å“»ëœ½ä™¾é’¾ó¿ø¯æ­¼Í¥·Ì¤ºÔ£½Û«½Ò©¿Ù¢·Ð¶½Æ³¾Ê»¿Ä¸¿È±¿Ð¡¿áŽÀüŸÀç›Áí—Àï”Áö“Ãü›Äõ™ÇüÉü¦ÀÞ¯ÀÕ«ÁÚµÁͽÀĺÂ˳ÁÒ´ÆÛ»ÅѾÈÔ½ÊÙ¶ÉߣÀã£Äë©Çê­Êì©Äã¡Æò£Éö£Ìü«Íô¨Ïü¬Ñü®Ð÷µÉá³Íë¸Ïé¸Ëá±Îñ¼Òì·ÐîµÒô³Õü»Õò¹×û¼Ùü»ØùÃÄÄÄÆÉÆÉËÈÇÇÊÊÊÈÈÇÄËÓÊÎÒÃÌÖÎÑÔÈÒÞÐÏÐÓÓÓÓÖÚרÚÜÜÜÃÖëÊÕâËÚìÅÔæÁ×ðÄÚóÃÝüËÝóÈßùÖÜãÒÞìÜßãÐßðÇàýÏáöÌâüÕáïÜàåÛãìÔãôÒæüÖèýÛæóÞéöÜëüããääæéæèêìììäëóâîüëîñèïøæðýíñôìôüóóóò÷üõùýøø÷þþþø÷÷!ù,X–þý H° Áƒ*\Ȱ¡Ã‡#JœH±¢Å‹3jÜȱ£Ç CŠI²¤É“(Sª\ɲ¥Ë—0cÊœI³¦Í›8sêÜɳ§ÏŸ@ƒ J´¨Ñ£H“*]Ê´©Ó§P£JJµªÕ«X³jÝʵ«×¯`ÊK¶¬Ù³hÓª]˶­Û·pãÊK·®Ý»xóêÝË·¯ß¿€ L¸°áÈ+^̸±ãÇ#KžL¹²å˘3kÞú®šg}ñäùK& &èͨSíwB ɸ¨ñ'¢ŠEiï0ªÙ¢º·oŸú lѧ¯Ÿ²ÜµýOO`5cÒäáV.­ß;cÉôU³p¢š¿w¤ûþùÃ-M™ôd¢ R3Fí»²~ÉŒÉÏ­O™ùßøó«ÔWÁJ<}´ñV[?\h` <ñd ҄pÅxPó Òc€g¼£A”ÑO„ €"\pAkT Bþt‚>V” BjôcP¡ßŽ @ ýh`mV¼£ÀÆ Ì;¨ ôcÆ ï PF=ÊeÀ…?bh LèsA úœTd`Þìs~'¬pÆßã¨2ÞIÓžqhX©h”æ2 ,m ɈÏ¥½õ{SŽ×5¿½³¹U°e ö£Æ”a €?×Ý[ÐB°pþFd€`÷߀c„·Ð{c”Œ2nµ¬“â1Ž“ãAn“äQN“åa~S?Vœ·d.úè( ž°dH£úêª+Ãúꮳ;ì¯ÏÞúë¸ç®ûî·Ë^ûï¾O»ð½Ïûñ¹GC»ò½Û^ðÆOüóÓ;ï<òØçn=ôÒS½÷ÝoŸýøÌ?_~ìâŸ~õ܃ïþøð»¿¾üíÏ?üø£ï;Ý™ž°hV@ð€,`x@2€ (AF0‚ t`ØÀjðƒ aGhA Nð‚%ü`WBrð…+!]XBN°Y' )HÃÎð‡þ0Ü }˜C¦°‚7ô {(à *qˆMb‘hÂ#NчAÄ"™ÈÅêЊ`Lâ›U€ ü‹ˆÿòÆÆ6ºñpŒ£çHÇ:ÚñŽxÌ£÷ÈÇ>úñ€ ¤ IÈBòy¤—;ÇÆ¨¨&ˆ$"¹3JZRQ–”$%1™ÉIjÒ“•œ$(EYÉOî ”šìä&Q™ÊSf²”®T¥$Y KN¶’”£ å&aiÉìr–¯%-sÌa®2˜»Ì%)M©L]þò’Ç”e,¡ LiÚò™×l¦6“ùJøò–Ƭ&5yÍq^ó–µt¦.·ùÉpN›îòq{¬Ã÷ÈÇd´º®~u&©éçHÚÔ‚`u [u‡:ˆ Zt‚³àÆ=Þº­zµÁ°Å':1‹rÜ­}T×1×[ØåHëOvÓ¦bµ¬-1èz PtS@ `@b¬±„Á¬:Ê1ŽÍv¶øþƒZ@ƒM˜µ©åª;Ö¡YºÚ³˜‚¦@ ÉzΣJ}ê>–«Û¹ö …B¤KÝLÀ9ÀÄ-Öá²2÷¯tµë¤ Ý#D¸(àƒ?ÜÂÁªwÍÚÚ΂V Ó-‚~‹@„(·µB×jÔ­Þcµœõìg1)áCB¤Ð@ì¡h€Š€‰ÿò¥¬¼Mð`ï+ÝOw ~؃ à@¡ÃWå T\ßß~ö .±~¥À@‚­H_EÂT“B•«÷Ø­fŸ{ß" Á¼P ž@e<܇hÅ(ÆðÜ`P E9Äå"™Œ­¯þgÇ[(K™ÊQp°¬e/$@8˜.dÉ<—ï&9Äu…îÚÜf(D™ÊNˆÂ‘‰PŒâ«hNIŠ ÒÅ.Y°÷%¯tÛl„éöøÇ™˜Ã#1‰E˜¢ÇC`ƒ'a ·¸G™A¬æÏæømŽ0˜?}:4â“„$JQŠ. @=h‚¤@ w Ù-P¥Ç¥A “÷Áº>‚RLC8â×Á–Ä©K1%Í=t²zckE£æÖþã-o¡¡…(X9Ý$DAŠRÃߨ±*ð€Ü&ŸÏ‚dÆöÖ±¶&o›`h{[Yƒhô#D1nùCÑ Ãþ$†ƒáÄ€¯Z ìpw¿6äÅ5ŧ\ï;Ü!†Ð²(NQ 5üp®£†<Ì-8tWv Ê]î=衎qö³šžîƒNo?¢Û­Øw°+AlT{Ü>J x. .ÐÁ B€B'Æ`®<ÕÌIÖ,Äse©£—Þ‚ØÃ!2áˆG»ëÇN4ž1j¼cà`ƒ#ð€Þ·Ý+ËÝ*W×Q_è  ç/®‰À‡OkBß‹D¿‰} N†‡<ðAô¢¨ *oñˆ—XÂP@ñÕ A‡o7‚Ô¢ï¹|’ñ Õ¥>ª¯q¤”!ƒpµ¶ûø«DÁï.&þþ`hOW¸Ü6„¯7~Šàÿ[ðJK}ò‰cŒ \ ¦ˆÃô\Žê[«i~7-FŒcÌ› Ûfa¼7¢& “0zþv8Åçï°~Óz®gSêö3f6yK&^øa›'eKðŠd£ÀoÄxÉtA'vò |!!"ó ‹ppCÐa²†~ÖtÄp ‚¦_¦_èEeOw9 §` >G‚‡£<ÔЀò@± È ¢DðjÛõlT¡UQ•dÎeWÁåd„ÖƒDàzÀh¡Ào§fzØq„¨÷¡Qè”60ûbð6S oC eSàc9÷{¤F ¦Ðqè' ç „þA‡S ’ ç  qàÓ… 々LñVZÅtáõ –c:ø}v† jŒ°¦V ipÑ@ ©·„C‡pxÊ`*ÓðÌðo C@\{eøX¯5ýW^¸·mœphФ°Œ€pHƒ‚)ø€qsÈ#3¶”wƒÔ–‡„Vqõvo† Žp “0‚Î Hx|K˜F !!`Óp p°`v…O1cL·dk6Ç_4go6ሠ“pjj0|ötÕ±ØÉ`*Õð)ñçRö lPµ[6h_ž8]SæV¶Ax ( ©:¬¨„K8’5`È…,ýðþTRåt´]ûŃ`u{ À6l]ço è:†ëÈ,é ¢ üÏðw W˜hiu]¸¶_L{PY¶qÁ÷“_‡z†·Žÿ“ý‡ (þ òˆÓõ ô`‰C!_þ0y7[Q·_D °…Ð gzjà“æ˜ HøD‹i¹Õ¨×X_ûÇ`P acz p0Ž ÀŒ¦GÆ×Šëx”!!PúðªàI€^ S)üðW´gW0BeQàw0tÀ™B(ˆ#té§~KXâašSc*ôñMI…E0ÁÀ]Gq}îö[Mþ¶_R hš)¾ö™£÷uÊ@ ¬ˆœÊט?ñ˜˜AVôUW0h|ÉK‚p—ð™¦@ g ÇP‚±ƒˆÅ1Ìiîˆ8ý Ó` r@Ó§@Q^ÕXœˆ_úUwpVáÈqÍX‚Æ™„ɧžê‰³¨ç øðÇÐ’x0F—9Qƒ­eWyh^GK€w„p ¡@œçw ÿyzÒÀjõ’¿±î Y^8^º‡R`a†Ð€h •@ Ç’ Ê'"Áˆ ßÒðy°Óy 1Ö\%w‚vkCvQº £XŠ8l™~JØ¥ ùÊP§2Ÿ¢ þs€vj7f?±XNg °Õ`R`^¸7€ék¥(n‡(ixoè¥IÁž‘±UhÖX5ù¨Ø_Oàe¨e§P ©Šzº©E`*¦¡çÀ púÕ ˆŠ&W7H£ÄXp†©: >êŒÆwˆïž(‘ À–ñdJ oðC ¶°0 ~¥dïuØfˆ¦yÐh"8| ¨§ª§gžÚ2éÚ]†Æ_R&… ¿l„(”íú#«š´ªøP ¦ÒG êЭ*qYù@yŽe¯›v™{  t0j–ÚŸ¤ÑŠÒH°±–DzšÈ€‹D°‹ÁЋ4ñþv–—¹YwRÖ›„  Ž`Š¥0žò‘˜ò°zi¹œ"‹A[«F7Ÿ ^ss'wrÐw«úsÆ' #ê[ñ0 p¦Ó¹²k™xñy¯w€qp@Zw©ÊP| J”Ê9´±–=S-Õ@¨y p3bÀ¸ø%eùqzÚ³ÚÛß*wcûdQgsv†¦š¢‰ˆ_+£ ¿L) |Ôɲ$ñ«še _h^cøWv†¤@‚¸ ¢qÛ*­Á«™ ÀxD€ RÃY”  þ7]§Z†Ð{˜`—»ê{#|ò…yo+ÿ»±‡[¾š $UË3LÃÊP¨» c"ñTw¹þk,qz¹¾fj¤p§—„oø³ØÛШQ xvk7›áWsµÝw^Qpu7»‡¹Še·?kÅYqÆuQ›ÉÉ›|ðÀ)¾Å™˜n¸’Eqµ¡©pvg¼«[–V¯5êixik€-œÈe¹’¨\t[(Ÿ’ ;aöûÌQ›Y| °U^3{srДբ)XÇiq¤°7ÊÈÜœ¸&ËvŸ¡°%éÁ x½HqÇ4< “pÃÔ9ÁW\Vê ÅÅÜfý%SZŽæè:ù¼œHA² Ññ  fŠpRàµ!“îÜ ¨_Bð|°¯ ³Û®ßRþÆO¡Êp±ú››Ýÿ+‘`Ï£w8)¹È*¨ÙO¡ð`Ñ&ÇDZÒv• f^6Óà–†{ËI¬Kì»ð»šÎÀ¢GŘLëtz†— q°q]w å©©é¹ÓðZ´b0{± I¡0„Ä ªã†úºŒ » z öÌNEÐÄ@m{™CìwÅ °¸ì ¼’l uà›[ý\EãÀÍe4'’BÈu®šÏ‹,½ùXX9a}°h7+l-Œ¸IÂŒ {}ü  Ö:S` *7µ9´Ó¹§¯pÌÐ&Y–ú ­ : ÂëjPþ` ÷KuH 0^­=Š¤ÆªXúÔé‹ÍiÁ9¯GYFKZµ¤… ÷sF—Š5í€õ ƒv^B|è¢üqÑ`xQŽÎñk sPÉ/†åp%¹ÜÜëÄÊñ«.ʧ‡×°~êŒÞp±X‚Î}ø…ð{§fÖµèïc!뵎ºQ¹WônêÝÒ‹ÖÄImLÕÔ@ r@u·PZµëP_B hsz²°¼?uXêck^O oðkþ±‹œZï)ê ;¿ÇÄXŒJ¹Qu°÷²}ˆÊ‰Ñ ø Ìþhú´0¯{êN&söðåH³Î€ÏÖkQ÷ØÝòü¥hŽ€§—„ÇŽä$÷OÖ œx±K Ð µ(þ­7ïÿP ¸ŠvÙ:XòI¬Oðá1_‚¸Á„“R=°ß¢mþØ+0ãÏÈãŸþåßþðÿïþçÿî_ÿéÿi üˆ÷‡Áh‘$5Ǥ½{WO_¿~þ>t1¢CŠ!^´˜ñ¡DŒ;VÜ£F‡ÿü™D鯢´ ”E¼ø‘_?yѹAb„ˆ”"B˜8ÔhQ5Æ”Q{'¯ÃŒNähñãSTUÆI’aH©Y§v…˜Ì‚†jW™j•*¯š);Iˆ RD.‘=p" ,*­Zý©ƒìc ˆÇÕŒ‰‚œÜËñÂ"ÄP¢SÆ^‡Èòp”ìã1¹Iò¡ñœ4Ò=ÆA‹)Èå wˆ„$Ž¥”/ˆ Œ/K3´Äeë<™KÊðcÁxc#AþGÃd E‹¼$ ‘ÉÅùeà–Ë„æâú‘™Ç¥—üØÇ:n1(¡2]1ûÍd¶ä’äü¡&ѹN#M3IÐû$-ùa@Ppó ŒÙöJv2‡³ìç ÇP~"s—¹ÌÇ:Ü—%€’à{_@áG |Q¢&´åE%zPÝ´ùe)‹pÊ8HÂ{çÇ$5º:úÃ’+%¡:aŠNŽ‚2å å‡F˜Â I™éD-Ô *£d!*9kŠIE’’ŠN¨C8©!|´4©«SæUý—Œ Q«¥¦!a™b€‚OpÂâ°ƒTcœ_•ÞKῌΗKEä>ÔÑþ (|Œ(E2¤qŽˆÚUyY5ìø:=«&–wx $?p*"(!ª5t_cK9YnvzË8ê3=HBV3ždã-þp$¸°Ê@©fG»¸ÎÎvyËè*mÛGȪŽôe0¦0!܆Ҹ¡lwëªÚ.—wuu.{kÆ'}uÂRØèbÕSéë.ëŒêÕð–±´bE¤;1Å&Èʈ‡r]%_˜ÊÕ±ô•ÙbËÆé†ñ¦|ÂNá@îîsö50æÆ+Ú[¿½ë/[H‹n>á °Z+¬:Än¸rDÔ­‡ÏVx Ò¾çqŒsÔã¢ö§9El9þ™ÆW0ƒ[J"ÜaȘêŒà7¶Æ3ÖaŽ8OΡ¡s(ø„“0¸RBq ·BÚÃÍu2B;êA’8€§="“±Ã8˜bñP)­‹dæþ¹:“ô6©mB\ qžÖ%nvI! `'›¹U¦µž­ÍØe/ŒûÇu…9?ÁÞv™‡*ìPþ7:ÝÍ+µÿÜ“%ÀÄ5¶ˆï¬hY#õÝì¶5…˜MŽ4‹°š¦ÿmb7/ß1{8ó´½ðäÅÛ¾Üf#ËêcR|2ÿLöÄ¡ñ-Zœû ‡j‰‡žþÝ”#9\÷]h£:ÓãÒ3yüº|„7bÚÕ¾yef¾ç4Â3í’ÉÚ‰ž€nÚˆNó±0Øèº x³Iøß ÃáV+°Ñaýâ¢"ûêÏúÀËñ‰¸@ áø>»ºòYǽUšÍùô²y T/aãnµ»Ü j³ëï¼µ5—ñSöð†åº³]uÈ>é9©—…€‡9˜‚Úø¨|%?j,‡þþryg?ÔA ÊBµÆ4½K¿rÊœ¨¨WÞ<‹Ñ$û넎ýÔ‰^ûØŸéè-!H=„ØaÍxè‹/|<—¾ø“Ã}òÜq >(¡ +®†>~;}l“¾îׯ\öy§zL,Áû’†<¢®fŠZ”Ö¡¶:ú[¥þÝ‘U B@‚9h†øš?‡#*꣌”¨~s7ýÛ¿´35mê >…p»ÊC@59¼ Ü ¥s2BÈ S³˜Ë@ÛR.Fã@ì;¾I›’ˇ('€„o¸ÀÄRÀò´dÃ-Q[ÁDâcÃ"á?ߺ‡[è&'@…jÀÃ1ÓÃ:±>ÂË“·r`:"Ègˆ¯LC+ÛÀ>üÃÔ Ä?˜ÁVøûA6Ô CÔ¨M¼ÉŠÄ<È÷ùÂDT3ücDƉB;9b@5"h¸ÁØ“Å3kÂZT U¬_²…Ad…s@Å1»D$3Eb|7䟥{B¸˜aÃ%T´LdCIK<º@£AtÐBK=PË-i¬ cœ½ *ʃU¨‡—Ó?n,´EdGç¡Fø¡Â!þx‚K˜†_$¿¹c7>ÜGw”É…¾Âƒ\ ,FÄÇ=‹Æ}tˆ~$8ü'“ƒ:¬Åó¯MS†®Ê?FTȘɇd4‚$x„o°Ç¯jFﲿQ-dÇ“l•„êy<˜TÂòSG›³ÈbÄÈéÙOLCEb Fˆ ¯a$Fœ4’r¸.&x^87çòICÛA˜¤+„¼É¢dž~à]ÈF€†ªbJ t´ŠLH±t"z °ÍC…sxIlJ5$É¡$Ê[Ô:æÁ%ÀÆJ$Ægœ±~+IMlÁp„z°ʃPø†sdļ´2®Ê¡”JÊøuð2& „U ÌÂLG!ÚÊñÊþZÜÌG£‡aøƒ!X¤L– :ñԣÓ4£ÕT Õ£°%xÈw¸K4dËn<ª„+ÝlwrÄñ!«DC¸ “FR̶½äKÞô‡qd‚"HTpI‹´L$CL¾œ¸äÿ*&(JTÎÙ’/Ûô°v3OÞ¼á@PœÍZœH<ÓGÍDOÝaE(¸4^ AvÏÃKa›¿Õ$+(`-G¸†ýüÈâ,´DN“\L!œdä9B ‡á4£÷4"ùܰeXШ PÖ!+L€MB€†ÑÜÇþ¬³5LýªÍ”ËÖ‹pè8v¤QÂÑåÁÌÄüÆ]ªœ¢y<Ð-M~KQÕDþRÌ©.(€ÍVÈÂ2R< RaŒRä#œôM1yȈ¬ÅêÒ.,<.ÚÒÝœÒËÙ‡`ØÈöªCeC¤=›”Fœ¼P(‚#ÀQOóôm0]8’G]ž}€ÄF"J$TÑ›ÉB{ úÌÎ7­œ_š8k…jPKBMÐÛ\Ó·ôËæD"¸´W´Ó>”†®¼¿/UÌS]ÿ+$P‚¬ÐJmËã¬OM]~K+‚S‡6U³Qõ°‘ÔS¥ÕäÉnÀU-h°ÃI-T ݳš4Ò/\T)Lžu`="H‚V8 ÕJ3RV‰Š8LÐg]¿q1zDVú{Ò|”Õ#þ…×þ#+Í,ÅVJý4&ŒÒ{í.æD¾Ýñ%ZX¹\€º%Xºó·¡TXôW/Cl¼ÖµNÒÃΕBX´ë×ÖɾE€»dS+[×ãÖ_-YÖiOx‹Ð…yXÝ,‹\+ÃPó¼XÆl~†¸ð_˜‡ÎU < /CQ¯Õж]Å[(‚!lÅÎ5Ô#Üw•]Õ9Ù"0@0tÕ ø\utÚ⳪?LÉéåvÐUñÌ×ásÞØ]X’ËFòÜm¢Ü ¤´50Ü´ßÃõÞuøU•{X.ÿœj0ß‚5Îô1å?7s²ZÈäMÞùµÛúå×îű×(€… îž =4¦:]ÃÞÕÙ?О_ _Q­¨ÁkËRe[¾w¨)`‚=ð…6ÏÝ%ÏÐ5@Eã¿uþ-„mx\bl©ì `%^Aõëuð„¾Òl˜[-u.+Þ//¤âÑM@u˜W)xs˜bÈåàÅbä¿q0](Ðxxc´­[Öy‡|4úÒ2¤w°‚üY¤ÜûUq˜#a°F226’.Ѐý‘‡-HÅy¥§ (e@ÑzŠwØ‚ài)O–Ÿ9v@õãn@5)؆åãóí-Ð0†-ÐeÉá‚€€2è‡3,Xˆ9lQ càc(8ˆQ eP2.ø‹w¨‚Pƒ~(Ð4Ø‚zˆ¸ g® ê3-y 3þ(èVñòÕL…^ÊyÐ!ðƒnˆß¡àVá‚ ð2(2èø°‚w8 P fÐcPƒ ¸ *@5P2P€©²f•†0c¸.Ї°3Ѐx@Xƒj°j(ƒ ƒN3 ` .cÈ.xÈ52P,WÖ¿ìë‡ûì+@H‡0Þǃ¾ä]Öf}xz æ P€¸¨‡ (‡°°©gm.eЇ“öi(e0@ƒÐ€€bR¨Ë€20 02g0°±P€xXk10Ô„j#¢deƒaFõ-mê«þBP‡Íž1K.L^èËî4„f}¸@4 †~¨€iö™Þ‚Ð.@¹¦kl*Àhè‚–il¼&Àd5@€2@c‡ (´¡†j@5ðËŽ:3þZ¦ÕkÈ%ð„tÐ`ÏÕaÞIèÛ>øj·ª€-è.¸€‚: °íwøcˆ‡é6†0†zЀKJé3‡ è‚ß}è j@€dðe0¨æ xœvi¨«‚ ?µèîÔ~jþÁì›ZO`‚'ЄvXoJmïÝÑf8*ï€:.¨4+Ð (}È€5 *È€…0ò*Ðþ+‡ #i0ì  ‚àQÈ€?#§†z¸§Îëf lyøp  3¨‚ð>?¼ýçÅɇb„Ì}q$N¿à¹•ˆX¯&’~¨†ð“ï÷ñêb q˜Í~H AW y@ІÐA'4ö Gÿ @?Eÿ Çl ÞS4Œ|„Û}qžqŠÌlÁå$b"_˜ä;c \õâ˾{˜…¸ØkPàWÞÉËL7'ïɹ‡O O^oÓ  Zàƒ8CD$>ÒÎWÕ¹¦+Y0ÇSwv•pnÊØçG+¿œŒ3‡]fâáOs™¡-‚ZþhÒÎÕêÉCÖ4®RHÏŸ†È›÷É›¥!!ôˆmôânV‘oMëüå‡/,¿?…P 뇥vö)hk󸃱ì‹w¨…³ÕàWåZÕ (¥î»y#×€dˆ†8ë¿@ƒÈ+è ž jHr") èyj(i(ƒ•—có5‡ Ø‚•×-+8 †°ñw w`iL."ùi‹fZôçb_œx 謖ߔO¤¯†-È€~0¸ 0„€p°GjPú5ì~‡Ýîi¸€20jW ¨ X3 ûy4(åw(€þ‰néÉ(zùPt²Pƒ(å>ƒ~È€TîøëgîedËQ½@h{aØc Ò¿{Œ|gú èå~ ðn•PÈ€ØÈ~0{+È€°€2øfÀ¨ÉWx0¸Øp½÷ Ø‚É8§ö ý¯~5€‡2è4¸Xw1ºu™!m^}V(hP1 2lèp!½bˆ$ÑÖï!ÆŒ7rìèñ#È"G’I-Ã…h%3‚°â¯Ì…~Ò¼ÓWÍÂ&Œ! f,ƒ<…ýD$´"ž1ïjn±°š‚jÆR.Õ¢Šï Róþ§a Ãd‚(á/Y†wj*è“a¬?iH\\™QY ïìòíë÷/àÀ 0x0áÊ~ëlI!¢g›àÈ’'S®Ü±J•5¸4c¡ß;VâqÉÀ¥‹2 ² Øò.C1h¬Õோi1ÑÞ[†ZOy|ÇA"‹2ÕzúËv¡X…VPQáÝmé·EL†u/»Ö2úôê×/HÐ0„vù©›õdI¡nãÙóïïŸòIH#X I—U¼ÓUXQ2U˜QFwÔlQýœ±—1eø£¡ƒ*sa¤UV˜¡O2T”Q†òtTÉ0¤Æ€þþij…É”Q5bôÓÊ€ØÅ^’%c^ÿ9ù$”¹_|ˆ•Ä7œ@ñÄ!æDù%˜a: fb†T×~hšÉ‘2L&¹&œéí‡aTÊ·?ÄE®¤3gœ ™ƒ^Ts(£24%|w–´O1},é8º)§a&`§¡v”ÌMŠz*˜&)IûE|ì2ªµ2úi™þè>¶2ªŒõ,´¤¢¾ËŸª‡ÙµÏ-Dˆ5Â: ¨£ÔË4¤´P<%`µöSA@)Ô¦©áª+Y²±:R>´Q Øà³.¾ÿ}š£4ä`[¾aösAþA…î¢+lW»UÚïCxò§µW¼ðH¸úÃSAxˆq”jP°<è¾ 2Ê5ünHüÐÊDx2Ï?)£zqe¸’Qƒó@‡ŠÆ«á¦ÍIk´²•ð®ÓIKÌbÐJ[ÑI X@P¹'_ýázjà®Å~ý5Ó+åSN'BHmÏÙ)WýÐI<`BMúè­·<{ûíwßÿ¸à{^¸ßõü­xâ‹;®ãë9â“?¾·â„S.yã–ë]ϤwIs¯Yg¤M‹”1ñ„.ù>»F'f¹ë¾;ï½ûþ;ðÁ ?<ñÅ<ðïý›ð ¦Ó®þò@vª’;Àü!„ÂÈþ<÷O]P4•á‹?>ùå›>úé«¿¾ù `v÷§]R;¶LAÄÂÜ{3_Î+`¸V…°€< ¨À2°| #ˆÀ¼'H‹Ÿü¢—º•¨ÃR`B!¬± r/@j @EBÉ,§ 8C©¼¶BuõCƒ«šHÔ¡%(Â^3ìˆÿ:U mIã(HâñCÀÈ#.|G›Î³ÄuÍ$Þˆð sÔlŠ_ Ѐ’Q‚P¡W^´  b€½K†g¬UEÒoôAR€;ºøF0±$…ò5F€íq$TÀÌp® þÒVq 1¤0„(übüh¤Íþè*Àc˜‰1ªp†… ì“p´¡²JB (A ÚÀGM)D”äH!Õ†e9“é’2±ôÈ#Aâ*( a ÝÐÇ/{y«Ì(³/Äb^3ÌÜ#óòߢy¨>jR›»d¤7 5ÍŽ¸ŒPÀŸ:¹®}©ó›ðÃX2Ã…º’„ë ¡©v^Kcü /ÿ¨qr$Þè ‰vÔXþl(GÚQ8t#ù('˜Ð'wL´VÝìèC ÒT¡Ò]8ìH>€á‡"à´i¨ÀSŒ$ š3VI6’{Ôb EØÃ.àvÓMÉtþ¨ !ÕèøÏÈTT#÷¬B¸?£2ª¨cÔ3©ê¤¦f„%B·§UCY•ª"+{¸Šwpb^²@ÇTѨ²µ¦rEVNYæwüaE˜E<ôxW8a&Ê@ëYkµ>d0zQ¥*V2ªD+K'+Ø-•!ɇ:ú ` S³kºìMKiÚÊ0¶!ùàÆ„…mPvµ€y¨YóâFÛþ¥µ é="I>@F2µ½k¶¶5V¤î–·}ñíBÖñ*üuùa­Q³j]Á@÷Cå˜ðSÝíF »CMTsÉK’îbÉá=Ä>Õë$ÔÎTµò}n^Oª~p‹þ}Šï}ûcÞ›27NǢҺ몕òý 0IèŠYÝB˜/óôìGø )A³ªpè Sû‚x$Ý͇-`ˆh•˜=")z[¼ÞüŠ„³p À!-£‡Ë-•My =åaØ#ùEŒÀ täRÈ”ðLµëd`Ò8$÷€Úd1«×/if§<ÝÏÈÚ ¶M¼ç#Á6˜Í—÷öç¹('.õ z$5“œ=êä¹0ÁÒWµê!ñ1σ=¦Ÿ±µô¨þÅŠ ]”ÝìAzGå<îÖ®c.D6øl÷Ž,›í³+ºŸíôÆzÂYž°£¿‘Ñ[«çN¯ ùŽ ·‚#ò’ÏÚ©ŠT­wºµêDÌjŽj>#ÔЖÊ1«öQ›~ F(‚d Ïã«|ö¥_¼CB"è¯õÁ;œt¯½œ³döÈ8¦ hÃøÇ_¸V•¡í½Ÿ!¬kL¼aýË`?·‰“òQ¦Ö~¸ãçÄ9âbc‚o?l±£¢÷y×™Ú~ÕGxí9Ô1Ð1pC0”Ã~a‚âòA””m×=ßFðÃ8tŸÂ>•Ã'ÜÃoUS0þÃETÓ-C>`1Ã-ˆ ?C 2?ƒìpC:ÑC0Ø‚ºƒ ŽÃE¨C-ÐGåƒ –Cú}IÞ]¹¥Ýùý^ê•C샞ð‰Ÿ(D0ƒk­Ã:`=Y0¬ƒ;¬à'¬Ã ¶àbD ?¬ * ?-¸ƒæÃ:x&äÑ•ž•CþžÝßXM`C1ÄE¡~1Ä>„Â+°ƒBÜ‚Òà8ìƒ:Ü¡Bð úƒöÃ'(`'Dâb‚Îà8|‚ ®a þëDbæÃ”` ÜÜ`„aõŞɠhßRšZ¥TÐK.¼T1€BCƒ-Ú:°ÍöðCþ'¤“òÃ'Ü‚%ŠÕ ÊŽr"(Ü?@b‘ –=üÁ8¨Ã:âDU ïAÔåÝÛý"xÑ‹/¼Ô=|B0ÜÃ=p!(=°`> "® v¢ â£5bÂ8”C ÃÒ7tÂ=`‚:„–%Ú=¬Ã'¨Ã>(`>ÜC<åb¾¬cC…æõÙ/ÊK ‚)=Ü-¸¤%Ò‚ rcûÉäÄíßüùCž¼¤Æ =ÞB:-ÐÂ8øƒPî`Q&à0ÐB:MÜK¢#UQZõÜoežómGÔcH “i à  T[Åàá=‰HÎH UÒ^÷)Ä•ùÕ,ÌC“=I ÒÂ>ZþWè⑞/¶¥?œYÌLÍYþV>°žiååP-ƒïõ¥!Ô%žyÞÖõEÿ5T; Ô`’Z[æÃ8¸NlÚø‘ßΉžÒùW×DdÏ…æF¤%­ÙJ"b?´ßD¨Zf˜kòÓZBálbDßåZæóäfœ¢@⺧˜”š.D{mÉ!èkN^ùÕÕö5_cîסY¡90§zU¦ZN÷mgFÌ‘H¸U§C &•fyþ¦CäÉD´;€'yíf;õ&cÊ'þà °{ºÞuÊ^/Z¥y>Ý« ~n—{ÖW³%œs⺟B:V6„~þª/–¤mÅREõÃÈpÆ}h{èM]f|b%mÞ“ŠÎŒ‹b ŒF|Z ðíF+ÐbŽ2rþSl&ÛÒèC¼ÔDÙé˜4¡è-¦‚úçB!ñ.PÝME¨IPi]e™€©ºTOõèÁ/@å‡)?µœâ-¨C¸ƒßáäIiCÀi;É)[ÒiC´ƒ{1AI¦‹ÎÛTš‰¶YEuá9ÉBçé©‘î(Lñç•2ið‰¨ž‡‹™†‹x6ÒÜXªIŸ:ôAÌ䞤>¥Â™šæUÒSF”Cèe}*§èjC¤bYéU¡Íâ½ÖL’6Ì¥žVƒþÎŬÙb©*Jxìª-‰éy뜔JèAüY«BÈÅhê%yž ¯&ŸÓõƒ:˜ÓB:‰«? Q¹f«¨i'–j {áÇzê)Ÿª©n«Ó½––<ÁÊk¨Æ©¶2ªÓ%b hT,8"ÂbkjU(¬ªBLÜýÈJÑY뿆S],–æÃ,# ø‚—Škˆ‚ì«Î¨¬:„=€äSžNl½¦ÖŠÙ8]Ù¼LŒ¡æè„2[‚–êÇ CôcšÉBÉë¼¶jÒÝ«lbêB¸&ÜÞš¥k°ÖÊÊzSÀ2,ÆîÃéAf-ÀÓ&lŸæì”MgöÕƒ›æèÇzÓ¹ñþ¥ -éËÊ%Ê–0tª¤Æ­6!Þ¢êlÄ)F0ÜÃjÚl-U©³Î©â~lqJ©-VžùnÚþÜ8 *!tÃä©ßF“Ÿú¦ÔbI[E&´¨ÊfÀ-6Ȥ…þ\1¬ÔlÖò–Ùì¹zœ|öÃ0°Û.H,Ó*ëÍÖWËâké¾JL/(Ó6­ eßî>ké6‹ƒ®äðRìLnì*?ÈË8 ëªn­6%©ãJí‘m%‹Vkö­“=Rm~Â2Ôó’ÓæÅºl‘B-'Ô¼šo4…¬ÿz]ÆZ¢ÍÂÛ‚îþöÞÐ lѾË=HD8,°¸þV.bõ/òÞí_ÃýèAPå¯þF¯Yɯ=’ÞÏøÂ­öÂ÷Šl¤¨<ì°<Ô6ää:ð°1'±/17±?1G±O1W±W1©T€1Ô·…ÇCßð°/ñï0q'qŸ±7ñ‡q11q_±¯EH÷±ÿ1 2“/H4Œh@ $r œÀpPx€"O2%W²%_2&g²&o2'w²'2(‡²(²(Ÿ@”E"Ÿ)¯r+/ò+³r'Ë2)Óò+_² €ˆÀ-÷²/ÿ20ó%Ÿ€ dÈþJ4 û¼‡òt]3;3|4³a<ó4G34Oó5„4k³5W36{³6gsAló8w37ó9‡38³89»³9—ó:G³ø 8Û3<Ï2×3ùìsø >Û3@ës;¿33÷s5Ss:³ó<t<ç³:/´;4E7tEK´C£³gß4¿JÿsîÇuÈ{(\¬A¬Á!ü¡»Ãö…ËœP‰ÐŽ<¥{R+Z!F<–;Ž!nõÔÜé÷ñ/Î<>Û”p%1=),Ù)Å U!mw:wK&MæÂ¹±¬®ìªói9¾ .îÉeÈývéeÞ½ü‚‚àBƒË|—犚‹ãKÌJùKçÊZ¯d^ ,?ZA¬Ü· W5W=pýZMD-±Ž­îký›½ m7ïܪi,»Û”tçD³K‹ú]š»M÷(÷e>i+i~àØ¡ùP°ÝùáQgWÉãˆnÓ'BO¾?mé‰ï5êÃ÷½í/püô¬dÈþ9×óç/²^Z¼âx5:\òš4"0òöMö¨á[ÌÛæ±Àq©ñ¯ïêßS>Hø:qå£í$ÃäOSø©Žé Ï¢ŸG¿äÍXÌ¢gsçvÍ}åüÿuù[Þ_Î߉ó ói ¬ É?è~d/Š/¾Xªøy}y}ÕqcòÏLÀUd'R…òDÛ`¢hFp ´‘ô·™¸Y ظÙ}9wžäÖææSæÏ |Tº(¼*b#Ú"&"ž²g^Òvo›Ô®ý§¤ÇeÔd3ä>(È(†*5+/¨J¨UO‚»à­6F‡@Ôе:è¥~(^?ÍàÂáBÃR£rã “k¦õfÍG-¾[a­9ì¶9`«vô ñ1+{{’£ŸS°s )ݥеÆí{¯Ç#ϯBïŸ@_g?µÉã|d š²84<ò:ôUØËð¡=Í‘ùQá'm£Uc„bécâÆN==Ý_v&ílx‚{¢q’|2OòFÊxjkZAzb†_¦Õ9å,þl=vþnÎ… Ç/êåòåÎ_z˜—ïV [ˆ*ì»\Xt¼Ø²DµtWSÙâ•Ñ«ÊË+’+®YT)TsW¯^[s¿¶¸.¶Þå±A¨aåæ“[}n«7±5MßikÎo ¿ksOé>_+ºuº­§ýöƒ‚޳)¶»˜»>÷Äÿ©aD/cï\_Í@Ê û3µ¡íCÏk^„¼T~¹úª}¸úuîÈ™7ÇG­ß*q-Œ÷½+;A}‚vbðãùI›O<ŸF§ò§í> |^øòx&sÖzŽkîå׬oÆáþêø3¯¹€YüQ¹˜¶ÿ3{ùñ/£5ßMþ™€ «`!!oP§Ñö˜Pš\ ­½ÃS" #«Ïöf¶5v1üaoÎ;c¹â¹SxÎóóUó7<ìîÞÕ"R)š½;BÌIœ¸G\‚Uâ—ä§½CûîIî“6= x`N¦Qö¤œ®<½üB¡¢ŸQY@¥òQµK­RýŒ†£¦”æ’Ömí:fDy]¾ƒÛÎëzªÛàòáxCw#£iã“&ïLÏ›™˜ï0±(µô³’·ÖOäÚ¸ÙJÙ.½cwâ˜ê±uû6‡ÓŽ‡Øœ†óIö.<.îçÝÌÜ·»yäxó"xyçùXû2ûvúEùËû¨=~œ,GþI¹$ô28>D:d4ôl˜LØûðÌÄlD_ä¥(¯“ÊÑôÑÃ1%±nqq/O%œ¶‰—:ÃxfæloB]bVRh²uŠl*sê«´”táô»ö™¸Ì†s^YÂYï²/ŸwÈáÏ™¸Pu‘’+Ÿ»|©)/$_6¡ ¡0è²âåõ¢‡ÅI%¦¥øÒ‘²¢+žWåʱå¯+ê+S¯yUéTóU/]VS[›^ ÷—uƒñM½[jûošèš¾Ýj¾Õ’w7úžû}³VÍ6…v™2r;•)tI?éÞѽòd¼G²·¢_oiˆñiÿÆcüìÇΙOK‘Tþ·r5'`åÈ™ਠ—Hµ@´vGL¡L ìv”ÀA€ùÀßùƒ (3˜CN‚ P@xÞƒo`a@¸ D1B‘@ä,R€4 O‘I ÅRC9 bQå¨>ÔO´ Ú¾†Á0b41Á˜*Ì  MÍ–kˆMÂvãhqú¸dÜÀ¶ÛHÛj¶­ÓÓ–Ð.Ó™Ò]£§¡w¢¿ÇÀÍÎ0ʨËXÏD`:ÇLË˼ÁɲƵlaC³Åì@vD³öX< >™ƒ“£‚S‹óýÎD.U®çܞܫ<©¼¼7øôøFø8B‘€ªÀ¨`´‘°Â.®] "àζ›oÜsZÂRRXrqoϾ ©¤ýÒÎÌete•åöÊ +p+r*q) ªHª*«R·Ð°×t×òÓŽÔÉ&Öé¾Ð‡öë»Â÷_·áб˜‰«i9°°µl±9’n³rÔѮӞÝÁÞ±Ìi†$çrÆuÌÝÀ£ËËÎ{ÈWîÓþã80äE1|$¢)*)š3_|V*¡5É"ùcj\úžŒ±s…Ù>9jÙs¿åõ´]n,n.}p¥¯|°òYU÷õŽÚ¡úÙ›ÚMÁÍ—ï¶ÝnûÙ!ÚéÑÕòD¨'¹oeÐaè΋Åa‡7Jc­nMzM™|vž}üyáæ’Ý2åëªÓšäÚÏõÄ ìFÜæûChc ¤@öA7s@XAD!"Öˆ'¤!¥HÒL£Ð{U”=ä¾õE+ ½ÑèA £‚ „ÌüÍü –kŒMÇâð8;\ îË6¹mqÛhhƒh»éé¢èFèUè P ^ CŒw!¦\f6æt–,V.Öâí{á[Ëm|G;†=ϯã rŒpídÛYÏeɵÂ]Äsˆço!Ÿ!ß ÿU‚¥À A’ ÐwáÎ]"!¢Æ»ÅİbÄ[÷JDIÚïUÝÇ·oCjlÿ}éâgeÂd£ä’åsŠ+”n(·¨q69<—v1C ³!K+»7Çã"oîh^aée𢯝2®+=åñ•Ä*–ꉚöºúÕ7ï7v6‘›EZFîå·’Úå;v>\´ðxù)}¯p¿Ñà‰¡Ú³Ã#J£Ä±àwõ4“vS¿ÏF}üŽYàX¤[Xö_[ůa×F×ó7Œ6ùW¾ >÷ýà3äŸxmÄ AÎ!uÈ òŃÒEQP%¨Wh´>:݃aÇØc*0?h´iÎÑ|Ä*a3±³8\-|¶Ïl[¦õ§¦s¥{OïH?ÆàÈð‰1”‰‰©ŠÙ”y¥šÕi;ûön¶°";Ø£ð’ø÷œ®;¹x¸>q_åqçåâ»ÆïOPÀ ¼¼-ôi»ˆŒ¨ÞnS±#âö{¼$B%c÷fì»*Õ¹ö§ Q–"W ߣ”Ô”ãTzÕxÕ=4êáw«žÎ]ºƒ!zSú¶ ¥Œ²LÓXsf‹J+ó#(›ú£öÇÐö±+N~Îï\Žº¾q§xò{}ôñö÷7 ¸G– äÑÇ…"aÉ'Ü"ËN¶ÆÜ‹+=yÆ4A4q%ù~jRºS¦f–øyüpñó¥¾üÚÂì¢ÈŸ2›«Z„Ê¥ªŽëɵõÂ7–nv5æ495ó¶ôß kåikðP¤sª«¡;ñ©K¯RÿŽOÏn={¹ïÕøë´7Ê£Óc…ïŽ~žXž|?5öYûKÄLÑlÓ\û×ûßÊÿJún9Ï9ß»üƒÿGÍ¢âbÇ’ÆRÍOþŸ©?ç—õ—‹——WLVJW&~ ÿrýUökrUdÕm5cõîêÔÛšúš×ZöZÛÚÌ:çºÞúÉõ[ë3B¶]Tþ·ê%jþtÚþ>þdÂamÍîÿßÉ×'Öd›žüœŒáu;<ú)ÁæDx¥Êß»yêú¿»8é@ÌK#T¸‡¶İ6CøÜȺfã!÷rÒ‡¹0A¬áêgi1ô‰jQu8!vt¥ÿ–‡†{XXÿÖO$™YB, u.xûPõ©þ[\\u~Ïéòó1: åÔX¯<Y@¼â9  œ¸W m %›’¿ûV›}Ï?ã[Z’ÀmÓ2ZR€7˜„6¾ž±d@øígK¿èüAðzA€,uMjZjõŽ6óÇ[ý3â \ Æÿô¶iAå[ï|Á?LÉÊ#‚‘ÆÈb´0ª5Œ" `ð. ‰‘Á(À<®ŽQ†cн33"o­ÛùϪ þž!œ§ßéE…_`«þ†w`!×yÔš´³BêþW t …µ9ÚþadOw@‚&üûà*A8äGÚ+A–’Rÿ‹5bÚ4Š« pHYs  šœ IDATxì] <”Ùû?›‘!“Æ­F ‘B4¤›B²é¢«h[e©v©þ¥v“¶]]¶‹jS»ÛíW±+é¶Š´¶”tE¡"¹D !rkÄ`´ÿsÞwf Æ¥‹2:çÃûž÷œç<ç9ßóÎóž÷yÏyÎÊÊÊŒF#€èôê­ÀÀ`0„Öéø>À`0=¬Ó{N_â–`0¬Óñ=€À`zX§÷œ¾Ä-Á`0X§ã{#€Àô°Nï9}‰[‚À`°NÇ÷F#€è9`Þsú·#€À`ŽïŒF#ÐsÀ:½çô%n F#€À:ߌF ç €uzÏéKÜŒF#€u:¾0Œ@ÏAëôžÓ—¸%ŒFët|`0žƒÖé=§/qK0ŒÖéøÀ`0=¬Ó{N_â–`0¬Óñ=€À`zX§÷œ¾Ä-Á`0X§ã{#€Àô°Nï9}‰[‚À`°NÇ÷F#€è9`Þsú·#€À`ŽïŒF#ÐsÀ:½çô%n F#€À:ߌF ç €uzÏéKÜŒF# %''‡QÀ|z˜–¶ã5ûÔåW}zYz°L¦1‹5„ž—W܃ùy7òy7_’[olëÅœèLu¨ÜßJ3ZF䇌€º°yàr9%i·vº.y5Ûœc[W–cF2éT@;Ƽ[e¶›nì\d¤&иü{”®Fyâ«míÕVµo™õã"— 3]×.2oÕ[rÂäÝ^Ý[<,Ö…ž† ½"%ÄÅTÅÔÆãF6TèMê@LN&1WGçåÄ­6îdAÆ\½Ä\p®q²›´|{€ïö¾o¥Ð¡ Q?.õˆ!Kq#|<–{x‰É¦RiÌ3ß¹áð!ÄlGnA æsó² I27ÿè¢Ò¢¸“«Û+%È3^}2ÿ¸;Tè¥C–Û›ª¨Øø„¤PUÔèz¸•¾ÏsK2GP1>÷P>ôÓCaêNͲ:Rι5Ë¡cÎûòFþq£÷}i©¤Q(@U½ïGl®¡Ž"Q|éH Þçü.U'…&¥jÍNp§ƒ†¼«ÁI 8Ð÷eD¦û: êZÚ‚à.53°÷™2B™L6[ð0Ò8(ÕT;Ñç#¦À®ã¤Lñ$èÙ»—Y×Ñ“7X ßÃ:Á¦³$}¥;K‰é$^’*øg+·åD-¤¾¥iMš7üïÛh„Øû-1166&mØürQUh¸ xœ\~‚ðÄD¤Íh…Y@-*Deåz7 Sˆ‹â­ü®'¦ds2Eþµ–€ðÇD Õp¢msR€¸½okZ°lRè0£ªÙÐPׂ^¶¨ÚÒ{‘"â^ÜC*t~‰};/ŠO#šwŸ¼éÔ6, Ûüª†èã¦8ÖãÀ:]Òº4*å9úYRç u(&ß 0‰g~23'-…´Ì´n0ÝüÓr2ÑuNZDÄÝÌ´´ÌœüœäPŸýóKK###J3O®C*ÏíHDZÎtÝõ,q2n>AiE¥ ˆ4¡('a¿3i—± JÈD|aE™që˜Àídt&ª933!È1iV‰È!ªCæ$û5¦óÅ„äÌÝöÈlDsòJŽp´ˆ_ÞØ-(:­4¨¿´(áâþΛ…´T&ÜÔ›ÂQ:s¿á ¥iÑAÎÌ&ˆˆ¶D¯&pðºêCÔ%hiZæÓŒ'Y|#Žœ„ÖrNþ~b “ó‹òC×YBv iîc´®É ÂF‰©jøvFHÈŠþB ¡AÒ¹d.  Õ–«/&çÝ,MŽ8B>¦V#ØÛìS’ 1D…J‹"á' ÑÀtð‰ƒ7MôÉ–Ï=Q"—(°N—¨îBÂÞÊ«@'ŠŠùá„¢äèPïÕ x‰ŠŠöO1÷—PÔPPyñ06fîÝŠËåÁkjIÊÍÛÊ©t:JS3_ähŸ]Á…|Šç&g8×¢ìyq ÁÚ^ççç—–;ìö^d­RãaoïSH¡1÷šDûç *¢ÓRÙàJTM^ƒÄ×£tMÁ;"sƒýZEŠÏr—å>ÿVÐÔfz¿áãØ5%Eù/8P¸DÏË›ÊÁ˜Ã½­õè1¾ö…< sŒã_þPØv¯.—È5^·Û™P—œ´+uésã–ç̵éÿ.·w9ó°TEÏzïµP­ô¸‡D´{Q‰lXÜÖÕÙÚÈÜi²ÄG]"[J¯½—TÆp„ý”Á„Õ’¦Õ§àá³Z:•BUP‡ )-Êç·‰W^\‘D[µ%èÛ°˜qž%&R‹’~ßæ³}çQ”b듲aŒ-%ÄÇÅ~yHJ…Úûã9PºÄû‰íô)*k¼)9b¨ÂŽ Xîâò¨åëÐÒÕ_ëÐi*z¦Z"rzX§K\'²¦z<,%_¡)jzæn—´›1ˆÚg7ö»‡ÄK{_‡tkR`x&´m¤,;׎U_AÃyÀËÞnªm=cÆØI~„W5²Á^K¬Ç—/œ2cʧ­ÁCBrN~l`T”—ݶlT§ª.ñãÞê4É+‚Boµ·ó×ÓÌ) ÐÇfÈ|O_T…08û/FmPzà+ëÝÁáÁ»—|çûf-úÉ >ˆfÌXx*Ñr’Ýa3šÏQ16 ¬LœØ£QžÛ®—BBºÖPDßf }öÆè„¢HO*`?üw¹ö¾Jwðw2¢Nü$‹%ÁQ᫦lBÍ¡uÓ»âd½ †h¹tu"é¶€˜EC±rõ†õ<‚Çø]3]ùrÓ—«0ÄCýX‘ùàœÓ”oã…†v ÓŒ)ɈçQÂ6jtU¯£,K´DZ`8"®ÈC”ïî}èƒ ðßæ¬ˆ?`½lwxTð2k¢‹i#6žt‹Ú×^ŸÂ²û¸B«<7;ÄN³ \6ż=„õDD>@UNnj®0 G$¬Ó%°ÿØS .^¾1é…¤jpíýïhJ€zý" µ)KœQËÖÚ«±Ïüéw´¨ÄË|m1…Ãø[™„2ª'r±q¦Èh‘×`«ëJŸu»¯Z:¯;ñ“&14åÃÒ¾N›#Òá¶×Ó\öÌrÖîV£ÍÕvcQ¡Ò”AVÔ¹Dª#ˆù(|‘¤¥fp~Õè”´u¥—×ÏWm×ùœüi\s«¡h´¡FZK‰*å¥oœ²DøÍuõyÑRx _åG ¨u\½-™ë\u@áÑUBÍF ­´ÄU{vµÂð©;‚"CözŽPCèëôíCþSåyTóJHji¤H9ùIQbRù=`Ô$B©“tm ¹*S—<îé4Fš6(É!ÖVÛcÐ%Eﯨ£É ª‚ìöPÓWUÕT¡ÿ¢¸˜˜øø˜ÈøT˜p©Iú°¥«gÑâ}¶Co¦ý&g‡I:œøóÍ×yQ ÍªïÄ¿¬E²Ê tI-\ñø¶à©uô3øLYº±°ˆX‘,á’4xÏÒ¢„„8ÒãÀ:]ºXËÄtÄÇeMú0Ék¾é™l¤ð¿ëÀ3QÐ,ÏÛ}vÙˆŠßwm⑸ ·)F´Šx/S»8Â@!ÊÌxÝæHiàó{ô~2&z$õ0mI“ö1ÖêŠpï_k¦'EKñãG.ï]dĤ=<ã¥Â00=JŽÄЉ&Qh–€½Ï΋x 0gþ´šÌ®ªB²p³¯Ì°›A;;³ÛJ®Š:z½óЗü¾^ ŽÊwï;{a8bù¯3UxWv‹Öñ¶ñ¶«¾ò(=J(ÌiþM*`ï쟓·šF%Ì3t“ÉMj«+B"Þ«Š&5/(Ôìœ[J¼Q™X6KÇ=¬Ó%­{ëЋºýŽPÑŸ)§%–æ‘3á ú¥Ðuthœ“[ö [øŠó5_õ_Y¼:òÜðõ3yÉ\m¦ƒâþ˜ `4aüÃÛýÿzš³C–«¸„@}IÕsD_>›‡¿#Q]{²`Àl­$Š  uÕdT†x;$·Wµç/gHµ;ó÷èæs~œ£IãäÝŽKDßÀP³ †ÆfC„…ièËD+‘HD‰nbÿN”>u ,#žü u艅‚í¦ˆ„下GDo'2%ìÃKÂ:NsÂ7óÇ0€,s¶Ó„7ì‚¢ºÿf¯ Xg«Û °wÍ_šPE4§ø†®ý*#E 7ýüœ—ù-d»-\8féUû"-#ù¿ñn?,œf dè_\ÿçNUžºãš)нd†XMÐ1œ4{È+Óqʽm «W_Ó'6CÖ H,›x{ØRÿK>ö4ÎÃõ6?§e]T›æjÜ_¶¿ñ¤‘²ùÁ·Ó„˜VÅ?e99¦ÑL'é'üùOžå¦K{ç*ôÙ![—_LH$GR¤7Uì¢Ò,Q^ýÍÚ+ƒ>J¬~²¦NÛ6Ûƒle¨r²UÏn'óŸ^dEÆ–[¾3cB¥/+G—-­¨ÊÊËøçŠ”ÓÒñPdæûiúŠ…×NËYÏÔ‡b0Ãuœ]AcÂßCÖL™¨c»ÿI(†|ÒŠ4\ÇÈ©âÞa ò2XNߥõ*¼~ø§óÄ+‚@©^µv©@Zc[—…öc`£( 6%&2¯ ¨›9N1P”é?d‚¾Î¤yÓjŽ›ë,¾êó§³T'Ù3EùËoÓT’QÑœíôóáÀeš” _ç §óŠïQF.µÔ‡9šUŸp>>o]Ð%Gø¡{«åòd¡Hâû4<2ÎÙ’ÙKÁÀi’ή¢Ëî]_jõ•WV—©¯¹“œå}ôäŒ!tEuíÚøß#›JB‹’‡ÀÊÊÊ’'õg,±å¦ˆ÷á……pînáÃ=îSö‰XM™«C6˜Gx™: >~mº˜ã>ie"”†dØ/2\©Sêþ׈a4Æøø¿ž»a ±&Úijc’Ë\qà<º †O yqâ}´ÿš“à.`Í °×ð‘ƒâþ°Öá³Eß.ÿýÝb ²flº˜INå&ÅhéXÊx]Ü¿hú 8ñiSÈp|m´½šì–óCÆðÉZîC{)PKdy^zcaJhè/æL¤ "Âç;§ÝBY™þÉ 3ecl†Ø‘¼I¨C–3–ãôæ’ˆ…ÃÉ‚™‘pý*?pО²•épäÖabÞ=J†ÓX»ËÛ©Úrõ‘ßWÏfÒø¯I° ¯4ýð¦…|»Lýán-¬…W‘þûwPðæ"‰íÓpçý½ðp ÙU¦ ¾ÂÀ÷{íZG¢÷Ú롉I6[› å7Ÿ$¬Ó%¯× ƒ ¥fZ:Xi)R©å÷‚[9f\w1ÇÓ ÙF›¯ž:ßHc[‡Ár5Oï…'¡:`%¶VZÊ/s…G¡_¼¥­­|u!ï0m¬”ÁËGd ¡4†ò…©|Ù:ÏE”’l¨yy+˜˜*(š÷ãLc‡Ñƒkjž†‹tMûUCäGCC¹,(O¼L Ý\¦­³•zÝÝœ²ÕÆj´\MØ&ÛÚöM "º»UIœ y`.y}Ö¶ÄAÑ?©þ³æœòåÃŽ >63ZÏ.l»0ÎÁ`zX§÷€N4ÁØ;'Ò´,ð²Cc— 2ð#€ø\èõ¹4ôshgRFZ!‡Çã–¦G|‹úçÐã¸Vàqz+HpF#€Xð8]b» ŽÀ`Z!€uz+HpF#€X°N—خÂc0V`Þ œ€À`$¬Ó%¶ë°àŒF X§·‚'`0‰Eët‰í:,8F#€h…Öé­ Á ŒF@bÀ:]b» ŽÀ`Z!€uz+HpF#€X°N—خÂc0V`Þ œ€À`$¬Ó%¶ë°àŒF X§·‚'`0‰Eët‰í:,8F#€h…Öé­ Á ŒF@bÀ:]b» ŽÀ`Z!€uz+HpF#€X°N—خÂc0V`Þ œ€À`$¬Ó%¶ë°àŒF X§·‚'`0‰Eët‰í:,8F#€h…Öé­ Á ŒF@bÀ:]b» ŽÀ`Z!€uz+HpF#€X°N—خÂc0V`Þ œ€À`$¬Ó%¶ë°àŒF ”V)]• a¨ª yÓ¨€Ãå*/P°+’Ÿs:_ë\¯o¶Ï¡ÿ»íØa+e8ña¨%ƒkË›÷MÞ~aÜ$ ¦óµ¶MɚIJ1Q¬cçzÊ2¤%§vNª¶v6g ª9“Êáp“[Áe™Ñi^rEç$¡ýüí4¹üÿ³ ikÕ7ݵ¡<Ü仺‘M‚‰Bú`lbŽcbд?b¤’(˾u'.J,I;‰Æ Cí-˜‰vçãØíu.ËrÙ¡ ! PuTÜÚ>$,½s…0ÕÇBàcétC›¡ãäa«¸ €* Ï<"«ç¦Ý4[D_tÔrãñZô~½ÆŒì:©ÓSoÎ^‚X2)R@4ÞQEÈgú]uš1Hº´¸Ze€åÏÛ7ëÞ ÛË(øHXöSÎ òâ½Ìq4;ch|,КAò~™5Õìtr‡õ 4žÆRPÒ ALjKêäý'fTÙ_Ø`P‰„ £gƒsÖO¡VØ ¾¢²–Òoš»ý·Ù‘ÿ{9Q iS’¦í(-y;¼ŠHbŽí#OÑÑ3@§GY1ßÙç”1ãci¦VáXÇ|TÛKQôU†Ñ޽ uÔ™ºCC÷Ô½êŽElAräÖÅë û>m‘ÞÎeþµìb8œ%‚h¼"Éš»kæŒARç=¶ ·ØËpŽ*…eàëÀG Pá2<~¼®P¡ÃHjôÝc‰]y¬ô•y«¶%‡E».»xþy³BÐèÑìú£\ëÃJÊrˆÊboúÅÕQdEµí¥‚v*Î4!ìöÝâ7€ÒßÑEÐüšZ”ºàí7;Sš¤9ïsÁuÓƒvèÑxVi ÔÒugÅn£8Nƒ€æ¦qCé >åüïûø¹é[Ãîd f¾`µzA¯®€ÚZh#BQÜîÀßW%• ²áY‘ÉPD?Âw ² áÝ âR]€¨êʺb~Úw²U ùûÿ ïø,ѓÓ¢TgM™xõ×›ËFÉKIIÿ×Kê‹ÿà8²ˆ«3H–cÇÝsøæòœ#+ÖŒ§J¯Gþ'gû Ë û·uS‰—@nÕù=§W/Y{Àmé¤þòø¸ª¹y tÁ~ñ#zå¥ó³Vj¨n”¦Öq¨jãŠucäàˆôîÁã.Gù?s—{¿7aÊ£'_Q½Ù__ÎiBiü+8Xé~úd*8p1kþ<þ8ÝËÅJ eDË­ô:vš13x¥…8ùÕ´AtjcmmC/.¬šRstްj©ûýÿÆýï{– ꖆİ«¶ÇdcNXô‡—•ååòý™òonî9º@ œ37K';ö5m$8ŽôøÔ¥Ãè•ÏüˆAwká—.h&¯ìa±¬A?iÀ-üÆ }]PuX-ÐvÆ­ú{û邪µó¥sš‰íÑÞC‚,‚A@¢Uˆzaìꤸ{Žãuhº¶Óp´4R…9eU†Œ”=8¸Ós´gÂ4ø$Àú׋Æç©YÒ¬aª@Jš}iᡳQ@ÑÁuÃn}Uâ ]ËŽ9iwþ¶âbŸ³zýdA}îÓb9ý¡H×—%ðöÙ #Ú6û¿š§DŒW*3ömó$í90‹ ƒæ-±]|ÓóP@° Ÿ?H[}”Pr2(M\E%kç_Šª”Vé'“~?p~<’#ßü³)ìR> ReäÊ3æÙ:ŸVÃ;ú’¿ÙmçN$q©i¹Þ½!7§½+~žÊH 8ư»Ë¥*ÌýnâøU‹<¦2\cèžJåÊM\>Á\\­0íåÑ ÝWËéÊrvΞçÀoÙÍçT¹ò[1B…ÀàÍL™òåót·ì«f˜Ž\3©¯žBÓ‡¼º®Oèæ¬h·ßû%›]|¿ÒBáo- Ýc÷xtç_uŽþTÅV¡s¼R”[Ñ•°j—IT‘E‘ãܹ½ {ô‰µ¬ÚÛWº[vDט̚~|XÒúcÙª´üZq6ü)õRØWTˆ+GC›eà„RiÎ3ûg\ˆ%—­1I¥j\È·íàçq%±P t]!ͤ!šàÅfwd„·®çÝ ‰ÏÈTPŸŽ,È"Îauí.]M~‰4ûÆ×k¦ÛÀœa®xÕ½l¶z “ƒ„”þfœ‹„؉'.ÌžxÜÓãä’ÿ ‡U˳ô‰ª ¨/~^»Öe(€W ý¶nµÑ&Þm5‡õ¹QQü`¶Ã‹7œ[ÝâCÂóèËYu€¢¼ÀSLšfPEôµóñ·CžëÏsÚ„Ž¨2MI­SéÒÍ¿€Èˆ›ÞWUpj,]¾¿QMœ4Ç÷‡Ú¶þYj:“¥¥‘ò…!—S Te•™Šä%ütx–&“äú@[(ÏãOš)ÊÊh#¨ýÀDŠ€Æê`½â×ÃNJ}¢?cãf‹N=ú5ÖÔ£høâ‹˜[bøB4Ç?‚ßóǯ¿Ù4nÎoçà§F9Ð9ý³’LJóðÉz#­Â}øœŸÕêÁó<4›…÷FH­aÆ\qäÛŸíµŸÿsIcÔðG B‚Ö‘+ë°ºhžš  IDATǰšÃÍ­Cf6ÁFòrçéïþ¯.ñ†¨™nf¡ëºq$Á“ã·éÄ¡„ôªyŽÌ씚_Ø:ü5ûë‡õ÷SZW ôúXøò1tÑ•5‡Ý“ ú ½‰þí¯ÙÙ‚_Ÿ¸úÇ`hçÙ”<ù)ƒô¾f5žú|°Ðð$×fG×v Îçé‹L^ pâ’hh[lQ*îܺÇÆJÿÒ)¬oc 3\öxS¡ðoy8_Ô¿d— ¨ùéüËFP  ?  É7 0´´¡²çVæ Ïh ‚ž·»Ë"õÆ»]´7Ÿ…Š›“÷0‰Ì=*0ѳ‡î€À'ÐéÐŒ '¿ŒüÊ@´ýÉûcS¡*àÖqx߃ ‹xÍŸê5Á„ Jïg¢<¤U€’" ³dÔ*cÇ  ô™nÁ½À–êðnoÈMÌ“&~7Ž'¥µ9 šR°L‹8Κۊ‰~D®ðÀ5Ò—ÅU¿…°k¦0Fà ±Ê—Ó‚=‰ƒ-tä÷ÅÍXöÇ5€ÂØë?–ј5-ëÖâ“TAoôzÑ|„›ª.»OV Ÿ/½æîüÖÕ&>»ùÄ/ä3ŽÓ›‰*öéh³ãŸ§$¶)|+1úÂî Põ¡¨ ±ÐÉÃß5_(++<Èõ‡Âú^æÌ#'V)N¾÷1/›jr‚²sÏoϹA ÂiÉŽ³/€¥ .®Õ¥ ´7wuد|ú欉ꤾ«»ºçôoÀ\@PÇ.hdªCõ*µDÞP•xz½Ì»ËÓ7€Œ jŸ4§è°Q ó¶c•ñϬ[)s…iö Yu:Tñ÷›½j^˜á‰‹õyuÔ~2è]N³©~±÷ÿŽìALŸ¾ê0q)È»´:sˆ@*P}cÄd\BÁlÚ³À‘œ·ý ¨Úu¯Û¦YüµÜ‚ôoœØ{¯Mf æ/," ¶8Ú< —°ç7‡£Â×1Â? 6ÜvÁŒ/ÆÚc‰']uÞò#õøØ ¡«ÚûCÆêßGó¸ð{uC54sQªÏo8±"œŽ^:QFýbO Ši!!¾|¬–GL?B .Ô«ÔÞnILèv»ûÄ`\û«ˆ•³Fy¿Î ù߆eEp$n´ÁÅš0S–ÞM1·#ã¼ÌiGrçy¹»)õærë©ÔÞÜ'!KýBÃm~J›6Lñ©Š¹õ”aeªCð,ôÚe¸y/ƒHqJØÒªLøƒÈ½OkÔhAÕÜdSµW}~Ù¹›HćO‰ÀÇÕéí¶ôxìF͋ǭøŸøËóÛ+ný—ÿù/è Š_Ä´½æže6˜êóbÙù$rÑ|,>XfLÀf'?o¯â©»Vø®aqAÍ|RPü­±4dšÓ*bb…JS@>Puª©²\ÍËó×JIè¬aÈ6 wÑ“§í×.Z„‡ õû‚×/®´®K 5? Î ÏOm&Ru,| †b cº/¥8š A6R·ÃžòAnQ^¾“Ø­Ùà”6`êµR”å¹·žä‘£ DÈø*Âs–AÌÞ™I@ ”§æˆdMK}YP˜U%Ž£¶‰ƒ’LMf¡©8aSÛÄ”‡çäÈS[67'½I’hÀPóâ ü"ö)#Ÿ^§OÝêvÌQ11™k2”3Ïè/á}át`•ÏTùó;V_?Ý`œþ¡š‚ù`0Ïr„¤ÃÀ<í4qœ®Uãçì³I0‡„lU{þÖá<œs–È9-t­Þ¶ðö8t93‹˜ÿYëÈ œâ¶,Õžü-iÅ\«þüÍ×,8}¥îâv×ã-¾”Š)€“> š–Jà\í““.˜Ð­h¬­Ú·¶&öµ¹E‚ï™ gC]-ÐPœ}ÛNT(OûU³…Ì MKYð M@oέÙGº„îÝ ûö/³®ÞO,ghaë>’¸=C§³Xüy(ü»¹ºÄÜ-AÛÈs{þÖSoŽX‹÷·F®ÕÛíqh»”HÎàHkÅä„ó²†s™½‰™ƒD¦á`§aàvœIÒžü"|ÄGÝO¸|=¬Ê/¤l±½Fbæ¥x:œú1P\½Ò{9×›óØg31É1aóJ{sRŠÆª¿­˜_¤é¶zÝMJCua}oµiöp:'f»öùôeµœýS\åONÆÍÛ¶vX¦kš»wŸåéWˆäûþø“pú|×T‹¹¶@±½”øÞ|ì´nfþÖc‰Å¨­‹‰¤tÀA„RlTÃÅÔr­˜½‹aòב—÷W>ÛWš‘×mÊ/ oëÌœf,Ç}œµi}€†î6—mÑãô‚@ù>o'•[Ðg  ótn #E¡vkVm¯„.ï,÷„ 8{nõÖT¨ó3ýqkã’^VA£3“¢Ž,S¹•‹fÖ\sùt ´pïîsæœóÐÿqøDˆQ‚ŸH’÷­–ï†øˆzúõFbÚ9 ®ülZsРݵ·áO¹ØÄ&Ÿï †X&Û” êjà€æ!0LnK~‘b£ò}[Í[ ¶NüÜOåÏæ×wüËŠôÁRžX]Ï-L»k×_äÊœÇûÎÞæßa‡^Cl ;)[šºo¢N’‹#ë¬u&CSÜ“¦•{÷¢KóSÊDLj«Slš‚¦1Z™ŠÃ{# !¶ÉñgÌhÕ ÐáxÀâCÞ©ÁWÍãÖøî©°ˆ¹8^ôâ¦Æ®zÁ¹ëÛgc‘€êgét;ö·N@HQÚîa¢ _eß$†\¶]ÿ@¬{sp­°÷h´–nè„z˜Àr™ql½)¹ ´"+}m¡ÿªÕfpR&0qû.ë«òýsŽ @­õ_åa*Ó—]\¿ˆW ÓáE+ùÑ ~ +øïéãÑ×@òŽôYKç¯ÕCïß,󬔑÷ý‚~­ÞB€+†-<°Ç„=3FKSk¢®–Œš¥ …«~–µÿbërä·WY´{±ï¸Æ ‡÷F@VNîunÀýºÙVC™Ó7ø'®YR`w5T½€JÜxÂX=¸†?÷nhS=峫 µðÂØ”Ý~ÌxîO™Ã-îà0¹¶´¦ž*ÍKºZ?ß~œ”xŸ%­eÝw5–ÅŸZ=øÛñ¢Þ˜Ë~©¤£¥…߸Ásšgœ KÕ]ÏŽñm¶£©þDÈ““uå Êæ‡GéìaL´ðÔÆýÆÄ‘úT)¨d*ž„|W«BϽ‹}1ø˜‚Ëö¿ŠÒž~Äå+{2róîlÛwØWÀ Ÿß^ïRèã—I½ùkè äp¼0º41÷4?ˆá¼Æ n½väF òbûzrgŸ^Fƒó¸ý­ËÒƒ»ÿtèo?0§È+?Z±á.›×Ëdöˆ©" lζé§ÑÌ— пùÔ=9€ÚGU„º¿°ÁT%?uªî–Ñ’euõŽEÏOñ ?rû%¤b_ýqÛµ „B‡—A¿]»Z€Æé7N_Û²'JÞR~è øâœñÔ|èÃá‘JÓÕÛíÏ7Ö@&ÉonñÍ‚C5nA毫9Ã[ ÀJná]åuræNU˜lÝ÷Ô†s Õòƒtv׺¼ëÜÁë/)ýö_ mŽ¿½eêö}_P ¤Tg®tw†PÈIõ…ªnET†ô»0°ý–1~ƒÛV¼}`Øý :´Ã¬qò(ë­B“~óÌïÉ—<£Ÿ”CÏéý4äîú-É(”Rc½Ð¶/êòz´ª‡eôQÓŸìžlÃw:[·GÎÖ— +’ hiõ‡Ñòì8A:'¶Ûñ“'Ãîâ´1Fé» —ö‚zºþœÕÚp{…kÜ'ÈÍ~Êï }ªšì_êh_Ÿ´}“JXr¹æxïÅĽˆV€ãí" !:€ó›n'r¼ö øÉy’‚îÔ`Ül´BÆß‘‚­ì޹Kö½Žì˜jêýAGþÖùïÆÕynK"ÏEž{\‡2èg' Í8ÐUá]}ø­sFgÇn:p?[H€×2C*xv0$€ü  gÓÀkðôb6²º”egŸYXŸŸš–Yö¾ä]~w á‹ZÉ?iøyP]Z?ÙkÚV#ä¤ReÔPØj~x^ròräÎ++?–lºHŒ Ì@+ìOøÎÜOŸ÷Jûñt.ä–ê{úÇãiÞ3!·ƒàóû#G¬á¿ý/«4Æû+y´ÆŽ1:ëO÷qv÷çÿ-ZÝŽuBV¾ÉñŠÓáX8·>-ꫲãà³”‡n®¼KË.ß>x‘´ÓtìEÝÇéà^À-»u‡«ÆŠŽ÷¬…3‘#)ý!ðíBx‚¶È3ÎÛ)º}öÉÓøû7o+˜è¢}ôš(U¦þ1wzÍ?Ç·_ ·™: Ê]ËSŸµÈ[•p/©<Ȱ97|õvHˆí5êéåûU&Ê.«fŒï÷"0 8ÏbüŸç4=eÎ1‹DE¼ÕÑdàMͤÇpt!Þß:1( H‘oƒMÎÄÅṉ`Ïö¼ûðÀ¸¡cY[Dzª³Rï¡CQÁö¤p ÒÞ«uðAr–&6fjA.ÉlaFsùÍǨ¡’U`ÉKSÓârê+  × ‘€ò)°*~#9.õÀnN:sïÝ€SŽžadj…fÜ\ñù=Hô¨.ņœ´ØÊiF&Žy&Ò ^çÜË!èHÏéRÒpg;dq!Uk‡^Ô¡ßõ¢ÄÀ$ÅÕÓa¬ž¢¢ÍR‘’®cÇgòJžÁ¶0}…PÍ·z·(¿•U`÷åòH‹ÚÂÈ„¨8çÔ/)ÆFŒ掇ÍëÙ·|Cˆí‰Ô†k@ÇØ/33Š Ÿ ÙãÈ; A:8»Æ‚5ÃÝ´"îÒ²3gõŸè6š›v÷Ñnâ#g›ý­3óô·šOfGP«‰ ˆìçÒg±þ†ËÄk¸Ùë¾à‰"ƒk/%ø†I£_–Õu€†6D Š .DϹgÑ<“79bÔ>{8{É2CÃLU0¨o¢$En_€6š%d[ÇQ èð¹#j¤UMáÕë“ë˜Á9æZ*ðM‡f•‡§e•jSf¿Ä5y©ÿCòt¥Ÿ7l%y_Þ6ärGµ ¯è0$Þ©ªuëSúPŸG÷¾ÙJÉ ù4ˆzQGd¤õW•¹B~}ÑJReÿn›A>!€"±žC@y3jò0û~¦K­€ï-A"4§ìp7ŒIQšdªVpËë·?}Çÿ”cOŒî­ÜW”ý¥½85ÓuKÏb¶ûXŒ—qvÊi⃼Ðû1VÈG:B WGÝ)ÿÚCb¸†ˆãPÁEß|†Þ#cá©#&üZh„»PÒÇ:ßå8 µéoÝÙ°É8$“‘~¨ýƶxùkâ´F²Ž1»rü¦Ãâ$¨ûª^"» üÎ?ƒÃ®ÉßNC—†óY2à%û4|fˆç“'bÞ tÏ‚Î#5Ú’?,3›T,&ù- ¹î]q/p޹("NzWoS~Q‹:ùÀѦ*å¦Á„õ“ö^>)>½;C*©†&L’Åù ë a~0$·ŠÜ¹«¨H3·lܯfÅ[-¿aoªšÂWèV, ·-GKŽ´%¹ùMCYUËÐÚ{õFÿQh7QصÄKù&§ˆ:^v ^§½¨Ge>«RFŽž› ÙGa¬ÏŽý!³ME,êqË¢ŸVÀ¯>³ünؘ tí >[<¹)S”à+'÷eÖ`²ÉJÆå”èÛœ•ÇEýôÀ³>ÙpÑX7ê|3¹4b<±÷©ë¡Ò¥‹!±qxW$Ìߋ뭦E£G†cU¸'ò÷¾žºûOòãä-\õw@ÉœEºp4C|ø3S¾Çp±þÖÿ‘vr ý€óгNg);[ÐQ±ê¦e¥¬fÛƒåC‹(¼WëxTî³ôÅ“›9 wÚõíN{u ¯YC*‹v,ö/tøŠânŒø&ñ'‚†Ë‚»H_ðÕýUöí·bä¿sàØ¹Ãþñö«@¡*Ðã¯ÄczfpìâñÊDáŒ^«•*Ìâ›{`ç4µ¨áfÀ#E¦„Êysç̃v£uˆŠZˆJT€o…€å²C!C "$B^˜ý>ò˧É~»ØíüUEšn+Ö¬×Aê )!ß EcçŽä4Dét^?=°ñX•±Ê©±‘'…¦šÀÛ8Æ÷ßúoIÏéÜ'—CU';*A¥@v˜ý¡¬)íyQÐsºÁedæ³uõ9¨/˜©RtÇ˧弿,ϳ,‚1b^öØ÷àN/¹éAkøUsÊJxJªð—U˜úŒf8ézäº]ªðÖ3ÃÙã—ߘ3Þˆ,ÞPqtÿ1Ãá­0þÖíW ¥¿uq4í¦Ñ¦ÎÒ¥ùâý›TkÊ5E-Ü©‹ghÈœJ…žßÅ¡Tsh& &–Ý6‰ ç­Â燀bËÕÿ z¶ƒú+ƒºÜ$ôUóÝÓõP‚¾lÊ™µÖä^ÄÔ[ÛµÃÒÛcØI/êÐÏš¢|e^x±‡ŽŠÆúC†ËËÔ¤7ѾÒ£à÷¸Ý(‰"³`¼Ÿ,x’(ÒXX\S Ô¦>iå™]L]8©]>GÞ. 8# ‰X®öÑéa»-n!%nëzè¸~ïx×PŸâðY!€uúgÕݸ±=¸rÇqÎl%YJc=ô¦6”=¼zx ¡ß{l“qÃÄ"€uºXXp"F#€HzI¤ÔXhŒF#€‡ÿ»¹¸, O34ðš=¼|î}4M¤%pÛezÞ5ÁnÔ€y(xŽ-‹^›rßÍ'•é47&.« ±Ìè4—C£NE²p‡kè wÀ«“"ÛIC‡Yš4ÀASQ`YÀaW$?ÎK,C& pÑu >p®Î,ZBZÌó&éà¤FT#ÁÎ È‹-Éd k¡Ñ¨Ñ]³É]¡ù’Ô0Nƒ_SK¼þö\i*ÍNËØ<;䊀>|÷èCeA ;>4Ià3ÎÿcèièKô•…Krj_•åuÊmz“üBoìx•“‡–½}`Îýå_–LÂñŸ–tr¶ Ã.t½9œ¦’wÙeß)¸l•&Yë:}fi–Á¶éCj.ühq§­ª‚"äù 6gƒ¯øôL®1NÔv(®Æ}7;ÁÒö"¡i~7×ÌP´Xß—Ô•îþóæ²äSîî)|.p1 ïeŽ£Ù‰CãcÖp= /³¦š&§Á{ýòÕÊa/rõ…[§ªþzx)9.ôçr{Q©€W]öÇ…ÇáæÆc‹Ç÷#¹€Ò„¨á_ßä_ƒC{ç)F_2,&‚SÚOZ“Óë¹Õuy´À®4-uÒȪ¿ú-ŸHÎY„‰q7† æD®Ý¶ÀÂ?cŽ[ çPJQ©èÝ+1à˜­Çñ’¥3·:þv¢äŠ€^P;>îѹU… ½Õ¬fm°Ë 9¾aÒžš‹–mp'ç0’p¨%_Å„í´#'®t(cÂö•öcødÕ1—ÙuR)7ã¬ø5k° ÈÕ9Í(7#¹€ƒOÉ]tž6 ,”Ô‡ô‹;TÔUU¥dú«BG0¢ùmÆß¹`›?i{q^`@åͱØ?Ç·€ª;œôQ¾öIJê5çù ­}ûÊÞ‹½±{O0<Ðj<Þ W¨Ða$5z„î±D¨Hˆb:[O& (j.ó…ŠKXlóKƒ.@¢ïÑAF[" zÏ’?FoO‡«Ÿª“£™ìd´môöTx) W:=/ñÛ äÐZ{ãE²áÐÕ8xn&Ü£4ýyk³«Jേ4-ûå>GPÅy[7#çVpåýÃß–hx:Ù'qû0ÌVywR¬¢Ð[ŽGÀ%÷ ùkÞM¡ÃšÊw‡†…$]ÛCLEïdÍ )æ¼O[„œ„(LMé½çåpaÕóœôùm^¾sÁ69~Þ=R§3MÔ æ¥ÂQ¶´|}”›{¹yŒ•»ºýtëØ<À…ÒD»}·ø  ô‡Þù5µ(uÁÛ…#k¸ÊÉD½Øô²š7–OCœê3 iä2œ<×ÕA'Ø͈<èó…ÈHí7…³µÐ•Ἆg„¡ºêc8™JŠ^!%ÞW»ƒÂ2âwÔœ$ÈO(¤;ty<$øYu ¯õ‡`|Ê ÿÝjFoðúñ‘³qð …¤×'U@Š1{ÿö©&ýy/rQ1s!M#ºÁ:ª23áZêÆÆ¦¾nV²s¾Ñ“Î. ðmV°ã ‡JBâô,à¥&å¾€«öž Ó¡•I-1m3´Y°Í8£Þæj‡M÷Êb§¾/ÿÎÌ-gCS6Uyý™EŒŒs.Ç›,ÝPä:äûEŠX¯8gn–Nvì?jÚHpéñ©K‡Ñ+Ÿù‰<ÜìÔØÑéÒfz –¾+ˆôkÙjâ§E§˰«ŸB¯m³iºÜ«Wª&Oe˜Í6G/7'l$ç+É¢'n~RvóÜÖW¨y ÄÓÀlFÖÿú;˜ìå;L iɬÖåpJ"`†.zé,'DFsžÙ?ãBl¾°ÈÀ‰Õëþ\tñü Ò¿ò,Ì!#²Šª¬Iá~#áC"5äv+ßD>u+‹^œåâgT]ƒµ›²PŒª²'øÛøû›ç’θriö~Q?xÍ)E®ä5‡úí³ßTžBóÉår@0¤¿õûÑ2hTçª ]ºg£‘R^ÄšCkæŸ9¸0,½sü0Uçè™:µ=5ÍÛû¦ö|+jÁ¦“õs-”onߢá‘L×5ôðbæ<ÉÍ(®£ 0qZ3y0™l&þ¾L·":þ|ˆƒ]¬¸@õ—c.îhȰ­yí"óf9Í/æ[Œ¡êÈqgŽM3¡6À‚÷Uo’¨šfŽ5чõ?½}ND i%td§¼”L7,³kö9Nn† Á_k‡\Ha6ŠèY«ŸÎ»ŒFƒyM² Ò7:·2—p°Þð¬ÛoܹUD­­©‚GeÝ‘Âtm½©ÐŒc<˜»—±qÙ®×èi$Ì„÷4|µòTÀ[UJN0°×B»Â4¶˜+Ðvqœó®ôXnîùíÏ 7÷øoJŠuðæ’A»U˜©À±Á«øóAáU ÁoÈd<²OÇ@} ¸YOšfÈ d]¬ò_í)çOgÁÛYÅbŒ¡ÕûJC2ÂùŠÉW¡ÇsyƒÑñþIã ™ÛW½º²\æ/Ô+)&[Pçt>÷š´Òž…’èÈy*•6)qÕ­?£ÂsqN`*Ê­šû½NÌ3¤Ô=¸Ìf™¢ õ¨JЏÓàÓ»M©¼¦÷ü1âð±¸`c^-èÇZ¿ØÎ’¬ÛꇳFJnn€_d‘¢Š¦H)0 ÎÛí‡ØŸ_`çïPbÆ!pØ/ÝGI Õžî?m[öN‘ìÇr™GÃû‚“Ø–ƒuY¨t¡ pl ?ÝP/Zlg ÎÚ˜¹òûh3¦ú‚œD0ê»ÙhƒrC0Y´'€ð±êÂS ïõÞFˆ§”þ¯à;FÉC¿HI¸t—"møb â¤÷B ‡ú{1´H µ.»`îAêaƒàX{ègœ zQ+ <çüuò9BÍ+øg¸€h^Ó"JC›g¡ãöüæp”˜$c8ñQ¨%:aeÞ¼Q1¢) 6½\FO‘ÿh$W±V}sÑ] hª îsÕF)ós+s_öÓR&êà¯2÷\tÎM“L¯_–õQVâ_{Ȇ섴í__¸˜§c]& øðxpÎe/bÀTsãaƒõòJÂ, …¨®º`ž \Åü'eñ𜻃fG ãóÇD@0¤žÛÐMˆ*J>àã³I ¹i‹7Íì·ÌùGB£fý’i5=û_gظ k[X¸‰³§pÍQ#Ü”BlZ —wÚïKãh®ní`ýzÞÐ/‡wwmüA×eö¯YâHCCx÷¦„ül­´*Íj0"h¬fW5%y ÷Ùõ†A_’¯’M~ቭ–Î>Æ ·šC•§UfìÛæ)âWT&ûlõA_Sqø€ôP.!óY,-Ù×'ƒž 3·þó³«Á›@ç]?Æ ÓP.ÄÏO…CÉÄ㇞uWÃëôOכ𖣴ô ‰»àvpÑG”¢¹oôÎ;Xgê *Ÿ>I'_& ësÛ~²…Oá%S[O«,=ªêmZ½Ãé/W–ÜÉuªoÃÓŠAà3Òé­[¯1kFÄ^S8.bGß³$º5D§¸Yñó—ðµ æü†#+‚šMÌ—èvaáß ì`ý`“ÀBŸµN'úKuê|¦Fm‰_[»¯=‘ÍgÔ—­¹”FšŸÚ#ÅyŸØÁúgÐɨ‰X§&›‰l¾œùýð‘ÓŸeÅW•UU½®®¨}]Y[óªæu%·æUc#œï€Bët|`0€@¯^RLLí Šj}Tåû*Éöé'+ש²4NUiqAzvúÝä{ae%¹О.ëô.ƒ3Æ´‹Ü¸Y ¼‚+pr_#Ð%ºl_*õ¿/¸œÚZ +Û·–ÜYÛ”òüAmnQ“3w1Œ4•dÁû †i—%)ª0û« f2Ùhäô´¤ÈsþkÞ¼i1M¹ËêîfŒ±Nïf‚ÅùLP\íµ9u•óØgóN4¥n7áiÏ_÷_ã›/¤ˆi©p¡þcŸ­;w‹æf‡Ù:ÕTño¬ºñÛŠùmÏÃ1^¼ï2œMOVñ.´'\æõ’¢¬Ý~s€ºžç"µÏÓ #%''×…cÖï„Àÿ¹ŽÓbÒÓÒár$z(µñÑç}d†-ÖRî#£:žYù0«¸:=(âVý˜i–¯ï,ß൤Nóë¡j ¯3|~ñFå¦iL²4zägúgø£péˆÿÆ-[ẹ¶CqÒ•½ï%@Û¬»4ç¿ÿÞܹ~ ZiàÈšbº´®îÉœ?èžÂ}¶R…$­Zn±z¹…Œ·\Ÿ-*=°á÷SóÉVé;þe…–ôÃYì‰ÕõÜ´{0zëü?ppŸÁ3‰xÐk"U{ãŸÛ£Õ>×6ý›¿¿‚*>öùÔáåV¶+äúôûØwƒúøïVÝ@,Beå5“gݽmæñ£ŽN®§ÑÂÑn”•úèê(ÒT„ ²4y™Þ½¥Ê+j^½âÞÏMJ)„ é–‚w¡dåä^çܯ›m5”9}ƒâš%U@:R©zAhí¼€¬²åÆJƒM&0“=>j”^Yü¾Î/ùé€?­ý›7ƒ¦]`Ù‰#õ©ÈLÅ“ïýB ûœÕë' sÙ/•t´T¸¯Ê¥¤¿à6RzÕÜڳ旯~»6HŽê’ÿ\ýNÛì5“¬ƒ 8æÅóŒêú9Í×vP®'dãqz7íÅZ.ÏÝ3ÔЀqýßeüåþÝ@Ò/¾øb˜~ÿE GÜccÕ­ðÿ[÷ýÄQ#4*_qSE\Ï8{>99¥°¼²öÿ\Çß½æ¾j™y¯^_tÁ»¯½eêö}_P ¤Tg®tw†&(«`¨Å¾ï ¼ÒµYŠ é3L¡ôÎùà·jL;üÅú7oμM gè½1}tÑ^POן³Z$;Hxc—×£U=,ƒ®c¨ùÙø¤§½Œ ¨ì³ÿÄPåAÒ™-ÈåKׇ‚ÜGýÕt»¾žnWƒàæév‚a†c|Nø:žñwrúîT]ý'ûŽ?d°Ê—Vº-tF°ÔŸU=x˜÷ìÿE=Í¿\ñáïEºlXз?y|É··¤´]ã­xŸI*ô‡þÛÿvx,RãýUÌRrC;²ñONý]6ÍHIkÆxà̹çnAçæ¢:X·+øW?:µ*©Ü™V<ÿ–þÍÇŸôFþÍÿ Õ¹m Ptûìxqó¶‚É„:¸ÿ¨,!Sôƾ^sPÖq§çAåIŒ#>+íÕLf‚³Q†£Çr3àN~|—¢èŠx}] œãØœ»9OÁÍÐÍÅüŒÅs^ú÷¡½vš¿xùßÓ#++m9Nªrë ƒß4þwíVÖ‘¿b’ ª^!ïñ 嵿“.vuñì·Óìý°¦=Ð=O\3ud4öÿöpey"ÓQ|f¬µª6æ;ŸÞz²Éxµ`B8X#HäTF¶ÖéDfkþ¤óZ1þÍÜÈs”ßÊ*°ûry¤Ema Tè‚ñé&%"å·#ÍÑÞHc¶fŠ)‹úÀ }ìý8Ç«ƒs`>N]ݪ–ϱÍݪ:æ¿ÿþ[¹6ô¯C_ýsfñÌùþoÞü×a‘÷!PWS˜üåÐ)_i¢þ ±àúí,ßc±íŒÇ;¬ëØÉûTÊÉ?ÎùÚÿ¾jt(ç'!¨mhV5ÕŸXÇ Î1×Rž“ypä+—#oX µW·Zª"' Rgä`=TpÑêÜ¿yŸþÍkÅø7+ÀøþeªVpËë·?}Çÿ”c}”‰ì+·bŒìͧyïåæœos/Sñ…ß'•*Û.DzZÛÓ% ã ÿnåÙ7ÿýwöø7ð#dWH<|cí*«kaK/Ÿw52ðW`¼áØ=óð=÷> õð_± ¶Sô»Br‰æ9t `÷x#Âù ë a~rl¶ã]Ü‘g„á*ï¶o翎’ Ûåß¶s²°ð(N%%hÖà¾ÌºL6YéÁ¸9מôÆ.t y…úAî0¤_9 dù"TYyr—PW·ª¯9êVÝÑž0ðû¤ï~‡ýiŽKNVW¿’öÈ;Γ¥RÌÇi[[ž:I¯úuÝÕëW®eÀ±9|3è¸ð[RŒ«µ{Û ‹)‡ºú=ã-åú„ä–Ë… ¸¾orDn²ßÇÃ.v»Æy‘]:¿Kp¶N¦ocŠî 1þÍÅ>6Z À˜´ÆÑš_pÊJxJªt “Ó¥Yzä^¥‘^—£òQîÉŽÃs|\íDlJ]ŽüÊ a—ƒw}†SÔ±Nïò{ëÃVàá>Áqž‰·ÏµÐSß3S£ŸÍÄ!ÐP>z3ñÑók73#ofæä¶ü²önÌÛ)rÒå¨ìÕ™íÐà,„€¢±ByRsÝ §ƒö—ò¿tÍùwο¹8H_éQPS3ô,éÀ@œ‹)ßïs*J\fW¥yí½x—Cy©àÁÒUõt;¾X§w».éP qc´6­·sÀÿ<3úiCÛ‹ÐûÉš› 2­ý¨‘72¡¡üöœ×¯?Àx¿ÃÚI‚eKÌi)þ¸éR'é1™¤# ¿è†ë$­¼§MfñÁ%SD§ÓtuÓd¨}¶LûÉU«+^:»Zø÷ä¿‘¾'€Ÿ 8\Î3mÆK—˜í÷± œšV”—_‘Ç®È˯”–î糫«õÓdÒáR ¬,C5:].þ~,x2(áS¹¸|-=ìï%X§‚;æSUÙýßÒ4snmÿ¨ 6—¡aPü<ã3Tè°íxœþ©î÷S¯ªŠüìéÃàüqM :ü¨¦ÐØø_]¯¸„µü³Ü²G©EÉ©…YÙ/?L}ïÇåNäJ—¥gÞÿ£ëûIK÷|Æ}¹H]køÙ¿Öôü¦¶j!§·‚D¢àZ¿€x¡Èð;jw›<É(1Ѐuº°¿p¤‹PÓVÈNë"æÝœ-žËØÍ;èíÄëÎ ¶$-½ºx»&ajŒÀÛ#m/EùX§¿=p¸Fà­xüä…ž®ê[ÁÄ·E¾­Bý½¼mÁžAÇé=£%£EůúJ†¬XJ‰E€¡1¬ª¼°Žû™ºÂ:]bï\ úÿRc–ÙH üXd‰@@s°iîÓ!jW‰uzW ŠyŠGºñ‚®Á ûñÙ8#ð!Ð<2/;áCp’HX§Kd·I®Ð••µŠt¼]¢äv`÷•\UM—¦€¾ÖhBþÓñˆ©ûÞ£=R²ŠÊ:]¶°øUlnÔ§B W/©õ¿Þå5Ô54Ôÿþ3k§¬ª•žr³¡^ÄÅå§îãÖ‹uúÇÅû³¯­¢²–ÞÓ?ûûàCðæMcUE±}EZò¶žáµyeYá¯ëÇ誺;?l{éî=ÔÃäCãt¸e%@ñó&W–pØþE/©¿ýV}èJ$€ÖéÐI=ID¸ù¶§÷¤í>mag?„£uRhytïßÏóK)ÖéÝçžü,$!ÇéÐ˘Π%¼ýôgÑå«‘EùOà¤dm¼†Ð?¬š»W=ØžÞ½ú£K3ßÞØÔXÝl´fUÜS nÛôÓæðSgöà&ã¦}L„¶—:îëóë?ÏMŽ àX§Ì»îó­k„ñÀ?vÍmÿk·øžý" Ž¿%EO{÷–}óæMiqöƒ˜ ÷â%É…±íE’{Ord˜ô<î~^ccÓöTªtBRä´KÚÝxÓȫ攃ÿÞœ:¼¼»ËÚ•òaÞ•èbÞ"ÀÝ0àNÓ¸ø¨²Š+¼ÄŒÀû#À­©ºsýØ‹ÂÏzDl{yÿ sè™OKï>™1uXïÞhkâ‰ù*†‰0F`×ã:MÛc ñ8½Çvm7lØ–]‘ÐÜ «­mˆ¾û¬JˆEÂH:X§KzJ’üÄ®LqP¡ó“±1]’úË*)`.)=ÕCäüãp4œÅH“§¦>)î!MÂÍÀt'°NïN½ñÈRSÓ°í×ÈʪZ¸ögÐ\ÜDŒÀÇFà eeå]'®#€À`ºž:ï…>ÐR¹.7ë%»k`Ã\1®A€¡gÛ¿¿rŸÞÔ×ùW’Òñø­QîY:©k¶ÖfØT%zo nÒòUÁo .ІLWë¡æ£˜:Zýå¥e)ÒPµÏqÿžÔö }¨<óIàIZÌóÅóé.èO÷¶6Ÿ¡¥¡†&ºòÃZ†×Ëy‚+|î¯Ó¹MîÃ}M:TgªÑ@fê+S²NV¸•½äÕèÂù†ÞŽ”sg’’Ä€­ì0Q½&))¼BL^›Iô¡nãºruYé±¾)mR}€ úPõçÁ)Ý…w ªÓŒaÌuÇöW‘'¿Á4T¼¬Ty*¼ƒxÐuõûȤ꺔qåhr;óÕ5Ì \L§Xk1aíÕ9SMN$‹TÈš5rtM†ß5ŽHZ«è@Ö¯‹ÀÞ¢åZÑ|ˆ¦òЯᦫRuwžÄ†wáš*y •{ùÏØTC}à™(ö‰ªì6tÀ•ŒTr¬ël2‰š}Í÷#ºcõÕ]píôÙvGU𶳿®k:‚ @CUvv|@ú£øŒb½WËpJx¢G:æ¡Èd¨öïžÅ…WuLÝÝ)$[§[„þ:ΜNbÌ+e'l?umÚ[VÞÍ…R_\éB…€ú0ljZ_Ê>ëßJ9ªù»£V®rRø9R¼Æ>?X-ÒGþüQ°1ý2øàü«äÅ?ÝÿÃG•„’å×¢Zò†ÚsÎ(%PÇ2T5…ÁZªz:ÊŒ~Ò]CFBZÐå§·rbR :päé½:7·ù½ÇÀ™µÊv«»šÆäM­ôkÒH·¬‰£ÔéðŸÕÕ©Ñi{—\n®˜U7zOŸO÷»Ù²1"׬ÃiÉ?-ZT"’üA£}C'Xš+ð½Ã» 3ö >¼»kÔºÃ诡\ñ9¥4lÑ0&­¢xYîË16ÙÛ„¡Y”ê…ô¸²ÝSsu™+ÿ^êrs†¦í4[×Q#Ì¡ŸüÆü²6t:ÓxúÒñVóttPËN¹æws÷Á\Ñ ¸mJeÎÿ·w%`Mk{ Â@ ¾G‚ìD¤"*î ¨µÂo+j[µ¶Åö^Zoë­·uémÕöjm¯W-µ¥¢X±ˆˆ*ʾʾJXÖ@Hÿ9' Å…Rpæá!sfùfæä;ßùfÎ;§%)C†ö—ŒåŸ\ñ±ÔíïíìîìªZšºÊ’G^À¡¿ÿs×sÿKTÀ:²#R¤Ð…muw?;•|²GT×óØ[ìE h°Fº;¶ß_]üýZ°\Y YÞT§ìXaJ‚þQαQPÒ{Ìé “Srævi)Ùw÷l²³\}Uù˜¦]½WÐàv+0Ùßüg…›æ`]^W×ü²"=Æl+õ†ß¯úmÂn™ƒ¡îÞšUò)ƒy£Œéüš |ùÒúï1gM •ì ¯§8¿(övÑÕ3Ù ].N[½I€÷$¨µ(pª V8€±Ñé,Ë _=˜Ð¾¨æ”Ä”•RÍ|ç‘ÙÖô½9c1‡6Û,õ ÉÂédux»#ÙØÊ›òRþao,¬–6Ô\ÚVÉWñòeŸ÷Šå¾ÉLWS]ۄưÔPÁµÊ¯½æöå}QCdÏ yÅyº®3z‹’¿ãü!–ÃÃy:mY ©û".§j“µÀ€(©ièûz;¹MzùʺÆU‰Mõ"Z/X§«R±#к3¿Y(¶…mv¬÷Ûâ¡CBNyê¦/Ò†|U^<ƹé_]·¤¶Ü“WèÌ^ºÝ*ÍÌý£1ÒgFÙ1”¸©‰?.;ÛûV¬g“ÇŒ2“¾s6•„ÕiC» âuc»Â†‚²S§îÄÄ<¬ÁA‹úíÃÙ@˜ÿ<ê[kùFwrÓûäŒìµ‡VxëNf¦ÔH_µfO¸TæÕ™™o}vã¬è`Ĺsýv³9]?J±ž‘ú[ÆÉ©fœÏ3„[`X.»ìaMrÞü1ª›C–: êtu%ѺΈŸ-ƒíèbK‚Ί½ð®\–yœd©}0DÔ:ï¥>ª€ó(K¢Á+þ“9‡Ôñ‚ùªOiûêü9ÁPG÷weÿþUUmyCåò*…öÛ‹í¯£ÒýðøÇŸD*hÌù}{=ЙÿÃù"™Ï–¤mâåáÎM¼U”õ¿wá­nhø¸d¾.¯cÌžá†68†×X§³üi -W躬Ý+ÜW»êhA¥ÔVxèüù]·Æ3ÑÅ{.Æ/),è¸ïæŠåb_÷ :®|þ0ŒLUqÔ÷â{P¡·\øù‡õ×¥¹JÐöª« ]—`¨AõI…ަ53ÿíDïÌ–kÛi¾½*à5\8/íà¨#tÆ–ðs¼M­´1÷IsѧÊtÕàiG&v6«ßðZîM[ è{(ŒÃÖ|n@ÏÉ÷ö}0BsNLx6|o+Ð7ÆëœÔýÜî'u)/ûƒ÷än'Oª0ê|Šß5L¡·Dýá¨ÄÓBV‚VÈk þÍp :ž^”u‘›™†;­Hš,RkÏTÇrÍt÷`膸À—%!6ÿZ¬$þ‚?›j!ü:½_¿µ°á ¢SŽÿœðQX R_Ñ… €•kV(ú«Ÿï*i*‹5Ý‘{ãdùÐŒ¯Í=¶yøXZ8éhb߾ܺC·»‘¦«~è­qDÑጠªÓuo~Êd( ªÕ×ÜÜC·Õ%À_yYiæë"ús>=0f6ÿÒÙ䓵P”Ù¾¬ ×I¢n¿«X®QhÁNSêð<*{ïê4Ÿ‡gHSè;#½Ü5ø÷e:¥)Q‰:O©Óý¶Ø6:]¬Ð<’6ÉðbÀ¥©°¡) C:ð‰r·€“•{EQé‘Ò|B"ÃfXiãß0!§¶!-¯æB%¥!ùÝáU |ý¿ò¼¹= LÕ¶ê+?~gÆš¦¼ÜšÌ܆çÅ èǦmö¦  ûÞ§ó÷Ͻ €}bá ú½«ö¯¥ /4$eÞÆ/P±ó»‡CÒ±K¦ýûKLÌhê ­õçï®+ôùHjÑ/Îv‡.áãIƒ f¥¦U¶xÐ.)5šO’Ùn“ùɱ’ƒâJ¤éÐ_óUq³´Ë!4ÑÙTz)±RÒ¶”æŒ"2Êþ@I­7šº>ÒhÎ~’Bǵ¶µ„·»G¥áÇfÙØkª«AWMÓÝ/¿=~æ,‹ó0 ¶ÜúRÖ(ÓvÞ¶zåFkcü7öêÉõÒ'L»€v–æšDÀÉ9uyЇÃ^¼eËÑEG ûö ôrj‹oWÞ?q6qÄßFYq°Ñj®­„å'zÀqm¾£X¶Ø—È0§·q*~þ-mÿ¥:EóEX1k½»±xí9YI PúŽ7çÏ\ö?*M‘…AÝÄšõåbóÖkñF.A˜Y4=z5©D :òv]Å#FA k»|—ßÝ^ÓÆ' j¯d ¸Í²¶Pá—e]^ùŸâ©®,ljL+¿cK™V$Àoã”{üüR\7[AÝåÀ¡.šŠ£§‡kt›m«]B˜ú¦SUIØ¢»¬{ª›ï™ÉåÏ·@wUPT’Ù(ŸÃ«ˆº3tClæ„[ZØk‘µˆèàâtÔ¿{~o£øin›×¢CµT^•º ëMsc:±ÿRæéMñÃ墥ÖßS—Âc@ÝVV‘™=<–Aÿftû'%·v·×÷÷ ¸õWšÀ:; lBÎåµ9Å L™]˜xÊ‘Ày-Ùç¢$ma}%Ûìc¹øSõ ÕT!fAwfUæ›iiÒŸÑãú#?VÑÒ(BÄ\W XLÉxQîéïå4×s8¢ÛNÈêE>` èÒá“Qì•ò°1]eY×~ÉIoœ÷ÑÇÖ¶ «Ø-;¶bÑ"©sË} ¸Ÿ¼Q <ö}úv8|b‡¡öÖgÿ=|@ú#”ÈéSÐþH:ú‘ÊL€t8›-0‚\ÜÉÒN¼u)^z%ax‡Æ…š2 êà–5ªZÐtfxÌÞy3zT¦pcÌ›k"YÀe°@¼éÃ%U¹ÙÌóx;0ó°Åb×kñ$ìö¨³©XÄÌê IDAT}ƒÛ9ãϺv‡3g08³’ãs?HÀæà?–B…ž{ýkÿŸ±rÕ÷D{mömŸoh¶µµ´jèRí¶-Í<°Oeß<è×n߉)¨ò O…ÿ6|ì¬ ?tÌÿwÒ\œfïôñÛm´·ü,ˆ€×Xûã7vžÐÈ(]Ê i™0‚N7{Óœ ïÊŸßy²m‚¾bÙ3” X[B>§›OTѤjGÎ ×¾òM¦Ðf®£a÷q^ û‰µ`g¿#c]BwÛÁwQ°À¿ƒíǰÍö¸2§ÿQÆ• N•Øw0iÕRìÏ7¾ÞŠ÷8¾Ã…íL¥Ñ©@¬ÓÍÌ];g`n'¿»SHÐWÓp·`_Ó$Z'ÞÄ[±?RYÔ!ü?YUe®GŠúýí=ì[Ìkyx;÷i'ZËzoÿ›‘ ¨½ü¹¸‰©‘ûw¨€†ŒÏö:Ë™Qéë„1~ÛÓ»X@9U'¯þ¥V²ÚEwš@ÞÎéèàiá®>#ïß· )}ðãÉãG›Q³±·‚ž*ÉÏDQ‰‰“6ñF¡éGWÆ–FS³k^Á æÿñÐàÓ¡?)vÐÆ˜%¸SrSNÂ]zf ¦~x½ØÔ0澺*tÀÏÍÄÖ YK·&.x´oWÌÞZÙ‰S%*©AÕÀW‚íîÌÍ»®Ý¡xn pðŸJfèÚ/„÷¶Rqx“Xºš.(KÿA¤Ð%‚[_ƒs }#î{§˜XAYÙ]…F& š;ý_Ýb¨cm•ѹ©»*ÅÏH!Îk;³MÌ@3çÈ"6Wøpžò“þ^~Zd ”æ{¿ñ®™´_(È8^)Ø0ßGÐö¨ª(†%kº»*±V`ÐŒ^¶t:Qp&õ‘B¥ÂôSøMVup°š_¦¿;Ö–°7µâîWÒRD“F²¹´Ôj¾ÜŒš#õgИ’HÇ?õqJ|¹$&;_q 4%~wmùðl“ó\ 7ãÜO"8lú¦Ð«®m>p<מulóêEJ}UqaP¡÷•]Þë‘XsØ›,1»¼³¡“Z´÷ßoí…‹¢n.s¬™3鯶¬9»§;¿rx[¨‚F± ƒA0À± §Ó]ƒw»@]â“Pwjî ¤^\Z¼ðœì$ø}2_¢ãqúì×Ï`™Üû©ç1­­»ìÂ2ì&hLÇ ê #s DÒ†?rÎbB¥ßCÙ6‡F-g~ºÛ•i‘¥i°{µ·!´겎ÂD¼W~Ê‚-Ü^)¿Q½ÚK¬Ða’ËáH¬,¯-ë³ÓÐ2ëæÀ“J–4b ï܈+t^Ég‡â0wÍ`(Ž*DX ôè‰bZˆAÛ2‚?ÀÌöëà†na“ªç"¿ìÞi±©½7 nñ,ûVƒ‡Æ´Nìõ€ ÜùþÜYù¬]úŠ:L&Ù»]9‰e7dg¾dñý—Þ“söÄMø‡E/­øÒÉwž8X½ü‹WçÒ'ýú[1CT¥þæ nzq¥²:«‹ãÐYöØœ ùN?~h }:ßþß¹q¦ôCÿù@ðè£ÌxO¹ ÿ`d×osàÿ²ë’wš0«*OÉ„1P´_¬Ð5CV›cÂT˜û·fÄ¡¡¨MqšOÔê¹4‚ 6{ÉÁ!¼® øäÂßiõEM˜'S›Èïà¦œÈÆŸçüy‹Ý»9;ÊHÖÿjæ:(¾ eýYØ£Ȯ"½/S ßi­¬!º9 ¦;Íñ|w“û\'ÌÁ]}óÖoÇ pA,ýö~9õˆ•÷‰\·E6ü~Oî4gáj¸itœ‘¬…~û)þÔïÏÙwD }^Ôëë¬TAS½@ßhên™£®˜Ø1ܰBÐÓ)¯"±¦$ï¬1Å>oI’†~Ò)0©¬d¨BgÐ<ûz@X:¦Lß< ~×`è=~ WèÀ,Á—³nµ¼µ„—²Ä aÊ<Ô'*DÉT7^ºýD…Ÿì#C  ]œtäwLü€‰Rû%8)³‰HtGýY¿¸Ò¦i©s9À\òmþ1øº¦“§}ð·y&ÐØçdÞymg W‰!ÞÎ]wÞ«‘û¨¤,_¼øD£úoÕÊv–zÓXÓÄo¶7Ÿÿ1á­ƒ}"­a%5#Ë žyß§ÉZú®_F@»•ñ›{²R}Ü4¡UŸH¤uç,\`F€º 2¡/iÿÞ*#è7:»ç7•Ma ­¦ýýðæ¿ËˆPCo3ƒ™Íy7:gz̧|—w'®[§g)Lmš•.ÍËÀ‚MÕ)ãtÀWY,¬W%©ç]ih%©k›jÓ\¨†ªX7rË’xû`{¾qL´ÐºÀeö ¸w´-ë“6½DSB𬂅 ’°XÈ­Ì%xCMÝÉ)< òœU lR”œXŒLh«Hƒ™ öåäÇåáºžÛ Uz?- ‹++) iè:R鎺d¬6¿ñ³ë1¯º¿ƒSô'Tf§´1·°†?8eFð[‘€¤£®®­¢ª¦¤ÄÍûùÕ³éâ¾øÃ¯lIò1ÙŠÒøòy~0·éþq©{DÀï@°Î@ÓÕwÁj}|¡¤¿æw8 ƒû©¾6‹ ¼?ŠôþH*ÀG¬ê*`<ýµÏìùÛ¦ óž*à¤~óª¼áÄX³ï'Wx™³yYKUWŸš>|§Ï˜ [¥NÄØÄçÚe¯xçL€*'ï¿öƒ¶'eÝê ÷Üô áž/,y¼ÞÖÎΚª‚ÿÄ÷/Æ]—‚îšßn\ÝtŽ·nýú/!9Œ4 ps ïíÿñn¼ÅzNzTÞ¿)ÿ€$3”ÖŠ»±gkîú³!Tø#À€7@€~æ~}é(ð‹ wô¢«áÊfñ;»{›Ú~¿s; Û7ûQybuI\%g•gP¨¡C »ñãAØÖÝ–ßôð§ÜäX.=nÅWAÃþ›Ñà;翳EOõ~ÎsxγæS´ÕáãB_7P¢ª‘8™k!» Ùl›1åA¾tÚA„÷úÝfbàB@Hèì(Xsù’¡åL+~ýÑ= Àçƒ.ŽNÚ:Z˜‚ÞªŽG¿—gECwæãû#颸§âí€è„ʧaWMÉ›¿ÚìwOœ1êJÚ÷VhÃðr€µáÛD;íúËQNR2¿í™‹¡{†¶ª{§=Åú¤<ÀR«½&£èÎ~«·›å8m*\Væsû,æ®^Mª9þÁß-ÿøŠÜ·¯!?îâç[ ‡4:uÇ?FbÏ<0 €@؇ÞW÷qà]¤ÓEÈŒßÿéa [hĺ_©ŸŠžBŸ©'F̸ÜÕ×[ÛT_*yØÖõ<²‚xíôMÌ“þä@™mån¬¡EôõróJKÞSü &I“eE·Ä| }=yÏÏlÄ\G«›6XÆÉ“Y mÙ#¿Aê³Øu®+MOƒØ×ϯ+¬JÅH†<2>EÍ¿LÑÚóþ;ÿ2A™4س¡—¸±,æYžT& ` ,_ø€Ttï— Ð×?¥‹§ÚŸÒj!0QXþÛî=¿Sô Μ‰2ÆIÑÏ_ ¸&oä÷þ'Å0ŸbH§?X¨èdDÀò«cK—ËÌ8,øË`¸ÛuùØÚ- ̃®["߸}e¯è~xvèNùr/Õ•’º:\TG!ð²"Àtúf‡û²7]]Œ‰ ««;õ·|±âè&k¸Í¨ú÷äuÇj_V\þrãv ùr–ïJ¯™®Ê‚¦òª*çaûŽ©w¯T_ÙV ·>¢€#0 ÖHÑL"ž yQ¯7—îÅeñoý|9d'2ÒŸ Ø]9dÓ½Özâ-Ã"ἦԸϖMô݇/(¤Ó_,žHÚDE`^¨çlçiš «úÑ…}âýìu0“¸ß& üÜgbš½³þÁ…äô”I<ÖgÒéφª…@ þŠ 5ҿ⬠>!gCéôgà ÕB¼`¢Xì{K7¾`¡HܡÀ$xçèå›44âI‡€‘ù-{·^N±5éF‡ôg"€ìô?mÔB@1_¹ÏƒjD"YYUq ”ŠH§'T !0fø˜ºé)”zýL]ý1k ~)@:ý¥˜f4È¿,ÊÂAÏêDŒÔQ• ä€tú_vª&HÇNŸ …º9IxËÞ¬"ö·ˆÊ®Tì0*ÏŒZ#}fèPE„Àó"@SÓ|—驆é"YNSiÏ+Õ¹@vúË=ÿhôãŠÀ§3füñ‡P(”ö‚¡©M˜2Ez‰"§Eqx=-b¨fõ½rÆ~–4~0êYO+ qý—¥Îoé?EÖ<÷±wÃÇ‚R‹@Eè;NgÃ"êZÅÏ:…me¾$L>ß‹ænÿœÅ+wOw^hî²{ÖZNè;ÇÊEi–4—=µ5ëL ŸHTÖ”|eX4›»âÞtºšR #SžgÅÂ%Ô-;sêB|EJ–KòŸþÓÙ¡«ªã¡/{DïÓKA5ž}’o`Úæð)ô§ÇÕC`²­‘î X1M­º:É%gɧøfÏóÚ2g3ïüá½\¹‘?ÿÃ’5î?ÊÛ”“°iPýßs–NoËŒ½„Ÿ6ß\Ý0Oï Aø`3P•¬j^äˆß<äâ²ež"~:'ÕÀŒŸÿ'u?Ek¨è dÝ2îÓœ¾åÞaÛÍh8X‚ûe)iwwømÜn¨‹Ïp +·i;páØ¨ É3Óç³-`9=·òP·NΧ¤rL&aêž ·gèÂ3Y„÷KïdÁ4¶MÐ&»«B™¿¦a‰¢0\¸ªËÐHÊ*ú$ÙÄÎ÷×Âw=÷·Ïø)²Õ9s›V?‘Ðs<á‡]\›¸Ei7NìíóL_â>( ù< ’2 (eçýòßóìH@Q<fyÍPƒ#¶õv ˆê½œÛ.·{“½Bë*šwùRµ¢î ´Ç#`Ižú°éôǃ„rG‹À¤²Ó])ÚpÜuMUr£oom‚×D JÕ•ã=$ÑPW9:õÜñG\¢†ñ›Îf03Â{ó#íŸoì¡FGgü¡î"#"Â{c¤­°ð5zÏgÕ]3,üoºÙ\Í»z¸>€êê;;үljÌ[ná®ÛwÊ0/w×ñŒ„ŠÅ4(Ýy›S3ª…„–N `*-ð§™ÌÞÚ$LfmÏ ‹ÀhÓA›zˆp¡‹‚ÈtpH”·h©¿ÿÐ8œ_3„:á>ëw«Üü¼ô‘®šèz¸‹ ØŽ3}´iá3f^Úª{u§<ú()æd‚£®¤’U<"PûÜ}f¨õ:¿Çån…®p²?ÎÉ4ÆtU"U—b:¤#èrtXh!;}tH¡R£@`RétÑx{úûäÎknî‡ ª&š]ç[;`ì~Þ¹]•Å‘…7}±»T(~»í°ãY úìA/ =ØXúsögÜ)е5ŸIn®8ߎ hn/­©Ø§]ñ5åÍ`É•y±Í°úk^ONŽ­LŽi>™.vØ[ÁÃÒ:´w»øY¬&zƒ‹“YrÂû*ê<üÃÆÓGpjïí¯ø¨¸rCͳaÅfÞº/ZÚ&°â :Ì£ÒìaÜ‹F.*¾Ëm>ÝŒƒ‡²Ó$Aëy.¨.®jÊvÇ7wÊóaéIQ7/¥ˆj£ÿO‰´ÓK‘þ” ¡â#!0©|/½PcªQ´ [*2I ›XA. AkB3 b÷0e%xð¦ð0U ÉÐ+@0£š=­5©]÷ Þ²¹©¿_’ÀÁ6› 5ª••TÄ%ó1…@ÆsIb< A4ÖuhN ,ìI}ÔYÐÒ)+@TN6©’.ÉÖSU±þÔ´Ö‹R³š8<@×R‡CΊoäÎ0¢„;ú¨rŽ—p Ú[ŽslÕºŽ=Àà"c[hÄA ¨;þ°ÎÝŽþ_¿ B +ˆrBy®¨BüCtn»»§üTS"ij#úSÂ†ŠˆÀ¤ÒéGKÊ>f¸0ŒÙ Oj3.°5‡ú¬³­¦(°mú¯¾Y„žÝ‰’-ä$:KŠ·¶Vt§H·*êªc*Hõi?,V)"Ä3°ÿ”ÌèMârlE˳˜ð'u`h;ØÂ)m*Üij–ž| hêÁ¬êEÕï19³Úê"ÓÔ–XPý]x-dDŒ8±um‡ì :€ hÏÛ|óZ¬t+‰Âà5WËÈAÑQ"`«C-éhþîP@¼M³ lÜE4^Û_ËÊÆGüD}a™~cM–/’±%|§ŠhÐ8ž¶ôxÔÝjéÚW~¾ ÆsÊCÖþÈ"’ÝW`.‘¶ÁKYàìh@Yõ]x‡ÙÜ”¡{KT”áÎE‚†Φ`U°K $²ëU €¨ãAÇKk`¡`ßµ˜AnüÁOžÎ06ðžâÂG쀩T×@O «$gågå €¡‘S–¬¹ÉÔþ•â<ìª1+>ÉÁ•¸›–„?qÜ.dz`ò`‹#ïÚDˆ”¶ž‰ýMï°8OOˆ AÄ^Ï\±† ã(<%ºÔ‚6lÅ„À A`¾GºÍsí‡t"vB÷1‘ÐÙYùIBÌI`Ù„\ž‰íIJ-)?ÏÒŽÅÀ•{FNô•˜EKüµÅôxEe ¾2»P [´b‘¶j'Ÿ¯¥ªZÿ(sQ⵩ƒÒ@}}ŠSRšt>v¼½eÜâßñ¬¼)døj`ͺˢÛôÂt°ô~ìµR[ϰO-D{i¯³äÕßâ°ûdº*^­ ¡‰Î¦xñîr9oLÇÿf—º_¦Ÿ;ƒ(赈‚¤gC%»Î#ØoïžÖèr:¶šðkµÞ‹þî$ŒG˜^Qåj†ù{†õ0ë„£1 €@Ćê«“œJ´kæ¸ðAI‡€å¡0 þå:§¦»ãp!r^,TdLBŽZs±©‘¨m­Œçv¬ƒLgª«Ô·WdIOe+2(f~š*•­Å)R‡ƒl¶|œE1ƒ›BRàúá㉲@G 8ØJã“ÂSu cÓlL•û’×oŸÔÀóɾ勽xµ)öÉ¢˜Yª•Ž™—®Aè¦öÕ)Äí‰R_òçVÿ;÷vJ£üf­—4üç@`RùÓep€ûO$.™ÔÇG«¹uÕ#ëëêæŠ“ØÂê¨ܸ2ªr¼æxéÞ˜'Uxª@a)Å/ÚjVÂÖ’U5àbôÝ0Œ- 1ßÙÝÛ {RÿQ¾Bìt¨ùÈ÷¢”øLLVþL` JG€{ïûj“ —ĵÎ< AY}æ¦dä4xjv"€¯sMÂq¡!!&lšé äIŸ5‘ºøRú^H¶¦*·nëS%«n_GÖ¨×QŸ8·,‡ÐËΦÖûù¿>W]V¨|ß°ØOÒÏɃïe 3gšÙ¹‚ËÉCšðp}:KDŒíZbÆvÃ8x5æMâw¢Pmý¡) Kfh;ìH@x&ë<æ\¯¼ô‹m¸žù«”®ŸZ;¶‘qbúfÐj°j±»´×(2x¨tˆ™½çùï‡g¡„Às"0©ìô§Âê®ÎG· ®dÂÅRª¡ûAc¼¶ˆK]ˆq©»êÓ0.õúâ{]o8 b¼áÑAÞ7ü¾˜7\Öo>ÔBu&¥êaÁè¿!‘Y⡸""u¸Á¥º1o±VfÜÒõ·b=®ck¹]ðE|œâž>qˆ#Bg[1vTÞ`ó³W7ÔãGU`Cšdl§Ù(CÆöÊ”–ú…72ê…D[Cæî9+?45 ƒºa)PÒ¡õ·`tXPU(b$¼2|ëXºÔ©…] 0 -î?—årx=ÃrPBày€¿ÉÉS{㶸ñÏytîêYç¶v5ˆ3¨~ãg 'n<†˜¾ö )þf_¸x_ø¡_(ûL'ÍG„Àó"0¹tº"4žÚ[ŽK}dÞpØ ›B‡îc¨Ò!—º!±çÔÕdS´+›_,--ýbèZ÷)u›Ï]éÑѪo¬x«A Û!×<ôÖÉp¸O‘G–D ¡Ò@ãà!ÚòùèJ!*¥›‹^ÿÛĤ†§'P(%"†!€[{ÃR'S³Q{Ës©ÈJi~‚) ¹Ô%z¶ë1ªÿ™1×3J*vÅ ×|±|ëÃSäóyͱ5r¯ Ég£+żmïVØÆA ]1:(õ!0ùíô”æNv𠺪%¼á6%]“hêÑÂ3ʠǯñ/¼uã<£HTml0Ò '-Ÿ}éx]Œ¯mlÚBR_fN™gýÏCà8{YnÛ£/soÿyM¢–^J&á¾——rÑ ÿÒ„Y±Œ5µæ§ÿ¥{‰:7)PRWÇ^–|i‹Æ\gn㪦”ÑÞÎ"k6òÅ”/$Ä9ôœ¯£³8‘û䑃e‘Í"Lí‚èÆ&SxÙ]Ye4x‚ÌgΆ<é —¯Ñꎮkzf¨âp¬µõ{/Z•ôk3:£n8:(åE#0ù×HGFŒ~lѪEÚDNw7UÃë#ÀkË4¾t ¾áb ß Í‹ÁíélÈÐU%xèSAÍól1ÖÜíÿj„¡ôÖ÷ Ù_Ø ãKÉ#wxlsÆ‘'} ŒíàÆMºšñ{Ÿ%»³RÊ:¥oøŽ[gPÃ//¯Nq›¿H›pæÆžM5PûÌóÒ‚{®a °ù¸<,ìŽÏT¼áìtNª9>_qî(¿4;ÖGLS«®NrIÁÎhfÙ`[¼ûÇuË2Æ“®Å꫇¥ßíLÏæÌ‡-%Ü–’Ž–R<ÒÕÿÜA£œŒ1+¦JPŠšÜPq²tP³a!Ái&N'±âÙ>Zð%AQmæ–ää‘~LÎzšðw1uIóÍïê]>Äq!» ö„ÜÓ?â±Y5iëámàyÙwí45 hüWèPRVqìeûæËȄ堯¹ZŽÔE&{L¢'ýÉ7ª±èØWyikJ¬ÈzÐMág`ºÁÆÅJ[¯£WÔÞœßÖ”×Öÿ—r[þ˜HÖâ{ŽÈ>Œo½—sÛELýXYAžNSIü`w@|c{ÀTl:†”Ç“=ÓqsAwC­ŠÁt¸yQÈý93kš­—?ö+?)ç·Ðœ¾è%Á³p©cjz‡wØ&}-ì•ÔÞ¤B󇬷–wj1dxÒÍ¢- ÔÆ¸`ÈÍöP7¼c/Š9ªjhžÃ¿K27Kššæô©Ót©óŒ,ߟîe¤© à*þQn룜֦nÁ_ןªªV¼bëW¹iŸg§ˆ0Dÿ“j”í¸ð-šfgsfÀ­Ô³eœùöt!?/»T–z›MiZªSm|6[XZ´Ý ÎÈjäw´õªÍ2Ы©ºóiaAF馩öÞd5)홽êF$ÕÔ»1Ùê6îdµ¶æ¢=y9Ú{om5-ÿ‡[W U gèê›(ÕŸhlß7{õ|­¾Cçÿý&×p›‰AÏ£˹_Ú#ÖA«}Ý5”‹+nF?|(¨->SZÔA ¼Ëfiq càêl´±[a¡Ÿ˜xЃéz$ÍÒ’Äâ+Ó¦9ÑMºjS?)ks§1ɤ˜ÂŒß;TY˜è)î&¼_Ôìilîb`gÁÍ©¥‡±£÷4\güvw¾=ËÃ@'#7ý«Fþ< kcU ~keY¦Üõy^ëºà×xXÉv^òwcå¨è¯Våt;Z+·ýð‡ûðŽý˜zµwAþti]‚¾òÎ6xjÄ…êâÿ–܇)Z Y´åWš3?u™½Úbº;•n¦¥«F$vöó{qµ§kclJ›iê\ \û¿’ÿB }lFRƒÀ¤²ÓSê 2ŒAyu56`EN00â:fM‚ùùGÑž®^T=- Úê™+ç™fX'$Ÿ¬iþÄÙº§§<¶{A´¾¹c‹!ù~Á¥…ùªëŒÁÉÆf–~G„˜’¥ë¼bÞpº¾õÁŽðûÍ»`¿G (‘8‰9à¤/{Iµ¯Ú¼îØ‘áŸŦo›É¢*“˜Œ¬Q1—ú¦ë9IFàaiƒfÖù!Á Ã8Üco”¼ÆûKÖZÝÝ•žDi¯Øé²d|™Óy¨ÓáÞ{—U-ÉzŽS§Á¿mТïìïƒV<4áá6ð¼Ö¦ên #°¨ÂŸò]×^µtüÛÝÄsUEJ›¨„€“J§ƒæ» /áKŽÆ¾G¼½ )÷Ö¾š»ýæ5¥Ç®M€*R3Â%èc;S]*k7%9ªOÄŠ.>ÓYÌ ŽUZq÷ ˆRD(Êð†cïÊ‹iá™DoÝÝã[/ÔÀÜ, b¾u ô˜R§é@¦/…¼/¿˜ \´¿R V‘RйDðõ\L`lu Ʊ. ²\ê¦û¯òv›Ã[¾¯¯ïç¶A….¹£H Ö³ó°Û kBR\K0Z¨MŸI´½UˆÓ3*èØHÙ't×@;ü;SY jÄXƒì8•ÆÔÕ_cá8ÝU_KY5Wî9­ÅÍÐo3¦†<ärYİOIõs/Ÿ¨éa×Ô˜‚#DL.ÇDfÆøBVEÂýªÛ·nJHÉ”®,E‰¶§‘Íu é:š£3ukä4e±"‡ržDÿÝFpæâc÷ÀÞÒŠí†LC†û6u@úM¤–ûÑ®`Æåˆå’{†´Îc#.õök1ȹ% þw²"üßdèUT[ÔÄ6oϪ´¯©€yé¶ÂˆºÞÑãv'±cr’ž\áwÕ(ü»TS"©«B‚Æ;SwšŸÙf{7KòÔÆž.¨Ü Û9péFàî¾èÐ×çëƒ×4ã•fL¨Ð³[×\Íi}ô|òPm„Às!0©t:Ã80y ZÔeœÊUã=káòffá• ýŇ­©m·¬¯¥JÑ‚^*# αcY\E4cëÀ(uסڧ`æ¶•±Ë‚JPßW'b‡rnÎRHšXŠbÞð:)ߺ²€ü¦wØ«í%ÛÒÒ0[Xj.ãXDPu> S½qioc3ÛtÎVguÂõf+ô¬1‚òšk‚ò2Œ çß‘˜C‚vhm“p‚uxGÂ])Jxopé8—z ˆ¸ÔÏäÝ3a² Y_ÙôÐ|7Ò ¯b ©ÇdÖa\DMè“M"^Ys+æÔÖä<ãUx9=BQÇÈÆ8"|Ô‰°3Ú#>Hù3"m}¼”Æ*ø'j új̵tmt(v:Ô@#ËmLèˆçöñ«ºÚ«»:Dÿ+»Ú뺹Ð5ßÞÇ{̸x+òùÀÇxÛ€…-ÏûüBÊ£Þî?c`¨ „Àc˜T|/lçµgèÐ)!{§‚{6þ§:ÿß–zò:žºÖ^È'©ªÈd 7„ôsöý~l/Ôž$VúÒ@ \Dfe•“©‰HZ}mŠSršh#9ž"L¯¨r53Ãイüºòîb:^ŽK]¦ÏüêN!ÛèɽԨD“åp‡t`ƒ<é¿\¶Àó.€ S@Ô"p&ýÕØ5¼c99dª©ÃÐÔ6ÑÔfhê˜hêLSÓÐQ!Á?è¨áöñÚûøm}½pW¢Ò”)JS’ºIî·Æ8¾÷:îUtµ‹fýGü˜T:ý1€:ê¶5×ÕLæš|€|âT=õþy*pM6Êm¯Èz¶íáå[—kkFQêÏi,–kë ÊGæR'QØšªÜfì…"$|望kN®Oƒ°¤!.½Ö &=cÇL”\íÔVQ…ʬ¢ ·Åü!ì´ò{[x½=Oç›(CFýœHÍÄÉ1œG‘ÓR†+tXò‰+ ïJi”YtQêHã[—«£¸u¬WÏFP>"—:¯zcD!ëI„ïÒÂ’ð žµcrB&Â4Æá_}ÏàfÓ‰ÐkÔG„xYìô?wªÇ…oq©ÿ¹“ŒZCü%@:ý/9-¨S„Bà™íWx¦ª¨B!€@üÅxYüéÃag‘édÀÇß Q%ãûÒ!:žÍû_ "Ömº”¹]|2\ïÑ+£à–˜Çã o£â¿ûÐMUø8¹:&™ÛבÅwžì›½¾*wÇ×ÇœJQÔƒD1Åö-â{]ú`ÿEMˆz>ºV‰Ei„Àä@à¥Õéôˆ·îa;ÿú…ÊJDöÐÂ?z-#ˆJ¦e?òùegNáë£zšÙak¥ûGÃU.}_ðñ¡½—!æõ6ºqÛ(©(°h6–ßxýétU9—͘2b‹g¯Ðƒ ]t2*VLtD*Öó+_?ùƃw`°EEýAi„ÀÄE`DÝ1q‡4ºž×-;³çL'öräýœÿ™Ç|i|jOTÜh¬¤"HÛ™“w¡0efÃ׬‚šxð¥ù‘…Û,Ÿ¦Z]•êBÏì;Ú‚½K%Dï9ú¨›¤F‹œÊR\™þï9K»H2›«—¥ò…J ¿&,zŸñ¹txÈB'ç¶ñ/{>«†=}oqôõPI„Bà/À¤Óé?}ÉVÎÚ8kÞIòö|<þõ½dk d!4¼zf˜G›ÄŒ›èƒÑÖVòÎ¥8)úFKè.ÆM{©`IDE2fìå1¯¡¤Ïgcï¬ê¹•‡ºurî8%•cÕS÷½=C¾ç)¼_’xG|ƒ9².þ$ÚP/Ç7“÷~j}3`ÛqaR±;µà~Ùïi°¢<zñmus7ùob-¢€@L &•Îvv±%€êúô­®-L¸Uõts7Ö“æÉÌØï gè;šªÝæ¿ßJ)Ir /"ô¸%A>ÄÚàè=Ô…ZºÖûýfJd³êr+s%—âOe‚ €·_ghA××Ô;¬‰4£ “©Ñ¿æ Ôü¼ÙÜÂ]·ï”A6B×ñŒ„Šk4(Ýy›S3ª…„–N dä¦Ô*x™ôøÊâ,ZàO3™½µIÔè=ŸÕö̰Œ6Õd;³µQ°ÏÑ—ÊP>RÜ¢Œ(E &.“ÊNO©)É0…µø»ì:êøDÐÓ®PÊN˜‘4MS…$IªnÎúë7COr-ý¤1=”Ag[_ óœ@èÈ€J³bƒ»)ÐÆwd‚îc…؉B²ÁÖniƒ°·Ÿ›T˜ 9¤Þa<æ]ñ5åoþáe!èN®Ìƒ¢ :ö¯¿æuüÔ=sV¤ÞÈðXÑÁ°ÃÞ Ž¢c@{·‹ŸÎûk¢GÅ™ue™ÐKâ›»å[”€b„ÀDG`RétМ¶ðRdŒñ7¶¥“Q¿'ª‘ß13˜áùFæ¼ 6 tAû¯ùr›Ï%’åtº‰¼y å1ÇÈÐ!Y$AÃFgS(P²ˆ‡ {¯¾YDDœ<OüÇ65†ýVV!3$iÇKk  `ßµXy³˜à~òt1¡/hÎÛš|,:îáŽùa-J O„B`Â#0©ø^ Á÷‡Â/NÄÝ ;Þ‰œŽ_ù:ÇòáüéqâwD±)l{tÛ:Q¼ýc‡ÿÛ‘†8±xÍÆ¼ïœMñIî>tþ›ãÚs.x»@úY¾?(!€ø˜T:íãlz9ém}†t] HÍ9‹M7Vˆ®óÞü¥YOXô éFõ±j ÉE £@`R­‘¦äÇÔ0wÛš˜ÔRKnÇæÜŒ¶e˜¨£6„ÀØ €túØàФ"ñ@éôñ@µ‰@ ƤÓÇW$!€@ŒH§ê¨M„B!06 >6¸"©„B`<@:}¨£6„ÀØ €túØàФ"ñ@éôñ@µ‰@ ƤÓÇW$!€@ŒH§ê¨M„B!06 >6¸"©„B`<@:}ßt^R,ÄÀJ¼X„¢9õÃ*(`/(jÌd+Ô`äRŽþcI™=¡¢6E 6EË6ÕHÊí¨~6Šeàý¨õ~DÏ{?[ý!˜Q?kìý¼ës)ÞoªÄa’«oìçj„²8}”^åõÔ±Er¹ûÌ ¥P ¥P ¥P ¥P ¥P ¥P 5ì,*„’į. ŠS»[A|æ³3Á§¨ n‚Åäs÷„…‰¥Í*âÒ¡Ú´©&Uj„Q<P¼úñTRá/–ª~>q­…’A¦^±PŒàýHH˜…˜Š÷~É'#…R(¥+”B)”Be ÅÉÁÙBñå‘ék‚w­Š.šX“DS%Tê­Ä*¡øò –GµJ¨ÔóO•Pe “(s¨òJU$´¯—·ÈrTšÏõQë>V;)Ñöûå5²œ…¤NŽ –ã+&¨·“ ó›1ÀOø¥¯ÛKd9Ê×lJkAü¿6¿IoiËo!o›b¡Â®ZÈœên¡ÐdFälST?™~С.Meø‘fS¿GËÛµP¾x¥Ï|Ûu{¹Mu»XR~„ÅhSÖB]zže-Ù”6·_ÙBÅÓ,“–jÑ|ýW@†²[f¢ÏDRÍlÁ~¾àþ¬Ámíòßöý¹¹ýÚ*T_~…"%5† µ‰CµìU¥+ò…’&›¯É!]uË ªç(àó.!«¡þ¼¿¼~6ëšöï1’¢¶¸yHÙ6Eã Ù&1vÔ-/—Nã ÙÍ6­ú}2”/¾Þ©Ðó~«NÂßïïÍú±bÍxìwk¥tÓ±_öP¬nƒwók¾P>Þ?Þ;«êÛ×ÒúK%u2Ô­:›ªò…6mÚ´iÓ¶Sûã[íá„IEND®B`‚httpd-2.4.41/docs/manual/images/bal-man-w.png0000644000000000000500000133417112663316405017207 0ustar rootsrc‰PNG  IHDRèŸ[„ésRGB®Îé pHYs%%IR$ð iTXtXML:com.adobe.xmp 2 5 1 2 †Ò®$@IDATx콘Çu.øOΘ`€„AD" 0€`£²h*'Ëñ9|~~Ÿ÷­½oŸ÷Ù^k½µ%¿5åDZ¦$JV %‘"ÅŠ¤ 2HDÆ“sŽ{þ¾ó5žwî)‘U@OU\§«»ëTU÷Í€¥¾¾¾;222þ›—ŽŽf[nÙhq!\<(æ¶|ÈbïmvüE~~þc έò=«öööŽX9Óˆ`9˜‡<<<<<®³#]Oºàààñ÷Ïñþµàw£üë|¬>RPPiqyÅßwgôôô¼l€ œ›2íQù»±7„6ü²y`Ô bže1ùèƒP`‚ó_¶Óì x7{€Az¨30϶¥uèïæF‡¶ü²y€‹bsþ ïšÿ²Ÿ`Oð@ð@ð@ð@ð@ð@ð@ð@ð@ð@ð@ðÀ{Åc1ùh¶58lkÿœu¾ðRðÀ¯¢„ݯâY 6¼ <Á=¤‹èæ rB sD½-`ÿuûðÛ¢4( ˆ<ô ì f(†yffftŒŒŒ`xxøl°C¼hIDzx•}¢ òâlMWO  øEz@ý—“Kyyy(**”)SP\\|6X—þ·óú’μW<ÀŸYKûeip~!A§+ë|丱{²ÎG–ËŸnY«‹ jÑØØˆººº( g€Ã#??¹¹¹ÈÎÎ~Ëê¬ìwõ%ƒ‘ÆõëJ{1dÈ×o§m®.ég[\ødÚv1dLFßÅ M%ÃõC:m#½v{ô÷÷Ã~{1š\êîîŽúnUU¦M›í ¡<Ò»:hKHÁÁÁÁÁÁÁÁÁÁÇè”3eâ ±Sm…%œ°‰íîà^`n+å¦JÔGZn#÷m"<]9©t$ÃQåÓmmm8räHdìY³¢`Æ~d>‰?Î7qöÆ$zÕ]XD`„­ waqzD›,ãñaª+—,Ö™\\\\xæ’§\8ÉeÝ—áÓº<Ñ^¨\éV.ÝÊãàÒ9‘m”áó‹—¸tøIç&É“^Û,«NZ^çÜÒÐЀ3gÎDM ,ˆVÔy½‘Ç×íêåààààààààààóó@ʃv­wuu¡¯¯ïl0N8Qwl²A;åÇ?eéýl¹ÊL9\qv…dM"·SWý4A@› #Y, žLÎùÀiåR>˜7ß|ÕÕÕ˜?~´=˜x÷ µI>pa,ûp·îÒºpÉŒã'ŒÉ§wëÄKF:pÑ’I<‚«N\,\´Ä3IŽà~=AuŽŽuŸV4qðT0òM¤OüÒáÓ«.¼è]¸`®>–ãàéÂ\~W—§<â]¹¤sìßL¼^ÙÇ[ZZ°téR”——Ÿíÿâ‰ßàààààààààà ö@ÒxÒspÎU5®kPNm¤îÇcêÔ©QpNÿ'=ô‰_¦àq9iwË©`Ĺ´*+÷ñ’å“Ѻp—OeŸ¬<­ðÌ].\eŸ¬GëÂ\>WŽƒ¹ünY´nîâ“•]z•“Ѻð_4­+ŸzÙçy0Hç¤Ü±cÇÎç¤ )x x x x x x x x x xàâxà-:Ü 6™»nÜ@Ü LI+^ß4è ªI#YÊ)‡eÀ xIË$<Ë´‰tÔ£`^x7' ñÌ)ëb%ÙÇ÷ÎiÃ|{çœ0Ú*Û\;XÖ¡öù¶O¸xãÊ©è([I2D¯ÜÅ æÒJ§`¬³ÙÚ¢äó.˜Ê¢UÝ•ë–ãèâð®|_f2zɯrÁ•»p·,¼üàãüºè÷Ï‹àÌ™üºÏ/¼ WY¹+‹0¿.:á$St‚ûtª‹Žý›×¯+~,Ž;H¸‹å|WÑ)—×ë#é yð@ð@ð@ð@ð@ð@ð@ð@ðÀ{Ùç^àö¼ Á¼À¬+ç ]ɧ\¹‹¿rÑ(-勆¹ê‚‘Þ/»6¯À‡7™D9š<à»çÓ§O>D§ ×>W®oŸ‹sË. wË.Êq>qyXí88$'°'.Â/#GÆÊY~wîp¸0Ù&´‹,YNZ´‹=Mü.<ÎÞT2…óm#\òý²x’Á]>—v2ôÉd$ƒûz\]éð¸×…|A>–]YneNLUTTD¿‘Îë€ßy¿hãlsaÒÃïDÐ]C.M(¼W=ð–t9‚nwЭ²'}Lr’á“ñ¸p–ů\0Õ#ûãÂÓJ»ê’Sß¡ç;ò Йè°ÌÀCëq‰x%•]ÁHã–ÅãÂŧ\4q|.ŒåŒ¬lûaôA>þ^{aA>Ø$+ÊÊìo²ì•,k¿‹O ­=cM"NÉ¥\02®m‚+—Üì쳑v£á+9ч öFÔgåù2Tg.¹Ìä'xD`|Zá“Á'ÃçÓª§C8éàÊ}<ë:\Á˜så[ßoÐÖÝëÅ¥wåð:›1cFô¾Ã:iÓMÔÁ릶¶6ú„tù]ð@ð@ð@ð@ð@ð@ð@ð@ðÀ{ÁoYA×€›iÚù.7“à®SH£Á9iIÃÁ7s7ñp ôî¸øHGzÄóWÉ%d±L8?(Ç ™rˆsiX¯h)ߥa}2‰¼L̹µ—ö•””œ]ùÞ•™ &{%Ot.\A¿ se‹—y2Z.^êâA¿ôw·ãD}ºzû#XQifϪBŽE½CÃ|Ý€\¶u?3Ù£سm²ËfaÉ‚9°¦óÎóÌïÏa‚1:/´úüvŒx0â}{icGK#Z:{1£ª yöMÁá(8ÏD[s=Ú»P9sr³ØgØßè‹D?¢åòk"gŸ ~,ˆ4ý|)@ýD´´¶¸öP–à,»íqËÄ1¹í\Áßâl‰p%òÄÉueùe_®ø)Ó§%LßgàdWÃy=q»±±¥¥¥Qÿæ+)¾\É#N+ç”ÁŸGL7Ñ^·üŽÄ7¾ñ TÙ¹½çž{¢sáú9]y.x x x x x x x x xàÝæ.DÆ&¦¹ •zÊÐøñÄ1hå¡ÅH9”AY À™|9´“Žü ˜û‰+¾¤§,_ëäaÀÁŸã¤e^hR;°=Ô/ûd;õÄé#,Ž–ô„‹ßçuá~™¼JÉpçà »çææ éÔøÊßþ%~üäsØòÂfüÅÿ?ñØsÛ18’a[n´r]_ÓŒ‘lÿù£Øyø²rò Wù6Ÿ)vz22³o°ówäs øF윴 zNºX;m5>/t”‘­Ê›„¨Îþ‘“øð_¶åGö¾‚ßüÒãЩ¦¨ÿ7ct?ô›øó¿¿mýà 9còØ.ú2ÇÎ9íàA›²³8™àÀͦܜìÈçYÑjüX{Œ6gÜømŸ´´1'7ÑöD]žOøU~TuåqðT0âÄ«<̇ûuñ3çõÁëu×®]x衇pÌ>öÆÄŸPûÁ~€={öD×0éHÏ$~–é_M¢ñ:ä¯7(°=éâ’ä0'í ,–]\o€¼W<ð–t6œqœó7Îù;è|ÿ”©Õ\Éf`Î5ê5X‚OÖxs@ί´S.é•PSå0°b™¼n’M\ñ#?RåÛ¤?ƒB®ŠÇ—åʨL[h/·óòKõÜÞKy„óp“êÊãp.ŒeÑ2wíܧwyâpñ0[<·™èëî@ñ¬Kð™/| gLÁ¥?€¯~ëq\wåe(iÁ«Û^CG?péªË±`Fr£ 6×VÏû°w×68QêšEX¹l1ú;êp¼¶ý½]hjïÃ%Ë/EÍœ* ÷ua÷îm8j¸êy‹péÒEÈÏÅñCû°gÿ!O›…ukW"s ¯ï9†¦¶NTÍ[Œ…Ækñpä?÷üðü«_Â%óf"/7­gNàÇÿð¿cïò?¶Õþ ´ÔŸÂ+¯nÇ@FV®^ªò9pÐVØûÑÒXü²™¸lÅ2”æàô±ƒØ·ÿ2 ʱò²•˜QQŠîöF¼¼sº‡s0sz…M4£f~ zšj±}Ç.ô£«×®Eei>îÛ‰†æVäV`åÊeÈδ@“ç,Þág¡:¯©Î§ˆ}ZÕ‰OÆŸ .™n.Z^<s«yssóÙwËE£\üª3çµË]$\ug Í‰0ÿÚsò†|¥³ËÑÙÝgÛÒslwÄ .¿ýLÉêÀ¾GQ]X½ûãsó×(*±/ŠdcÍÕ7Ú*y%²úê°ã›¢®¹YyS𛟿Ÿºý*Tgà¹û°zþ&Ü|×P^5]'òðý'^Ç=Û±ãHþóþ¯XUSŠÂ‘¼Ñ׋ý»wa÷6|æ×£"³ ÿåßcÛ’…È)«ÁÿõÜë×.B_o_ô;ýïúÚ/GHûÃsÁäž/÷|çŸ/ÉNxÕ]¼ så²Ì$ZWwƒΛ}›uÑ+wåºr89Åk˜ýž|¼¦“%éÞ½{7¶lÙÝGxUWWG×ÑSO=±ròëÃþp4F¹®­Édxð@ð@ð@ð@ð@ð@ð@ð@ðÀ»Íè`+g î&¢ÓHSŽþ Ê%KrX×€^¸dùŰ)™lÁe/nqç¤}À=®Ý¢wq‚I¦ÚG¸K'¼è]œK+<éUVîÂâÊQ¼fça°¿‹®¼Ÿúôm {>ûé{ð•üæL-@k=^³€¸8³ƒY…ȳw°32l‡ÄPŸí"hÆ®m¯Újè4¯kGÍ\®œfbáÜ(É·oôæaNe%šÏœÄpù,,œ7ÛVš3±øÒu˜ÛÞ€}›¿eSE¶b¿Å>öÖëo¼E¹£´MGiQžMØ® 3œ>DéÔ™XÉ2¼´ûU<ß? ƒùÓpÕ²9°Bo_7êjàèk»Q’;‚ì¢)öN;_T‰Y•SÙ| ä§¡$³ímöQ¼C¯ãµ}G‘3Ø„’rÛÞÞÒŠ²é5˜=Óhí«ö .¹ §vAsW'—{w"?s7ÞzªËKÐe+»SË¢­÷܉`VÚ‘€©+Ù9 NI4Ê O§ìóû|nŸJFK=š{ýõ×±sçÎ(HæÄW±·nÝõë… Fþ÷í’ÊçµÇÉ1^ ¼.DËÜ¥síä ý²eË">õ´“]W_}ud—~ÂM;S|9jWȃ‚‚‚‚‚‚‚‚ÞÍ8÷"xŠVr°ÌÁ·V¶T&ËdÒ¢¿›§P‹rm¢]:&kS¬ð1 í£ä|wž[äPñÉùjLT,ÚàÊH&w2´q2Á¤”öÄÚÓÝÕmí²W ¬0`rûÑØÔŠé3kßq/½²mímxqó#¶]þL™1eS«±é¦÷aã†u(ãn û¸[—Ñôõží_´¨¿ÍöNû‚eö^|ë¼ÿ®ßÃÒÕ—cFY!:-ˆÞ»e3Ûº·}ð#ØhïÎ774bph=Ýèîé3 \ݵ¯Ôôâ…§Ç–C½øÐG?ŒuËàLm¦Ï™‹®3o`ëö=hS€Â¼´_iå,lºñ<¿õ9|×¶·ï=|ë–ÚöwûèWQ~´ œ™iÝit•ö¹e5Åø_ÿüMœÚÿ2ŽÛVø~î·qÕeóqâŸïÃý÷µZÀ˯¾+gG_^O¬îšÅ íȶ¯¦geõƒ?·êŠõØp{?–Øûð£u»0œ™%«ÖX`ÿ ~ô½ÿ°UñÚ7 rs²c_uϲ¯ÀÓ ìlûY¾üb¬¾ôtl~ßûî ¯ñ02 g`ÆÜ%¸ó¶ëñýï>ˆ£Ëæãõ#öN~õ•XjÆk:f¾ù·ûPY8Œîìø˜‘…E…fýJ€ý£Ýx4Q?×X×9ðÏýøs’ò K&Ãåd(OÕOH# ~ég®d×ÔÔ€A9_Sá‡ù±6̤¥<ñHsµI¶’Ÿï“sõ;Ù{èâ' ù¨×õp5Á¾tÆé•Œ¼Û=a[TÏE™ïöÖN¢} &x0 9}ú4Ž9}H‹Ûzè¸é’%Ò¥ÂÇñOœœ8X¦Ù3Ð߃¦æÛ&žšríëåÕö›Ô…öƒã­Mõ8Y[ÂÒ2”XPÊ­Ì}=ÈÌ+”‚lœ´}õŽfcúÔr ¬²£¯™÷öÙöoÛ*><€~鼸 S P_{um˜Z5 Õ3¦Ùf÷´·6ÚÁN#§¸ æÍµ¯½w¢µ£eåec?‰–ðyWGºûGP9}ª­¦w¡½kÀtT`¨§­]ý˜6}zÛ›pÂl-:=šHȵà|À¶¾gçÙ‡mÕ»£­½£˜f¶¶6žÆéÆvL¯œnÛös‘›=‚-?MX¾pv¼ô$ê²çã¿ôiä ´ãÍ#GÑ?’…y¶Ú[œ›aDkBA©­¦Ûö÷³¿©çà „%;÷Éà磎}š‡VË)[A²‚}Ê%œ‰ýWeÕhsWÉŽ;°bÅŠè]vòRn\Ò5@=ÜÏ-õœXk_É—nWGœŒ x·{ èIΰ û÷ï‚™U«VEïëú, `Ä3™@C¼¾LÖÓ‘—Œ?œ5W<ùÛä =#è·•Lnϳ÷‚ù[ß#6 1b”¶mðFoûâaèè½aûœ†¸ÚVã‡í7Ƴí³ëä·åtû94{—|hƒÃ#F[ý¶ùÐà€maï7yöz·Ñy¶­¼Ü•0š‘éˆð‰@¶ó÷̳;^Û¦ÎÚåÚj8W[3²\gF‘˶@›?¿F¹êÎW²,p±íúƒöó_\M·&Ø;Ö\Y'ß ÁDöuµág?ý1öœê´wÌ pª¾·Üõ¬X4;òI¾ÑÓ=ýö¾þ€Ég}ȶðY»x~“›d~„z&¢uñnÙó–j2ZÁ™3¹ýÔ‡‰ö-ÂÇ䥷mÛýD·Ë‹Ç•ÇÏkŠA:ù¹r?}œŒ x7z èIΪVùŽíöíÛ£mÁ•ö4nÕÕ*!%IĤžŒŒ8Ú8X*Ťgû§-’"Â%®®'àçVL<‘ž‰eâUNäœH°ØÜøY` L:ѲN¹ ŸQï¹íß™ÐS$ŸúM“Õ“‘VË28¿ÑyœïêKFëÂݲË;Q™íåùá$íøñã¸òÊ+£ÝäÕõ'G:¹…eÿâx,x x x x x x x x xà½â´ßA¯8„íTÊâÔ©SÑתùsT &WŠ ØˆS ¢\0ñ1÷y%WŸò‰h‰¯K+ÝÂIsn+Þå'N‡à¬K®Ë'¹gWâˆÁÙ9¸Ýæ+ò»°HØØºR]­ ß’‡=SF†É±bBƒý„¼s|ç&ôcúÆd/s¬½Âóãvƒ#™˜9«Õ&«üÑ*¾ÄÉ%Ìm‡ÊÊÕ>Õ•KŸ÷ᬻIô„Q–›„œu_éEDzhYfbwa® Á]~òøp^œ´:|øpô[æóçÏ·mž<~¢ ÊÕ{èòµOêÁÁÁÁÁÁÁÁÁïE„}ì¬+aÎà…+|Ñê ß“e ÁÕsét7rå“×—GKX2Ú88uÄÉõiI—.-y]Z·LaJ²Yuæ.>YÙ¥cܺx'Fué:ß6ضýÎÎŽHÏo„[í|äRˆkmäáÂHãÊf™x¦8Ú1†SÙå—ˆóe&¼lP]ºHã&ÉøD#¸ê|‡ß(àO³½ñƘ6mZôá9þl[ä˱¶©âc݇ òàààà·ÏÉžoŸASð@ð@ð@ð€ï ûi¥sÑ•}ÔÝ C*®·¶¶F²âÏCñg t(`QpáòÒU.\e¹0ŽV°täŠVò¤/Ná¾ âuõ‰_0Ñ(OO/:æ®,–•hƒo¯h}¸xÒÉ%ƒ´*+?ëJò…ê©òtírõ¹eWv<6YÉPžŒßųì&ß'.-éXg0¾wï^´µµaýúõ(..Ž]I÷e»zB9x x x x x x x x x xÀÆ×öá­÷l€®àà ¶¸õ–ÛÚ8ý¬'š+‹îê" ?P™lgruN–—ô²å‹øLdW:ø8›&â#Oª¤öúmM÷i“ɳ-™\WFŸ‹ŸLy2²âhӱ׵Ǘá×I+™,Ë—Ìy-F½ö°gÏžhb‹¿i>sæÌh é\Ù’ ‚‚‚‚‚‚‚‚‚‚Æy ÃV½Þ“:ƒܦËÕq~Qœ«æuuuQ@Á¯RWWW¿%8—÷Ü@#.qaâ ùÄpƒ9—:Ü¥y/–Ùߎ¾¦þîë"œ×ƒt–ùÑ8þ$a¾ý_½´´4úR;_! WÛC ˆ÷@Æ /¼ðž Ðé~äŠ:sü]f~ Ž ¾sžN`¨ EÁ’̸pÑêtø´„ÇÁÒ…»ºÈ§/6­äÊŽó‘A^¦¸ö¥‚‘ÇÕçÓº¶‘ÖOqx_†xâà>Luò¸v¹2|¸xâà„¹x¿ì㥇¹KëÃ¥‹4’!˜O˺h\œè¥ÇÇ ® ¸½6ƒúúz´´´D_„ñwÓ ó)x x x x x x x x x x Þ6> k0.R ¾Uwó8Ú¸¾ËWŽ“#º8y.}*û$#.weOYüàWø´ó`"œô²Euñ)—-¢#Ü/‹ÖÍ]>N~7M†ÖåK§×®ÉèKF›ŽnÑ$³Á÷ƒèÓÍ'#7-uùvÄÑ&³)m2xœœÉÐÆñ'ƒQ.“ß_'«Oü Æ9éÅÝ)’Í\2¥S8·N˜Ÿâ|OÁ]~Á$ÃÅ –NîË!O*Y>=i syüzœqrDçó§¢O:¹/‡<®Ý® Ÿ6Ë“¬œJq®ìT´ÉäÇÁSÉñu’ߥ—=qtqº\˜+‡pÉbÙ——Š–ô“I©d¥ÒKû|¼ô&ƒ»x•™§j+ñ¾>ëé$_Žô ®:e Ʋڪ2s%Ò¹|‚+wåæÒÆñºôÒëòHnªÜ•!:ÉNuâóiUWN:—Opå¾ÂEïóº´¤ññ’9QîÊm2Ä»ô©è$+YîÊ!d±×Ñÿ"ÛgaJ®‚1³×Ç»uWN¯ÚJžóm¯+CºSéõé“é³Wò™ûr“^Ÿ×§MFG¥d²È7‘^É–~Õ'Ê}¤—ŒT:E'ßçói&ÒéÚÀ²O/ÝŠÁ¸¨3‘Î89®Ÿ?N§OCþ‰’/‡ô²?NžO/Údz2l•k|˜Œò=ç* ¦‰÷pGhbðÀ¤=àÞ€8Ù¶´OÚ…!x x x x x x xà=éÆ_úÕ,îÀtÇ•ï%‡ds•+.Ò§ä?Xuá>Îwi]zW'}:r]^ÑKq‚¹téÈ&½+Çååààô<àNxùד®M.¥'ƒ»šIãò¸8•ãä¸0Ò¹2\œ ÷åÅáDÃ<ŸÌÉ äÄÁ\™¤›Hž+KeÉ`§#&áâdIžpÉh'½hŘɅ' ÉÏå¹ô~ÝåWYôÉl!p.­Ê§ª‹†9“O›€Ž‡æëÝD¸8:¤Wr]Ë‚‹Ž0?¥CCž8:ÁˆwuîÂHã&—†å8ZÑOø8˜ä 'ZÁÝÜÕå–}Õ)Kr]˜Ê..N¯ðÂ¥«“òÅ˲øYfJ&'Mür§rœŽ8˜K/[|¹â^<~.:ÂEŸ¯Gp7rDz+Ÿõ‰ôºô¢%Ÿ’ðÂ¥£×¥•ÁTgîËN':ñ«Nq0á]\:öÞ§seP®ðÉà¾nÑ Î\¼ÄÅé­èX—œ8ñ‚§’éêrËäWrå0@×ओ-âažŽ<—Þ/ÇɃ‰/™¾8|2Ú8ù>,£¡¡áÜHʤK˜}g¯ÁA8·"0Ôê™ûa¨ ]–n9yÌdzî·#]·M’!˜ê®,•/Ô®8q0éSžJ¯øIg»ð>.•LÊJ?‘NŸÌÒ)¥Ò+~Òúí!,/X=y˜Réžyœ É÷ñ‚Çñ–)•^ñ“.N†ð..Fþɤ‰dÄáã`¾NÒ¸¶Æá ‹£I&?™qò¤;™ÜTø‰xÄ›*O%#Žð‰Ú2ž6%£‰ÓKÕ®8ÜD2âÚseO„wiãÊq6ÅÁ|Þ‰ôN$#ŸŽÌdçLöÅÉM…KEïò¥Ò›J†p”åÊ Ü­K×drÉŽ“‡‹ƒùú&¢!>N列e—&ø\zÂÜ$¹Éhâðq0W&ËéØEº8½’ïâ‹£'ÓD4“6NŽð..F~7‘Æåqq,§’!é\"“²˜$Û•›ÀÄãRÑ»|qò\},ODãâ'Ò›.>™Þ8þ8ùÝD×N§z䓯ŠîÂ$'\ü¾\ñ ïʃ‰^9i\Á•§’!i]‚»0ÉSžJ¯ø}¹.o2œýÂXGæååEñ¥kC*”'½.¯Ó×›ŠÇå“I¼ø}¹.¯O2™ãÞA— ¸œ‚(„m¾[ÊÕw– c@.%¤uéܦÀƒIÙJþÉê$ïùò‰—¹ô¦+ëBÚz¡¼²•vO&¥Û6_毚½´ÿj+uOt~âl»Sç¯RºÐ¶Æùo¢ö_l“±a2´n;Î׿óå£î áÿDýßmc(¼›æL.N:}xDèýqi}zá\Ù,ÎÃ…“7ŽÞSUEçâ\Yq²I+>ŸVr\¸`Ì '¯ø óuçÊpù\¸ø™ûp˜\ÞäÜ_—Ç·CTqöFW†xwé„séãtºöº´ä—<îÊ`Ê}ž8Ýâui£.¹‚»t>έ»eÊ#_¶äùpñ»¼‚)÷yâä“6.½’åæÒéÂ.¤ü‹—Ì¿­n;}ù2\Zâ&¢W»|䕬‰dˆŽ½/Ûå‹£¥,.ù.¯`Ê]ÙïÂDçÛ#Zâãè wiX¿¤6\ˆŒ_Þwª­ï„ÞwBçùôƒ‹Ñ—ß©¶¾zß çs^/Ûʤı|1ú åü²¥‰ÎkÆ™3gÆmqgä –éÕdÓiQ Í¯5+Å9|<¨38çŒWݹeÁ}ñ_ò%+äÁÁÁÁÁéz@Ï>‡Üg‘ “%Ÿ‹åà×n_‰ëS.ž|Éê®L–%+½ð>ëâaYt‚±®2ñL‚ù´.."û#:æÊ”<áEïÓO˜÷뤌e7¹2]¸KïÓ$à îÒ æÊvñ.\eòø4‚Ižðª“7&™.Þ…©,9’A¸`¢‰ÃÅÁDÏ<ïÃܺË+ý«îÊua.¯x\˜Ê≣‰Ãù0Õ%O¹/t.̯‹¹dŠÞ¯»4.Ëâñá¬ÇÉqá,»üqô‚‘VÉå!Œ4.̯»|íííÑÏóòç¯I'ù>¿xÜ<ŽF°89âõqª/~–]8ëL.>ÿ—<.dæ–Éu¶ › fpNA%%%Ñʹ„Hx\e.LpéÏÞŽçup'Ÿ…!¤ãöm.Žøc®tx'Kó‹ºd{Ü5– —ÌþÉð\Ì6MFÖdh“µ“ð‹%'•Ž8\ºzÓ¥‹ÓáÃ&#k2´¾¿~1eù²™êl§¯E¿NÜ/ÂéʤMmmmÑB®tÙ{>yºz/V»îõ&ðM¸éžõ9ãß±óáßÓÚâÎAW˧L™å ¬Õ`_ à® œÎ¦¬ÖÖÖh0UYYá\úPHÇ|q‡Vsssô,¹  fìYéÕƒ“ùEL´—Àá¤wEEEôäó1¤à8°¿ð›?ìß{¾-c&¿OÒg¯ Ӹυ±œJN*œ/GõtyÒ¥“ÜTùddM†öbéL%g²¸tíO—n"ý”Ã}NI²]qq´â9Ÿ\zÄ«º¯Wø_Õ\íQî·ƒpµÝǹõtéÄ“ŽLŸv2<âõóÉȘ ­¯Ç¯»²bŸòγߥ¥œ”:ÏA?òVZZ½;®÷ü“ê fÙÅ«L8ÎS¾Ç~¡«¾CB=x x x xà½å~Û¤¾¾>z¦ð™Å`†Ï÷Ùä{ÄÇg˜ {Ð#3&qVŸWLîóN0åâásµ¼¼œ )x pa£¶¶6/©%ãKOÞT׆/[דg]ú˜3I®àÐþøxÁ™§Â‰Î—'ø…äéèõåOÆŽ8Útt¦CãÛ¥z2Þdpñ1'Î_²:á. ëÉÒdu’ž÷r? æëuå»8îËR4>_wõú8Ê™&]ÊÓ³‹Ôãmsù]¥w݉V¹ßNµКŒ†ÙD<üäÃãôÆñgm”½¤I¦ÓÅù:‰Sre¹0Ý_“áEëæ¤uíI¥W|.=a® µ_çE,˜d)÷áª3ç+"_ .>åÒ!¼~qHuÑù¹÷ë¢'œ×¨{^ØnêaJÆ'~7£uan™|<ÒËv²¬öºr'*ûrIsåÏvrìéÓ§Q]]M É&—>®,±Nû)»DôºÒDm"}1uêTÌ;7ºO&󅯓º]˜l <öuÆ |–Ñ&Êä=˜¯ùN›6 eeeQgœ(¹:âtŠß®šÈžÑQ;—™6îÜ:÷¬ñåˆ/.OF«62NãkƼ0Xg[Ùn¶‘}˜ýš±ÛÏë—¯bñ\ørYçµÈW7‰N¹p~]p7 s•…÷ë„»0–yîü>@¸ú’K/¹jwN4~îÓ²ÞÞщ#G£§»ËâàÙö};ªª«¬Þ.›±ÑبdJ Nž<õ£úºz´wvaÙÒ%Xºd‘Ý+s϶)6@ç‰â â‰Ò¬­oë4ˆæ`Œ³1¯¼òJtBW®\‰+V$ ìu¢)Ÿ'¶³³3êø¬K¦+Ÿe^$Çä³ã޶±ƒñÂä–yÉÕ‰ ŸÛƒ‰ç‚rFBç®­ Ëlí§¬QcŠÆX~Tžhg‚ç,Ã5ã§É%,ŒóW„#8Ò—À‡¿ßô³|Ísv®²3˜óP{NÎy0§ÅB»ÐŽD¢íi1¦$º"RÊ|=v ¸~OÉ)=ÀxºýM>çý9Yâ (Ùý;އ2uÈéñéœÙÄrÿ«¯F«æÙ‹!×{ÈÍÁh_?F››Ð·{†vïFñ 7 ×g£öüabwW’Õ•Ç郉žr8ÀØ»w/Þ|óÍè9Ì ˆƒ¤åË—GÏ<ò'Ó'9ÌIçê"O:|®ŒtË‘ž±ë(]ž@79ðÜéœ*O&Á=ÏêÌy544àõ×_ÆL|Å‚c0»q|‚étåI?q<˜HÏñà®]»À/1ó~À¾Ë_ï‘Ý@³,Ùä“\ÂT&ÜM#Ò~^\¨Ñ˜Ñ¥‰+³}\ 且vP?“«ŸõdzE'<Ǽ\9Üm÷ʦ—2p[³fM4‘A¸›\* /¹ª+wéDÃÀ˜ƒ}ú€‹\K—.ôÓÏ:¢?ë*K¶hTWîÒù|ª³½<·l?<èL’I¢•\å¢Q]9mgàH¿Ò—n[Ô_HKÙÄÉNâØö3fDç–4¾îd:%Ã¥gßåXõÊd"=ƒ¹›°]dÏ Þ›uí¸2Ôçü¡ºòñz :š…¡ÑôõÆÀ`'òsk—[Ì ‹‰,P7Í$2ý”™"‰Ú¹¿ÉÚJ òÈ—œlà5ĉ4ä¬3®â5ÂÀ›q—®±dAºÎõúº“ÙH[|Z˜Ä#yÊ]\Dh\´““;¼·±´ËÅ‹ÇÏyþfΜÝ£xm¹çœ¶P†l¯/—xÊé°Ý´ÚTË0Š ÐÓÕ‰\[%ïèµñÅÝk "ŸÏ¬œŽ¦zëç}ö‘ØÑA£ÍC“5ª:*­WŽ£±wÐ¥\†Ð@*ãê9ͺh\ Sp¾uëÖh`Á;v,ê¼îP|nN¹ì ð`°íë!=gw:]”IÛ¨‡7Ã×^{ Ä•W^­Ü“_ípu+G}Ýz¹Ñ*MÈ#¤9¯šs +±zÁ)Ñü`Ç.³ýœ¯Š´‰.œòsrËì¼)È=3D?ví[Ì¡³z¾š\•~<ëˬîùã³€³õ(ð™ÂÁ?\9b+Û6lˆà¤ÓÀ-Nt¢$0*+'”g›÷N{¨!ÃZC6ØïyðAdÙ`«ðÎ;‘aºG‡xVEú+g`tf5ŠÞ<ˆ¡çžEÆõ7 ÛV¸>z_=¡*v 0N¯éd~aîâ(B8¼Ÿ~úéh2úÒK/v!p5éù矮7Ø$ý"ú1õoÉ„÷σàoa8oÀøëè¼ÅÆ´<Àóç.“ú– #-sŽå8?É]"Öÿ ñúb A^ÂÔ_”‹W9i¤Ÿ0&Òj0Ïqå2x䘎cHN411¨!?¯oN OöEc\ù²Ã¥ãxAÇŽÄó \? G^p´qÁ‚o ªÄ'q:}Öy­ÒŽIÉC›2¸Œ»F%Ÿ¼*+'Œ2’Õ§ùuë;wF [ܵÊ{&ïô+m,æâKVNÕVò0IsÞ{y0ˆe D[¸8Fœ·âuå°ìÒ°ÎDZõ/¶Å=Xwm¥ŸIO˜ÊÒ%¸[Ohˆÿ+zbOœ8ù–çúy°½ÔCÛ¨‹×ÛÎ…ÅU«V›à’NÊrËn{ݲQÙÖg{Ó8³ 9OÛ¼ðnd swD!G7!ëLõÓ¿”IßQúxù È9Øxžó;ñ<8ÙÅç.'XøœÑùÔ7˜ó:ãõÆ>ÍëÙ¿ÖX×yS›•S³k‹ôN'8ó¸äÊuË’Ã6p“(‚ÅÉŒ4<×¼nxäõ%»H#Ê]˜/„í±¾Â{[Nvf$‹}‡=™¶#‚ñ-ûS§ñœøèµûeäææEööØ‚¯eé0Tât)—a4–Œ46.‰Ž /Tç¼YÑòp‘ư3ŸS6Ö«ÆR>y(Gúú¬“x³?pà.\Ír466bÿþýÑ$uÈÆ}ûöEe΄L˜¢^nóÃ8vø(rK*0«jšu2^ô nÚGÛ˜øîÏÄ 63Ól·:aò?ÔßkƒÉã˜VUÎVô gcþ¼Y‰wyêÌãäÙ…:22&´vPe¤ËÉÙC áè½Þn446Ù…J›f§PêlkFK[' KÊ0mjYt>‰賋²C6Ç3ÝfÏ ríÆ7&s · uõMÈ),ÁÌÊ©O5uœ^ëTíí=˜n3<…¹‘½ôSâ\&ì§ú„þèïé4y­¨´-yœ™bHœwúÑZxÖ¯äc’<ÊopÞ¤²Ï ð“C;‹„ýñeÑÉJÈN´a<ÏâyV_$/g1z§$‚³Û ‘_ÆÀQߦñò©ƒ>³3f»iŽfcê´©ÈÉÊ@³Í´õ e`fU¥µ—>²Æú¦«Ç/³Ï0‘´©¡½Ã9˜cýÜ·‘ýj|Ûí!Ï?S|ÎÁyV{»ÚÑÐdۦʦbjYIÄ#¹¼q‘†6ù²tQϸ4:ŒÓ'k‘S4Ó­‹—4çdðÚ´Ía¼&-%ÚÌò˜áV-ñç’јü.Ûz”W`¯ñ˜Ÿ{zº0š™ƒ"{ 1q«Û¯ëN÷8®ßE}™â¬m ­ãÏíY<器gÇŒëÿQÀ7Öïå·Ín?tiÂì¯ÉZ>vÒ¢vø¬Ýc„ñþ8+åm)°-´ƒ‰ÿÇ{ ?üp´"Ãûú¿øE0%Œ÷ôk¯½6m»Ôç\‰9:?¼.ì™Ãmíý¶ë+kÉžl µgÁüùìQ@éÈ+™‚¹·ß…ÆÇCïË/¡èæ["þètK)H’û6¹¶±¬óÍ7¨~ðƒQ@#q ,}ôÑhðŠ+®ˆ|G>ùPtÌ]xwgZí9[PŒéÓÆ^#3>úᬠֆDŸïR?I\S ìËÖÑÏòóž52Ôº3 ((­@ù”¢è¹ÏöÄÙ–þþ"Gogþá¿ý5>þ§‚úמÆÁ¾jüÉïÝmºÜ´ÉþGmódòxJŽ;Œ’i³1µØ¶‡Ñ§fÅh­;'Ÿ| ü ‘mј¿·Ü¸e…¹xsÏ+ØüÜ gå`xh—m¸×]±ýxê§?ÅÑz»±eØ­ ²·Ürf–£½ñ$žxüIÔYÎæ­Z¿ ¯¼ ŒùGúº°}ë«èêã„F=ÞÏG-@Ï;U<@IDATÛ~¶‹~òýÑÑx?úþf|ôóŸÂ¬éü€q^LðŒõ;úAIçN}2g¿LLX¸ðxZIJôgÒ»<º0NŽÐ~–Lv¢½ì‰ Sòð·úø8Yo ÷áÅŸ=]OD×@õ•¸ã–8ºw;^¯>óÉ;MRâü›Ä¨/Iw\ÎkIéо-x½±Ÿÿµ9;î\½Å1{zâècêhªÅÓO=º6»Ù•aãõ7`ñÜ‘?åS·ï“e‘çèÆ–‘A¼ðÓŸ`ƪMØdºÛžA ¦5«:ºΜ>…‚²Ê¨ÿ'ÌmÊNâX¦¬žÖ3xò™WpÝïÇ´¼!¼ô³Í˜»j#–ÌηKÊîEY 2"s»‚˜„ôqö‹Äící9×&Š8×_öŒ?Ñ U_5~óȸ6K-ðõ'¬Jüué9;!à™øDÛØ;Qä þ¯þê¯ðµ¯} ù—‰/|á ÑŒó#<‚o}ë[رcxà´L£OÜ#Ž)ò;ÏÝ“¹²gþοå Ù¬ûÀ³Ïò²Bæì™îhºN£¨~²[JÐ[fÞ5«Ñóð0d4·ÂÚÃVI>ä]˜ÊD¹4n[E¹SlõêÕgƒs= 9âö\îc·B'Y ]#ö؆§ž{9šp´ÉÕ9—¬Æ 7 (Ï&e8Î&÷‹äÙÆgŸ{u ÷và©G~ŒËnúP sìñÒÏÑUß‹ä¸>N?Çõ+Ž—¸rÌœÇQ›„â€ðòË/VºìqÁƒã+Žß8HåøIçÐ7Ù×M½ ˜äs,Æ9ä9cÿU"-mᘎ+¿×ÅÙMz™¨Ï¥qõs ÈÕ*^ \¥â¸cIÒ°­œ ž‹<¬³»ü‘ç«ÓÇ]9,3%ƒ¹ܶ.,KËJ„ÑnŽ·$ñµ¾–ÀóÅsÉöñ~ÀûÊ8þæî#úBò¤CuÊŽƒI§r×Vêg¿¡öNÆóÈó,ÚT:\¢—.åägŸáAæÔà %éḟ±‡KC>÷<æ®^®2ýËÀ‰7Û¨ÕW^#”Ék„«åË–-‹ 99ÁITÒñù5k֬蜸1ÎD:vñœó£s¶¸v Y£\`ÿ4XõåA ÒPß\‰&ç百ª©ÙÈÏQžŸÑF¥tô’V¾b_¢oÙ·äO^+l ¯gö%Ö]¹®>ÉrsÊa<ç&ò“÷, æÒ±,¸lTG'ih3¿{À˜õ¸$Ù.N0^3´IüÂùô. ˢ㓱·×ÞÉ·øˆ÷Rú²¨ó>ľË~Ã>GÚÌÕtÞÃ8>L,úžÓŸ­“"ƒ˜ó ¥TÆN/çTP8O"C…¼3§”ÏàY ’,å”Iyry”Ø^Üz@y‡޶N¦FòÂâÌ;Â-|'IöJ^\žk< ,G‡ú삫ð­¢UÙì.ß`µ•^ˆCùv1V!gÌÆ¾îvœ>Ó„‚)娪¬ˆ|–kŠ|”—Ü~›DèhC›•3«Ph«Èæ>{ï Ûøê‘•_Œª™•gWCûº:Pk (*Š™Ó+ÐÛzûWÿËoý}|æÎëPT`Û~"‹±åùgÐ4\ŽÏÿú1ÜzÿvÿýØU³×,œ‚§l¥gþÆàæõvãÞù¾ýÈÓX<.Z¾‚}uýøÂç~S2»ðÀ?ÿ+¶lŸ…ݼ/>õꇦá3_øZŽíƃ?|SÊ+°nélt¶5âdC;æTÏDq‘Íìõv¢µÙ>Ò’‘ƒi‰wÿiÛÕØlÐVkÏʶ‹‘q,0ïájNG7ŠÍ_¥%…¶ò2ˆÞ~Û*j£bžÓóGÅØÊ+åuµ· ½«¥SQMЖ·ší|÷ÛŠò´éÓk3ƒý6±¯&Ø[̦Šò)<ùkGÁÉ í¶ÉŠA»úQ6uò²GÑØ`ÆÈ-°¾ÉÉl›­­0ôg ‚49ö-†Þ{›ÄfãmwDw¯½cf73î`° ÛÁ]`«Ýå(&ý¶¡ÙÎyQ‰mʱvÍòækò›ab¢k%Ïp”?`Ö®‡vâ¥qçݟ´¬N|ãß¿½sg!ËVx òú­/µÛ®‰>—¡¤ˆÛê"3’þìïAs í°í„Ö§³­ººÚ[ÑÕ;„rkga~Žù°”›{­ßVصœeŠÆÆfä• lʹ×O:Z›ÑÙ;`3åöîLbµùà®í8ÑYˆßüâDZåÑñâ¶ ßj[{Ñiò8XʲÕÿ®Î.dçæ#ß|8Ø×‹¾AÕ "yýDÉò»™ÁõÎÎvt÷ Dç%7;oî{ ›_Ú‡;íT•ŒàÉÇÆÔÅWãÆ+Wš/mõ9®E}Ô®ÍèüJlB~c]-šºG­oå ·­Á>îq 3–Ù{ÇFÆà¼ßÞ2ól°iþ³I0ÞëlÙT`>³Wm¢þÄóQù¶·»Ë¶-Ùƒ´ 0:ßÜ¡ÓÕc¶#…+ô½=ݶrqQâAkzíšçN—¢Òr”Ùyêíî´þ—iþ¶ÕÃwwvت~nÄÃ]1ÝÖ§Ú½À¶gÛ¹¢ÿx’or²†£~•W„©vІn›XãDY¹…(+bþ öw&é¾Ì‡×w¾ó(8ç¶î7F÷uú¸ÚÆgʼyóÒ6òl¿ã %éä}ÁnÔö~y†l%1úœ=rpÛêD鹋lÐ?½YƒöÚU~Fû¡k{-fÝT–bðL²jìÃûwY?uu¹:¥—¹ˆN9ýÁç?xÄ$™’Áçë1[ñ$Ÿ¹q‰Í3sÐÕ|Ú&cí¾¿éØ´îœys¾õíazÕl¬¿t^tMñÚ±ûwêd“ÉïsÍ­6ÉV‚òRÛc“Ô=v϶-Âýƒv_0Ûlż±±Åîù¶³¥Üžß@˜y?ì²þÚkt”©ÝMþy‰…?çåõ ŸYpå¿qŒÆE y=1ͳkŠ4ïÉ 4tqlÅ š.ÇkÜ2M<û£’d3wËijΠ‘“K{ö쉂©%¶3…ã:%ÊfðNL’ÃÜï#(.]’£œ¶qlÈñíç*=al/m_·n]4.ä$¿_Ä1#“ôú:“ÁœʖH°÷'®]~[¤“¬qöh Ïöñ\r…mc™ã^âÙ~úAƒtžÞ+è _ŸL”Þ8²E±û'@˜rlÉ%—DA' I£q¾d+÷uK§ðnîâX–nöö[Þóx^i¯`ê[>/ën»„waÔM¸sQŒEÄOz¤SY1 ii}ÃëÉMÉt’ÆÕ›Xäk»Óíq²Ïá,@·1‹íçÂPßéÃsûQß—g¶`íœL\³Ä>ÞgcµD,éªdËþqO/ÛB²ÝìO|žpg q”ÁÝ6œ¬ã$`j—KDz g}‘ü¼æÈËóÇû‹Vìu}“ÖO¾ý’M9nrá,ó¼p²÷ö}ŸÞåuËäåD&ÖÅ˲Ÿd»hÄÑÒD;Z¬/qòƒþåANLrüE¿0¦¿i+Ïq½¶½=â7}ÌyPþÙt×]$¡r:7~~ŽVž@*agå C3[êÄìÀüÀÍUW])”lWi ÷ΰ¼¹òdS6“n´º`™ó†ÄŽÄm/L²=ª$ûµÖ†\tã÷þ^>Ø„ÂL æ_ßýíÏÚ†“|ó_îÅËoؾ¬AT.Þ€ßùõ£ãø.|å«ÿ„Üò逷ã×~ãpåÂr ó~ôÔ±€ìÛhéÂéÚ3¸óžÏbFv¼ôCìjŸ‹õËçc^e>Û°`žÍvçbfÉ ”äÛ)´^5sF4ÈâJp¡m5œaÁk¶ùuêÔé˜nÁ²9×”ÙѬuyiríÔÏ´ì 4:m¥ûhC7núèÝ(/.DùŠ+±þ8xèp ·56D¯T[€~xÏTÚûöEBóNÚ…Ç6¿Œ»H{û†±é}·anY†V?Aë }ì/guÍ]¿«–ÌÅ¡Ý[ðìË»,ØÉ‚ñ7ÞŠKæ–cëóOc­âgÛ€ü©spçí7£·î$~üèãèË*Àª+6bã:»ÐìÜêrn«?†'6?‘œlw£°|ÊŠ²Ñ`“!Íí½¸ææÛ±játüü©ÇqðŒ} #Ë6•ÏÂ]·]Æ#»ñô‹»Pb>íéhFVI•m?½Ã&_šñ˜éìâ;«ý¨Z¼ 7_wzŽÙVÔ'ЛY€ ¢º»ûpÉÚkqõšØþÂÓØqà”—Qä–Í·^–£»ñ“g¶ZWŽ¥—.ç?ÿTY°?Ò›cA¹M\٦Ю±“‡^ÅOÛl7ƒ½¿2Zˆ÷ÝvæWU`ˆ3åN[yr ÔÝZoôÇQß5jÁ^>ÎØÍwö²Ä6á7v¼€¶¿a³¶vfrËpçïÃHË<öô‹È-,µC7¦L¯Fqî¨]su¶sb›n½+Tcß«ÏãÅì“kd6Ýô>,žc3ú³k0½áˆÍ¨ŸA÷P&ªg͈®ºÎæSøÉó»qóí@ea?ùî71kÍM¸níÚó*5âŽÛ7Ù{W6°².jM‰î9™YÙ07Ù¤[6¶¿òk¢Ñ·ÙK×Ùn¥8mçü”µiïþ}¨/ÈD›MD4ïÛƒš©Eh<~'ZºlÆ‚ÒöÌ\°·ß¼Ñ¾4Ù‚ƒÇë1gþ"”æàô)óÉüùÈ7µ6q’o“|Gö½jùj\¾¼{¶<ƒ½¶sá“÷Ü… xžÝj[‘,(+šÛ¯¿ÍfÓ÷}øÄ§1§<ËúæÏðæ¡ã˜³rnºá*t7Ç7¿ÿn»û3X8³[žý)²«Vbãš%‘ojîdzÏoµ×Ml2À&œ6Ýò>”޶âÇOlÁ>þ)Td´áG=†åÖ§³{ÏàÅW÷Eÿ õ­[í}éÜ®:<úøfdÙ@zpÀ^g©@EInt®Ûºú±é¶`ÁÔÌî»ï>|ùË_޶¸3 å,ľïäa])*Û}†¶‡%?öÖkƒÏ.{¶Œð:ëFÑü^ î=Ñöž™%èn³_ ®ŽÞ+<ý¬Ý/ça ÏvhÙ„ŸÍÔRÄ'ÍeƒlKFÈë–ƒa>È™ø ã3QÏR>ÛHÃgíD‰“7ÝX—Y°•c×ÒÜ¥kð»¿W…Áì"›ØéÁ Ï<7k[¢çÂôyËpÇM×¢ãô!<úÓg0šc²±çîÚïÚ%•xþ©G°÷ð,Y¶kVÎÇ®-ö>|»íb3KìÞvå2»Wä âÙÍ?ÅñYÓqªö–¯Û„ë¯^=“Øn¶%¤ ó€ßT÷¥ Î~‰oŽ£¸Ê7ßîu\ÄÐ6UŽÝÄòú"V¶µ‚ξ§s'™~NÝ„QÇh\áeα!Çn›)±SÏLäÓ!?—>Á}z¶r9À>Æ-Êhó5KNp°N;t ‰ß—+ùÌ“áçõÉDycŠž9âx–uk#Æ$G$”Ï ”ç…÷A®ZS.'@8®f`EÙsnÞ¼yÑüUûà%WÕÙ~&_®ä§ÂQ®ÚÊÅ)çÓN08§ïyÞÕO¤G¹«Ç/ÇѦCý†òiuÆ2áŒXfbY¼q²“µU´”Á Rtl';èoâ[ð0ÀbV›™ó\0oTû#ù.Lek®%þ\[®M~®²ñOM¨ŸÆp¿µÕpµ­KðØþ´ØB\¹MêŒdàùÚ ”—kçÚª¶…ñTkÝä-)™^Á•Ónö1¶íbŸS¿&ŽmWÛ¨„|t:¼Œ­ÇZpåõ«ñ¾{þk?†Õ ¿±ýY¼ôF+æ/ü°meº ÷Þ÷þ±îF;jÑ‘U…[jª[œ‹K—,À¾þ/Ø·ÌfUïGÍå,WÚªuÖ¥xöÙûpï×Π4³Ç[Fð[w-Åhç [½.A…i|%ê>çÄKqi ¦XÛZNaÊÊ›pëÍpbï<üÄ“¨™]…á®nLŸs ®¿n=¾ò$¶nÛŽk.[Œ[aeðÐlÁü’U°~õblyú‡xyû.”]½ µ' rÕ]¸kã ¼ôä÷±eÇ>LËÁæ§žÁü«îĵ+k°õ¹'°gïn ’¦à•=ÇpË?†Ù%ÃxðþÇ«»faAÉ=ýkAû ›`zm/ª*Ì'6ÁVT^n½ ‡¶ã;>…ÅK¢fZbUµ1”Ïßnÿñû[çÀšý‡WdÀÆÁ ÇL Úxiœ¤mÃL“†rãõ7vu«ÒÉk—×+ƒ{ŽÑ8‘¤ÅѲ/kð+>á˜ÇÁ\¼OC=\ý§L®økuŽ×ÛɉÖ9~Ըѕ—Ž>ѳmƒ2 åqlªë“0^ô+j¶Á w#prÄ·]rÝœü®M¬ó\±=ëí9Åqƒsù™8Ò0x$Ž|}öìÙ‘OtN\™®¾Te¶}ˆÛèécÞ«ùÍŽ³9‰Ê]Nl#mpå»åTòãpâe®þÉ× 8!À¾+õΛ7/ê£ÑÎV³S¼’ë×ËIKŸò\R‡® ž_úÐ=ÇÄó>̓©äuñqò'‚ÙY¶à¼ÒÆÐïCöá'0jÏtØX£03•6ï,´I.³£ÀÆx¶V‚ÚŽl¬°±^¾í5õê¦âú˜Ú®…OÖÙ.¶ý@u×§~Ù­ËGì+œÐ`áy¤_‰#­oàÃHç5’´j eÉîT|¢ãýŠe%Êš(¹ö&–Í^‹9xÝT”M±¶ŽØµ{î2x³¯Ð´:ésÞkMyâ<:ziÃ[¦âe˜rÍ\•ƒÞxãsg¨L3.2ž9g R9‹º¤ÇuŠ:óì‚äÃt¼i°¡¼ò¦¤™B^0Ô“n¢Þ¼¢bô47X€wò§¿gà*c¯ÂïüéŸâŸ°÷µ‹Ûðó¿áR[µfâ+ÿôÿñ ]èjm@cÓ<óôfÔ«Ç4û|þmy¶=ÚŠ±íXÀ—û¸´†|¸çóÅþÛÐb+xð{ˆ¹0£ò:üþ} ;v¾‰^³¿1÷§øæ·¾56°¹ù†M¶Í=×þBëÜö.¯I™¿t-f.¶ ‘ÛÒuÄÞ!_ˆµ«Vb´{†¶pª®řŶ²Ø€Å+V᲋PQh¿GÚpglËu—­lŒLÅZ{eÚ—ó_ÞfÁÈ),°'ÇüévÉQÛº™kŸë·U’†ÆvT¯³«KY…Õ¸ñÚõ¶·eW\eAÇa¯oÆå ¡©m'vZ°Ûjô9¹¶k#ßåͰð<ÛEѵÿ=0m†½£y¥Ü4€*{w~íºË¢‡Ìò•—áÔ+'ñæÁC(´•ÆëÖÛGOlNçÆ»îFŸý\Á¶ŸF¯m?süMTs³±Ý¼lsŸÝ¼Úªÿå+#£¿ Oþø'è²™ÅÛÚ»Òl,ÉIJËVÛC|ùÇü8o*¹MËžËmrçàÏ_G®½7½xq ޼ù:m›°mQˆúû°ÍZ^yÍÕ¸¤†A ,_:ß¶©w ÂøçW5áõÝ;1dh‰mïh<ƒ¦®aÜpó&Lµí¡Sm%õÖ[OØï*÷¡¥ÁÞ‘3 u'£«Î@Ö÷ºÌö¢¢Q¬³‡ïò…s kɶg¿òìfœéŸŠßúܶ•‰?=ÒÕW^‹u+íƒFrý ×ã{O¼„®¡5¸äÒ•è±­Pœˆà6Ô̼bäŽö[hÄu·Ünïþ—ÙGÊpÝõPgrkÀ},n4ú†Áîž:ÛŽj¼=íèìÉÇŠµ—ÛÇl®çbÑÂ%Xn«¥¶õúRÛ2÷Úñv>vÂðkpÕÚeÈ7?^}Íu8m¯O9|GvoÇ¢«î‚å§ÑÎWSÚ›±eËKØpÃíX²x¾³µ¶2׋•¶å6#£GOÕÚÖ÷l¬™oÁri.Y¾Ò^‰H¼Âvdå•D+¾ýý£ÖÇ×Z`»@J—`ÁÜ—Ð38‚9ÅSl›‘mõíÚöÆA¾½QfÁ?¶‘[4 7­ßˆ™SgêjlZkö}+Þg“2-GI…ýüEóIt˜þª¶ew´Ï$õ¸d㘖9'·Ú–ÏCG‘7uÖ/²`BSm3æ/°ß©´Õ¬Ï9ή!ÜõÛm;ñé¶÷!˪±~ƒ½.²ùi[E<‰®–|äãw¡»é jómE¿b6æVWò,££Å¾˜ÚÙ…œ®ì±€¬©Ý¶û·ÛÏndÚ$Ñ]ø×¯ü5^ʬÁþÎGlö<5óæã¸½g¿³ãŒ]ö»Ç ÛtÞ¥—cÕ%óì͵A[á\Šâ¥vÎl¦vù²åè:и³–áÊk7ØûÁ%(]»Áî] ÐÉn§okÒs…Ju¯æ}œ‰8Æx$KqÏ —–2Üc½pæ·èkíö ,°Á^™ÅSNÛݤÉ^•éêAI™Íú/°÷eÙwQfg£¸bå­vO˜c»Uìù`»2¢ï†ŒÙ}dSå¥]®=¬3&W49æÇñø>)ø|Îr`Îg.îäðù÷ÿ³÷pZWûgûÂV¶P–Þ‹ ÒT¬HÄÞcâ—|iÆ$ß?͘¦IL/F“£¦™Ø[,`C¢Ò¥#ÒëÂ.ÛØeûý?ÏÜ÷¼;{¹ïefïΙ3çœy¦ÜéWã&‘Q^h»Ï˜zÚÝ“d;êÚ†UKeÁü•ò‰O^†Éu^Fƒí“×cÿAìÒÁQ³8iÌ@9P¹FVc²íUJJšÙ¡“Ù¥·Œ9ý4è’„íï52õÂË$G0òO/½‡‘ºŠ}²¼1MNÅÀÞìÀ~‚-^Žãè]b Sú5#÷£öy®åÆN[ÐnöŸjÅ7é .4eŠ~ì˱¬pŒ—~q噫:౿Ær¦eIå¨ Úö3Ã)‹pnµæ@–å–fòQÃþ·sRNy¨­4mÙ*“4-ÿlC8€¤áÖköMit5Ÿu†`êA›:0íÊ‹ilÏ¨Ž”É‰ N”‘;ØôSC]X7¹°?¬:R¦ò “«:)ãPNÿþý¾\µ&¦Ÿ6 ãŽ~ìÿR.q`›Ê±Ö4ÓÍûþ,¿J«òiÓ´%CåiæË,Ë '<¸#ƒø–ÒQ&øÊ6™“?Ô+lk´òo×_î€ôš%}íI{³Lj±À‰²”›´V.I/‘7œƒqvú5b± [àûd×ãâ8¾ÿQvMÃ_몸P'M·úÑ&ŽÄLñTÛ¦Ñxaé²Ã˜/Ä”m ŸÙ¦hy¤ åió ú)?õ§+OF}9ÁÍ-ä,+±hm™|f\žµŒåÝŸþjøl\ÈîÚ¬ÃIµ¨ƒ,3ºRÎ:Ê %ÒRGŽc O°é„c‘ïˆ>Êû°t¨™C7‰5±ôgeåg͸„ .éÌΰq;;iI§†…ZòQ7m‚ÉÆM;l*OgªÇÞ²Ãg)Ù‘¡aƒÉÕsV.ΤÒ(ãhãæ'â|hεrÅU φ$`Æ*!ÕŸMRÿdTȪò™ùȃ²©*E.¸pª4WìwJjpæ³pH ·èâ.ß`—ÛXÓÓ°õ³^MQ9”׈Ð&é;b¼|ÿ–_ÈlÙ}õé¿ËÂwöÈ—®Œ†·ŸGãt Jxâ·¶tV˜°B}ÅçeÌN@¶%¯Y½Ûx‘ñeÉò©O_,y‰2rÄ@yú±G±JºgÕ÷È §L‘³OfâtÁ9–g.Å<Á‰Hû!Ì’ÖHl®¢7£ í—LζÂzLÛ*À9Þ†}ÁYbc0ÐKJN•&ЬXºQÖm?(N9Ø:Ž]šL>Ïø×áÂ¥·qÑYyS®ŒÑ]ªJ2ä@›d ,yþš¦çÈM90al 7lŸØ]V^VÔ°Å?¡QΜv‘äcf®j÷&£¢ckI¶0”zDnÄùÜBœÃ­+ÙoÎC65‚a*/‚@ù@ãKS‡çLì…Þ‰íÆkW®’žƒFI¶+wB^¡Ø™JdzèÔ0 9Ç’й]·b™,]¹AFO8[f%y;¾hòžÛ‚üô Õ5\T2è×,Y]p·0MKl’ “Ï7çÖ·¯_ŒôüýÙ²0+Á§H6ç4¦Œâ1‡)§I(³ Ø®_¼c»Tb€Îô&lµOHë‚mº¸×çÛuÁ˜œá3õz¤gç˜ã 9i 2æŒIÒy[‚Õ~Nʰ;•Œ—"1oŠt®P^“ÑÐøçôù6j™ÛDSñ€ÍÖÉÎ’&ùäçϓΠ‡döÌgåÿX(Ýœ =qãyM¡Ì{k•ìHH•qÎÂ$ÕzÓY¤®Ý r0€Ý‚•‰­æl:ŠsÇEJç|隟…tàv^àCÓ„‰8”œÐB{Cýfçµ0d5Ðr€ož}5MÚY‡R‘?©ØõCS¼g—$gH^6¾÷Y± GK<4–¸ˆ<Óš– ¾,’áX­<»Ž[,Æåwõ2ù„Bܯìò2°í~!î@(”ÉÏ”Íë–˲ZçlY»l)vKÔK—îƒp‰ŸËÌ¿|^£>áUɆÌ,é?b4ê,:“ø:C#êN,ùÕ¸€oÞìפƒ­¢"4èØ•‚ZcÒÁ2ÇlÂ)zSšv–ÁtFišØQ‹”#ãý_ùg·ÿ(L™2E^{í5ó>á{$Ìh^ÚqÃèèGZ¥Ww¶x$à…Ü |`¢3·“4h»ë°Õð ‡NZY 8êÒçÆÞi´`¸8ÛIóGIVž›Ùþ!®¹Å="SeزÕOmÕMmõ§Í´ÑŸï¶3f˜‹‰xv–ïFvt8ðáû•ƒ,¾ô¹¢ÆN2ã´àÂ\öëyå}RvÈÃÄÎ é‰ß„ÓO•'ÿy¿¬Y¿IÒ°ý®;VÙºã”ט#^q¹Ôfñü9ØUÕ(§Ÿ:Nªr°rî®ÌtÊb3&<±á1Z–øžðoµÀÊfÉ<ÔAóù¸õ]h<Ý¿£†€–ÚmöÁØ)æêûO ,0 ¾ƒØn°Ü°e߉e餓N2ƒ úÊ Ê¦›rعeìÍ7ß4»9€aÌîR;ôÓònó Ê º•–"¶,³ÓK¼rpÊ1w¡PpU.;ÅtS>ã¨A9anÆ!F¤2­ìúï{¿ÍÑ8ôceß•#Äžn•§tšu·es°MzÖ{þ˜?äϳæÄ€i¥¡^4ÔR&MPNÐmˆ¬Ä„}zdàÅhœì vÀ2û÷ïoò–²I¯†¼ÃøwÄ8ëXjŸfê@ÃÕ|NÊè™iò×+ŸXô”Ç:À¼S£ñT§0·†éB˜§|Cmèè—×-Ʊ9¸uÕœô¬Çl»Øfñž–cöoëpgKMm…‰Ë»’?ꕨµU0Kaª<ýùL:f$éì$°Ò° ²àrÛ;G¾Ø™ ÍŸf’ò¶mò$0Úø¨ÚØ÷ë×Ïð§ 5Ìò§L6V”Ëš/åÅk(»bß^tÔóͬãí¿ø­¬Ü´Û‘WÉ?ÿ±œ}É4¬Vž)ß»é²jË\âµ\nùö÷äÙ—çÉ‚×çKŸa#eÌ C¤¶|·¬ÙQn:.5ØrÏ­ ¼¸¬ªÚ_Bâ¤Û–3{ô“° úÞ?ÿU¶àr¹õËæÊzLN;P–¼öÎꮑsοT.9o‚üà©ÙRs£.ÙZ¿a‹plYŠs·q‘UVGr³:É;ë7`åH¬àmØ´ÍœcÎÁgÕšî“ xÔ!Ÿ¶mÄÊzq9fÒ»INF*Vˆ×cð\#5ø Üú ï`¡8]ºáüp¯.8«úÚ<©Ä%j[×.‘·ÖîÂÊç©*Å'Ù’2°ÚŒ[ä‘÷¥;Ö™âËÑ8¯Xò¦¬Ý]'EyY²uãÉìÖWèƒ{…¹ Ž7òùÚêryçÝ-R„Žb¿>=p®s.(c'€-œßÇËÀj¤¨Wo©Ý¿A^_¸—dUÈÜYËÓ¯akrai®,ÃåzYÒ»gWÙ¹ù)Æj6;‚õõÜ&„ó×éX…­Ï8Gd™,ضc¯tÎë&Eù™8‹ùv3ì—5KÊ<¬ZuÆÊe~aw©Ã6ï\ÞÕ·DïݶIö`•ŠÒzä“ÖSq//TS“‚ ‚s^‘%«6šÉ¡ÿÌ›‹ÊÑ ië"Ùèг²ó%‘_€Ïd`%?;¯«ôÀªùë¯@lßõîjl™ž#&Sò»öÄêJ\A‚™Ø¾=¥|߬°íc·8ø3^îT‡ÙiHâåO5XÉîXÙŽ•8ž°Zª–Ë›oÌ‘šT¼Èúô–†êý²uGp‘bÿÞE²qÉlÙ}à O”nøìàmËqý!³Ü«[޼>s–tÊGÛ€ °D¬Ô±=ÉGL:LzrQ¿ÑA½¯Lx°¾òâ6êņì@ &åpÿ„bË2:š»ŠÑVàB´„:œí~]vãXŶ +ä?K×I?LÚ4âüþšup±Z£”î/•¼Bœ‰þû÷ì–¤Œ<ÔÌÔã.€ÜNMòâë‹%§[oŠ];Þ~Sö lðSo4EøTÝÂy/à…™oêHÒ¡RY°d½âšX%_>w¶Ô¡Þôë7÷+’™sÞ–>úI#.XÜ„O;rÛ~af'©¨ª•"Ìú&6TÊ;›vIê圗_Ä=“dòÈòê+sdóŽÝ8s_&† •"Lh”à³{‡0ùIJ[‹KéLád@¹æD '[jQæ9pj¨Þ#oâ¾…JYµì-Ù¶WWÐù"0äÿ•ÜŠùÙÏ~V~üã››Ú¹›ïžµ~á…äÏþ³™qf¾Ó°ý‰×èûì0›|P‡Q¸$¸7nÞ*¥Û6»RÌj`=s°TeGÙÅ–Ö|rov¦à õr2ÚŒL©Å€> ïÆ'Õè09Ð5èGÝm¿Xiá;•gò¯¾új¹âŠ+ÌoâĉrŽÓ°Ã„IÑ¿Þù{™»h¹@óÞsÅØE•_ØMú ~ÀÕL¶Wݺ`7nÕF'|ëöÍhÃûà˜HoÜQŠQœeåD _Ós¥w×Lyé¥W¤ìà!Ü­²\þñÀ#ØAUŽ < öP¯hئqu‹ýgŽ.š¿v9ŠõLÉÌþ8¸àDv,3<ëì42œþ,S¶QÞô³Ÿm>Sùp"‰“Lì£ñ™+Úú£›u>¬ÌÚ¼õ9hSûŠ”£_ê«}G®HqÑhÙ²ef¥ƒsöù¬}F-—Aþí¹)‹}NÖA¦…|ɋ顡M?88§<Æ!_5íÉ WÞʇ6õà{ŸXã^ýìgõkËfzXN8 fÿžéà¢ûßPpPÎ~9's8€e¹Ñ òí¨<[ÿèGܨ m®:r@®÷)pr„ÇlY”FeÛ[û¹=ù@Á¤“éåNPâÉú¯cR¶Y™fw ÛÃÁ(7§aqïÌ3Ï2_Ôè„:ůB±n‘‡Ê6K,n7š|fág¡ fÒÙƒtÂÊKÆ|f#ÅÊKZúÑæ/hl^TLiÔŸ6+;näËF_ûl ùã夣®l4¨¯å”MwBB’tíÝC’ÑY>íôqrãúwå—?ºYRšeä¥7ÉÅSÎ–Ìæ*¹ƒßŸÿà;XIiκX.¾fõÌ”»ÿþ ¶ö.”䯙ˆO’1cºõ4¥7·9Ð@N—ü®8£×CÎ;{¬”—üZnþÎMØŽ]'Ÿºéç2eÂI8·×(<ú;¹yÝR¬Ð6ɳßý¢ Àdð¡Ãåú¯ß3»$WöÉ«Šqvðr™<ýyzæËòȞ͸)û $fõ”ÉcOÆVàt™xæ.ycî ²aE®TàÆíþ'žŠI|"¨O.ι>/=ú°¤xõRŸÐçROÃMÜeÂÄiRö‹ò VYÑ!;kÆ¥2¤gž,}¶Òw7+÷• } .·Û‡Ï§=†ïëVËÙ“§c3Ë|¥2gþby´t‹x‡êð]ùÞfÇ@' Brpæ÷Ü3'Èó_–Ýò±­:]zôÆ­ç˜9ÌÊÆ@ «è4É)Ímí]{éӧʬ—ßmk™{&N(C{ãÛ­•ä•çÃö{|0£PFãLpCq^ÚÑдtä™ïÜA?ÞΛ«})Øt™_€øT#“:ð[ñ#FŽÀ.„ÿ`·ÁøT·Ðc2%#ÜÕuÆVjŸ–ƒû´t|þ+£#Nê!¥/¿‚3éâ¢>Ág|¯²s6VˆÏ•ÀñEœÅ.Ÿ~ý‹Ì Û=Çž$çž¶GæÌzRæcÕ9G N8µ‡”Õc`K§¢ÇV.~S’ †K¯þÍ )à;f̉²ŸMZ=ÿwù2ýÜÓqÎ¥‹äìßøy}Ê9Rrß–~ìL¢åH¿#q#5.§( çM>C^›3SV-@‰Æç5Qºõ"W\2wF<Ï­åš/bô|²ŒB:3“z›þǺ“Yžô,ãp¤¥Kj£¼<{<°o«$àSýPÎyÑhÚÒÑL˜m-'¤¡|G3O‰3ìZhógÇU~A™tÇ2L'ùsƒoÖæ-ï`9&L;éäÏ­Ô̳¾0.M,¹ô×´¶’OÌLÉu·©ó¶wó±H?9F¼©?“¥Ÿ cpV'K”›ÏçtÅv_ìs”§{RzŽ<[N=i€Ñ…Øpu·¸%bE6;+#"²2+qF†—–耊ÛkñâfƒMâååH3tå7Y¨“00ç-äÉØêËA:·6×ceçˆÍ* >[Å•ïNØÚÏOÔƒ³ÆKÅêáæyRS|b¿B6‘/VòÓžÝYy¸²˜†üâ§²ê ³s'\x‚ÈJ ÜÒQÍ'É'&K°ÛØ”v~kq3r‚‰›,5øD?If>ÃÁ)É ²[›·¨ÃdÑpiÆ ˆ«MÃ1©söɃ ¯ªJ|F ˜pb‚ŸYãê”0m.Òw¨æÙJOœhêÙp¢Á0+ÙØáÐ93Ë|¦LÓ´‰-q`º«0ã”Ú e—¾`Ú•“G4ü|?qÇOÁ± Ã`˜øi%~Ë1 +Û,S&_€1¢©9XeâvF¾DËâT”—™s§2s°ã"u¡Fjë1@Ī>Ó‰u3iÃÕ]~ŽŒÇtrÆ0>ìŸâlòŠ+ÆÜ>Ër—–’,µ8çsÇC²°eŸŸ„;lšqœäù§qóù™çÉ0\¨WüÉÁ¤ßy,ûüdYUñ&ù÷óóeÆU“"Œùû?d0¾¦ÀO Òð.‰” ¿¼ žA& Œ¯¹ˡ“PÉx¡óhñi>l÷LùC›Æ]ÄÏ?zÀ2Öh:>æÓ‚(Óéý2V‡íìU¨Ki¨óY˜ˆ f hSüÏòa»â!´Oðð3mXONëd.Þã–l–å¨\ ËDÚ”4ä5ñæg°*0÷ô¬…2é‚iøBX*ê&¨°£#Ò´™ôv»ËN3ß ìÛþA9F½—,Ybf½ÙNó½Ã';lÓi”6ÈÃãêWWø’£|¶û¦Ä=¡ÒŒ2{èÕ9Ò©O/é„üç·gÙVq—F3¶•ãbÂ}øÒ@æÆJÉĤPÒäÉ’þ($~% ãÃiÐŽ/uíׯŸi·ÃÒF¿0Ãôð}8{6v¨àxå•WÆ|ï1~5>óY‰÷@ ÊM:Ñ|G»Æö˜ïv2ý9R¼7*ÊMùËÄ;†åœŸÊlDÙåä3Ë2 Ë0Ë"w¾ä nÓP'¶ã”ûõK¸5Ž!rÿŽ-|oñóZì'逴-†ZÞØÇâó­[·šzÁ)ë&möÙØ'b?Û·Ù¿â3ÖÚäÅm½,+ö „zp+9W¡m ®"³Ú†|X'9YÀUYþè.”ËÁW:Ù)g½âàM;ÖL3y“Ž“\ñ¦|úkº:*WéɃ|ióx¥n¯g_™Ûε#®ù¦ñŽÄÖ<¤Í{8`d™ÜQÃü›;w®aMüùín.Ž1oßK:)†6ó‘X³¿­»d)‡å€áü‹÷j˜.æ%Ë*ÈÌOÕE']8dÚ4}Ìgî:¢N ‹G'òW~|ðl9ë'Hƶé#äÏüåx…eýHÊo+ˆÊRb)>×üÂS’X²g.}¹¼»ˆÇÓ§\(M'ŒÂNPNDtøµ§é¤q&Æ\ääû’nþhˆiùÓ ú8Èdš¹k ˜æ`»ÐìÀäÁ²Íz¦ã²¨ueyaùd² °<Åc˜æ)ë y0¯$ Œ·eÛÙù¥%ÅR¼·XÆ/甘q&ï÷`߆m娱ãq¼o2ÞÁe2×#¯GŒ†ñvV«ºzÊñÇŽgÓ”f8AaCÀN·Ãp•›5ËŒ×^¥%€,$ÌÒÊ`bg³gìܰ’²`¡áV‚°ø6?-p-~,éØR g$Ð!KÀ,V:aj‡Æ¬`‹¸úÓ¯‹E«a)~¨Í¾h=ÊÉh9‹‘„-ê…ødš#x¦b{vQ¯È€ôg'¿iT“œÂ™aðÄúnøE eÁAÜ8äOÊHA§½+â¶1aà—‚Á|÷¢–û˜ÿy=ûJÏ"ŒÒÁ›&/5ŒÏ­ÌY0fü‰lxsõÓ?ÿkÓ0ïiȃiC?.üðI6\žÁͤ™Yfäà¢/’Áøñ0гúLÔ SŸº6†¸ñBÆedzs$2;±ùøµ6sN¨áµ³?ýsqæ}ùÚÅ2ߎçE=†Ž“1ÃúùQ0ÁCŒlÝS0“f©ÎÂf>Eg"@?$Ø de*ßD×0¢f˜|FMž6æL¦ŸW ˜ceºEàgaH8i•/}8AÐ’nàÉ—œ±ÇrQÃÉ!7c8ch ˆ0ØÕIßÓ—£Ïj3£x!ÐKóDéP""&ˆ¶» óÒ “ iO‹„›t@-}ÑiËÃççšêÊ$¯×¬nûç– €âÝ4˺S >~9h…¡gú0¡z‚AKóŸ33-ÞÈÏ4ÍSÄ7˜Qⱬ*zå!]AQÞ­e²\Ñ÷Ë®À‘HÉx/cÊ$ç‹0!lÉeNS'ÃÇÔ‘ÇÕ?Í?Úú “ÈSÖ)ö™ØieyéׯŸé3ÑŸ>®rBvVµüÄâoû“žÓ#F˜>ãj|»£«ºÐýEž÷ ¶ŒGcó•6êÎÎ./Rd¿“UìKêàŒm û‡<#¬“|ªO<ücÉ¥?õ¤ö]8ø§ÍÁ+û½ìR7Mï{•EyÊC'F(ŸƒöÍ9È¢a^0ÝL'Æ3Ž#üGYäKyœxá@»¨ Ý4l¯†,ò`;¢¼™6Û¨ ]eýˆ?w×r}¤ig8 äÑÔX>©ý™Nb@þºŠO¹,GÅ€w3úÆUcφ7^“Æ \HŠ>:’|Ê’ŠËi0>1w AÅâHä3®êÏI?Ö{áÄÒLúGÊé4.Ÿµ¾ò™†a¶mGéŸòn‹óˆum\<ô6/–5ÆÑ6‚aáA,˜|–‘L´KÓpüqˆé»³M ”'.JõìÙKj°ð²;2Åvwv€f`¬Ã4Ø&³¸D°uèn@ÎÅZE·AX¸9ÓÆÂÍJCaÊËÊ„³à3œzÊÊ ü‚qHoûQ/ºÉCýLuÛ¼(‡+3ÜÂÀ¬… ª¯!à³ÍGyÑÏö‡PCìû»Öúù•okl5ÌæG9ÆM9~·Ï¤Ký¦º0¾ú+¯›/Ç–4´ø·'RÑŒl;Ÿ}|8à0©M˜‰­Ou˜_@oÍŒi¨‹ÖÆÈŽªX;¡üìˆÖ³òŽò²ÂüG`ƒF•üë°¢ [«“0 ÔáñŒ6&ºò§CiÕO݆Ðú§á–WËch~¶]YyªLºÃž[ÅÇ3•gó³ŸíxZne{À{ °3€ƒ{uÞN‡òdûÁUBk>«Ñð°òBšh8žm¾p½ÈPkJ«ðÖJ“Ù…SVýúNÐ⫪^Q™Ì;´}<ÌË-yn_ÆQ÷{µ)[y²MgûÏw‡íKF,;=±âÒŸ/Uæ_tÜ–ÈÉZv¤ôýÆÇ ÏŒ‡17ºãÒ„wDV=ð1þ˜rŸÒwðSo|V‹†k¦ ЙVÆc?éa8û‹v:”§mùkXÐßæÃgÊVi3O”&WyÚ¶ÒÄJ«MKš0º Ÿòd\;LyÅ úÓÍø´™NâÈþ='F‚åOyÇ’Iÿ cû“/wxòB¦¿Æ£­ºq€ÎÁ½=ÀÒp¥·yÙ2ÕŸõ‹þ¬_L/ŸùÓpå¬wA¥kO® ¾âã Ú}ÅRñîF“Žìþð5£"lÞÃñ ì:Q´¡µuR9ÔCæÏ‰Nl3¶: ¡ñÕæ¸Žƒwòãî¾ÓµíPܙÕõ`»`Ë%?Ò·…U0œ;mX˜ñä«ò&ÕMÓÑž­õVébÅ·Ó¤4êGw)vUoÆ*:wŽåaç&³„‹Eì0-)è—îØ‰;6m2ÛÛI×ý€\ÐÒh¢zp€®Ž M¥YPÙ(S@$¥W©•d¶EKþ¸œ6_Z!èV~Êß¶n›VãªM:>S6àœyÓ™›‡>“s ¾Ë—gw8¢uD£uØn-'<º/—a¶ì¶±QNvúÕ/Ìn.L‡0>ñøµ)‹yj5.‡ñ³Âƒ|l·ý|yžCñófÙn-Ì/£‡ólMõ>º,ü“ÒFX¼i£ óCm„ø–v˜.1=Ú¥@zøLc· ¾ÿŸºÑ0\ŸYþŽD3Ÿc|ÿÃ1‰/n{Øy+ÑôEÒ¯4›Îæm?Û4ñ>·_óLõnžáúžb[NƒôvucÛÃŽ6Þ_`æá~,'ôãÄ&9L);íòŒA@}ù~dG—ÛnÙ©‰õ®Tía tíÙ6û9,“I‚¦½x¤EË?,ŽÒª±hí¸ñÐØôí=w”ŸMo?Ç#‡}žÿÕºÖ•öâ2\²,kh©¡ì·Ñ0Œ¿X† 0”­æ y©ÑçX:¶Wæ•O{¶ògúøSLé¯ýPòP}Úã×ÑpÊ!oþ» ,¥é(ï }_Ò¨?mÊâïhM1&®êʉ夋åÖ´h‚nÆS?>ÛtúLÿ#1ƒ·¦/Œ‡-;,üˆý˜g,G¨‹¦Á¬¡Œ¿rް£i8ÁúÌ9ÓM–6bJ<8)Ã…TØéÇŸÒ·×.‰ÞäÝ‘-î¶Œ#)šò±Ófómï™YT3„ûqzßþŒ9qI²öFFœù¥/¡dÜ­va÷7'I‚˜ª¬thbÖf*MFز#Á†¼­FH™Ò¶¬þšp*ʾp¸ÚÎÁ¿3‡€CÀ!à8Rx†ŽG Ø™à;¦Ã/jt:8PgG)j8`¡Ä!1_˜ÑH±ô½ÈÕ®úp ®3xàùJ®V±/ÆrÔáò !Ú³å©_{<µì©\ÊT*¿=™Jמ¦SPV{<>,áš_}DOÍ;ÍWÛ­ÏÊWiÔý~Ú”ý¾ÊãÀ—ï ³¥Ý~Å„1TÖš¶°p SZµ6&*›tNÄšTùGÃ>Ziðùàn3Ü#Åï ³ïЪ¿7û&\Dàô:¦K‡9ƒTŽnfgÌx6`ñÒÒéÏŸÒ‘Ö~¦Û6š±¤á[&¸zNÞz¤Mÿ~<õ}?d8ž‡€CÀ!ðÁ"Àw ßQ|—p2™/@¾ôô¤ïjE¿ ›þúåE<êÖaº ‹¼ï”εñ/(CÝ´©·àòÜ*W'ø¢Öð6Xº ã–Y®tq¥Šå†î`§.V¹&dZ¶Hßm4Lm;,ø¬4je’^ù“FŸm>·ßçsÐ(O›iÔ_é5\ÝíÙ6=yÙnÆUþê¯n›o[a6ý¬qè”kË ºÕfoûÑ¿-£qbÑ(/¥S·MßV˜Mg?kú‘gЭ´ôçϦ±i5̦Ó‘áv<¥iËOi”·ÍÃÖÇ{ʺ5ý[É.vÝn][5V¸mË EP_•¤ ãÆ#­ÒÇ’IZÒ¨Wm;,ø¬¼•VmõÊd¸Ê±i4žÚv˜>kX,Û¦ Ê¥[ûY8^“ƒãPä0VäA:ý©®‡Â#·‚Fú~×#1™q¥›gô’ ²¦€ Òê§Ês"|á°SÅúX2ׇ€CÀ!àp´‡º|7ßIÁxï{‡oÆÃ_³A®m»U&©(—?ž—ådµÖ6z<#`—o-3vó;šx‘¿-OyÇò×ð }$ôä&;Èûh¹ËŽÈíhºÂtU¹ñ¦µ£ômÉ<ÖÓ¦{Gý¯Ž¤µ£2ÂèUn¼ùÆ££~*“ñÂäj¸†©;–¥ †3ž¦|l¿`œ ;ȃq;²Å]e’oGäõè¨[åeÒ_àé?DÝ–ŽÁxAù ¸t$ÞE#«Þ|Qpß<·¨±…ÓÏÌÁ=ä˜s[; WŒƳù…ù1n˜˜Ÿ-‡á6o;Ì~V>ô Òk˜íß–_ú㨛a4ñò·éÏæc‡©?ýø¬aêKf,Kf˜ cËìÏ84¶ ßçp?›Æ–kójÏߦ%WåÃmÞ k—҇ѩ ÒÒ Ê ÆQžmù+O¥U;,ŽúÅ#WiÃøÃèVº°0ÕIiÔ¤¥˜_,•'̯-> ‹¥Ÿä«:ؼmz>ÓãÅòkÏŸ:y©›qÃÒ`û)­ígË´yVé‚ñÔmÓó™FÃWŸù®ù°êÌ_0íÔ_ý4-š>Û?Ìô6Ou+µÃø0Ìö§»-^6­êäaÇ>“–ÆæC·ò²ýÃülZ>“^élw §­ÆÖ~A^Jg‡)o;®Æ³Ãì¸êƧ=¿Sù¶Ó잇@¼° ÕKâôŒv¼q?Jt k×®Ѓ/&Tý4ÑúráVw®VðÇg¸uÐM¾Ht`Εrйüø#M·Êpöû‹@<ØÇCs´µ¤Lš£U.Ž6¿xÓ/vñÒÅ#7Þ´M™ñèõQ¢‰»xé° Æ¥›æhÕ‰0™a~A=ÂhÞ¿÷"·-¬4Lu¶ñÔ0ÛOéÔVºÛ¢SzµcÅ‹å¯ñÞ/›rãÑ_õ‹‡¶=]ãå/]{ò4¼#iíH:ãå«z„ÙGÂÃÆÇŽoûS–”¤µÃã #½U[²”·Ò´Å_iÕVZu«LÛ_ý”&h·E«a6Û/ì™ümzºIgû©[mÒMX˜úѦQžAwÝñÐ(]¯ÍaÊ‹þJ«4 ³ýÚ¢Õ8AÛŽÃ0ågû«_0®ºƒz¨{¶ÊPþêÖxê¯î ­ô±è‚z)½ò±ãi˜í§t¶­<Õ úÙn›¿Êd¸íoÓóÙ¦£»-Z†ÓhÒÚÏÁ0CòOãhùðž2Ž-¹ ¬“±tÑø®nòS?åmÛíÑix, ·ÃÚ£WÙJG·Ÿn›gn~fñŒ+êü… Ð9 ×:•PETµƒ2Uy¥gxÐOÝ #íV?Ú4v˜ÍÓmùO:;</ènw}‹´øŸ‚|l7¹Ø:Ó­áA†Åk”é•O˜Ÿòk+Liâ±Ãø„ù)/ SÕ¿#¶ò`åæ§<Û Sšxì0>a~ÊKÃTGõÚ¤k‹&ÈGÝäŒ×VXPn[nåCþ|V[ãÄ’ôWzµ•—ºƒ¶-—aêæsw[a¤WÓQ™Œ×o ê£òÔî¨\å«ñmþv˜í¯´j‡É´ý”ÍCýÈÃö§[Âþ ³-Ãö×ç0>a~6}{2•¶-;L¯Xrcùù‡ñ´i‚|Ô­4vºì0Û_iÕŽ%SýÃø„ùÙüô¹-¹JËʰ݌có¶Ãlÿ oÒµ®qHgó ʤÛo‹¯ò´m[— ÛÍ8AÞv\›gGŸƒ|TnPù¶ö~Ë Ó§£2Ãèƒé·iÚ ³éÚ{òi Ç m{¼;Þï¶Â:"#HÛ^ZIÿ~äm{r?*2‰ß#­*7 Ç£U–l><þű%ïÝà8òý”Ë´­‹Ëߦ‰ç9Œýh4­f€³X4Êáú¬Ìég?ÓíŒCÀ!àp8‡€CÀ!àp8l8nä§à¸ðϽ2vÜÒ³¹Å " :ÀV7mÛî ±àÊÃö#½ÍCi”í¶ãÙq:Bkó ‹G¿ Ê “©<Ôî(­ÍÓ–ÛŸ0Zê‹_,ýl>¤iOnݶL ÚmÉiO¦Wiƒrm•­´ª_{n§¶Í3WiÂl;Ãm·ò¡¿êÅg5ñÐÚ4v<>+O•Ë­ñÔ¶yã*M˜mÇc¸íV>ôW=ø¬&Z›ÆŽÇgå©rb¹5žÚ6Ï`\¥ Úata|Oõ°yÄCkÓhÜ ÜöÜOm›g0n ýÂèl?}&í‡=­aéÕôiÚ‚nÆQð ÃÔÏañƒ~í¹ÉÇ6arm™¤µi4n[r4Œ´A^ô³ùÅ¢µi‡Fi•g{n?VË›§Æe¨òã³MC7Ò*]&îÇ:ü¿Ò1Dyñ9È/?åeóa<56O¥e˜MoÓØñlº ò²ùh\ÛV:›ŸÕߎËOi4<È‹n†·GkÓø±×%H£r•·Æ ÚJG›6ÈáJ‹Nü覱yÆ¢µiüX‡ËµibñѸ¶‹Öæ§ôJ{,¥•º…é¥:Û¶ÒÑ/V‚ô±è”—+®ÒÆ#Wi•o{n[¦ý¬ñ‚2mû™ô*“þ¶[yÙá±â*-Ãmz›ŸÆUÚXtaá—¶ÍӦ峆ټ5®†…¹•ÃÚ‹‹6ÈŸ¼”Vy¶çfÛyÝ6-ŸV¯^í¯©ÃÑžPF *Ew,ä¥t±ü5œv¦£2É#¨c{<‚2U úMX\ÒÄò·ãièîˆLò Ò·Ç#(“<Ú‹Cš°¸mù›H‘Á¸•I6ÇBZ©G{º i ê@½c™X´aþô³ó!H ÊÔpÇp›ÝJÃç0£qíxíÅQ>aqí0›§ú«Œ¯LÆƵyvD¦òj+ŽÍ›Ïa´íéÔ·=ú Ì0¹íñÊ$öâå­´†é¯²l;Lg†·§wX¼öâ¨\Kw0½íñи/èVav,Ú0™A¿öÜaòè§2ù¬:ó™&ÈÓ÷mù¯q5^ÐÝByøS,Úöd’S&è>\šïKfÏ °¸ñÈÕxä§8)ïŽÄ׸ñÄ!ÿ÷"WãªLåg»5 A;,n¼ñƒqéîˆLÊ Òy„¹ƒñ‚4 3¤£ “æoˆ#ÿ‚q;*3Œ{<‚2É£½8u£åÉ¥õðüVŒOÚŠSGñµãò™¦=G’¯üÊ uÔO{«¾¾DÿGå¶G¯¼U_ºƒrÛã¡qíxíÅ ÊÕ¸ «V­ŠЕÈÙ‡€CÀ!àp8‡€CÀ!àø Ðsç:Xý e+²’Eœ‡€CÀ!àp8‡€CÀ!pü" _;~ÀçÈçÄ»´;‡€CÀ!àp8‡€CàXAÀ Еœpz8‡€CÀ!àp8‡Àq€ ×Ùïïp8‡€CÀ!àp8Ç n€~¬ä„ÓÃ!àp8‡€CÀ!àp8ŽkÜý¸Î~—x‡€CÀ!àp8‡€CÀ!à8Vpôc%'œ‡€CÀ!àp8‡€CÀ!p\#àèÇuö»Ä;‡€CÀ!àp8‡À±‚€ +9áôp8‡€CÀ!àp8ã7@?®³ß%Þ!àp8‡€CÀ!àp8ŽÜýXÉ §‡CÀ!àp8‡€CÀ!àp׸úqý.ñ‡€CÀ!àp8‡€CÀ!p¬ àèÇJN8=‡€CÀ!àp8‡€Cà¸FÀ Ðëìw‰w8‡€CÀ!àp8c7@?VrÂéáp8‡€CÀ!àp8Ç5n€~\g¿K¼CÀ!àp8‡€CÀ!àp+¸ú±’N‡€CÀ!àp8‡€CÀ!à8®pôã:û]⇀CÀ!àp8‡€CàXA Ùó¼cE§‡CÀ!àp8‡€CÀ!àp8Ž[’SSSÛÄ»„;‡€CÀ!àp8‡€CàXA ¹´´ôXÑÅéáp8‡€CÀ!àp8ãä‚‚‚ã6ñ.ᇀCÀ!àp8‡€CÀ!à8VHÀtwýXÉ §‡CÀ!àp8‡€CÀ!àp·¸[ÜÛ¬w w8‡€CÀ!àp8c w‹û±”N‡€CÀ!àp8‡€CÀ!à8nHNHH8nïîp8‡€CÀ!àp8c·ÅýXÉ §‡CÀ!àp8‡€CÀ!àp׸úqý.ñ‡€CÀ!àp8‡€CÀ!p¬ àèÇJN8=‡€CÀ!àp8‡€Cà¸FÀ Ðëìw‰w8‡€CÀ!àp8c7@?VrÂéáp8‡€CÀ!àp8Ç5n€~\g¿K¼CÀ!ð^ðßO7I IoG½|LÄLdøÃX[# J‘&؉ì¨LGÿßG@ó]5Ñ¼Ž•·ZÝnžQ´^)gÛ0ßbå¯j~´Úå÷^ì¶ôm+ì½Èü â¶©{™à7Ä”ªG,‡iäÏ6 ‰|;ãp8‡ÀGvèmõaÚì}hÀòä`U¥T×ÔJbb¢477IJZgÉÍÉ–Äx:@mÔìt!¼½Ž~[,󤪢Bjjë _æOj:Ó’õ™N9<Åÿ-ŸöÊ~Xx˜_kýÛQ´¦v®;V–KEe•ª­E}K’””TÉÌÎ’´I‘ ˜£[¿;ž^Õ·¡®VÊ+*[VÑ1ÀËÎÉ•ôÔ87Qu\ô£®¶F**ªÐ˜òÄV3¬dÉÍÍ•”ä$£CSSƒT”•KC3&VàÃÿ™YÙ’Ñ)íÓÑ r8‡€CÀ!/möÎtìY¾o—lÙ¹Ït|Äk/1Eúè/¹YÍÌþ»obm:ÏCGÎtèäÍ—iWýŸL¿ðRY5ói¹îÎÉÍ7\'Y)\W:;¶ÿ¬ß¦ºƒòî¦-r°¶Y’“[¯vDô“““%-½“dddJAA¤&cl”ÇáÜã÷iáÑ,¯>q¿üïç¾&§LŸ&K^œ+_½ã/ò¯^'iС….~ÞŽòpÇúšJÙ¼y«T×{’‚|oFYijéÝw€tÍÏBD®|ùÛˆ5NíÁrÙ´e›Ô6H4Nss‚ôêÛq²™Iœµ9\¨óù¯# yÈ|ÿÏìYòÈãOÊò5ïJ}C³äu-”es^“/ýòOò­¯|Nò;¥õMu.Þ¶^¾ý¹OɺF L½ƒR•z‚Ü߯dÔž˜”l6““ÿu€;¤€‡ú–`&Q·­]._½ìL)8MÒ+6ˆôºHþùç[¥<ñ¦|¿ÜþäïË÷ɨî‰òâëIòò«”©gŒD}k«Ñ’ýÁ{ÈŸ&L£aÀÏŸÄKJJB3q,kýÁbä¤9‡€Cࣄ@ì: \i`àÝ•sdüÔÿ±Ò}Š,Yû¸ŒÞçÈ:¡†w„:íf°ÓiÌÄ& „èò¤nšgÎ3öžŠƒfœD‡!‹¥`$°®r¯Üþ½rß3;Mü–xÄHLê£^cÏš"—\|™\zéÅrÒ ^¦“¥è(‘õM+ýâHoíÁ ©éì_2\JTEÓb/tPÔ?¼•ÅPsS“4aiÒÄe‡F‰ „3¬mC9-<ÈÅp‚_BRª‰z☡ÆÎLóÝtÄ5QR*:O0:§ÛÿW K;‚¾ÏÒ×_‘ÜôeyÍ×dŦ=QZMulФÇîüÂHz~XX„Srª¿msð‰#ŒOçôÔVyä¯|hóç‡#T¡¨†þƒÆ§ª'ˆ[aKJÒñgåV€-òšuPCßxõ ÿVzFøÿÃÅ…ê•ç§§é0ž‡óiñA¾G²»°;q÷¬ß¹ïQÙ¼»©0Ãó›4>WAý.;.|Nˆt¦ÂãF:Ã!ñ•Þt€ààs5*SÓ±-ÝçQ[ÏÕn¿“¦t¦#Ø""êm¢þ ’œÂ®¡HQ÷"Ùºy« ;y¼ ìW„N°'ûwo–7ÞZiÂû,©ž¬^ö¤<øô¥2üëÜ~î¯ÞpÇ‚­£‰ø§ØÐ›É =;426iÌè.v÷‚ô†Èú×ÿ°øÄ7è¯|¨Ù‰(/ÆŸ[T­<±Ôˆ–ú±¬Ñµ3Ûn$Û>$s|N†\q.ô¦ò~ù~[qoùÓ ï%©^½t/ê-MÕ;d?¶<(^*‡ªðÚâSØôÁr@¼Âð Ë'ËbìãÚ¢‡¦Ÿ[ic™ aW©nI‘:¦¼ì¸ê×bcÀ­´z‘ñHŒ¡‹¶†ŽÛ•±-ý9 I‘„Ö)c Q‰-šðÉÆ³dÿv³ Ý­ß Y¹z­Œ½äz¹ûçß•1ÃzKUÙ÷¤º®Q²S#œÑäc¨Þl×|9¶Þ¾<Äc¾„Äë¨î¾ÿCíJ§Ç¡`Ì4[†u?–ÖØø4vži¾Z±Í£_ŽâãAZbN¾*gÐy¬ê3¦µ;P#œ•ZnomšëŒÇ¡j?Í Ó$&µ~jCÓ÷^ñ±ã‡l•@¿PGž—?óÛúŸ&ÉëJÒ…'IV†ÿ¾INÁ9¬ˆÑ2¯ng;‡€CÀ!ðáD uïÄNƒÕ2=T„5Tûi8¼dGµŸM§*šCU²k÷nÙWR*õØ^É.x.1ëÖ£HztïŽ ‹ü^‹v4ØYjnj”C55RUU%ee¥R^U-M”ý0àïlÎtJ×®]%-Å—£ñ)SŸ™œÚš*Ù¾m›ì?PnV0²ºt—½ò¤vµCÿ1b»©fpŸˆî/ÖFäªë¾ Ÿ»îBI„Ý¡jykî,ùúg¿.[6m”ý{Ž{±¶¶¾øÙ@Qõ¸Ì©úàA\zT.ÊÊpU:ÍH+°à%T9]òLZópñ;ÒL_˜i¥v„Äçü«¥¢¼LJËË¥–ü9†Ç@6«ï9¹]¤[×nÒ%'3Ê_;­ìD>p{(¾ÍMž¤uÎDg1]êíÖ¶Í’•›/ƒ† –ìNÜ| §òÑÎ/;Ùõ‡dÿþý²oß~©ª9qž;­“äJ·n]%;£“錛$Dx˜rwñž=²go1&#ê ÿ$t¶só ¥W¯^æ~ŽÍ£² EõÁJàYoô >ɘhÊE:iUWIpáý ¹]r%L[30$¡ÿš›ü‰†ú:)Û¿GÒŠz€®\þþèsrþ¹§Iï¼N‚± 4ÕVȯÎ2<é$ßÙ)] k5Ï#À°;î۾Ȇz–ƒj©D9(E9¨A¹âÆ´'§¦â‚¯.¦tÁe†‘r øR嚃Uþe Ã*aJZ†äàΈƺÙ¶u›£6 Ÿ:gçÊ Áƒ¥Kf'_¾…qScƒTWã¼re¥”8 «Q¶QW('w*deåHaaWüò‘F$q¡!«¦1ÔW' ìÛ#;vî’ªjà…z›_Ø]zuÇ ö¨u ~y}zç ÉèŒ<÷µ‰L²øõú`E™ìÙ½Kö—–™ ¿(/½S&&:ŠÀ«‡$«&Û°ºØ •ÐÅÔðcvf!½ilgš¥¼¼Â”åôÌl`“Õ;¢¾¯A„W=ò·þÐA´[rC­±Ç&½ŠºJ&ÄR:gKÏ|‹)w‘veY‰ìÚµùXnÚNdt†Ìл{÷®‡éM|›ÐîñÂÇFK÷Làž†¶÷€T î²,§edInvf¨îFÁ8ÿùí'Ì€<&Õöï‘Ý»÷HÊ ?Ñ•$Ùh{zöì)…yX¡6eÎ4QÙ†Ë tV¦=‰3a2¿\a§S'JAMEݺÃ/—(­Ò­go´Ï}Œ»Íj…Ò²/‚O%ê„Áy‹´Ÿhô‹”=d$žt°¬¤eb—”W¢ÍA'¯;ñ]†4æååIf§tdC£Ô MÜS\"¥xõ–í.¥Ê"xí+.–ÞÙIrèP 0B{Kñüzâ¹ÿ‡€CÀ!àp|Xˆ=@g¯!hØcꀉvp°²¸ôÍyòä“ÿÆå<³eéêM­¸œ>iºL:C.»üb\ZÔ×tܸ-˜þ²]›åÞ»n—¹«wKõ¾M2éºVq%­@Λz¶œ~ö¹ré%Eãû*v¨³'ï¼½Pyøyøûdý.P%½FËÿ»b¢Ô–m1T•î‘ßÝz³¬,O.)µ²·¦@~rëÒ«K‚¼øì3òæ’·eýúõòñoþ\>{Ù$ä Z è¯GòV÷î­o˯~‡,\´\ºä¥bpµ“ÁòÖKOÊ-ŤxÃj:é ¹ñÿ]/E¹fÛ€´ÿçÕ—ä©§Ÿ•—_ø·¼»Go)0QeÚÅWÉ´ó¡û%3p¡°C;¥J5eûä?ù,Ú[+é²³"Knýá7eP÷tyyæ3òÆ¢²nõJ¹ük?•®žŽúÑ¢«Ï½ÿMžù«ÒåûvÈ‹Ï=#ÏÌ|AyúùÖLºô–k.ž!áÓ&J—Œ4ƒ5ʼnölÝ(¯Î~I^›7O.˜'ë6ïò|Ò8;fŒL™2].¹ä|)ÈJ—]–Ëoï¸C6í¯‘­ï¬UvDéùЩ÷ ™rÊ©2qʹè‚2¸wWƒ•iOâ­Ÿ¦V`’ÖÔ£^²oÏysÞyðo÷ÈŸþù屮®#ÏBýÿº\}é ÉGÛjòŸ¡Ãzu`ÏVyeçÙY/ÈãϽĨIê>@®™1].¾ä2™>õÉáE(‹ãFô,ݽUæ¼öм4ûeyáÙÇeWËIÉï=DN{‚ôí;D®ûÜçeÔ€,¹çŽ_Ë3/-¦|Lt–EpA½üíÏo•9RYV,ÝÇÉoù?éYÀ3é­ËoT9÷àp8‡À‡¼Ðc˜f—³äÕ‡8Œó$»¯oËdoÙºí& géB㣣éû7T{3º+Ï,Ä~2Í{uÑZgñŒ½sÍboeÇóµ·tÃŽHüF,Æúfåü罓­ø]»u=Œ_~~×£WãÃ/ïó*êü¸8£ár¸¥aÕûßõ¾ü±“MÜaƒ»ûο=Û*ÂÞ-«½ÿ2Ü„ íŸmìßüóyÏpW ‡¼GnÿŽ ‹'½¿º÷ ¯º!¢§±½Çþøs¿h`cë'÷y‡"i¨«ñüõMqó¿í¯Oy56ÿïþ_õëä4¨0Ê3»K¡Wç§i˜ô™›½ª “¦FŸYsC7ëá?Gã´•ÖË¿ò#ï@­æA³·òÍ—¼Iýâ+O½²(Z< ýØ~ÒJæØ)Wy?¼åÆV~2þJoå¶_ߦHâ}¢ÿ±=Ö<—îXí}æB?íÃ÷ŠòéÕ§‡y¾ì‹·zeµ$­÷ºëÆoа~Qº®…]=~(€éñ?oGù{M ÞÌ{¥k †Ý|Çý^E#­³Oß{ÛañGŸÐ";=»À+´ò©÷7xïî)7:hÝ]1û‰ÃxÄÒåâëàm/©2ñ#ùÜPSæýóζâQ˜‹ó‘4‡Ù·=ô‚çi¿öÖVîóî»í{mÆQ>—|áÞ¶}Q÷ïxÇ›õµ›¾í}æši­øÝrßSÈ!ßhÚ#.»jÌ㺥/Fã â㘓—õ£™3>ãm-©4ô5e»½{o Ö?¯U_µÏ¼òËÞÊÍ{Lú¶Í–Hï~ŒÌÖÿ¸nñéê’ ñº5˱‚”+ ØŠ]UQ"óf?#ÿxedååˆ-¥òÕ['×^x–YA5«~4³‚F§MÇÊñøQRÔµÀlÞ¾yÜö»{Ð[K•SO/oa%ñÛ×ÿJÎÄóé'ôa÷4йQ ôV±±¢CsúùWÈDðïíÉÜf¼mÓZ¹í÷÷"$üÇþ7}ö7ræiãä´½M0[¢é:jŒd'5ËâeXñz—;¸Uü Vt¸Z–"ƒ†—ô¦=òÚß~&o}â2¹|ÒXlÅô¹dîL¹àÚ@'2fÜ8Y»d‰pÃð¾ú-P”+ï®Z*÷=À³Ú8ÓŸ—‰¤ùØîxg¹Ü4cš¼†U§“†”Uë6Éwv‡L=ûI¬«”Y? ·ÝóL8óLYðÆrù÷ÿ ëß!ÃúpÇB³¤gøù †îY M²}þãò£WŒIéÖGŠ·Kn÷ì܈7Ï—ÀãhBU©*#ô”-«üÞßýSùú?%#»6Ëÿù±O×ÔYÎt¦ìÙ²ZÖo9(¹¡—û§#L¸ùñüdͨs/”iÆH¯ÝPVšd÷öw䯷Ý%Å?átY¼àMùÙ7>/Ïš SÆ Ž …\ÄÖgš#ÇH~²'K–-Ç'Á¶?nf?TYb0ï?pˆté\/ËfýY^_t­ ¼øìèj*Ÿ¡—~ãäËXaÔ·7>˜ e%»d棔…ë*eäØS¤vÇ"yöÞËÓ'Ëõ—=O¼ä?/È'¿ò#ð(®Œî²xÉ2ÙÕø‹?ñ99¡olY÷¶¼µh•¤áXE.v†/\¶J²¢ß¦8§ÿÂc“ÏßôsìMï-ÉU;dÔäËå+_ø¤ íÛM¶®]&·ßòeY¼¿§ŒÞIž¹çÇ2á”qòO_$)ˆÎ­ä}Î*2g¿ŒüŶôßÝö+?MøÏÒÈ *±“%ÜpÕÔÇ ­S¶|ââI2ñµ9`È+°í¿°ÿ9ç´ÑR²a…œ0v¨¤¦ù[Ügÿû_rýM¿„>2öÄ Yúö:¹üS_’)FÉÞ-käÇ¿ºS»’1=Rä'þ(?À1Ÿ{v£fùñy|§è¢SEž[&cFŸˆíúµr×oo‹ªI•yeFFZJ4Ï£¡$`tñ™Ÿ†¬?X"üéWò›¿¿ CF“Äò-²~[©|å;·Êˆ¾…²jñ\ùãß—a#qÙÚ¥rÇ-_’ØÎý•O],©Ð•¦xËJùî'&ÉsE†£Žy;dýÖýrþUÿ+gŽ-Ú[åéûî–wªAoÙüW¼aô¹Ÿþ–WÁ¾æïï·ËПrÚ8cßõЬèÊ'•¬>°ÓûÞgÏ3a£‡ûþ™ó"ú7yOÞóã'Y]½œh%yãO=Ý»àâ˽Ñâ¸ò‹ÞšþjÎGâ¶¶Z¯ ž}™×ã§{}è!ïóWMñåÀïÛ?¹Ãûç}¿º¯¸þÛÞ?î¹Ë»x¼ï€î¾Ýjy½rÁï‰gž÷¶î*öêêm=š¼wV,ð®>ÝÇvØÀ\ÃûïO¼ÚJÉYÿŒìZÉ÷ó©ë°³¼?üåAoÙÊ5Þ¦ë½Çþ~§‡&îÐ჌ý“?·¬Æ’Ùöu˼G}Â[·i»W}(²¥$"eï¶ Þ÷®¿ÊÄ<Ôÿí_üÕ«‰ìè`^üà 3LøØ±þŸ}ÅÛ[R†ºWãíÞ²Æûá—/24£u7ö]O¼â©¤{g;á:Añ†Nù¸·â]¿íÐÄ.z%²ÊŸ9ÀÄï3ý3Þ¦}þ*vÉŽÞÿŒôÓØ#¿‹ g}ìÞo˜7iÊ4oÆ4%ý—ÿœ-GÚv)ÝT‹ÛÅJ‹wzßç—ÿ¢žþn›+¿ö#oÍ–ÝÞþ½»½{ŠM´’m«½K"rÇž<ÂÈýÒ÷çmßï¯î×ÕT`Éݾ>9ƒ¼Qƒ±ª ½ž™»\Åze{·z7Lìkü»äû´ )è5Ä;wòyÞçûØþð¾'½Ú¸VЗVÐ'a}kTÞŠ×#«Ø]{#úgyw=8Ë+¯ñs£|ßNï?ýªñ1ú_Ÿ—xok~4V{ÿˆÔÏa£Æx˜34wüõqo÷þ2¯®®Ö«ª,÷6­{Û»ã–LØò­>^»ÞyÛ{ä‘ǼÕïlñÖø«ÎªXÉ®ÍÞO¿þiC?`èPcñæ?xÕõºfïyYAÐÇ/gÿü7¼g_šã½óî&oå’ùÞw¿xá]4`°±EFz¯¯Ü¨jx‹_”³ü¡=ý´ÝûøË^å!ïŽۼß~ÿ &îIcOõyŒþ˜·&’ÆÝë—xÓ ¯ÐÒÃßSs£üù€#VÀg…÷³¯÷î|ðYïvoT•—z‹ SÇždùõLθ̛½hµWZZêíܱÃÛ³wÞÚF´àÒŠ¹s8‡€CÀ!ð¡Aà诠ëªzœ{·m–Y›§")ÆŠ2Íÿ^wœ4 ‡yNLN•ñ§É—ð ¹þæ;ä`#6ñÁ¼ºp±\{Åté‘… »ŠúË¥Wõ7þÍøÞmñÞ]R†KrjpÉ.Ññ"ŸH«GM²éÊû«µöɲs^z‚¬ÅBïX¡ÿâg¯“®™þªYçN½pñ‘ÿÉ«„À¾&bœëS>­ß+Mà ýÁÖŸWcøž[q±Vg9¸õ-ùùO~&%7\/w–¤ae%K~É8+}²üþ±²~ûÉïJ\öúÌ_šò K`çJߢ<\̶_áR½”¥ÔÄzéƒÕ)‘—qaW>ìݲqËnœãÆ*)V¤ ÆðÍÆª|EÕ>9ÿê/Ë-ߺAöêjÎ 77Ý…ËÇp¶:ß_}Ö¯ J»&Åiñ>4|´äTO•ûÇÒ|v¡üéwߪÒ$Ú'W6l/—ó&O’»‰üc1Yâöjœ§áõjþoÒN“N›è: ž5ø¶ýž%R‰ yž¾º¬R² ú"d.Pô±óIÏ´çál:îÝ’óÏ»P>uÝÇ$+’Q½ºçÉÆåoÊÍw>‚ ËrŒè2\à†j…ÕK”ÜrÝ{Øh¹?šúÚjÙµc”WTâŽHèXwPÒ:ù8Õàò4š$S†Í#¾\°KÞÃ3Ì ÒP…‚sû?~!×\4Ù¬\Óݹw\’ÆÝ ^þ¥]DÂ/a"ë—/’ùËÁ%l»·É„‘C°ÚíÉÞÝ;¥úP=.|Ë’T\¶vÁi™2káfŠj¼áÅ•²kO™ („nÊ<:§ú8ýîÞ‡å¢iga¥Þokx¹_rz¦9N=xÖØ6tò‹¼ÌÒ\hÙ•å úâ¢>šÌœ\éÙ«‡äX-馵«ä~´¡K?Y¿b-N•_}™ôÆašT¬ÆOš~‰ÜüÙ™ò³¿Î’„Acà»LÞX¾Z&Ÿq2vÿ2Ô[ÿ!3;TD~}×ýrÙçâ^ˆtã¦îI¸ü»|}P6lì `a‚ñp'Âú¬SXùî›+kWl”q×|S.=ÎQûéÌ)ì)—\õ?òà-¿—7‘/' È‘U›Ÿ‘•¿-#öªâXíþ­á‘XW.%xúêOî–ÏþÏ•’í7µ’ŠK(3‡”/û§rÊy—nÙ~ž )×àGÓ€K wïÜnÊY=*£×X#Éi>–³d£6ÿu ½‘÷Rr³_¯¹úcrÑ”ñF&ö™HrSµÜs÷£²{k•¹C¢w„TÕÔùáXµ^³ÌTXÑ-øˆLúô÷åâi%ËT|d5và\zõÿÊ_r¬ZºVNè“"k–?"k6};º¢BáÓj•d·_ê±.²OÞzcŽ ,L“"ÜU’_P ]rsdÀ°Qò½_Ý%åh“SÐn§çäáÒËf§¾åéëÓ) öÄer¹h¬ò|?ügû¦gÝ£žîÁ!àp8V·2 »ßw x¶ïô£ù§Ò%ò6¢¤÷Ï‘í(ÉÉ3dÐ@»tcnÓNJÁöÁt9ᤠãþ vñÖb©,?ˆz\î%R²{‹Ì}e¶Ì}ãMY½~Ì{}QkEð1êÄÈlƒt˜JÜ8¾—@Ñ4b 4ÍŒóÎñçÜ7a@œ$¸™£À‡þ3ƒŽø;‚)ØíY…Áù” ¯”3ÆÄ$Bnnn”Ò=;äÑ¿þSTÕH÷ny2û™Ìï‰WË“1dfç [!›ÉÛKÊì—gËâ·WÊÛËàò,K­ª”Ó¥7âOˆiµ<žx9ÎËŠÅÿ¥oÊ»;üÁ‹’çäIM…ÏÿðN°ÏŸƒštléåPôöAŠÛ©3rq aêÚiYÌk@IDAT—Cuì®/Ávâ·ç2©lߤƒró_’$ 28ÎàÕhÜŽ\U¹ÇUaò¦¦ ·Ÿ3{‘/š¿¼4Ÿ¥aè°“pÑÚ‰-ƒ3Fˆ˜Žvv“9Æ-Y&I´žræDaŠÖVîçnŒâ 18ÇÀ u¢L@™èT²^æ9=ñE‚æIÿQ®¹D+®þÿì}`Åöþ—Þ{O $ô^”"‚€ ìH,€6,ØQPQÐ§Ø bGDEDš€ ½÷@BH ¤÷zÿߙݽ¹ Ä÷üý_™ÑìîÝ™9sæ›™eΜ3g(-_ö 6Ò<}÷®mØCÏïŽ! ( ¥EF}k÷«X‚¿'=Ä”ÙèNp÷ôGbÃÆŠ\I•!Ae'мØÚŽpüàNü²lÖþN'q{›¶ìvdÞú©¤@&ADks-ˆ <…P)Ý£‘y0•±è|i%œÓb.ô_YZÊšcO†›±ØPFéF,åøq'…eß~ˆ]¿ýHsß2¸È@c—³U•àðÁ¸yâxºðQˆrz77‚| Œ§Êy¨ŽÜRÑ06ÆŒw¼I|m­xéY[‰2ë(F“°x /-å =hWTÑþ³ §3D<¥®4Ø솽†uA\}®Ê0”ó»çÊÓ<ùmkGgŒ €^Xj|_&B ëæã'µ•þjŒ1…V è01ÞêMÍK­µ…š‘uü²°)åI âe^‚§1dqev0ÊËy‚„BãÑﮞXÿÞò( +¹ôônŒ³Ü¼\l_[Îw.ÈÜTH¡OïnJ8·±ýlü6HÒÝ7ÝzôP¿­Ë‰#{èXî¬Y¿ûîdžò/Guð …sYñBÑúóßd#“ÑÈŠ ÆUìr"AXX4úpÐ~½72” ‘…göã+!§ H±$ÇñIÏÕ¹¾j4€Fà?×sV@æ?Æ\¤î$Vœu¯#UQ‰!‡ÐŰLÑ£}Ü ój "Xš]S#TZ(<ê²xôŒyôÙ¡í¿áá=ðý.U÷¥²Df~Fœ5ëä¯rîÛÌæÞ` •æä.(@vàJÕD{)Oçš”KƒE×øuž«„—‡1ìõ-çõê˜5ž¤öz=&ß9«’²èɸ ¶lÝyß.VÞÆÃ‰ já«_ǰñOŸ§Ö‹ØXë³á7q0)û²Ç]$§²Â,.ÌÁˆûŸ=/}9nŽ2Ú9‚Iß,XήùÄlWÙãî¬A–k¶…ä0rñè¨bC˜£sxšFS3itCΕpÊTinLøå·^–åa‹ÊრN¨½r±sË6ƒH×}‡Œ u®L²M–­dV¡“?ö·FÕ¾œ`—LLÐ.v²k*;9Y¯Býf-qçÄ!˜øÊçhм¡sźõé;å4¢Gû”ôíÆÐ’E“)‹EµHþúýüw0øŽ‰ËuÞK ¼—…»Rͤ}9¶KýlÅ$õ`Tÿà]uu z~ظü;tîw“Js®K1ñõ÷4; óZåUðD%òyºà´’—c(ü™éÌ1%©íÅYùNaAÁ;Û´𑆡¶ð$‡“¿ºCŽéÍe‹˜u'Î&À²$A,Ûùϵ·x:7™ä u¬¹6à,C¾ùÝóá†K4ð÷p1±øìª„)> óh» s°ŠGj‰¦ÕLö­ZÈb€é·,¸š“'ù§/ÕmUYQŒœBCtu2¾_Þî†Ww!gõgÖÇ;Ds¾3÷»OžœBqÚ&‹põyô—ñ­•…;‹†4¸Œk Æ;¶­ù×õº–ö çÅ%<²QbÕi{+¨×êb捻naÇ>ãf²kám .îŸì³—y‹Û|øïˆ¹ß™ßïPšq08[ç“—•)áÚ3$£úŸ¬¾û÷TÿcæÆ…‚rb¸ôÇ…XªròÒl V: =Û7±Þ‹VvƤÛå˱mÖ³=±~Ðh4€Fà?s 蓳k¨¦Öêµ<‰ fMW,-¥LÜ\O‰9ç,¤†ÉÒn‹y¥ü'¹xª”ÄZgÓîžž¨*:¹/ŽWÂyë¶­±sûN4ë>c†ßŒ¶Í#$ÐIÛ×áºác_uvUœ)ܹÓôYseÍÝÕ$—ñÊ,×HQ÷U&ƒÖ$®î5ÞZ“%WW7ž¥-‰Íî‰i\Ú½'®¾ù¬šñ%¸uQåKË9ƒîˆS-C8F3n©Ýw4 w?4ý©‰Š‹‰‚sy!¾~s^øx ÏŽgvC±V£üj‘Ïx]%çV’'éÿd ç1hÚ°û¦cÌÄ'y\[7ÄÒÌ_4T_þc*fÌ[Fm†5h-úæO³©¤^¦œgDð·½XIíøI{˜Z9ö <Þ’ž ¼:¿ …+¸¸xPK <ñ¬¢“.Ú!`ö»/ !:ŒçÛ >,GÚUÎêvåYúXµðöE!;;li^ "dYmg¼¹¸«© ädžB”‹7.8˜6ÝŸcçŽêE„—uwZ ”gÏ|.…DF;fRꮿšÂ¹/š7 ÂÞC)>în‡¸ ñ4wå”?|0 O¾ù%™–ƒÁ#îÁ°›®‚Ky)…pÂÌ… ©½d3µ×\%r’rë[ÚG¶i5f2ë,‚huíuW%ýÅ‹EDç7ÅÃüîq;¾"Xa­ð—|+…%'¾ãÁ*^e$TIŸ­‹#“¾INõU¡bïÇ*÷Å_,¶¹õÅË †*›1æ*x¶ú‰|»«Ê̵ù!µ™cÔ•Íä \a+…7ï…ì”tq!$•@.ýOŽà“ äøL+œIÞ‹gî2„óæÍš`ï¾èyím~Óuhš‡`:Ø[¾#| 镆ðkPµ(üµ»±¨âði'jÝÃ\5>îð±ðQ6 â\°º†¥+| ÁßrÆéÄÅDÕn$vٵñeM89|o}ú*I„s+DÖ‹ãb— îû Ìh†ß™†heÅ`:Jµ3TýTÿörÁCáûÏv‹}×h4€Fàÿ+gKµçcÇP93-Ó[±£%Y…œ ÿ Ôã»%ÊÇwô–žÄÓ#5ç3–àxòø ÉŠ˜`/¤Òš»uÃpøð Ú´{0ëKš:6Bñ‰LŠWé…ùÊÎ²ÏØAUÙÊü5ÏœXZïåîáîɽ}"Ö¥Rà‘è ŽPèE/ÖÀÜ<¹`ÀàÈ»ä¿`™¢5i²'6¦Ž¸Xt‹óòqÚ0åQZ*G 5®nJ‚,Æ6šžKèÒ#Ö®ÇÝÏ´GÇ!ÜôìÌ)$¶þ âŽ-êv΋5‰m¸Z'¨(p Kú0öÉÙxnÒ„k#TâEŽþ9 VµA±a'šý¸´\ÃDsåG¿!ùÁÓˆ n@«f;T–"ý%&:’a :G‹hR+‹YiéHhÞWumuNVª(,—”Wr¿$©ÖÛ3ˆÐP›U{äÅ=X“51oܦºµf}!ý67O˜Šö-+¢"·Ènä\‘ˆÍ`i±AÍñns?p§­±‘ýàæþÌC¨lQ’eÿ¯ƒÁÍ]Ä!S8VoŒ‹U-ëîe>2¦V¤xŽ·úêáý»ðS6kß‘ûo7#¡÷0Ì|áy´M0Ê"ù‡7)Z…NVÿ©&èëãEïÖÐyÞ|H£0¤Jdž [Ñ/ÝM_4.,(T4,snaÊ@Å‹^ªCTœµ÷Öæ„î—÷G¸wõ‘ úZ\TÄä?Â% D¥ÎÕš‰‹¦µôL“Ã*ΚÕëb³~;ÞëÀ¨²Òx™uæ4RÓO#“°””8|`7>ýèCÌøp)P«nÊ #b$^¡x[ÿ$T–BKDXíÂ9–Œ£Ç“UÊ6ç v­ÅáÈVU†Â2n`p¤`ÎIÿd2’ŽSiÎMߟ,ú*ñY3)j‰¶Ê²\ˆMl„îLŸsè8Ú´HäÓ&¼ûÉg8˜rÚŠ ¹gNâÓ·fà©×>àámÜÁ…KoÄ'â:ª´Ó^~wR&ÿ™#‹öïÀËÓžÆO¿†ño™Ü[w“=ǬáYMÕ|Él 3ÞÁ1xdæ'¿óo/^~t4" °˜ò¢›´KÍ"m4 ·Ú©ŠÎ»$H?¢&Ñ ÄÆêU•g ç’Îhê:[y뺋%‹ãjôßbîKVïèAB½°PZ¬ªg¹T–à¨inn=Uws¥"„«(í^©Ò»úqE…a⨱xëƒÏ±ƒß‡í[6bÞÇcÁÂ…*N„ BÃ€Ä [‹/'3J‘@åéwoOLJó¾Æéó» r†•êx¿U?}ƒg¦¿ŒÙ¦ÐÏYøwR¶€1óþÕ›½ÿ =“¦eº—Ø—á´c´„á÷ê÷¯°|å:”²xÙ{/aÏöMøø¹¹êÙÓfÔ§Kë&t:VýI¶D{¬‚T®‹¼œUoêG¨¸xú ±ysE0 gò…ýbæ{·G½S‹ü~l¤ðùáz®—6h´ý©ŒkŒ‰õUšÀ°Ht½a°zö 6Þ=ùê[ø•ÇÒ™ŠtWF‡‚ë–|ÛïxÇNgÑq¥ÁX…ùmjÆŽê~fcÿ;zü¸Êëom‘P¿jVHý²>25£ÌÔæKs¼Õ‘ÄÞŽVœe–ïâí‹F-Eá,nÃ’e‚¦¾‡MÛ(ÚÊ··SmX½ _r-!‚ï’É÷¬šÄ}ÿÄÁ]˜úøÓXÅcË]¼Àc({ô¾Co…ÇŸœŠ‡î£h<Í-#òäTÅï•Á¬ô5®•pU²P9°Ã/û‘–f~/™¦”¾d‹Îùþ©’ì:h4€F@#ðŸ€)ÖÖÁ¬5K‘(û¿üeHˆAzÆÜDoÌç «v'£W‹¸ñögðÁ/‘eóGÓú^^º­Ú_‚ÊS®7öí®„J7š 7e!û ªÐ,1»oÄsßÃmƒúòìfÚµï¿õšb#˜“7]=yÆ$×Õ7;÷äÛ÷qˆç/7çdrïæ…èyc:¦Ž½ î•Ø¼~%>ùú'ø…FñÌrC€µÌa5)6„ãw]W Á4•PIO)ýËOßÄÖu?ÂYM Š¸0±\ÅÄ4@bd¶ð¬] ·ß0¾"¬W¸!„Ö$T:[¦½õ6ê…x¡q,Ì>…_‡éóV"4:‹ GTÚÚœY¢§éeZŒ¤)hvä-VÚœ¼Õ}ê›syθÚ7‹GaÖ)ü²ø[¼øÙo‹!ý ƒ¾Jèp©¦o,xX¿’°»ø»›Âˆšèšý)’“û{_ ¿Q+œUÕ@ 韼2‡÷íÁ·Bt¨2ÒR°aåϘûé"Üñè‹P[o½CÑðHzÿ¿ÿ¾‹ÇÚã÷…sÑyñ:<ûÜ]hת1¼h*“•ÁÅ£Ýøáý±‰2Ä‹úØ[ÐXªÍyMÞ-”#óùìÄ>Ê™³¹ÕK™+Ä ²~< ñ«ƒ!Ô‰æÒÉX.òö„R€ÓjÄbN4å4ÛÉZTš3g.MùÑ¥mcƒœ‰5Ë~ÄÿXÀÓââØ¸†ðbÕÍ*Í¢çÃ~Ë—u¶“¡Ëµ[¸¨Lª·ÀßÛè‹ÅÜ:Í*®þê5¼Ý>.ë·ªbl]¿/OŽ”Dežˆ R†UŽ7 öîž{g)¶+Á%Úq;Ê6ݸMÌœx+&½ò\ÐAšó<:vÖ­£¼™×‹¡£9:8;‘ŒÍVcîÇ_ó$·«p÷}fg#=gåL¡ŠŽÉø£ÀKÑ—rþrPQsʽÃä{c1ìlzämÜ#Ÿƒ?žyN´þ‰rÞ„FŒfÛ=í›!3õ0>zã.M—vé‚M6ðPûaè~I»á´Â’N4%x¨Ï‹±Q¯/î¬ô¥É½åcSÉ?šÈÛMÍy†{wÜÝ?ïþ¼]ºvƆõ¿côÃâ¹îF“úa8´s#žó óÑ“¹Ö'w=yZ6Šç;Òö Ç57ŽÂ“¯/Ä.:·¼ô’öØôÇ÷èsé¼À“ Z5®â¼,ìÞºÏÎ|9º*+&_.à2dS3æŒ=KßÃÜwZàš¾ÝàÅSvnú s^~š)<å夜;*ÌU®ê‹Ñþ¼f°9¸¾vp6±t7÷™[ýÔ1ñ §çt/ö®KUããŠ6—ôÄÐnÀüuħK'ZƒlÄøIOà‰ñ£„}[×ã±{!¹4 v[ž‹¦Ü"¡‚S¯Ì™©þÆOš‚ÎÚ£Aýhxyzpm–ÖM;(Ù3´jQ»6§"®[gZ”)Q^ì}Ôw$“ý+–xï;¸sfÏFÎÍ×À…ÛÀž(ÁðQ·!š§OÈ7¦®º)âú¢Ðh4Àü½î@›[ÃªÂæóeÆ«þÂÕ!7ößÖûÚ÷;Žª¼E<ùù‡ØÓÇ„ûÙŸ­<õë×·¿{óóŸl%rî5CqÎiÛÌóic›Ùš›ç-[ù¬»‹“›­aB¬¢1hä[ZVA€×¢ÌžÅÞGÅÖK°µnÝÊînÔÅÊ/wOwW[@˜qFîè޵嚇1SËn§UûŽ¦Ô«ÂŒÃ¶q7·Reçb;Ò¶ž)+Øë)ïæ²®Åå&Ȥ´síb{|›6­m!ö³ºkæóò ±QfRi,YïÀÏAcºÁG¬qþõħßâyºF’m«¾¯AŸ†¸ößr÷ò±q«â.­uúlãè°8ƒþäiïÙJ}£Jžñüî³ãUÞF-ó¯|mž­€r­{ú¸í™ ÆÚR^½Xã\tG¬ç[xÆv¦Ø8ã—YÛ¢OªÏwò ®“+¯Üßùv)·¢K¨>Ý?Öè+ƒçv±Ô~Zì]ðîxú¨2›çùéÁ^˶6ò“^EE…MÎR7î•öñ´så÷6û`[}ž½.ù—8œ}`óJ{½Z³Dù×ÝN¾~¡¶³O}üõŠ|/þØ8ݽ~œ¢u烯Øò†2Ò•Û¾šý”ŠKlÝQÝG<ó†-³ÈÀ:ãø>ÛöF¹›·´%ÆEÙyrÄ70(ÔF+^÷èóïÛJŒ–ʧlo>ÿ`ù,­Û4VñbÔýõ¯±]Å ‘–´Ëvï ]í4¢#/Ðæ‰}mÒ³Uåôa- Þ¢¹±­Ú¸ÇlŸJ³_Ô€­ÎÒ7 nªl¿|cô¿è×aO¼bË(4û>?˜Ôd*éI;mwljòh ó2ø°ê-÷Øè0{½~XcžnæÏ9uÜ6¦§1ÆbŒ¼K×l¯æÝ(¦N~_Z߯佛m½Yfuù=yúq•”{ÅUرî'[„™&$Ú#Õé™×=Ì*Ûä™&äòÛm;ޤª|Uìã*”Ù¾ýð{>æ÷´ ;1¶='³mÅY©¶»{4š¶°5nXýoc¾ ö³ sŒLÎA7™fÁû6­²Å+ºÑFÙ ·ÚŸÈ0xâ5/ã„mB¿f*.Χ‹WnQñïGvÙnieÖÍäñ;Þ©Í+¿³×-¼žÑþŽ<Â'ÂÆe-•¦ù5cyzº‡ƒ›WÛóÖÈcÇÃÈgÅ-\µÕÞ?Kò2lÏí¯òEÅÙÖ.ûrÛ‘ÔL³>Õ¸Ø ×€F@# ÐüG!p¶ª3„ÚA<@[átNõ³õ®î»¡íñ ŠÁøÇgâcjŒÄØ/õtMóTÉ›’’‚V—_¯¯ÆÈû+圧ò8š0 ¿ï)<6ú¤Þ‡½×(êÉ—Þļ·^¡ e9ŽIVq§¸×Ó&S† ñr\¦¼Š‡ï„œG°sç.Ó«4xwÂëo½ƒ¦Üƒn(ÌÍHWù ÷¨¸°Å‘ŸµK¥ÊâÑrç rÆvOžGýÄÔX³i'FÝ4žtŒ§™û2.눓éçióz-ðäØëé훚T1ÝÏ2“8©>[™¤©¢þr»‹_ 'S \sŠKkÐ…º`ß ÓhåðòS¢uÎA†5 Tnã’|2WÝ6¿þ¾{´U/¥Îä›’›dŒ±d1` l<ü…«˜K×üzž°o;±¼t¶îÚ&é«p߈AÈäv—³BYΰúç÷ëÝéôÂMçR{Z‹¿ •εCÇbÝ/‹0vø šßÓ³èðÅ­ãïàÙô.ðä‘‘“^ý #v‘ý{pðhJä³ßùoMÙìgÙæ8ÈãQtŽHˆcÈc*×I#ï‘|³?Å¿AÞÉ}ê‡ub¥ÝÓ¿EˆiÌO82lªÿÉ£[¬$t¸ì*ìØð ÆÞ:§Oí¯"¬Ká)å¯qâÓ³ðíëOóüó~{çŽGÇœm=beµîÃïy¿lØŽ«z¶Sã@`õà‘vÃû†õç6§ãÜZV«ìæ1ö“3,:ú®Ðh4À.t¬{îYŸÄˆ`•uꎠðJç4jz¾ú2“x¸Kh„°ªù[Lîª(ãžõÇsŸs2Š( q_:’k˜ˆÄFm8*²³Äx‚ìÓØºe3Mû’PÆùNph8&6A‹æMáV‘‡ŽÂFF9ÓÖæÁ‰‰ hÆL•™LŽhÆ)4ò2Ó±cÇvìgÚ"ž[†­Û¡U“†®ÓÄsªÝhú,ç³û‡#±Aœ:jÌâ¿®*[q4Ï=tøÏ3æùÎv³Ñ³s¸Ðku@`0Âx&®·é J"Dx³hÉ~{™¨nÞº§ÏäÂÝÇ1õâѬy ÄÇ„âdÒ!¤åÑ9‘³:",º^b"CÌÂl8qìÒÏ䨽®rF®_`8%IJEÌÆäçä¿EègæÁÃÇ1õãдyKÄG‡ 5é ÒsŠ«é3.†¦ÄF¨BJÒœÊ̵Ó÷"V}"-ûø“™æt6Ϧ¦WjÁÓŸÛÆ×ƒ8é7ÚVL¡I‘uMåâŒìÑ—s†3s8gq£MoT½XÄÅÆ¢~ýøÑœîÍ3Âù+/;ÉÌw2•þÁé0®Hξ&Q/o„sÿstt4¢cb¸ŸÕßlREZFywSçûr¨QbœrâdÇߨèy¯VÚÒÂ\N–“PÄN)ŽøÄ[wlÃF{j-q× Çª©zçfHKåþ[Ž'¦*§ß‚úñ JU)û¬aZ[…ã‡öa3’;ɽºn`£‰I“f-‰Sɇ‘z&_9,§Kóˆ¨úôÄoŒ)--%‰>Îð¼pc\xù‡ qb<ùà(Ô'ÙWÜh_Ás•}‚"(@Çщ›‘D®©Ç°yófM¦ðCÇŠá‘ÑHlÜ Í7DQ&÷Âó»àLGUâÏAÎDO¤çmפ´—i.ÅU”!;+›~%JáÁ=½aÁôypnhŒù¿ƒÂŒ ö¯Ä•›0è2ÙÁ-§C/ùOúMeMÙÙOØÞ©'Rq†´DÈ’=ÝA!ˆŠ’öŽFTd$|( K-K‹òqøÐaÐyâ‚D¿K Ò…? šÁtV[òŒs⑜–©ʱgžÄ5±azn¯ê›ß®Ò¢<å7O¾{ÉþÎgñYû~¾<ŽqŽ š ã;£nÒöÕßLÃë¾|›«k!y¬¶wäÁׯ›Úm%åË·Ë¢"Ip,ËÈY÷Õ‘ÿÚ)Tœ¼¬Å£•ÎÊkÝ­÷ŽwǸ:ñáƒjQ–áȳ#>Ž4ì´YoqìfǼòERÿ6˜|K~GŒ¬<µïu–S;‘þ­Ðh4À¿=T9œ?ÈLMΟ¬ÎXkò&“Tk’&4%”×Ê!ñ’Þq§òsrb øb2láé\Ég•] Kĸ «°óÜrŒÉøy’™QÕéÄ‘Zme»hŸdb'šWP'm ?©W…Xu•¨ºÚÊŠ—»L2EX­‹¾•®vÖ{)û|ô­‰ð¹ÒØy7ËW¼¦%p;¶½ð`õ+^ÞI¡¯r“ŽÄW÷ Ieð©ø°Ò˜ïT¤ÃEêfçËáý…&ÒëHháUG”ê—uá#i­|rWý€Z<;gõrÌ$g…êüçn'#›q­‹jƸ—4‚¹#öv«ƒ •Ÿy$Tò(±­?ÏÇ _¬¢pY«&HˆBþ™Søê»Uš¨¸D¸—[&=~+š4ˆQqgÒWk÷…Ú}EÛÓplY|\lû˜…×yŽÎ…Ym(¤|'jb­q[{¼©Ì~,i%Þ Šwö,F뵺q5^]ð‡ä©‹oÉèHOÆ‘¤“±%ß'‰s<ÆKÒý²zÌÊ;Ç`O¡#ùå¯v[Iœc¼UæYýL¾…J6­ÆÆ*Ëâ[î’ÿì`”m½¯+# )¨N*¤o…:ñ1aZiêÂÇâÑàÁӦƘ’ü/’¾v÷Õíb•fÜ º5Û²f ýK# Ðh4ÿ$.( Ke¬‰Ì?S1k’fMBi© '‡us²R;Ÿ!àVOžêÌk½¬“'p~¬‰LÎþ$5‹ªÃ]&ƒ?ÏñhÞçˆ4_«‰1Ÿ-!H^Ÿ3Ÿu»P[Y®%ÌüúÖ„ÐÊk•mÝ…‡ ¥QyÙæ›¤U·E€÷óÕYâŒzZDz]i þYmk‘uäËÈoÅüÅ»ðafµxø3tU™Œ;[;Ÿ! ¿H™’Ϻ;³¿—wµi[éߟ‹†EߪŸà*}È­V>ënѶîâZ…´#X%V„yO;~i|¾nì¸{È5ð¥U²ô})Ã1Ôþ~8b'é„O+=Ÿjsd+¼ÿÜ8µç¯ãÁÀCu¯:q¯™ExR=œi aÓ1¾Nží ^í¸³§±:9HYd¡ÏÕMOÒu”Å…³PV_ˆ‹ TU×Áê‹.Fu¬ô’®:-ù~æPg+NÒ;õÛ±nRÇ|–,Lb|oêÂRå‘ò«3Ö.Gby= ÒpV Õ4¬'+Ÿü®YO3…*¿&.V^¹[ù¼ ë½ÔJ꧃F@# Ðh4ÿü)ý_YUk¢q±4ÿj>ÇrÎGãÿb~s1eX‚´#ÿÿÊ糄™‹ .8^(ü™4󵋕¦î»11½Ø²ê¦õϽ½TIjB~á2Ï׬2­{mjçz_;ü>_Z‰;W¼õÞº+Úfÿpqó@£ö=Ðçx1<½=x|Ô&$s?½„È84á^ÝFM›ãŠþÐ÷òžˆâÞ[%E 7*a­‹*çObgd5ûêEå©Uh­ŸfõΉI­äüiàgå;;þÜojàzîd.æ"0rÿù²/n|^¨ÌóòsÁº¼PçþzU§¹ âõ|ùÿÙ¼ª¥3)§Ðh4À¿ ܃þoéfD# øÏB€ÂvÏ!77yù(£s+QRºQx BHp0|}Ä Ó‹•‰–= 8ôU# Ðh4€Fà- ÿïµ¹®±Fàße¾|A-è¿Ûš!€F@# Ðh4À¿ÿs÷)÷š˜F@#ðo€µoøBLž×|ùB™u¼F@# Ðh4€Fà¿- ÿ—4¤®†FàßÚ‚·£À^;îߑ͓F@# Ðh4€Fàÿ- ÿ_¢­ËÒü# …òÿñ «¯Ðh4€F@#p^jžetÞ¤:R# Ðh4€F@# Ðh4¿ - ÿ]Èjº€F@# Ðh4€F@# ¸´€~`餀F@# Ðh4€F@# ø»Ðúß…¬¦«Ðh4€F@# Ðh4‹@@ è–NªÐh4€F@# Ðh4¿ - ÿ]Èjº€F@# Ðh4€F@# ¸´€~`餀F@# Ðh4€F@# ø»Ðúß…¬¦«Ðh4€F@# Ðh4‹@@ è–NªÐh4€F@# Ðh4¿ - ÿ]Èjº€F@# Ðh4€F@# ¸´€~`餀F@# Ðh4€F@# ø»Ðúß…¬¦«Ðh4€F@# Ðh4‹@ÀõϤµÙl°þàä'frrr–Ç«`ñèäLÞjqVUUE~Éû¿ˆi{YÿBšµX>ÇOªªl*Ιõü[Û½Šÿ,n6bO*pvv²÷#ÁO‚´•óyÚĹv=ëjc+ä‘ö–p!úVÇ»Í&yÿu}¥&mc,Y˜JY6›=ÝEànácѳӨã¡:í…Ç®•Vî‚…´Ý¿jìÔÁZ­WF7Êféæ«.ÿüñf¬«ú±TǾgÕùÏŒ+i7ÇqXÍ[­ªð§EרÏÙXÚûª9ÎGëlêúF@# Ðh4ÀNœ4’Ò9j%QÆÿ݃ÔÂQÎsümˆf #þb¥2ÇItíß‘ìŸÈV£&*ýÙoþ™?‘¤vjÿþ$ þj`U7·ç¢}¡¦ª+ߟ}W7ÿžE0·GÖþmøKgñVgkbtV‡’kÇÕþíô¬Çó¥=Wœ¼—AVÏYdÿéª iƒsrÞøÚxÖþmrW»~ò[þªóó·{íüB¶®wçÃJ_'‹u¾<5§Ðh4€F@#ðß‚ÀytkÉé'2OŸB~Q \Ý=ow;’Î1T ¯2ñuŒ©~®NcLn%Æzw.zµß×JŠ QVaƒŸŸ¯"ù/,( ºÌ >ÞžR kTÎU®Å“c¹RÑ&V–—";'ÞþµhZyåî˜_~[Á*W~[ißYéjÜYNaA>ªœ\áëëmÔ“ Dž±h8¦·Ó;Vz+¿ÜEX)/ÊÅÁ£)ŽGD°¯ÒJ =;Í:ˬ®cáëÌÉ$¤åV¢Y“D¸r­'7+Y¹ùpvõ@Dd$<Ý\Œ6©Cø+/+Aû¢ÅxÑÆ;¹¸ÂÇׇ´dáÈ*EúšQvUy ÒÒÒQnsEDt¼ÎCŸT0´æbyQcG¡Ü5‰ñÑçÀÕ(Ç«.<ßIö….[ìÚ"g?´jÙU%E()—>ë£Ê’´U•(,,‚›§<ÝÝêlWI'e”—#7·¾LëªðQã‚q„GIWI÷ìÜgÿ´hÜÀ^¯³ù¬^|Ê>s Ùy…póðFddÜ\T/#MEúì Ë1J5¢,|¬„VYµßK¼ÄY¼Êï¢üœÉÊÍÉ~Að•×öPR‡Ó™ÙŒw‚¯ Bý8.(‚*øxyØÓ[Â;³ 7㎟*@£FàåÁþÇ`«(ã7®”ôüP÷’du«(-ÂÉ´S°¹x **îìØŽü+z&ölQdÉ@n~!Ù,#‰%ß²/Ë8+ÎÏ®;p*· ­ÛµG\t˜pÃ?G4…¢€F@# Ðh4ÿíœÓÄÝšld§aÑ—óñþ¼oáæ”Ã+8w޽:Š f¼ŽSIk.“n™ ×5×´&Êjª )ùeLÖÕƒºÈ¤Ø¬ ~uœ•Ç(çØîõ˜3ÿW<ôèd$Fr\  s¥¹éxýå™hÑo®éÑî¼ü:Ò–g«lë½É*²OÆO¿ˆ§¢[óLG³hg—SjU…#:¥š´ëª›CJÒ7pÉÏLÁŒ'CnhG<þàhDûB+'úuѰó/|TTOVœâ“o¬üÖ½(;Ï?õîxt6".õµkkä«EWâD - +:¶|õæ4d5„VͰúûñðÔ¹ ÆÉãÇqÅÍc1~ìÄG11¤µ†E_˜LÚ±¯Ì~•Þ!pssEÁéd·îƒ‰ãîBlˆÔå(ÓyÕ¬(È<‰yïÌÁ'‹×²¯V¢s¿Ûpߨ‘ˆ §gÒW•·_¤I^K$«Ä²oþ4ÿ+ðÔ¸A*•ì(paV°êhád¨®³•к+LŒmûþøÍ;]‰ï×í{"Výø)VðÁ¤qCám®yd¤`Îkÿ@·›Æ¢w‡D{»Xää.æÕÒÓï”ésñÐÓÓÑ&>R™ôK¼ð¨‚$bpáÂÚ™ä]èsãxü±ÿ{tl­øUDT #Ô©8/?|ó)>üt!œ½ýQ”—ƒ¶—]‹ÑwG³¸¶®ÌÌåp“zªþ`aZ™¤²ÚÕŽ›CVKXEU6®^Š·þ1IgÊàçëŽ › ú\;w ¿!ÞÀÖß–cî?ÞÆþ´øûy£¢¢]ûÝ„ñ£‡!Ø« Ÿ½þÜÛ^‰Ûv“RÍæ1ŒúÚðË×ïbÅ™h¼ôxSÅ…,ê¬üþsìÊvǘ»†Â‹oe{Gµ ¼EÈN?ŠwæÌ¢5»PUQ7ß±w AD ·]è¶êZYV„o?~ÿ˜ÿ<}üpìh:†Ž}w ½Q¡þ\ËÂ'¯OÇ7¿G»fMám è5, Ò€F@# Ðh4ÿÅÔ) [“KP_úõ{6e9~^8[MÎ ²OcùâEØ·÷úR@wSr ´¸¥å•ðñóƒ‹)¨½•| ÙÆ†ÊJc_°‹ YÎÝ­rD+*“ay/¡ª²…Åp75ˆFZÙóIAÃŤ*++)0 'SXqBhX~šý".í{¯êlŸ\Û¿ M{ †=loÊRj.KË*áíëKM¬!Hˆ@Oõ¬¿Â“Q^Iq±><<<]oÿpÜ6âNĆ*šNäEBqQ!*©Éõõ¡vÛ`ܘè+m/`Ðq†—§‡Š9J%cåD¸©9u‘4*o‡vmÁós?ãÓg0 /¢º¶T‚·`)éD»_Q^ƺUÀÛäÁ¹’šÙò²2Š,Îðôò´óg L‚{ii9 ÜáAaX„›’Š* ÆFÝ h… x M&BYI1J¤ˆOç­ÃK??Ç”((®Àý?‡^Z!'õ Fwê ¯Ðh Ã7±/9ÛOUeæÈIOÁ;›Òðó"ÚÏùÔŽºû!ÈÇ”fkðR‰ß}ˆqoÁû>E¨S6º¾Þ ŽÀÓão+éKŒìùù?«Z¢2³bT'ü-D8‹‰ÂâRxxyÛ±© 6.®F´ð»!l}\ÊQ‚i”å¥ã™ã±×?Ç€®- i‡wáÇ]á˜(«æJei1Ïx¯¡ÒTRtqe{p¡¨¨®žÔØmâ\£n¿‘††¹¼¼B-d¨:™ô¤ÍÝÜÝq9…Ü×&­ÂKï|‰^|>ÔúŠ /xXü£²ß¼;#ž‰¯^®­± ŽaÖäAè³ãÖ¿÷âÃüØÇ*àjö‘"ŽUWÒwçoR"- ÓJäSkìâæoj³¥?øãÊÆñVT\ŽsWsœÞ¾×]~-&½÷5žìs œ*J°wëz,ذe7À)c/nîÑ·¿ñ خ쳇÷lÆüo×#;ÿz{{`÷²çàÁÅÃZAÊ–¾[œ™Œo¿ü7<û 1à"ÐîÍøðƒ÷ðÜ«oãÞç^'ÌèÐE„Œ¼S㤪‹>|n,Âî?…[a2F´éÿÈC·Öq(§¬qiýÖw€F@# Ðh4ÿ~êÐÍÙ(¥îH t XU•æbÕò%xêåwTrK–¯ÅeZ›ÂMnF*}ûŠ( ¥=ˆM;bà­#1ì¦A!¯É‡¶â寢ÐÉ.2â[wÅÐ[oD\„,0ذoËoøô³/‘–]ˆrgŒpšGz¡a”~Zô6,:ƒ¥+·`ЈÑv˵ñåVŠRlX¹ó¿YŒâò*ÕoªÚ¾Y|ù56¶mX…ØÁ#Ñ:‘[†+o¸®"l2Ô‰Æä·ž¤¾ÅŽÝ< N-¨²ààBLú¡K×ð·”Üfœ%4‰@,ø”äd`éâõo>@Ǧ ˜ª&¾ðÆÎ]Š»‡^‹Ø / h¦ ÅX•Ÿ÷ÜÓÇñÙGïã—­GÑ0:RP{ú“ëÍR€½¬Â¼Ï¾BF~)lî¸kÜtiYK¾xYÞ0ôú>lG®,Æwó?DYX+Ü4 ‡’ñ”e…‰Åž-kñ푬xc ªàŠ„0nÉ`v+ÈbOü%-àå%z\V.þûO¢ª(«W®FTó{ÏhÙ 6 ÊÇACŽÉÜ´$¼4s6zÞrúun©È­þñ3¬ÚŸ‡1cF!’[?nu?Þíu 6¸½( }‘F ,”ƒÛ•pþå¯[qcoÑñÑQQ˜ùÞJlçXY¼æfÜ{COlYµö‡sE!6ü¶^õ[bÜ=cˆ{œªËiY˜ùøcìNJ§· Ü0ƒ¯êw.,úì3d”9¡0ãV¬Ü€V½®ÁÝ£†#!:IûváTã[qûf¤* ›àò«‹áMƒm[vá.ÅíCnBl0û CƒÄFèqÅ5pñâ6Œ²|„4¼Š )Õ[p *F=åyß¶ß‘ÕÛÚó€°hÜ0ìNøraê Ç’c[yy5³Ò‚eÁ¼wðÕÐ"¡>#êãÙO^´VbÄuWp¬Û œÍ7O? =– }F×ã–‹7ާN#—‹MK¾ú‚4vâ§o>Áî--0|Ø ªHû‚‰ú¥/€F@# Ðh4ÿ+ÔyÌj[Â÷K¶ê4ÓîžíìØ½'OAy%÷ÌrŸ¦ÌZWSxxä¥ÏqóèûñìÓÃ/s=¦½9¥Œ­(ÌÂ}Æáå÷¾…oLÚ¶l‰Ò´Ý˜ûé"dÚôƒ;7`ìÄÎ=®y4xÔmi{9žúnêÓ·Q Ø•’­LŒW¾q/¼' œÑ±]s¸‹´Å &ÎJ w\Ò³¾ýOSqyÔþ-˜÷:®éÛ 2ß´ìk ›ü6Íñ˜úôˆ(9€'_ýETžÛÊòpß½waòìùði†¦1~øù›÷ñü»kq÷}ñðƒ÷!Ö× YÙù(/-Äü»îBj÷¶3,§¥ÁuC_Ç £îÅ÷ŒÀòi·á•÷¨¸Ò¼S˜pÿì=]ÛîÞM<1`ÌÓ8r*WÅÛ*˰Ó|ì%Ï"H0ô·òÀ'Sb8|}I!yðµ¸v@?¼AMìÑgTú Z,œp¦.Ø€®WÆ„;nÄ£nÆ7Ë~Wñ.®nèÖoî¹wÆŽ‰]_=‡·¿øIÅ¥ìYæ{Â#¾#&L mbqèДr¡¡*k-f®ÚVÝúcâø¡xà®[ðëïûT¾­«¿Ç­÷¿†«‡ŽÃÔg¦ Ö–Œgg½Sy¥JÈ)Ï?…Ÿ\ŠýzÁO­æpk0…ó*.äH(/85+~B»v͸¿º-U¤ÃåÓWžÆÜ7ßÅÇ}„_~ûùÅåf¬–¥i,))@f/÷ŽGØsGDÔƒoA6²s‹Ô;ñênµ¢8ïÏz ã¾?‚±ãÆcðÕйc8µéjòÉýpçícФû`L}ö l‰»š†ã… ôÀÈfp/sž"™q|?&ß~/<|Ì=Ìl;ÑPKÕleعinzb#ÌýÒ"WU(Ë‹'ë^’•Ä> +qt÷2L7^‘Mq?¥²ÖO¡|‘JZ^œ‹Ù£ïÄÉÌ<D5@bD%®ìr3Òüûøîu¸ìš¡hܦÂýŒýØ‘ñ1dHWlݶWå·´ç–Tz‚‚uh×!èÒ¾™AŸÖ‚caÌÓ£±mç! Ü@fÊ><È>m ŠÇøDЙÕèûÈK8SlCy~f<~NyÆãIŽãqÃàñÛcÍÖ#²W€î1öîIoÒ <<k§Ü¿_¡Ê‰£°ƒ_à͹ïâ÷?¶"éx èƒÀÛ[+€€ð8^7áŒ_¿i Ž$%#¿°„æã¾pcÓŠŒXTй=Ά¥* ±rÙR\Ñÿ D&UŽˆF›ö— MË&(È7Ƴ=«õ`tOîÏAAPÔ µb×™éì—Åê™T]éo"œ‹Å„ÂŒã4¥ŸGk¤ú …˜ @Ô%hÚ¼ Z7O0ûJª/€F@# Ðh4ÿƒÔ©Aí§¡ÁñÂÕ·ŒÅ›%.˜zï0d9y¢¬Ðƒo¿ Mš€†!6,þú-t¿rD‡ÒI•3:tí'n~Ϥ5ÆÃm›ÁƒeÃ&­~ø7lÛu{%Â'º=>gß.@IDATyù5 §vR‚ð(Añ+æóœü7lÖ#{¦aÝÖ}èÐ(I{·â‡3ý0»=MŠ99ÿqÞ\>x(ê‡ÁÝÛ í.鄉7PÀœtüÉo\ÛøàÕhß$Š”Ëðþó_âB:3 C\TS<Тƒ2íÍMOBxÏNtDE±¿< _¼ÿæ.XŠ«{wV<½ðñ7h{ë\ Ê×3½Þ0ß?1~îháƒ/>ŠôÓyhIaÎ3ã¦-ܨÝV¹´¼ª~Æ”÷æuðïÔMFÀ3¿CZœÀïÛö¡eM}™Ñ§k7|ôâè×¾ sõÀüôƒøìç•v] ­p¹W’SR‘WXŠ0.˜dåe£˜æÜë^ˆc§câ½#áC!§]›¶¨¨râ‚É>œ©ê€ÅÓÅÀî"°ã©{¾C2°UU–bÅÂÐåšëwj,Ût¸÷‰{ÇŽBDójC·b]zFs1E‚leÁÉР—á›fáÕo°û•Ë•FYâ%(as»C`t<^zqBý=pòÐŒ5 3?Xˆ #ÁÓ.ø8)!¨‚ÚÙSÜjáf—„š ¹Ù•p§4ž“v?,ûýÄû–mè~Å•ð*>†‰3>ÇêGѳu¦/Çu7ÞŒtZWHØôë8Ø 7Ú4oH3qO4nÙ{mGˆ ­$®nx6ì8Œ„~í±kÓj„Üü0º·7ëk­¶Ž˜­§¥æ£ußxò¢HóbŽÂ£Ù•U„ѯ©‰U/éÎæŽ'gM+€Á*¾ªðÜûÆV䓾+ÇIb—n°±%Ü6n 2r+ðÔc“àÄýÍo±·ô½Ä.ø9{ y“–øãÌIönpI‹<Ðt^¹$”Pm[>"í2ȶ©†ÄG„¢ôp·pÈØö×0fÔ-já+>ì%Ìjv+ŽŸx…û0kþRü|Ïtî«wCT|#tmœ5¶ã²Ö1ð ˆÆœ/žÀ°ë¯”"0ùíçð.->Ø¥Ñø’Ëðó‚yxcö¼<ó Ñ*!¡óÕ\{ûtBÃæ—bí’¯ñÚ¬Y¸îÕçȘ qͺcÒä¹xדãÀE9Ù38Väyá¶ò+c+=i?–mLÇÔ;Ú©:U±2æî”q+@µ'w+¯ýrž±§¤°Œã‚˦U„¤¢E?Êh•Ra6b•Â8_ªí*|WAá\õyj÷ß}ù ,¿3»Ö ÍZ·ÆÝ¡ï.Ü„qÁ€é…ŒµèTÍ…~Òh4€F@# ø_@ N]*nÉA‘ñ¸gòs¸ñöqÈÈÌ©ԣ˜:|^ŠÄ”Q}à‰}‡bág!#»@yé~zúdå9¿´±‰ñ 5„s¡G¡{ÔÐFØ´u7û`Å/¿á®7ž’(äåd"0Ê k–,ÂâÜî»uCj®ãB¸7šâ„«?bbDpfà,ÖqkÍ—½Cb0àÆQxõ&Œ¼¦3¶m\ƒ1÷ F|ò3èÛe™Iøæ‹yÈ¡½»s9&O{4‡/¡U?±1¢Â‚2(¾ ¸õ!
    J˜”ŠøÑÀˆþmQX”wú$€[lZ½¿/ÍA…“Â/y¹-@ö÷Wp;„¿ŸÑG„n`X\ËO¡¬˜òóÄ•×C·+®Bz:½ÈgÁÊæáº+nÃÆ½«pi³úèÞÿF´ïvÒO1>; ë—ƒ[h>ÿÛÞèÖ$„õ¥B±B“ãIWnJáÛ~_ƒ(ú=hÚ0ZŠVÕVL]Å>(¸¬õ)ÐŒ{ß“Ÿîlw_.2:æ”vtsvµ/®É¢‰ ,[õ?ZȘw^šŒg¦bËÁyhiXQ”“Ï’’R~ßJ˜ÅC-NÕð‘`PÒW€F@# Ðh4ÿ$‰ê‹¶H„ß ¬¹% B É_ó­à6÷-ÜóÁ> éÍ4å4½ ÷éCÆ,ßÒ(üyPÍèDª‚j,WÏ`ô¿ùN¼·ø8Fp÷;ЮIœ*¼œÂ@óÆ-q÷„‰ò2„‹V~F2\¼}y\”aÞ¬öörJlÊ?JP®$}¬Úw½Ÿ,ÿ+–.Ãï;Óqõ½c•0$é²¢4tè> 1´wR°”ëF>÷­€\*§ð!“eq(Ð 3Þù§e éÀj]¯¥¹o º$ÁaALÇ2é«2c5—9ümÔ¥¤ ›væ(ž\Êј8¡£®Ø™ÚIß@Nü…# ¥,SÌaÝ)hWc‚/©ÒŽÄòu‡1uòdnuæ1kÔ¶Oyêa<ÿÅÏHzd4xrÏmieýê½·'SöÃ'”ûÁ)Üõá³è>n6fƒ±øåù˜÷i”ÔÃ]Z)ÒR_iOË*@r\iæ^Ä£¼Œ¤ÄÎ+ý`Ïñ(¥PèmJ…¥4Õ߳鷑Ðe9±p%O²€aÉnÎkt'øú*Ðkþ¦ ëÐ¥MK¤¤ïÄï›wc@·VÊ™¤ ¾œýÊáãi˜„+^¤ƒI~òS?I«GaË.:åëÖ\9—“4ù²OÊ[øù¯ŠËò’µ€æivábúˆXùËa<@Ssç"rßCäMÔ×Ò»ˆGýZˆÏw²*¸pEŽ tq¶¡¸0U®¾<ê,‰ü“ТaæMé™(ãs9ýXøø¢!ÿ$´i\ ž˜…¤YèÖ4 ô–î%|H$q—E •éXþóRôþ,äT¥ùÖ¬Sûxû.†Æ*ð-ßq|çÎ>&Ç*zæíÀélëõUšì´T¸„ÁOù  ‚`#ãˆßùŽ 6Ÿ¾õ2–¥ãhú÷h`ßâ ;ÑÔÝËÎ…Y¨¾i4€F@# Ðü"Pc*ja`¿\ó2ðæ31ûýϱgÿAO>Ž[Öáý7¦+î & CÇ.xàîéXK“ò,jØöï܈‹–£ˆg;;Qk¸yo2§¸æ$X ¨œPwê¯cspÿ¤gpÅ•ôDîo¥­:öÆúyÓ¸ß})'ãYHK9‚-Âþãg(º"…æÆ¥¦%8jÏ-¾¹]=Æ6nî ¸þúë±Ï«Ú·HPïÝ|ÑïÖQ˜xÛT¬Ú´“ç˜gãÙ}¿x ò¨ŽaÉ)†9œ«Š°ò§/±â÷=‹DBbúSVyC0Jýi ½’—ÀÙ+¯Œ›¦½Š½ÇÒ™vÌ™‚öC®B=ž^œ—Å=ÁY"¢¨ ç\ÚµÅ\Ü Nâ>zí ¼¿p¹]û+—È0ÊL–ÞÏùîS”u‰îG‹€q}×(<ðÐCèsr¯úCáæ‚ 7S;~š¦Ù‹pë½ÓÑ¿O7øS8­¤Ö2??§Îdâàî?ðÁËãL ñÞ¾goüã±;ñíÒõÈày÷k–/ƲµÕ¾üœÔÃ{¤mÈÏJG:ϧöôðA¯koÁ£&qOúv…åÁ]›ñýOK‘SR†C{¶!'¼3Ú4i ê(ÂjEI>æN{·Œy WŠ<ìØº›·íB^QÛ´Ÿ½û"¦ÌšO .Û¸ª+~ø‹Wü†”ÔT ß3Ÿ…îݺ!:D| ”`þ;/âé×>§à x…áòA·âî‡gÑ9ÙI.jìÅÓ‡£¿ËEqj÷›ðzÑêExï‹o‘|2 ›W/Ç]“fÛÛ¦c¯~ørÆø~ÉJžË”#û±ø‡E8”zZÑ‹oÚãÊpÿ„Ñ„ZÝF±r†µˆuFŸ·Êsq÷BX„ö=A#záC%CB³K±çÛ—ðöü¯‘ÂsµSh‚ýÝ:vùh¢h•#'+¹<ŸÛÌ¢Î>_»í¸Ñ¹X±ƒ{ªóô…ðÅ\\7âm¼ñÕøäÉ›¸5¡5ÖîL’U~ͬп@XH$— $˜œšÄã›´ÃÛSÇâÚî7`ɪM8‘Ã{·á™‡GaEû¡¸î²F.Z}ìØºÛ$!åè¼3ë9\7 bë£^|3ôb…Ò¢\ìNãá.UXÿËWûðTlؼIÇŽáèáýøìã÷±¯Ûp´L¬¿~‹Ñ÷MÂÚMÛpôhŽ%ÂWó?ÁjtB«Æ1¬N%rNî¦9ýFlݹ;¶mÁ† ¿ã(÷²oß²ÉUñ¸¤uSU´hÖ唆#wìèAìÙ»ÛöìÁöCG‘Áq"c¯ª0ï¿0 oÌÿNµ›oX®¡Ÿ‚‰³ßÃá§q|ÿV̼ï>\Ù·;B}ùã¶‚÷§?¢ÒW2eáiL›0£›‰Áz£’~¶nþƒ¼íS_+ùf-ÞtœÛ¬¯ƒ…оk4€F@# Ðü/"`)KkÔÝ*<ü‚Ñ¡K'¼4ç%üòSSÔ ÷Å‘ýÐþŠÉ;ì*xRCÔçú»ð~A%&SplÛ®ŽÑáX³~÷âª÷¼¨áº†û_ÝÄ&–ÁÒûGÄ⺑sp8è .5'Ë2=mÔ¶;6ü²3fLǺå-áUq»s‚ñ^‡Ë¨tsC[:à 0ͧAKbQ?D˜¥Æ’Ïî~ḌÎäðÚW¸sp_D‰&’¦¶}o¸óèîÑûÇ£Ã%íplû:4é?W^E-¬wÆ jG-¶±náDM_%'ÜwL˜‰kvçyêih5å5ôïÚ–Þ¨3Ñ’ðDã.áú;'ãTÁ+˜òÈ$jqy´’o/̘8ŠFò䋞œûvmMͬA×ÙÕ½ ¡æÌ‘(¢S¨?@Mo'»¯ˆš—ò‚LœÈªÀÄ¡á'Å™æànõÆ+Ør&9qŠŒÆÃSf u{gìܼ3ÞþWõl«ì˜zOºC6ü„Ö<ܧÅhÖ4–V \0é1ûÁ_Å»³gb MïW¯\G_žÃ£Ø|ЖÖâ±]'D6n÷ C³ÙëºøôÍL¡ó¼v—´Çá ‹ÑqÈcèEÇeÖ¬ÅÀWÓ9™,¾H«8ñ(¾Bœ>SŠk†Dòε˜ñë÷ÈË> [xG¼øôdøS[/‹²é[ÖZhZw: ×?õF ¼'@t›ûðô½C §st®—qIyA4Õg.6ô¿q4¦%¿ˆÇ&?‚§xtxã†\ B/Úlãœn>S -y`T"¦þºŒŸ€-ÜBЂBà ›‡ Q Í·ÉBó.ý±lÁÇxù¥'°üÇv(9}¶°æx¦cwƲHŸ\6à&t]sWvï`ì/'mk É]tœ=Кþ^zî'ŒrâB}Tc¹§ú·%_áÅé¯`ךŸQ•ŸŽBÏ8,{åAÄøsxr;Alã.( 50—2½¨Y¾íº.꺾ǣïA0Ï/8s_µŸ-yíÇñ·`ÎS»°à»Åhž0FyóÏà¢×Â/—á™ )¥Ý–Åõ,|Ó2cè½OÂÙ7Ï=þ(Úvl‰SIûàQ¿;¶}v”i¶¦îþXòéSˆ ÓD[µù$âãçïG tø¨FxkóJžðØø+±9aùÎÓxûo(‹Øö}d9Ê£U{P úµÎgýN4j ç`ò¤hÒ8žu:‰"—¬˜ó8=ì‡À5+¡e_á‘GE .þ”æžBfy~^;mâ‚鋯M{ÀŽ«XþN8ÛÊ‘ž]Ž>½º"?e7:Ó&Ž~T}Õ’دöbîÛï!ÏæŠ>6¼ö \wÛp ¾‚m̱vêè.øµæsš²s›Âw?Š”™3ðè¤GàRœ&c^Áíƒú(šå—G«%!æÒþ˜Öˆ~5üCqÏ5íxtŸñQDôE# Ðh4€FàZšÖ­º‘׆A­)M·E;._¿DDÐ)÷(ÛÓð é4j8s ŠU|8÷”zro­dÅ¥4÷÷W&Þ‚²”&ÚCG­µŠão;-¦ÉËÊPæ¬Înž#­? 3<ï8/ÍP½<Ää×$T«é,:å4}–3³=)Hx{B¢‘E «DúÉTdçÁ›õ §Gf/7žç]ˆBªnýx–»u.³”›y&™Ô»xxs| =Ž»¡Š¦Êy<ãÙ“f÷žü-Aö¢;–ŒšàÆÆÅÛ[9]Έ÷º\¸Py Šx”Ô…yÉœ1n£é²/ ª×XGþªä¾èܼBž3îG\ÝVRž´Oqaª\I£ /|r.M’Ÿ"À(, ètÏ âènë t»þI,YùÚÒ„]Läå¸49÷Z¼d—qëƒìõ•Ž &×b¢îOÓa2[Oó}n]ð¥‡kBEoù%ÈÌ„'.X4³2Ò©U͆+ÛLú·ÛÉÊ_QV‚z÷a?w£FÖzo£ê*‹E™)¸ïÖÿÇÞwÀWUdÿÓ{OHz ¡Wé EEÄ‚»`[]±¢èZW\»(( J¥÷ $„ôÞ{OÞËýŸ3÷ÍËË#Aýÿv÷çþÿ3šwï9sæÌwæò¹gÎÌ9#ÐëöÏðÄ¢i¢XaÚŠ_\€ÂÂ:àx“­4ÓܨsƒÛäÔ@ûkë›àåíEáÛõyÈm7Ó‘vèG>Lkbä# ¥Uðé@ï¬kßxߦúbãêð"Ïù2º`,0ÒçMRäç塸¬‚Þ9wñé”ß½¿ÇË=ðÈŠ/O±¾Ý¼}áãIçä-ÞËÚª2äÒnr H2À—”r³ÊŠ z—\t‹Ä®¾–|8ð¹tê9ÿÛPZZ*Þ_;þ7€d÷¤mà25Òw.¯¤¹dKxùÂ[ æi^1^tT‚ÇœB¸¸¹"“<Úß0b6>9‰ºˆ¹H+bsûôo /òRoig¯ð^–ŽßÍ*öìn9牆ýdeç ™^B)ô¤› žã5â]ÖßÚºB~ jÈ)!‰'ÙøåùÁGK¼¼½aCÎ+鑻͊Ko=wdŸÕU! P( …€BàÿÚUйûWûX”öíÑXç[>[Þ[¶ÃùºÒvuð­ë[S[—[>˳Á¿§ Ãâ\‘¬y¹‰J_а §þÌ‚‰¥,LiýLÉźÜòÙ’´<' si»ö ñéÓ;\Vüùá ÙÌd¤%ÅÁòœ·E‘ù–Ûm56ôÌÞÖÛª}hb³ÈËüüáÊF`2!ëFÚ6À4·ÀXXvýJ…Z’ YèÁºOWÏog,©Qk>²¾Zµe™(·ªo9>fZ¢¡V>ÄØŒAæ`ç1:>’" ªÑÎ+‘áþ[÷±­÷“;É‚›úkÍ£Õ³.z¾ §VD¦Ak‡%áÕ±ÉJŒÆÎ# ˜»`¾ØI ç|›ã%Ùr?,Þ]ÎÖq½r.µ…·Õ„–\Û½^U–vk©…€B@! P( ÿ—¸ª‚ÎåFaí¤{VdôHò4ͦ.SâwË\N!†èß-œâcŸ¼4µP땘'ób˪å70ç1?Ë}æÅ–VÑÅÛq¥US¶ßÖU¶Íι,eeÚ–2ÙKyY¡öL·×7br…<'jZ¡x!7=1>”£÷C`U—0f§cÔ(Ó\‘ÚhKÒpLqvBWO½øøDwéŽ`ÚÍq—-±¸sâ{jÏ,£i¬d¹”ÕsÙG)g[Xж wv’Õ*Q›bÜ[eê¢=’‡­í¬Ìê^ÔõÅ}Ι¿V™ø‘eÜ–,×úqžIYcÖ”)ûØF³"ËÙ^KõväüãÄJµœ#rž‹ycÊ´jŒçË¡êé,ôi\ü1°oáO¾ úB®¤ò—Ï:æ-sCbÎãÎóËuYõ¾K,Ysžw/4Õ“ÿjוÚÒÛ•ý´U<¶5ïY]& íÒETkèÕ³;õÚ%9XsïY.^|°˜rº\,Ïõ–÷Ro‹ÞC‹zÜËh‰·+)»(§Vù·Ä˲]îvmð¿5æ(-½–}mÉá&Mx³<„/ÿ{$ç¤ÀœòE×èj¦eÖôôÜ:&{K+Öã§ËßR®î …€B@! P(þÿCà7t‰üµÂçÏøA©°[ J¿WVYŸé-ï™#?ÿ^>–H>–y|ÿ[¼d½ß¢³æË …^‡•ëÒ–gÉ_ö˺Y.kX—s¾¤¹ZÙÕêË2ÉG>·ðÓ•m™oym¡±Ìm¹oŸ'јæ4]F¿Å‹¹Zóã<ËzÖå–e²¾eÓ[>3Í¿+É~Jþÿ“¶­yIžÿW}ä*¯ÅG7”” …€B@! P(ÿO"ð› ºP:H˳þ ýŸ|àÿÇ‘$‚­]Dj­„ˆÚÿ× úï¯ÞÞ©'ÆÉºWéw[ãgÉ£½r‰!—óŸ´2“úÊ­ ‘…Å‘Ë,-ªWéL{m±æl=ï®Â¦UQ{<…ü—Ö‹LÏò·» ÁåÖ…‚>¯®Úž…dz;z‹ìÿØíÿvûÿ±ŽZ5Ä»x[æ«zT( …€B@! Pü ¸ª‚n©tš…ã%Vºœ¤÷q]©a:ËK%®½>J.·¬«?·lå-êº^Äm´pã{ÞÖÚ’%î,eá{;ÞlJ²~4·Ï²ëÄKylCq°íÉËVeY 4rBÅέ,Ò-Ôº\’§™Ÿ©-Ë‹¥L–ùRY°,g>‚9§*-)£9À"ç[¦m¶mnïç>p=b®‘s¯Z ýæàèLÞèu'ýÌßR>Ëçr¸e -ÇNή¢Ï,ßå´#™¦‰dÑ–žAñ¥I6óö_«úFš7  /îh–GÖãëoµÅ4¼}Úœ¸}z°Ü¾ÏC§Ðl&—ãÅúØÁ— …šãdÙ^397«£p_N¿Z:”u™ŽãfY‡ã®7‘Ã/G'grê¥Ï­+Ë›…c2qXe3`H?–¼eÞâú¯l÷_Éë?ÑwÕ†B@! P( …€Bà¿6ì±àRé0RØ¢S‡÷cóÖíÈ-¯…§—ºõŠÄ¤IS0 wg&ý”ʦ¬KªY)”¼¡éǬѳT[>ú¥R®Ë¡ÓJåKW6¥fnO(A.ÇÆO»ÀÆÞ‰Î6ÂÁŃB€ÂÈ¡àÒâÒ¼E®gêCcE!>þàCtŸp ¦Žì‰CÛ>Æ‘’îx}Ùͨ«(BÌ…$ôˆò .ê´ô±…¡~'Ï꫱o犟Ggqþ–½Tû‡öÃB ·åÉÉI©x³hqª°îÃWáÞwîš=šMºNíJ¼DKô,Àüôl\¿‡ÎÆ£CXOÌ¿e!Æ ëG½[”LqV˜ž+Š2±íÇÍØ$†¼HW#¼×P,\´È<óo6ÔáèžøšbY×gÌ‚Ù×ÁßËUœ©g™„ÄŸ)TšCfNBÏ-g  äÿøá=ضýgœ‰ÇôEËñð7Rh>}LuÅ—·âÓ¹ì¦:Ù³ë6þ€’z;L˜væÍ¹NÈO‰Å×ßnA“½;…£³Ööú®±ûÅ ŠoîÎשe‰‰ì_]y!vlÙ€~>[×ÌY°Ó'‚ Eà”~)_¹g2нÿp,¾íVôïJ|Oáí]§“s·®²;·mÅŠ ^\VŽÀ°>X¸x† è)ð¥Nà õ÷«u›Y\‹Q“¦cá¼Ùè@áÄx®¦2IYåóêú¯l÷_Éë?ÕÕŽB@! P( …€BàÏŽ@ÉtJW(4Þñ-FM¾¡Æâþ¥÷á†I×àÌO_`óÎChâÞ‘â!?ÖÙ9—žÅʈ~ßò,ŠÌ?¬¯åÇœ#(-x‘Ù–ó–üå³(hõ#ÛÒžpO=óWøwŠ@ÿÈ~0–&cÒèÁØwâb«ü ¨QÆqÏúu‡¯)dSMe² +EYya6îŸz;²Ë)ä’HÒjkz¤‹ÐÙM’wsSöoúŸKFhDWD„…",¢3BýÌJ¹@‹¶àr²!GV"Ñsqa:)L”eb,$oÎg…”ëWä%á™%46Å.xúÙç0¢« & Ä‘si¦êć•y»âœd¾Œ)7ÝŠ'¶Ù1hѳH)¨ô±ä‰}ìô¹9sžz„âß5k6ìD#•òbLÒ…“XóÎ*L˜>‰Åz$³X¨1Öá‡ÏÞÂØkg¡ï˜ëñâKÏ#ª{P+¹…,"¨pöÐvŒ¥¸õ#fÞå÷߆oî¼k¾Ù%xr»°.]Ñ9"Ợg·pœÝñ,þ¹æŸ™…òKÛêÅX6bû·kpó]ßᎇžÂ¢ë†bδkðó‘s‚gU~2žœ7¹ŽáXñü3ð©;›{%dm'4-ñÕ;Tgcï5m6ž|b9:Úd`ÔÀq>9_\¦¸ßCÇÍ@—‘×áÙ'ïGìÆ{ðʇߠ†×[¬ÆLòTW…€B@! P( …€B@!`‰@ÛtVúXÑi,Ã/[>Ä3ï~CñŽo1×›2mòŠ*Lꕆ„˜سÿ*êšÑk¦M™Ogd'' .5ááAHŽ‹Cm·¥Xß½ûD¡o÷0ц±¾û÷î‡oç( êòÂLìÚñ3Rs áS¦"²{(ªJqäØiøv A]q.2J1åºæÏ±ŠIëd-•$j&ëç¼ûWbÑ‚9ÂCöŒñC¿ûïHÏ.ò'ž;¬r;Œ7”,²6(ËMÇÉØD =A^îð£×.¦˜Æ¶öÎäÝ“bq7àÔ¡½8_[ˆŸ·nÄ9/o 5‘ÝBqáÄ$•S'…›{®omáÞ¥\ðÄÒ{0&Y­R}U ìÙ³ñicÛ£ÇOÄèA~‹dóò AVJ~ü!ñ—.#´Ï\7u|\ôv˜Y 9Å:Œ­µSpö¯ËÐÙß⺣(5ßlÝ‹QQwÃ-Õ$›ôhß©çp¼ýÎh¸ºèǺyâÍ.ƒ•ûº:cÏÖõxxÕç¸cîtíê_`ø3±è¦ièÒÁ–_4øøbþŒáp¢Øìœx©€‡!1æ0–ÿåŒMÅØ¨Î¢LþH|dlt4VÑûËÞZ‡;gë±ÁßÜö&¾°·Ï½ÁÝ0ÿÖn²: ÕØ·a<ÆŒo›SAF8‡!×LB—Ž>¨ÈÍÀú÷_ÂW»Na꘡D1 ¿M»âÆñw ßNGÚcKáëŒ!+pdloœˆYŠðɃ`«Õãø¾}´3 ®ÞïÒ ûû¸›¶ú÷ëˆC_uÇ¥´| ì„£»7cîò7±ôι ýxáo[Ñk䋸ÿ¶9ˆêpż • …€B@! P( …@+Ú´ ëÊ.ÑÙ9"8"vüŠÓ.¡ ¨u MbÛxXX'°­7îįXöÈ3p £ÈRýųXóíva?/ËMÁô©“q×£ÏâççWX€ïÖ¾‡5ë·¡Z˜ßÌij˜rý,Ô†š"¼ýÜrM«Ä؉àP‘ˆûŸz™e tйŸ.†A‘ýñõ÷?áìÅK¨¨¡üVI£³×NHˆ¿ˆ“§Ï!--;wlG¬ã>¸Ÿ Œ>ú#Ö¬Ûi˜.ÏIÅ=‹ïF^Ù†I1ûìõ©8›aâj$:Ú¶m4 ®–-éÕ(/-CAA!è2§Ó;×cÎ̯PÛ ?[[_yíÀÉÅ ÏÅàbb2.^ÀÙØó(­ª‡ÖXõ¾Ž·ÁðÑãáÝŒ{î|'.åÎp±kÀkÏܳ—³I1´Åm³§ãã?ÓÆr“UV\Y  ¦² ÝÃ;ÂÓÝUϰ÷À 1c‘˜tÕºÙœYfY&VÎòŠRiI‘¸úúx È.,Â྽ÍS¡S÷ÞÚX€ÚÞÍ©GäܲøL3UulWg™x:{A“†¢ª ß~õÖmÚŠô<ÝÊÎë>"é"¡¶¦ Y™¥ÕÃTÚiЃŒ9((Ñ­ùzè5½xß¶ ø,? 7Nm–­83 óÜŒôü ATN¾ÊF¡-ìèÉ}###/å4gÊJr1gÞ$¸ë‹î>0jÆ|’#K'×±ãÓëñÖæ½kÎttvʹ1Ô¥þ¾TZ‡Œœ \3 ¿PΙ>0¬ ¦6¢°˜Vo( ÜÅúQ( …€B@! P(m#Ц]ß’KJ…;fÞú’ÒV`ÅlMçj{wïŽ!#Æ`öl:#ìRMŸ¾ðI7cÖŒ)ðsµƒ±|)&Î^‰»æÍ€‹«+Bíúâ×ÿ†‘‘=à@Ž×&ö ÅÔy«pï· *—Î9ÿ„ùO¾‡‘}:"z÷—XùI.¢ç#ªkººbõ³ƒpôû1gTüz ÀÏ?‡ûo W:KÌg…E"­O¿k ú…ƒßâÍ7mè|²qGÈâ‰ÂB² ÷„»—:ú¹˜•;[G ; öäpŽ“_§)puÒaáíÚ•UµpruÄsqã÷'±ðîÙ‘•2=M\¸ 'giðpÑ·¦‹²®¬þºº¹ãƒçFþÅdýÏÄîOÛô)‚i¸ûé·ðÓÁXZÜ臚Þa8¶ù1|¿ï†uŸ Å®~úí xaù|±[¡Y‡'¿¾ž,ñdY¦>ˆÅRtÙY^×>ýqzñcøbòHÜDçÁ« ±wß~ùdc|«$Æ—»éHÇ*¯)ÉÀ+OÅ]/ý}"|P_œª¢ŠͶcS"g{öö•¨§øêædh@CSSkþõ¨­®ÄÙ?Ç™á}ì㌽kÿ†ç>Š]Ÿ¼Þ¡º5YߘOê¼±Mµ­üP8lØÔ`hÐ>:aOyeÙ—ðÚÒǰú›£õ£…>@‹zÑ9z]"„hM´Å¾ÒÁN4ßd²'ù›jšÐT߄ڊZ  ßz¹FøÙ9ÚRß baÉÆÎ‹ž9ƒyöžÂzÎ<ا€Ä‹’V¿üú-} Cû‡‘~^Jgú«ÑáɤQ{õ‚§ÌSW…€B@! P( …€B@!p5ÚTÐIë¡:º½5¼×¬zÿkܽ,9¹yHNˆÁÒ;nFaý¸ïÆA°qr¤-Æ©øæÓPYK»+ 1{ár\ÖŒò=tþ8: Þ“”s]Œ^ý‡à†>ÙˆŽKB/¿pìþif½¸SXã ó3á08û)oyß¶·Ó>f"¼=ìIlD³† '}KµeÇtim©ÍZŒ¾þ>¼¾ê¯ðv±é%+÷uóžFRôZ8“·r¶È’¾E;tÅË@ÖpýD9+ý|ß’¤ÂÍÞÑmI!4BÊÉh g{{Dô샑C¼XY¶Ò†Yﯪ(Ã3«×á‘[¯ƒ9_k4Ú"0(1{O¢«ObOîÁ¹ƒ?ž¼®8LÆ(r„Ö#œl:JôìÝc½AeE-­$°Wu>Ÿ¯7Þ5jön]‹×Þ| '÷÷DD/NíØŒ>·Œ§íí:‘‰Tª‘bK⣺4 Ï/‚Aa×} hl Ž¸xÓ6vîLtocã@Ñd±!ë;Óh&ߢ„žË ‹ñØÊÏèlû]p%õ¦±(¼vŸ\L úd“Ì:o[rˆçhKÎóZØ miáÀÖtߎ%4öü´%SÅŒ±¼mÏßÓ¡’Ç; £èO&[öÚNu-yòY}Ršy‹¿½“Y޹h”u{ª#ºgãˆ^dq—Iô‘0´§U‚FRÎßùë=xýl0.캞4‡Œä ÞÅÛK(ñ²ŽXš±±§)fXK¡ºS( …€B@! P(W ж‚.”1¡xšmàæíþƒøê_#ú„úbù7‡0›Îíò™òQcÇãö›Æ ®¦š”VGR‚àMç¹cÈÛ6í¡¦íá¤d;’’vn{ãÆÅ˰åÀÏp/Bcç9ÙMÖP߀Q}#1û–Edý¦gd¬½ç¾‡àíï‡Z:›Næq4Ô’KqJì휕Léý\d’2ÄŠsÇNaèÞ5T(ýœ?iÊ t]ò2r Ë艼¡o¹`àBgŠímYYdEŠ•Ð•Š·lÛ±H‰C‰ÙÒ¶s'“•TWE‘ùG*Ëæ ºáÚ’)($A~ÞôÄzâ0_ÆÎ}1cæ\t!‹p-Xr÷½póð%E¹õäÍMǦTßP‡ÂÒÞQËk:÷n7.ƈI7R=ªÐPŽ7 NÁ%<”x0©l³ZÊ^ãÉ"—Œ·_| µ=—âÈ_¡-ß:_g7Wxú¸¡¼Jß2εilóêÜhq„OXëɆî  Ë1ÅRƒ‹»-68 åœ)ºaìý³PF–kVšMþèGGWøºÙ¡¸œ´é©¾¡EF¸ºëm1†ù)çð܃+ñÚþtð eZ,Ñ·ÔËZ”eš·®Îp®Êmu¢Š¬úŽä}ßÕÕæ³²òra4­ ÍÑÒ‚ sÜÉ9%¨¯)ÇáC¿â‡ËU¦-î´(@çÂYçd46‘²«oéæ-Òqû¶#=3u„CU¾P}p7¾Ú´ Õõ:]+«3ñ`ÅÌHaĪkjÈL‰,ñM|ŠœÎZw銚³;p)%‡!Б°¬-+Dn§þÚ5ÓÙæ¬’ACCu16oX‡ŽQá»8™Vƶ²²öÎîðrwÄÉ}Ûðú6G:«=R²•›ÉI‡×Ü” xìÖþø&/KÏss rsrP^];W? ¤prO~²™ìÙÜP‹Ý›7Àkè“÷yN´ý¼º´„¬ù•(¯,ã\ßH+6Έ<o=uöM´É±Çð܇[ѧs¨®¤ EZŸzŽÞ8|0mØ„¬Ú`¨Á/Û¾Ëà1è$ûi¬Å–¯?@àíÏcâˆþ‚§é輸ÏKMÀgŸ¬ER–~ÞÛ—æÎ€H{lØò+êôÚ²ÿÕËÈëz_Z¬°AǰÞ8²þ5‹IõÏ:‚·×íGŸ^]Ä3hËý›ð㯇Ð@–uÆ·8;/>Jï*À²n‡ŸÈÏÍ¡käÕßÖ Å o|‚„l–Á€C¿lÇi÷(„‡ë<ÅRéV] …€B@! P( …@HSl«"y¢ÛÁÙÍÕÙ˜1~$æ,¼ ]B¼½ a×âWgÃËÍ ×Ýò0.¼ðB¢&àÉ[&àì/¯Ãqø*lZݶ´štKs2é“ ï† “o×»WcäàHám‰¢FN¥3í¯a îXòàr8Õ¦cÍ8™° ¾Á¶dQ'ÅV2á ̛ͫæDÎÏ\=pv÷gøë_àn¯‘ôxÔywÅ®ï_A„¿Ü(~öÍîAÅÚ¾}t?¤žÜ„á×bÆÊ+ÿgjƒïE¸o*  ÃýÏ݇ë܆›G  -ÿcÊо¸pà;Üù®†Ó'ÃÝ™¶N›¬¸f‘ø†·““‚/vù“'{{!8Òs~Øñ ¦^7?ÜvºúÚâ­¿„ïÆ [Çžð |Ÿ^¾Í¥ ÈO<†ÝiîØúåíä½\&s“%ÙÆ¶ ?oþßì8'C ¶&5ã—Ýï“ñ@€;ÆÚ9Ë¢}_¨ÃÈÙÕøìï«„²™J‹K–½Œn™Lá×c᯷cÉ} *ĆØ øåç/à/ÌñFÄþ Ÿ¬û ç£QïšÂ”h,ºíNŒÒƒFOÅ?W=ŽI×-ÆŠ{®Å±_cÅ;_bêˆHFCˆÁçûùl9oGŸ:w -”܉%=ŒH? ÿé~ùásòi OÏÔó'ñÀKŸãçS—àãL;x7-ÄH¬KrSq÷½wàÀÙ4ôó‡£g îZþ6M˜Š‡‹/Á˜´ñÜÌ ¢ýð>C±öݘ>ëN°i)y=ɓƂàFj|,ÞZw}§ÏÂúßCeqÎ\HÆ]Ë^IJ»oÂ8 ÷Äž¸}ɘ€7ÞÞ‰ï÷lD˜/[ÐõÅsuQ( …€B@! P(m"`CJ«mW$iim¨«–Õ|:W\O[°Ý<}Й,¿>ÞÌ”ê(ÚåËI(­¬£ro„…Gs2oT•— „¶5‡t …#)ëzS¬å%(«n$«qG8Ò6n]Y£‚æF¤%'!3·w9#(¸…i£íêäL,+;žÚˇ¶)›MÁB¡yÒ†ŠÒ"ò6_*z±"G«ð#‹j Ø^ÎÄ ²Ó—$¸…âo„o@0)Ø@vFm…öG_Ú²\Mq¬ÒA¬T—!))…Ù¡KžôõD Yø+i'§N! žTÍW²Â³eÚÖÅ Á>º´qVÚ¨¿$OnFRÓ³h˵ƒNÛÃmOÛ°+«kPRTˆò—Ö£W„û›x˜êË¢ÍãéɉäÐ/ näÇ(˜Æ€“”EÜÓ·ZN^ÛKË+ÈI›‘v £7¡07ÃÃ'€vê4EyÞ-Õ ÍèÒ½º„‡˜¶i7£(/yÅpqq…M39^#/ö!gòO©‘æMÒ¥d”À?(}z÷"ç{V $»FyŠ(”\ü%TlD[ݤ噶â“%rhxœh®ÈþÈ®×V•#ŸŽ/ø…ÀÓM÷ÌÎgÀsÓS˜œЮ‚Þ½ûÒ’ÍT©©¾‰$_v~ ‚ÃлWáPÌ$òCŸ›&Ú (ÎÝó\.*)»+x÷ãe$ìܽüÚ)X8±«,+Â¥„K(­n@x—îtÌ"œBùµÆ_€£~ …€B@! P( …@´« ³â¨«rmÔ2e±¢ÄÚ6+XW¦Öõ¥RÅt–÷–ÏÖùWòÔsÚ£kÝ╵ÙQXë3ë­i,ë·jƒê‘:,ÏæJ­h(ׇ¹üŠ +ëú-¯Žþ•õLòY20Ý_IÛ†œÖõ¸¿íŒ+ókÌõ±evr‚%ë¶e‘ –”ú½hËŠ—5¶ž¹v[ís~[<9Ÿ“5/S®iÛžå-4WÎöyêµÔ¯B@! P( …€B@! °Dà* :‘±¢Æt˹Øà+ž) þk÷™,Œ\ŸS[Ê’u=AH?lõfe˜·0s}Vª-ÛjŸ¹>Ñ3oëÔ)5 ·A•d]Ù7æ£ËÏ|[s•4œ}UÅßTQçÓš‡”-²„¦ØIÀtfÞT·­²Ö\ô'æÕªž‰O{´,7«²ÏL'ÛæÎŠ|!—>.T(ʙβ=1yK]~fëý¼ùzEm99%É›e‘Ïœg–Mä¶üp™u¹žGãÒÆ<ôXWPn±åš>ªÍǤð½ù™ø±Rfhj¤dõº•ÖÔ†¤c%¢½$hÚ)Ôë_Y(ù^Yòûrd}¡ì̲ٛ3.¿2]ÙokÉ×:ŸŸõ²¶JD¡^ÞFñÕx¶AÞfÖ•ýÑ(tZ½p¨]ƒ©ÿzõ¶z/J+ô |*³Vι{p×—l‡«þX¶Ë<ë)ÄSG¼¯ìƒÎŠóÛ+k¯±öèÿ(¯ßK¯ÓµÈË8I¬¬e¹O.cå¶©‘Æ«¾‡‚õÝvÓÕxq%ë¶Ûbt5š«ñe&†|/ûÌâ¶âi¿VymÒŠ‡˜†–³¥ *K! P( …€B@!ð'GÀîEJWÊȺúW~ZBŽ;†‹äñ:áb̉Û²1ӟ̦Y&å’ÞäÓâÎàËo·¡[ÿ(¸;Q¸/3y­ù˜ù[´)”*h%—©/úvd–Oç¤Ë ŸCgPijè_ëþHYYvs›: ñ+óʑϲ^3yg¼«Š±õûïQçà/b«ïÿésH¬Çà>áHŒþ_ï8‹~ýúÁÙ°4ÅQçy¡‘gúó§Žãxôy8yøÂÇÓMÈZY˜gbàìÝ.Žb؉SK]]$ÉW~”3-óµl‡?öYâ2“0&ž¦|–MÔ“méŠNlúø7ÑH¾vv:¯ª’<|´v'lô°]¬\˜å%%½¼êe&þŒ…™ž4 ‹6„)ÊX½”ýÖûÅýÑÏ€3.²\ï·TzÓ¦MǾã1HJL@\b êštÆæþÑÂ@ô®õÈ+¯Ñ´Â€=ÏKL˜@Œå™ëëµq'1”þ˜žóX™m3½óe:ó€i|e{r ܉NΣ¦†:ääåéVbeGØ‹÷…îõ:ú8'ÇÅÓ¯þMbþYÍs]Zsßä˜ò8êµêÒ l:Ó«F£i='ôyĬd¿©§‚J>s_d¹ŽC Î×qÔex˜02PŸ‚ƒ¾K‚yˆã t²-&+ΈÁ’'þ†Š}>r™(7]%-_Í}6ñ²3ÉZ™‡ûžX…¢*‹9QM²¨‹B@! P( …€B࿲µ]=ÑFuÌ{ú-<ûÜã èã(¿m.Æ÷ÀÁóË0¸{'”eálÌET±ñ-@IDATÕÔQh.{Dôè¾½ºÁ¾õíЧ ň ¡†Ëñçp9)“bIáèæ…þdYïH±Ámš HN¼ £½#ê+)ÖxJ6:„uÃà‘p# *'Å­¾p.yÅpq÷F¯>}@Zf#âÏE|Rìœ=ˆç t "ž¸L<í]ýàdS‡äÔ,tîÑa!VqĉwI^&b/\Dem#BÂ1lè8‘UoXߤ\:xЇ^Þh‡ƒ‡ ‚êó¢BNF2â.^FÅĶspA¯ÈþèFqÂY™(§˜Þ™ùep¡¸ßiI—PÛì‚C‡ <ÈOWòkw>ÉYùp÷ð†YMƒ;…#¢£)Þzi>ÎDŸE~I:tŒÀÁàéÊ ÍÈLID\|šHñEß¾½áíæÜJy*ÎÏBf^9zGö;ò2SQRÛL±¾»ÁŽb–_Ž¿[ït öèñàȱ˛áâ„ £ ÝNnæKòŠGÒêLW¾ëê†[ÍÁ‰­ßàøÄј2¤)Ÿö"V¹‹3”G#Ö¾óŽø,Âé/^E¸¿§`pí¸‘è:` ôí‰Go¹oD޽=NõÀéÚ¾xô±'Ð9ȃAäs%Æ”«‹Á=‡ ¦8Ñѧ(î{::õŒÄÀÈ^p´ÓiÊò3q::†Ñ©sw ¢9äJÖz©àÉ«¡‘æÄåØ8:¢ŒÆ—Ç«[ŸþˆìÝæ®®¨f§ :æ<*ëŒïÖ £úÁ‰Ú)ÎÍ@^Y‚:x#Æ×Á»#ú÷ §û‹¸ {vêŒýûÂÛ¯#ÆCc¤ãÚPSŽóçÎ!» TX}{ô€ŽÞ8{ê$¢iabϯûàïꊞýÀßÃÉÏâÂ¥mœÐ7j zw 5á¡!+%1SàFs#æ\v‰¤ab” f¤¬ —U.Ò{’Hï³§?Ð{Ò‘äç÷$59…FË dNIË„_H ¬ï‘xÉkÅ·OLJ£Ý h¬,AFnú J²:‘< 8{î"šíнO$aÙvØ¢©¾ b‘šSHcꌮ½ú¢k'Äœ9gp`Ï.„û£K÷°oªÀÙ³çQ×HãïàŒ}û£g玢9×¾¢QC€·+R’Ráêë¬sqØwà ؃ìŽ~íÒáÁ¾Ô}¾è(ˆGõ£P( …€B@! øÓ# k"WÓÆÖe%¥ÈË+¥ó¿5ÈLÏ@Ïëfadd7Q+51o¿ûO\ÎÈERÜqܶðì='ÊlI‘-©¨%ËYÈ´ZØý=Öþ°ùE…ؾþ}<ñÒß‘]VGæ6`çï¡WîøÇgßààž1nä lÜ}Dð1Ö–â«^è[ŸŠôWï=•ýˆšÚÞþ îydòJ«pñØÜþÀ_p1³”xñËÆ÷ÐuÐL¼´r%â\JÍÑ{ÊÛÆM LVb4–ÝuÞ[û#)ú'1føì;™(”§ ›>ǓϾŒ]{÷áµû¦ã¡—ÞCNyñ°ÁÙ{±æ³¤àôÁŸ°äÁ¿ &9Oð/LETÿ~¸ï镨½ÿ^™9 ­XM–_®kĶõk5t4Žœ¾€$ÿ¨ðóH¼¨[Y†w^~ _l9ˆºš |ðâƒx÷óÍ ½ñ§ðÄ}÷ãÀé8$ÄÁM‹ljØTQ4P“’N ™ñ<è6¤²¥YÃö/^Cäo ’ 夭zp6N&dS/ðí?_ÁÉ‹YT@J,)ï¬ùSb+r=)Ií¥šÊ*\?ÿ.x_nÝÒZj•”sNtµ£ÿij==_©\ÙÐöm#¾c¾\ÿ=~ݹ#öÁOÏŠ:…éñüò{±íðyÔ–çãù‡îÂW[~ر’ÊÖo™xÁçÓ÷¡WÏñí–]Øùý§Üo(~=yQdÅŸÄÓ߇}g.£²(Ën_€»ŽŠ²ÜäSè߯'þòÜ‹xèÁe8|ô$ÍÙmxõÅWh<s쌘ÿ4’²ËÐT]†×^†¬2 ~øâXñÚ‡¤g`óç¯ã· += iÉqHÍÍÅOßoÄŽ½GPY]…óÇ~Æ’…K’SŠÌøc˜{ÛC8v!MÈpùì>ÌìÖŸÿ3N=ŒW_^C dü:Ë>êóA,nhMøyÓg;r!.Ò¢ÆÖÏWaÑ£Ï#¥ šÞ“fìýá}ôîÙ«?ûû~Ù†ñ£‡`ÓΣºªO¸1lrû=õçãÆ´y·á••¯`Åê/‘_^´óGñÀ]÷ &%E™qûü[KžÓömù >ó7\"¥zÏ_àÕÕ!97‡vJ\2³±ÿçÍØðÓ~””•!áü ¬þð+Rü }xßûÎ&åŠ>_<¶}{vÇ_V¼€×þö6ÿ²ÇÏ'ç4‡ìÆúM?"·¸RÐ ,ÆÛ”©. …€B@! P( ?7d»"ѶTsÞö/Wó¿vÃÍ µÛÍ÷ÀHítb† ©«©ÒЋд"úKKº¨=4#R{äOEÙù?jSgÞ©å×4‰çò²R­°°ˆþ ´c¿n¼öžKe«—-Ôn~ôe-»´ZÓšjµ/W=¢ _ò¢VG¥çl´‡L´e…ÙZ\B²v9æ˜6®·¯öÝž3‚G]YžöÔ¼(íÅÏw~Ù }²ò­óôûµè¸$j³P+¯¨tF£Q¿Ö—k«¹Q›ùð«ZAe=ÕiÒ’.hé¹ÅZü‰}Ú@ßmçñ ‚6åìAìrÚîèTñ\UQFý.|/ž=¦§²6ïe—OþDòvÖ~>¬×M:·OÈêRŽV”qNÜóËIA[Wš­=»d²öî7‡ÄóÖ_ÔúÍ~HK˯ÏîÐ`7P;—’¥mùø¯.ÑŠªt< rs´œ¼AGÂk²_ÕÉÚõQ]µŸO&jMՅڒѬk9k1É„AöEmüð!Ú©äbM3–jwÏê«}½3FðX÷ÞÃÚ#û^ÜŸÚý¹6ýÎçµâJƒx6fr^ê+´ߨmÚZ+ȼ(ú³76]+I=¯];n²ŸW©å%Ñü<içÓ D}£¡I3š¦Uô/ëµ~cšûȧ¶¯Õz]Byú‘ÚU5#Ýsjª)Ó^½žöØkk´âê­¹±JûlÕR-ê–ZiE¥¶þ­Ç´©¬Ô +h,)Ýö¥æ>ð:->§\<3Ù‡ºŠí±éµç׬×*êÄ»D{kÙÚœ'ÿNó¤LûÇ_i·?÷ÎÌS]£öËú÷4Œ¿C+¬1h—Oès÷Ûm´üâr­¢ M{ja¤6ÿ±·4*)+=M« y_œ‘ M°÷×b2Š´ºâdÕg[ëò4Tk©)™9½ÓmýZ»aáZZ±>îiqÚÍ£C´¿ÛK­“„ùÛÎÒzëk­²ªL{þŽQÚ’çI¾:*m®×6ºR[¸ü­¢VÍ`h¯¼ËgÄÜ]¿KŸs•EéÚ’ 6Ú‹ŸnïÉg¯ß«]{׋ZVa%5T§}õ÷'µóžÑ*ô÷„1“cPU”¥=8m vß_ßÔÓ²´Òò ­8?]{dÎp핾ÓX­¹N[ûö2mÑSïiYiÚ=#¡=÷ÑVÑgÍØ ¥6uMMÚÅc[´¡ÓïÔâS ‰£ÖÐØ¨ÕTWŠO ‹ µ„ØÚ$z¯þñý^Qwï7k¿ÎÚîcÑZn~¡V][«]<¹]›xÃbílB6ñhÒêõvääÑŸÔ¯B@! P( …€Bà¿Ý|y•5CC-ßxY @€›=–?þ~ýþ3<ýÒûøúƒ—áÑT†7mÄÙ„ ¸¹»bÏÎ ˜=m¹fžS›¾ÖÉà¬[öÒbñÓÎÝ(®jDsC¸ÑöwÝNj$cíÄñ#ÑÑÇMHÓ'r ÜÒQ_U‡¬ÌDÜñì?1²QæÐÞ´»=v%”brìQ|xù$â›qž¶Ñ÷V…†úF²W:àá[oÆ ¾ºµ_T&É„lôP[Q€‹éå¸çÉÙè@[t9uëÕO\/$×!lü$ÚÖÜGþð½J6¸Ík èÈÂå/<ðèuðrfÙàëçCmЖ„Vûtó²2é¾ ®Ñ眇8æß½ k/d‘§~ÔÎ SÆŽF§ªôè=ž‡¢¶ÉOGæo‘·&[?Ì›;=":‰‚²Ê4ħžFߌD|ùчäDÒ1§Î£ˆ¶Þì0á–që}OÀ³!}ÈR?hÈP8Ó g8Ó/ò‹à@Ç€¼ÔlÛ¶ —h,i\öR 騧FüûiGÆ$Ú]£ç^ôï…äaOGô±xŒ¯œD¢Hý( …€B@! P(þŒ´« ³ZÅŸ÷ÆÆztïÛ£† uWO®xsôýtÆ{.nÂÚXýÒƒôï‰P‡ä“rÌuù¬6<;Ñôü¤“0j"ÞþxÏ‹::»^” £AßúÌZ‡ùâ'þø¶£³çŽô¡OZ‡h”·OËÄάùl´‘Êú ˜Œ‘£Ç ÈÕµFŒÚpAaô¡n¤s¬äéY3ñ'¥õEÝy÷Ž1²%'pÜ?²wsq^že'‘ÎÆ×בÒãâNª3ì<ÝÉû¸#íÏÆ³÷ †ÿä÷ðÐc·ÁÍÎû‚T +×Ò—&bŽê’·{£Á†)^x`oÖÍ¢_ºê$ší²ÂȺl)L׌ŽkÆŽ…¡ºšý($.¸AÁáéÖ 1ÇpàðIûy#n÷$¶þ×]3@àͽâ?;ôq >Ùº¥¡®>m>zûñÏO¿Á%/ô1\W,ëiUÄ–på¶¹žp¸'nù‰O¬”3YDW{'F³®½y v<ö|«åÃàBçšéܱ›§ÊjùÜq1"#͸2}êåK° ì77öjÐ’œLãÐ’såo‰76ñ^}SâqG(X3bèÐa7~y÷®„ýÈ‘Xp¯7u¿Ü?SWEe2¹‚ÇI&ò/0à±!c.F‘Ò:vd$jˆ—ÝÈQ¸c™?":¸!6¾‘ÎöÛPh3’Ã…¼ÌVÓ܇舾8rü ¶¯{so®ELâ&„Óy|žºuõõ´¿–¿ö†<ˆ˜óñxéµ{Ðqæ+øø­§|1†>b@¸ÈAžK¯!>b$zzÒ–÷\3æG’ßæÒK¨0Ú‘ƒ–w‚Dø¼w[©¹ÙŽDËï£)±B,& ÂÎÝêëë¨4èÏŽ><ìuÏë’¾åJ:ÈãºÁb šèÞà…ÁC†ch¯ TÒ¢ÚšžÞÞíØ¡÷,Gp·þ8MçÅ?zi%r;ÍÁ¾*úË?b Q‘Ÿ„—!÷ã¡Gƒ§ƒ‡üTrT¨¿W!zçë©nü^Ó¸7–ŸÅ8‘µ_ÌëKÎ:D €‹Ö@a±bqï’UBŽºè€3kÑ`ú fe”ÏŲ2]š—JVÌë0wÎ,„ù:¡ ¡¥ä^žç3®¬>H˘ Uª%¥Æ†E’ÂýÏÅǃ·ÏD¿p4Õ–£ˆÎs»zø 8vŒvnèÛ¿‡¹®ª 5ü=OŠ6+`¬Ä‹DrØØšQ=‡œeù!Ø­?î=„±ÃzÀ…êædÁÖÕ‡”ò¶-èu¥‡å1/VZ«Ê °áp쓹èÕµ#3.B=Yãiw¯Î™®´ÃX({œÁ§µ†4Oÿ üº‘ιß3s'¡³ÅqØ¿mfT(Ë!¡°ñL.^ 'y~®:%tfŸ–/P@ç݃» ÂÒ#ÑTSLæÆQ8i¤ óFnÞFüØ k>ˆÿü¬ ™†K÷=®žu°Ëߌ×>,ÄÏGcÅb‹FãÄ &©Åâ„‹µ7ƒ°€›À²ºŇƗSrNvû­31ý–‡àsýXNõ<:FàõG®Ç¬çW#åë×Ñ%„0¥t9f?æ=ü*þ±q/YÁ [“¼,D£tA.(ÛþÑè,;;æÓSNØF»Â„€NØ—V‚§îëaX&•³¨°ˆ@WиŸ­t5Ròji1‰Ss]öo_ §7#¼c…‰«BFa-zôê¥ÏIÚÝOaÐXÉglXiäÐsÄF ÿ–WTŠ^ƒÇa-BUÌEÒ÷]AÇ vBp°fC-Jk ¸vÖ|L›L7ÇÏÂKÏ= {:{Ÿ’Y@}#¥Ÿ¬é^¾>вÎÛ½ûê»:šhF%‰ëâÓ^…Ûq4æ†ôîHGÛkÈa^-n±9îLº|‚±ó»pö±GqݨÞ0Ö”à×-|ÍÓdÅvD#¿gî´£ÁT§h‡8õ¬3É”úÑ$Êe†…Õë`ˆA1õ­Wo]Öfúw¢´‚v”•ÓN‹zŒžzÆO¿ óg\ƒð¨‰È$§“a´Øu8ŽvÉð¶JõaÓî üüæÍèÓ-ì{‚F²,zÒq÷¼(C‰wa¤&&öï@Ïô®U’“ÆØ¸Kˆè…0rÌhžc‚Bý( …€B@! P(þ¼ü¶‚N–¶mï?‹vUðwÖ¯6nǺG1`@ÄÓù‹—¡ì…(μ„×ÞþËß%zl ù_/åãÁá‘[»Ï<·Ã{áè®/ð+y1†>¨9Õ”Q|uRNt•‚t²ÊJ¡ðTäzÀÈkñäâµ˽Xu÷ ˆ;ôʃ®Çêg㓵oaê°žxá÷æm‡O_yK?=†ÅSÒÇ}.9y×­o¢sV@øÖÞÕ‹–¾€£¦Sœª ŽpÇŠ¥oàÓ£{N4iéùf¥›Êó/ š:ïxâÖxð‰gp׌¡ˆ>€wœÆš»õ¾ÐyZ#GuÂ*Ní4“"[š¶åÕ èHž¸7­y ó&ÃÂ;ï†}])vÄ3©§)sï¾_ÉSþ ixlÑ ^ŽÆ®øj¬ýç*\Þ÷ f¼ykŸ¹Ʋ4œ, ÅÊQ&Ò´ À /¥²´öèL ˘èȱµ]1xÔ\`ËÇèHVMNìM¿¢ðL–ÿ†Ú2”5ꊎ¡© .Mç&È[ýTf Á¬ÀÛcäø˜G›¶Ç˜¬«^¸íÑ•¸ôè-è:d6Ö¼r;šiçÁC¯À/~€Ó¯üxQÃŽ°æ…Ÿ„ƒEfÌZ5fz`=M3VâÞÙ÷B[û2J“N㙕«±ëxÅb÷ÄôàûÉ#pcV%ÅAÅÒ¯ sNDJ~ˆ¢mýìK@WÖÄ↱磣ÉÚ†^º²O“ÉbVRGgŒ‡ÀÏC­‘U´$§OR¬ó¬< ?F!¶zöÁPG–[VöX™ä!)ȸŒÄìr ÿ5P`fîQÈ{#-\Š‹£þ¡¤¸¥U =ƒ"»›w^’o€cÇN¢˜¢¸zzQ¨¹(òüÝM„a³ìC}e!^yð^:0>#zvBU­†¤°€²?@NZ"ŽŸ8M»Ghl}|h—Æ Döˆ@aV’òªÉ?A\Åùu#-\%Qh¼X—ÉÂ> ýº‡¡ŽB‘G·¨Áô´'ÜN“Ÿ„$T×ÖÃ?$£FB‡ £ñºDø‰½gï@Œ8ü"8#þ,…_;OžèmáK±ä , hìNÚO¾ÒÑ…0íàëNGÉ=ѯO/8Ñ‹)1“×&Š9òèÄÄ%ÂÍ'׌‡áÁn#â(|¡æD} ã!CAV*M(EÿÁƒàFÇS,qk¬¥÷€ær`×^ôc¨ï*hF…$TÛ¸PÜô`aQ|ìÕøi÷: êLk ­ÏÐ ¦¿ñc-_ëÎs£¿©eŸ¬ùµz¶$d¹L¼Yjé%g‹QlW/²äiy¯³lY{yœ/“5™/¯²\â[Wž‡¥£BqÓg1˜EçÌ-“¤µÌk¹×û%Ÿÿ­¬sÅÕÓ+Zg\½M1$­poŸžç…Ÿ™Æ²Õ|¥¦Íãj%§ä+¯­¥ü'+^¿A-æS‹\&¹ÿ+Ù~KU®P( …€B@! ø7!pÕ-î¬Wòn{IXS©ÜüáL÷’ZÏ£gÊtÌGÒJ¾ülÙŽx&º¶ËuZæ#?¼-éd>_Ûj“ó-S[4f~D(T1!Ÿ®¢èe,CK¿˜Ÿ¬Ã÷Ì“;}E]R¼y{µ ù®&«ò†Ÿö’uظøb݆ÕHʹ¬/øq»"ÇÄßÄ—Áj•/Û4ÑŠ ÓR’rYc*x´¢Ñqµ¤·¼}é§U=½¿¢5‹±7óç<1!tþÖ2µ°lm¡oÕž‰HæYÊeÍϺL–‹þ›ä–|lí0vÉ«ðwÓ½÷Óþw¡¬r¦¹¯6Ç—;Jõ®›–ñcÿr^p;T"ði³="Ô©uytò–úB¾6ÛkÁZÔ¡Ÿþ-ezÿôg˾²üÖÏ’÷“e9?·ð·ÕÔ7.çÄ42‰ú,»Ö|峬/Ÿ™—àÆ<­xˆ6Ly²žlW] …€B@! P(v®jAgáåG±eG,?¶¯FÃuùO(¦íðâ~þØ–í˜y·ñá-itYt墭ö%A/?æõJmÿZ|Ð3^¿Ey’•ôöe»z¹,“W˶å=—IÙe^#§ee.näå[wxÅ4²\ÒK¾í]%}[å’‡™¦=L%F–å|Ob|X²JWð¦ò¶ò¸šÌ—,ÌòÈ ÈJyµ,l¹—¼ä•·W·¯e\ZhxÌZ÷ËØû¸9dÇb"IÌ͵ð2èmYâô[´TÎmÉö¥L²šÌçgË2™o™Ç42ßšžŸ9Y–ë9-¿­xYôUÏ—óZ§ç¼öxµ[fÂÅÜ¢©VíRa+¾ud¾5=óÓËôñtævÚãaÑG3­ºQ( …€B@! Pü‰ø] z›Ìl þwì¿I4_]Aâ-ج€H%DxÂz²Ž¶ V*ù^>·Õ_K>²\ÒKþ2ÿ?qµl›î‰èÿ¦yÄmýoôñߣ%nÿþЧB@! P( …€B@!ðç@ઠºØŽÛžœ¬* U{è\5ßZylS#|…K·•äYê¶Ê,óÌm]1^4~´ÄÒ6wKÿŠûÖ3É,“‰uëÒÿa{Vý4Rl{¶’·•ÚĽ-Âÿµ<^€±¶l³5ùM Õ°B@! P( …€B@!ðoDઠ:·ËqÁsò ÐDŠÇ#vu÷B§Ð0øz¹Q)+ìÜUIÖt«¥Üvœ‘p§2píõ3àéhV–8±eS(id=µ5i:QL?ºÊfifzù§ó º`ò›Ys¢xΜOIÊE­ ¹•¹M>æúú ¡~IÎRa••m²ì&¹˜7?¶ÄlÖùÈ6%{½g@q^&2rŠÈ“w¸É£5…=£Pc)©éä1<Á¼õ*ÍŠóœ€øKɨkÒЩs7òÔÝ›ât; ²¤—“’)ú¼-(ζ#ÅÒæðtMÞÎØl‹Î]»ЧMç«…§mŠûx>Íî4 y×hLt‹½Y>êPhÉ™Ýá_…æ× c†F‘p4þ4ÆŒ­À€*Xâ(êb<[áCsƒ<ÿÛ¿‹±ÑhtÄ ò__SEý¡xéîÄSŸÌ·eèHYâ×LaáxQãÊŸ;zÙu¶˜4i,œÅ0èseb>•äõïîíØw"c§Ü€ë§%oôöbr¹ü3·Gõ(“dÑ·»[÷¥Ñçª>—äÒ†¤—øÉ«ÜùÀÏÌKð&þ<_ôùªË`9W…ìLOB>žSô”L^Ћêm1˜Â:’xüq9S2üŸäC™­’ì‡JZøêrÉ|QŽ­¬Ã2³¼B|–ŠžåqnDb'00÷KçËíèØPMqÌYbî;óï=óQI! P( …€B@! Ð0¾m ‡ø@7eþõG ›5_oÚŒ7o²%sñØŠ7(Z QèJ+tväü¬åºöêŸöG\ìI,…å/ýÅU ¨«*Áº5«ñÕ·ðÑûob̤Ñxí÷±áÛõø`ÍHË)Ö»Ä rbýì={‰xÎ e×Ô7)7?‹¤pdóç8|.‰¨ˆR`Á‹&Ü-ÆDÖe¥K(m&\øÙ–âóz‰‘<Ö™‚}êùýxó£ïa¤yÃõ‰TàcæÅõ(Ÿ1Óÿx¯¬¡AÅÌå<6œŠ3ã±yÓט|ó* 6œv8Ò¸ÀÁÅSÌ…|š Þ4¿¼=\PYZ€Ôôl€b´Gtéowš;”j«ÊPYg„ až—› ƒºvï 'ŠËœœŒƒ Â":ÃÏ“v’X/ËQ]Q†êƒ³œ¬lØ8{¢k—ΰ1Ô %9 š½ÞžÅ‹§e×½ ¸õMp¦w£Sh¨Àƒ^*ô0µM/4ÖVSŒ÷¸“÷ùüìlÔmÞ™åÖÇLb ç1÷¥07y…%°stA`P0ü|¼„r ÚÕžš‚ü’Jø‘|á°'%º‘Ƭ˜ðõõ÷§9RŠòÊzñºyzS]Os‚º¬˜Þ{Â!8¨I ”d‹ñ±qÔßC%-ôÈ÷Ј|z'y¬}7• …€B@! P( V´« K*;{xÂÛÛƒ¬_€·—7æ° _Ar)ö®½f&fÞÿšË3‘cÀÊ—žÃÐÞa¬î¢¢ªžêQ3Z-)ïàwŽãñ…Ãpîøÿaï<à£*¶?þKï=„„@ $”Ð{ï ¢RĆEÁJG,€ˆ¢ˆŠ( (MzïÐ!„ž „ô^7ó?gîÞÝMEŸú÷}œyÝ»SΜùÎÜxÏ33»Ñ걡ýÚóðr.ÅÚy³°xçITõwGÌÙCØ“ˆõ ¾ÆCí‘A—­«—büû_¢V³f¸xp:¾2SF<ƒ«Ç¶bÜ„)¨V¿5²¯Ÿ…uµÖ˜å<ýp;i1ð°úm1oã´ìù=ýÂ+“ÁK!À¿2ÍÈ7"ÌŸÜÆ]å?™ '*µNîËgàÐMo4ª†ÄK‘xõÍáS%%9ÉX±z#Þýd.ƽ9nÔÙŽ<`Nî‹«'vaWL%¬_ýÖ'¢›—/ÂôÙËдUœ;¸Í}c†=ëÜ Ìþp<2]}Qš‡õ×±fö‡¸uñVµàeïÕ¿N‡ë­ÖøxÜ(¥=ŸO´ØËx{ä›ð¬Ó†”+Ès«…‰ÞBÍ*ÞH¸x SÆî;´kŒ¾ŸGÞ?˜x²AʳÁ4ÐpòÐ!,Ù~éN?àÄ¡#x{Èc¸|fÖï‹A/iŸo%×÷U¨ígÀØaC‘áû¼DXWm…ÉãG¡VU$\ˆÄ»“§ÃÚ5%Ù7°æh"Þ1ÎÅÉØ²óvìÚ…WÆ}ŽIo½ŽO'ÓŒ´ÞÇ—OƘ‘ï!¨q’u19Žxá¹ÇèIÀ®{±ãÀŒüè[LzóxØcÍ÷ãýå§Ð¯cCDD‹Þ/bثϣ²»bNÅžøÔ­_·âÎcè‹oÀµV“ů«Öcøä™?rüÜ¥r Ëq,p|÷|òé7p¬ŽÄ ûPòæÏ˜D/ÛJ°ø»˜·6͆ãÀž]xjøx­ÿƒ( >›øöø„ÔGÂÕ“ä=o‘ ÷¦`Ôë/ÀËÉ¥øþ“·`ßøiŒ|¶'¢oÁ{ï„Àº­“…Ò*-0eü[¨ælXúlÊB· {oÖí\‡‡;5–/6xxê/äxUŠ€" (Š€" (ŠÀ¿™6·rs5Å­7ƒŸ¡Åà¡£Å;cF :­[ I_q>!UæIIJ—._·RRŵ«Ñâµꈷ¾øI¦Þ¹Ztï5P$å•ÐïbsEÄÄ]ii©âàÖURîî³±2ï—C=^Ç/ÄŠÔ¤ëâ“áýDៈBJ½rl‹ÌûóÆ}"3+[\Ž:&6í8$b¢O‰j"æ,ß!JHåôWÄk=ª‹¯–í¢R…âÛIOS¹fbÕ¦]ââ¥+âäþ ¢é¿põ^Á-¼YìßTdæIh=¶ü朴dA3¥‚füÄ­ÄX1{Ê+¢Ñ“o‹,jŠ!û–x­s Q½û±mß!qÚ)ê¸x©WKñÍÏE!åÉNŽo?ÓY|ðýJaRK­6Ê7ˆÕó&‹ÑŸ.·bÄ5!æo<" %ébø“ÝÄÚÝgEInŠÐ:@,Ü©•6‹¢¢byxù¨hZCì<}Õ(Oˆ„+‘¢eÍ ±óä%GkѽpÐÊ–êõ‹¥³Þ}G~#ã/Y)¹þ´j‡HËHû7/–¿_N¢ôR1û½!¢ÑÃ/‰£Ñ1"-9QLÚ[<0bš( Ô˜“;„ªŠmÇÎKY1QûE]b»íøUQœ“"^j Ѹï«bç#"êü%‘‘‘"æ~=Fœ&ÙYYÔçÅ«½Úˆ/­ùÄ/7íºxç…vbÊ÷kEIaŽølD/Ññ…qâjÂ-‘•qKÌ$ÝFLùFäðТÀlõq›wV z¼ƒøzþZq+5Sä¤&ˆ™“RÛZ‰•4¢Ï_1—Ήq/vÏ!’2rEÊõ‹bXŸZbð¤9RÞ•£ë$‹Wliéib÷êyò÷”™‹ÅÍ”tqöÐfù{ݾ(™¿ÔX¿~ëÞô«L_¶õ HOOëÏ”¿¿Z´Z$§¥‹Èû½Ñ×dùkW.‰Øk "-5UÛý›p%–k\”i«g(z+òéWüéýRÎÌ%ëEJz†8¾kü½ùØe£%‚uáPœ• v€˜0c± õþ"#9AìÛ{X¤gæ‰Û ÇÎkõŸÚ½šä„‰Sñé"')ZÔ¡úŸ1Eì9tLÄÅÆ‰ý— ¯J ľ³qRvÜéݲÞCE~J¬x´¹“øvÙvAÕˆŒ›WŇj‰/–î ¼Eâû)(oc±jónqæÌYA2R1—1B})Š€" (Š€" (ÿj÷œA/¥ Ç›?‚N:ÁÇÙ­Z¶Ä†_~Č٠1uÜ0rUuù3'±þT4òÈ-üè–h<Ø‹žîù­ÍâÙД1=³ÓÚÄ̪öoÃÕkIäÊ|sw°¶qœµ­3ÆêÆ5ƒe|Ç.=±~y<òs q‰Öà>òÆ4ôëÑVnæÑ5"€S»Ö`Á†ãhñä-lÛº MÖÒS¯âô¥k(*l+{w|üÇèÛ££”™ãQŠº!Àν{âç€@rÇoÙ¦xÕ5š5»¸;¹º —6gÛ¾i2³rqüàqøWzˆÜ·ÙcœÖÕºTÇïŒB×¶4HáRävü¸ö0¾ì“†ÛIC!Ò³âpþÜUZƒÚ$O“-3Ó¼/Op¦eå‘k|Þøð+ŒøÏOhUg8|ƒäl;oV`p€ƒ½,¢­iÖJÃÚŽ\§íQb”e¤\Kl\'̼n˜×çësòü½#¹üxjnã<«ßö©·ñ`—Ô6hجzÖ@jv6åöC!-[øô£hZ;DŠéø@oü¶$ù9ˆ»zÅ^aH޽€-Éq(̹…(ÊŸ€âpw¸VíŒiÆ»S 2Ûe(‚½£+\­©=´i\@@ ÕYJîÙ! Ib$_ŽÃªµðÎÃéØCü¹Á³›u -Gˆ‰ ÅñÈxŒŸ9¡´Ì€CuÚïBl‘6ÎdŒÖ‡<ëE®õ•*ûÃ?0•¼ÉÍŸœò©>_ð5Ž…Ô¸ãX·?ß­z~ÄÃ#/ ýƒ>]ÔÂA°±µEë>C‰M{xyÚ¡^ýºxàÁ~èÕ³‡\ÂQÉ¥1Æ zÙ™²vF-{ÈœÇÓ3ƒÇ kçVð¤V»Nôëõ êѾ^äáP¿÷nKîÿ9²rÓCx‰°†í0ž‘—‰@å&áùÇ„ ‡ùãä*L“h¼Ö¥[Š¥‘Ãeíim®3•ô‚ „ ÉÕªÏYiçqZΆ?ï@Þ ¢¹Ý»ÐºÙ\•Q4q-‚ÃÒë€zaP"wî–Їk¥0ÌÜr‹.¢— obãÎÓø|î\¼üÜ£ps°Ñ܃nÒ;VÎG÷þ“0kÁ,tiŒÊä&¿4’vÏf+‰‰³­oXÆòóÈlÑ^¤KqA Š èõÚLT©Vôb‚×[ØËÒ•½¸¨mG´êÚ—¿‚Å䮜YdOr­È˜uDeÏÄ_»A9 CËöS]·°ïb¼h µe°"÷ø;cQZîo ù¹V6’J¥žE¤¯‡7lèçO:i}bMF¾öдç>q¢>!NÔWê—mÃáB{äæfAX»bíÚ ¨ß"Åô¢¦„v‘·¥ò¦@uñ.ìºì¢"¹æ¾ˆ7$öEi×Ö¿“´†=‡xöô!ÂëF;u*¬ÜBQÉÇÍ,Ž®ˆ¨é·åE1¶äm@/i ´hZNÀMv´5ó)ÈσoXM¸9Ópcà—•i§w·l@— ²ìɤ- }-÷(¥8…´‡€•í„_±<®åŽú…Ô>z±Å†ª­5±ÓŒî¢ÂB¶pq¢uðI±ýT8JšOÄ+?»‚pœ‹¾,uæºÈ=€ömÐ^dñø/&JdŸ9 ”Æ–{•ÚAO§aBcE¾pròÅÈ)sôËÌþô¬Ú°ïNŸ‹aÏ÷†­‰¨J/zhó¼\Z/oíˆ ›·£Q˜?Šs/¡HØ›ú_Ù:x¡{¯þøló!D· žGñDÿ‰tŸ9¹ù¨ފƾ3ý\Ð}øÔص o@äè>, ûîe-ÐýKl,ïÖU¹¹ñ¨/E@PE@P5ý©ùŽxçež’#›Œ'Áe uÔjŠâ¬$ìÙ½óWÍ@ÿ‡[È´³A8KÆ6]ìéa¸~…fÙo>„øñ·rnÅÂÛ^{Xç¼¼K´yVÊR¡RÚèÍÊ–f ݽðÕW›ðmŠèéQŒüÉvÀésq¨U¿šÖðc1d¿” Ð@³V9¼÷O9Êhþ($#Þ§Zm¼óÁt¼C¦âöå?ÐFb£ÐíÎh@‹eå:qnoqv-[„ ßÍÆÏ÷“å )g‘¹‹çˆ)QÆ3¬l¤ëÁ6½:rhжUõháig§ªl„èó…lDÙ“ÁÆv•£w0žôZõèOåšâá§éËÎ…'GÌ@ï®-P«Š—ähÈÏÀŠù3Ñôéñ×f“õÊìhS>ºsû·ÜI›^p`lé’ì#ão+Ø’ª›œœÎ‰ÆdíåAå™Y'gwœŽÏEóÝáï¦ Þ<ÏÊÎù)×y Ÿ^˜Ùëõ±—A/cÒròe¿óoêã#4ƒüéÌïѱaGQà#ɬ~6å;þ.^™„FAZ›3Ò3襀wÅm9ó¾ÚštJ¦˜w 4»Ê¡[¿Áxms_Ôî9+¦Ží[÷óLLûþ,vŸzI@3«643\JÆÔîQ(²xi@ Ö‰ô¥] ¹sûµ4m&º„v ?•,Ó¸>Z¼Œ¸GPhœ­ÍL¾FÞÊdts"6ø¶ŸK ÙU[Ù'Ïz¾‚oøaÌ‹ý¨ïná×ÛðÂȱh䀸5[PøŽù—ÏϦʑ˗ð­‚]‹ÞÀ‚6¡¨Žºá!XøÕxtjô­œŽ`2Twm]Ÿˆ‡ñêSíñì[ÃðT—×`µú=ÒâñìèI8é+“¡*…?ØL¦ ó/Š8SFJ,œ‚'åóÃÈiïá‰îðaÛ4ØfÆà‘c1gÕnÚ ¸F»¸½”Îï¦d(¥ [7žÃ‡Óµ®ãÖõK4;¬½Œ2Vmú**ÌCTl±Õèñlú™cWäì¼ÌDå"wH/oÚY½"±tñ´®í½k`îòxdˆ&®0/ qÉš+<{.lÞuŒähi<ShS¶*ä-¢}œñævÓ?þ^µ»£s«z8Oã=¸I_T ¤Mß*õÀÔ—êc„#žëÝ 94‹¿zó>Œ™2 þd¯§ÙöqÓ4‰úmá†Nmjã±×&ã«%#\Ù]f­×_Œ}–6¶{Ë>M/ll°ù·_Pç¡—ðÌ‘Ÿ‡¼Jæ{›‰Äß…ˆNÒßZÓ” }6àiéƒ Š€" (Š€" (ŠÀ¿™€Í$ åð´œ1¤ïR²#"ê’ m²³³È8s  ›GºÒ̶;ƒÉ5÷Fv>ƒÊAáxöñ>hT¯.­c ¤Y÷b4‰ArSö¥c­º¶n€};¶ >%ŸÖ;·CŸÞ½Q»6¥‘[¸fŒƒkÔDh 6WL®ÄÍk£vÍ0¸Ó^î‹BZ›{òL42 ­Ñ¾S4ŒG½F-Ð(ÀFÒqYñp©\Ú·C%Or5n%7æ@mÖÕ– oÚq Gé'aã]C^y5h-.›°z›­ÈPª†€ÒlÛ}öî~è7ð9<Ù¦>éSöÖ¥p¬Ya¤»?±ÍF’ê5n‰5\pðÀa\މ…ƒw5tìØUøØ9žò$KG«ÃŠØX!¤Z"ƒä̸-­ÏªÞÕè_ó–ÍàGk§Ü}кó#hH;ÒGÒÎÞÑÑ—àÔÓ¿ù­ë×ÝÆvÏôòˆˆ†ˆ¨_¾úV\¥KÑx]Lõ†£NXtÁnP;õ‰#Æ.ènÔ×áõi]6õ‰éŽÐªþR÷I3Ú#€¸yx£m×§a—“€#GO îú „ÔmŠö­›Ã•&òëÔE£&û~@IDATM’åGÇri—&¼ Ô ­´k^gŽCR® ZÐÞmÚ´A³ú8|ø]…­{thßšvö§#܈wÍ 2Nw€›<ÑÍÖ§qV F3_ê{÷jÔ÷µX™ŽÂ#ã¯ÔÆ !Ôm,5r/‹hD˱eÓ6\¸–†·'~‚GhGGÐY‘KzšÐ†uëÔ¤cèh×rzR¿q8êÔ©Cdz9Òa :èØ¹ðZ¨ÂuèAçLyXuûujÑÑnÜß%©SƒÖ¢×–Ǿ±Ûº[õ ¯CÇ›… V°ŸÖÞÇ¥ä¡N“6è×ï ÔªYþ¾îäÞ^Š’EÜÙE¾A“ú´£{q¶£ae€­s ª‡ÕFU]ÖþÙÐxç¾?uâNÒxO+tÀ;o ¥%*t$ §-áè‹4Úþè‰3¸NGÏ5lÑ-›Ö‡y¡ÔiÐuëÒ2 G)‹ÇßîžÞ¯ÓÝ»w–ãŒÇ¾­ƒ 4m¦þ¶t¡±OGòù…ÊûÐÏËΪw!ötoW5z¹¬bZ"P=¬6i ?OÞåË‘ª“Tߊ€" (Š€" (ŠÀ¿Ž€Ͷñ³÷ ò¡JҮܴF—ÎŒ¦c¹LÁhÊß×r]0­Ýµ·Xl*c¼°ÈN1ì$¬šœÌë‹íìèìôr¡„Ö—R>{{cš®œ1Ÿ>«È?ÙØâõÅN´Î[æ:Ù— ™“\é‹ÊäÓó›¾-åHGZ† “.ôÃÂø(§Õg~9`)W¶Ûh³°7Ol;9Yꬕ+_¾üo]fÙzËýªH½ ÷l‚Ù€26[æàõÔVäRnw—>5‰¢ KýxMg,Çɲ2¿6ó­—ÑdjqœƒgÖKÏ«¥–ýä¼üÏ2~]‘l“ü t)+Y×£lû(–꣜mÓejõiùu*”Y®l…ydD]êYVYÏè]g]7K9º–mà8ý7_—)g¡—¯çç2–q–לGšlsßëuiù%d™•ã-ÓÌòÌcD“Yþ·Ys½ö Ò,Ú¤ç²ÔѬ‡Yg¢ÂXËèÇeu}uæ–rtÙ¦oc½œ‡õ,¯«^¯¯ëùMrL·sГ¤²>MoKYz[ô¼Ô j‡¹ßÍñêJPE@PE@ø÷¸/]>xéÝú÷ß…Žg§Ù¬Ò×ÿwë ×}_ßFÃÈRG£9N›…þǷ徬eâ6ò¿òmÒfn-úLòÑŒ4]¼¹ Å“ç€eëyøÛœÏkª·œƒ9‡ùêö~0§ý‘+ž=&¥L%,ƒuücAcr§ò–ºëœÿX=ÿÿ¥ô{å=Dþÿ5S(Š€" (Š€" (ÿ?îj “ ÅvÇíAWÿr»È;ÅÜÍ‘Æ êw*üŽ/ß®ò¿ÿÁªßQµÛÛP‘±©Å±ŠŒP~S~ÉBŲù®õ|ùqz»f æRZ\ù²æœ÷qU¾pùß÷!Â2Ky½ïõ[/[>ŸÿÏýæ—/–÷mùßÿ\Í•fŠ€" (Š€" (ŠÀ_Ià®:Wœ›•‰¬í,ckÚÜÍÓÛ‹vü6o¦¥+§ ltñuÙÀ3§®¹”¨gfcMÏoi´ékºù,²ŒŒt¹ÑK¶wt†7éA›cË ë3Gº\¡L¦x]“qfLã¼ÆbzõœÉtùºžZÝ”hÔ…³q[yí¸vM<8Žþɼ2–—ª[Ó±eùHH¼ 7?x»¹Ð¬±6kÌbú*S—)Ö|Áé–²ËëhÎÉWZ›µ<ü[SüÎu0G3C.ÁAϯýâ¶ií.¤ ×ÒÒÒáàêoí87Þ¤,#= ÂÖ ^úóT°0—Ž‹¿†:ªÌ“vê ªª¿M'¤¦¦Ññ<o-ÏÍæ ø ræÊg¦{’©—qC¿Ì´[HÏ)B`Õ@ÚÕÝŠòñúr‹NÑ”–­¿x ‰9öhÚ°ìln÷b°d©·O—eJãSÒöùHº‘aï?mÇx÷‰Æ‰Õ0•3 4’ç4^"¢ž’xçcSѰqcÚív'!eöz(-ÆùÓ'päe^5Ûµ†çã±Cõä\ÿÓõ¦ ­>Ž×u0L=‚ÓŒùôüz’ñÛ²eäSºü͵ðÿ©<޳ÌÇ×ÚŒ¹@ê­È-¶F` ?Ÿ4(óÉBÆk½-z\™oËvÐ5·Oo#×Q>XêS>ëé|­—×ãôßœ&ƒ‘e<_ßU_½¬úVE@PE@PîB ÂsÐõ‡M.whËjL™öToÜ%Yi0¸øcÐ+/£SËe6m³|˜Õ¯Mõòô4¤´‡vŽ×nÙ˜0åÒ.ô‡mú¥Ï¤ä¦cÑWÓ°t÷i:{½:’®% ¬Y'¼üÒ„U­¤=\™êæ:¥Ds–Uém¼­þÛÔ±0rX'Sn“ñ·…`¶ËùgÌÙ½Øy<W{Mèámkp9×ýûö»içe$àãIãðذÉèÞ´Ž©½åTÐÚA•™ë.›C²$½t5î”O+¥ñ(ŸÇÌC—b®ÃÔNs”ì?³ f­Õuo4o‡€1Ÿ`úØ¡¨âí¨cãO_!¹J {²»ÔóÒ©CøòÓqèJ.õ¡ÎÒQ_½_QCëäþóÉ8DÆ¡’‡#r²s`eïH†¨.Ä$âµqSÐÿVšQG:±Æ§oƼí1øôÃqðu´5 Ó¥n¶9ø¾=æ…3êÈÒÖÆÝË%YÄÑU­]_,ˆ e±pí¿MW½>úæ>3÷°ùŠ’8Õœ¦uºmü,?Ìý¯e°ü­é͵º svo\ŒC·Ü0iÌ«p&UÌiæk½-zyí›Ç›9 Å™ê-[À4^-ë(—Eþ,_Ÿ¶IcYNœGö‡ÞiTÒ,WjV‘h§(Š€" (Š€" Ü“@…ºe©ôÄ+8îS_Ž~V¹X1ÿtm5gb~A½?šÕ.¦cÈì騦<:^ÉÎò0Lš1ͧ£×<üÆhT®æ/‘Ëã®è¹R2h33²áàâwW'ÉN7BòiÖ9;¯ŽŽtÜœ-lmíä7 (¢>`ok{¸º¹V|”ùÈÏˇf]œ\©=T5†Ç»0©é„×>¾>ä½ ÍÒÊ~d`Æ—“‰(ºÞùÙ»èÑ¡-žïÕŽ¸[QŸÃu§Æ²OÒ¯EãÕF­á;ò#,:PñWÎÅómº![8`êð§0hÄD£¼ ¨D¹Çý–_TJ3ôžFdZ‘'H%²j‹é¬óüü,¬íáíé.èviq!y¤gÂÊÖ>>ÞÆö–ÊóÑíèeU©6è<õnO¼„RzqÅ!æüa|¶¦=Ü>näi¢)Hý2 •ñê Á™mƒâ,ùö3X×ì†':Õ'Y~­S ÁU«Èã>›Vo¯Æô¢aH:€×¿Ÿ†ÝPš“N³ýñòÀ§à…¤¸hÌŸ;‘Ñ×Q˜“ ßzÝñáØ‘¨ì˜E?|‡µ»ŽÂF#×ÞS>œ€&áÕ@~ÿæcÝ(-r×&Ìþ~ÈÄÀ帛d<ŽÇKOvƒU~:~]øVn; ì*G`ÜÛÃák›Žß}†ôó•ðÞ˜×T»%‡øbï¡Xz¹¶Iѭߟéó‘GPâQÕÈ=zëòŸ±/*.lZ¾úbòØÑh^7”È—âômøâó/‘,ÿ$‡÷lEŠUULú`Vœ;´Z^¿þ·bɯ+ʼnSgŶUó(.H¬ÜzHÄÇ\ÓF÷Õ|C$e—ˆ’Üd1âaˆVƒ'‹¤´4±ø‹1MŠYâÌîRÖɘdYÑõó‡äïm§b…(ÌC{6߬ܥ)QZ L-B{ )yÅâVÌy±cçnqùj¬8{l¯x¬9ÄÇ 6SÞ"ñŸ÷ˆN1×oŠ«N‹E —Š«ñÉbߪï‘Q1âVB¬X¾x8pæ‚&Ÿ¶/1h ’®d*Š–m©i©bÿöõâ—ßvŠ‚‚B±éçÏEÃG^§/Æ‹ôäñõ{¯ˆÆ~)’3ÒÅò9“Dín/ˆÛöŠÓgω«—/‰ㆈ>¯¼)v8$Î]¼"n&Ĉ«ž•õΡòÌvÙÆ]âì©£bhïpñØ;_ŠJM¾zRT£´÷¾úI\º#ömúEæ]wà’ŹâÝþMÄËg‰k7’Å¥³ÇÄO?ý$âR³¥\îOƒ±=9™·Ä¾½{ÄñSQ"6æ²øá³qu YEôN$E¼NJÕÎbÖ÷óÄÖ=Ä™Ó'ÄÄáω±ÓI©™"ö\¤èÛ(@ü¸vŸ‰•”o2‡Ö/o¼5E\‰¿,Þzª­øDöƒ?¼7PLY¸‰Ê‰oÆ?+FO_ šv¢¨H\yɱ¢«P±hý£l!r“¯Qß7ß­Ðê£Y~Zª¯UÆßúP=¸îgÑöI‘NBSãÎ 2µÄ“£¦ˆÈ“gÄŽ5‹$«Õ‡ÎK¹;–)·è7uZ|>~@‹—Drn©(μ.^éÓJ|0óg‘œ–)®œ9(:@ü²ã•-³Þ{T–ý|æl±zývs1J̘ü²˜ôŸÕ‚¼Ä‚/Gˆ½†ˆ»ö‹“gÏ‹L ¿þg¢èúÜq!î¦H½+&½ÚW ÿøG"!ÄÞß¾“òVnÙ/®^:Oýñ®hûÄ›âzJ¾ÔµÄ¢½i7®ˆ‘Oõ¯ŽŸ*=!ânˆµ fÊòc?úB,[½NœŠŠ¿þð…€_[±óÐiÒï´öDsÑwħ‚%¦];/Çs¿á“Dä‰Óbóʲ|ÓÇ^£q)íÞ *»×ûW2¦ñcìß}k–ù§ÏýEœ=sJÌþ˜îaÊ?fêLjïY±lîtú.Žïã¨Ó‘bϾCâjlœˆÜ»YT¡¼ 7’m[ûÝ'âïH97¢E·*múû¶igo<,óòÍÆk׆B1ÿ“Ñ¢ù“#DtL‚¸N÷ÿÂysÅ…©"5á‚èÓ°ªønùf‘ž•-Nì]'‚á,vŸ‰†ü 1ªgéç%fÏ[$¶îÚ#¶l\!H§õÏIÙ bPgˆ/–l§ßEbÎä7Ä“Ã?W“Å­ë—ÄÛÏ·ãf.“y·þld?õK±lÕ*qèÔyQdä¤QMaõ©(Š€" (Š€" Ü{ΠÛ9»cÍ‚Ÿ± Ž?ì ’1aÄÛýé4FÔ®=hñØHŒ{ëMTõáÙ§\Lýq&|ó9íÖ’~CÎ6¯®Y'Î@f51~æLüžíÿ4¼ƒêáä’àO³i>ÛàåNNØqè†tű=Ñæ™±hÝ ¥y©pñ Ī_–À-/ñ§àýé³ðëÖ#ä*NM¨Šri¾|á¹í¦ÁÊÅyÙ(&ù‚ü4ÜÌô•ÌTÆ3ÏÕ—3p§7$ äþ\X@®æèýÄs°3ºÓdæRLúóFn—軀ò•4hÑ m\Q–€•?ÍF×NoÁª$)éV¨„¯.Ä”·Þ@ã&Qeo1Ú´kwÍsÕCC@îÀí[·”ë§óÓoÀ©Jsr?ÖºÁ lññÜexüÁŽT#ðÌ‹oaø’+äº\Bƒ€Ó#Ã1bð³ðu¶Fu?; ð å¢ùDrθ~YÕž&×Ü"T®…çê6‘í¤a ÝvÉ‘2]Ü+¡nm¢£Ïãtl&ÒsKàmMËŠiyééÔKÇ}‚§º´ù/Þ‚É_/¢µ/!#5‰öë³E­ZnX¹÷ú÷l 'r_—G¨ñô&kr ¾y#Þþ¡xîÕahØãKôëÔ.žìϪËå¾înš›:©eCîÙlmmàèK®úäªmØíX›C–ÉÔ­.‹,°µ³G@¹o[ -]èѶ3Þö2š†’¹Y³ Þy¦â¯%-k‘ktú˜A }`O¢ŸzŸ,þˆÜËs‘sVÂ/¯NCZJJJíP·!°ñpm[ÖöÿÍ*ŒÒ×X}>¹ÎSÿÑ 'š•® ZWߦCéºuó –~5í‡ÿŒ’¼ ¤’‡xph&í8†áOwÆ®m[0íǵx´{)¯¤},8°…˜Z¶N»ö"¦µkÔ@A½†hÝ´‘Œ<žŸ‹Ç|„wßwRÃ} sÆüˆï¾›EûDÔ—yFÿ¡F!ö7P…¼(êµlƒ1´Ö¿YÍ@…xcpvxdÔëèÔºå/ÅÄwâêÍ[^$fâ†â" xcÍ‚“7y…Ûå=€öí¯à5š¡¯áã$ÿ=Óu RÒ¥×HxXmØ^½‚ QghÙF Bˆw¹Ÿsp åþžÅZo’K¾Gó^?fZ5 ¡Ôš˜BK®%Ò|ô‹{Ü„„–fäf¦#*ÆîË"øû ÿóƒäƒ»û«oÕÂÊ^H¾yÖNn@Nœ¹€Va-`ç‚~Äó=Û“DZ€wÇ<…5ä9ðP«:¸vñ4~ØÛ1ËÛ /9ßOüúÿ¸E4ûŸIÞ4ÕÂêaؼÍx{p_k6è?t± wm“?Ö’ÃÞ£¿ÙßÄ]DãaÎÒuȤv²qËFºnbÅEGâµÇ»bê쟑HFT©•-=]µ5ÖdøzIàéánÔ€©"´®ÝñW¢°aÍoXµv*·zƒ»5ƒµqèë~e!6Ôi­t­‹nÐî ë†åk7#…vX·'ãÝÚÖN´ÃûõäT­œÖ)s ™tÄ_‹õ«Ãê [Üí3<ÕŽ^ìP:¯!÷¥õì¦ ™étigz«ü"/GžCëøíÝj!;åvnÝ„_—­D²•?~ò8 ¹d°Û nX¨I\±àMë*l/õB~QTP`L'cÚìëãE/y494Jlª¡z°ŸI¦­A¨{*§µ_îŒodÃ{HØ;º×USÚÿ€×hÛÐ sÐG¨qŒÒºðRz ¡ˆÖ÷ûzóø1Ži—®´”ÁŽ^˜P*ÍúµÚ=‡#g/Ò^%p÷¡1®Éæ~*!~äNöôÚŠ‡ ÀÛÕ‡ÖЙzQÛÍžRiÝû㯾ƒqôþ¡qíPxÔÇG³~BZfÉ1 (ÄÑ'Žà·•˰iÇôýä3´i\]®Ÿ/…-í7à¡UÁu[9¢ÓÃc3ÑË×qâÈ^½{cךåèÚ¼.‡‘“)…Æíº£Úσ1|Ì T n‘-êÉx^ƒË†Ï˯Áà‡µ™F™@YÉ7ðÝ€‘øqüسµŒv+½ý)Å´àZŸüg!&~ö-ΟÜA5ZÏüt—¦2v*Ž˜@àç1âј>F³çl’ÑE„µ:<Ü»öAVf~=£>žƒù““ac…Z;ýê£uuäC:?œ_¢ØliÃ7gö,ÐB1  ¤\ì4¼•=y(èÆ­=mž§g¦o[ÚôÊÝÙNµŽ”oþÎ}˜üæTv%c2/É72ÈèÕJ„7j‹¯æ¯ÂG3³pzÿtx¤Â"/£k³Òø±¢Ù>z%€È=«Sµ/¶þøm2Ü ƒx÷öÓrÍ,ïî@›mñÆ^zp°³Â‘ |÷è3¨ä­G“1\B3ßÚOÖ@7E¸š/æÍÄè8´‡¾ƒϾ;Ú”íå©ý(§-êÔ%öOÎÂÐçCj^ÒXfI§îÅš3Nx¿z ÿÔu‚j¼QÝÝ‚5)ãê¬ñcÔ‰ŒD6e δ±ŸÍÐs°¡ÍÊHž®³ môæåΛáÙò>‚ˆÊ @ŸÇžEí*š!Çe8¯UmŠFÊñKË`kç`’]JF<ëâìÊ+‘WÚ 0åüô›þ í¥@Sñ¡8;©1ô¢$ÕËû8и¡!TA°‚1(hÆ^K¶’cŒºô2Œ†¿x°*IÄÕø[l½J¼yÛ†­×ñ™#ëd'Ú@PgÃ/Wìäx7UH/mto-ά ïIÁÒéhy¬Û±Án4´9¿°q† ½´ËJ¼ˆÁoMÃÆCð`ËšRTy¿Ó‹*Ö$ËÙ¸©÷™3õŸ®í¸Gj«#{'ÿ`.|Ü^%ò÷é·1ñ3Äž;Œú­z ¢æAØÓfxrà«ä™c,KùÙÃ!?ã&lh/Óø66"¬A+ôo´ ?ÌƒÔØx<õús²Fae‡ÄsW1âãÞèÙJcÉ lˆs»é ?z¥@ì)Ž_GXqõm†ikïDFr¬ Š€" (Š€" (ŠÀý(gr› êÆKnf vÅ'7HçÀ·¼ë9‡"Úœio Í:ë³mäþÛ徘2ä ü¶ó0â/cîŒÿÐëh\«:гnâÝçë!¹Rkü¸`> ËA“vÃp™66ãàCç:÷îó0vlØ„Ž]»#ØÏMƳytíȤfé®ÏÅF#’Ú€.þ8w6 /_¡£›–¡ï ÷a 3·Ù5~å¢YXµe? é¡Ú–\ØW©OÚ…nßÖõ˜óÓ rñ¦MÛhGk·@?øxÐîì²FóŒaÂÅ#øì‹¯sCNdè9“åW¥*º÷ê…×ú=еÛ÷#66{¶¬Á÷?-A.ÙÞ´©ÝÆyS°eÛ6;yÙyð¯VŸ½;›w@Ôù‹HÉÎEò‘]È5Â͸‹4ʧvõÞpà*Í"Ú¢n£ö°Ûý#Þú`Ö­[ƒÏ¦MÅÂõ;áE³ßEäÖ?gƗزï8™à6d0±!2ËÚÈÌ­’ž>•=œ¥L>æ(S¸"˜\­k‡T‘q4—FØÚŒbµðúX¿è[¬£Ù‹… Z·j&šÒ.åAH¸z3fÎÇ™³'±wÿQ<5êm<Ü©%r’b1oö׈<}Ûif:¢Ë`<Ûï¸gñô³© EyØKgÁ¯Ø° ‡÷ïBbF½>u‚içõÐp4ªY ?/\‚“dðîÛ5 Yãr÷¦]³½°rÙ¯8s-M7Aíš¡´fþ–-_‹¬R{Ô‰¨ /„ÔkŒjÄ#9% >ÕÂhWèùП›•ŽÊÞhÚ¤|üðLÿ>ÈŒFb¦Ö‡Ó±XÙhÔ¾'j‡úáü±=øaÁbœfAÇ 95>Áá¨GK68¤¥$ÃÕÛMh'tš×¦רEãӀſ¬Äþ½»áÑc‡¾D÷“ ¹ÞgÁÆ»2ívß~ôr‡×ãç8ú FýÆÔ>òà—©Yð C}ÚgB笯©Î¤#É3¢Iã†p"xy´ôÅ;ÐM[6‡;ÍЗÐñt…¾^¨^¯9BªUChÃ0,úþkì¦þäšÞ®y4lÚá´{:÷ƒ;ñjE?Øè.¥|ué¾ ðås¤½xð©VõŒ÷¿Qa/>’11ö<~œ3Çé¾Û±7š€‡»¶‚·Ztï†3{Öa㎃8yn£K—N¨L.#)%®ÔÖ&ö÷¥:´ÑËl]éhF+rÏœ^n4 ¤ªJÉ#È µê6B¸õM,^º§ÏœÂžƒÇQ·y{4¬YM²wöôCÓFuA·Ž—tÂÑ£gQ«q;ZV£-I')«UŠ€" (Š€" (Š@…È£öîÓ;ìªÌ‘äË6‚e(¡ £JhêLOcQÒ C!5é&²h ´¯_eiôòƒ.¹eÛйÒ|V°ž—gàøÌjWr­¶*Íì‰ÃíØ_ŒYº²vl^ò&mÖ|æ0ÍvëA—Á¿3Ò’i“/:ÂÊ×—^X“­\dyw6AÆ[—œC†¡«\¯«Ï’çÓšùôŒLév^©R%¹þ›óS+L† Ëæ±Òçº{zùÀÍÂmÓÙhá³É]ÜÜ¥{·´‰e¹By³5¹@»»¹I7m>«<3›t!÷]^«Ë|mh]6»_óúbvíu ×v%´¸˜|—å™í·’hæ’\î=imú¥Èí4ä#|ýë :’,P®{Φs­³ròȽÚ>tö3#©×Å3óü2Àfù k>=lȤÝéåÒÖÇT–äðÙì)äŠÍgAóÙö.Æ3ãe%%´ÙíŸiÏK"¨ÿLÈ ç””yæµ›‡'¼I\/6ÎÇ/ ‰Qù¾—->x,ò¬°ÎŠÏsgøh9HlùÌj[Y¿ÓÔÚ×€ë0»~1A[rçeøŒíbd At\»ló.¤MÉØÞÁ4ŠH6ŸÅÍgx³¼bÚ3€Ç› —îFãZsϧan+-Õp¥³À=Ü\LŠiLÜ"¶.äjï"½Cx ·>¤FüAí þ!¦1Âç’—Z´ÅÔgÄ6‰6I+ ‰q?ÚD͉^zpàµãEĆû[žñ-ùQ“Ø­ï-s{ôq( ?x™ï`Oì¸Ùû€ï5v“g}yÏ<×Ç4Ú©tì_~‘€/Ýc¶´$ÆÀú+ýo ß§Z9Ò‹Ú­õÖg–÷«`jé™CgÜgdfSÝΨT‰6´P”ϱOMM'w{{xÑž|F:ÝÌφ9…Ú@ëë}Ç%¹ßyN_þý3ŠâñZD÷Ÿ­®/©0&©/E@PE@PEàžîj í$“ËߖלAÿÍÁ<ûl8ެ ãî–™g•t#Œ/9ÄÓyæÁõÚbÛñ+èJ›:I—V6Ô´§d-“^‘öËâÝQæKÎ]•‰á,—gâÊKð|ZÙßôð.À/$n—ɲfK½I€Ù¸(+•iVå sÓñù¸·p:ÛU]±dÞb ûd6^êÿ°i“ªòRo«¯¹åËè¿õ²’ E–éc&=Où2æß|¥¿´Ñc5ÌÇdÀ›“Lë{9ê^òõbeó•íó²i÷–Éù9TØ^Ž—©f9ej»_^ŸÍ^'·…;ä×ó•×]—ß²¬n@rŒY}´eþŠÚU^¾ÌÃ÷›^YXŒáŠò[r*Ÿ~Çv³¶$ÛTöõ”½9Ê•Õu5ÊÔ~Zr±È`qiY¿å5g1ÿ4iœÞö¢Ä2,Aôr²MeäpE@PE@P{¸«ÎÅõÍŸØ 5=¸å²á-Ÿ­Ë¥éñzõzY–Åùù(.M=Ó¬'ÏìòLgú­D$¦æ 4,ŒÖy[—yàÕô Çö;<,óÃqùÀFëbr—æhŠ“›ÀÑ5Ëd#A°¾“ÅkH5óGûÔÝß¹¾Ûä“Á®ëÈ/´õ§šÞlë°.z}zÝl±N:k]]6CÆ3Œ‰ñ1¸–p9´ó¶ÕÔ «N›ÄiÆ‚l¿¦É׌ “d †ÛÍ, :N6÷­æ6°²¦À¬t\ßås›¥c‚uÓX›Ù°hŽcY\•dbìSµ|ÁeùÏm:•ÉEÙ˜5ëE†0•±dLR"ûF×Ñ̹âüÜb6WYGîSæ©õQÙqX>Nk—¤`*§×©5É<ͺ•må³LÑê2¶“t¹z[ô¼š[ŽÓû—¹pù[¯ºÖû¼|ºLþÖë+#d2}•¦(Š€" (Š€" (Š€" (w'`EgŠó¿;…;èl˜ß«ð„ªxE@PE@PE@PE@¸€nkßžÜÑ@gãüÆHJJ‚MEeUœ" (Š€" (Š€" (Š€" ܃€î™^¥JøúúJOõŠfÒo3Ð-­ù“'ObÆ `!ƒáUªdE@PE@PE@PE@°$À†¸nO÷éÓGèœni{ëù­(Rè?ÊgâÙóÜÜ\ØÙÙ©µè–Ôµ" (Š€" (Š€" (Š€"pŸt#ÝÝÝÞÞÞw,u›~Çœ*APE@PE@PE@Pþ2·¹¸[ÖTnrÝ2I]+Š€" (Š€" (Š€" (ŠÀï$PÑÚs]Ä] t.X‘_¼^X}ÿ>ÿ–ÿ†6þ¾^ÿçåþoûèÿ»ü?¨ÒÈ’À;>,e©ë¿—€eßY^ÿ-þÛò¤Î?£Ì½ô¾WúŸ¡Ã#ã÷ê÷{óÿQÝþ®zþ¨~U¹ßÛîß›ÿÏÔûï¨ûï¨ã~˜üSô¸]ÿ—ò(®÷×[÷ÃI¹¸ßK•KPE@PE@PE@øK Xÿ¥Ò•pE@PE@PE@PE@¸/Ê@¿/L*“" (Š€" (Š€" (Š€"ð×Pú_ËWIWE@PE@PE@Pî‹€2Ðï “Ê¤(Š€" (Š€" (Š€" üµ”þ×òUÒE@PE@PE@Pû"  ôû¤2)Š€" (Š€" (Š€" (-e ÿµ|•tE@PE@PE@PEà¾(ý¾0©LŠ€" (Š€" (Š€" (ŠÀ_K@è-_%]PE@PE@PE@¸/Ê@¿/L*Ó?€⟮¢ÒOPE@PE@P»°½k*%²á£ý¬­­`eeu¯"zº® ÕÏ*”––V\%Zÿõ:¸}ÿm¬¸1N¬lñ²4ae;­­‰¨1p?Óåm;×Áá–—…ç‡ÞgT©lÇ_©ƒ”-ÉVr•8ü™²þ°SA½­úغ7ÎÇCH¦û³"-óýc­"]î§µ‰uæ*ï0nÛ]Úw?2KKY.ÉÔeÑ÷íAÐßHË|t¯›²™ÓÌåèïfß5Þô·C»½eñß×>{sË~ï•Öfm0r¿™¹ý^Iv~‹ñDJYŽ?»&%OPE@PþÿXÑäõG¯Û´ÐÊ$pö¿ñ‰…•3=W©P/ %ï÷ùy'Ys3-´ÿ/©¥ôÏš ñ ¥ æD‰–Ãàw?|³SÏ­Ôר»©jãÅú´|¾ûý]ñüc·¡ºíöù³õ½ßvýÕù*j×W‘¾ñ¬(ßßwÅî‘\±ºTHšúåþ –—ÅŒù¯fù?Óz¾ŠÆ³^!õl¨sG-_âé™H Êö‡^„šDü]T4fÿnõ弄޷·^ª>E@PE@øó ÜÕ@çêJ %(**–dvöv°³½û¤»öpÈFH¹§H“îÚ,€þóNù¤6ÀD)n%^Ãõɰsñ@õи8Ú¡¸¨%mÝR†ƒ££É /ûPs{½zzIQâcb–•ïÊU\-6¤¾ž.u1*lY—Þ†òßZþÛõ|º¼;Ê¢§-~ˆæpÇÅ4œÜZ½:Üœíµ¾£Bÿ Gs=Éדp3).ΨZN6¦ña©›~mn‡yè¤Ón¦âfb:`gj5ü¥¾$L³ÜéKïýò\uÙ–ß\ŒÃo7JÓt1ë! X|èºÞO}Åîz©³3Ò½uY¹%¬^¾^NTŽ[Húð•±Ù¹™Yˆ¿’8:!¨º?Ýã¶&¾º,QRŒÄ¸$¤¤ÀÝÇUƒ|aG7ª.ƒÒxÜ>&9í¶ÀìÊý™Òëº-¯1â~Xé2JK põÊUääÃÎΆ’8{ø 8¨*ì虥Þz}zYý·ù›˜ ­KŠ‹PT\+kØÛÛïc“‚¦û¾¸¨ˆîùºçµ|lxëM¥äååÓßÐ9ÓnçàWgîÖKTúx(ÈËE~a‘L³wt†‹“ƒ)ŸžGFTPV·ü./ß2¯õt¾./Ÿã,ƒž÷^ù,ËTtÍr¤ a@b| “3áâî…Ð`8Ú—½×O&¹•J¼4îÊ =SŽòòu†Â<ÄÅÅ"»À[kѽåê] ¡ÁÕ`KÂô|&AêBPE@Pþ' ÜÁÚ6Ï$\>…KV 1ÃϼðÚ4®E å‡Eˇ'Íe’­ݽ\a-óg`øáA€Ð¦ø·tU·(Dzy‡ ³! ãèîUxøÙQ@×!¸²p*ªØaûª%Øq,nînò%=­Â2½ýкm{Ô­"u1éÁƪъÑëåºmé…CQn͘Œ‰ßþ‚÷g-ÄÛ¯>ªÚ`0À†t(_®L;˹ŽëiZeg¯u·|–Çÿ8ÿ»í·iÖJãS>½üHÓÓõx–Ézð`ê8ìÛ³#!ñVEÛÂ×?!¡áhס#GT§ö§!òØ dä#¤V]Ô©Q VF/]–¹_}F²­XOª'%1ÇOE‘qåºõ Ð×Cö+§Éò¬]k2¨ÍÔ¿F€dhzšØXŒ—ÛÇ 2‡ø 'ðõôðù+Œ‘>8~á×ô»­ïÊËb½ÌºQqM!ÙÖ»l0àÌÎ#èúü~<ÿhCLþ¦B]¨<çÒÚ¢·Ç®,O2X ×!Ç3]3/—"Ïalïõ°¬Šoö?‹:ÁöZ* ñ%œXžæž\Fg)IsKÖê`Ä<®d‚¬—ãµ8Mž¦‡¹LÙt^6ÂãÆ<3ªõ7Ò(TBâ:4y\žƒ¹ùS~pg»q%×]‚ƒðůWŸ•º,FizýT3Îì>ŽÖ}V`Ü„‡ðæÛd “Y?ç£ÿÙ0Ca>v,ÜŠç'GãƒIÝ1|LWx¸XI½å»&Ê«é¦ß[Ú²VÈÜ©žIgŽ×:ŠòPyîGËvi¹µ%5–íä<Ü}¶Yϧ}3Ò·(ófŒÅÔoט’»ÿ‹? _'J'#Y¿¯8ƒ.¿" î®+3)¿.]Š ×RአÈÇͤ³Ô‰Ú‘rýþ½ï€ÏªÈÞ~Ò{'B ½ ¢Ø{]{Ç•µ»Š ° ØPì]±¢(¢ Ò{Þ{ ½·û=gæäMèî·º‹ÿ;¿ä½÷Μ9sæ™rçÌœ™ûÅ—ó‘ÁÉ °îÃ1éšKÐ)ÔOe5/# ?ÿôvÇ%¢¨´nìƒÃ1áÔ3qê‰Ç#€“#⬆Zl[¿?.ûi9ùh€;:wíÓÎ:' /59"uL×#¿Š«úE]×3–¡sýS4 CÆwjó¦Nèr¤ ††‰?ú:êªéS„®õûF§ù{~\ŽºÓXƒuKÞÇ•w>‡Óo| >ÿ0û3e‰ÄÙl2lÉSÛ4¥Ü„¢ÙQfUŸÄ_ä—¼8âK¾¤ê9×Ý:ó—:&q êmE!^¼w ÞXJ)|¼aU×àžçÞÄŒ)· ÀC×ÛŒš¥°ollllllŽ1Ž  32Zå_Ia>KekâY–=@8Z A+¥B(Z °4•³Ÿðarj0ÒÊ$ÛÅ ÞÞž:Wá”\*î[¿Ï¿öµöoû;î:Ä~:£#˜®óÞKMhÒuq¯Õ É1ÊåÝÙ™xâ§ò-yr .éäÞЪ|‘N®­òåD#ô’®„K¼×2X3ôÖá-”9ƒ *:ÌŒÇ3üs¾ZëLØ|ÿàs)Ý£©³o8 ß§o.Ù€TÐ)Œ¢k›žÉ—*݆I–å'âÌsΧÏPlKù™Z‰ÞN|©+ 3⦸˨jzã휎ÁPQ'­è6bÝòùJ9xÆ5¸ïÚ³áåá _]fmËÎȣʌœù«4[ReÕ6ßPâ5¢¶¦‰«¡*Š©? u©¿Ì›ñSmÒ1x }¨œU‹R¡+›+WÄZ;©[RŽŠ;éÚ‘/ïè@IDATÙAçE´ ćå|ŒlÆtÙY9”ØÍá&¾š‰ïVíÀEG°ü¤ý²œÚâ/}cê<è¢jCR_…q7Ø›DåÙø)^“œKÏyKâG»ªtÛðr÷¡%ŽnßuõJ~aAR…­3;ón¹”îȳ3Ü7¿#œäÒù¾º~ÊõHø¨öJ>Þ¸äÎo1öªr¤ìߊ'g¾®ÚPÛôìgcÖ¨s^#wO ¡Âµç hÖ«.Íd2jq :*K ±{÷^äâz˜+Â#ºbÈ! Ôf“õµÈÎL¥9r6Ê**ՠ΋æ¬]ºuGŸÞ½àE=3X^{~ý¹%µˆŒEfA©JÒ%ÀS’£sAPG*‘tÇ]2 3§NAt…ÌÃ>lœ‡}I·)ݪ¯QfYÙ(-¯”Ñ<½|е{4zÒ|ÑG™/ÊàGËé!+æe,=9 Ù9(-)ç ñh>AyczõTf2TÌÍHGóìMsÈ®g%' !5º`ÔÈ*ÿFù®¯©DJR"2²rPUSÿàôèÑ ]»DP¹ä`ƒù´¤8ì;ÒŠxÓ¤?fà èÝ] Hk*Š‘œšŽº&7Dvë÷$%§Â¿C$¢»E(R+ò’lYµÈ¡œÇà“…sqæ #ÑÄUÈ¢Â|öö+ô÷FuM-ÒããQ§u'¦§ v_ü‚ÎÕñ $§¤S–OâÑ¥bXf>^î¨*)À®Ä)7 #’Ä¿6RY2z»!-%UuM ·Èðš%Ô!#=E•ën]"áNqëª+œ”ô,ÔÔ5" (]ºF!ª{WˆI­ ‚™ˆ vÅ<7#n;¶íúU%;°oôë?ᩆ*¿‚¬Tì‰=€âr®ºy¢+-®4‰+9X€ôŒL¸xù² º£‰ÊOJz."£¢É‡rJÝnvð3ÝnðDH¸J¡*§qñ…!FCGŠY=Ûå*È9ˆ¬ôƒ()®bwëWXç0ôìÝ™&ĺýˆ2H^V÷f壼¨é)ù8t°‚[Jš¸ªéFóUD÷é‚ð0®|RìÒƒ‡]/tŠæÄH!ãó¥P0pd/Dv  ÜœÀгó‰e©fwtì†nÝ;!8È[åì WEãöfâPQ5åô@·Þ‘è7°›j‹hj@^f V! ,#‚P”‡CUzÇtX^éé‡ÐèºÕ !ÂS†NP.&ýæoâx×§ž?OñÕ ‰àkÑŒ¸4|óqn¾q† îªd“ºFÈqˆ2Ø“‰ZË !Áž(¯Þpq‡sçJnEq éØsËUÄŽQÑpwúy°Y5²àà¡ ö!¬OnHOÈBNn%ºßÁC»¡‰fÜûw§"+« {D`а¬+®J’‰Œ*šàÇÇ’^¹*×N¡è7¤;B–¬›,k)£VŽžÚüÔÓÏÆùã†9Àáê9ÍÔ3Ù–T Û{âдº =úĈ!ýiO:‡Xý¼p&‹rܽ¬4ø¨L%M±kpxñ—ïjå¬BÌw†ÊÎñçMÆËÏÜ`úÍ~b >X´Ÿ|³c†÷Gç 5‰"[MöìÙ‹ìüCpqó@WökÆ †¿ÓV…šŠÄî݃nIilrA‡Î]0tè0t ñW umu9RSR“‡ÊêZòåVœ€ôèÙ½¢:«¶âxå ²ô ö2½tÖ1¶tê…aÆ"4€ý¸ôľmq´*'šRʾ{÷Ñ‚(¢Sò¹…Bœl¥2<Ĥ¼º¼XÉŸš™«äìFù‡"<˜ölwyY™ÈÎ+D@h„Ñ/3%‰©ÙˆèÞ›ï‚a𲪻g7R²Ñ £F@XÏèÉÙºªrì‹Ý´ÌníIÉQD¥9)ÖÍCZ \_ÿl‰UYרèf%XÝqU3MªŸÇM¶’sÊH×`½ýÄÝÊoÀwXYZŽ¥Ÿ¼¤é¼&X+·íÓéf&X×ôo/ÝHëõyß[õ¤ª-Í·¦ßz¥ŠûØÜ­úÕWæX×Ü^øÆ*¯Õ¹ÿúY*ÞÐ϶®¾ü¾ƒ©³Þµ Ëj•‡rR­WŸz U¸ÊÛÄÉVJ®d Æúþ³7­H'ütÞû[_þ¸^ñ(LÙn™Â­;xÜz䮿+~³?[jÕ) "Ó¨q´ê*¬fÞ®Ó îm½;±•[XdÕÔJŽ-«®ºÜ*.­°ò“öXuÖùì7``³|7LÃÊÌ϶ž¾ë”f?-¦õö|«¦Á²v¯øZ‡w`uõm¦ýä—Vnz²uÓXMÿá’Õ*ݦêCÖ3nTt¼ö©UMßê¢,ëå'ïmŽëœÎOŽr¤Rnq¯âQ[œg=víxE3h¸E½TÝß÷â×*|φ¥ÖyÇw?Œß/¿oå•T)š«–èð~#­Çž™aýãêÓÕó’UÛU¸¤'u\»kżEÖ wðÿaþ?hÅàqëÌ´^~ág«°T—ÒæEk¬3ðuj—W­}iÅ*‰uß-sÄ›jùbª†G­ñ´u÷ ŸYû)š½+×YçàIëâþ¯Xßø¾uywÅcÖPþßsë×VJ¶´ º†:kˬ»OzÙš@@êÝþ?i}ó}œ"Ù³z‹uǘ˜‡­ÎüÃ#Lo¦õö{¬ ³©ÆúvÎçV8ó|ç5YsŸþκ‘¼N;ã#+§¨ÆÊؽۺœÏÃðеi{®âÉH„¸©§&kÛÒ5VwÜeÝ;å{ë`™Î;Nj® ÕÖgO}¬dülþ.¶ì—²+ÖšzÎ+Öñ*÷[x½²ÿ‹|~Âz쑟¬ârÍ+i×~ëéß´z3]˜0b;Œå2ãñ%V~ë{cõùSŸ[}X^w_ùžu÷Ù¯²,±z·‹cæZŸ¼·Êšs߇ÌëTk8y‡g­¯í±êÅŸ“”j½t÷ûÄç Êy¿’UøO½c¾µ?ñ Î­SÈoåW_]`=vûù¤gß¹~—ÎX£ÎaMÙAkö½“TØù—\f w´AS÷?]²VõM]k*Ú þñ 5óñGÔ=F]dÅçuÝøÃ<6éî­gŸšªîÃÏ»ßJË-Õt”­¬¤Ø*«–§]}yŽ5í΋í)“§Z¹•V~Ê^ë$Ó½ô¹¡´>}eº¢Ã˜K­mqºoß·u…uÓ%µ¿SÿõЬ·­œbNù͸ï¦Ãh.½å!+6­PñOÙ·ö°pÁãÿ)ÖÒµ;›ß7œœ³îŸ|øûæïSŸ³’su{r~?9„ouit´íì¤ÝÖ=×Û:Ý€põ<ñš‡­ŒÝ_d&üj=ñÏë[ÓQ¶Ën}ÄJÈ)Q¼¿{ç~Ò9[—\¨û]ž!Ö ¯½kÍzRÚ î«ä:ë½ot[cìƒ|?¾øø?[… Í—Ýb­ß• ewÔ+yX½ôE;eö;V™£¢š6¥‰í_c–e(ŽŽäÚ[fçøF­.T—æÑœòYÌzût{¾X¸‹¿þ¸Èöñ+30ó­ÏQÁÕ/o/Œ¸æ |ôÕ÷رs'Öüò¦ÞvJòŽkf!ëW¾¸J´ø³7ðÔë_(ÿGf¾‚… ¾Â”ÉgjѸiœ¬:ˆ;¸;žŸ1 =ü æ~ ãM›y3F î§Â-7wŒ¿éiÌ›¿ˆéîÂꟗà¡;®eXîxè5¤sÅÒ-É~KåË`²W{ôÙOã£/¾åþìXûË2<~Ï?É=7½‰¤ŒBu/A‰Û½öGjŠÀ‹/>k.ÖòΚú²izÀÕìEóæâîǸºO÷ð3s°üçåx…«RX‰êê*Äo]… ®¹RÃ’5Û¸˜…O^Nê¸ò¦ç‘ÌÊdU• ­t…xýùxvîûòÀ½zÔ§Ì3ëÙ_?•ä`òåçãôs.Â=<ˆ—_{x Wp BiépõôçÑÛˆÛ¿ÿxà ¼õö»¸úÔãàÍô¢Ÿ7>øR•ÙºU?cú”ÉŠçÔ[fà@jºާïŸdíGnðLþU¼óî{ÊíhªGE¶¡®¾ÞH†Z5ˆ«çÊ—+eß±n)î}òeútÄ»ó`ï¾}XùÓBÜ|ÅùĦZÑÊ1uu÷ ÄiWÜÓ‹àªæ.ôw^xùu\8a²’öbú-ç`ɦt\|Óü¸b%>z}–â1ýÞ¿cþOëÕ½›‹®?ˆÛ§}ï|þ³ògCVWùi{'Ç–l©A×qÝñòggcòÝIJyÏFìŠÍa wD è†ß»»¶ÿ;Ö_‡f  ž»'öÇé:#œ¥õ¸ÐjĬÐùaîÌs°iÃ$laÜ÷Þ=}£ÝðêÇ»°~Cyˆ‰-ë;QË=PÊÃÒêpÑ‹£qÛ-Ý|øÖ>Zd)ºÔ]ûñÊÙËñæšBô»´–,¼?/¸7ôðEWös“ÒðÚÄïñ:ó2sþ¥ØSð¾ûî4„¡·Ü¼»÷ålšTó ²B®O¦|–‰/¦Å"•fù¾ºËhà¡aó‘‰_i¾^SÛ Ò•v *O5%ÅØ¶üÒÀU¿„hëµÌLŒÍ*~z6~x,§ îa#¢X#´«**Ä×/®Âœ¥¹ï†Þ;}6‘g$x0EmzìéEsîCùøäñ1í£TÜ=÷Ll͹«7\Ž1=ÜðøŒ X».IcMë%ˆ_„OtÜùÌpœ<"åñ%xíæµÈ(õÀ3ÏÁ §¡˜åµìóX”T²ãj¨Ä¢×W`Ê«û:ª~{~Yx>&Œñ¬׷â÷7àPlc¿A Ò!½óE—0BåÙè8ØRêtÝ^¼={à5Ö©Ã}ݵÎAb&¤Kß··žtuf?zƨüáëÍ•ñ–.<é×µwîuð¹ø>X&)ñ½÷î›ñ ïûãíyß`ùßá†saù×oãæé¯"­ïGZÆÐ ‚®QåAîš;õ`ÿØØØØØØühO÷>b¾Œò"{âÌ}nz~zùkgÚ]·âò Ïæ0®Õ‡2°îÖiøböOxàæk0¼O$®úûíÈÉÉEIy9**ª¨xê´ºÓl™wÕÅÙøéû9ÊïöGžÇ½wß…¾.ð®ÏÇKïRù¦²m“~eÒN¼2{‹æãøÝ°vvŒ‰“FDRºjÒäætË+«àêNs\:ïwÂdÄ#\CP¸ÑËË'×ßÄxyy(¦ykyE,šn*×Á—§Èk¥DN5×ïÌ«ñÒ˳1 k6ôéŒÏ¾[FßPkiŠœŽåK^RtÎ|÷ÝyÂü=1ñ„±8ç²*=õTÊyòÝ¥“Æ ‰¦ðùù°¸R¹ÜE4ÇÎGX¤z¤Ê¾xü…÷qÝßN£¡4Oôõ T{F…VJ¤ Œ;ão˜ûT2îzLc»m-ä߸þ‚Iž‚‹.» ?/~ I‹Ë0ö”³0鬱†\v=²²³QRZŠŠÊJX®¦Êøò¹A4u¿âê+1í…i“Ù ç^rFöì¨âç§î‡W·( 3ž¢]ÒI¹É^JqþÜ2`5ÖãPa®zîØ·ŠŠ¡¬¼ ¢bðèì×F³uí¨ÌÒäWÌÛ]¹íâÄ3ÏÆ…»Vãçmï ÷ˆ“pÇ]·€õX÷ý<,ˆeŒÎãñ÷I7ଆ nd r(Ë#/|Œï~æþÛ Oeùêrzâí/çn$!«E@H˜#9¦§«„z–=¯¹¨AŸS£qùäÓÑ««/úõ Fþ柰5®i‰1aD$ξêDd¤DYY*Êk¨°º¢“«j›<©¨è:£”9Ð{1?47tüpšVDͰ+·®¾ ~½¼Ñ7Õr©Q9'’<¨F¸£‚òæþ^èBŽQ—Eá‘{O@ïîTÆ-t¤©yd$–|q=ª™¯ÝtyJ2f뙉™ø~N".;Ôé+ň ¥ôjϸՀØMqøœ/Mî‡Qz{‚à‘›–ŸSÑóÇEŒÅu׆kCJ¸Ýâ¹…™pã– 2â3±~ñAœ@wÊãöƒê„ öÒ!%!'GÃ?Ä•œL6¥îžv."¹%Æ»öìÞ™€¡WôÆ?Ÿû¢B]±Ào1®Èe=ç)¬kÅüzÄÎÏóØ’pÁ#pþţؿqß5û°-[6`ÿâ ¤ß\Œ°˜p…ý‘4&³ßßy¯¼œè.îžÛoÁ]wÝŠˆW,Zw°ÿ[š¿ÏFuP­RH¥‡ûCSïÔu¥*^k#·ƒÔ©û‚ôxöÞ³x‚EMæ–—ŽØ³â ãT jkeRÌWM$ÈžvÙ~!fÛeÓñÞk/áóŸÓ> žu2§{@¾UüÕÎ[YT¿Ë¶+Û´sçäZ=’öíŧ›é2¡ÜNPÀþ²’§Œ÷‰½sÆ-3 l«g}©¢õ”­Ü^âÊÉC;õ¤ßn¬Ý²yU—£sÏa¸íÖP䢜øVñ4Ï]'ÜØdö'+)žÊú¯Œ× ´ØQ¼*Ù^:EŸ¬]„íœÜ+«>a>ÒOI6o Þ:³¡\AN ~^ö¡ºŸöÒó¸û޹m¨EûðÆg?r…1b»OKÆÜ×)ºÙ_ *tˆìO¿$låv¬âª3áÇmAâÆ]þÌzî ìŠî®øaÝ4B{^}é9 çÄåÝü1ÿ‡Mì«QÏIÌš’¬_!”À#Ï߇«¯øüYÞ åøø‡ë·ð5ìè6ô ¶}HžÌde{ùSŒìc£m5ŽñLó!62çØN¹j³f³7AÒÞn܃(C{qåü¼PjÊóñÁËÏà¾gæjoþ?fŒ¾çj|ò«û£kôâ*† ¡”sîN­SÓAødÔéyúÕxuÚˆ‰ @r¼óú ˜·à#ôí€eo>ƒàƼûâsxêwâI'ªÛӡr´jå L& òðñ›/5¯zK„1&¨x¨à®G‡Lf%_öµP) ëÜ5BÓq`,dõÌÇÃÊ 2\)ç’¦ìí݇ÊMõA,ÌVáÖ}‰ >Ôƒ5ñèÈýÿ#Õ ?§E¸b¨ÈÓ0z÷ òÛÆé›ì‰µàÜw>üN9÷jHàÞøøر};vÆ& 557Íú gœ8ÜÞÔ(+9”Ê¡0Ê}ù¡\|õÑÛ˜|ÿtyTnìx£¼;Çê]óª ³2øwvu•úÑ—*7îoWÃA®‹»FŒ?'uyk6aêݸ:Ü-SŸÅ®<t¥"O? ¡H* 4¦V”4«¿&Å Öî_×uH~ÎJ—ƒ§Ÿ?É¥ï+•¢žû9ÂUt<}ƒ¹w5Š{ᛌà›ë…øjZNÑð\ÖMÁɘˆT˜ã*àM%¦†“N«¾Y&íAÕÁžEÞë~e€ûÞë©Ø¶=®QüþÊSÌ?æDÓ6*UÕTÂŽ愃ÅÄÕfG‚¢ØVqµ­’­Ì_öÚÒ…… co7Ø]©”VV5y”ÅvÓahz;&K¤Œ:tî@ˆ]^Å•N2åU`ÞßV!)zqª'¢§ÎâAmÜIÀÁÖB6Só‹ Á€ÁÑñ7˜qê‰x{¥f¤–¶#rÎÁžõqø‰«ï^Ñ]"¨ø+§ã›ýÁ¥Ü¯»ò­XNtÁèã{B¶è‹œrÐY=÷ 71÷EÄpÀ ݯ4ÉÆ\……NGŠ©†Ÿ0£ª ±J^üÐ&¼›[E5ÜQ½}Á3ÞæuœàÐÅ]Í=Ížðóó’Å`{“-<9YæÏó¤˜C¹:‡“Û„ôe üĤ‹W鸯šûÚuÿÆýÓ܃îÏ”êX+*YŸèZÐi¹Süioˆ?'ÎKö©«ÕlDEÇ(?`ˆ`ïæuxa>gœŒÅÊæã×_¾Æö «MéêÅxrZ8þIËž²ÔÍøpu5‚úŽÀ²ŸbÝ¢lY»JÑï^Š)Tà)S0~hObÁÉ †ç$áÕÙ3ðä\Qž£±`ù›8idoÇ…õAÖ~e®«¬RËÉYfR#€hžlÎ\ÕTë¼ÃãnãIñºeƒ{°õ˜ÅY®â’J–¤vsŸžŠG ‹OÄœNök7ÐZ#/iž™þ(^ût‰ïãØÆÄ¹ñ›Ž<êI•&NJÕÑjƒÎ§žôŸ˜Ê“ï•ó R_/N€˜œsÄ×—õIòïÊ3 ~>þÐí ,¤“ŽÏ gyÿ4p’ÅrÑ‚ôêÑ ìb” ï™ö)ä ûqG©Y*Üþ±°°°°°8öø] ºc¼Ð¬LH¶Í@Á(ªâWT¤•<¹¯4ƒ˜NáüFkv®_¡•sŸaøô«qΉ£°oíbL¸€kCïè1G`ŽlqI‘ºå1KLËái4#ò7+uülï~<¬ˆ+OÃ|±ú§h†®AWa+Êy°ÓÖåå¼;Í›çá”ã!~ó2Œ_³–ã§–ì› úQÏîM?9”ó@|¸`.8u$w¯ÃØ“ÖQ t REþ‹£ŠË¡ ²h:Ú¬ärXÊŒ‰bÆñ§rù…ò¹"1†óf*Ü5üV1ŒóöÕƒ·~Ç_‚7çýÝ;‡rµž|ù îƒEˆŽ‰âª]2ûÒ|ƒ{­P·¬¨ˆb®òBÓûm›6"0j ?NýKÌÜÔ8Ìzäa¼BË>LŸŠ·Ž»yÈJuêjZš±Û~q(çáx÷ËpñY㑺w-Ž› 'B×™qn‹¹åA4ÍHœ"‹«§bVR‘RŽƒRB¥œ;•9ѹºöŒw–ïÆûÔ!x‰û÷à­¿ÀÛ³Açn½1íŽËÔ@VøÀe‹…$.8J¦#‡…4;^1…Ÿ»C/ Õr.ŸL.îªNèÆŽ¤Ý‰xiK!î¹ÿdÄÄè ”f”H#¹¥ê†ÒRGÙQi6Ÿºbb*5™iŒ² ÜôÉ)w\WÑò ƒ *y›[@ üi / ’nãe;e™q»ŒÜóˆ3ÖÙ&¥ ò»aŒjÑÔßÑQn© µ.œÎ`e•’¬r5´Œi |Þ ÷tÚz£C¥ v-®õ“Ã߃P{°þˆ+,ÈRW5ÛÄ "e¦Üþ͘Ëãºöì…,ÀøÍÇoàÂ+/D c°4a^œ½Áñ0Éh¸&îÅ"þ_uõMò¡å’önÁœgÂë_­ÆØ ®ÅSÜ"tÚØÁÍñüÁ³Ásñxxcº£ÏªArz²¦éá*¢Í]aIÞýö]œ8¼·Ze—¬••–ð ÃN¨-LG‰ƒóÓçâ’ÓÇñ$û&v.¨­,'~}Á¥ó¿~C)ç#Ο„¦MÁÈ~±è‹÷qý–íl¸7ó¨´ø¹Ã÷qáÉ£à¾P>ÉYUNKW¼¦ÛçáíX„>‚8…ttEœDpLpk+« ¢–þ :÷Ïù:ž|§I]­®(eš¾ó󤊣ïdüÇ–ž ¢x±¡ªþ\ÅDKœéÀØ.LT‘CB%5<4N”sqÞž:O‡×,nÿÚØØØØØüuhÑ4’'QXÅ­_³ß.\ÈýªßâóO?ÅÒ«QEqâ5ãUøK–á@r&2’bñÓR1ñN8k:òÚC¹êyÌéÑ“+¿ÞnM´|æèO\GýhŸÀ0tï.ë6ÀÂÅßaùúíØ·k3V­Ú¨üœmŽ•WÒR±â‡%X½òg¼ÿÎûøqñ÷*äÌžÝiòêÉ•é|õÜïô±ˆîÞM¥›A³|qbípFáEF”‰²CjÍy ä”o_jÙŽxˆv˜æK\Çj‹ã¹:îÅÛ,à4pÀÖ™f¾§‰7f¿÷!~X±‘«â4ݰO™EM:lœ _°~/¿9\Oß„‡‡©o”oÜÈ}®Õ4eç ”ú£Ãé«þ5~-W®¾­ýtúEÃ[Ÿ|ä&&&"!1¦³º,Î:e0BC™ß”PIGsÍøÔ,žzÍ­y ¸rƒÆƒ<…Û•þiÚë‡Æ5ÑL]¹´8ì—SšSx:u)•âÑT¥‡˜kW¬ÄÏ«Öc';–¯ä€›Î…ŸEså©Ó+—|‰•;S0tÌD\wÃM¸þÊ¿á,‡®Ð(¼³k[Ëç‘tõ•“÷ëÚ=Jßn[Œ?¯R_عc+–~;OùŸx\~;›õÍ œ][Ê’ãu·ëD±ì@¥·æPOßÎE6M­—-ØE‹„ t"]£‚¹ê[ÅݦÀxšCGFuàÉîî(Ì:ˆRªÁ¢Å€42• “-’fmE5J6×sÅÒ‘Ñaè@Ź’ yɲRGùÌ@ÞOÅUÂÒƒñ%ØÊ"Ñ£OUçžáp¦µ÷û ,új Ryª|.÷Í~ùúøiy2ºÅDr·?¿íþO…Oã.sâÖ‘«Í\NÜ») ,;ÖgãLRòlDɉKÀÔ!`ÄàùØŸP¤Hõ§¯¿#o‰Ëg÷g›Ó+ˆjØ)~]y)6.ÜK{€`Œ?¥/:hÅÈÀLTe»«¾ß…Ý{2¸§?ön)A?¶®Ö ÑI;q…µ Õ™5%ÈHÈC Û[hx$ïICjÒ!N‚˜ú!Ê–`.©¨]N~âA_7âG½´Pè2—– ذl?$"'9[V$pA=Â#’fÏâUSÝ·ýQ“KЦ…Júq9ÙYHNJþðùÇï+?÷“y;Ow4ædeõ²{ÏìÙ‹8~%á­Y+å<âø³°håzœ9f4-Îâ¾íس{7öÆRÎ=ÛñÚ³S“™ŠÐsþ¥¿lÄécû‘·…]káÂ!c•r÷0 êÝ•‡r°tñBÌûì ÄgB'*öcÏ=OÉòùÂX¶j36þò ¾ûb–ò»lh?~!œ_ZˆTϨÛÅ<$Ò¢ÀýV8ϯ r¿c·Kä£KT7 ;[·³øPÊÉÐál‡ÞÈH>€½{S¸’]ÇOzf)^zöT-²Õ'“âØõ°ŸrQ_Ð=é!$ÆÅ¡‚Ö:v„??–¸“|qi쇥9¯D|w¹š™Ð”m2âüƒÃÑ)¼›ºÿfÑ·X»u7vmYu¶)?9A_&©:FDàªáÊ ñL³œª"WÎÓ÷³\’Ô˜I×ý’9cÁLxÈ– Ç$ƒñcESçøw@ß™ôMßÀÖ=‰ÈÏNÁš•?êDNA¯.zKWéIZê‘&²mlllllþ2pÓŽã)îú bkÏZÇ)Ýzü)£‚Vÿ;’Ò­Ø-+ZùµÐÄX?¬ß£øï^»ø4šßîôE·~ÉÇG¡;ßJÌÒ§¸?ÇߎH×wâeÖêí¿+¿="‡hÖÜ«±ªØº÷œ>Šîž¼.çM'îüå(ñ‚­Í±YŠÿç/>ªéºœn%–+¿¸­Ž‰ÕÂU{µß¶•Ö£üÚá9ЊÏ,µêJs¬§î¹®pÏÖäB«(ã׿ð·ç¯Q|9àä8ßqË ¢ú¡®ÊútvëSƒ[ÊÖès&Y÷$*Ú†ÊBkÖ×4óº{ÁZµv¥u®:5¾u™>«w¤ªøÙ‰;¬S}[Ó¼±x¿pWa½1íÆV|M\¹Þú"Oq¯«±¼Þrzñ°Qcx2¹ƒ×Ћ¬±: “/*Ö*ͦÊë™{ÎQ¼O»õ«¸BŸNßPSf}ýÎsí¦9äÜÉÖÞd}âøŽ-õâ—]ñš§ã„mõÀ“&Ïô·–¼ù%yþÓêÏ“¿‡ð¿Oü–SÚ]yÿÊkk-9Ô¿ )ÑšÄÓ½Á°<ñûÞËÿ@uò÷Ö+Sëu_-'œÀÿŒ›^ÌÓË­¹w¾Åç¬Áäw¼Š7ÝšÀ{9~ÖKT¼}«Öðùþ?mmتOÐÎOI³nâ©åÀÖŸmQtµÅEÖG<µ|˜:Iþ~«'e¡äý‡õî§»Y.ÕÖÂ×XcxR< §ç?dã ︇÷·Y‹—I½¨³¾|ö>_o]sÉ—VN¡|Û€_O˜À R²Oµº1-‘SòzÛä…,s©ë Öªù+¬Ë0þ’—­Ñ¤é«N®¿ÖzíMÖúZëÓÇ¥_ù›uë­_Yª®4YŸN¿›¬óÆ¿kå–Kýi²–¼ñý.·ÎðŽ•”«åÚ¹|£u*×YöO·ÇIóËöëÇ_âK\K;l}Šû¤…µhÝNMåø:ÅýžTX?÷2˜:ï¸~ñÓF_­ÕÏ¿ê o¥éSÆ[蔬ï>LØ–FÝeåòä}qU%Ös“F–žsúoý°IÑÆo]fQ¥?œ6ôdë—-ú+üÜ…µäó7§qÄ{þ½ÅŠ×¯ë~°NèÒ/Ò]|Ç ªXö¥ÉW;tg?h8¾‚°nél‡íÐÐïîéºÿV‰þæO½õã¯QvŒ»…§¸ëSè7ýü5áò_ûÀ\«¶¡Þúþ½Ùš×Ä«¬„<}jþwo;üÐÛ:£OÜ_½@Ú•ÈjmIÐm«¬óG´Ÿ§÷¬p|QÀ|9¥É>Åý7ËÖ&°°°°°8và:G{N–”´‡®ý0ïã¸ÞæOÇJ”¬67Ôñ;µ^ˆ Cd¯(ìß¹kÖmTß±nàªdTtœxÒD Ø[18öTlúe V®ß†ªz > Qá~r¶¶8‘Ùþ¡ÜS< Ñ]Äd›;9¹¿yÊÅXM~Õ–;¿<ÑHŽG“O(B¸ÕÅݹ·=‡^gå fÄ05Jê=ô~G|)V­ßÊÓƒ-ÆŠ\1ÊLN@…K :óûÁâ:Þy³ ÷ÀvE¿›+.¤s|òáÛ¨%]_$.fÔÉxã«m¸–+Ù™òßJîûåiä1ƒG <Ä4)½÷É—pâ9W`wl ‹¸KÃhnÜ«ï@î±÷_Îÿô}®¦»aDª±Æ9ÊJ‹G\ôÆW߉CNF:MŽËJiJÊVw~C;ªW F>QŽýܯ?é®'5èdäqå¶‚ß‹4niFb&¿‹ý1vÜñÐK¯p™¬š ºð”ú“οoô9—ß²ÎïÈë_7ÖÉ‹¯¿{Á†MÛø]i® ò=Ù³Ê)'³^„+VáQ}ñÑ;o¢É;ˆõ0D³o¯95UdóÐSFq¾;·"xñp,ZXW‚_¬C—¾]1zl/®¸òãw½zã©økqþ†dîÛmD§á芃Y…(«qÁàzïiÌèþX¾`,?téÀ=În¸éÉKsÒ~~›»‚ßµBŸþùmöJdd” ç݆ºõïƒeß]&ا·.»‘0yÙ%¸¸Œsê¥÷ Á \†Ñg CJòA¸Åm \ ‰ÁàѽX.Þ¸ðöK0䤡<¹?‡Óqß6§û œûÔ‡íI>®8î¼ã±ˆß îÐ-áÄ„+™œ£ôÁGK®C ‰ë×·ƒ “ŸÌøt|»¤Ožê`´²²Zøúð)/ž&&¶$#9øJöÙºK<æ@ö±Êö ©ßb>+ÙQ~ä/uÉK>­ÅºUÓö«)AU²Jt‘UN„Y«9QTY!}¹pÂÈ ¾4ÿç2¶:lOöÇKýäR.ÏP`ý]ÑQ°¢pJ>dx½lC Mu5XñöFÌø.Ÿ•‡s/îO}ÊÉx:F$Ïò¼¼våJ,¡Úøê+'â¸áyöœi@*!¤“4=™Ùœ[̳£èÉ/ùÔ¥+¿Ò!“mlE0[ $ì·ä7ñ_YµÅÇB¿4B;!ö ¾­SÆÑ:Û¶må¶ÄíYG§¿‚{Ÿ{‹Ÿ¾ü¸Ëù}gâØWcÃGGNyhx9y¶s+ƒ&Œ¸ò€5?ÿ€f 0Q"ô`Ž7®Þé!PkeJ" ­¢ãÕËÛ¡Pq0¥:-ÃMÑiY´bõ{Ó=Œ™‘ƒC9ž°l†lÂÛç{ÃãH~F.‘I¦ÔÎÓlÆ‹ ¥ã #!R˜ðz8ï#!þ²÷RË+ñÌw…_K˜ì•ÔÏcg:.ã#n{8ËçAåÜ8‹¾âʉ__½R$ƒuY Ôé¶N[V}øoœÁã_É·ð•µ$àÆU9þ§ù9§mBÇVð0®0¯_¾¼\E%Oóàª7‹’‡\Õ‹IŒôac’_9)Üß8—°ºâÆ0¥J 8Êfò¯Ò¡¿œœîÅ•]/*ô5r˜'*˜–ùd cçx†—bÇL«"×uI’häœxîÅ}ð\õ–”ëùù±zú»J¨5[2ñÄï9yð5)«†Õ1m9¶‚þçcn§xŒ! ƒc1¡¶ÝQQÿ ¨J>d½íj¨ %u§­k®-ýüo" m•ÿGWh.\q7ŸFû7Sû“£µ¬¼;'l×'g4ì{c[A?öËÐ΀À1ˆ€³òn+YÇ`Ú"ÛØØØØØØü˜³¿þÖ6K#!`+åGBÆö·°°°°°°ø¿‹ÀÑO#ú¿‹‹s?[AÿSá¶³°°°°°°°°°°°°h[AoÛ×FÀFÀFÀFÀFÀFÀFÀFÀFÀFÀFÀFÀFàOEÀVÐÿT¸íÄlllllllllllllÚGÀVÐÛÇÅöµ°°°°°°°°°°°°øS°ô?n;1ö°ôöq±}mllllllllllllþTŽút˲þTaìÄllllllll~—ß&²)llllŽ9Žª Ûÿ1Wž¶À666666666666Ç(GUÐe½©©éÍÚ±+¶LŒØÖ ÿÝò³Ëà¿‹ÿ¿šúÿµòú¿–ßµ>ëôR¾âþŠïÿ¥º{,ãìêê #ÿ±^ßmùmlllZ#p˜‚.ÓéïÞ½{÷î…ŸŸŸ(ü ­áøï>™‹LŠ˜—¯ùŸ[&R‚¿àþG–)ë?7wÿ^jÇ‚¬Rf"§”™éÃLÛqÆßùÞ™¦m¸Šäø9 vÆÇÜ›k[&=ãoèä*ÎÈà|nhÚöÎ|LÎ~&žáeøË³8G?µüštM¸y6íù;ó6÷æ*ñœïÛò1Ïrý=i á'WqÎñL˜ àó³ó½„›ø†Öù*>>ª|¥|œË·mþMX[ÿ-ÏL£É©ük‘HmdÉ—È(mU&@¥om_)>¼o=bG 0i I; @a+²zÅR0wð>Rü£$}XáýŸà%ÌeÒX&mg#`#`#`#ðXô>@IDAT×DਠºdY^(楢÷ÉF,/s*Ž “„7›a;½Øþ¿ sq…1ì–4”bê`Øœ–H°ÿ¬“´\ ³ënD455rñÇ”'ù|É ¡¬¬L Îä¬0Ä—{EqBk傽3¦¬D~WW½Úfx´‡“JWò*{­&¾ø›Ë´=úöü„‡ƒ››NSh,òj"nªÜ(ãÚIš.¬#îînÌ'T5;‹iý»©),ÈL&¤¤ Ä‚AÊDò&X:;¡•26àêÈŸ›ÂœÂпAdQ2¶ŽçÌãH÷*Óõ ž,]òj–’”r†¯;4Kp–ôLÙ‰¯‹Õ®“òS%Õ~¨äƒqÝYG„ƒÔ§FæEATuLžùß,`»\þóžZfIÖE•—Ôa_%ÇQg^¤Ž4çÅѾ »ÿ¼ô¿ÍÑäOQJá;ê“øKýüeERp7}C[®­x¨ã¶êëXXïTÐ\YÛØêsKŸ/íN¿s”RžN’˜rtηñs"ûón ß‘¹%¯²‚.J˜¬2‹“<˜|4¿{Õ›ê_÷¶ÅF§É÷‹‡ ,¶eéoœ0Vü?”ÙCÞ+tÆ Iú ç÷›ô¡-eëHƒ˜¾ÕäÙÒüHeÒ–4…_3/G™È³¬ K˜à,WU›X¡\\Ù×9õ·’Fsüv¥Ðžÿ²,GáÕ^³ÎiµGkûÙØØØ»ü¦‚Þ’53ä•· |š—ž(JòbWŽaJ£¾Ôœ]Ë NÒâ§"h.äÑ¢JÈÀDÂd•È FZóuNÃ9MgÞí½ØLxK=’äª+ÊQSW/oøz{5çÅÄiNÓñ²WÏ‚Kso$“JxíÙž bxJ¸ Œ}}}ÕUáKœ=9oâ ©Ù<=8¨%X&<¸r(ô*–JQ#ÏªŠ Ôq€çááÅA¼§€¿-y/ÁÓuµÕ¨®ª«»‡J[N#«3½‘S3k)CWfDQnlk =R å¹EF÷ÈüÚÊÖ‚KÛô”䂫ՈʊJÔsRÁ“åäåéÑŒÿo¥ÓVçg™Ü2?ƒ– 9]ÞÈ„‰'1—<78òWSU‰ZÖ7âèCÅÉ™g3ò4uÄYFgÞªm‘oIY)8|U²¸»éÃÏÈTóeÙW”–°ŒyvWÚ¼‰5QÉ8ó524§ï¸qö7mQâ·Ü ¡¤¥ËÁb9VTV0¯–JÏÓÝ奨«çJŽ·/¼½<š“8RúK“{Mnh[ËÓÒ¾ý|­ý4)/)7q’‚ÐÞÊÓá'²Ø.ÊÙ¾Yl”݇íK&§ÔÐ\cÛŒƒÎ¿Ä7¼O»5fmÃM<áÑ6Lñ¹q8Á_0—x®T”=Di¢â m_¦ ?ÓGˆÜÎñ…NG0Ô!ÇÄ“pqŠFb^kxàT-WâÝ=½Yo¹Å¦º U5µTØ<áǺ¥È„R„3Žž&]ãß6-8"‰íÄ/áá_’R80ÌL€é¨Òg ½#ŽôloâWϺ¨&ŠH(mPú$‹0âߊÿoÈ! +d$ºf¹L<§¼K¸3ïVX^)Šì¿…ŸôÏΊ¢#®ðgÒ29kê³s˜0ž¢¤ ½‹h‘T˜yÐr)ÆmxËD¢âMl¤ý Ÿ††:šM—Ÿô}>ê}âœ/ÃG®&rod–{ãT8yZN}˜Xx{qÒ²KÝ•k[þÂKüt½™XžŽ|:§)é˜tIμ貖 ZóŽl2isÌàKkÓªxLGÊCœà,¼ åÏpgX¥þIÛkëLñײK½c›å¿Lì;ËR&ý edrPâš<¾‡ûµô-miMš&®}µ°°°øk!àö$]Û,™—AjjªzÉtèÀ}uՈݹ ÛvþŠôì†v@ Ÿ(!rÓ±qÓfìOHF£«ÂÂùÔ«§ò"6üDágžÛ¦+/(Q|\É3%nynBRZ<ý@¥ÕÅ…ÙØ¸q#b÷Å¡¤º :vuõ"~Íé‘W“y òjœÜÉ WdP3æBCÕ€Aäãdƒeß¾r1f¾ü,¿HÄôŠâKÕ1à'-¿^ÉáCsš"¿$¥ÂåÞ‘¨ø‹MÓ’¦ø?QÎÅdµ‚ʵ¼ÈEñf dg`ÛæXµz¶nß…Ôô,”UTǸx{¸ #% I©°Ü½i²ç«¾?|ö>®™|;Â{ ¾=¨æqE[­Šè¼št==Ý¿ /<; ©Åõè? ü¨°ÈÀHò&2›ÁŒÄ1y{q¢œ3Ad¥%aãúu”q-vüºY9y¨¬©ƒe¤â¬°&½L$|šË‡y4²IY´NOôÁrH9ñNðruó@cÕA|3ï LºåÄŒ9½ºweEàêÃK•éë) z«òQõÅÁSŠI≙´œ’+f¦b6]Ž6")%ÉIIHæ5¿à'pX~œð„«Õ€MË㪫®C]PO Ð^,±H4ä_9I„ÎÈ&W&²‰ìžTŒŠó2ðù[Ïá«з:†É W剅´‘¦Ú*¬üîcÌü`:w鉞Qœ¯Ðy7鑵Î;ë´+Ë(~ïvlÞ¾éiHJLBJJ öÅîCyU÷º†±IýÔmHÉH„X<=½Pq(óÞœ‰[þù.Æ9Ý:`å’¯ðÔsï ¢O_ôèÉĸRER'dâGÊÑ{áiœäÛ¹,̳*[^_­òªÃMl]ÄOþÅÇÔ•cëáÞý HOKSyLNN†ôe±{v£¬žò5Tãë·_Â-÷ÎÃØSÆ¢{ç°f9u­p”‰£< & ONŒ0Q•7‘-¹¥N;ê± —¼Ë䥔GKþLÙ· ¾ } :ýÊÒB8‡C¥¬‹´æðT+œƒ’’b*œ“‘””ÂÿÄŧÁ/0Aì”,-uMYQb­úZ¬]<—]ÿw„ôŽ!1ÑÈØ·ÏN9õ¡Ø·'Û/'ÿX”]Z.UL×ò–¼ª6Ü F1ô:¶.W¹7x‰•HeI!¶°ÏßͺZP\pš÷{Qùš¶ƒ´”D¤f䱿äƒ7ØUó=‘ƒ„ø$—×pu”ï–ÂW “ñŽT&Îr¨vDZ™UqñL9M%·”5o¤ì]©¨ÕVU 91™¹ðô €'²$¾ú'¼‹$q†¯ôAåååêÝDE·ûwoæ­;‘•{ÁaðóQJdnZ‚~÷Æ'¢‘ýxX¨$®ß}ä«ó)¼õûXÕ’ƒ¹ˆOHDQYµ2ñöörGANæÎœí©EèÝ·/ÂXgÌd‡ÈfòjÚ‚±(jÕ¾¨ût®^³Üʦáý·^Âë“Ð7¦:uFMu 'öÊáÍ÷›/Ë*/#6mER2ûÖd¾ÇxÍæ»£†í4 («à.|±Í'‘¡%]SŽÀÁ¼lÖõTÖ5²?ö焺'Š 3ðÙoâëå;0`È tš1^ò/8ËD€XK©ö*åǾ|ÿ¯;°eÇ.¤¤eÂ; !A~ÊR©‡Ãßá"[qAe‰GYu½’ŲfÆãçÅ=¯ÃiãG¡Sh0y±/wà*øš²þ|¢,*´M=eš —ú!‡ÉÊ»)::Z¢+§ãš'ûj#`#`#`#p,#ð;VÐåEÄAJS=6-þs¿]©òûìkŸà’³N@]iÖ,ýO¿þ•òŸúì;è×;Š/hOyÒÉ`A+fd£|Ýòå"æ»2–Ð+2Xt#R>¨`&ýºSŸž£xÞþèóøûç!ȳ»7þ‚»™¥üϹi† ˆá JË,º2Ïczî¢ÜrP"+2#ïÉqæå(ƒå(¨2Ù¥²* ¾±Q’›Š-[6càIW¨¡«%§Øs%„“ ²"Céå)y’ŒdUžÕŠ(e|‰ÊLºõbU«ÉCfü.¼×ƒ^4¹º"/ióæˆtnHÞ»¯={–î8üÄÖ9.£¢ðógsðòWkðÒ' Ñ#ª+W9«áËAܹç^€àÊFéøbo–—8ÅßCÌ–-®¶á§µÑÙ5W^Aå–¸ÈjºäU̧9JP¤Fâ¢VèùìNL]9ØCcvoY‡ûn¼ ™ ÌÖ?Ÿ.þ#ûtSù”ES“¬f±>¨ò±X>õZ6/™Œú W†d`iÒó ‚(ƒn5i ¸>1Alä€?0¤#Î>ç"È@ˆà«²ÓF©W2ÈQ+Ì»à+e+~gs`Iƒ#¥øËЇ”¤mV¯$Źé¸÷þZgL=âÑ™Oá¼3&"ÌuÌÇgs&:…PJ)KwZ/PXò4W²VõGJ@ʃBê<‹ Ô¦ ¤©­ÁÆ/Æ.¤áî›®QÊ™„ɄД]ó—·{ÖïCá%WʘN@Q<¥Þ72ÜÅ…f«,'Á»©¶{7/“¯~¯$wþ¹pÒT ÜTøTy¨@i‹œ¬bÝæ‚wh§î8õÜ N ÖL?}'ʶ"¿¸L(”üžªÎkËæI&gWV"Ê&Ýn?R–Ím„~ {ÒxÉJ<ÔüLÓƒñõÊ#Û´£ìT;Qœ„”æõloR·Ü8iSW’—îš‚†·ç&\wî¿òtìÖ‹yáÊ?eè„·´=ùþbõáÆ‰*í§Û8+ Ü¥ý³Si'¢ð­ª[nzBMçEÊ׋ñÉ‹ò‰Y½<ëþ«–Ì›(ܦ?ÆÒõ¡?qÂDÕWˆ"TY\ˆUÛ »s®½ˆ5•õXdWu—y¡Ð´Xñbß ­c¤¯•xÒ÷E^ç~Ž>CÅg–þC\ë¾’«Ž,?]‰…=e%¯:)WÊ¿·Þ}ŠôÄW?¼‡ÁÑ”‡šT°¾~ýR|ò30ˆìÁ:[}IÛqåÍcüÅwcîŒÛh@œ¨ŠU€LDIý"Ì9h¡@9U}TrH=ÐuKÊÙÝUúkqº^¨wãK^Ôj´Š£)î€+Ã¥ß*ËÏÄ+—^ŽÕ ž¿|";†(³jÁÔƒý»yIÚRïE©º¯tX5ÖbûªÏñü«T"òî½èŒñhª,Äê¾ÂÓoèwïCÏ¿ÁwoOU2ɧêžôßÒ/°ÓK±2ÊOûWÞp?Ÿy >˜}·²öi¨­Ä7”]ÜpýõW+[ê±¼#¥ ¥~š:+2K?-}‹§§î[¥ÎÊ»LM"±ÿ\ØCcÑçKQw\ÝåŒOPù'ar# í¡ìL¹oªÊWëŸÞ˜óþS8yÌ0òÔíPÒdq°<ˆÓË%¾ÃR÷mÃw?ŠËî&]A]úŒj¬ùèì#ý÷ÞF9=PK¹%?¦ÞJz‚³Ô7åîîœðÊÂg/ߊE;ë”÷C³ÞÂ5LÔïzÒH?-Vm"ƒ³"-“ø™ñ¿âê[ïÇ™ÿxÓï¸QYÉø£S·\è¥Æ¦K~¤/‘ò¹Ó†”UœjS‡-´°L^*§íllllþ’È›ò7œ XåuJS± ÎÎ;ÜOk6ã”ñ#PÃÈ|QÎýÃÀe6õB’PAf~Màê\_ªn\ @·=Ó'åYˆ‹G]“;zôî‡>Ñ]ø¢NåªW\=Ñ‹+†þÁ!&)¼ñÍO8÷ôáê]‰5Ë4û‡øêCRÜ90¯(+BÂ}ˆON'_WtîÚƒ Dçð`®¤c\2¼ü¹šä牬ô4Ô4yb?aì늸}±È+ª@×è><0¾|»{û©t\ʰkÛ&äfgÃÝ?CøÝш° ¢Ñ„²¢|ìÝ‹”ôlÀÃQ=zóóhýäƒC9ػ缂ÂÐ%"Œ«°ŒÎÕÐîÈ¡ÅÁþñ(.«à€Ñ"» &¦¯šå——®üËK½©¦ W.RÊù©Wߎ»®½¡~8”›ŽU«6p%° û÷aoì%ë_·Á»¦½¢£Ñ«_Ôxø#’ù—Á³ t ¹*›˜˜Œ¢ÒrN]Ð!¢†í¯L”…Ao®pÈ®¢8»vïE½å‰`*›´ž(.«CÌ€èÑõեص7åu.jeaÕ’ùJ9Ÿ|ï4\zþ¤)cnf2–-_E•K›î¨)/À}û‘˜œÆòqAçn=0åÓ)4ˆ#FÌÍD‚ÃxB;j‘ž‘‰&_Ö…!ˆbÞd¨&õ] ~ãwvY»q¨ûÌyèft÷Ư[×cúì¹xæáÂ/è\xòhÖïî=îtèÚ‘Ê›'#ÒS’ÕÊfqy%‰ÞèÙ ƒXG<›j°{ëdçT&úbjÚ1}X÷;³DñŠììòé…¬´xeìEþÁRtëÓCö#¦®ðêF©öq¥^”5*Ó<›+j±{b‘_TJ¹BÑ'fúÅô¢Dz?Ý~¯½} Î?c"|]šˆQñ ‡å‰Ýµ ©Y4wn ü^ S«i];ó6Ÿôê?î!eòçJ5ËÕ'@P¡™(Ó—A«+ÓÏJŽÇ~"ª´¼ žÞþèѧWa£QV˜©Ú7¼T» ôEiQbc ÎÅýÙ;‡ú##é€ò+(.…?ÛNßþÑ·wÊ߀´„X$¥ç#2* T¸2¸jÚ½O ";i9dpëÔÏ~õX¿ 9p×Ô§0p<ž¸ãt á*´_0ÛPÊúÆ`bPU-š÷ÆÅîFnI - X¿+Kž•‡ð.ÑèÏåÒü,àj,<ý1hè0tatå`¼®ªûþ{W˜eÕýc0š±.ØèÝ]Ò ˆ€b &úÙv~` ( ‚H¨tŽî†#¶Û`kÆ:žÿïÜç½ÛËå'Öÿ½ðî©{Ï=÷Ü<÷Äå˜~†‹;öc5æ¸QƒˆäPíöxØq2Ú‰dÐàîåúõØÏÙ§ÒS.âpXR³Ë %|îÎUpîô1œ>Ë̓@øÖ(û÷+úVÊIÀÖM!ðcû DenFif[«l¦Wc[I »Ÿ=ƒFdÈs³³È9À‹í>êtñ<4jÝ#X±rU¶ÕÚ àF*™%O_ôèÙ}ÛYx”aÝK¨nšyˆJ®ŒgÇx?r¡'ÍÏöìBÞåDÂtÀ‘cæMNR6†¬‡;ÇØ†Ì/?=ûC(ͬB2Þ^>çp)O§š8¶Õ´8ƒ­‘l»‰Ép÷ D“úu¸Éhª™Ë8&AÍ»jž4Í1L3çòm×ÞCèÛ¹5ܫʦûg¡èÈ“ˆ8sŽã\ûT9®c‚P½‚=:,I{ׯCPmž.Q£:7k×Ë4_ã8vxßNÄ'\‚Wíº¨ãïÂÜ Îo‡qöB2|j¡^?2©5r”s¬Hð nüyûÕæ|É£édÃ]&(†¢õdûc£€6 Ø(ð¯¢û+wu‹žCBBŒeË–T‡3ïßeœmœÍÔ»=úí›ù«ûw¾žkìcÝ>yO?õܨuG£_÷¶ê~⫟‡ï5&?9J=¿=ã{ãèñPã›_SÏÖe¬Üט·dqêD˜ñùäGó]â¸o’±qç>ãô©“ÆÎ;µk×2N>e,÷™¦Þcùú]FTÔYãÀ®­ÆëÿyP½o×£Æ6–ã§/ÞUÏýÆM1ö 5–ÿ4Ó¨m©ßÞý–ûE«·;BV¢tÉÝ£o_³ _zÏ8x줱mÕÏFOù£&×’Åå©iÌZ´Ê Ób¼8ÆìCoM›kœ"ÞKçm´¤F,Ê×3îºëNÃÍ’»Æ±ÐÆû/ŒQpî}ü9cùÚõÆúµkŒ+W{†‡wo4Fu1óéÝ»¯áWÁ¼ï3’eÛ{ˆý‹1nx{•þ«Ëãǯ<~—z~}ú,ãøÉ“Ʋù3械aÉW_¿üág#dåb£åýWóWTÁ6ÌüPÅ-Ûe´±~Û.cÕâÙF Ä©Ñ˜ø·Ð§†ñõüeFXØãÃWÍ>éT¿(é³'Xö5ì3Ro][ª4c&M1ö>flZúc ërwîm jŽAúýÇß.d[ 3f~úr©iF>öª±xábãžžÁê{£† -ñs­à8eÎo¨QÏ8¨¿ú8à^cÓžƒX§›62ÿ;a„îßa¼ò¨9÷ÒeãÖ3fpœýôíL˜ÕÌùåÕO¾f?VÏe¼jµMœ|þcÕŠŸ=Õ7w*¶áÂ6ñù÷¿(º;vTÑyãÆ7ØWŽGí1^}ÌœSs^oé'iÝŒ™ƒdtìèacÑw_m<­aÂ(׿6còk–:-WÃt¯ òÉv¼zõ2ã¾~þ|.gü´t©ñÖóãÔ·Á'‡ŽŸäX±Ö\Ï„7ý»Ÿ½»¶Ï<`ö©þÃî4zµo¤â{öMcǾCjŽZÊuYHȆ¢µšõº­è¥íÆFl°QàKŠùn4P¶H•. =û÷ÅîîÎþêK:JB›.½à^.Q±²Ou8;÷Äwß·RgÒ.ž‡‡ËwX¸jÐv¼y“A¸k쓈Ž9…_æ|ˆÂ¸ƒX»&¨Ó¯>|7|©F/¶êw¡”5?ÍúeíÒÑ´C7Tuį+×r3ª„”†Ý‹×>™ƒ:}GcâC£Q.' …·bÙ·ïáŽAÝàBÛ<Ê5Â'ÓžBżü÷‘ÿ`ëÚexô¥w0wÔýY<ß.ÙNÉÊ´ªëeJ@™¨M÷á;¼7’Ï…aüÏâ‡ik1°[dDíÃTArÿ¨~ßY±qüþÇðٛߢo—ÖT¹¶ä o4jÕ]{9£AC/ìݲK·Å ¸ÿ½¸ë®¨ñà}ˆ‹‹CÍj©ÞfÚ++Ç5T‘tpªŠ­»?¬ÇúŸ¿S?)GÚ[½}úvk¾wަ­m8l:„gßúšÕG ÚîŒ =)]ËͼIJ.ÄâMGÑÿž‰¸w8Ußís°yË6ˆÆ´©:NõSj!l Y…—ßüÕZöÃËBó>ÈNè ÌZ…%Û`P÷–” ›Ò©;»m[7ƒ}R`ù~ü8û õ“|;v€a#F g§æ§ôä¾…_Ç;ñøÃ÷¢|^2 .nÂ/3?ÄžL›yk-PÅþNxRë!.Õ=]q!ü>þ~%àÑ £GBSJcïuŽÚ” ‘Fyy¹’ÕËP³à,¦>9Y=ðÅl´¬ã‰ ËæáOfcñú¶¨ã; *SÔÈРû<}ß d'Eâá'_ÁòE[1êŽð¦ÆhˆÊ¡´eC–F:ˆÚm®Ø§gS:]A ¨/;Î'ñ]–îä ¨öL)â­KÁCî‹aû¡ú„û“€ª´ùtª\_ÏýDUTš 4¯[ o:_,ß…;ú÷¡Úª^ðUðÔÇ¡O5¬Zø¾ d)dça4ðêªãIŒò4È Dvù¼w°/ ˜òáãèØ,íØÿym*¯ÜàÀÁT-¥’aÎÔ÷ÔO=ðÏÇß-BïAñØèÿÕ7Ù&Îv Æ3¯¼ƒ5?NÇØ{ï@=wªºæ8ƒØ³Š¼L¡UÖ嬞7Ømyé= ëÙ§÷mÆCÏLÁCŸÿ‚µ¯ß‡;_y»ßøŒÏ3 ·S¡{ˆWîè…Êe²1óÛ@95Þ|éQ´mìæ®x–mqÉê]¤§’2JWWO íÓ‹Ú©aQ•ÍÀ´“7Õ‚©òNU^Ú+‡}*ö«<£”C³›Dú\@X ¦»œ*‘f9þY èÚ¡ÛWQý–JÄÔYß!+!O<û~Y³ Ý; ‰ÑGðÒ{3`×a(ž8–µ”‡´ÓX4w*nïßeâãóWûÇhL}j 2âñáø1˜óÉkèØº%šx—…k f¸ß—æfC'm¤Í¹ù7ÀS§àþǧÀÉ­5¾!M}¼ÜTÛ5òò4G­ÆVe(Ë(LzpŒ€PÁ£÷HÌ{ý?hÑ}¾«ßšÎ²* ™š*Õ¿Ÿ†•»wãØ©4¯å®L$A>*6ÁL®Ô‚Yéݳ3mD»÷â9ŽÏFj Þw?>2 -š¬@óN}¯—â›-û0¢GÚÜFà4aô½ÿz»àà†ŸðÍ’ÝñèK¸gPW¤œmã'á£Wf¡Gç¶Êv\eY¶‚»÷B÷ÊåP»iì sp&ü¶Ç#ž‹1=#?& W|‹“l“š`è½/SJüVï=‹·?˜Ž¦ƒ@%)SrÿÔ+ëÑh¼;m8Ü\*ãôÍxmú|tñÆŠ‚”h¤ï}ß}2ýút‡5Ú‘]¨†7>|~ZÏþ,ÖlY‹Æ?‡y?ŽÄ®e˜:sŽEœEv hÂâ¤PoÕo&=piŸ~?N{[-ÄПÂÉõ÷`ϱx¼÷Ù,4¯ç‡üÌd¼õäk*Ý£Þ‚1fä$Ó§JYŽ=¢ú,š ER¶ƒZF:ôíÃñ÷8¾9ƒãr,ºôê §2YX½†6øì‡Ù™©X=:6sˆþÏÏ¡o»Fk„Ç_x_/ߌ7Æ ÅŒ^À„gÞAµ ‘øþ½ÛÙ®\iç Ì\ðöÔ7à[ÅK¾ý/n EÔ…DÔusÀÒ¹¯!’1ž{ëôiß¡;Ö≗ÞÅŒ%Ð ÐÇìÄÂuGÐ|Àh<óÀ8\ŽÁÓcƹ š³XÚxŽbÞ ?Öm I 8r`?" lÙ¾EQÚoè]½n‹>˜ó}[T¢óºÄó‘pþé+¬Ù¾Ç#ïAÏ–íðæÓñò‡_ ÑcrﮨåãœË±t|ªP<øÆ'hèíŒ5ó¾Äìô_v‚ë‘´S®ÞÔÏ‘Rõ‹11Ø4soƒÑwÁ…†®Ø÷Útì§6\›`j¥¥ÄbÑœw°û0ãÁÀŸ‹}ÔlÖº=>yýLzõtŸ€—ôFmú)ÈNBZÊY)ªpNïÄ»¯±dý^<2² j—,¡âFÃÁ¨âSChΰ½G>Šñ÷ D~Ò\Üñ¾~ÿetkGI~SÙö•‰Ézrè¶`£€6 Ø(ðo¡€Ã D ´í“кS/äû»ãýÏf“;h„7߀ˑû±[Õ¢Q¦:Ú:ydŸrÞr6*™—¸Êb(ë`Ç#dràæWc{qgî7™sûz˜1å 4pãb:“¸É4lÞŽ Ù&˜üÆ{*ýóoýÓ£M¶h™› \tJ(Ÿrs¾ù ÉXsМ¼2˜—³©± ¯Ѧ];”MƒãŸ@:tê„¶µªãBØf€ za®œ‡j±ýc?ª½7mÜi.å1¼1°0Ôà"÷èfžñáñÕgTé£=`œ ªÏÓÖ±²“IZ?:¡}ïý¨íQCÙÅ•I‹R±®˜ƒYÙ JýXÔëÐ@8<±eÍ¢åÊd Q­ºÀÂïܱuÇ.ìÛ½;Ǒݴ=æÏá³ï1°CCªúùdÐ=}©’[ŠŠTýÔS·™Ál:‹>¾PåÛ¿GO:0£x%?wzp±d£L%ÌMKæcÓa¾€ÇFCÃ@ªßQ¥Ï7°†´~]¾‡‡¶EøASõ¶}óÆp®îŒÎýGc–KvìÚ‹=»BpøT<¶m\®~3æ,Dþy“2ö‰á˜;ë+dÒû÷Ú}*Õ<]Leì[ŽYö—Ñ´I]øú! >™i;gÔgÔ°ØC˜ùÍl´oÙ”j»>¬·ÊN†0)TÍä‚/=) ¢`Ðõn4¥Zj¿ š¶æ›ÙØO.³-ˆé€„&ƒÑ®m;\Šs6å9ôhLÕn1å›bq' 7YWZù®‘É[L¸Q$ NÙ0’ ?±OvóÌ—á×¾AzrM9üT¯ªˆšbAº298x0”jÿ‘¸Dé<+—ƒgæËãÞ2äMS¶‘z®G3ˆCŠAONLQ6Ûb*A6.§¦"*T–ÏÎtV÷ nu¢=¤¹ÐMMNUjôjQÌ]i³ß¾U0Uüóq)3¾TÙ¦/-™Î¸¨þvBTXÓ4C ¢ƒ0äe©ž.AÙf0[µçÙæÓF•}À-[4CP`Êæ$¢O`ÍŽ TÀ‹úM„#¶ÑÑdÇ.Ø¿uŸ£1UoóistE,Ÿ=±mÕbìÝTQa!x¥šö¾úvëÝcn'*q籑Íb}‰ã)¡¸i'ÌÍU')ïÔ…0å«ò³.å%aIhÜ´Ú·i#Å܄ٻ:t耔¨ª,Åæ“MõñÄøó*~¬ó˜;{& ©Š½z[”z—’šˆ¬ø‹ê~x¯¬¿:(“QÝï‚-Ó~¥ƒ'š5xº‘¹“(¦ý¶ÐW×gÛ_:¦òð—t.ÆÍ ¶ïšUxjy,”´O§ Írÿ|Å\•ÇýÇ£ÕÌ/Ó‰T5Ÿ:pâx›&ªà4 £YMLBÇ.r b’ m\Tä%8Š·M« ªíù4¸}F½íܦ-²,9i•Ñ}ÔØõÕĦd¢ëzTWÌÛ8—ªºýGµs ÝÚ¶ )‚STÝ—¶_FEFâ µc”#IgK;öíÜ£ïy€´‘GéÜK 8°w—J+>²¹ñRµ&6c×P´i*ã„?ÇîNìáXMª:¤ua.Îz¨tNU\Q¿~Trȶ•gÕ»œ ÇñÍWqôŸ’€ªQ‹šc.h6¡Z} ´nÝþU邿W8p]:vD{2äéQ¦>}:}:Ȇ†jo„Z‹y7¦ù“ýåšh?ø6쟳 ù4½r÷t?QÞs$‘jÐTË®íÃD;ÔÐÛ–Ó¿È_#öl'øz{£Y˶pâ¸!u"¾ Äf\ƒ›Ú´ë‚à:4ã˜:›Oøpb?ćï&ƒnÚSg‘A?yr¯DÅ®M«±#Mdd\vÇ&qcо~Ò’Y\nÖ«_®ÕÊãtúyÓoCóhÙº jW-ƒÓ{°;Ð$#ç%1U0ZÒÌ#(0—[àHZâÎÇ#ÙÒæ‡ôîƒÍšàRŒš{ÏqleKSý¯sœ!'&oÒGÍÍ>‰Ú‡ïßÍ34ï5#tå<êˆ8Â;H'´43¹pþ’’hfÁ °ª9»"€ãª„*5j*s&÷*eyškŽT³¶lÝM}œqñÄVÅ s¡æYÙ4§¬j¾g´£ ÓnI`}vòdý’æ4“ðËö}¸c@O8¦_Ʊéç]ѧkgåo'/ǃ¦Mh*VyçÝUüJt¢[íΫ:Ç1:Þ³sôä{¶{nzRÍþ>uðíš•8vbì«4C¸±_»K»hJ!árÌ1|ýÅ9nè˜óš¼ËÊäÆ"ñ¶l°QÀF7LnåËh/†f Õjxp—š‹u2è]n冀ˆ2âE7“¶¥‹g¾Æõ£xðÉW1tDmìß¶a_ü¤œ²¨ÝtÂ),™¡ Îs²)=0çÍHU¨RMë¡çÉ—[¡U³Æ¸p0Q¥';f0'¬ôfÝ­K{Ú‚9â®»ï£C¥,r”ÍE©„JŒ.§ì¹.'3‚‘g9gÚ) &$þµ0!¦C1ñªJ‡sj1g.¤-ûð©][Ó“R£$£P@oµU—–¬àU¡tSœ )é^AY4mÛ ½3ŽÐ£ô‘#‡ðÕç”3¼=u¥‚í”Ó© d4Äî9‹­s\øøÔo‰ ÍÛbÌØ ÜáÄ/s¿Â׋6Ð~9–v¥µÔBGáÂN‡’S¸)m£$ƒˆËü.N½ôâRKjªÕiˆ¬×Øw(T•Ë6¡Î®ôvý~Ýû%f}3 ûiKY»û(4©@F Qçд}O´¤vCvÎãô Šïf|ŒeÛŽ#žvãÕ,Œ¬‹—ºvïAï½å0’Ò ‘:{{Ö„wJdÜg€jûô*~³¾ž¡Š‘B ؘ¡ñöü9ØKÆñ(¿Íûökµˆ9éun"ôPG~—Ù,u®¦ƒb0mй)Á ùv|wÆŒœøùâ½O_€[åL{åQnlpSC»4-MU y4ûŸÙ~}—nÔ-ÙÈæ†%¥Ëù´ÑöñÄèµ1wÉ:,­x¿ú?Ð>ܼʠíµIål%‰ ðõ"þCQÈÅ´ƒSunì™Ç:JâK­$ta_ÚˆÇ}- ³ÔV¾Õ¸ %¨½ ¿)‹ÉœÊ¦‹rò¦¿[žiDW&‹:¨`B«îî‡.ݺ¹RYÜ9ònJí àéãŽgM&UEUMHÕ¢%¥™ÖÌ"y¼§PâdJ‚l¸HÊ!s,A65U ½::Ê"ýSí@íïÔF¯þѪ~NËT}#ñüiJޞ¢­1xìÅ×qG=ì^þ=¦/XÇfÄM%]Nf`É¥èà!±ÔUþèüõ«lâXµ†;7mG`ަϱråœ?°„“D4òWNõróÍôþA©QžÌíqÏã‘•kЮ·²ÒÌ~£ÆJ–IꑺQ8ªË«¼?ûE|^„°v'¥õƒz¡5²s²õf’‰}(Œ—E;“pv–ÍJ<)“à#'!H™~Râé3À\ÇDný£øÓ!nóDœ»u«;Àܦm7Žô!ùI»Ë¡¦Ž¡—À×A•‚¯ý+´é>” ú{X½r%ìâ%OOž¶R‹õÃ)¶= n¾”˜Ó‰Ç–Ñc¹±‘K6ÕU²î·*²í6 Ø(`£À¿Š7Á ›Lª”>›g]×âNûßÍBe¸Ò)Ïår»8QeSú±á¨zlÒ¸!àU°“Ž—$äQê U£OÄÔ)ãp„sÑ!ñë¯ËðäƒÏÂuÉ7h]ŸR ³“F&ÎN“žþþ'Œ+¨€ZTÇ;³Ý\™ÚËÂÃÃGÁÞOõÒ* Ô#ëR"ÎED '¿É`0Fý’ISôY ÝXÅxË<*çÀJ0/1Ž%ÿ ç£èðè ÂoÇ’HFhæ ïÚþ(›­âGÆ_Âz÷áÄ™L‡y‘‘±t*Ä•¬ÆÒ˜§¨a‹—Û<ªï"S—mW½Ü®]»pAô~Úx“Òíd# =ޏª»P”…_þ§ìZáþaôNçV—yœT|ŒÉú¸{ "»Y&=ΆŸÂÁŠeP³:ØY¤Râðˉ -ïÃ)Êü ‹–.§ú=»9æaCÈ&t|»ò6,¸sà¡=áå@ó„O)™÷Å=CûÀ™N¥ê7 ¦,ÊÑ‘ÄÖ³#™U¡ó²“xcÈÔÿnëØ.Õ*!™8ž%s.Á‡Ž¨ªæ˜ ·½Çãqߨj¨]‹õCéF4|¹yeâDX$NE§¢]·ÛÐ¥kW¹WÅ´¹+èH'™^ìã$)5iÛí:uF³Æuñú_à$5‰—g½°”Å^×hÏÆÜyç$º´FnØÖõ6ÄŽeÇ‘oO'¾TU&þ'B‰¿åv‚¿ÙŽ„–5þ%ƒ@Ž9r4¡¨øÊÆŠ" —ŽÍš!ý^ݪ?‚A®YW²q#ñ ,ý_Ì=Ôw2È”“ñ¥_*jGJ?¥v„Ç(†]¡19¤ š‚ЙhDÔôñ&saŽIŸýºmêúÀ>3K§‘qep᱕N">·7w ·mßJ§R<ªrï~õ]48dµÔÂé í(ûA¥î5Ùç+q£HއSY¨K°jË&4oä;jC­˜±@½s£3µr<½ N£`ênPÒ8¾z÷ã=豜ÎòŒLP†©›”Žj®Ü£YBbì9œ:‡Ä]÷a5V’9,(¬À±20C±3 h×o8tn©¤ËrâÄâOßÄÁÍ q2òn8U¡6ë„átøIªˆçÁṴ̈̀EÛ"2æ >L'|•àâî§â…E'aPogn2»Rë&gèȱvãæ(G†KÕq7Š….üåå˜jÒª]Wuꡈqi:Œ¢BòÅX=¼É‘¡ø|ÞFõÎÍÙ™æ"9HSQmF‡N—¨•Ngb'àCͤf-Û ]Ëxä™WÀsL¹Á›ËùŠæ”è £¦i#íO‚?V»A0~úa6Ê»øq¬/£¤Ê·'NË=ײÊ·Ø6ÿòÍûøå3½ü}wì žùì W§xš6Ú~ùƬú¡8: cÏžôŸl†(Kž"Á‰UÜ™ýxgúBø6l_21ÛvŸDË~£Ð©mc.fea^†gÓšŒ!Ý÷V3|? çò¹VynÆÁ[s¶ ^³Ö¨æ˜CoÀ©è0l™œÆH¯l.L$³±òÇÙp¯fi1ÉrêÛ‚eÛON¼OÞ¨ÐqÈèC›Õò$~fºZýªã£*VsÀ‘O"*ö-ž¹;…?øÐëè×µQ4¥;¢*,Lz%è²8- bOz[ïÌblY3 ×/A}öG3v¸‹’Ê,“±+Õ3Ë—O{| ÂT8Q%»Ï]a7 f~4™?õ‰jcÚÃwðäž«lØ£^Ó–Tj§kþÜ:ÞŽFu””¼bu ¹çi2ã¯aÚ»¯ð§Ó·?ò°ßXLlò(õu}ùgé®êcaЋüL®zÁZÊP 37ãŒz0ã¶©CMFB3©YÜü0Ç çTŠc<⎊ÿôhÿá”'ñô”ñÄøÅ€y7ë—UԔ鄧îŒfÿŒ»†þ\ô}âsoÒ«½/œì©)Ðfnþ ÓÞž¬¾;)†‚퇦Ä‚' xcpëªX²gÞ»A}Fá‹ÉOò$ŠòlŸÔÐåe[1K£˜4©SaÄd£ ÛÅôµðÉì¥w×0ÔªS‘§¸ÃÄ \R6‘ÖKÁçdñ«@f¢Q«nxxÔ>2ž?aÄZ“¡ø“&ˆ&Ü,›w?ú0Þ_,Ü$Ÿ” E6i£°ÚpãmÒù|òíLlX8S}W¼:¡ómyËöÄͳ£ÍãèÊó±Z@IDATòhóسÑÜèÓ§÷jOM2j$ûœ±”ŒâA݆íÁÜõŸaÊóO)8ß/[K¯×õA'ÞØºýWÜÇßàqOóŒxç¹ñxὯ0nsqH¢_{ PÌðiá²¢‹Ð"/;B½‘> ãAeS*GhÇ ÛÛú³!?äˆÐZÞ”„ç$£ùƒC2ó¼ò$Ç$–ù¿ÏÞŽ­?NÁfÖ®C'¤Rí_Â㓟€'M¡¸AXŽ8ª~Õñ™`νrêB¹ŠUÑ´Ek|Õ±‚² #AúayžTÒwäDœ‰KÁwÓßU?6%V*7Ãîy }nëWZèàž?¾ò7lÜÞ·7¼".³6D"\<'fr®P̓FMÂÎ0•óÌT‰+Á‹›Ç»ÁÓݹ4'ê@šÿ2Gý¨ûaÆá&ŸPKh%G7Ê™ã2*ÚY6ÝÁrË1ž›xUǺÙñ$ 7ÜvO_œþ~5ÆŽ‚Úµë .Â\Kds"’iOÿxþºg¨ß¸ç?ÀÐŽµD™GiSRwâ…^‚Œý$ÿò²QF…ܰ;º'ù¾Ù°q8`7u*+³>—rŠAÿrúJôæF‘Œ³û6܃ÙSßáO":cÀˆÑ&ð$¾ÚùëõýÄݧ1ÕçcUD:¥ÖððE¿qÃpø+³¶kÝ\m¤Èú£µì^™Kß)ßâM‹,È% –uQÕiõÒvk£€6 Ø(ð/¤€')sud)œÏŽ´+•£ÁÄ)Üù¨³ˆKHAÚ~ùzR"OµšƒQT/ŸtïT¢ê°,&ÓR’páÕí WT^Ê9±øÀÏÇ åD½’ >‘¾Jýœ‹9OÉâ .¾jÑ~ÐȽŒÈˆH$ð©»Ê<Ã=€yúz¹!‡ xdäJÓ•*jª?Š­©Ï{wä±FBÿĔ˪MúPÂHñó §]÷9d’AXõxäœGM!EúÇÅœC46«ììÁc¦¼‘ÏcÙ¤-p>~þ”ÐP‚¶ì)´éöôôTRJ‘ŽEEŸG!%[¬yÊ–«@i¦;\x<“ÉÌ´-¡IB¥Mt䡤rLNJjmjy¬]M©ëÚ¨éB5ÅwòÎFÇ£buJ ˆŸØæÚ;©£´ó3(Œä“ʾt%íd¤kóX1ÚŒËfYô™$¤gSzåKÕÇšìHaûŠ -yÌšQÆUªÒvÚ¿–r¦KibL|š¢»/ë†î‘”tÉdvytévòôªÄW†¥Y—‘E‰]@Pu¬Ù™ðÓl;9ð ¢ä®‚â“.qQÊñÀÃj­…<Ò0š~'N#•Ǭ•sª¤ðõg%+Í1™A¶-©ëKt´W¥:¥CþìëL' ©ì)%_Œ#þgX§iª­ þr<£Hcã¥î.$rqë¥Æ.«3!gJ,EëAÀÊ.Ÿ6ÆÒÊЙœ_­T#c+cˆ8ð;w6’ hü¹àw­Rže9…x æáãÏãöxÔW,µa¢ãP•ÇñÕfŸ—£×ÂYùve™¦6\èˆQÕᜋ¹ ˜j‘$;×tC€Ÿ骄tÚ¢ŸbŸK"ãIFÂןG(¢"íjeÔÍ &=I#1-‡eäQ® ’ÙV*V­É£ytéO ž3l{9ìU\Üyc %Éö8˾$’øjÕªN"Â#Î’Árdß  F$“#ýNÎiOáñaÇxô`zŽOooTp ÆÄ¥ ¸zúÂæñ1gqŽc˜³»¯r°•–À±8êœ,x8•ãÑ‹<öéĉ“<2ŽlW^¾<2³65xÈTɆ”V<‹Xj½È•ì£UhOkžUí@©g*¾EàüÅj|¨@d™x¬X.ñ?ÍqÉ¡"¥´þ~Ü€à¦/i'ãdf®¢w –Iú™l|]dÝœ‹‰WÌh û(å>Á>œÎ6%G¸ÕáqnT>sšV›©-#ã`ƒúuWÆšpŽÙñÈáÆBù •àJ­„Úlv´Õ—>—Ç>Ä1¹’c!Ûâi$¥³°<î5«s^8KG±¨RÓ›ÇÇQCgËŒyèeôõ 7:¡ 7­*P£Jl´+n²ùÆq7œmú2}“”gkqì΢}ý¹¨ó¸t‰Gm–ubÛðcû©1]Ƙx΢)"öõ…ùÙœ_#—”Ió é뮤ýep<2èìðÜÙ³tð– wjxs í-ëeH ½¶´½Š<ëÞ‡Çz±ŸJ»Š9w†})N™d¸rÎòt«Ž޳N¨Å²W•c ÏFÐû7Ç9¦RÎ5—:>Éy-¶ÐrÌšøFðež2ÊÓÛ%Î3Íqú°ºõìŒKg"ÙϸéTHZÖæxWY§*ûãô›àL §ØèHDÅ%Ù&zþ”lËÑ“±±Â8óØOŽ¿gãbbœ=¼áÏ5‡=é(k¡LjÆD°ÉÑqrÜ™—k5Èú$>!Êð4™ïd.Ü¢9&D³ÝÉ™›O-JÆ«á×,i™Ô<¬gŽvÓ/ÆGôù‹JáëÏ~Kmi«ŽŽ\[¤SbN8œOròè“‚k‹šœ÷|Ô1—§ØÞÅéc÷nÝ©¬×m&ñlm°QÀFþɸ.ƒ.]9a‹Ú™x_•…¯,þDíMv¦e¥) |adÅ®L6ù&6¢ÂpÊ\«lXI%™ìä¬b®³T|;N€JU•Òñ0-R0 2ÀâÉVâçžž´†HDB,¢æ.““œï+ñ%C¥ú&6¢—Ç]va¦?®jLÛDy¦š½,„DR.ªb'.‹±#Ë#>* ð-7j—ßôzNG`´GJ"©“(¢š( §bÛ,»ò¢Ê/…•…–JCÜE:+Ò±u¨"Y—…§ÐWÊ$6l—h Y•Œ‰Ð›DSå’Ïl ¦Ô§GÒEÚŸô–?“†WÅŸe“v®Æ©OÆ’¸©"¶­¢â.yK9Ä®Tõ{2ò‚³˜™èr)¿$»ä_T–"Zšý_µIÝNT;4.ÕŸY~éïª]0/ÝîÍ>Ã1…ߥ=șԲa ›c'ë_ÚŸˆŸ¥y^ÑDeWƶEO¢Å dlí‡B:šKV’HSH~2¾1Høª-©ܳc¿B/Ýä»HÎe¬Sc¯ÐUµ öwâ­úª´5ÒMú™9v°,¤­à.å”ôRN——;Kz‹¦ƒäËôbö!mÏz¬ŒÄÞYú‚´[3i$>H„¶‚·ª#⩃´c©M'#t_’6'öã‚§Ô±Ì1Šv–~eÇÍ•–ÏÒF„‚£à!sŽIG/ÙÌßD[ÑUheú‘1[àæb+͆|âM ÿ4¦<9U9LÈÆ«ÐR×{ѸË$’—ŒýRfÞª{¥ÍK»–º“1Gæ7d ú mÅGÔ¿ŒEsoÑ8`™»,ßtžæ8@ú¦9Ïpn’±Eú© @,„¢z.}W2S&Y̳xN”yVÆJ=2¾ô%Õ¿e7çgù.ùJ½J›Ð?³žÍ~.u™FµuÙH+Kí;‰cÝGõkü¬ÇKÉCÖø¥=k8Eß$š¥|Eïx£ó´†o¦5û9#\Ñþu¾æûâ² ÌÒ‚¦SQ:«H”TYt9äsÉ4ò,L­ŠÏ{õ\D+aF“¡{±tù&ÖÝ»v@EšžèM ß*ë¢[M'‰#Áa¦ÔØ/cú^õÒü"$Qé–‚§hgÆ( ¿ä÷b8¼SéL‚–àdgŽ’$,‘þ.yè´M?Ëü–™™©Êæêêª6Ó„á5ó"Lr¼&5$•‚ƒyoÆ3ñ’7WÃÖ±¯¼ši­ã)™Nú—´=ÑV“~íN:+ÆYe&ߊ1QiTY%?3y§à*ŒÍ±Áº-_‰‡uKûæ+O¥sÁÒÀÕ7K¡%ßKAM¢ÈÆèéÓ§Õ]·nÝä‰Ä³l°QÀFd»ûšA‰”F$é2Áêɤä•S„e)žpJƱ~–LõÄs#W‰oþji$žW‹SÚ{Is#ð%miqeá«'è’ðe–d%á+i1ò^‚,Ì„)×?™ˆ–†«"Yþh<ô; Ã|–…ë£DÜ+ãXb¾Ši‰¬áÇ•ò¨Üž¿v\DQåZ‘@˜Y‘.›õnÉꊋ†e¾,=žŽSœ_1ˆ«~cþRB Ö鮟ñJû&ï¬Ó <©ió"‰•zÚK¼Òê@âk¸r%,“nò¾dÐi®Œ_ëZßõ7‰]œþÊ…c1$ËñWØXÚ™¼µ†£ãÃÓoÌ«Žký]Þ?çÏ—EíÎ’šy] ¯8Ýoñ°þfêÊüÌtWÞËO¤ç2N)É¡H -ßJ^fÉw¥?K<÷կ׎{µ±Aã¢t|7ë 8H[”öy½òJ:kœe¼qt4ëÍú}iy”Në:7±* çZÏEmCÄ5Ê«a”ÄÿÉ€5Uu^×»^ —ºÛâþžh ޲¡)=îZøêü®ú´a©_Ù×›´K‰Wø¾ø‹U*ñ^Åg:Ò^,ˆ_çZýÛ*O¦/NSjñØ*}Uæ6S2®12ãë¼K¦.î5ÊcibèoÆ?ù é,ýózã†ä¯ëGÒêûë]UKPͽ8ýõÒÈw ÖyZ§\eŽ*•&*¥í6 Ø(`£À?×dÐeRH¤çW‘Jɤ a`d§Y®ÖÒ!„žDd©ã”¼ê4_&˜›‰{-øzü¿À\4œÒðÖßß…¿À·Ð®$|y– ‘ÞŠ”AðEš.³ÎSeüü‘ü¬³ÒÔÿ”þð,¥=J;ÙâiXžel O èñCŽÔUUéCÒoD*WÚ8%¥Ði®ÕÏKö9¦´>k=Zÿ^\©ûôÍÀ—<ä ti£RÉçFÊ{=|4îºì¥Ë´í§J®äû{pFRFΫ•W×Éï†Ošê1º4ü5ÜßK{·ÆSh*jÔ" ‰«h‰š·<ÿ.úXá/<’üþ ̘ÐNúŠ´])›Ôô[¡¡¦•´Á?#X×c O‘ s¯àRZ»Ñ}G·‰o £´4:®ÄÓåÓi4¼’WÆ~É8ò,s¢eçN(¶`£€6 Ø(ðï¤À 3è^^^Ši¬b'-Ì£L°2±ÉÄ"“07òM˜™ˆ%®\eÇ\ÞËÄ¢“BNaøeñ!ß$ŽNó{á ,/¦üäþjðGkü¥ R–ká/°g™po¾ÐDh£áKž¥ÑGÞK\Ù‘…Œ0êt #qužm,–€ëÇ_‹ÏŸ»^@‰¶ˆ˜ÈOÅéÅÛ¿µÜ<%ÿˆR_"‰“¿l¨H›]ëqäïÖÏe|)m‘±±´qPð·3e.Ž­dü‘òëòê1¶´øB#=¦ZÓÆz ¸®=†ÓÉÙŸ8†K»ÖQ²n…ׯ¿tÚ_oŽ(9†[Ï+Ú#ƒmOÎ¥ÿ#êVp‘ ZiÓ2ÈäCÇhº~T%ýÿHÝH}Ê<'L±¬ ¤]þs›à"cºÐYp‘{q0)¸ý/m¡äzçFúùÍö[é¿Òîomþðl6”m°QÀF®Ck2è²(èܹ36lX´›¯†2ÙêIW®J¾»Ö³Ä·N­¸7 ÿfq¹Õðo¤¬šé" 'q2yËû’ÁšVú›5-厣¿ëg}-GÞ[U£–E•IŸb5Ç’yY§Ó÷WËG×W¯®ý^dm‚’~-x%aè¸ú½À,‰³þV¾,ÆesD~²h†Äº¬a—L[Ú7]ž’ùé÷×»^+u~ÖpJ–U¾•„£ÒÊ{þ¬Ë!q%èwr_ZZë8%¿Ë7 *ËØ`¾)~§ÓÈûÒðÕñõµ4XòMÆ#YäÇÇÇ+Mé7z“ήuz}½«À/-Ž´‡u\}µÆé÷À|š5k¦ìx¥¬¢Ýtµò |ëü$mixè2Þ >7÷jð5.újë? ¾5ÞW+«ŽSZYK¦‘gÙ¨•ù×ÅÅE1ê’þ¯‚—º<ò|=Ü$”[ÆVa0ýýý¯ð±¢û’†ýG]­éªaêwº,BgÁ_˜]¡·õ÷©+MW_õ{Mk¸ú[iq5^:޾ê¸r]Þ‹Ýl°QÀFþ¸&ƒ.“€,e‡Ùþ È.¼6+ Š-üùÐ’iû¶ð÷§€®/‘X  ¿srŠ“¸ÿ/åý7×åÕÊ&mXFÑrø·a2eãSÖõÚBæX¡óß—›©g™›d` 6 Ø(`£€ÿN \w%+j_dR• w‚ÕÃuÿ(ùœŠ%̾ ÜM/Þ‡/ b2Ž–èdK"^ä‹ü“0¸…l~úÍ_QJ_ò毗ߤ½¹ÇO ×úÝ@”øB_Y,ˆ4PeZ­UÓýFàüqJ+SÉò”ŒóGä[Œ?+·ä§7E´ª°,Üþì:ÐøüOW–ꇔ¬C-å• ¿égëw*Âßøà.xk©’ úgÕ×ÍÒKãjMNýN_õ·’ÏÖï¥|2FèüåYÇ×W_®¥½»Ñï%Ó–|¾W_­ãêûk}Óqt9åYâßHš‰£áßL\æjWkXÖ÷_?ëëÕ`ˆDYÆ!ÙxÒe7Û´”ýj©®ÿþzù^‚ÆEàHÐÏEé¤nŠ®¼‘¸š¶ÖJæø†$è2VÝDá%?畘?I¾²"W 73n\ ¾ù^àY¾ ¼ús3upµ¸‚¯˜S\¯|ŹÚîl°QÀFþi¸.ƒ®'/™ ô„ ¯7RXs^½Ú´}%„«Å’I³3ó7'R•ê&&ë+s1J%ßýÕϚβHwQ¯–`M÷[‰ãÕ·2Ï…mÖþÆþýñÌvfúFwmã÷gÕÁïÇüÊ”ª.-‹Îâ/¦›é»ÅiÿÞwR&©/1 ‘pËë«4fïô1m×¢Viô×ïôU§/ù¬ßËX!c„±&AâéŸ~V¬þ\ –Žr­ï%¿•|Ö0äZò›~ÖWë¸úþêߤ͊¿Ó¼ ù­ÁºòkñÓÕáÇÑw7W§¹ÚÕ–õ½Ä×ÏúZ†ƒÄ†lŽëxzã°dü›}Öðn6Ýÿ_—K®Ú|H`J[œ®…×Íÿ%c—|¾²$BgÙ$и\ùõÆŸÔ˜{Åšäj«™â6p#ÐKÒEÓQ¯n†-Ž6 Ø(`£À?×eÐõ„ð{Šf=iåde"7¿eË—C¹RUæ \NMARjróòQ¹Š3$µ#¯'©Âµ`OÂW *SÉ‘7:JÊÄwrþ)\á‰Üz q‹Ê̸*¾þ&“cvæ%$§eÂ¥FM–‡ç0GŸGfvÊ–+gža^¹By•WºÊ޾œoüG-Èn$S)—ÐÀ(ÈSçIÛ;Uƒ‡k5ž\€*N88˜ªöj©Ã¸ÜD(ÃãÖtÑ4]$¯’´ÔùkšZ—o¥¦e¾±çcPX¶"¼Üj¨6Àl‹òÓ0oÕU$WR‚ë?*HÛUY&ÞY™ÈcŸ+ïTeÕ‘x¦”È\ÜHŒÁù‹Épqó‚·{ ¤%Å!ê|<*Ws…·ûP±Ÿ‰¿;¤¾¤ÞnuÐ}EòÉËÉFVNœ*T„£ ¾û³Ú©”÷¯V¾•´Öt–.X˜Ÿ‹ŒÌl8–çÑr<ÃLÞéï·‡¿¶l6‰ ƒ©I‰È)´ƒk Ήô¯ÆbanAŸ§m=^éqÕš‘Ss Õ˜¦éÈ‘Ue#itÐãt1 $\ˆFlB*Ç OxÉx‘‡s/ª:ׄ›«³š'ìí‹ë§á›ÿÕ¼&m÷ÆÌP,ã‘JMN@n¡ËÏq™Ï ”4®EóGÏ7w¬XÕ*W’ØK¢þ&‹ñüÍçR_(Çvœÿd|”PL#nîríbÏ9\і󤦨4é%¾užEø—š›í¥6 Ø(`£ÀÿG s±péõ¤•u)Kç‹'G‡s½°pÝ6˜ûÕæ$Uþà=Œ{àAì;£+š ÍWÿ«áË䟜œ\´«¯ß_=åÿöEÁ·¬önXŒà^ã“”©€n_½Ï>÷¶o‰\¼Ø1_üñ5­E}Pê@?ÿñ9Ý ˆ²\I–ƒùßNÇćÆãÁ±cñÔs¯býŽCÈ+0¡’Ül_ƒÇ'Ü‹ ¿ˆMÛöãØxóÅI˜8éÌùqÒ¹ÙôwÖõ#õ%õv+ƒägŽÂöoÁ‹O=Š»FŽÆKo~„°3±*kŽl7·‹’åÕæG·&·¿ªÐ2&?}ïOywº “ž›Œ‡O›tf;·¦Ç_ˆí-ÉZ¼·‹–„[—üˆ©³!Ÿå¶³Ì]ÒФ©™ÌŸ´<«`ss/'aǶmˆ¾xIÁBV=.›d.–`ëqX®Ç ƒ©ëáðÖUxèþQxæ•7±nãnœ8²¯NºOù fio¿‰_×í±ÌíÜT!2ÅðTe)äDZ-}5?ß_®U‡jna*#+ß|ð*Vì8f²ÙÜ àÎy|³OJž&RbÃñêsÏãèÙ‹*O“™·¢Õ­œþ ýë‡â~qt'Þý`ÎÆ›õ£ò7r±vÑ,ÌY¼9–ŠÐõ$t`)T{5Ë[Œ»¦õõó·Å°QÀFløÿD[ Ë$$“V^F"¦My ƒßúýGÇÔÞB‡«e!ÁIûŠ`p—ü<êu‚wÞyƒz·ƒ W›Ý›Öàõ—žÁ¨±#år¶%gAËDX|-Ä©=!˜¿ö Übà9é)xâñ'oNÄvV;ßűLœe#€ DtÌ *–òè{y_Xˆó‰”öËB£"FÜûÞyc2ÚûPý4Cã(1o,¨IžQE² êíZ‚®ßߔߋ4”"§ÅžÂ”ûFâÕמE«zžf Ù?z“¿ø‘L»yŒUÎ%.–Þz±©*3sñAzˆvƒzcª+þvá¥+Ëd"u‘$¦¤^¾›ßä]ǾCð`w¼1m..“IJØù-L‰ùÇMk‘\ýÓ$è…\KÛÍL9÷Ÿ¿#^„!£ÇáÅŸE¯2èÕ!s—o5‰•“ˆù³§#°û8¬Z¾Cz4ÆÚŸ¿EzŽX´à'<:v*Pâ.AÓÄLø÷úk›Ô—µÄñÇT·_ >òîoÙåƒ:áÝ·'Ã1v#Æ¿ú b/qƒ@a nA°.¯Œ†ÆÀ-(ÆuA £%cRfr4ÞžtgÖÄo¿ƒænÙhßêqœˆ‘ÍAÆ(®’ëÂü§EÉn‹ ƒàž‘ŠŒì\ë2™}Óš-šé1Rî%ä\ŠÃÏ?‰°³¿u(fÝžÌØò·˜¨2æ*8¹IøáëÑdàãX0o6†öjŠu¿ÌBšG_,œý%ÆŽ‰¦-š¢¦s3>¡K—MÈzžyÍœßLdz¥ã`¦1[ŠÅΠIƒ@óƒH£Õ]1®êÑbºw+ÎÀþÞE±4=LÅÅ)«6)~[Ú]q¿öððÂÞéO`êÜe0=ôá¶¢ÏðàâéƒòV«ª®$H9‹&|]W–'óbûk£€6 Ø(`£)p]÷›¥’štL.{7-Çk!98±úÔõªV Š 0™|eÂ*ž¤¨–îP–“¼3ÕÒ¨n òݱ\Ôª× í›„sâ×_J¹^ùJÕáé\IÖÉE¡ Õî:×i@5_³¸±gðjuâSÒ©6Ym;÷@ûõ¹!P€#»¶`ÝæHÏÊG­†-ЯOwÔ¨"žt ~t?–¯Z8UEFÌA8Vv…!sPåÈ$Tw©É}KæV8!s•)§ÐC$èr®œo,A¿¿J²ÿéµ¢½×kER—g0r`7S6(XÎI”Æž;€Õ”šŒ»£™GxÔí% Ÿ™Š­C°ëàq”)Wí»ö@»–áȲĄÁ¡SPÞÁÀñ#‡p)߉RñhÞ°¶2(ȹŒ›ÖaëÞPäÚ£y‡nèÙ© œÊR}Þ±2FMxßµlíc†¡OË@ªvrAf]±ÿSé›XÓZ$“"½ruuým¤¿ãi;–úصþW¼ýmœÞˆà@w…m³àæ¨QÉ·?ü1º¶k†ŒÓ»ðÎÌxzJ7lÛº—ã±kç.Tjâu!hÙ¶=M7È ®,¥]þƒ®/ÁMêKÅi;ô?_izºíÙ½—úM¤Â¸:ÙÁã¹7°¦i~ôx´©«˜ýFº¼2Fܪ²þÁhß$¸bÊ…Ù‹Ï÷ûâØŒ‡ÑÀ»û?…­Kš`ëc¨çÝIU‡5Mn2£¿ut9£;‡G’Õäñ_Â4;U®†äÐ,[¶'ìGY·Ú6l(üj”źËQÑ»1Ú³í±¯ªquËØUqGÞÅ£X½}‚W/Æ™Ã5в]gÔ({açRàY³*ŽÜ·€fhVÏ +~ù±)Y°gw÷®Ó½zv‡k'ì Y‹¿_gûcËæm°ÏH¶-Q¡¡+݈֯6ï}|‘’Kɰe¨ˆ8v!›¶"%#ÕÝ|ѵ[7ÔñåQf–ùMŽL'x¥/²Éeš©b϶Mh9`˜ãYVz2¶oÚ€ƒa°s(‡†ÍÛ£S›`TrrDAf6®[¡ƒ&À½²˜¼°=•2~év#š "Õ¯A³´ë1wÍ€*nµðö‚ehØ~ †öí†Nu«bÆ;ñÄûs0 sS&9ö,Ö¬^…“çâ¹\pEï¾ý\?€ß q:tÖm؆TnäWªî†®=û Il&XÖE ‚í6 Ø(`£Àÿg \‹ÝýÝtQst~öoÝŒ¾mêãLèÌø|~üyÎÓ†M&LÙù—¥˜uI377¹é·<—q,æí:áîÑw¡‰“²O·NsŽ(6Ò% NVJíÑ—‡·ž‡ç2ѦM+ä&…cí¦dŒ°«1öÑɨŒ>ÝÛcËÜ÷ñùÜ*‹è°Ýèݸ5^ÈáÂÆEÙßK+vâ#‘òÉØåÿ¢P¢÷¥ÜèEŠHÐeGÿÏ’ K]d&"då<0|jT471Êp'$=%Áú⡱#1þÉ“^ lì³Ó!›–ý0=¼¯ Fp-›Ž.­›`åÖ#ê[ÊùãØÿ6¼ûí2TtvCÌþÅh5êUD+³€B¬øi&^¶ÍÚr‘Ó¢Þ{t–mÞ¯ÒÊWß:¸ïѱزí€z'šÒ&nUÐu ¶½RúùVå÷GÁ•Ŭês¹—q`kžzïE4µ0çâÏú èÒoZa#N‹¦š¬)½J¦]g|l<’“ÒèàÌ—Riû‹ôtÓÄÁúGaùÇñ®©¯[m“­hL™ÙŸsèÑ®5ª•7ßTuõ@§Ám¯ ©ø[ÐLK–÷ÆìxÿxºßJˆÒ½u9ã.ÄâöÛÛÃÕÅt†çèäÌ ÀAŽ3U©Ka¼n%n&lñt^|ÄšÛ¶¾ÿúSlÚ}5½½°xâ}xúÃÙ4E¡mø©-èðÒHÊ4'Î ‘¡èÜ»?’içUF¸m†üÜ\J­'±gŽà¶ÞÝðÐóobǾ£HHHDjZ2¨U«^C4$#9ëùøjþ*Eg-ýN‘ñ‚mÜ/Ê"•>+bã“•ž†-«¾Ç¼5ÕqöÈ&4hÔ¡q¹¨åë}!¿bíÖP…‡ø3©õõæ7Ñ’‘…uëv [ç¶pâžaav*¾Ÿþzû.~Ô]»Œ¯¾™¨øtÿÜ©Pì:]ˆv-©çBn4[û‘Q/ùG·1ÙÔ+¦³þz•«¬[,Ú1 ÚôÄç“©øÙ ÌþêK¬»Ô GRtâ<õíç±=â2úÞÖ5Ë$â®+ÎÐÌ ñÜ1<2´Ríª¡eó&ˆ=¹[v+ÎðÎoÅ™Øîl°QÀFþîøÃ%èºÀyyYH¤„zÕ®3hßЇ‹Ù2˜ùÒÌîð2f¾û|jTR6nz¢ÔédÍeš¯,–Ø—æçËÄ\pèøW^éü²Ø®YÏsÂÔåQCÛLgZÂ9|öËv,ÙôºwiÊ_W:Ÿ)ƒÂŒ‹øîó·ÐfØýèÛ£3ªrñ}iø0ô}ýŒÚ {Ö,BЄ70íý—Q…üM›ºÎØýò|äÓ®W)‹Z3¿ÒŸnø*»ùâYVÊ Ap/I£v½ˆB$",~Îf—Ç ZþE)Ä®± û² Ë£M—¶ë<KCvaT+wT«^M9ÊLŒÀ«^ÁO!qg÷fL;åòSñßY‹Ñ·s”¯à¯¶#1ý½7QÏσgF@ Ä'W»¼wï“5-:µoû‚LÜsÇr¼1o9zvl g'îÙW@Æ-qto.“•„Aç¿kµ€¢ü7¢Å up+7þô~“TU#ßæqƒ(ñR>|ü<-4âÑF–ÎT®buøzr9›g^Í[àÉû Ë°1Ü¥W½©8¹níGáÁ¡í|Y ‹&ˆjÏ¿ÉñïñºoH}ÉÂÿ–:ÝKOº„²Õ¨å#]T H'{ ë²-vµ×£~?†%Ë«½Oÿ~ˆÓ”–žÉ §rt Gÿ{f`CF5+=ç7›»Ó’ün´ä˜MkŸ Ù—1â‘—ñê«/Á™m­K‹@Ô&ŽD¿»&ÀîéF8xrzûcßæUh}ÏKèÛ¥ʤTÇÈ;¡ßícÐ5ØWá³7v|Û Ç§ÿý-øqΔ£Îì0ña$§P•þò%ôx¶ïßÃqwZwéŒ{‡vÅÐ;ïC¿öAäöSqþÜ6Ti1‡w$ÌìXmw:Š3 ²±xÎǸóÅéøðG nî Œ$1ÿ`y-›šלßdΣ 'ìC”c‚ÖQϧCwa‹S±ép$º4 PïE¹*"‘öí܌ڻ#ÈÏU=y-ñW÷%Ñ–º™~$šJ¢]fo_wŽ„m#àþÏ%›¢®§©õv”6¯MÄŽ#o£E}_øº”ÇÌIM±ãÐ#¨_.ë"’ðvïÞhYϽ{ßFˆ¹j½R´~(«íÑFl°Qàÿnƒ.Ü)©Â|¤$]Äû/¿ˆ‡ïì«ìÉ{wjFõæŽØ3j|ºÿ{W˜ÅÑ´Ÿ¸‡@BN‚w÷¶ÔÝ…º»Û׿îî5Úº·´´¸{qw Dˆÿϳ÷nr I€âýn!ïÝ­ÌÎÎÎÎÎìÎÞµ)Gù/Ûü2F·Ì³"ÕՔž{iMR¡ ¡¶E4Ï«q²4»ïte«Ý”çâoÁ½;à¢ж}W\|éˆÌÛiH߸Ÿ z»³²©ˆ¯Ç-ç÷Dw7nÝsO8Ûçb“|*z»yYÆxÙMP±½MÒÚ ´F¹½îµàdÈã®DL4£ÏTYPÄc×®t¾¥:×<ù®øðs´Œ9çìêÐ.)DFÚDwZ5t%Y+Émz"jÆpdæ:}•X·â*GÁá1¸ {G2ÙܱÉ0ÊÛÊEÓñöò)tq÷Ãö­ùè߸ åÎ@÷G…J‘ÈÈYË·eÓ@c„Ã^&íPýhÇH»“‡ƒö¥ >~“’ Å…ÝEºÆ¾z ñ¸csŠyÛ¸ârøöq¹›šÀ]ö<žöY‘ÀÃÐCÿëî»ÓwHk¦Ì  ¦áøZ!!ÁãjÆakï!%æžÀÅv–²þ’ÙE/ÿR¼è.#ý`Ï=·1ÚaÖÛÀmЗ3êÔ¬ŽpG,¢j­†¸¢_Wlä ×Z·KÆó7„¿ÆOE»Zþøý‡/qÃíƒMãÛï8ÿɻˆ¼ÜÝhݶ’Ö5tT]k—ÌÁÀwߢgYwÐàïÑcPïÄë¸cÌþàÂx.eƒ•…”ú:D±¼Ð‚x>åL <¥aÓ®<œ~Rw#ßeü‡„G£†N‰1pÙo¯ó›ÞA Y†¼ L3½hÌÖ‰sìHMÁñ—?‚Iµ <Ñ¥jBusŸ¾y%FŽ˜‚oL·K¹ª-y¹9È6Ê!;¤0Ñü–Ò¨ùéµEýúŸŠîÍê"={h˜yñUX¨³{¢zsùò9}ÂÊçQ_½•ëà‡ÃÚˆ¾Æ‘Bù·aãúxóÏq¸ñâS,eØ)+bÄàÅø*¤?ûÚ÷º)Süjϰ›ç"Éyò~]ðB4ßM°q1ݬ%N˜THþÞ’²"Wl+\¥¼Ûý €Ä§Äz eïÊõËy¬‰…)öýü °ióÄ6à ïŸËÙý@ç¨Èª1n䦛.(oÙÂ…8³PäÇ”][xúýsšp2zwp\¼eÀj:˜ó• òŽ*ÈÍFff6"*… 0;»ÞÏbzf2 | 5b£1²u|:f¾¨” fM¨½eH–X Ó3ÈÈš÷c>?î¢ïâzÀî ~Ý[°½ºiõbŒ¤Þ}¶/Ò!‚‚B°q çîb+X!Ý/žÇÝöÀ$´oÎ]~9·•¬ÝDðš`qŒŽªŒ& šÏ9« ª0?5’ÛàÜ .Elh!vs±úÆ[B‚ˆ°<øâ œyå"¬ZµïçFFF¿=^­š7ÃÕO½ƒÅë¶š| fMÃÄ©¾sÖ<í÷̸ǮÕù-~90{ÚD6ë…f œÝrå¨Q· V}ßþ> Y\PÞ¶q &L˜Š¾;cÎô)èÚ¯jUÖ"¾ Ê„¶þ=èì Qá¯{†ÏÙ…õ©œ#m¬ê'7Ÿ¯ßÂÒUS¥*iZ )kV`ûÎ4¬â‹SçòÓ¡Éí:áŒsÏÅy—^ƒñs—ò˜]…Uz‰< xð(ð?F³Ï|0Û¬I_“Ÿ®½N»OÝ5]yÎêÞ?üð;Þÿz:6Otª,¥\©ŒVÄc³„Áù<Ëþóƒ1äû_±"= ¼ü,ÆèŒ[o» Iñ1EuùI{à*vÓv½ñå;Oáì>íqíwb÷æÅøä— úÇ'¨bŒÐN댘þ×£S£*|{õt|x÷ýH¬‘€J߈Ù÷ߌmzãÎs{`òw¯¢ñÏâgÀñg_ ¾é‚ý—âÜ.ÉX2í3$&ÑP>€¾ ]îV0ÒFí÷U.wzqÝ¡°JÔ~Ú§ž¡•ЩU] Ÿ4ý»5svÙ¬îV¨=¾Ð¼CO¼z兩óÅÏÍû#«áÁ·‡âê‹àöåü´Ý¦Xx<^»â,S"''Õcä—îõhH•êÆ8  Ûü¯ÂÝWõC/~ê«7ëù•7ðҧߣ …œ´Íõûwh>àuÇáݼ ç­)9HòWîíêƒCKû¢ê GŠ[vÔ¿~ÀM§œ…)c.G›¤8|÷ÜËè|÷SøÏ]W·ÓL.n……G™9§r áË-Ï„ wÿ¨¿åKÓT—£Ôû!¹}o¼ÿÌÝ8ó‚«pÍ©­ñÑËàƒo~F³¤x9=ª½’ÿÆ`íªšÚà—Á¯á´3/Äô[ÏÁäo߯#¯ F·–Ω–ëþ¹¤=º)ç|B¯xn ¥wÆO>€1œcv®ÅÛgàçÑCРFeÓ°˜èÝï<5p+ºwj]´ÄW^u7n¹â4|ÒëTû ]•Ê92Œï&q—5 }?ZÓô™›¾£‡à¼û½®hnÓ“ŠÛñH¨ß ¿ý<Wž{N¾›OB¥gáê“ÛcÆü ¸è¾’y9Ü>ŒÑù@öüéI^òxMSʇ_ÿû6NêÖÒ|6*wÞ< Ó—Œ@ä®MèÜîœwÝh[ˆ)s6à‰þƒ£‰i†ô‚G< xà\H¥³X E¬q-â >µk×FãÆKÄï áìD«ï·.Y¼›·§£F$4jPœ…l=öÊ5x|?èqŒÚÜo>tIQ\™ß@WôtÇÓÄ®·ÑæÑï®Vºˆ ÕÌí›ÑYÂÂÊç»ÕË—c݆ÍÜ CÄ$¾ ËQžoÓ†¬[Ÿ‚Œ¬Ä׬ƒ‰õ,¤²Òw`ÙÒåØÁŀȘ*¨]«VÑêm×bÁÂ%‰GÍêqfG!66a|;¼ |©ÑëÝŒ:gÞÉ ¾4‹…THöeÒ•’ ¥EŸ}Y³f êÕ«gŒDïTpI;³ BOŠ&ïÀô¥cÑŽo/¤;ÿ–Í›Q†jqRÅ&~H£ö™ˆO¨Á3áRòø]èµ+°pñ ø…E£)ëøÊŽ«ozÚ6~·>Õø© `º©çñ›ö›6mæy÷8~JÏw¦pë&,[¾’n€ˆ‰«Š:µj":ÒI›ÊÏóuºõK,7 ¢"Užbg9ÀKk}ÂjãÆhР1ú,_ øC^ÜçÖëÌ®YzV.b«Ö@RýDDùúKãC)¡QUP¥ß;@Åz#ßΪü–±‚ÓÛ‡åªÀÝÞ… "!!Á|¿Þ@”QØÂÎÉÚE¹¶ù¸„Zõ(×yþ¿xq²Œ¢eëÖUí­Y³&ô¹*ÀEl› È«+–-Áš”-¨_M6DNÙô£僂Šm×úõëÍKâ’’’ ÜíÛxÌ*m'ß“²/_MG­Ä†œ·jâôSLJÏÞY…mðòÃW›Mû¢ÇÝiX¹bÒ² P/©>"ó‘–™G¹ÏÏ„:³“ܲ—/YˆÕRQ½v]ÄF…ÑEÜñ$ *ÌÁ:ረ‡Êúä¨O^ÈK.ž;îš»·nÚ„\¿P$ð fÒ#kÅJîÚóh1qñ¨E¹E÷î,º¾¯Z½uëÖ5oO·2×4’|M+.ó'þ‚Ëü _ý!T‹2»þöØ''¤¬]…5ë6òS ÑH¬[ã~ü_ÍÎåþCˆ¢±kÛnà–ñcé¼víZó’8Í·ÿ$¤mÛdèZ½z‚¡¥…+×®\5ë7Q Aµê5P»f ødcëLá×3´k^‹:Q"= µ¤WT¶DlžÅ”=ë¨õ£Ç€‚¯ ¨—äQÀ£€GÇöË@W»Ü»V·SîÞÚÙÛ3—{2)¾ÏÃ÷üι~ Þxç*´lÕ–o÷nS¬€ì ¦ÌI©Þžö–&´,|Y‘qé.£)¦’<žá=j4–,ZŒ×ï¼ÏŽûgÓ@7/´ÛGÝâ¦7÷nÛ¶Í|—U«û6~ÏÖœó‰.Ÿã yÞ|ôz¼6¿*Æ~ø$jÆ:.’¦¶_Z—¹¸T>nêû’¼R:¯hSòÜsÉö¬^0›uÁcßÂõ|ƒ°LÆÒ0K–8ð'‹£¾A¬ïjÇÇÇ›]Jà5zâJû‚>¬°ü¡G¿jpãš’’bŒU}Ü¿_÷1syðË‹ßG°{ÍfáëºaÝgcbŒ‘cã÷ àËP^»Ê‹?ÆšW&º¶mÛ·o7.îUù¾ƒŠ‚ΘËëlÕÜÑHlÙÃg,C¿¶õ¹Ç7Î+š³UŸBùyŒÄ(BÁâg#LyÖS47SÎ<ÊBzkú¶m[Q¥J,ßãÂ]wæ·uÏ yøéÓw°4§î¸ö\óé2{6Ûß‼]xóÙ'Ðõ"œ×¯-§ .ŒsN+©(cñ…“Ê—ìi‘`_¾ƒ^\Ú¹³0l¼H)’—Ž·é]÷¥Œò(ˆ^ž^5½4< ûØgw;ØIbßšÎqN~œR̤bËj‚±÷‚ãLlþhÝó<üøcGîä¿Ô†‰ú®¹&¾ŠrñéNÅJG¡^¤Ã̦^âcUÞ7™ªœ£$p5ÝQÜ8š4•³ùˆ“=¿ë¼Ö¡!¡2&ºÂ@IDATˆ«‘ˆýÍ“jZTLãœiµ8ª¬;á,X:[*¥AÊ·5ÐËÊðâœóËþ¸ô–'ÃÁ¥lØb ô¹úúÎXv|²´ñDûìÐOý-úQ9bbÉ4§¯œþrøAéz–¡naé…Fþ…ô𨰠/ó+N>‘ÕM=N¿”Õß&ÃAø1¸q}H ²”6õÉ¡¬ó  ½‡®ì9nE‰®ÂŸÿK=‹+‹Ç€m£›ï÷|”Fw)üÖ@?Ô¨ºyûpÓNõiOnîú†³­ÿP·ùHÀ?’t>íU_j ¦§§›tk [:¸Ç¬ð“¬UÈãžù×ß E‡ä:æÙÝæ¶H;OÅ¿ŽÌ.™ÇŽ‹‡“Gò£|y!ábçC'?çJ½¡MsŠj^Ð7Ðu®~Û¶T¾|µR‘^„3«ð‹}ϺÇÑm^ ŠÁÅw5Éœ7lP}ùÁ¸ìÖ‡Ê/~(‚¦RËf,çºk×.³ƒ.Yï´±œŒåDÛ~qÚí´UYKÄ“¶ˆÁ zØãfŸñ*¿/õZìc^S™÷ãQÀ£€GÇ$*ÜA1bäb—˜˜xL6îXEZÆF•*UŽUôy¼¥DJq«\Ù9ßyÌ7è 3ÑÑчôúÑDFµWîíÿÖsèG­.òâÑ Ì¢¢ì—އ¦Î£i~Ó‘2½‘‘.±CÓìƒ u,¬\¹Òsq?¨Tõ€yð(àQàè¡@…;èÚÍ]ÍóbRäz­°¯+½¶‰û›ß¬ºû ¯(kåy_ÖÃm­ÎµxU»¸¬÷}É’å·³,˜*kãµ<^\[i¨%ŸmýºjÅ];€Ú›7oZ¶li DÑ]箋iQ†ûÉÂSœûÞgo÷În¶³N(̾¯­) yêW^…¢6òYç õlãþ9&Åx¹qrß+‡žÕúœŸÎöIjÛ¶­Ù¥Ô8Ø×>(®mÏ»Òuî™cÿc*‚¹¿iåßÌö^â`Ôgûeâĉ¨_¿¾9—­þ:aïø9;„ªËò©­wïeœî|î{ Ç^mšÚ+>U{5jd¾~`Û«< ¥qQ\é4 Oi{ 6¯†«¨¬Íã¾*¿?›fḟ{ánSK–-ŽÝóαWåpß»ŸÝñåÝ»k(/Oéx•±m-æŽwçÓ½<§,X€¬¬,´nÝÚô·ò †;F0:;°¬Í©qzg¤•Ü%ÊŽ%¨I€eæS¼òú‚…Q&Ìc1s—QQ[ÎÎoòLš3gš7oŽØØX£WØ1ló’ýl¯Ê›&*Q4Ð…®í´Ûäeþ²p°qÊc‚Ì\«YÑÙŽ#ÁÜ÷àÈ Ó ß£à¹H_¼-뎴emš®ô½§æŸáë®Å»÷(àQÀ£€G£•î ËPÔˈäJi'ŠCÙ[‡®šì$u(ë*4Ð=áìw°×< xð(àQÀ£€G< x86(à½aèØè'K< xð(àQÀ£€G< xø—SÀ3Ðÿåì5Ï£€G< xð(àQÀ£€GŽ xú±ÑO–< xð(àQÀ£€G< xð(ð/§€g ÿË;ØkžG< xð(àQÀ£€G< ð ôc£Ÿ<,= xð(àQÀ£€G< xð(àQà_NÏ@ÿ—w°×<< xð(àQÀ£€G< x86(àèÇF?yXzð(àQÀ£€G< xð(àQÀ£À¿œžþ/ï`¯y< xð(àQÀ£€G< xð(plP °"4 PXX??¿Š²í5`Ø`a•†[úYùËŠ³ñºZXºß[(–-gÓíUñî{›¯¬ëÁÎç®c_a»Ë¸ïU^A´*}¿¯ôs—+ ¶;ÎÖU:®¬v”Žs×S:m_á•UE°lš½–®§¢çŠÊ(Í‹Ík¯Jsß›Ìåü”ÎWúÙ]¬tZYÏÊïî{å)§ç²ÊºË™Beü”¯¬¸2ŠÕYºnå-+®"å•©—Šêp§¹ïË¡tܾä·yìÕé8¥Ù1]ºO”×ÜùlšsÃq—±ñ6Î]¿ÓÕÂÓ½¦ûÙŸ…c˹ÓTFÁ¦9OżjãÝõ¸ïm~]Ýñî{w›ÏÆYøö¹¼«žûÞ³p”fƒâl^{µi¶œ®î|6Þ³Ϻ*¸ãõ\º>gaêÙ}oŸu-/X˜¶.÷³»åÝ—× CéöY÷îzܸ–woËX¥Ë+ÝÊËgã•×Âp—Ó½ò¸ÓlgÓíÕ]ÞÆÙkYiî:”OA°í½‰ðýØ:mœÍS:Þ¦—¾ÚüŠ/]Fi¶^›æŽsÃ*/Ÿ;îmyoŸuµÁÖeŸmû\ÖÕDz8Ùüö¹4|¥»ËÛüeÅÙ¼ººáؼ¥ë.«N›ÇÖca¹ãË‚­|¶÷½;Nñ –…SúÙɵçoiX¶œ;§m“âì½­ÇÏ}_®;M÷6ÝÖW\›Çæ×µ¬|Š·Á–±pm¼ûZî¶ŒM/ëÙÖï†gïmš-oãK_-\ÅÛ¼Š+ëÞ–-]Ææ·Wå+}oËZ¸öÙ^ÝùKǹÓì½® eÁ³yʃS:]ùÊŠ³åíÕÇÞëjƒÅÅÆÙg›nãõ\:ÍǦ¹ëð÷?rûØ~D¨¤6g±õ®< xð(àQÀ£€G< xð(àQàŒ2‘Ýþál~…;è»wïFVVÖáÄǫˣ@…°«Yòî8‚¶þŽ|Fš ??ÿhDm¯8 w뉴×ÌAãBɱºÞjñ­ŽÔdxäߣ¨úAm:ÇþáâÉ=ˆRAÄ‘ÆÉòßÑ:~ŽeXA·Ò$Û§ÿ™rH‰Uð 6]LtU8ÖtÃcï X¼Ü¤°°0„††–›~¨ö0Ð5AYiöìÙ˜5kªT©R¤dÚ´CXyðÝø)OéçòÊí-þŸÂ1îüqy[”[Õ?­£\€û™ðOëߟrû“·"ôÝpÜ÷Z0jà(ÞV¼Ã&¼$ÈrrrÌ_DD„AáhÀ÷Pâ Ø "'Ü04yeff"<<ÜÐÓf*:È?ƒ6†Å]¼*{o¸ÛrûÒ¤Ò°D#աɤô„oû–) _é6­ô½Í[^ºW>wY÷³×U¡tÅ•‡¿-ã.gá)Î}¯gÊ‹/4áVVYw\y÷*oÓÜc_¼kãuU(]OYé&#lš}¶×Òñ¶Ò-Ýyì½h‚   =xŶW ÓâkãK÷°•î.có—N/]>##ÃÈt÷8)–;^÷nXöÙ]Ÿâ,^º/]¦"þS^[Ö–sÃs§+^ÁÆÙüŸÒpÜñ6¯Ê»ãË“#ÊgCi¸6Þ^-<÷³îÝuÚ´Š®îzì}Epl½öª¼î{û¬«Biº9±%ÝåËº×ØÓ‚®t7Ÿ»ó–„è<Ùt]JÓÆÆ——fóïk>S ÜõZ6M×Òðl~w÷½Íoi©4{_|w¼…o¯ÁÁÁæO¼hãË»ª>wÚÞêwç×½‚-oïuµ8*ÍgŸuµem>åOäææ";;»HθÛRºœ…[,wœò¹ëq§ fi8¶]ş«¬9Ûæ³ðÝp”æ~vç±õ+BY¸9)Å¿î2öÞ]®8' ¾Â[uJ¯Q°¸èÞ–/}¯gl{µñ¥¯îô²îgƒÅÁOiîg›ßæµeËʧ~IMMEË–-Ñ¥K“Uå, wÙCy¿‡î®,-- ÑÑÑHJJ2ÌíNóî= n š#]ëׯTó¤³&µµk×bÅŠhÖ¬™!WYÂápÓñX¨OtR?KqŸ’¡B]†&-)~š4½àQàHR@ÊŠ”] ÕJ•*v·g)sš¸ö5XãI»çC ûS~_ë)7ŸV÷ßrá¡õ³ Ö­[£jÕªf7D“í±„»ú½M›6¨V­Z¹«äÚk\5mÚÔÔ¡q¡EŒC2O¹ñ—²¢aõ¹?díp>Èm²ÊmÍš5¦9T Ù‘æ]+¿ZµjeCDë#mìiœH·°ãD}8é$šèO RâļâfÅÒ÷¢Æ…d  ÍòvÛJ—û_}ÖØÓXÓÎy‹-̼!cÌz±tÑNà¾ë‡£ ¢£ôÍa2Ĥ¿XÙ,ž<¬zÌ6ØÊcá-Þ°ºÄ‘\ì.76‹ G›Ì©ˆÜâ -(ˆvÚt8ÒóGE¸Hš tyŽ«½G2Th k¢”KˆþŽzÅŠ¸"宬8RÛ —¢|ÿ°œ½U_V=6Nem;Üqn˜6]qEy¤˜¸3÷j¶-ZÙµgü¥xíy@¶.‹ÃÞ€ _ 0M ÂWÁÂ(«ì¾Â-«lYq¶®ýkË”†·?0J—Õ³…ká”~.«Œòj"°”üQ™Š”w »,Xû·/xí ,ábûÞÊN Û^Ýpöw[Öæ×Uqâ5]ÅgvÒ´yÝõèÞ–µéö¹t¾²žÿI™²àظ²ð¯pí5ê,Ûª°?¸Û:K_m›$0DdÁaêýi‚×ü©6jÞ-Ý®ÒÏ¢•p<nn^QÞƒAËÒu–õ즓[FjœX~Ø£ûÛÎï{¤™ˆ.ïU§{üT<¯>:©YÂÍ-çæ#wŸ¹éZ^¼Ê+¸Ó߯›Î¥ÆCyðK”/õ`˸ë³qDâ€Æ›»ª"˜Œ½ÄKâsÝË“ÉÊDSÆ]¯«½n)LËä·y|¸ëvãTV^wº½·å÷5¿-w(®Á¶cS2ÌÊ Ñ³¼p4à_nj“ðÖŸxBÇW‚'JÜ—¶ÓÊ‘=¥ŸK,ñ(ø¢¯BYº¬»~ ×§r6^÷6”ÎcãÿéÕ]‡gÝ[W÷Òyl]EñîñÆÄ¢x›‘×òð.+¯-V^›þO¯ªS2Vó¶Dd¨Ð@bb"ûw$Ý[Ý~“Œ`‰«üê@?? —bÏ8åSPÞŠÀd*çG41«+üùy„SNÆŒvÚàÃW©žÓ^¶¡€mSå®v¹«,,, ³Ù³ Τ¨2ÿ´ínø‡ó^4×Àqó£ú××Ũ°m¶}‡jWVþðTÈËË78ëÞÝŸz¶A®yÂùHâKì XœìÕ'Z q&"¿¯Wñj V"Ù>°Ï4Q’y‘OÚþ-˜¥•&VÝ‹žvœ—‘àŠÇGYé‡3NøŠW­`•Ñ80Ði‡54•EË/ªG4µcDmõ÷€@±\Tªëh Âß⥫ð­ìØ)«ä™hÀ¶²d…üSºì¡|V;,NâW‹¿úŶIyl¼Ûÿ¶/ÝióÞ·úg´&p3¨Ѽ¬¾. ¯Šã4ö(3 LND3ñ›° Ü}èn¯ÅEé$0}49=«ìñQ‘b*Ë º/+Zi¾%­¤Ãäs^í4. ´8[ñ<«±¤:tµãªXæ¸Æ;c{…í1ülêwxÝêù†wËBøÆù³MÔ!„«äµpÔ½þDS]ËCªÎ¶K89xéªñèÐIå/åáma”F¿f锃ólûåHóó^ tÛ\äH#kq)ëšÏÓ\Žv0pÈ/p¸™v¨„äææ7 ,”a–Ó+¸Ne˜Ì¤òÊåO%#sWR·ï€p8âb« (€­dy‡! |'… îƒC¸¶®IæOiv Og’y¾E M<… 9>¡`aèÈÝÇ ÎKy¤…±i;«Ö¤m¾­ûX¸Ú¶Y\ó9‘8ʈ•+¡Dáåô¿ï­Ð¾þµ}!8–é_¦—'¨â•@òh˜—ËÝ0ÑPÒ™Á–7R¯þõ›OðÝJ‰­_}¨]b–°7 1ø:ü#0&¯pÖƒ+Í*‡b˜¾Ê+^)_7¿ó‡…£êƒÌŸ´àˆÎ¶>¥+(¿»ŒM— Û±ÓŒ•BÿºiÆ¡ {ÖmM…_Pˆ9B¬zŽÛ>ÂSy;ŽÝBº|œSjœ)¯êV>[¯AÊ÷Sn6Å[cB K¹ÆxðMŽ¢·þÊ‚gâ•æëæqãnë68?³«““MšdxâÕPºcH~°m$ÂmPª¡1ÂÙVñ}ificë1ù˜[Æ"©ÁUîL“O´ FH0_ ¦E¦i‘„ü¡1ÄŽêY¸ºƒ¥psT?w$ˆ¯M3íSÿñO8H¡54á£â˜‚] Yñ¶¼½*ÕÈ©Çxsç ñD~ÞnlHÙŠüÂT‰‹ExH°™ä²Å¸ËÚ4wÛ ª¢ƒhÅ1›Oºh1Í–SÞ’ùMcœ1hðtÒ•?—}šJœò€˜ÊUP)2\UµOÔ"b•qÒ±O‚™þöN¤k®PœÅKåÊÄÍo`‹¶¥ò¹yE0DëÒZA´µx™ßOYuÙ|¥ÓTħžmñW^N&6§nG6«”ëDx¨I/ Ï>«¼‚h§?Ô/æFüãD ¶æ3[—룿6Î^•×ÖãÆYñÒ'tU柟úš¶âbù[ð”få|Im=6ÍýlêPCÄÔIx&݇·ÚjûÎäÑ\¯y‚¼[¬ÐP ÎùwZ” ïhAU²…|aZf†‘Â_»B’s’7ªÏâB€&N:‡íÓ™T¿Èl¼˜Øn?ߟ!½pÖ?eR ζ”Os¦x;—s¦ æçbãÆdåÒmº "Ùÿ¦_ÕV_{ÆÒI÷ &éEÚmÉëÔ-‘I¦ŠŒ©ŒØJQÌÆv±­6hñ6×·‘âÖ}Ì|,9¦~%MÔáDæäìÆîlí¶:zThhüÌ8õé>à’§ÂÅÝw’Ùâ»hlilò” ‘#To‘fY5µ"Ø´ÒpljsøÎæ@‡z®¾2ø;ùÄ_yÙ»±iÛ6êÑþ¨Ì±Bœ,<§±ê+»°fë6ô2s‰£¿ˆL;}ôÑEym~=᥆2qv’”hpWW´ö¥™rEm+®äGŒR¿©} ‚cáë*z”ÆÑæSZ~n6o Ó–ˆ©‡J!Hݼi™»‹˜(½Øá 7-Üõ^QPÿ[žý¯q­ þÉ1z#Ÿ'Þ â¸Ê#»³ ïpœk\PN¹çeågCœ¶˜²Åí^n|쳯iìܾÛwìBpx¤±s‚KÀPNÉ y‡ V1Þª3Wž L7ãMI× ò‰t—Œ yÀr>çÜB¼ÍüëÓ}•—Aøä²¼áéÐTýããf'±Xz«mŽûžÐ|ðœ:J¶[;åLá#ü³Ïzé†a¼Mõ†°ä"6‹gOÃoŽB­¦mqÜq½Q#6ó¦NĨ±Q“O= jÄ!eùüüË¯È Gÿ“NDƒZñÆåEJšíD·2 8ÇPà„`Œˆ2TVÌš‹;.»1g߆Wïº Õb#PÈ9ÈN¤Ž²­gíùE†ÈÌþTÊÅ}Ä_Ì­\ޱ©8ezýªøõ×?‘SN9‰ •‘³{'¦O‘ãç¡cßþè×­=ÒÖÎÇ/ŒDV>)h/@HhjÖID+ž_«]=;7¯ÅÈá¿cÞš œvÖHnP… †a†ÝẄ%Öù˜9a¦Í_Já‚N¦~œd#*UFÓäVhÞ´B¹:a•n·Z²%Xl_¨w¡búƒý¥r›×¯Æß³ç""®Z·j¨ž4J’Óç¶ß¥ð–^=ŸJŽqçtÕ¢¹>r,À¾)¤ðÑü…:‰Ð¶M T‰ #¾d$ÃwÅ<)A]Ì;P΂“UT¿xUí’R´mñ3ñèЮ%"CƒÑ©¶Aª]\=1íjûù"7} †ÿùVnÊ@é–“C7AuUâЪm[Ô¯Sƒ*¡ƒ‡)yEc†“H‘ÂD˜Š×ÄƱ’²lî:÷ ìèx ¾|ý.¤­XˆS/¼èt.~}ê.4ªSÙT"5!8‚Þ`&ìL0ôãVr׬˜Ãq>þAœ$³i¤I1ÍB@Xuœ}Î)¨ãô·€))œVÛ«ÓÄQÊ£úF·ëW.Áìù‹Q­^c´HnŒÐNŽœ€ ¨@>8}¡z|íVµ¦rçÇ©“øP9]µx!&އ)Óf`ûîBÔ­—„†M’Ñ•o M¬Oê{MÀ>Ѭþ!?øsÎÝŽ9Óf!%5-ÛuD„*TxE_M¦-j[æÎm˜ó÷tŒ; –®Bd•ªhP¿!û±:wl‹ÂôM˜4e&#«¢Më–¨fúÛò‘àòˆ¾ì[µ± 7sgýMþÈDKžcN¬SM¢ü`Æþ™~1ÉYZU:2MãÄ1„•OA¼ê&”â%‡wm[‡ý‰µ©¹ ,¤«i±ž–Q€3Î9uã€î8íß~-“j!›n¬þ,«]/Á*¯ßÕŸÂKt.d›æÍœ†•)ۑܲ ê×­n7õ¥B™ó‚¯­¦¤u0y|ë¶xû–ñC`o|þÜÃè”\ɩÇ‹à¬_¶ÆBA ´ÀB©øÔkЄg°›#†c?Ÿ‘ƨ!a,†¿Äª¦MŽ‘jÆŸi«#[œö¸•/ñµólxðDvC{Þ¨uŠOÛ´?ýô Òýcpâ)'q>L@.]û¬q£ü†ÿ¹Äf €#‡|ñJ³øº 6Ç” ¦>òƒø*„2z{êZ|òÚ­ük4¾þéY´jšè(a½G,– ¢,ZL^þã¯Qðˆ¦L§Ü!<ÁΣµ3+{õG÷vMÈ&+ä3ƒ¬Ãcâ3ÁñEU#|ÝÁ´U4ÍÝI#þÄÜëÊ÷ðdSѼ»v¡Yç>œo;"œ8É6ícšøßá·Òóã``3_¶¿ôlç CgâîÇvYÏ«vÈîô™d`Êš…øþ‡_šPýï‡Z\ôÌI߆)Æ`Ü´…èrüIèJ™è‡©›ð÷´)˜>óo,]¾4&'·@·®]Ñ8©6ñÑøÖBŸvÙ¥sþÆÈ±ã‘….=û m³†àú)6¯[¿†ÀÆm»P»q;œØ§ "Bi$_Íb ñTP»´pLE|ë†Uœƒ 8ªÚµmh.ZíÚ² ?¾û^ÿn3ÞüútN62D2ÂÈÂ14e«5l)ͦ3ƒ©KŠ¿¶s2Ó0tð;xþ“ïñì_àÌ^퉔1Ÿ` ¿[6`ÄC±|[N:åt4oXÓÈÎ¥s¦ã·a#Q¯eW׫ û0»±”rZ/'3ovdä vRC¾ì³#:¶k*•ÂLöó“¼ÉÅô©c0r¿vW•ócy|;šv9ÇuiC9îÈ?wÿ‹F’©ä­›Sø2»Ù( ‹AαU"9Os1CM,âCØbžP¼s†&LwƸ!‹i³ês`øt&)¯Ñ3ÕWúSþiþ÷ A憕xÿñ+ñõßðÅ'Ñ.¹–™Uý#¶uÝüI¶c7Ç¥?çGöDT êÔ«VÔ‹b9ˆŸ|4æ<Ôæ’úcÌ9h8ýäàlåÓ÷6Î^…K™ãÛ ÍÈ¢‘-£vë^ÁÄI¦Pß[>w:†ÿ›ºD0y0‡…¹ñ–¾ Uª7Ä©§ž€jU"Ù:¦¤9Åi‡™ ûxàCà‹iÛñÆ'?⸶õ0ièqï â‰×ãÌ~í(3,£´¨î"}Ã/ŠwtÿÌ;fÎCÓö}з{[.ZŸF…äT3ø´Ê,ÅX‚QƒE/Ç“1¥]4gp;«¨b^U*FZ©ÄÍ; ƒhhð*¯®b»‹«³ T– \VŒbá.¦QýF€ ¶ Žð”aŸ±s+^}ë}ÆÖ@÷¾Ç9LºjÑ4 ò ‚ê6C_* »9A¿ðÊ[¦t'Î|2± §_û ¹ù2ÝýíKø}бw4c[Žv´ïåê£E0Ö,üï¼3Ø`—¥×–~ëÓoлcs*Î$­•»l­ä›>¦gú¬ìÛ>¶%yU;døkËÚe¸óžûØþJnŽ*á4`99áË~Ëáê³…v)¥4h5ÔÍ@¾ ±4* ¯½ó®/FÃÏá1EÜö/aÀ¹'"LЉ "ò_Žà†×9Sg ?Þ¸ûNø )6©–áÖ;î!B§cì¸fÜÑ 0ül”)–Ó9,ñiq "ÿÉ@ßMCwÊðçñíˇ¦&ç§Ã™øáÉ;Ñ´n<¢äN­\z­G3f¸‹HlŒ;?Ç‚„½vòÔ)ä×ùbÇ);ئDUŽÃ]7_øúˆÓØS[Doí&8^ šä‹åZIáJ˜»R7àõ·Þs!æ»­Ö'ŸÞßÙ^E»‚ì?Ž/¶UJ¯£L:®nf·‰0åe¢•çU fâÞûŸÄ©7?‚ÆMš "ˆÂý ÕêŠxÇð Ñcú€u©ÏÒé‡eógâæó¯ÄjÆwë{’êD`þŸŸãÛ/ûŸû‰4ŽÄ;Ú}Öʱ”_É-„qç;sG†~p†LÎÄ[_üŠzÆ /^|ÕÖ¬[ðû7áÿ^þ¨’ˆ³ûv@î®­øî¬9#§þ€ ´ ¸í®{ùÜÃF?…x*#ÙÙ:ì ÎN¯chK¶ îîÌ,Œþá.¼ûC:^øPÁ—¡©6ºù@}ívøS0Õ¯òhÑ"š¬ÉF³Ã¤1æ+¬‹òj!bÔ7/ᯅ‚ÄàÏÏÔð)o{2êV æJXh”AÝ©_åI$¾– ¾&Íìê~Q¿s¼ç³NñRWî ²S1nè[xsÈL<ÿöçhT¿6yE2‚él³ú]cPžÞ­yA´±mR}¹¹¤ÿ¥-&ËLýºcÛ4£¤oߌWÞ|Û$GѨbŸØðè«âìã»ø<±¤üØ]56ø«&¨md’¢ Óv*‘vaÐŒÎ7=‹U7DÝkŽÊÎÜç_×üÂõ²^} žkÕç¸#ZyAC޼ yŒƒ–ítÜ÷ ÆÐDü'GøRæ: £NßçpÌËÕØ.¤âµÜÔ—¯Õ5|·ÅcÞbÁîg›Ó¶mÂ{bsïq­Õ¸#ëOѾfÿ8rž}HEO¾äüGt JƒR§åcéô±xç‹ß‹µÜ$þ»¦f3ôa9Q—Í5|l$ÈsŠ•WŠvt³9¨»´À©1mùPí ä9C"r1䓿ï³oG|lÇçe1[±k>þäcSýy¨i­Tc88ø:|‘md©dªÚ°cK n¾ã.æì„߯¾jZ ¯Š?dj2—󀯔x™Ç™ó•*°.éâ/ÑAü¥¶ë^Á¹—üp"4>•WžzÿÂAsŒáKöãŽå”I™»Œ ³$4€X\ew§oÇ{/¼#¹Jª/¸æ¾§qÍ…§#&Œ}Çñàà$™à´Ui’V‹†Ž1Èù×È/ÊÒEr\º…`8t’+µFŸ#KWs•#“¥«sscÞ¡ßÙ@¾1‹NjáÃ4Äù]R7¯Äo9òX±AÁò„*D‹>á„þ}MÝÂÑY0¡þAE/• $¿¶?õ&DwÌ@Bl4«àXÞa€[Ü4¨ ò<1 êSÂÐFŸíÓ‰¦“ °jÞ4|ôÉW8?²!ÇW{Óß9ì‹7ßxŠüÜWO4çâ伿§àÑk¯Åßé¦:ô9î|3äSó÷âÇßá´®±f‘Yô±}X\Ÿol°?KÌÚz&HG•NKV tòCÕš qÓ 7¢nÓF :TTFܤ?fÇFÚT?ù íÎã¦gï.omž á53Þš·éŠ-ƒ°rþ,¼òÄ:}»A¼GŸã0õ›!ø‘÷¿ú1œØ•RŸñÍ#y9Y˜üÝÓø‘öŠ Aü¬uT…¤½Œ>§ÅL"M<œ¹ÅÎv±TíQÿknpË[#?̘Q+œq#^“Ž"¹~´a}Ìñµ1˜ý‚¹‚Tg´~âÊÌN¾çެY¾¨¨m«Öo¤[EÝRV˜¸kŽë„„ªü¾{^VsgCŸYYµn#C"ѨY+tjß qÑØ±-£GŒAN`$7¬‡MkW!0¢*Q¸sý 9`C¹ƒ’ºaFŽž€´¬<´êÔm’“¸Ú¸“&NÀìËP‚›£[·ÎF±NåD8fìxä‡Ç¡Qbml\µ…ѵЭW΂dä;¨¡*o·4lHÁåLîd'„†G› ÚUðg¾z¼®B2>þâ4JˆÁ„?ÂݾˆŸOÄuœµ¸²U‰«T˜—j&P•;¶¿‡)w6à¬kÿƒÛœ‚œTJ>xŸü2³-EGíLQ²¬Záôñ²U)t­C#îZvìÔ‘»1HY¹#FOB¥êõѳGWDúgcò¸±X°fzô;•2¹³ü§©§eæ|9ø#ÔoØ ½©¤dïJÁ¸Ñã0gþ"î"©q3öqWÔ¥·† ¾‰Ñy `§’oB§ ðíÃ×r!É|ûýsü>i NéßIqáX½b)¦r…tÙêµìÜ$6j†Î:Oˆômë1fÌXlÏFÏÞ½Q·Z%,š5 c¦ÎAËŽ=P76ãÆŽ1Õ$7KÅWŸFÍÄèÛ¯7Âwï"¯OÁ”)3J7£øõЙ»)­Z4å䈨*D˜A|>@ÿ®­±bî4=» ”“µ\4¡;/íhØûLüß­WÒXãîûnîž²Oµ ‹‹'üL •ºÊUk˜]ã&õë"˜c5‡ŠÚâóØ_ °eÛp¼·íØ UB 1z”C³]+æáÓ¢YËöèÖ¡W}—`̸‰Xµv£©§QÓæèбy';·nÀ¤q£°%7É’°kójlã}ï^]EåWòIJGAN:fOeŒó.º7¸I5ª óÖ›1ýÄIÞ1˜¶cöô©˜}ÿU ür8–­ÙD…ÈØ²ÃFN@pL-ôëÛQÜ›>a4½žRѦC7´mžd”úÙ3gbÞâeØ•‘…à°htèÒ±!¹ôòY€èjõн;w#°jÙBzQLBTÍFèÞµ#*Gp÷ÞÊ$^Eëd"µ-‡Š£´9óŒä\ÒÍ…©3fbËö]ˆŠ‰GkîÔ´nÞÔ¸u¦¬^ξþ 븳ª¶FDUBÝMIÛVÜŒä‡ÕK`ÂÄ©¤fc£ùrMc‡ö×ÊâÆxc4ð*¥qÛ®øã?XGFþøžï3œuÕ}¸êœ~Üáågí¢8¯æbݪ¥fçsùšî´…¢~Ó–ôá®R,¿úA%^cÄVU|c‘°W?ã…¥§+ï|ŸÚ~\\ânZß\\¹M‡M -[4¦¼ZCYJC® vmÆÎùó/Ån*ûÕë60Ÿˆl˜X‹mÏ¢ñ7 ‹WnB­ºuµ}#–r—¾zbÊÎfر~9&Rvù…VF·=ДnT;ée¥±á`­;Íõ õT5ã]ª²ŒÝ°çK!‘aáô*ÌÁÜÉÜ qÜO>{zq|p‘~Ò¨áØ”SÉáƒ"bEó×ëðÛ§Ÿà"z%…åP—øÎÉÀߨÈP#«hkp7&O˜„¹ —Ò 3ôîÛ»;‚²·Ò f¸)Ó¢Ê ü RÆ´iRnè­¿†¼9?®›M™° IÉèÑ­ ª³Ÿ4¶V/Y„Éœ§VS' Ž@£æm¨“ñk•÷õ-)«0…Ÿž[½!•Îh¡˜¿Ö˜Œfa¸QÛÁâsÊฎԤ¦n¡b,kfÓŽf&Êz¯È32uÃj|ùÞ=Æ8?ã²›qÙy§rg¯2n½n)†ãè`*É1.^Ì%mºô> ß~‘€'o¹³·5À{C^BGê §ãÄñ£°&-Ÿb¡Ò6¯Çò5ëQµ6çâ¾}ž¿#‡ 3õ×o퇾Œ:u’Чw/T ËÅÌéS(ϦcÓö ÄU«…Ž»¢u‹&à;þž0ó©Ÿ4hÔ¡ÄvMÊFŽ(zÄlBx|tëÜqÑ¡X¾àoL˜2•k5@Û0Ò(ü½d©3,<Õj%òó†m‘T¯–iS¨”ÍIfQÌd*ñCC‡²¶1›¶uE>ü&s›ô×/xàé×0èÛñ8ë„^t‘ß‚oøéÙTb9DUŠ¡×Fs´iÅ‚ˆ0ÚÿÛ)‹gcÎÜùHÝÉùŒ2¨q‹¶Ô½º 2 sçÌ¢çÅ<ºÛï N¨Y¿)úöêAÞÇÚ‹1aü,ZF=\2™åºP&'ÄÅp‘f,˜ËOñÎá1š\PóG"õ±ÔéjÄÆéN“Šû¾Í‰à!êñ¡f7€<[)ó§ÃŸ£'ó8Žø'•é}Ò¬e+öASòŠæÆÊˆÉ¦‹6ww9Ñ.ØòŒ•!ž‘¶3ø‰ºùÔCÓÒ3¹†æÜ<ìÊ92ŠËv\³¡¥'¥B4ÙÇ ZthŸñ”Ïá<’N™ñóWïã¼çi—âÚç£aíjØ~ë5ø“:ª¼f¸D‰ÊV õ«ÜÍž8~¶e 7ùêTÀBzO˜:ÛtBçöÍèå8ÞÆÓQ³A#$TÇ’…ËѰe[ºïWE\•Êü²J¨á +ž%6¬è Ú\Ès¾¾¢9D‹9U[2rõ½ˆpdglÇÈ¡_ã<¹ûé¸ãºKѼQ]ê~·aÔŸCé£íbŠè^úP•:i¯LÅ£/¾žíš |näTŠ©„µKfc¤iôŒGGê° kVÆœéÜŸ»a±µÑ«[l\:³—o@u~R4+m –­\‹¸šIèNùZ¿vU¬\0 ©3DרºñQôœYŒ„†­Ñ…òX”´í5 <?ä¬c9ˆE×™(º57ït ôï°yÛV¤„¤ã¶n!ôÖm°rÑ•””ˆh’e³&ã¾ó®ä¾;Е.]k©l"ŸœsÃC¸ÿú‹y.' ÷?ò¸c®ÝO¿W߈‚¨)·­í›0þçAxòíoPëøËpÂiqœ´WàÕ‡NÂ÷S€›ïº;ÖàÉGîE·óoÁ ÷_ÏÝ“mxð±§JÀmyÑíhß¡-"9X¹>oÒĨ;u—ã³Ø}ÃB+v v0êÎY[òã§bbø‰€Êç 2!ž“ªÊÐÓÀ[P$´÷NÊQý+T­`¢Öx å§hôY„ìÂTjœ6†Ò<ŒnBë–Ì·\„ñ«öÝû kÉ(|ÌM‚/¿›ž—pE-žzîE ÕùKWãHÿŒÿên|<ž‹ÿÍ:"82}ù‹¡ËîM+ðþ[á›ArR5Œüú¼òÙhÜpǽˆÉ܈g{ÍOº¯<ÈUGÿ{Kk?•ÙO4еÀ£ÂE—ˆ°`lZ½/Ü~&þäŽ\«ŽÝQ¸m!>úp :Ÿs=ž¿÷„ñ ÷Ý>fÊ|ñóÔ¯ƒÕó&ã•WßÃM×FL‹Ìò­IGÖ:¼ýÖxœ4àVt¦ËÝÔ?¿Âm½‰S/¾-êÖÀÇ/>·^ À_þB³jr¯Ì5å"¢¢ =·EGa›‰H8 Ìš: ^{üÛ‡ûOîˆY#¿ÀmßÁÃ/ ÂŧtÃÒÙqÞå·:¥¸˜Õ¨Z”áÍh®úKp§oÝ„‡{šé]1l w ówbàÃOr?Ôº\ˆÑ]:’¥VÀ}3-=Û¶nE„_ÒwîBlͺ„Mw« cðîðŸöÔ®fe÷½÷¸Û^£;¾ûøY´¨S £þú7?𬩨m§®˜9e"Ю=³&ÿ>–ñáØ°p*Æüþî|ìUÔ¨ ~ùbü0™^'=û"}îH|Äàþ—ÞŽÿ»óÑ€ùæÇ0Î…:ŠátÙª¤Å³" /Ø<“kǦõ˜6e¶×«ƒx~‚­CÏãø9›pd¥áÏï>Å}ϼ‹/¸mkâ™ç^Æ»?ÍÄ{^…5«V#°óáŸ|€-¨†Æ-;¢‰1-c9£Cf´Â’ùsN¦fõj<ÿ_ §6i‰Ô5sðÇMzawÖ½‡Þß‚ö­`9Û>ð£_pí çcëê¹øà}¶Œå7/^M\8YNf¨[¯2† ùÛƒ¦m[!}é<<ýâ+è{Ó£èF÷ù\ÊÌ{~ÌÀÿòwê[SðáÊ“ιõâBñæ«/`wd,=“¸2¯“Ý÷£J‡7¬]ƒeœ¥ò³¹ƒ†h·`ó Sî4»?¹iøãëøÏ+Ÿâ¬×óÈD%<ÿÒ³xãåD|ñË ´J¬‚Ñ¿~Áþ|ÝÀïܽ&SaiتÚSÁ›4w3¢JøãËO!º½Óª’·ÏæRUî¾ÿ¤®˜‰‡îþîz·_q6-ÂÃg]ˆY¢?šµHÆ|Ý“­L2I®Ÿ¢xºãïØ¾ ÁÜ-ݺy•ÉÑ­]²q \;k)ú9ÆõC÷É\äñÏôŸÇ[¤á‰7þ‹IqöÍxôõ/Ðª× èJC`Ò÷o`îàºãâÉgÞþò·1ˆMŒÁŒÑ?á©—>Ãew>Å/’„­‹e(½5 ÎN¤Ìá)ÅЯ ÓFýŠkîzÌä8îøã0|ðgæþÑWáÂS{Ñ#h#žæNÉÉ @|H>~í3_ÝñÔ[¸úœã±G¯½â|LI5Åдq2¸FÂP¼ðfR|ý_‚ ˜ <µÈÅóÊUâŒá9¯Š#Wå‰S¯^"e¼ÆVV/úOßL¹±–r¾kO¤¯‹œ¿p.¯NcŸ;4/‚k”@% ¾í +ìÜ™†­[·Ð¸Îå¹i?DSa-ؽŸ=ú0¦fø2ëRëüÑ" cˆgÞûHhŠ^õ#ñé§ŸPsíŽo=…‰Q˜=é¼üᮂÎmã–­‘JÄÝhÂÐ…tðzÔŽ6.ö¾ho³›,_»cFŒÀ²ª±\ÝÆÅ§•&›v²ùíôų§›ç‹®>'ôëÉîä³Y'žu>ÒvfÐEYãŒ}m䇯ß@ M@júF³HœëQ£–1ƒ6vr¡Œ‹ŸÜ ß²n)ž½å cÞz÷ý“ËðÄÃwcýÝ¡Wr,ÌrÚ™›¾ï¾=ç\/ÌêÐP‰"œT<÷øƒ%T»Ÿy Wž}<Ö/š…[Ï€¥ÌÕóõÎÔÉçßø î¼æbgoÁgo=ŽAÊ M’“±b£×©O‹ƒëžíÊÏãàd˜:y,26/¥“ǹŠƒq¿fÙÍ)ëðËLéZõpÖé§ Ur#cÄ´ê€\lá{ÀÍŽ¨ (qØ$’s¥Œ˜#“riÔTA ÏÁoOÙF=â|:I5” ù/€ªbþÄïMBðîôÎèxÆuèÈÍ¡e“þ2‹CýÎ€Ž jáçç9¼ù2~õº6©Žùc¿Å³ÿ-1ëàÊ[oÇoo¾næˆo¸˜P•^sS‡ƒ§ÞþWÞÿÁ£œ-“±aý|œÙ„„k®¿»6,ÄÔ}}?kp÷Éç`6ûæ®û.ÄŽÕ³ñÐ=·`ÀÝOá¶KOÃò™ãpÁ5w±l8®¹éjìZ>ÿ÷Ñ |ôýP.²ÄÙç ª_ÉA§»xtEº„_f0ßÙÂEñšõÈßÀJÎ…ï¼?„Þ¸ð¾ƒ>x×ÿïÏ¡EHLúê d¼œÔ ªkÑÖÑѵ©V“Q¿üw?õ.bx|â²^m1mØ[4m†5nŠ*Q!Æ€.‡¸˜ÍFF,¡'×"γ%[ÈëL&îÞ“}·oIÁäq}ÎÙg¢ck.¯²^é’—Õ¨KÅþᎽ ~í†hW8‹ "¯=ø\’¹“” 'ã¥WÞÇe÷>ÅÌæÜx\ˆç^|¡Ý<ùêû¨Íyç™gxñ:´£mE¸–3Ì•xÛv¯ ðןQæÝ;·mÁªÕ¸@NØ;é®>w¦ÃëœwºvlÃMÚ#ÄûüK«c×nÕ£·š#™5¶œ`ÞÉÄÛë©Tâ¡Ö\zG£u»6Ô+añè—ð-õŠkï}}[ÖÄÇ\?W½<ˆÇ:ƒ°.úOj€IKÛcîϸîA<|ãÅHã†íãÏh¾-×<þ&º´ká‹°­-N?œwdÃc;ˆåº‰$î2ßa岕J-ÀˆÀ¹—_ƒ¬Õ1…Šê¢%u°téæIDîZäìÂäQ<“͘«îyWÒ½8#ež¼ñ2|÷Þ38ó„Þ4.Bѯ 0bQUÜFúnBjsžZÉ©L¸Ÿ¾¥Ûü7èqöUøÏí7 ^|$þøê cœŸ<àôìÙùt7›õÝ—˜ðõ[X~Ù9¨Ç—Ëõà<5.« î¹ÿ"NÄ•]µ&™– …¾3HAñ F:ES˜Æab+då˜yó1èÍ7x–)“~Â|qxô޳PÞ»7o¢{‘&Yºß韗ù+®‰Gu°CWWÓmÉ2Œñžß¾Y©)øþ×èÈUÑÞÁù™˜6a¸1ÎÏ¿þ~Ü4àläs—ýÙ;¨P}ú2û¸;êú¼úÖ«"µ‘ÿ€˜Z}ù;’B®õš¶Â#o>Ç ðD4í†ï^§;r\¦jŒóî§_‰žÝ»#${3Mÿ Ã~ÿKÎ? õªWjNð!nV@—Á·ß̧ñ”ƒ¯¾ 1ŒÎ:•C 1ròcœŸ~Õ]¸íÊó˜±o?{'¾ùî}Ì9íDtJ ÁI€ß§ñ;šTÆäZìkƒsÆmpõm/â«îEFT;üðëûfç}˪yÆ8§EŠþ}{#‰®Â9ÛWàåA?ñŒâb48Žç ¹*­ðÃçŸbÞØ?¸J9›ø<àæÑ2¹>36`è×ï˜<÷œ{ ºµi„¸|îþ?_¸KÖ½u"fMr³kï}—œq¶.›†s¯¸ ›2µÓ㬠W'„ ­¨p™ ÔT@IDATóY»x)ÎÇm÷^‡¤š±ãNsÎÓ SŸÆ‚Ä6OŽ;øgCŸ«ïÁó·]Žþ_…Ö'¦±©°/OÀ†¹£1%eÞøñø¥®À#WÝ‚¥C¹ëvs:êÐ;J2³(øøÈýâkm’ø»¹Ø0Üçg¸ }¸Ã™µ¹&&ò>|ù1ÿíϸñî—1òŠ;Pß?RÞÖ¬Vù™;èñd¬@‰ã:5ÄDÎÝ<û.VmØbD¦nŒóKo 7\| ÒS–à©‹/Á×ï>‹ÓëŽPüÆ8oz>{â$rbðËÿ‡~žÀ¦8IJͱto:Ò 7K">’¾°/ ½§äu‘—ËÅQ©\µ–6få­Ê錵è¨÷8æ¥ÑÝßqÅ@lžÀ¤±¸÷ñ×п[SLg?ðÄë˜ÁwœÜ«#®è ü~É5XUƒ¿ÍêÅóhÀr¼MÏ œØ¯7’ëÒeyçfÌ÷3 Ÿ>­ë' rµD¦Ã™—\‡®­Ñó-uøž¡:þ©ô~û k6lææQ6Ì#4ѯk;Ô¨+žH&âLwìÊ”“¼ƒá£àž«³Ç¹Š¢»â þQ–Íô2åÓ(™~ùÔ”éÛº'bÙ_~1„ãAرi-7¹vaÈ÷aí¦ÍØ•ž† ¿}nò_<àdÎ]p½Í.gßÄæcø”‘&íœ+¯1Ç7*GôÇiÜ€š1˜4ì'çÀå7_D™Ü©«+ã˯~gßÿŽsú¶ÁÜSMÙ/¹=º÷Dez#žAc¿zU}¯›–k‰$yìH¾e†âþÙpáÝOà«ÏCÎ…_$÷æ‚°? Øš|á:zÎ,`;¶ ¹f%TJ\žÆ÷õð*Žó3 ä¹—ÉãL£¾w úKO>½¸Ë߇Þd|7,å0]ßóì¾bN5r‰Æþ:Äü`E?::£qëÛ~jŒêôÒ”Áš£c1¬;$< =Oï<"!LýD¡UïSqNÿžˆâ çòý ;Sæšøš•#‹¤¥Z)Ê9­uæ5eZ0æG<¿’Aîò4Äi¿ø¼ÓQ«V5.þæ!SŸJæqž ½h;LÇW| Å€YÖyxÿµ§K€ýðË_©¿5Ç|ƒì'oÇÀÿ?rrÝBÑrË^ÄÙ'tãæM6‚ÂüÚ{ŸÁ¥§÷šÓpëõwà§Fàʳú“fš‘ªíûsQ°¯Y$O¨[ŸâânålŽ%»;ˆBÞL¤fgš<2UKHhÀ3³t€4¤¾~÷käæñ|yµ:È[¡$q45Šn­›ò n –~C¯¡ŒÝ6ï}ûÄ"c‚¹BýRµ––±)™:X’”ŒƒBÇæñȧH ìj®²KÀ(”úÊp{þÅžÅår°b=ƒ+Œô>FgD?bê’µæý1çž!CšÛæN5jhߟù¨ŒõGéõ ó i°Û÷‡CÕ)µê%y\g&“Ê}ÒñÇ¢c›f(ܵ¹™v@Ð¥C'4Ô !Š «;wƒVÏAFv.Ö´]k µŽLáä¥_ª 3D¡4Œ‹•M-ßsW¾AÃDÄpò–—¾ËÄî\‰—Ÿ~˜ü’ƒ%êAÈw<.W‘ža'öœà¯üöšæeçp"Þ¯WT/ÏDJFª‰ëÖ¹•p"jås‡®{|0;8í`Ô£%Ée‡*'„lK“( C­P*Û®â+”…Ôæ‚R"âé4qÓ¢t× y!&½9 9¼‰ 3KÓo.f‡Ù-Ç94£7oºyW­ýP ?z(šp7gý¯«°+ÏVæÛyŸ`Þä ³B«„­bø=Ÿ¦šZòâîG·f!¬,m…9®WVàSëÌn¤ŽV!Ž,E[”£1M† GǦÆéûÏn…•™=)Dwˆ[¸“™evÐã7çä —‹sË0ƒN~ éqFê`”:žû<+˜•MÇ$üÙò$ôîÖ…fq´¸ˆ¬ƒ$šÐUc{o­[G‰Í±‰Ä† Q›;e…œt(tëèãºâa˜»š&ù9¹ìø¹ómÚ¢úr·§)š wãÜMø’¨Ú©jÖ¾'žšý)~á®ÍÚuë±Ffœsæã£7FòÈD2º$…’ìHkfbÒ»céÔqM³¥$8I#nQ‘QÜ™‰1¿£ëq¡0±ÙY–/µ›ø@f¼5#bpì—¢eÇ>Xº|W²×“Â…4¼íê«Ðbú î¨sÍPÆóÝñõÐ€Ž¦ÒYÞúU¿bî¼y4µ]Š˜¸8¤í´ƒ|ù*ˆ4–9Vb( Mù¹vÅ^À(7:?¨¿²D;É~uš7šÁ'_š8òœ§•p·?=Ûê7™K6jÔ.C‡^#ðÉÑÁM^IJMÊ]Oé…_ñ{€F'œ{'÷½¨¿ŠQP\ šSæÊÒ9ØÜa²ô瘠gÛ<¦‘ÏgZž9£o$Ë:¦V Úvì`ÒeñØ]‰¬BÔ·04mFç­[Óaæó»sÇöh×®Êw–s•ÎÚV²àÂQfqì7=œ¬Ñé<öïsé86ÅÙ;1gúŒ~®¥ s¸ñœ¼\¨­ß«°my&›{é ÑÐ.XØrÌ™M~mÖ¶ -ª"ðÉô¹êf0tð‘ˆ-³ºPüQB_é;, 6/ý#7,Äö©àúÇ4·­i¿2Qo@Ó8ãIÛ’Åc&Urr ´án⎵–…Ä­ˆü”Æ……NêÿdšZ½=Oí…¯Þ^ˆ¼ÜTò•ÿ3‡@ÇŽmQ‡º"²¶`˜Œúð‘ËýV»ÓvËü¼ýާУCSþéëÛùxèÙW M- ú2nL¥OÝ›- \Ò¢åPŽF¶Æ Ò½Ž…Íwñ+#J9ÆThÒ´ëÚé´¼QØÉ™šÎÝËêOóÝ"¯Ï~Z)ÛÖåàÆÕj…Éì>(È㢕£¨Qa粛α:víƒN@^ᤌº0µu;¿h1-§ò¹Qôe::š'Õç8h–þ¼ÀyùuÕ:C“$3p7WR Yñl*ÿ'Õ° üïN܉ç\†ó¹‹Ëc5+×nÀ|:÷úîÇŸ‘S°›ºÖò¼&Ä¡auqÄ á­/¤„ÇøWÇŸr2ú 8’c…¦hß½?a~@‹·—ÍßÐcO‡RgGqg~»)oå¹xê—ÏŒNÖ<¤]4-„óhi?àå÷0ãÍßQÇŸÂã%ýhùЊu ®“ÚÇâÕ¤çPZEN “ZÈ£ŸMÐÔßlZ¿3fÍÆ‚—ðôFZ½jðÀòdÂEpåÔ9 ´k}vÔ{Ññ|ú5øä¾ð£÷ã…MpêƒÑǧÚP_ ñG 1‚ÖlgÛŸÖƒ!ضqž£.=›øÞÓ|ÞdZÉ›ŠÌœ@‹Æÿ³ëFŽ`þ”|óÄ C!ÓÙñ¢K£;Wv‹öpÔ1Ç"Žæþåå…X°Éö£ÁÔ3™lFÞ^Ç^ˆ+ÏFöa7lÃ÷]‡¯w7ÕKÿ-âfž£ciô–Jk&ªoêF> \aÌWGónüïèÛ¥9U"9šk”Ç#Ëùhܲ=ÎæFÖÔ7›ÉyÇ£ÏÅ \`ˆ¢®‚lµí;ccëóøHS„—fãο?¦)`)6|(¡q³Žô;ÀzG†²ßã*б†´‰Aâ |üí'èäêM­þW£ÍDœ{dk¼3ç24C÷“¸3ÔÑÅP†Ù<ë Ð»s[îFpp–Õ#v6 99y\]æõJì¸ò|“v9Ú5LS×Á°­òè̤Zãò¬§9׸·ßÃý,Y>?.aÌÃyÞ¨ûÑA=´/‰Ùù’9­è¡ ¶)äÑ2’åm#qæ•ïÃÂþ®þM¸kß¡cg´ãùáÂŒ­XµôK“–Õâ¢S(xÎ]ákž{ïÇóç]Û4E-NJ7¬YŽíiEèÈ3Áò­Ý^ÝÕ{w úiißל~^ø:=»vàFÇwžÌÛÕWÔðånÞ©N'U÷>cú·Ã×s?Ä¢Ÿ—›zrÔ„ÖÝúcôk£°k×N¬ã"õ«ãÆcêä xõ­É´®ê†·Ç¾ÆÅž]ØÌEÒ‘¯ŒÅÜO?Ä]>ɽ'³ж=`ø¾F'—ÑÂ!-3Ÿ×5†#ºy¼9v4vîÜÁã`kñü+c0kêdÔzv,Îà„×é [›€ì7¢ÅYï¾ýÈ3ûr2X‹í·eåÏxî’k°€‰{a,ºµŠÅDZìÚ@?Ò3lyñ7Á4 ~û¾Pì&!»ö9¯½Ò)))X³b ÆŽƒ ïàÍ?ÄášÝAé°0øéÞÒA7z6¯Ëö8.4à»5AéhNí:1Hnϼå4ÌàùëÜLà‚³ÌØ/[†ú.iß’ÖÁ”„WXqÓ%Ÿ“zõÎtÜ´»KȧÆÃïšÝlÍ |u Nç«©Q¨ï\ˆïÒµ;âbèÄuS,7Ãû?âè°ÚQHhÔtÀóðßÑÙpCZ|Ôãbz-'—¡ $Ûq¡“úÉõád=èÍZ¶!ì”9Üs}"ç`ô)´më_jW_¹›·î4áeÞïŽ*)AuS6çv;×êW]Êmà¶0ê9e–ÃWY>ú†öJxPC€;*¿¿pM@jGÅ¢aÎ*£”ëÚÊœÍåJa[±ÂWLÛ–\´†W_Œç™¾nHÙ¸£&/dZ ¹qCÐë%…Šê›W©p‹¢Ýà£ñŸ ¾Ã³oÎÀ5݉ӟçy]I²Ù¤š;}*6-[D®eçÇÍ~<߉&³bRÕÍ ¦I|}øƒÁ‰BåPò|Y£f­qòÙ—ácNЧŒ{á45¾áÂЪ“Úb"}w¹P’±‘æp2‡ŠâNC„•S‹0¬›?S>hNÑÍ£ã¶oMœóج‰ÂòÕ«1wæ ´åÕNQ [š¸™|C<ÝyLwÕwÐÛR 8ÚNxMχ3«ÊL+DT\C ~ÎúzÞ›;×?7ï»m8±Þ ióÇhNÇê<ÛþÊkS ”Æy¥H>Vœ6u 6ü\æ–Ÿ˜÷jÀ Œ×}MçŸÍ3|¢3ÈÖ‘â|:ßBZÏLP~¦S²Æ#y6˜ÖRßB@hm´åîêÇîÄ•·=Œ§î¹‘ŽjpLïÖôÕp2f.ž€•«×qpØÑìHÖ¯Z†,:vkÊ#I­ûŸ¾‹©ä±bÙºüGK.niP¬»“b=‹á ¶+"ÃȘ¤ÀNóW1¸óN;88“i—ê«? x |^TÁÝuy‘ÖݸK¿±„Ò.s ϰ6¢–Oûo¼7' =¹Û×âûU;pù¿/§/«×ryæôéh•œˆúÉí ¼ýáÒ´õxmªºmv8”*j2l5ŠÝÔÏ ³"M}Õ¡«ãùbÊñÒ¤]¸ãwÑiP^”J\vÕŒ«ömZÖ£õ°yé/Ø´y ’â#ÂUl9>iÒs’èø¤ÌÎ|ñóÂoQ´k#O¶'šÚ²4XÌJÙ‚ xû¨³.Å0ž/‹â`yÝŠVÿ5;“ Z¶] Ú´|->çÀ-}gkÖc’ gCþVã*øN¬úÆîn¹ À~Y´ÅtסC{:Ò“MþÑ,t¡ƒB°ÚIžˆË±nÍbLúø+:\<‚׳ţˆ;9³üŠÝl32«ÉøàoM Œvħ“'båÂDvÌEÜ)ßa\Ýo‰—r,æBA ò1éñ×—?ÌÄîª5Œçä "¿nɽ† {ó&8…ÝÂd::|ûýÆ1äpìX¹kókãÜ“†ÐLÞ¢ü‰æŠå9–òÔØ üêøÉƉdaÚFÌSLv¡d›—üð׎_¬'bF.ù8ßGפã@Zj)qóAˆ£ü…ÐÔ„M3ðá$^éT³ÿÒDÉ‚*}ë|:i";÷çL'Ô¢¿Œw?œeÞ«ŠâÙáÁ']Šé½ŽÕ”©6ƒÏD‡Öê︋¢Á¿ÈkK0´—<å™ßK1í£Éø5±>­6²P#¢>zÓt¶/w°¾zýC^õ9»³;ÑÇÃL“º·¶ˆ¥õIFª\ãNŽø¶lÙhÞçÓ¼:„†„d«#'Lûgb9‘Hß‚)_+ '§ÚÒv"^ûä½[¡ˆ&Oª&~5©¯šÓFá‘ñŸ q,$è÷å…wÔ*uhÅ‘h¦=ÅêÜ|eî­Ó„YA»)Æ„”ôb–ç„‹ò6˜÷Zа:|HçCŒýö‹è×¹ õiML}ÿi“®%yP‹<…td¥ ‰˜&î?(äÄÜtiécX?ÕÀ5‰Í‡m5‘i·Ïºk}=´hft '€šà3ç<*Ñ­Ï`$b4~š; –ð8׈¨Vˆ»ï¼ƒÏºtéh&fÂß7‰NËÊ1¼tÎ5ã˜K«ËÀm?Ú¾!‡ÎECBÃѼƒúÕ÷ðá+éhª+ÂÑ÷'h_ý´MZ´1Á]²h™éƒšÒÔ^WCÒ¸)NÅŠN.2¸T3´.ZS§É 䉟  e$oçj¼>Uã:‘kØ„Çlþi¯æYàHÄÔ*ÂÜ©Fú¸àQn`{? ÍQ˜•a¢ ÍØwH—¹…l™¨ka¹Ï™ŸsÝùô÷@ •;¯ãà›h5ÑþŒ¾Æ Ãý?†þgr€sõixwô3¸ëÒŒ³’Éè þØ“?=ßÜj#êÒ‡íÔ¸i2λâlÛv)MÏÞÇ{ŸtÄ…'ÄȇnÃuw=Fﱟùr7ÇÃ#ïBÛf<+\­ÃO»ÿð0&Œy™ïc1|˜:¯Uæš&9ñ©Ïë1þÍó{/Ÿ†ÿÝþ3Ïž‡QÞˆ«îy!/ÄÈÇîÁH^Žj5h¯ ªœ;â½Ç]×nÂCÏ¿;þ;ÍÆ<ˆag\Ž‚òZxô¥—1õm•oéWÝŽS¹ÂÛgèI8zþ Ìœô6æðï°¾Œ_wµš*šÖc–´ôú©…Z‰„7`Ä:ÚñÉ‚ÏnÅ9ðI¿B}®˜ Ž‚³J8ØOjÚמ<ž‹NÎÎνû#¤} …Â^WW'6g]z/ÊkŽÁ›ÄÛáÞí„‹¸3V“Ö.íp\ŸføäÓ÷±€Þü8.¡eÄÓ÷åâÆ{ž¡C3âáª\<ñ¿éY½òw¬çuqDbk#ƒ»)Ö¸@üÉ=Jwé{1µ>€GîÿŸÐ¶¡F[Üvÿѯk[Ôÿþ7áoŽÁ lŸ\>zyêDF£×°Sðʧ‹ñÊ“˜·/³®-›$¶kÑ;&!Ÿ0cß{³Þ 9ú´óqÖi§Ñ£-WÜk$ùyþ‘{B—ã.änÊÉÜ ½„ºp4.»ð+t=¬j5hÄ­,->”Ñj#=œ ¼¿£F>i¿òþGèHGk ïŠ7g|Ϻ}Ï4CÐ’sï5ôà¯ö’Ià;ï¼nþZ6o†5ëÖ£ë`zr=ïXsæËœô£Ézfµ"’³¼=ÖÿF_:Ò“ynuĦyÍÌd\r2nÿ:ÆŽÂÓÞ]!ýã¯DtýÆø×­ã€W^Âıϛ?%qéÍÆûwçîGP‚&âzTWÏñÔ¸ ô<ÿ/·²ó¿ö3 ¬|aÀy8ïÜpt=|õÁ×Ô³q×­³Ññð#к.%°^m³Ëï’ûŸjÖK¬ÂPxáéGü¯FœyN§ÃÝRÚw]s>zá-¼øÔ£HlÓmz·ÅŠ+ÌN×í­÷FŽ}Í›·ÀºukiÆÕ Þ}#šÄ:(êD¾ïPãusµá±ƒ9©áq.ã8H²ÆAH…@œâšðXÅ&`<zÃø)Ó1â¬KhJº orPõÞ(ûvà‰༓†rq:{ è„çé{nÇÓ1MÑ¿Sc“ˆ—`±“¬…=âÊ3¿Ã+ïÏÁúíx¶¹s«PžQå{âãã[o¹ûúnÌ#™¨ÎZü2‹väµNl“‡ï¼w>ü<®ºôS &ªžzì.¨RÏûsYå}çq_»ÅÒ0ú äÓyOn—ìÎ8‡”»†\ xùå'ñø]7ãÞ[¯ó—qí]càaÈ´ÐðíkG_ÁY …sœb¨ÁúDh`žÓäD!,Ò–lÞ&uÃ͘Dx‰ºúIA“>Yã%µìL]øÞÿ&>˜þ)~¦ÏÂx5kg.Âq·Hº)P1#l™º'ZÞµë'6FL9áÓ/Sšìáô+QÎÉiûì§½OÞþ nºv®6‰GáÌsÏàŽY+\qæ0Œz6þ{Û <ë*Üqé)ö ÍÝ…Xú\iѦW ×úaÚLöÓ'zŠbŸXGiiÕÛñRdî9Ù ‹ÄðS.DhíX<ÿÈsýÂS~PÃÏü7rRèøH}™®p]Ãs­/¼6ÑÜ])ÙŽw_qÜ„iÓ>p|»¾n'еi\€ã“póe§âÉ׸ˆB³èz*f={+ιöäU‰QO?ŸØ<î~îuC/crÏÝ7/ÆTûk'=Œg‹;uë…¶ìãV”€WŸDù§g|ò]ûÎ}0¤ã[˜<úyó×çˆAä2nrÆPO›¦e?œÄˆÕôáãS¨çCåÔ•ˆoN6VšÉ:€Cò÷%y fèÅwb2õï½õjÄ7ë€\D±A×ÍqÁ%e)î%„×o‚zåÜRnô*N¬Ûà«¿ÄÓOŽãÞIS4‰ÈâYú,\tÝÝœÌuAT6xìž›pÛ}OáÚ/>ôÁ»]ŽSO¢ElA žzt4ª>’ð*âm¬ÿM÷ ovcТFŒà n _7ŒrcY›N¼);qIÉ8‡}á½ì ¯£“¸¶]yÓ ¯:Öá<ñþBB9¶`°mK^¨YËÿ[çÐw®'^ƒÄäV(ܺšï’qï“·¡m¥5cvñ¡)–/ß µh½ee’åPÔ1±”-ÌÑLc'ºÏÔ¨ƒ×^|ãG¿ˆñæ=–sÚð(C97ë,ÏÓwË©Ã6Âñâ$Žß­QEC ¬…ÓÕ¾vV9V§„±1õ3á&¦/>”u³M–3È8ÕMO²aV ¸…“Árª…„òlU=NŒÊ‘º‹ç–¸"Bûãžu®ÎIc*ÍSÓi:Íø0^kSÏx,§¹d*qÚÍAŒÎ!…Q(Í@ÞJ©£i 2ºvo³x¦=…ð hU˜Î‡ÖãN!EœËdªCzFñ¬XâÎk ¸lŒ´4®8ñ®U ZiQFeZ@ó,s?¤’¢C^Iô*Ów¥T>¸‘êÈSåm“4ªÇ:ju/+#¹<»JAŒ¥yšÎ׳ÍÒÙfZ×9¯„‹éÔf+w%Ó2³©äxuwSÙFê`Uá<šmÚ´…×áqׇñÕhJ£•?ÝIóP’Ù,Km)Q'Ê PC8èR»§¦¦™¶åuÿŽŽŽ2‹CÙ4±”—PÁæñ,¤ø³ZÍ0òAŒ¹ÚEf;él§B¶‹LÀ„[(ϽmÙ¼©<Ö Å—8žNlPß8ù¯ËÜv3GÕ9tÛÏmyüÌ¡¶®ß‹!t_sv&ñ¥¹½L3ÃkGÒì>Á8íÊÎÈ /íâ™y]OF³t\ä4(”$™çq¡CW£DÒ”W W÷¼fÒÜP“¿0Ö»>ÏnÓÌ{'ÏåfÒœS²Q‡ç£U•Öj}êÎíØÂß²æˆå«™ðSIÇ“gÕÂKf`qäcyHV»–p!YŒIÔÞ2µ’‰X|ýú¼‰€^V¹Ã˜F>¯NúÅÄÆ+­z­|Ë pó–í\\ lʰdP 7‘¦UÞÃÌ”]l¯<òM ©GäTw¡gÐûhi®Î¼nt¬á9 ÚÊ…®`ÞÑØ]õʤ•W§lÇðÜX¨wY_wñjw‹é‰<›çàÕNZ%—ù¼ðŠ'ík±½´«&3Lí:ìbûè -uúÒc±ôv*3¾’Â|3«ÕÕ©{ä7£.wÈwr·[w)‹~ê” ¸òœE“î|Â(á@04¼¶©g4w=­B5ä“–)¤{1éFþhH›´bîžn¦èz¼øú”y0gŸ‰g=ú—R¶vQ§ 7é¡8–Áømز-Å8+¬Ï a1ñÔqìÖ=”uJç1ŠtÒI<NJàázäS P´¦ú†ò Bá_Hž‘™I¾=“¥-ÂkÑÌ2WN~‰"èÚ¾jÔ9l×”òµiWò5ÛCt çL§þdòžJ9Ë£>ÔõJºê/†í¾›æ¡)t ™Ëó‡L#k­„úw‘Ç¥WµQ‡:†ø‰µØøYôL»‘¼¦ÝJµae²„‹MQÄ1Šº4›V ’ýø¸x–Ç)Íë$/:wgAÒ§Õ·.aÚvÑ8Ÿò& z0ºKò¡]é"9zsõȦLV¯Æ›™ÿkr¶aÅz꾈°{à­)ã°ÉÜ]U¿aMþÄ+’ù:¬vtM¿A~× ÊPäEõ`]9 Ô‹­Û¶“>4'fÖ°Q#ÄÐK5; cZ»cÛV¤fæ²-⌙³Ìà%ŸõH«Pꥬô]Ô­[£ÄøzºÚ”;DÜᑞ¬Ã‰‘“qÉI(åÄk–( U ÜÁóê|¶Ÿt³ú-õåºâqÛVÊ*eXò'=O½)ÙÖ$º²1Œâ$§â¿hòŒvèÕßæQÿKoJŸŠOU†tR)M³Ó©Cu•cL½8úïðé+ÒW¾,RvlÇŽê3òLûû¤F í î°e2ŸèX‡úU4Od°OªIùŒ#mäII}L õ‰xMúD»{FÆÇÓÊ'”2´tê@ÝBþW_¯ÕLÊŒx¿6u±xTü éɦ´ôLî¬ÓŸ“éé;õêKÌ8ƒ4PÛçÑ/IwÏC#ê°ÞцnÒ…EùÊDvn'”æ×äP»~i”Ý4q(ðººËôQ‘FFTö.Õ‡ïjsgX;›9ì—òiMþФ“ª\Éõb}§H^5I_nÛ¶W"æoy>;ÑŽÉ$ÇÒõE|¿iÓfÐ<;}C ŽñÔFp˾WºV}r4ë >7ãÂŒL^†Ã6a¹Ò™ª|®ú6Žûjš²£Œüh§W|”ÊzeÓRKz9¼¶•}ñ« ă_ÈlVzM²« ñTDHcæŸE½—WLËéŽ# }ÙÿKg¨¿ £|ä’®êtŸèÞ€ýt­¹Doµ{6ÏÚŠê“5Ö ç;ÁÍᮟÆmѲ`b™†?)ÿ%¬{:ÛÛ] Å>YA:2-e¶íLåÂ$éÄ6*¡Î*¥U?ÌK ÍJéçAcݺÔ5%·îâî±| DEFš>Cüªñµt{„xÏ·È£òeV,Úiì’Ãë'cãê_nFP·ê±Ìç(zXãçÝ\è©Ç«3pŒfhÁ>KýD†i+n=P¾ =(c’S×J%MÒø^ýC}h¼+ý©+T7²!CŠhêÝDÂucv9I”Œ¨®aÄ[ã£ÌsâH0d5¦:踨ŽÃP¶°ß/,¥òXÇ5:’¡qA]ZhW=Ÿ}§d<’¼LêŒÊ_Zòêmë"ïðÒùÕØWÆKO³ÏÑ‘@ñÈ.¾Ó8\ó5z}SX„èı,ñ)â&ŽèÁÛãnŠ`_¦>QG4fÊ求 åwHú¢.yLrl¹Óʶks9^”%d8ý®ä²îaäÓz”e«Ò©3kQIÕŠÕ¹fóS7Ciœ¢1¢—⩤«³ÙïæP/H~ë1¯ôŠŽÃeÅ”OÝ*U‡Gµè£cé¤[ûFéõÃÒaÒWÒã †¥gYÇ êŽbZ†¨¾—>S'¥H6ëPÓŒ¹ëÑa-¯I$MtŒM }1¿~6áeÜöô¸æŽÇ0∮”‰"Ž!êÑ:#†ºQc†,Ò0‡É#Ø_Qß •¯±ÔÚµkMŸ0tèP_ѲTñ!i±ùÓ?h‚.lþj„VAЬ’ƒ')N³#éìFMvÞê\5™ÕÀÙŽé%ŒZ¹’)¦U®ú­¼þs»Œ×ªŸ˜ÕœõñOxòQ#t³ç5x¾•–裰<)jR¬ cÅ@Ø|ÇÑW¹úÉ5 0g*i|ÕI0ƒ8ýVPRS?áàÁW;ƒ;ëgÌp˜H曚šrH ëTŒ©|p”W𵋥óp‡rûªý4×Sƒ9 ¸DCµ&ëjWUËÒB»+¶P§ëìÛö$~J§÷cò;šº¦ÎÁ1‘i»B(!õµ;ÛQ¼U1°™O¶èn‚®4ÂݬÚûùPíkyÁÀf ?1[DQdÂæmoWÇz ¶ŸäñŒ[ÑTÙ2ÛÔ.Hp¼Þ©ýÅJæùE¼nêÍwâG;Ç'^™Q~#[Ž·}|oøÉV@)öà}M&µ!>­À»L­ú¸Á»:)MµƒècŸÒô•!¼¼u^j-é=ÛQo…·m/¥”¼ gý99v´¶©M¿~ФÆÐŒÑÒâIÁ‘Ìy'èü ¦·£Q]DS›OÕÓà`Ï:ÈŒLøëÜ”íë?Áâ"ž–ŸõN4ן7Mñž-_zÆê4Áp:QåÙÚèÓ¶‰¾™ttå“ׂ&ÍKØö¶l.´S®µˆ¡‰£&â’kŸÚ²é•’…£ÞËâÁË/F†|mçÏÀ/Žn•½wüjvù=üêxv'<Ç+b7á¨:Šª³ê¢oª—ÊËåBŒ™ “wm»“¿|:ŸÉüÁò²mURôU»¨ 'ž¶´¶QýöÓ’‰ì9}å`"­¸îi N¸äVÜ~Õy¼S¹†9[)Än‚Á«)…óž}”Ö”eõK¶-T3œì ?éZs¾›¯‰’g}‘C-i|_[2ƒ¢´ê5P•lj"b&è”7àwåùŸL«¾\ð:ŸºÙÔ6Þ63-âƒïô¼K«§“ µŸÊ7tÊÒúË0r§~E:Á—‡ò!äêà` žú|;þ`Z–¡ú:T7ñêQµ·ño#yðõ'‚m<Šx^øibat ¡j¬áxÑÒKzH|Ã>À³ÚÄÆ«Ž®¾ª»h®|Þ ÷’cácûò$¨|ei¢A6ó9Ój××zá(±ä^ÐmÛ ÿÔç±\µ‘TŒÓ)®LÁ5ù|x¨U®ha`š>JÙ1›Ñó|)I|ÕÑìLò—|Ÿh#}(>·:Ã×fÄÍéiµ•£¿+ÛÀ÷DK?ù&ÑN¬¯Ïa¹Ž¿Õ?zÓjS ùê;%Ë^¢v ÔÕG#£‡MQF–)v{ÈÞªmÅo¢™èãøHø)7îTœÁƒ8 1½êjÓ¢š<úôÖFvLK¼Yžts]NеСº›¾šãɯã}ÈðÚ—ôP þRˆ‹|-™ö÷ánIkéL/OOñ¢è®”^ù¶iÄׄË÷Òoª»øÁBµy…§èå ×Ôn7‘ó%|ºÈÒÆ¶«xCò¤:¸ ÷®Ï“¯«—éƒDzÒÓ&r käQõv™ùt}½ðÔB·òhb]A瘱¬íl[ªŸ!½=ã„€ÜY\YŒi{Á¯ÛzØ‚ýmâá1U^|itåÁŒ+*𥰶ãÕCºB<"|Ì‚Û2žúÈôªw^иÈéH'çÂÆÖÇŽ„—ðÔÓé#‡·y'~%l¡myE$çv,lúéN¾n¢¹ÂÕ&¢O 2'<î=7<0Š–\Gr‘Js­€{uÓi*åP™ Ï,„[… ÊëÏ ñÄ ÁïçˆüÔ»ªÂÞÒºwÁy]¼÷i–5[P¼þÔºR8^¼M66_…XæKkë#·ƒ"1¦ÎSv,¥c.WŽoã.6Wl¹RÜ}¢Wí@K/ó›J¥¸È ¡{ïhéý­ïŠ×*º¾»ßª“p´qVqSh\]:Ÿs8™/à æ ¼Wŵ²÷&‘ïÃÁvOï;÷ݽ ~꽋 Nü;8£ÒÙï¶í¸ÜaÚÇtØü&¥cœ½1^0¬{èÇ8µ©ò–àÚ¤>ؼyçtðÓ¶cÛÑïÚ€:b E¤€Koa“ÇÔNDÈÅ3WíàSh ¦’ùg”’~ÙzXz¸ü6vO|«Š7Üm`•p…ÑðáZܬò+ñirøghŸ@ý2˜Îk:ì*â&„I3.K;Xª•1æ Šús<èòºRÔ¶…{ÐÏÎdòÖ9×ÁµmíM#¸*Ke<¸Ûa¿ë· {òN@?˜Á*ÛÎ àÍÑdà Ô"˜·Þ*ÛG{SïÊñó h\d7ÛîÌëL»²,N{òªÞ ?‡£ŽÐÚÀÖUWWÏÔDù˜Dôw|isØO+?LÁ2üù &±2ÈaÓh`i ßú³¸Éi¦hZ‘”Ûá[‘_D7ÉPE9t,ÌJÞûÐ1 1ÌÔîòBoêïÒúpÔOç(Jß½uÖ÷š>ZÞwvðÄrø^­® ÙzÚE<₃kÓZLD#é…žüèj£vxúáhÃã^‘aÜ ôñœƒåžÊªÁ¯ú(?"ŠôGk'/–ŽvÒo ¬Å&T¨—£šú^ñ™}¼¡ò”Âñ¯pòâ¥ï®<‡‡‘ÆÝcKÜ#Yìf›ø¦ˆ¬?/\ÿÃ_¾¯ŒJ A¡•qòšÆì øÚ€õâ)z–ûxÉÅÛ25Їø&n›¸:jkμûDåwÂEezõ§êÆ|%Ô¹¶,ËK*¯2¹P!nþ)«~33‘ôã#8|Á÷zgäAý€òš?éŽqÈs& ±~:Þñ½2y¿öâY¡L 2âPÕ˜LyÅš±ž„¬ßz§A½«“+W4+¦nwåÚx ô©“=°Œ½É¾K£§h¬´®tåé‚xß•©8éñ¨%˜!®O>lz—ßäÝc¼ajɼZÜb™¾vñæQ¦®F¦õFpm;¾%ﺒü42õPZõÃV·¨$·›hÞ°,ó”þ' ýTUžŽÒ˜::uÊ„6§M«÷â‰Reöñ©ÅQ´Tú oM=)?Z¨T'[\¬Þ èN·¸y¡ÙBU¼Òûu—ÊôÕEOÑÂñ r¸:H>ÜUÅ+½âƒÛdþˆ0M=ÍDÙQEÐGùö&Ặ´c?GCË·šøúPñðáÂH?¾>Ü\›(½ü ¸ÒM]©÷¢­­»g`»xµˆò*¶ùãw×&â—×–áô˜ÅÙ¾“µœío\ZÏüöàh[)•‚ æLçCÅ´‘áÅ1R44ù©7Õçtt*h~š·iÄ~Ž9öt l*Ó,¶(Éï êhŠ=ˆûœ k§B« šX¸ÎBó‘å Áïªú­§êäÚÅé׆•Á ”eéRYšý‰ «ÃŽõˈ »}ôtå /á$^‘u¼À!P’7Îð•`‘Ž.^)oC M Ÿ²MüOêCí•-XŽ…—Εá(Ó·.©+gò¸òU¶ÃÇ÷o„ïÊ×spð–çÍ#| JúH9’ÖáìÅÅÅUõü3àW¦s½8¹2Nú-š¹þÂÉ K÷»žFÇH÷:~ÿ]Ðö™ù÷i‚}‚ßgÑQN6÷Ú·ìÚÞ¨® •R–t—ÎQÐ0ÉÊþÇŽœ.V½ôý`á£òõLW‡sà鯾_—8:(“‘ªtˆŽv×kðöoZ÷^´pß«z:¹Ò{Õa7CT+8e°íƒÓºßî}ey]÷¬4 }ŒuèÙ“e©•ôDZ’ø‰¡*¼•Vó ×.&ñAúØ+‡ªòÛ·o7¦‡ááá\àU¾‰‘Ë;iþJ¯Ê©áÔɪ‚¸§Ë£tû›V‚$B*è»Ê/\/|•¯ðG—)‹VZT¯ß_ø¨ÂotñÖõ@ðüý¡û¡ÿ@xAí.ó呹’L®ªâƒ`Þ¬ŠwSm¢çoi[µ«þ‚y^r’ÇsÀr§Ýývô¯,½—‡ƒqÿÿƒìέ««ÚCtS;ë*µsmž7½xñ¾èjåJz¡¢ÞQüo•[µ%—ð÷®Ï*ƒ¯öTÛëÌ›‚xUõQ½\û*~ïr+GBÉŠÒ;ú8~s|&SjÑAô’©¸ãeå9Р2lPý™âïl 2¿TyãE7÷ÛûÝ—Ã<¼ñ’ýÉÄXAm悃£ß¶=ìﳸÊöæQz5§¿jŒfeð¼q6¿í‡|YÍÛF.ÚYgÐõ§ïúS›¸÷^î»÷neñ.øÓ°©/ÂåÓOG—_<#: 'õåêÓeþÌ—Þ|†?‰»v&œŽrÏãåß;øNn…““qá#>¼;š©.ªÃÞeÅ ßÔÞÈCUã¯<®zé»hãêèžÞºãïÒxŸ¿Gï{o]+£¥?úÃ÷âíèît”·®UÑÒåqüýGÃ?PZJ'êÞy1Nâï`z G…ÊäžÙóÓhB£G*׎V¦~뻋w½ïmœÝýsïé+Æë}U0]^=|G‚±­ 'o~Ce©_ýă¢§hëÚyo¸TÀƒÓVöÞâ *W®Ãíû úù`ë]e0'|%¿ªƒä\2.#~Ö{áæ Áqî·ž ®.ïŠ3¯ü8xazó+^åKf4–uxéè¼7YT ª‹ëû÷–Ö•¯²÷7Ͼà«íÅ×¾Êw²©çþࣺW¥G,á«p ¸»úþ^øjñ†|hîÛ¸qcƒËÁúØë]H©ãÒ:ÿ$ªSõÔ;5š® ÆQZ 5Pô¦/ÆE|ÁS~Áñ¦õÂW£ë·ò‹™|—Æ=«‚/b‹¡¼ð•V¿Õ ¦~ ޾+Î pýyˆ·««pîNÈöVWáê…¯ºì­®JK/|µÁ¾hy ð´­þ øÞ¶R[Šö jÓ:»Âð·ÛÔ›ÞK{}—éàmëácoÛê»Ê«Š½´︶uð5™ÔäLí"¹Ð{ÇËÞô^Ü/;^;¹>*GáPàWWµ‡¥ýþëñ袧£…äR4U¼Ú>¾øÂÒ> wôÛåW{zõNUzAyöÕ¶Þ6óÂÖ ÂÙ•©‰‡Úeoð½p-/ð¯ŠW.•£<Â]ÎêD;'+†)±ñ…ÃÏ9~ÿª]Í1”÷ÕMü©ú¨M¤õ[mèê¼ßÀ~CB•ï‚+Ïᤉ‹ð’<èO2%¼Ä{Ž—+å5ÖÃËŸ‚'^>Ð>Â+·¢‹ô«äYíîú^á¤ÉÀþÂ.ÂMùƒu¾â¼x«=×[Wñ› J+ºxó¸ºV¥¼iƒá –Ú@4W~•½?}ŠÚ@iÝ€ØÑGò®?Á8ÐþVå ÁW~Ñ!ýöÒGé½ø«ŽÞ<Ž> ®­Kù½}„¾h þÐ3~e:Üåu:EpNñ¶³êôO¨œjµ·èíh/~p´ýh©úHïˆçô]|/žp²Y9þœXÑP勆 Ò ¢­Æ²N;: Wñý%·Ué`¹ªJ/HïÈÃ[4þU¥—Žø³ä\´ñÂ×oÑMí¬Óœ.u:͵»xXum”VýÆTJ°Ã^ÄÍ™3Mš4AëÖ­6žÿ”ÿ äàH‚%§a‡ –Vm%Gÿ„§€”éæÍ›‘””d”ïC8x9¤ì7Ñsj£FL'ögb"Çêhäpæï¶Òó¶Z\ø¿4É”ì«ý¥íÆÍ‚»"‡BÐÀJr’˜˜hΧC™ÿþJ=r0hÿg”©·vÀ4NÐ@^x·Xõg”÷¦dS²!½,+°¿sÐbƒ&˜ 64 B».âOM(µùùw ZüÒ¸L7ý_kÖ¬Áúõë1lØ0S̓¡CKÇUPú¥Vaþ‰>(Ð`EÆß%H¨…ó?á·S@Áß5¨íÅvø«Êù³êñwÇ¿2ºª²(Ê“pú+䤲vRœú”C¹_ù§©ªåªŽÿ¿¨Sª®íŸ÷Æ+›SFk ÎN»ß¿Þ•ïP×9UÕSxÿ£ª¢Î¿Ow×i‰© cÓ¤Áÿ±ˆì4Žsu¢&xÑÀ œ=×®ÿ„}S @³}§=Ø)ßY/íö p²u8ØØU]¾øT8zñô~¯:ç?oDÑÏé÷ü£éçàë”ßÛ^Ü]î¹7Øò\ê4Øþìº:¼ÛÁßóiiIrî5Láäl¯‰½/Y¶<£º ï©Þ²>W—NOoœK§¶öÆ{Óÿæï†>*0žç<ƒSèoÕCmgèiʵ´Q½\üÀtp”'˜¶G4ur䞎æGi+âäúÞ…bÛ?Û‹Û>eA çhÍïÞfvp*ò”L"m;)Þ•éê\ï{1‘½ž08Uà·IÏŸ^<$M–«°'>ò§aqwÒôG¶™)ô?¬c%_&"ïÕ Ž®~¤¿© ?"ø‹jõÛy%ZðoG+'cÞ6Û×àÌÑo‹‡£kenùQßTм¡Ø¿.xéX™lîÃäùBÅk²‚sKB}—·ÞÞö³òoÓÚôÌfèd²õÿ<ÁqO/LÕM¨J¸ ëÁ*Ȭ{áyÚ6´ídøôN ~ßýŸÃÇuyÝïCõùGà]¡®jÃßTYË ^X7oÜ>û*Ê,ÇûU$ùK¢÷9A÷cA„ýÊyŸŠØŸëû"¢W3—mN/ "¦ ÞÈ?¬äÿc€H#])àoK3øm"ò§SÆ×žþö *°ªø då§WIãüû  xˆL?/ͼßk5_~îãµß Ï›Ïá^ž•Å)¯ÍC¹ôuð¿÷<6epýŽc!fPã`{ŸzåthȲ?ZÁàÇAM°ßuW©f?AåÛ4^,ì÷Jqß3Ùň–ãIí¯;¡¹ïî¹?ˆF~õe04aCpe»§@x¿ïÈ? §@Ù”sQ FßöVo½Ǻ|.­b} 88òNmÛÏŠô ¦Iðo7I¨,^xìoK –3ÅZ\ø8ÜmŽÀ§ƒéž7ü7MÌI9Ò³‘LA¿ßƒ‡ƒñGcîÅIßÝoï÷?ºÌý§ú^¤®4AŒà“aK‹@ûëýŸE[ø¾?«¢ÛþÐ1À;V¦öV÷Εçêî•e‡­KkåËÆâ\ª=Ÿ^Øð÷ñGE=°wÚ«<¯>Öooœ~»xoyÁ¸ã¥|·à­Ãþà.r9íOï‘Ü>¾8Z—ü[`\Ú}€ô¿ö¶?ò }Ùï únz^¿b jÅF#)1ÚÜ¥§R$¶eYûNõr–`ñ×U­@T_~oœƒŸ—‘Ž[rѤeCÔ ÷¡ÎŽdËÚ-(©ƒæÉ<éil[®”´-Òý¶8ì¯tWW¯`e `¦*‡Á‹§-Å÷顃7¾Kïðò–ïÞíQ~àE¥ß¼ø¸²¼ õ^wnZ½å¡u‘ÜÔžù Në…ãÍï¾W•~ãœà§+WpÌwÞ%¿‘¸"" MG3ùžü ãŸßÿP`_0r@Y(.Èã½®ÕP§vľ²ì÷{ÇÃû›ÁÏëÌ“™†”ÔLDDF#±~=#Þ÷ûSå—Ò!bn^¾”Ñi¡áµV˯ß*À‘N RËËÉDï3‰‰ö_E¢tN¦+ÖK Nÿ•!eûääÓáTíHžM‹LŠ(¿ëV­jG¡yㆂfòU(ÿ/øQTü‚"³Èk‹ÕFOæáÖ{ü_€ÆañÍK ó°mûN $Œç´ VHàj›ýx ù²Ýçžeº7ÌÓ·Éܬt¤fd‘Ä72 q1Q¶¸û˜¯:zŽo)_õ¼³oÕàýßö¾a»›¨wnmže®¢+šŒzúc>”¡°¢â9ñQ!y‘÷¡vD˜ÁØÒ„o8&ÛIyÊ-*C|BDÖÖ{'o‡rå*âæÚX±y¹¼Y¤f¨áy==ɽq›V/Ãö¬tìܵ¥KòÙíHIChD]$6¨oûŽ÷ׯ\Ž”Ü2tîÒ áº2Œ;àÚ¼;Р…»Ýå%HMÙ…ì<:’f9 m9^Ü\—“¾K]‡&­Û¡Q¼?çç`ûÎT«DêÚ>|2S¶aùªõHnÛ ã¢|2àp­\ç¸òþ¯=ýò3SñË/¿ 5¯ ]»÷@ãõØÖrÐŽ1ìxÄÕ_ù‚ƒMìØ¼Ž°–"$:‡õìŽ:!¥ì+w °¸ ‘ѱˆ¯]e¿ óPü½Ï º#ÎîÒbL{r&êŸÚgÇJûК‰UúŸWbÅæ| >¶ÂÍ¢ën,ÿf6çEàèam ሲ߄¿öåV¯´Áé}…(C…\}lì;1ꦩ8ê'› º”1öÿ¶¡R:ümkó÷DÜñXQn:Þ}íyÔî4 §Ù—• ÈÚï©™ƒ¿_0£3ñ²…óðä£Obõ.N¬¹àxõ 7ã´ƒLg@0 kצ•õâóØVÄëþòKqÁå×ãè¾í+•C£(†ßÌùŸ,ÎÆwß„Èò,L˜ðÚ~4:¶H0U à SÆŽxÿ­Ñÿágˆââmff†z>.8ûT$'p!·´¾þ jt;ן{‚e~ßf„ûE»}$ à ,š?O>÷*â[4C=èF„‡aÇ®LœtΕ8}D_.HXSÇ=V÷÷QÆŸóÚÑHÛ¶£ž} Ÿ|ó+Ê8éqöe¸ò¢³P?ÚÞ¦¼sS>¿_ïpÊKߎ·_‰±ŸÌG'½Ž< ×_u±ioÚj‹¤*4öoø)Òw¬Å³>„Ù ×!”®]Ea¸õ¶Û) ƒ9x·÷®WVŸ´m«ñÊëãqÄqçc@÷æä3[ÜwÓÞÅÏ… ¸âìÂȲBL73–â®Ûn0tñŠ 6³g6ÝÓöµ‹ððC÷ã—õy¨Qš‰òÚÍqÇÝ·aXÿnf!Ëñ™&¤ôf¥â—žÄœe)ˆ‹ä¢€™S²qí÷ã˜ÃÚbÁ'ocQIþ}öqã•åcÂëÏbÞ:àΛ¯³ø˜~î·ÑÑÕã·<]]J‹r1æÇóÆx¤äsq¡f R#]û ÿ.:Mbjàý—ŸÆ¬Ÿ× ªn8E:9©Û‘Ôõ´àÝÊ…óÙne¨KÇêâÕ9Ùé¨Ñ”mù´m–@U Œ¿¾Ž¿….¿'£inÚ6¼1ê%´|:†÷é"…Cºq1£ ¿7#Ǽòj»Ñ¤Ã ÜrãµèÒª馉Ë_£/OýyÍàعq^3 Çq1zuàUU’¯ c½€>Ù¹~1.Ч=? Ý{Ú)ÉÚ¥ßaä“Oâû5©¤Q-\xåu8ï´”ÞVRœ‰Kz ÀíŸ~ƒóŽé£îdq°ŸJ¾Ø~ ({Ʊÿ=á3ÄD…cóÖ,\uë]8ïŒã^³LÇ«»‹s0ö©;03¥1^{²»¾cÝ2¼<ò ÌZ´\±ÄIç_ƒKÏ?õê„Ò9l Ì}ïq¬€—¼ Q¡lQŸžIþ 2W_U’—Š×žºÓ—¥£[Û¶ˆŽK2tïÑÉ‹ÏÅ.NvtÒQËJÛÖü„;n¸ …Q-ÐoÇI(À÷ó>d{ÎGãúáÈÙ]·ÜqŽÖµlOX¨‡ê·}Nнˆ——ñ*2*j…‚Ü.è‡r%Ô*ØÍË6à“Ù©è9¤#wQj’²Ü9ùiæn¨‡ƒÚPÁ»36Ö ­Œ^6 ©À#ꄱ!ij£I«]yuÌ\–›‰¯>Yg¢ð”ú†%k±.+ÿê¬Ý®¼ G®àºÆU×à:sÿ™é 2‹‹W™.)ß·"ç*¤#`‡oð{•ïe‚R èÆŸ+÷†NìJ(À!\!t0Ì“WZ¦« ìࣄ»eªWÛ•O›Ã«:ëVNk†ÂB^ÆUت(óçåó®mî¹ö0éY- 8KŠŠ¹š®Ö2°Y¨ø50mB0E¼RøEÔ‰@ ßlÝRÆ—ŒÀÉnîL𺠮„‡úêcSíF>y5B8fy¾¶5tÍ™¨ˆ;Y»Ù¾aaä†âBÞSJ¡‹~Jޭùy5RÃcС½õ©AÓß9xùãï\¿#îŽö™ó¦á­7ÇàÅ7&ãÕ)ýÿÐꈇ÷78ý–³sî¿t(’/‡‡Ï;˾þÃNŒÆK7¢‡&R¶WÚÀJZ¿ikœpê‰è1àx<÷öGèÝ¥¥É)ç.ºBG»|ùÜñ®EÇ5©SZvèÓ9y¥Š/ÉJë_ˆ+G.6té 7˜¶z¯:ŠsR9è¸w¿•‹¹³žGû¦ غf þ3àhü¸n'ÞzêNDÖäÚE…¨F}ft‰ô:Ë*á5êˆ`ûBƒÉÿѬCÜò¿»Íä±wÍ‹³·ãì#†£ÓÐ3Ìäü/ñ·C´MM*q"9eôxf ðÅ[ï zözœÓu¢“pݙÌnwü³¯Òïï+]Uïý8qÿï³ßÀ•w|‹ï—¿ƒ„lÜzvWŒŠNÀ}7œƒZÔñ®_¬ Våñâoû¦¨¨õ[öÂsÝ‚Æ u±pΜxÊ0´]¶½ÛdÁ_§’\Ìüd"^ù(>™¿ ³:»BiÅ7™ø·íìÆGãžÃi—ÞŽYß/Grýº&­WfUWiE…ùhÙã\zëPÄETÃÔ7žÁ1§Ü‹?E›¤Ø@Ÿo‰„2â¿pú“ètÁû8­Gö‡¼w¾t7'Û>,eýR,(,ÇÕf(U†É\À:óÊ»1ïÇ•h/OÙDÀ×WZ *~zq­øæ÷ýÒ.–ÆE(+À”1O㌫îÁ[Sf¢_÷v¨F‹‰Mk–âö›þ‡î}¡IïFXô部Þ÷Q\qæQØ]RHÏμº4·tïÔÚŒG~ùîS\pÅ]xÿÓyhÝ Št nŠÝ“æ¿óC3·Ÿž ñéTŒ~õy¼ùÑ|LüìD‹°¯Ÿøå›é8õ_7àÓ¯F·¦u1êþ«qû“c0þÙ;ÃÝ.?œC³š+'óeE™øôà xþé›0ç‡DuÊ…•bíú-NM÷,êœùÎ>~'Y´2ÈÜŽ—î½ ™­.Æ„GÎÃÖå_¢Ï‘Ç£a³%8¾OG´èÜÏO| Cn~‡w‹–‰Ú™Vÿ´ÿý®*-æ¦N"~z$:4oˆ_ÌÁГOAƒ&‹pÚà®TG¾E:£l¹ø›™¸þa꾕¡aTv³¾ïŽzÓ·7À;ï<ŠâmKѱ÷04Hú ßÔ‹—ßxF´è†éGÆYGöàr‹Ìá*|ÿÎÁÛ7¯Y„ÿ<±_-‡žm¢¬ÜÎ'ËJŠWPÌ9Jmÿ&з•óÚÍÿ#Úõh‰ôuP×Gm‰¼”˜ÂøNG†.íâ±eùrÌý* Gß?Lÿ±]Ú¡Ï&ÈØ²“'üŒ~§öGÛ¦QXõí/ønYŽ?·?b9¢5“]ÊœUåXöÍb|ôÎbšŒòn¾ÈÚ8é²Aèܦ¾þðs,Þ œwå ÄÖAÍšÞ|áKô:}zwŽÅ”×faþ¬Ä'…¢œ+‡Gž{8úöjÊUÃBÌx÷kd–VCîÖTüüM:zŸÑ];ų-ØáÏÙ‰F}ã¬K¸‚Ý$ÚÔë㉋À%<*¸mذ²ýÏï†N? µ9©ÖÄ:D» ÜQÿrêÌ›¶–å݈nV§\4ÍEz&U­ô­ÛðÉøo±rE6c5tÖ'ŸÞÕrÒñÑ_àçŸÓMGßãø.8æØ.ì°«cÃâÕø|îÔŽ Áâ¹ëQ…cÎè‚j¹˜ýîR¤åWÃQ—ŽáGw⮉ÅkwQÌ^ƒþÄ9¾Ždg¹aÿçóÿ:´ÓÝ=¼ýw“VpáÿAiz®1joyäâ°ÏLŽzêE˜~4VŸ{ MÛiÒ7â4Ü}áxÌÿv±™ ‹ï}ãÿ}B-ã^HÍ0´iß§醎Ú#ºv-”sWìã `g'çi›0gÞ7è0`®ø×h™Tùéؼ­Ý9pùrötÌ]Ä¿ù¾ü8}‡Ÿ3¸[¡ŽÑu¶Ë~üw¿ø¾âÄ©Ÿ&N $âÍŸ?Gó®ƒðÕùgâØ^ÍhÚK=NâKªwfáíÑ/#%¤ .½àtDiêŸ؇ãQ9¡q²ùsÀ×þ´ q´8v ,ˆˆ—›œ¸ÐóÀë&lmÈIÝ„‰o¼ŽQ£B»fÙŒ}O~ò9Îã`Öö;\ÙÔ.ìŸO³5áM<;áEôj×Ì”úŸûÞÄÅÏÎÀœ„äz:*BœöðJ°/-(Uý¤¶¸úšŽþ!lß>ý¡)ÌÝ]P‰mG“ööÝûã¦Û@ͨñ~þtik†×AÓÐx3øÿrÊë8‰“ó9 WahÏV. ûmÿW~Ñ‹àĺíḾC?‚ÓϽü¯vÒCt¥ôâ£ßQÍOÀá½{£}û¦þ|ö ïüDrT<÷£ÁqÓ(œÊÉùg?­Á n-L'çŽæAŒ¼ð ~û³P-š ÷ ˘ÉùĹ?RØ]BAMnÞ3¾è‡²ºœŒç#<¾/†ˆî45®*„•§ û'£wŸ>hmͺ•¶ªºUçoïç¡jhÙ±.¿î”òîhW½çö›ãß¾á}9â» ®ºc^5·\†^šXüIúÑ¡±¯çþè0WÕj5BÑ¥÷`Üöß—úúÔ*@KZ,¶®þÏ?:£~¼ÑavŒ·cÓ Œš´óל‹Æ49oœxFÞ~.fÏÿ Çp‚.¹pÔ©¸îý·1ý‹qí™Ch±Ò-4‡Å4ÆÅ—_ã·M<î$Üu~¬\µ àÝ(É…ÓœŒO~ûU<øêcèÕÚn¦lÙ„Ç~„{§-B«$¶ÿÆ?}>üâœtt_DÕª†„æ]qÿã‘7'aXßn¨a'û~>`}þ/˃÷kpWµ “Þ|“;t;0ù×ñK›¸øü±vÉ·xù•ÑØ‘U„èÍqá¿.B¯öÍŒ5RVÊ&LxçMÌçâe5êù£N9gŸ4ikÄc7߉Ð#ÏÆ‹Ï>‰AGŸˆ#û÷Ååd iégƒÿs?MÞSíÝ´¥6X]ŠCÿi9e?ðT÷©sè_¿¸1-ãìúW~Æ”©‹Qg“Z÷ˆCÝFè6¤5ºÞ ÉÉõ‘Ô:‘ÍbpøðvèÖ# ¡5ʰpòO˜0v3ÚÑgÝÐ_1S?]æïà²R21çþ-fw]hU7;ô¥øiþj´ØΊ¦mÚ†ï?ËC¯Þɦe4ÃÿŠEÈàÙ†ÒìlL¼`^{m) ù6cÛ.L{zBcê oç.Ìš¹ÚäIÙ¸çß0 Ùf~oøq5,É@íºÈ\µŸÍ§°2l_½—Þô–,Ûi~¯úi%–®ÌAMX$Ä®å×þ°Ï\õºœÔ×Ü;’«áù{g#%« z5ǧ7ÏÁÄÉ‹¹sœÉÏMÃ÷ë€6mhòÅèØ¦ pÚuýpÖUÑ69ÿk&6¥rCº–M\ŒQ×,Cã­¹€Ñß=þn;f&j%5ÄEwõÁÎ÷—aҔŖ–\ñžzÍ·øò«]èsrO~3¼xÎtÌÿz±å>wÒÊ8¹VøqÆ×õį8êòA¸ê¿G¡n^ F¿ô%² í@E+Yê#ÄØé©xõ¶‰ø~U)N¹òuB ¤mÎ@Ê–T.ˆÌÆ{ï¦â´k‡àijÚà­S¦aêÌ_M…™™xð¦yX—R†ã¯ê‡6 wãÚAïbƼívY_9,Ï7+7¤™ôúضv3~^TŠž‡9#Ùò×ãŸ/‡ ,÷ˆ—9aëÕ§Ú6oÀóJÿé ž}½Evz ŽÒ‹ÖA¾óÐ<»×¬Sw¤ìØ‹]ÏßüÜT§°°€»w<{M‹ʱtÞüûŠߦ7n£©éO߈×?šcÞ¦m\Ž1“f¡hwšq0.©ëÔýpü´njÍÜ¥¬x9Ö®\‚ãþ}:µ²“ó“ÛtÁm§vÅ2êO£©—ÃkÛÁ7Ÿ¹Ü3ƒ àäÜZÐ8½iø>œÎpWÔä¦à¥GoÄQç_‚.-M‰ZtpéþHˆ‚ .àÌüúƒ_Ïÿ&!¹9ŠÒ¶#§P½š†¹dæý¿ ÞR§€g±S³CÑŠý” õ!¦ Yy¾¨ßGÉ´¬„VbÒ{oà–»Ä£ÞG÷Í |gÅeëľ©z(w§[¡ßÞHˆ¢_ ö£ÏO×(ÍÃçŸN¦iúÌøz©orNK2)ߣB6OLdq">vgË~ù ›Z Gƒ„X“^¼5~¹ë>ÆÈW^Áo¼ñ|ˆµ[RLZ}ìæâEõâ\.ˆOÄí÷¼ƒÙßýꛜ˲ͻ8àÏò§ÑøÅg4‡µË– Õ±Wa@/ša3”¹Šó{dLÅ2hþƒÛ0iávD\Üz7Å/i;1pDÔñµÈæNK8y‹ÅQÇÙô…XÓ1Ùž<ƒ‡$¢JŤ9ëp ]Õ¥öºáÕ _Ÿ«­d2qö¶XøEŽ¿·¿Yw«MË¿_‰ˆ^MкY¬Õ”‚ÕvÈRìØšŽââ]ë•€šTr[·p ³3õ%¡E :èÜ3~ÚL˜‡­›2ðÿØ»À,‹óÿËÞ;!$HØ#ì=QpW«ÖYmmÝZµµv¸ZÇߪµ¶.h­7nA½7a&@BÈ€ìùeýϽß%o>¾„Dƒ½ƒ|ïûÞxî¹ßÝ{ï=wÏ=7 ‰È?ÏF²s«1tD ÷U¢Ï˜î\í=‚Â’ dfÅh®`äìÏCaAgæUcÈ„ÜÓ&Y˪œ—éŽÖ.Ü Ÿ!ѳG4W©}œšˆ}·…wçb"ô§_Œ>¼ùë¶£¬&üý\–]A͉‹¬ý¹(T©¹õý‰˜qÞÆ­ÃþU{Ñ;. W\5VuîÕ<Œw×AûéÃÏìŒ©1ŒßGÓ²±zÅ~LOãHTQ¥úi=W©¿ýp;úLï…ªúrƯ7'SÞ¸t+®ùÕx„R[ žZs•qJúÖ]X±ØϬ>) tHÆ$ÖSÖöݘÿŸCøÍ®À°a2»˜„;^ÍÃïíÀùçö'^8û¼¾¸ö¶³ÏUôøpO,ÿè('ÎÀ@NâT÷@VN)¥È€´[–ïBìÄîH&ÆN:ÜíàVÛ‡òdä¡û§ãÒâ‡_g]AáFîz0 ^hö£54b#c§({\’öòÑ—Õýñ—nÙÓ'ÿœó®ùÉ9*ê½O?†¬Ý ö04ÆÂU ZöñAïAƒ1éâÉÎÅÔQ=T\)—5’Ç”•£Gl ÕšU0UЬQ“íÜ= Åœ$màþ[ÿÐh”ägâ½7^Æ»J°eÝ;œ´”¦EMøú¾RtZ¤^»ø <³(iÏLåЙ= …¶îån/Ÿ‚Y»œ-zUy5Jó¥fœóNj@µ ›ÐÔúmn“n‰51UGõç<VTß:—e¬+ç9æÎÁ¸öþ®WKýµEGaÁ§âÍw—ãÑiײðN>xÁÚjßÒzd€Í½ßUÕNÃlV‹’èò~ùÓ@á‹÷܈'9§1õê1jhÅZ-ù•ïRkNQçd6·Ìïß¶ “~òkü뽯‘ß4(—6¤§o¦üü9ä×¢¶ª¯?øs\ÛíZl{ûYô‰ FI0¿õ<Ι·soø+Fr *®-üè®ÑÓªžÆÇÿ•›jnõ©‘±”­üõõÕ(déÑôŠ[í¼¦õ²/±¸¶÷aêm!ÇÎw‘¯»iOý^Ê6'»Ãú÷âdm%•ì…–Š­‹·Ž:‡újHº%Rfébq|âË­²B¸ N—G¶yÉ"•l‰­â–§ÿ»÷R¤Üö¦Œ²úÑå§Œ}UŠ‚£…T¡È}KÞ¬Ô$9"ÛQ›Ø'Û pHhë£Ã)PŽí뇜"\DœÅ¥ßëŸ-rõWÆuÜÂëåˆACaÒ \LçäJe€Ï^{ E#~‡»~}-")ò¥ÜyV~9›vìFD?f?õ.fmرCº³xñáK´­óÞ¸pêƒ7n<ê‹"pñ k,#ðuïÈöÜÚ ¹jêexäßqû‚S@×Í©£冯6 èÒôåDUIíB¢ƒàQ]ªö7«?xÕ•µVRk-?8ü²Câc®4ËL?ªlɾÎ}ìB§‹±Ës¸Ošo3ôÈPþY9H~2õ‹ê_u QèËUfqòa®-/ÆÊ/20öª3Jà âBiQ±÷°0ìÛ¼û+Ê1õþÉTÏÁ†¥»àŸƒÞ£(˜2jt×XÄxîÁîAËÍ­Å}OÇÁ¹X·dòóiIr¢U¡ñ=âàýÙ&¬_±‡ =ñðÜs8㓃իvãHµ&8'dåíD²Aí÷®CMi%–Í]Eÿj~èpóß^FËÏLÏz¼ò™þÜ#nQö¦ ¯]gÃ{^’ˆ¸hkE¬†VŸUdÎ/1]›„é®=càû5-ìWKëi€o?êNõu*c 2)þmn!bý±‘8;­jÿ[ùyÆÝ{®ª3û¾tÍËéxÕÂÒéÈûç:¶Yé·Ä¶†Ÿ¶íû~RaPù’¢¿“ò(U•äíó–Õ¿öæèì¤l¢U$åÓNV ‚•…`Ë',š“aUÙŒÇg~ÜÇ œ¸¸®€‰Z–j  Å…7ZÊA'8Ù€ßVÆ·ö·KG•(aƒ‚™Æ‹ûÊüpÓM× ¼úéÒFáܲÒîÒ):íý‘rÉ`KTû_~ôz<õì—èÓE,ð ÐNÀÚK´ ñOä}÷£MŽ nóR<:ó’¡¢·L–~,»)•d&µ.ú#Ú?¤Ù@YV‚¼ý¸圠QOàÇZ]óàÄö¼ôæøãŸ×â’¾#Ñ=y.<¤ÅÉûûle/<{и^J{Oë÷\…þvþþJÜóð§p.iDý²%'g}ôá¾­Ë0mÐÜ÷÷×qíùSÜNîH; Œè„+~y;_k¥ð‚s¦âgI}±|ë­ÐG£ž3ý§cöÝ—ã¿þÿ˜Ý÷ýêRZç'?|ç¼NŽ-•©užhÁ-)i»÷qò’¿ÏÕå¥Èá)å…xà¯ÏàÃov ¥S”åâ‘ß=‰»/;“Ú•5– ö “]„U½oÒrj8îÓïØ‰¼­óÝñC¥¡PÚ…vžÔþó ¥Uë ³Þ4þC/=¨Ô‘ k»êÌùQßUUVýíi*sS18Nf¿â¤¾qZHõ§q5Ÿ¦>GâË“·‡w³oa Ÿm7U7jÛªHMÄ[¼k,¿w2¶.+ÈÂcw_w«§bÉnF$OˆþÕ¤­³^ˆâøX&ѵ“$þì•=§§7O7áø·Ô¶ª®ãÿø¯òþ[¥tP{¤’2’ƒ6h(ÍP»æ¦Œƒp­8!J9²ŒûΫ‘üÓ_"‘§Ùh×5%aëV ‚ö½ê(‰-3Ñ0¤I?ÕOK6Y4÷óžÃ0îâVâ”ŦýìšÒéqm’¼ŽÃ¯ܗ¡}–Ê‹ 90D žÉàŒ š¡?ý,Ç#…s6TÎÅyqTQÇÑœ]àËÍ,`kö¢A+]-+PúsQ+óæ‹ÐÀ}“ë§cșèò"qäE÷@ÖÎtì;â‹ËwÒÊ׋3ÓGÇã®C UðîøëÔöà /GY…®|p˜ŠÆ Oéåƒ×^…qW§â‚3Á¿| Þ~j%b†&âÂ$ë脨®Ñ%¤ï?»Ã.‚±S¡&/oß»ý®é.j€Ç²³¡ˆ‘7??â×µ–z8Iù—âžÉЍ„ÉLœ¸¼}((—ãºI4€³Ãy ð@ÚÊMøf}þñÁÏ•ÂîõÎZ÷±¥bÆÛG°µuJýŸÏÒª.ƒáëGk«òÀ¬Dèõæj˜åê‘~>ÁÝ8óÍÕ¡G|eµ¬²ÀA— À5?mÚK&üjQ]mà@ۗ¾/ Àäì:ŒrZ{ bÝZ)³#½ò¬ s b‚T–ÅÔPc›¼ØÙªüxmü8‘?ñ׃ªUáǹ¢±Û^äx… u@‚ž³,§ïE„NßœþœË+$}–—o0‚ƒiÔ(˜R,zª½Èx*œdã|yC#;aá†(ç ˜ÓZÒ© sÏÄ ç\=ç„[y’6&.jå1]YFë}_?NHÇàtÞìœCƒ¸/’Äå >Œa2@©!/þN•{ ÓmWÆ—"¬÷Hé‹oþî¿í ïGí«£?´? ½½soOdD/+žîöû1¶Ož{ða¤t{ãö8eâ¤N…q«~Œ×Ë~Šô³Ç«çzöÛ'K°TOôG*B×_Hü Ö#Ûƒdÿ¹¸‚Ã<ê”*°Áþ"¸3jã T¥ú.?Òz<8i„ÈàRªjr+Òp‹NaaòB¦UR­ö×þ\¬®[ç·«k÷ž|F2i·F9jeTq…ÑÇÇ×i?ÂJÂvÂívAAV{×矋¢;¯¾×^s-FtÀ !6*·\~f£pîÝÞ%ÏÝ–ÐÂúýøýû pã%S->ø+íªžSrܘhËÉêî_´oLçÎè}N ¼Ö0^¬ñßqÍUäç* éŒÔ)—¢sÔ7¤Ëñ…s]þÆLNÁ”_óÝsP*Ò®¿«6ýM„ƒFánþñLTdñÊVÇø>þ¡ U-ЃH“Ø"ý‡Õ^¤Ÿˆ‹âD­ ö{›÷øÖ*q'4ƒøNÙŽôô¦FB'Ü•‘ÓˆQ'B6í)Ç]Ncz2%jǶãÅváÔR æQz¡öwÑöýhªŽñY˜rªù«Ï ³†DDcóе(¦F ”õ‰ÎØÍãç¨ ­æs­¶UMáLÆ·~Z…«Àèï£ôE¹ÜÿJ/Á¦çïàÐÕš0¶¾wò#·Îþ؋߲êj|ÅédüP³-òŽ–]ES•ÛaÙGGÆE)£ÇÎhÃ×Ñ`t×Óãq iBÂ]ÿ£Óþ®º¤"'„s¼¡/måìÝ{²@¾hÔ(ÉÚ· ±“¯¤<å7¢XmÑ£=,º’‚lTsb…õ"[|)oYµai9H[ƒ‡~÷[̘=·_w¡sìÄ~Z3 ¨œ>?m~ïEÏßV€âRZàVå£JÕ2wm)V+è~°<»ëVìEú pTÏóå`ïÛ—v`݆ýÈÀþlkS&÷1nZOÒ)ˆ×pUžÊ`T#OC÷¤ÇÅpÀ©“òñãÇ k^Z¸…Ty‰cKÜ;Yð~^ú¢ñ4è"·רh¼¹f ‚©r€„n‘˜µt%ª¸ï%"Ühø³Cë쉗ço¢ášhuniWˆ_O[†z®"„s/–¸½<‡ïÞ+þ‹õÛò9ê÷G¿‘IxïþeøbWäóбç>|¥{Á6¯åê?Ê-ûä[<óç}έ^Þ T)@^ d†bØäxìI)Èû¯Àâå˰/#ûæ[)ùóÏ)à1 ¤1ÉWÜ…åë·Qû([y¼Ò­—ŤëþŒIC{1>ÏËÞ›†Ác'âW·ü–«m}1aÐp¬Ø²¯±$Ö÷¤ññ$߈z¤…[nú&\~ùxù/·£»XËf9ì«'9ã&BC¦]|.~û쿱ïP2h¥öÑ+ïÆŒ³'"‚F¥Ÿl«ÑL=(ý®Lé~Ë?,ЖޝÀÍ·<‰Íû²¸å+ Ï?q ¦O;ñ‘–`,ßáöºfÂðº¥øï[ï#v_2¤ã×^ĬE‡0¬wwEvï¶å¸æ†;°n‡‹tT}=’{7mÁ¦5 i'f3fesk˜¬­ÐnJéQ.-UƒÀþã/Ä7Í­WLÅæ.VÚGïE—{)«Ÿ­Ë¿¤fÞdìɱsÇ6¬Zµé™y{¶—âÊkoÅÆÝ9êùàŽUxý­9´ÁŽ¬Ì Ìyí¼0o'§$ªpÙc›ÏUiánÐäK°ðýñ«K§à5j—ÈJªööüU"Û® ›×‰ßª2[}Q÷þ#1ó¯7ã≩xë“…8yˆ{jcý·ßâ±ÞUã?á¯8s1}» 6oÅúuk©Y¸ë6mEQ9mæ8UxêßÿÅ!NÎîO[‹¿^v+ΊM™¡®>š÷^ÝŽ‹n•A…d¾IZ-,œû´“(8O¦a´ž]ÃàÍUõð~˜0=™/x«š8P ¦UðΑј~ÉH„SU<2I<mô´TôJ²ö–É1@Œ—عãàªgXÞD;3c(’â-Õôª’B¬Y~£¦ @ ­ÉwéÝ ÃÆú`ù'Û8;”‹­Ë÷¢Ø3cÆ$!cã÷í„›î<Q4l0äòxl[²ñºqFw˃o>§Šþþ#j5þÌÉ 9¥?ÏõG‰G1§  ÷Š{p¶¾¼¢ÑÝã¸ßêÈk++XÁ=´+|¨F·èÃÍÈ+uð,ÝlÝp—?<•gÊ ™uYVŠ˜¤¤ôˆDÏ!=Ø›–›?KÃôl\–ˆŒCaÞ§ž“!;•œˆþ´rÇaßš}ØÃÉŽ5ààÑ*S¦À ‘]‘·+›7f"mÝAôº6×]?^Ye¯¡Á*ï?Œ˜ØSÍjyr¤6±©ãû"˜«þ¾l¥þ•è7®?‚…øð¿ÜpçTž#Ë£×ØqëÕˆR´¤}Ê mGw§É©ä `ñ4®}~¢6]\\Œ°0QÆš¬tû(Y±ÕÇ–4Å­ýæKÌzåuÔÇtCUþ!¬^·…F-ûÑ W„ú(KŸò]»tÝÊ*tW?¥õvª+ê0‹#ç/ó ྞ¾#†ãƒWfâÛ•«ðùWßâwý çMÙ¸¿Í]ZíWÂýÞ²âè|/Ð벯ihtñ><óò+8stªzÄÊómw¼‰«~q)¿ÁìWyÌÚ¼ßÄ+ï-F—äþÈá¹ÊëwçcÀ€ˆäX ;cBâ0r`?ÈŽ¯¤Þh;ÿï|Œ9’ã€ó=µ·?©ËŽ «±c_6&îÁírß`Ñ7 ñÖûŸ#.9•'³tE~fn»ó\{ã•+„ÑÞÂ~üíá{°`ÍN,_ô¾XvϾü*ÎÝ_iÔÊØϰŒØWñÓ°†öÇ?ß^ȱÔÄF„Xh;û éGt¨ûÁîd;f§Ú'Wuû¡Îá~uÖ+X»eV|óÑ]‰+o¼ ÓÏ‹PŽ…åÖaÝÚ5[¬aÿ¹_ú.6ªÀˆáÃųÑÅÍC•g ¦LB;;Ε3g¹N6ä­[=@IDATÿšžÔ›|7d¬ ã­‰¡ëSÇûÞ¯Î6äÑPƒ¥_~Œ™³ç 4¹/OJÇšiè9p ß™tŠë‚<êåÙocÕòo°§4þþôâÉV…XÖõ¿w~]2Ðï¦ôÍ\Ñ´êÏŽª¿"îõ<¥ã³÷gó8¹èÉs®3÷¬Çæý%4 ?¸rª¿Á2$t|<x⮿aÊ%!!š[g8;ìËE£ž}ÇaÑ»³ñ­¡ùåW<âðq\~îd5–”tõGñê?A÷ñ?Å”¡)¤&&¿ÙüsçÄ¿†+WååeT5·¾Ç9öaÉÚ}:õ\ä¥ïÀ‚ùó1wî\ÕG`ØàʼæWÒ‘ÿ´åïã¨oOŒMµòôð @ûè½ß~€¹ –à«/>Ã9¿¸7\Æ3ÛÕ7FxÖ|õ.>Ï Ä­W_¬Îr¥}ʘF4~ZâÛ]Y~h¿rjÄIŸ$ãš6;U=ãPS„“1Ƥæž/¢i`t|j2þýÏ—±†‹%Ÿ/Ú‚Çžÿ7&èË…ÄôM„-óÞÁg_/'¶_¢ïÕ·ã–Ÿ_ªd†é{áÖ‰6<¨~u×–õœÐ=€sFöCÚÚe˜7Ÿ}ÖóàÂc““;Mýzk¼K}¨ñ[rrrcÔS]OÔX—W«Éé)>_ý5i„­W/®êå_|((JCeÓUg¡ËŠgHX²f^RP‚\Æñ¢ú]l|$©º^H •94üA‹§þuexóKÑuÜ@ ã‘bU\ §ZH€Ÿ§µ/Z„ožÍ[^î`üÔвñS?ûƒîžŒ‹ÏëͰjª\ú`ÝgßâŸOçâ±÷.@|„/g»j9pä?¦¯§*IiÕî}äÒ-K'û¦k¸¿û¬[Ú! Ž•Tý ·Î9tðÌuÁ?04Píש㞒â’*„r·+ ¯P†¿Îš(ªÉ™ï!ŒÎT6¥“`gª vd§ß#Xɋ޽{÷ŽÌn‡ãMã'Õìt¥’´ö?Q†ËJŠ8«_­Ôdø®Š¦`QÉ•nk´q¢Yf-âýÜ Ó…ªÁ|g6WÂvÿ‚üÃ8Ì™øàðhZí¬öÛÃíiíþ™™™j%“©â䄈Rž**‡2Xõ Qïh)Û£ÕÊdŸ©¸*üªbï+|GÙ÷ÈD( ˆ /—{O¹%œ“™ìË"+ÓŒÅhÕ8̶Bö³Áaˆ‹ëÌ”%‹ÀVÎ;ªÜª~ªŽGF¥±œ€p èÖ ïàÁƒj Õ"Ny·ã¦±*ɇ¼‹à1@bT> ü(þÛA®MQu½ÈÀVÞý®]»ªo‚öoùp9¹kî™ÜîÔ@í¬®‰]yl¥|×Ôˆ§m¤l±„‡ôôtÄÆÆ*á¥]<ÙêÜÁ=‚Y™2¡ã….,_¨jOÄT *I£hƒÓyKûÌÈÈ@BB‚jò%AÞÏü#Gxnv="£c©ñÖ4ÁYÃöSα€œ™ëÇo—ìë-.m,Ú9¡€¯ö&»ð°p.ç×Ïж_–A ²Ø¶)à¶1~‹éŸÉöÀÉ!y4_ºÕœø®à÷J¥œá÷GÆ´¹ÂãÛDû®‘´ýDåRÆ %ÅŠ±bÝ™ü; Ê1ÿ ®žÓ‚ D%¿‰ŸòSÈqEÅ'3×|è>PÚ‘IÚ_ówr¯Íë°ˆ‹!GŽ(cZa‘\Tˆ‚¿óRÆ2¾×Í,æ³llèJ’ýôâ<^ê*X&_NÁÞzƒã‰C‡©v.“~Úÿäbuj‚‡¼ ì{JØ÷ÈÞ[ù†±½‹ýP.vÈ–"q¢ñtˆïSqU :'tA4ûcqš„z8…?/y7åÛ©2íïÊŠæSŒ‚ʤ´ƒc{ë]¤m¶õððp5ÎÖéäýQyŽR<ó‡_bkà$¼øð-4Ø*Ú,|Çx-.ÈÇ!Ú>ð gš`µ;îeíü·0òúW°}õ;èDZu#=íªyÁ2//Oõ32–¨á>芊Jօذø‘ï•B µ¾ª\ú[ÁŒ×Ì{£®üµÓ>BŸ„ðÆvUQR€Ì¬Ã÷rï©¿ÈNš¥9{ñ³1=qÉ?—ãúóÆ6VjVÖ!Ži|8îw1³ñÜ‘os9&±ô×mu¬RUo5ÒP›"8$Xç³Ò7PV:Hm‰bDÅÆó¤:k £ÛTyq<O.¢&u#¶[0P&[ÄÈ_iI›¨æ" ,†É$î§¥îe[Ÿôý§-N·—={ö¨ñÛYg¥’iÿ¶Ð8YqZÐ,øZÒ³gO,øl-ÕÈŠùâžÂ Ù“Ì=é4J&F¿ª(œò;ÄA / •y«7¬²L,V6 @|POfòÌñ{ö`ðýý0bDŒ>«h4¡ººN}ô¤E-Þ—3WvTbͱDÔâ©:'B¼˜Ï—·„û=j=dÕ[™Lå¬}¾[J€Á¼ÎQKºT£`)ÆvxÚ.£ä[¢óÏ›v?®ÜVW’wQgá€2@V%(¨WQTýªT.Ë(|5ù5t¾ýíôYí²Ï^Êí -i‰p/N¡Uø«aç\U]¯ð`ëV½T¢é…ð£Ë|EÈ÷ã,³?iÉ ¥†´d0 XÈ÷ Èœ ž‚7{–ËÁ2qÿ9'/ÄèE-÷þQýî£bÚã©4®¦Ê)ñŒËžK+-gõ\wÁM©×ñY&/áOåKž%®4RFReãpò\Cœ¥‰"ãú)\dÁ¶’id@¤Ú ãK<ù8ù°cò㎃yÔP€—sÙ…§zâ”w¨ ¾~\u¶ïÜV‘:ºFŒí×L@W¼†RYÌé—Y„‚£G¢GŠCíßÁØípìhœd %z·nÝNŽ€Îv©³šŒÎ÷DÑ4Ú* K^:k¾jO<ß7wΞÆ. ëk¾¹)I+®éݱ‡ ?¢âç’¯`ÇwÍRù#€|fW¡ú EÌö#<í&ú Tñݯú~_º°¤Êªøv2(å`)¾¯nCã/º¼û2¹$ß {}99iõrlYÑ¥nøPuÉ¢´©:o¹º èBUדŽ'~ö{y'~ât|õÀwþîÒëørÕáú=Ѻ=Žýþ»äÑÜ8Իʘü7oÛÒþDk. 3¾Â·…ÎB‘r üNFu™œÍ.‹z'}5?ÍñÔ4ôUt™è“vÔ]§kÌæ87:¾¾²f8¬pÿž ©¦x-–8âìí¤-éZ¦Ø¶ýîÉw#++K è²B©ýÛFåäÅR8ØûÒ.Hi{ MÁÇo{MqOÞ®#}]Þ ™˜‘ÓÖpÔiZâÆ.÷ÒDd¼™µs Fö…ß_ˆ_^r†«‹½&ëÛÕ&=°û*œ5` îù`núÉFq~‡ZèÐ5Ï" ‹p)æZ{ÈNßõ¾¿ò=ãw¸®²ÿæJ,oÙ»±²Ð¦Þ•æÌê<«Jó9q#V»Ï=À3Щ¹åŒ/íSø]òg_\ùù!Ÿíü¹ èvœ„G×gÍ·«¿¦Ž£¯:Lž]1l¥ÿn¬nç;äOÓ²®òžÉØ¥u§óZA@§4ݲÓ3Åc̤þd-ÁPüÅIC“‰ð->œÕÌäÅkò““ PêxÌÄà‰NÑœé–ã»(¼k¤IDÓ€$X@—xÊ<Ã¥‹‘9Yy®qÔ©ü,nÈ€ ·>.’¾‘O „R9ò¬âJ<òn©8Z-å¼ÓIAÚÑ4­Æ´âç¤Ç[§“ü­¸BZ„dáEÅ£ð-«ÿ‚C=_RFq*œW¥Xœm̃qoi¥åüé/jpÎÒ8§Qq<·”jâ ?ÉCêΞ–éíåTKÞNºº‚œJ+É]ÊÖÆtö6 h¸ÐWe­à/“bŒPŒTIù$®é"Nò–?»s}¶‡ýP÷“”_óæzý¡ø:]òý~ñã±PÒ'¸´#ݹú·3;ïr¯éékKôÔ»ã|§ gߨR:ÇÙÆäÞO4‰¤?ÓN>hòþÊ€Ëê3,ElYH4Ù"¤, óÞê›,m$MÃê¤c>Ѝõ+¯·Ð´óÒ—ñD˜Ô4¬wßâÁŠO£’¯“wÍ¿¾jÞOÊ•yˆ¡utŽê{¯“B¹E"º®×¸ P|ëo‚þ>ÙëAU‰»”Íü„‡–ú#»¿$ÒüºÞÛ ê:?I/ï›B³´f§%Ïv§y?¹×q­6Éʺ*L¾¼—ÆF§ÛvãûÊwÆþÝQ‘øÓ¬½ñ¹ÉZ»³mËw—mAüíùk>4{YµŸ\…ÉCó£ó^䯉çIø×õÉôMüØÊä|O5?öºÑ|é«×û¶Ä±§ÑñõUòÕå²—C÷#2qh«ØiiÄOÓð¤&Uüïù¥s2¢ËaçËŸ=ü{»'Vu¶qÎGã$­Zµ1^]ÛûÁ³ä)îÚžðÞOª]°¼®µ¬ËÚ<­Äò@—>ÃðÍfZ« FÖ‚œZ1–u"ÉÑrÖi ÄÒ#³¾]‰¡Ã-£ÏbhXú‚æ´uª¦«k¸hò˜Ç:y¯`cõ>p. 7?ø"ÆîHçÂT%ÓÊ"!y"³Vi,rzPÅÆ\x;~Ö/Õ)œ[cx‰%´5}¹Úñ¶¨tÌ_W¾uYìÜêrÙý侩?¹K÷çV©ÊÏ8"é0© ‘{ÄiŒ¤- Ú2†g=7C”§ý‡ô¬¾–xÛýÝÜk¾;J]´*  ÿzßI°R tS¢vy!Âf2¿]IÝD¦µq-!À=`‘Ü;:;K ·y d•C¿/qó(âIó&üVñ(;ý¬¯‚ÉÌ„ÆIúÁP÷CºîO”u™üû¾œæ]ï —ý{âŽÇ»J§>>mãLç#WÁÈ5w¤\î KTçPÉv/È~cw4\¹kK™hmžÂ5¾æ_Ê îx85§Öö'1žw*œ®©)“Þ7üÊ%ƒ‹“À´æIxp×VÚ›…k¶7½Ä×< >Íxri‡®´i—0טֳ;^]iHþò'εžÜ¥·([¿®´¤\®4ìñÝÑs¥!ñ5>²Ê&¼É6q­ÑVNÒ;žI«v©{ŽFßcnZ¥qLì÷Иéï†kŸxâ9| mÀÊ]›ø9´$ÇcÞÍã}Žó.ÚÔypª ½i8´·-°e<<‘La7ÙWƒhójv«óÑý±^=oï÷@Ó‰ŠKÂüÓN&ŸZráh¡IÜþîÊ;­y±û·D«£ø ߢõ$NcÒVÞÜõB£Åò«wÇ=u×6âúì>Uë¾öòHbn=å÷ÚêˆET«6Ò̽•܃¥g0¬¹"ÍšóÓ-_Õô’³"ôªŠ5bKãJËÁ>÷¡ýç'¤[¢©Óº†ë4rÕqÜùi\ãɳݹ£¯ÃÛ&,سÒI›•Ë…ŽJ#c™Ýçl¦,‘±¡ËlÔ±´4qIäê\è6&¶Å•[MB’7>ÛÓÚïmy4Æuú5>k‚–‡´;YA‘ÎlÛ¶mjÀÛ‡Ht'a£Øan…gáWöÁ‰ŠØpΑ—]ÏÐuF;(#‚“ D-mÆ 2dˆÚ3+uþCwšÇƒLó.û¡Ö­[‡ÔÔT¥x²y—|ô‡m -µ‹1²””eœ¬£c$ ÿòQ•ë¦M›”¥lãj§ÿ-µésE˜{²=Cê_>ö'»þ[Ê¿%i+²R·fÍȶ5Q­”oü…µ®©oyOÒh–ìU=Õâ³Ýž‰ì{’?ù€µþ"X‚”=­»{iÌÖKÕ¶Ë&í¹!×¶<Ý$lÁKÓÓW‰f¿o!™ò>Ùñìyµ•¶= ï ´–Ë›êNh‰Ó°õÔ¶_w|hzš¦~vG¿¥ôö¸ö8ö{)ŽE[_›ÊÔ6îÈXÂóéÄ»¼OgüNï§ã{a¯ëS…“=ÏSqßËex:¶æ;úûÓëìX;–ÁìäÔǩ±Íùp<ÅÇTí/_›ó8é6ÓQ¼º—w„†¸Ómlxºò}œ*=&X&³ÅöQ÷îÝ ;U­ è§Š “AÀ `0 ƒ€AÀ `0þ×8þ&¢ÿu„Lù ƒ€AÀ `0 ƒ€AÀ p huºVe8|˜,~$´YõçGRÞÓ±¦ŽNÇZ;=y6míô¬7áúDëîDÓwTä:z¹ÚË_{ã×z9Uù|Wþ:Jº§S‘÷©È£-uÙQøh ¯§Sœ;®²%A—Q®îœë¶Ïî¯i¸K¯ýZUq×Duds5 ƒÀý±ý±”§µrt”²þ|¸æíú|:à×§2Lc§¯§2ïãåuªy:ÕùµT~áCœ»7GèDëÇžÞ~ß<—Óó©­å±Ç³ßÿ¥î(||W „ÿÖ\‹z[¤ûÖ›0ƒ€AÀ `0 ƒ€AÀ `0ÚŽ@‹*î"Ù‹÷ÌÌLˆi}ã ƒ€AÀ `0 ƒ€AÀ `h?z\,ÄÇÆÆ6ªÌ»R:F@× %¢œ·`ÁÄÅÅýhÏ»sÄ< ƒ€AÀ `0 ƒ€Aàd! ‹ßõõõJ(?÷Üs•€.´í²·Î«Ew‰PTT„êêjuº»Äšˆ¹¶ ÿ ÿÊØ¶ÚLuܺ1œ»òxû´¤=kçW·uûµ¥¸âo'´Z¢­ãÙÓhº:NïîÚZ\f§­óÓW&W×2‹_k®5îxo+-×xš–øÛ1°ÇsååxeÑ4íô\ýìùÙó²û»æãʇk:{Z¦iØó×av?;mwáâç.ŽŽk¿ÚãÙóh)Žö·ÇµÓp×0ñs-›ø‰Ó¸ë{åiû±ÓÖ÷ö«N§óÔÏ6Ç`¡Ó»‹£é¸òkv½·Ó³§w½×éìùºÞ»¦‘pI皇ÝO‡é«¦¦§éÈUÇÓW{|}¯Óiž]㺠—´®|i?MW_Ý¥×yI®ãÛéj?{¼–Â]ãê<ìô]ÓÚÃtz×8Ú_⺣)áÚ_îu}’’bôÓ¾ªM ÐëêêPQQaÀ0 ƒ€AÀ `0t8ZÐEõ³ººZý9ŽÆØ;\)~`†ìÇѵfX¯)ž± õä¾W‹aõ:ÿïPHÍ»ì£'yi¿ï@î˜$d{t=ÿB·¡A蟜I…c2ûª¬ž^ðR˜Ÿüò–NyÁ@Ú“§šéÑíNÞ×ã³r2ÛÊñsëX1ô;Ù±¸2Ü ƒ€AÀ `0,Ž+ ÛÒ‚¦Ý¯£Þ‹âåå oo ±¼—}§uJhöTFïD ®¯¯£Ý A0¶¦ÆÈe…Nòõ÷÷vú×0Kpª#Z°:,­´,í40ÉóDè¹ Bž`#“ ¤-B øu§ÊêÄ\ó:Éåï(ål ¶ªk í©£“ÙVZãÑ„ ƒ€AÀ `0 íC ]úé²ò&|zsu±¤ é2QçéäžÉ D}mìÝìüÄÄÇ#±K<¼¿ŽŸèL[‹¬[÷ò,ôäOœªÎ[y‚¯¯723¶cþ¼%‰KÆ´i“€JdgÁËÇ¡!!ððGMiV-]ˆGqÆY30 %^ Áö|T.?Íòf˜¬¼ûÐ6@ùÑ\,^ð9Váì©g G—hN6ˆ!¿æ:½»rIAÔ?gYd&+ÓÞ Ø·}¾üf9z™ˆ‰£#ÀÇNfX‚ •‡ «ÍpÒa’¯Cw|huûU§—Êià„ÿ+ÌsìÄ‚…K€ ®8wúD†¨É‹¾‚ýÞ¢!5©y²ð²â4Õ±“gÑLp&Wt^vzÖ½æÑÒ4hòzMaÌÛù¬Êâļ‘'íÆg’ñð‰+ƒ<³Žàɉ'OìÛºs?‡Î}FbúY“æ‡jG­b@èˆÓyZÏÖJ» pù‘ð¦¼%OŸ…€æE&mÄéø.dÌ£AÀ `0 ƒ€AÀ p´K@·ù'Û)Ij ²r~4{®¼ú×Ìu>Zð,…¸PÔUUaÍ¢·ñÀßßÃ]ü ×vé oÔpÕÛ¾>²ê-ˆHáÖ>UˆeEÜÇLJþMBVW˜E5ë’‚Ãxú¹©çã¬ég¡"ofL» S¯¸øÍuˆ A' 6}= 3çDïÁ1b ' êj¸ªÏÉÆÕ}K¨Ò0)ካþÌÛRe¶.Y1/¬,ÇüGžÂBF=z<9ùàpT+ÁJVÖ…oqïörÕqµ¿¶1ÜÛÛ×Ò2`\K˜£-Gòì‹3ÿó~‡ÑÃ!4(„ôh»Æ ëMíÁÂ\ç%8Y6¨½¾¢¹ aÞÄW1h÷Nð夀¯}-R„A‰"ª²WX•…¤7ãx2,Àßµ•…xü©çi ¦ž9žþA¼oE‚ùP\V4dòF ®õuµÌ£Ž¼ù(d’¢†å«e½øúù©‰¥!ᨧ·ªoûö ¼¥½9!£h³m¨g¶A¡ï`Z/¦õi¡} ŽÞ>¾ [Í—\kh÷Aäa Ó<³– ]_‹²¢B¼òæÛ¸è†.8«Nw†K?âdwÔð`»ñ#vžú•vD£P.e°4LH>lRÏš©3±A!øùùûÁ‹qd2HiŸðÞ8ƒ€AÀ `0 ƒ€Aàä Ð.½qÀ~ròþÞ©X"ªdC!×Ï~¸<>Dí]¥‰#ÂYyY Òw  ]BAÌq ]Ñ%®¼=PQV„ôÃ9()¯ h¨쨘NˆíM¡‡*Ö"¹ÒO‰EUi!íÞI‘ør}.Þ¾µŽðc^áÐ÷ <ª‘¾g'róóîÝáGÈRÁ·ÁÚSèÖ9pèÀA9ZDuæø… [R7%ðE¥’ÜæñpT–`ÏÎí8œ›¨¸Dt¥eíy¯®(Åž´ý8RTÊrù!ñc”&‚~yIWû£¬²Z wQ±ñˆ‡o€¼@x?W¬}PÁx²rÉC=¢bã¢8áS¤io/T•—"co¶Â ^‹ˆBçØRƒ Šøî%¾…%¥ÌÇ:' !.–“¨`ºƒûsPÓàƒÈð`=‚‚’2DÇ& kB,y5~N„Pk`ÿÁCðñ@AVâ˜sݰXK`U5)»qäQ¶øx{£´0û©UQ\V_ÿ $&õ@lTrÀQb䂨Îq ôAÞá,ú•pVÂqäµ¢(E儆†¡¶ª¹yG‹nݺRÃÀGs!¿ aQÄÍùyy¬ßÄÇF±üEªŽ²}Që’¨êÁ‹Â²ÅEGru(•Õ5ðöóGDdÛW'øù ´è(²²¡´¢Š“¾ˆDB|º¤ôÆsÏ< èÆó&¶ëºr¶­½È=RDD<Ý ‰‰ ðç䀣ªf ¼Æá¡p”#'ŸeˆbºvŸó½(.Èe~Ù¨¨rpBÃáR,¿7'@23²PʶÝ©3"‚Մ‹ÕÜàn¼ ƒ€AÀ `0 v!Ð.½iÅ´]yœúÈJƵԋ»1÷1žÈÎÊ„?ÕÛk* QT\©xR+—ÚŠóàƒwfãÿž±`s]‡áù¿þSÇ @^Æ&œÅ-ÍÊáÕs^|è^L՟⩈(@(÷gglÃÓ·=À§Î˜…_Ýp †_~ ¾þ| ö*Þûo¾„ß,Y¢îNxfÖ³8kÜxp5VÉ»"ZQ8¯¯.ò¯¿À³?„ÝåÎè¼<þâۘ܇“ªö¶â?ÏýË×l´"$Âì¿=€1©½PŽ÷ß|OÏz‡“ (Ê9ô—¼“F Àá}ÛðÖëÿÁ¬9Ÿ7÷œ|5æ=x ü)Šó  êxe1–}õîzð<ã<úÛ›Ë YÝ–UU çE9ñÑ;ÿÅß^z³‘Ð-| ÝBJñÁë³ðè¿^o ‹Œ'ÿtÎ:–“¹xöÁëðÕúzœ1©?-Y©âù÷Ÿ„—ù=ÆJAvúv¼:ó˜ýÁ7M4x—âmÜkæÙìÁš„ñ¡ð™µwÞxåy¼öÑbtëÞ 2`Øô«ñç;o€oYî¸ô:d3íó¯½!Ia˜óòx~ÎBÜü§§pí¹øöƒYxð¥1jäH¬^³Æ™K žzyfL†ŒMËpÍ]bØ™¡WHÞžû›9S}kñáì≗ßã¤CŽäfµÃËÿ#& ë‡Û×â¥çŸÅÇ‹Ö#*!G1¼÷™˜÷ŸGRX€?û$^ýx1‚‚C8‘TÊ|»âO_G”#ºûŒ»æôìÝ—“Ř?÷=üö¡§lxã÷>KÏ? ÞÕå˜ûÒxᓘ4q–|»Ü/ ϾòÎ7Y»6bæ‹Ïá½/W "®3 91ôÁ'‹_ER¨'>žõþõÁüýµpÖˆþjÉš£±&–l›[ƒ€AÀ `0 ƒ€A ´K@o'í(:窮¬î*¥çüµ¸ãÊ˸3ÜrAÞNa‚jíõŽ ¬ùæ%œ_~ÛŸpÍyãq`ëJÜúÛ‡ñ»W?Äç}z ,º žø¿'¸ªžˆ†Ê"|»ðS¼2çK,X~FíÍUMK˜-«®ETçî¸î¡;q÷Cÿ@µï <øðUèÕ‚¹W]T§Å…Ʀà‰'ÎÆ¶UóñÆÜ%øfÕzŒ>¾žpp…š»áÃ%ðm›×à–ß=¤ÒÜOuü=b°lÑ|T–W*Õg *FÔ 8ÿ¢‹(D¿Ï¯Æ†]éÜ» V~õί¾ë\qÎXìß²·ýî¼>$’:‡bå—ï+á|Äô+ñ«ËÎAMa&¾\¹U,G£¸U]ŠUKáA çÀPÜóË+‘©TœfoNpÔq"aé‚”pž8f:~sÝ¥÷ 0øé|TW–aã–5J8už¾å2TäìÁ÷ß[ŸA﯒àê¢"U΄~£ðøÙ3ðÍ;/à«ÍK°iÇÏ0$9+}¬„óg^Œ_]:‡wá÷yãŸοÅ}ÿ S†tÇÊyïãág_ÅýûᎫfàá¿ý7þö1Ìœý †Ä`6…ó°‰Wàâs •\Õ#ÿºö:ìݲÏÎ|xçK ëß³Q“býÂOPÝ/Ã'OC G5V~ó¹ί¾ýOøÙ i_KY¯âïo-@Ï.‘X6®ÎϹúv\sÁÔgcסBÔU–bóºo”p>áâ«qý%3äQƒ ›Óh'pTWëûXq˜ÚTyß·c­S8OÅ?^¾ A5xô¶{ðÄï¤ †/0")¨-SeŒí…ÇŸí¤ÿÆ_cå–=¨;V,øT ç“/» ¿øÉTxVbËŽÝœ<"¶ü«8º_¥¯qªÔ«óc0 ƒ€AÀ `0œÚ% Ë] >'%÷ï…ˆµš-¤EP³žBqÑõ— Š+õ\Eܳu¬Ü…QÝ®(FÚvkõÙQ”…o-¢úô^ÅYùòTi®FRx :G†bïŽÍÈHOGöaKPkhàÞcªkLŽRý9¼S 9B¥÷ë‚)S§¡{×N8r05T‹7íìópá”HŒôRz-%s0jIOVÏk+±/cŠÕoÆÅçOGd°/úôéÏIª+Q%\­ªÇáìbÜ xøÖR@ߊJîy.)>Š­›×ªôŹñí7UÈ9¸O=.ʧñ¼ lß¶E=ßò‹k0>µ'Uñ+1tl…ÚüeG• ›ÿùÌÝÆip•õ> úšj5AÀ‚s¥ßeGбcõk*þon¸çLϺj :†ûëËðöûëUØí?»'ŒçýÜ|ÉGxñƒ-TÏGLR "¢…ì]ð“Ÿ`H·h”¤€>‹RhJ‹ ¾už¢qÃ—ã¼³Æ }£Õts+Åz¾ä–u~¹¯ã>½ÇZêß›“9´°úëoìŒøº ûwe¨ç-û ¾˜pöEøKÞüùo3±™!ÝÆ]ˆgîÿ5'3ÂQUt„ªõ–Úÿ˜±“pîy°/«êÐ7,:€²ß–«‰!xæÕwãþÂmAÄ&¯Íý?•OUî~|»Øœý;ÔóÎÏÓQu{ü-ºó–¯D÷H?nyˆÇÀAC Ú)·tÅ$w GŸ”è›:I QÈ)ޭ†¿ZÚ È¡úº¸[î¿“Æåä@Ò}{yödÆàÄ…ª8Ó§_€óÙ¿ ÷TzAy<‰ÀÛÄ-^¾ ½bÒ#‡Fçˆn5¨ÅOïyÓn®FlBši° Ò© P©ÌAÀ `0 ƒ€AÀ p"´K@ׂè‰dxJÒŠd.ŽÒš3; ÀeWý}ºtFMÙ|2§B è^ÜÔQk–}- ô4NÆó¾ã’úâOü|BbâU‹• æâæûŸBç¡ÓpÓÅã¨Ô°Õ¹æ:/f'‚ et̪(»r‚ÀZÕÕüÈ•Ñ(àzÀß—{xé(“+'¤œ·¼ÖÓ²¼Zÿg~<¶ÍW þAÁj/u^é*¾#,ÕxxqÂÁôÄ»žÂSMPŽ”yߥG_ÜßïÕµB¸j]Au ¡ÜO.‚­ìˆ CÕÊÈ™$uTW¢Ž^`Ôlîq¯¬vÀ_ ™«DrKÕ|ßãŽu„“?†×Ôy ,<Õ¥Õüª…‚¸Ÿ]ö½Ëª{P¨eZ–‘ó>²ÕÞrò@ û›édu¼žÕ–Sía …/-˜7¢J¤]Ö“@÷sÆTË÷ð±¤hu4ÖVËù*íóOŽŽóFŸaðÇ!cÒ)‘–üë¹÷;{­$’r‰c¬ð_ ¤Â“*÷u[â¬(ú“o'ïÁLF þ´Þ_ì­ö«+‚b‘1ã’Sñç?¥Â×q£0iÆ%¸Ûáƒ5ëÖâÅçœêé1“ñÞ«æ*üùxðÞ,Y¹³_¦!BåbñÊ»ÿF'îåW#ø³:jUƒ ÁÀ uôœ§§÷gm«ƒn2ÁV_¯Þ¦"/l~>V›)á$‘—O&œs~[åÕëÖcæóWôá9¯½óFèŽØøD³¨>¢5¢Ê«õ¬¨æ× `0 ƒ€AÀ `øî´K@ÿîٜ┖Œ§H%“Q Ká"ÖóOkqbiÛûÂchK\t|L;g"‚üPw‡¸2ŒšJ¤­˜«Â}Õå\u„• ?TÏÚ²ºzàX·aQVpÅUr‰;'ç0‚hÀ«ŽÂ“XùWOiJ,kK뚎°-¤Xƒn‘N!öÍ/c4U¨SâñoçªÎG£gl Wt5 g–Uny'åòõ æª?Ušéâ»&Óºü$„‰á2C;RQ‹È0–›ÆÁ€ X¾b-¢F£û¶]ѧÿ@%LKÚ\‹aIÁ˜ý»ßáÉûoCϤO0~Hox‘1Z'2š_`Õ¾'Ë—`åÚµ4®`O¶lÛ.ÉÉ4ôÖMHa݆í7 ¹™XýÎåBumb¦žXv6ITÉ~ô“«o€/B:‹VÂZlݱÝã‚yPvÖ™?…mjTÂÌ<…|¸ùƫѳ['TUÕ(<É&ËŽ8ãp5’{¤í€ ÉdS³áhÃ|°wû*|±~ åÀ‘Ò _¾ý¼8oüó1f`2›XÙ—WÍ¢«ˆ™ƒ€AÀ `0 ƒ€Aà;!Ð.ýôPqo¡¾Ö%Æe/㊮#Åã¯(d•—ä«Hù´¨íŽqÓ.ÄX®’Ï|òO˜ùZ f KÆ_ÌF^€¯žú-’ |ºùÇsظ8iË>Ués‹ËÔŠhS yCF>M®Gc clýæüŒçßx/WÞ§P5ÜÚÿ[Ca]Ž «#â6-Q‚¨%âð—El 6¿úé˜ùÞ‡¸rù‡3¬V®ß‰;ÿ2½b»ãˆ²S¶S &VÎU”4é²¥\á8ã«ðõ» ñ2Ëõ2Ëuþ¨>øô“Ï€)—cñã÷`ÆOŽÙ_lÀ3üŸ}4»7®eêødÞóJðZžA5~jþðk¬ÿË˸ñþçññÌ? Õöëëyˆó‰ÄÄéWáËÿ.Á¬gÁ¬·ßCJQörÓÿ[_,Äè)gcü¿gâƒÅÎu‹P¼m%²vÅ-DÏä.¨+Jm“)'Ç›‰°§·ä”" 4’ìEÀ;kñ÷GîãŸW~lÈSb­£³ß_HŸ…¸æêËh)ÞZAZµ</<&—Þú>¿íxèž_ã-bÛ#Ü ó.Õwþ±Ñ˜É#ñÒHá'ÿ…qþxúš_bÖÿÝO‹éqþ˜~‚­õòÙ/ü…îÄxšå½|:G‡á Ϻ—]R©VØE;CÚ×b³ä«¯ñ÷½ðjÌÙíëK¶¯ë1ﯗâ‹7ïÇ›ó³qïo…WU…sše»àTgï‚Í_ÌÂC3?Á•¿¸ážÜ×Oá\l îÝ^ÅÖVŒµéyhðòEÏ#pù™ýð·ÿÆ-{6"¨h=¶ÓÞሠ~ŽýS¨cQ…‚ƒÛiƒÄ¨Î©ÝAM‡†~ð f}¸ ×ÝHCµÅÎÙ¦’&¡o¯$®Ð;°õ«‘EÒö­é$6ׯ;EÚü ƒ€AÀ `0 ßÚ~Òk•»¾hÑ"TVV"%%Eƒ|º¬’IäH­|Z1_½nj½B0zÜhÄr±Ž{ÐwlÝ€m{²‘ÒoRö§Òs-²¤cË–­ÈÌ΃*Õ!aHé;Ç @%Ï9_öíRàêb§ø®ˆ‹‰@AnB’1vÔ`ÎÀ²åë±Ì'Ä»;™ÇÖÝéÜ?]‚Øä=¸²voÅöŒ<Œ3}zÄáPúN¬\½tºcİ¡ó÷RǘÉbdUàÅ:ºݵeódÊAyU5‚Ã;aôØñH÷ÅÚ‹‘Sí1£F!)>»¶lÀ¦miˆí9#R €|d¦ïáJï6U®Z®žsU^ŒÖ ÄrsOñ®í[‘¶k/+¦J½'zôMŨ¡Qš½K×nF|ò Œ1ˆ{©`-Å•×roùôKI¤*€œ÷mqîÑP‹ƒé»™Wò yNºâ»%cÌØ‘èĽØö¤aíº È<œÏcÆü¶Ã†¤"¾S„ZM^»f- *<0vÒtá±g{¶­ÃÚmH¤Zþ(æ_GKòëV.Ǧ´}ˆŒíÂUú?vu^á˜8q |j‹°tÙ Š ÁIq1a\Ŧ±;‚)íAVÙ¸/>}W¶nOãwG¹‰ÀCÑD,¼kJYÿi¬Ã8Œ=qa~ذzvñX±˜D Ø KÞ{þ×\yý-èÓ½3ª¸×¿[r_ Iíp˶wûflض‘]û`ôÐTÅ·êÑÓ£Ù\ß¼i ²²sQMu9ª­×À!HíCkò{v`Ó–Üõ>èÚ=C† G„hܳ ë6nEÃ*kxL^7 2”swfîÁ·+×!˜“5£†AT¨52°žZ {¹Â^Ç- ‰I)A<ãcPÍ•ÿk—#ã¨C‡Dßä•÷Ú5ëÒ8³ædìÂzæ—Çüj¼Ð…¼¤¦¦¢wrO@(Âæõë‘SˆÔ‘cѳkg¶ZNˆæÈwìNa2Õ8)!šëׯǴiÓ¯ÚÇéÒ·B¸LVƒ€AÀ `0 ??J]p´ã^´¬-+©\æ º6&ç–ËŠ³ Ôë¸ÌåV Ã>\¸®E5….qÞ>­`‹ª½J'|Žì n’sDÍ[„tú50o‡d§,Æ{r/³¬4KZ)¤U‚²¨ïËÊ1é ª\T}nà}5D'å’ýÙ¢‚-çfûpu-ù¬a–ÛäYT¹åÜpoÒo .e”ýÌ K2¡óÓB`-+ÖÂk=óªQy{ðŒs>K¹È·Ð<_ÁKp”ä•/÷¥+üDæ—²Xe“ü¤Ž¤,‚§àPÍI ±Êî'|2LœÔ¡æW=Kž Óü‰Ÿ%¤³|¤SK,jÈ‹ð!x°šU}ž"h =áÙÛy.¸”­º¤ÿ}ò<õÞ<ô÷ÿ⊣I‡û¶y€´9ÞjWÄŸ‚™ÎW°“z`½[íKÎ÷73¶Ò òk[G¬X>i¶Rn™X•yy–âúøú² Öw²—ÞKx”üd93TíXò¡­ÙïîëçGl©‘ íÚÙ.¥Éê¾´AÕ†{·&[Xç¤'ñ_ægµ>3lÑé-üåéôpF@?=êÉpi0 ƒ€Aà㪸ˠV;%ˆ‰C×Ò½=LDZÓpœt˜<‹ÓÏö«øÛ…,ygc§¥ý­XOKˆ“0‘,ä*ºS~RB‹Ä«¦‘,nEÀ±ò¨£Àd•½ÎA•BŒ/…,ÞjE µá@éFå£òpòWïp(zZ˜‘0+o nÎô"àˆ`Öèè/B”ijèS€uTóÞÚg-´D`®‘x,LW­•¨ÒY‚ºÞ'mÑa¹h¼Íµ\ª|‹mUU"r¯´*7u¶¹°A¡ÎÉ›·0kZ)Õ¸ uϸ:/âH] ˜“êj ÖÌÇŸ{¥üu"$óªTÑU=YX =I+¤ü‰“rK|¾L/= #‰Á´¤U«­í‰—Óéü%®ð«RB¯LD(ëʯNø`¸´_’×Ъ¹859À¼cSF"15á´¦¯&Tk›‚¢oãYÓÕ¾ÜÕƒ³}I9­É«í ŸµÌÛ¢) èGùYufùype^â5:–ÃA\<9Ñ"8É„†L¦T³\BCáÈò+ç„[Êa Ú¡à.qeâÂù·*5™á´¯àL¯Ë'Ø[elºj~Ä_\S\g[qâ-þö´-ÅUDl?îÒØýìtu2Í‹k:Ü\ ƒ€AÀ `0 ã èjE–œê®‹¿낸†é8úªÃ%~Kôt\}Õ´uÉS‡µt•¸:L§¡C \µvg+ˆ„"[hu¸¬0ŠŸö:LßËÕr–@®Ÿìide[x±~uŒ&Zö<4}äŨœ“kc9„§&2w:­xXå²ÊÔÈ ÓÉ*¶ÐÚrUô)X7;ïÆ²kzbìNUy9yÒkgÇE‡ë0¹ºúï¹-i\ãØy0Wçš§H´b—@&D`×*ìdö~5-MC_µ¿\µŸ¾º†¹ó×étX¢VjíïJK§³û«{-¥wç¯ié°–®ö¼[Š£ý5Ͷ¤iO\;}¹×}š†¹7 ƒ€AÀ `0tŽ+ §¥¥ñî( $$¥¥¥æY×J]ÙAUnYÑGöÌúqÏ«„I‰+iÊÊÊx6s Õ©«ÔžVYE”²¨“‹Ÿ„Iwôe_®^ñj+}€Ë_{éK^¢‚Ýÿj¯s/÷bDOøÎËËÃÑ£G…ò„„íÔh\O0¬Z£/jÛ¢.ØF²ÿWè wøÖzEVÓ—3ÀËËËñ—zgÁX«™»Ö•¾»º’†*ô%}kuu*ÛÂw©«¶¶5ioîêJã¤ëU×U{Úš`¯ëʵ-¸Ö•¦ßR[º^¤H[q×\ÛÍÿz[¶¼gÏõNH=g0 ƒ€AÀ `èH×H\NN  %s "0ˆ¬¯2ÀáD„q"XŠp#‚‚Žc¿Š¿„K·\’f)'ºšû6jO9ÜÅ¿FÞš“vûä.¾¦«¯n:=Û§µô®aîøq#ÏöxÒ—µôn¸Kkü ƒ€AÀ `0 § ã è2°ÕN¬yÛŸµÿñøîÒè´m½¶—F{ã·•ÏN_—_´ BCCQãw—FûµtµÓo)Îñü[£ÑRXKþÇË«½á®ùØŸ¥ÅÉJç±®¹ñ>{¸=}[ü%NKiìéÛs˜á9ªM˜“£ØÄZ»í½j-w4]ã·%ŽNã.®;?ßÝÕ]|í§¯îÒi¿¶ÄÑqÛrm/½öÆo &ŽAÀ `0 ƒ€Aàd p\½)®üQhÒâº}+ªœå,‹²vVµÓ½¶ä˜*Óåjtñ´›è4_mµG–8v§yÐ~M44/Müë´®i$­“{.WY™£\áááÊßOâw|¤Æ<ÕDWã+O"ì6P¸U¸²Í¸®E‹¿Žïz/éu˜Ü‹scWyXÑŽI§8±5-{:y lAVZúUÑpb-y÷¡17ï&ãd­æ#í×ùrèxÍòròg.ƒ€AÀ `0 ƒÀã èZˆi¨¯ÁöÍ›‘SXJÃÚ.²Cuµ±‰)èÛ³;|<ê›/í ‘2D½T ù?Ki®j«ó•@W¡DÓ±ÒZûJ%/í¯éŠŸN+aV¾¢Ðe¬Tk@IDATו­úªWpåüq9·ÜJ#¡œ£ìäa:½Ð—4¢Þ®óÔWáøÖPuG½¹pž•‘†ûqÕÙ‡‰¬ú¯¡üÀ°h Ø¡¾¨©å– ™Ø±*¦qÝäªëE"h{ûÐõ­ëÊJ#+øº}ê:v¶Õ¬0MSÒõ¶sÑ%LhKªKrñÉ;¯àá9[ñ“¿Ç„á©ð¨©F-åo/™ôbb¡¡Û’~h6פQ`µÇ¦üUóc0 ƒ€AÀ `0ü(8®€.’¨ u,ý`6þ5wÉ1¿üÞÇЧOoøŽZ uµ«…"€ˆPQ£¬¿û(ÁG ÔQGY•oàê{-.f¼½š[y¯#­:%Œ‰4f Y^^Þ´ß´ )‚ ¹T*ĵ<*r÷€ûª¼0æ#ÂŽÏEqª1ÜITñ"+·²þ©$¡)¹ÖÖ2 <½|Ôê§Êžœ¨iŠ!KŽ"“«~Ö‚Ÿò0?ÇA€ªà 8°sî¸÷©c㦜‡…³@§¨0xTÕ°žPãàÕÓ‹õé­„d±™Àæ ž5¦öÖ-½=Ô±d–lϺr ù55EË´¤ÍÖ³=<„.ó‘vèÞ\—6­Û•LʈöHMMWÇ}lal9ü/q«™£·%FsÂjß²]Äñ…¨Ðò¤‘A_òQöVÇìÝbg{d,Þ¬wB—Ó\ ƒ€AÀ `0 Ó6è–À5;GF©Ò^yÓ}8Êpx¡ŽÂi="c¢‘“±›sráá„^½û :,öîÄì|ø„ %9 ¥G!3·11‘¨./Áá¼|…Çb`ÿ¾ˆñGvföíÏFXt bƒ‘•ðØ$&ÄRè§ =sÁ¼ðH6öì=ß P„ùâpVÊõHJî‰I]áÍÕþ¬Œ]¤•‰²Š*xP° EbRwü?{×^U±uWzqiô"½×Ð{ï]±‹‚y(* *‚OQ°€‚X@¤((]z¤C =„ôÞnÚ¿÷œ;É%„æå½FsÏ9SöìY3‡ï¬Ù{fü¼IVI"#.Qý9puwEiQ.â¯ÃÖÅ uBj£ 3 —""Qld:uáãá ^]Z\€K#èå(ä!sñðFh:ð Â(X!aÄ»¹+Rþ×_ îc3 k! EÏ¡˜6fœ-Í‘_X[gX”çãÄ—ž]Ÿ ¬‰âÜ4œ ¿ŒÜòæð €»“%._¸ k{ØZš %ù:² JQ;¨|PªËÅé³§[T_?zÎÏFj¶Žú:¶æ%¸rá<._‰DNA1œ]= owgAÔó³3põÊ$\OF)ySØ98! V jx»!/3•ÆÆWi('nGú‡ÀÝÁÁ Zb„c0ÜÅDñt\‹¾‚ˆHª'·¤«?É©YÃÌÛS“HV ½ΰ67FRb"rЏ ¡¨éçE#-ëÚdÒ_G[•T( …€B@! P(&î‚ ëÕ%ž^Φi &Dx­¬¬`\^LVd#8;9#ûúe¼7uÎQú¼¾@›w|ùþóX»;O¿¶¡Á5ppç7xóà p÷rFrbºÅ?/.øãv@üÕ“˜:}à‚GcqâlfSÚØ>´±V)" 'Å_ÂÄÉOV”—7.-ú⋯¢¾·lû ó–mE³Öqe®¦!‡aÉë3PËÃGöü€7–~GWd¦¦éE8`¤!8¿g%ŽÅhQ½'ÌÀì§&ÁÙ¢ûwlÀ“/-@H³ö°/ÃŽ=Ñ}Ô˜õø8Ôpç£Õh2€­±*üezÚ0Þ––VtÌŸ^"Ãöްµ5GÔ™4fV­‡`Ók##â(&==›ê¬ƒ¶/CNZÆOžr³ zaóâWáï\Šoÿ=ëоKìß³òvÄ/»æ!*6#&?‡Û ž›~þu/õ‡·_~ÞvåØüõrëáÜõ\±çПxôÕ0¡GCü²î3¼ùÑ7}¤5œŠcqøtž}s&÷oŠsÇÅ|w?_‹Úþ¸~‹æNÅ5Ý›àã÷æ [ëúH޽€ÉSŸ1HÔný;Dz¹Ï¢¶·“ð`¨Ôˆ» &¡P( …€B@! ø¯Dàî :»âê‰ÓšeoaͲÊö.Zö5†ôl‰¹Ÿ¿SŸÇk —¢_Swl!rÞmô3ѯ ì-ÉõÛØ\ê1d*úujè3‡ðâ¼÷ñÎâ èÞ¡YN­4¡e¦i:MZÛ v wán\IDx­·to¯‰…Ì‚«Y1ÖÌ{ûŽnEdÔÔñ­‹ÝÆbU‹á°³±FRlO¬ýâ_8´w="bG ¦W‘>ÍJÛ¾×PôïÜWOÀÛ®ÄW«Žâ?Ÿükxæ¥×±ý«xlÌr³äÎðÊÌð´.†½+¿ýÝÛ·…_—fDÎÙ…š]¡õ@UB¤îîrZŠÀáÈöuâOíóø¼ñÔô0 1ÑQXöÍ,û°×Ný$²,]ù…Ô@Ô¹x­ˆi]¼÷á ð³6®ýßýü3Žœ¯pö|„ò†‰¹#ÆM˜ŒÀúH‹¿‚•/?Gñ~xõ…p1‡¿£)–¯_ƒãýÂðˆg¹ ç@ <õØ44 ­Ññ1°rðBÌ…S‚œµ0mÊ$ùy"9!f”ÆÞÅä}ÁwúÏËLÁöo?äüé9ï ý ‡ÅŒ×ÞÜ/6£AH,i/¼ãÙÓáPž‹5‹fâÀÞuˆŽ‰Ú>.b¼‰±¦&…4¬Ô¯B@! P( …€Bà¿»'èd§ãµ¸ºN­ê“‹»EFôu!W÷r4lÕ˽BDv!¶lš†Æ³“‡ÃÓÑyÙ¹ëÆëÔ«‡f-Z“,’Ml€Si—Í®èzâÝ·G7Lb"Y­QL³e´]˜ õ¼×ˆ6ðâÐ¥9Úwê—òœïÚû¾9B t‹Èñž€‰]=.\Õ¯‘ |ìu>Ǽø?’Û€qhÚ¼9:vî »âLñÜýÑ~èBÏÆé—ÑŠÐù£Ä%…ùä&}M¤×©¡ÃæõßÀŒ¬å¿n:&â²2³Äš`^laaQaEWÖtϽÿè g­f1ªw8Z˜ÑR…|øÔ®‹òâBX;{cĤ'‘žžŒo·iä|Î;ËÑ©E^‡€2r/çP£]4jÜÁVˆø“ú ¤fe¡ˆvg£­D2z,:=Ò€¼AŠ~dv'nõ<±õÇïȵÜ;ÖïùR²r`ZÓ méé b±þ‡ß´ÜÜ}Ð>°>`‘‹J‹F$6ü° ëÖ§§7Z»Ç _ý䔥¹ ¹´g ò⟔ÛmÚ4GHp-Ø”f¢6Å\Ý…Œìl±FžѦ]s´íÐÎe™8¹§1$„Si²‹þ»á¥àÌ*( …€B@! P(ÿÕÜ=A'>Ë^qhܲ† ë*\Üi›7”ÑÆV%D¢MLÄúZ‰ï¼Í›YÉ ]ä…éHí]raXdÂDÇ”é3ZZ˜“…Û‚H ÕGbÝd‘Ö‹4#JÙbmZkZ«Ë˦'DáÓ¹c°å<ðì+o¢Wßøyƒ Öo;¢᥯‡/lÝäŤ£0MˆMáÌ©­6A}´¢6h„0·wFÓ¦ÀÑÁ]º÷EQa¼üýY³V†üü‚ }Õa‚å/¹ƒ~P݆è?hÜ­i×vê'Ƹ¨&`ÈÀ®m>(G oäWy/«ä­å$ 5Úîìt£C–––° ?c*ë5±qD£¦ÍááhƒN»ÑœO!œ}kÀÍÇ/|³ mŽÃÉãG±bÙ‡BæÈ§ç౑}°˜Òöïß“'ñü£"múì·1n@XòÂrúzË…º&DÞµÝáùªù…Î2e7ãW€6£ä`¥ãF´ö]…€B@! P( …€Bà»'èD,˜€r¸ré öí§Ô‰Ìarö©‰úÁþ8÷ÇïxüÅl‚D·úØõÛøÐïÏ|.VfD¬4•œ³žÀŸû÷ œDÓ:q';$i¬Ef‘ÚŸ[ìh-‰SUøóõ»Y3.!Ë9žBÈÉHäÆѪEsxÚÒ‘Vr¹Fµ%é—;²óNÜt´ù—ÅñšÈlÚaÛ”6«óéI£=Q¿N-”æàÏS"6 cÊÄ$ËÖÖ¦’*×cÙ½þÈÒ㢮âðp¶6C3 +4hÔeÙ×ñÚOñÝÎ3hß­ŽïÀÛ³Ÿ„»û:Ú¼°)ǧ¦":ò2Ò"²±ç篅þž°2#ߢ<ñÌ“3:"àLŽé7?ºÆ=»q#P·AÊuù¸xö4Íéh#Ä\ŒLD³aèØ- ÿø sæ€+1±8yä(Ì錸V]ú¢{ï~è°g ÞZ²çh£ÂBSr ÓF ¶6 —z\=‹C‡ŽÃ…6¦;â.SÝ–müaokü\ž4ÒÆ#UÞU¾”tà '‹*ؾˆU? …€B@! P( …À;wAÐÙ¢§‘‚‚\Í |ãW`ãW•M”ÖΚ‘‹øGµM­æ¿þ"šÕ´‡uÎ :ÿù#rá­ñý[ѱRÚôÏßž¥ŸBÞŸ6Nvˆ)ÐHS6íÆÍǯ1©1Ò“öÊÚÈb_¦‘—„ÄŠfK<™‚T‘¥€H»“‡Æ÷Æê{1å±ÔrµÆÙóWDzYZ™7K‚VDDZ••]â9$‰g¶b&GrÌ%Rž:Aõ°ä™˜1÷=<7}"1)WÚN«óåß“E—ö´'999prâ ã3"VÒ‚+"ÔÏ]!PJnìÎïߎçè¯"4…_yàÒá-Xò嘴‰Y³¦!ñ\K<öüx~êløm['ÚÄÐ… ¥Ý‡©£÷Uõ$Z5©CžÙH‰;-âyãAžX)%íS3¯.~Ó_x/==•¬ÖŽ4P´1ÿmîæTšÙsx3:ôî]g÷hºéÇÂLzæUJ«~}CðËV-mh·Žp¶5CfF’¨/'/¶Nè5ò üºý ,÷ý‰$úqÅÛSúÃÓÕç¢òEdt6]ÙÛ„ÆlAn‚ˆ+e<êUP( …€B@! P(þ—0"©wºÕšeH*÷ìÙC.ÛùF‘g>š,%¦ÏM®íåpóô¤£ÍtHL¼²r†Ò±T.v戼r 1ñɰ´sFmwìÛ¶³®Ä³f£aP­í.‚{Z®åKòW¿+‘ñ°wñ@PPmÐ Y‚.I.kjJVÊô”D\¦£ÎL¬ìQ—Žh³2*ÁÕˆ‹HHÍCM:j-ÀÏ×b®âÌéó((5¡ãÕjКñdåäïvü<MºÅ&¤Ã§VmÔò÷¡ ÂbèÈ«(XñQkA0.ÎÆ¹óQPbŠÀ `xº9BW˜‡Ø¨HÒ19y0§Æ]Ü=I× ¸ÑC!–M뇙 K‹éÿÒ`y°ma»°‘gà:-QˆŠO©gÜÿ:Z.açäo7:V/–Æa!|ýk!°V f§àüE:f-¿~5aZ’‚1}GÁ²E<5ªœ,É×ÃÄ¡uëùuDQ~—Çû” €úÖ›Žýã¥Ʀ´[|iâiº+W£•›Oçž[Ò1‚îtt`ìÌÊpùÒE\KLFí™`EÇüñÑ~ÁtÔ[I^.]¢£û’RÈ£¢6öN4I¿˜Òúö«—/ãZj6üƒèH6OóQ€±‘8á­9/€Y̓Cë¢vM?Ð2u¤&]#yWaIVý`X›“ΑœQ€’áëéªmžHï“wîŒÿÛÆï%{hœ …°°0x{{«‰´;C§r( …€B@! PüMÜ‘  00PìNnjf¦­ý%å$'à+[Ž™å âNÁÅ´&½”ˆ»­»5&ö`B.â…¹)X³ü-,Z¾ó?ùCÂ: ÖoèÆùÉ­Ü”Ÿs.Üˉ0±C½¬‡nEàl–gjFÆÚí›×ç b't#—x±¾ŒäpºÆ^$Yf¢'ÒÉ".Ú–SZ;_BVw&gfTw9¹ºóºwÚhÌœdòÆxœ^Bm4¦‰ !—ÝI_–kbbDéš<™‘””___‘¯Ê܇l‚ºÞGŒ±)am8YÄ#¡œ¼)x­¹ ¥ó¸b¯Þ5߈Æ÷çáKĹÃè9`P·v~þ=]hí:Yåi0q_’{FÅØä¾ãñË,W#pú>¦ÑÇãЈòò¸.¡qE]Nõ‰§1RÊiÜÿTNìa@ùxLòžœÆcƒuäw‡¡©™9½;<þJ(®D”5£vðŽõ¼¤‚ëáõñ¢zæ6Êt9ÆÍh+ݜ֗›“Ç”QC`EÇíÓ {6Èñ úŽú¶¨P[Ò@&ÆušÉ6ü§ÅóØ*e9‘²Òr}ÿ‹$š ¨[ÈqÊÏB-Š\×)e1,ò^Ê­.!|•åy÷nÜ ×0Ÿá=s*¶Rв”À»ÐߪžJùä-@ÖM1‰Aä’Z3ĉóq0Ôß°lÕø{Í+„ß…|™ÏðZµîªÏ*¯¬çVòKC óÞK9|ÕÆ¥1<|‚h÷þ×(YÔ…e,ßdÁ®èW}^¶psÏH†rùÞ°*ÆÅó˜à22–¯¶ ×£·-C‰B§*ye¾²œ ]ôr ë—yeÜ®2?_ÿ©¼²Þ¥‹¡|ÆŽßÕÊe:†µª{…€B@! P( …À?‹À zÍ®Ûl…äZ¶ Ê«!QàfHrÂDIæ‘WÎK @¸È“µSsëÕaŠ¿UIläG6_o—Wæc}n——eHýeÞ;é/Ó9¿¼—ºäææ ŒŸ´´´ŠóДþ²þ;Éç6¶•1©Nÿ[õë½ÊgÙ²n‡uúK=%¦Õét7òyÌÉvi R‰‡á¸”õÞ©­†en¥¿Ì#¯²¾û9ÖªÃEb~7øüU] ñ‘˜ý§}%u©ªuòÿS,Y–ÁËvøß39F3 …€B@! P(&¯S¨ªˆüpŠŠBtt´XSÍ›Ÿ±å‰‰([Ô™´3 )"7vþ˜fÒ Ýˆ9óp^.“——§•¡+çå#Ô´³ÇigjúXf9œÇP>dz†òùž?°«“Ï2ø£›Ë–òåÄÂä³^w+Ÿ×=óÖ“½ RRRžžNç·[ŠuèÒJ'õ—òYÏÛéÏ$Â˪øT`I3>Œ9·•ËɶÞJ¾ÔÅP>ç5ÄßP>·Û)±”ºÊç~æxî–_Uü†cËpø+}Åúß®¯Xnc~/òK–-ûêNcÛÊòåXøßj¬U•»±P]_Iü¥|þú+cá~ô•aÿÊªŽ…Ûõ•?u,ÜK_qßrñ¿i<ñذaC:ÑVŒCùožxP? …€B@! P( ÛZÐù¾M›6hÔ¨Q!çbþ—WÎcøCW¦Ýê*ËÜK^Yǽ”¹—¼,Ÿõ2l[Uý¥ÞÕéR—vçIŒÄÄD´hÑBu®_–¹W]¸Ž{)s/y«Ó¿j[åóêÿÝôÕ_Åÿÿ–ÿëcMŽan'¿ßõêÕÃîÝ»+&Väû ® …€B@! P( ;tGGGñQ+-Mÿ´Âsýl=g ³³óì¦ÒM!ðÿ~OåfŽÿ¯PW( …€B@! xè¸-AgmÙ=•»‡²eñACk×Zßý”u§v³eŽÝ}333áîî.ÜÞÙ mn­ØªÌ0ëM÷Õ—å]© ²RÿÜØCUÒõY«âj(›³Ü˜Î2x§qƒzªÜV-/“ åTÍ#ÓªÆË²|•y ãnuo(§¢caÙŠ<úH._]ÜeØËB‹ÑòVßoUeêÆ¥ ë1L3Œ7¬÷Ÿº¯Ú©cPýx0o•cư\°êPº!R«—͵ß8 ËU‹¾ÿ Óø=•®î²=êªP( …€B@! xX¸#Açu²øÃÖðC÷A4€?ü©šÿÚÀk¬Ùã€×Õr`Ìd`2Qõùnñ¬ZVʼùª¤{‘Ël¨RKM"×w·2nÖ¡JŒž$¶]äàξ5«"äÖ÷U×[Wó—SnÕwÕé]]Ü_®ø?)Xý¼ƒX®Q1.þƒþ»S;«K×⪎ÔÛ4’õ3|ÿ(«¶g?Äž í¸•¤P( …€B@! ø»¸#Açã¿#ÈòòRâãâQXj OooØY™ƒ_œ­oUH—“eešä…¹YHH¼S+{øxyÀÔä>ðï¡Ñ²~voÏÈÈ€§§§ ã2^Ó‡ì†åeȧóß-¬¬aÂíŠR]ÜF:cî&Î*e€ÎÉNIJBQ™1ÜÜ=`aZ¹¾UÕÚ®Y+ʰ\®£Jà¼7ä)£³Â‹Š‰¸˜‘åßTȪL¯žôW¦s%üÿõȾàiS:Ç»6‘£g>†N¦W§ŸTWæ‘ÏU¯¸RB1k_JÇó™Òqj²Ÿÿªl1ÖHæÊ‹ôŠöUjÇñMˆTŽWo¦H‚ÍhCA:ÆÛVVR„”ä”™ÃÓÃ]Äke5Ä*%þÍwT}Q~²ó àäâSyì 7Jº×ðÑÆíœì,dçæÑ22Ø;:ÁÉÁNæ&OœBÑ~v/ýj0ö¹l! #cæ7¥bRqOe2ÒRHÇBš3ƒƒìm­D}2O‰.Yù¤‹3,ÌøØÆû2'TÑ&u£P( …€B@! ¸ßÜ‘ ßï «“'?¨K‹²°aõçX¶â;¸5h'Ÿ™ÎMéÈ«¾ çeöÃÖ0í¶’qÿ±µ65î>^òv…G Ió>xùÅéðr±éw"~Õéx7ql9çõçR>_eÛò3®cóßã׃§P¯U7Œ6Þ¤‡?ì•,côïÓfô,ËÈkIA~úþ+¬üþ4ï9OL›·²llÿiÎF¥ òsÕm„¶-›ÁÑÖ’¤” üÐnì>|V;[›+Ó!¿ÐýFãº5iÝB!N9ˆŸ¶nGdɱv¤³ê{£g—öpq°¦töïÜ‚x _v Ž#BVb$~øi:ôŽ _kìýeŸ‰…%e(#wø²’BãƎ@€· â"Î`ËæŸpìì˜[YÂÝ;Ý{ô€»µ1~ßñ3ÒJŒi"ÆR3&Ú¼z¡Îý‡CÃ?‡ÖçZýü+±ÉNKÄž_¶aÇo‡Pld [GW´ëÔ MB}qöÈ^œŒH†³“Xr@Š "˜››†{¡OÇfà þò)|óÃV<Òµ?:¶l$â"NaÃæŸ‘Wj[+˜Qß–”#7+f^èЩ R£ÏÃÊ#š7`…ĸŒ¹|;]@ÿ!Cáag‰ôÄhü²m+~?t¥¦æððôFãf­Ö­ Œr±só|»qºŸˆÉ£ÃÉÆ¬¢mÜΪÛ}» Çç‘yï'åILùyßÖ¯±'ʯ½8Uà!&(þôá_qèb:FŒ'kSá..¼lJ ð˺eøðÇhˆÃF!¬CS\¾ŒÍ›ĉó—hE·î‚áC –+I+Á¹“‡±aÃDÆ_‡®Ìz À >ÝáFãõá?~Ÿuy©øñ»`н»¶¤±Y„c¿mÇVê÷³‘ɘöô+Õ§Éä©"þ÷Þ«}[ñÅ®(¼1w½#ÚùõbbŒÒTP( …€B@! P<Œ<“ò½´T|„kâ/ž&"½s—…&7Ib²a$ÊTs™I¤éÝZÿ¶»â±jõwxõùñ°·¶Ù$Ñ—eîç•-è|º$FådåcbɤaÏ–µXµ;?ýR|/7ïU¦Çâý¹/ ÐÌNó2ZëO…D5S„ˆ3‡1dÒ2ÌZ°3 7"¶…y™Ø¼r"v¹Ž àXèÒз[{|øõ6²²s±r"¨[0sæZ8¸yÂËÓƒÖÆ{uß–D†9ü¾u-š¶í†—`<úøãèÛ¹ Æî‰Y W SGLŒprçwøaÏŸ(5à…ùɘ:ý1$¦çS¦bìß²¯¬=o_x¸» ¿»»3l¬‰ &\Ä3ƒb_T>FŒ‡ƒûÃ8ý*Þ[ò9®gäïfMøûù‘É6 Ó§OG|N)üüáíí ²æWØÛ€ûº$?Ÿ¿û †½·úÅØ1£PßÏï¾³‡/ÄÂÙÓ$ËÕÆK¨}›]…—o Ôðó­•Äâ²BÜõ#^zu.þýõ¤fk{.“UÖÍËt 2ãñ8•¿–ñìãíA“Eرþ#œ¸£©¨Ç'õZ4Ôe©x÷å Xðã1ô2cG E `Ä€—p12FV.>ñY,}÷U¬ž6ûO]²Äˆ‘_1Æù¸ÅŸÌ.Ç ?—±é^d9ù\ݵ(û:6~ýB6€%)Ãk¶ÉˆŽ¤ÈÓXüj<>y$~ܱ<ÌL*¼RÊp-öšw†… ç¡]ózBôÕ gpød úÇ&Ä_NÅ3ó?A–8¥°'ŽìCZ™3&N}£úwÀccâ«wC¼T§XAIë¿x£¦>Žç¢hdS É޶½Gàí·ßBÏ–~HLÎõñë šìÛ¹ù;ø׃+½/ü>pÛUP( …€B@! P<ÌTÏ€þFùcÛ˜¾¨KÈB¶uÓèë"úòY˜•£uËÆH‹¿‚_~ÝÄ´x׬ƒ®]:ÂÃÉVPج”xì¡ã’®Æ§ÀÙ£:w튚d±M¼ò'Öù>¼C§áÄGP¿Qc¸{˜‹Vq}ê3-è.ä\Aˆd NPš‹È¨ó0| š?Ò eÃâƒðdABŽÿ¾ 9uF`HXs¡Ÿ±XóÏV@¢‚¤!¯0cŸ›Ž– ëÀRÛ@´Â̦&„>½Û½{£–‹z.Ü‚)#úÃÛÉ”d˜àñ9cò¸ÑB¶áOjÌÌ8‹V‰ŸØW[‡Þª"‚ýÔ¤ zöì†áë°\Œ­nÀÌØÄ-a&ÈYÌðþŒÉ5¢‡aâþÀÞ=ØÕ _‡·=û]ºwG|L<ìݼhâ„­žDþbNb횟0xØ´òqâG`xc1,“…}…_ŽE¢G³š"{§N1pÄxèLlàíêˆö[ó¿m„w¿9¼£È'Ò¢±ïð¼þ書xâÎ^Žg³`xÕ¬QôÇ!é¢?V¯üƒGómÒ¨´0…Úoýd‡”gB.öµZÖ§%&Ô¦óx{õ>»ô=š{Š,»v'ý&ÁÔš˜:^îܰ¦ÍšŒÜÂ<Ç› ²»wÕpWc—Àù È(ߊÉ"êåÊè¥É±ÆuFž;p]}¼Ü¢¡P-äeiXúÚÓ¨3vÎ.vÅä.½àç{a̓55©^3 ;xÑ$½-y_ˆPŽFmÃðq§~°¦¥*"÷ڃغj‘°°§^I‚Î9§ÃÍàêé:Aþ7LYïý¼²¥‘wq÷ð¨bù'²Åü#=#ST—™žW"¾©‰ÑøîÛmxúÕaIt=éz*]\É—Èi,ÊÊ@Rž:]Y¿“ •­íÆD®°€,ÚÞÖ´›É&"‹ç/]ÀÉ3äŠmR.Î}.)7App0®^Àq—îø¶gG¡[Iq1•3C`ãÖxï…8x<C;Õ'×p3”è˜ÝÊ43½ˆ´$kô™sg¨®šÄ§ŠPBz•Y ^Ý Ø»yÛpðÐa´kZ‡ÜÅmaG.ã¾þ¢lii™hg)y9Ykéʉ&±ÉjI•ÆÁÈ]ÞZð½ ÄÃŽö¶°··‡«‡QF²x2e—’ @×!Ý“+>[Z/†Bx¡¾<?å¿„í{¡3tF×´ózñ’jOq•g»®´úÅB Uq-¡6•‘þVÖÚ†‡ÁÓ®-µÝ¤£'Yñ9ˆþã ]1Љ§fŠxž¤1$Ì|Ï8pmçÀ±sWanAk¹é™Rè¿2á¿Y«¶h¢óÂÜ œ=sE4QѰM´XÑä‘Ý«(1qDH-ž¹‘¤k佈< ~F×~}à㢭éF¹Vý›2êb÷оb¢åÍÞD)³qaû „úºYee¥4F5jµÁ¶ö¼Å;·d¦'ëÁÎR›¬áMËiID\l<®\8ãñ¦˜<­;‘söÿ´}—þŽSk>@øÏŸâBvµ—ƒìC­oסÜF˯ý–áøßP³SoÕ`Wz •3Ú³úU( …€B@! P<„< ˆ…ƒ7zö„C1¦˜óÆ[p¥ï÷­_ÌÇ÷…íprÉ|x9˜£ý#¡hÔ 'Ç †kþy,ü2gãÞC=¶Äum‰jaóžaxbp;ŒxöiD[uÅkO ° ‘­j ß}êvÇåóâ+ê Mߨ»ØØÈ-Ú„áÕwWâs$â·Má5³Nìÿ–ûÁ×F‡¾†S1imÒ£ÉÂîålKİ9i ؽãwtk9’¬LÎõ¤ŠÈ­ ö<€šnFH¼z+6ÅÚ_…«-ç+†¹%­_ÿÞ,‹#—l"©¸˜áŒ¯?}ùyEèÔ»‰pCçæWèLŽöÞ5ádb&‘¾AP‹‰pߨ¿ŠÊ õ$4i`UoÎBAÂqš(CQn2MB°rùÔkÖŸ½ó2†÷êˆ "ÿ-›4@Ýú´Ž¸OOZ_ '[DçHfIqI…;¶FP…b7TÍRWWŸZ˜·ùk<5`,ÎðÅŠ®=z£}Ë&°Ô̲BO&2©.c&lºسûOA Ú°C÷>ødþ/xfü@¸Ùо|ÔncòD`Ý‹2^² WZV\¡oEC8žÖªë¨->5êaËסߨ!˜áŠáÝZÑr„ºèÑ»Z5­Ox"âÜ"Û!-;cåÎ]èÛº!üÝoØwAÖÉ×RšH)¤y‚ :•æXPá'üÆé1›W/ÇŠM`\zaÓ1öã á‚ + xó XQOá'{5­GwÇÁ‹{™[P¡+d¦õŒ}qQ¾ kl=6&Wm ®Hp&ê&‚ìØºÙSf­§òrr0ãOñòƒÉH«–gvÑvtr€ íÎ5ù¹¹´F|4¢cci‡þ¬Yô8fo‹óß-E?¶¾ š%*7äwR¾È`ðøŠuè&èÜ ~n«ÑQH¼–€ƒ;7 ¬ý\lÙ{ };4Ö—b2KA ×_“"ñÝÒïÑia'?éŒËäÞ~~÷W81“z}"•Zû*‹iÏšPcêkÚù>Ÿ;‰'&· Äëæ&è^ßÛ~Àü1ÁBœ˜<¼•É9÷>mwôLëwGý@?ñÌ$ÚÞ½¾Û¸!ú8~¯LhÏ„)/.ÄÕ¸$>`€Ú@ÿ³K‚A}DmcÉÉÑg0¡CÔõ& î"úC›¼¢qlã‚ÑOÍÃÀñÏâ«%¯aÕºŸñÒ„.øjñpì(苹éq8{^¾†8ãC´¦½áƒaeÁÿ|±îN²ê+gOà‚0§aˆbK>«¦è¹DH] …€B@! P(V‚®ÁÃ\–I¡äÕüÁŸË¦A(C>‘A#"¨Æ´cwEßÞúPŽÂ|ÚÅKÐíSœ“˜¢kÔCŸí^˜4ñ:tIž$¹W3k<Ò¶«øc6­xÎÍû¢m„·gÅqô´Á¡8dŽ%&ÒþÖ@@P}¬ù|ö¹ˆË´©Xëšå—•#‡vÚšñèLÚ­ê×F·áÿÆÄþѵy(³%rM×Á×'˜¬ÃU\‡·'Â7NCÌü—àíàCdŸH8…2Úxí]ï!hðÚ•Ý&Äìs3Š@¼“‚žŒ²;>ùT›‹÷Èu^W‚5àNë﫞°°´´B`âÓû‡µGÿ†81«‚ 3c3§ã×K¯*¤šgÞÙŸw|75·€·-ñÇÙ†ã~ØE»å÷$‚®Q8"qÔ€JN« š‹C8l–‹¯W_‚yžBgZGn­ŸaÌhwuÃ`B“V&–´?€fµ6¦~çPFljå•ÛÃJ,S 7o§5j‡ˆ?N9¸/±U8!º\kuñY6øè³5h@Ë1*Ç,MFÐ¸×ÆT9Â÷ýŒu;–Ž3&òL)”—6'Ì,Æ1ãÑ…,ðlecÉúûÒ®ðFX¶ó4y3|Œ÷>IÃc¯-B‹z5X•Šqª‘\zï Ó±sûfôí÷ œ­¸¯ÉœäûÖÒˆ.?kï({†”ÃÆÑ éO„âR’W©µI}ÄH'\Ç¿^x-^\—Ÿ±gÅ‹ àèjfaW7r§wsG·îaèÿÅLÜí.ÂÌã—°ö¦(ÈËFlB&¶Ú€öíZ"4(º¨YüT’ïBìûu zôé _'ÍE¿²ß+ó«;…€B@! P( …ÀÈÀCFÐËÈÊ[JÖGVׯƒÇ†½¡´aY“ /„9„w¾Ø„#/~D.î…ø†,qG÷A÷GB{þ8æ/ø ‹w=)p.,*@™Eågûß>“(IÎ ëã8v³å‰^Wžtå8Þúà'|¶ýØØ[BWƒk䀿þä53rãgbãS«ÆÒŸEÞL¼¹|Ö/ yÖ¤¢Â|²âr¡ëàñX¹è<ºµ¨ƒ£¯Ñff^4Ù²,G"61‰È$¹@óÚpÒÁÅÓ,±-ñÒȆ?çl]2¾î(ÌM'WãðÉÏÀ‘%ˆ&øÖª‹ÕOMÄ„ÁСIЉÀoßü-âCÚÀ×6:£ ðŒK…”´tZ«Ít"kD`ÝíÉ;`#®ä[¡KǶ´îÞ–Ú_Ž‹´^ýüàëé\“Ð̤k‚ŒÊHŽã?¸Ò3[^G>Òl˾ èÞ­+ü½ÝÄî×#/áèÞ½Ðs® ç¢,ý”ÐlÚ¸âönOÆæo¿À[Ë×à…Éý„ÞdíïÑ*íG®Ä˜Á½PO¿~Yè)È)—eL,mQ¿q} Ÿ÷ÂZ5BšžÈJŽÃ÷ϧñ§ÁÝÑWý†-G® Oÿ>ð$,øŒï¨Kç±wÐ}®Á¤II¶|¹ÅÁñäÔ±\…h·¶_^nïÚ ðÒ[ïãéÂÚôÏN›Â"%¦ 1“ØØKgðÛ+ŒmVOÈ)' y"Döç—ex‰[È™¨‹cÖħbZwÑFÎ#ÂÉK¤I{ø>;‡„¡,/ ×éìrgëòpúô9¸ù׆‡‹ ²’ðóOß¡mP7¸¸û Ï°‰hß+_,Õ0*JLJo<ŽÚ]žÀ3SGÐfqìžÏ#Ÿª$=å8ÉŒÀ¦íçðÖÚy”Âi4ào˜8ÑêG! P( …€B@!ðP"ðtZë+,èl?6G‹nýñÞ+Ç0jÊÛ½¾›?‹>û‚|`QâˆÕᅧA#&ã¥I½h“¸Ï1ò­eèÙ¶•Õ¡„9>3¿1°‹{QQQYdFS×á2Ðaûß¡û£/ a€FP» ~ —-AιztÆ´fm"lÕ¼9™)¹P5m X"ðÜ&}²‰ôëä¦j&V÷ôkHŽD‹Isµ~>hƒ¶k^Á3y—hWq:Ç»0WÓ¬ñÁÒèØ,ϼ±9¯<‰ÐCñÚ˜^H§Ý=—ƒ‡Ï |ÚôÆòù3еY}Ì|ådÅÆg_GcëÞ¯àiC3E¥Âšû¯¹!éÂZƒNž Ù×eÛ«>˜ {:ÏzÒ€¨ß¡zµn€ìä«X±ê7¬Úðš…øj}DäŽÙVZJ¶G»%S<ÿzÖìø 5ø6Ø¿vžrž|®?¬Œ °bÉÇxŒÆÁ °Ö¥XDiMØŒ‡X:)àýugpäÍÖÂS€|ÕEþÆÍÛ!ÌnºH½ˆãÉ•|äTpÏ2±± º ‡—OÌ@ýÞÃñêˆ.¸pè'œ,®‹æGæ™æŸ~¯|Òöl“â ,ùðs¼ñáZšÐH°VÌM]ЖöXàPÎnïFLÀeÐîØZîæåG2þæ+Uö* SÈDÐȵf¥vÐ[œ9®blò=‘pî€#ûv¢E>¨åí¤•¥ú8…û "¿HÑ~¸[ñeàŒŸ×½7Þé‹ÓŠiçë¸XÚ»À“ŽãMðxI@^V*"cÅ™äf(DbR:ÉÑ“("S%eÆð¡>uwÑÖîçf¦âjTÈÒ>`ðH¼òéFÌ›6<èKA^ËbµŽ–D\ºˆøÄ²Û V`0jÖðÒp--ÆõÄr±ÎmdÝ„·QÔšµkÁÁÚ ‰ñqˆ¿–ˆ¬œ/É!T&ÛŒ%[Em¬­¨½éˆ¥µíiYÔ6#Ú±ßAAµaCÖp¹9X9KG›9ÃÛC›ÉL½Ž”Ì|kþ°"2È“!LòŒhã·x’Wfn‡>9™ˆ¿ž"ȱƒ­¥¾~"£ÔVÆïâÅKHIÏ‚•½‚BBáã¦'¸D´ÓéT‚Xê§ŒLž|0»·‚jפI¶LëÛS˜—Æ@ƒ©ocybèD—«'ÅlÖÚϵW mRƒÛ­É®¹¼ÌÇ÷· %Y8JË6~Ùú#¾£3»\ù>ê×ôeo'ûVòî=^[.Àcæô¾Mø`Ó9Ì}&<í-*&Nî$³‚ çàßó¦àÙ]XýL4hØë˵ëw’rsúñ+)©£‡pñjÞ˜õf.?ˆn¡X´t ž}=4÷všÿÊTýfÌUŒB@! P( …À?À=»¸kÄäÁ(β ?¢‰æË0$þÖCªZ<Ó•É3$&†eiÖA¸3W+–«•{úóqÎÎÎB?‰Pµõ±5SO‹óÊ«ÌË–ZiÁâb.ÏiœWÊ7ãç»Ï„X–©*Ÿëສ“ÏyYGÖÕÐz]Uÿ;É7l+'–ŸŸÚ+¶¶¶ÿ>¬¿”/ñ± cÈ4üMèªéoˆeUýo…?ü›óêH_ê3ÂÅœúŽñ¹©¯¨ù vÙ¿Œ÷/?Kü¹Où¯ª|÷¯~Lȼ7ɯ ¤ƒ¹ãNǨ‘NUûJÓ¿œêÖúQŽ1y­*¿:,yÜêÿÆemüW•s_ñû£ååý ªb)ñ1ÔŸóÜn\26†ï•a_U}W ûŠë’yåUkÚ;.u¹µ|~o 2ïMcáÞ[©‹!–<…÷é,Çë'ôåñhðoIÕ±Àù³³³‘CÇ5r …€B@! P(·%èü1{æÌ ÒéBç\§¥¥ 7îÌÌL:7ÚN¸\3iàÀÈÖÖÖâØÑÑéééà2|ågþ(¶²²D€I^·íààP‘·ª|&¾LžøcšI à,ÚPŠ]É9¯”Ï2X“X&LÌùþVòYËb™U¾¥¥¥hëÀkÏ™˜;9ÑÆW©©b:·™]ÒYw& |Ϙ1vR¾ò³½½}…þŒ cÉX1fKÃ299Ù„µ kÜOw#Ÿ'îÔWŒ©ì+îK&H†}ÅzfddÜ«ö·õ0ì+&CRÙWRþÿâX0l«ÄGŽ5&™7ö•-û 8ó;BGÔ¹ººlãª}Uu,TÅ’ûêfùv·í+ñp'ùÕõUÕ±Àc_þ»Àï-O®ð²†Û½·÷:Kžübù<ÎäXã¸;ý»Àã˜ÿŽ=*ÞQ~ïUP( …€B@! P‰A)t”ò9ï9ð®ë|ì¡ÜÁ_æ‰ôÃÙ wÞ—ñõZ©›D¯šk;Ãhb¢í!óýÕzT9…€B@! P( …Àƒ@àŽݰRùÑmw7÷·*ÇÉUI³áÇýÝÈyHN9}éÓÑ[7Š»!†óQ†[ésCÙ{x0üØ7\ `Ø6&w]¯–Ù =¬5aM)ñ¤¸^w¬êá<2ß­e1nÚQXB¡Ÿ1‘½>z9ÚÓÝýÊ:ï.÷ísizàc ÏíÒ¡”'q”^'òùö­©b„’¬ p5+“«¹Êz«Iº)ê^òÞT˜pÕÞ3I~5]E>G²†ué‰L㼆é<”Äñ}úÊøYŽs}Ô]_Xyì ’Ú•—k“O•‚¤þ•1êN! P( …€B@!ð0 ðàLÊwhü`×ågáô‰#ø}ßA\OÍïl=dë#ç©8®âE&™tŸ‘| ‡öýŽ?NœA^1—-EZJ2®]KDVN¾øògrPܪõüÕg&èRëô¤x\‰ŠCq)WÍgÍÁPvE[ ÚÅ …Û“ság/¡¨Ôº¼L\¸pYùÅä Ctd®¥d ¼ªÃªª\Ã:ù^³lÒ.úº|\½r)¹zìßÊÜšÖ§ ñ¤OdÜ5crBN¹€Ÿ‘þ`1­Ôææ;Öë/.ÌAq—‘SX¡°`SZ~v.G\Ena§×õ| ÄÞ¯ïN¾!þù¹Ž²²Ú,1 …º[Ô)dÒ*¡_êyÿy¹9ÈË/XkIãÞ°ƒªˆ¸9¯A}{îÔ–›ehux4öJ}q‰ibÒ† {s°Lnwan6".]FvA‰)G6mêVP¤mŽÇy+ë–ôÞ¦$ "2º–qwï‰A«„LÖF!R¯ÇâJtJi ó;DѬ6Ò“ãE"ž!æ …€B@! P(ÿAgrÈó%™Xûñ»˜1çM|ÿýF\¼/àa·i¶>W’) 5I8^ü‰~--%ææÍzóÞþ¿<‚SDú?û÷B 2S'ÅÄiÏ`ÇS(¡ìR®Vòþý²\ sª@³~žýc+æ}¸ù:®ƒ­xš»²$7µ‡ÊKwߔ賘>´œ‰‰K:‡Ç#*)—æò°rÉìüã²PÞ+Žò%Fú«¬“‹¨—uἩXüæK8z6NN«îïÆ¬ú<7FV/Wˆf=Y_àÊ©}˜ñ¯¥ÈÖU.É i±§iŒ½‡„ÂŽ‚$îb iŠWÔ!ã ¯UóóÒ ÙVÃ||/ãó2âðÖœY8t.RÔÉZVÍË„Ræz‘\q-ÎÁêOâûÄ3v*|CyÃrZ&úÕëeXEŠ:8?SXÃ4qO“=ìÝC'/U¤qÞªù„B¹lZ³ëwœÐ'½Øj-ÇmÆõh¼2í)Äe䣔ÆÖ‚9ÏaߟBÅåÒøÓºíÀ¿–¬EszŠÔú­›Ëimà8ÚUÓˆï[Ÿm%²/R©t-ÍÇÆ•K±n×qÒ•ãT²z-Bý* …€B@! P(îÉÅý~éKK—…ëùõ˜Ó˜ùòl8²-ëú ¤TΔÑ1J۰´DI—‘î«|>¶‘±ÌL‰Èë?¸OíûÇu^X½ê-ø;Y!âÜd[á_ ÞE-[ìøþSôlÿÂ#7¢QMwÑþÄ׿/Mc"ÇçÅKÒ Ó ¿„ÏgñeБUßÜÌDÔ)I§”Ò®Ò06 5†×È¢,?~µ…M§cԀΜ…Òs_s˜ÐÑt(/$ël m"@GGÅ™ÓÚw&Uì} ­Yg¹Å êaAçS‹4¶àóÄËc/š)-+ENV Niú É©$iZ4ŸVf«rcAÐ=j5Áü%_ ý€WÐ*f êÕpÖ×]QÒ©JŒ¬æ†«$\²nÑ7Ì®îPž³Ðlöþ¼ u[u†‹µË$wëæ ÁJÉš˜šEW–Z¹á¡8{ÜÜ¢b\ö çãó´ÅQaÚ¸ägöë7•r& åä5Á²Mé\v9)`faýÃÏÍIËC¿î—r#S6²^n;#s4mÓ&¾â™×psJ •326ãDâ$Ëü °ÇœQÛLå ¢I¢>*¥÷ŒÎ×oþ"è{·¬@~íIhÓ4DŸKÓƒÇR _j—‘~¬‘:0fú ž²Rj ½‹bÜRé2OW¢h¬—ÀÄÒÝûƒ¯‡³Ëëñ9S;LL+}{‹è=É£‰SS®· EôžXð{B.§+"j¿9ëC‰ü¾I¼‹KJ©MäRR„Œ\ùÏšÖŽ”¸+ظq?žûdºÀ±œtkâY¨ …€B@! P( ‡ù%û·©ÄÕü1_˜“†×®E:Y·~Ûþ#b#êcÄÐ^H¸ò'¾új-bR²áîŒá£F AmAÄó3“°uãøýèY›Y£k¿¡н5ңñtá X5˜€o׬BëöÝжY{¼Ð¸}Èk¤`´éXMÖ˜Ø$ ë-p‚ܧÖóšcG:]KG§ýï¿^…‹á‡ wL™6 - ‚‘—‘Œ_¶þˆ}ÇÎa3FC"˜cG@Ö•sXøú¬9s .ÖÚó–¶6hØ(ˆÎF§g"¤ž>þ8zp ®îÆoN uÏA5¤/ÜlP^œ»ÆÆí{_l„&mº`ÈÀÞpµ³-M¸zß|½Qé:8›à›“åxÌɱObóž?1lôHx:Z‰¼—OíÇîS ;f<<ý_jÇs"´ë1s§®ÃÆûQoÚôè­¯ú,wu1$a\@#š«³$`_uBE–K‹‹À¶ß.áåås!ty1Âÿø_û#`í ]ÒiÙÖ‚9Mèp¸}ë¿_‡sQ‰°sñÁàáÃѺQÕ[‚cûvã\tŒtÙØ·w?šv¦1Ö±çaãÖ_aí„1ãÆ¢õaQn Ö}ó5ö½ 'KX8x YMCˆD›!Î6ϧ%.܃§£ÀÝyäÀï(²ôÁÄ)ÑR?ÁַЈÈ{q^>rMòDÙÌÄhü¸a=Â/Ç¢Œ–;4nÛÇô½…©F`E.ì'RÛ¾ÿæ{D$¤ÀÜÆ‡BÇfu ¼œØ¿·í eE0³ñ¢úGÃ8;?-Þë¡Î˜›ðütÄè¾íqb×:|½õììm3{ôî?Û4cÛ‘0;yú –tÇŸ€_Ãv˜0f8<œCc¸úiÄ™„ÔbgLž6­‹úò3’°mÓzì;q&•ÌÐ>¬?ú…u„ ¹–èò2ðë¶øi÷¸º¹àò?! Ë,fö„ŠFÐO;û–ýЬ^ @Ц°ôcL<ª…€B@! P( …ÀCƒ€äZ›BÚ'3ßffOoÀÓ.®îðõvGÜ¥pÌšÜ×Lü0yòDØdžÆ#c^ÄUvë&ëµ½…íÆ€ãгM(ÓÇýO{Ãanç‚:MÂH¦9øÜvK²¾™°u’ÈBi©fމ¼‚?/O×ʶê-x•ÿÙ[lÓÓÓibI¦4±å›Oq>.z ‚cÎô›ùo¤ä%–ÜÔ?{çe û÷„õŒn­á,¹å'¦¤àÊå ¨7~*êÕÖ[PI–­[^|f¼ÌÉbKî¿…×±láO°ò¨‘Ã{á¹)#±rãÑ€c»D‡^CѸS?Œ¥Iç ÁÛË×ÑŠ| 7ù*^™ÚûâŒ0xÐ@4¬‚²8">D»íl,ðÌ““±—ˆÅÙØ´z1E¥ÃÒ ­º÷Fïî-+:,ѽÏÚ?`’óg¶àkE¥Ësì•p¼»àM,x{/~ï¼ó.Þ§ëksçbý/ûÉÃ@#äºülÚ½_®þç#„,&çq—Nã·ý‡QDryìhDV»J‹ìé#ûaT· êêñºxâwš”ƒe&èß; 5ý|q21 f¼Ã~n2Þxª~‹)ÇøI“ä6‡áXDI7CÌù½˜4a,®ZbàÐAˆØ¹ÔÇïçR0hÄ(˜&üŽÇÞü ™äŽmbL–h"Á} Á¨Ñ£àX‰±Ï¿CXкü2¾™:—‰(sH?ƒ©4¦_MGØ€a°Í<Œ1¯,ÃõÌ‘Î?;ê`Þ¼G/ÆÐZê|·ì-l<…Ñã'cP¯öˆ‰8ƒ´œÊrbý5“žù/=‹ <3c:Õwňé/àB|hòeb÷žðoÚÓ&M@€S9"bâ`aç„ОpóðAƒ†QËÏŒØ%4,Ð¥w?Œ=MüÍÑ}âÓ8™F¶€IY.>]ü:Êl<1hpìzk:Þúä{áYÁc>+>‰BÈ»ƒ,ãëfF4í•PœŸ÷_ž„¸r/Lš4 ]Z×Å¥KKcÙ’–…ìX¿ §£SоÇ@¸ŸEÛ§6ìó^€/?|ëŽ$bÒ£OaüànXöÜ8lÝ.pÛ¹~úŽxmºõE·mádgü¢’ ,u9ÉØ³cºvíG Q„H¿¶“»ö¤~ …€B@! P(»I•p¶´E³VÍСm áöu6ÃŽoÞë8:óqxÚš¢a Žw À‰³ÏñÌŸüë#l;|=Z±+n|Ÿ…åkBsѵKŒÓì0qÔp.oÖVB”Ž CƵKx¾s_¼°d {iè9gÂw?»S»¸¸VXçŠ ó6îÌzöix8š!Ô× ï6œL²Ž–%^ÂŒ·Wá÷?£Ñ±¡?©Ñ‰< `aZŒÃdnÖ¢)¬´ùÆËÜÊ9 uKÈ­8¿È~óÆè$â~YŠy;bLXìØ²o~º‰ÈLO‘öÞ×аÇxrB?¤Ÿ9Š5¹îUÔt³Ei“Lز9dUuj\+çOÇg´Î|hצH¹ˆO–Á—.%ê xøÁƒ%“d+${OûQ_äü,ÚdÎÝÚžlÀšåRÎ}X“u´QÓfdùÔ\ø™`³‡A-Spór%’+Tľmßbþ—;ѼŽ7{y~ûu5ÚÔ«sv`ex!Zµo-2jÒ5„›sAvl݆þƒ_†“%)T–‡›¾ÆØ—bö š¢œJðýѵ4±P†+çþÀ'ÛjàÒµçìeOä<±gÇÖ= y{˜bÒËá¹Ç'ÁŠ8¦maNX´ÇÌ矅'MŽÔõµÄýßÁõ¤t„ÖpGÿþqýúudfçÀݧ6.,X+ú×ÅÖ.-êÂLß@îÞ^Å‹Ï>¥?k|Úú%$ed뽸e•ÁÒÆ¦¶VÐåçâø_ÀoÒ*Ô­WöÍš cOvu'åô¡b¢âØ,;m†#sÛÃËÃV­Û£æ„çÈÚ}u¬’q– Ù!uBаa-ÔkØ„È6¹¦à‘ö½PàÓÆw—"Ñ®ç\O¼†Ôô,8»yÀ.â ’’2ZÈÍËÅœÖãñICÅ;äµnéþoÌyv2ÍÌÄ$ŠÔÏ`miŽÜ¬t,ÙxŽAÝúh,7 W{𡉴ÚX®‘ìŸ{ÞÎhPÓ ëL!Wõ<˜ÓZþ¯}ŒUÛ¢¦¿Êh¹J¯°ûÈ)´ uÆÆ¯ã³Í[1¡[¡{qêY¬§É ýŒ¾t£L1®Y‘.½.*ªn …€B@! P(;A'vWÑüZ§ZD»9±å™­—™äÂ>´k{¸ÙhjY9¸£Mï'‘OÖÕìü‡LC ¯gEùÚu[ÂŽ\‡óu:±µŒämZI&0ôí´"çÃCa:ef¡`÷ >Ò¹ii©p÷ò¡5ö´–& Ü\]aEÖgVNèÙÔ†ve/¦¶æ¢ßÀ) Ô¬ä\ÖÆÆŠr“Ûn.ýìõ–j^ .Ь¹%‚L®¾övä~¬µ‚‚à½ï82S’PhæŒvuCeÜýB1¼·¡,¤e¤á‰©}àãl+Òu¤£™¥™XoÍíÃar××pæ…1H>öêL} CDÞR^žÀëˆY^ÏMŠ™Y[Ã’&"t:Z {ƒîÕ”¶±sFh]r±&«%sqA°)‰=Ì,­aA‘ºÌkøját<úÞ ŒêÒ­ç¡í˜'ðå C°éÛÍúÂb02<1 §Uä]4YØÄYa»qS(ÉÏAZv:wm!È9Ç•ÑZj²ÒòZñ\Z»?èé~ðvÒÚÏ^ [ôÁ±\"Ÿxl8;;q0¦r kûÖH&+kzÛ‰ý Iï÷^{Ûÿ¼ŽNí[¢(=Í©ï¹ÃXWÞ,Pßy<\\\*Æ‚¥¥#:40G!¯k§ÀíÒ&7Ä#qgsZë]+Z&1ýßëñèÄaü| ú†…‘µ~4:¶j¬!(êa¬i҆ȼ»E!MP¬ÇfjO9½õ&N…‹“5‚ê´Á’ÙÓѱQm´ïÖO¸¬9þn¦¢ïźx¡PH­ûòc,]ý :tî{£Lä{5†9[ÅIËÒ2#8ÙÛ“ÆZð­ám¬hçùB8ѬMYµIÿš›RÐnôN^¡ØòåRôÖ7m‹îÔŽÑcÇ¡e½šä¶Oؼ'æÔ'}qDQ‰Ù¹¨OÕ„Ù‹‡¶1¬¸Vä‰uj"7%%~}Ð4´¶^òâ  ^7OKÜ)”âè=hÒ= µ}´É-¹f__@] …€B@! P(ÿA7h?‘6{+"N¼y^·Ÿ”$vZüˆÖ§\‹‚ sSs\§ãÀòhC4òsR‘ÁûFQ»ÔšÑnlš$z&ö} f¿¿a_bÙS@Fy$á•rîו-èÎÎÎÂBÌ2Mhƒ1£"ýmîEk‹]œ‰x3±%x:<‚¬‘Eð ’ËeE`2I÷…Dj™eĬ„/Zú¥òæV´Y–Fü9:3#tž›• YÅi]nzvvEî’Âl\‰Ì oÚ˜Œ€INÏ-eÁœê²°°ÕOþ¡Mðö£¡X´hŒ S1yâ,á˜*''xÒ[¨ÂeõåˈD•™[Ò’ÀjRYe&¨F¸{ÿÇÞyÀGUt}øŸž@!BïÒ{± `ÁO}EÅÞ{W,ØÛk{WÔ*Ò¤ƒ ½†RI%½÷Ü;››Í&€ÒÔ3þÈÞ9sf晹뜩o¼ñjÜ}áãM{«Éxò¢½à™TÏC§^Š/=‡t¹aüµbPWs°âÿ®½KÛ/Ä·¿®Åù7=Šó'Vjæ@ºÍ»³k±iõb ›<aAú 27¸ÒÁg…4ûª³õ!Þ¼dÞÚQdR *¨¡˜&z-òsèZ.ßÎJÜf•Éb¤Þ¢Ài‘éLß«ø®<Úó\[C)máéZí~ÆË隺óÔ i1;ã#j…Ïj{øÐ~}[cs%ötò‚½-¸r[ð÷§6o©3kût÷ò-ug7ø¬‹°bw:Òi¦~ÇÚ_pÖèÓ°~wFõíDmÂlt¼ íë®DϾCqýmw«ÙþrZêÍ+Hx0ÃV»ó©7ð×ßô”x¼þÀYˆ/ôÀ[÷NSÛ*(:'1Û7᪻^ƺ}‘4ÐÓ ÕÉ(Ⱥ å<åMRnÄÐÔ®¨¨kÒ¡ŽÔh–Þ·C[U÷ÎKè bwÎUw ãÌÿ£ºOÇòï`øŒÇ‘úÛ{hÑ¢q=d–ObæFï³áA61èŒ÷/¿ŽV8¡‚ö³syxY|zìHNH¤CåLýüKÀq¸¬|Ü@Yv–,þ —?=G Úñ@€Zz¯r#„€B@! „À©G€mÛ“æjéÄåå Ùjf˜3Ñ£ï,xínüºv;]¿ýŒçþŠ.ááêÐýZ­Áûtðï¿=”‰wŸ¼ÃFD+ê¬åçÐØt×¹Í%ìÛŒ±a}0û`[œ3a-sOBdd$¦e©>‹Õ¼:Ö_ûäYÒ|º÷™÷³«,/ÆÁœ"z2M¾;ö·%t7v :vî‚î‰kñÞ§_“Á\€”ø(,Z´t=U»aˆÚ£ög+E¶œjŠýJr÷cËνt¿{ Ò#ñæs·aÐÀ¾èÜ%ý{vÁŒߦýÏÙ(-8„ï¿|9Ýû #Í쇄áÛ·fbéÚ-È£Ùôµ+–ã/~нððm‹Iç]€¯?yÉ^]0b93Í[ùÙàf{Sé¶2e%'£ÔÇ×_}ý ̘:î„ʳe ®½ýt nk¶Ï8kÚ |øá‡¸úâÉð%ÃXüœ?³+>Ÿ݈IãGÂÛÖ’ÝšµBï^pσ¯bGLÝ‹}Kú+¾K ew„„÷CôOoàÛ%«é÷JDn^›ž|CöS: éDû|¾ïË»ª¢ñÙT‡¶r±þû–4µ –¡ÐÁ{ìW”ŸEËòÑ™‹•,:Úú;Íóêšß¦¶œÃg)˜Š¹-Ä-]* PŽÊd+-8” ƒŠJаü—_VPMKÃ`ذaJº‚g©É1gƒW3qÚ½ÏP¬ùòE,YC7Ðlvyq6nXGw×g!vÏv,[³þí;að¡sæeÈÊ) hð¡ÓÏ—®ßˆ„ƒiÈ£ö[R·ºu&“¿¥´êbÚ•˜ýù/¶Áƒ®GÌÆï[w!ƒNÆÏÉLÄg¼IœK'Ö{£¢¼‘Û6ªA .OúÖ_ÕÍù9tÀãO‹QáF‡ŒáÃG»sÈ(§“â«(NFaÝ{I" Ë—ÑýéUè@ïÉyC1Á":‰?_Éîß± [÷E£E`8$â½ùßÑz9HŒÚ¯?¼Et0"7‡¨Ý›‘Ör8õ6gØÙ°'„€B@! Ne'e]w“=覫†Fد‚ê5x~ñ&^|è~¬Ñ[ßJû¡—`P`šýî{u žzôqÜpªhÿ¹÷„§qÓ%“_/¿„x™³¨ì‘š”„\ú¼¬·æÐ]뇨Ÿ’ž…Ëo…[gœM3s¨,MŽõ×_{æëK³Ñ6cÎÇ· ú‡7SygÍnt0Þ+®¦ÙZx· ÆËëaÖãÏcfâ.T¤íE~›ødÜéèÑ£æ^/î»ãjô mSÏpS9¤Ù×ðîÃñä7sàš½û·®AËþ÷ᦋé <š}<û’›ñD⳸ï®{щnùŠÊöÀügn¥™p4ë5Ÿ½6 L‹K.»ÍiÒsè¤éðóµ E „ué… ôyÁ¤ÓÑ‘–GSl3Ö*ue «l:M~ýÊåè?`”ÚWÍ¡zB˜°!íéÕ mè_ãŽKÛÂuФ NЧ |Žg5Î9/ÚÈÞµEA#Ð_/Á'ƒ™¯ïšxþ•xˆ ȉ“§aÚ„!(ËKÆ7 W3´­CûcÕ_à‰ggaßÚ¡ˆÚ¾Ï¿;SG³^ƒæT/adäÛªͨ] ¯°—Ëó9¦œÑ.>è;äL\ø¦]<ÃúDy¸àЛվjƒ„Mù-7¹ú´À€pº¶M- áÕžè?ãÿè@C=MÀtS¤ÏÖÃàÚ²…š\»gÝñºô ÄGGá¥÷çã4ÚŸo:sЄŸ»Ñ­«™‡‡f^‹Ã&Á§*ßÅÔbùo¡EU ¯ -[qMf¥!!)>þèØ® ÝÕ]AõÛšVÃȦA!ï-Ñ¢™·“¶PNm¡-ü[Ùö¥ÓbuU=<²Q‹<¾ ÀÝ ­ÉH/£YìôôtäpÛ @XçPµM€i6ÖçœÌŒ:D†.·© :hÆ>‡Î'HÏ8„JÚCÞ1¤3Ú˜û²ùÔøCt \V.å§u;t¢%êe4ûÚþÒ¡½Z¦Îj-hD'?/eå(ÈÍFq¥Ð°.hëon¨¤6žOåòc>4ü—•M×½ùÁÚVÕIZz KÊѦmB;ñ~}Z AŒKétÞûÏ[0ªè<ƒ<:<Ï·%½'¶½ÿ%tÈ\R2mM mÚ"®Tó¢¥ì\—™)IHNÏFÛöÑ’Nq÷ðl†ÌèM˜4õ,ذ ÃÌ•Ööö ­Jèß¿¿ú}³²S Iþ! „€B@“Dà¤è\VÇN1g§ õÅöGÉÒ3ÏJR¾ž3ȘáÈìþ¤Gó$Û¸Seˆ. è)))S3¹V5ZFûq¾õíÚ?µÜí+ÐuÐøjÉ&LŸd.kÖ(¢5Šý™ÃµkÀÑÆ…ÄéHôY[ž'nœ„ôn7âýÇ®S÷Šó’}½*@ç/7%·ß!3¾Äs÷\nîñµÈYTÓGm„ç¥ÇâƒO¾ÅyW\^¡m‰›§*§9€à,aß1Lƒ@†Y‹ÁlÖe×q)©ÆªB‹¨Ï†ñê k¨‘¦Z/Ž-5g~¶ F?Ž6ŽcöìŠ÷¦Û–]ÖòÀ×ñ™ç ˜žŽùáï¤Õ)g®3}‚½E¥zܲêG¬‹)Ã-7\ ¾ ÁÔS—?1ЉÉw! „€B@SÀa—¸ëŽ-6Mv¦0¬SuÈ-†‘öÓú8Mþ§LOê¬óIâuŽöšÒŒÏ8j>Œ]-ícÕwq×É›tSFi´ý¥gÍÆƒ–,sÝhµ†fm9•º<ÙÊË œmš¹¬ŸGÓწ"úÆÖõ¿!‹N3+¡Ã¾š{¹“¬­ˆƒæ¤Óe#ÆjèðXÖêÑi¯1I3µ†òu¹¨æ¤>ô~ôºuOÖ¸Öç:‰ÆŸËqcþ¬©aXCâaócyñ¬²Ög­Ëül˜–#›Æã:Ë;Àoy÷œµ //Þ1/N! „€B@œZš´ ÙØÜ³gÍ^Õ(Ó³îØÙe?ÇÙ4ö³:k¸~ÖŸV¹†Ï<óUßðÒ2G_K>u’G÷Äù`Ç3çYYYX»v-&Ož oooÅÍÊëðyæåù4£Jú´^6LøùðqU6üÑz8Öç‚J–â(ú\F‹Ì%6¯\3gòõÌôÑèçäXþèøp$úG™â^že>‡Óᘧ­]SaZæÏ|ZYXÓ°e_©´Ê4•†’cþ6^V}MÅã0GYgirž´n~ÔÎYÜ#iGŽièï¬×ZW:ÇO-ߘìá©0¶YrZUBg'¨6L‰pŽe™N]†«5Žõù¯”çXéù+yh*î‘ä¯É%î¬@œB@! „€B@!ð× nà®Ñô#±îÿzöDƒB@! „€B@¦líºfË>-- õîþ÷`“’ ! „€B@! „€øë´Ý¡C4ª°n•ܹs'-ZVÂW‰B@! „€B@! ŽœO~k{zÚ´iÊ@gƒã’÷&÷ gee¡¬¬ ö%Ž<")„€B@! „€B@0ÚÚZøúúÂßß¿Q MèÆ’! „€B@! „€Bà˜hr‰»žv?¦)Š2! „€B@! „€ÿRŽËÚ­š4ЛŠhU"ÏB@! „€ÐôA8úûßåópù>\øÉ.çÑæïhåÿlùNT:6Ç+ÞÑ–ûhåe¾ODÚ'"#arªäãHòúw’®GV[GÂI–¸K‘B@! „€B@!p\ ¸Wí¢\! „€B@! „€8"b &B@! „€B@!p| ˆ~|ùŠv! „€B@! „€GD@ ô#Â$BB@! „€B@! Ž/1Ð/_Ñ.„€B@! „€Bàˆˆ~D˜DH! „€B@! „Àñ% úñå+Ú…€B@! „€B@1Г ! „€B@! „€8¾Ä@?¾|E»B@! „€B@#"à~DRVÈ0`p\¸Øtägzi[À)þ¡óM…áâüKÕŸY§d™ODœˆ4Ž]c²Õ—å}s¦[—ÉåßÓa8eýþ õóo(ã)ÛÀ$cB@! „À)Mà°ºîH5ZŠF›qÎÙÊ#9«.~V}š&;‹ü,_Îíß!Ÿ5Öçºz±>hã\Uà)Uæºüê2rªÒ¾Çö³éz·æ©~;®ãXßÿØæŽµñk¦?4ò.YóÙ„˜M‘|œhõëÇöy¢3qœÓ³–ñ8'%ê…€B@!ð·#àB%Ý­o˜ù¦m’†òvŸ†9™†JC9»ŠSå¡+¦ïS%×)ÎëŠ @guø—’:êÈMå¡©°?‘P£FîQë:îœP8¶Qg|œù÷ìJN 8« g~N#ÿM<•Ç™ßߤ8’M! „€B@sMè”\mM ªªªÔ,7ØÚÈæNÏÒ¹»{ÀÍÕ6£L~µôÏÕÕUe…ˆGqy‚:!<$¥…yˆ‹‹Gy Ø1ÁApÜßTgM¥iC óÁ_µÿ‘úé4¬òÎôh9£º‰ñ‘[Œ6í: ¼sÜ)ã:]ŽÛ˜.£PFew:žŽãøÝ.hyÐ2ÚKÇÕßùSÉX¬2-ÃþúYËk}Žþµµµªþª+J¨ÌñÈ.,G›¶ ¥2»Õ­‚0㙳Ã:IG]: ¦þlLNëaX\:Z½‚ÜÌÄ%DEM-šµðG·Ýáëén¯{™uQ"jXÈ^!f¬yÒqk+Kw ¹EehŒðÐpu¡6^kòÔq´¼=£ô Ë®et˜U¶¾Œ™SÎy{á0G}”z)EJIB\rZµ FD8·Q³¾8ŽN·¶ª ¢‘YPÐÎáèØ¾M“y­Ÿ¦5fNë‡×•ÛZ‡ºœZV·–¥)?¯.ņO:>²^­[û7ÔQWg²öÚÖçGçxZæHß{kÞ r2ŸŒZWt ï‚v­ZØëŽTÛu,£=¯M<Ôåɲæ—}8Ü”1Ûž³p–SþZÖ™ÛyÛ\ýö«}u¾Ë‹óéÿ q(¯uC—î=ÐÚ×›3`kÇZZ>…€B@!ðï$àhÛ(˜†69½O=z?f>ú8ž||zè!<6kî»ëv<üÔË8ž£âÔ!Ïý36ÎÙ•¤ã¿÷İaCñõâ-Ê/ë`,ú6C‡ ÆW+¶*ãë²U•äáÛŸÃÈQ£°zG \t(1Òg‹šz·öêQ#.ABf¾é«òS7øÂž ù³ŸM‰­¾lß,²Z@)°×ù5Ö¬iÕ=7O§ËŸ,Ïíœu[ë]µ}RaM“eM­&o¥‡âi=ü©õèO.t]ž”¨ú£tQ˜–ÓùàúÐ~DôˆâR)ì¿©1{0hèP <»âSÌI§õ]Öm[ç¡.W Ÿt¾ìy²qbvfxÝ;£ßA“Ÿ®ýIòú7ÅòjeÍépy´~•ˆúC~¶a·ý[W›ÿxø}W˜¿¥u)ÔÅ'! „€B@ü 4±Ýì¸å¦ã…×Þi”Íe×^­ÂÜ\ݨw['æéå ¯­È#:¬¦³–­1û…§p°°½B•gvÊ>œsÞ4õ¼=1A…;yªƒg‹ÈϪãGßë’0;|f‡ÐÔϹßéèG}J»áY'Y'ÇF§î˜r8§aÕÁÙpq¯CÅòìÜÝÌÁ'SOÃ1­‹;·.¶Ž­R@t˜þnýÔåv&£ýêtZcò3’.dœr@Vòœ;íBòŸ„Ý¿B s¡4/gL>G=/߉ÎÛ©g7¯f}þ;¨ NĈ1}Õl,¸é2»Ô/§=?¶Ž¿þ®”ÑÇïº~]mu¬åøSËêò³_-Í”»ºQ«.ÅÊçaÎ’˜xÉ ¸üœqðöðB3 #§ˆÔúú¸~´.­›Ã­Ïü]Ëð³rÑÕÓS=ºRûöò°ùÛ­|l[ófÜ t»‡¶Ô½/™0å¼ (†6DÅ#¤mKJ×Önœ”Uë|Ùóc+ƒJ–þØýUc7u¥$DáÑg>ÎèÁ}À4¸m0ýICسu –QØßƒ^]C•J~wÍ'õ—[·ÎƒéÏi6ô³Êè<Õ+’‰ti-æ§³xV §ºÈ¼£XÅVî¬ ©v Ú¢mÐGÇ$?6›Ê“åO׺<Õσ–e9-«ý8–>|\04céþ¦Sâøªí›"ö¿:=­ß`{`V쌊Káf¾cÚÞ#få(£3j‹bÆ×95=å˰ýÆÖ–çaíŠ_”à›×]ˆà6æïPÈB@! þê¬ÎFÊïFÆO(…%Ñ¿w?ûFôEMu•ZúîâæŽíü͘Fcc°/*†§ZyW¢Æ-œÂ¶‘qg¾-Û`ÜYSii£ :……¡¬0QÑqfüŽ£¹Þ%hОô²qÏD³“\^Zˆ„„d”–UÀ?0ƒ;À–g¦&â Íâ³î0Òéån +ý R3²àâÖ ÃBѲE3TÓr娍HÄH ðjøú·A¯>}Ñ¥S2d+ËJ”˜„ü’2tèŠÖÍ=‘˜˜æèÔÖžž´ “OLº)c½q1Ñ(*-'#Ø–£F  e3²$‰C\,öìD6Íê¶ðo…½û¡GDgÅ¡´0Ÿô&Ñ2Á;£¹[-“ÑÜ¿Â:uPi¨?¶Ž1?çg#&: É)¨1\Ñ: Ãiyr‡öð¡eÝìr¨Ì»vïF •ÛÝ“Êݵúõé _oe§!*&^ÉaT3ÄìÝ ¯Ò x5÷¡åÎñF!пĸ(ìõ3ÐÒ¿-‚ü0pÈwŒ€ÀŽhæåŽÊÒ"à- 4“ܾåµ¢ûöîC^i zô€>ÝÂìÆ@mU9böïC -×uõhŽN¼-€ ÄŠª´mŒ`ZZÍ®¬¸b¢h¹z2ʪ ´jÓ‰K§`J“ò®Û(µ±ÈÝÛ±eG”ŠÛ§GWôíۃѡ•//u 4÷#Š–ÏS;iNDÝ{÷AWZîíÆ†Í§&%"3'—x 48ÚJ -a¯Dx—´hæ¥ ¥ÜöÇÍÍK=y“žžšŠ¤‘HÎÈGhDO èß>î.ÈÎä¥å)J®op%vïÞ‰ŽíhɽñJ45u†„è}ð¯)@ëvAð§ö•wÅ•µ ‚Q^€}û"QTá‚^ýOC¯ˆežæçsïÿ¤äFm7ÆÚ–mÚil^þƒ’‚þÝ;Ûža¼þí*›ÞZ£ººZ=—ä4¾n²’™vÏËF^yW³¹Rùµw•w¨„<«Œ9¯Î4uy‹‘”UbÔVŸ¼ú¸]¿Î:7¾]²^é/ÊL2n<½‡’¹öî»ï¾V=_?ó£° ËøøÅÔ÷ÛŸúÄ(¯2ŒÛV¶²Ì¸ÿ%ãPQ%å§ÄøéË·¦Cr_,\­ÒI‹Ùi °Å»ãá™Æmמ§äŸ{ûšd2-¥IOó[JìN㾫Ïq¢ÓÏØž©"l_û«qÁ0Ï2¾þ¹QXVilþùsæßý4#¸¥Y'ÌàÌ[Í2ñsDÏnöøOÍþŸQ˜—j¼p×Êï‰7¾1j(¥œ¤HcŒ-ïç\0Í.oòl,Û¸G姦¼ÀøîÓWÂëÒ}óËß”\nZŒñÔ½×8•[¹5NÉ{(ÊM4®?¿£’2t=ÞKó~1Ê+Jœ¦ÙǘûÓ*£\á¬6>yîA¯ÏéSŒgž{̦cŒ•xH¥W]]CIri £² ÅxìÖ³•ÌçüŸqZûº2p™¿øyƒ’ûþ³g•Lh¯F°GÌ­SÎ5ȼ§°FPk_[Z0>\¼ÉHOŽ7®ìeÊžuö${˜b6ÑX¹%Ré¦Lsf›íyÈŒ§ŒôœRåOgC5¶—4+9ʘޓuµ5Öìˆ5ãQ8Yµ%ÓÇØ¹Ú|ß&\3ÓHÈ,T¾EÙÇo1ërÊ/9¥TöÚRãÝÇÍöa—1éüžWóß0yM½îãëÏ?6ÎVi2‡uJWúº÷{Ö[óTú©ûKF˜å|ëË…Æò…síe]úÇ~oßï‹í~ÿ°Jù%í]gÐZåÿ™M?eÌ|/øýPR†‘¸‹q÷•æï‚ÙÍ8—Üù4½ûÅFFÜnãœÎ¦ß o7â¨Ü™ñÆ­ÿ7ØLsøåFlzž‘—¹ßž«~þüûßTû/ÏŽ3®:ËÔ5nòùF7[þXfàä+Œ?|߸t\€EOOã·-f è÷åŠfÜ1£ÇZdØ/ÐX´~—*QÔ+ìa˶ìS~eôûóõ‡/Ùýëò×ßX¸j‹Ê êß z°ó‰ß³É¸}Æ”q¯zôU£˜ &Gn6®œ2¤Aø5w=eDÌRé§Em0hÈGÉœ5õÜz²ßø ññ{³žmÆ_eì±ý6©öGmQ¹ÚrcÁÏ«ø½>Ï(¥ßQv´=Ê|¿B@! „€j £ uú¾?Ù;dÍ[›´N­•ß彩:y™¶m´3þs­1oÁÆüOÞ6FF˜òÏð³Jã`Ô6c¤Mî§µ[ š¥3^Ôf$vh<ÿæƼù_›÷ÅÙòÄrÝy«4~ö²™—.ÿGÆx‘QmL±¥ÁÖÛ•%ÙÆcמ©äžxïF%uU×ü𡽠¯|0×X³z¹ñÔý6½]dœ•dwœÝÇ.§;ÁO¾ú¥2Ð?zá:öøó};·\9B}}é=ªƒÏÞ¼t¾¿ýãW*_fz²1ÿC[žq¶q€Œƒì¤ýÆé–ά™Ž—ñÎ?Ù;ÕökU‘ñÑ w*§ ~^nì‹Ügüúý<ãöÛo7ö&g9©1Æ6}ï’”šqÈØ°ô;£¿Íï‡5»ŒCɱƳ÷™è?ÞxáÍ÷ßo¬Ø°ÞøäíWíïYϾl|1g®±iû~£(÷ ñÔmcTÚ³^›¯Œ€ÜäýÆÔ³N[÷i<ýß×—žyÌfŸ7=û ñ6Œ¨M¿š(^w—±à‡Ÿ/ÞÅènËӇߚƒ" ?ý¯)×e¢ñÉW?4‹g¬^¶Ð¸í–;Œ›bìm@ó¨®,6–ÿ8Ï×-DÅ›våÆ{alßm¬]òµ=ͧ_ÿÈX»f¥ñâ#&;f¼zW‚Ò7÷¥‡írºŽOŸv‹“l#5ú¬Û¦šò>áÆý³ž3f¿ö‚1uÂå7áò‡C…%FJÜ.ãæ‹L#(bÈdãÝ?1|·ÐX¿r…ñÁ+˜ñûϼþ®ñùsŒ]ñ©FFò㺑-TØÈs/1>úbžñÉ;¯§l£ü.¸õI#[Ùâ¥ÆûÏßdê8ý>#-›¡È¨± \±ÑºÖ6sÕïS~*TxµÍè¡­æ÷²<ãõ§+=ïÿo¹½­ñ€Ö/s_7õ·žJÆxQ”yÀ˜ÖϬgf´lKŒQUškxÓ˜2ÆüÍéÿŸip¤ÚˆÛ±Î®kÅóX±àåç5ö2cÕæ=Fzj¢ñ‘nÇã¯3â2ÌÁm k>ñÆÝ›Y-ûN4>˜û±â·%Æ£·^nÜôè F|J‚ñôu”î ]gü¸ä7ãçŸgÚêþ¦§?0¸5eÅo¶ÿž„ œh<ÿêëÆ£÷ÝjÏ'ào<ÿʛƓ3ﱪ¼½`¥âÊõ«Y³’÷×L0Y­ÙyÀ çÁú'N! „€BÀ$@ Uïxi"­dEÏðaðîåßfH^¶mý[R@ âb÷`‡RÓ·ßr Î?•¹ XñC~?­–s0ïMÔ;Ëéб¶A¡8gÚù¸ç¹€\L¹àbôá¥íÔ÷ì}¤þéð@÷>Ñ—ÂöÄ}Ô´Q\_íBiInMK›;7BÒ¶åJÇÈÓú㺿¯[¢¾Ÿ{Íølúä牠nøñ•O)ßû°—N›ïtZ˜ZZìÅO¾Œë§_€–^®p÷n/P^NëXÉ%íߌ£WáÍ9Ñsê5˜ýô}ˆhïƒ’Ûø›™ÎÙãÃéûbdd¨¤eÛ¦[‚¤ŒLZZï†Ö”_Þ3ðôÛŸaúÔ‰ð0jàáÍ [MÇËJÙ´L<5%Q=‡·öBQQ!-ño‹nýp÷ qëØ ¿/Y‚ßX"âLZ€ZŒôt:9¿miÄ„+å÷m1˜6ö"\|ÉÅxìÕ9+ ç]x zu4·&dúáÍ '‡ñƒi^\iN’Ú"ÀÏî¼÷›ÕŸ7oQÏž˜5·]v.ʳ¢ öwlMX T(+*Fí‡V.ìtÜqë-wZw¦…aáç÷#zàÁËò©Ì9i•XïN~(.)D -Kè»î뇠 s¹?oqàýÄ|›€-•wÆÙØ1u9ÖÄ|ŽþÃÆà†ëfÐÒÙ*¼ùÙ³Jטé·cúôKе} „´öÆæ³ñ=­ßß¹;cûv‚Os³œ</?ñ ºw @%-»oGKúÙ©=Àj_…úªÒæ§ëî¾?r Z¸Á³2‹V턇K! h¹sDx?\táxÿÛ_áÛ¡±¾ ~斈ප0ûþçŸö8ëœ 04‚æ"Ée%G£Ö“Ë˯¼ ×_4™ø¡¶ˆíÛñ -ïŽCV^Úø´Â° ÓñùgCѲ}šóZsrºU•ågbùwï+¿s&ŽBÛ´´÷Ü…Òµ”#%.÷¼ô5ÐçBŒÜO-]¦Õt ƒ;-Å€¡ksî"¤Qû©(û¿Ž@a*h{ÄD´¬DÒsïpŸˆ0Z–оS¬_IÛZRÓ3¹k»Êý*`ËÏ»ôp*H» îDhÇ@´nY‹±]†…/ϧ-%‰–WoÛ d¸Ý/Ú²§$!ù`Šò»ô¡©Ï<Œ=*“‹*&ÅFcîœß•œ37ÊÌ „%´4=ˆü°~Ó&ÜpùTô5‹¿~“§ßŒg¾OÉ0ñŒð@ó´wþÝÔmƒ·T¼³`›Šû½¯×^|&m3†ž6ˆ¶yäÑ;‹ùŸ¬RáW^z)Οt:=—!+)Ëïü¸Ür9Z»{–Q! xðÁGpóôÓ‘´w=¶ÿò.G³?Ÿ‡Û¯š‚ì¸ØüÓëø5’~? J©Ò»K¹q±ý~DîØŠÏ(¹ îy½#:©tÉ4·¿cÊCþ! „€Bà_NÀÖËk‚elºäÑ¿;f>ƒ)Ó~ÈJTSçÕ³yK4w­AIq±©`Üè×-B=—UTÐ6S6³íF~`CßêhvÅüêëB:+Õ3ͨ¨­ÀÝvîê¹ ch8NŸ>{¾ÞD{?7£6•;Ÿðн×âûçïĺ ëá[Ý+w‘w¿é´w”,Œê2”•‘нG/´òá}Íd|´éˆÞ½È†¥ÎdQY¹2Ò<<Ͱ.Ý{¢_÷.JŽÿÔ–æÐUsœà‹ÞPŸü'¼c´ok ¼›e‰Üù;uv?±Ëu i‡¸ƒtUlh²íÄ®GïÞèJû[‰Ê¶ò ÀytÚ‹ïü„+¾Wÿ´ì³ï~…›/=›êÂ86ÒðØŒ ©ûoº´Ï•†-@v½r¼×V9²µ«lœù»?=×ÒuzuŽòZkÖwúµ£mÞÊù·òW{J›·l‰ÎŠÕJºn Få3ë‹lÁACÐ#¼³’¯¡:ucÛ‘\9ñ¦^;ÆŸóŒ}ìm¬]õ#î¢ÚÝÿÌ›¸ýú+h ÈAÐ'·;š!T>4KL¦9PtuXE¹™Ç~½º! µ9Øá@û§{¢ öÛhÿ| ª©<|H»ö;¡?íSðÒÃ!lÏ’1AíÝZ^m ·jÕŠŒc–õCp‡0¥£štéØU56cŽ|ª*¹›:çQ9OnßV¾¤™ö޳ó"kÇÕ£ºtë£üÜhHm­©sÀðñàÚÑ”£ýаÄèÝxæóMèóŸ»pZÓØä$Ù&RmˆÊ£[Ö,Sѹþ|t 5 ^b×!$ ã®ÍsVÓ^î-pÍ$ë½ðøƒ7ã—7îÄZz¯Z¹ôÀZèà÷*,ÄdˆèÉÃeÀâÝ‘øƒŒáËaÊ5·ãŒ-qïCÏaÆuð,8 d.?œö„ÂßÈ(ò›½Qû±qC ,ùz ®pÂ<²ñèsó(Þp$ïÛ£â2þ>Tr|PŸÕ•Ñ@ÐÁxðÚ“÷âCü+EÎÓä ¡½Ñ%´_»•¿7}q.f^ù^œóx!ЈۮÅ$Ê“®¿Œ¤h|üÎë˜õʇ¦ú;jüXõÌ·5¨úV[SªüZøùƒªî´O=¨SgòÛ j#Tm4èá‹vôÛÀŽã1g®ßZ:à7<È-Á‹ÚHe œ'Ý‚Ar–WMy×лZ^F–1¹˜õÿÃÔ÷ÿ«žùOÛ@_µ7:›ã‰e´ß éŽÓÑA$ÿ±¾­è|úw`ëD©˜ÃÐ9$D=q» îØÙ|.)B MК Pcf~~<@Ao½÷ºÒèü[À[ÒÙíÉ}džÊ ûñ)•üÊ•æ¥aͲïØ—O6ÍÍßZGùÊ! „€B@&pX;Y>ô»¾<«ÐÚìüÒW›#ƒÉfû!!•Ü*ýDPšý©6 wó,c'eªÓÆ6ëÀÞ!Í(§03;êäiÓºPiØDá„AÃÏÈ@_ðã¬úa!&_û0¦L ×ÔM4Cø *ÿïlÕi¿ý¢qh@³¥•%4ƒeê=t(•Ô fÓ©º¢‡ÌÞ©:t‹O'ç“ÂÙÕÅöžÍòòaQ<'åF³Yì¦]v-z‡´Æò¯_Á"ºÖêÛ±#qÛåST§ÛÕ¥RÉtî7_ÎûÝ:ÐaWt(”‹Qtša ¥ƒ“ŒÜ$2•ªUÉcd¨‘EE…¬ë`1³w‹ˆ¾#°F‹§UiØ·s f8Ýz)z‡¯A/ÓM‰k†?¯ÀÈA½È0ÈËΤƒTb´_ÙL4·’Œ†ºjgÌ® „læb —YŸ6nËŒ Ò6R% À°£µÖ4›§'ž-3l#{÷T:1žV”—#/Å”ãð؆÷ÅGûvÓáñH¡²EíÙWÞú¯Ìº "ºá®égS^m³­p¾ø -vb3h˜i§Ò!fåTV: ­ª¼y™ JÖ•fí³ÊìCÌ+ÊÈ@¦ÓêÙàgöºMªö?fZ\WT•ðv«±·J¾Ë§ºÁ@;^ý¡\ ·o‹ÉÞ4HÁŽ[4ÉW å`œò«¦«üÜÈŸ]bl$2è@³f-Û¢Í^ó!qìj+‹±á7s`ãÆóÏB§ö¦ñd= œåòÒðõëOÑ“?Î;Þ”˜2òmW±5oÓ‡Næ¬Æ‚… °é‡Ÿ0qÆý˜2e*<3·áÎ矇‘q6ØÔ¾õÂqèЖÞhV¼KO\uf|±ü;|ýi¾_‹wæ¿Óû´Æ|2ÐïùøKLp1-»áý{€&¹•ëJ3öýèiñw+ᕺëóû&MF°{.èïáÅO¿‚oô"’C?:t­@vZ"Öü¾ %Tóµå%øáG1zÔH¼òÉBºꦇÑ*&­üùô ¬Ù²Km™YøÕgø`î·ðhÕ7N0~]º {$#jÇ,ÿm©òpÔå¥C#±uý2%3ûŠsh$ñ@›ù¨ ù#„€B@!Àh9¯G‡ÄÙÎfÛµöÜ­lôß6:`î¶¥¤ÌÓ®É>ðê•FÒ¾?ìz¾X´VùeÐsãhû¤5Þkö†øDmó!}ðQNr¤qN›:ù¯–oUz¢6/±ènl‹M·—‹öû÷Θh ¯‹ÿôÛ_å$YBN]ÖÍôŸõÞ|u8’VPU|ˆN4­â_p×êDðŒ˜ÍFÍeÈ•FZWNͽ4óz§épùvÅ¥Y‰‘öðétqÓÕ?(‰OèfWSœaÜ{±ÎkcâÄÓíºM¼òA#N©6(§?ÍyË®ÓÊ‘ŸŸ›·\é:µÑà¹Bkø¼U»ŒâüLcæô~õüŸžý‘O§æ?t©)ç3ŸÙNqßkP—\ɾùÍb¥×(Ë6^¾ß<”ïŒëž5òø`³Š|ã³7ëþRiúw0z‡™q?þñw*\•ñæ=ÛÒmkL<}¢ÑÉÇ œp¥±'>Cé·×¿>Í?7Ýxð?æÁ`·>ÿžQXi¶üôxã‰[µ>S.ëÌ—?1ré.JÔø`–íp«±—óm'¢ÛÚ˜Y ±ñ¯ÈO6n¿ÐUåqúïªZªÿ½óœ™ï‘Qi¹*Úîµ?ÛÊR—öêm1FaV¼qn»:?ÎÓ¿þn¤L0no=ñÛ"3xš±qOœ™Ê|:$ÎÖ¦†Ýe¤²ÝœP[iüò¹yáýÿýØàKØé“ÝõáŠåùéÆÃWŒSyûz馕WY¿Wy)ÑÆ…]ëò0w‰)»í7K¹ú[¢S•>ížÝ†E_Ô…‡gÄe1ÓjcÎË÷Ùý¯|d¶Q`³ÝQm|o9näU9|•õé›êNdæÃïÕ¡ƒœNyÞ!㉋Ú)-ξÇH£CÛØmXú­ý€J]ßúóžg>1ÒÆwžçcæ¥Ëtºxš¿w£ý&…ÎÜk¤dåÛV}kϯŽ_÷y®‘˜YfT$çw7Ýþü<•>·‘û.1ýnyâC£Œ±T2¼z Òwúͯ)¿ÒÜãÆÑæ!quz5ïÆÊmæau{×Õ°ø“íV„lúýzâ¶éæoWJ¡Q[œcÜ7ÎÔ7è’Çè°@nâǹNã ¦“üó+ªŒ­Ë8 Gð8cõvóº´¨õv™w¿Y£ôfØl¿Ñaö\ó7¦8#Òeû}xü­ïÕáx,|0z«1Qù3¶Ç¤¨øüŽÉÑp …üB@! „@=.ü:Œ ûòì`FR$ÖmÚI3~4CÄËÍÇjZÎéF¨ 3Ûø!7-Ë–.Ǿø†D`-iåY©ÌìBDô‚QƒzÐÁ)X³j ò*]0xÄ(ô¡YMš'Bô®mØ´•î.*RéŒ9ë íF]:ZÂÌ3}$ÅÙä?£ª„ö­ÒÌpr&<}[aÄè±èDK>KòaúuHË-¦ôÃ1jÔpøÑ=Údˆ¨™¼Ì _‹­;öЬ)í ň‘c1lP´ }é|'ûÆõë‘Hw?÷4CöÒÝj)ñ–Më°;––©Ó²Þ1£†ÁÇ£[7¬ELb:-ëtÁÀá£Ñ·k'”çcçö­ØEw§Ñrk:eíÑ­G_ÊÓPÔgaåŠÕtÿq5ŽþÝ:sé¨|<£Iì4|Ú[CKÀ·lۉĤdºW½þ´|µoÿ6l0:¶åVçå­$·•äâég^ àß¶Ýí݃¡¥Ït8ÍXïß½¿ç’Ò2TÔzà :´l`׎H‹Äêõ 7¿…”¯Ñ'cXßlÙ°ûsÑ³Ï ŒÞ| ÙÊk]T޾CGbP¯š:.Ö?ÖagT*Ý Þ £†As:\¯07K­†È),£{ÛÛ ÿà~4Éš»›êv7µ3Wô¢ÕƒúDØòEÛ¨§ÓA‚ë7nE9…‡Ó^öajt "wnÆÎ½±¨¡}ƒGŒAϰ Å¡šfˆ·m\‹¨ƒYhÒ#©ý·P3ùµ8Í[·Òª•:à­ ¾~~ TﮥYذ™féé= ïÙ#OëMújhFw b“é@èÖ³?ÆKì;ª´ ²’°jÍZµàFwœÃÀ^é÷6 ë©Þ“³ÊˆÕ(ªßpTÒoÛŠ•«éø të3˜X÷ øUXòÕ˜|Ù¸ÿ•ÏñøíW ý>ð9#u[zT2òG! „€B€4j 3m¨Ž”¶'Ù°,§½É^ÞÞ –.:ÓåèÇ{õrIJ³W?i{BŽÞ¦ñ^ßצâh#ŸÃyï4ÍÝÐ’eOp0—f:æÃQOÃïNòFBV=4—IËÊÍCÉxyt£®‘29–ŸfœÔ¾VWÚên[fÊ2ÚÓú«lÜÝiϼ¦gÍÇ¡É+ûRU?ëó·†ð³“27’÷ÊÂ,˜ó1+}1l`_TgcÙO ðúÇ_“ž‘Øó? ¦íhÊZ•÷èºÛê„Ãêç»áw{|ΕVpTÑàŠÇ xÙ1;ÖÅš‰òdúçèg†9 ¡¶ÄéèȶÏzù¤thÕ<0ÏAŽùòAgœÏlZ ï%£0wS.>ûe5®ž:N-o68Ü™^]küã.¸®›…¯^ tz»Œâ-¼¹–^}øz<øÆwxyÎ"Ü{ÅeÖË/ëµ±qH¢®ãëOí¯?Q§ƒIÎ9[%ÌD4»–†í¡šöEsÚ¼‚—[;u$`ý=p”á=Ö|&@Ý;æ(aùî´ ÎÚ È?ˆY3&à­eq˜=ÿ'Ü~é¹ôãKû婞l;'œòfÆÖvË7ò6 nGÖwÅ’+û£cýÔÐÞxVgÿ=²äŸßÁ *;‚ÁËËËŽÛQ+wæ§ëО '%7ïoi˲?öáÌ¡t2'•›†MÕ{`•G! „€B@"ЄåÈýÂF:¹ ÐQ§Wõ#é62Î9gºÔŒ¸¥Zgœ³'i7’gºí8¥¡ºÍôìIO«Ó`«ßáŸy%AÃAα6’ØØô ƒÊ¬ÎYœÆ{©õËïJû<=m{=Y§Ê71b;D?sQ=l‡ÙÕ¥k[y`çÌûcët›qͺ®Ï¿NƒùTÇâP<ƒË³Ü´ûq›≹í¢ê¡Í Ìûìyô0s̓÷ú{Ð?í¬yÒ~üÙh=ë:¶µAO/ZïQç”>’qR§~fLçÒN}I·. ×§çÇæÌ²˜ƒŠ/×¢‘•ÂXs|)j¯|mÆycå×:k+K‘M3Úÿ¹âz̸bš2ΩÔñ1“@An.j›‡àú{Çä±CìÆyƒw‹ó¯r¥S0?›äÍò–rZc6âmqî¼~˜gcŽÓ·²r·И<ûs9)gžŸìNןŸp¤ÎA‡͹^N³8ÝÜÇ_B+)ªIØCç¦ø;ѧ[ÂÙ0÷tü]!]õSµåÄ>»Á åHš±'½ÞÞ|¨é¬\µŸþtZïNòÎòùù¹h=nž1Í~þTÔ£Z©| ! „€B@(MΠ³„î¨5ÅËÚ‰t”ÓkgZ[º£ç, 樿³¼ÖË]S³ohhÿ†ñÍpG}V9¥—t³ŸÕßž&)ç´t˜Î7Eiè¯3bIPųåÝ4¦cW: GNÐÚ)oTŽ":æ×ª‹Ã¬q­eaëwþÂÅÒðõ²é|ò7kY­þŽqôwgòʯŒ½LÙúoçk“§·jixia>"÷íC]cÜ¥]·ÌËYTþxö›Û™vÖôL}µt›x4ÂF§rëAÇòðŒ=ßßÍÆ—;NhQ©U×û´–•Z-fà0Ö½MØ4épÍ‚b©tµ¿NP§U‡ÑÌòמ$lÇaš®£¿Öëì“ãiyý©Ó×òìïè§Ât^¸ì”:Õ/€U—c¾”.•_¾aÀt·zäîÝÈ))G‡Ð0u¿;…ó=à¬ÇªK%B~ì´??;ÍŸE†Ãù?ÎéÑÆcýŽÎ®Cé­ Uþ6¿úå6ùp>X†‹ÀíW³¸ÑJ}°^&yB@! „€p$pXÝ1‚|MÐó¿*ÓTü¿{˜sFÚÔ9úÒ9ÓçÌïè5KŒcA@êâXPB@! „€øwýßQÏ'¼”¼š&Ò,3yæìš9³v¸¹ÜžÝ“ ÉC'lŸ­Ô‡ùd£O»FãÚf9•Ïhêòyüµú> >&IQ;=&)‰! „€B@ü3ˆþϨÇS´ÿN£äH+C/ØGªHäþ&ê©þ&–l ! „€B@œ`b Ÿ`à’œB@! „€B@gä,]gTÄO! „€B@! „À & ú .É ! „€B@! „€pF@ tgTÄO! „€B@! „À & ú .É ! „€B@! „€pF@ tgTÄO! „€B@! „À & ú .É ! „€B@! „€pF@ tgTÄO! „€B@! „À &àÞTz†a€ÿ‰B@! „Àß™€‹‹ øŸ8! „€§22ÀÅ?•kHò&„€B@Üå#ý˜ %B@!pœ49ƒ^SSƒÊÊJ™E?NðT-w&<<ŽÇzÙ©%ìä5¯:Ø™Ÿ³~6–gñÿŠŸ5MgÏÎt;“sô;\þ w¦G×Ccq´¿Ž«ëPÇÓþŽŸ:ž£û;ú9Æ=ÜwGÖïü¬g«§GÂÿ^¬õ\UU^eÕX{dYvGÒÖ¬z„ˆ£üѤՔ~G½MÉ:†5×1MÉZõ©œ5?ëxŽéZÃãëïM¥í,L§o ãç#i?:.:‹ïîîŽõë×#;;[èZîhu[Ó‘g! „€Ç‹@“º——BCCѪU«ã•¾è=BÜÁ :Bi'Ÿ@ii©Z"à“_Ç2¼2‚ s^Ñ#Nü]„„„ü]²*ùB@9& tîˆq'›wÈÄx¼ÄÏ(,,DË–-ѬY3©‹_ ’âQàÙóÈÈHÌ›7OÍf•••õ,ØQ$'¢‘€žq<Ül¥há<£GÆYg¥ŒtùÃ_¬‰~\ p»åÿòïÏqMK” ! „€8š4Ð9îl³ãÿÁéšò?'Œ×þljê:9a„„ÀÐÆîÅÆÆbÔ¨QèØ±£:GáUˆØI À¿ïM9]¯lœ7oÞTÛm8Žü5ENÂN&ë ÓáÚøȨ́¤-„€BÀJà°ºî˜q$ëÿì¬J<Ó¾1Þ}x\ z[œvcéXóÞ”‡ŠÎ‘·.£ÿ©˜wÉÓ¿›m¾¾¾˜8q¢:ÃâßMãŸUz|á3IøSŒóVÝJi„€B@“Oà°º5‹ÂV™öLËÖ\šHìX±Ú(>Ê~*ä¡ ä$ìø½ÑÛcìžòpJàƒ³222êøÆÕ¿7\—~~~j%„§§§2ÌyÛç§duJ¦„€B@¿9£2Ф¬Ô—S;m<›ßÆT†oF¶šo|hvÞ–†Ó`– ݹ¬¥½ó|s¸»m©þѦ«õXuêtùé0ùÿvlÀéýÉúSm•!0µü‹;©¸.rss±fÍÄÅÅ©¥ëü›æáá¡¶4ñ)íüqö?~7€÷£§ÓïUNNŽšE׿ßÒH.…€B@!ð÷&p\ tž-né㡌nÆ£g¿ù9fÇ:̺çNÔ† Duf¼»Ÿ…ç¹ áA­½·]}>ÚŸ–®%ˆL.Ç<„³FöƒQYˆo¿x—Üø.»êj'nÃâ5mðÄËu¼ݬÞÜ´8,]:›¶ûà™nÂWŽž­ñÚ£7#·õ û¹`wL6îš9çMLÖ~)–|??ñ&z„ÔøhŒ?ïz„yfay1Ùûó?ÃÏd¨Ï¸{&.›Ú«|Œ«îçLÍ«Öâʇ_Äí×L*ŠðÎcw#;  š&âµMØöã\ tÃí}CÐû™ñÔ­ç3†zÊCþª3G¡rór1àŒ‹ñó Ø›ëNK©)¨îÕýÇ•üïT ëàirr2öíÛ>8nÏž=V«¬Füß©l’W! „€B@üݬOTVsÜtܹã¾xYn ^ôR´;óI<{÷¨.8ˆû/ë‡w¾ŠÀ‹÷Î@`XoÌþn |ýZ¢¶,sf?€—æ.Æx2Ðã¶®TÆùÂÕÛpÆÐ^HÚ½)·½H÷+×¥£÷µ¶é†Éç\ìvéxæ‘»Ò¶ OÏãáÙ àÝÌ.UÅøöã§ñЇßcâ˜ÁÈܵ“/¹ÿ[¾ “GôÅ¡ähĦ•!¬} ÜrÞrœvÍ-8gÔ`øù6ÃíkpÖô[±`Åœ?v"7þŠcÏGß~±˜Ø§-Š“ÖbcAk¼~ÏݸöN?µmA{éË1ù±—ЪKF¢í–ºïò$þqx¿²Y¨Ð®§¡Kl[“†)•²zäªkëÒuooo 0@ ÇKÜÅ0?…*J²"„€B@ü+Ý6k¦w—òrnv™)ɈJÃë3¦¡es/ ynyè-Üüñäß0m[ø g×6,û5trð¶»<älÚ ^ŠÈÝ[pÕ#ïbʸÓÀ™¥eåa|ÔÁmJ¹íoAwuñ@Û€¶lS…ððNhFaÕåµHˆÝ‡ÍÛv¡´¼Û·ïDÏÐ>¨)+Aô¾-¸ðî×pþÃàI²¾="¼' Tš÷ÿì]€UÅÕþ¶÷ew©ËÒAPŠ4Å^PÔØ[4FýAc¢ÑÄ4MùM4‰1¦XþhbMŒFcï X£Ø  `A:ÒÙÞ˾{÷ì×w÷½·,ðv9o§sæÌ73÷ι3w.råôâÅ%@#_Üâ…B{áÕ8òÀ=ä½v`â‡ãª ¾Š>ûûíÖãpùÏÇ!ûMôèù§¥%ÿsÁ÷D±öM½ú0¡È†@F %Å_I¯­­•‡Seæ é555žaÞ¿ïµ"¦UVVÊCÐFo=‘ô5] CÀ0 CÀè©tÝ&ÓÀûÔœÜéÊ L£kllBáÀÈ–íïêrrrÑ[V¦[jñƒ·c¯ƒÎDjï¡Øÿ€0ýÐcÐ’$+äršz¼ß=\ÞW·Ad%µ~:MeÑW5êêêP/Æ@uÕœ‡þÉû| ¹Åز9B¨E¶<=h”O± Øß3üeC;ZWå›êEFCÅ÷]½G[ܯw›ò7ô* Ùò97$o›=é›dbË4—.‡,¥Ó¢—òôÁ…/Óþ=}=%5 iÆmÏG ñkÈ“Ûùî9?¹¶dÉ,]ºÞ*º^Ë¿¦¡!`†€!`Ý®3Ð8™ËÏå¡j¾!®Ÿ +,*ÄŠÿÜEŸ®l£^ðî{H/ì%†u=^|è^\u×øÖé'`i{cü®»È N-’Ó3E^f½ö6Ê|Öºê*”•5ÈÊŽšäm"½@Jjª”/?ùÌ›ìoÇ ÷þ¿¼å¯øî7NÁžÓöÂîcÇ ¼¢Érð[AAþüÀÓXS&§Ï‰é–Ò,Ójy(Ќƺ*1½õ±@: zõÆ ³žÇºò¯œÆŠuxí™#Ë¥É*arJšåþ¶{êÆ_³<\XòÙ§X±zƒb@—®Àé3¿ |1[(ûp¶ô{¸à’Á8ÿ”éøøg± cqÙ'`Ü»àG¿½åg]ÆíŽÝö>ççýþrüôŒÃðßGnÁ¿ÊÁ{OBJS5‰¡¿ûù¿õ¢¡ž"ÛÚë*7â{»ŒÆøëÂUß?ÉËsfú²ö–bô0’xHBñÐÝql.w™ô°úuóê”––ÊÏ2¤§ËCÈ‚‚¶ÝOõòªOs§oÎ0 CÀ0 C`Û#ÐuºL¸½9¸èÌ™3“¦LÅ#<ŒÔì>ÞNô»îƒ·^~?úÞ^P‡Cϸ”ô͈҈IûâÇÅ‘Á-òrDݱg]ˆ;²ÀKÏÏÁ„‰SðÈ£ÈÊ|/ÉiBî€1¸íÕyxî¹Ùxë7’ÚG4…8é[?CRŸ'°ø“O1`øô+ž€_Ýôzèq<ôÀ#(,ž†ž:#úæÈ;ë8÷û0dhO'nm§KÍÈÆ7ÿõäéÅùG¬Ì; ºkdôîû`´SkÛ:퀱‚©²ÓˆùG}„uëÖµæª Û§ªªÊ‹fgó4s†€!`†€!`Û$YÉuÖ¾¹õšïLûÖãìÙ³1xð`o»£›Þ ÕÖTËÊv2Óýmðmò[äÌóºzdÈiÂjöåIÁ ò>xKRŠÿ>wˆ"þZ]{f{\dËqé"»}o{.9¸R”&«HZ¶/¥MM²înõ=«ªk‘™•-«äJÅ5Bu­r ïÖø–å)u$_ëÍCšø>(Û"##c‹6ŠÄgi†ÀŽB@û, ¾+¯¼—^z)vß]>“Øz™Ñk‹\iDÅöѲ£ôÝYËÕvâµeåÊ•àçÕsEEEràæï»è|WÊñÄw®¸›3íçÔoîܹÞýsÊ”)®G‰ZÓË0 C`gD ëVÐcDOo˜4lÕyiñ󒽉ŸæÑç¤^ùÒÒåô÷(.8í—§¾9 +ÚœTné|ÙLc9î„“eÒ¸æ?5ν4699~ÚÓÜ’[Ã[ç^)ücÎèñð=Á5Ìýa厕EÂUPÛƒ+è|D¤¤CyЧ^;$´LCÀ0 CÀ0 ­B`›è4XÕhuµã¤?7_ÓHçÒ2©çÚšo3àΑø(Çå÷©ý¿Z>ó}YÔIdû™ä»V˜¡Æ3Úä2ÝgÚ2­õ 8Ÿ6¹MËn–yêZH¯ei¢ù†@E@s5êšäK ÞXl­¯ŽÏZýnW-ênûhôK_¯š¦4憀!`†€!`tqè±NÌÚŒÛ=Có[ XµƒìA¾HJåùržo4·æJ¨¾dDü6y¤ôHi­rô½s«~Rë§æ4OÜéÔ‡×h í…€Û?i{ì±(..Fuuµ·}úËcr{ifåt5n[wµl“g†€!`†ÀÎŒ@\ºÅÉYØd[ó:òUŽgˆ‹±–e¹4müôHtÁ´`\eÑæi\i4®¾ËÃUsÿ½Z_ŽòPï-éÂË¡ÜxÊwËp常©ÞšÌÓ²5ñ0ùJæ+¯[¦ÒF*ÇMÓ°Ë«òÂò4?È£éôÝ<ÕÅõI£.­æ“žau®<¥Q_ièkZG¾K&Wi4Ÿq ýH´JO¿#](Ëu.m0ñ!C†`РAmï,ë']Z wo¸í]]°¯EŠ“Öí7AWV4Z—Wù¢ñ¸t « k¾«cGyÊôUŽòºò”Viw]$ZåQZ¥Q>ÓWçòhz0-,®2è‡ÑhºÒÐ¥Ò©‹Eo-‡>Ë£y*/æ™o†€!`t'¢èúN¶Þ|Y97¬¬æEó]¾Xhƒ4ÊLÆIL ÆUVG´J‰WÓ¤$%kóÛóÚõˆ¥—†Æ · «‘&ÓåQ”6è»´šäqi‚yÊ滼Aš ,»<š¦¼ÑòÜ|—ÇMwÃJôI£.˜Wzúa4šÞÕ´*Ï•¯á ‰–iJç†5-è« —VÓ”–q~?[ö[›ßóÐ¶æ³æa4ŠŠæwD«4ê+oG<.K ãÁ24æ»åD£ÑüXx\Z7Ô×»tŽæw•.aåD’¯ia<šV77Ý »|¼©¯å™o†€!`$"è4 ßÿ}ÔÕÕaàÀà·róòò¼Ïîð“;<É—<·³Òñ=FÒfeey4¹¹¹¨¬¬”ÃÔr¼m®< 'så…7NžÌSÉ)‡4¤%?ëC”Å›*ß}äµ#ù”AY*Ÿe0«|–Á²ÂôWùÔ™ºÇ*Ÿ:Sw•_[[ bÇ:ºøD’ÏåIKÜ׬YãáÕ¯_?TTTxø0ß}Ç—mÄRñgºÛVä#X[1Ý•ÖV”OY/W~GmÅ-Ï=¡/DëkÚïµ/»}AÛ*Z_ภk+w¬¸mÅñM¾ÛVaò]ý]ùa}}ZûÇR¤ëÛÞëÚT>ÇVGãÖ•Ïu!Þq«“ywÜF+‘Æ-õgÿÖU¯kZW¶­¶•^Ük 딯m¯üàuÁm+í ÁklPÿ`[Q·/¸}Ù•ßÙkx¼÷m«m} G>ÛšýÆÅÒW”ÏuAÛŠØk_ˆÔ/YÓ#õµ`_»Gô„k8Çç,›6mò>%8iÒ$BgÎ0 CÀHh:4Щ9oæüq"ɉ§ësrÆI}u¤á$"-y•G'_œi]¤Ó‰8Ëpó\]˜NY”Oã™?†c•Ï2Ô莤¿Ê§¯òÝ´ .”ÁòU•Ï´ ­ÆKò0Lùä£O>N¶”VuÔæk•†¾–G_åk[¹yÊÃò˜ÎËuåGÂ’tÊCù”£<äW=U~$âí ,ÃnÙJ«¼”É4Ö9ù”Eü蔆ËVý×vUù¤'Ÿò“FuP,Ý|W>y(/(Ÿñ`[QV¤¶byŠËQ>†Éãö5ÆY7ú¤Óv¢NLÓºi¿QŸ²ÈÇ:k½U¾Ò¨¯2T>Ë O4ùÌWù w$_Û‡}ŒåF“O|”Gʃê­8Qæ©SùLS¦1®¾ÊT7Ï•ÏtþX?wÜ’ŸiJ«rÕg>Ã.K«¼n¹ä ö… O°­(Ÿ<”§yAžxûuŠÔ(—}—?s†€!`†@w@ êwÐùí[þÌí88™Y²d‰÷^/'-æ CÀ0 C vÞzë-ïËÔ©SÛ@Р7g†€!`$Q­=>á¦Ó'Þ‰Vž¬bή¨Ð§®é=¹îV·î‰€öMöWn³åõƒ«ŽL7×ýÐJ^‡¸U›mkÎHTôzDý¸ÂÎ'æ CÀ0 DG ®Ù•M²wLs*îêï-¬TC v¸ušg'˜ë™”••µm¶ë’߯†CÏìëV+CÀ0 C`{#uÝUȶƒ¹hl¿°â®þö+ÙJ2:‡WÐy™{š{ç$W""ÀöåÏ\;v}nÇÂB†€!`†€!Ðyâ2Ð;_LŒœ² V7Â';\®P&Hç–¤ôê3OéÕwéݰòD£sy,l>Ž­Žò Ãa÷h'ÓÒ0 CÀ0º‰c óUÜ­øµFÛÐäd0Ò„0l²ïØäi7ÊۄňTV lFb:>ýñÈÇoþoá꫎ig°+½#‚ ‚€¶ }¿=D1SÃ0 CÀ0 „@âè2YoiæçPäDòù™Tùt‹ëšùI&ù”Oëä05-™é¾ÑîLð=‰«ÝÜXÍ›ËÐØÜ‚Lù®p¯¼ÜVŸ†Û4uâ©4NÂf9˜†„¿gîó©|O˜ý1 ¨$%9G^ðÉ™8w¬1nãŠ($¶³6Jìö1í CÀ0 C {#:Wcü‰yùÚÅøë-ÿÆQ_?Gƒ«lÉ´±è¹¸ëîûÑœ“”ù&²|>vÒ^ᨯ‚ÞyYí}ðÂÀéÿŠOçãßwý³ç.@N~62³r1yïéøú©'bp¿9½Y¾ëë ­ì“’š1÷ù9H0 SÇŽðZX ‰ädß°hUº{·¾iol'<£®¥ K?]„åk6cȨ16°¯gëØÚNªX1†€!`†€!`†@Â"àZ§;FI1ιñ•®®z3~~ùåØXZåÅÅÔnË[¿âS\ý—1uÿCpòI'cÚ„!8ëÔcðÀœ·3 KW­÷xÔ8¯©®B­¬ÎËÓ/½¥¡Ýp9æ¼÷¡—'¾ïþm]t“,l¦ Í @IDATAtt7ãµgîÃ%—ÿsæÌÂ%?þ9^_°¤X©Ú,`†€!`†€!`ì„ìøt±‰“ZgçÉ)i8hÂ$¤¥êövß`f»¤HpÆÌŸáÈ£g _â{L›€wg=€uò¹²+¥ožëW}Š›g-Á;Ÿ}SFö¥Œ·;;êÔ6ûÕ._¿<ð>øt9š‘ŠƒŽ> ÇÍØ ßxO?2£z?«–/À Ññµ“Brå:Üs÷=8yfL/¹úï¿çî` C` ZøJˆ çÒUŸàWÞ€ ®½‡í1 Oßýg\{Û¿qëŸ~ŽüÔ$ÿÁš=ôÚ»D‹ØÖöDkÓÇ0 CÀ0z" ±‚Þl j+*¼Ýã~ZûºZrzÞ~ö<ñØ3x}îk¸ó¦ñøûM8|¯Ý=ãÜ3¼­í>O^a”Üöâ­÷æaéòU¨¨®Efn/äç ¶|n¿îJüwy¾qÞù8éˆ=ñëK.ÆËï|ŒœÂ>:.Eh 0døpô)ì%æ;ÐX[»¿óÌ[ººMåö5þ¶$ †€‡G‡ÿèlÕòO1à S°çøQ^Î^ÓBaÕXµ¶ÜNJ﹘Kh¸CI늄ù†€!`†€!`t- ±‚Þ¶]æíS@VT×Å%$«ë¥+_Ç“O<Žy©X·z}<óç/Äî#‡ ;-ÙÛâ®ǾƒvÄöš?üÓ®¼“÷šˆ!CvÁ©gœ…S?«—ÌÇw}þ .€â¼ÉØ»ÿ|<òÜ›ø¿Ÿþ¾rÌL$íu(Î8ñ6ÄÓò‹q“¼C›ÑË_‘÷4´U¿6|,`| ÖñQWS‰âA½åH ŽpÙu’’ƒÂ´lÔ×Ô}‰Å CÀ0 CÀ0 o »È‹=.g¹ËIéþ;ßÍrª;môd9È­©®“Ž9—ýê Œì›+¼5â{ß~Ó=»ÎûLΗÐÅHö¶Ë&§¤cÚôcqËĽñ«/¾ÀÆñæ‹âŒEß× $©ƒ†ŽÁü7^Á‡ÿ…fy:äLì9®µ 5hllBR}ÿÀ€'½‹ž)éÙ.‡[ÑéÁV¢ž9CÀCÀ[uMBFv.VÉ9-Íþˆii¬BiCµ¤g„qZz#஦'°š¦š!`†€!`ÝÄ2о”Ì8Gì5sg?ÊüA(éÇ%ÄÙNûk†€!`†€!°S#P: àÍ‹>ÀG-@ÿÜFÔÔÈJ¶,¢*AcR*^~ý}¼óΌꗃêÊ2Ì~èv¼™{8v>¸­ý ´Àç,;Ÿz Çœò5ŒÒ_¾«ž„ß}×>6Ï^6 Ã'a×ųñäó¯aÈéG![ªúpÞÛhÊ*‘÷d#;§/¾þÛs¬|Ö­ Å‹ÑPþn¿åoºï‰8z¿ÉR¦×¼ $µ~–°Wñh\ò‹‹qý WáէбxY9~p饷UÚv£D`·$CÀ0 CÀ0 C`§B ¡ ôÔ´LìuÂTüá÷¿ÁC%½‘Ò\Çžš‡;Ÿ¼Cóà°Êgq…|.mp^2V­Z¾#§á嗮ǮƒûH£‰iî­Âù&zŸ1Ú×ÏÇÁÇ=‚Óß[¶«—âÅ·VàÖûfaÿ‰#%5¿öùgñÓž‡ÿ<ø/ì60·ÿó<ðÜ“Ø3yfœr6:ï"œöÒã8ü”3ñÓ‹Ï‘•õZ̾ë7˜>ü ª“Xe Î# /$a¯Ã¾Š«GNšå(2ƒúµ‰Uª¶ †€!`†€!`;!I²jM‹¶Í1ª­Íž=ƒƘ1c¶Ë*WSCJËÊÑ ËæªßGÏÎËGFj²l[¯@£|¶ÉË“mæyùÈËÉôto×Û?9šþºš*lX¿¥år2<’QÔ·?ŠûËAUmµ•綾nc ™ß§/úÊ6ú4) ²j¾ö‹ÕØ\^…|9Õ½¸¿<hjÀæÒ2¤fæ ?'Ë‘²m‚Z§ÆÆF,]ºÔk‹ŒŒŒíÒÛ¦F&µ§# }–»_ªªªÐ[Ư'š¬?¯>¶»=ˆJâÇy¦G–¼ÄבÂÚ6ñkaötܾ9wî\ðþ9eÊ!•×¹NOÇÁêg†€!нH˜tÞHSÒ2Ð[Œä0—-ßMû’£ÁîÞhùÞ«ï2²rP2D~–EÇ›s^Aì*?×ù7õô8X~š#Yw·@çe§!°­à«ü±ë/7¼­Ëwåo¯ruÌj}]ÜpWèMF´|ê M$½¼íÂnž… CÀ0 CÀ0¶¨:?+FÇ ':¡£ÉiÂâ*Ó•×­–F£éJI~s@ÿXx”FýŽä+ú.­†5/ÌW:ú¤áJ·3¬[„黸yܼ`9ÛŠVËÙVò]¹Ö2Ã|¥£FL‡Ç¥ÕpP^0®tôƒyÁx<´ÊOWÓRžê‘’’âçëÖ­“O¦´¥k¾ë»zh8¬k~$¿+x"ÉÕ´xäÇCÛä³^¼þð—*Ÿ¥¤c[ºí©îZG¥D£2⡇Ǖ «œ ¤ceh¿uåYØ0 CÀHT¢è™™þ!lî–FÞìœæEóÉFóݲ4-̇VeÄÃÓYZåÓ2Ã|¥£¯4éééÞd˜>¶…æ{‰­4-ÌßV´ZÞ¶’ïÊÕ°–æ+ý0š`z<<.­†ƒò‚q¥£Ì Æã¡UÞxxºš–òTöÕ’’-OÐ tÐwõÐp&W:×ÒhܥѰæ…ùJçúÛŠVËè ù*CeÒ×´0ߥÕp<´z="¯¶ÐW¹Ñ(O<´ñð¸rƒa•ôƒtŒi‚q—'˜…Ç¥Ñp˜¼`:éƒiaq• O<´Z^<<ñÐv$Ÿr8—a¿6g†€!`$:è¼ámذýûËwÄeµ„ÛÓÒÒ¼•1®Šqu“3½é‘ž++šGnqÕ8}]ý%0ä#?å(MG'±Ðv$_åªßm˜.ñ¨\õ;¢&ŸØ(–Ä»ººÚ;»¬¬ ùùù¨¯¯÷ðê –Ûº­T~´víÅP}—¶+äGÂ?^,]‚}ÙÕ[ûv¼ò·Ç¸R,µ¯EÂekô§\·/«|ú¼.§XäiɆҪïÊU•lWWoW~˜.Z¶KKõ… ­êÖV®NZ^Gò•Æõ;£¿bC½ÈïÊ öW~4ÚŽðQ¹êwDË<êäÒªŽaøt†6ËêŒ.a<.–aãÖÕ)¬®É×¶Ýùªƒú,/^]:âQ¹ê‡Ñr<ña!Ûž_èÛ7üZÖÛœ!`†€!th ó¦÷öÛo£²²ãÇÇÚµk½Ï&mÞ¼½zõòÒù©îtjLÒˆ,--Eaa!6mÚäù4.sssQ[[ëMšxó§¡ÉÏô”——·ÑÁ•ϧ޼¹òæÎO¤ðÓM”OÒª|ÊÈÉÉA]]7!âD†a¦±lÕÅ•OY”¯|Ê&6¬ ë”Ϻçååy†5'œÄr¢ÀºKb§úÓ/((ð0 Ä’ØP>?UEZn惖ÇÏÞq¢A ˜OÌU>Û¢B>E”ÖVäêOœXêÏ|N€¨õRùÔ—¸»X²^ÚVÔ'Qú‚¶U¬}ýŒý!Ö¾¦ò·U_à¸bD“¿µ}ÂÆm°/è¸e_ë¨/°ÏÇÚ"[ŽéHò·vÜvE_pÇ-¯1ÄDÇm´¶"Öîu!l\±îÄ8x4n9õº£}}'–qI>Û<Ò5Üí ìû±ö…x¯±¼þé=b[^Ã;ê Á¶Š÷ÞپЕ×p^‹cí ]q v]èL_`_먭ˆW¤ëïKüÔãòåË1þ|~øáöÇ0 CÀHd:üúœ9s}ú`òäÉ[è }Ù|CÀ0 C QèÐ@Ÿ={6FމáÇ'о;­K–,Á!C¼‰áN ‚U¼["À 9'ØÑ|V.M0?žxhµœxxâ¥%=–Í—Ö¾äk9扌wò:4uêT3й¡L7CÀ0 t¸Åøp‹®š¸m/#ð'–I¦²D£Õ|¥§¯ia~<´*#žÎÒ*Ÿ–æ+}ÒpÅ+æ\é¥Ïí¨ºê¢2”ÖmÍ úAùñÄC©œ`Z0|—VÃAyÁ¸ÒÑæ…Åãáqi5&Wӕ޾¦…ùñЪŒxxâ¡uåk8èSÓ´Ï®_¿Þ›s1HëÆ]=4Ö/5?’ß<‘äjZ<òã¡íŒü0MäuŠD£iAZ7Îë\ä« ‘î nû’×uÁ¼`<Zå%†Ã|Wn0O­¦»²5-šOžXh\Ù±ð¨Ìxiµåó•.Ñå³r‹<ïŸæ CÀ0 DG ªÎÉ5op:ÑR?Rå4/ÌwyÂh‚éñðÄC«åÄÃÓYZåÓ2Ã|¥£¯44x¦O§¾æ3MÃÑ|ÒªëJÚ ,–L ÆUxi•/(/WºXä+o<<.­†UN˜¯tôÃh4=ÚÎðtV¾–ô]yºÍ•ﲿêC%—ÆÂÝ iÚ–<ƒ i ³ûB0îÖ4˜ŒÇC«¼äÑp˜ïÊ †ãá £ÕtW¶¦EóÉ +;•/­–£üa¾Ò%ª|W/½oº:[Ø0 CÀHD¢蜔í,W';B—U¦®ZËKÒYÜØ‘ðdþèlr¼#[¢kËf[ò½ÞñšÜµHš4CÀ0 CÀ0¾Œ@TýË,Û'%8ùkiáÁDí+5[£…ÿÁ2¶F¦ñ†À–pÕ\&é˜Û’ÂbÝ ^3Ù–º­½»éoú†€!`†€!è$žÎ{™]R’¿½['üšïOüi¸kJ~«l5̃²È—¼в,C`gG@ÇqpÃ;;.ݽþlKkÏîÞŠ¦¿!`†€!`$* e «Á\W]çÍæÊY©‘oRgæbèˆQ2¨?’[Wp¨ÒKHèxR4ßÕV#»Ý( ÜšÙÒ܈òMq¤f£wQ¾ÄeežÆ¿¬Ðs3ßó–0“u[.yýÌv™‰Ú ¦—!ˆ´ÕDÔÎtŠ· ½kb,LFc†€!`†€!þ²t\,ÛŽ˜v0]Õæu¸lŸýñÃÿ» ï½÷.nûóe>øXÌ~}—ï­–Ëкšã‡}C\ÓH¬“J5¶“’ñØWã¾ÙódÃ|«A.Ö7 sOÓÄ`g˜¼ÊŸ”ì¯ÙÄ”¨š3 [Aß™[ßên†€!`ÛZAoµÎ¥¶IhFúøüü‡ßÇiOA妳0úWçá/w?Œ½¦ŒE¯t1Ì[š°rÉgøxñR$gäaÌØ±اÀ[A_¿f%ʪ›1tè`¤¥ÈçU*˰tå” ‰ºõKðæ«Ï ¹rÞÝ%™ÙÂ;fRk0ïƒyXµv#r‹úaüøñ(ÌÍô°¯¯­Âҥˑ׻Å} hõÓŠß–íb² CÀ0 CÀ0 CÀ0v2h½Ý३ޒœ^ùb ‹Ë-*Á؉{`SE¥˜î>ÝÛ/<¯q|jîºá×8ã»?LJËd뺸·^|W^wjx°Pºò3\zÑÅødõ¬\þny|!>ÿà%üþÊß`ö› QQZŠÇþõWÌüÉÕøè“E¸éÊáw7ÜõuÙÚe³ÛX<öò‡^œûÝuµ¿5Á‡ž†÷ÛÇ0™¹…¸ã¦[0f—âV%å!Aûó„vÅ-d†ÀN€€½ê³4²UÑ0 CÀ0v i Ë àÈJ^»î¹ ‹_z×ÿíïøÙuÿÄ7N>ÂiÕ²e(ë}N:f:ÄGza ¾vöwñÝÛ¡\ ó¬ìlÙÚ^îÚçÈÌÊ‘]é)Bœ‡Â‚BTçä£W^¶ÈkÆ+>ÁòŒtÌý%|úVë6ã#ÉY³aW^^ÑœyîLÿ9¦Èöv³Ï=hì!`†€!`†€!`†@!˜ºœ¢^U›…sg~ÇLŒüæUxmÞÇ(¯ªE~F¶wb{FnÒÓÄànué™È÷Íy*{SS’ÒR‘’êç§§g =•&5·¼×£®¡QŒw®°ÓÕ£¾¾GNˆ1£G#©©õCðλï£xÈ`ÿðv1ÈSR|YzhœÏk CÀØù°Câv¾6·†€!`†ÀöA ÞAw*̼³JP\R‚ƒGàÇ—ÿŠÞüÎüéŸP%Y•`ù ãyŸµ25âíÿþ©…ùÈÎJCjK Þøô3”×6xùk׮Ģ5•H‘•yùxkËQ]ç¿_d¢ °f}¸Cwˆý8‡L?cG@vZ¦·R^WUŽ÷Þz KWmÅsúºu¾µxó CÀ0 CÀ0 CÀ0 ­D ÁVÐiøÊî² þîûŸáÄò ¯zùFãšßÂà]÷ÄEÅpý¥gàOÿ¸ÇÎ˜ŽºûîDýª÷ñ­ËnÄS¯ÎGšp” ƒ†Y3qéeý°Ï¨Þxü¶`þ@£¬¬Ó ½Û4œxÎEH)ÿc'LÃӎ•ûÎÆÐi'àŽ_ÏDKåjÜ~ï ¸üª?áнvAù†˜2mn¼ÿ\pÊþbŸË!q¢çö>ÈÝÞûôºƒý1 Œ€]‹vpXñ†€!`†€!ÐcH(]·Mf÷ê‹Ûf=…A»”xÀÓl4f|:ï-¼±`‰¬ŒGŸy!^*×Þž”ì"Ì}o!¦MÚÕ£2n<üú xzÎËhÉ(ÂÿÞð_ü¨¾%½2¼ü'ÎÄ ‡aáÒuàö÷â¡#qñ7cü³±xùJ¤efáÇ—\Œ‰»úåg÷ꇧ}ƒvêñowËÜ/µuõ¾5bž!`;½Vï â­XCÀ0 CÀ0z,I²²Å~mFuò5{öl FÛÓ·%‘ÊñT 9˜­™ï›ËûázhÛü¬Z`™{‹üH ðéƒñH"º*MËjll”ï°/õÚ"##c»µEWÕÃäì<hŸ­©©AUUz÷îí]O4}çAbËšÆRÿXh¶”º}cªý7"[ãäOÓ·¯6Vš!·oÎ;¼N™2Åë³äÖ¹NtIFa†€!`l?îôH7L/M&…¼ÙªÓpr«qθތ½0 [s¥õ“ä 9GÓÜۮʕ“òòroò]]]í­¢4ÉIê¼ñ¥¥¥yÛZ¹õ±²²ùùù(++ó|Æ™^WWçš¼q644 33Ó;í9//Ï“ëÊç6Êôôtåçää ¢¢âKò³²²P__¿…|¦±l•OÈKãò©3uç¶M†™Æ<ÖQu!/O¤¦®Ô™º–&Ÿ:r‹¯ÊgX—HòY± Ê'VÌã‰Ék×®õx‹‹‹½öˆ$Ÿ«–”Ô_å3Ÿ+šª?åÇÛVÑäÇÚV±ô…`[Eë l3¶Û›í¶⃠íkamE|ܾÐQ[ÅÒÜ~ϾO[…É¥­tJýcé ÚVä‹E>û¼bɾ­/°¯År]`»Çmðº­/Ç•{ÝѾ@ÝÙØ/ÂúB¤¶Š4nU~¤ë‚‹%Û“ýRõ$?–¶ ·®üà5–7ŸH}Auq¯ é Še,}Aåë=‚8Äz ¥/ðú¼†«|½.Dj«x¯áamÕÙq¼G„ÉwÛ*¬/¸×`_`ß'_,òƒmï=‚8»ýÒ½ßÆ{ ^ÂÆmð®}×(îäáýó½÷ÞÃÞ{ïès2ÓÏ0 CÀ@‡:ñáDŠ?NÎysUŸ“zÆ9áâD.˜Ç8'J«„Mœ40Miè»2(›ù¤çDß•£º(¯êB=‚ò™ç–£qõ]“¥uuQZÊ׉~P'ÕE}å!e±>±Ê'½Ê§<òR^$HÇ:»ø'Hl+•¯rƒzs’C¬¯¶•Ö)ù*Wý |Õ[åS?¥Q_ËcëçöMSùJKŸytÑúB°êÄ:“¿3m¥º¨\õU7•ÖVn›:¦ÅÚV¤O„¾l+0+Š ýHmÅ4Ís}Åù..”Ïõ¦Ó:S'WoÊWZÕ›ô”OZW~—ñHò]•OŸòIïbéÒº}Xu"­Û‡UiS¥¥Þ*›¸ª¾äqiU†ê¤}ÌÅ4’.®|†]9*_±Õ¶RLƒ´*_}æÇ3n7Å4L¾¦Gj+Í bÉtêÏtíŸJKŸutõVü‰=]0/’|ÕÛ•ïbè–GÝï¨/(ª õpû‚êÉW^ê¤}AëHÞ?s†€!`†@w@ êwÐGŽé­žw‡Êôd—,Y‚!C†x“¦ž\O«›!`†€!ÐÕ¼ýöÛÞƒŠ©S§z‹(_¦tuY&Ï0 CÀØ¢® s‹ŸJÓñ†Æp$ŸùšÇ0òù±/ÿU9šãÞ0U–ú¤qå)¯ë+›Góƒ<Œ« ê‰ViÂüHºE’Lã–\® Ñç*F$ùä ÓI婯tÊ£éar5_ùÔ×ô Ï|:•§aúÊ«~¤4ÍS9Êï¦Sv$^/Qþ(¯ÒE¢ Êsã¤Wý;òƒr§‹T®Ÿ®›ækyn\ê#ãV_iÜR9š+¯ÒSò1¬išî–)-ÈëÆ]yšI>éÔ‘.R™Ì×t¥Õ4ú®|W†Ò¸i*GuqyItÑx]ya´šîÊÖ4út¼rEÝœ!`†€!èD5Ð#U@oxAŸ´š¦|Á¸¦»~¦«O7ìÆÝt }-3˜®ñ0ynºV¾XýH¼L£S~,¶¿Ê£¾+GÓÔJŒ”®iAßåí(Ï¥su «,7_ÓÔW™ú‘x•ÇÍÓ´ XÜå £Ñt—6XNX<O­[NOóÔWAºHñxh]ùú®<¾‡Í÷`ù^¬èn¾…»4”Ø–4Ðù^1·óýduÚ4N_ÓÔwÓ”NóÔwi4-èy5îòjZ$ÞHi.oX~$š`9aq—7H£å¹4nš›®¼‘ÒâቇVËTõ]4-èy5îúAÇ"_iÕwåZØ0 CÀèŽÄe ïL7@}jŸª¸«Ÿ:™†@4x¸ ts=®Fê 鎨] wêV¦!`†€!`lâ2йrtœ(uÅd‰²·F'‹Á ãÖÈk«“Èm–ßÖÈ b¦ñ­­³Ê1ßHTéAW¢bÔ]õj»Fv× ˜Þ†€!`†€!`$ qèÜÞø%×joíd-¢ì/žf@oµ  ’[ßaÛjYõ·¶Îq5®; [Ѭ˜Û† ›3 CÀ0 CÀèzb7ÐeBVUYÚú†ÖO·¤!O¶¯¦¥Êw¦E/¼µ´ð{´í‡ã¨ÊtÎé’ÄÈWzån‘Ðz¨Wéi·> à*³NÉ«ÆrŠÚê*T×Ôzº!9E¾ž‡Ì ÿóJZýÊ#s«á­˜Ç²’…·±¶ ‹>]Š~ƒF¢QÖ¯YƒäŒ\ô.Ì]Zë!üª—§+ù¼-Pvû ¿‡†ÔÙãóWè)ÇÓQÒT¯`=-n†ÀŽFÀ®O;º¬|CÀ0 CÀè©D5ÐÕmn¬Å£ÿø›;ƒöCœÐ\X²+N=ýTL=„ön«›,'û¶ÃEƒX¬rÉçÏO§Ì ûÂ#¥d78e¬Gäªþ7PÛ¥µ?`eÓØ•’ñÆsOປïÁ°±£ÑPU‰¤Œ"œôõ¯ã€i*{ÛÉiào¡\»ÑÌ<‘˜.©n.½àTüàÚgqX~îùËoÑkÚ™8ûø}¶¨GÛ$•†9ø]`·âí²ù@@8xÈŸ–¦:Ìzäô›°öØu˜—ÄE±Wó CÀHìÚ”­`:†€!`†@OD žõj¶4âã¹O¢¶ÿn8ûœocæÙ§cÕ+Wà¼_^‡/Êj„©}Õ»¢l36m.E“®˜'µ ©±õ²úî/Ëêssêjk½Õìæúj<}ûðü» P'< òi7ߨº¦lÚ¸¥ežb4Š#M¿Xò]НžñM|ç¼o¢oÒR²÷ÙX¸l­ÇG™Ïj«+±~ÃT×ÊçãDø €ºš*TT×¢¼¢ yEƒ…^.¤fbß#OÆÄÑ=9^=›¼psS#êê(ÇøPWS‰ "»ª¦®U¶'Ü[õoj¬GYi)*ªˆ•”U]Ž»z:Þ\´”VïÉჄ&ÔËL\qo{àqØCÀ0 CÀ0 CÀ0 žŒ@Ôt­¼˜²ÈÌëƒý÷Þ»#Éc𿼣§^ŒuWÿ޲PW± Ï>ñŸóºgˆœ´/Î:ã4”ôÎÁ‡¯ÍÆk˪ðõS¿Š^ò)ÒÒõKq÷½Ïà˜“OAõŠwñØcobXÖSøÙ‡¯aÔäpÎY'£æ‹Å¸õæÛðÉêMb´7à€#¿ŠSO8yþ·ÀU7±†‘š–Ž³;S'C¦d .¾ \7ËÖlÀ„aýeɺo¿ü,îº÷QÔ·ˆ!œQˆo|óì;i´P·`ữàöÛîÀæ–,ä5—âþ'6àÂ_ž”o^‡ôóŠ[¶èÌzáu 5 ó^œ…¤]Á÷Î:«æ½„¿ÞvꑎƔlœ~ö9˜¾ç8ï¡ÀÒEïáž݃ÏוÉRz:f|åxäU¯À‚êlÔyñ L9èHœuâXþÑ[¸î³pÞEa·a}¼2ù°Âœ!`†€!`†€!`†@ÏF ötÁ¡IV³«eØ3›k1ï7©PØú)¥9þÇqŽûúL\xþÙxûÎsqÕ­x+Ä›W,ÂÍÏÎE¿øŒÚšÍ¸ìâ?cCY5úŽÉ{ÂБc0ãÈ£±÷”ñ¨ÞônúÃåX›9 ¿¸ü üø‚3pÿõ—à™W?ðZ„+ß­¯º{q¾^^Q‰Ú¿ÁÍ $Ø·°ÀKXôæ|ÿgÄô“gâŠË/Çaã{ã‡ÿûG¬*¯GéêEøæÔƒPÓo¾ó­s1ãà…GŒiY—µm¼ôøÕxþ½¥žœš21Ü¿wn¸ï9ô9SÇ Á§ï¾„_^ñì}ôY¸üŠ_áø}Fà¢ýK6T£bÝçøþñSðyKœ÷íóqâŒiXºd%rú”`âî0r×ÝqÔ1Çb·C<ùUe¥¸îšPY#+óž´ÍBoÅ 3Ž˜ŒäÔtô4ûìw(Ҧ쉣?Ìãýäí§ñ³ëþ…ûg} ÉMMÈ-쇅exò¹×pÜ!SdZ,t1Ê}ׂŒ¬\<|Ý5Øt_´l½ž}w<ò&îR"$xeÖC¨:ƒ¡AöÞ— Ž7žº ?ýÒWÍEÅW¾_ýä»è—“‚¦‘Eøú1÷ÊVs>MHFï’ɨÏ㺼·sGÌ8¸âgØ}è/íÞk.ÁË%øáàþhllƩχ¯\„ù‹~†¾U ðZŸ30ïÒï£8?MhLÆa²E>¹±/ß[‚Ýö=‡8Å“Ã?Ã'î‹+f£°¿zN¬ø0œ!`‰‚€½~“(-az†€!`†@OC fo–÷È— Fÿ¾xò¯Çƒ¾IÆ{˜TVU¡9}vó b¦~Šqüø"ÔVÕyßoäqº,FgœºÎ•oºyïòN:MbµV]UáöÂ’>Àòy¯Êó4ïqÆî3NÞÏ.n;†+ßÝÆ¨q(Ðï½~7f¿´×Þ9™B×\W#ï~'cxv^{é9TÈûì)²2þÛknFIn >Z¿ÇvвýCÞªkëÐ’"Œ­ò›jÑØäëÙ(ïÇ÷ê_Œ¾½‹DqM”Ý‚)…-xãÕ9x¾¼BTkÀ¯ÿx†eaåòu8ã¨éè+ƹ¼Ó^ßЂô49)^ê[[Sƒ©3]³<„§ÈÊÍÇ ùÑé¡q^Äþ†€! D:$AT35 CÀ0 CÀèÖÄl ÓVm¨­ÂŠ“N<ûOz_Ÿ6¼y"~ÿ“o¢W~j7~„Uk6}LÊËÊðî’ÍH•Ïɱg¨¬3;Í·zSåÄôï6?Nƒ5;=Ó3ÎÉ–šŠ%«2p䉧aÂð¾²2Ý(§¬'£I¬ó]…o[ZNBc}-¾zü œxâqøêŒ=„îT\ô«?ã¾~#«âyHjØ„>#ǹßù²RäÐ:Ï NYõXðb-V|±b;ˉï@FZ*’Ä÷5£Ýœ*??æ/‡ÃÕŠÜt!JARK †ŒÇ7Ͻ@Þ%_¶ˆì&¬~¿|¼Ru¤K^:ítqMbð7Ë/-]^ȧ§Ë7 uòKÏÈD*˜3 CÀ0 CÀ0 CÀØ)ˆÃlAµlc¯¨©öÁû Ÿ„¿<1 ×\2SVªg¡%«Çy&Î:ý7xÿ“ØøÅ2ÜzÝU9í \ˆ¯`ÑgŸcñ’åžü¥ ^Ç93/ÁGK×{qþi¯e[’ CÀ0 CÀ0 CÀ0z)—‹ ÖIß/üüóÏ‘/Àõ‘÷¡[šñÙ§KQ0l&áí0ï;hŽØ{7üü§×bßÃgà€À|„kn¹/?÷$*‹&áÊŸ|%EyÈÎ-À <à¾1ËÖUʪzÆŒ?ûí¿úI~ï¾ýðþsâ–ÛÿÚÌB|è!Ø{ïéxùÑ[qÓ]áÍWžÃ¿ŠÃ?£‡Ê©ì­Nu]¹ä34¥õÂ{ME¦ìTÏ-€é'†‡®¾ y»íéÓÆA“FâŠK‚Wß›‡î¼ _4æcº7bÄPì: ?<ç|¼·xªåõ1SqÈôéØ' ‹?þ 9Åc1uìl^·ë+ë°ïû!?3Í3ž îØ~ýo/Ãs¯½ƒÇþýO,.KÆÁÓÂP9ïˆ}ÆãÁ;nÆË¯¿‡¸ ½Fí…C÷ßýû÷ÁSwþUN–ýc¯‰»aãÊOå{îÏàį‹âÞ¹^-ù w~¢­W¯^H•tZo/b B€}“;^øÚJvvv[_µ>›@ÔIU´ «««e7Tš÷£(Mï¤Xc3¶Ú7W®\éÝ?‹‹‹ÛÊÒ¼¶ †€!` €@’¼K¸Å­ûÞóìÙ³1xð`Œ3Æ{W¼¶Z¾á’†¬ÌtçýèT”ˉç)ÈËÉ’÷ÔëÀamc– Bn–l÷?~ކºj¬’Õñ”¬<ôë]è½Óž"ŸGK—-åte›P^Y‹œÜ<1Fe[º¤q[ýºõÐØ’Œ‚Â"äçåx鮞䭫­œÏ&A–l9—*µ®²×È»ì<9¾@¶àÓ•mڀͥHËÎAï¢Bd¶î9oiªÇêU«äliп¯èÜ„”Ô Ñ-52…jÇz7Ô×y‡Çefe!E¶½»zT”nÂÆÍeHËÌBQQodÉÖ~u•国rÓ³²QXXˆôT¾ïÞ‚ÒMå»éõÈëU€üÜl45Ô£V>)—!2t‹;¥K—zm‘‘‘±E™*ß|C ÐñP#ç+Tɹ|¸g®ç!°qãFdÉ5`´Í{^-­FÝ·oÎ;¼N™2Å볬›èݽ…MCÀ0z&¾eSÝ’•“ÓJÙâÝØôæ——ïÊŒñd1j‡ Ù&‘irôâiÙ6¢=O_Èn“Ó«H U-¢EÌ×$1vsP2XËmû¥+ Zÿmn×n8gÉûçYdk5Ú{õ®óÊOIGÉán²¦öYbÌÓ‘ŽïŒË3?.yƒoÓ¿@ô—Ÿë4/7¿ü©ÓôÑÅGOrD>Xä´ 4Êc¾!Ð`ÿåî¾*°¹î€^ï¬=»[Z CÀ0 C 1ˆÃ@÷ TVCŸ:»“5†5¾eUõ3abpGœ£GæóʆH<^Þ–…´šÔ%ocÕ›¾î:ue0ì?vh7ÒÛdj Ù®¬vrߨ÷ã*]sÍ7º4Ìýsگݫ¦m$xíÒv”oi†€!`†€!`G ªÎɘ:7즹énXi|_ õ-S5‰/RšÒýH´Á´`Ü•k^]X:ËË‹”¾eZ;ö±êêÒYØØ‘ÔË' ëêêG&err¦Ò ïªÌ Æ]Z i‚q¥£Ì Æã¡UÞX亴Z†¦…ùJçúa´š¤Õ 1ó91¦ëÈØQ9a~P> Œ®  Ê`9Á´°ø¶Ò)¹ª[gy”?šüxhµÜxx¶-e²Oñ0Cú›6m’Ï#Ê'¥ÿª ö9MäÇC‰?ZšÊFçæÇí[F¬a•¯~G|J£~G´š§´®¯×!GǶÕþæ++§#ZOp«ìXyÂäÓUv,:¹´Ê Æ•.ùÊ/­–¡üÑüm%_õpý¥‹–¬+ãìCÚo]]-l†€!`$"Q tDçniäÍŽN}/ÒúGÓÂ|—VÃa´š®tô5-̇VeÄ"×¥Õ24-ÌW:×£ÕôH´éééÞiɺbå¶…KÏ°Ê ó]ú0M‡VyÔE—VËÒ´0_éb‘­–×YåæÇ#?Z-7žmIKãmÀ€n×#í‡AŸU¦…Å]˜Âh‚éÛJ¾«‹†ƒeãJ¯NA9añD’ïê¢á0½5=^\b•Û‘|ÊÈÌÌÜâA¡Ê5ß0 CÀH4:4Ð9ñâ‰ìü¼ unW¥±È휀ótq]ãÓkÒsÅ«güÄ’ÒÒgœéÌç”?>Ñ&6š|–MšhòÃt “O]X§0ùÌ×ÕkêM>ó‰ ±á/L¾‹eP>ëÈÓ°ËÊʰ~ýz ¶¶ÖÓQ±d§Rù±`IúXõ']<òI»£ûB¼mìËam¥}9^ù]ÑbWñ¶é;ê [;n)›}AÇ屿»¾^HG§×åѱ®éƒº(ëSV¬òã­+ËÙ–òµß«þÄÒ½®ñQý‰#ÇyW_âWª¿êÔ_ï]cY'⬴ê“gGŒÛ`¿t¿Ò¾ì¶•ê­¾ê϶¢ëê¶rû‚Ž+¶_–±¶õ§Œ­í ª lsîòÅ_`РAöÇ0 CÀHd¢è ,ð&×ãÇÇÚµkåóaE(mý&wee¥÷Tš7^Þüycå÷qóòò<~NlóæÍÞgÅh`æææzÆ%o켡sâÁÏô”——{†§ÒR>¿¿NÔO½9 á2(Ÿºp -ËqåóÆÌ‰oÊ9rò|Gòyó¦l–Á0Ëä Õ…>⊊ OWêLÙ±È'ÔYå³.Ä,š|bCŒø©*Ò÷ äSs‚3ÃÄGå{æå+>®þœøÐqò¦mEìˆa$,ƒmETÊ'>Œ‡õêIÕ%ØVAùn[E’ì É×÷ŸÙÖ¾¦uUùÚ×´/°½vÛÊÕŸ:R–öÊçCöï –Ú—·¦­ˆQ˜|–Çñ”ÏjamÅtækÚ}ãŠ8â¯ã‹úsŒ²}ÂÆ-û¥¶ûei[¹ã6(Ÿýžm«|m«ÎÈg_Ðq˶b™n_ þ”϶â¸&æ·Ô?8n·l+Ž[•O~÷«øåsœ“Oûå)­{]Ó¾@}¨WP¾ÛVìãªØ5Üm+½.Ä3n‰Ÿö÷6nÝ{„^Ã#]¶f܆]Ãõº mëu!lÜû‚‹¥Þƒô®÷ö·¯'ÆÃî·a×m«H×ö-­k4ùÛâÎûm,}A¯ z g]ù©G.4|òÉ':t(‡…çØÍ†€!`‰ˆ@‡ßAŸ3gúöí ç:™äĉ7?Þܘ¦>+§aõySDË|:—Ÿi¤U>iU~$žxä‡ÑR~PGÆé´Ž±øaò#éíÊgÕ8[¾|9JJJ¼‰¹§€ý1 CÀ0 ¨ð^úòË/{“'OžìÝ×ɤs‘¨ŒÀ0 CÀØŽt¸‚Nc‘Oái¨ÒÑ t}/åòD!Û"{[ótFþ va$]¸ÂÅ•x®Êq¢±bÅŠ¶Õ[W÷a‚>¼Pß}@—VóÂhµ —'­æooùª‹úZ|©^®‰Vóƒú»´Ìc›q•Iå3Nùé»<šîSù5-ŒVóƒrµn‘Æ£e¹~­Ö!mO<´É׺»¾‹˧ãjm,º¨œH´ª³+ŸiÑh=äò‡ñ(]¼ò]¹ª?âñºÀ<Í&?R=‚º¨ü0Z-CˤßÚÎð¨n®Ô_åªß­æ)­ëkØÅ7¬®ŠEP—0ùLwòo­|-/(ŸqÖG¯_nyAžHyŠEVëàòD¢Õü >J«~P¾ò¹¾Òªäa½{÷öVÿ9—aÜœ!`†€!èth ó†Çmet¼1êÍ1Ñ+ÕSô#Þœ|pK#'TŒs«áý÷ß~ýúyÛQ9á`;©Ó6 úšÉÒj|ki•_å}Íwý Æ] k^˜¯t®¿5´l nå+Ç÷Ī<-CãA_ó]?H£q—&Vš ¤c¼vq ú!CÚv…ñ(/ý Æ] k^Ð×|×Òã.­†ƒ4×|úLãv÷Å‹c=öÀŒ3¼kf™3 CÀ0ïV¼Éq¨Î kšùÛ5¼‰;Ãü±M¸"ÀmzºrÖU¨|•ŒkúÖú‘ÛOX^X:õï(/¬~\9çä–¿âââ6±Êâc”ö…•ÒýÒc­ÿ¶ª˧AE#ŠïÉò=ààJÙ¶ÖQåÓ§ã8íÈ)}G4ayÊKŸ?öEöM¾kK½#§¼[K£ü±ÈSÚh~PV0?R~$nšvùÙ~¼¾òl,¦ýÊ5Ð]z7&Ó¥éL8¹Ѱ>¦+6 +Óü0ûs|§ùŒ¹áÖì¶ëj°_1‰^ùÔ…Fiãñ;’«õ' WùLÓë—Ò¨¯4ñ)cG9·ì`}ÙV¬/æ CÀ0 î„@T½;UfgЕ“®’ñÇ Wt<ÇI™˜ß“®í%õö&X¬‡„¥muaxÇM·D‚¸s]©ôtn%¡ÚÒ^¬;¶Ak5bòÚÚKZƯ«ÏÖžî>î:&Á b\ Ôva˜íã¶ i4žD#«å$" ëÅz³n¬³Û/™Ç]{»0-²Q¬ŸË“œÜb-‚¿?f•ÊÅZ ïvØ«þÄsË~Åëmûµ)ˆ¯‹¹‡»ôE^\:¦óÚtíx“žm¦~ìm”©qʦn}˜æ¯ ûõTG^Ãü²9N„†qII|8¡ÛgÝt<0lÎ0 CÀèN˜ÞZ«UWÒO“ÃãR“½æfNÔ»×a8)\ ÔƒÕõ'Z4@v|CµáNÏ›©ÊŠTª¬ÐŒoâKcI&ç>]üºS I®þ$KY±´)y’“ý£¤$™ 6Êç [غzV-«¶i¾^œÌÓ€Q-5Å_Íeº¯3·\ÇW>1Ó•ÊfÁQ „0ƒíÂxŠè‘*mã:âÓ"x4 .t^9\aœ™×DC×eˆ3L&9Å7j8þ(3èØ>4v[øA~ñ:âÂëáWú€Ä÷™§c‰Ø5Êz0-UêÊ–hlâ¦è}Óë{ŠÈ‰èˆ)’åKÙUâÕݧò°–ú±ü$¯OŠAJŒ%-.eÇ™èá/úz}ß«7û?VÙ½>‡LíWÚÉÊöã»ÜA=Ì_¯]_-+5M®Ï­:Ÿu4–Ý6"]бoFÔÁ½Vx×Ö¾BcUëãú’(ã$ÍL§óÚNú¯-Ò§Ó½~CƒwÛµ]°¾‰'‹ž¬?ÛÀëwÖ:uFžñ†€!`; 3Ðwò,×›pÈ$+™‰ ¢´ Õuþ7˜)’YY9¹ÈÍÎòòƒ“:N¾ü‰,W8É÷WV¶PGds¢£Î74æ6:ñaÍƹòÝ–8'JŒ«óh¹íé@eY)ªªk<£”b:êšœ’†¼ü<¤Š:¾ÁË ·ŸçëÀ ¯_'M'7Q“ú×¹²YÑÜÓeÑ1?¨7Óµ¾ ûBÉGüEïš:oâÎò9IÌws²sd"ÏþdÅúŠŽ^}X7)‹%{3,?•ïá'yœl7ÖÕà“bÅÚͶËXŒ2@0¦áßNOu|'kÒRQ¹y>Z¸• )·ûô+ÈC£2(R†Ò¶rHB[¹¢ƒbàçúš0_iDqÉ¢þؼq“|›½Éb€ðЩbt’®®¦BÒ«”ú%!KNMÎËÉöêK¬¥ÇÑoWˆe³/±ÞÕeøì“Q.çSŽ;Nê §/‹ìËž^ÔO¥¶°Ù;0@IDATÀôúÚJ¬_WéÕ›å°ÏóaV–¼Ÿž™žæ­®Éc¬Yö ~¶y½ûcìØÝ*»R¤¬ £L–ÔÁ£“¼4yPº~ >–o-7gaì˜QÈÍJ÷Ë‘|>0hi®ÇçŸ|„å«7aÈÈ]0tp1’ù0MÚs 'ôÁñG >úbÅR,þ|)rû ®»Œ@– m7êHœK7m÷Œë™-øçåx†y}m 6”•CÌ4ä÷*@V†ÿö/õõÖ²)³AÕ¾©»tüP_Òx¸JÝk«+±qãFÔÔ5xc![®Aù2n‰KSSƒ6ê5¿-ü¾Â¡ò=yò‡õöëì¤ðê˜^Ãø0¦bóZ|òég¨G6vŸ0ÙéM˜÷Á”V7bäè1ЧÐ{ãµ¥ŽCés^¼uu˜uÒq¿ ?å6ÖÕbÓÆ hhj‘ëRr¤Yªò2”WV"-#ùò]òÔ>¼óÇðÚ5¥=jå:ŒìÜ<ôÊ÷pñ„{uðÏz©¯©Â† ;-þƒ-›çæå#]®'‘¬ðšÁøã>ÀŠu›P9h¤!CƒF<®Òhk‘ [†–UA™«±<¦7ÈŠ“¿ŠÊ÷õýš7ÉdSWOY×Ô” © ¿ÚBZîÔ)[èÍ"¹Ùú*E,Ñ;¥¥ó_×Üú Ī%Ÿ"µ &ŒÇ¤){`ïiS=ã’ºèNbK‹=]ðd˜“~…Š‚éZP/S1½I&ί<ö/\wï3øÅnÇð!oÑ[&ðÔ›mã½_)úÔÉ$šÛŠM+qí¹ßÁ’wÏ“Ï`@ïB¤K:'Æ\¹óÎø!ØŽ:õðƒBL<¯zÔ„Ž+wº€´¤k©-ËÒïþ~ïÓ°ë¸è‚ï`ÒèÁhn¨Ásgã†ÿŽêŒ"œ{áE8l¿iHjd}RÅÀ |ßQ®®rQ®‡ƒ”Ÿ)tÕ†Uøû7fb¶þãÑç0 (ßÓÃí‡äid?dŸÐzIö0)]³×^{ 66䣡|Ö–Öaìøñ;awì³Ï>3bˆàÒŒ%¾† üpʹ¸RŒ¸1‚ÚVI[•õVäD_>ä`ØïY‹e^½<!ϦUKðÍo/Z‹ç^¼ ýûd{_ÁhôÒ¸o¾ø ~sýøÅŸÿ&'i’´F$K½Óåç»öqÒšà¯pz4IXõÉ||û{?Åžgÿ×]8¹éþ¸¤¼& ©oÎ~ ÿê÷¸ôÊqÒû¡0?«/Ã;oÖã¿ø&îRìõ‘i,›IT$¦ÍÈþÓyoâß?‹1S¦ã„£§Ë8c?kð*®¯¡¤ˆ!ºrñBÌ~ú)\}Ãíª2>þè»øŸSŽEcé*ÜuÛ­H±'N=þHd¡FŒA>ÜÉÐëŠp²MõÚÁ~F½Ø\ý%¾Ä}˜xR]ºdî”ÝY™éX¿ä}|cæy’:Ͼt;²Rêq×ÏÆS2n¼ç :Mb`ó¡œqÌgx×?÷l_Ig9|§ß_2ëùÂ×-UVÎ7Šxç×âöw+ñ÷ßÿ{O)ׇz|ôÖqöE?Á7/¾3O;Žs°zùçxùùçðØcá­Ë<}Ó‡LÀ¿=Ç1…YbÀ{«Ò4”SñŪñ׿ވ•r]ª”>[VåòeôÛ÷Ýz9¦ŒæÕã\ûÛ«E®|òÚ÷áw?ïþêFŒ5˼ ~|%Ž;ïWøÙ·!_ÚÊ}ÀÄkè†ÕKñÂsÏàÞ[®ÃG›<½?§w ¾óÍÓ‡J!Ö |……Eb0p募JõVÇÖqõMf;éY((,CÞ$·¢¼Ô[MÊ–o´'‹R^V‡Œ¬ldgùò7¬+•I½¨²ªìË•I©L†i0ªc}êªÊñƇ ëpæY_A~N*dU½PV~¤ž¥5²; ¢[©œ¤žšž)SÁ&”IÒ2¹2*é›Ë‘’–\Y¹mÃpýºõ¨­ó'ã½Dïl©·gÖס¼¦T&€ò}yÙmPUQŠF¤Êê—<•ëÊ=C%5CV]3³d"/+e®ógí¨ªÜ„… bacΚ~ª×-ÿï¼Ýûqáÿâü³NFQN*e…­A ŸœÜYo–“àke¥Jv9ˆÁQSS#§EË*•ÈL—:åÈÊs'µÞûÈSñëqb·1ƒdÂÙ‚jY¥«–UÊL©oª¬à— FBè­bÑy@pþ_®ÁæÚô/Èñ ¨¬¨¶“bürµ¬¬¼Rp”•3+E…½¤OsÛ´šk~¶ýã³ßòŽþêi˜“Šþó_˜õÄÃÀÐqÏõ¿ÀÔ݆bȘ=qÕ•¿Cañ`dJ==,šê°qý&¯ß¦HÿÏ”öÏ’þ+f`)cFŒ¼†nÝæjc–ôµou›ò0)qé½=£mÃÚ5(—•ìO¹9éÂÙ]‘ëéÄ>L­ùà†ÏÚuëP+YÒd|ÉCÉçÃ$…uRïR¶YV&ê¤Ñõ‘•[ÖSkNßR-²‹b I°Iú ¥ éóÔý—ÞÅrI¯«ÿ>/žì¦†:¬ÜëeL¦¤¦£WA¡¬®ËÊ¿<Ë>›‡»ï½{–àÀ}'!?;Ã[æ#z”]¹qþ}Ó¯ñ÷'ßÇQ_?Ó÷æšM¸ïw¿Æ W=&†è¡hXÿnºGpV.röB®\;¨{ƒ¬—J߯o5úÓå:”+«ÏéRgö—òJé·b|fËø¬«)Ce•ŒÿÜ|pŒzúÊ®é·ë»ti£JÁzw±mçÕ ðû’ßw””ôÒĸ/ß¼IV¿7!'¿Pú~6jª¤|w¬7¯W4|›D^¥ìà`¹lW}C yjƒxɓωòò_lQÏ8”gn²cƒnÁ²õ^®)[‡‡îø ®¿ë?^úÌó/Æ ¢ Ü{åÕøý/nÃ~û¹Ò'v„h*F¯Ô‹.?Ëß’ïE¼?4ˆEž`:ë¾›ñ»[Ť'áªÃ÷GZK-^ûÏ_Ä`ÿN:þh±7ᪿÜêqtèaè—#FµôóL¹Ÿ4ȵdãúÒÖ¾“áݸ;…mS-z×ËXg›&ËØ.“qËëïò Ì÷•r=oIâÕ Ô”Ux÷©¼^…ÈËÎô˜°ï7ÕËØ2j¥¤Êµc#CÈðÁ wÞ#6l”‡Írml è2%_û™9CÀ0 C »!`z7k1]mäªw³¬ºLÞÿp1fs±èÙ¹ø°ðpœ3ó5¬Ø3¸>^ðyøQ¼=_ ßÌB1¢†ÉwÔËpÈÉgâ˜÷ÄŠ_Æ-w>€âÑ‘Ý\޹sßDsNŽ>áT=ã@d§bÅç‹ðÌSOà?Ï<ƒ?[…}9 Gs,Ž˜¾?²[ê0ç¡à™ù뼉wóæexwu¾wþLUmÀS<€ûš…e«×`ø„i8éä“q„È-ÊÍðŒú4™¼ÑíyÂ8íôSÐ;_ |™<§Ë6Ý^¢Çü×fãÆ;îÇÔƒŽ@¿¬f¼òÆû8åç!«| þuïƒ6ù` ÎoÁ‹¯¾‹“g^€=GõÅËÏ>އŸ…—澃ác&ã+G‰cŽþ F )ƺ%âÖ[nAò€q²š8¼ñ2Fî{,öß}Þzñ?xòÙÿb“<Üøø³¥8ãüŸà[g Žr¼U6_oÏ$j3¸Î<ú(œ{ú‰²JÕŒ¯~~ù½Ÿãî~‹©S&áð=Gü?{_XÕ‘½ÿÅC”"Ä’`ÁÝ¥”*´”ºën…ê¶»¿êv»Ôw»ÝÊÒ­ëÖ¨ ¥´X±â-î® Iˆäÿ}sß$GP¡Ðÿx¹÷Î9óÜsfΜÁÔñïbÜ7Ëqê©P‘¿?®-Ãõ×]€ó§àÚ¿<€&iÍÑñ©-1hè0 ;a Ó"º{fΚ‹¸¦mÉ„‹fƒ×>šŒÌ¬öØW¸“ïæ#2)gŒ:§ îMÆ»›¸’¿rg:tïNÍ×"|öîËX°6­3Ó°eÕ,Z½ m:÷ÁùçžNmZ¢,¾›ü5>?k6ìBzë6ˆå¤BâqÉe¢u³NæP"ñp»š\ im`× _LÁH®Ô–oZŽ÷gæ!95 [7o2ZZ,ÊÙ‚Éß0ýÏ?ô9‹‘Ñ®N>§ ŒfÉñ@ 0æ|ðá'X¿#ßLÂìZ¾›)'¼µ‡wÓêÅøâÓññ'Ÿagy²ÚwÅ9ç‡A½» "4І þQÍHèoÁëÚ”ž¸à’ËЙ+ŠgŸyÞ{ë%¼2Ž~Ú‡ýäB¦_‰Esf£i—@téÚ%{²1å› øfÒ4lزkV®E—agãž;oCjx^û÷Ãxæ­ hÞ²Â8ÉѲU[–e8ôèhêÇ@”ÏIšWÇbÕ²Å(ÜŠGœsÎ8ÑZ­53pµj€¼íë0aü÷Þ'X½išwè‰3GŽÄÉ'¢æ@vlY‹¯>ù¦ÎFE5W»53F  :SRóh«Æ<sòF.À rƒªPÊíMè½¾¤™LÐêiޮ͘üõx|þÕxÌœ·m;õĉ§‰s†Ÿ€¼uóñäýO1©¨Þ9‘¼—œ;†ªH¿Ô¸svlÄ7Î95„¾½z¡_ïÎfrmà °#;ù[W㣙‚Ñ!:÷üñTd½ ·]q–Ný£ï}©M›£!Û~BÛþ‰§à”¡ýQ-!ÿµWØŽ÷¡]ËD,_´k©*Þ¾û@\pî(¶Éd”°ÝN›ô>þt²óK)P‡bq9³Jä„“pÖ/ÀW&}ñ!>ye3–¬ØˆCNÇ•—œ¿üÍxq쓨Lì‰ë¯¾Í“aå²¹øÏ³Ï#¦M?\séùhélÀÂ[“21›s¶S@-Caa™$°.Ç-%ÔÌX»l‘G8OÂcÏ>„ÁÄ¥Aöë…ËÖ™­ jêK†TÆU›íÉ>^Ø]~%Z%Å;Ú4Ä%´®ýa:îøãµØÖŒt…">>{öÙ#NEÓ¸Hâ±ßÏ™ƒ jùŽÐ/šä˜U“&ˆÑ¶aø)>6þûôæ¤A?j[„a𠸌Xï-Ù…÷?þŸyß¡SWüëîÑhÞ÷Ýq#’#÷àK¶Ë/¾ú ³,GV—>vêé8íä9ßÇ{œlhÖ2%Ù›0}ö<4mÛgŸ{†ôc?ËÙˆ7_}ÛŠ‚Þ$ó¿ŸE{9ö Ç9#OG:ë"gû&¶Ï/ðáÇŸaþòÍœì‚ÓÎ8 §Sû Il$Ö-_„?ü³,AU'hýTùšó´+ìæÑýã"à"à"à"à"pÜ!à èÇ]•íO°Tœõ+–w^¥¹&¿uã üçî+0a-Ðe°#xÎþøiÌÙd .Î%yÙøâ›ÉCON†/_LœFai1:P¸ Ž®ÆÛO߉—ƯÀp®Ž<7o=ô8îô%‚þû6NêÜ ;VNÇ”ñKùûÈ!¬å ¸`×VÌ™õ)þöÄk¸õ¾GÑ¥y#|þúƒøû]· 4ò5œqÕž)<ˆ1µN+¹róÏ£°RŽÈÍÉE§¾'ã´!ÝP˜³ ßÍšm~6ÎIç\‚ŠœøâÛi€~7päÙ˜;cnºs ÛwÞs/6,œ‚±ÿzërËñÀ-WPÕµo>‰1&á-O¼á1éÈ];ÏŒ}‡_†k/ë¢ë0e᳚Dæ{§=´3èÇ• ¹Ž®dšÏ½h(ž|ë¬[»%“°sóR|?ýkþ¾ò$‘Ë/? ûü‚qÍu7q…¼9vsÏèƒÿ|“&|Šä&¢OFclY6_}9íœ] Uß|;ÑüNq&Õ¨`â·_aÆæjtéÜQû*ñÙc±˜¹œ}ñ…@Ã`¬Yô1¾œÌÕí&­1²O;n]ŽO¸ê‘Ðmš§`Å¢ïpÓÿýÍÐuÑ•Dö`ìËï˜çQ†¤o„åâöµ2/—‡í‹¿Ä„ ]Pµm‰ñ‹Ž *6ïü)XHõtÆWãpÇÏPóx0î½ï>,™þ)žzä>l+¸¹æ\ìX±WÞp‡‰{ÎÅW¡qX5>›ó=ŸK¸JdÊüü˜Qxopÿ?žAZðüí£qÇ´¯ðÂ;Ÿ¢o§V9E›}±8cø‰X9wn»›í¦ýPŒ¹úF„Wâƒ>Ån®`'±M6ˆi‚?Ýõ7¤ÆE`å¢ûÚëøxS ¦d¶0³iÒ?NCQ»‹Ñº^{ë},^4)é-prÏæF Bdi嵌Ú_¾3Œý7Ýýþœ™€ o?‡îý½‰Óû´ÆäßÀCO½ 4éŒëGõç¾âUX jÊ©‡ý0c÷€~³¦}‰¼ ‹¸B„=9»0¿D!µÝ€+\ñüɸ럯"³Ïi¸çÞ‘X4ù}üûÁ;)Ô>޾™1è<¨3V½U-ÒÐF Öd«ìÕ„G!Ž›ª‹9!÷.Ö.ÔÔT¤7o‰YmQ–» "14Wº¹Å¹wÓ¸U#žéHÈÂGßʽôM±sÃj<ò¯gñÍøOÐâóÉȈ݇ÅSßÄDÎ-.ãÄAçæM°vâ,[¼qim‘%ó¦àõqºË¸µ ¸<ßÏ›Gõ ãeþøsk…ÜÖ¹ÈLKÇΕ“ñþ+O!.% #zµ„á|2q† Œ¦ñX2÷[|9u.ìt ûr':I´–·éœ2Sí;r{ßO‰¦6ü^ÖËzã'uó}ÜwïÞaž{ž{ºu逘Hjp89½7ijV޵z®¤í8¨ýô妎–`Ú7±*&Šö Ð8½5†ìev>ã2\ѱ3ªKrðå¸G1ö‰)ˆ¦öÇE'÷Æ®µ?àÓO?A|Ö 8©Om±é‚ô‡š( ¢6Gb ØX‰Ÿ„ÜÍ+¹í"¿ttèØÁÜ2A¹u»ö`@÷Nhž™ ¿Š"Leø{‹VýNgÛ……“ÞÇcîBÁ¾ÇqýÙÔ$âÄâ„ ã ËpÙ'¢}›føä«1ye&¼Þ ÑÜN4õ•w°”i>}$mMdáÇWÞÀ KD£&i8ïÄÎøfÜó¸ïé÷qÝÿý7ÿ9“>| ßÿgjE¼‰¡“ñþócðÒKЦ×I8±g+¬^ð¡Õýã"à"à"à"à"p¼#àp/Ç{)þ¿¢ßam‘º¶TƇ³·¼š*…[7­1ÂyJ߸ï®?##1M‚+1çñç¸ÂJ&+`ž•¶gƽ·_ÿÒ­(]w&qµµ+oÛ‹ópŽgâJ®Ì·O‹Ejtþø—G0iúôm“‚FI™Ìy)n½çQ ê•eŒÓí&£÷…sJÇhØ À¬nÆ$¶äó,\¸§ ì†P®Šzã"9Æí[;¯òg]xJ'³ç<”«•r#.»dV颩¹"G,0ìÂѸò¬¡ˆ¥A±Ê’=÷ü#Æÿ·]‹áC{cc÷6XóÅw˜ðÚ?qõE#јƜÚ0ÄòŽ'á™ÑÓ¨R ÕåàO?jâ5å>Yÿ d´ï޶Ý!)&Âì…­e{…xm]ho¬Œ)•–pO}p8çD“N™ui%GÇ8Ï·ýõa Òj+ãÆ'& >²ì­ÈËÝJ‚Ð#3sVskB!ãÇQe=Á¤N!K.$ŒÒ)ݹ×ßÛ¯:¹[–`ÅwcóªÝT)/AtD Zö ¦ÆÕ¥¹Ú'µÜ˜ø,ƘŒÇþ~/Nê‘…¹½Úàê;ÆPm¸4(¶~•ƒáM÷>ŽKÏ>U»×`éôw0mU_³Ê+áÜ#ž(ks+yr£Î¿ÛVÍÆ¿‘ ‚kn¼%i¨n#·P0¤Úû̉/™°Oýe4†õê€M›ã£I—cÜg³q>‹mk–›÷—Þr®¿ô\`Ïlœø2¶¬/  ;…¿õ+ŒpÞ¸ûPª¡ûõ×´Ý0û›yX¾qz´Ï4Fêìê´IŒÌàÆ-Ú·ZZRÂeèjĵ^ ˜«»RëÖ6 ¹Ö‰±œu¨ÂÎ-ÍsŸÔFDÎ ©-pãíÿ‡Ô¤8j à„“ÏàÊp.U{wÁŸõlíb m¡\5ŠÎ­GàJ Œ© ÂÉŠÿûV¯ÞˆÁ]šR-™¢ ôG6óOáh†˜0ªuS%8*ŽûÒÙŸV,]nÍ"0u,…sî~æá»1´wfOøïòePÕlmû«½cpD&¡q×êåÔB A Õö±’jêì{ÔøäŸ¯2pn¹á 8íн… é×áßLÄð©÷aW;ߣ€Þ¬]?ÜzÓˆ šµ¶ÈHý[ªß¢7>%7?û8¼þÌœ2Ñü˜¨qßxF_y6οò¼òé$ä6m«F߀æ‰2ÖVÉÉ·þˆ£vM®iE¾[3`ÞzNBÑÈ õ¿Ñ¤E{vÐÅø¿;ïD¯VièÛ*zø9j9Ð [þn#L+£ÛÇ<‰KÎ:9kæbâëï`C6·mHòå¯zo©¡åœK.ǰm0¿‹ÿøgLY´œ[ƒúठÀ{³ïÂ¥«Õ$?Ìùšá›m”(jfìÙãØâ0‰Ø?äÖ,^ˆUì÷´¯Îv$Åe©qÅqúGJbc[  6P¹Qå÷3ûÞCP/5m…7ƒ±"ƒíNÊ©ÀØ'ÿ)ãÚž~z÷í…ÔÌNé‰<ªƒïÜS…ØÔþÔ矄<»Í(:΄f}Ë©×ZWÛ>´²®=ëœådÓ%£Ÿgz7cò‚™XÆŸuGý÷ßþ ?÷Ìú¶­ ÿa4ºg¦`ûÆåxûïc4·\϶ӣ-ºe&á‹×ãÅW¦àÜ¡=Ö°±Iê²?]‡[.üÍ+P±ö;Œ_ó5v츅c^ZöÃÒYÀ5×^ÎÍâiÇ"£ïü6o^‡Õë£ñ-…sîGA4Uôe¤At“æk× %´ã(œ#µþvßÈJ‹ÁçoVaüw ©‰àÔ… ìþqpppp8pôã®Ò¼Ù.2tT!Ö>q‡%‘qf#ó\É•T¹VMS‘’ÜaAÜkîa\ÃZdàÈlË…p?o¤,‡ÄѨ=ÖÊpõxT“9Žá~æîóŒ‹Wî¿äþõ* 4û¸oR.9µÚ¶iK¡h/Š·¬tVô¹p6wÚטV¹qC1ìäS‘EãTb¢–mô§ð$×iÄõxøFª–F;*î!Tq’J-…)¹ÆñÉh•ÙŠ:™6|â^cãOÁ¦ U³£¹¯sçúU(ݶ’Þ­×(ÖìÝ¢`Ö´k#ÌϽÅÜÃ-ŒXƒÌÌ6h‘Öˆkιô*lÜò#>~ã9þLÒ†¡¿ô‚‘ˆ `QËö:õ`K -í'Ö~ÙÜ=;±iË9,ŒÖ‰»ökÊ¥¦§#³Ukpw%ò²·bUHÇ<ù2š¶î‚¸\UlÂIYy‰‘–³Ç6ɪ²\SgÜcNF¸Ÿ7ƒû9I’„ÔJÚ3‚5 ¬(—°®†ErU0 œ:$¬Tgz°MMiŠÆÜ÷šOµÓŠ|Å t†qÊè”W¾rF®à5£ud$âCíMêþ½{`Ãü& 5 Yoå(£ñ8‰Ë‰ V‚CÃuÝ8ß2e)-/ ðè´¡Œ ªîÒÒöžâí°²/%,”°­Éå`U²÷ò9<"'žœ@uZªÚ“HQçÐi‚š'Cq¨Œ~™ý÷{ia>›‚µA8³ U޹˜–\~Q1WüCÑ[(Ξ?ã¾|{qß3ïúŸv1n}ʇ7ÿûÞül:zJõ|š?5VÌQ{¤Ã´FjQhÏz'‹šx°–@ên4¶Œ†Òq}æS»b›¥Ž+;áÄÓжEûW)6¨w胦é©Tán`Œk‰¨ýkcÿgc8aN:ûj\pÚÄD‡b=Ý1—^¹’Íáíª¦…¶è…¸¸FÜSÌýÁ\!ïÖ˜Æ º½ÄEÆëäcj´aAí½Üvb°V`ÝTÑfA§¾ÃðÒԮشi¶oÛF™z!^|ó}¼ùôÜî1IÜW/WÉ•{í[oÀ}û;7oÁøߣϾŽYÝÐ¥m‹ Æñ‹c°,Þf<46EÓòy\¢VâYÏ€«h×¢,Oz@3Ž=±ÑÈç䇳ÿa.§<Ãi ½1ÕÂå–ñô…}´ÝЬE+(Õ×'|¸Ê-x{ê. ¥æI³ä83‰`úþ ‹{ªsM7ÞùúvnA,9ñùí—¸†ùü®1Öçç`·fÝcQ?ûÞ­Æî}§¡ îµ—m‡ZZ%8Wå(é–xá#ƒ“Bå´OÌ1$‚-kÁÌIxàæ»±¡A*FœÔÝ­ mŒü‘F«Õ¢Io'òksñÜ1ß*êå·ÈêG^˜€MÜ’²u·šÛ2>ñuLýà¿X2êTt澈èT&°ÙÑD a[¯¦­‘5Ê m'ÓvBØvbØvú¤3·Ðvña?¹ÀÀs¢…?ÇᤦôPD¾“¦A9í9È;QшOp&1÷1ýÂîa—Œ_ê‡ÙÓ§Pk„í‘mgØ ÃЕ%Ôóá„f×Ö\ñO¢ýÚ9á{ÇùT˜Ç×½¸¸¸¸¸/8\ÄñB­KçÈp ½9¬‰ïit‰K¶a\!–ûvÊ,:ý¤ÇaÆ ÆO̯86gõ†ªÈd´ÍQ:T¹ –½Ý0™AþNª“XƒÑ»ó‘€;v™4$Ôq5HL§œŒ'‰™ÜG‰#ˆF‹ŒË­Ä)g_Š­©ÚËîe=çê»pÎU•Üÿ½_½7ã¿xûôBâ¾ F8ï4r4½ýb”æ¬Æ;oÀºp2VId/ôô§Ý»¶cÕ#Ê ŒB¦œ•¿ö‡reÐq8iä%èÔŽ*מ~RI:‚Êð¸îÇUÄnšÇÑÂ= ÆÉI;Âqµõcï”¶\$…ž¸øx4¢6H!·D‹L Fì´ì"ÁHçãÖµS±c{J›%jÓÖÒ3 –šT2Ó ìå4àUÊ#ádØNzì½lÎêGë—ÍÁô7s…·?²:uCûŽUH‹ÇkÐ+iC€à˜vÊTÙÑ8!SRʾVŽ-Vá¡ðè?C“ J<¿ó3ÌÛ\T3.™¤0ÎcÚØveSNm\0ƒ#´bLl¶mÁî¼–4îF£o @«õÖxö Kh,¤M‰MëœúèÌIM<$¦¤ã¢ NÄÓoOÄ?~˜d¢ ëß1¡fRP)?9á«:Ò4@…ÒX • f’°‘gû‹&büiÌ,!1UQðÃç¯àÛžíiÓ£mip ¦þé Vã„SG˜“)¤…P㘶Ó"¢¨zžÄ­‰;KËç _¿DáœD<øèœÜ§&}ñOí˜fÆC'·ÙÈÙ±Â^¥íà” &'c 0Û*|öÍ÷èÖw0·´7'´LÃê9¯cÃl,±ÆÅ 3£h´PJ8©TM[Ò>š±ì[®†fÛI0GìÍÜBÏ”öù Ï„±ÆŒ“6ûê¢o•? ar²Ä߃žO€ æçfcýê• Àv‰Fl»~f²¢ §<=;PK†Û¢rvnÇÞ`øãv¹9«6cÇ•ñ4*Êír„Ñu.....Ç5®€~œUŸ˜.íy”ªdWɧ~1×Ýù §“qÖéëhLíŸè–ÑWï‚—?›Eãeg!)µ Š7o7á$˜‰cÛKæKnýž2ÃÔIlÞ³Æ #›`‰ÍšâÚ3:â¹O¾ÄK/ÇS¸ŠÁûýËÄÒ¯3s…  {•yÖ¤€# Óñi-pÎÎÂcÏȽÌÿÃéCzRˆ,ÁøÞE×3oAV;íöpg&6Wü)\ËÍýà)Ü@ÆO–šçÐàÑ©W߆?_u‘Y™×ûÂÒÌ|,ó)«äryôªówÃ6B÷.ÅËÂÿ=ýr6/Ãæ%ÓÍÑc§^qRãcP´v³G™«…žÅW”ìÆ+Osot@;œz_£J½Á¤žÆž•Zóhþˆ ä*WeåÞ}æIlZ4Û—MÇg·ÿýItnÛŒ{Ry2· ÈI­ÚÐÎè:"ÈIe=æÎžIWyxaÂj®Ücuª¼Ôa:e _Næå Ju´—…3>?PõXš ûý½ñ`]c2ô…¹ËŒG%ëFꟲT-·q{.âкcO>½‚wŸ{ï¾øµ(‚axcªt;+|¢’ÎJ€Ì§¬$Ïxвv<ŽºñÏ÷š3 ÷•æÐvÀ:Ï»2D5J@¯¡—àӟ­>ƒ£úbÙ¬/ÌûóNë…ô´¦TéM7Ï/>~ÙG[U´ßn“WWß«¹ý 5.Üÿ›ü%^#œÙ:`ëê¥GŸÄ­Ï¿Ì–ÄXðˆ>þD­¥õ¼"wó74ô/Çìù”:èúŒ¸‚Çõgû âd‰³Š·§LÇl•aÚ„·ð×WÖÓÒö9dí”ÔA婸SÈ—[´f%¦M™Œëšgü¸ËL&)OzîÛxãUnµÈß„wxL7£;÷ÉS=¿ˆ§È”–stN}f?ó.þóò[Á­a¤óó·_BÏ îÃe§vÁàˇ`Þ«“ðèÃ`JV*Ïoâçr;ƒÚ³ý@žV +/u„ø†ÑdVeU¬9q·\øP -¯Ø‹¨˜xœ~ÇU˜ñøKxjì󨼢#m|¦¸òöAfe4ƒ#è~DãŒAå;¸`Jã~' E$'Áªx4–V‹+Ë 0æþ{L¼QçòX.3Û¸b…s`àç 9Ï£®Ø–O%}¶Ãoÿ‡—"Ëжko4oÈ 0Àê²E˜3s:‚гñÚT‡nDzy5ò·™4[\ÔÖ«Œ&°+¯!‘ÑÈìØxkâø·’vò7®rð/ Ê<éÓä@Áîņ¶qï¼#ðÂK¯™çÓõ¥Ì`£õÒ½ß t¹ÖÎA{ÚƒÐé{ù\ƒ/“³ãKÎ<§íë¨8M’é„Ò#ÅbW~­»ûÑ(eÜÍ­3>ó&¹÷6|5~(‹Ä8BDâ :e„i§¦J”ÒZr¨]`&ñttb…´„ˆ5MšRâ߈ÔP ?|û‰£áQÄ ?͹Vz,É—ðÔ 9Yè—ÛSÂ÷æÎù£ FSn{xøá‡èùN1Іע¸Åƒ[£ÔMzŒ¤1ÍDP[ Ú4ƒ xõ…g1#£-N2çÞ#fÜÿ4žúÏóØ´¬~œÆrÑýñòfâk­grgöô x*w9'G¿Â|¾tÞh4MM@uáìuæ[ðÁ[¯âóª"ûüHI sÇŽhÑ4 Ãn<3Ÿ~ÏÓ˜\6'8"CªñùóGßþá=30ªðÁì‰xpŒµ "0áÝM|sž»îªw¹ÍK÷‹€‹€‹€‹€‹Àq€@Àýt¾tZ¦dݺuT-Œ¦ÚicÄúû†wŸ=„¹„Î|ªd6jÔˆŒ[V®\¤ä®pìãQHËPT€ƒO cÓ–ê„Ahݾ#ÚµmEƒ>íѲ þtíE ˽‘†EËÖ`òtÈH§…ð]ÜžÝ{£KV-CWÒS%B’3Ñ­kW´ ZmZ‹vHˆ Çó¾Ç¬9?"½W\wË8¡oW®öTòx¨B5HF¿^=Ð4¹±Yu iIë½­ii9…êæË1í»X¾r-"SZcð þHO‰3‚¤Aå“ÊmøâÉâèÔ½â¨fÍc¸’â"¹yktn×{‹÷ÐÂøfô0­[¤R­“Ó ä¾öp奰¸»÷AVf:ÓâDW’RÑVË+ÉpN›1 ùUa8ï’«pÉÙ§F´ˆ{X«Šw£SïnèÚ¡-UãC)Ôquž«u?PX^¸`–®ÞBãXÃpË<ç»u3¦Mœ˜ò÷äOüµ¼×¿zðÌsٙ֌GÐøÕÍܧ+÷í%nؽ»9¡¬§~HiÂòsR œûê³Z$›•¿e+Ö!<6zvDt|s³bŸÜ89ÔØ˜W…AƒS؉C>}eï)F÷ž}‘Õ**ÇÅ(*ËELûèG"ÉLçùW 4! ôæÞæ@SÄI‰\åìƒNNRÐܹcºuï‰,¶“¤¤dôíÑ-Z´@Ÿ~}ѳ[ì˜7»«i¬éü¡H Ådù¥ ÃãŒWºy¼QI8úõïƒ4Zb¢¹,¶kÂ$'·yU1èÛ»;𥧱­¦¡­nWnYŽ©Óf£,0_yÎ>ñ¨¾KõßÖMÌ n uAÚ¶ëˆníIWFtéÒMS’iµ¾7Ò¸Ÿw=-77c&Ö±-´è{¢±ŠÝ$¶!…$n­ ê°Ôeu$^iQ>55ö!³]g$RÕ<4²!ú²í\pÉ•¸hÔiHåQ„²Õ°'–Æwæ²tGGNq¦Û×ÌËb>÷)Ƕꃫ®¿•ªû](´Æ"–x–n\M4:–Ô4YéIhÝ3 =ºuBUõýˋвKo¶×\lgwèÖ·ýåtoOq”êþÙÜ¿¾#»½û÷F&ñNožÌæ©ÈÙH¡ÚtÓO"’[³îúÒê~3$6Iã.ñ n»ØjŒgu£¶BSslÝ®:´jaކ+’z>+',<ÂhäæìÆöœ"ôí?™Ä=„jóŲ6N5é¸V½Ñ³k'£zŸHÕðŒ´–w1óÖ ‰¸ôšÑuÊ@Zó§!»p¤ÄEƒs8Xµx’ÛtD‡¶™f?PßÓØ@æÌôn9ˆÂö-›°zíz„5nŽ‹¯ø.y’9Ã^–ç[e¤rR19´™PÙò|´E½3«ÖmEd\ôëž…ÈÄVèͱ¤1WÁw°/Gg‹^ˆç užÚ~~:vîJt­Jt“†L3w+Ä «s´cŸoÙ¡ zõè„°àjìÊ D\rK4 ÀVb˜Ú¬.¿öžBћǽq 2ý6oÕt¬ zö¥W_‡~]ÛÀO[X>½%¥%ß©M†9 ­œãWNn!º÷ˆk¯:›c£s|¤Uq—]€RNÞð<¤òXÅÞ=»r?Œs ÎD¦VeÇcU¿/^ŠÊ€lÝ6]º›þUÀ1t;ñéÍzo•Þ„sÙØ¼u;zöˆ6<Å@ÇP–”ð sN†ÑhbË®13Š«Õ9;¶aÕêը斟Qç_†»®8iMbÍ–”FÍ3Ù¿ƒ‘O•;KC1h@?´o߆ý±íG,Æwl;ÕÔnQÛ9ë”Á<"+˜‹ñôO¦&@ 50*ò4ƒópé9§sû@cäÓˆÞ\Zv_µ)i<õAv2ÛvÄ57ÝŽþœ€ gyS8ö·#Ýy<É`Ú´©X±f=âÚq,€,`LmÚ™jò{°#/ )Í1pH½Ø»ö0š<:Ê0›ã³Œw6kÖŒZ([M›M"MÖ¹`Ÿ{ë# ìÖ–+ÆÚG¾+±´OfFg_+/5®ØÐ?þ\µÕ9¶:Ç[Ö°u~¶VÛeäM*ŒZá‘únW¹´f¡ý…RS×~é"ª}—r…Gçî†ñîP O>MξOiy˜ÑýÚ™„Ò!­åWC«§À& »Ú÷)Z唾öæ‹ÉÞCƒR%Ì?€«Õ £’átΗãíì“”º,ËÎ|È‘›U·22äÅTÅ•Jm÷­†sUP«[RçWy x{bb¢B“&©j:]ÈÒ­²Ê’¾âH[AIKÀU8ƒ™qC#ÃUS BGßUsÏj$™m©êkE_ô O1ÓÂEê¸bâU^¥)D·VÌ•¶œ)3¯Š#¶^³&?ª´Ï\uÄðJSí4¡u4í™ß½sçïC#{ Œ*øcOs_üÐKñÒý7!56Œ+ÙÃ[ÊHuoÊSK—­ÓZLœ6!õZÑ¥%nÕE)'€¹]u¡=¸²8®²íÛ[<2Ú~øt}µiÕN˜†Ê"Bâ/kØÒ>P{Òþ[? ŒÂv'bbbŒ¿V³í¶[/ª?Ù ÐD‹0QÅX,¨“K§­öµ Û€B¯è!Ð&|%W¢÷ðè2X çžpmÖf°úëGjùj¯šìQ_ çvµ7þœv®vàïÔ¡ú Ãòh¯~¢½¾¢Oõ%¡PgÊ«-šs¦™§èuÊΣÎ(„¨]5¢ÊµÓœ¾dú0ýU'ô¬QFámêÅà^Ézá9Ó´Ë £6ÔÙò¬¶!¥)m‹õ¦¢3­ƒI¯u‚DåPÔö–2BÛKÌNeÖ1lª_ÑÁ‚›­ª“ ZÕמprí´}nƒˆ$Æê¯F›Eã—é3N»5í˜êOf¼"¾*ƒÚ%Ǧ<öŸ`n¹‰`?µã‘&ŒÌåÏÔ+H{i ¯¡-”Z@+iý{Ä×°X xû³·Ð™Ç.ʨ›òÕd\'mÚë\“ùÁÌ£šQß~7ÓÊûåzמ7”8°}ÑÞ뻵“ZM÷]=S6ÿûì+)§É]nÍŠˆ0Ÿãd;‚'0 i«Â9} ¿?êÂMøÒ@^ ñÐ$CW{^²±bÅ 3A2xð`£‘%ÿnݺL…¹7þzv‹€‹€‹€‹€‹À±€@-·u,PãÒpDˆiãËdˆIÜKuÐ5ó©þ÷Ê„ýÒ¼ýþ¢}FS2Q8É,5 ó,[«ÿ$'¦P~•4ð¦U²8WR>–Ñ×{=‹Ù6€IÃb cL!BQdTCwrÒdzRl\1øL‚ÏÉTê¡':d°J•C«&œÈ\Ùñ#ÇT ã,LD—˜UåM¡%†Ï¦Ñ¨:×Ä‚ ~ÛvPåé'ì$‘f“¸¢8u­4%†r ;œ*ÝF0dB2Ö¨tÍYߞܜ‹S0'§¯š:`µ3K›íCÀÔÞÅÆÚTFÑ*á\mVåö§ðE#s MhزÈOa”†ƒ™öf õEÕ¯CîÕ5Á ”¿Ú;5bãâM¥«fÛ¾òP»UM •C¯öÞú)Ài21Àì÷ÖŠ3¶8ã—©ƶm_™È˜™œòªäöXYº‹æÎ0þç^ÿ4ãVMXçÔ»3Þè^$ÁÔŠ1t©ÔÁødÆ/öUS/êãôÖ$‘Ê«Ižph”3e1*-¥â8“¶W)œ“Ÿ3ž™g†×¸% =˜„r›†m ¶Þ<œI>âeÊ"Â<ÎÔ%ïƒ)8‡pâÀPÃ÷2¨þfœÊÈüD¿SwNÝšvKz÷k;,¯ÚŽz€?|93á,p¿%œP› ÔÑ L3DC,êE߉*N(omÕ-¦}ªÝ¨o0¼œ­{SFúEÒøg_Y¼„‡i_ls*¯)³‰éþqpppp8~°ÜäñC±Ki bY$$ø:?ùq%ääËþŒn#þ`ö3бŒäÞìD5 áÊ™%1IÖ:ºeÅpÇwÖOŒœa k2òzgÓ¥²á•®h£¤U‘ýœWº¼5NWÃpî°öÁ0†,“„9=Û¼¼é2þžh&Žò烷³ñH±sqÏCŒen½ãˆ¯¥µ6o‘¯ðu:ÑèõBBЇúÚ Œ_铆 ç‰ïÏ·¼ÊÂÖ™-›÷³è¶Ï*„ ãU/Zåm”Ð/Œÿ{ ‹(Œï¥€j§xZ÷¦´Bᨶü& æYC—MÓ”Õ)qM~ž6!_ÓV  ú÷ÅAIºn´˜Ìãä¼èн꥖C\̓çÉ0üž6jü‰Í^>{zÁqL¹kÚ|ÍkWÏäB¯MÄÐæø:}ɹ74óöPýDBóþYzZÓõuNÙÕ_½ò0á$|ׯ³Ô…»}§vïÐk bë£6W…U‡jCÕæmCú–ÑÆ;X+ž­?…5á½Ú­ñc_úl~z/gÓ°þöêÄ×ÀÕÁgâÝž§ 6> áœìRYl|Γ¿ã'’ÚwJÓŒ_Ð÷ó×8C¡µ>l¿6íëÈû½¯åç¸Úðµm˃éñŸ¼éR\=›ºÓ„„=ž,Xï|m:u· ðl7휎÷Þ€ˆ†šðචΊij@}UÚ;áщ¸áþqu•’¸Åìµ÷ÂÏÐÇ?¾íÆPä©Ý›U~ãiÿÔâaé´oÜ«‹€‹€‹€‹€‹Àñ‚€+ /5åE§©ŠÙ±«,^¯?î/ŒOJERJS‡ádX¾0«:F…ZËÁt6¾ïÕ;={ïFÏ£¡¾8û16 ¯u¥¯°Æ_ô×á§Ž 5^‡§®0Žª­C‡Ê-ç X“ôAËP¢öNyxãgó¬ qà ã}µ´ø†öSƒ£O©8Ë)LqjÖRÇ@9JO̾Q'³@ÕѺ\}éûÖñ‘„µyN…½g cÜλÌ6Mï«“~m2Ï¿r;³tzÓ¡ûúÊz°8Чw*§~Ò0pÝ À¶Ž–­Ûui­œí®Úª>l[RŠö^Ây}õq¹Õ *¿ÔVT]åìõ—$¨Ijs¤¤;ãˆÕZ²é‹–aÑhÓ.–yÓìWë¥"š~)§‰ [g¿Tšn:.....G W@?ZHÿBùˆ9”Á¸ùóç#99Ù0‹bxÄØ=“2hT*ÃFTÔñHÚïi÷T*¬ÃÌÓ*2Wv‚©©ý‡ Sê «gùë½eFŘÊOé8é;é*ŽžµWSùÛ1Gò“žC¥/zFK]é[fSéûÒ¢røÒ$é×…¥öFpoä®]» *›¥¡®ðGK»0vvåM˜¬¼¢]˜©l–a=°nëÇþPé×U·¶¾„ŸÊkÛL]u«ôÅTNݪÙÛ¶ãÛ,>ÞmÇâz8mÇ»gÓ˜žöËFƒè’aKc4Ϋmª®|ÛŽwúÂìPô*}ay¤mÁ·®l[P:*o܉.MØ©MÙ6&Ú'L~ ZÅòýKxdy9)(Ž~Ö©mëYýAk¿íûÚc­{á\W™Ž,›ã¯]›Õ7¼ûšÊ¨öTWY~UÄTjþžD´¶FA­¦)šô“Sþ¿$ ¶¼7nÄÒ¥KiÀ³‡ÉÇægÜ?...7Æâ@IDAT..Ç0®€~ WN]¤‰ÉˆŠâÑX­[C?6Œ-1\Vps)AÅ ò÷ ­'ÆÞ CÞqä/f_áä¬`PWX J_ù[&è`éÛ°¢å§¦¯<”—e_ú}Ó·ÌŸòò ë‹¥ß7}á"a¨!-ËKèÓ³&G^¸ø†÷ÆÈ›…•M‡¢GeóÆ^yýªuËôuÖ´è=ýõÕ­âþœ¶s¸X ?á(Zt/ãpTE¿„¨HѲÏÞmóHÓÿ©uu¨¶iÛÂÁ°´m³.,m[À¯‰ ‘*w“&MLŸ0Ìýó“p„GG3Au¨v¥k·é álëî'eðER›‘a8uSydÉÜŽ_jãê¿'§~¥±H“€Ö©œ®spppp88öt2 柿à|X5Ëî̼ ØÃýØZÆãpÃë•&æJŒV÷îÝuRwôI(×ê²VÒÓÓÓwå;Þ ´nÝ:¤¤¤!êx/Ë‘Ð/ëõšð²ÇaI\7lý4oÞZ‰Uß×dÉñî i]X©©©Ç{Q‹~ êª?¹ß pXw¹¸¸¸×Sº¦)…›uLvKf?Ò쑆?ÖkSåÑŠ¡VqÄ|Ø ˆcîß}Â^$Þ˜{ßÿÊøSÊ \~K”¿]ÕÔj¹V9—žßšöŸ‚·#Úå4h,;X¹m9íÕöüñõó~ö¾÷Žcïõ^î`ùêÝ¡ÒP˜_ËýÔ¼Uaªö¤{]% ×5î ïèƒaâM‹÷ý/YöúÒÕ;_*ƒÊt¨°«SïxöÞ^mY|Ÿ­ÿ/y­/ïúû%ótÓrpppp83ºeTèâ=¹Ø¸y Êiõ9œG¬Hu3’gÜêœnÇj¹³š®4Ù?þ´ŸMŒ Ã(éj?ÞbFL8ù™ -礡;ˈ˜pLÈ.Þ×Òä ëõÎÉ[±{w´h+•Úæk¯ò«ÅLOGælÚÞéÕ•ÂÏÉ£®ôÇÏÒ¦«½·ñE¯ ÷Ë]öîM‡CCm›®//Å;š'œ¥ápÒ«¦ŸúÎæ¯øº÷~®—&3Ûgû¾ƒ§¥AñêkæÕÒT_š‡Æ;;Þúù>ו—õ³WWW_?ïg{oó°W_ïmëg¯6ìÁÞÛpöz8áFþuåS—ŸÍï`W›‡Þ{ßÛðµiØM˜ƒ`Rï@ÌmÚu]V6ï°–NïÛ86Mûì^]\\\\Ž'Ž Ý~¨ܲy“ñ؃bÑ–R4OK@öæ•ðkÒO>öWti•Šé_¼­~q¸pø ΆѮLø½§óˆàûŠñþë¯!¾Ý‰Ò#Ó Ï¿&ˆBy„š¼|/Á½Æß;¬'×óxT.Þô• ½21 Áõw®y#þ'ãäxý\mü‚‚³_R+WòÓ~[íÕUÏ¿þ*¡ò¶4Úg§äG﯃÷þt(w§.jûÂÁ(ò¦ÿ`a¼ñÕ¾{©Åj|öGk?~xxøoZ¢Å·,¾Ï S§c{U5(ÿ×8Ǻ…½š@GpciÒd¡ŒºÕ¬z CímÖ~`9oÜ ‹ý‚Úüöóü¹«Û?)®—æ#¡Å»ìÚ?,¬´¥DþRá—í µ;¥)?_w$yùÆõ}öNë`÷Š#2ôÞ;ŒãO\äï›ðOxöÆEmG}Qø(OõE‹2p¨gï°ÊÊ—.ßçúÉq0Vßx¾ùÔŸNÝo½Ó´÷Ú#o÷ÉËO¶?T>iÅÈýùÖMëë"à"à"à"à"pì pLèŽâœõxèÆ!hræ øâŠ‘ˆòGö¶õøô“¯PR\b‚-ñ 憴Á°Á½ÁãŸe´§²E|¯3œCCÃI†(/ÈÅäOÇ"Ó¿%zwhj˜¥À@ǺxPp‚x/«œÆ¥ªyDQhH° SQV‚=…<['‘Qô2 ŠÎ#./§,×þ;¿z3E•e(.)#4AÄÆЄa5ÏÊ6Ì:ÿš;íÇ#‹T‡r6öZ¿~½aÒÄ”I­TïdkóæÍF›BûŒÅ¼Ù8‡Jû÷ôÞ»Ì奴Ò_κf]„LTª…³ÎÞi]HVû7e!]’e’e Zu![éééF¸ô¦Ëæ{4®?5_ïxÕûªPXXl&çÂi\.Ðë:5]™öÛ¿M(°ÔUVï<$TmذÁLrH¨’@.Õô;w,›6mŠØX;u ¶k¶¥Za³EÜÇ\Ås­„G $HÇuy'‚`[Ê.§òèw(çÕöíÛ±eËÓ†…•U5ß¶m›1þ—žžn&‡¼ã*ýŸóÞ–Å7 ïüËùÍ(-åIü6D„× ËÂÍé“Nl›–·esßt½Ÿmš¨TûÙ½{·í6=«/ʈ]ZZZͶ§ÃÁÜ;ŸºîU…6Òâ"j´ñÔÐ 1þ–6[&3þ›j—ñÆC×¹ò´ih"Fã¾öÈÛq_Z{6mÚdlȰè±qê¢Ùõsppppø= p è–¥“jû.¼5˜øô@$ÇÇ|£9{~[».æ~Å÷ßâÝ—_ÂêŒP¾ú{dtŠ?\<Sß|8½Û¦açîR\òÇ›pÖIÝ1kú·xþã¥Zõ"fúNºàzœÖ+ /ý÷MŒ¸ôtÈHæ!¬¥øôµÿ 8¹.>Ù—aì³cñú](+ØøöÃpß7¢Yb¶¬\ˆ?ÝñÜúðcèK¿Zê󞽟¿‡ÆPWj˜¡½e˜;}2Þ÷!ÖoÏ#‚¾COŨ3NCjBCÄŠy²l™eìÄœz3zõå!‹»:GLyff¦Y=‘ #$,jeEÌš„ø–-[þǬٺØWQŠYÓ&bÜŸ`ãŽ|ñ,çÆcä'#©Qä ìþu!©®ZpülÂ{Ù²e÷-ZËèÒåôN+yª …iÓ¦àm\'¥c÷¯7ë—ÏǸ÷ßÇœÅkx3ѱÎ?ïltjnÚ—Jáìî®Vä熞ësš\Zµjâãã!£cVèTZ •²råJ4kÖÌL@KBˆhTƒQ“ÉÞ²{“g/$ÝÕHlÖçœw>úwÏB€œLPEM›ãÓ¡°ò~/!TºŒ˜iåTtJKšÆ éK–,AÛ¶m°î·¾:ø9ï¼ËbÓ±ùV•cú¤ñ÷ÑçØšSˆ°( 9õ œyú0ÄG‡Pv›–â{kkÙt½¯6µõ3¹ŒŒ 39aÇEMòHÛHBº„\îam“ؼ¼Ó<Ü{›wq~6&~ù1>þü[”V""6#Î:'Б!ÎØ\›OíØbã×—Ÿ £±DåÓé ¢_Ú¶ š˜Ðä–& ¥Á£>¢ülÜúÒwß¹¸¸¸¸¯ºX?GHŒMÆí÷Ç7ÜŽ±·^†éi†aMNn‚@$·h¡ç^„Ô¸îÂ3ЈûÓ#xÖwÛ~ÃñÚ°KG†hÁ”pæ•wâÇ™ãбKOŒ˜ˆ¬!§cø€hÜ$û*¶á‹×Æcè9—9uF®|Ëò( ÏâsÞû7ÌÍo‡gŸ¾(ÍÁŒ™? ¬ÄQíÕÙ®…9¥d=“ õ:Çkƒð¦»– ªÆÔ/ÞÆ 3®Äߟ~÷\ÓEÙñ÷+†ãý©Á{Oß‹äFáØG¦ÓªÀkò‚\–a¦L ó]-#W›‹ÍCWYáÖYÃb¬0hCjUEêŽ:>kõêÕåjÙ&¨+Mç÷tµ8Ñ$¾÷N¹èF<þü[¸¢WänY;N= _ƒÆü ‰Ñ¡ûÕ…„1¼ËZ„Z·u:‹§bÅi×®(½Kh-•c ž~+ÆÙÒëMß¡îÕ{Uü KgbpV_t»îÜö绊|øÊãèÜæuÌZòzµã$œw»å½º¾V•ï~ï|2µï$Tj"#==½Îöªv-ÁDªî gˆóIî7ztÆ9a•¿c n¿0__‚ÿÝ÷'$Dá»ñï`pÏöøhòœ9¨ómJöBûíš&`å‚ïpöiƒñà‹âOWŽDˆú#ÛáDš¶gç…%<¯šg#·mvzó}ºvíl2Úµy;â[6¡«Çê1}ƒÃcÊ=nTu-+ÎÁŽÜ=(ä¬~R|2λ°äLã’3:à­Ï_FXd”yvÄçÝÑø+¦íh:Ë$æm]‰(œ?ôÒ§¸óÊáÚãÍi‹0¨Y'|È•ÛÏ„uKæàGj„úWaÑüyØ–„³Î‰¶Í¥šXË”ÕU­2Š9“ c™îºÂ‰QS­²iﮘvKg]ám¿£•·Í'{ÃRŒ¦pþÌ{ßà†s†ŒöYY˜¾0-:ˆãœAðÃ̩ؔÇó¸+ò±`þˆLnEm—áhžL-1äƒAZCZ9–F‘ÝîãX˜JH—¦Ëj ¨ïêù§9Ž Ú–ÄÈ‹gKáüULZ¸ƒ;µ0Éeµï€™#Ñçô³pâÀèÞ2ß}=…UÕ(ݳó,EóÎ}qÆ©Ô hx /M:²RvE¬p^W«|jjúNH³Â~#|Û“oú€‹€‹€‹€‹Àñˆ€GôümI7YãšÜ" ·Ü=o¾ý.&Nš…©>À¿þz3Þÿú{C$C–ª£Êí¤Àò—kÎÄm¿Œ» ¨rˆŒV1dÂù’+Ü7WY^fÂê€j­€yJ®}¹ÁÁ¡(-)æÒX(.½õ_š˜¬ÌæHÍìÇ©Ÿ]@æŠ.ˆ«õãsžç'2GÓ]fÄpç¦xÛÖ®À¤ð~8ãÄ~湪²Â\ãÓÛã/Ý€©sR÷€u±n.F9ŸLý)Í3ðãG£1úï/`wQ%ß:ÂŒ‰èõÇ–I†È$Èx¯é÷ÏF“¡(­¬H¥ó·v–þ_•ÃÄ; vãºeXÛâœ2¸—ɲ’B\J›ÎøÏ]W`Úœ¥fÏô¦%³pæˆÓðÕ¼ÕhÖ²9¦¼ðGÜõÔkȧj²fK|aoÁC*³Z©ãlw=x—Ù®Þi靖÷;÷×¼i~ža{vnÃä÷>Ç i„ójÚ—  4ˆÅÈËnÂçïL@NÇ™‚8ë¬3qÝï"Œ„A…«1¤÷5Xºn§)–M¯®2Jè”peÏ'·ûbiëBá´¢hñÕ•æÑô³tUåcÞ¤O1fÌ5á|ŸW9µ‰†Ÿ,|›v墪¼…“‡=€² †HŒ¬ÀY§ ÀԹ˲5ö¤*%|k « +ë¯pÂJc†œð´´_ý3î¯[½A½.ĉý»™5Á"×¼}wá²½`Uö•þÁʧ¶¡pǸ/:]ç"à"à"à"à"ðk!p ¬ ‹9q±‚œ(¨ðCJR<ÆÆ™_ZÓ<ø‡!ذu·Á@+`{ˆ°’e³¿ÃØ )Ø<ùU¤Dú£,{%¦}7œÐg²<¿¶¼„‚uˆØxùcÏ®lTZ =ÐÌf%Bƒƒ˜.м=ÆüûeÜóð3X±hº 8é­Ûá¼ÁQIC@…Åeh‰4G6R)òwtÜQeBY4«!°gOzžÜ‰*æŽÀæGƒzŽóGlb ä¯.@÷§á¸Á݉¿Ýs'£g»D´î÷0v>pb#¤¼³Œš½ZÐ>û¢jq]%J˜‘ÓóïÙÌû’ Äп3m]<÷¯Ñ£] J‡÷ÃÜI½°fãVtlAmŽ1”¶AµOM8IÓàpœ&ô“`¸q'ÝŸ¦¼¢œ“AÈHŽw’Rûr¤8„PûhHÛ$ÑÐf¬ÒNé‰Ûn{£†v¢ðV€œÍKñã²Õ8µo;NŠzi¯vgÛ‘°Rÿ·*ÎÖß›vùÙ1Pø(¬âÙ8ÞaÕ{¯¾x2µ´"BœÉ³@Û9>&q•SAžù¦qøÊÿ{½çvDrèlгþ1÷Œ¾ áêœN³«“d•×[3å`¸ØÈê‹j??ÙYZö•£`OÚ¥u•Œ pn‚‚‘Ù» ¹7\ćF5á„Ã8üåªQfŒ,Û7ç.ÁÕ£NB$Ó6Ô¨î4ÙbÇ}eR_ùTÏ «x k^¸\\\\\Žs<ŸÞß®úx[¦+{Ýb\8t ƾþfÏ™‡E‹æã±ÿÄÝÏÏÄ)ý;"#c¢ðG^ÃWSga)ÕÚKC¹b)~X0Ë/ÄØÿÿûè3ª«ë#Þ#Cñæ¸0cö÷X²jÊ8´O˜Á=ƒï`Á¢ðÁ[¯bôC/¢:ˆ_Ù¼óâxÿËi(*çj™ï$¦æ¨ n]½ÃÚÀœ¥[ -Ú“.~æ÷êlÙ‚ƒ°+;:Œ‘8» ¿¢¬ˆ‚y -âûA«¹i©Éˆ sŽÄiÞ'w  ðîa”aj £VsVÀçFa$¼Oô_ìѶÝ_,Áƒ$¤~"@fgÞTÊ´8ݾ½žÞ—–R£ ˆ‚ q®¤!½´´dr2ÁÝ(†¢‚–¦åŽ×º8T¹¼ß‘Ù÷+ÜlÔÊå¯}·êÏrUUåÈ+¨¢p@|«Ú89{¢‚#Ð.«3JF®ž&mÞ Ë#qGŠý‘¤ýSÃjyH­”óô9µyk‡cß^¹[¶ ÁAš0âʺ_4¨edœ_0ǃV´þ]bUùÙ1Å °ÿß#ÁJ}ÿHÂïŸÓ/óäϾ˜³‡í=]Ð Ž*¥4²üØUûe¥Ä! ážy͘ÆqhäÏ>êôÅú¾"‡3ÎyAÂägáb4'8 ’Ï i[g÷å”_AÞΚ‰ïr~+S’´uÆq ©i¨.*GU¥ó½ðx×y­G2Žiø:3u=]\\\\ŽqŽŒ{ü ãýqNlÑ×ßv-fOü /½ô2þ;v,÷¿Ñ¨Û”ï0¤k+“{Gቛ{âù'ÿ‰O¿v½‡àù'.Ãý·ß„§_~•QÍqÿÃÿæ £Ø… Œ¢Á¸N9xò‰á»ù+Þ(×ù{—ŒÇ½+·ão÷ß‹ÖMh18¸EGà矡ß_ñŸW?ÂÃL@ÿŽ-MÞŽºŸÔÇ®y8-fa™’_š’ôÆê€—¿´‡V¹¨­ —˜’ŠõÓÞÂòuÎÄ„VÍZY.f|=í2Z@rà^ ‹UÒ+<Œ™¿_¢¨ip(Œ,*‹½õ91† ««˜a_CrõÅýµÞ:QU°Ð¦ IéXþÍËX±~»yd]èuUQ¾ýøŸÈàÖ µNáSE<-ìÏe°pgâÄDôùã]áz8ua“PØc¡.,=õ]m[lHµÚ¶-wS ùGÜŸG*Ò¥ÜòùÓömјF'QM‰¥ŽW4®:aœÜà´©:A,–ve÷pW4NmÛÆsRûíþšvÇìCyÔd«¬6ørÊ,HD—MÈihoÅ",F’âx>9ißÇ‰Ñ ®¸;Ϋ¯<*Ñ ,«•ã `Ê«{µµYo!І©ë*¬„óÏFëJøpü<kRr3ÌúàI¬Ù”mbqeY-¡,o¾|íE´h™nž5‰VÉmAvtS_ «5ö¶ëÙŸábUç÷S÷ÓÏ틪§x¡ÒbLÃc›àü«oÆ™£ °ˆ«´~ˆŒnˆðŽ`¡0’[â†?ÿ—Ò\0Ï<×ùÏiWÞŒAÃ/æŒ5Œ2«^ p(—ѱ/þúp{””Ušs{uÆqÛž'â¹×;¡¤bŸÙÿ&²’çúúùaØ9@Ÿ“ÎcþÅd¢"m˜,åœÑÿþï“d>Ø´ýh:Ñp4e“[vÀ¿ÿïbœ~ú͘5ùYtÊLCYQ.>yýi<1n;f<0ÀUÆs¹+÷:Ç"Ò[ÕwK·È·‰êÖSïºJe]ûPUFo“ŽÏ³&FͪFÚ8>ÁŽÊãÑÉ[Úš,ñC³ÌNsÝ)rå]˜ÿæƒh×<™û¤³iðì¼<­ ¼ÜÝ”»¸ˆçzW³ízš¨˜èœü¨>p¤&+cL–®¯Œ £úee¹úÂÖ—çQ{§6ÇÌ‚¢“pþõÏaÈ٣кéw8µWNçUbÞ”/pöõbì“ÅnžK­„Bª+¨M:®å%{¸jêL^Y¿ý¶'¤„+ 5Ú+­ö]W»^Ö)œ„©¹ÎÁÊ/0 CG^{Œgºdâò‘C©™áÕ?~‘'_†?=ñšÇ…£lgò d‹Àbʼn£Êrs~¶-V‹}…t½³}Yû‹½Uºm<]½Û–°Rœº0õŽóKß;ÍÀÈ2ÚuÇŸÏïŒ3o~€GƒÞ… `,ÊݎמºŸ¬?÷ëh²—ÑÅê•Ûqê‹ÙùêŸNÝ×¶ç}m[ƒ9¹"/c(ãh2Â…¶iè^‚®ú¢ö¬ÿd§þÁ¼t|h·¾'á„•·ážGžÅ˜Û.G“ØHìÚ¼ Ý~҇߂^YÍ9Hƒ’Ô¬°UÊwïÞJÉVAÚ,^öIW[Õ¡ê\FàêªK[>½Ó÷A曆ñtÿ¸¸¸¸¸üŽ8&táéýq ‡~µ®vŸ§>úÁÄcù3ŽÏþ!HlÂÙ| જý€‡qˆ²¶ã”?ö q»ÇK³(îyÕúYç0 Z­óìþ6mæh\½·£’™4stZH.¹y J÷þ½» ÃÍ7œ5 ðÖ²*|:ez¶q°÷çÊbÔÐIœÃ¨Î©c©Œ³jÄ‹©Ôq]¹¹¹fÒ¤& ¯°ò£*ëÍ"í>ݺÂzEûUoVÞÊGm. ¬®½ûITØQv¶Ü #!Ô{ÏúÁÒÿ5ü-͇›¶ÅQc@ÿÓ.ĸ‹qö)ýqÙµ7!j_>ž~þuüëµp>ýäöîóGZ\„W›¦pÞ¤ës–.¶ÒÙÝj¯úYÜl\û¬=üjû Ú×îÔµ}gÃí«¥CXµîq¦}þ6®=GˆM¼ ™ñ!øï“ÿÁ5Åm—4U\)ŽOä$CíÄ¥pÕß­E£É Y¯×Ä&3êZ%µx¨mJXÓYéGßi²LõÃïPTn{ø ìs:;·œ;k|‹Í1uÞ³h“"û쳡áünxõE~Gâcئ<ãb]âm?ÂD–Ü5æÙ¶á]f‹‰ü¬Etá'çýÎxæS>†Mk‹ÿ,œŠ»o½†“æÓ1¬GKLûøiÄö½ŸÝu3Ñ$IU í·DѪºws¢»aDˆšÇÕÜXš«ú‡ŽTêàK³}ÖD 0v%ß¾«I̽qppppø @­D±µÎ2òùæ›o ÔªU«a·6ä¯s§Ù{ …ÎÇ×YoÑÙÚ5c¾Ó{K§ñ׳9ò×OáìOÏvB~û;½cx¯üMRkÎöf»’aòÝ?_üÉäOš¥Î©suŒŽØY³faøðá5eùUi1Ø Kík.晼ë±c×n…F"-½šÄyŒl±öäí¦VÏ=¨â×ÊK‹‘“›˜Æñ“Q=a®„|œ-§VR¶nÝjŽÑ‘e_ßri…Hǫɥ¤¤ò{hµ4ÊB²ŽƒjÖ¬™çÍQ¼xÕEEi!ÛÄ줆Bhxš².bkÏŽÎËÙ…rªcÇÅÑB2I,gøœÜB4b]49øÙѶœR«Õ„‰„Jæ+0‰a–@ :ÓñGbšmÜ£ˆHMžê—ê#‰‰‰f²àP´Ô¼çÑŠ[7oÄf ÑUû‘”’föîÓ¤‚qeŬï=®fïÜ…àˆh’«ßØžÅAíE·h“€áë„¡„xYÎÖr5ôùö<{¿WŸ‘€+ÎÛÿ QØÛ;Íì›±qÓf”–ïCãÄd4KoŠP{UE)våä"²acD†qÓ ·ÈìÎÞ…½!ˆ£1¾{¾CŠM_W•Eý\ÇÒÙ 8K°†üü¼šãÕ„¥kÃüRW›®úh¶ê ÖŸ7<ŽŒã"3,+Þcúb6çlÑéâbl=W#—Tú!®q#3‘¡ð»÷Ðz9ûb('|kÒô!ÞúkòF}Q啦НZ¿¾:žO´jÒBmÁƵIÚg­Æk SŸÕøjým8{õö/ÌËÆºõ‘_TJ[qûÒî •†Ža‘ˆvÊ\˜¿…eûØ–ó8ÓCç!Kõ×U6¡æëT.õ•+99¹^ºm\û^±b…‰;dÈÌ;×ÄíÖ­›)·Âú~cl|÷ê"à"à"à"à"ð["p̬ [¤ZWïÚ™ +0Û8üÊ”ùÓØ÷#\—ŸM«¾üÏWP±ñ~·Wá'f”ÌqW‚Z¶ÊâoÿÒŠ™SDÇ4†åÒ œ •£ áÍðíÛa’ô^ °o­”H…UÏVð“ªU3­Y&µ¾4}óøµž* 5uÁ½½ "Ѫm{øT…Ãx2œ&EçÔ]Ã''; t}4«ë½Ô¬ÅìK—p Ü­êµfÕ…æßR8ÿ9ujË©c“›¶0?ïô„œ&?’ù““Ÿ@’’kž•ÎÁœÅÙ#¥É5­†Úb],¥J²ðÔJ¢~r6ÞÁÒ=Úþ5X±¬q‰©æçMƒÅ*6<’öƧQÍ£ÅEØ5!Ftž¾¨qò`Ây]iÊÏæ­:‹Œ‰CGþös¦ìÔ^£í†x«½æÁ#²a,j¦'Lµ×ÝGlÝiâAu¬þ!a=ŒclkHÈÖ¸/µ}} 4î[ºlÜýhr\\\\\~'súï×_¥¿SB&Í1åìŵL’e.-]–Q׳ # ìs} Øð^$¤rßfIq‰cœ‹é‰MHH$£æ¨oÚ¼ëKóh¼ÝGÕÕÔ…£ebq³xXzö¯ GzoÃŒn›¦rÕ…öÐq¤˜õ!'Á<–çPGR^ÎæmŽ£?N9i½¶.¤n¬š”P@€j&÷ÇÑ©ko¿úŠkqÔUê»ÚP@¤¬¬ÜÑÄᶃ ¡<ìäÇ±Š¥-‹CŸ,o«Þ÷ÇN#å1ºÚ6öS°’„²BÚ!))¥q¦@µðHjDQ˜;V&I-&²h¯{ûlëPÏrÞ8¸yPòÄ1òǦ)!ÝöEõâ"õE? ²hÌöá9Ñæ}äŽÈÛæm5Úì³Í£Îò1ßòÖ—©MK}£AƒPc{F1¥4ʨôµ="1±‰y§tløúÒtß¹¸¸¸¸ï¸úñ^ƒG‹~2KÒ\ƒd0_UKËÀIÈÑ}]Ïõ‘kÃ+Ýh2ãúù:fOg·@ø¾=úÏ¿ Ãx@]8Û3¼Ko±t„G0­ÞuãÞ÷ÞÆ×U«•vÅÒ;œêB"Ù-Þ~å{Ñ÷sœ =* Ó®™P]mš/kÚ¼ò³Ø8ý@ϧÀ¡OñI¦XÏ*¹o aÉÞeÒö}w¬<ï_vµ)»ú„°âqkfÒÃ`%l|UÂCaeû“VÏ­1°šô=7Æ.†Á¼à}#ýŒg§žëN`LÌàTg2íK@ÐÙöóSú¢V›õóuNÒ¿|û9 |¬@ßþnËSÛœï„÷ØãK¯}V\"r²ñÒÆâôóu2B÷Sû‡“‡oŠî³‹€‹€‹€‹€‹À±‹€+ »usLQæÍ`ZÂäç-ÐhEMfÃ-çûlãÕw%‹i1±cu9‡Á(F·®G×ï·`þ¬ G¬1ÆGF´YŒd[•US7‡ƒÒáÔ…©­ß°.l9§ó^V˜‡sgaÁ² èÔs º·o†?ÌÁ¬ËÑ4³#† ì…ÀÏòUÚ–é*«¬ÆWKªñì¢j|“ÏdÒœ—¼U㎦~¸¢‡?Ú4ùe™Q¦~Ì;ïºØ“»ËÔE)ÏèŽo‚ô´c1Y«œª‹’‚ݘ3s–¯Û†}‡ k«T,™3s—¬A‹=пWW4`ï÷NÓ`ëB«ZÓVíÃsóªñn6ßîýì]€UÅÕþÞöÞ+}é½-½#]4¶ ‰½ÆÍMLb4‰ÝX;ƱDAéÒ{[ú²½÷òÞÿ¹ov/ÝeYX`F÷Ý{çÎ=3óÍÜË|sΜaÑ´cæ>n.ÜÄ6¸e°C;j3ñz¹—}ÒÇ„ÆeQSog%î߇#9ðáÖmÛwP¸…wX¦Ô$Ô»·aéÒ•(ó Çä©SX™‹Eß.@N¥/FŸˆîíèOƒfËÞµ2ʼnWV»0S6! ±²ØÄñŠX~9È1]Å¡NQ6©§þÔª'áª*¸%wÈÌU#«˜Ù‚N°"‰ä˺×f,&VŠÃ”‰ãáS™ƒoç/DAu &L8ÚÄ5Øç¤vÛÓ\øï*'þ±ŸÜ¢[/&„»ð«þLëã@ ï‰iT% ¬¦št¨é?¼.)Ì㻸Å勊AR‡ʳ½²Z!8EyXñýRì>”…þ£&`pvصa%¯ÜˆøÝù]I¯÷~nÍ3Á´݇ªø\°Í‰Ö¸ði6àº0>Ä„“e7 öÂ@~¥=ôs6QM:­­Ÿ é‡àPj:œ^¾hÕºZ'X;lXšr²R÷aë—ZP…ó¦žV¡^XþÝBìNËÇ QçapÏ$æ-“=$½—Æ·¸~¦87ï¿ñž|éô”ŒâŒ}ÈõmƒûþrÆí£ú]Öþ­øëooFh¯©Ø7 ©{w`î;ÿÆžòX éÛÙ¹dBÐ…€I¥Ç¥»¸ân!FMðxâÈ>íO+Øß¥_NÂ5kž sÙ&“{ëFOH•Lº8Pœ“Šw^ýžyûK$ˆ¼C»PÖ÷ÿùnŒÔSM,¤¥lÄ=¿¼‰Ã‚!ýbppÏ|ùîK8€$wï‚Üü"EÐ#;>êÜ]€$ç¿›ëÄW´2â SH«ßÉÜ`•Bßh—-râõr/\9„ëú‰¥]VÝõøq±öI «}(Jhʦxúà‡Ô ôhÍkVaôO‰ÿ»åjthM"]‚^} o.IÃ¥“‡Óù] 6¯þ¿ÿõ=5ãJrû½âÒ EÐ¥ÙßF]/‰³É‰‹rë2¾ƒè›1GÙÝŽ»Ý¡”V-Ï–æ8ñêdu`â3úyUÐ&üÈÄ‚XÜT•áëOÞÅCÃËŸoÅ{Ÿ¿‡I jÛ5Ugq˜VGåsyÀ“ı˜&í‚—à˜J¢¾ž&Ü=h²ÏåcIÚSˆí}LבÚôÎÔJÐm^‡ØSe½ÿ,Ku f½ònýã\Ì_ö>÷î„Ò‚L¼÷âÃ7xÖî^ˆâ°fé,Ä`|Ûmè‚•ß¾¿ÎÉÆêOÿŽÞãHú¬nT½l`éëBb"šs!çòž—«\’³•4wnËG;¯.ÜÄ!‚Ìíú5Ntá’—œ:•AúhymrRwàÿ.ï þŽ7º­8Qyh÷FÜ1`~ŸW…7žº ¥û÷à?¿ÿîþf9.=ˆŒ:3Ÿy±c®Á/o¹¡þ>ð °v¦°/CQÙ¸+¶-Õ…ß²oôá¤ek«í*vTð[Éw1‚}hIíWEÀ¿˜îÉhâ¸ôDµ_ÁQõ#9—°ôë÷qᕷ⿟ÌÇ…ãûº‹¾ø.¹`Þ_°3ÆÀÎu«1óÓíxýó1¦W¤¬[Šÿ>ù îžõ¦ î©<îs…áhí¹ ¨Ã²]$çëœFýpÖEÞ‘-Å.¤²í‡ñû.Zç³?|ÀÉ›>?8q×/ 1"°}¾´8s4 ƒÀ€÷ßÉx÷Ù¿ 5¡~Üò'¡mgLÝ 7]÷ .»æì_¿w=ò ·B Ä– Û±yé ,Yò Ò Ë±òûˆoßí[±qÔh È­º ²Ä¬·”æjP’ö ¢Y(µe»©Z©pî)q!Ÿt&nOÓÖÿqa‚m£NÉ£à¬÷cŒŒl¾F÷,xYDº³^xÙIÓñÒÃw!.,ˆm€ÖIÝ0y@\ÿÛOð³ËGaÇêyøÛë_"8$Û7¯Ç†mëñÉìÕÜ»œfïk6!–fµíã"¸ÆÓò¶_“{À+ù}Î%Ïïua ÍääHáOgÿj\ïBÏ÷UpM(‰RÔ_S‰<‚ä³'׉ʀY«ykD7׉îûB,äoózË2}Ïž·&èû¶à²ó¯ÁKóVãÒñÉð÷Cph8’‡ EÎúOqÈ¿º³roÿç^|¶º¾E‡°mÏV|»x1NǑۑ’QŠÞ}û!ˆýQoE%yÙë?« Pû7œ}šóLØORçãÄOœÜÛÛEÍ#÷™&ŽÑ$ KHDerª;7™q·‡½üös]?Ù;ZÞUíi_ÇÛÓ6ù\*Á ²Žì^‡±ß‚.ÀôÑýèÂ!a‘4d.ú#ŠÏC{:Þ~å¡;±xC>¼+Ò±aåfüðí—È,+ÄþMë‘_>}{Ÿ*oÝ"_²‘÷_ÂúÀ \0†XñõG&±ªæwèJbNóöµœ fb!q{8¡ÑŽÏI¢Uñk²&u¯æ^õ [ÙêQ•XK‘—|þ:¹³žB§VQìwþˆIh‡Çm7þS§ÄÎ ßáé¿&f^ؾç Ò¤ã³ïEFeÖ®Xà¨ÖèÚ±µ„‰•wI¬Š>ZëÂ;]èÏw±”Àìâw±OP5.Œ£ù9'5R+ù.™Äø‚ïâøpÝö±ï¢ÔG¶¯“o˜ü»®û‰>JÈ7AúRiÞa<ôëq¸øÞqçUç#(ÀA!èÞ]iø`mÆìˆo>ø7Þýb)ü½«°}×V|¿j–n:‚âÂ4¬ÛvÝû@d°ßQm®òq·»ø˜Iíù²zE$åòÝîÄ„H¾$êåüîK·â{ö5­MΧ9ý>öwMäê û˜Þ[=)) ©©©ªÎ­ZµÒÉj0¨‰0'ƒ€AÀ `hðŸt Ç"` pÄB³;7oÁ͗܆Ø`Ñ…8iª^ ?_têŒI½ápV>úuïɽ½1hø\0v05臱oÿ „õ‡Ë& áÚEª»$¨Q•u*¿Šp •[Dç@Y@b’ËÎ/‹sâ7c½‘é…‰Ûªpïr'Š«¼Í:HèS¸.zDg‘B9ü“AóYÜ£Ðê’Å»ñ“WÐ’=kƒ8ᑅ˯¾9Ðàr uõ=Ác+µ~rSÌ‘EsÞ-À‰?’;ùbûáj<µ¤+ ¼ÑY4¡Ä{#Ó—ï`·C¬Ó…¥ª•¼« i MòÅè×£“º®¨¨€·¯|B0õª{1{ëv\7}ÆL¿+ü qé¥3H ±qi%çmÆU7ÜŒ®ZKž½ßÕ¶ßgNÎï} :Ð N<4Œ„³§/2 œxnq5f¥9ÐO,l|ØD²–SÈåîQµßUÀfý‘… R´ ìá»xû£uŒ,+gv•jò¢MçÞ¸ñ‚hÌ)Aßî1ŒÚíq“/ÀÈ~½àç*Å®ñã`ðpÜ:c"âã¬Òz|­HÐ߇ ëù.&’œJ¾ò]œåÄoG{¡K¢7VîªÂCKÈâw1N¾‹üVìà»8•Pê‰-«1GwíP“†-“pýÐ~ê±êÊ ®A÷áûíƒác'ãÑ?}ÌÉ‚ÑoÈD ýL¹èRôíÜ{·¬ÁÒ9Ëx}9téˆQ×Ü ŸÍ …9´Òa2©ßÖïúÖNÜ6ÚQ!^³™ß}ZU”V{«ïQ »8•I, ƒ€AÀ p¶"À!¡ :Ceu¨§†Œ UpÀÇÇtyù(³ór§7Z·m‡žC¦S£8={é‰GB«x´ë=ƒ’….rLK5—l-ä÷«8ýÃlPL‡PÁ$2Tá èNí tN°ºèè>¿«Orá’aäâÝù\ ÎÊr”Ñ)\dUM¨éòÍàã燨°­¨vø MûNè?~$$³-ºµe#¶B»˜pô0Éýz«ôZä.<~¤Š©¡Ž(ƒüÝ$ ìERÙQÚÂá]¿·_lq¢½ÛT¾”é©ì$£÷ÖÌ— գάݯ²¬ãèhÌ2çõöñ©é—ÁaÁÈÊNAhd’’º`P7/Œ>‚zUz âãZcäè1ÖD;¢5bµƒ=OÁ£Tú(o‘Ob3‰÷µ¨MïæÇ‰p­ð¤ƒåxg• ]Ù§o™ïÜ-)””U ¶uû˜0@ÖE°r008‡³‹‰.Ý:£û Œ6€ãØíòº ê»|Œ3OÚª>¬DœzŸù^‹ß‰œ°ûU¼czø"„}Lþ¦uuâ™Nôf*“Õ÷B¾§#¸ØH…ü`Et°&»¤‘õwÑáíGloTz¡M»ô6ž–Ãѳ½LRV }kFôÅAÖwQ÷Ế‹Th£H½‹üv2™,›œômgµÅ¨î¾·§÷ívaš{RGúœà\ÓHMÈ]ˆªòRø†·B°Ÿõýux{³ÏZïJ'©2¤Â/(í;vÅÅýº`Èð‘hê‹G)'T£1dØHôH°°Ñõ³ÃýÏ ­H€N¶R4?mH¯æw¿;­¤b­|ÇõðÆÈU˜IR~Qiʉ‡'ZMý¼9 ƒ€A %"`ý‹ÛKfÊtzpÀýhÖIgMiiY‰ÄäÞ:«*/¦ ™£â*zx.)*EY)G2¸hŠ_YY…Š2ëš1 Ù9¤0¢’7¯÷eV( ±ÈKÏ©À>z îÀµ‡b*,ƒOòÓs#¸ÛÂ; !Á¾8”WSo1­–PVZ‚•[HnQI¦SNËÝå¼WESÝrÝ62ꯋ ¸¥Š†SÚÂÝÌŠ]îÏ©¤•ƒÅ†2ó*q€‹ƒ½„uºƒ—óÚKÝìG»6öø™±€n¼üC#°þû­(µ ÊÜß- '3“ä$JõÃr:õª¨¨ä„…Śˈ­“¬¢¤Øê× BÉì¼Ý}T²eâb—™'®É<.LߟÍüÝØ±U¸¦?§G)Ï1ÁêZ Àºµ;QZâ®3û’Õ}œÈÍJåÄP²´(å,M9Ù™«PFçgÕÜO®Df{ä»Ñ@·«©»˜uw¥Æxa5-B¬ö©"Ðò=ï‚|ªø=l’§2m¦5ÉQ‘AôjDM(êú©ce)î\Ž@_ö~ KPÆï¡ •‚Q%*jX¦ûcfÝ=öWúû„z¥²<—>S(žáÒséYŸæ1ä³î®ý㾋n!~Áa(K_ŠìB«ÍŒwwp)I)Íd¢¦’ïG9ßÒ®?`(¥ ½“ý£Ô]_y¯j$©’ÛQ¾ér”°/ƒÚz5ÛÉfý¸Þ©û7øPï†zGTʖ󪸋cƒ€AÀ `8)¸ÿI<)²Œ³!>j<†þÃFá‘{_á¶9´GdðukÐW/š‹=è…Ž­¸[ 5êÞnÖ,¼9ˆµÖ±ËS‰Õô›J´¦³¬#ÏÉ1™Z²r»µWæfã«UÙxznz£µDeâÒ™âbh:ªCÝÒõÝ3ýhÕÎË?C‡Æ=ÿš…Y2à§'gÕ.,_4i˜†öÜÆJ©²½j°—}—½¹y¹v§0—Æ­'ˆ¢´ •_t ­ÖÀŽ IñKûè)úë<Ìý!Ï}7RIµ—x"—Ž’È5¡¾–Ò«©-%ÚªxbëN[½_-X© &øH(ÊLÁë>ˆñÃû+v'™üíØy)Ìj‰-Ð@Ç<ap´ÜÅ âõNºþõUæ®ÎÁ‹Äó?)\¦DÙL“ÉWHp÷ç$ÔéR/MÉZSKÚ÷Ð":ˆûAˇ“vòïÄ+¿#ô…Ä8©Uöe¥ÝÐÐ)û×<Ô8?«£Zö(õ>ó_¤2²ÑVÄ`E±7žšW„9+³1“ß§7Vc ¨×ŽV4ê ²ü«5ØêXÔÅÖ@IDATñsô$õ]„Ã=“‡ã­‡ïÅæ=´)gºKØ´r1>ÛÌå ÚÒ¬ßEbIí³ž©á»èEÆ­¿“êêk]ÙÙõÐŽ}âë+“—ÃØ‡ž£Sµ¿ÎU}èŸtñA–×o»ßE>,ë³uvvY9×ý9":Ç÷ûŸÍWNÛdBBŒu\tr÷Å/ãü F!6Ôò~ù³Í­¡„|cÄšG,¥T°7°­:Ÿ`®hÇ¿|™¼áýþ\«ÿ̺j¼6/³WdãÉoбKiØÔwŸ…ˆ¶}÷m"ë==ºýêMfn ƒ€A Å pF ©[ ZçPA„Ô‰s:\˜<7ø¦Üø[ü÷¯w mL0·úú 3nüžyç+n»ˆ²¬Rn¥¶å°©@ H~ö~DQ[ÔPÐã·(Ú¬Žæ¾ÏÓ„]HŸ¬ÇuQ|ÇF>ÍíÙÂBƒÐ'Ä܃{W©çE½ÛXO ¡×¾†ò:SïÉÓZà… ]ƒ‹žï…Ÿß…'~âÃý°rÁg¸ê—÷cæG ifêMâTŠÃËV¢²Š£zœÈÞ·Žæñúºa$h‹QIÄv×Õ²-Äõ@šÕÿ…d’vÚŒâºZ?š¥Ò1›7œšô¡Ԝɉ›Ö6\¤zïÖe>[obÞÐO‰qß/`âŒé𮜅 Æ%£47Ï?ü+|Ñêj<9m”SXPˆlnFTK‘m{¨5µx¾5‰å¾Ws tºO .‘[(¤ŠP¼mw#™y”^¹ÝI­2Ùåà0.!¾të ‚à.øŸþ kž­JFµëÇßzÓ.ŸÇ›cÒˆ~œÈ8€Þ{ÖOùÞœ8\·¸0Gòkèf5—d¬8˜C,l`yTLÞ[U/:ÿšLoÝ;©ŒíH/÷A¾ø8?¯|M-.ý ˆD$¿ b -]y4×!ÇкG‚õë!¼.U>î5¼ú $ÿäf|ýÂ}èÒ& Û×.Áô7â¾ÿ½ÚD"gßal]±Œ,ºÑÇ@a&ò}ÝfÇ)£x+Ë>ñMØE„ô•Vì7ØÉ7TÀAGÃBiRÏwñEÊ΃Ú[BìMFˆµômßàX\ûëGÐgätDsòôÆŸN‚ou>~ãŸx`æ,^‰2ü(¦¦üàt:ó³ÚØÉ5»8éU%“¨äPGt”L&Œg;¾Kÿ½˜O5åÙ® ܲ†läxnÙ5ÈG}÷×°\Æëz$ZOë~£òi০ÿ5ÆÜ2 ƒ@KBÀô–Ô-¬,2X“APd«Îxøõøß›3ñÜÓ!,Пë"½ð¿Ù 1}ÒhUj—w λà$¨=Ñåå‡þ#.ETb­·s=(³WSè2 …Ëx®=¼u?µµ\8ë ã¸éö4nפïË ÖÊ‘Ð?Fxqk¯º$Ú¥Ÿ=çŠÈ°:1ízâ?³7àÍÿþ—û/?Æý“½éùØÍýÓÆ Svøââ‡D'5$ÈšØ!?½ƒÎ¬¬5¡V¤ú=êGåÁ¶cr’vsà¾-.Œæ–M2pžFgXNž¥­dÐ+ä|6=—ì…>mkÛ¢öì(ñÍrÑTí˜"èjdï…ó.¾‹æDáõ7?ĺ¥_£²¸­û_‡-×]‰®$Wâ:tÅxG"Ío­Z…FÇãÚŸO¿Û·®ºJœð ½Ûzá^ÕøõnE µ%VT œ‘58“lŠ÷{9ÜÁ’¨ŠX—pKì)ùÕX9Þ˜tù-˜ƒ7Þ{«~Žrz6OÖ\w:ÆYþ)bÛöÁ%Ãi­á.wXtÜ}áPøi¬¤c5ÚG;ð«\¼€~($–[- ÷‡3L4´VŸ“É»ÄêfNÎ×Ã’§¿ ˆþQ·Ž"x¬ƒ… —,D&â÷ÿxIホWþý—£ ¿¯Îú—Lçd†äÊwñúBX°xSd –zCtP‚u]ϯ@¥ûÀÐNüi¯ƒ“:Ü’/”ßycƒù.×à"+6ÐWÄ«C½Ð½U­aœ…P=™Ô­'fè=b 6¬ø3_}<¼ŠVRåˆIÂÒu 1¼_’z:$*3~6•ÛhZC ÿàpüüÁ»hÞom©©>&uä#õÓí6…ýþŠÌ"IŸÀ —DZ$&„ªúK»ËwŸ®Á÷ä–¼lçXG•M”AÀ `0—–É0 6È¥ôΟ?mÛ¶U[zÙãkS›³æD@c^Å5¯{÷îEçΑÉõ±Ë—/Ç…^¨L˜ušf+ûƒK¥*n÷–›ƒ²òj„†G ˜D]‚*²ÎY4î–ù&5>¢ÁóêFØ[J/”AÛ.z,~j±/"i§‡ìV¨ËRçbÌ3E+Ãë7’˜1È‹¾j±ª §àG¶\ÊÎÎFRRÒ)ÈÍ# {[pIAnn.-œc[¹÷˜—¶ ÛCyq±¦25eœ\óÂôÖC¾ûR·Ez ÿYâă»xƒmКÚ;ñ©&$)•â$î=›9YIÏÛú¹º¥6o¬X{È;’€àà`«OJ‡ª'Øß› :ŒËÍ/¤gòne¡œéÇÄl[–Ñzs)H“|äO–o4 ^=®ñÈå3—9ñû­ŒfóÐù6hÉ«4Átä®âîëüŠž¹81¥ŸSBñsøðašWû"..î¸õn„¸c’ر*/-B­ |H<#k°’>'VžXÉ5׊7«2à|Ƚ®¯YC™$â+LGÊå#|ÿ«¹åÖÍ­»Çx¡·Yl*VÇT®ž]gñX/øÆÇÇÓ»| _qx'dÝPŸƒ®¹—­úBƒ-»û£ÞEšµ[KLÜï"{Ùñ¾‹‚ªôÉãP® ÿäwñɽŒ#­ù'ï¢X¸.ÂÔŸëãÀµÃ£ÃAO\t}ä›!ß°víÚQ®¤«ý÷Þª‰õkKˆœÜ<¸èÅ]¶—ôuÏUùø.T«÷ÇkªúÅŒ_/©±ËµŸËóú Ý|Ø…ÇY¿·Ó@ âùçk‚"Ö/‹ïHùþ¿‡rò¦?—˜ð†gýìrå\ÞQY^µ}ûvµ½Úyç‡Õ«W«24HÕ[Ò鱎œ›`0 –‚€5íÝRJcÊqÂè•uÐ0}­M‰WÊTÚx""¹—¹Ïs5ÈâàLœIPeàµxÆ®¹æ £ÔÀJâìeЃ4)z—xàoS¼0v›‹÷;pˆZá–Á4õìM Û$ju'qm+qR&yÖVe]o°çYo"÷ V%ZŸ+²ëNWîî[ÇôórÃ~nOX_¼J㮬ÕÞ$HG·…ny‘ao ¹öl Ýžù1© ‚i<×zÞuž·vaa ÷¢'a— þlÖ®ÔbMèÂuèü“¶ÑýîxmaÏÏ~nÇ ©ç"G‚ Êu9äÚ~^W^.åˆÊ ~ÁˆçŸvÇVÖ$‡’¦ú™ úµ_…†å«ÆRÏÈäÅm$”ý]ø–¦Ê;H¶Ê‰£,Y¾œ„||G` =Åsg²£ÊÜ,¥dzÒ ¦ü NÁ­dU³M$µè½0|‡ßíöò]”ùÏNRöཉ|‡uv¨IKq©že$èzÈѳ¯X)$]/ë!ýŒÜ÷æò‚Ø8~˜ÝAc!—2!ë£]ËàµÛbžN?ëy”ÜäõíÍI—G§rW~÷¿?è@*¿û|J“ý~ì “ùÝÐØq‰“ZÝüž"͵AÀ `0Îx¬‘Â_s£zÀ#ƒ'Ï ãôQß÷¼>‘x‘áàÀÈÊßlk¹µZ’ÚA¸¾g¥—gkËk;=:ž“ñªü%þ|¨7÷UçzM®;”8ÓFq€.Zs 'æM ö²ïYVŽ{oj†¹6^{×ÐQ§—4ösû3õÅ«4¬³½-xUó¨ý9U^ÕnÖ}]~{ ²DÚ…1rIxÆB/ìï t¡€ËB…§‰åpòYÊm9—²ê?gOÃUž§â%½ûÙ£ÓÉÓu)³´¯¬*¹v„7Îg›«m/¾£ùÝ—IA õÕϺ[û«1–˜Æ–£öisf0 Ó‹€!è§ÿ&å. xÈQkñNÝàCØõѳèÇÆ7µl2H³ŒG×*6í·Ô€î¨ˆf¾Ðu‘åYYYhÝš*ŸÓ4Ö€Ùʣ˫£<¯u|}G%Ù&^H¤õº‚g»Õ•¦¹ã¤~ˆˆ ÷@†ÆÖW§ÓGÏrzÆ{^{¦¯ëÚŽO(W…è‰ Ï´ötž÷<¯íåÈÏÏW¤+**ªÑõö”טk§>z>ãïy홾®k;2Híp]Áž®®û?6N—]Žò¾‹i·o—¯ãôÑ~Oó­ª;ÝÑOÙ¯<ßž‹ô—Wg¨g9· ÌÉÉAbb¢z^Ç×)Œ‘ú¾>›Î£~,@Ý-vì“:ƳÌÊñ_­‘†N¦Žžiºi»Ðÿ>Šõ‚¬Û’˜Sƒ€AÀ `0´XšDÐ59¬ë(5”Äë»Wõ=ão—¯ey¦Ñ×ö´ö¸ºâí÷õùñŽ É©ïY]æÆ>kO/˜jó]ÑîÛ·K–,QZ3‰÷ žeð¼o¿öL«¯íi<Ïu}ô¼o¿öLãymO+ƒYÑÈH1Óm‰üé š! ÉŸŽ×òôQ§mè¨ÓêccÒJÑ>}úpÏvzQdвìÏê8Ï£=>÷L£¯õýºŽ:>Ö•Æ3N§µ¿Ó:ô7ÁKIcõ;«Ï¹?úöQÇZ¹'Ö?å»*– 2ù!øöíÛW­C/--U˜Ë7Y‚g>GÂãâǤÕÏŠÈúúN£:{¹–úˆæ|÷îÝ8tèò¸—¹ôyoä~CAËó<ªÆ°lBŽIk»çyjOÛÐwßþœýû˜C§‘8©ï¶mÛT»I¼``·°ÑiÍÑ `0 - ã:‰kß¾=ºtéÒÒÊ}N•GÖ@¦¦¦¢U«Vj!ƒ¬²²2¥E×E H}¯ÓÉQÇÕw´§Õç'#­–¡eÊQÇïØ”gN4­~γ,/×ǦäÙØg›Nç­ÓËÀ[4ááá C=ts4 ƒ€Aà8ÈXæxcŽãˆ0· ƒ€AÀ pJh Ëlû·ß~«ÌFÅ|2==ÑÑÑj ›¬õ,,,TtD» dR49%%% U&t²&RÖ»Éú=1 QšG‘+ÿPŠ9¦˜fʶ/"O¶€‘gä(d´¨¨H™©É,¸üãªå IÕië’/Ñ|ˆ–@¶\ùRI«å‹ 1S3F‘-yˆIœä)y×%_dI™E¶ä!ZT©“ÔMË—£˜Š|ÁBk·£úäk, ‘/ØFbN)rd ¤¤͹hd›/‰—û¢Ý‘ $^œI›HZ{]µ|¹¯µlòœ<¯ÛJ—_ð‘òK|cåë¶ùº/ˆ|©¿”Säiù‘/øÕÕVžå×ò?ݤݤýD¾´•ôKÁEäK{K[Iû{Ê··•î "ß³/xÊ×i¥lvù õ¥”QäÛûBCm%ò¥/H[ÙûÂÉh«ÓѤ޺­ì}Aã#ïЉ´Õ©î ÒOô{¥¿;º/x¾·žß]WiCÏïBC}Ac›»/ØßÛÆ|ìßpý­ï½µì}Áþ|äÝ´¿·òîêoøñÞÛúú‚Èõl+‘©ßÛúäëo¸ý½•<ä»àùo„ÔÃþ]hJ_ÐßXù÷SÚ ±}A¾ù'ónÿ.ØûB]ßp{_–ò7¥/4ô ¯¯­~Ì7\ÚJþm8pà–-[†É“' t& ƒ€A E#Р‰û‚ ÁéÕ«—8 ¡’Š jd %ƒFùÇYkÙeÐ#ÿ¸ËÀA)u¥•Aޤ“ ÏÉó"Gä‰\û3"Kþqþ±òíeñ”o/‹äu¼òÛË"u‘ò{Ê—kÁ@dÕ%¿®ºÖ…¥–/÷dÀ/ƒ ­=±”òk,¥ ’>J¼Ü— !~ò¼–gÇE—ÿÇÈ÷ì º,z€&¸‰|)‡ü ®-¿Ô¡1me—o¯«.‹>ê¶ÒøÔ%_§•£n«¦È—´‚‰ÈÖòj+û{åÙVö²x¶UcåëºÖÕìòëªëm«ãɬêú.ÔÕ—5–ö÷¶©òµ\¥þîØ±lª|ý^ÙË¢å×ÕŽ'_wšÒ¤m›ÒV’¾¾÷Vêq*û‚.»`U–ºLº/×ÕìßµºÊß|É÷DÚJžÑß5»|{YNF_ðl«†äk<«†¾;˺ú‚]~]X6¥¯ì¶ª¯/H9åß»ˆßÙÿ½ÿþGý;(u5Á `0 -  úüùóÑ©S'$%%µ¤2›²œÁÈ€UȈ Ðd+AŸ7öØ”gš’Vçß”gš’öTÈ—ò®:¯ã›R~I«Ãñäêû’^ŸïXWZ‰"¢I§ŒºžñL£¯›’öDžiŠ|I«ƒÎëxGI¼4öû’¾9û‚=¯ÆäÓØòK:™ ‘? ' ~øA½f úÉBÔÈ1 æBà¸# ™é— ƒ1 ME@î¢Y’%A<"Ë_LLŒ"êuÉ«o°ß\iu~§R¾Î³¾cSÊ¢eØŸÑqõíiõy}iu¼N'GWßÑžVŸ7%­<#}FLl¥ÿˆ‰ õÉ×ñögu\}ÇM«Ÿ«O®Ž×éä¨ãê;ÚÓêóúÒêxNŽ:®¾£=­>¯/­Ž×éä¨ãê;ÚÓêóúÒ )—eò}˜6mšZê!í.éM0œºïÈXF´é& ƒ€A ¥#p\‚n¯€þ‡ÎgÎ ÇCÀÞoÄL?66V9º³Cû½ãÉ1÷Ï-ÄÜöðáÃJ{Þ¶mÛãôs ³¯¶BÄ…@eff*'bi#A&‡õßÙWkS£æDÀ®X0ÿÖ4'ÒF¶AÀ `0œLšDÐOfÆFÖ¹‰€hÈÄiš8Ë’5žfÐtnöƒÆÔZHYbbbÝ>ØnÌó&Í™…€&èâ‹DœÂé`¾ s4 ƒ€Aà\@Àôs¡•[P…d‰fLÿÕMœÅÕ^i2v²ç"OViˆ<{>µ9Zš:Ig¥±Æž¨Þs‰¤^bå¡ËÞ˜¼ë{¼,¯ó„Ë|<á§÷¾hÐÅ‹¶¬?oŒ‰ûé-mmîºïJG;ª±jzH}°VŒÒ[ýÑ«Þ>kK~ÆŸ A×ß97Á `0 ƒÀ¹ˆ€!èçb«Ÿæ:kâ*G!artq@.DSjN½eͺ\3^“š*6eÀáEm½ÍdÅs}•"|­ƒÊŸ×–c*zºw¡G,ý€ýHARn/ÖÃß×]^K>Bج‡/­˜5ª«è ÏíáÙ.âDÏ¥ Þ”íϼkÊ,Õ=n¡O4ÇSÿœXYH‘ ûÍ©/Eãr¬é»l)«LÕ¤=Ø'¬‡XH:E@¥ëh+MÊ}ý¤ßX}¶Š}§¥×¿q(ÕŸJêw¶×±þÚ›;ƒ€AÀ `0, A7=áô ÀÁ¸–ªªJEb¼¼„¼Xt!›••\Ê$Bhìƒv!/:Øã™×7lG!È.æ‘™•’Š*„GD!$(€dÜ›ÄÏ‹yW«¼$ï’¢<ääÀ/ ˜û©‡s’€$‹ù Iª+¨²ðžlñã$!/.*dz)3É:×Òúùz¡¼¬”ëi ¼ÚÁ¼#èÏ4Õw,±×Mò;ª~¼>ê>ó·{%,sËÈ2svFJ™­ y¸Om-GîÕ$Uåq'b¤– ³—¥öyK¸\«ûMxN˰p`.¶gE–¾/Ús!³ö8]¦–vTe”¾Ë?VGõ/…‹”u’zTqÛ'9×ýZ׳¶.l3wŸÍÈJGi…Sõ›Ðàõ¼N§åêçõµÜ×qžiõµ9 ƒ€AÀ `0´\,×Ú-·|¦dgB¾HTD+Z]Y†Õ‹¿Å /¾‚Uw£ÚéPšîÌCûðÁÛ¯ãݾDZN15ÐÞŠœ(²LòëÃg…\ ©!#nÒ#ríZy/oî·^V„ù¾Š©S&cíöÔç…C{6cΜ¯±aËn¸>ðóq`ÿž˜2u*^ûø+’ÌûQ{+äü¨|t{ã=_æ—•ºó¿ú¯¾ü"}ä<÷ÂËøìËy8‘‹ÊÒ"|öÊß1åš¿bëž#ðñ£F˜uPdNdHàÑ"¡´¨)-Ñ–ü¥îZÈ}5‘AB-ǃ[ר2ÿ÷ã…(*«"6‚‹5±ÁÛuÉÛÊßJ'2Yˆ†±¤PuíóVœ\«À£O«^Ç`gNH¨¤s8¬º³v5u³ò±dêgê¬H ŠT}šÖ ÅyXôõçxå•W±jó.pjÁ"㜔پa^zé%|µ`9ŠË¸×;ÛŠXõVXH_“¼QUVŒ¯ßzš}ön¬ß~i|(I’=±sô5ۃ)ï‰ô_é;îžÖ‚3E1 ƒ€AÀ `¨ £A¯ ×lÉ&dÓY]‰­ËæâåÿÍC`b/ êÛUi¶ sÒñðSÏ2eg :Ž’’ 1{Ee5¯Iª©¹®æzöjÊS{&‹†R_QY¡ÚÕ—“%ªùŒÎCO0ªeB,Öþþ~ÈÚ¿Ï¿ð!†d];%!!2„[‡eà›÷ŸÂ+_ìÀ­|œþăæë|H–C…—E¦ÜóX×J””–+­º7'ªx¢úA5ÛLðÖUbiàbÿòe?"%Wý¨šå‘~äÏþUI¼å¾»û¶L M© ƒ€AÀ `0ÈL0œB´.OŽBvC"cUîa!Šd«5ÕhÏØýÝ:+3s!çNÑÍ6bŪ5ÈÈ-BDL ‚}ºÃÇYÕß-ÄÆ{PV^ ?êˆèôî×Ý»v$‘!ŽVù„ú»·®Å¢%«Ôuê®uxç-úèøª¸ W~XörÒR‘[R‰ä!#ѯ'Ëâ&adH$S~¨*-Ä÷ó¿Pä<¬Ïx ÝÚ·"yæzx>#¹™±xñrø†D!<؇îGvaú Š!zׄpÍ’ï°aÛ.”K_N$DDÇ[XvI¢M}~X½»RóУWo¸J²p(» C†$#ÿÐv,^µ‰D»Þ¾þj9Aïþýѳ[Tæg`ñ²¥È)óB›VqÈ<¼‡2 ЭÏôèÔ )Û6`óö½k‡£F Ml$1“ Œ*EÞ¥¯I·O8¨Æj!?R¾jÖ;0$ƒFMDôUï…CW_ŒV1aÈ:ro‘œý1vD2‚¼ª°ìÛذ}*I¶Î1ñèÛ?Ý:µUïF`ä@¦_‰ÀÀT•—b ûä¶™H1½»´EÚ¾íX²ôǶÁˆ‘ÃäìôCX³jÛoªiÒ®c7Œ>m¢Õ2 CÒ[H‡1Å0 ƒ€AÀ P† ×Œ‰n.,m®ú%i ®„-WcžW|ph÷ì—ÈœR¥=&;Áª³qË]Ã)—bdÏÖ˜ÿêãø×ÓÀ+ïÍÆ®qXúÉ[xyn®»~­]†oW¬Gâ˜ËðÚÃBÛ@Ò⑨´‹é‡v㽯ÖP=ƒk>Á7_‚?ÿã)tK°ÈîWoÓ ùm•Üúé´Ÿ>ÿWto£È§ÒžÓL>'#›ÖQ;Îð««f`ÔÐdû{¡:: 3®¹åNj½Ë ¸&9ˆ)vàï÷Þ¥»z€?÷>õ2®¼`Òv¬Á}·ýË·Æíw^ì=?àî—žÇ/ï}¿¸|*mY…;¯¼)|&¸u'Þ£D¼ÿÅBQ‹/!$8ä;‹>~¾<¯ù Λ¦4¦–öYLÊ(ÊOÇŸîû›zÆóç¿~A]b°ìówñÂì=¸öúi8²~¾Y¶Ã~‚ÿ :„8±röKx~öÛãÌúüKì];Ï<; ×^w=2öÿ€¯­ÂGaö§O ѧ _>þGÌI·=¦N1rô,]²¬æÆí÷?‰.›ŠjÖeRA‚Ö k †šÄ-æDz´S-ÓhÕ®#&\8„7«°u÷ô뜀ý»6¡Œ)&\>íÛ$¢’ >| o.8„o¾»–ÎÃ’õ»Ðæ¼+ðßÿ€xN¶T±ïHå²dåì׈ûz<üroôïÑ9é)¸ÿa—`ÉÈ(Ì:Œ™Oÿ 3?[ëy|K3ØçîÆ˜+nÇßþï:$F…( ò˜`0 ƒ€AÀ Ð2°F¿-³l¦Tg1¢Yž ·&ûøÍðñ›¦I¯8sËâAr.áÒ §£? O°³›þ9s–¯Aß®ãò;ÿЉ7—Ò®»)Ûà úŽÅ!=ó6´kªLäåùòjoj'ãñ?ïÃ=¼†q—ýWΘ†˜ˆìÜLBÉÐzäxü®[P’ŽÝs3ï™ôŒ_£{ûØZjCm®“fÕå;Õ3í;´¦éÿòìØI§oAÈQw“HÅPš?ÂLÄ<<˜$3†Zn !¡‘hݦ5‚¹]ò’лk'tíÖ ¡åèØ¯#NQëå­»L N,y¯0Fä¡´„úQæ!&ú®õ• k¬…»*¨ëκ {nHݹA]WRNiIŽdY¥]¿l>ö¬š‡â’c†¡ñAÈ+ÈFZf¦º?nÚQûZ]YŽ©‰˜O5Öí"Ác˜÷ák˦Œ†ÖñQ¨ª(S¤\–Š Ö*°Œ©< ë˜Èz·EçváèÖ³cf£°¬Œå)ÂÁ”mølö\…¥30‚µ“O,-!²ÆYÂÈ1“pÁØ~,‡SÕc- þÜù ±™æñN/TÉ܃KyÒUe©Ï»víÆ¥ÑXßÎZÞЯwôîÕÕ¹V›f•Wq ºxBw!€Þð%ȹ„–«A—²‘k³Í½¸D£kϾèÈòÎ]°ýøîôøQèÑœÈÉ£¸½;7bî¼Eصgœ\2‘­jØ•xZu•¥¬«Ú3Y—¯ÿ$Vœ:«Ë‘™!—Èß·ÏücÊ sAKw¤/Š陵ò¬{æ× `0 ƒ€A å `zËi‹s¤$µô@ìs-¡c—:tMµ}áë„èh„ø*BFÚ«Ò *\z%z&%*'h¥Å…ˆˆAêž ¸é×÷0Mg¼øÖãˆó©Ä›]O7T)³n¡%²f\‚rvFÍ·¥Yæµ7é;hÛ5³¾,W5·â0Í?THdŠò†­Ã!Å‘ÿDs7€× ±rÅèßµÚº‰qÊ®­(v„£}t µé¢ùÌ “µ TÒ;¼—WmYÄÑ—µ¡’‡Ç¤áýÀíÙ*¹æØåãÏuåtºF/ôŠ9 NÅ„îqK7_?µn_î ;m"}ðɧ³ñż%н ÚŇ£Zi U¡%YM(ÉFWò~I‘Ť£Ãüq e3n¸ý÷L‰çßx‰.¼ó䕸pu±"ÓgК[™Ðge¾4OOÙŠo¿›wðìËÿ@Ç8_Ìúï³ØûÙJå¬Otø^~q¼H­Õgxài â0N9ÇsOlø’€J‰…Œ—q›:Y?Á-ä¤ìí¤nQ?â„íÅY ø¶I˜ö³‰øÏ{óññ{ØÅ:̸dÚ&ж» );6âW¿û ÆË>‚G)^}ø:ÌÙZAÂmáìí¬jgí$@<ÜóÒËiœž¬ºr2ç°Þ“öÝ“qÑÄ1ˆ a?#fùHLˆTkù­·ïØþТ`4…1 ƒ€AÀ p#`ÏaLÕO-–±µpCqúE“s·òjoÅ‹wM²ËËËp@е7 T¤""2W‰²×ãÀ¡Ã¨"‘ó¦j˜³yÅŠÀkí³ïà1r²òW-ÅŸ~‚7|^bе};xÓAž tÞÊuí‚åšÕCçtÄ@B×OK(çdƒhyü++.QqhסAA(+*ÀÖ%Ö’ÁNÊPšmiÈe’ABE¹5ñPI¯ü‚‹Óm®ŸRLÍ?ïKÿ záé:hRª´È:‹£WöÀ°hô4L•p×>K=h@DБ›x¨//·ðJêÚ^õÙBZJ,Ü*É÷©¤òåÖs²klùÌg%|3÷+|ðÁûøô³9ê:#¿jt´ïÐE]Ïþz rò ÔNeE¹X»z ÊÊ­  z•Îü ƒ€AÀ `0´<Œ½åµÉY]"Ñ<+îë>úú[&Ì~²…”›<ˆS,ñ¹žÝ†fÚjMo<®üÍst8ö fþóQþÕBtïÓ/¢¿î¸é’±˜ùÉ<\}Ù<ôJ¦Gëö\"Ó2àGSm ¢vyù¢C·AÞ) ?ÿŸú»û¡ÇÑ7‰“ Áþ'#jØLEn„0ZAÈ;‰)5Àý†ŽÃ‹O=ˆ×^ysÞ]ý©4Ñ}Ы}‚2›÷ e5ÞZív|Ä*;H¬ŸŽû—‡ž~·-üÈÐcÚÕ˜~Ñ…3õbܶÿ0^øß‡¸mÁ‡Öý¸ ¸î&±0°´¦U,[ë¤.˜zÉõxáÃÕxù±‡Ü§F ì®0p+éë §„¬ÌÍøóoS“×/î~{w‡£0×^0oÎ^€k~º=EPG&K‰ædëÍÿ}¤>²…—õù\b;tÂíWMÃÞù 7]½]zD½‹#GH¹h–‰e¸jUµ5˜’ãgiˆ}dñ¾¤¢·~ ƒ-üeB¤ŒÄRÈù™¡AgXh™—?1èÉý£1o}6úL¼½èß‹Úój—ڶ¦ Á;_}ˆ+¿ý} WpÒ¥‹’ÁNÎ0¹¬¿“žýƒÐcðhtxá#|÷Ù[ü† ¡ð ä¶t²…_§>ƒñÜã÷á_÷=ˆ{~£fUÔ} ÆüärÜ 5': ƒ€AÀ `0Z \îXK;¤Pr©µTóçÏGÛ¶mÑëqíñ-¥ð¦gö¾³páB:F+¤Ö¸'Ji¦“•IMo)Â#c®È[1§erݵ“$'..ŽF!lô@ž—ƒÃ©©((*QfÖ!aáˆGTX=ª§bïþCäEÁˆ‹¥Ž¸ª%T‰Ç&$ÒY›72Ò °´QÜÊ*Š[›qÑ.2Ò#+7ŸäÆ[É bº¬ôLø… !!>t¼•––†â²jÄÄÆ!",X½ÂÓ…ãH½d͹8ùÊ`ºÌœ\N(poon1ƒØXRz ÏH;îÖ†èXæÎuåÙYÈ¢ã4¿pij¬Ô˜W”áÈáTn£FÌ ˆeˆŽEtdïûÒûz.R¤¡uw‘”GFÇ¢UB*¸>?-“²‚BiÆÌ g)ޤe ´´ÁáÄ"Z-µ÷þ$Ô‡RÖãgçÿ>C§áÛ¯ABX ½Ì al‡îÍ-9YiØÇ ·‹‹,i_^MŒȽßY×Ê,#‰ R9™HIÙ¯Ló¥Ý¼èd®ˆ±‰­é‘fðnââä‹ÌŒ4ä–ÒB"šåŒdûæ"#3 Þ!Ä%¬wnn®rˆIí£?U-¶ó«þÎI&qKOÏ@ Þù³=ãããàË­÷hÃZ¥#;ãö8Ì5ëìol§jZ‚”V:ß !Ü ýH*Š*œª/EóÝpÒ“ûÁý{q$3Ñq‰Ä>E4_wø žý5ýÈYU >—NË©y÷'±ˆ&¾1Ñð§Çq.§¿ï- @)›XLÈ»øðaL:aaa–C<·ÙK+³)OËFÀþoÏòåËiäÖ|KZê»Ð²Q5¥3 æFÀôæFØÈWƒ!=‚^TT¤&}ÊË+¸g¹ŸZs[MM¹ÚóÚMzemº8˪¤9¸˜H %–8oj¡5Q™ÖsÕÜGÚ×Z'Î8&U¦Z§^I“yyÜ×Oòqp8=¯3/‡ƒ[xég(]œ{‰åµ/IŒh@ÅÔ^V{ûñ9µn]Ö“|ëzèfÕdLLk³ó}§ÚB®F‹eå-ÞÛ‡y3ŸjµöÚ)uæúb•·”AòQ2¸V[îûP¾5̪î¼gaCÖÏ5ì~ªÌÕÖºz’wÖKžwÒÔº‚¦ø^Ü žýÀžµ˜4ý*zÇޝ¾~=ÚÄ£¬TÖysí4ë'•œeݳ­B–ÄN­9çÞè K®WϸÁñ_ؼVmÀ:(,y[®«¶qö”6T{§óy«.ÄŸxKeee1Ïj’ÛxEÔje·ð3iGÕ6Ä’Ô´5‹Í+õ+mjÇYÚL`×}¶¦ïÉnlGñWàö> a!®l;鯲#‚ÃÝ$ÊE²,²au &çÒšš K› AŸ2eŠ!èŒ 'Œ€ú>Ë;À`ú Ãh4 SŒ€1q?Å€›ì„/X$ÔE/äBUà J‘^("KÂ!Á"-ݨp{%—8 zð%×\î ¥%]%©y¾¬ÔZó«åYyWY‰ø«eVTX^Ñe:)5ÑžÏÙ¥[»H KI2%ˆ]?!˜â4¬´„ZoÞ“úÉýJæQQnɱòa RZ[7‘§ï i« nÖ}q–&y±ŒÌ[äé´.jóKD]/²4¦R&ñäƒGÿ~?¼èü.€¥’É!oj]¾äÍtôÀ‡Õ¹½¶’·ü –’¿O]^ÉNÊáι‰WÏñ(8Ô\SN9À)ù<—rZNô¬¼åÙ·]ŽR6)¿ÆU 9~8ARÊvÕA–nHëZ˜gšï[lÛjÏšt¬³Ô[úž¤ÕýFÖ¶Ë’Þ: -[&eTž"Cò’†b°úbíµŠla?º…¨ër·°"šâ ƒ€AÀ `hv AovˆMžˆfЇ¦á¾Ô  1áÔ!×—\Ñž Ë#â™·{í÷©+Eãrb.Ú|!lÒ_ ikngj*igioù>HŸ4í}¦¶¤)·AÀ `0 ?CÐ zæÙ&# ƒnY×Ë5Æ¥Ôž‚ÞdÔ‚·…¹¥‘v+X”ÌæzXHZFF†"èRfé;†´5Ú§W®´¯,e¤Ç~ióZ[´Ô‰£Ó‹”ÉÝ `0 ³CÐÏönaõÓ$KœA‰ÆLF‰×$LY®%è{žçê¦ûÇ“¸égíiê;×òµŒúž­+Žó”­eÙãµ\ýŒN#ñösyÆžÆþ\]òtz9Ö•VÇÙÓɹϼu¾r¯¾2é{žrí²$gOkݱ~u~ö¼ô¹´à`Ë1Ÿ8w’ø†Òë¼ìòõ¹¾§Ë¡åÈ}Ÿ=­>?›29cÀ7¢–’˜¯£Î;èèN.y"Q*Ô…¡ŽÓ˜»“Ötè£&èÒîbÊo‚AÀ `0 sCÐÏÅV?u–Áú!CЫW/5×k¬Oc‘LÖ- M섨íÛ·Oõ“Î;« Mæš«Èõ‘ÉæÊïtÉ‚íE¢m1laÛ:åÖמçty@‡‹š”ë'NÖQº˜¸'&&béÒ¥5$]÷‡“•‘c0 ƒ€A %#`zKn³°lB€d©YWl‚A !d{5±´p*&sdÙ…ų9(rîåBy•Žúswqf¨I¹> µç¾¾.´‰òBX@sÑóÚö’.“3†˜ŸÍ½ÐÔÍ `0 ú0 ©>dL|³! ^Ã%:¤«Ù*r’×›éð gA¦éÕ™¦Ö8HßÈËËSšT½ºÜ;™õÑòĤZ<Ú 1ÔH'Œ} P¶ôç—?ŸNäÿ»±ës«çO/üÖ<|ÈÁ…†Ë4…¤•óJ«]\›ìƒV‘Þœ4Qî'µ¦ò=I;i =)sR30 ƒ€AÀ `0œ‚~4ÒÙVDMÊ…hL²uêpr‘@XDñèò×_wÉd¿uµŽ—8H8ZVÝÏ4:ödüFgvrÚq «!ko¿w2rÕòDs.šÛFˆu¯ÁfJý¼zÈ6)¢ÚÕŠ´ÖkÛ¤õŒ-þTŸÒBý«ãïBZ*IÆ…œ—™p-†qܦ^•?œ”ý›L'zìwâ"tµ·; lõÜ“Srý]cKÁèäÔÌH1 ƒ€AÀ Ðxd³g F"`iw­½¹-áÖS‹Ý0éJSÈ…Ú»ÚMΙý %Óézø4=¤Ë,Zí‚‚‚šRèøšˆq¢e‰¶V´¶âˆN‚Ž÷-ñÖ=k¢@“H™¬QÁ= ñµÄµ6­Šw·w}yxæÙ׺¸Rn™#’?Y[.³µyÔª‡‘¥‰w(z ‰ºX¿Óà¾.òЉà®öÉ*£ÆDO–\#Ç `0 ƒÀ™„€!ègRk™²žv„dUWU"7'…Å¥,P12!^ÜW¼ /ùEÊ4X–¤N ˜ïÊŸ&'ç.>#ñŠrÓ°~ã+¢Ì*[z•@bm²œjR@ßá=^WW[Þ¯‹ós°qýä–XÚH´µOµÌ3M~ƒ‚‚ŽÒjëø“]jÝ.õÉ•ûš`;«*Øþ9(-«PÉ•6™í"$¿¼¼Üú«¨P×îk¹WQQ޲²rÆW· ±ðë2v—BV£ªÚœñf?¾±¿næ‹:ya' y:»yy•…•ÜmÀÉ¿ú@2ñƒ€AÀ `0 ?câþ£!4΄{‘Àä¦Äßï¸#¯Â=·]ƒèËé]ÚÞ-xàw!fäøÓ¯~†@_YÃËgh²[,zãå*Å—Ÿ~ŽØ®#0¤w{u;=e-ÆÝò*VÏ~ aA¾ðázh š ©YV¬ºUsO§ñö¶^é²¼4ÜyþOñèw 144ˆ¤Jòµkv­ç[꯮OYY™"ººœ:^_Ÿ¬£ÈÕá˜I¹'0 ¶¯Ã‡Ÿ}Üâ*¢é¡¦cúØA8²w+fÍúÕAáð­.‡3( {uÇ‘=›q8·˜kÛ}á…J”Tù`ÜÄ 0¬_GJ“V9mÂjU’˜ËÚó’ô(_îì…ˆ@æoub8 úŒû×:'Š9gTÌy$vÁf ÇàîΩ¾øf+ˆl0 ƒ€Aà4"`g§±&kƒ@KG€lÆÍáÊËŠ±ð³…xâ7cõÆî‚W`ɼOðÂß`ýÞL¥%•B¨«+Ë‘•‰üBª#•ÆÄ¨0ï=3VlLA•›ô¸ÞHNŠå:`j×+K‘“›¹%EÌŠÑwU#?7¹yåæ=!îšÄ” ¤¼Bi÷#:µUQ)Ç™Äa›6=—:èzžÊúˆE·ÐóÌý›ñ‡Û¯GETWÜpãM?¸3.7_¯ÜŒÌô4,\š‚a£ÇcÊÔ©7r(Ú·oƒÃFadrlâDIXë˜>yÓ5'A·O’ب/ޞƜ ƒ€AÀ `8[0ô³¥%M=NN.ØxåeèåUÏ¿œ‡QÃzÃydæ.Ü„ëo˜ðè@j¶-êupÇ:¼ùÆØŸ]1wžzùM˜1uV.ûo[‚Ò„w±gÕ5å§èß*!e»ñΛ¯ èÈv¬Û‘ƒky.š:!þÞ(ÊIÃgᅢoWmU„qàØóqÅ%ÓÀɃ*¬ûþ[¼üÚp†Ä¢º srø›Ö·ŸN*xâM£—h Í¥A×ò=*?qcΰ‚0ñïÀïnùÄf¢c‡öص¾3òx¿"5ñ< %§áÄÑ¡kGl^µC†ŒDÏvaêÞ©®ÇÑr_‘¡WP3žÅuçñ~lLVrâ»là¼p^ë´Ã.µ.ÝŸýyÓ9­ÕuŠ3‘ƒ€AÀ `0 ?CÐ<†FÂ9†€hÄÁ ¸ñgÓ1ûݰ‚ä«|ï t> }ÛTᣕ…ðñõBYö~)Gò`Ù‡¯¢Ü™‹p/šåûÄág?¿­bÂQVX€ââþ±*aôà¤Éûé7^óú š¸g’¤wàŒÃ“»Y<šlŒ¢å»K Éø?63ŽŽí§„… šä‚~º»£Éß `0 ³CÐÏò6Õ;YM’kí žšvûâ’ 3ñË‹"|ðxíÙ¿¢dÏ·È-©RÛSíÜ´/~´³ïxJ9– i…øÃKðÍš}xè†Ñ7ùr´KI(¹)ëw"bìOqçí·¡g‡H”÷iƒOßš‰Ìü|”å:ñþÃOsýóŒÞW¥ÿ÷ç¯àê—æá¦Ë&bÃòù˜xë¸ëŽÊ·ºCT>zãóS{õÀø#û’ÛÃé0qWù;¼ÔÒƒòrqàG®Zœ­ëÀÆ­›ÕÄL¿V‘èÜk’û@·/«pú#(ÀòMàíåÍþàe-Qà³§­ªäµ?¢Å¯¤Ùz«´„âžÄõðœ7¸m-÷Iç½®tjÿ¿IlI^ÝË甓8먕ròÎZ .'¯FF’AÀ `0 ¦#`zÓ13OœãÈöh…i©ð ÃУ°+˜Úsútn‡eÛJ¨h´<]•#©Ó ìܺ›—o_?ô½ý>ŒèÞ•Ô¦–qãéŠò²4Å¡\DT$ü|­×²Úå‹ömºQ©YW¬r@IDAT‰¢Ò2„ö>ÛÇפoÕ¶úÅnEQA!òó+0yÄ0„¸ßè2I‰á™*ÜÞÐu=N…i¸gBI4\ïAg~Ï}5S' ELû^øÅ¯»`Ö "…ÞÜ}i1Ѷïpœ?a´.jí‘~Ä@˳_ ƒ8jÄ}¨5/¦ùºËyþ²‹\øËbà‰«ÐÑ5]H£öͼ½°£Ï q?se0 ƒÀÙ€!ègwûšÚ4ìšCBBý¹mV‚ÛtÄâ¹_ ¤C?•“ÚOÛχÞÞ_oö†µÃÅ3®FRlˆ2mb/zZw§Ñä¹ \?îâ!ÞÅ­ÕD†ñ×îïãÇ}¨$í~(LY€ôL.vv“ôܬìçÆÕ~ÔÔúp=üÔ,ˆ²¼Ô>\{.ëàÏTr£Ë œà t¼uÕ<¿ö<ä\íûÍ2ábtÿöÜyïÃøåÏÎGÆ®Uxñ³íøçó¿€wæV¼ú÷#¦UbœÈ/s!yØHtlMà 'r33iNîöh¹÷kžÂ7A*烔½²Ü¾A.üb© opýŒÁ\ƒÞ}œ–¯-táÉí@:[_ȪÐ$þT™01Á `0 ƒÀ¹‚Àé_y® mêyÖ à¤§¬Œé¨äZt £'_€]ÛªóÊÊ Î)Tû wé3ƒ×}Œ·g}†Ãé™ÈÉLÅÜÏ>ĪmûàŠpŸRÌ[´ÛwïAj Õ™G²óI¬•(Ò8no•—Šü¢R„ŶƤ+.Áoz»f 5e+ž¾ïç:d0Ú%D¡c¯žxîO7aîw?ààþÝødÖ[øpÉ·5fÕ–Ä3çW“²’’ÉÚm+èx}}2š˜{æAŽ®¶³ Šjƒ?<ð.Ü«—~‡”,{âAô혈¸VI¸ÿÙ[à,ÍGVNË\Hí´EȽü1á²ËÐ:†‹¹t>'³ìM’UÓ¿,‚n±¦ˆ7÷8¿îK`} ç€bxgð§E¹ƒsQü៞chR†Kì‰{ãž2© ƒ€AÀ `0œ] úÙÕž¦6͆€h-fãë„aND€ÛÝ%{O¹M˜C"1¶G9µà@D›žx}õ"<ñðƒ¸ö«T}¹Þxâ™ALŒ‹®ùxè\{ÚK߃±ÝÃñ“±ýàçg™¦;¼|ÐqÈ$„у»èÓ¯ùí#È}ú üæ×wÀ¿2m&>ßÝp‘2î;bf>y/.ºà|üäÂóÑžû›nÿü}ݲ˜ÊÍËš ¡“)X“ر<»+èx}}2ŽZ¦lWWg Côdâ$<®-.ùÙ5ôf^MKˆÚ%±m;bÆUy\H§w@†£îɵÎï˜Ä§*¦¯©«ÞŸKæ° ·/†ÿà¼<  Æp×›Ö2ëTM dƒ€AÀ `0 æAÀÁãQãvûrþüùhÛ¶-ºuë¦4H§}`Ù<©ÍŒ€½O-\¸‰ÿÏÞyFUl}ü¿Ù–Þ5ô. Uª¢tlX°wŸŸ½÷Þööì>|‚úTT¬Ø("ˆ‚ôÞkHHHÝl¶|çÌÍ$— @ÊnrÆ·»÷N=ó›%oÿ÷LiÒ:uRS—ÕÙÞµÜ~MWï%õí¢#Ó¡a4=„þm°°£5Æ$\xMy)©˜0ššÂóÜ)¸Šò±{w6ü!vÄÅÇ#*‚æ«@GXíÉF¡«Q1±ˆpÚ¨ÞR8©¬ë%ÁX\\¬Ö®;Æá]¥tûŽ;á q i³æ#1¯ùzK]ØNi{8’ãÔty›Ã {ùQkeÍÁ‡îÓÖ­[•@oݺµA¬–nnn.͈(ERRRЩ3hc¸ Òq›©¾(z±—œ;òäþšj1Îq¹~L=׃ñCø¹.=²¨a±ÎHøïÅü"..NåÍÉ BàôßÎ8oÞ<8NôêÕKýÍä8ùMÃ$! „@ z ˆØØH•Xm6DЋƒ!RÈÅÈ×ôr8CÕ1\ê¾LÁ„†G¡E+ Š 8ÆÆ'"¶"šê5„¸J'±¡Rùžƒ=4­Ú¶W×ü¦ëáO«=i­Ú”§ó…þáÌt³g[Ç×Tß4?n'33?põÄ™Ëè§šl¿T\ÙéÂ:¿$æü:½¾>ÉN3+üÈÛ¯‹Tx)}y8ž¨À›Ô³(ç¯!_³áüõ¦ôúz0øVð5/ΩR B@! „€D@º| „Àá(cºˆY0²®a¡f„ áÆ»³sÐBN 7³¨3×ÃHßëútY£ ×e´¢/ø^×§’Ê3í–åŠsŸ •511QÙÎišMMtFsµÑ—äädå½5¯y¯‰6±Žb‹Nr—¿6Žt¹×JL‡Æ×JMèW:mçÍ?Z6±"–Îð3¾ÎüÖ_šé¡÷š©MjB@! „@pœã&V×#ƒ ÄÊi|¯E ¾Ö¦W¾×ñæOΣCÅu…à×i†¨7î*òU¤ëUXXØ>ôÚèóbqh·ÛÕwf™¦\äú¡ÒÁèò÷Ððœ³.§oõÁ2KšB@! „À~„à¤Ø‘`o%‡`\~¤½®IÑ|°º–v¤¶×u9sxz»>vŽí0§Õ¤]µUoMÚX;u»ºu›žU·Hµóéuæü÷¡1ým¨6 É(„€B@4 "ÐÅ0N'Yl­\¹Ry*y*±üœ± $K´G{Û¶mJ ³hãÝÜkzŠû‘ö98§c³¯Ê[γ<Ž”DÍ•ãñå½6oÞ¬öà ïÓšc+5 ! „€ÁC@zðŒUƒ³T~x7¸!­±ék¬£¬ˆ,i»Ž²ªZ*^•ç¦öWâ|º¯@/O9ޝ%K•U¦qÖ÷µØœT-„€B@€% =`‡¦aÆžÐ.]º &&F½f/¥W5E€§¸³g•7p ´È^ôÀ~xpð‘l×®ÒÓÓÕ±wœ39¼'’*„€B@Ã' ýð™I‰£$ ×ës²:)ÞÀhAÆ"“×%›Å&§™ïëªëævygy·Û]/v¬¿ì3·’÷ÛCñeḻ!”NE3ûÒ÷wŽû‘oA¯4Â!õº„€ÄðxóßóÑz볤 ! „€B ¡ÞÐFTú´È¬Ê˜ú˜UÙ qÅÅÅʃ^Ÿ¶šÅy~~¾¼V:ÐöOàãÏl$ÈÝtžù–õ~<»Á‡tÌy vÖò…æ~x)¯!Ö-pmòã—£ºÚa ‘3Î Zò.„€B@ú! ½~¸K«–Ë" #`~€±7Õœv°:j2M·Éž]öœÇÆÆ*OoM¶Q“uñ! á:‡ú‘ìJIŒ³gÝEÂ=§”ÒH„ÇÐþkt ']¯/ôãÏí> híC\¤•¼è¼1[MZT½º4çêå–\B@! „€h˜Bf·¤WB þ¾QÓŸYpìÿ:¼5µóÄ×_k¿eÝoÞ韽Ö:èx}_—Ÿ,ÐÙk®c[ªz™mª*ý@q•Ë™ïùú@å8žUµÏÇß<ã³ÔãÇ^7PD‚Üívbü_]CÐ7É‚5„´ˆÒ‹I½‡P±RVìõT?ªh_„{P$J! „€h°ăÞ`‡V:V×X`(AN"i׎-Øž‘ ‹'~:ÏÛkA«¶íš§¼ÂZ¼+q¥Ë’¨÷S^]Œóðz\W‹4£ÒŠú¾¡|r9ðTrózd__ý¬,"Íöèñ÷•ºè¨°-pDÆ£Y“$Xh0•tVcÌÏDY؃Ä>µ!òYø»‹ó±iËvÄ%7Gr|öfe`ËŽLÄ$¥¢EÓ„¨ïFõÖà{iZ{> sŸÏ‚ÌòšÓ_úõ Aç]š°p÷bê6?މ´ ŸD<={ØP™yÀ*† ! „€B ˆ@¯ˆR…Ø—€ó¦OÂéW<Œó/¾ ¡6 ¼¥…Ø™eÅýܧº^¿¬Ä /_:X,|„—¾3D8ßih…F.–¦FdоkAÆýä ÙØs˜˜¨ú£ÔWç´mû·Ï"œfLPÂÒ?~ÆC?Áí>ˆæ$Ðy09^ rº'm®ÇéñœõÕd¼õÃz<õØí(J_‰§žzÑÍ[ DúÙ—_‡S‡õUß‹ê0ð’0/¢Byä%§¯n킸p ýÙ‡1í,¸¼¿U=øø=Ãòœ+ïyÙ³$Ã2yB@! „€¨"Ð냺´Ùà ¸Š 0þ_ãõoC„ÝBGFy`¡ª´‹×îôí$žlhÑ<µ\˜ïNß—߉¦ÉqÈÙ“ ˆ®‚dìÞ‹ÔæihÑ$Q ¹½{vÓZbb£œÈÌÈ€-,MSO¬Z‡‡‡”]‹éÊÀ•Gœ„pIÁ.|7í „·îŠV-›Àç.ŠåË‘SìCë¶íÑ"5A‰uža±vãf„Æ$£G·Î(ÉÙŒÞ{ÝN»q´±Û×S>F—±—à¦óGaá/SñÜ›¡ß±Ç Il¨âaåEå Úƒ¾µÙÄåÿÏ_><¿Áu¹Àíô—¿3yÓ¿%/z6yÏë{zûAº"IB@! „€hTD 7ªá–ÎÖKˆ áaNØízQ«$:a±Áj Á¦åsÐäõ˜±h>NèÙ™ëb\§>¸ûçE8#Á‰Oþýžÿq;FvKÁŸä‰_;Ly »µÂйÓpÏ¿á¤~­1õ£÷qáí/ãæ«ÏÿC®Žgµ®ú_Sí¸\.åA×õRÍb]Ïa(Ü›ƒÝÙéØíIFú¦uø}Á/˜µvÚÒnm¯¼“‡Ç{±%Ûqÿ½ u¿Áؾjz?C»ÆÃîÀúµë7§]~7œ1ä}§¸„hÚ¡½ú[†Ð‰eØê² k$0'øt›ôeAv1pÎO~4£/MªÃ‚äe÷Ð4w~ÈPŸÁ̳>í¶…€B@!PŸD ×'}i»Áp†…cò+w ;h§l@ÅÈȵරïDÿgàµ{¾Á°['bùë7âó—îA×{_Ã)'öDˆ+ éÛ– ã1§à®®BÌà¹Û.Äãï|ޝ^º6›³˜‚ ç|Ž¿ü™ÖhGÓg¨ª÷ª#l‡ÃQ¾)[ Ùo~XÀäyâ›uÄÀ£1 å $GzñÂìuxì•—Ð>9ÿ{û|úéd$Ù‹ÐyÔ…¸íŠ3µqnº÷ôï}?N91‡¡c»–å]ݽq1{üIŒ¿ãE$E9”ŠÖË#Ê3Uº`;hÛÚù7£O2.Œ"Y´{é»H“9hhéyü)½´”–`Цrõô¬‰ú¶CÚB@! „@}^Ÿô¥íKÀKë¦Óž‘#F"”¦¸{JKQê³"!*”úìÀwNDÑ3¡[—®¸é¡—1ñ¶+A'b‘Xr#$¼ .s2Ú´HQ|οœDüÓ¿aOn±š?öê§qÙ…g"œÎ¼6vÒ7´à%Uɯú f!^=;¬°‡x±;+Ý†Ž ï9¹±) 4¿½ò4¶¥ÆU#ú©¸ÄÖíqBïfÈÊÍæA˜÷"ÈM_‰O<Šã¯|g ë¥òóFí´ŸÜ!ƒ—ÖŸó9j3óü¸—ÖœŸ~¬ïýéÇ[«€”xà³á´¾Ÿ<ç̤ I¤+Äõ¯ÑÙ/É „€B@†N@zCaé_½(-)ưCqÚÉcökŸ›¡±MÑ­s;•Ö²M{$Óšr#°Êö¡”ÎÛÖÁŠxù¼›9¢'Í™÷³Ç“Ö{i±±õ0¦>ë:ƒå“Åq}{Vwêµ×S _R‹d,›ñ&Öœ6›9ñû¬ßѼÓÉH¶`Ƭ¹èÛev­_‰ß¦ã®Sã°fY”°{›BÞîÍxæ‘û‘0è"\rú‰ã¯+·VGSnÎ ²¡M˜ggÓ®tW æfûq{O º§Y0å¿:† $æ½tÌZ}‡Ãå\ßöJûB@! „€¨ "ÐkƒªÔÙè „Xi½9Í=gßo%G7غjþtüû‹ùxvâ“øúõgÐ¥}F蚛ĉ4“[¼àO”DÇ!:: ÛI—[è6uä5ÕÃGu5ä`³‘WÙÄ"8úêC¡ËVâœáíñøÃ¢[ËH,ÛîÁ£^ƒZƒþÐ㑜MÈܰCN¿]Ú4Ã{³ëà~LûÏsxú­OñXÇ¡x÷å‰ðF¥b„3‘mlšw(&jŠ{‰©~ü¼8ã ?þ{2ðó%ì)^øÑg—ýâ,ø‹Ö¤ûçõŠ·¾ÄÔkç¥q! „€B@”._!P <îB¼7ñFtLõÑ÷ò¨#ÏeÄóÎAœe7º7/Lù·œ7 ­B÷bÌÀ®X¼q7z4 C”Ó…'_ÿ7b‘©Ö(ÿëæ'ñ¿_!’êÙ›½³v²{Ô<+¹!Kô’’’zŸâ®YW÷óÄ3.€×J[±[í8õ’ÐiÀ:{/.Nkƒf)qTM}î%lܼÎÓÆ£c‡vpÐØžvÙ5´«;m çóbè7`ÅÉ×Áï-EQ‘ ΈhD:Œ?×ìi6{ùµºà$¸ù+B¢;ßMçžÓ䌕ÙÀCÓ‡ijûŸ´“û³Mc˦¶S>>/] d®F‚B@! „@ý^?Ü¥ÕM ÝŽÇ¿ÿÝYmêÅçc[-´‹¶-œW våäàýÉS1þôˆ‚'_t þÖ {víFiJ œáqh“…Ìíäaͳâ‡YcØ žŠX‹.ÃðN›e3dyCçzº3³f^ƒ®ãëòëÕ۵Ò1y|&;/5`¶ÙóuJÓæÊ<.g D—îÇšÌ5ätb“à—,ª›§µÒ·hÙ¶cùuå s[œVþPô¦#H¤;¨Þ]4£;-ƒÿ5‹^“©Íº8†žÐ4Œæ¼§ÐS÷ê5TîW½# ! „€B žˆ@¯'ðÒlÃ#P!0¬èÚçõªª—~t7öSb/,&^qµÊêÉ߉ôÌlœ}ÖM¸âô~´–ØKëŽ åÄ‚¯Ó±CÑÉTiE›¦Èp©Eqaa¡ÅIIÆ‘c:¾.»¨Ûií?_ïÙ³‰‰‰‡4A—Ó i®Õ³q§Ó¨Ú£ºþ,æ- è¼ó…|ÄyÈ·qí¼¶‚®ùs§“’ßÄ»ý´1QÆ÷L×ÃIuxl%! „€B ±ÞØ¿Òÿ:'  µ–˜…IY$ŸŸžÚ¢¢#ŒMãÌâ¼²à«sÃë°AÝ×ÈÈHõC7­ãõ}]ÆÆÆb×®]ؾ};yg+Ÿ~ ;xXëJwr;6ÒØ%$£ü‘‘Šæá~¸+VDÀFâœ÷/P»Á“m*Ô¿·ãÚ`§Í¹ŽúÚÖ@­þ<S‰B@! „@C& ½!n€ö§s`ÚP½fU÷Í¢u¸ê? ÝseáiÓ¡q¸âÆb§éðćYq>Wço "†û˜——§¦¸'$$”_ê³ïìEO¡eEEEûL½çÕcăÌñÊc¥ïÕàSʦBy£¿ÆÚrVõ§jtt<ÎbÁyCØ]^Qß~e(ÉBj<2ÜFe*6˜LدHmFhê´‚ú2¢6;(u ! „€B D W’d©Y,r8ðšÞ†WD–³ Åbãʱ”Ç—Ån½åé{¬õtî{ ôŸ=çÑÑÑAJôÀfëÎQ»)ú»Î|õuí¶(µ ! „€B ðˆ@¼1iб—Ìår©>–––áZµ?<Ú“b´ö{» ºÿ,ÔrhC=èñññê“Ó+—ýI8æpÐõ-ι'<Îrÿ»Ýnðß篤! „€ —€ô†;¶Ù3Þ{éÒ¥jšpAAúÎ?ĵ(;ÑÊs øÕSñÕµ¡ºù´ÕÉ_<‡SŸÎkþT9èéééJ¸ñ¬ ™úl¦×ð®Y GEEaýúõÈÈÈ€žiÃß B@! „€h,D 7–‘~òÔÕ´´4ÄÅÅÁétŠ—,@Æ%Í`ÎqX¸ñtþd±&‚-Gëèmâ‡w|¬^Ó¦M±cÇ5ÞG_«Ô „€B@à" =¸Æ+è­å]Ëù8{Çbbb‚¾?ÒÚ%À²±0ˆˆ¨Ý†¤ö€!ÀcÎküY°s8Ô욀1\ B@! „@ ^¥ŠêàÛz : /uÌXõ‹KÎF@@ 2þnðZdþžpàï ŸAΞu ‹€>­€Å¹^ƒ®ÿ6ÈŒ‰†5ÖÒ! „€Bààä—îÁùHj àÛæÞò㻆7€êÌß çÚ“ÊÂÓxy„í  »º ü0†—½ðƒ~øÂÿ>ð8ë5ú³Qƒ’Î ! „€†€ôF3Ô³£æ÷fá4H¬ð©Õ‡²S÷éPùj²ºM²Žì«Éš«®‹Ûãþñ®ÞÚcÎ÷aaajy„Þ@¬êÒlxœóóóƒÍl±W! „€5N@z#• †‰„††ÂÂë`hÊÆ5¯“5!ßW\—œ®Ê§P—'iMÿ£r\”ò†Ð+{ûjÌø{†ŽäX'|TŽã9mÒµ×…?|ƒ,Æ9 áô/X XnOçÓ×úž?ëÊvsý†ýf{ËË“Ìaûú%ø~æ"œ8úd´o‘DE˜!Õ¥¬«ù7m·>f-11q¿F´½:A—á{Ÿ7 ´cÀ}'6µe«n_>…€B@! „ÀÑ Å A4 &­¼kç<{Ïõè×kyþìܳWuÔBB™½¬üb‘ÇŸ¤áTX³ðw<÷Úû(¶iJÔ•åá¼:?IaUFßëúô'ÇWˆb£ ®«"?‹ò2;(/‡ÜÌ 8û–ד_¢î¹|ÙµfäYúÇ8ñ” ˆJnJâœâ(¹M¾Ömë¶ø³üZÙMõRœQN–õ·,^çgqÎ!)¥ Òÿþ·>ór]>*NÌLžm•©߸}‘‘‘ˆŠŠÚ¯f=̹™[ðÕŸaùƪð¹±pÎOxþÙgñæ>ÁÖÌÕ×òÞ¯&‰B@! „€C@zàŒ…XR”%* ׎ÝãÞ»î ó¹ÚáŽ;nG·VMá-u!++ ùعmV¬\…]Ù{I¬²Øõ`ýÊeøjæ\¬[¿™™™(p•*i\›…•Ë—aùÊÕÈÉ+T¢Ïbñ!7'{ó‹Èó^ŒŒôع#»víV^x-Œ=¥%ÈÌÈ@Q ævaçÖÍX½z5V­^‹Ì,eÁbµch÷&ÊcÍQ†De ΞtÀŸw&Þ§'}‡Ñý»¥¨¿®Â¼>?B£Spãý/`ï·÷à×yK9›²©ü!‚Š©¹7]oaa!Ø‹^ÊZðÌ‚-kþÁS÷݈ñgMÀÒ-™*˲ߧáªßD×¾aÙµ÷<ñ:² i )¿ú!A! „€B@2™âÈ£#¶!ûÍ*4‚<°z$#<<\ÕåÊ݉—óCasïÅד?Eϳoį=Ž¸Ò |;ù,Y˜Œg¸ÞÐæxúÙG™±Ï<|v[›Â^œWl'<úÀÝhß4¿û!>¹ÝÚÄbÆœÅèÝ®6ï܉kzCº·Qm®_4 7<þ!Þyÿm8v/Çe£û#jØÿ!)¤Û Âp÷}wcP¶J4—Òôz 9I}¡Ôë–þ‰É:cþˆA: yÝ·àý×_Ä/‹·#1Ì‹ÿN]‡ŸçŽá½:aÝ?³ðØÏÁžœ†ÂôuHèr"îºõZ´LŒÂŽõËðêÄÇ1os1¬ØÖo¿úü™kñÄÃOÀŠí+f eàUxñá›Ñ<1ñ-;ã†;ÄßLLjÁ=m7¼èÚÛ]nT ^ð¸é)ü\m…Äö #+Ã/¼-{ö‡ƒ¦³Ó# |7õK\Ë]{RøúwÀº[nÀŸË6àäã:CfËù$! „€B@À$ =0ÇE¬:*,h )ç¡ó•]ä9æs–àÅú%"¤çS¸ÿ–‹ñðýwàªQ}ðÕãpËÅ#qúEwcc ÜöàHKN„Í“‹g¹Q}.Çcÿ:!Å»ñÌíãÝ©?ã™ëéÞ»“ßoOžŠ'Ç…¸0 &='þ÷Ãl $n%Ñ8û‡Ï‘Щš&†£Ô’†—~\…:ËÛïÊÅ»O]‰‰“À€×Ãn³ÂEkåuP²œºa)›f¾fÑbœwþX4KŠÑYðçŸã¶·È{¾`2:¤„â†ÿBTb öfoÅ7_Š>W¿Ž«Î WÖÜyå(|ýk\{z/¼õØÿa‘sþóÁ5ˆ@þY´ÅY›ðÖw"íøëpÏõçÁ•›Ž¥Ë7ÂZæµ&Ÿ9zö€ÿú2vç!šPÔvp¹\ûìâ®ðìú¾O$/¾™kçÁK;Ë—æ¢À]Z)³B"ЧÏ@¤oÍX “»B„€B@! „@@Ã"F ?«¡ÆHêjUF Í–4—^pÚ§5¥fR1áÚ›°jçÕdË´44‰OGûg¶.[¯'ý‚ ¼ æÿš_ê+Á´«p1OÁÕ~€ËÏ_î›Þ¥8ö´÷pçÿ]€DÏ6|öñw¸ùý[à ,ä.-\ŸçþŽ¢b6gìEX”…&'Òzpå+W¦Ð[…÷ð`wV!:·iŠ0Ó¿Úð¨8`×ø{áßðuj6Ýú!!&«ÿú“~ߎWcþœÙð{‹Pê±bݺµX¿!K—à¡Oÿ…ÖM“Uc£›¶‚§016üýÏ?T_G´hÚƒŽ»•ì£ióVz€›šŠ‹ytfut>ïÜj­ÊëMë÷•Ð.¡£Ø\p²øæá(oˆµlå1µ†Ð ÊÔvý…’O! „€B@' kÐ|€Ä¼£#`¬eæ)ïZ´ûÕߥn·Q1 î0[4‰=Ãsí.!ÑM;”«ôÂb7šví‰0‡…Öfg`óÖè>æz¼{ã„[)_‰Qaβ=ÈŒééº÷ýÒ1oáb,^´ÅíNFߨ>¾ÿøMôè{>r|aèÒ­+ºuïMº\ogHrmé¾='»éa€ƒÖ©`#× q0ýóIøþ×qúÐŽzþuXº~›Z7ÞgÐ äá/%»w`˶]}ùÓ¸úü‘ðÐNõ‘ií¡š(á>S°E¤â–ÇÞÅèΡxôöжUs<ôüÛØ•W¬Ä9ç ±Ù`÷yC¾¯mg4Oo7Oqç69𠃀vg(Åøàˆ¤™ù»±yÛn•ÞbZc¿”*Ä«{õ¨mƒ–å]! „€B@“/îˆÊK!!´È C|R4ÂÃŒ5èl¬34Üp¬óÅJǰ9@‡ªñÚ™<Ïå¥.& W,Æ}Ý£uÝÆšrN(¡©èV;5FS«­,¹AÐì¬ Oh‰ó.¿/¾4Íb-¸ðÂ+AS°óvã»ÿ¼‹—?}7N8IÕïÏZ‚¹sèá GÞ]>:Üi½f5i¥ >l/Ì'_:‰iÊÅG‰¹}6 ?ãbŒ<óbdmÁ—v—?Œ ýP´=Ý;ý;6Qmñ›¹kC>Vó)Ö¬»Rcàt:ávÁå.Et“6¸ù¾'éåÇÒ¹ÓÑcÐ =éDŒîÝ^Õá.ÈG±Õ ‡Óࣺ­RjçEuUÛÕOóöì‚KmÜŽáÃâþWß@»”[°mᘱގói§ŒãÇ ºLíX+µ ! „€B@£# ýèøIé€#Àb™Ïîv§oÂÿû³ç~ŽO¿‡¯¾¼ÞV,ùa*N¹òÑ2ËýØ»'›ŠÙ Klj5IÁw½„÷ö@Wò w9¦ÞxõAŒè=M}mS¢ðÇOß ¼ó‰¸æœQ(ÉKÇæìfJ`sy“<źïàãñë%7SÌÜódoN‚ÅŠnC†à¿‚N‰6ìݾ .¹]/~F¥{h'ø™Ó–ÀóËOÛÎSÞYôó‘l­:¦á£ï—|<#í´ó<0óËÉøvá6\rÑY°Q?¶ºÐ«Y Úuíÿ» Ž;éb|þöÝH~ûéG´ìs.9¥?n~îò¸ÇçßüÑÈÅO³cô¸ÁX›2 Ÿç=øÆØvšpÙmÏ¢i§i˜ûë÷äñv ,º)º´oNÅì8óʻ٤+þ9>¯i{¡s§î°⛟æ`ݲ¹ŒÇÇ“^@×4c:h×û¦}¡C/E“§²‘­¬Àžsé<ýÞëõîßsQÁŽFžJW¼œÖ°XœvÞå6v/l΄‡,Õ×B)+)B@! „€B ÐXèG-ÿv-ú‡1GüòË/hÑ¢:vì¨~üj¯Vyf¹Õ `þN͘1Mš4A§N osÞÑjTY­,ú«Íß[óõ ›íäµèò¶³WëºW1Ji7·ðˆðrA~ º*Ç›ëözÜôÀÀMõD‚ö_;d¨(ëÁGÏß…gæ?¿ó$RËE²Et^¸ßbCD¸1 ¢ w^\¤v9 éþÌinZÎ; ‡…jÁMÛÑ•ºQì*“–8hc8æNûƒÎ~K×NÃ1i‰jüxZ~5º «8ìÏ={ö¨v‘ŸŸ¯vã/ëÏ2¨ð¥S$­Dç3ãMžrŠ3ÄymZyØÝ’eôw‘ÂìÚµKýmÈËËÃìÙ³1hÐ ÄÑiœVõF‚Qœ€þ~q®yóæ©å<½zõªÖÿ¼fIB@!P{L¿dk¯©YÔ5-ÊôC%þÔ×Úþñfì”ÕqZ—m/çz 4¯K4‰óJÅÍU±V,úG"r¼Õæ@Ï~0qn*®ì6l°á” ®Å ’¹˜òõt:ÀM‹ûfqÎ)º/¡$´µ8×%tšƒ6XÓâ\ÇÙhM~TT”ç:nçúðìÄ—ðÁçÏ(q®êa¦ºÂþÔí(a^uõFû~ša ò“=,ÎùžE3cŽ•Ç½êº$V! „€B@Ô?™â^ÿc ÔŽ,Ú´Ðã& ‘Î3ÆéÓZ¸ùi×vöĆ(¿o9ÎÃk U“j6êbÏ|EYs7¨˜ŠªÞ²yï\†íáö÷ ܆‘Æé¼VšË›ƒJ§ˆ˜Ô¶xö?Ó°·ˆÎu÷ÒÔwZï® ¨ül¯©ðìæ¼û¦íkƒª‹ÞôºíÈÄxåã‘Ú$U%±ævtþšúÔcI2*!·¡ÓÕu¥YìÕ¯ðû×”EROmÐãXÕ>µÑžÔ)„€B@@' =ÐGHì;büã_ s%,vÍA bSDUåªÍ\¤rYS5jWö}[Ò *Ç¥ªj·¢>ê ?p  ÑqIô2RXêLÜÈn.]UZU6°@ŽŽ¥6cËÚTªîƒ‘ãèÞµ g[؃ÎÞð„„%Ô i*hh(<O•c{t-Kéº&ÀcÍÓ×KKKÕ«®Û—ö„€B@!hD Úˆ4{´ã®š¯A×k ‹†žÅ«•ýñ:¾¦>¹%'~évëjÜ"""Êg„……ÁMç׳Hg;ŽÔ]V§•©o¾7_¨-s¾æp¸ý3×anÇ8uN^s{æksÛŠç<< „—UpØgFˆ¹\ ! „€B Þ9кh·;kÌóh6’=Z8Õ¥M,ë£]ö¬²·œox³8 ›³l ×°ÇXz'„€B@˜€ô³‘”Z ÀÓ•7lØ vkfO¨ˆôZ€Üªdï1ï Ÿ­¦¸‡‡‡+Ïêáz•ŠFÑ~øÃbxÏ­[·ªqçñçP†té¤B@!D ä°4\£X`ñ1J.— ÅÅÅ"ÐîPUÏø{žÔ\:‹ž…{ÎõÎì"ØŽ íQ汩É1Ðõñø²(ç}Jè˜CyxwÔC%! „€AH@zZ0›Ì?À{öì©6ýâ¿$ƒàï ·ÔTc÷øƒå•´†AÀIGfee©ýxð„€B@!ÐXˆ@o,#@ýdÁÅ7ƒ/Y L€›Âß^!‚-ÀêÍãuçzS@óפ·þM“bB@! „€¨3"Ðë µ4¤ ˜|ë8ù¬;Ì?Eþ~°¼k»Þ$®¨¨999ˆ‰‰Q^õ@îCÝfp·ÄcÍéxŒy|Y ó¸êï÷Î|ܽë…€B@!ph"ÐÍHrÔ0V5 ô0« tþfûøÌs}ìò&b,Ð%4,<¶ü0F‚B@! ;Æ@úßð °nÿW`÷Û°÷6šúuˆœA—¬½¦ìUåiíX¸›Å{ÐuJ >(YîrP<’(„€B@4âAo$ݘ»Y•¨Ó¸ª´@`U-»X°–Ëý©V™@è\5lÐ}Ñk’u-ÜþÓŸ©ëå⽡qÐýÖÏC‡NçO~IB@! „@c' ½±Aÿ}´)‡^†Ãa/³û  ­‰Õ²W À áÀÂQ‰G>“ ('žûÖY¹>¥kèTµUÑZÙz[“ðæ õ´gѰŸss´N×ç¥ãêJ`w†Ân³ªx£m]…på˜}íâ˜}Û7§Wîçæ mP Œ¨Zy×íð‘[Ì€Y«˜£ÅB¯²Ѝm»*Û ÷' ãqp>’*„€B@ÊD W&"÷ ƒ‰5’kJ¼­Yô'>ÿò[x¡°ÐZ×Ħ­1løIèÚ¶…t•E„‡üÉ„”+@ЧK-œÍÀŒ´Ê¢¼\‘Su&AIÙJÊ|>Þ0˯+Î_€äÖÇ }Ë$•Æol§aÕA÷{2×ã¹—ÞÅYWÝŒÞíšÃç¥]ñi'ìJæªòê‹Jd+|T??,0æ2|¯ã‡ùá…Q¶vÞu›¼æ\¯A7·Ta‹»22ጌELde©àiÎ/×B@! „€B Èô`%±ñ¨dl\‰Ÿ|í{ôÇãzãŸi¯¢Ûè±rsfy½ìe÷’Àå Ä¡§A×q4œN×ÒãõpTYЂ–ŠwÛí.Uñ:¯þôQš—Ä8’¿†è¦kC¬ž¢l¼ùÔõø{ÕN•ÇÆ%סÆÎ°(ô0q,LI<“8çॱÍÞýr¡Mi~z@Á³ ÌÅ.‹sžR7JËúÊm)a_–Ù¤ÝËbjïC·ËëÏÙ‹^9ðƒ‚’Â|ÿñÛHiÒ3—n,Ϣ˖GÈ…B@! „€âA’3œ‹¹ã/º #FŽBJ¸ýzw†v±|ã}HK Áß~;sKa ñ£IÛn3fš'òNá^¬^4ßÿ4{‹\ä¥MÀˆq§¡o—VHß´ß}û¶eç“ w`ÐðQ6¨7lðañ¼™Tfò]n4o×§:Í“¢áÊ߃ٿLǼ%«H@‡ E{Nƒ¤è0å%¶ÒqS@)æÏûŸO_…¸_!cÅLô: Ç´ŒÅ¼¹óТ9vmXLw8† @â<¼\ìïÍÂoÓ¿ÇÜ%k—”‚§]ûÄà>Ǩ÷aÙüÙøöÇ_áuF!–Ê¥¤µÃ ÃŽGRTJ öà—¾Ã¼Ed[ˆ}Ÿ„±#‡"”˜ü5ë7dÑÛIÑvü>ûOô1Cz¶'[é‘‹ûZPîºÎððð}=èÜ  ~, ο/߈ ®¸%%®²xãq†~ˆQ)B@! „€B ˆ=IL<:~š¿]Jkí%¶È+͇Z·írÂås W²ûà·÷Ä ï}AÒ$„ãò“FÁ›†á'oÎV,[¹ùÙ™xý±0§#FŒ@“ðÌY°%ä€_ó÷¯¸æÚvì`L8ólžó¼òÑ×p•z1çÛɸø©OÐó¸apl',œó ¶eå¨ÎUJšOžpnßn·ÃétÀê@q~^ô¹3þZ—Ç=»ÓñÚEc°)+OÕñ¿·žÂÉç<Žv]E«Ôh\{íÕøaþ2ð?òu ~Ewjw¯=Çv| ·¾ˆ|åä÷âÓ·_À;ß/ĈSÏÄÈÁÝñâ-gá‡?–Qɬùs:ÆŽw§|í»÷ °ØErŸyØÕgÍ¿i/¸ËåBqqqyåíù=hwÌ <øÀ}8õø^$ÐÙ ååB! „€B@!ñ ᠉ɇGÀj%‘¹³gÎDóHà‹·ŸÃ¼ã.D×v­‘‹+þu9vge£° ½Ž‚oV¬B1)Ьô˜—S€Æq]Ó0xÈ <;Wÿƒ'>ø|ÿ:Ž^@ú!¥9øø½çÑuÜÙ8a@_ÄGX1æÔ3pÒ⢱ƒ°aå?H;¦Õ3 6œ4v<üT yÏyнÕjÀA'à†«ÎÄБgâ´¡Uúîͫ۫>~êMœ9bì¤è³w¬GxçAˆ¥µ×9ÛWãÞ»^À´?Và”]T™6,Ç.šþîñ•â‡Éoà’ßÂc÷^;¥vHŽÄ–‡ßE˜ÓŽÜ+qÉmO`Ò7³pl·Î@IœJœs‰lŸŸ ú½(ÌËAçÖM±zÁø÷ÒYpû,ÈÈÇðãZR>JÈc~ì±Ç(qÎe­ÖºÃÌE{Ó¹mxhgzfb+g§ÓåS! „€B@#èÁ8jbsõ”yy½î"ô?ã*<øðch“ ¿Å ‡¾ú¾BLûøüãn‡?¸ ©±˜û]'¼9mJÜÄÅ6Ã=Ͼ‰s¯ÞŒm[6áí'nÅ’-Yx㉛pþ ÷aÀè³°cçü8e".¹/S8›½ú ÅU猀‡„±…Ä£ÃNí…†ÃÖ,_-Ý›·bÝÒ¹7¬?¾žµ§¥5â¤8iÿ6 Qj¡éíÎò~òô|ÞÇ­¸¨bº7og%3;õgÛÂÕÈ+ ôøpònÛÉÓí—òØhʼÍêBÆ.c:=ç·R]EJÜó®ò¬ÚŽ7O; ý:5C!µa³ÙJëÔVÚ ì*¥ãÜx¹– °°¯«ÝÜùˆ5~UX¤³ŸûÉ»óKB@! „€ÁN î\aÁNJìZòDgûlˆ‹‡ÝáT‚Yu†v;/Ü›´MŠ‚ÜLü9û'lw‡ Ì‚ëÓ¦ik‘Ö±;†‘ãNEöž=Ø´q æÌš‹¨ÔÖ|üpŒ7ó?_Kh}œ2á*Xœ´¹€ $ÕëðBe»ä^! „€B@ ÚК¥AEà[ýã÷—_~A‹-бcGµTÇWä–+!phæïÔŒ3ФItêÔIŸeÞìÐ5^þb³VãMÄò‹ÝHHJ†ƒçvS(·‰Ö`oÛ´[ҳܤi4öVÇ%&ÂF;…§ï܉ŒÌ]pÓ,ë&Í[¢e³Ú ͇ìÝØ™ž‚¢Ä'7C›V-`/«ÛSRˆÍ›6aO^£bдi3ÄÇD¢¸`¯šŸ½g/ìt†y›6mKGœñjj?Mga©íò¸‹iZýä¸Ñ”¼ãñQNìÙ“ƒ¨¸DЮîxf@Vv6"bî¤óÏÝØ›»¥t„íûމwÐÄ“þ·^4Nµ‘¿7Ä!’6Ž›÷çxî‹¥øÏÛÏ¢iŒqŽz~Î.lÚ¼ %Ô׸„D4#»Ãœ6ìÉÚoˆ‰ñ±Š§æªŒ¨å·=4cÁGÓ×i<òóóÕÈxš™ 9íc ÿ)u^Ë#R³Õëqäe »víRòòò0{öl 4qqqj‰ƒ•–iH‡K@¿¸Ü¼yóÔ²¡^½z©¿'¿i˜‚! „€4âA´{jŒKqþG/£Zýƒ˜×V´hÓQ½öoØ®Ä1 ä}y×’›ª—9žëã`£)åí:žqszÑ®½Ì‘TÆO¶h]©í²9Âк}'´6åM¥ÊÛ¡éú©Mš–åpcÎSðåœ8~@o¬œû=&Óºòo›Ðe¬_€ç^ŸDç¢[Q:¸î<üÙ4ÚøÍx@ÀëÊ£â’Ñ^æÀ]ŠO,‹ã¶Õœ¡–®õ8(ƃî»þä8^‹ÏbCuͱ‚€góxƒÝb£B@! j‹€ôÚ"+õ-xÙ¾æ—æ4§ƒNÓ÷*Ý$PYªú(ÁX;®ëö+¯¹£˜z\@y•”4J©:h“6UyÅ›n»"fß+sÝì]æ#Ú,4Õ;­]OôÊòaçömHí: ?_s:´JQ…#ã›cØñC±f Ò¹ï“fÍÆq}º«¶•}d™ÏŠ/ã£ûm¶E§íkMíÜé¶"i÷{³xÓ3.ô'·®óÖŽ%RkmÐcÇ㩯k³=©[! „€N@z ØwÔöÃ_§™©nÓø¥" aŒó¿yj: ÄŠx–ßz‡óŠ:u)ª.+â+Ks¯ú¢S UÞ<®U§žêUQ‹qÅíEÆ7Á¸Ó'TN*·… ÊË}óùæšÑ~…ë ¢°°P­AOHHP¶êõè<%º>íªƒ®7Š&ø»ÉÓ×¶[£!B@! „@èòU¨sìõåÀ?Îù(áP¶(ý@ñºUõï`eªÊ_¸r¯~ÙCÝ Yåi§O-jõð½ÎWÞKùMÝ_h{øáCXX˜²­`!WTT„ÌÌÌým®{3¥Å"ÀßAèzÜù»©¯k¨ ©F! „€AC@zÐ UÃ1Tï.?Õì˜jñ͵òuå{skÚónŽ ”k³Ýì1gñÆ!""B½ôÆ@±Wì8:áÁÎh4ÿIDAT,ÆÍcn£ø%A! „€‘€ü jŒ£^}æã¼7>B+…â0UÊ'ñGF@{OY¤±@gA®?õƒƒ#cÈ¥xŒCCCÁ–””ì#ÚÙn±M! „€5I@zMÒ”ºI€„/_¾œŽkª~ˆ›×Á s>-ÜÌùªŠ7ÇékþÔ¡ªztšùS—­NçÑ¢Ñ\¿¹óµ¹Î]›óìZ·} zt¼¹ÇŸ:ž?ÍA÷C§›óšó™Ëé2æôÊåt}ºÜÊØívlذA‰sÎÃB]¼ç•É6œ{ž)…õë׫e <þú»Ópz)=B@! „ÀÁ ˆ@?8I­a<­½cÇŽHNNVÓ•ƒÑƒ^ÃH¤º`ºÛíVSÜSSSË×¢ka€b¤øá]xx¸z Ãû ð½! „€B@46"ÐÛˆ×sYóŽÜ,²ø- Bà`âãã•@w:Ë&i ˆ@\\œzx§÷8Ð ‹ÔeéŠB@! Ê ˆ@/G!uA€lóúRü\<èuA=¸ÚЂŒ¿¼™¿'‰‰‰j÷ììlð&ƒœ§6<éÕ©·:yj›x ØP}ÔýÐbœ—¾”––ªWmŒoMØ,u! „€B 6 ˆ@¯MºR÷~øG·å|-?Â÷CÔè#Ìß žòÌëÎ9ð”gçIIIJ´7zP t^ö¢<++Kõˆÿ>˜¿  ›Ò! „€B@T›€ôj£’Œ …‹‚*?0¨2ÁˆÔå”x :t-µ!&öië 6Õt’n—ë­~U×^¶ƒÛçsÏY˜³(ç{è,àôCžêÖ'ù›§­Øc$Ö ! „€uC@zÝp–VˆÀ‘ Ï}ÊB̨»ZïSW™•^E‘‰2·«ErT|˜•h;øìsÍŒ«ÐÞt½›;§ét‹…=¯‡Ùd¯W¶I‹s·«þ;œŽú}¨°¯…r'„€B@! Ÿ« B Á`Ag?–Îý ÂëïüŸ|ú1Þëu¼3e*¶g¨,!$T ñk¬u6d¶[7.ÃŒ¿–(³·$ï¾ò0¶¦ç–—aÁÈåøs_qî'‘i´¿úïYxâåwPb3ò²À./Cíš>[W/Âï V¢ÔkXmµêüõkq®Ë6é|ÍA Y¶Gçãk%z)ŽcqÎ!6¥ÒRœ;ôb,ÛllÚUÁNe©“7Ýfaa¡Úɽr£Jœ{Ýø{öt<7ñ<=ñÌþk9¼„™û¤ËW.'÷B@! „€B ˆ=GGl«Ú1ÚãϺ¯¾ú"p—Ò´nðv»y¹»±yÓ6»`±9мU4KŽ';BйûĶ,îJé¾m§^pØ aë.ÎÆ ››_„°Èh4o‘†ÄXãœw~6 D±»«–,Æ/¯Äø– 5* ©ÍšÀ[”‡B±vlß‘Ž˜øDtp"’ò<(«îâ|lX¿9%ˆ!ï{hX8’SRnœž“¹ë6m†Å†(Z·‹””$ØIŒ{J ±nídfç#6)Û·C˜ÃŠ’Â½F5^´w²óÜèØ¹Æœ5žúsÞÿì{<{ÇÅTGˆ¼Zô× °Ê°°°Jtý X:ïg\zÕ³xáÝçQ°÷<ð0^ù÷8¶M²ªs)X½$! „€B@€" ô€1¦.ðfbJX³—™_¤ '¬$Dÿ™;§Ÿv¦~7¾õ®¾åA,ݘ¡ÌÚ¸øO¼ûñ4ð)îV¾…ù°‘¨Å|þÁ«¸ñÖ‡ðÙgÿÃeãºáù÷¿ÍdWA{Ïwo߈YÓ?Á²VáÍçŸÄc/¾‡=ùù$4¿Á˜3¯Äã>€#/ÀÌßÿƺUã?Ÿý ×P’ƒ÷^x]ºŸIþ÷ßtÚ¾ë¶ÞûÍ+þÂçÀ ÷?ÿNz;uÄóNE){’ÉÓÿßמĭ÷?‹ßgý†;ÿïB¼úá×j@QöÚ‡`G–ÁD sS^]\>…€B@! „@ z ŽØV ÈSî ÃÏ߉[ÂrnÁ¦;0þÊpÑøáè5`$fþ1 ááaÈÍÜŒ›{öÆOcÆ¢{›±(%/ùšM;•¸¥åãp¹ýsÚ‘µi).¸î~|ûû2ŒÜ {väÓ‚oRˆ”QOwOiÓ§Ÿ2’WáÞGïF³˜(DG9±¶(ËæÎÂ]·Œ¹ÿw+’cÃð×oS°jg lÔ΂™ÓpíýÏcÖ¢µØ­5Ö-ø _¸Ÿ„4ýóõà§o@A·‹ñÕÃ×"!ÜÉNÌÉÉ禱ð·/qù;‹±ôû÷qL›¬5]œ…ÃG‡ˆ0lýnZÝ47\{¢È[ª˜·hß ¥`[z:6‹QžèúðHóÔû}<÷ü@…?0èÒ³¿ºæ·¿~ž†-ÅiÔÇf*NÙjd-Ï#ÁI`ŸñÎ.ˆÕB@! „€¨6èÕF% Ÿ—üÒFáÔÓNA°è­«pHQF\õn÷+iªûå×½„×>ž„´Ä2±.-­+"·úš½Ñx‰KÏ…€B@ú$ ½>éKÛõ@€Öd—–`ìqpê©cá0YàÎËÀËÝ„Ÿ¶'àšFžŽÜU ŒÚ9Ÿß rBi{õÂâD$µÇ[³ÿÁ_|…Io¼„O¾œ†çÞû×\|ÂÉî§r´¼*ÆÓµùªÄEÓ¶#yý¸QŸÔ>p«úÉ»«ÓÆr¤3yGy¯ß‹xò¶ëÀ‚Åë1æÏó§#) ÆZtÎc”56¦s—øÐ·s[¤Òzôš’Þ²3͘îÝZ½ÖPª×gÔå!Œ îhC:úÏf¡MêLb—/ëÈ+m<ذ¨ó±ùŒìÊÁO<™ã–óñÆûSñฮi*‘žµP¹œÜ ! „€B@@&`¨†@¶Pl5L „2ó{PTDîq ¥´I‡¼ìíøxÒxèþ»0ê„Áèѳ'Rãà¡#Î8¨µëäµ6‚VG¸Ú„ ÞÄ5ï€[î}Oý ßô n¿âyd䫬¤§+‰õ]¹E±òÚu¼“:ý3¤øŠ|G6’ 'M›Á%¦à¾÷?Ãöœ"UbÓºõøiÁ^¥•£b¢š1?Ïü[ù}%{±jù¸-V:v̸ø0¬Ìö¢ï ¡3nF~=»¨©õìÚçÞè5ò¼_+p·Ç…ôÌB$FSÞ•mu$ÎU'ËÞÔ§³âáƒöŽÓضúo´êvÖ€fîÂÌ™³°q{V™8§ÇfîæJåZ! „€B@(ñ èÀˆYµGÀU˜ƒo—e‘ 5§žN“‚q§ Å ¯¼†¼ÓaÍâ9¸ïÕð䤳•1.Úm}æú %„-$ðÿøn*.¾õyìÚ¼ÿwý}áÍèAÓÂgÍž…Ýw6MŸ7„%ׯ¦éÒgÓ´4Ì›|)žëØZµÀ¨1Ãà#1¼qWÞ>và ùð‘Ð<üLŒzªFŸSˆñýÚcÁo_ž4š àFHd*®{ý] ?óTl\|â%˜øüÛ¸ñÉ×Õð!'Ÿ‡Ô'ºâÜË pÕ¹c±wëJ|9c1žzé4¡‡ _|ù9n~h¢j›=ïZ gíØ€éKKpYRÅŽèõñ4¯¸¸XyÑ5³è.r{ðÊK/#>9ké¡DN‘ñÍÚé¬ôYÑS¤\ ! „€B@€% =`‡F «I,ŵCµSß“ñõ“n„Òn|Æ8§…Ç·À½‚/¿ü ¯Bß¾#ðÝ×Ç#¡UG•¯MÏÁx÷Žà4–°¼<ùk¤5‰A|| ®¼òJ,^½?mð¢ýs1räpÄ:Ù3ÎkÐ+ZoÓ­?¾›ñ=fÏû….ØV:÷‹;[[QúÛ÷8 ¯¦’gŸœ÷±Í»bÊì­X´h ¬‘I7ì8ä=þ6ÜeÓíO:ý¬[Þ Ë×ï@«6ih›‰%tLŸ¡žÐ² Þ›³ ¿üò–/úvÚ­þ‚‹.Fó„hX‹1mÚ×h™­úÇBxg9jtÎOÓÐyÌ´iatö¶×eÐM"èÈ8uf{Yã:žxtì>@½˜1“g¡VòÌ„º´XÚB@! „€GO@úÑ3”‚©5Ök¤ãЄ]‡î†Ñ,ÌÍî–zà¦;»©µ×v[Å?„mºõ¦WY%$”Çž|ªQ ½;óBŒ¥µÜZ³m·ërä“.kW·a±‡¡ÿ cÐÿøÑܰQ>®?Ú•×dØØ¶[?´å¶(ìÍÆšu[Ñ„v‹°â‡>‡3µ#Òš'ªô[Ö"}¯ }úõAÑî͘þÍç~Ë¿U6¿iëN¸ø_ÈãN§·Ó±påžpGSœrJSU‡ZóÍÓê)¬žÿ3.¸í9ü¼`-¢h&>¯¡§½èUZ]½){ˆOAAò '&}åøýå Ñ,)Q—Ý/ŸDÔ9‹:G. ! „€AN@+‰ /ªGÀ¤ãTídÕš§x[hZy¹Æ.«V{nBº”‘¨E¯/sÊ+‘ÈÜœS·¡êªlHY;ü¡“üä!g¯°·¤?}ú>þÚš‡„Èø¢Ò0ñÁ›iüóåãà¹÷1´l vmÛŒÁ>Œ £«ÙûÌíñË8³ÝhHÛlÜïÜn~ÖvüoòL¤Mî†ö6v7˜˜sÖþµbDÍDFF,ËšÔñ|Ë} wú,K¤Ý׊¹ªOæñªO;¤m! „€B@ èÁ2Rbg0„!æÌ•²˜à4|¼Û,¯uç7D‡††øUå8‘ sº‘‡#ö õ°ª$E̪¸LašË(9BLrsÜýÌËÈÝ›7O[OJB8¿ÎVrûŽÂÔ¯ ŽD³9iS¹äåïæ:xWvÕ›²6ÊZ­ÔÝ'À‡k|ѱqj‡{®ÃlUV'A·[XXH»Û{°O»61ë}’ä&ˆèq4¾§Ad¸˜*„€B@Z" ½–ÀJµK@‹‚ª,Ôifq®óé4ã~_aÈiJ'VC-õ˜Teet[Z¨:Ã#‘B/8ž ±Z§^û¤—×[a«©U.½¸å:aêÅõè¶uuõ©ûÆí…‡‡ï³;ïì^ÕÑkGbs6·g®ã`iæ||­óšÇ­ržš¾×mN½Õ)cÎc¾>P;ÕÉ£ËV•—Åy)-¿à—! „€B@4v"Ðû7@úÐÌ‚¦\H’¨d¡Íi8¾<­,^§© Õ|3·ÅEޤŽj6Uíl.—Kyй@XX˜º!Wm|A‘Qo«ìÕ÷Aa¼)„€B@& ½†Ju‡&`+Û|M¦µšçÐBYV.ÅñJ«œ÷P÷5UÏ¡Ú9XºÙåZ°ñ÷&..î`E%­àq¶Ò¬ B@! „€hŒD 7ÆQ¯Ç>ózâ•+W"‰ÖQóÝ"Òëq0¼ij›7oV^sé<­Ýo)Š‹Kà ƒÝf-Ëw1²³sàöúƒø˜(ene!Ã÷F‰nVÚtoöÈûiƒ=ö–sš‘(È˃Ç‚ؘè²xõœ nqÔPkú¡Ogïj A­‡jô8ÖCÓÒ¤B@! ‚’€ô 61º¾ ðtröXnLÿü]d .¿ðTØËÜÖ9;Öàå×'ã¬+®G÷Í(Ÿk–ü…Éÿý‹ÖlUžt{h‹sÎ&±áåÓ¶µX×âFßë©ë¤ÕiZ¼á-g;ŒMµ<øåï`­§ n¾êL8­Z¸—TßÀ³}ÝçÂÂÂò]ܳ É.„€B@! ‚Ž+ B@.cÎ:©`/6®˜¿Wle'wyp»öâ±gŸFn±ñÕš…³Ð©ç@d…µÇÏ<‡—^|×\x ~úò¬Ùž­Ê±”Vâ›Üâì5öÐÔn}Ï^Ú,Íçãµ×$÷éš?$ ( Žˆ½ÚÃZ¦É•ç]å ¾7ýp‚wq¾ˆÅB@! „€Bàˆý I!P>gTpxTR±p˜w…‡GâØ¤6$.ÃV&¿tN»q"&>t3"ÊþÕµnÓ}­L€’°V‚œJl\õ7f/ØŠñgžŠ¸H'Šs2ñÅÔ¯ÑuØé8¶m þžõ Vï²¢y¬?þö7N;ã,ćy¹¬ÕU`Ý^¦ÕËb‚çC{ÐÝn÷>GªOÄR! „€B@!pøL’âð K !Ðè û:”<¼ßÿ2S§}‡o¦}ï¾ûS¿ú‹v[á°[Qœµ s>ZŒKϣĹÏë)÷ŽÇÄ'!!ºl§r“~׎µxôÅoPì6<奅yøï­WcSVžB¾eù¯¸ìüÓ0í·ùhÖª"~,ûk:Þ›ö'ÕmŒ ‹ý` ÚƒnµZÁ/ B@! „€B 1zceécÍÐîiRÁ6»‹¦OÇü^iñ•Âjw"këRj3‚Ö‡gyï±µCLlÙùÝäu·…XÉ[NÓÖi³8ž¦®vw7)jGhvoJ;Á¦[H¤¶=a㟬54gÝü~ð:ÄG9(“[—ÿ„–ɱåej¾ÓuW£ö s‹Z¬×]ëÒ’B@! „€¨"Ð뇻´ÚP‚.Ø›ƒzÞs%B­´FÜjÇÎÕsðý‡7ÛG˜ÖŒ¯GQ¡Ëè5 qcgrK¹wX R¿Ï ·‡&«k/8}–º ÕNîœÍ]R‚Öi­ÊÄyYµª ­[7Õì—|Ä¿$! „€B@Æ@@¦¸7†Q–>Ö<òÅÝ|AëÐé8µ§ V›]y°yíy9ÌÙC•œ‚“Æ_Mÿ¥”;ÄjS;¯³×¼¤¸ù$Ü•—¸¼NÒå4u¾ÐãFˆƒ½ã€Ói'1Ï;·™¸ŽRw XÃ7 µlwwìŸê¿Óé önˆýB@! „€B ZD W “d•”»©ýp»ò‘“W—rô .— + ¶ª³Ð núï>ü/<÷Ö'ظe;2ÒwbñüY¸÷î»±hÓ.£rò¬³'C\l2~üìeÌœ·™;hmûgxë«9J¤sziIŠJp"vïΆ›Ö¦GÅÄ!9)6Œ#YNžs¥üâk{D<.¼ö^ 9ùBø¬ah–šLBÕ›ƒmFM¸'Q‹Ú jÇŸrúBà,ÛôÜ¢w˜S%‚ëMó(((PkЃ«bmÐkj¬B©H! „€LÀ¬)ØL1M"š’NþêˆH³'›íô«ÜccµÓzÚ: Èè8õªÜ³1D:`§ÜÛuè\9+ x ¼R›lGXD ùnÑNþý*‚Í#22rºf©?ƒ +bâAè1σ¥¤jIB@! „@P”Ã&FcË6- ´¨äÉå:ŽíÔñÇ/ó=ݨûÊbš¢÷©ƒë1&¿õéúu]\¾r— Ö 9Âãñ@{Ðõ™è!|~„ ' ¿¿<®ú:è;%B@! „ÀQ~ðþ¿½{±ã<ë8þìz/Þõ^í¬s)nÜ$ÄJR·Ñ††P'H PJø•@RH ¥4äR¥)—"!„D‘P U¤"!P¹ˆ¨©ŠÊE­)±êÈA¹@{¤Ù]»¾îú²÷ó›í³yw23gÖ>çì9{¾#Ëû¾Ï¼ó™÷Ì™wgΊ" ´ŽEÖ²py8&™L;ñÉ´¬z¤Å­‡e¾}+WÐÕiŸ‰~^NcuÚ6†€þÙ277·²O}ßûÖ%ç}9c@@`# ÐA߈{µ†·I«åß·x¬ùFÔéhÔm/º¿uUUOp×ï  Ä¿¯úÉ“'±+ŠXùô^Ð>öޏþù¾7Âé:تˆ €\‘ô+â£ðZtµ¬£cù›Ò--4¿µú5Zþ¾¾¾¸ó¦íÖÝõbØØ:>´µµ­l¤wÜW0 €l`zHxçÖâ¦é èÈÈH|ETWGù.q-î¥õ¯“®šnÞ¼Ù8ßÖ¾wïÞÌ[ ×¿¶Ô ºr®Î¹î[ Éô &@@ JvÐÓ#ÝšÌÕŒheÞDµ!o7zØ×k¯½fúù,ûrÏSjV­T^OWŸ.5^k^¯O©¸žNüå¶àÉq裶¡â踳ÿþ•¯F¸9ã% ¶ÐÚÚj/^´žžko_þokkÙšjøñ…6T mÖ P.’t¿Y'ËÞ™*×ʉÓa»´Ý»wÇ·-ëê¹N 4(:bZ–5ö¼®¶–2kÉ[$þ•Ô¥Òñ+±­ŠéÛ\îøÉü…ñ5­ï¢ÏÎήja]4–I¶Ï[Ä݈e4]©v©:U2~žKÚ¶ª>k)³–¼Š­¡HuÔýîrÿriþ"P\@mÍÝ‘¾¯}9c@jM ·ƒ®¤Ã‡Ç'T[·n5ýä‘:ìÓÓÓñÕ 4ëDJøÑ )=WW>”Gyu,,£tÅÕ§Ê©¼n{Ö‡çÔÔÔª¼Š¯ï)ëCU¯0¾çõ±bx]»H|ÕE1/7¾®ë»’YõO‹¯mòmÕªUÍ'ë/#•/_'ÛIˬø•ÚWîŸß·Y¿kínÞé ÷•Úç Ûò&÷•–y[S/ë–òK¶ÏãíFóŠq9ñýÁVZ‡oS‘øÚWj×ií&Ùd©¶P$¾òið¶U÷ ß·Ú~µµ¬2Jß·ªV^ÅWºê¡AûÍã»»CëÕ¾òøá¶jß踣¶¬¼š÷øáûVË”æq}n«·…0~©¶æû*o[½ÝW:¾,×ÒT?Æ©r_¥•ѾJ¶mZÞ¬}¥òJK–ñ}¥¶ iÙk_%káqAy“Ç-ó¶ vãŸA?|ߺÒÒÚBZ|Õ?™7ù¾•½ö•ÊW랬“ ¼þÚ·¥¶UÛ%k¹'?o“ûJóßß·Eâg}ž'ã—s_© 讌¡¡!Ûµk—(@¨iܺN2FGG­»»;~8“/ðüùóñ-ˆ:qÖ‡´>˜õ®w«váÂ…xÙøøx  y=àI¼:¡Rl<èdKž½½½æy_ëÔ‰U^|V­[1’ñuÂáÎ¥âë¤DëÒ:UÕAƒÆŠ¯[²UWÕYu×6h[Òâk[C2Qy)¾Ì4n«nçÌŠ¯mR¼°þiñu"«´"ñµ]—»¯TÏ´ú—j ^9«þró¶ <í+ù*¾òª­õ÷÷ÇNòñø*¯—Nzµ¯ÔN´ô01™ª¬Ú‚â+¦b{üp_yü°­)æåÆ×¶ø¾R]ÂøÞ_v¾¯´­Ú¶´úËBù4xg8ŒïÛšl ÊŸŒ¯¼IKµ•d|o÷¡¥Ç× ´êáñ“ï[•Ñv„û*í¸n«Ê(~‘÷­ÇO¼-øq'Œ_ª-hÝŠî+ïmÁß·EÚšŽ iûJñ}[½-èýç–ÚimÁ-ÓöU^[Hî«Ë‰_´-ø1ÜëŸ×ÖÔö‹¼oõ^’£Ž±¿Èg„ÚBÚ1\uÒºUÇ¢Çpµ#µ…jý­]î1ܱjWþ¾ò¶~ÞÊáJŽáa|?†—Šï﫼Ïs¯¿êV®ÏsYêøúôi;uê”ÝrË-ª~<¨Î  €Ô¢@Sôa¸êw®4ë\ûöí³;vÄÿuölJK›NÛ8ãù³ò„éa|ÏŸ¶ÌÓ4öôä8Lóüiy<­èØcdÅ×rmS^¾´²Z¦Aå4„.ñ‚’ëËŠ‘ÌçuMæó•Xõ»’½¬=ƒæ@"~lJ;&-iñÂ<>íÇ ´ØžÇc%çK-Wzßóûrߎ¬¸aþ°LV̬üYË‹¬·ÔºY>L÷´p™¦}ý¾Üm}ÞËy>=pRÿ Ð׬<¯§yÆ €Ô‚@îtUPW14„dYÓqÆ”?aþ”äU±•ž–?mYËÓ“ã´xiyÂXE¦=FZüpYÑ|ië ˦¥§-K–IÎ{™pyÖ´ò†i^¶èØËú¸h9òÕ®€®(ꪦŸàÖjMuÕLWkuBÎP¿~ìðqrK²–‡ùÂØ³°Õè$W·ë¶Y݆«Û«u²[˃Ž[ºMV_sÐíµ¿jyoQ7*# ÷½«tìò¯–TfmDE@ <%;èþá¦Õ…ÿ.Ïꉂõ  ï²ª“¾mÛ¶Üê†áJ/ôœR_”ð«çúþ±:éšWÝ*U§\@`Ýxï¯û.  €J^ O¸ Æ$lð½¯ÛÚõ°1 árßÌ¥¥å'¶ë$Ø_Ê—š× eÄ ’WMz¬¸sÅ^Œ^iƒçÓ×sÔ1׃¬@@¨’ôzØêˆ•P‡WWϳ®@)½©iùPr~쌌ž°©™ù厺é –;ïqå]\°“£oÛ©³Ñ/ÿ§_´ù”}þ÷ž´kmÔžþÛoØ™±‹6=¬m>ºˆÝl‹Ño¥_´éÉé¨ßj“ãv"êd¿ù½[ˆéÊúøø˜:yÂŽ{Ó.MÍÚìÔE:zÄNEq4\uÝ{í¦÷^ko¼ú¼ýþç>mß}éÈJÇù_q6þ € € P—\A¯ËÝF¥¨å+Þ³3vìì„utl¶Îž«ìŸùc;{î¼ üO{uxÂ~ù‘‡¬ÅæìÙ¿ÿª}ð'~ÒúúúíþâË6zÏ }ùU»ÿáOØGîºÅþéé/Ø¡Ñ)ÛѿŚڷØÖî;yü-;9ÝkO>ù)k^œ´W[—MÛ?ÿÝ×ìÆ½Ú~x§mëj‹.ÒGÿÐmï  € €Ô©WÐëtÇQmª-~·;^wÜ^¾Šþ¾|ؾøéGìw{Ø~õã¿ióõïXÏök¬³eÑŽ};¾Ê­ô©Ñ›Ž8773i×ßn¿öØãö;ÿŠ}ë_³^yÝNŸž°Ÿú¹_²'~ûQ{é_ž²™­·Ùg>û”ݸåxtµûäo±?ޝ·Ë¾´ç.;òçewßz=ó×_±Ûø¸ÝwçûÂ>e_úr»m_¶?ù³oÛÏ?ú[QG|Úþà×?g7t/Ú›ÏÓ.½gÝyÇÍöì?¾l Kú¿a³?sÒæ–o¡ŸºdSís¶0?cã“ÖÙÝkãG¿cÏþûÙ'?öQëlÝ´R—uaÅ € €\¡@St‚ýΣ˜£`~­¸ûöí³;vØ®]»V-¿ÂuRê@ÀÛæÍ›£‡Àu¬úI3Ï£Í>vØž?ø‚¿4c×¾ïfÛóᵾζèÖõí¢ï—÷]}uoÙb;o¸Ñ¦ÇŽÛéóSvöİ]\h·¿÷^ÛÞiöÒ+‡mÇÍ·ÙUݛ쿲«®¿Õ®¿º×†¿lómýÖß6gÇÇgm÷­7Ûë/î·×OÎÚ=÷üà{èÑÕuý»ê¤AWö/]ºÿŽzoo/ǰX…?4Ž@x|:pà€µ··ÛàààªcDãh°¥ €õ"@½^öõD`ÔA×ïŒ÷ôôĵO|ÃérUQ}ìøtQÀ"ñÃ<áôØØ˜µ´´Xwww¡8åª?q@`ýÂcôõßÔ@ ˜ßA/æD.R@'¸Z[[íbô{æ³³³ñ|øD÷p:N,Ãïœ+T‘øaŸž˜˜0½tÕŒ@@zà;èõ°—¨#ë,°%º5]Ý‘‘ëêꊯJ{çÝ;Ä>^µRš/Ïß„øí+YVÏ­,Μ×£iý#arrÒú£'½·µE¿‘ ^ÏÌ $ € € °ÎtÐ×y°zjYÀ;¾ ÄÝ .ÄßC¯åzë¶vÕW·¶3 € € P/kê »V/›N=@ ¨€_ï‹~w\/|¹æÃiO÷q^šç¹’qV|-g@@@ ^r;èºjæ·…ú¸^6Œz"€@åÂãB8\s^Z2ïåÌgÅÏZ~9ë  ԯǂúÝwÔh4܇Ä-.êg‹ômP@@ ~¸£¦~÷5GI ÷ º~Vé¹çž³ááa›ŸŸo$¶@êX@rÇèBÑ#GlÏž=+[ÃŇ &@jLà]¿ƒÖO¿!|îܹÜï–*òûŸióaÜ´Æd™´¸Cy5¤Åñ<ÉqZü0OZzÚ²°ŒO—;ŸÇÕ8-vÚ²°L8­¼d•œ.ê–K‹.óu%—¥Åв°á|8Œ¥ù´ô´eYy=¦—ñ±//2Î+£4 yîaž¼õùz’ãd™´x^ÆófåQz¸/4ŸVÖó$Ӕ߇ä:|^é^Þó&Ç×ÇJ÷i‡Ë’å“óaOÓ2 iu)•æeÒâzü´q‘üžÇÇŠN{\-ÓàuñåkgÅ-3kýÓǪO‡e|Y˜¾–º‡åÊ×둬£–Ë&\Ö#96ïË4N:‡Û¡ô+<–ÇH®Ë—kœÜž0ÍÓ5΋–IÆËšëX4¶¯'3\îÓ+®çÕxÓ¦Mñƒ#õ+¾<ÌÏ4 €µ"ÙAç¬Vvõ@@rpnSEb €TR ówÿïs%WNl@@ Zk½b_­z±@\ ³ƒ® |9SyÆðŸûFØÆò´†õ‹Â>Z?ûF[s¥ÚZZÜ´eÕô^ïõ§mk-Ö)­ž,C@w2oq' S € € € PiÜŸY«ôʉ € € €ËtÐi  € € €Ô€ôØ T@@@:è´@@@j@ ÷)îz, € € €”G ï×Òr;èyËS5¢ € € € €€¸Åv€ € € €@ ¼ë ºnk÷+ç‡2½ºººŒÛÝk`oQ@@@ºPÿzqq1îgïÙ³Çnºé¦¸íýîpcÞÕAggg­¥¥Å:::laa!Lb@@@J¨#® ÞêSÏÏÏǹÓ:çJhŠ2f> nnnn¥§_b$#€ € € €@†€ºÞÍÍÍÖÚÚš‘£D=³  € € € PVÜ[Üs.®—µC@@@ ²no×¶çvÐó 6Ûˆ € € €@µø™µjI³@@@rè çà„ € € €@µè WKšõ € € € #@=‡$@@@ª%@½ZÒ¬@@@:è98$!€ € € P-:èÕ’f= € € €äÐAÏÁ! @@@j ÐA¯–4ëA@@@ G€zI € € €TK€zµ¤Y € € €9tÐspHB@@@ ZtЫ%Íz@@@È ƒžƒC € € €Õ ƒ^-iÖƒ € € €@Žô’@@@¨–ôjI³@@@rè çà„ € € €@µè WKšõ € € € #@=‡$@@@ª%@½ZÒ¬@@@:è98$!€ € € P-:èÕ’f= € € €äÐAÏÁ! @@@j ÐA¯–4ëA@@@ G€zI € € €TK€zµ¤Y € € €9ê /夓„ € € €•XR½©òëa  € € € #ÐÔ%ÎG/ï¨ÓYÏÑ" @@@2 è®v½Õ1!zi¼½¸Ý=B`@@@@  qÇ ÜV«IDATxÚÄZ TSW~Y !pÀˆÀˆG±qÄ…¥€à¸ ÒÑìTKqÔÑVÇe¨=£”).Õºv챊4SZ<Övp”FÙAP"ûö@È d#ë{o.IÀàüçžœûþûßwÿÜüË÷߆aå„b˜ÁÈD¼>S¥A«ZûºÄm< xœ>Å12ÀÝÃÅ^;Š ƒK 8hœ„YEщå ÿöm!6>²@ãcé¯0›ÒçßOˆÆw Ú° &ÔaœuvlÁ0l\€J¥Òh4…¡&߆7ÈýêG– 5–w²rdo‚ Žòù| fŽº†5®ë%m0(=q¥Çœ–[ó½n ™”ËX­@ðr´5/õóð™÷‹^%, xMú«ôŠF4m‰’îh7–tVÿ§OND-ô<°Å/*¹»;õj¥ðtúK÷ò¹* Zþ ÓÝe ÅBÂQhÐ í¬ââb“;¤ÿxé^Ýž˜9†5F1D uŽâÚAJH:Dˆlyè,-kI žª@u[EÂÛ¹@~Ú~cc£þ¾852b›ÜÜÜœÍ52ÕÐj!Vý Öüôúfð¸o•slRè€MÕ÷ÓN„©mUÌÏÌ_ÌÅŠMsw‰;Qðh;㦫@±2­@6fÜíàKÇXpª†±cš9ž0 ~lAÿkæFô 8‹]÷hû­0j\¸º]°n‘«¹{¬Ö(Ú‘,ÐÖ\8»Ö'.ÐéXé£ìY³ú1`vbOL~éGe<í©á`Úö÷CÉm0¶!·Qˆ½z|i˜šeñ8§5q¬ ìÀ]²Øœoîää$‹G1W'>ùãþógº™œ¾ô}s·Ø6¤°°0$$Äàй{¼¹ÓÝomÏã:ïýç7m_ QÜ¥5¸É¾ÇR N}*{í®«ç¿+ÓŸµìÿ(ˆÇã% Ný;{UGÊ8ÛŽìüpb±›>mݺu4N0 äJ³@_,µ%®hé‘Ìtw´îg铪\hd«U¼uÓ´êH`ÅÜ´§Íã±C¼Õ3:88X1Ñ8l’+-°ã¸³y& ¨kÑ `‘«¸ÿC‰Hâ6©A´TRÏ—H$'Nœ0.VYY9Šs7µ¤§U¦ß_Âú³½çظjÒÒš/MdÁÒþþýûõ9]Mum+y)Ÿu‚a·I6,ùõíJ+5NHy>½½½GñÅ|• KÞߣ4òF.— €˜¶/ Ù/ûÙUÊΖÖkÝõÈÓçãa3ÜÔL‡–üùܾà@vE_[µ¸²êÕx«¦‹/‚­ÒöÅýR™oÈùxóy™t#…B‘v‘±ôí!!,ò ¢¹ººÚ Vü~ùÇà3ãZIG½Â7æ`×N­@>Ø}œ×Ãëá  ÂTˆݳ£V’s»fxÖÙ³g @g eûáèÙK\z ”ˆ¶1Ÿey:…ÄxY¤®é,™ýÈÛ5$Uª½L®¤Qí!ˆ ‘IøùInaÉ µáp¸ò:æG›6€Ž™Kn9›{ó@¸ÕQÕ¬œÇf7+y“0hÌ%‰jj»ŸŸ¿¥Kn9_°6z¡+óhø®s{&êÇË_Ý-ÏæýçL®H$²‡œþ¹ê iiÃq¦I™“'O-®ƒÇU5YŠ„r«zÂýܰX¬€€€زµÅÄï<ÃË|7°WWаºÀ/÷^)]‘œÁðúÝ_ðšÛ¶îØÖÚ+ÿ­–wá76Ô][s#!`Ù0ªÑhlìyæPQQˆ»‘‘‘ŸœÉK;6Ì—¨ÕŽ˜¨5׬%‘H‚èÿõc…‘ÑÆ.³Ü±#z§ž÷6mÚ´©¼±×|ù'ŸM¸Æ2…fmRŽ\.ßüõ 3ëÚTÈ•ïzÆ0Óµ23§ôv*Rî”t BM>I)°½Æ;ÿ]ddôÉË.“ 4×v ˃—ó›U«VǦgör†˜œ†haa!À!R©”ÍfÛ&y&“eŽð²]ß3vǩպà…!8u”3³pÛ¡Õx<^{ÁÌ D›øøxƒaËêUâcãþþþ…µ°¶ÄÊL«ª)î-a!59ÙÌl^êŽÝ€sÿþEm–óX-€™“¬ Ïàz¦;DEÆÕÛ f-Ì8<ÕSàãã3fÙ ‹pšÁcìÊòúˆ˜€ É £“‚Z=VRˆŠJÕFû£¤©Ñ_ß<>`”†ùŽšÂçöûÿΫØ>/æÀ }NæOåw®æc¶£¤´ .{ ëÖQ§†ß$•tƒ’ ã4+¹õ"a»º—ƒ©ú1à¦Öx^W­Vé ¤PuvúŠ€Û÷äP ªÒSø,dÓÎ4[—´Vš~Vð Z¥Æ,ýDëÇ+¿úHøk)Sþ’ÎÆäºþ€93ÇèŒGšZÚÓõ§ˆò\}÷LË/¨ø·'r^±!jÎáå:Úž¡M³²«,wÐsðšz¡Ô(”ûÅeõAô¥þ__]¬¶áy\C£óÝó ¦¹öÞô$û³lž¿Þ¨ß¿9<==ýúõëÆŒÕ„ýw3ÓÖŒ9 ·©´Ì–Ng, Ë[‡J j¯wž­#ÍçvÿSK@íþqï|vï ô!Ù@®(Õ´;Œ5.­c¯"zOà r$«@¢£ÀxxÇjÃL³N®”²¶® »ý«¸úÿãIš[Þnåà!³ÒÆ$ÉΣfü”)­¼W*•jºðm˜´gÏžÄÄÄñ²¾£ßZ㬉ãããM¶“k‡Í/Èdòè–Øw#F0KR·9dW©!Ë{“ÒÖÁŸ¾¾¾4š Ò}'Cèæá2ÕQS}ýxH(Ü2#†^?ïeIyk?ü©‚ Çϸ¶Í|ídn?(ä’ñ G€ÊÇÇÇúZªL&ӎ쬱>Ozñlîò¥ÆŒJ-ÞùåFø=#ò·ßGᓞúÅboܤhlàŽÀ 8¸ÀÖ¯ŒO¦K¦Ç\&OiÙmÖÕÕmß¾½¦Æ`£TGYÜׄu|æNsul`Ð{þKmÏY6”Ïtw*ûûŸ²ÂýüÞ‹%]ɸ”ùmäîÓOþq(ü_6YÓ˜¼¥A¦‹p ¨\©Ò`^ÝD ܶb»)eJýøÂ… x<þ9œš™0Q ¥R©õý7g”N…Æ™f¶TVVÚt1¥R%`Ëi¥¬IÔ˜+”™lONNÖíµ6¿]ÃK*ÒáLq—î3f†d<Ï ±Xl<Œ–ŽŒ"†£CÆ )Òíñ½3që>ïÙ+$sâô¸ )) ^Él@›zù]&ut#…BÑ©K:JsNŸËÈW« …\¥;V¼†â ÁùK?àp@}£+nvUu¥îOOÏÃYù÷+h¹¹¹S½æEDDè¾À«úÝ¢;xËÞ=ž÷ýMtùíÜG¬ò&¸¥4Ñ××g¾Ú@¶çš7 UÌÀ™Ýc———·iÓ&N¿ÌËý%€f±XÂ6R …i%~6ÌÒ1)­ô>¼+Öã≲?>óp|'ÂPÓ¨%éÐW6±$£‘´êYñKU'üYzrÛšÈ778ñͦ58Ž­·ÁÉ)·kŸ3ÕÝÍ¢>&ÈkÛ[T=PÞÕâþ犞fñ–#e<&xóÜC›½âá½ÆÀàWra™Ð?Ä[ï r¹|ëÖ­¶úìë¹WnÆßTiÐX@¢A:ÀŠÕV—*‘ȹ!+Á W<ÞÍ©¤¨è£ôTk5~TØæ;ßËÜä­£1ßÚ¥Oh Pu—¥÷I pî(Âhš ý ÊQ¾º>þõkÙ UjXu"¯y³.Ò$).~ršìžîn¾ B ºžè™x›³ðи޻§´$½‘F””¯³TzNµáµˆDâ‚虾a˜†jÆ D-äÊÜ^“/ŠóÔ«kv£Óé.¿J©6‘VB£ÕÎìWâg¦Á£Ž aß“ Ÿµv-".|90«.•´mO6»tŒ|ûà¶­ †¸x&>hkêÖïX£UÔÏ[ˆ Œša\,’‹tGݕÀLˆÒÀ†‡-!±þ_ÚJÜ2_‹EADÃå]¤õ›ój:'Šèá¥÷Áó§l¶Wy~(¸À0ÉE§(ŒÕ)jW¾Zý¯7“Sµ6ŽI³œ¦H9Fùé`¢2…Úl µxe’…š!Yº@ÚÀC}À;qí{ÃWý¹yh>ù§v´ zMìYCJÙ”V,ËÕR¦d‡CÈú··í5C°W1’—á„.&ØG㺎~¢Ÿ»}oàæùqo˜àž2^¬|;Ô6~÷Ûû×¾J°‹®¬§0(v3ÆRJvîÝõ‡ɼwr‰ ‘\ëQ,znÓD½B,Sº:a&®qkk+BŒ×hÔæ'’¯~½$Æ>~\Û&X<ßcâ¿/ò—O•,ý•7õtµ÷Ƭóöðð°?>.®ížà/D}rN÷¥ ¿€VÄÉ>ó•J5é|·n¾Ô ‹öpÏ*øjÅ¢– ‚|f„Ì›9=O·ì"æ­¾³ ^./¸ –¡Ç½Üœ|”"¢*ÃÌï‚‚A¦D”@Xhl߯†öïiõ[í´EA1Œp Ÿú2 A9Âõð«Œ|FUqâ¾gWFÆÝ»“Ж—úsDг†êWq÷Û”ìŽl™÷Ì ùæzP%Ô“>»pÛhÛ}bßGöî£:© /µ´z¼†Š<ÉLÈl>´ž÷K€’sPýÁ(f³Ù·nÝÒÑ™¨Èêììtpp’’G5¬ëX²@^Xs»ÁÊÛ?©¾¶ØíèÉý6²×çZLhn-Àeg\J´¦ŒÝa'0õ­ƒ©æÛ}—®iKóê â@ü,D‹ï“oE3†…Uפ¥+À ò«vŽª&·°ŒÕúy¡(ŒŒxÁ$ ¢"j&T¬‹Ø!àzÁÙÝfB ˜ sèPUŠ…Œüåc¾(n¢ÈD4gÄÉÂ=r† ²Kî½Ñ<ã·&ø|´½÷ZZEœÅníïi‘éì8ú8ÄFˆpÑ7}ÃndŸâkƒꨣ°(n¥0U¤Åˆe Ô¨öB0 2˜?Ž^–_ A„æ‘,ýþzê¸%MÙ€Lía2—¿DÌ’Ãm<|0<:sïVó~C8eÄŠ/Š™LfRâS«{ÜpF­\dü¹âñv+m‡è¶ «I|¬‰C¡göÝ =¹åÓ3á—¢XCÆÍMüÙÿÃOÎýôóOŸyÙ巤€¦â7=`n€ï(bò \iˆÐ‰–„ˆ”£"²–4$ÁD8¯ó|dàùãByy¹‘‘‘€O>y|fmDR›Ù(»2Ò2:¨Ø³á=Bú´Àä÷èOÎ;ï¹Lì(ÆcZlä"ÜáªE¯ ÿõi]RÑëH_‡¿`?þæŒONÝ{1㚯2nEE…——/xïå˱»œ¿Uüå6ÒmÞ¬˜,€ú_˜2‚©à¹:€úÀ&ˆïE.‹ @8Þä<À¦G/gø~l3k Àºß‰yD` ÅAˆ¢¦2M1”7viòâ¡kkkÑ †Åò„OdÉRc“Á(ÆV$Q/ p8(„yëÃèáýáöáÄ`¯,g(ÕVg÷°dÚ[Î¥ÜöØW>®ýW÷š>Ikra+ö344TEEÅÛÛ{Üö7F­u†Œ lŒŒÓ|åw9[ìwm"3àÞB´´´ì²át"ÿ„àêñã(éL¶'©bFñµ„*±Ììê“!±ZwïÞ °/ÌÊ 9"H÷‡½!bÙSB( äÝôoȘ™‘ÉBÔäx}ÿþ}AºŸ¸š'–U”ÔS&+æñ»;¥™™£ÿŸƒ¿*++ ;¾¯¸víZÁ»}ãùÄñë~VÄøRPÜNUSS3""B„Ž=ìþMǬ¬¬jÕãì}ÞÉïhc¿}Õ=øjoîytsœÕÎðî8, –+º<”Q„ÄŠXùÁïrŽ®®.‰DyŠ× ¢dÇ f³sêš«º¿Úê»có‡ÓYÃ;1 3ºOB.Ê:ui Ã]šdƒÌ%S(¦Öz¢0à^ˆŠŠòððöߨ+™ËlIŒxiJ—»hµ «r;f)ôôüÄF«…,WšA@M®.I*JøMIIþ‹¨\sÏ뮫H&ÌbœÂ¢v€(t ØT×fé¬}/»ùR|Eü7ˆá44aM6!ôš4ÎÎÎééé&&&|+$Äý'w… áŸíV5ظè hso¿ýÏ~oKII vG>{Jn^6Ž¢¥¥¯* —ðô£ërÌö#0w:·GŸÜÎ3µ0á°9ÂvÄÖ“™\àv€Ï¹2Q©µö÷zè 6›Ýú×w;¿z0w¥ãQO讀s1r)‡%µ9Ô~_‰¾ '×õ#ûP yyùÇŸ>}Zäµ1ŒÂ¢‚—)¬eËM V#ý™Ýj+55µ)v7O”Š»»»KJK ^;¬³ç ;úë æg–ª™rÍ–.<%C48ðCæ•ÃÖÓ凙h±8))©åË—¿«ôƒ¹y9à[mU >Éͬnn 9Ãnõ uuuŒ” –ÙMÍ"{Ø?{&>Wñã¶ES‡ãɳè¸\nUUå–½ÁEÅE, >ˆÍh˜Æ»ã'ïáaÒLOO_e¹-ÉDô€+OOOLƨÞÕÕUäA8x0}0#Š€Ž÷îÝÛ¸qœcݺ8œÙýq;ý¿ºtZ¥ÊôÂÃëבä GØsâ³Ès¼³]Êbü¹Ùä,4!!] ©3©8ÚõÝ_"ô266 óòòŒß†7].§+š©Ãvx¿Ú^÷]g>ýroxâΣ¾pz€®öŽvš¡ î çÎ=ÛwQ›ßD~þ•Î:q1báS£B®%æ ô}/©xäaƒcCrr²ƒo¯cÜD"1±°E]QÚHCn\]øáÕˆžöö1ÚÔÂò:¸Ž1ÌÖÕ]·yËd)s“ÄãÇ(ø3ú2ªû’ ÷OøH왓‚bæ­¬¬>;ü¯ÅyŠÓ Äs¶ÒõÕ„(œ‚±‚¦¦&iiiUUUaƒkªÒW²2Šaï@¯^-±ÒJ¡-q‡±0¡ðëè舱Z]]ÝÝ?•`_Å‚_†SbËZª}×,Ie‘ÈE%%!"ð*¾,/Þ~“7I®³Þ5ožÊ@³Ì‡UlÖX®LööEÞˆL‹S¤´999={ÖÂÂBŒcÆ\N³\i.ÔydcÑÊN-¬+«9w6Ar ©È öÅîrúôiooo555*•*++û?¢ »ƒÓ"?·©¯¯Oyœmmî rï†gÕ‘tu6/`[2glA{%UàÎ)wÛmA rÒõÔÁá—`jFüªu:ºy2Ý¿}ºgž«¥Æ¤£¸¦•®«*3-˜=vìÏ[†"~G ÷Eôô”¾(ÉyØlëè¬Ñ<™iO3M×*š,^2ø°"¡ á÷çz#+­‰Å4&gŽ´(¶Ð§¡Ya>+D[˜µµ5Fë«d2nî*Ú{mnn§i>@dËUX®°œ7oÞHå—Û݉—’[‹O¾ûÜÌÚ„/ãÆ|–T´aåLaáñÿ±PØ^FFFååå_O&<>ó¸¦Tç¿`ý9&T—’Œú#3;È´W/»•e…@À——V¬t!‰ÁôÀèhðW…E‹ÜÎlÙ’B¦U´õî2pe>ªärǪôÃ?ðƒªkXGë5…™t¯àU³¶˜Ê»Ê¸ÿ9{8ùÇãë?ø`¥©­³kM#ÚTJ-+G)5ˆ›‹û³è X³UzË*ßÕ0²¶0°N+`z¤j-´ë»J¨áñ¢âc¿äïç¯$Ä\ʰu2ãm\ òä‰Iù>’üŒiu55Cøòúñ٥Ϭ&Û<ìà Œ<Ï#—K™˜ ýÂ1è¬Ê–t»ÕÖ˜Êß·E9QFA¦±d–?o"ÈCï8]Ð÷Çüö„êÒb¾ý)Åg»3›‹^½ÓV•CXåfªÙ]A•ÕÌê^¼÷fèov›¦ýÞ×·“Ò¥®/½¤ÛƒRœÌÕ³_’ÃY±Y=„Žš‰#”[“Ž·ñú›2Üm´ÆÒ¸¤¹¹9-9KOÙV’_<Ÿ’úÄv½!ay1ïÉæQ+g›é‹®œBPÒ£ô%kxâ~XfK{Ì—Šæü\ÆxI ý/Ë­ÑÃk3Ÿ.è)Wv;²g·ï•_.HÐù)iTuIŸÐ«h¢-œ/\5O6›]V^žÿ¡‡ÎRSsAŠNÖQb© YK®Æ‹F ¶3^³ómí¬•””FóuÝN¯N*Ù*Ž©ð.סèÚO¤.Åhe_¦Î_Œ£¶¶öǶ“VÎ]l£¨g>«›X“žœÉéFY aƒ)OQÙCKYì¿64Ý7Ø·“?Ú€[lµ//Nº;ú.«=@Ïk¦”ÝúÀ(7¶öpt€Ë¤»¤@z?`_ßd7/âÔëÌ}-.ÐQ,u?ƒ‰õž™¢´y^̸êg#BÇÒ’âÅÉŸLi€6|?A×°GPêU_)¢`Ûrèÿ7Ðz£»[Ù¨kà»Ä\I§S¸Ù UŒL‘3ó½†À›…;M٭ϪV›ví—C:"‹ÖæE~‚¼ÒH×èHð)sÜöÛÌ,7OXVè§+f–™,Xšˆ&®ÓT骶’y %`°÷ —Á ';»“ú÷ÙR6Ìh&3ÂÓx£0p—é ¡èvÊÛ»—³×¬_‰ ÝÃÆIÍñû|›w`´-áe+ª¾ãûû´â‡û %ðìhÐ÷ÏsÛ¾ þÅoߎ‘6TµÊhÓg £ØôMò_;ÌB&“³²²$úêÚó„ð[‚`Fîc{' èÓÇ‹£RjMÕ”ä$gΔú>Sãó,M×b$F!ìÈþ­ŸíÝ'Àð_¬Ú»gMà™yd š™ kic].Ø&᫲u!®–Øm_W»_£ékfºjli«o*7³m»sD‚!Pg7çÊòR÷J&ÜjkêH}ê´4KuÁÑOËÚÂbf½?úýNf¬êêj‘HUˆÙ}7ëöÍSeÞ£P(ýúõS'ÖKÈ×qqC4£bzEš—Â[…NqÁmZò¾#Jj䕬]÷áúÃ/âRϰ«ž~½ÒTP¾{×öÕóçü|ý²âä Æs¥ËÊBXŽ€Ç'T’&:+”Œ—±eøŽèÖW.g-^Ò¶’I “ªž‘ètG¡ S°i[¾JRwÇ‹q2HÚZ%Ó\!óüå0Ìú)öñ¾û}"RÿcÓ~ÞG¿\°}×6Ôüû¨Wí¥*|÷QHòf•šCdŸs·"ᑹýçcxÌoBÄìñ3\#ª±Åó>ô ÞºäèÑÄ1ö‘ÎH4\ó+/Q«aTÖÐ"‚ôT~Ox©ñp§I@a‚qTbÖ¸åÖ%1Æ>óÓ$2V ƒã5a-b¬™‹aàh{û·R Ñ›U¸rÏS3¬©±aíïÄ`ó £çl;tœqØKD°ªÙoßû‡ CM‰Do$ÛwŠ „‡;õ£"³|,‘}/ª¾ þÏ´¡šñâûOÿvõÑR­xö8u¦ÿ¦®ûÙlÇ*¹Ó|¸~J™ÏÀÁoèµgcЧŒÒ¥¥5±™Œ—Jeo›—È/¯™å§®Æ|èrîNµ³qr¾ÙæêŒqê®g¡Eñwwm %ôî¶ýÔö-Ó)&”GqtùSÎs¨y¹tß§Hw†#++ËêÜAÅEEÔ½éb®Å'\uîµo_g?ÿNl öÚú*ß` æ4héw óœvÞ#+âϼ¿jçÁo¶¥&ÝüéFv˽ A®w‘ÐܺšP3ºY^e‹fBÚþ²J—÷g.51±)Æê¶^¯Ê â-Ï^VÜ_ûåN •‰Ô1Íyx¸ƒªÆ´”ؘ¾pQˆv4 ‹EbDÉLèr[*úÜëÿÁw˜Î£>6nÿîaìÿ~^:vù¹'|©òÐõ@QTb©&¦ˆ4²# ½Š£1Г#“ÑLHˆc‘H8TääÑ‚Çïˆ9 ˤ$œ„á%P‡w?• kÒ*š0ÒAKžÁà;÷‚”®a>Ì , vœñ̓¹&DáM ë*e­Ÿ_é8ý¯®g±â‘®þ×âØ QNš0B#ùʵätÖè]ºs×%ã(6‚‚‚RRRñ>º=+«´92½jU°³DKZùÀÅØz!’[Ge±ì…¬‰ÐF$“ÉKCö+UÁ«^öCê•A°²ïŠÐŸ Ç\ +Á­[·Ô ³té~Ùú ²ÅüÒ׸"‰áðÜŠ),dPT<žH‘o#¨œ„×,~#-çʆĻiO¹ÔÓ×r´¸[?·Þš m@z')+õ© …Zجô¨^ðÝ~1³]¿²±±yöìY·k½%0 ðí°‡H;j }õÕæ<&ïä±§½V.„ÐÊ«“ƒ‚Μº9{Œ¹H.ÊãD0^"#&—Y‚^?]ƒ/O“dKÝL,í ö¡·á¬½ô&?W¹wiÿþýûö훚šªº=ƒ-r°êp%"atžé량E1’ èT`›HnUÊer£NîK)¯òIK™¼1ü Y"  "ÈU7l{D¿^†Ã—/‚¾ŠðݶŸ±7áÎþ7r–Q¨¦Ö¼„˜\¦R:¬åSúÒ$*åfÜBßÞ$’Zë|ZÒ^fš~S={šõ’i¸ßô¬5$¼:UÄÁî6¡ÄñÛzL:¡4°½ŠÒ ?u×wðö2aÛ=?×Þ+V¬ü·®®{³Ü‘[y*,Aª ºnÛ¨çG"x' !;åñ¬çe0ÑÑÑZ÷cmm­N3=&0– bowz#R˜¹¹¹š'n>û¤ëNWWWOOOu¾ñGù úz„ÏO¤/ıÏj:íINV×ûæmQûöíSçôfžÞâβùýCüwr™îw6kßé{œœœzò둨¾¼#µ8«{õáfZ•Ž#›P‚ÜÞÛ1I¾{÷î‹/ê>`‚÷¤fKQ?Z¨PŒjqV÷מêã¨ãŒîÈ_7oÞ¼¬¬, EèÔáɓ෦¦FÆ‹¿M>S¤;¾@k÷w³ÓæÌža‡ ¢ËéW®\QCÅØŠaã+éz=3¶:Eö¦Šÿ믿ªŸ}#òb· f3$¹iÕR©öÖ¶Oަj:ïájŠö®Äë~ÍPl=z°À…5íá·;ô޵†(ÚýØ%“¡)· ™5¢N9–Xõ’§èªÏu ÚrmÓ„×÷¬øñ¡ÁåâE‡´÷m~YÇÊÅœ9s ´ëaÁÁ…ÕÍÍMuãÒ‚ÚºR>£\ ¢6U‹oO{[@KIÜ=ËoÅo'– ÆäÉ¥òtd=±( èt:](j@±E„‡‡§¥¥)ŸÌÿ3cÌxOVwNèÌù™e“»wš÷ã¡Ðs¿~øþ\žiŸ/~Iùs‹®îÜÆ¾@7·œíÑš ½SÀÁ7Àý#ÓljB‘ˆÞ0§U¥žr»Zñ|ˆTdJ5“¢2ˆ@&CRE¢² ¶ÿlܶeS ²ÐeHçù­ï®¾Ø¶h¤î îp7}w¼½G^L»÷w¦.÷W\+Ÿœö÷÷··ïœì™Ãâç¥1*ò¸#G YºÐÓ?$tsij”Fã–„ôÉAv2Ö˰åÓþZµó“€•§ïÿœ\ÚB ÕÁdª´š—}zêòo$R‚uúa9·”˜VÓQ¦§ä7ì þg¢|ˆÖ ¾ú bZcTZXX444P©T0pùø¼5´3nÒbJܼ]‚¦ÊÛ°êĶТ7ÁÆN³” ŽuIII¹}û¶µuç©Ø¢²üâ ÁØ÷PD¾¶z©‚ž‘l>vø¸Í¿ãEõVVn2¡‘` Ñ|ÞŠõÇ ¨gâøí°~¶0ÂÙOÚú% ˆs'£ˆ\Òp%"bݤþžA#ô<¡£ø%²€ýü  8NNNާ§g×6ùY½íÞÖ'‘Dxš’;u±ÆÜ7t¨AŠŠ‹ÞÎ:}Z«)p\κ›ÐÇ{´:qí ±FMHoHožK …"Ý6x<îIrÞ¬»‰È~¿ìÉlfÚgˆY/%–/Ä•|2D"‘ÄÄÄAxÁ‚êtÈår3³ž6Ð\=©¸LeÑ&NówvvÖã$º®Ã];GþñzÛìCQNUe>¯ºPuv‘`bZ}çeÔîÃk=Q#á1*™ÊnfB8 ‚#Êp"ØÂbŠ¥“ÍÃ(ç¾ {þW,â6@u%¢¸«Ï^cG…@øpããã#""ÔÄW1TLœ<{•7L«zø ‡Pë¨VYR_'zêìAøø³÷]\\z_-…¶ç¥Í¥ñE£ƒF*bçÛ2zë‰BrÅõ-[·Óì›dþ˜\¹kš+ádˆ_  Îk=‘ÍÞøû`ZƱ›ÙÿL]áÓôþ‚Ùf£×µ÷YSÖàìg?À¡m<\ºt)“Éký`Џ÷ï¥t &OÒÓ¼§ööðð|k£‚j]ÄRTDõbÆÌYŒÒLMù€DQØÄÔB"âR¨ftŒÃ“LL¨DÆ‘¨4S(¾BâkI`™$… IÄøèdÏ`><›ÍòZúº"¯¨ÁUÖq¦îуŒaŽ&fš@pz˜~wâ ß¼«‡ÿ@Ü¡tòxϳ3k2 ^¾#d²n:dT7I-KǼçkkkÛcÏÉ.‹½ªIðéÏ©ÿN*ÖK)((°²²JMMݺukyy¹=6ˆÝìMþµ×±„}tˆ‘vòäIùÔÔºu*Ú”ÿeÈÌY:ÞgQBü°ÿ|öÏcrmø–öÁîÝ»·víZ²ÇµÔJðÛË¢$ÊÍŠzÏEÅvGå1¤•ÛÛv¬OÊoRl×ñȯ7”WÃŽ½Ì´´`Ù£¬¬¬¶¶våÊ•]òEðñÛ…å ü?^þÙ†òˆšâÚN:bù^b}MNÊòôľîDÙU’f3LMy’á1‘õevYM3ïªI Œ{Ú«/ C ‚a©xÇ-Ý(ØWß¾¡Æ7œ~|ôfÛ7A£’@ÏãG:Dí F¸|ˆ/Hb¶NýsQïÿ|¹ÒÍ7Ðã=o %C9ªYXAÀo‹@j '¼–Tò/øÒýÒ5'Òã³jÕméRRRØ(®áèÙodñY«^Ìc!w.=þCºG³øº[¶lñóó›?>ØÎ-gâ©¢~ÒÕ-ÔØˆ¬ÄŸŸHÓ¨}^^P(Ž;¶ëYBý>LK3ïEZm«ï%€ùl†Ð%ê“oh·ôü1}Ö å>`(ŠVVVmsÓ¦M7nÜÉdàô÷×,‹¯öˆÈÙµÔ³ÛfC‡ݶmÛ²e˾þúë#GÚ”Ô…‡’¯íœ Ó\_’ŸÞ`稷Uð¿$Íªá °7îb9´%…Ô¡4äææ|½¼¼&MšÔ§OŸððp#2ÉÏœ93::ƒ~gíxv|\ò_ •öh q¸ÜÞVÝøŠøÒܲ“¦9Øwö2®f ·_xæ3Øfó|--!ZB¼ïÒó}hé$úÁ÷/}5N/@ƒ±(;'«ò™lLöʹ 0r}wbèéGÅÿ7{×þ(ÜÉaýÖ-ŽŸô~oì‘Em© q8(çi¡íp±—Zn™ù•ì”üÆÕ¡Ã4z-h±T{ëŸîøž;wŽ+”[vh4ÚØÀqKÖŽ•Rj“’bq8<‚€wñôµë¾¬®mŒŠüŸ,/n€˜>1$À»ŸÝÐÕ¥Õ  h™/$VÍYùÞ„q“Ôt{ábð ‹ÈÑè´¤âtz“¿«6ƒÕúß2Ž®}>ÌÒÒR‡ããã³îÔ³«ß£´ ãу [ÄÎÎÅí­¬C3 ö,U;·ÁÂç•ôÌšy« KÅVÚNgLÕWk|ÃÂÂfÍš¥p‚Y2Ö¹ó“àñµÅKç¿7׫…ŸýäŠ@Œ)*Š`Ù%L,wˆŸé²‹œœœ´À÷ÆÙT.±··:ŠU'N‹)RõX'*¾•^5׿_Oš«Ãæ† ~ùå5­ûEEE£òÆLIMO;k¨›››RWí ¶ØNÆ6³yë:dAŸ$” îô– ¡"1gðˆ¾z¶´m»ð¬'uP@¼QQQsçÎUü;{¿º–< ɰX,Õ«!^Ô®Ù#Ü|çÙé=§²¦˜W_&è¶6UK®Ÿ}¤O{qM³ ÇèwÍš5×®];}úôÍ›7{"ÕN ¸•••jžÀÁÓæ¸=è(}: ¼+Ä4ª<3‚u[‹÷ïU["¸£@Öi&P;²zݼpaí$Ś׌ UútÞÓr6C\žÏlªgkt- ¶¼þï§G •/+2½ F¤kù•ÜÁƒ†x}ÕT-«(TðAm®@ ÒŠƒ*Ïã6ó¦zOÚðÑN-V‘Ï¿àieEFb¶Õ °ýòysiA­NTüz°4 göͼþøú*Ÿ­¸~æ·vptoÛÜÒ ‡šð˜Hrdv·W‰ˆˆX¹rå¥K—Ú÷*<¿1PïŠbU¡E°º@Ш¸O@øK6l\øéâû5ÒÔð]¹ák'Ìý ëò@’ & ¼êÄõ[w BQx h. qD2G'ܸdùé"¡UÓ…`HÐ^»[ú݃ˆmãU4a²”Hº›÷€·µxÜ£ØçóV)Qù‡ VPPBp‹íáéj˜'[3½ã»ç¯ì°åòtß"‘(7/''¾iÊÌñå•eö–8“ã8ij¸‘‡¬FÀ¶5•™[Û¨65œ60±*ËŽ÷5PÄš$˜ÃÉ3TB5åBÊK_?_kkkƒ(ÐàÑÔŒ¢fûú*¦Û{ª™*ϳÂjŽ›³¥Þoõûky_-tïdú‘g}Žy6.`š¦àšH¸ûÀgªýHwv?& ž¼36áÐÔ×÷ÄD<åï!•tùˆÇ€’¥Ø¶¶¢±Ø|@ÔÍ,†‡ï ®q{o0Ê,ÃÄ\ðĈN•þ«)‹”À°´&4L“¸öîÓ}°:„K7~êè®ë*t¥âï_ÿzb«Qñ±OÀpÅNJuôS›ÅÛ?Zv?毹³¼7Ðö«ã§VmÛwj×ÎßÎl~‰›Äji\¹b]øÁÙ§-BmF:XÉDB¸u & ©‰™‹>ŸÛ’ÃÉæTâ™uDðBŠîá,u'[ÄaÄë¾#<lNU'S(¾ÈËÉŽeNTºQÄ-KO°±±QRO×I~9¾rîðoÿá@÷o«(–´Ç+5&"êÀ⛑—kË3þÞ2óᅦ–¨mj©jh&’ñ×.Fã{ þþLLØ…X‘<=Œü\±˜4êüO7ãŸ×J`ôÂÆ±_¹Ýæ!’®ufH øÅ9¶~숸T@¤by2eAmxzçõûW/(¦¦¦¾cüWí %Û3ŸäÄË€Æ(• 6R“SE¦¥Aó]fÌœakkû¶…úáÅ þ•|÷Ùäñ¡¨QúÅB8§4y|p@»aúžø˜°)r[hÍSù²Ï.%xÖ‚e?^“ù“ÛÂÿxî}ĈýkN¬²»qJé%ªš}ÛœeOFÓ×j’mFÁ=ÒÓ2šk…c§ø¨¹®BÏÃ]cccÚ£ôÞ$Ok{Í–lçU˜ `öyÏÒò1­ž-r´¢Ê!.OQ qm=ÜD¦˜àa‰D€™Y[›ã¨&y•Í^ÊíÈÕ,¡…{ˆ¥ùØíÂ/f»õ€êd‰B ä¼x^òH<:À[u÷€ó&Å%ùÏì?|øñÍ—ÿ˜ò×\¤`å‹Âù”^á[ÇA=U 8ë!dÐjˆÒ5Äᲊâ'„ø¹ôï~-²œŠ £»Rñ !m¤©<Ô}ðŽHsf ¯÷øÄƒr&0eÏr]òs?(¡bÙyÌŒO~¸¼ŽXAýdå»/32/‡Ý½óÎ&–Ú׈9›ù™˜Ê ]õ,™m©ŸŸŸ\,W/ª­âÜËmÁ¨&Ûp9§†É9þùäèìªÕ£üÖ„÷=©4ó³gIÜ:ËGNúª}a?o>~=ò@ GäaÞn»±r*7ÝíMˆ~3à´¦åóàQ%处² “qäwq{ár¹Ï³Ÿ™P©î^š.m”Cœy¡ b)ôëA$†Àu¬‡yÑâ¹Kfn¿1‹ÒPˆ"®xÂüÙž§îäÛÀp!y[‘Vn\Ù &ñÄÒÁ¦m~ðÕ8'ÄÿFѵl>÷ôeO};Ùë3ø¤EQOÊú/èÜ–˜mõñôSëý5í!toÂÌ1Nkf¸#ĺ£>+ù. g]:1wñèÛÎVŸH?µÎßà·ÞÃ^¢D¿Û™^ ~c†`˜ºöÕ†ZVy>“ÏB’n=7.o ã,\!la*×î&ìøß|Ošå˜qsú˜ô2Q>pLß ôx=ð&{—;kE7AŽð=ÿ` Þ7ˆ¾ŠÄ;×ÏãFýµb Åº=—º6‹ºø¤±J<ÂÛU(”"Ö^¥RÙ˜ î •¢‚§ 6“k\¼ø¯¤²åÆ‘»ûë?²®PpŽÉhiª’ô²¡©ÙP£ óŠÇÍð0–ᮉ#¶³41”Wý’znÃ3)÷#³‡¿™qÍÂÜ‘ˆ„ÒÎpáI"E_ÁÔ¨ô¤œŸù¿KF¡(_…GÏ;/ߥß=·†Ñ¼q:£º?pð ±iŸú4W.;–0zjফ%)W7Gd2W¬ÞˆÌD8ÚšÕÓa‘xÉ´‰ía):z¬{e>ïùý[ðî…¶ž÷ÇP!YEGÞëoëcfÞùÛÝi4êíéÓ½o²1gÄøñz9ÞÕÕ /or:µk¶…«ñYô‚<©TÝå®F q{Ùq1ób|O¯³­N¹ _?ŒaŸ¬XVÙÀ_}"mçï™Æ»(L_E(A¾<óÄß­÷G“ë=2.‚ÊÊøY/›c3ë,Þƒm>š4¨M×èÑÿlK›L†=ÌkˆÍªаy’þö´¾¶f<ÃU4ðÚX*ƒÆ!sS’¹ ‰J!X˜’lÍ:Ð9š»ôî Iñÿ`ï:àšHºø¦7zïEz¯bÁr*`ïb»S8=ûÙ{ïõ<={ÅŠ½7DÁŠŠ(½÷H ”Ò“M6ßü8 "bpò~Ëþ–ÝÉÎìÌÞ¼7óæ½Ÿz2ó“1 ‚˜lQE°¼FXÈàæ—qrhl¶Ö à5(8,M&`,õUUH8Mh!-5…ˆÅaþíJ ið$•ûÅÑ+ù…å¼â n!ƒWñùŽ®á‹õ5H6Fjmu€Š`¦§òñ®¿úÙA\V-Ȧ±£Ò¯Rúš$cm²§µ68Ìt)À®m±C™ìmfed"½ ”Ãâ‰zƒÁÈÁT‹éúÄ™%5O“ÊÆ–è©],4‡w5µ4PýyšA °Ø’ð8Z=Ê×<ÀÃÈ\_¥Ämt¸Î(¿ò² Œ)p·Òêge¤M†:èëÄÀGòŸ%Ñý=Ç÷¶ütoNˆ[ž’ «ßËä‹%¾C»šv RQô8Ž~âQ¶·öÌAvê|ˆF%•¼Ý7Ó˜ÑüáŽ^ÖÚPSÁdçµ”¸Üª-“=Ì5:@üĨ, ‰µÐW];Ñס´%L/;‹F¡6Oö$0 þœb²*ÖOØäƲ¸|F«W¯vvvîܹ3‚ ­*++ëñãÇû÷ﯻs2<ûnLñÉù¾zÄŸÄ·¤gÛ™îP°<:ÿhÌ»¬J >r[ÿoîÛî ’( ‹¿$Ÿ-àõ ˜Í¬¬Œ==»H¬ÃaÀmy { ‘|H„Å‚ÿ0b‘D~‚À-4¸B¡0h™ÂÀà‚g)‚é¤1,E°r÷)ТaCtT ¢27îÍT‡òxk@°@, Xó¸”)øïpâI»£Ìì²of—–.1‹ÇH¡Þ†eü¶ŒK Š` êhgòKS¶× nÈ N…H¡©L$àSãŽTÛè7px?g<Åyݲ@Ae¨_àõ{æè©ãÞ‹ÃAV/î’…ØÛ·òþ4gÎóŽW\]j¸Ë·ë¡½H =—¼ˆz!26›#m(ߦ8õDÂc׬ Uñgìs¿õ¬â 39¢áÙËÿ?Ü´I%²´ò›–F»ÇDáäý¡/·9bp ©ð!î×—Qè½.(ˆdˆ”Ç„ u¾±YhË–-Æ kø 2™ÜÈSãU»àƒ"ñ••ššZuP«K€Âàìjˆ JÀÈ021ŽB ZïĪá|vµ†¶ŽH$"q•UZšZ2DÌâÂê*DÀ°«™,UÊ—ÍÜ '—ËNÅŽìnÞ<ª­Æ‰ýë%P]‚ J±i/c”š»JeâKŸõðqÌ0ÁõsÂÝx×…¦êømmÞÛg¶£Ö{öáØe=O<|ÓuÔt{ûîóH_L34}ý0ÃAæÕ-‹ÎÆþ9µÇYMD‰ÇέÉd]O‰˜Õ}XÓè샽hähØÃ:»yiY Kì{ÍóUùë^tKëêF©–þ¹ÇÊUÆ·ºáóæ„”íî^ š˜UøÊ@Û²q@œ8kb%€”x<ÇûÌÁ£…}¶n$` ,ô xhžÍf×ÿŠ[û+â „P­±¹°¡|DѼÚ5EÎ_ž$–¦V/á¨<#2j¦d|ai¯›_Ü^Û[I…•AôÉN7%Kye4ªYgò8›°œò›  Â,<ý.T5áÔ-9ÜAr1ΤǑmã\ ¦ä–]˜¹°â÷áçu!ÇqÞ˜:éK}eñœý×.C… /Æ„5לÈxŠÄ$ÝÚsmïÌ1 ÅfÀ¾õƒr0&½º2ë¥IðÙ»ñœ¬7oC¡áo–§véw`¨yTÍ•Ë0ÒÚ@&1Òì÷´ÂtÔÁv¾hÑyb¹Îûeíc¸9×£ËWïÚÄ’‘¯nèV”—sýÜo.Ãñ ._ÏÅ2åè’ðSÞÓ7 ‹*Œ:wÁ‰ÀOÄ2îÅóc—¾Ñmô>Ä1ëÖ«Ò<µÀµ /ïò‘Ñ¢kàÿƒXØø!Bøƒº/]3I !}ã¥3Ô®fò-¶,\?^ Ï °h™£Õª[ƒì4QŽÖK—oš¤žx°Ân=ôtãŽ)}lœ3¨÷Ô1Ò¨'û‹†!øìÖ­cæLXù§¥ƒ¯š‘Õ¤6ºn/®áÈãq7^%Í¡j©Fo}†žÇbÚ¦ÍÃ¥å½gzÛR℣⮹z;ÈH™_…Fcb¢Ÿ ê² éS9¥4FµV‰ðMÇÛ( šÀ“ÁŒ`P@$2MËD’ŒüKÉÒ÷…DDcˆ„T{&£I" (4Á¿ˆ‡Æ‹1…Ç€./Wñ¥|äËl4–/ôõÑBLî3ŠÏ­ô´Öi³sçñ¹U:êD3]Åû¥Ç¢j5-©’@"ÉÇÃØ×•×Bj–(ǹ»_ã>ý8k`;QWQЋÐ=>¿-"5$…ikèUÖ–‹õ÷4{ñžÚ}ýM‰³¥ö—žJ~xÂ1ÁÊgØPh įR?% Ïё̄DÚq——oJ3cPëÝð“w=Üã!I\¿ù/ÿís!S‹Ýž«ßw“YLY'£aˆÕiÐÀYÞ‹=ðÿœXàçó§WOíµ#ùRDÒˆeÍÃÇÇ>v~ÖOØ4ɃV ëjk¤— {8é)s8BF>æí UtKïö(,:¶ç¼Ûd‚lÕò%&Ãàê≳·£2ÆyC¿2ذeƒY—Ùh º¦"Û´Ï!ï>ïü=çî5Õ¡ÔB³:˜–™k“/;—ÒËÞ—võòúj-&£ 3-$,­Ì•#/6Bo2Êõ5HV†ŸwŒŠŠ ++«º¯Ë¿Š£Èúî›i›'8$ÒñîšÓs°8HÒb¦o7žÇnžä¦pN¼çÕ™E- N€?C#ƒ­U´LŽèÚ«ÂðÍþ°û®ˆ'lÞ*¯ªLº‚±§ù­•5 å£à^¡C€Ä|ˆ@’ßW&'þqW4 sbyæò˜iûß ˆlJ€ ñlŸ{ãrK9å,aw‡mVfΜééé9}útÐǾ0Qh&n{vtnwmÕÏá@|(’çl¡ÿåOòoL{B úsˆËªcoæ{e™/º9ÝzgDîÛ7•—v¹ùë¼C«ºeR†˜1k÷í3KÆNúG÷0äöÃI‹N{—˜}ímb Ç /Xhþ—c7RðRöÒ3)“TOkŒ<ùp±×è#q‹†¹Ÿ¼ž(lhô}ü6vk‚91­ŠO­àv³W¼À†þ‘QòļîD<Æ×QϳÝîî\tü]=‚=ºhÑ"p§R©?þþñ;ž ÅÒk«ú|‰à:Á_ÜÀÁæ‰÷ïÁ jÊKU§!¨F$Š „Ã/+gp¡þýÜùYe tpŽù¬¡BO/à0 Ú¿¯›©ÿ¦êü¸¨¦üU|h€Q~ ôúƲa}…b Oõ “I¥2þWro‰MRû路‚¡7ÅÑ&ÆCÐÁ{¢”™£Â"Tý¶ëeëÕrúqN«7Þʯǯª®®¦ÓéÁÁÁ ÏW"‘„]ŒIzYøôfò«°äÖ­„ˆxZtF¹’3Uˆo½)KZG* XóøóõÛoà Ô&pvppPBh•¼wY_Þ¿qãF0£¥¥Åf³•]ò»üçß3éÂêRaMðÙÁ*ÑrknŸŠ.-®RfCø­zÔ*P¤k×iû^Ÿ˜ï«ü™È ÏòíóÁU•J]¼x1М€êëëûúõkå”aÚþ7'¾XãðððHHHƒ û‘÷ó8‚'7m-ôL´¤’ï0ÏAÉ}&`²Šjjjü=ša‘ssy”H굡|Ï¡;\X2»ÂÌ26ußüú4kÎÅùYÛ©µÊT´"×xFt7¯æ‰5• bÿŒyÃ?,Uñ÷Í›7ááá—/_Þ·oŸÒ T« ½-?¾såÊ þÖ-Nž<¹yŽ Ká× ž¾öRy$ñÖËIÝõ·LnM¿Å v²=`mDøfe~À„/.-ÿ×–­­í½{÷ììì”Y†›žÞ^×·îúüùó¡¡¡ #éêêŽ=zÉ’%666M|ýß>Êr÷q$RðˆT.ã1XLYqUQAqÿ±DòwýTsÅÛž…mòÇc[?Z…‚Kpw]¿Ó9Êüö§;z³³³•Œà!"ë,Ÿä:ôÑ£G®®®áرc#XŠ /½{q+“žÍ/ÎàÀ½&™itïâ„“¡Ð W ‘áA†Fÿ•¡¤,lÃc³!4 ’¢—ë’ˆdN~EP•q§œŒÆT¾[q+A*•ôò3Š4tTW0>¢`1Oˆ )’òø©ð04º$oçZ^gpA1œ‹ŽHûÊâ.´ùRÒôo¸XSE- Xñ ÆãК*„šOU§ÙÔ]7Ûãâ'ÖïòÃBcY 1«\:«gu™ˆS%yû('üò{%Ǽ´.òþ?GåøÖ­[òD;vì Ñh_ûU›ìgK2øÔ4®½“½™•‘H(‘Àr̤Âìÿ%åI'æÿýÏ™³ûS袵Á¿$ÞXx㯠E7—‰5ÕG P!©æÝš[ ã1QkÚ»+×ν^Ýi:±˜œç·Sœ=­µõ5¤ßgë¼±D?I6³ÕréÒ©åê.pÛók«~ù÷«gͲ¶¶j¥ì[»JAЙ«««iô’‚Üâª:*@x%“Õx|Ž@‘ЏD² H*ðe(Œ*˪$‡/¤PTy<.G„`„%°hPL&A'à‹Dd…Lµ%rÀk¹|.™L/ø$Bx|OA`.RëÞ‹Ã唦g'š»QLMÍŒ ÔÔÔ°Xl«ïämšôWÔù¥=F øSpp0…B©ªª"‰ ñðøok~òÇëqxŵ³ ÿÐl ͬä¤Ççô£õùldnw=cż Œ<¯¢¢¢˜FÍJ ©Bf^Ý\ä^ò–u‡j°Þw¯ãq:,kGScS---ÀtÚ>j•b@ËOÅîœâÝôô E9‰ ï^N@ƒF¤-S*”œß¤Çå‹`n@ êû3ÇdUµÿúËOÛ­}­O=ÚíäãR+CTjºˆŒOŽNSŸpÊSMü—ª*¯ÉË*è3Æ-©„›Ne½N/7Õ¡løÍôi<‡ŒŒŒAƒq¹Ü¿þú«K—.Êi-Pi ÇÒ²ÒZq^|¥¾Š}';s)"ýØ•P d”’˜&&ÑmÝ Œ×Ó#“É͈ÁÑ^HZ,õUîoè'··ªbjX ùÙÙntëÑE]› ×™€àÉãgxëO~ôû ¡ðލæ?nFЉÖR à:µ‡ŒWZB-¦1 [cg¿*¦ˆUPú(…cÔ½ˆÍJ Wÿ*¦™—WnÉ¿¿c®þ€`¾PTüæQÞï¾¶:8&žH/`@D€iuæ]ÕÁûÝÈB©¤¾áQ ácž'°$…ö^&\nUOGã>®s†Ø7,ùdd¤¦¦€ ¥¶«QKö~}åÚ!“ÉÚaanñý,_ËÈ\§“9ÿÒ]áþ{~jNÜÀü¨TÊçóËËËKèÅÙ t™©·¯+ -7€úñ—þð‰£fÎ~®–È×ÝÊ×*ã´ôìKuS##c Œ·ß†opÝ»ÄÊ#†Ùl6½´´¤„ZPcmîfak¬(Uæ#Ôbx5ÂwÑïÔ-ÄlLŒk•q"‘øß§þó:d»ùÈcE·9ØZfdt€¸ÕHn+2«™´ù*+ïéå­¢A’Àßm3P'$$Ŧñ0Ŷ†@××Ó§P(í]oêv@…ó•Á‰j†^C»D½^[¦µêåÁÙMÿa·¹MÞ€/’H$c’±±‘±O xðx< x”—–d%ÐÈbSg§F 5Ò©e¹ÔdKS###»nÝp¸^ÿyn„ÅÔ'*á§A-²r:uaû¾xúËaa'nCT'xÐè4Z PÏÙ†.Ææ†|Ž(99NÝBheojlh¢¥-þÃÊø—$– —žåù[ÿœ21$k·$•"¹%•=æ]IΡ×Mص.5êêÕ«ÊÏwÅéX®~[rñy¾ì§¤vÌ®NEäh©«êëëIÑ„¨ôŠÖ*Fzzú•+W@/b2™Û¶m+..Vf¶{Üòt÷ÔÏlš;»vCûî¤ÏîØ*Y¯\¹rñâÅëÖ­‹ŽŽ655½{÷n¿~ýžË€—·G¦†m¿~K ]ª¼¹³;w¾ÿ~Ö¬YÞÞÞêêê@‡72÷õñJ.d^yYC㨒°>v:žÖ:¦:-à„D~ìÑ&íýߣ'o×’1—¥å^ Œ&ôSÉ\œ¾sD@U_s¶Ëa¹‹Ž98»Å-o~ÿý÷/^äçç›››ëêêÆÆÆJ¥Ò/—K’ ˜ïe²ùð’ÑNÞ6ßÖ“ Âýÿè::}!å~Ô.(Ôq¹îâÿ ¥©[}ü,MýÏëòïO(þé—m;ÚÝÚ{{åÄ£·>»±ºO˽?99y„ iiigΜý<88¸¨¨¨îQ‚ßeW2°³ñ4åj©Õ<·Ä‰$G,Ö¼ó‡$ÑZ÷ ¨‘oÏö¸ß.9ñ‚cïþ™áÓ¢Y˜™™Q©T ‡„„Ìœ9³îfT*cûµ”¦ûØ+ÒÁ‚D"a±X ÙmÁHóËîæÍˆŠF£UTTÔÔÔÚã"Qû1Їε€ÛñsçÎ <8%%ˆŸH{_ö1ãkÞfë ÆÚdp@?%µ³n7xC¤ÂìïïsïÞ=ww÷ªªªz^YÈà‚‹Ó }Û,‚ãr«‚ÜÏ,còÛWÜ ER{YZœqàMI%O/LJJª»pttüûï¿ÇŒS÷ïÂãïn¼.lG‹®ŒjAÏ¥aB±Dö³R['¨<ß›kú~¶A¨Ù´{÷n//¯çÏŸgggí ¨nõ·C7>y¼5 }é5YIÅy©ŒÎ=’Þåj=zX7²–ñ_¥6â'‰¥ûî¤ÏlßËIŸL Ú§OŸ>ãÆZšªªj·nÝ¢££ë¥V_zQ°5ȳ]4‹Éyv3ÙÑÃÊÐT["i`A³ª¸ ÑÝ:êiv€XTÍÏ>ý±?5…F366»@W«¬¬´²²ÊÌÌ\°`AýÎä”Âê+/ Z×Þ7I*•F=HE£®>ÖbQýò²LU•Ìæ¾ÒÑe**dWþGÀe'UW1ûŽtÇ9¼yóæµk×þì2±AÆmo©8 qqq‘‘rßÿºººà¬¯¯ÿ…?þÈ6+ä妕Üy[’Í)ÍçÑóþ="þz-£çñÙ•27ãEÁcö…¦–ˆ×ÿu@Àp&U”óâéàCŸ¼—tvq1~œ(ûèç¥à(à‡KŽùÑÀ óçÏ—Éý <<<ž‘]\ÁUøkÅbñÇa Èd²D"9yò$ƒÁ¨¿ôw”@Ô¶Ô &çú±¨„çÅeùü’,Î׎“Óºæ”ÊŠ395 ™«•!³éáBò0æ0dB¦¤“ë\z&»²Dæãå5ÜD¯¬LÖÈÛè¹¼´è²kG£ÊK«¿«´ïß¿¯®®Þ¾}»‰‰ ø€¸îþ¬Y³dµÖ„Bá_±ºÚ±¹ ÛšúÛo¿MŸ>===ýÂ… "‘ǃsƒî1ßûúôBß6 $ ¯¦ŠyhGÏNß·}ð³…åÏV›¡O—¦?]™nœpxlv*U âôé†ÇŸà1oÞ< UXXxöìÙðððñãÇ÷ìÙ3**êâÅ‹u¦ª`<üOÉÄ{o¥/á¨ÕÍ€€---Ö7š››M›6íØ±c .;E&Ò 4ÉÎæ­ˆ]D†Ä¾JMŒ®èëïÅ¡¤ÍM É—ePBLº®9¶{?¹gyŽAÀpÁƒËY‚¬’šl:'»¤‹Añ žNúv¦êÂ'ËæÖÖÖÇcÆŒéÑ£ÀXXX˜B§¶ §±Ø|¸›ƒ‚ûå7#¼—1ÙÏZ­mø$¼öÑÅÅ>%4z ­8?‘ecæbíd&iÔo¢ˆË¤¡ŒR‰©NÊË.ñpóLz¶5é5ÂSØüC§w¬²7ÑxŸÐÙ½+»Š X( <Ž˜žžêãá*KçÁÔ\FjF¼© ÙÔÔ(Äu.8šaGK¸ÜªC÷3qÔ’ÑÎŽfr–Áçó\Õú‚²ÔWi÷ ö_ó8bK€’As:"g´¯…¹M Ô÷¡ûu¨W¬äÃd2饴üìbfÚ˧³¦®êg˜N¾:Egôms$å@œÌ§â̵Øü"í!§Ç cуýlÉý¦ïz~xžëÄ…Û¢©c'|»ÙqÚ]AÁô«¹!S¼Ço»{rá'&£˜:¯ß«˜ ¬ìMŒLµµµ BKNþ=óà›ilmŒÔ2Kjü=ŒÚ=ˆCåLío£Ì³ilZ¿«Ak¡¶ªª ¨>T*õÒ¥Kêêê»ÑÝ;æ§úÿ¾‘*èe%9I4¼ÈÐÍÛA'_ŸªxË–"¬áðˆ5“–voípÿÍwˆ2aÔ«XŸ.=M۾Ȭ`?»•ìèn¥o¢ ‹›ïA`:-.A‰z tþ®OPöÎŽ;o©Êqocåd$ ÇwçÎÀÀ@€- ÚƒûõŽÍ®ÔV#( Áµ|£RKVVV=lâ[&ÜÏI;:ÝIÕØ‹AAçÎM™j÷kHñ+ý  ÉÑÃR,¨Åtëç!¯üCÝR[9š‚ F¡à͉љÎÝL¬ŒÛ'>ò sÖàœþž]pœ1âõùÙ³|ÍŽ¼¦*$¯rzuøýô Á>8|ËÎKlÛ¶ÍÇÇÇÏÏ ß@kàë"sq5lj·”Rœñ¾Ô­‹¶¶:ϸlžä[ÈáV‘´-ÔTI\6ÿ9ÑT% x@çüêÐ(IYT(ŠIJíÑ»Ÿ †K©•ù9EþcÜõyb%×@ðÜ£ ¶@„b€`]»ªm¿—2ÁÍqNß×ê@:Œ¼ÿ."[0KEXyÈPoN•üšI……Æf$)ð[&NœØµk×U«V¿|ù²AÛø$ÈϺ½ øüÓ¼Ñ[Ÿ=J —0ox•ð´„–Í/JãÐî]P8Õ.]TˆO_ gì²]Võ‘@Â[ï ŒwýþŠÀ0“v¿avïeþ<.éÚž×ÇË>)%9'rsØ«¸AÁ“øY—î +«8ßùârÓŒ¹ÁØ ôת*&½¬$/½˜SBêÜ­3E•Ð8Kqnif^’¹+ÅÌÌÔÐÐH]]ýk“Ü­iÏÂó޾;µ Õº¢´úùíTG[MÕúpWAšÝ˜µYwEbIqÔß{ÓìöÍò½>kdi'ŸkÍïcø‰ó4–tpÿ²Ýœ®åšl ì^ß&x.'Êç×ôéŽÃ}ÞßBŸæéaA¬Ý7µö|‚@$Ùý‡Ü¥š˜‘ƒ-KBº@Jë ÙpÎ Ès"ŽüUÔ žA,õ›3gRçÿŒK´Ò’¼äru´¹£›LÖL@¶ ØGll¬†%legjdhÜô•ð6±=iÕÙøBw¶“&,ÄÚº˜m®‘P|?T8ðàÞµo×tÇŽ>|øè2‹w®³Cµ±¢àá¤×‹ßÎ ]?ÌdТì‡ûz¬»e,àWÇì+rYÝMS0rcè½Á]çm{2U/ÆpÎâ1¿ü½kí†Ùs¶Ìñf8/ßÍFK»î~êêKK\Ãà@ KËÁ›¨ìzZ¤JÂusÐàmâÑIëãd5ϨÛ÷†ï‘sTÕ >GîB ´…–ÄdBÿç70§Q1$ ~ÀÝ%ǪaiØ6,ØÌ<}ôOÈvû‹Š‘¶ ÁLRÏœ$UTæCMgHX¢_¯¾88ôáø-e2b—©[öïÛ`‹‰î>‰w 3j…³Ãœ‚s=¯3ìÎØñâÁyHü=ÜæTWª7nzí¹„=Ó:+†í£Px<^·–ÜÜÜdCå;>ªªªhô’¼¬vÑÍÍ“H!`0(µ¼€–lîF13—‡*sðõÁá|p%¼-îv® £ DOziInz±°LµKo"§4ë[ •Q«Þ™¸-,ÌŒM1M\tâÝži>õ fÝ^£í1ø»@ÜoÈð'/t2ðúçA¤qô>»¹[ݽ6ä¦.pœr/¢w .`õïÿ5Ͱÿ,¡8“¢nð}nÿp¤âÒ2Ÿ!¾ ŒsøAÖ_S½•SŸu‚Gà†ûWV÷#Õn.×<ՅѲW1š—Xe¢eoëÒI+2@˜\TKßGÇcµY6.&F&:::$©‰u”ÏÜ|9éÈìnºÄê›+4ý ÒVªGª`q^ œBçxYi§Uï›ÑÅ\¯„õ‘›ŸÞZÛ·E˜NÛWŸëÃhÚÛÛׅѬ®®¦Óiy9…•Ùh77/ mUÐ×›Án 2‹©ŒôNò`Œf&††Ýû5Ï¿´['­ë«ê¼Êð( $5 ÄøZ—× „‹”AjªP ÷+> Ú@¦:d‘XŸWug]¿ÿÇYjMêÖkHôËûq'gYL9¢þ @ü˃‘A-yxx‚a„ÏçË`JK²“èDØÔÉÕþkc F>}&HNŽ×´[Ù™k÷ó°Åãhš(•"BK‘ð?wœŠÂÜ 9x1]õÊñ ¯îk5þhÂ:ݸ{l£ÈÈÔˆ‹ënüûZ¶æÖ±êîËŸ.Z:§(ââÆñnÎ+_,]þgú½»—-ûmÎÚÍãœÝÖ¼Z²lNæÃ ®?¹sïý î#k*ªAî¿EœÁ_~»L(Át¶Õy²ýƒ!ÔÄ/Î,ê‰Çµ¦3€`M*–ýfë¼æäÞýÓ§œ~vpÃÕ]Óûþ÷Aü ÕÁôð•[ßÊäÒRjµ0gmæ¦g¤“•–ÃEڸ뛙Yzéw2¸e-ÁŠà/@,ƒ†Ï›Ã]¿š'––±Ù"(cqP"¿áC—ítèeÁœ…s9«VõÝi`W³q EÀ… s¿†gxëXüR!¢bºeÀ2Ëâuf}ÎVBÔh¬ßÄÛKõ:Ø~x4jÔØãí®%3D®ª_HY20F©|ãâòÞ¹tNZQõðnf­Ø|ËgMÖÇBs_8Åjñ1¬•±ýýànIÿA™¸Ù³>›BcÇS#¶!ðʱRMEØ.6$£1T¬•©—ßg5R(_ùw±P†‹ ´"–7ïH ‰žx¿WAS"ÿ~"ô¥µ¡ ë&uÖ×ÖªâJ¢3+•“)àñ„3£x¨† !âV?¤ŒÌW<3m‡î_öaß×R”S-Næ°DÆIÖ‡&*ÁÿiN\K°Tvùyþ¤~VÊäá©y<žÂc¬ß´G¡P€ ñµQhÏ­´…#œ”³YI*‘¾ OÓ6Rwô4ïñwÓ‹†:çþéºZÕIÚª£®¹aûÑûgâOͽ”6³ÿ`*ÂñlÿÜÁqÜ®gO7ÓáZjl5³Êç' ó1ÌpxlY13%6»÷0gm=õ7‰ó™,¿§qp?£Àmϯ­ú¥îZTôíÆ<[h2ÃëÃÞpd×ë×ó›e­¢Œu/Í¥³®&Üä‰|,›—#Â_†º6Ï/íOâ:jÝmÏm“$RdÓ¥äM¿¹7W‘E^ÜK&àÉön?²»î_ ‹$±/Ó:Ú¹™u€¸:p/c€§±BÃÆühÐúȰ~MLœ_˜ÏðôuÄâ1²6‚£¤*'½ Ï(WMmÕŸnv¢Aš;Ô xÜö,ž¸»õ\V-³íYƒO™åìÇ_¥¼*-ÍgpTIÚ^¾Ž`Ô—Š¥ˆù÷' ´ä"Eê=¢¯¡¤péÍ\pŸH§ì¹+“"2© 8äéëÎò›àúá• eŒ ¿É«±RäãwŠøb -ÕÎ=\¹åÈšžÃz=í僔ŸÄuteeo þ}oòJ9®#MRÝʹ@$=žóÇ’;Ïndgò RØ5 ȳ›«Š:E(ß#$ûÚþwßÃÊýû;‘°@(@‹¥h„Ô>BX!‚Ví3îwœLvií¯yp$J•è?cÕ݈ðAËŽÙ4u↠Kø°¬‘,DB‰¥©©™9(UQ'/©æøÆp™ Áþ´Ívr¾Ü·ì“Dúƒ÷´=-0yÙN‰DÀü1À&ØÏ’Åb•–æQ©É|';w ;£ÆŒ®8Ùì>gqlÖÛ{‹O=ótñHð–šÅIèYyçaò g‘HúëšÐIA& ìÁf¢LrØwãÂ?;ŽÂRDÍÄ£§±šnt‘¨vŸRÜ›.Tlífhlh:a‘¯ÜíO%7BËOźuÒšøK§ŽªøŒê¦½k]–äfR¹Å$ï®^*j¤ºÆ-M8<.?£8;?ÅÜMÅÜܬ~ŸÒÏ«Ø5…–žŒcëâÑNUñ• ¹qpyyy š›ÈPÇš»x9(Ðh4šÃâÇÇÅiXŠ­lÍ >ìSjÄp Ä_¥Gq´÷2ŽþÙÍD‡ÒQ_#†å‚GYiQ¡|W’µ¹«I'éwY{Ëãd¡R2x˜:!ÁD__ŸL&7ÝN«ÄM¢³‘¹wÞœÕÅèg =ÛtÁC¾%§Œ–—UÌ-"¹¸x(„/1äj>½€žjé„s $àpÍtÔÔâï&zÙ©8SõE#I„ŸT3θº8*·dà¢+oVõ½çQâåcÿD¾qô›ºj|¯.—+ß÷‡öýšöéÓG"i)±áètúöíÛ7oÞü¶¢˜7}_Ø®©íìMÔZà;lª‘"¥Õ¢€U{´5<± ãƒeeddP(¼Å(RiiégªÍ\}cÜRþ b´¥½Æ&™í¼ùïUåáæ€0­ ÀäÒBʃ¢(!—/Çv¸‚mM`4›A^:Ôùß â€_^XÖYS…ö u”ZALe0È0"_´ž¸xçÉÀî>˜âx!tŠl\r­…ùö½Æµå ¤=V=<<ÛÇÒ E8•I' Ê7<~¸)à‚âϤ¬ ðÅ©•¯óJ+yÒmGþf2¨$ÓÙ4™Pß_DÀd2…$2…J£ËNã•F%Qh@¡‚¿à—N¥ (^sø—J£جüu×2`¢Öœ¿ß&¨0)A›‚Þ­ü¯qZ!÷·‹±××tûÊ0Š/…![c’Êb«0¨¤‚w˸Uý¦ï%—†î¾—pxQo‰®‘$]ï¹ä7 Nö¹Œ›ôçÓ’ «çrEÛ1Õ4zLÙÁ¤Ó=F,#~’¶kVwŠ*<å·[Á·ðª*ù¼r¾«5ë:{Zo»%C€åÃ53KV fÜžë Îh¯„G¥_áJ qBÚr=>BAØ>6êï+ÐqEÈOºtaRXXn£¿ã³Šu Ô¦\,Ò“)f|Ñìy4Á;‘°tí;v¾cN†«Ž§Bsøx’`*¸—DBnœ:•"4GÇ"U3rWÁ¯þ4…ޱ^A½â[ªÈ-Ÿ¹‡^õñ2îåaÔºANVePˆ÷&š,y)«¨ÖÖPÃ`reEå«ãK– a¢*>Ʀ€9c"ž¢¨0hüÝ«¥sb:•žTtðžéí”UZ@}°¨°ÊÂQƒ:~÷ìc?-qÞŢ⃉Aç¦õèÉa„£/\Ê|¸Ýõ'U^öõŠÒ?SLïŸX×ÖØèàÆi•Ê€á=)úwŽÌÚÝ/€˜t¸ý˜ÕSÛ³ä(D4Gm^µÔ·ÛºIfeÇ/ßÊx¸gñÙ@;&Û§ÛÂØ„s0lTMd^YÒG±2ÛNA ñwì÷$À¤Rió®ý©€Â42… M½VÝÝ௴žÚFv[&x¼“ìhª®$˶OAŒ‘ÕõÎ\{hïÜ3äÜð!îdH–@’ÝùiLˆ\$c™¸, ‰!)C…9|ò o…x[²2é0"0‘QJBV2'¤ä•Ð)Çí¦²ûñ‚Ò2¤Æ°±JÞH )B£äð%.LKÇ8-ôþ޽SB 9#6o>uÁÆ«ÑÏù÷÷AìááQ]]ÝrBŸ€ÏÉѱ±ë•Üߨ£ëòO~ë©Tƒ6(,õJðëkõwv‡Ÿ$>ª_–0ÃÍtˆ S«0ÆÿñOÃz𡲿6öDÇůüõ zlïü+û;M^²yÉÌá8Dñ±cY°:CHÛ{̃åËöˆ™ÇvϽ}¬Óä)K×ïßräÚü)ëíX;ŽO`÷NtŸ9û¥‡Éh©ˆ7ùxöW®¼Bò=/$# Ÿ?rvÑ['µŸ¿ âšG«¨¨àr¹1ªò*$ÕBÌѨáá a³Ùššš4šÂF \}™m®Çv·ÖjÒZ"KÅ„ªª:AüSÃä® M#Ìü†ÍâL†)$ÝD‚ cŽ&K Œ*û}t,çás" ŸIuÀÖø;¿vË;Õ¨0ƒPì èh™ˆ„(ƒUR.'©u­f B–ânXLT·Ëµ¸N½_ EO.ñÙ“ ¹¥Õb[[íF}³Š¦æƒ}͆o}zqE—¦mÛêðSÇب²jCôÁ=Û u!¡YÃ-ê5z­*\Ùoâìõ;Ïýí)¦·5öôä¶…Óg¾dƒaê¶-Ç÷/_œ'D2Ÿ^›4|bt•¥Œ¶´ß¤m$û, `NI%õ5„ ¹ö­„`7§#½Ó‚}÷ú/6âÁÙ *R{FÕïø8QŸÔðúb¨Á¡ê, Ü8i „ÏÚÞä~bÙÚÿ|ûB‚›^zy@ïž‹/&.ë3Ó·ƒ±nÚ³*ˆiè3qÙ±ص?xòÜë»'­Ö²°ÿ}È Œ£oþбS¶®×gJì{>}qߊå·gwŸíí¥¯y‹ÑYÁL%ìÛ[ÜãKë–ºó®¡ÒŽî8”ϕћg‡Î8ú€‚ȯ‰¨‹wýy“Œ‰÷.o[}–Ž’?y÷ð깿qNþ¯óöî>pS!íüõPL! K2s6®:Ï@»Wïþ}íaaïß´/_Œ}·0 {ƈH‚IPœI'WpÅPËGsõ&-X 'Å¿D˜"]¹÷äé‚yz,ÆŠ%¿^ŽxÉ€ª LLÜÍ‹:þùûþ©î&*6—ÍÉÈ=-&PBÓ_J‘ yÁP©؈‚©Sé+–þz3æ™à|©¨ä'F¿½ytfèá7ÀUGÈåÌ^´xb÷)pÚõ!cgvU¹™!ˆÒŸ§Ú÷Y6·oUjÈ;“Þ[6óã„y¯±V%÷V,.ÂØ½¼tE6 ›ñÖ§WfL˜²ðä=Æ¿¤ ð!É{ì¾µI †‹…„J§ð J œ(ÍN£Q«¹¦Žæ¸ $'ÅÕ‚Ì'$e9Ém-ÈÕ"È‹‡ DT6[„ ÑçB¢˜¼Ê[~‚_%ÐÒ¢WØ„ÃàB>Î1ï7®úîÁŸf\…áïFišø÷Iž÷"óæŽhjöÙpel¦Þt“9É5ñg–Ê/+çÉw¸ÀdY{b5Ø€§ë+E´mÇ4Ôl“ßü }èƒØÆ3›µ=ÆßXDà‡:ðÁù½ø–{ƒ*€ø;4ZQi!7CÓ»ÈF~AR!ŽÛôÝÁqEçŸÌ'­ž¢NÃ-º é鸴}7õ5.á·ÜÎMåàÃeQ‹'c%¤.êÓCuóñÛn ™=ï¬BÝ¿ÐC"kމPÔÐ×}öì=+Ú„är|}½Qâ;®å¸,óÿ·K±õZìlÆ¥CÎ=ÍÓÕ²I|Hž$¶ú”™¾›’Ÿªš_¨ú«jÔÕ%$•JïGÿáìå*Ÿ±ó-¡"4‚`ªÓª—Ђx¸þp"øŸ'#T ¿„Bà(“0 œe!tŒˆ!\# Kœ‰0„ˆÓVþ®fÉÉKðÒ\ÀTJ„®r®HK¥E¯âÑcÕঙvùMÜôRßí¬Oê"Ås:¿}¥¸Æ³&wð åûàˆøƒ“îÓ?î òË0\^$å˯ããï‡æÕ̦¯¹’sÁ/¯Còɹ2û|ç1sJªÅT·³Óg6v™h*GøáóFä³óˆ| Âð„‚i½-(dÅO¾ô´i*o1òÁäG•¾ÕÄ$ÉÜÔ&æauyu.‚ÒŽµäM‚r_G:™  R¿õÉ¡¨4­˜èæfÊfP‘:ƒÂ?sí>…ôËи3—‘ˆŽë§6Çæ@M0ç ““~q¥P©šFÈ.…&‡½[ºsþÎ¥»,† êÓÞäÌï;mó±6øë·íÕd§…‹»^:yÈ„ž×o çÿâ]îËÈÊecV¯>3mÃL=iáúMW—n[DÁù ÑÄššš>®ýRÞ¦åV–㊛ãžUMQ§ãê4…%Ë¥çaåcjfôíJ¢²í­¬Ñ:æ CW·ãf@£ûHò’¸dÒÁÝ—×oYsr×þ~`ꪭÚèîÁ5™limIpeâ¦õOÖm˜I¢‹Ö-^3féïFuã ,œÍ¸ŽŠª‚ã¤8˜ªå— ô4Mb¹wýBES÷®ú=,åÎî)SV=qbú/¶¥¾ã|­ØçgÿŸ¯pk¨PÓ ¸M§‰Ƥ_€LÂ`js ^\Zµ*î{àwÆû0^ºù¼Àƒª$ªºñiÅò+¥ ²Àõn.b¨R¤o_‰sT¤’ÁÎg=Ž_#Â%µib´aø ËEQÏ¿ðèë…ƒìµTé1ùÒövÚrE6Ò¯3ˆK_¡òΛ‰n~h¤³³}•q9¶ýòFb(‘`™©É.½!FqB…­Â%T„~ŸUX€{—Àå×§`Êr*IJþ:¬6gF`"n½µpÈÐ=zfôm ;îܶƒëеÇLØ!*«úëöú XÝ›Žä—€Šb„”G s»—îøí´¡G—ù®Ù{ÿø›°p\8ʹÝOߢ¤am ’^Èí×ÎdÀúG7•>? †Þ»Í¿%í\8"$$K¦mbõ…¤)Ç7OŠÀò~ ¾òË{ 5ï6ûPßîCíìé+&÷—¢² #¾èø–ë·®±Œ7ÍZùMÞ¬š/e3š$âÌç‰B²~·³wýò ¡ŠåJ”ŽÐ@ qŒ…ÐÄ„#ˆš#"`ÎËR(DHp”ŠÀRÙ„o„PÄ„'ä;¸¸Ö:*,Nw¤OUÓ`5;”¿6ѵ¤¤DWWñ«³œ}’ÁJ§÷±tâÔݨöm=Eu &H¡AR¹‹¡@’ø¿oH†k‡²t $Åegi Æ! I>­…ŒÈÔ<ƒ ¡b¨îÔOŸšgh¨àµªÒ 8€°9›k(^“À+(oA•ð³<„ø{Ž!ø°ÃûâDHùÄGßÖû>.þlçsv‹ÊãÕ(Z„kþkkUL™2eêÔ©}ûö•yÙ$’oûêñÍtµI°É{Bm U´éPÝéú‘Ñ‚—j3bqxï]€cj¢8úÞu(ûåÖsoõ¬‰¥x­™I¦Ñhöv®áwCÈo¨Œúµ"0 X†ëG 0Œà&šµsí©@jÛÑVý|ølXXX¿~ý€&¾téÒØ±cGŒ¡­­]zº‘‚áĶK±)ù¾£8 £XèD­n„&sáCM¡]2KxÚè4•a§££ãëÓ5?· ¯‚W¯!­Q9Xb 6΋Z÷›d–ƒáÚN_WG§¾‘ šBŠ«Dmÿº¦¸¸8""¢¼¼|îܹ{÷îíÙ³çáÇ—/_Þø¼6œ{ ~׌v¶åéæ î6*§ïFò*mušÐ¿NŸûeìèï(rÐÂÂ2•LlD1D ‘`»¿µ~?M¤‰“s«û5Íršdy{Šhkik¨kÔ+„…BÚºö1›N±°wÖQ«‡N8&‘H-djäÝ×¹#;ý¿C_*•êééfgg÷èÑcÉ’%‰‰‰·oßnd.tØ–'÷6ô¨¡.¯èŒÀïÃÖÔŒè«Å ¡ÉH‚lª QÈXQ)ò‰¯¨ì_ÄbhÆäÑ hÙd´˜@5„’Œþâ#KVþmÐóï^çõéÕúkºÍ¬“©ý†Ï½utÕøe'g[Ýò·RˆóËME?õÂRê#›.Äž\ØqR€õ¤=áõº‘L&·œÉ½·#ò´ÿ5±XÌb±"##µ´´bbbþøãÆ#8)·zM`ôƒMÉ÷§sÙQ¬– ¦@œudÏ®ìDQ…Æ èEâ=ßs->=䎴øþµ·•w7w—0¡>çÞÛÚEH†žïV‘ïVçæú.¸ ´j÷ÃØÇ,KJ pËvpˆ~eY“éd%È5ÇkÝšB +š Ä wy¸Zhª0) ztn‡&bQM- Øn–šŸa³Ù|>ßÀÀ 33366V(2êaŠN¯xS¸{Z»¯¬6¿Ù´›ŠwùaFõ¯KÝ<^ß:5aÔ1u|º¯¦ô»·wŽõ[za÷üÄpÚ`ñŸih{•q!ÓŒ­çȳֶ—ÁAec(@‚HP™^O|p¨×èyB4ÃkwY4‘&5YD•†³ÒþíM'¨âJLtX­t9ƒ 7sØü—J¥Ö4ñ………;vôòòj$‚AzåEÖ¢AŽ_ç«°Œcµm¨Pˆ®ZÃýîÒβMÇ!Ç樂%Üsî5‰Ýî—ŸÇŒ¡¡ŽAhæK)ª¨î&ÐÑ3Pà«Î+ãç”ð;4ͪèòÀòØ­ÁE•‘-ÀÎåË—…¨9ª¦¦ÒHCò)Cß@pkkªù6—ƒé³M,ך¨WÀ|Y'œì œÀ¯öŠÿã8¸E$úRBYX:X$ù²b¡|¸ ^[¾€—¾¦3Ü õ$¦¸­•f‹ãÄ5RR%l¥ ž8âÂòÎ`gèСÇŸ4iR¯^½À¿íÚ) ´\àãŒ?§?並–ößòÇQ7²Ê‰ÆÌeÚ$½ša¥.lä FÚ#;:³X Ž[4®›e q5_Ò,[ͪƒéÇ/^¼xãÆ &œ@o†ç¦ps«]<<LJôaô¸qãîܹøƒŠŠ —ËÕÐPŒª8r?y i]®_È|HL&377WK«±ÓÙ[lØ”“Aiçå®Ì–«‰Û«å•ñ[à»[~"jóùw~Nz‹;›ç{l^Ò'ƒß9B£Ñ‚˜©O›:õH¥¦¦fffÆÇÇËf [¶liŒ­Fª[ª&n×4cˆ©‰™4rLFe{Ý–óÖpœð—›!Õ6ecéÒ¥t: //¯yóæíÙ³GQù†ÄÍîߦNÆå“'¡¡¡T*uýúõûöí»qãFãý²"IK$u»®Å/Ôô£ˆFË´?C‰–$Ý–ßÿÆÙ=zLœ8ì¬^½Z±ùN­Û{;vìÛ·o9ŽªªªD"QTî¿ì~I´<é¿.X ¹( c¦’Û‚:íú¯ôhk-‹öTWW_½zuÿþý@û‚ýI“&­X±B±YsêÖyøæÍ›aÆbôﯰÕ˜´çë|SôÛD¥X?–){ZŠ8v?ô¯µµµýå—_š.÷…G#¾}H$ºxñb;P(?~¼s_|ìuKSë('#hb#U‚hþåÂ1œˆÏ©6ÒbÖzöСCÉÉÉ;vìÐÒÒš1c†ÂsŠQ'³ï¸8€©©©Ù¶m[H¾„20éX*iQj8:½bø¶ÊÉKÁ,:9éå• LšÛË6i׋S‹jïrÆ…BY²dÉ„ ÊËË›"÷¼rA]\úÝ»wŽŽvvvŸ}\\œ À¢‘[ˆ—Ÿˆz ”Eì …Dzq6׈Î(oÞW&c®–µWÅ0lêÔ©Ó¦M‹ŒŒl¼'ëk¢ºê_²îÚµëÇcccˆàÞk‚jvî¾Î«äµˆ5;¾Éß5ÕKiÙ)ÄLùö«¼æ}kKÿz½ð+®`À5 À4å@6Q„¬fzôèìÙ³MW€*¾˜„|µÓ¬¤¤dåÊ•|>Pƒ… *0k]5zLfelVåã­½Z‚7œ}{ny'eæ¨kª4§ˆN/_3ÚµÖS†††ÙÙÙ÷ïß÷ööîÑ£ )Z5_ú 1âøñãúúúÏŸ?·±Qü@‚½ÓÛï¸×zž‹+…ª,ª² ºB|¢ò +ÍåÊûGH³»“öÜHÀñ¯žår¹à+*--ÍÌÌTxÖiñy·N½ÊI,¿þWhe§yßC÷oö4µ\?'½§1EÍõõ©?NüTš¼Í¨¨U>}ú†áÄÄĵk×ann®ÀLCîÄ<¾««§×±§[Õ¥¯ŒÑî¾Nx“Õ,±âdÔåU]•Ÿ¯b@Ì ’.½Èn–—W&X0ðóAèG…äá|†Îáp”PŒrN-n©TºsçN *RSSO:uúôi…ä%•Hož ‹ Ësó²wó¶‘ŠQà œÀÀ_÷ñw661z~31øêeVÄ£·…œôÕÙÔÖ b *ŒæñS>Ž)´5þ<0?P{ëÖ­kß¾ýÅ‹¯^½ª„bhÖâ_ÛµkP½¿ÿþûèѣϟ?ßø\ sËnœ/Íûxè›hK$²Åú>ß0H"ÆìÝ-<|’"‹nœ åw£Áp©|§ãôƒ_»¦Œ#zUÐÛÓ¨Y0 0wqÖ¯jŽ™ÏÁÑŸÎóëÒ¥ 0à@ó=`À€Ž;‚#&Lhê2Tñ$~ŽzŸ¼s玉‰ÉÞ½{ÇŒÓøq¯Ÿ&Ý;û†FVõíáF&“¤R_âÛ›TŒiêªu h[YŒÞø+<+µ|ϵ÷b/ÙLÏ:ôçIã»t,þ´eÀð){BÿÅj&Qˆ‡ù™¿-l†'øÐáíîî~/^, Édò¾}û”Ô¼+âköÙÁ¾}ûnݺõõë×FFF`§a)cv÷\Dè½TKKŽö€9˜CÝ7TŠ#0ìÓÝU•¥ùðüÛ÷bë[—“xû§ÓI@“n­úåò©¿N?}1nñÿý•ý×=ú,Rk1‹N>ó(Mù õ!DöôéÓE"ÑñãǧL™âáááâ⢴2˜úYèooï¾yó&)) Pó†øì*¸×އeÄTyvt±°3’øbD-ä¡n¸W,BÛÛÚ9ÙFeÞ>.­OÄ5†Çä묙 ªŽŽJŠÜqp”u- DhUïoì5«(rÔˆžSÉ¥K1{SuÐp«©©=þÜßßÿÚµk ùŽŠŠRf1ÍþÑ;UYY¹{÷nUUÕêêj@oh´ú9Ñã^gÞü+BP…øtuc©ÐQ V/Õûí èrc ]/?×ÜDîµc¡¥…ßïAüuá(ð{õÝËéƒ<½çŸ|ûçÆ-‰»'º¥qgo¢•në%° ¥äqPWfcGü.³¢»ëûÐwïÞ½ 8::Z™oðîë<_=5–l’sxx8‹Å266ž3gަ¦æãÇë3F‚xt5¨NžÖŠ)a` ŒÀ‚D<‹7²Võð³­×½Û.ÇRH¤…ƒ  °b_ÖÄ]/N,訴Òç— J«En–šÍøû® ¾³Þÿã¿$éÖ­[}úô©éä \Œ¶°2Ó5Ò𪠓EE¾ŠL¡/øcûžEs¤ø?*à’Ëå¨kê "ÑÇÑNâk±½ÛçSÝ„ÇGO<Üöû)*&Nz—-‘ò†»Ãðwç áØí!WtÑRiã4 …¯W†(½ë“Ö¬ãhS 83ûþ^]bb"0ÅØl¶¶¶6PÃß½=;µèÚѰâLI;_WMUFIعfõ«½W²¤$2Ç­¦PhŠ [r—mÅ ðÄ\÷ЊÅ(–:ïä ‰§‘`._H&‘÷-lklj0ÆGJgÈ:cqü"ÜÜô €{—[M¥Pa„ÊçV“I[ÏYvºuHÆq«6FNnöñ¡%W½äTÕÞU“YÙ{MðÛŒòG[z¶+ÄK†8ÅeW)§è¡÷ãRž¦CE`¦ˆ„Í3qÑÑ×}Û½_L%((ˆÏç››››˜˜”••};¦Ä‹{±wOG“pU_'†ß»Ì˜_UZVÍ5dÑŸßÁÆÁ¨WÿäË*Iì¥ýÙ\kÞ`OJáƒþÛNèªk8 Ÿ ©®Eck¨²Ùþ vµÑ¬\qPRI‰˜Ï4¡RH}mgÐ&/$ÃSVLnïàhÔ¥ßÀ¨ÓUmŒBßd‰„!/ÝÈÒI"Ï”­Æôðu©Ìǯ KŽÉÍ*å¿H(9p;iüŽçóG®xoƒoOc¨…‰‚AÜÆDmÝ™Ï)é©S§>:ŒŸ…H(¹u:<æe®³W7_[}-¿ÞœRìÖ©ˆÌ¤e¾»´ÎÔÞv`'##ü899eee=|øðÛ7î[}CO×ÄÙËNî2úú°*ê÷®ÜloÌ8ÿ²dÓºMý~ç5zÙáûéðø[‡‚Ó ¬'‰¸üé#'ðD Áb¡•ˆ‰ÊW¸¸`åÞ ]Œ@ùêéÒ2˜n„C 2ˬÉãr“®½á¬Y»iØOÃ;Lü£-RES¡RéýV\Þ»²f„š —8F´ëäÊ/CB®Ej2fôµ;½Èo÷´vîVZP‹Å·Å®–š5ÁíŽ=:kÖ,°³}ûvð{àÀP»¾¾¾ fá9éÅ·N¼ª*ûõt7¶Ð¨±¸1)F&#\µ4u]Ž ¹£œw7ë@x?¹ …Ë—/—M7œ2åàÁƒÓ¦MûÆ](Šöžè˜VzëÚ­üìR„„€gx/ÊãU¯>zeØòÀé>úækë`b‰é»í&ôô/<0oát1*•`˜ìZؘ%I B†+'-gòØéU ÇÑŠr|wUª”T\˜xI‚“Á ˆ$ãYFÎ`ià/®Þ¼ö$õüí§˜u6eƒïèCö2~ a\TÚ­[׸ä”ýmÌuY0ÜÒW³€nKPüËq«FºÞ¹s'::ÚÇǧwïÞ={öŒŒŒõ}ÿþýAƒÕ+Ͱ x^êÕÅAæêÿ^IdRNjQNf~am錦¢nûo' ÷3ÿ¸ö‡Ã122â«J>ÿÛ÷‚ â⢼‚Ü”¨bm–U[o{’!„†à”`³|J§QþD ¥.æWјêbA5PȲX©›É<˜¥Â xd*!‰HH¦³ÅBL¦“p‰Æ† ŒC<J…Q ¦Ð¨•J „F!KÅ@"TYL®@&!‘0)ö4 S)µu6662ÑÑÑ¡Óé-a­Áf1I»_þ5_ ×ËËk×®]€,R©Ô.]º¼xñ"))i÷îÝjjjur‹$/EXØ¢õŒøÞ>¸=òy|[? Sk=Å>`iµèèý”•#>ïO:øðáÃuõ¨Éç?—––æçç¥%äbÞ<©t†*u…{2…\UʈˆÐ±%ÌÌMŒŒŒ544êëÛþ‚X(Æ.„dNìaíìì XÄøñã‹ŠŠ¤R)…R§ ‘y™%‘OÒ=|é Ž7*ú4‰„D½Lbª‘:örRÔö[|{¿ÂÚ.‰¤ªªª  ?;+§0uuõÐ5Ð@›>L#™LJÏÉÈ‹µòÐ412100TQQ!“ÉPk¸‰œêS÷†™ÛáêÕ«ƒ®×áÁ •ÅbO?‡s]qúÉJ.*Ì/ì9ÒƒFkÔpÁž¿}œÇ;sæLÀõÁΚ5k6lØÐ˜dWæñxEE…¹ù¹©QeÆZöm\-ec,]A*~ÇGrìÜŒsÐÕÕe2™­‚9(Ä‹¿Þ9¥®‹¸HÄÒûGêéë½gMÓ]…`±@žèÑÕÊIJ!ñãú¯tkm÷÷†fN`;vìïpÕªU€ñwïÞ½Ñï fàyù¹)±ùdžž‡+(¶BæikAÀE†¿V·˜ÛšhiiæÐòM·æ1óÏ2]Í5Ì¾Ó ]]ö*(ŵ=ƒIkº)õŸs 2):4IE›ìÛ³®´ «oùŒ,ÀŽNž<9eÊ”:„††Uª¨¶T à…ùY鹥ɰ›»§º&KÚÐE9AÁ ²‹“Ò£-Ú²MLL €õYGj÷Ÿ1±„œ^ì÷µn¼WËrM\¾f7ÆJ¸<¾¾H(ÂåNŸOïJ ÞiÖc5“¨÷$:YxìQnOƒôm׿.;bÊU‹d§•”÷éAý&LjJ-ûófÒÉEÿïQ÷óó[±b ‘ !644400hŠ> ‡SPX——“þ¦ÊÒÐÅÔÊCѺ®@⢓ªÐ ;O#3===P`‰ý‹¤iiЙ%ú¬ –HñϘíÓa/o§™˜˜9·³•JPU¢zúÉpÀ€“¯Ì*ÙGuq°1q÷õÐG*gŸ‰¬qÃ0…[U&!ü¸(† ¥aBRQÅ!A°¬^¥<¡&0œ†@•Õ\·!S«*Ja ôDÌÇ`(,©ÀÀaÐÎ-gçŒðS¥‘¤ÌÐLǽ½sN<ïêÑмÌÒ/!«˜7`ý#'>"0H𫯯øðaå/^4‚k4¨¦¦¦}û޾zðfZ–…¾¹ó.2ZBÎÙ¾¶] ‘`a/"Þ¦›{Ã}‡wön×ÁÊÊ |uÿ2CŠš²ÿ ¹¿±ÇÌýá¶Fª³ú·©*®¹•àÔÖÎÕÓ0ɇµRp˜)ay¿+¡ùùùL}' öþ8¸æÙ‰6“îU†Ü§Ó™âŠØFwXõìAxä`[ÉÊ`†OÂ|ÿEÒ€î›_öì?âåÁÉû²ìU÷¸#hLg·Óç§].›¡L0»‹E„*ªÂõEb´&eðK¦’=:8CbäöÉ7Ú& ¶µ~Z!÷E|ILF寣\n®ýÓ}÷î]``àüàââÓä}+vl6›ÅbZ[–çåç%$?ád1ÜÚºÓ™ÔÏúAÉdRyIUbZ´¡#¥]_À<444þ5Ì¡y@ äÀ,o¾ ŠÈÄešYZ3U@ûþƒnÊ–€Gjô@ŒP´¨ÕZž½Å(,<9Ô(ïNãWøøs\´ì ýQ™ÝwÔ„×÷/W¾Ü,w;ËÈ—ïlTHþn–½?_¸ ¼¼ÜÎÎèàøøx@ÃRRR”Êü`Ø‘FFF )°²´#';*;Œomâ¦g¨-0#i‰å’4w­nnNúzúÿJ½Û< †äó>ü=Œruñ윔È[ÅÆÚmœ=me]§rBΡiÇý½B:äîš3O¯šåà¬[}%a@Ëm’)Ão&ó£.°ŠA.¥3I‹æŸ^ÑcÑ+‚@E˜ü B†¡øèÝèÓÆÌäÃî4¤:þ®ËÐþ{®Õ "(ã TÚÖÉX$Å>õßQ(ä₊È×öûNf–z¬ÚÂýjii•••Õì·k×.((¨Ž½6Š Vµµµ~535³µ+ÎÏωxó&¯k¯[jãaäe䣣£Ã`0Z¯Ë¬ev_úD"ÀA^~nj|.Q©ÙÞσΤ`(F¦Ðe}¡R‘D*e±Ty|.•ΖŠxL*IPÈFXLŽŠ¥sa2B…4¶* ÃŽJ!:&æÀ&“—°0„~pœƒg—Î/Ý"Ó™*á‹Ål¶ &Ãበ[ÃãÀråFB¸¨ÔܲD[O]cC}}Ðp·"‡Í+--+»ø²`l3@ [Wg[ëñ§þ£êêjYUvnA¼¤­›§ž‘V½f}}5qˆ”ðäÜë‚ÒéSVŠœ¯LˆX„½ ‰B4*¬ŒŒutt[ËPÚÜÄÉ ´I6ÐRàfŒ¢(ŸÏ/,,Ì/ÈMySb¨açàfó‘c4Y[L.-ªŒ~i`O6µ0624®±{ZµÃ˜'¤MêùÄÍ× …BÀ1ò òÒâó°2uî4E!ƒÿá1…à¤ØŒÂÊ$cCS`Ÿµ.æð á ¥AïJvu\ôw&þö¯“èYžj?@¬t]"çòq0ÀèÎÍ—¸8{èèk6žcHˆTŒE†G“4Ë­eª÷ßg÷”T £Ò*z{ê÷š!÷Ê®øÜ;ýÆìų¯ß}ßwð87‡ö›7ÍþáP†ÿX$zzzZZZ…mÇH}ü¬DOµ£A4„cæPV\eà@vëald䢮®N¥R[ûP/…/ÆØ²0b¤A¼mì'o¯¬¤ÏÒã²™”úrË_?4q³qŒÒ²Òü‚ü´¸\´T³­—•N® ÇZ6%!£˜“lí®#÷9è·ÒA†u”¸ì*2·1Q‹9·PwôÎüc³5&ﳄ¤²qT0eN;­?#Ê€¸99Fee¥Ì±Ÿ•[‡:Ø»kë¨K¿2x@Æ$ØÛ¨wd­ k'£%s¨UÎX~Ï„ÿ&ˆ['®UžÆ–rÄF8š©;›k4cISRR~úé'Àd”³ºÂ§2bë3P‰ž6Zó:Ð(ÿņ¨›íûo%›è°úµ7Yz<²‹±zõj{{û½{÷J¥R€`Å.-S™ÖÇ–'Be ÔÁ2!Z³œ JŠÑæÊ ÖÍÍ ì"~É¿—/_æóùJ.‰ÿ†â?,­ÛŠ›Qñ³¿u³d}ìØ±É“' …ÂÌÌÌ‚‚‚p¹\À(nܸ±~ýúµk×Ö=©ì«WÈ<Bmøä‹óŽÔ çó8.OµcG {‡ÖƒV̉!ùDÔ3K:5WîÚÚÚeeeššš/_¾ Z·n]})MJÔ¦Òåîìæ­˜“•E÷ó£¶BïdëÖÄHsôeøûû?|øA¤¤¤ &¤¦¦>üâÅ‹¾¾¾ àr…¯_ëté êèe¨@B`JÖå=ƒ E_;­jdXRY©«£óðSžH1Üæ‚×ÌJšøÝ»wZZZÁõJA$Ás«ß?ŠBb)$Aÿ¿¤¡³f[0»€ÿãø— -e‘YsÝ#[^æãñòäAs÷[°BˆÿD¨&#WBØ·”H$­R—µ^grúb.g“ úaÌàVVV÷îÝkØMt*)»„7æž•­é‹Šÿ±áÒ7•ÔÀ½GìGÍ„¨Ð’ù &ï8•DÝN@• ·ÓùPuò¥¤êÍç¯^¾½sçŸÄ©ß¼4ëϳ\8bÁü‡™ˆ“7pò†Û‹:üñ¬êèž þûøzÀ©‘ˆ¹sæÍØÂ%Ÿç‹Š[)Z18x7y÷ÔvÊÌ1''§¤¤ÄÛÛ›B¡¤¥¥÷îÝ»®–“K+ä¾I¯ˆÍ¬à‹Q®¥‘‘¾kƒ‡Ðn®bHü‰ $Hå™Q#Çõ}ºýhtàæ©‹—p¢.Æ«»oÛ~„n#<—¯«i;ì—íÆ¿Åå[º}ÕˆÞcµÔ²Ü?sDû^cœØ>zÄ€€+ÿ\¿ò*zz¼Ý܃¯!KŽ‹€d#³‰—V,]µ,#èhª²A¿Ð»­s¨I+qq¥R À0\^^>zôèðððšõõõ¿q=в×B³CâŠóË€öxÙj·1Qìc:¶«%8›’ÏY|ìõõþ©π˶O*EËÔåÂáM—œÙjSæ`nF3šq¹&Éwƒ˜N6hú±—üãùzl6$C‰Ä8L€Ï DÊR7Ô¿úŠ»?gú*Ïœƒ1eŒa²ÄkH N”WTøš›] U–ÙVkâ·VWñ$_.âÙD2þüI“&ýüóÏ€?$''ãJ'N?J]@§ cºZýÔÞd\7«//Ãp")·úæÚî2''°ÉýETéT¨Rè{Õo㕞}†±lL¯®X¼cvï5%n[b¥9@*•€K§2!U•EǯÆí:pÆ|S·.{ýT¨R±c÷)íVì]4­ß¢%Ö˜*$©ÒÓ7ø÷®bk~mù|è³Èn­Ä­ÕÅvàvÒĵiû¨ÊÊÊzõêàååuþüù &ôèÑãËh:")~ø^Ò“wE==ŒFu²¨ûJóàå¿9}ÊÃØúÌ¢’­´AÈ}Ä{}YSMò~?¹æã-°ü_âŸé¼¿òÓkjƒ,Aä¹µ564ü¡‰•$cŠfökÓÔ¹ 0àêÕ«ÇŽ4h€¯P(ü ÁOc‹öÜHæk6­—ݼ é)€A‚"$mÃÐñhœ¸Ujâ2Žèy\ñ MH'€öíÔ©PÀñññ³gÏž8qâÙ³ÿ_’[ŠâÏ¿‹Ï©ú}’§•Jƒs‘ÅÂJO7¸~MÕÒ²1¥%$R˜ÚØhk©¯Ô–,ÓÕÒúbeÈ”½¡Gçvhºô¢¢¢îÞ½ L7Ç+++JþßYÂpv"‘ ·8NTttExXƒÃm q„ß~:+m„ÔB¥wëîܦ NÿA'š\Œ 4Mš0àvïÞ½bÅŠÞ½{ƒýÖØ¼CÆ:Œ# ý~TTT¼<<866(ÚÀà$>q$ÙwüÏâF¬XC£ÑÔÔÔZ#‚[%ˆ—ŸˆÜ1¥IÜÃ3fÌ8pà Ãfff\.·  à#‚×FÓ(¤}3Û+¾)„a¶\õac‰z†ÆÐUZˆ¹B©‘6KáÉÎ|øða--­òrÙìö-[¶Ôœä{ǵø³K;±h-÷]ÕÝò¯”VÖí<ò·§ 9*6ÍÒÒRAâââ ybŸšã16`Ãc&|}u·‹`±uêTÍ©Ÿ6<¾°¼sSél¼ˆ„âà+Ñú†ú6NÆŸ­X{ K!åe”¤%fùiû¯ç¤Ì2W¬Ì?ѽ­á˜®– D0ŽãR©”D"åææÚÛÛƒ­­­»uëݹsçŸþù½ÞØ \˜St)šÍV·jc¢ªÁÂP\æEÈTGqHî$ý|Ã!2™@él†©•¡€ƒ>¹Mc’4´UXª3gΘ™™µ±ÍÜÜLÙórÍ(WEGRz÷Â… |>¿cÇŽ&&&†††›7o>þ<ØO0¶??·´S F0’òðÂ[ ¢âëß–É¢øRñÄé£lÜL$ž;…Õ¬zýåÆÌ½uü­lÇp2™äÝÕEMEëɵøçwc WHá–,YràÀšý’’’æ~UÍ'νÍ)á5QâFFFàwûöíqqq!!!5 Ù~”Wã’r«Z¦ë^$ß:~?½,O\Îÿ¸•它ªs…¥ùX΃³‹¶\ðk7¢´P HCß?»WRV€Íèßó§1˯îì¾+Ý:qPFúi ¥9â¨'9W¾àU7ªgгëׯ+ì8ÅbýG{ìB‹¯‡å4a_zúªU«ÀŽ““ Ÿž ‰-:ÿ,£·0·ìÒ¡çÉQ¥…é‚üTÞg[UaF¯¹W äûÙ÷·ßr"Vœ.t1ö ü®³¶ñ‹ËÞd%¹XåóÛƒ†ÿ|9¬2?…ûe:iü̸ª«GC3“ VÎ!C†€ßI“&-\¸°¬¬lùòåà [¹æ,†aJ~oÍF'þ¸÷“·‰Â“/4##ìXÊà866ö£#’Ï0½ù*wd'‹E¢_¤Þ;ó†0}ºº±Øt ­…*HQóŒøP*D(4UJ¤à8*­ÂÔÛ»»gäægäÓ°GýN<øÔî—éŽA¡ÚurfRÕƒ/ƾ¸W_ŽQã ¸té@ó¾}û¶nÝjllÜ¥Kð/àÊ]»výOx'Öž‰^6ÌYá^-P{Ç×ÖÖnß¾½¡|Â#Ð'Nœîã5½~}xS@ Á®X$ ¾­¡®eåh,ßç ª¹ö[MçϽ¯ º´Hß©6Î1wÚÊ]–Þ:¶çˆ~½¨¶¶ç–Ž>_é­ór’æÐ@kúwB¢P(äÜŒ¢¼œü€áî,•zÌ6< ´rÀz#GŽÔÑÑqwwwvvær¹àýß»w¯wïÞ4M,ÿÛ@,’`{n&,ê¬Ôx<žT*¥R©&LÆÙ³gVðôôŒŒ¬%hñÆ ïtdÑ›ß%\œWr+Á±­­ª: |{õ©±Úæ*:ŸjÈä{ÅÉ»×IÝ,Ímôë{»¯¯oNN 5¢S¦L9xðàŽ;–-[¶sçÎ3f0ŒˆçŽØ3MaS3€®ŽŽ>|øð®]»Nž<¹zõjЮݹsXŸ]YZ-ºò2{z»æ5£ã"2³+\Ûµ©v•%d 9>2UË€ö¨\> *1ÒdádªË´5R¥SH Yzë áóùà°–––êëëåNŸ>}ÅŠÓ>lÂ2+ÿ5ñE¨¢àkccôèѽ{÷#ì <øéÓ§µ^?i×Ë[ëº7/Dª*«ßF¦ÙXÚ"$E±bˆ€t ´bã'p×Ñׯp¢¦¾¸BiY•(£˜—QÄË,ææ•òt²›ÖÙY¯ƒƒ®– ­Fkåá=·oß*"00ðþýû‡ª™,óïÑÄçŸeú»è¨)ÌIѽ{wÀà åš³Z/ |œÞËÃHù6J‰DÂã+Êó…¹<}UgO»÷N¢†T 蓞®®ˆWNck5>~™LJŠÉÌȳn«eblfjjÊd~¿«¯’'É)åßˉͮÔ`QGv¶èä¤Oþ0<**ÊÃÃcÒ¤Iýõ׿Ä÷>½¸¢‹bÓ_ÿèÑ£¯]»ökš7÷§šPl¡C— « óRãs¥¥jí;z0Ø4üë+þÂ0\) ò3£œÛv„p86楮™£EÜ­ßà“'Ï„ÓfÀz7{·Â”(TÓÒT“Y%B³²2ÍuÕQA!¤å¢IûVübÐ&HDè«opv™­‹±¡¾±®®nƒ—a-®]ɉ+êä¨?½¯]Í2"†ûM$Åš¢wI© Y­=½a¬²ì¸4®»µ £E ñ¹ø<2¡ÃÌÓ™·ˆ|V .M1yÔ½“;7êÍœa³V›mºü@ªX$¨Å/A%—U¿Žx­k™[™+pV¡;x'éUri7Wƒi½evÈß!™]] tÕß*µ^³JxcºX*7a‰¥JˆyUGy“V>ÜÏ\M*è<--- s‹¢6Eù…AÂtTlÝl>ãÀ4qíXVÈõ`å5L†OP”Q´H¡¸´’Ëç Äå•’ðØ"B³·*vjÛ¯¸Œ G 530“bDÍpÍO™Cj|VVQ‚•›fçÁv _ÀhÜš)½·#òV=|¸9à³ÌMãžWjgÇõ°keÙ}[´e¢{sAöÈ‘#ÅÅÅ'Nœ6hÍ‘wŸ^ÚY555pÖ»O¯! œ¥±Ÿ‡‹øRFøäž}+6%*ÕdLJÐoÃ&-g“ Åñü¸œ<S“û‘/z]y-*—)É#ád 8„£bp¯—~H„€X*ÆÂŸE½x}OÍšÓk¨wß6mÚÜt ÷kg|gƒ¿ÿʇÞmšj!¥Ò‰©{C4eø©ZeÐÆÇ×VwkFÕëéééçç·k×®š¥§ï ;4Ûçk¸÷£  ;;7?Nìhï®o¢ #´.¿Œy{þryE9JÀêB‘H,æ“©,@‘8|¡¦ºfEU™ªš&I¦›¹ª,W b°Ô¼JSU"àP¨”ŠRNtÔk={ØÜÒÔÐÈPSCS™ ¸V ÁGd¤Éhõ ·ýyàb?eH(A÷ÝLZ2Ô©¹8FP锘—¹9™þƒÁƒÐ[%ˆ•/7ÂsÇÖ«½©ÅÕÕU__ÿòåË«W¯Þ¼ysçÎk4ñ¡;)Ú×u.*€‰‰ HÊÎÆ¾  ?;ëuÞk‰½M[]C-éWB“)äª2nLl¤¾=âÒÃØÐÀISS©Ì’‡ù~ý8YP-uïØ¦S/™3 “ʺ'ʼn‰¥®™~YžàuH”w€¡™v+1Qv g&¥Y>žöíÛ§§§ƒ†{ذaÝ»wöìYÍñ¬YÀWãÇX4ïÇÈ|ùJ‹fmcg…áØ§Ì!;=7¿Rƺ³Ó×7º(ueÂW(_Ž6µ0jãb#I%âZ `§5Ü©·‰„_|§eÄlëk]·¥øZˆIJmËxB´»«’á›’’Ò·oß[·n“ßßßßÀÀàÑ£G5§N?J_5¢áÞFßs SSkËÒ‚¢üØø`a¾Š“‹‰ŒÄÇÄ!¥6.ÆNúíâëÅÒ“’¬ÚÈ\¹ÅÕ&zj +^~fé«àw_Ÿîn€9ˆß_Ç1o[À1¢gŽAgÒZºa7íϰÃs|”–]|N•Ž]W¹]ÍãÇߺukŸ>}žO«G]iØë§IÕ¥R7oÛºõ¯r'2©àG‡%úö±70©_{¥TMlo¢†a„B¬×EÞ¦W VÖ K2¾{è­­íéÓ§»uëvòäÉ;wîŒ7îãÙ˜¬ÊU#]•W ÇÐÓÓ¨µ²²˜ª÷Ëqê(˜agÖ™qИT°_ütË[Ë•} ^­½EZßßü»ÌÁÐÄÀÊÎJb&mäx&@šY*ŒŽî0ß?÷VßœíÖ¡®KÏ+UÇdV¨±¨fºlåd·âdÔÖ ÊÉ‹Ãá„……•––íËb±ŠŠŠ>E0þë5ûº¯‰S‡‰q¡'¼Fne©hÌѺ5ä·;à ïÔ/̬9d•†?Lumg«¢Î°&P 8Fz|^Yi©ÿà¶4µibK}• è¥¸Š§¤%‰6nÜèëë{üøñ‹/Ο?÷îÝŸ]ð"¾xÃ8·ëéFeŠl_·”oÚ Y¾bâ†Óa÷üòʨgÉe"×ö¶Þ]eáQiS ‰ ¤ÆzfÖYñÕ±‘ÉûÙëkµM Éæè‡÷e§†i‚PgÏ»Áß3Ü¡ñɦ4ï}6´·™m“Ûvt:]$EEEݸqcÆ _^0pããëÍÚkØH‰ÄA£uôô,ìMYTDà•Á·I!Ãi¥–†z4ñÏÅD¶Š *ªy_O./ÊÒ5±Š †jÛºšê‘bh¥êêS SWöDQ¡´Öñðà×m&•¼ ÜuéÞüOnÜá“¡I‘…ÓöÓÖÑ}~+!üQB“~ªÀÁáì]\çû¿\.;ì@HÂ& ÙDTTWÝâ¨[muT먣n­þµÖÖQµZ«ýÕQõgÕŠˆ¢(C– †Å YdÝ%ÿ;iù!‚‚EqäùÜ'äòÞÝ{ß{ßïû¼ïó}|BBBZEðÚÿäœüªï[YôùÏä×þÏ?yû±¸¼æÔÉ¥÷äÁáþl'’ûóª£×æO«„(ˆ´4§ƒF…JGI™ò÷«$ˆd"$A %ùÁ ŠzˆD±4Cw0ªKVì=pîÜÎb‡'¡%O† ¢… ÁÖx€V´}«'‘Œ0·gŒcùÏI#Z²o—Éäܾȿô[ºV£ëJ÷`7´©’j“¶9gˆÑ“#¬ú|×ÂñCvž>²ùbi‡ ¯(®úãPм î;¤;ÓÁF«†µØ·»»Ï+?UpáhjƒJÓ‰$844´1Áëׯ·nÄ+l©Ëjß|“5èc¿¹±ôP¦#“Þ ¯·­éU”}©t2ÊŒ1à{õ0/v`ApüÛ ×“Çm8²î3 óq=qfææÓ±Tw¶[±HX¯´å׌䤙ñõzҀة'¾Ÿ–«4»|ÍGSzEN÷²2Œ=îjü±…GE-´~ÛæÏÈHf¿­õgÒµÿ¤å¨ÕAV  ÇF7­ã!~EYu¿ï½U)¬ëïí|=WÒêWÎ#WÑG'"¾°)Çôlïʽ̛…‰gòÌh–½£ã¦õÔ,H½x–ùÖ ´gÞ=®ù7—pþüyôuøðáwïÞ‰D|ðú–Éd¶ê—]ôÓÝ1žo‚7ŸÌ=_ôûò¨m3BNl¹Ì¶wtósE`¤iºq`VêÍØ¥çFºƒ›½{è×}Êô„åk6])ÒzNßÿ_/ Y¥TkW/ûžeN†ÄÛ/ÔÙ;‚&½Œ² y²ä´ 9Žƒi0²;ƒ–~>Ixlâ|ºrƼé9å곘="§E¢­²8~EüA4h~z=L3£F ©x :s0 í9^7ˆÍ(´¦ž_þ¸8ýsí~ñœþÎÓd''ÖøÎ }‘»P£Ö]>žžy½Œëíî߃«×?Uã-6X©ÄÈ ¢ÇŸÌÉIá¿Ü%\¾|¹¸¸xûöí7n”J¥M‰jžµ˜UñçW¿TxôÆÄ™C<¿…Ft:ýà¸nY×.Ÿ½ZW%ÇãAÃ?†bÚݳGüñ…?¦Ö{‘Ì~ýù÷=»7âì†|¿~ÒäñŸžÝ5ë³§¡ ˆN¯Çú%¬Á Èðq úè?ûþûA0wb¯:ŽfAë —®$ØYã$–#t0Œ´t½²W'°¤„¼lôž™ûŒ‹à2tˆ¡¹¡EANÉ¥?Ï«HÅÃ<±dÕ¯?ÚùDRi4Í0'ý›BªDÒ[…yY2Ì—JBH øyuõµýFIíJ¡…ÃáxúôéQ£F¡P|>?&&¦Õ§n»u`~OÊÛ ûMÒoKzšiÍÃ0ܶ(V”äH]9>^n0:žÑÉU8 3"ž/øy8]¿qµo€9d–g;»—–d»¹jTÕ0ÅŽK%5®lfaæ {ß(ªª$_¥6¦'Ô¡>¡áz…àöƒòA½ûJk0Ùžl©:ƒf¼v'5”ëB²âè‰Ù¸tq(?L¹y²–qý8,ƒÑFÕ5â) ö¥}?ë%>È*+˯åõòî”%„¯©’çgFô·yÑŒ+Úú0 ¤¤dåÊ•………Ï©º¸oom›jgñ$è<–TêaãÑšÀ8Úì©Õꪪ*‘DP”'Œ‘<ˆ€͘! *¡43ë.Ó ßFeiiÙ|b²k@¼ôPƦ¸`BGÒL ’t!—Ѽ‚\ôÚNv£Õvg™·xóì=Ÿ·Ê,..nÓ¦MÏKß9ikÒ³Âl-ÞŽ³sö¤îý<üùÎ N‡'¡XPZTQUhìjcoÞ–Êw'ÂÜ+ÕºX;pY,Nv1t—‰l´ýÖÑö-¯¯U^;“ãéãÆt°õð«}è‰ÐÜR¯‹ê×Öš¶ä…°^1þ:þÒºhâ[âŽ8ŸZáÃl'µC9†\.—H$AEI®ÔÙ·ëëü* Œ±0ª»w² k)ןöw°µµ%“Éx|ëµÚe ¾œ! ’ ¾þÏSL*y(¼—\îM$:é<æf4™¢¥£u[[ÓN®Ö5BYT^Súèqôø sËöfáý#¥<1GüÃlŒ&Tu™0t< D­Aâ „#>Û•r ƒK²š8†¸Rø(WÈ!aAxØ)7"@5’úœœ –ÞÕ͉Åb·'»+Ó|±?}åÄ€Vº]£1åê¥Ôà×û¿$-Ÿ8lsR$‡B¤Ð#yVeJ‰Ze[Zz¿aiç¯5<ÍGÚ¬ÄBðøªY¿¤Þ34¨ÿ> ˆS7èî¥=ìÞßÍùy2=lØ|2w͇Ødr‘Hþ¦ÍÆe›¡cL}â’g?€ftaÊ Dg”WjyäÈÏž³WÿåW¿‰y™Æ ‰cˆ¥üŠÊ‡/ÔÊd¿äs‹Nå—Id…®s°··oUç옷/mBo—H_fãÛ¥úêï9lG¶ƒ«]ËÌmpl ¦ÿyúlÅݽÇãoÏ\w^z÷¿ký­ÏèeóÈ[Ïž–x£ÙE{Ï\Z¾=щ¬‰ô…˾¨­¬IŠøì`Þo³¼'ï>ªgÚ¹ëóâF‹ÐÉŸþØ»fØC¤ßwkçêCuÆNÿG’þYfv?£ÈšE í÷wÜÿÕlÑÖS÷­Í0Á›_‹?æÍÃf=ЪTߨCõ‹`-ð&DR‰‹hþCÚú~æ®;ûçý«ÐÝ8†¸B (½'u°éæêåŒÀíe}h 묌lȦÞÃÃf½€9´~•][É»f…å–J'mIr¦áÃ(·¿;/Üí°´šg†n£N)Ý2Ö²göéÖ‹ûØiÀ§ûî^øáð¡/#ÁÈÓ Û ›F:ö™rcýìuŸNý(áä^ĈË~X”röÄñ# F\ƒTˆ-t1åÉ;zÄ-´®ÏüC\wè–þöõÅj•*óô²)¶‡wÂð3јìàŠrŒ”Ë% YÝáÇ*™JïÉ1ïíÇÄc‰øßjO -ì]CGê¬h@‹lÀ (5MÜðA©ÀÇ• ¼t;£SÄ9°ÿ¶ns€«õ¿vï@ÖÖÖ–––NNΞÕèà/ãþ_)#08=c ?¬­ªÏ{ÅöÁóbœ8ì >‡ŽÔ`W[€«Õñ¯ú.ûл©./£×ÐÖlºó ?ÏY<;fþ ¥{«Ucs?‚5s®ÓìüFôÍŠ?¢}òDÒéX]b“– ì‹ì7hè„åC-)yI—ÖÄrp:‰â°÷×:iëÐJ¹–_P Z4^ÐÂF(ÈJ%J:å©%¼ª H³ p6EŽêI€¹¼c~·Ø-€Q˜S €ðÃÿ€F€„ÝsÀ‚ úŽnÐãqh¿ßº}ÏÅ‚Ï;ISÓét—îÁ¡1#¢üZ–Ô%ßJº!«Uaꈱùâð¥E‚ÛiW´–EýÇwë7 o€“É$‘H/ç6}SòœQ¨ôÈÁænŠÄ[î\Ï„µ–Šá)‰s˜ëê-Õ[ÊKæôu1c¸4Ôêœã?{éTÿ9çt2=ƒJPÕã6TN™5êÌrì'0ìîì„BpÔâƒqS£¥Fpwærz.ý~ê ñ3?2@Єcª½W‚ QÙ …ª•$.h¿VW¥¸üGB~Y’_?«€ox|Yßéƒ<ŠÅòÉ[o¶è[#Ü1œéô_oÛ:ïè=€D\}ßÕÒ`Е¤$]K wŠá؈?·rε Mø°ÙY'wÌRtÄèùÚÒ½W"ítO%ÊP:è8`P¿~ã»i, Rî^­(ƒ „ÞP½Î•ž]Ï PÅŒðòôú÷Ò-oPZܦ±‚H,,)*¯~d ³¶3ë* Tt¤ÌÏ//*ÏsçY9:855ZÄ]fÕšQ /‡¿gI$R¥½$  t$”¼`q ãÖÊ/ŽáûÄM›¾%ûØ¢›‰7OØúÃékVÞ=¾ØúÛš~*öÐíQ^Ö®~\Ð1á¤0AÝwý]ñ×°:}xª«ª…’Š¢œˆ>ÊY‡6ð–ìN>´-ÇŠÛ‹}e…lèA¦=ïØÑï—w¬p J­4S¶Ý<¶ô•k„6r Æb³¸nõçoóû÷÷}Ò-on‚rôæªÕêÊÊJL5OL…9Aa¾¯ôˆx<(—ªÒSÒ­¹®—ËžÓž¸ËØonœøª/ød¬%®¸Ò±–Ø ¯Ñà„Ê:ÓœˆÅ;Yg¤dø»‰ôÇâZg'»âb±+‹’–[Ú3<Ðv ÄHÑuuÿ5hK¼ãl>: ug›\wíÜš¯?ß¹”Ç#{¾’Ç7ÄMC«ÕÖÖÖŠ%~AE} !4¼ܹ͜¹S>*Éu¤9:¡ýÛÜÜm0ÚÙß¡ Ûîös«•7Ø”^ÈVoP[À¿¡è·nÚ··ÌŸ¬£ñäX¬ê¼xÕŽ8µ|d¸Óûâ&(£c&™L&‹?.¯ÈU{q9.vú=ç‰vy÷³ äH™ÏžÃrDÉ Ê:ä¤l´z•nÉÁŒ-<ĹaJÀ”Œ£¨¤bêuW+*nî݆tç€8\WÉûâæC¥R¡C(ª(Ê©´"¸ù¾ŒÜÄiTºœ¬l*[Åõq`³Qæ€2ò)U&U4XHÖíy.1?šBÝÚƒxÐV &@з÷®!%ÉúÁ›ìK+Èã¢Ý?èÑå .½´Z°¾·6qSÚ‰•@¾·ÊÐ6íè¹\nXžƒÇD:t7dŧßÉЪa,1wÛ+â›6ÄW‰¤I7® 5wC‡qâuçp8/-ðßܰˆHÄÐ.ωĶ›ˆÜ»xTŽ++2¶'UfŸ?¢E[Ífßfœ=¬A¤4õ‡Û5r±Áˆqÿ¼ˆ ;ØÐfíNéò›è:tý¨˜)i{§?±ò›O?Ö[m¿sö¸Ñ Þ 7ù1PÌ988… Ú/dˆ½@•–|3©¶RŽÃáÑáx«ˆÃ—–'§ÿ…c>ŽïÕ×Ï×Á`„ÎT+3è[ÙŒšÁ Öÿɯݷq3@ŸÚó áñzåÇ‹·¹' 1 6\(—¾6yÁÀŒÎ²1_òKâÄù ¢Üx‰ž,F–½>aÞz¼݆N‚¤#¿Ü2qõÑÒ-9<éË 7DŠ6ýw7ÕÛ×n`0ûëI«ŽfuùLZÍvÆÆM›%ò½xÕê¹G2Vl¼ðãáoÞzÛK@™H$ÚÚÚ¢LÀÅÙEâ#‹ïÜ­cÒ½Ü<á¦ïQ|ÂzC~nÞ¶ŽèÌŠhŠx5ŒGmO[eîµ°¨†1¾Ù]‹¶Ž iúŠ€äÃÿ·pRôüß ï=b€Õl,Ï/vP÷°F¦Ü8&(pâlcIŠŠ¨@u\¹~d`©Ÿ£e5ÀÆAã7$þµEtçB¾Êø¨^Uvx…ÏØoœ˜ÀÆg½µÍßql¨¡žŒûëýœ-»ðÞùÅ.šMj užQýú10m¯8ÁٵÂ×þéü^¸ ÊMj¾ŽŽŽ\÷j¡¸"ç~¼±ÎÖÇßO)S=(Ìbûá±Ùù€—žïHKŒMö¶øŒ2ðkUФ}Ÿ˜£¬V¡÷O§Ã,£¬B‡,s•O=t0 ù§ùÔ ΨÇXè ×àŒ(_zò­›TJ±Ý`Ž„klquÐøÛg@ll9`@‰é°5 ®‹îÒÛq,‰%Œvé³1{ëú}Õôqy*ÿ+ï[Kü¬ŸF£Q©T‹åîŠ-ÜväÄÌ‘>ý}^Eb•ç¶Ä-!ù¹ýtí?ëgùQû ž±).ÔЪ&‡LZ°eå®%òÔä¸C×­Ÿím¡Œžµ9aÛdY1~xôÌÍ ?u"n³<¶ÇIÛ{ÂØ·[bxUZü¢Qs¿ ê3p-Nìb èµî¶¬c+Õ3¶sf«Ù¢¿ï?²UÉ×±½œ¯d‰^Oµôñen>‘»ý¿ùG¾|%i‡ÞY:Ñh3vÞ>øE¯×yDµZ]È/©äçêÕÊ.¬[tðJ0³qöôssui.ôÝÜö]*œ5ô5eå©Sh¿UöŠ÷Ž'žÑ!¯F ů›—‹#G«Õv!ˆÑa.z&ÏŸBת_ÛùÈEunJ…ºAK¡’:¿tã;m|‘<ýQµÑd­ÙÌ]wšþ±}ÝûiT§%5áÁ³÷åÕzE^P$;sàvÙ#qç|·[bw–Ùúc÷“µfšÿÅ.rNC_Oâã‚k±ãÆýtG4*R¾\á*…æÂ‘Ôü4¡/ÏÓ? “ÉÓé 5<ÄÂÜ&ñL^úõ'n¯Ý~PegAöà˜›PÛ¦íHþeQds‚Ë ÛõËÚ¯'}~âðÄ¿À±sGv8_DÙ#IVRIX”ÕŒlh;‘L(-U”‰¢ÇòHd¢ Ä/°¡«.­6¡¶…]L„y1št?úòú$eßä:Œâ þhü†eƒæJüqF; LO,×ê‚{yµ?‘ÂË¥ªŒ[Ârݘ&[›väËÈgóM¨maÃ{8l=u¿ém[,ÿ¨xÛè±ãvÅçWÞ>9>vÊ©½/FpƒJ{áhjέ wÿ²®íÜôÇÀ3’ ‹+'r2’ M-q›¶åTÞÌ!žVt’ »ÍmÑOww|úÒ?/çKÒø!½ýèæ¤3ây‰$ŒcTI*ûA9Áâ–Öõ«^ÞH›µ;eßÜgÈL¿Q kÃ=†ÎÇO#ÇÈJyØ3ÆÓÑÍÎâ§läúkçV0·¹J.óu²ôqj×ÊLµJ›p&›åÀvv·×é^m†µÆÅ†9©…LZH¤§ Äÿø}4ðü}i‡^ïÞ›o ö§­˜È´|ž rEqUÊ•Âàž>(s€ÛæÇ=Q£ð$Ȩ!RÍT %ŠÃF§ÇsJF¿´°¢ƒR¯h}ò…@„ÊŠÄu55Æ¡|ã=Ø5 }=9ű ¸Ííû™aŽå¤T·úíÝ—~ÍÂÁÔžýƒHd":{V' ÝÀÚÛ£×íÂrÜÝÛ/6›;ŽC%Œð̦©d2¦çÔRÒ }}B0j~¹¾}æ@!@jµdFÏvd†ú–Ü«ÿ}o²°¬æ½1j.vô…£|–Ê0a·¹íž.UhG­O,•ü=»¡iÐ]<š–öWÇÁÅ7ؤM'ƒG^¸äóé1<‘Œm_qt<θ/>yÚçS¤i?oÙ6óFQÕÜ/ӈЄ͇©ÍGS&|²z ìÙmÎæ5 Yâú1£‚éÂ/™YÉEï/ˆQsµ7[8Úwʶ[&ì6·¡¡¬î_Y¯^õkÖÎåçË T¡~vk­Z÷Âð[¤ËfL[2wÞáôÚ'Ÿ`¢ÿhõÀÔž~wU)$#çý6È˶^¥1©R·wј©诺#$S÷ŽÿôDñÂ!ˆ1ýB<˜vèvéX:ðÎ/jËØÖ”ýózþúê_šàÛܽmƒ\Ìø|()þª#ÓÛ‡çÞ±Ò«[mµ…óàÏå$Nþ®/`h"b4‚Øÿ€kÌ,ì ߸VœyñÍ.kƬËcë}£ö,˜SSYX õ¶~Ñ„D€DeÕÙ9™,(°¿3– ÁÒªËR€½Q¶ýÌ}<.íc‚o ÓjµõõõB± Œ_.~ˆtïjǶzý"¥¸'ð½ŸU$¬)tç19ŽÌJßG[[&ªSOÿ.ùÂÚh3ÕF ƒaX©TŠÅâ AyIŽÔÑλ[»þ;‰›˜ƒ^g¤dã¬ê<|“!P(”ñê&ÿÏ>ûáÎÐî£"œLUñ¬5&Mª®®Iüû£Œ΃:)iR+Ì‚$5yyÙ,_ÈÕÍ‘õ¤qëX7¸¹Ks÷¤^ÔËÞŠbª¶8†T*KD¥Å% A!6LKÒiesøâúG\Ãã`oÏjÎL n¯í¹Xð°\¶{N˜©*žÃ1 …D"©¨(/ήã0ºyù¹êÿ…zc¥œÌкÎ݇Ãa9¶_¨ÉâÖ ­•i;nõð²í¬Ô,ï0ÇÀ’?‹E÷…8#($„@ # ÂCø*a]~a6Ûrqû;B‡òL ~ž)ÔúY»îôdOñ0ÕÆsL§ÓÕÕÕ‰ÄB”cT=|ºñ¬íÌ /ZßÂüâ*E—gãð$+J«©›M î(Oßy{D˜ã”W üñÎrŒ¬:–¥·»· üLbFŒ9葼{¹x›Z®Ÿ#ÛžcggG&“_ZâÑâöšJ/ý9íá6Å[ЈïymØâpÕO3bÙñó['µàXÒ¤êj”cðó…F©­o@c¶w,ŸZDZXœƒ1w'–=»SÒ(™@ÜaÛ©ð\jŦ8ÏÝæ½­„žÃ¿¬–iù·v÷Ÿ$ñ‡¸)㢅EÆ„{×ðOû1PŽÑèǨ.ì­]ÄÊn0ÃÑÁ‘É´ïL‰G“üÂËYNIíGßÞü|OJy•ò=¼|¿¾sœ\xGnì7ïèŸ_oüpüš Ïîi@êêÚá_9wõzii©R©D¤sO2µ¬/g®ÖGaÊbW2…‹~ºÛÝÃæãvÏ]WþŽùoºÅîˆàZM^ŽhaX+˧ÂCêU:´r~M,‰ô±½°}*#àÓ©,;ËLt¢Ó\rgn?>ŸVN„ðs?ðr³~·¯wþª?lü ÝZ¬™Ö{å'c¬>×ÏË/«Oº/Iȱ¬¨Qöã"]ˆÐ+_îkqç[i¥r÷…‡òAÁì!Ý9\ö;¨Û‚s…µ |±<ãQM&¿ŽN†˜V”žŒ¾öö–”לgÌâWÛ<ß+­;y³”/R¸0é±½]ÜíͬÍßÙ=l¨UhkäZ‰´¡H (Ë 23*ÁšN² \¬ü]­¼8¨ëã*L ~}&UênÞ¯LyX%®S£àèãgîm˲¦ÚZ­è¯Üg§ƒ±˜™J§PëaÄ€žÚšÖʵe•Êòj¥¸VM €d"žF‚è‚•àdGw¶£qYæöÖB§‹»›@üÎ ,¾HþH(G¹‡Xª®Wjej½JeZtbÐÐQж µéÉUúz•¶E!J \#û;&ÂìIî[$ðè,©:䢣ÑeŽB‘mMq²¥Aˆ¾âAˆÃà[¿úôÿ`ï*£8¾÷ʹ_ìâîNB ¸;÷¢‚»»;¥´¸-îîP<@\ˆ»Ë¹¬ýç.mýWh(÷õH7›½»Ù™o¾÷æÍc#6âã _è¦÷œA¥ -èuÅR-`÷"©– I @À £ßØ TZA -Fjtú7-N€ ú‹ZKè0ˆf ›ËBÿÔúÀ¯ :þDCáj˜ 7–HÕ25öëNñej•Ç\E!‚€ÿƒ®Ëa¢¨áŒ9"ø †AŽþ˜Í6œv9èÕàÎkpÿ`#¾B‰øë K ’™æ–ªV¨óJUJ`LµŽÐbú8V¨ “ϦY‹¹,&j)f»Xw\ÍDy,: 3 bsy‚Öm‚ÒgÈU˜¡Œ¿þÄ -erma¹軬b%`€,”—feÂÖ¿Äl[3®D̪ h4#ia$b#þÄ/$à”ÌBev‰"-_HV®ÁÕB­Ã½*4˜)Ÿicʱs¬LX€J¥ò9 !‡.àÐkƒ·¬–t•+W`RµN¦ÂŠ*ÔÙÅÊ‚ruz¡ŒaBƒÏ¢‰x G ßÉ’çe'’ˆ *ÛÈÔF‰¸þ,Ié0"³H :Z<§DY¡Ä”Z\®Ò©4„9×ÎŒãb-CÌcÐQ#ÉÖMY Aà™K5éò¨ôò˜ŒŠ2¹Æ„ϧ‹¿‹©¯£HÀ¦]F"6â3›·Z,)G™V–--“k‘«Ö®V|Wk¾›°­™€z¦±'~mÐèˆü2UV±26³<*­<»D F\`Ü8Kø ÝÌ‚]Mø†±–ŒDlÄG.¥Pã G½M-{Ÿ++WhËåZS>+ÀYìëhâ$áZ›r8Lã²#þ8A攨ÞçÉ^&¿~_ ¡–&lo;Q3 o{¡Ñ62±z`8™^¤x‘P•^V"Õ«ÓÒ„ìbêç$²7çY™è§×µdDõB©ÁÓ ä1éåOã‹À©€icÆ­°³µ ÇhN‰¸>ƒ¤¨ÜR&/K€Y¡Ô9[ò›x™8›ØšrŒùTŒ¨YU¨SóåOŠŸÆB0äbÉoékÙÒW"â[¦‘ˆë,’ŠÏªx]¤nQ…†Ï¦7ö0õ2w¶ä™ XFÍaDí× eêw©ew"óÞçÈ,D,_QÇ !ŠF"®••‘]¬¸õ6ïõû’¼R•€Ëhí'Ìëj-ಌÎ\#ê4:"9Oö4¾È N:ZðZùKÚX‘a¬#× ´ñ:¹ôÖ›ÜÄì •ŽhìaÖ.ÀÊÇA,2zŒøj_¦~‘T|ùEv™\ëbÅïdÝÂGÂ1*#> ð*©øÊ«ì´| E:4°jî#q¶äw­3ÂÈãœS¬z_úˆJƒ7p5í×ÔÁË^dœú3ñ§"½Pqî—Œ×ïKq‚ìlÓ1ÈÚÁ‚glXFñ¯À2>«â³¬×ïK¬M9]‚m:7´1Æ\‰¸j£:½I)9óKf\F¹³5¿3Ç`7Scë1âÃP«ÕOŸ>ŽŽ~ÿþ}EEòµÎeN`³Ùöööþþþ­Zµ255ý],ç—ª®½Î¹ü2GÀ¦µ ´êÝÔAl Æ0ñ_É÷ÄÃôÄ슆nf[:yÚ ÙVŒ¨ W­ZÖºuk­V‹aØW>wÃ0Š¢€Ž“““÷ìÙ3dÈÐÐÐ?]S"Ó܈Ƚð4‹N‡{5qèjÏaƒå¿V".¬P¼ü0¦ÐËNøM—.&Fò5⣹wïÞ%K– l "ú+X,Ö¶mÛ¼¼¼ ðO×ä–ªÎ=ͼý6×Ú”3¼­Ks‰±Þ¾ "~‘X¼çFR¹B7¨•S·Fv|ã ¯ÿÉÒoݺugôèÑr¹ÜX'ÐÅ>¼}ûö®]»H’ü°ÇÐI\VÅ¡Ûɉ9ÒŽA6ß´q6­#+Õ,êÝz“wðN2ƒ†LèæqhFsãó3âÓ¡Ñh×k㯨¬Ç WÁ§ù:ˆ¶Œ ›ƒ]}•}æI†…ˆÞÅ#ÄÝÌX™u›ˆß$—l½OÔôÞÞ§æ·2>6#ª€b>‰ˆ) eq9tH©T’T}óŒU‘‚ÿ 11¬­ x$õK\Ñàõp’ÑÞµKC£ÿ°.±JKl»÷ ªèߣ³[Ó³Q³DŒ tL·wÙ®†u*…šâ 9¸ êÞ@³sêYäØÑÃžÜ ^;K‰2é…;ogw×ÒV¡­ê¨óé¶ ÝV~ðÇQéåã·?Ï+UMèêÑ­‘­±S×j"N/P,9ú–†"‹,ào|NFÔ"Ö_Àr ßøƒËNº´vÚ¢e{6; Êä¼9€"”&úÖþ÷o+p¯©k'{ P¥—¤<ܶæx)ƒ`ZûO1Û…«ÖúY„ÎÖ¥?Ú~â£;üàJbÈÈ){ºÞ;°óäX¢ðì6yJß–0¡£Ãn|Z¬4ïÔ•¥ñ›Þ)êçgræLé+FÈ´û{¿‰,œ>Á†«ËŒ¾õÃÆ³RÎql4}êT.©,ŒÝÿã†7y€ÖýF÷õ8óýü"¹1™o¯¸ôùvf+g–ÿ÷)"Pêÿ¦ˆÿNâ}S›‚ƒÈ´²Q[Ÿ*5øÔ0¯¾_ûä^­#âŒBÅüCo$"Öö ¡õ&_Q­'4¡5²Þ #4”ɤqtVõ? Š" ¨â½¸ P¥ço‡ô¿8Ê ê0€…Á%KzöÉ ³xe-„^]>yÌÛáÛxŒê>·Û¶“‡ƒÌi°j÷ÔÏø63´<')* ÅôþXHY”ú&žó˜·OYöDôãšEL˹³{l÷1»žl¼:{ò}QŸï·Œõ²«¥òÁ3—D<žÆ¾`C?÷ ¦ÒUIç~LÍ|MÏÔOó<Ž-ì»æDÄžÝ×ÇÙ’o$âwDàËŽ¾Ë/×ü0¾±…ˆU?ê75ïEž<ÊÚÌ],°a2¹|ˆgˆ‹7â£y˜„p¥¨Ðäå%)är_ÛnBžE5*â"bõԯô “°á7”"µ:†ãÓõ ­‘ˤÏ30¨¢{y¬é:/.*ÓpåWòfй D2ŠÊK¸©ƒWpƒÀ©fþ™'(®Î‰½¡¢X,>e \®o"À×z+¸YJ8E¢©“ʤ”пAPL&÷ñü¾ç4mQ±|êég³TEÏîšÞe[»UfuEÃ|‰ë‡’ªWÎg­jé+/µÿénÊÙ_2»5²ßÕƒÍøºB’k ?Œ)Xósô‚~m¬êGÍVÈ‹£rÎù¹¶±²îHÄ ‹–9õD1Ìa ]lÑ!fzaDr¾&ȹ‚VÃÇ®Áq¼ÊžP˜Àq˜Î ¹Aá8Âà™aH\€SS$⪥º–áë·ºœÚžëf®A­Ã† hâ.Ñ7# ºP( ޣƬ7œÚslý–¶mÊDlÂÊwìö-÷ì!–¬œz…Ãwô÷ÆrTˆ=¥V«›Œ]ØuùšðÁƒí½¼±¢¡Uÿvae þù»þ@Ÿ¾¦Ê=ŸÅb=}úôåË—»wï¿~™•ß:œÜq5ñö›¼É=<»5²5*âÏ‚{‘ùn¿ÿq|¨£„XømJÙ –Î}Ö<Ø4ºa°›i= b™\¦Ð–ð8&õ sÐ÷—ûŒ8¸êÜ“0[*éâB¯ö÷·<¸ÑÃP1£4+%µ\Á[¸ÙÛ@”Š€éL ËHM)…^æšÔÈ8Råd¹ôÈI¡©!µJ*£P>^’•¥¦9»ÙšÑ˜E™ÉéJž‰¥›I©H˜Î&ˆÌŒäB!´wp3s“®ê¶3háâ‰k! "å:—¢23 ¤$‹kîál#œÐI+´\#[9Ûõû Cºò2™‰° ')OŠ8:»™ó@qe¹ aÔyËÅÅÚåT'%ç)`:ÏÙÑEÄ!TÊ’,)ekiÊ@ ”Ôæ•ÈiÀØF">L‘0Œ¨Ê ”°ÀLĆþ‰.`ІÒdòrg¢è'êµÊ8YÇkk›ÂÊ´PŸGÂ:¥B}ÙHƒ© ™Ñ˼.¾Èê´øv¿fŽc»¸×c"®™´&½šØÓÆeÑ‘·W^fß~›W¡ÐÝ~›{yY»zÀ•RCo°RÐÂÿü,ÐĪøè牙Oî¾Í¶kÐ>Àš…•¾íÛºûÙ2«æÝm¥Ošú}*å?ù1(hP’  ¹‡ÃƒÝÛîfÒØL*˜Û£Ạ̃ɈuoÃ$ëÀ‘qt»f^ü’W=Zö¼¦´Ÿ`Qt»qàÈ/ïî&¿ÀÁÉÿæ  ²ÓKIO_3.ÇÁ=ÀÛÁSÄ$0JWÌI¹¼Ê+`Ð{V@³€fNHD;ÏŽ"ÕBmê¸V-ZÌ?íèÚÀÆ„¤0ƒÌ§£å‰á­BÝúnFlµð·Ø6´=Mí¢‘–M&çŠÜšºû1‹_tñõÛü‚Þ4 UoÖêžmlx,æÚæ_âÛhñËè;Ýü:ŸŠì…á¡=VIdÃ"EÄàæSÞ”"èÃuø«£¶zYíIj¥L¦Ð¿x|Ùo¯1«©W¨ý­ÕýœÄ]—ÞY:¦¾®A¯1ñÀ–N 5¾ù|, E&tõì×Ü¡žÕ,ep ÿs«ƒYlŸ Æž– »ŸÇcþ-!2æÙ݇)P‹¸;'3occéwÓüD%7ÎEÐÝ;µ°Ö”Cd—‰á-ÏoÖaZÃdþs€\R«æ]»Ù°tPiÜ/wžd@£ožxOà`Å–É^Ü‚Sgߊ[ì`¥.£´.4¥ûçê% 5ð©JPŒ¹¹yrr²J¥ªÅЏFÕ8†)•J‡ó«¤&êi~}e‡G1ߨÂiLg·úFĉ¡ÈŸ·HÑa* ¦Ä^Õ}&ç4 õlÂÄ ^/{´D–ùù IGYt›ÍàÙfD}ˆžÓ:¬D^ ±­¿³u ÍØÞ<ÞÏ+FÍ=õæì¥Ä k»±Š³.Eƺ5ñë;gÐOݾ_ö“÷·þº½Û7¼Î'{èy^G˜F?÷Màa!Z ÕæÝ{è´SQg¯$¯[Ù‰^˜q):γ©ßðÅCÏuüaêv¶ï.]Ajî(Ò¼¾ö8«™µ™„Câ’PBü዇\Û3s?{t'›gGÜWvûnygfñs W`z &¨ß\Þú˜BÝ–ùË<øÝäó7Åõ>1Ë RƒÆƒS:p?ˆð 4àÈ´q÷¯_ܦ<îȦ½Ê9g·øj_ l4‘1áGò Óâö}·]»7Ù­íøæÅ·¶ìÒxöêïœä‚úÐ8î„üôÇ©Óéºvíºzõê7oÞ4lØб‘yÿ&“™——÷êÕ«¹sçV®¯Á›iåg ^çŸf¶_xkvŸÎ ëïÝþMVH…1Ù×B‘•‰;‹)`ÀD/™ëº-@é(µŽP•H3 ŠÓœL›Ùšû~nQTX‘··i£žÐ?.x¥ ˜!€˜Ja-¦˜0ŸárJ ”)æ1õ…PQJµ^÷Q4˜Í‡X0„+! bâ”RÁ<ð¤TPS=&§´úI8ýSE¹÷/ŸÀâAlT/¡5à[›Vž!LA)°ÿù)fò ŽáÁk¥š:¢ñ`)ÔÔÿʃÀl´øí€ößz­¼¶­§ éÔJEa `,˜G‡´ ½ž­¼„ñXúû÷¯ÔP$(B•úï·ÁᎠ˜—wecÏ•1;oni¢Q~Х씼çÊCk)\]\¤X˜ph4&%ß1grfÀŒ5ÃáúÓ¸˜V(MÎLOmá=–öy‚å*‰øuޞЮõ™ˆkt„™š÷JÇÿt"þ£:þ}nª¦1ƒ†$æÈ6œKÛÑ©©—™¯±Y²J.µ9#Äòã‘™…ŠÆ7æsêð.Ô4Ðà0Q&-Z1Á©‘*æd?ØÞ{ÐÍ ‰W»‹yÊâ˜ÈøO/'&L£ÉËcSÓ•êàæcÅ…´&-‘ÑÙ|iVJ1Â3ã!bT¡ …YÀèPšÏÁ%•>âj§:½†û3ƒ©Æ˦3ÁË8æþ |[8pýÃÕ#‚‚\êjØR)(Ã? ‡?-Dh!­m›®ýZaÃý:Nß‚ ‚¼]¹0z{cx»ù—={¶ 99©¿•ø0~pb?§°U¤KpsOÏì+Û›4]žÑquÍÔák^iÎ7ë0¹À¾Y›à^Ú‡?„´[’ÓaXÿ-¥¥1,=<ù\¾¯“{W6ŠA(òâþ}dzM°ãÁðöý¿{ă…–èºúƒ^­|v ï5bË ŒR,aøiXúÙiÌ@Ÿô"!JŒ0ÏOŸÔjÔkÄŒs*^\èÛiÚóŽÌ!,xz¿^L±Žá  ãäŸ?‡dþ*o­ :ÂgD‡ƒ[Å gXaÎó`áÌÉaƒ¸lã©DÛ™cýŸÜcÝgïæ>¸QNsv·UÇ=Ë®`C$Ž)0JGèiSBŒ ë§ÊÎÎhÐýx¿õó=!@Íá=8™??ȵõp0Jî'¤Ò˜ü®[qº‰Äž,¼{õqTA¾F[¥Ó”¡ûáZShTjÈ}éê¾%×îÆhØÎ®Öù1¯ò@ÙÿR ¢Z<U!bPðO|á¤ÎÖÙ7ÀU,°sêÜ¥‰5K«VqìÆ/ѵMðÔ-ýhÉÏŸÆ—¥Ü>±tc4‡Ì=yøf¦N˜ñÁ³Œ"ÔPót˜Ê|xvÍyÝúÓÓºµi0xΈI²ï[sQ»òÈ”nmüúL™¶f®Ýö1kßÓœ"|ºö˜5£WÇ®¦Ìò¼»ïf!Á i`!ày4oعe  ôÑ”1ç ºúñ¹«ÞPbòõ‘ŸNÑÙf„ïÝtðì-‹N4»6±g‹,Z†5mìe*´»Z‘Gçî½_,è5Ä©ÉO­Õ«°ß¥ƒâ³*VŒT !YEÊa›÷nfodá*„ÇÜ26äèýÔ[oóê¢"¦ª®ˆÕåÑwÜý¸ ‘ýt\Ai)ªÜ¤i¿‡ÉÃx0ðz°§‡”RQȲëH¥¤dzÖ£ÊÌççû÷Ù.£T”ºn}|’si »{4¦T:Hû»R%(5Å÷:ž~‹³HH#£Ô«oÇ JA•k!xȦc£!LF•Útö4e×ð½AÞžRJ£ tÿæ.øŠ6T«!×Ï'2>Fpº–dCXÏ_úy$\¿¶MŸ©†€)0ðXx9º09çOžlGPÒ¤ÂB®˜¦‚0ˆ&r°—”œ¸þº$´­“B[˜£Qp-ŠO^{QÒ¨ =»•iÞ¤‡¤}¡ÿPP$x$A!ƒ¯Ð›#0†ò T#±ñ—p¤ÂöÎoÇ„49eY ¶9!K"õ ¼ ‡Áà†K„Ô° 4bq!e–œ1zï¶M&öo÷Îêßúɾ‡ËÜ•öž!õÌ5A§!?Nh¼å|ÜšSQlºð§·G7ôw¶êp°à-à¿é|¬• Ûß±.Uèg˜NM½L8˵V¹Z7ÆÈzž0AÐryNRìû–žxBæç˜¬Ã0¬¸¨ôuî.ß @a|r 6Ì@ Ìˆ„¸l©S“ g®2!µÂÖÓYÄì¬LN,1q¶3ã£,NyP('8‚àÆ~6BR󛇆‚. 'ƒ¿ÈibÓ†M½E œ1²¢ÞE¦É(¾¨q“K.¦È’´Œ"RèîbF‡IyaAV)âê)a 0%—¾{/å›úX2Ñò÷ɯò50jàâÀUèä© Ùl['[SLaىٸÈÒÑŠ@hEJú›èl§Wˆ·(ñeTZŽ–oïØ¬¡^Ï~Z­ÐFF^4‘gßÈ«wuEMÔ˜~þiÆãÛ˜rŒÜúðã儤\ÙwcC€aQwˆ˜Ät*=s¬.Ö¾"NŽMý|DŒãxY©ô]ÚE³ÂZâJÆ…³Ÿ£åR‰±Ñ–P;Oç`6‡ù‰D¬Ò`Qi¥EªürJCÔ,«ëÓ!@!ÕðB*P "ÃJÌòsºX ëÐPW$ÕÌÞ÷ºsÇ¡vuÆ5ÿjJë öuMÔR@|^“;Ïv5k—óX.}ëìæNƒ™ÀÒ7¦„¯v@P•©Š“£²%TkgWý“¢\ Ëä§~Émäiçæ`éháTAà“¸ˆNArù'ÏKÀ¥S—ñÍí¹ èËD.¢D§Aþ%Ÿ©û6w„à: 1-„¬w³k¯sêÿ¡ÑèçÁª6Bé“%Ât‚¢˜°~¹­‚Âô‹V ¾Z¤T’˜¡Ï0x0‡jJ¥Ö‡÷R¿D¨Sjü×3 -¥Ô[ª0³1J¡¦`†)…Y(¤•‘ ¢q½c˜´rJSh!<|L@ZðQd•9¥oßW¢"f³ÙÖ¶§]^naܵ4%Ê€ùQ;gùa˜"Z©RlÆ+‡këMVª`cQRks¶§usK+s>_ð a¿TRfñÍweaM=ÀGË•ÕÝ Xw±ç¸¹É”ËÆCWººÓ”Zý‚"Ò¨ ¢£Z©uzíIÁ_ ?Æk¥L?iˆ¨×ó8œÄ )¢. _øí¡ÌñM  ©dư24hŽbÑõa:à½:²ÚžA@:}W†šûX%dWì¿‘8¢½ Ψý긿åˤ’ø¬ o{Q#â_£&ª@42å~—®¤AúunÜÖßN÷b䨭Fõ `¼ÿn×ÓAÛ~¬X¶¬¢i×°ÆÛDtÈ´Žìœ'3ûvÓµ•àöúà Ömvì'Š?Ûnà±o/íïçÌ¡å?ëÜcsÇíÇ„ÊçwŸr¼Œ?¤ïÖ­}6 ï¼á ßì·±Þ˜´î3¼39wÈ–b»–£;ðnÜÏì³pÓø@¼ÊN•/1YÀ‹­¬¬LMM]TŽryˆaí,FµÎM"°ZGî~*Í,#š837âãDmL5ëWâÐX,ÏËãñ@õV.úúLQ0©{“T`&–Ðh°FWÝw‹B¨,kiøìæ+oOKÙ4kÌL»?X1 uäÏ}†ÍÖ†vÑc87ãì¡kY3^l+(Üwè;Ȫƒ›Eé±Ë©°5[×ôᨲ¶ŒoÖ~Äÿ¸k,;Ìí"áa9‡¿[ÄÖµðÖŽsÑ¢Mvúѵ·ßýÂlFxXü¥Åw4vlYhÉÐO•V§·M9XоK•J¥"±I-É8ñ!Q,fãY¡ÔAuÿ[žeû£)V…wéH˜D¸6Ó7Ì sbÒ¡ì­÷%•šYÝ»GÂ45þàøÃ¾ÁíBB­—m=˜Ò®ãÒí£Âá‡Ñ!á+ÇH!²ÉY‡9-F¬;¼¡%A9(Œé¿Í¡!àp-Aï6~Ê‚á>„?Ù¶á¬ÌëæÉatRÛ¨QLœY±âè­ÂÞ8kaêñ;‰ã<=`«U+cõHc–b±¸²žk[6UÀe‰Yå+ŽD:Yò5„ª@‰žŠ¢V|€è×¾Sµ‹+V‹"Ã0L‡a(Cö”l6utòà÷QË{9;h=ÓqñÚ‹ûÖõ")Ρ†ß;È!è-µ-¶­Úá{xÒ·“–%D'Vè,:÷õ™wóçì¹}Ê,»Žµ½¸i¬…‚ü;!LHõNAÙ›¼¦ƒðž÷u÷‰Ìœdñ†«®­ÛŸ;¶‡Àª˜ûOâÆömhŽ " I9êDF`D¬ÑÖG+ÍòÙ°¾Î½KVÉl7,À£pN ¥ƒLx˜½å®96Þ¢ÊåYé¦,ñúfbÜB<òd»&£'ü²/$~íÊý´éM| (-þú›b—YÍ-…¢r„Q–›‹[81nÝzø>±4Œ T9¡ÕZÄp±ó³…¶Ü¾›6t„3¿¬";‹Ét t¶aéFïXØQÌÕaÅ1E J«­ª–"¿¸¼º¸£ÚqîiæÞ›ï¿ŸYñ(¶hó˜†ÏÆLÛýzó˜Ö×°{£a}eexy5‚Ƀ/®>ôõCËÇÇo‘(³Ã¸1ëÆNÝߦÅH+®BV~ûá“¡Í[qJÞ^}Yè<©+éZ«Ð•sŸÝ×€=J@’2²ñôÂ÷üü(w^¨,+?_fɇPÐÄqCœ<…S•S:|Ç Ž Á勆:Q2]JjM`ªQAä×=ª˜K´º5ãZ5ñ.ù:f’èìào˜Sú×7!F‘žVfâl#féÊÌ„JŠ"Þ¤Jq’çèÚÂǃȢԤè¸rTlâÊg–gÒe%¯#’ÊT”Èݳ¹»©’ÔP0«¢ž%êЀ¦~HaaniÁ£r“s±ÄÆœ¥onicŸÅe˵lkÛöt˜bÎä(´Ø¢yCW&«bvA+dy9qòžã?SÔDB™BÇgÑè4dÑOoÅ<Æì¾ú¡ïseV&l>›^oŠ)Uê0‚20ÿèšÀµÊã÷)–]SoIuº&`&´™I1;? ³rk …EYY*¡‹öÞˆÉ3o|â…Åä«,´ £CxEAÌ›w2Òħ‘§®¨BdçÀa@ š6þɳ\¥š#q p‡e©™¹¦ö~ú¼¤*;-“%q3ãÓ˜\¨ ê]|V>Nç{6hf/BÔXõ»ù±Ÿº1¥³¥¹¹¤ÆÓqü+rJTs¼žÑÛ§‘»YÝ býN—mnN^lÁ§@S!ß‚$ëmà„~¿^{ctöpñåò¸_9W¢ \=e׋©=½[øTiWxxø£GΞ=ëëë[' ¨Ð`·ß䟖!WãM½Ìû5wt¶âÁ„ú§›ñDóE|‰Â’oÍ_±ºã‚G=¼M kD|îa!☌òu§cô÷u¨;“u ÝÜÂÔC×+åÅKBüÊÑÓ^À3A¡/Q׆¼0õù§é)ˆÔ`òìôLiÏQfogÏb³Œ,\‰Qù#Øõß3W©Õj…B±{÷n0~¯X±"$$dùòåóæÍ«üëêÕ«KKK·nÝZÛ ÈaÒ{˜±HB¶ômjéý¨¹ p8˜ æ3¸ä¾4d×iÝþNú±AWÇ eX³_Wb‰•œACøì:“8‰f˜ŒFÃY¿‡nqQƒâ—Å)ŠNAUÓÎŒÿ N!ŒDîgˆý-¶| NŸ틀­¬<&ŸciaêëîajbbÂáp@© ö-H) t6ýpº¯wïÞ :4,,ÌÉÉiÁ‚kÖ¬Yi@\\œh'*•jÓ¦Mýû÷¯-ÄAQQéå‡ï¦f),¸ß´q±·à=Ž-Ä *¼«{X¨=P¾¯Æ©j÷W…ÕPÄe@ …ÞÏ['Ø­nùœã³+X ÔÁ‚Wgˆøw¶b³Ù,ËÜÜB§sÑjµ:Ž ˆÏDÄt)‘ëÖ]ÌÈ—k f#[[u 4Óè>‹K Ñ»íiLÀQÿïseÀŽ›ØÕã×$%%uìØ±C‡K—.cØ7ïØ±ÃÊʪk×®àW[[ÛÚ3!yùeö¡ÛÉ–bö˜Nî[dž€›’©°¥Gß:Zò— à0h•4úÁ_¿Ÿögˆšø—öÏ‚bŽŒYtE·yûw1¤Å?©3 Ÿ­Ø¸µõ¤3­!-qaåÉMßäz,›580ýæw‹~µ¡Éy²yß„zš_XÒæ¿9F>ŽôW"I`Ôë0•š;7 q¡)Ô ·G÷Äqèùέ %)=¿CÄÜ­UÁ|ï­QD5ú¡ÓTH&…2õÚÒ)!–ÿ°aa®:N9¾Ì6ÞÙáÕª2D ®‡åÕxW—éPi1ÔsGÄL›òöî”FÃaá+¶9Š¡³3W­!Ön˜Ì% »xGÄdÝaâDZ…Þöbk“º´»sMÎ*Òiˆ…UP®2rb`ÙØPO‹–—w|îܹ÷ïß·¶¶öññ*ØÂœtppøî»ï/^\^^.×p²W¥&hB?ÍjþßBž Ù´L¹F­ƒÈªYèÁ|k‰Ä”$ô9"ë¾?\ò;¹xÀŒB,ëfßìÒÞ{èöeÞ§÷Ó·@lÛÎCW5?²4èäâöí(k˦Uß™mƒí!®•••@ŸB  Þ’¸)ìàå Ù{Çir ãO,|}lA»v¸žm׶߬66·Ï¹™ë´–}õiïªVþ¶dƒ€pFÈŠcw®ï]9_*dP\Ï>k¹Y˜+ä̳±´do‘Ê¡öó®æÌésôJ÷±æ¶. šÞ¡\E"cœZKÐP¨ög™õλ¼A­œè´º4×ì‚ÅgbÔ¹lH€‘¿0~¸›Y±krÑw­Ê‰Ù¿æP«Õ€”OŸ> ²J¥jÑ¢ÅÁƒ FÍÞü¥çY;®&®ø&°‰—Åí®”V«-ÌÏýùi>ÛÌÏÎ\ˆ“•þ3 רÜNÚ,Ð…'Õæ\OâŠöÝLZùMG ¯.UrÍñÁÛÉoRJwL 56÷/\í7ßäî›ÚTÈý•R Àb±~þùgggçZ{ç* >kŸC[;"ˆ†~’ä!IR©Tæ'$g>ÏB!®ƒ€oÂdÔð¶É ”1 ±@Tãé>(ˆR«•e%9vÌ‚&ž&vöö&&¦`®Íºxå‰(¹Ûôm›mªá‘Í\È*¬PëÅëÏ µ‡î¤ÜÌß5©Éï, àéé ¸iýúõ7n\²dɬY³jÛ¿Ï‘NÛûjD{×A-ªò„Çã1™Ž"±©§[¹\Z¦QgáF$UCÞPÐ pŠ+¤™r¨@3‚¨Ñ­ }îg”!dq\"±ŸH$b³Ùµ<ïÚû<Ùó„¢-cCê\¯¬ájó˜Àt".2âócʼnȜÕ¡͘ôÿ·žeíÚµ ÙºuëÂ… “““ö9wîœ]­È®ý4¾ˆu#ƒ‚\«m6(;PFSSS±X !PIÖ ˆ °#ofÄY˜±›4sÈÞ”¯rµWeºÑ:±CÇɇé=ͽìDu®cÖ¸"f²èHf‘BädbdÉÏŠR¹vâŽÜÍöMmúÇóååå;wÞ¼y3àßùóç÷èÑ£¤¤döìÙïÞ½«=}ïúëœÝד¶OlìfýY¢åjƒÜ£Ñ)À{(J£ƒžalµƒÈ´²èô²üë¢y]Ã-O"f³™´¬"e€‘ˆ?'NT(u»¯'Mìæ)ª³–Dͱ·½ðâ‹ìR¹Ö”Ï46©O1Í”,«Hyëmî“Ø"Kk|7Ï+;üé²… ¾xñâÎ;eeeC‡MII9yòdãÆ8PëJDAÏÆ6ó‘t ²®öõ••Õ³gOPÛ¶mûæ›oj‰+†$l&ÍØ¤«Ž]×’œ$¼ÎÁ6u·5ÿ¼]Mw^K¢ØHÄe°Ÿx–Sªpèt¶±$"¶¹ˆíç ßÕcF¯¿7Ð&Mš´sçÎ7¢(jnn~ûömpòðáÀ’jOúÊßqèN²VGŒîàZVÂåËÓ§OEEE«W¯¾~ý:8~óæMPPT*•Ó¹sçš-5ARj ÁeqUqûmÞ󄢟f6¯Ó¥¨y"6ã3$dKëÊÆ×5Ûæ¶_Ip¶äëâ±cRUWÁètº£Gé×¥K—;v€c 7lØÀf³GŽY KšU¬¼ý.ot7aõÅ5öîÝüLKK?Ÿ|øÄ‰B¡ÐÛÛ(â”””Ó§OÛØÔÉ…FR•ØælÆ´ÕÕ^¸p¡¸¸TE£FÜÝÝŸ¶ lذÁ`̘1câĉ¡¡¡mÚ´iÒ¤ ÅÇŽ«%1Âè‰E¹åo^fªe/?KK.Ÿ }Ýu²êdtZüûqDõ:5hí"âìbå·ß?ÝømÃ@ç¯+=qdjÙºÓ1óø6p1ýÊûÞ¢ŸÞJD¬©cæåå•””¸¹¹±Ùl™LЯ_¿ŒŒ [[Û­[·ÖæÂÊ+TéIéñLÓÙÃÆÂFÌ`Ò œ@iˆ´L•›^”V(4ç¸úZÙ8™£è×\\P¦ž²ûes‹úêŽø#j×;snk«3O2¾*"ÖbäO÷S›ùX|˜…ÓÓÓGŒ1Ê€ßOîÙ³Ç××·Y³fõ£*t8Q>­gU}£AôêÕ«K—.;w=zôõë×W­Z* œ‡aAjsá‘“^œ“«¨ÐÙ:Il-\ÜíìHîH$ iÔú9 #™l†³·-xÑ(IPq¥ïóeR…›©³—•‰¹ ~wŠý·Þ_x–¹qtCñ×@µKD$—¬?³fx‡­ð+!â§ñEÏÆ˜ÞÌLð‘­eee­[·Þ´i“¹¹9àš/^4lØð矦ÑhÀ_°`A=êAU<Š)Ø+<}{‹O_^^>xðàû÷ï_¸p¡[·n•'Ο??uêÔÚQZ$M‹ÏÏ~_"28ºY‹-Šàþv(ÕÇTÐi*…&?»4+9ÁF]ü¬\%ŒÝVI[‘û.:•åø[ÐaifB>aâã,ùÆ„léœý¯»5²›ÐÍãëQcµŽˆ¦ïy(iñà€¯Å?òVÈfÌíïû·ÍÌÌ—Ëå©©©z2š>}:ÀK–,\ܧOŸ[·nFr8**êÎ; úmãËzP@ Åe–WeÝêîݻϞ=Û²eKFÃb±z Óé*³}y$U”[–ŸŸŸ)µ°4±u’˜›Yšµ´$ð_ïG«þ,A™˜Nÿù\>Û3ÀÉ+ЙÆ@u<öy^Fr.“ÎÞG7 Oøù'* -nÑìÉÍ[úµŽ[ôpÓCs„JO»4§ëâÈïôm¨È~ÁAÞkέìåüW—ÔÆ³1¯ß—®ôu¦Ã­ØË^Ô6P¿ÐîkxOâ Qnæõÿ² 0`ÇŽàÀÁÁá§Ÿ~êÚµ«¥¥%à_ ŽAƒãðððJ®OØwó}s ?§ù=Úºu똘˜¤¤¤«W¯‚J$mذü T›ýå 2Uì«´K‡ž_?ú6þE>„±½üÜ[tlàîçÀá±tZìBR_ìE$ {`3™[‰CZú6ihem[œ£{výý¹½O^ŽÌN-ü}`¨vP¸N 3W]‰¡ÛØoY " ¶çzñ0š2¤Yå#e¶i }òðñ%‚¤¾¿ßcù½Ö~V—–¶ýj“’×F×„ÞØÉ“-99®‹{ËúýVžˆ¤ÓÐüÒÒÒž'Ã8yd\èˆ}¡ÓÜü~4K1¶ßl¥oØÈîÞ׎¾Ëõßrb^e€ta¹zýé˜ÌåÂþutëåúOÄ~ªÄÈ´²-cB>= W­…\…ÍÚÿºCëþ-ùV¦‰ˆŠŠŒ~vïÞ}×®]µpUnõ"«X9kßëQ]»6´ýÛ JJJÌÌÌV­Zµ}ûv///0,‰Åâ+VÄÆÆž9sæóÝXy±<5>/3±˜ÇçÙ:YšXQ‚ëTÝ­mEPª’« óÊ/óDt_K;W “ù…:Ú“ØÂÍçâ<ì ú‹¸_{n™ÚNÄ1qÇ‹¾£:¸Õ×Ú/ªÐLÜù|F/ŸJÄ\\\nôÀP DZµ< kðBÁSAàìy^vzan‰ÄžïêkeíhŽüÝêsPye mZ¾üyBñëäb¹ ³5ç lé8%ÌëoGY#ê Lìî9kÄŽ+‰õàY’™Z”_PQ¢²u´°u–¸{8ºº9€f ,߬¤Šì´‚’B©•£HoZ×ÿE›ÎÅŤ—íšú§Q6''g×®]b±87WŸµ¨¨hèС÷îÝ;tèP¯^½þÛwæ–Ǿ̖jMÍÅkS±PÒ ‰yå<ÐŒZÍ_v$ -Ã0¦8¾-üíœèæüÞõk`Rtº÷Uí¦,dÁÀ4Åû—tÅXçL]q'|õ­¾½æ_M#C-R.ßKëÑXyúb¬ÙòCÝiùG3²S;Í¿¿|©A8i—J‹ÊäZ„7tÚw¯Ru_±gx3‘:¥_¿tÏÁã‡;i Æã} ÂKˆ‹[G²¬ç×MLÙóâ]ûé®÷÷Ã4¸VY^&SY ¸SIK+Pœ€ ® ¥³Jböwµ{МùîB“gì˜Ö=ú¤MÁÁý7s†ÎßöMç¦v|Zq…ŠÍfGŸ7f÷-o÷~ûÎwgCJíŸ7±&IÂ@Ö G7kð¢ÑQBMF=Î+Ì)’j´· ”*NC˜t„†À–býîV!îf“º{¢¨1o\ý"b:Š,èï7sßk`àôjò¿|T&;;ÛÆÆ¦2ŸËÇÝ úêïNÜ9s&===88øûï¿·°¨™ÝðJ *ÒòsSËD&7+‰iÃf•áŸZÍÿš¾Ð„'4q…a`½ÒÔ*]ü«¼Ìä< Çœ<%ÎÞVõ/ÿËšŸ£2‹”g4£R(ìÝ»÷ìÙ³—/_f±X¶¶¶:t˜íÆNìЈŽjÛNø!mÕ€GŒÉ‡¼¹tçkûÜL>Ô/X&×AL3 ` [!œ)vnà¡bP„Jc?sù’Í+— Št¾eë¥{7oîÚe,`p<ºÌ2È…‡Ú8«,…¸V«cº¯Üx`éÎMWþÔuünÙÞ5SG´7÷kÛÙ=´‹„€Ï¥‰}¼‚„°šç<âþݦ;—ùA ¾šÒe¸ö K^ÿ<ûä©Fǰœ´kæŽZŠÓYEÙ/‰4Ô£³GÏû×J#H²4¿";#· 8)Ò‰­Ø¦"_g߉Ïçs¹\eY¸ZP{£&þ„‡ÑÛ.Ç?®‘ƒ…~ë  V:vìØ³gÏvíÚý{רDÙþodï¤I³ÚtO6eƒìae"{OY"""2AÙeˆÈž*C@ SVY-¥t·IWö¾Ë]þï%ÈÇ߉X ´y¾“ïz¹»Ü½yßßû{ž÷mÛ¶5jÔøñããââŽ;Ö´iÓ^½zÁìe0ðêÕ«·jÕªäääçbp ½Ù¥9÷ŠË‹m*,$"X æ’„÷yDyVXš¡Ä’Ÿ]l2XÔ‘â¨D•Lù*ùÀ_ËÔÏÜr}JÏšíë©þæ´½{÷‚‰üp[¶l©Ø #$ED ·Ûít:­V«ÍfµØÌ†2³^g·—!R±B"S‰©¦Æ ï«ì¦ö¯±ìµºÂÒ¼¼\j)Ñ …@,ñ¸ y¾œÃü­–@L±àKù»Îd¯ÛX!¦ôt€¹#G޼råŠJ¥:yò$ØïvîÜ9ðé®]»V¬XúMíÚµ?ú裊-W¡/ñ¥qy¨çñ¹šUL€ÒP÷¼ØaÑét§Ý]¦3æ?ÔA0‘YCÅáVÒ }0cÍØzCoq/Õ_9|ÃA‡¸ ˆ°Ëå²Ûí6› €²ÙdÖ—šE¸×É Ѩ4r‘„G‚3_…À­+Ði¸/Ó™òs f_K‰TÄç ù<Àzùl6p€¼U#Œ>Ä#¯l:ž™2¶qˆ”Š¿êÔ©“X,~ìàõðáC³Ù\¿~ý Ÿ®],'C—u¯Äƒy5‘J¹ZÂæ1=¾ÖJÒ2”A¬f‡6·L›_¤ä†'ÈâHåH±äjáʃéï÷¨Ñ©¾ªÒö.?YÆqà2Ê€+ÛÌú2“¡ÔfÖyùÌ Ð0\Äâ0ðgÊV„ê%(b,·hóK´Ú|”ç+™¹@$ñyB>Ÿh/“É´œ ½ þK9{§ä‹=w|‰JŸ£Jîõ²ÓŠËЬrµ4$\αÁØ{~ÑúlÄ ûŒe–‚ìb‹Ù¦‰•D&¨¤Š—àŽ}#KÿÉÖ›]…Œíÿ»&L˜€aØÊ•+âb±X€ò °Y³f<ïÌ™3€…½t²ì7b8+e۶ šÔ s¹ ¨B¦V…ªƒäB¿¡¬òŽp¦ÑP§+Ñ–äç»H³@Éù¢ ‘€B^>hmÐþ@»à@Þÿ É(²LùæêÐvÑ=[„UàmÁ˾§Ë{PÎá°C£T’`ÍopxÅí„€Ù tÔeÇÊtÆ‚lÊ€"ƒ.?›—þÓˉ›º%û¤ß5žþ‡ÕE§ÓÙ§OŸœœ€wqqq]»v7oe°óí·ßZ:pàÀÊÓ†`˜?~Þ䓇-¯Yª@ì8)àýÝi@~|€BnØoÙý“3{ò·yàÿ_îŸ;:ŸV2g|—;±Ÿí›Üî‡]s ’­j2O¬œ¾>=dã®U±¨{tLc NË­…¹:‡Ý©‰“F%*6ðo‹œ뮳9¿Ü)y­¦b|—8áÉ\T?~¼K—. cöìÙ†}þùç`°ËE‹]¸poذá+Ú ýdˆÅ2bØ-f£‰ZñÓâ“+“ª”j¹@Ì#H¢sÃä%p²¬ØP¬ÓšíeÜ`B¢¤ÖÙÔ:› °ÎöjÉ«]Ö¡~tБ¹í¯>(sÞ©X•`B·„p9ï÷­œJ •ŸQΠ³B#Ub)?&>6"Êã‡8Ìý?ëžö:lF«ÓC’0å!ï…q§Íd¥VË ·ÝF°F}°¥O-6š³·Ù;C ù•ÙM ;8ßn“¡Ñaã®ÅÉÒ³XOõÖg¡3xiÆ÷fß½{µ¬DöîâE­Â¥Ö‚‡Ž}öv¾£,ËÍë²$ez4úqù€åw¥mã°YZƒ^ùÞâÏ›©E,¬|ÓÚ)Ûnº4 í¥_rëô°$-ùs?$/éS|«4¿m¾qB]Ó[ñ7‹GüDܽ£Ó|ñujë0šÙi}ò|?MaÑJfêuY±{f«cqX4/ˆ£j4`ä\)ÍóàèôÁ|¼yý×1ªºÃÇ4 CAþ½ÑÍßK©{tzw—-ß̈=éS1Чý8uø³¾ß½.í›É;²ëønZ1ç½ñm±zƒjsnö}£/½ý;½^cPç#«¦Nƒy³[›úݺ`DZFAt6ÃôùØ“÷p’2X¢÷ÝM½g,¢ ÛL^¾·U”Ì`ÇþBãöz<$ ÔÁjI0N‚"0\î(ÌÉN½’‘† ®`ŸAóÂP˜ŒW/JR;B2oPý¿òË ¾ÿ~°£Ñh¦NöÚk¯8qââÅ‹@¯¿zõêöíÛÛµkׯ_¿ª4¢üSèt:€Å   ¿ã‰?³Ù¬Ë-»oк0#C*R+â Plþ¸âç‡x—Ã]Vb()-rxÊE*D¢à+ë cyQ|Ÿä´·ÊTi ñ+/l&úv‹p°ù0+Óëss óÞºqÓÅBEš0*\Æá1 ùçê¡—ô°YJ™übN®¥ì( *È+SÕæ± Ü¡\ùÐIëÖã矚ÓgdËÙ[.¿äó÷')‹Ç÷ôzqÍe3[pˆº ¬Oá; yÜN7D"$î!Pfri7 Ÿ~ÈüÉ‚Åuº2““†PÊ‹càL `"Aƒ©;p9RîóIYÅ4vç gߪ£t8o"^N|£®#ÞŽ1Z Á}‡’8”su+Í]^nuA2át˜¬&€©>s&AçkÚ¾>©×Ð!¨sýCÙ„Òeac¹­(·¸¨¨b:•QüC¢†©U¾Aÿ…E¾[·n†ì¹rå h…† †††¶lÙrõêÕM}RåhJ†Oh?^ñ³Ûíþ?£1#Mg1tR¨”…0$[™¤Í¥Ó,Z–“(Ù’hQ½úA~$Ð-¾?v/ àWˆ+µM$’&$ð £h¥–Ü/Ì0èœ.=*•(BÂC>ÆG¥x¤zÌ6ÚÀ'ZÞ?øÑÐ7­|¦V¾ô»¸ÂætÓeõë6 fy“´ÙG_ 5mßñUãqƒ¢[ð”‚'Bcq§K¾`ÿ…3Û´Žä ±-†M|«³4¬A#z p#ÜÃG7¬m…lžF}¦ôNŸ·qÙaQ-ê´ì)»ÜxPXÃFì(”ðààLIlƒZ8ÓílAH£·Fô0°_6¾Û.%~Ú[N?´vaç73!6]Ù¨ßä7;ˆâzïݾèËÑßapãîÿ6H.á܇!†©,+õÞ™úE}ÃÃé8þ{…(¼(Š8nm^YaAÍ¥çË!À¼Ä±¢Ðúá|¹\0pšÀú¯0ÈÏ Áå*Õ#÷áeË–ßãÒ¥K"‘èEV6ªTF ðâb±øÉ?›ÕF²Å¸ö—’0žœˆDG‰ø¼~÷2€¼ ëlU¹o¼Ò‹uO#þµ¿zøh-Å=U^j6iqÈÍV)5ê0…DÊ'ÈÊWö¦±ÛÁ¬9…÷ÜUì(/Âïáä© d¨„âÂ(ïü.Ìx‘­a˘ñß•LLr¯Ñd:!õë6^‡ñÌþC™,¼Nã¶jQ˦^Ç3û~ÉðÖnÔ®E’*І ~õÍ4¿­¥ž(‰þ¿C¨ÝȲÕ\fH½Çj-†Ù41å¦ÌâÐ}Q­/‹àS© M[qaII¹– YÅjZLÙDT—Zêù_ꀇS廋J#å4quÚ¼_³ƒ£þÔ›«FæìÞƒýБm!èîŽßÿúÔ…s“ZYz/Ù8­Ëævc�¢@\mŒþè)‹¥,§,ÓpÏé6ÑE|¹J¥’ÊEŠP~ÊÏÏòŽÀ4u;±â¢òâ­Óó”ÁAZSÉó³Bª^Q±9)ㄘ÷((QPoèö™÷†mp]5†È«Wo! ÝÅ%¹N¿Õ»gº‰sù†Ôƒ;Ö;Z,Ùüí. ¼@3€¸z1üž“9+­Èb(Âa7W èr¨\(â$ùߣZÁ÷z½ÞòS±Ng°”0EXš% Õ©-áóÂçá08¼ºBU‚ÃIŠW¿Ìãð§«@zº6mèØAã¾Ö·¡)?]§h·`@ܲ1 ¬ê5mÕ8c¿["¡ÚðUUÇ«›×Äó?FµZ¬f£Á¬/¦<1بD.SËUR&›î!ˆ§Yð£r¸ ¨Åd/Õ•”tšEB—Sµø\ÿÈÃ!à[ZÅdÅ´R“ë³!õM`Ä©# ˆ=Îck±””g²(O !O.—+ƒdÂGFŒGÀ £4syJueeå:;¦(¡ O^WÍÓðù¿ÁÁŸ46`p¨’B^Á"åš"Ä©0#“É|2ªõÉp“);³Ôb(ÂŒ§”„:1W¹©ˆòpP³$ÑBU} Ÿ!ø-ilÀàPM'H³¯ùDÖº€€8 #OFµ>é‰Ȳs~{:}æ±³É BÆ ¨M% þÍàP=22280hÐ ¥RY-ð—r”ð2騇ðZ옄Ïô³cpœÅ$Q«6Zu  ^°ÃoÁ}sÎp"ŽŒ®™fìºî ‹Å¯«­ñðDGGO:`±@ X¸pa•kÑÙoÑÙoÉEØêăE¬"½£Ç¼S»ÎfÆKˆòÅhÅ/þ…Ϧ¯Û#¡µZ¸pòý¯­æÍÂ`0Ö¬Yž——7f̋Œ””àxýúõUø­52îö[ž¸¡¿ë›I;s«xìªK3û×Ö!åâ€o`½ša¢3·tÕ­),Xß°aC  Ì™3gùòå.\hÑ¢Å|>íСƒ^¯_¶lÙìÙ³«p#p˜´¯'6…!¨Øà¼–©_3¾I£XY`˜T+ ؈_‚4‰4Ì2´5U'úFtŠ­níеkׂ‚‚ëׯs¹ÜcÇŽÍ›7à¯F£?ùä‰DrñâEÓçÎëÔ©S£F:wîü\ŸÇ®-²eea6Û‹__øN°7\WÚ$VB»ùK!ñ2œJ½^EÙr/*ŠÁ †¼Øð#~YBz½ƒ¾ü¥[MŸ–áÕêÅùå—äää”””aÆýú믯¿þºP(>|xÛ¶mׯ_ÿý÷߃O.\Èãñ 4h.IOO”9<ü¹4Ayßîæ"Hpƒ†0› Uç:C 0 7óΜ–¼þ†$&` qU—›Y†¥ûïMïS;!TXŧ’ܱcGÓ¦M£££4hÐíÛ·Û( öoÞ¼yþüy‘ˆJ6F%Ú÷zéô'æ œƒ¸&£ªM[ÈítËǿ٭;Â'Oáóx¿õ€i¢*Ë…´­ò( ù|EÛ}íµ×8oÞ<ÿÁmÛ¶9s@óÀ>@äY³f-Z´Èï7ò¢øŸ#I›Ñ(Xã! ÜówT‘΄8LCÈK@Nôƒ×a"±›WÏsk$×ÒP 6\:dw@ž×Ï !4ˆËñÕæòeBu¹ œøó;£¨9ÿÖyÒ®AŒ?[öVÇmv;—à ñ‹#&x)Rfv½SÒ³yu1J¨Õêììlƒ!‘H8Îû0ÑÀF‡èD@utHŽ—A0j/:”بߩRâÒ¨Û‚‰èL:u•×yiPÞɦZ|y$‹ÐeïùltÈkõPx ѳ_ãÁTõ¯ÂK»'~½×Œ[ù€¦KWʨJS/>œ‹êÍFä,x·Wó ûîRpìÑÏÛúͯ.CJá>xb’ýüÆ AK§B…i³Çuê¾ò5üýËú·LU[ûþ|Þ°ѪÏ ð7==}èС€änÚ´éý÷ß_·nÝãOY,ÖW_}U_gqàEåvÑ ZU«w€‹ô½Å-ä0¸, 6z€)2Q ±x,:‡‰†±ï˜˜tTÈ¡±(érSb€>)(L¸ÓfÖåÜùqýü#Ž׎ ¦iíÜrè•{áûáçI’ CÊŠ0ùšz´_²ûaÇÐýgΟ;÷ú©]™íB~ºáðÉ-ƒ½çíd£†}æ¿Ý^ˆ;!Òíõ¢t/ Õ¨”á!¨„'à ¸å—7Ï=˜•ÔüúäÏoxH¼¦@X\¢«Å!½ܤË7]J8ï‡VãuP‘ÉÃ\: Þ#ö€çdPdÜG¨½€,ݹyëÙ|»úÄÖáÇH‰VÙÊJŽ`ç­6Ô¬q–Í'ªƒØÉ ÔUé¥ÕEQT.—GDDŒ=zÛ¶m&“iÑ¢E_|ñÅþýû{ôèñ_n0¡ ÌVPî¸_hN/0 EX.b`M %h„Mãe,íqcӉ̭§²êG½“÷QïÚà¾6'㪗‚0 §¶¿)8Ž 4>ÂŒi?ö— V̸ Šu«;6o–p`o‹·FHÒ@%Ž?4ËìvFlò»µ¯ úð㈘ö;;¿Up{úì);aUÛZÅy<î&\˜ÏLC@ý÷P|&QºÕas“DJ#êwUïJh·nT;Ȧ¿zën0˜³í.‚yt¦(¤Õá‚Öc¦Oĭ쫊VÓ÷Üyõj˜÷óúoN嵫‹@n ˆ½„ÇŽ±:4nþó…×Lè/‡´÷Žå»eN7ä%ÿ¹ÅŒøJÀkâEË\ãäõ¿~3©E˜Œ[5ÞèâÅ‹l6;&&fúôé;vìX±b…F£™5kÖéÓ§SSS'NœøÆo€žþ†N·'«Ø–š¥?{·¤ Ì®”°cT‚F±²Úb™U, t~;â;4½¬^E*ÿîd'½t¥¾F Èã0‹Æ€X¨Ë 7»pˆÁ‘ˆøt‡¼0C.Ü¢ :õ¸¤ ÷  &Ý$I:ÊømŒ *‡#t¦ì iÑ0”)áò6´[ô‰Ðx" ö€Sq’Dÿ ^”p¹=L”0h§Õ`qpÄÁ<:I`˜¥|O ÑQªr!ÄDœz $x`&O"âÒpüi𿯩“Á“&Ëe²ã¾`Äy¡²lÿ½¾­"« ¿÷Þ{8ޝY³æÌ™3‰dÏž=+W®,((7nÜÙ³g,X0sæÌóçÏÿã}²tÖ³wŠßÔÚž°`n‚FÔ²¦¼O«ˆm£^ЛNêvý­i‚òS`øÏô›*|D€ 3X~+“Ýö?# õ©ûû.§ñßç±ÉßßDÀò¥ÁÄœ`gÊ8¾?]nëCDÏãç¡V6 ðØ`ÃÁ\.„ÙÁ>úÿžÖ÷‡ bÓ˜`£\/l¶§ÕA*eUƤdéþ{(ŠŒx•‹¥{<·ÛÍåRIff& K€ð4Ã0³Ù¼víÚwÞyçСC“¼RÛ¹»%?]+²9ñQ‡ú*€¹/§†¿ËåJNNtøÔ©S ¥õN›6mïÞ½çÎû«ÄÁ˜‡¼r¿lû™ìüRÛk>SC”‚_ÙÞ ôðRv›Mo4šl6»ÓIÄ‹(Y]ÞugÝkÓj¨h¨ñÜça2|G"ŠD"‹ˆæqÕ‘›Y†é[®/Ý(>äÕŽ£;xðààÁƒwîÜùÆo@¾ Â$I‚áúø‚ôúÁ7¯ÔÖ<1¸r‚ï_˜(H_%/þÛi(RjrõûòÂòQõëFIÜØËAbØ'þº¢0/´šàyËñÚÕ?Þ_:ê•Aᬬ¬~ýú]¾|ùwÞy2;{·nÝòòò6oÞ\\\¬P(üÔˆÕ‰¸T°ëlvˆ”3²SìšñM^¹ŸÉOý^¢npØùºÏ`“˜ HÅÉ7Çüx¥päWÆ.}:((è±Qâœm˜¹ífÉŒ>µØþÏb1Ùïß,(Î3ÒPFTep@é(•¹‚¬ð!ÓèIxÁ7fßךf©’W7T®1@üjJ±Ñùñæët™;°žR®äO[PP0`À€­[·†‡‡»ÝîÜÜ\ÀsNgJJÊ¡C‡úöí»téÒ¡C‡6mÚT*•hÔ¨ÑçŸþÇû¤ç›¦n¼^'R<½O€?»xpOæÂ¼eN«'$RL%÷þÏà#(ƒNG Ge” ’t—g9w1¶yÿD)ìùW9-Í–{ðìå¸&oÇAO^Kå~§!8F”sîA¡ 'Ô ãð+]0§^¯o׮ݭ[·Ö­[7zôè@z,ÕwÞ¼yÓ§O߸qã„ :vì¸bÅŠüéM2µ–)ß\mYSqrAǶþ½A2Êl&L&W‡ËCÃÂC5X'A€ÌQ “€Öz¼0J‡/IB $eÍ  •ƒNã PãN ÒïnÞ)nôÝš³’:žúxÚÜëIŠªMÅgönÌŠ±±W3ÓQ»C/ˆÆ!ti(iœþfLtËw½=…kµ;]žb¹^Ì÷´.«FR4‚Rù-1›'õ\aÎ- íêI|} ›óܹHffæäÉ“>L§ÓE"QyyùÒ¥K/^|ñâE·ÛýÆolݺ•Çã¾}àÀð)àï)))5kÖ×Þ½{÷‹/¾X³f 8!ÄUAòËìcW]ÖZ‘{%xÆŒ………Ë–-ó—&z,o½õ–Çã9þ<Ðò$ è² ïÞ»w`Ä9ÎÛy+½À´aRóW´2È â}Fja™Ö& "bUB¾¬NÃ`ÂóÈààÁ<ÿò~¸Ó!û`ÑgCÆ}4y¹xé„Î<Ä›}é‡k–èör³§4ä!p’Äq<8ñ®qk‹BÛÏŸÞ‡kÕ»t^„×lù:sÛÌ”s}f&‡ç\ý)m-"=æŽô.Ö¯’CÆ|qtrû8‡Ûý/æ 2ñ¤Ì%ٮœ¼’¢r”YC¯|FŒèèh³ÙìßW(Ÿ}öÙÞ½{µZ­Ëåjß¾ý°aÚ7o~çÎâââF5lØ@öܹs¿ÿþû#G޼ýöÛ€DO:õÓO?½ý÷*‹Õúõ×_ƒsÂÂÂ^ÝXë.Ü+ýt÷­9ê6Ž—Uæç{úôiнÞ|óMÀ¦L™Âb±¤R)Ðæ@ýòé«ê–š]cS.µ­«ß%>€¶ÿO1²8îß,(Ì6@$­ò£Uš£â²Â{!˜ÁdÁ¸Ýls‚›ÒY<‹Ža 4ʈà~0Bé<^ˆNé°€3a”Ç壎Sö ºÛf±»q‹ÇeÒ@Ç ®%)C2è¸ËNÀ4´¢0¦r1ƒÇ²ìy‹‡\#L¨$¾¡í×®]ûùçŸA'OOOýõ×7oÞܦM›“'O%`qTTÔøñã³³³úé'ȋ߳gO@êÅb1`@¬Q£¸6//@ö+Ý!« ŸJÕ-ûáÞÚ MC¥•. DZZZãÆSSSA·L!''ç›o¾ÉÈȨW¯ ~ø!๹¹¹_~ù%I’`òÊÛ¿^´ì@Ú¡Iu"^M”Ááá]mÎý›“«e!áÁt&€åSت£P& öàD©ÖP£c° hi|] ‹Ãx®V¸ .€9à‡~hÕªUß¾}/^¼ÐùÁƒ€‚äççÖ¼eË–¶mÛ>¾äرc@;#Ån·ƒs€j¨wˆ+©ÜÌ2ÌÝ™úÑÛ5+OØ®^¯ß¾}{ƒ @ßò›’’’f̘1oÞ¼={ö%kèС`òjáÂ…£G~£ü”2wGjA¹cÕ¸Æ,zµ®üX^lþní9¡PظU-6å…¼\¾óÿVh4A·¿Ÿšuñâ}{”œ£äÏÃã5Ù±Gès¤× 8¼Ç«·¹lºˆÇâ39LZ°ˆÍf¢2SÌc‹XÁB–TÈzš4&?þø# Ã€ŽÂ^§NM›6MÑo‚+))x½dÉ’Î;C>—Œâââýû÷€¸RE‹køò £_ëÒ(¤ÒñôS§–/_´3‰DÂçó/_¾ìWÖ†fxp°víÚË–-þE€ŸÙŽMX{¹~tÐûÝkTsøº¼ÃépØÌ§¯¤oØ›Ú>\®É•Jµ&ZÉá±HŸÏÙKëþ0B§!„Çãö€Q”{qY‰ øânOaNIa~‘Å^&T¢¡Ñ2•Z%“Ê|ÕŸe…ÉêÀ ÊíZƒS«wF+Vfqé-n‹‘qb”‚_#ãj‚¹!R·nÝÒh4€ÁtéÒ%22råÊ•àøéÓ§û÷ï÷î]©Tú*öÕ*Ä`¨^y©v¸h⛉•üQ'MštàÀ ‹ýUQä§‘Ârû„5WÞn¨Z䟮÷盟ïº>¿_‡ŽL&³ÑTVàp` _®V‡Ê:â%½ÿ½l(ŒÒP˜ôƒ@ŠÀqüUDP:uhß`vð  V¸»ëˆ³7x]Ã™Й•C?¹wâëÙˆÛ‚{êFT$ì%)9ʘ î Þ6…×€ I@ÌQˆ§€à¾²¡øàR!/«¨Ü¤CÙn©†#– „à|!_‡Ãd2i€!?·â~`Ì…æŒBK¶Î’]l³:=5ÂDu"ĉQ­ñŸ*yýúõ2dÈ믿þŠvÔ*Ä{/äíú9{Û‡-Ù¯BŽö;wî€)t©g»PŒ1«. nýv‹0( OÈé[º%ûîîŸÙ–F­‚y\.—Ãá°Z­«Ùb1Ê,ú—×Í’KC4‘j±”ÜWÓùß ‹ûëÖ±sOÙZ¾l×a¹w.×°lr6®Ü³ßÿá¡Î™î¥fÊnÜV»´ú«O6þ”߸UëÄ:í›(õÛ6¦\.NnV+¶Åˆ1íc÷m™µý¤61Š~;§¨ïäï5P_3|Ñe]Œ”G—4y§Çï¼}iÖ"œfÔ–TÓ—^‹O§üß#/øÇnuæ=ÔêJŠ0¯YB’ D"!Ÿ'Z—Ëe±Xt: ïË  ̽<Ó¥ûe7ê3µ–/¹AHËšrÙŸyÄç—Ù>Úxýƒ·j6ˆ z5Œ?UxøeçÛs¹Ã:F¿( ¤–OžíÚ"½cÜêËCÚG÷l@áßË­lcÈ †I1™(àtB¡P¡PaÀe»Ýn°l5—™nßOµš´›&R*Ô¡QJ6‡IúQùŸp™$aˆÔ¼ì¾ýSÂVýþÄ^=–qLMn9æ×Ün·€î^ùI›Vn>1ÜÈÁyÇ.o0nIG ‡dADÖ¯Sc?™1SÀt\9|Ö!ãàî-½­¶½lÅÔÑ5Žþˆx̰ٜE³y˜•æÖ9œ¥‘mÏÚöw-x{Aʾm3‘¤ã›‚Z…C`'ŠrKµEZ‹½Œ앪¸¢¡&)”ϯh/›Íf0y+UF!kGˆÁöøˆÉŽ¿¡=rµð~¡™Ï¦øVÍŽI*Ÿ­:t?RÁUP¸Šñ…´ Å4Ž«úyu6ìãM×;7TWC.//@ù8¥§Á`ð!ý¯Îæ!¯?Ôÿ±e¿£ù¨Û‰„ôY .;N@–­6À•9†ÜÒT‡ËˆyòP•"D†Ðà¿2b€cŒ,F“ g*xŽü¬,¯¢s¤úö® c7®Þúmc¾ËéÂPL…x„‡²W°h0ÍMâ8¸) À Á$Í‹4#ߟ'Ã!š5ÏãÄ쬠<áÆpu-•¼ÇÜnÜË€IN¶ê»ç_Ð^˜’òS~n‘Á\Œ°]2 [,¬hoŸ/x‡ç!".£÷ká`ûz«{õ¡û_ì½;ù­4N/0oûàµWè]ª2Ÿ¸©«!’Vƒìº³·§Mmtr\5d»@kîÞ½;@”””Ο??77÷ã?^¾|¹¿òÞ½|“ 'j„‰þ‘*2|(¡T*õã2eİ;¬v«Õb6[òîæÝ)/pA.¶T¬ÒDªbeÅ%½þÌ–T¤AÊÅÒ‚_7îýõ,ÌkñÍ?“üæÌ9ÖµÛ¿sHÝ´yòd±EãrXy}ÖÏblY1êb­ä!Ý´¹Ü»eÍGÓú7î2¥çM:_Ùòáð|psI¡=&ÈùŠø¥Jî&¼„×ËjØf¤5\áÁÝi#ë¿Ù‰"qìQš7¿ÁBœ6g~Ž®¤L‹AI,ˆh(ªÍçñøà+‰Á¡¢$ˆÏœÕ¿ŽÃí™µíæ¹»% †Ôñ¯ÐóWY±Þâž²á*àA]UñRŒŽgžNÕ}õnS U[ã߯·mÛv×®]þ#_øäô‰£?d°gîÀºÏ|s0F‚ZydÙn£Œ›Ùd4éuV‹Žd""…\­WDAW·¼9ñ kÓ²ïbØF÷ tPF(ðE<B[PV¢ÓY\¥©WÂçõ¯³UBƒÃóiZÜ…ÇÕRÓè¯ Ñ¬²@ü È2×­‰ÝÆJ«pŸË(4¿»öÊ#Ô­~Qz½¾k×®IIIýû÷oÒ¤ `vGíÝ»÷ºuë/xÞ/4ÏÚzszßÚØ>„O0 ó¯øÙlV³ÅdЛŠs,¸+(eÁAR• ÐRÊ®L>´G´6”™ óµ&[ ÌvÊÂØ"‰@( |ÈËårýÄ·$W…{‚Io½w-O¯³±ÙìØÚ¡b¼¯Ãêzp§ÀPnâ‹YquBÔ•:ž¶Êš&ì.*S€[ÅIâêïwJRW.)))..®S§NZZZbbâéÓ§ ÃÒ¥Ký1߀®ÒŽ9r¤°°0$$pŒo~zÐ VZ±íƒúÄoÄÉd¤/_„Ûí¶5´Q+~À—óïëî Ý^GÌW„†«ùB.äk~vÞã÷p€v¬0O«7»³DM ’ó#šÎÀ·òx8wl:‹^£a$•¬EÒ›u»üÁÝ|ÇäjaB@T¹"l«,³™(à V‡§ wÇK÷ËôV÷»Ýª ;w¾~ýú÷߀¸W¯^|>_*•^ܾ}ûE‹ <¸e˖ݺuóŸ¿ÿR^±É5åíšÏQ£¤Æ9%…B¡’T\ö{bØU¨l5›Mw²³m&-Á‚E2©J*g²¾¼™^Èû7d–ðÅÚòÒÕ]Æ•’²Pž´¦0J¨æóª•Á!?«ôAjÍ„Iâè„°H ؿǞ×ûW‰™H0ÿùœ¬ÅR^ãÖ‰”r€À¸¸y+7?«˜ÁFÃãƒck‡¼ôUÊ*kš(19§mºÞ¯UdÇúªªÚ5?ÝuË…“Ÿ®Wå!°ÝÔÔT¾ììv{§ND"ÑÁƒÁG¥¥¥ÿ¥³NÝxmLr\‡—×üF @–ÁóX¶PK~—-eùv·‰Æ¥ËJ¥L ¢Ê›{Ra6XŠ ´g)Âq<R!àñøyèWƒƒÅh¿{5·¬ÈÂd²¢k„Jd|˜Š–©°hHjAAÀ½VgæÝ³É*°âë…ªÂ^‚1³Ê2b ŸIC‘r‹«ª¾`Q¹ãj¦~Vÿ:U‚ì&''Î;iÒ$@¾xñâùóç³²²;·xñâ?±'fn½ñfcM‡—: ?6bæ.“É({<€Ë६—-f‹9?«ü®¾À ¹¸\z›°ºa£8„$D…äð….…¼~Úûü·ð̒ĶS§ß=ö™ß¿äЌΠtNoœøÂ ˆypÏýÔ‚üÌ2ÌéÕD)ÔÁq5cb¨øï ×o})Ÿè,Fbƒ(jÁE}N¿V’•V@’¹FX£Aͮ²@LG!‡QlpVÕÌ(23éH´’_µp–}ûö¼GÆ Û°aCýúõö§FüSùdÛÍh•`pû¨Êó"Ý–ýF @ë(?òĠĆy0q9ñC*ü´÷‘w‡9®ÃÄ™ƒ§ ®F®ZµjíÚµõêÕ;tè ¼£Fò§zÙ¿ÿçŸ>gοƒð_ÉŒ-7€ÍT©-6—é>áp8AAAþà=ø7y)ä´Yë Xq;fMÃæu滥b€9aAÐÉφ͹Uÿê÷?P§Í‡¾R£÷{èÑCŸ ,F[Úµü’B3 aD$„Hd‚º kÄ£ Í8VY²’þ³k¢a1JLI^(/ÍȲÍjÉ8 IEH…-We nž(O9x?·Ä^%¸ÔäTˆÙH²9òÂ… €Þ¾}[­VƒƒË—/‰D‚ þ™Ö‘ÞÉë¯r™è‚¡I¯ñ¯Oáõ8!Aãq÷NÇ¿Õ2Ü “²Q1\Ëžq+‚|y¤,™ù¬°ºQO€ögÜ*Ì{P겑ê…:,8":2<ê‘ÁðU ©ôâõ?$“ÍHLzdÄ \äÝ Ú¬ŒB!Ua¢Äa\þ³[qªrÒá±õ†\ÄšÜã)B’i'wo;[Ðvð¸1>•Ÿ°ݹ›Ö gû„J´>lÙ…& ²w^­¿”Õj´@mJJJýúõsss[·nœœ x1øÔf³aöÇ9¿»Û3~õåovÿºP@þ¥˜2Nm=k8ì-‰_Ųg.^²UP«Ûð Yó˜r6._v×à…5M?×_ñOVÓÂì²û7ó-z7Uz*NÍá±|˜[aˆ‹Ð˜t˜ÀpÏ /˜FgÀ$†y¼• †Pë«$x·ËS˜]¢+*ãh‘‰òØÚ!¾ò+ öÉ™ÛÅ«¥§Œm¢”<Íd…o›ÜmsV0y÷\§µ§¦uŒ„°Âñ“Ùã÷,îEE۳Ϯٲ_g£‡´ÿ~ço%½dîýâÌ;Z—ˆŒQpxìŒ{$‰‡DÅ×װد6ñŸ2eÊwß}wêÔ©˜˜ðç;^¸páÓ°ÅÜÛ»k¯ôm> M.6³ãÞµ<]¾õÒÃcÕb™èò¤—†Ó6íÛ§5Ø Òã×=t€’áÁˆÿ„9&m÷'u§<ìxyÃJ%-{ïîcª×Þj¦á»þ4›³¢³y`žÙ±#%ÃÀL¶ÝÛSZF 0Ï¿Ÿ.˜:ª»¹ÕÚM£ëmOsø7,ÒsédfëA³ßòjw{a|øR«Ù‘“QäpØ%rNbM°JR­Ÿá ÞOEŠñM:|Ë~ÿè—õÞª×^0l󿉱ï¶nÿwq¯Ø}ëU¾xÙ€ ®œ£m[ΙzêT÷Øçîn,³Ü»ž¯×Ù¸|Nl­P‘„#ð㺖@Pµªàváï–é9zluXŒÜW0¡²*+ÏÞ½{óíÔ©SݺuŸ<ˆ0—Ëýᇞþn‡-\þýEÃÔ `b…K¹Å}1­ôVŽáf–Þá&"”|!‡ÎD!–Å^SÈôؽò™J#£3h¾@Â'ÐÎEîoé8ý«™k®¼ Y~ýªÉû),¹<°&ƒ€M¿ZuI§ç)ây/‚Ìývß&~ÒèöñRnúéÈv8¶Wû9Ø?rx«EÝ=9X{,ÝÂÖ>›Ý®ßØh÷ÕózUç:ŠÃßN]ôõ/aÍßhZ³ÖÝG5Š _=°iß…»8‹Õ©ïôV‘"¯;{Æ;¯?ˆûò»¹=AB^ÜíˆÍâòKo}»áÐÏ6ŒßuØ v 'Vþàä± ¨^˜ýðÑ“NZÒÐñƒ5tîe°h¥{W¯ºl†šwzýÁÆ©º¦KViâò@^ÂMBLyùíä:/ú~L…Ù‰ÿ?x¥¼–‚ ©ŒKµ0PEˆk4 çpŸº³êWq~'9ö£M×{6 —?]-nÒ Aš}7/Ú¯qû[£cy\˜j%íõL8ªc]?7cIBByïäž"ýf~^F)I á1 u¸¬vRI>ZÒõ࿟É=¾õ LÇÕÖ\ö’Þì;z€Ë.—SªÔl^©âˆf̘‘žžÈ/F[³fM³fÍŽ;öÚkT®,päĉO+ÌCNZw…†"Gæw £H4+JÀ$ôZÑ–“™NŒìÖ$ôjð¯¡Øœ~=ßXæds˜¡‘J—ÒÀÈßrÒã¸ç‚Ðpsá–”©×†l­}ȸ =ëó‹¯oéÿÑöù[¯ˆ`”Ý;Ô»M­Ñ{.×ä™&.˜Wsç:×Ùý¿ß]쨵òøú®›¯~¹óC×]sœûÕ©¥ øà‹Ž¬Ü°úaãN¯ÍÿþŽÃí™Ú³æîi­÷+—ËEÐÜt Vž­…ÊY˜‹UsùlFü.jJó`M 4î‹ÞñÄ–Ùo}¹gwÿMLÚ´ggêôÞµ›'¾ šfƒíί¹åZ+,Ÿ*ô¯³¤—¬\mSÅ-)ÕÉåÀ²Ó‹ åF®_/TüWü>üðÃÍ›7Ÿ;w.!ÊLôðáÃC‡ݹsgüøñIIIÿ‚¯³È¢a ‚\q’Sl¿æÊÀ¶ý[?‹ÃÉãdÍþŠSþJ€@Êu£c!…\©äRl^‚ «à<*ú‡ ȵy¥E…Z‹«„ ËÔ|ªèŸ@È÷åàšÒSÕˆ!_í2À§>ê]«MmÅó¸?è‘©9÷Kp'¤ V…Óè(Å òUê^¾:ê€,›Ê,Yé…Sh„5…?[Ð=œ]»vµX,G}¶RçÇoh—ÿp¯f˜xZïZ~‚+R V7@áÞ-Ã{4ÕT5Œ|œ¬™Ê?G¥Ô0™¨N²z1ä+u<ñ«+më(Çu‰¯êÓ¯KàˆJáðý¾ë$TU–Zê…aÂCä?,Ö–±yhd¢"¦vÈ¿²-¢zš@ xúKê¬+¤=(4ïšÐµq(ç ³·ßDmV¿ç’:êI#•MÃfóek6Ë-¥ùÈÅ‘¡á*I°ÈWgª’’e˜(ø›ÙQ˜«-)Óâ°YÊ’(v…BÊFÊc±Yþ¢Ï¡^í€Ø/ ¿»sé~Ù²Ñ"¼{­Ó龃ʑ´°(¥L)¡Œ­Õ‘žd•L˜wã¿Mû^ªÀƒNC€"÷,þäÏ¢ oé¯[NßjÓyd4ÇÉ:›ß<¸í‡Ë÷Ü(ÕxÀè7ã6ù;] ¥:šÕâÌJ+p:R/!I#STØŠ_j¶açÏÙwrƒÚD¦Fó­¦#\Vòî¥öRéYª1xR+ð$LƒCÐbZþ—½r‹{ÔŠ ¾]«Y‹¨^ñ¤ÃO–­V³ÉdÖ[E–ȃ•êp%›C1È—hÄð`ŒÒ’Â2mQ‘Õ]ʆ¥!<‘HÈUzŠ[Áµ®«)û{á´×@‹ÏP7$ˆó·ˆÌÏ*»=ßfÂ¥2‰&ZÁd1ù®ÿiãѹ¬Ü=­ÇŽË+‡ZݸmRg ¦Á(“åÉùd|÷Ý× jt_¸yîŽÛÐÚ‹»TûÖPÜí"½k>˜ÛIP ³(‹Idž2™l˜Š¥$Ÿ$« :"Y˜ê6£ÍÇ2žÉ‡úRzéâ}ikÇ7 ±^ü{üΈa±š->+FyÝ®‡,¹R¥T¨e”_üó7îùM½ OÊLEù:½EKãSb‰Ð¼|ßïáàGÞ OÌDƒª«HÌo&5·8ðõÇ»VT?:¨]]e„œÌeÑ«É~çל’| e†ÅªE~:‰äouÔ±¿w/#¨ ‡.D5oéÒ Ëß›"•-Ô&ë¦*©»`iý_à Ysv¿¸Ëü#[Gd_6lúö)gF…díÛò8¯ÛÞÅkê(yº+K/þeÆòoß ÇæMlrNüþ¦ûÀ.'!”)0^XÐzâ§G­]3j€Žo›Õv7<`ÛÜqbÈ}bU÷÷L™Ë§0‹Zu¦9ÒÇŽ«è»aYÿ:§7Œ™°Ç³uûú´/»¯ÎköÓ®ò/œÎq«›Ö Å\.’Î=¹Ç^ŠŒÂcÑqë/CRû@ªSš…P~š=÷A¦ÉhJ™‰IaþZa+¶þ§Œ“©:_ÞsÈgí€>Ùž*äЛ'·¨¡˜Þ§ö'ý~ß¹Á”âxpUx‰žÔÂ]f¯\}¥Ctr¹_B£O¡B l‘Úqr!ÑhK,ÿ·ñë}¬Šô’Ìî>c+ tpËfÿ¿dÍ–ÂeieùN¯ƒ#(Ô¡JQ€òĨ #†ß›Óau—êµÄÊ ’ "š êðkðùüYzªú±_ú=jø µzG‘Á~o_zÁ­â„:1Q áaa¨¯ÆùÇx¶¿ë)º“n/iÕªE]»ôßU÷ŠòçIûÝ÷LéqrÎ:ðNyð»ï°¤÷Æ4 1,êzúÖZ¹}ÛöîwBÕÈ!ÓkÊØ0VôÝ®]¹éųÏàHÒ¾µFdÃ=|3†“êˆäwû `þ_{×E•¿§îÎö¾ÙMOHh$Ѥ HáN<½¿åîD¬à(Ê¡X© ˆ '¨(( ˆôÞBú¦l’í;;ýÿÞ.DŠ@B ó¹†ÙÙiûvæ{¿÷½_áÃ,ŠK‰V0–´˜bJ5Š( äÐæ%_ ß·â©C ˆöžÎt]àž'æßy)7Õ÷žþêÿ=A’‚ÄVÏ친xð“?åF˜@]š%8œb÷wFV2A¤Ë¨,¨ýfÅFµ™(о?RlhJIÜÑÆþÇn©i— tÏ[ " y›ÉÌÎG7–‚§Ñ÷õ²O¾("~xDv¢‰…ÏWyhÞV#Íîž<ª›FdÏýPê²O_¾}aí¦ó3µ>äºÔä ®±(p´®h?ªë«Ä¥†óÅÞ“µÛŽTMÙǯ¿#v}Å)`r Ô!9êËf{Ùç÷`q“ã%…þ:¯”Lv‹Ã™ä¤ÔpàÕp#6ÛžåjWME…+ÄWkí˜=Qko«o¦KÒëÚ4ÐÃA&âÆ…Ó¬²êˆ4sº§£±¦¶æÀ©üê¢"­Æø´æÉ»ô ‚pn4ýE]<è¶#¡ •2pþì]ƒÅº<ºyþ4-F€Ÿ`=ß;ÿñ9ÿÞrçcw¥çý8gÍÑÌGßcdOr<ÍòœÈ³AÄ:hÈðO÷¬±v?®cš;oã·•:- ï]hB°‚6£ú´¢e‡¬Sïm)¨è(_>ëuXïÎ`<½1Ä Í»ìëÜà3u~nÒ@¬æøg{óŒ˜ËÚ­iCfîþëô£ðe§6“à:¥Ó€.^£¯:¬Æø:ÚEµc¾ Ð…ye•å,ì U\¢©Ë§Åb½Ïhzv Uâ½óÕñõ;Ëÿw¸:ám% ‚6)¦‹IŠ Ã, ã×XDLàHí©·×­§Û>öÀ´·Öü»½ŽCP©Ý3bØÖvºã%;ÇŽè¦A%ÿ‰í/}ôÍHÍ:özdL7•ÀÂ\\¨ŸX¾ò͹kTmúNÞ¦ä»õï}ü³» ?¦{iäÒ‹Jh(`N*œ³¼¬&ôÜGû&õmž}C–­O¢hÑl6Ç‹ñõ§be³½>oµ¯¬úh0\‡jÉ8‡ÃisZyž—ì"Vô°´§ÖWQVá¥+I cOURtÙí`H…Nû‹‡Ãõ-=uëjÄ—žR€ÚœRA’/à}r­Ëï©à”¨ÑéLHËHPi”RÔ/ò×ÄJ`“`LóŽQ ,C×ôUrÞ°l4ÚRÁ‹N ¨È1,XR*)‰£ÏȲØT`ÁY$pvÉ1a>ª>Âñ4[1˜¬Â$`Q`Il´ð5 &…J †•.o_`àâ]ÅÕÅE¥HÊ$Ø“t£Á 7è¢~<àAªÙ}—ïί9é è”ðì²}”uBî…øÜ>šÜ2ËÒæDmi4"¦Úý½FOïôô‚¡Çþ5q»óÛU³œÜñ‡G?­õꟘe£¿Ð|óá»B5¢¥‚y÷ÑÑ „a{çŽ.ÿdVï•¥“Û'®ú¢òõÿ¾t{úúˆÉ{³&®øGÐ/œ4á´ÿ× †cÞÆ¬×¥P ׺ LÙý5Ê ¿ÙSþæçG_y°cÎM˜#éþöÊ~¹ñ÷vËh¡L†QÁܓײô”LÄ8¥P_ÿËáœð™ ¢Â}ùûkJ"¯³Zi‰Zƒ2êÍD„B¿8`ƒI¯ ++*\ÆmtàÖ½3ÛÐRŸQ²ù»K[ZõTn¦eù–S·µ´_tî^à«‘ˆ²<è»A5uîëýeiêýÛæôDBQà$‰?¥BI»JCˆ™®õ(Ô£t Ñé0ÓyÔ³§†oà¾{æÝ1åËU3ÿþÈëý7Z³ÒõU"ñǡÆ´µ \cº*žn™sZÜy¡¯SýRFkë‘ê9ŸNwè>ÑíìõMÆlЉ1OŒ¸t_›öÍ:æf€ëÍRëZ–&®TÄÆr¬7ŽË>èS¸%­ÂîŒOH#7SpôHÃ0ðh×TyJ Ë뤖µ§hŒfƒÁ`#»XàPý„ÆU¹Ëww?¿|÷,ûcƒZ5Š_¤ ?MnžeÉèØˆÒDÌðVÐè£3›$HÌM'LB8ÀÔ`Ááz, Ü#àø)?ED8ÑGpÒTŠR$×øÞâ¤J8öµËÒÕšÓ_Eà'Ê|óÖ;\ì!p|èíÉ`¤²lSA]ýË=-úvL@oüHC_Þ<þîŒ_cݨ-â«ÐbªïÏÊ„â÷ù*ò*O¸KBBHeÖ;“ÒâM6󿹑ÒMÄüxèSV誨*çq(«Yºô®†öú6õ~+ˆÈWî)©> =¸^—˜’`³[0âì¿«/8Ày6_¨¤°¬Î[¨BöÉ®ËjfÔ’n?žú´(•ȼ ‹Æ€Ê«&MdÅþïdþ<¼¿]É â¥ú+(½ "Øq¼²bSëÞ÷ÉÒ""zz=Ò}bÕñY+ìÐïþ-5ÈU/w)ò¨À6‹StîÓbƈÖ0·lSÁº¥?®âñ®¶Ž'‡dÉÉêàÅŽiŸË<°hͳCúÈМ!éSWÍß·3Š âç?ža”vÈ5{ dø:ôÌ€jcÆrLĤìóûêªa:W”ÕYÎäÔµN]`*ìß÷Ã"1>å¡¢ γEZ£ƒ°&è`jT½AhöƇp6ùŒF<Ó’˜¨L &$(Ú’(¤ŒTR8”hq2øé,¶8”qÔ¡ç ^ùfÁ -°Z£% å°/ð¡Ht_Q?.zwÂíîãt¨@.Ö(‘HQˆß0Ò&ãžÿ< AŠ šNŒýL0dŠÈdÓ»o=²Õ¶çÝQ*ä̾tá$D¡€yÿC,ô=ÔP(°gÁE‚ Sϰ4GP*œFhh°A '·¸œ=Míú^è¾Vã‹L]´[¯QÌÛQ«ºU¬®‹jÄá£î¹¹gª¸n&õ—ïl±äé>˱?}óêp¼t}ï¡/ûpÛ½݆oXuè¿YDá·;B=ÿÐæÚ³‘Ë|]ƒ¢(@ˆN§3###;»ým]oïy÷÷Œ¸£ûôø¶ß¿/ïÛÿmݸgûþŠ·ÀÅ ­À94Q.öBàH ê­ Ú}lëÿ¶ü¼CIè'm³šœöþ#ºôxW÷nwätÌmÙ¢ebb’Ùl޹õܰ>=gŒ>®A/5~ò»³úÍ)×™P¦|ÓöB„¤ÿõø£–îGÌ¢™Sº¿ö#B’*JY´ïçémFLæÒŸ–µúò^–,ýny›AóÜ&³H—múéØEMb‰)1R$Rs°Ïà oî *ÀÜN` 'ÔJ¡`ë÷Mý´ŒEH©9Ôsä£oí #F‘^¿oåž»M|g?ƒ(ƒ³Ÿž|ç ßa&½Rå{å¯ýaö÷ˆA³{åëh΃¯_®th¾›÷böcKk È× ûâì%Æ VµèÉî÷k1êÕ|“w«?{êÖ‹7þ×ûÎ,ÝøO #å_¼¹â¨¢vϯ¼ü¢=Mê '/È´ÎZK·É¤áš•“¥‰ëŒz÷¸_™ñƒ÷•ŵy5ÇÂ|@©WÅ%&'ê:À·±¼±Š‘0Su_I¿1ž´ÆZ¤tú,ý÷²Æ›gküôrŽFÖ]Î"ö ½ú-~|¨ç Ã–ì×§N<%‚<ÅsÐh…“’ðP‘P8­}î+û >wZ§»û+ž_¹9ïµaC0GvçÌ}ãé6"r° à7"ì %¬‡6,`@°žÇapxËãЕ‹mCKè£ÛÀ"ø£ÀD¤pç’CÖ¹ïw%³<<ªÇê×lßÃÎs©YmGvJBüá["ÛN•¹C4¤ì<µÇ/i?·J6¬{¾çß>ØýÄvÎ~(Fõܲ t&+Ìà—úLùcëæ£o½ýL:N»ñ Ò@¹~Úx ëüåñà—Ï þ•÷ï_?Ó,ñ­i,_8ãw¦ößþ ?^ðUñg&-Õ*M¼=Yëè`h®O†ÎeZÝõŠ—o\‹ø²D¬Žl9X¥k¾ió{˧Ï}{éc» ¹-ÛºpóÞŠ‘­ƒÛ×¾°2¿Õ¤¾ˆÀ’8^šì…5ß®ÛiÓ’Å«ÙôïºÛN~µ³ÎšõÃï/žöæüÿ7ªëP½V‰–Uøm´*r’$ð ?àµV”Uœ ZS "Ù‘Fù×~Ÿ?dL»ó—n9êMJ` ئ¤¢ l©V¢°Þš žØvb›Ï§ÍýºÓÌ~†È±¾¿­Í°Ñ}ÅŸX–•‚ÀžC` eXÿ·D,bpËÜZoü©ÓÛ_Ÿôïm‹ŸìŽß²…þДE;žy£;oãØÓËÚ»ïÿMê34ú~à+«^Ëë’5⛆ŽÎË"Ïì8R>sÅ.•fŒéÔ.ÓA€Ñ6¥Œ™½MæûÆ4b|Ë?mFMÔ¸7*øú8 h0Pày„á%u F` ãšá’„®¾B4—&qfK‡–/ ñ†Ñßgö%à„/@?bŠD:ƒƒÇÖ œ|S’Pá`i3¸oäÜmÎÞWŒ^!‰ŸžèãNobT8Ë6ª2ãÀx†ît |. ¥P´Ã•2Ø”ÝG£¸ü çÅüaöÕ ¹Þ¤¸˜ãÅ'ÄbUê5bA„-zõMÀ"[Ä7Ÿˆq¬”cCej³LŽ“fU5¾~D¸&9> PÑklcòýL¨LC/OÞܯXÓzõúc²/ è³¶ žY,zözú×܆ÏÛ¦~_pö‚#ü9—Áþ†6BèP@$9MÞ0æžr_Öãïï\ümþŸú5oJw `áÿ{oGŠ]û˜öÑ<@s¼ö# ã‡údÞw»lß\8P虾dïsc²&f.z¢û»ëûBìœI.[÷¦MÓ•5žª£Û[×}«w&ô;¢ˆÈw,sC‘»ÄMW4•––j6™À¨!»nÜëúà›¼7þÜ)Ѫib­2cÙ¾*/]í‹tlf9\äylPËm7Å•ËD|“á«]e uût3'ˆÏ,Ùk3PS‡µ)® šõʦ”C psr,[çñ”T¸}¥'â½»Q·ãå[Ö#P…XªÏÑ%!!1Þa×ét dáÆ¿±õíœönÖôZfÑÆü¥› LÅk“r3ãõ7ËeËD|cÏÉÚ9Ÿ™1*»U’¡ Íhbb˜ófÖ †" Ãóü-{ßb£êU*ƒN£×ëcˆ¿ÕæÙeûtjbÚ°¶M²‰öªµê”I6íMtͲF|#'ZÞéÕÕ‡æÿ¥«†j²?%`* ³Ù ‡¹Å­‡X¨NÃKµ_ˆ4‡öH±‡á„óä,QÐs*vH‚s‘¼ÑAÓLþ²â<7)™ñ\XúP0l‹×gå&Ì:Ù"–шDéï‹÷(lÖƒåÖÑ@l9X¹àë¼yt±žýÊ[g§aCV{¶OŠgß²ÛÌý׿†´Ò‰а„R­Rœ&nIä¡J¨Õªë33úã’“Õ'ö•²ÑgÊhHi0›ÖY¡çpv‡9UŠó+Ë‹ª$·mž¨PÜp"žLÄM™ÿs²Mý÷ûÛÉM!£!(u‡Æ¿±uþ£][&ž/j ùß>rî=~½øóÇVí“V0yðhýÄå³ïË(ßü¯~Óö­Ø±Ê3{üß¾ÍØµéÙš²CùnÓm¯Íe{Üþû‹ë*6£U‚9NM0+5„Äàðƒ• ‚>úÔÑòºZ¯JK¶ÊIJ„Åmo€ª}27€1æ´Å»8>{b®Ü2‚×>=\Rzë‘.~ä=¶²Ûm/?³mÛ˜,Sñ×/´}`ÕC¤–8IRPéƒÆ Í4ñ›Îyú™žN“¼9»wfc ü#ö䡲ÂcÕ(B$¦Å%7‹Cq–\¸âT|Ñr3°¢¸Ûå)<áŠDÂŽdS«œd½ñúx’ÈDÜtðêêCûOÕ½óèm&­Bn —FquhÊ»'öÉè—›pÞGtÁºžw¿2mãæ!j„-œÒoðáöS>~}œªæäGß0°ág_ÒíîèÕŸÞ{`Þ/¬žqÏU$±¼Ð}tOi$È›,Æf­aqÈó‡ÆÀéݼPœ_YYêÆ)=Ë‘Ñ&ž$¯‘ˆ!q“Âwû]¯­>üÜèöݲìrkȸ4œªûÛ»ÿýp§¬‹Ò¾6ðÖŽì.v—ùUjuZ‹xKœ!š Vº^Ô›…"†?\xÜåõø´FeëœdgŠm4C&â¦O}ìŸ3ôÏÊÆnÙ”2†-+_[sxæƒ:6»vYä™{ò°«àH"ñIö¤fqXLpnD6Šæò†å«ËëJ *†ŽO3µÎI¥)e"–qi|¹³ôßk͕ݣMœÜ2.’êÐcïþ|´þÞH§$S^TsdW1íçŒfCJ‹x–c5n.úAë«ÛÅùîÊZŒ@2Û9›µŽ'È+ò•‰¸É‚ãÅ—VÈ/÷¿617ɦ‘DÆÅŒÑY8Râ}cRçëÕ1ô|uÁ#»ŠªJ|*•:9Ãi¶C÷Œ­ZãU1N{b„‹N¸ü~¿ÎDeuNq$™Ðߘê]&â&ŽŠ:úKöh(bÖƒë $Ëq!jüÌ?ïtðÒíã-¿™ŽY†+8â:yÈ%p˜#Á–˜‡˜ ÀÜ ¿•cP “8VÂÝWJå?Ì]»}Иgsuå‹–Ì%:<:,ÇÉrü/&÷•%Û&•dÙþÿ.Xü…ŸBEc§§ûs’Zbùß0COž1\u%§*yIhfnÝ1Y«¿|cÊD|K °2øÌÒ½‰VõKc;ÔûäËq!Bþƒ yëw•ÝÛ5yäifò‚ƒ«¤öèÎ Ñô)™NNuÅ‚Féˆ-óYpH”ªOþñÙO‡géiI)z¯Ïó¾ðÎöû­ÇÇMì§úùë÷µ 3,Lªp¿ûäèõÔèÕ3Fp¡"1'q>â „”j’@%¨(@–ަ=E`1AŒ¤HÉWWK‹¨Þ`¥0žáE…R…Á|©îþüΑ3'Ì^ûp®Ùáç÷'¼Œq_RPYSUGRHóì„ôVâ×<1äç[iíÊi=NUÿ<ï'@Ä/ëgTÉÍ"ãB€ÁÓã÷¶/` o>P±nGi]€ÉŒ×[ôJ³žØ>®:¯²8¯F¡P%¥9­vCË6-¡ÜX†¿Â³“*ªjע痗Ïùj½°rìÔkÿñ‡©„Ç—¢Õ£ñí1· 1zR­ÞfRQ Éa³"HÙÆ=¦¼uï´óÆ …àûS{i˜¼túxƒ^÷æ •ßýÕÜ¿W®úáþ…KÞïb<ÿPmö'O»¥ÃPe «¿ZüC&f¥Øh–¯@H‰vGЦNJw$7sÆ<1ò÷z‹OV„‚cœ:»kšÕa”‰ø–CºCûá”;Às5kÕÁ|—úˆv]ZØäf‘ñ«°ê•ú§‚W½|òPÑî ûØ‘˜ìt$Ù!DË–\µS¢ Ô³ãñG^h>|NªèÇû?œ¾tÐßßX¸ô™I1Ù1ô­ˆZãgˆXdh& " ™ˆ¨`X!5£ÿ„}™€'ÀBŽ&(ùìëºHöÆ…³×²š9üéÉ!–SZ÷ægÇ-)úÏò5;Ÿ ú:Ì^Åæ„WK’V¯iÑ6­¶Ê[t²lÓç{SZÚ:ÜÖ\¡PÈD|Ë 6çLênè6L[´gh·”G´¸¥ë˜Éhx^°%›sô˜ÇëñùË®.J´Úbr¤e&™m*ÂÂï7!QB£ðÌ›òxE»)ß=3’r˜ùη–|8lÈÙ]{=kAaísnADž Q5ÃEWªà¡ƒùÞq”UA sÑè;£²;·ëµÇ4üçåw7PCúó˜Ñc6NÿÉ|r\»äÒÃë¦E ñ‡˜[tlÃוx"qØÕ™TD‚ DA‚.Éy¥•U.žð[UV‡!µ³ÁdL6M1q[Öˆou.ö¼¶æ°Ÿæþ:¨uÏl‡Ü 2.e×8ZGñLbR¿?àóû}5•þºrV)ãã’Óã5z ð ËD5œ^$ÀÅ*µFbC4'œ6L¥Öb|8Ä£:J¡¬„«ÕZ„ ÒœX?;ì\•ŠB%‘eÀ†Jµ§Ã!1|”ŠÂaõW>Z‹ G"à° ¥Pàm%‘a8©ˆH¡Ò(IšpâïÜ€e'1A#4ç*®*). rn½·%êô½^gÐëôZ­¶¾zz,‘žLÄ2~yÀ¶¬œÿÅqš|jhV»4“Ü&2.‹XE–e#‘H0ôù}°Ä­×[] ×"Z…-9=É‘`U(I˜œ§‘Ô¯`yt 8±Îí=•Wâ V:Öž¬1Y :$_N§V«¡þ@K^*±ŒsG ‚ôÙOÅ‹6äe§›Ò:Þ¬–ÛDFûrÀË<Ï^‡Ãþ@Ô\øêjüî’V™ Ž´Œ$ƒEw¥"Æõ,Kà‚ …ƒLÑÉÒêjO, ”Å©‹Ú¼yÙ«T*cfoC<ëd"–ñë³ÂÊ-§>ÝVœæÐþ¹_sÀËr›Èø"0–C¡P ÊËþ ¯Æå÷ºXœ78 ‰iñjÅP°åLD(ðá+J«KKJi¡NgǬ :£1föê5J¥f/6Å~óŒ‹LÄ2.A”¶¨\¸!¥1w¥ê’ÔÄ*±Ë¸–"MÓÁ`ÒrÀëõù«KáZTCÚ’RmË#b`8ŠEO­¯¸ Ôª"ô¬-&8hõ:­0/EQ—d"–Ñ(8Qæ[ðMþÁº>9 £ïJ“… W"b0 ‡cÆr è¯sûÝ¥A1¤6êâRÒ &0.ñ‰g„Ñ%…åîšJQé7ÇS‡N§3À™¶¨Ù ˜·á‚ƒLÄ2šÛr bå…a†ï›“0¼{ªÍ@ÉÍ"ãÊE ¿ßçø;»]~o‹sFG\¼3ÉE „«W±ð´‡ª*jÊJK¤NkCm‰€w¡{ƒz8³—úÝ‚ƒLÄ2®êÌwû+>ÝZn¥þî»=Å 'µqÅ"0–¡ˆ€r>o ºÔ®EÕ¸5!)Éj7“ âwˆxÑçñ—•ú#nRÏØ’4&‹>*8œöpP*•1潺f¯LÄ2®ª½‘{Ë×í(å)'Ã2¸KR»T"KÊ2bƯ(° ó ÁEƒ3p’À/+bDgüÐXú~òî÷…1ç&ÂBþ:HPP“QuaUƒzƒ¦é3¼ '©x],Æí6§ÃGAe#|MuËU΢ubO:[pÐ^‰‡Cc@q–ÑX Åà{ë ±?w¿¼â`Ae %N››aîÕ>>Ý©“Íå[È"æÂÚœ Û—>òTŸ.§¬[8.&ôEP@Cîí¯õzè“—>ÿiH ÒwlU÷ÛgOZþýCuçš·( Q³Ù\ï¶õÄ„BA&Ì/Ú¹dñ‰–NC¯‰úLmN{«NŸ¦ÓžÀ¾×Ñ앉XÆõ‡Q£è—“^§y9È-ñ®ÙZ´õhµ’Ä2úmݲlzµ¬/7eˆ ÍZÒ?:˜7­o‹ûŽÏ©6àðâúåÕ½ž, ¶1´1²Ã”e~6¶ãƒ—(Þ (U-»Ê‚ß æ•z:gÆÍy17Ѫ–P¼>¤â1{e"–qãñ²Vq{k;xM;³¦¤:´å`Õ¦ý®“.¿YG¥Úµ2Ìš[“¬T6››‰ð’'Ø´¯n(\ýÁ÷ÏÚÐgê`AÆ<>þ½þ¯¼¸¦Å”A;?~ù“ü^¯/8‡…%D Ò|^™ÿX©ïh©·ÚK»ji­Š¸½•=7ÓÒ»CÂýw¤Ý¼-#kÄ2n\T{#EU½u;NÔTyi‡‘J¶k5ƒ—]ö–kJf²( ¢ägw€/u‡Kª¼…žZ_ÄOsÞ«Q‘Íœºæ ºÔ8m¢Eã4«´*²‰µ€LÄ2nª'V’ª<‘‚Jÿ‰2ÿá"O^¹_¥À­*ÎHe&Ú¥š2âuj¥<λžŒ"FóûBl•7âöFªý·?Í a†Exð7æôj2Þ¢q˜)§I èÕ¤Ušu «Žvî­V€\&bMšsÕ†KkÂÇK}‡Š<¥î ^­Ð©HŠ0k•ÉvMŠ]›`U§Ø4Žá˜,v\ D}¿`ÄŠ–¬õGxA¬ôÀ¬ëu4XÍ –Ã`µ$…#0mO˜8^ D8ƒš´è)³N©W‘v#¥S“qFèÕ‚ŸüU+qT˜d"–q‹ƒáÅ0ÔÚhžð©Š`ym¸¨:¨À1Jƒ—‚Àq(Eâñ5üZtJ›ž2ivEXýƒBbX½g4-MviÛ°–¾p®,8*Ê®ºpìèà,`œ¾BŒÎÀ[ðQ„å£u„YgD;)°IC ;?0Ec3“á° ú!@” ßð&8‚Ý@©)BIb“œ°'‰cJ®Q• 5À.rï%± ×P%šåƒ>D aŽÿ™³p!À,¯¥c¤ ‹çE@ë/]ÈÆ€ %nÖS—M•žA@|6uöÖ­÷!Ÿ€ÞBCá±MÀ_`„’äéîÒ¤L’73þaj¹¥Tëö:IEND®B`‚httpd-2.4.41/docs/manual/images/mod_rewrite_fig1.gif0000644000000000000500000000670510147723030020630 0ustar rootsrcGIF87a¬¡¯ÿÿÿÿ,¬þœ©Ëí£œ´Ú‹³Þ¼û†âH–扦êʶî ÇòL×öçúÎ÷þ ‡Ä¢ñˆL*—̦ó J§ÔªõŠÍj·Ü®÷ ‹Çä²ùŒN«×ì¶û ËçôºýŽÏë÷ü¾ÿ(8HXhxˆ˜¨¸ÈØèø)9IYiy‰™©¹ÉÙéù ª jGzªÚ–ºêú +;K[k{‹;ØšËû´Û ¬ôL\l|Œœ¬¼ÌÜÜ7ìí-]Bm­½ÍÝíý Š-^þ@nž®€®Þîþ/?OÁNÿm߯¿Íß0 À <8†”Âò-Tá´‡rJ9ÈiÆþ‹#v´×‘G«[(6À²^¡_$7°L¹î‡FV`Ö´yÎg![^<×s§¡5frJ4 ?6Ùùœ£ñåH‹S,Dj"Òª[³vzó)ˆA§>$[õªÖ"kÁºµšm)µ©®Âu{íºb½œM@50Ö»0©Öüwïá·‚‹šd¬ø­WÂÕ"iûq¯a¼’G.¾ Ú3ÞÊvøNÜxób¹•ç¦ì9¯ã°!ÇÖ¬Ùu­\Nîy²ïÆ”u8Žü8ƒäÉ—7÷Eü÷͸„c†.½6eТ"–ûYxRi¹‚¾Žû7ßÔª·{eŽÜ9|ùÊ¡§—ž›ºd΃þ§÷×ÝlÖ!Üyý…fÄkXñV pþ¥YŒ©6õ9ñRzÞ©g„^e(^pæÅ@ €f¦ŠDl8—{ÕñgX-ƈ¢o&\ØÄZ:bv"‹Q™•uÙµEbS½g×y‘Xˆq÷’ì}·d_àˆP–ZnÉe—^~ f˜bŽIf™fž)–h£æš½´éf.pÆyËœtÖbç³ä©g,|f_ ‚Jh¡ö¹G>(ŠèŒ.Úhþ0i¤oTÚ¦–²¡é .ðç¦c|š© ˜**¨"ߌ¾ª\|­6×j«¦Æ­®¾êª¼úê«¢±ÛëºNþª3ºVú룰ÊJì±ÇJ’l3ËòÚì°›­±¢TËŒ´õ=笶ãF»ì·Ó.³n í>.»C\oõ&óî ¦ o¾ pÀLpÁ<èróž:0}Ï1<¨‡J1ÄÌ9\küR|1Ã. rÈ"L²¡ Á,Áù±Åk<±Ë³3ÌÛÜq ÷‹A¹»Î §„"³³#ïúŒtжæ\LÑ­-±Åú{jNŸrõ"P£ ôT“µ"[O¬Ô|Í&Úb÷õÔ¿z ö›q#r4¹m3Í68a'2÷ }ã²7Ý ëýw!…“p8ž‰ ²¸Òá~Hã^‹þ¹!’ÃMùåh®ç°T¹ç€.§è~”ŒºéŸ«Žk ¤·®5ë°Ÿ.ûì|¼n{è¹»‚ûî„ôî;ãµoðÄo>üñs¯üíÉ7óÐç!ýôŽ>o=§Øg¯FõÜ/¿ý÷gx/~ôá—¯êùè§©þú`ïþðÇŸÆüôßþý[دúýC¿ÿå*´B è…" \ è@,@0‚,œlÆR¡Ü©€>(€tÐ áFH›õlÐ ¤[Rþ"P „%¬@^Hò˜Ÿ†Ì@“.à#ð‘ †,èŽ:ÂÃ$*‘†ÑÃs’ ,qŠTLbþC<¤ íçUìb [ÐB,Ž(z¢¼ØÅ+ZÀ…êßhE2bð>Ba£àXÅîGa™Ò‡xãšéæ$;ÂL’zè€)®;f d`Ê¢“¬§(d€"'€Žég+‚]¹ HZéˆdA“4šïÀè6±$mœ¨Ê·”Ò’Lôák6ƒËÓtòHu¥kiCrÔˆ44zŒŠ:9PV2‘&4å]ÉI9È@/zR³šlg– à¦;tjê(œzμLB¶rÈĦˆ>C¡²à‡èôÛ3T¢@V“•ø¦6W‰Äfž`¨DÏ:ä'¹H@¯le(þéxK i•çêy£{F)…úÜb<Ê€Úˆô3 ACJ!wjñ?=¥üI €HIíQQ8‚’"N£MKUú Ž>t𩔥@MpRñ“Eä¤#qÀ’wrÈ ó4‘Tj#èt§ Ò“à‰B)šc5Ïc¶úB‚ÒGIDźLä°­¢K#$%N6ÈŽ=j©´Ra¥§lÐ ÃJA;…õ+ &hÅ*e¦¡ìÙûËB¡ ¦Ðì [ÏžI´ÿ¬H[&Ô^´DPí˜\k5Óö¶a¢­±dËÛ~I·KÓo»ôÛ+ávÁÝRqþÀÚ!7KË•˜o»©æz,Ò5Huiö\Û]×\ÙÝvËF]èZê»»ê.ìÈ›\!7 è®Ö öš·uò ¯vÅ[‚ô¿ª/ðà xÀ<”Œà+XÀz|î‚ a88®°…ÑØ`¾ÔroeùKJ—n 1à< г ÅŸP±2ôû ã‹Åž1ÑhÜ Ʈб1x¼ 7 Çœ2؈¼ #§Ä&æp$€¬ %ÊðŠ™lå#YR––#àdn9]æ•;Ûd×i̘(óˆ5œæ+Ã9Ë3þ2ÂÜ/;?ÏFcó%Ü|þb=3SÎì³–…[­ žp<ŠV'WgLÎÖ@È_äQ\z©}ÕÌѵ¥ïZÆÃÞ “”¥ãéL¢p™quÉPšÐ"б¡2K]¨²ª‚4‚™ÁMlÐiÖ(ÃÕÚš|%Ka¬O(GP?5XÃÆ¬·øëNß1»æõQ"Àc_»sÍÞÁжmÈ#…²<‚Œ;m$騶¬!ä\«1ùÕšà’WTd éH!I³8t­+¦«ƒQs¤ ~Ma€#Š‚µ¨Ü~N£éÕ2,(p­JÔ\ú§f/íéív™†’×ø?e3ò­3Ý·µtS®¤ åçß{V3P ~LþÆæü§.z¤´½æçåSH•y´£*Uš»;oMÒcyÁÀá>õéÔÝê¥c×>=Õå&NUˆªœá6(‘Ä©ÞThËD¥µ)Qß>ÉŽû²Õ-çzOƒXtš5–Ã)µ¬iÍq«V)A… BqŠqÃ>énßéfù¨×«~Ýç‘/dW†¤ur”ïeMhæGÐ$^–u¢¤ç|•èÞ[ êNõ–ó3ëîú×ãà̲'ík²Øãž·ß=¥tï{w?øú>ñÁhüã{*ùÊÿkóÅüçgTúÔ‹>õ}ýëe¿xÖß>нO‡Þƒâ†ÍŸiô›OýégÊïþÇþv?þ±¥¿üæo À?ÿØ7G³_­ û·6™€øç(@`€J €‘ƒ2¦°€–Ó€êB9ˆ-Ÿ•€Gð€†ã7f“7 ¿²+Â",ÌF‚´r!*ø8!X6(x.dÓ+#XW‚zã‚?3‚v#ƒ'ƒ¨rFðƒ„àåƒIC6?È+ CÈ89ø3/ˆ„4X+oƒ\7ø ¸„Eà„®38KÓ…¸…q …ˆæl|3<ëF3g‚*؆ö†,³iæÂ†:è†v‡xˆ#eˆ3ÿ燈&#jH‡g¨‡Bˆqˆˆs¨ˆ+³ˆu¸n|XˆH‰•ˆ¸ZwØãþˆa¸;có6Vh!`˜‡üç (5¢øYõ·cch{ø,1ȉYèŠ_h5wc„ŽC‹‹è²„ó8µÐ1Hs‡£Œ¼8ŒÞà‰R ‰Ì(ŒAðŒÝÐŒQ [Ñè;×hŠ¥²ŒÛ˜_è*\Õø?–Ø0ሎ騎¯@Žëèîøí03] õ^ø˜÷ˆü¨ÿ)Iii~þ8yrŒ‰zÑvs™I‘YpiI†šV‡i‘‹öi?§v7’!ɹm˜l”‡‚¨mÊ6P³jÜÑxgÀX eC-ù>w0Ï&“G”l$É‘Cþt“AÅ(9”@yl:)߯iÙGœ÷U„’in ×REéív’y•Ri•Bµ"J¹xboR©–béqXùVé’¥xPnéPNÒE%hs¶a–EB—‹×¸´–É•+ —;‡xIuˆÙ–Ô´?"MÖt’1v¬A˜‘)x`ÉPáqL'WN…i˜_ u„…q¢É—G’k`š v™3R™7¥P{¹PeÇtTyŠ™š9n%±fÕv‘kÉVZ»ZÕú•˜Ÿ­`¹â;›±•Ûˆd/Â5;×-YOlѦÝûµnÙœYû†úåÔ—µX*^ŠŽéŸ—.7>œ‹ðÀí¶í6#]ÏŸÁ¶íìùmÙÑoצNZ®×À‚9y}=[³`±±9Ã*‰òÑß“‡œÐqäÉÈ}'®*Ðæç¨Q‡Þ ‘¶i¹Ôs[ÏüZ7tìÞs›Î®]vöîÑÅì­<žûáÉỄ³1ÔöË/YÅKzkëÒ~¡þwy§g^zú7[àýw•Yð¥×:8{øÕwŸbÄÑ'b’æ›e`†Wx‚g[yéÕf`f(F®­݉U‡â€0 ˆ†:FpJ!õŽ;HÔÔ’"ŽÈŒánºQ8l6h[Šû‘×]-Š” •ºÈ¢ëéÐdl¶yÔ“iåÅà”tÅu[:ÚÉW\|V¤'”~ÅÆ` Ûù©ÖZ|¶†g”ªnFÊæ<ñÀ ”P—þÔS¦Ž–©¤ *H¥úqŠ©© ¡zêj†êj{ƒ¬c©ª´Öjë…jB¢ë®¼öÚ묷+¬ª$²°æ«ÈÎ$ˆ¬¥þëì³—»Â±ÉVë˨ å¶Ì¨m—ÝLwS·ŸZk®9(I{Á¦àrÃî·ÝÞ(Ê»¼µzî½2©kÖuv—œÚ-Ꞔüj×”•ùo¢ÔùkSX‡Ö…[ Ñ;o¹øf,¾äô™ÃaÂvZÊëm㦲2b7›¸9ÚÇ6ÞåÆçÜ Ç˜HæŽ32*³É:†Ü2á}÷"‹nW¨…á¬óÔ¸ð<ÏKC8èH7Øh»O¯èµœ ïXáÈÎö2VCõÛ;ÏZ´™âvzô݃ ´–h^鲨zËÈ2—&³Ò6 ÔÂ=õáÏøÓÿÈ?ïz)QR"ÁãDID`†òÇÀ6p}”™ý<4¨¼ç€ÖÛ ÜÒ¶ªæ}Cytà Xz€%ìÐq¤—@Ó.o΂a =ˆ Ö¤24D"¥Š„@&~ï;‡T&%·.©å`«›XÅþ¦°ÖÎu*+ÚhÖ0×Ű\Ø"Æ8ø:’Q‰Bd¼Ý±x28Îs. [ßÒgÄ8eYj\ã U2Ümîsò*™ )8Í…IˆÍë¯&IÉJZÒj&¥HÖäå9Z[甆(¬¤ˆ6[`9ðÇ@R>lãÙ9¸ÂMN”›+Ï-½´¼®ò2* Þ+ÏÅF¹ñ˜¦¬ÔHÖIZH“»©\!øË!q˜ø*¦sv‡»drÓŒšÓÁÈÈ€µŒlà¤&±y/6f ’Däã:Ùi.wòãkñÌçÅìEÏ·ÙSŸ½U53Ä~^OM(ªŠ‚´|U¨DþÂÐu=”jÿœ¨Fï9Ï‹ºŠq— ©HGJÒ’"¢£=(%V ‡¦T…,)\úRXÉô¦ÓòCÏtz5žJà?=R+‡š) ó¨FMê•JÔ!5Õ8E]ªT…Ôžöa§Wµ*U} €ªþ”«^í*XÇšÕ¯–U¬g «Zɺմ²«m+\çªUºšU®@ iM„Ó¾A¯{=LEýJXV¶…Ml{Ø|)ö±þ+_S®åÔÑ ²e¬9¢ ⥰jÖº,f«Ù–œp|4JµD;Ú––²Á”Ÿ‘b¤÷Aq¶Æk­n S¾ê¹¯„PáÐpDè&ÖÝY0'ÿÜ Æ£€Â„èq§ûÞg%Q|8”Ü™P÷»n³î‡r¸CRð³À¯z¿w”BŠŸ+q[Ù%åv½ø5ìs§ØX˜æ÷¿% ûkS®&M°‚yu‰;øÁ¶džâJ÷Ððܨ†=5Óö ØÂ!Œè†G¼Ï%æ~ q,IÌâþ)Á½)n‰ˆ[LãGu8Æ¡²ç'Od·SeXLAdM¯¤ ãŠÇ*Å0íϺ± ZbDž1Œü<$'y`Ä$41€‰Œ_ä\،ʖ°2&H4{˜š ˆÑ‹Êìµrq«Ø£8zérÑQ]Ö°ä8Î1ó˜eîÑy~ö7dþ¹Ä/–³t•Ì-ÂIó@—3¦ŸÉ4B¯P™Û3NŒÆ“ +zαœ[Íx93Òˆ³9ZK&§Û¼µsžEÒq*$߸fj|ÞÄÓŸ¦b¨!=j@7óÔ8ÒÛ½•i¦az“€CvÒŠˆë\ûËVD³ij¢%»–“f™ .Ýk¼ÍºŽ«vqô*EØ UxÑ­§¶>Ùå±á±ÐN®]êR‰Nhfñ*÷ž#ʾøÆTŠ 4}JgƒÞê¶àÕ`lF¹åרpÍÞØi žÚW¦â5ŒÞŒº‡+â›­|qK_©8Q!Ò«ßRì?!}Ø÷øˆáüÀ„ûö¶6D¡pC<“Ÿÿ·å º²b™?œæ3´¹‡-HŸùÅ—¶ž¥_¹Íû˜% dáF'1Òx ÷`W»#üºÐÃC:èW9M QQ=q8ÄoÜuó’W»;ÿyÔ?ôÛ±óáÀÀú¼(:Ä‘áƒÿ8ݯ±Ô§CI-‡*Ë£ÊY•Kå&¬;¦;óhßÌ,%íÐìj,îXd´ëŠ7UúW“™£‹oßKaL•]÷ÙeÕq´¥‹=êSž9ÏB>ð‹½Çpœ€³¿2â€8Ên’únQ&åó‰­l§Åˆ;åÇÖýÕ4>ôåf4ªwBÖ’…­ö[îZMýñ;úú¡Œµ¦<áúÛ?þâÇc.Ÿ9}& ûÿ×HÆFjd9÷B+Ζv¶·(³„L»g&½×ãkÃG²6±‡| ¨q+¦j(c3¢'œD1sÂ5bó'ZD%„B‚-‚(vzù°}úÕ^èù×r—uÇ@ƒÀtƒ¢¢vOƃÉs|@èXEG„Zg„GØ‚§„åƒÖÔ„‚%„PPRHPTX…Ix…•… µ…ác…^O``bAql؆nxVãAàxLô\P´_søl`šÅCWp~ØDµ‡{؇ìƒq˜B´W{„ȇ${#ç>Å3?v>G=I"uEq†H¯U?"ÿòQAT^C‡BÁ±r€·1舛Ua‹e'‹ÎEB¢8\ys­˜_Ý%BÁ¥ˆ‚¸]µè‹Í…ŠH¸‹ëeˆv'>v—y÷s7d‰zwŒÈ^}˜TñåŒd[™E'TRårµ¥†Õ¨^'¶ˆ8ƉåØ=—‹i˜ëH]æ}ïØñø]o˜ vÓ5éV•Áý¸tècê(WpŽy-¹[ÙÙTð ‘)ély‘-µ8È‘¤å‘Â’™%’DG’‰•‘¹¶‘(ib&™p-™’/y 1‰kåV8i P×} ‹@yn?)”A‰TSÕ“EÉTv…VÿxuWKy“MÉ”OùVuU•Ni•R‰•P9•9É•Q¹•X¹X3é]5éW*ùi,Y–Fp–Š––jùWcÉŠoySl)gn9—AP—S7AéOx)SlY‰‡‰ÊZSgùuƒ‰q‹‰, ¥™"Å„#bƒ‘h$%gyÞè˜dX†g´°rshg@Çw«ˆOè™ú´‘‰¹\LgŠ”gî„]¨š ÅšÅåu'„CÆhšÉ’š¶ID¸™›Ë˜]±8^¥™cÀbkR¶F*qÔƒ«”.Œi«¯:§:è«¿ê³zq"Ç$˜‰yšI_`y7[¬ê„Uôy.H¨3'0¸ƒ¶iªH˜£ÙtÈ9Ã"•CÜjºg™æ4䪚æªtxx­°ù^²iuóhœ¼Iް;£Ä¢ý׬ά!W‹üŠwï1vºùY{v¹|Œb~ó5ù©±ª°¬â’NhC¯ ±ëJŒ9W±äs±ÙmBó¤÷ê™ùZÇ·GéŠHaÚ9¬Ôˆ±~–gÍ¢”²E*²ÿ@è^J0 Xo{â­¬ƒ´©P³h™¬B[µT[© ›Ž´Ç«á¹µ°§´¡Z5£*¶EصŠrg‹¶´bµGj më¶Žª¶/Ù¡sK·œÂš1Ú·»’·z-ÏZxÛ`~{¸ˆ{ƒûŽr{˜+U—Åžwé¸<¹H6¹”ËOe[:™›–›Ž«Ÿk¡ë¹›¥{£›b˜›º4°º Öº®{§k¶³K°ka²{»Yy•¾›•;9”FùTª:¼HY¼Lu¼Æ+¼J©•Tù»` ½ÏÛ»Ô½Õ;½Ö›½Ø»½]é¼Ýû¹K`»Ë»|P»œK¾o¾ý5¾è«ê¹í ï{Xÿì¿—`¾*a¿n0¿U¿ú‹8è¶rŸˆª(G-ÿ~ÿ›ÇY+[wµJp´˜ ¼.%v# ´ÈšÁº6Á6©¯ t!Ò+k_ÐÅÀ“µµ¥r ÇÁ ìÁðUš'\œ¾tª˜Š |[~Ç€,lLvOÇ®DâÃÓÄ»éT “;ÌÃ.Ì]Ëè‡|œN·w‚ÙÀ4™Äe°ÀÒ˜wO|wh—ÃêŠÃì:’Vì‰ü^ÒJršé¯Q‰#'Žû[\Åc,Ÿ›ˆ´*<6Ç`PÇÇŠ«ì„l«Ça0º³¹_ÑÞ wT‚<ȧ[¸‹ì‰ɉðÈ_À¿ôäÈ”¼–ÌN›ÉÿšÜÈìÉZ°É³'ÊŸ|„¬ˆ _ÄdÊ£|=}ŒZ~|_®œ°ì²ü›µŒ;@¼¨hyó뿦ÜË—HÀ£¨s6ÜÊ»l½,¸H˜UË‹ÖÌSðÌKšLœ«†iÍyËèêÅ9lÇÊà Éè,É‹[ÆFœ³'‡­ŒšŠ,©Dë,†˜œµõ|>|›ÎþVú¼ÏÌ·ë¹,`+Ð{{Ï[ØÉʨ3ëÐãy2x}=è~Ö&ž=¨ÐT(¹Ë™}Û3dï¢@4„‡vx £ÑÙ´¨Ãe­‡{XS%ôÙ‚*b%âÊ/zWª¦‚zsG¶øË,‹oЇHsÑþé{ÿmT&ü×§gŠi *%šÑv ©*8ž³ŽÚƱŽ4l 'ç¢ë¦÷Ó¤Ô:µ+꣔sH» P­ <úÕ$š5r´°>ýÓU ¢jÃmMÊ×joydKØö€aíy%Ý (½›ç| J´EM ŠK ô"ËôØ@“ÓõŠÕE¶Ø©cÿ’íÒ"h·ó¡j6µ)ão X~"H¦)¸L=Õ— ¸ÚœõLЛ{Ð<1Ñ̀к]¶¼ÐuÏå¶ÊÊ’œ¬|…¼‰¶MÜڷΕXZS¬ÁE,)à Ýck {«Lŧ ÞyÐÚ=,ÁËÐ8‰> в‡yš(_Û•Âÿ>¯hØ#mžN­Ýç­Á1lÃ0ìÝËŒ™É|‡ Æ,ûÿó‹¥S:y5yUL"¯Ç[%VòØS@ÿ@ûòS—à¹Óô5±.PaROõÏS"DUD_V=phV_T>uöJßò&¡“TUöCõ¢ÛöPöpï “ÀUÀ@NZÁ°ËÍÇß:1#KóDSu=E0Ô&äXûÆs}ç{ÿWu2#™…x&•@XEˆ>‘KjÕzÅfƒÆZ×[ôJµãÞ³‹E¹dvÛýn«Ãèé#†ç‡v°y:ÿÓ$,t¢ñ¸ûÐX¼XDl44T4kDc ‰”äìôü %-5=EMU]emu}…•¥­µ½ÅÍÕÝåíõý&.6>FNV^fnv~†Ž–ž¦®¶¾ÆÎÖÞæîVŠ;httpd-2.4.41/docs/manual/images/build_a_mod_2.png0000644000000000000500000022133311740644603020104 0ustar rootsrc‰PNG  IHDRÜ,‘T¥-tEXtSoftwareAdobe ImageReadyqÉe<"iTXtXML:com.adobe.xmp gšaCOIDATxÚÔY PSg>77/Àð)!ê*¶€¥Rí°µ­¥(®]µ(L]iÛe¬tÔŽ‹ëÔiwŠ–]ÚR§V*µXÅÖmA»€J¶Q;( „‡@B’Ü„›Ç½û‡Ä$È#‘®g¾Éü79çÜ/'ç?çÜ?MÓð¨ AyX¤ë¶m547w—œ@kªµ::n} :;Mkeu•ÃαII›þòê ëõ4Pv­’–.QMèÎw‡Hÿ7{{ÈKË@§5!6"òzc×ùOÞ\¯ãr“Ö,¸©'Eˆ[tLpõõ ]– MSid‰‰”a„==A.·ï…Í¡pê"‰j@«…ñõ sÓUme O.È¥ïì~ï­Ó`2?Ézùx›²¡Wÿu§‹­²*¥^¯ŸºHSÅÿÚtª4xñ’‰Úö··¹ üÑâbɉ?t„t{e¥@ —E@€e‰"Ĭ¬®rçZñºÒi%[S\/Ú»ÞÍ b`#xªww††:999˜Ó—7¦EïØ‰-NAÑ eG…ñËËn(Ø…‹·mƒètf‹ÐP[{‚ þ#’Ö”éÓíßÉ„ÁL Š®¨èÀÀÀ*y—7¼ý—¬ýo/yçÐÀFÐZ0ЀnÁbÝÑ0ø\tƒ»m~؈ŽH’ÕÕݾydÒeûþ6wnxs†XÞˤú™OD„…¡ŒÂåö’™tÚºè̓{™\W`á@ô‹  ÎÎ@ôwÈ;@OATôØ5ÿú§Ÿɯš’^§Óá8δ°ŸÌŽˆ¨Q™Ùz™¬¹¦VÓ§¡ÚZh5Ñ|µánS-HA¥1êØ“–…q&ÆFï ‡Ã™\ÆÖH×ÕÕEʤöÕ¹N0¶J~~þ–-[êìa-yjµ­]ÎýˆÖÕUÑïï®vºÝtôóóëD†=!Ïî¦{oM”.gÍ—Ø`^ ¹\^vîýR[[;5Eá*ú¶Ø‚ƒ©‘e—jèîóhýFÊŠMñ‘þ±éëSluzúŒ‘µ¹ìÛ·/==ÝËËkÔ 7@Ê0Îøƒ„càǶ^*?{·8k¸Z³¤ã‰€£9‘ºþÁÛÍiÔ6ž““caݘwÈ$16¶ ó`€ãÎ}s71E[4 p…^ÜhÐ}°ÈYIùÀÚ«+Ï®|&o´Þîîn믡¹x\üs#;ùÖ_×ÿȽñÃí+Vo{ÑÅ;¥ÀÖŠÏç3Óî/yÕÕÕž‘6o ›ê ‰³ßòññMaÖ¬YŸ··÷8IßÿãÆÆÆ†rS{j¼(@¨<ÿ朗6„ºSJ©È˵/:KzmQތͳV«§qžû»Ü8Þ†¯¶øyº+0¼4g]ÚÞ*ÜM4Æò|<-*þÍ­ÚA™„sòò q(mȹààà3gÎLÔ*((ÈÁHÛtŠÇ›DwOd?|ok©o8r•`p®1}$…ô§v-Ûñ}‡ÎF¦úÔtØ!žçÚµkÇ ó燇‡[Þ/**Ã*//… ÕïEÚ¶ŒˆD"Ó-üýý}}}P …h“¡‡ ÉbüÐ#mT³íV›ÿ;Ò“.ÿ€Z+jêÃû’G!Wt@±,µxL[ÁâµÓZGÛª ƒ†Ñ"(µ#`mÅŠTk;­ê¹Ñ¢Å"(‡P X$åË$—¤ñ%H hÝÙy³Ù·o÷Ï¿»ÿ~ÿÿí«'ô«Gm¡sÑé³övIC=ÅŠÕ•Istb;:Ê£„DbÕñc.Á!ò2Šb ª{LZ?«BN¸4ñD¢ÑÕ”hTˆ3^ª@êêäTË(Iu-Öß%*[Êè‡åNLTòKìî³Õ2*&Ôè,yîíuuºªlV:î>›já¤Á“³°ÝÝÓöÀ¿]È %¼Cl`á°ÏJ…G¬½ò¨ÍiwÑžo 2â>øÛ07Ý^š?™’Ôˆ,wBmÍ‹Óq}CƒUe…±¥%Q;x0ù)cg¯Ó)3n+ø|(w¸¨ rÅ$1;6ÅA¿òÞ=ìq£?›}ßÎ~ 匷——òma~ÞòcÇ!B‚ÃiéŸO'ñÝR€ ˆƒ€jÈDyµKoÌååÍkMÅg»»›c÷Ñ÷ÆpF›Aø† ˆÁ,V¹æu,§¤ä^tøÝ1{ŒeíMÝLº!͘4<ô1b’z:µénH,¶Ž?D£ù¼s£×q~ÞÄ•7ÿ»’G»fuuõT#bcä·–é· Þî¸ðWKÙ¤S>"EIˆæ~9K5¥¸°œœ¬n\1¬_<ÆA ð¸ð› G#‡‰€ˆåJÉ@B}ü‰·§×ÎKJ:k½‹j´nD-@*Ü?Kt# ë8xéËÜÖ¶‹7Âòœ¶î#XÙ ü¸=îNw`’T•n§tPPЩS§ŒŒŒ ÄU"±µ÷ƒ—¯åNųÊ(¥·nÆ<%%Eq5EQCµ×'t˜ rÂ6 e b¥ÛùûÏz*Ï\©êò]Œƒ};¶ ‹ÈŸ£jNKKÃMÓsê)ôÂÞÚlÇÀØÞ‡9™çâ¶ÍIaq'@{>À„j$Õ ‘ÔñAT“"Æêòj)TøŒ=õõõ êòx€w ‰0ݼ¹NÓ¢¶ù:ÚŒÊf™©ßÈĉ’´bï{‡¨ü|Ϙ!a×6רmk[éK·qÖlšñAqÈm§úøøÀBÅù„%v£6žˆJ]ÞŸö W×qaíI7G?jö‘d4©5B@²rrZŸL°ÙÄÄýQ»öOrÿÀw¹‡µµõÄú¢¢¢à. $îÁÚÄþžKÜÔYijI›r 2ÜÜ3{õ#zhˆJÛ\666|U;õƒbh ?Ʀ ¼þwº%YF`N æ.ÛpED°¼ÌÙ×Ï')+„»,à4“Î[m`î•=Tö’šš ŸJqP>íííµ7(ªZR0SO¤•Ê Eʺ2¢9ʪïfø\}¸Eöß²¬åôªU«¦¥½(ŠþI´Ni™šæ…}]ºéÐ0B76lêè±²4éëÎ3!bà¹2Z:jÞzM[îßÕÕµ²²Ro1¡›y7ñL”ˆç™ÙŽd4c: 9[±vyì´0%B<Šoæ@ݨýHzWeç]¼öƒ‡Ÿî¯È_ €H&À ©¿ Å|[[[M!M•ùLé¿õtF\_dwÀ§; Î ü¸Ìf„¢r³MKÿTźõ÷÷_¹•ð®ÿÊ©v Á .Ÿèµú)®Jµ¶¶Î@yl6{†Þ?¬y,»:êA"%—;%˜ÄllA·åذ ÍÒÆ­hllí`Í·Œ7Z0žþÛ*31gnøü××ûGK^<îkFf5U_'X½ÝC¥› Âövvv3WTWÕ0-ÍYSºtS$žÒ3×%MJÅjrvqš±¸G=u”Ÿ>˜Ñpó눘¤«Ü.7pAÐÀ àñ }‚#G0é Ø§9‰x‡…],SPŠ45ïSbbâK“X™JKKý§§§ÇÇÇë§Ó¹¾ç€ŒŒ ýŸys—ýÏòóœ³ *ËN²*ÒpsåqQU{üÜ™;+Ì ã蠲ȼtT–‡D@ˆi¥‰áRT"T¨­æ–„õ\ãeiàZi…ðzd’’ˆ"˜¢¹‘K «¬Ã: ì÷vï á ÌÀ ‚¿ÏýãÞ3wÎ=÷{çü–óûýFåÙ¨#£ô2ÒºZqe¥FÓÛáÑÙØ€µ?|ßÛÈ¡ŽAmúŽûc EiC½°¸xÚŽdèΣûÂkW¹^ÞÆø‡``Ë’˜JeZtÓ| Œ«ãwk€\>ð­Êf@cjý×jïƒ~ºÄ†ÍbGóÃ_1ÄUU¥Ÿ} Ä|ãªÏq4ñ¹…kßwX°wêó QŸ´o'hªòŒ4š;ǽ*Qb3‹±FñÙ-F»2u¨óÎô]d^Fþ¸D0mØäŠ*~NŒ-õþäTtÎê,È­­v‘`1PQ¤°ža4† P""øƒ0Á¨;´´6@6<;"¾ nÉš›èá³5”±‡ž¿r5@¥À“×L €Î21`ÚQ`3Ó? ™Ä`ù®9::€4ûNØ%Œ§£É€F@ lÙ ® 0­ñûµge åí­có4â¥Èú…ÿÉg¸é8”Ëöïw†Ùìì·«ºZÅá0õ3Øgó槬‰×Ï};}J0:á1ÕÝ«ß_”Ä̰Gxné™Géˆz®¿Mô-×ÃOš%Ъ/^t ~JÑPæ×_©/G{M›Öw›mQ¾ã·nƒþÏßT0æùp•§ÇN±_²UYAa^\˜¾>¼Y8¡>z‹§l¸Z•wâ§Q™z4Å ªÆ@¬×3™ö¦KuuõÝÛžœ7_ë¥î¶ÀÏ-IScçÓaã†QÁèƒrìR¿÷Wh™D ›í`ž'ÑR±@PõSF˜“mô•H$"WˆÍk)ŸF§S©ÍmmJ<ら[&s„ <ϲý÷e­âù¬¸SS^œIõœÿvæ ®“kdûØó25O¤¯ý¾ÈjÙø¦ôÄ9Êé%µe9ÿ}ƒÞxg^¾g­TvjÕ¬ëÉs3D^©Ë}Á¸ÿ£¹+AKS&OÆŽž%Óþռ炵ܡR]Ÿ¾« [ª«…BÙíÛ°°çRs¸ôÉ“¹\GGG:<ÂÌ%C^^úª_Üëì½Æy’Ãxõ0ºº~-K©,'‘_[êîî>tjy™LêeÌÜþ¥§´!Ø;ûØWïÆNäØ/”9dUÒKäȹ·C)’ìŒBM”¯J¡A$‹Ï{óV¡P1ø Ê‘ËË …"¯àòÃ!­f/\Ôkq,»r¹´ªJßd3Ù/œåoùøx?8÷çççj” x™B¡Ì Ø¡%¹\~!1!ÔÇ;?Þ, Œ~ÕíÙç܆}ˆAAA–Ô1¾y‰1;Á|.ìð€ L~š—UÔLsä`aS©ÔÐm;Ú ÆñÞÿr×Ãb¨¤¤$ {MÔ SGØ›¿¤Õ)ÛQò‘Œí¹Û?àºEáíª?Ÿáψ˜òBBnÍÆŒ¿êhD5¡ÍYÉsýúé ;zÖ‰û·ý¤Ré‹/¾È`0222eõ]êPrhFÒßÙôÃÎ/éèZňPÀü‡{°æS›â÷ž¾ H”·¾MÛùÊÖ´œíþÑß_8ô² †œ‰j@„ñòFÈJì¤I3–?ß-îžÕ0°¢¾óø— ýF+X°PO"Jk/[Û{ (ÌM²§sY´!±°÷îÝ›››ËçóûþªV«k,Qs[!@øûçö!«ðÛTÝåmP\ý½W/ŸzD Ëó$Àø%&8Œ¾‹ú^”.aÆéÎîËO nµcÙµKÊÅ—ñʲo®}7Êtµ(@Û²€•5wÇÓ)㈒êJR[c|N“àâ•ÂŒ”@~oñ²ƒÇ¾›šöUкC·Éç²W¥l{n÷ JWû©5Ïà(sg ÊÆUºššÀÀÀÈÈÈäää[Êî¢|ùÖk§å³›Ò¶,.÷9.òDºdÿÄ&´rƒ€»(`èRº£Ç.:L!áüD†ñvL'"QpO2‰ˆÿ±‡øˆ)”3ü°ÿG®íYäÍ¢–ⓜÍÒ®Æh› ÇÖ3Bw®3ÇBã’É3—üÅÇXu8Í I/Î[â Œ9õ„ö¡Ãв>/_SÂzsÒÅ{ ¦¥Nè8âµMVŽô”yÐé/º{zyíý 墢¢øøøÂÂB”}Óˆø#ñÚhЕ¸Â»ƒ´—¯†iŸiCƒà 6\µI¯©Ðq¶exø¥™2ý/ûÏ ?ü7'æíÕ—9QöV"õ !Ô]í5i[ƒùB«WŽ= ìýêlYVJë­Ÿ¿­Q&m:ÐÒ&ß²}E¯~î}m“>Ä‹/ åw„¨4‹¤ÏÚÕ•‘àÉ|©#•rÿáì|òà=Ÿ —nÔfN¡‘h·¾lJýÁ_ñfÅIay»Îï%ýv;Í 3¬D:@ºçD*ilÞàÊ0B3ÇËËËa‹ÅäßÖR'ò{æÈyÈ×ßgš¥LÍþP>uóó'¦Di€ÚR\\Õx?n¾ë·'°—÷ððºjØ%Çkhh°øA÷‘'~æÌ™;wŸøÀ?WéòÔeš›ðóRÞ­”6DÐëØ÷ªód[~üž»HM3RpòÓ¬Q‚V¢h[ç­O7ý~ Eÿú.Öeª-ëñ¸Ý©å¥ÍhÃ…¯_H];+â-}{«è8m*˜Ö8¢Q®¯k"¯U#ªáyöíóaó†¨s‰D2gΜ‚‚‚‡2F9׿íGæ× Ì7ý£RNn˜ÊæŽyý:õº tùá”=Iÿ{ba„ã•´—(í(’6P[|Í ¡Õ‘»»ûùóçMK„ͶUvI*A! ¡jÃÔtíl‚¬Ìò ²X,Ëæ#×1”JåŸE7ªÑt?ß™(°˜ÙRSw[^ìåëw?»™nnný¸«¶Ì\<§<=nejiþ™‡Ö-ú-*# W¿ëq§³¶6*ü3Õ³ñÔÒÔòúIò}‰¿÷W-“Ãá Êú$—Ë1ý©²¢ÊÖ§œÅkNŸDQ©î¬ª*©tŽ%999Nœ8ÑÊÊêAb)1”sss»ÕY…(þ“¼ƒ»–ËnþxâÐÇs>Ê×W§‰HÓ_…&(DT*†(LìZP'}=.¦àÄ=Ÿ¦27Ê=$“ÉŠÄ)\®ƒPXS[È~ÜÝÏÙÙYWü WV H§Ã[<,UG®®®ÙÙÙú#§À\„}ÿ›öSfÞ‘*ܬI)E¢7§²=‹6—ÅÅÅíÛ¿ŪU»?ÿÚçé¹Óm›P¦ëþû°öù7_‹˜®‘6¤ÿt,vÙ²¼Š.Ïñ4ºÞ”53Õ`HPCŠ<(”³²²ú̃N’)FÞ‰ÀdÒT T©”[3Y˜9gÍd*²º«ŠC,¡c†7$©g,ýb¡{bDLBæFüy..–Eyp~Œ‡‚¯¾´èí.%Û$*2•¤Pªp““xî¾ãiK-le£’‹1”•*•­ I-WìÜñ±ZÑ)ioYsdÛ j© /?D‰D]ú%+hmmŬí¾0aÖÍæÍ›ï»Ž!ÆIvvv–­Ó=ºcñU*ÕŠ+zrm0Ó<<<ÜÑtØØHÑ—G#Uj S <<<îšö(£<òéoØ»°(®-|g¶/eé ”bÔ‡"bAì&€¢‚‰>M°GM4Öä)ÖèÃ’b,ÑX0ÆÞc‹±‹…*Ò‹´evaÛì̼;»ˆ”Ý¥­Xžç»ß0Ü™½3óÏ™sϹ÷Üs>¢Ü„~„à#ÊQ~÷H”™YYXP§Ç0X/«á”ÿQ.뢴¨Ýl:æ‡B£I‹ Sqž5›çì’½{W»áŸ‚ê™*!1,ýÎ{O–…åkW?¨~ÄÓ]|ÒÜÐoÊA$¬Ym`bbêäÌ4æÉJùÅI‰¦~~Â[·ÜÇOм~ÅrY}ÓBÇtlEnŽaŸ¾ÿ(?x`ecS'ŠbÛ‚”d3M ošõÐp¹Â¸GrÏÆ¯÷ÿ ʉÖy7jÒ$KŒ9iZ²À5(Ö˜<‰u¨,-ÍdØðeL©d¤iK³H»^Yáˆ3 Î;s·8wÈÒ@ßv¡í ¼Ü}&Žlsº¤×©èæ‚¡íGÌœe·<Ë«½"36oö¨0'não ›_Ò®wŸYÇ H2ý\4ÕAi)}y–ŽVŒM ‹ï4&yÛBŽD+Ûu2FfhhÚŽ>ìCkK ý%ϧèbac)”b:¬_¤&¦,/§íûÓŧ§z±PSˆ,x „ô2\Áf‹RŸç&$z,þþäå—÷îºxyI%¥6Ô+âÔ¿Åsà#`bBÕÃ-d=F¿¯¿£Gx<ÊÐÄð‡Èo×Ì è`×£Õ™$µ}¾‡r4fklÿu‘HŒíì=†4+$Ô»Žr~j*¥Þj)F޾³}­€H)½·}É•¢ÎƒænÔ£¬„+à9~{J/“çQà Aïi›ò, ®¦žèøÍz¢\±kÙBiÊeW©YRü%FYYÙÓý¾¯#„…jqÊò¦° ØÙÈrùlàt «–»ÂC@FRN±r9P[Vº±Î=Iñ»!Tûðr8/Nï0ü3 WDÑÌ6mÛ7.VÙ{&—Åbqѯ?»ÄÆVv<´u®[)(503¯aÔ°®VJúùùéÙýP7ÊŧNZµ\­Aäß·vúÏR§d^¾Ô¾)±‘Oîðéí‹ÑS‚{R2»«Õ§Ï qó°ðî|öb2iÆv°oT—ÈæP1Ñ’sãÚ#žI'ÿþ­°Xó5ÊÔlQõÝi%x¨ “iIF¹/]¦íhjv¶kfh´KM¢‘©QEžƒ¡5TìÈ4h_l%GÎþô Ϫc¿ñ³ ؾ1'Ç-Í̬¬¬Œõž‡·”%R)÷åËšÇJ“eÆœ^pÔhMìñraîPk”BKAl܆1frUÛ´£{]—˜uÉô¾:Õr-Äe2ÔÝ]Û†aW®\ñ¯¬`CuU}z ( ­)¹$ 5ª•W¿¾õ¤Ú=/ÇÔÝÎwâŒð‘O–ÏÊ4X£®?³hš‘Ü (>™3çÂé¼!—ïå¸Ö99ñ‰†î[‡ÞË` B­Ì¢Ñ©‹òÊW&, ª×â´µŽ3# A¢2Ö¢S݈Ä;ë—TñrŸ¾-|N,jL.32·ˆ½}»çú Õªßz ¬T1ï*ÕFùÙS=6Ëe¨@KPV*•V­ôqw±µëìåõ¦c8µÖ8†¯Yœx©Àsò³qQ‘²¢„ĉââÁË\x(#W  +ÊE’â<ø9§gçùóaŸëXÔÙh} ùêè±tïî½ýüÞ_ˆë¡ ¢ÚŠ0Úri¶öÒøtB.Æéù§cYiB¬ÈɆu}÷üŸwlúõib¦@òßÈæVu•§„¢ [·nÎÎÎï¦_Vs$†\.mÙléáѸ*hÀÃ÷ÚÝÛþ+ZPBB‚§§'xÏ©–…‘‘‘ºm ¡ÊhÃ3ù× AuX+úФjÁ9 t§ôñí¦Ö¨ZBzÌNþN \Å¢ …z ®@ 0¿xžS=|… 16mºzz6²+g2™­3DÐTj^6°fõþ ö—‡ùLzþÜ=áÀ I™0­g/ÏFC¬_ÊÊÊrttÔKSR©”#ÊjŠ9R1šEÄ“#ÈàµÀÔÅn\]o”–¶?û2ÜËÉémuA{öìY±b…^š¢XŠÐn+ÑYS¾`Óø»ºO="bÓòÖmßכß>rÂ3Ÿ/n¯›}GºÅý˧ša¬[v3pïö|wí#´JŒú#gP2NŸ>=33óìÙ³-—³Í [[Ûüü|½4%‘H¸ÂTí —È.EîuY1bÑZWFòäaþ@ Â~=óäñ)¾õq¶Â$²]ëo¥øÏ0aø8'…ªu ˜xvº²Ê¾oÒ\‰P(ôõõ ŽŒŒlö£îN.ì܆x3S4ð™0‚pâ ZQ.Ml|kÙyð6Û5g²Šˆ?… [­F¹irÖÔÔ4%%E ñ•+Wìììê¯ÓM©%}Û·‘@AÖ.â\¨¼`€ÚǨY¸É î ë¶#‡"A—ÆjgX*òXÊ™ Elõ>UùÛ/+Ã÷=Pý‹—Ó*Ž9ÙY;ÛYS•¤òNióu©Ú!p-VIShÀ€yyypéÒ¥ÞÞÞ sGa±’õKÐè£Ûo=–‚3° $àP’aïù~ZøÔï"¢âïþµ%jÏùÕÓ}þüçæŠë7EÆBH¹¬0ÆÖ”:&ñTž.ƒçx›C8ðÍ)Òär~ôšÄ¤Ç7Óùq9Ù›ž=V¤´ô|Ñ‹ß];þóã'ð— ˜û®%+ŒM*b¶&yiݬܿwä¨q[n…H ¶<ÿ@bzOÿ{ÇúUþ45„„~”­U*Rï<¸]»v;vìÐÜ[’$¦©Ó>|î;<€<0ìÄUøåãËox#à „ê®hቤ  ¶88|d+&§`”r 1ó .q¤îý¤JÀ¦Ãý—lz._óïž®ÎÅæ†´ò[v/†RÎáõßð÷œö ¼ VΘ¹}¯R!¥1ŒŸäÈŒ,íC&ù›1Á=å:ë ßÏfÝ9·Ñ÷Óɰá!ŸûSAÎq²*[cz¿–PRRRhhèÂ… kfeº—`éúÆm¹Cñéë}5ËåÜ[z¾|š‡H¹€mlŽ\n¹»»CûX ñ–-[ H¶%¼*FuY>tƒCÒ „ÒâvÓa©Ba±¨@q°’Î8JE•ø9Ê¡¥ˆ©Jjªj‹2(;_Ýܯn×Å˘† (‚¾p{¼Ø¸zÿXQõ¾Ru( «~B*¯KƒñÙˆmšÛ$õ!—›D3gÎ|øð¡““—é–ž‹þÞ\)G–ÌûíÈ_YðWØÜ(Ü•ƒs+¾Xç7ͪìžrd“ÿq ¶Ý°ïà” ˆlgK ‘ª¢QÎúrlo¿ô @(@~ÒéÐ>~iâ×rH*´*°Sª_¨ú,À‚ï 7e“ås6n‡"Ê” ølîŒïþ3sïýýYª>˜<#hèäÈJ Gœ¨¹ÍB¢µ½^.Æ%0<ëp¾ Ö‡T…Ê£þ%jÕƒÚÑùP•‚¡ö3€½:u¤ÆsœJLÿÕ’}úô‰ŠŠªNEJIŒ´óZu@ôU,¾ê-¢š¾€}©ÚÄ€÷«nK<¡N€ºoóÅU$dsößÑgJÙª×%¾ú²×Ø ÅYCÅy,¦*ø§².¾U§¼ª‰‰‰Û­[·B3}ݺuUã\ûÃÚíWm© ÆdÝ©5RG²_MOõVb#j\ÄÏbÊ¿2Çklêüu‡‚?qôŸ;{¡•ÝóY|0buT†”!ä>|üçÚ‹;YtðãâØEKþ´#uî´¾ BÛ‹xM_ý5ܾ|ùrذaûöí«¹jž oÁY†MÇúÄ%eb®Í÷+3vŸÝé•–Õ|‰!‘•—KŠUÎL:ÛÖ¬3—m¬ûWן&•Øi°ý™Æ$›@HVyì‚U!ë7d–Øñ83ÀÃÅ#÷ÿvÖ(ü¢÷Ô_y…ÀÊFBð¹„ÎŒQ—“ÒwôÑš°¸K—.ǯ#°Ov*½^‡Ç_¤$¶ YY3²>G>µŽfÉÅ2ް ØîýÁëü"Ú¤¨”—݉?ÐÃy¢i­èãÅÅÅ—V )³(‡ö_;® <ÅŽ{Æý.Ý{è>mÙ²e\.wÑ¢EÛŸø)ïVâg$І¯65Õ›~(+Ò9ûº¹)A3£uУ¨<‰™ÛZ¸«GÅ’ï$¦4.AróæÍ¶&Fcb¿ùæ›Æüö6m­zôòkd^’’’’Aƒ=~üøþñÍ>6”ô‘å'‰V[ê5KšV”E•|)=ÃÒÛœ&pî&œñ÷œª²rñ¿!øägΜ§þ7>>vbÛ¶mkxL¸Y³÷—X˜ñ}°iYöÆ¢ü(wŸ‹]/]#ë"ÌÑX³¹Wê£á^郋Û#4]CÕeeeãÇŽŽ®èêÕ«Pm¨†^¿¤Õjoo¯ͪ>Êå ë|›´t„íHT^ž9ñÎ39¹ä÷þ]¸ým˜cƒ§ é}BÇóÌó9^­ZÛß™ß_öÅõÛØÅ~óŽG §bä‘Åõµ¹€ac®9dŸ§§'´ußô‰'RSS/^ ÞBk+‚„¤à$´Q‰:Å æ(9«tÔìØ©Ÿs¨ØKÄ¢0'‹..SCF¸Ð/t :Ä•ïÊb£Ý}X”bIÔoi&Çu…¬ºÓobH!!!âcÇŽAÃý½@¹/_x¼¶{—Ï÷;¦90â“¥õ¿|&ÂSå 6 WT´aöT›FPµzòäIó`çÎPß;vìûÁËP?ïÕu©‰õ`þG|ÁíÓíúÌøê¯Afm}Â'Kjò)ŠØÒÊ*Rb.¶xqa¯¶Ö(vfr+++G%‹› 1¤É“'Cˆ###/_¾ü ,—Ë R5ž¥¡DOíôèÔY·6² ”8—…¬>›wõøÚÀ±½‚wI`É#¯œÞŠ x‚ù2ëæ‰A - Ârñò9hµü1 Ú ²9sæ@Íä–RjýFh.””qÍ­K+qs*VŠ"…|¾ •ލèeÇOG &sÃÆM;Л;}?x~Å|>¿æ· o{îܹóæÍ«s&ƒÁ€½tKÖTA¥^žïÊI(®\¹2,,¬¦v ñ€€€wm©áû} --M,W×egg‡††6Òߥ5éýŽØ^íë5›7oŽ=ú„|ùJ0 ûñÇAdd$4èßÍ›üò•¨%Fãg^>¢üaÒÇ|%­Aÿ€½ë€‹âèâ³{½Qª ]PìØ+‚Kˆ`× XP”(5ö{×(ön"v,€ ¢(‚ Ò¤sÀÝqýno÷›;Œñ3ˆ€Qy¿ùé²·evö?oþïíÌ{Xn”F…Ñ(ÒåFi”:rcü‚)•ò€ S3ÒǼø¸üËqŒMX¦flssDìàð\>_’—'*.2ìÚݬGm¦Íäûô=»1¡€¥oÀ27§éé¡ÚYD*‘H^Z*+++/(Ðiål5txÅñ\¹Q*…€O{?[Ï{‘õ îÞÆÄÚB1äVú^ã×îo¦< _¬×¦ DZ…aÛ¶P‹7Bù[–WÛ·ÚvëAf±@=ÌhXB"©åòW§OÙΞCe±¯_[7š}ږȾy¤g4ïãA¦j#›T3/ ™ èt@ÒL¹Ò„Ï{ày»!¼s0¥ôŸƒi@§jH®&Û®‰Ä„a€FÖÄ'#Ú_i¼Q2º~§ €©ÍêPqY 2S“l…Ÿ.J% E[ŒM+(ÈØ°Nýõ¿ÄF(kD¤Té” Rñ‰<€äÂ/ýq%:fþ\€Ë¬Ç6$šiigVe¦]¿+(‡,•Pÿ}0 éåoѽýˆñÓ¦M Û òb·Eßx}ÿÒÙ‹;2Õz“:örñË›j%‡A*¹[×1ðÈ M§¢]A‚×OÁ0ÛQ>/ÿ¼¤VÝxþN †B"É;^’øÄªO_N“&ïfݸfå5@iªFªà] 0ümH+È’á6A¼ ØE/ßÕ&Ì@HzvÓ&b@4q½*ì6x PÅéoƒ}iQ‹¢oy9ªýS›”¨žµB(Œ>u¢å’pƒ¯šf|_P†újÃ:G~µ¡Â®À5¸¢C•‰©d*ŒA©¶myHù‡´¿ª” U»Ú¢!*PŠQ7º“À‰ôËÚy~Ûg(”¤¿þržÿõbù;"†Å….ÒàX¥ª¹,ÊJ*yöŠÎ¦Í òå©4 #`Ò(B—áí1 äEÎÝq|ÌÔ@@GåÂÄiÇ®0‡ûÑ+ÏÅ»—MK“5ã{þe Pƒó¿þ0{ç9ç)³MÔ>påï+çE••xøÿ#!cÕÔ¾ÏFµZ}ŠÈ¸±ànùZ¿ö+_w Ý&+Š ã]î<—HÈÌöìKOËÈYQý‡ŒÔä"©Â…Ä/“5wÔ«ùªÇKKKŸÆD·)(0hé ꜒I³ à3ÌÅ™H¹xáÁ‰5+€X¡–çr-LMk§N”JeIIINnnaa!éQ¼nq‘¥••‘…ÉBPT!ñòrËóò\‡GkQ©…L~}ë¦]¯ÞÕâE P$åúµ¬ö›»ºZXXÔ(úÖ·e±Xœ ¡'¾~­®Ž‰£SÅ¡5S„iiÆvvu9 E£¯FZÛf¦ë(FMu¹Æ ‡B§ÃŸÊ‹ 2yI^® ¨ˆggOXYé6³254455åp8P#È·?ÍóãP è4§’3èl ×ø>tKª®  “N*iu>ki Ü´égB¹j”CX W(”¿yC¼|Ñ´¼\à&öö:¦æ$6GÓ3ß»{ñ‹dAAÛˆ+ÌÎÎg2$µº»Ž®Mí''!ˆ¸¨èAzý‡áVVúúúï:^Ex°Š× Y+Ð*†Ú·‚E€ïLª°X‰”¨<åÌIê0L™íßYoÀ¤Å”òlWûĨ7ÏC1d‰oûóAvÝnú;vñ]N-WÝíßÒEÈ’]óÝÍO†xEÛ'°MŸ­6!tç}U³”ù-»-¿Czuí^Tܬ‰ƒŠYMò̇´©á|õ­Oéß¿ÿ‰'  ZÅ4ß/ù³ú/þÆK8¦è³„EAªiö}T eceeÕuÜøÇvvc¢5.^•ª$õÕŸ8ñÊ­u¯ù ÚµiÃår¿CùñÇããã`Å ”qÍ"¬–…„HáP°Ç4Ká ט+L½ º\ôÏÁd*`Q5‹ÏIdÍ ÐãºOZtÈ“Ç}P«Õœˆh­v2Q늡!‘Ê?е£¡‰ÃápZ»¸˜Ï_°± ÐmÝú5|a§>}œœœX,Ö÷öÕtèС˗/o¸õƒ(¬E¡‘üÇN„dä¶zîÜë'ï€/šãÞÿ¯°™ 9»gû¦FoV&l|X £W_Ë^>¶0Ô·ôÛ‚Çî?W‘í²Mpt¡‚F÷S0P”uÙü ²kW1X*[…P«HÞ%Šªø²Æ7nìܹ311qðàÁcÇŽíÝ»wCx¡«¼¢Òi´z˜]Ž)ä§÷T-;ÕGœ!'”æ¬ÇègcZÓs¥R©úÄ$ŽÇÜZ=TÉ$ G®|¯@ßPà•2]£e1Ç¿ã H¤@&zF@!*ÀI@Ÿ$ !ðe€Ž%à2 kµÏˆ'+éj¤Cßkôß-ˆ‚Cð¡C‡"##!‡†ø622úo”ÒoÓlc¯®;O4…¦yÄgõ`@eŠ&„\!#'¿Ÿ}Óê{ýÞB¹Oà76 âÏ/”tYü”ÿ;&о}û­[·¦§§?zôhôèÑ8Æ0lóæÍîîî666³fÍÊÊʪk•†ßIÉßÖ^Ç@¼ZåþNÿ#SÅs<|šOǾ€¢^5¬gw7W Ìh×Ê«ßð‡«ÎéÒsЈ2 üÒׯ³E>J 40nü\¨†Öúõ%Ñ@Ö¥%ÏÈ€ €Ä]ú¢ÂU·0-yÕ UÄl½Ü'ŸÉ;>6*_UÍŠ€t§T©’JjÜ p(¯((yâð ›Í\}ó9Gà\P©gIn!@±‚ô \+QƒiS†¶ÝÒ«@­já›’ FÄÄ.ãQI+N/ƒãoYYf.¿>’@&JD‰I%E*\•úç®ågãù/#O&K=Ï4 ùu@ð¸G‰<¼¨ˆ÷üùs9y•øôÉ‹bÈåÅoÒŸ¾,(- ²®ÎË/‚Çç¥<{øô <½8;åÁ㤟ž˜_ pÕ?RÙd²/LjÉdr``àƒ222~ÿý÷ŠìN2™ìáÇ€ÚÙÙyzzž>}ús ,“Ë¡êSÕ*È«½·¹~M}ÆyÚøQ˜¢â~k昩å‰å¾;* aY¯_W‡OàªàèÛý›¨Ñê¼WÒã8¢@)—–@*× ½r¥J¦R©”rPàB#«AËyIgn›_º ‚ľ5‚T³n°àšÎ_ÃyTøÇ`’‹ö›¾¥T³ÕmÒaÖ¡ˆ|°á©—FMx1¤—jg`˜v]eïÍŘ<{RYóõWsëÒô½I*cCñ½K<Ú¥{ëþˆ½¿ucì Ž;Øš·há/KÓ3lÁ»(b³Gÿ¶PHdNùê#Oaíïl 5phýhÛš "æ*AÆÊ¥«•jòÙŒ Ëç:= l¯øññÛ*µJR\&U0Øû—l°7×mkËÕÆ9ø»àõÕÿ3IKK;þØ5÷Í›7GŒáçç×­[·±ÌJ¦l¤?¼hÄfP[x˜è4it uÈL@”ñÓÅúÖ\@6vÑ5˜ëu‚žöRïš¡’vÂH]I-ÕþyS¯ÈT€Ëþ¯œDDeûß8L ’G¥«Ú—€it}®9Öd5teŒoÁk6nܸsçΕ——ïß¿ÿŽ!)Ÿ2e $è“ÇÁH• ÖÓ1®}^ÜÖJDŽ&øyÇó G÷çòÍä€Qƒú§ïêóGliT°›Œ f ìZá—Á£zQ¨•ÔYþ*1#ûM½9ãðÔëGhîã7=‘G¬ s<õRã/ã§\ýiÁ®æ=ç`dÒ©ßÃ\¼§ÆiÞa‚—×|Cv[wŸ(`õ¼P›~~Àñ]½Ùe€¼œ*N>å2,°¥Ï& ,}"—P¦·2cäÆ;€Œ¹öœ2k΢û%2x‘²è?rßË!êÀ÷Í&p°µµÝ½{7$7Ÿ½T(58øùÐÄzUR³øyì(å‹iÓ×,þÙýÇ1sÏwÊVÍô/zýâðúMƒ×,Ÿ‡@½î=iÐêÛÎ ÛžKwÜàÃ)?.‹Ú°¡|áÚýá~ç»óxóææ%?yrõN™*qkÀÊø8$']r,Üù¦<}A÷6Á×RE* ûkàÈË[ž,Þ{Ì­ÍÜsC&,;<ÙÜëˆÇ°M×/G_›ßå¨[›Àc…•ÅÀ'9¸9ØÃLJ††4hûöíÕ2ûª'^?™ŸRÎê„´ÚfôôÔô!›þ r%“ñ3·È¹r ]~œïüìÆ¯B\®"0Ùð€ÀžÛ€<í‘ëûͶ3P³å³³Ã†Hr˜ð³’ m[ÂÞ]»F6oÙ‰ûìNìém7–[‘}›Õª£‡A¤>ËjÚ±Ÿ0ù¡ëfëdðêÞ »}K“Ÿ9¶®ÝwB $<Œ_ÔÉ££[»×‘ŸŸ?}úôœœœµk×öéÓçýŸd2YZæÄ-Mš»}t5;JÎKMÊsšàhoÃápÚRƒ:ƒ²PRœ~’DÅ͸ͭ¹íÕ¶²þr!¥ºT-HË)/0-[ÛþP¹{X.ÏJO?•’M´êä`¦_•Ai@Ä“eëÔ˲~… Ä¿Hë'ÉlïÚ Ò‰ºšrxãÆ ??¿îÝ»oܸ^"Çã%'=ë…Gæÿ÷|•d'>²žÚÊÁFOO¯aN«=” ùiOßœµ·êh¢k‹ƒ†’Æ‚hñig™ˆyÛ¡ï´|F…B! E"4ë¤÷Bµ:eÊ”‰'Â_ðëׯ¡fccß:Éî•N‡ªˆSXMë¼eË–¥K—öõðd<ÚeÕÌ¢Âç¥*J½g<¾¥£}õY3(«0ÕÍçÛ¶À pp¢¡gaAôuîhâд[]]³   oß¾­ZµŠˆˆ¨Z;¦¤¤ >¼wïÞPç}uñÚÒÓÓÇO˜8³-¥Iÿ@û–n¦¦¦ ?^mu¡|7y£}áø)ôÀ®Œ"$5¡F„Ð\þ‰âšNÎåXOO«·©ØOBmªXíñDʼn\Ú0ˆfÝ,Úåר»KÜ5¸”¨8ýS@F¨©¹1vú^:,ƒÚ5ÓÈ‘#!4¯^½Ú´iÓZœ~÷î]__ßU«V}E~L8”ÁNHùx&ã%Ÿ"=8¸õ|«d¶jÑB¡š UpÊßEØCýé!ʶƒÏMvš áøxó¢7Ï/<†WcP¡.¯8˜‰Hz¸, Y³í»l@Œèè)¬=“‚~[¸f¬ÿåK“½Â颇`­=ŽÜ ®Œû«‚³@©ÛGN]ºhòð-€r´«ª.*BfݤšY”UU\–UMÿûï¿ëêêBB ·O:•œœ\;C|š\8¾xñ"“É„ªº#ªa‹õµàøZYXÎ/EôXfŸi ½EŽvƒÀ í»«eµô)‡(«•Ëtefÿ®Ûn²ìÿ. jcU’òýÄs^n!•þãíí=wî\H‚ÿƒÖß¶m[xxøÖ­[G ¥>  w–ò‹xHœ‘žUM¯È@4Ë»d„Æ}ÁDèR ¢BèjBïDGPE•95Pjn ¡Iˆy@5§“ŸÍÑá@ýèÄ@·pY3(ñùü~ýúA:xöìÙ/¨„Ö®]»}ûö}ûö5E7_TN00ûz¯±¾Õ'Çî ïâ²”˜ó¥èŸó½õx±O% $uÊÉ‚+‡D9¸ãd?÷ñ„!L:ßÏ}\`Ÿ\±xZDZGŸ ؈ÐË}ìÚ°Å(bÖÜg%¡u; ÇNB$î[caî}%¬ß ÏÊC˜‰‡W0VøØy®¢ 5«¤šP¶wàç?ÁÞÞ>33S__?>>þÒ¥K_v0 †•©ÀñŠ+œœœîܹÓÐ0¢y*4Ž$'j¨ ½h’å9P»᪉Rh•áÚ€!´ ×íg_ÉÜ6!_U8{Á•ª‡©‡ãκ Þa×óÍž‡·ööèF jàÔÈ÷Ú¹Hu›j~œ¸ª´Œ¿÷ÛÈíG½‰SñÖcwÃ\L¨`Ž¢†LC­ÆÂ–X[Û4Li¨V*¶!Ûô:""¢C‡x­1ÁP©TÏ_t袕¯Ìì{×[:·ðhð&ŽtçêÁ´ ‹jZÔ !ovÀ$~úè0Ä€\™u>DÃzÎõ™¸8:M¨r½œçQù¡d™K·ì=ëìÕ#þ¯[J ¾|!•il2Ùj\V« `ð)ÓßÄÅ_. ”¸õé9ÐÜܼž(ò»<=µ G§‡—Oh袉(òyÙÜfÒi4h•"j þJÕÁgíårõ1L£p¿JÇp2•¡£Ç¦cFeêr¹ÜA›bïo |CèÀÙt²PhL='XT¤Öƒ¯ßÀÉXµ¾öÁc¤Ri^^^fFN åjû.î,ºþyÙ@4ž5UÔçøHF)¯2â ’¨–ܶ666†††õý¶ÔÊwïÞ­ÝéE×K{îl¡#½ºä§Y¡O2¨KCæ›ß8½[ à íÓ"T±§Ç¨«Gm,<2ËnàNÞ ³ÆM3ã§Ccìâ]ç591Eÿ§íaSÂ^¥_¥°Œ~ÙsíQ@‡ŸOÜL}E9¿ÖÜlÞ¼yhàŸßk623‰DÂ+áåçò²åz÷Ûºwa3 *´Ñ—bP¦–§¥%¾V‘:5mÒÄÄÔDOOï? ß]åÛ·oײïQ©˜Bå…J¥©Ô€À4„T.‡µ'Q¨j¥‚J§*ä*:“+•8Ž‘)T¹BE£’”*5ƒAW©1L©¦’ *c ª”KÉŠB‰Qht•Bþ9ŽÂƒ6p(“kˆ”£k+kï(“yóKù¥©¥¥¼òRQº }ö(³·k«ÃáÖßôη]P MœÀ33Ÿåò±â&º4+.×ÔȨY[£Nlk6l÷/5 ~lBœ¶:ouŠÀ1ŸÐîÐÌ$y{âß9˜eoH%â÷.«Ù)“j)¿Ý¯Ô¦h‘É5w‹ßF{‘©µ^(EÅšÿÔR òÞ>ör?fD~«æÈµF‰DbkÅÂÂB«°»ªT*øŠ ‹cãvõ誮ÒDƒ” *éåðíŠ|x¹B 9ŒX,‰Ë¤BÊGeåj&Ú”M¶dÒ9,Åbêèè´ÒéèÞžÛpòÝV ˆÌóó =Gi÷éq Û…. 9ÊïßÜÝ^ÐÁææ 1Ëc.í±ñöÁc;ˆÇ·®D÷Ÿ4Á͈3‹ãéÆèm7`öú…>S'ÏéýS¨—£AeÝ8ûe¹Ãúµ3–Ìø™á0zÁ4ëè·£bxƒ'N²eæÞç™[¥îßr+Ýž5êâ7Þý‡ôš¼Þ0f Aw±ÖÍHôDÌuý¾ïá¢u›u$E±¥º ë¿ftÞ·v‘¸²(îÿŸäË@¹Ò>MÓ „“5ãÞíî};¼ß¹JÂׯ^ò³hF$w®ú+Üaïl‹·©!ÌI$†öß&T Å„BnB&ý-ÈßÒ`Û´R­lé½R«ßd 3Ò­RgkLDB“ò³óœjoÓÛNé»Ï`ã/C"æ,Ékzñt€R|zØN^:c¢³×ž'×õöêyø*ÏZ¶^‹¦—‚-ʼnË516æB³šÉd~«¹g Wvqq¹|ùògê—[¿ù¶_tœ¤ ä¹BCC#""¾)®\} mjjâÉš".w³ôb:2¿«¼IŸ=+{†ì¸¸W!à ¥T}z¥4l|¨²È(P#B­ P¨8‚¨•ÕÕÁß2W®NÛéh|RÍuPüçÇve£éW.F?œ› ¸ žº)‡ÒåF©­¬”K&‡¯qŒSSÑô2†WÿVÉ"¥ÇU‚<]WsS7ë0níïíì9/Z»x¸‘ *\˜™äÜ©‹­!SâB±èvuuNÍ,Qd(Z÷j‰é±U2þ™ã#=¦m>ó“Açý./ƒ:S‰$¥¬gšÊÔ€EªþèñU@ùNôE¸òçDÑm˜~òäÉoêI£T-r¹¼   //¯ …<::ºcÇŽzzzÕ¼,´4V¬X1}úô/’©rE###ssóû¢Êõ(ŸlOx€fžVzúܹs×®]«P(ª†Ñž={&MšdeeÅår¿ ã¼á[íPþb¦aqqqdd¤®®.Tx•B'**ÊÉÉ©]»v&&&_ÑrÑF(ÕsVVVpppXX$'ïöçää…BOOϦM›~u14¡üýº;x<^||<ü×ÚÚþyõêUÈ(,--¿à4’F(7JíÕ34<8nÜ8 6›ÝØ&PþŠíE( |zI#”¥Qê]ÐÆ&h”oCþ'{×ÅÑÅgw¯Gi(ذ÷n,Qcì½kl±÷ÞÆn¢Ÿ½Æ^b¯ ( ŠˆHïízßòÍÞ©1FõÞoá·77»·å?oþïÍÌ{&­l“V6‰ILP6‰ILP6‰ILP6‰ Ê&1IåÓÔûÊ(zZ“›Kç³@ÇÖŽÉû@Þ ½J¥ÉÏ3ÔG8ööLç;|h&gÜçef&E‘AÜßDàÙêU°—ØØpíí9"c,D[\¤.(Päët:¿_Æ3_e},|ø0ëäq¾•ˆog˱´b[‰Œ±G4……š‚yaF*õ5†gcc‚²IÊ)„^WôðQö±¿8æv5k \ÝW!C)—g¤Æ>’ggÛ¶leV—ca«Tq çUéÝeeÈúóÎiû†™Ê¸BþdÏn‹ê¡ˆ¤Ø¥yKj_Xù}õQ”P*_ûË¢q»ÚuLP6ÉzsµãpÐwÍ”ÐëõI[6›[Y9µi ÔPBX=5.Wû(32ÒÆÏ϶N(ÅâV½R™uó†{·î@©,Ãs¹ñ»wNšl‚òw¬_q<óÌ©¢;·ö¡%vÖÂ43#qœÐj5ÅŪâ"en.×ÝécGÙóç¥Â²z(Д::Š&Ÿ<áÙ±(Ý[ЊÅl¨¹ËñÊØìÇ»vM›n‚ò÷%Z™,óôI]rr@Ï>€ñj9Ý;ÔkÝŒ é/ª‹ œ7å;:‚Ò‡Â@ðY^$ÜOöì5l, ² ¬b‚ò·/ñ¿­¶óöÕ¬TªW9ÕJ)`±U™él¡%ÆbWºÃPUN6Ï݃’ËÓ.œWêõ'¡F/‰ Êߘ¨e²Â#‡]Z´„œ÷Û¿[Kú4¡H*öø©b‚ò·$Šâb]ø-«€€ ;#ʈxW¿F Ký„á»°à%$':CrÚO/LVüÑ¿'ýú ¼AÓh-8Aäü±ÕÊ?€†]™6”¸\€±—Mdr—’{2³\¾ý–ÛXÁË0rÁá.tbW€0høÂ£(0ÙŸœ8ÿ¤üuì…á(x*.‹¦Ý´Óú$›VعKÒ‰c” Ê߀À~©àY‚OçiÐ@`•~î §¤\ÚÔhÙñ³KúRNì€áK‹Row]µmlû"ù³ˆÈìW•AîÃÍ=7_Ó( zìU„o¸/—vz0ÿØúÙ1ŒEƒFé˜÷jÜ­Ò3Æ^L©ä…ÙÚôÈ—³žšY`fÝâ§€‰–íÚJ¿á¸6* 7Aù’$sŽ+:ŒîãáêùS³†¾ŽxQtÿž?‰öwþÔéŽm’[ú±¤Ê>Ãûð˜ C|Ž…¹05.<ñÒòù7Ô¹E—íý§‚2I¢¡Ñj¿vªù]ÏÁ€¯ŽÔë ãb•Å…Æ—ZÆF@‘H‚‚ÿ "Ÿ[/muãZË8Æn¬¬Õµ«ƒsÕW£qˆ¡ÉòéÆzr0dØr´3ZVY¨výÉze^÷Kq~ kÒQ@]ýGwìžyñ`Ñ–¾…,àî r ­“~h>êäp‹ÍÌœt:„Íþªßæwjö=yœñ¿ÿYûø8׫opTayÑìªU/ûóC %(º£Hz –ÐãvÀhJq+§[ˆ³`Cp£]|°í{u ,B(Ã'KÆ0º‚1BܧýD)X¬Ä}{ÄmÚW á|哾3(S”V©HY»Ö¿c'>Þ+f2?‰NdýÒ7--Q¹^=I$ž<á׫4ö!^-ÄÊË뫎[ð}AY%ë®]úùA[§¬ÇjµTµ,.T£¤Nƒ2JÝ#Ð !ߟ1 ¡ ’Ô“}é ú÷Ä£g`¯˜öðâïsvÕCÌ\\Œ¢8á)ÿÇnì¯92ÝwdöÁ:mÓF¡—­}Ëj1°ñSç,š>P¦ÿt*÷¯…£(ŒEJÿç˜KKÚk²ùô>E{èà,ɽp¹€kàâôp ]H÷½ƒA6’=9R´É[’…ÀÒ Œukæ6@æj)4xâ 'ç2€ÀÁÖ€‹&×pòc¬=¯6mÍìí_? «*A K‘_óûý^Ì>:!,<=Q.­¦VÍY·R›.Ãt…<&ÏuÈR¤(¦ý äTóô- û•ßz4¯–áÞvY=ÇÅ}}ðœšÓ°« lúœˆ&ÆÛ?8¥Ïk1ª0§œv›ÑÊÉ¡Û üäÈ÷¶Ï$­h‹EÇrU[mY>Q"x0nÍå“®ctî°l¢WF§™‡·èä)S7Y8Ü7A‘sù…zÇâ¾õ›µ½^èrdHX…= ÎFd£Ñëy_­bþŽ<…\œš"ôõ-×ôÔA§ö #)\fo¸nŠÈaûãsGÿ¼èqabÚy¯ê ÞÏ2Ð1M„–5ì<Ô>®u;íÙíûö#È–t"@ס3G·“"³Nÿíx¼Cd¯º U7·à“Ò‘¿.Ãb(^T ½ÇõZ’ä‚}™F¥&Eezûê$’—²òm.ÕôŽRz°‹í$û €pêâÚ±qÞmÃNrÛ8Gè}D›bŸ/iÚð×ý·&v|Jh>-4° ÁŸbc´eP€À€9È¥ôB(¡Ê ¹/ P:À…À~ždJYsoÎý©Õ›-¸|uP `ft €r韃'ü¯`®R'=ω{T­gïÒß ©ÕFäåWoÓF ˜ üÐeF“•••œ–¦¿~Õ¢„ŽŽNÎ<+ÊãƒæºO'J‘$…bXÅÍB.× DYPPðä‰{ó9|ð.Þ¹ãݹ‹››ƒÁ0Aùë@3ŽãÅbqòþ½!>¾GG\,.~‘¤*.Æu:žHäZä·sÃlöó³g|Ú¶¿wQü8î¦Dâݦ—‡—Ëý– ®V•cþ.ÊÀ0ý8µï7íì7‚}2õÃà¶YràüÔÎÿø’ô·åS&ÌXJtggÝ\­õ {ÄiÓE$¯8ùâÒE¯¦Íþ¥ÔQz$R‘“u릦e+O_ggg÷U‘”ô:™;w¹¶iÍÿ’÷ÏJv³ žÊŠ‹| )÷IÑEÝCZ¶6 W¸Ú‡ä6óÏë©25àðÎ=$TíUÏ`ˆRU|òĉjM;¹[qΞøKÊêÕÔ)=)åV*Õ;˜õGø“¡ýû.?ͪfunðÜ@[q]¥VÇ€V a6ÔÁ”L&KIN|ž˜Od“æ}ûû9:ŠD¢o YÄ»µ2,”¦§#/^XøùUº—Ïýý· y Ëá|÷¥Ðù‹æyµhõIVÔah×þ ^]éÖiíñ& ‹~ „ËRkþRC¯š<âÇ•gcÝzÏ8×PÁé¹Ö=vIz­]úìy¸Hýa[#ÌjÝ|î…]£ RuÅ^”4;ëùí1—'çpKKÌ/@(´°27·²² …l6û‹¤üLZ™ ¨Ü=»üû (ǯ±…Ü;¸°öðE@ú œ;ryðÐÙ÷î:Ôª]EBiT,¶Š}Ð*”DoŠu“Éq¦ØhT`P\¡d†XJØÊžkl;ºé”¾^@\hǵTÄ>;½aPiªâ/J™Yôc7¡™™=‡Yß P 3™Ì/˜°âùç;K%î­ÛÑýûÜ€zš»|Åj9*ž½vmþk²f¯\YÀf6¾pÍÊgjâ×&¦M’$Ï^³p¹÷O]Ÿ»r3°bÁÊ™jMÆ} SpçÄé»·¤Ü9 ä™á)²8AuºŒ}{‰²ÛAèC%$êÚíæÙSeö¼–fÃñ3Kƒ{LX·¸up“QæN7í[} $Q»N Óþ\Û«Á ©ÿ[0oÐò•(Ål]Ũ¸ÿë¼lù¢+I=‡q¼Zäïÿù»»»ÛÚÚ ø¾%¿›`$™‘’ìÆb—ä™b³zuè´ÿÁUûN«r—{¬K :=yÃå¨m]Ý:è.lüÛ¾£CÛö\·H }¥™¾Ëœ›Ç×Ö½ð…dËø}ù/†z·þãñ…eM›O»p¬e`½‹6ç]H [=zÔ„¸µý’OKVÉ _º¨æúM嘗ïÒÅçÉ)97®U‘ˆ=5yÉ4Þ|ÈË?ðµ»wP,òÜ)îÀ!¾žž_µw¢ü×ãô¤Ç #Š:Ø‚\‰§PªH’@0Àu K­Ö¢@ÿèÃg H‡’…—r +ëQ> z?¯à¹ÅöÌÜ}ʰñI±PêC6=K¸|nD¨˜ÍÍÍý¼½Ì¸œä¬¬‡)Éf·#ìíílmùB½PÍOJ’0Øß· ÿ/*²ÜŽÀœÅç—Òq¡Îκ'ìÑËÕÑ‘ý•O«/?”i”¤a¹å{D§ïÜ¡ÐêÇ…9CFQÏŠ;îÏöãÇŽÝuc‡©2rÄ QãI¥5ž ]½ãÙ·v鄳Œ~@£Úq{Ùø_F÷^²YvëÔÚã"ÿÜô , bº×ô òŸ$Z9ó±’ñøQ=‚ÀÖÓÓvµbwwqµêjuº^UTDâ$G7 ©Áµ¶.¯©ð)ô+š—ð̧]{ —Ôº Óðœ¨{OóóuêºýÜËÕÕÕÂÂâãe ÉÏžy—0k¶tÆü݃K‡¼ ÷ì›w¯Ølas‡’ª›¡~š{f÷\P*ð á«—×X¿é#;Mxïðfõz½N§ÓòoÇÅIæóç×®†´l‰ÂŸ(«‡Áȉ‹s ¬@®“Is ò­32ÜÝÍE"“engGOtÖjÕ2™$?¯ 5U&yûðÝÜmìììmm­­­!ûN¾Ê æÇAù õù úèð5+?Êob¾ocHÚ«Õ¤gdddXÞºìí-ôðDy1ËÎrR*Ííl­œ]é¨pÿn¢±83îÚÊ(’HÒÍÌ(gg—³§kµm÷Q,…ÉL¼zåYÍZ¾u빸¸0 ØiÀ–¦7@™|Õ]Àr ØL¦ÑI å;LÉú~(¿6Ú^º,mÇ ú{õ²–û²/õ 0¬ÌÑÑQHÔ*Ãð,J—°@¥“^¡RÔSEÝ‚:`¦{¤h}WO RÒ³Éèo•€Å hÔôêïþÎ)5'üaÛgVÞ¯ak’&Õw,z•ǧUÏË_ù|Ñudz±±‘Ëå2w7‰L–§R¥*:…œÈ˧ÔjT!7¶Ë”äê~~î!5Izp_ús/—ÅdU«~âÑC§¸G! 3‚Ò.ê6†FV(c¢íÌ;t¬êêjgggì‚X,Öë¾èuúº)‚ïXJ€2õVg*W)%þ¾Ô½Û…¥£Ïs¢R{LÐnȦ®žT{Üë´+ÇNÝÞ³føÅ\®wËÁ¬¿ö†#7®nZ Ïý÷o]³'v¼cÞ èi¢ÒøÇ)KBÓ–Ä$uóT®‰âG¤gY:,[½ÐoÔ®ÿÝ|yhãÓ= #2°ñ`\„lÝcÚ²ZY+"ÏÏYòû®ù}Ý-P þbSš bŒ˜†&”QíEÚk‰ãÏ_$A:Ôê—-_¯gçæBêÊD >Ÿooo/vu•øú*•©2™.'‡JK§Ô*¦Fý’êÒ³ :>³°`ñêZØóxV–´ÀÃáïš ûqP~+3EÉ!g0âZ•– åR)ä2ÎPHˆeJÀWjÌNù;¯ÅÛß ˜ÒS‘wêvl-–È€^‹“h×MÅëÆhI¥Tß¡T¡nÖÕá÷#w¬»vw  WRz NK¤@§%S‹8ÚËLZ]‚~VmtoQ¦½•“ã['ÌÂÖÖ¨ÉlŽN£a\P›B, Õ¹F£QC£Í¨Ýu:c{€§‚#y€ ~4Ž*›@\ Èbÿ5·“æB “Ò»<  ’Ð+är`ɽ¶ƒj›(-`ñèÕÅE€b‘(*¢cûqP Gé:K¨¸€ZA¯•€gp\DBH_€FI/¬PÁé¥Èz4û¯Aޝƒ¿†Ü÷žUSø/s0|Û– ô`”OHŠŠûuRµÆŸ^¾äS§AlO’šò´fíàZµøïË0:IhçÃ+ymn›‡‰õ~z­ E"~¹£0ìa]¬0Ö¦öçÂàr 2N·Õ‚‚—‡¨ \šòÚW%:ÃI¤†œ¯«Éþ•bñÇö»§0lÖ¬ÃâË?;-I0p}AÂÓ€†2Ç¥>yT-[Wñö~߈úkÈš÷¹ Œ€÷¦úœ¢ÖÔ 4´Ê¸²C£'R23<5âb&@”#GÛ…vv¶¶¶ßÆ´ÉoW+¿í3‚¯Wæ>~Æ­j¦ õ$ìR•=I‘Ã¥=t•^ 7 TÊÓZ}Öù ÁÁ¼Fªúù‰¬­!Ç5áø‹Z,i£@näžµ·^èäÙ)buj.$Ø“Ç A“32 :øª52Å‹ŒB@á/22)Ø¥bXZf¦–¤ù·L¥.ÓàEà·‚¦†ðÀ"~ÚœÁ©°=PŠq] ì?‹U·ûOy5jztÿ©J`[[È+L8®lPFè>½Ä‰¹önÎ~>Ð>?}ÿ#j‘žgÞcóŸÊ{›Yµ[Ú˜3‡ì9Þ«¦çO¿LðjÕ²Ù ßb,GÝCf ìXSÏÅmêôYó&ôójÑjØØÙ ¯²mÐZÄçxÚÝEøõʱ°vÚ·ÏÍÎö÷ó³³³c~Í×¾](#©VÒ¡ÍÞ·Q$P(UJ™^«éR·š•†¢Ïüz£ãN®¿'jõ· _˜_ìpxݺ©#ÛÄ½ÐØs¤?w©Gú'(Iu<¼~m÷>ü;L½vháìÓI*­(Õ€"Júu²R„Ä„ŠY(¦§§›g•Ê“Yœü¡E nAóŽÆsD²-PÞÇÞZ±}ú¦c=û=éno ´Ô‰¹µ—ìß¿øRb¿Éƒjví}C©õçÀåW<8ĉíýá·³Æd\Þ0{óé>µÚù6Xz”6\ÂO#æâZ)L #33Ó£J¡YÞ9=/?ÿé¦Mš6y ?¶¬ÁÀ9¹æ/÷ñãÜV­|}+ÃŒr333…BaBR%ÕÊ33‹nÝo>d˜Õ…ükƒÝh)W•½ôê½¹‘ zÌ6à)ï²cc㜜íml* 7 ÐU@L#“|g´ÄÝœžtê~ó^ä›Ç;vî‚|hQ…ãgOGþãÁz•ž´<´’ƲH„´ëàëáaiiYI²³³ÝÝÝM`ªŒ†¯•J:ì˜X,~­u`e=Ž+®_oR½7‚Z*½XT$ ­gC»|>ßÚÚâ¸ò„ Ù·oŸ££cSHÆLR9¡l®qÐë)Þ4”õúÔôtÅŽ?4kþιùIIw¼BB à*Öc€a´´*ÕÀottôíÛ·ÇŒS ß.–uW/:‘Ï·$…5™Àt­Q(¿ßR©ôib¢ÅÑ#auÿ¥›1,åÞÝ„ÆM}½¼œœ¡Mö=ø§ »˜2eÊÞ½{+ß§Ä2¥•*08ßÔçŠc/Y„õ~k4ªÌ!‹ï½ÝÝc[·uˆ~`éúÊ)Æ`DGÜ*þ¡KUw[;»ŠÕÇ•Y »€Z¹R*/J.—[!ä§rÃ0§ Ž2ô ¨ÀA-’P)UæÿQÁåé©aÿnieåëãiï@¨ÕÆIú—#•?vòõ±¯h^Qùš•óÂÈJ´ õ›žvËdÓY‚(’ÎÎmnf@'XZM™0ðÿÔ‡_ѾQЇN"ÐH×Þ^-ãçFí¾©r,”žë +øtOÎçDúWÅÿeå Ì «ºví+´òö9ÿ쩨W/ï$äÂ[âíí ͉Jzãô(l¹´2‘Tgq'Þ«~· “ï-ìØe ?oðŠs‰+‡Ü¢,³2léa¢Ô)?nàÆ^ÚqøB½·ãç±v'ûí{Þ³=ëgá“]×&HsI^Üæ÷@FæÖðë£,]÷¥Ç—sï{n§üOª^'''^½]'MZq''+ËÒÒòû\ëëååUy]ËåUÉ…ÂW9Ô»¡õâµsü\¹Ïv.Øza÷Ö?fßNO9Š7ߺdÞ¢Ð*£ì C¶ý½r¾C} Fʨ›¤îÛóƒ« §ªpËÊ‘ç£Òþ·dƒMdݾ²õÈþÁ¼,´Š}E©åI9÷z«X(Ã"{{û踸C&$$4kÖ ¢yêÔ©ñññß”«øú(Š ++”Éòl€ ?Ý(?¼Ï…Ö¾\¾ÙŽíçÚ´Y>>ÌLü"jÁðŸ‡t¨ú²2I°ÉþíËŽJøTF\^ò¥Ö“â,-tÊXmV‘üRa[ ¾ß6¬Öù3‰!îºßW$~–_†´œåÛˆ2;ãJo^¼©‰cbbŽ?¾~ýúªU«vîÜyÀ€VVV_\3ÝÏ)¾ž-a³˜Ø' Œâ<œÁ¦Œ}ѸR©›Yׇ*ãB)ÈyÒ²r=ˆTÀ(×ð¾À‚Î dm U@À*X[…¨ôÀÚÆï |ƒQ¤×„Cç ‚ŠV¡6@§%Ùiͳå$ˆoÈ-dcNŸÐ Êò®;f›eÄ\·o:è­áÞO˜‹D«ÕÞ¿ñâÅ"‘hÚ´iMš4ù"9ÁWÝMü!ÈËŒ…‘$øêBs¢/$"£¨±5ÇZÀ/3”ñärBùC¢‘g‰é• ®ÀÍÎâó=Yå‡7?+”ßÇwìØqìØ±ëׯ>¼gÏžaaaŸáwáÝ=ÈÌç-Í*Ω˜€D cBS†ñ{è£S'Tw(£lPÖ'}"(1P~þ_(&£›Á` 6ìüùófôèÑ×®]³··¯_¿þüùó ?%Ë$‰ÓiE §@i6{Æ¶ÎÆ ûÀ°Q¯ö_í°9`ÀÌãòêW_e^ßð\ Eê®{1½›7êÛ¡E÷æº7oܧ}óîͧ]^Þ~¼U¨3òlÛ ‡Þ)å…éHÐ.À5"%·ÌªçÍ™ß,ΠýwçMûƒNñÎYàLH26DI㎯ ÝjÿÌWï—åßz(——4‰v(زv3½´ž>Šž@öyçÜ 9Fÿs¤¢Í¾ò‰¯¯ïôéÓsssÃÃÃÛµk‘ò×_IÞ™Vñ#D¯ÓÉ)L‡`uÕë #ð«výþÜz“ÉkÆèV«ÚÿîK´™×;Ô þó¾†xq ]­àãÏd”ô|›ª^q:J“ù‡ÚÕfýy >[eöcœÌ9 :Žu8ü&^\ýtøÍSá×)´å©ðe©iiÃo^kèkޤ4ªZíëb¨]ë†tBÐÒ^›Í•ÈȲ® yÃ`"rÎv©!ÌhÔ&vÓ`¥aÊãób9d‚Ù-E(ŠuŒÇ ©@/R -N5,jGs$i¹*)|/Šòtš¼"ÚQ£I+NÕ¬X–k( &ÒçÉÅ¡ í91^¬Nz‘ø0:V [¬4[ª&4Å©‘1ñ†`l¸¼° *.h¥‘Ñq€ƒ.z/&N¡WŒ,Pè®kôÑG>ˆÕÂnÕß}yûF‹•×Ô8õA³ïKºB¡S«V­C‡ÅÆÆFEEétº¾}ûÂ^2+W®T±!(úÖÉÒmé禮ZØ[|üwxˆXÉ<ýðQbß®îžnu5¾¾ü¯aíîg.ôésëþ•{©5ªVƒ&ɳû«Ðò1_5|Ȉ¡“̸˜§HŠÐꀖÐAi¡…£Ì>n\шÍ'Í;ŸøhL75±ñ'éfVêËÓëõeÖÊo´̺Õ>>Û[Ø"¥t´¾Ã4eRúÀ#ç]ÛÅvvY±Ï J©—êÓìkݺ1W‡q JšÂ2ëèb7÷ù§ff¥ìÈР[÷ëõ)³ 13[GW§@Oóì‡IÕÛÿàóëieÌñ‡…T6ûú4ApXàÕ~Ú\«­Oãá›Â~ìÒ¤ý'ÆN¬Ý¦åc€ˆ\}[$±‡Ÿ)zwÖµO·6‹ÏÌ™\§kß°&5܃jr1âß+;‘Êå·H¯^½NŸ> ßÖœ9sž¨u`ïýßaŸ pö®‹³•zÐosB²’Æ¢ÇOk} ^l*¡Û¬ÖéK Ðr.3טßÖ £Ýº¿þðCónü%àz¨+dcµ½ Aê+Ą޾ÐlĬ¼@Ün+»¦(I¹YX1Y”9ŠÎ ­±áúŠ^Mf.¥É¾PÃcäI¼;Ÿ ´šÑ.Ĩ=O|<AÔöaæ˜5­ûÓdÔ£Áü뱤;ÇÖ·éþKj³Íî\üŸ;úD~åÏ##B«qÇŽgÏžíÚµk=~øá‡¥”I§Æä ®é_fÜ¿|µv³f•'˜Œ€ ÜÔµf•R¦¡~éÁP<¤WZÁγr—z‹Ÿñ<ξÉÀ·<_MnnEÛîK¥RȰ«V­ ÙvXXجY³œß7‚*—>#õ zãf:¢25ærjeò“ä­07­nÌœ¹ HUòôžÛù*§þXXX 6 rh/N˜0aÆ !!!ÞÞÞÛ¶mKMMý/–ß‘†ÐÞO/ŠŠLbæi‘ ™äcfàÙý¿±R{þuN&xó@x6ý¿§zçFPåZGF‘µAbjÆ}O9ïÇB;£€™ÙKŸÚ›Ç X/÷yftìL/ãÀ5ò@ùM X±bÅ£Gž={õôìÙ³­¬¬ºtéràÀ`^OWâ76eò”“úTÂ9?.Loέ{,ð9éÆœ<<ýG»   ÂâÁÐpB¿VXŽüÁôWlz2#4îá>,É?::ªØËsЦÕp. lº„4ü.‰¼ü°`?IÂÙl:Sa]öºœx×ö±f߇6eìY n°.¸ÃÂv˜¯¬®•ýW9eÀëë ðþÍõÑâ_z5ÆË¯ŒuØ<ïN¿„þxrf»gû—?eºÎoG+¿›taXݺu÷ìÙS\\|äÈÈ5j\­š—þÿ±[›‹àŸÛ8»ùÔR°t|tW¼kÀ¯ÛVw:÷â¹þîïOµ`eÃZ ÙÀju¸,€+¯¹ 6¶±O¡Àèæµ•§‡FËfUã(HPÓ®ëÑæEÄÕ³ZKÅòf©§³¤Èk4ùY.M6ú¨4þÈ–ëø»Gz¹² âîä’}›..89óV¨a_ÂU#fÓ>Ú{(–ìÛdQÁ©Ù×’ˆw(f¸rä^Ö‰‘¥ŸnÆÇºLØ]£÷L’'¯ÑvT½ûF+uK¡¾yû_–Ý+l%,¯;h?0$e´²À[´ÿeõ¥X’ÜeôÜ{xäŽÅƒ{Lþ`3š42hÞy+bÆ7€¹hÜèà6cò¸¬”ëwEp é,XÜVÿåDˆË63ù¦¡ü–k¯wïÞ7oÞLLJÒÛºþ×A ,ÀdÂÞŸãç}bΜ ³§¿xxü…Çx¼ðƬۗÝ ÷¢ŠŸT›-`™ëNz=`°ÝŸ]\j?~[Ü•#¡¿ß›:­ –yžS'uwnäÍOï‡Xa1²${–ÙäãÇ›÷:îh2#/†thœ¶gá‚?º íx¶nøs}NE÷î0¶žd½“Wòú‡­‚’'ž}¨Äx9Å3Æü>ˆøÍÉ;e}´oë@ì¿×LèÏÆ>((hðàÁepP–¾ã–ëÏh¹wÉ‚^ÜÞvtŒ BaË)ÔúÊéß²ç¬<<}Q½f5ØQq–“ˆèò¹u[·]µ‰šÕ¬ziÕqT£\xÝh5(¼<óôÆK:«t††§‹¾„4k4véíîËY±G·çèé_Ô(&Öµ™¹¸iÙ'î}7P~Ã!ƒ-¸g-ß#ðr–§ož;sq½Ôã;jxƒ³{)Tdi÷pDÿP§ÅŽ) @²Í’wïïÛ¹ÝÚ…áý½A«úéƒÚv:y¥Úê­K`›Fbܵ’nm¹7iGjÂn>ݱÓè‘Á¡ƒfevò€Gö­Óœ°mÅ }ÿÙã¸ÂS›CýéÉõnþ:óÆ=Iðàçty,N¾ûjë6iš””4wîÜ®]»Ö©S'**ª4C÷eØÈP©:5aß®0üíÉ}}È›%”AQÝ-´SÂPn<ƒ±ïŽËÀgÔ¸G?ÖøÇ7qâDh,^¼xРAïuÆÞ(ƒ3ފЗ…ºpc2\öÏ©7Ë1Œ^ ‡!ôJ'£V„¦Ä4~aìÕ Æj¯?òêæË>&7#+Û¾qÿ/3èKú°>4eGOæë††}=ñòÿËBêŸ Æÿð¸CøïúzêUù¿y³DÿªþöU¹žø§Â›?úÖöE\³fMNNŽH$2dˆZ­þH³83ÓønÆB½ŽÞ‡Êõ­r\gøÓÔn‡ÆýËÿô©^W{ýÑPÙø+$Q¶Ë+Ñìc|óP6z0ÊC¸™ õmï¾a.ƒNè\•=g½ôò¾»øá‡ŠŠŠrss›7o®ÑhvìØQ½zõk«),²ìkìèŽéK…×@¿S(ƒ2Be€È›·´¨·ôçÆ³÷ßPjAòùÿ¹´ø1êà{zœVS8¯Kçœ\Ù¦˜Û=ÚdqeÓ³£¥ÏáV2Üìíí1 ¦NÚ´iÓß~ûmÀ€LIº¨Ã‰ ÿZˬ ¾>Q'ßÏÈ)øB®*«Ñç¿ j¾}(“e‚2ÒÎ-[=f+óN¬™¦þøvmŸü[œÊñà%MoµhåµZx|þâ­+&n9ökÇ.íVlæVôk÷Amùÿ0fø…tW_<\]¥ƒÙ­åËW_›~öüÍ­•½wp/9ž¿ú^Ä̳çþTíHߡ۱}öU(+¾A.7ÈÉ“'­¬¬:uê4vì/8Ž¿Ï"‚å:=®}~±ZŸÒ "‘þð ¯­Uÿ‹„ø‡¦‚““Ó÷eÊ05¾ôµýë5ï°e@U,óLƒ®Kë óØàRü%Ɉe“v^V&œ^=lnTê +× ·Ïï8õðòâ57®ôì´1èÎQA•ùÏjVÒ1çŸzT‘Kü…µÞØÊe]³öÚ™V˜ì1pöýGfÐc^вuDYfÆA§¥¥õë×îìÝ»·Zµjÿ%ÓÆÈi)¹Ñ¿Û5*M˜"?ñ¿]H€¿P(üRñÞ™ðå @YCE ‘ª²Ô:™Z'ÿ/š,ùN,ŸË²às…d&eh*5š£ÏüÑdð¶Â[§»Mz¬cÇΗƙq›¯Þ=²Yý=Wœmñ«N Rêþì8y”WŸ ]óo®õkÑ=âÀð6‡Áèµi [ïí´rlK¸u ü̉‰:í,ÿ_×Ë3UZÍ[ç#((_ YæÑ>77·7n$ YGݺu7oÞÜ¿ÿÿ¢ÙÃÍõ±rˆuÆ~†SµÓÈQ@šy•Ñ(ÀŸNXQÊYMŸM>­3Ž$)Ö„¬ËiQæf6žHÀ³æs-1”Áf ˜‹½cÙ™F''H½žÐª4R¥Z¬PÈ•bx™Þ¶ <ìà EKûN• źˆ8¿°ººR6®Œ‹Löðd˜¹äÅeÙùó”\Ù“«LûÚîæ€Ôf‹Ik®:íæódM`ÓV²Ç·õ“<¾<É“Èn.Þ¶‰W/©°>‘—£B;¶Ôd$¾Èú›ç3lDå\i—-U4S¥ø•»[?qâÄØ±c¡u¸}ûö7O±^PPs¯);p­ß{¼ªèŠÒ×;¸ìß+Ž? ” $É™Eq9²8Æðr®ã`å^º_AyGþC‹àñ9E ÏÒnòض.–!öB?3^I‘ ´Zmʳ§Û´¢Z^.Ä'›Vpn’ ÕjΧ|¹9q×®Œ©`goÿ‘Ýzrrò°aÃrrrŽ9ø²«Ôë³²²Šî­áÂ1xÈÿÛ)ÈoÙ¸To q\’ |B(Ǧž+P$ñù9ì‹€ö{^^^zJrR^‘Z§«À^v² …rúµ"êëp-<¢SÏÞ!ÕC 3~*ìWP ³ås=\œÝÜÝÍÍÍ+<ŽÙ¡C‡¦OŸÞ´iÓM›6Á‡óðñÓêÏ7r\«ýãРˆ¨,RP½£»»ë còÉ¡ü é¸ O óïm%¹` MQt¹`—.N¢€7ѬP(d2TEdEäüƒ]<ì‘ýõW¹\¾zõjhËÃÇÕ܇ÈX¹re‹-**×l0fffPºx|Æ™ßð­Y³†Ëã…æFvFU¦àÔèîáîq\™–ÊáñÿãYp«85ÕU%¼%¨¤U:É£ÄK5ÜzZ Þ$‚cˆ­#Fœ9sæÜ¹sÁÁÁoκ4Æå‡Jîøñã›7o†ª/_°Ê Ÿ/ûX,ž5kÖÅ þPF·*€Äž$5úxyz~Ò†ô œUŸ*‰önIUæ56/)&ªÃU· žÆfUX·¸téÒ;v@ŠYrt%Øf†~õêÕS§NU©R|U¢Óé`Dzßž›‹»¥yþìëåÎçó+€Ö2@ùR쪰à®dùAÌ>>~ÕªU5kÖüZò®Bàòx<7W_ï¯Ç¥‚²T^”¦¸îïÑHG©KÆ QW¯¾Z|mÛÏk£ÏÍm„º£ñä.y°¢ùæ@ü$ªàueñíÃÇÒùéÇæSÖ­kÙ¢›ÉO*@OÉA°jU—Koý¯ûÊ{—æ b"¼ —Þ|Ubÿw´Âi œ‹^R¿FWÈ?î^ Ð=rcÛáÃÔžÀ6k»³Œ?ôŽÊo¾~ëµ,âÏiaÔ‡j–FTZ *·s´ñ~§ÛaĈ=‚†ZYÃy•Cäry=`ËÙ»w¯ ‹Ÿʰ0§0YÇKð¬+ö÷Ì‘q»ˆ¥s†PôQL9U1ãˆ(ˆŒ9Ú:xÖ[)FgÍšµmÛ6¨‰?³«!55µk×®OoIâ>”I‚¼ôhmÐö8U¶‘<Â%éÈz)'ÂBŽxJi†0•¿Å)uÉgà! 5½ôQûßi™Â!)ÍÇkµJLîhoãfüøçŸ.]ºâ¶mÛ~©×PTTÔ¦M++«cÇŽAbÂe…qeFÃ1ÇpJS‹ê<<ªúóu㛿"³çf„ga#Z‡Ø vvÂßú«ca”pBz÷:™õçÐbðf¹,!èÕ©‹Iü5ë†ýв]Û?Ÿcñ4‹Žß i«¹¹9ä/^¼ø‚8†"‰¢¢¢6oÞܤI“˜pY1P†zZ¡’;Úø–5¬‚ð¢‚þ·õªOM†dýå¼e§Ù-Pž¹¸¥ƒöÖ „Kë÷úuM8¡ú×é=võ Jþ|˶£­êNóúº%MëÎY°A¨â‡·ªÓ;–léÝaFË3-EV[~4lòI6 2`yV¸%FÊz8ÐE?Šð÷÷‡†×°aÃ*ÉËðôô„€ž9s¦››ÛçÈ›¤|Ø·o_¨ª¡ž6!µftxôÖû~ÓÆKy¤âãpÌ ÿ»ŠcûO޶±XŒ¢è7ekkk¥R Õ%¿/F ädþ¾Uc#ï“aÉ6–åë7aÿWµK·Îí­g÷‘ߌÙ(pk¸çVú”«ã\³oQ€0ç30Ͷ­ÊÅýÖ ˆk“Ç†Žøýâ~w/›¡öÙ"¦Úž‹€B ”¿3e ¬ððóÎŒö®î.ŸhÙ°1h4%ËM0PÏœÇ"q­a©‹s tþ?ŠT©Öf¬O®*Ô ²ÓS<œÉŠ£9%D«Ôfßk}¥ƒƒCP@hæ«ÄäH¨nÊafÁW •¨u€5n¤GPŸêmB‡ÎõØoþš“I:`~{æœA?oDbÆoµà·Çœ;]5$0)[æ¦+¿#F™u÷V²ô#M=È.ÿ}ΙÑÁÇ×RäOºä“,¿P÷W52züÌß_Ú¶('þh"ZZ ͹„a}í£ƒËu¶Ö|B,77ã2‚oÆ¥èÌ­p'nÏP[Kýºß¯09ø‘"pº‚m.üˆ #¿ à‡×öétºÜÜܤçÉyØÙúÚòW•¡Âª|”©"õ(Ê4,hå$iòÎÙyþ<”ž9„@§¨p( ‡\™09¥Ä6J€0^W^u ›_N»:§ºž^ŸÇð•gffb)ÏñLþ¨]V\ÜÎ3³o٤ϯÍ$í†öYr×êÅŸcN^ˆ.Ô`ë~ör}dÍÁgQ°Ñ–‚£oÍïhsçĬõÜŸÃì»hb³nïmú5ÒñÁò% ‡òó­Ø´ÆÍ+§×u«»éþs}¹4ÙØØ,[¶lêÔ©•0¸V©Æ?žËÑÑ‘ÍfóR¸§¢œCtÞn5Kïo†ÍYEj oZ+3DÌ€%2RúÃü™ZR‰ücP²Wá`ŒÓÑqJm¤Æºò‚X©.º}ã–Ù®š¯‹³³³™™ÙgÐ.”1­vÙ…ÍaQ ‚œ­,qvq­öcïl{8myŒØ²óüˆ<¹ŽÅeda-f6 ؃¯œ¹lÆ©³ûïooå‘9rëU'ÎÍP—%ólï® œÖaTBlD7k¯{ÂÌÅ÷ë]™–°÷š»#{ç“T‰\Sî;úZýÊïÀ;ƒ›f•*¡-µ 5.¸™– Õ[é¡ÿwÃI x™X±Â7ØWãw½  °ì\­Š§§ççÁñk(—Cø’;r‹R©‚ˆ;ï\#èÞºYÕŸOêÔð¤ˆ<ÿ©}{]ÁùA]ªÕ¬ÉïÛ¹Íé¨,ýmuB,Oí>\Õߪ¡èب Ã:·m|åäÍZ-›«ÆÂ@ñ…?UÃ,Íž‡ ?ù—öu@¹lq0 ÙH$999ÙÙ9Eú;?ÂÛ;„±IòËgÐ5†>‘Éóc¢#ÙEµm½œíE"k÷yLo#Á† ‚åòZ"l¢Ã!³Ç10-ŽpÙL\«ÖÓ¼aÁo Òb crX˜ž pœ@)a°H½šŒ `L½NËåñ §Vë)„„G¿:s¹j±•+W~ ã-²oÌÜÜÜÞÞ>/Ï1/­èöã'”0Ý7ØÕÑÆŸÄgðØ¿ƒd¢,¥Fœšñ$+^k4ô´îi_ÝÞÚÚšÏÿaÙ?BQÚ—óé(z‚™R©ôo}Kë \§z5lEÔø›öUAT«T¯m•ÎüM F9”‡ÃÔÙÒÒÒÉI^TäXT(΋,LÐÄ1í²\lÜÝ‚>›.ç$½x¨Ì´æ."³&¡îBˆ`hÛÁ+„ þ"v÷ûì}İœöeÎ3C¦4º„"¹Å>Ç+q1$bHÕöNÐ~õô9 üIPC[YYAÜ8:j Eq±§D"•ÄKo§ÜlجQÎC¢C¸ÐO…Z_­‘ɕř)YâB)SácÎô ~ôtµ°´¾ªaxU_*«@ Z^þ¦_Ãê[y:L;®,.dÝËì°úðÆ'Ž\¯µàò¹ñõ´’,Ž¥Ó‘!ŸR¤u•ߎÚl%æÀÏÚúÄ{X°^Ib\”_õZäK¾¤=½ç\e皊®[çÿ\•üÞ üÐÆ8“ŠD"Ȥåryb"¯@oiîðAV€€wôþ$ÀÕ:=r®–hu©,O§¦ŤV†Rzr°ü,ͪ:Yqn_øëP3™Ì/‹à×ä=PÏ6?J¹±äw:/^tÙÞ}e†‡š0´'·fŸAîïÞµ­ë>ñ‡þljÙsTÄ®E#ޤîÛ±C{~Áž8ƺÍsÔÅ*žúù¸ùÛûÏYåøìèâÃ÷–þ±>fÓÁ“1›ûOj×ãÔ¾-]G7dŒO“Z{\\7qéìðSÔ¹w§ýu}ÙÒé™ùU±FScW«ÛØnµróÓ|3ˆ]ù3|ˆ÷Ìbøö¡ü†ç‹ˆ'ˆ*½¿>¬¹ý;Ô ©‹‰¾­ÎpÀ‹—ŒMÃP:&Ê4¨a &fÇe X ›Éqbs¹.Ú3<#v_Ïv¨Tüw X¸ö— „UM®”‘ñ¶½óÕ*E牦Gp4 rRïZÕúMÝÔ«Æø]1O–t}Únü’x¯úZ}ݳ¼Èç¡‚ˆ5ÕGîœ@ ŸmÁˆ[~?mÛmOFZëƒò3þÔlY3æy§Ÿ^Û2³ußßî»ftl3}÷ùK†ävÚÞi̬ð¾³P»nd{6Oû×þ?×·°ýqþ„F•¿xxmÛý 6ÏÔ)õdé)Ó· å71mm-òÉí^TxÛRäð¦ZÂFNÁ‹ø¨TsM˜µe'k‘1Î)½LÊ F¯ŸqˆÁØ6àË Æ}øíëð¬•öá¾ÏìÓP“(ý¢ÖhiW™!¶1¹…TªÐ3PÚ¤”µ˜6wìÄ^k¬ÔU§’ëU:„Á–*µ˜ž`q8$®º3‚½ä޽ƒ…¹Ó±¿§¬hwˆ”‰»¯Z6sé/›×ýv®û{Ñ€5û³2²Õ ™Ndžx9بI&Ng#j˶˺[¶þqÿ¹ôeàxZ•îÝ™´¾/­üf -BG'»ðGâÚ-œ c†%¡¿'I´µãÖ¬jÓÀÆÖšŒÇ¯Ý ¯– F“îÍ’¯HJÖa`¯gGwAzMÿ¤*Í„–žð£_·Ëû£ÃàÉLB+Ñz%^Mñ]Œ8Ž£¬þ܈Gâ!­SvÏ^&X4¦‹\EÝ:¶9:U9~Ä BŒ5cÎ\Úœ½Xãäâ¤TŽ9~`õÌéz`9bTœé”½SŒÿÜÈI¯`Öð`‘½LÒdD-[ysâŽõr Þ¾÷t©B1¹_C‚|·ýùµpåO’!J­VÇÇ'ÈmO›ñ…O<ãÉX[:ÙØŠll¬Ä:Ô¬ßÞÂøÊ³²² ü‘@¾•vì¼Û+Ç5%*‡6´¶¶Þ²eË”)S¾)¿r)‚ÕÉÙñá?•ÊÊߦŽ­†ù|>d·ßüÒ´S±–Žm‚“Tå¹£ï‘`¼fÌV––¡AMáSø†Õð'‚rºTŒ yE)~Œö)3˜,½NËf2t$@i6UÊá¿ojF9Ä8.hkkkäÄßÏ:áÒNk I›Ë´ƒ2x\&il ¶h ¢Löe<6,gra>]•¢ HGð&Éô#óä“Cé ]EÀ¡O² qdr¸°>‡Ï“Ǽ“‹ÏYßÁֶެù—7>’<<™¤ýÆæ`|Böó}.s/¥ëŠÉelèÚ¬§²fÏ^&m} }ž¿ýïM@Cm™ÕKÁó;·ì©ß¹å¡SZzÌ­ :wíè%ä´[¼%Ô‚·qnwê6Ü` &˜Ö«Ë-pþÜ?v›j-Ë[ur7+~Û»~÷‡Õï¶;z„o›µ«¼1›ŠÁkc2EÖ!ø9iÛ^,²tjÙè\ú~µòw+¥Vʤcµ¦‹gMŒ¹úpí´³k6.X<¹Úƒ\›(¾¦øyò¤©—W°™ÔÜ5KG6÷'´W³ÄŠ˜ÜÂ3?á#yÎæÝŽŠ_³“=Ž„0Ò,}S¯lV(SÒ‘¢«¹(¨6l×™»öu‡ßºé²fƒåa†È:´N'õ~5ªv¯Gê “V6Ipeˆ)¹TM;©L1d¬×ƭdzŸonnn"ßÁÈÏÏÏÎÎ.9»5„ûªU«,X ×—v¬D"¹uëV³f;g¥¼œœ*y ”+R ®…ô·ä¼Ö&33óÒ¥KíÛ·/ 4á9Ïœ9Ó¯_?¡PøE&²BCÅ\ùs\›F+0(%k‚ ˜L¦‹‹ ÔµŒ[-­Ý»wO˜0ÁÍÍ ‚é §ÊÿðM~åOòâKãòõ¦M›îÙ³bºo.‹ÅÚ´iÓ¸qã\]]JñKÉWñØMPþ1 ©çŒ3æÌ™»ïwâj÷Å‹?â˜Çã™"„›¸råµe2YrròÖ­[ûöíû_¬/\¸pÙ²eÎÎÎæææ&›´r%~î(*7nœ˜˜ø_}<þ|'''zÚ Ç&(WrÔB$Õ­[7::¼[…ó âîîõqeX{k"&)•h4š´´´#F,X°²Ž7N:ÕÍÍŽÏi± Ê_‘Àçoˆ¸¸bÅ H'úõëçïïommýí…Î7Aù»0‹ŠŠîܹÃçólmm+ùÄ”Mò^Áq\"‘À¡Ph± Ê_=ÓßëÒ› “¨4JÅâ“l”Mb”Mb’ —ÿ ÀÞuÀGQtñÙv½åÒ $!)zï ]¤Io*ð!RDPD)Jé( 4 ]z‡j !½]®ßmÿfï‚""RuŸ÷‹ËÞÞìììÌþïÍ›÷DµOQDE䢈"Š(¢ˆ ,Š(¢ˆ"‚²(¢ˆ"Š("(‹"Š(¢ˆ ,Š(¢ˆ"Ê?ÑSY”…I=‘¿qþÑ„v:-¶[Yö¼\Öá„!ëJ z·|€ (odR™—·2´Š*8Xîåõ—…s wØsrœÅÅB5y×.Ž»·| ìïDx ¦ð÷‡å«Ã#¤jµøÎÿ­"ºÄ‰ò’‰ß‡e)«Å–m½qÑ“Ã8ìöü<\¦j5E{OŠ9 ¥Œ“”y{j5á驎ŠÖ„…Z-ŠaŽ£kø3Êb)Ü»§ìèQe€¿>2JáëK(”„J‰(”BÉ.ÿ˜T–ãþÀß“NÚje[A¾13Ãtë–G|‚ûRW€KÊl.Ú»§ôøq¥¯¯68XT‰Ðhp™ S(€L&”,dˆæÁï†$‚ í!ápÐV mµÑ³)ûVùˆDâÓ²•W­$œ ľ!‚²(¢< tÕpá‚ùúUGfŽbúØXÈ(©—wJ>ÈþšntCQÆd´ää®^²ååã¾¾ª¨(]lu€"…»váÔ¼¥ÄCA<‘qã¬Ó™ð@ñ¹3ºÈèà–­pˆÎ žà ƒ€ap~ºýËO¨··_Ûöî_– H¢ˆ ,ÊS†$IC™-'‡µÛEE´±ÜQRÑw“–Hà_–e8šú9.W V«•úøÈýà±ôÞ,'.›ƒåvvÎÖ-Ë{D„{Õˆjp:ÁC üm8“Hิp¾OŸ† E=€?¶DîžÝ•Ú§~ý'\òŸÍ=2™=##çäqÏ-=c«šEPå?¾4M›Læ›7ÊŽ·¦_Súøªƒƒ5•*CMA1” Eq\°„ÂÏ]Pp“Ù»¤"Äkøa~8–±Y-9¹–Ü\[Q!i42Yp³ÚªU1·^ÿ¤¨ë„²X0‰D¸ËÓ(¶€›Ë?KÁð¼ƒû C•¾ýp©„ÉQ1ê Ê¢üË„åøâ£‡ÌR™Â]D¤w|‚Ä?O”·þ‘ò¬ñòåÂsg8šÖU ó«SW±»þuë!<ÃfìØ.ÕjÕ!!Ö¬,;T\œNÜÇ›€3h•0}B‚VeQ^>Ý‚f˜Üï6Ñy¹^áUcQ• 8IÀsϺ*!À4E‰ˆü÷ 6MW¨&° ‰`R/+5ge•¦_w:ÉÀNôÕª‹”Ey àØ’Ÿw{Íjß°pï„ØIžÿEy€@Ž “{ƒš(:îÐ`¹/9sº¬´4¸go™ËuO\|¾"îè¥BX–µÛí—Þ¯rLŒoJà°»Ürù§óA‚Þ·xîW¿n{§k§í{¿³éô³wè˜ÐsÚ^däŸLjß1®}·Þ³öÔr€àLö®W;¼×¶Ãèy{Zoî¯$DR>ÿÒ/sFLòÁq¯Œß^H2ÆÔ‰ý;ĽÒ)®íÛߤoް⃱{ Z Ò·´zýó“´ÔþãFÍ?PäÌX0ø½© &Öx¥ÿœÙª(—Inøß°aoNz·mÏÎ7^rYqê–>]^Êì0ó rùüêöÃþ·%Ãpì©5ÚÓøppöNª~sÉâòœ‰ÚsqGŸ(‚pGµi£OX˜ÂÇPôÓ'嘵äPZY‡/¶·võZ²åZ·©÷NÎXõ^³7¾¹¶³Î´6_jÞxçô„H€;/|ýé„7Ц®4là™1;¾o¦Ö‚¢;N?DBŠì—ß FXëÍÃÙeoÍúî+ÏrêÊš¦¿¯óöȉJ( Ö÷T¶ú›^1>›ç}t´éÒ²­¦7:Zþ›tâ‹|¢ç€f¾ØáÔ›gãǼ8ÚpõṩÇËeýúÌŸYzåë³Ã¼Û¥†äú·ï¿6ÿvÏ1cÚG_™^oHÑî5=ûïüj  )à¤_¾×ïpªcªbû÷•^½"‰Ë€"(‹òüAAìM ÒÀÀgâÅ…Ž…ÈÌQÇ2(Ãð¨Ó4`XŽåž¡Ô¡ Â3Ž›Ð&c Ž]¼iòn⡬D^8t‰lÖÖy~ÍÇÏYzJ~·Ë+XÀyŽc`i,j*Eù+Û½Þ#N(îµ>ãA^)À»¿zÚ¾¼GG¤ï¤êv¢æwmÚ·Aµ>Ý .Ÿ†?g)JpÂCÜ;Sà_a![fq"8J”:ÿ*¶V=†ÅùѰÌ^ÃM Än¿úÓ¬o¶êöz½  Ù—ìõc8SXDã/‘Ð%‘JE÷ŒçiQU•ÿœ™‚ah‹Ù–—o¹rÙríª#?O®÷Äå ©ZQ²üFzÂaè3س‹Òf¦1¥J†–2;(Bªë´IT§•cÊ”–ä[Àµž¾*P´!¿ØL£:½üŠH$jùïK¶—›ÌŒ\£‘@TEP€ñæÂ<éêç„*À[+¶: å™F« ¬ÃZæ`½<ëœ Œ—W}ýÝi ‹Ék½÷^'Ïœ KÌq¡¬Ft|«NýG' ¾qR.ýà¶\ÿè¢vaðÄ”N}›W•P ,{¿^ü}$¡ƒ†÷JÔ•o[4kúÁËœob‡¶]Þn “JxkþÙy[¿Ï”vïñZÃ`- ­Ù%yÞº€ØÎÜi Œ½þÝ÷—$ú6^kë‹pd~êŽÙ;ÒhBå%åéè6wˆ5\?þÕâŸÞ-ã«·ê4¤_ƒ :mÏÜM¿Þ¦y½‹)o7”–ZÀsÂ;\*uaóŸ8w£h`­Z7÷ï¿õËÏ!­Û`¢)CeQþ©É‚¬4m++ Ó &„g·ÙB¿¬A¿O0N ùß6Ž4)ÜœÓ"ý²‚œí¼|óϰ˸tñl×»ƒ÷'^ìÎoyûõ%XËïÏô”™N¯žÝ±ûÑy+GWa-†ÔuýÞ7.9»*0õËF_Õ'2wßÂ~K­ó¾ÿ¸?‚‚-¯ÕòÚŽµ#†uûayêØ!š…òÀB nÎ~tójüõ%çô´õþ—W鱟%]ëÜó—>›>Yè¸Sã[ Ù3ñÓ CGŸsΣê½ûakOP˜f)·[Ø€Is—€“ŸVýxÉêOÆÖ2f,ÙøU|öè¶o.Õ_°xÎ"ôÚÊ.bÞ•”·uÄ"tÕ‰5G>IœS²nPpPú˜6\Ý´•Ÿ=î }ÉÞYçÞŽZ»d¶ž§Ê-êÞà§IÛf¦ ðÚíYÓh5MÎåKÞMš*qCQ—EP壣Í&ëØùê¦ ñZªråßb <\&ÂÿNíÂïtÐÎ ^³´Ác»½½xÙgoº¼qI7)Uf#•AÁ¾žž*@ãIƒfmëiær€ãiºÎœÙµ=ÇM3¬NeEnŠpN'Íœv›L¡N`¶8ÌN.ÜeæàÞ•T¤8¡€úÀ¡l4+ÄosÚ͘4çÕl1;Šˆ9Ëái€¿70–^"G Fp;¹yE1ÿ ?Ô\ MG%œëÎtÉvyPÇ6<¾pòà H898³ÍiEH÷$p”aœ ƒaI'©P©מ—¿T`àã@b ŸÛg³ô ïèpPv;P«†\__”g%¢Mùßi¾‚ ù¥¥åÇŽzççE%§(‚ƒá`{æýK°öž¼x’ô«×0X˜;œ•kÖ‡ÎxVkÕ ’BX{Ôi,gZy$ÝÂCüSÄ&7í”àh>çÌ– ß‹¨^]dùiÍGÎ|%/º²aû¡L’ÅüëNè8)€“7OÙqù¶W\›¾q¾Øüís‡r55RB½QºìÔ¥LàQ;ä’½kwœ´Sˆ*j`ׯ~rŽŒ!ã¦c—¨À¤)•o§žD"›Çz"À”¹í’½Nͪ>Tá¾KWôU$øsWv†6Nð‘[îÏieQU#ÉÔ­Sw¤ÅUœ43í@`ljÔ*€ZÏ8°?«4¢n·ŽIzëùãkŽ\4ÐÀ3¦ÕðV¡ÀäøëiAœ&SÉåK¤ÅJÛl¨„ðЉñŒŠ gžÚ +½xñRf¦Oÿžžjµ™²Ê¢<\¦(Êjµ–———@xÎËÇ.§y–”FEúFF ù‡Ü#ÍKìÞÏ %(j+9÷ÑG³vã<Ây%¾úÕ Ž)¿0õÄPcΑ©-ØgÂ`«Ö°¢_‹ å“^Ùs¥/•u8Æò‚ &c¥¤dmh(DÌ'Æ Q”gÙkûöæúøy¥¤øûøèt:©T*"²Ê¢¾¦‹iTq©Dï!„g{y&¶Âýë'Ÿ®w`Ë€ 3²×Yj“9 ¾[¼æ˜ôµ=ß4CKí¤áìô¿ø¡ÚªÞ&¹M*ßá£>|=Ä®xW_v-«kLéË?ÝUèWÙqö2xgîßô©ÿ¶†0E·±txSVðËòÙóö•’%å,`íÛç®h¿hrcO3¤Æí^󈳫5_܆b9 Ad™ÍçneaÂ"Þ“Ë1‚ 0LJ!“J!øJ]OCÆqÃ01öÐË Ê«5kÕJ¿à¯¤d`µ>& Bò?Âò‚ð$0Ó@£PÖn©ðc…š©ZéÂ]­®h¹P©€j—–s Ç Íj~æ³¶Àx¿ƒ¥B08ªÂ?6`wT 4RãH1`³’ë¡9¹äV9PbÀdÕ…ÙPÖ „7(Pic4&”é„?gßÛ×jõ«S?îæ—‹ÂGŽ– öÛgËp¼á€×†GÞÈÉý{ãÂÂ5a€e^Žå;–ó¬•Ò~ÑŸù÷Ž6üaKFi§Ä·C÷zk?ùzèg¦Ö²´£»³’ͨ ß&$ x…þ}¾ 8ìD*§Û Ÿóq3àeMòúÆu¿¶¥ö h;cùà(\Yÿ1õé¾E-dð›Lì¹n˱¦ouúzcåÏ¥è©×Ó6¬ÑYøÀ9Wf;£fÏÓÓËúÎ]ÚÜ ¯œMï &`°ý£}qpì³B¥I’äd2þYE€I.—ûúúªÕjo½Þ‘c4^).ÇŽi³2U8áìU¹2¡TBN…ÜëŒqï¼ëê‚5„eá֜˟Q'%mÂçw Ô«ìì`40+Ži ÿ¤Øðã=ê€Øiý½V÷؆#WÌ~Ôe¨}ê&‰eJn¤ßÈÊ4%%{öìèå¥×ëá‹v[$Dhû¯˜/8÷–S!÷ؽ•£íÆòr ™ë´KL^Y‡Áh1Óht·ÞÝmÙ9ÿµÆA¥g~½žøöºF• U74ç þz,ucý¾“ÊÚɰ.È}uòM (²uÎhúbëç¹ ±ã§6Àö–•L6 Ð6ÙmÑðC}»½=²W]}a·¹æø±õð«ß6·°ég¥s#Út˜µà‹µãÆ÷k×­KÒì¸Qé_¦Hå8}qS½ÞcÂÇí^?0 ˜þ‰ ½"-´[;y–#B$æPŸU*•^^^‡Ãb­ZÕf³YŽRšv2 [^ £±Ûx“ ¾l¥BA ˜{—1c6zKÿ˜Xu@NH úñ'æ·À—+“¤]´ a=±Õo8M°Ûl……e99YåååA•e5jxÖN‰ÖëµZ­J¥‚ïW4ÿ‡ÌŽív{aNNÙœÙÉ“ÞûG—9lfÀ"@®¨SXHÁ\Æ_«Mpc‚êªÆÅÂX'0Ù]| *5â‚ ÚÊœu%¡Àî›]–oßhw¢Þª¹}cG &c;%Ø”u !Šëî©Ы]l—«£@¦2í!€VLÉÙ¬]§¯©;xÞø¦ÞÀB 6n•8Ì.›ò?jmÖé8¾ðóÊ~ ÕL™Lö¼Æ{~‚ɹ„º#´K Éc!FÃo…ë\ ‘8Žb‡ÕFÞ¸îyëVo¯Àq.w`ævUÒOÈ¿àÖp 3Þ¾}éÇ]úÀ MP ÆÛ[ííƒ@­ÂMhÀ=Û&ï}»=ÁíA|ÇRl.(0äÿ6‰¤D­¦½|ð€…€F&Õ©Õ­βR©ÇqÑqâ¿ ÊïN’V<ÏZ†t:¨ûb\"ƒz»ç?E:Ž¡Y%$ø“ÿ.P^ôÅsåß´ûï½nÔ¾Û7Üð ;€°o[Øh²È.§iŒÆÀJ•üC«HTpn“  ó4=#añY'Oȵ~ÑQ:¿hÖpg­Ö´“'r""±àLPA³Éo2ã%E€"åV+FÓ‚êa· ÎKˆ I¡þ$• Ùµyž–ÉœJ§Óq-â"¿™L"D!•*\Ýw×îD ûš/î-ö¹»$ã¸DK®SÈT>~2Nêá$ÒŠÞÂóÿržƒhëþ¸¹$|›Â,Ë3†r»±¢‘³´øÈºÓþAA¡))˜B)8>_îìÊgXvõÊåìlcÕXN]"<<4D"³š[ùpk!pbƒJÈÝ9ïw†,7¼ºq.$¿n¯5·Ý ¸7=ÿ΃B”]t…e °ÀQ›–Þ4áë®a‚ÿÙÓT‚Ü=BZõwÇÖó{\W\¨9R—ö¬ž•Ÿ¸vlëÜo½¹~hWÁÁ±„@¤þçe_Þ¾âF·aÚÓÓÓ 7¤ £Õ«ÛIRT6IÒF#k³ò·²9‡]b·ÉÍ&EN'J:! 2…RïÁÿnîtµ-i³:&‡Ù„b˜T.G œ¢Ùr/okX¡R£žDp(&…¸æt^ÌÏ×?áC‘AQQºÀ  Åÿi‡Ur£¡ë¯½¬ìöåËÅ$Y&ŠÖ5l£Õê\æ]É=K|wµ»Êǽ×ÂnŒ†r÷ˆ¾k"(ÿ5*?¼ßË4Îs+š.þqØÿV¾F®Xv,eù¦p;nn>ï£,8v“Æ#ª%EÉòžºi—5©W]Å‘ƒ’wäf³J}ö…Ô2©gb|\„XóO¼˜OqeDÛVQl~Îñ­ ú2iÓ®IºÉþrW\®o]‡É›÷t¢óHª¢åè·AÎæ!?¬5~쀠¬GNEû}½xä°¡oÀøs7w?³à“/ò"W,xGÞ_Ðï2œìzFa‰ Å>ç츹_5sQíïO+i·nÉ{ñ›:½7­E·úçfžë»sQKìô;mhõFk¼¢2iœ‘ÜåqTïÆ¯¹Ë ïrû »[î»ÏCD.9~ŒÈÍ «[O€Â?,bRI•¨¨'Ž¡!!ž ‰(ǹïëååu—ªÛláö„D›Ã‘GÓM••"ùÀ`@)JβjšRó<Îñ8Ï!8®ðôü3t¢c–•Á7O£‰#FØpœ‚8ë¡^žxtŒL– Çq_™Lé…Bòbqkœ(ÏÕ|ñðÅ÷·Âe<°›*¶Æq€¡øõkøXÌÀLëªÆ„„ùƒò-—ÓŒýN<ÃJ5Ú:ɉXQÀ=u¨ÓNÙ©«Ò#"LMƒRæëuµ¼Ä ÊͤÍn2›Âm¨EÜyÖ°äšð”éI†qžÜ9øÃÂ(4¬ì†ÓÌ@jÆP´&À7..äg™¿še.*¦% _90“´j ÆÀUD±q?,_ñ8PÖ²÷’{’‡Cvax·–j©Öbðûõ¼_‘—ͦü”ÚÍ ÿŒÞÕß…dž/r:‹M£,‹I$l%œ $e5HŠ’Ý?Ü%2™ ²T—ÿ4 Ùº›˜“.q;”†)sQtáC3,él»÷û! ÄÒpǤ2aœ°U`˜‡Ë¦+¹#ðvn ¯[WX”ƒ)?\ d(LÔ,¡V¨ Ú²“ï^+Iés 45cj(< @1RŸˆu$jŠ©¸ Ècâëj^-ãej^ÓÌ7;¦ôy=‡áÑÝÖlûLA•‚Ø–“+­üpÚ›5»M|¿‘¿€¡4¨\µå+¶àÚäê1T3hE·q3ÞàQ«f†Íkk0”ðˆ‹O –‘†lMp»8Mzuœÿ†]zlBduÆŽh5ü’ØmªÀøL°„§Ü»aBr¤óLIôs•ikW‹ôÒGHt·³åj‰ìö¡õÓ}¥S^©§ãȇm:¥Þn—Q´èða˶T)×hÊoßVhµ9W¯ú냃+(³ËR\”~½,(È¿JGQàþM+w-°(¥®” ¿ãæî¤…ö×:Û]Îþ»rÜ;’ï ÷ˆû¤háåYŒŽ¿í÷é¬ä·F½|áŸüt&3æíŸ6oEšE$Àj{wþz`5xXêhÖé<¾æ›Ê%”r{÷ÏìÁ 5…Ã0KaA^zº\­²[l^Þáá¶â¢²¼ülÒAÖNñ‹KðÓ{¸#¯ÿÃv{HŸW”—)#÷(þãBÙuÞ)óg7nŸ Îå‘Âþ•ûvÅ‚ÿºÀ9ÞA3–ü*+˨֔””H•ÊJ±Õ¢ëùðvÇù³gÊådAŠèªZ®’‡ r¹üŸ#²ˆ¼¢üëÌO|ƒ& °™÷nI¢È¿ÙzbÈé óIS|Nβü‚siW¾lPOc4Þ¶Z!}¾!“áíÛGøùkÔj÷.‰»+iâ¦5QDPþTþ‡ L(@þáQ?¦wnõj“p¥áâÖñ w¶žòm· ]…KÕ–‹†oºúÚ€‘B•‚[Û]†îV<ÔuB5º³ÊW W×?ÝR‘Ùȵûq­:º½£xW4fùíC®òQì·íÔ¤aÓöu—{~ØÔ·"®î?£ˆbŸsã2JÓª>}}íjÛ¶Ý^>Iõëó®Ô¨ý ½N§Õjïf$‰­("(ÿ•ý‚û»æÜvûèôŸ­Î¶ÿ´ÿ@‹>“fFªTÛÆ“Wf¦ç•÷üà‹ëêXcÁy‹e*eM9ËæÏ^žO┬c¿1ãDrÛ¹-kæ­9q-P†Z«}¹`°üÔò·±jUŽYÞ™”Ì2é_ÍübéU»RÞ —íh°afãÝ“únöùù«u䎋Sl,­Ñ{I·êæË›‡}´*“ðä t\Ïs»Õ&r/Í[4‹ÇHm¿7*ö.xÿp¦MvæäÙ®Kûu U1BÒ¶ÇeÑxÜŽjµRàö;nøö[+Mׯ_ßáp¸ƒ¯ßݺ&¶•("(?¬LùqýmIV˜2{ìÀÔ ©ƒ_}£{¬Úpé*õ1æãfúúäªØÍÆÕ Á+öÖ²€18„ðX!ñÍŽH#X‡@œ©‹Wš“¢¥ÅùG—5›v4²a¬/MbAÖµ#?ŒY3Ÿâëý½Ï}_-³^Þ»¤ÿuXg¨£âª9„ (òè:|W3. cAúÜç³fèæNŒ2‘(&‘UNnßfP\uiÄd£|þ©Ð·Öwª$ävû‡ œ"S¾ƒË„K}}}sssår¹R©[FQð¿5„x»zgQ‘LÈ*ô¸øˆ¢Xqѵ‚|c•*Ï9v“Ýt3êz ÑéF2aIÅÈ‘¿ë…lŸ9ò-ãè%í+v[Þ­[¥6‹àÿO ˆ±ÛQ™Tìv¿)NÑ AƒcÇŽ]»v­jÕªbƒˆ"Êßp‰#I²Ô`È9|Xþlt«Ö¿Y`ÿ¶ð®\ÂRÁ˜K9… š\8à\y‹!IvÒ®TXFC%BÄN¡ )—ú¯á9§;g0¢"Q1–~Ž B(ˆíì¦#ò’O½S_È;%— é6G†dð¤»^ pRBbyɽwÂíà–þÉ#½E/ÿò“%¥nå:uõPy­¥P¶mÛ6jÔ¨yóæuéÒEl QDyT¦ìvÎW+^ÉɹJUÙÎ ‰ŠÀÀÇ ¬Ìû=»i™;…@h¦î?ðÇ;p¯×Gšü}ùBü#yl•ÄÖ³côÀJ † ›õ5±Ýo’`î/ü·{ ‘Hl¹yçÏŸeZ¶ŒŒRÊå°1EDvKÍš5Ç¥K—DPE”¿Á”ÁŒPpüÙÞJKKrs‰“ÇýÖ/(Pã¡81&JL©|2U4MšL/Áî8X åù9·ó$®vŠwP+gB¡söÜ“É4hÐ Ø»–-[æéé)6ˆ("S~d„q-θcƒiµZˆ/¦ÐP£Í–GR‚ý×µ“õ?dx@\½\­ÜåŽÆ>VNhÁ8N›-7ÏŸ»¦VQÕj  òW³ˆ{N¨¨?úLAB©á’ ÊŠZIþJ¥N§Óh4J¥Ò6Aìyw6KRRÒÊ•+srrDPE”¿Á”‡wîø/î4Bî°e÷6xÅf3”•¡»‰ Ô‡„ü=Ê Ç͹¹WnÜ(‰ŽQÆÄè]ºÜÙ _X¾éŽŸp7H¹{>ÙñåàÁƒ­ZµZ¿~}×®]ÅÖø[ø£ˆˆ1U^¬Bg>ÊøÇ³ü;1ºÜ!`ÀŸÇpÃ7I’åz}‰‡Ç©ë×}=X=±&®Vÿu†7…×ä^¹”æp²)u=ã¢<< Œ?sæLyy¹Ø ‚ÈP5˜,š» æEy¡•ªÎf‹Ej£5RäáJ3þlª+äι+“ÉTJe±¶sZFFö¯"¢äžú߬®8–‚‚´ÛÙe±±êNƒµZ—5Ö½éVÄâ¥(•JÊëÖ­3 "(ÿ\vå'äÙ— ”QPùk¾\sʯã‚A±ÀüxŽMàh;ÍJ )&•Q‡f}ómLÏùÝc9@¾M!¼ žaXŒax þTÌ'p~pLJ„W-—ùù:u*ôÔɈ„D8wð4]pãFšÓÉ4h ¯é æNw&ZcÿõRµjÕÊ•+>|8::Zl¿9àŸ±M™ÛÂÚŠS¯_.tz4j×2´ìäªý·å1 ÝjU‘8s·ìù9µ„Çe5šw¬¤ÎÌÝ;gY%z_yÖͳñ-&’¼¯æðX¡æ2®Ü“ÁÈ‚Öôc$ʲ0ãœY×$Î æôéÒê±jÛµåŸÍúêÑ­[¿¾ƒêb×ÒË.…Ó¥« ±)Më‡jjÏδTÁÑ´k&^ß°e‹H-gÆÁ³ùúèÑžÏÚ ÿwâ+<ëðîÌ›jµ: ,$¤R³fíÚÿšºhÓ¦•W¯ÞlÙªÒ€ ‰5c¢£CCC½¼¼ |‹ù¿ aaaÁÁÁ'Nœ ÅPÝÁžå‡ò9©ãû7í±¡ Å€‘íéíÕbûƒÖÄG!«ÖíϜޫ*bùaÝümJURÝW‡5aOúæ"ã®Þ§ÕÀ݇ ï*;×ö­VX-¥‡F­|Ö-VñyT\ÆŸK/r[3 †˜«Ójo ØµãÇ]¼¸lìX§K pC}¶Q£FuëÖõ÷÷W¹VöÄÑ÷/–ððð={ö$)¾ëÇågF“qKú…sRý°•3:KMç¿ý%cêÆ­ƒbTE+–o S~¨»ýÝÞ½•{^ëî ¬%¥›×mvv?X·ü»þE^5à,¾þtcÑ« )(û}^X¸²~Òöˆñ{kÇíó —®F£WtM”¦oÜ´/|Ú‡U{bæÿ`5&×öÀs~Ú|ºÈ:²U0æ›óNÞÌj½zÿ[!òìmsV'Œ‹VšÏK ª:fêø¦ (có¾ý­_[¯r˜f¶rõZ¾zì9¤Êt™/^hPw¼žÝVfȈ“k׆H-‘Hî^•••––¶yóæëׯ_¾|ùêÕ«k×®””)2è Ë0—Ê,ÅvÒD2êå ž˜Tfë ¥¥³·þV3™c™—¥µå8®“ žà£•KžÇtò,“NÀWnÎwHßh¬ ¨H7ªCMP¹yö¸ÝcÃ}ä’A“×J>}³Óë "i:xBöqOÀ`cf•~õ]ŸŽûzŒí8fDXb °Ò÷9ˆ9- ¬ýªi…óß¿7(ºG“ö+ß"|d€h1¶Wú²aýNu}%ùÕíë…c W)¾M«s«ŒÿxÔ„Wu·Œ!cz4Ù@a¶#pØ'}â@qI¡¯;°i%ÞÊÞ ¿ÑHl¾ßÚñõÆ ÷ÌÇ>:S~L?åçd:ã‹ŠŠŠ‹‹SSS>|ðàA‹Åâçççéé 5ßúõëשSç¿l‘$)jÃÕübŠð T+\Ž#Ò—gŸŠÛ•¨ñårº¥…-ý¼“á ,ö´BKS}ªy)eÏyÇsÊòKËFćHâüT ù>Pn4âee·Tä ¸¯ÿ›;.å³kóðàGeüßñÈAAA=\ò;¤¾~ýú©S§ÎŸ?úôék×®ÄÇÇÇÆÆÆÄÄTwÉKm` ko·;¾¹|[éáÙ1ÌÛB=i €S6” ‚óÃÇk0?/¹L4jÒ0FŽü…uMØQ/JØ)!:äÏJ)@8ÀÀƒ¿9 PÜ Ì Ud’ùí71 ç·oÎ ؽ΀'®«ì™*%æžÉèà¯Sóài»Õ³‚WÜÛQ¡ hØp0Y„‡ 8P*iN¨`Î?OÁƒy…Fp«À¤Â[§¶w³ìßhR\R`3 %_ÒñÊ»ÌVùsrˆÔÍš5{óÍ7—/_žššJ’dffæÊ•+,—ËáÉÄÄĈˆˆ¸¸¸š5kB@_¼xñÅ‹áeÜË3cCeùJaé-'Ÿä ñˆè“ü rP|aÃ0µoH—‘?\²«äÂI†eiž£(»±¼Üh%9Ü…npØÌ†òr“ÍÁ ÂepÆ'í–rá;ƒ¼ã›_È2™Må&“ ¶1*\Ãc€v˜à¯ &+è¼ë¤T®.ТÕà“Å@&„á„u.=Wš~òì¹õõ©Y¹Û²“çOœ>ðÔùãçO.ýJRõ!ëÎ?~&³È¿ §OŸ¹ÇS/œß5ohËšÃÛ¨1³ i2–ÖÒôƒ›÷^§…,”ÝIÑün1ø±Ñ ÎOcF‰³¹ÅE>ueôÏ–ûUšƒÓÛ·úüÀ}_vN™~Q^éÖ÷ÓÌÚ)Ägt_§ T8`(@ïpUrUÙÉ5]FÍ=TÆÒËý:7°µøê÷Mkí÷¿í®ljw\&„Ül.Ú QË¡c§l_[,—–d­žúÍØ_ÊÊ\ß½ ­¸‚VÔ¸¾nçWš7xR¢ùÇÌ^¾'‡:‰áòÖ¡ú|_äÔ¸P7x±Li¹øCÏ·fìȲ&Lð+„¯¨˜´Ý•é ž$\Ê#¬¡p .ü³â^ˆî ÏàˆKÇq=>, ¹óhR‘ýÎM+„»ª®Úº+•ÖøÍ²OÆí7-ñ{_ùUÚAotOÔÎ^‘è*ÿoÆìæ^%ô¯+c×™Þ>Š@p…Ò`øÂY/a=‹G´hÞ+"²°PBP¦@‘ÒãðG]õxá‰ÅŸ¾µävtÍ@Œ¦<ƒŠ—õ_Ødg¯5ƒ~”x¼[0æ¯_òõwB¯â‰LŠñ.g T.“Ê0`?¶²ç°} " %«Šý8üãªU–v÷äÔr‰Å¬hðúйMóæ~z6zÔÚÞ•€•|pÆ8öo¸-Š ü0ñsIrrrÏž=ïž$IÒb±œ8qâÛo¿=z4³ßB´™rnKC ³eØmÚxVÚ¨SM’)”5]±…›ôZ«¶RÞ}Òú‰*½¯†ÁžG³\ë¡‘Òve«OOû.Ôû»,D.ï6“›´CqÑ…^£Ä,e ÐpeføO­’p#"Óxx J,ãzd–Gp¥ÎÃSÜi©_tr«·ú·[›€Õµ9œ:¦KÔd«ÿÚ”¨Zz¼8ïû·F,¶¿ûÍÒÚ~û¤q™}t¯Ô§Ä”tG‘6’ª`ʰñ,X÷¦¬ûþÛ-ãŸ7úø¨w?Ýòs¥‘·[*ņ¬L‚»·a„gbi§MØÛÍTΔl_tê×ÊÕ¶•¥¯ËM§8áY–¡(–á!1ähŠ¡Yžó ª}cÇ¥¼ó‘ª ëQ,¶N€¯«ÛÆÿƇ–2ݦDTú5íó9‡Ø˜à.qZ=à€“)Aä䜾|=9´ºšcìf‹ ª<ž<í°Ú(¹°CŽ¡ìN’ah¨ý6xmTó‘øñÏ?zo):kDKO”ŒÖi²X4 $òÐjÕšÖr62ªq (^¢öòeòj:?XÿóÑP„¸øý„U©-Þémh”zæžý«V;³bݶh‡‘¨¼RB§ÆGA硃¥ÀÉ"Ó4•=9«!rØ„‰#Õöµ“¦|ÌOñrØo^HKo® ‘É%(ÿ'ïèßè÷‚‹Á`8þ|jj*$ÔW®\¹xñ"Ôåj×®˜˜˜ ùõ“Í Ê0PÚßÌÙeÁÇÔ‹¶Ïâ1 %ÈÝñÁ¼g:}½½‰/pˆûï$j)Xr:£&bíSY¢Tãøf?¿y_ì«®ÛOÈaö(Ø-WŒ6ò>=Z©¨˜œ‚ ‡Z‘!,H•Âò®ÍîZê…0mPëQh„•C;UaÞÂ]ùÕ á\iŽ…  ¬È såc£Â·¨T´+$ â]Š<¼ƒ3°C`‘P9‚~%¨C.K®°¼ +€‡UX¨”K µw¥Ž“),Nµ@ y¬]ø­Êå|ÂRÀê¨ØÐÌ#ÂÏʵ&骡T.è nå‚r©ˆ R¥Q œÙ+§¹Ý«ã÷£ª ât f;Îå–ððì™[ÆÑ½2[Ú÷vP ǘ3NlÛs‘%utÚ+oïÜ8åäM^ª†mcÿ.²MKæFº£´yÞ=:ÆÅŽûü€r2( 'nÔ»N^õj/Ü™'!\·€Ê«ýʦQí¼Ôjóíai ao};jÐ'«ÎóJ6}Å€×êÔèݤïòßY¸~G©ž^¿h쬥ã÷I‰}ç³½ ²w}4 yçe&ŒkÛeû5³áÊê÷Râú4ðSj "R‚Lÿî½~-_ýúݱÿkõê®›¼šÉÝ9­S/XlrÕ©ËN³àÎ# õ9´°^>)Í}›ÆË޲—–ö*÷ñ¢Ý pÜØ<ÿóÖLh8pìÛ {¶_¾þ2%l–)üeòÄkÏsJöê²¾®ëkÌX°Û„ ÔGij·‹ˆ;AŠ>åQö4BšAA‰œ-ù¾¹>Ï`wÒ¬à´ËQV«Õl±:(V sÎμ³,kß¾Ã7,ˆÕf1CG]_Á–b+®·C¬Ä~}ºY¸Þ"˜§]3Ê3¤^l±;]xÉq Åñ,e·™­6'¼£ÛáHáŒÓiÊݺïBj‰°¶_÷íÚ–nªoJ …˜­všÊtA!ë´Á3$U–ùÍžK9vº¢&(Á—Ÿ»(/ÚŸZ¾õðU°Ÿ–öG=½(qâæ‘‡@jФI“iÓ¦A¤ÎÌÌLKK;}úô–-[7n|æì™¯¾\„:¬ZaÁxÈ2ÊÀK_oæ[©óÈ7?ë£w;Š©ü*û¤ÊOLﲬÚÛßê^ùzn yð«é‘Ñ?ìlìkÞ»þSûkoŒý`Ó¦¯†æœ9QÌ9/-Ò¯ÏÖÖËýîÌÅ?Í%ç4^xV)„[`XLYt½À|ãË +\ã.QƸ}ö›¿:[ñC§øÝ~3ÖŸ¹¸ó؇ØõÛv‡¿ZeÝ»pLvD‡7—ÜôÕð¼Ô“™f™Ü¾F³†­žÜ~å‡V• ~˜·(»Zïñ«>n“âÍ;—ÆÖkÕ¸Y×eg·_ù®f駯×é5þ‡-§/®MÛ½«óŒùR©P„°_4뀲Á¹³ö«®cÎ~P]»èjãÞnÖ4Š*ʰXÙ£KÞ¾æ‘ÐkÑ¡UKç¶oŸËº‚2Ž­“úí4Õ0Ôcn¤ö‹KÉÂõÍbèâ&£°½å/Û™CëcïÖíšÅT›0a±cÇìvûSeþÉX“)|<Ô:­Ÿ§NæŽ/ž]côÆ"™—Æøé³÷ë ù©ÔCᾘJrÎ^[÷óYi@(wvu\“ÅiEƆÏëLýÎᮩê}f㼶ﲨdnü%d’¼³×áõòÀ°Üï߯2í0¥qÞs&õ6®I·^Q{äÏd âÂÚOªµ¿¡T¥Á “¦Œ²£x”Ï8fâ)‡¦Š<çì…3' d2ôŽW ¤Ü¼Ýd]†&¶ª&Ð:cÂG¶f“|ÖØžï,ÈQh"ÑÓ?ŸÎÊ0áRñŒŒÑ×^¾iD«JUÆ¿÷îm|p ùT³"àµh¾ø·‹T*­_¿~RbB­ŒÜïMÃüÍ…>÷Å"ŒÑ_z÷í×kw¿¸KSMú­ê'¦u“ØiÑü¦> øÊîôË}{mªJÛ†OÇ,ÀøkiY^õ|Õ@fº8§kÿ«Ö.iE˜La„,8°Òœ19ƒ§¾ûÍÌÓ¯$Œ¯· ¬ã7ó6Ô×ÜÚvèbhÄíòÇ­[­a[-š] ÏÝxåBŸ^kcq`ßµly•ª³ƒ¼À¥­ëʲ½ûv A(ÃÑe©m7žœÁ^îS絟ÞXþN¿ .ì[ç( iÙ!ÐÀœš–®¨êï 4 ø»î-¿Ó|²¼w€Í punÑ>Ã<þX>¤Ùð]¯~æ>øýåo¶€®_ÿ Œ?õK›^G3pà ¼U?¼ãC~™ê×jåüoRC³N ß_þV+L¸’z+œô#µ-Âi‹î«»u­ï«¾žykÿþýƒ *//¯U«V£F:wîþ$í•üSP¹i§ƒ¤9ŽvR´Ò˜³ÿ<Ó¤qr˜' œxRÓ„_gÜ,B¼dðÖípTªÓ®c a*T'ÕlˆnÎÌÈw^±kíòµ«–+ƒK£Gt¨ŒZIWU…ëýã"𷩉YŠ*WŽÂÏÛUtþè’ŸNµ»P‰¼aT”ZLÇ8u»th(,éSiŸÕ òröå„­¥Å|Dƒ¤:)ǪÂ\‹bÀzy÷E¨&mÞŒë°cø$'Ç%êÙËûNXâ–% ¨×)%üJް•H§°‚wwà©®ð¬è÷Ÿ·KÜ‘›9[Íøàäè? HðÝ…q˜Í@¢S¨P¡çP6«&´:%& <üÎ d*…ái‡™ÁU2H4 Žè,/2ÛÁ4þ~*ì¾ý°<»•iT“V3…ªÔ*Œc„CÎn2­.×xhšFerÞa¶™Z(ŸqXœˆL!• °S:Í¥V;ªòò”cö’‚r!Ô^>J9`iÁi‡©ÔæÀU^2)˜KŒ& ª£Jo­Ü’AP/*¥xg€ÐFC ¬7$Ñr^O0+C¨”² µå(£…–iur…`¡L†kÅõz)ñ¨#K)kÏfÔíí£ïs‰³Ùl‡^µjÕÅ‹Y–­Q£Æ€êÕ«§Õjÿž‰ò^—¸ÄŽä÷·í¶RÞpràÐÇxÝðISÇ4·­¹hîÙbÅBu[;¡Í(F †7múõÏ:•é #ç¬ÔÎCÎKìû¿\2ùûL‹ kZ 8·W¤0­¸)ýð§«N6=µe€Ý~ds‹Ÿ=öÌno?°i蜟®;±ˆɱ™žo}ß¹ð“Öò&÷i¤gsV¯ØvÄ«é²Ñγ;»ù!×¶há²V-· efΜ™<~I—@Ö|{ù´y_¤¹–>¤a“¦õï]K—·÷ÛW?8d”y÷ê^-'O1ê!…‡»Lû¹ñÿ¦¼[_ìÏ$*DÁ]Þ™§‰“&õù¯D‰ûƒò>ð±AY”§ J X>£nmý0?匌Œ;w8pàèÑ£žžž}úôiÒ¤IíÚµÿ2Ìÿ} œÐá©€²(OP9wåÇŠk{®ûf£$!BH h!Hq·¢-N‘")Ö"*X)ÞR -EŠ÷Á‹%Xq[×ñÿ]àÏ{¯} óý²™ŒÞ¹óÝïœ9÷œÄ–ãRFF*°ç*hù<¤üüþI©TZË©S§‚_I’=|øð»wïšÍæºuë20µÁ`€¼Õy\²f½p>e)!‰¦Äãa'ì*zçâÛ1â6šgºl”ßøH™.±½ËuPþš>_ü¦òË :èÖÖÅ[×X?Ú=»,ÎOÙu¸!1bOÙ´*KÒ¢~‹Š:-ß«H7?ÖÝNO,ãÓš£œó®/Qò/Z >mä!yw³T‰a>vŸ¹å„\ TG»ùļˆ’È Â¨”Ÿ ̳ÍÏØbaH¦å'SÈá‚T:è÷.º#u.¯Qluæº •Z”õC¡ã“z$~YgúÆš†L‰ûfé—×ËMX)ðC dÔ §"‰D]¼ðýzãÆÓ§OÏ™3'))©jժ͛7:ºR¥J™Í=ÌÌæ°¼@´6ÉBÁŽu¤7åe«óž’(açÍÏI>L¾jUÞU& 0ßß•Ð/E¸H]®~¨¿F 0Œ ¤üNrɹ/”uÜ?½i¥=¶N Ó½™Ž€Ô½k/\/ò{ U¼lêþJs¶ Ì8¹eéÑØ¯›Ÿ›T7 ÿ2±‰ýè GlÛ ÁAbóõŸÚ×?Èöûü›e3–&îxP³ß·­Šü 6~éÔ¦ÇF÷=δê=úýÌÕC·nCúž¿Ôκ~Øw'ÚŒ]ܦ¶äúŠo6lÔ;=FµoÆ”/Rê/uwçò gÚ/Ø©ßØn›cHbùÙ”œ2-T¼¸äð¹¶M†ž½ Œ Œ¸·¹yŸÃ9vmƒÏ§ïü»ï´ådy`þæh#=¯úKÎ ï›fýç Ç{‘˜˜¾ NOO_½zõÀQ lÛ¶mË–-ýýý!oî@æy,õ*·9‚ÎFÝÚìëÂ_fÞyÊÑ9×oYÅùAíüÊêj+ä`È)ñðíÒCÊ`üAÇ%^€[öß‹¤üÆå{=L°%æ¾28ýZ¶žhÚ­GÕ*XQêîôÌÈOÿØ×$ ºõc‘4²Œ^ÝN:¢ŒªU»Y|d“•m›¤i6íçªå>]Œ zxõ CÝ}ÒŠùUÔPƺ~sw<(eZ7ô _Û F6ÍÙ4úȽzÃŽ‰jzweßá-£¨ó³ŽùªEÇÉGæñ-keƒÓâîl8i½[åŸôõçI5z.ù£A%ˆˆ[ÿàƒgO€ëLÜô~uÙ• ›©ß4ªV‹Ÿ ŽAŽËt1§K#暈ðF8è#€ýï*áoò?3ÞP ²å>̳ÞÕÕ×V ‹õÓk4@Çÿ=ð@ôf…ÄñœbŠvS´Çî.2:2,®,›+ŸáH*T%÷WÉüTŠÅX(Œ à aÞB7fÔ<ÉÞõx üL=Ì«FsüØ*ãÉ(–cx®æh>á<àÒauØ….Âj¶çHp¥J¨WDú)#ä—â(P ØKiÇc5_xsœVÄÇÅ©$S‚á3 0ïºã8êM²Ø—@,Á;O1Ü›”‘åSÁÞWÍÔSé!Q(òÑ>§£Ï×Ì@¤w!&†pdß2ò‹=‘Sf~®‘=:"X‹&!糌Ãñ‹ã/‹:ØÃA"ñ£ÊD”çÿW€¼™#}§Ñ%˜dæï™d¹+wîUrå·ŒRûù¦{]ÂÐív§¤¤¬^½úôéÓ ÃDDDtëÖ­S§Njµú/™‘¦i¾GY­¹Ef2ãbE÷%Mh9—>_q…\ÅyÙy©Ê:²Ø@?- cЀô:~³IÙdË)¶Ý·¹óÝ”ÅM[ „ÕÈU ½*\%(â-:Ár¯6Kâ?š°·X誘›µ[šlÙ&{ÇrRT#ÁuyA¥U?·ñzN§ÉhÌÎÉ9b¢ÁÑåCƒ4Œb 7+Ox«0†ŸúÁÐ%òª©„S>{°‡ânçrYwÉère‚õƒB¡(=Ú°  `Ïž=IIIÇŽˆë-ZÔ¨QC¥R=éQ€š‡±¸8§Ðð`gœ† åø»ÿ/é‚ å²d§_W‡ÊTÖ«µ:\.tüîxßRvŽŒÂ‹™Å—Ùª~j¥¿Z ’ùK`ËW¾¥Yèm‹ÄDx¦æ…<ÁÙ­Î"»«Àæ,¶Û$E†jFú×’J”ÏÂË>½l±XLÅÅcQšÅ•É ez‚“âJ=—{c-E–¤ý¹§µ3_='•Iýê5—U©‹Ä /tKûUðóÚ8Fï4FÒö *‘ÞÏ õóÓjµR©ô¾Õyvç­[·>¼fÍ“ÉT¡B…úõëwïÞ=&&Æ×¯€Ê¶Z,ùE&{ÖÍŠ–?ô!Xù·£%Œ@,éÌM¿ÇxBêùi|¹g:~sH™ƒ,Žüë,ÓcŽ ©¤AQ~” ‰ãÞÑ<½œ$ÄÒ Qh~ð çÐÂeýêkã´Š¿“*>É ¨¨f»Û墒f˜ÿùžçÕ<¨€ª€|åÊåÝ»w…„”iаa½úõ%Þ|ÿ…EE‡L¾zÕd2ÆÅUhݺUùòåÅMñ Kß=ƒ1ÅD¼CV&W(•J@Fb±øUä‡{yý(èuëÖ]¿~½¸¸8>>~àÀ @DÛŽ³åé{*ÉŒ¨¹G^À§MAˆ!sï\cÊÚBùñHZ@$½ƒoóÞ½Ö RBÊ@6‚S†óÎ;8 ÓézöìÙ¶mÛÊ•+ƒ±ä?£¸¯¾»|ùò¡C‡¶nÝ ÔX¹sçÎM›6´îr¹JÉuùž £^À^¼Ñ½.##ãĉû÷ï?räHpppÆ «T¯¤ªã>.ÑùC˜ü‘w A¨Â{7Úâ°–A½^¯$nh Á}\zI™ Ýi9'²ÍCbôå”_ê–£…¦ÿ' c„:Is9ýaNŠŸ<¦bhk…TSÊ‹2eff.\¸<Þ>b1bP¾Ï[¶ 3iii«V­Ú¾};P£Õ«W3fL•*U„‡¿¤áv»ïß¿ÆÅÛ·; ¦Œjý^x¯V aRgªQ”ØHâï¥ãg ÂðÚHÙbÏOË=nôÜ«ÑP¯ c9æÕz9æß¹!7ùZõ”ÖH §…£J ŸÂŒ¸ ÛÍûà¢|Psƒ&¼ôt¬ììl ‡[,`÷éÓ§cÇŽ/qÿ§OŸ^»ví¹sçÌfs//ªV­*<Ï%`u‘$ lšû2SÎ./± ‘õD~¡z­Z­t,W”FRöÚÎ܇ûîô¨Ð÷ ªHò°¯¥z¬ÔÜ_W¡ïÕ k&t‰VR¯©‚ãVš®[”=§àå’ºVÆa‰Ù•{/û"ΩkDvÃ0üµ< ÃìØ±HªãÇGGG'&&¶hÑ¿%M§NÚ°a8txxx›6mºví ´ðl—|1s.— 4°uär¹z\zIÙî0_~¸I§÷/ã"8û¢Y·Q1ìØ9zúNÿõ,!m:fX ç¾…kn1šêS~ŸÙΓîÌUÃF­¼à€X,®mâÌï:„Jèü +zwûÍ*W׫tÜ1kÉàæarú_H•ÂÐÕ?|9áP!†Âhéç&wç-4ãR\Ï9£ëgm›>q½jÊîq1yû&ô™"ÏÎéÊ~¹~ãÇE›Ç~w»z\ÖÌ_O{$G «Å\´ò&©ª<é÷¹]È=Sg]ŠÈ[²ÿŒÍæŸÐsÖòaÕ¥ä/£Í×NOžÔˆdŒÛ¦Œž³-“†á€ª½æ­é/›ÙzäÅ–{w ä^Bx±7™—Wœ–“{·rh'MYg—ôSzëÖ­ùóçfDâ!CÊ”)óZz3à‹ .,Y²äÊ•+€/:wîüÉ'Ÿ„„„”ñRÐG€Ch“—,æ^‚§ÂV”’µÝ? ¤zÅV,Gñ••_‚˘…å¶\±©>_z3¹»µý¼Óõ>Ÿ‘2úcö¤Á}k²?jx 5Yrau ¢OÍŸ4s¼kìlP¯â‡j@reÁÎC¯´ÏmÂ=±øeã䢩#šÚ é©£Ünçíi¡‰œŸ®üáܬÏã¥Cb§m9°;†„hu@pÍZ›Ü™ç“·NÙÜr]'ÆzÅ"¶èz"zo{çï“ꌘvõsôÔ¼I}{¬­óG"ì¸Z@Nœqa¸²=qÞ€å“7}&B!!ÐýyÝFýæŒù _‚Œ#3/ìÙÖ<ï脦_î½ QvÎü îä¼a >ºŒ_E£-ãÄ­½±mu‘%ÁË·oßÞ¹sçªU«€:nÕªU¿~ýV¯^ýÚ{3Pm ½ð@;O˜0áèÑ£~~~C‡mÖ¬™/ÞKÀ‹ý—VRC%Açî®ÑùªUlÎpÍ/SÂ{‡dÂá¦!eÆC$N˜aŽ¥¨rëZyó~9ݧZ•ëâîÓ¹HÓ^áq®hת}§\ë;·-Þ|å‚N,E—Ð|Dõ4,ч…ÅÄJ?ûõû8avÆwN7„äž]6üxÕÑ–ùlx•ßV×9X3j{ç3+&FË»µ¼É¡Ø÷|(°7ïùxøóAøY×_ “JŽÍ\P»Íúþ~Ù'¯›åïW …<•Î‚Õ å¢õáxí±ãkùƒ~Ã{Ý!Ï… ãLM˜;£Ž{‰ ` Šó¨”Õ+†ÛîNÙQ'zB¦âë…¼dž '''W­ZuìØ±Ã† {2ï Ôõl ëêø^XXxþüyÀË)))ñññ:tèÛ·¯V«žo‘û‚ƒÒ²Ïæ8þ¬ÓCD%V lzŽ7â 2,ç³8–_Š¢ #,éq{‹ÖŠeRÌñ©aÎãvS,"–ŠÁwÂä°ì_3åq$ä& Úãòо¨L6&Ia'ÌQ ‹Ä8Lº]`¤D ƱŠüýù`* Ù;®Ûþð1ûWAÎb¼ñìwº7£C¸=”—|aL$Gó] †–T4+¸†¥nÝKÒ`1•ʶwûy5ŽËåº|ùòܹs/]ºñÑGõïßÿyk•*%±fÍš­[·>xðÀßßøðámÚ´ÑëõxSI™›Ç@—îl£%Æ  ØÒ<ˆYÏÝ£7&?í¯+êòi*r÷ËŒÊà3¤¦þ펺N“Zá"¨tüa°èvViAkÅôÄD8ü ©ª.\¸ðÛo¿ýúë¯2™¬W¯^€‹À|ûz?PлwïòÿÊ•+7²ˆh¥R)ð‚€7†”ÁÊI§ÜßçÄT/׎ä¡zÿÜæû¯¹¼ùä°Ò»©—µKü‡†ˆ¸¨¬ÇHÊsðàA š7ož½~ýú‚‚‚]»võéÓG`d€   ‰'ž:uª¸¸xòäÉ—/_®Zµjppð§Ÿ~zèÐ!¡}” Rö¾²¢]n§ƒÌѪƒˆ~jVb?탾<ýC›@Ç£'ÍQ‚\˜B£S šI˜<ê§™¥ýH†>‰{cŸìűC“¿ûéüí+ûæÕoÝc £€S—Ù~5¯ ãìòfMFÿ’ìDÉëãßë²üÄ=óîÉ*%n¥aqÑñ5=[Zr:ýÖ½Ýs¾<¢ð“£8Ng\þ¼{·qÛS óröÿ8ªÙ€ß-|z ÎfJOÏc䎼+w )FªRœYðý箜ÛÒ±u‡ïŽÙõ°ôƶ…3Ž„ÂÆ_>þbÀW[“ó²ïd=4Ó¾q¤d`ˆ¥ÜèÌQ{«WïÀƒãÆzðÊ•+#GŽ ž„¿C\\h«ôôt0z?rùòåcccÁ¨víÚ5Š¢„&ðr=;)³ K‘$ Ls¯"‘‡Ê•(Ç@R‰\ 4-ƒÂÞ¤SËa"o}3Þð^~”±þQP÷8™=CQ-¦LêY;4ОPõ·ÌûÙ…T‘#o÷ðÁGBp˜ [mvÃè+Ç™1¼ACwl.šê("²ÏmK#*tù¨^¨ üzáõn|6:BÎ{çO\L‚Ë ú­¡ ‰våº9ƒ”“è Aþ2¼ØYÖ4«Çîxÿ³‘Ÿ´‹¢°zc/ÝÍq5 ÅDp)v(pØú þßÿôõ 5.M›Yó?ŽÕ³%ýræAóÙœ:ïù3øËdRA?Ÿ~A²eËÎóü Æ3`a8pÀh4öîÝ»{÷î5jÔZIÀ«#eÍccufk®L¢yõó§9˜¥ ƒ0üôßÑa>d˜ô$iÆo‚棒yþdi’ i߯ IP"ðÖ,Òn‹†Ô°TJP€ë)Â'·ˆ¡+‡)+ƒÃd Ͳ,LÄGãÃg6N;õÅ¢‰„&(Ê—¸ fÞœ“Cx<*ç²–O[°áháî@ÊpÇ–tŠAM¶\„Rq,"Äþ¿8ª{ñý÷ß±œœœ úƒ> jÔ¨Q¿~ý*W®,4‘€†g}Ñç›*b±Øïe^-@ŽÔ¯»—”_u<‚`ÄÐ쿤sE^5Ó|à0†#ýñ< ð+Ì{ÂÁ¯ Yop1îÓÛ_EˆÏm 6ç8ï.a‡!Ú›ïE0ôQa#^‰{gˆð5hÖ[3ìš/Šäóäˆ` –s 0&øŒnàˆ`Çà Ø{t˜?C†ô}ô®ï©ÍK8">›²Mî¬VS§×úò+ ÀKÖ —””´råJ £išòù“O> ZFÀË'eÈ›nÆétßÎ>¬wVŒlBñsÕ8¡K?Ĉìvö©¼»žØ€VAÁÁJo"¡YJ{÷îݺuëž={¢¢¢z÷îݦMaž·€—IÊ$IÚíöÂ|ó­Ü=þÑHLD]>/Ü;ÎË0‚Â0ëUÐüÜ= ˆ9^-³,[JÚCð;YçrR±þí‚üÕj¥/¼Ðû_€šÚyÞ¼y×®]+[¶l×®] $X*^)¢F™Íf+*0ÞË»€ø=¬ßAðwI/#å¼ÿ0Ö…Fëps/®Ýñ|ÏK¿ö ‚Ok1–HÜT/ýËϳ_^ÜBnt²¯ûþÂì­´3¶LE´Cÿ@?F-‰Þˆœ2¾žY«V-Þ]ÿV !Oj”øŠ“¾MO0¼ÒÓÓׯ_ߺukU_´1Ÿ“ÇÕj5ø‚âµórÃ’Ž«X-&È/†b‰×t ˆ&¯í9—Ÿg=yçVnaÌ×z†Ü?³`òΛ.V¢©÷ÍÏíC8F 3ç–¯]~4]ôþ‡CƒwôÚ‡_ÙðóÃØNíjú+]÷Wo¾éW§nË8=Cdm¿äp6ˆb?]Ü«–^ŽÒù{—­ÜzÂÂB§´÷¬œ?oÓ´g·±‰ï˵¡åêü árוoÖç~²|”bÙÀÂvG¾ý@V\Ìr¯‘K€@.4eÜL¾©çÄ…–1ü”Jå›RÈ’Ÿ;JQ@`Z­Ö¤¤$¡Ú[)‡ŸŸ_Ÿ>}RSS)3 #”ƒzu¤ìíÁƒ­R©€à’ÉdªBmÖÅûiÒ±U¢´‘4G¿úÊi( ]Ùµø|ܬý³ë –3¿Ìn¿À9v×är² ãÀ¸°‰£îŒLíûã÷»,Û6Z¥Íÿlá^ÿn];„?L:voÞ6!HLŸûãjdd†²Ý½ïk¹kÆòpåºòeõÑi{'W:·tÞFìËí³†À"ÅfŒºþ ·¿°™®"Måq’¤ÓŠUÿtÙ2†‚à™I5i–.ö6Ãë° ` ÁŒÖìÔë·0[ù(C'ƒ¿ 4WVþKRöº’½·T9¬À#ÀÑý·fǯ‚!4E¾¨ Á%G„‰p¢iŠ-ÅF©ÛíC©ÛóU“òk02èš …B£U…eœ{p ÝS%´L`E> ŒcáW4“˜ŸÁ±L.EYÒ‰,"Õid‚cà wX•裙.ºsƒq™óœ0$†<·îXE!`3íT0$É{~÷–%Vþ.VH´1•ˇ“WGl}ØÚ™¨J3.Ö!ñ§–vZ±¢+é2»E|’#â\’ ˜NŸ%¨Žxm…`aƒÑÜâ´{730g\¨®¾¼F«ÕÉårŸËâë>.~¤ÌÁ˜Ìyöȉ«yv’ƒ`YH¥šW¾½o;Y¥{zf´o£G]]ƒ°zþ‚˜E Mö®1ãv$NZÛ8Øé¦ÿéÉcRëþ1u6—Kù}¬iÀ±G¸Ñ“–ÖñwxèRz§|_F~Ñçø»»ÏË ÌL‹Åb4šÅEF*Y]ÖõžR¦§ÙW0ß Fa¶(--Ë¡Ž©*Ch–BއÇ¿œCð¹+‘ñÍEèa*õüŸçSMZe =7é7K£ß&ÕB çí=Iç ™¨¸he&•ùEú+qØyiç±&Þóë£Ú¶tÝJþãRøM\¡F—:(D›2ÒO½O•‰kY¯,jϹv¾Ø¿v|„ òë‘1‚;Üæ;÷.™î‹´hƒ>ÐÏ_§Ñh¿)þŠÿìW§¸¸¸iÓ¦'Nœxåî \`YßeÈ&S¿þ¾œa(ša¬—VϼVaxSñéµ³O>3©ì饉Ó7æØ‘àÊNøv`g'YÞPQ)Š·LXvÍŒšT÷ïݰ·µxd}‰kØkk>ûî—,‡²rÃVÕÊCþñ½›ë.Ì_]®<ºlW¦®vשÃûDiX˜4XöÅ¢ÃùH­.3;ìßùyð¬Kú6“~øÐ²qì°¥XTR»ë¸7?<ôóV“ŽÝúKFݹ³ºÞ™þí­š#Æwˆ¦™Wú6Ã`0ôíÛ7..î‹/¾ðö¸õU+åÿ·®„Ï Œa@2ëõz{p€Å\Æd´Ü:šoCëB±èè r©1¦¤æ¬ñó µ1å½Ë)o¢$3ÔëÙê©UH…$ÔìR ‘1Öý?] ЋX>@oÛðé Rš#h«Ø¡eŧÊ*½×µÒãX~ˆ<,ªUX”o¤ ¨Ö<€?Æ«edÁŽvºÍîß*Ìp+é*:uÓpN§U*•ÀŽ7åíx¿ÿê•2*•¹’6ïH¿z÷úÀ#KaqHʼn˷D™½›ªYÛÃ>¶­Â”Ãk J©5öÛz㱟Wí:‘Ò%î=áaP7Þ¸²ûÏmÚ»õ¯T¸mlóMÇuì“<¹ãÊüÆß¬?QEY°î36Åþ´KwjʸÕÉ·lXu¶ËÑÇlÞ•ÜphÕk#ëM¯²ñ±¯ð…™•¦uþ©qpιÍgˆ¼V}cV'žª9gÆÂn™‡—®?µ7½åûÆ£7ŽÜ³bK/†òD™¯f6ÇÅͼõ÷H åÿM;áp^§ rÙl!K”Õä¸}´Èœ‘êÁ‘þÁþ1‘Šá(ï|¼×aãp¬‘7üt@C"Y÷ÇN|#Xä"-9iyЉb¥©¨R6Œ’k¼J¥@ …,_“%XÁþÝû5u¾ù}jbØL±b­.eáNI…–µܹ«Z{Á9UÓé{4 „ ÍZõ˵1V?ÓCm©É7|ÐÞ• ×ÕŸ¾ÿµáÐ?ƒ ¯N?æ–v©S!€ÞóUÿÁkîõ\4»2rò§í1C—õ*§ ÎnßE0xÝøXÏÅEM¿h¤ò$¯ìÙe²¶ë–8-q}Ç=ÂÙ)Þ¾o²½ÃOsû×—ƒcÖî`4zˆc_ì®1fWg­‡ dîÔßw$ãÕ:5«€B¬pß]÷Åß ›¾‚än·ÛápجNðÏæÎ%±lÜ`  )'+¼GÆØ¿¿=<·òôJQî‚ÂÌœœûž„ SIƒV©åàØ(€‹½ò½Ç{.÷űcÇ^©û6ˆ++£€Ö„dÀ8‚r¥Ø´AáR[F&¥+_6weݼ~§ÐÁ@˜8¤|µrœö†ªÃ,U”›a“–) àÜÅ2èÀX?)ŒQÖœ;©&[¶ZM…5 ,¯tfÜ6Áá¡Á ”2æäÙ`uH­ˆƒ­9oÜsi¢Ëpb‰^*qY]ò2QA~Lqòån†ƒeúØŠ•užû·­’èPŽ (çʾÿ€ÑD†è¥ð+O`0úõëW±bEÁ}QJIù 5CÎAøÚnç?œN·Óép!é”$ËÏ_ëbP)õ2©ƒÅ,İ,óÎÞÞâ€PÞ/á±X­EùY¦"‹ˆ “² ™Z&—*y(À??ñQ¼eÒøiR>zô¨WÊH¹ÿþ)—"÷Åß«<õB,ûœÎ à ž7'ðÏe!Œ¹D&Yäæ®s¸]f ZT­ôÓjCT27ù›/Å[8"ú(|³9Š,Ö|‹­Øme]&Œu)äH¨B§•U 1ˆe2™\.Ÿ‰ÄGÄo“(~‚¼1¥ÿ öî@Ê¡½C¨ u: h ¢Gût´ËUÅãö¸]„+Óm"¹”ƒ¤И‘“ç‡F–‹¬þJb9^î¨ä#>·(Ëç#âp­v»Ùl,²XŠ— rú¡´ŸSHð‰¸š ð®¿H*•–zZÌAñÎä?çK$Žp;L*f= ZR„ã"„£H†cI—‹Aä ÌRn‚@E21†PIÔwÅE0ó_"ÿ(&B!>h~} ôpQàaˆ%ÝnH$£OÅÈ{«!†¤î¯7ÇÅKò©Q„u™Ív “«Õ ôÌAÑ)¿‘¤üotåSР¯軣>G`jŠO’éñ j—Ëå°yro\öxNÇÅ&€ _˽:ŒÁíãZÀ‘0ïm€h’qÓàÁäÏ A9)‚²™Ýnåv …`¬ctX‡!Z7ˆÄʈq‰F" 4,{!ò4‹Ï)áca!ðóÙI˜táÍÆÎª4{ºyñ¼¢ G·ôÓJ{ã·^\mÓˆ!‹ÐÆ?5P–±{ä·s*Ú:µ…ÿÚo,QÌ<=¡¾ÕMKµÁ™ëºtIï1·Ma¡’ËQ–‰0b8öx¬N’E\®RBn‹ƒ,Œ(”²#?v›#žzõë*99F’Ae­œ/NËN›ÝIA컓¨UJp%KÚÍV‹ÁŽä">{!í´š]‡Êµ ˜d ŒÞźÜv7Å;S®”³N³ƒ„¤*­RL+Ž"6«‡E`“j™ìo'˯¿ì—žYYW~1}qJSÜCr»ÅE#Œ)míº hO{69©°-чÍîf vî\¿ /r@bºú³ß•ÿ‚Ü}uf¬9/ÛB üì÷H Ó7›”ÿÍÅá£<G?ýúÞ:¿"ÃíÌ?ns—cb+ó¯4ž¿Àt+b³ó 2¬¶Âgã8 ´°ÇßaÚ’{d=bˆÁh†Â8†JNŒÀ"Qc˜DŒ*PQb°^Œ‹ü€VãÕ. \ß§Oüb^€«~¿I¾ï2#û®ýÙÝ`³;ˆ>«7ÊÓSͽ'EV3ÀV "Q($ˆí~šªçW?‡„«aÊíÍ¢åí_¬·. ÿ?ŠsNmÚ™”EÌ[EÖïXátvóNAuÆ÷m§$wìØL7›ù󘚶‹>ùæ}‰å'KÜ8¸ýà¥| ¶eñú‚Z kän5á ׯC#8÷ÏGfOêYÅÀœ\bÚ3õ»ÝQB(1kx¿S‡Àìƒf­ŽíPÉà:uðŒ¢÷ô…Ÿ 3*w_ÿ °ñ×½Ûˆò–þz0ºÿ÷³ûÄæ]ÒmÔ±>ûŽ·ÉšÒiÞ…†õÛÐûO=Lø|ʈº„³èÔž_¯¦æ;Ü«WÊ›×­,aE›§&B·ZÑI3·©ºo:RgÍ>tf_d¥±þÄõ±Ý–:Z'Äâˆ.2¡ní8%Ì2nÓ™3;Œ~Ã'äþ¹áÀŸ ùuÎÂê E«ÝÔ³¾Ýñé*ÁËô6ò·üù ^¦æ•#Úø^ö•ëž •ªÕ„Ÿ¡ŠØ1ÅxÜGqaA^Ne•ˆ<å$¨^*®¥KŸö<ž¶ÂÇðžoäà·€qás#¨ÁE¸OØú´-ú÷xšvŸþð•2XMZYÉ‘PT” ‚;‰x+ä°4iËWÀ)¢hç¼ 9/1ûªe±Kl`•fMknߙհWû&¨ªð$ì©•øí·ý*p´y5YŸy›÷^”ç­zoÉΑ”Ïõ‚FÔn]/åÀmIë>êR7W\¾zK­T¬ïÁöÙ~ð\³è.Äé üÚŒê’>aæÚ%ûb:ÿй·}õ¶ËWŠdn8E³@<‡;u·{;¹’iôõ´o{Äà2U|@qUË“*÷»ºtgÓ• ô;9aÄ̇®]y«¼µÒXÍÙ”¼mý0U•†­ãSnkvèV?¬Èš†( ÝGþ8²‚½g<8íÞm‹­6Š)•)BzÄñC¦63lÅ Up¿Q-Õ(CÑ  P¹BëF(Nײ^åÙ7°v]>ƒ9I?×=:ê[NÊO³3à;•Jåý¥jFž’|ªjµúÿÑ À( h˜·4Í–|£)ÏZ@Ø a1¤Ä"¥’ˆp…X"óÁç(ø7eê£ã§w ÿž¦Ô§ñ/þ s_§Oùß¶eÝ“ÕEÁw“0MØìfÉ€;äq˜Ìé;è*?­uö‚±ò‚þƒ›Á.³Õæ¦YŽöØáøßµKîܬ1>tÓéêb'õˆ°8õS`i+g–ôø¸sùÓ’?é0àòïÁyî(†Ö,ÇÁäDΡÝÇ‹ô± Þ¼sý·‹ÆÅ-û}xݲÍ*Ñ+š•Ç4jŠ;¬&“ÍF2àTìFm«odôèÖ¨uà×Å:ó ¸nÃÛg¯>'ˆ”b ûÕjTI»Áp#–Ƀ(ÓÆåßM‚~\_MØL7ÅBˆà @¿fH«Íäd0¼ðòº½wË6k¢Éºsëò±‚Úý ¸‹bi‡Íd'ÞWF¹ÍVÔ›¿æùZ\˜<ò2IïMiJŠ¢‡±Øô û¦M~²bÕª"‘ŒŸ„C·333ÝRl¡­zÄ(à J©ŸL&•+$2>fAæsÚ>ѳi–~øBâŒFcãÆ÷ìÙó!q°X¦Ä§ÝÃ<±‹ D$—J¸K$SK8—ÍC?ú#"Rªd(K»NN¢ÀY·ÛCqÀ:’ëŒûF}¸]ôý—uýÔ3“(„!N'Å`2B̉ñ8’õ¾}†=&•É%8?róÎf7?!—ÈeRï"¾¦­Óáf%*%J9]óÈS†K•r 岺©GÙ­p¹R&ò•¼a§ÓíÝ?zb©B*âHÞ ËäÇî¡«¤ˆÛ® “K¥ aw±"RÆ;Š9Æãr¸IÎHe ˜r8/ã¥r:‰çvòóó2dHµjÕÆŽ+„ĽåJùÿOÔ;“ÛK©UäB)Op ßÛp‘»¬ “J†ö ”y#ÇdR©±Ïcë‹(øÕÙ„‹÷4€†þ× ¤mÏc‰q[­î§õh9 A§Íó/& Dv~*ß-Œ@„Ãöôüž­Omík·ºžÞ‹ïH—…xôÂi¤9Àµ8¢Ó»H›•|ú¼eÝNÛ£MhÂN }F åçñcÈår>Û†¸šÍZŽ Dþõ±0мÏÿÒLÀªšKÅݤßáIMÏp÷Å;GÊOó2Ëëÿèm�CðjÝ·Ñ_‰ËuY¿6úbè‚Ï? T@Ì‹¥I†a„%67-SjD·Kœ`«7ÿ‡b“w›VÔaó¸nžä5£Ö_è6rPÞÄɶA+‡Ö–’ ÷rï‘ÐQßERöáID„”ÿ ¡ˆ§øaŽÕB›É[©·ulÓ6µµ%R+m)G\¸çâ° ˜F-[D0Eá]¶˜Lo=p&ÛÃJÔU;ôª)wº Ò¯¥WòÍf»¡lBÃqbÂÉřǷÿqϡڪ šU+§ ùtÌ&—QYÉGÿ¸\HA*CB».¢æB“šæPBܾ|àìM+‹(+7m^%L[³N8vßÉ`²øö=‚ÅDtnÊi‹¼ntYêLK¾kR„׈׳Îü›§®Ë«·)ËÞ»—OÇDiÄ,m5ðñÉ0LØ‹ m$fOþý·K±õË÷¬9TkЊšÒçš#(åWMqBx#HùeÁPgî¹%c¦]Àªüb\}hóG÷Ê Ž­‰ýFïv´1vüè>ª«?~ÜqY¶JÃ.¢S·Ìè9dKÐÇ#¾;º}ÜÅñŸ_’)M~™9ñg¢~ïqƒ:ZNϾâšNUð}çvËÉ_}3mêøgúnåeR"•Iè«?ë3åPüàIÓ'küGbËw0¥ÈûŽNŒ¹.¬ûÙÌ»-Ç}7å‹þuÃd¹G—õé7 éòåô©S·ÊÛdÌY'†1*Jrmô¨ŸÎ=ȼºqöº ®fI'VL:L”‹RZ®n¸xÕ]3‹!¾¹||McoöÂ…G÷üöûÏZ•­õùÜõƒÀ,Õ„Žúî*eï^®O™eš$•áe"Ct΂Hì/bé²;q½VÓn'C‰µj¥˜¦=,ÞÃPn)’”"Úîð°R­NËQN–¦ˆ€¸„`œ2[l©?ÄR$]l²Eª]wï\gQÏyóaÝnVì²Za­Ôµß¿QàÆËõ[²Ö‡ Çç’%Àà°ìÐ'm9öu·¾™­õÐP8\FÉ>¼uÓC ÍìiÎq„‡†<ŽØa³Ûôøqmh{´¨×ÏŸ&Ï?urÖ¦ß_­j ñéõ9ß4_}yo„óhn M>šb±—Ü=&¤,@p_ü04#ÖÇÔª/ Ä]$ÍŠËTo_ÛÏn ¸qÎÕŸWO¼ÕÃÉb[\¶!Òi2{ËpâjÇÏ©rhõ§ƒòHN^¡Ë¬#s¥Œía¹uB"eÇÉËVªÝUZ¨ˆéGž[1ý« ^î“Æ|4¸{B¨Âá’77«ò•ßWÇs£8¬^÷a=5ŠÈ#ï^»dï-ˆƒEM¦}Õ1F­¨¼´êŸë'YíâÃ+”:~Þ¿®œfÀPÇ œòч&ôë¡ ‰êzaí–ÚãU‘a$á¿÷AC—Ÿ„¥QEõú=áR‡Ë¥¯ÐªCh$?´”°’ÄòK,4¥€Ò©ŽŸÄ)oݺUHÝYÊ¡×ëGŒ‘0fÌ!NYPÊÞr(•Ê'e_É…Wp¶"‘H*•¾k÷H­Vã8þ–¦ØHY€€§2UõìÙsüøñ€RÿñïÛ•ÓéLLL¬R¥ŠËå*¡s¬”ŸŸ¿dÉŠ¢Þµ›îT@@@½zõÀµK$Á¿üBí)¸/”N<©’>_„”Á†€)Àç¦M›À> t÷Ëíö€ŽÇ?þ×¢E‹')°ßR— ì•ÀV‚VRðvâIÞ¾ÌȾîíKœb2™²²²¾ÿþûîÝ»×®]pý‹«9Àï`ç+V¬P*•`·Z­V£ÑÈår@ÊïšT|’UQÐÈ) ðLºÛår™Íf@Í;vìHOO>|¸X,f˜>wØék×®µÙl}ûöõóóÓét@'‚} Ä$@ eþ7|õ!d¶X,wïÞ]¾|y³fÍêÕ«GÄóJB`¡ïÙ³'-- ¨ãˆˆ Õj5àèwªv¢”xQ€Þ¨Ùãñ½l·ÛwíÚuöìÙñãÇû¼Ìϧ@Ÿ9sæøñãݺu‹Ò0²/%¡@ÇR àR3Ì€”Fcvvö²e˪W¯ÞªU«ÿ˜ãxFFÆêÕ«:~ï½÷|t,•JßA÷±”xù iÚív[,«Õºoß¾S§N :T¯×¾þOu ¸{Íš5Mš4iРF£t,—Ë}õk„– ²/¾h9§Ói6› çÎ$ó“@cA<ÏÂ… kԨѾ}{¥R èX¡P¼SoR àÕÁo˜ð2PͧOŸÞ¾}û°aÃüýýd^½z5`ánݺ­Óé)ÿguGR àåS³/–PsnnîæÍ›/]ºT»vm Žƒƒƒ/ ±nR à5Hf‚ l6›ÓéôMZQ(€Ž…X7) ð:©™¦iðéËv&¨c)  @À» á ²¤,@€R @€” @À³âÿ §ÈxUöíIEND®B`‚httpd-2.4.41/docs/manual/images/filter_arch.tr.png0000644000000000000500000000470611035423623020330 0ustar rootsrc‰PNG  IHDR9ˆÞû³ PLTE333fffÿÿÿf°À· uIDATx^íÝËŠä:`™]A Ì‹äVO1ï+ж!³œz…€ØüC¦3KÇVÞªOg*Ò¸‚¦ý!)¬‹3!T)!=Ó3=Ó3=Ó3=Ó#ÀP’­‹à£~ ͳØ3åâÕ{ÜÝíÔD„sâWpöÑ<<ÊÊ)„' „}¼GÎíµöŸ,§þ¼æ×;=süšžAez–陞ß/ž{¦§/2=Ó3=/+Ó3=Ú‡œ§'@{µf õ ­~ pÚ6}…G)´G¾=Îß y^Ý^¶õðhO­þIžøcAÊ' ž””Ô3®ù“àœø*ü±ÖE_äY–¢™h)žK:U?3תêLT>2-ðüAT«fZÊç1Z^â‘ê¤Õ?YHä§#T=3©VÏ\Ίc€HDê+öRg…G‰8Pegr]<³Õ³‡@ä¼Ä“Ò‘VO¢Óõ䜒~zNËÙÉ)¥³'-/ê?¬ÎZ.õƒ£€B3Ÿ› ÎÊ+<ΞïôÏ™k}Kÿižs~‘öù…#ââ!¢ZWÏËòËüIJ”˜tsÿqRR|páÖHéìyÁýçÇ {®æS¢{ž‡{b4ñørn¯ôŽùXyn+JÖ³óÃÒòËi¼Ç¹y ã=u“ï4ÜÃö(6çÁžºõ€{h穃=¼óØXcçñé¹:úË®ã{¦G9–…Ž”_…ƒå{ÉÁîÏ…ƒ_…ƒï…ƒÍ › 6V ¶¾P ¶þR๷>Uàé×ï=h½ËÓïoô wä žÇû?ºØ qž7Ül‘P‘XŽåÑHEÕ^îʃÅÍjOƒÆñX0Ïòûžù>ÉôxÚôlí1ð¡y€Dò(ÜuQ)XLùÀ£=Nî!În"<Ü=y„3bx,’2¬Ðx!»C„&ëáÕ£ŽýGÏ÷Ö_#=N[® /´"ØXòîe¨Ç)Öø^Ê£ËCéÑ”ÒÒµÖ0O"@<µ&réIçö*ߊ%Æû-¥EÆy”±Û_ué!4sS…xžR[dG6œFzœ·.BÅHbë©ÊC=uçQÂPì<c=¼õ(s(Ï‚±ÇÆS äqŽå©ˆåÁô<È/€§çÞýÙXãk|kþÄšˆ5k}ÄZˆµ>kýÄÚßaÿg´g>?žé™žé™žé™žé™žé™žé™ž¯O—òÏóÉ`Ͼ~ü¯KzŠã)@—1î<Ê«ŽBÔOs(«á¨ß€ú„ÇÀ;Ÿèªhçæ§ê‡›ÞmnÝ ¢Cšy*”Öˆ¡6ú-m<ºtŸî‚»Þ°ì=‹Óÿ„ù`ˆ¹|0øí¥™Šûö…‚º„S;Ùx²›ýWò% Ÿ]P£Ë s¶]F¶Öé‚]ßÔf_r¸êIb¿øèD}ì©`β†ºÆèƒ}×í<º|Ér Ðê©’ÝúØ£Ì)Óæ?n§·‚0ìÏ›Çðun¯ÕÍÉLŽþÎ0w’âµ^ñ@˜Ý6ßÎo·µí]ÿiÀ¾z”‹ÇL8ç|·ÿTôíÑû'µà}~}}ç—¡yLÚ“U…pv¿Ú^—ü" o›>Øß?¤Û_Í#fU$ë_=N’:Ï®p>øØc{’DøÃ¬y`Â~ÛÓ_Ãî»óoàëfP¾ûÏ{/˜žé™žé™žé™žé™žé™žé™ž1ez¦gz¦çÿ⨠ÉgjoIEND®B`‚httpd-2.4.41/docs/manual/images/ssl_intro_fig2.png0000644000000000000500000000227010671421551020342 0ustar rootsrc‰PNG  IHDR¬ÙŽ~YsRGB®ÎégAMA± üa cHRMz&€„ú€èu0ê`:˜pœºQ<PLTEÌÌÌÌÌÿÿÿÿ™™ÌÙi®- pHYsÄÄ•+IDATxÚíÚQ’¢0à_ÊßíÞš†·±šÄBÔç¬%¾ßÏÒ”³¦ASó¼éU–mb ˆˆ2c½»x’ôœ•‡œóP^ßë­šØA…PË7³šÞzpm Ó¥œ‡œ¥ï±–ÄFéªÚ[øQÖ£$œ†<Ì]µÅÊÓ0 Z¶>e­‰ˆàÕ ¬õ-ﮪ+ÖòaÜUÿ¯³>„Ò0dMuëóA¸&v ÑFFí8¶ÕkÞø>kДóMyú[Öóšɨ5n™ÊN3o "(ª|Am±Þ0m~‘¬5n)—‚÷Š%¢^©±Þºí³‚ojr©”Ñî¬×V¬,‰µTÍÛ å8¬rŸMÑàÖ ¼bíaJ·SÛû-•È(·¼e¼mEF©‹ñÓ‘ñuÖ<÷n³¶æ\áÉS H(¨Ú)]°Ê%ˆ€ê}ïÑŸªÜÎ,v ü,õÄ‚‚#Ãÿd5Ë,³Ì2ˬŸb©«öBo¨Ñ,³Ì2Ë,³Ì2Ë,³Ì2Ë,³Ìz3KŠòuW±ù¬‡ë|ñ9Ð?`ÍËr¹®þâ6ëzaï!Y ²$6ÅÌ •ůWì”UßV]χ!”e»DÝ)_­Ä>¯­¨ow,Ô³æ:㊅³Ê½e}‰¤¨keoX%VÚÇáÜ[eaåMoá8¬ûÈ`Ÿ¬æÜg·Y»ŽŒy:.ñ}Àc x Êê–ý¼kB³Ì2Ë,³Ì2Ë,³Ì2Ë,³Ì2ë—X®þSGíd–Yf™e–Yf™e–Yf™e–Y{dIÓIc:IcG½uJ)é”Ne³#Ö)¥4öÉJfŠÕ]d̽•úŒŒÎXsÀ÷Æ:iìåšÐ,³Ì2Ë,³Ì2Ë,³Ì2Ë,³Ì2ëË«?=Í2Ë,³Ì2Ë,³Ì2Ë,³Ì2ë¯Û˜$õÈSÍ2Ë,GÆ×{Ë,³Ìrñd–Yf™e–Yf™e–Yf™e–Yf™õ»¬NWö×Ì2Ë,³ÌJ)™u˜ördî.ÐÖIEND®B`‚httpd-2.4.41/docs/manual/images/feather.gif0000644000000000000500000000711012657415644017030 0ustar rootsrcGIF89aøFæÊ!6Íqô”$ﬓl-ˆâd*‘Iäj(À @ÒYo­ UÜR-µµ¹ä™XR†ö™#ÚK.¯y­÷äç° Qø±Y¦¡»³‡¸Ä¡Ç{)~øØÉÕ:1Š%sãÈÛ®.cÌ"6ùÔ´ª[•ì’ZüæÐéx&åäëç†jòŽ$ãwfÚÚÜè«·ê¹Å¥ ]ûñóúÌ•óÉÌæ×çà^+Ç :èu'à >†&v×gx+(dƒ'xÙF/¾ Bçr'Ú¥óÕÜÖ?0ßX,Ó42Õ¼×» F¿“¼Ó­Êöò÷ÔN\Ú‚–© Yó•2ܳ· J´ M¡oªñ»·¹ H7‰² O¼ DÎ%5÷·q¾»Ïå§Ð-3Õ?@Å <–#j¾Mv„­É 7Å<[Ï(4ÞÉßõ¡C좘ó¹–ï†%({K+zon…âlG¸h—ïäï×B0“3{ýïä̯ϛ_ŸÍ/Dþøñ’’•Ž$pæn(€ƒëƒ8îÇÐùÁ|Ð=PŒ5€Ë Ây¡ßw‚¶#¶ìÙ…£ÜÎ͘÷’È¿+X¯% fBÏ•¾M®¼.óÒ ´ñ$ýª™ÕÕÉâ‚EÄ€ÅÜuçm᧘n¼¡—Þz®@Z„DPQg%'ÜgˆOp’Æ”¡¢ à`)×Õð1Ôx  z‡ƒ¶áö`y¦7A…q„ ¢!ÿ‡ô}"wrSaò‚¨¨e½¸ø")ÔÀŘcÖh#ŽÜéÈ£xˆýØX„¾ýF¤F‰ä hpØ!]Ë=iÀ D<~“\iˆPªyù%'¸à‚†¸P™4š‰`š òxnºí§sÖYg˜ÍÄ$T}>YeÌQ’Ò‰&Ê~’BoxàÀ[D ¸ HdšiঠvZ[ä½ù˜„r–jê $ñÇ «²jß“àên@BDÐZëàšk(ðák°ôû*ð0c¦Ë¢¹šàA릨½‘jm+$Œ B ça«!>ADˆB4r"ÿµ"j@»ïnƒ )4 ²¤ïÅ[o½dâÑÀ¥š2Û쎳éc¨æÅ©‘¦™ð }¬5ßÃß‚+('ò‚‡fl€„vL‰ ÔP„¯TWí|\æ'‹)3¶ìïËk:Hó¨âœóÎØæù3ŸAƒKñ!@`™15ít$Pa…^H!…Õ„S/]]fË9:ûì§×lój_Ëö Y¼íÄ̵ëâ¹L ]«x³7%Mðq…¬ÿ ¸à…@ˆ£¬¸²7rêl39íäsÒiùårxtTPZ !/\`€ÜÌ1ц£§?Æ?dߺë»Õ]«8ÿ¿¹ëó³2G+íyÀ¬óå ¿'Üdnú )=/÷ÆîVoI¼ÙûÁö×½ï/|ŸØ÷ô™ B¿3X忸…>üsÑÅ ¥Œøo8[G@ذjTà™Æ0¶él¬ÖßWÁ t$o…ø–n=…|ðlÈ@>0€"qapqфՑ°€'¤Z oÇ8ó•m<0,XÚ*”³#TpgyˆÀ4¨&Ô‡‡r«Ò !‚ ˆa!Aæƒ:úàŽ>X€õ”`€ßX÷:ïEñWáSá ­è©®}äâðØ‚$,X¢Á¥7§±áÿbˆãæp€RÎñ”u„ó¸Çô±8(AêYÈC"2‘_ÃËZØ BP‹2”$y¼G/ÐƒÛæš¸…(JNscê è@£$¥)OY€Tª­|%p@Îø­„†׊f4ŒyÝë_׸´8α‚íZiKÙÍ™þnx9=Þ!kMvMXDúKÈDRÕcIEÖ’?4ŒZ„¬­që\«[ìæµŒGûn3ãÍ;¦´Eíì|ë;ÂqNÖˆe‡cN» 5è‚’¯íT ÏTÜîvSñjŒ»:O·º3Îî¸ã7Ž´¤UÛãÖâ[Ù']_ÐŒ:¢³`3RTwá^œˆD@дWG¼:‰:£‰žq£'ôÑÁVúvEîôdCÝ (?Y,p4 Õ¤ÇËטÁ w}é{lon “x¥W°¥N¤G,îg‹ 9 "Ðw™þèv, |J÷’ƒIr5—ðš#ƒƒ³Ù"ð-0¸ ~¢½i~—™Q€Sba P$sœÃ"P›-`›¾G ˜é¸t p4HƒZXˆ7¸ÜŸƒÐFÇXŸöYŸòùC;httpd-2.4.41/docs/manual/images/mod_rewrite_fig2.gif0000644000000000000500000000477110147723030020632 0ustar rootsrcGIF87a}³¡¯ÿÿÿÿ,}³þœ©Ëí£œ´Ú‹³Þ¼û†âH–扦êʶî ÇòL×öçúÎ÷þ ‡Ä¢ñˆL*—̦ó J§ÔªõŠÍj·Ü®÷[ˆÇ8L.gΖ€;PS›Æ89†ž¶³èu9»óx¡'ñ†‘Ç‡Öø`8ù’·æ§F¸2)3¸Y’é¹x‘HªÈpiº`§šz×zÒiyð’I#+â º!W L iK‹iˆË‘¬Y,ˆêêÀ¶Œ¦Sk-}œz|†Ý]6=@fü˜v` !|­Ð~ÙîÏ*??®¯=ïPÏ^À{žiÓç.á»l ç%øgC!«~ö*úyH+£@þ^Æ Y¼h@ƒRþ!Ôˆ© I•¿É{ÆÎDá~£¹p¥G·¹Ä‡±šK– kZ¤¹Ó¦Âh=r 1RtêЩΗ<éÉ<’«ÖŽ›&EIÖ¡Éf*Z¦U©©Õlp@½kv€ÈOôf$«³'ݧ^9MºËР_˜ƒ‹j\1?·óAÅyõmPhxiî%¸2ç …{"uŒ•ÒaÀhG*ÌÓêÛØ²ûÔ¥ü1ïÙÜ)ŸDÉóóˆÀ)GGþ¹±îå0¶o}üuÞØao–<¹%ñ‡¸ë¡–HÔõ¾_m×fÏ~=Ö|®!Œ±ÔfZËC#³|Õqéó`þjÇòW0@`(€€"üwÅe úàƒ0hnòá…PXá{æá‡p(b‰+„hb$¦È" (¶ÁŠ0ÎØÁ‹46 ã:Z`㎠äècô(¤^E©‘B‰d“JÉd“G>éã^^‰e–ZnÉe—^~ f˜bŽIf™fn)%V¦Éf› ¬éfœlÂ)gGÒigž;â©gŸ0òég %*h¡jh¢ÜÅçÁLÄ Vy Øh`±8ʉ/ôaz)[(¨ˆ-kùbΔ^)D.©]%e£‘Š·¬¹”ÆLYT•:©©hºjZÌ"¬\.ŒúþÊ|µû•f®£ë¼NJ&1³Úgëžj»-XÊB‹-©¶´~±GAœÊ§Q’Fð«3‹.¤®y‰‰Õ¤ë~ºI@–…‡S_>éçÝO?‰ÖÇwæ"WÕ\ý¬ ­V­ˆ*5¬×—nEÑ7WqÃ2³g/a¦Ôe]Ý&_CÈeŸª"ïv–ª›Õ™G¸+Íu­7Ù΄Õçðǹ®R]}&KG²lóçÞݽv0mÕqÇtOåe!G»Xr·)×ò­Ä>·Ñ|È0–_o_ Ýln•,×ÔTm\ÝK5•ÖBÿV® œšjtÿ­4d§-ÍÜvÌF[c5Œv¾ ÓþÞÃHbrÌi?FùiÑÖÖ‚s/× ªÆI *uؽÃ.ÌYñ—nÉ€?Њé0˜ïy¨€—ÕêÜê±À+f°Û‹.L/çËjèíÎ'BD€†‚é¦íÂá ¢P¹§åˆ,a¡öðVo9Á‹ï÷:f~êßÈ~û_¼OcüòwAÿŒöß¿Eþ?ì{‚ýñ/ þóM À^¡€=8` ¨À*00EŒà&h"+iƒì ?Šð@äë•OÈD¡p…AP! _ÈÂp†Îb i8C’à†8|¡GÀà ц¦¢ýSDjáìˆL|`€¥&JÑ„âÒþ¯Ø” ‹\DÇâÕE?ýpA_DP5ÆÜ ƒglRAPÁ6Ê1*s¬#íˆÇ Ä1\Ü#A@½6ùñ-`#vd0HBžÈ|Ýê@"™CŽ „ä $y4rC–L&/TÉNº¨„¢,Â'UJ#œòA¡L% IéÊ ¬²m/he,kÄHDúj„¼ì¥/ Ì`.Ñ šÔ¥ oYÇ "“‰Ê\¦›éL!B3š8œ&5ghÍk¾0›Ú,‚&¿YLn9â›TyN5ÌLñ%cê´„Á¹xfÅ05LVªpUˆis—$d8É)€ BoõLÁ?»Ïpʳ<>‹UCþ º²œé˜ç#×<& ¶i,´Z¶îù­xv´9ø|–]"*-:*QLÖ²ØBÃ¥Œ„ Nœ½×Kµ6ҙΜÈK™O|ú¨œ¸KŸCÒHgGNž 4]ÅüçF–™ 碌“'O°ƒ& MMªL¥z««ŽN¡ˆ›ÎsnŠÕŽÕt¢ð2£Å‚uµÂ9èª]mêÅ:ˆ†ìg7ÙÍAÍ 3…úÔ®/Û¤€–Áe=ÀÑjÕì†Qsƒ}ó;À6µœ¬°:ÛÏ»¤ùUgiC2é8¢Å…±£+¨ÒÆòZ•ò pi]ÛáÌ…××– Ÿ£KW͆0·mÕª¶Ènþ…¶·Í³6r{¨çb{ë¹Áž VegSÖÖ±3t{Ul\q«±ì‚ޏEkgɺ¹Ì& ½KE/hs{·Cs€ Kzý¶Öñ^‡»¤…ïÒ¤Û ÅÌ:¬eëb'`rEç§ãÙn*ÛÜîQHÝjbCº¼ö踯¨X-¬TÃ)ؽåNU÷¨ç©Ø–€pm¡¬(HïÍ×›½ß,$Ýï)Á½/¼q¤ËHóFÐÇ``q7·Ë#×€È_0²’‡”ä'Ë€É^p²”µå+¿€Ê]°²–¡˜å/³€Ë\𲘠@æ-˜ùÌiÖšÅÜæ,¼ùËq–óŠïŒç<ëÙye¦Ÿÿüþ¥3gÉ‚^!Å mè/"…‡^´íhB:Òü›4¥ågéK£/ÓšÖ§;¨OƒºP¢uŠmjñ•:ÕzZ5«íäêWË)Ö²ók}jBã:×ã £ciÔ¥žÔ€ÎÁª+%Qo¥ÉÂÈ=*L?ç4ÓàØ»§°=›ª”RÁª¦¯‹ó:ÉnßQ×Z´hoÁ•Ñ;tȹÊ@÷³kLÏê¦+¦‡Í*yWµZn¹„ûS² Üq¾«X-UÚ€suáe»¶ Ì­\ÀÖÄÃ^…°R ·fûîZM{î=ŸwOêë?Ô—¾§§küä+ùÌo¾óŸýèKúÔ¯þ— ;httpd-2.4.41/docs/manual/images/syntax_rewriterule.png0000644000000000000500000015016711577356155021424 0ustar rootsrc‰PNG  IHDRò>ùÙH’iCCPICC ProfilexíZgT]“¾Ý!ç<ä QÉCÎ9Kr’ "H%¨HA%*" $DDA‚˜@AD €¶Á×ýÎîžï×Ïéî§«ê†éêî[SO vÎ=44G„Yêi퉸W¸+°»gx¨¦¹¹1bòo¶Ï´£‘Üéëßý;1}2 9bÀäó{í`ß8fGG„F 6Y;ØÓ×ÑC¥–³¶$!ø x‚Ï.¦x¹ƒ=v1ýôvwó€ý+bOtw÷A0Ýo챃evp”§Ò?2,C°—_0"BÆÀª{‘Ã=¾„Øxy…{ ‚Ö Aôb;÷DÔ34 i+†ì@pçÞ!gds_@¹Ì‹É‚P»ã¿d"ÈÜöÐ@ú—lÉr÷~B,Oý÷íÝí"h!}½ÝÞ^—Àæ™íí_åÛÛ› ÆèôŒ ‹ÚµèPZÀØ¢@ìŠ@h`Ì€5p.Àø‚ ¢A Àep |n‡ûàgðü ^†·Q”(fµ¥ˆÒB™ PdT(*u•‡*EÕ¢ZPQ跨ϨU4MæAK •Ѻhk´;:Î@ŸCW¢o ;ÑCè ô"zC…áÀˆb1z[ IÅäb*0M˜˜Ì{Ì…e bå±:X[¬6›Ž-ÂÖ`ïb°“Øï8Ž'‚SÆã\p¡¸ÜY\®7€{‡[Æãñœxi¼ÞïOÀçà+ñwðø÷øŸ >  # 7ŠHŠ ŠRŠ›)&)~P(ù)•)Í(É”ñ”9”W);(_P.Ra¨¸©ä¨Œ¨<©SåRÕP= £Z"‚5‚-!˜pœPF¸C!,Pc©‰Ô*ÔÖÔÁÔ'¨Ë©Û¨_P£!ЈÐhѤ‰¡É¥©£é£™¡…iyhUhmiÃhOÑÖÐöÒNÓAt²%²/öÒîÕß{tïí½ßö‰ïóÜwaߨ­œ¾\²\›ÜyyùËò  6 Ù ±ŠZŠ Š-Š+J²JAJÕJ3ÊÊnÊ•_«°ªX«ä¨pbtòtjtF9[9W8/Ô>˜pÆEÑ%Ý嵫„k‚ë ¿[„[;»{ {»ƒ٣œàéæyà ïåìÕ@ÆÉuÞhoï:´£O½/Ö×Ù·ÑÂÏÕï–?µ¿—[c@@Àƒ@ÎÀðÀÇAAñA£ÁRÁǃ'CTBrCBõBËB²=TFæv?œ+<&|$B:"3âc$)²4r#Ê!êV4cthô@Ìž˜ô˜±:±qpœ[\ûažÃGÇï?ÿëˆÓ‘Ö΄ø„ñDµÄâÄí£nG;“’Ž%}L6H®I¡I MIUH-LÝ8ævìAšHZfÚ—ãÖÇoŸà>‘tb&Ý8½!ƒ%#>c*S?ózSÖᬩ“ú'ëN±žJ8õá´Éé›ÙÜÙDzÏØžiÏÍ9“³žë•ÛŸ§˜W–O•™?yÖðìÍbAfÁÏsç U +‹ŠŠ>Ÿ·;ßuAöBÉEÂÅØ‹‹mŠ”È–”–Ò–)/s*{\®R^]ÁQ‘Q±~ÉÿÒØeãËm•R•%Wè®$_Y®"W½¼jxµ­Zºº¼†¹æDͯÚÚ÷×l¯=¾~àzShÝÅzúúãõ ‡>6li2hj¿¡pãÚMÁ›ço1ÜJo†šc›¿Ýö»ý®Å±eøŽÑ®VõÖæ6™¶ê»‚w‹ï±ßËm§iOï@w$v¬ßºÿ­3¨sî÷ƒ©.×®ñ‡Ÿw[uõ˜ö<é5ì}ôHïQwŸN_×cÒãÎ'ZOî÷kößÐè|Jzú`P{°{Ho¨wØpøÉˆéÈà3«gÏGíGÇž»<ŸzA~1÷2èå·W‘¯Ö_'Ž¡ÆNŒÓŒç¾aSüVðmõ„ìDó¤úäÃwÆïF¦§¦Þû¿ÿ>÷þ9Ã8sá£ÐǺY¥ÙÎ9ã¹çŸÜ>}úùy{>ce¡lQbñöí/ƒ_¿Î}‹ü?½ÄµT½¬¸üpÅjåÝ[?³V9W«×”×­;¬ÏþŠÙÀonŠmÞÙ2Úßþ üþÆc¿±ÀßXào,ð7ø›ø›ø›ø›ø›ø›ø›øÿ›usßPÈööàû¨`€ õ¿ÕÿæQ~G…B;Ä á!„ÖáÂ(,BŠP:4;ÁïQ'Ð:n¬<Îÿ˜Ò‡ @#A»E?̘ìÅòž-”ý=§W9÷"¯(Ñ/—ÿ¾ÀW!^a‘(Ñb±^ño¬’¤¥ dzd·÷©Ê–oQXRR¶T‰W-E2™ê¬š Z6¤(íó:­ºÃzSú_ V 7‘Œã¶É¶é¶9d±¤±â°–µ1´õµ;a_åÐëøÎiÉyãà†Ë’ë;··îëž<^úäHïË>/üþšáåAýÁc!í¡ù‡"Â\Â-#L#­¢FûÇÄÆ¦Æe.ޝ=r3¡5±íèí¤ÆäÚ”ÊÔ²cei%ÇKNœOÏËÈÈ<šu2è”ßi¿ìÀ3á9Q¹ayAùžgm ôÎ)Šqžg¸@¸ˆ¾¸RÛÇúOäûyð_Ÿ¾l*>:âüLi”qtñùÀ‹ú—ç^}í5FçÿùfèmÕDê¤ç;½)©÷ HÎêɇò™ð¤YÆÙ÷sÍŸN7[à^x¶ô|IûÊñuâÛÒ÷•¥üe™åî¿ì?>ÿ\ZsûÕ¹½½ëàòÀ$ƒ[`Ò€ Îç0Š€jFÆ8bp)È G5FIkNÏÍ0ÇTÆ¢Ï:ÌnÈQŹÀÍË#ΫHTç3à?(.xZ¨Vø‘Èg1&ñý{|%²%ïI}–a“%í ÜwV®C~Z‘RIJÙPÅG5a¶Z¹z’½î×|®5Iz¯ýQgVwyÆ † {Œî7šTš™e™'ZDZÆZ¥XgÙäÙ^°+·¯t¨r¬vªv®>Xër͵Îí†{‹G§g¿×kòœ÷†/ÊwÕïƒÿPÀÝÀš óÁ'CBòEžû«H‹(óhË»X×8ïÃñþGlÔE2%a“Ö’S>¦¾;6ž6z|àÄ£ô®Œ;™Y•'ÏJ?•~& ‡œ{0Ï*_ï¬rØ9–B¸p¾hô|Û…²‹iÅþ%Æ¥Òe¬å”T—¨/ÓU2\aªbºÊXÍPÃPKî:Mu=Ue#¾ }cõæ‡[CÍ·›Z*ï\h-hË¿›ï\{IGÕýºÎ»zºF~èžï™é4Ò÷ìñè“Wýofž. . ­ /,<›yÞþ¢üeÆ«ü××ÇzÆ_¿ùôvybuò×»ŸS ï'¦>´Ì”Ìœ=4g÷I÷³öü©EöÅÍ/S_ï»ô=c)|™¼BþóóÒêÊzîÆÌ®ÿa€ô€ä€ 9à.òC˜Áf˜§¢0¨:tÆ냫Âÿ¢4¡:MxBÓ Ò©Óë2è1j0ícæ`ÞdyÇz-Ý›C“’s’«…;Ÿ'Œ×œ(ÍGÍ÷‰ÿ¡@™`Œ0»ð´Hh¬˜–8…øðž‹’jRtR¤›eReîäé¾,„-Ù–oVQU|¯T¦ì©"©²¡:¸ÿŠZ¢ºýÉ[4Oi™’ФÇÚå:ɺd=#ý½œ†Ã£ã[&ù¦¾fTfõæv–‰VºÖtÖomjlcìtíÙíçî:f9Ù9g6¸Ä»ê¹±¸Í¸ßòHõ4óbóš _ñöQñÅû¾ò«ñ? H8Tì"ò%ôî¡SažáòPDoäÉ(“hÊèXõØÍ¸ŽÃÇã=ŽDiW޾NjMÎMñL?†:ö-íãñ©“é““™Yc'Ÿj?•­˜={¦,Ç+W67žß|6§ ôœM¡JwÑæù± ·.æ*1/ÝWÆV¶]>SñäRãåÂÊÔ+‘UþW½«}jük®\ª;T×Ùx©©ûÆâ-¦fùÛ-Þw¢[ÓÚ î^½×Þþºc»Sê{×¹‡ƒ=¨^ÙGv}á=ù2pgðöðÚhñËG㯦4çZW¤wüÿ›OßY° Ìà„ðìÖç8e‹ðéE°R`NÈ”ì, `>=éðüçúÁ”€%ð‰à ¨7@S½…pÏœ´2E¸æèT Ý€ž « óÂê°+œ WÁOáU?Ê a†kPchj´&: ]‹žÆð`0y˜!,-Ö›‰íÃQà qY¸!<;Þ_‡ß¢0£¨ X£´ ¬AXWwª{NBá µ.u# ‘&—–‚6™v›îÝ&}`HbD1&1ALG™s2 †%‹•õ*›Û{‡Ç(§ç×)n>î&}ž1ÞP"ŽXƧÆ÷†ÿ¨€© ’‡Ð²pH¾¨‹˜°Ø¢xóžc6’‚’?¤ú¥¯ÊdÊFìõØg%§+¯ª ¥(¨Ä©Ì¦Â¡Ê¿_RMUÝà€µ†‹¦V0éˆv¾Nƒîs}` kH6:gÜg²n&fN¶¨³ÖŽ6mvÂöÙëNnÎÝ.Ì®.n—Ýç=¼Ž“'|Œ|{ýžI'„ â ïˆd‰Šˆ~«7ß’yT'i1%íKZù ™ôŽL묧R²÷œ™È-É,P/d.úzáiñýÒæòÖK*ŸV WÔö]ïªÖ¸p“µ™ÔÕZz÷~û«û«]"ݾ½mú³ž®»>»óüÇ+×q•‰Ž÷·fügÍ?y,<ú¶|ó§óZø/ú ÷MÉÍÕ­ŒmìvÊî÷ƒhƒ œD¼ß úÀäû zˆ’Cj ì ?¤Âà4t jAj æ`â{5ØñýUø ‹RB ŠQÃhz?:ñü‡ðYcS‹†$®­£ã«›­×¦ÿÅÎHÍØÇäœi¿9¥…å«762¶ivÓúŽ×9žtÙtós¿é‰ñ²F¾?¾¶~7˜£ƒÞ„h‡6„ñ†Ÿ‰DEÅE ˆ[Š?°7q )0…"µ"Mùø“t—Œ…¬¸S¸Ó…gørnäiåør½¹PRlQŠ)k®ð¿ÌQÙ_•V­SKwmº®³¡±éÚÍöæî–°Vá¶±{;<;»Ønõ,?Z{B5 8h:|øYýó…Wc*ot&¢Þ5Ncfœg~\Hø2ü½ÌúƒòçÐZÈúÄË&vóÍÖE$PÛ‰”‘ •<佟¿³ o< r†¢¡\¨†Vº]8®€_¢èP†¨tT?š킾Š^Á ŽXlvg„«GÞíãø5ŠŠ9¤®bŠÊj‚àFøHCCCSKkA»IwÞ™¡1–I˜iˆ9E’eе˜Ì®ÌÁÅñ‘ó —·÷,O oQ™Ç7Î[ࣳ°œˆ¾¨…˜½¸Ë‰Éd©3ÒWdºeö±Ééȇ++ö+uÕ”ýêÜ|55×IúÚ•º”zÑú³†ŽF=&2¦yH<šlEk]mke;4:¹D¹$»®»{¼ór"û„ûñú š ±½&^I•Åfö>r9±#é^Ê¥cGŽ[¤‹d¬gµŸÊÌvÏÑÌ?Ër~:ÿôb}I~Ù‘ŠÀËW´®«Öv]Ϫ·nlúy³·¹ Å½•»mð^l×ýΡ…»g{oôe<ñPdú8rk4ö…ôËÉ×§ÇUßÌM”¼sz/8½635;ñ‰ô9~¾l¡e±óKûתo™ßm–Ø––£VxWê~(ÿèú©ñ³n•wõÔêÒšáZùÚÚºùú¥õé_‚¿È¿.ÿšÙÞðÞ8³qwcv“qóÀ¦ÿfþæýÍù-¶-ý­Ä­[[óÛÛŽÛg¶{wüÿ»kgý”¤À0¢1I{÷òÿî‰Ôyín È‘hºSÛÅ‚ì³^îÚFÈ™ Ù·Bwëàˆƒlc…Èv°D°‡©Ù?XÝ;L×ÁH[È<4Bk³!Ø;4ÂÜúyBœ/ÉÁDžG×ùÓO©¿»!²6DÞiiƒ`Aw„GYé ˜ÁÓq¾ÖvÿØ,{‘µÿ‘ð·Ÿ®Áo˜Á/Â`g,&ä@ˆÑα``„D`d‰T|‘A0Rf H@ûŸ£$ðîˆ& Ñ…ƒ0ƒà ¤EÒ&ÁÄìHÿC¢»ÛÎi÷_{$"õe!ÈhÆü=óOŸ~À ÁäîÈ;ºÙ…»ú%ÿkÌ?;ýíÎF¦FfNfãÏœÐÂè½hy´Z ­ŽVD4 šH¢åÐJÈz­Šè”.˜Fzöù3Çþƒ½£Î…ĪØú"ÚßîñG lw­ýþóúÌø Ì7Ïÿ™R?¹[ˆÜi€EütÁwuÒ#®üo[9f§VBBcÃü||#ˆšHÕ$Y‚hì)%AÜ+#£ þ Úõû{§ pHYs  šœ IDATxì] \MÙ/m/-R$*;É:SÒ­†AaÐX"3–dß—$$‘}'Ûè/[„aló²M$)d‰ìi¤]‹¢ÿ÷ÞóºÝÞÒBÍ´œóáuîïþÎïœó½ïýsÎ÷ sss4Q(Š@eA@©W¯^eéíE€"@¨Ò¼~ýZ©J@;O P*Ô­WºKJ;D Tm¨[¯Úןöž"@¨tP·^é.)íE€"Pµ n½j_Ú{ŠE Ò!@Ýz¥»¤´CŠ@ÕF€ºõª}ýiï)J‡uë•î’ÒQ(UêÖ«öõ§½§P*Ô­WºKJ;D Tm¨[¯Úןöž"@¨tP·^é.)íE€"Pµ n½j_Ú{ŠE Ò!@Ýz¥»¤´CŠ@ÕF€ºõª}ýiï)J‡uë•î’ÒQ(UêÖ«öõ§½§P*Ô­WºKJ;D Tm¨[¯Úןöž"@¨tP·^é.)íE€"Pµ n½j_Ú{ŠE Ò!@Ýz¥»¤´CŠ@ÕF€ºõª}ýiï)J‡uë•î’ÒQ(UêÖ«öõ§½§P*Ô­WºKJ;D Tm¨[¯Ú׿\ö^‰Må²i£QÀ¯b4”¶²l —¿lpýw­ªªªêèèàóß­¶ôkCÄ!!Ñlrqq*ý ÊØ¢±±qHHˆƒÃ€2®G¾ùŸœ^³):ú1uìò1ªRêÖ+öu‰DCBž?‰O±X|óÁ—a´W¡ÏŸ¿‰º³fÍ´ßʪuI{aP§ñküÏøúúÖ©S§¤Ö¾@ÿ‡>}àÙ/ùe…„ð›Mò¸I89÷öv|ïÞÁƒ³UgAh‘JƒuëùR …מ;wB•““óþýû¾?þ˜Èjôîý_³,ò!AA¸¿Î™³Lb\I©%î3fÍ‹ãÖÑÚ“'O²MÍNHxŸ‘‘ÃI®Ì½Íظ²rqÛ›’šZ\UªWI n½_ØN=z õ"®/Ÿ={Ô$#,èxR32P:=ù”JRšRg‹y#²vºüü3Šgg(܈lA)ýÔøxH44òann«1hÐORš8,Òšl‘H>Îa´s>–SHNÕyW!ï¯àìñãlIu“¯½ÅÊ©NN£¨¨2 @Ýz¾Š7ƒ™‡ýéÓàQëÆÑãÇÓÓ?¹º»# ¼yóf|ZZ¶ÇÙi3f‰;{ ùš®Û¼aܘ˜wwIÐÃÛÛ{ãÚµ(âåµùÍ›7ã5 }ðšÐ‹O#¬¹®ž¢ ¤"[ÛÎÀ!„zzz¤ ÿ³mÛ¶Ùê`G,þ‹è hÏffÐ<~ü4ŠC_ŠÉ …3fÌ M}ýú¥ƒƒƒ´‚âã$6.qø°˜¯biiù”m lÂ2NMʃ( g‰2BÛšššÈs=E×llmÑ`¶ã›¬­­_ÂÄë¨Ysæä ™Ñ:º]ÆŠ. ┤SÊÊ›ò0 â_;F·`Ò‘„Ô2_½z‰3ä""àngÇÜÑÉ!jñõ]_°ïHAu˜Æ•"çiÓle@€ºõ |_<}ʶ^¿s¸Hx"Œò–M˜àë{ð ŸŸ¹M¿~ýllÚÞ½Ë|ìÛ×ÂÒ²_¿î¿ÿþû‘#GºØØhkë?>+-ÍÕÕ5S pvžÐ¶mh" ý†õƒ))qÈ_¾ü7„ÍLM·½qáÜb¾ffmŸ<9ybBÂÙ³gÙŠl¢£_Aòwp0!LL|C~úÅÉéôéÓ÷C.4lØácC³–wîÜÁÝ"))éÂ… hRTTThhh\\¿ ò×®MŸ>1w_¦¤¯]»ÖÒ²”ÿ{ÔèdmmÎÞöüýOq N..ÇŽÛ²fºƒîOŸ>7£ãþþ,DýàKïÞ½ eC6´½` òèéÑ£GÑ5??¿°7jÔ­‹ðJ¿~ý5û\ yãúõZ¬sÐOHHb¤Æàà`t锲ò×/û÷ëŒî7oÞ\ݸ®]:D-ï3ot/î>|ÂÈÈk9ì°ÿÌ©S­--Ñf##}Èøû˜(OsŠ«2iRG+«éÓÇÓ53y°Wž¿Ô­Wàk™‘–Ö½{wö÷ŽßvKø)Œ¤É0öÙ³g?˜›£o))ɈÒ"ƒÈ{޶¶µu„­´eÆ~Aÿþýæ°cÌil ·cGfñ‰¿¿ÿ2v-Êòå«G‚°U‡ø¼|ùæåPü!3-Y›ñ¹¹˜áÜä燳7º+++š>}äÈJErE¢^^Á»‡#nލ·­•Jù¡mÌžŒÄáôéS‘‡ùü$¶d\s*îŒ;§ÌÍ[æ+Èä\\¦a aò¡ƒ###0ŸŒ²D+WUÕÃÍ-2ò¯Õ«×¢;¨ݱ²ê“˜ßµS'èÕ  Ÿ;‡ŽŽN¤§Q11‘‘§ ûÐPvÍIttx½zõÇO›·6H²…©Õyxx°±òD A:5kéR- M›è~ZZÚ^½ ¹`ÁD¦@~ÒÅÆÑ/cbÚ°w[[GròáÇÛàQÅl77¦¦Ê_úRHug÷íÃ}42ò¶ÔeâŒÓLÅE /þXq{Pµ[Žßy}##Ëöí=—.ÅìÀÀ0ÖÔ´ž‡ÇÚ„·oã£Í›`Tz»¡©i}ÁÓgψ?<Œllföê3¾F ÏW’Cu6ÀÂÚõõ½ü矉‰‰ˆ½àÎÑ„ ¤e|.›3§§½½™Ù/_¾\³f‰X|ž;ÅeºÛØàÛ˜›+‘ÅÆÄÀ„–À@U5÷ãG¡ +ÖÐÐ|ÿžu†\Idrs-š7Ç_ˆ1Ò_îîÎ?)7ŸššŠa,F÷8;iÒþ}¢KçÎh‰™Ùw...P`»#¨]»6ð‹7Õ6ÕÓ«þ>!}P¿~¬qÝï¿7 _´mÛØî]Iuš*L{SS™U7øûã2l¸†(0Ÿ’¹2î Ä{:82ÚÃcî»ééévìtB·nL”ŒŸÞ½{7ÅÍ LI¹‹ûÿÔ?/%W«e3]K‹€ÇWdò…T‡UCëÕ“.@+t´^/£öÍÍEÔâG[[ø»;ì€ÔÙÙ™=Ú·oy Ã|º»OÄý¬± 1*ê1B>ùS¾N~^I Cu¤{÷î¡R Ø÷ìØˆ–““Ô]*qëÖ­ß² kk·ööž—o¡D¹âVW"£T¹ @Gëà")jâØ+:ð™3gQ@d£ç?<{þ\=¯ÀíÐPø¿ºÚm0,í …1{Þ™ÿæî>ÓÙ90ð¸ùÈ nk6iÒϪ@ d‘·71zúô±† ›cô-U ØÛw÷õ=*9%1£þÌ~‘ÖçGØäá“'Ê‚ð€òYG'–Øðu¤òŒ éäÔñõëú娨óõêu$:ñ11ÈøølC4IªO¬ÁZq¯µ9åAý{`˜ ñ ‚øù­ã5d -ùüq-AÎŽ[I¬\AftŸžœ<`ðà€ƒ'‹Åòo– ,°ââVW˜ z®""@GëñªIÚ ÷äè8‹?á&ÌfŸÉ \Àt4Wvss›6m¡lW³³?áG¶7Í(bC|ý¡ÎÎ8œ0a<ñkÆÌó{çã09Ħ!–l/óñãúûï<ÇÍ3qé3Åje%Ya‚¼nÍšìB‘8þ=€k¯¨à»0 <Ÿ¹©¡!>¹Öò5‘Ïa¹³Ý›7g%õ¹å"_¼gçiþpeݽ½­­™ˆ f,¼hÊ‚Ä7˜ÙæužžøDÖ®ý§OîR©©žr¤…B!J!q@!K®®ˆÅK’HS3$äŒä@¢'«àɤŞ=ûùW9¯(óW™½RRÍà.MaÕ)+c™™‰á¤ùJ€uëþ"†‡c º‚§U›6aŒ:xðt®W`„ˆñÑ£pB,nkdd„Ã~èL„Øõ‚ŽŽ¿`Î’»ìÒI7·X]ƒ|¼g·n:;ÏùÌÞ€vm‰nûö–sqñrs³¶ µM^^ˆ‹{»s‹¯!GÂðs7³ »®»ûlæXIéø•+øÛ«×8|¢^®I²+¬c_¿†Ž ³5Mºxž‰ÝÛÛ÷'‹,‘ç¢R3ØyNî,Üôˆ‘#¡`c3Ð×w7 aƒ3êÏŸßtxy{;;¾u‹qâHÛØcŸ]ÄÍìÙÃÞ^¾}›¿>Ǽukh5gâ`y‰ÍÌZIöùók7­å˽Q –Ng. `Ĥ( Bx/*Ь5ÂåCT½Ï1Àº.LZxSxx(:áµ `—+ˆ f'E0O€CÈqu¾c¢7ºmÚ0+D ©nؘ1ŽŽŽk×.#ñ:(ÓTiæææbUiúS¥:â'‹RR´µµyÁîÌ^½~Žˆˆàã°. @7í±“Ó\‰P(|C‚¼ ¦üMçÎ#$sƒ˜£»Ù¢…üþçÏótÞµÿ¾“5–” >̾‰¿>qb½=+O¬W¯•½“ÓVf¹ “Ö¬qÅ’ç>áÎHAV’Ó¿ÿ L àÞp/&†õhŒ˜´+Âd„Â3×®aY+Lµi×õÎíü8黢êÚ´m{æôi,L22jÇHj¡Ÿì¡ n½B_AIã1ÔUWWǤ"Y–W K¬ÇìÌóPÎzçŽõØÔN´0TTSSËÊÊ‚TŠ ÉjFú$ì`ý‰üÖJë8F{pÌ‘  \Û èû€ô-ál»h ÑNT$UúR­ZµÌÌLŒ«J`+OU Š<±Â¿r«ûzÖGOüwÀ­Ó ÌéÕ ï†EÐ|ŸŽ`"§øÝŽž>=6ò7ê,QðD|¿ Ž*8?ŽS\¾DfQJªµÅ,Žö qÊü¶qÂeHø6KT¼˜Êh§lÌ/óé¨Å‘ŠÙ¢/[Ý×XüPÍ2£óoÖHëú7hýÝwˆœ"aö¬I“æÿF•´ŠE | @Gëåã:”v+†…a’$ìææ22ØIÓÒ®‚Ú£PÊ'4¶^>¯ mE€"@øhlýKP£e(Š@yF€aÊóÕ¡m£P(%F€ºõCF P(òŒuëåùêжQ(#@Ýz‰!£(Š@yF€ºõò|uhÛ(Š@‰ n½ÄÑŠE <#@Ýzy¾:´mŠE ÄP·^bÈhŠE€"Pž n½<_Ú6ŠE€"Pb¨[/1d´E€"@(ÏP·^ž¯mE€"@(1Ô­—2Z€"@ ”g¨[/ÏW‡¶"@ ”êÖK -@ PÊ3Ô­—ç«CÛF PJŒuë%†Œ P(åêÖËóÕ¡m£P(%F€ºõCF P(òŒuëåùêжQJ¡POOÏØØXUUõ Ì»¯ ø²²²Õôôõ9ôÚçÐ=%ê{dÑ)%‰r)Ù¡f(òˆ@{;»ÑŽÛ2’¢_¿‹jÒÔ&-.lÎô¾99…6U(©«gdd%ÓÞõL¬ŒŒ Ÿ={Yh±bÜãæ”0ŽwÇ¡ÅÒ¦J_„½c~l´E " `1Ð>ÝoÓ/S­Vº991þh`±yß ¡°°Ö7rܺ=¹ÑôµÝ÷l\*>ÔzáÐv@¥°Ðs_‡uë_‡-M(·…C­ÍH º"iãçÏ›¼z uûôéVH«3Sß Ÿ?KT>~üx-(¨ý’žªVÒT¿„Ð L £ê ‚@­† 5‚›!Gùí}}ÿþG {çÇIÙ£WâTTäéö‘ùÓoÜÉ“'[ÛÚŽ´‡+6ˆÓ³âžØ5‘ÎòÙ]Þ¾ƒü—YÞÝ,‘I‹‹p›ósFFfÿ)î–­3SÞ„Ü>õ3[öÈΑb±:ššš“¼Ž500CþüáiþGü‘á'Úµç¯:¿ÓsÀ£GøršÿÊãh]IIIÈ&’ùšîI•ÕÕÓ{µâeÔ cãšR§ŠyÈoÉ㳘eËDM(Üá;ÙÔÔ°LŒS£FVÖh¾ørÞPô%''Y Õ0~tþÖaíÆ)¯Žltä¬gÇm¶¶ïŠÃü‚Ì5^ý݃šÿŸKEjÚ**Ìt먕Ý,º¹ ©çüK½¨¬Œu{Âðõ?¶aÉ«¬”ºMmꨊ& oxãqàÀÑkIœgÒ®¨jPÞâ7®û •Ê2ÃÈÆ»ë¨Õ´¶lS‘‘.wm—ù¿n!<ïíà9¤±ñ©†úZA¶ãèÿE}}Óß¿ïb³ñJà¤/3ÕÍÖö÷M¶¤ì£WIZª†ú8ìd³4:?–ÿ Õ40øÑÊ(Ú¡©‡GìP=­²Ü#žž)ÕÆ¸¸ÈZ†pÇA‡÷ôï:æp€n®@üûÖï{ºõ8^,¾ý:R`‘÷r¤7n˜Ñ¹@UGÇÒÄêÈΡ$>³õóõáíCCo„Þ:ÑÊ@è»ßjcî´oÚnÅÿÜ48ûÝ;EŒeCCãèèh&›—n>°àòùþù'O@ÿ–ÿéHS^ûáyMZ»á›èîuÀêû%õ[º¾¨øí¥§Ç8ЯOÑ11i_jå‚XljîEh›­­—Õ÷‹È¡@ðŸE Þ¾4üÐʕ׿´O´\¥E !úúfbRðIN(ll`–‘t®YYó–*Üôé?q‘ÅspprîË­*bœóÝ»‰NZ|<â9 Lêâ?<ÌL‰çŒ<¹u뇓6ÿïNÛɦ§ËùñQŸÎÁUZ™rçÖÑ1av6\§†;Wž“³`A(„êü>#HÃ?,Qžÿ,QA(g|ø€[ޤm8LK[³ïAzzvIí(Ò—íW‘’ÐÐðŒŒ,¾AÙ"ü³4_Ex|íÜî/ŽSøý­Ý¼9|ó­Ë\À=› É¡£ª¦…uœ2'Ï“ääf3ßóÖ­M‰¤ºŽâ2/^)^õ¨¤´lWT­¬÷F´YäÚ_ HMHH̳–ÿWøß†1óRyr_ãâþ%Ú˜°5}"õÙÚÚîd#!±ño~èºéãÇ’ÒÖß§õ²‚Ú§K!ÑuëÖØ¹óæ¤Éæ:ª]l¼ã³”®ž›¦,¨¶fý1ÿ©F»¹ÿúë°@!ìÞÃwç „GÿšWW£Zøí—ÆÍ¶5Qoc鑜,YÀË••øq%%ñ¹‘¶¶»!_äíÒº‰º¶¶’½ý–߯ê×ÓèÑ£§±i5:«§¥‘õäS+ƒôô”®?mzû6i®ûèîÖµSRþ LŸ;µÝòuǶn½¦££sæÒÜzeÛ;øDD¼ÂÝZè3÷³ØøGVßï”–tÚuâ¯yµ5T¹®a†êtÐüúŒÁ†íçW¯>§­£ó×éÉÕ5”·l¿é<õ{]ÌŒ†O˜pˆë ÍTZrr¶î9eô‡ü ›ê"‘ëâó9Y}÷s_-##&0¢olÜ¢†ñ‘ó¡–™š 0òׯ_þüY‰Ô jÖ¬ýàQRôÀÑKÄâ ±4ž:,ì6òÕµõ•Õô‘ÉK*ðÕ"]ÜBî<¼aßQÓa³fM½÷ïß×0`~ÑÊʹ? ›uí:cœß±ßÏž½˜W–þýZÊãhô©V-mŒ:íìzïW×¾ó$xmai¹sS—¦­gÕo>û^ºNÄufÿ·i£zYi60ÝÂry«6œ=|ø¯Ñ£´5DV ÓÒúÚo©¥¯¡§§&…V§ac†µhÚb¶I»…íZ™Žñ Âcûèêkõ±iàwѹÁ{{ó¶mÛ<ºj73ÑÉÌ̈x”h¤Ÿ6iÒáåówUÓ×2Ô×™3Ç·ik·—éª×/ωT–/Ùõ2EhѪٓ'Ï_ NަøŽ‡†ÎŸ3yú5|â¥þE"5×Ó#®\‚¤µåRC}fŽWZ’›ûë`Ÿü®)+‡‡»cŠ4o·pìØî›7Û§$'/X(&mô]»…³÷±1ÿâc)éa9G R,^éÕ«Ë  >‡^.÷ Y¿çIL˜ï„ÝùÍv[‚mŸKW…„…¿>S.^Ä ò­nV¯Q§ ïzVOOwõ„NÑIª>‡žÂZÿ®ã]Ç`N[;»_ºÂk7öô\ßÎÚú·¾^¸ƒlÞw;=!áiRtÇí°ßPµ:G^[î˜4mêêz ÷FpÜ"5éß&¿…4_RÊéh{£†uuö#Ú7qæž“'#IÇÆ-ý)==ÑÀÀ‡ˆµkha!JÇžucã_ã™1=9™}ÆËÄãaTÆcƭ蠟XsAÇÿœ•ñßK}f AB+Pf£ç'|}oùûŸâöÚ±%ò?ÔÔ îÃþü¹kGG·GÞôLNkñͨ¢Ïâ354^½}ËDîµúAèü‘#¿Ùº5ôø‰çß7Ò‹¯]lyãÓ§œûØaLž•¥Ö¨Q#ò74¬iTWÍÖªû•+Μ ÿ¶ã.X•ð»Ö˜ƒºàÓòågÇÊÌÈXºîþ’©&)¿{W °íú“úâø%K:æwƒæ*;O""ÆÿRÏyÕªUËÌÌÌåÅVØçßÌ ÃšƒOŸ>q§>¦¥l„åhøãŠóAòt¶RVVÆïëÙ‰<âäIç“'9ç |ý¬2¾áLµÂ¹Ä&ÆpÊ.^ÿ· jç$4óõ”ÓÑ:žúf-8иÅ\¸ãM««ª²SòAs“êÉé¹ß}gÚ­[ëã;‚'ÎçÓå*ð…äÎHؤ>W©ä‹t}¥RË—a¢Ÿ?Û°ë#®OoñÍZX‰ŽÏüF#Óß_Ì·øìÕ«Æ©]_³f7o8"€“c4ssñ‡ïµ‰|cÀ|ûVÊ[ÎEÆí¨y¾qyÖSþŒx7~á[cx®¤ä:µÑ¥8×!.<“³ä±Z5„妜 8ÛOë×ãÈ:˜T˾™‡pùôéƒ'ýÑßÿ^»võ JnDǤpÕ5p5«©¨0!K£#ß úéqgù ,|ÍW1°íhâè=èôƽoNù–l5ªbTÚî–ÇѺfõêX’¥/˜ÌY°îž††¡¯ïP\„ëïhhÔ·µm‰<ž+ïG­ÐÔT×ÕÑÁŒ¨M uÇëÛ¶mcær±q»±c; ÛËΣøúõ1z•È[·fV}éÕQ‹ Ojjj þb~ž)•—HÛÌ̘9’–nœö!=Õ=Xî8`½“Óê{韮Nåv^°8”§¸ŽFd×®›Èëê#î=€’$>y ùÐ!'m\á;wÄ«Qý¬­›¤¥¥yxì„×OIÉ‘Hž‚IkïÅò•Q£Ø‹P8ߵݥ;xŒ†§G5**ì(¾Z5øþ¦Mù³[y «wÅbCÈ?êÓ+Ù•⹬^½zå§WüíHa÷î à‡¶»êñ-» äÛŽÞ.ŒÖ„4ØÞaVŒÔ©SçúåéééðqÕ4ØE Ž£·=qóž0¦_}h†ÝûÇ¢Umdf¹ŸžíÑ«[¸Cç%Ö=~ZåjÁ*¼Èè´o¥ëîuÚij xòÄ IDATƬ‘K!áNNÜ‚¦Ìvv;VY³¥™Ôˆ 2^½Ô5©³g{1\§@ð¡©ÇŽ¿ÜmM`ù”.¨©ñ¹“ÍÚèèxž”¦žäñs°Gý‡±_ž3甯xa“ê±ñɵôu|÷]ôð8#+Yã;w€3›:kÁ>¬óÁýéÔ¿}LÏÐБµ=ZÚ:·Bç³f³;Ùló=1žôÝû6•i&MŠ@%Bë—Ê[/¼P`þ1;FY(¼ÿÐ{êÄÝbñCRvÿUð£çV¯¾ŠCõ.$J$b ™B4‰ñ’~î/l¥ñ±Ì2I\¨ ¨¡ üfà¡ —H™Dè§:©‚ôðK •¹o#–úéé­ÜrA:Ï™V éé\ž¿»r¨ÛæÎ­û ‰.CZ±³’yÕ …ã—ì¹à·ìáCÉ—9¿¤¢œ¬”ì¤ð“åhO:u,zÁðDù¤`Å+[|-ë¡NfÚ5}¶1¡TÙöïšÚÈDVµx’«+žŠª·^ƒ0E‰' ¾ÏÂP´n]R ÍL_ýÎf¿2ã ünˆ8ÿg9S…kæ—)IŽ}z`ñ\-…—†šT307U¤DÊ&г:©‚ôð è0dÄúÝþ\Áïß/žiEùyN™ýžNûäMfçŸÑ40hÛÔ¦o.ù"Å9Ÿ<¬>V˜WSc‚l_–rE"U!kçYÇd¥¨«—á*C»¾^ßvÅ­h”j-HØOÉDJ­CŒ‡8…«ãÔ*k&ˆŠÚÃÜÜÑ£OîÜ9Àõ_l|–¡¾ÚÄ™ÅâGå¡;k|g}ÏÄŽ¿Œrã‚-å¡a´ ¥ˆÀ=ç*«iˆDxïÖm1).&k´IâçódÌߡ¶ÛwtâKO{ûvëêþQÌ‚Ôb%ܼÿIŠ©ñÞØª¿ƒ@ðîÙ³gKF´(V•_ª´b鶆9ƒ”%°÷–DJ§ÃYû^f]\¸fÛN¢Sdu…˜ª§*¾[‚‚‚š7*‡cºÓJlÒ ©#€Hˆ‘š6:èп/oëf’ æaM&ÉBëv(C•Qv Lþ2Ǥwor²¢¾¾:)³Ä _Oön(®I ŠK þšß—Ô¤èÔ<ºH’lu|å<­Jû·2¸õJ{qhÇÊ=Ý~› nñÎÃ7tì;…ïÖ‹Ùp›Z[³Ÿª®]ï|€»EŸY5Õ´nˆ—ùœ˜½þ/äßDžÎÔ20gñ³Ç~°¬"Mó>Æ.¬ê…7L‹»HªïyO–9‡ž3-¢£cùÍhai9iÆ1Ö{fnñú9""bÊÊ€†fxÔXºA"^w’YŽ%IMYu<ÑÜø[e5õÞ=Ûór²â–Ìîõöí[hkêèÌßR“¹·IÌBØÌÒr*[WFÒ#·v=] xfÊ£Ån˜"E‘°KÁþ8Ž[Gg4;þÕ·ÙÃÉx¿€ý™öã—m\Ã8§çÒfV.!â j¦øÕ‰45ço¹Q‹½ûF\\³eÛjÜ ·`ß©ïeeï:e@!Oü6ÿçù [_ºy Ò_F-ü2F /+ŽÅ*¨äìNNÌ> RLxSp@ÀxUÕ2¸¡ …ßZöàÖ2±Xúé¾ÛOMñèbÑï‹ãÙ¿>®,ÿT1óQwîšXÝ5Yü×_Û®^ÃXWK;-H¾eÇQûW»Žo“!Ð;r8cSIiùž'5³žcmâx^l]ר¸gÇŸÉ‚E¸sBε¡1ëgWͳ†ÂÚM#Ç»žÆ¢©­ó‡\?“õÄsŽý™3ç8eSJÇ×ÎϪa¤]£îÞMsÀ¨›ñqñúëˆ;ôbÙöÈÓ;ÆÀìúã`ÂúmÛΘqlÙL çÁFÕj4›1uÎÑÕó@È®[K²¬¶Hv®%æCl;:ORoìÈ&º&ÝF ù§¤íO™»nfïIÑÊj‰lGΨNYyÅ®¨äðßщ#›´è:}¡Û’Bà•é;³Ô­cϹ5 ¬ÔÕ%ú¸æ•ÛLpëó'¬_±±ò/xJc`Gñ5ûž•´ø_'Ov²Ù×Ë‘5–Ö%ìâÐÓ¢U##ÉoñÍJM qóå¹¹?˜ÏÇOZ‹_r4S64°´Ì~uO÷/.1ã\ggf(Z’”;Áæíw& ¯ÊÆ^°J—ü&S0þcß ÇzYϬ+Œ[ü<û<Oa*Êɉޓðj°õÖš6Ëœq«F5ñâ%+‘|ØÚ€·ßÁŽñf ¬(7m1¦ÖãÞA-PeæØ ˜"AüŒ¤k¡£ÔŠÙ=0ß;rð€¶?ý·—•õ¤L(J 04¬k7Þ'#é ó¬›ýàámÌùƒ]E$™Ú ûÚ…c¡ÌîÎcHØÙ¢r>¢N?uxžiê²ôêjL û7Ѥä¬TÐO’Žð«ëà0LU³~«7 fgdàm!u[ÅQ¼l# ô’Õ¿µž=ÖŒ›;auÊõGpëÀïÀ¾?Kê—ù¨ïÝ~ü Šƒ™=‘o¥”ò‡6ú:ŽÞŸjIíýqßkÊfw•T* gYh¤èa!0`Ô†lA×G†8΃;®Õ´o-FqêÔ"+ kÖd6ÇÉM¬#Ë;Ŭ警 ×–úá7)+9™}6ØÇÔÂqÅöHÏÕÇ”•™a¦$ …Æ5Œ?eåoHNäðæ)åÿUlJâ—?¦¤¤±êêZÌž‰o¾µnme][G÷ÃÓbccëÕ0ÆKòˆ9pÂòHþÃiqHØIñ4°§ªŠ¶z9fò: ë2³äÚ'úÜ'¿:ðgsŒÕõÀ½sj²ðÊí;îj$üÅ,癊áÖÉE*t¥ba8¼ÆÒšmI‹ÈqÉi Mñ*ÀÈ"(è6O 0+e->>3>>]V[žã<ùIʦ|%*-jzzDo̰tÖ€ånN+V÷ÇcR×®¹¢ÙÙpõ’ÄÏ{…R§ŽlòN ¼xý%þý Ÿ™+tó,pÙ‡V‘ºz.'!„›ÿØèá<Äø÷#Uk˜ÿmD¾Bnèjlp™µ/ŸïÝò5Ù\a¦ˆjµjä¦ñé#î.9»v®þc¿ï‰#þ§øƒM,.):;ãgÛA¸<“) ;)‚wì ì; ë8=f ÀDCù)aŸ”ÌûTQ%  5ˆà=^üÄK²ðÝw^ñr›-ˆxùh¦H$:{Õƒ§/³¶nž×(%;»îQì›HÝÝÊ ¼%‘÷3fàÁI Šc » ƒµu@À´«‹lmM¡‰ÇÕà[Ë^<ô~µ´m[¶4C$NX£€lÂ„Ï ñ¶y+Úìt½Ášzpk¡¯ïä«sut0U#­ù½µuÈÕùwo-®SG ó6GÅ®hŒ»ûÀÍ›§±êèT‡A¬¾lÃV„\M4»è«ÏÚO,vµ³k-ikAV®£QgÆŒ@SS#¢,·³;ôOÉ»ðà«ð \¹è°0x¸£W1NŒ(H^7ÁÏsÚK³¥’••1¾áZ«6ŸàNª©iñòLØ ï¸ ëÜÃN ³ÐãwFª¬Œ‰S³®ÝÒ|åºßñ-‹ï&EÃ2£—.ˆ×ˆjXYP«ãéà»–"/ÓÎPdŠ{wRï ®ˆlìÚw8∕=—í&C£áž¾#†ô½¼uÙÙÙÁ&T·ˆÄY®¢êºrHءɑ°3-ÈKZÚõ2’¢°ïÐÈÔ¡'yö…ÀGETIr᪠=¼$À¿ɘ ôõz÷øOn€¨–÷0ÄÁ+·ïØ-.bŽp0¯uå÷oùÛeª¤tÿÁòCûþòðtÛìn(ˆiñÍf¹ÍÈP8^ã÷—æ¥ WŒ!Q†ÄW§æÎ ÁI@‘,¨NÎ.œj1}]˜$Ï£Ó²È5[î°fiÕÊÎn’ã6H‡<¾mÕ´;äçL3³[lÈŽ¯ÿô§aÚ©›…#äq¸»ÍĈs’lñ̸¸gfX{¾ûĺßìá©3“Þi‰>OùíîKÂj 째÷îèû*3´çOó?âžôñL½HïÆ nÇ=vêÄr¦05~ƒ¸-SQNZVº¦šªçÌ.dßlömg¹žfŸ!OÃ|V¬ô€¹_fy“#^4{l‡?ü@*J‹ûkÆä_gû„`á Ô"ÃüZ8âÆµÔ­Ë|ÏKHµ¤ãP''†½Ë`B’‚&&VÁLòÝTÊ>"$Æ ZË”|àðõËüêpKÀËCr³R”Õ´_]˜Ç.§Yô¿rá=yW¶ïxh°4i7ix#B¢Ç4³'ì2-<>ñ´½ÿðÁš‚l/¯@Ôý,4úQ³”¼o[öÈ‘û‘?ìn]WW3-3þkËö²ü&K}¯Y×BAñOP WpkóãO?ab» Źþ”UýÒÓc6p'Ê`ùè?Þ1M5æl5£GÇ$b¾(2ò ŽÏ]Y2µybâ{äåhF'\Å ÖLQ–ÁBw/ÿgϘ²×^}èÕ£ܺ,¯:3»•þ)6>AŠ+X®üÑ«ûb1ã5Ö¬»»r*FyyÕþ‚ø>LÑ„™ÀÙ<ÆpYILÒš¬D±0#OEpÇWÎÂÙ3‡ý9ÁÉ“‡s¸ÃG¡¡Xd¢ª¢‚«Ï ‘¹¾oƪHRèœXïñçFO555¼é…ü¦¤xÒ9S×÷û⟬)L„Nuþ#b¾ýç,Ÿ;„˜¨D"F­œsXiòD"UQ‘$ì\K‚÷û†ÜËõbPÊ>ôÃŽøß4ž IQCqJjX HrÖR¾)6L‘9çùee……4£€°ç Üø¹<¿|›üw#Â玥¸˜`’°´£›tý®\yŽ£YÓa­fM¦öŸ[`ZËÒ²¾ƒƒ•‹KoÌ|*Ò$í¯YSƒÄ'7ZçxÁäòªã¬ŽF nRˆW¼€œ3uj†úu€¤ÜÎrh†"P8 âBÔˆý—‚/¼=û"Pþ¦LKKËÃ{P&ÎÜ%8úv0 ,&v²ñ œD6{}ÛqIjjÖé‹nMY*v°z6m½Ü…Š‹¨ß|qW;»= g:CtÞ¦4Å9*]ä=áW–¥==ýë"%TæÜEâÈßìÓÏ ^þÛŽK{;ô[2µ%ØU5ÈþÑO¦í<öÎ#4ñœfçž[ÏŸua‘>}ÛqÕáÀ™„ý|âÌÃæ,I½—Bn ê6—bZGív?oZb…Ì¥P'§#\{xò𘴺Ž6Ì"è?¯?ž¶s“-òµÛÚúÊò¹sh†"@¨4”c¾u–ÃZòfÛ¢ðFì*"k%).5ÛS0ˆ$.ä‚"yoÝâ­»›5 üã·6– ±y:X–óè®çO?ycNRJ³@#9s 2Xå‚6ð‹ UÐåKHQErYò•Õ¡’/F‚aÉþÙ+¥Èr—¡NC˜%©‡O¯i,ª®ˆ—\QñÒ’ƒ{Ýyòºåó‡ÈD³+g61+ Δ:[:ºƒeÊX’‹Wƒ!Ì'´])­KS|;åq%Œ¤õÕ ï’œOIŠËºo”c“׈ü"ì„QÓ¦8©­]¸õv-Zày"6¶àüRQSC<ó’¬ìOKQ«Éemæ·\ö•|%BáòÑd9㇤hõÆXö÷8ÌoÃú²—’_8ê9píÂî“ÿÕ³×B-A¢Ðgm¡óˆüÒ¥™7ííPÏÄÊÈÈðÙ3f­—T‚–-»v°ÀœB4 ÌêÉ¡Rú_v¨­§·pËMAΣ»6nÝædÝœ0®ÄÖ„BìÚ*þ1ì—nGJÜàÒ+Pàò”žÙªeéâÉ“»¾1¸8;=£uÕäôĽèªðªõ%@oÙeŽ3|BŒ/§;ÿÆ›‹·GnÜëF‘BvŸÛô™zvÔŽÿÅD¿NÂyÉËÕk»7~¼*×§“z_`y.f”dÒW²¥söT55ñ>©wÌp›Â '`‘{]œÍÕ\E™ïFŽÙs®ËúŠWÉ)ZZ‘cú_•»)Ó±ï¥YÞ"]¿ùìß,lñÍ<«ïW5”¥YµUAÈÈ I‚+w›Â¬¸]¼bwžŒù+EáPƒÝ›C@N¹øúŠòRv©_ާŠkAAEê§§K¯ŽÅ˜ºTRÿ©Þ{xLæ¬íôª"Ê__ÀÉ‹Ìd¦¾L‘>] ÃÒêH‘Í+S:Z/Sx©ñªŽ^xt/.²•FîðòRìä_¼ðÚ‰m–†}×¶è<;òÕõf„—\CGÇ}Å9u‘NÄÅ ­zºaf>æîá%žS  ílm]FïA>#)rö¤Þ\§µ­íP»ÙiY)©1áÖ{a7f‹ÚM2“Ÿ/÷œ)M\.pŽ'E‡ k7k`ÐlÈkû/K×òÙ]Þ¾ƒqé"ÌJ4&M»³†‰•ª@ð ØgÝz¬.“NÃÝ6wb8â~s€¿õöÙÙ[ß']ÇB¡eë~9Ywù›9ž?ϨensiZ\„ÛœŸA©ntËÆÖ™)oBnŸú™Ýe ú{0%‡qìአâô¬„ˆ˜ûPËÉŠ¿ù÷=ÝÂκîøÝW–€^N“*¦¨jÖ±¨ãŽÉ.î“ý‚åKø‡DGêZ“²rOIi*:,Œ^(Üá;ÙÔTÉ_1 Ö ± ¨AÅ´¬¨8•ó¸ö÷ikkƒÂAŠ{м¦˜cgÁÓ°]î“~ð[6ã%OON>xdHMÛ¢ë@·‘M|O3j=ˆl¨yºËèm óÅŠÃGY‚µ;¸ÚîŠÅáÑ7ML¬|÷l†ðØÖ%†&íÖ¬p•C\žGéÞ°uçÈ?L„&’¨Õ6ù!%æÉ; ¥•­<úfê­È•Á­cuRq®‚"uÛ>}ž?Xj-|Ô¦øsÏMS‰Â‹‡^ÁA‹À¢%OÒÔdh¹@Ûò˜-Ë_ª§'ÿ+[xó ᔯi`𣕑ƒ3++ŠG°^˜…‚ó‘,žå‚¥é‘|²óX·ä±“×þ'.»Eã^GaÄ©o>/ùö¥¦Kf¼_pÀanSiÇ¥9Y1&ðò2+«µaWHIj?¼~îNCá¸áwßÿ¶Œr‰Ëó8ÇÝÁ¿.I0Ì’$·9wðÐ6,M¹-_yØÐb¿vܺÚ˜Å<}†¶™`®©÷À1(…àÆˆQ[À³ìë³mϼJ üÅ Ô²xQ,î´ªŽŽ¥‰Õ‘3IPeÿê ®…E{Ìg±œ¬ë¾û}ÑÍÇ1àÌP†[Gó¢²Æì¸¸·Ì¬ižò‹†ÕŸ6n¸<ú%\u=SÜzÂñ¢.ˆ\u¸{ûáÌJð}WûûG ‰Ik7ìbmiîîï>ÂÚ¹ëîAÞ¡ó«ïÝ{ôÝÝÌÄøFÐHHR’“7Ÿ}=>|Dõ›Ï{ÿ>?´Š³ÅOŠ8åÞ¾4üÐÊ•×å›*Ázxv Y ˼¢4«ÚõÈ00G;ù?¤¡œEž?ª^}è5wyU3í+¤GoÔè©6$ÄÅáqû¼ œBˆ/_ee!x‚!¼“Ûái‹÷:ÿ"a´.Püóg¼M©Y «:u HpŸœyäŸÇ#®c"¯®£ƒÇ”¯ä¬Â,`Y$%`Yzc)ú¸'òT+¤¬tFësÝGƒ< `´‹ËP(\\¾¶¶¶È#4ru*÷êN—Á,ø oïaa÷½š5«I(ÈÜš‡"àC9òÜc,ú\÷±Ä>A*Êr)ÂqÌM}‹zÞÕãWòdþ²nN(d'q’åzáêä@(<{uxØœÉÙÝÝdŽŠçò(Ôe8å…Â,'»ƒC[b {hñ†UÕššd¿­@.Áº¤-H3¹sm¥Ôí_—©i‰j4'QAx³E¾‘š‚Ä™Îìü¡…ל‚ËwËÚ‘˜èÅ©±+|½$j8$i+ó:=ÁâõÁd·½³¼ b^=~ü()zàè%DÍzÐHlÝ »C>bìYâ=2SÐo##cÜWdÕÐsaMUÔÒqëË—ìz™"´hÕìÉ“ç¯×s4µ°´Ü¹© Xp±ìï^ºNÄug ´hóŒ¹S›7mí aª f-Aö“'ñWƒ‚þ¼’¢¡!ø×ƒ‚6lŽ<têMêüeÄCÆínkÛÌÐØØeXmHðï)ÆÎʃ{¯ºŸ©¡ñÁÞ~í™3Ú ?gò.( Ÿxé„ÿD‘H¥uÛ¶`NŸ:q7„½ûXjVÒëV³¦~±[÷ÌÄϨGß½Å-ž›;~ø¾.VF·0|¨]§Î¨a66̳ù™g´4þ9yò.kªÚÀ­[»-]wgÔ°®ššªlü:ا–¾†žCŒŽ€V¡‹ÍÒú¦stõ ¼½$ ÐÐнsç¶i»…OÓÇô%BÉgA ®;¦G\¹Z[.5Ô¯™¯™›+${NŽeyçÛ©Ê9°®zÝŒY­Xkó¾—þ÷`•ÏÍ{'‚Q¼ïÒ\îÕKۤǶƒ¯}½6L~ êð‘KöàëÞ²ëOÏõØÆùK×éAãÕ~G yéªÀ9gÙø¸E»ïb|ê81#YЊƒ}ŽÞ#›÷>ÿÝ«¶bJÒo~FR·¤„¼zú.£–>y‚꜆9á–Cªöð\â\ã]Ïâ…rŠ ý™øýŸwc…‰Ï褻–®\ úxW×Ó½lÜÁÊŠÑmß$%áÝ{¨n®ëÎIÃí?gƒÙ_}Ýž§K7ˆ—->¿ÅkªKK~‹»3“ÌK¸!Íß&.é^ˆâxàh££ Šv¨¬žÐ):I¯³XîÒ¿ëx×ñßãvÂ!ôÚY[³Téê›÷ÝF38‰2 IDAT\¼ˆ!ìl=p³½=Ted8uëˆÿ©`¯-÷­ Î  ˆx Õ^»*X¶”‚0¹¹ÇO<ÿ¾‘–X|íbËŸ>}Úñ—{zz"fu€jhihiýjc°|Ý!ж@¸yÅþ1ý¦“ÑîýÈ÷‚~µrgÏ]XæÚ’É++ËÒ©÷ˆIJoo/¯söæX? |"r¬uÁö XÔIíE~â>AtLÛÍÊÈq‚ßYäe è¥:"¥_Kg´ŽsÔÞÌŒDnns“êÉé¹ß}gÚ­[ëã;‚'Î<¡Sƒy²;wîA‡£M'‡Ü'wŸáÓ©wëÖtê“§ÇFGoÝ÷dp?‹;¡óÏ&º\Yd8bqkkS]]°t‹eYÔãó¾=’ø ¿P~/Ê?—ñK/vrÕÏo¸¼ó…ɶ- 2Ô7Á‘ìÚeØ;ì3ÔoŒWåõî¨JÜ4)I†ŠÀi¦¯®£»$“ú¹Ü›$/K°N䲟`r™®&÷§÷½FŽ”ŒÊêËZ–‡p¶²å©Døä{+y Å‘áW¦È§Ë-Ž9ýbÖ.[âRñÉYSTT-R ö<ôúÎÓß¿O”[Æ1‹+ešs>]nÁB0v‘ciþ΢ùñ÷|­Š—ã¼h)7=Äå™þþbÎ.ñ·¶6!/åá;PÒ.‘#/—NÝÒ²ý ÏíË=•l»wÛ¶éÇI“:¬^}•«¹ÄâE³¨çñý6mªÿömÞR¡°­¾²Ô%×ÖV½ºfß·Ó‡µÁÂÖ­×øµççឥJ _¼˜)°½¥6Z×Õih à,I,qy}B\Žç5¼ôYéÓ'¬ôpíOÞÂl×>ˆ}1)ì:FêÌp~åö±˜‹‰9æ^déÔ››;ç„Õ'bqàÅøÌôtfpÍ'"—K,^$‹:ŒÄÆÆbÌé·sYÉÒMÓCBîpÎYK±MAõêˆñÖ{lCÛæNíO:‰6ËlNæjÔE¢§ÌD13P åä\¸—Œµ´gÎ<ü÷}Ïð¹?‰ª ärÊsÅ54˜zmˆ1¾3a…¹¦çáÁV.Á:WË r™Üy:”ºƒfÊêÓËßÒá[g_ÖlͶ’á1'®ÐÍ}ì˜aMHÓí6ED¼‚¼¾¸¾³Ú$6>ÓP_а…;󤬌U1lp=ûàñWƒû5&|èØí&E§Þ{ˆÃ:W8µìØøO:Z·_‡2á8CD.—X¼Hu4 !‘“g¦Ôf›‡ÃK!wœœüHûWøÎúÅJýŸµ`Ö¶ëêé…ÏÁsÆ“˜· Œê(caûÛø ¶;™’Þì'–úÌžj8`³4 nÂë§óòsX)Nùåó׌`ÅÌm’zy»üÚYtm,WÏöúMÁ:«Ã|¬ñ›gápï1½d™Ü9M’”ºC…f( 2ç[—š$!Ø _Ì:µé [Ìçb_púr£fü¹b$áÀÆ!òüˆjÁ!_Â*PŠ+ÎÏ ˜ØÉÌÌT¸Üž¯­ _³N[—G—­@åËŲ-©-ôèñÁá,߸,œ‘*•Áò b¨â9Ó ø¾²ï,§ù6<Æ^ÿcÖÉ|¥5©âø="‘/62r¿REÈ!écNVJvRøŒÉÌL¬õP'3íšÿ/<¾h0Z‹J‘A’ÛB*ä(s¾u\¾ó% öÜ#Ø¢¡¡š–&™Ô–ëÓQDöˉ”Pê¥dëe áÑ ˆ¤¨EãÆÛò.ž‡ÉUž¬4³²-©õBúX|ã²—´•CË'@Ó¸l½ô–±/ë–v¸ß¾í±*D]M²Ì÷ËìÈ-5dþ¦Î,~)I±Ú5Œ“ã"<\d×GJG'«ï¶ûn 5vÃÞÕÕ×Kç«yáÉ’‡B¾H¸¬Ùr‡4&%) ÆCªøð¼#Š·bIµ¼j–Zl½Dðu³µýûÌ8ÌSÞ÷¬SG«DeË¿rLLŒi»ä•念´…_¶VJÆ&_o ü011˜æ)‹_&Ö‚i m\8å›YÎVKv×1hë½å@qZ çûOR §¹bй÷<û¯:ÏÚ÷rò葜MÙ n'cG6Á³Kð“Ð`¬’ܺsœí µ›ÿwVV™J8¸˜0'ù72ÄâúÍóÉüUþ‹u2þ[A«ú·ÈÎþ ¨J.ô¡H¡€\ž³,™…æ dg¥ã˜%uIˆyø÷M53„0¹XhmÅà…W|–œ‘Ûf¾05):5%¡p3ÂÌLÜ2 q 4Á/v¤ñš]§; ìëä®,ß,'¬²™ÿÆ­WY¸+wÇÕÕU°šùóç\dj×ÒnÚ¸v“ƵÔ×31ÖÓÒTGL4æuâ­ˆ—…~HÏ_¦Y90Áˆ²ukóa®³›˜åd½œòÛ$¶ E°þÊå1¯oj &,D^` ‘z.\(M­ž={ý_5Õ´8žôÙcÛÔlÐ`–ëi”BRÈfΞÍû`祰?ˆ9Žã|º,O:è\¦yŸhl`FZ•w°¡ßÜø[)^ø'ášwtVÊz8aDw¹½nfi9uÆ1Ô˜‘ôÈm¦ýø¥G×0Îé¹´™•KˆxÝÉ“§òÚVÄß¿|·ôï:½³ýhâÖ¥ðQ‰äòÔsLôéÿ„­]¹ŒÏD_D}ðtY<êý«0Œpr`)b<8‚”Wÿoq‹ãÕÕW®‚W¯@ÀûÆÿô÷­en-‹ œ«h#¿zù‹ïÞX¼ï÷Ñ#†uÔ×Ó¼ÿàͶ—Ü—w÷8~ñòC3Óz×.»êÕ”°V´.*l/¼˜¾÷,ì9ÏZY­þ0‡Œª Á:xQäò˜×oÛÖuñùS;G Î൰;Wjužt=}ýâ°™s6‘©Y³6âÚÎ,oÁÚ…¿‘SrxÒ•”–ïyR3ë9Z5~X}Œ««±±õ£«çñyá K»‘QÓëa~Êj ª©¨HÑÊ£×èàŒÇ–Í´plT­F³Sæ®›ÙûER´²Z¢çû3gÎñ›Wx^˜‘ñ”)زø(â©ç˜èìÝ ûG7-24i &úÂ몠gËÙh½„o•íjg7oj-ÐäžúÃIM­zf&FHùËcŠ{IXnñ áK¹•ü‚R³: oÊÌüÂmi½úõËH—zž¿ÉvÁð-[·SÔ~c ÏK5µpå²8 ÷í³ë²–¦ZJ*ÇwP žˆ»ÑGŽ…99v v·´öüç]ÞίZòƒPÏ™¶ïÙô2+…P$Ê#X7`xÌ?2/c««¯®’©ÑÞ£VåQ,> ‰G­9öMjuOúÑ¿Žùgdf¢v°™ïØ2læwµŠž¬ÏP¸0iêȺ –'=òâY±ExÒu °eÆâ)ŒjNNt\d35&‹yu°œ·êÙ—9±/8]¹|2¶Œú«.hÕ³'šš•õk´YCú½Æûd$]% i|ñð&b•ÉY©I „˜U,îÇG†“ Ž•äâ#ÅS?„}MLƒ‰¾Û^G‡~v¶ílÔ©ÓùÃÓ+k¼´|Öñð¶;ÙÔSœ+OzñØÌsy ¯Ìö\ÝG =v™\žôjªˆ ¥~øÀ.J%þxí;v2»á(åõ:¶^ c¼NYálå$@Ê`‰ ÌØØÑg¹øöp¤ðx" ;/ó˜èHîmyç+Ï_þÕùï{•ö“NÙ\¤¯ÈÕÑgö^’$+\1ëz^©‚¹/@¾¸€ÙÏŸázÓÓå|Ëó (È;¡± óÎf´Â¥~Ã\ ãõWN8å"3šZ¤öª°n“8äïùZKÔSÓ¾öföŸö#¿r\9Ž…œ{`ü$`].y\RtÓÌàI¹¹°–žÅ˜)„Z ¾—ÍœµM>´µ5¢CCOûØwtvþÕÉçw_¹<éVMZ"uõܱÚÉí5:(äO)c5ºœ¥´ò(7Hƒ $ohjŠúͳ>8,¢L>¹KóçV÷n[î€òîÅ…Üs3Þo ¸ |{å=_š£u,E[zÈÕ..}oG­@ÈÛ×ב %»¹ÿ ¢p~c„,Á7”7oqB¼ðeÔ2»~vÛ–Xbˆ#Ïu»rRÅQ  Xu<ÿÄ…ùE°®ËT§£#½.Xšµ¼ ùà¡}nÝòÄ€äxÀ4t³AÆ…tvOÀl—Îü. íðgàuî›DNŸÚrñâ¿95éäÀÎRvþ€yÓx†‰¸0ÞyûN ¡¹ºÈÝ}àæÍÓØ² gÊ‚±!B==fåæí Îw_ßßìYù2KËæP#•:8´Ïkˆ@–þž;U¢ ¼ùƒ‡oÚµ5.Q©ò«Ìޝ›6mJZ¨_ÃXS[ù9ëÃåRŸ³ê˜Õ£† N£FøšéÕª‹|!ÔêOzñÙÌaP]¡Š«^ ÔœZïnôo{z¡^¹<éa'0¦V^èñ;”1O€‰S‘äÞÃg9/À /¿×ý ͯ,aBuëH¬]QUÓRÕAð^7§-cÖùHâU«WGHǰ^s¦ p75]´øü»ÇGp+¡\| ´{ óxê¡“àmGf—¯>‘ê¶l¹í@ôAýÿÅmó¶ƒ/55EðNàX^ç#MúÈ–¨¥éÖñú·¡ÃêkÙØèY´tíúÓ¶.Vmþúë7ÀÐÇiؘa-š¶˜mÒna»V¦#F|ƒ!ɘÁ>ºúZ}løÝÇdLäÝÛ;Ž¿Ä gøðÝŽŽûøàÉG]Ý;¯Áxæàñ+?tY9°çÊ"X×Õ•¥ªÓÓc¾ßü$Í-^‚ü°ÿY›µ[Nžv¤«ÍšÏŸ+êl®HÔµ•þä±­øÆÇmº|ù5¾ûlMñ‘K7€•n ˜ÿk¿ [0óOR´ÞvEªÞùÓ!lg5F 3_½úз½ÓÕ§LÁ-“a,c»»û^X»_íJà`—Îݺü.V¦"Q|ÓÖnï¥Þ;ªgO½Æ-]O„$¬\bGÂb²ô÷¤Ù_öy%ø‰•e£/+[¾JÁˆ†ëqœxÈÚÚz¨ÛfC IÇyX'`ýryÌA¡~!ÌP¨/Xt lÞq&,È¥V—âI/>›ùpOß¡=Ý`|Úâ‹0ŽÌšiðd€zÁð.Ë“nÛÕ«ûëšôõ¹Ï¾¨q‘Êj¦ ,çèË òÂÛÚv‡My½> š_t°ã6˜Z½ýú챯crpÓ{x¬ÇV[Šj´äÇ`Ílm7_nhጂ[À?~ÃÚ…ÝÝܦ "$Y|>W«¦ˆ§ž Ø59-îaÀ‡DEMÈñ©ªŽû)¨ù¯"ª¨û¥„yöü9ß„ 1u †ñÅÛ-kŠqqÐñ?ge<ÇƒŽ ;M¤¡Á 9Á¿ìîuÂ×÷–¿?€Î¸™(èg÷Ô¨Vnñ·qq¨+22ŽÌ{ð¹Âå±®k?{.]w9IF–µ–ùfIƒccÙ—Þ‚B]Ag±©¥¹6ïͨ+H‰Ž.°Dwè„!ñÛ Û„nì[錞¸“<#Ο°«×åé ¢cñc,Œw>[ÿgÏÞ Šk¯>ôêÑÌÃãb"Ȭ½.œ;÷C¤¸'é&ÌVfO6¡Ë÷õ Æá¡CQ][µñð8ƒ¼—Û>û@lck²ô÷à‹gN}Qzü$®O¯¶_T´œ’¢Y Ú/˜À5Q–`].9ô­œsX ï“æ·¥V—â^O.6›ù^7§½\ËØ F¯|Žu)žt¨< ÅÚU,]Åòñüħ/ç[ ²½†œt.ü§|óèNâ1Å|õú£yáÆR¤Xì,®Çä'Y|øí‘ f:ÚOX·r.gïå͛㇚àŸ}yÑ¡™ƒð»àÔ*V¦”Ý:é±²†ŽôôÆ—™¢¥d¨plæxéQÙùtàMUο´çydq«’Òá[ÏÇB(¼ýÐŽ;=ý#ؽzÖ£Ç6à8ÈÉa•«ÔÂî½Èè´o¥ëîuÚijÆ,¹ù¥p'§C8‹uÜ÷ÂÝÙ'ˆ|ÞvÈåhÛ­+¡'Åy\áòY×/ÜZ&U×쥛§)b-—2{òªGvU%ë—&·³ð˜Q÷½^½ºokËÄX¼æGž8ù®:Ü¢z››»qì•…4ÖÎ^vo¡_ ó†úÕ¾í¸âýûäþNC å¿gܦéìÄ™‡Í;YþÚ¯>j¿:i²øVè|á̃Ç_³Ôö‰cfÝß±²«¾sç¿Ì]$==öGû#—'±Ê˜.–¥¿—ùÉïfQ¹§÷—5o; ÁE)ÒóŠ@q(¾uÖauîìõÏ?)R“?8ä$Èp1,éÆ …Ü[eù§ØÒ’Ù$EÅ!G¾eL â/áÛ,f^Ê,lJ‚†Š;›O<¤¤õ`9߃£ÒmÛžõïZ¿ùºb6jd˜Tˆ“ 1%ÕTEö¡F0á2Š4eåŬB¶ ¬4?Øx'%xŽ‘U£ŠE øÀ­ˆu¿¤BM6:Ѻumx © ¾¤0?«à­²Å)$~ÛÐ) ÿl1ó¬Õ|³ùýRÜYn¾¥­……º š•“§¬ê7kA`1k'j¨TʧCކå7†Õ“jª¢*8L¸Œ"MYy1«-(+Ál6ÞY"+§ŠEàk(M·Ž-B™bNoç¦Ñ¾¾¿¦Yå¿l1;kçôãhf¥`~ ­Lª?~7_RUsJJ’)Šª í·|zôÐwðÕ2x‘ˆüú*´´cë• Ú¡²CàÆ•½û¯«L„_e‡U•²¬.Òüë³¶].žýýïÀ½R«T÷¿²³e„ùÊÑâU .TU•:MûZ4™i{¶L[¿tˆ~m“¥® ±HE%/hÑ嫼Fiaª<˜€’! ¦¦œ-Ù$U²’T» ðúÕý>3Ý&wÔÕ3Üä÷¬¦~ÛM«$Åí"uëÅEŠê•:ª*Ê?R·^ê¸V*ƒi© Û×:ïõ™å¾ò¼®^qwÏU*JÞêÖKŽ-QJ`´žõ;ºh¢À• ûÏØÜÈ­eÀÐ`ÐT8Ô­Ž=[V°n=«¬¬S»•ìYªªù﹬Œ],>Q·^:8R+%E zuµ¨[/)lUZÄ"¹‚Šúj‹óÊQ·þo¢MëÊG@C¤ZiÞOß+š+K4µj~HK*Ë*‰mêÖ+É…¬pÝÐÒTOÏÈ®pͦ þ¨®¥KÝzqð§n½8(QÒG@KK=5¯ð£‰"PÕ5kà”4ªë¤H.B›ž.£—ÞQ`)E"@cëEBDK7^ihú”óéSöØi>ñq/¯ý}$âÆYÊ)¤èBG늡ò²EA:Z/[ˆ+‹õȈ¿Ñ•jÕ”UUEF&-Úµïé2c§@@Y^`êÖBCO”)L&aÊãJbüî­@ìEâ:“™ùaç† XÃIhF êÖ¥¡‡ÿšÕÕÒèÇ ìŠ]ÍÃ{W•ª±¯ÔE?r¯‡Ÿ¨Ø]*ãÖS·^ÆSó ФAÈP±‰ïßd¤§afÖ‡#{=èP] "©Ã¼{ ”˜RÊù³{Õ93‹YÚøcw³9Ó{~ú”;ÈqktLBÙTH­VÞ ²´þ=Á›’n†üYºT–} £õ²D—Ú–A êq܇ô,u5üÓÖÕ®­mh¨“œœ.£H|îÜ:W&!ÂÎÕéFÓ|d俍[— –çÄ÷TTòŸ?Ê=qêv ]À^VxW»Q÷¯â§©©ïo…ž®$]*ËnP·^–èRÛ2`õKø­œјí»ÿæi†" ”¤wX¥î¿g]«.)aþ¸Iê=¤”‡ßhÝÒ+a°ª!ömÒÝ{1eT5[™7ب2u§LûBGëe /5.ñùû**ÕpâCFÖ–í—ähPE€"ðP·þàÑ¢_„–«‡ÞxŽ¢x/åŸg"¾È-D (D€ºu…ÐÐe‡À¡#¡YY9‡Â23)‰cÙÁL-WQ¨[¯¢þ¿íö_çï«©)ÓÉÒÿö*ÐÚ++ÌÛßëÕ«WY»GûE Pª¯_¿®´£u%¥JÒ5 +M_*ë¯KGGG$¢ïØ,ÍË‹ï¼H$ÒÔÔ¤_þ/€µ²-p415µYú[C«:,KŽýø±Bxª‹D–»xÙª°=y²æ€ïê3Å¿ÀÊÊÊ999Åׯʚ_‰Uûf–ǻ۹Þ>â{Nÿ~í÷7ÈCFwé:Y)%IIã·Ì¥Kóà(Îß ?¤ÅýwõzÆÆ?{Ï]òúcÎÏü{×OUòÇÏåz\q…PqóL¥%©¥’G›Ò*¥ EOlïÇÛÚž´íö~ìöÞJÛk“JÙjCkKmVªUHŠò ¹ä’+ÿß9ç:Žûrõ°aæãsÍ™ùÍof¾çÞß™ó›™ï¼Š½½Ëæb7º¼¢b'YPxg‡!á©_Жª…¾@øÌÕõ›‡‡¾{²oÀƒKc·ž_ˆ3`(éà§ÃÈÌ=ž û™ô»ä»ôÙÌÕ1¾ß±"9¹£ÎV}üö»Øt:Dœn¿KŒµ¼#Íc0::6#Å`X;:n?•·qZoý¾a[Æ.0 œ¨·÷x0†uúPßäfÚ€a𕨛ûôþû_×û`ÔÇÃ㫽H E±w7[Ì-/ÇÏÄRPU%¹••—lÄéзêñ1ûC"…z¡¢¥µäþ†Uú3de0™óì×f“·ãÍ•¯öܼq›,ëüÅPþð÷XÁ߯°÷í¸¹¹ùܹÃG»R]«ª*²øl³Œ=ÒÐÒú÷ïE†æß‰ÊïŽ[ñðì¥-[(Í­'ŠSïA¡6C9,%¨7[pãr̃ûïÖ†….SÕ0lìÕ£ïðj¤¡©•2q¶þ^à#Ä+_9Ü/·øVHô_¢-ÙçóMʳ+‹À°ô IDAT[ân‹f5›"{-ͪj©ŒQ¾ð tuZ„aüÛ7 ÞŠ#H‡GΨ€ùCV&ï\æøôiý 3|Ôr {EOii$É;úøû}RZ˜‘—s—¥ÞU¯‡K‰M _=ýuxÄyIÛDz6ë`:I›þ*!e·ßO<DÜÄÎ.àÜ {³¡×wû°õYœÀ‘ŒÐH¡ožûþ•V'{í>—w6½îÏ€Ýq1‚_/ I§6›Ùkfï;Ÿ&£6x¤qXwj’ŒÅA †æW¯-R% $¥dL›všËå0àôÑñFFZYY%²¨ Ù$0÷®]”ïT‰û‰Ë¢÷=dÌ Ìw:ŒíÃVÉá•mM»šù°¤ô½h#Áõ»ÄÄp]JTbÆówh×:—itˆº©(2ù<”ñ—лìÆRJä¿#b2Öòí-ÇY[[wRW7³véoëG:RJ Swoš.dÓ»õYlnå cãÊ›S¿_J­¢ªªYgY!@(÷‰èêYðkª˜Jj¦CËŠ=¼s²œ[ü™ÓÒ§þ§©ÎúÚéÙÙõ³×„† ¥KiñxµÖ`ž`Ðï­&ŒÞƒîº÷’“J)+”eœÈð„Òe¿4bxÃ÷šëåõ Y011ñæËÑŽŽ=d1ëýììÆXªÿoåo¢ü»ø$ÊÞž÷—ÿFŒç,V/L::é·âÙýåÜ„’”=ñÍô¤,EfAq“Ç¡µ™§{aRQÀ™ŸÔU”©Kª×^s1¬âÀ­;TŠìÙk‘]§ÉϧÍõÁÇæÕ¿[°lÿúׯ_Kšàñ^z¢wg¨úûü7GN«s¨|“‹?àÀ|,†††ÙÙY`"6-À– Õû¨¢$h¶¬Ü\¡ô6wنͺMàdnBzóêŽ$›ßä±N‹Žýì%Ú6ø€~óæh–Øp—Û:Ä-ȨŽùâ馕•°‹IOÏMl[)mÕ¬¾x‘“ŸIαî‹gÛ-_ü'û®nIúÖßóÀ[¤E_ÓÛñ‚ñ‘¦±ñÂøÅ+õf‹U ¾ e÷·‰f [t•3¥YûÅd±–>Ù'ñúqµ˜çÖÍ¢s·äòW?Ýjð­Ó5[yxxïýb•>ä(Hö<²ÙÆEk5g*YÑ„“å±ññè¥Þ!¾ôÇyªž…‡ úç¯X3TÚà§5¾Ï¼Y–pYXV¢«¡%ZË/?O;ûO鸚"Y]V¬r]$½1ÁÀØøúåɽÖ6&ÑbÆÆÆYYY´iQeE܇Ža*'=ƒN=M»•›UXR,Ñ(0™·g®þ™¶¬…ðM/Ø—y9$úoªšnÝ8Gí9Fm¦R¨<ç¾¶3ÏÜ’øiÕËN>“™úøeQ^p(%CEÂ&sRWÒ¿$;¼×Ñ "Z+\ÓàÑä^{ký½?Pß„Í^‹&áóêbfðEkiP+Óc}ìÜlYDóîÃEuQQ36Tu·°€ßlö½8¸•ÝÆjw1VQV ?´–º­3¾?)eÆÇ7™€127Ÿµüœ&áß°Ì‘†ç®‘‰ KIéÁƒtgN_xkôûž£k5–¦]>½0.抛žuã:6ÿòe™,ý”eÚ¤Y·òöþb‘5ÀÊñsTKÈøÍ94=ý±X”UTUͲ ´®ãVÜýñÂ…#W(±!ÁþÉ'Ζ— ì•y&säoó —8}$.‡¬þÃÔ<~œ—ÔÐx¿÷íãgßTUå§åœýçįQÀx»lVÃÏ›ú¹Jl“¹èÉ>ÍÁ˜Òy¯×½uQ‡Ç\¦/ñœ†ÐßßÜzç²ØkÔ/ÙÔÕÕÆE§Ž›CVpþw^ÖPÿßËÎnäÎéZVqBÆ‘i;Äö—.ñžææ_{v5é#гxñÂ|¿6·ÞIJz{{n œ”’é4rwvöó«¿O{^|álò•+O._RƪÝã5@`‚÷¨t¾û.ÚÓÛ%Ø×øàñ¸Ë0€g)&ÔÙÙÙmÜ6Ú¨‹rRJö´iGÊËñ·œÙ«½a „£cßÇ‹à’ÂâNa›?ü½Š {ݺ±Ý»Ë»·Ròi×e¥%6»|-?¬­·ÉÖiKÔŠa‘y~J¾žþŒæg2Sf®›™Öø\Œž¸ œÏ̃Ó4Y¬øð‹÷X™—õÛ“;ñi©d®ï q­ûC<›9òÔ1ÊËUS¹/Ï=O¹òôiŒÇT€È&bwAqõ%ñävüöŸ ÷E–¾|—ïþùs\/§Ù&†û2ãC¢£ Äȇ^ÏÄAã·Z÷‹-oY-6ÔÊu’ŽFE]ùó×µ²Ô"(FüÑŒÏÜ&˜rX*àôÛ—ygýŸ—©–ï?ú¨ýÀ¾§6©(©¯<º»2cìùCRЦk–˜sr{;-?ˆ”¦ÝK8VB¼øÂ¥¶±±]ûm«( `¸¿Ý}[[‰szá\꬯?ÝgÜÚu›aªfÞú‹Ý !Ì_Ð Þ«`°¿éèSr-ÚîõîÉÉ‚ ¥Pr„_SÓäµL²ä§›Ó&w™~—÷+eÖL‘´ÁcÃr;?sø¦¦ï»mhEvÙÌ+(xwÃuÃê!~&éëßó—ø›Ãd®y¶nÞ·;9f—™…%V““¾Î~=›Ãù_Â÷‡—deáv´„}FLt¥¼”fôòööÃèxÈ?¹{éY2.ú Ü?l2øX×Ì&û Æe->̯Ûl1›<]hAÞ¯ª9)ëì7’Å»Ư^¿JÈ,,ïåiX•v÷×í¢Êé)KVÍšëkú¿•ÇOŸ¾?z´ÛöÍÎðäÿ-òŸo¿=C‘s7C>ë¢Ç{ugaÐòK8ÌÇß«þ'çÅÂ9¿žƒ[&Áܱ£ãÒ9¿m[ížþÖ*~r¸_OB?óÁï'¶P£{Ñ&‘)}ü§}¹,x’¹ôöK*þ‰¤Ã.Ó¶7Z¯…†Ý^x8õQiÀ¥Å+¬]Ó{µ0 rróR!× ¦¯;vr_Ül¬×ÖòAn?Øt ã:ð\Zx{š¨µÉk]I½œœ<¦naø)¨J¡Fóß¼ásŒÝ@ÒáÛ¯áQTTN–rßõƒG~½é×ôŸ+|·¤4 ö°é >Õí}ר¿¼·Ÿ§ùáÒÓóèÍ ãaÓ߬7]H=ÃæÜÝ¿¶÷µ¤M‡7ðƒìòÜO1suŒ? ð~šôƒþÀ½#°é9¼ç6Ãźc'v‘oQØõWcæMÑÕ&«NÌH4ÉH„¡eÿ–3zÛl³ußf;¢ï©Í%¥8€¡cæÙ³äLÄ]ü_‹—^ ^a2lú¾Ì«¢6üõ„M¯5 ÛD}þô[ _P÷èý¤M—±–QýGì·Ç§@öe&lŠ¿JÍ@0aØ]ž1 ݦ7Øô*ûȃ9ùEVHA›¥¢Bâ í“Á˜ê·÷iÒ¾7ÁlÇ{š«WÏ#óàQ6½ìù•oÿ7Lñü߆‘¶~V:- 㽺¿(x$i…‡Œ˜ùùÄ£ñíÛÝ+üÁÌ(ƒFyvZ´ôÏÜ¿†®[&¦Êv—$׿z4%n»<öüBx\fròÁ¯ȳ<½¿yª/6 kÀ1óþksÂtðÈ_KJ*aýß”ßf‚dÔØÍðÀ1ïøm£•ô4¨²d¤÷ˆ0³6]Y]Ö F¸ÿö²r²²N.Ý öº¿§^MÎãÊJÜPj››òÔ»´“ÇX%R‰”f€Œ¦áérÜy3¼{žðZ ¯¾W—‹RÀclnÂ÷ ¿ß~™@?“9-fWW63yùäälÈÂç—¶æ&$’ï"м¯62Y+Ÿþ2õ·™0™ü³ßa¸–ºéëù/_ÎYr¾MˆA¯e{ö\¦l: ºa}ˈ/aÔƒÛt¿Æ.ƒøu dMuѳäW¯–Ì¢>#âa™)7$$–JÁ#rr{6.”?Xwâü—…~~øû LÏì¢<Æ{?‰9 ²–.= éÞãùCæz¯›SÌ]”““ ˆD1;Æ÷èÊ“A<“†jAV]}=ì—[–µ„D_%…-aï(<ÎŽ Š/t›éÄÆ`$KÚt<]NnœžvbYE?x( Ÿ–àfW÷ƒ¡Õ˜|@?KÈ€ø4=í „“<þEj rrô´ááQY)€îÜ$ðKTˆ.`‡‡è_„óÇ>–óJ˜Ì3¾Ë`NÞ0’3_€NkÑÕîJØôjà‡D_¤l:hÈÉÏm]ý—ÆÀòM¢¯8û~›h÷a)%¿*$Å|Ø;BQ1´¤Á“¦¨be6‡ÐÒ£ðMöŸ°­ìùÅ‚A-³7‚í¾CÙônææ`Óù5ÔûZC±oæ~!YƦž. ©Ù­õ#zûömNNNøÞ- &êEÄmÕ·ò¦²«ޱ˜Ìzá´¶v ¿Ê¶Tºv#»ß~Ùèìøø<îT›mA—"èƒD‹qðCâ­Ô „q“’’RMM e›ÆYC»è¯~LL| _Ó%Oö)`Ø­ï§£ ÅáøîP ‰£­…IÁä亀ýÂð¢}}å2ñóe0Là]Š‚ù¢&AJ3@Îmß⪴djx~Üyý¼«Ë§¯} ¤Ic¼Žý-Œ»&'§ŒÈÀñãÉ•6àR \ÿ¸ªÐe ³ö1²z ¸Œþ*$>þ‰––ŒU¥,5kl±œ\TìÜŒçé®®‡i1Ë6ö"=]ð{›µx_˜YHNÎÝx¼UÕQQhâx ´¥Šüœ%§…Ò544@¿?ÇÇ?má÷‡æ`ØËää|z)øÁoµ'R^›ôùü1ÿrj)èÙ±#.Iwa)©)MÌ÷ú½ÞºƒÜ8ÝYCì—_à~ R`€tä¬~l|àé}„ƒ÷c‰I÷è=;BHÞœ¸@ {5èü™Ì«œh^²¾whÞ¹ÇOàr–­;ѽÇdõ9c¨/8øæÞ¹N¦€cÄŠ)” ÆË±Óch{uoN~|¼mF’Ëi åÔ†Œµ¸˜ãnkçK?7>Ÿˆê™ÃãæC-¯ù̶ˆ4ðöl!»|hÜBÈÚñÏm²©¢ŸlvH¤ð€›è÷åú'7Îô ÉŒªˆaßoY)H—“ë¦ÄÞø] y Å—®ÅŸ»û·|£ÐÓ"½{[ƒßkúFFPWÃí1lÔ’å›fOGrc€ ¡ƒgðk‹¶ Þ›îb.šÿÍ›65nƒ±6fÖ« VêM¡ã>jÝÂø5C‡ZÅĤPér¸ÛDq¤·Û½ë¸©ÕÑ××éeÚÝÆ°öYQ/{M Ý¿Ÿç7 ¬tôñ3äÄ¥œÅ—ç?ä×Å{›†mæñjàÝßÖÔ†Tµ0é\VîK(¢¥L@¤ß-+7ŸÞÂ/MMÀÜ_MÅM?eE±®æå2鈹…¿[¼z^V·aäT?Cxk©¶Ü¿}„eE¾à› s-©…™˜¥ÅU÷ù7.$>ÊVa›w1 êmg¯ÕÚàýË8Ë/´aU¨ÀÛc o®®#BÇjpT‰Ëº²´üñOoþÞID„ÿO žbmX´té ן;:‚«®ªª¸þgŽõ÷Ù¾Üzçþ÷’«ïr#«ªxåUõGŽÅíÙs æ!ãW L~Ö忬°—;a)…«ëðÕk†pºÞغŒç/ããs¾õKì\sŒkh¾NóŸÎ,“+Èž;÷$õt˜°‚L!ÁÈ8—_]^ûöHæõ=ñ7…¾K€ØŸoí‰wpåà{§k\"öÖaL²= ¾»˜¿QÿêÚáø´,YkÁ0àÃYdíà¢Ó•lÔÈI¿}ûñ#@~—÷b¬úùÜßOSh{;NÚfiañCA±D´'®Ø5ÜʳA!õ?=p¢3y±ôׇjÏ/®X±„Ê£G:iimÝ}?â—)11øœ k~}vˆ§'Ûûó^MÍö“9u…©DmЉ‰¥D*„C~PßíOË[½sï/ƒÇ{ƒ'§AüÇ·GQZ:¶æf‰k~ ·ÞQ^åÂУšû4tÅ,ºXۊÔiÛ7ë6óá¡ì+õV¼3ú0"SVV®«««®®¦oA4ê×/ïa*éámV9 9µ´µ””¸¥¥€,}¨ÕlYR€X ¿†¾º†LÝx"£Â.&Ú’5‚§zÍYr<0ÚJJò¥¥åyy/(`,©¯¯¯¦Ö ¼a¹¹/(‡˜Øæõë×ï¡Ì˜Ã¯ZÒzPºr>Ã%ÜYúÍ¥ @¿Hz¢hŒ{_=SnMeÆ‹çbë57è¥ÝI%[ú¼ Oì“<<ÚjZJLùÒ*n^a>‘P]8b:újJ¬~MnI…˜(þBÉKk[VJ¢,hÃO :Eõ :8P—ð £ú"¥"¡,¡^³µ´¾ß}_+ œhI—„g7nÝžÃÇ!*2·°¨­©ÉÎΖ²—Z Ë¢ÄÞJºæ¶o'f}Hð´§¿Ã8´ÉëÛºdkáK6jþ¸ó[ÂÛbãQ›ÿ%rr?̉>6-*êÊÙŒO î6¹ÀQ·ë{ÄOñ‰J~â)0®A6ý¿G¨yŸ&ÝÌÌ1,.N0óüi6²ÕZ…¿œ¢€@ Ú4S—Ÿƒ¹V)Ämºw-m<2ë-E É#ÿªê°?‰šæ4´(±¯]ØòŸ5ë«™õO솠æ ’02díŽ;A‹aþ¤`:*`Å.b‘â³ðˆ&‹%ëhÿ9ía%Lû¿K¨‡„@“WìrhºŒòqÒ‘Í›–7äwôÿíd%LG¿¨ÿކƒÑøûuu¡ß6nAèh0ˆío;Y #¶o(!€h·Ô×W3®¹Ýöô:†|ëï*„@ >UYÿTï jW»CÀ¤s8# Nlkw=Cú´@ß°Oë~ Ö´cæÛ «©ããàd>( >ȬÒ¸7|’—è!ðÁ@fýƒCŠ"š `¦©c­£ß$©еñHë&Yè!ðÞÐñzoeHB! ‚¿®.ÿ5·îí[¶¢²"|1rªŠJÚ*DQBàà Ð~©¾ - M%•Â’BêÔʃ™9¹ó“–Ú²Ub‹îùŸ9+” GSþ=c5œzœ[•ázü„pn³×R•ïðZ0?¥³Š³oö±óâ?PçO6«^H€Ó³ÝqĤÈ0Ïù*Ž.¥#@ºb~ø'†1`UŒta”‹x7€¦}:a<úÈ ¹8ÆÝà1O§¯ŒñÉüh¯%QÓWψ MIë®Ü8þ¾Pø]eCŠà ¹Ú:‰Ow„BàC!ÐÞFë6œÏš+OŸ6ˆÏ/Ä0K£¼¼|å»l¦òCm†Àç¨>Ž®œƒÈÍÜ{ðII@}Þ½kï<ªÊËËpÑjh*ƒÇëutC¿#adYô)­ƒ£Ø,”ˆø€´7³þ¢ÆåXFûˆƒÅ`ÀD0F`æH´S°å2ÿ½Ø*åµõƒôM‡ö>“‘”p©q™ ƒÑ‡¥TQK=°|^ y´5޲ÉtÑOj% _¸‚‡NÊðøÀõL9fÊõ “bóK^9‚Få’@—§âÊŠøé½ p( ”–½„¦ª«C|÷8,}-M­/5yîÑ–QWí®ºÌœ|.ä’5âeâ¢@…^;Åa™ºZ}¶Øi2¼æÄ¦?!å+++ß¼¡à$ÓÐgÔ•ªjß4IB€@óöè#TúU&dܪêöý€¡®‹ÄzôRðÝ[q-1 ÎáÕôU¨¿'F¦¾þ¯FOÆÖ‚  VžKŸûj™Ã´¼—¯Ãë­ÛÕ0 ‡§£¡úÿ:X%Ù\èòX}n^­ºêW@Dƒ­MÏ.Ç×·\{Wí0äþÄA àÊÏ*ÃÆß?{]Jd“òfwI ² žóqf|^ÒÖ¿ŽÂ°褠ô™uÁBbï@{­c|þ´×-ؽ½ô#aa±X—Ý}¹ü‚#·pƒ’*ÈT§Ôë© ;z°©àVîájÕ⊊ŠéÁ¡ªªvü`j lµ4ññ5xiL0lIB4ÄImš*øè˜TäÕÔaéºáÊK ƒ?<°˜r–.ð+)W ñÔ8Ò˜oöZ4ž/)C~Ò•Kj€.?¥—ÉÄ+/+-IàÕ„9Œ$õøõ ®’¤'yø%Ÿµæµ—à+…âËÞ±÷ñI]ô% &&ï¢oâ¨gä0ºŸ‰^’ÉÄÎxOÄã(H@@EAáu­à=O‚JF|Úç.Ó~&ý.¸gbàà®á°TŽe'.½hÁÊ“û>Kˆ7”ZûÈÃÇFO7ÅW¡`6a`»Êmj ‰1 ª{ô~úºHüÆmê|ã„’b{-í…IçÂoߥiÂŽÃj²,|~9`ÌnÛ­§/j»OÑÃod^bäS^˜ÃPˆƒ«66´°cÙ7–^C/¢ÊE ¡©•2qQ Â*üÐïùd\ïÆzyfŒß·,¹Þ[K®ï©í%¥¸›‚½…ãÿ,»x…Ÿƒ8¡a²Þží§ÕX÷ùÅ#×FM x`€Ïåƒ3AžM ‡oÈxž9suÑ)¼Ä!py|ð·×/$ÏWq( !ðþÀ.ÓöiÖIh`Ð-@ª«ëeö€ŠPóœBÃÐ[II©ºš'‹>rœÓ‰BJD/aPb²H¶¨Pùº@ŸÎ­½e) FzPÈÜGcdO¬H| ¯:ÙqnY¥íEúÚWóf\9ù¸¬¸½tõãSDÌz{ó­Óa~s†I’MÍ`ya) ½ )qYÌ4Y\JBú[Ô(+»f¡Š¤\‚Ûª»ª`Fœ0™üËK|²éR@#³X ŠÈ·Þ,JHàýhÏfýýÑA„¨¯¸v%lè—ë­G.¥ „31‹a„…Ñ5  ÷Òf©–ðš,v¢å£(Bàƒ!€Ìúƒ²ƒ(ŠO»a’v£ƒtöv³‹J§Š7ÕhÝú„©’„@»[ #©£(!ðŸ" §Ú9¯²ü?mª¼£ ÐAÍ:ÌïÁô#Ñ¥âd"|ÊòÑd^pè³àPÿAÄzJãW°¹AWª¬ÿ q ü]/£^g¼g(*¾Ç둈rª–Ö‰ü0&˜èË2Ù°iFµ™ZôÔÔó*^µ™æ¢†¶ed2^m¹ƒâÛ¾ÞcvNàZøË ú¶É 9¹Çxbd¹Z™‰/LK½rï²}ä~0Õ*»ºfÝ:ݽ{“"ÃûþÖRËùÒq>¦àdæðTæ°èžjžrZ+Z…å1d/CµaÙ…=?â{Jÿƒï ÕÙ›ý©IvWUFëŸÚ]i§íù~¢Ÿ’Ë.ü<ê*¾’ ò€žzT“zY{jó‹ZÃGåŠää–5d”Œ½zvSü2!°Ÿõ)‰éÏÒ ö¬9wô«ká-£2—“KXn¤§IjRÞPg‹ÿü|G[Y‹5mÃqb •¬e?”\Ó6|(­­¬GOU9aZó[]û4ë°ð.qæ7Ò}…ù‘yòøuÀ4@Ýþïì¿Èá)lìo²_ÔWC•}q K̸Çk`ŒéÆ0Ï€¬¶l1•9¬§„íj¹hèÊÉJ¥5ŒÞ,Z\¼$Þ|Q'½ °º‚”µøïÐZÓ$D›¶A‚ЧžlÈÖÊæâü ( >6-xÿØMù úáD¡èñsY°Ë¿ÑJÒœR–y¯¬n­e/`IJE(«‹nM-ÝfkEQ…“–Û)·¦ÿµ%î*™en`éî T3@ì"‘Á¸ä³XSAakêïW2žÿã³r×[ îå’šºªO_’ÊœäiYìä»ÈÜTQ;`W¹MžnbªJ2ÆŸ>ÚYCëš×× !rÔlõûá£#Håá·@Š(ý:l•H’N6Z¼¨R>aj“6\ØCdÉyô¶ÝÞ^köeƇDã$ $±Õ­‚ó›äŽd¦’÷±E©g#Ÿ†B½®Çp¶z]ù;¥9FjýØJƒ/‰á׈Å=%¥•dmës@·ß\;ß¶ÚŒZÛFho£u^eåÐ_7.àæïˆ ³æ·{àŠ‘÷¶¶iß^Àôò’OÛÊd&O^údzx`-7 [ÿµù°]cÜA²¯I¿«î¾°ÙÒG\:.¨©¾~òåÃÝX*ZÊŠÀW>,bXücÙ·†œøùÒí+•9ýË"ó®P¶_ä~?C; |3hb ‰™Ñ¾•ÝÃÖÛj™M±ïWVVêtf7<šæýétêç’—/)å A,ýº’tª…B\ðbõ„1L¸ {*?ÞX»÷ÁÐД”@GUU|z$±ÕC«|bÏpXª.Ý4¬¬uŒ:ì¢Ó'Úg2”í5¼úL»|Öw{êœÊz·Fã5Á¡mÚôl àn,ªª °E„ÀÇC ½™u@ ¶bæUƒ#¥ùÐIAèdÓùuë­@z޹~ræ UåFÞ®qÆ*cu?þ ¹Õ<^HJº§ž-,’YhïÎåç‘ÎwpS¾õ’²RpY¡àe!ÄÓ^‘›])*sx'˜¤£1öêi«­âVcµÜ*Þµ´?&ýλ@:>[_Ú€‰1¿¢ÜÚJW.‰~]Iº M„/ˆÎ/I@^¤ DzmÀÙÓЩS©8,jªð)­>+ï)<ŸfÇ]¯Àù¾:ý‰ÛL]]YL¯1Œìõò/¹ §Žd=/ÂAж6õo§çßyOÛT“QcÛ0íÍ ÓÂ[ó|mù÷ß¶6»ÆžÍ¼—"ˆÔÖÖ üìªêä –l•\n® .C¤Hc+T˜‚'镆ŒÎjøaLùøÀ F²&{BéjS÷Y𚤒 ÐVÕðÆ@”P?bÄA¿žO„†üïä´/Y A’Ž?Øp~^)A²z!Ñ6Àâp¡(âô—‚€³Õó*­žÅT¶úcü×¢þwªU1ãך›j©©À²Ø^ƒRreEÕ Ú††šÛÆ7Có“ï´¶¢V¶}¤X¤¶ß9©=¨á×N2è‚ý}1ùßÖÆSO¿×ÑCT ÒóËÂÊ+(Ô¿yƒ[ö節¤ 7ÊY@ήÒI 424CLi©«®Á îpÃGò£|þÿ4~±§ÓàÀà^O ¥ I²œ7ÑÖúu1Å)]2ë¡”HzNHc«o¨ŽRbÝ ç.zU 'óIêuC¡ÆÿTñƤ6ƒÓ3l»öŽ9ÕFÚ‹šÙæh‡N¸'šÊ0Ÿ§ ¢B,Vd0þ M˜)t¯,´{²™`·oÞüÉ­Êá=©¬Ä­Vw5à±R`³ñ²gqÏ»Âôñ² Æ*ë¾0ÝN‚œ]$g7Ö7Ko yAPaõWTœ¢22ôL|*u´–&N˜å5Àóôøñ]T”rx…`Óa&´ J1Ð _K[úò2Kýº$’ô†¦áÿé\ð’ô4Ê7mCEÒ»Óë’ÎVEˆŽàÖÂR[›4nFee•ø^2nøUÓ6ùméã«Þ6ÑÙ+Þ ¦õ¶t×Út[Û1/ñ í†{²0)<<)%%(Dž_ÐûÀ®†dl‡×¢ñ:ø¸BßS?°Õzh+•'fäßíN¦b u°³WÜ}«øÕpv3¹F…ȇŒœ5ݲ\~I;$ìŸ÷Fª¥Çr}^ìÕž÷º¾§6¾æÕ_÷[ªG¬®^áG'·Õº?hK(yÌçöZ—ÿqäVòå€}‰U’6Û— ñoP‹aDé×i„ébØäºEç‚¿ã&RT%IF¨6 >ñ§›‘øÊ>2ü/ÏYäã«ï© °:E[=ƒ·à–v6S1ûtÄÉCà¥Óëäèi}œI|ÀÍÿÌY¡6ÌøB-üÄ/÷×Î'æÃE!ðÑhç|ë~0Ú}OÚXXƒt!ž[pž@J¤*m6:¡,¨%%éÚ N¥ÃŽPIU€˜ìüïôö@A¸¤ªhV”6ÐÕÎâÙêŒÌ Ï#6•T@]ôîÀ%•ªItµd\Æ6ˆüoSìºl2ÆéÔOÿm3Pí0ëíÓ #t ßÓ¦ƒ6XøA7F¤~°A¢‰BUK¹t+F×FO—RˆÁ¤"ùö ¥"Ñ,(J‡¸t=RÚ@)ˆD¶z‚Áª«6T$¤ŠžBo]-*(*ði¦,°¶ÿþߟfÛP«Ú+¬·×›×&ú®¡ÌÀµà® sð?âåÙ&Úü¡i­£ßSCûô£{J!Òƒvç[—¥ÓH!Ð*ü–«|p«UjC• p:ŠÝm„@ë#àbÐËLCçHê?­_5ª±ƒ#Ðq×­¬Ï`ü=c5¬úÈ­Êp=~BöZ€€å߉ ªøu¹U™®ÇRwx-¯£+é‰T®Œ JŸ¢k|ª8û~ 9Õ›/ Ó˜ä̹ÈRºû»yuFBIžê0 H``N¼ÃtuôSA™õw¹@ÿ]]-a®²¾~ðÁkÓW©)4n”¥XÏnr`íÕ©+ÔšLxÌ?³óZ4P­I¢, a¹7KY™Ü¨ Té/œü¿5×—© %Ä`Ü \K®ÍáU¯ ä,L:~;‰ŠLîÔô¦Ð¥p;¾\h;,õe~|.lQ@!ÐÚ´ÜX´v ?½úš¥ÿ~û6«ê]öž€5[ðê‹u æ€ñvðy°”b'~ªôúzë=+x5°WË>lp“ÝàVm³ýÒÎLORåBdîB—’Jµ³ôF½Çöì·ø¯sí¬_¨;mdÖ[~§$ÐÓ÷‚Jë$©‘”$(Hg¾ÓD•ÕpÈ}-å ߨËfª¤esk;²&áäª Nö I ¢BdîB—¤PK»/Z˧œ¢¯ÖùÇ!³cO—Óˆò?壶µ?:¨†¤&_s`üõãnãÁ¾/óæ®¤Û—½æÂæOúnR!Bpat‚þ›¢,Ïá¹D¨¬ÄI¸Ôt;MZdnì`Ηö§?{'ª«Çx/$ö—ÖºGNÎÌDeëÔ¸y¶lUà–û‘Æõƾe3»l9ÕÏд½zäQa镱³UTvWæ»?`oáÚÿ35ùçv——ãµ;[¹Db|qkK¼Â@HÏÅR¥o< ÷¼ctByB^øCI¾ñ`èõ/CGh1ƾ§v•”UUº-KÉÆr´Ÿ±ëÎô3Ì/Ó.GÝKæd¯­bWu(Üe’ºsgz2IΙwoöÁ^SáÖ|z×lͳžÓ×'D'<ÿôZ‡ZÔQè £u N M¾Ïaél¶·¶~aÒí@“ÏïO ~róW×¢íµÌÈ£æD ÁE)È{ýœ³‡Cä&½½«´Y:†'¿;lfçû/ïµì>vÎmžÈdÞõY²øæ¯àÍð¹që’Û,8¾““K Xί͆DƒkÁö ùÖ¾‰*‡Ób8ûVG½:ç<­"í¢ÓýìódHH‹¯Sј÷÷9Ò¦CÊŸ)W÷eÃ3£vrôQ¿¨ð%b¨Ò÷û.3R.†Ú» g>ÌÕÊ´A˜þwÁ‰"Çœ=€¢øì½0Á ½þ.é7(˜À“¿á56#5!sONjrùà‘Nvvu&VµòÎ]ài˜gn@Ü—<õú=½)Ÿl¼—¦NÔ¸Y[“âN?ú÷“m$jXG@ ƒšu¸µ·rñM"“£ƒIÅSÉ@Ü&bЯÇ?¼Ã]Gޤˆ!¡ ÿÆÑ\Ï9ù\°k©¼škùyPB÷ãTP¾%%•¤óaå»rjøJÆú†ŠîÙè¦ÅþÒf -ÿKÄ€”ÏOáŠeŠ—ãòŸ§?Ë……(³Ïÿ Í[7xhrfr·j…å`¼2&Ó+HÌhdô†å+)¯Ê Þ—Åä¬).†‰P¥3™#Ø*—qºqzhéYp¨=!ÙäƒÃ2JXv{ÒüðÌ;F7%Lð.ÿ÷Ú•Ôl˜-¨¨*'5°o–Næ.t)–“]˜]=÷e³”ñMZF»``8ËæÆ›Yÿ9qî‚?ÏO“8Ÿü_µ ÕÛÑè N¸Í¤¯™$gÔÖ‚E£Án¤Æ…A½XBp¢¬`³KI•/8ycLØ:ê D­„¡<ã”á(>ÌQÏôeu _»0)6¿äµ5”U¿~ uÊøü$^fW^yãÜ w_N7­þ†Ã¿úSüÉN©¢Jï¦Ý ¾:ʃôÍXLƲ„+…¯ )a*BL™’n* ûçEn‚ÿwOËó9êì·µ%bâ9Ù SLgW§ßÐ$3.Ø|›¡~}¼¨,'ÿžs˲^½Ì|õòE%·krÞ¬„¾c2[QyîgCƘZ¹ŸÙ›\”÷ŽZP1„À‡C ãšuq6Î ’¹RÁ)úoà^7ÀÞPÚÄòU‘ƒY8÷†Ï;â£ðÿD€ÉCŠ)(+×óx²6û°”‹ @ÁÓgéÏÀã¹€Ë/î}@Œ9Š1F¬}|QRm‰Í½ó@0Ò‡ö“m“þ Þü3CÝœ/í9ÇþûmÉeÒ ÉÂÉ.¶<µØ\*qÇk°M¿»ª:ùg¦©3ʤIç.êŠÊOûþ¸¬8£´èñ«b0÷d9¹‚œü”>v l‡Åd§8½ûU u4Õ(Aüt\³N§ WVVVðNŠÄ| ÁK§gÀÝ Á_€Kƒ¾õ¯¿À×qöÑ£­Ö}=ú[EÝ{3¢i>sô÷®NsR(a1å8,]Ðz%å fksjœÏøÓ'ÀÚ‰¦^\ pŠóðõ ?¾”ly>¾<¼i€)S}òmpåƒÓfÅß×Hµ ·Ùú&)º©<~õ_ £¬ßU'¯ð%xo(ªt8„ê;pÍ?ä×…9øX<ßY^^ÑϤß%7{½=ûèÚØ òê ÂM2ÑÒ‡‘ô³¢"hó:|nÌ@ ÈÜ¡FôKàdw°µ’ú˜½òþô•¶G¿¯|¯¥³«SmÃÕÉã'0õÔÖ"ÏõÆS$’çU–ßH'E#u­^šº¦»Œ3ë;?a±ÊsniFYÑã²—ð ¶þyEYeKøÐûëèO0ïÿ¥©Õíüçã"†P¥è!ð"ÐA9aÀþ6 ãÔä§$ÅyPÂqe‹æhÐ7‚Å 9}º¡!q«-NüôíÐ)Sôtá22/1ò)/Ìa(ÄÁÕ›NÁn^pO>KeßXzù dÁ’˜~$Š×¦qk,Ø`C+ô÷n¤ÚþNþëÍÀÈ¥q+!÷«k¿Æ§=&äq¯zÞÌœ}kDW.¡©é“—uUX…zà=Ÿ("L•^QùæŠÏ7f«;†½2:¸Ø*Ê›×SüfàU'³hVË~A,Ñy¥¿wËÛ1»m€LlNæþå€&—¢œì×f®¡³«ÓÔJ£Œ4ï]ÿÁ(ÛD£KÏÎÚ0¢+oªÑV°ÔÔñÁo“SQ–WQþª¦êU5FßeÕUJL¦¢<Š(ÈÉYvénÑ¥koMݲj¼Ddü Ÿwm*‡ø(t¾õ÷œÈm“(©Mˆþ² Ê•^#”Ň² ªpaCQAæÅ„%(0— Y¢»[ Ì—ôÓŸ}!VlAP+Ç`4©H¼¬ÇiAû) T²„T ]‚ßI<';¥ô?Šh±:qÔ:÷`kêvRÓTVé¬Ä‚?¶’2¸kÞÔñaý?|¦—>,ÁÿŠª`.„À§ˆ2ëŸâ]‘©MÄ8z_Ê?ó-?³<B9ëe*‹„ö‹˜õŽë[oÛ·µ¾¦@WXt¾´ Ùô¶}+Qëê[ÿÐ0"}„Bà“@ñ­·5!€@|@F&ÌFÒvcbïÉrN’§¸ö‘[sòa·çþ³ÆÈÉŸ´Ô–­[ü¨®^mcÒ¹ôç…·ƒBTqNù–‘Ñÿ—ð¡ºm ™öž´µNµ¸½°ðIÀr&í,çEeèYš×{ë"÷7/G,n,”—Eº%2ð "5CcFìj¶(¬ÏЬ˜ìQÓWψ MIã°ºŒÐéîÝË6G :°¶ç½!7“Ê® I"²"€Ì:ŽÔ¸þø²ñ‘VætØÞåœÒSÛü"¸f©Û)u-4Õ\ð²˜d¤‡ËOÊϘò׳í?9üèö±WÏnŠ¿ Ä)/½m(!€öiÖלšš¼ÊÕª,X,°ú\l£í0º0ÅåBO”¥o~D*+u»”j%d‰Ó\Ë—v¸Ç‡åFo`,ð1$fÜãñ$Ö. „^¡d„B y>äKw󵵊Ä3×ÈW=·Ü?Üp@˜ÃWë:Gí‰O”R³®v×´¢{Q&†]µÕhûÔ…YÎIŠÄånSg›“ í#7w#lŠž´Ä€‰ó ˆR–ÃÎIàFWWPt8³íå¹ÆÏ†-;[SÉ|qÍëk -ˆ)Ø(‚º]˜‘¼aÃ'© ÉL%‰Èc‹RÎþFîDmž¾ ç³êj¹ËÍÙž­Âå—Xþ™:šv-5¡J'¸Ñ¥w ,Ì·^Ê%1O`{ÿÙÞ"wÆ/I(-`1Ùš ÐåðÛ(2ý% ’A—„@‹ho£u°ÑVLù 9ù9Gn…ÛüM,¥#2gÈWK¯ÿ¾æŸ[Hl|§É7a9âïnÝ8³M´dþ2ôQž Û÷“'/ýãY<¤˜„­ÿÚ|Ø®1î4 Ð@ÄE‡¸Š“QY9êÂ/ÝX*ZÊŠ¢ÔíbÉŸØ3pš¨K7 ëk£»èô‰ö™ ù²Âƒ„98Ϻ¼ʲ™Z¾¬tã|`BÜèÍvJ ßz£:,.õÏY7¯BÂW×NM:6ùòa²Ë4"*–€^X]#-C ½™õÂ’¢­éIW2€Ù=pª€Lþ”“›¢Ã.¯”ƒ³œaÁŠŸá@ƒ¡–s¢¸Ú†‘ãÔÕÙîG7d¿(7`¬2V÷ã_øöýj/$%ÝSÏ–¦/‘þüágLJóÀ0. ú¡nËHŽ—'BVÞSðÏŽ;ƒ»§s³V§?±`›©«+ËB  ˆe9»JJK¡ì~É<,PaBÜèÍvJ,ß:¥ è R‹qÖšÇÅ/@sc—) ""–€¾©ºB ZŒ@»s¼}»%î<Àç}¾éŽÕö½ žˆœ„jD¿/˜XÝ^÷©@èRÉ«Ò`©|nnŸ–- dËy~~ή̬Ù&ýý ûçðò‡œ —»ÔÖÖ2È"ªêb$’üìD:nî!ˆg$'ó>)Rø˜ÇñkÍMµÔT²rK›%…‡ÒôŠÊkaìÞlh¦SÒùÖÉþ*H]Z#–€¾Ùf!„B@:íάCwŒÅÃzƒ~OIDAT|f˜rü¯JÌh`:·4Cîm½ð1¡ëìí ¬쿇Õ#k7Ù µ5ëF²œÛ™}öcìáõ±r®}†þâ0|îç¶|ÀP^A¡o¡ò節£UƒÎ.ˆ×׃M­â7¶„’‘…‘œ¶îÖj)zU- )î~0¨]–ÿa¶AïÀÚbLá·¡S´4ñÍA`UMn€E÷[Ó/J²éXS"uzÕ$.Ô¯/"v9F…½M‡VIbr÷vðy°Tˆ?çƒô)AtdÚ§Y'ùÖÎüÖÎÌDúÝÍ|õ¢\ðvFâ3¬ö=­XôS|èM8ïÕ2…T+ø–Kâ=‰Ï_ž„.¡¢”dxà½~ cWؼJ^ŠùG¤b”«GL‘÷H*(.ÈÊÍ—®@lÕôD±Lî ³²ú5¼¬½Ñ J¯å"bh‡Nà[/,;õ9Ö#Ï98Vm2,±§Éó%ôô]8jƒ÷ü°jäTGM­ÕOüÏDžôž×EA‘[›ã~Š’—‘g’Ëô7éó†_ÐûÀ.HeK§Ú“Ã+r9v|L -KÉÆr´Ÿ±ëN‚ÉoÁÉ~ÀgSˆñ]Ä­-ñ ?Ò,Ã;Q} Í ÐÞFë@|ë[ÿ½ |ëK/ï¯À°Mƒ‡7ƒÎÊâ»Ø/zL%ÑëcŽvf«÷"h[|#~–SQÕSiÂÍÒ¬Âf´Yj0,õè?bŽ!g_æ_pG³E@@,Eû9g§¨Àö>ñZÜ%·æ$M¡¯¾~ÚåÃÚ,UO=ƒSYÁ¿¤¥Öy¿ï2#åbwÐ<óa®V¦àØI Xί͆Dƒk_àgâ_ŒuWŽäÔ2z©á" |M¾ìý:+Ddçc;0ÝõY²øæ¯PÊçÆ­Kn³X,&ç@{"7éí]¥ÍÒÙà4D˜Éh|ü™ru_vŒÖ'Gõ‹ o–ὡú@4ƒ@{­çæßúܼßL|Øüwq3>ÔQVí¥É ,7ø—S¸U½‰17¬fy^UCÆ›ÁRælš ™nâ èùLÔ½tY‹ŠP´/ì–Ã{š•‹»’n¤Å?êæänv„R\çàÐ ù÷Ò‘[Éáÿ^áÕÖŽ`«ìL/ãtà jà±jc¯¢l T3þ—Î⥚ö=2'{¥©íVî= <+öLIiÕJEEKW@¬†¯d¬o¨HÚwÓêò£Gï ù”JåÕ\ËÏ%™Ü5°2¡©QX”òª ô _ƒ× Èvhë$mýzKÛ¹r—„\4dKÐ'B! öfÖrç[g2=úYf;¼˜÷tKÜM)ý'³¶%ýQP\u·´àËŒƒÍ–zg}aRDøtØ8º×ÞëJê:’ÔW’B×Ó×Ab^—Áºà|nãéÓù¼=qZÈ·0¬ð6µë(k Ò7c1Ë®¾.Ôײ†9Þ×ø¹xÂ~ +Q/> P‚U±Ç–^Þ‹¥¤Ê`8&l°:q×À‰Ð0™Ñ û¸Ò( !€F Ý™u¢ƒê:}Á1¬«å°ôÍ º§?¿‚x¾uò´‡'™É[2‘&LpѤمÔHSY±“-ed‹ÜŸà9+Ùø©ét6öáý=´KB¢ÿ¦ PÔíÀŽ+P¯˜6K©‚p‹Ó…éñ%…ð®›{'æÁS2VÊáf]AY¹žÇB/").–-=‹WcÐ09 e¡#mz³ ï’šÒ!Ú›oì8‚g_øÕ1l]·öªû °°bùÖAX˜Þì¤(L>ç©+¨Â@f±U Nj¦¸Âá’'sÉÏG%0i©°ÃýKò–™G¹ûþ‘K^ªvê£Y’|&–§¤±™]xM ç ØØ1¼öövÏ*`ÅHChJÑ~05…Ã2"×G‚_Öý,I€Å”Ââ:g¼yó_æà£®Ž»V`F!'pæ…—Áí~ÌÃ/Æd õWSY™Í<“H uyéË–~öÑ#hG+ÐÏ \¯t&w¼Š†ð_ £¬ßU¬³ ï …Ð„B Ú' °„Oµèµôòy²ßîÆ°µ€íE–FŸ ñ­ƒ`]ˆ|¦þ.»XÎq§ô§ž~BIZFµVWxò‹Ú® qœ7\fÙÚS‰A áQ÷ð•0M7¥«k.¬°ÁÏ\Åÿø•Ú¬¤ê`j‰íQðÅÓçT…(Ú¿q›:ßʤq_˜t.üö]ª^ˆ\›¹Æßc…‘üæ®Ý+>ߘ5bØ+£ƒ;€z–¯ÀT'Q°6[cÁ†ÇXÅ´„ÔCöx/Ò¸Çÿ~ñ¾Ïòå.àÆÑ˜.–-=däô醆„ªj‹ÛËË_ 1¹YøKU5}òRBg…þÞ½zˆÐÖÓÞ©R(‚@HA ò­û;ù¯77ÐßB¾ÚßíŽá&.[Ê·CH0}*AéY0N6`pCK{‡\!"uh§’’R‹¶žB¨· .ƒ¡¨ ð­eKU.š"è5ƒ!×À²@¦Hgx¬P„@‡B šu-M­»üU”‘•󃽳Vk±£ ¸¼CÝWÔY„B Ã"ÐÍ:~/ ófÚØÅ¯‹ÓŸewØ»‹:Ž@t@À¬·Ç•0õõéÏɼ¼ÞwÔe„B =#Ð>W´ç;†ú†@ ¤"€Ìº˜©“ ž9¢ÿȼàÐgÁ¡þƒú5+L ÀÒ‡Rœn°‘SbØá57ØÑ¦XÓƒ¿SWo\‡NhV€’”5Â`À"™‡3×ä/ûèŠ ÆßD]1¾>¢ÍJ÷ÅNN¢é(!€x7Yà;}¥«•‘t¯Ü» bà·ð/J—&rkw`D“­Fb ÖÑqéÖC]“+³Åì…’&¬å¬–oŽ­¯z`Íî'°)éc}`… ¼¿õõƒ†áT3bº”î‹Ìí‰ó·Åbƒ–!ð±~Ò-kÅ- g`#O¨MócÆœ‚\à1iQ(xYظ»_BI  ù»øYA ˜>¬’'f¿÷a-O¹"…_^BceMnB³þö-EU/TþƒPº éD—ŽŒ@{6ëºÚ]3ƒ¿‘ÅÃ0á³qð%€í‘b M¾ ô%ME.DIÃIî_AAÂ_/^ÄçåÂ2òj¬öõk1O)bYË%U$”þ¦NÌ#DHæ/ÅѬ‹á–…Òlƒ(ªïÜ6T!ÐŽh+aÈÛÅd^?[c"Eoçó®c¯FÁ6ËŸYo‰K€Í«‘î¾°Ýž¤#§V¹Mžnb &”dŒ?}l>øè/ú|cAìá.C’Ll§UWË]nÎöl.¿ÄêðÏB»œÒòf½:ElYRŒØ‡$g+!ÖrPBíóLãæ9û '¼£*Øq ˾pÔÏi´ìR  ɷ¾3=y¶å@˜(ˆÌ»7û‚`{­pÁêºó>‹EiÖÕt;MZdnU;_Ú\=tJ÷ånþNÚÚ/ª />/%÷èÜ8óø„±®Ú]/yé2å¹ü׉¥å½ÔX#ÎíâxÈB!€B ÝŽÖ¯Ï\“žÈ ôoæÝNÄÏE™-DWÝ}çÞ8 Äâ#.§Æ šhbf´oe÷°õ¶ZfSìñyÔ•sîƃ¤Å‰Í–`šŒg˜ƒó¬Ëû£S¹ïœ2…àT&ò„¼ðÛ·èéT\’€0k9†íòþßtÃΜ}+¡ OkÕžüOè}åG¯E+,ÍLÃÖÁ!|'sq42H/4;+ïܾõyæÂÖ/LúÇS¯?9,¦ ƒ!–fÍì|ÿå}Ó°õOøØ9·QP/Ò}}̯@ïî¢Ô’¥FC#‹ÊÂêB²é ÷ ýG#Ð>Í:š§EwúžÚ.‹ãx‹Ï‘ôLxÁ¿šW³zMŽ¡ àZhïÎåç‘,(éÏÒ)ßúµ´?&ý4=:wArU_YÉÏp¨GÛׯ_÷=u”Ćóö‘»JJK³r³ðëT˜ÍÀCc;³~䟱¾žðM£]7°–×k9ð«ÃÙ7Γä‘߯ATlM{P%à¤É:ëRþàñðCYúç Q³AøNNkãy* OºH•%Ô'iÖsx8Í:õjÜ21R!eKJ* ØA°¥»ºÎZ3«çòŸ¹u Š'–ÒÀ,€ï/ƒ'tÚ+œ7?öé?ðzQöª—G!€‡@;tÂø:úzjUëí‰ÔÔî*®ËMÒêY¬á,%9+7Uk0µ¸µý~àP¯gt!K¶J.7WÂ`PÁ–ÅÔ}¼&©¤I6Ý©§6ý=uÅ^û/1û/·¦ÿ¹%. ’T½¤à†¤+fæ´›8rÁº?!VŒžæ¼7ÊŠø’˜ð|ÂCiÙK0¾†êê‰ä5pO +O¬¼Šò‚¥)ͤ(qîk\’¾Y 6TÞ¸†Nã.)^Q{¥ðP_(3k½µ{|NÕ)©plÅxLæ£O„B€Že£è‰m8“–zz{6R} \Õr ¹·õøôìè7'áר{ÉDæ{jY**ž¦Ÿkâ}UÓëëÁ*“œfXl`)Á¡äÜÃÊzð5p,ç¢Á^‹Ì‡‡§ßÉ)¨ (`Ho°†ô6ˆÆÏߎ„?Ñt))d7ë‰)P«®ºŸMÔ`ãkà³ËǶUUøézŽò|WrÊÊ6[PlÕЩú:üY(¥F±!±¼VÌôiSa¨ ÂõÜ'óM´õØã"wçä7ÜUC9ô!ÐhÆÐæ Ùˆ³éª»lBŒŸ CÌÜ |÷X¾u0¾ËLz\ÏÊ¡ºùóhpJ|;Ì…JȉÔ6SÏÕª7ÄõÁ_Nò¡wQQÊá‚M‡ UH$9ÍgÙŽv´0®¬¬ ‰>nÕð!À8·§¶6©³KI›¥B×ÿžq:k9,“OàÕ„9Œ$uúõ Ç%=É£ª€7Œ»ü:ùªªâ›žüú}ij¨6[„›ð­ËããüžÚZR ѬÓééYL9K—ô›Ó)Ýéq¢ÍòäÄÀ(S˜·P°Óíámnì8B]½á)Ku EÚß:08ª(Q¨­«µîj¹×~ {ôÉŒÏzv·â[§SŸ“ŠÂ‚È»ø“B®‘³¦r ˯#9ПÁì¹Õº?$&àçf¨Ûku^þïyWcW'¶JÛÅ>˜óoPiÑ¿ºö›»©ÉÒ.DïŽWù®Aˆµ¼^žã÷­K.‡÷–Ã’ƒ †’Ò&ç_ÃZþËõö^‡xÆØDl,(ãI)îþ¾õZûÈÃÇFO'iÜ¥¤Ñ¬ß{QÛìxd^bäS^˜ÃPè.€¼9íÕ!ûABq †ÿåañoCÝH€WyÓŸõ–æÀA¯ÂT$^0ë`ÊWt…Ï»BˆÊ!Úí”Á±á†{6ŽÞR¾õ5‚ÿÀšý#S鉧èËÁt‚$u)¤êÃ_а–ÃöNhòtI-l¶ ¤Æ‹-mù÷ÄÁÌÀ<ÎÝ×âÄ÷äê—zEÅ,صô#IjJGtLÚ)ƒcÃÍTV_¾”‚ô;É 9ïòl“¨y¢'Òs¥ØÓw©»Ù2õõo©9BXèñ#ª@R ›-(ªŠL[މ¤‚ͦëkƒ [¥iÖ­9½Á”_Òä¤Y%H!ÐqhoS¦ô;WRRpãZ5AǤ-Æÿ¼wiŸ¶v‚ç.Öõ(”×¾²‰ØŒ<0mñV¢6·íÍ·Þ:¨¡Z„À§‰8aÚÛJ˜OhÔ*„B!Ðj ³ÞjP£Š„@k €Ìzk Œê@ ­†2ë­5ª!€@´Ȭ·ʨ„B!Ðj ³ÞjP£Š„@k €Ìzk Œê@ ­†2ë­5ª!€@´Ȭ·ʨ„B!Ðj ³ÞjP£Š„@k €Ìzk Œê@ ­†2ë­5ª!€@´Ȭ·ʨ„B!Ðj ³ÞjP£Š„@k €Ìzk Œê@ ­†2ë­5ª!€@´Ȭ·ʨ„B!Ðj ³ÞjP£Š„@k €Ìzk Œê@ ­†2ë­5ª!€@´Ȭ·ʨ„B!Ðj ³ÞjP£Š„@k €Ìzk Œê@ ­†2ë­5ª!€@´Ȭ·ʨ„B!Ðj ³ÞjP£Š„@k À¨¯¯ozP„B!Ð*ü)Š+ÊQ c7IEND®B`‚httpd-2.4.41/docs/manual/images/ssl_intro_fig3.gif0000644000000000000500000000766410147723030020333 0ustar rootsrcGIF89a§C³ÿÿÿÌÌÌÌÌÿ™™Ì™™fff™ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ!þGIF SmartSaver Ver1.1a,§CþÈI«½8ëÍ»ÿ`(Ždižhª®lë¾p,Ïtmßx®ï|ïÿÀ pH,ȤrÉl:ŸÐ¨tJ­Z¯Ø¬vËíz¿à°x¼5˜Ïè´zÍn»ßð¸|N¯ÛïxùDžBÂê&l´ ýÙ´·r[–žÇ"Ûë²N¸ÐµÂÍ8l´2aËî‘×öÓ°íb›²uÒ.¹™¶Új·ÝÚ‹îÀëroÀ.Œp¼\Þ°o¬üRÄèyW\pD ¯ÅwœðÅæYó°¿®FŒÚÄܱ»/L¬Ë)ÓËñ½Ì怯ɥ¢ؼ3«üqn÷,óÐ0óss°6ã4¶¢+„Ÿ IÈÂe¨ð„Z3Ç è)WÌP„,±!+pH£ã%ωážX¾CE‰X‘bX\iþ€.ÊÖÉÈ/ äAí d.aì`kÆ¥ˆq#HÓƒ³—muq‡vL—xê8­-§4ÅÁÅP3™ÇÈF-fäScH”,ЃE)$mÖØŽ'r'AuÜÖy¶ÈÇtAK“=1pög ÛÌf’CI$$]cH Úã‘j!d+ãø=PeF>žœÖò†³ÇÞ`”œôå/ÑFI2’†Ö#!›sÈT²q•t9¥#GÊN=ä¡(;IÂ^Α›†Ù[#Mì¨2–¬ !-]IÎcN³¼¼$8»óË óž½ÜÎ7÷¨ËR®Ò˜lif&b¨‰vô´Pæ"êJaôç“ YÕCÆþ3Ñ]ö<(q0 1çyÓ‹.ŠÉHFD±˜ÓÉ9ŸéA7Îr¥Ìk¨>J¡š†Ú“é˜8ÆLšq÷N¬bc¦ÇÖ«±Ã„ìã¬mؾßCr]ŒáÄÙÇLðg‹ì°Â)9½RÕ1•eexy^˜¿æ1‹¹Ìh&³šÏìå+?êÆ®«'•ÜÜ3Û9ÍlÎó×¼g:Š0"Æãœ[x=þãyφæó¡àç>=9Ç‚¾Ë£—áe„ÙÒ•¾´¦3Íi`ÚÓ›öt£ù„(R«;XĘy,i‹z§šÅÆ¢MëDÛzÔwjÒo¶òGßh&Šó¼¤œ¿sOl úس¶uŸ¬ë`ƒó*!‹¶‡íìYÙúÓØu¶;ýi0ãÚNÍÆç´7ÉkØJÔ›û·µAÝid×ÚÝ¢f6WÔϾj¸ìæ«‹m»dÃûßxþ6¸÷]oÞ`óŠ׋z îIÛüÝþÞ´À¾jŠr“0ªæh;Õ_ÇÓÚfî¶¶GÎíP{{˵|s»Mqˆyâe›´Šºìre·<Ï0ÿšÌ—å£ÿ<×(ûù’…+ô¸¬èC':ÒÃÊÜ¥§ÕhN/+Ô£ÎÕ*Q«V¿úûR’s­Û(L^Ï©XÃ^ 훿û_:‡·èhý¶IÚüðG—ÔßëoZ.LþðÏ¿ü±Dÿ<¶?æå—ú'o§FE·\Ú!€ ¸QrG‡kág2F£€È€KyRNv'*NBh³‡y@b!ÈeÒU‚&_(è+浂§Ò‚.*0ƒš2ƒ4X)6xƒov‚:)9؃ƃ@ˆ(?8„¤&„FèhH˜„p"x‹zLØ€s7‚P…UU…‚Vˆ7XQZ¸…@Àx·`x:âäseˆ68ô…iˆ*gȆmø|H‡¥Ðsv‡1hxè‚zH‡MæX~(z„ˆ"HnO•9„Hw£qsgsm†ˆ‰hW,r$Çn–¸m—(qÜ…8‘¨W9a‰Šÿh¦}f‡>S˜}{è5'Šïv&ç7vKU3«Cª¸f˜x‹•ˆ‰ïœSq3'h(‹£A‰«Èˆi†˜uásQÅEÁº!Q<ŒÙ7 hŒÅHf\÷ÚUvæâkGOþWdaþŽ˜ŽP%È}~‹;ÔG•p —MˆEsy†‹%·™øˆÖÐŽ¯t¾XAÀ4êæ…õW‡ƒAŒéÈŠlÖÇ5ñ˜M­FúwÓÕe"‡Ž¢È9€éÉO*´*ãÔh,֍޹ø’/—-w0’¾Ã;Ø$^‘Q±Æq8B…Y‰$v€fraÖjCÒ‡1fIxB”ÿY—Ó”¶s‡? •Tyƒ{X•N‰•;¨•>È•]镉r•`b9–f–Gˆ–J¨–iÉ–àæ–@—qR–rIyuI&ty—¨§—k—n(†,¶—~I~I{ƒ)‡,i˜‡Ym‚’;axY¼¦˜‹Y˜b.?ƒ™§hO&2¢&:£(Z£ Z£*Ú5ötpu(Àh<¤:¤BZ¤Dz¤Fz £¨Q;jMÙCôc<4z£Vz¢7ʤ+ê¤= ¥Ðen™D} (£6Š¥fZ¥'ª¥2Æ¥ö÷qö2J\$Oº°rhZ§ej§¨¦8`”> AÒ†“õ€Ô3 P¨Jj ‡š¨IФŒº¨Ž:¤z:dl ŽwKZH¦WЧgz§é©r6¦“0ŠGŸ$øe`‹º©žÊªˆªÔ¥”ÊŒ§ì×'Q£Sl5K³¶º¨o)|Õ΂MtZ½f·Ýka Ìëw;ý.×ãë|?@<Á=»Aþ¼@Ä¿ÆÅCº³7ÊJËKÌL§ž1O°-¯PÐ2®Q±S2šIÍV×WØØ‘ÒžZÛŸ\([]Þ] Ù`áaâ7ƒcädåeæfçgèhéiêbëkìlímînïoðpñqòrósôtõuöv÷wøxùyúzû{ü|ý}þ~ÿ€3D;httpd-2.4.41/docs/manual/images/ssl_intro_fig1.png0000644000000000000500000000640310671421551020343 0ustar rootsrc‰PNG  IHDR§GxÅk‰sRGB®ÎégAMA± üa cHRMz&€„ú€èu0ê`:˜pœºQ< PLTEÿÿÿÌÌÿÌÌÌo`ò pHYsÄÄ•+ TIDATxÚí͊뺲€2 ô«4ìÙåÀ~ ¡‘ðSˆŒŒß§ Jw\»a=À Bæ¤.& ,Ûwàüv'îÄ6{\=è‚¿UªrIª*i==M2É$“LòÛ{äô ¯·!ÝGþî<}Ž7åÏFÕ+%„U-ÒtX””¥Bh§…R—PmðÈ@݃üé/pø]E)qå¡CÁEÔgù %Ó$ѵөRÙETQÿ†\P„7ä¦1>ï™ ä†ŠñFßX¸þ ¥t¹ÔmU*åÜ%”_3ÇÀþ †€Ì–˜=³-Df¿¦€9#å_¢²Ri§Û˨6zö=ø€ÈlÙ“÷Á" 0{‚€ÌH_ÚJi©´ÓîšV™èQm€Æ"@SÄã-””RéRi§¯ ¬™}`XÔ ;2€§[(Q'm’¬²ªN³ì²[ø5Çد b‡"fàv¨ƒ­n nE‹6ÆðrAoMÞy BÐpCÄdFløg¨äJ´¸ø6ñÇ_†ªÇCµU_1ðÓÛX“HZýÄV¸†ýôÔƒñ‰ÕðÀ ¯kr7êä½ÊɆ£…‚¨ð @ŽÑ†Ûc4Ïs¶9Fó *PnQ~M å¹ ù1š‡ÀÇÇPžØ"ƒ§剘-ò1š#2$bîe†‚Èb{D£9b{C0Àš,‰V‡hŽÈÐ*P¾À£­˜màc4ïks²12ØXß0ä™mÎ'Ñß"Fóµ[$ÕnÚÊD’\^ò…ØŠwD ­wß•r`”¸‰ê+*‘¦uZm´J¤LÜ  iW&z¡Ò¬Ö¥Üæ@ÛÝ*UÖZ«lx”SªZ+-/¢Úøi¢§+SýM,•”Jkue=<Š’;ZæÒLŠª®³$Y­.-9Ñ¿Ac}î°&ä¸6!ÏÁû†½oŒ¿…jÝwc ¬‰cÀœC@ÈÙÊÙ†> û€Ì7PÙ·Qm\xÌ> 0X$b‹:Ô\Ý^1ý>hÅÞ·Ì>´Àf{DµìC{s³ ø€Ì>0µBìþÔ¯­|0Ì! 0´"4ß²ÕÁoÛj‹è½ß2ç¾6±1¶\|ÇïÉ[øÑR$í”ø™P¯=¥¿z\þ»PÏïÝתJn}½?ßýõ4ÙêG%K!„ÚoHEéT%´BrJ%´%Ò´MëªN’Õà¨2QJ/”.µÕ*¥ôB$e64J¹¥K=´êR ;€‡Ý|âÒ,ÉêºJ6ø…lG‹íh¨o¬Þï[[¼ß­ÕWLÿ{·­z@‰d<”ø¢Œß¥›øòîÑðá ˜÷O¹Šêö¨£<Ù°Åh}C9ñõ¹ÇX`N&0DŠÐp4!6£rD¹EÊ ØbÎÁù°&¶‰m@¶Äðqs bF² ŒÈìýnÏo-"[€>Q-YZfï1¶¹ØB±Ed &†¶/”E² `Ù{ ÈŒ€ÀˆÈ˜C˜w(Cìm7€äx¶€Ô qür3-„лi>«®½WÖo12o‰=ß0càMˆ&``ކ¿ô@W ¡E)„PâØ, ¯g¤ý½ÑB -„îÛ(„ûQ¢ÚÔ›MY¥Y*”JärSºº J!Uªµ[êR•"©ô2ÕË…Òàj­µ[ŠLµBél©ôjã†A-D‡*•Jk¥ôR¤P|–Ò²³!ÿÁ„×<°Tú0€J]ÀsQ'?ÊDU§ífã²U*2¹’ËdSVé9ªÀÜ0rƒkæ·¢Åhß<ú‹uã£yóÍ—¨‹©Gu)0…ÀRΉ<’%Ê-ûˆC—òü Õ~µ¯\va<‚%b > q¸ºœ&¾ÔÚQt¨–ˆm‹Ñ#XÓ°‚¶C™-¶_ ~’üîP@Ä€<‚%è´B$ÀáçZ],kîðÔVÜÙ ‰ñö[],k4¡Áµ‰ ÆÎÙzôâš}4öürHã-9é¿iu;¡þTÔ}M³+Cw=£I;`Šdߤ×5rJ1`âgÿè=J‡Ò¢ÚT›rÙõŒJ¡ëÔUà©R·ÔU×3ZŠ…Lj tVYëER¹®g´ ©õP(¡J¸®g´C å¥ÒJi×õŒ–¢”j¨lEU+YnºžÑ¤u–öïßÌÆLùÀó”VcÚjDœªrjBMíS»À„êu––¸}š–už–n×ø)-=è^ø<-=4ê$-=0ê4-=l2á,-})Ëéw9iöûªÈYó$ßen ÎÒÒ—ÒļG 0gu̇~œ"‘îU`n"ûƆx^Ç´ÆMÈ1@Í]¨öô`‘8`Îê˜9³#¶È{ºO«¶>ÚªKdöçuLföû¬øÔO°q»GµÌþ¼ŽÉE,º>æØ>®•ç]“tZÔ1™ÖÄ<Ü‹:q‹ni7€guLÞÙ °•;y¯ D!²o˜ãy“wˆ‹;µúI´ ñ²œ4ånÇ@6WÊM%„:žUêuÖ\éœB_Gñ·ÊÝ×PgÍ•J …:m®t®J뺮? Öl™ hš¶ Nš+R%J+íQÑÃÜà1 Nš+²VJŒuˆû“/ìÃC¶:i®\H¡”VŸPm@æÖ7Ü>‚:k®TR]DyDfÈ@5W*QeY-Åç<Ø {ŸQlM, É‹ïœùJ]x¯p˜X‡=²ŸLøƒ£ÚQu_¨áîL¸_«>÷Â7l5|ŠäàSâgBM¨)Ï>åÙ'Ô„•-Ûo-Òc Õ(Wm¿-T½£äa?ßm¿ÅpÝYRˆe’è¬tNlVÊU-W‰¬†Amt¹,•vBW«…JQUK= ªLJU&•Ú-µεËlUêR¥J8¥Ýr!´p®¦É¹R—Ê)­µ®– ¥hE&7«v•I—¸z•¥UÝŠU²ïý"Zt/Ó‡ŽÁñP­Ù³®Sœ|u'²ß_=.ßÞ5þQZM»ÆkøµJ¤âãPݯã0(1Jo–i¦\•ŽJ*½Qe²PåZéRUjQ»l¥K•¨… UªÅÙe·‡W¸×tV&ÚM[giuz\sJ=þ{´úAšØøãÔ¸»ºÕDÀ}–±%ÀC÷Å#Éo>^dF´Kï3ËÁŒg§n<±îІ`Ü]ÝÊĶ0ІÈŒo=  ·hˆ· »«[Ø3¢!Ž”[¢ØÃ9|`î5ÃîêVÙ3 36Ä–À÷ƒê5îP¦a ¶TDh‰˜ˆ-Æ>P;M,ãîêV&¶Ä€x@õ€bfkˆx‹@´»ºµC1šŠú@ϼ%2ÜÆÝÕ­&š­1¶D&ö7€ç·Uò¥²®lÔƒg»7û&³ºÒ !ë¡P*Ùm±¥tB8qþ¿ôŠÒRíçüj°ÔB¹j#ëT‰$­–I²iUeŸ^á®­¹3A‹d¡Ò¥.•‰ÚèÒUIrèGì¥t­—ºUB*Uf¥P*©?µ Ðþ†Vã}ˆwÛj¡t霥R¥–B©D¸ 1°»¡•9ÝéJ-”^ŠRJ™¨R—J]À¶énhE^ß‹’U–¶õ¦JE,7›U²ªTµ¿\àt·HdšØ˜æ‘hqÜ_÷.˜DÀ"s {Ü¢újwC+Ç»lu\5w ˜ìÓõ'¸»¡Õð=¸j«‘ÂílÄ…ôxZÚjøùªuj%ÛR'é°gN3ªj𢒣¡Ê$-Ëj™Èåà¨V&z©7z™¯•Tz%Êl9‚­¤Ò®*µU£–ºÔiu˜d•´Y[nVrë¾n–Ùˆ)ýñ´úþ$Ò³N5ü 5:j’I&™d’I&9¬lÿšÝúÈÿõƒšÏþ¹ù‘ç~P/O¿ºú™õƒzýê©/Ôlöô÷ì?Ï×ïvz~š½ÿÕþ={ÿëõQÔóÓë?_úÆû|þ{>ŸÏ÷ Uûk6ûÒ/~¿ÌçÏ¿_z@½Î¾DÍæO/³—ù£F{yúu õÒj>›Íž^ÍfןóŸù|þ2{™Ï_Ïÿ¼þýüϯëÞõ×ûìý÷Óëìý÷Ó$“L2É$ÿjù ^>;—â.UIEND®B`‚httpd-2.4.41/docs/manual/images/rewrite_backreferences.png0000644000000000000500000011045311741262733022131 0ustar rootsrc‰PNG  IHDR¼‘ÙrÌCtEXtSoftwareAdobe ImageReadyqÉe<"iTXtXML:com.adobe.xmp ˆ#%WŸIDATxÚbtwwg ,@lÌ8 v7¤n\1¨4P€i4°#» |öþ/¼si'7#ãµ U‚†yŒŒ ¼sïPÜÿò„ !Áà-»vº:/†Ó.Ï*°È]»e²É¯þ»='œ‘QÈ6fd’ë—YÉ?Pùߪ¨¨pÀBXXþ‡»¨< ùôïÿ_¶½ûÿ_OIÈuNŸ¤«¦àl©÷ÿ÷3 ×Á¯îÿÿ›@ÆËP]þüWPQûÿÿÜc£S/þüG¯Ž-³¸Åôþ¿ dO^ úñðÿ@”€  (® «øh­ŒˆÓDÔ£¿ÿþÿ÷”uüøùãÇϺñÿ  $â–"tÞ_-eÙ` Q§ö]v˜tãÞö d[~ÿ‚– P“þÿE–ýóûVÅ …ÿÿÿ[}iݚğŸ R[K Xþ9•¬^Ö *ºR «*Êw4Çïìôr­y%¸Œ—‹36݆zé+#Ì­¿ > ñ-vÊ.æÏïøø‘mÙ°öpƒ[ÖýÕó\ ª:»6002C¤kÑ•w'·oš¿å2¸è¼öžaéüÍKWì…èzÏÀh˜T˜doß¼ñ'M Ë‘j³'– Ð4%‡pÖHÔ¥pGFÇ¢Œ ‹_}NVBi‰‡)ÊC²#cö´H†O@vÊ”t4 ns?6Í—áË dÁÎÆ…7àÅ"õæ²FFáå×¾BÄ¿¼¸wèô•ÓR!Üׇ&Ì9ýúP¯/=éø›-mÁ»ž³SA«¼9ã d2öŠ @íøñHÜe`¸±: Qlý|†ìŒç´É‘9ÿþýÆ¥®NÖ„T£Ÿïj!Råëm=#±qàìRLÁÅþd5´Ëˆo?>a ~yùrÄuºþüý5Úû_ÛܲïúŠlQݲ{5ý‘QRš<`Á€Ö¢²QQËðP‚Õ™=:2Â>ùö¯W|±ob1DdFš?ƒŠ¥9„«,­«­«ýÌ®Yqnß캂h;p+÷lPÖìY{î«j¨"[Ô¾8®cI2ŠÝï.T“t´\-°‡Âûÿÿÿúöïß÷?ü…qÀ2ü÷ûç~üøÌ@pµ·¯î –âgd³‚p ’U[02|9û Õ&~çj$Þ¿¿ÿþùõy$îןÿ0¹ÿÿ¡¤PJ`Ïõï_`û'C“‰"mË~ÅuÅŽP¶°vƒ—ì¿»ÛlmÉÂÄ€3ŸÿûÉ@µ˜ó2Ä)°20C¸‡Ÿ" )Óe6ÌÊÌÄš cRÖ$û·NŽÏ™×µȵ6î?xÿÿä-~báÿ¿=ÙxêPpåì­³§ì]{òãêS_æNßa­¹«¾ÁƼãéïÿ–‘£åE`ׯcnþV£­&BåÂŽžÔ <ŒŒAÍ{ÎÎ/`Õª`eÜPdö„Á$c&$Ï*3!ãÞ(Çjèå¯ÿ«úÍÞ_­Aÿúʘyø "T2ÎvMqÞíØúÜ6á·mZúïæzãThcäÙÛ÷ ÿn}ϰºÚ (R×-[bdœƒ¡ÐK~Ï+ˆÀe ‚K‹ò^00ð‚õz©0NΰXrå;ígŠ˜7 Üé§c)È¿þÿÿûç;²HeŸ9òØ\¹”!¦.9¿*Òš:½´¢!ì?wP«PøÌ Ô-fÖîë¤[SçôÕ-XÅ¿¾y3‚FßL´¼±Šs ¶šF{ÖäÑP Јێ;FbŒ–£`ħ†[Ê[æùÆ=5SÕw‰Wüå@¢r‚ßl\DOF–̆0Ö§‚zÖ’ÿ¯Õ$mÄPõ½edM °°`Wadä``xèíé•[É0GÞ P>Sþü7h% £u-8à¸<Ü=¾mH÷œA SÛö]ï¸yxà"ß®¬ô?Ÿi ./hLŸá‚8 ÉÆÈ¸üêGPR›jÚY_@uÕ†»V‡[žïéÑ`Þ´´¸4¼R ¿{8û~Ä—sûXÅl ååZêÆðt÷l]l+Üå¿W¯@#,B¢b,xùÙ8@øóûï·¯?†\W¥O˜²²šØžÕÀ¦E õ‹‰‰ÑÍ“,¬Ì|ÜC.5°s° êVäŸ? éœ§o@K¶~üþG3?ýÂÞˆ9±ý-¼ðùÓwâoZ}ÂøxnùPm7äÙ12 ƒöݤf%(³2òëa‹ú­Ï V2¼>gÕ«’œàê9@›' 0lÔö×™× ×þ2XŠyf(™ŒEàÃ/i>!¯V& 5m ZŸát%þ‘× 2&*"wŸ®þþNK!ƺ­÷ì{ 3›jælÉ:õœ’|lÌrµh^¸½y…§ÑQµ(%w³§ïP£aÓ²yùUAŽ­@öÙWЖƒ·Ã4X<ßžÖ²ÔÅ©È,®ß $'4-Ùröó%¤µê¡n¼|œ $xnÏ俥qE[¡Z/@cý°úúýùDoK\™¯û$¿PûœŠý@qã¨Á^’ èâØ[›ì3‚8Ò){~e,,šXÅ‹ýó|oªOù ÜT„=4)ª–ùjg×°ÿýûVñž <¿ÍÚÜ1€¶?{ôŠ 5Eº#Þ·EDxÂY‡‡·péQ­G#ã,˜,õPEü§c6~½õL¹ó΄0 óÃg¯}DHYèíJ2NfÚÉ5uÞ¼¼(ûâäQÿù`2wþ‰çX\Ž#Lˆœh ^= äýÈjQ iS½‰Qä& ù̽|bPñ+Ó^=]×q$L1û™©Q@Æ ¡ÿÿ+00|ÿö"å$ 2çÞÅC@½O>ÿ×Á W˜–a†Æ¸ziCfSÍŠMÃu à¢-DªœacE' öy VVöá:ð'"(Oì Ý¿ôqÒèæ(:©!ȱl¸½§UÆ`sËp ëÇ'O ¿LŸI‹°wì1eï{›¦ÂôØ,QB¬ZQÙÅnm¬’Uìæ©0å—~Ë*ÏM¥’h…¤-Í–”wò\Ôb[ym¯%É;½“­1SÓ<:{νÓíNņDÜï3çÞùιß=ç»÷~ß9߃ñ6d€Æ ŒU$ _Š9«u t‡|8÷\É/Ž\žËÌ}ËÜÐ_oø»ãÝàñ“3ñŒ†‰ ÷ÚiLÍÞÃÌ=à Øàþ–Ú=Ç wbæžá>Ü#ÌÄ·%7ìYÿr¡…B¯ÈkÂRçÀÄœ&iߤÖD»Ê>ÂŽ–Óé£Ðú;Ó½\†jve¸öRàIé8›Srf)<Œ1höÈÉÁuöþ™hò…ãWójðÎÔT‹°=ûRሻuïÔ ¶Š¿;ìV­|ã®ò 2àÄ•G÷>+U7#I¬ÍiUVQ¸Çý2üWÏ”ì''ÚÉ÷ôÝÞ.‘Mè4\zrÛ$7âZÖ«—5ñF³g†8öÁJ‰º´úæ†Í½étéÓƒªÇ­Z›Û{ã– 7P ÉÝ1C»×\›±æ½&¬óšj—‘Ç®—’ƒ{ÐÇ‚è"òÐÖnbX¨—¥í4Ðב’f'¼âÚSå%y }YAC¼6ƒeåÎpvE7/%+´ž‚<’ÇɱX*ƾyåÞåöšewìiq×Ê`k¶@‚+­nÇOeæVºMþÏ"L&>aÃR“…E(k jÒM= mYY~á°dÜ5µÍ¹®ã>ýà>pªVGÛ¶¸¿ia:€úAýt‘=¶>1Û¼ç’?Ù): :–ö&ÆQPn`bl˾ŸÁrêä)$²ñðMÇo“õ¤ ï¾¯< wuîI#:-E† Å§î ˆ»íë Ï,Ÿ`éîb7Â̬ðŠ»"úl:=wgÉþ¹+ƒM‹üTŸíið×r:·ùMnµx,2~zü™ ìŠF[ ëù þõ bþ µÈ voe½¡´ì‘žnWnΫ¨âþzuRQZª£§÷š¤n Jà.²ïˆOûKYý¿Í]«×aÚ::­A{}V@R§SGt¦`4LnxÃÀÑèÌpC›A%¯Ñ”¹ºZFÊóµ‚ÇmÒùS>¯•˜µ5¯˜ÑaæC KDµë"¢%æh:rZŠ˜>áCmMŒôI©DBTĤRQ·®æ šÜÝNšÜCùèÓ”{Q~E8\›eÀòÔBt² TAù´$äLX'¯ë7.(]@ÈZڿܨ¡?…0·A.™ùåÉdÇYHƒ­§™Ê$€ž…@“±ˆ`²ØÔQe¨LŠI‹î3yUÃx(è©ä…$ 9W`CXÛ¹ÁÒ~ó±Ï5k:*7¨"qýž> wœÅ}ˆ"éfc¹QXÁAKõpV[ YàS‹|Ü…£û²<Q] vª¢ãØ-|’¦šš’T•Õ9Gɨ–r6­èÚ0£ׯ»M¸>³ÄhY@P‡h`Ø(SºŽ$(hmv22r7*GºѼN,§ßÏTƒN|R!ºÜ½dQlØÈ“,’|™‡))¡V9{…¥‹?[¥1 ‡«ËŽøè#¸ŠÚ\kÏ.Zê5w®E. ý;zûÏÿ÷±·ÁÑ9šŽìç»/6<ž:\—ÏRf¥……°ÙÊ‹Î<€÷ÊBÈ~Ga¹Ÿ;¤Kç¯;*7Ô#~ñdHŸžÚ9Çà& 1)š·©f:Þ+¹Ëa}œ=Z¾Ý¯©Ó·2#`Å2/ø8t9Å-w’L$ï|^ ?¦Ú({§=5VW‘¤[ö£O?ò¡¯CT¥b4ÍvµHáýïïïÛÛfþwÜÅßœ^&¹6è=Då Ìiá± wÛËéƒ<¯¦\<™p(>â '_(>–ü€_) 9u¨:Š.§QvUG˦¿þ¾eñš‹?œ½”].> jøü§xe‰§Õ<)¯ì¡¨'Ë9pB])e£µQȇüõ1~áK¼’âÏ튘@ì‰ÕÈÿ3,,Tô,³¯>½ñDkÿ§r¿·-Eä `ª¾ZûüõØÐ÷{õIéí2â‹f„œ¤ûæ>‹žµÁçÎ/ïX:‚íðïù¼š6øR0ðÀoÙ[ÑÇ‘áHÐî¦ÙÜÀápÜv¤<ï߂ԭÍO:ôÃÙŠ& 8nÕí„ÿ4²²u¦!Y‰üE{ NN‚åʃ1­§þI‘ÜÑàt#…ÛÜéÿ^ Þ˜u E)'RàÊV^ d7‰âä¼-›ªûÌ4{™1—¶Õ7ê‹G2l÷~$I®B9÷ñó»n=ž9*ëbaz¨%ÆG)¯C.ü÷Ë?dwIYq Pœ}twæ½:wf“³¬®B„"WÇ_$Eæ• g†úYдʣàáQ1Ó"n …ãbðÓ{¢>–¸jé¬) ¬Äßãs-äÙ} 銳?Û›Þ«|é>´QYŻӄžâ¬úar‘Xž•˜ÈQœZ€ÊصÇè8™ ¬Åµ(õà/à › ­'ƒ-`ùàÖ5‚^ÔÞ1êÚÀÿˆ%6/Ó\ˆ&*™QÎT“¿óî?ÌÍ,?‚2 G¦öpXy÷w$Wš!uLËôøÊñ„ç4ˆÉbfs¶Û÷¹’1œ*”¨ä¹ÍNÁ3=êÒýG¤ÿ7ˆvÒ£ËIˆÂ¿•o‡M] À“ÂòjÖßfñ—]F½= õîí¢Ò&ñOÐÀnÎiIr×F>æ#1èrÿn Ub¾žÇ PÃÄÔ¿râÈGÐjæ0·“@>c¥€Ž¼7Ô×Ëlt1Pym׃!Q~çB‰¬ÙŠ[ŽÆBpÃì@3 Íô›R  è÷RäpF{Êùà¼3…õÿÔKfŒ3¢3ĬÝ÷ »‰ŠÏƒ’ð¾(>/æ¾üß´äo¼0A†üð'¦fÅ¢«xÆe»öHõõ]ÔùùG«ÂçéÞþ …ÔΪqؔ“‚”íÈ÷Ç$IÄB¿C»BÎÈ£p=ÔÐ|Ó>rRâ!±Px(<ýìñû«?µ”s³à¬¬û³z«»iw20M;#ÃÍöGŽ$þáá¼öûŸ2Z䟑Ô8´ŽÞ¸z©;¶É5aÉžðÖw²tzÇtµ\@¥!m1,?ù£¯J¿Íò6¿#·} OÈdÿ¼ô¸æh—Jù­ïó‘°Íµz­æ&²Ñ*Ø[¶oxs°¦«Öª*þ»Laí3>§“ÖºkÕΠ¢®ñŽSXTž»$ü³Ö`†ôê™±3º}¨zo}´ßq0îgæ•ÑÌ•%åÌ»æKÁÀ[ç¨2Á€œÝO3Áó¥`@ÞÏØ.5ååü¢Â÷ævôGŽj' “ÉüÇÿ ÀÞ•R±ýñ3ö%KJ»BE–J’%*-Où¡…-êµé‘"²$•HÖŠPR´h•^Eñì"*²¤¢,¥…¸Ùæ7sg̽ro©×ózu>pÎܳÌùž9ß9s¾Œ€7‘_ËöDèCrüÄ€~ð லˆ^ üÂf.¾ÜâkUµ 5 k€ ±~Ñ×ïª&›7b°¤d  œp{ ‰ñ²Av»8 !Èíçߢ‘uáðófªb%¢´‹]ɰUê#ÆëÙÙÙ+h¬èmë9~K³>¹¼P ÎþC@ºÇÁ´—]£ ÍÖ]s–V7Þî`+‡î7D­?ò‡íŽ£û˜{XÖPÑ3Ùèàâhì|©8ÂÐ/©–^ï%¢n B÷c|Æ{ 2wØÂ‡ v.N›­6K./ŒúA†âeßç‹›†”%†n¶wF‡õŽŸzEåW9Gë:ïÜBy/ÂéìºGA²è!â¸ÃU†‰}@;ºÇÒÞi‚p»8Úøž&ãv)ôðÖ =ô°Eˆ©_˜FÔi☹ÉíÀd[Ï!ìMFŸ#ãV²ý±>y~\6¿¨¹½´»ÃVY`ÀjèY1Í®ëCÐy³w'äìÓŽ+GW*ˆÑPÔFG|KdnY(èV³è9‰5Œ°½ˆ†•á‚] И¼{ypS·`q{„!¶è&¬­€cÚ˜!³Šn§—ã·8€µ'`£1\Ä  -U–&KƒSˆ\ýÕí£Rv¬IþËâ_U”°ŸÊ¸[´(rùþÂʱ†ošMŽï"¬¦ªŠBĬîPìªX—3(‹ãÅ÷×ßúˆ…EK$V-Èò±ñOóô ÷$“ HáÖ®‚à#ƒà‚žÿ“¢lQù»LHíf=}Îzš©yQ9J9AFG{åí"–U5¶QW¼ý$ÚØÎp+¿öV¶?V'޲ºˆBüøzÖÀ3û{Ã…ÑÞfë÷¤,î0Q,h¬þ÷Ç‚JÏ{.Lˆüó)*â=S‰~í”h“[HhQ’Å’“ñ˜c× ¹[G¦ùºîŠ›U¸ˆ„“ÈO¿lšNd5„!àŒËèæÁ˜–4Ó‡¡ˆñ솛wjK²Ï•!ܽ7™éøÿ'Ù;<¤~u1qMIHó ò;K-Ï»ì :|79!ÍÈèheÂ93ó0w“Žöguuq:ß¼nï–YCj6¬Õ¶039|%ü¸oFÏ~~3Oºž´qÇ© \°ì8mE=Ц…E§Öã.ÒÍ¢²-µÖ>GÑŒð¨5VGv-qÚát^oaNäY›m¶ž=ãâwšòZM·¥Z^4aCêÍü­³6ÜgåYÙRÝ8þRöŸAGéj$šrS“òÖMYýäz{˜¹íñ톮.ç/;J”“v3àÊKºâ…7:ZCöµ^Á2ƒÖLۂ˷ź¯É’ƒ£7/½be”|lEV®"V{Ë…î ”rw¢2\LÕçåhí¶ÌËU¨/XØŒúêö#4Ô„©Ý@S`qÓ¹7§ Œ±†—rVøºþŽw Ö Aº]ïkàÿlL-Bù‚ðé^Uùh˜i(‘ýt,€%kx‘¶/è~Cof¡)ÿîþK ýé£7ã4^w ãÊúú„#ü6ƒð§—b²Þ ›pš/Òv'u.b"rjIÖ`2˜Ž½9¡=ܳ?vòJë~©Ål©¿±Þ!wsÕ™ó|î°û±)+tÛÉ,z[žÝÒëxõ ÁÁûÅ’×v#R³›þ™‡îcíáŒ:Ö?y­ÓD>æ¹Ï¼“öI™…*ÃÙµü,Æü-›¨>“!¼¤(½(Æ6,ûÃwËy7okkÜÖ©ùyöÙÔW_ä Sdű2Qù½è½5+) ,ö7…—Œcv;ݱøàñóæi]Ôq»‘óqôyüþ«ï—*q H㆘g÷ñ ‹šZÁAI"¢"‘ø6ÿîÄçâ=à!v™ŽýwHáL§¡âÓvP!˜1¨b#â¡}dy×ÍÃ{4?ŒXí›Í$&í^¦È’Ñ÷zd:_}GÄé%Ͼß?¶ šajÀ2âêí«F;Ãtv†ÏßkE]tÚ?…J×—ÌxÑÈ\Åj·4s–[x>•Þ;\‘Ý,T'E2ÐKØãAk¤N"ߺ_ÑEq´3uK4{J´µßð•Dª¡ð@9%…9µØ CˆXE?¸»³8ÿ² †å%çy+öáŸãqŠr½‚.z›íŸþZIŒP\Ù³ƒ–†—Ïj±w€èûå…%t²àç_â|’(ð²0pri¬ò`®å:ï`6Z›šT‡Š ‚)‹H‘Š÷jå~ýõmŸÙyG±›TTQçáTò7Bq.pé ‹òG^ñ••çc—Ù²B\h²Å,Zu^@˽ðùo·‰âX;C(SÕƒÌgñ ‰Vb©"Wã²ô”ê<’ ­ä­ÇHUìoñEË%ÞY¡R¾™¸l6ëÀÒØR”ãÄË ÅÖôê®ÓDm…~¼Àï*.å€Â"x¿=Ï™—«Zꪻ]ÜíFü”} n0Ù½ÔLŒJoWD(j+yFžw7 ˜Ëá‘¿årÍp;¯”ŸWhYJ\‹—`3#Þ ¹!ä¥:oíˆ(BÑŠ˜9[.FxÉÇDt£ñ|DSœœàrj ²‹#\" ÖHȸ쟰Æ’°HoF1¨ûd/ÜmÛzh#ʆ5dÞ¶Ùà;Å6@Õ6žµÕÄ›{+[ûÈ¥½$eínÜJ`nœd Uæ^ãí§n TÛ¸O– Ÿsç÷R ymG]ʹ°;_un­Ä`%׬õÏ^ "³Ø<.‚TÚuáT‚t‚jVU1«|nãKK÷Z’ïàŠèJì©å£WéO”¿lû€n-ÿ*UÁ ?ýz—ênQÀ¦£DÂkRL²Ûç@Å!ÑZál—ˆˆè iC’k$º¯¡«B<¾0}Ï-ý8¸k~ä5/ìGE.€r_,C<6§GB­±á‰êF¹\}BMŽD($WÕYŠ5¨ÐÛ @Æ9OÛ+¤0µ×,POÚq<ñîu-ÙnU­ëÕqÜÄ.rŒP)iß&"Å<•Øß8 ­ø—hNˆé¾üÕvpÃÄì:I– ÛdîÒ5]”†ñAž“] ´†0ž„¦·õd¿ÕUÍ­øÉXÕ>/BÅo_޼8{(Á×®½'1ÇeÁð1X&`±<–íߟ¬ÛY.BèùEfqŽÅk»_Áê¾fÊÜ6IyÙÌ’5T>ð1w—¸Vbi׳åó§f:©ZùLX¾Gå®öîQÝfajÓšƒDj>ϧ¯¦3ªÂÌŒ|· a7Ø ŠVs.ªH«IòÓ׊T}‹½ÍŒîlñ´û¬l䙫`Âz,k;Mÿ¬©M^z¯0rÉ ÔY÷Rø •6ÀÅÅËÉFéìAßdªo;+)¤ûØ/¢48JhLÏ¥cOä»jV}>¶—¤ã¬®9:eÙî.†\FéËÕ%ûO…w<©ô!ÙËñåÇÚÍ}G%X°×àØ·Z Ï Ufµ_,\»[Ú!`Bø8,÷4ßeý>E×½õ®Ãʰû|E|Ûªtj£Ï.aQQ¼³¸"Œ{·s µØÃLg4‹mÑã÷Á ’É'qí‰DÙáZS|eeö àÅö ´ûéxâêg]Ns¬8i±? ŸÌHkÍlŒE¼§ Ò-òï/Øg·ˆáÄ6uQ£„ü²ûtšk·yᜧI×µ•lðýHxÈ|uk+S÷¹²kj¿ÄöÌê!³ÿ4­Y²†_Ô_C/¾’ë;Å…ðSÚ¶¿ ÚÛhšÊ¦==*t¢ÛóšÖ¦²¬Š|Þª²Ú, 4´6‹ñ|î#¹¾”W|,£»öv.V'Çïª[E†óü,´oyQx&9UZˆ]ä„ȧ4dÀDK-ø¨~§¢ÃëÞ4ê,·7ûKÏü+¿hA!A‹æßrÖÁŒs·¼ú²;ÏQæ›}&®ß;æû¶ùöÙ3EùSË—ýL„‚z ¿6ù(Úå佑uäCËÛïÒæÓ¿ÒZ›?ð /=s`Ò„Ÿ†VP¯âBð¶"úᘣºæ{µ9jª&•Þ|ïþOC+¸k€€€€¬âk?(F QØ{d¤Hï¢h?±>#Z§‡x?q·Ó†: ñ¿-›Üÿ¸ éð¬a•¾$Ç/Ç‘.Ks! ú”5@üøøøþ];­¥¹¡’â‡ÂÁÑÖ{Ã’ÿÊ (•' ÿ€½ë€«±ûãçiï©BQÊHi)#«…®²GFdd%e“¬ŒBEd{ɈHôš‰R!£Ò‰í]÷Þîxþϸ÷v«[o^ãïå|?Ÿnçœç+*"!'Ý)ðòH ˆž¡øý±mñ]wCyÕý«áÑ,È ø0fˆË§â,IqH È š±“éÑqÀµ†?¸],qHˆ_•54~Yè~ðÇ%/p7çú¡ši*¢*Êpf ÆRE¡ ÎüMxa-‚HV  ×x!`¬¾rªƒ©-ë‰| µý¸<™°a‰¼…C²~\[e:ÎÑÝuñXDcÄ¿ÉMTY¿¯Ï·Èa¶•†õ¿õ[=œÇš¾bt4yAÓ"û¸ò2ôK÷Ý*DqRÚ%w,(f߬CÌ„ Ü­‚xlÙà8ÞTÞb1λү"]Ì·¬uEÌ[ó: u×ÖëJ 6Ž‘מH9=Äs/ËI–t¯ÔÅïí1|âJw÷ù‹\ÈÀ·qŠöR8ÃZ>ŽûœI }mÝ\d¶²l,lôØdiÜiªw8æó›®e5wõ\ Òm2æýps§ŒÑÄ .³‘þ”Ì_â:Á¤óh‡esç/ÅžÎÞw­°]x–?Á!îç³ò1DZ£êáêÈןy|ó¦¿ ðüküÞ{¡mj˜âíu 3 #†^pèü ¢&n.ñÎÆŽX­¸î®}—°§)Ë}ѾnEÏjÞÉ&´„%õQ´¨Ó¸=Ö*¸‘µR6Z±ÏOº…•J ù¤¸ÙV˜[s8n®k´"Èll–um9ìéHç ¸輓‘O1¯¼&iŒ´FCˆ”¤[—y¹igºo“ÂM0rÏä{µ-ÍL®1~Ægƒ3õį… ¹ 8d8F E ‡M5ÓîYrÝ56â`Ø[´6Ñgåñ´¦ÈJÖf¢xü Ê€cz±à¾Öòp„í!ʳý«OürLÑl)™ÉWȰ•Ƨ“p󪼜Kç3Z×gí|¥yQ¥ˆÿ•Næ£åÁÏË8ÖæÞ}ÉBkùÝ¿ÚVo *Ðý°lÕFEàéé¹hÉRhêæ÷†­­íW*²çý¶ï^?Csì.Ìwj†‘×k|\/W l6øÅdˆ°:µR½Çb3PÙ-˜’´"»‹Ín•1Ûñ.K«â±¤ÅƒEÈr`ÜåMÈZÕ ¸uÌÇ;5|RÀýJÐ—Ï ×Mä\.nrÔž¶ûäk £,çwù nìÐú]& ‹È岨„q]–Â=ÿ‚¢O|?Ø †õžï7ºÕRýô%3ãã²i@—ôNvz{H[´)ð9ãã¾é½¬dZ)U)«r–’ò6£¢8îïÕ¾™¢«¼$ðõ g¤|8ú6©Ý¬9ìœR2ó@§É¤×ÒaᣴlïKZ¦žvØpžã-Š5t»B¸¼)ƒçÚœûŽsQªNg]Ànª‚/ðÕ<²ß§‹ðöö>yüœS¡BÑB̯uÚ´ú&aÊ’©˜/áÝ/‡ÉvvcÎåHŠ–Ë‘J ú‰ýØ´Šë…³±nÔãyŠ}±y*0/±z*³ŽëNyñìºÇ ;;»¥‰Z³ÅšAt>èGê ÎSž$e¡´ú™ŽsN¥Ðˆ€§, ÒÜc[}^ éºß2Ërâȳ&/Û4Jº² U÷Ïý´¿^o8õ)C½›¨ÓBÜæh."@#FŸ³óÖ¡JÈ– êµÇÓùd"¶Œýö }ºwàTS5¬_·*6­ÂÎS¸d?}æäûécº¦¶(ã0˜òü4-ueA 0ËÕ);W9‘žÅ¦6‰ö¤[£ÏâiÚL»,ìÐ~'q¡¦ʸåG¡Œ±lRÄSÏà½?P¡h_¡ _|°q4Åýn§º<½ž…¦üµ²ÿ Ì×{àÀkù„mk5çVv{Íyn7Ké;9Rqå}Ùá› Á…yÕhlàTÝÙ» ;ÕŸ?3Q_{¿DÜ–µž (EÑ´ÓÎ[£*0o»Ù“FÔœ°sºS BñxϤ %èXm¨yO;ì7Ê{Òù&·<¸ñóÚD²Fs D’JI ÁKÐUYIxîäò©!bòŽóÅYgæ{JKò^Çe Dœ¾Øo,1 ;ªPÔ$…q„ø2q €Efd*îä7SZ*苹Á<¤6GkC™%•¨oðL}?× ×Úò³ýqam5ñû¤ûu¬6;€®$€Â6T(@ÝÄ®3aŸ=éâ¦3q_,|îy¦ššÛ!% lÇw¼“ ©Ku|?~ïÝÈ}Îý8ÎPÓÔÖ'Cãêfšê÷éY‚ ¾£ÖdïÓÓ715¿QKX¹…E;«™˜žâ×E¬»ý\vîӳϴ&~÷0맆«=LFÊ3@"ŠŽé¡¡ºdÞ¼©­Y߯ÜŽ*àVn±†ŠFÍÛ;¸èC§JKq*¾l–iÓ Ë“PbB<ŸÆ¨rÒÑì‡)!âüõ µø`jf¼&_wÈ@Q×!z:=ú£´Ž2•cÑL\ÍX[î4ài°ó€{êᆭ§QðU·Ó6ƒŒ8󰔚}u„µŸJ,ëÊš¯µ.-øBÆ*k# ÉžSѫˇhkâ­Ñ¨èÔ’ç­¤X ‘tEùN¹ý’kgAX%>Ê­¼òË©{ή¹Š\º6éð­ó*µ þ—Ö ,É­Àâ†6;À˜)#àlú‡€s7dp„ç;Ÿ?¥ÒÿF†žIŒ8dn¨ùÉŸYýñÒÝ$1î§VD¾‡eà¿N­ íÙŽ¥5ö¤n¡‚¯GŒœö :Œ?•؛ÖãNÕ²Rsk«à¸ú9`1Y- ……¿ÿ …òG²èµ¥ ˆ¬¢ŒÄÿG‰cÒJ*jš&} U%¹_—ºêJ¦Hgé_°NÏ#¡›á]Ä?r Ò;WŸØ²É` èFiqY•ÿãÞ@DDBMõ»q%qùο a¥¤%då¥à ýy=YBô¥ 7JC@@@ÖYd 5@üªPR‘‡D€¬¢%|ޝ€D€¬á—ƒZÓ(èEIIé æqŸ7—UýJeg•–•å+Ì{ÏJÚ{L£±~™íTZ}-•Fg}÷”Ñâ¼5-çNZÇöÏe ¬‹áF†ºgüwù!’ÔÈõв|BSÚ‰lg¤ÕSC»´Ã‰Gï}?¯eçó¥™’Øuüj>vŸsNˆS ñûOñcÝIçÖe,¢6{uГ{þó 'O›edl2Øiï*J_c“YSÆê­>ý”ú&ÒÜ|°±Þ¹øâÖ¹'œ {UA8ÖÆþ½ºì££ÛûÖk*áËÓ‹½MLFÎØ¹Ã¶9N6ÓÐØd€ÃvŒkE\ôEú8´S;}#s~¯£î2ÛªíÄr"ð]µ EiêÎ?¹Ÿ}~ó.3*ÒïTúwOQë±Úl>ˆ•nÏó×ý3©pt#ÓýšãUhc˜xûfls8aT*•Á`àÇv¨ ¼ˆ,V=›Òh4eS¨ä*Éh¬K<0z{6¹529zètjc#y­~¼št%'§r2¢Ñ˜Lò¤›Ñˆ2™4*•w©‹Jk¼¹ÉüV^˳A6½ð£ßJ“½Œ7,OkÐ^Òueµq\á*ïçv‘ Ô”h~Mƒš%é(ŽÞ½ðj ~¹ƒ­ü¡Ø‚å^ZìQH8«‘þ _N±;ƒy —»œÍ̾ìeºòæ­Ë}Oå¾¢ Ü,#¨·Eø kzVT|1ÙÄ)áÇ[ç#Rk›¨Íd0|ÑÙ ûÑAÿœ*ŒÎ,òQ#Íf0›HÄfáôd46rèÚlf#Cäªò^ëV×1ˆ¼§-2b1ð±§l^nE)Û§ðeÝô®0±|›jÄjd0¸Þ–5ÂiZ8oM4ÿSvD¦%$ü ç ön<ýkÜ×@0쯯¡Šqº§0röâû¾’‡_RÌþ›;ÅÛ K#ÐS“WV޹rXXØ Ü}à„‚;ì3⮹ŸÿäïC‡ÞIÆeý½Ç/­šjâtúIÂþqïÉ}^ff†¤¸q!$txw‘3/0)COôpd´ìïlL˜Aá+Á'o%½o}\tcãŸg6…®i¼ë¢Dh s$eòíí­oq­Ž'ó0ëq¹`ƒÇžÓñ©ù,‘ªÐIv‚ûµ;+¬±ÀÓ±q³=zët}q¿rNZ»o#dCsGÔ´¡)½ÙðÑMQ±³Uâ‚WDÙvù=cȽs¢4mÿÑ' 1)6Ú‹?ÝLoMrlrÆû:y°b¸Û…³÷ŒßæR ˜åŸ#ŸØò#_}ûºƒÍ†GñofèÏ |”gM_ò2.ÙL?S/CÍ›2¿º÷9i‘Øýbb^'ߎ²›‚×Ëu¸û¥3wŒßqy·ïÛjµ;`òÏô”,J—Ö W>‹\íuÿùݸaÖ‡Z?­z?jâñįýõóÆúïÙ{4áéõˆ‘cNbÞ¥ÃW„Ý^0ag°—w)Hw¥Ç‡“ïÊæÛoÀ@ƒ!CàÄÿ-øúÒ×]Äuã±ô5šä†ÔéÙFß×°šè6kz~ÐætöÑ»ªÑh1üZŠj&ÅÇÒ‘j\‹Øáážx`É GÍÐW®Œ‹Ô[¹–¼.%÷Ì[‡7¥»ö^è4o MwB^ž)‡)þwËR”ÎwBä†Ï¯‰:c“o%3äªmÜ¥ØÔJ¨\x£Üî. c|7>ÐÜwrUkÚ¶Z.#“>¿oÇ#T¨!_ZlÔ?h_"b7÷¹ÍŠîr)ø¼€c"’ÑÁû„’å%Äè²ÒU_`7ÖÏ]¿ÕR €²ÇWvä·_u6ƒ>É3èÔtóç­ûQG9mÛ:¦+Ö?wŒÚ9D„³âÉJ‰èg‡_<#ÛÙ(&»êÍ­õ³Ž¿ YÚ¿u†ÓNwð`’¸ïð`@áG·iªoÌÀ„&QqQ"çªR*A:\š‘CP6*àV]Át3$@#[¸ÕSFk¾Ë$ܵy:’ŸZh¨/ó¶5VA\Ìæî}~N+À­—xFÄëXFe#¸‡° >]ÝXßE¸Õªd=2ß8Aï1M@í$š½€ˆsšžNÅSApñ ÏˆÍæ]\B£òÞ§áz öÈžòúy¬kšºZìæ×QÛB¢¶Ï~´™U³²sc-ÝpÑ‘%ƒ®o@>£¨¯¡lÍ|biÖÙŸg»ú¾©®«—Mœ·cœa'ÑÎáƒdÖ–¹êX»¸Øé›WúžW©«¤üšÖ=îèÁ*qdâ«¥ÚZ2ïè&7n"HÁÆÍçwïzRŒKì€N´:«‘Ū·ã4¢Ü})E3§ ~e#«ÅÚjêÙÙ¶'*â“À veÙâÁx˜J㬅¢Ì6éd°ë™ÜÁÜ¢Ö4Ž,‚‰@µõµm2,)NLvý—¢û…‘¢¾ÅsÎN|]ãÀ,“BM+:CüÐ>¿2ÔW`Fâ@²ƒí0ÝZ5µǪzôîv%ô#¶æÆÃZK(K¦ã7Ù\4¿„‰ib5UEë˜(¦¬3‘ŸeU°é¥g¯ÏuŸÈ¢ÓèLœ’ õä猫ë6ìKIJÜ‚¹·™>Òl›³³YVJÖŽë?E_‹‘±<ºÛ|²¶cèû‹}´•.¿÷1ú~E#.ÂÔTaš"»ŽÊd7ÒlTHBêâ´ËiŠ×Á­£aµuU3ÑSG*ºZúøžl0Õ¾WBòÛ#gVa¯ÇìõÞRó×P´ä»\|sþ·°S, ݯxEµï¦¹½Y ÛûúèÊýŒŒdÍFNê/ùöáÃÞ!œ/TE•…ù%5@@@àÐÑíVTX.#+5ß~³zwÕïž>4‡ ñŸÄ˜)ÃgZ¯“•—ÞuÔ *M8pÁ£¶ºÞxîH²ˆÿ*Ôº*_ˆÚûƒ‡¬â?ŒqÓüÿ‡5¤'<ü.é ".%“FÿaÌV<íª§l0sk Û N~V¤#)~­ç!ó€È ÿ"‹]ú{±N)l<ô‚é§VæêzóÝ4]û~ß,ï¶¿u<†çö×Rkñ4æ¬C­½²ëÖÞ·çžÝµÛzô(>»ãØ4Îk)÷“/;Ò '¾ûA½n‰ÿXÁX9X¾N»Ã›B*óòò›®6eèÊËm¥ì=h¥àÅQXÊ{#^“¾šßé[RCåxãåÅÄ&½µ“vücôªgç$ED¸CƧ÷–ED¥6]Hæø¿nËS]öЬ¬4Qýw[)ô¥ yžôc£ÖÞ¯,ÈH (tk+©C«ƒ ©œSäaô• •·Së¨ËÌmÍ͈W%©9oòÛ£.f–'­¬¯ùã¶/ö=5Új‡Ö0~æ6A›ôzªŒ¹À'^3Öa¿#'*Œ NxCg}‘4uˆKè³zÁÃèκ3ñ¼gĘÂOå=«AKâiŒIIIÞ‘ßòìQ»¢È-O_({Ìœ‚+-üîÁÇT56¨€éÔµ˜;dëÔÏÜˆÛÆôf£è Ah)~”èÒË’@”z‘›ƒÜFKJKˆˆKËI‹:ì¹O½•ÇÔ'“QÄI•žŽ·ÇÕyFAO«P´ÀÂýþ)bɾÖ° 5dÇœ"î±K½Î¦ö«Á×<O8Ý*ä·‰Z«ƒOä™ßÊX¿÷xá7®Úñ°ëÛrÌêê‹§ÇͪƒÃ¶·ñ;?5¥œÛ5sGó±†ÝÁsø_¨Ï?|áåsžwÏ Ãw\÷‡S+ž¼¦ n„êòèMKÎL™“õ,‡øÔÝâqf:ÈÝøF=:DL£f\gÓƒ·}pš±˜¤¨Ð¶óœÑáf¥%'¯€ æží°ÏHTã;¨%pʤa¢“X?ã¹dÌæ† Éç1.›[Û:‹ÌW)AKõöÞÎHOK­Å @3ÂÚ¨†Ó‡Yc»áç]r‹[°$Qì—2ÔúMÐjDŠ8d*Ç…[D¸Œ{(ÜFKY¾S×þúª!éxÖÝE€T7=T©Î…[ñ¦?x›3Úo§$”ç»–•Ç9}OX6åÛu“úÊ(+yžLäíšÅ¼´ø—³­·†zõ…²žÇG¼ç^M@˜=ìü*ƒÉãHqê%"ÿê Šd_*‡É)BÆžZ Ùx%u1wJðz 9iDDBNNÖÐ1 E®Ï/…̶[Ÿ˜þÙi.Y#Öµ¸ÏÙ_¼‘"x(‹ðð‹ã5u5bâDâÃÉ í6 €Ÿn¥ñï舭­oÀ/M"š¸BÅÚ…Õ²·àòꀗèÅõ6mú&óô”˱H~®i£#ÞT‰ì»“y>!Å^¤µVq{”š&JÙQS‡ß˜‚Sšý^Á~+q)ÂëU7Z°Ffð\¢93olò‹Ìo%é$Oö%e“´¡óp» ßÍÑÒÔW7#}Ï"'gó #ÍY½Ž×'Ñ“òêÛ$Ò†³šf­æ¬ÁíÀðæq–žÜÌ70ú7å;¼+»­ ËT¬ ¬S[©…U|×E„…!ût¾ý³³i»B%·B•5 ¼k¬)ƒ±õEºà9Q/qNÏ&eÐto¿èbî»9n¼*X|!™jEBtlà¼Þ[/>~ô –¸Š°ùæÏ¾r®¨ä¥ ÑÇ–t’ ýcˆÎàtˆ,Žýæ¤p³VÃ~—öYxŸ`QC쟔°8÷i¯æÏ”q ÄYGììúò)˜Å9M¬áyð²ðy¹œÇ•7†¹plQb.¥?Sž‚MKM—÷©ŽÄ;ïþE{ºk§¿äߢ†U#Ù׉ÕC€,.ôeædc¿˜òvë1owƒÇÊÚ⣦ é˜öäí|£ƒZI^lÂNWŠ7ß4UHÄ€ ò°sm&]é(k¶`oÏt±ôâˆ!Öm²†¯_k¨«ˆ;â1Ê#7Qô*¼4ö¾IX̤N¨@ÝÂüAjþ_±ŸÜÃKs:uÞ–ƒ£Km¹=Œ|½iy€UϪa×s<Œtvå[bñ„¨fcÖ–ßõ_5ÕçF³¹Â"ä…üˆ¾v~ñPìMý©þY­4ai³kë(„ËàñâæÂ¬až|i2ÆÑ 8*VEMµ\›–­¨^ûôÖ K}CžëÙ{¤ÏÚƒƒ–²çÅØ²»ûžÅ[¿y-ÄríÁRÂ蚃w]?Í –dÖr,Ô¾´dsø½& ·ˆÕÖÖk lì 9ï˜$Ñ•ïô¶bê²ûJbœ£·ª†.‚Ä x=çøÔƒqw¹i•*‹ c¤ó®Ãý+[Ê”0=E6’”0VßcÞþ†"*myµ^U 8áhF8ܺ7ÄÆª_7™Þý‡·ÀWmPƒ9du\‰[²¤tºÞ³Kº¦WQ5fGß-BÿZƒßp,ÐÃÛ QŒ;§¸[ÑqAc°Ý ‹ E¯B@X)Xtò©¨ÞS>}*øL   óªëºÎÞ¦._?y‹y‹¢"¢ºUÝ=dêq¼·W¯¦’‡UAö…¡ˆóµLòPi§üO…œ”ÓB1ŸU'\ÆIÕÝó¸|5cÇdéU‘²ä…nŠî½ëѪËoÄéõÆO3‹I­@|.xurÛþÃGñ² ^úþnŸ¹þå_XùûMU ²¦²hlÞÉZñ|n ócñ1{Ãþ°ÿãESl|íØe<>ˆe4-ù·íŸcµÔ@ÁmÛî’ª±©+-àL8ó¯°á°êv}/ÊX óEø-F­T,KɦZiGL–\á›Ê´8³8ƒÍS(J€tlÒe}¦ 1ïæ©½¦y‘ÚzpµébzÏ¿±ËÆ—T%ØtÖ?WbžF{Š_QƦ{ï>”^'¸ß+À5·Ëçå ’žDÎ*m~쨅԰lß æÀ—M·‚I§P³R%.PÞ|âÒçvŠ]¾çQ".DÔÖc%+¼>æñÉeË.¦µŽ©Å×(þszž'êj!0©¡ù¨ì!Æ_U\ º4ÔÇlö‰úÂ?9cÁ½ ‹×‹J_†MÙÌK.®µzEû§Ï ™‡}îrÄ™×ì0í±‘ÉøyÑô¬1m|¡¨Ì Þq‡#MŒèÒZ I]aû4æCG2J^;*õYS­2ϯNlã@ô #…_¿ÄÛ]Ïç F˜bBýçÔügþ ržêþ‹Sc Þw?Ô×uèK­¡Žþ1ŠâÃa IëàÏ9v>p Ks5Ut0GQa|^E±”¼¡Q÷–Ÿ¦Yl¦°P{‡Pž§†2„Äzöœ ")`M§¦2ENѸýb|ùXÚES…§û‘ZG«,ÈPÔø}.;»pêäì…‹Û~^³Ç/HZ„æ´ÜC^vÕö@/Ê ºKŠ+]gýcä{N¾«a›XO¢«F¡Pþ8©á;bíA?3»’ìì/©)ì߈ ‡†}÷4é557Ý–ÿNTú¦«\ ÄŤfvˆ"$ Éþ-(®ø@ol8¶øû&{l¨yÖÍ¿­ k€øƒ°ù˜µª’fOþ ´êï•æÛû÷Æ ´Ú¼%@¿/d ÿ=¤ç>Üå[U[L1_ºí$å{%{cù2+kZu••禺Ғ߆\ð*ˆ?ýt,xn?÷¤ï•ìÚü»,ŠcÇÙPj€€€øÍYd 5@@@@ÖñXƒÙiñ'€Éb@"tœ—óÇùn>f-). )Òq¨«öÙqʾýcßÂå „˜Ïà±ü>Á !¾‚5 ˆÐ.—XHŽ_eoß²ètµ~ý ) ~žBYDÇ ˆ_Lj­¦¦æs!$Å/7ŠÄÅY¿ÛB>‚~£õwˆŸˆ ‹‹C:üj`3™Ý›#¿ϑy …¥†ÿ´FX@"@ü$Q¿é ¢9þ'@{çWc÷ðçéÞn{ïÒ^J!2K¨l‰HÉÈJ!«(‘™JöY #²RICiihï[÷Þî¾÷ÿ<÷¦nñç}ñžï‡>÷žsž3~gýÎ9Ï=?ØÖÖ6..ÀW@Öàì@ŸJ€>ÑËK S"Êk?à„t€?›É`Ð,Mfê©Yi€Bi8³¦¼&7`Y< ðÇÑÜZísÐbëeCÍ‘@à§ÓýxB€_ƒW$l6‡Æbp@àŸP€Ò( À˜øäp÷šM-•B‚¨ ~,z<ábü¾ Î@8à'®„þxl‡-Q”ÖÚnïh³INRO¬C>бž5n3Jè‚©žÍ¦7÷^˜K¥µ¿¾|áÔ}–€XÀÏO J²:˪Èéû¸\ø€àïATHró›@( ÿ-X„ÊäÌYízJ¢ßM,JÉÈ'2t-‡ê µ»Õ½y–M2ÚB¼3£.'%µ‚ÚOרTKù÷¡±8ç}~)KÁÈÂTC䛆t Ò+ÔôGõWäuþð6èq¹ü¢éî?õ2WZIFÊ'¶Â°ºðE@ 䤥Ö`ùùèt! u³AÚÀ†3ðçòk'ž] ¯((*€…QøG8mÏbüse#½¿¤Â‡&¼åQAÏ¡ðÄ*{3‡=-?1¹øõi;-˜‹ˆÑ¡'%?=óäÌ‹#Gò»ñá›!_wÅfä‰ÛˆåmQ=Îy"ÜÁHaÚ ¡åy¨8Ìo¾.YgHy‘öq»9圩¼ˆ R ZYƒW^ Z—™lM¹e•3·¿û–Ò5ýšè=nòí²€ulVæRQ×77Ȫ >÷Ï;3O×0s "!‹¢­4aõ©[ËèŸ=ó&ªÁò6Ëó9Ñ·e\e®*."Àóaùù±´"]Þ#^…÷C¤°C]¶7vDL)ð.cã{ ù˜8™›¬„Ž©®²$ÚþlãË¿%ÊÚ—‹ÇȈˆHœfƒ¶7!›ÔµÙ%… ãç&aïu¼¼×—Ù\3»¿"×wÀ4ïtn»hIuÖG]øø`q-SC}‘ö,Wžã>‰—ëo¢SpÔQ /8“ñµL¶¥Œ04ô¸HìÔhe–ùîùæþûœ}‡oí­éÚËXl«›v5»ò”ùÝ-±þë(«y;«¤ç29èÁââG*±õÔä䥥DÀ(”†/¯1ò Ȇ7ÊlúaËjS~xø®Ä.Z«ó3SSÓÒs ;fJCÙ›œ½‡Ðð1;7»ugT|ÌÍþX‡Ž™øÂŒô”ÔÌüªÏ*ƒXŸñ6Ÿeö¶‰D£ÑwØèuŽú­µ>Wf=½÷0.£¨(·¨,ÿ}ö»wé9ÅÕ]R£·–禥¦gffeh“èÓ=Î0,¼2ZàJ1•ÍŸ²ÐCàŒ)åï‘Gß¾Í.úØÆ;Ú7Väå–"S*“Pœ…9õ}y9¹{Ë?¼M—WZ—STɆ ,ß·w-MM ´Œµº¤VXDß/ÃETè„| »&j0O°¤‡ñhÜõëkõ¥•”Úu fcÞ“¬æ5…l6-KÇ1ugDa®Ç9þå+ aXl¶Õ¥LnYëS‚ŽL‚Ҥq| ³ëÊÁ{êÚeÁ.º¹U±Í©øªÆòü¦6ÞIŠQ[\–WVƒ©!ïM³˜HI¼×ª )ËËud0º¾,#·ŒÎsä/ÞUyìÇb³t:ƒÉB"?ï9 oÕûfÉÁJ%'GM\^Õ>+R* š «êÄ&øßãæ„ñéºTmeÞ-‹…¶¿Úx[Õo‰’Ò”ø¦IeÍ}6š›öéd®‹‰¨´ý ŽzÒôê¨",0í5ž@ç&q`Rƒšl¹ú4êÝðh¬VÉ%:0¯†ë›r`¸ƒ,l¹¬FbÈ¥|Ô…Åb?_#™Uܶ?³=†×Gݸ)‹ÉÊ+¨è/;uÔ *z•ó•.µuÌÐl³ïNÍà~O¼;yñ¡¥Š£Nîñº¨ Ë:-LÝ8cµ­…Åmr%ÇVnW?ü2wøàÙâ,b ¾ýý›‘,òË÷CE͓󉅪þ¯N¸Œ–QP7`¬§¥®›€ÒÐWðmDä¯a¥öïuOgÊø1«‹éÒJÒB¹Ñ{q0§Í»ÆŠÀ‚Æ1ŸeÅ…¨ &°ÅÂ2Ä';lâÆË£½/Åîs•숑_D\IMŒ³¥\rg¿ k/ nÄÉÊI fFú‹À°…×AnÌe ‡†i °†ó)†ˆ*óÓƒÑjÂbN»‰ß”ÃnHY¬w?@2D¢Ðú(Õ‰[0?E(”¿VÛ”ôéžÇ’þ2g ßž˜Ù-›Š,á©Ýç iŒFFçrz´WijP»÷Ö^ÎkN 8ösämöD™ŽÄ,.þ¤!-l_BìQÏÈ<™Ë9Ù^6ŠJ(IË¡¡¿<9¡·”W•”Õ¶ ½ò8’òlïÅÜÈå«&﻽ÃúX^O qÚ%2S±Jj ê¨ Åùòòë‰tNÌ,¨ ¼•³L)^Åj7'W½5cL CX þÇÛ+¥­É‹®‚Š GrðÄv}æ#öÙ¿¿­_ÌŽñɇCŸµNy,KÄ xœÕÿ³¯ÖìG·½ÉɧÂbŠ:» Q‰0õ âÁ((I²+‹JÈ_ÈQè¤Á»+&¾º³¥#ºÚÖâ¤WQÑ/^/3Ö–F|p"Â\‰kzÝ^æ=r(D#ÒèTþiqHXFRÓç'ÚÞÌ–Ç¡;+ÊvoñPyàp>ÎΊÃî80æ4¿ø)5¨õ…½w¨‚'n¸ÕB¸(Þ~F_å>{ÎÍzamÉ”E“G"³N€2úíž½x£åP-èÕ›2hÑ?‹]±¥KÏçtQRY#5k»6wn¯i€5ÔœáÎhÞGЬæT`ôñS:TqÔW•FÆ0Þ‘RPªßà!ý¡PVù¢b1ÐH¼k–¯ùÏݚئ®­°{Ñø Æ`1Ta(5rùàpfd4WPÓï½°ù—‡NóÑX•ðîðx®ƒË΋¶fÒòŽk<-¦uÑb’š!¾¯™[‡q¼u6øûÜ^zûÃÕ&qÞCWGù^/Úí¨Ý¾åЬ‰d›ÁêÓÊONk°•VôÊ–‘J¯Ù´¢õ£a§çÆùÝ{¨Ö–:ÛÈâz)¢Ü˜^ÎNÞ‡$0È´N£ÐÚDdÎTUëbÈ€OZUYCVWÐJ!~my ÉïÕS‘ùŒJ¦ÐM y£ø{²:FŒ)!ømX9E2±¼º‚Da­4bsmyY9©Ïd³é,6NZMN”õ`´¥WŸÉÌÐRÖÌ_xo¡(æg4W NMz¶k$¼‹£ÿ˜Ï8õˆkɺ¥™I‹¨t+­¬´*¢ïÕV5·’Ø ª|×u´˜´òpMCßKůæ 3†ý Œù•¬—N†o-$µîýƧcžúúØîä6$Ä{`‹‚œg^2#ÌBCùgubi‡LV÷7g=í½Nñ‹Ê`ø`Bmµªýʸ{aj¨ª2ôZGå­zh¤3ä~»ôð40Ô`§¡´TBz±Ümü$¾¨éŠS“Û„°m4¨ßŒg¥Õ5ÕÕÕ•e% ®j£%â«2q†5¡03ö´ÿ=œwñë›e;½.=¾Ë Ñ;Ùód¦òèÚmÆ PíÓb µ! aY‚b=|…úN)ª¨ª®ªª*ÿT^WCB²uÕMQÜÜn¼t}ßÖ÷ÄÞâ””’„Z ]NÎßV š™º¾ºDæÃ ›ÄæNo:²tæG " «€®Ðð³K~^:¢/àp}Ôêê7ŒƒW:“‰7…OÊîC2|Ô2N]{b64äZ *þÛAsè\-g}#¦†7[×Ý…Ï›l¢2Æl° Tºïä=^ÿ„S!9ÿÌ‹–ÌšÑßœ¸úÍÉ9‘ÐÐÄãF(/ƒÄ¤d)”6ò±ú£°¶CÒ4î¬Gõ$ •‘©t;†Ðs U‹Azf£­­­ÇŽ0ÎF[^¨sƒÍ€ ñˆœ´Á…ëL\v¶IAøÿm®Lú§fH×ç÷ìàê,’Óp¬ãîg?ãE35«Ÿ¹ÇûJGiäñ³ÞœqýÕfN4‡šœŠ)æÝܹÌ„LÇ îsr¦ö³®É9_yË«1^mã™t÷ùLUloÚNmqA{ÐÑã›>ùX‹°¾SÔü“ú0ÿº;µ1Û¥{x ]ÖD¤ÕÖ Ý„Àdçr5†.»[ÒÚ`6 Œ³À߃­­-›‡¨û›Â'±×Ü‘u³Zláçï¤wd‘…ˆùÃFî÷Š­ŽêHD4µŒŒŒô Œ•¥pÝ´¿*tR ÍàïЯ¯Ñoªó²š¹þåî&|âÜÒÞÒ½³sކœ´¾žŠ:‘ÈkkÊ+hÌØz7LaL€ ªºHꛘ¨)Ê uÝ[Ó‘ívhZrJz&&Æ”ÄG.ÊlâzÒ£ÜQ_AI9“††jbX‘®¹,nnØ£[õ::†Œ ¤Z6× ™Ü'Ó,@¼ï×N‡±¬?™=jE¿wi|à¹û"í==Ž ¹è|Î#µßG‘0‹c´ÑÐÿNé»ûQ‚ö÷VøAù×yÐxþÁæ’ª,÷{@úËxuÄ}„WDè«Öµ–"@¿) ñ†rvÒK.¼85¯Ó±6e¬ÒÐJï‹yû¿´—’ùØó|q­O¤2!øeØÙÙ{þ+ _u:ßpÄ¢I¢>ÍÐp÷ˆ—á þkÀçDY»å}Á—OÃ9=뢩ؿ“·‹>v.ûã!ŒNÀ¹Wþó-»ø)X<ùÖ«-¦6a¦6a•¥½ÌÙîuŒÍb â@üe0™¬V<Ñs«óÌùãÿ l¥á?„žÍÂM ÿ³Å—4šÿ=ÿ÷Ìۼиy¡ …v'ãM^? …Ñþ@€¿·½óÊÿ¬<ƒ«V¥P¥P ÏP)ô6"ÈJ|ƒ•›çDÅ9@i”†ßŠ–Š{çNßK,þóþ0h,bWÖ‡«û+Ó–‚aXHÑ)¹¢ý" ¦Ôýâ0¼éF—ÛŒî‡,•FÍ *„<¨­¿ØïœÔÉZ˜QEúE‰”ÇFO°èà­ÿ}ö›“GfÍ:[ÔÒ÷'X•™ï_>-&Rÿò±Æo¸Þ2‡Ñkg ÛvârÞ‘ifþë…–‹–ø?üúIÌ›K.°üÌœVÐK±Ò@*]bŠŒÀbFF 2VU _ìýÏÿcÅ«/O‹ ¿—ÔÔÓ/;LÉŒïÃ\³ÛI)ˆœ†¦©™™©¹™,ž¾5ú§gfR ¶6Æ7í\â“GZ)™’Âf³ŸîaZMª† Ô°©Jǯ±ƒ;l5½LE§„6¼Eo¯Ý0±×õÊ*-6{\Ê£šT<³€aÕå—‘ñ{\t”䌚÷WSCŠ,,¦bf6Ð@KÙlή´¬$Ok-]cSSS! cµ´ ÍLô¤•WJFž­Ý/‹<#©…ÉÌÜ\^UkføÝï‹áΨ9H`Ô:gÍë `ØÀ¥Í)-t©!@]Ãx°Å ~"|Hê+Ž¿í¨¡ó>C_}ssÓF2XœÍŠtny7O×PR`f®§¢Œ6MIUsózŠ&Ó·R¡›]ý„šM{àN7SÑ<÷þû-kãóçð#1«XzTõ2CŽ9{ù\ažÉ>ë=CõÇ‹A¡ÐÙì>‡g´d'g=OÌ.m¢üÕšÄÂ;^œ¼y±’¹®ñÏ(,Fß2âõÙùR9“û½îÞhÚ"W›£j¾šù´eWd²&«c̷׃¹ ðoñK V±i%®ÈœeLýìðxÝX$ѸêN{KÅOfJp3£4Ä!6•kuˆyÖ{ Î`e)«[Œež&"£=O¢Î¥WTUõ¶EW±²¢G)ržÇéî¯ä†»²qÜç"bÇ8‡Qxòtdñ°^E1iËŽ@VÕÆi¦íÏ+èŒ.a38Ö‘Þœƒ ¥á_.s[þÓý–bÜg¥ÍŠO!vXÿÙ;µÿØ•¡u%κ\Ñûâyž%=:»^“7O’V÷{ˆ 'É7HµçUÿAfA€­˜êoB÷P•ΪÊÛÝŒŠ­á†'Õð8Õ¿#­ºØ%\þeY2Ýò¨× \rW„$?ïj©öñnAZp.¯3‰< Løf‰>^^ŠTçŽØ*7ÂÖaÀ˜õ­„úňô ½+yüêž!Èdjì*n'z£²Ïʯ'AI9‚ƒ ë½oz·]u}%iFe·}_ƒwFAQÉ7•æë3¥üÈc^;OÍas¼œ#+{{´ìÅ‹MÓ<'_7køªö׊Ø]ªª-ýö­å£=¦Žôq²Z7g´—‹Ë¤„Å÷îìó‹ÿð.iɰ….Ë£ Ä{;öŒ2Zz6£ý±ŒÄÅÖ+§X®q±ß´Ò5*³¾K¤Ewooò8•Û@O™n±tÊàõ[üâšú\\©:|uÃ`iƒ—/\žœù¹°ä¦ˆU¾Ó&î}Yð¹çÑ —ÖÚ9KùˆºPñ—¶„̺|öŸiC=×lº_ZÑž±×§. JÌMM˜?háÒõZ‰-—7Ž6ñ=vå7@üÎCÛCðÍͽ·Ùš¯˜j±õäå,f·œÕd¬í–Ñ3Ï•y鎦 [=u°Çÿ%̾W/£õcĺ½3ÍV: ó˜<. &…×îéCÂÝUc¼§Z3m˜×†í«kÛc~yôÀ«÷/î8™.ô|F&5žZ¾y´Ù–È{ÅÝì%9`3(èUeg–nmA‚‘Ÿ—ŒÑbýN6“þ&ÖÎÙ³éÌŸe°ê—+ M ÈlqÜËŒÜi'×LGFóÑ«Oîåž–c q¢™Ò¶õäSõõõ"ÊY‡Í×Óš»µ X{]⛽û)êZ|Û*ecr¸ç^Ø„|Ÿ±/w(¶ÑÀø’{™NJ`¡YÁ½tÂHW]åa<ƒIèŒþXQˆ¦㥌ÌW÷ ¾0¦äß4„ ~Nþ 3Sá]=dùcãÅ5myÔ]÷Ûm¿Ò>¸V=ÑBT‡Sè|òì (Ù|Ú[ê>k2º[òƒ«ö¹±$4}g"¯#¹¡ìmjòµ}KEÅåVEeu{$ÚoB¯*ÔØMWÿ_¥áQ0-¹ùY¬A®ˆF¤•Öúm¥áæ¦^ÍjõŸø"î¨8mŽéVµnº0¤2£„;ñDx£á5‡Žy[ØHú^¥™\ô ! §KI¯Ò²J}~ͳÃCtlo”t¶µ¶’«ö:;bòÛ³ø"Þe¸÷ÙW-½TƒFn%ò8/úlœ¹èwRª{yßÁdÅÁû*T晓&B”êÇÑÓ4ïº\†´¾[ë7¿?·‘Í|oêØOr»”:3&Ònؾ´Z:¯cI|Œ›É‚Åko•¶ëõÔ›[&9DUҾݷ¯ym›ï~§0máK6»¸\êÐVñɦ,ñ‹È%ä¾v5tÙrâ}§ð D¥3ºÇW§ZúÞNF3œ}ñŒ½ÆÒCC:·|í„ÉÇËÉl›ë“lBÞ”¢}!qÿ‘)FKw†§}.^Ãá9kgÌŠ¬û¦Ò@.Ûa·ÚïO åoã¹ýhzª·)lÞ*;û°ìÎÓ)tƒÓ;’ãfê¹ï¼Û™~êÃYܶqŠüöôÑñg_ ùm:ââ1É1¢U©ÏO´=ü¾®ë’ ñýûÕ›¼ãu{~ÜC›»Óö=›XÙJs-PþE¥á—Ûž`3‘¶.©ghBpêŽþ¼ ˆ}‹ÛEÞÅÝ)†>åíUW:̤±!˜ÅdòKIõSÑÀ–Cê˜á¢ГŒÒ5m7ï•JBm'—s<®œR.×/púîáGe3d³:Òoª!7>ƒyAìyA]Ó§AD*$ßË) “Ĥ2 «Ç¹5ý}LÚ'jUñy&Ál&Ö³Tщˆ!sYU3A’=ã|qa.ŸÄñ€™Ï.:“÷o6šò"»²V(Šõ^_'a®·‚¬œô¡®ùxûÔ¢’cè’1±éß'êwá {ß¼ñž€ÃÉ"b‰ þö»¹š†Ž”‚#¶Öj$t—±Ÿ]š`,÷Ù©)o¢ºA)ñÿnº ˆ zF¸“ÎmI,¥¹AÔÊ3úl;J´OSêHø‘„2ÏñrÞ=J0´¡#¨Ž´ÚªÆnõeMlXEEœóeØ‚#¹ Ž ¥còb/ÌÓ”BÐ:–¾xD_sO$à)²…±©––8÷á …Ñ«R WñºiÌ~;»s£™HfQpR¢½EµTDn<ÿ¾EF]I”Éb±ðµTsNº´ç÷^cw³Sê4]˜ãG%P¤4m'ªAPk#2ÕÆ@jÉcbXP÷³ âçgxO9(ª¤ÒtW;õvƒPX)y èMé¶ü_-m]aF-¹­9Çϵˆ…¡±YL>aQ =ѺH”#f‰¡ö1É»œÙ†[}ùèüáâ.çî½_ÒåeÅq,6Äjó¤Ð,“[È æz¶¶S×Ìàî`ÓOªnauôa¡§o2ÛiP{'‚d¬Æé?½Z^PÉ©-ËÍé¹t¬àÃ;«Ÿße!D†@˜_TW]\€Œ_·ýZÿ:-ù#væÞyÆ…€°Ÿ‡ÏôøW”¡Ãç9t6†Áæ$^NùÈ\fDk¥¨X! Ñ[`Ñѳl8ê9%ê^G‚ÂB¶ ßeP¹ühÑò£‰¾s—ߥMJ_¡/p§Z+*ó«‰8Ø)üóür¥‰* ²*’0núæJâìÙÚºÚü—–gëAfc'É@Ç¡á—Øµ ­äZN1+ð°¢ lqŒ6t±0Å¿H]9B¾ý‘ÖêF2ŸŒ‚˜…[ wØ t¸èÏõkxwÌ9(g¸[8¢1@=Ç®^Å`¢›öœ ‹Oß. uÖA¾f…ÏŸ²)´âƒû2aAá‹Í—¾R(&µª&lU¿UYÆvS«_3RÑïÐ=÷só¥EGyø¹ï¿^ë=\¡Ë|…èÄÞ·-Y Èü‚ÿ盛‘ë hÁéäˆùúßÿB™>m<ÊY+Nmlf 3?Ø=p٢ѺêÙ›Çêp¼*}§Ú8ðjÚiDŸ¨¬†Å””8#*3š¸lÛÎç“V_®­oB&²>¦ßPôäÍ'÷Öªÿ¬¾ 1LOI"öá•—ÓŒíêC½±;êVžØŽ;Û-d9o•d¼Ø·ò‘Å}i§m¢ÛrëebÚø¨Ê•s9jïÑ4!C{n@'ÝÏÕÇd}ñµY¶(†þþט*ß<=´ó™¤íxoÏá²× …I®_¿Ùà½{Ñh…_æó\öþÂ9Ï´åÇ¿5®Zçàí 1ñ\¸£Ô”‘ºã¡iÀæ ³´8/®;Qð°›u¤Ý!…@ËÁi‚=KÄf±øù>«^ô┣'^È]`Á«1cY8¬ Ãû ”‘¶&ëV¾Ò˜S¤Û##Z™(¯ÆÐô!õØöXêÀá«|ÆÉ6®)g¦£!Út+äòóíR ),NǙێ¿uíVìðÕú\ù–=~pæfÓôP $t‹”ˆ[6ŽmÃ/‰º*¥ ¸žnggÒÑ0*+›ø$•”D—ó²„m÷3¿l“û¯Óo2 ]M ðÏó‹_„„ùUtå Ôe?O@:× JWÛ7-œ²4](j«dàS¼.»÷‡a˜_‡üuÚ+"ÅíÂbsV›ä¿¨6j 52Û|ÖAíö£4Çéíç÷üýUu5”zS·)9Ë‹ ±ñ –ñkö£ŸD_ˆ‡•î–ðìt»×SrKDb`}?Æ9Ås}DzYipô<ôÍ=~4W†S›`Î0#hpý›]O8㈸cøùPß™ûš8±¦]}{ºàe4J˜Ïå ;ƒÍ~éÎYVÝ@[_C s>Ôêß¿¿¦2ŠÍ?ÐVñ²i÷H4+ʦ%£²_ì’וÁ~ëm·¶\' ‰ Ržì±šˆ8a绨 0M$µªi«ÏuØu¤’hLdõßÍÆ°„¢¶¤¡¦¶‹>¥i ©­Ôu~ÅIô7Ó–ï}=&¡¢/n %ÜUŊȪ)(K ü@ÃÁI(+«ʉòÆÈ§ ÕßHU´‚–†±+3XçÜ8B†¥Ô– ~Gg¿›­†SVh9èd©}~¤j½×ØLf³7Ûuy]’6Ô—Òê5ü  Ä A¬ŸÙ$ ‚Ž8·Äžõ;ñ¾«‡€cÈ–Ð:gmY4ÎgÞâ¨6qýÙËFH‰â¸ýÓtÎüè‡KÊOtîµtñiìÔùûOÍUàGò)&¡¢&'„†ã“R’W”FçoŒ˜ª†œ(꥜‰X0Ê{þ¤máך›³Ž.˜5jƒÈKn«Â‰IôÓ”ìl‘"ÒÒjêR}ØZšs<(þîÌ¢+gݸxê6«5ÁG3YýœÙTæîwì%öôã#sFà }Oø mñ»':©Jz õÅgëø“®Í»ÁÑ6 ìJƒ»ÍÀ¡ª‚œÚ’–VQ•áôŒŒ²¼<§ý`EÄÕÕe…8Ù◔ƔfïrܶdêÖ96~{oQ‚SÏØ3)-íÓûÀéëæÚû¹»ÅˆëõkH½ã>ÁgöôciŸ8»vºOŽ]£|q}ð|Û-‹'og¿íR|ƒ¸æÛu'¨¹ãaäÝ#ãŸmÛ3Çf“›ÏÂyáÙÕÜ’js)9l;wå´Í 'nž7!ð Éäú‡ãK'¢«A•~RheÀXYey9 ~Žä%ÕÔ¥yR&g%ù®½2Ðw­Û°í*¢•þv0,~'/7Ìø^q™Ìsàß¶µµ‹‹ëø~þÁæ’ª,÷{@4OwZYû=›’ä>D\HLLóoå„ÔPUY×ñcáÞ¶]Äå”UdDÿ¥¬Që+ñÔú”õvS¯`§¥äÜ"ñ³Shk8¸80ºNíð/3 h–ßËÃÀ “Y’Á‘º¢K‘-WýžzûÜjeÔËB®"~Ïô¥3.”õÿWáã¶WAEfCТ?%ÃvvvXPmÿ¬¶>e¯mÈzóêÍ›÷ƒ‡Zü‹J¹¥±¼¸‚-,Ð}€d³(tX™_êßSèõ¥Šðë_¶^Öû%)Ëz_ÞïF ±°@cø»¹ª0ý„þ¢"±ø§nñœ!*ó¥ÑÏÖ7­ Ô<à·( ÿ1„eM¬§šüÛ¹Õ`£=à·¨á+Ã_ßï¤Ä$@cü1¤ÔUÿ¶õ6NX' jö?BK3qÁÄ-㦠[¹y.Ìc°èâíhЕÄ)§nm“–ûÝGp4ÿR¢·^*È)Ûµ>\@',"¸wKDчO7^ìÿý5 4ðOsèâF)±ì·÷¯=“;p~ß’sp<À?ÇÆ9ˆº $,àà:îÊ6Pø˜·lÒ—gp<ñ…Fg°Xìï~ŒUû¶àI5‰ù‡—ž]VöèC}c_eEcôjŠô15')ã‡Òïͱ1¯àiRë·L,5gÜõ_w$ÿÿ°Ä„^Mc€.ð·A-LL:[€'ýAY&ç?K>xOûïU‹Þ@þgæý+ Ìæ{á[–/[¾Ðm¾«ËlÇÙëŸä¶ü“Å{qܽýg€}zÏiŽYqr׮ȇùß9ÙÖÜ[¿lé 77W¤DNó¶¾.iëûÓ Ù±k¼½6zÒâƒEì_‘vñ…;–ÏÙr=ók%È: Ã>§³ùø:nIh¼à½jÉPY, KzzÑëƒ%o·. ´üÄÒPêrNKÌõq Ίy~çñ¾¤¼ôf:¢¶d›O÷nÁ¨}-ýÎ4ï@êw6äJcu/f°ONë EmÀëXxÍieC|Î#Ÿ}MdœŽ¼fSßߺz»é;3гâŠÇÿ`o~Œ sÎÇÞþ†s^n1pš>þºj7D­ÓUý¾Öƒ˜Í/ö„Êú^ÙÕÂfg%, ½}Â&çåܯåô†’”õóýÔÅžÊÌ:ºaÏ€è%]lcÅïFÕä\+b¤åæô¨ÜË!y¨,$çx¢/a›…Êð_Ù¶ð3­c¯g±( âžq†ê»Ý‹Î8loáØnc}zzÞB~µwíg] ¾$Áµ/Fz‰(ì®{;z~ÚQg¤D;[‰¬ÛÞY)A2ÓŽ}ψüi³Ãjßc¨™ß§»vÍ]s¿¡¾l£Íš kñzÿK=Ï£g_<»tu¶å¦˜ŒïGlD¦Ÿ½‰u=‡åMfˆûç™–uÏß ΀y¡]ƒƒÆC™ç'äúç£ »]þQƒUœu]û~Ÿ’Õ\'­Ä¨ÊúâØb€jŽ4™ð’øÂ‰É‰7ïäÁ£.å&ÍUƒ¢·Ù:ÖÆ5gØòZ†b¦Ûb5¬8þöØrèc”ªñbAS¡§l=Û¾õz®¸}J΃!âPòõ½þÒµE£.?½¹èÙ®Ï ³žœÞóŸUŒh^iW¶»÷£‰õDÜø…ë}fpÍa—oµ¶ëÎÁi¼’%ÿÕµG¹ko§…NÓåÞñµ/µ…t§8M‘I½[ÙŒ¬û¤eôã|+¦[kv´ßm_pVJ±ÉÚkÏBg}SN)' ]~ÎÀÊÉÊ@¦­äiT\n?§W¼¥û ã7aó‡­Ê‰./vèAVÍb«Ç+Â*—ËÊç¨ññn®xXØÕN:Z¾÷‹ïÝ´V´à!HYRš×ZGeæÚ)5ó]Îh~ß•Ð5—.ÎË¡ÒPf²q |òãŒ7fãÂ=FÛöÁ®íý»ÃiÕ-BȼÍ/-Ĭ|òr/]c«¿óv¹>·ÙÊô5îÅÌuy;Y«÷öÛL<÷©jlDbäö© º—¬ìÉp›A/Ìé×M¹îí^)³Ä#hîwÉ¢âêö¸É–{Gë4È ÖR}uuâxãÝgGMÐà †Q±ž²sSÔ†ÕϬ†Œ#Û^)Íè¥ëuu¤O¯‡7Ên16€pÓg}_7|sÈ´gnšÀó³®¶ã-ó„,íˆ2`Á–wn¾®s;–¹bâYf`¹Š*gá:͘ÊÄPJŸ±!1ATTia^sW¡6S®ÍÊ O€ñ™IUz·22¦«A¬²$F*Ýû˜GY Q9鮆ŸÓ­~no8:IIŸ¯˜`f=nˆ:þÜÉ;šÓÞ|¸mñ­–t|éðޝ.Ú° ÷“ôëé)ŽêÐUß‘sB^êt²6‘¡}zuþ^†èHßÜ绹Vd²¢ÏjÛÍÄí3ß·¶è; êNp¶ÑÅ´Ý¿_.i›õ`|?ÎY‘hg96ž1ÄÅΆùدÞ4¾ú$ÂL *}v~kè]ŒH[jM;ëêžS(-­$m÷Ý«'ã ÆË›'Ï&äËJt^7ÆdPX8ùkWïŠ>øîæƒàÍ©CœVŸ!¾^0ù„ËñÀ)f7× [ãýj ú!çú%2ýg^ZZ¥¡Q?ï‹À“CnKm¸‘°wí%žq–‰Z B¯Ëïû©Ã¯ÞiX5Š'1a•%ÛâkŲkê¤;ÎãdÔñ]Ûýýö†Ÿ -AýŇõbò1 —3 ²Ð¸·ÈÂ,çÄ'µ9º”cû Ò!‡,ⱃýpõ çý ¼ u¡„°©§þÆx{ iÔv»žöð)Ù_’{0êôÞÀm~Û‚Ož?æfLÜê—ªÑ̸ð^$®í½çYçò›U¼H’œäß©ë~¼€Œ”c×Ä|s§áñd’XºãðñC»·mÛ¶ïèñ½[\Ñ~’øíƒJ"Ó{”ÚF$ÐxVæAÖÊp?ÛÞ”\WT_R˜¶boN÷…(åÁkŸ+jX½>ù†Æê¸/OuNTù‰{®=†¸¢0Ø:×zÅRáóË ÔŒ8¤bf“ßNö •mKÚqxp쀰M“œ¿2¸W¿Ø1té¹-ñ¹;' ýýÌãÝ.*0Œ⣊ˆrñ­ÖD¦°!9aUžÊh£Qˆ›`Åš ƒ>¬ëþ”œÅ½Ì7“>¯qEôÍ%p"’æÛWwo~|à„Ž†YÄK;GîàCÍ v=·ë…Õ‰»;övÚ庳sŠÏE̦º)Rèì‰m“ÌaxÚ/†y.³ÎvÅ‚ÈH»ÂbѪÇ##ƒœbû¾R¢8ˆŸÍ©"aÓ™¹\á·fû¯wâzR=ImÏ“ä ÖJ Âñ÷œ/Gð:›Ýc¤Ð8žµØéøýÛJ.ˆÞÇö˜¶yôŽ·åÍAS7]™ìµk©Á¯›yé$¬5Ýk«·*Œ¶« A‡àŸó/VXéSD<·Ì Œy!é8ÒÇ '•pÞs<¤³àÉ©¬!K' ž·#x<¹˼t!BÕñÀñÃ!~ó-ÓÌæz[>Ó“–몃µzb0pȦaÎÇ-EÚ_@E­èÂÌ^_ÀLºý®IP úXE‚˜Mi§¯FAõаÉ3k´Ï{ØÁŽ+̶ö°Œ²{¬Ž`e=Ãh”½­9Òt£c¢FÏ__â;LQ€†ͺ{8KÆñQ˜’ )©ýuÎ%a/TeÇÛ¯$(›|Èy(ħ5y™}ÔÖMN«±+­Tb¯;™ZôpY±öúÊM¼ñ$§^EzùéTÔ›gÂÓù ~æ6“‡iÙnˆÚôxÀT5áN¾Ëç dµBØÊÄÝñµû#o×øë¡*aÕä5ñ‡N”ùB€Ä¨Ek÷ŠŒÅÎÔ3È@ËÙ£Ÿ]Ó›<›¿Ï‰ âD„øE)¤â̲ >=öåþ-XAi[žmÀ_±ûýéýŽÝ7Žj Za¨›Ÿ}‚YT–€šÚ(uIñoïÌq¢eÑ›[ª(œ—”{M©íSăÜ»ÎÒ<ÓÜÓã‚ïI=­ŠVï5na­AËÝß{¬{>ÚjÌøÞ¤Ù’uÃvHòšü4ߥ7wK~·fAL'IOáfÞqÊã7Õî±”ó®©ü µ B£1×CÏó=+9ÆsGŸ4è¦ßÈ“iÆég{fWBíÕùϯÇòµ¥]Ø}¶¤ 6jƒ y»À]׶̶h £Ø²oí®r2z'±üÉb =›#Z&Ä¢Ñ85ÌF:#ÇiQïî=Ï“‘~÷¼Ê£ë§ÉjÂB*CæNˆDÀ¤Ct^›×¨þ:óæí¨«žç…BH@ûгl¯¡ÝMM|~‚Í«‘¯¸šñf°A1)7ÿÝÓLê2¯û^b Y_|Ãñ¾íùþÒŽð¸e;WØšPÊ_ø¯ù(6ýeV”VG³fìÞ¸:*KÕd¬ƒó@Q½‹ä óÑÕë|êŒXÁ­;¯¦OÛk¥zL)"&‡´X|ñÝk·•I…‘‡üï¾§@!?÷w2÷=V\¹ðÊ®åRL"ƒI)/®d|‚ô ‘Ùsçé9£-ô`þ9냧Z(QhB­©‘ç?iß¾r ?4y[,{ÛköÝsŸØZ±Ù#2Ksù”GÕç]9yoMÆ>ÀÊ ÙÛš2r+ó.×ð)— ±«Ë§³•™ic½¡J#—û9Ùak˜á²d¬A[¼Ÿ$TŠgAXB~Q­š2_|çÆ Œ’xu²î©Ê‰ŒnmÃKÚ;N×ì752xâøM³& î^î¤weÖgïJjÙ°>–[}ý$ÔøòR"i•GÜ´Q£à*B+n®8rk´W¨èôÀ‘¡p¯ûy¿(…™¾+â×2[Êsn–±i$¬²QÿÑæSWûŽ ³ž*­½vß+ ¬Šª ¦˜Â„H yY¤¿£ÒftŽ/,¬x4ÌóÑé"3÷!Øsn~ÞÓ†0ªSƒ6ïÈfLˆ}wÛ„3!ÜØ4mÇKá ^S(Í”95¶„Ý­à™E.™4lQÄŠ±Kë—ר¯ÂËŽvoŠ…ÄVÉZuæ ï§$x/¿?2tÛki¨"nkË~˜¤Ó@)n°ÔD› ó2ò›E% rë!6½(ùí«~¶¸Ü KMÁÿoêeÑ!6³]úÊ8Ë‘ëw:ž`3Ɉ"ÝFå}‘É V}ªi¡tn1ˆÄ–––ÖÖVä/ƒÑ¹J§¶á››éôöMeäC3¾…Äø¼KΤZZHúÒmåDÙA ¾…@¡wß…¡R©x<ñÆ£Ùì™LÀ#έH$XGöI<¡wÿŠE§*?Õh Þ‘HIL$« òáóÙ•Ü^ÒÎlµ´’xDÁf0È--xŽ(ˆDâÏ©„w'¥°Ð”#y_ß¿&·á[éŒ/úS3÷í—[sñ¡Ç>Øí×]>ö…Yj…B Ó‘¹™L%3Y}É4J%R¨$žD2•Dgv¯Á†Â[~èEÈò÷~ ýnäwÙË-‰p†ø$B_}#‹5·|wK)ÆÇ”öîM¡P D:몪üá”þÁÖ«{}S1çÊIHz*º‘Ìêsä™ûm!þ~çr¾ÜE™L´!"MŒÖJl!´1{ô4E ØFE ƒFF>Ó˜œ*&µ¸}œNii%P9=é¼­hCæmê-Dn0Ò)ðDrg•±ÈR°•LëZ¹H_Àã ôÞwN龕@ëÍC8½ ùCfôhÑ,‹@@F¤‹’h½µ&•€'“»=Wóp2ˆ»œBPYµRh=k€D"¡±‰èa#Šªû~šwà 'v:Ç8YúÇ1:F"ÒçцLþ¾=jjó£}!æ2Ò»½(ÌbR)=:…FauŠ‚Á­z<©;BÑ(„òÒ’mè%qdâ!’¿¬å+Á’­!ۮǿZiüëÐj*Ê[è?%®Ò·\ƒ‡>« ty%ÿšÕ´Í*^û,öï|ç,å)U˧¨-»µVì3]±SÅe× Çåß1`±Y5‘g 6\Ý×}lf*«*kÛúØa›LÓ ™îû³~6Bxj ôð‹/ëÓÉ„&dü¾Ê'”WUÕ“A/ø)‹D–X3Ï|øgé5ÉÞÖ&ÝŽbƒ§]ÏnþIK3J…È`ýIòd!Ì·§4À·”†XsÀZáé-?'^Jêν½{Ÿò* 0ò?.®óÌìüƒÍ%UYþî÷ àW²'jöm«‰#<þÊÒ5•”\ž3kvÔ9ýþ ®ÿ.9ÅÏ%DåúÉÿM±ôy’”´‚±1¨µß;;;p#$àß@j¤ÐˆkéX ±¶ŽE/þe¼:zà’ë¾ Î+ßýæYM9yâò\§‹³f–''ƒŠûmJü»±"-÷м¾¡æˆ31k^d^ûm³zÛcEöërýûk±º¿ÞçmD¨> 4àŸ€Á¤m>jC¿û}*­M_Ý2ÈãéÍ'!W~·¬²˜Ìpë1t"añÃÇ *MÉÌlùó—¯ÃÇmôõø¬\ÀßA[;L$z››Íj£ wlìõzÝL¬a²¾ßhägɳ"£$Õ9¿qf±¨Ô¬ŠÇ›TBU“NÇðóƒÚJ~!B¢È¿nŽ ¿¬„êï–Uœ¨(ò¯›#+¡¦êñ7OJ 4J 4øcéþë 9)µWYÑQ÷7²x ×?ÔzrskufÁ#L¡‘þ¶â‰â˜›D…$ï¿ Ã4ʱ TP倧)Â0“Éh£´HK(i~‰Ò`g¹ùäøÕÌŸü—®A¥ðÌŽ{Ž#<Á-ú€ß€P ÀÏOJ 4ø‡×H?)uu•AƒNŽ!(! ¤ô&ΠRdtt€(€Òü·Ààp.Ñ·€À_8žÐ'þÛ²ËCV®H„IEND®B`‚httpd-2.4.41/docs/manual/images/caching_fig1.png0000644000000000000500000003221410671421551017722 0ustar rootsrc‰PNG  IHDRX–“² ·PLTE  %&&+++&'(555469:::7894L(6H'>Y1;G>@B=CK4AQ,Fe3OpDDDEFHMMMNRXUUU]]]IOVIWhO^q]`eLb}ccdkkkgghimqoppssswxxIgŠLpšSk‡Pr™Ox¨Qz«L¼y~ƒ[†¸xƒ‘kˆ¬eŠ´fеu‹¤p’¸XŒÉX”ÛY‘ÔZÏ\šã`—×yÆcžãw¦ßk¤èa¥ôg¨öfªûm«ök­ûc§ùo°üu¬í{¯ìt§äs®óp¯ùx¯ð~±ív°õs²û{³ôzµû~¸ü†††‡ˆˆ‹‹‹‡‡ˆ„—’†“””•—šƒ”¨œž¡ Š¡»Ÿ  –¥µ£££®®®¤§ª¯°°´´´·¸º»»¼¶·¹£©°‰©Î„¬ÛŽ³Þ”µÜœ·Ö™·Ùž¸×ºÜ•µÚ­Ñ…±åƒ³ëŒ´ãŠ¶ëŒ¹í‚¶ô€·ø†¹õƒºü‹»óоüˆ·ð‘·ã”¹å“»ëœ½ä™¾é’¾ó¿ø¯æ­¼Í¥·Ì¤ºÔ£½Û«½Ò©¿Ù¢·Ð¶½Æ³¾Ê»¿Ä¸¿È±¿Ð¡¿áŽÀüŸÀç›Áí—Àï”Áö“Ãü›Äõ™ÇüÉü¦ÀÞ¯ÀÕ«ÁÚµÁͽÀĺÂ˳ÁÒ´ÆÛ»ÅѾÈÔ½ÊÙ¶ÉߣÀã£Äë©Çê­Êì©Äã¡Æò£Éö£Ìü«Íô¨Ïü¬Ñü®Ð÷µÉá³Íë¸Ïé¸Ëá±Îñ¼Òì·ÐîµÒô³Õü»Õò¹×û¼Ùü»ØùÃÄÄÄÆÉÆÉËÈÇÇÊÊÊÈÈÇÄËÓÊÎÒÃÌÖÎÑÔÈÒÞÐÏÐÓÓÓÓÖÚרÚÜÜÜÃÖëÊÕâËÚìÅÔæÁ×ðÄÚóÃÝüËÝóÈßùÖÜãÒÞìÜßãÐßðÇàýÏáöÌâüÕáïÜàåÛãìÔãôÒæüÖèýÛæóÞéöÜëüããääæéæèêìììäëóâîüëîñèïøæðýíñôìôüóóóò÷üõùýøø÷þþþø÷÷ý^½\ pHYsHHFÉk>12IDATxÚí T[×àýQ»,³msºÅŠ´™]` t;Û³íl3I»gvRé=ã=ÄGš9g¼àPy¦qlgãã`{ÎŒk7§JÆâÜ6ë¤Scë$iÓ(UäJéÔµ,¥iš8͡ı”ð,"ôÐ}Þÿ}6ÂÐÇÕ}÷ï„>—û~ïÿ}ï[!3a’YÁ¦€ ‹ ‹ ‹ & ,& ,& ,&LXLXLXL˜0°˜0°˜0°˜0a`1a`1a`1a’R°D¯×+‚²Ó½ØƒJ6± ¬ùinÓêœuf¹°:þÜâ|5ײ‰e`Í«vn«•$ä1XÈå%äu¸ƒ@r#ÑᔼëJ¼²èt# Ìí ºAåc‡G]Èép8DYr¹‚lŽX3ÁÊ« Hra-€…êt:]0 Í/qÜ'»µ­n½Û±v݃¢®@Óˆ´š‚\]¡¦jk^a½\Ÿ/Õ®1£â|m›c’b¢€•{[aÒÕÈ…5b§¸Î,É Z´¥DÌi—‘¶NÞ¬sUk$M‘T¢ 6hðÇjò@…Õë hIŽÛš¶êD6Éj ¹jªª«@Ĩƃ²4VkM~A¾Õ敽:Çzj\§óÊVuîúÂ’ ¦A..’°%¹ ±t²Ü¤åzø\Kõ`Iµ«W­\¹jåª<§V=|U4–7×€äÌmïÓh%‰ð¢¶ ^—vX’DÕiÁ^Â1̹.pÓØ$«¬š•+Éu(`Õa°°%×kJJÜbQAžC6¯¬Bâú’Ü&¹8o«n×}Á)°0B ………ð¦Í­ªrKUÚâ*/›dÖt°1—Wv{ÀH6™%ÉÜ-W.üèhr"9°Õ-‹æ&ˆEÙ ±š“Å­M¢ìuIæÆ&x 9›dÖt°æ‘†|6iLR–Ó•Þ¢š?5ÇŸÞËÉ®8&)ÐXkÜ1qÍø>ßׅĵŒ¯óÊEå-ѯ ƒ?éãŸqxWô»´X+V­^ý/öåæƒ9_W)ÿV¯šû}õ´£,ýë|Ç_=[æŸZÇ¿jê×§düsþŽUkV­©’‹ “¥ˆf°VæWÅþÇR{P5ûñ¯s¾WÝxS¼Ï%üx¾ãGåË céã/®Êòñß< )ÿôß{oµ{S¸º‰9ŸL’鼝йXlb˜¤ *Ì1³‰a’æ)& ,& ,& ,&Y#ˆÅ„i,&L Ö*¦±˜0°˜0°XLXLXdJ$ŽŽ…#Äl2 ùGCagmrm’E…qæ™ úì¶¡ÞcgÞ E;u!ÿˆí\_Ð$aó û}vëPoÿÓX³'_p##v»ÍÚßk©Üø¥/uÚý„œ?šodØn‡‘u´ã‹_ùWbF×ahÔgíÌšÉTig`Ý´|““xz@Oë³T ¼òï«ÿéÓ_µXý7/xhpâ@…¶›¾´”ãîúôçþO»u4ã"\‹Ã€»¥ÒsÂUØ'™)œºâ|#Š–êµtTš¸Rƒ7=º·ío?ó©¯ñûdf•_ZhP  F&Tîiû›O}únÁbϬi¤°šjWÆÆó¦Ý{÷wž¾Q»Æ=¤hqEO™xCi©À F£±¥¹óàéþßÏüÇ» ÂÐHüäˆâ£ùñ™ëEÅÇFVQÞ‚GöÀøìݼÐ?’kÐè´ Á´ñ¥|© pFcyE[ç“OÿðÔ3•›Bp6§2  ÅK7ð¾âžÜÑÓu´kpàüæ¼OýQ_i eÄGWÂj NœÁ`ÀC;¸³»çè‘#õ9ŸýÛoêMC£‘LLÛž¶~¬Ü¬Ý ¥¦=m)cpŠH¥`ÁÔ€*ÆÆ¢x-ø’«¨hiní<ðôá'‡ÓåjÊûÌÍÃ4*œK»Œ£+Åö•⡵´4ïzìɧ{NÀiƒ½6]þâ³#k·§ÓÍžŽ°ÏСð.ÆŠŠææÖ§xâÔ€9:knOPu`)>zhÌ7l;á h)¸â8^¨Ø³·óÀéÃ'Žyb``à<>u0=ïŠNMnÝÎr½Ð;<™†¡)Öot#D 0.Žã„Š}mŸ<ÔƒÕfÊá¼xá’WlÊ[÷‡Z8.M Š탨O(x®”çvƒ}êéÃ]GNÆfÍér{E18Tf Ã`ú†mpÞ¦ûÁ{;;wêîî: Óc†¹¹àÆ“ƒã’ä¾ý¶Æ?fÔ›¬©ŽìA‡ÆÂ‹¥]Jah&ž€í;qꈢCÝš22Gžæ;ƒ±›•j²wPï0m}ØGp`#˜öìmëܹcGω£* ê‚ÛëMB·ì"¤ ,¬ nìà±ÀåÆ eFp6A‡ŸŒ©Ð⊞‚Ù‰}ΣÍÛz¡«™3Xì¡j°~>ETò8²‚±Aø°¯ tè©AóÔØ€*8qRlh¯åií>ÑÊ褒©h Ì2D6<ž6#g¬Ø>ú‰“ƒxhÎèØ¼b ¸Q4‚5 Lawª²ûSN¨Ü»ÿÀéî®®£'¯”ûŠrÞ”+nj‚¼ZóÊO.çËp NNVOŽáóÖ×Q‰u(•Á£{ØÑóxDƒŠÓrë© D7Okî’ø›ž‡ô†J{ªj ©F°­=ó¦(ªcwìèê:yRÑSØ¡òÂ…ˆõB v;S¤Zü±ôf »èØG?ðô¡SGcSs1ja7´ÁMñhµ®à¥SÛÊ Bò M1L¨ä@Ma?¸¥¹yÛ§ttP±ÊŠUÎÜeà„]„ƒÞÁ‡Ë9¡/`$<Mt(>Lä9ZšE M™6<¶Eš‚)‚Bòذm3¥d„Û÷ì=¡ÕQì(^ v6¯Q‘ø“Ë \èiæJ;lá¤j*œêP†VЇ¶I¨lßðtÏ ÅŽF~Øi¡]G‘8ÊÀå ûÔ¶¼Ð7I¦@`ê·[qÜM¤›ÚÛöŸ~úD×ó‘èØ°³‡§ Æ…½*#Û5V$Ä`##xììÚ¶ãÐáàÄŸ¶mòF/¸[\q­Æ-KâOÝËq½¾d‘ Åb8uzÈ&Tìi~l'ŒíÔÉAÅÆjJqÒ¥q4ßrK/ô´r|¥ÍŸ¼YƒˆYÉQA¶ÄTѶkÛöÝxÚÚ]žØØÆ%´´•>Y V´wTUo¥rÅm*«Øwð‡O~ÏÍyp6ÝnÅŸÂ3sËÙÁ¦PFÁKƒÛË &«/I1tôuàó01û<ÓSX8ªðiÃgíVgÀº"Ëâùîr¾4)¥©fM(Åiþ2Èttþàiì£8ÎG§íÝÅ›>zLá$¤‚ Ši7Á¹3p¦½m ™Ð5øÄ÷á̹ñi ŒK :›` / ¸{ZËøJërO_84¢Ä~8™nÐ ¦½ÿz`Çã@Qœ½¨Ë²p¼+O‡·3z²çÙ–]ÚËŒs{K7•b7½²mÿÎîÇ»ŽD=ÅÂNhâ>:]kgÔÁþYðì”rÆò]O8õ„â _œšÄ§& –,]ùMw3Ï/çôE;'pêS‰¯°/Œ‡vr0–¬v{!(O|hNr˘ë÷ɇŒÓ¹e„P=Åádp¦j~»Zq:AÑ¡ Š¥×“´Æ5ûÀx4þÓ iª}ûŸÄiO%€tÐኻ¹ˆCz¢`¡ ïà6H“ù–tú"8p¶EG†ý½¶§vötEGêÀµË‹RŠóŽOøëž‡8C¥m‰9H÷‡|1OƒÈ´bOçS‡ºº¢.vÒƒH_’—>Ÿ‘e`)Í%ÑZ®­íkÞ¶ýPÏ©'=>uæ}ÔXp' K‡±1\ÊéƒL•’˜Å¹ ÁT5¿m;¡x„M Ö"„Wã‹N7DÏ 6†\iï’Ê™J7j´“ŠL»wµ>¶óPOûzØk€¨4Ég*‹ÀÂ%6ã¬hªÝƒ>€Ù9cPU×ÑÒ6+ðN%‰®îr=ß»ÈÊœÒ8?bë·`¨#”ÖžÝ+Æ|ÎdÉ4*ëÒQÅÞÚ——ØgëWJ€ öè>zsdIt†ë¦Ýú´).혰Ӹ>6ž×wï²çd¬òæO–Qz6c#XcMÆ/pæÝ×¹ý{]ØWwº<‰÷-BcÝÜú^ºæêY¨OR ¸² ùYlóvhÇ AqÕ“«b™÷X’øÛîrÚ- å8·Þ‹chýlÛöpÏ *³6.¡ôíðG*X“ÑÊ{4ÑÎú)ܼ¯ÄÇä;ÓM!Tæ¼ÏàúI¿oò–Þ‹ wÃU€·Þsd Ö@‘|صnÆÍÚÁÍzìôü…rhÑÔBG©Ò¥Þvà0Nñá8ôèõôž@BÁ ØçÅôh¸°& ¤.O´c)ùWÝL°"ÁKP?á+ÏÎã¿ a=*TîÛq„h¹¼b0%w¿žÊOBm@87›®„\©ðhÛ]GŸ0_Ñ£xÖÒ½Ì'þý 3 V——û-àY[:wB_U´ÇD±€©ùÞé¦ þ6j Cñ®K¢”¶ù™c a.ð¢=ßYnÐV`Ÿ…R½±­³zAÑìzZdz­ðYÏÉí°0ß:2‰KCصÒW´íè:Mɤ0ÊÉ6 M­Jo¿q×CŠëéö‚i¼ìâ€ç·   6*ÑVEë#жò\m•®‘9×ÍKž^8õPß>4¬ô€ñSKçvðœ¸!`áË®ï¾ÄU´ à²K¯2VCÎPÚÛ§¤ÿËöèQúTÅ`:½â8¦äº÷7Ðh0õ)듌ÆÖ@<´‰’$“"ó…Õi´ëãÆwå)9öJì§éÏÝü7óù™ï™ý©ëØe‡%Âzã®m°\Ä|Þ­¬6˜q¬ÙLj÷ûâ`¾ñÃï•£ÿðSnX°*Çþ¤©ÏEPðb×w7nàL¼~SùcÝ]ß1+†f|æ<Ìž—9s¢¼EŽ7ÎX‡yÜñO)ª±b¹ù,Žþ§{9îÖáÚ¶}¦Í¡(yÌŠ¤Ùç-î|¡¹ÏÇ;‡òô ½9þ…ÁZSR‡¥¡®nî÷Í7ožö³òÔæY˜ýã´L溞=Ó[vÏÝw}å¯ïüÖ}ÊýÐkê§vófå‡Íuqdöø6Ï~¥!þû¦Ž·yêWTåä볎S[õå;¿r×Ýwõ®ÿc«úrqIqMm}œÄ—©ï sÇûå SÏÍü½3fµxmn5¼aÚA”Wêkª¾ü×w}íö¥¯ÜùåoUÁТӶдOêôßûCfÍ£òÂæYóßwþ7›ƒ ƒµbõš¥Ë'ñÖO®ùÌç¿Æqÿû®/~áŽ;n¿]s[ΚLÈê•+ãýÅkÿâ?ÿåç¿øÅ¿ú¯wܮլËÍÉÌÈâOnκ;¾ðW_üŸÿËÛo×jór>¹æÉýÅŸ\ô < h¬Âêêêûª£2õ}A¹¯jö³WÍ:VÕÿüÂÿÒÝú²¿ûû¨©©ÅZ¢æ¾ªªªaÕ|ã›:€r¤ûæÓ )ÊY³~Î1ªªï¿¿þþo?pç·¿U]Sß°¹¾F9ðôáU-pÜï›ï·üdÁšœ¢™¿(*0[÷ßÿÀ|û[Ê´á±Ýú|Ü·¤3x«y¯¾ï¾éG®i $àc™¥”ÊÄ„òeâê+ÇʾÎml}|„ó®ØîBlcïùà».sÓÖïãö½ Í‘§uÇ}a\t;¶6}Çá¸à HDȬ#ÌcEFm¸©©|„4àzŽg.PÆ»ÍÄ}aâš×­¤†2m9×å‹ñ_¹hE{À®Ë$JæÒ !Ÿµ6öiyøèdCƒ™L¿xñ¦ ñâ/1£U7W¼<Ö.”À‘L¨d ¬½Ô•±õñ£ç/ˆRfÓzñòX7ÙÊäÐ\qóX1B ¬™(2æZ¶÷ ¸ÒÐ$°°)¼˜Ô¦f1EVIFÀ‚Φ~S©žÛµú¼™/™z’ VZL!kNipÔ‹“øòmßt¸3m‰‹ •ލ0‚J(f° ÔU€„˜ÆËÀ¢@cÁ"(›¿wÄqáÝ„ûRÛš| ç=³Â|¬„õ¬”P’W=Ît71d¥)ÔRVê—A‡ŒµRÐóØ :=ARš<˜•å`EBv¼Ý±õ{G¡;†œäž—XS˜†¨‚ý±ðÊ7zÚ¡†ƒ;É9}s–1+`-ñpÌkøÈ€ëJ0£Ñ bQ!=Î{x/Ë+oíÄf¨I 7*œ±Û +ž{…¹Òså(^û" ,RM¡†i¬ô•½·±ü¡‡»Î»½A‰°I ײ<Ö2éë yõ8,Qº"7 Ô ‘:ÁŠŒ ™¸o<¢Ôp$D"X„úX¯å±Zá­ôÕ¨µ½tãwÇÑ ‰ Dƒ¥Q“ó¾Ø]: ŒSiÐ7÷ ¸¯ID6¦±ZaVšÂHØnkÇI·(‘9 žùZ“IH70S8Ÿ„ì½¥úon?é BÐ E… ü½¬Ñ‘^ÁPÞÚuT}Etæ4…ˆ+ìôƇz\iÜ£…žtƒ“i¬ùdtÚš?eœœ«)‹4ÖòwD%X8 乿¿ö»Ž °P À¢RcEB6 ôÉì¸$ÌÙ‹™Â¸¡Vãl'7Ñ€È÷±˜ÆŠã¸C…иí$Á!ý>…`A§ 4Œ>Òõ¹Â;ú±~¬$G)LNú¡«¬µÛå ~uyu¬+{4„&×Ü}ÞKr@8åc‘Z+Ìc`Í ;`¹ó××eòÁZ´ÆJÏÅ¢¹\Ù-=®<“Ï[W˜b°’¹®prØ"èï…€ðù\‘l 5LcÍy}Ù¶× ‘? ÷¼³U:³BØ®ÏØÚåƒÙ0 ‹1…‹¹N–M±<Ö¬€ÐŠ+„=ç½Ù ¯_bŸr°PÖ€59fm‡€°{þ€±ýXZ¦±n„¥†òî¬I÷±ØŽ~7í`ØÞËëË·AåeÉ$°tC6h,ÜŠ¬7n;å"½B˜tZX,*Œ9X#}¿Â+b`-ßÇÊ:…RlÙg2”á€0˜=sAôºB¦±k ÆæîÁlâŠdÅ|¬˜ƒ5láõ-;Ý VrÀb +,lþQþÈ€'{÷hºØ•ЩÔX(kÀŠ„^}tã½Yžn`y¬˜!<¾ñïþéè¿‹2‹™Âäi¬QëîoüããP!Œ0°T›nHXŸ¥ìÿxÄDY6 ÖóN4Xa»I¿qÇ¿’v;¯tGcrm°~,Yi–áõ»ø®”u“Àj…Dƒ…‹Ïe ¬¥e X(¾E…Æš?*Làü„ûMúòÃïHD3WÈ]Wøó± JI÷æg®¡ì›¶iò¯Ûä²WêO^š³,–ÇJ¡ÆZÖò¯´ËpÍÏ_“XÉ+Oõë 'íÐÖ°óéÊa%õ×°ÝfÈõ±"!« /ÿ‘eã$x٤Ă É<×úÛ@V‚ÅòX䂲¶ëËO¿3ž•“à¥l,DXEa=²,V+$¬I;ì…õôﲓ+¶®X°"þsàºÿ¿+(;'ètƒªw(r;³,¶˜"¥`-µƒ4»Ø–~‚•|KÍkÒסçZŸ¿ÎÀJ¾¥f° Lh0þàR–ºî¬M*X‘‘~kyþ ‹9ïqÁZj­pÒÞΗmÿC0[¹"y]¡ªóXás†{{ÞÉ„‡•œü¹é†×Ô¼J'ìïÅ®ûµ,Mb –S£âýFmíú{di™0f oVF¯U;ï#aÓC?Ïà~îË>õî4÷¼#V“2¡±ûwÙk ɾٸZóX‘1¸™xË®\—X,*L"XÑÕ„¿d±Â"ÙyÏSm­p윉kyú‰,æŠè~,µF…×}~Sç3Y­°’‘yOÑ߯ZçýªÝPöƒ[¯&DY–*ýPö€{C e-Ï‹Ù캳F¿T ¸ÌZaÊ„ü~<«-!É‹)Ô††6ñ÷þèìVXd߯P•`áÕ„›ögÓjB”e>–J;HC¶JýÆÓÙkY)q`ÁjB¡¬õç,·„lùW |üe¶ ¥ý>ÛÁ`½¦¡}G¿¸ Ënxù£w¯§ï:P[ºá5U&HÃv‹¡¬ówÙu'ÛÇJ`,DXcøÆ9ÿö'‰•²³«ÎZሥTßúLÖ»îlùY`Á½ŸCÙé¤l:ŠX‚…2–oˆËêÕ„7gŽúûfàÂ]:X“¶vþ›°š0û-¡ZïWH(X¡~¾´åÄ;pÅvMN2\rkïá×ùÛ€ÌÀJá9Sa­Ðo«äŒ§½ˆ°Ø®É5ÒË•Á¦£4X´¯+dé†ùîMÈC™P¢+¶®°ðjBCÅ©w+µ`©­ƒ4ü–…+Ûÿ» `±ÝfR VÂQ¡Ê„÷ž¾’ù†™¤)µðàÕF†;8nÛ3ãt(,VÒ!,¥LøƒK25`eCTˆ²¬„—EüC<” EÄÀbQa2Á‚?î¤,¶®0ùÚpI¦0l5éÿåðòw.Bä€Å¢BÀúð8ghý eÂś´^ êŠ '¯¶é¹—‚Ô€åUçºBDXáË»õß8|í:M`±ZaæÁB¡Wwë7þ|1°XT˜T5j«Ðo|‰…ErºAUµBÿØòMDX)÷±–6]ªªFFŽ›Œûߎ0°Òªh]!º|L¨8ð¶ÌÀbÎ{rM¡}_ñì{T™BRWé8×å«ÇyGv·û…˜•¡c·™k…›Àïyé#ŠLaÆ×Î{‘ªj·™ˆ•7t¼1NX¬ƒ”°ÂV~ÃÞ÷&(Ë«aw±O¶þ] Xçxñ$šÀbQ! èðÜñåúîˆ0°X­0ã`…ý}\ÙÏ>&ÎÏ]ž)dµÂ$ÏýÀ†ûÈ Sd Y)+ôjWñÓ0‰–n©¿ÕMnzzj…£¶=›Z~ISP({u”o¼–kô¬iSÛKTEU­e+XþŸ eûÿ˜Ý½ hX,*Ì4XÈw\àžzãzÊÏvz5¹>–Zj…È×Á™ž{¢n,Â7·UMT8¼‡^¸FX‰%HÅ…j_¹J ±FJžvª¨ç}¸rƒé•M`%f ëu±?:XëŠ1ƒf Ôa½çÊo<#ÖŠ³ÙB‹ÂME+ò–É`ú£DX‰%Hku²£¶VçëVßֈ̿_BÅ5%55²ì¨så?(¢`å6ÖK²X]`FE«tMµãb·\çð¸e´¥°6\¿¥¨(1^T´Jo4³çmšJЉšÂ:­Ü°¦¡¾Pr­­Ô™óQ®ÎaÎsËUMfsC®'ª±ÜkŠš:© f‹.дv«w§quƒWçÐÕ5è‚u…mø ­¹°i¬™šª,aÂ>–ÜP YzQ¼­QÒ65yPÞƒ²¼EW[$åÔåÄÀråŠrU~cN}“9è†ÇÅë êuÅ›Í9MŽ ¦¨i«Ç›c°P‚K%¦0âëÊŽ_•i+ Lá–YÔyƒyµ¨N#J"Z`‰ÚB‘ND…E÷æÕîÜ‘¶6¥š~¬ˆ¯ãë÷¼IC„4S(7j”þ¤Û°šqåk׸ùµS“/®Õ¬k¬.ÀÇÊõš×æùšµ¢7Ç-ëjñJ !ƒ%šo“‚·5 &Íú…™I,Ý€²¬±WÛ¹{ߤÌ&à¼ß+¯ «ŸbÐX-ö¤ V w3è±ÚÂ(XÍEø)¿Úœ#zÁ0NKvjEs ¯f\¿àDºT²)òŸ3q»þHW‰˜ÂyË:$æÖê´uõ®õù÷çÔŠÚ‚ÍMR>€¥“ëµu›/Šù% žèË‚ïüõ÷¯mÀ®¼öX59U…yâVÐX¹ ¨v³¶hA°^SɤßcÙþ·)ÔX dÞ²È0W‹hKu×U½¥±yj«›Ðƒ¢ì€®¬«kܲ«¶º1P”½55[$gUcã–`=¸ôN|3ü†@m³qܳ¡Í.øDýĄ̂eùWöµ5|O¦¬¤-ÿB1—%Åõ!¸¤ƒ’i #vèmxö*b`¥IÔÒó>ù꣰!em~Do¼¦’<Ö$ìk»ûÅ(KÑXR€œE".󸬞~¬I+Çw¼¾Ø}m“e9Sfc™÷@ÑÚbRÎ Ê[‰³ji› ñüÞ7(+AO™BwÞÊ:bÀÒ¬X¡ ª¦2Ž_E)uÞQFÀº(;rV¬XÕH̉1¯Ád©DcEÆú °¯m” Ñ¢Áj€ˆ8ÇȹšVYfu€öÃö£g>¦-Ûé†Üu+W¬LO’;áÙ3ÎD®*Lax¤W`e1Bh°p¯X” J7%‘Ç ãó¿ùm¾÷ã|ÿߣZ™I…’Ö Ò°½Co|!,Ó§±ð_½6‡4Á×ùr5Ê5úr»¾üúÀòjV¯ SV®V…)üð\%×öÊDêU-J·ÆÒ€UÝH””ÀÙЪÃy÷7mÚÿú$…¦Pc†¼Yu/¤?´RQÒYpRß1A8˜ÉühŠ4Þç]„ó˜ çÄ €+Q%ë /wpÜsïÑÖñëÇræ­XQEN­°¢ Q%ýXèò£zÓO?ȰÐ"À‚Z¡rÝädÞ«V¬Þ¢šZ¡Ýd¨øåGTm˜< ,¹z A%G5ì½¥–Z¡]Ø`zs‚ºÄû~,¯›´½U‰×X(`A7–¡òm‰J°È½å‰ 4VÈÆó{²¼/ÝÂ(ªð±àž½׿“é¯V·•Ci떵ˆn½ÿ*`1•9¾ÜËm¤m_[ò},€õê±MÏŽRó±2 ÖË{ø–Ÿ~D'X¤úXy*¸_aèl%ßöâÇ ¬tšB’ŠÐh©`- ±Bý¿ÿõ Vã.U䱯Žmâ¾f`1+¹`£p_[æcV»?¸N!X$ïó®åoß°éãˆB°<,•b°n•yûÚ ÂË+Í‹zS~«R_ñG¹"¹¤CÿmåИÝÄí^xûÑl$oá}Þ3f U°?–nÝö6 ‹õceTcœ`_[3…É+rù¸Pvð*•`1ç=“`½ÕÁÁ¾¶Lce…RðÎäƒ5iÛÃïþé4ùìÓ5©EhúïLyÙÄï{‘Ʀf 3j Ãç~ï¢÷µe`1ç}!ë Çïý`½Ï;õ«Ÿßpì}‰V°X+S`ÁÍ  ?ûˆ‚ŠÊ&SHÿbŠë£½ý:-á’Maê/3Zú±æ Ã>Ø×öl˜Z°HuÞ©¯~X´G…»‰7½˜‰÷%Üu…ô× m†Ê7ƒôj,VÒÉ X“6~ãoK ¬4ëUÚÁŠ„­¼~ïUJ³ doIu­0Â`}H+X_Wˆn–˜é1¤RcMúûù²¥”+¸_!ó±2c áž½|ÙSÑ –‡u&]“%֫ǸŠçƨÕX¬ƒ4¥kþ=HC/wð-Ï}L1XÙ_+Dä‚5¿Æ;ÛÎïzZ°X­0S`ùϘøý«,¢®|Úk…þãœÊ “§À"´¤C{­Ðo}mÿD-Xl]a¦Àòu¸³ïGhË£cy¬ U¹§s_[òÓ tƒÕþuîj-aÒ¢Âä_y´¯+®üú=oÊ4ƒÅÖfBc…a_ÛŠËô‚EïV‘ˆh°Ð¨UàZþŒŽÚíÃÓÒY‘s~¦±R Õ›‚D|°¯mÛŸ~ûý-ÛÈ´W,#ÌÇJ±óNq­02Ü+TtÂJŠ‘¾~[Èf³#¸§½Õ¶ØmVxÎnµ+o´…å·|ò˜í܈›Õ' ÃÛ¹a#5ä“Ãð1Â},R¬NwÞQö‚?óêã ǧïk‹æþ¡±Ç‘Y/„Ãþ¡0ñsÂj…™ÑX¡^¸gïGKY­± õÛÉŸ/É›‚P¾¶Ü™—¤tP8zm‹föY eg³¿·ÝÊÇbQa’ó&‰€5Ü¡¯x™Ú.?£BŠMᘽ+e’•’+{AçZ° ¯ÐûÚ"‹ “«±`íWÙþ×Ók Ó‹±k…(­`ÅËcá{ö¾M³Æb¤1…Ãèmx•SHñºBtylr•b®ØºÂÌh, M/~Àœwæ¼',£a7¥÷ì%ßR VØ&ö¼-Q®±Xiڣ°UÐw\½N¹Å¢Â$ç0ÔXöµåŽ]E ¬LÅ»ÍDüCºi×/©Ý~”|°hÕX£gL\½Û2°2ևDžMß ,’ïWHíºB¿Eà(Þ×–ôt½Ë×Á gßOAâ1°žšÁzÔÀQ¼¯m̲×R VœZáÈ£„W&¹š' ¿ß­#,‘üù[ŠÆ ¿Ui¨x“Ö{öNi, »ûWÚÁ²› »/#êM!K7¤¬Q›I¿ëÏt+,Ù­’î”!°âÔ ‘oH(Ûë£,/Á>¥y¬Èðq¡lÿUÊÁbEè´ƒ~ë˜`|V`©7*Ì X°¯í¦Šû€i¬LEë®Éak%·ûÅX™2…´®„Ÿ “_£,vû´ƒõqÿ&n?åM3ÌÇÊX¡^ž?~•v°ˆ^WHXsj…cƒþg\§,¶Ï{z5Ö¨e†ÈÞ¤°(5…“p—qØ×–îJ!ó±ÒVx¸Ý`|9,Ó©Ûqçѹ®pÔÞ®¯xå:+c`Ñ™ÇB~[%×Bõ†É„ƒEkˇ÷µýc„~°H]¥ã¢tSèmØÔù¶ Àb~i+rù_ñÔUÚƒÂå¯+LÙ ÑšÇzuo|î=êÁb»&§¬Y™wô+ûÚÒÎÁ‹)\t:ï›ÀW¾ ,V+L3XVΰç VÆ„Ò÷¹;þKõR’¿fM>þ>ßëË|~±ŸŸ&ºÕk ³e‹›ÐB`Í••Ê+¢¯¯\¹‚žÇÓÿÄY¦ÿÍK~Îûf?ŸÀØVÄž%y>W¬,–Š ™0Y¼¬,_¼ÆbÂdA°n¡±XL–ÓXLÒ b`1a‹IÖøX¨I«Áÿ@b´Ó¿N==õ†oœñ~Í"ß?ëøšE¾_»ü÷Ï÷Ô£›?køyyïOñß›Îã7Ì–ô¸=ø?·[yýæžz>ú`ê‡è÷Ùï÷,òýÓ?ý}‰¼±Ç÷þi£ÿ‘2ñŒóICsæÑ'í´áûj»Ç>-*J¸°»ý*Ùh˪;í{ÛúW¡ÂÙûkj[²0©ªl/…תŠÈþ®Ø­‡óZÜ­ÇNÏuôºB[j°Ó¶B ®®™ÈHÝÔ´ŽÛtÔTSÌê‚b‡}c²­­,¯=Ú=ä3uËm¡Ñ`¯=tBh‹0ÆãýÍ3Ú–ýñÙÃÆâÅŠ#Íøà96×6þ g‰h þ&á­ƒ²É'?øáUãmªáˆw|pÓ{l·×¤íµän/íp¶­¶È Þš;­‹¨Ë»ì;1±ÍçðÊÊÁïù¾‰u &ÉéBÁ<ÂôëŽY¸RƒF½²8\Ïîã[»ùÞš¿¹æúxüØÒ‡ÿúû¼Ã+?òÛ÷^$Dû¿¿Ñï~nbÔ ˆ'6 }¥ËZfèÁOb´Ëç|„¿¶éxd®ŽÁ (Ðùë`ހƫš¥nàr[ÀR¸.õ¥m~]ò`®´8éÐLc‰“Oxˆ#CUP#;ëGg73¦,uA´Þòž˜ úán‡HTYþ7*—ÞÇ EŒYy’¶Ã)Î+ÎcGÁ¨14ñˆ\ 3²E¯vZsa×ÚFF8Šo‹b(ãÙøØ?Þ [¤ëà`Hj$òfˆÔcýé÷’‹’œä°HK®yô?Y îh2,£,¥)O‰ÊTR$“ª d+'ÂÊWÊr–´¬¥-kxKEæ±Ü¥ô@ LÂøRVœfæ.iLÉü‚É4™ÙÌcÒp™ÑÜM%«9ÃêaS½üÞ61CÍ(}Ï\à8­YBhžSˆÅ\çø®ÉÍ`Ê“[ l'&ቑrŠ“lÈ´ˆ>³Ç½€žÏS–;Hã (@þpÄœ;þJÌz²¡ÿ”¦6%ŠG:¨ ÓâA‡ÐM71X·Ý=ô ‘¶Ñ™ø¼È¹`« ÆÇ*™ ©CIÙÐ4ÅÔ¨ë?í¹Ð‰²nŒbD”Ú>e'~+€+5©çŠêÓˆ~p_¥°áUHÇP èŽK=êGZ0ŒªS£CÝ~¸°a'«;cPM8ÍŸÒ‘i:ô›O7Õ”öì„dMç=‘F2™¹(c‚Ý«Xú×6þÌsƒ #3:PeÍ3˜Ø[,âÔ˜W¨®”#œû* jZYÚùL´)Õ¬7q»®†ÓqŠ•£ZCe;;‚G¨o%mTû*ÕGF–´oÛÕÜn·Õû¶ŸáRùþS¯À.‡NqWiºö(×®9<ípÊÙèÞЋ«ÜoM›Ø‹Â®mGìiÏdÒ\•Ú¦¥þŒ.]-[× ÚG½ädoqµ»Vî"÷¬Z/KŸ Kû^HÀðljÓ4 8y“,SC =w²·–08ýºO ¿ÓÀ+b;LBì‚X«Eèˆ;SbŸøÂqmñŠC,ÞS5Æ2&1‡k<( ƒÇ3†k…yl¨7ÈD.²‘Œ#9ÅK~ƒ’› å(KyÊWx2•M|åNfyË\î²— aå/‡Ṳ!³™ÏŒæ4“!Ìj~^›ÍÀæ7ËyÎt^rœëŒ=ºœ* MhZLð—M4IGÕDGÔn‘–´FÙè:/Ж¾tò½ieúË£¦Ÿ?Sj>É9Õ~9u^\}U/Ú‘\ž5d¯lkÚJù.ó ™§=LeÅôÚ¨§µ“¬s\ìÈÙxËŒ9oÏjX¬J‡ÕÉr³=mê‚ê®.¬¶g‰Üì•7¯+ôáf åp§U!«‹6·“뮨›¹™¥¢Õšåy»‡çåw¹¿ît#Û‡ Ûk~_\’5ïØnˆ÷Wë`·â£™)~Ó)Cãi¡¶š8®#乳ȃ}rÛ¤×+?pË™ýòÎÄ\Ö3oNÍÉ\i@W„ÚÒ9OÆÎ;ÝB0ýèzú«Mô¤b[LƒNºT˜çô¨K}êT¯ºÕ¯Žõ¬k}ë\ïº×¿ö°‹}ìd¯@;httpd-2.4.41/docs/manual/images/mod_filter_old.gif0000644000000000000500000000231610147723030020356 0ustar rootsrcGIF87a 6€ÿÿÿ, 6þ„©Ëí£œ´Ú‹³Þ¼û†âH–扦êʶî ÇòL×öçúÎ÷þ ‡ ±x.„@Ò˜x¤"jSc­d[O÷ªU!_€U%&Íh¶ åFå-õ>•êá¼ÜQÇà·f6GÈw8EǸ”6Vø·ˆ˜8©è(h(¶Iy1h©))JêÙyúTö‰êÆDö–׿ªêÆš«»ËÛëû ,Ü÷ªnÛT™f>Û»gmáÃn?f<„Öå¿Ûî&îû9¯Ô«[¿¾¦öíP¹Ÿö®¼øñ䃖ÿ~¾UúõìÛÇt_Š}røôëœ_?=ýöþûûgÇØ H`œs¼×\n "× dÒ…– n7¡.z!tJv×kbÔU¡†‘…AYtŽvâ"q9ØÈˆ“½Öš-² ¸"ˆ$θØ&Õ¸³!h£ ©žg’4ÖâtIªwÙe`ÅçX‡ŠMi—“èáøá•LªEH²I¹eyÝH#lBæd`š㚈0—!š%ªææ:q4œ’ ¶É'›*b˜£„Ng`¡†Þô_¢ŠÊ“&:žó袒NL¤åX*¦”nÊé›õiÊ ¨ŽJê8ŸžZj:‡®Ê*‰rî(w~ç Îz\–±â «®¾òj« ¿ŽPë°eÎRþ6Åê–—Ⱥ+“1vGlMâ˜,ÈÚˆm”}²¶#‘…yȘ}K%µ\r¦Ö~Áã¸2rû^´ÔBÙ$¹é.éç´ûfAص7kì³ÚֲͶȞ , 3û°…Ûì«¢{«½OüÑœ +q¿ œq¥ÖR"*­®l L¨Â—rª2ÏÜBÌÐØÜ Î4ï̳r/»§sÏB]/Ð?tÒ's´2MgU F5ô¤?!žåš£Ù9µµÓ]õu¥aãàMI®^s¶†i£¼6c³­óÛh¶ÝÎÓŽJwq–æm¶6æ¤i7‡¦ªêÄ;ümtK"rw H‰£&-´æ©±y¯³lÍgc6ŠÙY+–éÅ·¸Iyqµ!f¦r‹æ{;Cæ[–bi²§‚ÅQ‚— ‰©?B/å­ß>‰î¦³{/JɹþG-°‹2Öãø]ã>*;îL ¦ðé¾On8ÙÝ{`á„þ·#øCèÈí}~ax·¯2­êË÷ühÛ½¸6ö7‘ÿOû Ø¿¢pnÿcʽr@å$°¥‹JÖì15,Tm"-Sš/ˆÁ jpƒœ*;httpd-2.4.41/docs/manual/images/reverse-proxy-arch.png0000644000000000000500000002666612663316405021207 0ustar rootsrc‰PNG  IHDR)M\ü™ÎtEXtSoftwareAdobe ImageReadyqÉe<-XIDATxÚìp\W•çOK²,˲ýǶò µâÄ¿Fí!ŽÚY·œBÕK„JB•ZT- 3•’TÅÂl-DÒì@ Jö,ËN– ’jæÂÌ`¹ðÖ.ÌdÕ`fÂn‡Âvœµâ$v;jÛŠ­ÝýöÞ×çªO?½nµdýèßëúý~÷Þ÷ú~uÎy÷ÝGV _¹V|[ƒ?˜csD¥>•ü¯ŽF›o"€žªsDxÞÒçVË1W9¢j]tžçnQ“ƒê¸v±Î¯ËÌy†]yt«4¨Ö,ò5\ôó ©(ãºçHšÐ"äqD¥61?ÌZŠŠ^œC ,•Æ\ªÏ3jÄP%}žSÞßÔ!È)ºÈ×p©Î À UåZqõ—ßÇ \[L*5ëCˆA„º“°Ë:Ñ–Œ¶Ž´U4”ÅÒÇ×"Ãó1¿.ÞàiTˆV‹°¸†8Ÿ^wP-Gy^ÛÊÚ ¶þö°ÕægQìWóºÌû……èÎ'Êåñú¬«Z×ÖÞ×#ÄÇ ¸Ï ,©¥!àv„x´°%ÔÍÖ‰Å黃ÄÛOp'—•ælΧÅÉÎLÞ¼N[BM*mÐ"úŸ­•˜8O‡Æ~Þ¦E6ÂçÓë[Ujäù MŒó9ÁçØÏÇ‹úv—‘P/ïgázïçcn÷ˆÔÒˆ”ÛhâéaŽI³¸‘XzŒð¸ÝC-úX!š!>×A‘±|´X è“J]¼Ÿ¶ðzyß0—%Æbr” KÈ#ÿ(ïc‰|úXXù|Ú" °õØä²ŒL¹O²XY\ïf.—+ @¤–Ñ€£Y¬«CBœŒ…ÒÂëFÔñ¶°BrYºñÇXHõ9„ÀÈs†ô9ù¼në餰vˆÕÆzËRäã‹7(¶zÔ;"ÜU#Z-l…]ç?‰f“Z:üYZ@XOîeKX5óÉ'"¬©>nô~ ‹·5»E€cB$òocëG cƒëcñõ ‘ S:@/Eù h˜Ý»°k›qGý®mˆGˆÔ2t @FÐÜk™÷ p£±%¥-ŒÖ9òéå¯ãBC”~ÊgòîfQ0ñ©>Ž+Lçãsµ‹‡ãÚåsù…kvØCLô¶nµ¿)W@¸”Ž rÛ\®pŒË`Ä5d ÍÀÝ[:š<, ·{å^î↫ƒÈcÜx{s¸”< ëɸP½ÆÝc:Ìë9>NaדÄV¶¬:X0ûX¬ö°Û64ùx_-Dí[ÓbÒñ±ã®r›'’G„å+ +„— 8£&ÄjýºLïÏR¦ — àÅ)D©÷ò÷íÝK÷í½l›T²éÍ7ß ³/½dÄJ¿´<Á°¤Àr‰SPMú÷îÝëÿXËAúØÁƒ”T¤Å)™L:S[Mõº7ßxƒŽýèýàûß§ñññu\FË)°”Õ¹nݺ¾ÏÿñÑŸþtJ˜\•1e±ºzõ*=ýÕ¯ÒÏú³¨:M«¼ˆ˜%4~ÊŒ!å?Òãš+êü«~Ú¾} ”"žº„É™ò|’çÿþoÿŽþò;ßÉ÷ˆ0"R“Žõë×víÞMû>°Ï‰!½ñúëtúô):}ê´ÞM»d½î/Ìèc•@õ?Ûÿ=Ú¾c‡$oš™w‹”Z>ò÷?¤ï>óŒ>ÿ¸~"ŒåtäÎ;ï <ÙÙAôÑ™m6»jš×Ï£oÿÅ£#?ü!±PõˆãO|÷{e½ÿ¾ûÒÂ$-¦ a²g)-T™ékögô¿¾04Ǩ¡4•¸‹"PÚ¥û—Ðg>ãÿÞàíÚµkFœ´e ¡ª[·Ž<ðxðz1r2˜ŒÇ·XÖÕ.O?rðcøäOx T2» %8ÉùD"I¿×ÔDÿð“Ÿì¬«]{|ìJ,Š; Rå+PÃ_ÿóoZÿñsŸK‹“´ xj’žM›6ÑG>úQúùÏ~¾óò¥KP»·<óìwiUUÕŒ…$ãLÆKÌ,'(™I “XVÛ+**ijjJ¹˜§,%RÏánˆTù ”§|ø¿|å+õŸ|âSÞâ$–M·#T«V­¢ä#ôÏ?ÿ¹ÿƒú=ôÐC±¦ì–S¦•p¬'-T&i±ºó®;éýèØNe­ùT ªd©tA‰Öî @LªôEªïÁ?Ôù?žy&»(¹“qáœù”[÷Ò™3N÷={ö÷.[ÌÉNYQÙ,‘œÙnæúO?¥Ko¿íœïìKgé•—_ÖÅ à=©Ò(¿šŒ ÿÓqºãŽ;æ'!JóYãnw/S¬¼,EÉI‰”U•©DÆ:³¬ë/üBÇ«tUºÄGP€»W*(—©ïã>h}ôãžq'ÙÓöì)žÙ•ÀíÎqI¥”ë&ݹ¤™ºÜ¼¸q÷â ±.Nñx|fýªUÕÔÐÐ@;wí¢ß¼øâÃëëêüÊý;Š» R¥%ROãë5·ÞzëÜnèï”!Lî.³Ü·„˵3‚”{ÊLñLÒâ¤R’J/ÁZ³f 5ÞÝH§~{* „jT :~¸{%âê•‹7üáá¼ãNž2¥Ë'cN¶°¤2Kºt2ö”ðtõüÔO.›}gMMG££ôÜ÷¿¯;|6¢ã'(4*p D`ï¾û½ŸÀ%2ݵw˜™ WMºhñ KˆS"•Œõ3“ĺéééÔü´šO§×9)½Iñ¸žNqÒóqÚZ_¯]?ý¤²·@¤Jƒ†Ûo¿Ã³«€±d2„if9™72±£x¦XÅ…[7båZ§ÅF‹YŸ)PqG|¼J&³}Šî½÷^]¯6ÜZPh`<©ZRz\§¤èóä5„ʬ‘ òx•%³;AÂÕµÀÄ¥¼ŸÚÉàúl/ÓrKuþŒÏ¬»uó­T]]í×O-Ñ-@¤JÙM`®!T²Æœ\n¢»ÿ“»{‰1et1˜±Ô’1§Lгå6#Xq#X©©µq#]|ë-¿ªD @¤ŠîaÞ¢’_‹OÂk„‚}ì9-§Ì yfÇLi"9« ‚;(ñLÁŠÇ½Ÿêò‘*NqÒÖE·J¡àf 67S}}}J$r¡"º,ÀzšË­ó~jë’Ù»)xô§2¯õ‘*.êÑõÈÁƒ¤_ ¾í¶Ûfº há˜íÒyu+HæõKƲWwáÖåŠ9ͨ8/Ç=;zšu—.]"¸z"U\®Ý‘;w¿uè#NÚµó&‘òz%áe= 1Êtã„õ”H»ù Tg€8ù%–¤Ç¨˜‰¤·õd‚Öfº¸pÃ2ŠEEÏ áIÌXKÂb6í²¢²YPf9Á.ŸZÿc|ê @¤Š×ššPBõœr‹vêo×MNNQCƒŸ*++=¬§ìOÖ2*‘E ¤e”È´’â‰LqÊb5¹­¥Ìu,VzX–xjzíÚ5½}" ŒÌ™ºß”št¯]»6¸÷þûé¾½{içÎT³¦fQ‡P™«·x>OìŒP¦Ä§l%fÍK8}£”€5¿: ãˆT鈕_MB*T) Ç7×iûΩñËíôˆ—/]v¦>ô ­_¿aÞC¨$’s<±ó§Y"å!Nz^0ôwÞÑUÚˆ¾Q"Uú–@<6ëÆß¤RKcc£ÕÐ]ïy­[·.Ý[Ü5„Š{|§l®cBZI9Äi&æªëï¾K“““J ÚqD BfÆ ÒÖWpÆ Öæ-[ ìöÛowÄÊÚhQeeUfÇL%6ÚÚ™˜˜ ññqgäÌ _En jq2VÔ7´€îÁËÄ"¼DK[]ÚkX0ËîQN–²À={ȧîØ, *qг@é@ºrCÛÑ@¤Àb‹[UUUhÛ¶m´nýúÙ–Tq2¥öEs‘K*TÚmì«««óo°,ª­­u^ÕÉ&Né¯ÄÄõáaJ½D @¤À’‹UˆR1®–êêj§ï–Næõ-L<î•¶œô‹Ãƒèj R`¥+¨&~Ný¹t=Ê&>›r¢»è„+@Œ‚P8Õ§&ŸS)p‹eYcWb?ÆUÃ~Ju0óE.AÁ _ö=É /þ‘*,ä)>ˆ")D R‘@¤"€HD Rˆ@¤e ¾“¶¢$o¾O™ôgà›õH úk3z0¾Až_tyލÔL©/;ëOwuñ¶NJ}Ñy¿ÊòƒÞýÁÑnnü’ã,LG—Q È%˜Z¤®ñêPiψ!€H¦‰-¥m~J"¢E+Ìë‚lu ð4ÄÛŒèõðr˜…¡“×ùy_âc£"#ŠûU:,¬¨A‘G„ÖâsFy)Ðc9ÂÂlñqs”Ç]o°Œ &9^ ±ÓÁ7 ºC;ÌÓ6!lfŸ š^æóDxÞ/Dó¤KˆÝ¾C<ßÇù1<ÁLJ¹¼}¢üMõ‰±@åct>ýYÊã®7…‡]¢põƸñE2.W? ±´‹dŒ: ‘ ò1F”ް`+m„µ(s÷aqÌçoò0b×#Ü4[äâ<3n™(H¬ïõõùë¯Ç£Þî^ñséÒ%zþùç3Öéøô±cÇèÚµkTWWGããã >ÿ¾}û¨±±1cÝæÍ›éÀ 9´¼âQv±ŒU3$,#BîXÒ¨p«NŠíÒ ìaË(&\ªV!^Æ•3–K·ˆEË/&,¬£9¬Äî壮|Œ vs2×Å«Þ"UܼöÚkôÔSOÑ•+W2Ö¯^½š&''%^xÁInž{î9zì±Ç蘯Hé†Ú<‡+t¹„7~¯8VϫݱvaÉt°…ØÛ#Ê0¢#ó °X†\¢äõ²,Q—Köp->¶Ù•ÅóÍYê‚bR¥Áõëש··w–@iV­ZEUUUNšžžž™¿Ù¤-4ãµ]¼x‘¾ýíoÓg?ûÙY–\Ü Þ½-âÑØ‰E¡Ée%µˆmûyjÄÃÄ¢”n“°’Âyî§t€»WìßäQéªu¸¬'éêE<ò‰ ÔÔµ'K½,©âE Ô;ï¼ã¹íõ×__²|kjjœdxûí·±zöÙg©¯¯êëësÞ$Ü/+*"ö“b6ÀëNˆ†ÞîF—àK廉Ã,\ƒ, ÆÂ:*òPæ“B³¾K,w‰ó™`ø(ç >þ¸¢ˆˆcu±šòX¢.M9D,èÌ™ùtælmm¥X¬°¾D¥E*d¿ù©ÎœÀ’*tÀÜÄ'&&æ²`òfëÖ­³ÖéóWTTÐØØØ¬õ:âñ8n €H~¿?ã©ÛªÚyáý®–h²²†6N§%fY®š:Hn©ý¢Ñ¨“‡žêe“$–ë|sˆTñøãÓåË—sîóNŠÄ$ò Ä_0  AD Rˆ€2f[ƒ¿G'\ `I R‘@¤")D Rˆ@¤"€HD ‘ˆ@¤)€H R‘ˆ"©²d[ƒßòš Ü©Â%(ú]ó­¸$¹H)‹£OMü*µ¿:ù½ˆªÔÉó‡JÄ2ÔbU÷¦ M ,_7ÝB* ©t²DîGO—H}šTjQi@ U;š€»Wüâr—€±¤ ÅÝã2̸ipmàîˆT¡5Æ#rY5H¼XDÐáæÑ±–“œw"UXH7³ž0‘ˆ")D —‘ˆ")€H-Q€¥CµÜ<QXRM”R»µð<ÌŸw¿³mÉ\1=J( XdJn<)Û¶ƒj2<³|ù4Mÿ"Åß:M´a7­yôoÈ·zýŠ–ñõ èÜ›o.èØµk×RÓÎ ” %“J*š:öÑÔUò©fPË7ŽþÕ>ö7+Z®““ôæEêÚµkøÕ‚²¢dcRöµ7hêGO=y5e2ªš:Bõú ”¼òÆŠ—oݺutãúõÜb¦¶Ç§§éúû‘*6š¸J7Ž}žì©«Ž­¯Âvjl_}½ Ê9qãFÎí«V­¢*•‰~©î^)qíØ×hú쪽-s½¶¤|ÍùßÿçÇÊR¹AwÜyí»ó–M›¨NYTÙÜ8-P@¤JŒ·¾°3@•¶²š|”˜ðQe=³-Wë¦|d'}tï=÷ÐueÉÔ®Y³rÍcB @¤Jˆ×?¿+œ²û¨RYL*ݸXA«lJ:”ÞoCÃýtO‘Ôi||œn»í6üRDªØmÛm%§¨_‹‘¯Ò§’í˜*Z œX»y«w?ˆ»@Q2óä´¯[ R 9é#ìéÔÔIÚ’R®ž­b©ºº::þ¼ó4ˆT‘òJëû‚Jˆ:µ9iš§®ä«»“jÞ_\¯Ö 8)õÕè¥" RßMž#Ä©ËÊE¤^úp“¥¬¥þädEÚjš2VTEÆtíƒO\ù/^¸03­­­¥kW¯ReeåÌöX¬ >å§çð7P‹ó¹ü9„´‡…Ö0¼BeyRô1©éñŠÎªÚ¤ßÇÁrŸ'y^¤êÆTû瘩éiJÚö²•±ºªŠ**¼ÿl»÷^šœœ$ÿÝw;6o¿ãŽŒÎ›Z¸nܸQ(}¥:TêR©›E *¬+)zý€hÐ-býÖ^±-ÄÓÊ|AÛÏÛb¼-&Ö·ð1aN¹¬¾ (žoS©··ñùzÄö(OÝùÊsá#°©üøõ={ýÓ—ínÝ÷©¢Úž)ÛC¤¬ÇÿÄ9f\5ø¿ùÓð—‹;”ðÜÛÐ@բߓ"ÓÅ`jj*cyFફ§{Ðë܈M7ò7nÓ€µ€õ²htˆÆD¥ã¼þ C3ŸOoä†?Ìëu󶃼_3¯æ|"lÑ‚(ic1 Q5¢s’ó<ÉQ˜·÷±ˆrL¾AÞÖËçî#Œx‘Êe õë€øô•JZµ>A¾*Šú’>¿/agÔ¦O}žjv¥:l¾ü»ßÑŋ鮻îr–—ÒBÑ£ó:sæ ÝQ_Ÿ!REØ‹¼…sŒ…aXˆqã>ÄóQ±½WX;zj‹óI‹+ærÑÚ=Žéæó™cZ9/‘ ‹ò˜c{8Ÿça ëIæ;Âejã: Ánƒ|@¤ròË»ï*‘ êßoâ†OYR*­&Ë7cEùÈçS¿íUhâÍ´2¡\+˲œXÏrt”Ôyi+èW¿ú=°1ÿV´utÔÏ ë£BpL9æ7u‰ —*[¬)àˆl±§ÑÔ1ê±l\ØÁûˆ”‡Å#b*)ÒM_«ŒVLÚ~íúÙ‰Ô ÅúϯÏwn ¼?ãXçYè(óåôéÓ¥Ð3È u?'cù´e±bH”·=B¤n6Ø5G @¤Vž_4ÞRÂä÷™_¼bvÂgÙ7xûnªÿVßu;­oæ<Ÿv½¢Ñ¨ãžUU-ü’ÄãqZ½z5mÙ²¥Ô~'FŒº\1ªaÉ´±{cWnˆ÷‰ êt¹‡G„Ëx„-µ\VÊQ½°°äh¡œ¯Ø 4OðÂ<=(òí€t@¤æˆEùœ`¹Í”•WçÄ3l_ʲ";½­þÿÜçÓîØ¶mÛ¥l%ø®y×èZc¡Ñ ö 7ì~ÞßÏñ¢§¼ÿ 7ôl]æyãî ¸ÜI7ZuÐ~X`×<ësœËÙËå7Ý*L0¾C¸x]BpY£œ/>º±LÝÿâÿ`H9xý>#P>Ó`lËçªUí®í´ûØ_gÿë_;SéîiaY¬N“·ß~{ƹuoqíîYêü&&õòè(½ø›ß,XÛ?õ©B»o=®i±º´:¸Þ Y(,Š®3g’*»URÓ %SN<*ª’¥•ÉYÖûØ)kªv÷½¸ÃÀÝ[>ŽûƒÁÙ~Ÿ’(íÖ)™Š©yË‘&×këjÍîít×—» ²zÄ͹ÜÂ"{W/\m!J™OðDjþ$¨¢C REꙞú爕•Z§í(ÝÝ<5úÁÖп§Êõ…ÙÐu€^»…s¹u©e©HDjÁüÄÿ‚’-Ž8ÙìÜùbN,jF°Œ¨\½í[Ý»|®.õ€"©$U´û)%PɈ²¨6[PF ô¿š;·t%V­T¯+K*‹ðt/,~ø!J¿ƒfˆr1c6 ˆía19êAÄe]ÈaYü¼í(7ò!J}b‰s„Y$ä°,QòšáTÌqƒ”~ÿï ¥Çu".w¿°ºNPzÜ+sù>áAòîa3ƒéjËó:„…ØFD>¹®CØUoP¬"õNå†À–xÜqê´å”§,¬dûF± ÜŠZFKÊßeaš—yM£3c$ÉÜäý^óFÙÊ ±õr„-"wÃ4VG˜Ò#dŠ.b=#Š1æüŒxzõòíâmY¬t™šçqL]ÚÄ€v­l׳H}}ûÒOï•¶+1ºVQGë’ãÑôS½™'{±i_eûÅŠ- þ¡k«E+¾Ñ鑿bjrr¹/§¾6 ®ØŒ_ˆÃpÓšÅ1Ç)s`/,N‡8µ—‘rä9àrMý¢ÍR–ý‚, ­l]5‹¼úØU “÷ð¿aÙt±EœÇu0ùh ô$¥‡IŽæ¸AHP‹Ô—Î~3úôö/öÇ}ʳ•HU®¥5Éɘ’Óõ V¡~ç«6ŸLPe·Z^ð‹¡Z ´e³"5™‡UVU-÷Ó;3ZA'¥ßô·D#äFê0[E¦Aw³õÕãѸû…{ÕÆ:Ê ¾_¸="¶ä%vrßh‘’劉X’%bEQßCB@r½@ÜÇÇe±„«˜Ïu Qæn!Ò¹®(vw/éó©í1ýÉ/Wmˆ­²ã÷UÒ”o•¾ù-Ê¢êT©õ /ÿEÞƒãkЂd¾Ê¢çÏ;·lõÊgTЛŒIE]n[Œg 7’£.K&LéaT¤Ûdޱ(s°¹^×±­¼Ÿ<|nyÆr”Éï°ˆYµºb=îr…DË^áæµ‹2÷¶%Gü§ÕUÖfÓÊç:HW0è*w¶ë%¼/8'?TËŸîøÏG”i1Š(ç.ÕWÊ6îž~ÁØú“³nþj‘mÛAÊñ8WÕrêÔ)G –ãÕ-~zÓûܶçõ—HA¿–¢Gâ_Ò:h×OÒév#KðãB&Ä8‚H-*¶cfûú¾Šm9Ù>_Ê‚òq_)Û±¢Ú¿|öéð|λï÷Ÿþù¿pž°-5úéZ ®(÷î!ñ†ˆI:aZº§]'ˆÔ¢ó…ó_­iÛî®ÐcEÙvXé’¥»Tøt)û¸Ò¨¨Z7Ô{ækóþHãî;iëÖ­tõÊ•y§?&U®ÛÝïyϼës[}=ÕÔÔà×@©ˆ”3º¦Ï×ûßöľ¸»·Ï—zZt0Itøë§ºoºãÛ¦”/Wß}—ξú*]£—_y…>rà5úýøõP®"õ­ß~eÆBJø*ƒßúí—»¾¸ûOÃÜQsÉzç¾vþ<½¡’ý4N¬AÛ7oÙBÿ÷g?£»FGg·ïih ÍËàF‘*:Þût A¶#Jß8õ”ù:É’1™Ç`tx×1%WÒóõ·Ü’—Hé ýBcRú• RBÂWÑæ³í£Ë•ßm·ÞJUï}ﯯÏk¿?Ø·Î_¸° <´@~áÉ'ñË øüû¾yb¾Çè~Rv‰ƒ_€%U<ñ¾¯&}öMÇŸ¦¦§'s…NMu5~“H½•ˆµÕøªoÊÕ‹'ôÛ³géíK— ú&è€üEåþ}òŸÀ/€b©‹‰+Á_úŸ þp^2™tžÖýnd¤(nÄõ‰ :uæŒÓ ¦ ‡Þ¹ý3);½™sŒ]½J/)+ªXÐñ<~œÆb1ü*(t‘¢ô›ú bbjŠN)Ò}›Š‰úúzú‡a u @1¸{úE·ö…ý–5°¤Š–ØÕX,|a% ‡|¿LÅ˶¿N¸,>•¸7-Pú{mŸS)p‹eYcWb?ÆU`ñ¨Â%¸iü”ŒÏËÀâRKpÓèžñ'9µãr‘*(^Ƽæ)D R‘@¤"€HD RˆT¹³­Áoyͼ`|óô»æ[qI(r‘âáMü*µ—ÀûnQ•:yþ~REoë?4Qõ»ìÂ) |+ðCÐ?‚¥†79Y"×±ƒ§‡ñ“*zšTjQi@ Fµ€»W2,–8AìXiKªݽż&3n#Ü ¸{`E x6#rY5à tA($0Â'©Â#|‘@¤"€H@a€.y`+Jòæ+pw,)€H R Tѯ‚=R€·÷‰ùå*Ï0Ï9ƒ~m¨·¬¼À Æ@7únJ 9#9®RD¥£<].¤ j‘º"ÄK¿€½gÅP¿ŠÔŒŸDª¬¸té=ÿüóët|úرctíÚ5ª««£ñññŸß¾}ÔØØ˜±nóæÍtàÀ…žRM2¨RÇ6?'#FD´h……Õ¥{Èð4ÄÛŒèõðr˜…¡“×ùy_âc£"#Šû)="D'—Óäa5džøœQ^gÊôXް0[|ÜÀåq×@¤Š“×^{žzê)ºråJÆúÕ«WÓäää¢äñ /8ÉÍsÏ=G=ö=ðÀ ±\zsXYMÜhÍ02ƒÜXuƒ>È"`M[9mÜÀp˜ãÂ,4 Üðõhf¤a¶h¢œßQ—0çÕ,\ÐÞOs‚çÜŸ»…ós×Ǧ9&Àç<ìQw½Á2ƒGÐyO„ëׯӓO>Iï¼óάmÚzš˜˜pæ+++)‘H,J¹ôy’É$ÉžÚªzüñÇó+î‚0F©šåû‚1nZHô χX´˜ ±Õ¡—Åqü½t˜Ý©(»lÚzáÆc‘ˆºŽ ó>­¼Îc£°’zø¸1^o¬ªý”ùR¶Í¿í~v[„¸r}L>žoVR˜ÊzˆTñŠÔ—¾ô%:{ö¬ç¶XléÞ®©©q’×ú¾¾>ª¯¯Ï%RÜ#ñ(Ó@»¸ñÚâ÷ÒÉîRÄe‘µ²•d,© ØbÒÖQL¸Ty~Œóia+¦™Edïä¼Uu„-¢‘:ÁùE\bùx¿°ËÍ5.°vw¯$е”b” m¡+ÍÍ… rŠ7ÆeDìI6b‹]#¯8VÏÛÆaâ<,b!v¹öˆ2Œ ‹¼‹—´ã®²D].]ØÃ]4O1›]ùX<ßœ¥.ˆAA¤J07q-sˆCÞlݺÕS˜***hll,§`Åãñ¹NïnðîmÆn¬¢ƒb9Ä"2ÄÛd\ŠØ‚Šñ²ß%*ÝBdž&hÞçè—e‘bÒAÞÃ/÷‰sË|L™,.c€…®Ç£Þ"U¼øýþŒ§vn«j§²j~WK4YYC§S‚³,OWM¢ƒä–Ú/:yè©^6Ib¹Î7×¹=¼ÛŠŠˆý¤˜ 𺢡·»D£Ñ%xFh±‹6Ì¢0Èb,,47–\ÔU.9´o—8Ÿ †‰ržàãóvñ6s|¯(%êÒ”CÄbRÅ“Ò] ._¾\På~ôÑG }Ž˜î?€H•‹Hå͇H"¯Å R‘@¤”1Ûü=:áJK ‘ˆ"©²g[ƒßòš ÜÁ Æ…C¿k¾—€")eqè·çý*µ¿:ù½ˆRj09Í!ü4[ÔúVTý¾»Êõ:øŠøê›¢Ô°'Kä~˜ñ´£‰Fã|pB U;,©ò£ÐDáp×õ¥%Rú¯Š²¦bì»Ç®¢ Po('sºTë^jõîÞ¡rv÷ŠÚ’ºÉç§ôŽþ2»ï¥Z÷’ªÿá-û(åÜAû÷'9µ£î¨€Hâ_©Yó¨;ê R‘@¤"€HD Rˆ@¤ ÜEªœGÂ,ÕºctÓÒ¤œ‡j)ç‘0KµîÝ–TI¥Ô`b-<º£^œ{ÐÏ#|¢î¨(P|åRÑ×ßz˾~ãÆüMMŸîihð¡î¨XÊ&&uþÂ}íµ²¼É¥Z÷r¾§åº R‘”$e“‰FéÒ¥KY·¯]»ÖI¨;ê R+ÂÎ;èâ-·dÝ>11á$Ôõ©att”r=®öù|TQQº£^"µ2l°,º6>žu{ee%êŽzˆÔÊ1¡þâVWW—åM.Õº—ó=…H• c±]¼x1ëöºº:Z·nêŽzˆÔʰ{×.Ú²eKÖí7Ô_åëׯ£î¨€H­ çΣ7ϟϺ½¦¦ÆI¨;ê R+‚ßï'kãÆ¬Û¯]»æ$Ôõ©áô™3466V–uKµîå|O!R%ÈÝt~Íš¬Û§§§„º£^"µ"èŽWs˜þ«V­rêŽzˆÔŠP[[ë<²Îz!ªªPwÔ @¤VŽålÚ´)ëöD"á$Ôõrt-GTŠÝÄùB<X¢Ë2¬R3DªYSSC§¦Êò/Q©Ö}™ê¥}X,TjWihçó/qyƒ°¤(?š]–P‡)-:úë4[YC.A ±å5Åkáéë\a!Ž=*âsY|®¨GCsˆWPäáy‹óôó9\bàs[\)ÖÞ?[¹CœO‹8oHX¤y =^`~XB ,¶´bÜ0;XPL#îb0œÅõëæcý®sõ‰Ý-Î¥ó>Áy›ü£¼-ÛWrZø|aÞaÎ[oÛ/Îäù>·Ë ìàüs•»MœÏìñ¸V°¤X—OZG{Är«"#(¦ k!æjäÆ"kæmºq÷ ‹£•ó5Ë]BÛX¸˜}ôöòx[XX1ÒÒ1bæãýb¹‹ç¸¼],NúØy”û0ÏÅ9cœo^®/D €¹éu¹MÃ,T1n¸Ò%Š 1Ç ˆùƒ|L³kÿ DäFocb7M‹É‹ÄQá¦]"l‰|å¹ÙëbËlHo>åó9FX ŽRž RÌMØ5¿Ÿw€õ!`ÝyœO7îvv…ö¡êråµX˜üÚY`º]âãåv]Ëæ©f€EV p¾åîáà24q™r‚˜ó#(Ü'Ëe½tˆù£Âº°\nÔq¶"†DÌæ¨ëøˆídcˆÃЙe¿NÊ Ð‡¹LC\FK¸…}9òä2…›o¹ƒB #|. –‹ƒír_Úyzˆ]¥aáá†ÞÅtBls»c]¼½“ÏÕÀç2nc×å2AhãBEsX‚ý”vG¹<1Qfã¦åÊs€]ÆC.W2ŸrG8ÿÂ5nÏçâ—ͧ¦ÿßÉ“öB¿vû‰Gñ¡î¨Xàî R‘@¤")D Rˆ@¤À›²ywïÍ7ß çúF[6JaÜóR­{9ßS@ðÿ…¸ïX653¯IEND®B`‚httpd-2.4.41/docs/manual/images/bal-man-b.png0000644000000000000500000116450412663316405017163 0ustar rootsrc‰PNG  IHDRèØï®ØýsRGB®Îé pHYs%%IR$ð iTXtXML:com.adobe.xmp 2 5 1 2 †Ò®$@IDATxì½x^Çy&ú¢WØÁ°SìE½Q²%Ùr‰›,÷x½7»yìÍÞÝlžÜÜl’çÙìn¼Ùë'Žmml+¶Ü$«÷.н“bïQˆÞû½ó㇇çÿñ¤$Kœyp03_ŸïÌ9g¾™9çÏ€¥ööö»222þÂŽ}}}Ù–[Ö—A\HÁÁÁÁÁÁÁÁÁÁÁÁÁÁ—Îй-ï¶Ø{ƒ“ŸŸÿdƒs«üÊ*…mmm½VÎ4¢K§ù”d¶ã½jû`nж-Z*ÿ`ôï4~¨í‘}Ãå¿òK%Gò.EþûdÓï“-—·ƒÉH§½éÐ ¦g¨xêdz¿Þç†êw‹þRœûßÃõᥰ¸º_ðÀ;å÷C?;ÛðvÊN÷džáð¤kÏ{…îíðÁÛ!ó½âÏ¡ØõS½·   ÓâòVã}"£µµõM\cÁy Ï´ã½Å36x x x x x x x x x x x x xàÝ÷W`¤gYL¾†z—˜‡àüÝ?AÁ‚ààààààààààààËÇ Ò] ÎÀ<Û–Ö _>.- x÷=ÀÀ¹ØœÿúÂûŒïþ \žèÉû²­ùa[ûÛÐøÂHÁïE„ »÷âY 6¼<Á=¤Kèæ rB s D½#`ÿõûð;¢4( púEv3À<33Ó½½½èéév¢jÈ7Ü>]ÞtéhÛPh£m õô< +Okp*ÉSžŠ#únVVØIËCi¸ýUü!Hí´t .‘ð+HP.yÃÉ£v צáêV¨·»»MMMîhiiAgg§ Ò);jçpôžà·Ãì»<˜çåå¡°°#GŽDqq±ƒ1XWz'¯/é yð@ð@ð@ð@ð@ð@ð@ð@ðÀåâþÌÚ¹%²AZœ3èT€:«Cû´¾¬¡Ê¡0ÉŠÊñqNéÛôO+Œ jºººpæÌTUU¹€¼¨¨È9ö[vÈÍÍuAŽì¤ÝJq0ââàq°w‹–zßíðÛ0˜/Ói³ÎQ:´ÃÑ—Ž½ƒÉÊહv{tttÀ~{vO'˜¬O˜0cÆŒØBz¿ÔRð@ð@ð@ð@ð@ð@ð@ð@ð@ðÀ¥ñÀ :ô”3q…X«i Ly06Ø rHÃCdSáÑàÁ ù'>æÜF.ý´“²Ò•#:-õQu={t6Lš4É3 Ìå Œó ùƒûíˆÒ ÂhC2}ÄESmŒ|Q8ëLq68Ä ÿ$O¹O';&žd2|ÛÄOÎz*8qÑ'C:Ó—Œ—|©pQüºø”KëJ¼Î¤WWWãäÉ“`ž>}º[Qçõ‚ty*äÁÁÁÁÁÁÁÁÁ—Ö)tÚ9×Öíöööó‚aÜým°Ñ€C¦*`]«s”)ù999NN~~¾ƒ‰/YN=Ü>ÞÜÜ ®úù:·çÒ&Ú-x29ÃÓfÊ¥|0û÷ïGyy9*++ÝŠ#ñ:(ß/ûþ!\)ž.Œ2âhãà>ñ²!Ü—!Z–L†h“ÉM'C0߆8ñLÂùúRÁÈ3\Zé‹ãO&7¸ìõiã`ÒÏœ)™Âù2SN^öo&^¯ìãuuu˜3gÊÊÊܤñ¾Gþ\”’èÀsÎ@˜ƒsÔZé¦Fâ cP]ZZŠìììØ€˜tÈ744¸÷³)GeqUŽiÔ¨QàöðhðàöO6q¢ ¾¾ÞñQ¯’lbNYÔs)ƒtʧ<ê<}ú4öìÙã‚–©S§:[ÔÙÍé‡hÛä›8xŒ2ãàQé’é­÷Ëäeòmóñ~9A™­ø”‹W¹WY9i†ZN%7*ϧeY>]&¸è’ÙF:&Ÿ€$þÇÁ c¢lï—Ü×+~鈓Möuâ¤9r ,p×VXI—C<<<<<<<<އ0ŸOeåQ¼/C4Ê£´>ÜçSÙÇûeâãÚ!X”VòË}>¿ÇçãUfÎ$;Ä'<ë~ÙdzL>ï—Eëç>>YÙ§Wy(´âQ®¶ù2„óaÉÊ¢UN:&öy–gΜé&Ù>Œyóæ9œüâ*á_ð@ð@ð@ð@ð@ð@ð@ð@ð@ðÀEy UFDhÏ•h Ò5ø÷s­d'm²Á:tò “Æ—A^Áä2àU@@œí >êñƒaá™SŽ‚eæ”E>µÁ§j™²©—ïó½÷J{çœ0Ùª6ørSîãT&ŽI¹àéæ>ŸÊÊãäG¢ñs•ÉGÿùu˜Ó‘€œ“¥ºŸGeDëQÚ8üPôQž/CíˆÊ^ŸÖ/ûxÁ•GuˆVpÒEiUWîÓ&ã÷i}šh9J­ûºˆóñ~Yt’/¯^KìÿüXwÂð]Ï¢JÎë†ç&¤ààààààààààsHº‚ÈŸcI@~Ð›Š–|>^ƒ~å¾Ü8ÚTz$C¹O•Õ3”: Mp‹ïرcÝz-ÒCݾ*§£Ç§õå Æ;ÚódY{z,PóÛçÛ!\Œ¸dpñù¶ …v@¶Ù×kG†ÙÅY$Ê0[P—0iïP’oƒo[*¤còySÑû¸8ž8X*ùÉèÉmÃPhS†ä?Ú^¿Î2'Çø* #×_!¿h}Ä•©‡çŽ»[h‡®¡8Ú ¸Ü<4Êá€;nЃёâà u¸O¥ñq¾ühY2£ü‚'gPÁ÷è¹zÎIË <üƒ°h"žItÉÊ>Þ1ôÿóáѲègR®²êÌ3²²í»…îƒ|î7Û òÁP”8â³³ˆ,{ÿ8ËÚïpžì iÉu¾Òø0Ã^`ý•••c6æ[pžÔ)£§‡ß0¸}˜ÐÙk°(_TŸ7âz.Ù©Ü·K4éð¥KK=JC‘K_GT†/‹8õSÁ¹ò­oAhëþ¤‡h¥‡rXæ55~üx÷¾úOCºT‰:¨óĉî[©h.x x x x x x x x xàró@ì :ÜHsÐÎw¹™ââ¤Ñàœ´¤a0ÀœIz~`ŠAæÌøˆŽ9âùθ/× ê—E^¾{Î ™eòH‡èÄËœ´LQѦ“«}¤åÖ^Ú7bĈ•?/yÉ`²Wt œ|xŒô~$?JK9L‚»ŠþÙ9åŠ4ýÒÑÚˆ£§«ÑÒÆŸ¨ëCqI)&Mšˆ›®éîÑÖv Æ2í¼õubÇÆ-ÈUŽÙ•SÐÛÕi¡ÿ¼ó¼™Ìžþs.»hmÍ x"¤¦¾síåy?g¯ì§ugPßÔ†q'"/Ë‚sãËÎÎDC]5Zl’Ä‚ÄÜLë3N7eÐ,k€Ù#;¤7Óè>1e}½àÆjõÑOý²]nœuÒÊFÁÅO|BDž׊Oå'ŸeI‡/7U™ò¢xéˆÂYçµÈïEp²‰¿¾Àk„«ØüðbII‰ëß|%%*—6’Ÿ8òOücº‰ü¼nù‰Ÿþô§îç ?ùÉOºs!¥++м=tƒinC倞ƒr4уƒtâ´òP€â;JAÿ¹¨?hç€?.8 LÊâŠ/éÌÇÉ!/þü' Ès±I2Ð'ÔO8Ó`:ˆ÷iY᪠&{U÷sÑŠFú §ÿEëÃ]Ùþ1@ÏÍÍAͱ·ð­ÿõ7øÝÓ/áÍמÇßüå_â©W7¡«/ö\·º^_`çÔVª{;±áÕǰeÿQdåæ9\¾áò9‘b232³ V8ès øú,öáùùœt¡N&éy~²,p6Ç ßêì9Ùœ¼a™…ƒ;Öákÿæ?a߉Z×̓ÈìëÆkÿ ÿõÛàlGã£îȳvñlä˜ mÊGv'pÖ©+7'Ûù‰«ô¬“žá$œv:˜Ù˜ëÚκMúP`ÒùߣçSp’³œìùt¢%LG2X­‹Ÿ9¯^¯[¶lÁo~ó¶½1ñ£‡¿ýíoÝ/Ð>Ò‘^Ie¶ýž×¯Ã††F×µYôq¹ouÐò‡ðq¼<<<<<<<<[aoGÝ™j䚀…óçaDa6NÞ‹]oíAFA©ýLØŒ++Akc ÖlÙŠ–žL[†¼ü"L«¬@KíIlÚ¼íÈÇ’eË1ndöîÜŠêºzä–ÿ\dgœ›dñý=àë~ ÎkNt¥U=޶_ü2æ”%}¼6xð§Ož<é~J‘×w†ˆ&ªSpæ¼vIËUw٠أ×~T?iÈǃ×'6°Ìë‹ü¼?ð^à_Q9¡<<<<<<<<<ð~ö@ÖŸÿùŸÿ׸jÌ œA³ÐÌ9H'ž«hd3hN6@'è)‡tÄyhÐÏÁ;Ê#LôQ»dõ)(ðWá(›´Iƒ~ñDe¥[§-”ÛÐЀÚÚZÛ >ÉMJÐ~%µQõh>Þ§£ƒ‘'Ü—ç—ٞϳÕǰ}ï Fg"«³›×¯CùK±húXüöÀîÚ^äwVã±—7ÙOkU îÔaä•NBÓ±Ýxð×Ï`Bù¼ôÄ#È,›Šü®“øâ}ŸÁ¨ŠÅ¨;´ O¬Ù‡¥‹æaçëOà[?y“ÊGãÑŒž’)Èi¯Æø9JÆOÀÎ5/âDs&Jó;ð­¿þ#lª)ÆÕËaLÉ[YªOÅɽЂ\,\º ãKr°eíkøÇoþ þï`΄xì?Åñf[Õm<ŠgÞ| ófWà•G¾‡oþf æN.Áoú_> £rZñÃø>º‹Ç¡fßz¬ÝwófLÄ“¿ø~óú~L•…oþÉÝh-¿³Æáw?ûNvØŽúCx~ÝL›Zާ~ü¿ñ½'6ãšË0u’MÒðÝø‹øùPÏS•SÉÕuÅo(pâ“\6Yc×Ý•W^‰ŠŠ w‹Ž¹ŸTçµÅ@š¿hÀ@›“tâ‰ÒÓ‡Âþýûß?¯ªªr<¼~O:…£G:V~€.ٽėÊÁÁÁÁÁÁÁÁÁïGœ[OÒ:¼óëÍ †IÊAºVÔP+h`Ε7mw× žr+ ]ªD: Ò“Ù$Ù©ä Çwñi#'¨ÓOÔ•Jq~Š£õi|¼àÊåKÉ‹ÒÊw‚ŸÇç>Ðf;#ì|Ùñ ~ÔЉøæ·ÿßúÙ£È6ø¬%×cÉÄJvWcËžÇqüt-2³rlB¥e“¦àž{ïEeÅx´ŸÞ‡}GŽcâÌ|Üô‘/ás_øò›ãÿûÇŸãÍ×ßÀÁmûð…óG¸óú…¸ÖVÊ×´àÕçŸ@{Y®½î:ŒËjÆï^y%y×`ÎMŸÃÝ»s&—¢ÙV¿³M_ggVÜõiŒÌjÄÎ݇P^PŽ»à ÿãoQ<¾(Þ›¥×Ýb«äã‘Õ^…Í?{§j•7_ýâݸÿƒ×¢|D&^Ù´‹+nÆíweåÓÑt4¿zæ-ìݾ›œÅŸüÉŸbIÅ(öÚJ~GvnÛ‚­»ëñùo\ƒÒŒ<õ7߯ÆÙ3]2õ瀕Ëg¡½­Ý½Çõ5ωü®ó#s;å>­Êç/ë7ƒéðùRÉ•’ÇÝ ,3ÀfßænéVå‘|ö^üî)‡×t²$}Û¶mÚ5kÜD¯÷òòrw=óÌ3ÎŽšš|ô£u`”«v%“àÁÁÁÁÁÁÁÁÁïG  ³Ñ À¨û‰ƒètÒÜ“ŸÁ=%ÉQ=œ”•ŽÇ¨¢Ä7 xVÙîîî.Œ=W͇7-˜~­³]ùc,ØŸ‚]{ö¡Í¶ÐŸ>q7mGqnrŠFÚ _4“Æv.(1#2í£rgpìÀnlÚu9]µYZ‚f{mcÔ¸i˜2qŒuÈl̘·'¶D­}ø yÙxkûägtâ–;ï¶­óÅhY‚²1¥¼Ü»üf$êôð_Ôׯ 婸D£<­T¤¢%N“`»wïvï¡O´ðqç WÃ<3Ÿ1c†óT–ú"uñ~ÀÉ1^ ¼.DËܧóm^¾|9æÎëø8ðÖ[o¹É®k¯½ÖÙ¥ŸpÓµ•£6†7Îlœ»ï\‰_?ô Í«ÀÎ}‡0m•˜»hj½…ŸþŸc\aš2ÇâD2¥\ž ùŸç‚IuùÝÏ£ç.Áqîœû¼QZáÄ#]~]0ÑúºU–\ßôóW\iÓ¦¹ÀœÛÍùáC¾º¡_Pˆöå8}”É Ÿï“s+Ù{èâ% í¡>^OLÔÃ2ƒré”­â yð@ð@ð@ð@ð@ð@ð@ð@ðÀåä Û¢]¼œÚŸ´­ &x0 á—®<nÓåÖ^­2ŠÙ„Tn89ƒ”K!'Nw&'Ú[PS[‡¶vûT»µ1§ Ø½\d?8^¦ GOœ¶ÀxŠíãayÖÞÎŽVdæ¹mìGD›½ÿ=vt©¬9ÈÉê39ݶýÛ¶•÷t¢¶¦yÅ£0º¤UÇ¢êÌYŒž8“ÆF¦}ù¼Á~ßüÈÑÈ).ÅôÊièmoB}c+FÙGË?‰–ðysC=Z:ú0ζ«ww4£¡¹eö¾t·ý†{]s;ø¡³¶³&Ël-3…ö3kyöµùζdçÛ‡mÕ»±¾­]p¶ÖŸ9‰Õ ;nŒkSž}Q~ík¯ ¦«ó¦Ç–ÕÏâTV%¾þÕû‘×yûBGo*§Ï@q^NW× pd)ŠòDŒóí¥€%;÷ÉàÃÑÉ>̓ý˜ýŒ²¹²Í ™‡áL¢œuÚ\ ß¼y3,XàÞe'/åÆ%õgêá¶xn©ç„À²eËtK_€\z’³Ì€BÇ®]»Ü*ß’%KÜja”…t~5”@C¼Q™¬Ç$yq´>,YÙ éÿGš,{çš+ž™ür[iîëë± ½]ݽä&~¼×‚·^û=óžnÛòlô¶/ö8·Òjn«wŸ­Æ÷˜‰ ¬Éo„&×&0l }—ó÷ÒùÛæÝ]¶…½ÃäÙëݶÂÍßb‡ñr[5yrì=÷ÎûðšáåÇ›È6ûÚl›:—<×ä´··!#;×Ê™î#rÙöÓoüù5ÚÈßxçJl–ŽÜÂßÙe?ÿÅÕtkb§­ÞæP¯ñuœAd{s=^|êQì8Þ„rÛÖ~¬ê,î¸ç#X8k²ó”ûÅ+u˜]&?ßø»»lµ×Ú%I¨sã˜ìŸósâ™$#Ê¥^r•‹.Z'<æÃ‰g’lá‹Ãç'òòذaƒ ÎgΜ9 ×—ëó¨Ì@ž¯Xð\íÌÇGˬûI¼„‘ŸI¶ —J®cèçaY2§Í>Ì—-¸ôˆÇ‡Çàzœ}µÿÀî·Ì+++Ï›”ŸŸK†ÞCWðiB9x x x x x x x x xàrõ@Ðûϼ‚æ ^¸ÂÇßfæêàÒ¥K]°ÉŸ‚b€!ÚÁ: éH/ŸO0Éð&Ñ)£%_.}â#‚GŸ–øti)#ŽÖ×á—¥|J>Þ/«Í„ùpò]hï¹ S´ÒåÓ’·×VÀ c­tø´ Ò›l‡E„[™üÆyž ¤‰ÓçÃH“J_2âóm#LI2Y÷õùð¸r”V4ÌåÊœô¾ ~Ù§c™‰» ¸Š>}útìÙ³Ç}€¿‰Î‰,MhÎ×Å:SÌ~ÿƒ‚‚‚‚‚‚‚‚|dØ» ƒ/ûïÃ2) &¸º\__µkׂ?5{ölt(`QÀ!¹Ä‡«,\­`éÈ­ä1_´Ì:é£6Î$>áE;˜Ž÷ùÿ%ë|h|ͧ•nRR¯l§h}¸`¢,÷é£úÄ› .üÅæQÒõ±ÏG|?°Å Æ\:D£Ü—!˜ø|”W|L‚³Î`{ûöíî'×®¾új÷óiþèH/>–C ˆ÷@†ý|Øe 3È𠺈[oùÓQ»wïÆ¤I“0wî\·jé¯.2Øà!Þx×&‡Šïb‚–Ád1ò“[Ÿ“Lo2xœ´8Z˜¢mJÒÆéJK&7}<®qt„ÅÑÆÁRÑ—n›“ɦ %Ò(I.sÂÅÏ\_€g~öìY÷3nü}uîBa’òJŽä†x2|}éØ zå’˺_öñ,ÇÉL|ÌE+ë~ÙôÃX– –}~Õ…O&CxÒ3Ee$ ñð(­t(¯ò8xTF­ø”‹†y*~âãÚ—,*[zg’Œ(\8Á¤3çO¨>}µuµhokw+éüÝtè äðð/x x x x x x x x x xà<dØŠñe ûÁ ~ðŠ+| Úy0N:,«~žûéÊÌ“ñçÓ²ÌÇC“ìvûG+\ºyœŒ¡è‹ãOW·èâdÄÁDŸn>¤eò}#ÍPåú2ÉÏt12ü¾–6¼ÿ~û¢å8›ã´O;MŒgfÙud¿ÏÆù2†ÒÞ8=ý:‡cgà ¸Ü=ÀŒc·Ëy×eF]]Ýe G/<”Ø9B ¸Ü=0”‰?çõr¾¹^îý&´?x x x x x x x`(`ì¥_Íâ®L\99ïuÚlníN–ä”h ê㸨,ÒúôÄGëq<„I6éU­d¨.¼L4qr„‹Ë%‹rTŽÒ¥ÂEißëõdmM¯·7Îþ÷j[/Öîdý?ÎG‚E'¼|´‡)&þÁròJN*Zé­êäÌç>G:_¯_Ž“A˜äH®O29qxÉ‘\Ñ0ÃÅÁ|ž‹-K>åȦ8˜ô':Áü|0¼h¥Ã—%i|¸xRå¾^ɉÊÜ—K¥G8ñEuïçQZÕE•A|&Zñ&ÃGéX­x}˜èSåⓜ¡ÒЍz£z('Ά8ùq0ÉK&'>ŽG:|›N[ãtÈ&åqòã`¢gžŽ\Ÿ>®,qmõaq¼q°tl’NòKG,N~:°d6Ä鈃¥£ƒ4Éôøüqòã`>Ï`e_¯_öùât&Ÿûô—¢,ù”åë܇¥£|éðH¾¯7–ŽNÒ¤£7N~Ì×™Jn*\T†êòÍ`zIŸL~2¸tˆ—9õ1@×ôÊŸ'U9]>ÑI7ó8X*]>޼ƒÙ'? ˨®®¾`=J§˜ÊIÇA8·"0q<è\ÿÃPZNf¸ÏïëT™ø(oLôCɓɑM”%Ý‚©>=>m2¤‰Ó‘Š^rSÑH&iãlà G/ƒåƒÉˆÃÇÁÓããÅOXœíÉð„ÇÑû²S•%7™Œ8üÅê”=ÉäÄé$O2zÉ{;òd¶ EW*q¸8XTi’3Ò&#ŽÞdvÅɃEu^l=NGl8z('®½Éä'£OWw2¹âÃÇÁD¯|0»“Ç“¾tòttRŽïÿ‹Õ9˜]ÉlºX½ÉäÊž8|LôéæƒÙ‡ƒEõ FC<“î$#½ò‹ÑIqüq0éó¸vˆ.•íq¸8˜d¥›&#OXªvP÷`4©ðÉtRn*½©dʦT2’éM¥“òKqrŇ‹ƒ‰^9iRÙ5˜Œ8|LúÒÍSÙ'?Õ•J&i“‡L¦ä&ó±d’.ŽFø8œý˜‹!óòò^Ÿ¤¦ÁìJ%WüÌ}½ƒÉŸÏC˜’t²G#¼‹ƒIž“csº @÷ T–ñÎ@›ï–rõeÂ4ÓÁ2iuŸ8¾ßÍwS}¸o¨ô¤ÊeC*ᢴ¬3 U§ä 7Ú‘®œáòQþÅ´õÝÐ{±ö²ÍÃ9¯ÛÖ·[gÔ¾‹ñ}4Ü4\½Ãå£Ë;œs#½ï4ï{­­k/ý<\“÷rHôñp}4\Þwë¼×^öƒ‹±y¸ýèÝÐ9\[_ð@ð@ðÀ{Í|öñcÃ\àå»uÏ}¯µãbíÍN·á,pÛ+œu¾ À›A8a<(“»yò´¶¶8›´¤‰ê–Žd’l⣴’%¸rɯèO&Ëç#_2xT¶è¢pÕ…OW~2zÉK·­”ÕIqò#>އp%Ÿ–0Ÿ^8æóEá©è%›4¢“,áT'>*›8ñù8Á¢2$K¹O'XœF:ñ¥ ÷e“Wü‚3÷e KF…³M’+ø`ò‰—½>-ù%KpÖU&ÞçeÝO>]TŽèâà‚‘Æ—!å>`>½÷ᤷÇÁ$—9iI#º(Nuá}ÙÄÅÁ#>JO“ô&jçÿåˆN0Õ¥CpJˆÂÄ/éQ^Á™§’C¼dGi£8Öß‹Éo?íW{}¸`ÄË—>Þ‡³MQZÿüHžtø´‚Qžè|¼`>tûtÂû0Ò îË&¯øg§Ã‡ù<©à¤óñ,_j´WöøºW^õ‹ÉÕ†‹‘1TÞwC'm|7ôê^Ês–Ž¿ß¶¦c×ÛAónµõÝÐûnè|;ÎY:2ÕV}¨›<ïôu”Ž—‚FmM&+ãÔ©S¬ “I‰ŽQ¿N§qF£  À­ˆKAÔâaÎ@]A:WݹeA/þ‹NúB<<<<<0è9Âçÿ,òáqò„'ÎÖ©Î<Ž&•Ñû4”ã'Ò¤Cçó„òåëõŽ¥¢I8ÂÕç‹ÖÅ+¸êQzÂã`¢÷ñ,SžèUÒøð(NöH†ê¤ó“ð„Eu&ƒ Î<ÊO“àCÕëÓKFBbâ¿ð>. SÝçc9ñäói|˜d ¯:iâ`„+ ÏzT‡äDiÄË<'˜ø}ú(OÇzÔÑøòâtÄÁÄË\x–£:$;Ž&ŠSÝ—éÃWŠ“'sòù4‚ù4ÂK‡êq´â‹ÒDë¤óaQYÂI§OïÃWë¢,Z ñ<\ŒYTTäbÈT2…S.’É\°dzÅ«|¸ôä§k‚¥ó¿µ$™çhÁÇèdö•18§ð#F¸Usâ WcEOš8˜à\IçÁ:6©>R'™!HåMGŸ?©xÞ-Ÿ܉ÆgaHÁéxà½Ô¿ÓiÏ¥ áµÎkérH—S[/‡óùn¶ÑF*6“=~ýݺ¶¨÷ìÙ³n!—ºo¯ìü}Ïes2&®gÆÑçZ¥Mk‹»¶§—””¸mêšÅ¥0_ &”žÃôát6ß+¨¯¯w+ñcÇŽuÖ‰ùPõÆGŠÞthåß¾·[oœÎtl*ߎtuúœvÒNùl(º†Bûnøb(ö]JÚË¥­j§ßwâ`ôm2ø¥òûÛ-ÿRÙ9T9¾oý2娮¶§’MÚtèRÉH†“\åÉè~Ÿá©l×CöGi/Ðýò¾¤7jÔ(÷±7> D#¡Ì}Á,û4*‹†ÛãYæ…³ÂÜòRð@ð@ð@ð@ðÀp=Ào›ØGOÝ/NëY¥çŽ/×=“øtŒ .2Laî ÞŽ¾˜mÅ”EQÙÑg¯Óçᳯ´´ãÆ‹’„zð@¬اOž<éÆL~ßK§ÏI ú«ÏãËLדp„KËQ9¬Ga¤cŠƒÆäËtï_Ÿ‡Vq8z‡bGmº:Ù Tþ ~(òÓ‡ÊOE¥•}ÌSµÃçc™÷òh’ÞdpÊ÷uˆÞ‡ÅñúxßÒú¶¤#?]”íë5M„ìRâR¸ðùBdÔFÁ˜Ÿ/“s)ÊGZ^ÓL²ûu¢¤ó'W<’åe]4qü¢OF#æ*§+S²‡“ÇÙ#åù¶ Èç½®¿¢sg„tÀýÜçs÷:Éví$î\7@ö€‚þ‚œÁÃ÷Æéüt‚s*!sòðbé`òù;g)ŸªI“&¹Uõ؆‹Ùò¨<¡RñÉ~PïÍûô²I²ârÑ(÷icÎDÙ‚%袞ÂΕ´¿ßÿý6ÚÙ`k‡dðù~«#N‡?M*\ºÖÄɈƒùòÃû´,F?^ò|ºdeÑ*÷é‹ÖE÷ûž§cw”&Z¿˜6ú²TŽæ©ä‹6ÍPqC‘éÓ&+Çé'­Ø|è^K8“ê>o2œ¯—ô~]eæÔG]œìeÏ3Ò¥œ8%ÁŒ92ú òð™g[Ï Ö3lò8Ã>†jBÑg‡K)Ú"¹Ê£:e/ñ|1%{V:¤÷O2=ÐyEÊŽ£ ž žp¯’Š>óÄ £tÑúaa0¼èãèâ`¢nžLf2x2=qô„©¿°ëq¢´<ÿ„ù)®Oø}./˜/c5¾âȃ6$ÓãóÐÒéž ɳS8Ñú4²›×ûPåJ¶Ï…ûzãèÉ+xœj«tˆVuŸ_¸¨NÖ…óùT&N÷WùD8_¾óá’Õ¥÷y„¯l \6'Zæ‚)÷uŠN8ÖÙ·x0Eý ^Ÿž0ú"z.D£\¼N°ýœu–‰W;(Kuî^!ž0>W§}¢•<Éñó¨Nçó™Våá?'ÏÕ}ZßnÁS§×··¹¹UUUî5+ÞKˆcë„s™ñ_\’.{M#Gޏ/ørDÇ/X*âtH®è•ËfÖYŽöéI•“Wþ‘\Ÿ^0åÒ)7‰oº»ººQS[çvôå÷/DgdZðÞÇëùÜO‘÷Z™}(33 n‡Ô¸qcPb÷Vk±Äâ‚tah,· rK:?è¦(¼rLcÙqí7ÕÝ‹ýS§Nu«4 ÚÖÉCy¼Ñ×ÕÕ¡±±Ñ­&çóDB›xN”ÑÙâÛ&xMM &Nœè:a¾Ž¸:a~½ò8œSÙškéü¦/Ã/‹ç÷=?góù튳;zNÎñÆQK‡?M*ÜàÚq2â`¾¼Áð>-ËçÑ[_w·êDgr¤çá£Ì^=J§ºrt ÅEë„¿ç…tìMô>s)š&Ù”¥r4—žèuâóˆæRäÒŸŽ,Ÿ6YYr|û¹—Ï =Ø㥠=Y–¬¸s'K0Ò‹'šK.óó’ñ0ïµwÁ»Bϱcè³]C£ ~ µ²ÙöL˰Ÿ µ§* á%ÓÏ“áƒ'Ãû²ýr”Þ·+Š#_Ì—§r”.ZòÁð©èÒ啌tòd2“Á“Éôéé[&õ–SN˜RŒ8Â9fbŸÚ½{·M›6ÍÁSñH.w}h’@ò„#?mVN=Çwï‘Μ9Óí’T ã·Müqy2›H˾?âø£0^C´+•\òÄá“Áø á˜3¨á1Ô$â‹ÖWÎ D÷LúSeáÓÍ£z¢õ89¢¡?Ù'¸«ƒckŽÅÓ9'âÊf;ø:í‰'^WR_Q._}ÁW…wø8Ñ3ƒû0–©‡òØ.>ÇŸÐ&¶‹¿XÅ@t̘1ç-Zú:¢e_~­›f³Ñì79p. ‹ÒVO¦WmdÌŶ1¾kjjrmeÛÙF^#|öðà«È¼~é_â}¹ªóZä‚«Ÿ|:>”2eDåDë”… çÞÀvó¼Ge%³7ŽŽ°†Æ&8t­-͘2e’ÝÿíÚ˜àú‰9°ÈÎÉr÷ÞcÇŽ»~ĉφÆÌ›;sfͰ{e: å‡'ŠOˆŸd$oHœY»v­;é<áóçÏì£|:±”Ï>éÙñY÷å‹—Ì‘#Gœ|vâhƒ|^˜ä—\ñø²Ø¦8¸ÚàÓ¾7ÊÖy{íl÷_4l›ÚÇ6ÉwÊÏÇ‘ÍhlâÀñ¹“'Ñò(¡„¹D=‰Røÿ6x€~–¯Î)¯;ùÿbtRÎÛ–Îõ©PŸSýrÊuÝ©³+&Ó ‚ù~Høˆ×¡»w_Ôµ%ù”Éò@ÿ1…¬³ñ*öá¾-—ªÌx¢]ƒKtvïÏJQÞÄLsüý[<~.?ÈÄIOÇ2ƒóî3gб~½ ¾³gÌ@æèÑ.ï³G_m Ú7oB϶m(Z¹9†ã*»;aýÂh¯äû¶ Õ™ N~>ëvíÚ…ýû÷»@„ÏÈÙ³gcÞ¼yï«ûz¢òU§_yÒáÿPs×·†ÊèÓöÏΩr1ë¼®²pÌEOè3ñ@\ëóy¢e]£¾,Ñpì&½Ì¹ª¶Í®~è‰÷¿ï’ŸleÎ$~–cÙOÔÃ… ;wº‚6IŽO-Ó®r\ÊW*Hú:É“L¯è„瘗k¶‘¾£]\8â¤ä’%Kܸ–ðh¢œ¨½’¥e]zYc;vìpã_ÞèÿŠV2¢:}y,ûI:%CuÒHÛË íçøºðÌÅ#z‡ìÿ'¹>Œe¶2KЗ~S!e'Ä‘~üøñIÏm2’áÛɾ»gÏœFÏ!éÙ8±5Þ¼7û4’G;™ÒÓKJ›8ëmF{Çtv5!?·y¹lÜ`J°[«)­ÿ?éÏù8Q;÷?™NñÈ—¼þKq"A-¯ú‘íãA˜¾?F^¾’ÅöEåë\ÅEýqÎÊD)JO¨x$O¹KpŸï_öINîðÞÆsÂzœ|ñ*'í„ Ü=Š×–î ÒG²I,A™Æ“kdöWÓ`¼|Iäoß×q°áz(Ñ[ýt¸2’ñ¹þ˜P0@"Û¿ÇùüRxGí–Lº% »Ðý×ã…ˆ´ QùÒM¸Ký×¢N‘èÓ>D"ê–þT¬¾ |p0¯‰aN¼òÙÀg Ÿ'¼¿sPL: Üâd´×*+?Þü’i³æ Î[ÿõ_‘eϫ»îB†éè³ç‹{8ŽƒŽñÑ7q ÷îF×Ë/+oAŽ­&ôÚÀƽ¯îé¡|éR.ôaÊ£xá8 zá…\›¯¸â ÷Œãóïå—_v¾¸å–[ÜÄ´è%?š =‚Gé‡_O\1Q=×8Sy€çÏ?H«>%>â™D'<Çr'“®OMŸ>ÝÉ൥¤ó)Y¾<Éõi9~ã8Ž×(‰4û2WèöíÛçHÔPíàØRvIŽt)'<Îî†ä}!º{’|¢÷yY昑öUVVžwýøºürÔ6Ê`òi¸MøŒÝ?8Î%=u(Èá½+jÏ/9ʉ‹êôë¢ã¸—þݲe‹ËµM™÷ úžúÉç'ñ*'Î/û´qeÑ2ç½—õr‘÷l~<š8¾Ý¾.É!,J£:ûéØ?ÀbY÷}âÙ™“OeÙ.8s&åÂGsÑ~ÌvPmÞ¼ÙªÔ)½ÔCÛxðŶsbbÑ¢E\jƒäKo~~ÝüÖk;.2lRøyäælCf=+zŠÐÕgÂXjâ8AÿZ[¬¦Ó+ùÒÇ<æã¥›9Nvq%½¼¼ÜMÜqŜ瓯_ñìߺÞx=Ó~’_¨[ú•“N:Uf‰4Qœà~β’/×/KŸ•<‡\L¼q9i8)Áƒ1+¯/ÙEzéPîâò{Ù‹ÉxoËÉÎp²2­Õ™OÙwé;ökñô-ïG”‘›k?;nö¶µw¸¾%º½8R.ÃØáŒ¶¥/&‰ŽÊœófE#Ø@Î 2ئ&ÑLjr<”£z}^œ¡ó8ËÁõÖ[oáðáÃNõ±ƒp6‘rH3h²^îœk3GFîˆ2”OíäÈÄÜxaòê°4·:a¢ç…ÜÝنálÂDt5×£µ' Ó&%Þ]ôäÑ^ñqÇÕ5xò¨›:Î*&üAž„=îuÁu§Í¾œ±‡UFv¾› ÏÉJÐÒÎæ†:Ô54£°¸cÊJœÝ„÷tu¸‡Jw_ÆŒg3u¶kÁ±]í-8]]ƒÜ‚7V[ZØæ>ë8íh·‡pcc+FÛLta~ÂïšÉ4û¹¢o‰m£?:Z›M^=ÆÚ‚¼èÌ”ñÙíF~uŒövð  ùˆ¸„ž„ì¸Ñ]°2Ù“<æQY&Íä%àÄÇꌓMbãÕ9á{'‰Ÿ“aRüàÈÉa².l“Îq¢´‘>#ͤuÙù)+ žÓºê*´wgbü„±Ö^Ò'f›%?YÎ>ÃÄ.T[S¶žlLš0&á÷þsåðÖ/ðm6[¨‹)¾ çàìyí-¨®=‹â’2”•´™m’_ˉ÷rX²”ŽÏÝ{<"Oø5êsÙš Šÿ/½¼¦ZíZ©µ-F&MFŽ9K~#§dEýãÞO6üpëž.w¯êìÍp×YAn¶›-mh¶mNvÍÐ!”›Wh×F¦£Í·ûPÙÈþ`¿/hCœ=„+ÑÊbjn¬·B#ŠJJ1zTÿ®"ƒÛb¸ÕYà9¢8ñÓ%â#ï;™h³W¢ž~úi<òÈ#nàÃÙç?ÿy¬´ë‡~Ø­|]wÝu"4×9ñuœÇDÝö¬è±-g6±Ìàœ}¯ÓvhåTT˜Ãi›=¸{:P}ÂöŶKëîãÌ“O }͛Ⱥý[ð°Ùy>ßúý~žü˜JÔ&ß6–õ¬áÀ›Ï¶øÃ¨ -ý‰AÔO<á¶W^yå•î|“/îüùðÖæÔŸm²{z1ÆŒ5ÀÇk†n`KyMÈ9ÿÞEhÿ##ù¨‡÷¬Þnû–LU5 F–b”õ_>÷Ùž8ÛÔžÝôw\J§ÿÏ”ÇG (¹ÊÄÕ0JÙ׸ú¯ùç\ò•ËÒP>ÇnÛ·ow+q‘–FæŸqÇÄÉ76 4F_4êdíâ¸åSËìs¢'Þ—/Z¦rç×Yæ!;èW–™Xf«¤ùÏ×!Ê)Ÿ²99±qãF€,_¾ÜùžãažƒÅ‹»`Šíf’M®2„Éì ~úš¦ P¼i÷…ÚåM¦6J'~Ò³L=Êù<¨¬¬tñ nŽ=ê&(ØÿHË€,*ƒ´ƒ%ò0±ï0¸Ûºu«ë7št!žýœ¹Î·ú=mà$ÑÂ… Žð8ŸK‡l¹°Þ< Ìsò7Ù}u¤¹öj@Gç èm‹ÜÌéëpÁ‡tÞÐM"ÓÎ¥[þås…>䤷î30gÿáÁú‚ \¹ÊΉ ž %ÉR9aê«>\eùRu_†_öñ„ÇáDÃ\4\¤eÛh¿?ði£eÚÄD<çòK”&®îÛäÊfgNN®»Sæî©ì—ô#}ÌÉQÚÅ…e–yO¢¿¨ó}õÎ35ýíLôIʼ`@I<¢‰x?8§2³téRð¤³Ñê°’éË¢ ÂéDòòaAzÖ•ÏÙWÝ ¼5ÛÁ†röމÎeCù`ãyÑÈN_§Ê ¬ÜºÚð‹ïüoL½íS¸ïÞ›nÑ0§ &Æ}O$ÚÅ™ÄÄMÙÙ¿¶Æ|÷ÿýoøÔŸýgœÞôöµ•ã?ýûO8]¤¡<Šdý”øÀÀ…òxÏ?zä ŠGOBYqžûš°YŽ,c?{úž{îYœ:k³0´”OŸÛo¹%…98°c^xåMtÙök*–\s3nX1fß Ï<UõÖž>”L¬Ä·ÝŠñ¥Eh¬9ŽgŸ~'êZ Cž•Ƴ¶;Ã>šÔŒk×£¥½‡œÆ=Ÿü¸è|g#á•„ŸÎ®j[ã™øÝ¯^ÄǾx&-‰´›Z¶è•ëÜw³3DZ-ô¹ç6÷†þ¤d(•ÕôåpráÙ¦“4>YíMô ¿$óC‚‡7ïó­ØÖÓŽÕ¯¼ˆ­»£Ç;iæ"Üuû 8¸}#ÞªîÿÌÝæ1ÚãŒp牲“%¿ŸíÝñ&Þª)Á?q«“á÷Ý ìد«¿G—h3ÐX{/>÷ܵ Ͻ¸=véîÍÄŠëoÁÕKçº{×±ýÛðÔÓ/ ®­ùÐݘ;wÙÏ“åïà?úŽï/þíßþ-¾ûÝïâ¯þê¯pß}÷¹­…?þ8|ðAlذ?ùÉOÒ²Š~ñ(“üiDîžÜe[ÈYÎ_µ ]6é|å»6ìœNš€žÆjô5DÁéÈɶR›å¶g[ë#¿C— Ìrì½<·ÒÞ¯„mïÁXŒÂ“Õ9ÉÍç'¸+**œ= gÍšå‚ÜIÆASªºÄýªÏžñü+«‘•o«1ím˜6oV^ óD\xmSá}-ÆßëikÀs=Š…·Þ‹¥ kÜÀv&l¡ä.•èW©d’†AoÌ9ÀfpÅúŠ+Üvb{\ífÎñ©?ñ’ŸÉ?‡Ò«œ8¾[É×äs,ÆU8ä9&cÿU"-£p+°þ¶hâ¤O:ýºdH/sŽSyð NŽ Õ÷ØVÚC·M³ýìÛ>¿d*Ú x4÷e¨L•• æóÇ鈃‰‡²h7ƒcN¬p>¦ïÛä dˆ¼/ðÓeË–¹ Ž“ÉË'Ÿ0&ѸJäŸøHÃ1:ÏïOì/ãÓ&.˜qÌÍD:_^œÉŒ¨¨’Ÿ}&1ÆNLRßf¢/8îgìáÓH·òVˆÚáÛ@zöööa^¼˜8ÂÄk„÷æ9s清BÆ\¥¥O¸r¢‰¯O°?*Eu îç<}¶“‘Ñd+®‡-ˇM5Œ» l6§Ë‚ôjT×GMS‡-¦åbBY¶óæwj÷p¶A)½¤•ŸøZÀh{m‹í?yí°-œH£ÏY÷åJŸ“Læ”ÃëMx˜äkÝ[ˆ—¬Eâ¿à²Q¹O£²t†6³Ÿðúˆ“+žd9mŸrÙâó¤‚q²»­ÍÞÉ/HÜG%“÷'Þ‡ØwÙ¿ØyÐWm6áÄû”ECv^y %|E±ï Ó8:‘XöÀ2/nqá¶v®pS8O"g HϰN6sžd]Äj¨Àœòxa–:•ØÊçG ˆ£\ÎÔ¦FòÂâ¬";.¼aðô´’] ÜZ áF_wNžªBo¦]6) é>[i?uâ$º3óPn«ÁÙý6v´Ú±ªZ HFaüØRç³{ÁŸ)›Û:zÐÐÔ€†ú&Œ?Á ŒxQvw´Ú æ4²lUc‚½s 6w´4᤭DŽñ¶ÚÑvö8þþ¿ýg\qç¿ÇýwÝ`A±mûqÒ»ðæ«/ât§\_ù…ºCÛðóGÃÈQeX6{šëÏàØé³˜\>E ¶ÒÞŒ³õvÛÍdtib•ŽfuY»jëÎÚL`±ƒgÙL‚ žûýÕÆÕ[/9 #‹ lå¥ í]æÿ>wNÉWÚ¿òJyÍgÑØÒŽ’Ò2qBÀ=SzQoç»Ý¶ñÆ’k3]Ö÷:­tÙÖ›‘m2F·utûÏ ¦«³Ývñö˜¾ÖÖN”_^VjlÆ*3·¥¶Ò˜XûL¶½j²Ëúew´ÙBLF·í hi³wÌìo«¡L}¶JzæL­½ÇšÑeö3„<¹–:ÛZPg‡(Q‚ü –ì¾]XÈo9˜|¾ÓÚÕ‡2»VønJ‡í‚èê¶k̹£û6ãõ»p÷|c²šñÓŸüÛ§”ÛÛVYs;­/5¢Û.þ|ÛQ\hÛꜶäÿ¸££®ŽvØv¬d›}ººëkÑÜÎöŒ¶~idÖ¾®{µÅvX´Y¿¥}™}vmÕ!¯ÐnÔ#ŠîMgëÐÜÖiý£ÔúCž3`ï– 8ܘ¯~ù“XóøÏñÆú͘1åN³±×>˜ÑŽLë ­ö³©?wÍêŸÜ¢kjì÷«³rí|–!Ëll·VŸõ¾ŸC[èó<û°Ó9ú<»ß”šÏ-¢ÏkëÌ7#Q:2±zï¼çùË‚µÖ¶,[Áî²1$¶Ö@GÝÖÒh«ŽÍ¶ = %Åæ»~[¹:ÝØÒ1ÐÔÖmæ½ÝÎaÙh›…µ­Mû·mÀ–CµøÄ§?ƒqùÝøíÏ‚ç߇޺ ¼ûóH¶õ¡ ¬~æní@žõmÞûì¥&›Én·/–ÚyÉî×Ûmï/ñË º®xæœúunª9†Ç{Ó–ßÛ®Y€C;ÖâÑ'ÇÄIå˜R܉GûfÞp>·|®õƒÄ Y÷uÏEïHQ6sùÐC¹àüÙgŸÅM7Ý4pçû×ÄWVVË&êà¡$L¬~Û`³Û&Üà, ɱ¸Õ¾´ÚòÊ«V.BáèfduÙ½*ßÞëØ‹æ 'Ð9éV`œ­0Ø3"{š=cl‚²¯7±ÛÌ×åëT™¹lRîãXæÃœŸ£L’ÉœçŠpÊIÃgn\bóØ[jOØsà9̼ñnÜlçüÔþíøÙÏÅè å¸úŠ EÙug}ª/#Çúm⺣<öµÚºzwÍâud“¿pôZ;Û;º­áŒñfÚ}oŒÝ÷²í>–eÏÑÞžN´47Ù5› ãýP¶ÇÙ`C÷@\ßQ?aQ™ã7ŽÑø.-ÇH\u䋉ױ `¹ È ëàÁƒ.¨æ}ã5n™fM^O$›2Tösœ\âã=¾ÍkX‰²¹–Ál%¿dˆŽ9Ç{LºG‘Fe‡°´WS¦LqcC®ê2q NÛ¬rË2Û©ÀK:£òRÁà!þ‹³™°hжUxÒÒ÷´“ç‡+å\!äÊ5Ï+wCÏWèú•A:ÏÇFôOœ>Ê'œGœˆ'œv1糉Sö•¹sçºg8'HCâôÄÁâÚ*:?—nöƼçFÁÔ·óyYöÛ%¼`>-ÛÊÄkƒ+èî9lülS4$LyHKÛè^O~’N¤Wxég;ù®ÜÚx+k§Õ-@·ñí=Aw{7jÇ+{ÛQÕfñ„í”]65 ×ͲwçÙX-q‰H¬Ëãü+_/mâuÂvó>ÀI9Nz0GZö/>g\ðØ‹¶K2}8Ë øõúeò\q2‰;¡é7ÙI\4‘ß÷™/Û‡“Oý„4<7œ,Ôdë’Å\É—!Ù¼¦C2‰Geôþ‰'NŽ”m]]­›´¡yfθ•×(w/1V夯Ñ6‹´ÛövëÅTîôˆó¶¸Ë5šI9íç<±<Ñt:;8O²„“˜7k¯½Ö9=N6e΃I ×C…7WžlÉÖ–zIËœ7$Þ”9K!¾xÁ?¶n{A_O+ü§oáõ·ªP˜Ù±3¯Æ¿ýêý™ÑˆôX½ËÞy2øÄ¹×âk_ú$n÷¿ód—™Î|꫌•%æxÎ<ó=„||÷ÏþÞ‚µc8øÖvŒ›{3þÃ}¹íUø§ï|‡ìfcAÅ‚?„/ÝwÚNƒ?ýªm¦¬êT5îùôç16³;_ý 6וãʹÓP1¾5 ¨œ6Þ&òÝ,êÈ ,2GÛÖåñ.xç@ª`D©M0Œ³ :cÇÇØRût¿óm&Êí'íÆ”Úìœm£áµÀ&šjNâàéfÜññ£Ì±²EWãª={±gß~ ×Ÿ±•¾âRL*CÛ·ØJûÓY”kç» ¯]‰—ÍCõ‘Ýxú…×,ÒÉ·«Wߺ  2íCöUHëx'lÇS/¬F^A¡å}¸ùŽ;1¥xîé'Qß™‚ìn›)lÃÍ«>ˆE³¦`ÿŽuxyõäæçYà˜‰LÞœ©eX÷ê Ø~à$çšP4fîúàmh«:jÁÈ3hÏÈÃÂ+oÄM6 µ^4p¶Ïž>l+‹¯¡'Û¶w´ØŽ„‰()ÊÂé“U¨klÇõ·‹¦Ã/<='\ð^0z îZuÎÚŽWos“ -¶:§¤þÐmò¥O=ù´}üÁú L'ÍZ‚Ûn\–3Gl+ê3hE>FZÝj¾˜³ä:\»t:6½ñ6ï>fAhòʦàîU7£îðv<ùÒ:—`Îspÿ¿„ò±ö!ªv[…° þlC¡Ý$ï߈'»Ðc“Bí™Å¸ãÎU¨˜Pf“öv-uáš+ñZl9{ÚvK<ƒSì•ZŸ:‰òÙ×;üž­«ñúú]vÍZЛ_j>\…žºƒxúÅ7]0Ò&Z1jü$åöâä‰Sh±6Þ|Ç0z9vm|«7ív+ÀÝö0¹é¶;0s²}ØbÒTŒ=sØ‚mn¥ÏÄDëî ôv`Ó›\M®ÃHë[5Õ§Q1ÿ*ܱò*ô¶ÔÛª»íÚ¨oC†êe“m5ùöëpdÏ6¼ºn;JlðÏÉ¡ü±Óñ¡»V¡ ·Ï[›Ž×¶Z`Þ‹²òY¸ó¶ÐQw Ï<÷’éå¶Æ>Ûýq#VÌŸaƒýŠ]àv‹p‰»$²mØg;gÞ´~´uÏqp´ÖÛjiáäÚë5Ç÷[?~ÕM$t›¼«nº gNÆÞ­kðêÚm‰þhïŒÝtÛ*ÌšT‚5¯>­{OØDLrF޳)+mçÃbÜ?s&Ž+3½}vÍ•ãŒÙ‘kÛŸ&ØûÌ.uœEC[/®¹a…ÛÜgAÏÆ7^‰QŨ¯«Á„é ñ;n²•Ü*<÷ìó¨kåSæ,½×.›ï&[(G÷ʳ¶[¥gÔ4Üzó5a·„E¶f¿ ¨ÚE» Zl¥~fO›€Ó¶e{ä¨16ÀŠG2aÜÛû_÷e®XüøÇ?Æ÷¾÷=Ü~ûí®-|¶p²ñïþîï°råJ·âÇ•›teó`R.^Wç}Ðú@¯='úlÐÐnL³MÔÙ, ÛPTafÛ£oá$dŽÖú.tö”ÛÔ¾`}òEäWØ¥íвs‘a“o|€$´IKòÜ·-ŽŠ×->È™xnùLäó‘‰ÛEã)þqR²Ùk®(°ßM›·ÿîËÑ•m¯žÙÄÝ/=‹½Ç­Ý&|å||àÖëÐtj?žxæ%tÛdY— –߸ KfëÏ?ŽNaæÜEX¶h¶®} §8AÛÕ‰¹ËíZ›c[¤s»ðÊ ÏàHù·Ò7Å͸éÚ%®Ÿ²Ýê§)L¨!x ®/¹þíÉ`¿á"ÇQü)[n+çxr&–¹’®Á#'Å8ÆÒâ‡äù¹ô F9,³_rŒÆàœ‹$(óºåØL‰öP—`q²D«<ªG<³mÔÍÕMö1~´ŒƒmçßpB€cPõ?ñûr%Ky*ƒ6&¶…2%0•‰ã¡OãZÒ¤JQ½”ÏÀ† SÜù íÈô1}ËóHÙœ´£¨ópጫê\e"ÚÕÕ)¼î;äã.'N0§ œa ÎsLß“Vm'2™’ŒF2˜«P>ýH‚±L'|HË ‡}Öç÷u©L|4 Fœ`"ŒmãdÛOƒKú™»؇Õfæì_ÌÅë Þ?éð@®˜0‡?×–k“Ÿ‹-·ÅÁž“v¶mû†mOª5/HÉužÿl¤ÝlŸ&=(H}…þ&œÁ¤åò Ê~NyìûÜQÀç}Ê:'1(Kç‘|©R>Œ6qLÁרS6R‡Ú$~Õ‰ciï5×\ã&#t.‰K•$ËÑØ9`sض\‹©2lgD‡]£ì7ìÃÚœuN¶óš-¶˜•ôº¯Ð#”+Ùlq—A~c£i<À÷©LÎ& O4ixPsÂx3!ŸŒ<æ¤óéãXfÐÏ^Ll“fuØ x3â¬o Ô—v²Ù«¾,ÛŠÙ‰7_x ÿã—ÛðàßÄÔãOÿð~<^9Ó2Oà/¸þæÛ(é>ÿúÿ ë—ÌÆÈÞ̾ön|âÞÛ°þ‰Ÿà?ü¦ÿé}(° ‰íé± à@ñx|ðcŸEIÛqüÛ/| «¯¾Í»-À9™‡oþõ7Ðq|;¾ü¹o`ÖìéÈ=ö*þÝSÛpü7?DÃîÕX{¤ËW.ÅŸþÊ–}‹¯¨Äž/ãÝõ¨˜þQ,[¾ßÿÑOñƒê#6Ø<ÆŒñ¸mZ¹Ò¹˜?g:þ—Æ[ófY`· S–݆Iãì"Ïœ—_yßÿ§*[AoÁ¡Ún|íž¹¶•Ó¶ëä°÷†õS `•Ãé3‰qMÍÙàdQ½} #æß‚Uw\ƒ£Û×à‘§ŸÅ´ÉÐÕØ„R ˜n±aïºg±fýܰh–óG· äjN×bú‚«pÍ’YXóü#X½a îºnŽ>€1‹îÂ=7.Àêgƒ5›wbt~bÏ£âꚌ ¬yùilµog] Öm=ˆÛîý8&èÁ¿þø'XW> Ó‹»p›«>õ,œUá̼yqr’«ŸÝÍxëÀQ[™þfŒÉÄ¿üã÷Q<ç|âC÷bÇëOaÝ&Û66âJttgaåwc|^+þÅ&KöÎ1û[íGÎàË_¾cr[ðó_ü;öÍÃÌR»”ŠÆâî»oFÛÉ]xè±õ˜;}¢µýÔõ•áS[…³Gwà»ß“ç®À©ƒoY ¿øøgPY–‰‡~ú¯X»ÉÞΪE-Ò}lÕJÌž>Ù‚ÄL4Ùê×cÿ™å³±pÞLÛò*Žšÿ®þླྀÂf5žÿݯñâ«kq÷Í °ÅüÜltŽÛ\ÁêÎ( ×-ÇÁ­o`wU7>óéMÇñ“6!{M¢<„gžW®ú,^†Çù ¼þæz̶gùѪ³¸÷waLN~ðïcέǽý(^{â—ØòÖ^”d·ã¥_Á¼•ÁÕó&ãµ§‹GŸzô•Oa´M*Tí|ÿ÷“OâKø5\¿tvY€8ft)ë«PÝV€}ôNóÉ6<ôôj,˜?õ{×`Ãþz|áóŸBn[5~ñ‹ßbƒ½gŸ{¶ÇmgÊÍwß‹’žzÛêü0öÍ…¬³û±aO>ÿ¥O#«ù$fµ½ W†ê}[Ð3b>~ÇÖ'ßÀ“ö‘­Q¶k öà©i´Õjû‰*ë\õ_zõ ȶþþÊÚø ‹ Û2öÈC?Egß´7ÕãµçžA^ùbܳr¶½ö4^c5rº®À+/½Ê·áÚEÓì^ñ´}Hf+ºjGà›¼¹óŸEå¨ <þè#X¿}îºÑ>ìÒÝ‚õ«_ÆÎ;q¼¾Ïv¦ÜínKÝ6ímçxý/£¦w$>2«Ün‚¶êh»gÚ» qÝ-w ÷ì1üúá§°q¼}£z/N¶â3v^ên±~ö´{˜Ì™bÛ¸ìžÚg÷®TÚkív/صç®YP‰S‡÷aÿÑ*Ì܆Ön›¡µIŒ§Ÿ~Êæê»pà 7ؽ;þ·MÓ¾w^B|7•ƒiÞ3ùŒàÃ’“¹kÖ¬qÏ>àõzUÆ=—¢¦ø8=èÄË Ç3½¦'Óž%¥£p6ËVˆv¿‰‚žõÈ,‹œ¹ãѲ“¼õ›‘]¨mÊCAV±Í°Úª†mE³û„“«©Ùn€¨±uÙµ‹Ä ,8øåƒa>ÄõÌäÄW¬øjND3Åù‚¦0SŽk®^ŒGöcl³hS+¦aᢥ7ª;ß|ëöÔà3÷ýò:jìžö06Úe\N3J'ÏÆ-7Ù=|ísX½f¦M¸Å&ä ¬b‰ ¸×<ó0ö6àsŸúŽîÂK·bü({æÙî‚’ XiyÕû6â!Ûµ5sö L“X•HXþ_¬üþã÷¡¨\Žƒ4è\o¿PÀ€ƒ¯%^S·q5‡ƒsy¼9¾âµícÒ/}²9Ç{ š˜³ß2h’Òæ×%ƒ¹äø°¸²ODZ Vq¹âÏ–„©ÜYÉ-áCÒ®hòeEqÑ:ÛÄq,‹ÈG=”«ë“0úŠíc@ÍÉú™×4·@3 Eé)ç€ç‚ÉädƒsÂ)_ç‡A'E8Fæ$ WÙy/åA»™†ª›íc:lA)}Ì{5'<8±?ïG²Á—í—â!ü/sõêd{èÁäUTT8ý ˜i§x¥.Z<.'­ú,uh·/Ï/qþ9æª'WZy0öˆâãäó|¥²Çβ­†·1À*dx}‡Û*ùӞƛ ¶sYhc¼{ÌoÈÆürÛòžÍ@Î4ºGoüƒ?ƒ¢¶°Îƒíç9W]>!Œ8Öý6DË~ýŽýž1WÒÙOyßá}†þ%mÔú-FZ¤aŠ£#\ri¯Ú!zæL„Ga:ÇÂQÖ`É·#± ›1‡Mõt[,5Ò-ñYÍ6“–eê¡?h#ï¹Ö—yqçNŸ§—6¸h×7Fe徑t<TVVº™:μpgâMÆð „Ó0Þ0u’}y,«‘Ì£IƒÎò`âíàÌoJ¼ˆ™xÁPOº‰mÌ+*Fk]µÍïÆŸý?ß°•T®pMÂÿÅ_àŸö&×ãoÿþϰÐVr|çŸÿ}v¡´6œ±.mÁ«öuÝ“ÇÎ`´mõí¶-Ô6ê3º^›ëÅÿüãû±°’|cð™¯üvlZº#'ñ¯ÝVÃGãWâëÿñ³ö%ú}øØµ‹ñåIOâ¡_þ‹gUbÕ­×`âØ\Ù ~¢Ûš\1g)ÆÏ° ɶ':x#ìÝÖ…ó硯e4ÖmÙ‡“§Ï`¤ $Ož:ƒÊ¹ pÅü™™k3q5vCµ5Û*j­˜.¶ ¢Ì64¯Ùˆ#ÇN ²È6«›?Ïë’¶å:ÇVÃ;l%æLM&,³k¦Ýð 'â6À•ÚXzõõnëÕa ¦®œ>Ë>´µ Û-®«µwjrGØ¢”ÍZ@’‘ƒ ÛîÖòÖ~{Àì@ms'rGf™:1±r–­X‚"ÛJ<ß>rrbÝQìß³àæk—ÚÀ¸íCŸB{s£­0¾€VëS§DS6£ï>4Úªv»½c9sáU¸j‘Í¢ÛûòÏ?úš Ýaò¬¸#lE÷ œ.X0ÅÖ=¦WÌÀعól~)æ/YŒý¯½…Ü¢Q˜k%‡íA]–]P¶õï÷جåÕ×_y•‰>vÅœ ÔžiÄUsæÚʱýºÀÎíèj:c7lÛ½qæ$Î4wãÖU·`¬m›;j9>ðÁc¶joÛFícyÖ;P}ÜÞß&µ€ëo¸'³/NÜ‹ƒÛ6búÕÀ´9§¬]M¶U»­¿/Yq GŽÆscœ½1®è LÝ|5¶2_m¯sÜxÇí˜b“Gö#¸þúe8|ôFÛXêºmÂb2ßa‡EfSõ©#6AS›?° SIoÇW¾:glÂaý±Ó(ž4»wí@ƒméçk MÖǦNŸi»,Z‘e×+·êvÛ¹[’‡ÍÛbÞ²›°tNâ~²òÆ›ñꎣ6©µÜµØvÛ¹bý´¦© ]mغn=Jl•ñ†ë–ØîàŽ{?iï 5â-Yr“­2N1;OÜÿe·;ÄUìû#ìcyÓgÍFÇ.n!=lßaXì‚óÖúؼþL~˽vZ_°]}¶»ãúënÁd®ºÛqÓ5UØòæ:{­¥Ã®ÃÑØkmk­¯±mïÜR›ªöàБ*wÍŽ™8×_½ºãZ<ùÄCؽy*rzÛЖ•o7›ýîk¶×#:pç7cñÌr·û„6ÆÝsíoã?ÿ¹¢{5²LÄ1@å‘, f3eø‡O/8;üZ;ƒô¢üŒšb?ÓyÒVújÚÐÑÜ‚¥ö£•öªÅ^›ôšb~›Œ+ͰïäN6Û}ÀúwbG’3š†;s)ß×mC2_ùü¯G²2s pãCŬ8bƒ¤½Û×bõÛðÙÏ}Õöœà{އì³müÍvŸ¶áÙu³`ù œmÚ…·ìÓ*»çgÛÊ{—M®Ž5Ën¸Öî9ö,hÆ*›8c¯±{ËÑÙTÍÝy¸ÚhÊl[|Ùü(ß°M­œTïß6h¥ Ÿð¾å¡œŽxÎy –H£ ßbÎI/ö)®dilÆ1Wg9)Ä]ˆüÐÇk þ|]*3W™v°LzÀ¹[’2Ùo0ÓÑp<Ç1#·¢S¿äHVªkG2˜3@Sÿç=„$“Þf™+ÉlƒtÒÓ>æ´AºIÇ”Ž^ÚHÜ¡Éíå÷RaJ´…צ~‘ãa}Б:•(k0¤%mædy¸jMjÐ/¿‘Žöp‡ 'ñø«hSé•]lÛÉUsN6°ì3 þ)_d&Üï'ä—Œ¡´Õça™íáÁ2Ûñÿ³÷pZçúï.Û`;KïKG:HQA”¢Ñ$7QcLbro’›èÍ?Í”{Ócbš-1íÆ±wìRD@Šô&½.,,ÛûžÿóÌùÞÝÙÃùv¿¥JîÌþ¾sfÞ2óÌœ9óN;ÄYm Êå=L ßJKzý‘®©¼2žNéi,±Î²¾pÀC·gæ‘tÌ/ãh|²sð‡é [íK÷ÿ“7ªcšÙþc€3ecž$/Á{¦½<”A–¼_Ó:_žK¿Lv¥÷’Ö5”©K”î4NB?€}S¿Óù14®v:4ßÁ0M§¯4v˜ÒÙ¾Æ3ŒåBL9ÈÌkb¤õ‘å¢2ƒüÁ{[fÒ3Žõ€6¢hù+ŸÞ+}ã3PT:Ò4Å«rL)£Š ÑÅÙ´?Xgtp”Ï2'‘™N¦q¿ˆOl¼lc¥M@Ô§é ݃N…ZéU¹‚ÊpŽÌrDK@8²ÆÆ…À½ßl”IK:u¬ÔêÂ2ª½vØ*_äá,¹Î¤0sl88’GÇšK³Ø(s†N3hnšøÇâð,`.*MÇ ÙW{Jí4'a´£¸0_^}â1ÙŠgéÊS¥2ûE”ƒ#ÇFVìùMŠì!•ªR³d6Kâ!ø×»øVu˜Ù«•^CÆÉpÀÜZŒ¾†Yôe[gÊ|z2Œ ,ÇD£O×{¹ó°3¬Ë—a†úã_”Q˜µ¥KIJÅõX~î•fËŽc ˜e¼Fr°Œ{ľòü“OÈ¢wßÃ^õ2xÜT™tÑ ÃÓ¶µ'/-]!í'FyU /“ÎÔÀ¥ÍG$­fÆqPA¹'Cs°O±KÑÔãa– cÉJùqù`ÕvÙ°«PÆ.5EXÊ\L:ôiQ)«Š°ômÃ*9V&#åbÿy)`$—YcÜÙ\Wa™)žc”ÙZ\“?‡qUtžsÌËç·Ê%ÓfK;ŒNÀ™0;ÀŽ}ÓqÒ¥GÖréJ N²Æ@–]sÏs- SÁRÌ:6l0féªPMSqhÒþ]›dÓšu"3[I öe3LB2Nºg [yXQŸ¿F¶¬Y-+Öl–áã°,&ž/‘"Sþä¨ÃÀ„ïx?ðàñ/idz“W#ã'_…YçlÙ»yX`<‚ÁŒ–ÜÁc¤ïøv’E+ÎÔQà ëOêk5–ë9°OŠ*°Å A:ÚqÉÙ’Ö û™"{¶ücÝd~ê0ðÒ:#S:`ù[ŽK£0§}[É߃ýOØÁA„¼ø0¦l òW³œ!%Ú¨\ê€u2öãïØ²Qö©‘Ï~é*IõÊä—_”|Wº #]ÚeÈ‘mø,"ÒKWný3çgÏ„óŸîõ¦ÜÖ{„Åcö—/0>W&ÞƒŽz3MpX’Ë6©-fCSÑÖ|¢Ï0,ëo-ûwl‘<œy„—91Æ8òŽå|NëåP Û´Y–ûj;`[Ï%Hi=\.•&‡¶âSŽØ* ÀúoÚ*È0õ”i€‹Çà\b«*X1ð‡ŸÁÃðéÕ>UþùÚB @ •Øö±aõJ©Iï&C1ØCÇgŠ{ôY>õŽéAŒ‡ðvHO[´yé©mdVþhÔ±ôçxñ|VÛ/²Q§k¥3–ÅKÙk‘¨Ô$ŒÐ¾õº¤`›E2ö§wÊ•!sÑ&ù´õïÎÞÿú¶*Yf“'O–ùóç›÷ G’ܶå6oÃH«ôz¤5Ï$^Èu¨Gwì”l¼$ãP—*½$)©ÍÀY8ƒ" ߢͭ”¢­µ’ܧ«YðÍ.ÕÛ L¹ ‚ú§¸ûJêUغë#š6ÛWæá|·ÍÀçÞx8|7²ãÀN:ß4²øÒ7nœñÉÓ€ òÎg²Š°5ä8ÚíhëŽß„K.’§~HÖc4Ëï:aÉs»¶èªI•™×} ÏMЬXò¶ìʯ”ñcGÃOÇ'~ÇÃF9ØŠ3+¸¡Æ®óì(WóyÀûŽÏ?ÃAY}jz«?a’µÇ\öŸ–,Yb >w,7ÖöÛ8 É:E) ÓúH]êl½Zï4Œ† û`œ…§QÃA%Î@²þªc›IÙLW4ùJækZ˜Fö99›ifŸFÍÔEã”bçÔÏN1uéï†Ó©Ü0FbF#•yeÿÓî¯*Øö]¹\OªW¼”.J«˜±Œøã=ås0…pðŽŽé¢\®Š{POð^uØ>OîygYrЃF+Û%Î,sð°W¯^&ŒºCòSv˜ü°0[ŸÍKZbͱd¢£Á¬3Ûˆà`ë-òÐןÖ/CÐÌ?bŲeYq0óÈ î—f›«ƒLLéhópf˜8ÓæáÀ–Ö©fTÍ4·Â€Ã¡ý’¼ò-‰Ç7бç ùÀL3&–ºUï–‹ŠWË6\³o7¡wš`×qbßW¼mxNyÛ”SŒHÃkæŸyÔçžùÔpÆ)½ík¹Ûaz­qä¥ý¦zß’rQyêA‘4ëµí³ ø °}#OK „ñÅ$:M=@:ò1ýIÚ¾Š'›ˆÛ,Ö>gñ(ûò œÝ‚ó­ÈK;EóK¬N0Ðmp Mœ‚ËŒvh¤óa'‚2÷:±bÓ‘Ÿ<ôYXaŽñŒÓƇ4šf.77×tT˜9u|xØxp¹}ê™àäûnl9Êô©§Ÿ°Jw©ôÏì/·þênÌ0a‰{\Ü÷«ŸË”ÿüôŒÛ/ÿ~û2䉻%³úüéþG0k6R–,X(coø†Œ>XžYö’lÜ‹ŠŒ?sf«qØN ”2æï—´¡#d>Ÿð·¿>(=¾«T\'÷ýñqùÎÝÉÊXƽ¯Bnºñ“˜A<.ÿá5ùô5aA–ËÖm»eúØþR˜·O °ä¥SV2ŒÜÙ¶u› èŒÆû•·îØ#mzÂa^R[rX>ܾS2.è%‡v~(ûbÿðÌ´æ›Y“‚¡X„YÒm[?ÄavXÚØ­—tÅìȼ‹¤+—Òî^+K7ì“ë/¹ZJŽžÄTº0Äxrtßf™¿h©|lÚ%²{íRÙx R®.+ß^(=/“˜ý_²}9ƒƒe~2„½Æ› kÔ”OIŸÜXª?_JR°xUa†žttE,)«ÆžÝ¾²iÝK²hy/™0¼—¼ÿör¨&]úwé.uÛÖH"ŒŸ^˜f}{ÞB¬Jì8Œs¼´jaH&c6}0ÊÇv{Wãz”Êf”TaF›¢‡N%F;¸o—,®“É8!9¡h§äáÅ@y4Z«ªxþÕòü»€o]kÌ.€åä‡eÏÞC2uú¥Ò{{Î_(mgM–ã{7ÈÛﮑY×_ü’¤ªŸlaÎX´p>¥Ã2ÙyPÇCCR°•À¶ ±×ué·¤ÏÀþ2¤G¶,zûmèñ,©.ÄCžìîò0ÃZ,‹Jo‹S^ÛeÊ¢yó¥{ûë0¤‡ÿi ^q£´ÅRô¸’wqÒwŠäöî(Ë/’2ŒRà(4¤ÃŸÉä’éJ¬Laþéø¥2¬­†Ù× ï?‹m=Í÷¥ï¾-e˜ÝÙ­ ŒôE²}ç~ÖÏÏn2ç/¿‘,ç9Ux’"Ï?ó[RR, m2°O½£¼øÖ<éÓû¿±Ä}Ñ»«dÌÔ«%îØ>,ûÇÞ%*C9è3zdJÛÄJ³;û\ËÉK¯.–ácFK·ÎYRPR!»÷’c{6ÉŠÍÛäÂ1c%¹Ê8|öƒ@¬k•UµO—^=ºÈsß‘Ü>ØÂ’ æ½)…i}`”ã3gé­ä8êàÄÜÞ²kÃJ%Gºµk#¯¿>OºÜpµîÝ(o-ߊAÙafÀ°ªÞ Ç@ÚžùàÜéE@ë }½nJiØÿb'‘Æ) ;Ö]¬W¼çŒ W².i?-šl;œ×zO”Å$ÎÈS&ŸoÖWu”O=ì«)ãìk¥ óIGy”;rêÕg€zÙå3C_sÞóš ,MS¬z5-Ć˜q9=gÊUeWꢑ@ãœ}aêÒ8ò´T'yè([yé3œ}S£œ4o_ÛíÛs”A™œh£!Á£»0ÛGÔmg‰%ûÝ gßœ|ªŸ¾Þætãɯõ>õÓ 4ÈÔcâ®[ X¯YT·Ê Þkx4Ÿô´i8ÀÃÃ𸕀í/WsѨ¢¾—øÜpp†F<ñçÀëÀÉÖ)¦‡}¾L"Å¡Z‡™Tt¼ð®Ás‹É 8,uï›U!7^€¾b&ÎÊæJ<§¦ûJÌ£å(z8óªø0_ü±>1tZv|®øÓ:dKT~†Ùòô^i§ò‚qJ‹oë‹FÏ|°|X'Y¼oŽiccÙs°Åæ±ÓM§†+­i88 <;ÁNå ßçLãhŸ²äY&YƳT‰r_»ŸJ,+ÅyS˜y0µÔà43TÆ 2á, ÛiBhTØF:+3s„ŸjÒ2Œ>A§²HOc\i4œ>6è”ËQ‘aÁFšKÜIÇôr˜ù°eõê=gÚa¯u+|÷û¢‹¯‘[±õçÿs;Œ‰jpÕmrÍ—Iz]±|oÛNùÙ¿#)8ÕzÀ%³pHØ,ܹÜÿÀ#øÖ{x° dÂèÀ ‡²¡ÓÇS™ù-èv­"`èÉÂìijV'™6q”Ü{‡ÜþoJ–âÞðÿ~!Ó.&y[«å‘þ^¾¿q…Ä×VÊóßûŠä"úÏ~õN¹hH/Éôòdñúë0}Æ8IöMš.Ç^yUþ‰Y–œž}É•×È€n9²zÑû’™tÎm¡Ñè;üB©->$Ï?õ¾·\,.¿º~°º.’ï.“'ŽîÄ÷…ËpÚ}?s@\ ff2:ô”˱üñÝůË-ma„£òvÅ©ç˜qLKϬŸiIÀì%?ßÖ¡Go¹òÊ)2÷·e÷ú¥ØW(“¦M”AÝs¤K§ß|á ¼(ñ•t‡aÏrõábÈi y~Óòg‘a”›‘‘î|ÈG:fŽR ‡®ÒÀSÑ „òX„Õs¤]VªdwènNŽo…¡RÛø´4î““R$æ]0¤“¼Ã»æÌy¦֥%á ·1O18¾òÒ\œìž&=zv–2Ì<ñ“i—ŧÈ^zRcv^0:ëÂŽRP‰Ã+ü†Ñ$¨® Kªß•øvƒÌ7Ë–cvø°òáše²nqÔ&eËU á¬jÛlÿÄgÃký9î2œ´ü²<óÄ3Ü}ö®¢aoßµ7¶O\,óç½(kÞãÁ#I2cÖñ p¬N¬6bŠ,†|fÇé’’‘g,ûïÒ« ‡‰òÚ;óeë* érÅ•¤wç |fíÌ{éùƒq˜Ñ¾þÖ_šSÒW°2$-rÚ{ðÎHOç«ZK¿Qdïc¨K¡Î×JÏ¡—ÈlSذûÛ Ã8¤¥ ^I8#aØ0,iÇö –Q¶7´ï9H†ÃÚP¯q0ß#a%VFôÃÒ[~‡2 KûûúRý÷2Qy‡eÞÜgÍ ñ‰YøL Í6™9Øp|KعÞoSÆ^*} CV^,o.^(;Öc J’eò•ÔƒÞbÌÒ,xù9¬¸ÀžKìÁ2p¤ÖuÁ2â—ä9¬\i­e5‰2sÖlp‰¬Û²Y²{–!ý{Ö§‰‡J¶ëÜ[ªpä¼W^À‘£’;üb;r¨Ô¶—Ãs_–GzÀ¬úèÚo ¬†Qi a[×& «šÆÀgµ^‘-«£#U*“aÜöh‡H’&3gL“×¼-›?X‚ƒõ&ckGéýv²>!géÂn›i”ßsÏ=ò¥/}I®Åyœ¡âRîûï¿_>ýéOCµ%Ébžìu©³óëUc[H¯\IصGªÖn”}°…«-ª6Jg¾ò2°%‡õTfà>¨£”íÄžô^•V|jÕ¹‹¿º$€å« Ó«úm:¥§¯<ŒgGAgŒ”†ï¾)S¦˜8é|?s -;V*ÝxCÞ+->6k’,œ7W¶­m+ÅØÑ‡¿ Ÿ¤Çw—ƒØ^òÄ£J"[ÌîÒ[húJfb•¼ñÖùçáX‰U†­'=MÛœ†¯”ð`Kº‹¦Î”âWß@}|ЬØ2~²ôÂgévlhSߦ²]ÏÆ—7ø… çN?ZÔ×zCMv¯YØcÿŒ†).1çªC`ì_‘†ý'_œ¶eØ25œ~ðšü”Ç:K£Ž?Êb¸:íK2½L“Ê¡Ï0•içGyé+ûx¹¹¹fŠF"ui¿“DÌ i:êg_•Ÿ&dG™÷ªñª“×az5^ãØW¥.é £±H\™7bK½ÜRÀþ)õjÿ—òÕ©LÞ«\ úšÖ ï™êPê3ΦW™¦tnû¤ÑY?¦]çœñ£ÁÁϬ]‚m:A£HuÒ§|ÕEÙzmëU:W†óGÝt g8“ÎvŽ8Ó`WÛ„tü)Ÿú†9¯×AŸ´š&Ö –·Ër«0øŒp;- *ꥭÁ&ê£áNcž+ ì:N™t*7¨³ñ=óJ|`; +‘mÏ,ïóm¦:Ö),îÛý<<_|oÈo¦ÓΛR*í3íÄ’õˆeK§ig8똾_ȧ?•iûvœÊ`<ñâ½êe˜¯áA•§ñ䳯UÃôš¶"Û7l£·åyçŠÚ³4˜™^ÛE“¡4,?¤ ?_V mÖ•](à û3Ä’Æ9}®üHFÿ—u(¶ÈÍûµ+¾’Õ«$µ>Sj#ž7¶cÁ±b²S`'Pi4ŒÀ™tV^&€ &g´Vð”—>ùÙ’ž¿‚¤!/~‹ôjøóeãÌÑTÒpÄ2T6èƒ>uð¡¦A¯•á\’WŠŽ,¦‘Íç¢øÙ/T5–@·Ãè‡.Ë­ƒÁ~P Æ3ڵǨ% AÌöÅ硪ð½á,|ŒÆ`£âÉ}‰0hx*s fHÓ8ŠE‘¥xùá›NFOM%>éP€õñ0BÚ·Ë1³¨Lwey‰>rL’ðùµíÛc‰Ÿ½9†O—ñóQ­a”Vb–",ŸÏвb9Îýèñ哜¨ã-Ø›ƒ¶ŠKËqj:ŒM,ýÕ%½UÐ]ݵ0 ²Ð‰¢A¬ŽŸªÊ‡®V0h;vÀyìO|öÉg¤Ë° 2~(–Îb¦“FóŸ˜,™\2L,‹PŽœNmƒ<#œ‰­Aƒ’ÂeX²ÃÂ1J|Pëøy><‘žgÕ@>g9[“üeØw^Šƒ½Ú`U?³¦z K¾ÅÏ|ñó[5˜…¯ªñ÷a™bõŸCÎræ!uUÕµæ´þxt4ùÝÁ8”9«A9Q'Ó\UQŠí¥ø&ajšùÄU<M̘+îåE23C\æÎ%ð¥ø„÷ó$FêáL÷Fì»Þ{¬‚8¥<_^ãMˆ•—„© Š0²_aÒž…“¿1»Œò¨f¾|ÇRtŽy–—Ò±N¡òÃ(ÀL6öD·Nƒ1©xŠÆÿü¦àYT\‚ê–ñ׌|™ü„ҰܲXÏX¶­Q6\’_†ý£üT`ÒÈ¡‰¯)W¨*-.§”P.¨“õéO>-QR†“+1èÒË´ª0ÅÏèñäôDìg¥,®H(ÃéÒ,ó$”Ÿ­BìÙñ0ˆ•‰Ïš¡˜=äu¸oÍýÓÀÜ”ê ·ˆúㅦγ3ÈzBW…A¥BæŸMãgÖ¢9mX®…E…x21H„g”í]2ö#SŸCÖƒd<‡™é ÛsJQËPSQí|³L«j=ÌØgÕ%|VŽâST¨vfÀÿVØ -ãFk–ë)ê 1áy ÜîQŽx¶œýWû†eCŒø9?.½g–µýÕ|šö 7¥(ׂ¢” Ë ñ]Œ;^Ä=öØÁétõ¸B(gø^à€ªÔ§q|™qì¢E‹Lçˆm:WgMœ8ñ„6=(ƒ÷*‡g7øþ¡~¶ûŠË ||7mRù<œÎÞ«‡´Æ'%a¤²­2çOTIá‘8—ƒz[‹$µmŽ´ºâ œÃìP_Xv-qL§¾ó˜Ö^½z™ž¦ß–Ű0Çüð}ÈÏÒñø‰O|Â`d˰¯K°Â¦¨¤ ‡€¶1z|¾ŒÃû«í5Ûž,Ôÿ“~hÃñn¨B·S°MçLÛhîG÷W¢ ID;T€g0ϰ~Ò² m–¶úŒs`OyÂòâÂbC@Ë“Ï g÷؉Tƒ´) ä£aÁç€Ë Ùa¤BC’Ï&Ë•†;ûDlÿ¸d:77×\S®>;ô)‹† Û\þHOÇt°Ï´xñb£‡Ïåóù£.ò©£¦…³ÛÜŠÈï[ê(“z™vÎt²È|ò§ie'—²ÆAö ÍWKõ*=ekû¢Ÿ£.– Vyćél ˜_¾£ù¾ä :m+:¥aþÔ@gÙ³^ñ}¥u‹ttj ŸÊólYÿ(›éS=V¬Y7H+½ª¤­Kš¯–`Lâ²ÿ`ži'yT Ê,ö&Û¢DLNecB‘gr½¾—·ƒ/a0ŠïòA˜Á`ºãðÐÃ~ôÖñž×TÈQ$Eg˜ÒjÆ4ŒäCEPùð²2“?HO>òHƳà9ȇAã‚<ªC㵦 }XICgó*õ°©®á*OùnËñeùˆý=¤s@IDAT-`i U~úAgË`œá¤ž!ãùSÝz^/›åÉo}˜¹ð;óšV;NåÚaz=Ž££(+4Ršnå±ýèü6US×ÓM^´p•Ìø0§xh¼}¯×a|vX׎ó¯Q¢hT™‚ ÌÀp† ŸÉàáz¦¸´ÄOädˆÊ÷ë•O£aÑÒ¨ña›â‰×¿Îë½ÒSŸ^Û:£…Û4*+˜¿ <[–æOiì8•Ö K©NôU¦Ó”¬ØéY—ð‹&_óæÇG§çs~BÍA9„Õôhi¤Ž`\cýv*OîšòU&gâû€/l;<šäh4šf•Ÿ/5¾ØYe’¾õý”cîC¶£|9cõTí^|³Œä‡-K­ð"MÄìz< ôÌ|ã‘Z&ÑÒÔIy Ó÷žÎ ëþ´hrL:¬Ñä†ñ+­Å^_F'ıí$M8£4A*ÖE óÓÑPŸÃÒÕ„ ‚ËŠ8ªNãŒÏ—Ý™Sœµ\yÏkÖ7zÑ€æ5ûf|>ÈKþØAä²K®˜ädÊáµÊ¦ vÐÙWã³¥ŽrI£2m^¥¡OÆÑçOŸO›†×ÊOuÆ{•ÃkKÔOCÏ”Îs"†ýVâÄþ¢ê%}Í{º |?ôÄp›—ךw 'zM_ £¯4v¼†1ÞΫMøh.Ȥ ‹·ÃlzÕÏ|Göïië_Ǿçµ-?˜;ŽrYù Òeª\¦çRq’Në ÒÚ²myaá|¾ÈÏzC™¤á/ÈGuŒ ÒhºèÛ¼Áp“Öñˆ֖мCr|ÛV,^ Q ·éН®`O³ÇçͦÔ-[¾‘G%pÍ…Ó§MDÌØp°Å~¦})þÁƒÜ{Oy\½Ì²W:Õ± ïL¾Ç´]`x0-Á{•O_ã”Oå†è§<ä·Ãx­?ÆÅêô¹Uz•©÷êGÕKèÎ?V ;wá³ÕXšƒ•ËüìW¥&r°u›vñ tnûp–·g™•ýs{Eµ®Êƒ>ÍŠÊF™Þ‡%\͇‹ñ,À¦h@.yæ5G«tTÊNãT¶†3Ìvañv˜ÊàÃg~© »s¡aê+¯úN?Ö”œè|Ís '“`z‚<¶þàuS´ŒSGL£Ñ*»òN?š~[G†©oÓG»¶i_›ö´Í¥ún+0k@Í'óqi¾¬U¨­OÂ>‹&ÒF£êïm9Ñ®•XãÕ†ë}˜ä14Í$Ðð°¹L¨Âˆ¼FºšÐшNe4ã‡ñØaöu3¢=+Zò±óó%ÓðâjNW,ñÔM¬ºŒ>W´4E oN—Íg_“/x&KÛÒ]?Ãô=Å4Ý[kèA9'ܳr?.Ï6Ÿƒ`Ó€ªÙ÷PƒpvÌ"éÒöðYÍ0½|?r³ˆìÔß•v>íëfD|I£†ÑÛòˆ0ëƒæóhL˜„0úºe5MßÀÑ |¢¥?(Û¾·¯ƒ2yÆÛ\˜ÊQ?H-ܦ³iìk¥aPΖª 'å±}öãÔè ¡¥ŽrÙo£c=ä/šãì-uóFGù¶³ÓG=ê¬ó×RŸ²(›ºÙ‡ä5ÃøÓ~(eÚú[ª£)zÕOùŠIP—Ò4%'–8•K_óH>Þkœ‹ÌXi4ʸê}?Zx.Ú½h4aáŠIX\¬a¬C”£ù‹Æ§iŒRᨯ¨Äæ¤_m2[,‰µõÞ9)Ù!L´‡8¡JÃ\óm“iY§‰ï8ÛN“el»æÚ›6ÖkêoÉw[n0}v\Sך瓭Ãä¯Â–ÎÃGòå0ÚJnM­·ÇÚù#¶¿ÕØ&Ö±c{éŠQ¶§Ô¦7'a6FÛÊR [é|8£5Bd³ÑÌZâêÀ ÁÎ+ sv¦œs8‡ÀÉ"Àez\†ËÎß1öû¨Y™ÚéÞ¢ ä ·:H|¯µHnƒ$s¥ü4Ð9ëÃ¥™Î9bA€Û9[ÅA­G±ð‘FéÃ:aaar)ƒ®¹ú«¼0'–&MïÉÊü¨ò |Ï6Zv±æ5¬üÏDšõ9:²L¼oê—±[ï3¡ÏÆ8L¾Æk\4ŒO7&ª—:¢ jºN‡ºòàËÁ™c8“…ŸFcÙxR÷ì›pÕW/^mê°|˜Ï¬Ç{:rîÁà².Yäh+ÃùS:¬r‚áZ° çK&¸´²ék¼Ê9~XzÏ„'Ó!àp8Î|§ðÅ‘|&óÈ—ž¾‡ôýÂ{½ÖÔÕÓDâØ)‚㨵šé®ñÞ‹ÅÙzl½ gú¸—g'tif,rÍÿ=X8ÓÅ/ÖÞÛ:­ÃD†õ˾W´”>,ŽaZ_íx £ ¥ †1NÔW}³ïÖœSy¤S½ÊcË"Þ«O:›_ùšóm•ÕT˜ÒØríôØáM]uï•×–mëVz;Ly¢ùÊÃxòÙ÷F_ÃÃd7GÞ0§<Œ êµuŽ?¥±ùT®M¯aÑ|åW½'}0LïmYš†Ù¼6MðÚ¦£Ìà½ÒÛ²5LŸUÞë;HãšóUæCï,¤ƒNuÚq&"Ê¿æè¯4-Í«ª$¿fûZe+­únÓj\0Lï5ž¾Í¯×v|صMG™á÷qØ .Yñü”ô‰%H–±þÂÒ¦ºãp ¥éq¨¢hÄÆ™nîA`'ˆŽ<ÊÇû`‚FÇpþ(ƒÆ9÷ ñ…ÃN•.·Š¦×—pzÿkšÏ…NÅ#–1§’FÍgKt’ö\èÕ´žl~•_qUÎù˜W-#—WEàôûv}jI]bJb¥Kµêm‰Œó±k>[ŠWSyå¨4ßM¶ì Æ×"|Y¦AA-¼W½d£nþ¸_–ïC¾ÃÒÓT^cQÔ+OXZbáUšs­·%é?Ÿ0¦qÎ닺–äUyNÖ?ŸÊõdó¨|çS^ϧ:¬øÒWŒ]¶Q9}׊/%†a¬ñŒÓ릴‡É =yí8•e‡5%7Ly[²Ä]uRV¬z•'Vú°Wø¥ ê§>}¡-ÑKÚÓ‘¾–èdNO‡^ÕIyÁ<„É #oKê ꤜ Ž¦h[¢Wå'LoPV0ÁøXïUo˜Î Ž¦hcÕG:•Ãë0½ ·ÒÇBk󯛒ø ü°° ÌæîU'éb‘¯ôAÚæôã›’–¯°° ÌXî£é “6=6MK儥Ŗëu4½¶|¥±—XåŸ+:¦ÙÎÓ¡ùÖË ÝéL³ê¤ÌXôž®´¨Þ Î°¼µ„6Œßk‰¬J^5ÍçSý¶1wׇ€C VØÞ…+ÿ¿ 1Ðõ©/½g&5L3¬q4Î9[ÁYu.{ç²=þèH×ïq–€3åüñžòøc|P¶êpþ‰8¼NÄ„!â@×Ü3u²xEã‹î§êÌü?:φŽ0t‚zyO×\¹†Éú¨‡ókz£ñÙáAÜô^u(žM…7EcëR™*‹|v¼†“.L¦†©œ–ø¶ž–ð5G{ºåžnyÍ¥¿%ñ§;m±È‹…ÆÎécqMÕ¥ Œ0Z¥aœ^7§7LŽòØ2Tf^i4\ïUF4_éÃâƒ2Âhƒ4arÂÂlY”¼'fËP¯÷6òÛqJ¤ã½M§¼A:¥¡½Òïƒ:Ég‡åØq¶¬ ÇkåS:½Òé½ÒÙ¼G?Ï{Ê ·ùšÒäµù¢ÅÙá¤Wùv¸†Ùòìë¦h§ùR96½ÊQ½§¯ôv˜^e„Ñ*M˜l•ôÃä(ÊÓ{Òr¥5mKýê„Çkò¨LåÞ+}³Ã”¯%ñ6Ê¢l;]Sq>…ÿ_éT‡ÍÔ¡4ÊCZ ó¥5ÖŒSú”Œ×0[¾òÖ·yípÒÛqʯ¾ê°ïyM¾-;(·©8•O?šNÆõ2,è¢é †Û|š6¥‰voóØ×ʧaÊÏû`œÒЖWå±åžáv˜Ò1Ž®©8Ÿ¢ÆæU¾ |å±}›áÊËë`ÃÔ‘ÎŽ×{ÛWZúÁ´Ø¼ŒE¯Ò(¯Þ‡ÉgX˜S^ÆùÃè•Îæ †ÙrGZ;,Œ—ttÁ8?´!m¯ò‚÷Jô•ÎʰãZrM9¶ü¦äi£é £³ÃTG4þ°ôÖòÚò§:”Gïƒ|z¯tzoÓã‚4v¼òi˜Þ“‡aö½†åÃ5^}ÊPù »WÚ0ßæU~¥ ÆixP‡Í-_§#¯ª¿)_õhÚƒ÷6oSq6]s×”£ú”¶)ÙaôÊ×?LGXeF o‰>•óQÈ«æ‡ijIzZ’_ÕaË S™Œ³i5¼¥~P‡ÞSÎé–ÕaË S^ÆÙ´ÞR?LGXåF o©N•L´<.½¶|®¸¦m©ÛzÂÒÂtÃ[š×°´‡…©Ü¦â”&?LN0Ì豋F£o_Û Ù×Ñä¸p‡€CÀ!àp8‡€CÀ!àø¿‹?+ÉUÙÍ+ó¯Œ9Ť­¶mPkX4lZ•a‡‘Oeh¸Þ3Nyôš>Mã‡ÄFk˳ùl™v:ôÚŽW>ú¶¼h´–ææd5ÇLC4yvxS×v~š¢c\X¾¢ñÃÃî)³¹üªÎ mPãÜM§×ê‡ÑkièšKi‚òš»'O˜SŒ³õå…ñ¶4Ì–©zcÑióQgð>ZXXúÂô†Ñ……Ùz["§¥´AL˜ ³ÓLc0.Lo&(Cïc¥SzõÃt2îdäE“¥ºl?L~´0ò)ž¶ ^7§Ó–Ö¦QùÍ…E“¥ü¶¶9¶Œæ®ƒ²¢é “ä%f_‡ñÛa-Ñkó¯["'mXºƒaa÷LK´úf§3š^›&Úµ­·%r¢ÑÚòTgX˜§×±æ5H--*7Ì×4©F£a*Ÿ÷ª[ÃôÞ¦ †iýh|6MK蔯¹|4oËÑk;aüaaÊË8u¶ ³y£ÑÚ4Ê‹¯òÂôÚü*_} Þkx4_õ1>LgPžÒÛ´AÕ ·ïÃä(_ÐWZ†Ûzƒt¼·uh¼†åh¸Ò}¥oN'ù‚²š»êÒûh:ƒòÂtª õ£ÉÒxÛWZ†ñZõ…å]ãlþ“½V½¶žhò£…«î¦âƒqÁ{•¡~ܺuëê—¸3qdP§‰Õ°à½Ò…ùÑh5œ<¶\½f¸ÒhïõšñÑœò1>H¯qv¸-7¼?:)3¨ÇNS4a|6mP¦ÒkÞ›‹·e¯ÃxU>}Õä £9Õ¼FK‹­;ŒæTõj^Ng^5Mš^êÊW;öµòÚ|Íñ(o,q¤ òƪ3Œ×ÖiçCÃÕêTYÍñ0>Œ×–Ûœ Ò*MS²T¦úÑh£…7ÅGMƒÒ…ùÑdG ·eibÕIA^•-¼©øXõ6%»9AÞསO}•§t –‡Ò(OÐãmŽGe„ñÚqÁ´h}åUšà½M«ôÍÑ6—î0Íñh:Âxí8M›¦•¾†yƒ÷*'ÌF-\e„Å3LÓ¤ta~¯Òeiƒ÷ä ò¨¬ Æ?(3ÈŒêÒû Ÿ†Ç¢7Œ÷Tõ†ñõ„ÝŸ‰rµeuFÃÇÆOi4Ì–gÇÙáÁüõãUvÐòi|´p§F‹^å£ ;OÑdj¸Ò*¿}¯×¤æ‚|6]séãmŽGå‡ñ2.Z¸ò…Ñ4§Sã›’­4A=ŠaoÍÏóËȯŸöfœÊSºædõÆB¯:‚¼Mé´å†ñÙñ*'Ìò=ŒÐ…9‡€CÀ!àp8‡€Càl! çœéáãgKïGIìúG)E.-ÿ£èè™f?x¯ágÛÿ¨¤ãtäû_)/ÍáñQÈëÙJCPOð¾9¬ÎFüéHS˜Œ°°³‘§ãÌ"ðQ-×jºN¦4šËKsñ±è<2bÑÓÍÙHG˜Ž°°æÒêâO Ìí/ƒ§Æ}.±tú©•ãvœ6ti ÞkøÙö?*é8ùþWÊKsx|òz¶ÒÔ¼o«³:Ò&#,ìläÇé8³|TËõ£š®“)æòÒ\|,:O‡ŒXô4Gs6Ò¦#,¬¹´ºøSCÀa~jøÙÜçKg Û%ᮇ€CÀ!àp8‡€CÀ!pŽpú9Þ©u8‡€CÀ!àp8‡€€3Ðm4ܵCÀ!àp8‡€CÀ!àp8ÎÎ@?GÀ;µ‡€CÀ!àp8‡€CÀ!à°pº†»v8‡€CÀ!àp8‡À9BÀèçx§Ö!àp8‡€CÀ!àp86Î@·Ñpׇ€CÀ!àp8‡€CÀ!à8G8ýïÔ:‡€CÀ!àp8‡€CÀFÀè6îÚ!àp8‡€CÀ!àp8çg Ÿ#àZ‡€CÀ!àp8‡€CÀ!àpØ8ÝFÃ];‡€CÀ!àp8‡€Cà!à ôs¼Sëp8‡€CÀ!àp8g Ûh¸k‡€CÀ!àp8‡€CÀ!àpœ#œ~Ž€wj‡€CÀ!àp8‡€CÀ!`#à t wíp8‡€CÀ!àp8s„€3ÐÏðN­CÀ!àp8‡€CÀ!àp8l<ϳïݵCÀ!àp8‡€CÀ!àp8焤¤¤s Ö©t8‡€CÀ!àp8‡€CÀF áèÑ£ö½»v8‡€CÀ!àp8‡€Cà ““sÔ:•Æp«E\\\ãÀîN–/ÑŽÄB ÎÑÂ-Öóò2–|ÅBs&2®ôž‰¼œ2Ãð ;yù¨¤ã\äÝétœ Ü3Ö4ÊŠúMStbÏ·ôžnäÎTþOUî©òŸnœÎ”¼Xò"· ýL•€“ëp8‡€CÀ!àp8p§¸Ç”#s8‡€CÀ!àp8‡À™DÀâ~&Ñu²‡€CÀ!àp8‡€CÀ!# '³ï7FÙŽÌ!àp8‡€CÀ!àp8pKÜcÊ‘9‡€CÀ!àp8‡€CàL"à ô3‰®“íp8‡€CÀ!àp8pzŒ@92‡€CÀ!àp8‡€CÀ!àpœIœ~&Ñu²‡€CÀ!àp8‡€CÀ!#Î@(Gæp8‡€CÀ!àp83‰€3ÐÏ$ºN¶CÀ!ð/€çyÿòytt8‡€CÀ!à8;$Ī&Ø ýWú<[0oĤ¥ù “†mKå†Éh*,,gZgSéùW;¼O†ç_Çó-¦ i—Çù)·Ëô£ù¼yrâ8BÚ¹ó ùÓkcßÛ8oa4ÍrjÈ»r8‡€Càÿ&qè¸Ä0ýsbçÎunW˜˜`4,Ä’ÇÆÈÆÒÜÝù‚@´rö|D£§¥ô/`+/ÅvJédF+ßS|†˜Ï·ô¶†SÉÛ©ð¶$§JËtòçÁ7m…{œ*®Žß!àp8Uš5ÐÙ/ˆ6Ër¾tpÂÁoè𔕖HYy%òŽP$&¥HzzšÄÇb15P¸bêw¸ˆm,JšÔ(Ê“Òâb)¯¬2r©#19E2—Ó©¥‘Êÿ£7ÍÕý°ø°0¾æâmZw}n°Ë¨¬´XŠŠð¼U íˆ—ÄÄ$IKKGÛ‘Š¶Oœ61ç&©­~"ª«*¥¸¸Ä$É$,®•¤¥§Krb‚1þNo;tv3\UY޼•F^T<‰O@¤KbB+“ºÚ”S‘ÔÔ!!D$55]Z§$Eî\ëh€rÿ‡€CÀ!àøH ÐäwÓµCߥ0ÿ ì9o:>âÕŠ‡Pž=%3­õyÛ¹kèhW˒ו›¾ú#¹øÒɲcéã2ë{sä»_¼^ÒÑ™ƒ‘­óªqµ•¥²s×)«¬“V­âÀc•-o°Ó?!!A’a,§¦¥IÛì¶’::•aq´ø²AFÌ{æaùÞÿüNú^8B¶¯ß,7|í¿å›_»A’‘†º«p Šcuy±ìÚ½Wʪ<”§?¸S['Òµ{Oi—óNå©,+Ï>©¨FˆðÔÕÅI—îÝÁ“ÞˆÇRé.?hÖT”Èâù¯ËÓÏ=/ë6ï”ÊêZÉlÛVv½ýŽ|â§¿“o~õóÒ¶u¢Ôa°/ƒ~çÒÕÁ(ÇHãá]›å‡·}MvÔ¦Jk¯\ÊûÊ}wÿT†õëzž¶ ð3ƒ¨»7®–ïÞò9Þe¸$•ìéx™üù®J¯ÎÙú²ãGä·ß&/l:&½ÛÆË²mñòÐÿþF¦^<Ô<¢ó‘Àd½««CÃb}ü÷„ܰ¹|²œn‡€CÀ!àpœ9¢èèp¾}‚×, §ÞˆT´Çï~—ÊÊMȨ=NºsÇN]4ã×DžÉ ¶“”•“Cy‡åÙ§ž3‡æ¢óç+×NyhR˜TYtH~ÿƒËýÏl’øV™RW[ò$騹³Ä¡“^SS*•5U0γeÀà‘rÕÌÙrõ¬™2(ñàoR$¬@K‡¬¬ð¨lÜ»Ëü˜æƒ‡ƒŸWgÏE`9{ QS}± têɪƒ²V(âüÝò‹ÿ*½.Ò³sÙ}ð°þ»‡æÊmŸ)­Pb¦l zºuï½%c¦~‚’œ*•%&üÕw>+'÷ >yzy†þýr:}1U881ÕõÏh]•¼üø_åcŸÿfhf–oÝmfjC#œúª䌄×ÖT˪×ËÚzéùRõÛšú»óù¢¦ºRž[½S„?ãºHÍïjë³äaPùÀš§dÍû"k"¡åå?¯×q4Ö©“iAêëFƒÄÓp¥[¡DŽîÛ,O>÷²Ô&¤K\U±HF'™=ûjéÙ>õ²ÏÀ¹: ™u"‡€CÀ!à°ˆn ³§bzÁõhxÒa4?çßÇði6tv§šþèâ1+t&³^Ä@µyIëó’³)!ü ò8 Ñ ŸÃtquµ˜õN6×CF’õ«Þ“t³ôÑ!­¾ú_ãà{qÀÎ7ÎyU%ywó¢Þ/‘CûöÊÛ¯¿(·?}£¬}ðw24·£‰÷s9È+q2ùŒäÙ'ðSlð@—б ]–çÓõ2X¶­ß ©­“åÁ–Æßœ|Îäø˜5& œ¡³±eŒÞÇR&,~¦ÅÆZuøá ´¯Ó—tàÂÄG‚MÚ#u‰V[^=O$ž÷ä5éC1'¿ê£ß¼ƒ!ª®ôsÞ~óïOÈÕWL¾3M,1‹oÕJªŠË[sŸ2aí;fË‘¼cæšÿ¬d™0v¼‰¡¦C}eм2ýÁ8Ò„—S¼ g¼òh9…ÍÈQå(­úä§Ó4×,éöƒOø¯tŒP Sg_³ÜXŸ‚ΗÁg¬q½'N>ÿ‰|†‡õÕ¦xésÀ¨h:-¶úº±oÛ:ùeÄ86äY»~£HJwùüÍ3eÖ޲a¡i€+úÆö¨©üFK{¤nP ñlú#ÕÄK—¶"keJ*ÚñÒÔnÒ*J{iê“f°öùùßàl’Ü—†ØÆWvýÕ2W”£å aÍÕ3(ŠU||+Á\¸¬ë6HÒöatdv£2`NÒ:]Š2¤o+Yÿ!¶þèòw´ÿ,ÒЙw1mâù÷ë8L™6ƒ)kÜFk›}JGͯ óè·òñ-Ìß+ÿyÛ·•þ»u²1ÐkkjMòùÌ4’eQ»K‡€CÀ!àp8Î/¢èè©cçŽ.¹K/©<°mZÔ`‡&ZG”rµcáÓ5t4Øá1 7Ñœò2>ȯ<õ'«C‡=˜ÆÅ§˜eé¼®¨ª2Aì<µÌÅaߺoŒõéÓGìÝ'=ú] =ºvD'Ø“Ãû¶Êªõ;!2Nrûô•Ö µ²ñGåÑfÊOo»^’ÐÑc‘YÓ‘ŽžÛ¬˜>¦3Ø9gǘ®´¼Ìøv^X¤¤?ùA}T´õ\üôœh,3œ‡åùL¢ñOù}ùeÊ2Dß | a1ª±§yW:õ£ÕMê±Ó ô|ôé“Rz hätÈ•ÊÄJI‹/•Ý‹‘·—Ý"}?vd ‘º¶}Óùõ]O€¾«d&×JB×RWºGòŽûzÊf:éh46Qí¥-XôP\›.§ˆi1L4ÿ­šH„ÓfäkÚlZ?'á&ãæQhˆWÙñúÌ6ºH’#ƒ ‘º)¿¸ô×bB+l/hü4Öi«°q;’·[–#²cn_cœŸù¹ÿ—ߓуzHñO~$¥U5’ž‘Ì4ày Kó§Ù1ùCyk>¨›x…ñÕÖr@±U nDO»j3㜥Õ~›c öqÀÆ´ ð×SØe¨åZ©È3\#£1À†Â–A\éÖ¢zÀŠ5·œ‚Ž–‰YRqâÊ€ºê RHy©?³^éâ[5~júBógçÍp7þ§¼ m–?¤^²ÔÃ]\zO—šž!Ãð ÞÙoœ$nY& 3‡HZjª‰KHÄ>,u±U¥v¾CÀ!àp8Q÷NìD²sà÷Ÿh™˜Ê¿“#• Ëm–°k@jàW–ËÁƒ‡äÈÑcRÅ‘0$¥´‘;I§Ž$)è˜@;;üy˜á¨(/—Ò’9vü˜á0 v°éâ0sÒ•œœvÒ¾];ID§›Nùýk uUU”ʾ½{%¿ 2j%-«£ävÉ–ÚÈÌzMD.ùê]Lvl}ã>Þ+•rÈô©›¿*·Ü0Sâëj¤{Vß›7W¾þ•ïÈÎí;¥–¶Óíß¶ºÕƒ†bàaNåeeRTxù=.•Õ¦Ó‡’B•™™-íÛ·—Ìô6¦¬ÜúôF.´èÌmä†P~YD~äó@9/»†‰II’‘ùíËoèxzRVŠåúUÕ‘²ñLù¥¶I–j`»7‚-qLËl+½{÷–´v Y¦~GœéÑ:â•Z,O=z4_Žä•’ÒrSå“¥-ÒС}»F+L^ÁÄ*¯¶3ЇÌÖ„Ò æF:ÛYmÛI×.]$=5tÔE#Éïø–ã0À M;è[% ¿8Ћ®²¼úËÌù ™~]ômâ£ý««õBª«*ähÞAIì²-”‡ž|Y®œ4NºfaÕ²®²HÞÿŠÀ—¾ýÛȇ[·IvN{)e uÄ¥¦ºÊ”Sqa!êA"«òë"Ù)OÏÌ2õ ;‡Â´ë<ùËËJQwô°@|Øúà].{÷ì3Ï`5Ê©MZ&úH&ÊNå°Ìy¸ëJIq‘+(Ò²r<7|6}Ã& †C;”S»ÌGÒ +](K=^=,ûö’2´!xnÛætÎ;b ž”‰)SàœÒZZ·N©7Tle%…rèàAÉ?vÜ?ð‹ô­S¥C§ÎÒ¹SFa~±ÅImM”¢Ì‘d#á©8Ä-)–#ˆŠqp1JNMC}Á #âˆE5ïjªÊdÿ¾Ý†"ÏÝøÑC¥w¯nf%N›¬ÉIö &c EŒ°’´{QŽ…‘ƒÊâ€{ºtDº;vÈ1Ø1ÑšnÊ%ö%hóì´·A:““ØVDÒŽ:‘Ô&U2ÒR£¦²|×P¿4Äöͳ)þ€–'ÇŽäÉÁCyRTRŠrd‘µ’ ´=ñlµÍŒÔ9«m§,#Xù³Ïž;*GŽ‘¤Ç6›ÏgFV[éС=d`¹6+óZŽ6^ëÛÒk=c™å }oß®­U¤=1Ì-ü§eœ‚zFWtì°ìÙwõ’mO¼tèÜUr{vÔgÿÝaY>õøÔÉÑÃ>>Åh3ˆ˜7â“Cù'yèI)ÃÁS+—¿&»ø†¿ª»p¹pÔh™6s¦L™p‘d´ÁaTìÒY_R×ÎwŒÚ¥¯?+yäI)‡üË^‘=¶Œ™HùÊtÈŸ[†½–³eâÅ£$üšÇý;6Ê+sçÊü…ïÈ¢ç_–ýV]í7tœLŸ~¥üÛ§>)_8uù‡Xþ_òÚsò·GŸ“lÑGæÉ¥³n’›>q¹lYµDÞ\°HÖ¯~_Ú ºL¾÷__“¾p–Ò«åÓ²¦¯â…› =öYz˧äãSF†½Û7ʃ߿Ëg®özVRíRëÜ™ŸÇ:ùàWåXŠqðàÚU eÛîHç<¢~ÄE—É董䊫fÈ—M¶é)~=À3òB÷ÿã1ÉìÒUŠ“áÏ—“¥ó_F9ýSÞ]½)"Iäë?ø¥|éóŸ•¡|öÊbbuÚ³á}¹ç¾?ɾ‚ Ù±åY¹ÎN”±÷ÐÑ2näh™4uª\9mªôÀ²}SÆ`Ö:SSQ,‹æ½*O>ù´üóá§üN˜0õ™‚ ¯²Pvï="ém’P×óä3ÿùùøÔñfv[gºk«Jeé¢2wlé{²`éjM‚ñ¯˜ýo2ûškåºÍ®9Ø—yŠûîø¹lÂΜL¬n8\ÞV~ð½[¥; {ó•¹²tåZÙöáN¹î?¿'Ÿ»úrachÚ,ëYòâäÀîµr×ïþ(Ë—¯ŒŒxÙ¿¯Ñ½rþ òÓã;%Ç6é}ÉUrëWn‘ΙþàY-òþîÂyòÂK¨«óÞ”¶ì±Ò)×|ê™6m†Ìž5]ºci<>©Q[)6ûó¯.«WJ[¬¶8Xœ*·ã ³¾Z˼WçÊ’keë–Í2óßo—/~|V᜘vK.Y²Qôzh'9 U”@Þ|õeyùÕ×å¥Çž‘|‹¥]î2kÚ2cÖÕ2mÊDÉDÛ F¨Ûá};dáü·dá;‹äýåKe…UoFŒ(#GŽ”Ë'_!3gL•¶i)ruë¾?þQv)‘]®—å«7[ZEº.¡MºtÊ™1}UsÌó¬u­qÔ?ÿf—VW¸eù’v*#šÿé[îíÍ/6|üwdïVoZ Ž}ûû?ô¾òÙk¥á{Ö«ŠpiÞýÛ:«AÌ妕¯Õó èßË\gµõŸcMOë«>ïíÊ/2ôå…‡¼ïþQ=Ò„ùÓoúÞÆ]y†OÛÓã‡vz8J°ÿ}çûÞ׿øÉFa߸gŽWî'íQäÂO|#y{6­ô¦4’w¹·r£ß†WWûõüÈžÍÞ¾r]#ùaéeØ÷îü›—WX^¯C5o^õŽwã#cï­Ù}Øðo|û¥è},¦þ{Þ®H=ÕçpÓû ½¾Ì[ëÈûiÐ Þö}þ3LEGöy·^å×ýNÙIøäB'oê”+<kþÚç´õÚ¤ .vÏ£¯Ô×C­‡v®÷¾õùõ4Jæÿøî‡¼üÿ%¢ez`ûzï7^ÿoþ9×+(ÜçýÛ0?{öö0§îÅ%gÔ· z/ö¶ï?j°äûJ˸‡€CÀ!àpœwDŸAÇÛÿdPðg €§VOÿä¿QcÇŒ’å﯒ї_#Ÿœu¹Ô? ÷üìN9ŒÓáǎ銸çdÚ72dÝœ?H?,=§£,ÝQø™ÏIôíƒeÓIXyTÞyýyó½ÍÒwÈHÉI(‘e –ÇæN“~_»QÚ˜åò˜tÀžù;o¿Bc¢bÔØqRrp›lŌ݀‹¯Y— —¼ÝÛäñ'_À2ëcÒ½—¿Ü(nñ?†¦ºÆßx¹eóyg –¯b©rIÒúÖ‹ò¿¯¯—´ìv²y{¾|åûwÊõ³&šTt¬±üÓŸKå5ݰI3eêØáÒ¥C;̬UË®íäÞ??Œ˜62þ⑲tÉ»òÿ>§\4v”Œ¿ »ß­ô“`ø£ýã–º—Ï’)ß¹}–RVËîíëåÞ¿<‚˜4Èù‹å¿nþä”±»Eäci.–¹Ò Äìvz«:yåjYººá€´œ"/ÒZú $I5{äå?ÿX–}êjùؤ‘f™,yWavxÚ'¾ÀKuáÙ¾â}süàÍ_¾MútÍ’m8nù‘§_1ñ]Û¦™*oö¸V¾Ãd™‹‰Ü¡ƒûɺ Ûäÿs‡L¿ 3®UEòÒÉ=>+Oœ K-–«|Ÿlyä·Ò¿W, ÿŽåÜtý‡’ô¸ZÙ»ô1ùÁ&H2»÷–½;¤S3ëî‡Æþ¿ªä¸´Ãùôê,{6n7ŒOÝ÷{¹íËŸ•aê䉻dªj’eâ¥ã$oÏfÙº« 3»XîŠO®5r(G=K ÷ø©2û’ÑÒ §ÄÇã4êý{¶Êïïý»!{Ñ%²ü½wåG_¿M&\yæoM(êâ™Ú±Lž¼÷¿eÚÔIrËÕê÷¯Züº\ÿåïCŸï²öý•’¼B¦}ü32¤WÙ±ñY±z‹¤cYo&l£¥«ÖI5ô+sµ¼þÌCrómÀ.¡³´®9(=±àÿ}õs2°g'Ùµq¥üúkß )=et¯8yüžÊ…£GÊm7Í$ù@þ&™« zHuM…üæ—?ÈÇaØXå\„ÍË©‘eéõõœõô1HNIÇÌþ8YðÞF)ÄöºãX™Ð¶[?¹dÜp9°b¡ŒÑO’°M„nþ säs·ýW]äÂٲ⃠2ãS·È4´9w¬ÇY•6ÝÈíD^ä÷ò“öä?½MrR}~nßé:{œÈK íHMm¥Üuç/lþËÎJ“:™Þ:©¾Ìë#c¼Ð… 80­ºô¨Ìùëò‹ûŸ®ŒH)Û/·’ÿøÆ÷䂞dÝòò÷9/Ê#.”êý+äŽï|É|¥â«7ΔÄȲí#»7Èo¹TžÆ‡ÃFJ«Ò<È8 “fZ&,vÈœû0ßI5ÝzÎ"õ g3|þË×IÿÜ’Œöûø±ƒ2wÎoeÕN<ï£ÆHMþzyý;äÅé“åkŸšj¾¤cVëÉâ“ÛI9 oÍ; c{]k¶|¤çt’Qƒ»È*<+·ÞóOÓ®ôïštb{TñayðÞŸËoxíÇ…|‡lÞ}L¾ú­Ê€nÙ²zÉ[òà“¯Ê‘c¤tËûòãÛn6ø|ñ“WHð©.;&sþò+ùãoJ×~ƒ%¥ê¸ää“i“/•.9™RUU.;·mÇþô¼qÌ òŸ(ç}Až_ûŒÄ—HU^ר*S-meü„Ò©]¦ËÛ&mûNÄsé¿wXøä8çp8‡ÀyŒ@Ô!…S˜A×™œÊâ<ï¿ÿÝŸq3f{aÞ”ëoõVmÙcfç«+˽%o<å¡ ¸oø`vñ®‡_ög–‘¸ü½zOüóaoñŠuÞ±ÂâF³Çì÷þ|‡?ã}üYå{çÌÌFa6ëðNïkëoxÇŽ¹Ðø2p²÷ìë‹Mù–••zùy½e _õ®(ÞeŸûŽwÜLX—{ßåÏvïóÝõð ^ýä:RYtd·÷Ý›'™#v2þ#¯,Ф¿Ö{æ/¿õõ¥wð²°úTËeÀ ¡ÞåS¯òz ¬:Ìþ¢·a¯?UÛ‚ôž,ç±Ó½¿ýóï ×]^/ûûwÜãÍyàõ÷×Þò-ï÷ßíÍcöBx8ÄßÄ5šA¯«ñ>Xü¦7ç©çQO÷{e‘åÈIf×7­\ä}|\Ã7¨O¦ñxfžUNž÷òÃ÷ù:sürÊî{‘÷»ûð–­ZãmÙ´Þ{X´ašQÖö5´?ûóã^…%e׆ÞÃÌñÖnÞá•ø« 4Û ¼Ûoñg[û ðù¿{Ç?¼òÈ¢ƒ²‚ýÞ¿:ÛÈ=ZgTûx<óª·//ß+..öön[ëýð+3 Ͱ¾~yÝ÷ô[žævßÖ•Þ$¬šÇ_³Ú"÷²Oy+¶ìÕ$Éë~ÉöÓÐwæ—¼GüYôü½Û¼›t2'Û§cžãÛyã.šàMš0Á„ýâ¡—¢Ì s•Œ¯®¼¬ÄËÛ¿Û{üÏþl~—®Ý ïu·þÈ[ûá^ïàþ=Þî} ñѽ½ëFûå:zä`C÷¥Ûãíî­ÛqЗQSæ=y> åu4uK¼_ýùQoï¡|¯¼¼Ì+,8êmY»Â»ãÛŸ3ü«#«öm^í=üÐ#ÞêÛ¼ÂâÒú4ñ"oÏ6ï'·~ÖÐ÷0Àø_ùÁ}^iuÃîÂ!àp8ó“ŸAgW!Ä!çõ¡y»wÈËåLhg9¼e• ÿ"ö$ì_¸x|ì¢)3ä6Ì}åî–Ò:,z†›·d™|êcÓ¤S:ýêÒ[þíÆ>&\p ÔÑü<)À!o•Õ5˜øàkþ!_UøÎ81{"³Äy²ò½&<§M<öû‰\óåË×ÿãsÒ)ß©JÇá:=zt14q}ÈÜ´dF‚ô)©84­Ä?DŠ2Ô>°u%IéþÕØÏú;)ºåóråä‹$  Ü0C2æò«ðß•ãP½}‡ö "â‰ç¥8¸Cî`‘]p8OÃ}«M:Äó4º:ÌÈŒu̸ù’ØS“rH¶îØ'eX4ÐÓ`Z7Ó1+|÷aÌä~Y~ðí—>ÝyÚ~+©Cªª‹ÃaTþ쳞_`”6óÏœó·<_ú -%ûäÏ.Io/¹ûV—!ºgÉ–½Ç1ˤ¬ÜlªÅìz„?£{Ú³±º3ݳ¯ºZn¹ù&ìö ªg×ö²}ÝrùŸûž”6éþÊ‚ã8pŠU2ZlßžŒ–›ð£«Å)Øy(ƒBø…ÂýÕ©þjŠr‚H×*ò^Ù¿OÞûÇK¼Ä³àÏVþúï¿•Ï\w¥ÙëÍð´Ü\è×—’‚2÷wûúnóËeaöwé&…vËe^ Yi‰’ø””Wa/xº¤ãPÀcä•åJˆÚúòjÙð˜ä¶Kkôà¶I.2Bû§Gdöô‰˜yö??XUYº’QŸ&=ç ’³}˜õ&‡Ññ×+è’“ü™þŒììî&‘úϸí×ʳ+q‘ÑK¶­Þ€ àx=V'`>]JZ–\1ãZ¹ýæ¹ò«‡^—V=G"tµ,Æ ‚Ë/&©¦Uæsë7Ï©Xá@÷Ë»þ!×μ\2Ѿ0L{BëtSï N‰››æþa‘•‰g"lúÀöÉ–õk¶ËðC>1ë ÉÆqº¶zÊuŸþœ<ú“?Éû«VÉÜ4Y¿ñY»õ[¸î„óAöÊkÏßgh[U šùêî•ÿøÜõ’•ì—(fãAjÿõÃ;eü•7I.a€ë:`„Ü„ŸÁǘzVUƒ/=à`>]ùRŠƒéX×M}ךb‚›þgèÁ[ç×ÅnøŒ|슱žþ’,8óá9ßÌÇéÜ4Ë“r³d÷΃˜”¸Jú÷Ã<%O©–V‰Xþ×F† jÂöúFöò]yRˆå›Ò³Ì2Ètþ-˜%ãKeã–-òêë }ÿD‰èìQk¿¸¨DölòêC'‹nÖ•“|ã§«× n…ŽY­85àÌMä_‹ú¼àáJÃbç“®¼FÆbNw®Á@‘ý»äÁ9Oî’Nªä…Çþf~Ï/\%×\†:;W\*Š¥¬<¬lÞ[óq(×:Ù°~­¬Z ƒÖréY¥¬xµ¤Cfzƒüu«–×Ë߸~¬²q¢L#¿Ð—ßÈÊadÄéì60¬ÌW¥hœaIqZz[8ƒ²@ªãüåQt6-€jq§øÓõî”!;ÖˆäÎøpòË¿¶§ÃÃP¦cZ;÷ˆŸ¹ÅÉÝÇdÍ[¾AQX‰5Û 5ò‹~S’@‡-üæ07DwüØ>ÀOã—Uò0dÔµ†òmZÏÚ0hð¹xÜÈzãÌ0DþÅÞÙõÓ”À¾rþJL2~â$é‹Û‹Ñ§MŽõl«¹D.3BRm‘ŸÃÑ0|ýôš[üü  £¶¬])o½5Ë£×ʦMëeÙJ{ .-³“T–úxâìì†\ù©bÅrJö aqøRb¦ôï;RY<áò‹Ë` £1j åÀùæã@«%8mËÖ­²à¥†Vÿ¥fäH]…±<Ìs§Ï OÄßHû& rmÙ‹¹ä¢Qkž®Þ*!U½ú?{´£üœTËž]äCúðü°V,œû˜ì^óŽÔTTšOq¢®¦L¶nOÄ`A–>œªr©*oØ3@ytµ%¬ÝeܸqÒ¿wOÖø £7j~l-Nœ÷Û(–]-ÚŠŠZÉHm…Ú 'y&"íÚ§H>,éÙ@IDATÆ&Þ0'ƒw2ôÕh÷ø5†Ö™92zìxè%U~Ž7ïÌÃ+ªñY-¿<ô’G7vìXØ·—¹nüÏO]ôÔ7¦Ö;Ŧ²æè>ëÖ)¾”™“FKN–o@Wá”ý¤¤Dœ–ßMf|a‚¼ÿÅ’–Áv¼'óû‡œqÙÿ 9‚-Û¶Ó§^jŒsåW‡¶’9è•’Ñ^&MžŒ;CÚ½ËÍ“ÅK—ËæmÛp˜è» ®w©8Á=Ò†³iª¬ê™]hyùmRü¶©õ/u±cÇn2ÃÓ› ‡QÊa@•ùƒ¬•eøB…ÿœòpuº©Gá$zÞxæý‘„/+tìÜC®½~¨üú±uØÊÔ ç€î’ƒÿŸ½÷Ì¢ØÚÇŸôNÒ •л4A¢ ¨(Š€€ ذ`ÃrË{¿*Šìˆ(Š  Ez $”@Ò{oïÿ9³»oÞ„P¼ßý}ïÇŒæÝÝ)gÎ<3»Ì™sæL†O·*…Çìl–W@8â\ÜñÆÓ«?9vñŠñƒ‹.ÜB0lèD…F¨âIZ &^ijŠï€y—ä]•÷î¯ü[  ë€F@# Ðhþ–¸þ%®æSö¹‚Ì$º¹Éa¹á2!t1,Ó¿H_w¸‰•AŽ•±4»¾ÆD°’góJÈÊ+U¹?¼çj9é¥J”Áט£S«`•e C™hÞâ9¦Ø´/&ߌ#?•Ü{¹E•ôA-…o¶åz‰>UØ“tT%Ñõ¤,ö!BÉþ±àÊ1)§¨I®pÊ›³Ÿì2?ƒ©ìTn›v]0óŽ«qßËŸ#®S7øqÜoø#7ΣG{±—–³‹ûHdÑ@® Òႃ­¦ ß.}£'Í6OùËÒfA»¾I^‹¾ê'.DyZÅc¬ä” ôƒ¦®ê2Á!"ØúËJ\6ärÚ!œ:ÔÔ7Z§¨ }ff­å±ƒÇåÞÓYJ¦†ïUP™m· XWRPMª¯@~™1V|8œ‚q”^Ëå¯ùÀÍä*쥠lˆ3Žù¬>—#½$ЙV£~>»þOçàVÉX±â 8«QbZ5øò#Kôvn¾\Às5ÚGÈäѵžÚôr„ãù7§&>ˆZÇJ¥Q•I¬Úr<—¹FĶç0¨g<7ð#ZPkèŠeMz­:ÿÊÕZШ©¡èíêƒa—^ P@ß½›ff5d¼ÈdUe%üW"B¢¬6ËãÞ-¿Ø…ó´8ÙŸ| ã§ßŽ1#† ¶M¨ÁÊ÷_Âü7?G°È†Û¤ÔøböŠj›!ºŸäU°ÞÏÌC»0÷2C8oß¾-’’’1hôL7íâ£À3Õ7~¿7=ô4JBX)£óur£Õ@<•ÖÒEœãgSÓh$ÊW@‚+5—®VçÿFÖ-¦I¯œýq¢c'ÍÄ„+FÒZ¦Šý,k7,Ãä>k^x>¼˜¯p|Åѱ—Dx1ïÔ•ï¼Ùá2äh±&µ6bá¬,"Ò,~S<Ì1NŠ„,ÐY¡ž;Šù"bq°±Öûi#ÿþV~u5é[cDñ.4¬ze>ÕÃÉ™­qFæåfÓõ6ãe±¾“BÍÐä €ÄŒ 2*˜‹:6s‘ÇÅÙT-£Z™ˆ—S»n-üÈ{m,bï›%˜ ¼ãûñÄ­†pÞ®]"8ˆ>Ôk.G‡„X´ä™âÛÖ¬À ÷ÌGf?zÿ¡`-ªØ1$ÊÒÆ¾•&øx»›ø([æu9v|8ëÕ÷Œ˜±Íœ8ÆÕ0 ±áWNŦ5¡xãµWðþ—«j2nÃ[µ·› ‡7.Ã=Ï$à‹×ç!¢…|/9Æ%‹½Ã$ÆT2žÌïæÿäûep 5€F@# ø; p²Tkq%“‡‰¥Š¶hNRÜMA™;ÇIBMÔå$ðy•êlè‚ ÉÈ¥vÑaJ+jML3e( ‘^‹ÀN±Áð¦ŠõÄñ}Fÿ ÍuêsDëà‹½ø%Tp« šÚoß´AÅõÔ…Úáõ¸áþgñÄÜ[`j¢8MÛù½´‡Ú7CÎ=©‹T¢Ã‹e ¥ÜóhÒ¿ #þø}f<ø<¿ïf„û )´3ÀöoÓw u†[i·Õ+Öµ¡ˆ!«8!8@Älš´+k?Ùˆô9¹hè£6I³ú¡¾¦9¥ A z`??˜N­s‹Jó³2Ñ¡{?Œì×YŠ4ãJj e—u–{CV©ç/umCÑ“îŒö±_͉y»ýpÛåݸßÞÐÇÌ|½:·UåD¸”ÑXÂÞ³²´Š´ç¹ç›U¾¾ À¦ß×cÜ-óðÌü9ˆia¯7ù·eêÞÍ]ú®Âº›¦¯³½r³šì›€$ïßÕeôÖÏó§“¶ý‰è &àùgŸÆyíZÛ«¨8º]Ý—™[úŸžÑ½½È~:”• „`d¤¤ñ”†],ßJi‘¥ h³+¸ï]‚Ýœ›L‰hãìä‰zwWÁÕþ\üB1täh„XŒÔF¿•Ô^ù[K@7^‹-Äû<¨1À…… î³–^fHàßLCaq%"ü<ØN³Ï©YM?’ªòY–áápS‹z*Z^óÆzvxl’är–·$`ÒpwóB¸©¯ª5V4’gÒœŸÊÒÅÈXÁïWòŸ_+ú•¦ úsàçí‡|?Ì-@½qJ+Ĥ£Ú­­ÚΠ2 úŠT=rsòÌÓ#àóÜ|@K“{ù®t¾ />÷ Îïgáo}–a5QgnÅ0Ʊɼ=×™nÎ"“,ÖB’…óùè0T×ÿÞä6,Ùŵ#{?•—–âàÆŸT¾Ê2þ;Çàè«,µj+ËQÅÒú nýáþéÈHOGê±T9rˆßãµX½nZÇÆCÞò?¾Z…cÞ©taK$s¡UÜ̳”öÞ'2þšáA€F@# Ðhþ»0fcgËsA¥™³)àØñTä¾ÔdîT))¼DÒdGdt4.¾Eò£]ÇXÞìÅ«EAõ¦f;‡ϾúòcE7˜û8%\Ü«+Â|]QV!{\êp@ÉÕfÍ+™`#Ç(ÚòØ!s©Áq’Ò"À_™ ‰ZSˆxí­%øcW²Ò¤Éd™Þ’qð@Šd¡pEígÓðg<–R´0?Y¹yÈ¡ ™qâ'¢IøôÃðä¢U¬ÁEíU—ª¢C"舉Ìó¨Rµ#¡®Ê˜ÜµŠŒDˆ]8ç‘PÙ8––¦òp»öiƒ¥mq@&x¶:šÞr¯©„:š£JhAúváœÇ}Ñ9Ó±´ã*íÔôé±E_e>éÇÌc.ˆ¶ÊT¸¡uBú2>…–n9 ¯\w?ZŠÃtìåJ ²±tÑ‹˜÷â»ÔÅѧ\xz¿”wuˆí¥²>ûÊ"lO:j§m•¯ã>ß´CûðÚs ðÃCˆ”4K{j]Mö¬bÿÖ•»ªœebiæ|‚Zcî‹Ë¨Aß]»v᥇¹ÐÒÒXh‘íÆòŒŒ¹ÆÕÊ,5û©ÞÜ{,ýÔ œ—Óù¡5êë¬w²1ëÉÞV+Âñjtahè/kq¤¼ŠÒ9ƒÍ{%ÄFEPH V÷ꇋ'©æX´Þ=UV^@† °pô=\Ý»ùÉ2xüÙXôÁô#‘Œ½»¶á“>ÆW_§ÒÊ(ÜH$ÎHìd,¾dÔ –jøå´îøðÓÊ–Êlÿ±¡¬¸x”á‚ç^Fz¡¡Í—vYøW³ÁörÿþMsãßZdˆŽC!‘†ö1`×}ªöîË+ëj VI»·â£W^W x©ôë’Hçu ŸdK@´Ú 2ÿÇ~ ¿ BÎ…Îïâ;vP”sJª¸ |ôÔBü¹ËŒÄZü¹G­ýVïèŽÈÞ/ß¡6èßJ• ä1qý¯­î}‚bÔuÁkoá·½fµÛ›×|…Y7߇£Ò뜌ޮ§B ]h)Á9{àwë¸9Î|=°±§›7ªg­L³ÝlF6yßšÒ‘g«¸¥éw¡S¶¶:©¬E寛ûö¼÷±uÏ!ç*–>ÜÒ±yý|ÌÏMP|dÌbZ$ÆDªŽgP×cÛÆ_ñ…¯–aœé“DKHQ„ÕtM¸9] L3H u0„°eŸ,Äž?WÁ™“¬* Þ¿üšz|îE FGî»ÞúçV•ÿzzµö“u‰Z7úø«¸z'C£ýì¢wèùÙ=;Æ œëÚïWàñ÷× <–ç"Qy›rfñîižÇ¬¬€™Ó‰f·ôø,¡ÞÉàñEÒoê‹¢QF¡oíw_áŸüŠ–qÔVy›þXô=,-eSXÀò~îFóN j¢kŽ§È¸N¸í…°iÎ;µA×qô||ŽÜ©ãÇðl_äžHæ_ÄK‹>ÃÔûС iú„`ä•7à‘×¿ÅÆGÑÎÖ~þäeô\· æLA÷ΉðæЂ\Ø·ß~ô(~ݼóÕùö´´§^ï–FJqùïý8;}Ec û¶¢D-WTLÝ?5C¨-"·pH4Õ“T^ª`½bN4å÷7û‰º•öÒ[ï ]túuK¤Cé<üþÓw¸ÿ•ÏáÔ†ÒÄ1£¼zc ZòkÑ“mEêÙj½t„ÑiV_ZýäÂB~"$TPkÆnüåÓðNŸö¸dp¸qøö¿ã¥gg/´dcrx'ô,š>AQ@®â‚ÔjlˬåùäÝ‘¼un¾þ*!Û(Q «¤§z ·5¤»÷Ç“³¯Äƒ¯.‡Ï—Ž¥‚97Œ£¶ñvŒy!¢ÂZÒ›|5‘DZ•ü¼üÖTùÄäY7Û雯¥±¿¸ÔðÜnOüwn„Aë¼skAFâ,ºM»n˜úÐtlÿç;p ê‹£›pëu³éëm>öì€üô,þ×ÓXWôî×[6ÒJ¨óx\Ч × °4(# âlõ ÊÑÐf‰3_8´¨þ¥0MäMótY0ìÜk ¦uÂûkwâüóûaƘ}ÿ?ðÈÓ‘Ø:)»6㉷²œºGzcC*0eîtNŒe)ø…aôÕÓ0ÿo°kçž{ß›×-ÃàQGðÂ#·¡sBkTp÷^:À|ðñgY¢ž}“Îý< |q½ Ú´äîíÞÆ¢÷ºaôEàéTÝ[6ൟQuDy9áï Ì Þ'Z(@|§¹Y(ªbêÇòˆo¼§Œ2û±!éŸ+pw™ÅŽºö„«¹.ø9ÇðùýûЧÄFÜõÀ#˜{ËÄG¶DÒö xäÆ;X°%Ú…¸ae÷›æß‚±ÆF >ùÌcêïž<޾={p[Q$O¬ðP ²{÷KË8 :µÆž­>¯7"﵋‡7di,×Õ†Xž¿?y#þõ¯¡düep)ÏErZ9®áÖ©ˆ–~†…F3mSÄõF@# Ðh4ÿpBÞ|à’<÷ªðçše6¤þ¢B[Øï­¸æ®kvVeKsSmÜ|¹½L«P_û½U®MLŒ=î¥%_ÛÊíg)gÚž¼Í(Ó¾³­£y^³UκzûøÛÛÅ)WN{Øv"¿ÔÞ¦Rž}ÏÄ*-<&ÑÖ­kW gíõY4üm¡‘­Uü¬§Þ¶™‡1ó¸);­¦7VZYNŠíÖk»«²ÔôÚhöx}©Ç˃.žê~…ç —U7ÐßþË×öôî<×óUû³c¹ àH[ ±yÞöÅ÷ÍŸƒ­ÊÞ=ÿ ž§kpþçó,_Òú4³>%ýã|5ÛW«6:4»áô“þÜ'ÙªÔ81*©+/²-zt¶¢Ûžç! ßw½ü­´áÈu[AæÛ3Œó¯%½MŒ»c­û w=jË5×®©,¶-[ô¬gŸ Pû½•¿éõ­å«Ì³†ÎAŽ‹UånçyÊåæyÊÍ!íÐðF·µ<ŸXBÞñ=¶i—çkw6Ï3ÿi»yv2ߟÚÚ:ž®äðg¾O»~þÆ<':ÜdôÁ÷¿l·×±“rW¯xìÆ~ ÷m¾ŸBB"m!>FÚâekìååæÛ%ÆÙëþ±ÆÙÉ3æê:åÑ×lyæË—}díJžC/xvèÜÕ–®î›âi 6ÎtàÉw̱`4´¬ ÃöÒ#77[΢ӡ“Á_B¤¿Ê÷*ÏA7†ŠA#-y»múÈNv­"Ïo—vÛdH mêônFžhÊ.@¸í—M{U”otµÙü¯Œ ƒ›zÛše¯(^¢£ïÍ䇞·å”™cŸLú=PD2R¶Û&^hòêf ¡u»ÕfëÓÆ8Ë^ž—¯ÝbVn”/Ìj8Öªì¿í0òïF¶ævˆµŸƒ¾ïOÛ0ÖcÕ \ÈsÐSUNs8Û¶þºÂžÞÆxGò³¬K°-2À¤ÑçÛփƙôܪ èÔW—Ú>]¸ÀN#(²•ý¾ÅGŒm_F­<ï¸mjƒfb§.¶Ä¸æË¨qâ­èÍ~ç ;|7÷oþÅ/4=Úõ%N°¥¤åØQ(ÎI³ÍÑY¥Å…u}ûóVƒg“÷œC»m×v7ÒÂMœ–Yx9múÜÞž¨èfðñ ³…y4B†Mµí:œaçáàŸ¿ÚËžŒ…QÆ1~éêÍ6ëm­(ʲ͛>D•ogk›Ó„ÖPÛ¡ô<³=V){ÕúF# Ðh4ÿ2NV5p–Ð4ÈQBVHÏ.¶nO{•„jùîš÷Þz~¾zNË64eêÁü9vô(¢ú\‚è8gÆ5£Ô™Úœ€ò8š0L¹óQÜ5i$Ž&íÁ¾¤Çb¸ï‰—ðî+ P^VD3uCã{<¯ŒZ#[-Ï=ò nƒ;yïm/FæÑƒØIscÓ8™:ã¹—^ã÷Í@Aa²3Ž«‚E¢†1‚EËznt5ëaŸÓTž)²2OÐ{|£\ö‡ zËë5pî~ð1¬Y¿ 3¯M§@ÎÊÉ•dêzþP|÷É›*ÿŽ;áhôvÁUx÷ý%¸c\OžŸc{+ë2oÌZª¹×QB&÷8J(e–‰lwž­½ò£7T¼Ð/TwÆO› Çã=ÒŸ}EE¿°Þˆ—³ˆC•:7Œ~Lú%•5jvÙdž*Ó‹u͘%”1¥Ô‘~ ‹Á}O¾>ó;ó8-÷ wÝ:$ÂÓt$æêá‡Ë'ߌu«¾ÄM“.GY^vCÆfîz¸V ["ªÍ-¹‡¨Ü…y¶Å”»žÄWd¿FrÊÑÆ$x½eŽß8A?i4€F@#ð߈€“,(œŠqIÁ*÷D*RäLbuä•e{r)1Ë¡¥Ž¶øÄŽ£ƒ5qc|=„§¨ýêq$õ…6NzHÛ—çÇÇ' ±];ĵ‰TÓ.‹%Ë\¶(÷¶lÞĽ«‡!N„CÂß¶ºvî ÷ºbìÝŸ í7ëi íéˆvô:ííA56yáÌEÑ,ÈNǶm[±ÿà!”óÈžÀàPtîÖÝ;¶EI^:’dÀž×êª+á‰öm㔥¤ÅÿÉ­•‰ŸìûsâöñìO:Àã•j¹·Ü˜¬žœŸÇñðèÀÀ ž¹ _oem§aÑ"t–´ ›ÿÜÆ=ìEððñETëtìÜ ­Ã¸·z?ÒòËè)ڙ¹ ­câÑ&ÒÚ³iCjʤgç+‡kr´–PÚÓ U)Ü¥3I?‰gŸoþs;²ó ú­Úý®ˆoŠãܻνŽ}î2¥Ó¢ÖÁfsê‘Jé9éwhËɤ #ö?sޤĉüb:ésC aùóŒañüM tÕ^É'¬Ðå1…ó£Håx}¦¹4Æ&¦n4éŒlÝ1Ñ1ˆ‰ió>îe ƒ„‚œL 8Çx~s2229ž(‘¨ñ ‹@dTZ·nÏå¦Î¸²áøádÏ̵cã†íâ•=;þŠú鬼•¥<<e\qã^›q÷á45•™¿·=ë}*È’ñ–Ê­®4×åþRÊG±ñ‰ˆ TcV™Öòôž}¾yËVn)ɇ›§7ÇA4:tä¾Ö¸(.6ÑDV½Õ»¨£Ý"[ÅÒÃ;ufH;š‚ãYtÐå¦ÎJö E‡öñÓ&GÊŽ>ˆãYù4×öà1„•\LãXioœkoÒ9‘š‚M›7ãpj:·I¸ó,ì(´mß];&¢4ç8’S3hlÔáß2íÛÅ)§X‚‘´×ê¯î=ÎË˧_‰*žÁî‹V¡(è@/,ÑÑш‹EHpûEP²ÓŽ`3ÇYòácü–»!$< |—ºuj‡ªÂ8pø8ÇŸ¿ñµð5Dz«Éoan&&F=mÔl|™\½ùž´G oš¼3TsQñ±¿(ò)¨©sBL·Ÿw eKN%û)‰m6Æ CØæÖq‰hÍwRð–±hå¼Ì4âs)‡R™S`¤ñ݈¢öbÓŽ¾M¾ï|ߊ òÔyê™'2ž‘Â’2uÒ)³½QHh›€Ž‰Ð–†¿ Õ/äßúwPþ Û»? ™9<Aöý8ÃÛÛáQ1èÚµ#|¹0åØªñúG# Ðh4ÿ:N+ Kk̹æÿ arîmÃäFÕŠS!Ì Gi)';ꉓTf¶´ÆŘ Kr-'ÄRL&å–œa;ébMTš£!ü¸Rx<# R5¦'‘oˆøwb9ÇIŸ´xVÄ9q¬¡›`9ÜpÒÔPåIwgÉítí“pJ‚ÿqúg,Òã OÕv¶ 8GÓqæEž›,Ž—‚UÖq|XÉuÔp‰ð.A°Yç°[é—%`Ùãn,ÚQg¼mÔWMrÿOÓ—§pVMÍ6±’cÉNÌq`^šÍz¶mm̃áˆJzOޝ;S°ú¨š–-߯X ¯`ô;¯xd–§ÒØ_ùÙiX¶äMÜ5ÿeÄuìÃû¶³ó†cóžwÑ»Ck‡… yOš+.üL9ÏΚ•fp¸9]šC¶“nO‡]Ó4©Câö¨³ùÝ“¾‘ ß09bÒæ·ÀjÄi:ðßáýteÓ4…/Ѭs›†j‡ìÆo¦c~?dV04ç>Ž4¬t±hc ­Ð¸½ÇCså%N‚#þ§6V5úªÐh4Àgœm˜њ üµöX‚µqN¶LÚeB'Z™Œ4 ’.“ G¡MM>8ë04§" 8”“xþ9NP,šgÅŸŽ†´«¹ÉÐQ4,‚§» @œÂ’ÔY KBåS),uÊ$P„Ig¦»™ŽÞ$ÍÂOU'Áj«DYô’° ö§¥OâÍMŠÏ–>+RÕžŠ;mÕ>“–áSêh:y7Úl¦› ’ñ!ôU&КÈó'åQ½ÔL'I½v¾A;ýIóýîˆWS2’Ö>’Ï*gäá8 ¶SÞ—¿:XE³u]Ƕ6ÇGc œó¦Â‡@iåul£Š3q®£Ö{ã׋ðÔg¿#ªcOô v=:*eùÙøæã¥j«Ih›xøÚŒÍw=9íâZ)rò:)^ɳ¹ÖXPß>7+RÈÊ#ï–ÅGs¯es|«JÏð#üœ 3G\…ŒÔÁž6x2Ûàf:'´WCœ¬oXƒ ¯ «,§ªË^þ,oÎ y¥Nƒ'bÈÅ.7÷& e̾ŒOfÀñýT4ÓWR‡üYéÖó_g¬^hHù“ñw`°¹iÚÞ“êÆ‚¢O–0#IRæ¯Ð—2Ò¶¦uK¼ÇøÓæ3'±’GýÅí4xrH0éu4Œ%Ç*MÚÔ´í|–z¬àȧ÷×®‚­ƒE÷lhJ+¿U_Ór†yº~:y¼Y´äjѳ걞›æ9SºÁ«!”e9ÖÕ{cuÈrö·g‰…ðdµÑ²Ji¨¤qß7Ä7¾³hó¢Ivlƒ4Jþ³ÌÅ¥¤•¿iß:.bžnœYüZ´sc<˦L¾šÒräõ¯àc•zMÛiÔaàcÝVy«¬õ“x ÖÕ±Œ¾×h4€F࿳Хig38s™„œ­¦p íSÑ?Uüÿ Mi:>7å£é³cÞ3Ý[‚úÉù %þTôOo§E,› ¯ö4™>s¾SÒ?]Ý tŒ»3òÂl*ôoÓÂg|6x=›:,R%¯UætW‹žu=]^Ç´³ËßXq,/÷gCãLyΔnÔÓ¼¶Ô‘‡FtÌäBqLç>èÙ%!þømí¯öóßy}@tG‡N]qÉ¥—aÄÅCeßÞ }”:ƒÔÓ¨.ÇÄSÜÿÕü§ cþëôÈ3õw|Û+þÜœ-ï’ïlóž’-õN Sæh”pº:-^¬k£‚|8U|C¾3óqfÔþøH=¥®†Zÿ'ßJG*ú^# Ðh4¿3g܃þwf^ó¦ÐüýžX Ô£ª²e¥¥(**BQq‰rn%U7:¦‡‰AA-áϽé*ˆÆUJž­Dg”Ò¿€F@# Ðh4ÿ3hýÿLWê†hþ{Ó] Z8ÿïíC͹F@# Ðh4Àÿ³6qÿŸW¥)h4ç–à}¦vkÁüLét€F@# Ðh4s- Ÿ ½¬Û¨øÿ Á[†5f¢!­q¼~Òh4€F@# Ðœ«hý\íyÝnÀÿ*gvÒõ¿ÊŽ®L# Ðh4€F@#ð7DÀ:»ëoÈšfI# Ðh4€F@# Ðh4çZ@?wúZ·T# Ðh4€F@# ÐhþÆhýoÜ9š5€F@# Ðh4€F@# 8wÐú¹Ó׺¥€F@# Ðh4€F@#ð7F@ èãÎѬi4€F@# Ðh4À¹ƒ€ÐϾÖ-Õh4€F@# Ðh4¿1Z@ÿwŽfM# Ðh4€F@# Ðhδ€~îôµn©F@# Ðh4€F@# ÐüÐú߸s4k€F@# Ðh4€F@#pî  ôs§¯uK5€F@# Ðh4€FàoŒ€ÐÿÆ£YÓh4€F@# Ðh4s- Ÿ;}­[ªÐh4€F@# Ðh4c\φ7›ÍëOò;99óωgSú/Å£Á_ãzëëëMžÿCL“zþ8ü‡h6fù”OÒöœÿ×ûj£ü)ůÕGr•àäì çÓ $+¿ÊìðÓ\[É6[=êëÏŽ¾UÆñªø%O§ãË1ÿ_¹··Ç¤/¼ ÎÄÁþî½³‡Æ¸±Þ_{mÍÞXtå*áLýÔ,‘;’ïûÏ^7±jܾӧŸÍ»ná.í²Þ"«Íúâm1"ï¿É/ü*Xt­ö4Íoõ‹”oÜÎSQÔñ€F@# Ðh4ÿWpâ¤Ñ˜ež¢…2•Iìß=H+çÈÒ,cÒ̉>§àöésÓŒÿFÃh…›>ÿ$ϲˆt•½%¼oÒ¶³¤r6Ùš¶©éóÙÐ<Ë5åß Ò8Oå3uUsåÎ6®¡Ç»¦xŠøŸ[ˆ:‰·fØ£“Ê8°Û4­é³=k3õœ2/ êW‚¯ƒ@k§ÿ¼¾$œJà=]úImj¦ÝB»i>y–¿Á¼é8R ¡iyIi.®¡ÄÉwV~ëÚ(Ç)øn”G?h4€F@# ÐüŸDà´ºãä±0?eåUpu÷@@` <Ü\ì€H>Ç`M®›Æ7—Gâ¬|Í—k¬|v:¢Y³?Õ•¨¡æÍÛÛ[Å;Îs++Êasr—§‡THѶ!4_¯‘.iM땸ºÚj”””ÁÓÇžînÌ,“üšrw:º"h7]Pp,Ó˜Rã§Šò2Ô³->^ž*Aª%—'Õ/‰MÛÜ(MÊK{EX©©(Æ‘c'Ö !>Ôjžl…Ð6Šœ¢(|ùYÇU\¶ñ1påZOiq ‹Káì긹0—ôI“þ:µ5Õ¨¬¬’†È#³q¹Å™ýèå± ÐÓä¾®YÙÙ¨µ¹ $, î§¡¯ˆ*ºb• ÚÔZO=ŠZ?Ä´Sü7m£Ô'ÜXñvŒOÇhƒoÅg'íC9¼Ñ¾]'oû Ã{ ÅË¿íDçöÀºï>ź^¸}ú5ð6åÉÒœ4,|óô3 ƒzÄÙûÅ"'WáIªÏLÝ…ùϼƒÛz]£¹ `n{žƒ ñNOÞŒ/öï?D÷¸p;vV>«Ue…øqÅçøàÓ/QasCMUú ƒ)“®ABT¸ª'ƒÅ*f¿ª:o-YãÈÈ cØ‹ãTKX…­Û7üŒwÞ~Ié…ðññ€›§†Œº®¾-½œ°gó/xwÑ{Øu$“é^påwéüacqÃõW#УŸ½ùÜ;Åu÷#ñ†wÇâOj\ûÅ»ø)3OÍe2Pƒß¿[†ÝyθaÊ5¥/‹_#CÃsQN*–,|ËWoá"3Æ\; Ó&ŽCp Oµˆ%B·U¶¾¦ß|ò>-]Ž:¸ ;§¦ß‚ÉW_†Ð@_ÔVâ“7ŸÃ«w¡CÛvpñliÐ…wy¿tÐh4€F@# 8whV@·&—Ô_b'²WÝð)¾Zõ :ÅF $? ?¬X†­Ûö`0t75!74Õ5uðM š¼7LŒ­ y]c~ïøÜÈ|–‚Z9µ`n² `야2YµhY]$UŠZ¶l‰ž|]/ØKú(}¨ä;v`îzèI¬ÛkNÆYH4Õ5õMø=Y€°êM.õÇpwm9àå„+®¦à×’‚%ƒhu%ˆ0SÇ|žÔÞIYƒoi¯1Ñ6è8“Ž+ã&ýªð)~Œ¦åíý=÷†Ê9dè`Œè×QMáU=$(¹lõul[-<<<ì<õÛPS]ÃNp£ÖßâO®õzTW×R³íF 0W¯4Ýn®Æ0©¨¨PškÇrÂH±©jÒ÷Öþü‚´d,yë[üóû¹¬£¹¹ù¸rÚl ëß iI˜4h$\Z„àÁYWÀ•¹ô¥ªZ3ägÅ‹ŸnÅŠ/Þ@¤Ÿ3µ¥ðh„–4KÞÆQ~þz ¦Ýù-ÖíX‚§|Ì~>\ý‚ðÀ¬+ýº:ÑZ­5j°Æ” ÕµõpG51’±Qg”pÎÅžòÊj¸{R TåÅuî‚]#Œ>5ƪQƒ`!uÖ”fcÑós1îÙÅyAW•xlÿ|º; ·NkÆj+˱tþh3àj•§žýélޝjŽ/7wÃz€©¾¸vüÕiá­òÖÉbëR-$_êꌅªác'`Áºñ¢eXøÄm𢠩ðf~;†õUøê½qíìǰä«U¸ {" 2Žà©Û‡àêGðõ«óÕÂH]ÅM.˜HPfFz­#Ü8N-óòÃ\¹nàL|u ny œë*±gËoølÃ\:ú28çÄ”¾Cqñ3 ñÒœÁp«¯ÁÁÝ›ñþÒŸ1vì(†{`Û—Á§ÅWF¿R·ôW%ž–òF=ô>|ù:§îÛ†>XŒ<õ n~ìÕ¯`C|K?ÃV•K^Áí_§cëâ·áVšŠkú ƒw0ûðê᪟6Ëûž_P‰‰3ïEŸ®‰HOÚ‚A#ÇÃ3p5óCîñ=¸õž•øzÓ'Ø55´¦°‚ªÏzÐW€F@# Ðh4sft΢E¢ªŠ°á§÷ñðËbìE˜€$ GŸ~(,(*Ì ýºŸ¾Ãßü„r w­ÚõÄäI×"&,‡woÁÚ-{‘˜Ø»7nB•—˜¡º¢oÿ 1°KÖQ]’‹O>ø1}/Áà^í–² ,þ©9Epói‰+ÇOÀ¾]PY”ƒ/¿\‰–ÑÑ(;q“²1ãæ[Ð.2€“æ:ÒuAhlG,|lV®^‡Ë‡õŸ2ïŦß~¸»žAm˜¯›Ö¬ÄÒ«PZU‹Èø®¸îºkжU0ÒlÆ$£mLvnùn¡=0aì@•ÅO›Èo-ÚtÅM3o@¤·ò22ž@ók¡ZYŒÕß­ÀŠCu½ z«®¸A¾îHÚ¶ë·îwP;¸9u-0mÆܧ3͆P_YDá}Ô†÷ÀÕ#±%g(!°º¿®^…ü U)øaíz êÝ^\Ä(ÊÍÀ÷+W¡ŠÝ–v( Û÷§ââ+¯ÃøËG"ÀË•q;ñÚ+o¢¸Ö Îjâ»Àøqc%šk†”Ý›ðÙÒ/–[ xà†™3‘䉄Ö-°ú‡¯°íÇ|ü¼a7F]3㯸" “Ο¿¯ÂgË¿Cqe-Âb;aòÄ hÛ:Ä?¤»cã¯{#º'¶VõŒ? îÔæªƒ¯?Œ·6îBùÔ±háÑ =72ˆ.\ãÕ2ì|øY‘æÕ*-Óûª¢\|ÿñÛxñ³…ЭÊõзpÛ¢ï0õšQh੆µ!øX H@ ­–}ò~ÞvÑa-ðù¢·që WØk;¸c>]º ùåp÷ Æ”g¢W»Hü¸t Š|pÕeƒ(üx “ß.û•íqÅÅç+!YL®Å*@¾mëðáö`¬}v 8êáŠö¡~Š/ÅYì‰çØðR[løí‡å8”]‰ÚÒ\¬[·‘ÎÇ Ó&¡]›P8qèg§Ÿ@ûóœQÈ÷âµ×á‚+'ó]¢zžáUËñÛþL½aÂh*>qÖ}2h2þœ8t’>1ÄPë•OOÞ¥„óÜ„‰÷Q4bøÎ½¶t'ÄuÃwã/ǬË`ûo«°-åW¤J°qÃFø¶éŒé7LE·„(Õî< õK?þ;“ó•÷Ä%W\‹Ë†÷‡+1úfÙ(¨sFiÖQü²n+º ¼×OOìýqhï$%^K«ŠÉ7¬ÖѾcŒ¸²~~îØ±m;¶¡7¾œ>mZ(¶ëØC.¹’}C«™šR·½|?‡q;iÇ&¤ ÂÀžUŸÀ\<†‹!Uܶb.$4.ÛðTžwKß}Ÿ¼´=;Ä3!Ͻ·O}µ.‚–Þ.J‹nY\ˆöÒ-³áFºâb¢ñê}“p íŠËÊðòϸÝáÖ~» ‡÷wÄø«G«|ÖØVúG# Ðh4€FàœA Ánױɔ5Tp÷Bûž#ñÄ£ÿÂW?þŒýS“/û>]¸=@MÄ×ÿð]3 ÷Ý35É+±àÍO©‡ä|—Â÷ÌÓ0ïš({".:YIðæG_£ ÒÐÚ³ So½ÁÁ(Ë=ŠfN†S›¸wîý¸¨G8&Ü8û2Ѝ´á‡g§cä°áØ—Vˆ˜èHÖoг^ÑfÂÉ}ÀÒ×>CʱLÕ„’¬T,ÿèMŒ¹x0¼Ù®ík¿ÄÄÙÏ౓0÷žÛávb#濼ÂNmEfR™õĨó Ed€ ~\þ>æ¿ò=®ºž¦ØS'½<Ù¹EÜ:\†÷®ŸŒã¹%ªžŸ¿|—Œ{C/ŸˆiFãÃë¯ÄK‹W¨´Šüt̘9ë“ó0òªëÐ!°Ãn{ ‡³) 3Øj«°åÇ{¸èpÄl‘!6©DÆÈÞl ÙÇSðþÇëqÅ•—c쨋ñÒ«ŸâHF¾J«åžÜψõÔ7W¢c¿a¸æ²˜uÝ,_³E¥Ë„¿}˜4e &]7ëÝ‹·>û^¥epabh×~(ñÅ”)×£S„vîÞ*÷4çÿ†Ç¿XÖúbÒUÃpÓ¤±øyÓ~Unçºo)ð=†—]G,ï€OþN<þò»È)­VZðÚ²üøíIì[˜2¹ç¢á—PWž‡-~EWj½)œKhNk¸ä¹àÝ·?ÀÒÏ>Ãï[vr!È(¯ 8”©¨(En÷vÇEZIˆŒŒOi>÷3—©8KSËšT]u\„ZòÊ<Üðú¸úÚ‰:h"ƒëP!–,‘™ò'n¹a:B; Áý÷ß‹¾1î˜yïSHË+‡ŸG-&L|ÇsJíÜã1÷Úé°ñ½1Z#‹†E€˜nïÜ´ã§ŒCL•Tà¦f¾’Úú¦¡2ï0{^¨Ôáàö•X¯Gµw8&]? IŸßçßùZ©.+À3S'“ŸDD#Äõ.¬ÀŽÇ†*k I— ‹-Vû[„µÆc̃‡ML7àšk¯ÅË~‹YFÁƒÂ¥˜Z‹HäBfµuÈ¢3@7C:¤Ôô˜@IDATV´DH*.¨…;!,Î:ŒU¿n¦ZÞymèC~=ÊŽà¶ÇÞÁš­ÉÚ3eª‘¼ãVdÑÜ]ÂæÕ+°1|0^ìÝ-ýÑ³ß l›=ÛÝ^Š>³°qg b‡w'¿ÂýŠ;0è<ÁŠ5³¬^…ºª œH+B·a±ð°Kp" ™T^#«!0s$ã›í²¹ãÁç?Å­7\£Dv÷ê7póëÛPÊ¢®Ür‘Я?ydë‚3¦Üõ8² Ä£<ç’t¼¼økLºô|û¸ráXëÜ¡+¶R Ñ›1ŒwÝĬ¢¤ýã£áënD¸¸’æ£ù` •É t*Ìxè9Üvóøð)1Ò ;_c æ °4 O.ú «þ˜Pn; èÔÃ;Ç/¶c`çxDâ…Vbúu—*:U¯'áŽãÒÚ+Ð¡ï…øú£·ñÔc÷á{Ëh!C ƒÞCpÓM³pñ=‘ЩÖ¬øOÌóîÉA\\:öÃ-³gáÒaý•Ù}=Mú…ㆠDzñó@Ӕ죰jýq<<©§ÂR¾Ζ©>û†œ†Òb¡!}!&ý•etÊ—%N ]°ªøgSO!ÛIyÿgãj9FÕ˜¯-Ç’WLJµñó{(L;÷ìa#ŽãÒ±W#:” ̯ð6å¸Ðw€F@# Ðh4çÍ èŽ ŠJÀÝóžÅu3îDVN.NOƽ—_ÍÏï»þBø¶ ÁîýûðÉ{ÙÈ£–ÒÉV‹{¨is翘ûeã;'"2ÂÎ…nlûn˜:>›wìE[ÿ2üôãjLyi®ª²° ®á.XýÕgø²¤˜Ž˜i?mÚDø£Šæ§tAØèÖæÔÛ0û¶x¥¬¦‚5l—ŽŸ‰Ý‚)—õÃŽÍ¿á†;®DLˆ7÷çPC掊ìd|üþ[ôP]W[9n}ð>ø¸ÒÜžBT<ÍeÛØù¥iîø;1sç=Ôz†`Í`¯ºf&Œ«–Õ’'ÑÕ”£Ü·?º$ˆÉ«ÂZ·ÇèvîÔörï:%šààz•6àö¤—ùøŽÜoZnh'éÚ­¢Í²2ÉçäÜQ¼ûºŠ|¬_»6»bù§ŸÃ¥ºë? ×~›1q4 ¨¥«©u†¯—eÚë‚èÄnp§çîZ éœlηÃ=¦7zÓüûÀ¡CèÒLJÞèk›UŒq#†(áÜFáÆæì âQåÄ=éÎÞðóõ5[å†È°”r[C÷——¹¢²$Ÿ,Y„¢bz¨F%î|ðŸð4Ôåý 纱Qª¼È¢†p^…¯¿‚q³æá»?ö [¬Œi·œ‰nVe^Úöºt;Ÿûâ]™V‹¾Ûâ²…KpéˆÁˆöQB“UÂÙÙA^¾Ô97vœ)dJ½¥…9XûÓ÷€›/µ²NˆíÜ[ pá7#±M¤QˆÞùé÷‹k="€ÙØ®$Ödã›å£¤ˆc’˜Ü|ûÝðç*€G@®¹mV¯ÿ£ú´Áº_Ö`ò¸[*›­` Z6¾ÜÁÎE,ùð%Mu¥qñ`œ¹.‹Ä€&î|¯x£¨ÔÖÖÁ?À_ ”áëŠp·rT±¡â–Pœá)öLó$O3n»Q‰½€‘s7þRµøQWË}èja„c„~"Jò+¹ƒºª‚܈”ÉÿݽýpœÞÉų¼„:Öífz9/.,‚»Oåͽ¶¦-ýáb6ÄŸ )×èCòÅp¥5‰õÄú÷oŠPÇñä•0Û†CÚ"k a ZÒÓ¾ëölTUÖÁ××£¯›A#Æ"=óò¹ˆ´zù{9ˆÚû¤o¸µ CÇLBoú™H?‘…ü¼üþÃg¸œ¾þ8~ Ä©N-Ü(4ù>É>{8Q:gرéw´<ïBtŒ§æšÁh¥Üñ\s¾'ò'k}v°åÖìÉåîåŸÐÆå¥]œ8>%ƒ1Æyc Ûò\_U¢,5nš¿ìý† †E-+«¦_ñ{ÀÞãâ”±O^èè Ðh4€F@#pî!Ь€nhÏ©¹ãÑLe5ð÷÷CDëõ×½çyðý¢·¼· 7È<µqéÜ1a˜öÄA””w£f/‹B;…£®©M¥¤«wF]{#¯þn™Aðë;{9cò2Qíß¹fÞ~÷n»r2OÍ'ÌnÔl—dƒ‹7½+'gœû2^&Ý–¢IÌÜ Y.è5`–¬ù¿¬^‹;Ò0fÖt¥AÍ_UY&úžK~GZG …2Iö Ó´¤#4¥õ ¿Ô¤‰nQÌdÛ´ï…W?øsŸÉäñX;0ü²Ëá¶£{¶¦Fµ…š„»¸²myIÈ碂ªèyw’˜æSà¢æMލ2´½œÈó¬1Ÿ \–4J›ð ZcËñ–A§A|ÈLMÆê_wàîEÞ‰cpróÂô{nÁËß­ÂÑ»oD41¢´¬ˆYÄÁãYª˜½Þ¢Œˆ,Næ<•“1ƒ&ß¹s¡ƒ‡+…Ȫ²,ô9÷O¹LaiS– ìsn¶/Ë9„VÿIó§«ýÖÒ_²/×VS†o¸OüÙO¶asRzSà²h‹€(&ÊbÒ¯„"Ž#ÁÄ•‹FpE<=]·©ý‹"E‰sÂæ§1Ç™—‡jZúr „‹ Q}ñʽm§"ÔØœ„£Y9VU`_º¹pŸ¾Ê8–¹Çº}ïÁ˜=g¶ZÀ¨a?I·ñ¢Â€áWâû?ǧŸÕ`q(î—“ ¤½²x£Æ)ŸÅÊÃ…Bz…ÒtK‰¤°Ý2É陨å½%ÖÔ”#eïa â"’O:`#0Ê´\„@7gwe²®†ññná§Þ9¡ »¶ÿ‰.áÎØŸ¾Ûw¤þö¤A^˜*Õˆ#@/Oeu!%ÔKD¬åÑ*×Þ€I ¢O¢z÷$K9÷éùú¿pÁ‚Ÿ” *ÎeÑD,$T•äaÓæÃ¸Ã›G”•jµ'ϸñ\\“÷Zà烶*Æ1&«\<ÝàKo좫¯®,E½«üƒBÔŸäéѾ>¥Ò²rÐ->”ßgøqßx{þIèÝ%ß=¹)©9è×6ˆûÏýàÅ£Ò”À,¸›º¾ŒÂþ?`Äø‡9N$µÁÞ‡¼ûøp‘@4“Ù>yo…]WŽ1oéæ^²y4uZñc,;.tDèç)&óÜ–Ï1éÂ÷C¾I2~«K ð颗ðñ¶Z$ÿíZǨI^YŠó;i¿¼¤è Ðh4€F@#p."`MEµ]9¶bLuQ6Þx|.Þþä+$>Š'NààÞ­ølñ›ôàÞÑqqèÚ­î|ü5lÙw„^®+qüÐ^ü°êwP®§6½{’Ó• §*0÷avïG§ZŸÇMw<ˆá—Œ@¤¿¡qíÔc0~_ü¾Y½ùEe(ÊËÄ/kV#ùx¾ÒJ¥o^IOÛ†~T&¾§ºæþÍèvÝ00¶ £éõy—{ô꜠²ºûøcèU1ç¾—±e×Aî]­Âñ”}Xýó/(¡M·ìsÿ~WºÝ„×™&Ó¿¯þ ÷¤"*&ݺwÇeT|ÉžXÁ(ë÷ß•&Ù™{ƒ/ÎýÙ/¼”Œ\ç¦áã·žBÌeÃy¼—åæÎ2ÎlFäø·£¶£²Š Ése!>|ýq,þz­]û+‹†Ì$í¤wò•Ÿ¡¨'…áûîÆwÝÛo»÷?øîý?ü¾•‚Ÿ‚‚œ±mû.ú (ÀÎõ?âêYaø:W£pZY&{këÕÛÔäÝøü½‡‘V\F\ÝÐ}ÀxéÞ©øö—­tþ—M¿¯Á/lE9eÖ’ÌTzh7¥QR(+ÌFvA1<)à u9œú4Íì“–é‡öËßPÄv¥ìÝŽ,ÿóнC,Kq,PB««*Å;Ï>€±SïÂÕ“®A°gÏæÞƒÝû ”ÚSú׿i/á ú Ï98q¿ð¯t¶fýdò\ó#wáUzAïÙ»/"Zж ŸÑãø‚7>gûéYŸZçÁ£Çá†ÇÞÀÁ´:ñKÁ¢—°!2¿·âC´™"|[çZˆDoø,ÿ™¹ytføž¸÷%¶Çè›î‡â“wbÍo›èÔ«y™4Õ^óŸÈQôb;ô@ßVåtx âÏ¿í¢¹˜Áý¬qêâîI+ .¥¦Ó—=ÛædäˆåÐö¥ °øó•È¢‡ûÌôÃXòö‹ØÚå:îS´†&úÜ–PAk !ÌPÃ…³­ûø^‘„ìçßÏ=ÕÆŽyàWÑ6_ó4ÞúéV>8ÃûtÀ¦ýÇYÊ8 f$|—“¦ŽN]“x,<¾òàõÙw~Þ¸“È qìÐ><ýÙø—cÌóbe±Ï^ì?’ެ´£Xüúó(é?”gÇ·F«6‰è±o9>ýz²ò QAõßÖbûÞT¶Û¥Ù‡è QÁŒP]QŒ9´fq©§ÃÉ¥¸ç‘g±mOÒÒ3vüVБھžãÑ1–Î×,Ç]sçóý݇ãiiÈH?†•_}ßБZñH6§EYIزm'öHAÇ×¶í;v"“ ›‘R>ÝÚ«ŠE³. bå¥Ü¯Ï6L>„}ɱ?5Mµ[ÐêË ñÁ óè¯áöTB¢1êâxlá‡8Æ… ‡÷àÕù·bØÐó¹hÂïýX,~~2¿Qõå¹\›È­aÒø1ðª/ž=»±')EñÀøn·ô¥5b Lô¯F@# Ðh4À¹‰€¥šlÔzK¨ðô ¤å¶Ü :_ö¾ˆfÞ-°ŸÚ¹NC&áÎÉcàM-ùEWÍÄ«/cúõ×cð€^8¸õ{Ä Ÿƒá#†ÂÃÇôídKEÁ"b0fò³øÍiúv7Ž Ú÷„_¾ýóçÏÆê•ƒàU}«Žzâë÷{S3ì†v£¦Q£k™p³€%±˜Ü+%ï=Z„á‘ã€W—aʘሒ]² Ô<^2þF¼UX‰i<Ç]&ÕɾEìˆY4ì"¡å‡)¶§6ÖX·mrYÎQŒ¼è~Üvçh:x:†è›à’þÝá†|Ä];^4—põÌ‘öÔ“¸÷®{âU…¬ºD<ÿÈt%Ù¨íîß#‘Zt#¯3MÚ{ÑsµuT…Š£{W£Ú¥½]°SDÍŸšÒ<$S;8gâÍ4­–H™ÌS›‰>‰ÍÇ£ 4 -#"0{ÊC8të…ØúÛ¯˜÷âbŒ¾°'œh¢B—ø–HìÖ‡˜ (RgP›vàæ}ÅÙ°+nÀ":H›qý 6û×,F— O OߨHoã#éÈ.¼…ô—Áoe9…Ãý‡ÑÌ8ús æÿ¸ Ù©¨èŸx˜žô=ºÿ¬Îí{dM€ö×YGwàš›ïÆô™Ã‘–´¾ £ðØìÉPk:u²À²닜p'âÅņ‘ãoÂÉó0çž9B*"ÇáÑI£áÉ.m¶hç¥dDõ–Qmñä÷Ÿb&½ŒoøþJ$Л«á#n˜`w8Š{¢ßÄôQ°ò‚¡(ÏH¢3½<½€&ä n~!kW¢å[{0bàyܯˆ+Í©¤Ë»$‚´³³'ºöîWžû3¯‹Ö-½T| ÷T¯ýr1yønlY=uÅé8^„_^}ˆ^çEs^†ðèî¨ ¡µ†<|ýpÉànÊ*ƒæè=ñzúðæñÇðÞÂ÷ðÞŠ÷ÑO¥®ÃSwoÁK¿BÛ{o¢‡q7䦊ϿÇÜïUÔd¼¼7”åŒG L¹óqؼ^Ám³nÅС½‘qp;ʺ`Ó÷w¡]”˜fÛhêîïÎC WjÒ R‘V/ž¾ -=‰nT;¼·á<6ï¸ù—ïåoÃk?ĪO+‹ðö}ÑÒÏÚ6Z„¢‚§Ò°·‰N@êÓ¯bæ¯?¢'ŠåLF©/Vý‹ãƒ Gó[¡"ùž‚°ýz´GeaRrœ±bÍûèÌSÐJ×çJ¬]¹ ó’7Ðj¡©ô€?zä0TQpï7|¢#Œ-æÒÒîÆo¼…ܪzrŒüó‘G1nò\1| ׯjqpã—(îÓš{ÌÅzÁãg=Œ”Gçãî9sàZž€O`Ú•©q%ÖG¶,G!¢Õs- ?Kx¢ÂÖŸ¿ÂOË)Ô§@› ÆâéGï§F>S¶S ªôF@# Ðh4À9€'å"=Ôd]Jjè òóK­lÏöi@ÏØtRF¡ÏÊcAéØ1WÀ—éááðá>ä jm˨ù  £(ãìhDh¡¢©¬˜Úç:Ò¼h3-ZÂH~v2²réËˡܟÈã“h,ÚAþ† [Î}¹Ü0ì϶ ªlQ ÏR—¶Pø%ÆEE…4ýõ€ _5±WÍ6ÖÕT"ZkÁÖ›ùE{/Â…ì[.£©m-žUÒSü¼;îÁÅ·ÝÞ<Ö®†öüQ­Z«½äŠ5uÇŽPK\‚°¨VhÁ½´â(ÍÏß_ñdã‘i'ÒÓÙ‡eÄ,~¹QK¿l#ù”zE0+*(àm7µíA]9j-íØqä±=ž>-Ÿ‹´¿`èsñùO+Ð+>ŒÆ9Þ⼫¸¨ˆù6Ù–Ù/Ü¿+gØ{rL }ºÔB@ç±éÇljÏ¥ï]©µoÕª ü} SbÁ¡„¸ÕÒÛ|·aX[ÄÑÙÑ£©ÔÇ»!&&~†ö¼é±Æ ô£‡‘]XŽˆ¨(Žmšƒ;¹¡…HáAÚ‘F ùpãQaáád?I¼,ZÔðÜòÂ’röo ÚÒÑ@WÊ’:…>Y Åž›¯ìŠÞ³¿ÄìñØb”—kΉtœÈ¤VÞÍ‘­Z!˜íWA4ÂÜû-c# …1žd¡£´¼ A4•æ ùì£-i‰Q¦ÞÁаPj£㨢„œü„Ð[¸7Œòâ\¼µÓ _¼ñZzÉ9èofe[\À`Q9Y êœüB.´ù£5yjácà.y—½öO¬Ëó­S¯† ÷íûÑz!$ÐØò¡0OIAŽÓ|¿žý†Ðà–Ôã×£ /.žÞhÁE ò~ˆgþ@â'l—ó=ÊÍ¥%JIæ¼Æ…§–þ ½XƒäÐÚ¡ˆ×¹%!$<¨›´d¬ÒÊÅ´NaûÄçCú¾M7` ^çq‡Ãé P$ fèR?·¦äcu¾<#ªè7›GÒI^!éÙ\ÜÕ˜7–2@y8’z õ.žˆ‰…¿‰Ð-2ó˘´›Bú.¨©©U[fÔâ'¢V‚ØNµ•ªÏüè…Þ­á›*¸è Ðh4€F@#pî!pJ] h*h8Âc¥YWÇ´æÊ:æs¼wÌÛ4¾)MëùLùš¦;>[{ƒ-ZÖÕ1Äɳ2oD0”=ÅVPyù &ßV¤\ICÁ†0#¡¹z•cKËkàd^$&38–7YT)…éɸ¼U"ß—Š ÔyïFSòfäµ±æàp«è8â!m㟱WÛ!#oÿüùkl:R‰)“ÇCü¥ }¡àØžæž%N©ÚdĦ‘Óü%aYÐp€Ñž,eñµ'˜7gâ½iù¦ÏBæÿcï;À«*¶¶ßôÞ ¤C’@è½7)‚…¢Ø@EPì],¨X/^»b¯¨ ŠJ‘Þ{IH é¤÷^N²ÿµfŸ}Î>‡€ÞûÝ{ï÷ÍhÎÞ{Êš5ïÌæÙ„^FìŽlý'ÎŖé˜@gÉ)ÒÀ1%sýæ ¥KÇißœC»uÒƒ¾m~û’ŒöÍǶãd±¾/“Tª›&Ì£K-Í[¿µÉM_õù?}v9ŽÛ÷ÄêG›³0Î ²±#­å ôcŠ¿¨_.Ýjk*m®WÜ]>=÷ì¬ß–„ënœÚŠ®õkGýell‡é™nT\/Ká­á /¹ûËêr¹‚2M" H$‰€Dà —%èÜJ&£Â 2ÝóǾö©'füáÎdÍ:]‹g#iÖŸÕü̲Øbµž8q§ bA÷L¬¸.ªY]¢{=á½TOhu3‘¶&æ4Ëö¨meÎBõ¾T^þøf#r¼=XÓ‡õÖ®[ðŠÛœÉHš{QYj3[£Ìz\5YfL.n °âs´µU8u* ¡=bè+ »ñy_­í,ƒÿ´À÷Œ1ëÏ:éû™óhñ¢/,Ú¨º5ÓôìömCýêH†÷,Õ)úÝ"R}P1§íàl‹4bƒrD~£®jN³nLÚÄJ<å·Õ°å8[Oõ´¶hå­¯—ÂÆÔF£ÞÚøýdì[–¥a§µÁZ¾Èc+í- 8r`?Ú<:c`boa°Ï²Æ1Ï}ÃG´‡Ç•ylh˜ ÷`FÝT]Õ¶ëõ`< ZÉmÂqª·ÉÙƒ$ÀDkc #}-t¢:¸Íb¼€ô¤“¨%÷o½{÷¢} T/åÑ¿ç*¦üŽS9JçþPõâEiëæ±¬ÖÅjRŸ“nŸè?ª‹åhmçªÍrY%Ay^¼;C×(ÎÆ^ ø}p;At‰t«á©eÙ&L»=TËþ\@m¯ª™úkcœÆúSy‘Ÿž-}²›káû 1^õ}fÎ!ï$‰€D@" Hþ¯!ð‡]DýPÖžÔ«J ,ãþ?u¤'ëôguÕÊs~ý=Ë`®ÀûÿhÐäX—û#´r”ÏZ.VôÊiòµòÖùÿ(Ë©y¸.MŠùúgÊ›r¸–¤Ê,ÐZŽVÆZ_-^»Z—³ÌOõé*´LÓ$X^­åÈí¶N·–Ééú8ëgËÚþµOÖuY?ÿ#µý³ïÁ?RÇ¿//3ê·_R²D@" H$‰€DàŸFà :È[®íòÿOkûOTÛÀœõÏ–_DBA!™øþ“züóÅÔ>¸|y•pêÛx¹vwÔj~•tŠ{«¶ê˨y;ÆT[}µÞq)ýõrµ<ÅiiæÚQySu®@T78Ùö¥úÖTVW¹(CÏŒ¹z¯b§e¹tË|ZþÿÄU¯ó¢¾¿J¼ËAt±qÇÈ_E/©‡D@" H$‰€D@@G‡_MéÁ`ÃÆZhë²AïæŒ¿x)p>u›/«qæx&Cœnù' ´4-ŽŸ5’ggY^-£•¸ü• ”F¢¬ë"ÅTÝŒ"ØÈ”º]_A`«$CsBÂ@È¡|B7cþ‹ä]^•S-Ûkă‘˳šºFB  %¶–‚¸ jy¡™ÜDZOx}»õù¹>Nã` ã{¼ý—kUó«ý©µµÓ·8ŽËrPóª2´8‘`Lãm÷¢ j›6ÞÖÜAÐër©º:(fÅ2Ô?5Z/³µ¥™|¦›]óq+ÆúÓ Xññµ½,Ç,Cä¥G½<¡#ák*cÄDŃ·ož,…ã4ªT5ŽûÈ:^Kÿw^µ:EÛÿ§1ÿŸŠùO•Wº˜ü§*•õH$‰€D@" HþA:t³Æ24RÂgWOÜ‹Ÿ6þ†üò:x’µáî½â0jä(ÄD…qFQ¥vÞZ_V#š,‘ÑøcäI¦zD4ôÓJvÌäOÍ«®: ’ÁK'Ì,_AúéƒØ²ó°4ÎäÓ‘\½%$Bÿ„XEs]a#Qc‰-5%øäƒ5è6üŒÔ{6~ˆƒÝðô]³È—y9ù.ÎBd¯Þðe+âÆhmÔI·¼ÍœÏ¥Ȳöžß·âÔ¹LØ;‘q*"ª-Íð ê‰k¯ž*¬©S‹ÍgÅi‚tV†:ò¥¾ n½fâÆC(Ž,‹3>ôgY'ǩؔ]8uk¿Å²TÝ©K4®ºf6†ôéi"Š\N+_KVß·lú»öG5YËîÚ«?®s5b#CTùíÍ8¼ëw|ýÝ”5(=y®š6Üy9‹ í|îþ¿¢Ú6SFõ¥vóÄŠj8®½µÇîÁ¯¿mÁ‰ässÕ",ž?•ú@7¶´¶ÅðC»·àÛ~DY£ÆLš+§M‚¯›г’°–|”ìÝÈÂ7cjOý èÓ‡|¼€›ƒ:Ǥa¢µ¯¹¶[Y‡7ï„­['̼v.Æ @–ÌÕ‘“> ß~õ Ž’Q½ ƒ0oÎ5ˆîÄS!ôãi|ßT[†m[~ÅŽ=GPRQà.1¸vîlô‰4Ú 0àô¡Ýøú›uÈ)mÀб“píÌ©èäënÂ\#šlíù?uý—ÖK˜èßÁÿTd=‰€D@" H$ÿÍt¼‚n$ŸÜð}›×¢ßˆ p ‰Á\"$Ã{á§¿?¯~ÜNN¸(ð‡º‘Ìð#~f¢¤ët‘‡‰FÐŒ5r®•ù„|s ËÒµ&UdÙ‹»î^{wo„‡… äÜ! ï‡]GRÍBŒwšŽ<¹ÀHù‘Ë5Í?yuyÒòËEZuq–ι ùÕ â™•0·PÒ5ÙÔþvr‘¶õË7ðøO‡àáíG®²<àN®â<\]LíÐÃÇÆÕD •ç ¹É¨k(‹(Ñv+l™sùÚ’,<µd&6­Çmw,A”g=†õ‹É9ª<Ö–ä•_%9gñÓ¦Ýè;r2Þ|=J}ƒÁ·=…¬Òz‘~zßf ; ݇LÁ‚ë¦âåy3ðþw›ÁΫ˜œg¦ÇG*a”'é|±(Ã+Ò‚¸¹ÿé³71pä$Ïë;ÁÞ‚¼«ùW%Â|wjÿoK$‰€D@" H$F Ãtqn©Ä¦ïÞƒ/ŽG–Î7!6eê •Ö˜æù”ãØ¹ûªZÐ5:cG ‡·›# ²Î!-·áᕚŠUq;t'Kã=»ÒJ-Ilo®Ã¾=ûàÖ ñ=ÃQWQˆß·þŽÌüxøaäè1èÙ%ˆ|ŒWâðÑSð Fcy!Òó*1|ì„ú¹©d˜…‘—eÞI}Í¢g°€H'{îž9q(ÎÿþÎe`âd¤CAµ-†é {b¶ÕEy8~&±†!ÈsHxùÙv¡’ ì]àmÑ>º7R{~ÿe=Îùú ¦ß ÄPRíGV0zÄ`¸²ÿl«I¶.­Ø;aÕ=KpÓÌ‘¬¤Ehm¨Æ¾ÝÛq25 ö.^<|$ú÷î.ˆ¢·8JÈ}Úæ_ª–žž}1aÌ0x:“ÝlQ‰2N.$ÓêíÛÙQHïaDuòÀÈþ1¨ÈNÁW¶c`ï[¨­ªnšÅùàð÷·“/jÕ·v¯p?¼Ý}²óG×'l]÷9=ý.Ý0‹z X³á} úÌ™6]Üh@-ô;bƘx¸8©ÖÚÅÊ3åÍ8µ÷Üú.¶IÃøþ=tíåInaB;„ë–:lþáK,yþc,º~¦¨ëÍõïcâóŸaÞ̱鉛ö4É0Ô—àІ1:^NêÄJI^&LE<õaDgoÔåâóÕbÍÏû1sí>Àp¼•vßüºS‡Çá|Òa|º{42¾¿ݨ-½©íûöÆÁ“·àš1}`«4áØÞý¨uðŰ}ÉJ9àE;^çc1ÁÂÊ$F‡ãàG=‘’ñ4â»bï¦0쮕X¶ø¸‘Zþo¬G숱`ö Äuñ»h\° $‰€D@" H$‰€ŽWÐÙ¥lvöð î†mû")=•UÕh1´ÃÕÓ‘ݺ2•vl'î½s9‘ôŽî‚o_YŒ÷Öþ&ê(Ï;‡±£Gàæ%÷áËõ¿"5ýÖ¼õ<ÞûêÔ†óÒObä„ɨj%[XýÌCøép&z÷I@õù}¸ëÑçq¡†Ömi«ý»KÆ ¶G"ÞþðSüºs*jiÅÓ"(°wpDNV&NŸ>‹Â صk'Ò½gK«X‘óÈ®uxã“­h3.’Vä§cÑ‚ETG qò&|ôòõØ}2›ò´ŠÍ‹©m­-¨,+ ¸äegátr j›…¼Ö`êøÐЬžsÖVåµÙ ®ÆÙÅçÏ¥á|N>²Î§#5-54™C¾ýðU¼üéDEÇÁÝP‚›Þƒc´"íà W»f<}ßBl;t õµ¥¸æŠ1øè‡ßÉ1“‘ä ²+Ô@Me%Çv‡¯·‡áäÁ&âLêYÔ¶ªå_^mg]Ü<9çóôêëjÄÕÛ‹Ê·T#·¨ƒûÄ‹>æ„®¤_ÿú (£z8D÷Ž[n¿Ó&SÛBqêN„6œ>~³Æ‘Ð"løþ[¬ß¸eÕœƒòuQ/hl¨ENv †Ð„‚qïºFÅ¡oK.ŠÊTøü½ön^‡ÕÙ0kòšŽQCqv*f̘†óh¦„BeEÊ”!4»ªh*!q(2/¢ªžú²<³–\ÎÞ®"Ý3 £¯Mzäªù•¬s<žùú7±c€#\<9×ðj¨¯C K__oJmB6MŒÐOsÎÙ“û¶ ¸¬ŒÅp06Y<ˉ€D@" H$‰€D@"`@‡+èb…“Ø„®œ·§½ñ=ºbÒŒkÑ«g$‚iS'ÂÇ© ß|° FÍÆü9WÁßÕN-Å3ëEÌŸ5.®®pG0žZ±Ãúô‚‹£=N$Ðvã[Vã–f#.ܶýŒ™w¿„!½Ãpâ÷/ðøê4K‰Q¡ˆôÇÇ‘}±wá\58ÞÁ½ñÌÒGp×üYp£ÕjØÕ'Ö©Î)´ÃÑÉG¶|‚']ëáî`ÀîïÖ£}Q]Í1®ÞèìãªñgØÚ“/ç¾±°§•nž1tNZ¥~¼]»¦®Nnî?c.¦ÿx7ßqÂü™åŠü#ç,Ãî)ípsRé¥y»µ*³¹º{bÅC·#ãàÕh(ÍĶ\oüís„"7Üý,~Ú} WŒˆG}Y/œÚü ¾Ûv‰]'Â@Ûãï]õV>p½ð[Ý7²¦¬þ³ˆ¨Gø8 ¢Í;×mH÷ÈèX¼i9¾¹bfŒî‹–º2ìÝGDÙ×¼ú,¦µÛÉpMhØÛ¡©º/=<sY˜H?4—碖¶º;::iEh¯…=kÐd4¸&È Z+óW[jÌJgÏêªqdýØßöØúÕ­x!r>¾|c%ºù ½yµƒÁЈêÖÚ}`Šö„»m“-M4‰A ÌÙSŸTf`Õò;ðÖê]´ŠïN)Ü6éÞÛ·íDOZ çÐJµÎNp¶7kæà`‡Öºf!³¡ªŽ&(üaÓnL'üìép|µEH´sÁÜ÷ãJ{/± ƒe²MögmO8´7Uâ½—…ï`µ4±T]Z‹'3^ Mn997£‘dÊ H$‰€D@" Hþ fVd‘›‰‹J~"ã†àooÀçÒ‘{áÎ%Á³§aÕGpËñh#Ã]%¹™øêƒ7QG¤ªžV'ÇN¡ê6aÍzâ¼™èß/.ÆåÑØ>19,™¶•§#Ú¯ 6oø ×<ú“ØF\x! HÄΟÖbscìl ðìÕ®N6hn%òdç‡Ã“¡2Þ‚nTmmÑÜÔ€Á“bÕ "ÀÛ†W^ÃÞŸcâ‚ǹý=¸¸Ð–x¶Ô΋²¤/>ÇÍåÕ@mçefë@LÛžr)mêJ9“5[²T›€(c^‹ííFÏ’êª+ñÀ«c)å¶%2ÚÒn‹àÎ8½ã"\BpòÐïHÞ»DBs[zcˆ‹3Øúx›#ºE„ rÎUÄÆõÅp·dÝÎÁAç ©Õw(~ýú]<ôäÝØ¶q(Âü=pà›¯xûj83™ZEº1AfÒÛXS„î‹w'ãì’ù`ŠYOmtò0µð(AÑLPˆ¬ ìŒm)„eeI–¬x>x+<\l1wÖdÌî–€Mó®E÷«Æu6"Nçþ‰ÊÒ®s°}ÆÖÎxߎH1†ÀÎ_¾AJÜb|4fZM0ðßÎ!CZ°µq€µÙB&éå@¤™''lɰ«¬öºù|¸M ˆ@¸÷Nä­ñjà~Uñ²§•xgå=xòý&?·>´ÿ½­©•ðòcI+£J§#æy'H$‰€D@" H.‹À%ººÊÊÖ²Û‰@yùaÿ±¨kç!±g(Z»Sw‡ƒ ÷93†ÒÊi=;a9@ó÷qÇ rßEfËÑØØowG±­ÜÑ;3o~¿îÚ ïÚ ÔOÇàxõœrsSF%ÄcÚU³i{w m6¸áæÛá×¹šJóh×ÍDÜ90ÉVˆigªE$‘Î6Ò9<"1Ñ‘¦-ÓWL¿Ý–¼€¼¢ ÊFeèp:-¨ŠàBº:ØjdQ5x§qP¢r&ùì~ÍÖÑ™V‘©0v#f̫眢JanÜJ[äC#º ¬s€EvÙåHÖÈ'M¹á>N´MÞ€ëæß/8ÚÖ‘{3…¶L›)Ë©mn%Ìu««áDÜ0eî" xhÑÖ¾­«N‚}H(Ü,zY%›L´kKsðÆó"Ã}<ò|!FÒïìæ /?wÚ=PkÒ×ÐЀÒ&7¸ëVÕmh·‚£ƒèX)ÐJ¸3aêN[™œsŠì…)wÎBiE­Øž¯wvåäàJÖÚíQYc>®ÐL;*Úìi•[]‘f$K³“ñÌmO`Õ–#ò¢xÚöÎVòs¢m‚ÄÅÙ.õ¥¨e Œ¡¾¡$ÏÕÃn>>(,.F»q¶Á–&[ªKKÑÏÃØk<Ôþc¢Ím 4ÕcÍêç±ñ¼Îl Ý^"ÍŽÚëíç…*ã1Žl§±\Za€‡³:™ÄRÌ=)ŠÉ‰€D@" H$‰€D@"`@‡œÉ(‡æê|ýá;Øyè¤pÅÕB«ØõÕ¥HK>‰®‘a´ Šàì<šLVÓ}).Éh[Iq ÄH˜[6I׈«ºúlƒ#'¢ñÄ›˜9g­¶9 T •…w#këŸ}Іv„†E K—4Ñv骪FØ!n"ƒjZ`™ÚÆv-ŽÉ©¼‚–NmIÇ7¤kæõ|¼o`'ÄF5b=õ3o’o¦-üß~²zѱÚ½Ú;?{GÈ8 ‡”ã‡ñÒ§¿Óñ®â´í~?½Ø´û ZŒþå+‹²±êÑ;q×gxêá¥õvDyY)ªØ‚'âz÷Åãï~Œ"£ îØ‚è‰ðÐΪLá7>Ê‹D@" H$‰€D@" °BÀbmUKÓˆ¯=­–VçžÀ‹—à†[— +¹Ê:±g#²lcñþëWÁ‡¬žO»n)ßÂ†íÆƒ³FàÔŽQu;Ö¿õ˜Ø]^Ûd¤ª*1ä:‚ºöÀÈQÓñÙ–÷1¬±½ãû ›ŒÏÞHÁØ,}ð 8Õgã•·Ná@Êoèl‡º²|±Ëy; ]qàçwñ¸O ¼hûq^f ²Z<°~ÛJDzÁ­w?L®½W\ÛDF¼"q|Ãj l–Ê\‰¼«i¥ßHÐéŒu‹qK{@pn¾o>fßtf ‰Ãu‹–…òûíS,x¶¥Õä“ÛÙNœ¯Öȧ¦c+Yªç Ö½É7o•çÖ+[Xƒ ãúã†Å÷ «· žyñu|»ã"Fõ¢­ývxhéÕ@õ (Í8Œ·vTc­tû:Ó̇‘ä²5áƒÞ¶¿­ûvœ‚CK)>þ! ?íüý¢‚E]ÌÊÙ>oÕæpúàn¼ùÃQ$ÎìŽÏÉ]ZIQr +pÝbÑ챘xÕMøùÇi¸c©-‚Y¯Ÿ±qï:SÎ6ÍÛqbïÏøüÛ_pxÏÔ{æ¢*÷®}FöëAnù&ãõ'æ`øÌxá¶IØûãXüÜ;˜<8^ÔÍ­ç ž±µuÂäkbëoWañòfÄùµã¹—·à×}? €ü sÈJ:„…¾…Ÿ÷Ù9 ‚b"F[1/É=‹y×ÏÆŽcYèê '¯ ,¼ÿuL9†Š ´çÇîö)øþÊ1B^—˜xïù{1îê[ñ삱X·ú)<ñÆèÓE¤ƒŒÄý¶f~÷yF©p$ÈÒOÁŠ·Ö!dÜt|÷ÉÛø¨¢Ii9˜sÛX¶àJŒž:wü¼ ÉFÁ¸¸@<õìKøâ—}ˆðçÉ'žPEË_‰€D@" H$‰€D@"p)lˆä¨lÑ*Ç2©h¬­BNN é\q#ír÷ôATÏhZ9gëÕj¨­,FÊ™T”Ój¢;aëÒ­;ƒüQ]^ŒâŠ:DDv…“êæ‹¤ ¹åÅù(%Ëé]ºt3­jªdÎ “‘±sgS“_L[Ê]ŽîÝ#aO«¨™™¹ð¡³Æþ^d LSP¨ÀM`DçŸK ‘_XJÛãé29:ÌŒ€ PÚ^N†ÝDhG>¹K;™” w¿t ¤Uò6GÀ“v#geœ'‚×™Úç…âü,Ôµ9!2"XH¯*+DjjÛlÑ36ŽVx}Pœ—*Úußµk8éL·Fµ+¯žç’åw;7„©[ÜUÄ«ÈtV?;ãÒÏçЖk{t¦öFÑÖh[äçæ¢²ºå¥Å´µ]A¯ØxDE‰VhòÍ8´#=5 ©ç²áNþÖ»u`­>óе”¢¤¼‚ °©¶x»8Ÿ«÷¦£ Q´sÑ,-ÈERòª»¬Ì÷FtTì8zQ^– ô®nndlvý:ZB~Ê94ÕUáLRYƒ/Caמ®Ž&|D&]–d#)‰ê2Ø {ÏXDw‹0w/'Wx… èE†Í“ uUe´k¢ A´ë›¶°«² ÈN?‹”´ódFß½ãÞ™WÿÕ±ÒT_Mú¦6”!0¤ éK[ò[õòr²ÐB»º„‡Š6W•— ¨˜ÆaÔÜÔL /Ú1àéÛ Ý¨ï©ëéì}á•LïA3Y¢FL¯îtT‡êÅø«JÊ_‰€D@" H$‰€D@"`Fà’]#2æ¬ß±1/u«ùÅiÖåÍ$…Î@‹mÃæ2Zšv5§t|w©|Mï¸ÑJÒ×ò̺eN}y‹:¨œB³‚›êŠX䡸?z¦ æmä׉6ÒH}ŒùÞºk¬Í9/Ö‰Ó¬ÔÐg÷Ë7gá4ža±ÆBË!Ò)•²\:’ÛQœVP•ÅÕ™…Yçïè™ËëËhòøÚ‘L-]•ÅOæú[µÉú8­„v½xL›R¨ð¥tÑòÈ«D@" H$‰€D@" `.CÐ)•È“Z&,|¶›“1ñ¸ô3- šÙ1Y².'„ÓêgÚ\?s=ÌÑ„*”çr„G“«ÉÓ®ª ³Ån½î,\¤Sf.ÏAK×î¹-bBBGÞ.Î#Š^ô£—iÈ[Ô¹JÞòÍA¬úõÑÚ¢¥™±è˜,²Ɖš&OD„mñ£é$")¿ÚjµÝÜ.M†V·^/.cQ^<«u‹²Œm_ç{ #µ—Ò[%Áú1Æu¨²Tá—k^­ŒŠãªÖi‰Ýë§ÉÔËc8hiâÚ(&}4Ì©Õ.àCòjûE>ù#H$‰€D@" HþËt.l$o)a¢‘½l-ã´tŽã?am[ŸùïU¦—õ‡EþÁ š¾š®ÖÅMº“¥xæ«Zø£rZ¾ôz9¹—K³¨ÇØWw©v]œŸ©¹F¤Ù1™J8µ:Mù¹ßM–$U«K+cýL¹y‰Ài§«iÖåx}œ‹'44}ÕR—ûµ¬×:§VÇk:YçùGŸM25ݵ>ÑžÿQ2?×Ë_n‡ÈŸ%³I$‰€D@" H$ÿŸøc‚ÞbÖ«©dQ‰9‘-¨4P{úk_™ìü«Û_»¥fíôýó´ÿ²y G6ˆ¯­b«µW¯+Íf þÁ;’ÍþK`9ü+ƾ/ÿÊøhmæ~üg{ò_!㯌‘ÔM" H$‰€Dàÿê¾ê°Íªÿióvq.Îʦezf¢Á>É[ZZ(žžµ:ŒùT:¢EZ^…,Ë(Ó“¾S$ÝXׯOûs÷fýY÷v2žÖÒÒ*tWW€;ÖX­÷Ò5\N¯KµE•fÖÇZúådZç½Ô³uÝÔ›0ŸõVê3µïZuí¿”#¡´ê{Î-t$-É9§pœ°œÆxì˜=´Òx2Pß0©³nƒ–ïŸÁç_%K_·…¾ë{Æœÿ8èÓ´gë8‘Q—W¼käþë4½kZ&Ý•åXë¥Kuë!×§ý™{U~ÇDšQßkmf}ùÙ„Ž—ÿZ¾ËÊÐ2É«D@" H$‰€Dà¿K¬ ÓÇ1}æó‡s.YÂNÏÊ!_ÜGçÁݼÈBx„ë,„kÊÜnu ²­ fçŽÀ–ÃgqýÍ7ÀÇÙÞt¾œyˆöA.\„ŸÍq\³4Ò¢žM×BJf¢ÇeDýFÒ'îdGKÓËÒäiqTØt^›ãøì´YèÎJ:Š»N[µÐÉÃÙ¨;ׯnyWe ž(D]ª^­>5ÝX–pd:b™¦4u…™ÅveÆ\l;§³ÔZ{:.'Ô0é¢ö ¥®YæÉ[ò+ßZW­[¶#4nâ»wÆÎŸ?CN{wÜtåPœ;ö;6Ÿ¨Ä×_ /ÍÊ>‹§¾!_î)'#¯¼1ñ‰#¿ëjË q&=‘1ñd“øj*ŠqôÐAœ=ŸgD÷îƒþýûƒ\È奟ÆÉ”LØ9:ÃÑÑ„{sK³ á¶Îžè?p< {£¾†¦:¬ûòKø’ôñƒhµ‹zÆC`¢ëK~cƈ£PÆêG;ÿÏm¢l<(E‡rY=Öœvñ™z3¡u‹âÚÎ îCr«Gí©,ÉÆö=ÇÐä8Dçn W¦éËRx×VU ¦¡Éò;O—¨Á4n(F_è§VB¾år{G.ï²Ú0Εp#côšW£jjë€'׸&¹Ô6­­œWm ×®GM‚ñÊeé–Ëhß Š1ʤrôd¡«Åxç|j›ÈCDEuüá,¬ó«UÝXŠZëÄz=¹v;jKc]5Ê«êáëWgQ¯Üæ/ “?‰€D@" H$ÿ…t¸‚®ûöÆÑß7`ü¤ÉغçŽ>€—¾WÜ|/NeŠæò‡3 í#Ú–ÜšiD°ª8oü |nXý(ç4­Œ(Çö”fgü ç8í£œóšê1Þó—¾VŽ?çõ÷Ö2µ²zb!d[éϤŠCui>^}ë{(NâÙ\¿J0ÔºÔ¶˜ê5’íY«S{¶!Gä‚èéÛ¢«ŸÛ£‘d0¡b̘`™å˜1ä8ë6‰|º‰µœPN`ÍäœC[s#Î&ŸDyu£x>z3¶Ï÷å…ixæû}hie$ýºñ}[k~þàeLž8o~ý ˆsr¨ÈËÀýË–á|qx.Ê:ƒn¹ã–ÿ MŠ-Ês1vø<úÚ'¨ilFCU6n܈Çcͪ1z̬ûeìÝ…]‡Ž£¦©UÈ1µ¯­Ö}€ÜÒjOÆ LcBô%QC sÎ úÌ Ž×ä1±yŒcÒ¼3„Æ«¾_tr5â©–3×oÙ7¶‚œs]M 5ÂU]=¹(äÀØk:ª}«Ž·ôã{ñÈóoÂÀãêfyf™TP§ë/ÒX–jƒê’ |ºù8í.Æ·Êx/òu¢Œ».ùî©ï³†“*ň›N/ Šb©¦véuÆù,Æ»ª—(Ë>ŽÅ½„êf{Q޲͖íç÷BÃëerΡæÂiÜõð‹(©UÎïµÞ"£ü‘H$‰€D@" ü À_ÆñÍÍ)äüêûWaÅ3ƒx]ÙÂy‹í'nEBd­ÒªiJ:êêÉ8‘óÐÈîèÑ-LíLÓ*!ÌÎHEföá{ÛÑÕ½z÷F ùÑ6 '+íöŽh®­@VNüÉ7u\L4­¬©âìýlJ ò‹Ëáìî…(ZÅ&?ä ŸÕçÏ&#VhíÈßu ÉdŸçì›;++ ö®¾p¶iBVnB»tG°ÑO·Fr¸‰Õäßü ù7¯%Bèß) }â£áäâ†Á aÈÏ<‹ìò"Ô´Ø!6>ž|Ÿ{QPP\‹sç2ÑØÜ;ZŽŠŽ~Ç™¬ðªqaY­XÌÍÊ@£â„ÞT6Øß›H UØÖŒ´Ô3ȺP7j‹‡»üÉ¿{h'?±úØXSŽÓ§“ȇ|-ù'Ý1psr ‚ ùÏ$_çYäðëB>Ó» ÿÝ*)QIMEi KëЭgw8“ãò’‚<òÕN¾Ì#É·8a•‘[@„úcüÔð ö%Ùípñ BA]ùvprLj_U_Jef”×'3fNÄÖo¿À”ÑC1ºO¤èçÀÀ89ñ¤†_®~ ïWÄãÜöWÑ]ÔL?½M@LH,¾ºÇ¥v@IDATz"þ? Ž”ÿà†PkÞ‡û|Q!^h&\hU3¼“ sÏþh©)Ù3IÈËÊEP·hÄöìF~ÈÕ<µÔW' »Êº“_vCNö*ic9Z¿Zš“ ;ª»Šü—éïÒ£z’ÿu;"î*‹óp*)…ÆEÂh\÷&¿æö$£¢äÊjZèïE:dÀνzE…"?ëÎfätR¿õŠŽ‚8¦M™?W!³µ±gSS©¾J8:»"²G :{Úãôñ£8@>Ô÷ì=€@WDôˆ†¯»3r3Î 5=m6NèÛÝÂ:›ð(ÊÍ@ò¹l¸’ÿöä³9èÓµ!$¦¦D]ü£µô>¤Ó˜ËÈ·³§bïÇçæä’|4ÓŽŠì¼øtb¿õÑpq¸Øç|kS²²óàMc§µ¶’ÞÇjt‰#]ilžGÒ™4´´Û¡kÏ^äË>\ö6Â:#-9…¥°³wF—¨ˆòBíÂøe_2öïÙ.Á~ ïû¶ZêÛ4z¯ZÅ{Ù3]C:Q›¢ü\Ô_/ädæÀÕÇ9gÎbÃÖC˜w`/*ÂüщþÝ ôíWI½ y#H$‰€D@" øË#`·‚BGZj¤èì±}8”ׄñCúÓ¶d["!éHË-ÅÌ믧-»^8slî½%<‰¬¤Ū՟£{\""CüQ”•ŠŸv%cöÜYpµ«Ç7¿w×‡-6ÿ1vœ)Å€$—¶PñÊS˜|Íh04!ùðvܵìô2‘¶^‡ÓA¾ýè \µøExy8`ã'/âD¹/ÆêãÛÀ]÷= Ï€ÎH;´ ï­Û‡C†ÃßË_½¹w<ó1m¥>ŽU/~Šþ#F *¢3³þ_ÂÌÓxê¾ÅX»'mU¹¸ñÆ~*gÞYzöä¢(÷<^Z¶g[=0lè`ÂÁ;~ù Ͻþ%܉x>°ÿ¸ ý¢“r’÷ :a0RóËi{‘ʦ·xaøÐApw²Á¦µ`ȸ+‰`!ãøvÜrÛè1ð ô킺²<¼óò |·3>. >|õi”ÚaPb/ž;ŽÇ–ß‹ô²gÇüG>ÆèÈ´¨m¢Žä~Ë9³}§Ýyóg߈ÓÚ7Ç„·öaù¼+àl¨Ä#7] DDBWo¼ùÜhõODïÈÎ8}ðä¶F`ʰ\8¿Ÿ®ÄU“GÁ•ú]#z‚äš±ë—_0äêÐ7Ȁ϶gâš+†£µª_ýð;¦Ï›—†|\{Í|ñåçAú©«Òþ!‘ˆñmÅß·fböÔqp§£JsRñËÁ|ÜÇÃϾ‰v/½7¿Ÿ)DL¯pìþùlÛ”D“H¥8šV†¸Øî„Ý~<ôÄjxøzãÌ¡­xï›è;h°x¯üò-ÐQÚ†z|·ö{”Ðvóiç´eì\i’çÈDÅôAxg>rÁZ›'wăü‘H$‰€D@" üÕ òsQ m©¦¸¿!¾Ï¯½a¡²èÖÅ=ÜG*Ç3.ˆ5™  ‰›ÖúJåù;æ(‹ž|])¨¬SZèùí§nTúß°B©ª­S¾]ý€2æÖ§”¢*5вçÇ5JÐàYÊÙBc¿ ™ªÐÆêbåîIqʯ­QÊj›”ƪ"å¹Åc•9¼©ÔÖV+ï>u‹rÝCS*ë[IR›òÛg¯(Þ“nWÊÛ”´ƒêØýø»MJÎ…b¥üB†òÐ ‰Êœ{^QêD×´)çÓÒ”Ššf¥,7U {åxN©ÒX~^`õá:µ¯›ë«”ÔÔ ¥©©EÙ¹îeê¼ÅJza¹b0´)%Ù)Êü =•7¾Þ¬pëÛ«”UK¦)÷¼þ•R×P­<{ûeÎý¯(¥µÍŠÒR§¬}w…2ÿÞ×”êc‘ ­¿Š3N(]i|~ô£ZoyAº2¯”•Ÿ¨ïÉšnSÏ}HÉÌ/S ͵ʚ——)Cç>®Ô4«²XŽÖµ¥yÊ’IñÊõ÷<­œ:›¡•”*¥E9Ê×Vž|ók¥_­¶å£UK•›{S¹—­,å±w×SÒ–zåaS×ܬ$íýAIœt“rú\ÒÔØ 457)5Õ•ô^©ÿžœ=uPEz¿õÃvQö÷¯ÞømضOÉÎËW*«k”ÓûRFO¯NÊ2 $‰€D@" H$ÿ¥\r‹»6±`hiDÜ”±ðÖ[áïj[܆­ß„§W½‹÷^y mMصiŽ‘±/G{ìÝ”ŠYÓµõ+؈•SUZ)­DoÚú; +ÐÒPN‘ÎtV—×4i×w› ¦Oƒ®Ôí©}ú ‚óùÚvÛHÛßÏàúßĨÑâÌm@HW„'wn CfÅ“vŸ¤PšgÏžAøÀr4Ó™_ðÊâ¹–+êPÔ3ï|__UŒg pÏýO!Ä×]$Çöé/®IÙGyÕ ØWlŸîÒ­Ï…ªÊ:‘^OÛØ7oÙŠ³YEdÌÍ€dŠuvP·F·µ0nîr Lì#VnÃ"{bÞÄ1hh¬Á…ò »r¦ŽLÛ¥w__……‘‘4ê …¶åŸË€;m;Þµõgì¡U˺Ò,:Ü}Ååu"Ãh'ŸÅÛï& ±w/ÄÅ' K­žSÐvð½3•¶Ÿgdg!Ķž}oǃƒ\‘œ”„Vß6t£–k/‡“{íÕ#\öÏ^F{ êéH@P×XóôB|üíÜwe_t ¤sö¼ZÚÂmo<#m%•Òìh™ÅhAȤÕà˜ºò©OWóÑjq‹‚QÃ!ÈÛMDžr~~á{äÐÖý|x 3~]ÿ­Xí-; …sQAGh¹¨OʼnñR`ë„ÑÃÃÏ·äwÂø™·!mc*²òòp¡ ­6ùØðÃ×ÔÖvä%§ *¹ÕdŒÛ7êúG0ãŠIð;×ý1tì\¬ºåy ˆò¤û´…<>Ž(-oGÀÀ¢>g7o¥mì6tÌ ™pB3ÙråC¸ùéWîÔ€QÝĸu£ã ¢Í..ðõõ‡xãP~![¶lBÊù:2ÑŽýw“ñ˜ [ð_ôèK¸bìPhÿp5x{À–Ž˜øøú‘ õx÷-ÿñ˜ãJH–?‰€D@" H$¿>Úwî%5m#‚Ó'cF& †PÚAúBâ8{Û dî[‡6\À‡/Þp"×>-•¨$÷d*5 £h¶´åÖ¥™Ç0!qn{íCÜ|ëÚ–{¹ÇÏ+6"sÆÐÒÜ6õÄtÑ–>Øìik5Y½æe3o7#ÙSÐF{eÙ–V[[;âÆ"žÎwû;-mxê“£èÚ N6mô¬Ð‡¼Q>MPv£ñ.–H$ˆ–=[wç»i#°¡•¶V«DA%¡466.î$…òz¹Óyfj ñäãÑÖû.,½ùFx:*hÉJVÝ É6½œ(KÂ`°7içúÚÛÛè̹ éo&R´´,ýÐÄ‚¶³Ç#..-då={âTò„…Gá‹Â‰ýÛ°yÛ|ûþ«˜±«[~{Å ¼Åò"ÕocçŠøÁÃðé¦m¨>çŒAW\h¿v|üùz¤z!fÐ@•XR]нZ7—„F4@üèu4ÇÒUÄö˜0q˜2÷vürÏãøÎ¦íDBm¨m®~(©>†œ¢JôîÒIœE6 äff Ý?®®ê¹l!„~Œ“5ÚsGW[;{2R§ÖËé6´ž'h­äe }ââˆôÆ£®¦={ô@ò¼¥ U‰'“Êf ´,Lmh6=ónWB–ÁýõA\ïÔ“¬îtúªÛ;ѱ7œ>Û WšŒ1p…b„ÙbúõK°/,ÛvÄ;ëÖàç2:2°ñCÓwG[‹d£Á) ½òúmÝ‚ÃG÷ãùëçbÄC¯àµgî:Ð&|Ò‡Þ;áâγW½åºzôzj-‚Ci»~mjl\àîBƒ^Äd—®}Zí\ [®cÎÑÉ™9¿è{6ºÖÔØ(Þžb²#bíng“šÓ•&6$v릅–fÂÐ#±1½@º6¢û²•Xâç‡0š|šwÇCè‹ýGá³®§ 8â“—7W@+çtâLÚR„« _tÐ\ ûöfšÐê¢bºÕ;¶8mKÈ"¾aØôåÕØ·ø:\9<žÎz§ãÀ¶Ÿ1aà2j´#:{aã¹ZôìOãâ%mû% (/«¤s½#ÑgÈX"ï%ðºf¶}ù~Ì‘€Û–,EKi¾?R‡‰uUxÂ5 ±qnL›“E³'¢„¶io:UŠ·ÿö Îíø šŒ'—^‡¶Ê,*îŒýˆœs5Drh}‘oD¥Áa¡»ÒľdÕÞ‹V§ÝÉØÖÀ†5 %òC¡VóËòö¢¡…&3(4Ö£˜tç`h®Ç2VflÅðÆn‰¬æ¥À‹¶@‹`ãˆaã¦a2îŦõûÑúcî…[î{'o€°IçñÉ}óÐ^s î¸óï{ ×O)Š$¶ÀÎõÚ–OX™kT…›™ÇK°`ÆrØû8ª²ŽcÙëð㮓ðóöÆäywང‘˜W˜k&FÚA:‚ÐìƒçŸ~¾‚Tó„^Mwq±Á£+_FUædäÚçÞ8‡]'^‚·?fÞt†ŸŠòìL‹Ó»E¾s¼µê1òЂMYåF‚Nó*íøî½§°)÷-#~ùÑcЧG)\‰Mûànšüi¨Èǽó† dÜ LIFÒ¾ÇÕw®@°¯'šBBP´é3<ñX0ÄÇ`ÌøQxõÇ1nL<ýÊ›ˆ&Ëö?Y„ùO`ùü¸õ^Úê}Í8T¾þ&œê pßã/àê{þFcމ*µQë*z NÀ+—aÂôÛÉpâÝȧ±øôÇu8š>š¡Qx!Ínæ÷¤…ÆÀ±´šþ0÷…vG§Ñ‘·o šy; Jp÷‹Àƒ/‘1À+Æ"ýÉUŽ_×~„®cá¦Éý°æÅ‡‘ïƒ9S†âôžŸ0ŒŒ†‡ÀƒÜü *û?ù&Œ‚¨Ð@<µt }â)Ü<}ÎÝW×nÃ[sU5Õ×"ŸŽÇ¨mchgJ`ôs=„§žYÁqÝ1iÆxU¥¡È±øzç1Ìå£ö½ó:H„<ù#H$‰€D@" ø«!@ ®Æå+½fe\qÊL=3i´BE¤–·hÓÊr×îtþ9¦'xa²¼0[7ÿ†Ìâ$$&ÂËAY'ïŸÐ ¥ä*)£ƒGŽ„›½‚²¿iÛnJA|¯(Z¹kFdlDtòÅñ}»`ëŠ>ÑÝ„&…9g‘šSIVÞÁÃÙ…9ØàòKªàäêŽø~CÐ/¶y,«Çáý{p<9öæÚ“»²P 1a´ùØÁý°ó GŸ^]„LývWÓ=­ô¥>†CÇ“ÐÐÜß pŒ=6õÅ8–‹Ä!Ch«­Z«päè ø…Å¢g—@² ¿m¦Õ[rK–Ø7´:êFãÂQ–ŸŽ“%0` ¼ÜÈ}UC5ù?†NÝbÖ‰Žo7 …\jU5Û Àí~¡ÄÒkUÒZr! {víA~iœÝÜÑ#&ÎÂ÷Aua&vî>@.ÔÊigÕ;xö‰ý µG»‚VìÚƒ{ÆwíÏ?Oîèòª1`ð@xR›Úi%õà¡£ð%·yÑ´ =õÄ~T‚ÎS÷íÂÌd¤^hÀàAàê¨Zg!brƒdÝ¿Ÿ,‚GŠöªà¶#õøA¤—6 ëàžêy`ûöíGf^1ï‹G·è8 <¾.¦hj…™g”]AƒfdÀ'ŒcP»çãI'Ž#§ d¤¥U-4¶ÆapÿXárò3S±k÷>”×4ÑÉô&›‰ 1p¢m,‡Ëmª)ÁswݎƨáÔ35õ­è7t¿®F"§ ëìiìÞ{Õ -p÷òF|â@ôë¢ìT¤äÕ`-w# ÷¼’Ÿ•–Œ}Ž¢´²N´Íà°Q´ Ü Õ¥8xø$z Š r§vdÕs¨§-ïþÁ]1jô(Dt&7wäzïô±C8pô4\}ƒ1aÊdtörÂñý»qømó¦iÿND<‡ {xÙp¨Æîß7ápr–psH6É¥`ß„Þd Am«è+#ŽMõØ»c;Ž%ƒ›OgŒ7½»GÁ¦qräà‚ÄØHOAö9¤e“‡òXàN/¹ÀåÐäFs}5Ó˜ ‰Ž' íæIzΞ>Š}£‘VÌݼü0pèp°uý´“‡qðø)¸ ~!5jº³7Âß½½ûCqëŒ ãǹµ?ý´•­ê{åH“!¾áQ4Î"yæ.Ô¶cðà~êîKš!8Ÿr‚dAƒ&MžŠÇzìÚw=úC"ýÔîtÑ6ù#H$‰€D@" ø+#Ð1A7jÌtærŸµúïÞ‹òêÿ‹²TN<ë>¨/-Ê¢¤E-—.cΦ?sLÇwÖù.]+s3±di=¹=Bä¶ÁÆ]Ãq†\´-Zþ ¾ßñ=E‡ˆÕvÞÞù`©u’1µÖÓÌa¬åYÕFªéFE²Y÷‹d\—‹óšu1á@å/G²¬e¨ƒÈTÚ¤O21Ñ$«íX2&3ÞÚŠ™CãÍ;ÐÝZ–>óÅõ^^O­¬E¹?h›VÆtÕå·cÌ K1úMˆ£ºE­ºJU,åèåj2™Ñ*ï'?l·Ÿg|°öm:KÌÒÕòZ^A?ü¬U#Bè!òéô2vÀT/׺Mú"¥i•«Â-žLýe¥‹¡‹3ËTûRßaæ4U´^SeFRª® '!Ï4ˆ´ñaŒ0ʱ±s@¿Y‹àíª™>4êE"¹|G²ôøiziº›ÒŒò-Êk™uºêË ,(jÖÃb©ƒQ†VvÕËÑî­¡âxS~ãäY?M9¾Z֯ƘÓ5ùZŒö¬Éù©. z­S¼6œËºÍjhr¹œIo‹Fë0¶K“ÏWë —e&Ÿ%‰€D@" H$5.»‚.”5’ ½â–½fbc‡?®Å6‘ñ9.Hˆ>ß«¤@û˜7É6Ökzf*næ©Bˆ–¦•5I6’-^ËgJ·ºÑòiÑ"ÿEõkDY#1ëÃåõe™mY“‘Ng¿ëëëÉíY÷ð‚›‹JYMWk4ݬ¯Z~ëx~Ödhy¬ŸMy:‹ta{\V+¯¯CÈÒµÏ$‹n,ó_Œ“eº&Õ˜ÏJ¦–ª]µ6h׋ô3öç¿dN£•t¶nOÛì­ëÖÉRë¿ÄXÕÕ¥æ3æ&yôXi:©9,±Ò§iéãDŽ¥Q­œ&_µÎ¯åUãµqM%ŒíÖÒõ2ø^ä×é¡¥[Ëçx–qq¼¹.Ë4Šç÷\¨»êåXëuiæzt¢ä­D@" H$‰€Dà/‹ÀtþøµüVÛÂ+Áùü˶î¿E1!bctL@4¢Ñ/Jf¦#ðÖú‚·Á_ªo´fëåhqª<2'g4ΧÅÿ'®LŠE;˜´Ñ½hÖ¿i16†ÿ‰¶ý;ëýLü+÷ÿN=¤l‰€D@" H$‰€Dàß‹Àe :CâR&•FÒØq{)¬É#?s° ”Œ¯uœÈ¥þ0‘ÿã³êêj§{Q±|•ôëÄþGn­Ûÿ¯­ôÏ·KÅý¯¼ÊJm±8#NýI`]ê•ü×â(¥I$‰€D@" H$ÿi.KÐY™òâB—•ÃÀþ‡‰ä9“ïñ   xº9S*rïÌ+£Z ÒnË>ljE䥧àTúŒ"ëÌd º­­MË%®¼ ¯­ êehN¿Ìq¦Õd*m*Kñ¼[%[LrI¦X¦x᲋I¨šG#´Úê-+aÎ/T2ý°<½NÜ ÖU#»Â¿:7ÒX7Ëæ4.cÖ…Wª- ¾i«²´Š+É/z0‚}D½í†&äæ] Ø ×[jhÇ…ìóHËÈB3YÇ =¢àâ`‹Úªräää‘…oØ“{ÞªÝf ÿòäß¼­Ý!á]èç)pãv‚\dežMA­âŠÞ½º‘ït…úD]±WufêG¾ëÉ—4ÚZqp÷n€,òêCEÙé–ºò.0àœ¢íÆ~z¶îÆŒ–Ê9\“ž’ŒV'?ÄöGKSù WÈÕ™³ ×?¯Ž0ae_ägŽìGQ“-† 'Ñ êŠ9ëÄrê+K°gçVì=š†#'`˜¡pÑAMWËþÒÆ·ÍÜ.­?Õ¾ÔÆ‹ûWí³ŽÊ«ØQŠq\ZŽ=½,Ã,[ANF**¨­±±Ñ ƒúâ=âtM¯Ka¡ cãÕärÛEOs¼q'Õ(ÞM®†#_éJåËöjNZ^]{IqlB÷Þ åD@" H$‰€D@" èÐHœøÈ¦qþˆ?¼u¦Ý° ·/» ®6-8yøbÆÌÁ½ËnC×N>üÍ®:  cJ(ÌHÂý+¾Áö‘£AÄO—o5"`MdµlL˜Ôr@.ÞôA%ñ1§ˆ­ÔLLÛ¸‰Ô™“aÃÔ"p%ÜZ5h:]V_n8íJ·L>¬Û¡Éâ¬B_‘_AÒŸ1êÊÅXøøj¼ôðð%wl-x÷Õ•8c1®š8h­'¿â_bñÍ‹0ìº;ÐÙÝß­~³W¾ƒÇ—ߊ&"¡ï¾ð,Ém9}Ç¡SÉèÛÞÎ()oÃ==(º‘a‘m8µo32Ú#݃º=“]k,XS J+v|ó6ÚÌÃ`"èzÌ´>a2gcÕ'LÚmâ… åppóZTO=ëôN|w  ,»¤WxIüT´Å›vCæ±]øêl+¹ò"‚NÑ[RŒÉ'ËúýÇOñê÷ɸã¦é4™a{µ¬¾½<ÓQqLzu]k¬U¤fæG}ÿj±jÜŸ/ÏYëÁ²ø5²¥I””ã»q´ÔÝ£‰ Ó«oƒeæ1ÌñÚx3õ…–™®Z?éû•“ULŒQôÌ}lcÞ9Ãcʤ3ÝÓ4=[æ½ø=$ÝÂ:ÂÍ¢ù H$‰€D@" ø?ˆ@‡]C}E!¯_ŠûzÁ^ÎÈ8sñƒÆ#Ž|Fß>u‘Ê:”_îFòë [{øuê_Ow!ÂÞÑ q݃h¥V]E®ª,#ÿÕUhm5ÀÑÅA!Ap²§³Ô´2ZUY{'gšêPTR„A0“çò’B”VTÃÙÕ;w‚3³ 5ÅȽP ;'7„‡‡Ã||ƒVl+**áH>©í ()«€—O ds@qA*ªëHŽ;áîâ$‡`dLòˆ€´µ6£¬´”|77 ¢äí€NþÞjš¡••5¤£7‘èF”UÔÂ' ù ·C]e)r.ÂÆÞað p“Í´‚ÌaÍsbÊØá¸zL"QœvTÑÊzs‹º#áÄÞß0eÎ"¼·v3æ^1’ˆ&pËu³7h<}qßMÓðÄk«açìŠüôÃøhð¬xíŒI쉦†Fxz“mFü¹ú Ÿˆ®m.‚è57Ô ¶©]è]\Tƒ‚ƒC„Ñ:ÖÙ«S8WTÖÖ 4/΄_¸è!Tˆ.!,‹J+àêå‹ð°PòÉn+°«¨ª…—¯7ÚšêQYC>â}½0tʵhrd¿Ô­H=uO¬/ÂÌ)cÐÙ×™|–ûP¿Ù£®ª ¹ù…PìÞžleÝ8k«G>Ð]ÜÜPVÛ„ÐN4>„êv䢲 ë¿ûWÌ|'Ží«­('?áDæÛPJcÁÃËnNh¨©õÁÞ™ê3Ž×X_ƒ†ævò)n‹’â"lAýéˆVädg£¡ÍÁ!aä³v’VbìuáñÓPWCþÀ¹$D‹ù",hÀÚ^Á¢Û±ô–H=yã‰ø/¾i6¼œÛñógïâ·céðt¦ÕåCÛPì=ïÓjò¸1D¶›±góXùÂðDNÒALºíyŸ×™ÜÝ9sfæ;³qÏT<:÷ ŒÑ²¢š´ëë¾A—ÁïaÌ}}Q'0˜did’ê¨W»– …—æú¬yÝx$ —ºD¹b¢Ná·w´h\ QÇ0›òÀ!éñ×°zÃvÌÿd)¦>=N4Llçà€W_z vÀ¹}ëiß?}ö¶^'”¿½~Á;Ÿü€Ú"põÌoè5z2&=>Zn¾zëu¸ûÀ|›£-°üãWqëÊÄ[Ö¥rfcõòàžÒ ¯Íz%þñî¼g¨3$/Íš…bïºÄ/aíðüs“i¦†’£#ñþ‚9Xw& [ÔÆ÷ß.¬÷Š2qùÙ µ2Žžÿvào>‡6ßãì±cxnÂ}ˆ¾x{O'ÂÇÉ€—ÞØŽÝ—£q æÏ~×ríakHƒo“Þ˜IõUÛßñ—ŽáõÂÒÎ)qQ8]€“…CA2~]¿ ;÷À³¯Ž™“ÆÁ×Å®¼~íçêé£Xðæ'ð Æ¥ãpË*=xŠÓc±qÝFì:z /~°3Ÿ~.ÖüúÕÌþñ(†tm†¨ó—ÐóþÇ1žÞ /gÜŒ<‡ÃqhÒ´!Rn\ ³^SpÒâ£ñóÚ-xáÝ…˜þäX’µ5Ž€Ê»óGvà½÷?E‰£’®‡KÓáøôÙp+ů‹¿¤ÎŸ4›¢NŸ>‡G¦¾„‡‡Þ…ü´Xðê»ð kˆ›WO¢ Ø >VÙðlÓOEï«´Â,,úà%h aÊè~¸vz^}uìü#›ÏƽñÂôIp/ŦŸ¾Ä±ëø9ðΛë°lÛ2 èÖ‚rgœ>o̫ȰúQE@PE@PþÍȰ©ähú+ÍR×Ýúï>äñKí™YsµW_~QkçD_Õm‡i—Ó…@Rü íüÅKZbrŠsõ¼öxpíù~agw¯Õú zDKÎ+¡gƒuù¢u5ZKMMÑlY)ôî¿#dߟ8LC›û´ƒ§#µ„˜«ÚK÷ÕM‡biÚ3»„ì7«¶k·RÓ´ó'ök«7îÕb¢ÎkOÝ×YûtÙf­ ¨DK‰½¤ëYKûâ׫Pûü¥û)ž¿öãêÍÚ™³çµßömÐÚØAûnÕ.­Ð`Т£Îi;vÔ2³9–Ys>õ’g¥$i.\Ðâ’´¤¸ëÚ'óÆiíÆÌÖ²I¤8;Y{²{°†–C´õÛvk§Î]Т.žÖ&쩽÷ýZ-—Wg$\Ó¦Žè¦½µhQc©Ð¯k/ÑÖ~ÿŠöì;+´ÄØ+Ú@/hËwœÒJ‹3´É#zjë÷ž×JrSµ‡:új‹7y+-)¢<‰ûø+ǵ–¡áÚž³×Å3ÿÄ_;®µ¯ªí>}EøQzzj´vÛ˜‡"mù§Ïjƒ¦|$d¢Ž®\¿üq£–”¤íüu¡x>}-…ÂK´/_š¤u¹_;p*RK¼y]›7î.mгïYM‹=¿_ C¶éð9:6´+§vk66”§­('E{¤ 4·£µ;öh'NŸ×ÒÒR´o^T›ðÆOZIq¡¶fá+ZçSµã¤;éV qˆÒ¦ê«½µp•–Münߊ֦n¯½¹h³VZ”§}Ž>H3§iã±¼8zþÆõk kÌÿz!FßÛOèÌN¶†S!Å;w-êùÁß7½z6a„CLûå+è9Óôuëěسí02ogãäù(¸;f¾Ã‰Fj­]bÕ+/bP÷6"þÕ;ñéO»ðÉ€ 8qôh®> †$ì=u Oº®´»—HCHóh¶FÓìsáRÏ|ô6æ|¹mL€wP˜Ø¸«˜6eË/u¢Qlš~OŽ×D3KqoeKSš` Qxéĺoõ–ë‚y#5±VX ˆ«MSöDˆ—¾7Bë|ÿ Ü;ènøºZÁµkô©ëƒ”¬,’öFANž?[ëdðhlý‰¦wç"šFâcœêÒhkÈD~V .Ñôìk7bÑ.¼!ÜÂïÂ’Ù³0€fèÎ@eqƒ«%m Gù«U‹êÑ hôÝ…fB_;}ß,߆½ÇáÔÑôZ>S^ŒÈÈˈ¾ŠÃûÎÐhýz4¢iv6ÁhƒÞÎôˆ/oxg Zf†°ðú ô!S3 ¼ýÝ×cl é±§ðÓú(|µñc„øÒRú7áùðÈ»[‘6íA:Ý{Þصi…^}cøÐ!¨ä…0¯N˜þè0dÒ2 vÜfô6oÌ ]F=ö,Ñ~zËš·h‹ÁýïǰÁìë›.xl`ÜJgÖðôpÅQí¿›ŒÌä«Ð¬"¨ „2gw„ùÚŠiäTHôïuFÜ;A´×€_û.˜8¸#’’8á”Z(A¡ìð¢}ZfЧÏàü…æðõF¯¾=HOÖìÙ ßàzo`ÿíxd¦Þ2O :.•êhÜïnŠ ©Î,`oW·ë–;{x»‚Bèè;ûäç¡I×^ÔCû$Å!:6 ]‡ÏÂ3÷ë®­<’é&âò»ŠõÒe&7EÔf˜ma-ÜfG{ð’Gb*]>u&ù7kg½³‚ý]½êL§ n6 ¹D²) }VvŽb¿–- 4¬l¨®L*•ŒŽ7[+).¦v¢—¯°°ŽÔÙBÓ$„„ÊomcGjŸ¹©71û±ÞøhÍA„Ôi€6mÚàžÞeï‚^gz§竈øónýìJ©m¹Órbƒ®—ý¸ ³œ•#íSðÆèWßš¦Ò?‚pZÿÆË‘œ–+ZßÀÏ…ùÙˆ¹~ Ù¥ŽX¹f=š‡û’þB`Oëçõþ;n.–^è;øì?tW£¯âà£9ð.Z“dgç£Qí¶´ÿ€þÆ&¦ ßÓ+0ùÞ®¢>ó¨£Å™vë×q!6œGùOëF4ê¢(Š€" (Š€"ð¯'Píz2ú¬Ívg.,(DãvaÈOÃŽ›°píbŒ£Qù˜8ÉšB¨ãÊ:¯¬‰/7:ârÊÔ§w£$+–Öè/¦Nc½"}}=§ÁGêéÇù‰'RlA:X¹ãz¢ÚÌÐ=°6¦¿ô¦¿ø:Nî߈Ö=† CÛó´É yg‹~÷ ¦Óô˜,oEï[Z ½[”¦œÝ":xƒÁ޽ºq>^}åeìã±¶´?9{Ú îâõx4o×­jëõC¥ÕßCš½Àï!¨ìºãÝÞA3]²‘F-ºzzWܤÑ(¥.Š€" (Š€" (ŠÀ¿‘Àïè<âùÓ[ï£W“Ú`Ëé·âðìSS1éãehÚ¨1Ž9ÛaõÆÍˆð³Dâµs;s&½õ`YDFðæ3±âÝÍ“¦ÊæmŦ-[в¶v¯ÿKöÁ#ÆyÛYÉѰ2NéåÈÅ4—|Û™Oµ¥ÿ^h¹çÌ{»!Æ í†èÓû™é £{âÝ™mpߣSðùËáC–ÆÎM¿"¼û ïÑù7PL#ÛÒ¥ß<‡w?û]ûD“:¾ˆOˆGÏ‘ýõ¸YHZ94»VË6x6óº«Q@›ßÍü0ŽÜ5U¨â‘ç¸}Û`˜¾@ªFXD3¼3óA }x¾[ð mÂe‹ý;¶À£Qg<0¸$êÆnì hwì„ÛdŒ± KÃ-;÷ÂÌ‘~xû§Ã4ú«wpô>£~jŒÞcmñÙì'Eù¶®üsÞ]Š-G.aLtæ¹j“¢½'/Ш¯4„D2f?4bM¸Å¥»ÿ- ˆL-3ÀÙÝuŒÎ'×ud¥Ä ~Òö+¦úÜ"ÍÍi'ÿA™ðÌœ0L}Õ] ÖnØM埈–!¶¸¹‘øÌbˬÜåg§à––+<<½ƒ±}ÑÓø¹g#Ô¯]áA¡øúÉ4jþÖ~ò"BhZùÝÛàT«m\Ö÷O‡{G̦¥Ï¡(-#§¼ˆGæ}Hp¹~yÇõ“špù4j- ݦ84£B–Å3 .&͆¡==KæÃ&놌™Ž·Wl‡+½ñ9™8~5£L?w(lßsóEbÃûm¬—'Ó‰¯E…ùˆŒ¹ElõKhúÿÅÓÑå?å1áä.Êc1ܼ}ŠÓزq2êûaÿÆ%ørÅ6Üý¤®¬€ŒÙØ”ñPJFô–=§I®—Ëš–‰@Ò#ûqg‹¦®øÑGð§ Ûº¶m(Ú»}­Þð÷§£û`Ú­0:¦îïß¹)±Ø´ý Ÿñ"ü¨Gmã¦=xá-]#w4°ó ­‡ê`ää×ñî’ͨ@KÈ…ÓÑ~ó§t¨ǧ⣹D‡ÍnzC:Ãý½›£ 3¹>åï!«‹þmvŒm'/£OËú¢#C¾B©úQE@PE@Pþ…¬^&We¹ÉäéB𢿅,:*)1©Y7ýŒÖÞGâù}ذã(\}‚0|P_4kÚŒŒ®P1Ÿa˜š¶l:†¬SózX÷Ë \ŠË@݆ÍÑÿî~hL²¾îÎÈ+¶BMï­¢>æç£q¨?š4jw:ª'­N¼|GNœFÌ­ÛhÛ¹+Ú¶hHºÛÃGKÅÖí{p1ò" ¬=У{wø{¹ 'ß ¡á¤3ÔO‘ÏÎHŽÃÎÝûpüèäÙøaê¤'£~壡|¶wHm:'<5 ¿¬ßÚ­½û¨Ö¾)å§lh}©_mÔmÜAÞb”ÙÊÖM[ÓH7í¿eëNœ¿x9šºwë†P_O¶ÎõÁÕ‚Ž¥+D€_0š6 kËmèØ¹ð6pó©‹Ž;ŸŽts¤]лô ïâ[ؽo?NŸ:ƒR—0¼ýñèÞ¦¡¨VËçO“QVMZ´Ä™@󹩫އ©Ìß}Ïyà¢U•·?­ªòòúî²uã  §õGôVˆö;•óð÷¤ó;Ù¨¦îõXwj,WH«Š¶§·nOÕ¿SÕs®>7ÿIÛ¯gõ (Š€" (Š€" ü‹ ü®®Л25hÙ¨©l؈|ö§¨òƒ_—#Ù6599\¦#eÙú3Ë92"7&:„¿7æË&åËtšèà0ö7 zM~XFÊIo)/t›äA†Ë8ü\“~ß(#ã²ÑDI²/#*sw¢Sæ¯,²ÙM…t³òúaQ^¿jä9ŽLW^MõÈ,TH[¦e ¬OpÐHãø¦i±Ÿi8?KW]ZæòR'Çã°²ðJeÕë¦,œäõ4*Ö•LŸ+¶_ógß„uUú8½Še‘m¤¼ìUÅ“ùqù*ònLÏ4¼,Œþx™«3èÊ 6âx—ð~Yî ÔlxÑ?6¼,éŸt\ìgÚvXNþ“ ôpž9 z*dô W)kêÉ£‰diCyª¦å÷²=›æ¥<ôÎïôÝywrJ™ËD*þ¬n™7ÁªŠ¬˜òÒƒ+ÊUDûGzÉwºêYÿÈ,«L)Š€" (Š€" (+ tahT‘¼4"þ¬R…Êj½8­êÒ©)¬Z…ÿó¼›?ÿC²yGÙ¨T†*U½ã‚WU¯ÕOs7ÏJyë4OWêÕXéå±t}5Éš§XéÙ<²ùs¥5{T.GŶo.µUç/ÃÿyWn¦ Ü©AÏÿ¼Œª)Š€" (Š€" (ÿU5蜓|Ú¸*/¿@ŒôZÒFZ®nn°1î¬Æ†¹c£ËÜ_beþ<’jŒXæg|–²ü(Âx–ŽÿÊÉΦãÇŠÄ褭½Üh³4Ý•|Fq©¤Ç$P†™§]ݨ¥5QQf\šë`ÝìWUe~Ƶê%Å…HIIƒ£«\éus]œžŒÃ÷U…—ËTæ`—夫¬§ÜXªf¬+ssÝÒðå øngeÃÖÑY”I¤I¢]ðQb·og¡˜FÑy>]ÔéáŽ.¤‡Ï|/7ìr²2W_q†·y~E>ŒeIˆ¾„äËøUÉëatô]z J,è„/±ñaYÎ$Wê‘zM¯äY\ð¡›*Ê(ÃÌãH}2œŸ¥Œô“Ïæ²æþ.ãHYuUE@PE@Pî„@•ç ‹O£qlÇ|üõRx…†¢„Îcvð©…ÑcÇ¢S‹U~Œr\óTýC–@£ dò]æ'sMa$(ždXAn&–ñ1Ö:‡ZtTUfZ¶ë1£†#ÌÏCŠK â*ó!¯Ù°ÉóS1°Â“Œ_Y²j<3›§vG_8Œ=gnaÄð! ãÊ…;±g bòì0xÀ]â\ôœô›xu΋¸wâ<ôiMǦI>s@¹¥Ô9Ãt­JDçûǃÊé”—¥r˜n°˜ûK."«Æ¼q6£/žÆœÇ‡ÃoÈó˜;å1:Š‹vÕ/)Ä–?GšGŒ¿÷.CÌ¥Óøú³°ãÄ øû¸ !!ÃÆMÀ“ŽsA>}}NÞ4ÀÛÍ%|¶;œS»~óÆ=û"îïÓV¤G6—S‡6`ñÎh¼ùÚ ð¶·®’¥ÜØðô•XxÒËÞ$˜Êît]å,DÙŒ?²¼’ƒxæ°¢\,ÿä5”6Š)c{ãê©]ØU„±#î6ÿV½>.S¹^=¡¤ë¿á±×¶`Ãâ„ÎÜFÛ #6ê·Ý˜4a!~7Âë q³–Â@ç|ɶ!ÏA7f]\8vBNÜUüÑ[W¹ŸÌW¹~'Ë_Ñßjòçxt™è1÷gYSg®×ü™eÙaW­«2 Sýê^PE@PE@¨‰@•:G0~ãVL$Vgºâðë“áªecù×ï¢óÀçyä{:?ÜEÅ%°±¶BI1 MÓVmmt•y94âMç‚9»ºÒ(%YVôQ[Xh€¥•µçgþÀÕh²€FÆ-i¤ÔÚ†ŽÛ¢ÑRùQ\l ³¢méÌh:×úÌÎåî> “GÝ”ëç1«ßĤâý—&ÂÉÆt´™¡¨ˆF[­àä䤯ßÑœF1rròè(0+888Š4tcFCnNåŸËÁN~bË|°ý•Où·µ³§ãÄì餆 âÑaC‘Feu¡c¬t ×ÎàÙïÏ¢Wï^pöåÑþRDÝ‹-鮸«gWx’iã艇Ÿ„€ _NE”fÀåÍÎÎ-‹å`gC)‰‚è2…ùÈ+ÐóaM\yý.Ÿïή”ê ‡Ž›ã™ŽŽŽÄ *GCqq1Q_@†¯Fi8ÀÞ–Ò`YÙ/&c؆òÀÎ@åµ’uRR$FÆÉîTNQwÆ:dYÉ,çv:~9œœŒ.íÛâ»Û c&ñò1Ü@}Ñ®²¯`úÀ–Hï:_/š‡`/g\9s{Af±5^|ìŒz|:[ÂYÝïF‹7büÐÎt&x<é,u¹W¾l§µ#ÚáQFÔˆ嫈ËAç€äåR;,u£Oü ƒ™ráâÈ튎í+ÈE1è|ošÁ §^ó{™·³aim 7Wgcy‰·wbÂåç¶oei‹CÇ Ä9ˆ1àFäa¼²¦÷ôë/kñNp=1¡ìÛ·Åñq< ÅÚ¤sXNN®8æ¬Ú¼£8ꎊ#ê¥ìýõg÷/>;ÎüªYrybèÞ’ò§¿ƒÜ.‹h„ÚÕÍ•Œ|T)½o¼€5µSÁ¦¸®\Ÿ¤£° xÁÉÅ¥ìPôlˆ_n;üŽYYpžõcáœy6K³\J(}'#/Êe¾fUø§¶ãäì(Ò¢Œ£i»ÞÊ·‚è¿¢=Ѝ>¸Î ”¼Âb:RÐUpbåùÐëOÇt¾=sÓ,车öÎL…?奘έϢwÈÆÞÑX·üwÀ¬}kv–Tæ¡'£ËQ9­(/VâT Y™™¢l\w:KzŠŠ©}؈ºaöôFèJÕ" (Š€" (Š€"ð'Tk K]Öôú@÷6hÖ¼¡åzîŹ4šÝ ))°Ë¹ŽŸÖB“Fµ±mÍhÜûQ<:¼;ŽïZO£îËaak‡€:ÍñÔ„ñhì…³û7aáú˜úÜT2î}Pp;ß|ö%¼št†mv,Ò-ðÐýaoMæBqV}ÿ9JkuÆÐ.àæ‚Z-›£~ÚâßÛ¢óóñò¬ñH‹<†™³fÃ>¸1Jósht½75 Á>®H‹¿†KÀÁ3×P\˜ƒàf=1ã™'ág_ˆU?.º]G„Alå^ ÏÍšŠ¦á yÿF£‡Í–œ=¼ß~¿ Yd¼¤fàq“0zpwX²±nåXµå "Åð o…i“ÇÃÍ" ?|û 2®¸âåçŸAHý–hâ…G`Ytœ3£Ú°-Fˆ›—/ÁÚ·Â(¥]¿þ„“×É`ÉÇÖukáߪ?žòš× ¦P —OÀŸ‰›9–ð CÇ5c|í›ÔBµóXºhÎD'¡€ “V½†`Âcáé@?—‡þ±1ŸGÌ¿þôCl9xá!î(±qÇØq£[«æ¤cÉÂïá^q‘Ø~!/½8A¶ÙøæÓ÷qêF¦0|ºzcî@#·ÖB¯°ýØJ$WB 3fÌDH #¾_¸Ú6C-O:cÛÑ žÆe G©}¬¾ÞWÌE}©‚W¯Á8¹s%å{îë—„v › }¥9~h}_74iÚ „ŸþÃe*ÌËÌÀ¹ó×Ѳ}kd$ÞÀâï„S1N`׉kxtâtj[ƒáæ@¡½ àÅg¦áèþÈwÇôÓУm#a&Ç\Â’ï¾ÁÙid„¡ÇàQxpÄ 8 ›V.A|¡|m3°rëy<÷ÌcÈMM¢¶å„¸è,¬üi9bŽ8á¥çS`ëUÓŸ™„P·"ü´ø[lØ{J´“°¦]ðÄ££ÅìÒÂll¡zÿjÉø#îÌø4~êÊX6.£Ñ¸¾L£çïÎÿ>÷ Ç»ïd¢/]òqä\êÖòÅÊE?bàĹÜ©v¯^„oÙ!:Ã"Ú÷¸@¨¯Òcé}XR'gÄœ;†½Ó0å™§)ذê'ì9…AcÇcÂ#£ÄìÑIEYàN ÎÆÅã°eÏꨲı=Ûaðlˆ'ü¤(,[º‰ÅΘ0e*îëß$‚ƒ»~Å[o} ß°0Q'W»Þƒ1jÄx:ÚàvRÎ'¢MË&ÈKÅ’¿ ·Ô©1±eÇ Œ|j*{p8¼]ìŒíŒŒgâÁù¸Gïïbì<~‘&hÀ§^kLŸ>á>n4{å8¾ùæ{ÄgæQ'ІŽyÃûw£?)øqÑRØø $3§/߀w ìüñȃ#áåÌoŽn[…]—s1mÒ#°Íãwùì¢t¸Ó¦~›žxbÜXÐÌc»6ãpT"Â}±fÙÏè>öŒЙº{¨³Œß7c½Ñ£rŠ€" (Š€" (ŠÀ" Í€j…yÄ­ °ˆFVu‘ä¸8\£['{äg%aöóÓðËŽ£hÒyZÔóÇ‘kÑ¥ÿ#ôȼ6ï8ßÚŸ{iùš·í€Âïcúû‹‘I#_›W|‰)ïœE×ÎPÇßOŽyWiª3»¤‘xà©ððö…ÍmÎÎH£—"Œæ¸ë×iͲ/M#¦©Ïn3éÌ|öYL›8‡>ŠŸ¶'Ñb¬ùþ¬9[€¹¯ÎǼŸG=ÍÎ¥‘Ñã»ÖâþÙ«1~ú\,˜ÿ îjŠÌ¬,]=b-kcÁoÑtä XýÚ“X¿÷7¡mSC¹¤¨ù.è7äDŽâ×íGHÎBŸAW®“¨Ë§1åÍÑdL±qN£Ýd³‹hÚÃ[á굛♠h¤¿ /GŒÂò³¾[»°Zù±Ì¥Å_ÇGß+ÖŠò1–l<‡Á>W§?ˆ) ÃÁ ×…¼5:ïYý,=jaæ¼h˜…ÏŠtj£¥¹ÉxëÅ)Hujˆ×ß|/N{ߎ»[MU@ÜÅ-˜8n$"ãs0xÐÝðp²Â™£[pèì ¸{¢m§nhت Ž‘CûÂÕÖ€õ˾ÄG›¯à¹¹¯áí/£èâ:|¶l#µbP;\<áOÅÔ‰0`À ¤gçRˆ^_úEoŒ^áèMKê5h„¾}û¢–¿Rc¯`Ú”IØqô2z {µ½í±mõb ó1ÆM™Emþ9Äl{/~´D´#K…ÿàù°îäM yxæ<5¸“?^‰»F<†w^{¯L{ ÛŽž¬8ÆWAÙz½‡=Œ·æOÅóÇb÷âΚ¨¡•Ò¬}ä¼›~üŸíÃs”‡ù¯¾ˆ†Ô}B#Ú·o]ÇÜ çõÝxûÝw1ùáxføƒ8z9Ú7ÕÕÆñàý#‘j°Ã]½ú¢ií`Ì|úaœ¼+Ò1dßÂ’'ÂÂÝV%XöÅ[X}6³_}o¼6)‡>£ŽíB6—:ž›2ÛFÑß¼Á¨åç^ö.Pw†Q?Š€" (Š€" (ŠÀ¨rÝôÓÒÖÁëׯÇÊÖµa_˜Ž·Æ=…Çç}fõÂpyÿ!4ô4^¦öZ~dli¹xóÙù˜ùþBŒ|—øD<{6Ôi…“3Ÿ@ŸVu±`é 2^ÁÓÎÀ@†Ü‘"„¦8ûµé‚ÛÆbÏñshÚ§lE‹{§¡K«:Ð Òáè F•ý›çŽ`ÚÜ7°xý~xÓHê6D+Ú¤ëFlö4}Àû+È"‘£_…y·AããxŒ:$œh3·n}‡Âž¦¸¤Çãçï?Âà~Ô‰àb‹"šݨiÌ÷=fO‡:"ô¨%zöé 7˜#U¯.ny» o¯»Ä([~F"ÚÀŽ¦Ò²+Õ¬ñø ë/žŸü¦¬¼üüDž9ˆ«=Çcíä'àÏS§C]1yL_žŸËóysb,† …#Œ†v@Ó¶ÝÄH#+b£FL“§{g7?th×W¯^Ell*J¬aŸƒÜÂBxÛYÀ¾VK,ùüŒ½»³ÈCÔ±m˜õæ×X±y?u`çâvm|ñóÞFëÀíŇAêÀÚÞ3Þû/L!ÖÀybYƒ¦YÒ4zO´hÙunæ WßÞb9;ù:–¼7 ý'­€ )—XÙÓl”¦»í(& ï†][6àÕ/WáÁ¡}D‰¬ózaåéíe†ži1½ƒë¡iÆ(lÒ½ºvAçiŠþ˜gæa.u>yÑŒ†b20˜ó9>ùù3 ìÑNÈÌyýkÔk3s&C€µ%šµi‡ggLB—†¡(l„G{}‡Ï=ƒÝ[’| >ž1Qq‰Ô™c|Lz`J©3eÔø™xú 2‚íiú¼–Emã¦Lš€úÔùÕ$Ø›V­ÆÍ[éhê…&MZÃ-.±7oÒ’\´¦ÅæY™"_ö´ÜÄßÝ`4eKàÖa¾óz¶«CáÍ0oâ0Ü A µ/ë( % )q7ªyŠ¥Aô¾ŸÔ’¦¸û×­ÂQx¼A-±/„§(êçÅâÄ©H´ k ;çp|»ö<6¸§Ð‰’\¼5e(Öï:Š>Ô6⮜Ãç›CqeQ7ä§Eã³çÞÁ¨Å¿Â‘6´°tD“Ö]ñÔ·›ðÌC¨ÝZcØøçi–ÉóðäéäxÆ8"P¼s¦IõäÔ¯" (Š€" (Š€"Pý«ÒL‚?„Ë>†É,¹²W£.!:.³WmÂëÏ> úÎÍÍCÐ`¸»ÐW7¹R2¬òJh„¶nãG7àèá®CûÓúmë·ÆCc†`ùÒ¥èÐÚ7þ¶nA5ñ-lغ›FP¯`×¶xjìP8Ó7.¯]çµÒ£.ãRäEäÛxcסS5¨ Å-ÆNšÎÛ¾qSü¸n;¢cãP@îdLZÑÈúè§ßBƒü#'#¼KÏÁøêÇuÈ1” ÏˆGñÆŒ:hÛ¨ê6ëŒù-DLr†È‹þ£¨Û[~úïŒïC†¸F>: '.³AK#ζA4…> ë׬Ä7ß.ĩؼóÅ/;ß[ѺÚüÜòQì2,ØÀÉ£õêìJx˜ždô õôLkpíl…aÄáNnp ß§ççebD·ð ©Ôd„Z““Ou;7Lÿb; .B°Ÿ'z åvQyŒÖh4ˆ; þê<÷ØL}åCœ¾pi™Ù¨íëNëj-Å]Z•_ÚU[ºì\Ú×n€KgâǾǢ‚]ƒaÙ± í`n”2çâ‰îK 4µ¸Ô ­»÷Çã´‡ÁæÈ,(-ï´dÂÎÙIé™z9©~y]3;IO¸qöÎ.â™D×Íâ(3ÊMÓ*“ÒÛ+ïúÎŽGÙ-mìh?có¦4¼CjÁW¨‡Ó¯“#m^gÌ¿•µ3z…Ø €Öðçæ#N¸pú0–.þ?,û®­_€Võ„Án 5Ýþ¾F㜱2Êd¶x­u)•'v”g—Cõoe_)7/cõÏËðM½¾še‹¯ëÂ,¤X¡U£ò©ûªWÞ´N/‰PQþ£h-w!í PXÎkâýýÄrÌ¥ BD]ê˜0:_? è@û4PùI±`ÃÖ,¹Bš âèâ#Öä bàLü¹=”;ÙB¹–Ð~ öÔ¹¢Ã+.Öè ;#k^ßîA»Ù[Q=³±ÿËwÐZóÁX¿s?boÁ@U+÷i`­ò¼{êN£õürz€¯» ´Á ÞŠõÎÁÅÚ÷=9 #½Q+ÍÚõÄ'?¬Fvn.åÏß;ß·ƒ–X|ŸÝNKaæ¢e£`bg \ÛÀvúŽÛ‹•zÞs?݆֭I)8s|?FÎzu}‘C³vÜ»7£}ÎaõŠ%øú»ç‰oŸ¹›êH{4ú‹ŽÖÇÓÚ¹3‰—’è|UÖ¢ž¶úUE@PE@Pª På:ËɱŸ’Â<Œ~þ]Ìžó,\ù›ÛÄYѨ¥-Yi¼Y}v‹ µlJ “”X&Uœç¶nFÿÞ~·iƒ°ûŽ¢m«Ö8¸}t¢Qí0oÖº{?x/³ç]& ªžìØ\øóož5cælŒ¿‡òr—}+ŸÑṿìÅ“Cº‰€ÇlL)Óòƒ#ÚâóeëñmÐu‘Öp÷0^Á§0¢{ ÌzýS<1sM§¿ˆ‰Ý{ÀÂÑ/=5T|d³ÁÀf’¥#î¾ÿqï7é驸é³×0íõ/ñåì‡aC£fïˆ'ŒérâltóFw×óó`go q˜žß"*3s¤MíØñˆ½#oà¥CÖ´fŸ-(6}ØÇš6ˆsw¢M¨h¤ÎÖÞ ;Ž$C÷ax;XÒšçBd¦æPZ$H®IÇÞø~MG|@k±Ï؈»÷Âîß®£G«pa°òÆ^l0Ûý Y¶ÂîoÁ‹¦g'FÂoG^Ò 2,ìh^¯O¡VC¥ùãÛ¡™ å†;jB%‰±qÊuÄŽ7ÜrwsFå®>xbÚKxô©yðö±ÃÈÙÄ– ¤Í0yôL~d8êÒÒ[ÚÝ¥³Ç°ú· ̪Un\²r;g/bel‘"!Ù:E4ñÃF‘³£h·|4›múÆgª Gìhý»4þØx´%ºqÈÓï­áåN›ŒÑh «R\¢¶7bôcˆt+K€‹ga ¥ôPGK¹£ú¦Î©»”Âx&€#Ïì ç`oƒ” W0ü½¡¸¯[³òhtgÈŠ£õëÑHÉ$½FgMååMûx¶AeGôh“B×"o*H›ÏÙR[àMÖ4CnòR'—EGÖmÚwhó96 h£¶26DÌšÒ+¥Î¡2Guhc4àu¿ò Û¼q³( kÖgCƹØi_Sû¥‘fg;d'^ÆÄ§çàÇ}ç0¸kZrý,uÄèü¸]ÛSg'òEqJ©sE÷°¢0'ÚÂäO¥ÅX¸ Õk†7¾X†™¯gàú…#hßó^Ô > o2ÞýjãÁñ“á覆+>¦‘k~fu–8‰}8 ±Û=uµ4hÑ ÷5X…%?,BRäuŒ¢e,쨛‡:´Ò0í­¸»}y'Š\_ΛKÒÖr4{†¸ë‹—RÛ·¢Í写B™úQE@PE@Pþ£yWY’ vyYi8Aûü1ÊŽ yo(ÈÆ‰X2äh›Mï9sǧ5¬çv+˾y{Z=ˆfõkCËOÃü)÷ Òº1ÖnÞ€.î×ÑøÁ9ˆMͺ}C`Èà>øåÇèFëCÃŒ}üÆŸÞ„Û&£ÑàÝÚX 1>q ‰ømßf<3n.J¬éx®¼tl\µ»]„ƒ‹;|}½ÑÖ+ö4]õÈÞøyÝNêWp¤³³}Q»k0FdÀ­l&“#ƒ þÊq|½pâÓóáåムÐ0‰4À“¦ÕÞÕ¯/í,>{h½nrrNÚ«Ö""»»yaãÂWqàÐ!D^¾B£{ùð¦‘×·¿]‰ÇNãú Úv–O;³y4êÊ.+…¦“œÌCuŽlüíŠÈ¨mD£ü×6}ŠWßÿ{öîÆg€ïÝA†¥3 9Xºp!ކ M%÷¥SÀ…v”6¯^2ví\p.>117s-’6–ûë÷l òRw±ëw¢ÐÈ–óT+¢)†7J»ƒË×c@Ó•·­]‰GNéŒHFç,Ï;pGFÓôh£qܲSoŒî_ûŽ£õò4ÚO®Ã]C0ºÍn<0éE;‰„ø›Ø»y%Z÷~/|¸ Íë9ñC;uÇS]eçÊýª¸ã]ö÷ž‹¥´™×ñ­ëŮຎR¤Ñ&f™¹Ôi@® 7‘ÉÔæ¨~Ùñ û6¯¡Y¥§òލs~þ®Ü¸‰ø›7¨ -ÃÞ“‘dY#;õ2ŒzDd¢•‡Tš¾ÍÎÑÑë>]Œý‡ãÊÕë(±uÇC¯=‹áS_ÑSE;9L›‹ý²i'Ší½Ñ«G/<úÈ<&QçÃÂOß–KÙÄT¾z*ò÷6“ž‘SÞFréü÷„ô,êÑ%=|ÐgÈ`Œ4ÚÃ5$Ç]ÃïÌG·qÃP+È…ÖôçãÜö­&lJpóØZ±~[¦‘“z©Ùùò‘®å#è¼üàZBªà̼[ú¡QdXëâ܆¢wmC>̳‘Z—¼ããã””€ÝTÇSiùK¡Q¸ ç6¢x­:¥@'-œ=ù† ; èœtÚ.M¬Ç"emª„6Ö[ÿÓ2l¦e¶NnðóówåYÐ2—ˆæà°þS|¾ègšŸˆ›Ñ—±rÅrœº/¦¤'œ^%òƹú9ÛNÞ¡èwW¼4k&.ÛÔCG:B’g`=<:¶¦ÍÇÏ_ARb<ìÚˆUö‰òÓ߿ؔLc3Ò7…ËL¾Š§‹Õ;O üýrŠ€" (Š€" (ŠÀ!`õ2¹*£U·âáJëŽ;µn.vW—»³i“‘’@#mÎèܾìCHÁaµÑ$Ì ¿]ŠÃGàRª#¾9hó“û·`ÛeúžŒð@_Ô#c(ï·(õ G“z¡ô¡kÂÛ©øzÉY¼þÎ ôpYãµÀ‰·-ܰ×"?ýƒ—GÝlišw@íXüþkظï$Ònç ¨QÚ´íˆæ BpåìL™ó!¢¯^ÀÖm;0hÊóJ›¶eÐNѯÐnòg¯ßÀ–­ÛØú<ûâ;ÚAü,Ö¯] ×Ú¹¼9<\Ýàfƒ%‹á·ëYhݺ5"ê‡ÂþÖ,Zº +D4ªOʹ Vó¶óõ@MÏw ªƒfuÄzVz2œhT½cÛVðñ§%´Nùúoq%þ6BC‚id4mi?‚F¶îXƒ·?þ‘‘g±uÿ)<÷ÒkèÕ¥%sMéS¦ydÙÝÓN7÷ã­Ï~Àõ˜8ZSí„¶t¦v—®]àL›bÅÓf½6i‡qO2š4šnîf­» êà,[»§OÆÆ‡Ñž Ëú!þeuÁi.ÜNMA‰¥ ÚuhGç¿Ó1UÔâï‚”øåì¦uChDÜSŒxf_9„k¶âìéãX»i7&ÌZ€ ÓµÙÀgþ¥†$’ÑJ뮆szìô´Lï3S“igq;tëÞ‰¶BÈBqmÕ© |ݨ •‰eŸÐÆhZ/©I7éø-ZòЦ1šS'TN&4*'íàïã‹V]úãÜÞµtBÁNœ:~¶£½úQ›õÄ͘$x7¢§`=yê@HˆK¦ÉµÑªq8uxÂÃ6KhWïȸl´ë؉…î|þí¸xáV­ £Òš´E;Ú½<¬V8l3NàÏiwøÄ$h.è×¹5:Ðûæì`-š:se¼¦ ŽŒNWZ‹Þ¼A¸H?)ÊÂû´jBûÐ{AG}…Õi@û:$âûåkph÷ä{5£¶þ‚=]Kë¿síœÑ¼Cgø{¸ÐLŒ|$8 µÁZþ4C‚ê?‘:pœê¢eD8‘.£,ê7-9š­Úµm-–¹dg¤Á‚N hß¹ío#ö}È ú¯Ý¢#êÐÎí! ðÞ/ã updä eÃzhÙ¡MMD ¼VîèÚ¡%JÉØÍ >f­Ú!ˆN_àñëø›ô·'°šGÔÖóA†®…qúøUšm1ÿåWqñêl¤e1½Ÿš‰!ýºQg[ÚõëŒÔ1·yÏQÙ¿;O'Ѧz½éä;:šTÖvT—ú4wþKÂléh¸ÛÔÉvÿ˜GèPñ7€ÛnƒÆ-`së,¾úþg\8w ¿¬Ù€º­º¡ -¹Eì-è¨ÄmšÁZWDš·ð Õ}D»>ÔFøo•þ×JÔŸxR?Š€" (Š€" (Š@õèD±š‡wø¬dÔÒÏgEâKThäQËB:GY†±*ñ!J£a qq¸M£ž~Aðd#‰>¸yª­…µ8—X( Ÿ|Ú0,Ÿðpw£ðB,|}ŽFàã—ŸíA¥›âd¬åÒúRKž.Î ×c—¥GºoÑÝmZ/Íëmh®/Ï¢uæiÎ4⟑–Š Ú¹ÝÎÉ•ŒE?Úùíd“±’–žA#£v4-6€â‘AD)jƳ°e i³¹ÔÔTq6³'í*ïå^¾Fš š[t\ï˜îäê/Oý iŠl  ¼RS3`ikOOOZ{KǜѨazFì\àFSÁ yù”<ŸEn-Îø¦)p¤5¾ìŠèø¨:KÞ‘Ïu§2f¤¥Ñš\Mœ[}ãÌ~<ñÔ¼¹t5º6 !Ù|dÒôöÛY¹p¤Î?aä—1âjf#\>¤ ´ÞÖÞÅ>´^˜§ÞsGïnžK£ú<ÚŽ¦=—Åå¼ÐÈxRò-wO/: Î'ÿòÖÀšeži]3mÊÇSýÙ1ë:úÍÊx†¼îK#×d|'%'#‡f$¸yxÁχö`yc“ä¶Äq¹î­løüyã”e¡µâXñzj'šÊ®Ñˆx­ÅæMÈÄÔsª£\:ÞŠÛ- iùïöîLgg3>Ã:Ÿ6+“'Õªs./tQ^jÃezèœù²v¨Q½ÑYÜÆzãüó&xi·i‰‚<=¨=P½óÙöÉÔNré {wòwçvs)x$Y¯wѶø n{:¿›§õWä[žŸ¢ âÒûÉuâ䤟/.무¨Œù›ônѾÁ!´Æœ—O賘±áµà¼3z±±¦ºá©õŸö;È¥iêÖâ¤Éä§Þù"zç(=>œGÐóé”q9-%à÷-Út™>êILH@®A£wÏŸ:JQJŽ4]Ôµgg'ŠÇëÿ h)‡­g×ßCæjú>p6d3æ÷ÌŒtz—ˆ3u2ÒûËSï¥Ë'¦É)dS{yy‰¿9z[2)+ë£z›ãvÆm_O_oƒzGFëÚ“¨îòhOW7zÇÝÅþÛhÊžÓæòç_+êX<ÙS9E@PE@PEà¨Ñ@—ÃR—é³é=‡ËgùäõÀ64TÚ‡,-äÙ£ü“ˆ‹<‚F±éØeôo[Ÿì!²¢X†­(édBÆgiÈàŠWùùmæKzy$ÎÜ™~”›‡™?ë²úè›yN¤lšoª)¯ŠUEüBš–ý¯v­Ä‚ñãç`ä _bâ#÷•­i7ÏG¥ô„^Ýè0—5–qk*§”‘q+=s¥Y¡þŒuÏ|äNù2>_MÛO%}•té1+ÊU¬óŠa•ë RxUmΘASÍ2ž©Ÿ^ï•ùš–ɨJf¼Êv"edò¹ÂµR]r›Óß'^ÎÍ™:ÖÅδ.Ìõ Ów’㘴áªäkÒWm¹)týN:̵B>¸\3'ò/ü*×™h…ô+ä…ËŸi==%]U;-—aÍÌ–:S(Ÿ¦<ÌóÍ’Ê)Š€" (Š€" (5¨Ñ@çˆü‘ÍŽ Zób6 9” rÓ0áoò±ÊS«ù;Ÿ7PâÑiKiÓå5±s9Üòñ\i‰±ˆNÌDDãÆp¶£í—¤ºŠ|sÃóÆrúùØú‡¹4U8_¦yúÈ?¸Yž þ –éTêXЕ‹5¤B†Ó¢¼rä‡x%ý¤OêᆌG`£¯DÒQat”\AÂê )íþí@»±>ù¯¬<ÆrŠÄMH–×IJ|Y8²ŽhD•2[É(‘eáz3gPA}m‚ÓâøÜÊëýÊó¡çÇ4ܨÕW023:+¤+ꓲNíˆ 'ÒÓ™ë-Mg«×( E¶¢r²ì¸-Èzåøôý¥“ºLõÈ0ÝO¯c¦#ËÅá¦ñ„> `¯×³./uÉ«|gä³¼VL«üýÔuI)Ý_gª—_¾¿ìÇ:d¾$+NmyåZ©tfõ+Þ;Ñ„õwœõ³ŒlCú{©3í™Û§Ã„¹*åëäƒt•µw“÷Nä;˪O'y>‚([í[¦_±ê%ù4MËß4ÿ’QMz¤Œº*Š€" (Š€" (Õø]½ºˆµ?ØJƒ‘u›?ÿÕéýOécKÃh<™ç[q2'¢žE@PE@PE@øß$ð1Ð%>68Ù™ë2ìß}å]FÌ>`NüÏ|äôßÍH•^PE@PE@Pÿ]ÿ,Nb©Œóê”êÀ¨ž QE@PE@PEà™À?Ë@ÿ_&©ò®(Š€" (Š€" (Š€" ü*oeþ(SQE@PE@PE@PEàÏPúŸã¦b)Š€" (Š€" (Š€" ()e ÿ¥8•2E@PE@PE@PEàÏPúŸã¦b)Š€" (Š€" (Š€" ()e ÿ¥8•2E@PE@PE@PEàϰ®)ZiiiMÁU†ñ1`꘴*Ñ(OE@PE@PE@P1¶•k²—«5ÐÙж´Tìÿâ¶£Š®(Š€" (Š€" (Š€"ð¨iP»Z­ú””¤¥¥ÁÊÊJd‰UçX¾¦ðêâÕäÿwè4Oï¤ñGdþŒ^Ž#uó•9C.M~ªò¯ÊÏ$Jµ·$ž© ßKgž_éÿG®¦:Må«ó7•¹“{™ß;ÉkUy0÷“Ïòz'yºYÖÏÎ<ÿwºœ¦yæÏ¦2U…q¸©û#2UÉׯ¦0S]ÿɽi¦÷R§¹?³“uf^ݽ¹.S9«ê™ý9 3½7MWúóµ&.©œé=‡›>WuÏ~ÒÉ|Èg)ozå0Y†ªä« —i˜ËËtäµ&9Ó0™Žgz_“S¹ªt™úU§ç÷t˜Æ3/«iܪädú2L^¥_^e¸éU†U¥‹õÈpŽc*cfª³º{©Ëü*u›ë¬JNê6Í ûÉ2›†K}æáUé•~2¾ùU†›^¥^égÇôÙTÆôžeä3_ÙUU–?â/õ%&?¦þæi˜†qùl*gê'ó&ýL’)kæ2¦ºd|5•3æ0O†™¦izÏáòÙüÊaÒq˜tR¿Ìû˸RÆôj&u™Æ—ò¦²5ÝKysæºå3Ë›ç[†IU¥gê'Óä«©¿¼ç+;©O›^MÓ3õç{&ýežä³¼ÊüHy)'¯,'ïåÕ4®ŒgêÇ÷ìÏòÒI9s2¼:.¯ÕÉI¾²“éËte|y•òò™¯2®©Ÿù½Ô'e«z6Õ-夙/Ógy/¯¦ñ}||àáá!ƒ*]+è¦ œ8q6l@PPŠ‹‹+EVŠ€" (Š€" (Š€" (Š€"P=6ÐKJJD‡ÁСC…nÞ c[P@µÃâñññÈÊÊ‚­­m¥©@]E@PE@PE@PE f¼Çžó(zu®F½ºHÊ_PE@PE@PE@PþZ•¦¸›«¯a€Ý\T=+Š€" (Š€" (Š€" (Š@5Ì×°›‹Õ¸M»2ÎÍq©gE@PE@PE@PEàÏø=»Æôß³îÿ\–T,E@PE@PE@PE@0'P㺹°zVE@PE@PE@P¿‡€2Ðÿ®J«" (Š€" (Š€" (Š€"pG”~G¸”°" (Š€" (Š€" (Š€"ð÷PúßÃUiUE@PE@PE@P2Ðï—VE@PE@PE@PþÊ@ÿ{¸*­Š€" (Š€" (Š€" (ŠÀPúáRŠ€" (Š€" (Š€" (ŠÀßC@èW¥UPE@PE@PE@¸#Ê@¿#\JXPE@PE@PE@ø{(ýï᪴*Š€" (Š€" (Š€" (wDÀú÷¤5Mÿcgaa!þý^œ¿:¼<zú” h¥¥ÐsU1µ?›G™ÆŸ_1ÿ¬'Y¶Š¹"––ô¯¢çŸ~â4˜ÝÕQš¥Ü6¹]RÂÜøúwäCg¨ëéýEý+uýWyÿ™Ä¨~¸ŠD݈¿U+)cB\kª¿?*Wu*ÿ}_=¿\z£ þ³÷®”þöIWýß+z7JËÓµ°°äf[æô¿Ÿ¢VÊüªÒU)ÿ$]•\™’ÿnÊÊ,þ®P]™pû¿-žþÿb~Ÿ¤ûÿ½.d9ÕUPE@ø7° “ÿÝW,:‡ü_œTü„ÔóÇYæ“ê|rÆk’‘q«ÓUUº2ÎÿÌ•8±kiYõD Ó²›6ƒ?ÂÍ”i\ÿßi3T.ëØ4#Æ{ÓrU|Ç^UµJþO•³ªxu~︀S„ªÊõŸøU•ͪxV%÷ß÷«ªÕ”ç¢æÐr¹Šwzg‡ùûYI¿Ñ\Nꪪô0þ{Xÿ¶jÿ%Ã^F”WÒÏ]RNzÿÿz­ž×¯Ä¿—‡Jmà¿—5•’" (Š€" üÅj4Ð9-þH+))£`–VV°ªÆØ“ùâ vÕ}rØ‘áu¬é·’q+-6. €ƒ5å©X!23Ò¬­Ë'˜ÔT÷\RTˆÄ„DdçæÁÕÓþ~>°â¯R“¯ó¸\ŽêÜïËVý¡mªuÅ?e =eüt­†Â—”Ò÷¶¥0ØílmÉ™ÒèS¡àe~z½™×+gÓø=_&ùûå/­t£—»æö#£1ÑܬtÄ'$£˜, [{GÁÑÞ¦Lä?áX^ ÉéHËÈ£4ìáä;KÑŽÍy”ˆ¸²&Ö$•–‰Ô”lÀÚ~Á^p¢üVrR¸R€™Çû=¢œl†™äÕ,•;~”ìJ‹ŠŸ†ÜübxyÃÃÕ^è’Ù–í§ '‰ñé€-üIÎÁΪŒ¯Ô¥Ñ;Ÿ’˜†ÛÙ8¹9Ã×ßÖÔ÷$u°âß+«iALãIÿªüd_9œy›×}õßòü‡üÂX[[¡”þŽÚ;»ÁßßÖĺª´d\S}F­Fy š=T"Þe΄ýM®`(“Rê¾ù+%¹’âñγ·UÓ4 ……¤§DtâÙw;[½ê ËßÁâ" E¢=ÛÚÚÃÖÆJd©ª¼šÇ­\YGåúÿ¬ Çû#éU¥ßܯ¬,Z R’š™{'WñÿówýNÒ,Ók’`U~&Á•Ê$åKŠ ”˜ˆœ s2±äýWðÂÇ‹ðÚWË0ý±Qp¤¤‹É àN i·ÈüräGqUSíҰq ¾,?XÊr¸x¦Îýƒ™™ðdzžW¾—Ï¢‡ëŽÓd]bºoYŒú>9ÖÅ·üÏ’§ý³GWŠ3;àé1‡ÑmLSÌ~{„<ÿh$nZ¶Š¼ô´X—•Ýå#0ÐX´›«G""ÔƒŒ7j ez„µcþ$#N‹3iâD^y7]² ø Yù¾m.£ çøüO<›´5NB¶WQ~f},OñéA&©ƒãHgErt Þ¾GιbáµÑºn d}"ÿô÷äüSx¸ÿÜ;·7¦ÍìCºžžžOÐß ”äaÇâ­óâe¼± 'ž~æ.¸:é%"oT6½ê¸¬zN¸¬ìôéÞ&ì¸F‘fHÏŸ›>êy£{rúß3]?Çc–—úYÆÜfbásðÊG+æÄPŸÌÐçÞÆ·¯>/*Цï­LÓâ{ùÌzKKh&Œ•%rÓã±~í:\KH‡«O0îq‚=œE]pÞ¹Ép3ËLŽÁڵ뗒€†~ïøz8Šò¥&ÄàÀþ}¸@ïìíì\Ñ.ݼѩÛ]èÔ®%¨óI8­çŽÂÎÝûq39dÂ7 Ý{þ?öÞ°ªbû^齓N„^¤ ±WìOÅ^ñY°¡Ø° ¢bW삈""Ez¤· BIé=9ßÚ3wnnÁòøÿÞÓï äžs¦ìÙ³¦œ½§ì3}{vâ$ƒn7*_ÓVåÎàåŠy'˜r™g3Fêº6mB‘Qt¤¹“N7Û÷_cZ:õùÕ´$oõ¾©­À²™qõ½/âŠ{_Àû/>Џ?5‰ÁÙlE°©<…¡cÂ%²Ü+Þx•ôBAütßÒ}Qå)ƒIoúŸ¤ñ`šª¢,¼1¢#Þž^‰N]º`çöíxü͉xúÛÄŸÆyºöÕFÀFÀFÀFÀFÀFàï…@ ºß"¡ù™{qÿˆ‘ªT]{ŸéPÐ] I¡CäY#d™#xªm’Jpv°L¬z!Ørm@ËÝ^^ZèK9X¬ùB 6,˜†§>˜^OÈå®ë¥ÃñÝûÏ£}B3% Ç%Š¢ÜR<Ŧªò"\QYÅX¿ï'¥ ›:4qUz–ü» íZØÖíÇ…3+7™ ¡3ª{Q^”¢[‡eó¦*å<ö´ËñÄ C¸²çoÍ·kÝ †¡%ÎÕO?+oõ㚟öµ¨LÕ eèœ]EA^wS×z6~õÔt^ò,:ŒTŸ¬¤æ n*І(_áY¤pݘg×øªY8ðUeœ•g},CO)þTx\Ã]i›ò7nÛºE;è‘¶¡'>&ºw´uNqaǺ=x{Û<`Îk~@IDATóÒUHˆ Q‰•)8_¡Q^pkfnÁNxaÌ€Vˆ|¥Ä²ÛC%Q?ž²ÓÀ­–÷¥(/ãG]ÊÕ³~¦è¦ßèziÜÂêëF:«3ÔqcÊ$WÓž 7B_¢I˜Tª3­Š jKE¨*/T>çÜý$º'Æ¡Yb{®úëpOGû64ÍÕàjò—•p™l²ªK1sÊDÜðïÑŽ¨pÎÅ—aú±–Òƒ8ԔŴOßÂÝO½£oÆçqÆKÙ´W\7Ìd×àúõœ¸îÂÓ©Š—ÏEß—²»V˜»zÎ?­ Ë- ®ôi—ŠbôcÊp\ 5j CG“Îäèú¬¡f~„ïDù[†Z£+ JM4 åéÇI[ý^È.(wöOáQ)ð.$ oæ(@:lj׀/G›©¯ãcÛ˜‰owŸœ}í´:«‡önR zYEýûÊ%KûÖFÀFÀFÀFÀFÀFàoŒ@ º’9U±<¼ýÐ5ØÆÝ§~·â*G} ²´»’w!+¿€B«›ZÉîб‚üô¶ÉºšjädÁáŒLn%/Wq¼||Û­›«³j¯híÜì¢jÄD† » Bñâá+2 B£•ß©—ÞˆçŽÄ` ~ü½ô¶ÍúÛ¸Q)èVM%233‘™…"æ+i½¼|Û< C¼ˆ€~Þþ\â¢ó¦‡ÖM-dJGfV6ЏÊDUžÜ×-šÃ˱>—´s¹2íŒf\9ÎLOþô „G£k—Îö÷V+#"¼Õ‘—ƒöãHFÊ«j‚æÍ[ *2‚|h7óà>ìIMCIY¼ý‘Ô¶’¢•r^YVÄíܨªó nÜÊíQ‹ôƒá‰ø˜fTg´¨¯Z¬]2Ó¡œ'áã©oáÜþ=QWUÎ-œ‡0iÜ‹ðåªKeu 2ö@•Ÿ*>Ž2lßþtøùù¡Y³pæfâà¡Ã(.)c9¸+›u‡V-ZÀ[Ò—EZZºNÜ>ÓRéQÀÐpPYÎ8|Õ"¢c ÔrËsÆaäW $,ÑQ‘j›²38¸Î@uMˆ§”1–Ûý|؆XG"N+圖™¶ ·lQùžÙ»'œ>QaˆP~9G¼;•u^F寛õÝíÛ%Á˱¢Z\¯Ú„›—/â›Çê,ÆÁÃÙhM%*\IÝÓ[‰à‹ˆX”—àPQRRòŽ]àçMŠpûz&·jU(¼<¸8,* ‰‘ðeq¢Œ‡ƒKÄݼ؞µ’RVT¬¶xÍ/A5ñ’ö –Ñå¶p‰UÂv–£¶Æ{£YT0Jró‘–š ‹ÛŽÛwMdûóS<è °îŽâpz +àÆ£͸%<&.úxCÓ§îÉ@û—Û}lb4’Úİ>˜•Â1ÜmÐ"hÞ¢%š³ŸIW‘w‹¥Šc¡äw„+û,9ûm¬¢¥Þ7ÇÔ‡´¨ÆN&ŠfYQvîLF!wE±^ JÉ]h€ —{™L©®(!ÿ»p(ƒ» 8)¥ùa<ÙR‘Ë£X9<Š%ÛÎÃCüq„ï‚´ôLDrìéÖ¥¼¬*¤2ý¾G¸û!ݺvæ„">°î¤¿×V—«ðƒŠ>y‡F„ ð ÇEWÝÌò×béÜ)xýÏØ¾É£ µllllllþ1pÿ8®Îª¥¶,n篳-ê碭X³þ¦=ùK¡‚ú1k²õê“÷©8Ïü=ÎÚ}(GE*ÊØo=t~}˜‰×±¿õå‹­òjM¬ k¿õæ3ÿvÒPñbÚèçþwZ{‘^5á¹”_§ëþm)Ó|Ìûú-Gº®Öü5[u¾‡S­{Î96ßV=϶¾øa!Ø,«¢ Ó}ïu*í3ï}aUHe™Öð«º9èÕ§÷Hêc}òíÏVYµÎó‡‰:Ïó¯¼ÑzðþÛÄóádëhi•ŠX˜sØúüÝ1Vï¶œIpÁèôëµög–0NµµhædkpÇú¼$^‹¾Y³—­W4rÓ6Z—ôfxB?ë©—ÇY¯??RÑzûÛù–Î…|sM¹ªë“Wuâ×Úúræëhq©³^Ë ó¬Ìì|+sïvë†^:Ïv:Y\ŒS4ï~åcëPv†õæW5àWñÕÉúhòKªlëâé:<¾ƒÛ,ÜwÊ’MVFú>ëþ »+¿¯ç.WlÕ•ç[_Õ|ž0Õ*§/·nZŸ¼ý¢Õ‰zŸ+6@skñ¦Ýº². Šð¨Õ¯Z³æ¥¨(»×m¶F]õ>Ó?ÉðGù÷¤uIÌ8kò·ë­r¹¶Âšùá4«7óxâ¾o¬Ïߟg=Üã몫'[G+¬ƒÛ¶Yw´cßþ#kí¦LE“ëqÁñ´ñ—UÌóëÞ{°²jÜiÏB…šk]E™õÝØÉÌÿëóÉë­*= ¨8“÷X/Ý2ÞÂòy—Î,ËM=ÇYýˆû3£æ±=kZéÉ©Ö;|nÊ:ÌÃ3YÖ·Ç-´òK§¶Êš6všu^´ž¼÷+ë™[?fø³¤÷œuãYã­¦­±>yé«'FY}X_çàMë§Ée´ËI?dM|nŠu‰ÂR°zœ´^±^~f–µ7]׌‡Æ™ûêòlë™û.e|X³WmÖÁŽòWåYo?9\…Ý|ÇÝÖeg÷T÷ªýÇ÷µf,^g9z²J—¼n ïí=ÖsO<¢ãö¾ÜÚ‘¯ÂMî—ü Â†Þ|¯õìÓ«û¨‹±ög:Ø«³òss¬Ü|ólY•…‡¬§î»\ÅxçãVFI­•“¶Ýì FŒýÒÁK¥õÙ›Oë¼O¿ÖZ¿çˆ¢™ºuµõø=ÿÒþŽ4RŽ×ÆO±²‹t½çJ±Þ}YÚvÃ>~ßS¯Z)‡uHK^uL¸ÄpÑÖ’u;ü[VFÚkÌÈcß7¿ò‘u0·XãÁ3gB—›ZÇ .;}—5úá[ä›Ð¦µzxãSVzV©J•y`—õÖhî.e¸oÔXkŽîw³>{W¥»ò¦Û¬{îVO3°—õñ—S­ o¿TïG|3Çù)Ìa7ºA¸”}Ø}OZ’÷kÎY&ã–ÍýRÅ1öc«ÈÑiLŸ2qì«€€€€€ÀßYÒú]§×ýF£<ªV*Kr0eâXŒ|åC é Lüê[Lùô´gôqÏÀ“¦¡œ¢„'Wˆc»Ç;“¦`ÅÊ•˜7û{¥å•JêUæÇËq Iú)°’çïÄ¿n¼ÏŒ~Ÿ}=ôÊÆÕ»( ¾þÈšñž];qñ}àå1¯à¼^yÆÔBpt¼<îc¬Xµ ~ž…‘÷ÞdïĽ7<‡äý¹ˆOêˆÇn¿ 8¼ -ðس/aÌ+¯¡M\8¨!cÕfÅC yÔÎBYq¶º-¢ñ,Ùí»qå\ÜþÐ3ØIo©§uë×cöw_áü^Þ4Ö¤ñ™Ø¬6{ú Ï+q*‹·7y¢àɧ_À€®‰È8°cF Ä'ß-ÄÙW߉i3fâ½WŸæòó<|ÛÕøá—5šº*È¡†ÍKæâÑûÀ˜·¿Pþ••Õ:œ-¬9œ¾  ßÑÅ¥ðŽ Á½ ÀUWE³fKñÜí˰%9‹q=ÔÊêûo\€ÕËoƪ_®Ã½OµEîá,€²Rƒ™¬|Kɸ£¦¸&cüpî%Ð,T¯°ë:”ºÔ…Ï:xs牨ÖèÑ+ŽÓ,¨(ÌÇô·áéÏÓàîˆqoÂÓŠÈ(w²f$oîШ.ÌÅä—~ƃonÇ5¯ ÄÞ½#ðÛ¢¡HB±ËWíU«ÛÕ¥Xb¬þ(¹%¸øÑ¶8µmŽ,ËÆk×,À¯¿•âú':£Gÿ@¤"³¾Ø‚£²’ZWÙâÎÑëQ‚)_^†Y_ AûÄ:Œzq>Ÿ´Z­¼J¹„§¦œØ³'7µ«ãŽi3À“¾Eëþ—ã7Æ`PWöÄÃkqŨw‘zD·ýŒÔ-xb์9¼ðÎêÛ]¥ƒ¯Óh§`ž¾ë7\?h(Ð÷6¼ôô#8½§ŒÂ\ öñvnÏÃ"š!‚»Y ¿y¹È8˜ªâvŒKDÏõ—”ÂÑS”«vçpG‹ø*Vð´*ŽÄ#`ìø)xö­Ï²o–þü­j“OÜó/¬Ü¸ VM)¦2Œ‹kx›wîÁ–u‹qÍ1øpÌH|5s‘¢ééá…áw߇)Ógc媕øþëO1tà)X5çk¼öÕÐ6 êÊsññkã©W?Ä#ÇbgÊ>¬]6uexò^̦­AXÚ—o8žã,’ÚQWYˆéŸ¿‡çÈ·¸'Fŧ?Ä஺Œ²“Njءº“?ƒ‡Ÿ{7x™ý#›Ö,Ä}€_~Ó~^®ÆŠº*îÞ ›þÕ§X“Z€Ç}gœϱg=îvÆ|» #Ÿx žÕEÅþÌ'8œ«ß{s¦NÂ#žSþo|ô¦û%®8Í_~ø óåë!ºùÐøŸlAçx_éû×FÀFÀFÀFÀFÀFàŸ€@“[Ü_8-ðÈ™;}zÈà¶ä™/kgܳbؗ›±Uš­¶cN|m†ßxN¡1²»}–[PÅ¢s9j*üF‹éÊÅК0iVÆOÓÇ(¯;} O| q!^TTÊðñ”™¢å;ÙÄݰÏóÏÕíܺ É)g o·6oƒ»y†>'7O)ÂÕeþÌ7JEw®¡ubJ}þ"åhzîìhø>þÑ.éòòQÊmÒuå¾Ü’ÝLgæ‰Ê ­púø*¿öC®Ã7ÞÂ)­¢°tú—˜õË*úûrë9Jr`ÎôU¼G¿'¨,džúãÂ!ƒ0ôæ#ˆð­âöüÙ*üê;®D·|ŠðJƒw< ŽÌíS±?} ºG{ã”ÞÄ©¤?ñò¸áŠsàíVŸ ŠÎÚÉövÎ)µÿ«ðÒˆ-xzÜWHgpú˜;ó;GL`ÚüÕ¸úÜÓð¯[nÁê%ocÒOÅ8뢡¸ýÂþÎ8×Ýz¿Úrª0¨$áz+=c•£ë)qÇ=÷àõOX?a-qõM·¡w›X•>+-][+Óhõ\s(>þÜ“ABJ‰?œ¦ž[w£’ȭ՞܂۱G|ôÝ"„rû¯v¢Ð²l wçYÌó.»{’×aÃó“бÿyõ̽ÜR¬úi2>_Ê}ðï{ïÁåƒz¢,·;ò3ÒðÜ;“9ù± ×\p&|ý4YÖxç“18oÀ©Üþ_Ém·šw|9?át²Í9h}nK q!ÚÑê×ö.ëQ°á$§U"… z¿®Ñ¸âŽs¹M÷¨Ú¢[RXMkã¾Hð Ñ¼ZnÏv(²¢ÌIÿñð•ºÒíîÔ}Ðá(S”3^%üØÂÏ D›ùÕc Ï¢{ò(“;Ó¤âÝW¿TñztHd 3OýjÛí*ö—ïñÛ¦8zõÙÜ’®Çµ~Wގƾ„î­Âðõ{¡Xñàó@çÁ˜öÙôiƒ™_Åáçe³1¡’í¬²°K~~[ÑŒÊøí· C(ƒ„yWcÆ·cåW¯aÇ¿oAóðªÍK3“•º½©¤ö€€€€€À?£×°8"æh'Â'EJyÆÀT?¿c¹’¨œ‹óF«6‰êŽ P-Ÿø*ÏÇ_ŒÇ[¯?‡í™:¨c§Îú†Š‡'¥íjZi.-Õ^½zõ£r.Ôªy¤QÄ©†Î+|âZ_xÞxâA´‰ ÂÞÝ[ðéÇï`ÚWï!ß3ß¿;aV>¾ûìC¼÷æhlsäÛýÔ^*m™À\9n‹¤W‹ó0sê§ÿÑ;X³C'l×­‡JG–œ+WbÀIœ_"xš¢8Z$%(?¡+\V–S±p€Ø§g¥œKŸÀ0tí‹«BY™TšË&cȤ×Õ½ëOe™œ}*r´o×Sz¡kÇv®QÔ½RþDf~ÁQ‰J‘rù-ØÉóšÉ;·aÕÊØu(—gr3qÍ«_àHß^ˆ¢õ{«NVrD‘Ðu,÷e\üyúd¼=n ÖÈò6]û.J@ IœIC,ëG °PY”&7N§ ¥âÊËËx6š“}Qý½[—â¡»–J"[÷À]wÞ;nýϨºÖP=dVÅ•²**X9t±§µAë¤æêÞ?$-“âÕ}­ZWQw&¨uG¯¾}ÑÞ´W‰å$è¨4•’,¹_0?GEåP\BR4âzx!7­LM@Tq—Àšyk1åu<[ËóÙTåZõ ¢J‹ÝŒïá°3 ó§®JUáîõ;ñíÇ¿á·/3‘AÜZ· Bå}QåÝéD9*åäWÛXh„¶™Ð,&Ñmܱc[m$/‹ =18ÂFy*ÏÈvˆSÙ‰!¯¸–roa÷’ߨâ 6³_4—ùUpÛ Ál­Ýy-åDB W%ï}Tž›‡£{ïvrÔ7©ø´HÀ5w™v®²PFÛ”16*¯ÛWïÆäõãa«y•ÒˆTå®8;K?߯Ñ"}$!ЛªWåŒv%m0Ð ryÞ¼k÷Vj\Q+Ÿ´{ $©¦2*nÒÃÚYøá¾exGVùÍrt൒Ÿ¤ª¨` 0Y!Gª€P_„†ùSAm,ø#‹e?•~áápãpÌ2—a µZ)µLzx‹Q?/$&ÅðWéóSpä°ŠEÅlOtš3u{̳%9oXÿ<‡.ΟôrŒgIí¸¬ °ÕUcÛ¯Ë1zÒb Ç@læªmÆöeX³d¾ŠQÀ‰É·ß|·Ýz-ަ®Á»?lA‹CðÛ’Ÿ‘²f–ÿ2WÇK^ŠWÞð·ݎ^Z(,¤Ù•äÂÄwÇâ±W&ªxŸÿ0ƒútT÷K*wÉü+á'ò”#ˆn>‘(–Í눿Øõ  +ÀÍW^¨ï]~Ë*+‘Ësõ ÷ä­x¬À(ù:bÇP©§¼Ü½øè7ñü›;)t¢qÞT–Ï´¢\HF¿#4ôÚ¿yÜ)QAZP ºÓÛå†à,ª8.ËP ®ß©½æ'í›ï‡ñ>õIQ–±¼¼$RP,^¦m“Ú$Šø(WN»eìsRÿ⃂ٞ¸Â͇gÚõ$ gw9& ¼íªè±ˆÚ¿²½"ïÇZ«@¥mצ½RÎå!&.‰ý”ùù—WT"^Î<ÔƒúqiPõžö€€€€€Àß?¤ k¡”b)·ájGÝ!«‹#ʇ¸âb£ªS‘,sH>ÁTfë¸ùÜþÈsŒÕ ã'OÂEûbÏšù|Õ-”@dÅW(Ð9ä²R-ˆ0ìÐÜ‚•D3ŠMzuíÙ ñnH¢!®ßVÍôŸÖ`ev>Š‹ ¹Â8w=6Z’àÓï~Æà¾Ý°oà ºâ&úˆB£‚œù‹* lþun¾ÿIøÞ3pÙ9½¶s-Îâª4u§3l˪J•¬Æsý‰_v„S,eY5sìpEA‘(n¢Æ« µ’UIƒq^>þ*M»>—âí‰7!ŽÆñªÄŸŠÂÑ£E4HÕuei4ð¤IËJ¡r ‰ùלèÕsªT’¶nÚ„ÐÄèsÆÙê*Ò÷ìÀاŸÆßÍ œv]•"Ï’Ë£ÀjDi`Ço‹pí©lÆMšŠ+/8wýŠ3_ÉÉ7¨ÙkÔW ¤§cš§ß¹šÄh¸°À1GENvÑÈÄœr›–â%þׂŸ3LOÙƒño¼€~û!˜Š°¸t®®?ëXa—ç„–mQ»} &ðï̳/Q ºøJÝŠÞ|cƃ¯ÀëÏŒÂÅg*AÊú¡%·ï$sn2mßaG½ÔЈã¡¥?WʹCÈ”¡(”†(Âi]Z²M²-qRµ´¤!Qq¨Ê=¨”LIxÏèOpñÀÞ,ë€cm Öz"Ô­3¦} ”óØ3®ÄøçEŸÎ±œ ü ·ßÿŒ:¦ é}·°£'|ƒ‹œÂ/qŠ‘C»(F­W Bü4˜Çöc¡àZCº¯ˆo©ÁYÚ»D¡SWþ˜ggàá÷¿Ä…gö„'›H¥ÕÐp\­W»’7Û˜î“Ò±¥}pêEMt)bì¯úýàèKôe—RY1ó~(å{OzšŒÕUNṲ̈ ê⊠ùq0kí«€€€€€Àß?  k…@Jº~ÝJxÖä*Í¢‚‚~·‡Ó"rÿ¡]±á‡mX01zwLâÚ\ÏÒ.Vàô¼°­baóÚCêù4~÷ÔS{ ž–­×óœ©r1>jÛ¡oXánM¯½˜Íóνº·Eó€jüúëF-ÊCÄã´`Rrø V-YŒÖ1þسc3–/]­"œÓ‚–<°9ã°zî|þõèÙãÄG‡bsAžò‹õ¯/¾»CB–m¢Läeh~ÑçJôèÑ ´’¾cƒßÖ¾† çD7•6ç6V²)k†Å¿D_ ‹Fë6ýÕ«1áë)hÛ’+†ÝZã0ÏÏÿ8#¿e<»öaНñ·ìÞ@k½ZÑÊ:·aòlèšäˆjÓQhyLS9sÄ@?ûëF!qÑ/bÄ’:LóonMRÖɳhi¸Œg/Å~F„ÐB·U™‹Z2—ºc'öë„· n‰w`Ðý*b×-⢰g]¾ÖT UÊ£z%fͱwÏ´rƒ?WŒdâ †»Ä­^¶Ýš‡qÀ>¬X½Mù¹óœ¼{m%V.š…ôªp º`(.¸Ä )›V :{1æl †TJ›‹p-gLÝŸ;%×ѱqZÑÚX¶ô´kÌ=[±èç9*ϾÝÛ±]x#Û(÷ì•âÏPCCElð£Åâ(ª•´ˆžMëæ\‘^4{36­.åW®‚ŒòÜý8Êth£½Ã)-‘Ø"[Òö¢˜“(¡EW‘eÓEÛ[ÜE‰(çêXî’JtãvÛž h×>ùû÷¢ S&¼¨ŽËĄñ•é´fÕ…?²ú­'Ä‚v8t`×é˜sî\vEwøZåX1w3Ü9áÑ¢M4·{W#u~! o*£%z®Ô±ú¾k] âý¸ú×2Ø‘£ã;õäX¯(‡wîÆèÓæòÓhÁøpõè×3Æ¡x×±þRðîá\Œ~ñ4$µN8d8Ò)2,Mi1~ýi+Wúƒpú9í-gÔ¨Ub ,D)ÏÞܪ¿lî4ñCm^vm.D‘~i‘q¡T¨=°°¸eÁ/´-b›ÒÒ~16°/¹•º£]네Ή ­¸é+íè³¹úÉÁÁ˜ŸÖ#ÏÁá¤ß‘ý=3Ÿ+׻ѭ{½Ðý”®ó)ÆÑœ,åçÍ: îQ±;é³–“‰Yð:‰l¿U¤±ne2w—„Ñbz'•Æ©P.? wŽ¥þœ<ŽÕ“?ΙÜ!•ìõë·:ÓKž‘Q¸<øñteá?ÎBëæÑ̳›Ö®D?ÑÙ½ ±uôI±ø.ã“8s¤Áϧ~’Ì9qÀ³5lc´ÖžØjcÿ£Q pfÿîhá‰5+*\ßGËX³êG<{SߎHÀv666666ÿ,¨œÇÕqJ{o]ñHMþmHI³Ö/å®´hçów¿¬S„6,tXûvЊòmHsKº¶ö¾ð»œiÍ÷R+å¶âþÆýW5/²¿5w¥¶š¼vÞ7 âq“¡Ës¸•œQ`Õ–µ¾¨ƒò¿ìDe=y­¬¬î/æÌÌs”õëöCª\SÆ9¬·8×JÍÑ„w­ûÉwæ’í*Þ–å?ÑÊ´IË+2ܧ•µ‹– Ër÷[#nâL'yÅDû:ŸMͶòÓ7;Ÿ'L[¦+HYÎvÜòB¡T?T–ZŸ½p·3~=ï:^h-\§y«.ɲž¿ïâq‡¿ôŽõ˹ÖžƒüÄYºa¿Ê+}×ZZë®/›ä5iîZ‹ŸË³Æ¸²AW>îyók«¼²ÂšöŽÃ"sø)ÖÕ×^o îÛÑ‘¦ŸµdÃ]G¹¸Ê­žëJ³­—ºHÅrÏN éU¥ù´4ý”Kž‘õ÷]/·Ö'§«ôÎpú/rXŠ7´u†.XÒÂþOMeüiõüYZÑKâÊRûHëå1 •5æŒ]»¬kð ã=IKàc¬+ÆZi¼­²’þœ5wQš"½âÛŒs;ÿ^¶¶8Ê/Z¯ß, £uø¬¡!¯[ç©<¤mÝo½6n•J·cÉR>K¾d­Z§-hgíÝoÝF‹ðï“ÉkU¼²œlëƒG>µâ”Eø'Èï+´æþãÜeMøb³UYRbMóµÅô{Ô:…<^7–Öà…Î=Ö̹b9¿Êš:æS>³n:Õ:’#ß6 Åï*ÿö¥+iñÿ†²–¬<¨Âä§$7Ûzíº7é?Úš¿4Uù×ÕÖpíð³îŒõìý›·Ñ’ýcÖ¥§O²öÐŹ+€–ú5ýš²bëë—¾&G­æ´ÎÞ‰¸Ê_/â.e½çެsië•ÖÏŸþD¼«G¬V ¿"|,-¿K¼aÖ;ﯶªª*¬ÉÏ~Áç+­{îùÖÊ.kúuÖ×O‹ßmÖÅ&ZEÚ理]\c]xú+5C÷ç5?.!~R¯#I÷UëRÖ[yoÏ:þaöv‡µ÷ú¯ZðØ‹*·«÷™+ô×jk´%ÿŠ¢\k¬ãËQQ¤Ý¨ÿü°ÈiE^sù™û…¶Î)6k_¾¶2î츭³f|:ZÓíÃ/]äéú«e[{G¿còsÍÿãŸu;ÚºüÇ&â%Y?-s|í ²ÈúvÂØñBããœÏ¯Mœ©øùuþ4ËϵŒAaÎ8—Ü3Ö*£5ÿYŸ¿æôãÔˆË=±¹ð +§P¾UQk-ønbðfÍœÏ÷=;Þªt f(<Q…õÃ'®y6¬ô¿ÛJw´û%3¿¶¸ÝÜ™Ϙ8ï¯{øm«’õ:k’‡³ÿeíÉÔmz†›vVòmqéôÏiíµ)ú=²eÅœïî§rÒûËYV…ú¤€ùºJµägi»°l+îMÖ®`#`#`#`#`#ð·E ~ ™o{WçX à÷Æ“ðþ;op½Í‡ß´å*W‚d‹o5Ï»ûó\]x3$´¹ëWü‚ —`ÏÞý¨v÷Fëv1ä¼óз'U7º®†`áÌo0wÑjˆõî} )&i{÷ Ü=¡CD/¾ó§âçÅ«QÃ튽{÷¦Q*/~v'<ÂÚ 8@–ÝÐcÈÕx½E_øÑИ^ãú·Ð‡Fr[mt Q:q=μئ`Þ¢•(¥¡®n={«ÕšÝ4&T`?®ÜyÔaÐ #ÜczôÔß9ëÐs Ïþó¯¢5çtãŶ‰1Ø¿{;ŠÜÃI#oâÚt€W_|¡ÍÛ «$âB"ñî›cPÆx‰±z%²ÛàÛíë±tÅj~÷¿+^ªŒ)uí5€®ýàÇo¢?3î3œ}ùr¬ß¼ <Ÿ ~s<: ºœŠ¶1¡ð"æ“>xÅèÄÕž:N:÷Ƈ0£Ã™üîî!~뚉h©Þ“ßÌNj×gœqÚq%_œg@îxøD·È…ÂBžÍç Wô9­ÞZ4Sg.@)ÏñvìA\[Eã@j kü¡1hÞ¦;>_±ó—®A·Ú–Õ"‰–νi,êºûFs¿ugì>…è„Ö8gÞk‹3±~ëtïÑFmMí=„+|o&òûÈ\MÌARÏspÁã¬Õ·–…G‘FÕº¤úá½§ú¾ /„õAëSzòŒª^±òb›¼þîGßö,Y¶ éG²áŠ.ÝNÅœN­› 9„ǵÄ[¯¼Ä6¸p³Z¬‚üè|=Ñy@7|ûYü¹Ñ» iý_vJ'tHÀ€AÔ‘W?~÷ù•ÍÿÂÅKSQHÃnÑ-#ÑšÆÃrÓ³_îÎóà‘ŠvëmiÕú:.^ªÕ^nɽó•«ÑúL®()E@D0¿kGۥطï(:ôm©ÒŵMÂ÷Ÿ_:/´j%çY¹K=67~!Tóœx¢òó£a½{_¾}/IæwÎsyÔC“}Xl8zäyn~[úú'¯Å)çôÀŽ-‡—S¦ #ò;êÏÄG¢ÿ$ÒñD÷sNÅ—aü}›æÜ}!¦Ã¸žïØÎо¾œr Êê|ж¬Bjw8%3¦fâÉ'ÏBŸ¾²FVe¿€ºS¿R›[V$Óªº/&>À¶ÝBãïábkƒ«¬×?rb‰oò®|øñ»Òm»ÆÃ³¶û÷E|‡–42(T½qÁ­¡S¿ŽØ¼~?WU‹¹•ØbòÆ=Qç)Ãx^Ü%ÑýüøŠ+ÒÍi´0,P÷ÓS/‰±áÎ×éôN˜üÁ­ˆHŠC ˆëwÙ@|¸3kW¤Ò lëwÃÐø0ôdÜ®M?^L+u4Rú˜£8²3GœÙõ¡î~ƒ/Š^Ûr'E!j9vö>ýl >£ŸÚ© «À²âÊ7Œã. ÑI1ö¥àÝÞÜ!NV…å[ì¼Ñxó+ñ­OÅ Ï=ˆ–=¹'€UiÐæC¿¡àõŽáO+ðb¤Ph»ñ¨‚ió,u7×õŒ i­| /]…ÃYÙÜzÍoÞÇ$p«üôïÕEÅá6®¼u8~ëÜ“;c~Å~Ž5e•4pÆUáöÈ•wq}Ͻ[¶ý†¥ËW`wJ ‹+‚¸øèÆ ~ÏÛƒ.¹“'úbÍÆdÎ`Ò¿?‚¼,¤ìÚ…Äî Dç †í:ñë«°wßÒAhx8¢c[`ð1œ)ñW}5hÆ¿<#~áÕ·áGßp,X±ý"½i"È»ŠßEOETË®0öñ^| ~ÝÒËÈÿž½Â%Â…"6®9Î|>yó@Bû=jâ;vG¯ÞêÔªK/¼>æEøD$èw yˆ!.¯Ž~±Iˆ â´]·çá›­ë0wî|Z‰OE·ËÇ'¶ÃÀÁçbЀÞðaÙ¥ è“*<êÂüÄ™ã"êÁþ±°°°°°øG à&S ÿYIŒPÊ#u<3W\B‹ç$ÅPŽQš\·–skkå @­Ü¹æ­E-U•p˪ÅmçA¢€ÿEçšoY Ï'RÀ<^¾É»òQÎ35Üæ¨…õÆqy®‡ÃäJO<++Êyöš&ļhpÌ[ rjâÃ!QVÑhP%S‰bããGó]rXûO¹†Lˆ!;1æ'¸1õ¥Q>ãòƳڴN/ø¼¼¸ù×!àVp+g5?©t,®é¹RÊI€jnÃ¥Ñ?e«®¦Jµ ±xïë­“¿ëUp©$ŸrÜ €íÃÈ×®y¸Æ?öž?Yt³…TÎï–Ê™kòDÑ^\Ã8ÇÒ¨÷1ùæf =-‹e2Fðˆ-­‹-ª ?uY ³¹ó|»7˜æ•ÐPUB"©yª3ÏR#BOÎ‹Òæ8®ÎDËÆnÆ« ÷n¡ @p°¯:Ë+g¢…g•Žbry6ü?)»´y¹zSAò–©³ø4`Å<ƒÙ–ø3±3àE[^äµ´¨%%üêyðõ÷A@•8¨¦q9﫱”ü5]ƒŽø›|å\ºLÚYUå˜?qF~¶£? —]Õ>nµJù—¶$|y£â¬,¼wá<|˾Þ,¯/íðü9gR¤ü²° r_¶+|™Hù5(³Ž+ʵ7µÃÒ‚R•ñ}!,aœX«à¹tQºÛuJ€¯Ÿëq ï¨ÈÆ Þ?øcÞ›ˆ~]Ú°!T{À½4ï¾8 ¼6£Þû#ïÆc%짬o3&˜ú•««3íÛøýÙx&݉®†¦Ä‘/'”Òz'§fáÏÉÁTù;øròSW£¾”!Þ^ÞœÐuŒ3®´ë2ÒâF 5Æø±^:Nо'ýY‡]CZb¤Ž´Xßž¬#Ž• ¥ÿ%  ÇüI[ìJÈ@¦j™Œ ¯rò¼œýµÇégÑú~Kf!y©É‹@­0»æÛ0Ïßã¿>¥ÔšFÊÅžÒ\+}n!¡ÑA¾«ØNý‚8q¡ß¿¶ªÛ·m§•û"l]¿|#^›€ç¾“ò™?öC¶_ÛÙØØØØØü½hZ[úÃår¬î0¾U¡áõ—(„"¢ˆÐ BˆH&"tçð2Jx2Š(øÕ‰ ¢¯Üû6oã|$~=¿Î`ÛÓãx7„/‰bèIyE©ññõãZV½SþL§ø&VÞ>¾ê¯>EHF:ÌI*µÜ± /Ú^=¥¢¸ÜA OZB³¨)È*f@¸LP¸ñóhÕTäùÙ/ƾê˜NŒè¹3LÎ= 8ÆOq_~µÀÏŸ»S*jhA_~w*´Úˆ™äéÆ4Æ`œJ'õKÂîÎ]é ß5œ ð`Z_î>ñâ÷Â%³ª2N ”Kß °/FõØ6üøC~Òɤ©änI«y”sþ‚§ðÙHAwå…¼K¹3ï@/g&.¤­—ç0%ðÔ¿ïT×Ü©³¥W„ò‚¬CÊ/3†#É¿•LY)†„Ý7ë¯*òq~þl¼ã8ÆKhªþÏ™(tþ4Z…Wã¼'7…Ô³:L·QI£ðeøÔ©&ŽÒde nzì7|iZ2aÐ0¿2Ú5Yòýx¼øÙ~²;Šòr`qLN…ù$›oÝQ~13—¯w(èœpáj~S®ažMñ/ŠC×øYB5ˆØ€>y •¯8y®áûLε˗E>xâ4L\di££¢BµÍzûÎFÀFÀFÀFÀFÀFàïŽÀXAׂU“¥Äa½]RÇ¡Cþ\ÒDÔ=ŽÐÙ€Žäyüx†¦ w¥oîMó|¢|M\Wz®~ÆßøšæÙ„‹¿ñITs¯|e®¼H€ äLÇ{M¯s¦¯õþŠr#|ů±3ü™«„ -C×5¾+o&Nc?×ø h8Ê,ñ¿¹:Û…K::Ž.×áѤ“kãøÃ‡~T¼Ô‘¡Ã(, •p®â–r%Úµ5›ú=¦þ _Ž´Š€ç(¿jN®ýÇQ¿$ªxýé™FñtfÄGZ¡üwä%e1q%„ÎQÛkYL:W?g<fšF}Ýȳ“y /òIBñ“ È ~G^¶èš’G]M¶nÞŠ|^óæ*¿Xö–oŸwïÞžÜm°~Ý:¤ÊàqŒŽèI£h~œ00“tÇÅMò¥3yȽ)‹Ü7vMÅsõoœÆ<×ÓÕmÒ¤ÿú0›W©'u©¯QF=&®Ð1´$ucz®áóiüìWhI=ÔñOþÑ|Tr‚Æõ“‘^ï8Ià ‘`nQ ðSüžçÑø¹qž:\09~½º*oÁŽ7®~'¦/“ÛºI¼Z©ßΣYyœòe{ª(/GXlºtl™ƒºéÕ—Ù¾³°°°°°ø» ðô¿KQl>mN>¶Ð{ò1ý§RlØVDQ=‘šýOEá¿W®†øÿA>¨Ô*íúFÿoEû½²ý^ø‹o;_?€­ ÿyÌìÿ?C@m‹AÞv6M +Ç[½Å©±;^¼Æqì翈ñ{Çý1Em âï4‰¢w3SY¾·€€€€€À?[AÿÇT¥]ÿE\•EWå¼)ÿÿÅ2Ø<ý “dEo©×<¹¶©ÿ.m6llllllþlý?ÏNj#`#`#`#`#`#`#`#`#`#`#`#`#p²Ðæ›O5›Ž€€€€€€€€€€€€€À_BÀVÐÿlv"“‹€­ Ÿ\^øŸÎäÿ0Áßß“Mã27~>yü7i4.<‹smŸãü7ùýÿKÞ6潦mìþv®¸UTT S§NêO¨¹†ý5êv*ÿ%ŽQÐ]úƒ¢°°‘‘‘¨®®þ_âûÇK]]|||pôèQìÙ³:t@pp°ÂÝžðø¿©niûR™™™HOOG—.]ÔsMM=éôS:£¨nܸ-Z´@LL ¤¾þ©NÊ+c…”7))IÍÿäòþS뱩rÉäííÔÔT%Lê[üÿÎΔKä‰]»v¡}ûö EUU%ÇÖÿÎF>OOOõ®­­­EÇŽÿ6㆗—²²²pèÐ!§‚þwn6ï6666Ç"pŒ‚îE…æÍ›#!!/Ò*T¯,ŠÀpüUFyÁÙÐ3ÏæjüåÚØOž;# 43þ&¾¡Õ8ž 7W“ÎÄ7þr=^ZßÄ;^ “x&̤iü,ñÄÏ5®a‚w`` sQÐww÷¦W&gÍÔ»ñ!± õ)ŽçJÇ5_åß(OCÁ¤‘g“ñ3˜°?â/q]ãɳӉëh;&Ž„5•oãüÍ$‰@ªíË:QH’ŸÉGžéC?}çúëš§ø›g“öX:®©ëóѽ¯>̵¼õ¾ÇÒw k|ohž$ÜÜþLU662ÓΠ߆†‰gÒCÏ„»^füNtˆ‹‹CTT”ê?¿)gxmîÊ£„¹>7Nãæ×ÐtÍßÄ5a®WS.W?sïJCü„Ž´Ci§2‘'cD³fÍ~·¼†ž¡!ׯ´q¤bƒkùͽ¹ºÇ£)qÄ5v<•àD?Mð蚤qÿp k꾩ò¸ú›´ÆïDå3qÍÕ¤‘g×tÆßøÉø#cŽ(èòþ5 º+V&¡ýg®ÿIZ×| Ã÷‰ø3ï7óN“¶ò»ï7×ü̽É×<»^Ç‹k¸Ü›8¢ ËûU&¸g3ÑåZŽã¥•ðñÐ8Mãg“¿É§)ZÇ‹'´DN¶!íÄv6666ÿLN¨ Ë By‰ÉÕ¼0 ór1°˜°Æþ&ü¯\›¢Ù”ÿ_É£©4& ?™ej*?ñ!FÃØØX•§¼„ÅO9Ö…uõãïñôçø¯W&®Îýø¿®yJŒÿ„Öñs8Ö×™'…¦¦U²cÓ5å#xË*ºÔÜ7¨—DÇ+›“Æ;^¸£­R@IDATKò?tkè5EË„37æ÷GHÖ׳kì¦è»Æ‘{“Ÿ‰ožÿxþ)þçÏ‹ð!õ%õVÉ>SkúÌqÈ7æÝ<'êÿ¤—)o||¼Ô+++ Üñþ#嫯GÓnëÛÉI¼|OºŸÿNR??éüD‚²¢+ЬLÖJýJý[Gõš°ÿ´®NzÎêÇ ñ“ñTx”¾*M2¶JY»ÿ´†Þï•Gò–I‰'¼˜ø4½‰÷G®†öÉ*›Èc¢¨ÛÎFÀFÀFÀFàŸ‰À t)²¼PÌKE^ªr//ù3÷*Ž„1¾y ¸Ôª¥ä¥V#…É×/w͓΋j+ýNŠvæ`ZaO*ÊfµÊ©$ŸŒB5ACÊ"ùÉ,¾l”•[Q8Œ#aü'q- ;j•ÈQ†¬©+QôuýÔ9”üãkp:_O¸{6éJ~¼0­¡øûWÅÓ¸ f*¡Ô“È$µâéÏýl%O¡ëáá©x<¤žèû§xwÍFcá®&¤dE6 @Õ‰ñ—¸r¯Åü4PºÌ.ågœ)‰M^TÙXמŽú®«ÓuÒ8W€ØT¹kkµðÛ8NÃgÝwêËÐ0´©'Å·¡zzJÿÛˆ`mñ™ù“ᯎ~ø¦2þSiÒg¤øùùÁì7Ñí¿~œÒƒ„®?ÁNš¸´£8üNvÿgÁo=ÎÖg*Üš¶§w H7öA¤ìÞ =éC®c]-ÜÜ=ÕX#}JÚñIMò§ÿ“'w5¶6!dÚ€áQ5ÏøiüÇ?ç ×TÇós 7yþLX=/ƧáUâK]–••©Iñ   AÒÉŸ„+šÒ¥Ð¬?õ>ä<ÈŒ Å‹jV¤Í~ìoø¨cäßãõÄyIzǘÁˆ5µú˜¼_¤¯Ê»Mþ¤ïIyU™\š>Ù4ºì’D¥uÎ`dò–ðºFå1yI\ÁYx’ ó®•4før/a'rÇå…åsb+c%ÇΦËÕ4õÆ|˜ç¦SØ!6666W~WAwÌñÂ2/#¼™™ÓßÒ»¤kü1qL˜ë³ÉG§¡QOè¸å‹ïdQ$B$qåE®$mú<›VÔLgþ¤£^÷"ôÐɯ¬ÄÕðÅíáéo/OgYœiTLþ8ÒªG¦×t äsLüã¤3q$¾˲r"W-¤¸ÃË›[ÙW‡$ñ=9{.‚‡Ð^¼÷ €US]£x–p9Û'Š”;X/O“+¯ZyÖZè«©©BU™lãöP³òš.³+5)#o*<¯ÆV |âWË áѵŒ&¹ñ3Ï®¼(Lâëp U•å¤Oܘ—LªüM×ÇuÉÅ¥^L<“Ÿ<‹â)u ~ò¬”–ÑÕ‰(8¹–¯F¶KRu§‚#4ãØ/†®áAåK:eåU` ‡õ+B¸â•DUÉW…—Žú—²gÊÔ8?8M&®.#1¶×t*Ü‘—‰SQÎ6Å|ÕÒª¬(cyëàéåÝ ¹ÒiœŸÉ×õ*ñ]ãýÙôBKêKoùÔ §+ýÆ÷Rg•ååJ ñdÿ–±FÙpÔ™£¬U˜Œ¦Ý©[çO=¿ÒŸœÞŽ—þæBÏÄj\vñ×xËX'}—C4û¾¬˜É|q¦¼*=ëÂLÞ™p¹ /2f¨~é Â„QÍl5ÇŠššZ¸3/ɯ†ÏeK$oŽ=Î2 ' Ç)K£,Žûh°r­ïãFTžlóü'íVþŒ“qOñ!í†þ^¬CvTËXÃ0)—ŒÛž¬WKaWã¨[]^¡cøÂÕûšôÕÄ©çÕ¥]8Ai:¤¾=¹Yò¨aºŽ…’Òä!÷’®{KM¼Ôoa®Ÿ”ViØç…Žð.õnøZê}(‘Ĺԗ¦­ó“IMO¾ 6Â\Ç›Š2c#=Y™•w¬Ð3´5AýÛ˜g×0¹×áLOe´¬¢œuå¦ú&I7x¿)úôtÖ­`êÈSò­©a›7ʬKY¤~ _ôVu-ï8iÕL#a&o¾yŒŸfÒ ¯2ÁeÞ[Ú_Z–à-܃,ë¸joÅ«îBS" /zì·/zRBx)¯”zƒCÓØÒæj°6|›g w-‡‰o_mlllþü®‚®^¢ò«­FòöÈÌ; oÿt¤ш`?õ2Î>r{RÓPU玄–mÑ:1–/+-D5V¦Í‹Fà3/ñ“{ù“—5Ÿ¾wö87o´i×ñQaê%X˜—»öð…W°èèÔ®¼¨›ˆ‚!$?yWÊ €´:‡`¥òD¿yÍK×ð$/bJ¥ð@-¶­Z€­E¿s.Çgõ†—»EšGób”ô&­))è}È Ï›fg eÏ.ì?xÕun ‹@<Ïð%Ò(V ¯'ޤFqY%Â"£ «ª‹¦OÅ7 VãòëïÄeçô£š'вÎCñ¯ðeËé©Û1eòˆîÐ W^qB}(¤SÀ0< oÆ™´ÊGx¦bH1Y‡÷ÓøÏnÎÈE0¢YÈ_BóxøûxiÁÙQ?„E^¤¬Z8“{Þ¸IžËø©t^¨)ÍÁìéSð­¸ý¡1°O7JéTj¥Þ¥I>RNUOõφ†D¨oºŒ’ùR²ýQíìÃ騕²Û ²^8‰Œf‘QˆŽŒPJUWuËàó¯¾B oÃMWœo7 ŒT|œÂžn?’¿Ó1¿úvAAløxû ÿÈ!Ìœöö×ÅcØÕ—¡uB¤ðUÙÉSmE)VΙ†ù[ŽàŠ¡×`@Ïœ,àvg¦¥ÅÔ“*;ów·ª±w×N¤grõŠJ—io²…¶ûQö#O)»ôAÍ‘ÄEÀÇÇE9éøaê瘵>£F=Šžmc°lñ,ÌY¼—Ýp#óï"ó|å/eä_ãväú,xȳüý~zÝŸU@–––RØöCuy¶lÝŽÒJN8o‰"q+ËËЬy+Dycþ÷S0g[ñ zwj¡”;fíÄÅð+åaj& û¿(8ä¶á˜Ã 0 ‡nwRvQ.uZÝ6Uäv’Ùk€ÔAyq>Ò²rááÀ³õÍàÉBã¤}Šr! AqÞlß¹‡ã¯iÏŒEÞjê<ўƯb"CY¯¢,h%W0–6.+uÕåX36^ÿàKÜôàS¸ò¼þ8´k¾øfZöºW_tÇN0=ëUµ ò[GúuŽÝL®õ¨ê„ôMÙ;Ùùtlÿ®ÇŽwÆWõ/`8œ”¯¼0Ÿ_IF'ˆ‚Â"ѹSøzɨãŽÚªrd:€²J ‘Q‘–q“cfQ~rò áíˆhb§•ur%y‘~ƒ÷½u¹óaÆ ™¼ÒmÈ´ )Ÿ¹7¼JÝwô˜#“¬UœÄ:x [Û‘Ñ1ôóvÔ3óRñëëÄà(t¥_ʤLXx8Çór¤$'³ïæÃ/(í;tä»7€ÙÖ!çpöìMGç%Z·AR‹æ2k¨û¡cQø“¶(Ì“íª¸ Ù¹ðò 6‘ðó¥Ñ±Ãûðõ'_À#¦ß#!2ŒCi•³^LY…ÇcÇVÝ¿¥@ª¿0™è)ÌÞ‡o§~ƒ¼êf¸öÚ+оU¬W¥íúû¨I‚̃©Øzun²ûJðw‡¯Ÿ?¢câÅ ¶c¾Û%ù'<¨ö¤Æî&Ée]çÀ?(Ä+ÀÏ ¹Yû1óûïq Ð Ãnù’b" Ký1=CKp6ýT_YçV RwnÇ¡¬¥ÌògžM\ûj#`#`#`#ðÏD ^âk²|Z`¶j«°|úx÷û_TÌ7&|ƒK÷EUQ6VΆgÆ}®üG¾ò1’ã¸ê,ç£ä…êx±ÈË”/:(éq–^¯0ÖR©¢Ÿ‹² ,™]»~[‡_§hŽýnz.‚½©8¯[Œ»yQù_rû3x¶u+xSo’t"ˆÐ,B°'_r¢p˪ŠY1P‰„#úË Qs§_¬òò'/~p²÷ïÄÌ™?"¬Ý™¸Œ ET*9Œ e Mq^Â3•%üðYØ:†©•wÇ*….¿ÎC¶×ÔÈŠ·ÙšìPF˜¶†Š¥z“†lýã«›B¥îÝO?xSæ­£_C÷Þ—³1¸Gæ~õÞøj>Þùz&.Ka°B ÔÕU\9b{¤´²/+.N~YžJ ³1ùûˆ8Ó_r<¹ÅÕ±êc<+ô¤!X+AÂLòÆUûìX•Ò?yš2g!º'5W‚…Ô3×ÜxŠÂ&+ƒÄ’u¥Vm˜‡ÉOYé,õ ä!S‰iT:kX§JhHýñ¿(Ï>ªh!N¶eK€´;‰"«Y®« Ýt½‹Á×WꀵÀúÍ=´wÝs¯zvýñhy*^qŸyB|Èð‰#qº.É …_E™ëUwK+ÚR c‡°ÉòJ™e•TQ™œ7a*¶"×]q|}¼QÎòËVI©MY©ß¿i6~þq7z8WªW Ï~§WEÒž„\ ©,Ŧåßá¹w~¤CwÉ-ãÙ¶­¨ˆ‰A<ǪÓH ¾‚ŸÔU-'éÊ*kI_‹ýTäæÎ‡žç^äTz¤ßk…L„jÝÎUŸ'ßÞ\Õ”Äf%QŽDH;W-ퟅPí€ÏF1,$¾êÓŽº3}UÂDÑ”Õ_é3^ì§•G`ômwaŸ¢zìÏ7 Ç#מÏñÂÅ¥•: IsUÚTýÑß\¥ñäLÕ³´%wNÉÊ]ƒ1‡8I?ˆ MÓÆ¤¿ÔÕ±M;&m¼¨p EY)” F3J|W23SpÉå·¢ëÛðáKÿFD˜?JŠKÏÒ>eâÇu^š·Ýyòoü3iÊL$&Ä Vµ=h>äØë—‘I˜’¼ų´ÁâÜ#ønÖ|´ªk+Î?ƒÍˆ«‚ÄG”\5J®½ä^øfÅxwMá"e“v®Ú!ý¤ýÈ$•éÃR6Áƃq¤=‰òU?>K;cväAÆÊ*Ž_’çÁ”-vûpGÑzàûyo£S‹HÕ×kJ³ñíÿÂ'³ 1yú\ôë w¾«’[‹«o{ç\7¯?}'ü|dÛx…×d\5|~ëDM¤Ñ_vý×Ô{BMìªÎ\v`H:U×Â?Ëí©&¶ã{/Ƽtà»_V£=QPYj5á"íKµ%ö5ó¾?56ŽšT©­ÀšŸãµI koL˜‚‹õE]y–ÏûÏ:Þ½O¾ñZ%¶PíXÒËûT½ÏX_¢üVUK?ñBÊÞ¸|ØÃ8í²áx÷…áð÷åxS„IßüD ÀeC/SýI·C×ÌJ¶~o+žYïn¬²è蟪âT½ “ª-sRðãñ_£ŒÏ_z¡ªW)ôUyW Ùé;9¶>®ÊÕà§Ãé˜ðôœÖ£#Û—ŒE¬'V²_V¥éC{·þŠa÷Ä ½Œ‡†]MÝ•%˜ýÞ'ØE¢× »yzƒ§ùU¾R7jÃ'M—ü“¾长e`Ê»£ðí =Š<ûÖ'¸æüÓ‰aýćë;\ø–ryp‚sGòF\w×ølø(ù¯8ó´SP‘}3ÞþÜ™ÄÇ!äg¥sf<%FøÚƒgÌãš' e‹8®Æe`/WÇk-Ä%´D‹øhdFjÚŠý^ˆç*€¿ãìþ`æœ{vxø–aùüYμ‚8S.N¿Š²Îz§ -ý°ZÉŠ‰G»vmÐ,4yY‡¹>þÁò÷BÆáC¨¬õD›öíâ뎽©{SPŠ˜æ-ѶuKøòåéå§ËêãVÝ;¶ ;+þ²zÑáÁþDÃByÉQ¤ò“hgR"ñQeiÓ& ÁÌ£ ?©)ið å Vò³³àæŠÖ­â‘—y©{÷¡°¨”«c¾hƒÄÄ„rõG½ÌEI£ðmU—`åÂJ9påíø÷CK!=ëÐ^üüóbÔ”—àÀ^®@ìܨpHMÞŽ5•ˆç§¦:÷ꃛš5GóÑJ0_vìççà ŠDwGX³tlÏ •¾#ùÁº¼ø(’w§PÑ—íöÜ%AAº¤¬-Z%!*‚«q~v%§r¬»ÂsáÌo”r>løã¸êâsäM¡zß.Ìœ½@ ª¬Ÿòâb¤ìLÅþÄžºct\Ú¶mƒ° ¶¯:rÅ+m_šZ}póôV»“Z!2,¥…G¶™9yl™gHZ¶j(îèܳ?ü£d‡E„LÁ ƒý©ºTTÖ"08ImÚ°ÂáFA<ãÀ^ÎÎGPh|ܪqøðÔyù¡MÛöˆŽa½j![U#ÿˆR/­¡8º/^yâV$„{aÃÚåxë£/ðäwbܤ©¸àôîHb{ºzØmk¡7™Ê:¸iˆyI3Öut,’Zµ„—U‰”©ÈÊ˧rZË:ðEhD[&²ÍRÉ¥@Æî‚­~‘›yëŽ@v~!âZ¶Aû6­”ÀêÚŠ\í†/'|˜€ø)»÷ ÷h1WÛBÐ’«j­Ø¶Døóö a|àêÛïÃN‡gœÊ+*Ú,ŽüT!59e¢‚Š‘ÄÐ0´HLDt³0ø„ {¿sÐ,©”ü+aÖ?8RÑó¥p)ㆨ²›f/뱸´^\ùmÞ2‰;jâÕ*ojÚ!µ#¦UëÖ üÿØû€¬ª÷ÿ" ‚ ((ˆÊqï=*µi65+mh{Û²lOÛei¦™–93GæÀ™iâdÈeOYâýžs߯䨾Z¿ú¿G_î½g>ç9ûYÇ‘„¡ÄPò¦Ò®üÙžî.8NnhRb²ó‹á̶ hÕšLoP¦Ç'ãhF.'&$#åP„náÑ̇sNk4–ùø8IÎo Çgfv uááÝ\µ}#Ž©âÂ$¤BqE´ j…&nÎì›Éä’f¡±§/|Ü£ð[šw»wþ†l¿æhÞ¢œ)áRQ!D $vX; :¸{‹ýðâ;!„ºJŠŸâ\è牌#©„ÿ ŠŠK…ªgÎãÞ-(ÝâãE.¦È!|lò£”~òb?a“8Õº‰p£ÉuåÁµ óYr 2É•–»§·Y׺<<ÆÆE£°¬Š}%^”t:EkbbrŠÊàÕÜþl¿rm“d®dýêÔu¤çÚ u€ÉÏ"~S ^Cw¶G#Ε¨Ó 1üýÔ\³×œß2°û9„ø{“èÄ9?áç*ÂD½ý¸ ê !É<\ås<ìܱC]GÐ*FiŽÃG3PÅzxqjÓºq*ÊÍD × 84€Û0çx: J«ÔžœwLFú‰\Jnµ@[¦q&Qîxú!ÎÿYpqkà222pšý$˜8õp«"ç;±<œS˜±{w¡*×›x€aL&W<íXÊH´màÜ8ñCsoOE\6 OìTâØ—ê9qÌYÜÏ›v o÷¨ÌLÊ9³µ7 ÕœWv9\Oe~Éçº×ã+A¾(ÈÎ@LL¬JS̵;ê·”Äòaÿ´G}:x+‰¡¢´$•Ö/°5®ThØß2Ò²­+â–c5n[øx’x-œu;¶×q‘¦ãÚŽÒl„´våôSó*”ñäÀ¯—öœë•kÙS'ÝW» lZ½s—EbÎÖÚöeÙˆMHUs•À)ýWp%û†ìŒ4ÄD›ã$ëh*vlÿm[žºîÕñÛ|‘ÇýÆ.Je’³íÑÜmîÀ¹JœàYÁD›"2Jÿ?z0±úp.q~ým†ôîŠÑs7Ã8™éGpäè1sLÕa|üZª½ÄJzˆËexaÉå˜ukè>ƒ®DðI{r ÄGïEç7Oî7üˆ;ƒóÈ¡¤DddñJ[öÇÀ–-PQ’8öÓ#ì§§ë8p¼¶äx ´’À¦6ë  ´ý±aÀ†løoa€ 压Uõ÷úõëåË— ‰Iƾ]Û§n¿NH¶æÏ£‹ñå¼…ÆçS§¨oßV>êù»³„øÆWï<¢¾›´3B›™iÚ 4¬\oìúu£qÏuÝ”ß ÷M6"7Dï<¿únuùÆÏ›¶_¾kæëãå¨üßýbŽ1wæ'÷¡f^|ÞxßKÆî}qFôîíÆ;“Vþ¡]z=;‡¨÷Û~ɈڷßX¾àóê4 ¬~¿ê†1Æí7]Sý t4æý¸ÎHˆ‹1ÞæåïÔÚ*Æ„§_7vî‹e"InQa½ 1Úq#¸™ôú'Æþ¸ÆêfYÒyC÷Tïw<üб|é÷ÆmWuWßÝûö³Äñå¢FRJеs§±fÍÏÆÞ}ÑFìî_ŒûGVq†ß|·ñÕ7óu‘;~3víÞmü²iƒñÄ׫ðÐðˆê¼Þÿü[ã³WžPßMùÔ J€±yí2㮆VÇÑí¸dÝcù¢/•ÿ Ñ›·o7>{ýIõ0xŒ1wÞ\ãÑ;®PߓߛiÄ%&[×,6š+<†S?šfÜ9¼‹ ¿cÂcÆ· —6m6¢ví2¶oûÅØµgŸê;S§<ªâ´îØËè×-ÔŒÿȋƶ]ûí›Ön¹\ù…vînN!ð½5ó;cÛvòý£Õ·g«P£{¸¯zð¥Ïýû¢Œ—Ÿ¼C}¿9}ž{ Ö˜÷Å»†uýäÙåŠ[Å?m4’ŸMyÈ sm~Fœ›ï{ÆØ¼c·‘˜ol'Ö­[gìÙ³×HLJ4~üv¦7øJcÅºíÆ‘Ã‡Œ[#ç£üŒyÄØµ×XðÅÛêûº‰/»÷F?ÿ0×èdÂÒ¥GŸêò–ü¼Õø5rUu_îÞÍÄŸÀúÄ«ûâ-?-1†ð 8ÍÈþÒurêb|Ë>½'Êxvì@åÿÚÇóŒÄÄDcõÒoŒÝýèç` 2È’¦ƒ1{ñOF\ônã­gÆ*¿ñ?o¬Ý¼Åزi£±>2ÒØ½?ÖØ·cƒqkÖN]̱)eÞtï$ãW¶Ñ¾¨ÍÆ}£‡¨ô_.\iÄÅí6&?t³ú~ù“Yì‰ÆÏKçú˜ó@5¼3¾fß^¿r¡ÑÉR‡¯­6’“ų?0aìu“±vËvcýŠùÆ `¡Q üîÝŒ9K6âã÷ï¾8QÅèÙÇ÷7aýtö"#>1ÁX»fj·Ø¸8ã@|‚q0%ÙˆüqŽ™çáÆŠÛŒƒSÔ\¶‹mwÿÈ*l悟¸½QÆ¤ÑæXôöñ0Ó¬^ÆÝî5",c[êtÛ#/¿í1böî4>xÅ'­"º}»›ã黎Ï[Ûcì޾ɘ4ñÖš¼,uhòÛÆ®ýqÆöÈeFߦf,_g$'Æ?oÖïî§§+Ì2H6cúFë6fŸo2øfcýö(â‚óËêÕjHHH46þ4ß ‚ãŸqŽØöë¯F$ûï–mÛÙNÑÆÔgPp4ëh´iVO½·è1ÜX¸z“šë¦¿ñ”ò»ÿ…Œè˜ÆBK?îwëSÆo»cŒ]Û"Çï¥âÔ´+ŒçßnlݼÑxjÜöø«Ÿ± IƯVÝ-õùýJc×öÍÆãã®Vqú l´ö0ëýÓGÇÅ+çZægû cp_³ï]ÿÈ«Æþ„ƒÆöõ?CB%¾“qõUÃU½FN0~ÝkDÿ¶Á¸ó éï0"ÂÔSÞGß>ÌàY•ß…¹”ÿˆ»ž06lÝb¼ýŒ‰ãνúCÍ9àþçÞ6vG06.ÿÎhj›´¢êü]uƒ1îŽ3ÛòÓo–rn8`Ìüp²¯^ãêøÃÝO¿a,[ºÔ¸u€9×…·kg 2¾]¼Ú˜÷ù[–o7£w_s}h?r¼±yç#‰ýyÓ¦MFdä#î@¼½k›1ùAsí%¡é"ŒYß-0>÷E37oõ|ჇIF$ÇÚ¨Afy6Ä‚ d|³h¹±ô›Í4p3Úø™u¼ú®‡ùK¾1z6”o£‰ª­ƒ¸f¯ˆäüo,ûn†Ñ¯›%½™Ö)|ˆ1ó»eƒIÆ/ëWwÝhÎ*­ÎÇ¥·±`ÙZŽù$#**ÊX»v­±3j—‘œ”`,™ó¡™_§+­\ËN1¦½ùœòë5ê!cãÆÍÆo>¨¾Ûrœµ¤Ä¿äÝvÀ ÆÊÈÍÆ·Ÿ¿§¾ý‚ŒV̰q“Þ6~Z¹Ä¸iH+h5¦bÌü~…ÂklLŒ±yóf–±Ñˆá{tLœË5å•ÇîP醿ÊhK1 1{Ñ*ΉFlŒì'fWö:s_4øz㥗§¨tpñ2‚,ãìÆ_æX]aÜ}]G† ~\f¼òäxïföq™ë£~YgÜÒË„ýÃY ];·/[`èÞoÑ!ÐEÅlÊ{ÆŽÝûÙ ÆÜ—­_Y½W³Þ·U{Ú^l°aÀ†þµø‹ßÙ©µÂé×wP?¤E'`Þ׳QYra{¢%×í´”t’uI•f´–íúâ‹/ÃÑØÍ…™üié,,^³¿í½á7_‰[ï~‰ûnÀÂÏ^!Û/K.eÎ!xõ±ðn‚dŠøŠ lGiÝ8,þv.Øçc7º7ÀêõYE´§ Äôé(•â†ýðÐí7GñîCOcƛϠÓ× põ!zã]ˆŽÉ”w?E‡¶þ¨{º>7IUùþIObp¯Ü7>Y'e¶6õ¸µH·ŠÄ¡&"Ýâºè0œó²¬cèÒ«7:žÆ†È ¥¾Sq²k|E‘1xô¥÷0¬w8 } ³WlÄS£¯À¯<ʾû>ÜGዯ‚Ÿ¯mZœ@šJó1áõwáëZ«¨:õ㎠8˜v/‚<ì±lÞÛØS€‡žƒsK{Do[ƒ§_ý3–†¢µ3¥êôå‚uðï-ž¿ëfÔ;™ŽI÷>†ŒbQ{Pà«?j¬VZ:\^Ä!“k»÷ïQ¡M8¶iü±UûÜKt }7ä¤Ä¢yŸbÝÆ…ˆ¾ùjôoßÏÝ^ût6‚o›€'ôFë?êÌä Œ† Å ó0kÑëæOÇ÷‘{°;:]ÃZ)}|Yo5®ëÒKîñcؼ|6SEàö;Æ!=›}f:öp¿Ó…kkyÁ ,žóVlKÂè&áÚ!}¸†ÃoщŽè„7Ÿ{O¿ö>ü†Ý‰G/ˆÖ”Àq8]„¬ ³Nöœg:víÅügbþú¸ë†+`d¥ã»mÔ.2a­|¼o«R[è?j½ó:œÊ9ˆ—ÆNÄ{SÞA·ŽíáÎ^ªªÕ`eŽ6gÀ 6 Ø0ðßÁÀ? ³Î"ê,®× (oÕÌà­ñâë÷âäá½X¹]‰Ë­gu(–•—q;·&ãàÁ4d¥g¨´uiô¥´¬-‚ÚááW¦£ðÁ{°PÎðÉ×/sãKIóp. »öAÿÎxí­÷UúÇ^|®\øå€.:¬”ÄQê‹ó©8/àÁ&?E+/ä„+7lâ¼õ ¡CP¯(Ëù \vùèNÒ{Ááê€^%FcxhÕâc­ƒÛ¡gžÈo᎑!À’§©“œ†ìÔT•gq:Åá¾ÍE9óÌQ>Q<¬•Ð޹Ùö0 ÷>ð½e#\†-fºý?}ƒ•nv¡¥¨iËV»mÌ“ƒy½ˆW‹UÝÓu ×БøzšÖFnš…? óøA¬þQ~ ñÖŒù¸‚‡˜ð¶< '  M0ºvæ¡‘m½t‹\iQ!î[¢ uåô`;âÍ7 -ê;ÕGüqî€éÖ/_…‹çPÍxî™»Ð)4PùûóÀ=,øiñzÄ^ÛIûv+ÿ>]#(:ê‰A×܉úbÖmX²r Ò£ÕoñüÙ˜õÝR”1C^¥X±ä{%¾·b¯Ê…ó÷â&L¹Ý«°j…3BCZÁ›¢~^Ìû)—U+WáDû0xÒ^§PŠ‘³]I¤çÀuAV~á{ó>7+AX`SQ Ó`;Å«‹,:¨¿w·^:x 2âÑ…ßQ<ä”É…ïÒþÊ@’õiEÑ™x•¿¢ÏhÙuJ‡§«×â —XÄvs§±DºeóæÂ‘"•¾Í)ÞĦ E0K¨oXŠýÛw+‘ðŒ'T\gGJé›zà§”äntèÐ ÛRLøX‚: gÒpX ÙYÊS†ŸòrI‘viŒ}¿¬Ã‘¸HÞ òL>”¡ôôEgY\ç—¡cûPÔ£:@~q%šÒà”!‡[ü’böS4ö 23©¶¡\"ÕuW>¦¿‰ñ]Ò“¥ØÇö§òzõîŽö<„6D1†ëÖ¬CÙS£Ñ®#‰Mܘþº7}Â<±gÛ\~û£CXTñ€¿{á~~{cÏÖ5„Ý)ûÖð8tè8Ý¢—iŽ©+¯»–FøFPh˜zÔ¬“訋]¥¯ii¡èW•‰õnÊë5ð¤ÏQ»œDo^\מ}©NÓ *Ž©ï;n¹—_vòGC B)‰‡9é‡Uxˆ}–ÿ°ˆÄ­,Ùfâìň+ަ«ð‡®ŒíQçd®žxöM[NÜf¢µ§'Åš%ŠÜ ûmö'K_® ¡Î¥±'‚Cˆ<ºú.ˆ Á«…GC”Pu@tW­ë+sU•š2íqÃè1›õ Q&š…Q왺«ì–Y驨¶)GÒÓ‘šž§òµc>R®¨3¨rê²X!MôëOq>Ì8”¨Â‡÷ëN"PQà‰kÆ_ø™‹q,·=ÛbTP7|9’nŽãT wyŸnå¶Ã8s°çŽÁüo£8óˆ ÇÉ­(¤€&–~ÜbÐU¸gâ½ðóh@ñüº¨,ÎÁÞ];UÜ$Ö9ÐF‚—ÿ@Ö Ø±'Û¡u›q-Ú}”ñ {ê>OPé\û K×.p©[†]ë(?‡üCX¼`>í§œÀ“æÌqP /Š«êׄÃß­ {6´Æ&ªN ¿ü2¤Cq:Wæ²QĹ¢’¢ézL…†„¢{OªaÃÐ1—!qîT¯~-Z!$ˆŽ>víÑ!ØÙÇRÐ$¸ ðKÕ€V ²(Þ^ÍÜ.‚Ä1îã\t†ˆ;¡2H¬׫ï`t nŽw?—µ×¯¿3†kÑ.ÐUD›’’= ¾×ǧaJ#O´mÛF};5òF§Î)ŠïDõ£,¨U Ã@ô8­¸6‹ÙÈúa¥T˜›ƒÔ=IL×½ºÉø„U°¼ñ!¶çä ý=3Ã\ão»æjôéÙÅ$b‘… Z°U ù/ýMìMPNOÁ ‰þHýãn–ÙÛtäÌãÆáýàFuütCÙÙ¶1•÷Q ÄÌMcoÄü¶ÑÉK©§ÊM ÚŒŠÁ1 WS¸lPåSˆrÀ×°q3tðo‹Î|ßtçaýÄ>urQ1{da£¡{3„p“Ö–Íûò"×Tµòv'1=Wåå"gr׸ÿ£½ Äš±¹@×srRqÌÌd3a.‚uyÐTvs/%2̲ÁhBâpRÖ:¡ßà«x²£ž6ïT¥·8Wn*Åb­Ÿ•z·~£îߺås°¸Ä,v*7\Ãv!~L#:r©$7äxVºB‡ž0ñáÇy4˾Ÿ…ÙK7RßžºÍ¡¦~±ÊEíyL¸Í\ ¦¼ðÝi³ 'r|ä@WUe§ìˆ‘8ù§áî@B®ÝñÔáL¡ž\'86¥5ÚfÍÑëŠqø)î+Ìýf.׬†{ëÑ18PéÙfæ•¡ïðëÑgè<öôsHMˆÆw3?á¦&G¥£ ✻óЪ®½‘ö)B u.ý<1kÚøeûlߺ«É±÷4¹§7 ëŽïçLÇ–­Û¶ ®]©Âî~úmŒ¿¾O5Y×Sw&‡‘ú˜–C]9;‰¥ÉTzÑ—Í™]zðt¥Wa¹jru`a ÙÒî*ÞÑÈ^ýúNlOGÚ .çî=*¯Ë[yÓztäZ¸\r`õl» ºSíÝÅx çÌäöO\SÌZ0uòR1~Âc€7¼ùðXÔ-ÌÀoQ{ =Û<øs¼©øbôÛ[öuW=ýN <â§á¢ŸltɈ§+FËÀ  ¼Ð¡cŒ¼íxž4H%ãNÂy@ï3wÜx %Rhˆ‹ÜZGŽJÞ»÷‘›(ÜÃç^y Ù!?q-SÇ’eKZÁéä)囪Í7ÃhÈžŽÆ8v6yÖSÃê8ÙQ¿¾5FQ/tÑÂuXéZŠï·ƒÇ\K]hO”Q Á̽‚z­­!z­ÿõcOÁ‘zåõHôk”Ä9ÑZ»Sƒp"F…[.u—ö2¯ŽÈÌŸàHœL”Ÿ ­º æ‹þ¬F­b¨Ið­ë%‡%™›šÑ㘘˖ºZº4ò ¾qõOíÑ»ß T²žþ´û°÷°9*£w„CrõˆgqìU*¼$âĘ #ëhP¤½…@WN"Œ8±®¯ý5¼Ê‚»Õ\Z¥¦› \}ã-耲Ú<àœV˜y_ô¾^¹‹†´žÀ ½ûc÷Ú:äz’ÀÉ:ª>diW•·úc–':ÅʉØŒ%ñ“ºˆÑ7q¥e´4ÞÔÝÜ…EÛ¿ÄÏ?¯@úžU éˆvrÆ _•æ)¸©·ÂÚ‘‡üÁï¡­┇ÃòB³] ³´­ØšHã~Ûs.øøå'ñ±*Ñü³n[FñÀÔ˜)§Dí¤>UœoDG_œ=¥U”c,ÕD#µN8×oC†+É?Îs§IÈTºš}M ‰Õ¥q"¥À®A¢ YïSìfÎ&näCÆ­àT ²‰;Í›Lä0jv[µ?æãìæ±O|†V½~Å®¨_1ý³Tü cðñä êÆ1^¦Æ ‘z˜}§™<Ý®ŽC‡!"¬-v3 ¦B(“1j&ŠF]ý;áÚQ7Ãpj̱@b…³lénj˜X°Úuüvp¢ô›rRù©îhŽoéÅbPMÉ´0¬ŠÄ N¨*º %]ê3s%a/è«`¡,@`“:IßUuc:=‡À3 ßy5šruqk‚6mƒi¯ÅùÇ’1÷Ç1wý1ÜIŽõMýzaëÚ|x÷¼o…sm…EDæ!³æß:j ÑDÍ‚w'W !XÊH ôc‘NýFyq6öïùMBºyFñ§]Òšqð®[Њ’ªÎœçœHL‘1lÇ‚4`aÌG¬Â‹³Ì8–‚¤(s ÈÚÐÀ­9z ÃúûX»z5ì2Íö ‚çé²Ò2•‡[ÓfhÆõ’kvŸ#XÏ*4o&72X*–í 6 Ø0`ÃÀj û£Ó›VÙ£¶îÐ_Nû|ÛÒ ‘všR9€—æcÿ¢Í*Ûýû£9ÔI»Ö¨o±ú[ŸˆOŽ%gø-ìä‰`À€¾Ø¸q îŸòM{jñ”ÅX™œÊ#y4FCEm[z†\ìÛÃ}…p9Ì»RqŒ„kD멲{àŽCÄ»5ÇB|LÇœÿÅåаZRB<FoÃb!t·õ„·?Å'SUxA…=ü[‡R¬¼ò)ª¶ÿÀnä¸Q3‹äžE¬óÊ>ËÉeÛ;çf¸‰â®×^7K¾z߮݇ԣ'˜7XÜH””£‘{SZ#>‰3^B¾kWŒ¼¼š6nÈM {Qe{yðŠ.è'i O\FZ¹ŸÎ46çTÍÍ«ñŽÜô4ks5°öGJDRíÀ*±uë¯èš³ ¼>(õ@C¤gcÀ°‘¸|ÄÕˆÚ¶/½õ)¶&­Ý«7®’CJ!Dð¹oÃ7Ø7U>ˆÙ·S‚Ð…\EgJ hQQisÙ0ªw¡Š¢š\¬:ËM_³&0é/2PN8Žä³'7r->™9_%Ñ¿' :!‘wÝŠKÉ•%Eˆß»—âÉ3¾'®&Wéû™¯â‡M‡ihê*›mxÛõÃÑ«GW¤í1ÇK¥ô;Õýô ééäôž<Š ›"UþbhP¬ºWY6¦Ò‡y%œw;_P_ › ÛË™×¼II@F‘Vê˜Ë7É2NåÜ'çyf¥V‡ów¡oï^8]xˆ¥¤8n,-cˆgùKàŽŽ Ѷ[6¬Œå¡cZº×£¼X¬F›!¼‹FçÜ]Ñ{Èh,Úö fÎLTù êÑ (5G) ÿÁ^ضþ8ê7lŠpJ ˆÊ¡¤xdÒ@!Gã› aE$„ãE²„"`H{)ëÐÒ`5«2ʈŸZóÛâS+@¤'dŒIÿ§ï—ouüà|dg_Mä¸ì‰r37±›t¢­ËzD(FùÉB,ÿìÄ­ûÉwFæ+̵'íèaÎ}u•QC=gådP$< ®œóh Q\vÉi´¤ñÁ@Jؘ¼?:Nõ9`+Œ—˜†ÃDuB,Í‹SóÛCGÕNÚÈ‚¿Â<¶ ÖåŠÁ"ªËˆóhDÃqö§P,_Y8œš wÎ»å¼ 0.) Ázóà5WØ‹ÉO,fåž@R2}Ò°_9‰0Ò³( c@]ƒi©«Hl8S¼Ü'œëlänDíÛGƒi§q`ÿ.¤0M{ä›y5Å Æ·é—ÍðrÂIJ—E©¦1-°K;ËxR׬±ÏèvW‰üü1üêëàOB‰y€Œxƒ†Msð+ç@ è×ATµÙ±¶¦ÿª<¹¶ŠC¬‰ ¨hAÉ+zÑî&]Žª‹"\XÆ“n3I+x–òDZ$=ý6-2Çèý>An¶0=…DZ‰ÿþÇH®íIðïÓa#ü±}å¬Ù8˜óg/ãO`ç¾®Q#ØÞ&‘-7+“dP¥`ážÇ²Æª1MUŠrÜ…ï¿lþ×$†y-¹F ¦©¯9^Då¡ePü8ŽäÚÀèØE謙 URÛl°aÀ†ÿ þÄÝÀÉBµc硹œÔhwôê7€úƒõ•ŽyõÌÅ•0¬Acot3‘_­Â}>†.Aä"î2©ÄUäDRwnñWïbAäê½>ûF @ß°YÔ5þ/~̫ܞ¯÷WÈ¥H—p1Â;õàµZ¤Ójp1 âr(¾Î#:ÚPOû¹FãµOæá®-? ¹è)´ž+nþOkaÚãfÿÓ© <³jM§…T®Ö±ª¤E`q'iÁZ\-¤‹›ÿÙËü©Wõgòø+HKÛžN½qÏMÔíü~:"Mç(œ‡ÁhÆéÄ»¡{Ó´“¹¹NH7ËTg®¬ »¦>çJô!ç¦IýJ,ãáܱë0Š\·cMD´¾-§SZà$eÞµ¡3¾œIÂÖnÄè‰è 7gZjË uxë9êÀóíƒióÈ)4ËÏ¡y=ZŸïwùͲùG,žõ‘úé¼RdÒœq19e“oQwLÆÂ_ž¤ÅòûÈÝ\ŒÁ=;r£Àûqo¹ Ó¾[xvE·‘æ^DĺÝeâÓ7žÇ§:SËóÎG§¨{êizé9Úxí£97f ‚ÚuDrŒœÜ€9 ~@9¯“zⱗЦÛ@„7wÁâ¥Ë„+‡ö„Q”ŒG{ 솑´Öµ‹Üqw\ÖGY/ …mqEìwM¼Ûá¾·žÅ½“^ǼâF&4XÏ ‚{áú¡}ˆ«z8YÄö Ë—ƒ–ê ÅÅ’°"\vCY¶vv¦¸¢¥¯ÈuRªWdïÄ™~IáÜ“¼½;´%¾Iˆ)3è9'i…Ÿmy`Ë7xûû½tÅUäö–`%çÍûß‚ŽaíPèlö³o¦NAÌÆ•¼*ë d‰ŠØ\uH«ŸL¸b0ñΛT˜üñí3WôîȯEú“•aIE¢½påèç°wçL}ùiL¥VtXÛÆ´~|Cǽˆ=CÙÇÍ|!ŤEDZþ Ý^ˆ\Aenq+¿Ä#GvчUî¼O[ú’AKì;”º„]JqZqE,_æƒa·>ˆE+'àãWŸÂǹùfyo?z¼š6äX­‹ˆ.äz*e视A+êÎî>¸îö»ó>¼5åIöã&ì;N´d|#îy ƒúEðPnæN’;*W<ÙÜ›ÝÒ^±—öÓN¸ÐÊí¡Ån+IT|b¯ N¨Ô­¬ÐìGJlY¸°&',ÿ¤HVp,2Í~I‘µ'ÒéB;â¥ÇÇáÅ©_aÂíkѲm('Ä©…ñ£†â¹‰IxmÚ7»â´m× $˜Š[9æ ¨Uªò¨‚Cš½$×\G¤ÏË^Šâò9ß(Ü3¦¸Õófð7]½ËŸûžy­ZxÑöP‚G¢þs$žœ8–âCðÎøaXðìØIô_C"m‰Õ¹Lsç“(QÔ„ø¬Tuy@6sgÿ,1×^=Özô¨EÔy/ÈMSåÊÍ N.‡£ľ˜;ñÅ;/òÇ£mÇpìÝn7M@iš4óC SDoX€[ù»i¯ÚÑTÑÚ^]÷rª­ˆ+ä Î\Ó¯3 ó"Á›Ï<ˆÏ=ÝyóŠ@í€qWöG‹æ>(o×™³6ÅÁç~¦~’ÖtqœCXþ) ggÎ9rü&!ÌBAÔ E,—(‡ØJ!°ܨæ4ðÚ®Hùsï“ÃÏ"à{Lé”b~E²Å«EsUÌŠÙA~Ÿ}WöòibÊÉ!cø”EÒBˆþ‚Wi?!êÕ§ôËiÎ-q{v`'&ÏËîĨnRöH¾Ý-\Õýƒ·—¡ɸj̳”H¹¿þ<"Ù ƒôv<}HÄ ÛÀ}ünì5Ü88E•¿Ì¥"™!Öä‡ßvâ¿ázJ×£[¸»ÔC%癎=ã‘qÉøà«9ؾbB9^âÔxi‚ùTm3fÏP‰ml°aÀ†þs ³Æzçj.Zú`©¨ÝmÚ´!Õ¿„×ÂÄ"=·¾<róÁ7 ¼!œ±RãÉé,TßÖþ>¼¢æˆâ¤å—T˜W–Íë†|ƒÚ u“âãQJû²Ae ðõBfZ*¯¿!…˜×³ðÊ+‡J¹'ž-Éq ôG}^ UÅ:ù›HMJ .e&{µDHk^3Å[q!)ÖätóÊ£.ÜŽNÎêÊ’öá!¨*É%g+u£=Òu+Kx˜Þ‡"*g¶ mŸÆN8HnMò‘Lø¶j‹6-½q”ƉR3r(ç€rr¨K(ÊÙŒ‹jXpk4¨Ï1»B‰\•t ‡ÒÒ¹i7¨ƒæÂ+â¨×Z•¹woŒâfSGÜÍÙ¼®,ãØuýMVv®JÓ”W/‡„ E³¦¤¾×AqI‰ÒQmƫҜ©.u"GS‡Ÿbú')ú&W*y7oÉëœÌ«¸‡DQ>õãâyµV rïÚQ×±N9:äÊ{6DpPKRúOó ®£HàµPYyùÜ0QßÇ;„qóÀklbQßµ)ñÓöÅ …[ä—ój(_„ÓRUEͧÑÐÑ,\ßóxbü häÄëžÈÅÍát‡É¹ÍeùrmW]ÇÔ«$>@]£$£¦‚†ê„£ ×)—V²}œˆO솶…AÉ‚ØØ8?‘CqÓ uÝXëà`QR¡œr KçõLÅÔ!wvmŒVìråŒ#¹Sñ ËÈ̇ûL+^OSUÆ«—âãx°;ˆæåJ]Þðˆ´ä•<ˆ¤!ÃD¤¤e Q³–hÜJ©ÄîßÇãs=ê³×훓¼ü|x{û#娮ÔIJ:ˆ*r¶ß2b©¶àݼõäåz7zÐóø‘ƒH8x®ž-ƃKNú!Äß9¹Ä7“žª­ƒ¹ o†ST_ˆa¹I©Çx8õ€¯·ûS>¯|sQúÛÒÿ£yRÇCrqD÷ÐŽ×Á³¿J]ª8æ’hðX^)üÛð:-oª1TâDÆQ8€Y¹<\‘xÒ¸1ÇX(š7eÝãY÷lxûñŠ+¶ˆ QB8võvSây%õmíê»PÝU$R•Täö´‡»³=DïÇ ª3󻹇 õVcymV.ü8î¥ü£‡R7¯Ø*(QœÕ¶¡áªÿ9ðp#ÜîªrŽkrŠs KÑØÃÁmƒÀ[ù8ž„~'ÒÓLø9WH_—«Þ„ëЃ6Бx0ƒWÍRïØuIÑrGŽAcÖÕ’Âñ“+ß É=ŽMàõ†®jŒ¹+éJB°/ò¦ dR­!8,BI%ÅEãHvüɱjÍ«ÉÒ$#6‘† ½ÙG9ž+È‰Žæ&¹²Ž#Ó´C3J³”–pÞHT×CslÖwäœÃ6 æÕo®äè¥ó (æ{ŒâûÚp.ñâur»pD%óØaìÙ»Ÿ‡Ê*ŽË–à9¹ùEÄc[Ö•I© ˆ?x^-Û „Fs©¯—˜ ç&GÇp]U—èý´-Áqhоˆ\¿Õžâ·nÔ™•»Ìå¸u8™órF&[ßÁ!hB®õ)€êRÅ 07[áüÈ1êçs®tnè ¹‚/´mkÞ]ûcÀª !mÛPÅù9Ç9W%¡€4/Á·¯€"‰ô¢£‡’Ø8n8¶ÃBChs$û¢cQÀƒ¤½"ºvãœÞ€ó@ œePr©ž¾­Ð‰ÕÓ$*ÅÇÅqÎ>†RRZÄh¤W ?Ι!°#g;šùTÔuAx»p^‰uŠsO û|9õÛC©Û/cHúà!¸7o…ö!þØM¢çØ Ïá²Qc1¬7NtehØÄ¡lg7Rh¸…×$ʘd]Ÿ#¥[d}(É9ÆkH“†E4çK?^L\ˆô“NœÈT† åZ=±]’BÇáãż2²5U(díåVÆmE ¹ÆñÈ`ßõãÚ*WtÙ³Ì,Îññ”žÉÌVv\8o¶nƒV¼ºŽÚýì·\+\×¼i%€ÆS8.«ê¹ ”„ ÷öœ_b‘z,—}³ ¯h3Ç÷aJäÄpLåQg_®q ¥Þ| ®]r°®¤wöFÇs­uçõŽÍQV\ ®4mÃùÜdzë[¤Ö7OÚ`pumHU¡ƒÔÃ>Ä9§!qÆþD½o9ÀÊD~r=qì ûx•ŸA<ùÉjYù4Кe7çœÂ½ Çóác'”º‚›vðiÄ:ÎRÚ±éA5&'<€¤C'Ô:Þ–û±Ï®ôæëÀ›°%R"-=ž~A¦ô»­"”æe²@)÷ ­©ÎâK¨4ŽËÄ”CêÊR‘¨ñeûÉZVŸzFÉ$ÔJ;Ž“ìw¾­h#Áσ×8& »è”"ä{PÒÀŽszú‘e4ÔíÔ6„vh\Ùæ¼‘„·Î7‰l¿ÔÃG©"RE{.¼Æµ%‚Û´æøp-ÊS¬¾ $Ë«"6è}›ò°ý±aÀ†løWcà‚ôRê«ñ VÉ…ÃÔ‡Δˆ…ñX¢œp}…›cÏUÄeÃ&w“ˆÊà¡ZtCµ=Ráf ·‹k/ÏøWe^¢c§îZe®J7Xòd:)KÂ5A!¹»WnEigz ³WbÂQUkgþŒ£ô-y1¢ÚôÌCê"‡-¹“U)’§Ü«àWð°>¤ò‹“üåÇd 'ü¬Ÿ|ˆ(©”!u*½pÉ¥Nb1šK»Zh¥L©ÞthØÅOÃÍš(®—”D‡­ˆw†»ºº*}³±ê.ÖÖeãBÎ! ‘üLýyêOâ'¢Î"¾,ñ$âR;%‹¾Ê‡u”:(]^¾H\Á?YC ׫¸…+!›‰+i¥Òv㉫o…ð?ž³ƒ»†2­p"ˆKK{ˆÊ†A$W¦ÅoÁˆÝš°Iy—òÿª|âNê£Ò+<Š #,ªﬗàHp.pK»™ºšfWX J?’²ÍrÌ6|‹´„èÑšxC[fÙÕ}AÚpKŸ×"îÒ¦âç ýYߥ½˜•³†Yü¥ŽR¶ˆÑ ,f[K“þkö³­IØbÝi+YILHþŒ(p UµøÑ©6Uof" ª.’N=¥ ÕG%q§Ç‰9Ƥ](®Mø´“~(xÕí£aÓá2†ˆj ®Yö i U?nÌO³~R_I§¸Ø¬¿”¡ó4ÛJú.sd_“þ"ïJÕ„y™óˆü5çñ–üUü’?çÁ/¿õ•’¥¸ÜÜ\µa•M«àJÕ‰ñ¥ï°¤j˜Õ&–…«>ËÄÕã_úý%o1þ%õ0çKÝnŽ q‚O÷iÁ¯ê›lGiS%qÁúK_ø´X´Ä7xx’þ 2Ø8„—ª„So°Íöb_|¨~gbHp&Üj)+//OI (Qy–R ûŽàÞÌËÄj™‹¥?H¶8™d|Ê\mŽ™×e ™s±À*ã_r‘iG\šk¨¨ž™ó‰*œÐšk"%ÕˆW©[Æ Mû!,Ül{s^“9úLg™ÃÎÑU›J¹jžuOzŒŒ)sO ]Ó¯2÷›kºê7Ä£ÌW…$j³L7Þc¯Öo®-jüND~â¯ç™/XUs¼1Yo±;`î5do!¸—¶•ñ+9H{ËØgÖfÿæøÔñd¾'s¤Ùdö–2Íñb®©& Uê"ã3%%™ó¤ÒKôü¡•ä è8R'©ƒl6™…z¯ ãF—°©¼(ùè0ñÓeKBU6ñ'›Ù|Éwíø§j·«ê ¦hºÔW6Wb!]Ú@T ds¦˜Ò¹ÎáiD݇%Z5l Ó‡ïê:K|Óf/VpRné?5~f?aîÌßz<Ê·œ (f_.~ù–ÚÓ€9dÒkåûT­>.ùj'í-{yÁ›¼Tê>Æf^ ñÈ‚'ÉŸþÕ¸WðH—£s5囄¼š1£²$ŒåRv–¼äSÆéyáç¸g7¡3ë+ý@à•ùIÚKÆ‹8ù˜¥ßÈOœ®ƒê;LW]KXíùKÚÒ,ËL+°éñ¬Ë¯Ý§¥ Þ¤,)Gæ~XµÍœ$ýEÏ‘¿‚âæ Sf³Yò >Ä6ÃÅ©úò]ê'D<1@çDI™3ôxµŽk¦‘qoÎÅ’M™®u\UW™j-~µû±®‹ÄWidî#÷Y÷+©‹Ä©é5y‰¿ôC™+¥%Ìq)$süK~ÆYÚIõeö'f3såбŒa~–M#t2–´£Ù?-c¡ÚŸ°îd$뺈(µ £øé9›y©ÿ2ÆÌ>o–eÎ'•ÊP„y¨æBÑï+A;ÚÕ‹÷T=Qâð–2ä ¦ÛYÁ!ø`Þ"±¢a=çS”*ÐNŽleT—‘ìH„ÔÆ­†E⟹öZÆ…Ìb(†8ÑsO롊<zœê2%Lú‘8M{šùÊø–±«á®=¾å[ŠÕ„WO*Gþ1‰òÖ뛀"cHæW˪ •‡ü!þô`ô3ú¯ R’˜sçü3Ò›~ÉBûë~£ý„(ÄX!è žkê[“FÊ´žÿ%/irë¾eÝ—‡[iWY·jÕ‘yXï1t]t_Tcл”Y½vЯ‰@Ò%ÍÙ0`À 6 ü71pÁºlEOK½8é¯6Jtí¯¿k?%ÜÚOs}­ó¯ —ÅRçh>k„óG®9agí/ß*?yžfæ§ãJ<íjûéïÚO_žµÃô7Cj.æµñ¥ã˜OáD™0I]dÃ-Üy*Î.+¯ñ¢Ë­Ÿö—ü¤ÌÚøÒáêÉ8&¶$*ãZ5LÖqµŸÄíÜÏwèIê=-só+¹è‘Nc–o~ƳǩIÿû:Ô„ Øj3³Ö ‹Ÿ¥OÈWíøgÆ”/3)Cè•”6§´‰¤¿p–\¥ÜÚðiX¬ð­aPõªöÿ}M¬}$nm8Îæ'JÒ‰³#×ÍÚ5¾U¤«U«(g¼Zçtò-\é³¹³ ©&Úy௉Tó&ýк½ä[×S?kb×¼é°ÚOCüÅ .ΈÃ>aZ>È©Óá:®%‘"Šé0ë§ ·ü©Î×ÒϪ¿YvíyQ’èþxîúþ®û1•ÙJ’·p<­Ë¸ÌºœÙN5q¤L“(`]ƒ„+ë¦ #:­¥Šg?j—[;üüßæ–³vþÊólñ¥>çJgÿlqjûYǯ í¸Öá:LûÇ:°ÖSÒJɦ€¢ªz¬ çQü5LÖOÉB×[?­Ç¡u\ ‹µŸÄUsǃõáülq/”ÿ¹`9ßœ&i„#®çù–úžm^–°Ú° ŽÎU_‰¯aÖÏêúžŸ+ÿsÁt¶üÏ=ÇžYWkøÍüeŽ­!¦HøÙòÿ£°Hz‰+ó…8;J•ðNw]®ég}xûã롤•þ¬û”¡ÛQÂäÝÚéºh?ë¸ÚÏúy¡pë¸úý|i4<µáPiÍéJÁ,}T$òißCÞ¥~ò;[:]ž~j8äiígýnç|ïÖiù–y^Ã"ߺߟm\I¸8ÝÖBœI†?;®þh_³ÎWÒ¬2þ›6mz¾jÚÂl°aÀ†þŸàýèÑ£êàØ¢E µiê·Á–ÅV(¹²°‰“ÅL6Âý•k€„:-qŲèô GRožeq“µ,6"f&‡QFž’‡ècË¡U%Ye£"~3½ù‘2¤¬så/0 ¬~Y4å]Ã/u´®«†¿vþ‚3ëºê4’¿¤9vì˜ÂéáÇáECqWðt¶MÌßÙïô¦DÊü§a¹Tõ–:j"‰´‹l’}||”ŸÞ¼]ª²mùþy èöÊÌÌTó‹´‘ŒÙ¼ê9ç\ã°œãPîÛÖsŽõ8¼Ôãüls¦Ì2GÖž3­á IeN–}ªeò­)ßr@•…N6Qò'ïrÐÕqj?uW§?[÷ÿ§üeAPnÙ0ÈFTœÆ¯ú°ü±Æ‹ö?›Ÿ;ßS§ÓÏÚqÅ_œ†CÇÓÏÚñÿè÷¹ÒŸÏßërΕFâH˜8 ¿ú¨õGâh"Ìåçîî®@:]í|t™ú©³¬ý­ýÿè³vzùg ‡~ÿÚñÅO»ó…é8ò«Ÿfn5Ëúãí/ñÏÀ«ñ,ïâ4ŽÍ¯óÿ=Wþçò?nI*;EΜ]и‘«*Vç¡>˜'3ý+àX¥192ÖYé2t}u˜ö×eŸf€,ä•å'QD«½ ]Ýx®œì”ñn`‡zôs…Sýz²ùÓ°ÊFLÄÿþüfÁªzòµºh‰6‡FsŒºNhÚØ<ìXgUÏÚ“ïâo¦q&~gs:\ÂT+g“‹ çÅÊ˶#GŽ(=R­Kz)Ú˺¼Cñ»ñÅ'aÆ×ß!éX.Zøú¡‘k5/±_2¯®—ÔWtѵ¾½ö¿X¸ýgóáÜN ÈJK¼¯¦áÓé_±BSo_4k"Ä3Y?Ì8ÿ,¬¿tiK±â.óÌAâ"ÍÁò‰èÖ­ê bägžùjΙ5Èšir„+Næ#&æ×S4tvTýÒŒ¯“ë´æSç%OYWÕzǼ¢6bÊóOaÚ¼•pqk†FõËñéÏàÕY«p*+ÑQÛp¼´Z4W„=MÈÖùé±SQQŽŒŒ E‚šöW×úch‚BE!f}ø&–»!¢cñVÖDˆ5’¿8yJ™ò,ÌLÅ›¯¾7ÿ0ø5kl©㪘gþc|¢Æ'Æ%Ïït³CrÌv,øq#šÁµ‰‚ªðËšeØ}­Û´2÷âoù©¶²*@ûË“-¡âYŸ÷UÒHÿ#qÕqͼª?m/6 Ø0`À ÿb üuɱóTZ/ºUå˜õÞd öp݆ èBÊô™ M¦òfGg74s#'ËÊÕ©cîm(Šn®œ¹ÇaÓ¦_p"·Ž.nèеÚ¨å=%v6oû 'O¡UhôïÓ®N¦èì±Ô8DnøF}g¥íg3/8XÀ‘Í”«S]4÷c>ç…Ñ 0«WM#:b¡Y[ïÕþVQ/Ú«j+ Åá·õËÕl"¦Þ2Bå_E G]n6îºk Ž%lĺ_ú`̈ފ«ïÙªÅÍMÆéʓؽc¢öÇ£N}WtíÕ!juüpÓràH€„¸”œvBÿAƒØÜܘU‘øòÛ6lß ÃºõFrnëÙÛÁÁ¹)î~ü5ô ¾;níýa§vZgnn.2˜‘ƵH1HhÉ‘‹YÆ%É‹x±³ô¹—ãÉ·ça˾ƒèÓ>@׿_Ox5rĨ'?ÂÑõ_àäÁßðÂÇ‹ðü[ƒ‘œ˜ »âãØ¾m+v¸q1q #÷¼§Á÷ÛÌKý_ÎT·—d VÜå€~©nœ0Qaö½}¿FbSÓ1ˆyü~4wu@P³Ð/d0öÞ~†tR»˜«]_‘Ýÿ–«Á\JôN¼>§»S&¡c z†ùaÛ’@lÝsZ ëiâYú¾Õaíߎ ÝÆr¼pv===U•œ(F^™z7oÄÁèý¨çáË/Šf®vøeã&¸ø´E„Hœ±‹ž®,ÅÞ¨0œ› üx 6ü´ƒBîa/·ë„Æ'‘z¢>M] 7ïÖœ“›bK䮉%*­BЫWw¸99`Ï–HÌœ¾w½sã“€¢LlÝ´ná·"6:í‚[!¬c N9U°Ó%bÛ¶È-)C/?rþ»Á—ÜlYßd¬jû º¾µÛM¸÷zÚ¶ í®ºámH8¦«,+Æžß¶cÂAÔqpBpx't o 'ÎY™›Ö­Å£ÆÀ·±ˆ·³?§žE]^rB)¥&-Bðáºùè2d$ ™èÚʳßcŸÿ#‡vSÙç Ž6 áÐq87n†~ MK“`p4%[dAÜ4to†î={#È—í,“Ìy`½|¶pl°aÀ†ÿÎwÚý˵TkLU~Û°7Ž„“Ç“±hÁwX³qr‹È‰Ud#v¦“źœé ÷[¾eî9èrLœx77Á•Î癩j}IÞòßÜKWV–V¢>EêN—æàýâ ÑhêáŽ=—bÞÒ͊㞺w#î?Ô²ãbê‰YäDÎ\¸VåqâàÜÙ? sÖîÁÉ¢Brõ7a{^¥íÖ…Tò`W!uYhéj £õ©7™ÂYÃùßÃA2 7teyX·b¸ízx»š\HÙó:œÞÃnÀƒãGá…W¦á›®¾c}Tç¡9!âÖ-š‰®}‡¢ÔÎ ùGv£Sèp%Y a™‡ö¢ßÞ¸ïåiÈÈ)ÀO_>Šë|GóL ´‘?~‹‡ž}.žþhÞ¨îs'Öüº_’*熉“®ÄÆ­{Ô·ˆÂKŸ¸TN·p&¥ ô÷¥*ïbå«T<$³ÊDmø ÷½ò%zZç•"JRÇ #n¸a‡V >õ ŠÍ›’¢±ý×(Ä쉧í‡RN‰Åæ [~BsÛ$ÓK‡oÉýqÖí#—–ƒ®Çs2ÒSpëeáÙÐäg6õi‰7÷űcª:ç˜Þþ—ªþ.­ôÏÿ$ÝM·kú‘£¸öÞËÑÂËóvrõÂe#Ç"þP:…œéjOò¿ÃÒ¿×CMÚè¡Ô¢^=Ìøð Ì]¸ y\n¿é¼ôÙ|œ¬0´}1n{u&òËͱzâðŒëÕçq\AFóñ´ƒØ¾s/ ‹K–…¾=»àŽÇ—_ø„Þ»~ ¿n߉ªºŽhPï4&ê‹ÙKÖ©Ñ_œ_ˆtæ‘¿Ÿ„¼ˆÝ¢2J܃Í[w!;ó8¶üü-¾ýi—ZO2ÃÍ=ÛbÑ–XÎI¥˜M¸—­Û%ÕPDòF_p}3x–µ©4ï(Ö®ÙŒAý{ÂE–œÊb,úê=tï?y$¢§'FáÙ×§áP†)Ñ•–‹­Ñ…èݵ½§T°¬¹íÊÓêOm<[ýþUú›ˆýÓuî7o>< ŸÏœƒ¾û³ö4Àãão€#wT¥ùÇ1cê‹øfÍ>´ AÁÁ_1þq®{¹'‘Ÿž€§Æ&Ñ)›*1NX»h6–¯7q#¾”ëÛï+dó±aÀ†lø¿Šó”u  «¬(EVN1,_àfälÙ—ã³›nEÿ§ÞÅÛÏ܇fœ,ú˲ ×8YÏ`@[dBå®:}ª&â9ÞNK<£³>Çɦ<aŠíæf$ãÕK±jk †õÃÈk®Aq9ú%Ù˜3íu´¹ò.Œ½e7¨‡“'pÙÔ¯1rXoD­^ˆ¬^OaÍ—¯ÃÃÙ)]["þ…E¨¬ª9À˜:qçìzK=E·LëþÁdÿS´Ò‚HÌ·ÃeÔÓN8²•Ô_¬´sFŸÁÝÐeì]øió£Þ.. ¸Ñª‹²¼ÃxñÖ‡ðÕŠm¸sDO&-C£:%xgæ"ôïò,u‚ŠQÿ?ö®¼Š¢k¿é½C ¤‡Bè½(‚],ˆ€PlŸ QìbGTT ~l(bÇ‚ Q”^BïBH%½çÏìÜÍ%`ô£ÿ;yrwwvÊ™wΜ9gÚ¾óò$tJ ÞKû!"±7öå<Šæ¨ÂÄ×ãò÷Á°ÁgÁ¥º¹[á¹ßá4*Wd7_tìÔ_¦nA aö!sk/4•Gç*'(KÈ·èO'(­Hˆ²ò*OÞ4ÖŠp€ËfÄx4C›x/¨pÆ€½pç¨ ÐoÄ-¸ìÌö@%‹Ë^‰½oÄMCOSE6Îi¥²'Põ%3ÊGk½…êZ倧¬Ò]@×ñt,7/g”VÉvqG4áOYž{ª9%MmðWÁ›«—l ŸÄzá Œ;L+;‡ŽLÈwÐõ'N%ÅŠÒ\|ý½xzâÓóuÃ…gtDJŸKpëˆK88t ®kÝkÆÝŒ~)Hÿ3 ÅÀsNƒ[^(.¿ôB y+Î쫈[&[]âÏáV²çÑ«CœZ™äÊó&y"ûÞ™oi!öÝôüÌ™ùk¯º§Ÿs6F^r:.5ŸÞ†Ää"?oü»Ü„ÑWžÁ4˰ô×2ø³MTbæ/ÁoèDL}ñAøsñÙUW]…ìÂ*•w ·q€!ˆËÄʼnAªd”‡áI%À`ÛÖ¥bSE8îì¬^o_¿ÃG?ŽmÀÀ^âWkvì‚o°ÑR—ü‰°îÓÒ–ÜáÛ¢à,}nSWKÉÀµ”Á…}Ó5cÂ̓º`ðDà“Ù Ñ!Æè/Ö-ù w?½ ‹ÖÍD¯”tmocÛaám£ï²ŸÌ[…•ïÎF'®*6ô (ªPúŠàp²È[¸ÖÅBÀBÀBÀBà(!p tÃ\¨cG›³/L|·Ž,_z~_$u;— <ƒÎèð:#9Ù]Œ98Fœ2ÀçÿÙ»P›swÓÅ’°r¨›3¼[y¡’i‡ÅãÉÑÃ0ðÊkqßÕÑ®CW\nî<êNi”âsdœ(²lõ ¥åÈ$ß0£ªhØUÁ'8>êÄt{QÚ ‹øù*Î\~w2î|ÿc´½ãR4ˆ!ªu(Ê߇šþ—¡w{Cyx¸ØiñÕ;¿¡¸ŠuÅ‘Ó;µCd˜±LÓ/0Cût£!S޼‚p ;6¯Àk/¥RÍrFÆ®<$„û£š'6s¹ƒ"$ÈÏ¥™(㤯½l4Û©<òw²Šá˜ÕÁ‘ ߯ƒ¢Ü¹8U«ï·«dÉœ²7Ý…¤ÔEÉLµ5gkQ)5f¨tö²tódvR_æS¯ZYcwžgL ãÐ*{¾G—Qe BïãµçyjÝ9Ããúì Y :W›ñvj•¶aid5Y­ÞIÿ×&>Žs«6":àê~ݱ—‡…µïÒãGõá6¤èîŠÙ_}„{¯{ƒš\NÙ.+-j¹UL»êÊr\rîÙèÞ© ‚4|÷ïÞ†Ï>ú¤nExD+,Ÿõ>R®|ŠÆ»¹`o¦GȦäUÞÉ×"*K ž•k.?Oç"wü‚šóß,}±Ûªôsâëç$mõ¥—Ú2,üs.úžsbZxnÖNô1=Û%¨øµu.ˆŠS÷¥y»ñûo pÎ ãÙvæ­·þ¨üÎÿìwöý6 ÂZw¨[Âw_æ ÏζÔk±_Z%ºá¯9ßá÷YÅÜÇIƒnQ[]‡ðøö3´7]u ®¹ð tï}šÚF'²»ÑÁŠFh¶¼,,,,N}´%{ÄKêâÂOœð“a>þ<¼ÉfH'&³sº¤ ò ŒåhrÄ˜ÐæŽßñI?{riµ(àn6í~¹³ôlõ 8Ë3[E{*9Â-E²eÌK¹s¥šérö ÁϽ…³‡¥"mǼwß ¤îœŠÑCÏ€?/•Üët =«;ÊKŠEGPp3xÔäs”»aò›¥ÇM÷ÔÚS]ë‰ùW³<ÒIË ®\®³k\r"r ÷Ê~»£’äJ#¹Æ˜ìuÎeè÷Ó]xwÚ äU¸Á]¦µªy(-ç*BÚÕÖðû½´¯Q¾*9«[Îøy3}yò$aúË~òÖÏýÏF„V\ŠYÏá#8cæÃ}Æì‰¤©frù褽ìðê,øU¶cSG†t­äºzû ®u>[° ·¸€í3»¶Cr2¶cöV`Oãçq{ÜÒa?ôˆ ³¾l}=ÚyãÈPxtR1+´æïÜl©rkGWVä¤çRžØüØv ròx…Þ.m×.+Ž=RÞjX :ŽtšÒ¼eìCÄz ÏÉÌÞ­xUòqâYyy¹Œñµ¡+8ŸšNöj‹ ÒNÉL“ì«ãj²âr¼Éd ¼ê6ÜûÆg«Ü‚Ý^}1¦WGµŠ³Ã²É}§vb$×VW¢¬´‚ƒ²ÜÒÄSÒ¿šö,¦­öÇÇ/¼ˆÖÜ=§{|ºh¿”ÂXÒ1ŽÛâj¹BMø[?ïU@Öp£|©$ýâäÙì¤ÍVþMÿ¦k5‡ƒ¿Í߀ÑÏÞiª‘x7ÖrÖÛ6@¦WIÛÖ§bsEKÜÕ!Ie)dR9¬œÿi;Òz‹¡Â=äãï ~å#<4f<Éôf™vX­—§4 {Ï#RTC‹pñäaýûáÖû¦`k†ì‚Ö¬XŠ)³6!2ܘQUÑAyÊÌ«ÍS´4›™{à@J©P”pO¨$JIPï©ðÏè¯×ŸM¾ R7)㿺¢sþ‹*; >"%ù{°qgzœqF\{#|þ¼Â=èàÁo ÉQX°b|ƒBièÄ«Ctòr³àìˆè–a˜úù7Èå"k°ä÷ðõÎöKƲêän§£›ßNÜ6æ~œyñ`Ä…(h\8R·}1öîϢܭ!´br@V¬WI”®¶º»ÒVñÀ³Ó¹4<œÆp2xÈ[g|µ‚PÅ>OÃ-Ñj9p[//ø,+ÛÊË+¸+)ˆŸQĸ©3‘[ÂÕHß¶«ÖnSycÚF¾ÊÃáGŒ~=»¾nÅ"8ÅöFû¤èúP-Âã±dæË˜ý×2Õ/•dcÍêõÜŸÕË£û€³ÝÜG…¹øwÎŒñß…Õï…ëtÊ2Ë-zÀ@ÞDµŽÃŸ¿Ãƒfk‹Öq±¨­(åÀuöìÚŠÌ‚J 8w n¼m î~æN|1o9Êl»÷N]ŽÖèYW    ¦ pÄgÐ¥ÃÓ£À_ƒ±ó¯ÇÕ·ŒÅ°~ɘ1õU<÷ö—Ü÷ÖZѦ¿cîH¨ÑùÉ\~]”ÚŸ~†¯¾Ÿ~ÿû'?‹eöÁõ7^‹˜æõy9QA£±m·3ñÖÓwáìnÉ÷ø“¨ÈފɯOǧ?-BT°7öm]áíú ;÷uæ ·?àåÑcŽKGÞ†yלƒîgÿ‰«Ïï‰å?Mƒw÷kðæ áü!×aê¸nRœÓÛF`Î;/Iÿ!…¦.UÝ’z›â#å0½u,f£Ï‚Ÿ> ®ÑGÔÓ@Ú+°º$…â¯åkpn¯6jÿ²(cÕœ¥«4í±ïÔkÆßxçöŠªj¸„ãÑ>EÏó¡h×DTóÄà¯6ã“©Cˆ w&rŸy·¨¤YQ”Å–r¸ûÅàaž <üŒ‹ñç/7¢71ñèùög¸ûúUʪâÌçéò‰?ÎóÐ<¡nâ(ˆRÿFy;Šd&i5DÅ÷NHêÒsf¾³‡ Ä’[îBÇØ|óÚ#ðèw'ÞxäVøPã.å‚.sµ+•²½” ¼(ÿ'§;Úõ¥åš`ܮǙxîÞ¡zÍm¸õ’.xó¡Çðü{_£}|+xÚ¬9zXÊòö“‡?ÿ†T¢“»á“)OàÒ#ù©°+±àÓçqëãS¸mƘ!•º8U1Ð2H#çÊ•c3¦<€°x—gáÉg_ÅG?ü…Ĩf*ˆOHÎ=^ühNïÓ¥~ÆÙ—ƒ¨ƒ†\Áþrf6®¿öxÔ‘?e€NIiÎ…{áÜKnÀË.þuwÂϽ/¿ò®¸çÉz#¼ô@¶2ì5=rÆŒY^ÔÖT£¤´”¯]pɈ±ømÎ0\k1tô7§á®ÉÓÑ©}¼ŠîÊÕW‡ª7é#Ä®®)Íå' çàìsnG°œ¼&«»¸µ!"± ~˜1^Ô›ž˜€œ-KPÒ¬WÀõÃÊõ»pñ˜›U©ä,çúYmMõÁW=pð›&úÔU!»¼’ª‡½Í§ô< 3^{}ÛÇâŽOå~L|i&–l\ ß­Héy!ÆŒ{ qÁµøqî&Œ¿ïqªºFš˜·ÌBÀBÀBÀBà”E€+õ¸¸QFm\ËÓœ9s‰¤¤¤zC¸iHGy‰¢u oÖ®^ƒ}yňˆMDGîWöâÞf¾Ê¬À×ïNÀŸ¹mðÒýWÖg#KñÒ¶lF÷BË¡HU\ÞVŵ¥‰m“èÍCÈ„|›A¬Óª()äçcÖ!=ƒ³ßî^ˆKlƒ¤Ö1Ü+Fgv¦mÇŽô ”pÄ¿edÚµm_Ûf¼‚œL¬ã§¦òyJ­_P0ââZ#²U¨êô3Ò6!uÕ:x‡´BtD(g„‡GÀ×Û6½[S†ÿ>t;Â/ƒKOëD¥‚J;n­pÖª‘Yf'ÊB)•œÝ»w#::ž\®ý‰ò?{ ^†’ËÕ óf¢cÿ—°~÷wh„:ΨîNOç'åüÞ¢>¯ýéÈäçé¢âäK³¹®;6­Çêõü†½—?:vV†ÒX½—ßO/GŒ”…ûvÅܹ#-"ä§ÒÌÜ•† ›ø=yîYlÊ™ôx„³?kÿüΟŒu›¿EJdðQÅBˆÑXàéõYYY¬û8µÏWóU='èM=¬“]i[±yÛ6ó¤ãáHNIFócgME‰âßà–hÙŒXs6lÇÎpõáyÆç†LÍê-­4}*´¶¶¿yóf´hÑB¾oö?ÒÄë´K r°zõjìÍ)@«èʵ¶ðñàgžL4­¼%)oXX˜ú\ÕÑÌóH—¡©éé2U–bÚ5Øž±A-#ѹCq™°~ßÔôN–pº\™™™ü¢Ibbbéû÷îFVväcn!¢RÐ!%A}æÓâÕøøå‡1'' ÿ}r4xf!å™±—»ˆ³ÌÖ­G^i­ú„¢¿;Ê•L;Š[• òš²yÝêض;‘±ñ”Þ¨urEówç^ð-ÛvrkGZ„Pnóó˜;w¦Ó°F”’õ5œq߉JgoÄF…©þ./+›¶lå§Ä*¹Zª%â¹B*Äß[ ÚîÚµKérn„.¯*$ùZ6Ûˆ¾uù¯y×ñþ§ÓÐ6G3[Ì1O@IDATÃÒªÚdC Ã;>MZÿ×´Í´Š¢-ßV–A<³ÿÿšÇÁñ…¶æèækoo’”W¾ôp‘£‰9®‡ÂóPþ§@‘ëyW¾.û£õwÐU6Yª.‡@flZˆÈä¾ø~ÑF\ÈUP‚‘rØ&‘}P2:Ü¡úL‘»2ˆ«#ö*¾9‘1ægÑv•³²³³Õ©ér@›9={ŸÀÁz~J-µ Ý= 2¹¬ûsøú¤kŠ1ù±ûÜû\{¿&¢VÈ–—ú‡¼Éå!{20ûo¾ØáH‹@.y:ú2sÓ‹¦ÆÑá,Ýžuk!`!`!p "Ðä%îÒ1üsW«N‹–™aQ¤#”Tä`—úô¤C§ ïÛõ¹Ó¦µE9d+)ãÁbâø¾†ÿŽ}­V(êÓ1B«_YÞ&=¥Z¾Æ¸’¯E»˜0õNýð]SÓ¯ TPPÀÏЩÓw+Ÿ=ñ#q'õÂ2zà†û^„ÏÌŸ±}ç^4ççwŒ“ ÜŒB–Fi4þ [’¡±–OЈÁO¨ÖX2­ÃJYŒòi*ìégðÃËk.ctæ™îÛ·ð[ÓS§óAgªBJ¾ªþþh9]¢DJˆÒ¦ ô£•çÑH·!®¶vGÜd@DÚQÃz0?K31µÍ£AÜQHSÊ#õ%ŸYgðØQȨ>I¶Å«†œ0óùÑÏÛ(Ÿ”WNr×z=i§Ø­Èò†²ûXà|< ”rI”•T2X« tÍc"X¥oRmœêAÎbžÏòÖ{Ÿð‹qŠlŽôMbÜJ<Ýöu¹´\–g3Î*mF³Ü>X^ÔçÁtTxö²}F÷B‹ÈoYÚ.ƒ»üdža kz„FqŒŽ~Bw~™Ažé!Ôë:×XH^ò_Uí‚cãwÆêé¢äàS)öáœÄ•ÁXùÌšÈzþáâ8¾3Ó"ïtžõ}§èô½C—OÂ)Úy­•ÂJéHKSò—0M +ùXÎBÀBÀBÀBàäDà°3è¿ýöbccÕRß“³x'ÕÒáççç#$ÄP6N¾œüË IQQÑ1ýýÉÚñ-Ì„ùûû›O­ߢªÜ¥¼²bàTÿÔÚ õq!A G1f¥ŽO%'¦¬ÕbhoW\\¬'DvœLnûöíÜf°ÓZâ~2UšE«…€…€…À?@à°3èb¨ìß¿_âËh¾¸¿ëTõo“iQîú~ÚIVý6;r=ºÜä´ŽK@£j™ùKùåŸwjÒ™%jUb˜ËŒ‚(Þ›¸G-%%EÍ2î:í&%ô/4ëêd†ÐX…ð/“û×Ñ4ÿ¨~d&F\&|ñ¯“lrD©Ù÷/ˇEùéÔ©“z–vp¤ë@—³ÉÄã€M¡¯)aŽ&Ù’¿Ô‹\—-[†˜˜´jÕªþóT‡’UM¥»©áŽDÍy™ïÍi‹¿”WøtÉ’%ˆGË–-UyUVsüùþPe>‘i>Ò´ âdk“ôrÈfî¹—ú>>Í™ËÜ9k¬ì8Âò^÷o2ø¼aÃ$''+#ýPý›Æ¢i|­û\Cø;ÒtÚòÙÖ7ªöíÛ«ëápþ»tö{M·è ¢—ÉŽå,,,,NM;ƒžššŠõë×ÃÏŸá²)Gcù¹¡¤HÇ|¤¢£F;±‘e„ºsÚ›¦XØ)’¸R^1E1“¥«2;&ŠÍ?MËžê?»Œü¸tWNê9nNèÐ|`,—?¤è:¥Qþe ±,q?–up,Êy*æ!+Dq•ÿSµ¾´|‘«ÌüÉ`’s§jyOE>ý»2i$KÜ¥^E‰Óu¨øÒwŠÄÔËÊîxùër‰Q)e“í(b Šwÿ®¼G¢Ò¯ -’—à,דÁ Ý"ïÚµk‡Î;+’^'6§ èæ‚Iç)û³N–ŽËLûÉz/¯ž%³p?>µ¨ë@xßr'z åÿK›ùÿVÞ“ƒ •zpZúàSÉiÙ*å:ÚêÉŠ³à(2@Ó*ñˆU    ¸³“<9†­Ú²°°°°°°°°°°°°8…8ìtËv?…kÞ*š…€…€…€…€…€…ÀI‹€Ì¤[ÎBÀBÀBÀBàÔCà°º%üO½ ·Jd!`!`!`!`!`!`!`!`!`!`!`!pb"ÀtZÎBÀBÀBÀBÀBÀBÀBÀBÀBÀBÀBÀBÀBÀBàx#`èÇ»¬ü-,,,,,,,,,,,,ˆ€e [l`!`!`!`!`!`!`!`!`!`!`!`!`!p `è'@%X$XXXXXXXXXXXXXXºÅ'–~T‚E‚…€…€…€…€…€…€…€…€…€…€…€…€…€e [<`!`!`!`!`!`!`!`!`!`!`!`!`!p `è'@%X$XXXXXXXXXXXXX¸‚ºº:È¿å,,,,,,,,,,,,,Nuœœœ ÿÇË9Ñ·,ðã…¾•¯…€…€…€…€…€…€…€…€…€…€…€…€…€ ÃΠWUUAþµ ¯GÌÏÝkt%|SÞÿ]8szúÞœ®ø™Ÿå^§©¯:žãµ)ïuú…Õ~‡ºJ\Çwš³¿ö3_ÍåÞ|(? ㈉9žÜ‹ÓñåªÝ¡òm,¬Äi,¼ö×iš¯ŽyÉ;¶9\c÷ÎÎÆ®ŒÚÚÚú׎é™ÓÒ÷:ŒÆ¤>²íF‡“GVîuxý^¿3û›Ãɽ8sx¹×ôj#”ýWû;^Íié{¹š1—8‡ræp‡ #þ:_ó½9ÝÆÒÑq¯æ|ßég\5–ÚÏñYê\ð3Ó éè¸æ4uê¥éÇW{ëxúªýåjö;Ô½o~¯ýtÑ®ßišäYßËU¿wô—|ý”kúާã6æ¯ßª,òÞüNß›ÓÖé6vu,Ÿc˜Æèo,Ã¥£Ã›Ó6û9ÞK8·9Žã½Ž'W³Ó´4æ§ß5Vÿ:Fâ;Þë4ÍyK³kìÙO‡Õiëø... Ú“„ÓïÌ´‰¿9=sÇ4Íátzæ´ô½¼gŽ/ïÃÉiÿÕiŽZ‡ÕÏŽWsþòÎÌ:®9Œøé|Ó’gGîÍñßɳ8Æx²?kÇkcø˜óÔiêô4½ú*þæ{ý¬Ã›óÓïç'aä½Ù™Óoì^üÌΜ¾¯Ã8¾Óñó×~Ža…™o¾ê¸:ý¬¯:¬<ë{¹Šs¤]yš~Û^Õßê|ušòBûɽNCîµÓ~ú*þú^®âÌ´ÎO6ý˜ãé{¶Óié(:Œùªß™¯Žièðæ0r/þ9süÆÞ‹Ÿ9Œ¾×WGžÐiè÷=›ßɽ8GúÌþ:¼¾JxÇ{ñkLæ8†•gíÓp¤A‡“«„§Ã˜ãŠ¿ù½~g¾ê¸ÚOžÅÉsctëprÕNòv|Öi˜é?󳎧¯ú½NK‡Õié÷rg¦¥)i±Œ_Ǹnnnÿãå2Ð5BÐÚµkÕ¿¿¿½q¼µòµÆ&Fâ¤Ñè{¢"#ôVWW£¦¦îîî'*™'4]RÇRçRßfÁ|Bm#îXÒ. >'C»h¬î„~éø]]]OøvÝýŽ~RÒîå_Êt"ñnee¥¢I õA†ËvâXOúùDæ¿ÓÉp•¶&ºR§ÒöN>?°s¤QóÞÉŽ£–Ç¢I)}Íñ–}'cŸ-8 Ý‚àxª:áÂÂB¤¤¤ [·nª˜RæcÝd ›ÏÎÎVµlÙ²Þ02¿·î-Ž%ÒI¬^½Z i8"(Nd',##»víBŸ>}©Ç»S8‘ñr¤M«’’,Y²=zô€¯¯¯2xÈÏB{YY-Z¤|@@€¬9’´ /iå355AAAˆŽŽFEEÅ1ïHþM¹Ìô¯X±Íš5Sô———ŸôªÌbxyy©¶¿sçNtíÚžžžJ^ëÞL£(2`°`Á$''ãDè×…¥¾¥tîÜYñ°(ÑÇÊI}.Ë—/Wy'$$œPýŠàSZZŠÅ‹+9"“%R‡–ki{(**ÂÊ•+Ÿ‡††*“z¶\ÓÙ,ú‹´M‘ͱ±±W}ÚɆ£ð„È߬¬,¤¥¥)9ãçç§úÉãUÑe¥ÏöööV^%ÒÂßÓÓCÑ+tŠ^©ÄÆw]ý{ê%/sÝ7%¥CÑ÷OÓi—c[q|nØþ yJG ³‘"„¶Ã¹ÿ¶lÿ fvŠíwB‹t^švy£±ÕW{èÖE¤9òŠ€’§Ì¶I¾ Îö¼ìò‚IÆöWM¼;RIvB§¤'¢8M¿zhì‡á…âz mÏý'~aúOâKØzšx/ü*¼* ¡ 2 mÞm ½B£(§Â#"CÍ –♦$ò?†1ã$2ÒÜN¤þ§Æh1Ç;ˆ„ÿ$/á?¹þ]¿"ù6FÛAô!ÉË,%Y3™i1ãs(M–ù½öSW³ÌpÀôPé7ˆïø Ò3ɾ·§ÓÐß1ê?y¶§ ¥#Hû“¶'Ø$SÌå2•×sššÇ0Êß”†'šÙ4Éù4=|“ý—ÌeÖmSpžƒÅ,/³hÇ@ÇáYÊ$ü ´KYdAüþײ˜±’²;>®¨^dΡtY3–:]³Ÿ¤­ýÍù8†1¿û7÷æ<$m¡WþeLÚ•¼w £ó©÷gû¿)sf1”3c Ó­#–ú¾šñÐaOô«ð tB{=?:4~)ƒ¼×åÓå=eû§i §ªÊ©Õ4L“žF%üNÇúç×J¯äÐXþ’Žü7ö®)T©¶â̶BN¬¡ÂÄʃ«j;u¨®©fÚ§"ùÉ¿t®r<µ_c1ty{×4?)§Ñ•H>ÿ‹“øÂ«B»8‘Z!p–A&Súš§›’§ª¦§Ãê«(¢’‡ü×ãà$2Š˜&­ò—¼tN?+BÿæGåOÚÿIœÃ%)éHš‚\ ú…EÇ_ÑÌ8®.Òu±Ý0^í¡èp›Þ©2ñù)“ÄÚ…j© ©cqêž|«Þ5ŠÛÑiû*s‡¡ÑÌ“Z†êr+lâéÇ8±îÄI¾ºkœÊW°;ÈÓäÁ4!FL¿„ÿGLŠñ?äsPZMð¼„&G|«3íG@ë±P¼Íø’†4)¾RåTþLû`'mÛðuä‡úôùÚñÝÁéˆ!O%¹ú¸L\êXh10ÿ·µfΑiº2Uõ/ÌCò“¶'NòzuÝ:Ò®i³û Ý”AŠN yWG]½àA|¨ã›)’{{zŽo>ëp‡J§aè£õij¿~YJ¬°#Ïm qΤףœ$X–^•Œ¤bJÇ–®øÉh©8éÜlMè üä½>#B®:ÊòR±­°±pY­?ê*ËË=‚pvSËÿÝ])ô%°ƒÓéý~æhŽ8ïì¼!χa»òÄN*zÒÁŠB¬Ê*uiÆÛHð ²Ú¼ë/fÚå^åÉ«Œš×±ž+«d_ðqaåì•?i£RŸÑ'40°¤ãîî¡0­fü*†×ØÈ;§!üêâÂÁ ÎTÙxJʧ–ZKÙÈsœµf¾U•œ] ƒHgPÞ’˜-¹º1‘uÕL£Ê¦ìHí4 æt ?ÏêÀ¼êðrÕ÷f¼í~F$y®©®DN^y†KÈýýàÁv©"MI«[s|3MõáT™¸mTäE5Ó¤œF¼ƒi6§'ubp­AS~nj×××>¶6£ÃKÞæüµ¿cÛ¯§‹7:LcñÌ~æ8ú¾±¸úæýüwi5öþpéKºú½ÊƒeWjœÔù¶ ¿ˆ<é¤Ú¾—§»ÂEÓ$yɃø’žJÈø±Ócj×L[Õã::Ç´ßëüÌáÍC"6!{\[NŒ£é?è]}FÚž)ž‰ÒX:Ž~òìB>ta:••¨R}¡³’7Òw)yN¸xkršç6 i¤zÀÌ1Æh%œêƒTŸiôA¬UvGÕÈÏÏCeMj'ž”AÒv…3þª.MTÉmƒ÷|®§…2¬ 7”‡^Þ¾ð÷õV1e`XÓ"õáÕ[ûÙ_î6éJ9CGÙ(%8º¹Q—jÐGÛÓ;Ž™Ní×0¤Qy'òßò_úi‘Õ„åÐzCé´•®Î§©áêëZ¶Íœ<Ê0RûúùÃËÃÐ[tZFXÍvZ¤ 2,ØT³¯9”3§Óýú}cï˜Ë.)Ûó×ùèxê­0ëaœnG*ÃêÐæ4tôÆérÓ`eYó„«káãëoOW䡬¢^>”ÿ^2ó*´êtª·ƒe\ca%–Ù_ÝáÅ:¥‹ÚôÑ÷D·]ßføÛs4a&íÌ!M)»9Oð.-*Dqie†'å5í¾”ð ñ2¥¯#;äÁ ˆ5d¥Ûk…´+ú™õÑg¦k/»£¿¢N”Zí)—ðŒÔA£®Ñð†<®žM6Ð+•‡È\*X aVø¶µ+1éJ´ˆIBïÞ=Ð"È›W¯ÀÒÔÕ¨óÆéýû#:4ûwmÅïóþD¥kúô;1aÜóHÁ¨GK%MýOna 3(>{Év®]Š¿ž}À¸ÿ Ch—á ƒI§ÀàZaÆ2„‚m„‹é ㈿ü ©rèLTVû±sÛ—± óþ\„÷ –á D5@eyV§.ÁŠ5iHîÚ}ºv@aæfü>*j¹ï™ÉÊž+•é–­¢¸o» BƒýQ˜»‹ÎGZV9ú٠Ѩc'T§hQŸ²Ôè ë±SI imU6oZƒ}ùhVÂTT„^3¶ÍœF=?NÂ/tªNÍ„ÓOò‘…â¼L¶YªáéÆA*A¬e””×âôg!,°S&<ˆ-U‘xôÁ;‘ÎÓ28±Ü ùÚ‘' \mH*ZÕeزe=öå#¦u‚Çx®^f(úÓ3Ê)ƒ ¹{3ñö„û±Ô%ß9Ý’¢XFCY•²Ê WÆöMX°x9ê8Pª¶êîá…ˆ˜Öl£”)4VefBxSc¦h°a&÷DNշ਱Ô~òVüT\Á¶>Œ`n´+ýNXFø¤0g7æÎ‡2g_ôí×1¬Sé¥Üâ :ò£êÛ˜¾™;-F‰WO Ó!µð Nùy˜ñÖsxc©'f¾t7R£9f(™*C†³;)+•Qà¥m\‹Eìß<½(ÓYF $e­©b;ªCJç^èš§žœ8 Èw.’† {ÂÞ)šûª ¬`?¹mï~¥ôª:az¥TTcRº W—öðtáÌ¢È[9ÖQ~£?zåÙ KB+ã™iˆì§å’š™²Ñ-þB›„¸o×Ì™û<‚ÃÑ·oo„5 FUI>V­XŠUÓÑ®gti×Ä­´(֮ƚuë±w_.<|ŸwîÔÑá-Ù^Œ¼¥¯‘*OÛ°KRW¡ÖÕ»öDJB˜ ò³2°`ábä(A‹èdœÞ«3¼9¨l̪o‘W¤Oè–v,}]~vû t¸y!))~>^(ÎÙ‡Yï=‡çþ*Á;ãïAß®IjÀMŠzÏ #U£õ{ÁNÁE<¥]UQÖÍþä]<ùå_xqâD ìÛ™AÊ%AE…¹û±hÁ_ØK™ÒçôþHŠmIÑYí”§óÙ&[¶n>=» Ð×C ”ïNÛ„•<ÄKè/­¬Ah«HžSÐíÚ¶Q²Ò˜ýäà‡sÖ­\†å«·r°ÐŸÆG J8Ó¾zwnK]LVø¨äQÿª.EÖQ¿+ÌÛOù³ ¬$&%!À‹gUP®a»3Ï4¼d`&XHý .×Klá3¿)ʯøÒÿ»r¢©h_:¦My³³šá¥‡Æ¢SR+5P-q„fWÖi^f,Z†¢JÓZ“6àÉA‘V1HNJ€Ÿ—¡¿4äuÆ'_èú“«`¡}túæ«nf?#žQVƒßŒ¾©aºö6¤ãêxõÏÌÛ•ƒ×é›Wcqê&ö­üÂŽÈjòSyY)üƒ#Я_„z³üæÕ²Ò‹z5u£Âœýxï©ûñîÏkñß¿À€NQX<û3Œ}òU<ûßدÛ–!ãeðW;;-69ͪîꪰjÉB¬Ùœ†˜ä®èݵu6ädîÁü?æâ€“?úÖ1-ØÈª‘•‘†•«VbÓæí(¢"Ô¼%Úò—öíÚ"ÄßGõ#öz>ÐWû;Ó³bÝ(l„ÖD¼ýÉ$ôé”§Ú*v†Æla •}©©/ÊÊ(±Kƒ6x@°—º3²ÌpfïÚ†þs+¢/¹Ó¿!î4$Ê*˜÷±Žei] ã»òÙ…†ªc¡J@1–)/sžxêÃÏá÷¡gÿ‹¡ö§aHJƒ™’XÑ#¼$ô:1}™µ4󎱼ÊP¶%}p2’šŸ¹×^3 ¾x4ÐKKeé-WŸ½ +¼­ø’”W–à÷oÇ—Ðrtp/… wÝ„Ö4¦«( ÕL0•?i3nT†ä³R4¦Øf$y'#¤Nä×_—îgŠ;QóP <9ÃxÙUCáKÁ+f«·Ðo,Dþg;04¾5TŒ¯ûÓ1¾Qü:¡GŸžˆ ¡^UÇ™*âİ•4¥¼¢ëÕRע𭂠ëzçú¸éîÇ0dìxŒ£±æáFe«¢šxʧ¿d+‹Á;‚Wù ed5ÛigçeË_w’Gú¦Õ˜8v8þØIºšÅ¢[L0>ÿì!¼0 W^ÐŒ8 ¿Hçb|¢Ë˜ §Œc‡U^˜‹ï¦>†is·ãÏBt«PTs5BUµÑ±HžR¿•¥ù˜ûý'¸ç‰WTÚ»tGe^:¦ï”:èŠ?–¿·ÂL\wÃM@è…˜3óqvŽþ<ù¸T)¢NJ"•(ÒíDECҭ垬¹ ûê§ÛðÚ{Ÿ#6&‚yqϰ´'â(ù× j Ñ@²…?,…!ùO"ŠJ©eàázeðýûâ× ¶¦K ¤°@_¬ú•Ê3RQqïhõVèžÔ|-ôºÉ “©Þ…'…G…­¤cvå OmÕÌû<Êý›Ÿ¢µ”©œ˜r*˳†Œ6g£YË ‘ßì EÝP6wÌ]…MØŠŠ[oVáMd?gÈÞ‹Ç'¨ƒiû‰†®¶®^ŽW&Þ—îUé5 FΞtuÿò‡_ãüž) /5ñfÃ_0ºÿ°~~ÁÓR'ªŽˆU½³ÑäŠ+†]ŽXö ‚™Ô«8¹Š“zÛµy ž{á%tv7útï¬è®*/Á·<¡ÚÛä©_ éŒm«ñΔç0ýûÅ* ¬çîQ÷NùWžÝ“Lcã[b-iüöácøfíÁúè#¯NC×v‰äòéPý:ëJéí$JVÔ(0íÆ ©yLØHÚbÃr BÒšå®"ï¸ýÌ“× ËÌ“³;¢âqn,ðËŽ%\jRˆ"rô®më ·3cJËb±Ÿ#€â®Ø -š1ŽFíÙ‰5ü|WFV•6oÄ&$sD'A~ÞL+ Ë—®@•‹gÕ"Ë-'Ï ¸³“˜ÎfŽypæ£0'SÍŒ•W#.¹Ú'Å*á»je*6nK§ë†è¸DvÑ’ùìÛå©®cZ±Q­½' 5^ÍѹC[ŽÎKçe4jœ'Cal …ÏÖ =<ýè øPŠÁkâ1õãgк¹?þö=}ö5|ðö\\qÑ9óö€_3†*¡"h ‰{ò:'xúø*ò/u?F?ù»ñéÛÏã³ß6`ùºè”’ˆÓ™{Ó±fÕj¤ïÙO£ÍÑ­YËæÞÜŽ¥+Ö—£K×NðvªÄªå ±c_!:wï…× ,䧉ÄìÅO³¾FLt,ºvî—ò\Έ.ÇÆ-ià0gÃøY¥.Æì¦Dú29WQúÅu¾ Ó¼aNøyæ4Lz{&¾þc>ú÷ë…8ÖQæžÝäÉU¤w+× ±‰èÔ±Wjpdq®XÉQlWtæ7Ûùq†i VnØŽÖm;!"È<»Teë›ÙßÏBXDºuï T`-qXµz=P™  G§.]‘«„¶o`;ÆKŸç_ÁÙ=:`Ǻå˜pû}XùÃØzÉùh WväœaX±"»÷çÁÛ7)í;qv!ÞäÇZ.ANÛº+×ÐÂráy{Àa%ÔuôS:•ŸÚvìÈ•-¡ðöòààR–-YŒb'_$ÄFÒÉ@aº³.<ØièÎU:J.µÕ÷BVsf¸¼²Z-§’Ùÿ6œùˆ‘†¶Ì¶oKÛŠM[¶s·ˆéñ3'í:Gjù)£%*í<*m³¾ž‰Ö­“Щ}gvcéòTdp&Zx'&>‘'Û¦ Y g{³±š#ÈÕˆç¬{Iî^ä±^ºwëo.ß%D:ÇZŽ­Zò›2Îû½£G]‰Ø°@5ƒò×ï¿sY&ycYk+‹±iýZ¬Z³ùÅåjÖÝz’'Z…`]ê2,þ}»¢qÅüßQ´{ Úu쌘VÍFÒQ¹RÑÎØŽ/mÆùøI¯á¬ÓzÀ#ôi[Öaå¦]8µ [¹òD\D³BüBþˆåìMÇ”änÝÆUGëÕTQš‚‚Ѷ}n!X¿r).§fM·rñ_(ÍÏdþàDƒzgèšÅ$£Kû6¨)ËÇÂÅK©Œ»£#•ÞH®\ÊÎÜ ë×#}w&PÀÙ¦`ÎÐu%?µ­)êvÂR°sæÊ&lÈÆÓ¯¼Î™ÎŒª%º@˰pÔTd¡E(°eG¥$H§\^Q€MÄl¥âë*4k)m¹+â"èÑ€à@Ʀ ›±y[¨b¸ÉÊòkÕ=X»ÞÀtõ²ù¨)Ú‹D^¶á¬|6•žËW`Ç®=pöðF|›öèÜ1¾^J¡ÚËÕX+W®Eqég?RæÍb„¤P)“ŽÞÁ±xõm?â,LçìqKŸ2|ôî«ø`æŸXÍz9·oW”Q~-\ÊOIú…òÓ‚á˙ڵ©‹¸ê©‰ÉíÑ6!ší%‡eÙ€-i;¹ª ž^~hË“–ý\*±eëNø„„ñTôNôrÁž]2Ó²žœmíÒ©üÙ_‰²Hà”l¬U?†¥4K'mNøVf¨·mÞ„ÕëÖ©oÿòñ‰Q«r²÷îV+B²ò •¨ó¢<ާ,HâLгáÊÊ×å+V£¤’}5ÛA¡T·ä*¸äg»ˆ¯ò’qòÀײR)¡S/|5s&½jñÇw_â•÷?Ã…#ïÄ5ƒÎ q[ÇY¯”¾µœqÚUœ¡ÙÅÙogÊž¨ø6èĶD%Z x0MÉîPÎ(½¼ü¤×FŒ~W\ЇypYfEg|šs *³®©È-uBr›8f¢ Ì™3EÝà\~€ò€ƒG¬›Jœ5 ‹F'ÎVG†‘akJ9Ûºé{óÞJ ŽìHß‹æáq”3mP˜•ŽTÊÌ:wtíÞ¼Ë/° ùgP-U'}½¸˜ØfÊ`e[ o_ê3t>\eà̾µËþ´箸ÿ‰‰”]áZ[†ßøy"“¨Ð:‚!ƒ/Ú}ñæzɹð©u¥.1K{#<$Æ…ÈÓü¬½\Í—ŠÍœiY/x÷êÑ•²a/g¬ª8‰NûðÓwßR¯JB|d(ü›u¤&²÷îÀÜ_Ò±#=Í£Ð<ìÏFD.+cëqöP'Ù—ÈY¶vÉ O _ÈÛ§òÝ›S¨ ÿy†a.“5âŒz”;Cg’Á¡®Ô™Vq%ÑY~JKên4®è‚˜®øìÏÀçï¾ Œó~—\®º”ò5{Ò6p0õŠ*ż*]™ ¨ªqFïƒðÑûaxæÎ;°¡0/s…@¯ö‰`c9efVqÂZ4c_‘…™nƒÞ½z£¨‹æÿ¥òoXŽ9?}‡máèL¹ì]‹M«S)ÏÖ"§° !-бsÕî\ê*°aÅìÈ*DWßx²OßÃOˆÉJ¼âü|x‡<ÏUQ²`Õº-ðmÖ É 1ìÏYW陪_’²7 “•m!üI\ý¤û_#2Ìd¬) 'ò^\4ÇBÒýñê{¯¡uhýúžzåLž1g÷í—øíöç”M”"\î§ê>9±µÒ*ixmݺ6mÁ’2YìSÉ9¨äëVK]f=ÖQVçJÿÌ>¨E$u­.èEý}R)“ÓÒ)“ÙwÇ'·cYÛ!ˆ|SSYŽ´m[±~ý&׉q[E·fºМ}µÖ#¤$Â2@+.åÌÁxºD¨¯'û‘ ¸r5C¨¿Wå.ÇâëPF]B&Lü‘Ц­ªObˆZÿbÕHÚn¢[Ë ‚1è_Á~qûÅ­Ûwp–»œ«þ•LNdº:™ó.ýÏý¸ÿæ‘p-+Àý£ÇªQÕOfý†èþØž:?õÆ<ú ´ñÁ¯_NSq|«·cÂøyœ!¸É46×.ø7Üózœ3"ýñäc¯1\wÌüùEÄÓ°çx³ŠÚ"qq­Qs`ÕÃÉ*Ù2°nõ"Ü;âflcoþŸá}°øã§0ið̧cðÙݱcÍrŒ¼òFEŸÓ(s§Dè–dïÃ=>ÊWðóŸÝàZ×î¸\ئ_(¬ßç*Ì£Ñáí%|{0·‹r)¢¼Å;0È—{î0ÿ»Ï1ù“1hÈäîØˆù©àÝ{>áò㶘?÷'\7æaƒ,¥Ö¡åiâ?guÅÔÏàŠ˜Vؽä[<ùí'¸yÜ$Pfã«w'àÝoW½e4*¹ PÜðÛÅØ¯âJÊBL¿m,þ ŸŸ;8h›¤‹É?4˜8cdÐÎòÓP/ãRLqµ%Ø&r¨2‚ßþnŽ ‡\¥Œ·:çó~ü£ÇMDç¡{ëfxê‰)ð?}(^¹i6p)å&–·MJ{¼óª1cóæŒïÑšJ¯4nAI–Ù¬,^ÅeîÞ…M›Ö2Ñm:£]×¾ÈÞ¹ o…oáë´Ï?÷/º¯Å´Äºe¿`ÂsbðÐË‘Ëp.ß‚È~W`ʽñmÈ}Þ¦MÞ:E¥?õÓ/Q¹s-î7çÜþ„R «h ß<æ.õþÓŸæ"È­ L~oÏZýÏG$ùlæ×ßá¦ÇžÇmQ\JgÌþ¨¶lWR\„8pÁÇ=ÑŠ³µÀÌ‘·Tî8;[QŒ?¸b`ì/£ïÀ!hêñ¼ „÷ÇÌwÇ#%*‹æ|ƒ›ï ‘XQ”ÜœåèÐ#žÛ|¢ñë2I4ü?|WÚðÊô/âQIcb™òÎpåoXŒ—^œ„1½ˆë/ˆâÌí˜tÿ Ì^­¢ðÇfذ*”¬½\m|LƒRfE ®$ÿˆëÑ‘Û[h$l\³ wß÷}ÎżŜ¥ô¨Æ‚ÏÇãÕöàÉWg )ºæÎšŽûž~ÍSº¡r4¾ør&z ½7ˆÅ=÷ßϸ.ørö<Gû#õÏïqïÓoáòÑsà°³šñplNUü%ä†ù*÷œy ‘—ºpFÞbôS±q±Ø‘¶CÈÅóo~„Agõ¢¬JÇØF§ç#Ƨß|ÿ³zÿð‹oãªg Ï&L~ìÌZdÈ0õRýØ D¹7P¾f%Z<¢Z*ˆ-Eš8ø·ÜfÔ°¿nÛ–KAÙÌó½4¢^Ÿx>Ÿ·“uÌŠà ²¸‘w<†[F^Š`ö÷jeˆ$ÚD§éQ344òüùÉ̪Â]xûÑ1XÄä9þÇíOL,|æ|…e¿|‚qϽ£RoÀé|Õï2¼ñèÝH ÷Â’ß¿À‹ïüxPîÎ9[ý…ì†ë{ùíxjìµìC|Ô"æzeѾì,¬XºûÓ·£²0ÛvìQÁœÙßË99°#nÈ c1è¢óÐ2€Ÿ–"Öî½ yÅœý6V]¨™<ÒþÕ»¹jlE*‚CœñÇ+ùRxÜ8E 8 ðÆÓ÷`úÏëqÕ¨ëQ“»/SǹëñIèí‰_>ûD%èVÆYù'ÇÙWÁ½£.áj üXg¸=Å0«U0<üÂT ¿¨?öo_…§ï¹sDU g37ÊuóO+ƒÙ½2—FôKxéýYFDÓ¯ÆFf­µÓµ]ozaÝšHÉR3Æ7R' S³Œ”Eyù™Zˆ«¯Š^ÝR¸¯F}R*ºu ·§x¨eÏf‚êáaðRâÝa­Z!´Yò÷îÄœi£1m¾Ê¢ÁÏ“ÿ†î‘~˜óÖÊ¿eM>^xêq¸6ß'&a÷ª…¸ò¦ûÑ®ß蕊Iã§ ­0ýÎr`fåÏÓñÌGóWJgvä-·aÆ›¯ó©9¾úù+„øºbÙœ/0nòÇy÷Ódm†Oï½³C:bHפr fû«a£ƽ7Tƒ=äWvLõiÊ“ÙIÓa¤óAL\:%F dÿN#_Ê–ÉÌ]kñÈO⬃áQ™ƒçíõµ¾ÄY=’±’«S®»Cúÿ@\>üB,ýxvöÄß¾ˆìý[qá°ëTzƒ‡Cö–¹˜¿&3¾ù nåû¸²áB|¿ÊÉ—à¥É“pûã“qýs‘¾f1_}«÷Š«°wé'X²xÿ›ŸÖ<˜„›˜Â Xýjy-m]Ô½øiLιa=ûÂ'ž~†RÒõÛfÌÅ/~|I¡žXøù¼9x齯ѺE,MCwc^¶N-øy&n÷Š3®º í9Ðág’š†&±öR^,Zø·€xr‹å>ì5§^æÌ‰ˆ,¤.þ\%~ßWãì3úÀ‹úZmX ÜÄ…å´ã8ñ#ýyUcRRB=à@šü©®sãÖÝpnÏsÁ¯o<Œ_Ó±¿€3;²Ÿt¾\ Ü9a N'`kæ~‰Gß:XN\s׌½î2äî’þvœ½Ð¼ûÛZgnuÛR·ÇáGëÞÇ!ë#“¥€(ÊÃË­eÈæ;¤sO²gAæQÀ_0d8*vs†bG²vÄpäîw† D|ë(î5+Á¢ß~PÆù·=„/¿ÅT(ñ¼ýÜC8³OÄ…x ¸œÝ —^1šû½›ê<”2¥àêüþÓ,L˜ôZŸ~)^|ä$rðܯ¿UÆù¹#GãòË/FMþ.ìúy¾™:ÃÇei^è÷°&ÃGCKsÍ£•$Ã̤JÒ1”{ƒ`ö6?uCµLÜ|ñÑhæÃQï_)èî{W R©Í¡Þ%”ýó’¦jh\Âcj{*Þ‰ÿCÚY÷âRÍÁÛÎÙÜã¶oÏLEËÎgãt®Vðª+Ü¿~QÆù#ÇàŽë†².vcÂÕ#1ã•'0 ¿±íiÌ–t¥Ð¤9¨ððkуwó؉×Ò°é€7'Ç-÷=¯6§á£çGräØë—ÿ¡ŒónGáòaCáQ¾ŸFáOøyÆ«|î„÷IÒ8Y¶§Üú¥˜1ý=ø¸TàûϦ*¯¹Ê!Ø‹F毿+ã|À·àž¯€Kq&¦ŒŽo¸2à¼3NC×(7ôìÄÕ"«â¨d±S¤±êæi È‹¨ÄN¸eÜS˜ë#(ô醿x Qá¡(æ2ÀhœsÌ£†_‰„^t)Ä o‹%Ë7!j@k¸ÛÒùuÖ×È\ÏQú ˱1.y;Úqij”K?|ú†¬PÄýãþƒ³º'#%2+y–+¡[ÛH¬Xð£2·¾#/=ù;VbÄM÷"³Œ|- –Ê¿¬ÿ(jË={D[fñ8ùŠ5|ãíj$Ô¿e <)Àk/cJ›¥µâ2ýˆ›ø¯Ý7?€ñ·ŽÀy8èrñH*í®Hß¶ å;ÃòEß";çfä¹áÓ×VQxú%œ{Z7”‘_ÖlÝ…NÝ{à¥'ÊpדB…ö¹Ë.B—vþ1û eœ_põ¸óº!¨ÎMÇ“£®ÁǯMÀ™ýû¢cK/´êÉ$—ƒ¨Ķ æhl$¼Ôì¹”4³ãvööA‡®g2àçøó§™êß Ý 7ÝóF^>µy\ÆKãˆÆõ׌@bKøÖbò{_bÕy§ã¬K®Â¾´U˜>w-žšò.º·‰Qß²–}r¢0 –Õd€‘¸ê¶¡xúõ/ñ¦Í—¼:÷ˆ›o¾=¹JgÂ;/àÊïE±{Þÿhb£[qvÕ]θ 3:^ÀÙ$W<í8ëó¼Ï°÷¦apÉ(\½q¦ÏÞŠñ_Ao®°â¨ù²kTQBÙ1+-ƒ´ô ä¨Aµ‡|Oú6eœ#¡?†^6„ËKÃ1xÐ N£7S3Ñ"ŒÎP’‘;*JuF×ôÌÃb¬Úݧ³ÿBk.·WÍÈCuþ™T Ä8‡[w*Õ—#¦™'ÜËrñÆg?cÙú­rnŽ·lÆù#ÏMÁ9œIÌݹ Ûö"!& á4Ü^ö#zr2œÖ…F±æÍš¦ŒóQ̹â¢3“–„ïæ®À”'¿ÅÀÓ;#méeœw¹`$º•ÊmE& ‰åY‡øN0‹%ƒJŠïwÍň¡sí…ŠéÅåÂÔ9#§öCò®UbëÈfŸà$þîA ñ-侯iœ‹û ˆœuºbè¥(¬ôäLJsÜ3ê\¼øÁ/ìëv"Ò?«þ|K…½ w_–ï;Îð-Êè_¤?ƒX,Ü·³>~}á-œ×;ëüŒ['?œÅ%åm™Ð}8³?Þ\R4D.z@IDATÇÙ_¼õÑL,Z³ƒÎèÊ¥Ñ*ã¼ËùWâ[GÁ§*/Ñ`ÿmgÇØ6”³]Œ‡ƒ…·k¸LUè]ö¬‹“k÷Œº8qï>pV.ú]çGŘk£†Û:&Ýw >zõIœÖ£ Îè–¤Œ-)£a`œ—ác®rÿñëOñßîéß¡[<Ï hü–†—ܪα ‹FÆÖ5†qÞê4|øêƒˆrÁWÓ¦pÀç+¶œÃíQÝÂKâ†ß~?.ã‡àù±]ç„×?ú ÎÈÇK >_‡¼QEju”…²ýE\ù†xìþê¾ÁÔ!ÊB‰Kä@k€7¿ëË¥Ó¢[ÈŒeË0îS¥ÜL`Á÷âbÛquKt¾|ïmÎ€Õ  ßÙ¸<ÄŸS¯©ã ™SMV±ÏãüÊÆ«®¸eû·aÓ÷óðÒøÉøøó×q×3Ïa$årUH_|òåÎÒ¶àê«2.Ÿ.VyÜòðsÐ=Kþøϼü>6s¥Jaq!–ÍûYçƒ9 =zäÅ(Ú³ ¿o=÷¨2H<‹Ó ãÜ«;Þzó>ĵðÆÇ¯NÀû?.QòV%nН¹@Ü+Ï>¦® ~D °ì•ܾ¥\»3ÉsY &ŸIdÂÜçÊ0¶mqRtÆV”*ãSŠ :#¼Èd‡¼ÌÇh.œÛ'©4NÇOšŠ%«6 ·+0æÕ×0ÿúÛ±Á' SgLäy-QÌUXSÙwŠ,¼nÄ•hÓ Í=ë0ñ¿â—%«‘q&ØÇˆ;{ЕèšÅYÁʲVÜ™ƒ‰o~Ž]û²áËýñ« ãø¬¾]Ð*, 7¼3׺¸Ã¹¦œ«„"ñôä×ðNo¸b0šqõl*óÒ•¢™‰5©Ë‘³u~ûþK¤{r$üÐÌ»+¦OŸo®†ãê9 }4óWlÛ½ÝÛ†aÞWï«ð#FߊÁçôÅUƒ/D>Y•CQøkÁ/êÝëGã²óÏärùá¸6»¡>NX9ùÐ"X!LØAQi”åpW™qñæ’ìp.IçÌöb¹<>̳‹³:vÎßw^›Ìs ñ§L4ÐÕqß»‰LÃÓxcÜ×äaêë¯Ôû_ÉYžsþ½ï̪ÈÚ~(!´@IH!zUŠô®ˆRÄÞÛÚË®}wÕýÖîZ×µ+k/ 6T ÒA,€é%„„$¤ÞÈÿ<3wòÞ¼$\ÝGÃ}ïÜ™3gΜ9sfæÌ™ÑƒÑˆ²íÜQC -=š·À ±§áÃï^§G.*hÁESëÀÄâl¥Z ÏL7 ãŽ)WñMŠVèÔ¹3âÚ†a%Wœ³Ó¹!Þ{õy”•bÛæ/L:íœKÊ$Máë_Ň]zÎIÀ±4³¦Uƺ-HÍÊ5iV,™ËúwÇã ‘at4“›ìmv[qôðQ8¤w¬/²ßQ$xO÷¯y’+v Âa˜4ùx¶[¢qú%aí®ÒWñ¨êªÐ´Ç0\}ÚdÄêìtN.âºõ¥ÒQŠœiXºøs|KóûÂÍè1Z©£©ØW1]6k¼I8† 3ÃЉ;ÏeÑ‘èÜ{' ÀNšM)´¤Y·œ 5ç‚Ka–mãQƒÓ´¯*(†M¯ß\HÞÙE^ŠBCêb@g5é8 ïߥœ©žæ¼!¤ÔUr§¥çÀ‘˜Ks®/¾^NÇ@ð#0¬Ú„§ÿu;ÚÒ²O Ó*p×ô½Y3PJÓÿŒ­ëmÍ#© Æ´‹åûZÄв w4+J‹=kõgy/G³VÑ8‘“”νGâ›Wa#Í åôê[.œ\öù:¼;ÿe$vêdà–7n‰Ž‰H‹HzBÎÄÎ Ê©eËðÕÊè™&Ãb†FtjØ–Žhâ¸rÍÃC\Áfù]:ÑÜ·ÀLž”FòÄõ»ƒEÀ¬wTt,&&s7|Šë¯úGSÞÚ§†L4‹Š¦ Ûf%õ-6”ðÉÅÅ›oCÚTî¦ùbwÐÈÇ•4µƒ/Ï çòl¾BT.L§bC¥zù'‹Mœ”°œ™ø†oñãθÃÑ|Å£"½¨¨VgaEKMŽv±íѵkg:KÚ†:RØÌ æch¦JSn:µfûîÂ:ÁQ˜tô´蜔 ˆTD1ÏvêYKL1˜GôÅõWœA§¥aذú<<íY\üè Ì¿ï:*J¡&§ŽË¨=-=-°2ÊïæTÂF]4Ëžýwß|#™ˆÁýzcûZwòú p‚¾bå „íÎÄŒ%À¨Ó¯fûÆr1Dç¢IÝZ$ÿðƒÊT;êX@!Ïí&­miò׿/Ú·oÏ :óaÌŽµ™¼™!Ÿ^³+ا¾çQ€ïŒîd^'øôY°3u›A~üèqÄ#:»RW“×µº V<œÜ5™üÿ7}Ó.£y§¬¾¥œpdxcùˆ!ý‘Ø©¶ Á£¦bñÓsèq9Ç(ƒÊ¯1uïÁ”b’L8á˜0’ŸhV\XÚ–iœ´Uæ“`1:Á ž]¨¼cñ¼·Mž“Ž={ &´œG¤Ó?DÖÎìOlUŽá ½xìfTfl6ï‡ á$š§·@ﮤïÆÌÀbÌâlûŠ•Ñè9 ·]p2ù( eùYøŒV"¯¼»ÄÐIU4Ù]f»çe’.eBæ³r¨j6˜È¡¦ßy¼Ñ­Ïa芿Þp“Áï¯w\L)ºËLÐp÷¼‚0µ»§¾nþýØZdîH7VP`<ÂŽfMÕД M[£ÛCN-³R’ȶïôê}­:z³¿m2éJ¨Ò”ÐÊhi¥0„‹*QÔ¼ ãÏ€Ÿ^ån>}íäÓªQᤋ'ñ(Q„5,AÛÖ­MœûÇS Ü«Ç;’ËÜ]»þvÚ3ÁLnV­X†‡Ÿz‰ãŠGSÇ;yÓ;‹1…íh²+0²ÖÚƒGÅ—ŽØ„oùÒ>w—Ûňž<ž2%;mؾ«ˆ‹áÍÍ8-éSFsëë;ÒÊë»ík°¨œtëÔsÞœ©KlüAL0©~ª{ˆ!#ÄÙSGñ ¯˜.ok_þ~ƒÇvÖ UiK,Y˜Œøñçò(Q¬q¦—–²_}µ?Ò4¸24L imÂÉ—&#|ûCÏÚC«Bâ¦ë®¬N0dü‰¸‚‹)‘4 ß¶>›æù_cÅw?ðHMï›°‚ÎÝ7ÇÀqSñâ§à•'îÁ²Ï†qÑeÒéWK:0ìØí¦{o=ÿ­ጠ£Ø/†ÓНÛ“6([¾ý oZNs÷ó.¸ „ Gß~|Ÿ‰¹3ç‹p6šÎWCwc°+º^zûpmÝw$.;c*"šÑ¼ ˆ2ÜX¡ŽŸ“Í͆%XÉ#B¹l¯bZ©(HFŠ\¾&g¬!œù®sΡa<–C?¼ŒGヒ†ŽÃHžÏxØÞ­­fál’{ÿxèÈ/äÂ'ÉL—žL+•[nçˆHo³ñ¨MïeA&‹¹†Üµ'Z†?ƒ›f­Ðd…Agÿ-Z(®ï;þïGù”3Îà_3âXÊçU&Ÿêìzs1ŽŽýÇŸ†óÇãz¡È¦uÏk÷þ ˳é?AUbO½)“C`Z·VU0’ú‘¹¦Âúír0MYÌ×°!…Ãe×ÝŠÁ}¨TÒ¿špQ4œ>•謶÷@\uÏ=8÷Oãä|#ºqÎ9q-Cy„ýÝ#r­¯zöì…6´æ;¦#ðþÖÆ×Œ=™ÏÍ‹>CpÊ©gþ---#¿pÁšH»º$Â?v´ð¬;ØHùÐÙ÷O6€5kâ¹Å¨8œ::o,YÈu-†ÞSx¦µ3ÚVØIøìwfxÇ÷·çË+ ò¼Õ/ H6ŠÎ³Ë‰By™&Êâ)±‹t^oIJԱ¤åˆFJÕ¢×Ý­5Þ~ï#ÌûtŽàœNØh=fBlÇž8zô0šÓ7Á„ŸËs5ñÜ-¯ÊÍf—™‹dæéhïef¼ä°xñælš{.?«Èxqd4Ϲ’Á©L‰™l®AxúÍ‘ÅÉØµ·üË×®3g(xîÝœa7ub­¼Žª^Í.kd²ê¯úþ~q—ÒÁpÜ\5Óo<}fÎ[ƒõëÖ#sÄ DráF8J¹ã¢Ám7…¯Û…Q;á´ƒ §L奓æ&Ú\“žÒ'˜ß8`1Ú–›ˆc9D´j‰Kÿ¸»ØÆícy.X+-AA†Z< Ïüñ8¬ùâÜúàó<ûÉéYèß’&¿6S)WFÅo2ý‘geñþìñ©m(¦Â 3?:© ^°øÚ Nh#ñ´vÇ8€{JHe‹pŒ9r2ÏeGÖTzrC…Vi£ðç{ŸBbX®ùÃåTÆ?¡ûÓ1 wg:Ñ¡C¢"«@õ@oÁ=¹vÔˆô)Bø­šÑIYY‘±›t“"¨]šZzé·<Õ¯¬°©3ûëVí †¿ýAü-G- ;&∣&¢Ï—?›~ü§ÿá2óýþ'Ÿ£yV¼õè9xý« ÒÅ*ò¦\®äÚ x¡ˆgåt¢Ì£±œ?¹³†J‡‰Š ’Wk`uªÇÕö]päQ“qh—¶ø<¢žã=ÿË÷xë´!¯(dîÌ5gõå(Jo´àÒ¬5-ÎGL·‘HMÛŽV,åð\L{j)MIG7:Ѽõì«Hêk5é‰#ϾÂÙðe­-Æ\ü5c‚]di¨‰¯™Ô©ä"sµ¤èæŽO´JlÍIZ={„[îzÇ_t5n½äOØöíü…çãå8ÐÈ*egpÎû$ (ÎZèŸ@PGb¨×äÙ“ NgÔ«¸€¢Ï'7Ù¹«å¦ê¢Ï5ªn“×ú¯kÿ^‡Æ”)GÓ²°Øç$'2R³i¤ÉMŽ‘WÆ©û¼gÚqU[í¦_ ]§¨`Z æÕ,j•÷*S¡B;µ|ΡáŠÑˆîUH¯¾àú[GúY2lzqѹ$'éIß2Õþé:Æ&<_kr­à¹÷±´ éÝ)!´æIÛ¶… L¼ ‚g‚›Ñ·¹.ѤdØwrç©gß>8oB^œŸˆ!Eî†æ[ò¤Ps2.¾koL?’gß¹¸Ä³œ¼bžË E^²B4©F xV]¡œò¤„}PgÁ¸–gèé§£dœÕÉ,,쨲›´ÓfG%Ë4GÃ}sOÁumÞÈ®¤âƒ1nhOŽ3e)ÊVf¿òÈOX ˆjiióñíªSÏ]ôV´)äyñõë6Ò:* q¼é€“0ñä–¤ê†Εشê 5æâ*X¦ó ¦®äÏ2Hü%¾‘^a&è”mvÑDü`)°›&ù£xt¤GÇ£»S_ ‰ˆ3¦ÎFeÊÆ|]_؈gé?iLà¹×ßC^¿ÖœØ›8Qœ85ï]\E+À&Ã&â©[îB î¸r%’ØÍ$Šøò” òÏOAŹ@ikX6 7Ý}3IŸF\èŒçq½ q(ÊLÆ;OÿO}°ÿ™V‡WôÁò%á‡×iÐ`Û7AÿQñØÃšš‚ k OO³¯ÏAï£ðìcKr*-a×aÆ‹Ï`&ÿn¿ï!*¦c c¯þ8bÔ`#“µ’Çñ\W€EöÌMG±uÛ6ž%ÞˆÏ?Dû>½;~Â0ÖÑÕAOÛÞúÕ¹kw9q2âZñ4?ÛUNvÓ6­Â㟇…\_¹éžGqX(Ìyã9lܶÀŽw‚E~1Áƒëä»ôµFMZ`Ä‘'ááØ>Ha=ׯþO=Î:p£o&’â.­ÝÁ·¼/r»þÔ©{ŒÃM5Î ’Ö®Âû̵M£ ËkÖœ›Eécqs¾ùæ{toE¿ -¸9” ë7rBÐÖ,ÆH÷rAèñ(œÉÔqä±ß+Ó%ð=5Þˆoã8ïUΗ¦æOÒÑÿÛwî£ÈkôëDß'_ătÛBé'¥mtfåfÁòïpHçZ#óFªÒ"$m\Ϧ-}¸ñÄzú”³¨È\‡ôçq®Q}~*1¢kfþCý-_Wöz!-;ÇøªŒbÿ¤.Iž3yÔ.E<ú³k«bèG†º¤“&MI-R©ÞLú› u·ÔoÅú BÂrÒ’ nCFqŒzÝd:jPwDp7,4®=ÈÓØìêÑ­¯ˆàWó:%Šiæâ½¹‹épª% ¶¯Åó³µZC³ðHN´ ÍN9§Èv¢#î`CªµžÖµË@œ}î8Ä4-“oÌīԮâ9«t¾ ð]ÒL:<m"#yÕGR¶n¡ùØ4¡´0ë¹¼²È ^Ä_ íäêÔt¾)£€ùÉì¨sæ ,wv$­Ác¯j æf`l ÍH¹ÿIE˜¬Ígôí… W.¦yî|\pkC|ðämˆåÀQ^’lR}½t1w3¶˜•Â:ïé«•F^… &VÿpÂÆ$þ ÿcgØ$4ÝïÖ»N9÷ NÐÿ„—¿‡;JѸøä#¨Q¼7>žÇÁ.»s¶áÅw–šZu ó°Ðv‡}í¢åX0o.Âñ,5ÔDÍîbÙŽ¾c{*–Ië î8¶Šé``Ìû2 S'ŽG[îÀÒ!ÇOÛ’9)éJA¾§ps h^!Ç$táy “èøëy|´èMÜϰ»®=WÄixþÝEè­Á™gÛߟöމ‹¥w¬P^ÅÆ£€&,þdr“¢éÇÖÇx©ÔÀá½y]q7-3Ž|‹1m€Ï~\‚âòÑŠ}£wž¶¬û •MãxŽŠªwŠZ´¦OöŸo¹ ×Þñ(îøË¥ˆn7£ûÆÑaË(Ìÿþ#dçgJš`mYŸÊ]ª"t¡Ã’èÄ¡„0‹/BhÕ.¤ü´ÜÀDcM"Õsª`Ô"z•·¯Tü3”¤Èô1íìØÁËmnó¯çÙd*vš,h‡]wÕÊc÷®]VÙj3ø(ÄÓœ2„»£ìÎ&hÖš}ð±¼d1<¼?Åc‡R¡HÂ7ëRp2WâÉÔiÉIf9‘‡H#8™RxéùèÞ!‚Ç#’ðÜ;®ïERqªâN·Rp7Ý,„pˆ}™'xiêk&>Tç¿v ÿ²øóɈ癱²üL:OÛ`ÒµOD×ĶèÆMü­é?'w­9QoÈU줵?ÊAy¥%wA¬õÂúÕtüUšÍëm:"ŽNØ\YZQßI‡“'ž{)οæoÕÏ^ ”™IÇbfž7š»àÑ$õ.“'9};Ï™® Μx¤Áì÷tœ@%4†jZ¯¥üÉÂf›ibPá-¾¬ß°šsÑJšÆ'Д‘; ïÑraT×6tÔ¸ _aÄ{S9±ÙÂ3uËV®ãnâžî…VMàûGŸÃÞ‡mvƒ<%ÓÑ?¤_¹·ä¿tÑdÒÑQU…&Çô–0l8(qRaôõTJÉF¼Z/†‡6xfpÅ|”Ÿ2•þHD®l¥£ÂaQ\ôŠÇ„DÊÐ¥¯cöÝPkׯ¦"ÛМívå­HÎÜEÅ—Ö ÜýËLÝ„MIy¼–® ÚG“† ï¾ÿ1Ú3OIÏ›*‚NŽÄ¿{öG§TãÇõøìÓØüc(¾¥SC«^Œ ¬à„Á¶/6½ùóF#Š»°‹?]lÀɃqvêV|±äs´ã1–±Üˆ‹g½¾ã órÒ§]âX×3ÏÂâG^ý!fØq8¤­piRã‹zŸ T`¸l§ÿ«±ä“…H_ßÎ({©èuç2hüx|ñêB^ŶMËs±j™•3ÃhN¨³†;4†0ôæ˜Î…‹µ_•q!§1Ç›HòµÂ‚ÅóÑ9¦)Ê9)øÜtkæi>ê)§0UÇïñƒýËSºtœCrNã§v溚Ôo~ð ™µ5ÇÊf½ø±‰‹‘9*vµµÍeXeNÑšˆ™ÅMÐËu[ ÉPAZ(È”ÜâÓˆç”9P3¼ÿÂk8‚ÖOÛ6æ™÷L\GN^šqWN‹»{í9Šâ»¹²Í4å‰é„ô]k Å”×ÅgÓâN²O‹ÍÚ•Ò]ç Z hÜ´úDzӱdÎ :ô#¯1’PK0ýŸW£Õ°ëpË_ìåà)¯›DçæñÜ<ÎýóK˜üÇFè–ƒ/´¸—pA³1w%;p"¡°– “i6Õ–çÒ·aKRzpwÜ)×?j Z±ÂœÓޤÿIõ‚&IÞ¦c 9Y á"o§ÄÎæûs?AÚ¾¦oÀ´·Ö1®Ç öhm'ëï<9CºÆ¢M(¯Å[¹Ðä1òÄü üC1¡¢ÔÊ<¢—&èå4VÐ‚ŠÆˆX:;ë‚ãñÀó³q˵÷£àÖóГ¾9¶®YÛç^ƒÄ1&?g›´4©ÄÆ5ßcÙ’Ïbd^2–,Zˆ&UcК5”ß jA³øLÙ¦PB}MÌ+Á4÷æTZ}}Í…–ö\ÇùüÅrŽ'Ó¿åB.¬pµQÜXp÷Ÿ|§ … 3Q!¯h)*6ãŽ;Ÿ=6³¶*EF‡u™?Ó³Ì;‰Þå£Ú†#-}’”„|íX­Â£ÂjÓçš¡ %©Š©¢<Š~œTU’††îÔ‹yŒ"ý'S0º$&˜E›žVòâ‚,^¼Í"0tän uÀÖ9´ø¡‹ãÑtÏ͊Ͱg-] Ü æº¢ML\xÇã(½ÿÿðúóòÏ¥n¼ó!ÞH¥„‚Që>ÖN …¦‡EèÖ­N;ÿ*Þ›|6–¬ùÓ߈3Ž@Rb6â¹Çâ¯{xÍAOæñdLo¿ÝítÚ&sË4½úÀ#wþWßü/2¶3N?ê0¼6o ®¾| :Ž?/ÒñÜu?²[/Á?þ~­Iïþ¹ý±™œ€…sEÓ*ž»´*ÉApôÑÇáÊ-ðØôpÅ÷aÖ«ÿÀ¤3ÿˆì <ýĽ˜ñ„ƒŒÿÃÕ˜pÔx Œ¿\ý©cž_{3FѪ'ŽÞû/~àqì~øNÜÔ>·<úö`à=úü›ˆìÙÊ*µH#^¼£¸Kgüß3á‰{¯Åm7\U#ýÓ^ƈ½qéíO`×­Â3þƒ6ÉÐÓyÎñ¸6Ü)ʈ·ñÔ¿îÄSüõ=„!ÿýÊ ÜõØ‹øämý?'…œüœ0êMú] S?þ!®‹M³+Çk ¾Ú&±ñzõÌR¹D„Üü×êøþc§à¢?œ…XN¶+vÅâªs¦àÑé2a¿i£K„MªµaÝ[ýÑ?ÂrF åbE2}(üížÇÐ!2ÌðY¿ãÐ…ôMŒ?‰;›Ú”Å€ék)áFRK¹´zÔn<ù€m#ÁS˜1ëKŸÖ~‰§ÿy3ÿl|»Ã&âœޤ•P i7Œ‘áî®ÁÝ-Ú¡GBK“hWaÍyBчãài‡ÏÆë‹ÞÅüCh{ IÆäÜ"Á(oèsŠ¢—¨Ö‡¬^Ê8æ›þÅI 5vô~8½1oÁ½OΤœµ:ï-L£ÙxœQ MµÙ'÷*=×)m"›·Rž•6Áôw«$ð˜Í“÷ߌ?òŒþu—W]Ä™¼c‡õ5;ŸÅ¼–PÁ.Lé—UÊ5aVÂ'kÒ©oèY3XÔ•Š>< Ǩ¯fMÚ4áOäub/Oû-4ļY<¿Ì?n½ŒþnèãCòB4tÁñh1'ûò‚Ý»b±D±!-Êd*¯PDE¼ªAú>wÞ˜Á›bžÀÅ‹ßv øì‡Ã'…vqqÚ½Øö yw!Fœr)n¾äd4ªò&6L©¢Ý¢kž,È3ƒÇMâÙóõxbÆ‹8ãý=¸-©“]‹Äž»hˆë/;•Ž ßÀß®û¿óv/•µ´t´Q–V’¥9^ £Tcj³f1U±ê[𤅶iƒcèà´! îçÕ‡÷ßþw›‰ÿöà1³h.ÔY?(‚˽Z|ÿõ|Ü~ï4/]9¿ï6T„=‰ ' äÂb¶‰WYª¬«kÛH:k[YºääÑxzÖüýÚ•\é:sÿ+λ~:vÜz¸ý<àAÖã/\$п&Å  ÂÕâ©ä¨vXe!ÀÞk¾ŸúǸ˜Áry[CïA¼ã‡ÿ'0=9ĤÁV^•i~qò®œˆŠ@µ†*Påe(¨^*'?èŠYyoÙ†GpιïÞùn¼òújLDB +ËåøX¸oøz^ž»=ûqœ¾;¾#´Ëþ~o2èŽÏÞ|·<ù6b{ B\È.¬üaok¸‚÷‚@D£ø¿«Rp÷£/bÉ{^Æ¡t–6f²’¿Ã¼¨ný؜ǜ¾ÏÂñ\Ã+ËzqwTG:ü ´E.o^r*‰~È*£M|N¾è<ðì;¸øœ“Ñ¡K/`Ó:ÀQ%Í+ìÀoÚ@srI´”µêŠ7îÇ»éüyÈ¥cÒÉb.ðXù"k%'>e¾­ ¾k£…c]¡*pº<×>åtÜVJßOâ±ûï4_Í?½7×0kñÆñ…x¢e›(Œ¤¾8›úâSÿzvO4ÏRÊ•æôÒ2êQÂÉê_øRêÖR&Ÿþq¨»…‰RÒÍDzìBŽíWê×CÆN"?Wá®[ïãüãm ÕNžJKçYF]ñ³íH¿8Ö‰7·#õß‘ÅóªT\#xd¦y¤¬0›xUJ&ϺËDOç¯;&´çâï)¥µúXQ%½÷ÆÄ!¼¯{ñp×®Le„ø¡)WÕ‹¨Ôï$ÿ摊h–ß°!¯1£BÏ:· U„ RÂoûö4šî²Ÿ†rÂÝÖðO:»)¦©e2Íÿ„{~Óùñ6tÔ¶C×ìp‡® ÛRGtòhŸÍ3t„!Ũ)Ôµ‹¥‚Éöa›ªçòÌn*e†V¾›±ÿt&?—ÐdûI%ð¦×¹F"M~(¡™erJ2yGwõrQƒ»]Ñ-i6»™WßlG(OÄòxG)éRZÙ€×ûÅ£Y#zØfÉ i½›ó|jû„æê!99”ÜËÊʤc²P´a]u÷kñÒ‚›»6Iª(“!ª] °7¶­ÉÜ mÌI@¬9Z"“>Ÿßž–Mu…N8iË>Öšf«Z™ÏâÙ4ö½B^yÓ¸I3žã7Þo%‹·Ñ,2¸Q¸">!‘“å6¦®)Ä;sgŽ¡aK^¤ò£iY%«¥ŒíÛ°1)™ºGKúˆâÙøB”Òê)š| +øòè/"¿ Àxê׽лØ÷Ó3²PE¾6&¥­äÙ°Ö<ß6ÂL¾Õ0yôW²aãT° Ô$cò JØ'cyÖ¶™é¿éé4å³;Iq¬GûxŽW4¿½’7|ƒ‹¦žÅ£ =ñüÿÂÈ~ò‹PÂö²²néкu8Ï|¶DQ~i–aõ?¢uCÒ6Î\{•™–«°’™Ì(9Â1%Ÿ;’ê· ¹-KK—–ëå£AíšC«¦p¶ƒäpcY†hŒ¤¼ßÁ¾WÌ~®³ÔºñDÖÍäþžts:ÉÀ¥L¤S_iNžŒ¡<á‚hK¶2rIG/„«,€šÒÏ@)õ‰í”™êÛ%4Ÿ•c°ÈèvÌËïì#ŸÓ86êhL+Z´µçõ‰ºš-¯„ kí4¶†™±74hN¸ wå|RR’Õɨ»èšPéd!æý#äeñJÁM(â9Võ‘Æ\@(¤nN=&6º-Û¨˜2e'uò9=ïQn¦S*¦‰úgÛp34ã~†¡MS^Q'OØ¡ÔtŒJ2h;Û8wÇ-ŽÍxëJ4éÚ&‚ŽdI¨Íª ]vfç{Ç´iPÉëøØ,cGj²££ŒülM™›Aý”ãuÄxÊ׿¨wÒãu*õ-‚6mÑšr¸“Ï%¯R5äP,5áNºÆiòu†Œí)ȦLˆ`9æº`êŠÂIüYRH?6ߤs¶‰jçɶ3¶R““°WÍ6#­%st×t9ÇÝ„ Üõ/3²½t7o–¡¾¡«Ë´›+K²/œà4þ¦ÿr¦‘l—cQ·ÈÃâÉ_ 9FI×ÚÈþSŠ(¶§Æ¶Ö¡eD¤¹b8¾N¤ËfÓY×GsüíÀñ´æÿÒømçÎlа“V17–Ò”;%%•>²]áM™ÜŽ}©z|Úötó*³:°^º.™Y)÷‹ŒŸHZÒI—È&ÝÓ9Öëz´xêÒÒ÷U$ë<¶ÕfŽûT±ÌX¨« ©¶a[¶%mÒS¶ñzÅ Ž«ñ|×p)ÈÊ-d¹äëð¦]5ŽåðÚgÕò<ž@–Î"K•LÒU»õó4~epŽ’C:µhI]6ÒÈré ’5´¤KyÀ+‰›änyCc@9õÜPÎk¢ØçÚÒ Ë8fcH®ž åU1åüFê‹»èøJr]×¼å/µI<ûd~¶Ú$“zû­›¨ÃS8ä1>mÇNã×HNCÙ§E{-REQ©í$ŸfeçBÎÞd¹hŽ<ÒygZj iG4lŸ6ì :ÿ.Ÿ9š‹í¤®ÝúP^õÇ~E½D×Ó©Lñ‘æ=å<š—Î:1»C^9K"ßS&—›¾Úœã/iѲ)ËL6¸ÐćÖem±äígqýÏãÒ?ß#éäTVFܰ§Ž/+êìLö¶ƒŽŽµ§,µ‹–UF—Ú´i“ÆÓŠLÁõyóò+ý³_táTÛ÷+áºÏb¬€¢’âM>ÍÙ]2¯:\Íkt³V24ÏÆªŠøocNr%t]çÔo­FKq”°Ñ$˜A+XÖ 2%•Ó6Ž€f%Q»ë¶ Âa^1Ÿlábà2¥h'A¡ò¥lX¸\±cZÁ­¶†)ÈØ2o4Ì)î%ƒ/;‰;{%ç3æü!;™@;Þ‘À“Y®ˆ“@³pµBnëbۛ˔‚¬úŠ. ª¯VB-‰¯éØÆ|±Ë\Š©=¾³y…c€ßµ .:±ÞÄ_‚_9…¯s.¢]ñ‰V˙Ք¯"„ƒ)›4õ ÕEu|<“%ÆéžLGCõA•«T‚¯~§rUgMÐ3éäOƒª& èõyÓõõÓ/íhúZu¹®unÐÒ_e™¾eÒȔ̶—ég*ñZ‰ ÌÿZy‡ ¿‘¤óˆîwK3A÷&¡<¨3fâU•«?Ñ­ZNñÝð‚úº7P¹z8>T»«-\ŽâaÑÈL0¨Ê|ÖÕÕ#8 ¢¯”½ëì¤m¾©ÍÅwJéÊ5ø¾‰÷üå+âµÀgε±½ПW²ÈÈFâíê­ï æ›ùÅE#â¯ÉYk:{~†l2/…me%ë§s‚ †_ØFºŸ×Ê?;À;Ýtõµ;á¨Í4‘s ÊçÚCôÑ¢¯3û•œÏJ^‹C3ëz*è|š~¯þ/EFгhãÚÅ$ôþQ?¯˜rªÓ¨\Æ©ä I¢ÚÍðÓè‹NêGU´ýwúC¸éÁ™8âÌ«pû5 *Œ)N„ƒä‰sDçæÍ›ªúžø­f X#‡ÄKænl>Õ~Ž®fŒÑ7Ã,WJ•Ÿ/%ÇÔö‚ïõu•åOãxQã’› ‹‡LuÛ.ê7Væ»dÂAøÔ-çk‡©:UOÐÙ4®ˆÿÔÏ,ÿXÚ*·h :ÑÝõyÁ0ßHcÛÇejÛÏÈtÉCkñ”ÝíÔx¥qIc‘5’”Oj#Oø.ú;úì!=^´ºƒp¢ll3–k,$8âêè¯wÛ’‡vWQŽ*ú.FgáwÓ‚Áæ›ÆÖÏâêµJOèv®Íq0¶ºèBVµýXÅzAòB šg‹Ÿ5–]ŠpŒ,Sßbaâ9Ñ×É*ÑWõrcƒ‹…¿ÚÃÕAðÕe¤ÝN:›kÍölÞL¯Øo¸HfúÓ¸q´º¾’£Œw}}Ͼ¯¨«ßÚ>*\œ\W5…kµ á8Y[] ÄôjyÐCýFòÅÉ8ÕG`u>«³ˆ>Õü)ÞR#18”œQ”ÚYõ£{ˆ×ø"¾ðŠT®@_ÝcuÑœ”Ía\äЂžðmâÉ‹€žéA"\õwÓåÚFx)h§Uô3}‡kwm™P¿Ù¶åÇ 7Sg›M•òðªÞ¤¯*Ä z«Ihbòê³p0rÈʾ"ß]ú‹dd_u[Xùf1·:–©™G{S ÿqzccµ-‹—ì• ¸ú™íÛÔ‘H¨j:XT}í¡Í‡FôCß8l'-ª™ãåwrÍß–*; ¹ù‡ôC^ûÛñ¸æ\B¤.Jb`Šf FfIÇ!þ ù]®½ó)\vú‘l<ŽI¤™KÅOê»d@CÇW‚³iÓÁŸ ï92W“Áþ¡ôç†x¤Zp¼Kc^öÒ¸§ûîºou=ýiÝïºÒªálCk0´Á¥Õ*½ªá[ñ¦©©oz·ql|vj7¸ŠéJK=““ƒõæ¦#)ªŽÙ¥ð ÐCJÂQ £àhiË ‚Ë$‚«ÿýAi5p 3øYPŽ*ÞšÉHh”¦5µ2u‘p*-åΉ‡“®ÿ·kO·¿íjpqk î[ðÓ%uñî]Oçžî›Ÿ~G–i:¦ÚÁË'òX%§opO :‹($¢S—k];•SØ*¸´¦áN†‹3 øOÛ·Ä´±zf¥3J¹Ò0Îßä 2Q6Ë+c;)™ƒ_Å:UúñånŒù.áC&Ñ$À ²vvƒ Á 6׆/%”Ù‘q|#$üø¹sŒŠ7¸ŽÊâÆË%\—•Nß«ñe:Á1¦<î\›üF9°õwiÙ@\ý(ÄÀÖß– ‚ þú!˜~üÄç%šTùé§rùnÛÑî¼ó%0ˆW§õÚÚkGCéTWU˜¿µ›ì%WŒ {åÓvr×Dôç-YÑìOœ é¨õÁ}ÆÀ°ù«Ë&~\\ü¯ýÜc‚¨¼EEÂN«ÉZ1 þ¶7d•ÖÊ{î-­ûæò¸÷½=DZ‡/‡Å3‰Ëì #û-Cƒ«K¯Æ¶ÅOCZ—²¶§vý”V!§xmY~VÜ ©qpÝsóçÑà¬I¯žâI­4ë» zýDN 7GW‡“ Ø{-]Œ}úñp0ü)\œžò¬jžì;ê?ÂÙNÖ-øóé·vð7ÁQPT]EÙ½š+¥&AÐ?~¼´²|dá9ú2º<î»Ã!"ðË¥ÕÓ)Oî«‹sïzúëêòú¿»ßú&š©]{[Z.]ðSµ‘ª`o=Ä•­gc³3“цÖ~øÕyé”ÿwÿoÕÓµ»žªCmô×ʵ?Ô·¯ Çzª '«žÕpÅB{#Fuš?<–«¹—7•K³ÿÔȤ!2®Ú¢‰ŸV¦.*XŒ¾_!P¨-CÊK ÎJhÖñÉŸ,ð› kÉdëÌ]#¾Šsmâçôó@ €=¹:4Þ 1m»;b!TÑ7GN=ÙOe)v\p´¯èO‹{ûƒ“@üdp¿M]£²0SnM‚ó*éLçø·¾8ÃwõsO}Wî_î»ÿ駉ã_`|Õðg«õ·ê¡ s8xÁ‰p…gí¼î裼‚cvõ _¡¾mæ:¾¿>ʳ¯ötèÙ´<\üÞž'=(}€~ê#ÞXã:býí§z:Øu$7Ñ,Öôo—Ö=÷ž‡täqåþ#'ð/’”Ú£-ƒáéÝÕS¿fØkK‰€2g‰‹8ÝSqþä@IDAT£U1†«„Ò»8Mè]Z=õ®´úîPù\œàIYpyö¿>iEÔúÀw¸(½Ã?¾ÿ_¢®ª³Ÿ>{«kpZ?.¿-&|GK[ùéÌ z—ɨã™Äúy&8}}Úö— }]¼“——Ç»‹¸CUb΢ oÕ¹>|éÒúa̶ª×dn(sHµ™èèïã¿þ‚'ÚéO2¨MýüïøÇõÛ½ÑÇ¥õóšêÜ×?8Þ n+­(Ë,M|çÒúëêà Oí€òì½Ì¥dN¬%—§.øÁüìhêðwuuxk }tŒBO¥WœK/|~ËAõqø‹>®;úü–q¯ 7Ñ^õ¬’ É)Ç·¼^¤g`wÉîØ8<ŧ¢µxR8ê·x¥.^öóšøJ<çøßñemr!¸_ùÓúûŠƒ/?7ú“I²ú¸pryü|¬ßÊ¿7ø~ú:ø®¯8Þr}Ðá¢tj+õW•- —Öµ›+·>ðýyþ G´´2ÄŸ¶.ZŠ6j+þOd`]ð÷EñÃ?8­WW¥¯O[9úûá+Nm/¸Nó‚ÃŵI0NjCÉCý¹¶,Û©Ìÿ…}S@ú‹øOm ~!zúÛyß~ á+~’ÜS?×1ɪÓÁà •©²…‹ðR¿NŽßÝÓñ}}ú­?m]ýJpü}ÅŸÇÑ¡®~ëpÊ¥_õ+Á’,òè vmø(­òÖ–ÇÏ_uáã/·.øÂÙ%:ú c-µ¥Uœ¬/ü2YuÔÜ7Ú»­å`q±[Ш.ßO5šcÏ!5H(h SP‡UC‰æÜ »o.­{*^°•NÄU>ýVœK㞆à+m]ð…Ÿòè釯ô‚¯ü ®{úáûñ.ëÏãp|áåàûóøËsôQZWW¥uxûÓ*Þßmðý´ôÃwø?.Â=˜>ÿ |—×ßÏ uÕUø+pß[]ƒákÀ M£3(u,÷ÝÕ×½ãܶŽöµñÎþ¶­Ê †¯þ"…*''ÇàèøÞßVW‡»{*þ@ð‚+ÏOÇ î›{úq©‹×d2¤ \Áåqí*ØõåGÇ jµs:*)Nçf%4 ßÑÞñš{ 'ÕÇáïêªü _÷tuwôQ[)ƒ¯<Åž T•£—>8ν»ü¦‹wÏàx—Þ}~ºô.žj3ñ†xÖÅ»|.½Þƒ¿Õ–ÆÅ¹ô.ðÓ|瘪rõ§3ƒ.¯øA<#¥Cü-žÑ„Ø?®;¾\¿U>×Çÿ ¾âŸ9ïùyØÿ.ø®ʧ ¸jå—®!O F0|åWØ|Áqø+¿ðtyœ\p}Ñá,œÔGÕV þ<.¯ž2AU¥.Áð]Zïà ýàÀÉŸÇÑRðõ[xË@-øøñwšï‰€Îþ²üåãd`ûÚÇŸoÏßqQe+ÉõoÑØ/‡/ë©vpø ®~×Öo]Õ±®~ëd¸KëïW‚­|{ƒ/%«…·äå¾Ò«žþþ'ØÊ£rêƒò+8œƒŸÁðE_iõ.˪RñgÇø™¬zjΫ?É’ƒöê$náÂ…ôèË»k{›Ž&D…°*üÜÛ·ÚÒºJ«ëý@Áwxì/üºð Žÿ½Ãwõù-ÐGGÂL œœ®‰kãE?ÎŽþ.n_Ïý­çÞà«,)œØ:tè`’ ßý-c_8»ïû÷çä1ˆ{ÿ¸üûzîN~øúíuµ¹<õj'RVÁ•ëÿíâêzšŒÞ?u¥qñû“ÖŸÇýî’““ ÕºA÷ý?…ïà¨ÑD4}äLå(8CQ—Ö=]ÙþwÿïÚ¾»¸àgmù”FñþàøÞŹ|z:üE#9Ârø+­KçòÕW3Þž'óËþúü®­ÜúæS}´3¢¾¯‰p|||õJ~]pkw-XŸ’mÁqÁÑÜÁ¯ˆ¶òX/:ËñSmýÉåwùöõtéõÜŸ´.½ú‰nLü'8ý\D—”””ý§®zì|còøÓê·`H‰}¤‹iת6ú¸²öõôÃߟ´.ßþäÙWZ÷ÝÕÓß_Ý·à§Ã£®<®ïIù×â®ä¡œ›I!W;»>á‡s ~;Üü WôïiR&oøúÛ—lÆ©¾4ð§óÿ†·¿ï‚åxBK-J—p;ÖŠ'üuÐYhÊ» oúSŸÖ¯viÅ—{ã—WO{_ÏýMëÊØ\}ÓÄUýIãZmüœßÁ=ø÷çà²ëzßNú¦¹ÆÚµkþ6a“ܵ?ïþ½Ww!$S!ü¿ð? l ¨Ãùÿ6>û*_ýFýHÁÿÂþS@òGôÓ@¦vÿ=É!MÒÜó@á.¸¢ã±UÎþ·^ýrïß3þÁµô·ƒŸg íâxQO?nÁuø5ß]?Ø8¹öqÏ_“{+ËÑç÷(÷V¯ñÍõ=ÑJÁµ¥ãûQæ3L§ÿ;ú9zþžêìxB¸ûež«ÓÁª‹ðÒŸpÒßï%8œ…ïï‘êKg'Cê›þ@¤Ûë]º)ÉÎ)ÁAã%â ÇÂÎs¡#ˆp㺙ÜÅüï¹/ XšÙÕ¸}¥=Øßß§nÜ’GKW‡ƒ_]åKèjõÖôò¨Þë8×U—ƒ/zIþˆfzj@ý¥éçàýÒ¤Ã]í¯?WÖÞh)Ï¥ÆÉë¥wx×VŽßY•ß»y]ð„Ÿ$©;Ã\Wº=ã­—[å>ÎC«Kçêípuñz*Δ«²ù§ ºÔ–Ö|ü™ÿ¸2üp§wÜÏ_#›àªí\›èéÞNYwRŸv¬ŒïEe Áóë¾$õþY§ŸOCáäú¸pSp°ÍÓ¸hª__pyƒuÁQ¨I{˳NÙTù&ƒïŸjœ‡ÿë ¾¤æ§M¯2í½»¶Óo…Úð î;~úˆNR]~ ùÀþëúëmxO ?ãÕ¦.7ý÷÷=øéê"ÜÝŸÒØºèéÁSùš0z¯­|'ùµ' G3ÝôÛ‹òÿ‚ÃÛáëžûƒ»¥U@úé²?p”ÖÝPÍ;o88~¾qqõy '7FÖ'ýJ³Ï zuÁê$r¨ fâû¯Ô¨êUĵµó¹+Gð\YöÝIK[÷S]Í?éì:qõ‘’!íÁ]e¢.Z G…øú¬Ã¿ú»Áâ^{kRÏCW_¹õÌö‹$ó×Åÿ»¾ÀE£Ú\õm›ÚÊp´vO¥ñÿ®-Op\í8iàÜà<µ½×ÕþJ\g«ð׫`™vöyG£ÚÚÞ~ âYÓClëïÂoo¸ë{0 Å)(_pÝ‚ñ±ï5sÏÓÿÛBþeÿ5“#é ¾\ ¿ÿÑÔGrú}úiæÿý‹RO`¢™Ÿ?=Ánr·¿"Í⪼Ó×þJL·à÷ÚÊU}Ÿ;~©-­è`ôQßÈÏAÅ'Ráà‚‹sïûzã/™å+ÚdßL}sõRb½+ظ².^å¹]æ`¸~\üu2'ÿì/ÞÁôS5ƒéR¯ª‹î’‰Áçã ÇðWÝò¸¶²ümWÛ÷_3®þt®Þnß–‰V-Õ¶¥·›n+^ƒÀAø¥Zû+ì~û+Y£‘k!¨ƒ_ZôŒ"DÇE¢YS§Ò¹Ljʆ".¶5ÁªÃx˜?Í›{%l•eqƯæ»MgA9qàðp¸\u]œÿ鯫«£‹sïJoâÄlî·ÈélªêOÕÒ†=Ó»/ïº piVÒ1íÂ̇—Kí‡ãâüÏšékÒÎ¥óè™Þ¦pßßjÂ1ß…k qmÀÕÁÿßóÿ? 8žùÏjn;®©vóÌrÙ µGyþ3¸?3·'HÔÿËŠ ‘³«M›‡¡uXs#_Ô?ö§ÞJ«û]KË—ª6iÂ{²k÷À«ôüe%ż¿žWuñœk`Ï“O>yîj)¼œ²’Ÿ—‹¢’R„6kpŽÕößíÉ)@Ó–ˆ‹nˬTÈâÊ: OÑÕÜUÌssŽŽNæ4æÝá!!õ(¢AÀ-[p¼Ú]N§W9´'l‚¶mÂMö—'‚@ÿì×@¹»‘CG\UѶ½ªÐ"ü³a»Œ¶v#/'¥tt×´yK´jYw_p8©u7q¯%m⵩£ã$òo“&4{&ŽŽŠx&µa“P4õâ]ùžÞ««Ä;¤sèK¤¬b7Ïy3+/üiù­C8·HeáГ4ë„P¡Ž\ÖB(Ëõç/*$>¼Èàc4ñ×}Zœìä°¼´y»ò M›·h‰ÍB«ùO÷DWR^Hv((Ÿ&ôêûvç5H?2Ää•]¤C#ïþf›ó¿ý_Ës"S% VT50m¯ZûÛWn6ŠyOyxD„†P¿%½Üý׿ ùë£ûÎ9ƒªî‹ÁupiE—Ìí[‘™WŠN]:£Y++ÊJ“‡¦-Ѻ¥í·¼Â0uëä—5@—®â]•ëútp{{wcWÁ®\sìb9á^97~WR‹ÍI)ˆŒï€èˆV&IõˆÙ9¼Ú«)ÚF´®–1ùؚٙºñ‰]Ö¬F{Û% ÿÝ¿ýÊ‹ó±aýzäíF×=ݦ•¡‹“µÁm©|.蛃£¸¼¬t¬Û° Z´¡¯´^hÖ¸ ¹t„ZJ¥®EËVhÙ¢iõ¼*®ƒù[~îS3qÄ‘";硹ˆœ4'MêËÝl+•5I '¯Ý‚¤%4²'‰¤oUØøÝZd7Åðá ‘DˆÚˆä'¸¤½…ì‘MBŠ1Šû~Ñ×xY®½e2šyŸË¨θë=t?åo‚näšùªÃ˕히jœ‚DùM–‹¨~÷¾=ͪÓó»‰SÝ<®Îîé@¸ïîÝË|sHz ýk¤W9ŒØ–5ÁÁî2,xeJãzá‚sú3¥v©ÿùÍ`¼|=erîÚ߯”îeš¶³xÔˆ÷€ùëf¢”žx(­«f!½‡>Ë{véD³˜ “2œá÷÷Ø]µ9ð;q%ýôs¼…Š"Ì™ù"%Æ1c³ˆÿ¹òü3 ß’Ö¬À³ÿ~_¯Ù†ˆ˜Dœñ%8jô@3YÞßzg$­ÅôéÓQа% ò‹1ùäs1~hO¯oY…ÑÖÍö}uýÏç¿k pãuBØî|Ì›¿úC·‘&©c}À~Z˜›‰¹ïÍÂ[s ”  ¸èwôq'ã¸)ݺ9ªÊKðγ aß#qù©“%Iež½s²õØïwKàùo!<.†Jr¹Y)*©Ä؉'aÊá‡|\ JõàÃüìT¼þÒsxgþ—ØÝ°Ž;ý\œqâ$´nÞĘfV/„첟ûHZçg£´ sÞ˜ŽïÌEiUc>ùTœ{æIˆ g{³}k“õuõ}аª—•ŒéÏ=ƒE_®¢ç]^ /ºG±†Òšª®2ŠrR1ãÕÙè7z †’X=†,Ÿÿ6Ö•µÅéÇN@3cU‰E³§ããï2qùå—"±]M³qƒ¿áSל<$¯Á³Ï<å«¶¡¤hÚu€K.»Ãúu«ÑŸ^¥»vâí™/àëYhÞ„ç^9©Ø‘[ˆÓ/¹Gì†ófaME Κ:ÞÔ‡ËGXðÖËX´:—^z1:F Èûi‘`©÷Ÿýëê aå²Oñú³°!5Û˜Ö·nIýnŽ›: Ñ-€w_~_­ßjþpb^”Çk‰º@l¶¬ZŽN6[ÑA['›šÌçïÊC£f±¤Ý…èÖ1Ú˜øºIÒ†õo;·o*Šrðæ+Ó3p<?¬)òוã“ßÂs3Þ@VAúŸˆ‹/<]ã)w™æ`ðÁÏ£¨z°ì»2“0ýµ0ò¨ãÑ¿G<«ÁºÖÐÛœŒr¶oÀõ矄~ç܃Ë{v7Eoß¼ /=÷,>Y¾-ÛÄâÌ?\€c&"?k+Î>élÜ:ã#LÝÏ”XÍ·õ@\iÊ ²0{Ö+˜5g1't\8áXyÎE—bêÑcÑ"Ä:t²¬þî¼ùÌ}xí‡*L{à&'gû¼:ý9¼¿x9…¶Æ‰g^€“)kÂB¹È²»¯?ö7w9wüåB4¯!¿~…AÐ`xðÿqí_Qœ‡WŸz/~ô:'öÀ9\Œè¡}Œ•¬U0íýVÓÝ|Ñ»ŽhyryÛjÜçX¹yŸzJKò±~å§xí…\j€°˜î¸ð’‹1vè!hDxÁ°<¿éÇ>'èìw£(“÷§zl7¯hȧ lûaÞœ—‰¾Ã9A7™ª°á˰pk[ óMÐð¸šÈÕèF­“Ó(l×H.âUFW]–Î^®G ¢¹Û=¶­Ù‚o¾©Äq·ÄxYö„Á–¡Üس3ìÙ`ãÊ7Ï5ã*uTæ¥&L^‘ÀA*„+‚Õƒ¾Çxz÷O®kæc¿æÓ )Œ«‚WÝA݈ßýý´Ü³¾:s(‡ÞÄ–ô(.(Fi‘Ûa£Ž>‘ùË+äË:ÓØŽ×a<íÚu: e?y+ɰ…[mLåh¡z—ŽøT’ÄZ ¨Nù‡X—ÚèÑÎÒפؓîÿ‹ùöE×ÇÄ«ß~¾³ß~w<ø¦½=_YØw'гSpÿŸ§¢èпà‘Çÿ‚>{“Æœ…åaPרý\"b:`ÈàC1qû“ÓÑ»kûê:8™¢].™ßy] ñzcLËÈ8©ŠÊä÷œŽK\Q=AwœY{eI^~äVüñ¶§ðúóѯK¶­ýG<¾½cþuÓehFE'Ÿ«Ü!Ü¡0R” ©•BöÌ寥 G·ïˆcN<x†7¤ o(΄)'£eç¡8æˆÃlÕjŠyWÝ_ýi‡+2iU9>˜ñ.~j5–½úO4ÈۄᇇÐð%8ÿ˜Q”¯ž<ö ß:°um^Çç}F»¾Ã±ô£×pÊ…wcîç!¶qþ4ôT6i…ë/:Î(Bާ÷ ´F‚ñ ve#£ !.¹òÏèЮ¾œ÷*Ž=â"¬\÷vW¥Í`XSy!/üÓ_~Ͻ6ó–Y¯»n¨H]ýæätÂé'ØøÅ³_Âø.Äkó¾Dá›DCaãòïÊNG~U8®úëÙˆâÄô­§îƈËî¦٢3ó;<ܳ‚V0 ž¿-Oœ†I£ú ˆ–%Ôu¢#LQÛ~\Š‹ûà¬ãÇ›÷Of= §\ŠY‹–£}´µh³j€&&áþGʯ9¦@¾›÷æs8úô?â_OÏÀ™sTQŠ-k¾Å gŒv‹W㸡ñXüÒ•XÓçÿð·Ó& Šßåñ»'ñ­[4C\T+|„`Õòqåõ÷áé™o£+ëVZÙˆ“v«!þ§ÜâfeI.>™ÿ^~þqÌxw+–|;¥_?7kÊÊþ2|ðê4|q4îÑ‚IRΉó³÷ýKËâGEêªO1yò,øf=Æ膞ƒFã¦[þˆÓo~kßzœ B\Ô@P®.8ø‡äC9'‹ÉÛwâÄ?\ŽþÝÛãÇ¥âÔ©Gpð'LÞ›)±¾^Â{ wîÂãwÌF Ö‘#±mõ&®&W"?= kÈÅÀcÁQ“EXS‹Êfîº/ý*GŸ2íÚ„Ò„Š^Ù†Éë¶`Sf;²K€ÆHV,\Aç÷Gç˜æX·ì[¬I&?€+ÓX:ç+쎈Á˜Q]PQ˜‹¹ï¯B§ ÈMÝŽª¶ñ5¬г³°ð£ŸÐuø!èÙ¹ Ò6nÄ—+³1blvØÕhÓ«+ö‰E^ú,š¿ýÆDç¸0lùv ¾ß¸ 㦠B8 48+8!‘ôãz|ôÖ÷4W-G«ØL:}º$„aÙ»K°uWL=uWØ¢h'Wñf~…ncbPß¶˜ÿægøré´lÝ[´À¸áÐ^1\Ð.Æ’¿E1M†òR2°êû6¹/éÕ«ˆçŠe;0¨Ž9iâÛµDaVåZ®è… yu RRË0ü¸~?±/š !Œ…¿ •ønñ÷øtîz•îFlÏxL:i0b$øX/W'÷»&$Ÿ¼·?­ÞI“¼Æè3ª7Ž<ºreÑ»_㛕éÜIk‚Aûaôèî\õ¤…ÅšÍX¹2Íš7ÀK¶á?õ4`»|2{rËcÜɃ0zdWÓÞ/®,¯X¸#Ï9qÖ¤Ðáâ!þ¿Ç9‚Û;ø}ªï»òDDÆ`äøI8ó›ŸÐ” 'HfØÑf '¶Ó>ꈟž¹½âÃÑ+áB|=÷u|²ì{3A7‹”Lî¯C]8ë ”Ð­0xÄ* 0jÄpÄR™Ø]Vˆ…sç!¯² 2¶âó¯~@¯¡‡ãÔCû(N Êiš[^Å+TJ±tá||´²qo¾€Ÿ–Fàáp wšÒ¢²×~³”“ói˜ûõZ=¸‡A§GžXõykôy N:n2ÆÚ-Zµâî¯5™Ee1>|ëu$—„áôSŽEëfîê#?¯tèÞús!yõ2Œ<š n&x‡Ç¥›×¦Q¿ñô.}§¥Âsó¿qÆ1ãL¯¹†Ï>CÿŠk/;:E“X?§?ýº´¬î Óœ»Ž=áL¤•.1*‡Iu7ñå‡Ü)ìÖãþÅ? ¦µd–´÷=½ Ö<‡C{¶7÷]ù>údÆq‚Þ!ÔOÏÇéoNÂÇŸƒ‹ŽÕb%7¼Ø]Üb³T×?^»4 o+þB9Ã# =»ÄâÆE¯â»7š ºd€øT½ÐȃŠ|Ì~åiÜøÐLâÑÕäÉJÙŠ™<·Þ^…!}{ü{îKñîÂ%8z,'èaYÓnÅ´éocÌ ÞhíéÝzPÿµÿhA_›ƒ¥ù;ñÎÌWƒJ|¾ð¤o냛€4òÀ+3_ÇÖŒ<Êñž8é”ѳcŒiËâ]²Ð{Ÿ-ÿ C[bü”0yì d&}‡Çî¿a‡^ˆwÞ|CGŒÃþcqÀÑ,ËŽñW\ƒw÷FÒ¶v‚nÚ²æfâoèn†VæÎ_W]~úÆTÜ~Ù·ØUPaâ´‹¬ÿÛ%ëÑ~d"b¹jå…ÜÔt|ñq†p‡^!ŸgÖžºðKäs‡¶0¯;ÿ~ú;èªû¼íxõï+PÁUÝt÷ÞZ“'sk ¦ž=_}»Ý¼oùz5>X l(¶.]…%™øô ›q⹯ãûŸ2Ìûšß}º˜ÂVg…Ì`êuüäŸÖâÁËç"¬GGœrÑ´(ÈÄ£÷,@vántìÒ÷Ÿû6ÞŸËòIÏŸKSÔ $thkÎÖínˆ~ãºãN¦[Väá¾kærU¨ŒL×_=÷%þï„¥¨â¸Ã†·Ã{WÏÃõ'¾‹E1jR',ýÓçxûÝ >»K ñÊ™óðÊók×§zöl†[&ÍÆç_§ò;Mè¸Ë]¾ÛŠˆÕ4ÍyðÚ/Ðýð¾¬ãaÈZ±/<· …Ü`—`’ÂàÔ²ü\¼ü·ðƬT :²7ºvj•ŸmAzj.Ïúÿºõé‹V͸Hh‚mïå€=¤((T•æáÅGïÀÀ“.À >‰6Nfsæ×ÁþGLaCw’s#G—øX…Ž=ú  -»ŠŠm\ yušóÃR§¸¨;2⪋iÏÉq8w½væxq?—’¶2!<®ÉùÎô­ølá\<üø³¸å¡0 w'ŸS;ÓVV–²W4jŠ}â˜ÉG#1ªJÊlqªÕ›6¬Ä ZÍÜxí-˜ùá²êÉy5OH(T‡ÀoEËâB“s}°mË&d·È6òyC~ªÎçýà U43fÎÄûï€yŸ,ÁŽì|ï£Ý mP¯—.ÀõWߎ7>þ*09g!þÅ‚`Ðê]²ÅMn6þø ÂFŸÉ‡0ÅiâãBlB'ÄE†‘²¾iŒ/–|‚¥Ë¾Àg‹cÑÂX¼ìkìä‘´«žŸ_dLÜ'ù-pÿ?Œƒ®ŽZøèÒ³/¦N‚C»F¡Ä7ÞTP6nOÉäœ&ž6´j㇇ -3ÏDޝ ¼T¿­‡ë‹ BZ ÷¡ƒ0eÒQˆkU‰Rê™ ~ü.é1ÛúïW¢Õ‰B¿‰&þÉÏÝ>“O⦌í_hŠî‡óì9˜Xp´"Šå±­Óñùg_=U:£q¬W ¥î®]äïA“s'rv¤á«W¢SÇ8›ÙÈÊ2O6ìLI¢Ϸ`âáÃ=+0âÊñµA— è”À…/ôèu¶%§¡°0 W 3©Ÿ}Š­Ü\sÁÝFäÞÿ[Ÿn4hH/m£€(Î é«&¢u7^¿Ç —LÁúâpœvêÉ(ßò)޹øf$eIg)ÇÌ'ïÆ‰÷ÎÁøcNĈ>1˜2n0>¤…C“á Ç0M´nÅͶQcn<ÇMêf`4ÊËÇG¬ÇQ¸²Ô´zêêA‡BZMÓ ÁsŽ;ðõ¢,ñ×!঳òêdëV®ç²W•žÔ´âÿÇÞuVUdí/½÷JH ôÞAD)°!¶UWWŵ­Ýµ­õ_{w‹½+*ŠŠ]±a¤IïÒ{ïÉÿ¹o’Ëã¥B²Î@Þ½wÊ™3ßÌÜ;gæÌŒ×áapdOlú)—þÕØ³+¡AúΔ•Ä¢ §#&÷C cZêšltTgúbj{Çâ¨I}ê‡ 3ãíq_`óÜ\LàJȳ Ã3~â›±eM-yûĪbo̘=¹Y…ìøUˆMŠDÙëQÈ^\/¼C|pí»pöœ*Ÿ‚ÍéÈŽì¿\5 2èýb1Þÿ/¾ eÆ*dR νã8LË÷ÂT°¬?.Þ£GF×@ÖRõ^ö?}ýÖJôÓ£©Ä:˜xb_üã¤u˜sö8ôᪿ¨Û+ úlß;×n¡-‚r<´ý| N•½¡8¾ª9Ûwcá“ÛpçᘉIôŒ:N˜|øæZLBœª®Ó§öÃÜ›g")Òzaż"œ~õ4ŒŠlb½hví)âìY(Ó–nA0µúô´„åÙÅÔljm׸ö! ?¦í‹ÝÁXõÜwÆÕfËŒHÓ„èÖ@Õ"T^XÊ>Æ— Eåd[ 15õµœo¦‘åÛ¡_…|“íMÄÎB?ôʸúüS-÷Â<½|=j.< þÜ/àÉÙn\FŒó¸zvô´Y8îˆÞ*nóàZk FQ8Óö:Ž8±¬š8`0Š‹ ¹øÃÕüÀpÔ”`ѧóñàK_ᇵ;qÔžŒ©8$“njïšãëüÛÏ‹pdz{°zÇ ê½)†+kÕª0‡úG q¸ª²jn¨!>ÍóèÒžF8“ƒ°†]ظz Ò³jñÏ7ŽGvZ Öü²yùuŒgíwŽ§Ê‹ûWë±fùN¤ç6ÒÈÐq4“‡+w ¯œZ½h‚£?ô´d\Iµ*¿_¼ö=Jh™ÒƒoŽQ÷àlÕaÇtv­MÃÙ·r/Ú·W`P/koZi^>>zñ[|÷e.’ÇEÁ+_¾C|Øù ._Ú \ñ‹à&8qÄÒ×ßñ Áj)^‚«Ÿ7í04¹ÓÒlP(öÑÑÊ}¿ÑqÜGÆA ëÈM ùÇZNJÔ°åmͦΗä+ëN½)ƒV‹_]6!SZPŒ~W&£g‚ųԽ¯¯7ÜØ8<â‚ѧ/gȮϰ8¸ÿ²‡uk½‰cýèà‡j‰ñG#<ÜZY“rdO?–ÑŠ[ËÕ£_>Û Ï3TùouMÞ\ÿèéïQT±•PÏ´%¼IŸù=ri™¦|,¤‡ÉÕ'Óîz’äEÞs¢t*ár޲2Ð@_¯ÑzÚ˜ˆ‰jžðŠŠ‹‡Û¯82?öÁ¦Á#_¾|…0>è¬zÂ$Oxû ?³TM H½§]sëŽÏ?òîNÁß—]p–DÁËÿØ$œ×1O‡P¯Ç)‹Ø¸¨)ÉÂ+O܉;Ÿþ? í¥W=šàß‘…ö‘¶AìÅm_þá2QÝì¤~h5@Æ«‡Ð53åÎïH(µ;¬/ƒÅ‚¬‰&ÙÞF ö‡=«mYesçdû$Ì_Lã³ë—áüÏGï^Ÿá„#¸•J«;²Ð-RVNdP¬Û»É[#ûÀú­xð‘‡ðÙÓàõÇã¯g̰æ²bíDÏjãÀBCY&g^Y)ëð×)Ã1ìæÇ˜þxꡱÿÚÒë*ñ‹ÁùWÝžBkÝ<âŒSfâ¸AcñÃùg"‰[ä85ŽÍ›‚ñùYøÔØ·p.>í˜VøÙ,÷7X÷DWë¸ož”ІÄOß}ƒâŠRüûÙ×ðáâM8‰c)1yß“÷áb)ý2¬||}Õ»ƒÐ«O¶øëo·´_ñÿ#:ùÞ¨ÉûdŽ»7y¤?5ƒ¢,·³M6µKiàÍÁ:Gg”oA=Ë©'®d’F¡¹8\agÿ óVк¿zÓ¦WÓöK«¸ê[Ød¿Äò ài#²«²Šß¨`Ž+ÛùoúÆ‘#Yu­­,ÀÓ÷]‡[ß®Æê_o@7Ò¾-üb–µÜŽà~ÔÎÓƒïCjû4Ç’ö! ýÍùP ‡[a¡^(²­ª7K5µÿÕk3:Òäd½Ê]X‰?7ÑŽ š€°n˜|úe(/+æéèyÚ\ôíá°ù.ê7ôHøn\Š 9¡†m§A åÖ†Œ_dž« k;n:·/*Nøn¼ètjOIT¶¿.øâi·€.Ë‹’’îpÒ”<¹tâçV)ã‹Ý[,:œ¼à½)™;&bÕ9ê¯éÅÃxE¹<ƒ÷¼^ÑgG”A³‡|89CµŠ«¾C§âY'¶ºwÆöp[3fŽJT¹‰¯'2>½½>aá¸ø¶¨K߉מYÅÕw̺֚ ‰ŠDïÞîxû_Ë0˜«Ügœ1«>ý‘ûû–"–3ïi Ÿ‘=º!Îw5>¿½¹Z~"÷Êÿðö·xïáŸÑýÈîèÞÝè²î_ÒÜT‡¯GŸ‰½ðçk†; „ˆÕAe0Í1-ÉÌEÚî LG¶¬NÅÑG%s劳íKVã×óñà³0 9)ix`Ë'êÃG–‘<õ@Л[ä´KìÓŸ'Œ@i¹¥ú]Ïã£.¿ûZ\sÝù8¢wŽ:e"hTê4•zzºN(®Vÿ¶ŠÛ{Ð@,¿øïX»õrZï>#Ä?ù‡ê\ø6”¨I ‰ïÎ#¥¢8–ò“±›wóÂð[ÏCˆöGTh€õ~=é”yXÅ6…ü¤}6/PyPÀ‹äé)™ùMœWsñi[Z9·Y‹12ú:4oÊ&ö󦹿°/R#ËÏß*«´kÝ7]‡yp²‘Iª¨É¦z±£¿„†cë†MT]çXT97dðd“ð!ÖÚŸÃWiÀpbГڙrޤðTU’—žzßgÆ`Ǧ£W´ÕŽå{aëþм˜7­¥<"G‘jà„º´Í((iÞÖ‘—Ÿƒà˜P. 5¿ÄVˆØwñµÉGRþ?ŠÓ%•ïU·¶ÉD•8w7Odó¤¦:FP£ÚËÏNC4Ç žœÔÈٕ£u; nR»˜šInœŒqã"ŸÚz¤(±ð”Ç7î¿íz„Íx^s1‚­!‰~«˜]é§Ý-[f< i­Œ3@Vó•÷JìÞNuÊ\TýÇÏïæ¾Ä äfóüR®"‹Pºòóغ#…eü@ÕñeÞ€í›÷ ¸¸‚êÒñÜŸVq¯ew:VÁ7Ò(Ò÷|ŠÔLÙƒÀ}‘;Ò¸w¬ÃFõPÏu4ʨvõ÷sdbÙ¡Øø-A«²IQx|þOH§Ñ±˜n¡èÞ+é¯nÅc ŠïPIó Dl´þûÁ/ð ãÙ²A Ãïÿ€²Àª·[/F?7â©gé 8âõGòànxÿæåX½vºå(¢B,ûaò ªPÍ•áGÏI}ðïßfcÅõ_ãég—¨²ÕWÕpæHT4(ìòŒÖå?¬Ç§\M¯ãÇ®³Nùë‹y^#gŽèd"£„ªûÅ%r¦ªåªYé|0мCøÒر5Ç›”cÝÏ+ñô ›0dd_hÜ~Z„‚ü xò¬À#ÂðÖƒ¿bëÎ<õÎ(ÈÊÁÒ6SµŸÚExéÁ÷ñÁ *“n½â‘±`#¼·E¬Ã´­)øaÑzT¹ù!¹WÞxf Uòy&d¼¹áW$Q^ÍË9¶g]™*‹ª­®EÆ%¬ŽZÏòå¬.âþA«u­øš{Ó§&£ÕáÕ*§åo•´ëþªA_×eÿsîóðø¾7tÌd\2}#.¾é~lä{ºœç8ïÞ¶ÿwãð<æRL%ji5Ü>´ÓO>·ÜñOÌêU„a/Ɔ”,†µ¯<’×8u, elų.Ä#oü;£dV ÚîOà°°_iƒ¹}鸩Cñ¯7ÞCßåyi[ñüÃW`÷‡Y#½»l9›í7Ríâü8x>ê„qá£/#…F}Êò÷`ÞËOPuq"âαrûQ¯ltZ•ÇÚø’Gü¥gårÜ‹¯?yÏ}“Á½º+ê»·üŠÛ_mÍä3ó¢ö–ôçÌ¥lß„ÔÔ~›JÔ™Ò’ šÚt¥2ØgUŸy>xñ>œuìX|´ø7EO~ìïeÁJ=ó*%ÙþÛHè;«yã”±œ NÇÖ­[‘åØ#œ²yn½ý^¬ã8GÒ¦o[Ã~÷ Ò2sPT˜‡E¿ƒ'®ÆÀ¤x•_'4Êyl­`:ñä ðÞ³÷`Î´Ñøô§µ*\&¢-aF=šUf«_'=\}¦:‹hx· ¨¥e娵m>}þCuâŠðW‘·¿­]Ï÷Kvl߆­[¶`ûÎÝ(ãØO„squ,篋·0ãû­¯‡¦T‡7—¦²ò$¾Svò{³m;µxæ7Ï÷®äHŽ¥3y*î½ôa¬Ü–ŽŽ·>[ð:r†NErœ¥¨Þ»‡·$mænõÖ9¤ÊKK±k×nŽ=7c7ûbq O1à7§éd5 ÒôD85B7¦°ÍȺc&¶{Lüo¼Hµ¥k—âÚ›ÿCÂ#+í;éYihôŽà‘“A˜cíö8‹WÚ¥ÊIÅ—ˆ+nŸ:üÊT;Þ͉@™œ–þiU¡Õvƒ¸×9/sÇ åMÙDÆ%`òä8<ÿƇ´1UÍ-0kñØå·aʸQœÈ”hVÚÒ’<¬ÝVÎEFî—Ö®}ìêØ]úêèýœø¯ÁÒ´B5É'ê?xÞ|ðJ|½d=ýê°|ñçxàõOÐ+‰¶.º%¡¯Ç"¼üþ'(®¤L‘¾/¿ð×)H¤9}éIú±`n å$Â$ZIÌUh/ÎXzÅU`Äщ8þøþÖL$gg|½¹ÿ¬’çÊþy"¹·;„³˜¡¥µw îgí1³þžžõðk À©ä1„ËÜÁT ,lÀ³Ç o¢eÄ¢(+¯Ü¸žÖƇ¡[”’úw§ƒ*|üòj¤ì΢5æ5ظ§‰ÓÎk°:Ç×Ü>‹+ð‘r|(¾xe’¹ÏsÐxªÆoÇ7Ÿñc·1 Ùé¥è9*’Ç6 C¥Üô¬tÄÓzd­<»ÑàBNF6‚ºÇb`_K%_¬«WqV{℞ðæÞ¦oßY…TÝÏNMÇŸìÀÔ¿…9§ ¥Š¤2ù ŠÃÀ~Qè7<îÕ™øbþzê3ñýk‘S㣧$Ã˽ žü ¾‰ 9<‘6%ˆÆ¦ÖagJ–¹i¥˜~ÒH UŸ­Å&œ~[¼>#{bî•“¹¯Ýƒ“üÈsb`´ê(žo›çVŽ‘4LìGÍ ÷FìÉÏEÿ£#Ò£œgM®Ã)WNC7ªxÊÀMê]\)_þÒ>ev¶³;ᳺš*X\A ³´2„gÝ¿:;ÿ‡›?ÁIT劋‹Â>îá¸îß—Íô2-ÿ/ýr!ž|ê?ØSÅ}¥)Ûð늵ˆï3€ÖÌÃöœï/»¨¿©w¨§§¥¬äªîÅÏ?4ý¸Zuß­÷`óέxí…ç¨ô$Μ9I•,…–Ò %%%ꈮ–K¼¬ñ¿C.m~¬Ù° ýŒBϸ0¬[¹Á½GðX™$U´¬Ý›‘ÁyÅYÓ' `Ï6ìίÁ1S'ÁÏ7€«‘QxâÁ{ñÝ’•p ŒÇˆA½”À¢ò·{{‡›…”ŸÞÁC/~‚ŒÝ›ðÜã÷¢<á8¼uß `†Rõµ›×o€GTOžM=#ÆQ«(ÿ+,Xž£Ž@nk’zþe^ø窬V¾û•Õs5aÁd¿,Z€/+ãpÇõsyòqâS‡uŒjÛ±…Ý÷¥íê|Ú_.ÑÆòAj)üðæ¿ð%'®¿\85Égâú¿ž‹H®V7«a¶ÍOSÛgÔB÷§ÖxhOÒãdåÆï}¬«^:o~ñ~^ô!Ö•uÇ]7^†QÁÖˆ–“íí¡’·ðVDž‚B‚©Õ剬m¿á‚©3°ŒšZ?-Zˆënýþóú Çãx‰R·®Ä9ç_‚Ùç\ŠäŽEjJñÉü—ðÄ ÀÍ;;6/ÇŠ-9Ü7á´Ý²sà zFc⨡üθ£ÿ‘H«Ç™O|ÄUë£C{3ÒOííL5µÁß…7|ŒéG`åâ¯ñáïáÞ§^æ7~†÷ïôí+xNó_qúŸ¯d åDÊüiâ4,KÏÅ’o>Ƶ·¾gæ½™SÆð{ ìX¿e<|ÂÈ!|vÇ€¡#‘T³Ÿý s&ODt(¿mÒቢà#ïýlí=Â䘳åXÊÛƒiè1!$7Þü vQ üáëOñ‹obØœ‹qÊ SàRñØkïcçoKðÕ7ßãÝÅâ]?v,"Û ²R±#§³NšÉ4– Õžöv úòݱ‚´s9ºIÜï¯3ϺϹqUð»ÞÃcO=ƒRj¤mÛˆe«6¡÷àÁ´Q„èØxZ7ÚŒ'^ýk—}‹ùß§â¿ÜÆc+»‘¤ˆçìOííPÎLÀ³à¥ßͲêïãÐ q…£4Wño¨,Âû<åá߯|Lmláö”5)Å2hÇÏTçûX¦½Ô/ËäÞPŽ»o{ÇÏ>‰v˜”ê³o`zõÿÞ}'VoÙF­Ò0ãâàÂ3N€?µ54ôùæÓ!rø ˜1¶?)ÓIÍ\@IDAT)þ¸âM 9Æ«¼¬Œ[A©RÏ÷ÌžmðÈ•ÿ‡Þ³Ï@ ¿ƒ¾÷.žyæiî)ØCáÏÕnK›ÅJïïï…Õ‹^EMøpŒ¡$΃ïyGò̽øž'P}òö+ˆ8~.®ºð 5q ö¯“¯ß„×6Öáªóç¨ñ°¤•ö)cšâÔ•\yy¹z'‰lØ>Gí£(;é{JpìÔ‰”i¼Ŷ?¸GþïÞaÇŽ xöé7qëãÏ+KíÞÔpì;t"åûð3OÅúô½y¨ís&n¾ò/êû½yí*Tú†ÓÆÖpJ4àVæÅ¸÷í<¹f¶üúÞÿ^|å xGѾÖÐÞJöÓ}²-¾¥½Pž’ïBrrrSô–ÚWS„ƒ|íÊêKÐDÖ^€¯¿þšBuôíÛ—J•–Oõ:ª¸ñƒFE,”rfº¢Q1a\wG.?¨{Ró¹ˆìDžÝȽèÙPÓÒŠÅãªñæß#jäŒÎîF$õáˉBµ¬¤ŠV^TÆÛ*tã>ñÆÒ<4ãP— Êd}]-ò²‹á€Ðë|Äâ¼"ªŽRÕŠY/‘|*Ë+X• á`Ô õœÍÌË)¢@Oë‚4ì&ƒQs©,.ãŠp5"h ж–WWœ|ƒ)4p á«,-W´B"B¨fç¥T&80ݽ-Ù\åö&f =¹ï=ˆä÷äqÕ:±1ÃÊKõu4T— Z5ŒO¥*O6¶lÌ¢•Ê`ôè†Z®ª’®?ÕÉsÒ àÅrÉ ¿¤+ ¦BÕ@"hxFhI~J«xLZ÷(”¤îÄ£·,ÆQçCR7oÔQ•*)9†š ^´ÀÙ(®~4r•,"\j,gxÉoAaé9ÀɃ°0âR\Æõ¤ºa8U®d"Ä+Ú™i9œ°•_Dd ÷Ê7"‡þ[7dÀ*ý†$ÒÒ-÷•Sû¢´¨”–ùkI_æWÁUý „D3΀ÖRˆÍÍ)Eht6,ú/¼‘‡{_<ÑÁž´zJC^Tà àùªj°KÕ†Nìt?’•tôž={*nµ'f½S°¦qc3©©©ê=$hí`L6ÒÈc6@¤±+¶_Ž h€¦áÑÒGù±´Fû…æQ¶s¤¤¤ !!vd_fó ßN¼ÉŸ«Þi);‘šžàˆXôéÝ“*ç-OJ4¥#±´´4¥:)“©âªÊJ¸ê¯&òê90 B$ûsnv6<¸‡8Ü1“_V\ÀwF=bb¢PYRˆjèDFEQpà —ªÁ»wïæ;¾Ž§tÄsò±y’Iò–‘?½¨*/f9w#}<8,II‰¦} q¢ýR@¶FN†Ó*¯¼+¹¿,3'a´æ8YêX*-â¤vð§ #b›Ã²7xøª=øÂ÷Vs‹œè@£_Ñ4L+'ÞX…:èlk‚šùn¤§§«v.“~Ú_Ç;צ<)”æ±=qµO¾ £Ê m±ÔïIÑòØÁŬ¾{$ñT›nŽÕs¶‡‚_{šwé›òm ç©"i{\¹×þ²Bš•©Žëõåö¨:ŽƒëÙÖ»±¬~ÜëÚýG&-ë+ ñÏ«ÎDéÀóñеçXBéI?ÍJKÁ...ùG OŸÞj2W4CÙý°ñçy¼ï]Ô:ø#iÙn ¢%ÞD°ÌÉÉQïKTU”+LdéÏÒ…Ž'§c¸uC¶€ ¿Ê1L^µ‹<ƒÉ|‡”/^Abåë3È'ö`µÜü‚Ñ·ONF°že¬.JÇ¥' ÇÈ+ÞÆßÎ<†T„¦öìÙ£&£Ù7º’Ëæ{YÆ6ò¾n¯Ó8ÉX¡ ¤ |ÏúÈû@ÛÌj$¥e †“¿}’ÁyXJ ¶iغ-î´UЯ„ª‰¾FáGƒ©´]®ÚMy‰ì[/¥A±õ`½“¤üCYŸòîoŸÓmTVßeü6}út•Pû·ÊÁ‰Õª€¾hÑ×èÙ“–Ñù^ôÉr u%Õ]Àâ+¡É›+ßå4*FŒÆ€|ÔžsiµTÉ«åÇÌŸ3ØÒÐE°ËOÉÄü¶`Ì-ƒ1Ž«­5Š«©ºPÉ}ËJUíÖ‡\o û5|Q•æ—ÒT~)"#N ¢ÞN2\ñÊ£JŒÎPvV1žf}K€2#Å™±€YEò‘õ%_žŒWNQu7òçɈðTQ-¥†«ûîl,’®žª8•ŽtR/~ðeßH%ãÕòcëÁxþBŸ†àd¿5é{qàÇUàjZ{¯®£STÞáqnBÁÊÕñCVŰAq–à«/ÜçâÇ|E½½¾l|>²O…Dd¿ ª+j(@4ò “¸44×ÀYÁsפáËÞôÁ”•!ÃÄ:bVÁ6ÐÈ•n¡+ÛÅÕpr¡’is¡ï#‚9­Ó‹Ê¾ÂL𗲑_…+Ó6ÐÈÞ® Y¨æ`4±'æ#~åìÐÃHæ¹Î‘™IáŸùtU]c~ÚD@¿ õàT& õŠ_›‰Ûˆ í±¥—µÎ· ­kíÐ…˜NãL¸%ç4v] œiíõÌ÷‹¼ÃuoþZ±\ç넜¢!¯À}Ñ”ôâö £Ÿ¼§ôÞ`Áñó{ 芼ð²޲Û8ˆ÷»Ð5ßÊ`”3o‚;˳/êÎ÷}ÞD–AaGt‹óæRÕ^pª€–ü÷åÁÙG è ðùÚöç:dzÚÔÞyk¬ãêgWá®üR)„ø3o=Á¥Ó·uu¦åülOßR˜³ó³Õßô;P èvš¿×}ëûàÞ.˜2ˆ³÷ÿær¹Hp¼tA@WEÚçݳwA]á¤cè²èçCyÕy·W@Þtš–øÜ+œ¸È*ºÛ;VÞ#§`ÞK¸õd<}]¿Ÿõw-sçZœ“< Ǿün¼àD%œµÖ^u¾Z@— s­UѯÎåÑ4j¸gýæ &#¯ß¥xòŽ+Æq¿«*Ö¼ÖUã9Z‡p•7–¼ñ(⸨§ÆÐ,¸L ÝOý,Wû;BžÅ)¼åêâ;'Zbh«ùû'ß×t1õÓö;KÇÕuÝtKïRsæt•°b7blo y5juX„i1˜(†™ “N% Oþ*%p €²J,GѺœIÊ£¼¢"Ð-&r*­‰KZÇ×^â+š ªZ1¬îŠ(ǧX¹P¸ãì—WkeŸ»ä&ù5;áCfÃjÑÂ'Ÿ%^³š¡ð%Ö^)lÊŠ0ó—JÑéöᇉEPnŠG^„oñ§è“–òs”EÑp”“+_FŒ/q­{É×jˆ²Âlá`á¥Sé¤nbl…š?¡cñkÅ´ðoÆÎ“Æúª9›Ôw\?ÄôˆE7ÃX¾Ƅ֜ɯ¸½Ò6e,7¯ÚÄE$x2«ãJ vv×Wpм‘zr*Œ˜¤ GÆR6°«òH>ÌsÒ‰Þ¬ëNvÈÆ$†3?ÎHŠ[Š-Þ[X*ïN÷#åõ%áQ>rVÝYåìtÌvB†\á'l –ºÛÊÂlSÿ´(éþ+yˆ³ó.õ®Û©n-Ñ–ð½ò–>çè®ÒH\«ßY}Aç#þºÍétú}(Æßø²QýP÷my#‰ANYí–{ÝÏÅ‹@!ôsÝÇ5M}•¼š`§ãZi5_š×:Æ·hZ·r/qt<¹Œ:næ‰wŽ<„;e|”ﰫ彨ïõ åqîûú¹Ãå"Mûw¹(™GGù—¼[{ÛØ?¬¥}IKivÖ{žÅt’Vç§xZ.ø×m]òqÅý¤Û‘N£ù“òXX•ßÏÉ öz>$_‹o©ëýàÌÆAü›q¶T“…Æïé4f‚Õ·óƒÄ)ˬڄSÙí8é6ªsœ­¶ýûâ¥ós¾î/ŽmõE{ýKÜFŽ‘zÑæÁ²ï¿@6·=–qa(ˆ‹gvC¦š7w1tÅ4EÔ²½Œ[N&3U çWúÈ®\Ke‘ t;?Mim\Þ>öpé ÞÁ1¸î¡ùøeÕfÚ¹(¦€Áñ1é4%¶näÝ ®˜G Ç 8Ÿ;ÁÎå[©Þ Ö{IÞ=âtßVøGÚ¬ðªùÕ×ö²l½c Çë]hØqnjûBTú±S½ª÷ÛŒáÄ©g‰*ïp§¸ngÉs[ÎÞ^ÚŠû{‡·º‚þí·ßPÿ¾7o> }ƒ@»•qéA´pÜœ¬~ȞϮ6KÚ™°ÍÌÌT*r‰§öòr¨xUjQŸÔ{¸ÛË_g‰—OCt»ÝÂqgámù ôý(nèLNT•]Çà°3ðv¨úIKe•ö'm¯³öŸÃOK¸ufQg–¾'tãö\ne:ÚþÁþS:¼)EÌãv«Î2“oƒ¬ ‹&SWreÜÇ/ß¶ÐÐЮÄv‡y­Ä-4|9mÚ4•V÷Cý.iu½šGnmܸQ1UÉó²g‰:Zb)œ¨ºËŒ´^Ám†ýµjÏ[ûÛýZ£óG ÓX[³J] }êW:…r9SvÜâÀ²?÷¢ˆð+îPwšö )Y^¾²g^ÔwG­ø”Dgä·=e:”qô,fEEV¯^áÇ«™|:;~š÷ªª*¬Zµ C† Qû÷6ï’ž=^»v­2¤'MD½³³c$mIó/Wá_ö9öêÕKWë ü·Ô¤Ë^aéûò‘:t¨z–÷•®¯–Òþ^þkámùòåܶÖ[ T…§Ã…µð$ïr1¦·råJu¤}»Ÿ´„©ä/e~ûí7Õ¤ýNLì¼j|ÄȨ¼G† ¦&¦>v^ºÊ½´oÙ %BÄúõë¹w¹šŒ’6v¸ú^WÁÎΧà(ãÁMÞͲ½BöË7í`ã(휣8¥Í*+¦² ÚÚ;IÆ‚"CèþkçÛÕ½~ËDÃöíÛ1˜ÆùD(–ïd‡ËBÞ„[Nø ³®²U~ºƒ”QG•wκuëÔ¤ ´ÑÎòÎi± ¼¥MÈ Ò.GÑüho=´F»³„Ymê{-²¯³fË¡æsŸt;2{ Z8²‡9ßKÃSýL¤½:KÏ?]™í‰¯’¸¢#yh‰$ÎñÜDWû[¡Ö¯Äqð¡¯Mñu<.Qy/eÒWE¥Õ-ð¡éëhm=Kâìäšò¶¨Xü±ñ©¼éGX»°Öé4]{•Ù9/Gܽâèôreü¦$º@öpÇ}Sz̓ŽÛ”xßDZøEWpÒÁe@¥- vž;Ò†åc øé]gâ¯5^4ï2`ÔôÖâH˜lH¿|»š“:–AKWåßoi«ÒïåOê¿3µ]ÁZVÃïÎàe?i©¼ºÿtÆUÂ΀OK¸uVÁLêTÞ'Òλâ;±3`«q”~!¿ŽBW>[jûl×:ÌNÇmñg/ƒýÞ Ý÷×9Žý¹¥{g*O;]VýÜÚÕN߯%ç8ò¬ós•ÆÙOžíiÔƒãG‡¹ ×a:/‰ÓÚŽ,öº8§ß+Ð}çpû³–3¯ö0FûÙãj?‰c¿×iìþ­…K<;NötrßQçÌ£¤ï(};¿ö{Í‹=íç|mOç4ãÙ¿vº­…ë°öò®ãÛé·uß^ÚšŽ=}¯iH©[í¯Óد:®½ èø®Âìií÷ÎqŸíq]Ýë<]…Ùý4ÝØØXu¼¬=Ì~¿€nÏ@ÎÞüè£Ôù‡r\Œqƒ€AÀ `0 ƒ€AÀ `0´9ÝEŸÚi§)Ý.wÛ)µº=;;ÿ3gÓÚ nî ƒ€AÀ `0 ƒ€AÀ p¨cꂃƒÖb–­ è-¦2ƒ€AÀ `0 ƒ€AÀ `0TöQq·S×zòv¿Ã}¯÷"´ÄGKáÚ__uzçgí/W¦¯ö°ƒ}/y8;­öàª&OmÑj+Ü™ïö>Ûé¶tïLËÏ9¬µç¶Òµ®i»Šçìçü¬Ó¶÷êœ^žÅ9·O_]Ño-ÌU|g¿Ã^ó£ùÐWíßÚµ#q[£c ƒ€AÀ `0  £¶æZ]AwZ#d ƒ@WB ­—ãá*‹ž˜;\ù›|;†€©¯Žáebº¦·^[]Ÿ®ÊwëµqøC ®í«ƒöàÔ.½#Ùöd*ì·7^[E=XtÚÊgÂ;3oûSžC‘¦+cÖÞ;·½¸Lší¡Õž8íåýPƾÅuä½v(ù3y ƒ€AÀ `0üqhQ@廙ï?nUš’ EÀ¼ç:Š˜‰o0 ƒ€AÀ ð{"ÐâtY]Ú³g222 fá3 ]y¯‰õLOOOôë×þþþM›§«ccø7 ƒ€AÀ `8üì# ÛW”6n܈ 6 gÏž¨­­Ý‡[ìjuÑ}ÐC«ŸÚék?MÚ¦ýì<é{N—ÍžNÇ‘ôö{M¯%ÿ–âêt ×ñåª+~5?rµ—C§9«‡½i»›æüœyt•§Ž³7½cêüÄ·¥{{ {•†?–²rszWùºò³ÓU´¸k~ój-Žs\ûsK÷ÎùÛŸíi:’¯†¾w¦¥ýõµ#áWœÆHîí~mÑÒñíéů%g§­ãØóÐáf§©ãè«N+W™l¬««CJJ bcc•€n7÷ƒ€AÀ `0 ÉÀ>ºYe0`úôéãR@·Ç5÷ƒ€A ³# z}}=ª««÷ê;;߆?ƒ€AÀ `0 ?­ è²%ƒYYq’?ãZB ‘ƒ}+̾ªç»i•¸6¯“;Çjÿ³¦×Zží§¶wLM[|ú{ç¶OšÇÎÊßþ•ª#©Ú×î:Bñ9®´ÐEÅ]îÿ¸íæ¹–MÙ ƒ€AÀ `0tmZÐekÿëŠEþÅÙãÚÏÙ_EÜ¡íî®tÀÑ ùñO]I˾ßÍÍ|Xê¸vö#K)PíÆF8ö‹J‹‰¤Lò§ë¿Åˆ‡)ÀÂ\l#°6ðï0ñq8³Ý§ÝNfºPÞºMpìBe6¬ ƒ€AÀ `0t ZÐ¥ZPÓ÷]£X–ìááIcPd¹uµu¨çÊ™”ÇËË[ Ô ¢PŠäX¡–ÔÜ<<àÃí"8 }Y±“|õ²¹º?¹j"øKª~é6¯G Ôfhù®@HOøH»rk°Z€Uk]ûCÏ£È;m›>ô˜ ƒ€AÀ `0:m èv~e€Û·Â§‡‡;*J ™“‹F7/t‹C€¯êk‘•žŽ‚â ‡G :*jÅ{ßUh7ªÃŠÀ#ôôàÞŽ‡H^^îÈLÛe¿þ¿ð8Œ7 ~î (.¬¤ î _oxyû ®²ëV-Çö¬Œs’»GYª¶$è.‚}“ÀiÏaß¼…ON0Tçc岟Sã‹q£Ç >&TmC:úO(¹â½I°SáÍå–¸nîðpkDÚÖ XöÛÄ÷Š‘Cû×-¥†“ šWWüºÎ«å•x͇«t]VYˆˆ¹ò2váו¿¾Ñ˜8a4B|QÇí®øÒ´4 Óæ,í‡F‡Ú3 4á'~¢ ¡ñ>]¹¦p'*>é f®Ê¨Ë/¢µ+-€&º6 ¡#é<=ÝUý´tBú`ÂØÑ òF '¢œ¦C&Ty¤΂|S†),œˆèzhRgßrg0 ƒ€AÀ `0<þÏOajå¬Å_"Içëð÷õõUq|¼½­0 *9)¸åwàšç>Dé”çïÆm;ϼö*hü>8$ Õøùƒ‡qÏ·aûžBÒð‡?iúúø4 pÎÕª<+O??_òè o/T—ãÝkoÁ7]‹œÂ &ÄoÊMZ tçj¾U®f¾Ý(€ëp¯¦²Yô}( [Ã]÷üþ°Õ5õŠøøûûÁ‹Z Š7ÃòìNáÞž—/'DDõ_„:‹‹ÁØâÓ­täeó&®M«:h.‹§§ȲV—dáÆ›oÇ×¼òªš&uKN·V™=Hêc o û»L¢ø“n3Ïœ?Ã%|É„7ëJñNuèúAÞ“þ~Œ/eí i3ÞÔ¤h.¿´-G=¨zÒõÀöÊIÅ—£ ÚézxÚëˆ4ˆ«ð“›¾ÿ|ð!|ôãZTÕÊä‹LáÝGÚ(ÿ¤.TyI…ù;pv.CS›Ð¼4µyÖ£BÓM•[0‘6@àœ06ƒ€AÀ `0 ƒÀ СtYeë*Žë Œê°QÞ˜ >"0Özs½R£ººV­(zRø¬®®ÂžŒT®¬—Q˜ôBdT "#B K¶5UåÈÉ,BEeê¸ßÙ“SHXBC‚)\ƒÂ’—¢7>)uUÈݽ߯ÎòWâØ)c(ÌȪ$=ñR©þÞˆìÌ=ÈÏ/€w`(âb£IGV‡­ÕZ!¦^ y4i…üÜL‘¯z†ûP°áñPü"†2âÚ @} 2Òv#;/¡‘±ˆŽU|ËÄBCmÒöìFQI9Wô½ƒˆ°`bÀ© Ò¨­,Gfz*)äÊêyHx$ƒýáíë/l ÄŸ,€`•[@£ fÙƒ¬ó£…Oq‚a}MÒ³ÓQ^Q­h#„“2™!aié©(-« Ê€'Â"¢E>)£ºª¹9Ej²$8(eÅE(.­@(ãHYDÀõàDCUy12²rX~È-(E ó­!Ø©©Ňë„ekƒ'ª+J‘š•ÒŠ* å~ˆíÖ ¡¾Ä8 å•ÕÂýTÝúûx¡¸ ¥å•¬w„±¾k*òPQ]‡€À@ÔsÂ%¿ þ!ሉ†—{#J óUù|‚äç…œ¬"xù""<uÕ•Hc•–©zˆŒ‰E$ëAV«ÅNA%'\rrsÕdˆ''‚ƒƒ$Øy¡ª¢ éÔ)¯®QmOp  E¾ñÄ£#02þ>˜ÝDû¡ÙÄ9¿¨”P¸#˜|ÇDGÁ““2µ55Ì#Õõn dÝ—!¿°!ˆ‰Š$–µªŠ¤1¿*–U&$¿°Ð¸5Ö!7;•5ubô÷eÄ–¿]çÍ຅_ƒ€AÀ `0 ƒ@g@ Czg`¸mDT¡ÁZÑMâSJ| óóíãŽÚòTV[B¥#Y®(ÊÄWŸ/Ä|©UVGÌ8 —^r!ŽÚi›~Áq§_b8~'Ï:s/ü3ÆM–©åàôkðìý7ò9Ã#³pΧbÆ_®Ãµg΀—o€Š÷åGoá¹U_b]j’FMÁ-×ý GŽ@¨V ;²2)+Δö±réxç­7ðÉ÷+9O½ü>Æ$qf@¼ÒðîëOcÍâO±›2ÙØcçàº+þŠáýQš—‰EŸ¾gžx©åVò‰3ÏÆ¥ž‡1Cz#oÏ|ºð}¼úÂóHw„}Ößp×åçp¥Ôštð¦0Lý|,ýé\|íÝây¸íêK¨öõ ’^ôË ³ðõgãµ×^ƦÔB•YÔ¨ãðÒ#·£Gˆ'-|OÿûìÈ·ø;}6.<ïlL?Å;ñÌÃ÷aE†'ÆŒÁ'o½‡bF;мþí²‹1¼_Åëヌÿû†E–É^Ö*¼LÈ´ädA„óÜôøxÁÛxøé×›¢Î¹è:Ì=w6jsvâæ3/Äúø xùñ[141 ß|÷ýçM\vëC8wÖDü¸ðÜüú/8õÈAضìS¬Ï¨A÷Á“pÛMWcòØØ±êG\vå-˜ò§¹èÚˆÇÿûyé=3¬‹>˜‡ûÿù,d€ñÓçàÊË.¨A½¹c=æ¿=Ì[€\O¶¦ªF œvž¼ç„”åbÁ¯âµw>B&'”‹ŸŒ÷_¸¡5Åxÿ凑8ù¯è× kËñË·_âÅgÿƒeÓUÔ¾ÃÆEsÿ‚c'ÁÙŒ2,|éa<¿¼' O¦e_cÍ®$žŠÛ®¿ GDNÊ&¼7ÿm,xó-dÓzò2òX¼õä=HtÃ'¯=_œÿ¼ù!&èÇÉ!¶YN~´ÖæÆ `0 ƒ€AÀ `h è²ZÚUVÑ­ôPÃH_‚'«ž¨ç>êbª¤‹kàŠq£Á?|Ž›î~3/¼4 »×ýŒëo%¾xöŽËáÇUî¿ßt’’û£¦‹½y ßB\r ¤è ½*ª‚…Å`ʬ ðï ¼±?®¼âjô5¾Ü«.y‹Ë¯¨Çô9s¿ô3|ñËwø|ñ Ô!ŒSËjz=©Â¼mí*\ý×kPÀç¹Wß‚áÉÑøâ÷–™‡Ñ‰AðV2j|ŽÆì ¯À’E¯aé—ïaÙä)Ø++¾]ˆ[ï}§^r#?a"v­ý 7Üñ0ü»%">2¿~ù>î{òy`àýsBãö3gÁ·¡?.ù 5\M¯¢6Àës€Ðt\rn=R¶¬Æ%Wߪr¾ëÇà_“¿ßq/nºâÄ}¸CãüQš±%›s±-& SO9ñ«¾Çg‹¿Åw˧`X¿îXúÍÇø×‹oaÄÌóq÷éÓÑX–%+×±m³'5x"õ×ùŠ~µ$,äåQpoy‚Dbg0 ƒ€AÀ `0´@‡t-ô´Möpư idC‹ ¡Tó âjpU­Ý*©~NçÇUâŠò"¬]õ³zñ¨Á¶­[—e-ónøèä]s!’c{bärìÉÌFzên”ÖX«ËUTs®£@-F»Äå–W#2®¦L;wS@÷è…Ùgý =»Ç `Ï.ª‰‹øÌ>íœøÌë\)÷†ZÔRÝ^Е½Ð¥…Xý£µ*ýàý7à ´"Ø=êbS‹÷?XªòùûmbÖ¬¨ÌÞÔõŸáÅO¾CzFÂý×/XR†ó/º#zD"λ7>ô2ê©‚/ªã›W~¦hÜõ¥˜sìD¤¬ùN èé2iDNø#jðrµ9.Å Zv^¾{o¡¢!Z[6ס Ä*ã÷ë6áÜÙ'àøÓþŒ¼Â2<ðô<|ϘÞC§â¥»ÿŽIÝP]œŸ€p•~æÌ“qΉ±mUO¬¢€¾á“­(¹²žŽmSκ×]p¢BPU’·þû¤JHázǶ­ÈʤPM÷ËÛëQzþ4TVX[.Jò²‘’²q1‘8vÆH$D†`{~¶Š[_Zˆ])©èÕ=Ó?}£‘µq§ ›Ò3Rµë=;6«ç‹¯¿'žp<ÜÊ‘›²¿´v¥¡ìGödœ\œ{î_0kÒ üøe$ô5( *UU5*Ë-UŠŠÂ¤ìÚî 18nÖ)è!Û=Pƒ9·½£‹*Ð39Ž8×S4×=Lem~ ƒ€AÀ `0 @ Cúäs“ŠÀàÒ)¬)Ñ'|þzÕõè‹Ú²||:ÿ¿X¾q><©â^OÝêz+~a~6Õ”Á›êЗ̽1Ið¨ÃªŸáü¿ÝN­õ¡¸tÎÑÜŸn j²"/¡v²º›ÍeÏ´8>‹‘47Ù¨®œ•/÷‹±²Àî§«¡·µ“W=òG„ÌzÔÔ[¹)”ÉÞìÆÆz„†s¿3ùËÚ•/ÚÅtqJÅÜËËAþÁŠ€ä^Ï}éU\ñ——“…Muå\IöÂE\€î‡qE(ãäÀ}ØÜ£LËp^>ˆOˆ§°WIõukµýêŸ`©!PC ºš{ðëáÉ•jY¬ÖeÍ€º2:#­öCWWyÐr~wTgpKA™°¡öb‹q±zˆéNŸíÄŠÇß‘X÷C‹£jÞ4 ¢B…„⥖jð÷{s_º¿¯·Xαj.ByunÖ©Ô‹eaÜÂ[¢ÖÕՠΟ7…Þ´â¿y4˜Ëzž‹ØäAjõÛ/8ýðÞáŽÐÝ»Eó3–O481!NŒÚÉQ}b˜/BùPPU˜Xùrv÷¶‡û"í©†Bº¸ÂÜ=Ø´QxôÅ¥—^Ÿ 8ŒÄ´“ÏÄžür¼þþÇXûÃÇ*î)gá¾[/ÇØcNÁßöäãÙWÞÃÃŽ ßÁSðò½7#˜|ˆ«!o ò稳pžNàÃ6âéá˽ìŽ6Æ}ãb)¾¡ÖÂYŽ#x~"x“·ÊJxP%cʬӱ;·/Ïÿ÷þò¹ ë?ñTÜ}ãåÚ7} Ao‚¯&ëİnêÁü ƒ€AÀ `0 ûÀÿ €n I"ðŠ!f¬@kÜ4®&UMc%  ù(ÀD¼ðö¢Q0®ÞÒõ0§L;¡ÜK^Tƒ¬üRxP~Õ×o¨ðÛo¼ ³§ÀÒï>Ä˯‰®à[Ò¢W“Er­«³¹:®"!,ÄŸ‚­¨Z[ùÖÓ@›µbNœG“¯IB¬ž{ÓИÅ×w¿¬À¤QƒÑ3&©;·£Ê=qAdEफ§ /4yžœzaÑËËá,·¸þCFcöŒ£ìçI‹ó™(¨¬¥6;‚„Àf¬æqjݸ:ßXYÌ•õtôHêE‹æ 9œsÑMÜÍ/Üyî¼úa$ðFLâDDµ2Z'ò±ß ‰EZ+±fÃ:$su×ß½kV¯DU©£#» ظi;¦ŒHá8–|§ü|}üiÀŒ“JÖäžgöù×´2Ë2yS³À/rã¯Ãv–`¯(äåZ»¹ÃýiyEa:Þ|ãM”¸Ç`Îì‘I5p«f?ß@„ª4þ·yeõ&V©Û×âWŸP|ÊïÞù/Æ„?<]MÚ4PPWEC€2鱕Z ?ˆÇÈXe±ÝZ§ÀÊú«ádFu5"ã¤HH¬LF¤¡÷Ðñ8éØIÊ€\ ÛWjf©ÚP\å†ÿt fŸ{12Swàõ»nÂ’ïÞÆúYS¹ÿ>?Çœ|ò³S±àµã3n‹ømÛÙ8"Žt2y FúühTNܺ͛hÙ‚K¸"¿Iù…ú'w6«Ë‹‘@Õ¥é9iRC ŠÒÊ;ç/8éì ‘³'ï>s=¾þél?s6p«Áw/ÀwëRqÚÙç`DßDª½‹¡EØóc0 ƒ€AÀ `0лÚôz®š¦ 8i?Ñ:v­:'¼®®ŽVÂsd¹…%ð ÃÇÌ^ýÿáªäÆÕ§ _h|ÿÌs¨˜2Ïßq%bz‰ð¹ŸºùÛŪïç«ô9%eJ”Uxq+wçQr‡o-^óyí×oâþ͹á.œ6u¬2â%ñdŸ¹XîþÄ­Ï/Q+ÒêARRÀkt÷Æà‘c1û¨xÿ“Wpê¶8kXÞšÿ!®ºçYœ5± ”†úF ʲªëNz¥óŽ )ç†I3ÏÀSïþä(שÐ3þçiÍ<Oßv9Žåä·¾¹ w_7+fŸâõóñÓÖ‘Xøùãpçj½¸¿L:æÔmÇíÏÃÕO½†7)ìˆ÷×áÞ[þFfC‘·~­$@ÁÊ\% ÖrûÀcO¿ªü¦Í˜Î  £R;”ky6xXtN½ô&|sëƒøÇUáÔ³ÎET€;ž{ñ5œwííè‚·¹_¬,Ƶ·ßÏI _üßå×âÁ[®@tô;4ôÖ“+óքLJo=Å4à§%+T~7~ b£B‘±¢X=g–T2_Úß礌WÓ<öOxbÞ/x’{ó׬žþ‰QXü̳Ø>i.>ºõd|ðòxýÓ ÜtÛŸÁÙ ,ņ#NCb<÷Þò*îzf®¹éšÅ+¡p¾MåÑ?)Uiê~ÙŽZÁóAò ‘˜Ôøüõ'Q_’¿ª,,üò`Ä œTé Z`@aª…[M£ ÖZm0­¼†Û**i ï<÷îRÜpëíðª.Âײ·ÝÑ«g'ª°ä{ñáz`Ô´™Ñ/Iµs…³ºS옃€AÀ `0 ƒ€A`?ð¸‹Î9­R_¥ç®]»”P®Vhµ¿süÎõÌÕX2$«Ò5TyîÆ#°ÆL:ƒõG°¿eß:žíŽð˜^9|0÷ØÆ#&&3¦Nä^ñxåUŠbI–4öœ4m  苘n ˆ VG…EÄbÜÑÇbhÿ¾2xúôêÎ3Î+yTW(¦‰~}{#”jÅc‡@\$tï‘€¸^ýÐ?9‘+˜~ëÑ£F &"˜{Ëy\Y¦Œ‰¾É=á+¼¹¢)Â}=…» °( ફ„%zSż£'NÅÔ£Ç#JV¼»… yÔ11¤?‚ýP^^Á£á"1rÄp®b'PÅ<ÓŽ>IÝX®utYß1ã1sêÑè×»yKÂøC‘˜ØC•Í7ræüù$ ÌeÙ ùÁ÷}„è0î{.CPB7ô~$† L Ú¨â~é 2½{%1ÿnè›Ø ¡0d$fÎ9cFÅ„)C1x`uÌYLdñ9uMƒ{´7À™ Ù^ 4(À&$õÆQ㸷›êç%E…ê8¸#¦‡ÉF¡¾¼™Åþ8úøÓpü±Óhü¯’ú÷"†=àéÀ£ð¢¾u ¾ýu=ÆO ~¬ç!ÃFàÌ?ÏÅŒI㨅á…¡±#G oO Ð<¶Œb0¢bhhn"ÙÖjXE%l_cpîq“Ø.zðX·XãæÝ;w"‡û»§Ÿp®=g6SöôñUG¼e¤¦pŽS§Ë®¾£‡ôåþü2uÛqä¿OÏDDÑÎÂ౓Ñ#.†§ä£Î+'œ47]t6úôˆ¡*ÔúÄ"¾ÿŒ Î1Üã^Á=ç‘Á?|ú±†…FñøÀP¤¥ìBf^ ¦Ï< W\3ÈEc- Ã…$!¾÷@Œb‹ ãŠ='“d¿AWYA—w˜L4fff"99™ÇÍYZ]ãÝÖ¹Þ´†ƒ€AÀ `0 ƒ€«"Ï69û*ù·ß~‹JîMíÝ»7jx†r×Ä6 öbÚËa ˜ÜSÌ=¹u\M¬¤P/ÇFySåWö¢K¸yVKáFVáýü”Ñ1¥RNÔ4]MS„A7žG­Vkª)p‹‘2½'ZÃlíá¶ 6šŽŽ!«É.ªËTa¯"_²RîÍ}Ã^TU¾9O« õ³ÐP|s²ì5®#•T¹Ñ_ÒK¹D-^k±_òհln4NçÃýßlÖDRáçj>ÉË ½8áSh‹D& âÄOöeK^µÌ«šmEÎäö%†2]""œÅVÍ~uÞ:éús»l ¨­¥öÐrHxM8ØèK~rö|5Ê+*¸XìGrž½¨Â»ª áM;¡ëÁò‰Q;™¸©"ŸRO>¾¾ÊAñ2ÊŸÔ¡”Yx’tnô«åìo=v|k îzìUªËö"g©[eµ|Y5wC¥“¼­ô²g]êí«’íKêA·/ÁމêˆC5ëH°òåv Æt2´Wý ¿¾,»h.¨ÉG†Â3#+ûÒV+ùøùð,užw϶-ùZ{ógªŒ,e3Ïô–£ë¹EC ÆIÛõõóSg±‹Ÿ¥©á¨uò½/ÊB·ó:© ©_iO+W®ÄŒ3GcwRǺâ:/û†3ƒ€AÀ `0 ?mª¸ËàU;û@Vßë««8ÚO_íqõ½¾ê8-][‹·o˜%[cn-F:9ñT—Cxâ³d«æi"œˆsqBS„p¹Ê€^Žê ¤0&÷¢&o è%ûà^°â*8é54¸)Cbš–ÄIH¸‘[+„*¹±Ñ²èHÙË,¯…6+m%Q?—§f§èó±I¨d^‡U.O–˲jÕYŒ¶éò©ø,iDP•\-!¶¹ìWòª!1w ýþ\M'XÕ‹”Gº2ÁãÉUì ×ò,Âg5 —IÚ½KÂPÉ_0Lâʯìë—üƒƒCÝæ:ˆû: ßfÊ’lE¨¯§ÊI©K¡-ÆåO)“8]çroaÀòRð–ðÀÈ$ú.¡‘:ù㤠ÅaÕ$®æ•7Rå%¡¡ÚWÛ'uûÒõ@Ǭ77«dÂD‘,8‘àÏv)p¦‚¥ åt{¡¡<¿æááEãs–:¾LbÔp2Bø’èVL‹E #!à #XH~œÈô²ò£Tnϯ)=S©6G¢š ¡$ÎûÖü$La¤ÊéLIBÛç/Œªë¬µT:nkqL˜AÀ `0 ƒ€Aàp Ц€®¼úª™ÔÏúê쯟íW{\}¯¯öx®î[‹·o˜%ŒhÄIœæxbi½y0¯Âqu|ç4"èX”¬tÏNÓ>è×ùˆ°g9?ŽE^µ§Ótt~:¾~–¸J¨æžaí4}Í«3=f „&åÏDÖ„N½wþâk/›JËôÊßQFMOOûª­æCâêû½óÒõ`Ñ<ì˜h¡XÒ ~ò×\™Q`Y~*ϵ¯m®OU~GY%Øâ¯>Ï*¯®‹w?ŸšÊB®¤ÈjEÙVò'Ÿ6_Ìú ¹-A´-Ôªµ-Égïú´r¶Êd…i%¤¹¬ºöæÉJ-édÂG?5c->{çgámÅ×´ÄÏš|PluØ\gm ]ï¶¶.it¼–Ò+ÛÏ^ñþmù¹ ·‘ló¶=é%Žý¯M¢&‚AÀ `0 ƒ€Aà#Ð.]jµÕ-ÅiÉ¿5Zí k‹®ë»%È8Ów׊åæü,±ÄOþ„'×|5ç«Ã]Ñi/_®Òj?M_®vAØ™¶æ»½þ𾫸­Ñj+L‡7ó-+õÎ+ªÍøéørÕ®-ÞÚŠ·oz+?ÅW•£ºÅ#–<‰z¹XNßKðuß—†ÎÕIÐmöVw3]K´4¶Îᮞu\'6÷âµµ8®Òn?áW\[ýápóiò7 ƒ€AÀ `øã"Ц€¾eˈ‘¸"&Ç”•Ó¨”\+¸Ø—ûae±¨ûŠ“ÕQoooµoÝß߯¸~ÜË*{l½¨^,«~2X–t¢>+aB7ê¿eeeоì}÷á>]¡/j"D­Yü$¬-ú’‡ä%y¶F_«JK’W[ôe?¹ð®éËÞpá;//Oa$áB'–FÕ„G)ŸÐ>úö²Š!¸&ÖzEZ°l•ÖUÍ~Ô•¾½®Zj ûSW‚§àf¯+;ým í¥ßV[ð÷÷ãÙñª^kEeß©-Øùwn˺®¤·§-Öö~%mYÚšn B_úŒ<»j ’^ú§«¾²¿ý¶=má÷¨+g,÷ç½ ëJðã—ò>Óøþq_ÿ¦äƒ€AÀ `0  6ô°°0%´Ê Y„ àÊU„ ôŠà ÷âDh•A¯ü‰¿Ž«¯:L&q’NâÙãê|ìô%½üiúfçEÓ~$LèËŸä§yÔqœé‹Ð¡é MM£#ô%®¶tŸ––¦¬C7å¯éë²:ó¯Ëªón]F0'þmÒ?ÈuåÌ‹®Gñ×uÕ‘¶à\WmÑ×xu¤®4ö4®°”ð}éû°N­6_çÀ²µºrnkª+G[–ºÕX:ã#a§+þÛj .éÄiú©+M_ב¾j^:B_ã,XгÓÐt±ú&šIg¯WÖN_üdòL&;t~*Sóc0 ƒ€AÀ `è´) Ë`VDzj%Z9–H®2Ðmi€«Ãœ¯­•÷@âê´‡‹¾à ¹Lf^r'‚ƒðæì4¿ÎWçxòìG?»Š«ýtç«·_ãèg{ç{ÇùêOžãègWqµŸŽã|Õáö«sýlã|¯ãè«s¸ýYÇi¾¶Øîuºæ¸VÑÏ:Ü~ÕaÎW{}ïG?ëpWWÇùÚV\i»º¯»Š«ýœéêgn¿ê0ç«=ŽóýÄÕií4Eˆ U/RFã ƒ€AÀ `0  }tÔÚ¨ýÊ@V«·¶8¨•tŽ0{ú¹w5ÀÖüµ59 ùêôúj÷Ó|Ùô_óU°p=á̇à$«rJíXVøZĪ9ƒ½x´y«ÛÖ&B\ñíÊÏ™¦«gN_%Žó½øiÌíaâïÊIq:MKqtx{hZ4¬:q¦×Zúöò"4[ãÇ™ŽÎS_yRÏMýÂ28§i¸Œëðt¦§Ó8ó¦ãé«+š­…Ù㻊'í×î/÷â4:½Ž£¯Ú_®Î~ÎÏö¸®îu|ç«¶Óéõ³¾j¹ ïò.kOß´§3÷ƒ€AÀ `0 CÀ>º `e`«]K÷:|¯«-Ý^þð`ÏßN¦%‰cÓ÷úêîêYüš……=}sØÞˆ¨˪£¬Òi!¦¥tÎ4ìÏú^§ÕWí¯¯®ü]ùéø­]u:}•¸ö{çgç°–h·Ïn¿o‰žåßÜ>íñÚJßV¸Ð²Ç±ß·”Ž£¯öxM÷ìn<*O¸–v¡ÛFS¸‹Wôì~úÞùê‚Ô^er®ý4-ý¬¯ÎþÎÏOûé«NkÓ~®âè0WWßùj§­Ãtzý¬¯â¯q·ûéøæj0 ƒ€AÀ `è ì# ·È… @·ò,Ç:ɪ”, ;‡·H¤keß@IDATÏq„ìsŽrËi\‡´<ð¶V-%U[|Y4dO«•GË4›ú¤Ú_è ¥¥¥J…Vž5 ×\_WH’vælÁ]ã)ÔíG½¹¢áì§ë¡­6`O§ÓˆŸ«t:|ß°æ6gOÛàà[&oìi4{\¹wv:ž=­sól0 ƒ€AÀ `0tmÚЕ` Rk}¶oۂ² xR€'²l-Ш8$&tƒO ×j±"Hh¡Bŵ=‹¿„ë8bJßK\ŠÀ{ ûfwMte5’Š–¤’=¥<óY¢7ÅQáÖ³•ïÞášG"ò/›iʳÖ$®Š/B–ãY…;Ê&‚¥ì×wæWè×R—œ¢Ý²ÜŒ]HÍȃ; ²I]Ê_]--ø„ WÏDøûxñ˜3˸Ÿ®7×Ôu;rÔ¹jÍíNÒH}ŠSmÈQV›hn'V›n¦ÑÈxRÿÂWsz±9@Zôt—–¦¾¾‘†ûh¾,ß~ñ¯IÇì3OÇè!ýáVWƒ:Fw·µW—}Ç©Ûy¾3 ƒ€AÀ `0þwhS@—¢ÊyÏ õÕøæíçñäü/÷)ýÙ7Þ¿ÿe¼Q]G!B»œ-•=(q566ð°:xxzQÛ[pbõþë_Â=U|K–ÕÆ†ÕÕÕ[ÒãŠ@$–´==e’ÀÀ„†r “ ‘¹<½˜·:G[ iÌ—šE&‚ Ãe•V Xš„³$¼Ëþr¡)jÊÞ´®Ý$˜ñ¦‘‚¢ä)žhÈÑWÚHœ¦i®m# ø °žîرî\t݃û&ê¾yávD†s¿-£7ªcìþŸ½ë¯¢èÚozï…BMBè-ôÞ;(Š"TE±}¢‚¢bù, Ø  ¢€¢R•&ˆÔÐ! „@z#½'7¹ÙÿœÙ;7—KPQ¾ÿ™ÑÜÝræÌ;³<ûÎ93cckG"ÂÜla7Qfb\÷ø¨âŠL»}×näÇ”šÇOð8:òáúXc%Ä ñË:ÚÑÞ~ps¨ÆÎµßáù·W Û¸û±pÎ=ÈO8‚Ûî}˜JÖÇ×?~ÛÊLŒ›0 pj‚Áy8XDi@—Qwã¥'f"ȽËÞz «wœÃÄ;&aÍÊo‡aزå9¤gÇá™ISqR DËPÄÆ§aì=s0çÉtÓ°í§oñø o‘4ODáL0{ÁRÜ9¼~Û¸ O,\û šÔÉLDåzêµÏ0yx{œ>¾‹Æò2¼ýÅ7kÖ©1‡ñÙ‡ïàÛÍûY5Úô‡'gOCöaHK8›'Ï‚wX•Âéôj‘§ÿÄéxfö½hèïi²¤ëîö&êr•¨wô*RÙ …€B@! P(þQ®Š  #‘N^ÂËáÓ7çÑŸ~Ï¿oü-FõïN¤i>î{ô¼ôþ'ÛÚˈœ‡ô»“Ɔ;¹¿ؽ˜hTDg|xßt¤ÄÄËï|Šyï}#„[:§ŸØ{ ^:`౨çËç®ë =Ø}X¿Ê0hâBLr4âëg`ïº83nB›£U·‘X²tY6}‡åï?Íß|€‘#‡ Ä¿™°`r]Nñê7#éÔA|°ü;¼ùz4žZ°z\ÀüWßÁŠÅ›1qÌ0r›ÎÀ”§ñé×Ï È¥«?{+Þ} Ú·Õ= È_™'1$Ádù*\rJCuÓ@ûýÇ/Á2Lzt!ž|`FŒ¿ÑÇ÷aÕŸâ3O#²NmY¼ó2"[5Còé­,Å-ÓžGw`÷ïbãÆåØ7tFõh Wwý¬ú“1çЭGotëݹ©ç°æ"ç4Ü–~±MüñÃç‹ñé²wЫWwt 4šÈ¹/æ¿ö,:4o‚ógOÃ&¨¢ rNÓWxù™§V߉çÎÀ%ÀS,á(-Ê:²Õ½¼(›¿}_ó)³çaLßöˆÙ¿ Þü¯{á“ùÓáDËC8Ägcú‚p—M9¾ÿv®ù·ŽFÞâ=DÓüBˆ"êG! P( …€B@! øE઺Nžˆ:Ñš_ÝŒA×váäÄk@q9àïåBN¹èÖÞ˜_€'^XŒeG€ˆÞãÈbù×ó&÷ölØ;:‰ò]ºõÀàaÒÀ?AŽ;‰‚ÒròD×Õ>åvÌ6>N´í­û®á5èׂshÔÿŒ%Bî§#åØO8ñÝQ‰”)Ý“\ã“Ób±7ú8R’_á@%ªˆhó.à´ÝT×€ƒ1nì@q·}à}s0aÂØæÆaô(r86”— +;IÔÙ:ÒûÛ W»Jìÿõ¤ˆËÌÈ„±‹»"ç’¿öc"œA-#1f`Ox9Ù£ °ÍÃ'E%|‚›á~"ëåUó°jÅ¢®Ç¼E“D]aoC{ h´Ó…}{£oòÆtBAÖylÜû>2ssiŸ„ÆD€õ±øÀ¬GзSêå*DÙµäØáݶîÝ…8;üþÃoBVrVÚ 1=%!QQ‡ ‘»»—·/YÄ¢,³Xä£-îuðÊš‡Ã—,þÍCChÍ:¯]×—‡¸R[ŠŠr{D—;tÈti†@ç*A?µ>9Òò g!¯ÛÍÃ0ú¦›àkÌǹ¨pbC4ª*Ëé}ÓßES¥ê¢P( …€B@! Pü?@઺h'ñséâÞkÐhÜwË@"è:Ù¥Òˆ4T‰ÖÑúùè–I.ãI;š{ÐZrÚ.KE µ…([;ýÈ6G'G¸xP³|6š‚››­S÷·“-YÝ D~M¦{™ÁäBî@p±Ñ–Ö¥{Ô©Îdy,ÈJÅW‹ÅŠ­I¸ý¾ÙèÙ¿/­SÎÂùŒcÔ"Ñ”Ól•§gKq°!ÝØ—ÞŽ6 󧈳•â™7ÁÑ^žnpsõÇ=ϽJë™ ¡$n£ÜPN‘'¬kÿeää$GÛNÝpïÓèêm"ÈãÏ@½ªÆ ^^>´Ÿ/åÖ—/xxz™vw¯¡ 9–x@ޤ͞6tvÒ ¹ìÞ|ƒ——É!ktu¹Ù«Â™6ô¤õã^nΘòÊ"š 2 AXC5n„W>{[·íÀêoVbÓwBf>û&ìƒ/?Y‚Í›6cåWË`JÂS¯¼‡ñC:Ñ„>©ÄƒÇž>œêÑžN¤.íïàâ nM&SoÓ{ÂÒ‰Ý×ðŠ´é‡_ ÅDëë8QÉâNý( …€B@! P(ÿûè¦Æ«i‡`NzölÚ€íôéXú;S§N 6³r Ëà¹è(|°hÖªEcDýüV~¿™¬ãtD[>'œCa~¹ÿžÅáqˆ ]áíæBtC§O6DÈ+++hÝq­³å2Dšé$cÊÃä…‰1ï|ÍÁžYAV† çð„ ãÇ¡O÷Îðt5p"yzSô¶ðÎî<À2D {#?“\Ú#ŽMÐÎíž~~"9:OCD›H >½InoØeC;ˆ“P&ÿNdù”ú‰êçO  wvq~âhŒÅÒ_ m wúL<Œ6DÂËó°eý÷X¾. M[¶ò_xö]<~VxiдˆK!«û…¬tDŸ8†¨ý;E\0õ£mº&× WÓžååå´w€‘6ôy2¢yËvJ}ܧgW4 ò§½l›‘ŠÂrŒ¹õ|ûã÷X8oŽÈ¿õàœ8/L¸sÖQÚ¼Gïi;ŽžDI¥ަ #yo¸8Ó†… ‚)=‹ÊÅ ƒÆëéØXÄp‰Öpwq›Àñ£ zÓåÓDœÙ¥]o§ˆT? …€B@! P( …Àÿ<WeAg>@4E9i¢Á+Þ[ˆïÕ¶}Úü·pS—|øÔ=ˆ¢±ž~í}tmæ‰×'݉K^»§ß:´}ÅnæÀW¼×þ“nðâCD»«§–ê›y¥”ˆ#Íx§ë²Î_h/u²hrˆ;šI Fß$«´ NÄ•VVÁ£Injütb;Þ~î6¥Ø¶óH/§uðÜž²’49”›•(žó‹Ki²§ †Mšƒ»žÂ‹OÇ–Þ=°ÿ÷}"ý…icà…Ødƒß2òéÍã} H•l=ŸœpÑŒ•(©~ …€B@! P( ÿuÈ@g2=›ZÂÒ¼cÇ”ÑñVÍ›G ‚ŽŠ>zi¹Ep ‹2[Ù4TÒîêCÃàb[…ø³ñ°uõC—.QÏÛ™6ò:ŒØs)DH }ë¦ø}Ó—xfÑg¸ëÁÙhÞ0ˆÜë)jß¶<]ì‘‹£ÇÏÀ/¤ :vh ZL¤·VÖÍvq¿žˆC‡OÂÁÃݺw…;Õ}âXΦ¢]ÇNhÞ,çcOâY6K 6 ƒ“­yùÅhѱ3ÂúÓ®ÚG}6 í: MD3dœ?ƒ#ÇNÀ£AºtlûÊ<ì# ‘Á"#Ñ(Ø_ïƒèØ8ä•’[²+ë7¤ôN ôÿ¢"Z{ì#ÜîÙò)±ü_(×]¶Ó€²'džäs18—L.çdéæqFg‰“•Û7¨š7 ¢qrÉ™…#ëy‡¶(ËKÃÁ¨£È/©F˶íáa›)£oGMû~˜:v<maë膑Ñ$$†²<>xÙ…´¥¾mÒ ž˜ á3Îy¿øÓÑ8}¹…%äâ ÿ tîÚ>´áᨃHHN§cÞ*è5_„·líZ¡¦$‡Ö¥G!)5‹Žg«„§o "Z´B;ÛζœÆêjáÐÌeéÛ[¯› ¦ö¤+»/“)žH=; ðÚ_öÖ]Ú¹-âcêa}y;ÿQSÝDyw/ Ü>v{·£vØQ%\'ëgKu:ˆ5ÂtF;åãÉŒÌÌL4lØP´™ë’8 AêçŠ0Žv4&xý8‰_å¸à~ã?^«]MK ä3[•¹ËÎ>ˆátä:Â/KžG³z>¨¤cÚì(±ºšOàu馾¥±Çc•<¶¸Å$=‹qLýÍ‹ x\IF5YÜy¼ˆ4’ÁVn.Çòy,ó»ÀãŽ×ºó$“ŸLªõ±CõP.ÉozX6ëB¦úôñ%d,b -® K‚~äÈ 2DôkƒPåV( …€B@! ¸Î\ÑÅI&ØÊ+ë#ȳ‹Àq2çg²Ä¤žïEN"Ê>õšQ|8<é`FÄ›¬qàòF&3ÄËéV%‘PÇ[U™œéõ誉P1 äV‘ÞLÜXÁ¢Y†ó[¶ƒÉ˜ df)$ƒ\Û-ó0á7’r'ÈQ6ypà8®Ï6ÆãÀXpõ‰õsUð8¨©!BN}wiàxê+ê?Nå<üÇ}ÇcŽz†ŽësÁ°.ðlJk¸yC6ž”¡2ÔWÜOÔ;DŒõrÖòu¬÷1“d–ÍcTjb zÄ‘ øk"¢D"C&š$ÓõBú/Çɺ9Fä1}Y¿Ì/Ëó•×׳=##72˜X–‘÷Wº²ü+å‘éR—k-#Ë_éz­r¥>W’+Óe~ËzøÞ[™—¯z=Z‹“,Ã}ÇîrÚ`ÐÆÆδi[ãuyzß³Ù7\ÎR>ç“ÁR‡KÆ„Åø—幜e©¯eº”mg.C‰¼S½ÔAÆ“‚,XÕãjÛ!óÈ2Öòe=—»rþË¥ÕÏù-ë¬+Ï_Ñ…ås¸œ\¯çÒeÜ•®œ[ö#/G³K¸Y¶h²×®¥­²üåÊÈtËëåòÊø?›W–“r¬¯2ÝòjÇúÙ2oí½˜J¹,A«Í÷$ŽHº³3Ÿ;NÖo"ëu)k]äóUÉ· Ñæü&-å\îjÎO7—Ë#ãÿl^YNʹÜUæãëåòÈx˼ò^¦Y_eºåÕ:õ³e^yoG>ËtË«L»ÜUæåÃø]•42^] …€B@! P(7—°HIf¤rÉÉÉ A~~¾pß.))W¶³u’?vu—^}ý·#CΤžÏ2—y™°ºººŠx&°Òý›I,“Za}¶,#å³Û/Tó‡7Tÿ‘|>–MÊçvÔ%ßR':úJ~¨s\·‰ë¶Ô…Ë°Ž’€KY®‹Ûêáá . ¸¸X`ÃVôzõê‰6³LÖýjä×…%·‰±³Æ’ã‹«Ñ_by­ò¯KÆéä_n,\M_q›Y>Ë}%ÇãÊquÉç¾’òyXîO^ŠðWÆcÉãKŽ9Ö¸¯X.ëýWå[¿Wæ±Àú[È—cAwó××ѳ~uåëÙWŒ©µüâ½ý£,ß[PXX(ÞIù* …€B@! P(n.!è–Jñm—.]жm[³U˜IyµtæüL d_™¸ð4—¹–¼RÆåÊXʽR^©ï_-óGº„‡‡ ——‡ÀÀ@Aª‹?*øXêt¹¼ué/ó2æL‚8Xâo)÷Ïàc)ŸeÿQ¿þùÖz×ÕÖ+É—m•׿{¬Õ¥“ÄçZõçüÜ_\¾.¹Wjk]e¤.Üÿ—|Y_¥|–m9ÆdKܯ¤¿Ì+¯ÿ¤|©;¿«»wïÿ. ÀÔB@! P( …€BàAàŠ!bKÿ©ðÇøÐñjL4hðÇUªB@!ð¯!àååþ㉠…€B@! P(7HÐYQvŸåÀ–1i©×ë‡.ÛÙ(Úú³U1Yæ?ÖûzëÎfv·f¼Ø½˜ÝÏë"¬ÙPIŸkm·E/s=Ú"qºV­®>ÿõ×_êr%|®¥­×’WÖ_×UïwJá±h‘Áÿ§Æ„… ¿ýVï¯+ayQµü¾YDX–•í´Œ3gµ(Wgº9ãÅ7R¦ˆµÂUÏyi¤'/‘PA! P( …€B@!p£!pE‚δøz-Ϧ¡üÁmcªïÏ”·,ò¤î–ñ×óžÝuyÍ+_9XÖ/ÚfÁÊ-ŸuÊ~yÍô¼z?\>Oj°Eð&#LÄȲ_¹.–q"â/ü°^¼£ºeà#Ä ‹ÈªeúÕÞëúòÿÚ×£ µÒ¯íNèBýn¡ž˜4b)Ös^ë¸k«íoÊýR&]­®u峌÷wž ùÖ8p>çO1ªMc›ßOkùrJŒB@! P( …€Bà/!pE‚.>ŒÿRWWØò£½ /âoÞÞÞp¤ó¦-u°þ°®+MÊÒª È͡£ ¹´zˆ#¬®N›kË%ëc‹9ol&u’ñòj)•Û!ò]tX–-/)F¥Qƒ;mJgOG‡Y>S›ƒeë<òYæ±–"ñ•é2¿ùj"Jæç+ÜèÙ-é©^àª'bþ ¾Ëé(ÛpÕ(™-¬—z3\Nî•äY«z99R?­¦%Å4^ìáéî*HãåÊ\©î¿5…‘,Ì´£3mFgWÇX•ãW¶…±¬$ŠJÔÎή4YåT'¶,[[ÞÔÓû`‰ƒå½¹TGyY éH›HÒéN41æìè ’Í“„oiµvôç³æI7 P7 …€B@! P( +ôBeù®U—aÛúïðáûŸCkÐs}}Û7eÆ),ëœOæe½øžƒøÈ7¥q[®‹.¤à›åŸ`ÍÏ;ѶÛMxú‰é¨çã~QyQøoüa˯m•¤Ã’ˆT•à×-›±cïQ´ê6c† „»“¨=þDòŒèß¿;˜bÈ6š¯UeØõË:|µjv„™Ü‹‡RüþÛ.œOÏ'«b ìÜÞíÚDÀÙ­ÕÕ8s< ‡O'ÂTCä„X–Ê*;ôî7-ÂB(O NŸÀö¿">)®žþèIi=»t€« š*Ý·ùðAßžaÏlžTqv*vü~zBãzÎ8¼g¢Ïg‘ÓH"M< 0ÂC†EH=oäe&c׎8}¶´ózý†ÍЫW/xØVãÀÞßQ\c WÚãÀ‰–T*Änù†j;ô8Mƒõ~¶šÈØT–"jïnü¶ç Ê«/ÿ tíÞ á }sôâÓ i—}W±ã»f¬’Idh‡èÛ¥5é \H>ƒm»ö#¼SOD¶9Y‰1ØþÛ~TíhÃ?g8ÒŽýÕU”ÒŒ½›/:D¶GQf"œ|¡s›p}Œ’ŽéI18x2 } „Ÿ›Ê s°—úioÔ1Ðyj‚¶í;¡KdG8Wà‡¯?ÁæÝg0zÒ7b ܉HÒ–cˆ¿(pÚåÃÅ“ "¯n—/[;î8Ïí?`÷¹J<ú¢“‹1pPÒÕÆ¼!$ªË±ýÇeøvËxºùউw`HߎÈÏJÅîß~ÅÑèÓ()«AÛ.½1|p?Ò»Èã/él4vl߉³Ii€½+ºõ„½»ÂÃÙAàÀmà÷¹ÆPŒ[¶ÃÁ¿útoG3ø}ó÷Xÿë~TÚâ–;îÇØHfí¤KìmXµëfÏ~þ<œIO6¨ P( …€B@! ¸Q¸Ô´ùOkJÍ’td‹Æ“>ˆÉO¿Š·æÏEÓz^BimeÒ"I/—‘Ïz&=˜¼x<øÛ:¼ÿKÞx÷SÌš:.Žú\Äõü<ç]ÙywÙárn"»7¯Æ¢O·¢ïÀØ»â%¬Ü´KèY]’…¥/?…„ƒNÎÅÆUº–ÔDÎEÄ„1·cäÝaú7ÁÏÕ•%yøæÝÑX´òWACN~!r²³‘••‰ôÌ °±³EInæÏº¯|½¡-Û eh#ìÿñSÌ™÷_œMÎ Â\JGøàô±ßpóͰ#*šŽ«+"]³Qi¨{°î2O•Åøæƒ×ÐgÈ\¸4F»v­Q–~ý¨ÍÛÅ¢ŸCý‘i7ߌ7¿Ü„üÂ"äæ\@aiQNUØOdtò]÷`ñ—ë‘Wª£We(Gn6å# ÷郿’n7ã×CgPX‡ü¢b:Õ k—¿ßŽÅ )·‰'1~Ì(bª"|ôêòÈbø7C»VáÈ>³ý{ŒÄ©³I°uñÇè[§âáiãñà¸!Øs\—ÅzɾץÖþÊ1_÷µ6Ÿƒ,È|/ä^ü\[‚ïôFT—åbí²Åp lzjhÿ vØ(Ì<%Ïߊ±#âç=GDQ;³'‡q'w¡A<õô\D¶ éчöâ¿ÿ]†àÐvèÔ¦ ^¹u4ž_¼ÄÕ)Tbû¦UX³#í#»¢‘ŸÆ éUw MøÕÑßýlùþ 3;ÆèZÚ9 S¿QøÕÕнq‰D}ü#T2–bë_¡ÜÙ—&Jô匙 …€B@! P( µþ‹ ȲÊ"lÝ´¹MúÁÆXŽƒ†–M}Q–Ÿ…½ûö##¯õ7G×Îáᢻ²V–äãÐÁƒ8Ÿ– ¿ téÚ^nÈM=ƒu«—“5y sóà׬Yõô]è¹¾¿û3]~øóÑQ~~~µÖO1‰@Ö” úÔŒ™<#‡€GñI¼*3(éÄÞ­8nÛ Ïì+z ‰$TúÕùYôà" Ð ®¦¥ÜÜŽ*÷äwáî ýÈ¢8 ­C¼qÛëk0žêò²£c¤Œ˜úäëxjîCB¶åOaf<Ü?s^[†—æÜ%¬¡ÀXD¶‹@—ѵG7Œì7OxÚ‘«²Ea[;´@0­µ×'CªªñêG³ðÈ´1¹ôÛý›Vã½ïŸù>BëyˆÈñãÆ!þ\ê5 Åàz»Sâ`íw¿`Ê}÷£w«&‚r=$¾â~x©=/iÏJ9‡™/ÂÚ]§0¾ok=™HþäûÎBsõCXH=Œ¤ØªÂ,¤ÚŠúcïÄì;SL aC–Yº+ÌLÁo¿Á´™3‘s§Ï§¢wÛ&¨Ú3çtû ¤žÜƒï¾Ø‡)w߇žmØó€¦%J³ðy 8;9ŠgùcGîÖšÂÉÁâ±W—a×±óº'gšx3n¿÷xøêXøú×CþÃñÂÃwàB~ž£¯Ï7u´L׫»LÈ)ï%˜‰ý j÷‘à±uQz–oFÒécØ›Uöí"j·å=Œ%øüípêñ v>è‡ÇgÏFƒ5«Ñ½¥ŽWêèê‹V ÃѰA(Ç·ê:ßoŠo×¼¾/:™ÙÓîDëúž1qn¹ßŸÞOö&ÑPq·Âä›Â…\6xÜíÛ¼ ¾ƒð-áÌK^(Ž÷4ð  »´hÑo.$Åaóïéxñ‹þB†åQq–ùÔ½B@! P( …€BàFBà_'èŒÊR²¢ž9Ž”äD¬þz9ú 7{¬~s.–G;`ú¨H,™3ýŸú »nÕ…øèõÿàɱè¾áøî½'°¢Ç#ø€,–%8°& #cù§I¸ù®ûШA ¬êo¿J²ÃôÜÜ\Ô«W¯Ž:Èý[ ¢‡Æøxº!?'k¾^9³_ƒ/ñ¼²ÒR"Än‚8±LI€k*Ëa°±‡‘­²lÒ¤ ¬‹6Žp¥µ·"‰öõõ¥¶$2­±½ƒ­ÁÏARz{ UDØÉŠúÁAH&¬×ÅG"æö›9VR"bûÀÂéý°cßa"èaâx=ÍÚMâ]\ÝE-\#­ñ½… 4Rc¨„‘¼4Ò7¤~=r½ç‰‘ß‘šš‚ú^¡´»½œÜ¼ÑºNØn‹Õíáâ šäà H¡¸«ã‡›G |#º&§¦¢°¤)¹É;Qy„6o%Ò…š„óĉƒ³¨CO°ñhΞ<ˆ}9~øü­G±né3ØBd½tËú™t»z»Â^¢’|€­ý¥ûP}¼<€h¤ [ ©¤_iD}ÚOÁôsF‹¶ä¢MAbC5í)P2ƒîÙÀåääŒÈh‰|xú$âÈóÀÞž'tRÍKHÂZ´Fh£ Ñ/ƪ $&$ ÚÖM›5#OüЇŒôtÔØ¹£ASy®C'½ ¬vnE÷£iù‚>‰Àé;Ö®Àcëó¿óv„ºáñâò‚øù³WÐÀÇ•ÔЩFòZÐO}àI^ßï+H4%›úYÌé„7¢¾Ð;1¸~QgaA>ÒOãl¶=&ÞÒ“ˆ8×JX»ÂYïbýW«p~Ï*Ä—ë ¤1/§ _±lA#ô Ë=¶7¼"Ó$_°)Ú4hd6uU( …€B@! PÜ€˜>ƒÿ]ÍøãÝÅ·n'ŽdoÀï}„GlYùžÞ¥áì¦Vß#ûG¢y§7j üËÎà‘…Ë°/ö<º·¨)dq›Ð´=~6÷ŒèŒû_™Žd·Áxnæ-DŒ˜<ðZV“üuj.A&ÉfË$‘5A|lÝѦmÌÿôK´ð*ǺU;1`ú<œ<°ùÁ}É’èŠï>¿G§ ²×@ZŸ>Þ¢HÖß²|ì¥õÛÍC‡Ñ:j&çB¢ ?NÎ58qò$:5÷'km4Þÿò,~ìYø“õœ]·]ÜðÓ§ PžN“äú_U–‰-™õµæTÑé{{xÓDž<ÔßÖÍZ÷ÆæìA3&öÊ[VVj"‘€›»þóì8µUU5(/JA–]{üøÕ›hÓe0>2 ý;·ÆÈ›'£cÛ–hѲ-úôé…ÆÁ~‚¤Ú‘õ“­ýåtÕ]Ì™¼²7K d\@H3¼òù[¸yòp,í>cÈ=?4¼9zôêƒö-CaC¤‘-­,›7=«&™"hteŒMûO rÎqî{ Çߊ·>_ƒEsï›9rŸéÂ8 åñO8I¶=M:“‹ü˳oÅS}ƒf‚üë-+ËË œàÑ—?C÷)ãÑ®Ä$CÊ™Cxéåðãê¯0 ²â·½ [ò„1MQq%Lï4ëo •…4Î7lÂ軃mÄ8 Ryd^uU( …€B@! PÜHÜ]â@nÁvoÊ¥”Ä3ç±`ú-hFäœC8»y3oCjB ­O>‹{ž|m›ÕiþMZbò‚YH"k%ЅȬ3Y ˆ8p2Ò×~ÀsÌõ|V|aa!‚‚¤‹/‘ñé=|"ž³÷À®={1üÁgÑ%Üoù¸eÚã8ùë*|s°ß5 ¯Ï¹6n?àÎa]qè·˜ÿèpìú–>uYA‰S’õ]ãæB¯|½©ûñ­µ¿sÞû˜:qD“ɚɛš ž4oΟg²XVWW‘}ÔM›† êt9*iÒÂŒ é©Ó%©¢z8-Éb'}FŒãH "^®Dì³#ËI)xê-<9mí+gÐI+Y—ƒh#0g"Ts_|C'NC\üyœ?ƒ)·Ý„^w<Ž/ß~Må>:Q”ä›'4“|®Ù2p'\Ý0aÊCˆ‰ì‹˜3gDãµKîÅCÓBñkÔFšˆÅ8?‹’²‰ù ˜—žˆÞø}ß‚¤”äUâȺ¥ˆ :7'RÉã†Ê™&vøZÈzkëTëå@xÙNlÕ÷wsÔ'ì<0eæ3ˆì;§ãâq>!?v¦WFÔ±/йyµƒ'"ì1æÎ‡pö¹GÔk<~xçY ÐÂFNýbÖ›´nÛs0Â#û±R¤ŠÞc|åaæè¨/ãÈ:wÜþ VØp nÕ•N2X‡-<°î» ˜óÁC¢Ä[Mb¨°i#ûW¿':´hbj*¥9xaeÔÚØ®…ˆã1èà€¹¯~ŽSçÒhãAÞ3Âú¿ÄØ·¥‰ 4'ÏÍŽ-æà­;G‹1*'Íì]¼1þ¾§ÑoìÝøê½×ñ=íÏ0“¬èËÞœ…_l:b¾—-âisº¸Ä,d¸œÁ™Ä44%7zG±"ãCp]¦pú8ödûbF§–"†‡9w]m™S] …€B@! P(77AëDé3ÚHëƒag²292cÆ÷ôÄdùc äÅœ@æ%ÂB_å5d)e›)Û“ÿ‰À»M»»“ë·…R|ÏäÁÁÕCÆN¬Ëöo£’ÖÛwnÞ|½·Þ½=z„áÎÉwàhb2Qá®ðôöA÷aS‘DÄ‘7&«ï+ÝÊIí˜^\X¥O>‚©z kD&}ð3½{,:…“Û0áVEîÆáa­Ñ†ÖèZÿ?Xõ²=`¯r‡7 …ªbœ:´»¿W:¶ÊÎÙU¥¤¿y¢ƒ¹œ *ÜÉ**Ö_óñZ•hÙ¶5š5µ®FL(¸xú¡k¯â3L<&[zàðw› :³'{¦¤zo_‰L±ÂEœ\½[¶‹,{öÌûñôÔ¡Øðëô&‚ÎjóÔg]2çÒïÎFÁ¯ äàVÌÛ³î®úÞûœ@ŸÈæp2­çüöÒçš‹S°µu„‹mž§kÊ䜃 YŒ«á'¹·£ÝõÛFöœþíÀ?u@Slß#º\g_R”r£;Õ†–?Xô3•áñ£) 'ölÅÆÝGàêîIZñîü& zQ5†Þ4AìL_Z˜ÛþóÚ·j@wl<¼ o¾ú-ÌżgÞ@Ÿa¬Š˜a$>² $7òOþ3aä­PS}»·"ÖàOz.„-7÷Ê* ä]ÍkЩi½¶‡‹#Žìü¹v4Ñй<]]H':¦vRç•ʾÞ:Ñ‘¬ïL e8Ò£™@ІÀa’˜ b²Ð«gwÑ&dlñ.+-¡]Ú³Ð&Ð_s³,*dÙ/Æò|lY·O¾¾OÝ@g€íuÓÀHÜöÖsC¤[÷YF5áfÙ­öÎî´Öv%ÿrÆ莆þ0Ц…ÛÖ~¶´Y!á™|òöÇç ÿ€¾ð¥sÎí©ïJKhùÂÕ¯V6öç‹äÓ_¼4CŸT Ê؃@sÙŽà¦-0ØÉŸÖÔÛÓøf¬tŠ]E“Z‚ýE¶-zâŹ4ÁãÄ£ÈúâÍVâ¹RêÑ1|ú¤‘´xs»˜Ã¦Ÿ‹ÁæÃ%xw޾F^§ÖÅT•$»\–wÓ—}!ÔJŠ+[ÔYæ)¼H^!©AcñîDüÝPBή®4”J‘”” ßú!ð¥I õÉ‘Ãûh3ÁFðh€‰÷ÌÁ ñÅpp¢qc(ÀǯÍE«¡3ñØôI´DŸLáös¿Ê¾-ÉJÀ?ýŽÇ>|DL̉“„ÍEÊ©…€B@! P( …À ‰À EÐÙ;…vk×× Û¢ûÐq˜KçOìLÒ+_Ÿ†‡~ˆN-iC°*o¼ñĸõG0ÿÞ‘øíûàE®ã#úDÐUD PîPõƒÎîç’ÄXW®[«±aõ2„Œš…Î-y+ ½†MÁâ?€}Z$ÖìL¢ÕÛ’¦»³Û¢}ŸØþC&X"\úaä¢\Qæ:[Zß”ËÆÅ³æ/EJ\#´~h!’>~ЬùXóÁ3ðF*Yti-¶¡9%Žxô‰¹èÙ!O-&WâQý0–\‚ï?Egñö’5X±n'YY›õ;ö…fnA'ÚÙý­''£8-ó_]Šå?íBC/>•´Á™}5^~| JR‰õê:‚¬Üµ^ž÷0‘°<Œ=7M™Ž¾är\š—Œç¾E»¾¯F×–DüÃŒ>o¶H3÷d2ÏÄOúEè™mˆœëw´ªÏO…ò.#éµ4 aÀKç!xÄs¸yx/=ý2‘-ÊÚ_Óæ¸ä¸xþƒŸ°ëÄøúÔ’åž}ÁëöYøíð„Žê!òi\žÈ9*&8Bï p¶ü4 ãî)À}£{!.j+‹G^…3MŽðƇ·Mž£ïÀè¾`O;¡/_°½æ¾…á½ÚÙ‚÷ÒvÆJ; ©O*°ï9‘Jjº)èw4í†a-éOÆ_zå5ßN®ž0mš¦WÚ¸ÎÇŸþôüg£|o²dÚ³ýG!¼‘¾¡"“rîfïLà­ƒ /°a]-7H* U`çúÏðц“¸ej?|ùÉäÐQYyxè™gÑNiøzá}ø¥¢& h³‡·céòøeïzø‰“Dû(èÁ™&`Êé¨t/øzðÆˆºuß–u6îhÞXŒ’¼,ÄйåMš·F ›Y.ëu!-Q‡ŽÒö…pñôA»ŽänÚP”«6T %ñ¼X{ŸWPL”ÒA ›¢c‡öðñpæ9‘5eXxÿ­h4ñiÜ=¢7µ]w]¯‹s›.~ckÑá±Æ²MÂmætö:ÐË1—–sN‘øWä¥`Ƥ 3ïSLè×^à/ô«K .h cTãýמ‚¡ém˜sG?=µ¦Šö8‹Tz§kŒ´ÑyX°~¼i_h› »Ò=‹òªptñBÛÐ*¢‰°yóžXg:Ò.îL ½Ó^hÑŒÚ`F_}ôJ}úaú„H¼ôðmððfO@%uËÿ%ï ¥lذíÛ·ÿ¾™ßM®L…€B@! P( …À¿ˆÀ AйýÖÉü̬ɵui)?¼/J§rÂ5ØYû!oŽú›o¤îeeeä²›„ððpq´—Œ¯­îb]ôvÔm´lcúÙ#¸gd$ºNû£öDëV­ˆTÖ:?èõNU7&µ ˜ï„Õ‘ˆOm0⻥/áñ¯bæÄAð¤]õo?†Î•×× ×æ«½»´}µiWs'ËËëEeh’%j×flÛšÜøÉŠÊ“20ᮡIŽ*/Ü6i"BL›Ì]T–ä80#s:ÇÓƒåØ±ÎòÇyõɘ:u6¼t<[$™o4ɽ»~ÆôWwÐñf_¡k‹†â] ëûæÂ˾\€'vNîþO¼¿ Ÿ,} }ÉýÜ4qr¥jÌùª‹ðö³wá˜&øøáqhÚ´Ú4ò»GK™Š [#®ž …€B@! P(njYÞUhøW˜]K~–Ëù%Y’åy3*aA3§ë‰‰;“ÝÍV”¦gSËÑi'0ײ¥Ly~ä&q–¢­1Ðuak¦NÌÙýZ×[ßðN·RûåŠvõÃ;à½ï÷cÓÏÛqòÌ9„G˜v§í—S|Õ-¥\?ë¢ãyiŸ1Œ)§ éÞ–\„GÜ1ŽDÌ÷‹oM2˜6:c‹'¯ùær¸ ¡*žõöéý&-~,ñu^T^'Û©km>[4 k‹Q~MI“O»I¶ÀÈÆ¦MÝ?áOé<ñ 8Í>‰{Ʊ6è8YÖÇi–Y8ͬË0ýqœžWO¯×ûNÇŸê¢|b¶¥.mçrb'~c%Ξ…JìÝü"‰œ›×i~¨½a1”dÆžuby6È6…DtÃGÿíú|¦9…«—«cGZ’2ž#o…“äNÞšPÏ¡·n’Ï÷¬;×%õc‹ŸMiœ‡õFsa*Ψ§k^V NœŠÇ°ÛCûð x×óśノ `“/?—­Ç¿‚‹TA! P( …€B@!p½¸¢½iÓ¦ ½^õÿ¿’[YY‰øøx´nÝúÿU»Tcÿߨ´iÚ¶m«\Üÿ¿u¬jB@! P( ÿq®hA/..MäõÕlõc [gåÕÚÅ–0™ÆW.ÃkIë*s­y¥µízÈçF²|©g]zËze›¥þœ—×0———“;¶ŠŠŠàìì|‘Ræ•ò뺊ö±qÝŠ©×i#Ö£;ѱfüÌù$¦ÖºH¹ué/óšÄ ýXže^®ÛÖbiÍ0U#êâüÖú[–±ÆÅZþÕèt‰|c¼Y ,ËWKýùžu°ÔÿtºDþ5ŒK©¯ÇçuùÖºÔ…XCëçeYË2f]H¾g¹C%y5оW)ÿïjkm_ÉÍï.}Ç­û׬?é-ÓøjOû ðèå¶òøä89"N–‘zË«Žî!ûWæ•Ø]œ·;:)€='ôz4TÓ±ì¼c¾|G¤Ž,Ÿeò{Ê“i\ …€B@! P(  KºåG+ßïß¿!!!HOO‡ŸŸrssáëë‹‚‚AFùc×ÁAß¹Ì`0ÀÍÍ ………"ç•e|||ÀdßÅÅEYþXvttDii)¼¼¼Gç˼–òåÄXóGµ¥üœœøûû‹²ÞÞÞÉçr&É\'§]|®‹ 6·uúsYÖ‘uurr„€?þY>“ñ€€a9gŒ¸\vv6ZÑ:qn3ãúÛé•>??ßÜVn³µ|ƦªªJ`%ô'9¹ÔVK¸^Æ‚1ç~ªK>ãÃò¹>ÖŸ×È˾bù®tÔ•u_q‰%Ëç‰˾òôôòêê+nëÁúXÙWŒéÕn³Ÿy¬Y޾ç3ç­õg,¥þÜ?<d_]n,° –%äS_ñfq²¯äXú[÷ÕÕʯ»¯ÜiŒéãžåʱ,Ç¿. Vc™±´ œŸùäB@IDATû˜ûúJ}uù±ÀãÆ_Œÿké+_16øb,Hvõ¿Ü{[×X`<ù»šX6òŠŠJÓÄØÅÿîÔÕWŒÏ¾}û„ž={öäG …€B@! P(7 WtqgÒСC¼˜,–Ò²ÅW&o–ÉdË<—³~q™kÉËù¹.)÷®R§ë!ŸeÊ ås¥]’À?kA—²ù*å˶^ –²ŒõUê_–R>_khB®S¿Z]¸ß¥ü«-s¹¾²Ö›Ÿ¯%ï•t¹Þò%––õ\NÿºóJë3#yéX°”+ß·k‘ÿwâ#õ—W˾bÝY¯ºô•z_IK¹²Œe[ùÞú]±®OŽKŽçÉ>¡¢K—.bòQ–g]UP( …€B@! Pü›\bA·V†-‹˜pþÙÀVÕ« ×’÷jeZæ»^ò¥å˜­è|ÌÚõ ×K©¯YþUô™9¯,|×?Sæ*ÄÞY®¥­×’÷Ï4öŸ’½êù;å²…Ÿ­ô’äÿfõt²È2dšºEW–g]·õ3çáÀñ6¦û£:õü–¿²ïÍ}Ä9d]òjYê¯Ü³~¤\‰•”)ãÑ¥D9öô®ëÉyd;e»-eÊ4Ë8¾×‡’©­¦gëú­Ëð³ µºéÚÔêÆ9t¹zÿ;#Ë««B@! P( …€BàFBà_ûj•ìZu%’âsÅe‚$pšü« ¬‹Ò8/}ÑóG}yI!âb£w> ÝxŠò2Ú(®Ut–7ÌK"Q—Ü¿DŽܙ\g%i()ÌCVv.íüÍT¡Öòh]ÏEíakŸ©=…y”91TW–!-- eô`£U#ûB&ò‹$^¼³»µT&?&/Mi ZMµYY™(*­¨–AåYÿ¼œ,\ÈÍg&‡üœL$¥¤£šÛFÏ\׿¨^®¿¦º™()×7Íc}Ø2Ëi†òbdff¡Â@»|Ó3ƒeÆÆZo‹g™G¶Ëú™ãeœ¼êyuƒŽ½3–`Ù{/ãç½§… ^@’ùáÖC¸Ÿ›pd–"Ý’9Ÿ¥{¯±4 ‹_{N&ë²LåÅßÓ:E4`ÝÊwñ᚟)(ËMƒSnÇÆßŽ‰¬T•¹~YV^#.¹Ê WÊvÕAÈ3åN:µϾø6²Ktb(ÚÈJQÈJ8Šç^^ŒÔ äÝ@I33ËƘ¬—⥞§[Œ;n‹¤“=™«c2Ê¡´ o¿ºûcL9¹cP[F¯Ç”LÙ/5UEøöó%ø~û^=‘Þé¾ÏuIýjKÊ;½okõÑ7lºRÅ,ߜƺ0Z¢EáT\²9åSŠù™ËHÝPSŽ¿Z‚5?G‰qÁi )Ç!/= Ÿ˜‡¤¼RÔTæâ[»OžiZ /—‘ry¼ˆhÄü/¿»Åå,ƒkÖÇ’L¯ë=a9ðUNÄpÙÃ;WãÍÏ7ˆI-VŒÕƒV‰Mß|„/7ìfUEÐßÓƒº( …€B@! P(nþ‚ÎüˆCnZ,ž˜ö>fÍ{Ÿ¼¿­Ãê ¿l•¦­æM„“îÅ·žA¬Çæµ­NîÙ†GóðÙÚñìÌ;áP–‰ßGŸ7cÆôû`Ÿ¹]îxqid¾ŽA®Ùç*J‹²—Q'G]G39¢GA‚ˆX_Ôj›ŸMvGl^M„"+·ŒêÏ¢`$OƒÑgPcK«ÈŠ™xö*«E’ø‘²Åú_’céêËiüÌiL½¦ôÌÁžü“Î z¥xfFÃùY?&3:ù9Q–W„²¢r0ÍjÑ3¦ŒÀ¸Y/á|6_½ ç´R·K®u¢ÅžDF‰J"%ô0‘1‹ìæ[–Iþؽå' °‚ýÝD¯56 š.©ÆÎCg`¨Ò§é­×ÅèxÔÖ)õ”•XâÅq"½NdÿÑ ;G„¶h /7ӿЦ¾ÖõÕ%ëõðX5éZÙØØ!¸Q3ùzë8PYëþä²µå¸<é¯é}+¥ñUèÎR(?ß›=‹Úlª±eÍbüô[Œ9‰ó^Ë1¯¯¨AfÚiWÔ>^_®[}œþú”WVÁÖÞ Íš·„»‹Íç¼³h=ð˜ÔïJ‹s“šOÇ.êúé¸ð8¼ü{Ây䄃e»ªÊ p2)Ç„^AAF"¾]¶Í›‡‹eüè{7˜TQ…€B@! P( …À ‚À%kЯ·^üqÌóUe…ØøýjÄUz"!ö8ìªÊ0h@Od&býúHÈÈCpãæ6b(ú›tuE1öì܆½‡£aëäÞƒ†¡WÇÈ'¢ÿÙï¡iƒÞˆÚ÷; "Ñ¢S?¼Ð¾·8ë›ÛÔª±?Ö7l‹¸sÏ!¢`EÂNh& ½åLfåñj,ÍÙÍÚlÝ´IqÇPj€›ÆA‹&ÁD>lP]Q‚ý»wàÀÑXhDfZ´ï‚áƒz¡(1oÌ} _î9ƒFþ¦]ôÝÝЭgœ]èllÍ€MÚàü飸©<QÇÏ C¯: 7<éLzr>¼[݃’*´ëÒ ƒúõ€›â)äg%áçÍ›‘”CgeÛ–":ËÓ}Ü‘‹½Ç0`ÈøºégÛ§ÄÀ¡3Y:¬?CPª¹›ül1ò¶©xxó÷X¿u¹cˆ> @¬‘ÛÆAŸ„¸2À2Ÿ,'Ë2¶$¦b€e`†Jue&`Ó–(<ðú,8‹ê4$ž>† ›·¢ÚÞ å™§P¯~C8Øëºe§bÛ–-ˆ>— ïz0dØ0½Ohb$úÈ!¤æ–¡¦¢‡Gƒ–‘Ø«2ΞÀö]ûáØ#FŽù eùؾõ;•@gÛÂÃ?ƒ‡ Ehƒzv…¯‡7Õ©Ÿež{§“ráh[c‡£ ¹côØÑ¦± “kl´vÝ >žþ08Ò™òÔÖò‚lüº} NƧQvB«Ž]1 o¸R:vb8 B[˜†_¨oÏ$¦ÃÍ'CFŒ@Û0žøÒò0µa7òK*áîS#GEMAv¬û]‚ð±14®†õÄ™¨íز÷„ØìÍÑÕýDÇVÍq÷ lŠó©§ñÃwyˆ‰‰EýˆHŒ1ž®¤ƒ-šÒ8d ;øyùÁÁDîóÒ±eë$eæÓYóÎèÒoúunW7oxÛœÇöŸ7!åì1ÁW¼'­š5cI¼÷¿nÁÞ#1ôž¸ {¿ÁèÓµhÂA«*ÇÁ=;ñë¾cðôòÀé¿!¢ù$Ó,CÌ‘ý@ëÑèÙ©¥9ì`9®äpRW…€B@! P( …À¿€…IíŸQ…I&F^ÀŒøpå&‘VY†7æMÇÜÏw¢~ý4IPŠã‡÷ñs€­± ·Œ…}'SäμaåÛølÛ1"Tè<`(õíd"èd}wÄØ›ïÂÏÛEw1LSÓMÄÑI±Xþù§øü‹eøòËX¾|9¾¢ëG~ˆ_vBA!¬¡ä!{ì ~Ù²iÙ"ŽITVR<Žžˆ†¹8U!±W"ƒbh2"§^´mÞX<'Ÿ>ˆ»ºv¾óEôGav:ö¤Š1C!–¼8/¬ÜƒÖí; 'zzOšƒØ´B*kب >t0¶FÅÁÏß _.zƒ†M ÏŒ_áT»>¿OþwDË.ž Ñ®}[œßÿ}á=ä6Æ |þÐHœLÎ:¥ÅÀHšlZ¾n7<‚°å4<úò§È)6Pºh™¹m´ ;WBc;Žíâøiùb¼¶rš·l‡·¬ùî;d– ¹ü#]¼KsS±ä¥ÿ`Ë©,ô4.¥ñ¸÷Ñç‘]ŠlZ"ñÄô»môB‡68{höŸ8…rÂß‘æbªhÍ{yY)ªèÔ£¡©çãaCļ}ûvÐòbpßœyˆI+"ÒíTàçƱø øû{bꤱX²bÐÇžˆy~R'z'i Ëò'o!lií·¡¿ú6NGÛ¶í`Wš†Ÿ~Ù†£7g¬ýâ¬Þ´Žôžœ\·<»Šy¹B5¥-Æ‹o@»®}к‘fßq¶Ð-þ»7}îF¢ÚÙÞd©O<õ3y–ÍãÐXžÛ¶¢ß „>AÅw9Ž„ÒêG! P( …€B@!p£ @ªr5?oݺU;}ú´x¶Œ7gø“7ÕF½Ž³Që´Þãfj ™¥BÒö5ïjhy‹F.Óâ9?5FëEœlí®ãZÁ…x­+ݳõ°©ÖJí“ÐÆ=üºVN:ÿôÑkÚ£‹Þ× ¦T:êL£MºÄSyAš6c˜¿vûkE¦ g{¤¬ŠŠ -%9Y«6êJìúé­ÛM³´óéE""6jÑÌ6Z\f‘–sþ(³xí§Ý§ôÌFƒ–•uA+/Í×V}´@ûÏ[ßhºöšFëšõ<¦ßªâLí¹‡Fk‹>Ù`Ž_óÞsZ÷»çkéÙ™ÚkܬÍym¹¹ü¾_P]C´äÜ"íøoßÑ};íDÂQ¶2çœvÇè>Ú¦½ñôlÔ?y›vëKDZ^Ò1-ÒËNÛ´/Ö\¸!¼¥JçïÐŽ»_;›^,’ªzãå0JOŒÑV|ñ¹öŲåÚW_}©­X±Bûš®Ÿ|ü±öËî(­¼Z½ï—UÚ°!C´['Þ¤õó€œ+~]ù¾6e΋š>BHC“`š Ñ Vj gNÔÞY¹EÖʵ_zP4õy-§LÏsîðf-rÈ=Zò…RíÜ‘Ÿ©ýÚáø,‘Ÿ&,´C´—¿Ø,ž×~ü¬6~Æ"-—˜#‡ŸW¼¢¡óí\z¡xŽÙ¿^ƒ×`íLJžx.-.Ò2ÒRµsñqÚw_,!ÙaÚ™ ÅZuYžö`ï¦ÚÚ='E¾]?¼§u7Ûj,t¦~Ðõà1DË#D^ÍX®½3÷^méê_´Ò’ÓÛ¯+ iJÏÎÊÐÎÅk»6­Ôœ¨ìƽç(¹J[üümÎËË´r“ ¿ýðÉ %UkyÉ1ÚÐ&-µãi„õÍôÞ͵ÍQ±ZnêYQÿg÷™ª¨ÖŠŠô÷|ÿÏ_híGLÓΦ䋴³G·RÞ&¹½k)§´T÷Ê_ök•UF­¼0[{mÖmÖëË´¬ ©Úƒƒ´×Wl’jk–¿¤Ýùä{íû BâÉßµ}ÇjGÏëã]¾«ëׯגé]å ãăúQ( …€B@! Pü‹üã.î–ìbN”D·¶QBö…$Ìž2ŽÜºõuÄÞAM0îñé(,ÌE~~)oº#BM"ѱÇlüêw”Uñ¹ã´æ˜×àš+°…=¹4—eâõ'ï‡Õc÷ðÝð`pªÓÒÚ\ä/ÞTWW“'@.¹S‡ÐZWra'«dxX3øzÉž>ÁÒÉd-Î&Kù°‘w£ ¹ès Çr! »JZç]€€_Ó1fÄUL–þZ½kh¸3BꉲüÓ®S$‚Bnz j\1¸G²ë¡iËΘ0t#ò GÞ±ýþg¦¡y#®‹° k¢+­“6ÐnÛ䆀Ác&á‘ዱð‘ÛqáÈAØy]Ú…‹¼Du×eÖ‡ý„ÉÂíäáçŠ2*Ë)’Üñ™†Y¿ Æ1Ê_äeÌ z.&ÖÛ98™ŒšÕÅYøò­§1aö2Ü3´#>}éaL˜5KçLÀ·«V¡ë¤çà*dŠE úINê¹l=^ŠÅ·ñFÚÉ?5# ·š ?}4Ø9ØÃ‰—Ðùôù¹i3c.ÂÉ ƒ£W0úŽúåf‰gncXhø¸ée]é\ûÉý#D–bî¾þÐÒC¸H³üªOßÃÚíѨY(*òSÒµ¹~Üégïìeg<6"ÂB/ #{¸ÐØeÜõ.flD «ƒ“ *++©o|0eéR ½ã6œÛ·ݺtÅpr±o¡ë#Æ„XÌ]…¢¢\ª´›Ö¬Ä´|ÂÆFƒ}ûžä¦nDcrÕüŽÁè6z4f;z¯~ý1lè¸Ñºp±aš©j¾TUaûúÿcï<«(¶>þOï!$Rè½A@QTÀÞQÁÞ*ööìåYŸý}6ìφ ‚¤÷žFBH#½—ùΙݹws¹¡("ʽÙÝ™33g~3»ì™¶Ÿáÿ>ø‘ñíivÇnTõF ?3Q4Ê$'& Øn`»÷À°Á~()â%¾h ûQ·Ý>b¨5ˆnÕï?LkfÝüèÞ÷£uïÔÑPœ‰Y3¾ÇI7¿ÂAüëõ½ei-…€B@! „ÀáGÀ²r©^däÙù)ÚÌl}ŽI«’_ûN}1íÑk°x}ª–ؼòW<ðút$&&#>. 1;¿Æ³çÑêm ªh'¾x÷a´ëÑQA¨*/¥o„[£‘lˆí¢Ön¾ 7î]æƒ)×MD3¿Zäì¢o‡ÓŽãÚ´•8ˆ%-( õ¶dIJ««­¢ ¹èûâ4ªh9…¼Í[È@n@|bÊ~û_|3Õdø”ìÂÒ¥4N£Ñ-‘²5U‰:žž1zدºŒ¾Cž¹“ M ¬0Óß{m:´§‘ÜöèЪž{ÿZÃK†QCæÿð)æúÆ">¶ZÅ%ཧnÖŸœãOÂmX½ /OûÊepGµÆ©g‰ç¾ K[`ÄkdZÇd”i(O{pî¤o…"ŒŒM§3ºÆ'uÁ¤[¦`ò¤ëqÍ5×â†ë¯ÇUW_ƒ;§ÞÓŽDf%Ù«4³àÖûï@W2²™]@D,&\;?ü0·_{1b"‚´Qîê ¶eyÄú»o˜QÇ Ìîjò m†ömÚã‰w>BZn1—bù’EøéëløÐ:úV¤Ï¢ÅÜ¥k´º;·®À+SŸE·.õuEE ªÈ:7M¤¡¾ù\‡¶Ë»Ìgí"ƒžØ•ÑŒ„øqƒÐ69‘âÖ#uÛ|·`­n_ôÝ”eÿ¦;$8aÞ…Ÿ7g£Æ óá6_¾Ãî(°¼\7]VÒ~ þÔÙRNß_ñÛr„´ ÍìN>'L oÜýŠÚ³s¶š‡Út쉟Þ}[2óE#ý-c"—…|’ÍØ¶›3ò1àèá8güE¸á‘K±d]}{œfAø6`õ¦Í4Z]NúÒ,ƒB2z£‡¡sû¶à}õ²2RñŸ÷¿×#l ××–"%#åÄ©¶ªß|9‘ý†"!>Tã¹k–Z÷)V´c uº¢´¸Ki3ÄÄN½1ö´³pÉe×"ãË¥(×_ á‹+­¶¥K¥°{û}_Ä'&¢]Õü¶r‚›!>>Õ%ùÔö³Þ² ÚT‡/ü™>eXGŸZLÇüY_£š:¸»hÛ†X[Óƒzw±SåV#N! „€B@¾þ’tƒÃ×Ç­¢Ü£·½>o<>—\r-®'míVn sg¹°ðæhO¿¦[û¼û=­r&Çq¬zñEX˜µÔÁºvWlžóÕöõ+ÐýiäßÜÏ7'œ1ß|2§œ»Çõn‡¥?¼‚ðã®'îuHì<Ÿ½ñ8ÆŸwîžt.VÌúýï~§w¥@Ÿxó ¤MË ø¥:lâç™á!d~ûÓnêǡӾ4bî QØ´b&ÂÑhÔ‘ÁUԢŷ r_ßj ür­ªž ëj+Trâ`‡ÑчfHøò†€µøîõGð¯UxlâÉØ°tn~ðôé–äæÙ İçQÇá³ÿ{'éISîFPU6žy™væ_KtIú ;“î¼ñ¡ôiµy¹Ô)2 !¡áèuÔhÜ{ü9¸"e†žx!Î>¶7î9/Ç=ÐéëR^}`•¥yt<¦Ü~)B«3P’±¯ü\€9Ÿ¾Î PB³3š÷èoÛTÿðhšÕˆºê2<;q z_Ž1ƒ»!ýžxóV$·ŽBΚZÄ5ãE nCáÉí¨¾jŒ'ç|‰+O=¿üt-z·i†Gy¯|6 ל=WÝõ!Ÿ|!¶Ñ¦wQ~5xóŸ1åÙë¨sŒ>KH_H8ñ”±HjÎ3g¨Õ8FýÉCœB@! „€8ìÐ'Æ[NchöìÙHJJB—.]l£ÉX¬&òâ|dç—¡5’…Y}õ´«øº5«‘𕇸6ѧ¶aÀ¹f¦lÂÚõ[áK#¥½ûô¡ï^7#_…œ¬LTÑÈYRbk=*[”Ÿ‹\šB^OÆK üÒÏSÄÛǢmR¼–á’» ¦?P$SžfžššB¼ºÑúw?ìÎ¥õà•ŠtJ )·4市vªÏÊA Ú=½Yº;R·#-c'/XFBR2Ú'·FMÉNL>$:ŽS&ŽÑšñrÖU—ƒFc³wîDqi9 òv¡¢Î={÷A}ŽÎ¸"Ê{Õêu(¡AÛ®={¡sÛÖ&Ì}õÊ•´ƒv­‘oËsÕ-š[kåÓÖ,ÄùÞ‰—¾øƒ:·&n45˜¦ kGÐÌçÏr·¯ÀˆŽðÜ¢;¤«þÎ: ºìL–÷h^V:€þØåáú3­ÐøV<ª 2~:Õ§Í®+Ãã·LD}ßKpϧë<¹~ÍRÜÌT¬^»!4:ŸœÐ‚F†­ñGx(Æ×UaóúuØœ’…æñI´SyO4£Î þ¾|8WÑ–hI­ãôˆq!í¿»¼ÉIVV–Ñ÷´Nnƒ0j³™)±nÓvúÄZÚ&Äêuã± É4¢¯–š†ð­Ð2*¼é¶Hy“Iti¹’I¬Œ (šîŸß»s²°=5ù…¥ˆŒŽCÝiÇrÚýÍnÀ|Wš6È}*–§¤ï¤Yå!to%£u ùR™ÓR·aGV6ÍÌðE»Ž]Ñ©]¢.c=ÍôHݶ™» Óº-zvi‹¢ÜX¾r-ÝgÑèÐ6‘T¢eQ±h‚ì¬(¢ÑöBºÇŠ+im}·^hŸÇÕƒÊòdíÌA\R[DP§ZjJ*1ˆ× ²i$>%=Å4“ ¶u2ztëBJtŸãBbÌ÷I ÙWW–!3k—Þ5?*ÜÚ} '3 ›·¦èY%±­ˆu›d4£]Û¹¼[7¬Ã–ôl$Ð̉èÈ`†F¡6+.<ë <ùÅ íš ï}nG¦-}ûí·Tï}ôóÍÅN—@þ! „€B@¿ŽÀ> ôäädtîÜÙm$]=_Š-P67;-Ë^^´aÃ/ÞŽ(¶Ýâð94§´‹;m–CSòi“8½VÜïžåµ M·H£³Õó¾@ßcÏÆÌÅëqâàîÂövá™S–Ø¡“•3\Ÿ×–á©ÛÆcqÐñø¦ÂówÅyÚ¹™`ÒçOz=pÝ8ätº¯ÑgËø VN¹=Ò=HÆ/ܹ>öÆOžJk±yŸoÓÛbõMegô÷ ÷ÆÆ•¤-ÜT\Ï´<¯=ãíëÚ3¾·kÏ4XÆ›Ÿ·¸N¿³7ºšëáÙf<Óð¼Þ_Ý—ÌúŸ/ÉÇ}Soôº1¤èN’r.„€B@!p¸Øçwúô“Ö• £½96¬ùezËó¦MúG]íø& sm Z¶9Ïä5/ìN9Šª7æâ¼y½7¯r§/VyÕ‡ÓåŸqî|ŒûhÂÌÑÂúXi=Ø gVl¤ó‘Gry·âåíµÛ̬#¼<2mâ;Óæ©ò=‡ŒÆŒÏßCnVʪ:#œv,«£µëzš.qæµÐ–Ù¸,¬çaÒe5œ.‡#ÌÊÓ½&ÁÊ·¼¬mœ‘GjãœË@™êz²Òä¸@£¨H>öF\}êÚ8çõ÷œ¾™ îÉÇY>s®õ±ÛLSçF–F†õŽj…Ûï»Í£édtíÙ>Mùu| çiñ®z úц&ékäôÈ;1å Þt^ÚÍH÷¨C3RÏñzq\¦ëšØq\n$ê5ŽïÔŸk”>žF­¶jt¤Œ¬Êä:7ùš#y“³ëÓºpåÉ—–>ÞÚ‹¥›Å•®¹æD4/Ýn­¥\Î×8£çÁ?À¾aF‚|“fú܇ËGIêÙ ÞØ¸ïG{¦ ù™ÁùqÖ=Džœ,éÄzúÒFˆž€; œf2Ðg É×rVwzÆ_ŽB@! „€Bàp °×ô9sæ C‡hÓ¦Íá ëa¯R™™™zÚìa¯¬((Ž`³fÑîÿݺÉ÷#¸ HÑ…€B@!p8Øë:‡9%%¡¡¡zmí¡,@ãQÁC™³;¯Ñ! ¹¹¹˜;w.N¡oM‡„„èQSwj{?³µ•¯5òè§G ݈ç­ó§ÑNtêå.^òægÔ!Á³ xxô@X¹Óù}gF?=’ªGuÝ#áž)’fT.ÉŸçôèðŸ›ÅŸ§¼#åCY‡Žlú)×âëQyšîA½®`Fгhf èâ„€B@! „ÀáD`t§rk׮Ŗ-[Nß)æ^qM`ã†ñí¼ûöApfj3§}(ΗòÜ[®•nNÿƒÒY&9?X¸Óˆû÷œp›áåü1b¢¢¢´Ì¡¾ÇV)%! „€B@½èürËk‹ÙðtCÎs'OÏk#ëéo®Í‘åš:7i4uôýŒã2y“1á|4ážGg˜óÜ)gÖ¢{,oœSÞøyÓËfÎG“û9Ï2æÜ„›£ñç£ÓÏÔy–Õ¤gŽ&=Ïkã¿¿Gßyä¸ÞØœ²ÆÏägÂÌ5ŸçÑÈo²ÞdŒßyì+ž‘å#;Ï2²Ÿ‘ñ<÷¼6rM=åÍ5=ë€ýÔ™|½Ås†5unâ™psdç9_ó}Ê?ö'„€B@! {5Ð%E! „€B@! „€ÿt{]ƒÎ£bÞFäþéP¤|B@üó ð蹌 ÿóëYJ(„€B@¿½è\yý;U§è*„ÀÈ¡%²B@! „€ƒÀÞlì& t³¦ô`( i! „€B@! „€îý›¼±hÒ@g«¾°°ÅÅÅàO‰B@! „€B@! ŒÛÖfæfóæÍÑd{èΑóE‹áË/¿DBB‚ÞͽÉT$@! „€B@! „€؃xó×ÑØP?÷ÜsÑ·o_—Áî9Ý}¯»¸gdd ¤¤AAA®O­í‘›x! „€B@ç ÕßµhfþÌ´ÿLÞW½“?«üVº«Ü‡K:õõõˆ‰‰Alll“*íÕ@o2–! „€B@! „€•À^—sOˆ8! „€‹€ü»r°HJ:B@! „À?‘À^ tÏùðübµ¯—«¦Â=ã9sü«áîK}…³þž2|m~UùlÊçl‹ÜþX?߃ß7ådðGÛ'³khhp!ô!}kw%sØž(ÕàzÎ4Y7ŽzÜ߃]‡-4QL! „€BàGÀ‡^f÷f~ÿ¾ÛF32g³§AmÿF…}½t{Æ÷ž¦3Wïç^ãyÑÙ{ì#×™zqLNS_^y‚›Õ_oRê2pgŽ—j;˜zcàÍÏ‹{x5¯)ÿ=ø[yp;ãζÆJïQVo÷§¿=âQ²Þüç&WB@! „€Bàð pÐ tó2\WS‰]»rPUۀȨÄÆ4CuErsóPCƒQÑ-±‡ádâ;ñ˜÷ðʲ"äæíFòE˸xD†»ŒHOã^Ë)Ì‘Š‡‘VSYœœT×+4i˜¨H¶Œ>:Ýži;C-ÀòÙÓаüëâ-=.·q{†¸)éLÓÝ3M§ÞŽpÛ(cMzžé˜úª®(§ºÍuÕm Õ-;n'³—úrêÓG+£‹IÓS'ãïÌ»¸ 9ùEPÔÂ#š#>®%üh}Òr¦cÒvMxue9µ©\ÔR›Šn‡æ‘a®ô÷Б8»kÜJeLZª¡ù”VQi9B#›!.¶%ü}M8ëíÖ`´)ȤÃR|nœ7Ùý‘ÙŸ4LûdVçIYQvå 8,Šê¦ü©rLÌ õÈËÉFaY5¢éžmÝ͓̕ËW[U†ì]T >ú9cµE÷=t e1²NnÞüÜŠìo§¼œ ! „€B@C Éy¾fzúÎí«ñê‹Ïáù_Æ«¯þ¯¼ü ^}í5¼øïçðÊï"5·P§Õ@/Ïüâj^^+wgâÙ{/E§ŽðÑ÷K´LnÆ\Ò®=:vhé?-Õ~¥YXúÛb,]± ¥•Ú4iXJºÓÌÞ¶×Ó⟅¥ëÒu0¼ñ«·•·Cëa»þj¿š6l+»weà‹Fhýæ,]ë2–çíLÏŠÇ>V^–^FÞzwëÚXÎJÇü5qœ2&ÌígûØeñÌÓ­3¦[·Æ¾–¿ñ3i™k>ºü´‘XÌ´mXôË/X·q*kêt½pËŠ °jùR,ùm9TT÷äÇnWú\i×í'T·uÚ×Zæ`Òæ£qÚÏ\ÐÑFW.}L\-ªY¸Ó0Ñǵ}9/­[Ö.þ ·]w ºt튮]ºàÖg§£¢Úš>nâ¬Q~½Œ¿9š¼ùhÒØ•‚{'ŽCGjó?-[§EÌÀp£x\gö9˘iíõÔÁõÝo s—Îxþ½ÏQ\måp6j®QÚ`ôiäoG1aV|7ç=Ò³=¥áÕφ‘5G7ç|ôt|/²Zª¶3?y:wÁs–¢ÞÇz,™(&fI~&žœ<]:ŸÕÛvZÉé©ñÌ“õ°¼Šw¥àžk†Ós¢f,XëÊÖèâò O?smŽ,«u¤Ä~ìo]ó™å<ùMyúY9 ! „€B@ošXƒNoº4í”ßLwgoÃõ7Ýæ-®ö[rÜ´‹mNç<êiý8 0Ð;çi™’²*}ô B¿‰g£lG ÂCƒô‹onêJ |*…wÅÊô_¢Óá[—Ѥcõ 5˜µ‚/V¢†Fæµ£<]½ ú%ší2~¥öæØßz‹çÊÌ_3µPeu-Ìk“½Å³üŒNM¥oüµœI±I]¬|gÏ\-ƒƒÃ›*ÑÇÄåk*|“ò,çÇÄÕG2v¬zôÅŠŸ¾ÂéWÞŽñ“ŸÄ«OÞ†[°47›=s~Û„ø–\÷€` z_v.v§• YxMÙ‡F©›Òžc¹ª¦9°œ¥÷>ËFr&·z2dýüüPUœw^¼oºcοG÷HDTBkâÀeõm´Ý©ƒáäôc=œŽ[’Éý¹“*}ÁF-ÂÚ5ªËÈÛ[ò^ ÚQ]V–Z_¹E¥®Ž%.“I×:qÿݧή¤ùÞb¦Ü\œ%p§Åg&½Æ¾î+¾—$öHßn¢œ:ý¬¼s©cãkîÑ ÷íÙA|Rýðº{ÎÃ0Ù²f žýl †\4;$kùz2òýx*¥eôðAúÏ–_^aßÛ:ã¦×ñ»Ëâ‡w_­‚þcâ»}¬3÷©pOy¹B@! „€8² 4a ûÔ7 ñt¹‹~=÷†èB3MëQW[ ßÀ`$·à©ádêÐËôîÜ,lÛžJÖy$ÂýÊ;„B#48@Ë4MÄ•·?€‰4õ4.! y»¨-åå¡„ê E+Š×*6†.)qêx*,Ü¢š¥;KvRûÚ‘¨ØÖ4ƒ #‚ü|´ÁÏmAQ›ß™•¥ïîThÖ¼ôýg ãÜ騖’®9„Qš:u"=íûÚwn^>µÝDµˆCdˆ?r²wB†ëΛ²¢|ì..Cµ‘–TþV˜"ÃÚ*S=Ö/ÿ³¨¼7>ú:zwiOgĈš´Ñ¤uÕ–`ö×ïê°ë.8 I1ĆŒxÓa‘›•Ž”´ )òµùˆ?†DçpG¡ýˆ£º¡äÀK¸Ý•TN¡hKí¾MëXÍ®¶º ùy¹´ìhN÷¶O}%¶mÙŠŠ:?ª¿nô ˆÐ&[ȯ¨¢:wEb\47‹=¥ÏåÝFé–VÀÏ? mÚ¢]rk×&™Æ`ב?B@! „€BÀ“^\ƒ¢‘)í6,þVµf‹‡~_Ì\¤êh^jUU¥ª¨¨TÕ55®¸kÿ¨Î?¡¯–cYþµMÖÇG_ÿFËem]£.ÙC¡å 5oùzµâço-y¿¶ªon®¸o|³ÐN·AÑ”^Uo+³uÅ,ÕI§ ®¼ú*ÕÍÏʇóºì¶GÕöìBoûòyª¯­ƒÑ…'ž}…š¿r‹–ÉÞ¾NbÅ÷ë¹Úoçö¥ª·—xÃO ~üeµ–©.-P/Þ3YëzÕä[ÔuWœçÒè¢¦ÏøEÕkI¥r2¶¨ç¼UµðHsÒÃo©²j¥ê«ŠÕçÓ^Tm=ÂϹúNµjk¦NeõüÏtüVÃÎP/¾þjê•çèü¾úe•KC½fD˜´Û¾~‰ºíš :Ye¼àæ§T^IÉÔ«%s¿QçЧ±LŸÑê»…kÈnªVüçÖo@_•”ÐRŸwvz÷ÝWÕiÇ÷Ô×½ûôrÅqÚÿTúöMêÆS)„÷Rß,X®uÙ´øÕ%*yðuÇSÕàVîúºtÊc*e—U_•Åù”ç“®ô¸®Úô úwk«"»­æ­Ù¦ÓËÚ¶F=2åªFr,;ü›Uúî2-C£ØªÎn/ë–¨l¶Ý:¶SIqVþ3oÕ~þæ}5²GT£ô†Ÿq©šõë*V]éNõð-çêðëï~B½ñÒsúü¢{žSyV-sÛ¬¯·Î37¯Rc›Yy\zõÕjdŸWÚ§^6E­ÞºS§»+}µÛÛÍ‚ËÀ¿£ÏUßÎ]jå]Y¬^ävíÅ=O©bªºŠœTuq¯=ãuzŠúbÖ¯ŠkWÕ•ªÿó€Žwîå7ª›¯¿Ò¥çñêÇß« -¨Tqîõöó¨Ž1Óóƒ*§¢–šJ¥úñËwÕ ¤ÆáÃκB-°ï£²œ-ê† SqêöGþ­^}öqßÔ×>S•ÕUêÇéÏëëÓ¯{\eæ¹ëÈÜÓ¥ù;Ô”s;j™ÿÍ[¡Ë®¸Mó5jW»^ù³–Áˆ jCF¾–³ª¹N-ùé+urÿVV¸f¨’ìzx}ú\-«TZ¹ðuáj£6o>Fö;A}6k±–)Ü™¢®Ñ™žO}Ô¤›oQœ1Ê%{éÍ©ï¾ÿVÝ|É8—ßðó®U«¶[uJʪÍ+Q7^|ª+\ç“0H½õÑwª¤Ê‚ÎÏ3qB@! „€B )<èŹ ôõ‹¾¦-Ù¬ô‘'ŽVã'LT—_z‰}Ü1êÞßSå»pÇzufOK&qà(õèÓÿV?8Uõ² ¢Çl}ÇÆeª§Ö7ó—©ô-kÕm[/Ámz¨ëo»KÝÿàCjæÛø¤—^~¡5è=ìøÃFŸ¦zô1uÓ5]/Ľý•.KÆê_Ô-×^©^}ç#5sæ õî›/©qC»h¹3'?ª*H*?}£:ÍNëÝoæêx;·-S7Ýp½zéõwÕÌY3Õß~M]pâ@oÈÅSUA%‰U©]ë6Êw¾ºiÒµªË@{­Ê"C¸¡¢@=:él[·uǃ«w§½­Î?6XÅŸyŸÚ]\®~þüuÞ|عjƼÅjÅ’ùꎫÎÐ~îyYRë~f§ÑØHútžÕaÀÆŒ1+ wª{®œö–šxêpOì¸Tv ¥]_®þóЭÚïÊ{Ÿvè÷O¾B=ýÒ›jÆÌ™ê“ÞVW_h„‘Ç^¨Rò¹eW«7Ÿ¼Á¥sß‘cÕÍ7ORÇ îjûV›³ŠH®R½ùØÍ.¹î|@M{÷2¶é~ìwšÚQXªÖÌÿÒ o>B}öý\µvÕõ¯;®Ö~}Æß©rËêTUÁvuîÐÆm“9ÝôÂGª¢ºR}ñÚV]®ViÙ%ºŽhŠe€ÓÕê_ëðá—Ü¥Òr­ðº:‹­Ë˜­«Tÿ}Îê¬xøÕéTBv–¡›¶~‘a·»ÞǦžzîõÐ]·¨DÛïµOæié”ÕóT’ñ{ÿKj÷kÔ›ÿ¶:2€cÕFbRš—®Î´e¸ \r…ºì³,ýmÿs&\©®¾ä|Åã÷,óèk_èôó3Ö«‹†X~£Î¾\½óß÷Õ÷»ù¾ûmãNGIþ! „€B@MOq§·OãøM”ݼY?Z'ößfGŸG3j/ƒ;¶@IDAT¶nZ/­=±ðØý÷c©#Q™· ›—ükg”ÐTVž\JSUi|Y´Š¦s'wꉫn¸ Ͼ?µ…-qÅ · ;žfíX«ëCÓG4I5BÙÝDÓ©Ï=q 27£!+^ú|V¬Ý„üòS‘Ô{0n»;Õ4m¹¦¶ŠâT#9‰§În¦ ©ÊõVçTS³NºUÛÞ˜z×]àiñµ5Õö©GbR[Š· õµ¨®¢ùÛᾦi¾ì&Lyß>‰>ø¿–A¸æþP^TªÒ2ì,Ùˆ{^ú\Ë=ñú{¸þÒó英£Å–Ì2T—ìÄÿ>{K‡_8r0’x ºo:t¡1||…ÿ¾ý ºþB™Õ߉xöõ'1jHšú]‡–4­ÙrÄV¯§Jijóò·fjïI­ô”ø‰-‘ܶ. G³€Z|=›'£.ºí“MSy۴‹Ý+>ÂæwáôcÆá¾§ŸÀéWßÞƒFáŽ{nD ­+g×¾e3|ÿà34{8\r-F î®ý36­„5!›— XÓ˜}ýÜÍkúw_âܱC°eå\lý~–ÒÌîêºJTT–bÕâ…:¾§]û¸ý:%`íÂxáÿ’ Ñ4åºò"¬]öŽ–ëÑ®íâ‡öí“è×cέGkš~l9ÞG€–"Ðôæ­ÛaâÕ×aõÒ7ñþOÀ™]ƒ §¥ùÓxù~«núœr9n¸az¶‰AÿΉØüëWøqÛoXºrºž@K Z¶¥d—ãÔKnÅäËÏAl3úrMѲÛ4ã·Û'·)³‡Á¤)·ãÚ³NBm–æ[Šûžû›Ö¯EVAM©îŽ)wL¥êjQKË1x¶}bR²V߯²ŽÚYngÚÜ#_^c]KÓÏ#cÛâ†;D9…×ÖÕ  Ä—–Kð´ö¯AU Å£Z Õ~}N¿ <7ÝÛ4Ãgï%bî’;É¿4-=G6¦ßý¼–›òØ«¸ãÆËÐ2"gŽ=mÛ¿ªüô¿uøÄ ќؚvM@»ö4‡…ÜêžDÆ¿nAϘDǶ!ŸtLœô®ºè„(DÆÑTz?´é>÷ÜÕ€¸ŽƒlµÆÅ-„f`þŸÑpѸQHjÉuH÷»~^ØPÉ'/sÞ¹õi:ë‰ã† ÒÏ€Ú#Ã×§kV-Æ| á=,¦¶súÈ(ÌX_¿ü72iùJpp0…),_8;èlعW£C«Ý·¥û‚Ÿ )ø›SÓЪ[,Z&ÚÓòßÅm×^Œâ”(ÍX…Ϧàö§_Ã]7\Ž:zÞTd.£6µê¢ 4#)Ôþ?XL'´ è–É7â”ýPY0 9)ëñï÷Äw³çbܨ!ˆ ái?TF'„€B@! <¸-(z‡ä¥±z(›£¼]Õ+Ó>ÇècúBÕ‘áKlHTÂ|jQRLk¤Ù ½ G÷ë¥Okiz`(Û%úÚü©µO¨£À:3oªdlð‹4;+Èh/×óÚIk¸ÙÅ´JÆà¡GiÝ·žÖ’ÓF]%9;0ýÿ^Çm>åŠ×…vÃfçïë§×¶òWãÌi!Åûêã÷ñØ”ôË<‡wïÅ‹ŠÙHò³:Œ0ùµjݱ±ÍÀ;wëÈbÄ‹®H‡ªŠRëC1|ð`mœ×·­ÛÓÖÂf­CÆÎ¥ZföG´#þcSlyû°«\¯Ávg—€áLJ¾Ý[9ä(”ŒBË Z¶NÆøg¦â‡)Oàƒ—Ñ?>ùÜËpûí·¡­ÛÝÍkÂÉåo]‚QC_ÑçÎ?åUV ùê·¨ÜÜx!°qœŸ}îî8±<ØPagªÖÔ'™õ´¾µŽ×*±=zh†¥¿Ãßß4ZJƦµñىǃndœ³óñ±üHSjkuðK¤r<×¾¿O{EÿXnôpõ5WÑZß|¹§Ó|lo[qU_G»ÑÓnrÃõAëxîž IÚdìö<º/è«PQRLºÑîõ´ï»nÔé3jÄÑî ÉËÉF¹«-³Ÿ ¡Yx8GChtkôí;„Î>@­Kçúª,ÎÅwŸ½‡gï¸í¢sÞÖLw«C«A_óÆÏí¯¦,³¾ú/>y–fXÁzöµå|iC>ë2µÕ2¶ZÅÅRd_´oÛÅ’#ч*®‚Ö¾çÙ1GwŒ6ÎiƒDRã<š~•E»¶)EK,š9ï½ø¨-í>TÐÎò4Mõjµ©¾‡â˜ÁÝtÖøXý3žÌÊ—îAv;S6áæGßúœƒ!zj¶ õ zÿ–³:ÑÖ,žÏËÉqé]W gç6:.a$ Ÿ:ÃÊ­çK¯³OÇ û^¥e8¶·šÐo´æ¿ˆ÷q Wœ¾£‡¥Ï¸³¤®ŽöC°á%&P‡m2H Û$qÛJ¡µù‰h›€v­Ùo»^ãÎ7ï Ý SЉ:¾Ø7‹C·ÎÜáö#rK‹QBÖÅ„P‡çan"'„€B@! l–õá ‡ýÉ~íg×¥K7têÐÞºpý­#Ë6&ŠKiϲ8‚h›0©dg >qÛñù_»œzgµ^ÜÝFçÎ?w,sæcÎ* ÌÉÎÑI„G† ¦²³?ySçmGŸçï¸};&`Îô×pùÔ§ôh—v¤êGáq³>בq‹¶'ãóWïÄ€îÉøõÇOqá•S½Pƒ¬¦ºšF;h<_ú4”­¿ä³Ñ¦-Î)Ÿ6b+ãÚ4Š˜£)ûôf…À 2žh$zø©—ãÿ.:¡dÀñÈ "ÃcwiâhS±Œ¶GÛ¥ÕÒ¦iìhJ;9´é•‡ëq^» ƺõ›ž‘ŽU+á‡OßÁieXôÖƒ§MÀØ&öÅ<ƒñQ”nÞm½pwZwdã‚>Gg[ÕDÌ7ÐÒ›ãÑ´c»–èÜ6âÙŸ1)M¹«­ U´»:ÚLÌßךÁ.–=¶##…4¡UTK¦Ü TÞ:~ì¸ñøùÇîX»n2hCÁU¿-À_ýWÿæ®ØŠcûY$Výp»!ˆá¶ÎIwv:__뼘60s…“A^Vl™­>dDj®¶ÅÝ@aÜ´ƒit˜V]ØüurþpÚÚ™¡tEÒÆdìüiäÝ·® úWÞrùŒÀ‡ÿ»CIïåóþ‡³'ÜLs=öt>¾ļ¿Îú n¸ƒ¢1íó0¼_Wlým6N¾à*”ë»ÔÎÜV‚gTUwêÌ¢™ÿV•õT³<úlî6S/²;Ñì{ŠÛoXNÆ$¹nÃNÇ+ož‡¸ÈÔЌڠ‘7.ìלXäP›µž¼"Sõ%fÜJ¸^y3¼Â’2Úˆ0BËÝlUƒe Ô5ïå§£S›xµŽößÊÂ,|;ý?úê´G"Šf.p‹ëþ·ÛiaÍJ¡vÌ.0ÀŸ÷ÔÎ*5•×t8ÅöÀ§ß?…Î Ñîv_XˆD2ü}*ôæt±†¹ñ‘*½ÎN—YrõôÕnìtGm=·›fYa>Ä©¢Âº÷ƒ¨\þ¼ë;û`]È_! „€B@!à&ÐømØíï>£Ý[k›ŽF=/À¼ùóñóÏ?ãÇY?`΂Å(¥×´;´vë?Æ?Í!£rV®Zô,ë3Qþ楛Œ{v¸=ÚG›ËËŶ͛ɘ)@í>NÖ‘­ƒ±xØËÍ­Fä“ÑS\\ˆsÄW_Mײ:$ÑËy=R¶¥éëôÆ€~}iò(TVZáA–qÈÆWX7+‹ úDX=펞iÅ3j úõíG;4Ç ¶Ò‹ µâq ÿ@kºw®fwm_ÒM;žúL†NTL+7f·ÿûö¬ÝšŽ²Ò,›ÿ=ÞúïרóoŽ>½ŽÑ»Ë*áA£ð=Э[g=E8¿¸Ê/€^êMJ”6ª8‚•§áÃF³Å¨€>WõÓÏ‹“Ü ã'^†É7MÂ9gž®óí´]OFSë¤D}½,#—:|‘ܾ#zõìØèHì¦Û­ñq_TÒ.õì2²Ó±5%y¹y´ =}ƒ›Œ?+„ ¤lÅ.Ú弤„>FæX”ekcŸã²‘kåF»îÓ°å烀p«½°ÑJ»—ÇÓîmì>ze:>üð#ü4{¦f¦=QFSÜQWYˆ9sæ" º-Î?“&MÆÄóÏc²++¶êÉMÅòçe!ámô…¿m¤ùÒ²äí´ß3æcù²ÕÔ>ʰbùrÌÿ:Kû'$¶B0åk /=m_'N„\mÓÊÃõ—ÛTë–ú²¸–p}ÏÅŒÖtúNÄ:Œf dgl×2#ÆB¿~ýL»ç×UYí39"Øe¿ùÑüìÂC‚ip»™;,Ýv ú÷ï‹öIñô•ËLޤ]ÿí˜~þV¼HÚýÝU纰Ûg2MÑ'¹æÑÑèn¾ÿﳯ°d픕•bݲxëÿþ‹Òzô0Pç_\TL4Ahß¹zvð@Ú;€:ZÈÈ'¦þAV}2_ 3¢¨d„/úñú.|'Lyê=ä™–CÙøð9Æ(š¶J̓6œ°Ú¸î`Ð)aóêexþËõè{ÎÍ8ª·uósç—nñôõ†HÚñŸ]æÌOñÜyÈÊÎÆÊ«‘³[{ëÐ}”Ø&Y{¬N¥Ò2±]Ýîã[D¡¾°ÀÓذ÷ MÒrtÎŽïkþª;gŠ|ÿØ~>´¼„KÝžْú,Yªwqߺv-]¨ãvnÛž>!¬Ï­’éSù#„€B@!  ƒË‹ã©-ïÕó?áwá&+3ò}kZ]{’“2SžùT'–N;Œ›´Þýn¾öÛ±~ËÏ„½ú¥µ±oåÜ$nã’oɶˆ r_÷;W­MË£4ëÔûÏÝåòvÌHÕÝÞ¸‹ÓO:íZUDeËK]§ÈŒÑroþo®Öå›wwÅ2ìXÕ£Ms×5ÚLPY…´sM‘ºw‰ÚüÔ§Ôî*k³ªïß{Ä–í­Ö¥ò†eõêÓžwǧ¼N<éxëºçdUT^§RWÏWG9Ø<æ85êØ¡vœq*«¨R­_ø©+Ÿ—¥h=™ ýïr¼é»[W¹d¯¸a²šrëdÕ—>ùÍåËj7í<^š›ªî¼Ì½Q›‡^jìØÑ®x³oÒiÍýì —ŸU/ÕÚ”]ª¢ CïÒ¸=¼øÎWjëúª]–iß-Ði¬÷±+ ­tó3·ªÑ¶Ü¿ÞüDËeo]¡.9ÙÚÞ´2‡\qѦn5%™ê8;ÞÄ+¯S·O¹M²w4?ê‚ÛUZ޵Á˜ÙX¬ÎnÀ;·,Qdfê´^ûx®½µ˜RÙÛרKOpå1vÌÉ®ó nú—Ê)%¦åÙêšqVÜ‹ïzCUÚ-0yhåéO½½©YƆ¥®4¸-b¢×Ô¼ÕVýÍüè—ÿQGP}»$¹®±*5—v#l(WON¯ýOœô°*ª®UKf|è’ë?ø5¸W[×5ÐA­×›¿ÕÐær,ÿ·¨zã8¥~ýî#—ìüõ©Zõy_¿çòc}GŸ|‚}ÝNí(®T¹©kÕyöÆgÞuÐ05zÔWœÍ™…ªº0ÅU/÷¼ð¹Í×~xÔ—©iÏÞhËOP©Z?κA-üzšö¿à–ÇU^©ÖlîÇýi©ª"õüÔË´ÜËÏÔ~æ™`6FÜ•²Fw”UGî¶ã¾~ú+^Ñ®íê¬ùµ\R7j÷Ö}Ì׳Û¬xGyê2Óù=ù¶õÌ*ÉNQçu²üîùÏú Õ%¹êê>–ßÕ¾@ÛR(ËW/?4É.+Ô cƹ6ªCqjÉú4«L÷®](9! „€B@MÀ ÏÒ;ª‡³‡y¢bÛáßO?ŽZŸ ú¶3MZ¥QT?ÔT”Ã?<‘´WPd Üõüt˜þVmIClR ÚÅyY4Š^€ý­±äÐf1xí™ÇUáƒÎ‰±:ÃÄαè§oñãüÅØMSMÉ&E‡=do½*“”°Œl‘„Ÿ{• !ôýq ;+%´©Vë61îÔq´Ñ—oì…×â½øiárÔø†âÒk®GËàzlØ´-Û÷/ö k†Wž{é%õ4ÝÕõ<îÔ‰øà­0ü4o1ªT޹ü $FcÝÚõˆLìŽúæ9}XGŸ:wÅõAßcúëoasA» ÆÃÞðØˆ u¾”Æœw–´ëŠ‹–!%5FËqó”»qÜɧ!8Èm{ǧ›×`þüX¾r } 6£â;ï=C=‰Ö£.&O>újcéÛÓaœ•åìúá 3:Ú<¾ ~øò#Ìûu6mÞŠåtæ­¸uÄH;r8­Ÿ¥ñ¿¶˜úä›~Ê|,þm)6oIAÕíM·Þ¾ý‡ gk$ð¨NÇWúã·5›QR”‡†ðT~„DÇáž÷ç¡ïÌŸi6o>2h­|ÛäVˆŒŠÁýÿ~)Š캊kgŸ|¥ ô úXÞŒ¾Nß¿äÕç1hg uk¯§8Çwì‹Ç^ûç­^CõYøVqH[¿—]'Åè _Ý ˆˆÇƒ4=”flß¾?¯ÏG÷£'ãõÛ†âøãC>ÛG–3£É!‘-1éõcýŽ2tïoð’H<µƒÇÞþ #¾ÿóæ-ÀÆ´]¸øÊë1jÔ 8ñ„ãN“ÊËýqÒEo eÿLôÒÍsöµÉŠ*À: ¥ÑÜ7ž»i%B5ÐÜÙúà1 ípò¸SpT¯vZpèIçãó÷‚0cö”Õúaèe—£m\6R; lÑaÔ6¸ýôuî J@·¡i$ÜŽ‹¯>x“f©,DAE¿÷'·ÀÆ5«á„f!“o™‚ž}¡W§D-/ÇU/=ƒ‘yèßŪ+)?ûî×ÑaS†ö°¦ˆøÒ÷ÍOºù5´ÜžC­i¾a1¸dÒ½h×cfþ8+Öñ¨ÿ¸aøq Îôîdàs!ÌóLHþ! „€B@6Ó×{œrp“"ô¦IïѮ暦[JS£CÃ#D›)ÑK7O¿æo^óêL˼d›c ­Q®¡u¯4­7¦Ž{{‰5ñYažº[Gk²«h=h`pýÙ¨¡÷| 上6†*¦©×~!d,Y ¯­åüxŠªI‹ãX:XFj¨£©óÖ¥G„[Ñ™x\ž\Ëe²ò¡84Í—èôx3¥oÊdŽFOô¦²‘ÑĆ—‚c’#Neååz“*îü¢§]å¡4Mqz&M+¢û/çoÂôÚcZÏ)”_X¨U~Vš§73vU´>–×íò†lAF/«,VZ4½¢BO f½õf;r¯o¦õ¹~´×OAç©¿\>]*’ñVßœ¦“;‰ë)ÒEyéø~æ\ÚT+žv–GIîN|ûé{xúÍéˆ=ùZ,~÷)´cœäëh÷ò**o.çOm%ŒÖWÛÅÑiº€ôÇäç©—‘S´X¹„ê»–XñÒ…f‘vzVs|æÆÐÌr“¶çÑäÅzòšg^;_YQ©wâçèÙqÛÑ›ÀÑ:íbZÆàãˆÈ«ãÅ{;³ê•õÕ:S[áM­KoiM½æuö¬/¡åAíP˜½-?K7ò×õo3 h™I%}¹€uc¦!45Þ•+M‰U”—éûÓ–\Q[á{T‡p3v̈p8ž¶Îí‚/y Ûk|>#héÅñW`û‡ÿF{ª[ÖÙÜ—Z¯†jü÷ù0ñ¶'qÛ³ÿÅ¿n¹˜¾ªÀUánçÎsnËå•5ˆÔ»þ›|9MÖˆ§ÅͪhÙ áÁ[»×œXWúϪ'ºßí22Kk?Ç3€ Äe2 \Î2Ú`ï _ZÖÑŒîe¾;ë®=äB@! „€ð Ðô: ò{µË0ðˆè¼Ô/èôŠúÇ/´öÒc׋µ1 ,ëåžýƒÈ(µ–vÛÑm Ã\Ù/æÎølL„ÓÖŽlh½iÝiTskwn-@Ì:h¾Þ£\ú%œüi¤2ªysEñHÂ~Iw‹¸8™Âr§GFõN=ݱ,c•¯™Sx¸5Âì·Êdu ¸}­¼Ü׿ÌÉ…rþ9ëBŠÓ.ÕîM΂CÃa­ŠuJr í¼ fH¨cÔÞáÏÆl¸GNãÌON½öð³íºêŠÝ¸hÂe•ÐW]ðê”ËÑÖŒŽ“>ÞXºëž5w»=ò³ƒX'W6t=Ú‰fE2{´wÒ{œyË‹Ùð»^¹=P,6ð,Y?4‹jºqGŠe º³²Œ{_š­Ð8‚ÆYyX¡Ëò¶Êâ–£&=¸C‰ŒNÚ¼0ŒG±9»3…ü¸^CÃ"ླmAWº¹;“áöëÌ•w^ß²~=‰„áµk.pÍ|0íÄp,ÉËÆ–­)´ ü8œyâ1Ú8ç{Êé\õHúé¶ìPÐ3_Ýî)>ìÁ!aôs¦Ä熑£,œ¥íl×,ÇwˆgÝ-»ó…îåÈf°ºN¬<\mÒ'„€B@! öFà SÊ.#†^fÍHgèzy¶.ôK.¿¨:_V/åÆßÄ5a|mœ3¾ñ3G3Rh][/Ëî0~1æ¼-3Rgòt•‚õè£;"½Š»ãcÙ-ã~QwêæLÏéo’müÒßXW#cÒpÆ7~FÆÛ‘ËÆf K¹õ4qš’³ò°¤·kKŠ;L¹ô}GŸ ,¥™-µ¤#ý<ÓF 8Ú³âY eeå4SÀ4*`v@·’mô׳ îºÜ“»Sg"š¹·²xó£ˆ.&¤«Ó€÷–~ãg“3W9B@! „€ ìÓ@o,.WBàà`㊠ª½¹ý‘Ù[| ;| x«[¯~T„½·’÷Œ¢™B@! „€Ø_b ï/)‘;äØPc·/þ+&þ!\¯\µÜ/ÓdݲŒ#—&å2r*„€B@! þîÄ@ÿ»×à?DcŒ{G 3O"r-„€B@! „À?•À^7‰û§ZÊuøCüð«ÑH! „€B@CK éݵ­’›B@! „€B@#š€èGtõKá…€B@! „€Bàp! úáR¢‡B@! „€B@ÑÄ@?¢«_ /„€B@! „€‡ 1Зš=„€B@! „€Bàˆ& ú]ýRx! „€B@! „€8\ˆ~¸Ô„è!„€B@! „€G4½~])å‚ã¼Xª¶ÞZó+,½¯#Šwˆ‡††"==[·nE÷îÝ¢;Æåþ8¢š‚V!pÀö0Ð)°QÇÆy›6mœÞrþ7&À=ù±±±ãˆêB@JlžïÏF%~‡R)ÉKüMDFF¢¼¼\f¬ýMêKÔB@öj óèOÏbǽÁÒë{8TÙëÀõÈSÚ¹.y=,,Lÿ¤Nœ¥Äøç¨ªªÿøùÆ¿¿|æEÿ…óĵ1NüýrK}ñÍæ@”×ú €&Û°jÚñTv:q]Óyh Âðv¾è ÃذgqBàH$Àÿ¾òr²ŠŠ ÔÕÕ‰¤ÌB@!ð; ìÕ@ç4QþgOÝÛK1‡gô1×öÑä}0ò=˜iH¹M¾\‡l¨›iívˆŽ"+þ ¼ÌƒúeÚ»J¢ãà=ýÃÏ×ô”ÒɺÒ:ì ~Ú(ú×¢–Å~¶Õmdl¿B²A67àΰ´má_òÿ û?¨¢ÑEÀùïî‘ôì8¢*Y +„€ø“ìÓ@ÿ“òÝ#Ù&ÿÓ/yîqþG,ßdœ=Rß?wÚ¼ÕŠs°ò bt}÷¯T¥ÌKCc_¹Góüàó¬Þ“Gºšvü¬i:ô„X÷£•¾¹7õ3ÇX¿$ñ?×õüb邬ðúׂ½ëhh¼˜ŒqZnŽfädÏm òÁö2dä³neþWã ¸B@! „€ø+üåºóe™x^{ΑtæFּ؀ƨvù³1oí£+Œ®YÞ¤åŒË/å54õµÁÇÁAZ†£;)—¿·0 Ôë79NM5¥E;"i}Œžé™tå(„ÀÁ'à¼ßxEžUÂÎy?jÃ’î\gÇš o¤‘ýl1a&msÝHÖó‚ãòCÆvÎsÓ#°g:ü,Û¿¡i·Qº”û{úøÈe§¿ü áAíº»hNçåd•—ÒïÆ>¾ˆ‹ðÁÛ+°±D¡MPMF|C=ÅaËÝè¨ÓâkqB@! „€ûCà/5ÐÍ‹bQN-[‹žC†!)&‚^éMЇF±é%oǶuXºj£µ©«¯CHxºvï‰.’áK/æ%ÔYX§¿ÿò5¿'ê—Rûœ®ô;0‡5Ћ¥/}¨¬0Ù»+€Ð`Qk¨Ä쯦!'°.;k„–çéœük^pM^|­óñc?{§ô_¾ÿ[+C0qü™¶õÒñX7gä\CBÀܳœ™¹§­s=h¬Ÿ1›–acv%FŽŽ`²åÙ¨ç{ZÊ-]ñµmkÝÑúþç‡=èQ`çÁçV§aVêF¬Þ”…£†Àºbz®C›vQ]º 1mÑ%9^?WtÚ”€~’éô7qêÒÇ#¼)#f=3ÝO¤2¸|PA£æÛhªû|Ð/É—ö%®èë‹k@f9Ð2ˆFÖk­ç-§e•Ú¤*G! „€B@ý!ð—~c‹_^Ùf§bì)c–WjélûóKí–•spö¹çcsz6Š ð݇/£{Ïñøuõv-Ë/›{ûñk¢ ×/ã.y++cãœ]nÊRÜøÀPRm¿œú(lß0ëÓ ,aJ‹;8Žy±7i³€9w†éuÞvìâ¬íX²v«žÊ^f ¸~‘u•Ù–ƒ!Ë fò36`Îò5PöTn÷=m='øÖå{Ÿ]ö¶•ørƨ >FvÆß<‡l_ò§©âåx÷…g±lkB‚|1sú4|6{5mÎæƒÜŒ•5NÃñì±ÒùóÿrÙjiT¼œ ï 2ÎoëéƒÁí}ñ9œß6³-iýÖ£}쪲>³Æ£î쬧»u.…€B@! öÀ_:‚nTô¥)¦[v†Ÿm(2aQ[[ƒ1ïÂM“'#’Ö8Vœ3»gwÄÒÕ[qLŸ¨(ÊÁ–´] Aú¶Í(©ÄÀ£"Ò¿«–/GNI zô€î“]/Ë…»2ðÛ²å((­Ab»N|T©r¬X¶³~Zùsg#9!íiôªE«ŽØY^Š kVaóæ-ˆjÕôAd½‘’«)/ÆÊå˾+ÑqÉÖÍÃi(I;…´Ík±zÃ6„EEaŦ´ê0 d÷óû:ò²Ò’U€.4# Šâ°aï~¡·“ƒ)ÀÐHøU¥ãÇ3P^\‚n}!9ÚSw¢Ï€Á§É6éÛ7"»°[—ÎÆÄÄ×?/@ÏVáØ¾u=“ü1tØ0Ôä§bÁ/¿!0:#ŒÜ-KqÏ oãµ÷ÏDêÆåøì³éh>ì*øÓrš¸ä¶$׌Ê]‡¿Î§Qö4$tèNϪhj-·9Ï ~TÕÒÈyMqoÍ<ùÿ~£²i½Ë¢ÝƱ´N§ºóÚtØ:‰B@! „€8@éº[W2`Ãô”H·ŸÑçÁüQ]^†¼¼<2Ö«‘žž†ú£Æ¡OŽZ´pçôë×§^1_~7Ï=|®¸òZÜvÇ]˜6ýøà•GÐó”±65WËïJYƒ{n¾ 3mDmEnŸp>ù~>òvçcãÆõ4 ´³i*ú´¿Á®Ýå Æ·_‚=÷ fÿøF „÷¾œ£G‡ªŠðÆÓ÷bܵÿBjZž¹õ Üñø«È/£á&r«æ¡]ûàƒoç`ÁÜYxä•ihðu÷‰lúm.† ˆ´kæèâ„€8<Xcâ@ íñø}÷cME÷¯-Ƴ?†Y ჷÞÄöì"R¶ß~øXµ5 -cã0|Ô±Ôጭ«fcôØsP넬xí?o!(&»·þ†Wßüù çŸ6þ4]ÞŸžsQq‰h¿ú¬X4›ÒÓ±dÎ׸塷Ñ<6³Þ{ŠŒù¯QC 6ÎyiÎŸíø‘TA3E¯§ß…‹.[ªÐÃß'Ó:÷Ò€13–Ðãµ9é”J³xú¾8! „€B@ßGÀm-þ¾ø)–"#¼ÚË”HEª…`Îç/áÆº]ˆ ¬Ã'Ÿ~IyƒÛŸ°ç›ÒptÂðøƒáŒQý¾v:÷§Þû×_<ÕùÛ1þØŽ4ŠŽÞíZâÛ÷_Dj‹‘xïÎ[Ñ22[†à˜ëÈÀ^ý.šx)>Ý…Ûï{’¢iè¨ «~ÈÃÉ—?ˆgžº ­c‚1r@;<úél\~þÉÈ\9“zKÖg`P÷$L8k4Žé4?Ÿ<gh…7:ž{N¾!~õèá‡e´XÓvI]ûヿ@\í°DîPŒˆÙYËAý$PSUŽñ“ïÂ5W]ޏp_„ø^н:#e{ ÚGc-¾cÒIÊY‚a'œŒÁýz`eöb<7íœ?öXÔ–ä`Ô˜qhÓ±3Òª³±cC)ÛaÈ ‘8jÐ têƒ.mº ´·NJ ÙD~4µ~;¶§­ÁÔ‡îØ!]1¢O¤ç•‘¡LCÔþî/Mìg1~—Ûµu>Ȧ^æÔ;1ȬvÒt÷h~Ó(ú%q´L‰FØS+É0§ï°ñ"ìØLÿó»tVòG! „€ÿ‡‰Î/s¼Y›õfW¯~üŠÚšjtzîšz'Z6 Á½wß‹y_¿‹sny+¾xFžüÑoìYèÑ¥³®”¨èæáx ê×ô†Ð"N¸˜fŠV£®ª)·!¤Y¾øø=þrŠ2VÓË®ª*kŒpÚ.((ت`šr_Có;‡HÆy¸öëйbšƒrÒ+}k®¸ûôì–¤ÃZ·ïŠ;¼ é9ÈiÅ/±CpשǓqÎÁ~ˆˆlŸ|ÊÔ`jÛ­øÇŽ_d…~(òÐ’?BàoNÀ—Š âŽÛ¡çìbãZ!° wÂÜ¥‹0»¨’{ART R·•À?0ˆîvr4rÞ::ŠÏ•‰% ANa òSR–L7}ƒ~ÕÓæ—ì|üüÉø&‹—戇„F ¸¢õ*í“âuxtë¶hÞªÁ5B}(îefÀ»²çÑÈx&?x¬è_c>§bàݱ>8º ðÊ…¯óH€ z™ ¤«Kþ! „€Bàwø §¸›×_Ko¿`ý=b¾ò÷ÐÆ¹^ƒ^S…îÝ{ãè!Э[wôêÛ.½9s¦aÛŽ\úD’?hê{}ÂŒ]Mm-ªkèWEC:äT]-êéýþ´Îw@®©®GŸ^}0|øpÕ¿/Æœw 6ýô:¶n†rZkª7‚Ó‘õ¦L¾¨©©q-«ôEmˆÄ/¡lTÓË*½­’˜í|(Ÿ}Í£\AaQt÷øQg‚KÔD1ÇC4½]^ž p9©ôð¥žÂGn| KVmGI~&¾ühZ´KD—Þ½Q“ö ξm¢qVÑgSÒR‘W\Šò²b”VÐ7ÊÈ­Xø>X×@›aŽC¯N È gWã%…E4BmuLççÒ³‹u…ÂüÿÏÞuVUdíï¥÷JI`轉ˆ"ˆmíºVTìºvÅU×îZwuW]»kWÖÞÅN銂4é!!½×÷þs澓 ——’pr§9sæ»ïÞ;gÎħtA‡„ ¼ñ¿OPLÊú·¼Š'_œRÖáÉÉ€¦k¡+½çJ«<àÕðkÈjþÍr %Þƒ×ÇypÛh`Ì`ÅFàMúëʯ:~íú-èÛ¿á[H>e«(Š€" (Š@;C`/*èÛ«ªRªKKhú7)ªe¥%(+çuÜÕ"¼¨(ÛrŠÈ’SòÒb,œ?‡òº¡cb‘{QC¦p±&±ïÓæÜ)‰WU× 4"š6…ë„å›òÑ«ÿÚLî@ 6ñÑdñ"k¹‡Žvû‚:á%åÔ%ç£2¢|‹´Ìvž¶_ž¼k:V®uÖ·çlZ‡go{ ))ÉHꈢ?Åœù´®\MYV®X/ ¯­ëWã›oç § ÜÈß\ÅÁ0Ö‹" 4 yW4VHžÓðè¸úò#ñÅ»¯áÁ‡þŽšô 8vü(DD%à€‘ ¼[*úõN7ì:t€4ZŽóÙW³Pœ€”±&ý€±Çãäý ñܳÏâó9?£ï€ž CjzWçHG¢JíÕq´v&câ: %­Ž9á4”ýö5î½÷¼õÅôî7€6¥s$kj;Œ;yáqà 3( %}­;¿ëGàï´æ|To®ž„'üg:yEG±|¶¢«SE@PE@Ø9êÌ»;W~·”bKËÒËpÓ-ŸAÝP^œ‹¬âpL=÷ „DÆàó7¦ãÞ.¡èŠ­Vá©—ÞÀ¯Šiqظ¬s—f˜©¢Fš¹yý²N‰ýƇ"Úé½ ˆN"§^t>žx þ°z Îúì˜ý VxÓðÌ£!-}N𾋛n댃Fì?LGÊ4Y¹hú»¸j²È¯Z³ÄÐA‡ãŽ‹cÊŸ§á/SŽÂ7oþ SoÁáôGt\(.zøœrÚxdÞ÷‚K²pû?žÁŸx‘•ú°¿-ø‡Ÿv1­ÌBr| ,Ô 4H}ê+ŠÀîEÀýœ‰¢ë “Á¹®}Àß<48XPRŽN)iˆ‰ EqÎüºr=¼ðt‰#!}èÐmnºó³±Ÿ,Á³Øuí77ü5¹eHH:›”sž%„3§LFx/Ÿñá´ .¡AD‡âèÓ.¢òÑTO8n½ÿddæ"ž–ëð $;» n¹ uáö ½ÐÖ×f§ÑÓ?V³ù-jfÝÓxi1ÍÛïCã ÿù™vtôÑNö\1—è+Ò…ò6ñ˜*Y÷å˜5)O©êE@PE@Pšˆ€‡:l¢Éš"Ò‘ãÈÌ™3Ñ­[7ôëׯ¶ƒ×D¾M"“ºŠr·áçeËPXZNõPQ²ŠWPg¯O¿þHŽ Â¯ËW¢²š×¨×q&]Ó{c`¿Þ%û?O9]¶z ú†¤¸p”fcéò5d)ï´N41Ó[Ž¥‹BDbôëÙÕÈ•¹q ~˜·€,×¥ˆŒCÿAC0x`_Z³Îçž/Á‚ÅËàHƘCF¡²` Š|ñ: ÝtX·m^µ›¶ÑQKÂBê¤Ï¡µ¥+×eÐÑH½hêüaèÒ'„òlù˜;û;,ùm#ú „t”Zx|2Ðzù0’=“6Z±.ƒiÚ~2mX'x˜Â»ñ"|+**°e˲ð§ 22²ÅêÛ¢++E EÈËËŸkï<³M®ŒÞ+3ß}Ÿ-+ÂU—_ˆnbÚåó´.8ïe`­7ïK§Gòò‘¤y/(¡½£Ótw2¬…¾„,è«i¯¦Ôàð!λœ•Ž&c«„Š@;@€÷“¦s™™™XHG¾Ž?QQQfi ¿sÔ)Š€" (õ!°WtJ”Çúl( ²ÎNwój,ÞïóȦD}R±)ÇlZ7¿Ý+››ûöq©‹ôÍ›7#55Uôí!ÒØ>†€<¼\%++ qqqˆ‰q6‚”<çyçñBÞÌŸhç}ÄËTh± Ÿ”{²r'ÄFÓòç”™&ÿòòr£Ü³²Î›œ5•?+»´F”?ŽøóÀOmµùs˜ÛÄŠ¬[~æÁ²òTXæÍ_æÏmâ5¬nù™?ËꜙN;“B̃MáÏØ°òÌ;­ï ^OëÆ211K–,1VB–ƒã,ãªNh‹ì¬RÍåZóÀTë“ÏYã¨ßòK‘4Ž7.»î¸áªš¾€­~D€û¼ùä/¿übö¸à>€:E@PE )4º‹{§N0tèÐZeŽ•S±l³Ï+vÜá•N–›Fâ’ß”2͡ݛü¥n·ßÚäçAÞ‹|ácÖx €ì{Ø”ŒÒ(­~ßh‡·5܉–“ß¡<˜«Nhkðû‰tÐ߸q£?âˆ#Ì »ôÚZ›T^E@P=‡@£CººúÒ¹œ'añãë.oÓsØnót§™ÿEêßΓp}<ì2æï«ì1ÃauŠ€" (Š@SØAAç™|€ÜLêKºúòëK—r¶ï¦uÇ™6PZ}<„Öí×Go§7%,|…Ö—ô†üúÊJ”ÖoΓ2õùhì4³“òvØN3D®KsòmZ;ìb¹v^Ce˜®±|7M}ôvº„ÅyÜqIoª¨¼&a·ˆ¿ÐʳÓê£s§»ãÌCÒÄoˆo ›Þ¶é%,Š\jj*xê(ÇYygßî»yi|ï À÷Eî] øžÉ+3Ý»wGzzz-i ²Ò¸€;ÝD#5F+ùâK¹†üæÐ6W¶†êµóš"C}4vº¶ù»ÃõÑÕ—Îåí< ‹/üÝqIw—o,½)|¢©¯¾@e8-Pº-£†E@Pt;³5… ˜Ž8üZ“ *‹" ´8ÜáåiÐé¤Ä±‚®®}!ÀVtp‘÷¾øí«•ÚE@PE@PvD Õ*èFùvÉëNk}£Ò>šÖFkaIy¢?uŠ€"в°ÇK7x§Y²AÏ×? ¨õ½Z‹ÖÊOÅX·n9ÝCf8ð½âûÃqó¾ݺuψàt÷z/[ëÝU¹E@PE`w#Ð*tê_7oJ˜S G‘çieµI ²Î4”·S¿ AAN¥M.·(Š@sàçŒÿØuóñºÏ¦¾¨”•C©CÅúâ67­×”°]¯›^òÄwçÛq¡Ÿó8ÌNÚa"þ‹›Žiì4›VÂv¾„Ù甕+Wâûï¿7ÇNòÆ”œÎ 9¬°"ÎŽ©ìÓ§&NœhN˜¾ê+Š€" (Š€"°¯!кtîlSçûŽÛ6®ÂœùKp„†…"œŽ «ª,GEy<q8¨Öü´ɽ†â€½Àqî¦sçÏq÷Õý&7Vò¹Ó)OÎs,:¼NÒé´nŸçtP%éÝ|ØTSUŒŒLDÅ'!)>ÆQükb…Ÿ”cêE`×àçIž)çØ5/ Ї° ~˜w›’nK*uJš;.éì7”gÓ 7TVòÄT^Ò„F|wºÄÅ·é$,¾Ð¸ýúò ÀÇŠsÎ›Š›o¹½õ¼ðü3˜8æ`üã™(ó÷ç}ñ6Îòg,^ù;æÍœs.»KÖd^K¿ÿ'Øÿûô;¼ÿò£8ô”‹°hM&åáËWÃ3| gå$u6W/Àå×=Œ¬ì\¬[±?ÕìÏ?Æ÷Þ‡ÙKV~›ÅÐaÃ1{ù:ge‚ÿ«S]CÀë­A”UälÀ7ß.ÂÅžûuÇIgœ‹¤­K°bÝf§¿•}×jÓÒ;‹+é¼Ï«_µjxŠûêÕ«‘••µ³,µœ" (Š€" (íÖeA÷CÌVtcu!‹JHp0*«*QRTA UÖÞ¶È”l[‹ŠJGU®./F÷±gâÖ¿=„þ)Qxý‰û1ùª×ñí’0vXo\~öqØéOã’óÏDÇÊ ¸eòi8÷¹opÞñãPSœ…š«ÏÀÛŸý€>“Á _ƒ#n}÷\uPž‹.ÓÎÁ?^xÏÞv¢"ÃQe[zØŠžU„àÈzÔÉ8÷ЧpÔÅWáÔñ£P]áÈžŠŸ}}R“ëZÈT§(»„€èÝ……ˆê2i‰±†_xT†ìŠlJggÞ)~ß$èe"ÀSÖùÍkÑ{öìiÖ¢ó†q¼Y¿ëuJû½Z™" (Š€" ´bš¥ ïÉŽwØ‚<ŽŸ7`ãÝÑ=þ8ãÉùñJ <»ê¦œ4 ý»&›Îx*Mq¿ôÆ©1¤ÉïÑ£/&OB9m2——» _eG¬þ/½ð;ñöá—Å?`À󰞦^n+ï‡kŽP®>*ÉXã>ybmnTЍØ8„TÒæsl‰7âyNò#"2ñqш!KÉa:Ÿñ{âœó/1r˹5•ßIÔ«" ì ü>ðVWÑ&“Ž×Ð’ÿ¡ »ÂZËî"üݦ÷!ïØÎtŽ'&&…½¨¨ñññ*è{òÛ³‹ÍÕâŠÀðïW" (Š€"ÐTš¥ s§wo¹`Þ‘Ùå|5Õ¤ïÖ}ø*Êi—w¢‰ ¿ªªjê°W¢¢¢±‘!¨¦ÎapH¨Qô½t¼OtïÑè?` ºwˆ@qi%nzâ;t§uä¥[VÑZvR¶ÃCkk !«O$ië¼Þ•§ÔÓô{£¼s]ðÖðŽñ¼Î²ŠV©7ØÙdyëVÚ×V¡E@Ø ä”H»ƒWo…ß6f¡kr ²3èh¯ ¸þtgÖ ¿%v|ƒìD…Zd§àwdII 6mÚd6ДÛåìó†Ë}nˆFóÖŠ€þ~[ëQ¹E@h4KAß›Mø#‹º °/,'%p§\ʱ_MSäi«(ÄÄwDÉêyôgršŽ^ŠòšP2˜'ûî}Ìš÷ wG9^ÌŸõ=ŠÂ—ERÕЦsëQF3ëcI‡_¿f ¶–W¶ðS…E‹QX\fxÖT“2Oë.Ë ³ñëokBVü´‰<ß9NÎPéEPv à :š‹Ö¡Ç¥âä3OÇcÓCÈŧÑ&q/!mâñ蟞â°Þ‹ƒ‹;Û¶öRŽß½üÇkÐy×ö¡C‡7…ã]Ýy#P¡i/mÖv(Š€" (Š€"°³´bÕkÇÕ%|ÑòOQc­ýfKtîºoPZy‹!*+ÎGvq”Aey6eÐîÍN’—Ö?~óÙ,”Òð‰ÝcÆÓ÷⇠À=ÿ|}S£ñÆŸÂØÉwàê)“píƒOàðSÇ#è¥7š·çß8ï~»„,ñaØoÀ(|pɉ¸3Þ‹ýhCöÿÜp3Vâd3]3(.xξånl]6 =ÇÉGŽEaÆrpàX¼þÍbœ1Žt:๸<¢ NPv^öâ3ëM‚1éÔó™ø~øþ[tv Î=æHDÑ ¶Üêî; ñ.”©½………ؼy³QÈEg¿ŒNâàtÞ,Ži…ž}ÎW§(Š€" (ŠÀ¾†@+VÐÙêâh×èLãÏ?ÿÝ::@ñM Ç”û>Dì~=Ì=uì™è]AÌ7ð  ¸¹o9¢CœN^B×^øüËHe³7YÑO:çjüØÐNëY¹Å8yê 8èàa¦ðØãÏÁܯÓ1gþøBc1ká/=| Éë?j"æ~ù!¾ž»q]âé9³QIkÒ£ÂxmN¿ätêÿ6g— 91Á”‰íÔŸ~ü!zõJ3q£™kßÓ…zŠÀ®! Š\hD?öTúã÷†ó€©¢·kØîji¾7IIIFÙþöÛok7…³ù²%×¢÷ïßßl"ÇyrOm: +Š€" (Š€"°/ à¡¬ßÆì4×îÐΜ9ݺuC¿~ýŒecotšlyXBw|Ç4¶ÂlßÁs—ñ’Y§¤rl«ÝŒŽ-sÖÆtÜ‘ä ëêsN½®\W¢[u‹D¥ÎŠŠ c­â5Ÿ<­TÒ[¤Reª´ò –Ó~=ö¢££qñÅ›éÓ5´·DM£–'›i=ô¼ÒK®v¹‹yÙQ\Þeü °“8‡wæ¹°ù4§¼M+añmYì4N·;Oââ»i9n·×ÎoNØÍߎs˜×ÃÊ7Ÿ{ξÔkçs˜wtOKKC§NL9^«Î´|Fº”1zQÚ|joŽ˜™™‰… büøñæ÷,ï°6Ò SPE`/ Њ-èÒ9“ΟÄ9×îä±VÎ]BΧÿÛåIáÁÊ9oøæ#ÂÚ©¯TÞlÌÎSf)™ˆ¢îL¡%Zêì›:9Ï6c…žiùoÇÁJ4”ެ¿¨zŠ€"°“È3'1› ê Ësiâô¼g=¯&ßÿLrž¼Bç(ÍÎ¶ËØá@´všM+añ™NÂâÛe%ìΓ¸øBÇ~ 4;¿9a7/;n‡ccc1hÐ óîätyo‹<—2—psäQZE@PE@PÚ*è­½£T+ŸÓó®½'œîØpj“¶ ËQHç3EYç<Ê ÿ¤ÄS—_Ž{cÃ× ˜á€:¥3‰–ûþu<¸Éâ\[{DõE Ùð3ÆÇv%$$˜ç㬬»g¸Ô=‹;V!Ï2çØawÜÎã0»†øÿÅ.k§sØÎ³ÃåÙ|Üåì< ¢á4vÚˆ^x¹}¡µùIšMËiÒíúÙâ(4œî¾—6? +Š€" (Š€"Ð^hTA·;Pvxw"2·ï®Ã®ŸiÅqº‰“o+ån~—rì×òá²ô'ŽÓõubëœÔí.ëÄ™§p ̧.w÷„Üm”¸ø\‹ÈHöÝ#…rQv?öo¸²²}ûöÅÀÍ|¾6çÛ4¶õ¥Û4vئ·Ã6MCá†ÊØyv¸!~vž]ÆÛ4v¸)4BßZ» ‡å½bó°ÃBߘÏedf’¾£CKó[#üÇ¿ay6$M}E@PE !UÐåC#~CÌv%Oø»ý†xºi%n—‘4·oÓ˜°QÈwHõgÕ}lÝõñ•t7ýžˆ»ë–8[¤8,q·¿'dÓ:]A€×t²ã=Ž8⳦“;¿ááᵿë]á¯e[ü¾+º¼«Zt*‰"Ð0ò›e_ —Ð\E@PEÀA Q]:H XÛE@:¢ Ë=•ô¶Û2•|_E 44ñññûjóµÝŠ€"ÐÊï«|w[¹¸*ž" (Š@+B A?0‹-2;ënÛ¶ÍœaËçÙÆÅÅ¡¸¸ØX¯xgp¶j1-¯ ˆˆïÀË -ïÞž†Ê–.^kÈV/îdón̼S/Óp‡»   –?[Éx*ë®ðçsv¹n–%–™eç(‡¹Nn›[~Þ-šee™Yvnï<ˆ?—å¶2ŸÛÀXq[›ÊŸ±b>"?ãîÆ’×ݲüñ粫V­2ëtY^»ËØr»›;ýŽëã2âïìïygÊ×W¦¾t–­¡<‘iØ õ•±Ó%,¾ÍKøHZsü¦òsÓ5§7í®ðj¨¬;ÏwËᎠ½øî|+{ ù Š¿§êÝÕzš"o}4õ¥ïŒL ñj(Oêjˆ&P§±s¿‹Ñ6¥ŽæÒð·™¿»Ë—/G^^ž9iBx¨¯(Š€" 4„@ƒ :d…2„Ž.beÑöY9å8üd„˜?|¬Àºií8ç3=;.Ïk ë+ÃéìšËŸ•Uá˾-·[7ÿ†h…·™ë`ù$ùrûœ.ø0&üg·Ù–Aê³y Î>R†ãŸ}áËus9áçö™–ï%(n;˦Nhðo›Ÿ‰æº-g×#ÏU úw»®=®O~;]Ââ×'c ü@iõ•×tE µ"Àßfþîò@=ŸÕ)Š€" (ME ÑsÐ{õê…=z4•ŸÒµrø;êE@PE åÈÍÍÅ?þˆ1cÆ€gâñ ¾ ¬·\­ÊYPE -#Ш§A³ d jË ßWdgk”txŠ>O»ãi÷¬ s:ç«SÚü»åå<#D;»míî5./¿›xÆ/9ÒoOãx)EëB€ßO¼ Ž-ç܇’#[—”*" (Š@kE QÝ-¸*tnDÚN\îø,¹n;-QI÷UXY“ß,ïÇÀqÞ£AöbØWqi/íæûÉËsøÞ²’Î :ßoû¾·—¶j;ö ä}µo´V[©(Š€"°;h–‚®šÝùžçQß}«/}ÏK¨5*ÍC@9VÎyuí VÒy†„:E =  ßÚöpµ Š€" ì9𥠳E#óÐf( M”vÊñFiÖ¦Mdi¨L zZ";úüGfÑ_­ãtŠØVCçJ«¥oáÀÞ¬»…›¦ì&# Ï#ûüL°åœt~ÇH^“™)a«C€ï)/Yàû*ï¼V'¤ ¤(Š€" (Š@ "Ð,½¡µž~w{Qý‰RŽ;\v':`™í9´hLä™$n* 0€ t-*T=Ì÷fÝõˆ¤ÉŠÀ^C@”7y.Øçá5/ªÙ’¿×ÕŠw ½o;›RE@Pv€@3tŠéŒòòªêÚfs'98$ÔœõÌ›‘m¯€›N–·ÙÛ²€°XtHŒÁ–u¿!³8ƒôA(<┩ei,ÙÜÑvwÀ™bû4¶|[å((:¡³s%OÒ˜†ÓjhÃ4>{=42±Ñ&[ò8bóœÆU‹Åݦá26ÇÙÙýÊýz¾L#·ËqQ;Î¥£mx“zlÓ­È*qÛ7•ËÅÈæôä×,›‹ãzwÄ3o}†²jGãçr›VýŒg_x ù•ÎÔYN[±ð¼ôÖ'¨ô:Óá¹>[.©/<‹€óÙ±ÏÊ}ƒôþ|iç’Yáµ÷¿ã¦œ©Ûâ!¼©Ú©ùRŸÓ*i¼úŠ@ûC€—Ùðoõ¯‹ñÖo`ÖüŸPQã‹ì‚"Z56¬œé3¾C~! HÕ5Ž\>o5òór‘O´\“#µfpÜ[ÍVú|Â¥ÚäÚÁVûâRØðÓÓÚ*ZwÉ®ª¢ ùùçÁ“‚UK¾Ä Ÿ-DqY5¯"¾„Ÿ–y•–U0!9N÷Mág|'C¯Š@›G@Ü ágaÉ÷áÆ›@nQ1^}ì.¼ðöç 7Híóè.£qE@PE@PE µ!Ðàw£ú%fµ/<:‡4Ãöß®¥[0ýÁé˜9o=ÒÓâà KÂÙR>¢?<Á>dlXò’8 éÓ…¦Ä‡ ,„¦¢ÒôvÒñý'ïâùWf ´Ê‡¤®ýqÙŸ/Þ)˜÷Åÿðíªr\q鹈`Þ‹oÞ K²£qå…DÎúåø÷£ÿÂÚœRRæ«qÔ©gcò©G!´²3þûÊ£ãY]ˆ·?ù×ÜvØx8–w®™]ÖÆÕø|Ö <ÿê›Xô髸~Á2ôï>Å[×â­—žGÞÖ5¸û–›Ð£[7 Ùß~þ-–ÌÍÅ7^Ž°Îƒqã5#1¨O=ö(®ÞJŠx%FO:SÏ> qa5øò½7±xÕF„úÊðÞ[3pÐ)à„ £ð뼯ñ挑Ð÷\}õÕ;¢/*‹²0ãÍ×±!ß‹òœuøàýopô¹W`Ú•ç¡xÓ<ûØÃXŸp$®»r:Ó ÉNF馥xäÑ'‘_„ìŒ\œ~Ù•8óÄI'­~öÇ/ქù¸ñú+Ð!²î6Û÷ÔAA¯Š@ÛA@f¬ˆÄ< Ç®ºh+^}îqœvŘ|äX?º/.ºî_wÈ(ôOK¬é"åÔo[Ô70Ó¶Z¡Ò*Š€" (Š€"Ð8 ZÐm»3‡Ãhö§ï¿‹ï~€·ßz/¾üVoÜFÊv8†4·Ýq ®»á OõbÒ• £˜,ÂTÃâï_Æ¿n1Ò°¥§’‡‡«|‰±Çþ‡ž|>þvÏØ+1öÒ{]Rn]Spëµçcéª ¦\YÎF<}ÇTÄvî‚Ê‚­¸ï†Káéyxèï¸ñÏ“1ýü£ñõÂÕð„cͼpþŸþ„œpâÑHˆ ó#Aê)[ÏÍtX`Å’yXÑ'xŽ0¯øŠHä˜)~àÁè×·7Ž;édüᘣ0lÀ Ô‚ãN> SN; Á9xüÛ±]pσáΛ¯ÄÌÇNÇ;_ͧúB°å×9´à&¤:ôÿP°èeŒ=l Êzãÿ{Â×cÚôPLà†yñý{×â–7bÌ1gâÿûî¿é¼ðΗˆNîŠI§þ i½ã´3ÎÆ©ÇŽEIæÜsÍd¤tî½÷^,85å…(£vE¹›0gùT»føMò†F/Š@›GÀÿ’ÊËÊDyH_<Ü<ìÞ{ŽŒõ™¦‰:0Õ¶ï´.ShÛ÷O¥WE@P¦#PgZmB™à0|ùÍÑ5žŠ|l+ CÏ w·^=ê¬^½6d£:(yQ\NÓ®cBŸ‚šU45<*25•˜ûí‡8ç–'pΩG‚ôu\zýx/m¬¸G<·O‹¾^€±CÒñûòEx½âüsÌþØ´òKüߌ_ññUýˆO9â’S0„úå³~XЉÃÒ‡ü÷]\7åD²ûoï¸?Ï£¾ò|Ìþê3~ØRàÃÑØøê¼ëðë—`tÿ4Œ<`z¹‡1 ŒØF3Ò7çãð#'!šš³véW¸ñïÏáÕ¾A0M;ŠN$Kûx|øÙœuäþ Äÿ~:ñH#Ä–e§ ªï¸èü³M)1—â•[ŸEiè14£ 8éh¼qÕ41n¸¡ÿô…‡pýGspÉéGcôèQø9(GM:Üäe¬\„¾^G.ŽBTLžxÆ…1ŠŽsÂ¥xóÈ$ë9·ÚA¯Ï™úŠ@›F@~Ï啎íŒpÿàÛÕã“cPaojIiî÷A›n|;Þm1wÇÛqÓµiŠ€" (Š€"°#Ðd;¶%ùY¸ã®[qûù'’ëC õ‚y ù¦UKp÷×`µ· þ0ñP– {‡x¢ñ+…´¾š×B³3STƒƒá%ź„Öªï?°¯QÎ9/<¾Æ2šOkÙ)†#O˜Œ‹žýWœ9 ~˜…«¦žŒ. ‘X· è3Kç~‹EߣƄô ·bìÈ^fý9/]ïÚ¹£S;Mõyj%á©\¶nZ‹×þõ6RÎLų¡9ÈÚô¥þŒ…K—×»×|åe¥@D åùPI}^O^VZè¸ZsŸQŒå ÀÆ%ß™iúžÎ‡á̱#ÌzùjZCISD=öyƒÐ9)Aþ„`šçß=>Òä€<¡!lÄ¥uX‚Ò’R:˜ÚQSÒ ¢Â=èœ>_¿÷2n¸â\}VN<û|\yÅåwà„Pc; Öψψ棧Œ“!•¨¯´!ÜŠšÿW˜˜(”g­D-wéBíñÐó»auziZÇ\ƒÓ…Úû‚¨n‹¹{iþ€¶QPE@PöMš¬ 3<¡Ñ ñwt=¤œsª?|õ&†ÆÏݤ¨ lY± æÝI›¹9šhmê#ˆŽe §5èl£Þõ¯71ã¼4E{õ²é9ßùÏ?ÿ<Ö¯ÈÅä+F›œjÚL1]qÖù—b¿l‹&ÇkQI¯*ÍgAáóo¸f²xZ;)æ>šî-g²¯X:%£ÁYÇÊŠÞw$n¾èT|òõ,œûÇ#LŠr mFeسí7¥  Cd”[dD$æÿàÅS¯LÅðžüt¼‹:­Ø¯©€/(tú\­‚îaå›dá p¼ÈˆˆÚãÚjH‘ ­³‚o\·áለ£uö”g”s®((,ãOø¾›p¼ùÞ˜6õ,üêc|—‡‹ÒÓüMU¾­#°oÈïˆÙ7Z­­TE@PE€J7Ùù³îT:ÍìŒLSÕkHËd4""+6ÿ‚õë~GaxÞ|áq|øõG˜n:Ï^d¯B^’³cy%)ÃK¯€'<£žˆ ÆŸŽ‰ĘAiøàÅámÏa¸¯Oº‘*)­Ž<|N˜z#κùŒèï¤÷tŽ+»ÿ÷Ô8\>ù8DzÊh@àGtì3ìŒÜõK‘T^YÛ2g¿ó:E¹,w#ž¼íR\rËg˜:Ù™~ÎÄc‡vE×A‡aÞeç¡o\¾øä%|õÕùÖ³ R»vA|Rg¼úð]8÷¤ÃЫ{*Â{`Ú9‘øÛÃO⮫ÎEë~Z4>Zc~ô˜Á(ÉÝ‚œ²Àû]Ya2ry ÁIàéùŸýøíOit(|ò0kÎl Ù/ Y¿/űçß‚¿õ5b"Ȳçî ç?];& ˆv_²øgì?vz¦tDÇNd7ìžGû8·töGÏáµy¹¸ÿ®›Ñ1ªNé׎¯Ü õÛµ¿gZÖræÅ×ãñÇžÄÝw-BAa)n»ùr¤%D˜A1Ì iÞÚà¶ ïMÖ&*Š€" (Š€"`¾“œ éô®]»q¤¨vèÐÁ£¶yk :ÑFeû÷Kw¬²d¡õÕ:1©Bׇ k×mBhd,w9ôPÄGcËÆ,ÄwD vWälÝŒð|ÀP¤uOǰ©xñÙ—0÷‡ÙXºÉ‹'ü+FöëæL…' tLTr¶dâÌsÎðދœÖ’oZÅYQ8ýŒÓ’C–ñjcY‰‰ErHªÈ:?zä ê'þý4~^½ Gˆþ½{!)d ^zåe’µãÇÇøÃÇcõœwñÊ;_`颹˜ñélŒ7 ýÒ;cÓÆˆMí‰ázÿÃhcð ÏØ+))AFFÒÓÓÍûj‡Y@m¬]*®" (Š@Ë#à¡÷_kýñ˜9s&ºÑcýúõ#…ÙKk¡KèØ´PÚä¬RälÚ²â|lÙº ‘±‰ègÎ1£éá¡dbçr¾ PDG†£‚ÖtW‘Á˜§^óúu>OTÁèܵ;:×–¬ëT›NMÙŽ!‹/;餱O½qRTcÑ=]d2$¦“.r ½?ÇxœFÊu˜_ˆ:;HùeÇé!´Î;µ‹¬auÒ¸Î4úç¥uí¡áQèÚ=]’ŒÏ˜H»£ºõìÂ?ñ~AxSº‚Ü,ÄÄ%!>þüÜXbåÇ8]c$‡tª·K×ý¶¯×Ð{¨}µmdEIaäÔ)í þ]óÆ•^Z."¿q¶^ñïÞwÜM/q7çðÎÈ"¼ÕWE@PE ­#Ð ÝéüRï©v£5ÓxŠ“žv-gÅÚés‹ÃA´K9wŠYùd-“;̬”›Î4…9Ζ/SŽ ™Ê²‚ .Ãg—ÕÒ˜žövurYé{ywâS»s9gúÃÓkÊ ½“ÅÓà·—•es6º³x‹¼DËå¹Ó&Û™—ðµÛíð&+9n‹-²‡Åt´{ž@L²3TÁ£ïŒE],Œ Æ‚qÌ|Y qptd"Yhs>I3•ëEhðïž×ü¬±«õy#F—³ÿvØ&“t·ˆÆN³ÃRÖN«/즵ãv˜Ë»ãMåY;½©ü+×T>n:;^{ýïHwWE@PE ½#Ð •½;¿ ¿ÂXX¬¨‹“˜Ä²*‘>wÞXÝÁ5Pg½rú™°âˆ%gÛ²²lîšÝò;eOW³y¢«•ƒ”àð 4”Ɍ۱ͬŒ8Ê·ÐØ[Iß–S,Š’§¾"ÐÖàß>b•——›u¼^¹¡ç¡­·w_‘Ÿ^Bh)ßW¾¿êE@PE@Ø×h²‚^g©Ý× ÚCí¥ŽiK8VZÄÚ(÷Ðí·D½ÊSh)ä÷NGò~•••ÖL’–ªUùî)øÅ.11u˸nyoí)9´E`g° ùw«¿ÝERË)Š€"°o"Ш‚.»}ÛÙ}ª¶Ûj¹w¼/[æÙBÅNÒÛnËTò}øøxÚ`±nO†}‹öÜv[ÙiÏíÔ¶µ/doù[«Jzûº¿ÚE@PZtîeee¡G(**+x|ü +íìó‡Ç¬':væ[?„F|¦å)‹ö‡ŠÃœÆy6_.Ã<˜×žàϲs[›*?ÓóǶ©òï ÿ@Xºñ±ùÂ’±ekcNN޹¼{=µÆéÜ·ã¶í®N±›—tRlþ6v˵;ã-Q›§;nËßPžM··ÂM‘¯)4;#SøÚ4ü[²ãõÕ)4â3„Ùg×T^†¸….»C¦ÖÔžæÀän»Ä›ÃcOÓ»RvO·³¾úÚCêk[céÚ.iÜ·áom^^ž9‘@öÆxj¾" (Š€"Р‚ÎðüôÓOèÝ»·9Ç“¼a%ËÏÏ7J^YY™Q°¹cËSMùƒTPP€ÄÄDäææ‚˰Ÿ`”C>^•Nþˆ±ÂÏSTù¬uþˆâÏkùÃÆŠ$V¶¤ñÑ<Fége[¦ÀržÈ"ò³ŒÌ‹y ®‹§Ur·QhY6æÁ²2OæÍ_®‹.¸m6n;Ÿ7.üYvVœ+VŒ»úø3&Œ cÄX5ÄŸ—b%›+íÂ?–,ãÒ¥Kk×벌|¿)膡^VŽ?'êÚ7ö@^ûn©¶®½!À}îÛ¬^½ÚôTAoowXÛ£(Š@Ë!Ðè9è]ºtÁÀBj[—d”8h’çö›C+e•‘4¡_Òm¿¾¼úÒ¹lCy6ï@ᦔ·ˆŸ¤í -(ðAii©hIII1ƒÜа ¬¾" (Š€"°{àï+œoÙ²‹-„ ôôÝ­rQE Ý#Ш?0ìtô·íþÄJÎ÷’ï£ÜKñÛnËTrE@„è±Ó¸@èhš"ÐòȳÇß]ù·|­Zƒ" (Š@{@ Q­¯ì¤ÃÇa·%ÓÜ®)4RÆM+qÉ·}É_òÜqIg_òܾM#a7;.t¶ï¦‘¸MS_XhÅ·éÜiߦ•°;ã|¹ƒÀ¾ü1½¤Û÷VøØ¾ð_ò8ή±òBïöm~vØM'ñ@4’&¾ÐÚ>ç±kHN7M ~6äÛiR§äI¼1ßMËK¾øî|;.4nߦáp}ù’.4ì»q´i8ßvî>v¾¡©eê#åØQNŽ{I÷ ÈRD¤¼øRÜŽÛa[îüsžäó^öÞ¼—…(îBÛá%tMñí2vØ–Õnç5¥›fWx*[Ÿ,h%M|[.w¸)4î2âÍáã¦uÇ›Ãß.k‡ñ´¦Ò ½øÊÙiv˜ËØq;,üÜ4’^m}ôÒâ!õH¹¦ÒÚå4¬(Š€"°ï"Ð,}ß…I[®(Š@ó0V3Rœƒ‚l‹`]Ü­,7»CmóàÍ'y½+ofi;Þ¬’÷á"YQ°ËØtVE@PE@Øû¨‚¾÷ïJ (í [ ÎÍ܈ù?þˆ52—„ˆÁz"د,sÓ™Þv¬H7fu³ëØ´iø•ð®]»š2˜ŸÔÀ§R¬X±Â¤sž*é6ÒVE@PE u!°ã!Ø­K>•f7#àVv3{e§(FÙv¬æk~š‹óŽîŽÛžüj(iÍ’o0|`/<;ã TÐö¢ˆótûO”è†À>++ ›7oF=зo_¤¦¦š#+ùØJsç1 Ó²“² ñ×>6Èýg7WhêhÚôÂb ”Çiv'´>š@é"›[þÆY)'tF¾@hš" ì3Ø[½ÕxkŠ`ëëÞQt^yH0|”Ï®ºº×ÝröŽÐ° 2U ¸wãl®;n(Òô•JnZyù+ROPE@PE`/#°K ºc,âcƒ¶ßàˆãÜñsþå™Óذ´3†{7?w¼!|™–;Íä¯ëLïÈÁ.ç¦kNý;rÖE@hËã¹ÿ…ŸÔsßûYŽ¢mÞ5Ü8_Ö,ÿ :#ŒÞ‰ÞêJTUW¡ÂÑ×LkÏã"á«1ööà°ß9ÁÁÁ¨©ñÜrǦå2âl^’¦¾" (Š€" (ŠÀÞC`—tžÈY^V‚m´3pæÖ­È$¿¨¸Ô´†;~ÎPZ˜‡· ¼ªÆ¤±ËEù¥ÖçóÖ¦q[µA cÝZ,]¶ådm"-ßX¼~»¬¸K,DV~Q-›óq;\¨ª(GNö6³Ño¶Ä[QXâtª½–œF*Èíâ6mظÕÔÁ®(Â’E ±%Û©ŸåcZiŸÔÏíd~Ò^#“Ÿ–ÛÂNhœ²Ô~;ñðÓט°)@uV~:ÃD/Š€"°—à·¢ó,§÷Œã:ÿŒg_y%4—=ȯ/ý¦=òŽ»¿‘±‚^"¡Áô*æ¢ìØoâ›9""ååÎTx.*ï ‹³Ó˜–˨SE@PE@h4}n¤%?+¿ðEœ:¢¿Îû w>ô¤õˆPT¢²Ê‹>CGãÄãAïnM©5‹gáÑ pÇ7¡k² QªmÅa"îDzˆ§eÜ1e½^J§‘—ÍþµÏÿç!DP6„§ˆú•Ò✠Ü|ô‘¸éÛè”k”à`šöió2´úû÷脲²2Ôx=HíÚ«¥¥(+¯ rAˆ‰‰AX¨£ wèÖSΊA|tªK|èÔ}Bü²圔ôü¼\Tù‚˜˜DyA¨ái¬´QT8Y°DV–©‚¬Z>R²#ÂÃLe%…((*CTlâ 6¤à6•4!""œy‰¬nl óжS´éSáJƒêE`ï"`tÿ`ÙˆqÇcÕ²øæÛÙXL³lBãðá—³1öàQˆ wÞD#<Ý«ÂÌtw–<®cO|ðÞýHMŽ2 Ûn•¤ñ@gRR’™ùÀ¢|Û´.**24rܧ «SE@PE@h좂Nr23ûÅÚª;°yù柱O>õ"Ž8ëRз ~óž{åmT{BPæ Ã9^Š#‚ÒœõxîåwšÞ—ÏÁªÜ8Üuûuˆ÷fâž»îø³¯Á¤øåàå­ã¦R(û"¢¤ól›ÞƒFš¿êêjh © t,Ý :àZˆ8-¾s:Ž;6ݤ5då–<Þ™—ÄlÛ¶Í 0FGGÓ #çÕÎu–”” ¸¸|Ìš½ã{m¥PE@PE@h54q¥còR‡²°¨%¥Î:È*²XG&uÅyÓ^À‹o~Žm%Õ(ÎÝ€Ë.úY½=È[¿ SŽ8ƒ'…Ûo¿ —M=Ù(ãUTELB .¿a®½þ:\~ñ9xÚ¼3s®©<<4Ÿ~ý9b:÷Ä%W߀c†FãØ±Waí¶2„‘幉Wg­Çµ½÷Þsâòæâ±ÿ¾‡rÞK‰5W’Y4X•ÉþüU<ÿô“xó×ñôÇ›~2(<:Ç’â|Ãu×â†k.GÅŠ×ñÏÿ~`ä)Ï߈K.xÅ•fº~yY‘±bsæço=…3/~ ç^z5®»úbÌæüó¹·á Epîb<òêÇ(÷Ï^ýù‡/p󳑖’LspŵwaÂ/Âý÷ß³&Â7܃߳Ëh£ ÿ¸~.˜þ2¢:÷ÃÄC‡ÑÑÁ¨ª,Ã<…|ÿšy#\µš5Žf)»QÒe VšyÜŒ—™¥;ô.r¤¹ŸOwÜÏÎKLLDjjªQÔsrrj÷Ôà0+ïœÇ4윛“†E@PE@PZ »lA熘]ÐÉRdM¿­FïÐÝCKQ\^…p²~ø‡!f#$žÚ¾Š(Âhzvl\&MÍvÄèÑ{‚C×bíºßizú6ÄöLF>mÆÆ®º¼§\üœîd$‘>0==Õ Ë׬CÇÞ1ðUÖ <45%[1ã™Û1øOÏÓZõژ·î½úâÖ+ŸÅµþÝ“‰Öpô_ür¯[·áåyÈËÞŠ” N¨¦”;tïƒdÉ^½v i¨/49Yù(§¥âaQ1uô`„ÐæNÜáöù< …¯4ïüç¯xæÃ9˜xˆ³ ÔƒO¿ƒA§?‰ËÏ> §_< 7 ½¿_{>t Æ'ÿ{Ó_½©qáxãÙwñSò`téO›í• ¹sWü6û-ü´ú>Lê‚QG† n»ÇÚ¿¶5¡éxyöDÄ&8i¤4d<×Îy-tPZV¢ùŸ;±x³U};ÅœóH[áÚ¦(Ïtdd$ø¯¢²Ê(å\–§À‡Ó{I\søJõE@PE@Pö»EA§ž§é|²Øž`‡eþ¶Øà‹Eld()´^‘…·¼¢û <ï¿ôn¿b,Î[‡SÎ=7\5Fì†^û.šö.¼â"ôHGxR/DÒÍŽw-Oˆ¡5™æìà`„D'`èØãI/G bn:½•¤È‡¥ BIv¾ùìä•ÓÀ@<žxî2ê¨:ƒÒaæ^*>ò\CÖéáûu@U[ÄÃhÐÁ‡_¾+ÿ|5†7 ܾàpÄFQáIŽœbÙ=™Ub>®Íƒ j£/âôé‘jäæKÇÎ)8vx, Ë1¤ÿ0œsðjÌÿi9bKCðþë[ñÊ߆U ò‹¼8,ÁG;ÒÏÁwÙÙ´^5Œ6¡›Ž^âPU‘…òàDtîløJ§<˜ÎMî”âÔՔη­FzQE@žUyöÜÏ© šS),IÌfœô^‘rVÖvAç}ÆQÒNôrò:¥Ü!æwtã¼¶c¬E@PE@P=ŽÀnQÐ#£Èrn„ ö 8{ž¾ï\yÎËèH Ó¯ªBr\÷ËÖõ7ùbŒ?þLäådâ­'ÿŠë¦¿Š—¦‹—ŸŸNëÖ_Å”?lxe®ÁÆbë a²…†9¡U•äãçù³0¬ó!¬S+Ü!¡aضêuÅDœ}Ì”alSdQª¦l§,“K§˜º¬ˆŒŽ ë·3=>”ʳó–âé·câ5ÿÄ=—žn¬Òs:Uã¾sM>×^×Ëo._S²·ä°™ßÐæçæcñÆbª“Lï¡I8ó²‡ñÌë¯bý~Á˜pë5è—žDt$­ÕïÐs(¦œwb¨Mì¨Óíœ[œ»a‹Ùh®’6ÉcÇù`ZûΛǕ••#„(lK™! pe!@–&)ŠÀnE€•âí-ãÌžŸAQÒÅçt~/mïêR>ÛçJŒóرrNœ±9χÜB ñ¡ô>îO›^Ò[í…–ÃêE@PE@PZÍZƒ¾£rÇ=CÞ{á3Ìú~6–,^ˆOÞ{žv0¾Ž½Wž}œiqEEf­/ µâ¡Ø²ú'<ñŸÿ"³ˆ”ÑŽɺÜ deçõãqÑqغ5[é,ò¹_ˆ+þú<þé™l%zæï`ñO+•±¯<ý>Å8 éד¬à•ÈXú“Ù>4®+þxÞŸ1åžé˜³ä7d“%zÑ_ᵟÓt{^„Îû{´®©©ÂÂïV‘ußQ|«hGt‡†ðŽ]¨®­Ø°y+V,žƒÇ¼ù•NÏ–ãŸeù7¦óbóo³iwy²¾ÇtÄÑg]†³§þ KWnÀÖ +ñÈßnÅÄãŽB÷çx£Æ¼ÁíwO§Í Ž€s*qšp^ýû øß_ s[6Ö¯þ¯½ü_Zƒ^d6}ú}ÅJªÏ©_îEáÖU¸ùŠ?aæÂåFnîK'ÜI¨ÿ*<ê§ÐE@Ø)ÌsXg±æ“JKù„Gaç÷™sd£ó+(¾9“Ö%¿N¹¶åág•mþË(ðáùY^\û¡ú8õcàOûpý‡^¼üƒÙÅ|”¥Sº©ï». +Š€" (Š€" ´<u&à&ÔhªerJOœpl^yñYTW”"("ãÎ{3 Ý;;çòFD'áÊ£‡™cÀBiíùOŸ½ˆ÷?ÿ]#P‚DÜ~íÑ£o/œwÙM¸îº‹ñÑ[‡aÄà>¸à²‹Ñ£3[—ùLá4œyl2^xâÚn²*“ñõ÷#->y%L¸öDS:h÷MðE=ƒk/»}ûôÀúßW㤠n&ë¶CÆ=Z§Á1 ¸âêãã?â,ØTY0µã¬«oÁ7ß„>cޤÆ ~é¬áÓ`C.?ÿ`Ú¨Ö“…á¨3®Et„3Þqây×⑲GqÓõ× &˜"úŸŒ;þ|6èœuv»÷Æ%ÿ¾=Æð=M_†r$¾ÿä-<øàxïðf ¶×A8ü$:ÓÝ£O:1Q;N]-£ï«©ãß\è~6—‡Ò+Š€g•áüm›ñÅÇ`æ·óPBûdtí5'žr Ö×Ì€á—ÉâYãþ¿MGvu8ιjLÆÓÿxs×äâø)ã²sÏBR¤³ŽÝ~fë†Aƒx>Üû•Ïn¦S#¯<’Îêö'ÓNíùßátþ7MÃäuâ¹tFxy¥IÉéÐÓðìÌ­(®ð¢#Y×ÃIᮦu•ááfmxu5múFÊhAa)â©\b\´)ÇÖl–!”¦©‡ðTw'¹Û²Ì&u1±ñHˆ3kÇý™µËVYYMë½Ã͆oœa·µ€,Y¹T_"ÕC–þ*’!‚ÚáóV‘üt¦9·É㥳Ò+Íôz9‹Ü[MVý-[Pá Bj—.ˆ £Þ2ácÎa§Ž{5MUg¥šÏ5w×YR˜ÜüB„Òñ‰‰ fó;nc9µ1Œ¦²;Ó9V3^ ÏëÞƒCùôÀã-Ò>_~óæÍfGgÞLJÒzQÝ‚€öËðÐò“âìM¸ëÊ3ðï#0ã©›Ñ5!ßü¦ÝûÞþzN?Þâm¸þÜcÐñØ›qÉiGÂWVˆçš†ÇᦠOC0=ßñIh/ÞŒrûw0EE<¿Ô‡»?÷âáµ>L¤£"ißJcu/¥ CQô:¤YwÍ×E>ÜÑ߃&Ñ€¤£¤‹E}·4\™(Š@-|zoÒ˜I3.\ˆñãÇ#*Š–úÑû7ÖU§(Š€" üÌg@IDATÔ‡@`®>êé¼öšÿÜŽ;“l¦fC5+íQô'.ŒÏ”TÚðÍrNç3:wA+ÝH¼xm7é f—âDgŸ4¢r¦sÑÆt‘‘þ¦­©™vJNê˜Çþn1´ƒDkü²9s§—¤fùÉOêHu…Bü´|þ{)ìŽ 6rqØi7­ý¤)ûiÝÓlI'~Œ³æ5ã6ø\§tÀ£ãÀuŽ6¢6FùÛhädF¬î#‚”muŠ€"°÷0Ï¿¿óýý'oà¯Wcéï¯ahz'#ÜèÑ£éÃ){ÃûbëÒ9ø¿·â®qÙf‰PUY.¾üj1úŸ4óç/À ¡#ÑÙ(ç¤ôûOœ`Fþדá9ó‡×ùp8)çü‚ÙFfóßéôŠHŽsôEÞ…ô²9,ƃ»V{û0¦oÝšt~Ý©SE@PE@hìò0.wHý±Â)?É7MöÓóŽÃ’ξ(¨vš„™‘„·÷ë”i'j0õ¦ßrPäç¢6'4~ß!óËï/#õ;íö×O#å"/sþk§üöU–›­î¬Œ×ÖQ[ÈNgµ]" ì]œ§U˜õÕ'¸õ‰i~åÜgfß 8Çœr.º~3«ÖnF%Í@b·Žy\¹r%ÖÓ¬›Ò PdlX‹e¿®@Na‰ÉwžtÜîRAûnþ°žž}"à>E§SÖ1}¸Ÿœ„û‡Ðì²Â“5ݬÀ!Òù ûvŒ4¢(Š€" (Š€"Ð*°¸;%+¤¹íhˆžK*¶‹iCyF)o½Më—ÇNª 7”G­°Ûà–ÏÄm‚Z¦NÀM/Ùõ¥? ÔÛË!|êóëç__ MW&#`¦·Ð–òbä‘r}PÇrÎåiuq<;fÔ€¥tüd(=çŒ;šz!Ò Þ²|ü>ócŒ8çbœ1~”¡ç9svºS|»kUµYÅ 5çt‚ñÿ±Ì‡ûûpæÁ´Ôˆ,ï½R‚°µ¨ w’•ýca÷öœ¨A“€Ô)Š€" (Š€" ´2vÙ‚ÞÊÚ£â4‚wöÕ)Š@Ë"à¡%)|ÄïSÁŽ×¥ó¬!v|tb~íAëS9ì£ý%|¼½»?kã<çAGÙ|œϰ1ãD\Cûw8¥"H &æã hŒeƒõi¦" (Š€" (Š@‹"  z‹Â«ÌE`ŸBÀ?k&8*½{õÀ'sÑ:pÒi¯ˆÐPGkÞ¼n¾Î:u¢Í4HiwwG÷’öÌ´uŠ9§œ:c` &³ymçQD:8Ó1423VÕà‹……ÈÌ+Ç'ó ñÎï5ØŸÒù¸6ÒãK[VpêE@PE@PZ»<Žõ5I%RE`ï Àª´1V{"pä “qí!Çṑƒpö‰‡#†ŽYܰr1n8ódL¹éQôK‹EeV6Ê‹+jõq._U^Fz;kÓâ8XIç}*÷ïB§]Ðö*“êÁ†²p\þU1ÎÎÇÒŠ0DF…¡+½ééÐ £ %zšý®NPE@PE "  z+¼)*’" ´QØ‚n”kŽ>3ßyGœ|,¾;ÿJ ègî~㮽w^1¼¼¸ªžÈ0Þ²¶Á^_5móÖ°“jØ?´·'­ðàã<&ÐÉ“é‘Á( ‰Ã75ŒhRÚ¹®O‹}8/ŃÑ=eßHh¸ÍUE@PE@س¨‚¾gñÞëµé&q{ý¨í~ÆÌÆnAá˜xÒ9Ø´n V¯]RR˜ÿ°älôíÓ›¦¥‡b:¤áﯾ‰8:’]pd<®yøD$ÈY’¼ d`ë¹)@—´Dn>̃µ_NÀJSØÂ<Oæõ š×^BËà¿,OðàÚÂБ7‹c×0[‡F¯Š€" (Š€" ({UÐ÷(Ü{¿2Ý$nïß• ý#P«¤{‚‘¶_oóg·ZžÃÐð(¤÷ìe²8-ˆ¶VïÞ£§CÚˆ‰Û¶¢Ø#/ëÃË ½xz_JyÞ”Ž¦²§…{p[`òÈ ôOUë¹}4¬(Š€" (Š@kC É ºt([[Tž†¨S«S˽¿aš«(;ƒ«Â^Ú‘?‡æYäÚkãγÈÏ!ç±ã°§ˆIoèbôp*>´+pk‡ œ¹Õ‡­ùxýG©uIzwö Ú홿ÃMü†xkž" 4yž¹¤<ÓÍç¢%E@PöUUÐCCyõ"b‚tW¡¶ú#‘{fŽv qn»¤·Õv©ÜŠ@kG È5=ÝCïQGw$çl»3Ï©îxcm´ùÅEЦqévÊŽ¥]"íH )Š€"°Ëð1Šì¸ÅßZVÔÕ)Š€" (MA Q=33ééé(..6šªª*ãWWWƒ½šššÚ%€ø£ÄyüQª¬¬+…ìsœÓ9_F”ù£Åå™ó DË(é°¶$®CdqËϲI[åC˲4G~›¿ÝVn³Í?P[›‚O}üwæììl!** qqq&]êkÊEiE õ"`ºÿtaܨè|¡8§³nÀéêE`Ï Àý‰˜˜äää ¼¼Üô}öLÍZ‹" (Š@[G A•·eË–¡OŸ>ÈÈÈ@rr²ùØ$%%!??±±±(++3Ê7ÁŠ +………HHH@nn®)Ã>ÇY9ŒŒŒ4Š:+¸¬œ–”” >>¾––?f6ù°±2\QQèèh¦e™˜?ó`^¬ˆò‡‘ÿÂÃÃëåÏ<˜óäAƒ¦ògž(p瀕rhIII1ƒr¤ŒúŠ€" (-‡Àÿ³w€UKûKï„zï½I‘nÄ‚b/¨XЍ`CŸþ¢ë°=õÙ+*"biÒkB‡„@HïÉ?sÎds¸÷¦ Ê,Ü»mfvö;7gw¶ò;·¼íá‰ÓF%ŸH¸ÝåynsW¯^Áƒ[œ®ã'y•­(ŠÀ߯3è\=n`ØUdô—Cvâ[‘2~U„Ç›h‘'¾7ÚŠäUD®ðˆï­\¡ß­ä ­<;^îÎa‰ó?wÔ)Š€" œxø¬ÆÙ‰Ç¹*”`¶¿® z©Š€" (UR t1àNƨ?7bf9Î8Ãé.ÍÌB+¾'ºŠ¦;å:ãe‘+<â—…§<4,WFìÙç`œ`áÉFNgÚÊv\VYå–‡¶²õô&¯¢zU”Ï›.žò¸,veÅÚ“œS•þW±*YiK£+-_°,+ÐW–ªÊu§iº”–_™NžŠ”Á2ÊÊçŽÿ.yKo‘ªY³fÑ;ØÔQþvYŽÓqž»túƒ·¶1˜yNZg¼Ì²‰Ðäu†YŽY®È-AÇ4® 3]hÅw—çLsÆ…—}Îcgêã.Mðb­ÜÀ\Tßò–Åe›åq˜ÛT 7Û\¦S§(Š€" ”†@©º)@ 3­²ÃÎ2œq.Ï]š'=„V|OtMwÊuÆË"WxÄ/ OyhœrÍ8ïáç³N”^=•VPl4ò¬9o1â3KØ™ï`g}=å¹KgÙôññ¡ÛÈFÕ­»4)»¬yBç­»~¶.¤Y‰º ¿”kúîòœiÎx?aÀÿÙåq¾“§tÝ˶òÏ\Rã¸ò˜ÎI[¤·E@P7”Ë@wÃï1IA!ðÞ@Ù£ÙÞi¼w>¤œòøåÓ±<’KÒJ9¥Õ¯$׉™ËÝuÙå‰Ç[KPÓyïóû¶2߳ܮ°l‘/íÌq³ÕXÉNÊä™h6ŠwÅzYSÕ…Öí!¤=‚hõ•;Çúåð-!t†M€ë¡³u—vÖ18_¦òERq} è<•ºE&€ôñ3n&á²ÄÙõd½r_?x `aëX<È q‘%ôgB™´B¢Ð7¡Áî1^õE@PÒ¨ô;¶ },Ã×îîÏÆ°Ýø¹ò]£ý,&¦7€EŠÛ `:2³¨qu¹¢|­¤Û¾Í_2bDËz8s¦³u´Ëæx ùœ`83ÏH.Éã©rÄà‰Ÿõã.…Ç|WžYæ_ K‡DdX ‡vÆ…Ohœ¾%ÀáÌwò»“ïäñ&Óä/ŸÐ:e»“ç‰ÆIëŒKeõü¥•ë¤7Ëñ–W:“ß©‡ð ø’ξ3Í7iÝ……Þ雲%Oø%.¾¤WÔ7åp˜È²cÅqIg_œ™Vž0ó{¢—<ñ=ÑqºÐˆ/ifÜä7Ó%,¾Ig†Íü²„…פ•4§ïŽÆSš3ÝgÙžÒ<¥‹>’/¾¤—Åg§]œé¥ÅyöÙâ-ÌÁW çbÖœ7–KmF^–~¿[÷â7%ìaÏÎ ø~Ù¯HËÉ·øØ˜5·5ì¬6ÇÈp·³sðÍÇoàÍ¿k9S'äf&bÞ Oáû•… H>ëžt8»öìGN~ñàOqyö3²âÅöµ-Çøfxy?»Ã{wàåçžÇÎøcVœëhéäzÞEƒ#¹éøòýyøì‡?-:ªuÑÀ ëÅ<ö–:3 =±±qHͰ¯Jµõ)îW°–6=‹òÁ®Í¿ãžûÄšmû-Ùœ§NPE@¨•j s{Äíarâ|ñ¿ÿâÁûïǃ3f⥹oà·Uë‘WˆüìTlÙ¼‰ÇÒ‹ â=Û×à¥W_ÃJc'©ÝáqzrùéøxÁKøxñ*Ž‘+nHm:»±´ó8,¡bßj0] v<5è _{Óï»3y óßzn‰£×Af;ìtK> ´eºh¢áti¤¹i‹ô±5ÇŸ¿‡×Þý),œŸžÎ@9ù9ÏRÛ¥|‘³2®°›ê1»:E@P,ÜþX-"¶¯Z†ãoF~ýQ#Ô™© xäªó°jÛ»ö®FbûŸ?â†YÿAr–mNûÒŠ)«í‘6ˆ|1úé<0.Í´o,|Ï–?±nË>W çj·¬R]…äã×ç"áHš­‹ë[dmú}1žúÏÛÈó³» \NqÙvlÅòMA¬ ï»—ÙrŸü|8í $gf[dÖ >WûÌrx•˜å s±iÕØ—àŠÛ+阆û¾®pFb,¦Üýö'Ù“&fZšxðµYѲm74ó߃;žš‹¤¬Â¢pì‚ô[PE@(;Æš¸²3¹£d£š«´Ä=xúþÛ°p‹?¦O¸…øí»qëÿÁÎC‹Ñ4ô(¸ëNL~rÎŒ ³DPcž——g§”bÎns#l»|ìØ° þhïŠS£+-#¥Hã)‰3±Ý˜sÈnIŮÔ+!­ùå7âLøäfà›·§áÿÅwÿž‰QÁ%t°8­F›:+$ÃÕ~s2lKµ: ®–ÚJv¥S8??>öž;f)ê,pÄÅoëhíœ,NêaÖKJ¡U_PEàŸ‹o³ÚÇœd¼ÿÚs˜úìŒØÅª0MF£Vó†ð7ÚEÎðó@ý°`jjì¶ôà®íØ´m2r Q³N Ú¶mÈðj(ó°mã:lÜ ßàtêÒ MëײÚ;6»¥ÝÙõ "¨=&çÚOÎíÏ>³-ì炆Mû"2„ä2 è‹WŸg¥ÅÚ?V`éšü´ìg\C‹öí‰6ÛÖ¯Ææ»N»"¦Vuø£Õîº$ñ·‹éÇcÕê5Èö ıý;Qãü³(u'ƒ}ëæõTÏ]ð ©†Ž»P]j“„EÖG•e9Â$ãX"Ö¬Y‰)¨Ó=ztCx°ní*|þñ2\£–"çp=4jÙµk6Bιö·G¹ r2±áÏUØ»¾Áh×¥7Ú6EdúÈõƒØúçHÈðAƒº‘HH8ŠVí;#Š[VriGÐŒønJë„Z4` Ø]ŒÕ˾Ã{Ù#pàÅçP¯š]æÅœm´40,À¦ÉËNÃê˱yÇED£Gï3Тa«“’¿+W­ÄáäL„GD¡c7êÈÄÔBNzþXñöLD`H8Z¶ë„N­› ¦AKd¤uœRÆÝrìKHF†ÍÑ«g7Ò;¹Yضe;r©Óv›©£Ó¼=ÎèÑaÁö£JåzmÚ‰fTטèj®Á‡â®“UyýRE@øÇ!À--»ý;7᳟’ðïÛÀ57LÆ/í«&ƒ–ŒWÓY3Íd¤ú#!v=î™x#"ÚAƒˆÌyäIÌýuFõéˆ?}÷<ñ6.»z Rwgç¿çgÏBÇ&Ô\$Ö­:÷@Â(»j¯ü\yEºøâÌ /Dý6ŠKº¤ƒ{°zù·Ø¼·Þ{c.Âj·ÂÝaãÒoÑøxL}ðÙüóiyÏÌ@›†Ôàýûdݳ‘ÏÕK;²Ï<83?Ù…i†cÝ’w°(³5fQ=Ù}÷áë˜õÊ'¸è’‹ql÷wxâ?ÿÛ/ÿZÅÐ%yÙÈɳW³¥Þƒ9ÿšõÉQÖ³%¼øú^97^Òë×­!I{ðýg$; ·Mž„àìC˜>ùTër.ZÕòÇÿÍxw<ûÆœÕÜ3©^¿%n˜< _~÷Î9³ \g½Ô)Š€" (eA ØÚ- uh|­òöìÙƒôÌ,äѰ~@p8ÚÐyíÈ lXoïýÚòçoxëí÷qàH*ŽØGî~‡3x ^>>˜?{ Ǧ¸½Xüî<2g.&¥"88”: v`Ó/Ÿ¡M—^ØŸš‡€‚t\{Fo,þcs‘†¿~óÜ7ÙvÍF2€ÔÁê­´n²²²hÔ©V;´· ü‚œ4|ðÚó˜>ûMø„„"vÕ"ÜpçCˆMHCö±ƒ˜=c æÓÈzzJ^{t>øþWdåfÏL}|’ÓÒ±ä“ùxtÎ{H¥Õq·­ÁƒÏÌ™C+õñ¯{®Á]ϼƒcI‰xòÖ~¸ÿéy jÐR¹||ñÚltêØó~‚5+–bØ™=ñ¿ï~…/”»g€{\Kô E@PdÊ,øÞ±hÚ§š4*6€y™xNvÊqaAA |ý©õ)Àª¥_`A\#Lè!Lø l8°}Û5Aüî ˜vѵ¸ó±ÇqÇ-7áÞé¡gØV¼÷évÛCV±,­çYèî†â¬=ÛB¤&ÅþýûqàÀúDFv.|BpÞèKi€º¾…?°aÍ õZuÁ˜+'á²!ðÈ3/âù'§#8e/î1ó>þÿzäAÌyõ¿èQð;æðµÏ—¬ó » >üºè]Ìü4 ëý³~³Ÿ›~9)ð @Òž ¸qÜDÜöÀã˜|ë˜zÿLôÎûï/þ }_P;ëëoä¶ì˘¿9=ü ®¿q"žxâ Ü{ÃEˆ=ꋱ—_>ÎÃ-SÇ»¯ÏA‘xóùÇÔ},fÜ?o¿3ï¿㦿‚CI®ß™:tï…=q»p$)ÓJ3û."õE@P¯TÒ :5¾VÓ 4mÛsž„‘ºcððÑèÕµ#Z·i‡>ýú¡MÓŒu1Æ|¿㮂¡½ZXÊÅ®ýÙ¹>ðÃMË1ö–ðÅÏ0¢_{ä¤Ý€=ñIô£=ìˆñÃŽu¿áæë.ÇËÿûãÎ>ƒdäâÎG'bþ»_`Ôà.L?„wßxs&½‚Ñö;îØÈè{×3ÏÆÔk¾BߎÍpÁثХ]+´îÐýIdžu"±sý¯¸ì–û±xå íÞ)CzbÓ¥ÝñýÏã1 q!ûÏøqý èÐW_1©¹¾H?´“'ÍÄÓŸü„k.è\b½A'Þæ’ÞÁð§ÊÚe_âñ×2°eï´n ÏîƒÆíú`äÈs1¢gøägaâÌãñ{oCTp:Å„âÃ%ËqÑ9PdEÕoO>ù-ëEÛV–ôy}Ìš©(Š€"ðOA KmX;Á®¥Ú®Šù„ÓD³=Í-ïÑö¡™uÐ622o©}î l¿ÏÌîŠ3:µA‡®=о^¶l‰Åo$ã‚ «0o×:’QH«¹bѬí1dÑds¨5.Îæµ-›eÚ¡\¬\ò!†\|3† îƒyÑøï/¢k³:(ÝLÌ™žÃÙP Ah@ ­ìÃdà¹C-£Ÿò£êcô×ᩯv"5½Ñad Sn ·S¹~ù˜õøMè@³ûì«¡o™+ÌÇ¡ƒ‡°›Ò¶oüóâVS¡yØs$¾GS¨-¦‘pR€Wð’þ];v!Ú'K¾ùKh›]VÒ>K^jj‚j†Ðʵ@‡Ø[ñri…Ü®}ÛžÛŸ,|“& °ûЉwH£~ÒÚâ¨U ÁiÈÊd£·XÉú¥(Š€" ”J2ЩͣN‡FÖÃÍw?‚þçŒÁÖ;»÷]y)º_†ØEóPd_î8ø™Eû "Š—æbßî½yùèÛËÞk‰Í#¼jTðþ[Ïáæ¯>Çs ¾ÁÍ— sU4CF\‚ Ý®Âöé7#$q=^ßÞSûu³òe¼=’탚´äüÁÙoà‚kÖaç®8lß¼ãGĈ[fá§ï@ʱxjW;cõßbÓÏßPG$»†¡oN:ª×m‹)tÅ­S§âºó }§ndØ÷¦Ùýú˜z÷U¸ö®û°ëh´k×}úö±:1y´œ.²-³§}qq´l}êìkÑŒŒsvš·Å“SF!v7͈÷hL+Ы['2ι+âk-“Ïùìò²©cAŠè˜¸à‚/×GfT¬ýRE@øÇ#Àï~¶ûLÛÏ×7a¾!dˆÛ«Æü\ÛÁè3Ðåcl££MŸsé´_ñÃO¿`éocܘû±è×wÑfØ[tjíÕnD'—çâ‘ùß šŒÍ@2ÖÙ0—Ùk×jKyVœävì;7®§6h_ÄÔ±Û6»½e{Ø6å¹1¤&Þry¹´òͺæÌ–ÍßÁa!– ›‚ötÓõl®3ä$ÉöiÏ{nŽ"#ìÁwNô³h¹ÞtÀ+µ·m[Ÿ‰®]»¢^¸?­äËAWסV݆Öìy.á` bЊ2Ø»uîDûÎ{ 7VøuÁ†MãѤi]¤íÛ?Zm'‡Æñv^ :vêˆ=ià>%]»õÀø«Ñv3{ Á¥ PÈUW;M¿E@P²#`ZÉeçò@Éí0†Z]{÷·>L:áê±è׸–¯»£:…" MnÌÅñì;~c9’áKSÍ®IjÜ‹©| ²ñýšÍÒ¯vÇîD"­¯a/UkÔª<ÿ{oB“w`Æ]סY ö"”|î(X**<ªúJ›âÊ1ÃѪÇ9Ø1y<+€V½; ßÀA¨æ‡,:}ýÜ£zhÔŠŠÄÃs?ÇÐe˰eÛ6Ü3è œõô˜u÷Õ¸û±çÑsØRlؼ ó½ÿiw)¼ü0Bh¶ ›fѹó@#†FvÙ¼¹OêÉ>/»g4¸êþ¡ðç ~Ô9P§(Š€" D„a_â!š¹ÍCx¸=‹æ-ëâÃ/—áœÞP=Ĺi‰øáÓ…hÚz "‚|‘uZtÆ-Ýú 0ó¢ ãÛ_7áö-UßÃ/ü%:®•pNfR2òÉç–ˆø²,$ð¥ƒæê[›Æþæv¶È0— j¤]ã­l;÷&P[G{Àƒè|™XõÙ›øcõh8¨3@KõøúkÔ¨w6BB\m¦4’þA¨×¤&^ýâ'\z.·Ñþ8°w6ìN!ƒÞÕjFÓù-?ÑÙ1µÐ¹K3«ôl2¾3 üáãGWÍQJ.[é4^'& WA“´½-Ä®ßÑÄÚËO´ôoûº­dàóí25àOøÖ ÀÑô<´ïÐÉ…FÓù7þ®v K?ryá4ónϨ»9K" (Š€"P&*Ç@çÑ|j<ùßú_¾ÃÞÌô9£'¢"B­%v©ÉÉØFêÔŒªFKçò¿e1ŽRš8>¡5?—®G¡Ñ÷ºõcðÙ›Ï෯ù}ÛÑÕ1´¿íp êÔAím{êñçpÕÙ­1utKL8–ùLF4]1ãVç]8=_D‡Ëî¡YI³õ|ê­tx6üÇï¿AvP ú÷ì€à  Òчöƒ!êvˆˆ¨Ž êpl[ºùÑòü&–šÉ´_<‡®‰KŒGzŽ/F޾ #)§Mœ?o9n¹d0Íðû¡ÿÙ£0è`@·è<ð"|ünø!+#ƒ–ü Q‹Æ3r.®= mFcÏŽ-¸ïߟâ³ñO[ýŸ<×<é ÑÐ…µ”NÌó¤C»°rý6kÿ}ÃZ‘Eõ²”Ô/E@P&ÔÆr{ƃ¼ š7ÁŽß_Æn2rë¶¥Sɹ ÃèëïÂëÝ‡àæŒx ïÓk~øϾ–†Ÿ7œ‹`è]Dž=0÷;Üsç ÌJÀ/ÛÃp×ФMükîc8·wkÌ|jšÖ Ä›s_ŘÉO㦱C,<¥ -—[|»•»Ã¹âçãŒsfb۵ƽI›¶Hx÷f̤åõZµ¤­ogaÞëOãÂÁ—cþÛÑ!q?aúÇ)øýûóÀö¹ÕŽsý-ÃßχYÓúcRh6ú·«‡÷›‚-‡"3;-ZwÃÛÿ~Cº6Çã³_@L„/Ìy W=ý!®<»3ÀÔci¬†]|-/ºƒGÅáö+F"‰öâ¿·t+¼ûšÕkŠ=üñÀŒé8wÀ0è,L¸kFu=±[ÿÄȾí±á÷¯ç×/>: µxÙ<ò°ŽN¨¯Û¸1jDÙ3ün±°J×/E@PEÀ=~3É9³¤A‰EõêÕQ³&¢JNÒô®L«±Þ·y†œ7 «·@¾8,ýîSŒ{=îzj.;0Â})}/ôþ?ÄmÛŒàá›…·þýοñZ´hÖòpée3h$<Ÿ¾1Ÿ¬;Š!}:aãß##´=†î~C/À ãFc+Ú}ºwB(ÇÕÃC±÷»çÐfÌ$\?š®\¡‰Ù©°ô§5vë~ÿ†:—Ð DâvnÅ—¾…«&NÃK ßÄ`:Í6:ª&ZÔöÃ(Ú/ŸãŽu¿.Âàñ÷càÐaË9ŒÔ¹8…;×áâî)“Ñ©a î¿é|üûaºþe>ÿè=ôºàV\:b öoúï,ÝŒË/»MÔCξO0çÓ•ðMÇìnÆ€«ÁMãG ¨0 _-|Á-z⌎ö,Æî-ËñÚ/ñ¸î"*;Øû6ýˆ^Gâœq×£E½Ôá¡…4Qšãºóýë©©©4A×ãÐ’À´´4Ú j `0¿×ç[Zš¯(Š€"à¾J4''‡ö]Û{š=zËpÍLGT«†øõ_bcZ†Òj/~w³í[3¦ FŽ»ˆv>g#)9 ÛöÂcO݉îm[ístºh׬Ž9ŒÌ‚@: †ÚŸžíé†?´êУΊŒ”d23ý0àÜ‹0˜V«Uç+Øxî›ÊcSE.›Á-ŸièãÍq~T­ºè;òløÑþðjѵЮcgšíîF‡¢6Ç®Ø8„Õi'gNA·Ö‹D‰\ö#k7À9§IŠª‹Knº7Ü0 h€?<8m;÷Äùç#Cü €£®ÀÀ3º#‚V¤U¯ÝíZ7GÝš‘«^ ý‡BË:á8vŒÚÆZ 0nÜ¥hÛ¬‚èpÛÝú¡Ý ㎭ڠMÛvuÅh„ûäÐ6€l4h٣φFõjZý)v`Úı?å ti^×Ò===D“&MhY@‰>IQå4 (Š€" Ðí)ÔâÎ4h/^Œ† ¢uëÖ¥6*—›Ý;w`{ÜnKI#ãÑ š¶DçŽíé 4{)Þ‘ø½X³j ÓÑåÝÏèg]u¶=vš¶¡efaAÈÉHÆŸk×b÷þxøøÓn©SQ;·mA^`ÚÐ]¯ÜØ»ÛhïvÛN]Q·FRmÇ-WŽÇ…÷ÏÅ%tXœu?+-Á£öÜr\QfÑr·Ûø÷½HKÏ¢«ÜBмu;t¤ÃâØ¨g—Ÿ“AW½­Æºf­f¾ëÄ4B—.tÝ™_.ÖÓý¨±{ö#3§€êÖ½{v¥‡BlY¿›·ÇÒ¡6™ˆ®Óö©õD]Ú›¿7Žf u»vt0Ž/’`ùï¿c×DÔoÚgô¦+kª…Z׿lݼÕk£E£KºßuobÚÑ]µ!4¸‘zôÝíºéþպѥ>"Ï&;;Û:m7&&†öÌãСCÖà ëBcª_Š€" (•Š@ff¦5(Z‹öuWÜñv0š¥¦U_ÛV|‹Ö½ÏÁ'?þ‰ ÐÛÔ”Û+ÙÜK·Y“ÆÐA"ç´8’í(w<ð¹¥/%±ô¶FZj)¾ärùÒø½ÖÅÐåp½\Ý#ÇU.yžòŽ#¦„Üô£˜óàø8©->§­mö92@<­º[µj d ˆ—U?wehš" (ŠÀé@¥è Wi g!îRÚ¡f¼]N¡õø¨aåieŸºMW€Oæ>Š‹æíÂo_A½êAȧž Ÿb[g5ÚÄ £õåáuGëÄÄžãÒ¹³åÐÃI㌋,§/tî ô´÷¯*ê‹®Î:üâåѽ<´§¢îeѯ,4§B÷ÒʬêzWuýJÃ÷tË/íyI~åèÜκÚQ:“åËw_ÇŠý…¸u⵨l-ugüyF[„Üžñ‡y)—Âv®½dÞ•Gt¼ÝLÚ_Ö›]eµ…v‰ö·;Ù²|_t3õ6y9ìäwÒšõrÒ—àå¾}xšãEzîÚ`æ/Â×â·L¶®þ/ý÷\uómèÞºòiÅ^§ºóéi\PE 4*gº««`5òv£. ;7xÜÐY5hôŸ"öȵ4––j™¹sÀ-÷ ìÓSyÆ ä:Ëõ冑×ô±(j\ ²Si9z4>~ü\Ë8§&ÜÅo‘”ø²äSŠÙ(ÛiÅg\|Äúwb¨n®CÞŽo¸í†_êÈzÓ«~E <éiJت´VYvm^{É>ëÀNðµcåÿþ«üå/±tŽª¨SéZÛåѽ<´e-¿2éÊ¢_Yh*S§Ê’UÕõ®êúUÖsø§È)íyyÊçw½§òðˆjVáVÜÕÖp¾'ùžÒí0_éu© ÖÑ!È›ÞRŠ–¬£»z¹Kc9îÊ=^¾âN†3žÝÖ"W­QßÅ¡›'Ùš®(Š€" ¸C T]f›ÍŽ…;AÞÒ¼ñzËãFó½Ñp¹œÏƒŽQsJ.³+KNaEú93¬8ëí6£D¢È(‘XÉ Ky¦¹¹¹HHH°–¸sš³ÓQÉj¨8E@PNKøÝÊ×gÚׂ–ÖÞ”$~oKûÇFgeÉ-kùJWŒ/•—gÁƒögÇiú\ŠqÒ" (Š@é”j óbìd¦µt‘•KQ£±"<Õº2ʪ Þôù~~~tÿ<ÝjKEvuëÖŸ,,qo24OPE â„‡‡è•õέ,9¯•r Îg!}&³ÍZõE@Po”j óÕ\ìdØÙ9…[#È.Й§ñSƒÏ²pg}™qaMøp8þ¨SE@89hyrp>Õ¥p[ËÆ9ûêE@Pò àÕ@gcü?þ@:u¬“H###é®Ðc`?%%źϕO—b^2b]%SîiÚäädpœï ¢ÓÕÉèçN ‡|²-Ï,°<¾siÙ/¯|¾Û;##£„|^NÈiNù¬‹ÜÎ÷Ò²ñÊ® ß Îw…³¢?ëÂ2XW9ñœëÀuá:±<Ñ[êÊò Æ„qdŒX>ß+u­Lù¼Ò—Pz’ÏõÙLW¸1îLÇÏPêÎiåq\Oæe•Ïuòœuåzˆ|Æ„ǹ,–ï®®œ'رîÞä –LoÊgÙîäsù<ðÀKÚyð; <à :ç«ûkH'ŸmYœÐ—…öTÐTuýþ &U½nUI?Ö¥*éóWž»ò*'n›yÀ<::GŽ)ê÷œL´,E@P¿'¥ÞƒÞ¢E 4iÒäïY;Õú8öîÝkêlÜ«SE@P‡Ïž/_¾gžy¦e°óà;Ø«SE@PS††«ò›ð¤•>SOÈT^:c¬8Wž*IPÓã ôUiéüy’_Z¾'¾¿w:wò˶gùï]ϾöÜã½ý¼×_"ðOA@VPUf}ø]/ï{5\¼#+X UY=æcW¾òD¾úŠ€" (Š€"pêøKºtÊÓipßa°;žàpWŽt@ØÀuMjyb¯Pº]¦ÝÁùRfq쎦­Cù m»eŸÄ[!%•©J!À3èìäwR¥”Ser"Àï99„²œ¬ÉùoÃl/$î‘á4Ï0±(JÃÌ™ÏK­Ý9ÞöTÜ–¹£Ð4E@PE@8TØ@—N€ÙÀ»›vÒI\*ËFªÝ ±SìxQ.ìåaRŽÍoóQ¹:}ÿ«¾èXÂ0§ˆèÀò‹iÄ0wW{ÏšXÔR€g2Íù! ¿ñÿFª«ªŠ€[*û·Ìò²ÒS‘œ–‰j‘Ñ *n‚øêtLï)ÝI+t¦Î%ÒH¾³¡-AG‚qOeq:Ó²SW‘K¹”ODœï¢evV2ù&Ÿ•a}±< ;3 Bjz""k QÃzðuaR\F1—èÂþPT—b*[g¾ñ£aÃ†Ö -fž†E@PEàÔ"P¡£D¥Ÿ›t*x‘cE «3Bub9„¬ 7«~_†u[÷Zî±p^Awl€};×cé/«•ÃÑÙ¼ÌÏÆy!ÑMˆÇî=û™mß)Îé9™é8pð 2síÃWìòìm–mó›²l 9]ò8åø¸ÝaJKMÂþ‡“oŽÇ«c‰‡q0>‘ô¶iP˜‡Ãñqäh åZŠ[õ™îʱucê|l]·¿­ÞRÔi4õ6uc9†Þ¦|“ÇLg~wÎ]§Î¦)Š€"PYÊ,n¾ûø-ºI¢%¾_±Ñ%Þ~'ó»Éùáwš3MÚ§nBÇí ;öŠÒØP¦4‰‹ÏòÙIœÃ&ÇΩ“ÌD—,Ïn[øMoÉv ‘rØgC›}§<›ÈËJÁkOÍÄðKÆãÞ©Sдý`Ì{÷k¤çÚm· ¦9œ¾±£Zµj¨]»¶Û`¶cǤ§§[b S¦†E@PEàä#P~Ýê°¹ ìÙ¶]5ÂŒç )=ÇJ㎘tä*_ß<|±à |·b‡MC] ÎóõµåìÛò¦Ìù™9Åé,äe§á“ןG“Æ ñé«È¬µÝá¸xèÁØ™ê’ÉwÛžâSq玉̔ȗÇí4[‡½›ÿÀ„[§aÇcvyéøßܧpûŒWp”f3Øe&³NÁ«ìz±.e—K´·ó™»+¿…yŸ-·:„^ÎåΗð°owæìN_‰tc™¢™.õcY¦ó”nÒhXPÊD@ìóäC{ñ͇o’è|úýÏHÉfÃÝnòòr‘C®ìòhð7++Ûzr<=5 ñ HÍàwo±aËy–£²³ù– Úfb½–‡’Éûè mTN<|ÇRÒ,6~gr›•““\×Ö&Ÿø²³s¬6Ã.Àþæ÷'ó°Ë¢Ab>D/5-ƒÞ×vy¹¹9ÈÎɵÞéLWŸgâ̓Ñ,ŒOô¶[˜BXKº€ ósq„€$!iɱÎmÏ8 ï¼½ï¼ó>¾nºì ¬Ù¶ßʧÑkÛw|³Ž)))hDmsóæÍÑ Aƒã>XˆØ%ŸcKÜA+ÙØõ¿à‰=ƒ?þS&ŒÃ o}AÆnÖüô&\s-¦Þ{7nºõN,]¹¹ˆ‡WXÙ‘,ùø <;ï4ÃÌm¥ægã³ÿ¾€WßÿÞŠÞ½ Þ7nšˆk¯¹¯ð 2‰ÝÇ' oÿçßøfÙZ[}oüå[<7wŽÙãÎÖ€)7"¶q^ˆõ¿/Á}“&â¶Ûoès†cþGßZƒÇ+¾~ó>øY.µîZ'f=‡ƒI4K]˜w^zó,Äë/=K¯½kãN½/̺·M¾ ·Ý|žzé¿8œœ‰€ :çtiבQÑèuF?tÂQ¤P{ÉÎj¯¬PÉ/^UÅË×ùzú2ŽY=¦<|úúlÌ~ýSKF^ê!Ì¡%„KWmw\\¿¨zM1öÖó±vKœ•—˜°Í{ {ÿÚ4°ÏJÛ¿}:_q š5¨gÅã6þ¦Üˆ›o›Œ«.ßú©¹”å“‹¯?˜'ÿïÌ{eFŽº?ü¾aV'ËŸë•„WŸšŽž} ¾(ÌIÅ{sgcÂÄI˜1}*&Ü~/VlÚe•³wóo˜>}&ÞúïÛ¸íš 1ë…wÁÇ“íÛô3F\0›÷±è¬Õ VH¿E@85Ò¤õn§UH˾ý½ÅùçÀ™Ísè=Xlg§%bæƒ÷â£%+Ñcè¥н¥eœß?óyŒ›4 Ï=÷,Æm…›î};&[•á7¶5; Ô©{o±¶Ñdß6\ÝhL³ÈÙÉxúÞñX™YO<ý î¾i4®s.¾Xú§%gëÊÅØãzorBrü^|ºüOÚâäjÈ“%åI{·á¾ñCѰÿÌ~f6f=zB|hæœfïìي߷톰ef$áÑG¾¢AWZàSˆ-?¼¯¸‡sÃqÓu㔈×_øþL«CíÃl<=ë!lýèI,üj™k¦ÝR™Çâ1ïù'á;îtjc%ÒpÕ~Ø%¿y5–éÄ(7Ó8Ìl¨«SE@Pªƒ@ÉV¼½¸‘÷q5ü;6®ÂŠÌ†ÔÑ:ÃÏŠùï‰ýGì½lI¶aúµýá×~^}ñ߸oêT\Ø·)ðö@Ÿ½ýxñ¥—ñÄC“1éšÑøèû•$Îé‰[1cÚd¤øFcùÍêײf÷#h!?'¯=÷ &¾¸¯» 5BüðÕÂÿàé/¶áá=‹—^zçw Ç=ÿš‹2øýh&æ¹gÿ…ÿŒÃÈ+ïÀÈA]Á’ŸODDÇN[ `5¢(ŠÀI@Àµb‡÷nÇ×_®E·Ž-éýA†úYxû³ÅHH³—µçÓj©nÃoÀÌi÷âš+/C¯îm°~ÅwÈ®×õk„ãØ±TÔ¬ßÛ–,,ZÙd麖zwè1w_Ò_ÿ´ÊªÕºß#däd íÓw®ÁÓïùâñ{nA›æÑïœ1X0û|MËìÓhIzí-è_Üú¢AT5·ƒÆ¼ ë·82ØyµX@:÷Š+.‰Ð?ø¡fXHª<`= _ Á$›ÞÏ~ÁuðÒobêä[0òì!ˆòIÇ‹=‡Þ=;#/39B‡N-ðÒ7¿Ò ²=8»L¾ ‹ÕÂÛO܃Ñt•£Ñæ%`Ïü{!Ð,E@PE@¨2¡[•Ø€–™ß—~‹3iÉ]T°rµ@Ȳ·h¶ù^4ê×q´ûýŒ‹±ó¶ëЬVÐ8 ={w·ŒûÜÔƒøô¯ã¿ ?Ç ž­R{õ?Š/1cP¬Íä§##×]΄©£ŽX³èWôªƒÆ ëÒ’ñ\l_¿?lí„»"ƒ‹¬|4¡¥€¿¬Ã¤áí1iÌ@ìÞ½aIÇtöœê­Û¶!*+ÍFŽCK’ÃŽ÷üñøƒ5A3 -ÛvAÊ{ï"n×nÄíÞ…G¢mX~ûpÉÛXZžÙõü6–A¼kóz|×Ë^…F1‘ô9¼8 ïý°c·‡?uäî|êL¹ù22×Ùåbå’$R§õÍW7ãý غâ5´jP 9ɇðÃW£[çÑÈMO®½Éª‰eoÝ}³îE=„6Ch°âî;Ѭ.áër1­ûà­×º",¢š•Â[ ØÙÝ<+¨_Š€" œ<¨Ñðeã”Ü– k±tû6tzâVÔ -R¿aÃÇŸÓö¨É¨Ý©‰u¥[ÍšµQÍeàÐ æyôNöÏIïK¾¥}Õ4kîãgž}êV·dZ†'½«yÀ7´Îw#¦¾·c¶ÄâE_â¾kD8¿÷X"„ÚÕ#,>þª×° ‚Ž$Ó–  àwñ.žUæóÝim;"Ê:ÍÚãó¯ÞÇÃ݆WQzÔ%îIDAT©×ìÅ ã0õþi8¯oGk ÔZOïbd9yùV›Âoâ<ì­Y#š‹·\ 2×kÒ{wnÀ§qk‘š•‹àz}1}@wX¥û níϘýÖflÿ­j‡Z§RcZáX5Ö}õE@Pª‰@¹ tîİ;r–·ÿû l윊ƉHON/ÿuå:Œ"=?'ç êA3 Á}>í—Χwpr©ÓåS»šÄÔ±òø+öÌwŠ’]šu Ù ÞÃM=0\yç ¸ìÑ7ÑÌ÷\DDGSg%YùhÓ¹öÄmÅŽµGPè€1/¾‚žm"8¢::wïõkA‚O*FOœŽ¨üøaÑ7h‘…ž½:#2܆ÁÇê ñ.z^®ÃÚàK«¤r¨½hÞ¡nž4 Vq…d<»,`jSø]míE§6¦SŸÁèüÁG¸ïÞ»Ø W÷íb1ù†aéÏ«é0Ó Ô‹²ÒŒEf~mø“~ù|6 ½“ÅP»Âû¸K´KTÙ…>èwÞ|6h8RŽÁ¢…s0üúYؽäe„W Á±ø,š·%±^þÁVÛÇígPX8Â’lHû›bwåã±QcÑ·­Ý–pÈjµÆ]àûŸ:£aM×»ô0Æ\’ÊîiÛPv¬”RPE@8”Ù@·u×òömëWaWÇxvÚågÒagÝñrµ <óÕbL¹öB„U¯¯ûÉ4P-Ô l?äeçÁŸfRüƒBwx%$òÁo­:ÐAoÁÔ£)Ñ*BÇË ‰°\‡ÞÃpmïŸìªk1âú)tð\ ýho_x\4ö*Ô /2©£Ç3#~èØ½nž65úàÍù×"2g^}² Þ ƒç=Ûîøñ «~¢GDt=ôìÖWO¸×N~1µ£N{Þ›Fâú+¯Æíþ ëÙÄ………âÛ¯GBb*ê†Õ°tݽcòüy9§?Ðua¾µ/ÞšOâÁ :(nüäGqõÙíñè £VÔw¸eì02ä#š°­†OÄ ãϱ+NßÜiô¥%“ñÔ9­DíQ'¤=ë˳"9YéHI£ûr«WGP@™m‘| (Š€"Py°mÏžïØðîyú ü´iú·­_TD $`ȸ§qÝè³Èè,À—kÐËÌæ_8 »S]Œ®­à\š¡N=²ËéjʾCF M“šÖ¾pø•YáȘ¸`äpŒ¸â<ñÚçh^ÏžiiÚ·vÞ‚G_˜‡'i¹xRìJŒô8^ÿâ7DWGLÍp\ùÂèÖ&þé‡ðø×c× i4ÐY¤ªu…&o¹Ú¿ƒf»¿ù…t†õ£QîsGÍ£ ¦%ø ðÆ—a4 P7‰ôÁÂWžÄ’wS•è-MmÌÁ5Ÿ£ée÷ ­ß¬5®Ø ÷Í|Ï=8µªcãªßV–ÀÁ²‘Ÿ‘’Štz·‡P¾´OEBÊàöÛt¦‘îÌ3é4¬(Š€" ('rYqÜ1ÈMMÀkO\…‹®ú—Œ,6Óhdâ´VXôËM¸ k ûóüë¥A¸áüþزü<òâG˜;l*«Ç`Øá{ã¨õöàÎÐÃMÄæ‹g¸¯=ÍÀÄïX‹êÆÙùÁQ¸`ÌxÜ5ëU|9ÿ=Ìžõ8Ú÷쇳w^ƒwÆÄËGÂ?7Ë–þˆvG`P·vhÜ´%V¯ÜŠ:ãÇ¡aý(„Ðɼh›àgKW YÓF–\Þîêéá†æ-ZYñš!ÒÚZæÍì™îºõ›£ L°kÔºnš‹é³žÇS÷\ƒÄm+0þ®ÙxwÉZkfèÍ%ÕëQܹ¢ƒ’Ç!0úœ=ü"D½ù6z} `,Å„ bÜÄi|ñ¹¨²½:4µ:…kãŽâº ×ÑYC9ørÙ.êœÚ]5^ÞÉñk—à‚›Å»Ÿ|Ž®MêPç’f„¤³ki©_Š€" œ$è½d¯J]v<õ2Ú5¶WNåÓà© vv Cɨ/Ú–N¯Zze[.,<œ üU˜ñÃ÷hX·Òó‚ðÍ““P‡ˆ°ŽgbÎÃwb*ð~FÿhÓ÷?4ÌÞßN2z^>ƒöÓÛgž°^AÕjã–ûg#|îËxxÆL’M‡ÂuwLuØ$Ü…O¿ü ¨cg×V‚ã‹—Õó@BZZBCC‹/dÖ€ßNõQ§(Š€" (Ujì]Ý[)³ñ_¼x1ä¾T>)—÷è%ÜŽ—ç-Ä9c¯C÷V h¹^.u´hñaA>ùï\i‰ë.=›û³ ÑMоMsê¨ù¢÷€‘8«o{Z¢½ó_zß­Ü®={‘‘ëjõ:áÊ1ÃN{ÚYþp'#ŸîAÿà­·Õ¡/Îîc/W,ÌÍÀ§ ^Ã/{²pÛ­·¢qÄn\‰7ßx»æÐÕeÔ™ «‹'N@Çf ›v¯Ï›KûÏ¢YOªh–}ñ>–ïɳNÒ­ìK»~ \>™ÒÔçC|ì:Ìyå- }=†õnkeÇmXA׫-Ä7NB¿öM¹ÇDúà@ìz¼>ÿ5l?bÍz ¥e‹c.<!~9øìÝ7‘Ù£Ï=Ãe¤çâÇ/ßÃŽôº¸þÒa–N?~¾ïÿ°wM½ÍjãÛOÞÃ;t}OÍÐdÒ•u݆\ˆ¯¾ñ›~ÅÂï·àZ:­¾Vµðw^»n)žÿ9&Þ3 íèê7ëÑr%H?îÀò¼@ݺubåËÌ“U1ý*7ò÷Âw 3–Õiõ‚:EàŸ‚Àaº3œ 8~_TÜÒátÕ%-% fÚßïüÊäwmQ¢»Íy“YÀ|mfHp°ÕÖÈß—›–|Gé8kíá$ãÞÌçÁHûÌ\¼=û~:P­>^y| hGPÑÌ7ËÉJKÆC‡A§¾×q®i½¾‘–r‰GSPÎû¨dÊBz1§í\¯zäådYw §gåXôÑÕ‹\^–(!AᑨN+¥rDïh:Ø4¾þÖ -ƒPH°øº"3!á0]ÅI«£èê³Èˆâ³Eòèª9>!>˜žoeâÛPÉ¥YI/ƒÊ‰·–éÐAªì¬ö€|ÆÃ|?<óõêÕÓ“Ü-„*÷+ŸÎ6`|ù9¬Zµ ƒ ²Lø<îÛ¨SE@Pq™)) Ìh¹=a@rlG‘\à™$9€(+“î4§ƒ‚iß"»ôÔd¤Ñþö`Ú»XÝÕicœy¶ˆug>é4òRÈ|«ñç”âZ‰~l ïß¿ßê©n?…¿ú-Ø: tIÿ«ò•_8•üuÝ5ØYT #./®¢¼â€dÞÅyîBbô$Ä­FfÝñÂOë1ªkpÒ>QÄnèuYÂñß);k° DNqDt±Sl9ŹÅ!Kà(¢˜À½H85‹E„A-éE|’àÅgœgÈwŽÛÛˆ¾ªTÚ$wTšVQÔ@¯(rʧ(Š€"P®–™;~tÙ¹–3; ܉ñ£†ž?b1FDÖ@ñ™¹Ô !>æ¡î°¡¨[¯ø@µÀw#ÊDËF-í3whu¤XÌA.ím™T>”^³vm›ÖõÍÅq§Ì9‹Àüv‰F‡±§­+ÏÊðaA–#a–öT‘À@×2LJ³:w®¼€ PÄÔ/®—tŠêgן;<¸ N° ±y…/Œ¹ã8¦³pv%PÔªŸÅOEƒ¢—0ª_¥ç]¥”2”©êúªj°’¨Ügïš!v‰¯ðò+J³uñþL+øSš«Üç]Ziš¯(Š€" (¥!P.; vgÉ^..„ûv'Š;#v§ŠiK:×U6”^ÔQ2œ.’J¹.Zîȸ:,\®Ý¡)îøp‡KÊgæe:[Çãeðl3S•è0ºpy¹²—Û:ŒˆÒ­4éTºtb¬&¥9J“¥l¶n®ú³lúˆ¾–®²8ãüárB.“;¡ÜÑ“tŽïùÙéÃå ƒ™¨áJAÀÄÖ »^Z¾;ž“™VÕõ;™Xœne™ÏÞ ÿä=xœ zñ2`ÛQ˜_ŒÇ:Ó82]Q~­ñ;²zt¦;ûi$"iC\lÅž·¼b*;äÖ[q³‘íÎyćˆù=_‘;fiÇÕßAÇùì*ë;ÄkTPE@P*ˆ@¹ tiðýÜõ¢H³“Á¾Ç†¿”NLɺµfºY–•îUæñ2Ž 0¥‡íz”ìTYin{LÇ—#’ŽÓ—2œi,×숚¸Èaßs:óR“<7Žò€tÌÌt©zD€±Ì¤}¶²ÚB0® 8eSN9ü>âeÒaaö~èªþ¾`}ÙÉßžÄO9§H©¿àáTCòéWE@PS‹@¹ tVÕScj«¡¥{BÀÙ ãý†fš>OOÈ•/÷ôçÐaN)))¾ŠkùðSꪉ8É køwú]ÿt=™OŸßÿŒâsâPw¶±Šõ‰ÃZ%+Š€"ðOD T]ön› Î?ˆrd¦ž}6"åYJú?¹î'«neÝïy²ôÑrÊF@Þ•-Wå|ôYžxÌe5\šëZÝqâKÕE@Pþ x5йQÙ»w¯uÕÏ ²ÂKÙçÁÙxç“J™Ž?¼|šghÙäFɤåY>I-½çpHÎrLæå¸S>—å¤]Ê*ŸõZÖÕÔ¿"ò¹N,å:u)¯|ÆBŒfÆ’ñaùž°dùLÇŽùÜaÉ:ñÒk>­—OdÞ´i“¥o­Zµ,Ù\ç¿*ßü-˜úŸŽ¿Æ’ñßü­y{VNçoÁÄÒIË¿‘Ò~ Nž%ŸÿnYþ]ý•ß‚óïŠß%Œie½þŠüÒ°”÷š¼þο…мî{e=+ç{­²åË;Öù\åïêdµÞÞᬛ´‡æßUeµžä›ïŠü*ûïÖÓo¡²ŸÿvÝýÝ–ç·À2øŠÂíÛ·[m­<·BÇQë (Š€"pbð›IÎY„ŒöÆÅÅa×®]hÚ´©u—'70‰‰‰VÇûèÑ£–¡Í†;7Dl¦¦¦ZsÎcBË>;¾ŠŠX¾ú…ïiåF•ÓØ™´ÌkÊçθ,6rœò9bÉ`Y,“e‹ü¤¤$òYë\ù\®‹èÏ:>¬?—ËyZZš… c$ú›´ÌÃq´HNN.Â’ù˜Ÿå8±ù\¾)ŸùÙ™X²|Æ‹iùÅÄØ(±Þî°d^S¾<+Öß›|ÖŸëÇXÊoÁ“|Ö‘Ë/Ïo¡2žUi¿Æ’;”eù­1ò[sþx Äü-0þæoå3?c&¿áqþøw,¿–ÃNhÏŠé˜^ž•S>?W§|yV¬Ÿü]™ò¹<ÆÍ|V,_~÷ò[c‘ÏÏJ~ Œ'‡Y¾ÔU|ÑŸ±`ù¬;ëÃa–/òäo„}ÖÅù[à¿a®+ë/¸³áÂå°ù,Û|Vžä³®,Óù[½Žs¹¬+cÂú‹|ù­ ­ÔõDþ¸®ò¬NÔo¡¬·ü¸®Œüøwϸº{/ȳbùòwÅxrX°”ßš‰¥ó·Àe•U¾<+.“'ùŒ%ÿvÊú^àß‚üÖø·ÄúóoÍ)ŸÓ9_äËß­Sùý3–ü[ùŒ%óËß­;ùο[æw'ßù¬XoòYÆéô[p÷¬ä·&ïÁ_Þ Œ5?³ŸþÙ\iÓ¦MÑÿÔ)Š€" (ž(õôF¡U+ûÊOB4]P²"ÀVvÜI•°'^¡qú&¿ä‰ ‰‹/é¦ïÌ3ãV§(ŠÀ_A€Šxp%!!+W®Ä Aƒj qº:E@PEÀ^—¸3“vV=A§éŠ€"Px’gÿJ3ÊË#óDÑòrb>øO" (Š€" (Š€"p2(Õ@çQ`vf§ÚœmeiwúBoúNg¼<´ÂË<öæ3»ºyâazvœÏŽyK£µ]_žhÍt“¾¢òE†)×”Åùžò$Ý”Áa“_hœ¾ð°ïÌ“¸Ð˜q3ìŽ×ð:}“‡Ã¥é/4&_i<œo:§ÎxEhY;oº˜r%ì©lI:ö%M|É3ãfWZ…W|æãe¼l ó™¼¯Õ)Ch«‚Ϻñ_L¨V­Z6¬›àáôÝéí¤‘xyh+ÂSùå¡­ˆ.&„KóM*“Ö)‹Ëq¦yŠ{£}…WâÞx*BëGÊñM<ј´B#¾äyò…Îô=ÑJúÉ •2¤LO¾Ð±ï‰FÒ…–ãìÌ÷±™çLç>TU~߉îê+Š€" TJ5ÐMU¥aâ43,4Î4‰;}¡7}'3^Záe {òM)í¤ É+yNߤ•°“ƺ¿*_ä8åK¼¼ò…¯4_Êõ&_hD–IëÌ3iœt’çÉY&Ÿ7ZÉ>‰—æ }YËú%ד|gºÄÙwê"y’î)î‰W:ªlè²qÎÆ.ÏLÿ$ð¾S6ÔyYª»: .⻫—ä9ýòÐ oyxNmEt1y$\šoê_™´NY\Ž3ÍSÜ­è+¼÷ÆSZoÕ[Œóãg“øNfÚ¯iÏL±¬Bžu⎭C0¯Wð-šÁâÕ=N ƒ-ê$Ó y>É÷ññ¥A`™–t>¤ŒÇeÀÁ Ó " (Š€" (Š€"P©èI%• § S'¼Ä³È8¦LˇiÙPfãtˆ⼃À¦µ(­´ä# 8˜2Š__¦|¦4Öy¹ö)ây4À§¼Ë€€è"¾ðr\—§ ê+Š€" (Š€" œ týd ¬e(§9ÇÏšïádh¶ÿù;Þ^ð.ŽfæwÕÕè×¹u‘-F6Ó®ÿõ ¬:V“¯ÍÖ;'yÝã}ÿæUørùvŒ{ Ò’T½"¼òZÂõKPE@PE@8IOA¤µE@P1ÚÓâãðò³3Q¿ï…xò_ObDÏLšù2v8ŠºG=7/ßšEÏÈÈB~^6 ™•Ž„ä:xÙùöAYéÖÝÍ ‡"1)Å9)1ûÑl;¹È:õqFÏîÈIÚ‡—þïA,ùc=h8À’-ºX„ú¥(Š€" (Š€" œ"tý¯Å*§;rþ}NvöíÝ‚¾Q‘ ùc& }ßDd%là oü†Ëo»uªá×ï>GvT4¨]‹žzé÷àÀÖõh5ðL¾n4v¬ý³^xõ6D>-coѪ9ŽíÝ_ÖïÆÄ)÷ KýìØ¹; |°zñX™^Zµ@«˜Hk';ëãaKúéþ¨´þŠ€" (Š€" (' 5ÐOÐZŒ" ”D@{‹nÔ S¦þfÞ{¾îÞ½{÷ÅÅ£/FX~¶¬ÞŒÜ|ûªÇÔ¤#È ©‡|ŸllL­…®¼õŽâ¶ ·á×®í’r!:âîûnߟÏÃ9O~…]?¾Žak–àƒEKP}HKì=tç ‚sÇOE³Á—[Æ9ÍåÓ¿ã¤+©­ÆE@PE@P€è'c-APÜ À{Ãí½åè{Î%XØ¥¶oߊE¾û7ïÃuçuF“ÖMàgïÄ ‹ˆ@&…sèdõ{︚Ö&©µ1ö²1Ø·s/ê‡úcÄ 3Q'2Mš¶ÆôKѸfu„5k‰†«w#'/aa Eph"éÚ7ËYwÙëܹ›G¤IŠ€" (Š€" ('݃~’×âEÀF € c6ÒÄn» ?B`4íï?wO½Ù›Åö={š“žgËórsE{Ûù7v–}n…ôKPE@PE@8µè ú©Å_KWN_ì;Ô„ßš7Åbüy}°jñ'¨Öq €Ã[~ËsßÀƒpÓíÓñß%gY·¿úØ4toÛáéqøtC^¿µöü¾ÇÒ²,< r³pÔ>(yHIIENN6’É÷ F02ñÞ'_¢åm×£Vx ëÀ:E?}ŒZsE@PE@Pªj Wç Z(ÿhäª3³’rÏydLs<2ÿsü¸tÖ¯Y‹ègà‚ÁƒÐ¨^ Œ»~ –ý¼9‘øzéOhÔ4a¾5°ìÇ¥ÈHKÆÞ¬˜óÔ 4­S¾mz"ª°ºUD½Ö]qý•-­pµ: qÞEç¡Ft8j6LGšuqÖ…×ÁùF¤¦eZ:›æzHœùt4¬(Š€" (Š€"p*ð¡= r˜²U¾½'ÔžIZ¼x1҉ȭ[·víÕ¦Sñ´LEà¼KRSS‘ŸŸÈÈH«ÖÒv+B¯^j.Æ™V²ð—¥î&-Ë÷õµwïrY®°'9%ôqñ€BZZri¿{TT”'VMWEÀ-üÎó£m7ñññXµj „ÐÐP˜ï'·Œš¨(Š€"pÚ# {ÐOûŸ€ œX‚‚‚,c7##Ã*ˆg6€­…‹ŒsÎ5ÆÝͺ{ÒÔ¤ãÜGòKs%ôqé•GÊ%''# ÀbçuŠ€" (Š€" (ŠÀ‰F@—¸Ÿh„U¾"pš" Fs`` ž†C‡!$$l°{2xÍ™ðSëÌÆ9Ïž³ÎüQ§(Š€" (Š€" œ,J5Ð¥“}²ÒrEàŸ‡/÷÷÷§ÃÚRÀKÞ«²ãuÖ·zõêEKñõ=X•Ÿ˜ê¦T=ôQõž‰j¤(ŠÀßR tÞ/ÅŽg¶NõìÖßTÕSPŽG ‚î1·ö`Ÿ[uR¸c-ËäÝíO¯:šª&Š€"PU½æÒwªªzª^Š€" (U¯:wTùvÒa­zUPEàï‚€ùNù;è¬ï½¿ÃSRª‡€ôØ×÷HÕ{>ª‘" (U¯'(ñ0þªSE@PE@(܇âÝÕ)Š€" (eEÀë :ú._¾‡¶®*«P¥SE@PEàtD€W ñGpp0öïßoA 3ê§#ZgE@Pò!pÜ=è&{bb"ŠöžËt™UçFÈ[ØÌ¹åIc‘ÏaáŸÓœÎÌã0;‘!yfº¤1™.qæ-+ óHY.Í•U®È4éY¶ÄÙgçÔÕJ¤/où’'üîx$})³´0ç{Ò›ó؉,ñíÔât‰;}¡gßéN7Ã&èe¦‰LN“°È7éy¦ ¡S–3lò9Ë1ùtR†SžÉã 3­ÉçN¦©Ciüf¾SS¶3OøÄwÒº‹»£5Ó̰ðKûì¸î’&4eõE†;zO˜ ­Y¦·0Ó‹,“Nä°o¦s˜]Yê%|â3Ÿ„E§97ÙÂ/<"Ǭƒä•&‡é„OxÜÉ7iœùÂǾ™'zqºðK¾øœgºÒÒÍ|3Ì2$îÉwGc¦qØt,ÇéÌzpžÄ…NÊ–8û"‡iÝå ÈšÒø„NøÙ7È“4“^ÒLß,ÓôθðzKgwzxJŒD¶é‹§ž&:6ÔùÐÉzõêYKݽ•aòkXPEàôEÀ£®Èéû£Ðš+Š€" (Š@å" ýªÊÅS¥)Š€"ðOEÀ£ÎæÆ„?êE@PE@P*†€W1Ü”KPÓ¯úéˆÖYPE@PE@PE@8x=ÅýT(¤e*Š€" (Š€" (Š€" (§#j ŸŽO]ë¬(Š€" (Š€" (Š€"PåP½Ê=UHPE@PE@PEàtD@ ôÓñ©kE@PE@PE@Pªj W¹G¢ )Š€" (Š€" (Š€" œŽø{«ty®Yóññ©ô+ÙÜÉä4vž®3y$lòHšÔÛ—tö%O|gÇE'3nòša¡cßéX¶ä;óÜ¥»Ksò¹‹ ŸøLã sš³®& ç›ŽóØ ™'a“ßSXhÙ÷&Óä7yJãZ§lwò<Ñ8iq)£¬¾“¿´rôf9ÞòÊBgò;õ~¡_ÒÙw¦9ã&­»°Ð;}S¶ä ¿ÄÅ—ôŠú¦³“ßµ3n–á-Ϥó6ËuÒHžøÎ|3.4âs‡ÙI=¬ˆëËIÇ4fšI+a3¿,aw|’æôMy’ç)óÍ:y¢3i˜‡éعK—4‘%¾ÅPÊWyiÝéÀiå‘ãT©4^Îg'õ4ùM^3lÒ8Þè<¥3¿™'añE¾3.éN~Igzvf½Ü¥ =ûR†øfž„=ÉðÆ#¼â ­Ó—|Ó/ Io†™—‰‹lᑸø’îô%Ÿ}q,SÒ9Í MY|w|f‡ÙyªƒY†“OxLwaáßä9õ’tÓ÷&ϤsvÇk¦™a“ßLw6ÓL>gؤ3Ãîè8ÍÄÚ½ð—F#ùâ›|Îò$Ïé3¯;Z‘)¾“ãfžvÒzËsÒ:ãÌËN°3e™a'ÇÍ|§“^èÄ^ö¥\“^ÂÞd My|)_|áuÆ%]üÒò…N|wô’æôÝñä±Ïiì¼áe”òÅrD–;R½fÍ*š¦(Š€" (Š€" (Š€" œdt‰ûI\‹SE@PE@PE@PÜ!àu‰ûÚµkñçŸ",, îø5MPE@PE@PE@P< ÀKÚÅžîÙ³'š5kf-•w·Ôý8ýÿÛ»Û–†a Àc_öÿéØÇ rÂA¨ióÒÕ*<I›\î’GEBãwê3ðñx\î÷ûåz½^Þï÷J9Ý @€ @€Àš@œ³ããù|~‡Ä™»<{ç¼Í¿A½^ß'ý<°ç$- @€ Ð/oÑãå÷ív[´y@_e€ @€ø¨À_q/³çkø‘7èµ×ô™³+ïs|¶ýd®Ù5Ôæ-×ÏqxfÞe®ì¯µ­ØÖx-çÞ¾Þš{ãzçì§7go\Ô‰YkÆÖò—}å}Î)ÛÖxÄöÄ”9ÿÊ}¬;®™ïí=ìñ(ç–÷[õþëØrËçßÜW­v­okM×Ì×ÓZ­µþå:2.ÛåøÖóÌœ­|µ±VÖx-çZ_äŠkæó°–s´¿µŸÖøh½£ãg×»œW>—÷G¯4ÿÌÚfæô¬+òÆ_Ͻ5fæô¬¥SÖmŶÆk{­õµò1þÉ}±¾½9Ó9ÛÈWÞäŸ7R£ŒýD½#sDî¸òçSÖÊçr/yï zJh  @€ @€À‰þÍÚ‰øJ @€ @€p@O - @€8QÀýD|¥  @€ @€@ 8 §„– @€œ(ðMÙ¡5ètêIEND®B`‚httpd-2.4.41/docs/manual/images/build_a_mod_3.png0000644000000000000500000014406111740644603020107 0ustar rootsrc‰PNG  IHDRWŒ0ÚMtEXtSoftwareAdobe ImageReadyqÉe<"iTXtXML:com.adobe.xmp ±¯uÄ¥IDATxÚÄVkLUž;3ûè.Rж()”€@b-DúCŠÄĦ?%@Ô*­Õ5mIÚXSü¡ ¥°±Ò’¶@¢@ XÀ ²…åÑòØ]`±Ð  ”ÇvgæÎ\ï0°YIK‰xrrsçιç|ç;çÌ.@ÿ«Ðÿ…Óá€WœZ`ÒãÓ#ÿõð%9Ñ`e1\ js7¶ö*h2#(P@€?§iw4Ò>ÿÜæ¨âüöV+^%ד±ŠàاÉ˲!’)A8:;½%kïÇ Ûß)H=Ž7_‡Ê•tz×­KÕæÚ G›WŽöl‘¯„G„€‰’‘Yÿxá‘U˜aúm˱B›•×e¸ôÀv<µðXö¾eÕÆZ±ýéÿy‹eÁb9åïcî¬]g3¿Lâ°žQux%H¾â·Í8T ŽÓ€£26›glPÚ'¾zúTN|¦æg+Ï;êø·GN†< årÊY…W¤TÏÞm[gãßK„Lí³3ú e¼ct´ÒMꌆ<ßõUèëi¥¶Ï´± ^&£iš"q!H@Ò¤ºjÉníf³Ì%ócUq—ú÷{™,OÌÞŸÊ)j·ó‚~a+XËðD}ÙNO‚”é‹\üçG¾sÁAA+Ÿq{!²ùNÜÞ"ÄOB&=WÔ_o«MKÊòÛ“r"œ–Qêzæ/¬A+%WñÂFcöekéçgrÏuïåÛq§yF·L6Fâ;o!iVq‹ŒÏûÄ5žço@ŽAú)‚_Æo¯”UŽNwøxWÖüP [€¥œäübµÙ×Ç ¬•qLçïJj’t83AÊ¥[Ý#kîµ¼¾jVǬ΂Р!IRÊ¡Á»Á¡q‹ Æ'œÝ%(د ,¬¶ møíǺ*ïÔ•:f—PÎg^ ÷Ýëæë*¼›¥Y¼ƒÐÄ‹–µ úØ—]åÊ„î!(R‰b2üá¼áëéîO#i'&&ª«+ÞoŸL±íÂ…â䤃O»G¨Tª7ÞÐææ °ñ7—sxä¹ …â› —ŠŒý¨±©òµ¸”«5¥©¿Á.ØÃ[ƒzÄAp½^_^žÏ2Ó;6ÚÀqúÛ}?‰ÍuüÃY³ëÜÌht‚·÷ÁT¬^RúõFר„Êë×îO%ƒ¶Ö«+ó5ëââ<4XÏÚÚœTød ¿yú÷a§ W=Ö¢ï²JÌ=Bz{{;:Ê0”ÛU3˜™y’çL7‰ ¡9ßÄ4ï„pìQÒææ*›ˆŠŠX˜ëEèØdÛs²Ïiµ™ÛynL€S¢½°ˆq@7B îSN7mnd™›ÓÙ;5tÝlZ l>œ–â·ËgÜôkHÈéšßÆ mÖ¶êê‹Åb÷c00ÓY=ŠïvwwK¯ƒÀ.Ç555AîFWç÷¹¹ç1˜ž5ðpX,<¼Å27ŠŠò0sâp=LAÈËÓ²Ld¬Kzûùf8ÊÒÒ&S‚‰A¨³°ð¢ÙlÞä]“ÉTQQ‰ÑØOÀßû‡222‚£†……Éd²økþ§Ü—LSWÇïûÑGÛÀÒ‚[L¥èFÀE’M$]FØÀ†™?ܱé“ý`f›K„±-&F·)ƒ,L‹†BpòS@©D™Î¬ Õ*E ¯¯ïÇÎëc0þ[ròò^Þ¹÷wî¹çû¹Øÿ‘,}ƒl«ö{·-"eO×r@Ó.¹Ügñ˜O`Þ†3P›Œ '/†$H¡à«”[2_Û둟•I]jŸï¢.Õ$fÔNmºb?¶ë“Þ1ÏÁû¢‹p|’ޤP"÷õõ~{dê¨âÌ‹…þ¸>õùŽ/ß‹Tß5]±âØ4ôØün§÷óº-£–Š`Îu!ÖÁï}V Î^ŒƒÀs3ku9yÑêO@뚣 ×úÒJдަæÄìéˆ2É»AÉ€!ë¹§ôiw{J0`“›#+Þê›%©YkJ¼¿WPD jBà4ÖuÌå¶…–BÞÕVóq?ÝÖQËO¾›@@„BÁ:¸lfeˆ”vê›6ç8C{ ±àýªtã>Æ%8ÇÍC{›à8É>m®‹Y«º£ÚpàJ»ÿrUž©<øã³Žœþ¤0{Ìåöº! Ýf³_Í…d¬L2ã8"|ïtb8zì¹&¨?ÈAmmaSä$²Ô éQ°”Oa~cVîÆ£1÷Ú§ 1ÆpK¨ÏAdÖV«u¸ ÿ3`“¡ætÇÍ œ@3ØÄ»M0ïáXÈ» '…žó¬:¡LÎx’ã]¯&~ž–š0}~t`& âˆÅEÁÆè7;±G–©+Õ¨Â÷*ÔOÿQŸ,þé”m¶CÀÛ/9xa„çG€¾HR¶«ëRå±–ªï; ya ô6DÈãÉFd Fj¾0D}-^<¾’'Ø‚ýG‹ŸÊwY|ô/ÛÔër›’C^ƹÙôÓûhnìÄ\ŽFùˆ>ÿÚ±Œ¸ô—ÿYgX¹HJ³ Óvþ«½êÂeÅ¢äYG?H5ô´ì/Ùœ½ÑÎÍeØ"/ÚíØQSÆçÇôµÛÛ;LF.yÁpë. Lóÿ ¦”©úë`dÊG®‹XÂÜîÊp[V˜ö±Ä;A¼è÷¸± 6ú9tßkâp<ÈXz$yÞ-QŠøŽxgÞG64ÍÄø–uû|f7‰*g ã;$²åË^ ã–aêlöj¸›YÐO>¥å'B‚ï´ÝS*ÕÛwä*•C®RüÐÇåxŽÊ ‰?qàüÞ9({X²M=Xg/~.`¡ò@¾¢ …ªT 7Î4fžüýä‰öŽ[ÿ(ù(ï4ƒôáÃ÷|a}õIÉ»1ñ^lf[ç÷YŸ­› t–CÛ~&†År¤¸CèȲ¬Ã ”¼óB\!ÓUî²\) c }„RXkg³`Š‹ Ã#=Þ÷Ì™sƒ45ˆÆmÁÑê¶‘‘¼>{Þ;A<[9ÖÚÛÓHÇ›¹“:àÇîs Õßjë¨ O„jOvÉ'Œ sxŠœ™†é+À<*ñ¿qS ›:Œ"‘èúõÆô´cO¡ÒlßKÞ)ÈÉÙrçöpɱÂ}ëRW€À»‹ßT&/I2ôTÅ…”ÑÏ-$ß‹¾ À6u’+—¾®Â´ê‚£‡ŒHo|♌|¿/-:ãù_8ö£ vŸ¸žýá’Ú«‹“8Àq5¼¢¢fnL„‡—·£#‹3Sø û–¼c÷NŠ2™¾=¹_d +\Là´YËF^Pêt:@J:;¥ …4-í#‡/Jqš>§¼ìo±ó"Ød &^®ºÚÛû¨[Ñþ¶'˜gK·Ñh§6bP¡Q§šr(Œ[>LãpOШT€¦É§cz ŸJ~@§‹—Ú—$-ôòò€Púéò²U¤Ô×Õ)•‰IþƒcNÌé5µ7}|¸ÁAüÚ+ÍçÎV/„pí¤-ÌìØÒUƒû7mÚ„’ÛY¿ @V«Õ …¢­ „"UÒâ@'Õóp˜ç÷;L×–—W²u˺„ĵAAoåÌ}ÔÛïæÉ‡ð1«€â•´êìbù‹V‡Eøoûéh™6«P@ß;'ľ¼C™Y»jªËßMœ?oÞÒÚÚ²/öÙùÉP.ß•KýüyzJ¥V54Š"ÕM@ßV5ææµwtéõ¸ëÌv Ý_ ‰¶N¶Zh< 54Tøë9pÀ軺ºÄÉܶ ‚(¥–•VïÞS$—7áØS2¸Â¨1“ÇS5MÒâŒ57ÈjkŽL- Ïþ)‚P%i¹<¼²újrr„Véê>wÇöÔÌŒµÖÖ(éwW¤==D` ŸËåÒ J5°Hõõ ãA² yy/îyXGîÕÁ#«Õl‹!Y Åm­™*¿6šÒêÈȈ\.‹EüC(ÃŽþ,³)àz|Œæìlz*0€"wáHaA|Š Ë9'ûÏÂ0°&ˆ d¡¯Ÿ÷Ù³ù˜N &Pip{[ϵúAH°‹Å¹ù•€<:>Ž ô'û0ÕÒù&ðÿLðÁÁA•JÅf³™L¦L&óãÙ€µ%Ȥ\7€ (Nú­E‰áaå©ÓÁÁÁ\.ÇÝÝN§ÿ7/ Ñhbc`Ry …F¿}['Þ$YnjjЉ±Çt:Â't؉b‘¯ï[Éžžž ~slôßo%`QÛº»ga€aØD6A£‚nqAƒŠIõ%DsŨä’Ï%šDs5q *šˆ‚&Üи>"DY†aPfXdö­·W=ÈEMLrï÷æë¯§º‹)êœ:u¶ÿÔMÊ俬öçÏø<>ÜrJ‘V´Y÷àÿ—€–þÄfÒUݾ-Þe>£‡¿‘ñ‘ÿüõÿéÇãFú»|[`bXe#®ðø¥@*‘q,Ìÿè'²æ BöNõ û^ec|‡¿IÄn'؆Œª0^òý°aî# JN²Œ™ZhÀ˜¯æ™ûüOªß nßÊK½Ó+_F°‘ˆzðÚˆ8ÇÁ¼þ¿:}åJD*yóæ †±¡Cç-¼„@ø+dPKüÆú£,XµmÂÀåTÒ¦àf* éù@£xAJ†l[Ÿ`fÆîþÉ©#GÚO&ýÙ²à]fB×’½#¾îG:ËS‹Á£ ÃsÞÚÊ߯çO€ð#1Œ@Q’jè #q”À1oPˆd7lOœ{hÂÎý±J•-‰~@ b€k}J,n禔K×ÞZ2l}Ö¨NýÞÆ™TWnáúü»`øu©[$#ÙêŽö¡Î/CÛnìA\Ì›x<ºr«ª†ó üNœJþ‰¢#ú\/Qª¼´ ”ö ÎÛtÄþ (‚ <{ˆiçìë‹êeíÊ™GmRƒ*µnqc\·Ž ´7–“"ÑÀƒà¢ænaíÉàm˜|hp±FR:l)I7²ž—ï{õ€çk³ÌêfI<†‚õ'¨Å×7¨6ÚÙw· æÙ³Ù~+P¨xê dMw量²øm‰ ’J©cáhÑû{?›¾ç{¾ÄøvvåKÇ»d`hˆ"»’?t¨­d ‹ë9*ê0u `èr³ª®L†óò¼†.À0lYŒ¯ÞteÍõw}š´³á;" »àì™} gÓ÷Ü,8E§3l¸õí_aQüƒÍTð ÑÙƒJëS=+øçØÝê€*q=³‚eõ—õ™+:I` W(¸FøJRt"‘’y°ÿõ;Ÿ{jú—{!¿8ƒml]ÆÏ}n,X•áC§¤\û楫÷†.Ì=¼ÅjÄ&@˜_µ+“Ù$ñ\;j½x~ òþ,+PªË‰ÓXõ3œ}+ÿ%,¿¸|ç[½ÌãúÍÿüòÔÝ-`Êþ¤µ‘›FŒXq<ö?cLëäÈF 2 lÊ«P¨"™J ö’ A–Þ15çÌù's\Þqšc° ‡èPMªÝ˜ýaSûFNƒÒôÔAv‰‡‡ÄNw=©ðâÑÛ>ÞÕj-¦/<\|´ZÝž—u: ëR Ìϼsvùf_Ft[?ªeE&À.óƼýÖ<—UQc´j™DÜHh%íOÛÚ”¤HPK 3âIcE%$×hQwÒ§°•=ÇÙ©ÿ©Ýª'—À<Â[1E……ûꦛÓg,è0 “gâïC©”ÖK¿ÿyKO¸CQóôþjtJ¹ ÞþuÇu\¦tjÆúP#H¥%Y,-,R ,s¦)M Ñ]l4Â9ii‹A ëc—ŸI¼³mSÑ•«ýd¥P4APAÌî¼(„0ªS,lÇ” /¨D9®‹êk/yî,@k ë.{z,Vu–Áw9QB©sàšú^,äˆ$á¹Bó¯å­í"–±ñÁ/¯E}>,/‡c©PJ˜ &Á@Q”›õ’zñÏçýþ6‰c(1‡¢‰5µïÌž–þ‰·v{E2~¼¨è+# /«Q;š¬NAzæŠ)eAòÅÈâé »Ó§ùu² ££ÃœýLïbê³°>á×;½)7­ÚòoGìÉ]ñQNŽî^®>ü†G‘a[]Û¼”€£Kx+n~RêZœ]lûC™ÔÚ"–\¿žµz3 L­h¯­l=ÚÛêø)ÆöÓTâ˜Æ2± P>MëPõëS7HœçDSâ€äݽ <’ÔRwH'50Ý&æÓÏ!Û°1ìm.%Üáç‘4R©ÑhWûOZ´,$öiKý«VUþB•,ïç3Ú}Ý¿Kˆ››=,‰ü(T£i,àZ¹ºyŒko©Ó=¼ÕÔaø##ަn†“$ûw%ŸGÜ@;X4œøn Åg'gýDOèÛæI'Oºa£Ó[W®RLE1¬¼ôŽ·ûÈ‹?ä\9qïɓҘ¯Â¾=¼¶ì.û°kÎF%Þ|œïm³/tÚ¯eCÔqïägslý£G†î(‘›ònß?ö™†faé¼ÐÏËÜ\°+ئÏí3&Ð.––,ÿé£aØ‚žÍš9¹CRY#("¡ÎýÅõXé!Õ´?ฮ›82vŽõr%áLéÊ;LµM¡ÊîT*Õµk?. öíÊùÓÚÚ¤6664†‰F¥b™Xx¸Oä×ÔÓÓ‰úpÓaCÕwM¦R§E¬|m^±Jv,ô«º‹±ØŒ k Ûõ´¦ãÆ7A³6þ†@J ÄÜÖÔ\úpnÐ[S=¹íJ2ÌÉO†7çX¯¸¡Ó,&®h¿½ƒ hêüüÒà…Ñ8ZA „Î „Ë;áæê£m%Ÿ(UƒŒQ­1f+q´'LÒÖzxØ•Ä(Í¢~²nãïûn?L½Ñ¿¤ì1¸ ¹F’@û‘+¢ÿ…÷ôÁ›Úpº5¡”gÞ¼ýñÇSÁ$Øf“ÀvPÊK-­Çtt4ßÍým¢ß„.†1«S8NùJQf[ÉVé'Ýb¸ ,Òƒ‚æt:Ȇ#555ÅÅ%Þ^ÆãÇ Á jй¹Þÿ§X,8x`ï'ëV€í¦Ój„§Ž<ÞêèÍ'N9õÓ¹ððñ<3àT“ùïº ò›§L¦(“ÌÍ-œ9Û Ç™T{0þôÿ, uu Ã6{woû4ö“îÄ‚„¼µx÷ƒ&¾Š[ç,Zõ ‹Åê›5R©”ËŠJfÏæ9 ²! f?~aç®ã|~6pNìx~mm|‡á8Ž/]&‘ªöìþX©RÑ(\¤Wy€Ãé*˜€a¼ç.Rkt,&¡°yR©Öšéͩ֡='ÔÚ"5³gM£3âââ7nÜakký¿7R²oÝ_99<âó‹o’¤`ÆŒ¥ƒJuYyUeyþsq8ÝyŽìÍ:Ñ'Ö;;;”Aþ°—UUU÷î½÷î0k+3¦1Fbö …¢ ¹Üá3&§^Hôòzûaqfìgÿ:ŸØ*ªDz‰À*µb˾µíÏÄ¢¦NwÇ×EÔ6‹\ÎZ&;îëÍ IqkÞ Y–~íLÏi˜››ÑØ!!ïž?ŸD§;\ŒÜP^þ«\ÚqëváìÀÉÀ1$-=7$4H!ÓìúæèÎ]‡.¦ž\´0¨ PMn¹¿¡¸\f’¶(xŽ¿yy8Æ]xaÑê¨ñ4„NÉ“ÍãيߡӨÊË<ž½ËØM«Á¶îí\hµè°¾ rOÝ,&Iœ v-_¸tö$¨Ëq¢ÙaZ1hTTTMõŸ¿0xιóW«+sìyÖã'Ì/ÈKm‰9p¹>­â[`€A}æ¯ÕQ+§wÆŒ3E­ ’&¬¯{ü¸!0p:Ü’ ¬êÓfp—^,,\u½°{ ðB,WTT´ÕÑÁF«-ÁÐ"¶P§¹û¬=kïÞ½à¿ÁڑЪ««ãã÷™dg¯®¼ŽéÊ1]µþˆccçEÃEHS/\éyRî÷–ëo­P(r!‘—.§/½@º1uCýxlk—q-x FðŽø-çÎ;AßíÿrÁü@¼÷ï=¼õ‹8•J½¤°°”Ë5ËÈ8‰ê€ƒ€ÓiÐíÜÚÒR™…²[YY½xHO_bpkf‡„ °:¸3»âp#óÎ4ÿ9}0ë7¨©Õj}J¹[ñNÐTGö :¾Ù}eËÆ»C’$ôŽvZVfv]Cã¦M»[Z òrïÌøPP“æèhâ1ˆÀqK8–ïè8ÔÓÓÃÉɉÍf#20ô&ÒÒ.G­œÜ«²ÀЦ×ÕÉ\\\þDLÑà\€I”–– q†'Or6$>>/,,ÔÞ&qCYEW}Ueü(ÎâÅ+4jÍ/—£:…¾‹ZÒ3êF ÜÞÞžÉd¾ô®¯,¸3ÝŸ:íDN§è\ _ºò0$$ä/‚U gkš››È988AÀÏsuuèZœ ÕHŒªša2P"q°º§Ï‘¤…·÷0 «¸\îÀ þÒ ÔÖÖ¦§_ŠZ9… _ÊøþhÖŠQý–müEÈrJÊ™÷ßٳĆÚñL¢HN~àå5ÜÝÝ0ËÄÄä þS ÅÅššžØÛÛŽ;ÖÔÔôï×e2Ù¥_’#"Æù§Ñ ìœ*@7|¸·«««¥¥å?€<°D ¼þºú…BQZZªÑh@ ß÷y¾Ï{ÏóÜ6o•Õ\üy¯~ÖÊÑŽLû)cBÇ¾Ë þos;rø@wtº¡É³K–`˜“eQó®y7&ÿ øk¬ÎÑ탺Ø\mãíÖh€Säf/X ¿3pøoAüy%)n,LóüÚÜ PxV7À©uë§Ï_"ï<‚س/¶P’ˆ3Êé$ÜÜê0ò½><‘wPµýíÛþ}q}8óZjPQ/Êýh€)(Iò鬅±¯ÁªÈ¹*Ö}‚¢[‹†[Ð@Jaçj<ÄÍÝõ G·wãß ›«“´-ÿ6G¹•¥¸.^5wñ¦¿ÙR´  Öo—£wtN†Vѱ‡-ǰþžœáP÷„h!-5Úyµ4zÄ3 îë4b÷¦(å©“Ð_é)þµƒ¨%Õ<Û ‰wyÌÚ—Èû£¢àdÉš™ "üœ<÷sBBÆ::Ußp§¡Iü†J4­oȃ4œiÆ„þ€!a«}ƒýÇöìÕ‹ÃyfÁ¦¬¢âȰ÷±7>©jPiPŽ "µ Y±%O%•òÜØ¦LW(´\ .0Àš™á°8¨iêåt!A363—ñÝì©üûOß )$ä=¼[<·!ï6Ð@÷T­äɶêôOž·´nX3ë£ úwƒ@\+Y=”B4ÏÎuÝÔG EÐZälÈŠÕãÑu"éxE¤9zmAÀ¸…Ô±wÀ°›Çã‘´Tè @`3uûŒþ¢ÍS¶b|ÏåEz¹ÍËzš>k`zV%‚aHÏ–o츱÷,&ƒ üæš[ÙW‡¢¯‘ªº•óO í’_EÁÖ½W\Ú±ÅË›×{ÙÜ56›G­{¢CQHßy™Øm´ˆçÎàòéºc‹"è A?‚-·äEr~@b¿Y‹kÈ·ìE•¶w_\µò!]ˆ× í)ƒ¶×õCg¨&ÐrÆ  g W.›ºG­QîZ“YXöAPµ]›ñSRÌРY?'Ǥg_V«äú[)oÒEñƒœ[5åOs‘ÚÆÂ[‰Z-¸žèµô+'í¾ô ÿÉC÷i{wS5©÷²Rì:š°s|Þ‰­kÜ]m9`oÇ©½}dµ7Äm¢R?yR«¡¨7™hÍjUo@õð¼Wª¥Y ®‹,7†M-¿L5ÍÁÒký#údCÉéŠÔé>3¨‚³í&ÏÂciöA¸ýÈGZ\R|©­´´¦`*Ø2*ÿxÀñ Éò°630ô-›ƒœìœu߆êês4)v¸!hVé0ÔŠ+´0ý[@9,Ÿ½§¸<çô•¦\Ë­—'E8Ç®¿ÐÐÉ#8îDÄGöF>ÿ"Ää7gâޯпe#5š—OÛšãåI£4 Å@+¹M¬Ï;f"|?=ÿt×q¹Uia¶û ÏzÂèË-¥„Cn(ª®×f¬÷œJˆ(*ÁüÀÝ¦Ž¡OŽZ Øó,C ¤Ú§Íÿ܈½¨ÕêùŸŒ–ãE/P¼V‚oŽÛÓÑÝ…P ka‹­h#øOhÔRGƒ>ƒ«ñ=[n¾üŒ†ŽÎ§ŒYæVŽÍaúúl.:œB¥²Úùëgüë€Ýµß„òLÛíZw'tœà5wuÃÚ WW\Û£&´Ji}ĽSÛçñz †µ†hôê× ') ¡q p÷3S 0ÕÀp½±KÏI%NB.næ§™Bj»¾¡^þB†$ÚÀ)SˆþûÁ5{z©ë}Æ„ æjœô2×R …­­ ¥ÅØvÎd¸O”8ö;kdæ,ÏÛ§(û©]¯ƒ&Na Ó4Ð@– nŠl¡ Á`(±îq‚BÊê$«Ž‘à-ω*¯{r{õÝE^ÓÇ¡±clÓ[_ ¦ŸÍ¶Â€aÄn[¦Rá @¤Ý¾=sf¨«Ð#bÎÆcÏíM;ýý­1×W´ÕMè£Vá8Nh4úÌÃ>iø²)K»±Œ8r¹,6êFÿp™L:x®Öà€µJi1¤wé²}TJÕîã릯ꂠ œ$_72Ç–v\ñÅä9wî¬ T9çÂ…Mã»lHzpí2A‘jµbêÖ¯oŒáÍ8Œ’ ׎_ß ·®×Èñkg]Û1ùòÜ ñòÞÑ–Õ.Q" ¡}Ç"t`Ù@@SPGš8ŸñþÄ5¥½wþ<ýæ©IÀ>q Òè*ÝQ-hàØ; ½ã>A,œ"~¼1ÿ„) @lV¾ëÆíðúG®ãÄ@œ 5ç5L¢ÒÄA¹GéÉ-Ë‹µôYÁ4u³:æ<,çÉa˜eéå5…RTÞl²ËM,Òz[áIæÓx8vû2\C¼–9P©T¢âG®®N¯À ÊШ¿¤œ?wõxyµ¨QYoÊ5[½hWÔŽ¹f–†/‰=¼6&ê—˜C«<®¤üxâü£Î\Þ-–•Sú”ˆV†F£Ñåݤi)¯Í»H+GÇšRÆæ‘ ‰À–6fâ9Ù~ò”®wãOä®q°¯•³-ÛáÒ2ÌÂÁÁ‘S]Y_WQecg^S)±°JËJ,øT}e£ w ò×ÖŠÊëõn‘µ­Ye…ÜÝ߯<+]©E¬5E%¯ï3j5šµ×¦¦Ü;övZ:ðŽkj UІçë‹Ã¨VYYšø>^WFÅmœ8ÿ´•óÈòúâ#ÀË’<Š‚–V-‘6xa blÛ>LSÉÓÝ/oá³k‘ת–N_¸•ý2KëcíŽÆïŸ4iξëm>Ò¯ÿ»«ÙtVZ[[vùƹË7Ί¥Õ(‚Û™:¯›Å-ãÛœì=Rî%ˆ¾==¢‡‹Ð§{§U5¥·Ò`]Øåä‘£F |SK®3ynå{—½67­ó?J*°íÛ·8Ø·óëäíærÿîù®PT­T"½‘œ:bÔXH«h5£ÐÓÍ ÂoØ€ËòØV]íû'=7qŸ¶=Šqû_’äD×—žÛX}¢½Gôݧr½^½4lþ,VK- :ëÖ­Ô  ¾V£Õ•_j–½^µè“šx?ʆ´j˜)² ?U—Ô^VQxòâ¡·¯‘1];‹~û©Ëz„ÏŠŽ;¼nûÆóóVõëèÑ«›û¨Ñ#¼E/4Ü·ÝšÇuVZù[hC.l>–¢BÚ×vÊQÆØÐ±OóJ33ÏC (ª ÃQ  êíÝ#û1ÐÛL] 2†Y¥„ |A´ª QÒh\– ƛÀq²¼}ŽEWB#S¦yÇÆª”¶tÃs¿ÎÊ´Teíø^¦ƒƒ½°@ PxÒùXºd$C>ý§!CK·S*Õzzvarì;u 6r’ÏEXË‚PÎ3+M0ÚÁ'dÉÌ-§b“ÎïýõÌžÔ­+w.Ÿõíþ•LŒûUìÇ`º¬ÿj:1Nûœ¢×v¨Wì0Q­ ä•eõ8Y’°yÏjpR^RšöÃYª¡ÆÉ"·gS¦ñì‘겫Lî@冮Ú^aÌŽDM“ÄWl ¥µ  …ù…à­n.ýAGnÆ,~œ/*,,*È/€Ì|í˜íi+EôòŸ³ã&}¿ï­%£¢æßùõÓ¦.psB”òØÑm<ž×þ×Ûga„.zqýzÒÒ%‹(¢ª 4/GY¶ÂÁ·Ü&J\FäŠ"yþ>®]¿Ò‹!®cŧ¥ÏjáлzþHj §r òùܪ–Ç=Ë1[M•Þ`Áª©¹æV]+×)tñóë´3æ*ÆÐ4‹ßpµäè!Âf»d¥ÿìëë9bÄ@/ç‡.ûû‡\»’A0f­0Þ³ï‡ñã¦æ=½ß¢÷t‰þ¾Ÿ-ÛþÓî”+‡³ßŒÝt"|fäº.½ò÷wèéE[?ÿîÙÚ J\‚¾=’”¶kñÊ{ªÀ)+˜EG"®JïàŸ|?É´–¦çM„4 Û[~ùÝ)»ÁÀÜÔîüK’ªŠë*œ6ŸÅ­B,Ö†º0ƒâ–Nb }Ù=(‘K×nš¶·svuöô ˾ÆÜ¯—VŽÙ‘"_ÕTHùuÌÍüü ­F¶gϧ„`õÅ‹IææÜêª;Ykôè‰éw¿Ž^­gµ.£NKÏ¥&‰2-„CÒÜÇ‹ùÝcXVy?Zblñõ¥—€ògòºZuŒ(¾ÐÙÔyâ‹>Åsòÿ}4˜2Ÿ<ù hº$ÍØq“¯Ëbã’ÊzÁiÙR•$¥B䇓?îÁâð©©ñ‘Ÿ- mB›ÂÂR‚Pîß»¿{w¿^=ß«¯—ÍÍ4Â,-Øt.!¤ÑXSDë4  *´“aÔ¿çn&ø-’þ¡6wˆÏ3RÎÐ}üÁ bt[øyÍÊ`|Qêµõ=ãÑ 0ì0'¾fLÄ>#€NïˆúÛû碷ž,>»ÕIØå£×ÔïF ‚þíÝXΰY×…!½ûö‰KQ|'úiöšˆ§µGÆ- ë0bƒRÑØ¡ý€z…R‰§kµåýmLbÒˆØÙ®÷ËÕ\\3kˆW4UÛÿ¸`ઓ‚¾œ¿üø“'¥$Q»ü·'g1tîÜ•víl6oZwÁ`}, kæÌ[fÇw默ݭ hÝ` ¼ ÷ µv=¾¥´`äX]ˆ†¢†’lÛÞZ\ T}ðÏá>ͳ"öïÑ@\êî*Ð-ó6-é3K¤RiMMM- {¢ŠšÚòîÝì»t°YFB_’4EPãü§ù [˜û´xÛ×+çÎÏd›lýr×ò[uPΧ%=“€àŒŒÿnCΞÞW^^=}úÄCW¯ 8(A1à5¦¤ÞíÑÃáw>1##Ó®ì·ñôž×¢¤Z\GñÌ_›® %£mÇ}€·ŽŸH<°¿¹…™þ^¼D,-,.¹wïqŸ¾Î>>öúj© #î²¥›Ï]Hž6e¤³³ lúŠéa¡ÖÏwÿ`ÀÑc‡1 Ÿ«V´d䇸L”ø¾Rü52" œk?¸¡âÒï°€¶îZ1è\ÕÖ‘£Æ:::Sð{éx ÛJ¥À¢–ÞÄ"‘H©”õøuvÔ¨Iý­CºN†Áóøñ„U«¶ã81{VhQqÙåË©‘–Lž<‚Ãí@QÅàwíí;K¥rOöé¿ôëzîç&Lš«Ri¶GG>Îy2~B€×@ÿø#ñÇnÏ€¹T^.»w·ªg`W[[kÃ;€ ©KC¢"÷ÚÕ“99ÅÁÁ.^žv$½¤Ð`Þ€7d?þ¦U&úýîãà÷çÌšˆ`w÷¹¹é\®}CC9íþ<À ‹’G©¥ÙÏ;Ô« @Wøå˜ îÝÍÜÜüu[Ãxö‰h ±X\PPlb¢8ÀÏ7ƒ(X×7zÇFJº¾ìKÿlñöñHä¾¾ï+•ª'¯Ø¶ëîéá2dè€Ãgùt‘Éó`˜O«5sr¿¾A<žÅÁƒÇø|›àà 6É{cÝãÜÌ_3o–W•¢ºÇLé׳Á—”JÝ‹A^¢`ÔâÇ GÄêãçèí>}ÓŽ“›VNÿü[[ ³‹gß ÆEKg·QB¾eo—@/'>ÏC^®«Pf²Xææföíì¬ù¶¢¢b'áý‡¢¿Þ5a܈ùó§ZZûPTÕÄ ³å²ºsçöVWוffå÷ìéæÛ¡Îí@nX¾ü˼\XxãÒÅë—.¥Œ5ØÑIèìÜ3/7ÅÇ·¿J%}”u§ƒ¯Ï 2†µ¸¤,iŒJúðuж;UC|únòòòj‰óçM›s €®¨¨¬¬(/wp`÷ våYr5jÝm/Zc ˜W.Ïš³áôékãÆ ÞÉ5µùpÒ‚{…… ž°}ÛºN¼ŒÉf»*•uB¡SqÑýFE#‡k½,<¢±Q÷Í â™ ×ú:ñÅ¤Ó WJ’+HÛ5q=N¶Ö ¿Þ73æÈZ-icn2:¨Ó„¾ÝÜmèʼn©‘HçÌYzæÔ!èÅ!B9„ZŽ1¹<žÀIèÐ3ÐÿÓ5Kœ™ù‹XR7sÆ’³?<ôvÚ™î=:ÛÙøùytõ %ÚQôý5­X"+.*ÍzPà .Ñd)6nسóxeEè;"&Ð"ŸŒŒD¾ 3â?ÌJîàãýb÷I¼Nt}˜Jü¨yåà94`t¶üË1cÆÙÛÛ?÷Ÿ·œ‹fJ¥ª««ÓYÚ €‹ÊŠÎ~VA½\íiRôcPÌ(/·xÑ’-ø[¿ŒŸ ÔgzF6c.Z¼qýÚ%E%e …2|Y$øHrÒ©@úi† ¨­…,¾zåæ”ïN°¹¦/ TjÈ»OG·ûtõp¢•IBm {wè™ýÒJõ p³óò Ü={Q”D.«ŠŽŽ]°`ª»G°LòF1ïw—3?ýBQe.ÎÝ o€ž8~zõšíUUµ‹MÞ³÷tUÕM]%g?I‘„–¨“×甞:ý`Ò¤`¿NŽ$©·¬Ï"cã¾?Y\t«¨¨0 `Ì¢EÓbã⫪²)B éªiÆ%œX à É£T’gtN0òLO÷éݳu©ë¿/…àG€Xˆu[aa AÈ{2„˜¾ÿ¡Óº‡š]½’ö)8ŽŽ^1vÜPठ<åVZúüy“7G}¢_Ê„ uý‘æE­fdÂyÔbÌÜ’®ÿOÑU7úvtŸÐÇ·=›Ã^§|jt<þØøIã±3bðKŠî½?ìÃûéW ÓõfaܸcF>ûÓ/‡ˆ]¼r5eð`@o¥Ü_µzÛÍ›÷¦M¾tJ§Î]µ„”$ ϶bÀÐhgWÜùµ¸A ö66ÖÀ0[XXp8@¿ëÊHÏò°èâ'h¶QŸÅ4Ìœ9fݧ –`¤¹žzS©¡=A˜Ô4ŒU‰32kºõþâ9ð÷॰ÄB¡Pb0QUU]*a¨zð{î¡k©¦‰Î0b8¾+öÇ]±Ç³³/i5xÓ*x+À;‚`¬O£¾_8kŸoMOZòU䎮։½7hØ¥K'Ô¶¸àŽHT~åjòúuá•Uµ?>¹båf’lØ·/îÔÉŸ.))ÊO¼žñÅ… û»u9uêˆ#GÎ{y9Ü¿©“ŸŠatnmÓªF?&›,-•\KÌoh ¬mø|[k ÝfffÆf³ Ü£ñ¬F¦°°033«K³®]œe2À ° >×F ò àfX<³‚¹}û‘#G/mûéMÿ|ò è6Žãzï´°°ØIÈ v77ç4-1è{ ·šýH«Ç{ÐgvÆž›8îKK^ñÚzLè¢Ãu…á€WÃb ¦|8zÏÞc§OÅÍ™»ª ÿ¦Ÿ¾/•ÊÊ+îPZŒšWWæ}·3>**¶³ŸçòåÓÇO‘êZ‰4áüÍI“Ó_KQ &"*•Þ¹[”_ Ðì°i–·±±17¢¯–ûG6 Aúh¸?#ÀŸ×¹³@o) V Å¼ˆÃ[juBBjHHˆ¥¥åŸ 4ýÇa,H}}=혊Åeeå55Uæýû¹FCûop -  |2Û¿¹Ò½{’¨ëÕ³k³ýÖIˆlB€¾Ÿd“=¦_/ý’¼ÿÀÉ'vê£èÀ/ xY¼LV»nÔÈþ¦ææºª®«ñI)êäR.—çàÐHZðÊårõOOz»Y`4Š‹‹ïÝMïêoѵ³#­ZÌA³n@šÐ\ìjâ]ž¥˜ uþd´ñ»¶iL¦L&kâ›ÕRi-h9‡Ã œœ˜m £G÷¤PS)HJŸҲ¯GÉž½'W¬øjΜ±‘>bs©Õi]ƒÈLT.SdgWÜJ-11±´³³µ²²ÔOq o&“©çØ[¢H322³:uäúwu"Ê  Z¡e°¾Ýñó°á¯0ÿÿ@ðRï´)n> ðqéâ™)“C´dó£†ÉÅ@µ€€2œ7\CGT"TFziVV¥R(›pý°Á711“‰^'EwGS4=|øˆÃVöéíflÂR)µ™™¥¹OåÝ»wóððÍ~}tþ«RÁè5”|iöÌ~„FÛ<ã[tEbôJa‘8ùF~c#ÆçÓœM¯ÒMMMõ”íÝ‘÷+—ïÔj5Б G Í,Ýö:òý7ƒj*>—›››‘‘ij »8Ó…ìò d‰ÚÊŠocc„­§lÀ+cÐÏ%C¡ÿùí_›š´˜À¥Ëš¶ÿäýÒíÿ`ï:à¢8Ÿöî^¿ãè½JG© 6ìì½&jÔØb±Ä;Ø;VìÆŠT@¥÷rôzwÜÝÞî~ïîÒE”hóÿ²¿ýéݲ·÷Þμ3ÏÌÎ;Ïý þ¿oÿÍŒ/X!èÊ¥‹Õ9'ÔðQ/féð­…™Á6àÿÅVX\ñèd/WƒW^u¥ßã‰xÕ´Y+௲›ÇðŶj¹âî~g{Ý”÷i«@[ìléwÁÍÅîk6òŸä¾Ôv|϶z)õó©ÃF@muß±ß:îß½ Çÿ³ÿ‹ÛÝû- }pâРÖ 0_âjÖí¤§{»ÿlÀÿÎ&‘Ê‘ä‰5ïç ":1jqNƒùJ¦Þ6à lû¶ÿào°³úÒ€ ’JlM|.¹»9ýk4@\QÉãs?JYþÿm»öÄ¢°Nü™FTÀ0<¯˜òýš¯š)<9)-äÂ6)3a) á¡¶íÌý{õ §¯óŸøe²êgÇÛ™id4+öO4‰%vúÎ{wlÿ5j@HHHtÑ„¦É…t'T±9 +g«¾‡òøÿ­ÂÞ­szcÔ‚ä?µ+]ùЩߝùû“×-iÀóggÏEHM?2’!¢Ó/ÈÇ«8Œqißãüüº³Ù¬ÿWâ¿f]ÜC…5רjuçRpKSÊìu;†z{¹| Ra‹×ŒÅøYï·jÔ¥¦æo8¦d©©\øNpópeµ²1Ša§w‡‡Ã%ÅHUÕ¿E˜,–R]µ6êèùÄœŸ„Ÿ«42xXºbê¬ÕL&òk@RbêÎ £š½Vð-õ¤¤k¯“ Œ8>~]ÜÝÝ‘O覗‘•unÂ8¾LFük×Â(÷´îãzá£Æà‘Ar©­NÇÐNÞnÿ˜€ƒA»w$”¦Io‰º•ŒYµI°–UnÔ½ŒnUIú\­kÄïäÛe ››Ë‡#iéþ>½™JÅ¿Þ%`¸` ±¯ý ¢Ya·h  Òvœ]ž\×Ë®ÖüU=)?®(ŠÎýyÁ-¯ë.V'cø}©¿ß³®Þetb°\߀×apÿñÖïu¸Ù½j•âÆµÏiR*++ãi‘Eà q)ÄÑà°U2q ©@[[VVÊV×"Ë9!¼ªL¬¦£Uósa\VJ’‹r4uHÎE²ò÷…?D?#9‚#œn3´8P+•@`<ÀÌïz ªì¯IΠÔN×+´“—ë_§Ív(%â’Pf Ž8^³µ/0pÞkPoñš# þDIZˆ[ZÝÜcÜÂu÷î **,«I0H$â‡0šêëOí [‘–Ááá¨B6ôiƸٮ¸åø©éÔž&—/JͰ°€3%ó•iéR©¼Fe•~»ÂÀÁ>÷În•D®Pâ¿må#øŸ Ø ¥ôM¶WÃÄpÚá†ïëÞÄŸu» UÍ5ê|jð4ÁF;Y3ÙlIªú«'4Ùp¿vû,¹V&ôž¬™âd25:^Ó£°éŒêjçéÖň°"=»åÜ¬ÂØÓf¸½"©Ä>è¨ûa¤äp%¤P`*ð”ºÆvSÀa°É_G¶§%µ–ˆ•îÔƒnm“V;Le"Š1ÏSÆþÒ÷èê»2Jõ±ÏI"H©Ä à „ÙT ˆ½¶'à øZÓîWR.Û I“—Eá8ÄäiáŠòšaÂOwݽçµ:œéò ¤Ù( «ôô¨yO^×¼ 7ŒÌé÷½'ø:-©Ež“ÁzsM¡¬â?ßμŸ£>ÂQ3G…B^{ægù]zc.LMÎKN’£¤ßÁè%l6ŒtªFI¶J—©¨3«eà5ödóMßÙ:hUµÒÚÏÏèòÊmƒù6äB>s04Ì„{}޶§ÕÐ|ŠÃ¸éÚOYÁ]YÁm0Pë¡Uy7åÅ VqถÝÄ‚çS³îö4î¼_Çåç†ÈÀZ;E/ÍýPÐ 'þ ‘Te—¾¸'{‘Sýh¨\yw©îäTNzA7.‡jŽ@ôú) òý^¡”^—“Ÿhfä°éÈ„i÷`*l@·™v3Ö9[›º%Wf}.¼Aà”ç/P0V½xÊÌ®Äey‰á¹ÓÎe2áãÇ'ÝïúÓÞn ÖÅKÒŸ=šqö ›]}`ÌŒ¥=³¦?ÃØj{;œÇ@VÇ¡-\ÓôÏoŒ3œ6À’[ô}©ÇcÕr„M…kÿZ{*Ì€ žMæ?1ï}MU—tÖÄzೊ”–š™¦ÍwÉçµéÔA »iÿvwÏyô’û/ ‚×÷îÝ?øû&Âj¦ y“ÖÓsA ÓDr…ìØÆ¸Ç¿—ò$Ðoz ïŒÉ+Ú†lHÙyræÛäp²‘&O´4bÊJã ûoê&ô7l¼~}‡zžF”y5$ëdÞ÷eΟ6Þ¦_±·¯Í€h¥$%ÿÉÈ÷cB` ,ú=g Ú¤]2%Iá1ÈqQònMÉÛU$b0&0ð-x9§IñqÙ¢I37±YÈóO^ÜqFk߬§oúºÁ™BЄ¨¸0fùvz{«­…'¸x ß¬Ãkâ Xˆ9YyñÀ$|¾øªvF,ûGé:-¢—°ruüzvʦ¢ÚNË­£X yÉëÒ˜eB³Öß'ž÷d®,åéu(¯y%@ YñÓÄ0ƒ«¡i;#ãš ƒIŠß*0VVôHZô”6¤€°z%°ÐÌ0ÊöÚ·}¡\¡ü,pYTTŒ¯`’ÍRç§òÈ•R—Õ6·¤^TΘì›É·ÈžËáqX|g×®ú:f»Oϧ¿.>-Ç5Á¼¿š"%Uµá ‘Ï@5φÈ^äfmÞ”Ån,~»QVx/õœ&Ž*í'@º–£Ó¯º!,&ƒÍÅѪ÷sÀà¨8ó†³õÔ’˜åŠŠxŽF;2: ´Á~¬aª8šþ»=Z•Õ.•õ×ß~èÇùœ¯×Ÿ´@nÜ…pf#¨ß(ñ×4¨–ËBƒU$'•¬ ðZ¨–"M‡¦[dwåî^pd\ÀOJ´ÚHÇSµ.þÆ4Ú]3GY‚×huåðß¶qqÙ›Á8ÖùX–™¾ê3£Á™5T»ÝbëÀ&Ï"”<}÷Œ«V䪎GËÊfX.-þ:É7i%ªÇ&‡Ëw˜ø^É}0a³ßaœRQwN¹hl=8jR&˜kd›ˆ¼÷íXˆ¢ØŸÑ€òòòe?Ì›9~‰®¶¡lõ9ŸÆŸv T’ÇÜØþÁóKZêà(Š¢žÎ=šäGê}NpÙjñi/¥ÒÊ œ[>oânGkoª“ð§îDÛ®¨ç5Jª^—ÉÿJª*y<8]] 3jàÜ‹PaªvvÞÀ¿ÓT¨ ÚfŠ:IÖ«Z¥à— ¤/‰^|µ¶Y[ç2˜ÅÝøÈÈÐÁ4s=Ìf’2`02cßraÏÚ\–—¹,Ðâq uu; Óé>vìš™·.¿¡¯D‡ðá_‡î¸XU*¹¸X,k¥ÐÏ` b4N´à“g`9(¾4f*Í­5ÜyÏ0у€ÂÈé\_ªÍÁŒB«R‹ß¬Š¢í8‡§ãi=8¥,a+¡"l†f•ÅoRV¥Ö¤ Š†;¶ û˜1¨Ñ€¼¼ü^=º4í»‡)u4õ¾5'dÇ{×…öí>˜Ëæ+J‚òôîN>[÷/WW÷ì:¢¢²TÀž¸´ES]_ÀÓª2kâfÚ`´©õxmd×x–V:Z¾8é»íon<E¾ƒ7;–-y~xæϩÉì¶ŸwêòÔ¡÷"2‰Çk3ÇP^ø%½ÊäÐ_W£’J¨æúŠ15•ï&wŸÓ§‹¹ «±Üz€½~cfæXZVùž º®k¬½a ­Á¹Ó>©t¬,ÓÊbw M£.Çù†þzš`ÒI„oàoês¥ð嬢W‹´ì¾g¼\ÚDqꌅF¦‰¨SˬE0Ý$òÔ©“& €Z~4F…&éYIWïœ ¼«PÈØl.“̘ðËÎÃKw­¹¾`í ®Ä%GÞühÐ4_ˆa言yÏ^ßÈ+̨%5«¯!P¡|ÁUÂùäŒWƒWI%*Ý6:¥¢2ŽŽZš ¢íÍqïfµqh« 5¦¢D®dè¨e•Yz{–¾M 8¨Š«‹óT 5![.‘âúÆ:ÅùElÝ6&&:‰‘Š©ƒ­e„•góLôÔÑ䘾Ž>[U&­nE¨b:dðÊõ³aF›¿é·=ÅEI&S¨©Ù´åÂ.ßR³„š¶ßWåÝÔqZÅÑrιßËÌÿ~æ w„Ã'T²ÕÐä‡S«í)+~FÊeŠÍÙNç}}:6¯`»÷JïÆý<[z ´&%=þ̵£Q±Ï!ê÷ùu |qÝÞÖíû k–n‰ªPp-ÿÎCQL™_”eflý(âwà`€¶±˜,:èB›ù­Ð€æ¶jA»Û¼—L?Ìç²?Ÿë/ÚL²ÕỎF¿ºéÙ1üÚ‚‚"‚¨Öôý)­’ç>!-I%Åã°ÍðŒ´«–Û¹º]+ÓT$ïmø¡&z`Üí®’<›Ü°²èá)÷#Ðý¢ß~¿™Íf4Õ€ÄÄ$3˜O6"£ŸÿCµÝª>–k$c"êÝós7Ž%¦½¦ý›‘K^Æ„%eÄP=œUöÆšjãîÜËá'§GXþ<ïðØy®<.üµª¾~â5âçÝvœÄ^ˆ†Ûˆ¯¤ÿ œ8qqëÖ-11ML\ t/œ!®¬š1sfèÙÐA¹#ÎÝY0u¥±@m»ÿŒ¢ªô¬3C›Ç‘7ÖϨ¨(ÑÑ2¹vrΪ¾]; üb³ÏjçäÒLæÆàý4ºëžˆŠÖ=âq8Ç;·Ã.üöØ‘C={tY¾tÑí;'E9‘%ÅñgC/QdNl€¨Ž>²yóšQ#A¸ŠÁѱ­çþ3ðî)§¸@´VCòòÂGÁl®BL ͇Òªâ³÷õ îOàõÔ[»?è— ØÞÂ\‡œ‹ƒ AI¼†êô€T ؽ{/^±iãv±¸ .¨Ùô)Ж׉«æ º3mô|}“àc+‹Jò2r’ÇúáàÙuãÏ?s/›Íðð :èêdº"¼F\©ýE{yxxºk´òa5¬RF…ž»ÙÞeàäoFÞ¹s47?ŸÇcà ÖÖ­{¦N½há Öèßoøöíû&LœP//\©e?Ïjp,[ÛÜÔP!‰¶Ã˲nú3P™yÑÐk 3ë ;ÜbÒG—0«p¨«ÆÚ¸ÄÌP\,¦&:Fé%x‚V”*¹PQ@µxÉj¥R±tùº¢¢Bæca¨7¹­‰ññ³f~«§§#¨ö}dëµ3»î ë71=3öüõY¢”Ç7«««‡÷›qúÊ®@?´C…¹`˜™9ƒoc1 b°ÀÎÎ ¾CÎ'pUI'«\&Òô³ Æ(sË wÓ‰¸ßß*”á¿ _~b(.ÜŽ Éö`<·¢ZVVXV­’¿;µ,4b¨:MÚ˜™™™‘‘Y(CuM5”Jr2e,“é¢ É£>JOɪ¥ö¯¼wçŒX…?|züxÐØ±óÌLÝrrrŸ8ïïç îí­?î¿}a²&vŒÉ5hÓÿ•žëº¿zöíN\-³Âˆ)æ½8аkÔQËq “gÿ cÐàÑ"“?¹¤O6BÎÎ.g²¨Ž}—y­  ­Ìļ‰ïÙ³¸Nž#ÌÍõô._½Ãîõ/ƒ9{Î’à=Ûhˆ@F ª©®5~Èwgö<<¶å÷>Ýgç%ãqúJ¬ºŠ4r:*êž……¡¹¥Yzf–Ÿo`llŠ•‚ƒ6RtZ"Ê"­‚¥™í‚ï~YýÃöZàùÁ'dî†+ž]Ö’T,;º [/ë8•œZ¶lrE|!77;G]ıÂäÈHêWÕê.!Õlk_¤”[ Á™ÊlRQ ~ ÈsÄÈÈ'u´´!Mc(+gÕXG¥ÝÑ©à§Üp`Xt}U ±¾E›«¡¿WVøvüÍan-‡Í O/8éPFzÐGI:UÜÕßº‹ÅqžžŽ=ztÁÑR¨ö&ƒ;¼qÓÎùó—‘Ž©±1д›n=4…£e[9&ŸB:N‹rîtf uA€¦ß!G본̓=@qJ#ÒhMWW×ÏÏ÷XHìÓ§©LÆ@êmmRttÝìì|nÞz`em¦­­6hPÏ^½::¹¸¸¨m[Ÿ9s&{òÝŒñ¹¹y½ûô¤amå(ÂŒæV%¨TLðehÕGáa<§ªÚÝY>óÀ橾Ʀæ–C§Ÿ~þ8†…í.%XJç)ß×3am(ÿ‘b“Á µC§iìW0Ìf2õ`Ø^Šç=Z1æ÷|ÇK ûøUEî^ÜË0ÄíAê§Ïï *uw°³>}öJiI2i{ð&Õ>$%%IBXË×ï$+|NšÓÂïë@áòÓûû4â§mšÁ0E+++i²Áââ%ÛÙ »ùب y”9§+&‹]U)›=wÃñãWgͧ¡.8wþ¶«kÛÛ~šôÍóç}Û¯Ÿï»wÉ®îýÁgNŸ :¤¿»gŸ¸ø§0¬/ʉ éço¥§'üºš1YLªj½ê°NžxáìÔÎÁÞ†S÷  ;\ŽãØòŸÖþqûÁ¦ +2³ò¦MëŒa0ÍvúôíI“—_¼¸sè~˜ g°„0lB¥&›2mÑš_–¬]»}áÂYv¶6ïù¶8õ`áËEŸÈDÙð0†nåÌí8ÓÚÚ€è£}„ègÇ …¢Nrs sµ;w²ªóëx'à°Yjyy#G/zõ*nöìñ#†÷qww!=„ Þrèðqª,)ÊŸ6mÙ­Û€úTW—{vûÖ¹+WoÏŸ?LCƒ£ (jÁ÷ª Õ$UÒÇ2“Ád2›é[-Ð{£0ˆL®äs9Ôº1œîx"­Vð¹ì&=½È•ndÔoð¯^åH$˜›k[[+€O^Á'«Î`aÀÀÞ?Ì›æååfhìRý.6!:&¥k7«víL`‚áâ>æé“Ó?¯Üz;GôŒŠÅrÈÍ~™—BQÂ`hùtóÞµãWgg§÷ᮋ ”—ƈƒ²Y=È­²b8÷pw%ík™iPª ‹i‘““[VVäè¨ãçkË€’¯®sZѯ_MŸ±6.>méSWþ< °åË6nظ¿oŸ—L÷ë1®Rœ`ÑÆËÍÕ)(èׂü¢½FèëÚÛÛp¹Üe?Îþ²»ÿ ;œG?0#q\•_œ÷ôUX\r4°U$]]­ z<çG"%›Û¼gq±±(ª¨\1~IJC§Lt´, õž¼K¨H7Ïœ´éÔe±TŠQå",âé`Õµ];3 >¿y-„!0€Ô ôõML 9|~qAž¡) «——&›ºœ>¹;(øÈý°‹0l(­LÀpL$ÊOOËÊ•͘è>°X,×7ì~öÌ–á#†­\±Q(þ¸tŽ½Ï€=ÊËÄß}7ÑÔÌÌÌÔ„‚pp#Œ‚pÄ)û _.i[ÐðeaÒ€=ý¯sU­î(YÇ/ T¡–,·¤´¸³·‰——%E…Tà Fñ™sîÝy²hɶ””¬ ]+¾2"ä ®çr¸¿nXæ+~š³vÝ\®Ubü}=½‡á/¾Ÿµ,+;—Ç㺹:/ýqn×.Þ-Œìp‚ É ×‰©TÊ™ FÚ9]#èIfôÑçŒûu»èÂ!ßy+sŠK|]œ½ÒÕëò“HC-a/ç~Ú¹ÚY°ù&%…I-túß®¦ÆS *˜À==ï‡#Gp9œã!»a„K뾟5•Í6-.|ݧïÄ!Cz/^8M‰*ËËÅ@^G¥uíæàÔθ–‚”·fõž‡.ff ž¬üÎ{wŸ¿TR%»uc¿Ò{²­•Êt¹¬R tư,\…ŽŸ8Μ)zºF›6nÛ»g£Å JÆŸqêÄ>++ËQ< ÂUoâ^^»ó{ð½žæ‡¨!¹:°ÅsÆb5W¡T)U*.›åik>¡—w/wC†ˆ ôa°ÝܺDG…7ÃhI>0ç+ª+ªe-]{€³3^õê;úù“«BMmOϯ^]=zÎóg¯ÒR–WTèv$ˆßV*{°p=à¦å妤fefJ§Ïð!Û4ýšJ%.T÷ºp~{``/àîß¾vÝîagÚ÷Ž‹{046.9==®)= R¾ZÃ4¹k†ã1w7W55µæWŒ´v·˜EmàŠ†††2™ÌÞ¾è(·ìÑã·L†Ì§»••>8O…‚ÃþþEEpœsáÜ5 ©™Ñ£ðªV¢Š ëâ*ÂdŸ=ûûé“;XlT• `ðå«w‚‚ŽîÞ°iKо=›[ª_¢¦…‹sÇðð$6WÚÂÄòvúö>‡Íc³¼'õönkaEM®¢.c)§N˜˜ À]=CÆŽ™jll¸uÛ^jˆÉyV¤‘±!“5…ÀUjj€û+xøðÙÚ5óÝ=¾}÷Ad€Ÿ©&ܺù°WOoÂùûûQ..vD02EiYixxlA!¾hQ²ã&¨PBÏÀçø± C‡ öö @U˜X\uùÒvŽö¹g›éTP™v¼ðå¼&ùŸ;"`ÿçûOãÿ¿Jš$hÒa*¿T˜——§¡÷ð·14Ò¬ (Ì(ˤ«×ìÛ±ó¤‡G»Ç7ZZ·[¾lP¨¶lù<6§j¸‹q•ôDÔHÃdhv¦¨ã¬õ|-m¨!!ðÓB>·§›Ãpw_; }|ítßµsß²åë¤Ò"0íê”àä鋚šêý=¿$(*(\¿áðÎ]'‡ ír|#_M3âùëN]FˆDÀ¼ÔÆMX‰éR62Xº&øÌÛL—G¥£p+#½~Ûóïhf C~ûØZ*3_”l˜µÕƒ°G/^¼ú㇗/ÒÒÖ²€‰è躯,)yMJ"=ŠðëÑSÉW¬ÜuäÈpÖöíKÀO¢!G5ݘU"­¾?%/OÆçk˜™™Ô}ææ²eÓ~^9ćX̓º‰AÝÔGê=ùQŽ]ÿ¸¦Ž«Åä~|œlÔ…ˆZÒÜ2œQ¡hl\¼««ÓÐaßüq;lèà~zúºq±‰wîœ..-›;{Å©S;¡šõÂÒø<9éžµ1̼Œx±ió¡‹—îøþ¼rºGS¨¨–Iôâ!`˜L$..ïÕ뜲2ÜÂÂŒ¦=¤™i¦Hšù°–:óõ먎´]]Iþi›cdØcîÜñË–ÏÄPUsüÓ J š­åJ/޼ǷÿT›ÚüÏ?£ UX:¿TI‰ÜÝ ;xZø´6˜D@0Çäçd‹fŸ<±É¡­u£yßHjÊY_¾J̯”úuõÓì¼F•8gÑ«…Á¾!IUØY AH…Ý?SPX2fÌæƒù'“IE9ùÓ¾ûI&«Þ¸iñ®Ç<ˆw~þ¼ ‹MjhãX5FøD-E9£¢\óFôúužP¨̘ŽN3Æïß&€è:%%%-5aúŒN0HªäêB!-ûZa3èÙRKAýAc‘)ÊÌ®ðôô_ú!tüÏ0LЪÐ0©-‘¤‹«A'oK‚PuË5Yg’˜¨…~5Lôõ`6‹µg÷å±£jj~´²¯Óy¿xvûósscë67®ã©ÙDð]@¢ÌupöžÝ¿< ¸{÷é®?=~üêô™öv¯£"Lü“ÝPkˆmÁ%Áï*(‡…¥””©ôõ ŒŒ i.ã:¢ÓOᦧѯ_G{zjy¸šS½›N×Ⱦ¡G Pd=Ff°öî=3xð †ùŸfáÿHúÜ0 €b‚ûÆßÖÖ–~,yâd’¤ª¼³·©g €ÉÅ^5ò†ÈßI.í¢g?DèÂv•S×ðù¼––Ô“Ô0¦\¹bÞ°߆žÝ3fÜìô´Ç½¥$‡Á°¾€Ï{~SD:ñ.]<'H$ÒÈÈ7+W|·ÿÀ* "sæ¬'p™ŠÂàÞ’­¢s¢¢ ‚¼{KOMMMñ€o-ƒ5¸3ººº lWHKKÛ³ÿéwßy““†z2Só‡jõHÔvq¢'1îõ'J!Ì#‡Ïúùù‚Kµüí_ Ë _( ¨?_ÊÉÉ“Ë+úö±µ±1 W*Ö™¨A@H©p¤‡Ž„I«ªçÍü^'Wju!]›T Êh=Hª4µ ¢ †µAœ­­mþîí Cä%êt¾^¦)š=Z*•ÒáCii–ttŸ®Ö¦fÚY~†TJçÎG™šÚ99µ+((°³Öª«QÆ›ÚZüÑ€˜ž| [-=ºfíU-YôÍü…“Ùl˜ln‚ãu°ŽÉ„«¤ò™ïbKÔ…š&&&ZZš´àÁt°ŽA¢ ø/½42ˆŽ~ãêªîîfN?M¨1pˆ@vg=öGç.~VVVŸB õ/àkX´BE’Å…r¹ŒÃåjki[YYZXX Ƴ§÷‡îÕ,˜¬5û½^ªim?õ<ÞÂÕÕ!8hy'og„Éj¾3(+““SöøIFi©R_ߨÀ ~ºønî—î58ƒ0!55-%%~útoúiB­Ô‡ )©yù0Àÿµÿÿ$lÕn4—Ú@$mnnTA"‘3üH:ªSLÇÒ²*˜ ã$@£šÔMý†H°Ö—«”%‘¬B+ ²ŠS*¶b0a` ^GåDGçâ8„ ––.îîZu°Øù„ |)ð2–––`$ºº:ǎŸ»kz¸™¯DUým¼LVRrNtL €ïçÿÿÅ6àýÙP7f¸ŽØ€,ÓS†‡?òébÊb1ؼÞ$Dc0HÔ¹ÉË+°.%UbCC`çÂõ¢aݧDq§1È„ ±±ïºt1më`ŒAN¶øÉÓT+'''SSSæ'SVýï0NgŒdLÌÃ}=‰:³ßHê V¨8“…(QUZZÑÃð ˆà¹7„u`º“•Ô_%[8 ***D"Qaa¡X,f hª¾™™pˆÌÖ0–1¡ÿ• LS 9…‚/WTSMÞ“:¹¤ œWËÃÓ23Ä,¶ÐÌÌØÝ­˜ît÷7Àº/²A‚1Çü‚BArô}n˜«ÖþŠuÌ Þºu;0ÀÎÈH“Âó5ì|rrÑ«WYùùJssS:v§í<}ãþNX÷Umÿk¼Ã`BdeeÅÅŧ¥%»»±Y ¹B[Äãi Œ< ëèäü×?ÝÿÓ€Vo(Š–••åççWVVÒ«£y§^|brþ? øwotbQE%v€¼™ÔöÿÖη¼ýŸì]XWמº}aYXX:"¢Ø "`ï½kb1¶{ì=–Øc/±÷.*ˆ½ ¢‚(Hï½,lßòß™¥Ú5ñK¾ÿsžYvg§Ü¹ç=ï{î¹ç~]}þëö_³)UêÔÔt•R©Ö2kŒ™ 1¡Hìäèhn.úÚ8_QàëöÿvSk wn†'??ãÄ ·&r1f@ÞTÄŠ©KAÊÑxdh[ÛxöiíßZj!þÚh_Qàëöÿd+.Qž9±×Z³ÖK–N±6ÿžu¼¾Ã`(Oe[ÖÍ¢V¿ ¶¤á×6üŠ_·ÿÖ xøë7îd?]ÐÌö:ý®©àï@˜Í•(ÔZ¾( ¶pÖ¦M€•¥äk“~E¯Û•ÐèŽÙã¨_é"ÉøðÂëïe(iÍ£Š;XÕþ&(0@jaöµy¿¢À×íß¾%&§_;³ª™ÅN!×H~RÇüXÈW‰âUÄNÛvµ´ø*¾¢À×í_¶±“^àk×®çE-i*¿ñf §O¬yóÎ8PèÍ^ˆ]GȬ¤_ÿ+ |Ýþ*@­9vôƒv‰«ô}*àïÂ;(ÖbJÚKÜF´ ¶”š}E¿a3ˆœœ¼¨ç‘yyÙzƒ–Fõ̬GŠ+•XyÔööp÷™‰¾¦l|Ý^£0 '$e]9ýKkëÝB\]CÐ_Ø%Ù T‚xU'¡Ó€€ .Ö–â¯(ðÉ›F£¹~ãÞÓs:<â)Ls¼™¼<.¯ùQÌ:iÍ(­ØÚÜÃÍ¡¡“££§—§Xü5ÙãB¯Ýɾ¼™ÍêãÌøË!€ƒR½Yt?ßydpP µÕWøðFÄɧÅ7òSQØTࢲ®\ù¾ü“Ê„]€ì9)F )‡t0çÛÖõlæé^Gf#53ûšòñ¿bÿ*µþø±ýN†Un’d#õqVý`¬X(Ñ ¢‹Ú ‡¶•ÛH¿¢ÀÛ·‚‚Âý‡w%+. \=[â¢Üö+LÝT˺ªeß‚ ìÞì§ S0PFœÒ -8žVf®®Î ê7²´²Àpô?Ü"F’,)-MŒÍIO7ôJ¥ê«Ñ~ )PX˜m…'p¥…¸P.N e\ØhšþÿŸƒƒj?x«X(T bË:rmû¶mßÝFföÊ7Š¢”Jõ¾Û“JBHDa*ñX0‹»±r¯ÜàéjÀüÇ. WC S!uSÙ8º&`‚™ÿI˜‘¡×ÑÝ¡‰£³gO™Lö…fß¼z9áÜ9nV&®R2‹XÁ÷óuûbh`êR@5Í%z[{ûú>òbN)EÿUvðEÄ‚ÓÈÀ 6¶6²ÿi`*ä…‹ço>Û¯ÇÒöWg•µ×`ÕôÀÛÈÂ;EDº˜V`gêÅÂF1—²çÁ2/׆^õmím¤RÉ_œ(–“—wrãF]x®×C}løn$EðÅœfÖÍ|®YpKè·ê¿ƒ0ÅìfyeSx‡XF €X¶•[ýÏ¡€iÏ'Ožž ÙUh|€ HuÓ}“ù¿ßæ_GŠ·ˆˆ÷ìÆÔ‹‡"‚Ôs…°³Läé`çR¿^cGG÷£æ‹›ÔWîY-ÌË…ÞQ’÷Î=zƒÖ¡Ž€ûÁ¡‘ÔÖª]'8ÕÛâ1Œ|¢a°•häM7YxNÒäÝH¿ UK]~«X(R ^–uàÈû·ëfk#ù_AÆmæä=ùçËœÓ4ªC”)Œ€CT”ÿ¤+ê‡ÓUÌ¿üchÓ¨ ½MDTá]N+*õe¨Ø¿&ö Ì3„’:‡’¹Û7±³©åååéääÈÖ[ínDDø’Å‚¬Ì H’6oÞ§EûºdêÝÛÇ™EØ(1·÷4ÆÑÊ~ðÙTÔ¦qÓáÅ\Se¹òæÊ ß÷ôv æÕ®uß@¾úÕãg òõè›aÄ¥îÝûøHòîœzW=°B“:ƒRâ9f¸»— m ` 'ó_=;¸=·DÌå1UyŒÄiЪ¡sÛSù!ûzÎ-00ã=ÿL¿4t> ø?®%~U9‰ð׾ã˜څs%>ÚˆŒðö¤Aiê¨&ã¨îŸÞ)GÉÿ;ÙÁÇVš¢(J§Õݽs'!û‰¨gø9°Q²rÁˆ6-€`ös¶fxÅåaÖØMVX$i2þÊr»™Uqpö+º\”¼üæ0ÌŸ…螀 ãÊ^Æ•Aañmär {”´r±÷®çÕÄÁÑ^fm…ãX^aáƒ'8……†þS­OP4׫Mý>PŒöîÉk¤Y&H\º÷«cñr.?º‘‹Ýê "ã$]=1ò~&¨(# S´­oýA}¸Å/C.ädkÐ%iJŠlZ÷¬ÓFn®yt;äbBŠ -<ºm9\Ï/{zõçÙ Ù„Ó Ýï«FŸ _…ôù$]„&5M Ab¬(ÖúÏl8ަ¤ÄÙ7¶ñŠriè(¿Çäß÷]ù—L0Ò™¹t·8#<ƒ2>?r ¡QÂ# ,j°m¹ì–u«OYÚér¯VS,$ÄËZÚ_ÂèK…Y±d'—ýCÓ2"/_ÆF<¿¢¦ÒP7­P ׈Ô îÕE])Þxóý_U+ !€‰0ë…ëq”Smç4ƒ% (Œ‘žN@éqÊG¯í¥ïã„GŒ–BÌW”bZ Éá@ÿP%É,´dŠ´Ê2†¦T“TE†fue÷@q¡˜#1Çø\°N¥¥hºò²ÁîM£ì'ì1Ë{*Éþ þO¨ùMV, ¼½õÀ¬U…j Ã(ýã3“ǪÙàÙbÑøÔÁËs!.Y¡ÏÙßBÿ`b)­Qéi‘Öó0¦PàûIÉgÂÙ¶Ø`á9°¤ÌÝøÖmœ:܃aD}Á|ëB—›ÞY•óL(¯ïÐæEêó#'+3žŠV´±‘†D\u+»óu>ã¼àjY'޼wPûn¶Ö’ÿ(`rÛùyù7n_ÉÓ‡éj0]¾'óoÅ U|H¾·ÌÁ|¤*,1¨˜•]˜ó‚FQéÔ…$Ãp>Æ¥)iÔ—À/‹ò$,ÿ `D1Tµúý?? ØÕ:Ç—„¶uE׺’º"uÖżˆ™Ûf.s®f^ïBI™ï›&¿ƒßÇ®µn¸Þ1ØGWü´àÙuö¸æó/#™ñ5Íø§0øTÖE³žÓˆ` l¬þ‹QؤZ­¾yëöóôKNÒZNïMO‰~97Eð`È´JJ¥Î§IØ$"èšY&›¯T4=~vÓn¤‰!ЬÓc–1jÓb€€"Eö‘•8Êg–;3¨‡u[Ôºa¿ÄôÈ?ŽO1FKs[½Q[¤ÈÄqç°§.¿N“ѰXFÿã(P~îè}«¾]¦2qG¿~Îú8”_&³sÕŠÔÐÓî§W*º Ê­½ªê˜•Â8¤~•ŸÛÈGjÛª¹Tv° ËÀãã¤^‹ÊkÕò÷’ë\šÃqZ“}*T’c¤Ê+¶ÿs(@£¯­@ún¯¼•ïl©÷¬œ#Tégaäì€u0TFX'¸¢›ß"­3JÞ|ãöO-x¾å`ÎíÎ í»Ñ¤>ófÏÒä+(gøÖܵ?P„ó-8’ºš¼‡mx§X .e\^*: nÐÑÎÖê¿ L‹‡ÅDÇÞz|Ì— $WSï¯Éš~K„ÿ-¿ªÚ­.Ðo9û'AÝüzMq9‚“¿¸’˜þ¤W£îLøf¥º´¹o÷Q½VTD4ˆì‚ä'qa‘/CÊ|æñ&aÒ½ÿ( 0¬å2ïxàä’YRáq`ŽIÃ$€Ç™ u Þp¸•Î1ËBÙ'–î^u–q˜¸Œ´IŸ]çzF8úîÑ;–­Ê,™Ñv& c3ÃË-ËO×9çæ‚þëG~c,Ì×059-DV\:ùÖ±ió"ò¨^Ûù êÓÒZ>?z;AG¢ü¢B¿Å‘Ca¦r¯NAÊwîx åÛj ï‰z«3ÎVz”÷AGE¼ÕÔ M”Q‘~5P“%y9µ¿…òde©Gµ…wíN9  ÛrM(K=N‘`ÿ^ö­Á^³"ÿéÏT¾.ZÚ^Äȋٗ8á¥mQ›í{ÙZ›ÿKPàcAäæü±kMJIT³«üˆQ½C†ÐÛlþÍøÂÛ,‚ÇÌX&u¸öàУ˜+¾uÝ[8ÙÕ1ýôôµM—nï´µª5cä±Pz4dÕù[ÛÌÅVnõme®±É÷ J2ºŒoßüÛ+w÷]¸y\žæ =¸q¸ÿà ôj½Öa\ž_Þ®aP+ Fù".ƒH½N¥}í)!OÀ¡ ZF_#ÛáòD\R«6¨*nLÃ_Àáálâ…A§ÖP‘˜Ãç ¹påÑc4êô*r¹bþ?›/E4·së€Ú,¸*.çíq’„øV~νXVš¸Ý¥[lö­>ªÌpg ›‚05ÏÂG“"uüáÑS´‡¹ÛÛV†<]ðìg’aƒŒ2êmö›…Ç¡Ì ï¦Ê¹…`MŠòq‘ƒ¡4ÜÀ{F”QLaSÜa›w û÷¢`ÚZ­öÏý{oÇì#a R¾`h5(­nþ5³ÞLx#d¿„kâE–•Æ ø¥yƒ.IQöý 3hPÑêU†lhV¯SL­Çfè š ƒÖûÕ †˜Â•eQ¯®Ç$ÞMJªÒ”4Y§Vó ƒ6àwÃþÅD¸Ô'ïÝúgQàëöÎîg4Š{÷ò]£Ë8 Í½I‘úêé€À[úα¬·03¼ƒ*ë–ÿv\èšÖxi\(±ª¿BäÐK“.²ïV–z8/âû7SÞƵô™kQç'ª².sul0¤Ûlðí«”'\ް¸4ïù«;±IL4ÆÛ·@!§ ùøåõ ‚6ÿüîÈýî/€X€QLê=ÍÒg^iâΘåNnpÍ}4¹×2oö% ¥0R¶´¬7ÃÚo¸,½"F™q †q±SoŽ™—Aù*ëÖ@ma‚¾O,( ¼çE­aÙà6Aœlÿ£(`ZÚéüùóÉ™Ò žeçeãD8‚¢•vÿŽH^5\x߯bq Ÿ3a»ƒ­›Á¨Ÿ¿nBUŒVŒðîe0ê0ŒË5‰ö× æøÂ›×@S¤`¢8\œžHÇÖß´m>Pjn îœ.úÕ½—÷ÂÏ!ÝÝÛ_ jºåOK¶Os¡”=“~_yšÀÄŒ)‘=ßwàî]~Ö¡[·O]œY†Â‡+à™&)­Ú@иP„šbÍà½Æ`„0 P…¤`ŒËçðMiN̰bEtÁ…B e‹ºèÔÇQʨÓÓ4‚‹„5*#A¡ §œûÀ”Q¥!˜ú^¨D.öZEoŽ™1jÊT̈=8–VhÆc¢ŒÌ˜¯^«×1Ž}AõíûÍ÷Ãdo¢@M8€«É¿­HܩΥÙÄRAiŠ`ÒP ¬ñRmç¢èy6ÍvꌜûCõ%ÉUt½jÔšþ48`ý\`Dh³Ò®ê‰nº)HhàÜ>œ¦ŒéaêÜk  æ‘‚÷o³PªÃ_–“Ò¾Áí{;9üýb{[8€™2„ÂÆé“fÀàº(R©Räd¿Œÿ4#'57?‹$ vMWûŠ ÿG VÙ3m ô};Oàq{ޝÜcªP )RÎì_ 0›9î_¯–Ñqw7ìùI«S¢(ö:x‡ˆ¨_@8˜ rÇ«·]½s0‚2:É=­-œ ‹sd°IEމaXiÂÅC‡œzm™•ºyO,§õ°}ç•ÛÜ“6ÊÒ^dÔè¿¿ëv}ÝèÉIE8¬·;p²CÝôßÛŽË ùÌ´M©|ÜžŸ¦´-zx&æe6béS¿øÊ°îŦ[´èÝnPgCNœV%o6¢¯ææÒ]3ñøÞs.Nímöìú¥¤xÒ£]O)qóÅž™µ2?—×dD󨟦„\~ªãK<»Ïñ£×ÃW Ú›¸i.Ì‹àXy>…žÂݧë~nå¨9y¼Æ½vmqÎxü2Gcg?üý·¨çÊF‹¶Œ›Øåî”z/¸_fÚQEúýÞBá € lÚäíhJ Ø"a—&ï6M€¨ í[™»äŠä“0;Á+²ª?ϪþÒÒä݆’(uöU½"F?Z,°ÖS–º¿4q?Œaž“ìƒ.êÌ”sžRŸÙH]~æµ.úÒÄÊ3‚£ðe-— ÈR sLaHÜß©ý €X×:ª²oWª‰êb¡1+Š®M»Ä‚üo Ø›á€ôôôÄ„¸Îýd‚$š‰Efµ¼{ujbàÅÅyéÙ©¯’c¢ã"3²SUêR^|;€¨"7®–ü_î~L³`È`Ð5ðnÕ¡õÀ »¦ˆŠCÀ5# @A ? _áëÕbïÉU^n®Ý;YP”Íåð¨AQ6C©ú¡L±ÊŠÄ$ºR @ÕÓÊç2°â‡¸ÅÙÙyé4eƾ €“ò$ð‹ãÛîH–ïÚÙ#«Û±Ó9Öí]^=ùÇÕ£5@iýƒ¹Ýw†MXòhÖˆ?lÌ jIîkócš‘ƒ¡Lz³&I@šÔÐ5oÇ Ì2oÅ¡^ËúGþ½4:ôhÄiƒ‘¤ ª /”Û·Llv"DÁ˜.õꙥ?ç–ð.Þˆýy÷jÁÉ–;תO䟘6oLdÔÏÌÖ´¾ÿÛþÜ?‘ä>¹Çâ_2ºMÎ q“ ''t 4bååèæ)) /xt6ôÚC£ÀŠoÇlš4á× (ÎÅ9Œ¹~!`ÛÑ4¡déþ{Ç.i# cy°À¶#M¨µ…ÀÍZiòÂ’Nذx•³±Ø®A9u ÷ð" ùÅÎ﫲Î<™ £oÕxï%2fD”Ä­/~¹Þô‰*ãÐ (×’cî¥É.ϯCq‡¶ÌœP„:ûöPMþSð¹´î4›Fë˜æ[ýÀ«ÎñEpÀCUÍl¯£Èõ¢0Þ¢ÖlP@Pg—¿,°×ÂæÁƒ>>n–VÖ©¯IŒ¨Ê+’J¬À«OÓ=Ç1Ï‹0—Å%ÆÄ%ǼJŠIËJÖèÔ€ó#€™a¯‰š s±Õð>ÓoG\x}ÃAî€óvþÆ ZðëÎiwOß¶òÆÃg¡WoÐ}R§€!Ë~“_˜P Ÿ'TiJßœÂP9Å®9ùÖŒ&’¤ÙÁGš`RS¾ °/—Ü]½eGÓÙ3– ÅýŠvZf”Öbû3…rEüåUó¼¶,ûvZ=bxÌÜ1Ùe°H@šr%ËSŒN¢”)´€À´¥„}ÿY#÷~±búÃù°— 0ÉN"`»„"Ì,vú òL˜‚É™…™` IF1æDìÛò8Q#rÈß7“¨Xbm@‘4¡U‘ÚÌåhάð>„YØÕ è6=åröÂ.ûÅËÔk8ÂÁ¿XÄ€,|’Í9V Ÿ9sQ«ÑÜ—QàÖXõVv#¸Àº5pú< ¾e}E @»UéñdM:D<ù±8fcx0dé;EÂ6ÀóÍ{ZÕ_¡+|P·NWüùHvP5í2”Æ'ˬ´k}¼(B F9,w8˜}0àóíNŠúhò¯g„w¥Ú*ÊP=B¿1²®ŸYÅÐâ0üVI%íÔ¾—³ƒì¯¢€)M0êÙ3nàç[ÞQî×±·”ÈZ5jÕ$˜åI´N£,,Î{•û8-31;/àŠ0±п;qa[TÜ}ÂÊ@Ð%Óö¿øGßïêè º¾Y*˜ÿþç<WTX”ÍLe"ÕÓ ê1¹·‰k·M~úâÎÎ}•ËáFàùÌà Ž–§–U¤„«Ë›—¢ã7%ê‘ÜA& «cfŢȫ߾ß+Ù7rŒdO×.Ïó9887Š3ÙüL”èŸîùý—º«7nÎ9³rÓ©ß«ˆÖ€ë¤64 ›ÒÉ‹»äsFåæ÷ñêø­Y'ŠJá–t uc EØ1]àÏI&΂€?IÓŒ àøë‹çõ>ö̃^ /KÕ„H`ˆØ¿åέ$Ü4‘DÁà8”Qg4o7iää¾tr ¿v]"ü—sgb5¥XÓE›'Lêzk¢÷Þ ÞS&.À06˜5âǽ;|èäääñf¶8t`«Ln[nùùEO1Þ…oÝš/ÎV[pˆmî-’RëòÆ`f—»E8NÂH]AÊ9wp$ž•«&ÿvòéºä­VË›ùg\ ̈®)<ßÏXÖBDÍ΋œ Ã8×ÜØ©+2¨ Pœ™šØ©ãU¼}~äÔ˜ŒÑ ï 4¿ÕÅŸY¸Š#W‹Ã¦Ý(hÛŒ vrú4±PD 55õÆkCwäryåñ§ŠúÜÎ6žZ¥ÈÊIOL‹‹Š‹LL-S–ªµ* e6Šdü` z½¶E£ó§ì˜û˘ø‡ÀˆÀŸºMÜydé£×<Œº¾ãÈb aW¡‡a½AëêPççÉ;•È/Êr±÷|òâæÞã+Àç0ò–G¨ZF“ÁØ£¹“£ðzÂý2YC4i$(ÅMC@¦‚q°r"Œ 'ÅP†˜”iÝfì›:Ôn_Ÿv÷s„<ì5<?ƒ—/Ô[ùCÓ7¦YA`ã8à]ÉÆM¡Bf¸ ©¼"°W¹ú§Œ„‰q Âߘ^ v&™ã`Œ(1)Ó8 8.{ìíP(ÆùrÙHƒÑeðÀQûŠü¶í‡=y>lР®­Ü:äòõ%‹ftîÚîÀŸ'®†^ïØ!xýÆu€|Ðf„ѤVWð@‘¸[FZð1.r@9–šü(³Z=ìÎfßì®WD›¹Û÷Àĵó~Wòj?G,·qd¡ÚwàçòæHj/K=œ}g[¤û“úÕ;OÇŒ, ÊÀ{^h \œì>À¿J¥òìÙ³­Zx¸º;Ö^á:á ;ª¤×ð_J´d›t2F•—ó*9 ƒRYF2H]£HhˆƒžÐ»:zmZ|!+7yÑúѹ…é\œgâùÀI¢¶pÊμÂÌ_wMÃÄð?–_»~ï䟧ָ8xM¹†Ï”©K.]ßù<œqË0ã{ï ÁF°éx½׳µ0’ÿä_X}DÀH†õžÖ²Q§ÅëGæg›;da`ó?Ìï¤Ó«M‰Z$É$r/™v '?eÛ¡E"Ù°Þ?=xz%-+^­V*Š ßXÚ«O7ˆÔþkz>èVe¿tó™}ÉðÝÎ [G·†Hõ¿ÔBMÓ·ûr0…¢»vißÎËB"ŠÅ"^8Ù’e¿µivüø¡Xèíhf&¿vTjiwåRÈ¢%¿>ˆx~תUÓ™Ó'õèÕ…Iý+;@ùgNŸîÝg8x{êÔ¡Þ½;ër¯—$ìÒäÞ$ *&˜'ضQg]¥Œjyóí»Ni—Ú|š„DŽì/jrÂH}À mÞ¼‡ßѤúŒjHТ¶:ÎÎYˆ.h ÛŒ nÛÎÁÞöí(@’dFFfXØ…o‡µ ]4®º…WfçÀ5 ® HM²ðE •×”@tZeVnZFvZLü³Ø„gE¥E*ux®¦ €¥… PÍÅŠ<ƒQ×̯ý©;g®èŸ’·dÚ^VuôüfkKû.m‡;ÙÖ^¶yLÔË»ßô›Ù·Óøý§×>yq«MÓÞµl𦧽êÛ¯ç¿ À½+—ûœ²›zpº%]ò–ûy—qr!cÒ’A}žR®½ûà§–è ‘)”»rÅÆŸç-˜8i肟'XYËiŠ ûV*Ì/jѲŸ^o¸uó(‡^uÚ¹»;?¾ÝÁÁ!1!I xxùÏŸ7mÉÒLh€†«ûÀ{õz-üÖý{Wëù6‚(u¹øE€XÐé *’v³ö¯1‰®EcuöeˆÖQ$kô‹™ËàŒ°`Ci"ø‘ȱ«m‹]Ù·ûkro3ÇDágˆ…/‡&±P¤‘F–ôìúc]oÏÑASŽPÜ«¸ºuìq.LšˆMÖä0T`«Â“@„ÙQ˜®¦õÖëôÇOœ÷ó«W·ž/3•Ÿf¥:®Ìö{ç­”Ó`’Çá¹9yº9{¶ê¦*-]ºl‡¼S—V‰i±± ŒŽ(Q’…Àxdô­^c¼˜z¤÷ ¸eïæ~,-äuÜ:³áÉóÛ }ÛôïúÃÒcŸÄÜý@áYÉÿ….hEa×ÜËRÿ`Òµ¸ØÆÂÜ›7´€¨/w•¤Ü25ùòƒѾõ{ääNúÍÂù%R[ƒQëìlÛ¡C€‹«w‹æílídçÎïrqq¥}}?ŸÂÂb«R)MF™ž””.‰êׯ÷ôñ“æ-; ÜW©Ì†a"UÕz†Q¾¬%ß&€)ýÄÄvª³®¨2΀ÇH¥ïL\`—|ÚÉ4êlUo†eƒåé—›hò¢ÄNí¬ýÖÁ¸ˆ¦Œ†²¸¼ˆñ„6÷ã“”ßóüIpð¡‘s^qGûmq¡a11kz÷îÆ©(·‰Qe›^O HvvUÝøéJOC5ŒŸÙ…ª‰ ÕD"X¾råÒeÚú$òÙ7#§€ÏcbîÔ­ë»uË÷Dn\¿\"µ€>Rô2{ácÇO=räÔ–ßV{Ö®ïé^¯kÛlê…±¬¬837#:îñ«¤Ù)ŹNnØ{t AÅ"ɹÐ})é/Å"é´1¿ž¹ºûÁÓk8†×©Ý¤g‡Q«6ÎnéÛño²^S&Š‘Õf©2 lˆÏŠ|±rÔ«ø¤"þV#²Í #oÕÅY4†bÈÇ@FUŠd&Ù"ìø3¡#^žÿfeXÛ‘“F»1g©ÌP+7ZÓ•Œ/ÿ•‘y¦÷Àë1Y²HUzÍë›ÐNj!f+wWSÚXEa zÿJÒ©;wiÙÀ5‚D/œ ­ß gN^Á†œ<¹Ù\"… Ò_×Íié?°k—‘?Nei% ½÷ÇÖýßÿÍšÕs;Þ¿9ïç);9zʯq[—s9äDpÛö¬ýÃïpBŒ#äËZ0p@êµ…÷‰»ÔÙ׋_¬fø0; Á©ó ðLA»9¶=εð# %ʄߋc~åJ|]º>Ëm£W¼ªâ i9æWfP&~T5¤7¾†?• ¼cdÁHAudI¯ æ_¼@wêÔ•Çã0ÃN¦¸€¥•uRR.{ÿL`ËÕD`^Pù‹¬ü×ô9;ÖÎvæU¹chô³ÇÛwgÿìÔôt×>}:/]ü‹Dâ0oþªØØx‰TÌüŞǼ8sæâ³gÑŠ25„òÞþ\PÉò¥Ëλ”žýýã˜À³ŽðúF`*3©Gý!=Ç,ž¾q÷¯ÎsÕ©%?nÖ{¼«£G^AÉô$ý¨iNü*àŠpŒëíÖøôå]Ïã"0&ÇÉUÝãg½P>”r)ÈÕÜwZ8„¦|߯†Ý†«¡‚+ý=Ía¸Îü³/ AšÔCæà“ò—c£1×sŒÊØ¿6íöØ2À°ÿþ25±¾÷\ XxgG]+™sãì$°ÿ2=ª9:·78lÃY!Ä}yõàáã!iJpt,ãÖî8£Ä½ûœ37"Ki¤~9É_*î¾ BU¿}ßüªÿždÈ3½­3 [ ^ ¡VPÖ½aõ«®¶òU«ÛÊ\HäàjÉÓÒ2 Z'ÒÃzyÚ ½:yÚÂ.Ãîdè ”þ« ˼hSQE£QÑšnÝýÓÒ¯ôÏZûû5jÔÇ=§O_êáéBÓÙ"ŽùûûùÔuûõ×¹4]оm ŒSËß¿‰^Ÿ5Á¿F> ‰É66V)IƒÛ¶‚ÈRö°b1À`„/ó·mµß­O¢c»óbçÞ›šq50#,x~LèÄ—ä?œ”r¦‰"þ« œ:Ý.z±\Wüªº48ŒâR®eÃ×ßi÷wŸŸ‡k\/Õ–¼(N9ŸœšM°ãŠ¢@fÛÛÉaDz-ÃaÖÈMpÀ¼èò—‘­Fù4T Dšvc²; â×õÛóò ·þ±¬¸8[§7ÄÇ'Ÿ:2bd¿cG·—,Yü‹Îž¹ÈãÙ4h°g—îÓR¶Ý¿»¤§³&zc·aûgÞ/¢3~ã_Ü>uÓE$<†9*²`똾“"ÔÍ]s/lÞ©oLã)Ã=Дôt¸)k™£‹=^JK i smšg³ÚY§¦×ÚΊ'LÎÉ3 Ë;7w›TåuõýN¤ÆÆËÍ^Êí¯7¬Z£¿~ã•N£ç0%f™ B£Ak4hºw÷OL 1£ü[6¨W¯+ ÛM›¶Ü\"¬íéÁã£zmî¡ÃgÁ£mØ\†A¯mÙ¢[rrêË7åöršÐ”;9¶?³Žú5‰«ò–{Üú¦;¶» vé…à<ªUé)gÅÎ}Ü&ËüÖ(ÓÇ2W¼ÚŒpÊmŽ©eì=Ós˜ÈK‘–Ro±Sø=6 ¿ïøã±® àI¸¹ùyYF£¨f}a‡#‘Hš5kœ“‹9|Ÿ¢Œl¶.QóE2Þ‰~ *)ƒJÁ(ž–’LøÜ™­ßžùl×®Ãu¼Üòó#;un³víV//÷€€F¡WN÷ê;ú×_’dAqñËÛwÎß½}F"1›5{ hôbEÉèÑÍÍå0Œá8Ö¦M·ó~êѳ'3 ü)lbšœ@ÄÎÆ!¸eçqÉ¡ÛnÞxeÃü½½: !™Dn‚þ«/$àš ðäÝKnÕý™¸ÿG3<ãÌÎÝÚn«÷þÔïtêò}-”û*:*Séýë²>6f~øà‰Í ¿óô_â¹àäšvv%@¡Çëýùçî#{w:qû•þñ£ÐÈXfvé›§£tÏoÐ8'ÈÌsÆ/ã›CÅNÚ¾õÀŸ/ûuº½ü;éæ­‹[Eõn6pÅŸ‹!Ü;{y߯YuëOx A/îÜÏV¤' Aë‰ÇÏiÑrâ:ŒÓß5¸6€bÏl<ÁB¹…\·aöp1lÛk}Áþ¼´§[{K™ZŠŠDèªéG^¹|7µ>Ä•ôŸ5©¯ 7>äØÎí¶lÙ÷8Û€ ©aÁ+Ój㊕kùåĬoמlØoÝñû.]~¡Tk™Àl&±iºuóOI¹D’Ñ=º· h3 †]NŸ¹zøàÚýûVÉåV“&ã xìÈ—éÈÌÙnL²ÉHÏô¬Ó*0¸wïæ;wìÎÌÎ…PÑûÌŠ20±–¸öNtjwÉ̵.V¡òeÍjP©s®¦…´¤IÁž´±:ëlêEÿœ;ÃPŽ”í¶(ðÂ4ý‰Vý×Ä’J½QI+K ð‘0 ×ÈÔëõJ¥²Ý²³sóóó0Œpv–xzXY[›‰Å<AH†AÐÙDÕS‰h Nß¼õdûöã"¢´Z½Lf9p`çA»Ô­[[l&gçi!ݱýÐÓ– „Tj¤{P`³µ«ç–*•¾õ»lùmÉ÷?Lfÿâyl»C–,ž>vÜh@ä^¡(ŸWŒâÏ"ŸõìýíÈ‘C-T‚Ñ*ö!½ ˜;MHL‹{ßµKc€Gý•@7 #„>¯Pa„„r[BhÆDaH ðÚÒÒB…æ å6Ðÿ™ùj&¡çšÛÚYÑ„šIDã`”¢ôÉÅí#¿œ´}~gáËm~|ÔaìDêâÚË…œB£V+Ÿ{bûò¾ ôeÙùJŠIåƒ9ˆñäÒig¡~‡¶¶BÔ´A~⊨IãúÎN\¨ðÞÉðHÁ 5ýkÆ»ÛWŽ™w¬á¬?Ö q5¸2;3œ hŠ™˜ ¥ÐjP+ ‹ÔFޏ–ƒñÑã&ìVm|rl#ˆP’Õz+ŒAšœÂ±”Y ¸¸Q§ÌÏ)!Si_JbïbÎ5’ÆÏoUÐ9uZÃ/¿Û~ç…¥¥´¶ƒ‡•“T$ry­(R*ÜÜ-[û»J-Å„‘bð¼¢Oâ éA¯…Þ0qY||Ú„ï{zÔÚ¸yrrÆæMó'L 8EèØ)h‚‰Îœ>ۻϸŽÚÜ¿C±‹!á ¯MLL8aÔæÍ«*Bã‘@BáCfd!3„dM¥³-êLä˲n éØî$Ihsïc‚9´ ׿ßaæ/!0ß¿kÉVJj'Ð?µiÝÂÁÁA,ã8þz}`AhµZ•JUVV@A£iŠ‹KŠŠÀ ˆD°ƒƒÄËËÚÖÆœÉX‡™¡‚ªÅj¸€aŒhÊó<.âãnÞ|, |êÖ j6dpßzÄg¯SOzã\¿Üv¸Oíi?޶³•ÏùyM||JNV„X,¬°S¤Zò‚©;ò[4ïø â‰X,Òéô@çúpìèvÈ¢Z#°3OLAuÊH3(`())¹y;ÒÕÕ¢i3/Âhø¼Î KzZÖ¸ïr8×gL ÞÌ\Hjõ˜€Çy£¼hpJY¦1|éUUQU¤ÄÞʪÕ<¨ŽŒgúX)FQàYìÛ»e„%ý¹ Ë {’›¯ hl+·‰™EF#¡Óê@Ï,Q”)%™Ù¹yE®µ¤AA‰€º2áü¸Yìúõ{“'¯LLÊ;¦PPÓ•«v¤¥eO™2â§Gó¼Y³Ö¬^³mßžµßŒ`ø&è`¹ÙÙË–m޶〗§Ûõë§­dv,w€ØI7ô‡¥œ¦Œú‡¥I{TYWICØÈ-}æp$¾º¢GÅ1+®>C’þ¤þñù_£0ô ·£Þbx“ƾ¶r¹¹¹9Õ¹À›Ïl$ —xN-»iØM­f€¡´´´¸¸|ig'tq±pr”ÚÈÍ0z®Z©µ`§ú ì$LøÞÝÈóço…_xú4\CÛàæ=z´näå]A¸Ï£##D9oþzà^Åßa×ÊÑCUxÏ”¡ÌäÛ#úsÿÉi?Ž]¹r‡+`?úé㉓çFD¤ÿ¤ßýgŸã ‘“cc š5ñ•Ëe­¦ÕM+e_¥Ñ8P*˜~¨ÈÍ-ÌÈÊ÷ô’ø»YXÓ*7¦î‡°‰zåÖÌYëŸEÅMš8tÀ€Î~~ÞS¦.ßµëd³¦õ ‹J@_²´”XYIøÕ6¤··aÔürŠU€Šb` Å>’Ý ƒN§«$ àMN®66®¨¨¨D«ÓˆDÌJPÇKîì,åpØeÅi&]…u¿z&Ê"À›5÷/]ˆ @#À©)É‘‘±K—þ~äèe 7òiÐÀK©Rž=~íþÅ[þ-íÙ½òîýH{;›ÎZ³±CB—/…|oø°>~Ë–åÇOîg))*Žyñªs§ ¯:îk~Y>sörpGƒõòô®“œ’2qÒ’ÎÚ7kÞÈÑѼEsW.¥˜ê4ÿãÕ‰)ˆÇµ³ç–g%}™%]Ë )UúGÓÓÒŠ¥>ÞudV–[ÅLÁO?õÇÖ=»vn´³·ÉÉʱw°EfÀvŸ=‹1 £F ôõuËÏ/¼z%>'OáZ˲M`m F,0 ¬Fƒt`÷ÚŽé¹à`sæŒÙ°qï¡? Ö}ÍêÖ6¶Lü•9—àäÉ‹:­~ô¨"3kˆ.çÕj B.‡ùÔ«cçàø<ê‘oƒ¶ Ô½tá°µ5³Œ†½Ó™4ˆgÙ'kf ÄBÑcV,\!t¥òŽ©ÊŸ’3ø¾ò'l:~Dn[­dd`3¹ÜF"‘¼Y¾ ¦ÿ>ˆ7°¦fPM\dAk’s%%*•ÊÊ’ëìlîä$up´àñ8Õ"Ž5â£L¡CÖ½Cç勨K·¯†Þ xGÓ¦¾Ý»¶k×Âϯ>—'¤™4o’)Œ3yÒÂÍ¿í4°[¯ží<=\ÕjO=O½´whZËÅ1?¿ c§@¿uW®ú=äÒAððZ¶ìîïßt׎u%%¥C‡ý˜Ò¢E333sàc|ëy×®í .L£Öš ô!…¢4âa¤¹¹¸i“FŸV$H£J£T*ËTZ¥F«f¼Ñ Xm™¶ª¢xl@•›•éP‘0üIð ÚQfikiñ,1Un!©egsÿÅ+ðÖvMÎÉÍ-Vx9ÙKÍÄ_%Á¬ ”K-êº8ê Æ§ ÉZƒ¡ú¹ª/|ž3ÇÄ|žXÀ5òD>Ž¢Ÿš8Žpy‘/1K$b ‰D*RÌãòP;_I¸A2RÓ6mÞÙµk»ÀàîÇî0h\è•£³ç¬ˆ|µrùœÙs§‚VìÑ}Ðù a~]4åÇqÅ……€™–”(ÀÃ7™SêáaÓª•«ˆ#3¯cFû™|yÐÅLbaÖìõOŸÅÕgáÂÉŽNÎdœ;{Ýšu»¬¬,üxG?•••ûÓ´1k×­=t`ß7#¦®nnnz8QÈÅCºô„(-ÓW?0Ñ$P&v ˆ*Mܭʼ@ê•o­ƒJB<à-?COpnæŽsðèP§Ž‡L&3ÅßrAô—!z•‡5‘.T.€Í$"”ÊRƒAcnέãeéRK`›ÇçVÆ,– ÓÕ" ƒ@q A¸àF­LIÉÞàü±ãW23óŒF¢qãz£FõîÔÑßÞÞ‘Ã5×i Kõ=¸sk›¡C&:|èæ#mzÒïÌÙ°o†÷Ùºí`hè¡víÚ‚+2ùçM›÷x{{¬\>ÛÍÕÅ`0¾xùjø·“Á¯fÏšäâìD£J¥?aæˆo-œ?Ü‚R¥ùÔ0Ò`#2 \æd¥g%§f&&¥'+ ŒLX…BQ EËqXœÏ’$½f \>ŠãŸ”9f$©dãÄÑ'o=Øw%¼]ãú³õúܯ¶ëŠ'£“R}\ýaäöó¡çï=æ`˜Z§ëÔ¬á¤>]¾]±I©ÕRl.†qqÌÑÚÒÃÁº¶½µµ¹ #1ÁÃÍÅÇÛ“öaZ"õÛ)"‡à† ¨PÀ> S†oÞº·vÝ–Ë×ø<ÞâEÓœ6Á ×OžU,à”ZV;J5Ö¯qK'G;|>}G*Ä—BwAC¥ˆ¨ :V‚à€,¡Tª¸\ÒBÂuw—yxZ „…JÊTs«e€˜ºÈÀuNA^fTTüå+wwï9]RRfg'kذnÿ~»w²Zê5š”´,777 <Áº÷üîÂ…ëu¼\/]úÓ¥– xÆsf/XõËkVÿ<}Æ4Ò¨œ ØÛÚµÛfÌ\¶|é¬Ñ£ïÜyh÷Þ£ii™½ºw4’d|BRp`ëM—£ ÷P$ГÀ¶)Ö²?#zÀ€ô aTªJ³ó3c⟾J~‘–™TP”žœ­¤íµ„" ̈1ùdj^ªÖŒëÚnþ·‚¦-È),ö¼í§ïθu[j5°(fè” 9ŒP¤KTêYƒzõhÙxû…KumýÜ­¥ŸÏãš–†qî¥ !]»hÝ2ìê ¦xÔGw!ÖòQS7Ðë ³ç.n`þÏSç-øåôÙqc†m\¿´gïoϿڪe£C‡ö89»,œ¿`ɲ ×B·ë˜›“Ú¥óЧQ/÷îYûíˆ1­Ô}ñâ•‹­oÒØ73+wÝš9;v-*RDE]"úÊ0·ÑHju:Я5}#'§$;Gåä, ¬-³]4!7âþ“©Ó~‰ˆx>lh·5kgÙ±Qýúª˜þÇï‹[ú·¬®Wϱ¡awžF^òðª·tɪ ×Ξ9aå/‹e|üèQPpo•J}èÀÖÁCG@¤òñŠÐ?aÄBæ%B_ŠÀŸà·ó:©ÅC›4ªkc#·°xwçÿ< ¼˜ê"Ìœ&½)ÖX_ÐùP»R¡ut¹8Kíí%RàÿdáÉ*Á$B°""/7/4ôî¥K·ïÜ}š‘‘ëèdÛ§W»öí[¶nÝ xà(Ü=ÜÙJÁÃ;v #ðó¨Kövààqvñwt´½zõ @(™5sÑï[þ|y¹¶§;?væÔ¹‘£§á8VËÅéᣧµù·mYü7Ôba‹…w'NœûåpH–âòÀ†>b˜ê‡Ö®a½˜”ŒôüBÐ<Áˆ0¥"¡T,t·—5òpòq±s¶‘Ê-Í™QÏ ¹þ–ÙŸŒÖŽÿn|øõ;q/ï3ã>ïéBˆ©ò“îõ<*òRHØãÇϘџyS5n4|Øwž{‡¿`á\°÷ógƒûwêtðàšÐ3…|À€±/†«Õñ™iém7hàýèqt©BÙ¥KಥÓ\ÝÜ9µ÷Ï“«WÍðñ­ÿ("¢cçÑË—OýþûQ¤QY~lñ26¶M‚NÅÂAYq  ŠìlM-W[7k±Ñ@WΔ7%×#(ïþ½Ç³fo¸};rÔ¨>‹Mupt¡I5Œò—-Ý0Á†MLšòÃÝÛ·üúϘþÝê5ë(ªdÖŒ¥kÝîîîröÌïº>ìÔuäã¦Û3¥N J¢Y88OèÊ>I,€Ó“ÂëÙ#í<»Öñt±© x¿Šü‡QàµÎj¹4PVâ‚)¬` :ª”ª2•JQ¢0ÔâîfQ»¶ÌÊJ,³ÃŕŪ0°X ),Tœ?sï¾sÏc”Jµ½õ·#z ÐÙµ–3›ÑDÑ”šbgË£¸hÓÆíS¦.í߯ó±ã;vlÛ7nüÏaa‡Ú¶íÂ&;r2Òâš4íš—_´sǹõô™K‹‹ÏÿÙ¸iSš-\óúÔìqœ²çƾŒ]¸qߌ\ bÆ#?˜7~éÓ§±Ã†õXµrº½ƒ³NS˜ŽŒïÜuLNN>à/E+ULa˜¡C{ïÛ·…+§ lŒÝtÀ«¾Á¤!ÑzÀ÷*3Ï‘&8x/;À`(SéòD=Ùϯ‰‹‹£¥¥%P¦ìÀ`ýï^ŸËD*q€•GKóØ P†äê*óôYY V{3Õ;©×Eû\90,ÐëÊbbâï݋ڷïlä“—b±°A¯Ž™AJ—ZlF“˜¦Ka˜œ4qño¿pv²çpñ„„Ô±cGñçþÓ¿ÿ¶|èr½úõ…B1Å$8Âo\©ˆnÀŸ‚ (ª.S­Ø¸÷HDŒãqx<è½%þh¶p°i9þJll„§g-`€—/]íÞsäéÓ;»uë AÊ&;~ñzø¡À ÊÈTøj?.6~ã†Ý!WnÉåV#¿é=ìÛþ m5EaAu\\ò…‹7._¾DNN! b;´ìÕ3¸Q£:®®ŽbsÛÛ÷ŽûnÑùs›ºuog4¨«PÉTÃai–hµ†´´¢ØØœÔÔ‚âài @^r¹¼†~ž2+ÑëbÅ”ûðÁ“©?®~=tH×µ@,ÈíS’“Kª:Þµ 6méâióÌ”ÁtÂjzLÝÀô ò±Ž LÞAÒ^UæB§x«XÀ("¯C™pxÓF>r¹\"‘p€Ÿü¸²ÿvø`pð…Šœ€ *6Р¸tŠRvvg' ''©µÌV£éšÃ¬V…Yz6ÀÊÝ;ˆ»ö &&‘ÃåôëÛ¡}ÛAÁͼؔ$=û/ššœÔv˜NgÿÝàÀæb31`Ýu}MécccïGDß¿ûôjè] éÌÍÅ-šû6oæЦ±+?œ©‘ËLb±žªÛð•«÷Àqp4°ó7ßô¬çã!µ|,)ÎW)5ÌŠ÷æf€MÐUk²"ÕÖu­aêÕ×p{mZD9j œ§‘Ï—o=r'³+l~ ÇxL Þ·–½·‹mG¹—£|«`ŠùùϘ·˜-”ÂÎ×@±œÌŒ_ÖüvøÈéü|Æßþ³\GË~gÏl³²¶2…)gA¹9O£â.œ¿qúLX~~1hIkki§Ž­úôi×ЯŽX,@™±=À dùPÜk'¢ãǘ‚í*•®´T“SšPœŸ¯DØàðt/>»³ÿòØ  Ø£<·‚@/b9¦²¸¸ø’으ÜìLA›6îÖ6æ¯,`FD÷ývä< ½öïûeØ7ý–UWÕ„“ÙV7þÏ x¹XHÚ«Ë9“VhñH1¡qÓVNNVVV¯eýO ÀûqáµÌ6myÃ’…Rð¸…ÈÖμ®·\n̬šˆxÝzQ C>àI É_9rù6è:^^µ‚‚šÿ4m„£“i$ ·þêÏþ-G~ @Ï*Ì+þuÛ‰°øto·ú^µšzºÔ¶·1^Ë-¯÷·Ô&†+z3Ì}òè^ãæûôêrâä.ðIQ~‘­ƒ/x3wΤE‹—B´fÂ÷?=~üƒ§>{ãÆQ'ggâ-^´tÑâ QOC|øÐFIå9qÌŠÐI ©wï=iӦɘ±?GFÆ\ Ûç×°‘VStýzĹs៧§f+Êlme½zuéÒÚÓÃÅÙÅ‘Ãeæ2“ÀàÊCtÅ0Ñ&r 3ËTPt©B“’Zœ”\¤P€ç ˆÏ\˜™ˆuòÿ×Þ•7qžáÕµ–uÙH¶äÈ–‘å lÀ®Cb&ÉØmH9¥¥LK3ÓL˜)¥3mgÚ LZŽ&“&“†I¤!-ÓЉKBœ1ápsph ¦FF¶Ž•­ÃºlÉZIÛw÷“V+Ù@0æÖ÷ÃØX—wßçyßç=¾^öbÆã‹˜Ål/@1àMû,ãAu+à¯×k³f³¹¸X²xqE¾JFssèΆŸ¿µkWûgŸ¾÷ìsÏG#~*EÀNÜV~:#$óV\ipçb~`ÖÁƒÇz{-sçÎÖjµ·­—‹‹((kµ ½^UT8E(0=gXÚXZLÉ$c„=/O æE%O®àñÒUÆí}àíÈ%°K’Œîýü˜T"©Ÿ;3G¡á“8¤®óy[ÿÙÖÔô ¼Wåôp}?yçÝ÷-Âápýô•µ›7oÝ»çã«^Ù¾}ë† c'<®—V;wùòæ·ÞüM±¾¡¾¾vÛ–_Áã·lÛqþü%xéÛßPkTüå@;\Ñ}QsKcÕ4ƒ\!5[ì§8›VYR_?£¡á[ ë¦WW0^E<³'•Si°/òà׎AÄó6Â!½Ë`CT8áÔã€G®"|ääãó̚Heb¾èÀC MAØÍsÉTyãƒF­:€·ˆD©T?ÏîéÁJ9–Ø=ûîB,ðx`À»þÞ¦RiªªªPG>QSy"Xà›t.°IÇDG“ŸijŠEI²ª«Õ……@µ.‹¥saãÌVÇÕÛ8* ~FÊØ/• ¦åŸ<Ù}õšå¹¦ùÀ,(Ç;AÀ36Œ%SvH«ð‡ÜîêYMz½nNݬ“§»Šu… “­­v:\¯®m÷ÇÛ°fíêÕ?jmmÿè÷_ZÑâp8×ÿìu‚+¼Ô‚u«V6Ï™Se0i4E 1 —2ñ(`8Š1óX„¤‡¼PÐ,´†wZ-ž`âpAv6 ^ž›«`¥;Â<Õ#À£þþ{péÀív{OW¬”J³n6Á) ¤“z…_}uáÒ%GA¦¯Ï´rÅ󆲒1MééÀ¦8‘szÂŒù#¨”¼}|./ÌÙ¶õÍM¿ûÓ·ýú·¯ýòxgç_ÿöé/6®›Y3ƒîõókx<ˆ0cW/_éúºûôéÿ¶Ùiºa•I³gÏ®~ú™š†§kgOQ*é}¨bt–5qèãö¡0éù~p$l#¼V«ÇNxp )@»‚^r6]Ç•ñÈÉÓõ† ù÷î8´‰Z»C^†ú§N•-l4¨Õ 2ã@ÇKÍpÄˬXH²Ë<?$wÿc¿\¡š1£Z}çµ€ L/D˜•6ÿ¢±¯×‘+„•*ƒ>_©”J¤YÆ„A¤€Ÿ)8 þÐٳƋÝ¥¥å:]`àÊ•+ÁϪ•-ô4SãäÇÝÈØ8|‘ØMŠeHØg2oÚôÎÚ.ýÎ’ÅŒÁe…G‡샗éj|çž=ûm6‡\&Qåå¶47,ýnÓ¼y3sreÌí #ddœAQ|OÀR ”ϲ۽=×]1 ¯X,cDôÀJàøàÙD=Bû#4Ó‰èU 4±`·X­­V¼h¡!.0®Ÿ¿µXà'ƒÄ„Xà q“Ñúù§fÕÔ %J¥®ád…B˜´¤#» +" X_…ˆT*ÐjsàÞ!ûŽ1›Í7èð‡Fù*ežNWêN¥RJà5Á±:Ô1^åÌ™åÝäCq±M%û8•¹ÔǤ‡ŒIÅÀx†G‚gÎ\Ø·¯óhçY£Ñâõú 4ª¥K·´4TM+)+Ÿ*ÄL¢>4&QNdÏ„¡^ÏH,„L¦!£ÑérôFÐ"¹\ÆøyYV–A!ŸsL5~èÀ9ã ×¼yõ(à›weXàð»G;Á6/À`"hçr € YbHPô Ϻv­§ûâù—×½26N˜%Úã‘“çA{º 8-tB\xùRÏÉ“ÿ_S[E]PtžŠ²o‘|zkx=ãév[­^‹Ü]`h("â99òœœ‰$îØÙåíØÊÜcøÛÒÜG¸ï‰AD‹Y§“66–hòœØÇ (N$’‚˜@„[ÌŽ¶¶s…EúÊÊÊüü|O“¢2,ðxy‰ÌâÓuHñ"ÑËÞWx8§ÓÙÙy\£Æ™ócC¬ ÆÉ¤À5U;°¿JÓãÅ(QO[}Às„Œú|Á¡¡á¾~pòn¿?Œã€khQ&Q/aÑÎ&êa=€¿C±à&ˆA‚°¨ÕYõõº¢B:ÁŒ²Ëq.àÑMð½Çøúߦ lO=UXVVªV«!¸Åtp†·v²Âd28qüÛ-³JË £IN¥Jƒ´d•šˆqX#-Y@ÑPe‚Ðh”ž½u8ü½7Ü7z#Áh$"¿!=øyRÀÉÎQHÏm¿á'Ö£%ã80IeŸËåpþìl, ç…B¤E£à( +/O©Ñ¨sssA'¢BÀ¤‡xØ P•F£±ëÜÙ%/Ì*1hÐaRL› Æùi}\ÏŸŒh=ÀØc!?<±Û½ýfÍæu8@©` G˜ögá?¶ßî.Ûo2‹+¸-*p¯‘TD cœ º$’x•EïéGʰÀÃ+%ÀPÀiqæLWŽ"¶|Ù‰L “còXjYŽ>ܳQZÈã  úL&O¿~ƒã&¤—ÈdRÖ·³2¥'2€¿·˜ÕŒˆØ Î&ÿïÏõϰÀCm%$I§Ói·Û½&¿Ïe(™RW§ËÏ—óù‰ŽfÃ/p0àT,VOOkpÀGFø±JÔÓJž‹vT™ƒ…úíØj|ðOìʰÀ£ÁÃÃà ždº•<ð?I‚PÇELS=8y)Òði‰z¶ýæ>;™Ìʰ@fM& :@H”ð}4±_8s9B;+ãQ"sé2+ù¤ŒßÅ„cÏxøÌšÀú?ßàgUG<æIEND®B`‚httpd-2.4.41/docs/manual/images/sub.gif0000644000000000000500000001370310147723030016167 0ustar rootsrcGIF89aô>÷ÿÿÿÿRRRccc{{{”””¥¥¥ÆÆÆ!19JZcs{çÿ¥ÿçÿ­ÿ!1kÿ))R{Æ)÷1ÿ1Jÿ9c9Œ)½9ÿJJÖBŒ1s)ÿZÿcc)1ŒBÿ{9!”Jÿ„R1J)Z1­c÷”cB½{R9kJ„cÿµ„c÷µskRkRRJ)cZ1911)ÿÖ„{JJBscïΜŒÿÞkcœœŒ))!BB1!!99))R”µï)ÿR1ç!”!BÿBçJÿRÿB­)!Rcÿcç!Jsÿ)Rsï{ÿ„ÿ1ZZ¥)JR”)9c”ÿBkœÿ„Î¥ÿ­ÿJks¥)9µ÷µï½ÿ9J{œœÆ!)Îÿ„œ199BÞÿRZZcçÿÞïïÿµ½ï÷÷ÿBBJJkkœœ÷÷ÎÆÿ÷”ŒÿïçÎÿç„sÿÞ91Þ½1)ÿÖ)!­ŒÿÎï½ÿÆJ9!ÿ½ÿµR9œkÖ”J1µ{Z9ÿ¥B)kBÿœ{J)Æsç„ïŒÿ”ÿŒÿ„R)Ök!ïsÿ{J!ÿsœB{1ÿkÿcÿZ÷R1ÖBÿRÿJ9{!½1ÿB!B­)Jk”!œ!½)ÿ9RZ„Þ!ÿ)Bï!ÿ!JÖïÿÿÿÿÿÿ!ùÿ,ô>@ÿÿ H° Áƒ*\Ȱ¡Ã‡#JœH±¢Å‹3jÜȱ£CCŠI²¤É“(Sª\9Ò€'NÈøÆ‹-4”àpa‚„ôäÉs‡î™4gÌv]KÊMÚ²ÿ ` Š@$p¥žW¯VYŠK¶¬Ù³hÅR‘j¥ ‚#?pÀ@Q¢¼¡å¬©Ã†­šµ¦Ñ˜Æ«-\²P™J–*S‹5]R„hP >töÈyÓÍ1d¼|ùÒå«éÓ¨^-5­ë×°cËŽm€×(>È8‚C.ŒH˜·n]7pçžEsvì–6nØŽ& æIq©TÏ~ñ¢ëU©N¡.IÿrD)”#Iˆý±cÏ;uÞ°)#&Œš0øÁp)}º½M~¨ÁÆrèÇwœŠ'’\Š%ž˜‚Ê-·s 0ܬ³Í@hõOj¨ä߈$–hâ‰(¦¨âŠ,¶èâ‹0Æ(ãŒ/"0EQLáƒPH!ENLEJxRŠ(—ˆÇˆ"ž„W‰#ƒàAY"ƒ°WÇe|Vß`”ñ…jŒ¡Æ˜\À¸É*­l¢È)ŒPòH%š(rÞd™BŠ+o>ò‰&¢" ,±Ðâ .µð" 0¿XˆŒ3ÑLƒÍ8Ï`Ó9ïTÐ sy• †*ꨤ–jꩨ¦:£?QƒDÿÑ#;JQÄQø… @îh-¸ìRá1Ñ@£M2Ò`cN:»ÃK1ÀÜ 1¹$ÃŒ4Ód#Î3Ì4ÊM.Ä“L.ÏLcN9©cÌ2á\3©;ñ<ð@<óL@pD@ÁXЗv`A¿ `@¬°‚ ^± êÃG,ñÄWlñÅ&¢±ÆÆe|åu„̉„ò‡#Ž,bÈÊ,ÉËX"Ù%”ô7K)¦¼R‹-_C‹aƬB¢rÑm" Ö €€LPÁÓH µ!TmµÕ)Øà þÅÕ<„ýÃØcñÙh§­öÚl·íöÛ¢Î&÷Üt×m÷Ý`„m9ìÿ DT4Õ@X‘U pÀà P…W!â-ùä”WnyF`á´ $X]C­c7ÐCœéE1cL1¼à’JwžŒb )6rˆ#‰ züÑÆ?Ô“€‰X0~ùòÌ7ï¼GWuèD2|BOKðÀ4È•|@APî¬ÃM0©ËÓNëǃK0Éh‡‹'Œ}âI%ã1Ò ”ƒÌAGuC4¶†3¨AcŸÃNÔ†6acwÄ A IxB S€ @€*´…hËóFHÂ’å* ñš¨ÀÊA V@‚ ôä82„Q‹Z¼˜°,ÿ^ÁŠNܢ݌"F!žñ$B‹0Yì0Büa=Wš86œá dÃh¼À…2©hL¾ Äþ0ˆDÈé<Œø(H!!UÐOB§Æ/±Œh<:Ê G;Ö1p€%P^ZàÆÈF:ò‘^™Â–`‚'ÌÊ ¹‚Âv%„#8aõXÚ‰ö‰Sx¢nÂ&F D ‚†D"¡KôɰèD%.a§R("tœÄ)rF YìIž¸E, õ aØ‚‰B†µœÑ kIãÐH7´q­Eeë9æX9" zHàôŠZ2 ” $l`HÚóžøÌ§>OCÿÅ¡ «@Ç6ÈŽ¥¥ƒ¡t€BC¹<`è¸7¶aP`ß 7Ú¡Žt4"»¥‰¢E¡[¬¨Íx†JŸAŽ–ºÔ¥çp€(Oƒ Ø” 8QZ0ƒÌ€aýé©P}¶¢•82Û>—ÊÔ¦îs b8ÃÆÆ`†ªZµXÅj@V‡>â4V”¥#&Ñ¢aZ‡«@S+ÒºV4­ÂÅx]1Lj¢mЀF:¶±×¾nƒæJ<úƒ¨]'Ò@Ö^°µ®} 3è©&;Ù'T¶²Nͬf7ËÙÎz–D& ­hGKÚ@ ŽS¡j*ÒšÒºöµ°mD `Ãÿí@.8i*0z€ãO{2 ­À °ª 8!¤]ùJdKÝêZ·y…û V 4 5IA @ÐñÉ£8×øKtÁ­ö £I<…+HщW Q©íT®08— ?8íuLà—….pFˆÀ»°@Oι ãd£Ç:†1~A ø¹®ÚIŒ$“ ”¢ƒ¸¢âð†©ŠÁ `P†HtøÆ8ÎñClC *a7¸A‚G€Ü€.A ,ð´yÄã 8´±ŒbP‹HŒE*TŠ.Ë"Ir„!A¥?‚–ùÃøE1pIÿ&jÃÝ *ع Ðã êøÏ€.¡4hè{ÞÁà^€ G5¢±Œ]8 ç5G7ª] C;´82´S `xwšxD'’dÁE`æ=›áÌÆÎð2€& ¢“‰Æ¤;ÐÁ r°C Aˆ6.‘E¡v!>§Ð ¨J‡¢mã@[ûÚh¡Â;†³ºndc›é0G6ž1¯âtÏ@Ƨ ó Ä<†1‹Ø2dDñ‰= 9xØÃ'$‘ˆ2ou3lP¡Z~a ]0ã‰Ôà;à ¢(Sà P¦JMÔ7¸8-xÁ ƒÐ¤; ÀDƒØÿN¹Ê9R•z`ò ;x<ÄeøBhG6°”dìâXÆà8-X¡ŠN0‚tð".£‡I”>wÐÃfÖ0z¡ dÈÚ0†1èºEjX“' A*öA‚ˆ€D’,A‰Kô©B0Å‹D5ëÅX:&u¡¼£^hH Ä *”ÍgÏxGÞ¨GR’xy' ˜ïÁ¢À(¢¡lÑne×ÝÓT©£²¡lt£ê!åAÔÙK0€,ÿ tÐøò›ÿü¤zËV-h!“׎pô òR8Bý… LÌQ² L±À ¶0|µð ÃÐ G‚ àA ªÐ ¸ð3u‡ ¸°L¼ð^Xjº€w6§ Èç Üâ Ø’^× )êðáDâNñÐå ñÐà/è0ó =À/Ö:°$-°S(à0, èw„H˜„©"$9‚I?²S 9 -Å0 ¾p%ØEë ðp/¾Ð-Óp á)Ü HÅ!ã°×`îp‚Ð Ò0èæôäà(à >i“+à à €À~J¸ˆŒØˆÿU³l2&â&ƒ2‹ð2œØ‰ÀD’aq$=ä ?sýT"vU,xµ ®øŠ®Xƒ„5€X&¢XZÃ5ýá5½>pÁG@ŒÄè’TOޏŒÌIf@@ƒÒˆpP\2là˜¼Ãðàø£ð Ÿ0Žö“Š_Á ]‡ îøŽ†wÐâ«h"çPÛà P‹PC ¥P„é9ZÓŽõ5, ™3ÕŒùmÓu]·*²yp‘sÐ_! ‘ +B À $’¹€R²0 ¦(Õ’Í0“2‰P#Â6Éûÿh" & &p<ýa:0”DY”F©@”¹”LÙ”N#+•R9•aW@•X™•Zy\ÀAUP8BŠÄ.Qøµ•h™–B©A*"࿱·µ*@bb~Ùð_^1–jY˜†¹<Ð7;à`d/p-0+ÀÄõ`:ÝÀ \x 0î0ÑAµmµQ'G.ñ)Ò%`‡Ùš®Y7^)=0=Ð; ™”É[ÐwáÜð×7 Ñ  z;©;¾ð µ`cXÐ!ªQÊPeyañšÖyh‘˜.`h0\6¤h# 6ÿÔï° Ù Òp|ä>Ö°´ð ¦t š` Š`A˜ øE­Ð2æ_þÕ†: $aF J€^šR^½å…áP|! Ñ äpnÓ žØ¨0Ž¢` ­ð$ãá ÁÓ~ð{€¢Q"J .ú¢ÁA°S+ý2:àÀ›î iyÇÐa8t£à …ѬPŽøÓo~ò#2P˜÷KðPPE9ŒZPÙ"fp¾Š°ß ¡€ „Åp ÿð— žðº½' ‹Ð ` ö(·à ËD-G ÇÉ Æ qu sê Â` Ì Ú,Ô7)â4]XÐà4jÊ/!°Ð=0]Öf *KðuœZðNÐ~¦‘›¨›zJ`yÚ ª £ Šñ zMG± ²€ó9f•ÈðŒ|µÂ]†q (!£p :ó Æ$!“  J-ÕÓ± ׂMÉ å‚}ÖðÅêà³Ù€%NÛ °N“â“*0x( X)ÐÐgÝÛ¾ý"Y…JðE &PQ$—Bà#P 8"£°Ø§ðLu' ¹ GÇà ×ÿ ÇG À0 Ë” ¸(Ý Tx Ó Ó€Ýr ¾ÂqÀ ¼’bäÀ†Åè4ð:fü/>ñ/füp˜O +¹-„¿=á*YÀYq;"ÇSp>’ÌúצxÀð "ˆ Üp‚Nå  ÏP Ä"Úì-½÷½ÛÂø½ ž á n¸ |ä T î`ƒ`·pP :‚G+ЃÝÅ Ð](0„Þå^>1505áS€<ÕÍPÞ° á“Þ°\ ÚÕ0 “2ßp í ç@/ó@ ° ˜€…©­ ã£=ÛÿP Ùç àõà°Ð_~阞Y¸1t€x`‰—Ø‹`JàÈdæŸ0’žÀšÐê¡`"º@ ²Î¸€Ž$b ÉP4º _|}íëBáüø4¸X" 55a½øX½1›CðìÐþì˜G™^íŽzS2r0%VP\3%òIV6£ ¬ÐC»P·0ë¸Ð ª¸ë&² Ý ð`é…5ÅN"ºX¼x¾ˆÖ>ðLùŒ‘Ø1¦aº”¨#²(óð/ ¡83š –®¥Ðe¯°î¦±Êh ¾0"õ#ùn‹Os$ )¿ò ƒìµìÌîìР._óGȾ‘˜óC‰<2€pÒ_Q2Ü8V.r ë¨ñ³Î§øñÅ0Wý1ò$BïB!9ù%‹‰åòÿnoó^¯„U»Eh€µ'²pÐUj¦‘^q¹(#î*â Š ¡`ë$² áÒôÂ0SÍ0i» Êâë¿^ïj8ìXŸ‹Z%óÑ.í˜÷õŽÿøù’?ù”_ù–ù˜Ÿùš1;httpd-2.4.41/docs/manual/images/mod_filter_new.tr.png0000644000000000000500000000245611035423623021043 0ustar rootsrc‰PNG  IHDR§K«ò PLTE333ÿÿÿ,/ÈàIDATx^íÝ1n+7à ‹<@Îð0§x—‹œÀð)—¬Ò¤qÅÈbðŸ2УlJ&™X‡yZÌ‚¡BúwE?`ª£n£Œ2Ê(£ŒÊ»¤°Ž ——–©ü¿QØ •ˆ““ã ^ÄJT”/’ãû_ˆZ>(ì‡JÎ(òJäàŒRžÀ€ä >9É19$Òº¯Ú»£’›GÙŠÉ(£ò.©peñž(ýÚƒÉL–@K Q–@‹…%ÐxèÏ‹5øÌŸ‚‚QS¿+£ˆ‹Ëê±xFÀŒUTÀê4¬‹J%ò`GÁ+’ëD0ð~®¬•ÀÏ•ž1Q¡È«S±\• Ž©Da*÷bq%õܧ¾;mª&PˆûÔv3õBœäŃ|"$‡€ ¸.…Û©ÂÆ“~þ´8¿°­G½L£€@ó©Sn“»¤ò³©ñ§$úDmj@~…DË(€~Ý@¼„Â_O‚˜st)l_¢þ>tçéªÈ&_ û†îl…NKEò‰@œœ:…Ó³9Š&U9àBA•BŒÁ2êT´XAÅ#èR% üÔ)šx½›àß@ÎÈw&0Qs_u)ñ÷Q—íQXD'BFr‚( bá©ä 7¤N7>V|¸…ª3N`CA‰‚¼o2M¥‡ït1OºFV¾ª…TœAu2Ä_¢âõ8çs‡{Tr=‹¿šŠTè&ðråo~Ü6¾U–1§æ(yá.U7Ä·SuSâ¥úÓ^F VQ¥9ŠHŸŠˆ8¢P¤ž Å÷Pºóû¥ôË&%ÍwuÅNä í4o6!$*÷b¹¯|Cæëõ²ùaEèQÄÓ)ž[̦ÄAªÒ<*øø%®òíg1"¶”¸iç•JÜPEšK ¥’ÃtJÁ!"ø NBÂ’ŸvL\)€¹Dg°àÇË[‘æRÁ7x̧… \¥Þ0¢p•Q(Îc*QgfQÓ¦R|%•§R¬D/ÄÁÁ!8!N,„Ä*TMØy¨Æ‡ ¾âªT;±0ª£Æ;‘}–ö¬h U£¶‡‰…Q›&5^³+PƒMÏŽ(ì„×p”©ía(£ O+Rmãg”òw5.©Sµ\t};kÿå"+éS¬©·%R,í?jí¬–Rkgµå"õvVõvVívVkgM)èÓüÖ«L)•‹ú”J¹(N¢_«Õ–‹ôÚYm¹H³2ð2J0¤Æí,+UŠPM¹Hê—‹¨Qãg¥±™S.Z¿Ã·3¦¬MåŠÚ)§*e‡ßë¨P.Ò£ÚÙ¬.ðSv‹…%Ðh”%Ðba ´è8 ¨pÚ½)SR ‚yMJܹ›¼U¥j©QÔ$„•¨Ä ît(ñ½÷T¨Ð}SƒßWJèΫ5¶ðljü‘~:•1˜<Š#J¦S Ðå—Ãåu2%õÊ>Sq*©¬C "ÄÁXX…Šg” Æo=ŽhPÁŸSФ"–Sä—QÀN¨µyɰ½ªþ#µ‡î׈ڟAq;‰*Ûîñé9DéÜJ›t—íú›-÷ø¬ fëy±³·á{YÏdgÏFÿÂ)¿ÿFÿB»%eGÉ• õIQö냔'` »©¹7¡:¸Iç0µ…” ë’êrH©Ë.¥Ká!…ÊQz›AC S9B8Ü ö+§ÛUÆç”Œv/Ÿ8JúÝò˜ÊúÔxN)éwæã9åz+-¿¢9¥NÃ9%§›áœMmã9¢¢9ÅhF·¹½_4ÅìÕWBM51\•^t'Ž;¥äÊSlå©{ÃÉÙaŽÑ"U¬¾EØ‹¬GQ¨ÅêQ’U˜Ô£´µ/›¢b‘ô(禕N%è6w©bIºŠ5©,éªX“ÚWŠŠ• ­œŠeô¨¥èQ·Èós¡4+‘émLosbH›8̬gæeCCCÃyR‡7õ_-Hõƒ06|ÇÓÞ8– *7z.AT8zv”‰^ܨ§ «t«E+ˆ`´Lu+¶~§M=Ž­×µ©õ)¿Aÿ´[ÚT5mª1õ‹YŸºqÕRŸ»e(J4ª¯7´Ê[®Ÿ¹PÒ¨?¼ØùigÛÕâ²ãÛYRE9— ¤üþ^¥v¤ò ¡‘ß–'»gçàÿ O÷ôsˆS´›B¼•´ @Ë6´ÌFË¢´ŒM«ÄJD«z´ K¬æ´ÎÖ¥;"b÷e̘±%Ù?íÂ¥Ù‰ì IEND®B`‚httpd-2.4.41/docs/manual/configuring.html.fr.utf80000644000000000000500000004555613412755316020162 0ustar rootsrc Fichiers de configuration - Serveur HTTP Apache Version 2.4
    <-

    Fichiers de configuration

    Langues Disponibles:  de  |  en  |  fr  |  ja  |  ko  |  tr 

    Ce document décrit les fichiers utilisés pour configurer le Serveur HTTP Apache.

    top

    Fichiers de configuration principaux

    La configuration du serveur HTTP Apache est effectuée en plaçant des directives dans des fichiers de configuration au format texte. Le fichier de configuration principal se nomme en général httpd.conf. La localisation de ce fichier est définie à la compilation, mais peut être redéfinie à l'aide de l'option de ligne de commande -f. En outre, d'autres fichiers de configuration peuvent être ajoutés à l'aide de la directive Include, et des caractères de remplacement peuvent être utilisés pour inclure de nombreux fichiers de configuration. Des directives de tous types peuvent être placées dans chacun de ces fichiers de configuration. Les modifications dans les fichiers de configuration principaux ne sont prises en compte par httpd que lorsque le serveur est démarré ou redémarré.

    Le serveur lit aussi un fichier contenant les types de document mime; ce fichier est défini par la directive TypesConfig, et se nomme mime.types par défaut.

    top

    Syntaxe des fichiers de configuration

    Les fichiers de configuration de httpd contiennent une directive par ligne. On peut utiliser l'anti-slash "\" comme dernier caractère d'une ligne pour indiquer que la directive continue à la ligne suivante. Il ne doit y avoir aucun caractère ni espace entre l'anti-slash et la fin de la ligne.

    Les arguments des directives sont séparés les uns des autres par des espaces. Si un argument contient des espaces, il doit être entouré de guillemets.

    Les directives dans les fichiers de configuration ne sont pas sensibles à la casse, mais leurs arguments le sont souvent. Les lignes qui débutent par le caractère "#" sont interprétées comme des commentaires, et sont ignorées. Les commentaires ne doivent pas apparaître sur la même ligne qu'une directive de configuration. Les espaces précédant une directive sont ignorés; vous pouvez par conséquent indenter les directives afin d'améliorer la lisibilité. Les lignes vides sont aussi ignorées.

    Les valeurs des variables d'environnement ou des variables définies via la directive Define peuvent être utilisées dans le fichier de configuration en utilisant la syntaxe ${VAR}. Si "VAR" est le nom d'une variable valide, la valeur de la variable est alors substituée à la chaîne ${VAR}, et le processus de lecture du fichier de configuration continue comme si la chaîne correspondant à la valeur de la variable s'y était trouvée littéralement. Les variables définies via la directive Define l'emportent sur les autres variables d'environnement du shell. Si la variable "VAR" n'est pas trouvée, la chaîne ${VAR} n'est pas modifiée, et un avertissement est enregistré dans le journal. Le caractère ":" est interdit dans les noms de variables afin d'éviter tout conflit avec la syntaxe de la directive RewriteMap.

    Seules les variables d'environnement du shell définies avant le démarrage du serveur peuvent être utilisées dans les extensions. Les variables d'environnement définies dans le fichier de configuration lui-même, par exemple avec SetEnv, prennent effet trop tard pour pouvoir être utilisées dans les extensions au sein du fichier de configuration.

    La longueur maximale d'une ligne dans un fichier de configuration normal, après substitution des variables et fusion des lignes interrompues, est approximativement de 16 Mo. Dans les fichiers .htaccess, la longueur maximale est de 8190 caractères.

    Vous pouvez vérifier l'absence d'erreurs de syntaxe dans vos fichiers de configuration sans démarrer le serveur à l'aide de la commande apachectl configtest ou de l'option de ligne de commande -t.

    Vous pouvez utiliser la définition -DDUMP_CONFIG de mod_info pour afficher la configuration avec tous les fichiers inclus et les variables d'environnement évaluées, tous les commentaires et les sections <IfDefine> et <IfModule> non actives ayant été supprimés. Cependant, la sortie ne reflète pas les fusions ou écrasements pouvant intervenir en cas de définitions multiples de directives.

    top

    Modules

    httpd est un serveur modulaire. Ceci implique que seules les fonctionnalités les plus courantes sont incluses dans le serveur de base. Les fonctionnalités étendues sont fournies à l'aide de modules qui peuvent être chargés dans httpd. Par défaut, un jeu de modules de base est inclus dans le serveur à la compilation. Si le serveur est compilé de façon à utiliser les modules chargés dynamiquement, alors les modules peuvent être compilés séparément et chargés à n'importe quel moment à l'aide de la directive LoadModule. Dans le cas contraire, httpd doit être recompilé pour ajouter ou supprimer des modules. Les directives de configuration peuvent être incluses de manière conditionnelle selon la présence ou l'absence d'un module particulier en les plaçant dans un bloc <IfModule>.

    Pour voir quels modules ont été compilés avec le serveur, vous pouvez utiliser l'option de ligne de commande -l.

    top

    Portée des directives

    Les directives placées dans les fichiers de configuration principaux s'appliquent au serveur dans son ensemble. Si vous souhaitez modifier la configuration d'une partie du serveur seulement, vous pouvez limiter la portée de vos directives en les plaçant dans une section <Directory>, <DirectoryMatch>, <Files>, <FilesMatch>, <Location>, ou <LocationMatch>. Ces sections limitent le champ d'application des directives qu'elles contiennent à des URls ou des portions du système de fichiers particulières. Elles peuvent aussi être imbriquées, ce qui permet une configuration très fine.

    httpd peut servir simultanément de nombreux sites web au travers des Hôtes Virtuels. La portée des directives peut ainsi être limitée en les plaçant dans des sections <VirtualHost>, afin qu'elles ne s'appliquent qu'aux requêtes pour un site web particulier.

    Bien que la plupart des directives puissent être placées dans chacune de ces sections, certaines d'entre elles n'ont aucun sens dans certains contextes. Par exemple, les directives qui contrôlent la création des processus n'ont de sens que dans le contexte du serveur principal. Pour déterminer quelles directives peuvent être placées dans quelles sections, consultez le Contexte de la directive. Pour plus d'informations, nous fournissons des détails dans Comment fonctionnent les sections Directory, Location et Files.

    top

    Fichiers .htaccess

    httpd permet la gestion décentralisée de la configuration via des fichiers spéciaux placés dans l'arborescence du site web. Ces fichiers spéciaux se nomment en général .htaccess, mais tout autre nom peut être spécifié à l'aide de la directive AccessFileName. Les directives placées dans les fichiers .htaccess s'appliquent au répertoire dans lequel vous avez placé le fichier, ainsi qu'à tous ses sous-répertoires. La syntaxe des fichiers .htaccess est la même que celle des fichiers de configuration principaux. Comme les fichiers .htaccess sont lus à chaque requête, les modifications de ces fichiers prennent effet immédiatement.

    Pour déterminer quelles directives peuvent être placées dans les fichiers .htaccess, consultez le Contexte de la directive. L'administrateur du serveur peut contrôler quelles directives peuvent être placées dans les fichiers .htaccess en définissant la directive AllowOverride dans les fichiers de configuration principaux.

    Pour plus d'informations sur les fichiers .htaccess, se référer au tutoriel .htaccess.

    Langues Disponibles:  de  |  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/getting-started.html0000644000000000000500000000034213362070302017427 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: getting-started.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: getting-started.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/index.html.fr.utf80000644000000000000500000002246613412755316016752 0ustar rootsrc Documentation du Serveur HTTP Apache Version 2.4 - Serveur HTTP Apache Version 2.4
    <-

    Documentation du Serveur HTTP Apache Version 2.4

    Langues Disponibles:  da  |  de  |  en  |  es  |  fr  |  ja  |  ko  |  pt-br  |  tr  |  zh-cn 

    Langues Disponibles:  da  |  de  |  en  |  es  |  fr  |  ja  |  ko  |  pt-br  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/LICENSE0000644000000000000500000002613610147723030014453 0ustar rootsrc Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document. "Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License. "Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity. "You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License. "Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files. "Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types. "Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below). "Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof. "Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution." "Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work. 2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form. 3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed. 4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions: (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and (b) You must cause any modified files to carry prominent notices stating that You changed the files; and (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License. You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License. 5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions. 6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file. 7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License. 8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages. 9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability. END OF TERMS AND CONDITIONS APPENDIX: How to apply the Apache License to your work. To apply the Apache License to your work, attach the following boilerplate notice, with the fields enclosed by brackets "[]" replaced with your own identifying information. (Don't include the brackets!) The text should be enclosed in the appropriate comment syntax for the file format. We also recommend that a file or class name and description of purpose be included on the same "printed page" as the copyright notice for easier identification within third-party archives. Copyright [yyyy] [name of copyright owner] Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. httpd-2.4.41/docs/manual/mpm.html.zh-cn.utf80000644000000000000500000002642113412755316017037 0ustar rootsrc å¤šå¤„ç†æ¨¡å—(MPM) - Apache HTTP æœåС噍 版本 2.4
    <-

    å¤šå¤„ç†æ¨¡å—(MPM)

    å¯ç”¨è¯­è¨€:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    此翻译å¯èƒ½è¿‡æœŸã€‚è¦äº†è§£æœ€è¿‘的更改,请阅读英文版。

    本文档介ç»äº†ä»€ä¹ˆæ˜¯å¤šå¤„ç†æ¨¡å—ï¼Œä»¥åŠ Apache HTTP æœåŠ¡å™¨å¦‚ä½•ä½¿ç”¨å®ƒä»¬ã€‚

    top

    介ç»

    Apache HTTP æœåŠ¡å™¨è¢«è®¾è®¡ä¸ºä¸€ä¸ªåŠŸèƒ½å¼ºå¤§ï¼Œå¹¶ä¸”çµæ´»çš„ web æœåŠ¡å™¨ï¼Œ å¯ä»¥åœ¨å¾ˆå¤šå¹³å°ä¸ŽçŽ¯å¢ƒä¸­å·¥ä½œã€‚ä¸åŒå¹³å°å’Œä¸åŒçš„环境往往需è¦ä¸åŒ 的特性,或å¯èƒ½ä»¥ä¸åŒçš„æ–¹å¼å®žçŽ°ç›¸åŒçš„特性最有效率。Apache httpd 通过模å—化的设计æ¥é€‚应å„ç§çŽ¯å¢ƒã€‚è¿™ç§è®¾è®¡å…许网站管ç†å‘˜é€šè¿‡åœ¨ 编译时或è¿è¡Œæ—¶ï¼Œé€‰æ‹©å“ªäº›æ¨¡å—将会加载在æœåŠ¡å™¨ä¸­ï¼Œæ¥é€‰æ‹©æœåŠ¡å™¨ç‰¹æ€§ã€‚

    Apache HTTP æœåС噍 2.0 扩展此模å—化设计到最基本的 web æœåŠ¡å™¨åŠŸèƒ½ã€‚ 它æä¾›äº†å¯ä»¥é€‰æ‹©çš„å¤šå¤„ç†æ¨¡å—(MPM),用æ¥ç»‘定到网络端å£ä¸Šï¼ŒæŽ¥å—请求, 以åŠè°ƒåº¦å­è¿›ç¨‹å¤„ç†è¯·æ±‚。

    扩展到这一级别的æœåŠ¡å™¨æ¨¡å—化设计,带æ¥ä¸¤ä¸ªé‡è¦çš„好处:

    • Apache httpd 能更优雅,更高效率的支æŒä¸åŒçš„å¹³å°ã€‚尤其是 Apache httpd çš„ Windows 版本现在更有效率了,因为 mpm_winnt 能使用原生网络特性å–代在 Apache httpd 1.3 中使用的 POSIX 层。它也å¯ä»¥æ‰©å±•åˆ°å…¶å®ƒå¹³å° æ¥ä½¿ç”¨ä¸“用的 MPM。
    • Apache httpd èƒ½æ›´å¥½çš„ä¸ºæœ‰ç‰¹æ®Šè¦æ±‚çš„ç«™ç‚¹å®šåˆ¶ã€‚ä¾‹å¦‚ï¼Œè¦æ±‚ 更高伸缩性的站点å¯ä»¥é€‰æ‹©ä½¿ç”¨çº¿ç¨‹çš„ MPMï¼Œå³ worker 或 eventï¼› 需è¦å¯é æ€§æˆ–者与旧软件兼容的站点å¯ä»¥ä½¿ç”¨ prefork。

    在用户看æ¥ï¼ŒMPM 很åƒå…¶å®ƒ Apache httpd 模å—ã€‚ä¸»è¦æ˜¯åŒºåˆ«æ˜¯ï¼Œåœ¨ä»»ä½•时间, å¿…é¡»æœ‰ä¸€ä¸ªï¼Œè€Œä¸”åªæœ‰ä¸€ä¸ª MPM 加载到æœåŠ¡å™¨ä¸­ã€‚å¯ç”¨çš„ MPM 列表ä½äºŽ 模å—索引页é¢ã€‚

    top

    默认 MPM

    下表列出了ä¸åŒç³»ç»Ÿçš„默认 MPM。如果你ä¸åœ¨ç¼–译时选择,那么它就是你将è¦ä½¿ç”¨çš„ MPM。

    Netwarempm_netware
    OS/2mpmt_os2
    Unixprefork,worker 或 event,å–决于平å°ç‰¹æ€§
    Windowsmpm_winnt
    top

    构建 MPM ä¸ºé™æ€æ¨¡å—

    在全部平å°ä¸­ï¼ŒMPM 都å¯ä»¥æž„å»ºä¸ºé™æ€æ¨¡å—ã€‚åœ¨æž„å»ºæ—¶é€‰æ‹©ä¸€ç§ MPM,链接到æœåŠ¡å™¨ä¸­ã€‚å¦‚æžœè¦æ”¹å˜ MPMï¼Œå¿…é¡»é‡æ–°æž„建。

    为了使用指定的 MPM,请在执行 configure 脚本 æ—¶ï¼Œä½¿ç”¨å‚æ•° --with-mpm=NAME。NAME 是指定的 MPM å称。

    编译完æˆåŽï¼Œå¯ä»¥ä½¿ç”¨ ./httpd -l æ¥ç¡®å®šé€‰æ‹©çš„ MPM。 此命令会列出编译到æœåŠ¡å™¨ç¨‹åºä¸­çš„æ‰€æœ‰æ¨¡å—,包括 MPM。

    top

    构建 MPM ä¸ºåŠ¨æ€æ¨¡å—

    在 Unix 或类似平å°ä¸­ï¼ŒMPM å¯ä»¥æž„å»ºä¸ºåŠ¨æ€æ¨¡å—ï¼Œä¸Žå…¶å®ƒåŠ¨æ€æ¨¡å—一样在è¿è¡Œæ—¶åŠ è½½ã€‚ 构建 MPM ä¸ºåŠ¨æ€æ¨¡å—å…许通过修改 LoadModule æŒ‡ä»¤å†…å®¹æ¥æ”¹å˜ MPM,而ä¸ç”¨é‡æ–°æž„建æœåŠ¡å™¨ç¨‹åºã€‚

    在执行 configure 脚本时,使用 --enable-mpms-shared 选项å¯ä»¥å¯ç”¨æ­¤ç‰¹æ€§ã€‚ å½“ç»™å‡ºçš„å‚æ•°ä¸º all æ—¶ï¼Œæ‰€æœ‰æ­¤å¹³å°æ”¯æŒçš„ MPM 模å—都会被安装。还å¯ä»¥åœ¨å‚数中给出模å—列表。

    默认 MPM,å¯ä»¥è‡ªåŠ¨é€‰æ‹©æˆ–è€…åœ¨æ‰§è¡Œ configure 脚本时通过 --with-mpm é€‰é¡¹æ¥æŒ‡å®šï¼Œç„¶åŽå‡ºçŽ°åœ¨ç”Ÿæˆçš„æœåŠ¡å™¨é…置文件中。 编辑 LoadModule 指令内容å¯ä»¥é€‰æ‹©ä¸åŒçš„ MPM。

    å¯ç”¨è¯­è¨€:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    评论

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/handler.html.es0000644000000000000500000003067213412755316016371 0ustar rootsrc Uso de los Handlers en Apache - Servidor HTTP Apache Versión 2.4
    <-

    Uso de los Handlers en Apache

    Idiomas disponibles:  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Este documento describe el uso de los Handlers en Apache.

    top

    ¿Qué es un Handler?

    Un "handler" es una representación interna de Apache de una acción que se va a ejecutar cuando hay una llamada a un fichero. Generalmente, los ficheros tienen handlers implícitos, basados en el tipo de fichero de que se trata. Normalmente, todos los ficheros son simplemente servidos por el servidor, pero algunos tipos de ficheros se tratan de forma diferente.

    Handlers pueden ser usados de manera explicita, basándose en la extensión del fichero o en la ubicación en la que esté, se pueden especificar handlers sin tener en cuenta el tipo de fichero que se trate. Esto es una ventaja por dos razones. Primero, es una solución más elegante. Segundo, porque a un fichero se le pueden asignar tanto un tipo como un handler. (Consulte también la sección Ficheros y extensiones múltiples.)

    Los Handlers pueden tanto ser compilados con el servidor como incluidos en un módulo, o añadidos con la directiva Action. Los handlers que vienen incluidos en el core con el servidor de la distribución estándar de Apache son:

    • default-handler: Envía el fichero usando el default_handler(), que es el handler usado por defecto para tratar contenido estático. (core)
    • send-as-is: Envía el fichero con cabeceras HTTP tal y como es. (mod_asis)
    • cgi-script: Trata el fichero como un sript CGI. (mod_cgi)
    • imap-file: Trata el fichero como un mapa de imágenes. (mod_imagemap)
    • server-info: Extrae la información de configuración del servidor. (mod_info)
    • server-status: Extrae el informe del estado del servidor. (mod_status)
    • type-map: Trata el fichero como una correspondencia de tipos para la negociación de contenidos. (mod_negotiation)
    top

    Ejemplos

    Modificar contenido estático usando un script CGI

    Las siguientes directivas hacen que cuando haya una petición de ficheros con la extensión html se lance el script CGI footer.pl.

    Action add-footer /cgi-bin/footer.pl
    AddHandler add-footer .html

    En este caso, el script CGI es el responsable de enviar el documento originalmente solicitado (contenido en la variable de entorno PATH_TRANSLATED) y de hacer cualquier modificación o añadido deseado.

    Archivos con cabeceras HTTP

    Las siguientes directivas activan el handler send-as-is, que se usa para ficheros que contienen sus propias cabeceras HTTP. Todos los archivos en el directorio /web/htdocs/asis/ serán procesados por el handler send-as-is, sin tener en cuenta su extension.

    <Directory "/web/htdocs/asis">
        SetHandler send-as-is
    </Directory>
    top

    Nota para programadores

    Para implementar las funcionalidades de los handlers, se ha hecho un añadido a la API de Apache que puede que quiera usar. Para ser más específicos, se ha añadido un nuevo registro a la estructura request_rec:

    char *handler

    Si quiere que su módulo llame a un handler , solo tiene que añadir r->handler al nombre del handler en cualquier momento antes de la fase invoke_handler de la petición. Los handlers se implementan siempre como se hacía antes, aunque usando el nombre del handler en vez de un tipo de contenido. Aunque no es de obligado cumplimiento, la convención de nombres para los handlers es que se usen palabras separadas por guiones, sin barras, de manera que no se invada el media type name-space.

    Idiomas disponibles:  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Comentarios

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/sitemap.html.fr.utf80000644000000000000500000006561113447706537017315 0ustar rootsrc Plan du site - Serveur HTTP Apache Version 2.4
    <-

    Plan du site

    Langues Disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    Cette page contient la liste des éléments actuellement disponibles de la Documentation du serveur HTTP Apache Version 2.4.

    top
    top
    top
    top
    top
    top
    top
    top
    top
    top

    Modules Apache

    top
    top

    Langues Disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr  |  zh-cn 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/env.html.ja.utf80000644000000000000500000007507513412755316016422 0ustar rootsrc Apache ã®ç’°å¢ƒå¤‰æ•° - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache ã®ç’°å¢ƒå¤‰æ•°

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。

    Apache HTTP サーãƒã¯ç’°å¢ƒå¤‰æ•°ã¨å‘¼ã°ã‚Œã‚‹ã€åå‰ã®ã¤ã„ãŸ å¤‰æ•°ã«æƒ…報を記憶ã™ã‚‹ä»•組ã¿ã‚’æä¾›ã—ã¦ã„ã¾ã™ã€‚ã“ã®æƒ…å ±ã¯ãƒ­ã‚°åŽé›†ã‚„ アクセス制御ãªã©ã®ã„ã‚ã„ã‚ãªæ“作を制御ã™ã‚‹ãŸã‚ã«ä½¿ã†ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“れらã®å¤‰æ•°ã¯ CGI スクリプトãªã©ã®å¤–部プログラムã¨é€šä¿¡ã™ã‚‹ãŸã‚ã«ã‚‚ 使ã‚れã¾ã™ã€‚ã“ã®æ–‡æ›¸ã¯ãれらã®å¤‰æ•°ã®æ“作方法ã¨ä½¿ç”¨æ–¹æ³•ã‚’ã„ãã¤ã‹ 紹介ã—ã¾ã™ã€‚

    ã“れらã®å¤‰æ•°ã¯ç’°å¢ƒå¤‰æ•°ã¨å‘¼ã°ã‚Œã¦ã„ã¾ã™ãŒã€ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚° システムã«ã‚ˆã£ã¦åˆ¶å¾¡ã•れã¦ã„る環境変数ã¨åŒã˜ã§ã¯ã‚りã¾ã›ã‚“。 実際ã¯ã€ã“れらã®å¤‰æ•°ã¯ Apache ã®å†…部構造ã®ä¸­ã«è¨˜æ†¶ã•ã‚Œã€æ“作ã•れã¦ã„ã¾ã™ã€‚ ãれらã¯ã€CGI ã‚„ SSI ã‚¹ã‚¯ãƒªãƒ—ãƒˆã«æ¸¡ã•れãŸã¨ãã ã‘ã€å®Ÿéš›ã® オペレーティングシステムã®ç’°å¢ƒå¤‰æ•°ã«ãªã‚Šã¾ã™ã€‚サーãƒè‡ªèº«ãŒ 実行ã•れã¦ã„るオペレーティングシステムã®ç’°å¢ƒã‚’æ“作ã—ãŸã„å ´åˆã¯ã€ オペレーティングシステムã®ã‚·ã‚§ãƒ«ãŒæä¾›ã—ã¦ã„る標準ã®ç’°å¢ƒå¤‰æ•°ã® æ“作方法を使ã‚ãªã‘れã°ãªã‚Šã¾ã›ã‚“。

    top

    環境変数ã®è¨­å®š

    基本的ãªç’°å¢ƒã®æ“作

    Apache ã«ãŠã„ã¦ç’°å¢ƒå¤‰æ•°ã‚’設定ã™ã‚‹ä¸€ç•ªåŸºæœ¬çš„ãªæ–¹æ³•ã¯ã€ ç„¡æ¡ä»¶ã«ç’°å¢ƒå¤‰æ•°ã‚’設定ã™ã‚‹ SetEnv ディレクティブを使用ã™ã‚‹ã“ã¨ã§ã™ã€‚ PassEnv ディレクティブã«ã‚ˆã‚Šã€Apache ãŒèµ·å‹•ã•れãŸã‚·ã‚§ãƒ«ã® 環境変数を渡ã™ã“ã¨ã‚‚ã§ãã¾ã™ã€‚

    ãƒªã‚¯ã‚¨ã‚¹ãƒˆæ¯Žã«æ¡ä»¶ã«åŸºã¥ã„ã¦è¨­å®šã™ã‚‹

    より柔軟性を高ã‚ã‚‹ãŸã‚ã«ã€mod_setenvif ã§æä¾›ã•れã¦ã„るディレクティブを使用ã™ã‚‹ã“ã¨ã§ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã® 特性ã«åŸºã¥ã„ã¦ç’°å¢ƒå¤‰æ•°ã‚’設定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚例ãˆã°ã€ç‰¹å®šã®ãƒ–ラウザ (User-Agent) ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚„特定㮠Referer [æ„図的ãªç¶´ã‚Šã§ã™] (訳注: æ­£ã—ã„綴り㯠referrer ã§ã™ãŒã€HTTP ã®ä»•様ã§ã¯ Referer ã¨ãªã£ã¦ã„ã¾ã™)ヘッダãŒè¦‹ã¤ã‹ã£ãŸã¨ãã®ã¿å¤‰æ•°ã‚’設定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ mod_rewrite ã® RewriteRule ディレクティブã«ãŠã„ã¦ç’°å¢ƒå¤‰æ•°ã‚’設定ã™ã‚‹ [E=...] オプションを使用ã™ã‚‹ã“ã¨ã§ã€ より柔軟ãªè¨­å®šã‚’行ãªã†ã“ã¨ãŒã§ãã¾ã™ã€‚

    一æ„ãªè­˜åˆ¥å­

    mod_unique_id ã¯ã€éžå¸¸ã«é™ã‚‰ã‚ŒãŸæ¡ä»¶ã®ä¸‹ã§ 「ã™ã¹ã¦ã€ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ã¤ã„ã¦ã€ä¸€æ„ã§ã‚ã‚‹ã“ã¨ãŒä¿è¨¼ã•れã¦ã„る値を環境変数 UNIQUE_ID ã«è¨­å®šã—ã¾ã™ã€‚

    標準 CGI 変数

    Apache ã®è¨­å®šãƒ•ァイルã§è¨­å®šã•れãŸç’°å¢ƒå¤‰æ•°ã¨ã‚·ã‚§ãƒ«ã‹ã‚‰æ¸¡ã•れる 環境変数ã«åŠ ãˆã¦ã€CGI スクリプト㨠SSI ページã«ã¯ CGI ã®ä»•様ã§è¦æ±‚ã•れã¦ã„る〠リクエストã®ãƒ¡ã‚¿æƒ…報をæŒã£ãŸç’°å¢ƒå¤‰æ•°ã®çµ„ãŒæä¾›ã•れã¾ã™ã€‚

    ã„ãã¤ã‹ã®æ³¨æ„

    • 環境をæ“作ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を使ã£ã¦æ¨™æº– CGI 変数を上書ãã—ãŸã‚Šå¤‰æ›´ã—ãŸã‚Šã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“。
    • CGI スクリプトを起動ã™ã‚‹ãŸã‚ã« suexec ãŒä½¿ç”¨ã•れã¦ã„ã‚‹å ´åˆã€CGI スクリプトãŒèµ·å‹•ã™ã‚‹ãŸã‚ã«ã€ç’°å¢ƒå¤‰æ•°ã¯å®‰å…¨ãªç’°å¢ƒå¤‰æ•°ã®çµ„ã«æ•´ç†ã•れã¾ã™ã€‚ ã“ã®å®‰å…¨ãªç’°å¢ƒå¤‰æ•°ã®é›†åˆã¯ã€ã‚³ãƒ³ãƒ‘イル時㫠suexec.c ã§å®šç¾©ã•れã¾ã™ã€‚
    • ç§»æ¤æ€§ã®ãŸã‚ã«ã€ç’°å¢ƒå¤‰æ•°ã®åå‰ã¯ã‚¢ãƒ«ãƒ•ァベット〠数字ã¨ã‚¢ãƒ³ãƒ€ãƒ¼ã‚¹ã‚³ã‚¢ (訳注: '_') ã ã‘ã‹ã‚‰æˆã‚Šã¾ã™ã€‚ ã•らã«ã€æœ€åˆã®æ–‡å­—ã¯æ•°å­—ã§ã‚ã£ã¦ã¯ã„ã‘ã¾ã›ã‚“。 ã“ã®åˆ¶é™ã«åˆã‚ãªã„文字㯠CGI スクリプト㨠SSI ãƒšãƒ¼ã‚¸ã«æ¸¡ã•れるã¨ãã«ã‚¢ãƒ³ãƒ€ãƒ¼ã‚¹ã‚³ã‚¢ã«ç½®æ›ã•れã¾ã™ã€‚
    • SetEnv ã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆå‡¦ç†ã® 段階ã®ä¸­ã§ã‚‚é…ãã«å®Ÿè¡Œã•れã¾ã™ã€‚ã¤ã¾ã‚Š SetEnvIf ã‚„ RewriteCond ãªã©ã‹ã‚‰ã¯ã€å¤‰æ•°ãŒãã“ã§è¨­å®šã•れã¦ã„ã‚‹ã“ã¨ãŒã‚ã‹ã‚Šã¾ã›ã‚“。
    top

    環境変数ã®ä½¿ç”¨

    CGI スクリプト

    環境変数ã®ä¸»ãªåˆ©ç”¨æ³•ã®ä¸€ã¤ã¯ã€CGI ã‚¹ã‚¯ãƒªãƒ—ãƒˆã«æƒ…報をä¼ãˆã‚‹ã“ã¨ã§ã™ã€‚ 上ã§èª¬æ˜Žã•れã¦ã„るよã†ã«ã€CGI ã‚¹ã‚¯ãƒªãƒ—ãƒˆã«æ¸¡ã•れる環境変数㯠Apache ã®è¨­å®šã«ã‚ˆã‚Šè¨­å®šã•れる変数ã«åŠ ãˆã¦ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æ¨™æº–ã®ãƒ¡ã‚¿æƒ…報をå«ã‚“ã§ã„ã¾ã™ã€‚ 詳細㯠CGI ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ« ã‚’å‚ç…§ã—ã¦ãã ã•ã„。

    SSI ページ

    mod_include ã® INCLUDES フィルタã§å‡¦ç†ã•れる server-parsed (SSI) ドキュメントã§ã¯ã€echo è¦ç´ ã‚’使用ã™ã‚‹ã¨ç’°å¢ƒå¤‰æ•°ãŒå‡ºåŠ›ã•れã¾ã™ã€‚ ã¾ãŸã€ãƒšãƒ¼ã‚¸ã®ã‚る部分ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æ€§è³ªã«å¿œã˜ã¦å¤‰æ›´ã•れるよã†ã«ã€ 環境変数をフロー制御è¦ç´ ã§ä½¿ã†ã“ã¨ãŒã§ãã¾ã™ã€‚詳細㯠SSI ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ« ã‚’å‚ç…§ã—ã¦ãã ã•ã„。

    アクセス制御

    allow from env= ディレクティブ㨠deny from env= ディレクティブを使用ã—ã¦ã€ã‚µãƒ¼ãƒã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’環境変数ã®å€¤ã§åˆ¶å¾¡ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ SetEnvIf ディレクティブã¨çµ„ã¿åˆã‚ã›ã‚‹ã“ã¨ã§ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ç‰¹æ€§ã«åŸºã¥ã„㦠サーãƒã¸ã®ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã‚’柔軟ã«è¡Œãªã†ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ ãŸã¨ãˆã°ã€ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を使用ã—ã¦ã€ç‰¹å®šã®ãƒ–ラウザ (User-Agent) ã‹ã‚‰ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’æ‹’å¦ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    æ¡ä»¶ä»˜ãログ記録

    LogFormat ディレクティブã®ã‚ªãƒ—ション %e を使用ã™ã‚‹ã“ã¨ã§ã€ç’°å¢ƒå¤‰æ•°ã‚’アクセスログã«è¨˜éŒ²ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã•らã«ã€ CustomLog ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æ¡ä»¶åˆ†å²å¼ã‚’使用ã™ã‚‹ã“ã¨ã§ã€ 環境変数ã®å€¤ã«ã‚ˆã£ã¦ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ログã«è¨˜éŒ²ã™ã‚‹ã‹ã©ã†ã‹ã‚’決ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ SetEnvIf ディレクティブã¨çµ„ã¿åˆã‚ã›ã‚‹ã“ã¨ã§ã€ ã©ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ログã«è¨˜éŒ²ã™ã‚‹ã‹ã‚’柔軟ã«åˆ¶å¾¡ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã‚Šã¾ã™ã€‚ãŸã¨ãˆã°ã€ gif ã§çµ‚ã‚るファイルåã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ãƒ­ã‚°ã«è¨˜éŒ²ã—ãªã„〠é•ã†ã‚µãƒ–ãƒãƒƒãƒˆã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã ã‘をログã«è¨˜éŒ²ã™ã‚‹ã€ ã¨ã„ã†é¸æŠžãŒå¯èƒ½ã§ã™ã€‚

    æ¡ä»¶ä»˜ã応答ヘッダ

    Header ディレクティブã¯ç’°å¢ƒå¤‰æ•°ã®å­˜åœ¨ã‚„ä¸åœ¨ã«ã‚ˆã£ã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¸ã®å¿œç­”ã«ç‰¹å®šã® HTTP ヘッダを付ã‘ã‚‹ã‹ã©ã†ã‹ã‚’決ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“れã«ã‚ˆã‚Šã€ãŸã¨ãˆã°ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆ ã«ã‚るヘッダãŒã‚ã‚‹å ´åˆã«ã®ã¿ç‰¹å®šã®å¿œç­”ヘッダをé€ã‚‹ã€ã¨ã„ã†ã‚ˆã†ãªã“ã¨ãŒ ã§ãã¾ã™ã€‚

    外部フィルタã®é©ç”¨

    ExtFilterDefine ディレクティブを使用ã—㦠mod_ext_filter ã§è¨­å®šã•れる外部フィルタã¯ã€ disableenv= 㨠enableenv= オプションを使ã£ã¦ã€ç’°å¢ƒå¤‰æ•°ã«ã‚ˆã‚‹æ¡ä»¶ä»˜ãé©ç”¨ãŒã§ãã¾ã™ã€‚

    URL ã®æ›¸ãæ›ãˆ

    RewriteCond ディレクティブã§è©•価文字列ã¨ã—㦠%{ENV:...} å¼ã‚’指定ã™ã‚‹ã“ã¨ã§ã€mod_rewrite ã®æ›¸ãæ›ãˆã‚¨ãƒ³ã‚¸ãƒ³ãŒç’°å¢ƒå¤‰æ•°ã«åŸºã„ã¦æ¡ä»¶åˆ†å²ã‚’行ãªã†ã“ã¨ãŒã§ãã¾ã™ã€‚ mod_rewrite ãŒä½¿ç”¨å¯èƒ½ãªå¤‰æ•°ã§ ENV: ãŒå‰ã«ã¤ã„ã¦ã„ãªã„変数ã¯ã€ 実際ã¯ç’°å¢ƒå¤‰æ•°ã§ã¯ãªã„ã¨ã„ã†ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。 ãれらã¯ä»–ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‹ã‚‰ã¯ä½¿ç”¨ã§ããªã„ mod_rewrite 用ã®ç‰¹åˆ¥ãªå¤‰æ•°ã§ã™ã€‚

    top

    特別ãªç›®çš„ã®ç’°å¢ƒå¤‰æ•°

    äº’æ›æ€§ã®å•題を解決ã™ã‚‹ãŸã‚ã«ã€ç‰¹å®šã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨é€šä¿¡ã—ã¦ã„ã‚‹ã¨ã㯠Apache ã®å‹•作を変更ã§ãる機構ãŒå°Žå…¥ã•れã¾ã—ãŸã€‚ã§ãã‚‹ã ã‘柔軟ã«ã™ã‚‹ãŸã‚ã«ã€ ã“ã‚Œã‚‰ã®æ©Ÿæ§‹ã¯ç’°å¢ƒå¤‰æ•°ã‚’定義ã™ã‚‹ã“ã¨ã§å‘¼ã³å‡ºã•れã¾ã™ã€‚普通ã¯ã€ BrowserMatch ディレクティブを使ã„ã¾ã™ãŒã€ãŸã¨ãˆã° SetEnv ディレクティブや PassEnv ディレクティブも使用ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    downgrade-1.0

    ã“れを指定ã™ã‚‹ã“ã¨ã§ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒ HTTP/1.0 より新ã—ã„プロトコルã®å ´åˆã§ã‚‚ã€HTTP/1.0 ã¨ã—ã¦æ‰±ã‚れã¾ã™ã€‚

    force-gzip

    DEFLATE フィルタãŒä½¿ç”¨ã™ã‚‹ã‚ˆã†ã«è¨­å®šã•れã¦ã„ã‚‹ã¨ãã«ã€ ã“ã®ç’°å¢ƒå¤‰æ•°ã¯ãƒ–ラウザ㮠accept-encoding ã®è¨­å®šã‚’無視ã—ã¦å¸¸ã« 圧縮ã•れãŸå‡ºåŠ›ã‚’é€ã‚‹ã‚ˆã†ã«ã—ã¾ã™ã€‚

    force-no-vary

    応答ヘッダãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚‰ã‚Œã‚‹å‰ã« Vary フィールドをå–り除ãã¾ã™ã€‚ クライアントã®ä¸­ã«ã¯ã“ã®ãƒ•ィールドを正ã—ã解釈ã—ãªã„ã‚‚ã®ãŒã‚りã¾ã™ã€‚ ã“ã®å¤‰æ•°ã‚’設定ã™ã‚‹ã“ã¨ã§ãã®å•題を回é¿ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã®å¤‰æ•°ã‚’設定ã™ã‚‹ã¨ã€force-response-1.0 ãŒè¨­å®šã•れãŸã“ã¨ã«ãªã‚Šã¾ã™ã€‚

    force-response-1.0

    ã“れãŒè¨­å®šã•れã¦ã„ã‚‹ã¨ã€HTTP/1.0 リクエストを発行ã™ã‚‹ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«å¯¾ã—ã¦ã¯ 常㫠HTTP/1.0 ã§å¿œç­”ã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ã“ã®æ©Ÿèƒ½ã¯ã€ 元々㯠AOL ã®ãƒ—ロキシã®å•題ã®ãŸã‚ã«å®Ÿè£…ã•れã¾ã—ãŸã€‚HTTP/1.0 クライアントã®ä¸­ã«ã¯ã€ HTTP/1.1 ã®å¿œç­”ã‚’è¿”ã•ã‚Œã‚‹ã¨æ­£ã—ã動作ã—ãªã„ã‚‚ã®ãŒã‚ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。 ã“ã®æ©Ÿèƒ½ã‚’使用ã™ã‚‹ã“ã¨ã§ã€ãã®ã‚ˆã†ãªã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã®é–“ã®äº’æ›æ€§å•題を解決ã§ãã¾ã™ã€‚

    gzip-only-text/html

    ã“れ㌠1 ã«è¨­å®šã•れるã¨ã€ã“ã®å¤‰æ•°ã¯ text/html 以外ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã«å¯¾ã™ã‚‹ã€mod_deflate æä¾›ã® DEFLATE 出力フィルタを無効ã«ã—ã¾ã™ã€‚ ã¾ãŸã€é™çš„ã«ã€æ—¢ã«åœ§ç¸®ã•れãŸãƒ•ァイルを使用ã—ãŸã„å ´åˆã€ (gzip ã ã‘ã§ãªãã€"identity" ã¨ç•°ãªã‚‹å…¨ã¦ã®ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã«å¯¾ã—ã¦) mod_negotiation も変数を評価ã—ã¾ã™ã€‚

    no-gzip

    セットã•れるã¨ã€mod_deflate ã® DEFLATE フィルタãŒã‚ªãƒ•ã«ãªã‚Šã¾ã™ã€‚ ãã—㦠mod_negotiation ã¯ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れãŸãƒªã‚½ãƒ¼ã‚¹ã‚’é€ã‚‰ãªã„よã†ã«ã—ã¾ã™ã€‚

    nokeepalive

    ã“れãŒè¨­å®šã•れã¦ã„ã‚‹å ´åˆã¯ã€KeepAlive を使用ã—ãªã„よã†ã«ã—ã¾ã™ã€‚

    prefer-language

    mod_negotiation ã®æŒ™å‹•ã«å½±éŸ¿ã‚’与ãˆã¾ã™ã€‚ (en, ja, x-klingonã¨ã„ã£ãŸ) è¨€èªžã‚¿ã‚°ãŒæ ¼ç´ã•れã¦ã„れã°ã€ãã®è¨€èªžã® variant ã‚’é€ä¿¡ã—よã†ã¨ã—ã¾ã™ã€‚ ãã®ã‚ˆã†ãª variant ãŒãªã„å ´åˆã¯ã€ 通常ã®ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³å‡¦ç†ãŒ é©ç”¨ã•れã¾ã™ã€‚

    redirect-carefully

    ã“れã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¸ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã®é€ä¿¡ã‚’サーãƒãŒã‚ˆã‚Šæ³¨æ„æ·±ã 行ãªã†ã‚ˆã†ã«ã—ã¾ã™ã€‚ ã“れã¯é€šå¸¸ã€ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã«éš›ã—ã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã« å•題ãŒã‚ã‚‹ã“ã¨ãŒåˆ†ã‹ã£ã¦ã„ã‚‹å ´åˆã«ä½¿ã‚れã¾ã™ã€‚ã“ã®æ©Ÿèƒ½ã¯å…ƒã€…㯠マイクロソフトã®ã‚¦ã‚§ãƒ–フォルダã®ã‚½ãƒ•ト㌠DAV メソッドã«ã‚ˆã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ãƒªã‚½ãƒ¼ã‚¹ã¸ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã®æ‰±ã„ã« å•題ãŒã‚Šã€ãれを回é¿ã™ã‚‹ãŸã‚ã«å®Ÿè£…ã•れã¾ã—ãŸã€‚

    suppress-error-charset

    Apache 2.2 以é™ã§åˆ©ç”¨å¯èƒ½

    クライアントã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã™ã‚‹å¿œç­”ã¨ã—ã¦ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’é€ä¿¡ã™ã‚‹éš›ã€ レスãƒãƒ³ã‚¹ã«ã¯ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆãŒè‡ªå‹•çš„ã«è¡Œãªãˆãªã„ (行ãªã‚れãªã„) å ´åˆã«è¡¨ç¤ºã™ã‚‹ãƒ†ã‚­ã‚¹ãƒˆãŒå«ã¾ã‚Œã¾ã™ã€‚ 通常ã€ã“ã®ãƒ†ã‚­ã‚¹ãƒˆã«åˆè‡´ã—ãŸã‚­ãƒ£ãƒ©ã‚¯ã‚¿ã‚»ãƒƒãƒˆã€ISO-8859-1 ã§ãƒ©ãƒ™ãƒ«ä»˜ã‘ã‚’ã—ã¾ã™ã€‚

    ã—ã‹ã—ã€ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå…ˆãŒåˆ¥ã®æ–‡å­—セットを使ã£ã¦ã„ã‚‹å ´åˆã€ ã‚ã‚‹å•題ã®ã‚るブラウザã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯ã€ リダイレクト先ã®å®Ÿéš›ã®æ–‡å­—セットã®ä»£ã‚りã«ã€ ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå…ƒã®æ–‡å­—セットを使ã£ã¦ã—ã¾ã†ã“ã¨ãŒã‚りã¾ã™ã€‚ ãã®çµæžœã€ä¾‹ãˆã°å¤‰ãªæç”»ãŒè¡Œãªã‚れãŸã‚Šã—ã¦ã€èª­ã‚ãªããªã£ãŸã‚Šã—ã¾ã™ã€‚

    ã“ã®ç’°å¢ƒå¤‰æ•°ã‚’設定ã™ã‚‹ã“ã¨ã§ã€ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ã‚·ãƒ§ãƒ³ãƒ†ã‚­ã‚¹ãƒˆã«å¯¾ã™ã‚‹ ã‚­ãƒ£ãƒ©ã‚¯ã‚¿ã‚»ãƒƒãƒˆã®æŒ‡å®šã‚’除去ã—ã¾ã™ã®ã§ã€ãれらå•題ã®ã‚るブラウザã§ã‚‚ ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå…ˆã®æ–‡å­—セットを正ã—ã使ã†ã‚ˆã†ã«ã§ãã¾ã™ã€‚

    セキュリティ

    文字セットを指定ã›ãšã«ã‚¨ãƒ©ãƒ¼ãƒšãƒ¼ã‚¸ã‚’é€ä¿¡ã™ã‚‹ã¨ã€ クロスサイトスクリプティング (訳注: XSS) 攻撃ã®å±é™ºæ€§ãŒã§ã¦ãã¾ã™ã€‚ HTTP/1.1 ä»•æ§˜ã«æº–æ‹ ã—ã¦ã„ãªãã¦ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®ä¸­èº«ã‹ã‚‰æ–‡å­—セットを "推測" ã—よã†ã¨ã™ã‚‹ãƒ–ラウザ (MSIE) ãŒå®Ÿéš›ã«ã‚ã‚‹ã‹ã‚‰ã§ã™ã€‚ ãã®ã‚ˆã†ãªãƒ–ラウザ㯠UTF-7 文字セットを使ã£ã¦ç°¡å˜ã«é¨™ã™ã“ã¨ãŒã§ãã¾ã™ã€‚ クロスサイトスクリプティング攻撃を防ããŸã‚ã«å®Ÿè£…ã•れã¦ã„ã‚‹ 通常ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—機構ãŒã€å…¥åŠ›ãƒ‡ãƒ¼ã‚¿ä¸­ã«ã‚ã‚‹ UTF-7 㧠エンコードã•れãŸã‚³ãƒ³ãƒ†ãƒ³ãƒ„ (リクエスト URI ãªã©) ã«ã¯ ã†ã¾ã動作ã—ãªã„ã‹ã‚‰ã§ã™ã€‚

    force-proxy-request-1.0, proxy-nokeepalive, proxy-sendchunked, proxy-sendcl

    ã“ã‚Œã‚‰ã®æŒ‡ç¤ºå­ã¯ mod_proxy ã®æŒ™å‹•を変更ã—ã¾ã™ã€‚ 詳細㯠mod_proxy ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’ã”å‚ç…§ãã ã•ã„。

    top

    例

    ãŠã‹ã—ãªæŒ™å‹•ã‚’ã™ã‚‹ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«å¯¾ã—ã¦ãƒ—ロトコルã®å‹•作を変更ã™ã‚‹

    クライアントã«é–¢ã™ã‚‹æ—¢çŸ¥ã®å•題ã«å¯¾å‡¦ã™ã‚‹ãŸã‚ã«ã€ä»¥ä¸‹ã®è¡Œã‚’ httpd.conf ã«å…¥ã‚Œã‚‹ã“ã¨ã‚’推奨ã—ã¦ã„ã¾ã™ã€‚

    å¤ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã® Apache ã§ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®å•題ã«å¯¾å¿œã™ã‚‹ãŸã‚ã« httpd.conf ã«æ¬¡ã®è¡Œã‚’加ãˆã‚‹ã‚ˆã†æŽ¨å¥¨ã•れã¦ã„ã¾ã—ãŸãŒã€ 今ã¨ãªã£ã¦ã¯ã€å•題ã¨ã—ã¦ã„ãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯å®Ÿéš›ã«ã¯è¦‹ã‹ã‘ã‚‹ã“ã¨ã¯ ãªããªã£ã¦ããŸã®ã§ã€ã“ã®è¨­å®šã¯ã‚‚ã¯ã‚„å¿…è¦ãªã„ã‹ã‚‚ã—れã¾ã›ã‚“。

    #
    # The following directives modify normal HTTP response behavior.
    # The first directive disables keepalive for Netscape 2.x and browsers that
    # spoof it. There are known problems with these browser implementations.
    # The second directive is for Microsoft Internet Explorer 4.0b2
    # which has a broken HTTP/1.1 implementation and does not properly
    # support keepalive when it is used on 301 or 302 (redirect) responses.
    #
    BrowserMatch "Mozilla/2" nokeepalive
    BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
    
    #
    # The following directive disables HTTP/1.1 responses to browsers which
    # are in violation of the HTTP/1.0 spec by not being able to grok a
    # basic 1.1 response.
    #
    BrowserMatch "RealPlayer 4\.0" force-response-1.0
    BrowserMatch "Java/1\.0" force-response-1.0
    BrowserMatch "JDK/1\.0" force-response-1.0

    ç”»åƒã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’アクセスログã«è¨˜éŒ²ã—ãªã„

    ã“ã®ä¾‹ã§ã¯ã€ç”»åƒã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã«ç¾ã‚Œãªã„よã†ã«ã—ã¾ã™ã€‚ ã“れを変更ã™ã‚‹ã“ã¨ã§ã€ç‰¹å®šã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ãƒ­ã‚°åŽé›†ã‚’ã‚„ã‚ãŸã‚Šã€ 特定ã®ãƒ›ã‚¹ãƒˆã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ­ã‚°åŽé›†ã‚’ã‚„ã‚ãŸã‚Šã™ã‚‹ã“ã¨ãŒç°¡å˜ã«ã§ãã¾ã™ã€‚

    SetEnvIf Request_URI \.gif image-request
    SetEnvIf Request_URI \.jpg image-request
    SetEnvIf Request_URI \.png image-request
    CustomLog logs/access_log common env=!image-request

    「画åƒã®ç›—用ã€ã‚’防ã

    ã“ã®ä¾‹ã¯ã€åˆ¥ã®ã‚µãƒ¼ãƒã«ã„る人ãŒã€ã‚ãªãŸã®ã‚µãƒ¼ãƒã«ã‚ã‚‹ç”»åƒã‚’ inline ç”»åƒã¨ã—ã¦ä½¿ç”¨ã™ã‚‹ã“ã¨ã‚’防ãŽã¾ã™ã€‚ ã“ã‚Œã¯æŽ¨å¥¨ã•れã¦ã„る設定ã§ã¯ã‚りã¾ã›ã‚“ãŒã€ã‚ã‚‹é™å®šã•れãŸçжæ³ã§ã¯æœ‰åйã§ã™ã€‚ ã“ã“ã§ã¯ã€ã™ã¹ã¦ã®ç”»åƒã¯ /web/images ã¨ã„ã†ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã‚ã‚‹ã¨ä»®å®šã—ã¾ã™ã€‚

    SetEnvIf Referer "^http://www\.example\.com/" local_referal
    # Allow browsers that do not send Referer info
    SetEnvIf Referer "^$" local_referal
    <Directory /web/images>
       Order Deny,Allow
       Deny from all
       Allow from env=local_referal
    </Directory>

    ã“ã®æ‰‹æ³•ã«é–¢ã™ã‚‹è©³ã—ã„æƒ…報㯠ServerWatch ã«ã‚ã‚‹ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ« 「Keeping Your Images from Adorning Other Sites ã€ã‚’å‚ç…§ã—ã¦ãã ã•ã„。

    翻訳済ã¿è¨€èªž:  en  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/dso.html.fr.utf80000644000000000000500000005433013412755316016423 0ustar rootsrc Support des objets dynamiques partagés (DSO) - Serveur HTTP Apache Version 2.4
    <-

    Support des objets dynamiques partagés (DSO)

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    La conception modulaire du serveur HTTP Apache permet à l'administrateur de choisir les fonctionnalités à inclure dans le serveur en sélectionnant un certain nombre de modules. Les modules seront compilés en tant qu'Objets Dynamiques Partagés (Dynamic Shared Objects ou DSOs) qui mènent une existence séparée du fichier binaire principal httpd. Les modules DSO peuvent être compilés en même temps que le serveur, ou compilés et ajoutés ultérieurement via l'Outil des Extensions à Apache (Apache Extension Tool ou apxs).

    Les modules peuvent aussi être intégrés statiquement dans le binaire httpd lors de la compilation de ce dernier.

    Ce document décrit l'utilisation des modules DSO ainsi que les dessous de leur fonctionnement.

    top

    Implémentation

    Le support DSO pour le chargement de modules individuels d'Apache httpd est assuré par un module nommé mod_so qui doit être compilé statiquement dans le coeur d'Apache httpd. Il s'agit du seul module avec le module core à ne pas pouvoir être compilé en tant que module DSO lui-même. Pratiquement tous les autres modules d'Apache httpd distribués seront alors compilés en tant que modules DSO. Une fois compilé en tant que module DSO nommé mod_foo.so, un module peut être chargé en mémoire au démarrage ou redémarrage du serveur à l'aide de la directive LoadModule du module mod_so, placée dans votre fichier httpd.conf.

    La compilation en mode DSO peut être désactivée pour certains modules via l'option --enable-mods-static du script configure, comme expliqué dans la Documentation sur l'installation.

    Un utilitaire permet de simplifier la création de fichiers DSO pour les modules d'Apache httpd (particulièrement pour les modules tiers) ; il s'agit du programme nommé apxs (APache eXtenSion). On peut l'utiliser pour construire des modules de type DSO en dehors de l'arborescence des sources d'Apache httpd. L'idée est simple : à l'installation du serveur HTTP Apache, la procédure make install du script configure installe les fichiers d'en-têtes d'Apache httpd et positionne, pour la plateforme de compilation, les drapeaux du compilateur et de l'éditeur de liens à l'intérieur du programme apxs, qui sera utilisé pour la construction de fichiers DSO. Il est ainsi possible d'utiliser le programme apxs pour compiler ses sources de modules Apache httpd sans avoir besoin de l'arborescence des sources de la distribution d'Apache, et sans avoir à régler les drapeaux du compilateur et de l'éditeur de liens pour le support DSO.

    top

    Mode d'emploi succinct

    Afin que vous puissiez vous faire une idée des fonctionnalités DSO du serveur HTTP Apache 2.x, en voici un résumé court et concis :

    1. Construire et installer un module Apache httpd faisant partie de la distribution, par exemple mod_foo.c, en tant que module DSO mod_foo.so :

      $ ./configure --prefix=/chemin/vers/installation --enable-foo
      $ make install

    2. Configure le serveur HTTP Apache avec tous les modules activés. Seul un jeu de modules de base sera chargé au démarrage du serveur. Vous pouvez modifier ce jeu de modules chargés au démarrage en activant ou désactivant les directives LoadModule correspondantes dans le fichier httpd.conf.

      $ ./configure --enable-mods-shared=all
      $ make install

      L'argument most de l'option --enable-modules indique que tous les modules non-expérimentaux ou qui ne sont pas là à titre d'exemple seront compilés.

    3. Certains modules ne sont utilisés que par les développeurs et ne seront pas compilés. Si vous voulez les utiliser, spécifiez l'option all. Pour compiler tous les modules disponibles, y compris les modules de développeurs, spécifiez l'option reallyall. En outre, la directive LoadModule peut être activée pour tous les modules compilés via l'option du script configure --enable-load-all-modules.

      $ ./configure --enable-mods-shared=reallyall --enable-load-all-modules
      $ make install

    4. Construire et installer un module Apache httpd tiers, par exemple mod_foo.c, en tant que module DSO mod_foo.so en dehors de l'arborescence des sources d'Apache httpd à l'aide du programme apxs :

      $ cd /chemin/vers/module_tiers
      $ apxs -cia mod_foo.c

    Dans tous les cas, une fois le module partagé compilé, vous devez ajouter une directive LoadModule dans le fichier httpd.conf pour qu'Apache httpd active le module.

    Voir la documentation sur apxs pour plus de détails.

    top

    Les dessous du fonctionnement des DSO

    Les clônes modernes d'UNIX proposent un mécanisme appelé édition de liens et chargement dynamiques d' Objets Dynamiques Partagés (DSO), qui permet de construire un morceau de programme dans un format spécial pour le rendre chargeable à l'exécution dans l'espace d'adressage d'un programme exécutable.

    Ce chargement peut s'effectuer de deux manières : automatiquement par un programme système appelé ld.so quand un programme exécutable est démarré, ou manuellement à partir du programme en cours d'exécution via sa propre interface système vers le chargeur Unix à l'aide des appels système dlopen()/dlsym().

    Dans la première méthode, les DSO sont en général appelés bibliothèques partagées ou encore bibliothèques DSO, et possèdent des noms du style libfoo.so ou libfoo.so.1.2. Ils résident dans un répertoire système (en général /usr/lib) et le lien avec le programme exécutable est établi à la compilation en ajoutant -lfoo à la commande de l'éditeur de liens. Les références à la bibliothèque sont ainsi codées en dur dans le fichier du programme exécutable de façon à ce qu'au démarrage du programme, le chargeur Unix soit capable de localiser libfoo.so dans /usr/lib, dans des chemins codés en dur à l'aide d'options de l'éditeur de liens comme -R ou dans des chemins définis par la variable d'environnement LD_LIBRARY_PATH. Le chargeur peut dès lors résoudre tous les symboles (jusque là non encore résolus) du DSO dans le programme exécutable.

    Les symboles du programme exécutable ne sont en général pas référencés par le DSO (car c'est une bibliothèque de code à usage général et réutilisable), et ainsi aucune résolution supplémentaire n'est nécessaire. De son côté, le programme exécutable ne doit accomplir aucune action particulière pour utiliser les symboles du DSO car toutes les résolutions sont effectuées par le chargeur Unix. En fait, le code permettant d'invoquer ld.so fait partie du code de démarrage pour l'exécution qui est lié dans tout programme exécutable non statiquement lié. L'avantage du chargement dynamique du code d'une bibliothèque partagée est évident : le code de la bibliothèque ne doit être stocké qu'une seule fois dans une bibliothèque système telle que libc.so, ce qui permet d'économiser de l'espace disque pour les autres programmes.

    Dans la seconde méthode, les DSO sont en général appelés objets partagés ou fichiers DSO, et peuvent être nommés avec l'extension de son choix (bien que le nom conseillé soit du style foo.so). Ces fichiers résident en général dans un répertoire spécifique à un programme, et aucun lien n'est automatiquement établi avec le programme exécutable dans lequel ils sont utilisés. Le programme exécutable charge manuellement le DSO à l'exécution dans son espace d'adressage à l'aide de l'appel système dlopen(). A ce moment, aucune résolution de symboles du DSO n'est effectuée pour le programme exécutable. Par contre le chargeur Unix résoud automatiquement tout symbole du DSO (non encore résolu) faisant partie de l'ensemble de symboles exporté par le programme exécutable et ses bibliothèques DSO déjà chargées (et en particulier tous les symboles de la bibliothèque à tout faire libc.so). De cette façon, le DSO prend connaissance de l'ensemble de symboles du programme exécutable comme s'il avait été lié statiquement avec lui auparavant.

    Finalement, pour tirer profit de l'API des DSO, le programme exécutable doit résoudre certains symboles du DSO à l'aide de l'appel système dlsym() pour une utilisation ultérieure dans les tables de distribution, etc... En d'autres termes, le programme exécutable doit résoudre manuellement tous les symboles dont il a besoin pour pouvoir les utiliser. Avantage d'un tel mécanisme : les modules optionnels du programme n'ont pas besoin d'être chargés (et ne gaspillent donc pas de ressources mémoire) tant qu'il ne sont pas nécessaires au programme en question. Si nécessaire, ces modules peuvent être chargés dynamiquement afin d'étendre les fonctionnalités de base du programme.

    Bien que ce mécanisme DSO paraisse évident, il comporte au moins une étape difficile : la résolution des symboles depuis le programme exécutable pour le DSO lorsqu'on utilise un DSO pour étendre les fonctionnalités d'un programme (la seconde méthode). Pourquoi ? Parce que la "résolution inverse" des symboles DSO à partir du jeu de symboles du programme exécutable dépend de la conception de la bibliothèque (la bibliothèque n'a aucune information sur le programme qui l'utilise) et n'est ni standardisée ni disponible sur toutes les plateformes. En pratique, les symboles globaux du programme exécutable ne sont en général pas réexportés et donc indisponibles pour l'utilisation dans un DSO. Trouver une méthode pour forcer l'éditeur de liens à exporter tous les symboles globaux est le principal problème que l'on doit résoudre lorsqu'on utilise un DSO pour étendre les fonctionnalités d'un programme au moment de son exécution.

    L'approche des bibliothèques partagées est la plus courante, parce que c'est dans cette optique que le mécanisme DSO a été conçu ; c'est cette approche qui est ainsi utilisée par pratiquement tous les types de bibliothèques que fournit le système d'exploitation.

    top

    Avantages et inconvénients

    Les fonctionnalités ci-dessus basées sur les DSO présentent les avantages suivants :

    • Le paquetage du serveur est plus flexible à l'exécution car le processus serveur peut être assemblé à l'exécution via la directive LoadModule du fichier de configuration httpd.conf plutôt que par des options du script configure à la compilation. Par exemple, on peut ainsi exécuter différentes instances du serveur (standard et version SSL, version minimale et version dynamique [mod_perl, mod_php], etc...) à partir d'une seule installation d'Apache httpd.
    • Le paquetage du serveur peut être facilement étendu avec des modules tiers, même après l'installation. Ceci présente un gros avantage pour les mainteneurs de paquetages destinés aux distributions, car ils peuvent créer un paquetage Apache httpd de base, et des paquetages additionnels contenant des extensions telles que PHP, mod_perl, mod_fastcgi, etc...
    • Une facilité de prototypage des modules Apache httpd, car la paire DSO/apxs vous permet d'une part de travailler en dehors de l'arborescence des sources d'Apache httpd, et d'autre part de n'avoir besoin que de la commande apxs -i suivie d'un apachectl restart pour introduire une nouvelle version de votre module fraîchement développé dans le serveur HTTP Apache en cours d'exécution.

    Inconvénients des DSO :

    • Le serveur est environ 20 % plus lent au démarrage à cause des résolutions de symboles supplémentaires que le chargeur Unix doit effectuer.
    • Le serveur est environ 5 % plus lent à l'exécution sur certaines plates-formes, car le code indépendant de la position (PIC) nécessite parfois des manipulations compliquées en assembleur pour l'adressage relatif qui ne sont pas toujours aussi rapides que celles que permet l'adressage absolu.
    • Comme les modules DSO ne peuvent pas être liés avec d'autres bibliothèques basées sur DSO (ld -lfoo) sur toutes les plates-formes (par exemple, les plates-formes basées sur a.out ne fournissent en général pas cette fonctionnalité alors que les plates-formes basées sur ELF le font), vous ne pouvez pas utiliser le mécanisme DSO pour tous les types de modules. Ou en d'autres termes, les modules compilés comme fichiers DSO sont contraints de n'utiliser que les symboles du coeur d'Apache httpd, de la bibliothèque C (libc) et toutes autres bibliothèques statiques ou dynamiques utilisées par le coeur d'Apache httpd, ou d'archives statiques (libfoo.a) contenant du code indépendant de la position (PIC). Il y a deux solutions pour utiliser un autre type de code : soit le coeur d'Apache httpd contient déjà lui-même une référence au code, soit vous chargez le code vous-même via dlopen().

    Langues Disponibles:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/custom-error.html0000644000000000000500000000111713362070302016764 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: custom-error.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: custom-error.html.es Content-Language: es Content-type: text/html; charset=ISO-8859-1 URI: custom-error.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: custom-error.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: custom-error.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: custom-error.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/invoking.html.es0000644000000000000500000003276013412755316016600 0ustar rootsrc Iniciar Apache - Servidor HTTP Apache Versión 2.4
    <-

    Iniciar Apache

    Idiomas disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr 

    En Windows, Apache se ejecuta normalmente como un servicio. Para obtener más información, consulte Ejecutar Apache como un servicio.

    En Unix, el programa httpd se ejecuta como un demonio (daemon) de forma contíniua y en segundo plano y atiende las peticiones que le lleguen. Este documento describe cómo invocar el programa httpd.

    top

    Cómo iniciar Apache

    Si el puerto especificado en la directiva Listen del fichero de configuración es el que viene por defecto, es decir, el puerto 80 (o cualquier otro puerto por debajo del 1024), entonces es necesario tener privilegios de usuario root (superusuario) para iniciar Apache, de modo que pueda establecerse una conexión a través de esos puertos privilegiados. Una vez que el servidor Apache se ha iniciado y ha completado algunas tareas preliminares, tales como abrir sus ficheros log, lanzará varios procesos, procesos hijo, que hacen el trabajo de escuchar y atender las peticiones de los clientes. El proceso principal, httpd continúa ejecutándose con el usuario root, pero los procesos hijo se ejecutan con menores privilegios de usuario. Esto lo controla el Módulo de MultiProcesamiento (MPM) seleccionado.

    La forma recomendada para invocar el ejecutable httpd es usando el script de control apachectl. Este script fija determinadas variables de entorno que son necesarias para que httpd funcione correctamente en el sistema operativo, y después invoca el binario httpd. apachectl pasa a httpd cualquier argumento que se le pase a través de la línea de comandos, de forma que cualquier opción de httpd puede ser usada también con apachectl. Puede editar directamente el script apachectl y cambiar la variable HTTPD variable que está al principio y que especifica la ubicación exacta en la que está el binario httpd y cualquier argumento de línea de comandos que quiera que esté siempre presente.

    La primera cosa que hace httpd cuando es invocado es localizar y leer el fichero de configuración httpd.conf. El lugar en el que está ese fichero se determina al compilar, pero también es posible especificar la ubicación en la que se encuentra al iniciar el servidor Apache usando la opción de línea de comandos -f

    /usr/local/apache2/bin/apachectl -f /usr/local/apache2/conf/httpd.conf

    Si todo va bien durante el arranque, la sesión de terminal se suspenderá un momento y volverá a estar activa casi inmediatamente. Esto quiere decir que el servidor está activo y funcionando. Puede usar su navegador para conectarse al servidor y ver la página de prueba que hay en el directorio de la directiva DocumentRoot.

    top

    Errores Durante el Arranque

    Si Apache encuentra una error irrecuperable durante el arranque, escribirá un mensaje describiendo el problema en la consola o en el archivo ErrorLog antes de abortar la ejecución. Uno de los mensajes de error más comunes es "Unable to bind to Port ...". Cuando se recibe este mensaje es normalmente por alguna de las siguientes razones:

    • Está intentando iniciar el servidor Apache en un puerto privilegiado (del 0 al 1024) sin haber hecho login como usuario root; ó bien
    • Está intentando iniciar el servidor Apache mientras está ya ejecutando Apache o algún otro servidor web en el mismo puerto.

    Puede encontrar más información sobre cómo solucionar problemas, en la sección de Preguntas Frecuentes de Apache.

    top

    Iniciar Apache al Iniciar el Sistema

    Si quiere que el servidor Apache continúe su ejecución después de reiniciar el sistema, debe añadir una llamada a apachectl en sus archivos de arranque (normalmente rc.local o un fichero en ese directorio del tipo rc.N). Esto iniciará Apache como usuario root. Antes de hacer esto, asegúrese de que la configuración de seguridad y las restricciones de acceso de su servidor Apache están correctamente configuradas.

    El script apachectl está diseñado para actuar como un script estándar de tipo SysV init; puede tomar los argumentos start, restart, y stop y traducirlos en las señales apropiadas para httpd. De esta manera, casi siempre puede simplemente enlazar apachectlcon el directorio init adecuado. Pero asegúrese de comprobar los requisitos exactos de su sistema.

    top

    Información Adicional

    En la sección El Servidor y Programas de Soporte puede encontrar más información sobre las opciones de línea de comandos que puede pasar a httpd y apachectl así como sobre otros programas de soporte incluidos con el servidor Apache. También hay documentación sobre todos los módulos incluidos con la distribución de Apache y sus correspondientes directivas asociadas.

    Idiomas disponibles:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr 

    top

    Comentarios

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/getting-started.html.fr.utf80000644000000000000500000004200013412755316020732 0ustar rootsrc Pour démarrer - Serveur HTTP Apache Version 2.4
    <-

    Pour démarrer

    Langues Disponibles:  en  |  fr 

    Si vous ne connaissez rien au serveur HTTP Apache, ou même au fonctionnement d'un site web, vous vous demandez probablement par où commencer et quelles questions poser. Ce document vous permettra de parcourir les bases du sujet.

    top

    Clients, serveurs et URLs

    Les adresses des pages web sur la Toile se présentent sous forme d'URLs - Uniform Resource Locators - qui comportent un protocole (par exemple http), un nom de serveur (par exemple www.apache.org), un chemin (par exemple /docs/current/getting-started.html), et le cas échéant une chaîne de requête (query string) (par exemple ?arg=value) permettant de transmettre des informations supplémentaires au serveur.

    Un client (par exemple un navigateur web) se connecte à un serveur (par exemple votre serveur HTTP Apache) avec un protocole spécifique, et effectue une requête pour une ressource en spécifiant son chemin.

    Un chemin peut représenter plusieurs types de ressources sur le serveur. Ce peut être un fichier (comme getting-started.html), un gestionnaire (comme server-status), ou toute sorte de programme (comme index.php). Nous décrirons tout ceci plus en détails ci-dessous dans la section Contenu d'un site web.

    Le serveur envoie alors une réponse comportant un code d'état, et éventuellement un corps de réponse. Le code d'état indique si la requête a été traitée avec succès, ou dans la négative quel type d'erreur a été rencontré. Le client est alors sensé savoir quoi faire de la réponse. Vous pouvez vous familiariser avec les différents codes d'état en consultant le Wiki du serveur HTTP Apache.

    Les détails de la transaction, ainsi que les erreurs rencontrées, sont enregistrés dans des fichiers journaux. Tout ceci est décrit en détails ci-dessous dans la section Débogage et fichiers journaux.

    top

    Noms d'hôte et DNS

    Pour se connecter à un serveur, le client doit tout d'abord résoudre le nom du serveur en adresse IP, cette dernière permettant de localiser le serveur sur Internet. Ainsi, pour que votre serveur web soit accessible, son nom doit être enregistré dans le DNS.

    Si vous ne savez pas comment effectuer cet enregistrement, vous devrez contacter votre administrateur réseau ou votre fournisseur d'accès à Internet afin qu'il effectue cette opération pour vous.

    Plusieurs noms d'hôte peuvent pointer vers la même adresse IP, et plusieurs adresses IP peuvent être attachées au même serveur physique. Vous pouvez ainsi héberger plusieurs serveurs web sur le même serveur physique grâce au mécanisme des serveurs virtuels.

    Pour tester un serveur non encore accessible sur Internet, vous pouvez renseigner son nom d'hôte dans votre fichier hosts afin d'effectuer une résolution de nom locale. Par exemple, pour tester le serveur web www.example.com depuis le serveur physique qui l'héberge, vous pouvez ajouter la ligne suivante au fichier hosts de ce dernier :

    127.0.0.1 www.example.com

    En général, le fichier hosts se trouve dans le répertoire /etc sur les systèmes de style Unix, ou C:\Windows\system32\drivers\etc sous Windows.

    Vous trouverez plus de détails à propos du fichier hosts à Wikipedia.org/wiki/Hosts_(file), et à propos du DNS à Wikipedia.org/wiki/Domain_Name_System.

    top

    Fichiers de configuration et directives

    La configuration du serveur HTTP Apache s'effectue via de simples fichiers textes. Ces fichiers peuvent se trouver dans de nombreux endroits différents en fonction du mode d'installation du serveur. Vous trouverez les positions courantes de ces fichiers dans le wiki httpd. Si vous installez httpd depuis le code source, le répertoire par défaut des fichiers de configuration est /usr/local/apache2/conf. Le nom du fichier de configuration par défaut est en général httpd.conf, mais peut aussi varier en fonction des distributions tierces du serveur.

    L'ensemble de la configuration est en général divisé en plusieurs fichiers afin d'en faciliter la gestion. Ces fichiers sont inclus dans le fichier de configuration principal via la directive Include. Les noms ou positions de ces fichiers ne sont pas figés et peuvent varier considérablement d'une distribution à l'autre. N'hésitez pas à les arranger et subdiviser selon vos goûts et besoins, quitte à en modifier l'organisation par défaut.

    La configuration du serveur s'effectue via des directives de configuration que l'on insère dans les fichiers de configuration. Une directive se compose d'un mot-clé suivi d'un ou plusieurs arguments qui définissent sa valeur.

    La réponse à la question "Où dois-je placer cette directive ?" dépend en général du niveau auquel cette directive doit être prise en compte. S'il s'agit du niveau global, elle doit être placée dans le fichier de configuration principal, et en dehors de toute section <Directory>, <Location>, <VirtualHost>, ou de toute autre section. Si par exemple elle ne doit s'appliquer qu'à un répertoire particulier, elle doit être placée dans la section <Directory> qui fait référence à ce répertoire. Voir la documentation sur les Sections de configuration pour plus de détails.

    En complément des fichiers de configuration principaux, certaines directives peuvent être insérées dans des fichiers .htaccess que l'on place directement dans le répertoire concerné. Les fichiers .htaccess sont essentiellement destinés aux personnes qui n'ont pas accès aux fichiers de configuration du serveur. Vous trouverez plus de détails à propos des fichiers .htaccess dans ce .htaccesshowto.

    top

    Contenu du site web

    Si le contenu du site web peut se présenter sous de nombreuses formes, il peut en général être scindé en deux formes principales : les contenus statiques et les contenus dynamiques.

    Les contenus statiques sont par exemple les fichiers HTML, les images, les fichiers CSS et tout autre fichier résidant dans le système de fichiers. La directive DocumentRoot permet de définir la position dans l'arborescence du site où vous devez placer ces fichiers. Cette directive peut être définie au niveau global, ou au niveau de chaque serveur virtuel. Vous pouvez consulter vos fichiers de configuration pour vérifier la manière dont cette directive est définie pour votre serveur.

    En général, et si aucun nom de fichier n'est spécifié dans la requête, c'est une page de nom index.html qui sera renvoyée. Par exemple, si la directive DocumentRoot est définie à /var/www/html, et si une requête est effectuée pour l'adresse http://www.example.com/work/, c'est le fichier /var/www/html/work/index.html qui sera envoyé au client par le serveur.

    Un contenu dynamique est un contenu qui est généré au moment du traitement de la requête, et qui peut différer d'une requête à l'autre. Ces contenus dynamiques peuvent être générés de nombreuses manières par l'intermédiaire de gestionnaires de contenu ou "handlers". Il est aussi possible de créer des programmes CGI pour générer le contenu de votre site.

    Enfin, on peut utiliser des modules tiers comme mod_php pour écrire du code permettant d'effectuer de nombreuses choses. De nombreuses applications tierces écrites à partir de divers langages ou outils sont disponibles en téléchargement et peuvent être installées sur votre serveur HTTP Apache. Le support de ces applications dépasse le sujet de ce document, et nous vous invitons à consulter le site de leur éditeur pour accéder à leur documentation.

    top

    Fichiers journaux et résolution des problèmes

    En tant qu'administrateur d'un serveur HTTP Apache, vos sources d'informations principales sont les fichiers journaux, et en particulier le journal des erreurs. Toute tentative de résolution d'un problème sans consulter le journal des erreurs revient à conduire les yeux fermés.

    La position dans le système de fichiers du journal des erreurs est spécifiée par la directive ErrorLog qui peut être définie au niveau global, ou au niveau de chaque serveur virtuel. Chaque entrée du journal des erreurs vous informe sur la nature des problèmes et le moment de leur survenue. En outre, elle vous indique souvent comment résoudre le problème. Chaque message d'erreur contient un code d'erreur que vous pouvez utiliser pour effectuer une recherche en ligne afin d'obtenir une description plus détaillée de la manière de résoudre le problème. Vous pouvez aussi configurer votre journal des erreurs de manière à ce qu'il enregistre un identifiant d'erreur que vous pourrez ensuite utiliser pour effectuer une corrélation avec le journal des accès afin de déterminer quelle requête est à l'origine de l'erreur.

    Vous trouverez plus de détails à ce sujet dans la Documentation sur la journalisation.

    top

    Et maintenant, quelle est la suite des opérations ?

    La question des prérequis étant réglée, il est temps de passer aux choses sérieuses.

    Ce document ne couvre que les notions de base. Nous espérons qu'il vous permettra de mettre le pied à l'étrier, mais il y a encore de nombreuses choses que vous devez savoir.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/misc/0002755000000000000500000000000013523273357014410 5ustar rootsrchttpd-2.4.41/docs/manual/misc/index.html.fr.utf80000644000000000000500000001257113412755316017701 0ustar rootsrc Documentations diverses sur Apache - Serveur HTTP Apache Version 2.4
    <-

    Documentations diverses sur Apache

    Langues Disponibles:  en  |  es  |  fr  |  ko  |  tr  |  zh-cn 

    Vous trouverez plus loin une liste de pages de documentation additionnelles concernant le projet de développement du serveur web Apache.

    Avertissement

    La mise à jour des documents ci-dessous permettant de prendre en compte les modifications apportées par la version 2.1 du serveur HTTP Apache n'a pas été entièrement menée à bien. Certaines informations sont probablement encore pertinentes, mais utilisez-les tout de même avec précautions.

    Notes à propos des performances - Réglages fins d'Apache

    Notes à propos de la configuration d'Apache pour de plus hautes performances (à l'exécution et à la compilation). Notes expliquant pourquoi Apache accomplit certaines choses et n'en accomplit pas certaines autres (les premières l'accélérant et les deuxièmes le ralentissant).

    Conseils concernant la sécurité

    Quelques conseils de type "faites" ou "ne faites pas" pour que votre site web Apache reste sécurisé.

    Standards concernés

    Ce document constitue une page de référence pour la plupart des standards concernés par Apache.

    Formats de chiffrement des mots de passe

    Discussion à propos des divers algorithmes de chiffrement supportés par Apache à des fins d'authentification.

    Langues Disponibles:  en  |  es  |  fr  |  ko  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/misc/perf-tuning.html0000644000000000000500000000062313362070302017515 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: perf-tuning.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: perf-tuning.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: perf-tuning.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: perf-tuning.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/misc/security_tips.html.tr.utf80000644000000000000500000007234113447004010021501 0ustar rootsrc Güvenlik İpuçları - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Güvenlik İpuçları

    Mevcut Diller:  en  |  fr  |  ko  |  tr 

    Bir HTTP Sunucusunu ayarlarken dikkat edilmesi gerekenler ve bazı ipuçları. Öneriler kısmen Apache’ye özel kısmen de genel olacaktır.

    top

    Güncel Tutma

    Apache HTTP Sunucusu iyi bir güvenlik sicilinin yanında güvenlik konularıyla oldukça ilgili bir geliştirici topluluğuna sahiptir. Fakat, bir yazılımın dağıtılmasının ardından küçük ya da büyük bazı sorunların keşfedilmesi kaçınılmazdır. Bu sebeple, yazılım güncellemelerinden haberdar olmak oldukça önem kazanır. HTTP sunucunuzu doğrudan Apache’den temin ediyorsanız yeni sürümler ve güvenlik güncellemeleri ile ilgili bilgileri tam zamanında alabilmek için Apache HTTP Sunucusu Duyuru Listesine mutlaka üye olmanızı öneririz. Apache yazılımının üçüncü parti dağıtımlarını yapanların da buna benzer hizmetleri vardır.

    Şüphesiz, bir HTTP sunucusu, sunucu kodunda bir sorun olmasa da tehlike altındadır. Eklenti kodları, CGI betikleri hatta işletim sisteminden kaynaklanan sorunlar nedeniyle bu ortaya çıkabilir. Bu bakımdan, sisteminizdeki tüm yazılımların sorunları ve güncellemeleri hakkında bilgi sahibi olmalısınız.

    top

    Hizmet Reddi (DoS) Saldırıları

    Tüm ağ sunucuları, istemcilerin sistem kaynaklarından yararlanmalarını engellemeye çalışan hizmet reddi saldırılarına (HRS) maruz kalabilir. Bu tür saldırıları tamamen engellemek mümkün değildir, fakat yarattıkları sorunları azaltmak için bazı şeyler yapabilirsiniz.

    Çoğunlukla en etkili anti-HRS aracı bir güvenlik duvarı veya başka bir işletim sistemi yapılandırmasıdır. Örneğin, çoğu güvenlik duvarı herhangi bir IP adresinden aynı anda yapılan bağlantıların sayısına bir sınırlama getirmek üzere yapılandırılabilir. Böylece basit saldırılar engellenebilir. Ancak bunun dağıtık hizmet reddi saldırılarına (DHRS) karşı bir etkisi olmaz.

    Bunların yanında Apache HTTP Sunucusunun da sorunları azaltıcı tedbirler alınmasını sağlayacak bazı yapılandırmaları vardır:

    • RequestReadTimeout yönergesi bir istemcinin isteÄŸi göndermek için harcadığı zamanı sınırlamayı saÄŸlar.
    • HRS’ye maruz kalması olası sitelerde TimeOut yönergesinin deÄŸeri düşürülmelidir. Birkaç saniye gibi mümkün olduÄŸunca düşük bir ayar uygun olabilir. Ancak TimeOut baÅŸka iÅŸlemlerde de kullanıldığından çok düşük deÄŸerler, örneÄŸin, uzun süre çalışan CGI betiklerinde sorunlar çıkmasına sebep olabilir.
    • HRS’ye maruz kalması olası sitelerde KeepAliveTimeout yönergesinin deÄŸeri de düşürülebilir. Hatta bazı siteler baÅŸarımı arttırmak amacıyla KeepAlive yönergesi üzerinden kalıcı baÄŸlantıları tamamen kapatabilirler.
    • Zaman aşımıyla ilgili yönergeler bakımından diÄŸer modüller de araÅŸtırılmalıdır.
    • LimitRequestBody, LimitRequestFields, LimitRequestFieldSize, LimitRequestLine ve LimitXMLRequestBody yönergeleri, istemci girdileri ile tetiklenen özkaynak tüketimini sınırlamak için yapılandırılırken dikkatli olunmalıdır.
    • İşletim sisteminiz desteklediÄŸi takdirde, iÅŸletim sisteminin isteÄŸi iÅŸleyen kısmını yüksüz bırakmak için AcceptFilter yönergesinin etkin olmasını saÄŸlamalısınız. Bu, Apache HTTP Sunucusunda zaten öntanımlı olarak etkindir. Yapacağınız ÅŸey iÅŸletim sistemi çekirdeÄŸini buna göre yapılandırmak olacaktır.
    • Sunucu tarafından özkaynakları tüketmeden aynı anda iÅŸlenebilecek baÄŸlantıların sayısını sınırlamak için MaxRequestWorkers yönergesini kullanın. Ayrıca, baÅŸarım arttırma belgesine de bakabilirsiniz.
    • HRS’lerin etkilerini azaltmak için aynı andaki baÄŸlantı sayısını arttırabilecek evreli MPM’lerden birini kullanmak iyi olabilir. Dahası, event MPM’i her baÄŸlantıya yeni bir evre atanmaması için eÅŸzamansız iÅŸlem yapar. OpenSSL kütüphanesinin doÄŸası nedeniyle event MPM’i mod_ssl ve diÄŸer girdi süzgeçleri ile henüz uyumlu deÄŸildir. Bu durumlarda, worker MPM'inin davranışına geri döner.
    • http://modules.apache.org/ adresinde, belli istemci davranışlarını sınırlayacak ve HRS ile ilgili sorunları azaltmaya yardımcı olacak üçüncü parti modüller bulunabilir.
    top

    ServerRoot Dizinlerinin İzinleri

    Normalde, Apache root kullanıcı tarafından başlatılır ve hizmetleri sunarken User yönergesi tarafından tanımlanan kullanıcının aidiyetinde çalışır. Root tarafından çalıştırılan komutlarda olduğu gibi, root olmayan kullanıcıların yapacakları değişikliklerden korunmak konusunda da dikkatli olmalısınız. Dosyaların sadece root tarafından yazılabilir olmasını sağlamak yeterli değildir, bu dizinler ve üst dizinler için de yapılmalıdır. Örneğin, sunucu kök dizininin /usr/local/apache olmasına karar verdiyseniz, bu dizini root olarak şöyle oluşturmanız önerilir:

    mkdir /usr/local/apache
    cd /usr/local/apache
    mkdir bin conf logs
    chown 0 . bin conf logs
    chgrp 0 . bin conf logs
    chmod 755 . bin conf logs

    /, /usr, /usr/local dizinlerinde sadece root tarafından değişiklik yapılabileceği kabul edilir. httpd çalıştırılabilirini kurarken de benzer bir önlemin alındığından emin olmalısınız:

    cp httpd /usr/local/apache/bin
    chown 0 /usr/local/apache/bin/httpd
    chgrp 0 /usr/local/apache/bin/httpd
    chmod 511 /usr/local/apache/bin/httpd

    Diğer kullanıcıların değişiklik yapabileceği bir dizin olarak bir htdocs dizini oluşturabilirsiniz. Bu dizine root tarafından çalıştırılabilecek dosyalar konulmamalı ve burada root tarafından hiçbir dosya oluşturulmamalıdır.

    Diğer kullanıcılara root tarafından yazılabilen ve çalıştırılabilen dosyalarda değişiklik yapma hakkını tanırsanız, onlara root kullanıcısını ele geçirilebilme hakkını da tanımış olursunuz. Örneğin, biri httpd çalıştırılabilirini zararlı bir programla değiştirebilir ve o programı tekrar çalıştırdığınız sırada program yapacağını yapmış olur. Günlükleri kaydettiğiniz dizin herkes tarafından yazılabilen bir dizin olduğu takdirde, birileri bir günlük dosyasını bir sistem dosyasına sembolik bağ haline getirerek root kullanıcısının bu dosyaya ilgisiz şeyler yazmasına sebep olabilir. Günlüklerin dosyaları herkes tarafından yazılabilir olduğu takdirde ise birileri dosyaya yanıltıcı veriler girebilir.

    top

    Sunucu Taraflı İçerik Yerleştirme

    SSI sayfaları bir sunucu yöneticisi açısından çeşitli olası risklere kaynaklık edebilir.

    İlk risk, sunucu yükündeki artış olasılığıdır. Tüm SSI sayfaları, SSI kodu içersin içermesin Apache tarafından çözümlenir. Bu küçük bir artış gibi görünürse de bir paylaşımlı sunucu ortamında önemli bir yük haline gelebilir.

    SSI sayfaları, CGI betikleriyle ilgili riskleri de taşır. exec cmd elemanı kullanılarak bir SSI sayfasından herhangi bir CGI betiğini veya bir sistem programını Apache’nin aidiyetinde olduğu kullanıcının yetkisiyle çalıştırmak mümkündür.

    SSI sayfalarının yararlı özelliklerinden yararlanırken güvenliğini de arttırmanın bazı yolları vardır.

    Sunucu yöneticisi, bir başıbozuk SSI sayfasının sebep olabileceği zararları bertaraf etmek için CGI Genelinde bölümünde açıklandığı gibi suexec’i etkin kılabilir.

    SSI sayfalarını .html veya .htm uzantılarıyla etkinleştirmek tehlikeli olabilir. Bu özellikle paylaşımlı ve yüksek trafikli bir sunucu ortamında önemlidir. SSI sayfalarını normal sayfalardan farklı olarak .shtml gibi bildik bir uzantıyla etkinleştirmek gerekir. Bu, sunucu yükünü asgari düzeyde tutmaya ve risk yönetimini kolaylaştırmaya yarar.

    Diğer bir çözüm de SSI sayfalarından betik ve program çalıştırmayı iptal etmektir. Bu, Options yönergesine değer olarak Includes yerine IncludesNOEXEC vererek sağlanır. Ancak, eğer betiklerin bulunduğu dizinde ScriptAlias yönergesiyle CGI betiklerinin çalışması mümkün kılınmışsa, kullanıcıların <--#include virtual="..." --> ile bu betikleri çalıştırabileceklerine dikkat ediniz.

    top

    CGI Genelinde

    Herşeyden önce ya CGI betiğini/programını yazanlara ya da kendinizin CGI'deki güvenlik açıklarını (ister kasıtlı olsun ister tesadüfi) yakalama becerinize güvenmek zorundasınız. CGI betikleri esasen sisteminizdeki komutları site kullanıcılarının izinleriyle çalıştırırlar. Bu bakımdan dikkatle denenmedikleri takdirde oldukça tehlikeli olabilirler.

    CGI betiklerinin hepsi aynı kullanıcının aidiyetinde çalışırsa diğer betiklerle aralarında çelişkilerin ortaya çıkması ister istemez kaçınılmazdır. Örneğin A kullanıcısının B kullanıcısına garezi varsa bir betik yazıp B’nin CGI veritabanını silebilir. Bu gibi durumların ortaya çıkmaması için betiklerin farklı kullanıcıların aidiyetlerinde çalışmasını sağlayan ve 1.2 sürümünden beri Apache ile dağıtılan suEXEC diye bir program vardır. Başka bir yol da CGIWrap kullanmaktır.

    top

    ScriptAlias’sız CGI

    Kullanıcıların sitenin her yerinde CGI betiklerini çalıştırmalarına izin vermek ancak şu koşullarda mümkün olabilir:

    • Kullanıcılarınızın kasıtlı ya da kasıtsız sistemi saldırıya açık hale getirecek betikler yazmayacaklarına tam güveniniz vardır.
    • Sitenizin güvenliÄŸi zaten o kadar kötüdür ki, bir delik daha açılmasının mahzuru yoktur.
    • Sitenizin sizden baÅŸka kullanıcısı yoktur ve sunucunuzu sizden baÅŸka hiç kimsenin ziyaret etmesi mümkün deÄŸildir.
    top

    ScriptAlias’lı CGI

    CGI’yi belli dizinlerle sınırlamak yöneticiye bu dizinlerde daha iyi denetim imkanı sağlar. Bu kaçınılmaz olarak ScriptAlias’sız CGI’den çok daha güvenlidir, ancak bu dizinlere yazma hakkı olan kullanıcılarınız güvenilir kişiler olması ve site yöneticisinin de olası güvenlik açıklarına karşı CGI betiklerini ve programlarını denemeye istekli olması şartıyla.

    Çoğu site yöneticisi ScriptAlias’sız CGI yerine bu yaklaşımı seçer.

    top

    Devingen içerikli kaynaklar

    Sunucunun bir parçası gibi çalışan, mod_php, mod_perl, mod_tcl ve mod_python gibi gömülü betik çalıştırma seçenekleri sunucuyu çalıştıran kullanıcının aidiyetinde çalışırlar (User yönergesine bakınız). Bu bakımdan bu betik yorumlayıcılar tarafından çalıştırılan betikler, sunucu kullanıcısının eriştiği herşeye erişebilirler. Bazı betik yorumlayıcıların getirdiği bazı sınırlamalar varsa da bunlara pek güvenmemek, gerekli sınamaları yine de yapmak gerekir.

    top

    Devingen içeriğin güvenliği

    mod_php, mod_perl veya mod_python gibi devingen içeriği yapılandırırken güvenlikle ilgili değerlendirmelerin çoğu httpd'nin kapsamından çıkar ve bu modüllerin belgelerini incelemek ihtiyacı duyarsınız. Örneğin, PHP çoğu zaman kapalı tutulan Güvenli Kip ayarını etkin kılmanızı önerir. Daha fazla güvenlik için bir diğer örnek bir PHP eklentisi olan Suhosin'dir. Bunlar hakkında daha ayrıntılı bilgi için her projenin kendi belgelerine başvurun.

    Apache seviyesinde, mod_security adı verilen modülü bir HTTP güvenlik duvarı gibi ele alabilir, devingen içeriğin güvenliğini arttırmanıza yardımcı olmak üzere inceden inceye yapılandırabilirsiniz.

    top

    Sistem Ayarlarının Korunması

    Güvenliği gerçekten sıkı tutmak istiyorsanız, kullanıcılarınızın yapılandırmanızdaki güvenlik ayarlarını geçersiz kılmak için .htaccess dosyalarını kullanabilmelerinin de önüne geçmelisiniz. Bunu yapmanın tek bir yolu vardır.

    Sunucu yapılandırma dosyanıza şunu yerleştirin:

    <Directory "/">
        AllowOverride None
    </Directory>

    Böylece, belli dizinlerde özellikle etkinleştirilmedikçe bütün dizinlerde .htaccess dosyalarının kullanımını engellemiş olursunuz.

    Bu ayar Apache 2.3.9 itibariyle öntanımlıdır.

    top

    Sunucu dosyalarının öntanımlı olarak korunması

    Apache’nin ister istemez yanlış anlaşılan yönlerinden biri öntanımlı erişim özelliğidir. Yani siz aksine bir şeyler yapmadıkça, sunucu normal URL eşleme kurallarını kullanarak bir dosyayı bulabildiği sürece onu istemciye sunacaktır.

    Örneğin, aşağıdaki durumu ele alalım:

    # cd /; ln -s / public_html

    Ve, tarayıcınıza http://localhost/~root/ yazın.

    Böylece, istemcilerin tüm dosya sisteminizi gezmelerine izin vermiş olursunuz. Bu işlemin sonuçlarının önünü almak için sunucu yapılandırma dosyanıza şunları yazın:

    <Directory "/">
        Require all denied
    </Directory>

    Bu suretle, dosya sisteminize öntanımlı erişimi yasaklamış olursunuz. Erişime izin vermek istediğiniz dizinler için uygun Directory bölümleri eklemeniz yeterli olacaktır. Örnek:

    <Directory "/usr/users/*/public_html">
        Require all granted
    </Directory>
    <Directory "/usr/local/httpd">
        Require all granted
    </Directory>

    Location ve Directory yönergelerinin etkileşimine de özellikle önem vermelisiniz; örneğin <Directory "/"> erişimi yasaklarken bir <Location "/"> yönergesi bunu ortadan kaldırabilir.

    UserDir yönergesi de size buna benzer bir oyun oynayabilir; yönergeye ./ atamasını yaparsanız, root kullanıcısı söz konusu olduğunda yukarıda ilk örnekteki durumla karşılaşırız. Sunucu yapılandırma dosyanızda aşağıdaki satırın mutlaka bulunmasını öneririz:

    UserDir disabled root
    top

    Günlüklerin İzlenmesi

    Sunucunuzda olup biteni günü gününe bilmek istiyorsanız günlük dosyalarına bakmalısınız. Günlük dosyaları sadece olup biteni raporlamakla kalmaz, sunucunuza ne tür saldırılar yapıldığını ve güvenlik seviyenizin yeterli olup olmadığını anlamanızı da sağlarlar.

    Bazı örnekler:

    grep -c "/jsp/source.jsp?/jsp/ /jsp/source.jsp??" access_log
    grep "client denied" error_log | tail -n 10

    İlk örnek, Apache Tomcat Source.JSP Bozuk İstek Bilgilerini İfşa Açığını istismar etmeyi deneyen saldırıların sayısını verirken ikinci örnek, reddedilen son on istemciyi listeler; örnek:

    [Thu Jul 11 17:18:39 2002] [error] [client foo.example.com] client denied by server configuration: /usr/local/apache/htdocs/.htpasswd

    Gördüğünüz gibi günlük dosyaları sadece ne olup bittiğini raporlar, bu bakımdan eğer istemci .htpasswd dosyasına erişebiliyorsa erişim günlüğünüzde şuna benzer bir kayıt görürsünüz:

    foo.example.com - - [12/Jul/2002:01:59:13 +0200] "GET /.htpasswd HTTP/1.1"

    Bu, sunucu yapılandırma dosyanızda aşağıdaki yapılandırmayı iptal ettiğiniz anlamına gelir:

    <Files ".ht*">
        Require all denied
    </Files>
    top

    Yapılandırma bölümlerinin birleştirilmesi

    Yapılandırma bölümlerinin birleştirilmesi karmaşık bir işlem olup bazı durumlarda yönergelere bağlıdır. Yönergeleri bir araya getirirken aralarındaki bağımlılıkları daima sınayın.

    mod_access_compat gibi henüz yönerge katıştırma mantığını gerçeklememiş modüller için sonraki bölümlerdeki davranış, bu modüllerin yönergelerini içerip içermemesine bağlıdır. Yapılandırmada yönergelerin yerleri değiştirildiğinde fakat bir katıştırma yapılmadığında, yapılandırma bir değişiklik yapılana kadar miras alınır.

    Mevcut Diller:  en  |  fr  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/misc/index.html.en0000644000000000000500000001205613412755316017005 0ustar rootsrc Apache Miscellaneous Documentation - Apache HTTP Server Version 2.4
    <-

    Apache Miscellaneous Documentation

    Available Languages:  en  |  es  |  fr  |  ko  |  tr  |  zh-cn 

    Below is a list of additional documentation pages that apply to the Apache web server development project.

    Warning

    The documents below have not been fully updated to take into account changes made in the 2.1 version of the Apache HTTP Server. Some of the information may still be relevant, but please use it with care.

    Performance Notes - Apache Tuning

    Notes about how to (run-time and compile-time) configure Apache for highest performance. Notes explaining why Apache does some things, and why it doesn't do other things (which make it slower/faster).

    Security Tips

    Some "do"s - and "don't"s - for keeping your Apache web site secure.

    Relevant Standards

    This document acts as a reference page for most of the relevant standards that Apache follows.

    Password Encryption Formats

    Discussion of the various ciphers supported by Apache for authentication purposes.

    Available Languages:  en  |  es  |  fr  |  ko  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/misc/security_tips.html.fr.utf80000644000000000000500000007151213412755316021500 0ustar rootsrc Conseils sur la sécurité - Serveur HTTP Apache Version 2.4
    <-

    Conseils sur la sécurité

    Langues Disponibles:  en  |  fr  |  ko  |  tr 

    Ce document propose quelques conseils et astuces concernant les problèmes de sécurité liés à l'installation d'un serveur web. Certaines suggestions seront à caractère général, tandis que d'autres seront spécifiques à Apache.

    top

    Maintenez votre serveur à jour

    Le serveur HTTP Apache a une bonne réputation en matière de sécurité et possède une communauté de développeurs très sensibilisés aux problèmes de sécurité. Mais il est inévitable de trouver certains problèmes -- petits ou grands -- une fois le logiciel mis à disposition. C'est pour cette raison qu'il est crucial de se tenir informé des mises à jour. Si vous avez obtenu votre version du serveur HTTP directement depuis Apache, nous vous conseillons grandement de vous abonner à la Liste de diffusion des annonces du serveur HTTP qui vous informera de la parution des nouvelles versions et des mises à jour de sécurité. La plupart des distributeurs tiers d'Apache fournissent des services similaires.

    Gardez cependant à l'esprit que lorsqu'un serveur web est compromis, le code du serveur HTTP n'est la plupart du temps pas en cause. Les problèmes proviennent plutôt de code ajouté, de scripts CGI, ou du système d'exploitation sous-jacent. Vous devez donc vous tenir informé des problèmes et mises à jour concernant tous les logiciels présents sur votre système.

    top

    Attaques de type "Déni de service" (Denial of Service - DoS)

    Tous les services réseau peuvent faire l'objet d'attaques de type "Déni de service" qui tentent de les empêcher de répondre aux clients en saturant leurs ressources. Il est impossible de se prémunir totalement contre ce type d'attaques, mais vous pouvez accomplir certaines actions afin de minimiser les problèmes qu'elles créent.

    Souvent, l'outil anti-DoS le plus efficace sera constitué par le pare-feu ou certaines configurations du système d'exploitation. Par exemple, la plupart des pare-feu peuvent être configurés de façon à limiter le nombre de connexions simultanées depuis une adresse IP ou un réseau, ce qui permet de prévenir toute une gamme d'attaques simples. Bien sûr, ceci n'est d'aucun secours contre les attaques de type "Déni de service" distribuées (DDoS).

    Certains réglages de la configuration d'Apache peuvent aussi minimiser les problèmes :

    • La directive RequestReadTimeout permet de limiter le temps que met le client pour envoyer sa requête.
    • La valeur de la directive TimeOut doit être diminuée sur les sites sujets aux attaques DoS. Une valeur de quelques secondes devrait convenir. Cependant, comme TimeOut est actuellement concerné par de nombreuses opérations différentes, lui attribuer une valeur trop faible peut provoquer des problèmes avec les scripts CGI qui présentent un long temps de réponse.
    • La valeur de la directive KeepAliveTimeout doit aussi être diminuée sur les sites sujets aux attaques DoS. Certains sites désactivent même complètement le "maintien en vie" (keepalives) à l'aide de la directive KeepAlive, ce qui bien sûr présente des inconvénients en matière de performances.
    • Les valeurs des différentes directives fournies par d'autres modules et en rapport avec des délais doivent aussi être vérifiées.
    • Les directives LimitRequestBody, LimitRequestFields, LimitRequestFieldSize, LimitRequestLine, et LimitXMLRequestBody doivent être configurées avec prudence afin de limiter la consommation de ressources induite par les demandes des clients.
    • Sur les systèmes d'exploitation qui le supportent, assurez-vous que la directive AcceptFilter est activée afin de déléguer une partie du traitement des requêtes au système d'exploitation. Elle est activée par défaut dans le démon httpd d'Apache, mais peut nécessiter une reconfiguration de votre noyau.
    • Optimisez la directive MaxRequestWorkers de façon à définir le nombre maximum de connexions simultanées au dessus duquel les ressources s'épuisent. Voir aussi la documentation sur l'optimisation des performances.
    • L'utilisation d'un module mpm threadé vous permet de traiter d'avantage de connexions simultanées, ce qui minimise l'effet des attaques DoS. Dans le futur, le module mpm event utilisera un traitement asynchrone afin de ne pas dédier un thread à chaque connexion. De par la nature de la bibliothèque OpenSSL, le module mpm event est actuellement incompatible avec le module mod_ssl ainsi que d'autres filtres en entrée. Dans ces cas, son comportement se ramène à celui du module mpm worker.
    • Il existe de nombreux modules tiers disponibles à http://modules.apache.org/ qui peuvent retreindre les comportements de certains clients et ainsi minimiser les problèmes de DoS.
    top

    Permissions sur les répertoires de la racine du serveur

    Typiquement, Apache est démarré par l'utilisateur root, puis il devient la propriété de l'utilisateur défini par la directive User afin de répondre aux demandes. Comme pour toutes les commandes exécutées par root, vous devez vous assurer qu'elle n'est pas modifiable par les utilisateurs autres que root. Les fichiers eux-mêmes, mais aussi les répertoires ainsi que leurs parents ne doivent être modifiables que par root. Par exemple, si vous avez choisi de placer la racine du serveur dans /usr/local/apache, il est conseillé de créer le répertoire en tant que root, avec des commandes du style :

    mkdir /usr/local/apache
    cd /usr/local/apache
    mkdir bin conf logs
    chown 0 . bin conf logs
    chgrp 0 . bin conf logs
    chmod 755 . bin conf logs

    Nous supposerons que /, /usr et /usr/local ne sont modifiables que par root. Quand vous installez l'exécutable httpd, vous devez vous assurer qu'il possède des protections similaires :

    cp httpd /usr/local/apache/bin
    chown 0 /usr/local/apache/bin/httpd
    chgrp 0 /usr/local/apache/bin/httpd
    chmod 511 /usr/local/apache/bin/httpd

    Vous pouvez créer un sous-répertoire htdocs modifiable par d'autres utilisateurs -- car root ne crée ni exécute aucun fichier dans ce sous-répertoire.

    Si vous permettez à des utilisateurs non root de modifier des fichiers que root écrit ou exécute, vous exposez votre système à une compromission de l'utilisateur root. Par exemple, quelqu'un pourrait remplacer le binaire httpd de façon à ce que la prochaine fois que vous le redémarrerez, il exécutera un code arbitraire. Si le répertoire des journaux a les droits en écriture (pour un utilisateur non root), quelqu'un pourrait remplacer un fichier journal par un lien symbolique vers un autre fichier système, et root pourrait alors écraser ce fichier avec des données arbitraires. Si les fichiers journaux eux-mêmes ont des droits en écriture (pour un utilisateur non root), quelqu'un pourrait modifier les journaux eux-mêmes avec des données fausses.

    top

    Inclusions côté serveur

    Les inclusions côté serveur (Server Side Includes - SSI) exposent l'administrateur du serveur à de nombreux risques potentiels en matière de sécurité.

    Le premier risque est l'augmentation de la charge du serveur. Tous les fichiers où SSI est activé doivent être analysés par Apache, qu'ils contiennent des directives SSI ou non. L'augmentation de la charge induite est minime, mais peut devenir significative dans le contexte d'un serveur partagé.

    Les fichiers SSI présentent les mêmes risques que les scripts CGI en général. Les fichiers où SSI est activé peuvent exécuter tout script CGI ou autre programme à l'aide de la commande "exec cmd" avec les permissions des utilisateur et groupe sous lesquels Apache s'exécute, comme défini dans httpd.conf.

    Des méthodes existent pour améliorer la sécurité des fichiers SSI, tout en tirant parti des bénéfices qu'ils apportent.

    Pour limiter les dommages qu'un fichier SSI agressif pourrait causer, l'administrateur du serveur peut activersuexec comme décrit dans la section Les CGI en général.

    L'activation des SSI pour des fichiers possédant des extensions .html ou .htm peut s'avérer dangereux. Ceci est particulièrement vrai dans un environnement de serveur partagé ou étant le siège d'un traffic élevé. Les fichiers où SSI est activé doivent posséder une extension spécifique, telle que la conventionnelle .shtml. Ceci permet de limiter la charge du serveur à un niveau minimum et de simplifier la gestion des risques.

    Une autre solution consiste à interdire l'exécution de scripts et programmes à partir de pages SSI. Pour ce faire, remplacez Includes par IncludesNOEXEC dans la directive Options. Notez que les utilisateurs pourront encore utiliser <--#include virtual="..." --> pour exécuter des scripts CGI si ces scripts sont situés dans des répertoires spécifiés par une directive ScriptAlias.

    top

    Les CGI en général

    Tout d'abord, vous devez toujours garder à l'esprit que vous devez faire confiance aux développeurs de scripts ou programmes CGI ainsi qu'à vos compétences pour déceler les trous de sécurité potentiels dans les CGI, que ceux-ci soient délibérés ou accidentels. Les scripts CGI peuvent essentiellement exécuter des commandes arbitraires sur votre système avec les droits de l'utilisateur du serveur web, et peuvent par conséquent être extrèmement dangereux s'ils ne sont pas vérifiés avec soin.

    Tous les scripts CGI s'exécutent sous le même utilisateur, il peuvent donc entrer en conflit (accidentellement ou délibérément) avec d'autres scripts. Par exemple, l'utilisateur A hait l'utilisateur B, il écrit donc un script qui efface la base de données CGI de l'utilisateur B. Vous pouvez utiliser le programme suEXEC pour faire en sorte que les scripts s'exécutent sous des utilisateurs différents. Ce programme est inclus dans la distribution d'Apache depuis la version 1.2 et est appelé à partir de certaines portions de code du serveur Apache. Une autre méthode plus connue est l'utilisation de CGIWrap.

    top

    CGI sans alias de script

    Vous ne devez permettre aux utilisateurs d'exécuter des scripts CGI depuis n'importe quel répertoire que dans l'éventualité où :

    • Vous faites confiance à vos utilisateurs pour ne pas écrire de scripts qui vont délibérément ou accidentellement exposer votre système à une attaque.
    • Vous estimez que le niveau de sécurité dans les autres parties de votre site est si faible qu'un trou de sécurité de plus ou de moins n'est pas très important.
    • Votre système ne comporte aucun utilisateur, et personne ne visite jamais votre site.
    top

    CGI avec alias de script

    Le confinement des CGI dans des répertoires spécifiques permet à l'administrateur de contrôler ce que l'on met dans ces répertoires. Ceci est bien entendu mieux sécurisé que les CGI sans alias de script, mais seulement à condition que les utilisateurs avec les droits en écriture sur les répertoires soient dignes de confiance, et que l'administrateur ait la volonté de tester chaque programme ou script CGI à la recherche d'éventuels trous de sécurité.

    La plupart des sites choisissent cette approche au détriment des CGI sans alias de script.

    top

    Autres sources de contenu dynamique

    Les options de scripting intégrées qui s'exécutent en tant que partie du serveur lui-même, comme mod_php, mod_perl, mod_tcl, et mod_python, s'exécutent sous le même utilisateur que le serveur (voir la directive User), et par conséquent, les scripts que ces moteurs exécutent peuvent accéder aux mêmes ressources que le serveur. Certains moteurs de scripting peuvent proposer des restrictions, mais pour plus de sûreté, il vaut mieux partir du principe que ce n'est pas le cas.

    top

    Protection de la configuration du système

    Pour contrôler étroitement votre serveur, vous pouvez interdire l'utilisation des fichiers .htaccess qui permettent de passer outre les fonctionnalités de sécurité que vous avez configurées. Voici un moyen pour y parvenir :

    Ajoutez dans le fichier de configuration du serveur

    <Directory "/">
        AllowOverride None
    </Directory>

    Ceci interdit l'utilisation des fichiers .htaccess dans tous les répertoires, sauf ceux pour lesquels c'est explicitement autorisé.

    Notez que c'est la configuration par défaut depuis Apache 2.3.9.

    top

    Protection par défaut des fichiers du serveur

    Le concept d'accès par défaut est un aspect d'Apache qui est parfois mal compris. C'est à dire que, à moins que vous ne changiez explicitement ce comportement, si le serveur trouve son chemin vers un fichier en suivant les règles normales de correspondance URL - fichier, il peut le retourner aux clients.

    Considérons l'exemple suivant :

    # cd /; ln -s / public_html
    puis accès à http://localhost/~root/

    Ceci permettrait aux clients de parcourir l'ensemble du système de fichiers. Pour l'éviter, ajoutez le bloc suivant à la configuration de votre serveur :

    <Directory "/">
        Require all denied
    </Directory>

    ceci va interdire l'accès par défaut à tous les fichiers du système de fichiers. Vous devrez ensuite ajouter les blocs Directory appropriés correspondant aux répertoires auxquels vous voulez autorisez l'accès. Par exemple,

    <Directory "/usr/users/*/public_html">
        Require all granted
    </Directory>
    <Directory "/usr/local/httpd">
        Require all granted
    </Directory>

    Portez une attention particulière aux interactions entre les directives Location et Directory ; par exemple, si une directive <Directory ""/> interdit un accès, une directive <Location "/"> pourra passer outre.

    De même, soyez méfiant en jouant avec la directive UserDir ; la positionner à "./" aurait le même effet, pour root, que le premier exemple plus haut. Nous vous conseillons fortement d'inclure la ligne suivante dans le fichier de configuration de votre serveur :

    UserDir disabled root
    top

    Surveillez vos journaux

    Pour vous tenir informé de ce qui se passe réellement dans votre serveur, vous devez consulter vos fichiers journaux. Même si les fichiers journaux ne consignent que des évènements qui se sont déjà produits, ils vous informeront sur la nature des attaques qui sont lancées contre le serveur et vous permettront de vérifier si le niveau de sécurité nécessaire est atteint.

    Quelques exemples :

    grep -c "/jsp/source.jsp?/jsp/ /jsp/source.jsp??" access_log
    grep "client denied" error_log | tail -n 10

    Le premier exemple listera les attaques essayant d'exploiter la vulnérabilité d'Apache Tomcat pouvant provoquer la divulgation d'informations par des requêtes Source.JSP mal formées, le second donnera la liste des dix dernières interdictions client ; par exemple :

    [Thu Jul 11 17:18:39 2002] [error] [client foo.example.com] client denied by server configuration: /usr/local/apache/htdocs/.htpasswd

    Comme vous le voyez, les fichiers journaux ne consignent que ce qui s'est déjà produit ; ainsi, si le client a pu accéder au fichier .htpasswd, vous devriez avoir quelque chose du style :

    foo.example.com - - [12/Jul/2002:01:59:13 +0200] "GET /.htpasswd HTTP/1.1"

    dans votre journal des accès ; ce qui signifie que vous avez probablement mis en commentaire ce qui suit dans le fichier de configuration de votre serveur :

    <Files ".ht*">
        Require all denied
    </Files>
    top

    Fusion des sections de configuration

    La fusion des sections de configuration est complexe et dépend souvent des directives utilisées. Vous devez systématiquement tester vos modifications pour vérifier la manière dont les directives sont fusionnées.

    Concernant les modules qui n'implémentent aucune logique de fusion, comme mod_access_compat, le comportement des sections suivantes est tributaire de la présence dans ces dernières de directives appartenant à ces modules. La configuration est héritée jusqu'à ce qu'une modification soit effectuée ; à ce moment, la configuration est remplacée et non fusionnée.

    Langues Disponibles:  en  |  fr  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/misc/relevant_standards.html.ko.euc-kr0000644000000000000500000002614713412755316022763 0ustar rootsrc °ü·Ã Ç¥ÁØ - Apache HTTP Server Version 2.4
    <-

    °ü·Ã Ç¥ÁØ

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.

    ÀÌ ¹®¼­¿¡´Â °£´ÜÇÑ ¼³¸í°ú ÇÔ²² ¾ÆÆÄÄ¡ À¥¼­¹ö°¡ µû¸£´Â ¸ðµç °ü·Ã Ç¥ÁØÀ» ¿­°ÅÇÑ´Ù.

    ¾Æ·¡ Á¤º¸¿¡ ´õÇÏ¿© ´ÙÀ½ ÀÚ·áµµ »ìÆìºÁ¾ß ÇÑ´Ù:

    ÁÖÀÇ

    ÀÌ ¹®¼­´Â ¾ÆÁ÷ ¿ÏÀüÇÏÁö ¾Ê´Ù.

    top

    HTTP ±Ç°í

    ¾î¶² ¸ðµâÀ» ÄÄÆÄÀÏÇÏ°í »ç¿ëÇÏ´ÂÁö¿Í °ü°è¾øÀÌ ±âº»ÀûÀ¸·Î À¥¼­¹öÀÎ ¾ÆÆÄÄ¡´Â ´ÙÀ½ IETF ±Ç°í(recommendation)¸¦ µû¸¥´Ù:

    RFC 1945 (Informational)
    ÇÏÀÌÆÛÅØ½ºÆ® Àü¼Û ÇÁ·ÎÅäÄÝ (Hypertext Transfer Protocol, HTTP)Àº ºÐ»ê, Çùµ¿, ÇÏÀÌÆÛ¸Åü Á¤º¸ ½Ã½ºÅÛ¿¡ ÇÊ¿äÇÑ ºü¸£°í °¡º­¿î ¾îÇø®ÄÉÀÌ¼Ç ¼öÁØ(application-level) ÇÁ·ÎÅäÄÝÀÌ´Ù. ÀÌ ¹®¼­´Â HTTP/1.0À» ¼³¸íÇÑ´Ù.
    RFC 2616 (Standards Track)
    ÇÏÀÌÆÛÅØ½ºÆ® Àü¼Û ÇÁ·ÎÅäÄÝ (Hypertext Transfer Protocol, HTTP)Àº ºÐ»ê, Çùµ¿, ÇÏÀÌÆÛ¸Åü Á¤º¸ ½Ã½ºÅÛÀ» À§ÇÑ ¾îÇø®ÄÉÀÌ¼Ç ¼öÁØ ÇÁ·ÎÅäÄÝÀÌ´Ù. ÀÌ ¹®¼­´Â HTTP/1.1À» ¼³¸íÇÑ´Ù.
    RFC 2396 (Standards Track)
    Ç¥ÁØ ÀÚ¿ø ½Äº°ÀÚ (Uniform Resource Identifier, URI)´Â Ãß»óÀû ȤÀº ¹°¸®Àû ÀÚ¿øÀ» ½Äº°ÇϱâÀ§ÇÑ ÂªÀº ¹®ÀÚ¿­ÀÌ´Ù.
    top

    HTML ±Ç°í

    ÇÏÀÌÆÛÅØ½ºÆ® ¸¶Å©¾÷ ¾ð¾î (Hypertext Markup Language, HTML)¿Í °ü·ÃÇÏ¿© ¾ÆÆÄÄ¡´Â ´ÙÀ½ IETF ±Ç°í¿Í W3C ±Ç°í¸¦ µû¸¥´Ù:

    RFC 2854 (Informational)
    ÀÌ ¹®¼­´Â HTML °³¹ß°úÁ¤À» ¿ä¾àÇϰí, °ü·Ã W3C ±Ç°í¸¦ ±â¹ÝÀ¸·Î "text/html" MIME typeÀ» Á¤ÀÇÇÑ´Ù.
    HTML 4.01 ±Ô¾à (Errata)
    ÀÌ ±Ô¾àÀº ¿ùµå¿ÍÀ̵åÀ¥ÀÇ ÃâÆÇ¾ð¾îÀÎ ÇÏÀÌÆÛÅØ½ºÆ® ¸¶Å©¾÷ ¾ð¾î (Hypertext Markup Language, HTML)¸¦ Á¤ÀÇÇÑ´Ù. ÀÌ ±Ô¾àÀº HTML 4ÀÇ ÇÏÀ§¹öÀüÀÎ HTML 4.01À» Á¤ÀÇÇÑ´Ù.
    HTML 3.2 Âü°í ±Ô¾à
    ÇÏÀÌÆÛÅØ½ºÆ® ¸¶Å©¾÷ ¾ð¾î (Hypertext Markup Language, HTML)´Â Ç÷¡Æû°ú ¹«°üÇÑ ÇÏÀÌÆÛÅØ½ºÆ® ¹®¼­¸¦ À§ÇÑ °£´ÜÇÑ ¸¶Å©¾÷ ¾ð¾îÀÌ´Ù. HTML ¹®¼­´Â SGML ¹®¼­À̱⵵ ÇÏ´Ù.
    XHTML 1.1 - ¸ðµâ±â¹Ý XHTML (Á¤¿ÀÇ¥)
    ÀÌ ±Ç°í´Â Modularization of XHTML¿¡¼­ Á¤ÀÇÇÑ ¸ðµâ Ç÷¹ÀÓ¿öÅ©¿Í ¸ðµâµéÀ» ±â¹ÝÀ¸·Î »õ·Î¿î XHTML document typeÀ» Á¤ÀÇÇÑ´Ù.
    XHTML 1.0 È®Àå ÇÏÀÌÆÛÅØ½ºÆ® ¸¶Å©¾÷ ¾ð¾î (Extensible HyperText Markup Language) (Second Edition) (Á¤¿ÀÇ¥)
    ÀÌ ¹®¼­´Â HTML 4¸¦ XML 1.0À¸·Î À籸¼ºÇÑ XHTML 1.0ÀÇ µÎ¹øÂ° ¹öÀü°ú HTML 4¿¡ ÇØ´çÇÏ´Â ¼¼°¡Áö DTD¸¦ Á¤ÀÇÇÑ´Ù.
    top

    ÀÎÁõ

    ÀÎÁõ¹æ¹ý¿¡ ´ëÇØ ¾ÆÆÄÄ¡´Â ´ÙÀ½ IETF ±Ç°í¸¦ µû¸¥´Ù:

    RFC 2617 (Draft standard)
    Basic Access Authentication ±Ô¾àÀ» Æ÷ÇÔÇÑ "HTTP/1.0".
    top

    ¾ð¾î/±¹°¡ ÄÚµå

    ¾Æ·¡ ¸µÅ©¿¡ ISO¿Í ´Ù¸¥ ¾ð¾î/±¹°¡ ÄÚµå Á¤º¸°¡ ÀÖ´Ù:

    ISO 639-2
    ISO 639´Â ¾ð¾îÀÇ À̸§À» ³ªÅ¸³»´Â µÎ°¡Áö ¾ð¾î Äڵ带 Á¦°øÇÑ´Ù. Çϳª´Â (639-1) µÎ ±ÛÀÚ ÄÚµåÀÌ°í ´Ù¸¥ Çϳª´Â (ÀÌ ¹®¼­) ¼¼ ±ÛÀÚ ÄÚµåÀÌ´Ù.
    ISO 3166-1
    ÀÌ ¹®¼­´Â ISO 3166-1°ú ISO 3166-1-alpha-2 Äڵ忡 µû¶ó ¾ËÆÄºª ¼ø¼­·Î (¿µ¾î·Î ªÀº °ø½ÄÀ̸§) ±¹°¡¸íÀ» ¿­°ÅÇÑ´Ù.
    BCP 47 (Best Current Practice), RFC 3066
    ÀÌ ¹®¼­´Â Á¤º¸ °´Ã¼¿¡ »ç¿ëÇÑ ¾ð¾î¸¦ ¾Ë¸®±âÀ§ÇØ »ç¿ëÇÒ ¾ð¾î ÅÂ±×¿Í ¾ð¾î ű׿¡ »ç¿ëÇÒ °ªÀ» µî·ÏÇÏ´Â ¹æ¹ý, ¾ð¾î ű׸¦ ã´Â ¹æ½ÄÀ» ¼³¸íÇÑ´Ù.
    RFC 3282 (Standards Track)
    ÀÌ ¹®¼­´Â MIME ³»¿ë ºÎºÐ°ú À¥ ¹®¼­¿Í °°Àº RFC 822½Ä Çì´õ°¡ ÀÖ´Â Á¤º¸ÀÇ ¾ð¾î¸¦ ¾Ë¸®±âÀ§ÇÑ "Content-language:" Çì´õ¿Í, ¼±È£ÇÏ´Â ¾ð¾î¸¦ ³ªÅ¸³»´Â "Accept-Language:" Çì´õ¸¦ Á¤ÀÇÇÑ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/misc/password_encryptions.html.fr.utf80000644000000000000500000003260713412755316023073 0ustar rootsrc Formats de mots de passe - Serveur HTTP Apache Version 2.4
    <-

    Formats de mots de passe

    Langues Disponibles:  en  |  fr 

    Notes à propos des formats de chiffrement des mots de passe générés et compris par Apache.

    top

    Authentification de base

    Voici les cinq formats de mots de passe qu'Apache reconnaît pour l'authentification de base. Notez que tous les formats ne sont pas supportés par toutes les plates-formes :

    bcrypt
    "$2y$" + the result of the crypt_blowfish algorithm. Dérivé de l'algorythme de chiffrement crypt_blowfish. Voir le fichier source APR crypt_blowfish.c pour plus de détails à propos de cet algorithme.
    MD5
    "$apr1$" + le résultat d'un algorithme spécifique à Apache utilisant un condensé MD5 réitéré (1000 fois) de combinaisons variées du mot de passe et d'une source d'entropie sur 32 bits. Voir le fichier source APR apr_md5.c pour les détails de l'algorithme.
    SHA1
    "{SHA}" + un condensé SHA-1 du mot de passe codé en Base64. Non sûr.
    CRYPT
    Unix seulement. Utilise la fonction Unix traditionnelle crypt(3) avec une source d'entropie sur 32 bits (seuls 12 bits sont utilisés), et seulement les 8 premiers caractères du mot de passe. Non sûr.
    PLAIN TEXT (autrement dit non chiffré)
    Windows & Netware seulement. Non sûr.

    Générer des mots de passe avec htpasswd

    bcrypt

    $ htpasswd -nbB monNom monMot-de-passe
    monNom:$2y$05$c4WoMPo3SXsafkva.HHa6uXQZWr7oboPiC2bT/r7q1BB8I2s0BRqC

    MD5

    $ htpasswd -nbm monNom monMot-de-passe
    monNom:$apr1$r31.....$HqJZimcKQFAMYayBlzkrA/

    SHA1

    $ htpasswd -nbs monNom monMot-de-passe
    monNom:{SHA}VBPuJHI7uixaa6LQGWx4s+5GKNE=

    CRYPT

    $ htpasswd -nbd monNom monMot-de-passe
    monNom:rqXexS6ZhobKA

    Générer des mots de passe CRYPT and MD5 avec le programme OpenSSL en ligne de commande

    OpenSSL connaît l'algorithme MD5 spécifique à Apache.

    MD5

    $ openssl passwd -apr1 monMot-de-passe
    $apr1$qHDFfhPC$nITSVHgYbDAK1Y0acGRnY0

    CRYPT

    openssl passwd -crypt monMot-de-passe
    qQ5vTYO3c8dsU

    Valider des mots de passe CRYPT and MD5 avec le programme OpenSSL en ligne de commande

    La source d'entropie pour un mot de passe CRYPT est constituée des deux premiers caractères (convertis en valeur binaire). Pour valider monMot-de-passe par rapport à rqXexS6ZhobKA

    CRYPT

    $ openssl passwd -crypt -salt rq monMot-de-passe
    Warning: truncating password to 8 characters
    rqXexS6ZhobKA

    Notez que spécifier monMot-d au lieu de monMot-de-passe produira le même résultat car seuls les 8 premiers caractères des mots de passe CRYPT sont pris en compte.

    La source d'entropie pour un mot de passe MD5 se situe entre $apr1$ et le caractère $ suivant (sous la forme d'une valeur binaire codée en Base64 - au maximum 8 caractères). Pour valider monMot-de-passe par rapport à $apr1$r31.....$HqJZimcKQFAMYayBlzkrA/

    MD5

    $ openssl passwd -apr1 -salt r31..... monMot-de-passe
    $apr1$r31.....$HqJZimcKQFAMYayBlzkrA/

    Champs mot de passe de base de données pour mod_dbd

    La variante SHA1 constitue probablement le format le mieux approprié pour l'authentification DBD. Comme les fonctions SHA1 et Base64 sont en général disponibles, d'autres logiciels peuvent renseigner une base de données avec des mots de passe chiffrés utilisables par l'authentification basique d'Apache.

    Pour créer des mots de passe au format SHA1 pour l'authentification de base d'Apache dans divers langages :

    PHP

    '{SHA}' . base64_encode(sha1($password, TRUE))

    Java

    "{SHA}" + new sun.misc.BASE64Encoder().encode(java.security.MessageDigest.getInstance("SHA1").digest(password.getBytes()))

    ColdFusion

    "{SHA}" & ToBase64(BinaryDecode(Hash(password, "SHA1"), "Hex"))

    Ruby

    require 'digest/sha1'
    require 'base64'
    '{SHA}' + Base64.encode64(Digest::SHA1.digest(password))

    C ou C++

    Utilisez la fonction APR : apr_sha1_base64

    Python

    import base64
    import hashlib
    "{SHA}" + format(base64.b64encode(hashlib.sha1(password).digest()))

    PostgreSQL (avec les fonctions contrib/pgcrypto installées)

    '{SHA}'||encode(digest(password,'sha1'),'base64')

    top

    Authentification à base de condensés

    Apache ne reconnaît qu'un format pour les mots de passe d'authentification à base de condensés - le condensé MD5 de la chaîne utilisateur:domaine-de-protection:mot-de-passe sous la forme d'une chaîne de 32 caractères au format hexadécimal. domaine-de-protection est l'identifiant du domaine de protection de l'autorisation passé en argument à la directive AuthName dans httpd.conf.

    Champs de mot de passe de base de données pour mod_dbd

    Comme la fonction MD5 est en général disponible, d'autres logiciels peuvent renseigner une base de données avec des mots de passe chiffrés utilisables par l'authentification à base de condensés d'Apache.

    Pour créer des mots de passe pour l'authentification à base de condensés d'Apache dans divers langages :

    PHP

    md5($user . ':' . $realm . ':' .$password)

    Java

    byte b[] = java.security.MessageDigest.getInstance("MD5").digest( (user + ":" + realm + ":" + password ).getBytes());
    java.math.BigInteger bi = new java.math.BigInteger(1, b);
    String s = bi.toString(16);
    while (s.length() < 32)
    s = "0" + s; // La chaîne s contient le mot de passe chiffré

    ColdFusion

    LCase(Hash( (user & ":" & realm & ":" & password) , "MD5"))

    Ruby

    require 'digest/md5'
    Digest::MD5.hexdigest(user + ':' + realm + ':' + password)

    PostgreSQL (avec les fonctions contrib/pgcrypto installées)

    encode(digest( user || ':' || realm || ':' || password , 'md5'), 'hex')

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/misc/security_tips.html.ko.euc-kr0000644000000000000500000004503413412755316022002 0ustar rootsrc º¸¾È ÆÁ - Apache HTTP Server Version 2.4
    <-

    º¸¾È ÆÁ

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.

    À¥¼­¹ö¸¦ ¿î¿µÇÒ¶§ µµ¿òÀÌ µÉ º¸¾È °ü·Ã ÈùÆ®¿Í ÆÁÀÌ´Ù. ¾î¶² °ÍÀº ÀϹÝÀûÀ̰í, ¾î¶² °ÍÀº ¾ÆÆÄÄ¡¿¡¸¸ ÇØ´çÇÏ´Â °ÍÀÌ´Ù.

    top

    ÃֽůÇÀ¸·Î À¯ÁöÇϱâ

    ¾ÆÆÄÄ¡ À¥¼­¹ö´Â ¾ÈÀü°ú º¸¾È ¹®Á¦¿¡ °ü½ÉÀÌ ¸¹Àº °³¹ßÀÚ °øµ¿Ã¼·Î À¯¸íÇÏ´Ù. ±×·¯³ª Å©°Ç ÀÛ°Ç ¹ßÇ¥ÈÄ ¹ß°ßµÇ´Â ¹®Á¦µéÀ» ÇÇÇÒ ¼ö ¾ø´Ù. ±×·¡¼­ ¼ÒÇÁÆ®¿þ¾î¸¦ ÃֽŹöÀüÀ¸·Î À¯ÁöÇÏ´Â °ÍÀÌ Áß¿äÇÏ´Ù. ¾ÆÆÄÄ¡¿¡¼­ Á÷Á¢ À¥¼­¹ö¸¦ ´Ù¿î·ÎµåÇß´Ù¸é, »õ·Î¿î ¹öÀü°ú º¸¾È ¾÷µ¥ÀÌÆ®¸¦ ¾Ë·ÁÁÖ´Â ¾ÆÆÄÄ¡ À¥¼­¹ö ¹ßÇ¥ ¸ÞÀϸµ¸®½ºÆ®¸¦ ±¸µ¶ÇÏ±æ °­·ÂÈ÷ ±ÇÇÑ´Ù. ¾ÆÆÄÄ¡ ¼ÒÇÁÆ®¿þ¾î¸¦ ¹èÆ÷ÇÏ´Â ¸¹Àº Á¦»ïÀڵ鵵 ºñ½ÁÇÑ ¼­ºñ½º¸¦ Á¦°øÇÑ´Ù.

    ¹°·Ð À¥¼­¹ö Äڵ嶧¹®¿¡ À¥¼­¹ö°¡ °ø°ÝÀ» ´çÇÏ´Â °æ¿ì´Â ¸¹Áö ¾Ê´Ù. ±×º¸´Ù Ãß°¡ ÄÚµå, CGI ½ºÅ©¸³Æ®, ÇÏÀ§ ¿î¿µÃ¼Á¦ÀÇ ¹®Á¦·Î °ø°ÝÀ» ´çÇÏ´Â °æ¿ì°¡ ¸¹´Ù. ±×·¯¹Ç·Î Ç×»ó ÁÖÀÇÇÏ¸ç ½Ã½ºÅÛÀÇ ¸ðµç ¼ÒÇÁÆ®¿þ¾î¸¦ ¾÷µ¥ÀÌÆ®ÇØ¾ß ÇÑ´Ù.

    top

    ServerRoot µð·ºÅ丮 ±ÇÇÑ

    º¸Åë root »ç¿ëÀÚ°¡ ¾ÆÆÄÄ¡¸¦ ½ÃÀÛÇÑ ÈÄ, ¿äûÀ» ¼­ºñ½ºÇϱâÀ§ÇØ User Áö½Ã¾î·Î ÁöÁ¤ÇÑ »ç¿ëÀÚ·Î º¯È¯ÇÑ´Ù. root°¡ ½ÇÇàÇÏ´Â ¸í·É¾î°¡ ÀÖ´Ù¸é, root ÀÌ¿ÜÀÇ »ç¿ëÀÚ°¡ ¼öÁ¤ÇÏÁö ¸øÇϵµ·Ï ÁÖÀÇÇØ¾ß ÇÑ´Ù. ÀÌ ÆÄÀϵéÀ» root¸¸ ¾µ ¼ö ÀÖ¾î¾ß Çϰí, µð·ºÅ丮¿Í ¸ðµç »óÀ§µð·ºÅ丮µµ ¸¶Âù°¡Áö´Ù. ¿¹¸¦ µé¾î, ServerRoot·Î /usr/local/apache¸¦ »ç¿ëÇÑ´Ù¸é root »ç¿ëÀÚ°¡ ´ÙÀ½°ú °°ÀÌ µð·ºÅ丮¸¦ ¸¸µé±æ Á¦¾ÈÇÑ´Ù:

    mkdir /usr/local/apache
    cd /usr/local/apache
    mkdir bin conf logs
    chown 0 . bin conf logs
    chgrp 0 . bin conf logs
    chmod 755 . bin conf logs

    ±×·¯¸é /, /usr, /usr/local Àº root¸¸ÀÌ ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù. httpd ½ÇÇàÆÄÀÏÀ» ¼³Ä¡ÇÒ¶§ ´ÙÀ½°ú °°ÀÌ º¸È£ÇØ¾ß ÇÑ´Ù:

    cp httpd /usr/local/apache/bin
    chown 0 /usr/local/apache/bin/httpd
    chgrp 0 /usr/local/apache/bin/httpd
    chmod 511 /usr/local/apache/bin/httpd

    htdocs ÇÏÀ§µð·ºÅ丮´Â ´Ù¸¥ »ç¿ëÀÚµéÀÌ ¼öÁ¤ÇÒ ¼ö ÀÖµµ·Ï ¸¸µé ¼ö ÀÖ´Ù -- root´Â ±×°÷¿¡ ÀÖ´Â ÆÄÀÏÀ» ½ÇÇàÇÏÁöµµ, ¸¸µéÁöµµ ¾Ê¾Æ¾ß ÇÑ´Ù.

    root°¡ ¾Æ´Ñ »ç¿ëÀÚ°¡ root°¡ ½ÇÇàÇϰųª ¾²±â°¡´ÉÇÑ ÆÄÀÏÀ» ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù¸é ½Ã½ºÅÛÀÇ root ±ÇÇÑÀ» ÈÉÄ¥ ¼ö ÀÖ´Ù. ¿¹¸¦ µé¾î, ´©±º°¡ httpd ½ÇÇàÆÄÀÏÀ» º¯°æÇÏ¿´´Ù¸é ´ÙÀ½¹ø ½ÃÀÛÇÒ¶§ ÀÓÀÇÀÇ Äڵ带 ½ÇÇàÇÏ°Ô µÈ´Ù. logs µð·ºÅ丮°¡ (root°¡ ¾Æ´Ñ »ç¿ëÀÚ¿¡°Ô) ¾²±â°¡´ÉÇÏ´Ù¸é ´©±º°¡ ·Î±×ÆÄÀÏÀ» ´Ù¸¥ ½Ã½ºÅÛÆÄÀÏ·Î ½Éº¼¸µÅ©¸¦ °É¾î¼­ root°¡ ÆÄÀÏ¿¡ ÀÓÀÇÀÇ ÀڷḦ µ¤¾î¾µ ¼ö ÀÖ´Ù. ·Î±×ÆÄÀÏÀÌ (root°¡ ¾Æ´Ñ »ç¿ëÀÚ¿¡°Ô) ¾²±â°¡´ÉÇÏ´Ù¸é ´©±º°¡ ·Î±×¿¡ ÀÌ»óÇÑ ÀڷḦ ±â·ÏÇÒ ¼ö ÀÖ´Ù.

    top

    Server Side Includes

    Server Side Includes (SSI)´Â ¼­¹ö °ü¸®ÀÚ¿¡°Ô º¸¾È»ó ¸î°¡Áö ÀáÀçÀûÀÎ À§ÇèÀÌ´Ù.

    ù¹øÂ° À§ÇèÀº ¼­¹öÀÇ ºÎÇϸ¦ ´Ã¸®´Â Á¡ÀÌ´Ù. ¾ÆÆÄÄ¡´Â ÆÄÀÏ¿¡ SSI Áö½Ã¾î°¡ ÀÖ´ÂÁö ¿©ºÎ¿Í °ü°è¾øÀÌ ¸ðµç SSI ÆÄÀÏÀ» ºÐ¼®ÇØ¾ß ÇÑ´Ù. Á¶±Ý ºÎÇϰ¡ ´ÃÁö¸¸, ¼­¹ö¸¦ ¿©·¯ »ç¶÷ÀÌ °°ÀÌ »ç¿ëÇϴ ȯ°æ¿¡¼­´Â ½É°¢ÇÒ ¼ö ÀÖ´Ù.

    ¶Ç, SSI ÆÄÀÏÀº ÀϹÝÀûÀÎ CGI ½ºÅ©¸³Æ®¿Í µ¿ÀÏÇÑ À§ÇèÀ» °¡Áø´Ù. SSI ÆÄÀÏ¿¡¼­ "exec cmd"¸¦ »ç¿ëÇϸé httpd.conf¿¡¼­ ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇϵµ·Ï ¼³Á¤ÇÑ »ç¿ëÀÚ¿Í ±×·ì ±ÇÇÑÀ¸·Î CGI ½ºÅ©¸³Æ®³ª ÇÁ·Î±×·¥À» ½ÇÇàÇÒ ¼ö ÀÖ´Ù.

    ÀåÁ¡À» Ȱ¿ëÇϸ鼭 SSI ÆÄÀÏÀÇ º¸¾ÈÀ» Çâ»ó½ÃŰ´Â ¹æ¹ýÀÌ ÀÖ´Ù.

    SSI ÆÄÀÏÀÌ °¡Á®¿Ã ¼ö ÀÖ´Â ÇÇÇØ¸¦ °Ý¸®ÇϱâÀ§ÇØ ¼­¹ö°ü¸®ÀÚ´Â ÀϹÝÀûÀÎ CGI Àý¿¡¼­ ¼³¸íÇÏ´Â ¹æ¹ýÀ¸·Î suexec¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù

    .htmlÀ̳ª .htm È®ÀåÀÚ¸¦ SSI ÆÄÀÏ·Î »ç¿ëÇÏ´Â °ÍÀº À§ÇèÇÏ´Ù. ƯÈ÷ ¿©·¯ »ç¶÷ÀÌ °øÀ¯Çϰųª Åë½Å·®ÀÌ ¸¹Àº ¼­¹ö ȯ°æ¿¡¼­ À§ÇèÇÏ´Ù. SSI ÆÄÀÏÀº ÀϹÝÀûÀ¸·Î ¸¹ÀÌ »ç¿ëÇÏ´Â .shtml °°Àº º°µµÀÇ È®ÀåÀÚ¸¦ °¡Á®¾ß ÇÑ´Ù. ±×·¯¸é ¼­¹ö ºÎÇϸ¦ ÃÖ¼ÒÈ­Çϰí À§Çè¿ä¼Ò¸¦ ½±°Ô °ü¸®ÇÒ ¼ö ÀÖ´Ù.

    ´Ù¸¥ ¹æ¹ýÀº SSI ÆäÀÌÁö°¡ ½ºÅ©¸³Æ®³ª ÇÁ·Î±×·¥À» ½ÇÇàÇÏÁö ¸øÇϵµ·Ï ¸¸µå´Â °ÍÀÌ´Ù. Options Áö½Ã¾î¿¡¼­ Includes ´ë½Å IncludesNOEXEC¸¦ »ç¿ëÇÑ´Ù. ±×·¡µµ ½ºÅ©¸³Æ®°¡ ScriptAlias Áö½Ã¾î·Î ÁöÁ¤ÇÑ µð·ºÅ丮¿¡ ÀÖ´Ù¸é <--#include virtual="..." -->¸¦ »ç¿ëÇÏ¿© CGI ½ºÅ©¸³Æ®¸¦ ½ÇÇàÇÒ ¼ö ÀÖÀ½À» ÁÖÀÇÇ϶ó.

    top

    ÀϹÝÀûÀÎ CGI

    °á±¹ ´ç½ÅÀº Ç×»ó CGI ½ºÅ©¸³Æ®/ÇÁ·Î±×·¥ÀÇ ÀúÀÚ¸¦ ½Å·ÚÇØ¾ß Çϰí, °íÀÇ°Ç ½Ç¼öÀÌ°Ç CGIÀÇ ÀáÀçÀûÀÎ º¸¾È»ó ÇãÁ¡À» ¹ß°ßÇÒ ¼ö ÀÖ¾î¾ß ÇÑ´Ù. ±âº»ÀûÀ¸·Î CGI ½ºÅ©¸³Æ®´Â À¥¼­¹ö »ç¿ëÀÚ ±ÇÇÑÀ¸·Î ½Ã½ºÅÛ¿¡¼­ ¾î¶² ¸í·É¾î¶óµµ ½ÇÇàÇÒ ¼ö Àֱ⶧¹®¿¡ ÁÖÀÇÀÖ°Ô È®ÀÎÇÏÁö ¾ÊÀ¸¸é ¸Å¿ì À§ÇèÇÏ´Ù.

    ¸ðµç CGI ½ºÅ©¸³Æ®°¡ °°Àº »ç¿ëÀÚ·Î ½ÇÇàµÇ±â¶§¹®¿¡ ´Ù¸¥ ½ºÅ©¸³Æ®¿Í (°íÀÇ°Ç ½Ç¼öÀ̰Ç) Ãæµ¹ÇÒ °¡´É¼ºÀÌ ÀÖ´Ù. ¿¹¸¦ µé¾î, »ç¿ëÀÚ A´Â »ç¿ëÀÚ B¸¦ ¸Å¿ì ½È¾îÇÏ¿©, »ç¿ëÀÚ BÀÇ CGI µ¥ÀÌÅͺ£À̽º¸¦ Áö¿ö¹ö¸®´Â ½ºÅ©¸³Æ®¸¦ ÀÛ¼ºÇÒ ¼ö ÀÖ´Ù. ¾ÆÆÄÄ¡ 1.2 ¹öÀüºÎÅÍ Æ÷ÇԵǾú°í ¾ÆÆÄÄ¡ ¼­¹ö¿¡¼­ Ưº°ÇÑ ÈÅ(hook)À¸·Î µ¿ÀÛÇÏ´Â suEXEC´Â ½ºÅ©¸³Æ®¸¦ ´Ù¸¥ »ç¿ëÀÚ·Î ½ÇÇàÇÏ´Â ¹æ¹ýÁß Çϳª´Ù. ´Ù¸¥ ´ëÁßÀûÀÎ ¹æ¹ý¿¡´Â CGIWrapÀÌ ÀÖ´Ù.

    top

    ScriptAliasÇÏÁö ¾ÊÀº CGI

    ´ÙÀ½ Á¶°ÇÀ» ¸¸Á·ÇÒ¶§¸¸ »ç¿ëÀÚ°¡ ¾î¶² µð·ºÅ丮¿¡¼­¶óµµ CGI ½ºÅ©¸³Æ®¸¦ ½ÇÇàÇϵµ·Ï Çã¿ëÇÒ ¼ö ÀÖ´Ù:

    • ´ç½ÅÀº °íÀÇ°Ç ½Ç¼öÀÌ°Ç »ç¿ëÀÚ°¡ ½Ã½ºÅÛÀ» °ø°Ý¿¡ ³ëÃâ½ÃŰ´Â ½ºÅ©¸³Æ®¸¦ ÀÛ¼ºÇÏÁö ¾Ê´Â´Ù°í ¹Ï´Â´Ù.
    • ½Ã½ºÅÛÀÇ ´Ù¸¥ ºÎºÐÀÇ º¸¾ÈÀÌ ¾àÇØ¼­, ÀáÀçÀûÀÎ ÇãÁ¡À» Çϳª ´õ ¸¸µé¾îµµ ³ªºüÁú °ÍÀÌ ¾ø´Ù°í »ý°¢ÇÏ´Â °æ¿ì.
    • »ç¿ëÀÚ°¡ ¾ø°í, ¾Æ¸¶ ¾Æ¹«µµ ¼­¹ö¸¦ ¹æ¹®ÇÏÁö¾Ê´Â °æ¿ì.
    top

    ScriptAliasÇÑ CGI

    ƯÁ¤ µð·ºÅ丮¿¡¼­¸¸ CGI¸¦ ½ÇÇàÇÒ ¼ö ÀÖµµ·Ï Á¦ÇÑÇÏ¸é °ü¸®ÀÚ´Â ÀÌµé µð·ºÅ丮¸¦ ÅëÁ¦ÇÒ ¼ö ÀÖ´Ù. ÀÌ °æ¿ì´Â scriptaliasÇÏÁö ¾ÊÀº CGIº¸´Ù È®½ÇÈ÷ ¾ÈÀüÇÏ´Ù. ´Ü, ½Å·ÚÇÏ´Â »ç¿ëÀÚ¸¸ µð·ºÅ丮¿¡ Á¢±ÙÇÒ ¼ö ÀÖ°í, °ü¸®ÀÚ°¡ »õ·Î¿î CGI ½ºÅ©¸³Æ®/ÇÁ·Î±×·¥ÀÇ ÀáÀçÀûÀÎ º¸¾È»ó ÇãÁ¡À» °Ë»çÇÒ ¿ëÀ̰¡ ÀÖ´Ù¸é.

    ´ëºÎºÐÀÇ »çÀÌÆ®´Â scriptaliasÇÏÁö ¾ÊÀº CGI ¹æ½Ä ´ë½Å ÀÌ ¹æ½ÄÀ» »ç¿ëÇÑ´Ù.

    top

    µ¿Àû ³»¿ëÀ» »ý¼ºÇÏ´Â ´Ù¸¥ ¹æ¹ý

    mod_php, mod_perl, mod_tcl, mod_python °°ÀÌ ¼­¹öÀÇ ÀϺηΠµ¿ÀÛÇÏ´Â ÀÓº£µðµå ½ºÅ©¸³Æ®´Â ¼­¹ö¿Í °°Àº »ç¿ëÀÚ·Î (User Áö½Ã¾î Âü°í) ½ÇÇàµÇ±â¶§¹®¿¡, ½ºÅ©¸³Æ® ¿£ÁøÀÌ ½ÇÇàÇÏ´Â ½ºÅ©¸³Æ®´Â ÀáÀçÀûÀ¸·Î ¼­¹ö »ç¿ëÀÚ°¡ Á¢±ÙÇÒ ¼ö ÀÖ´Â ¸ðµç °Í¿¡ Á¢±ÙÇÒ ¼ö ÀÖ´Ù. ¾î¶² ½ºÅ©¸³Æ® ¿£ÁøÀº ¾î´ÀÁ¤µµ Á¦ÇÑÀ» ÇÏÁö¸¸, ¾ÈÀüÇÏ´Ù°í °¡Á¤ÇÏÁö ¾Ê´Â °ÍÀÌ ÁÁ´Ù.

    top

    ½Ã½ºÅÛ ¼³Á¤ º¸È£Çϱâ

    Á¤¸»·Î ¾ÈÀüÇÑ ¼­¹ö¸¦ ¿î¿µÇÏ·Á¸é »ç¿ëÀÚ°¡ .htaccess ÆÄÀÏÀ» »ç¿ëÇÏ¿© ´ç½ÅÀÌ ¼³Á¤ÇÑ º¸¾È±â´ÉÀ» º¯°æÇÏ±æ ¹Ù¶óÁö ¾ÊÀ» °ÍÀÌ´Ù. ±×·¯±âÀ§ÇØ ´ÙÀ½°ú °°Àº ¹æ¹ýÀÌ ÀÖ´Ù.

    ¼­¹ö ¼³Á¤ÆÄÀÏ¿¡ ´ÙÀ½À» Ãß°¡ÇÑ´Ù

    <Directory />
    AllowOverride None
    </Directory>

    ±×·¯¸é »ç¿ë°¡´ÉÇϵµ·Ï ¸í½ÃÀûÀ¸·Î Çã¿ëÇÑ µð·ºÅ丮¸¦ Á¦¿ÜÇϰí´Â .htaccess ÆÄÀÏÀ» »ç¿ëÇÒ ¼ö ¾ø´Ù.

    top

    ±âº»ÀûÀ¸·Î ¼­¹ö¿¡ ÀÖ´Â ÆÄÀÏ º¸È£Çϱâ

    »ç¶÷µéÀº Á¾Á¾ ¾ÆÆÄÄ¡ÀÇ ±âº» Á¢±Ù¿¡ ´ëÇØ À߸ø ¾Ë°íÀÖ´Ù. Áï, ¼­¹ö°¡ ÀϹÝÀûÀÎ URL ´ëÀÀ ±ÔÄ¢À» »ç¿ëÇÏ¿© ÆÄÀÏÀ» ãÀ» ¼ö ÀÖ´Ù¸é, Ưº°È÷ Á¶Ä¡¸¦ ÇÏÁö ¾Ê´ÂÇÑ Å¬¶óÀÌ¾ðÆ®¿¡°Ô ÆÄÀÏÀÌ ¼­ºñ½ºµÉ ¼ö ÀÖ´Ù.

    ¿¹¸¦ µé¾î, ¾Æ·¡¿Í °°Àº °æ¿ì:

    # cd /; ln -s / public_html
    http://localhost/~root/ ¿¡ Á¢±ÙÇÑ´Ù

    ±×·¯¸é Ŭ¶óÀÌ¾ðÆ®´Â Àüü ÆÄÀϽýºÅÛÀ» µ¹¾Æ´Ù´Ò ¼ö ÀÖ´Ù. À̸¦ ¸·±âÀ§ÇØ ¼­¹ö¼³Á¤¿¡¼­ ´ÙÀ½°ú °°Àº Á¶Ä¡¸¦ ÇÑ´Ù:

    <Directory />
    Order Deny,Allow
    Deny from all
    </Directory>

    ±×·¯¸é ÆÄÀϽýºÅÛ À§Ä¡¿¡ ´ëÇØ ±âº» Á¢±ÙÀÌ °ÅºÎµÈ´Ù. ¿øÇÏ´Â ¿µ¿ª¿¡ Á¢±ÙÇÒ ¼ö ÀÖµµ·Ï ´ÙÀ½°ú °°Àº Directory ºí·ÏÀ» Ãß°¡ÇÑ´Ù.

    <Directory /usr/users/*/public_html>
    Order Deny,Allow
    Allow from all
    </Directory>
    <Directory /usr/local/httpd>
    Order Deny,Allow
    Allow from all
    </Directory>

    Location°ú Directory Áö½Ã¾î¸¦ °°ÀÌ »ç¿ëÇÏ´Â °æ¿ì Ưº°È÷ ÁÖÀǸ¦ ±â¿ï¿©¶ó. ¿¹¸¦ µé¾î, <Directory />°¡ Á¢±ÙÀ» °ÅºÎÇÏ´õ¶óµµ <Location /> Áö½Ã¾î°¡ À̸¦ ¹«½ÃÇÒ ¼ö ÀÖ´Ù

    UserDir Áö½Ã¾î¸¦ »ç¿ëÇÏ´Â °æ¿ì¿¡µµ ÁÖÀÇÇ϶ó. Áö½Ã¾î¸¦ "./" °°ÀÌ ¼³Á¤Çϸé root »ç¿ëÀÚ¿¡ ´ëÇØ ¹Ù·Î À§ÀÇ °æ¿ì¿Í °°Àº ¹®Á¦°¡ ¹ß»ýÇÑ´Ù. ¾ÆÆÄÄ¡ 1.3 ÀÌ»óÀ» »ç¿ëÇÑ´Ù¸é ¼­¹ö ¼³Á¤ÆÄÀÏ¿¡ ¾Æ·¡ ÁÙÀ» Ãß°¡ÇÏ±æ °­·ÂÈ÷ ±ÇÇÑ´Ù:

    UserDir disabled root

    top

    ·Î±× »ìÆìº¸±â

    ½ÇÁ¦·Î ¼­¹ö¿¡¼­ ¹«½¼ ÀÏÀÌ À־°í ÀÖ´ÂÁö ¾Ë·Á¸é ·Î±×ÆÄÀÏÀ» »ìÆìºÁ¾ß ÇÑ´Ù. ·Î±×ÆÄÀÏÀº ÀÌ¹Ì ÀϾ Àϸ¸À» º¸°íÇÏÁö¸¸, ¼­¹ö¿¡ ¾î¶² °ø°ÝÀÌ ÀÖ¾ú´ÂÁö ¾Ë·ÁÁÖ°í ÇöÀç ÇÊ¿äÇÑ ¸¸Å­ ¾ÈÀüÇÑÁö È®ÀÎÇÏ°Ô ÇØÁØ´Ù.

    ¿©·¯°¡Áö ¿¹:

    grep -c "/jsp/source.jsp?/jsp/ /jsp/source.jsp??" access_log
    grep "client denied" error_log | tail -n 10

    ù¹øÂ° ¿¹´Â À߸øµÈ Source.JSP ¿äûÀ¸·Î ¼­¹öÁ¤º¸¸¦ ¾Ë¾Æ³¾ ¼ö ÀÖ´Â TomcatÀÇ Ãë¾àÁ¡¸¦ ÀÌ¿ëÇÏ·Á´Â °ø°Ý Ƚ¼ö¸¦ ¾Ë·ÁÁÖ°í, µÎ¹øÂ° ¿¹´Â Á¢±ÙÀÌ °ÅºÎµÈ Ãֱ٠Ŭ¶óÀÌ¾ðÆ® 10°³¸¦ ´ÙÀ½°ú °°ÀÌ º¸¿©ÁØ´Ù:

    [Thu Jul 11 17:18:39 2002] [error] [client foo.bar.com] client denied by server configuration: /usr/local/apache/htdocs/.htpasswd

    Àß ¾Ë µíÀÌ ·Î±×ÆÄÀÏÀº ÀÌ¹Ì ¹ß»ýÇÑ »ç°Ç¸¸À» º¸°íÇÑ´Ù. ±×·¡¼­ Ŭ¶óÀÌ¾ðÆ®°¡ .htpasswd ÆÄÀÏ¿¡ Á¢±ÙÇÒ ¼ö ÀÖ¾ú´Ù¸é Á¢±Ù ·Î±×¿¡ ´ÙÀ½°ú °°Àº ±â·ÏÀÌ ³²À» °ÍÀÌ´Ù:

    foo.bar.com - - [12/Jul/2002:01:59:13 +0200] "GET /.htpasswd HTTP/1.1"

    Áï, ´ç½ÅÀº ¼­¹ö ¼³Á¤ÆÄÀÏ¿¡¼­ ´ÙÀ½ ºÎºÐÀ» ÁÖ¼®Ã³¸®ÇßÀ» °ÍÀÌ´Ù:

    <Files ".ht*">
    Order allow,deny
    Deny from all
    <Files>

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/misc/relevant_standards.html.en0000644000000000000500000003022513412755316021557 0ustar rootsrc Relevant Standards - Apache HTTP Server Version 2.4
    <-

    Relevant Standards

    Available Languages:  en  |  fr  |  ko 

    This page documents all the relevant standards that the Apache HTTP Server follows, along with brief descriptions.

    In addition to the information listed below, the following resources should be consulted:

    Notice

    This document is not yet complete.

    top

    HTTP Recommendations

    Regardless of what modules are compiled and used, Apache as a basic web server complies with the following IETF recommendations:

    RFC 1945 (Informational)
    The Hypertext Transfer Protocol (HTTP) is an application-level protocol with the lightness and speed necessary for distributed, collaborative, hypermedia information systems. This documents HTTP/1.0.
    RFC 2616 (Standards Track)
    The Hypertext Transfer Protocol (HTTP) is an application-level protocol for distributed, collaborative, hypermedia information systems. This documents HTTP/1.1.
    RFC 2396 (Standards Track)
    A Uniform Resource Identifier (URI) is a compact string of characters for identifying an abstract or physical resource.
    RFC 4346 (Standards Track)
    The TLS protocol provides communications security over the Internet. It provides encryption, and is designed to prevent eavesdropping, tampering, and message forgery.
    top

    HTML Recommendations

    Regarding the Hypertext Markup Language, Apache complies with the following IETF and W3C recommendations:

    RFC 2854 (Informational)
    This document summarizes the history of HTML development, and defines the "text/html" MIME type by pointing to the relevant W3C recommendations.
    HTML 4.01 Specification (Errata)
    This specification defines the HyperText Markup Language (HTML), the publishing language of the World Wide Web. This specification defines HTML 4.01, which is a subversion of HTML 4.
    HTML 3.2 Reference Specification
    The HyperText Markup Language (HTML) is a simple markup language used to create hypertext documents that are portable from one platform to another. HTML documents are SGML documents.
    XHTML 1.1 - Module-based XHTML (Errata)
    This Recommendation defines a new XHTML document type that is based upon the module framework and modules defined in Modularization of XHTML.
    XHTML 1.0 The Extensible HyperText Markup Language (Second Edition) (Errata)
    This specification defines the Second Edition of XHTML 1.0, a reformulation of HTML 4 as an XML 1.0 application, and three DTDs corresponding to the ones defined by HTML 4.
    top

    Authentication

    Concerning the different methods of authentication, Apache follows the following IETF recommendations:

    RFC 2617 (Standards Track)
    "HTTP/1.0", includes the specification for a Basic Access Authentication scheme.
    top

    Language/Country Codes

    The following links document ISO and other language and country code information:

    ISO 639-2
    ISO 639 provides two sets of language codes, one as a two-letter code set (639-1) and another as a three-letter code set (this part of ISO 639) for the representation of names of languages.
    ISO 3166-1
    These pages document the country names (official short names in English) in alphabetical order as given in ISO 3166-1 and the corresponding ISO 3166-1-alpha-2 code elements.
    BCP 47 (Best Current Practice), RFC 3066
    This document describes a language tag for use in cases where it is desired to indicate the language used in an information object, how to register values for use in this language tag, and a construct for matching such language tags.
    RFC 3282 (Standards Track)
    This document defines a "Content-language:" header, for use in cases where one desires to indicate the language of something that has RFC 822-like headers, like MIME body parts or Web documents, and an "Accept-Language:" header for use in cases where one wishes to indicate one's preferences with regard to language.

    Available Languages:  en  |  fr  |  ko 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/misc/password_encryptions.html.en0000644000000000000500000003070213412755316022173 0ustar rootsrc Password Formats - Apache HTTP Server Version 2.4
    <-

    Password Formats

    Available Languages:  en  |  fr 

    Notes about the password encryption formats generated and understood by Apache.

    top

    Basic Authentication

    There are five formats that Apache recognizes for basic-authentication passwords. Note that not all formats work on every platform:

    bcrypt
    "$2y$" + the result of the crypt_blowfish algorithm. See the APR source file crypt_blowfish.c for the details of the algorithm.
    MD5
    "$apr1$" + the result of an Apache-specific algorithm using an iterated (1,000 times) MD5 digest of various combinations of a random 32-bit salt and the password. See the APR source file apr_md5.c for the details of the algorithm.
    SHA1
    "{SHA}" + Base64-encoded SHA-1 digest of the password. Insecure.
    CRYPT
    Unix only. Uses the traditional Unix crypt(3) function with a randomly-generated 32-bit salt (only 12 bits used) and the first 8 characters of the password. Insecure.
    PLAIN TEXT (i.e. unencrypted)
    Windows & Netware only. Insecure.

    Generating values with htpasswd

    bcrypt

    $ htpasswd -nbB myName myPassword
    myName:$2y$05$c4WoMPo3SXsafkva.HHa6uXQZWr7oboPiC2bT/r7q1BB8I2s0BRqC

    MD5

    $ htpasswd -nbm myName myPassword
    myName:$apr1$r31.....$HqJZimcKQFAMYayBlzkrA/

    SHA1

    $ htpasswd -nbs myName myPassword
    myName:{SHA}VBPuJHI7uixaa6LQGWx4s+5GKNE=

    CRYPT

    $ htpasswd -nbd myName myPassword
    myName:rqXexS6ZhobKA

    Generating CRYPT and MD5 values with the OpenSSL command-line program

    OpenSSL knows the Apache-specific MD5 algorithm.

    MD5

    $ openssl passwd -apr1 myPassword
    $apr1$qHDFfhPC$nITSVHgYbDAK1Y0acGRnY0

    CRYPT

    openssl passwd -crypt myPassword
    qQ5vTYO3c8dsU

    Validating CRYPT or MD5 passwords with the OpenSSL command line program

    The salt for a CRYPT password is the first two characters (converted to a binary value). To validate myPassword against rqXexS6ZhobKA

    CRYPT

    $ openssl passwd -crypt -salt rq myPassword
    Warning: truncating password to 8 characters
    rqXexS6ZhobKA

    Note that using myPasswo instead of myPassword will produce the same result because only the first 8 characters of CRYPT passwords are considered.

    The salt for an MD5 password is between $apr1$ and the following $ (as a Base64-encoded binary value - max 8 chars). To validate myPassword against $apr1$r31.....$HqJZimcKQFAMYayBlzkrA/

    MD5

    $ openssl passwd -apr1 -salt r31..... myPassword
    $apr1$r31.....$HqJZimcKQFAMYayBlzkrA/

    Database password fields for mod_dbd

    The SHA1 variant is probably the most useful format for DBD authentication. Since the SHA1 and Base64 functions are commonly available, other software can populate a database with encrypted passwords that are usable by Apache basic authentication.

    To create Apache SHA1-variant basic-authentication passwords in various languages:

    PHP

    '{SHA}' . base64_encode(sha1($password, TRUE))

    Java

    "{SHA}" + new sun.misc.BASE64Encoder().encode(java.security.MessageDigest.getInstance("SHA1").digest(password.getBytes()))

    ColdFusion

    "{SHA}" & ToBase64(BinaryDecode(Hash(password, "SHA1"), "Hex"))

    Ruby

    require 'digest/sha1'
    require 'base64'
    '{SHA}' + Base64.encode64(Digest::SHA1.digest(password))

    C or C++

    Use the APR function: apr_sha1_base64

    Python

    import base64
    import hashlib
    "{SHA}" + format(base64.b64encode(hashlib.sha1(password).digest()))

    PostgreSQL (with the contrib/pgcrypto functions installed)

    '{SHA}'||encode(digest(password,'sha1'),'base64')

    top

    Digest Authentication

    Apache recognizes one format for digest-authentication passwords - the MD5 hash of the string user:realm:password as a 32-character string of hexadecimal digits. realm is the Authorization Realm argument to the AuthName directive in httpd.conf.

    Database password fields for mod_dbd

    Since the MD5 function is commonly available, other software can populate a database with encrypted passwords that are usable by Apache digest authentication.

    To create Apache digest-authentication passwords in various languages:

    PHP

    md5($user . ':' . $realm . ':' .$password)

    Java

    byte b[] = java.security.MessageDigest.getInstance("MD5").digest( (user + ":" + realm + ":" + password ).getBytes());
    java.math.BigInteger bi = new java.math.BigInteger(1, b);
    String s = bi.toString(16);
    while (s.length() < 32)
    s = "0" + s; // String s is the encrypted password

    ColdFusion

    LCase(Hash( (user & ":" & realm & ":" & password) , "MD5"))

    Ruby

    require 'digest/md5'
    Digest::MD5.hexdigest(user + ':' + realm + ':' + password)

    PostgreSQL (with the contrib/pgcrypto functions installed)

    encode(digest( user || ':' || realm || ':' || password , 'md5'), 'hex')

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/misc/perf-tuning.html.ko.euc-kr0000644000000000000500000013540613412755316021335 0ustar rootsrc ¾ÆÆÄÄ¡ ¼º´ÉÇâ»ó - Apache HTTP Server Version 2.4
    <-

    ¾ÆÆÄÄ¡ ¼º´ÉÇâ»ó

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko  |  tr 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.

    ¾ÆÆÄÄ¡ 2.0Àº ±â´É°ú Æ÷ÆÃ°¡´É¼º°ú ¼º´ÉÀÇ ±ÕÇüÀÌ ¸Âµµ·Ï ¼³°èÇÑ ¹ü¿ë À¥¼­¹öÀÌ´Ù. º¥Ä¡¸¶Å© ±â·ÏÀ» ¼¼¿ì±âÀ§ÇØ ¼³°èÇÏÁö ¾Ê¾ÒÁö¸¸ ¾ÆÆÄÄ¡ 2.0Àº ½ÇÁ¦ ¸¹Àº °æ¿ì ³ôÀº ¼º´ÉÀ» ³½´Ù.

    ¾ÆÆÄÄ¡ 1.3°ú ºñ±³Çؼ­ 2.0 ¹öÀüÀº 󸮷®°ú È®À强(scalability)À» ³ôÀ̱âÀ§ÇØ ¸¹Àº ÃÖÀûÈ­¸¦ Çß´Ù. ±âº»°ªÀ¸·Î ´ëºÎºÐ ÃÖÀûÈ­ÇÑ °ªÀ» »ç¿ëÇÑ´Ù. ±×·¯³ª ÄÄÆÄÀϽà ȤÀº ½ÇÇà½Ã ¼³Á¤ÀÌ ¼º´É¿¡ Å« ¿µÇâÀ» ÁÙ ¼ö ÀÖ´Ù. ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡ 2.0ÀÇ ¼º´ÉÀ» Çâ»óÇϱâÀ§ÇØ ¼­¹ö °ü¸®ÀÚ°¡ ¼³Á¤ÇÒ ¼ö ÀÖ´Â ¿É¼ÇÀ» ¼³¸íÇÑ´Ù. ¾î¶² ¼³Á¤ ¿É¼ÇÀº À¥¼­¹ö°¡ Çϵå¿þ¾î¿Í ¿î¿µÃ¼Á¦ÀÇ ±â´ÉÀ» ´õ Àß È°¿ëÇϵµ·Ï ÇÏ´Â ¹Ý¸é, ¾î¶² ¿É¼ÇÀº ¼Óµµ¸¦ À§ÇØ ±â´ÉÀ» Èñ»ýÇÑ´Ù.

    top

    Çϵå¿þ¾î¿Í ¿î¿µÃ¼Á¦¿¡ ´ëÇØ¼­

    À¥¼­¹ö ¼º´É¿¡ °¡Àå Å« ¿µÇâÀ» ÁÖ´Â °ÍÀº ¸Þ¸ð¸®´Ù. ½º¿ÒÀº ¿äû´ç Áö¿¬½Ã°£À» »ç¿ëÀÚ°¡ "ÃæºÐÈ÷ ºü¸£´Ù°í" »ý°¢ÇÏÁö ¸øÇÏ°Ô ´Ã¸®±â¶§¹®¿¡ À¥¼­¹ö´Â ½º¿ÒÀ» ÇÏ¸é ¾ÈµÈ´Ù. ´À·ÁÁö¸é »ç¿ëÀÚ´Â Á¤ÁöÇÏ°í ´Ù½Ã Á¢¼ÓÇÏ¿© ºÎÇϰ¡ °è¼Ó Áõ°¡ÇÑ´Ù. MaxClients Áö½Ã¾î¸¦ Á¶ÀýÇÏ¿© À¥¼­¹ö°¡ ½º¿ÒÀ» ÇÒ Á¤µµ·Î ¸¹Àº ÀÚ½ÄÀ» ¸¸µéÁö¾Êµµ·Ï ÇØ¾ß ÇÑ´Ù. ¹æ¹ýÀº °£´ÜÇÏ´Ù: top°ú °°Àº µµ±¸¿¡¼­ ÇÁ·Î¼¼½º ¸ñ·ÏÀ» º¸°í ¾ÆÆÄÄ¡ ÇÁ·Î¼¼½ºÀÇ Æò±Õ ¸Þ¸ð¸® »ç¿ë·®À» ¾Ë¾Æ³½ÈÄ, Àüü »ç¿ë°¡´ÉÇÑ ¸Þ¸ð¸®¿¡¼­ ´Ù¸¥ ÇÁ·Î¼¼½ºµéÀÌ »ç¿ëÇÒ °ø°£À» »« °ª¿¡¼­ ³ª´«´Ù.

    ³ª¸ÓÁö´Â Æò¹üÇÏ´Ù: ÃæºÐÈ÷ ºü¸¥ CPU, ÃæºÐÈ÷ ºü¸¥ ³×Æ®¿÷Ä«µå, ÃæºÐÈ÷ ºü¸¥ µð½ºÅ©, ¿©±â¼­ "ÃæºÐÈ÷ ºü¸¥"Àº ½ÇÇèÀ» ÇØ¼­ °áÁ¤ÇØ¾ß ÇÑ´Ù.

    ¿î¿µÃ¼Á¦´Â º¸Åë °¢ÀÚ ¾Ë¾Æ¼­ ¼±ÅÃÇÒ ÀÏÀÌ´Ù. ±×·¯³ª ÀϹÝÀûÀ¸·Î À¯¿ëÇÏ´Ù°í ÆÇ¸íµÈ ¸î°¡Áö ÁöħÀÌ ÀÖ´Ù:

    • ¼±ÅÃÇÑ ¿î¿µÃ¼Á¦ÀÇ ÃֽоÈÁ¤ ¹öÀü°ú ÆÐÄ¡¸¦ ½ÇÇàÇÑ´Ù. ¸¹Àº ¿î¿µÃ¼Á¦ Á¦ÀÛ»ç´Â ÃÖ±Ù TCP ½ºÅðú ¾²·¹µå ¶óÀ̺귯¸®¿¡ ¸¹Àº ¼ÓµµÇâ»óÀ» Çß´Ù.

    • ¿î¿µÃ¼Á¦°¡ sendfile(2) ½Ã½ºÅÛÈ£ÃâÀ» Áö¿øÇÑ´Ù¸é, À̸¦ »ç¿ëÇϱâÀ§ÇÑ ¹öÀüÀ̳ª ÆÐÄ¡¸¦ ¼³Ä¡ÇÏ¿´´ÂÁö È®ÀÎÇÑ´Ù. (¿¹¸¦ µé¾î, ¸®´ª½º¶ó¸é 2.4 ÀÌ»ó ¹öÀüÀ» ¶æÇÑ´Ù. Solaris 8 Ãʱ⠹öÀüÀº ÆÐÄ¡°¡ ÇÊ¿äÇÏ´Ù.) Áö¿øÇÏ´Â ½Ã½ºÅÛÀ̶ó¸é ¾ÆÆÄÄ¡ 2´Â sendfileÀ» »ç¿ëÇÏ¿© CPU¸¦ ´ú »ç¿ëÇϸç Á¤Àû ÆÄÀÏÀ» ´õ »¡¸® Àü¼ÛÇÒ ¼ö ÀÕ´Ù.

    top

    ½ÇÇà½Ã ¼³Á¤¿¡ ´ëÇØ¼­

    HostnameLookups¿Í DNS¿¡ ´ëÇØ °í·ÁÇÒ Á¡µé

    ¾ÆÆÄÄ¡ 1.3 ÀÌÀü¿¡ HostnameLookupsÀÇ ±âº»°ªÀº OnÀÌ¿´´Ù. ¿äûÀ» ¸¶Ä¡±âÀü¿¡ DNS °Ë»öÀÌ ³¡³ª¾ß ÇϹǷΠ¿äû¸¶´Ù Áö¿¬ÀÌ »ý°å´Ù. ¾ÆÆÄÄ¡ 1.3¿¡¼­ ÀÌ ¼³Á¤ÀÇ ±âº»°ªÀÌ Off·Î º¯°æµÇ¾ú´Ù. ·Î±×ÆÄÀÏÀÇ ÁÖ¼Ò¸¦ È£½ºÆ®¸íÀ¸·Î º¯È¯ÇÏ·Á¸é ¿©·¯ ·Î±×ó¸® ÇÁ·Î±×·¥Áß ÇϳªÀÎ, ¾ÆÆÄÄ¡¿¡ Æ÷ÇÔµÈ logresolve ÇÁ·Î±×·¥À» »ç¿ëÇ϶ó.

    ·Î±×ó¸® ÀÛ¾÷ÀÌ ¼­¹ö ¼º´É¿¡ ¾Ç¿µÇâÀ» ¹ÌÄ¡¹Ç·Î ½ÇÁ¦ »ç¿ëÇÏ´Â À¥¼­¹ö°¡ ¾Æ´Ñ ´Ù¸¥ ÄÄÇ»ÅÍ¿¡¼­ ·Î±×ÆÄÀÏÀ» ÈÄó¸®ÇÏ±æ ¹Ù¶õ´Ù.

    Allow from domainÀ̳ª Deny from domain Áö½Ã¾î¸¦ »ç¿ëÇÑ´Ù¸é (Áï, IP ÁÖ¼Ò°¡ ¾Æ´Ñ È£½ºÆ®¸íÀ̳ª µµ¸ÞÀθíÀ» »ç¿ëÇÑ´Ù¸é) ºÎµæÀÌ Áߺ¹-¿ª DNS °Ë»öÀ» (¿ª°Ë»öÀ» ÇÑÈÄ ¾ÇÀÇ·Î º¯°æµÇ¾ú´ÂÁö È®ÀÎÇϱâÀ§ÇØ ´Ù½Ã °Ë»ö) ÇØ¾ß ÇÑ´Ù. ±×·¯¹Ç·Î ¼º´ÉÀ» ³ôÀ̱âÀ§ÇØ ÀÌ·± Áö½Ã¾î¿¡´Â °¡´ÉÇϸé À̸§´ë½Å IP ÁÖ¼Ò¸¦ »ç¿ëÇÑ´Ù.

    <Location /server-status> ¼½¼Ç µîÀ¸·Î Áö½Ã¾îÀÇ Àû¿ë¹üÀ§¸¦ Á¦ÇÑÇÒ ¼ö ÀÖÀ½À» ±â¾ïÇ϶ó. ÀÌ °æ¿ì Á¶°Ç¿¡ ¸Â´Â ¿äû¿¡¸¸ DNS Á¶È¸¸¦ ÇÑ´Ù. ´ÙÀ½Àº .html°ú .cgi ÆÄÀϸ¸ DNS °Ë»öÀ» ÇÏ´Â ¿¹Á¦´Ù:

    HostnameLookups off
    <Files ~ "\.(html|cgi)$">
    HostnameLookups on
    </Files>

    ±×·¯³ª CGI¿¡¼­ DNS¸íÀÌ ÇÊ¿äÇÒ »ÓÀ̶ó¸é, ÇÊ¿äÇÑ Æ¯Á¤ CGI¿¡¼­¸¸ gethostbyname È£ÃâÀ» Çϵµ·Ï °í·ÁÇØº¼ ¼ö ÀÖ´Ù.

    FollowSymLinks¿Í SymLinksIfOwnerMatch

    URL °ø°£¿¡¼­ Options FollowSymLinks¸¦ »ç¿ëÇÏÁö¾Ê°í Options SymLinksIfOwnerMatch¸¦ »ç¿ëÇÏ¸é ¾ÆÆÄÄ¡´Â ½Éº¼¸µÅ©¸¦ °Ë»çÇϱâÀ§ÇØ ½Ã½ºÅÛÈ£ÃâÀ» Çѹø ´õ ÇØ¾ß ÇÑ´Ù. ÆÄÀϸíÀÇ °¢ ºÎºÐ¸¶´Ù Çѹø¾¿ ´õ È£ÃâÀ» ÇÑ´Ù. ¿¹¸¦ µé¾î, ¼³Á¤ÀÌ ´ÙÀ½°ú °°°í:

    DocumentRoot /www/htdocs
    <Directory />
    Options SymLinksIfOwnerMatch
    </Directory>

    /index.html URI¿¡ ´ëÇÑ ¿äûÀÌ ÀÖ´Ù°í °¡Á¤ÇÏÀÚ. ±×·¯¸é ¾ÆÆÄÄ¡´Â /www, /www/htdocs, /www/htdocs/index.html °¢°¢¿¡ ´ëÇØ lstat(2)¸¦ È£ÃâÇÑ´Ù. lstats °á°ú¸¦ ij½ÌÇÏÁö ¾Ê±â¶§¹®¿¡ ¿äûÀÌ µé¾î¿Ã ¶§¸¶´Ù ¸Å¹ø °°Àº ÀÛ¾÷À» ÇÑ´Ù. ÁøÂ¥ ½Éº¼¸µÅ© º¸¾È °Ë»ç¸¦ ¿øÇÑ´Ù¸é ´ÙÀ½°ú °°ÀÌ ÇÒ ¼ö ÀÖ´Ù:

    DocumentRoot /www/htdocs
    <Directory />
    Options FollowSymLinks
    </Directory>

    <Directory /www/htdocs>
    Options -FollowSymLinks +SymLinksIfOwnerMatch
    </Directory>

    ÀÌ °æ¿ì ÃÖ¼ÒÇÑ DocumentRoot °æ·Î´Â °Ë»çÇÏÁö ¾Ê´Â´Ù. DocumentRoot ¹Û¿¡ ÀÖ´Â °æ·Î·Î Alias³ª RewriteRuleÀ» »ç¿ëÇÑ °æ¿ì¿¡µµ À§¿Í ºñ½ÁÇÑ ¼½¼ÇÀÌ ÇÊ¿äÇÏ´Ù. ½Éº¼¸µÅ© º¸¾ÈÀ» °í·ÁÇÏÁö ¾Ê°í ÃÖ°íÀÇ ¼º´ÉÀ» ¾òÀ¸·Á¸é, FollowSymLinks¸¦ ¼³Á¤Çϰí, SymLinksIfOwnerMatch´Â Àý´ë·Î ¾ÈµÈ´Ù.

    AllowOverride

    URL °ø°£¿¡¼­ overrides¸¦ Çã¿ëÇÑ´Ù¸é (º¸Åë .htaccess ÆÄÀÏ) ¾ÆÆÄÄ¡´Â ÆÄÀϸíÀÇ °¢ ºÎºÐ¸¶´Ù .htaccess¸¦ ¿­±æ ½ÃµµÇÑ´Ù. ¿¹¸¦ µé¾î,

    DocumentRoot /www/htdocs
    <Directory />
    AllowOverride all
    </Directory>

    /index.html URI¿¡ ´ëÇÑ ¿äûÀÌ ÀÖ´Ù°í °¡Á¤ÇÏÀÚ. ¾ÆÆÄÄ¡´Â /.htaccess, /www/.htaccess, /www/htdocs/.htaccess¸¦ ¿­·Á°í ½ÃµµÇÑ´Ù. ÇØ°áÃ¥Àº ¾ÕÀÇ Options FollowSymLinks °æ¿ì¿Í ºñ½ÁÇÏ´Ù. ÃÖ°íÀÇ ¼º´ÉÀ» ¾òÀ¸·Á¸é ÆÄÀϽýºÅÛ¿¡ ´ëÇØ¼­ Ç×»ó AllowOverride NoneÀ» »ç¿ëÇÑ´Ù.

    ³»¿ëÇù»ó

    °¡´ÉÇϰí ÁøÂ¥ Á¶±ÝÀÇ ¼º´ÉÇâ»ó¿¡µµ °ü½ÉÀÌ ÀÖ´Ù¸é ³»¿ëÇù»óÀ» ¸·´Â´Ù. ½ÇÁ¦·Î Çù»óÀÇ À̵æÀº ¼º´ÉÀúÇϺ¸´Ù ÀÛ´Ù. ¼­¹ö¸¦ ºü¸£°Ô ÇÒ ¼ö ÀÖ´Ù. ´ÙÀ½°ú °°ÀÌ ¿ÍÀϵåÄ«µå¸¦ »ç¿ëÇÏ´Â ´ë½Å:

    DirectoryIndex index

    ¿ÏÀüÇÑ ¸ñ·ÏÀ» »ç¿ëÇÑ´Ù:

    DirectoryIndex index.cgi index.pl index.shtml index.html

    °¡Àå ÈçÇÑ °ÍÀ» ¾Õ¿¡ µÐ´Ù.

    ¶Ç, µð·ºÅ丮¿¡¼­ ÆÄÀϵéÀ» ã´Â MultiViews º¸´Ù´Â, ÇÑ ÆÄÀϸ¸ ÀÐÀ¸¸é ÇÊ¿äÇÑ Á¤º¸¸¦ ¾òÀ» ¼ö ÀÖ´Â type-map ÆÄÀÏÀ» Á÷Á¢ ¸¸µå´Â °ÍÀÌ ´õ ºü¸§À» ¸í½ÉÇ϶ó.

    »çÀÌÆ®¿¡ ³»¿ëÇù»óÀÌ ÇÊ¿äÇÏ´Ù¸é Çù»óÀ» À§ÇØ Options MultiViews Áö½Ã¾î¸¦ »ç¿ëÇϱ⺸´Ù type-map ÆÄÀÏÀ» °í·ÁÇ϶ó. Çù»ó¹æ¹ý¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ¼³¸í°ú type-map ÆÄÀÏÀ» ¸¸µå´Â ¹æ¹ýÀº ³»¿ëÇù»ó ¹®¼­¸¦ Âü°íÇ϶ó.

    ¸Þ¸ð¸®´ëÀÀ (memory-mapping)

    ¿¹¸¦ µé¾î, server-side-include¸¦ ó¸®ÇÏ´Â µî ¾ÆÆÄÄ¡ 2.0ÀÌ Àü¼ÛÇÒ ÆÄÀÏÀ» ÀÐÀ»¶§ ¿î¿µÃ¼Á¦°¡ mmap(2) µîÀ» Áö¿øÇÑ´Ù¸é ÆÄÀÏÀ» ¸Þ¸ð¸®´ëÀÀÇÑ´Ù.

    ¿©·¯ Ç÷¡Æû¿¡¼­ ¸Þ¸ð¸®´ëÀÀÀ» ¼º´ÉÀ» Çâ»óÇÑ´Ù. ±×·¯³ª ¸Þ¸ð¸®´ëÀÀÀÌ ¼­¹öÀÇ ¼º´ÉÀ» ¶³¾îÆ®¸®°í ½ÉÁö¾î ¾ÈÁ¤¼ºÀ» ÇØÄ¡´Â °æ¿ì°¡ ÀÖ´Ù:

    • ¾î¶² ¿î¿µÃ¼Á¦¿¡¼­ mmapÀº CPU °³¼ö°¡ ¸¹¾ÆÁú¶§ read(2) ¸¸Å­ È®À强ÀÌ ÁÁÁö ¾Ê´Ù. ¿¹¸¦ µé¾î, ´ÙÁßÇÁ·Î¼¼¼­ Solaris ¼­¹ö¿¡¼­ ¾ÆÆÄÄ¡ 2.0Àº Á¾Á¾ mmapÀ» »ç¿ëÇÏÁö ¾ÊÀ»¶§ ¼­¹ö°¡ ó¸®ÇÑ ÆÄÀÏÀ» ´õ »¡¸® Àü¼ÛÇÑ´Ù.

    • NFS ¸¶¿îÆ®ÇÑ ÆÄÀϽýºÅÛ¿¡ ÀÖ´Â ÆÄÀÏÀ» ¸Þ¸ð¸®´ëÀÀÇÏ´Â µµÁß¿¡ ´Ù¸¥ NFS Ŭ¶óÀÌ¾ðÆ®¿¡ ÀÖ´Â ÇÁ·Î¼¼½º°¡ ÆÄÀÏÀ» Áö¿ì°Å³ª ÆÄÀÏÅ©±â¸¦ ÁÙÀ̸é, À¥¼­¹ö ÇÁ·Î¼¼½º°¡ ´ÙÀ½ ¹ø¿¡ ¸Þ¸ð¸®´ëÀÀÇÑ ÆÄÀϳ»¿ëÀ» ÀÐÀ»¶§ bus error°¡ ¹ß»ýÇÒ ¼ö ÀÖ´Ù.

    À§ÀÇ Á¶°Ç¿¡ ÇØ´çÇϸé Àü¼ÛÇÏ´Â ÆÄÀÏÀ» ¸Þ¸ð¸®´ëÀÀÇÏÁö ¾Êµµ·Ï EnableMMAP off¸¦ »ç¿ëÇØ¾ß ÇÑ´Ù. (ÁÖÀÇ: ÀÌ Áö½Ã¾î´Â µð·ºÅ丮º°·Î º¯°æÇÒ ¼ö ÀÖ´Ù.)

    Sendfile

    ¾ÆÆÄÄ¡´Â ¿î¿µÃ¼Á¦°¡ sendfile(2)À» Áö¿øÇϸé Ä¿³Î sendfileÀ» »ç¿ëÇÏ¿© -- ¿¹¸¦ µé¾î, Á¤Àû ÆÄÀÏÀ» ¼­ºñ½ºÇÒ¶§ -- Àü¼ÛÇÒ ÆÄÀÏÀ» Á÷Á¢ ÀÐÁö¾ÊÀ» ¼ö ÀÖ´Ù.

    ¿©·¯ Ç÷¡Æû¿¡¼­ sendfileÀ» »ç¿ëÇϸé read¿Í send¸¦ µû·Î ÇÒ Çʿ䰡 ¾ø¾î¼­ »¡¶óÁø´Ù. ±×·¯³ª sendfileÀ» »ç¿ëÇϸé À¥¼­¹öÀÇ ¾ÈÁ¤¼ºÀ» ÇØÄ¡°ÔµÇ´Â °æ¿ì°¡ ÀÖ´Ù:

    • sendfile Áö¿øÀÌ À߸øµÇ¾ú°í ÄÄÆÄÀÏ ½Ã½ºÅÛÀÌ ÀÌÁ¡À» ¹ß°ßÇÏÁö ¸øÇÏ´Â Ç÷¡ÆûÀÌ ÀÖ´Ù. ƯÈ÷ ´Ù¸¥ ÄÄÇ»ÅÍ¿¡¼­ ½ÇÇàÆÄÀÏÀ» ÄÄÆÄÀÏÇÏ¿© sendfile Áö¿øÀÌ À߸øµÈ ÄÄÇ»ÅÍ·Î °¡Á®¿Â °æ¿ì¿¡ °¡´ÉÇÏ´Ù.

    • Ä¿³ÎÀº ÀÚ½ÅÀÇ Ä³½¬¸¦ »ç¿ëÇÏ¿© NFS·Î ¸¶¿îÆ®ÇÑ ÆÄÀÏÀ» ¾ÈÁ¤ÀûÀ¸·Î ¼­ºñ½ºÇÒ ¼ö ¾ø´Â °æ¿ì°¡ ÀÖ´Ù.

    À§ÀÇ Á¶°Ç¿¡ ÇØ´çÇÏ¸é ÆÄÀÏÀ» sendfile Àü¼ÛÇÏÁö ¾Êµµ·Ï EnableSendfile off¸¦ »ç¿ëÇØ¾ß ÇÑ´Ù. (ÁÖÀÇ: ÀÌ Áö½Ã¾î´Â µð·ºÅ丮º°·Î º¯°æÇÒ ¼ö ÀÖ´Ù.)

    ÇÁ·Î¼¼½º »ý¼º

    ¾ÆÆÄÄ¡ 1.3 ÀÌÀü¿¡´Â MinSpareServers, MaxSpareServers, StartServers ¼³Á¤ÀÌ ¸ðµÎ º¥Ä¡¸¶Å© °á°ú¿¡ Å« ¿µÇâÀ» ¹ÌÃÆ´Ù. ƯÈ÷ ¾ÆÆÄÄ¡´Â ÀÛ¾÷À» ¼­ºñ½ºÇϱâÀ§ÇØ ÃæºÐÇÑ Àڽļö¿¡ ´Ù´Ù¸¦ ¶§±îÁö "µµ´Þ" ±â°£ÀÌ ÇÊ¿äÇß´Ù. óÀ½ StartServers°³ ÀÚ½ÄÀ» ¸¸µçÈÄ, MinSpareServers ¼³Á¤°ª±îÁö ÃÊ´ç ÀÚ½ÄÀ» Çϳª¾¿ ¸¸µé¾ú´Ù. ±×·¡¼­ StartServers ±âº»°ªÀÌ 5ÀÎ ¼­¹ö¿¡ Ŭ¶óÀÌ¾ðÆ® 100°³°¡ µ¿½Ã¿¡ Á¢¼ÓÇÏ¸é ºÎÇϸ¦ ó¸®Çϱ⿡ ÃæºÐÇÑ ÀÚ½ÄÀ» ¸¸µé±â±îÁö 95Ãʰ¡ °É·È´Ù. ÀÚÁÖ Àç½ÃÀÛÇÏÁö ¾Ê´Â ½ÇÁ¦ ¼­¹ö¿¡¼­´Â Àß µ¿ÀÛÇÏÁö¸¸, 10ºÐ°£¸¸ ½ÇÇàÇÏ´Â º¥Ä¡¸¶Å© °á°ú´Â ¸Å¿ì ³ª»Ú°Ô ³ª¿Â´Ù.

    ÃÊ´ç ÇѰ³ ±ÔÄ¢Àº ÀÚ½ÄÀ» »õ·Î ½ÃÀÛÇϸ鼭 ¼­¹ö¿¡ ¹«¸®¸¦ ÁÖÁö ¾ÊÀ¸·Á°í Á¤Çß´Ù. ÄÄÇ»ÅͰ¡ ÀÚ½ÄÀ» ½ÃÀÛÇÏ´À¶ó ¹Ù»Ú¸é ¿äûÀ» ¼­ºñ½ºÇÒ ¼ö ¾ø´Ù. ±×·¯³ª ÀÌ ±ÔÄ¢ÀÌ ¾ÆÆÄÄ¡ÀÇ Ã¼°¨ ¼º´É¿¡ ¾Ç¿µÇâÀ» ÁÖ¾î º¯°æÇÏ¿´´Ù. ¾ÆÆÄÄ¡ 1.3¿¡¼­ ÃÊ´ç ÇѰ³ ±ÔÄ¢Àº ¿ÏÈ­µÇ¾ú´Ù. ÄÚµå´Â ÀÚ½Ä ÇѰ³¸¦ ¸¸µé°í, 1ÃÊ ½¬°í, µÎ°³¸¦ ¸¸µé°í, 1ÃÊ ½¬°í, ³×°³¸¦ ¸¸µé°í, ÀÌ·± ½ÄÀ¸·Î ÃÊ´ç ÀÚ½ÄÀ» 32°³ ¸¸µé¶§±îÁö Áö¼ö·Î Áõ°¡ÇÑ´Ù. Àڽļö°¡ MinSpareServers ¼³Á¤¿¡ ´Ù´Ù¸£¸é Áõ°¡¸¦ Áß´ÜÇÑ´Ù.

    ÀÌ °æ¿ì ¹ÝÀÀ¼Óµµ°¡ »¡¶óÁ®¼­ MinSpareServers, MaxSpareServers, StartServers¸¦ °ÅÀÇ ¼³Á¤ÇÒ Çʿ䰡 ¾ø´Ù. ÀÏÃÊ¿¡ ÀÚ½ÄÀ» 4°³ ÀÌ»ó »ý¼ºÇϸé ErrorLog¿¡ ±â·ÏÇÑ´Ù. ÀÌ·± ¿À·ù¹®ÀÌ ¸¹ÀÌ º¸À̸é ÀÌ ¼³Á¤µéÀ» Á¶ÀýÇÏ±æ ¹Ù¶õ´Ù. mod_status °á°ú°¡ µµ¿òÀÌ µÉ °ÍÀÌ´Ù.

    ÇÁ·Î¼¼½º »ý¼º°ú °ü·ÃÇÏ¿© MaxRequestsPerChild ¼³Á¤Àº ÇÁ·Î¼¼½º¸¦ Á¾·áÇÑ´Ù. ±âº»°ªÀº ÀڽĴç ó¸®ÇÒ ¿äû¼ö¿¡ Á¦ÇÑÀÌ ¾ø´Ù´Â 0ÀÌ´Ù. ÇöÀç ¼³Á¤ÀÌ 30°ú °°ÀÌ ¸Å¿ì ÀÛÀº °ªÀ¸·Î ¼³Á¤µÇÀÖ´Ù¸é, °ªÀ» »ó´çÈ÷ ³ôÈú Çʿ䰡 ÀÖ´Ù. SunOS³ª ¿À·¡µÈ Solaris ¹öÀüÀ» »ç¿ëÇÑ´Ù¸é, ¸Þ¸ð¸®À¯Ãâ¶§¹®¿¡ ÀÌ °ªÀ» 10000 Á¤µµ·Î ¼³Á¤Ç϶ó.

    ¿¬°áÀ¯Áö(keep-alive)¸¦ »ç¿ëÇÑ´Ù¸é ÀڽĵéÀº ÀÌ¹Ì ¿­¸° ¿¬°á¿¡¼­ Ãß°¡ ¿äûÀ» ±â´Ù¸®¸ç ¾Æ¹«°Íµµ ÇÏÁö¾Ê±â¶§¹®¿¡ °è¼Ó ¹Ù»Ú´Ù. KeepAliveTimeoutÀÇ ±âº»°ª 15 ÃÊ´Â ÀÌ·± Çö»óÀ» ÃÖ¼ÒÈ­ÇÑ´Ù. ³×Æ®¿÷ ´ë¿ªÆø°ú ¼­¹ö ÀÚ¿ø °£ÀÇ ±ÕÇüÀÌ ¸Â°Ô ¼³Á¤ÇÑ´Ù. ¿¬°áÀ¯ÁöÀÇ ´ëºÎºÐÀÇ ÀÌÁ¡ÀÌ »ç¶óÁö±â¶§¹®¿¡ ¾î¶² °æ¿ì¿¡µµ ÀÌ °ªÀ» 60 ÃÊ ÀÌ»óÀ¸·Î ¿Ã¸®Áö ¸¶¶ó.

    top

    ÄÄÆÄÀϽà ¼³Á¤¿¡ ´ëÇØ¼­

    MPM ¼±ÅÃ

    ¾ÆÆÄÄ¡ 2.x´Â ´ÙÁß󸮸ðµâ (MPMs)À̶ó´Â ±³Ã¼ÇÒ ¼ö ÀÖ´Â µ¿±âÈ­ ¸ðµ¨À» Áö¿øÇÑ´Ù. ¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇÒ¶§ MPMÀ» ¼±ÅÃÇØ¾ß ÇÑ´Ù. beos, mpm_netware, mpmt_os2, mpm_winnt¿Í °°ÀÌ Æ¯Á¤ Ç÷¡Æû¿¡¼­¸¸ »ç¿ëÇÒ ¼ö ÀÖ´Â MPMµµ ÀÖ´Ù. ÀϹÝÀûÀÎ À¯´Ð½º·ù ½Ã½ºÅÛÀº ¿©·¯ MPM Áß¿¡ Çϳª¸¦ ¼±ÅÃÇÒ ¼ö ÀÖ´Ù. À¥¼­¹öÀÇ ¼Óµµ¿Í È®À强(scalability)Àº ¾î¶² MPMÀ» ¼±ÅÃÇ߳Ŀ¡ ´Þ·È´Ù:

    • worker MPMÀº ¿©·¯ ÀÚ½Ä ÇÁ·Î¼¼½º°¡ °¢°¢ ¿©·¯ ¾²·¹µå¸¦ »ç¿ëÇÑ´Ù. °¢ ¾²·¹µå´Â Çѹø¿¡ ÇÑ ¿¬°áÀ» ´ã´çÇÑ´Ù. ÀϹÝÀûÀ¸·Î worker´Â prefork MPM º¸´Ù ÀûÀº ¸Þ¸ð¸®¸¦ »ç¿ëÇϹǷΠÅë½Å·®ÀÌ ¸¹Àº ¼­¹ö¿¡ ÀûÀýÇÏ´Ù.
    • prefork MPMÀº ¾²·¹µå°¡ ÇѰ³ÀÎ ÀÚ½Ä ÇÁ·Î¼¼½º¸¦ ¿©·¯°³ »ç¿ëÇÑ´Ù. °¢ ÇÁ·Î¼¼½º´Â Çѹø¿¡ ÇÑ ¿¬°áÀ» ´ã´çÇÑ´Ù. ¿©·¯ ½Ã½ºÅÛ¿¡¼­ preforkÀÇ ¼Óµµ´Â worker¿Í ºñ½ÁÇÏÁö¸¸, ´õ ¸¹Àº ¸Þ¸ð¸®¸¦ »ç¿ëÇÑ´Ù. ´ÙÀ½°ú °°Àº »óȲ¿¡¼­ ¾²·¹µå¸¦ »ç¿ëÇÏÁö ¾Ê´Â prefork ¹æ½ÄÀÌ worker¿¡ ºñÇØ ÀÌÁ¡À» °¡Áø´Ù: ¾²·¹µå¿¡ ¾ÈÀüÇÏÁö (thread-safe) ¾ÊÀº Á¦»ïÀÚ°¡ ¸¸µç ¸ðµâÀ» »ç¿ëÇÒ ¼ö ÀÖ°í, ¾²·¹µå µð¹ö±ë Áö¿øÀÌ ºó¾àÇÑ Ç÷¡Æû¿¡¼­ ½±°Ô µð¹ö±ëÇÒ ¼ö ÀÖ´Ù.

    ÀÌ MPMµé°ú ´Ù¸¥ MPM¿¡ ´ëÇØ ´õ ÀÚ¼¼ÇÑ Á¤º¸´Â MPM ¹®¼­¸¦ Âü°íÇÏ±æ ¹Ù¶õ´Ù.

    ¸ðµâ

    ¸Þ¸ð¸® »ç¿ë·®ÀÌ ¼º´É¿¡¼­ °¡Àå Áß¿äÇÑ ¿äÀÎÀ̱⶧¹®¿¡ ½ÇÁ¦·Î »ç¿ëÇÏÁö ¾Ê´Â ¸ðµâÀ» Á¦°ÅÇØº¸ÀÚ. ¸ðµâÀ» DSO·Î ÄÄÆÄÀÏÇß´Ù¸é °£´ÜÈ÷ ±× ¸ðµâ¿¡ ´ëÇÑ LoadModule Áö½Ã¾î¸¦ ÁÖ¼®Ã³¸®ÇÏ¸é µÈ´Ù. ±×·¡¼­ ¸ðµâÀ» Á¦°ÅÇÏ°í ½ÇÇàÇÏ¿© »çÀÌÆ®°¡ ¸ðµâ¾øÀ̵µ Á¤»óÀûÀ¸·Î µ¿ÀÛÇÏ´ÂÁö »ìÆìº¼ ¼ö ÀÖ´Ù.

    ¹Ý´ë·Î ¸ðµâÀÌ ¾ÆÆÄÄ¡ ½ÇÇàÆÄÀÏ¿¡ Á¤ÀûÀ¸·Î ¸µÅ©µÇÀÖ´Ù¸é ¿øÇÏÁö ¾Ê´Â ¸ðµâÀ» Á¦°ÅÇϱâÀ§ÇØ ¾ÆÆÄÄ¡¸¦ ÀçÄÄÆÄÀÏÇØ¾ß ÇÑ´Ù.

    ¿©±â¼­ ´ç¿¬È÷ ¾î¶² ¸ðµâÀ» »ç¿ëÇÏ°í »ç¿ëÇÏÁö ¸»Áö Àǹ®ÀÌ »ý±ä´Ù. Á¤´äÀº À¥»çÀÌÆ®¸¶´Ù ´Ù¸£´Ù. ±×·¯³ª ¾Æ¸¶µµ ÃÖ¼ÒÇÑ mod_mime, mod_dir, mod_log_config ¸ðµâÀº »ç¿ëÇÒ °ÍÀÌ´Ù. ¹°·Ð À¥»çÀÌÆ®¿¡ ·Î±×ÆÄÀÏÀÌ ÇÊ¿ä¾ø´Ù¸é mod_log_config´Â ¾ø¾îµµ µÈ´Ù. ±×·¯³ª ÃßõÇÏÁö ¾Ê´Â´Ù.

    Atomic ¸í·É

    mod_cache °°Àº ¸ðµâ°ú ÃÖ±Ù °³¹ßÁßÀÎ worker MPMÀº APRÀÇ atomic API¸¦ »ç¿ëÇÑ´Ù. ÀÌ API´Â °æ·®±Þ ¾²·¹µå µ¿±âÈ­¸¦ À§ÇÒ atomic ¸í·ÉÀ» Á¦°øÇÑ´Ù.

    ±âº»ÀûÀ¸·Î APRÀº °¢ ¿î¿µÃ¼Á¦/CPU Ç÷¡Æû¿¡¼­ °¡Àå È¿À²ÀûÀÎ ¹æ¹ýÀ» »ç¿ëÇÏ¿© ÀÌ ¸í·ÉÀ» ±¸ÇöÇÑ´Ù. ¿¹¸¦ µé¾î, ¿©·¯ ÃֽŠCPU¿¡´Â Çϵå¿þ¾î·Î atomic compare-and-swap (CAS) ¿¬»êÀ» ÇÏ´Â ¸í·É¾î°¡ ÀÖ´Ù. ±×·¯³ª ¾î¶² Ç÷¡Æû¿¡¼­ APRÀº ÀÌ·± ¸í·É¾î°¡ ¾ø´Â ¿À·¡µÈ CPU¿Í ȣȯ¼ºÀ» À§ÇØ ´õ ´À¸° mutex±â¹Ý ±¸ÇöÀ» ±âº»ÀûÀ¸·Î »ç¿ëÇÑ´Ù. ÀÌ·± Ç÷¡Æû¿¡¼­ ¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇÒ¶§ ¾ÆÆÄÄ¡¸¦ ÃֽŠCPU¿¡¼­¸¸ ½ÇÇàÇÒ °èȹÀ̶ó¸é, ¾ÆÆÄÄ¡¸¦ ±¸¼ºÇÒ¶§ --enable-nonportable-atomics ¿É¼ÇÀ» »ç¿ëÇÏ¿© ´õ ºü¸¥ atomic ±¸ÇöÀ» ¼±ÅÃÇÒ ¼ö ÀÖ´Ù:

    ./buildconf
    ./configure --with-mpm=worker --enable-nonportable-atomics=yes

    --enable-nonportable-atomics ¿É¼ÇÀº ´ÙÀ½°ú °°Àº Ç÷¡Æû¿¡ ¿µÇâÀÌ ÀÖ´Ù:

    • SPARC¿¡¼­ Solaris
      ±âº»ÀûÀ¸·Î APRÀº Solaris/SPARC¿¡¼­ mutex±â¹Ý atomicÀ» »ç¿ëÇÑ´Ù. ±×·¯³ª ±¸¼ºÇÒ¶§ --enable-nonportable-atomics¸¦ »ç¿ëÇϸé APRÀº ºü¸¥ Çϵå¿þ¾î compare-and-swapÀ» À§ÇÑ SPARC v8plus ¸í·É¾î¸¦ »ç¿ëÇÑ´Ù. ÀÌ ¿É¼ÇÀ» »ç¿ëÇϸé atomic ¸í·ÉÀÌ ´õ È¿À²ÀûÀÌÁö¸¸ (CPU¸¦ ´ú »ç¿ëÇÏ°í ´õ ³ôÀº µ¿±âÈ­°¡ °¡´ÉÇÏ´Ù), ÄÄÆÄÀÏÇÑ ½ÇÇàÆÄÀÏÀº UltraSPARC Ĩ¿¡¼­¸¸ ½ÇÇàÇÒ ¼ö ÀÖ´Ù.
    • Linux on x86
      ±âº»ÀûÀ¸·Î APRÀº ¸®´ª½º¿¡¼­ mutex±â¹Ý atomicÀ» »ç¿ëÇÑ´Ù. ±×·¯³ª ±¸¼ºÇÒ¶§ --enable-nonportable-atomics¸¦ »ç¿ëÇϸé APRÀº ºü¸¥ Çϵå¿þ¾î compare-and-swapÀ» À§ÇÑ 486 ¸í·É¾î¸¦ »ç¿ëÇÑ´Ù. ´õ È¿À²ÀûÀÎ atomic ¸í·ÉÀÌ °¡´ÉÇÏÁö¸¸, ÄÄÆÄÀÏÇÑ ½ÇÇàÆÄÀÏÀº 486 ÀÌ»ó Ĩ¿¡¼­¸¸ (386Àº ¾ÈµÈ´Ù) ½ÇÇàÇÒ ¼ö ÀÖ´Ù.

    mod_status¿Í ExtendedStatus On

    ¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇÒ¶§ mod_status¸¦ Æ÷ÇÔÇÏ°í ½ÇÇàÇÒ¶§ ExtendedStatus OnÀ» ¼³Á¤ÇÏ¸é ¾ÆÆÄÄ¡´Â ¿äûÀ» ¹ÞÀ»¶§¸¶´Ù gettimeofday(2)(ȤÀº ¿î¿µÃ¼Á¦¿¡ µû¶ó times(2))¸¦ µÎ¹ø È£ÃâÇϰí (1.3 ÀÌÀü¿¡´Â) time(2)µµ Ãß°¡·Î ¿©·¯¹ø È£ÃâÇÑ´Ù. »óÅ º¸°í¼­¿¡ µ¿À۽ð£ÀÌ ÇÊ¿äÇϱ⠶§¹®ÀÌ´Ù. ÃÖ»óÀÇ ¼º´ÉÀ» ¾òÀ¸·Á¸é (±âº»°ªÀÎ) ExtendedStatus off¸¦ ¼³Á¤ÇÑ´Ù.

    accept Á÷·ÄÈ­ - ¿©·¯ ¼ÒÄÏ

    ÁÖÀÇ:

    ¾Æ·¡ ¹®¼­´Â ¾ÆÆÄÄ¡ À¥¼­¹ö 2.0 ¹öÀü¿¡¼­ º¯°æµÈ ³»¿ëÀ» ´ã°í ÀÖÁö ¾Ê´Ù. ¾ÆÁ÷µµ À¯È¿ÇÑ Á¤º¸°¡ ÀÖÁö¸¸, ÁÖÀÇÇØ¼­ »ç¿ëÇÏ±æ ¹Ù¶õ´Ù.

    À¯´Ð½º ¼ÒÄÏ APIÀÇ ´ÜÁ¡À» ¼³¸íÇÑ´Ù. À¥¼­¹ö°¡ ¿©·¯ Æ÷Æ® ȤÀº ¿©·¯ ÁÖ¼Ò¸¦ ±â´Ù¸®±âÀ§ÇØ ¿©·¯ ListenÀ» »ç¿ëÇÑ´Ù°í °¡Á¤ÇÏÀÚ. ¿¬°áÀÌ °¡´ÉÇÑÁö °¢ ¼ÒÄÏÀ» °Ë»çÇϱâÀ§ÇØ ¾ÆÆÄÄ¡´Â select(2)¸¦ »ç¿ëÇÑ´Ù. select(2)´Â ¼ÒÄÏ¿¡ ±â´Ù¸®°í ÀÖ´Â ¿¬°áÀÌ ¾ø´ÂÁö ȤÀº ÃÖ¼ÒÇÑ ÇѰ³ ÀÖ´ÂÁö ¾Ë·ÁÁØ´Ù. ¾ÆÆÄÄ¡¿¡´Â ¿©·¯ ÀÚ½ÄÀÌ ÀÖ°í, ½¬°í ÀÖ´Â ¸ðµç ÀÚ½ÄÀº µ¿½Ã¿¡ »õ·Î¿î ¿¬°áÀ» °Ë»çÇÑ´Ù. ¿ø·¡ ±¸ÇöÀº ´ÙÀ½°ú ºñ½ÁÇÏ´Ù (ÀÌ ¿¹´Â Äڵ忡¼­ °¡Á®¿ÀÁö ¾Ê¾Ò´Ù. ´ÜÁö ¼³¸íÇϱâÀ§ÇÑ ¿ëµµ·Î ¸¸µé¾ú´Ù.):

    for (;;) {
    for (;;) {
    fd_set accept_fds;

    FD_ZERO (&accept_fds);
    for (i = first_socket; i <= last_socket; ++i) {
    FD_SET (i, &accept_fds);
    }
    rc = select (last_socket+1, &accept_fds, NULL, NULL, NULL);
    if (rc < 1) continue;
    new_connection = -1;
    for (i = first_socket; i <= last_socket; ++i) {
    if (FD_ISSET (i, &accept_fds)) {
    new_connection = accept (i, NULL, NULL);
    if (new_connection != -1) break;
    }
    }
    if (new_connection != -1) break;
    }
    process the new_connection;
    }

    ±×·¯³ª À§ÀÇ ´Ü¼øÇÑ ±¸Çö¿¡´Â ½É°¢ÇÑ °í°¥(starvation) ¹®Á¦°¡ ÀÖ´Ù. ¿©·¯ ÀÚ½ÄÀÌ µ¿½Ã¿¡ ÀÌ ¹Ýº¹¹®À» ½ÇÇàÇϸé, ¿äûÀ» ±â´Ù¸®¸ç ¸ðµÎ select¿¡¼­ ¸ØÃá´Ù. À̶§ ¾î¶² ¼ÒÄÏ¿¡ ¿äûÀÌ Çϳª¶óµµ µé¾î¿À¸é ¸ðµç ÀÚ½ÄÀÌ ±ú¾î³­´Ù (±ú¾î³ª´Â ÀÚ½ÄÀÇ °³¼ö´Â ¿î¿µÃ¼Á¦¿Í ŸÀֿ̹¡ µû¶ó ´Ù¸£´Ù). À̵éÀº ¸ðµÎ ¿¬°áÀ» acceptÇÏ±æ ½ÃµµÇÑ´Ù. ±×·¯³ª (¾ÆÁ÷µµ ÇÑ ¿¬°á¸¸ ´ë±âÁßÀ̶ó¸é) ÇÑ Àڽĸ¸ ¼º°øÇϰí, ³ª¸ÓÁö´Â accept¿¡¼­ ¸ØÃá´Ù. ±×·¯¸é ÀÌ ÀڽĵéÀº ÇÑ ¼ÒÄÏÀÇ ¿äû¸¸À» ¼­ºñ½ºÇϵµ·Ï ¹­¿©¼­, ±× ¼ÒÄÏÀ¸·Î »õ·Î¿î ¿äûÀÌ ÃæºÐÈ÷ µé¾î¿Í¼­ ¸ðµç ÀÚ½ÄÀ» ±ú¿ï¶§±îÁö Á¤ÁöÇØÀÖ´Ù. ÀÌ·± °í°¥ ¹®Á¦´Â PR#467¿¡ óÀ½ º¸°íµÇ¾ú´Ù. ÃÖ¼ÒÇÑ µÎ°¡Áö ÇØ°áÃ¥ÀÌ ÀÖ´Ù.

    ÇѰ¡Áö´Â ¼ÒÄÏÀ» ´ë±âÇÏÁö ¾Êµµ·Ï (non-blocking) ¸¸µå´Â ¹æ¹ýÀÌ´Ù. ÀÌ °æ¿ì ÀÚ½ÄÀÌ accept¸¦ ÇØµµ ¸ØÃßÁö ¾Ê°í, Áï½Ã ÁøÇàÇÒ ¼ö ÀÖ´Ù. ±×·¯³ª CPU ½Ã°£À» ³¶ºñÇÑ´Ù. select¿¡¼­ ½¬´Â ÀÚ½ÄÀÌ 10°³ ÀÖ°í, »õ·Î ¿¬°áÀÌ ÇѰ³ µé¾î¿Ô´Ù°í °¡Á¤ÇÏÀÚ. ±×·¯¸é ÀÌ ÀÚ½ÄÁß 9°³´Â ±ú¾î³ª¼­ ¿¬°áÀ» acceptÇÏ±æ ½ÃµµÇÏ°í ½ÇÆÐÇÏ¸é ¾Æ¹« Àϵµ ÇÏÁö ¾Ê°í ´Ù½Ã select¸¦ ¹Ýº¹ÇÑ´Ù. ´Ù½Ã select·Î µ¹¾Æ¿Ã ¶§±îÁö ¾î¶² Àڽĵµ ´Ù¸¥ ¼ÒÄÏ¿¡ µé¾î¿Â ¿äûÀ» ¼­ºñ½ºÇÏÁö ¾Ê´Â´Ù. (´ÙÁßÇÁ·Î¼¼¼­ ÄÄÇ»ÅÍ¿¡¼­) ½¬´Â ÀÚ½Ä °³¼ö¸¸Å­ CPU °³¼ö°¡ ÀÖ´Â µå¹® °æ¿ì°¡ ¾Æ´Ï¶ó¸é ÀÌ ÇØ°áÃ¥Àº º°·Î ÁÁ¾Æº¸ÀÌÁö ¾Ê´Â´Ù.

    ´Ù¸¥ ¹æ¹ýÀº ¾ÆÆÄÄ¡°¡ »ç¿ëÇÏ´Â ¹æ¹ýÀ¸·Î ³»ºÎ ¹Ýº¹¹®¿¡ ÇÑ Àڽĸ¸À» µé¿©º¸³½´Ù. ¹Ýº¹¹®Àº ´ÙÀ½°ú °°´Ù (Â÷À̸¦ °­Á¶ÇßÀ½):

    for (;;) {
    accept_mutex_on ();
    for (;;) {
    fd_set accept_fds;

    FD_ZERO (&accept_fds);
    for (i = first_socket; i <= last_socket; ++i) {
    FD_SET (i, &accept_fds);
    }
    rc = select (last_socket+1, &accept_fds, NULL, NULL, NULL);
    if (rc < 1) continue;
    new_connection = -1;
    for (i = first_socket; i <= last_socket; ++i) {
    if (FD_ISSET (i, &accept_fds)) {
    new_connection = accept (i, NULL, NULL);
    if (new_connection != -1) break;
    }
    }
    if (new_connection != -1) break;
    }
    accept_mutex_off ();
    process the new_connection;
    }

    accept_mutex_on°ú accept_mutex_off ÇÔ¼ö´Â mutex ¼¼¸¶Æ÷¾î¸¦ ±¸ÇöÇÑ´Ù. Çѹø¿¡ ¿ÀÁ÷ ÇÑ Àڽĸ¸ÀÌ mutex¸¦ °¡Áú ¼ö ÀÖ´Ù. mutex¸¦ ±¸ÇöÇÏ´Â ¹æ¹ýÀº ¿©·¯°¡ÁöÀÌ´Ù. ±¸Çö ¹æ¹ýÀº (1.3 ÀÌÀü) src/conf.h³ª (1.3°ú ±× ÀÌÈÄ) src/include/ap_config.h¿¡ Á¤ÀǵÇÀÖ´Ù. ¾î¶² ¾ÆÅ°ÅØÃÄ´Â Àá±Ý(locking) ¹æ¹ýÀ» ¼±ÅÃÇÏÁö ¾Ê±â¶§¹®¿¡, ÀÌ·± ¾ÆÅ°ÅØÃÄ¿¡¼­ ¿©·¯ Listen Áö½Ã¾î¸¦ »ç¿ëÇϸé À§ÇèÇÏ´Ù.

    ½ÇÇà½Ã AcceptMutex Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© mutex ±¸ÇöÀ» º¯°æÇÒ ¼ö ÀÖ´Ù.

    AcceptMutex flock

    ÀÌ ¹æ¹ýÀº Àá±ÝÆÄÀÏÀ» Àá±×±âÀ§ÇØ flock(2) ½Ã½ºÅÛÈ£ÃâÀ» »ç¿ëÇÑ´Ù (Àá±ÝÆÄÀÏ À§Ä¡´Â LockFile Áö½Ã¾î·Î ÁöÁ¤).

    AcceptMutex fcntl

    ÀÌ ¹æ¹ýÀº Àá±ÝÆÄÀÏÀ» Àá±×±âÀ§ÇØ fcntl(2) ½Ã½ºÅÛÈ£ÃâÀ» »ç¿ëÇÑ´Ù (Àá±ÝÆÄÀÏ À§Ä¡´Â LockFile Áö½Ã¾î·Î ÁöÁ¤).

    AcceptMutex sysvsem

    (1.3°ú ±× ÀÌÈÄ) ÀÌ ¹æ¹ýÀ» SysV½Ä ¼¼¸¶Æ÷¾î¸¦ »ç¿ëÇÏ¿© mutex¸¦ ±¸ÇöÇÑ´Ù. ºÒÇàÈ÷µµ SysV½Ä ¼¼¸¶Æ÷¾î´Â ³ª»Û ºÎÀÛ¿ëÀÌ ÀÖ´Ù. Çϳª´Â ¾ÆÆÄÄ¡°¡ ¼¼¸¶Æ÷¾î¸¦ Á¤¸®ÇÏÁö ¾Ê°í Á×À» ¼ö ÀÖ´Â Á¡ÀÌ´Ù (ipcs(8) manpage Âü°í). ´Ù¸¥ Çϳª´Â À¥¼­¹ö¿Í µ¿ÀÏÇÑ uid·Î ½ÇÇàÇÏ´Â CGI°¡ (Áï, suexec³ª cgiwrapper¸¦ »ç¿ëÇÏÁö¾Ê´Â ÇÑ ¸ðµç CGI) ¼¼¸¶Æ÷¾î API¸¦ »ç¿ëÇÏ¿© ¼­ºñ½º°ÅºÎ°ø°ÝÀ» ÇÒ ¼ö ÀÖ´Â Á¡ÀÌ´Ù. ÀÌ·± ÀÌÀ¯¶§¹®¿¡ IRIX¸¦ Á¦¿ÜÇÑ ¾ÆÅ°ÅØÃÄ¿¡¼­ ÀÌ ¹æ¹ýÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù (´ëºÎºÐÀÇ IRIX ÄÄÇ»ÅÍ¿¡¼­ ¾ÕÀÇ µÎ ¹æ¹ýÀº Áö³ªÄ¡°Ô ¹ö°Ì´Ù).

    AcceptMutex pthread

    (1.3°ú ±× ÀÌÈÄ) ÀÌ ¹æ¹ýÀº POSIX mutex¸¦ »ç¿ëÇϱ⶧¹®¿¡ POSIX ¾²·¹µå ±Ô¾àÀ» ¿ÏÀüÈ÷ ±¸ÇöÇÑ ¾ÆÅ°ÅØÃĶó¸é ¸ðµÎ »ç¿ë°¡´ÉÇÏÁö¸¸, (2.5 ÀÌÈÄ) Solaris¿¡¼­¸¸ ±×°Íµµ ƯÁ¤ ±¸¼º¿¡¼­¸¸ µ¿ÀÛÇÏ´Â µíÇÏ´Ù. ÀÌ ¹æ¹ýÀ» ½ÃµµÇغ»´Ù¸é ¼­¹ö°¡ ¸ØÃç¼­ ÀÀ´äÀ» ¾ÈÇÏ´ÂÁö »ìÆìºÁ¾ß ÇÑ´Ù. Á¤Àû ³»¿ë¸¸ ¼­ºñ½ºÇÏ´Â ¼­¹ö´Â Àß µ¿ÀÛÇÏ´Â °Í °°´Ù.

    AcceptMutex posixsem

    (2.0°ú ±× ÀÌÈÄ) ÀÌ ¹æ¹ýÀº POSIX ¼¼¸¶Æ÷¾î¸¦ »ç¿ëÇÑ´Ù. mutex¸¦ °¡Áø ÇÁ·Î¼¼½ºÀÇ ¾²·¹µå°¡ Á״´ٸé(segfault) ¼¼¸¶Æ÷¾î ¼ÒÀ¯±ÇÀÌ È¸º¹µÇÁö ¾Ê¾Æ¼­ À¥¼­¹ö°¡ ¸ØÃá´Ù.

    ½Ã½ºÅÛ¿¡ À§ ¸ñ·Ï¿¡ ¾ø´Â Á÷·ÄÈ­(serialization) ¹æ¹ýÀÌ ÀÖ´Ù¸é ±× ¹æ¹ýÀ» »ç¿ëÇÏ´Â Äڵ带 APR¿¡ Ãß°¡ÇÒ °¡Ä¡°¡ ÀÖ´Ù.

    °í·Á´Â ÇØºÃÁö¸¸ ±¸ÇöÇÏÁö¾ÊÀº ´Ù¸¥ ¹æ¹ýÀº ºÎºÐÀûÀ¸·Î ¹Ýº¹¹®À» Á÷·ÄÈ­ÇÏ´Â ¹æ¹ýÀÌ´Ù. Áï, ÇÁ·Î¼¼¼­¸¦ ¸î°³¸¸ µé¿©º¸³»´Â °ÍÀÌ´Ù. ÀÌ ¹æ¹ýÀº ¿©·¯ ÀÚ½ÄÀ» µ¿½Ã¿¡ ½ÇÇàÇÒ ¼ö À־ Á÷·ÄÈ­¶§¹®¿¡ Àüü ´ë¿ªÆøÀ» Ȱ¿ëÇÏÁö ¸øÇÏ´Â ´ÙÁßÇÁ·Î¼¼¼­ ÄÄÇ»ÅÍ¿¡¼­¸¸ °ü½ÉÀ» °¡Á®º¼ ¼ö ÀÖ´Ù. ¾ÕÀ¸·Î »ìÆìº¼ ºÎºÐÀÌÁö¸¸, ¸Å¿ì º´·ÄÈ­µÈ À¥¼­¹ö°¡ ÈçÇÏÁö ¾Ê¾Æ¼­ ¿ì¼±¼øÀ§°¡ ³·´Ù.

    ÃÖ»óÀÇ ¼º´ÉÀ» ¾ò±âÀ§Çؼ­´Â ¿©·¯ Listen ¹®À» »ç¿ëÇÏÁö ¾Ê´Â °ÍÀÌ ÀÌ»óÀûÀÌ´Ù. ±×·¯³ª °è¼Ó ¼³¸íÇÑ´Ù.

    accept Á÷·ÄÈ­ - ¼ÒÄÏ ÇѰ³

    ¾ÕÀÇ ¼³¸íÀº ´ÙÁß¼ÒÄÏ ¼­¹ö¿¡´Â ÁÁÁö¸¸, ¼ÒÄÏÀÌ ÇѰ³ÀÎ ¼­¹ö´Â ¾î¶²°¡? ¿¬°áÀÌ µµÂøÇÒ¶§±îÁö ¸ðµç ÀÚ½ÄÀÌ accept(2)¿¡¼­ ¸ØÃçÀֱ⶧¹®¿¡ ÀÌ·Ð»ó °°Àº ¹®Á¦°¡ ¹ß»ýÇÏÁö ¾Ê°í, °í°¥ ¹®Á¦µµ ¾ø´Ù. ±×·¯³ª ½ÇÁ¦·Î´Â ¾Õ¿¡¼­ ¸»ÇÑ ´ë±âÇÏÁö ¾Ê´Â (non-blocking) ¹æ¹ý¿¡¼­ ¹ß»ýÇÏ´Â "°øÈ¸Àü(spinning)" Çö»óÀ» °¨Ãß°í ÀÖ´Ù. ´ëºÎºÐÀÇ TCP ½ºÅÃÀº ¿¬°áÀÌ µµÂøÇϸé Ä¿³ÎÀÌ accept¿¡¼­ ¸ØÃçÀÖ´Â ¸ðµç ÀÚ½ÄÀ» ±ú¿ìµµ·Ï ±¸ÇöµÇÀÖ´Ù. ÇÁ·Î¼¼½ºÁß ÇѰ³°¡ ¿¬°áÀ» ¾ò°í »ç¿ëÀÚ¿µ¿ªÀ¸·Î µ¹¾Æ°¡°í, ³ª¸ÓÁö´Â Ä¿³Î¿¡¼­ °øÈ¸ÀüÇÏ¿© ¿¬°áÀÌ ¾øÀ½À» ¹ß°ßÇÏ¸é ´Ù½Ã ÀáÀ» ÀÜ´Ù. »ç¿ëÀÚ¿µ¿ª Äڵ忡¼­´Â ÀÌ·± °øÈ¸ÀüÀ» ¾Ë ¼ö ¾øÁö¸¸, ºÐ¸íÈ÷ Á¸ÀçÇÑ´Ù. ±×·¡¼­ ´ÙÁß¼ÒÄÏÀÇ ´ë±âÇÏÁö ¾Ê´Â ¹æ¹ý°ú µ¿ÀÏÇÏ°Ô ºÎÇϸ¦ ³ôÀÌ´Â ºÒÇÊ¿äÇÑ ÇൿÀÌ ÀϾ´Ù.

    ±×·¡¼­ ¿ì¸®´Â ¿©·¯ ¾ÆÅ°ÅØÃÄ¿¡¼­ ¼ÒÄÏÀÌ ÇѰ³ÀÎ °æ¿ì¿¡µµ Á÷·ÄÈ­ÇÏ¸é ´õ "Àß" µ¿ÀÛÇÔÀ» ¹ß°ßÇß´Ù. ±×·¡¼­ °ÅÀÇ ´ëºÎºÐÀÇ °æ¿ì ±âº»ÀûÀ¸·Î Á÷·ÄÈ­¸¦ »ç¿ëÇÑ´Ù. ¸®´ª½º¿¡¼­ (Ä¿³Î 2.0.30, 128Mb ¸Þ¸ð¸®¿¡ µà¾ó Pentium pro) ½ÇÇèÇÑ °á°ú ¼ÒÄÏ ÇѰ³¸¦ Á÷·ÄÈ­Çϸé ÇÏÁö ¾ÊÀº °æ¿ì¿¡ ºñÇØ ÃÊ´ç ¿äûÀÌ 3% ¹Ì¸¸ ÁÙ¾îµé¾ú´Ù. ±×·¯³ª Á÷·ÄÈ­¸¦ ÇÏÁö ¾ÊÀº °æ¿ì ¿äû´ç 100ms Áö¿¬ÀÌ ¹ß»ýÇß´Ù. ÀÌ Áö¿¬Àº ¾Æ¸¶µµ LAN¿¡¼­ ¹ß»ýÇÏ´Â ±ä ¿¬°á¼±¶§¹®ÀÏ °ÍÀÌ´Ù. ¼ÒÄÏÀÌ ÇѰ³ÀÎ °æ¿ì Á÷·ÄÈ­¸¦ »ç¿ëÇÏÁö ¾ÊÀ¸·Á¸é SINGLE_LISTEN_UNSERIALIZED_ACCEPT¸¦ Á¤ÀÇÇÑ´Ù.

    Close Áö¿¬(lingering)

    draft-ietf-http-connection-00.txt 8Àý¿¡¼­ ¼³¸íÇϵíÀÌ ¾ÈÁ¤ÀûÀÎ À¥¼­¹ö°¡ µÇ·Á¸é, Åë½ÅÀÇ ¾ç ¹æÇâÀ» µ¶¸³ÀûÀ¸·Î ´ÝÀ» ¼ö ÀÖ¾î¾ß ÇÑ´Ù (TCP ¿¬°áÀº ½Ö¹æÇâÀ̰í, ¹æÇâÀº ¼­·Î µ¶¸³ÀûÀÌ´Ù). ÀÌÁ¡À» ´Ù¸¥ ¼­¹ö¿¡¼­´Â ÀÚÁÖ °£°úÇÏÁö¸¸, ¾ÆÆÄÄ¡´Â 1.2ºÎÅÍ Á¤È®È÷ ±¸ÇöÇØ¿Ô´Ù.

    ÀÌ ±â´ÉÀ» ºÎÁÖÀÇÇÏ°Ô ¾ÆÆÄÄ¡¿¡ Ãß°¡ÇßÀ»¶§ ¿©·¯ À¯´Ð½º ¹öÀü¿¡¼­ ¸¹Àº ¹®Á¦°¡ ¹ß»ýÇß´Ù. TCP ±Ô¾àÀº FIN_WAIT_2¿¡ ŸÀӾƿôÀÌ ÀÖ´Ù°í Á¤ÇÏÁö ¾Ê¾ÒÁö¸¸, ±ÝÁöÇÏÁöµµ ¾Ê¾Ò´Ù. ŸÀӾƿôÀÌ ¾ø´Â ½Ã½ºÅÛ¿¡¼­ ¾ÆÆÄÄ¡ 1.2´Â ¸¹Àº ¼ÒÄÏÀ» ¿µ¿øÈ÷ FIN_WAIT_2 »óÅ·Π¸¸µé¾ú´Ù. ¸¹Àº °æ¿ì ÀÌ ¹®Á¦´Â Á¦Àۻ簡 Á¦°øÇÏ´Â ÃֽŠTCP/IP ÆÐÄ¡¸¦ Àû¿ëÇÏ¿© ÇØ°áÇÒ ¼ö ÀÖ´Ù. ±×·¯³ª Á¦Àۻ簡 ÆÐÄ¡¸¦ ¹ßÇ¥ÇÏÁö ¾Ê´Â °æ¿ì°¡ (Áï, SunOS4 -- ¼Ò½º ¶óÀ̼±½º°¡ ÀÖ´Â »ç¶÷Àº Á÷Á¢ ÆÐÄ¡ÇÒ ¼ö ÀÖÁö¸¸) Àֱ⶧¹®¿¡ ÀÌ ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê±â·Î °áÁ¤Çß´Ù.

    ¹æ¹ýÀº µÎ°¡Áö´Ù. Çϳª´Â ¼ÒÄÏ ¿É¼Ç SO_LINGER¸¦ »ç¿ëÇÏ´Â ¹æ¹ýÀÌ´Ù. ±×·¯³ª ºÒÇàÈ÷µµ ´ëºÎºÐÀÇ TCP/IP ½ºÅÃÀº ÀÌ ¿É¼ÇÀ» ¿Ã¹Ù·Î ±¸ÇöÇÏÁö ¾Ê¾Ò´Ù. ¿Ã¹Ù·Î ±¸ÇöÇÑ ½ºÅÿ¡¼­ Á¶Â÷µµ (Áï, ¸®´ª½º 2.0.31) ÀÌ ¹æ¹ýÀº ´ÙÀ½ ¹æ¹ýº¸´Ù ´õ cpu¸¦ Àâ¾Æ¸Ô´Â´Ù.

    ¾ÆÆÄÄ¡´Â º¸Åë (http_main.c¿¡ ÀÖ´Â) lingering_close¶ó´Â ÇÔ¼ö¸¦ »ç¿ëÇÑ´Ù. ÀÌ ÇÔ¼ö´Â ´ëÃæ ´ÙÀ½°ú °°´Ù:

    void lingering_close (int s)
    {
    char junk_buffer[2048];

    /* shutdown the sending side */
    shutdown (s, 1);

    signal (SIGALRM, lingering_death);
    alarm (30);

    for (;;) {
    select (s for reading, 2 second timeout);
    if (error) break;
    if (s is ready for reading) {
    if (read (s, junk_buffer, sizeof (junk_buffer)) <= 0) {
    break;
    }
    /* just toss away whatever is here */
    }
    }

    close (s);
    }

    ÀÌ ÄÚµå´Â ¿¬°áÀ» ´ÝÀ»¶§ ´õ CPU¸¦ »ç¿ëÇÏÁö¸¸, ¾ÈÁ¤ÀûÀÎ ±¸ÇöÀ» À§ÇØ ÇÊ¿äÇÏ´Ù. HTTP/1.1ÀÌ ´õ ³Î¸® ÆÛÁö°í ¸ðµç ¿¬°áÀ» À¯ÁöÇÑ´Ù¸é(persistent), ¿¬°áÀ» ¹Þ´Â ºñ¿ëÀº ¿©·¯ ¿äûÀ» ó¸®Çϸ鼭 »ó¼âµÉ °ÍÀÌ´Ù. À§ÇèÇϰԵµ NO_LINGCLOSE¸¦ Á¤ÀÇÇÏ¿© ÀÌ ±â´ÉÀ» »ç¿ëÇÏÁö ¾ÊÀ» ¼ö ÀÖÁö¸¸, Àý´ë·Î ±ÇÇÏÁö ¾Ê´Â´Ù. ƯÈ÷ HTTP/1.1 ÆÄÀÌÇÁ¶óÀÎ (¿ªÁÖ; ¿¬°áÀ¯Áö »óÅ¿¡¼­ ÀÀ´äÀ» ±â´Ù¸®Áö ¾Ê°í ¿©·¯ ¿äûÀ» º¸³»´Â ±â¼ú) ¿¬°áÀ¯Áö¿¡´Â lingering_close°¡ ÇʼöÀûÀÌ´Ù (±×¸®°í ÆÄÀÌÇÁ¶óÀÎ ¿¬°áÀÌ ´õ ºü¸£±â¶§¹®¿¡ »ç¿ëÇÏ±æ ¹Ù¶ö °ÍÀÌ´Ù).

    Scoreboard ÆÄÀÏ

    ¾ÆÆÄÄ¡ÀÇ ºÎ¸ð¿Í ÀÚ½ÄÀº scoreboard¶ó´Â °ÍÀ» ÅëÇØ ¼­·Î Åë½ÅÇÑ´Ù. ÀÌ»óÀûÀ¸·Î´Â scoreboard¸¦ °øÀ¯¸Þ¸ð¸®·Î ±¸ÇöÇØ¾ß ÇÑ´Ù. ¿ì¸® °³¹ßÀÚ°¡ ÇØ´ç ¿î¿µÃ¼Á¦¿¡ Á¢±ÙÇÒ ¼ö Àְųª »ó¼¼ÇÑ Æ÷ÆÃ °á°ú¸¦ ¹ÞÀº °æ¿ì º¸Åë °øÀ¯¸Þ¸ð¸®¸¦ »ç¿ëÇÏ¿© ±¸ÇöÇÑ´Ù. ³ª¸ÓÁö´Â µð½ºÅ©¿¡ ÀÖ´Â ÆÄÀÏÀ» »ç¿ëÇÏ¿© ±¸ÇöÇÑ´Ù. µð½ºÅ©¿¡ ÀÖ´Â ÆÄÀÏÀº ´À¸®°í ½Å·Úµµ°¡ ¶³¾îÁø´Ù (±â´Éµµ ´õ Àû´Ù). src/main/conf.h ÆÄÀÏ¿¡¼­ »ç¿ëÇÏ´Â ¾ÆÅ°ÅØÃĸ¦ ã¾Æ¼­ USE_MMAP_SCOREBOARD ȤÀº USE_SHMGET_SCOREBOARDÀÎÁö È®ÀÎÇÑ´Ù. µÑÁß Çϳª¸¦ (°¢°¢ ÇÔ²² »ç¿ëÇÒ HAVE_MMAPÀ̳ª HAVE_SHMGETµµ °°ÀÌ) Á¤ÀÇÇÏ¸é °øÀ¯¸Þ¸ð¸® Äڵ带 »ç¿ëÇÑ´Ù. ½Ã½ºÅÛÀÌ ´Ù¸¥ Á¾·ùÀÇ °øÀ¯¸Þ¸ð¸®¸¦ »ç¿ëÇÑ´Ù¸é src/main/http_main.c ÆÄÀÏÀ» ¼öÁ¤ÇÏ¿© ¾ÆÆÄÄ¡¿¡¼­ °øÀ¯¸Þ¸ð¸®¸¦ »ç¿ëÇÒ ¼ö ÀÖµµ·Ï ÈÅ(hook)À» Ãß°¡Ç϶ó. (¶ÇÇÑ ÆÐÄ¡¸¦ ¿ì¸®¿¡°Ô º¸³»ÁÖ±æ ¹Ù¶õ´Ù.)

    ¿ª»çÀû ¼³¸í: ¾ÆÆÄÄ¡ÀÇ ¸®´ª½º ¹öÀüÀº ¾ÆÆÄÄ¡ 1.2 ¹öÀüºÎÅÍ °øÀ¯¸Þ¸ð¸®¸¦ »ç¿ëÇϱ⠽ÃÀÛÇß´Ù. ¸®´ª½º¿¡¼­ ÃÊ±â ¾ÆÆÄÄ¡ ¹öÀüÀÌ ´À¸®°í ½Å·Úµµ°¡ ¶³¾îÁ³±â ¶§¹®ÀÌ´Ù.

    DYNAMIC_MODULE_LIMIT

    ¸ðµâÀ» µ¿ÀûÀ¸·Î ÀоîµéÀÌÁö ¾Ê´Â´Ù¸é (°¡´ÉÇÑ Á¶±ÝÀÌ¶óµµ ¼º´ÉÀ» ³ôÀ̱âÀ§ÇØ ÀÌ ±ÛÀ» ÀÐ´Â´Ù¸é ¾Æ¸¶µµ ¸ðµâÀ» µ¿ÀûÀ¸·Î ÀоîµéÀÌÁö ¾ÊÀ» °ÍÀÌ´Ù), ¼­¹ö¸¦ ÄÄÆÄÀÏÇÒ¶§ -DDYNAMIC_MODULE_LIMIT=0À» Ãß°¡ÇÑ´Ù. ±×·¯¸é ¸ðµâÀ» µ¿ÀûÀ¸·Î ÀоîµéÀ̱âÀ§ÇØ ÇÒ´çÇÏ´Â ¸Þ¸ð¸®¸¦ Àý¾àÇÑ´Ù.

    top

    ºÎ·Ï: ½Ã½ºÅÛÈ£Ãâ ±â·ÏÀ» ÀÚ¼¼È÷ ºÐ¼®Çϱâ

    ´ÙÀ½Àº Solaris 8¿¡¼­ worker MPMÀ» »ç¿ëÇÑ ¾ÆÆÄÄ¡ 2.0.38ÀÇ ½Ã½ºÅÛÈ£Ãâ ±â·Ï(trace)ÀÌ´Ù. ¾Æ·¡ ¸í·É¾î¸¦ »ç¿ëÇÏ¿© ±â·ÏÀ» ¾ò¾ú´Ù:

    truss -l -p httpd_child_pid.

    -l ¿É¼ÇÀ» »ç¿ëÇϸé truss´Â ½Ã½ºÅÛÈ£ÃâÀ» ÇÏ´Â LWP (lightweight process, °æ·®±Þ ÇÁ·Î¼¼½º--SolarisÀÇ Ä¿³Î¼öÁØ ¾²·¹µå) ID¸¦ °°ÀÌ ±â·ÏÇÑ´Ù.

    ´Ù¸¥ ½Ã½ºÅÛ¿¡´Â strace, ktrace, par °°Àº ½Ã½ºÅÛÈ£Ãâ ÃßÀû µµ±¸°¡ ÀÖ´Ù. °á°ú´Â ºñ½ÁÇÏ´Ù.

    Ŭ¶óÀÌ¾ðÆ®´Â À¥¼­¹ö¿¡°Ô Å©±â°¡ 10KBÀÎ Á¤Àû ÆÄÀÏÀ» ¿äûÇÑ´Ù. Á¤ÀûÀÎ ÆÄÀÏÀ» ¿äûÇÏÁö ¾Ê°Å³ª ³»¿ëÇù»óÇÏ´Â ¿äûÀ» ÇÑ °æ¿ì ±â·ÏÀÌ ¸Å¿ì ´Ù¸£´Ù (¶§·Î´Â ¸Å¿ì ¾Ë¾Æº¸±â Èûµé´Ù).

    /67:    accept(3, 0x00200BEC, 0x00200C0C, 1) (sleeping...)
    /67:    accept(3, 0x00200BEC, 0x00200C0C, 1)            = 9

    À§¿¡¼­ ¿¬°á´ë±â(listener) ¾²·¹µå°¡ LWP #67¿¡¼­ ½ÇÇàµÊÀ» ¾Ë ¼ö ÀÖ´Ù.

    accept(2) Á÷·ÄÈ­¸¦ »ç¿ëÇÏÁö ¾ÊÀ½À» ÁÖ¸ñÇ϶ó. ¿©·¯ Æ÷Æ®¸¦ ±â´Ù¸®Áö¾Ê´Â °æ¿ì ÀÌ Ç÷¡ÆûÀÇ worker MPMÀº ±âº»ÀûÀ¸·Î Á÷·ÄÈ­ÇÏÁö ¾ÊÀº accept¸¦ »ç¿ëÇÑ´Ù.
    /65:    lwp_park(0x00000000, 0)                         = 0
    /67:    lwp_unpark(65, 1)                               = 0

    ¿¬°áÀº ¹Þ¾ÆµéÀ̰í(accept) ¿¬°á´ë±â ¾²·¹µå´Â worker ¾²·¹µå¸¦ ±ú¿ö¼­ ¿äûÀ» ó¸®ÇÏ°Ô ÇÑ´Ù. ¾Æ·¡ ±â·Ï¿¡¼­ ¿äûÀ» ó¸®ÇÏ´Â worker ¾²·¹µå°¡ LWP #65ÀÓÀ» ¾Ë ¼ö ÀÖ´Ù.

    /65:    getsockname(9, 0x00200BA4, 0x00200BC4, 1)       = 0

    °¡»óÈ£½ºÆ®¸¦ ±¸ÇöÇϱâÀ§ÇØ ¾ÆÆÄÄ¡´Â ¿¬°áÀ» ¹Þ¾ÆµéÀÎ Áö¿ª(local) ¼ÒÄÏ ÁÖ¼Ò¸¦ ¾Ë¾Æ¾ß ÇÑ´Ù. (°¡»óÈ£½ºÆ®¸¦ »ç¿ëÇÏÁö ¾Ê°Å³ª Listen Áö½Ã¾î¿¡ ¿ÍÀϵåÄ«µå ÁÖ¼Ò¸¦ »ç¿ëÇÏÁö ¾ÊÀº °æ¿ì µî) ¸¹Àº °æ¿ì ÀÌ È£ÃâÀ» ¾ø¾Ù ¼ö ÀÖ´Ù. ±×·¯³ª ¾ÆÁ÷ ÀÌ·± ÃÖÀûÈ­ ÀÛ¾÷ÀÌ ¾ÈµÇÀÖ´Ù.

    /65:    brk(0x002170E8)                                 = 0
    /65:    brk(0x002190E8)                                 = 0

    brk(2) È£ÃâÀº Èü(heap)¿¡¼­ ¸Þ¸ð¸®¸¦ ÇÒ´çÇÑ´Ù. À¥¼­¹ö´Â ´ëºÎºÐÀÇ ¿äû 󸮽à ÀÚü ¸Þ¸ð¸® ÇÒ´çÀÚ(apr_pool°ú apr_bucket_alloc)¸¦ »ç¿ëÇϱ⶧¹®¿¡ ½Ã½ºÅÛÈ£Ãâ ±â·Ï¿¡¼­ ÀÌ ½Ã½ºÅÛÈ£ÃâÀ» º¸±â°¡ µå¹°´Ù. ÀÌ ±â·Ï¿¡¼­ À¥¼­¹ö´Â ½ÃÀÛÇÏÀÚ¸¶ÀÚ ÀÚü ¸Þ¸ð¸® ÇÒ´çÀÚ°¡ »ç¿ëÇÒ ¸Þ¸ð¸®ºí·ÏÀ» ¾ò±âÀ§ÇØ malloc(3)À» È£ÃâÇÑ´Ù.

    /65:    fcntl(9, F_GETFL, 0x00000000)                   = 2
    /65:    fstat64(9, 0xFAF7B818)                          = 0
    /65:    getsockopt(9, 65535, 8192, 0xFAF7B918, 0xFAF7B910, 2190656) = 0
    /65:    fstat64(9, 0xFAF7B818)                          = 0
    /65:    getsockopt(9, 65535, 8192, 0xFAF7B918, 0xFAF7B914, 2190656) = 0
    /65:    setsockopt(9, 65535, 8192, 0xFAF7B918, 4, 2190656) = 0
    /65:    fcntl(9, F_SETFL, 0x00000082)                   = 0

    ´ÙÀ½ worker ¾²·¹µå´Â Ŭ¶óÀ̾ðÆ®ÀÇ ¿¬°á(ÆÄÀϱâ¼úÀÚ 9)À» ´ë±â¾ÈÇÔ(non-blocking) »óÅ·Π¹Ù²Û´Ù. setsockopt(2)¿Í getsockopt(2) È£ÃâÀº SolarisÀÇ libc°¡ ¼ÒÄÏ¿¡ ´ëÇÑ fcntl(2)À» ¾î¶»°Ô ó¸®ÇÏ´ÂÁö º¸¿©ÁØ´Ù.

    /65:    read(9, " G E T   / 1 0 k . h t m".., 8000)     = 97

    worker ¾²·¹µå´Â Ŭ¶óÀÌ¾ðÆ®·Î ºÎÅÍ ¿äûÀ» Àд´Ù.

    /65:    stat("/var/httpd/apache/httpd-8999/htdocs/10k.html", 0xFAF7B978) = 0
    /65:    open("/var/httpd/apache/httpd-8999/htdocs/10k.html", O_RDONLY) = 10

    À¥¼­¹ö ¼³Á¤Àº Options FollowSymLinks¿Í AllowOverride NoneÀÌ´Ù. ±×·¡¼­ ¿äûÇÑ ÆÄÀϰæ·ÎÀÇ °¢ µð·ºÅ丮¿¡ ´ëÇØ lstat(2)Çϰųª .htaccess ÆÄÀÏÀ» °Ë»çÇÒ Çʿ䰡 ¾ø´Ù. ÆÄÀÏÀ» °Ë»çÇϱâÀ§ÇØ, 1) ÆÄÀÏÀÌ ÀÖ´ÂÁö, 2) µð·ºÅ丮°¡ ¾Æ´Ñ ÀÏ¹ÝÆÄÀÏÀÎÁö, stat(2) È£Ã⸸ ÇÏ¸é µÈ´Ù.

    /65:    sendfilev(0, 9, 0x00200F90, 2, 0xFAF7B53C)      = 10269

    ÀÌ °æ¿ì À¥¼­¹ö´Â ÇѹøÀÇ sendfilev(2) ½Ã½ºÅÛÈ£Ãâ·Î HTTP ÀÀ´äÇì´õ¿Í ¿äûÇÑ ÆÄÀÏÀ» Àü¼ÛÇÒ ¼ö ÀÖ´Ù. Sendfile Áö¿ø¿©ºÎ´Â ¿î¿µÃ¼Á¦¸¶´Ù ´Ù¸£´Ù. ´Ù¸¥ ½Ã½ºÅÛÀ̶ó¸é sendfile(2)À» È£ÃâÇϱâ Àü¿¡ Çì´õ¸¦ º¸³»±âÀ§ÇØ write(2)³ª writev(2) È£ÃâÀ» ÇÑ´Ù.

    /65:    write(4, " 1 2 7 . 0 . 0 . 1   -  ".., 78)      = 78

    write(2) È£ÃâÀº Á¢±Ù·Î±×(access log)¿¡ ¿äûÀ» ±â·ÏÇÑ´Ù. ÀÌ ±â·Ï¿¡ time(2) È£ÃâÀÌ ¾øÀ½À» ÁÖ¸ñÇ϶ó. ¾ÆÆÄÄ¡ 1.3°ú ´Þ¸® ¾ÆÆÄÄ¡ 2.0Àº ½Ã°£À» ¾Ë±âÀ§ÇØ gettimeofday(3)¸¦ »ç¿ëÇÑ´Ù. gettimeofday¸¦ ÃÖÀûÈ­ÇÑ ¸®´ª½º¿Í Solaris °°Àº ¸î¸î ¿î¿µÃ¼Á¦¿¡¼­´Â ÀϹÝÀûÀÎ ½Ã½ºÅÛÈ£Ã⠺δãÀÌ ¾ø´Ù.

    /65:    shutdown(9, 1, 1)                               = 0
    /65:    poll(0xFAF7B980, 1, 2000)                       = 1
    /65:    read(9, 0xFAF7BC20, 512)                        = 0
    /65:    close(9)                                        = 0

    worker ¾²·¹µå´Â ¿¬°áÀ» Áö¿¬´Ý±â(lingering close)ÇÑ´Ù.

    /65:    close(10)                                       = 0
    /65:    lwp_park(0x00000000, 0)         (sleeping...)

    ¸¶Áö¸·À¸·Î worker ¾²·¹µå´Â ¹æ±Ý Àü¼ÛÇÑ ÆÄÀÏÀ» ´Ý°í, ¿¬°á´ë±â(listener) ¾²·¹µå°¡ ´Ù¸¥ ¿¬°áÀ» ÇÒ´çÇÒ ¶§±îÁö Á¤ÁöÇÑ´Ù.

    /67:    accept(3, 0x001FEB74, 0x001FEB94, 1) (sleeping...)

    ±×µ¿¾È ¿¬°á´ë±â ¾²·¹µå´Â ¿¬°áÀ» (¸ðµç worker°¡ ÀÛ¾÷ÁßÀÌ¸é ¿¬°á´ë±â ¾²·¹µå¸¦ ¸ØÃß´Â worker MPMÀÇ È帧Á¦¾î ±â´É¿¡ µû¶ó) worker ¾²·¹µå¿¡ ÇÒ´çÇÏÀÚ¸¶ÀÚ ´Ù¸¥ ¿¬°áÀ» ¹Þ¾ÆµéÀÏ ¼ö ÀÖ´Ù. ÀÌ ±â·Ï¿¡´Â ³ª¿ÀÁö ¾ÊÁö¸¸, worker ¾²·¹µå°¡ ¹æ±Ý ¹ÞÀº ¿¬°áÀ» ó¸®ÇÏ´Â µ¿¾È ´ÙÀ½ accept(2)°¡ (¿äûÀÌ ¸Å¿ì ¸¹Àº °æ¿ì Ç×»ó) ÀϾ ¼ö ÀÖ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  fr  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/misc/index.html.tr.utf80000644000000000000500000001242413412755316017714 0ustar rootsrc Çeşitli Belgeler - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Çeşitli Belgeler

    Mevcut Diller:  en  |  es  |  fr  |  ko  |  tr  |  zh-cn 

    Aşağıda listelenen belgeler de Apache HTTP sunucusu geliştirme projesi kapsamındadır.

    Uyarı

    Aşağıdaki belgeler, Apache HTTP Sunucusunun 2.1 sürümünde yapılmış değişikliklere göre tam olarak güncellenmemiştir. Hala güncel kalmış bazı bilgiler olabilir, fakat siz yine de bu belgeleri kullanırken dikkatli olun.

    Başarım Arttırma İpuçları - Apache’ye İnce Ayar Çekilmesi

    Yüksek başarım elde etmek için Apache yapılandırmasında (çalışma anında ve derleme sırasında) yapılacaklar ile ilgili bazı bilgiler yanında Apache’de bazı şeylerin (bir şeyleri hızlandıran ve yavaşlatan şeylerin) yapılma ve yapılmama sebepleri açıklanmıştır.

    Güvenlik İpuçları

    Apache HTTP sitenizi güvenli kılmak için yapılacaklar ve yapılmayacaklar.

    İlgili Standartlar

    Bu belge Apache’nin uyacağı standartların bir çoğuna atıfta bulunmak amacıyla hazırlanmıştır.

    Parola Şifreleme Biçimleri

    Belgede, kimlik doğrulama amacıyla Apache tarafından desteklenen çeşitli şifreleme tekniklerinden bahsedilmiştir.

    Mevcut Diller:  en  |  es  |  fr  |  ko  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/misc/password_encryptions.html0000644000000000000500000000035413362070302021557 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: password_encryptions.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: password_encryptions.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/misc/perf-tuning.html.fr.utf80000644000000000000500000016232113412755316021027 0ustar rootsrc Optimisation des performances d'Apache - Serveur HTTP Apache Version 2.4
    <-

    Optimisation des performances d'Apache

    Langues Disponibles:  en  |  fr  |  ko  |  tr 

    Apache 2.x est un serveur web à usage général, conçu dans un but d'équilibre entre souplesse, portabilité et performances. Bien que non conçu dans le seul but d'établir une référence en la matière, Apache 2.x est capable de hautes performances dans de nombreuses situations du monde réel.

    Comparée à Apache 1.3, la version 2.x comporte de nombreuses optimisations supplémentaires permettant d'améliorer le débit du serveur et sa personnalisation. La plupart de ces améliorations sont activées par défaut. Cependant, certains choix de configuration à la compilation et à l'exécution peuvent affecter les performances de manière significative. Ce document décrit les options qu'un administrateur de serveur peut configurer pour améliorer les performances d'une installation d'Apache 2.x. Certaines de ces options de configuration permettent au démon httpd de mieux tirer parti des possibilités du matériel et du système d'exploitation, tandis que d'autres permettent à l'administrateur de privilégier la vitesse par rapport aux fonctionnalités.

    top

    Problèmes matériels et relatifs au système d'exploitation

    Le principal problème matériel qui affecte les performances du serveur web est la mémoire vive (RAM). Un serveur web ne devrait jamais avoir à utiliser le swap, car le swapping augmente le temps de réponse de chaque requête au delà du point que les utilisateurs considèrent comme "trop lent". Ceci incite les utilisateurs à cliquer sur "Stop", puis "Charger à nouveau", ce qui a pour effet d'augmenter encore la charge du serveur. Vous pouvez, et même devez définir la valeur de la directive MaxRequestWorkers de façon à ce que votre serveur ne lance pas un nombre de processus enfants tel qu'il commence à faire du swapping. La méthode pour y parvenir est simple : déterminez la taille de votre processus Apache standard en consultant votre liste de processus à l'aide d'un outil tel que top, et divisez votre quantité totale de mémoire disponible par cette taille, tout en gardant un espace suffisant pour les autres processus.

    Hormis ce réglage relatif à la mémoire, le reste est trivial : le processeur, la carte réseau et les disques doivent être suffisamment rapides, où "suffisamment rapide" doit être déterminé par l'expérience.

    Le choix du système d'exploitation dépend principalement du contexte local. Voici cependant quelques conseils qui se sont généralement avérés utiles :

    • Exécutez la dernière version stable et le niveau de patches le plus haut du système d'exploitation que vous avez choisi. De nombreux éditeurs de systèmes d'exploitation ont amélioré de manière significative les performances de leurs piles TCP et de leurs bibliothèques de thread ces dernières années.

    • Si votre système d'exploitation possède un appel système sendfile(2), assurez-vous d'avoir installé la version et/ou les patches nécessaires à son activation. (Pour Linux, par exemple, cela se traduit par Linux 2.4 ou plus. Pour les versions anciennes de Solaris 8, vous pouvez être amené à appliquer un patch.) Sur les systèmes où il est disponible, sendfile permet à Apache 2 de servir les contenus statiques plus rapidement, tout en induisant une charge CPU inférieure.

    top

    Optimisation de la configuration à l'exécution

    HostnameLookups et autres considérations à propos du DNS

    Avant Apache 1.3, la directive HostnameLookups était positionnée par défaut à On. Ce réglage augmente le temps de réponse de chaque requête car il entraîne une recherche DNS et le traitement de la requête ne pourra pas être achevé tant que cette recherche ne sera pas terminée. Avec Apache 1.3, ce réglage est défini par défaut à Off. Si vous souhaitez que les adresses dans vos fichiers journaux soient résolues en noms d'hôtes, utilisez le programme logresolve fourni avec Apache, ou un des nombreux paquets générateurs de rapports sur les journaux disponibles.

    Il est recommandé d'effectuer ce genre de traitement a posteriori de vos fichiers journaux sur une autre machine que celle qui héberge le serveur web en production, afin que cette activité n'affecte pas les performances du serveur.

    Si vous utilisez une directive Allowfrom domain ou Deny from domain (ce qui signifie que vous utilisez un nom d'hôte ou un nom de domaine à la place d'une adresse IP), vous devrez compter avec deux recherches DNS (une recherche inverse suivie d'une recherche directe pour s'assurer que l'adresse IP n'a pas été usurpée). C'est pourquoi il est préférable, pour améliorer les performances, d'utiliser des adresses IP plutôt que des noms lorsqu'on utilise ces directives, du moins chaque fois que c'est possible.

    Notez qu'il est possible de modifier la portée des directives, en les plaçant par exemple à l'intérieur d'une section <Location "/server-status">. Les recherches DNS ne seront alors effectuées que pour les requêtes qui satisfont aux critères. Voici un exemple qui désactive les recherches DNS sauf pour les fichiers .html et .cgi :

    HostnameLookups off
    <Files ~ "\.(html|cgi)$">
      HostnameLookups on
    </Files>

    Mais même dans ce cas, si vous n'avez besoin de noms DNS que dans certains CGIs, vous pouvez effectuer l'appel à gethostbyname dans les CGIs spécifiques qui en ont besoin.

    FollowSymLinks et SymLinksIfOwnerMatch

    Chaque fois que la ligne Options FollowSymLinks sera absente, ou que la ligne Options SymLinksIfOwnerMatch sera présente dans votre espace d'adressage, Apache devra effectuer des appels système supplémentaires pour vérifier la présence de liens symboliques. Un appel supplémentaire par élément du chemin du fichier. Par exemple, si vous avez :

    DocumentRoot "/www/htdocs"
    <Directory "/">
      Options SymLinksIfOwnerMatch
    </Directory>

    et si une requête demande l'URI /index.html, Apache effectuera un appel à lstat(2) pour /www, /www/htdocs, et /www/htdocs/index.html. Les résultats de ces appels à lstat ne sont jamais mis en cache, ils devront donc être générés à nouveau pour chaque nouvelle requête. Si vous voulez absolument vérifier la sécurité des liens symboliques, vous pouvez utiliser une configuration du style :

    DocumentRoot "/www/htdocs"
    <Directory "/">
      Options FollowSymLinks
    </Directory>
    
    <Directory "/www/htdocs">
      Options -FollowSymLinks +SymLinksIfOwnerMatch
    </Directory>

    Ceci évite au moins les vérifications supplémentaires pour le chemin défini par DocumentRoot. Notez que vous devrez ajouter des sections similaires si vous avez des chemins définis par les directives Alias ou RewriteRule en dehors de la racine de vos documents. Pour améliorer les performances, et supprimer toute protection des liens symboliques, ajoutez l'option FollowSymLinks partout, et n'utilisez jamais l'option SymLinksIfOwnerMatch.

    AllowOverride

    Dans toute partie de votre espace d'adressage où vous autoriserez la surcharge de la configuration (en général à l'aide de fichiers .htaccess), Apache va tenter d'ouvrir .htaccess pour chaque élément du chemin du fichier demandé. Par exemple, si vous avez :

    DocumentRoot "/www/htdocs"
    <Directory "/">
      AllowOverride all
    </Directory>

    et qu'une requête demande l'URI /index.html, Apache tentera d'ouvrir /.htaccess, /www/.htaccess, et /www/htdocs/.htaccess. Les solutions sont similaires à celles évoquées précédemment pour Options FollowSymLinks. Pour améliorer les performances, utilisez AllowOverride None pour tous les niveaux de votre espace d'adressage.

    Négociation

    Dans la mesure du possible, évitez toute négociation de contenu si vous tenez au moindre gain en performances. En pratique toutefois, les bénéfices de la négociation l'emportent souvent sur la diminution des performances. Il y a cependant un cas dans lequel vous pouvez accélérer le serveur. Au lieu d'utiliser une directive générique comme :

    DirectoryIndex index

    utilisez une liste explicite d'options :

    DirectoryIndex index.cgi index.pl index.shtml index.html

    où vous placez le choix courant en première position.

    Notez aussi que créer explicitement un fichier de correspondances de type fournit de meilleures performances que l'utilisation des MultiViews, car les informations nécessaires peuvent être simplement obtenues en lisant ce fichier, sans avoir à parcourir le répertoire à la recherche de types de fichiers.

    Par conséquent, si la négociation de contenu est nécessaire pour votre site, préférez les fichiers de correspondances de type aux directives Options MultiViews pour mener à bien cette négociation. Se référer au document sur la Négociation de contenu pour une description complète des méthodes de négociation, et les instructions permettant de créer des fichiers de correspondances de type.

    Transfert en mémoire

    Dans les situations où Apache 2.x doit consulter le contenu d'un fichier en train d'être servi - par exemple à l'occasion du traitement d'une inclusion côté serveur - il transfère en général le fichier en mémoire si le système d'exploitation supporte une forme quelconque de mmap(2).

    Sur certains systèmes, ce transfert en mémoire améliore les performances. Dans certains cas, ce transfert peut toutefois les dégrader et même diminuer la stabilité du démon httpd :

    • Dans certains systèmes d'exploitation, mmap devient moins efficace que read(2) quand le nombre de processeurs augmente. Sur les serveurs multiprocesseurs sous Solaris, par exemple, Apache 2.x sert parfois les fichiers consultés par le serveur plus rapidement quand mmap est désactivé.

    • Si vous transférez en mémoire un fichier localisé dans un système de fichiers monté par NFS, et si un processus sur une autre machine cliente NFS supprime ou tronque le fichier, votre processus peut rencontrer une erreur de bus la prochaine fois qu'il essaiera d'accéder au contenu du fichier en mémoire.

    Pour les installations où une de ces situations peut se produire, vous devez utiliser EnableMMAP off afin de désactiver le transfert en mémoire des fichiers servis. (Note : il est possible de passer outre cette directive au niveau de chaque répertoire.)

    Sendfile

    Dans les cas où Apache peut se permettre d'ignorer le contenu du fichier à servir - par exemple, lorsqu'il sert un contenu de fichier statique - il utilise en général le support sendfile du noyau si le système d'exploitation supporte l'opération sendfile(2).

    Sur la plupart des plateformes, l'utilisation de sendfile améliore les performances en éliminant les mécanismes de lecture et envoi séparés. Dans certains cas cependant, l'utilisation de sendfile peut nuire à la stabilité du démon httpd :

    • Certaines plateformes peuvent présenter un support de sendfile défaillant que la construction du système n'a pas détecté, en particulier si les binaires ont été construits sur une autre machine et transférés sur la machine où le support de sendfile est défaillant.

    • Dans le cas d'un système de fichiers monté sous NFS, le noyau peut s'avérer incapable de servir les fichiers réseau de manière fiable depuis son propre cache.

    Pour les installations où une de ces situations peut se produire, vous devez utiliser EnableSendfile off afin de désactiver la mise à disposition de contenus de fichiers par sendfile. (Note : il est possible de passer outre cette directive au niveau de chaque répertoire.)

    Process Creation

    Avant Apache 1.3, les directives MinSpareServers, MaxSpareServers, et StartServers avaient des effets drastiques sur les performances de référence. En particulier, Apache avait besoin d'un délai de "montée en puissance" afin d'atteindre un nombre de processus enfants suffisant pour supporter la charge qui lui était appliquée. Après le lancement initial des processus enfants par StartServers, seulement un processus enfant par seconde était créé afin d'atteindre la valeur de la directive MinSpareServers. Ainsi, un serveur accédé par 100 clients simultanés et utilisant la valeur par défaut de 5 pour la directive StartServers, nécessitait environ 95 secondes pour lancer suffisamment de processus enfants permettant de faire face à la charge. Ceci fonctionne en pratique pour les serveurs en production, car ils sont rarement redémarrés. Ce n'est cependant pas le cas pour les tests de référence (benchmarks) où le serveur ne fonctionne que 10 minutes.

    La règle "un processus par seconde" avait été implémentée afin d'éviter l'enlisement de la machine dans le démarrage de nouveaux processus enfants. Pendant que la machine est occupée à lancer des processus enfants, elle ne peut pas traiter les requêtes. Mais cette règle impactait tellement la perception des performances d'Apache qu'elle a dû être remplacée. A partir d'Apache 1.3, le code a assoupli la règle "un processus par seconde". Il va en lancer un, attendre une seconde, puis en lancer deux, attendre une seconde, puis en lancer quatre et ainsi de suite jusqu'à lancer 32 processus. Il s'arrêtera lorsque le nombre de processus aura atteint la valeur définie par la directive MinSpareServers.

    Ceci s'avère suffisamment réactif pour pouvoir en général se passer de manipuler les valeurs des directives MinSpareServers, MaxSpareServers et StartServers. Lorsque plus de 4 processus enfants sont lancés par seconde, un message est émis vers le journal des erreurs. Si vous voyez apparaître souvent ce genre de message, vous devez vous pencher sur ces réglages. Pour vous guider, utilisez les informations délivrées par le module mod_status.

    À mettre en relation avec la création de processus, leur destruction est définie par la valeur de la directive MaxConnectionsPerChild. Sa valeur par défaut est 0, ce qui signifie qu'il n'y a pas de limite au nombre de connexions qu'un processus enfant peut traiter. Si votre configuration actuelle a cette directive réglée à une valeur très basse, de l'ordre de 30, il est conseillé de l'augmenter de manière significative. Si vous utilisez SunOs ou une ancienne version de Solaris, utilisez une valeur de l'ordre de 10000 à cause des fuites de mémoire.

    Lorsqu'ils sont en mode "keep-alive", les processus enfants sont maintenus et ne font rien sinon attendre la prochaine requête sur la connexion déjà ouverte. La valeur par défaut de 5 de la directive KeepAliveTimeout tend à minimiser cet effet. Il faut trouver le bon compromis entre la bande passante réseau et les ressources du serveur. En aucun cas vous ne devez choisir une valeur supérieure à 60 seconds, car la plupart des bénéfices sont alors perdus.

    top

    Optimisation de la configuration à la compilation

    Choisir un Module Multi-Processus (MPM)

    Apache 2.x supporte les modèles simultanés enfichables, appelés Modules Multi-Processus (MPMs). Vous devez choisir un MPM au moment de la construction d'Apache. Certaines plateformes ont des modules MPM spécifiques : mpm_netware, mpmt_os2 et mpm_winnt. Sur les systèmes de type Unix, vous avez le choix entre un grand nombre de modules MPM. Le choix du MPM peut affecter la vitesse et l'évolutivité du démon httpd :

    • Le MPM worker utilise plusieurs processus enfants possédant chacun de nombreux threads. Chaque thread gère une seule connexion à la fois. Worker est en général un bon choix pour les serveurs présentant un traffic important car il possède une empreinte mémoire plus petite que le MPM prefork.
    • Comme le MPM Worker, le MPM event utilise les threads, mais il a été conçu pour traiter davantage de requêtes simultanément en confiant une partie du travail à des threads de support, ce qui permet aux threads principaux de traiter de nouvelles requêtes.
    • Le MPM prefork utilise plusieurs processus enfants possédant chacun un seul thread. Chaque processus gère une seule connexion à la fois. Sur de nombreux systèmes, prefork est comparable en matière de vitesse à worker, mais il utilise plus de mémoire. De par sa conception sans thread, prefork présente des avantages par rapport à worker dans certaines situations : il peut être utilisé avec les modules tiers qui ne supportent pas le threading, et son débogage est plus aisé sur les platesformes présentant un support du débogage des threads rudimentaire.

    Pour plus d'informations sur ces deux MPMs et les autres, veuillez vous référer à la documentation sur les MPM.

    Modules

    Comme le contrôle de l'utilisation de la mémoire est très important en matière de performance, il est conseillé d'éliminer les modules que vous n'utilisez pas vraiment. Si vous avez construit ces modules en tant que DSOs, leur élimination consiste simplement à commenter la directive LoadModule associée à ce module. Ceci vous permet de vérifier si votre site fonctionne toujours après la suppression de tel ou tel module.

    Par contre, si les modules que vous voulez supprimer sont liés statiquement à votre binaire Apache, vous devrez recompiler ce dernier afin de pouvoir les éliminer.

    La question qui découle de ce qui précède est évidemment de savoir de quels modules vous avez besoin et desquels vous pouvez vous passer. La réponse sera bien entendu différente d'un site web à l'autre. Cependant, la liste minimale de modules nécessaire à la survie de votre site contiendra certainement mod_mime, mod_dir et mod_log_config. mod_log_config est bien entendu optionnel puisque vous pouvez faire fonctionner un site web en se passant de fichiers journaux ; ceci est cependant déconseillé.

    Opérations atomiques

    Certains modules, à l'instar de mod_cache et des versions de développement récentes du MPM worker, utilisent l'API atomique d'APR. Cette API propose des opérations atomiques que l'on peut utiliser pour alléger la synchronisation des threads.

    Par défaut, APR implémente ces opérations en utilisant les mécanismes les plus efficaces disponibles sur chaque plateforme cible (Système d'exploitation et processeur). De nombreux processeurs modernes, par exemple, possèdent une instruction qui effectue une opération atomique de type comparaison et échange ou compare-and-swap (CAS) au niveau matériel. Sur certaines platesformes cependant, APR utilise par défaut une implémentation de l'API atomique plus lente, basée sur les mutex, afin d'assurer la compatibilité avec les anciens modèles de processeurs qui ne possèdent pas ce genre d'instruction. Si vous construisez Apache pour une de ces platesformes, et ne prévoyez de l'exécuter que sur des processeurs récents, vous pouvez sélectionner une implémentation atomique plus rapide à la compilation en utilisant l'option --enable-nonportable-atomics du script configure :

    ./buildconf
    ./configure --with-mpm=worker --enable-nonportable-atomics=yes

    L'option --enable-nonportable-atomics concerne les platesformes suivantes :

    • Solaris sur SPARC
      Sur Solaris/SPARC, APR utilise par défaut les opérations atomiques basées sur les mutex. Cependant, si vous ajoutez l'option --enable-nonportable-atomics au script configure, APR génère un code qui utilise le code opération SPARC v8plus pour des opérations de compare-and-swap matériel plus rapides. Si vous utilisez cette option de configure avec Apache, les opérations atomiques seront plus efficaces (permettant d'alléger la charge du processeur et un plus haut niveau de simultanéité), mais l'exécutable produit ne fonctionnera que sur les processeurs UltraSPARC.
    • Linux sur x86
      Sous Linux, APR utilise par défaut les opérations atomiques basées sur les mutex. Cependant, si vous ajoutez l'option --enable-nonportable-atomics au script configure, APR générera un code qui utilise un code d'opération du 486 pour des opérations de compare-and-swap matériel plus rapides. Le code résultant est plus efficace en matière d'opérations atomiques, mais l'exécutable produit ne fonctionnera que sur des processeurs 486 et supérieurs (et non sur des 386).

    Module mod_status et ExtendedStatus On

    Si vous incluez le module mod_status à la construction d'Apache et ajoutez ExtendedStatus On à sa configuration, Apache va effectuer pour chaque requête deux appels à gettimeofday(2) (ou times(2) selon votre système d'exploitation), et (pour les versions antérieures à 1.3) de nombreux appels supplémentaires à time(2). Tous ces appels sont effectués afin que le rapport de statut puisse contenir des indications temporelles. Pour améliorer les performances, utilisez ExtendedStatus off (qui est le réglage par défaut).

    accept Serialization - points de connexion à un programme (sockets) multiples

    Mise en garde :

    Cette section n'a pas été totalement mise à jour car elle ne tient pas compte des changements intervenus dans la version 2.x du Serveur HTTP Apache. Certaines informations sont encore pertinentes, il vous est cependant conseillé de les utiliser avec prudence.

    Ce qui suit est une brève discussion à propos de l'API des sockets Unix. Supposons que votre serveur web utilise plusieurs directives Listen afin d'écouter plusieurs ports ou de multiples adresses. Afin de tester chaque socket pour voir s'il a une connexion en attente, Apache utilise select(2). select(2) indique si un socket a zéro ou au moins une connexion en attente. Le modèle d'Apache comporte plusieurs processus enfants, et tous ceux qui sont inactifs testent la présence de nouvelles connexions au même moment. Une implémentation rudimentaire de ceci pourrait ressembler à l'exemple suivant (ces exemples ne sont pas extraits du code d'Apache, ils ne sont proposés qu'à des fins pédagogiques) :

            for (;;) {
              for (;;) {
                fd_set accept_fds;
    
                FD_ZERO (&accept_fds);
                for (i = first_socket; i <= last_socket; ++i) {
                  FD_SET (i, &accept_fds);
                }
                rc = select (last_socket+1, &accept_fds, NULL, NULL, NULL);
                if (rc < 1) continue;
                new_connection = -1;
                for (i = first_socket; i <= last_socket; ++i) {
                  if (FD_ISSET (i, &accept_fds)) {
                    new_connection = accept (i, NULL, NULL);
                    if (new_connection != -1) break;
                  }
                }
                if (new_connection != -1) break;
              }
              process_the(new_connection);
            }

    Mais cette implémentation rudimentaire présente une sérieuse lacune. Rappelez-vous que les processus enfants exécutent cette boucle au même moment ; ils vont ainsi bloquer sur select s'ils se trouvent entre deux requêtes. Tous ces processus bloqués vont se réactiver et sortir de select quand une requête va apparaître sur un des sockets (le nombre de processus enfants qui se réactivent varie en fonction du système d'exploitation et des réglages de synchronisation). Ils vont alors tous entrer dans la boucle et tenter un "accept" de la connexion. Mais seulement un d'entre eux y parviendra (en supposant qu'il ne reste q'une seule connexion en attente), les autres vont se bloquer au niveau de accept. Ceci verrouille vraiment ces processus de telle sorte qu'ils ne peuvent plus servir de requêtes que par cet unique socket, et il en sera ainsi jusqu'à ce que suffisamment de nouvelles requêtes apparaissent sur ce socket pour les réactiver tous. Cette lacune a été documentée pour la première fois dans PR#467. Il existe au moins deux solutions.

    La première consiste à rendre les sockets non blocants. Dans ce cas, accept ne bloquera pas les processus enfants, et ils pourront continuer à s'exécuter immédiatement. Mais ceci consomme des ressources processeur. Supposons que vous ayez dix processus enfants inactifs dans select, et qu'une connexion arrive. Neuf des dix processus vont se réactiver, tenter un accept de la connexion, échouer, et boucler dans select, tout en n'ayant finalement rien accompli. Pendant ce temps, aucun de ces processus ne traite les requêtes qui arrivent sur d'autres sockets jusqu'à ce qu'ils retournent dans select. Finalement, cette solution ne semble pas très efficace, à moins que vous ne disposiez d'autant de processeurs inactifs (dans un serveur multiprocesseur) que de processus enfants inactifs, ce qui n'est pas une situation très courante.

    Une autre solution, celle qu'utilise Apache, consiste à sérialiser les entrées dans la boucle interne. La boucle ressemble à ceci (les différences sont mises en surbrillance) :

            for (;;) {
              accept_mutex_on ();
              for (;;) {
                fd_set accept_fds;
                
                FD_ZERO (&accept_fds);
                for (i = first_socket; i <= last_socket; ++i) {
                  FD_SET (i, &accept_fds);
                }
                rc = select (last_socket+1, &accept_fds, NULL, NULL, NULL);
                if (rc < 1) continue;
                new_connection = -1;
                for (i = first_socket; i <= last_socket; ++i) {
                  if (FD_ISSET (i, &accept_fds)) {
                    new_connection = accept (i, NULL, NULL);
                    if (new_connection != -1) break;
                  }
                }
                if (new_connection != -1) break;
              }
              accept_mutex_off ();
              process the new_connection;
            }

    Les fonctions accept_mutex_on et accept_mutex_off implémentent un sémaphore permettant une exclusion mutuelle. Un seul processus enfant à la fois peut posséder le mutex. Plusieurs choix se présentent pour implémenter ces mutex. Ce choix est défini dans src/conf.h (versions antérieures à 1.3) ou src/include/ap_config.h (versions 1.3 ou supérieures). Certaines architectures ne font pas ce choix du mode de verrouillage ; l'utilisation de directives Listen multiples sur ces architectures est donc peu sûr.

    La directive Mutex permet de modifier l'implémentation du mutex mpm-accept à l'exécution. Des considérations spécifiques aux différentes implémentations de mutex sont documentées avec cette directive.

    Une autre solution qui a été imaginée mais jamais implémentée, consiste à sérialiser partiellement la boucle -- c'est à dire y faire entrer un certain nombre de processus. Ceci ne présenterait un intérêt que sur les machines multiprocesseurs où plusieurs processus enfants peuvent s'exécuter simultanément, et encore, la sérialisation ne tire pas vraiment parti de toute la bande passante. C'est une possibilité d'investigation future, mais demeure de priorité basse car les serveurs web à architecture hautement parallèle ne sont pas la norme.

    Pour bien faire, vous devriez faire fonctionner votre serveur sans directives Listen multiples si vous visez les performances les plus élevées. Mais lisez ce qui suit.

    accept Serialization - point de connexion à un programme (sockets) unique

    Ce qui précède convient pour les serveurs à sockets multiples, mais qu'en est-il des serveurs à socket unique ? En théorie, ils ne devraient pas rencontrer les mêmes problèmes car tous les processus enfants peuvent se bloquer dans accept(2) jusqu'à ce qu'une connexion arrive, et ils ne sont pas utilisés à ne rien faire. En pratique, ceci dissimule un même comportement de bouclage discuté plus haut dans la solution non-blocante. De la manière dont sont implémentées les piles TCP, le noyau réactive véritablement tous les processus bloqués dans accept quand une seule connexion arrive. Un de ces processus prend la connexion en compte et retourne dans l'espace utilisateur, les autres bouclant dans l'espace du noyau et se désactivant quand ils s'aperçoivent qu'il n'y a pas de connexion pour eux. Ce bouclage est invisible depuis le code de l'espace utilisateur, mais il est quand-même présent. Ceci peut conduire à la même augmentation de charge à perte que la solution non blocante au cas des sockets multiples peut induire.

    Pour cette raison, il apparaît que de nombreuses architectures se comportent plus "proprement" si on sérialise même dans le cas d'une socket unique. Il s'agit en fait du comportement par défaut dans la plupart des cas. Des expériences poussées sous Linux (noyau 2.0.30 sur un biprocesseur Pentium pro 166 avec 128 Mo de RAM) ont montré que la sérialisation d'une socket unique provoque une diminution inférieure à 3% du nombre de requêtes par secondes par rapport au traitement non sérialisé. Mais le traitement non sérialisé des sockets uniques induit un temps de réponse supplémentaire de 100 ms pour chaque requête. Ce temps de réponse est probablement provoqué par une limitation sur les lignes à haute charge, et ne constitue un problème que sur les réseaux locaux. Si vous voulez vous passer de la sérialisation des sockets uniques, vous pouvez définir SINGLE_LISTEN_UNSERIALIZED_ACCEPT et les serveurs à socket unique ne pratiqueront plus du tout la sérialisation.

    Fermeture en prenant son temps (Lingering close)

    Comme discuté dans draft-ietf-http-connection-00.txt section 8, pour implémenter de manière fiable le protocole, un serveur HTTP doit fermer les deux directions d'une communication indépendamment (rappelez-vous qu'une connexion TCP est bidirectionnelle, chaque direction étant indépendante de l'autre).

    Quand cette fonctionnalité fut ajoutée à Apache, elle causa une avalanche de problèmes sur plusieurs versions d'Unix à cause d'une implémentation à courte vue. La spécification TCP ne précise pas que l'état FIN_WAIT_2 possède un temps de réponse mais elle ne l'exclut pas. Sur les systèmes qui n'introduisent pas ce temps de réponse, Apache 1.2 induit de nombreux blocages définitifs de socket dans l'état FIN_WAIT_2. On peut eviter ceci dans de nombreux cas tout simplement en mettant à jour TCP/IP avec le dernier patch mis à disposition par le fournisseur. Dans les cas où le fournisseur n'a jamais fourni de patch (par exemple, SunOS4 -- bien que les utilisateurs possédant une license source puissent le patcher eux-mêmes), nous avons décidé de désactiver cette fonctionnalité.

    Il y a deux méthodes pour arriver à ce résultat. La première est l'option de socket SO_LINGER. Mais le sort a voulu que cette solution ne soit jamais implémentée correctement dans la plupart des piles TCP/IP. Et même dans les rares cas où cette solution a été implémentée correctement (par exemple Linux 2.0.31), elle se montre beaucoup plus gourmande (en temps processeur) que la solution suivante.

    Pour la plus grande partie, Apache implémente cette solution à l'aide d'une fonction appelée lingering_close (définie dans http_main.c). La fonction ressemble approximativement à ceci :

            void lingering_close (int s)
            {
              char junk_buffer[2048];
              
              /* shutdown the sending side */
              shutdown (s, 1);
    
              signal (SIGALRM, lingering_death);
              alarm (30);
    
              for (;;) {
                select (s for reading, 2 second timeout);
                if (error) break;
                if (s is ready for reading) {
                  if (read (s, junk_buffer, sizeof (junk_buffer)) <= 0) {
                    break;
                  }
                  /* just toss away whatever is here */
                }
              }
              
              close (s);
            }

    Ceci ajoute naturellement un peu de charge à la fin d'une connexion, mais s'avère nécessaire pour une implémentation fiable. Comme HTTP/1.1 est de plus en plus présent et que toutes les connexions sont persistentes, la charge sera amortie par la multiplicité des requêtes. Si vous voulez jouer avec le feu en désactivant cette fonctionnalité, vous pouvez définir NO_LINGCLOSE, mais c'est fortement déconseillé. En particulier, comme les connexions persistantes en pipeline de HTTP/1.1 commencent à être utilisées, lingering_close devient une absolue nécessité (et les connexions en pipeline sont plus rapides ; vous avez donc tout intérêt à les supporter).

    Fichier tableau de bord (Scoreboard file)

    Les processus parent et enfants d'Apache communiquent entre eux à l'aide d'un objet appelé "Tableau de bord" (Scoreboard). Idéalement, cet échange devrait s'effectuer en mémoire partagée. Pour les systèmes d'exploitation auxquels nous avons eu accès, ou pour lesquels nous avons obtenu des informations suffisamment détaillées pour effectuer un portage, cet échange est en général implémenté en utilisant la mémoire partagée. Pour les autres, on utilise par défaut un fichier d'échange sur disque. Le fichier d'échange sur disque est non seulement lent, mais aussi peu fiable (et propose moins de fonctionnalités). Recherchez dans le fichier src/main/conf.h correspondant à votre architecture soit USE_MMAP_SCOREBOARD, soit USE_SHMGET_SCOREBOARD. La définition de l'un des deux (ainsi que leurs compagnons respectifs HAVE_MMAP et HAVE_SHMGET), active le code fourni pour la mémoire partagée. Si votre système propose une autre solution pour la gestion de la mémoire partagée, éditez le fichier src/main/http_main.c et ajoutez la portion de code nécessaire pour pouvoir l'utiliser dans Apache (Merci de nous envoyer aussi le patch correspondant).

    Note à caractère historique : le portage d'Apache sous Linux n'utilisait pas la mémoire partagée avant la version 1.2. Ceci entraînait un comportement très rudimentaire et peu fiable des versions antérieures d'Apache sous Linux.

    DYNAMIC_MODULE_LIMIT

    Si vous n'avez pas l'intention d'utiliser les modules chargés dynamiquement (ce qui est probablement le cas si vous êtes en train de lire ce document afin de personnaliser votre serveur en recherchant le moindre des gains en performances), vous pouvez ajouter la définition -DDYNAMIC_MODULE_LIMIT=0 à la construction de votre serveur. Ceci aura pour effet de libérer la mémoire RAM allouée pour le chargement dynamique des modules.

    top

    Appendice : Analyse détaillée d'une trace

    Voici la trace d'un appel système d'Apache 2.0.38 avec le MPM worker sous Solaris 8. Cette trace a été collectée à l'aide de la commande :

    truss -l -p httpd_child_pid.

    L'option -l demande à truss de tracer l'ID du LWP (lightweight process--la version de Solaris des threads niveau noyau) qui invoque chaque appel système.

    Les autres systèmes peuvent proposer des utilitaires de traçage des appels système différents comme strace, ktrace, ou par. Ils produisent cependant tous une trace similaire.

    Dans cette trace, un client a demandé un fichier statique de 10 ko au démon httpd. Le traçage des requêtes pour des contenus non statiques ou comportant une négociation de contenu a une présentation différente (et même assez laide dans certains cas).

    /67:    accept(3, 0x00200BEC, 0x00200C0C, 1) (sleeping...)
    /67:    accept(3, 0x00200BEC, 0x00200C0C, 1)            = 9

    Dans cette trace, le thread à l'écoute s'exécute à l'intérieur de LWP #67.

    Notez l'absence de la sérialisation d'accept(2). Sur cette plateforme spécifique, le MPM worker utilise un accept non sérialisé par défaut sauf s'il est en écoute sur des ports multiples.
    /65:    lwp_park(0x00000000, 0)                         = 0
    /67:    lwp_unpark(65, 1)                               = 0

    Après avoir accepté la connexion, le thread à l'écoute réactive un thread du worker pour effectuer le traitement de la requête. Dans cette trace, le thread du worker qui traite la requête est associé à LWP #65.

    /65:    getsockname(9, 0x00200BA4, 0x00200BC4, 1)       = 0

    Afin de pouvoir implémenter les hôtes virtuels, Apache doit connaître l'adresse du socket local utilisé pour accepter la connexion. On pourrait supprimer cet appel dans de nombreuses situations (par exemple dans le cas où il n'y a pas d'hôte virtuel ou dans le cas où les directives Listen contiennent des adresses sans caractères de substitution). Mais aucun effort n'a été accompli à ce jour pour effectuer ces optimisations.

    /65:    brk(0x002170E8)                                 = 0
    /65:    brk(0x002190E8)                                 = 0

    L'appel brk(2) alloue de la mémoire dans le tas. Ceci est rarement visible dans une trace d'appel système, car le démon httpd utilise des allocateurs mémoire de son cru (apr_pool et apr_bucket_alloc) pour la plupart des traitements de requêtes. Dans cette trace, le démon httpd vient juste de démarrer, et il doit appeler malloc(3) pour réserver les blocs de mémoire nécessaires à la création de ses propres allocateurs de mémoire.

    /65:    fcntl(9, F_GETFL, 0x00000000)                   = 2
    /65:    fstat64(9, 0xFAF7B818)                          = 0
    /65:    getsockopt(9, 65535, 8192, 0xFAF7B918, 0xFAF7B910, 2190656) = 0
    /65:    fstat64(9, 0xFAF7B818)                          = 0
    /65:    getsockopt(9, 65535, 8192, 0xFAF7B918, 0xFAF7B914, 2190656) = 0
    /65:    setsockopt(9, 65535, 8192, 0xFAF7B918, 4, 2190656) = 0
    /65:    fcntl(9, F_SETFL, 0x00000082)                   = 0

    Ensuite, le thread de worker passe la connexion du client (descripteur de fichier 9) en mode non blocant. Les appels setsockopt(2) et getsockopt(2) constituent un effet de bord de la manière dont la libc de Solaris utilise fcntl(2) pour les sockets.

    /65:    read(9, " G E T   / 1 0 k . h t m".., 8000)     = 97

    Le thread de worker lit la requête du client.

    /65:    stat("/var/httpd/apache/httpd-8999/htdocs/10k.html", 0xFAF7B978) = 0
    /65:    open("/var/httpd/apache/httpd-8999/htdocs/10k.html", O_RDONLY) = 10

    Ce démon httpd a été configuré avec les options Options FollowSymLinks et AllowOverride None. Il n'a donc ni besoin d'appeler lstat(2) pour chaque répertoire du chemin du fichier demandé, ni besoin de vérifier la présence de fichiers .htaccess. Il appelle simplement stat(2) pour vérifier d'une part que le fichier existe, et d'autre part que c'est un fichier régulier, et non un répertoire.

    /65:    sendfilev(0, 9, 0x00200F90, 2, 0xFAF7B53C)      = 10269

    Dans cet exemple, le démon httpd peut envoyer l'en-tête de la réponse HTTP et le fichier demandé à l'aide d'un seul appel système sendfilev(2). La sémantique de sendfile varie en fonction des systèmes d'exploitation. Sur certains autres systèmes, il faut faire un appel à write(2) ou writev(2) pour envoyer les en-têtes avant d'appeler sendfile(2).

    /65:    write(4, " 1 2 7 . 0 . 0 . 1   -  ".., 78)      = 78

    Cet appel à write(2) enregistre la requête dans le journal des accès. Notez qu'une des choses manquant à cette trace est un appel à time(2). A la différence d'Apache 1.3, Apache 2.x utilise gettimeofday(3) pour consulter l'heure. Sur certains systèmes d'exploitation, comme Linux ou Solaris, gettimeofday est implémenté de manière optimisée de telle sorte qu'il consomme moins de ressources qu'un appel système habituel.

    /65:    shutdown(9, 1, 1)                               = 0
    /65:    poll(0xFAF7B980, 1, 2000)                       = 1
    /65:    read(9, 0xFAF7BC20, 512)                        = 0
    /65:    close(9)                                        = 0

    Le thread de worker effectue une fermeture "en prenant son temps" (lingering close) de la connexion.

    /65:    close(10)                                       = 0
    /65:    lwp_park(0x00000000, 0)         (sleeping...)

    Enfin, le thread de worker ferme le fichier qu'il vient de délivrer et se bloque jusqu'à ce que le thread en écoute lui assigne une autre connexion.

    /67:    accept(3, 0x001FEB74, 0x001FEB94, 1) (sleeping...)

    Pendant ce temps, le thread à l'écoute peut accepter une autre connexion à partir du moment où il a assigné la connexion présente à un thread de worker (selon une certaine logique de contrôle de flux dans le MPM worker qui impose des limites au thread à l'écoute si tous les threads de worker sont occupés). Bien que cela n'apparaisse pas dans cette trace, l'accept(2) suivant peut (et le fait en général, en situation de charge élevée) s'exécuter en parallèle avec le traitement de la connexion qui vient d'être acceptée par le thread de worker.

    Langues Disponibles:  en  |  fr  |  ko  |  tr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/misc/index.html.es0000644000000000000500000001300713412755316017007 0ustar rootsrc Documentación Variada de Apache - Servidor HTTP Apache Versión 2.4
    <-

    Documentación Variada de Apache

    Idiomas disponibles:  en  |  es  |  fr  |  ko  |  tr  |  zh-cn 

    A continuación verá una lista de páginas adicionales de documentación que aplican al proyecto de desarrollo del servidor web Apache.

    Atención

    Los documentos no han sido completamente actualizados para tener en cuenta los cambios realizados en la versión 2.1 del Servidor Apache HTTP. Alguna información todavía puede ser relevante, por favor revísela con cuidado.

    Notas de Rendimiento - Mejorando Apache

    Notas sobre como configurar (en tiempo real y tiempo de compilación) Apache para el mejor rendimiento. Notas explicando por qué Apache hace ciertas cosas y por qué no hace otras (que le hacen ser más lento/rápido).

    Escalado de Rendimiento

    Alguna configuración de fácil acceso y opciones de mejora para Apache httpd 2.2 y 2.4 así como herramientas de motorización.

    Consejos de Seguridad

    Algunas de las cosas que se deben y no deben hacer para mantener seguro su sitio web Apache.

    Estándares Relevantes

    Este documento actúa como una página de referencia para la mayor parte de estándares relevantes que Apache sigue.

    Formatos de Cifrado de Contraseñas

    Discusión de los distintos cifrados soportados por Apache para el proceso de autenticación.

    Idiomas disponibles:  en  |  es  |  fr  |  ko  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/misc/security_tips.html0000644000000000000500000000063313362070302020166 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: security_tips.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: security_tips.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: security_tips.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: security_tips.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/misc/security_tips.html.en0000644000000000000500000006520713412755316020612 0ustar rootsrc Security Tips - Apache HTTP Server Version 2.4
    <-

    Security Tips

    Available Languages:  en  |  fr  |  ko  |  tr 

    Some hints and tips on security issues in setting up a web server. Some of the suggestions will be general, others specific to Apache.

    top

    Keep up to Date

    The Apache HTTP Server has a good record for security and a developer community highly concerned about security issues. But it is inevitable that some problems -- small or large -- will be discovered in software after it is released. For this reason, it is crucial to keep aware of updates to the software. If you have obtained your version of the HTTP Server directly from Apache, we highly recommend you subscribe to the Apache HTTP Server Announcements List where you can keep informed of new releases and security updates. Similar services are available from most third-party distributors of Apache software.

    Of course, most times that a web server is compromised, it is not because of problems in the HTTP Server code. Rather, it comes from problems in add-on code, CGI scripts, or the underlying Operating System. You must therefore stay aware of problems and updates with all the software on your system.

    top

    Denial of Service (DoS) attacks

    All network servers can be subject to denial of service attacks that attempt to prevent responses to clients by tying up the resources of the server. It is not possible to prevent such attacks entirely, but you can do certain things to mitigate the problems that they create.

    Often the most effective anti-DoS tool will be a firewall or other operating-system configurations. For example, most firewalls can be configured to restrict the number of simultaneous connections from any individual IP address or network, thus preventing a range of simple attacks. Of course this is no help against Distributed Denial of Service attacks (DDoS).

    There are also certain Apache HTTP Server configuration settings that can help mitigate problems:

    • The RequestReadTimeout directive allows to limit the time a client may take to send the request.
    • The TimeOut directive should be lowered on sites that are subject to DoS attacks. Setting this to as low as a few seconds may be appropriate. As TimeOut is currently used for several different operations, setting it to a low value introduces problems with long running CGI scripts.
    • The KeepAliveTimeout directive may be also lowered on sites that are subject to DoS attacks. Some sites even turn off the keepalives completely via KeepAlive, which has of course other drawbacks on performance.
    • The values of various timeout-related directives provided by other modules should be checked.
    • The directives LimitRequestBody, LimitRequestFields, LimitRequestFieldSize, LimitRequestLine, and LimitXMLRequestBody should be carefully configured to limit resource consumption triggered by client input.
    • On operating systems that support it, make sure that you use the AcceptFilter directive to offload part of the request processing to the operating system. This is active by default in Apache httpd, but may require reconfiguration of your kernel.
    • Tune the MaxRequestWorkers directive to allow the server to handle the maximum number of simultaneous connections without running out of resources. See also the performance tuning documentation.
    • The use of a threaded mpm may allow you to handle more simultaneous connections, thereby mitigating DoS attacks. Further, the event mpm uses asynchronous processing to avoid devoting a thread to each connection. Due to the nature of the OpenSSL library the event mpm is currently incompatible with mod_ssl and other input filters. In these cases it falls back to the behaviour of the worker mpm.
    • There are a number of third-party modules available through http://modules.apache.org/ that can restrict certain client behaviors and thereby mitigate DoS problems.
    top

    Permissions on ServerRoot Directories

    In typical operation, Apache is started by the root user, and it switches to the user defined by the User directive to serve hits. As is the case with any command that root executes, you must take care that it is protected from modification by non-root users. Not only must the files themselves be writeable only by root, but so must the directories, and parents of all directories. For example, if you choose to place ServerRoot in /usr/local/apache then it is suggested that you create that directory as root, with commands like these:

    mkdir /usr/local/apache
    cd /usr/local/apache
    mkdir bin conf logs
    chown 0 . bin conf logs
    chgrp 0 . bin conf logs
    chmod 755 . bin conf logs

    It is assumed that /, /usr, and /usr/local are only modifiable by root. When you install the httpd executable, you should ensure that it is similarly protected:

    cp httpd /usr/local/apache/bin
    chown 0 /usr/local/apache/bin/httpd
    chgrp 0 /usr/local/apache/bin/httpd
    chmod 511 /usr/local/apache/bin/httpd

    You can create an htdocs subdirectory which is modifiable by other users -- since root never executes any files out of there, and shouldn't be creating files in there.

    If you allow non-root users to modify any files that root either executes or writes on then you open your system to root compromises. For example, someone could replace the httpd binary so that the next time you start it, it will execute some arbitrary code. If the logs directory is writeable (by a non-root user), someone could replace a log file with a symlink to some other system file, and then root might overwrite that file with arbitrary data. If the log files themselves are writeable (by a non-root user), then someone may be able to overwrite the log itself with bogus data.

    top

    Server Side Includes

    Server Side Includes (SSI) present a server administrator with several potential security risks.

    The first risk is the increased load on the server. All SSI-enabled files have to be parsed by Apache, whether or not there are any SSI directives included within the files. While this load increase is minor, in a shared server environment it can become significant.

    SSI files also pose the same risks that are associated with CGI scripts in general. Using the exec cmd element, SSI-enabled files can execute any CGI script or program under the permissions of the user and group Apache runs as, as configured in httpd.conf.

    There are ways to enhance the security of SSI files while still taking advantage of the benefits they provide.

    To isolate the damage a wayward SSI file can cause, a server administrator can enable suexec as described in the CGI in General section.

    Enabling SSI for files with .html or .htm extensions can be dangerous. This is especially true in a shared, or high traffic, server environment. SSI-enabled files should have a separate extension, such as the conventional .shtml. This helps keep server load at a minimum and allows for easier management of risk.

    Another solution is to disable the ability to run scripts and programs from SSI pages. To do this replace Includes with IncludesNOEXEC in the Options directive. Note that users may still use <--#include virtual="..." --> to execute CGI scripts if these scripts are in directories designated by a ScriptAlias directive.

    top

    CGI in General

    First of all, you always have to remember that you must trust the writers of the CGI scripts/programs or your ability to spot potential security holes in CGI, whether they were deliberate or accidental. CGI scripts can run essentially arbitrary commands on your system with the permissions of the web server user and can therefore be extremely dangerous if they are not carefully checked.

    All the CGI scripts will run as the same user, so they have potential to conflict (accidentally or deliberately) with other scripts e.g. User A hates User B, so he writes a script to trash User B's CGI database. One program which can be used to allow scripts to run as different users is suEXEC which is included with Apache as of 1.2 and is called from special hooks in the Apache server code. Another popular way of doing this is with CGIWrap.

    top

    Non Script Aliased CGI

    Allowing users to execute CGI scripts in any directory should only be considered if:

    • You trust your users not to write scripts which will deliberately or accidentally expose your system to an attack.
    • You consider security at your site to be so feeble in other areas, as to make one more potential hole irrelevant.
    • You have no users, and nobody ever visits your server.
    top

    Script Aliased CGI

    Limiting CGI to special directories gives the admin control over what goes into those directories. This is inevitably more secure than non script aliased CGI, but only if users with write access to the directories are trusted or the admin is willing to test each new CGI script/program for potential security holes.

    Most sites choose this option over the non script aliased CGI approach.

    top

    Other sources of dynamic content

    Embedded scripting options which run as part of the server itself, such as mod_php, mod_perl, mod_tcl, and mod_python, run under the identity of the server itself (see the User directive), and therefore scripts executed by these engines potentially can access anything the server user can. Some scripting engines may provide restrictions, but it is better to be safe and assume not.

    top

    Dynamic content security

    When setting up dynamic content, such as mod_php, mod_perl or mod_python, many security considerations get out of the scope of httpd itself, and you need to consult documentation from those modules. For example, PHP lets you setup Safe Mode, which is most usually disabled by default. Another example is Suhosin, a PHP addon for more security. For more information about those, consult each project documentation.

    At the Apache level, a module named mod_security can be seen as a HTTP firewall and, provided you configure it finely enough, can help you enhance your dynamic content security.

    top

    Protecting System Settings

    To run a really tight ship, you'll want to stop users from setting up .htaccess files which can override security features you've configured. Here's one way to do it.

    In the server configuration file, put

    <Directory "/">
        AllowOverride None
    </Directory>

    This prevents the use of .htaccess files in all directories apart from those specifically enabled.

    Note that this setting is the default since Apache 2.3.9.

    top

    Protect Server Files by Default

    One aspect of Apache which is occasionally misunderstood is the feature of default access. That is, unless you take steps to change it, if the server can find its way to a file through normal URL mapping rules, it can serve it to clients.

    For instance, consider the following example:

    # cd /; ln -s / public_html
    Accessing http://localhost/~root/

    This would allow clients to walk through the entire filesystem. To work around this, add the following block to your server's configuration:

    <Directory "/">
        Require all denied
    </Directory>

    This will forbid default access to filesystem locations. Add appropriate Directory blocks to allow access only in those areas you wish. For example,

    <Directory "/usr/users/*/public_html">
        Require all granted
    </Directory>
    <Directory "/usr/local/httpd">
        Require all granted
    </Directory>

    Pay particular attention to the interactions of Location and Directory directives; for instance, even if <Directory "/"> denies access, a <Location "/"> directive might overturn it.

    Also be wary of playing games with the UserDir directive; setting it to something like ./ would have the same effect, for root, as the first example above. We strongly recommend that you include the following line in your server configuration files:

    UserDir disabled root
    top

    Watching Your Logs

    To keep up-to-date with what is actually going on against your server you have to check the Log Files. Even though the log files only reports what has already happened, they will give you some understanding of what attacks is thrown against the server and allow you to check if the necessary level of security is present.

    A couple of examples:

    grep -c "/jsp/source.jsp?/jsp/ /jsp/source.jsp??" access_log
    grep "client denied" error_log | tail -n 10

    The first example will list the number of attacks trying to exploit the Apache Tomcat Source.JSP Malformed Request Information Disclosure Vulnerability, the second example will list the ten last denied clients, for example:

    [Thu Jul 11 17:18:39 2002] [error] [client foo.example.com] client denied by server configuration: /usr/local/apache/htdocs/.htpasswd

    As you can see, the log files only report what already has happened, so if the client had been able to access the .htpasswd file you would have seen something similar to:

    foo.example.com - - [12/Jul/2002:01:59:13 +0200] "GET /.htpasswd HTTP/1.1"

    in your Access Log. This means you probably commented out the following in your server configuration file:

    <Files ".ht*">
        Require all denied
    </Files>
    top

    Merging of configuration sections

    The merging of configuration sections is complicated and sometimes directive specific. Always test your changes when creating dependencies on how directives are merged.

    For modules that don't implement any merging logic, such as mod_access_compat, the behavior in later sections depends on whether the later section has any directives from the module. The configuration is inherited until a change is made, at which point the configuration is replaced and not merged.

    Available Languages:  en  |  fr  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/misc/relevant_standards.html.fr.utf80000644000000000000500000003202013412755316022444 0ustar rootsrc Standards applicables - Serveur HTTP Apache Version 2.4
    <-

    Standards applicables

    Langues Disponibles:  en  |  fr  |  ko 

    Cette page documente tous les standards applicables que suit le serveur HTTP Apache, accompagnés d'une brève description.

    Pour compléter les informations fournies ci-dessous, vous pouvez consulter les ressources suivantes :

    Avertissement

    Ce document n'est pas encore finalisé.

    top

    Recommandations HTTP

    Indépendamment des modules compilés et utilisés, Apache en tant que serveur web de base respecte les recommandations IETF suivantes :

    RFC 1945 (Informations)
    Le Protocole de Transfert Hypertexte (Hypertext Transfer Protocol - HTTP) est un protocole de niveau application avec la clarté et la vitesse nécessaires pour les systèmes d'informations distribués, collaboratifs et hypermédia. Cette RFC documente le protocole HTTP/1.0.
    RFC 2616 (Série de standards)
    Le Protocole de Transfert Hypertexte (Hypertext Transfer Protocol - HTTP) est un protocole de niveau application pour les systèmes d'informations distribués, collaboratifs et hypermédia. Cette RFC documente le protocole HTTP/1.1.
    RFC 2396 (Série de standards)
    Un Identificateur de Ressource Uniforme (Uniform Resource Identifier - URI) est une chaîne de caractères compacte permettant d'identifier une ressource physique ou abstraite.
    RFC 4346 (Série de standards)
    Le protocole TLS permet l'utilisation de communications sécurisées sur l'Internet. Il fournit le chiffrement, et a été conçu pour se prémunir contre l'interception, la modification et la falsification de messages.
    top

    Recommandations HTML

    En ce qui concerne le langage HTML, Apache respecte les recommandations IETF et W3C suivantes :

    RFC 2854 (Informations)
    Ce document résume l'historique du développement de HTML, et définit le type MIME "text/html" en pointant les recommandations W3C correspondantes.
    Spécification HTML 4.01 (Corrections d'erreurs)
    Cette spécification définit le Langage à Balises HyperTexte (HyperText Markup Language - HTML), le langage de publication du World Wide Web. Elle définit HTML 4.01, qui est une sous-version de HTML 4.
    Référence HTML 3.2
    Le langage à Balises HyperTexte (HyperText Markup Language - HTML) est un langage à balises simple permettant de créer des documents hypertextes portables. Les documents HTML sont aussi des documents SGML.
    XHTML 1.1 - XHTML sous forme de modules (Corrections d'erreurs)
    Cette recommandation définit un nouveau type de document XHTML basé sur le cadre de développement des modules et les modules définis dans la modularisation de XHTML.
    XHTML 1.0, le Langage à Balises Hypertexte Extensible (Extensible HyperText Markup Language) - Seconde édition (Corrections d'erreurs)
    Cette spécification définit la seconde édition de XHTML 1.0, une reformulation de HTML 4 en tant qu'application XML 1.0, ainsi que trois DTDs correspondant à celles définies par HTML 4.
    top

    Authentification

    En ce qui concerne les différentes méthodes d'authentification, Apache respecte les recommandations IETF suivantes :

    RFC 2617 (Le track des standards)
    "HTTP/1.0", y compris la spécification d'un protocole basique d'authentification et de contrôle d'accès.
    top

    Codes de langues et de pays

    Les liens suivants fournissent des informations à propos des codes de langues et de pays aux normes ISO ou autres :

    ISO 639-2
    ISO 639 fournit deux jeux de codes de langues permettant de représenter les noms des langues ; le premier est un jeu de codes sur deux lettres (639-1), le second (celui présenté dans le lien ci-dessus), est un jeu de codes sur trois lettres (639-2).
    ISO 3166-1
    Ce document présente les noms de pays (les noms raccourcis officiels en anglais) dans l'ordre alphabétique, tels qu'ils sont présentés dans la norme ISO 3166-1 et les éléments de codes correspondants de la norme ISO 3166-1-alpha-2.
    BCP 47 (Les meilleurs pratiques courantes), RFC 3066
    Ce document décrit une balise de langue permettant de spécifier la langue utilisé dans un objet contenant des informations, la manière d'enregistrer des valeurs à utiliser dans cette balise de langage, et une méthode pour comparer les balises de langue de ce style.
    RFC 3282 (Série de standards)
    Ce document définit un en-tête "Content-language:" permettant de spécifier le langage d'un élément possédant des en-têtes du style RFC 822, comme les portions de corps MIME ou les documents Web, et un en-tête "Accept-Language:" permettant de spécifier des préférences en matière de langue.

    Langues Disponibles:  en  |  fr  |  ko 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/misc/relevant_standards.html0000644000000000000500000000051513362070302021142 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: relevant_standards.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: relevant_standards.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: relevant_standards.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR httpd-2.4.41/docs/manual/misc/index.html.zh-cn.utf80000644000000000000500000001140013412755316020277 0ustar rootsrc Apache æ‚项文档 - Apache HTTP æœåС噍 版本 2.4
    <-

    Apache æ‚项文档

    å¯ç”¨è¯­è¨€:  en  |  es  |  fr  |  ko  |  tr  |  zh-cn 

    䏋颿˜¯é€‚用于 Apache æœåС噍开å‘项目的附加文档。

    警告

    下é¢çš„æ–‡æ¡£å°šæœªå®Œå…¨æ›´æ–°ï¼Œä»¥å映自 Apache HTTP æœåŠ¡å™¨ç‰ˆæœ¬ 2.1 之åŽçš„修改。æŸäº›ä¿¡æ¯å¯èƒ½ä»æ—§é€‚用,但请å°å¿ƒä½¿ç”¨å®ƒã€‚

    Apache 性能调è°

    对如何在编译或è¿è¡Œæ—¶ï¼Œé…ç½® Apache,以便性能更高的说明。 解释了为什么 Apache 这样åšï¼Œè€Œä¸é‚£æ ·åš (这会让它更慢或更快)。

    安全技巧

    åšå’Œä¸åš - 如何让你的 Apache ç«™ç‚¹ä¿æŒå®‰å…¨ã€‚

    相关标准

    这篇文档是 Apache éµå¾ªçš„相关标准的å‚考页é¢ã€‚

    密ç åŠ å¯†æ ¼å¼

    对 Apache èº«ä»½è®¤è¯æ”¯æŒçš„å„ç§å¯†ç åŠ å¯†æ ¼å¼çš„讨论。

    å¯ç”¨è¯­è¨€:  en  |  es  |  fr  |  ko  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/misc/perf-tuning.html.en0000644000000000000500000014277113412755316020144 0ustar rootsrc Apache Performance Tuning - Apache HTTP Server Version 2.4
    <-

    Apache Performance Tuning

    Available Languages:  en  |  fr  |  ko  |  tr 

    Apache 2.x is a general-purpose webserver, designed to provide a balance of flexibility, portability, and performance. Although it has not been designed specifically to set benchmark records, Apache 2.x is capable of high performance in many real-world situations.

    Compared to Apache 1.3, release 2.x contains many additional optimizations to increase throughput and scalability. Most of these improvements are enabled by default. However, there are compile-time and run-time configuration choices that can significantly affect performance. This document describes the options that a server administrator can configure to tune the performance of an Apache 2.x installation. Some of these configuration options enable the httpd to better take advantage of the capabilities of the hardware and OS, while others allow the administrator to trade functionality for speed.

    top

    Hardware and Operating System Issues

    The single biggest hardware issue affecting webserver performance is RAM. A webserver should never ever have to swap, as swapping increases the latency of each request beyond a point that users consider "fast enough". This causes users to hit stop and reload, further increasing the load. You can, and should, control the MaxRequestWorkers setting so that your server does not spawn so many children that it starts swapping. The procedure for doing this is simple: determine the size of your average Apache process, by looking at your process list via a tool such as top, and divide this into your total available memory, leaving some room for other processes.

    Beyond that the rest is mundane: get a fast enough CPU, a fast enough network card, and fast enough disks, where "fast enough" is something that needs to be determined by experimentation.

    Operating system choice is largely a matter of local concerns. But some guidelines that have proven generally useful are:

    • Run the latest stable release and patch level of the operating system that you choose. Many OS suppliers have introduced significant performance improvements to their TCP stacks and thread libraries in recent years.

    • If your OS supports a sendfile(2) system call, make sure you install the release and/or patches needed to enable it. (With Linux, for example, this means using Linux 2.4 or later. For early releases of Solaris 8, you may need to apply a patch.) On systems where it is available, sendfile enables Apache 2 to deliver static content faster and with lower CPU utilization.

    top

    Run-Time Configuration Issues

    HostnameLookups and other DNS considerations

    Prior to Apache 1.3, HostnameLookups defaulted to On. This adds latency to every request because it requires a DNS lookup to complete before the request is finished. In Apache 1.3 this setting defaults to Off. If you need to have addresses in your log files resolved to hostnames, use the logresolve program that comes with Apache, or one of the numerous log reporting packages which are available.

    It is recommended that you do this sort of postprocessing of your log files on some machine other than the production web server machine, in order that this activity not adversely affect server performance.

    If you use any Allow from domain or Deny from domain directives (i.e., using a hostname, or a domain name, rather than an IP address) then you will pay for two DNS lookups (a reverse, followed by a forward lookup to make sure that the reverse is not being spoofed). For best performance, therefore, use IP addresses, rather than names, when using these directives, if possible.

    Note that it's possible to scope the directives, such as within a <Location "/server-status"> section. In this case the DNS lookups are only performed on requests matching the criteria. Here's an example which disables lookups except for .html and .cgi files:

    HostnameLookups off
    <Files ~ "\.(html|cgi)$">
      HostnameLookups on
    </Files>

    But even still, if you just need DNS names in some CGIs you could consider doing the gethostbyname call in the specific CGIs that need it.

    FollowSymLinks and SymLinksIfOwnerMatch

    Wherever in your URL-space you do not have an Options FollowSymLinks, or you do have an Options SymLinksIfOwnerMatch, Apache will need to issue extra system calls to check up on symlinks. (One extra call per filename component.) For example, if you had:

    DocumentRoot "/www/htdocs"
    <Directory "/">
      Options SymLinksIfOwnerMatch
    </Directory>

    and a request is made for the URI /index.html, then Apache will perform lstat(2) on /www, /www/htdocs, and /www/htdocs/index.html. The results of these lstats are never cached, so they will occur on every single request. If you really desire the symlinks security checking, you can do something like this:

    DocumentRoot "/www/htdocs"
    <Directory "/">
      Options FollowSymLinks
    </Directory>
    
    <Directory "/www/htdocs">
      Options -FollowSymLinks +SymLinksIfOwnerMatch
    </Directory>

    This at least avoids the extra checks for the DocumentRoot path. Note that you'll need to add similar sections if you have any Alias or RewriteRule paths outside of your document root. For highest performance, and no symlink protection, set FollowSymLinks everywhere, and never set SymLinksIfOwnerMatch.

    AllowOverride

    Wherever in your URL-space you allow overrides (typically .htaccess files), Apache will attempt to open .htaccess for each filename component. For example,

    DocumentRoot "/www/htdocs"
    <Directory "/">
      AllowOverride all
    </Directory>

    and a request is made for the URI /index.html. Then Apache will attempt to open /.htaccess, /www/.htaccess, and /www/htdocs/.htaccess. The solutions are similar to the previous case of Options FollowSymLinks. For highest performance use AllowOverride None everywhere in your filesystem.

    Negotiation

    If at all possible, avoid content negotiation if you're really interested in every last ounce of performance. In practice the benefits of negotiation outweigh the performance penalties. There's one case where you can speed up the server. Instead of using a wildcard such as:

    DirectoryIndex index

    Use a complete list of options:

    DirectoryIndex index.cgi index.pl index.shtml index.html

    where you list the most common choice first.

    Also note that explicitly creating a type-map file provides better performance than using MultiViews, as the necessary information can be determined by reading this single file, rather than having to scan the directory for files.

    If your site needs content negotiation, consider using type-map files, rather than the Options MultiViews directive to accomplish the negotiation. See the Content Negotiation documentation for a full discussion of the methods of negotiation, and instructions for creating type-map files.

    Memory-mapping

    In situations where Apache 2.x needs to look at the contents of a file being delivered--for example, when doing server-side-include processing--it normally memory-maps the file if the OS supports some form of mmap(2).

    On some platforms, this memory-mapping improves performance. However, there are cases where memory-mapping can hurt the performance or even the stability of the httpd:

    • On some operating systems, mmap does not scale as well as read(2) when the number of CPUs increases. On multiprocessor Solaris servers, for example, Apache 2.x sometimes delivers server-parsed files faster when mmap is disabled.

    • If you memory-map a file located on an NFS-mounted filesystem and a process on another NFS client machine deletes or truncates the file, your process may get a bus error the next time it tries to access the mapped file content.

    For installations where either of these factors applies, you should use EnableMMAP off to disable the memory-mapping of delivered files. (Note: This directive can be overridden on a per-directory basis.)

    Sendfile

    In situations where Apache 2.x can ignore the contents of the file to be delivered -- for example, when serving static file content -- it normally uses the kernel sendfile support for the file if the OS supports the sendfile(2) operation.

    On most platforms, using sendfile improves performance by eliminating separate read and send mechanics. However, there are cases where using sendfile can harm the stability of the httpd:

    • Some platforms may have broken sendfile support that the build system did not detect, especially if the binaries were built on another box and moved to such a machine with broken sendfile support.

    • With an NFS-mounted filesystem, the kernel may be unable to reliably serve the network file through its own cache.

    For installations where either of these factors applies, you should use EnableSendfile off to disable sendfile delivery of file contents. (Note: This directive can be overridden on a per-directory basis.)

    Process Creation

    Prior to Apache 1.3 the MinSpareServers, MaxSpareServers, and StartServers settings all had drastic effects on benchmark results. In particular, Apache required a "ramp-up" period in order to reach a number of children sufficient to serve the load being applied. After the initial spawning of StartServers children, only one child per second would be created to satisfy the MinSpareServers setting. So a server being accessed by 100 simultaneous clients, using the default StartServers of 5 would take on the order of 95 seconds to spawn enough children to handle the load. This works fine in practice on real-life servers because they aren't restarted frequently. But it does really poorly on benchmarks which might only run for ten minutes.

    The one-per-second rule was implemented in an effort to avoid swamping the machine with the startup of new children. If the machine is busy spawning children, it can't service requests. But it has such a drastic effect on the perceived performance of Apache that it had to be replaced. As of Apache 1.3, the code will relax the one-per-second rule. It will spawn one, wait a second, then spawn two, wait a second, then spawn four, and it will continue exponentially until it is spawning 32 children per second. It will stop whenever it satisfies the MinSpareServers setting.

    This appears to be responsive enough that it's almost unnecessary to twiddle the MinSpareServers, MaxSpareServers and StartServers knobs. When more than 4 children are spawned per second, a message will be emitted to the ErrorLog. If you see a lot of these errors, then consider tuning these settings. Use the mod_status output as a guide.

    Related to process creation is process death induced by the MaxConnectionsPerChild setting. By default this is 0, which means that there is no limit to the number of connections handled per child. If your configuration currently has this set to some very low number, such as 30, you may want to bump this up significantly. If you are running SunOS or an old version of Solaris, limit this to 10000 or so because of memory leaks.

    When keep-alives are in use, children will be kept busy doing nothing waiting for more requests on the already open connection. The default KeepAliveTimeout of 5 seconds attempts to minimize this effect. The tradeoff here is between network bandwidth and server resources. In no event should you raise this above about 60 seconds, as most of the benefits are lost.

    top

    Compile-Time Configuration Issues

    Choosing an MPM

    Apache 2.x supports pluggable concurrency models, called Multi-Processing Modules (MPMs). When building Apache, you must choose an MPM to use. There are platform-specific MPMs for some platforms: mpm_netware, mpmt_os2, and mpm_winnt. For general Unix-type systems, there are several MPMs from which to choose. The choice of MPM can affect the speed and scalability of the httpd:

    • The worker MPM uses multiple child processes with many threads each. Each thread handles one connection at a time. Worker generally is a good choice for high-traffic servers because it has a smaller memory footprint than the prefork MPM.
    • The event MPM is threaded like the Worker MPM, but is designed to allow more requests to be served simultaneously by passing off some processing work to supporting threads, freeing up the main threads to work on new requests.
    • The prefork MPM uses multiple child processes with one thread each. Each process handles one connection at a time. On many systems, prefork is comparable in speed to worker, but it uses more memory. Prefork's threadless design has advantages over worker in some situations: it can be used with non-thread-safe third-party modules, and it is easier to debug on platforms with poor thread debugging support.

    For more information on these and other MPMs, please see the MPM documentation.

    Modules

    Since memory usage is such an important consideration in performance, you should attempt to eliminate modules that you are not actually using. If you have built the modules as DSOs, eliminating modules is a simple matter of commenting out the associated LoadModule directive for that module. This allows you to experiment with removing modules and seeing if your site still functions in their absence.

    If, on the other hand, you have modules statically linked into your Apache binary, you will need to recompile Apache in order to remove unwanted modules.

    An associated question that arises here is, of course, what modules you need, and which ones you don't. The answer here will, of course, vary from one web site to another. However, the minimal list of modules which you can get by with tends to include mod_mime, mod_dir, and mod_log_config. mod_log_config is, of course, optional, as you can run a web site without log files. This is, however, not recommended.

    Atomic Operations

    Some modules, such as mod_cache and recent development builds of the worker MPM, use APR's atomic API. This API provides atomic operations that can be used for lightweight thread synchronization.

    By default, APR implements these operations using the most efficient mechanism available on each target OS/CPU platform. Many modern CPUs, for example, have an instruction that does an atomic compare-and-swap (CAS) operation in hardware. On some platforms, however, APR defaults to a slower, mutex-based implementation of the atomic API in order to ensure compatibility with older CPU models that lack such instructions. If you are building Apache for one of these platforms, and you plan to run only on newer CPUs, you can select a faster atomic implementation at build time by configuring Apache with the --enable-nonportable-atomics option:

    ./buildconf
    ./configure --with-mpm=worker --enable-nonportable-atomics=yes

    The --enable-nonportable-atomics option is relevant for the following platforms:

    • Solaris on SPARC
      By default, APR uses mutex-based atomics on Solaris/SPARC. If you configure with --enable-nonportable-atomics, however, APR generates code that uses a SPARC v8plus opcode for fast hardware compare-and-swap. If you configure Apache with this option, the atomic operations will be more efficient (allowing for lower CPU utilization and higher concurrency), but the resulting executable will run only on UltraSPARC chips.
    • Linux on x86
      By default, APR uses mutex-based atomics on Linux. If you configure with --enable-nonportable-atomics, however, APR generates code that uses a 486 opcode for fast hardware compare-and-swap. This will result in more efficient atomic operations, but the resulting executable will run only on 486 and later chips (and not on 386).

    mod_status and ExtendedStatus On

    If you include mod_status and you also set ExtendedStatus On when building and running Apache, then on every request Apache will perform two calls to gettimeofday(2) (or times(2) depending on your operating system), and (pre-1.3) several extra calls to time(2). This is all done so that the status report contains timing indications. For highest performance, set ExtendedStatus off (which is the default).

    accept Serialization - Multiple Sockets

    Warning:

    This section has not been fully updated to take into account changes made in the 2.x version of the Apache HTTP Server. Some of the information may still be relevant, but please use it with care.

    This discusses a shortcoming in the Unix socket API. Suppose your web server uses multiple Listen statements to listen on either multiple ports or multiple addresses. In order to test each socket to see if a connection is ready, Apache uses select(2). select(2) indicates that a socket has zero or at least one connection waiting on it. Apache's model includes multiple children, and all the idle ones test for new connections at the same time. A naive implementation looks something like this (these examples do not match the code, they're contrived for pedagogical purposes):

            for (;;) {
              for (;;) {
                fd_set accept_fds;
    
                FD_ZERO (&accept_fds);
                for (i = first_socket; i <= last_socket; ++i) {
                  FD_SET (i, &accept_fds);
                }
                rc = select (last_socket+1, &accept_fds, NULL, NULL, NULL);
                if (rc < 1) continue;
                new_connection = -1;
                for (i = first_socket; i <= last_socket; ++i) {
                  if (FD_ISSET (i, &accept_fds)) {
                    new_connection = accept (i, NULL, NULL);
                    if (new_connection != -1) break;
                  }
                }
                if (new_connection != -1) break;
              }
              process_the(new_connection);
            }

    But this naive implementation has a serious starvation problem. Recall that multiple children execute this loop at the same time, and so multiple children will block at select when they are in between requests. All those blocked children will awaken and return from select when a single request appears on any socket. (The number of children which awaken varies depending on the operating system and timing issues.) They will all then fall down into the loop and try to accept the connection. But only one will succeed (assuming there's still only one connection ready). The rest will be blocked in accept. This effectively locks those children into serving requests from that one socket and no other sockets, and they'll be stuck there until enough new requests appear on that socket to wake them all up. This starvation problem was first documented in PR#467. There are at least two solutions.

    One solution is to make the sockets non-blocking. In this case the accept won't block the children, and they will be allowed to continue immediately. But this wastes CPU time. Suppose you have ten idle children in select, and one connection arrives. Then nine of those children will wake up, try to accept the connection, fail, and loop back into select, accomplishing nothing. Meanwhile none of those children are servicing requests that occurred on other sockets until they get back up to the select again. Overall this solution does not seem very fruitful unless you have as many idle CPUs (in a multiprocessor box) as you have idle children (not a very likely situation).

    Another solution, the one used by Apache, is to serialize entry into the inner loop. The loop looks like this (differences highlighted):

            for (;;) {
              accept_mutex_on ();
              for (;;) {
                fd_set accept_fds;
                
                FD_ZERO (&accept_fds);
                for (i = first_socket; i <= last_socket; ++i) {
                  FD_SET (i, &accept_fds);
                }
                rc = select (last_socket+1, &accept_fds, NULL, NULL, NULL);
                if (rc < 1) continue;
                new_connection = -1;
                for (i = first_socket; i <= last_socket; ++i) {
                  if (FD_ISSET (i, &accept_fds)) {
                    new_connection = accept (i, NULL, NULL);
                    if (new_connection != -1) break;
                  }
                }
                if (new_connection != -1) break;
              }
              accept_mutex_off ();
              process the new_connection;
            }

    The functions accept_mutex_on and accept_mutex_off implement a mutual exclusion semaphore. Only one child can have the mutex at any time. There are several choices for implementing these mutexes. The choice is defined in src/conf.h (pre-1.3) or src/include/ap_config.h (1.3 or later). Some architectures do not have any locking choice made, on these architectures it is unsafe to use multiple Listen directives.

    The Mutex directive can be used to change the mutex implementation of the mpm-accept mutex at run-time. Special considerations for different mutex implementations are documented with that directive.

    Another solution that has been considered but never implemented is to partially serialize the loop -- that is, let in a certain number of processes. This would only be of interest on multiprocessor boxes where it's possible that multiple children could run simultaneously, and the serialization actually doesn't take advantage of the full bandwidth. This is a possible area of future investigation, but priority remains low because highly parallel web servers are not the norm.

    Ideally you should run servers without multiple Listen statements if you want the highest performance. But read on.

    accept Serialization - Single Socket

    The above is fine and dandy for multiple socket servers, but what about single socket servers? In theory they shouldn't experience any of these same problems because all the children can just block in accept(2) until a connection arrives, and no starvation results. In practice this hides almost the same "spinning" behavior discussed above in the non-blocking solution. The way that most TCP stacks are implemented, the kernel actually wakes up all processes blocked in accept when a single connection arrives. One of those processes gets the connection and returns to user-space. The rest spin in the kernel and go back to sleep when they discover there's no connection for them. This spinning is hidden from the user-land code, but it's there nonetheless. This can result in the same load-spiking wasteful behavior that a non-blocking solution to the multiple sockets case can.

    For this reason we have found that many architectures behave more "nicely" if we serialize even the single socket case. So this is actually the default in almost all cases. Crude experiments under Linux (2.0.30 on a dual Pentium pro 166 w/128Mb RAM) have shown that the serialization of the single socket case causes less than a 3% decrease in requests per second over unserialized single-socket. But unserialized single-socket showed an extra 100ms latency on each request. This latency is probably a wash on long haul lines, and only an issue on LANs. If you want to override the single socket serialization, you can define SINGLE_LISTEN_UNSERIALIZED_ACCEPT, and then single-socket servers will not serialize at all.

    Lingering Close

    As discussed in draft-ietf-http-connection-00.txt section 8, in order for an HTTP server to reliably implement the protocol, it needs to shut down each direction of the communication independently. (Recall that a TCP connection is bi-directional. Each half is independent of the other.)

    When this feature was added to Apache, it caused a flurry of problems on various versions of Unix because of shortsightedness. The TCP specification does not state that the FIN_WAIT_2 state has a timeout, but it doesn't prohibit it. On systems without the timeout, Apache 1.2 induces many sockets stuck forever in the FIN_WAIT_2 state. In many cases this can be avoided by simply upgrading to the latest TCP/IP patches supplied by the vendor. In cases where the vendor has never released patches (i.e., SunOS4 -- although folks with a source license can patch it themselves), we have decided to disable this feature.

    There are two ways to accomplish this. One is the socket option SO_LINGER. But as fate would have it, this has never been implemented properly in most TCP/IP stacks. Even on those stacks with a proper implementation (i.e., Linux 2.0.31), this method proves to be more expensive (cputime) than the next solution.

    For the most part, Apache implements this in a function called lingering_close (in http_main.c). The function looks roughly like this:

            void lingering_close (int s)
            {
              char junk_buffer[2048];
              
              /* shutdown the sending side */
              shutdown (s, 1);
    
              signal (SIGALRM, lingering_death);
              alarm (30);
    
              for (;;) {
                select (s for reading, 2 second timeout);
                if (error) break;
                if (s is ready for reading) {
                  if (read (s, junk_buffer, sizeof (junk_buffer)) <= 0) {
                    break;
                  }
                  /* just toss away whatever is here */
                }
              }
              
              close (s);
            }

    This naturally adds some expense at the end of a connection, but it is required for a reliable implementation. As HTTP/1.1 becomes more prevalent, and all connections are persistent, this expense will be amortized over more requests. If you want to play with fire and disable this feature, you can define NO_LINGCLOSE, but this is not recommended at all. In particular, as HTTP/1.1 pipelined persistent connections come into use, lingering_close is an absolute necessity (and pipelined connections are faster, so you want to support them).

    Scoreboard File

    Apache's parent and children communicate with each other through something called the scoreboard. Ideally this should be implemented in shared memory. For those operating systems that we either have access to, or have been given detailed ports for, it typically is implemented using shared memory. The rest default to using an on-disk file. The on-disk file is not only slow, but it is unreliable (and less featured). Peruse the src/main/conf.h file for your architecture, and look for either USE_MMAP_SCOREBOARD or USE_SHMGET_SCOREBOARD. Defining one of those two (as well as their companions HAVE_MMAP and HAVE_SHMGET respectively) enables the supplied shared memory code. If your system has another type of shared memory, edit the file src/main/http_main.c and add the hooks necessary to use it in Apache. (Send us back a patch too, please.)

    Historical note: The Linux port of Apache didn't start to use shared memory until version 1.2 of Apache. This oversight resulted in really poor and unreliable behavior of earlier versions of Apache on Linux.

    DYNAMIC_MODULE_LIMIT

    If you have no intention of using dynamically loaded modules (you probably don't if you're reading this and tuning your server for every last ounce of performance), then you should add -DDYNAMIC_MODULE_LIMIT=0 when building your server. This will save RAM that's allocated only for supporting dynamically loaded modules.

    top

    Appendix: Detailed Analysis of a Trace

    Here is a system call trace of Apache 2.0.38 with the worker MPM on Solaris 8. This trace was collected using:

    truss -l -p httpd_child_pid.

    The -l option tells truss to log the ID of the LWP (lightweight process--Solaris' form of kernel-level thread) that invokes each system call.

    Other systems may have different system call tracing utilities such as strace, ktrace, or par. They all produce similar output.

    In this trace, a client has requested a 10KB static file from the httpd. Traces of non-static requests or requests with content negotiation look wildly different (and quite ugly in some cases).

    /67:    accept(3, 0x00200BEC, 0x00200C0C, 1) (sleeping...)
    /67:    accept(3, 0x00200BEC, 0x00200C0C, 1)            = 9

    In this trace, the listener thread is running within LWP #67.

    Note the lack of accept(2) serialization. On this particular platform, the worker MPM uses an unserialized accept by default unless it is listening on multiple ports.
    /65:    lwp_park(0x00000000, 0)                         = 0
    /67:    lwp_unpark(65, 1)                               = 0

    Upon accepting the connection, the listener thread wakes up a worker thread to do the request processing. In this trace, the worker thread that handles the request is mapped to LWP #65.

    /65:    getsockname(9, 0x00200BA4, 0x00200BC4, 1)       = 0

    In order to implement virtual hosts, Apache needs to know the local socket address used to accept the connection. It is possible to eliminate this call in many situations (such as when there are no virtual hosts, or when Listen directives are used which do not have wildcard addresses). But no effort has yet been made to do these optimizations.

    /65:    brk(0x002170E8)                                 = 0
    /65:    brk(0x002190E8)                                 = 0

    The brk(2) calls allocate memory from the heap. It is rare to see these in a system call trace, because the httpd uses custom memory allocators (apr_pool and apr_bucket_alloc) for most request processing. In this trace, the httpd has just been started, so it must call malloc(3) to get the blocks of raw memory with which to create the custom memory allocators.

    /65:    fcntl(9, F_GETFL, 0x00000000)                   = 2
    /65:    fstat64(9, 0xFAF7B818)                          = 0
    /65:    getsockopt(9, 65535, 8192, 0xFAF7B918, 0xFAF7B910, 2190656) = 0
    /65:    fstat64(9, 0xFAF7B818)                          = 0
    /65:    getsockopt(9, 65535, 8192, 0xFAF7B918, 0xFAF7B914, 2190656) = 0
    /65:    setsockopt(9, 65535, 8192, 0xFAF7B918, 4, 2190656) = 0
    /65:    fcntl(9, F_SETFL, 0x00000082)                   = 0

    Next, the worker thread puts the connection to the client (file descriptor 9) in non-blocking mode. The setsockopt(2) and getsockopt(2) calls are a side-effect of how Solaris' libc handles fcntl(2) on sockets.

    /65:    read(9, " G E T   / 1 0 k . h t m".., 8000)     = 97

    The worker thread reads the request from the client.

    /65:    stat("/var/httpd/apache/httpd-8999/htdocs/10k.html", 0xFAF7B978) = 0
    /65:    open("/var/httpd/apache/httpd-8999/htdocs/10k.html", O_RDONLY) = 10

    This httpd has been configured with Options FollowSymLinks and AllowOverride None. Thus it doesn't need to lstat(2) each directory in the path leading up to the requested file, nor check for .htaccess files. It simply calls stat(2) to verify that the file: 1) exists, and 2) is a regular file, not a directory.

    /65:    sendfilev(0, 9, 0x00200F90, 2, 0xFAF7B53C)      = 10269

    In this example, the httpd is able to send the HTTP response header and the requested file with a single sendfilev(2) system call. Sendfile semantics vary among operating systems. On some other systems, it is necessary to do a write(2) or writev(2) call to send the headers before calling sendfile(2).

    /65:    write(4, " 1 2 7 . 0 . 0 . 1   -  ".., 78)      = 78

    This write(2) call records the request in the access log. Note that one thing missing from this trace is a time(2) call. Unlike Apache 1.3, Apache 2.x uses gettimeofday(3) to look up the time. On some operating systems, like Linux or Solaris, gettimeofday has an optimized implementation that doesn't require as much overhead as a typical system call.

    /65:    shutdown(9, 1, 1)                               = 0
    /65:    poll(0xFAF7B980, 1, 2000)                       = 1
    /65:    read(9, 0xFAF7BC20, 512)                        = 0
    /65:    close(9)                                        = 0

    The worker thread does a lingering close of the connection.

    /65:    close(10)                                       = 0
    /65:    lwp_park(0x00000000, 0)         (sleeping...)

    Finally the worker thread closes the file that it has just delivered and blocks until the listener assigns it another connection.

    /67:    accept(3, 0x001FEB74, 0x001FEB94, 1) (sleeping...)

    Meanwhile, the listener thread is able to accept another connection as soon as it has dispatched this connection to a worker thread (subject to some flow-control logic in the worker MPM that throttles the listener if all the available workers are busy). Though it isn't apparent from this trace, the next accept(2) can (and usually does, under high load conditions) occur in parallel with the worker thread's handling of the just-accepted connection.

    Available Languages:  en  |  fr  |  ko  |  tr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/misc/index.html0000644000000000000500000000105313362070302016364 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: index.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: index.html.es Content-Language: es Content-type: text/html; charset=ISO-8859-1 URI: index.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: index.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: index.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 URI: index.html.zh-cn.utf8 Content-Language: zh-cn Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/misc/perf-tuning.html.tr.utf80000644000000000000500000016021613447004010021030 0ustar rootsrc Apache’de Başarımın Arttırılması - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache’de Başarımın Arttırılması

    Mevcut Diller:  en  |  fr  |  ko  |  tr 

    Apache 2.x, esneklik, taşınabilirlik ve başarım arasında bir denge sağlamak üzere tasarlanmış genel amaçlı bir HTTP sunucusudur. Başka sunucularla kıyaslama denemelerinde öne geçmek üzere tasarlanmamış olsa da Apache 2.x gerçek yaşamda karşılaşılan pek çok durumda oldukça yüksek bir başarıma ulaşacak yetenektedir.

    Apache 1.3 ile karşılaştırıldığında 2.x sürümleri toplam veri hızını ve ölçeklenebilirliği arttırmak için pek çok en iyileme seçeneği içerir. Bu iyileştirmelerin pek çoğu zaten öntanımlı olarak etkin olmakla birlikte derleme ve kullanım sırasında başarımı önemli ölçüde etkileyebilen yapılandırma seçenekleri de mevcuttur. Bu belgede, bir Apache 2.x kurulumunda sunucu yöneticisinin sunucunun başarımını arttırmak amacıyla yapılandırma sırasında neler yapabileceğinden bahsedilmiştir. Bu yapılandırma seçeneklerinden bazıları, httpd’nin donanımın ve işletim sisteminin olanaklarından daha iyi yararlanabilmesini sağlarken bir kısmı da daha hızlı bir sunum için yöneticinin işlevsellikten ödün verebilmesini olanaklı kılar.

    top

    Donanım ve İşletim Sistemi ile İlgili Konular

    HTTP sunucusunun başarımını etkileyen en önemli donanım bellektir (RAM). Bir HTTP sunucusu asla takaslama yapmamalıdır. Çünkü takaslama, kullanıcının "yeterince hız" umduğu noktada sunumun gecikmesine sebep olur. Böyle bir durumda kullanıcılar yüklemeyi durdurup tekrar başlatma eğilimindedirler; sonuçta yük daha da artar. MaxRequestWorkers yönergesinin değerini değiştirerek takaslamaya sebep olabilecek kadar çok çocuk süreç oluşturulmasını engelleyebilirsiniz ve böyle bir durumda bunu mutlaka yapmalısınız. Bunun için yapacağınız işlem basittir: top benzeri bir araç üzerinden çalışan süreçlerinizin bir listesini alıp Apache süreçlerinizin ortalama büyüklüğünü saptayıp, mevcut bellekten bir kısmını diğer süreçler için ayırdıktan sonra kalan miktarı bu değere bölerseniz yönergeye atayacağınız değeri bulmuş olursunuz.

    Donanımın diğer unsurları için kararı siz verin: Daha hızlı işlemci, daha hızlı ağ kartı, daha hızlı disk; daha hızlının ne kadar hızlı olacağını deneyimlerinize bağlı olarak tamamen sizin ihtiyaçlarınız belirler.

    İşletim sistemi seçimi büyük oranda yerel ilgi konusudur. Fakat yine de, genelde yararlılığı kanıtlanmış bazı kurallar bu seçimde size yardımcı olabilir:

    • SeçtiÄŸiniz iÅŸletim sisteminin (çekirdeÄŸin) en son kararlı sürümünü çalıştırın. Bir çok iÅŸletim sistemi, son yıllarda TCP yığıtları ve evre kütüphaneleri ile ilgili belirgin iyileÅŸtirmeler yapmışlar ve yapmaktadırlar.

    • İşletim sisteminiz sendfile(2) sistem çaÄŸrısını destekliyorsa bunun etkinleÅŸtirilebildiÄŸi sürümün kurulu olması önemlidir. (ÖrneÄŸin, Linux için bu, Linux 2.4 ve sonraki sürümler anlamına gelirken, Solaris için Solaris 8’den önceki sürümlerin yamanması gerektirdiÄŸi anlamına gelmektedir.) sendfile iÅŸlevinin desteklendiÄŸi sistemlerde Apache 2 duruk içeriÄŸi daha hızlı teslim etmek ve iÅŸlemci kullanımını düşürmek amacıyla bu iÅŸlevselliÄŸi kullanacaktır.

    top

    Çalışma Anı Yapılandırması ile İlgili Konular

    HostnameLookups ve DNS ile ilgili diÄŸer konular

    Apache 1.3 öncesinde, HostnameLookups yönergesinin öntanımlı değeri On idi. İstek yerine getirilmeden önce bir DNS sorgusu yapılmasını gerektirmesi sebebiyle bu ayarlama her istekte bir miktar gecikmeye sebep olurdu. Apache 1.3’ten itibaren yönergenin öntanımlı değeri Off yapılmıştır. Eğer günlük dosyalarınızda konak isimlerinin bulunmasını isterseniz, Apache ile birlikte gelen logresolve programını kullanabileceğiniz gibi günlük raporlarını çözümleyen Apache ile gelmeyen programlardan herhangi birini de kullanabilirsiniz.

    Günlük dosyaları üzerindeki bu işlemi sunucu makinesi dışında günlük dosyasının bir kopyası üzerinde yapmanızı öneririz. Aksi takdirde sunucunuzun başarımı önemli ölçüde etkilenebilir.

    Allow veya Deny yönergelerinde IP adresi yerine bir konak veya alan ismi belirtirseniz, iki DNS sorguluk bir bedel ödersiniz (biri normal, diğeri IP taklidine karşı ters DNS sorgusu). Başarımı en iyilemek için bu yönergelerde mümkün olduğunca isim yerine IP adreslerini kullanınız.

    HostnameLookups yönergelerinin <Location "/server-status"> gibi bölüm yönergelerinin içinde de yer alabileceğini unutmayın. Bu gibi durumlarda DNS sorguları sadece istek kuralla eşleştiği takdirde yapılacaktır. Aşağıdaki örnekte .html ve .cgi dosyalarına yapılan istekler hariç DNS sorguları iptal edilmektedir:

    HostnameLookups off
    <Files ~ "\.(html|cgi)$">
      HostnameLookups on
    </Files>

    Yine de bazı CGI’lerin DNS isimlerine ihtiyacı olursa bu CGI’lerin bu ihtiyaçlarına yönelik olarak gethostbyname çağrıları yapabileceğini gözardı etmeyiniz.

    FollowSymLinks ve SymLinksIfOwnerMatch

    URL uzayınızda geçerli olmak üzere bir Options FollowSymLinks yoksa veya Options SymLinksIfOwnerMatch yönergeleri varsa, Apache her sembolik bağın üzerinde bazı sınamalar yapmak için ek bir sistem çağrısından başka istenen her dosya için de ayrı bir çağrı yapacaktır.

    DocumentRoot "/siteler/htdocs"
    <Directory />
      Options SymLinksIfOwnerMatch
    </Directory>

    Bu durumda /index.html için bir istek yapıldığında Apache, /siteler, /siteler/htdocs ve
    /siteler/htdocs/index.html üzerinde lstat(2) çağrıları yapacaktır. lstat sonuçları önbelleğe kaydedilmediğinden bu işlem her istekte yinelenecektir. Amacınız gerçekten sembolik bağları güvenlik açısından sınamaksa bunu şöyle yapabilirsiniz:

    DocumentRoot "/siteler/htdocs"
    <Directory "/">
      Options FollowSymLinks
    </Directory>
    
    <Directory "/siteler/htdocs">
      Options -FollowSymLinks +SymLinksIfOwnerMatch
    </Directory>

    Böylece DocumentRoot altındaki dosyalar için fazladan bir çağrı yapılmasını engellemiş olursunuz. Eğer bazı bölümlerde Alias, RewriteRule gibi yönergeler üzerinden belge kök dizininizin dışında kalan dosya yollarına sahipseniz benzer işlemleri onlar için de yapmalısınız. Sembolik bağ koruması yapmamak suretiyle başarımı arttırmak isterseniz, FollowSymLinks seçeneğini her yerde etkin kılın ve SymLinksIfOwnerMatch seçeneğini asla etkinleştirmeyin.

    AllowOverride

    Genellikle .htaccess dosyaları üzerinden yapıldığı gibi URL uzayınızda geçersizleştirmelere izin veriyorsanız, Apache her dosya bileşeni için bu .htaccess dosyalarını açmaya çalışacaktır.

    DocumentRoot "/siteler/htdocs"
    <Directory "/">
      AllowOverride all
    </Directory>

    Bu durumda /index.html sayfasına yapılan bir istek için Apache, /.htaccess, /siteler/.htaccess ve /siteler/htdocs/.htaccess dosyalarını açmaya çalışacaktır. Çözüm Options FollowSymLinks durumunun benzeridir; başarımı arttırmak için dosya sisteminizin her yerinde AllowOverride None olsun.

    Dil Uzlaşımı

    Başarımı son kırıntısına kadar arttırmak istiyorsanız, mümkünse içerik dili uzlaşımı da yapmayın. Dil uzlaşımından yararlanmak isterken büyük başarım kayıplarına uğrayabilirsiniz. Böyle bir durumda sunucunun başarımını arttırmanın tek bir yolu vardır.

    DirectoryIndex index

    Yukarıdaki gibi bir dosya ismi kalıbı kullanmak yerine, aşağıdaki gibi seçenekleri tam bir liste halinde belirtin:

    DirectoryIndex index.cgi index.pl index.shtml index.html

    Buradaki sıralama öncelik sırasını belirler; yani, öncelikli olmasını istediğiniz seçeneği listenin başına yazmalısınız.

    İstenen dosya için MultiViews kullanarak dizini taratmak yerine, gerekli bilgiyi tek bir dosyadan okutmak suretiyle başarımı arttırabilirsiniz. Bu amaçla türeşlem (type-map) dosyaları kullanmanız yeterli olacaktır.

    Sitenizde içerik dili uzlaşımına gerek varsa, bunu Options MultiViews yönergesi üzerinden değil, türeşlem dosyaları kullanarak yapmayı deneyin. İçerik dili uzlaşımı ve türeşlem dosyalarının oluşturulması hakkında daha ayrıntılı bilgi edinmek için İçerik Uzlaşımı belgesine bakınız.

    Bellek EÅŸlemleri

    Apache’nin SSI sayfalarında olduğu gibi teslim edilecek dosyanın içeriğine bakma gereği duyduğu durumlarda, eğer işletim sistemi mmap(2) ve benzerlerini destekliyorsa çekirdek normal olarak dosyayı belleğe kopyalayacaktır.

    Bazı platformlarda bu belleğe eşleme işlemi başarımı arttırsa da başarımın veya httpd kararlılığının zora girdiği durumlar olabilmektedir:

    • Bazı iÅŸletim sistemlerinde iÅŸlemci sayısı artışına baÄŸlı olarak, mmap iÅŸlevi read(2) kadar iyi ölçeklenmemiÅŸtir. ÖrneÄŸin, çok iÅŸlemcili Solaris sunucularda mmap iptal edildiÄŸi takdirde içeriÄŸi sunucu tarafından iÅŸlenen dosyalar üzerinde bazen daha hızlı iÅŸlem yapılabilmektedir.

    • BelleÄŸe kopyalanacak dosya NFS üzerinden baÄŸlanan bir dosya sistemindeyse ve dosya baÅŸka bir NFS istemcisi makine tarafından silinmiÅŸ veya dosyanın boyutu deÄŸiÅŸtirilmiÅŸse sunucunuz dosyaya tekrar eriÅŸmeye çalıştığında bir hata alabilecektir.

    Böyle durumların olasılık dahilinde olduğu kurulumlarda içeriği sunucu tarafından işlenecek dosyaların belleğe kopyalanmaması için yapılandırmanıza EnableMMAP off satırını ekleyiniz. (Dikkat: Bu yönerge dizin seviyesinde geçersizleştirilebilen yönergelerdendir.)

    sendfile

    Apache’nin duruk dosyalarda olduğu gibi teslim edilecek dosyanın içeriğine bakmadığı durumlarda, eğer işletim sistemi sendfile(2) desteğine sahipse çekirdek normal olarak bu desteği kullanacaktır.

    Bazı platformlarda sendfile kullanımı, okuma ve yazma işlemlerinin ayrı ayrı yapılmamasını sağlasa da sendfile kullanımının httpd kararlılığını bozduğu bazı durumlar sözkonusudur:

    • Bazı platformlar derleme sisteminin saptayamadığı bozuk bir sendfile desteÄŸine sahip olabilir. Özellikle derleme iÅŸleminin baÅŸka bir platformda yapılıp sendfile desteÄŸi bozuk bir makineye kurulum yapıldığı durumlarda bu desteÄŸin bozuk olduÄŸu saptanamayacaktır.

    • Çekirdek, NFS üzerinden eriÅŸilen aÄŸ dosyalarını kendi önbelleÄŸi üzerinden gerektiÄŸi gibi sunamayabilir.

    Böyle durumların olasılık dahilinde olduğu kurulumlarda içeriğin sendfile desteğiyle teslim edilmemesi için yapılandırmanıza EnableSendfile off satırını ekleyiniz. (Dikkat: Bu yönerge dizin seviyesinde geçersizleştirilebilen yönergelerdendir.)

    Süreç Oluşturma

    Apache 1.3 öncesinde MinSpareServers, MaxSpareServers ve StartServers ayarları, başka sunucularla kıyaslama denemelerinde olağanüstü kötü sonuçlar alınmasına sebep olmaktaydı. Özellikle uygulanan yükü karşılamaya yetecek sayıda çocuk süreç oluşturulması aşamasında Apache’nin elde ettiği ivme bunlardan biriydi. Başlangıçta StartServers yönergesiyle belli sayıda süreç oluşturulduktan sonra her saniyede bir tane olmak üzere MinSpareServers sayıda çocuk süreç oluşturulmaktaydı. Örneğin, aynı anda 100 isteğe yanıt vermek için StartServers yönergesinin öntanımlı değeri olarak başta 5 süreç oluşturulduğundan kalan süreçler için 95 saniye geçmesi gerekirdi. Sık sık yeniden başlatılmadıklarından dolayı gerçek hayatta sunucuların başına gelen de buydu. Başka sunucularla kıyaslama denemelerinde ise işlem sadece on dakika sürmekte ve içler acısı sonuçlar alınmaktaydı.

    Saniyede bir kuralı, sunucunun yeni çocukları oluşturması sırasında sistemin aşırı meşgul duruma düşmemesi için alınmış bir önlemdi. Makine çocuk süreç oluşturmakla meşgul edildiği sürece isteklere yanıt veremeyecektir. Böylesi bir durum Apache’nin başarımını kötüleştirmekten başka işe yaramayacaktır. Apache 1.3’te saniyede bir kuralı biraz esnetildi. Yeni gerçeklenimde artık bir süreç oluşturduktan bir saniye sonra iki süreç, bir saniye sonra dört süreç oluşturulmakta ve işlem, saniyede 32 çocuk süreç oluşturulur duruma gelene kadar böyle ivmelenmektedir. Çocuk süreç oluşturma işlemi MinSpareServers değerine ulaşılınca durmaktadır.

    Bu, MinSpareServers, MaxSpareServers ve StartServers ayarlarıyla oynamayı neredeyse gereksiz kılacak kadar iyi sonuçlar verecek gibi görünmektedir. Saniyede 4 çocuktan fazlası oluşturulmaya başlandığında hata günlüğüne bazı iletiler düşmeye başlar. Bu iletilerin sayısı çok artarsa bu ayarlarla oynama vakti gelmiş demektir. Bunun için mod_status çıktısını bir kılavuz olarak kullanabilirsiniz.

    Süreç oluşturmayla ilgili olarak süreç ölümü MaxConnectionsPerChild değeri ile sağlanır. Bu değer öntanımlı olarak 0 olup, çocuk süreç başına istek sayısının sınırsız olduğu anlamına gelir. Eğer yapılandırmanızda bu değeri 30 gibi çok düşük bir değere ayarlarsanız bunu hemen kaldırmak zorunda kalabilirsiniz. Sunucunuzu SunOS veya Solaris’in eski bir sürümü üzerinde çalıştırıyorsanız bellek kaçaklarına sebep olmamak için bu değeri 10000 ile sınırlayınız.

    Kalıcı bağlantı özelliğini kullanıyorsanız, çocuk süreçler zaten açık bağlantılardan istek beklemekte olacaklardır. KeepAliveTimeout yönergesinin öntanımlı değeri 5 saniye olup bu etkiyi en aza indirmeye yönelik süredir. Burada ağ band genişliği ile sunucu kaynaklarının kullanımı arasında bir seçim yapmak söz konusudur. Hiçbir şey umurunuzda değilse çoğu ayrıcalığın yitirilmesi pahasına bu değeri rahatça 60 saniyenin üzerine çıkarabilirsiniz.

    top

    Derleme Sırasında Yapılandırma ile İlgili Konular

    MPM Seçimi

    Apache 2.x, Çok Süreçlilik Modülleri (MPM) adı verilen eklemlenebilir çok görevlilik modellerini destekler. Apache’yi derlerken bu MPM’lerden birini seçmeniz gerekir. MPM’lerden bazıları platformlara özeldir: mpm_netware, mpmt_os2 ve mpm_winnt. Unix benzeri sistemler için ise seçebileceğiniz modül sayısı birden fazladır. MPM seçiminin httpd’nin hızında ve ölçeklenebilirliğinde bazı etkileri olabilir:

    • worker modülü her biri çok evreli çok sayıda çocuk süreç kullanımını destekler. Her evre aynı anda tek bir baÄŸlantıya hizmet sunar. Aynı hizmeti daha az bellek harcayarak vermesi nedeniyle yüksek trafiÄŸe sahip sunucularda prefork modülüne göre daha iyi bir seçimdir.
    • event modülü worker modülü gibi çok evreli bir modüldür, fakat aunı anda dahafazla isteÄŸe yanıt verecek ÅŸekilde tasarlanmıştır. Bunu, evreleri destekleyen bazı iÅŸlemleri yapmamak suretiyle yeni isteklerle çalışacak ana evreleri serbestleÅŸtirerek saÄŸlar.
    • prefork modülü her biri tek bir evreye sahip çok sayıda çocuk süreç kullanımını destekler. Her süreç aynı anda tek bir baÄŸlantıya hizmet sunar. ÇoÄŸu sistemde daha hızlı olması nedeniyle worker modülüne göre daha iyi bir seçim olarak görünürse de bunu daha fazla bellek kullanarak saÄŸlar. prefork modülünün evresiz tasarımının worker modülüne göre bazı yararlı tarafları vardır: Çok evreli sistemlerde güvenilir olmayan üçüncü parti modülleri kullanabilir ve evrelerde hata ayıklamanın yetersiz kaldığı platformlarda hatalarını ayıklamak daha kolaydır.

    Bu modüller ve diğerleri hakkında daha ayrıntılı bilgi edinmek için Çok Süreçlilik Modülleri belgesine bakınız.

    Modüller

    Bellek kullanımı başarım konusunda önemli olduğundan gerçekte kullanmadığınız modülleri elemeye çalışmalısınız. Modülleri birer DSO olarak derlediyseniz LoadModule yönergesinin bulunduğu satırı açıklama haline getirmeniz modülden kurtulmanız için yeterli olacaktır. Modülleri bu şekilde kaldırarak onların yokluğunda sitenizin hala işlevlerini yerine getirdiğini görme şansına da kavuşmuş olursunuz.

    Ancak, eğer modülleri Apache çalıştırılabilirinin içine gömmüşseniz istenmeyen modülleri kaldırmak için Apache'yi yeniden derlemeniz gerekir.

    Bu noktada bir soru akla gelebilir: Hangi modüller gerekli, hangileri değil? Bu sorunun yanıtı şüphesiz siteden siteye değişir. Ancak, olmazsa olmaz moüller olarak mod_mime, mod_dir ve mod_log_config modüllerini sayabiliriz. Bunlardan mod_log_config olmadan da bir sitenin çalışabileceğinden hareketle bu modülün varlığı isteğe bağlı olsa da bu modülü kaldırmanızı önermiyoruz.

    Atomik İşlemler

    Worker MPM'nin en son geliştirme sürümleri ve mod_cache gibi bazı modüller APR'nin atomik API'sini kullanırlar. Bu API, düşük ayarlı evre eşzamanlamasında atomik işlemler yapar.

    Öntanımlı olarak, APR bu işlemleri hedef işletim sistemi/işlemci platformunda kullanılabilecek en verimli mekanizmayı kullanarak gerçekleştirir. Günümüz işlemcilerinin çoğu, örneğin, bir atomik karşılaştırma ve takas (CAS) işlemini donanımda gerçekleştirmektedir. Bazı platformlarda APR'nin atomik işlemler için öntanımlı olarak daha yavaş olan mutekslere dayalı gerçeklenimi kullanmasının sebebi eski işlemcilerde bu tür makine kodlarının yokluğudur. Apache'yi bu tür platformalarda günümüz işlemcileriyde çalıştırmayı düşünüyorsanız Apache'yi derlemek için yapılandırırken en hızlı atomik işlemin seçilebilmesi için --enable-nonportable-atomics seçeneğini kullanın:

    ./buildconf
    ./configure --with-mpm=worker --enable-nonportable-atomics=yes

    --enable-nonportable-atomics seçeneği şu platformlar için uygundur:

    • SPARC üzerinde Solaris
      APR öntanımlı olarak, SPARC/Solaris üzerinde mutekslere dayalı atomik işlemleri kullanır. Ancak, --enable-nonportable-atomics yapılandırmasını kullanırsanız, donanım üzerinde hızlı karşılaştırma ve takas için uygun SPARC v8plus kodunu kullanacak şekilde kod üretilir. Apache'yi bu seçenekle yapılandırırsanız atomik işlemler daha verimli olacak fakat derlenen Apache çalıştırılabiliri sadece UltraSPARC kırmığı üzerinde çalışacaktır.
    • x86 üzerinde Linux
      APR öntanımlı olarak, Linux üzerinde mutekslere dayalı atomik işlemleri kullanır. Ancak, --enable-nonportable-atomics yapılandırmasını kullanırsanız, donanım üzerinde hızlı karşılaştırma ve takas için uygun 486 kodunu kullanacak şekilde kod üretilir. Apache'yi bu seçenekle yapılandırırsanız atomik işlemler daha verimli olacak fakat derlenen Apache çalıştırılabiliri (386 üzerinde değil) sadece 486 ve sonrası kırmıklarda çalışacaktır.

    mod_status ve ExtendedStatus On

    mod_status modülünü derlemiş ve Apache'yi yapılandırır ve çalıştırırken ExtendedStatus On satırını da kullanmışsanız Apache her istek üzerinde gettimeofday(2) (veya işletim sistemine bağlı olarak time(2)) çağrısından başka (1.3 öncesinde) fazladan defalarca time(2) çağrıları yapacaktır. Bu çağrılarla durum raporununun zamanlama bilgilerini içermesi sağlanır. Başarımı arttırmak için ExtendedStatus off yapın (zaten öntanımlı böyledir).

    accept dizgilemesi ve çok soketli işlem

    Uyarı:

    Bu bölüm, Apache HTTP sunucusunun 2.x sürümlerinde yapılan değişikliklere göre tamamen güncellenmemiştir. Bazı bilgiler hala geçerliyse de lütfen dikkatli kullanınız.

    Burada Unix soket arayüzü gerçeklenirken ihmal edilen bir durumdan bahsedeceğiz. HTTP sunucunuzun çok sayıda adresten çok sayıda portu dinlemek için çok sayıda Listen yönergesi kullanmakta olduğunu varsayalım. Her soketi çalıştığını görmek için denerken Apache bağlantı için select(2) kullanacaktır. select(2) çağrısı bu soketin üzerinde sıfır veya en azından bir bağlantının beklemekte olduğu anlamına gelir. Apache'nin modeli çok sayıda çocuk süreç içerir ve boşta olanların tümünde aynı anda yeni bağlantılar denenebilir. Gerçekte çalışan kod bu olmasa da meramımızı anlatmak için kodun şöyle bir şey olduğunu varsayabiliriz:

            for (;;) {
              for (;;) {
                fd_set accept_fds;
    
                FD_ZERO (&accept_fds);
                for (i = first_socket; i <= last_socket; ++i) {
                  FD_SET (i, &accept_fds);
                }
                rc = select (last_socket+1, &accept_fds, NULL, NULL, NULL);
                if (rc < 1) continue;
                new_connection = -1;
                for (i = first_socket; i <= last_socket; ++i) {
                  if (FD_ISSET (i, &accept_fds)) {
                    new_connection = accept (i, NULL, NULL);
                    if (new_connection != -1) break;
                  }
                }
                if (new_connection != -1) break;
              }
              process_the(new_connection);
            }

    Bu özet gerçeklenim bir takım açlık sorunlarına sebep olur. Bu döngünün çalışması sırasında aynı anda çok sayıda çocuk süreç yeniden çağrılır ve istekler arasında kalan çoğu çocuk da select ile engellenir. Engellenen tüm bu çocuklar soketlerden herhangi biri üzerinde tek bir istek göründüğünde select tarafından uyandırılıp işleme sokulmak üzere döndürülürler. (Uyandırılan çocuk sayısı işletim sistemine ve zamanlama ayarlarına göre değişiklik gösterir,) Bunların hepsi döngüye katılıp bağlantı kabul etmeye (accept) çalışırlar. Fakat içlerinden yalnız biri (sadece bir bağlantı isteğinin mevcut olduğu varsayımıyla) bunu başarabilir. Kalanının bağlantı kabul etmesi (accept) engellenir. Bu durum, bu çocukları istekleri başka başka soketlerden değil mecburen tek bir soketten kabul etmeye kilitler ve bu soket üzerinde yeni bir istek belirip uyandırılana kadar bu durumda kalırlar. Bu açlık sorunu ilk olarak PR#467 sayılı raporla belgelenmiştir. Bu sorunun en az iki çözümü vardır.

    Çözümün biri engellenmeyen soket kullanımıdır. Bu durumda accept çocukları engellemeyecek ve yapılan bir bağlantının ardından diğer çocuklar durumları değişmeksizin bağlantı beklemeye devam edeceklerdir. Fakat bu durum işlemci zamanının boşa harcanmasına sebep olur. Seçilmiş (select) boşta on çocuğun olduğunu ve bir bağlantı geldiğini varsayalım. Kalan dokuz çocuk işine devam edip bağlantı kabul etmeyi (accept) deneyecek, başarızsız olacak, dönecek başa, tekrar seçilecek (select) ve böyle hiçbir iş yapmadan dönüp duracaktır. Bu arada hizmet sunmakta olanlar da işlerini bitirdikten sonra bu döngüdeki yerlerini alacaklardır. Aynı kutunun içinde boşta bir sürü işlemciniz (çok işlemcili sistemler) yoksa bu çözüm pek verimli olmayacaktır.

    Diğer çözüm ise Apache tarafından kullanılan çözüm olup, girdiyi bir iç döngüde sıraya sokmaktır. Döngü aşağıda örneklenmiştir (farklar vurgulanmıştır):

            for (;;) {
              accept_mutex_on ();
              for (;;) {
                fd_set accept_fds;
    
                FD_ZERO (&accept_fds);
                for (i = first_socket; i <= last_socket; ++i) {
                  FD_SET (i, &accept_fds);
                }
                rc = select (last_socket+1, &accept_fds, NULL, NULL, NULL);
                if (rc < 1) continue;
                new_connection = -1;
                for (i = first_socket; i <= last_socket; ++i) {
                  if (FD_ISSET (i, &accept_fds)) {
                    new_connection = accept (i, NULL, NULL);
                    if (new_connection != -1) break;
                  }
                }
                if (new_connection != -1) break;
              }
              accept_mutex_off ();
              process the new_connection;
            }

    accept_mutex_on ve accept_mutex_off işlevleri bir karşılıklı red semoforu oluştururlar. Mutekse aynı anda sadece bir çocuk sahip olabilir. Bu muteksleri gerçeklemek için çeşitli seçenekler vardır. Seçim, src/conf.h (1.3 öncesi) veya src/include/ap_config.h (1.3 ve sonrası) dosyasında tanımlanmıştır. Bazı mimariler bir kilitleme seçeneğine sahip değildir. Böyle mimarilerde çok sayıda Listen yönergesi kullanmak güvenilir olmayacaktır.

    Mutex yönergesi, mpm-accept muteks gerçeklenimini çalışma anında değiştirmek için kullanılabilir. Farklı muteks gerçeklenimleri ile ilgili hususlar bu yönergede belgelenmiştir.

    Başka bir çözüm daha vardır ancak döngü kısmen dizgilenmeyeceğinden (yani belli sayıda sürece izin verilemeyeceğinden) asla gerçeklenmemiştir. Bu sadece, aynı anda çok sayıda çocuk sürecin çalışabileceği ve dolayısıyla band genişliğinin tüm yönleriyle kullanılabileceği çok işlemcili sistemlerde ilginç olabilirdi. Bu gelecekte incelenmeye değer bir konu olmakla beraber çok sayıda HTTP sunucusunun aynı anda aynı amaca hizmet edecek şekilde çalışması standart olarak pek mümkün görülmediğinden bu olasılık çok düşüktür.

    En yüksek başarımı elde etmek için ideal olanı sunucuları çalıştırırken çok sayıda Listen yönergesi kullanmamaktır. Fakat siz yine de okumaya devam edin.

    accept dizgilemesi - tek soket

    Çok soketli sunucular için yukarıda açıklananlar iyi güzel de tek soketli sunucularda durum ne? Kuramsal olarak, bunların hiçbiriyle bir sorunları olmaması gerekir. Çünkü yeni bir bağlantı gelene kadar tüm çocuklar accept(2) ile engellenirler dolayısıyla hiçbir açlık sorununun ortaya çıkmaması gerekir. Uygulamada ise son kullanıcıdan gizli olarak, yukarıda engellenmeyen çocuklar çözümünde bahsedilenle hemen hemen aynı "boşa dönüp durma" davranışı mevcuttur. Çoğu TCP yığıtı bu yolu gerçeklemiştir. Çekirdek, yeni bir bağlantı ortaya çıktığında accept ile engellenen tüm süreçleri uyandırır. Bu süreçlerden bağlantıyı alan kullanıcı bölgesine geçerken çekirdek içinde döngüde olan diğerleri de yeni bağlantı keşfedilene kadar uykularına geri dönerler. Bu çekirdek içi döngü, kullanıcı bölgesindeki kodlara görünür değildir ama bu olmadıkları anlamına gelmez. Bu durum, çok soketli engellenmeyen çocuklar çözümündeki boşa döngünün sebep olduğu gereksiz işlemci yükü sorununu içinde barındırır.

    Bununla birlikte, tek soketli durumda bile bundan daha verimli bir davranış sergileyen bir çok mimari bulduk. Bu aslında hemen hemen her durumda öntanımlı olarak böyledir. Linux altında yapılan üstünkörü denemelerde (128MB bellekli çift Pentium pro 166 işlemcili makinede Linux 2.0.30) tek sokette dizgilemenin dizgilenmemiş duruma göre saniyede %3 daha az istekle sonuçlandığı gösterilmiştir. Fakat dizgilenmemiş tek soket durumunda her istekte 100ms'lik ek bir gecikme olduğu görülmüştür. Bu gecikmenin sebebi muhtemelen uzun mesafeli hatlar olup sadece yerel ağlarda söz konusudur. Tek soketli dizgilemeyi geçersiz kılmak için SINGLE_LISTEN_UNSERIALIZED_ACCEPT tanımlarsanız tek soketli sunucularda artık dizgileme yapılmayacaktır.

    Kapatmayı zamana yaymak

    draft-ietf-http-connection-00.txt taslağının 8. bölümünde bahsedildiği gibi, bir HTTP sunucusunun protokolü güvenilir şekilde gerçeklemesi için her iki yöndeki iletişimi birbirinden bağımsız olarak (iki yönlü bir TCP bağlantısının her yarısını diğerinden bağımsız olarak) kapatması gerekir.

    Bu özellik Apache'ye eklendiğinde Unix'in çeşitli sürümlerinde uzgörüsüzlükten dolayı bir takım geçici telaş sorunlarına sebep oldu. TCP belirtimi FIN_WAIT_2 durumunda bir zaman aşımından bahsetmez ama yasaklamaz da. Zaman aşımı olmayan sistemlerde, Apache 1.2 çoğu soketin sonsuza kadar FIN_WAIT_2 durumunda takılıp kalmasına sebep olur. Çoğu durumda, satıcıdan sağlanan en son TCP/IP yamalarını uygulanarak bu önlenebilir. Satıcının hiçbir yeni yama dağıtmadığı durumlarda (örneğin, SunOS4 -- bir kaynak lisansı ile insanlar bunu kendileri yamayabilirse de) bu özelliği devre dışı bırakmaya karar verdik.

    Bunun üstesinden gelmenin iki yolu vardır. Bunlardan biri SO_LINGER soket seçeneğidir. Bu işin kaderi buymuş gibi görünürse de çoğu TCP/IP yığıtında bu gerektiği gibi gerçeklenmemiştir. Bu yığıtlar üzerinde, bu yöntemin, doğru bir gerçeklenimle bile (örneğin, Linux 2.0.31) sonraki çözümden daha pahalı olduğu ortaya çıkmıştır.

    Çoğunlukla, Apache bunu (http_main.c içindeki) lingering_close adında bir işlevle gerçekler. Bu işlev kabaca şöyle görünür:

            void lingering_close (int s)
            {
              char junk_buffer[2048];
    
              /* shutdown the sending side */
              shutdown (s, 1);
    
              signal (SIGALRM, lingering_death);
              alarm (30);
    
              for (;;) {
                select (s for reading, 2 second timeout);
                if (error) break;
                if (s is ready for reading) {
                  if (read (s, junk_buffer, sizeof (junk_buffer)) <= 0) {
                    break;
                  }
                  /* just toss away whatever is here */
                }
              }
    
              close (s);
            }

    Bağlantı sonunda bu doğal olarak biraz daha masrafa yol açar, fakat güvenilir bir gerçeklenim için bu gereklidir. HTTP/1.1'in daha yaygın kullanılmaya başlanması ve tüm bağlantıların kalıcı hale gelmesiyle bu gerçeklenim daha fazla istek üzerinden kendi masrafını karşılayacaktır. Ateşle oynamak ve bu özelliği devre dışı bırakmak isterseniz NO_LINGCLOSE'u tanımlayabilirsiniz, fakat bu asla önerilmez. Özellikle, HTTP/1.1'den itibaren boruhatlı kalıcı bağlantıların lingering_close kullanmaya başlaması mutlak bir gerekliliktir (ve boruhatlı bağlantıların daha hızlı olması nedeniyle bu bağlantıları desteklemek isteyebilirsiniz).

    Çetele Dosyası

    Apache'nin ana ve alt süreçleri birbirleriyle çetele denen birşey üzerinden haberleşirler. Bunun en mükemmel şekilde paylaşımlı bellekte gerçeklenmesi gerekir. Eriştiğimiz veya portlarını ayrıntılı olarak belirttiğimiz işletim sistemleri için bu, genellikle paylaşımlı bellek kullanılarak gerçeklenir. Geri kalanlar, öntanımlı olarak bunu bir disk dosyası kullanarak gerçekler. Bir disk dosyaı yavaş olmanın yanı sıra güvenilir de değildir (ve daha az özelliğe sahiptir). Mimarinizin src/main/conf.h dosyasını inceleyin ve USE_MMAP_SCOREBOARD veya USE_SHMGET_SCOREBOARD'a bakın. Bu ikisinden birinin (ve yanı sıra sırasıyla HAVE_MMAP veya HAVE_SHMGET'in) tanımlanmış olması, sağlanan paylaşımlı bellek kodunu etkinleştirir. Eğer sisteminiz diğer türdeki paylaşımlı belleğe sahipse, src/main/http_main.c dosyasını açıp, Apache'de bu belleği kullanması gereken kanca işlevleri ekleyin (Bize de bir yama yollayın, lütfen).

    Tarihsel bilgi: Apache'nin Linux uyarlaması, Apache'nin 1.2 sürümüne kadar paylaşımlı belleği kullanmaya başlamamıştı. Bu kusur, Apache'nin Linux üzerindeki erken dönem sürümlerinin davranışlarının zayıf ve güvenilmez olmasına yol açmıştı.

    DYNAMIC_MODULE_LIMIT

    Devingen olarak yüklenen modülleri kullanmamak niyetindeyseniz (burayı okuyan ve sunucunuzun başarımını son kırıntısına kadar arttırmakla ilgilenen biriyseniz bunu düşünmezsiniz), sunucunuzu derlerken seçenekler arasına -DDYNAMIC_MODULE_LIMIT=0 seçeneğini de ekleyin. Bu suretle, sadece, devingen olarak yüklenen modüller için ayrılacak belleği kazanmış olacaksınız.

    top

    Ek: Bir çağrı izlemesinin ayrıntılı çözümlemesi

    Burada, Solaris 8 üzerinde worker MPM'li Apache 2.0.38'in bir sistem çağrısı izlenmektedir. Bu izleme şu komutla elde edilmiştir:

    truss -l -p httpd_çocuk_pidi.

    -l seçeneği, truss'a hafif bir sürecin yaptığı her sistem çağrısını (hafif süreç -- HS -- Solaris'in bir çekirdek seviyesi evreleme biçimi) günlüğe yazmasını söyler.

    Diğer sistemlerin sistem çağrılarını izleyen farklı araçları vardır (strace, ktrace, par gibi). Bunlar da benzer çıktılar üretirler.

    Bu izleme sırasında, bir istemci httpd'den 10 KB'lık duruk bir dosya talebinde bulunmuştur. Duruk olmayan veya içerik uzlaşımlı isteklerin izleme kayıtları vahşice (bazı durumlarda epey çirkince) farklı görünür.

    /67: accept(3, 0x00200BEC, 0x00200C0C, 1) (uykuda...)
    /67: accept(3, 0x00200BEC, 0x00200C0C, 1) = 9

    Bu izlemede, dinleyen evre HS #67 içinde çalışmaktadır.

    accept(2) dizgelemesinin olmayışına dikkat edin. Özellikle bu platformda worker MPM, çok sayıda portu dinlemedikçe, öntanımlı olarak dizgeleştirilmemiş bir accept çağrısı kullanır.

    /65: lwp_park(0x00000000, 0) = 0
    /67: lwp_unpark(65, 1) = 0

    Bağlantının kabul edilmesiyle, dinleyici evre isteği yerine getirmek üzere bir worker evresini uyandırır. Bu izlemede, isteği yerine getiren worker evresi HS #65'e aittir.

    /65: getsockname(9, 0x00200BA4, 0x00200BC4, 1) = 0

    Sanal konakların gerçeklenimi sırasında, Apache'nin, bağlantıları kabul etmek için kullanılan yerel soket adreslerini bilmesi gerekir. Çoğu durumda bu çağrıyı bertaraf etmek mümkündür (hiç sanal konağın olmadığı veya Listen yönergelerinin mutlak adreslerle kullanıldığı durumlarda). Fakat bu en iyilemeleri yapmak için henüz bir çaba harcanmamıştır.

    /65: brk(0x002170E8) = 0
    /65: brk(0x002190E8) = 0

    brk(2) çağrıları devingen bellekten bellek ayırır. httpd çoğu isteği yerine getirirken özel bellek ayırıcılar (apr_pool ve apr_bucket_alloc) kullandığından bunlar bir sistem çağrısı izlemesinde nadiren görünür. Bu izlemede, httpd henüz yeni başlatıldığından, özel bellek ayırıcıları oluşturmak için ham bellek bloklarını ayırmak amacıyla malloc(3) çağrıları yapması gerekir.

    /65: fcntl(9, F_GETFL, 0x00000000) = 2
    /65: fstat64(9, 0xFAF7B818) = 0
    /65: getsockopt(9, 65535, 8192, 0xFAF7B918, 0xFAF7B910, 2190656) = 0
    /65: fstat64(9, 0xFAF7B818) = 0
    /65: getsockopt(9, 65535, 8192, 0xFAF7B918, 0xFAF7B914, 2190656) = 0
    /65: setsockopt(9, 65535, 8192, 0xFAF7B918, 4, 2190656) = 0
    /65: fcntl(9, F_SETFL, 0x00000082) = 0

    Ardından, worker evresi istemciye (dosya tanıtıcısı 9) engellenmeyen kipte bir bağlantı açar. setsockopt(2) ve getsockopt(2) çağrıları, Solaris libc'sinin soketler üzerindeki fcntl(2) çağrısı yanında birer yan etkiden ibarettirler.

    /65: read(9, " G E T / 1 0 k . h t m".., 8000) = 97

    Worker evresi istemciden isteÄŸi okur.

    /65: stat("/var/httpd/apache/httpd-8999/htdocs/10k.html", 0xFAF7B978) = 0
    /65: open("/var/httpd/apache/httpd-8999/htdocs/10k.html", O_RDONLY) = 10

    Bu httpd Options FollowSymLinks ve AllowOverride None ile yapılandırılmıştır. Bu bakımdan, ne istenen dosya ile sonuçlanan yol üzerindeki her dizinde lstat(2) çağrısına ne de .htaccess dosyalarına bakılmasına gerek vardır. stat(2) çağrısı basitçe dosya için şunları doğrulamak amacıyla yapılır: 1) dosya mevcuttur ve 2) bir dizin değil normal bir dosyadır.

    /65: sendfilev(0, 9, 0x00200F90, 2, 0xFAF7B53C) = 10269

    Bu örnekte, httpd, istenen dosyayı ve HTTP yanıt başlığını tek bir sendfilev(2) sistem çağrısı ile göndermektedir. Dosya gönderim işleminin anlamı sistemden sisteme değişiklik gösterir. Bazı sistemlerde, sendfile(2) çağrısından önce başlıkları göndermek için write(2) veya writev(2) çağrısı yapmak gerekir.

    /65: write(4, " 1 2 7 . 0 . 0 . 1 - ".., 78) = 78

    Bu write(2) çağrısı isteği erişim günlüğüne kaydeder. Bu izlemede eksik olan tek şey, time(2) çağrısıdır. Apache 1.3'ün aksine, Apache 2.x zamana bakmak için gettimeofday(3) çağırısını kullanır. Linux ve Solaris gibi bazı işletim sistemleri, gettimeofday işlevinin, sıradan bir sistem çağrısından daha fazla götürüsü olmayan en iyilenmiş bir gerçeklenimine sahiptir.

    /65: shutdown(9, 1, 1) = 0
    /65: poll(0xFAF7B980, 1, 2000) = 1
    /65: read(9, 0xFAF7BC20, 512) = 0
    /65: close(9) = 0

    Burada worker evresi bağlantıyı zamana yaymaktadır.

    /65: close(10) = 0
    /65: lwp_park(0x00000000, 0) (uykuda...)

    Son olarak, worker evresi teslim edilen dosyayı kapattıktan sonra dinleyici evre tarafından başka bir bağlantı atanıncaya kadar beklemeye alınır.

    /67: accept(3, 0x001FEB74, 0x001FEB94, 1) (uykuda...)

    Bu arada, dinleyici evre bağlantıyı bir worker evresine atar atamaz başka bir bağlantıyı beklemeye başlar (Mevcut tüm evreler meşgulse dinleyici evreyi baskılayan worker MPM'nin akış denetim şemasına konu olur). Bu izlemede görünmüyor olsa da sonraki accept(2) çağrısı, yeni bağlantı kabul eden worker evresine paralel olarak yapılabilir (aşırı yük durumlarında normal olarak, bu yapılır).

    Mevcut Diller:  en  |  fr  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/misc/index.html.ko.euc-kr0000644000000000000500000001221713412755316020200 0ustar rootsrc ±âŸ ¾ÆÆÄÄ¡ ¹®¼­ - Apache HTTP Server Version 2.4
    <-

    ±âŸ ¾ÆÆÄÄ¡ ¹®¼­

    °¡´ÉÇÑ ¾ð¾î:  en  |  es  |  fr  |  ko  |  tr  |  zh-cn 

    ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù. ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.

    ¾Æ·¡´Â ¾ÆÆÄÄ¡ À¥¼­¹ö °³¹ß ÇÁ·ÎÁ§Æ®¿¡ ´ëÇÑ Ãß°¡ ¹®¼­ ¸ñ·ÏÀÌ´Ù.

    ÁÖÀÇ

    ¾Æ·¡ ¹®¼­´Â ¾ÆÆÄÄ¡ À¥¼­¹ö 2.1 ¹öÀü¿¡¼­ º¯°æµÈ ³»¿ëÀ» ´ã°í ÀÖÁö ¾Ê´Ù. ¾ÆÁ÷µµ À¯È¿ÇÑ Á¤º¸°¡ ÀÖÁö¸¸, ÁÖÀÇÇØ¼­ »ç¿ëÇÏ±æ ¹Ù¶õ´Ù.

    ¾ÆÆÄÄ¡ ¼º´ÉÇâ»ó

    ÃÖ°íÀÇ ¼º´ÉÀ» ³»±âÀ§ÇØ ¾ÆÆÄÄ¡¸¦ (½ÇÇà½Ã, ÄÄÆÄÀϽÃ) ¼³Á¤ÇÏ´Â ¹æ¹ýÀ» ´Ù·é´Ù. ¾ÆÆÄÄ¡°¡ ¿Ö ¾î¶² ÀÛ¾÷À» Çϰí (¾ÆÆÄÄ¡¸¦ ´À¸®°Å³ª ºü¸£°Ô ¸¸µå´Â) ¾î¶² ÀÛ¾÷À» ÇÏÁö ¾Ê´ÂÁö ¼³¸íÇÑ´Ù.

    º¸¾È ÆÁ

    ¾ÆÆÄÄ¡ À¥¼­¹ö¸¦ ¾ÈÀüÇÏ°Ô À¯ÁöÇϱâÀ§ÇØ "ÇÒ ÀÏ"°ú "ÇÏÁö ¸»¾Æ¾ß ÇÒ ÀÏ".

    URL ÀçÀÛ¼º Áöħ¼­

    ÀÌ ¹®¼­´Â mod_rewrite ÂüÁ¶ ¹®¼­¸¦ º¸ÃæÇÑ´Ù. ÀÌ ¹®¼­´Â À¥°ü¸®ÀÚ°¡ ½ÇÁ¦ ÀÛ¾÷¿¡¼­ ºÎµúÄ¡°ÔµÇ´Â ÀüÇüÀûÀÎ URL°ü·Ã ¹®Á¦¸¦ ÇØ°áÇϱâÀ§Çؼ­ ¾î¶»°Ô ¾ÆÆÄÄ¡ mod_rewrite¸¦ »ç¿ëÇÏ´ÂÁö ¼³¸íÇÑ´Ù.

    °ü·Ã Ç¥ÁØ

    ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡°¡ µû¸£´Â °ü·Ã Ç¥ÁصéÀ» ¿­°ÅÇÑ´Ù.

    °¡´ÉÇÑ ¾ð¾î:  en  |  es  |  fr  |  ko  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/faq/0002755000000000000500000000000013523273357014224 5ustar rootsrchttpd-2.4.41/docs/manual/faq/index.html.fr.utf80000644000000000000500000000715313412755316017515 0ustar rootsrc Foire aux questions - Serveur HTTP Apache Version 2.4
    <-

    Foire aux questions

    Langues Disponibles:  en  |  es  |  fr  |  tr  |  zh-cn 

    La FAQ a été transférée vers le Wiki du serveur HTTP.

    Langues Disponibles:  en  |  es  |  fr  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/faq/index.html.en0000644000000000000500000000714613412755316016625 0ustar rootsrc Frequently Asked Questions - Apache HTTP Server Version 2.4
    <-

    Frequently Asked Questions

    Available Languages:  en  |  es  |  fr  |  tr  |  zh-cn 

    The FAQ has been moved to the HTTP Server Wiki.

    Available Languages:  en  |  es  |  fr  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/faq/index.html.tr.utf80000644000000000000500000000715513412755316017535 0ustar rootsrc Sıkça Sorulan Sorular - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Sıkça Sorulan Sorular

    Mevcut Diller:  en  |  es  |  fr  |  tr  |  zh-cn 

    SSS belgesi HTTP Server Wiki'ye taşındı.

    Mevcut Diller:  en  |  es  |  fr  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/faq/index.html.es0000644000000000000500000000731113412755316016624 0ustar rootsrc Preguntas Frecuentes - Servidor HTTP Apache Versión 2.4
    <-

    Preguntas Frecuentes

    Idiomas disponibles:  en  |  es  |  fr  |  tr  |  zh-cn 

    Las preguntas frecuentes se han movido a la Wiki de HTTP Server (en Inglés).

    Idiomas disponibles:  en  |  es  |  fr  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/faq/index.html.zh-cn.utf80000644000000000000500000000710413412755316020121 0ustar rootsrc 常è§é—®é¢˜ - Apache HTTP æœåС噍 版本 2.4
    <-

    常è§é—®é¢˜

    å¯ç”¨è¯­è¨€:  en  |  es  |  fr  |  tr  |  zh-cn 

    常è§é—®é¢˜å·²ç»ç§»åˆ° HTTP æœåŠ¡å™¨ç»´åŸºã€‚

    å¯ç”¨è¯­è¨€:  en  |  es  |  fr  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/faq/index.html0000644000000000000500000000072313362070302016203 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: index.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: index.html.es Content-Language: es Content-type: text/html; charset=ISO-8859-1 URI: index.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: index.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 URI: index.html.zh-cn.utf8 Content-Language: zh-cn Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/developer/0002755000000000000500000000000013523273357015442 5ustar rootsrchttpd-2.4.41/docs/manual/developer/output-filters.html0000644000000000000500000000020211656337540021326 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: output-filters.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 httpd-2.4.41/docs/manual/developer/filters.html0000644000000000000500000000017311656337540017777 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: filters.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 httpd-2.4.41/docs/manual/developer/hooks.html.en0000644000000000000500000003254713412755316020062 0ustar rootsrc Hook Functions in the Apache HTTP Server 2.x - Apache HTTP Server Version 2.4
    <-

    Hook Functions in the Apache HTTP Server 2.x

    Available Languages:  en 

    Warning

    This document is still in development and may be partially out of date.

    In general, a hook function is one that the Apache HTTP Server will call at some point during the processing of a request. Modules can provide functions that are called, and specify when they get called in comparison to other modules.

    top

    Core Hooks

    The httpd's core modules offer a predefinined list of hooks used during the standard request processing phase. Creating a new hook will expose a function that implements it (see sections below) but it is essential to undestand that you will not extend the httpd's core hooks. Their presence and order in the request processing is in fact a consequence of how they are called in server/request.c (check this section for an overview). The core hooks are listed in the doxygen documentation.

    Reading guide for developing modules and request processing before proceeding is highly recomended.

    top

    Creating a hook function

    In order to create a new hook, four things need to be done:

    Declare the hook function

    Use the AP_DECLARE_HOOK macro, which needs to be given the return type of the hook function, the name of the hook, and the arguments. For example, if the hook returns an int and takes a request_rec * and an int and is called do_something, then declare it like this:

    AP_DECLARE_HOOK(int, do_something, (request_rec *r, int n))

    This should go in a header which modules will include if they want to use the hook.

    Create the hook structure

    Each source file that exports a hook has a private structure which is used to record the module functions that use the hook. This is declared as follows:

    APR_HOOK_STRUCT(
      APR_HOOK_LINK(do_something)
      ...
    )

    Implement the hook caller

    The source file that exports the hook has to implement a function that will call the hook. There are currently three possible ways to do this. In all cases, the calling function is called ap_run_hookname().

    Void hooks

    If the return value of a hook is void, then all the hooks are called, and the caller is implemented like this:

    AP_IMPLEMENT_HOOK_VOID(do_something, (request_rec *r, int n), (r, n))

    The second and third arguments are the dummy argument declaration and the dummy arguments as they will be used when calling the hook. In other words, this macro expands to something like this:

    void ap_run_do_something(request_rec *r, int n)
    {
        ...
        do_something(r, n);
    }

    Hooks that return a value

    If the hook returns a value, then it can either be run until the first hook that does something interesting, like so:

    AP_IMPLEMENT_HOOK_RUN_FIRST(int, do_something, (request_rec *r, int n), (r, n), DECLINED)

    The first hook that does not return DECLINED stops the loop and its return value is returned from the hook caller. Note that DECLINED is the traditional hook return value meaning "I didn't do anything", but it can be whatever suits you.

    Alternatively, all hooks can be run until an error occurs. This boils down to permitting two return values, one of which means "I did something, and it was OK" and the other meaning "I did nothing". The first function that returns a value other than one of those two stops the loop, and its return is the return value. Declare these like so:

    AP_IMPLEMENT_HOOK_RUN_ALL(int, do_something, (request_rec *r, int n), (r, n), OK, DECLINED)

    Again, OK and DECLINED are the traditional values. You can use what you want.

    Call the hook callers

    At appropriate moments in the code, call the hook caller, like so:

    int n, ret;
    request_rec *r;
    
    ret=ap_run_do_something(r, n);
    top

    Hooking the hook

    A module that wants a hook to be called needs to do two things.

    Implement the hook function

    Include the appropriate header, and define a static function of the correct type:

    static int my_something_doer(request_rec *r, int n)
    {
        ...
        return OK;
    }

    Add a hook registering function

    During initialisation, the server will call each modules hook registering function, which is included in the module structure:

    static void my_register_hooks()
    {
        ap_hook_do_something(my_something_doer, NULL, NULL, APR_HOOK_MIDDLE);
    }
    
    mode MODULE_VAR_EXPORT my_module =
    {
        ...
        my_register_hooks       /* register hooks */
    };

    Controlling hook calling order

    In the example above, we didn't use the three arguments in the hook registration function that control calling order of all the functions registered within the hook. There are two mechanisms for doing this. The first, rather crude, method, allows us to specify roughly where the hook is run relative to other modules. The final argument control this. There are three possible values: APR_HOOK_FIRST, APR_HOOK_MIDDLE and APR_HOOK_LAST.

    All modules using any particular value may be run in any order relative to each other, but, of course, all modules using APR_HOOK_FIRST will be run before APR_HOOK_MIDDLE which are before APR_HOOK_LAST. Modules that don't care when they are run should use APR_HOOK_MIDDLE. These values are spaced out, so that positions like APR_HOOK_FIRST-2 are possible to hook slightly earlier than other functions.

    Note that there are two more values, APR_HOOK_REALLY_FIRST and APR_HOOK_REALLY_LAST. These should only be used by the hook exporter.

    The other method allows finer control. When a module knows that it must be run before (or after) some other modules, it can specify them by name. The second (third) argument is a NULL-terminated array of strings consisting of the names of modules that must be run before (after) the current module. For example, suppose we want "mod_xyz.c" and "mod_abc.c" to run before we do, then we'd hook as follows:

    static void register_hooks()
    {
        static const char * const aszPre[] = { "mod_xyz.c", "mod_abc.c", NULL };
    
        ap_hook_do_something(my_something_doer, aszPre, NULL, APR_HOOK_MIDDLE);
    }

    Note that the sort used to achieve this is stable, so ordering set by APR_HOOK_ORDER is preserved, as far as is possible.

    Available Languages:  en 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/developer/request.html0000644000000000000500000000017311656337540020017 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: request.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 httpd-2.4.41/docs/manual/developer/new_api_2_4.html0000644000000000000500000000017711656337540020421 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: new_api_2_4.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 httpd-2.4.41/docs/manual/developer/filters.html.en0000644000000000000500000003512013412755316020375 0ustar rootsrc How filters work in Apache 2.0 - Apache HTTP Server Version 2.4
    <-

    How filters work in Apache 2.0

    Available Languages:  en 

    Warning

    This is a cut 'n paste job from an email (<022501c1c529$f63a9550$7f00000a@KOJ>) and only reformatted for better readability. It's not up to date but may be a good start for further research.

    top

    Filter Types

    There are three basic filter types (each of these is actually broken down into two categories, but that comes later).

    CONNECTION
    Filters of this type are valid for the lifetime of this connection. (AP_FTYPE_CONNECTION, AP_FTYPE_NETWORK)
    PROTOCOL
    Filters of this type are valid for the lifetime of this request from the point of view of the client, this means that the request is valid from the time that the request is sent until the time that the response is received. (AP_FTYPE_PROTOCOL, AP_FTYPE_TRANSCODE)
    RESOURCE
    Filters of this type are valid for the time that this content is used to satisfy a request. For simple requests, this is identical to PROTOCOL, but internal redirects and sub-requests can change the content without ending the request. (AP_FTYPE_RESOURCE, AP_FTYPE_CONTENT_SET)

    It is important to make the distinction between a protocol and a resource filter. A resource filter is tied to a specific resource, it may also be tied to header information, but the main binding is to a resource. If you are writing a filter and you want to know if it is resource or protocol, the correct question to ask is: "Can this filter be removed if the request is redirected to a different resource?" If the answer is yes, then it is a resource filter. If it is no, then it is most likely a protocol or connection filter. I won't go into connection filters, because they seem to be well understood. With this definition, a few examples might help:

    Byterange
    We have coded it to be inserted for all requests, and it is removed if not used. Because this filter is active at the beginning of all requests, it can not be removed if it is redirected, so this is a protocol filter.
    http_header
    This filter actually writes the headers to the network. This is obviously a required filter (except in the asis case which is special and will be dealt with below) and so it is a protocol filter.
    Deflate
    The administrator configures this filter based on which file has been requested. If we do an internal redirect from an autoindex page to an index.html page, the deflate filter may be added or removed based on config, so this is a resource filter.

    The further breakdown of each category into two more filter types is strictly for ordering. We could remove it, and only allow for one filter type, but the order would tend to be wrong, and we would need to hack things to make it work. Currently, the RESOURCE filters only have one filter type, but that should change.

    top

    How are filters inserted?

    This is actually rather simple in theory, but the code is complex. First of all, it is important that everybody realize that there are three filter lists for each request, but they are all concatenated together:

    • r->output_filters (corresponds to RESOURCE)
    • r->proto_output_filters (corresponds to PROTOCOL)
    • r->connection->output_filters (corresponds to CONNECTION)

    The problem previously, was that we used a singly linked list to create the filter stack, and we started from the "correct" location. This means that if I had a RESOURCE filter on the stack, and I added a CONNECTION filter, the CONNECTION filter would be ignored. This should make sense, because we would insert the connection filter at the top of the c->output_filters list, but the end of r->output_filters pointed to the filter that used to be at the front of c->output_filters. This is obviously wrong. The new insertion code uses a doubly linked list. This has the advantage that we never lose a filter that has been inserted. Unfortunately, it comes with a separate set of headaches.

    The problem is that we have two different cases were we use subrequests. The first is to insert more data into a response. The second is to replace the existing response with an internal redirect. These are two different cases and need to be treated as such.

    In the first case, we are creating the subrequest from within a handler or filter. This means that the next filter should be passed to make_sub_request function, and the last resource filter in the sub-request will point to the next filter in the main request. This makes sense, because the sub-request's data needs to flow through the same set of filters as the main request. A graphical representation might help:

    Default_handler --> includes_filter --> byterange --> ...

    If the includes filter creates a sub request, then we don't want the data from that sub-request to go through the includes filter, because it might not be SSI data. So, the subrequest adds the following:

    Default_handler --> includes_filter -/-> byterange --> ...
                                        /
    Default_handler --> sub_request_core

    What happens if the subrequest is SSI data? Well, that's easy, the includes_filter is a resource filter, so it will be added to the sub request in between the Default_handler and the sub_request_core filter.

    The second case for sub-requests is when one sub-request is going to become the real request. This happens whenever a sub-request is created outside of a handler or filter, and NULL is passed as the next filter to the make_sub_request function.

    In this case, the resource filters no longer make sense for the new request, because the resource has changed. So, instead of starting from scratch, we simply point the front of the resource filters for the sub-request to the front of the protocol filters for the old request. This means that we won't lose any of the protocol filters, neither will we try to send this data through a filter that shouldn't see it.

    The problem is that we are using a doubly-linked list for our filter stacks now. But, you should notice that it is possible for two lists to intersect in this model. So, you do you handle the previous pointer? This is a very difficult question to answer, because there is no "right" answer, either method is equally valid. I looked at why we use the previous pointer. The only reason for it is to allow for easier addition of new servers. With that being said, the solution I chose was to make the previous pointer always stay on the original request.

    This causes some more complex logic, but it works for all cases. My concern in having it move to the sub-request, is that for the more common case (where a sub-request is used to add data to a response), the main filter chain would be wrong. That didn't seem like a good idea to me.

    top

    Asis

    The final topic. :-) Mod_Asis is a bit of a hack, but the handler needs to remove all filters except for connection filters, and send the data. If you are using mod_asis, all other bets are off.

    top

    Explanations

    The absolutely last point is that the reason this code was so hard to get right, was because we had hacked so much to force it to work. I wrote most of the hacks originally, so I am very much to blame. However, now that the code is right, I have started to remove some hacks. Most people should have seen that the reset_filters and add_required_filters functions are gone. Those inserted protocol level filters for error conditions, in fact, both functions did the same thing, one after the other, it was really strange. Because we don't lose protocol filters for error cases any more, those hacks went away. The HTTP_HEADER, Content-length, and Byterange filters are all added in the insert_filters phase, because if they were added earlier, we had some interesting interactions. Now, those could all be moved to be inserted with the HTTP_IN, CORE, and CORE_IN filters. That would make the code easier to follow.

    Available Languages:  en 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/developer/documenting.html.zh-cn.utf80000644000000000000500000001530713412755316022550 0ustar rootsrc Apache 2.0 文档 - Apache HTTP æœåС噍 版本 2.4
    <-

    Apache 2.0 文档

    å¯ç”¨è¯­è¨€:  en  |  zh-cn 

    此翻译å¯èƒ½è¿‡æœŸã€‚è¦äº†è§£æœ€è¿‘的更改,请阅读英文版。

    Apache 2.0 使用 Doxygen 从代ç ä¸­ ç”Ÿæˆ API 和全局å˜é‡çš„æ–‡æ¡£ã€‚䏋颿˜¯å¯¹ä½¿ç”¨ Doxygen ç”Ÿæˆæ–‡æ¡£çš„简介。

    top

    简è¦è¯´æ˜Ž

    使用 /** 开始文档å—
    使用 */ ç»“æŸæ–‡æ¡£å—

    在文档å—中,我们å¯ä»¥ä½¿ç”¨å¤šä¸ªæ ‡ç­¾:

    Description of this functions purpose
    @param parameter_name description
    @return description
    @deffunc signature of the function

    一般ä¸éœ€è¦ deffunc 。DoxyGen 没有完整的解æžå™¨ï¼Œæ‰€ä»¥ä»»ä½• 在返回类型声明中使用å®çš„åŽŸåž‹ï¼Œéƒ½æ˜¯å¤ªå¤æ‚了。这些函数就需è¦ä½¿ç”¨ deffunc。 例如 (使用 &gt; è€Œä¸æ˜¯ >):

    /**
     * return the final element of the pathname
     * @param pathname The path to get the final element of
     * @return the final element of the path
     * @tip Examples:
     * <pre>
     * "/foo/bar/gum" -&gt; "gum"
     * "/foo/bar/gum/" -&gt; ""
     * "gum" -&gt; "gum"
     * "wi\\n32\\stuff" -&gt; "stuff"
     * </pre>
     * @deffunc const char * ap_filename_of_pathname(const char *pathname)
     */

    总是在头文件开始包å«:

    /**
     * @package Name of library header
     */

    Doxygen 为æ¯ä¸ªåŒ…生æˆä¸€ä¸ªæ–°çš„ HTML 文件,å字是 {Name_of_library_header}.html,所以请简化å称。

    更深入的讨论,请å‚è§ Doxygen 站点。

    å¯ç”¨è¯­è¨€:  en  |  zh-cn 

    top

    评论

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/developer/API.html0000644000000000000500000000016711656337540016743 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: API.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 httpd-2.4.41/docs/manual/developer/index.html.en0000644000000000000500000001366113412755316020042 0ustar rootsrc Developer Documentation for the Apache HTTP Server 2.4 - Apache HTTP Server Version 2.4
    <-

    Available Languages:  en  |  zh-cn 

    httpd-2.4.41/docs/manual/developer/modules.html.en0000644000000000000500000003473013412755316020403 0ustar rootsrc Converting Modules from Apache 1.3 to Apache 2.0 - Apache HTTP Server Version 2.4
    <-

    Converting Modules from Apache 1.3 to Apache 2.0

    Available Languages:  en  |  ja 

    This is a first attempt at writing the lessons I learned when trying to convert the mod_mmap_static module to Apache 2.0. It's by no means definitive and probably won't even be correct in some ways, but it's a start.

    top

    The easier changes ...

    Cleanup Routines

    These now need to be of type apr_status_t and return a value of that type. Normally the return value will be APR_SUCCESS unless there is some need to signal an error in the cleanup. Be aware that even though you signal an error not all code yet checks and acts upon the error.

    Initialisation Routines

    These should now be renamed to better signify where they sit in the overall process. So the name gets a small change from mmap_init to mmap_post_config. The arguments passed have undergone a radical change and now look like

    • apr_pool_t *p
    • apr_pool_t *plog
    • apr_pool_t *ptemp
    • server_rec *s

    Data Types

    A lot of the data types have been moved into the APR. This means that some have had a name change, such as the one shown above. The following is a brief list of some of the changes that you are likely to have to make.

    • pool becomes apr_pool_t
    • table becomes apr_table_t
    top

    The messier changes...

    Register Hooks

    The new architecture uses a series of hooks to provide for calling your functions. These you'll need to add to your module by way of a new function, static void register_hooks(void). The function is really reasonably straightforward once you understand what needs to be done. Each function that needs calling at some stage in the processing of a request needs to be registered, handlers do not. There are a number of phases where functions can be added, and for each you can specify with a high degree of control the relative order that the function will be called in.

    This is the code that was added to mod_mmap_static:

    static void register_hooks(void)
    {
        static const char * const aszPre[]={ "http_core.c",NULL };
        ap_hook_post_config(mmap_post_config,NULL,NULL,HOOK_MIDDLE);
        ap_hook_translate_name(mmap_static_xlat,aszPre,NULL,HOOK_LAST);
    };

    This registers 2 functions that need to be called, one in the post_config stage (virtually every module will need this one) and one for the translate_name phase. note that while there are different function names the format of each is identical. So what is the format?

    ap_hook_phase_name(function_name, predecessors, successors, position);

    There are 3 hook positions defined...

    • HOOK_FIRST
    • HOOK_MIDDLE
    • HOOK_LAST

    To define the position you use the position and then modify it with the predecessors and successors. Each of the modifiers can be a list of functions that should be called, either before the function is run (predecessors) or after the function has run (successors).

    In the mod_mmap_static case I didn't care about the post_config stage, but the mmap_static_xlat must be called after the core module had done its name translation, hence the use of the aszPre to define a modifier to the position HOOK_LAST.

    Module Definition

    There are now a lot fewer stages to worry about when creating your module definition. The old definition looked like

    module MODULE_VAR_EXPORT module_name_module =
    {
        STANDARD_MODULE_STUFF,
        /* initializer */
        /* dir config creater */
        /* dir merger --- default is to override */
        /* server config */
        /* merge server config */
        /* command handlers */
        /* handlers */
        /* filename translation */
        /* check_user_id */
        /* check auth */
        /* check access */
        /* type_checker */
        /* fixups */
        /* logger */
        /* header parser */
        /* child_init */
        /* child_exit */
        /* post read-request */
    };

    The new structure is a great deal simpler...

    module MODULE_VAR_EXPORT module_name_module =
    {
        STANDARD20_MODULE_STUFF,
        /* create per-directory config structures */
        /* merge per-directory config structures  */
        /* create per-server config structures    */
        /* merge per-server config structures     */
        /* command handlers */
        /* handlers */
        /* register hooks */
    };

    Some of these read directly across, some don't. I'll try to summarise what should be done below.

    The stages that read directly across :

    /* dir config creater */
    /* create per-directory config structures */
    /* server config */
    /* create per-server config structures */
    /* dir merger */
    /* merge per-directory config structures */
    /* merge server config */
    /* merge per-server config structures */
    /* command table */
    /* command apr_table_t */
    /* handlers */
    /* handlers */

    The remainder of the old functions should be registered as hooks. There are the following hook stages defined so far...

    ap_hook_pre_config
    do any setup required prior to processing configuration directives
    ap_hook_check_config
    review configuration directive interdependencies
    ap_hook_test_config
    executes only with -t option
    ap_hook_open_logs
    open any specified logs
    ap_hook_post_config
    this is where the old _init routines get registered
    ap_hook_http_method
    retrieve the http method from a request. (legacy)
    ap_hook_auth_checker
    check if the resource requires authorization
    ap_hook_access_checker
    check for module-specific restrictions
    ap_hook_check_user_id
    check the user-id and password
    ap_hook_default_port
    retrieve the default port for the server
    ap_hook_pre_connection
    do any setup required just before processing, but after accepting
    ap_hook_process_connection
    run the correct protocol
    ap_hook_child_init
    call as soon as the child is started
    ap_hook_create_request
    ??
    ap_hook_fixups
    last chance to modify things before generating content
    ap_hook_handler
    generate the content
    ap_hook_header_parser
    lets modules look at the headers, not used by most modules, because they use post_read_request for this
    ap_hook_insert_filter
    to insert filters into the filter chain
    ap_hook_log_transaction
    log information about the request
    ap_hook_optional_fn_retrieve
    retrieve any functions registered as optional
    ap_hook_post_read_request
    called after reading the request, before any other phase
    ap_hook_quick_handler
    called before any request processing, used by cache modules.
    ap_hook_translate_name
    translate the URI into a filename
    ap_hook_type_checker
    determine and/or set the doc type

    Available Languages:  en  |  ja 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/developer/output-filters.html.en0000644000000000000500000007320513520523022021724 0ustar rootsrc Guide to writing output filters - Apache HTTP Server Version 2.4
    <-

    Guide to writing output filters

    Available Languages:  en 

    There are a number of common pitfalls encountered when writing output filters; this page aims to document best practice for authors of new or existing filters.

    This document is applicable to both version 2.0 and version 2.2 of the Apache HTTP Server; it specifically targets RESOURCE-level or CONTENT_SET-level filters though some advice is generic to all types of filter.

    top

    Filters and bucket brigades

    Each time a filter is invoked, it is passed a bucket brigade, containing a sequence of buckets which represent both data content and metadata. Every bucket has a bucket type; a number of bucket types are defined and used by the httpd core modules (and the apr-util library which provides the bucket brigade interface), but modules are free to define their own types.

    Output filters must be prepared to process buckets of non-standard types; with a few exceptions, a filter need not care about the types of buckets being filtered.

    A filter can tell whether a bucket represents either data or metadata using the APR_BUCKET_IS_METADATA macro. Generally, all metadata buckets should be passed down the filter chain by an output filter. Filters may transform, delete, and insert data buckets as appropriate.

    There are two metadata bucket types which all filters must pay attention to: the EOS bucket type, and the FLUSH bucket type. An EOS bucket indicates that the end of the response has been reached and no further buckets need be processed. A FLUSH bucket indicates that the filter should flush any buffered buckets (if applicable) down the filter chain immediately.

    FLUSH buckets are sent when the content generator (or an upstream filter) knows that there may be a delay before more content can be sent. By passing FLUSH buckets down the filter chain immediately, filters ensure that the client is not kept waiting for pending data longer than necessary.

    Filters can create FLUSH buckets and pass these down the filter chain if desired. Generating FLUSH buckets unnecessarily, or too frequently, can harm network utilisation since it may force large numbers of small packets to be sent, rather than a small number of larger packets. The section on Non-blocking bucket reads covers a case where filters are encouraged to generate FLUSH buckets.

    Example bucket brigade

    HEAP FLUSH FILE EOS

    This shows a bucket brigade which may be passed to a filter; it contains two metadata buckets (FLUSH and EOS), and two data buckets (HEAP and FILE).

    top

    Filter invocation

    For any given request, an output filter might be invoked only once and be given a single brigade representing the entire response. It is also possible that the number of times a filter is invoked for a single response is proportional to the size of the content being filtered, with the filter being passed a brigade containing a single bucket each time. Filters must operate correctly in either case.

    An output filter which allocates long-lived memory every time it is invoked may consume memory proportional to response size. Output filters which need to allocate memory should do so once per response; see Maintaining state below.

    An output filter can distinguish the final invocation for a given response by the presence of an EOS bucket in the brigade. Any buckets in the brigade after an EOS should be ignored.

    An output filter should never pass an empty brigade down the filter chain. To be defensive, filters should be prepared to accept an empty brigade, and should return success without passing this brigade on down the filter chain. The handling of an empty brigade should have no side effects (such as changing any state private to the filter).

    How to handle an empty brigade

    apr_status_t dummy_filter(ap_filter_t *f, apr_bucket_brigade *bb)
    {
        if (APR_BRIGADE_EMPTY(bb)) {
            return APR_SUCCESS;
        }
        ...
    top

    Brigade structure

    A bucket brigade is a doubly-linked list of buckets. The list is terminated (at both ends) by a sentinel which can be distinguished from a normal bucket by comparing it with the pointer returned by APR_BRIGADE_SENTINEL. The list sentinel is in fact not a valid bucket structure; any attempt to call normal bucket functions (such as apr_bucket_read) on the sentinel will have undefined behaviour (i.e. will crash the process).

    There are a variety of functions and macros for traversing and manipulating bucket brigades; see the apr_buckets.h header for complete coverage. Commonly used macros include:

    APR_BRIGADE_FIRST(bb)
    returns the first bucket in brigade bb
    APR_BRIGADE_LAST(bb)
    returns the last bucket in brigade bb
    APR_BUCKET_NEXT(e)
    gives the next bucket after bucket e
    APR_BUCKET_PREV(e)
    gives the bucket before bucket e

    The apr_bucket_brigade structure itself is allocated out of a pool, so if a filter creates a new brigade, it must ensure that memory use is correctly bounded. A filter which allocates a new brigade out of the request pool (r->pool) on every invocation, for example, will fall foul of the warning above concerning memory use. Such a filter should instead create a brigade on the first invocation per request, and store that brigade in its state structure.

    It is generally never advisable to use apr_brigade_destroy to "destroy" a brigade unless you know for certain that the brigade will never be used again, even then, it should be used rarely. The memory used by the brigade structure will not be released by calling this function (since it comes from a pool), but the associated pool cleanup is unregistered. Using apr_brigade_destroy can in fact cause memory leaks; if a "destroyed" brigade contains buckets when its containing pool is destroyed, those buckets will not be immediately destroyed.

    In general, filters should use apr_brigade_cleanup in preference to apr_brigade_destroy.

    top

    Processing buckets

    When dealing with non-metadata buckets, it is important to understand that the "apr_bucket *" object is an abstract representation of data:

    1. The amount of data represented by the bucket may or may not have a determinate length; for a bucket which represents data of indeterminate length, the ->length field is set to the value (apr_size_t)-1. For example, buckets of the PIPE bucket type have an indeterminate length; they represent the output from a pipe.
    2. The data represented by a bucket may or may not be mapped into memory. The FILE bucket type, for example, represents data stored in a file on disk.

    Filters read the data from a bucket using the apr_bucket_read function. When this function is invoked, the bucket may morph into a different bucket type, and may also insert a new bucket into the bucket brigade. This must happen for buckets which represent data not mapped into memory.

    To give an example; consider a bucket brigade containing a single FILE bucket representing an entire file, 24 kilobytes in size:

    FILE(0K-24K)

    When this bucket is read, it will read a block of data from the file, morph into a HEAP bucket to represent that data, and return the data to the caller. It also inserts a new FILE bucket representing the remainder of the file; after the apr_bucket_read call, the brigade looks like:

    HEAP(8K) FILE(8K-24K)

    top

    Filtering brigades

    The basic function of any output filter will be to iterate through the passed-in brigade and transform (or simply examine) the content in some manner. The implementation of the iteration loop is critical to producing a well-behaved output filter.

    Taking an example which loops through the entire brigade as follows:

    Bad output filter -- do not imitate!

    apr_bucket *e = APR_BRIGADE_FIRST(bb);
    const char *data;
    apr_size_t length;
    
    while (e != APR_BRIGADE_SENTINEL(bb)) {
        apr_bucket_read(e, &data, &length, APR_BLOCK_READ);
        e = APR_BUCKET_NEXT(e);
    }
    
    return ap_pass_brigade(bb);

    The above implementation would consume memory proportional to content size. If passed a FILE bucket, for example, the entire file contents would be read into memory as each apr_bucket_read call morphed a FILE bucket into a HEAP bucket.

    In contrast, the implementation below will consume a fixed amount of memory to filter any brigade; a temporary brigade is needed and must be allocated only once per response, see the Maintaining state section.

    Better output filter

    apr_bucket *e;
    const char *data;
    apr_size_t length;
    
    while ((e = APR_BRIGADE_FIRST(bb)) != APR_BRIGADE_SENTINEL(bb)) {
        rv = apr_bucket_read(e, &data, &length, APR_BLOCK_READ);
        if (rv) ...;
        /* Remove bucket e from bb. */
        APR_BUCKET_REMOVE(e);
        /* Insert it into  temporary brigade. */
        APR_BRIGADE_INSERT_HEAD(tmpbb, e);
        /* Pass brigade downstream. */
        rv = ap_pass_brigade(f->next, tmpbb);
        if (rv) ...;
        apr_brigade_cleanup(tmpbb);
    }
    top

    Maintaining state

    A filter which needs to maintain state over multiple invocations per response can use the ->ctx field of its ap_filter_t structure. It is typical to store a temporary brigade in such a structure, to avoid having to allocate a new brigade per invocation as described in the Brigade structure section.

    Example code to maintain filter state

    struct dummy_state {
        apr_bucket_brigade *tmpbb;
        int filter_state;
        ...
    };
    
    apr_status_t dummy_filter(ap_filter_t *f, apr_bucket_brigade *bb)
    {
        struct dummy_state *state;
    
        state = f->ctx;
        if (state == NULL) {
    
            /* First invocation for this response: initialise state structure.
             */
            f->ctx = state = apr_palloc(f->r->pool, sizeof *state);
    
            state->tmpbb = apr_brigade_create(f->r->pool, f->c->bucket_alloc);
            state->filter_state = ...;
        }
        ...
    top

    Buffering buckets

    If a filter decides to store buckets beyond the duration of a single filter function invocation (for example storing them in its ->ctx state structure), those buckets must be set aside. This is necessary because some bucket types provide buckets which represent temporary resources (such as stack memory) which will fall out of scope as soon as the filter chain completes processing the brigade.

    To setaside a bucket, the apr_bucket_setaside function can be called. Not all bucket types can be setaside, but if successful, the bucket will have morphed to ensure it has a lifetime at least as long as the pool given as an argument to the apr_bucket_setaside function.

    Alternatively, the ap_save_brigade function can be used, which will move all the buckets into a separate brigade containing buckets with a lifetime as long as the given pool argument. This function must be used with care, taking into account the following points:

    1. On return, ap_save_brigade guarantees that all the buckets in the returned brigade will represent data mapped into memory. If given an input brigade containing, for example, a PIPE bucket, ap_save_brigade will consume an arbitrary amount of memory to store the entire output of the pipe.
    2. When ap_save_brigade reads from buckets which cannot be setaside, it will always perform blocking reads, removing the opportunity to use Non-blocking bucket reads.
    3. If ap_save_brigade is used without passing a non-NULL "saveto" (destination) brigade parameter, the function will create a new brigade, which may cause memory use to be proportional to content size as described in the Brigade structure section.
    Filters must ensure that any buffered data is processed and passed down the filter chain during the last invocation for a given response (a brigade containing an EOS bucket). Otherwise such data will be lost.
    top

    Non-blocking bucket reads

    The apr_bucket_read function takes an apr_read_type_e argument which determines whether a blocking or non-blocking read will be performed from the data source. A good filter will first attempt to read from every data bucket using a non-blocking read; if that fails with APR_EAGAIN, then send a FLUSH bucket down the filter chain, and retry using a blocking read.

    This mode of operation ensures that any filters further down the filter chain will flush any buffered buckets if a slow content source is being used.

    A CGI script is an example of a slow content source which is implemented as a bucket type. mod_cgi will send PIPE buckets which represent the output from a CGI script; reading from such a bucket will block when waiting for the CGI script to produce more output.

    Example code using non-blocking bucket reads

    apr_bucket *e;
    apr_read_type_e mode = APR_NONBLOCK_READ;
    
    while ((e = APR_BRIGADE_FIRST(bb)) != APR_BRIGADE_SENTINEL(bb)) {
        apr_status_t rv;
    
        rv = apr_bucket_read(e, &data, &length, mode);
        if (rv == APR_EAGAIN && mode == APR_NONBLOCK_READ) {
    
            /* Pass down a brigade containing a flush bucket: */
            APR_BRIGADE_INSERT_TAIL(tmpbb, apr_bucket_flush_create(...));
            rv = ap_pass_brigade(f->next, tmpbb);
            apr_brigade_cleanup(tmpbb);
            if (rv != APR_SUCCESS) return rv;
    
            /* Retry, using a blocking read. */
            mode = APR_BLOCK_READ;
            continue;
        }
        else if (rv != APR_SUCCESS) {
            /* handle errors */
        }
    
        /* Next time, try a non-blocking read first. */
        mode = APR_NONBLOCK_READ;
        ...
    }
    top

    Ten rules for output filters

    In summary, here is a set of rules for all output filters to follow:

    1. Output filters should not pass empty brigades down the filter chain, but should be tolerant of being passed empty brigades.
    2. Output filters must pass all metadata buckets down the filter chain; FLUSH buckets should be respected by passing any pending or buffered buckets down the filter chain.
    3. Output filters should ignore any buckets following an EOS bucket.
    4. Output filters must process a fixed amount of data at a time, to ensure that memory consumption is not proportional to the size of the content being filtered.
    5. Output filters should be agnostic with respect to bucket types, and must be able to process buckets of unfamiliar type.
    6. After calling ap_pass_brigade to pass a brigade down the filter chain, output filters should call apr_brigade_cleanup to ensure the brigade is empty before reusing that brigade structure; output filters should never use apr_brigade_destroy to "destroy" brigades.
    7. Output filters must setaside any buckets which are preserved beyond the duration of the filter function.
    8. Output filters must not ignore the return value of ap_pass_brigade, and must return appropriate errors back up the filter chain.
    9. Output filters must only create a fixed number of bucket brigades for each response, rather than one per invocation.
    10. Output filters should first attempt non-blocking reads from each data bucket, and send a FLUSH bucket down the filter chain if the read blocks, before retrying with a blocking read.
    top

    Use case: buffering in mod_ratelimit

    The r1833875 change is a good example to show what buffering and keeping state means in the context of an output filter. In this use case, a user asked on the users' mailing list a interesting question about why mod_ratelimit seemed not to honor its setting with proxied content (either rate limiting at a different speed or simply not doing it at all). Before diving deep into the solution, it is better to explain on a high level how mod_ratelimit works. The trick is really simple: take the rate limit settings and calculate a chunk size of data to flush every 200ms to the client. For example, let's imagine that to set rate-limit 60 in our config, these are the high level steps to find the chunk size:

    /* milliseconds to wait between each flush of data */
    RATE_INTERVAL_MS = 200;
    /* rate limit speed in b/s */
    speed = 60 * 1024;
    /* final chunk size is 12228 bytes */
    chunk_size = (speed / (1000 / RATE_INTERVAL_MS));

    If we apply this calculation to a bucket brigade carrying 38400 bytes, it means that the filter will try to do the following:

    1. Split the 38400 bytes in chunks of maximum 12228 bytes each.
    2. Flush the first 12228 chunk of bytes and sleep 200ms.
    3. Flush the second 12228 chunk of bytes and sleep 200ms.
    4. Flush the third 12228 chunk of bytes and sleep 200ms.
    5. Flush the remaining 1716 bytes.

    The above pseudo code works fine if the output filter handles only one brigade for each response, but it might happen that it needs to be called multiple times with different brigade sizes as well. The former use case is for example when httpd directly serves some content, like a static file: the bucket brigade abstraction takes care of handling the whole content, and rate limiting works nicely. But if the same static content is served via mod_proxy_http (for example a backend is serving it rather than httpd) then the content generator (in this case mod_proxy_http) may use a maximum buffer size and then send data as bucket brigades to the output filters chain regularly, triggering of course multiple calls to mod_ratelimit. If the reader tries to execute the pseudo code assuming multiple calls to the output filter, each one requiring to process a bucket brigade of 38400 bytes, then it is easy to spot some anomalies:

    1. Between the last flush of a brigade and the first one of the next, there is no sleep.
    2. Even if the sleep was forced after the last flush, then that chunk size would not be the ideal size (1716 bytes instead of 12228) and the final client's speed would quickly become different than what set in the httpd's config.

    In this case, two things might help:

    1. Use the ctx internal data structure, initialized by mod_ratelimit for each response handling cycle, to "remember" when the last sleep was performed across multiple invocations, and act accordingly.
    2. If a bucket brigade is not splittable into a finite number of chunk_size blocks, store the remaining bytes (located in the tail of the bucket brigade) in a temporary holding area (namely another bucket brigade) and then use ap_save_brigade to set them aside. These bytes will be preprended to the next bucket brigade that will be handled in the subsequent invocation.
    3. Avoid the previous logic if the bucket brigade that is currently being processed contains the end of stream bucket (EOS). There is no need to sleep or buffering data if the end of stream is reached.

    The commit linked in the beginning of the section contains also a bit of code refactoring so it is not trivial to read during the first pass, but the overall idea is basically what written up to now. The goal of this section is not to cause a headache to the reader trying to read C code, but to put him/her into the right mindset needed to use efficiently the tools offered by the httpd's filter chain toolset.

    Available Languages:  en 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/developer/debugging.html0000644000000000000500000000017511656337540020264 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: debugging.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 httpd-2.4.41/docs/manual/developer/modules.html0000644000000000000500000000032211656337540017773 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: modules.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: modules.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/developer/thread_safety.html0000644000000000000500000000020111656337540021141 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: thread_safety.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 httpd-2.4.41/docs/manual/developer/API.html.en0000644000000000000500000017755413412755316017360 0ustar rootsrc Apache 1.3 API notes - Apache HTTP Server Version 2.4
    <-

    Apache 1.3 API notes

    Available Languages:  en 

    Warning

    This document has not been updated to take into account changes made in the 2.0 version of the Apache HTTP Server. Some of the information may still be relevant, but please use it with care.

    These are some notes on the Apache API and the data structures you have to deal with, etc. They are not yet nearly complete, but hopefully, they will help you get your bearings. Keep in mind that the API is still subject to change as we gain experience with it. (See the TODO file for what might be coming). However, it will be easy to adapt modules to any changes that are made. (We have more modules to adapt than you do).

    A few notes on general pedagogical style here. In the interest of conciseness, all structure declarations here are incomplete -- the real ones have more slots that I'm not telling you about. For the most part, these are reserved to one component of the server core or another, and should be altered by modules with caution. However, in some cases, they really are things I just haven't gotten around to yet. Welcome to the bleeding edge.

    Finally, here's an outline, to give you some bare idea of what's coming up, and in what order:

    top

    Basic concepts

    We begin with an overview of the basic concepts behind the API, and how they are manifested in the code.

    Handlers, Modules, and Requests

    Apache breaks down request handling into a series of steps, more or less the same way the Netscape server API does (although this API has a few more stages than NetSite does, as hooks for stuff I thought might be useful in the future). These are:

    • URI -> Filename translation
    • Auth ID checking [is the user who they say they are?]
    • Auth access checking [is the user authorized here?]
    • Access checking other than auth
    • Determining MIME type of the object requested
    • `Fixups' -- there aren't any of these yet, but the phase is intended as a hook for possible extensions like SetEnv, which don't really fit well elsewhere.
    • Actually sending a response back to the client.
    • Logging the request

    These phases are handled by looking at each of a succession of modules, looking to see if each of them has a handler for the phase, and attempting invoking it if so. The handler can typically do one of three things:

    • Handle the request, and indicate that it has done so by returning the magic constant OK.
    • Decline to handle the request, by returning the magic integer constant DECLINED. In this case, the server behaves in all respects as if the handler simply hadn't been there.
    • Signal an error, by returning one of the HTTP error codes. This terminates normal handling of the request, although an ErrorDocument may be invoked to try to mop up, and it will be logged in any case.

    Most phases are terminated by the first module that handles them; however, for logging, `fixups', and non-access authentication checking, all handlers always run (barring an error). Also, the response phase is unique in that modules may declare multiple handlers for it, via a dispatch table keyed on the MIME type of the requested object. Modules may declare a response-phase handler which can handle any request, by giving it the key */* (i.e., a wildcard MIME type specification). However, wildcard handlers are only invoked if the server has already tried and failed to find a more specific response handler for the MIME type of the requested object (either none existed, or they all declined).

    The handlers themselves are functions of one argument (a request_rec structure. vide infra), which returns an integer, as above.

    A brief tour of a module

    At this point, we need to explain the structure of a module. Our candidate will be one of the messier ones, the CGI module -- this handles both CGI scripts and the ScriptAlias config file command. It's actually a great deal more complicated than most modules, but if we're going to have only one example, it might as well be the one with its fingers in every place.

    Let's begin with handlers. In order to handle the CGI scripts, the module declares a response handler for them. Because of ScriptAlias, it also has handlers for the name translation phase (to recognize ScriptAliased URIs), the type-checking phase (any ScriptAliased request is typed as a CGI script).

    The module needs to maintain some per (virtual) server information, namely, the ScriptAliases in effect; the module structure therefore contains pointers to a functions which builds these structures, and to another which combines two of them (in case the main server and a virtual server both have ScriptAliases declared).

    Finally, this module contains code to handle the ScriptAlias command itself. This particular module only declares one command, but there could be more, so modules have command tables which declare their commands, and describe where they are permitted, and how they are to be invoked.

    A final note on the declared types of the arguments of some of these commands: a pool is a pointer to a resource pool structure; these are used by the server to keep track of the memory which has been allocated, files opened, etc., either to service a particular request, or to handle the process of configuring itself. That way, when the request is over (or, for the configuration pool, when the server is restarting), the memory can be freed, and the files closed, en masse, without anyone having to write explicit code to track them all down and dispose of them. Also, a cmd_parms structure contains various information about the config file being read, and other status information, which is sometimes of use to the function which processes a config-file command (such as ScriptAlias). With no further ado, the module itself:

    /* Declarations of handlers. */

    int translate_scriptalias (request_rec *);
    int type_scriptalias (request_rec *);
    int cgi_handler (request_rec *);

    /* Subsidiary dispatch table for response-phase
     * handlers, by MIME type */

    handler_rec cgi_handlers[] = {
    { "application/x-httpd-cgi", cgi_handler },
    { NULL }
    };

    /* Declarations of routines to manipulate the
     * module's configuration info. Note that these are
     * returned, and passed in, as void *'s; the server
     * core keeps track of them, but it doesn't, and can't,
     * know their internal structure.
     */

    void *make_cgi_server_config (pool *);
    void *merge_cgi_server_config (pool *, void *, void *);

    /* Declarations of routines to handle config-file commands */

    extern char *script_alias(cmd_parms *, void *per_dir_config, char *fake, char *real);

    command_rec cgi_cmds[] = {
    { "ScriptAlias", script_alias, NULL, RSRC_CONF, TAKE2,
    "a fakename and a realname"},
    { NULL }
    };

    module cgi_module = {

      STANDARD_MODULE_STUFF,
      NULL,                     /* initializer */
      NULL,                     /* dir config creator */
      NULL,                     /* dir merger */
      make_cgi_server_config,   /* server config */
      merge_cgi_server_config,  /* merge server config */
      cgi_cmds,                 /* command table */
      cgi_handlers,             /* handlers */
      translate_scriptalias,    /* filename translation */
      NULL,                     /* check_user_id */
      NULL,                     /* check auth */
      NULL,                     /* check access */
      type_scriptalias,         /* type_checker */
      NULL,                     /* fixups */
      NULL,                     /* logger */
      NULL                      /* header parser */
    };
    top

    How handlers work

    The sole argument to handlers is a request_rec structure. This structure describes a particular request which has been made to the server, on behalf of a client. In most cases, each connection to the client generates only one request_rec structure.

    A brief tour of the request_rec

    The request_rec contains pointers to a resource pool which will be cleared when the server is finished handling the request; to structures containing per-server and per-connection information, and most importantly, information on the request itself.

    The most important such information is a small set of character strings describing attributes of the object being requested, including its URI, filename, content-type and content-encoding (these being filled in by the translation and type-check handlers which handle the request, respectively).

    Other commonly used data items are tables giving the MIME headers on the client's original request, MIME headers to be sent back with the response (which modules can add to at will), and environment variables for any subprocesses which are spawned off in the course of servicing the request. These tables are manipulated using the ap_table_get and ap_table_set routines.

    Note that the Content-type header value cannot be set by module content-handlers using the ap_table_*() routines. Rather, it is set by pointing the content_type field in the request_rec structure to an appropriate string. e.g.,

    r->content_type = "text/html";

    Finally, there are pointers to two data structures which, in turn, point to per-module configuration structures. Specifically, these hold pointers to the data structures which the module has built to describe the way it has been configured to operate in a given directory (via .htaccess files or <Directory> sections), for private data it has built in the course of servicing the request (so modules' handlers for one phase can pass `notes' to their handlers for other phases). There is another such configuration vector in the server_rec data structure pointed to by the request_rec, which contains per (virtual) server configuration data.

    Here is an abridged declaration, giving the fields most commonly used:

    struct request_rec {

    pool *pool;
    conn_rec *connection;
    server_rec *server;

    /* What object is being requested */

    char *uri;
    char *filename;
    char *path_info;

    char *args;           /* QUERY_ARGS, if any */
    struct stat finfo;    /* Set by server core;
                           * st_mode set to zero if no such file */

    char *content_type;
    char *content_encoding;

    /* MIME header environments, in and out. Also,
     * an array containing environment variables to
     * be passed to subprocesses, so people can write
     * modules to add to that environment.
     *
     * The difference between headers_out and
     * err_headers_out is that the latter are printed
     * even on error, and persist across internal
     * redirects (so the headers printed for
     * ErrorDocument handlers will have them).
     */

    table *headers_in;
    table *headers_out;
    table *err_headers_out;
    table *subprocess_env;

    /* Info about the request itself... */

    int header_only;     /* HEAD request, as opposed to GET */
    char *protocol;      /* Protocol, as given to us, or HTTP/0.9 */
    char *method;        /* GET, HEAD, POST, etc. */
    int method_number;   /* M_GET, M_POST, etc. */

    /* Info for logging */

    char *the_request;
    int bytes_sent;

    /* A flag which modules can set, to indicate that
     * the data being returned is volatile, and clients
     * should be told not to cache it.
     */

    int no_cache;

    /* Various other config info which may change
     * with .htaccess files
     * These are config vectors, with one void*
     * pointer for each module (the thing pointed
     * to being the module's business).
     */

    void *per_dir_config;   /* Options set in config files, etc. */
    void *request_config;   /* Notes on *this* request */

    };

    Where request_rec structures come from

    Most request_rec structures are built by reading an HTTP request from a client, and filling in the fields. However, there are a few exceptions:

    • If the request is to an imagemap, a type map (i.e., a *.var file), or a CGI script which returned a local `Location:', then the resource which the user requested is going to be ultimately located by some URI other than what the client originally supplied. In this case, the server does an internal redirect, constructing a new request_rec for the new URI, and processing it almost exactly as if the client had requested the new URI directly.
    • If some handler signaled an error, and an ErrorDocument is in scope, the same internal redirect machinery comes into play.
    • Finally, a handler occasionally needs to investigate `what would happen if' some other request were run. For instance, the directory indexing module needs to know what MIME type would be assigned to a request for each directory entry, in order to figure out what icon to use.

      Such handlers can construct a sub-request, using the functions ap_sub_req_lookup_file, ap_sub_req_lookup_uri, and ap_sub_req_method_uri; these construct a new request_rec structure and processes it as you would expect, up to but not including the point of actually sending a response. (These functions skip over the access checks if the sub-request is for a file in the same directory as the original request).

      (Server-side includes work by building sub-requests and then actually invoking the response handler for them, via the function ap_run_sub_req).

    Handling requests, declining, and returning error codes

    As discussed above, each handler, when invoked to handle a particular request_rec, has to return an int to indicate what happened. That can either be

    • OK -- the request was handled successfully. This may or may not terminate the phase.
    • DECLINED -- no erroneous condition exists, but the module declines to handle the phase; the server tries to find another.
    • an HTTP error code, which aborts handling of the request.

    Note that if the error code returned is REDIRECT, then the module should put a Location in the request's headers_out, to indicate where the client should be redirected to.

    Special considerations for response handlers

    Handlers for most phases do their work by simply setting a few fields in the request_rec structure (or, in the case of access checkers, simply by returning the correct error code). However, response handlers have to actually send a request back to the client.

    They should begin by sending an HTTP response header, using the function ap_send_http_header. (You don't have to do anything special to skip sending the header for HTTP/0.9 requests; the function figures out on its own that it shouldn't do anything). If the request is marked header_only, that's all they should do; they should return after that, without attempting any further output.

    Otherwise, they should produce a request body which responds to the client as appropriate. The primitives for this are ap_rputc and ap_rprintf, for internally generated output, and ap_send_fd, to copy the contents of some FILE * straight to the client.

    At this point, you should more or less understand the following piece of code, which is the handler which handles GET requests which have no more specific handler; it also shows how conditional GETs can be handled, if it's desirable to do so in a particular response handler -- ap_set_last_modified checks against the If-modified-since value supplied by the client, if any, and returns an appropriate code (which will, if nonzero, be USE_LOCAL_COPY). No similar considerations apply for ap_set_content_length, but it returns an error code for symmetry.

    int default_handler (request_rec *r)
    {
    int errstatus;
    FILE *f;

    if (r->method_number != M_GET) return DECLINED;
    if (r->finfo.st_mode == 0) return NOT_FOUND;

    if ((errstatus = ap_set_content_length (r, r->finfo.st_size))
        || (errstatus = ap_set_last_modified (r, r->finfo.st_mtime)))
    return errstatus;

    f = fopen (r->filename, "r");

    if (f == NULL) {
    log_reason("file permissions deny server access", r->filename, r);
    return FORBIDDEN;
    }

    register_timeout ("send", r);
    ap_send_http_header (r);

    if (!r->header_only) send_fd (f, r);
    ap_pfclose (r->pool, f);
    return OK;
    }

    Finally, if all of this is too much of a challenge, there are a few ways out of it. First off, as shown above, a response handler which has not yet produced any output can simply return an error code, in which case the server will automatically produce an error response. Secondly, it can punt to some other handler by invoking ap_internal_redirect, which is how the internal redirection machinery discussed above is invoked. A response handler which has internally redirected should always return OK.

    (Invoking ap_internal_redirect from handlers which are not response handlers will lead to serious confusion).

    Special considerations for authentication handlers

    Stuff that should be discussed here in detail:

    • Authentication-phase handlers not invoked unless auth is configured for the directory.
    • Common auth configuration stored in the core per-dir configuration; it has accessors ap_auth_type, ap_auth_name, and ap_requires.
    • Common routines, to handle the protocol end of things, at least for HTTP basic authentication (ap_get_basic_auth_pw, which sets the connection->user structure field automatically, and ap_note_basic_auth_failure, which arranges for the proper WWW-Authenticate: header to be sent back).

    Special considerations for logging handlers

    When a request has internally redirected, there is the question of what to log. Apache handles this by bundling the entire chain of redirects into a list of request_rec structures which are threaded through the r->prev and r->next pointers. The request_rec which is passed to the logging handlers in such cases is the one which was originally built for the initial request from the client; note that the bytes_sent field will only be correct in the last request in the chain (the one for which a response was actually sent).

    top

    Resource allocation and resource pools

    One of the problems of writing and designing a server-pool server is that of preventing leakage, that is, allocating resources (memory, open files, etc.), without subsequently releasing them. The resource pool machinery is designed to make it easy to prevent this from happening, by allowing resource to be allocated in such a way that they are automatically released when the server is done with them.

    The way this works is as follows: the memory which is allocated, file opened, etc., to deal with a particular request are tied to a resource pool which is allocated for the request. The pool is a data structure which itself tracks the resources in question.

    When the request has been processed, the pool is cleared. At that point, all the memory associated with it is released for reuse, all files associated with it are closed, and any other clean-up functions which are associated with the pool are run. When this is over, we can be confident that all the resource tied to the pool have been released, and that none of them have leaked.

    Server restarts, and allocation of memory and resources for per-server configuration, are handled in a similar way. There is a configuration pool, which keeps track of resources which were allocated while reading the server configuration files, and handling the commands therein (for instance, the memory that was allocated for per-server module configuration, log files and other files that were opened, and so forth). When the server restarts, and has to reread the configuration files, the configuration pool is cleared, and so the memory and file descriptors which were taken up by reading them the last time are made available for reuse.

    It should be noted that use of the pool machinery isn't generally obligatory, except for situations like logging handlers, where you really need to register cleanups to make sure that the log file gets closed when the server restarts (this is most easily done by using the function ap_pfopen, which also arranges for the underlying file descriptor to be closed before any child processes, such as for CGI scripts, are execed), or in case you are using the timeout machinery (which isn't yet even documented here). However, there are two benefits to using it: resources allocated to a pool never leak (even if you allocate a scratch string, and just forget about it); also, for memory allocation, ap_palloc is generally faster than malloc.

    We begin here by describing how memory is allocated to pools, and then discuss how other resources are tracked by the resource pool machinery.

    Allocation of memory in pools

    Memory is allocated to pools by calling the function ap_palloc, which takes two arguments, one being a pointer to a resource pool structure, and the other being the amount of memory to allocate (in chars). Within handlers for handling requests, the most common way of getting a resource pool structure is by looking at the pool slot of the relevant request_rec; hence the repeated appearance of the following idiom in module code:

    int my_handler(request_rec *r)
    {
    struct my_structure *foo;
    ...

    foo = (foo *)ap_palloc (r->pool, sizeof(my_structure));
    }

    Note that there is no ap_pfree -- ap_palloced memory is freed only when the associated resource pool is cleared. This means that ap_palloc does not have to do as much accounting as malloc(); all it does in the typical case is to round up the size, bump a pointer, and do a range check.

    (It also raises the possibility that heavy use of ap_palloc could cause a server process to grow excessively large. There are two ways to deal with this, which are dealt with below; briefly, you can use malloc, and try to be sure that all of the memory gets explicitly freed, or you can allocate a sub-pool of the main pool, allocate your memory in the sub-pool, and clear it out periodically. The latter technique is discussed in the section on sub-pools below, and is used in the directory-indexing code, in order to avoid excessive storage allocation when listing directories with thousands of files).

    Allocating initialized memory

    There are functions which allocate initialized memory, and are frequently useful. The function ap_pcalloc has the same interface as ap_palloc, but clears out the memory it allocates before it returns it. The function ap_pstrdup takes a resource pool and a char * as arguments, and allocates memory for a copy of the string the pointer points to, returning a pointer to the copy. Finally ap_pstrcat is a varargs-style function, which takes a pointer to a resource pool, and at least two char * arguments, the last of which must be NULL. It allocates enough memory to fit copies of each of the strings, as a unit; for instance:

    ap_pstrcat (r->pool, "foo", "/", "bar", NULL);

    returns a pointer to 8 bytes worth of memory, initialized to "foo/bar".

    Commonly-used pools in the Apache Web server

    A pool is really defined by its lifetime more than anything else. There are some static pools in http_main which are passed to various non-http_main functions as arguments at opportune times. Here they are:

    permanent_pool
    never passed to anything else, this is the ancestor of all pools
    pconf
    • subpool of permanent_pool
    • created at the beginning of a config "cycle"; exists until the server is terminated or restarts; passed to all config-time routines, either via cmd->pool, or as the "pool *p" argument on those which don't take pools
    • passed to the module init() functions
    ptemp
    • sorry I lie, this pool isn't called this currently in 1.3, I renamed it this in my pthreads development. I'm referring to the use of ptrans in the parent... contrast this with the later definition of ptrans in the child.
    • subpool of permanent_pool
    • created at the beginning of a config "cycle"; exists until the end of config parsing; passed to config-time routines via cmd->temp_pool. Somewhat of a "bastard child" because it isn't available everywhere. Used for temporary scratch space which may be needed by some config routines but which is deleted at the end of config.
    pchild
    • subpool of permanent_pool
    • created when a child is spawned (or a thread is created); lives until that child (thread) is destroyed
    • passed to the module child_init functions
    • destruction happens right after the child_exit functions are called... (which may explain why I think child_exit is redundant and unneeded)
    ptrans
    • should be a subpool of pchild, but currently is a subpool of permanent_pool, see above
    • cleared by the child before going into the accept() loop to receive a connection
    • used as connection->pool
    r->pool
    • for the main request this is a subpool of connection->pool; for subrequests it is a subpool of the parent request's pool.
    • exists until the end of the request (i.e., ap_destroy_sub_req, or in child_main after process_request has finished)
    • note that r itself is allocated from r->pool; i.e., r->pool is first created and then r is the first thing palloc()d from it

    For almost everything folks do, r->pool is the pool to use. But you can see how other lifetimes, such as pchild, are useful to some modules... such as modules that need to open a database connection once per child, and wish to clean it up when the child dies.

    You can also see how some bugs have manifested themself, such as setting connection->user to a value from r->pool -- in this case connection exists for the lifetime of ptrans, which is longer than r->pool (especially if r->pool is a subrequest!). So the correct thing to do is to allocate from connection->pool.

    And there was another interesting bug in mod_include / mod_cgi. You'll see in those that they do this test to decide if they should use r->pool or r->main->pool. In this case the resource that they are registering for cleanup is a child process. If it were registered in r->pool, then the code would wait() for the child when the subrequest finishes. With mod_include this could be any old #include, and the delay can be up to 3 seconds... and happened quite frequently. Instead the subprocess is registered in r->main->pool which causes it to be cleaned up when the entire request is done -- i.e., after the output has been sent to the client and logging has happened.

    Tracking open files, etc.

    As indicated above, resource pools are also used to track other sorts of resources besides memory. The most common are open files. The routine which is typically used for this is ap_pfopen, which takes a resource pool and two strings as arguments; the strings are the same as the typical arguments to fopen, e.g.,

    ...
    FILE *f = ap_pfopen (r->pool, r->filename, "r");

    if (f == NULL) { ... } else { ... }

    There is also a ap_popenf routine, which parallels the lower-level open system call. Both of these routines arrange for the file to be closed when the resource pool in question is cleared.

    Unlike the case for memory, there are functions to close files allocated with ap_pfopen, and ap_popenf, namely ap_pfclose and ap_pclosef. (This is because, on many systems, the number of files which a single process can have open is quite limited). It is important to use these functions to close files allocated with ap_pfopen and ap_popenf, since to do otherwise could cause fatal errors on systems such as Linux, which react badly if the same FILE* is closed more than once.

    (Using the close functions is not mandatory, since the file will eventually be closed regardless, but you should consider it in cases where your module is opening, or could open, a lot of files).

    Other sorts of resources -- cleanup functions

    More text goes here. Describe the cleanup primitives in terms of which the file stuff is implemented; also, spawn_process.

    Pool cleanups live until clear_pool() is called: clear_pool(a) recursively calls destroy_pool() on all subpools of a; then calls all the cleanups for a; then releases all the memory for a. destroy_pool(a) calls clear_pool(a) and then releases the pool structure itself. i.e., clear_pool(a) doesn't delete a, it just frees up all the resources and you can start using it again immediately.

    Fine control -- creating and dealing with sub-pools, with a note on sub-requests

    On rare occasions, too-free use of ap_palloc() and the associated primitives may result in undesirably profligate resource allocation. You can deal with such a case by creating a sub-pool, allocating within the sub-pool rather than the main pool, and clearing or destroying the sub-pool, which releases the resources which were associated with it. (This really is a rare situation; the only case in which it comes up in the standard module set is in case of listing directories, and then only with very large directories. Unnecessary use of the primitives discussed here can hair up your code quite a bit, with very little gain).

    The primitive for creating a sub-pool is ap_make_sub_pool, which takes another pool (the parent pool) as an argument. When the main pool is cleared, the sub-pool will be destroyed. The sub-pool may also be cleared or destroyed at any time, by calling the functions ap_clear_pool and ap_destroy_pool, respectively. (The difference is that ap_clear_pool frees resources associated with the pool, while ap_destroy_pool also deallocates the pool itself. In the former case, you can allocate new resources within the pool, and clear it again, and so forth; in the latter case, it is simply gone).

    One final note -- sub-requests have their own resource pools, which are sub-pools of the resource pool for the main request. The polite way to reclaim the resources associated with a sub request which you have allocated (using the ap_sub_req_... functions) is ap_destroy_sub_req, which frees the resource pool. Before calling this function, be sure to copy anything that you care about which might be allocated in the sub-request's resource pool into someplace a little less volatile (for instance, the filename in its request_rec structure).

    (Again, under most circumstances, you shouldn't feel obliged to call this function; only 2K of memory or so are allocated for a typical sub request, and it will be freed anyway when the main request pool is cleared. It is only when you are allocating many, many sub-requests for a single main request that you should seriously consider the ap_destroy_... functions).

    top

    Configuration, commands and the like

    One of the design goals for this server was to maintain external compatibility with the NCSA 1.3 server --- that is, to read the same configuration files, to process all the directives therein correctly, and in general to be a drop-in replacement for NCSA. On the other hand, another design goal was to move as much of the server's functionality into modules which have as little as possible to do with the monolithic server core. The only way to reconcile these goals is to move the handling of most commands from the central server into the modules.

    However, just giving the modules command tables is not enough to divorce them completely from the server core. The server has to remember the commands in order to act on them later. That involves maintaining data which is private to the modules, and which can be either per-server, or per-directory. Most things are per-directory, including in particular access control and authorization information, but also information on how to determine file types from suffixes, which can be modified by AddType and ForceType directives, and so forth. In general, the governing philosophy is that anything which can be made configurable by directory should be; per-server information is generally used in the standard set of modules for information like Aliases and Redirects which come into play before the request is tied to a particular place in the underlying file system.

    Another requirement for emulating the NCSA server is being able to handle the per-directory configuration files, generally called .htaccess files, though even in the NCSA server they can contain directives which have nothing at all to do with access control. Accordingly, after URI -> filename translation, but before performing any other phase, the server walks down the directory hierarchy of the underlying filesystem, following the translated pathname, to read any .htaccess files which might be present. The information which is read in then has to be merged with the applicable information from the server's own config files (either from the <Directory> sections in access.conf, or from defaults in srm.conf, which actually behaves for most purposes almost exactly like <Directory />).

    Finally, after having served a request which involved reading .htaccess files, we need to discard the storage allocated for handling them. That is solved the same way it is solved wherever else similar problems come up, by tying those structures to the per-transaction resource pool.

    Per-directory configuration structures

    Let's look out how all of this plays out in mod_mime.c, which defines the file typing handler which emulates the NCSA server's behavior of determining file types from suffixes. What we'll be looking at, here, is the code which implements the AddType and AddEncoding commands. These commands can appear in .htaccess files, so they must be handled in the module's private per-directory data, which in fact, consists of two separate tables for MIME types and encoding information, and is declared as follows:

    typedef struct {
        table *forced_types;      /* Additional AddTyped stuff */
        table *encoding_types;    /* Added with AddEncoding... */
    } mime_dir_config;

    When the server is reading a configuration file, or <Directory> section, which includes one of the MIME module's commands, it needs to create a mime_dir_config structure, so those commands have something to act on. It does this by invoking the function it finds in the module's `create per-dir config slot', with two arguments: the name of the directory to which this configuration information applies (or NULL for srm.conf), and a pointer to a resource pool in which the allocation should happen.

    (If we are reading a .htaccess file, that resource pool is the per-request resource pool for the request; otherwise it is a resource pool which is used for configuration data, and cleared on restarts. Either way, it is important for the structure being created to vanish when the pool is cleared, by registering a cleanup on the pool if necessary).

    For the MIME module, the per-dir config creation function just ap_pallocs the structure above, and a creates a couple of tables to fill it. That looks like this:

    void *create_mime_dir_config (pool *p, char *dummy)
    {
    mime_dir_config *new =
    (mime_dir_config *) ap_palloc (p, sizeof(mime_dir_config));

    new->forced_types = ap_make_table (p, 4);
    new->encoding_types = ap_make_table (p, 4);

    return new;
    }

    Now, suppose we've just read in a .htaccess file. We already have the per-directory configuration structure for the next directory up in the hierarchy. If the .htaccess file we just read in didn't have any AddType or AddEncoding commands, its per-directory config structure for the MIME module is still valid, and we can just use it. Otherwise, we need to merge the two structures somehow.

    To do that, the server invokes the module's per-directory config merge function, if one is present. That function takes three arguments: the two structures being merged, and a resource pool in which to allocate the result. For the MIME module, all that needs to be done is overlay the tables from the new per-directory config structure with those from the parent:

    void *merge_mime_dir_configs (pool *p, void *parent_dirv, void *subdirv)
    {
    mime_dir_config *parent_dir = (mime_dir_config *)parent_dirv;
    mime_dir_config *subdir = (mime_dir_config *)subdirv;
    mime_dir_config *new =
    (mime_dir_config *)ap_palloc (p, sizeof(mime_dir_config));

    new->forced_types = ap_overlay_tables (p, subdir->forced_types,
    parent_dir->forced_types);
    new->encoding_types = ap_overlay_tables (p, subdir->encoding_types,
    parent_dir->encoding_types);

    return new;
    }

    As a note -- if there is no per-directory merge function present, the server will just use the subdirectory's configuration info, and ignore the parent's. For some modules, that works just fine (e.g., for the includes module, whose per-directory configuration information consists solely of the state of the XBITHACK), and for those modules, you can just not declare one, and leave the corresponding structure slot in the module itself NULL.

    Command handling

    Now that we have these structures, we need to be able to figure out how to fill them. That involves processing the actual AddType and AddEncoding commands. To find commands, the server looks in the module's command table. That table contains information on how many arguments the commands take, and in what formats, where it is permitted, and so forth. That information is sufficient to allow the server to invoke most command-handling functions with pre-parsed arguments. Without further ado, let's look at the AddType command handler, which looks like this (the AddEncoding command looks basically the same, and won't be shown here):

    char *add_type(cmd_parms *cmd, mime_dir_config *m, char *ct, char *ext)
    {
    if (*ext == '.') ++ext;
    ap_table_set (m->forced_types, ext, ct);
    return NULL;
    }

    This command handler is unusually simple. As you can see, it takes four arguments, two of which are pre-parsed arguments, the third being the per-directory configuration structure for the module in question, and the fourth being a pointer to a cmd_parms structure. That structure contains a bunch of arguments which are frequently of use to some, but not all, commands, including a resource pool (from which memory can be allocated, and to which cleanups should be tied), and the (virtual) server being configured, from which the module's per-server configuration data can be obtained if required.

    Another way in which this particular command handler is unusually simple is that there are no error conditions which it can encounter. If there were, it could return an error message instead of NULL; this causes an error to be printed out on the server's stderr, followed by a quick exit, if it is in the main config files; for a .htaccess file, the syntax error is logged in the server error log (along with an indication of where it came from), and the request is bounced with a server error response (HTTP error status, code 500).

    The MIME module's command table has entries for these commands, which look like this:

    command_rec mime_cmds[] = {
    { "AddType", add_type, NULL, OR_FILEINFO, TAKE2,
    "a mime type followed by a file extension" },
    { "AddEncoding", add_encoding, NULL, OR_FILEINFO, TAKE2,
    "an encoding (e.g., gzip), followed by a file extension" },
    { NULL }
    };

    The entries in these tables are:

    • The name of the command
    • The function which handles it
    • a (void *) pointer, which is passed in the cmd_parms structure to the command handler --- this is useful in case many similar commands are handled by the same function.
    • A bit mask indicating where the command may appear. There are mask bits corresponding to each AllowOverride option, and an additional mask bit, RSRC_CONF, indicating that the command may appear in the server's own config files, but not in any .htaccess file.
    • A flag indicating how many arguments the command handler wants pre-parsed, and how they should be passed in. TAKE2 indicates two pre-parsed arguments. Other options are TAKE1, which indicates one pre-parsed argument, FLAG, which indicates that the argument should be On or Off, and is passed in as a boolean flag, RAW_ARGS, which causes the server to give the command the raw, unparsed arguments (everything but the command name itself). There is also ITERATE, which means that the handler looks the same as TAKE1, but that if multiple arguments are present, it should be called multiple times, and finally ITERATE2, which indicates that the command handler looks like a TAKE2, but if more arguments are present, then it should be called multiple times, holding the first argument constant.
    • Finally, we have a string which describes the arguments that should be present. If the arguments in the actual config file are not as required, this string will be used to help give a more specific error message. (You can safely leave this NULL).

    Finally, having set this all up, we have to use it. This is ultimately done in the module's handlers, specifically for its file-typing handler, which looks more or less like this; note that the per-directory configuration structure is extracted from the request_rec's per-directory configuration vector by using the ap_get_module_config function.

    int find_ct(request_rec *r)
    {
    int i;
    char *fn = ap_pstrdup (r->pool, r->filename);
    mime_dir_config *conf = (mime_dir_config *)
    ap_get_module_config(r->per_dir_config, &mime_module);
    char *type;

    if (S_ISDIR(r->finfo.st_mode)) {
    r->content_type = DIR_MAGIC_TYPE;
    return OK;
    }

    if((i=ap_rind(fn,'.')) < 0) return DECLINED;
    ++i;

    if ((type = ap_table_get (conf->encoding_types, &fn[i])))
    {
    r->content_encoding = type;

    /* go back to previous extension to try to use it as a type */
    fn[i-1] = '\0';
    if((i=ap_rind(fn,'.')) < 0) return OK;
    ++i;
    }

    if ((type = ap_table_get (conf->forced_types, &fn[i])))
    {
    r->content_type = type;
    }

    return OK;
    }

    Side notes -- per-server configuration, virtual servers, etc.

    The basic ideas behind per-server module configuration are basically the same as those for per-directory configuration; there is a creation function and a merge function, the latter being invoked where a virtual server has partially overridden the base server configuration, and a combined structure must be computed. (As with per-directory configuration, the default if no merge function is specified, and a module is configured in some virtual server, is that the base configuration is simply ignored).

    The only substantial difference is that when a command needs to configure the per-server private module data, it needs to go to the cmd_parms data to get at it. Here's an example, from the alias module, which also indicates how a syntax error can be returned (note that the per-directory configuration argument to the command handler is declared as a dummy, since the module doesn't actually have per-directory config data):

    char *add_redirect(cmd_parms *cmd, void *dummy, char *f, char *url)
    {
    server_rec *s = cmd->server;
    alias_server_conf *conf = (alias_server_conf *)
    ap_get_module_config(s->module_config,&alias_module);
    alias_entry *new = ap_push_array (conf->redirects);

    if (!ap_is_url (url)) return "Redirect to non-URL";

    new->fake = f; new->real = url;
    return NULL;
    }

    Available Languages:  en 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/developer/new_api_2_4.html.en0000644000000000000500000007231313412755316021020 0ustar rootsrc API Changes in Apache HTTP Server 2.4 since 2.2 - Apache HTTP Server Version 2.4
    <-

    API Changes in Apache HTTP Server 2.4 since 2.2

    Available Languages:  en 

    This document describes changes to the Apache HTTPD API from version 2.2 to 2.4, that may be of interest to module/application developers and core hacks. As of the first GA release of the 2.4 branch API compatibility is preserved for the life of the 2.4 branch. (The VERSIONING description for the 2.4 release provides more information about API compatibility.)

    API changes fall into two categories: APIs that are altogether new, and existing APIs that are expanded or changed. The latter are further divided into those where all changes are backwards-compatible (so existing modules can ignore them), and those that might require attention by maintainers. As with the transition from HTTPD 2.0 to 2.2, existing modules and applications will require recompiling and may call for some attention, but most should not require any substantial updating (although some may be able to take advantage of API changes to offer significant improvements).

    For the purpose of this document, the API is split according to the public header files. These headers are themselves the reference documentation, and can be used to generate a browsable HTML reference with make docs.

    top

    Changed APIs

    ap_expr (NEW!)

    Introduces a new API to parse and evaluate boolean and algebraic expressions, including provision for a standard syntax and customised variants.

    ap_listen (changed; backwards-compatible)

    Introduces a new API to enable httpd child processes to serve different purposes.

    ap_mpm (changed)

    ap_mpm_run is replaced by a new mpm hook. Also ap_graceful_stop_signalled is lost, and ap_mpm_register_timed_callback is new.

    ap_regex (changed)

    In addition to the existing regexp wrapper, a new higher-level API ap_rxplus is now provided. This provides the capability to compile Perl-style expressions like s/regexp/replacement/flags and to execute them against arbitrary strings. Support for regexp backreferences is also added.

    ap_slotmem (NEW!)

    Introduces an API for modules to allocate and manage memory slots, most commonly for shared memory.

    ap_socache (NEW!)

    API to manage a shared object cache.

    heartbeat (NEW!)

    common structures for heartbeat modules

    ap_parse_htaccess (changed)

    The function signature for ap_parse_htaccess has been changed. A apr_table_t of individual directives allowed for override must now be passed (override remains).

    http_config (changed)

    • Introduces per-module, per-directory loglevels, including macro wrappers.
    • New AP_DECLARE_MODULE macro to declare all modules.
    • New APLOG_USE_MODULE macro necessary for per-module loglevels in multi-file modules.
    • New API to retain data across module unload/load
    • New check_config hook
    • New ap_process_fnmatch_configs() function to process wildcards
    • Change ap_configfile_t, ap_cfg_getline(), ap_cfg_getc() to return error codes, and add ap_pcfg_strerror() for retrieving an error description.
    • Any config directive permitted in ACCESS_CONF context must now correctly handle being called from an .htaccess file via the new AllowOverrideList directive. ap_check_cmd_context() accepts a new flag NOT_IN_HTACCESS to detect this case.

    http_core (changed)

    • REMOVED ap_default_type, ap_requires, all 2.2 authnz API
    • Introduces Optional Functions for logio and authnz
    • New function ap_get_server_name_for_url to support IPv6 literals.
    • New function ap_register_errorlog_handler to register error log format string handlers.
    • Arguments of error_log hook have changed. Declaration has moved to http_core.h.
    • New function ap_state_query to determine if the server is in the initial configuration preflight phase or not. This is both easier to use and more correct than the old method of creating a pool userdata entry in the process pool.
    • New function ap_get_conn_socket to get the socket descriptor for a connection. This should be used instead of accessing the core connection config directly.

    httpd (changed)

    • Introduce per-directory, per-module loglevel
    • New loglevels APLOG_TRACEn
    • Introduce errorlog ids for requests and connections
    • Support for mod_request kept_body
    • Support buffering filter data for async requests
    • New CONN_STATE values
    • Function changes: ap_escape_html updated; ap_unescape_all, ap_escape_path_segment_buffer
    • Modules that load other modules later than the EXEC_ON_READ config reading stage need to call ap_reserve_module_slots() or ap_reserve_module_slots_directive() in their pre_config hook.
    • The useragent IP address per request can now be tracked independently of the client IP address of the connection, for support of deployments with load balancers.

    http_log (changed)

    • Introduce per-directory, per-module loglevel
    • New loglevels APLOG_TRACEn
    • ap_log_*error become macro wrappers (backwards-compatible if APLOG_MARK macro is used, except that is no longer possible to use #ifdef inside the argument list)
    • piped logging revamped
    • module_index added to error_log hook
    • new function: ap_log_command_line

    http_request (changed)

    • New auth_internal API and auth_provider API
    • New EOR bucket type
    • New function ap_process_async_request
    • New flags AP_AUTH_INTERNAL_PER_CONF and AP_AUTH_INTERNAL_PER_URI
    • New access_checker_ex hook to apply additional access control and/or bypass authentication.
    • New functions ap_hook_check_access_ex, ap_hook_check_access, ap_hook_check_authn, ap_hook_check_authz which accept AP_AUTH_INTERNAL_PER_* flags
    • DEPRECATED direct use of ap_hook_access_checker, access_checker_ex, ap_hook_check_user_id, ap_hook_auth_checker

    When possible, registering all access control hooks (including authentication and authorization hooks) using AP_AUTH_INTERNAL_PER_CONF is recommended. If all modules' access control hooks are registered with this flag, then whenever the server handles an internal sub-request that matches the same set of access control configuration directives as the initial request (which is the common case), it can avoid invoking the access control hooks another time.

    If your module requires the old behavior and must perform access control checks on every sub-request with a different URI from the initial request, even if that URI matches the same set of access control configuration directives, then use AP_AUTH_INTERNAL_PER_URI.

    mod_auth (NEW!)

    Introduces the new provider framework for authn and authz

    mod_cache (changed)

    Introduces a commit_entity() function to the cache provider interface, allowing atomic writes to cache. Add a cache_status() hook to report the cache decision. All private structures and functions were removed.

    mod_core (NEW!)

    This introduces low-level APIs to send arbitrary headers, and exposes functions to handle HTTP OPTIONS and TRACE.

    mod_cache_disk (changed)

    Changes the disk format of the disk cache to support atomic cache updates without locking. The device/inode pair of the body file is embedded in the header file, allowing confirmation that the header and body belong to one another.

    mod_disk_cache (renamed)

    The mod_disk_cache module has been renamed to mod_cache_disk in order to be consistent with the naming of other modules within the server.

    mod_request (NEW!)

    The API for mod_request, to make input data available to multiple application/handler modules where required, and to parse HTML form data.

    mpm_common (changed)

    • REMOVES: accept, lockfile, lock_mech, set_scoreboard (locking uses the new ap_mutex API)
    • NEW API to drop privileges (delegates this platform-dependent function to modules)
    • NEW Hooks: mpm_query, timed_callback, and get_name
    • CHANGED interfaces: monitor hook, ap_reclaim_child_processes, ap_relieve_child_processes

    scoreboard (changed)

    ap_get_scoreboard_worker is made non-backwards-compatible as an alternative version is introduced. Additional proxy_balancer support. Child status stuff revamped.

    util_cookies (NEW!)

    Introduces a new API for managing HTTP Cookies.

    util_ldap (changed)

    no description available

    util_mutex (NEW!)

    A wrapper for APR proc and global mutexes in httpd, providing common configuration for the underlying mechanism and location of lock files.

    util_script (changed)

    NEW: ap_args_to_table

    util_time (changed)

    NEW: ap_recent_ctime_ex

    top

    Specific information on upgrading modules from 2.2

    Logging

    In order to take advantage of per-module loglevel configuration, any source file that calls the ap_log_* functions should declare which module it belongs to. If the module's module_struct is called foo_module, the following code can be used to remain backward compatible with HTTPD 2.0 and 2.2:

    #include <http_log.h>

    #ifdef APLOG_USE_MODULE
    APLOG_USE_MODULE(foo);
    #endif

    Note: This is absolutely required for C++-language modules. It can be skipped for C-language modules, though that breaks module-specific log level support for files without it.

    The number of parameters of the ap_log_* functions and the definition of APLOG_MARK has changed. Normally, the change is completely transparent. However, changes are required if a module uses APLOG_MARK as a parameter to its own functions or if a module calls ap_log_* without passing APLOG_MARK. A module which uses wrappers around ap_log_* typically uses both of these constructs.

    The easiest way to change code which passes APLOG_MARK to its own functions is to define and use a different macro that expands to the parameters required by those functions, as APLOG_MARK should only be used when calling ap_log_* directly. In this way, the code will remain compatible with HTTPD 2.0 and 2.2.

    Code which calls ap_log_* without passing APLOG_MARK will necessarily differ between 2.4 and earlier releases, as 2.4 requires a new third argument, APLOG_MODULE_INDEX.

    /* code for httpd 2.0/2.2 */
    ap_log_perror(file, line, APLOG_ERR, 0, p, "Failed to allocate dynamic lock structure");

    /* code for httpd 2.4 */
    ap_log_perror(file, line, APLOG_MODULE_INDEX, APLOG_ERR, 0, p, "Failed to allocate dynamic lock structure");

    ap_log_*error are now implemented as macros. This means that it is no longer possible to use #ifdef inside the argument list of ap_log_*error, as this would cause undefined behavor according to C99.

    A server_rec pointer must be passed to ap_log_error() when called after startup. This was always appropriate, but there are even more limitations with a NULL server_rec in 2.4 than in previous releases. Beginning with 2.3.12, the global variable ap_server_conf can always be used as the server_rec parameter, as it will be NULL only when it is valid to pass NULL to ap_log_error(). ap_server_conf should be used only when a more appropriate server_rec is not available.

    Consider the following changes to take advantage of the new APLOG_TRACE1..8 log levels:

    • Check current use of APLOG_DEBUG and consider if one of the APLOG_TRACEn levels is more appropriate.
    • If your module currently has a mechanism for configuring the amount of debug logging which is performed, consider eliminating that mechanism and relying on the use of different APLOG_TRACEn levels. If expensive trace processing needs to be bypassed depending on the configured log level, use the APLOGtracen and APLOGrtracen macros to first check if tracing is enabled.

    Modules sometimes add process id and/or thread id to their log messages. These ids are now logged by default, so it may not be necessary for the module to log them explicitly. (Users may remove them from the error log format, but they can be instructed to add it back if necessary for problem diagnosis.)

    If your module uses these existing APIs...

    ap_default_type()
    This is no longer available; Content-Type must be configured explicitly or added by the application.
    ap_get_server_name()
    If the returned server name is used in a URL, use ap_get_server_name_for_url() instead. This new function handles the odd case where the server name is an IPv6 literal address.
    ap_get_server_version()
    For logging purposes, where detailed information is appropriate, use ap_get_server_description(). When generating output, where the amount of information should be configurable by ServerTokens, use ap_get_server_banner().
    ap_graceful_stop_signalled()
    Replace with a call to ap_mpm_query(AP_MPMQ_MPM_STATE) and checking for state AP_MPMQ_STOPPING.
    ap_max_daemons_limit, ap_my_generation, and ap_threads_per_child
    Use ap_mpm_query() query codes AP_MPMQ_MAX_DAEMON_USED, AP_MPMQ_GENERATION, and AP_MPMQ_MAX_THREADS, respectively.
    ap_mpm_query()
    Ensure that it is not used until after the register-hooks hook has completed. Otherwise, an MPM built as a DSO would not have had a chance to enable support for this function.
    ap_requires()
    The core server now provides better infrastructure for handling Require configuration. Register an auth provider function for each supported entity using ap_register_auth_provider(). The function will be called as necessary during Require processing. (Consult bundled modules for detailed examples.)
    ap_server_conf->process->pool userdata
    Optional:
    • If your module uses this to determine which pass of the startup hooks is being run, use ap_state_query(AP_SQ_MAIN_STATE).
    • If your module uses this to maintain data across the unloading and reloading of your module, use ap_retained_data_create() and ap_retained_data_get().
    apr_global_mutex_create(), apr_proc_mutex_create()
    Optional: See ap_mutex_register(), ap_global_mutex_create(), and ap_proc_mutex_create(); these allow your mutexes to be configurable with the Mutex directive; you can also remove any configuration mechanisms in your module for such mutexes
    CORE_PRIVATE
    This is now unnecessary and ignored.
    dav_new_error() and dav_new_error_tag()
    Previously, these assumed that errno contained information describing the failure. Now, an apr_status_t parameter must be provided. Pass 0/APR_SUCCESS if there is no such error information, or a valid apr_status_t value otherwise.
    mpm_default.h, DEFAULT_LOCKFILE, DEFAULT_THREAD_LIMIT, DEFAULT_PIDLOG, etc.
    The header file and most of the default configuration values set in it are no longer visible to modules. (Most can still be overridden at build time.) DEFAULT_PIDLOG and DEFAULT_REL_RUNTIMEDIR are now universally available via ap_config.h.
    unixd_config
    This has been renamed to ap_unixd_config.
    unixd_setup_child()
    This has been renamed to ap_unixd_setup_child(), but most callers should call the added ap_run_drop_privileges() hook.
    conn_rec->remote_ip and conn_rec->remote_addr
    These fields have been renamed in order to distinguish between the client IP address of the connection and the useragent IP address of the request (potentially overridden by a load balancer or proxy). References to either of these fields must be updated with one of the following options, as appropriate for the module:
    • When you require the IP address of the user agent, which might be connected directly to the server, or might optionally be separated from the server by a transparent load balancer or proxy, use request_rec->useragent_ip and request_rec->useragent_addr.
    • When you require the IP address of the client that is connected directly to the server, which might be the useragent or might be the load balancer or proxy itself, use conn_rec->client_ip and conn_rec->client_addr.

    If your module interfaces with this feature...

    suEXEC
    Optional: If your module logs an error when ap_unixd_config.suexec_enabled is 0, also log the value of the new field suexec_disabled_reason, which contains an explanation of why it is not available.
    Extended status data in the scoreboard
    In previous releases, ExtendedStatus had to be set to On, which in turn required that mod_status was loaded. In 2.4, just set ap_extended_status to 1 in a pre-config hook and the extended status data will be available.

    Does your module...

    Parse query args
    Consider if ap_args_to_table() would be helpful.
    Parse form data...
    Use ap_parse_form_data().
    Check for request header fields Content-Length and Transfer-Encoding to see if a body was specified
    Use ap_request_has_body().
    Implement cleanups which clear pointer variables
    Use ap_pool_cleanup_set_null().
    Create run-time files such as shared memory files, pid files, etc.
    Use ap_runtime_dir_relative() so that the global configuration for the location of such files, either by the DEFAULT_REL_RUNTIMEDIR compile setting or the DefaultRuntimeDir directive, will be respected. Apache httpd 2.4.2 and above.

    Available Languages:  en 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/developer/documenting.html0000644000000000000500000000034012274455360020635 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: documenting.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: documenting.html.zh-cn.utf8 Content-Language: zh-cn Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/developer/documenting.html.en0000644000000000000500000001547213412755316021251 0ustar rootsrc Documenting code in Apache 2.4 - Apache HTTP Server Version 2.4
    <-

    Documenting code in Apache 2.4

    Available Languages:  en  |  zh-cn 

    Apache 2.4 uses Doxygen to document the APIs and global variables in the code. This will explain the basics of how to document using Doxygen.

    top

    Brief Description

    To start a documentation block, use /**
    To end a documentation block, use */

    In the middle of the block, there are multiple tags we can use:

    Description of this functions purpose
    @param parameter_name description
    @return description
    @deffunc signature of the function

    The deffunc is not always necessary. DoxyGen does not have a full parser in it, so any prototype that use a macro in the return type declaration is too complex for scandoc. Those functions require a deffunc. An example (using &gt; rather than >):

    /**
     * return the final element of the pathname
     * @param pathname The path to get the final element of
     * @return the final element of the path
     * @tip Examples:
     * <pre>
     * "/foo/bar/gum" -&gt; "gum"
     * "/foo/bar/gum/" -&gt; ""
     * "gum" -&gt; "gum"
     * "wi\\n32\\stuff" -&gt; "stuff"
     * </pre>
     * @deffunc const char * ap_filename_of_pathname(const char *pathname)
     */

    At the top of the header file, always include:

    /**
     * @package Name of library header
     */

    Doxygen uses a new HTML file for each package. The HTML files are named {Name_of_library_header}.html, so try to be concise with your names.

    For a further discussion of the possibilities please refer to the Doxygen site.

    Available Languages:  en  |  zh-cn 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/developer/request.html.en0000644000000000000500000003577613412755316020436 0ustar rootsrc Request Processing in the Apache HTTP Server 2.x - Apache HTTP Server Version 2.4
    <-

    Request Processing in the Apache HTTP Server 2.x

    Available Languages:  en 

    Warning

    Warning - this is a first (fast) draft that needs further revision!

    Several changes in 2.0 and above affect the internal request processing mechanics. Module authors need to be aware of these changes so they may take advantage of the optimizations and security enhancements.

    The first major change is to the subrequest and redirect mechanisms. There were a number of different code paths in the Apache HTTP Server 1.3 to attempt to optimize subrequest or redirect behavior. As patches were introduced to 2.0, these optimizations (and the server behavior) were quickly broken due to this duplication of code. All duplicate code has been folded back into ap_process_request_internal() to prevent the code from falling out of sync again.

    This means that much of the existing code was 'unoptimized'. It is the Apache HTTP Project's first goal to create a robust and correct implementation of the HTTP server RFC. Additional goals include security, scalability and optimization. New methods were sought to optimize the server (beyond the performance of 1.3) without introducing fragile or insecure code.

    top

    The Request Processing Cycle

    All requests pass through ap_process_request_internal() in server/request.c, including subrequests and redirects. If a module doesn't pass generated requests through this code, the author is cautioned that the module may be broken by future changes to request processing.

    To streamline requests, the module author can take advantage of the hooks offered to drop out of the request cycle early, or to bypass core hooks which are irrelevant (and costly in terms of CPU.)

    top

    The Request Parsing Phase

    Unescapes the URL

    The request's parsed_uri path is unescaped, once and only once, at the beginning of internal request processing.

    This step is bypassed if the proxyreq flag is set, or the parsed_uri.path element is unset. The module has no further control of this one-time unescape operation, either failing to unescape or multiply unescaping the URL leads to security repercussions.

    Strips Parent and This Elements from the URI

    All /../ and /./ elements are removed by ap_getparents(). This helps to ensure the path is (nearly) absolute before the request processing continues.

    This step cannot be bypassed.

    Initial URI Location Walk

    Every request is subject to an ap_location_walk() call. This ensures that <Location> sections are consistently enforced for all requests. If the request is an internal redirect or a sub-request, it may borrow some or all of the processing from the previous or parent request's ap_location_walk, so this step is generally very efficient after processing the main request.

    translate_name

    Modules can determine the file name, or alter the given URI in this step. For example, mod_vhost_alias will translate the URI's path into the configured virtual host, mod_alias will translate the path to an alias path, and if the request falls back on the core, the DocumentRoot is prepended to the request resource.

    If all modules DECLINE this phase, an error 500 is returned to the browser, and a "couldn't translate name" error is logged automatically.

    Hook: map_to_storage

    After the file or correct URI was determined, the appropriate per-dir configurations are merged together. For example, mod_proxy compares and merges the appropriate <Proxy> sections. If the URI is nothing more than a local (non-proxy) TRACE request, the core handles the request and returns DONE. If no module answers this hook with OK or DONE, the core will run the request filename against the <Directory> and <Files> sections. If the request 'filename' isn't an absolute, legal filename, a note is set for later termination.

    URI Location Walk

    Every request is hardened by a second ap_location_walk() call. This reassures that a translated request is still subjected to the configured <Location> sections. The request again borrows some or all of the processing from its previous location_walk above, so this step is almost always very efficient unless the translated URI mapped to a substantially different path or Virtual Host.

    Hook: header_parser

    The main request then parses the client's headers. This prepares the remaining request processing steps to better serve the client's request.

    top

    The Security Phase

    Needs Documentation. Code is:

    if ((access_status = ap_run_access_checker(r)) != 0) {
        return decl_die(access_status, "check access", r);
    }
    
    if ((access_status = ap_run_check_user_id(r)) != 0) {
        return decl_die(access_status, "check user", r);
    }
    
    if ((access_status = ap_run_auth_checker(r)) != 0) {
        return decl_die(access_status, "check authorization", r);
    }
    top

    The Preparation Phase

    Hook: type_checker

    The modules have an opportunity to test the URI or filename against the target resource, and set mime information for the request. Both mod_mime and mod_mime_magic use this phase to compare the file name or contents against the administrator's configuration and set the content type, language, character set and request handler. Some modules may set up their filters or other request handling parameters at this time.

    If all modules DECLINE this phase, an error 500 is returned to the browser, and a "couldn't find types" error is logged automatically.

    Hook: fixups

    Many modules are 'trounced' by some phase above. The fixups phase is used by modules to 'reassert' their ownership or force the request's fields to their appropriate values. It isn't always the cleanest mechanism, but occasionally it's the only option.

    top

    The Handler Phase

    This phase is not part of the processing in ap_process_request_internal(). Many modules prepare one or more subrequests prior to creating any content at all. After the core, or a module calls ap_process_request_internal() it then calls ap_invoke_handler() to generate the request.

    Hook: insert_filter

    Modules that transform the content in some way can insert their values and override existing filters, such that if the user configured a more advanced filter out-of-order, then the module can move its order as need be. There is no result code, so actions in this hook better be trusted to always succeed.

    Hook: handler

    The module finally has a chance to serve the request in its handler hook. Note that not every prepared request is sent to the handler hook. Many modules, such as mod_autoindex, will create subrequests for a given URI, and then never serve the subrequest, but simply lists it for the user. Remember not to put required teardown from the hooks above into this module, but register pool cleanups against the request pool to free resources as required.

    Available Languages:  en 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/developer/debugging.html.en0000644000000000000500000001057713412755316020671 0ustar rootsrc Debugging Memory Allocation in APR - Apache HTTP Server Version 2.4
    <-

    Debugging Memory Allocation in APR

    Available Languages:  en 

    This document has been removed.

    Available Languages:  en 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/developer/modguide.html0000644000000000000500000000017411742220010020100 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: modguide.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 httpd-2.4.41/docs/manual/developer/index.html.zh-cn.utf80000644000000000000500000001373313412755316021344 0ustar rootsrc Apache 2.0 å¼€å‘者文档 - Apache HTTP æœåС噍 版本 2.4
    <-

    Apache 2.0 å¼€å‘者文档

    å¯ç”¨è¯­è¨€:  en  |  zh-cn 

    此翻译å¯èƒ½è¿‡æœŸã€‚è¦äº†è§£æœ€è¿‘的更改,请阅读英文版。

    å¼€å‘者页é¢çš„许多文档都æ¥è‡ªäºŽ Apache 1.3。当更新到 Apache 2 时,它们å¯èƒ½ä½äºŽä¸åŒçš„阶段。请è€å¿ƒç­‰å¾…ï¼Œæˆ–è€…ç›´æŽ¥å‘ dev@httpd.apache.org 邮件列表报告开å‘者页é¢çš„差异或错误。

    top
    top

    å¯ç”¨è¯­è¨€:  en  |  zh-cn 

    httpd-2.4.41/docs/manual/developer/hooks.html0000644000000000000500000000017111656337540017450 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: hooks.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 httpd-2.4.41/docs/manual/developer/modguide.html.en0000644000000000000500000021420213412755316020522 0ustar rootsrc Developing modules for the Apache HTTP Server 2.4 - Apache HTTP Server Version 2.4
    <-

    Developing modules for the Apache HTTP Server 2.4

    Available Languages:  en 

    This document explains how you can develop modules for the Apache HTTP Server 2.4

    top

    Introduction

    What we will be discussing in this document

    This document will discuss how you can create modules for the Apache HTTP Server 2.4, by exploring an example module called mod_example. In the first part of this document, the purpose of this module will be to calculate and print out various digest values for existing files on your web server, whenever we access the URL http://hostname/filename.sum. For instance, if we want to know the MD5 digest value of the file located at http://www.example.com/index.html, we would visit http://www.example.com/index.html.sum.

    In the second part of this document, which deals with configuration directive and context awareness, we will be looking at a module that simply writes out its own configuration to the client.

    Prerequisites

    First and foremost, you are expected to have a basic knowledge of how the C programming language works. In most cases, we will try to be as pedagogical as possible and link to documents describing the functions used in the examples, but there are also many cases where it is necessary to either just assume that "it works" or do some digging yourself into what the hows and whys of various function calls.

    Lastly, you will need to have a basic understanding of how modules are loaded and configured in the Apache HTTP Server, as well as how to get the headers for Apache if you do not have them already, as these are needed for compiling new modules.

    Compiling your module

    To compile the source code we are building in this document, we will be using APXS. Assuming your source file is called mod_example.c, compiling, installing and activating the module is as simple as:

    apxs -i -a -c mod_example.c
    top

    Defining a module

    Module name tags
    Every module starts with the same declaration, or name tag if you will, that defines a module as a separate entity within Apache:

    module AP_MODULE_DECLARE_DATA   example_module =
    { 
        STANDARD20_MODULE_STUFF,
        create_dir_conf, /* Per-directory configuration handler */
        merge_dir_conf,  /* Merge handler for per-directory configurations */
        create_svr_conf, /* Per-server configuration handler */
        merge_svr_conf,  /* Merge handler for per-server configurations */
        directives,      /* Any directives we may have for httpd */
        register_hooks   /* Our hook registering function */
    };

    This bit of code lets the server know that we have now registered a new module in the system, and that its name is example_module. The name of the module is used primarily for two things:

    • Letting the server know how to load the module using the LoadModule
    • Setting up a namespace for the module to use in configurations

    For now, we're only concerned with the first purpose of the module name, which comes into play when we need to load the module:

    LoadModule example_module modules/mod_example.so

    In essence, this tells the server to open up mod_example.so and look for a module called example_module.

    Within this name tag of ours is also a bunch of references to how we would like to handle things: Which directives do we respond to in a configuration file or .htaccess, how do we operate within specific contexts, and what handlers are we interested in registering with the Apache HTTP service. We'll return to all these elements later in this document.

    top

    Getting started: Hooking into the server

    An introduction to hooks

    When handling requests in Apache HTTP Server 2.4, the first thing you will need to do is create a hook into the request handling process. A hook is essentially a message telling the server that you are willing to either serve or at least take a glance at certain requests given by clients. All handlers, whether it's mod_rewrite, mod_authn_*, mod_proxy and so on, are hooked into specific parts of the request process. As you are probably aware, modules serve different purposes; Some are authentication/authorization handlers, others are file or script handlers while some third modules rewrite URIs or proxies content. Furthermore, in the end, it is up to the user of the server how and when each module will come into place. Thus, the server itself does not presume to know which module is responsible for handling a specific request, and will ask each module whether they have an interest in a given request or not. It is then up to each module to either gently decline serving a request, accept serving it or flat out deny the request from being served, as authentication/authorization modules do:
    Hook handling in httpd
    To make it a bit easier for handlers such as our mod_example to know whether the client is requesting content we should handle or not, the server has directives for hinting to modules whether their assistance is needed or not. Two of these are AddHandler and SetHandler. Let's take a look at an example using AddHandler. In our example case, we want every request ending with .sum to be served by mod_example, so we'll add a configuration directive that tells the server to do just that:

    AddHandler example-handler .sum

    What this tells the server is the following: Whenever we receive a request for a URI ending in .sum, we are to let all modules know that we are looking for whoever goes by the name of "example-handler" . Thus, when a request is being served that ends in .sum, the server will let all modules know, that this request should be served by "example-handler ". As you will see later, when we start building mod_example, we will check for this handler tag relayed by AddHandler and reply to the server based on the value of this tag.

    Hooking into httpd

    To begin with, we only want to create a simple handler, that replies to the client browser when a specific URL is requested, so we won't bother setting up configuration handlers and directives just yet. Our initial module definition will look like this:

    module AP_MODULE_DECLARE_DATA   example_module =
    {
        STANDARD20_MODULE_STUFF,
        NULL,
        NULL,
        NULL,
        NULL,
        NULL,
        register_hooks   /* Our hook registering function */
    };

    This lets the server know that we are not interested in anything fancy, we just want to hook onto the requests and possibly handle some of them.

    The reference in our example declaration, register_hooks is the name of a function we will create to manage how we hook onto the request process. In this example module, the function has just one purpose; To create a simple hook that gets called after all the rewrites, access control etc has been handled. Thus, we will let the server know, that we want to hook into its process as one of the last modules:

    static void register_hooks(apr_pool_t *pool)
    {
        /* Create a hook in the request handler, so we get called when a request arrives */
        ap_hook_handler(example_handler, NULL, NULL, APR_HOOK_LAST);
    }

    The example_handler reference is the function that will handle the request. We will discuss how to create a handler in the next chapter.

    Other useful hooks

    Hooking into the request handling phase is but one of many hooks that you can create. Some other ways of hooking are:

    • ap_hook_child_init: Place a hook that executes when a child process is spawned (commonly used for initializing modules after the server has forked)
    • ap_hook_pre_config: Place a hook that executes before any configuration data has been read (very early hook)
    • ap_hook_post_config: Place a hook that executes after configuration has been parsed, but before the server has forked
    • ap_hook_translate_name: Place a hook that executes when a URI needs to be translated into a filename on the server (think mod_rewrite)
    • ap_hook_quick_handler: Similar to ap_hook_handler, except it is run before any other request hooks (translation, auth, fixups etc)
    • ap_hook_log_transaction: Place a hook that executes when the server is about to add a log entry of the current request
    top

    Building a handler

    A handler is essentially a function that receives a callback when a request to the server is made. It is passed a record of the current request (how it was made, which headers and requests were passed along, who's giving the request and so on), and is put in charge of either telling the server that it's not interested in the request or handle the request with the tools provided.

    A simple "Hello, world!" handler

    Let's start off by making a very simple request handler that does the following:

    1. Check that this is a request that should be served by "example-handler"
    2. Set the content type of our output to text/html
    3. Write "Hello, world!" back to the client browser
    4. Let the server know that we took care of this request and everything went fine

    In C code, our example handler will now look like this:

    static int example_handler(request_rec *r)
    {
        /* First off, we need to check if this is a call for the "example-handler" handler.
         * If it is, we accept it and do our things, if not, we simply return DECLINED,
         * and the server will try somewhere else.
         */
        if (!r->handler || strcmp(r->handler, "example-handler")) return (DECLINED);
        
        /* Now that we are handling this request, we'll write out "Hello, world!" to the client.
         * To do so, we must first set the appropriate content type, followed by our output.
         */
        ap_set_content_type(r, "text/html");
        ap_rprintf(r, "Hello, world!");
        
        /* Lastly, we must tell the server that we took care of this request and everything went fine.
         * We do so by simply returning the value OK to the server.
         */
        return OK;
    }

    Now, we put all we have learned together and end up with a program that looks like mod_example_1.c . The functions used in this example will be explained later in the section "Some useful functions you should know".

    The request_rec structure

    The most essential part of any request is the request record . In a call to a handler function, this is represented by the request_rec* structure passed along with every call that is made. This struct, typically just referred to as r in modules, contains all the information you need for your module to fully process any HTTP request and respond accordingly.

    Some key elements of the request_rec structure are:

    • r->handler (char*): Contains the name of the handler the server is currently asking to do the handling of this request
    • r->method (char*): Contains the HTTP method being used, f.x. GET or POST
    • r->filename (char*): Contains the translated filename the client is requesting
    • r->args (char*): Contains the query string of the request, if any
    • r->headers_in (apr_table_t*): Contains all the headers sent by the client
    • r->connection (conn_rec*): A record containing information about the current connection
    • r->user (char*): If the URI requires authentication, this is set to the username provided
    • r->useragent_ip (char*): The IP address of the client connecting to us
    • r->pool (apr_pool_t*): The memory pool of this request. We'll discuss this in the "Memory management" chapter.

    A complete list of all the values contained within the request_rec structure can be found in the httpd.h header file or at http://ci.apache.org/projects/httpd/trunk/doxygen/structrequest__rec.html.

    Let's try out some of these variables in another example handler:

    static int example_handler(request_rec *r)
    {
        /* Set the appropriate content type */
        ap_set_content_type(r, "text/html");
    
        /* Print out the IP address of the client connecting to us: */
        ap_rprintf(r, "<h2>Hello, %s!</h2>", r->useragent_ip);
        
        /* If we were reached through a GET or a POST request, be happy, else sad. */
        if ( !strcmp(r->method, "POST") || !strcmp(r->method, "GET") ) {
            ap_rputs("You used a GET or a POST method, that makes us happy!<br/>", r);
        }
        else {
            ap_rputs("You did not use POST or GET, that makes us sad :(<br/>", r);
        }
    
        /* Lastly, if there was a query string, let's print that too! */
        if (r->args) {
            ap_rprintf(r, "Your query string was: %s", r->args);
        }
        return OK;
    }

    Return values

    Apache relies on return values from handlers to signify whether a request was handled or not, and if so, whether the request went well or not. If a module is not interested in handling a specific request, it should always return the value DECLINED. If it is handling a request, it should either return the generic value OK, or a specific HTTP status code, for example:

    static int example_handler(request_rec *r)
    {
        /* Return 404: Not found */
        return HTTP_NOT_FOUND;
    }

    Returning OK or a HTTP status code does not necessarily mean that the request will end. The server may still have other handlers that are interested in this request, for instance the logging modules which, upon a successful request, will write down a summary of what was requested and how it went. To do a full stop and prevent any further processing after your module is done, you can return the value DONE to let the server know that it should cease all activity on this request and carry on with the next, without informing other handlers.
    General response codes:

    • DECLINED: We are not handling this request
    • OK: We handled this request and it went well
    • DONE: We handled this request and the server should just close this thread without further processing

    HTTP specific return codes (excerpt):

    • HTTP_OK (200): Request was okay
    • HTTP_MOVED_PERMANENTLY (301): The resource has moved to a new URL
    • HTTP_UNAUTHORIZED (401): Client is not authorized to visit this page
    • HTTP_FORBIDDEN (403): Permission denied
    • HTTP_NOT_FOUND (404): File not found
    • HTTP_INTERNAL_SERVER_ERROR (500): Internal server error (self explanatory)

    Some useful functions you should know

    • ap_rputs(const char *string, request_rec *r):
      Sends a string of text to the client. This is a shorthand version of ap_rwrite.
      ap_rputs("Hello, world!", r);
    • ap_rprintf:
      This function works just like printf, except it sends the result to the client.
      ap_rprintf(r, "Hello, %s!", r->useragent_ip);
    • ap_set_content_type(request_rec *r, const char *type):
      Sets the content type of the output you are sending.
      ap_set_content_type(r, "text/plain"); /* force a raw text output */

    Memory management

    Managing your resources in Apache HTTP Server 2.4 is quite easy, thanks to the memory pool system. In essence, each server, connection and request have their own memory pool that gets cleaned up when its scope ends, e.g. when a request is done or when a server process shuts down. All your module needs to do is latch onto this memory pool, and you won't have to worry about having to clean up after yourself - pretty neat, huh?

    In our module, we will primarily be allocating memory for each request, so it's appropriate to use the r->pool reference when creating new objects. A few of the functions for allocating memory within a pool are:

    • void* apr_palloc( apr_pool_t *p, apr_size_t size): Allocates size number of bytes in the pool for you
    • void* apr_pcalloc( apr_pool_t *p, apr_size_t size): Allocates size number of bytes in the pool for you and sets all bytes to 0
    • char* apr_pstrdup( apr_pool_t *p, const char *s): Creates a duplicate of the string s. This is useful for copying constant values so you can edit them
    • char* apr_psprintf( apr_pool_t *p, const char *fmt, ...): Similar to sprintf, except the server supplies you with an appropriately allocated target variable

    Let's put these functions into an example handler:

    static int example_handler(request_rec *r)
    {
        const char *original = "You can't edit this!";
        char *copy;
        int *integers;
        
        /* Allocate space for 10 integer values and set them all to zero. */
        integers = apr_pcalloc(r->pool, sizeof(int)*10); 
        
        /* Create a copy of the 'original' variable that we can edit. */
        copy = apr_pstrdup(r->pool, original);
        return OK;
    }

    This is all well and good for our module, which won't need any pre-initialized variables or structures. However, if we wanted to initialize something early on, before the requests come rolling in, we could simply add a call to a function in our register_hooks function to sort it out:

    static void register_hooks(apr_pool_t *pool)
    {
        /* Call a function that initializes some stuff */
        example_init_function(pool);
        /* Create a hook in the request handler, so we get called when a request arrives */
        ap_hook_handler(example_handler, NULL, NULL, APR_HOOK_LAST);
    }

    In this pre-request initialization function we would not be using the same pool as we did when allocating resources for request-based functions. Instead, we would use the pool given to us by the server for allocating memory on a per-process based level.

    Parsing request data

    In our example module, we would like to add a feature, that checks which type of digest, MD5 or SHA1 the client would like to see. This could be solved by adding a query string to the request. A query string is typically comprised of several keys and values put together in a string, for instance valueA=yes&valueB=no&valueC=maybe. It is up to the module itself to parse these and get the data it requires. In our example, we'll be looking for a key called digest, and if set to md5, we'll produce an MD5 digest, otherwise we'll produce a SHA1 digest.

    Since the introduction of Apache HTTP Server 2.4, parsing request data from GET and POST requests have never been easier. All we require to parse both GET and POST data is four simple lines:

    apr_table_t *GET; 
    apr_array_header_t*POST; 
    
    
    
    ap_args_to_table(r, &GET); 
    
    ap_parse_form_data(r, NULL, &POST, -1, 8192);

    In our specific example module, we're looking for the digest value from the query string, which now resides inside a table called GET. To extract this value, we need only perform a simple operation:

    /* Get the "digest" key from the query string, if any. */
    const char *digestType = apr_table_get(GET, "digest");
    
    /* If no key was returned, we will set a default value instead. */
    if (!digestType) digestType = "sha1";

    The structures used for the POST and GET data are not exactly the same, so if we were to fetch a value from POST data instead of the query string, we would have to resort to a few more lines, as outlined in this example in the last chapter of this document.

    Making an advanced handler

    Now that we have learned how to parse form data and manage our resources, we can move on to creating an advanced version of our module, that spits out the MD5 or SHA1 digest of files:

    static int example_handler(request_rec *r)
    {
        int rc, exists;
        apr_finfo_t finfo;
        apr_file_t *file;
        char *filename;
        char buffer[256];
        apr_size_t readBytes;
        int n;
        apr_table_t *GET;
        apr_array_header_t *POST;
        const char *digestType;
        
        
        /* Check that the "example-handler" handler is being called. */
        if (!r->handler || strcmp(r->handler, "example-handler")) return (DECLINED);
        
        /* Figure out which file is being requested by removing the .sum from it */
        filename = apr_pstrdup(r->pool, r->filename);
        filename[strlen(filename)-4] = 0; /* Cut off the last 4 characters. */
        
        /* Figure out if the file we request a sum on exists and isn't a directory */
        rc = apr_stat(&finfo, filename, APR_FINFO_MIN, r->pool);
        if (rc == APR_SUCCESS) {
            exists =
            (
                (finfo.filetype != APR_NOFILE)
            &&  !(finfo.filetype & APR_DIR)
            );
            if (!exists) return HTTP_NOT_FOUND; /* Return a 404 if not found. */
        }
        /* If apr_stat failed, we're probably not allowed to check this file. */
        else return HTTP_FORBIDDEN;
        
        /* Parse the GET and, optionally, the POST data sent to us */
        
        ap_args_to_table(r, &GET);
        ap_parse_form_data(r, NULL, &POST, -1, 8192);
        
        /* Set the appropriate content type */
        ap_set_content_type(r, "text/html");
        
        /* Print a title and some general information */
        ap_rprintf(r, "<h2>Information on %s:</h2>", filename);
        ap_rprintf(r, "<b>Size:</b> %u bytes<br/>", finfo.size);
        
        /* Get the digest type the client wants to see */
        digestType = apr_table_get(GET, "digest");
        if (!digestType) digestType = "MD5";
        
        
        rc = apr_file_open(&file, filename, APR_READ, APR_OS_DEFAULT, r->pool);
        if (rc == APR_SUCCESS) {
            
            /* Are we trying to calculate the MD5 or the SHA1 digest? */
            if (!strcasecmp(digestType, "md5")) {
                /* Calculate the MD5 sum of the file */
                union {
                    char      chr[16];
                    uint32_t  num[4];
                } digest;
                apr_md5_ctx_t md5;
                apr_md5_init(&md5);
                readBytes = 256;
                while ( apr_file_read(file, buffer, &readBytes) == APR_SUCCESS ) {
                    apr_md5_update(&md5, buffer, readBytes);
                }
                apr_md5_final(digest.chr, &md5);
                
                /* Print out the MD5 digest */
                ap_rputs("<b>MD5: </b><code>", r);
                for (n = 0; n < APR_MD5_DIGESTSIZE/4; n++) {
                    ap_rprintf(r, "%08x", digest.num[n]);
                }
                ap_rputs("</code>", r);
                /* Print a link to the SHA1 version */
                ap_rputs("<br/><a href='?digest=sha1'>View the SHA1 hash instead</a>", r);
            }
            else {
                /* Calculate the SHA1 sum of the file */
                union {
                    char      chr[20];
                    uint32_t  num[5];
                } digest;
                apr_sha1_ctx_t sha1;
                apr_sha1_init(&sha1);
                readBytes = 256;
                while ( apr_file_read(file, buffer, &readBytes) == APR_SUCCESS ) {
                    apr_sha1_update(&sha1, buffer, readBytes);
                }
                apr_sha1_final(digest.chr, &sha1);
                
                /* Print out the SHA1 digest */
                ap_rputs("<b>SHA1: </b><code>", r);
                for (n = 0; n < APR_SHA1_DIGESTSIZE/4; n++) {
                    ap_rprintf(r, "%08x", digest.num[n]);
                }
                ap_rputs("</code>", r);
                
                /* Print a link to the MD5 version */
                ap_rputs("<br/><a href='?digest=md5'>View the MD5 hash instead</a>", r);
            }
            apr_file_close(file);
            
        }    
        /* Let the server know that we responded to this request. */
        return OK;
    }

    This version in its entirety can be found here: mod_example_2.c.

    top

    Adding configuration options

    In this next segment of this document, we will turn our eyes away from the digest module and create a new example module, whose only function is to write out its own configuration. The purpose of this is to examine how the server works with configuration, and what happens when you start writing advanced configurations for your modules.

    An introduction to configuration directives

    If you are reading this, then you probably already know what a configuration directive is. Simply put, a directive is a way of telling an individual module (or a set of modules) how to behave, such as these directives control how mod_rewrite works:

    RewriteEngine On
    RewriteCond "%{REQUEST_URI}" "^/foo/bar"
    RewriteRule "^/foo/bar/(.*)$" "/foobar?page=$1"

    Each of these configuration directives are handled by a separate function, that parses the parameters given and sets up a configuration accordingly.

    Making an example configuration

    To begin with, we'll create a basic configuration in C-space:

    typedef struct {
        int         enabled;      /* Enable or disable our module */
        const char *path;         /* Some path to...something */
        int         typeOfAction; /* 1 means action A, 2 means action B and so on */
    } example_config;

    Now, let's put this into perspective by creating a very small module that just prints out a hard-coded configuration. You'll notice that we use the register_hooks function for initializing the configuration values to their defaults:

    typedef struct {
        int         enabled;      /* Enable or disable our module */
        const char *path;         /* Some path to...something */
        int         typeOfAction; /* 1 means action A, 2 means action B and so on */
    } example_config;
    
    static example_config config;
    
    static int example_handler(request_rec *r)
    {
        if (!r->handler || strcmp(r->handler, "example-handler")) return(DECLINED);
        ap_set_content_type(r, "text/plain");
        ap_rprintf(r, "Enabled: %u\n", config.enabled);
        ap_rprintf(r, "Path: %s\n", config.path);
        ap_rprintf(r, "TypeOfAction: %x\n", config.typeOfAction);
        return OK;
    }
    
    static void register_hooks(apr_pool_t *pool) 
    {
        config.enabled = 1;
        config.path = "/foo/bar";
        config.typeOfAction = 0x00;
        ap_hook_handler(example_handler, NULL, NULL, APR_HOOK_LAST);
    }
    
    /* Define our module as an entity and assign a function for registering hooks  */
    
    module AP_MODULE_DECLARE_DATA   example_module =
    {
        STANDARD20_MODULE_STUFF,
        NULL,            /* Per-directory configuration handler */
        NULL,            /* Merge handler for per-directory configurations */
        NULL,            /* Per-server configuration handler */
        NULL,            /* Merge handler for per-server configurations */
        NULL,            /* Any directives we may have for httpd */
        register_hooks   /* Our hook registering function */
    };

    So far so good. To access our new handler, we could add the following to our configuration:

    <Location "/example">
        SetHandler example-handler
    </Location>

    When we visit, we'll see our current configuration being spit out by our module.

    Registering directives with the server

    What if we want to change our configuration, not by hard-coding new values into the module, but by using either the httpd.conf file or possibly a .htaccess file? It's time to let the server know that we want this to be possible. To do so, we must first change our name tag to include a reference to the configuration directives we want to register with the server:

    module AP_MODULE_DECLARE_DATA   example_module =
    {
        STANDARD20_MODULE_STUFF,
        NULL,               /* Per-directory configuration handler */
        NULL,               /* Merge handler for per-directory configurations */
        NULL,               /* Per-server configuration handler */
        NULL,               /* Merge handler for per-server configurations */
        example_directives, /* Any directives we may have for httpd */
        register_hooks      /* Our hook registering function */
    };

    This will tell the server that we are now accepting directives from the configuration files, and that the structure called example_directives holds information on what our directives are and how they work. Since we have three different variables in our module configuration, we will add a structure with three directives and a NULL at the end:

    static const command_rec        example_directives[] =
    {
        AP_INIT_TAKE1("exampleEnabled", example_set_enabled, NULL, RSRC_CONF, "Enable or disable mod_example"),
        AP_INIT_TAKE1("examplePath", example_set_path, NULL, RSRC_CONF, "The path to whatever"),
        AP_INIT_TAKE2("exampleAction", example_set_action, NULL, RSRC_CONF, "Special action value!"),
        { NULL }
    };

    Directives structure
    As you can see, each directive needs at least 5 parameters set:

    1. AP_INIT_TAKE1: This is a macro that tells the server that this directive takes one and only one argument. If we required two arguments, we could use the macro AP_INIT_TAKE2 and so on (refer to httpd_conf.h for more macros).
    2. exampleEnabled: This is the name of our directive. More precisely, it is what the user must put in his/her configuration in order to invoke a configuration change in our module.
    3. example_set_enabled: This is a reference to a C function that parses the directive and sets the configuration accordingly. We will discuss how to make this in the following paragraph.
    4. RSRC_CONF: This tells the server where the directive is permitted. We'll go into details on this value in the later chapters, but for now, RSRC_CONF means that the server will only accept these directives in a server context.
    5. "Enable or disable....": This is simply a brief description of what the directive does.

    (The "missing" parameter in our definition, which is usually set to NULL, is an optional function that can be run after the initial function to parse the arguments have been run. This is usually omitted, as the function for verifying arguments might as well be used to set them.)

    The directive handler function

    Now that we have told the server to expect some directives for our module, it's time to make a few functions for handling these. What the server reads in the configuration file(s) is text, and so naturally, what it passes along to our directive handler is one or more strings, that we ourselves need to recognize and act upon. You'll notice, that since we set our exampleAction directive to accept two arguments, its C function also has an additional parameter defined:

    /* Handler for the "exampleEnabled" directive */
    const char *example_set_enabled(cmd_parms *cmd, void *cfg, const char *arg)
    {
        if(!strcasecmp(arg, "on")) config.enabled = 1;
        else config.enabled = 0;
        return NULL;
    }
    
    /* Handler for the "examplePath" directive */
    const char *example_set_path(cmd_parms *cmd, void *cfg, const char *arg)
    {
        config.path = arg;
        return NULL;
    }
    
    /* Handler for the "exampleAction" directive */
    /* Let's pretend this one takes one argument (file or db), and a second (deny or allow), */
    /* and we store it in a bit-wise manner. */
    const char *example_set_action(cmd_parms *cmd, void *cfg, const char *arg1, const char *arg2)
    {
        if(!strcasecmp(arg1, "file")) config.typeOfAction = 0x01;
        else config.typeOfAction = 0x02;
        
        if(!strcasecmp(arg2, "deny")) config.typeOfAction += 0x10;
        else config.typeOfAction += 0x20;
        return NULL;
    }

    Putting it all together

    Now that we have our directives set up, and handlers configured for them, we can assemble our module into one big file:

    /* mod_example_config_simple.c: */
    #include <stdio.h>
    #include "apr_hash.h"
    #include "ap_config.h"
    #include "ap_provider.h"
    #include "httpd.h"
    #include "http_core.h"
    #include "http_config.h"
    #include "http_log.h"
    #include "http_protocol.h"
    #include "http_request.h"
    
    /*
     ==============================================================================
     Our configuration prototype and declaration:
     ==============================================================================
     */
    typedef struct {
        int         enabled;      /* Enable or disable our module */
        const char *path;         /* Some path to...something */
        int         typeOfAction; /* 1 means action A, 2 means action B and so on */
    } example_config;
    
    static example_config config;
    
    /*
     ==============================================================================
     Our directive handlers:
     ==============================================================================
     */
    /* Handler for the "exampleEnabled" directive */
    const char *example_set_enabled(cmd_parms *cmd, void *cfg, const char *arg)
    {
        if(!strcasecmp(arg, "on")) config.enabled = 1;
        else config.enabled = 0;
        return NULL;
    }
    
    /* Handler for the "examplePath" directive */
    const char *example_set_path(cmd_parms *cmd, void *cfg, const char *arg)
    {
        config.path = arg;
        return NULL;
    }
    
    /* Handler for the "exampleAction" directive */
    /* Let's pretend this one takes one argument (file or db), and a second (deny or allow), */
    /* and we store it in a bit-wise manner. */
    const char *example_set_action(cmd_parms *cmd, void *cfg, const char *arg1, const char *arg2)
    {
        if(!strcasecmp(arg1, "file")) config.typeOfAction = 0x01;
        else config.typeOfAction = 0x02;
        
        if(!strcasecmp(arg2, "deny")) config.typeOfAction += 0x10;
        else config.typeOfAction += 0x20;
        return NULL;
    }
    
    /*
     ==============================================================================
     The directive structure for our name tag:
     ==============================================================================
     */
    static const command_rec        example_directives[] =
    {
        AP_INIT_TAKE1("exampleEnabled", example_set_enabled, NULL, RSRC_CONF, "Enable or disable mod_example"),
        AP_INIT_TAKE1("examplePath", example_set_path, NULL, RSRC_CONF, "The path to whatever"),
        AP_INIT_TAKE2("exampleAction", example_set_action, NULL, RSRC_CONF, "Special action value!"),
        { NULL }
    };
    /*
     ==============================================================================
     Our module handler:
     ==============================================================================
     */
    static int example_handler(request_rec *r)
    {
        if(!r->handler || strcmp(r->handler, "example-handler")) return(DECLINED);
        ap_set_content_type(r, "text/plain");
        ap_rprintf(r, "Enabled: %u\n", config.enabled);
        ap_rprintf(r, "Path: %s\n", config.path);
        ap_rprintf(r, "TypeOfAction: %x\n", config.typeOfAction);
        return OK;
    }
    
    /*
     ==============================================================================
     The hook registration function (also initializes the default config values):
     ==============================================================================
     */
    static void register_hooks(apr_pool_t *pool) 
    {
        config.enabled = 1;
        config.path = "/foo/bar";
        config.typeOfAction = 3;
        ap_hook_handler(example_handler, NULL, NULL, APR_HOOK_LAST);
    }
    /*
     ==============================================================================
     Our module name tag:
     ==============================================================================
     */
    module AP_MODULE_DECLARE_DATA   example_module =
    {
        STANDARD20_MODULE_STUFF,
        NULL,               /* Per-directory configuration handler */
        NULL,               /* Merge handler for per-directory configurations */
        NULL,               /* Per-server configuration handler */
        NULL,               /* Merge handler for per-server configurations */
        example_directives, /* Any directives we may have for httpd */
        register_hooks      /* Our hook registering function */
    };

    In our httpd.conf file, we can now change the hard-coded configuration by adding a few lines:

    ExampleEnabled On
    ExamplePath "/usr/bin/foo"
    ExampleAction file allow

    And thus we apply the configuration, visit /example on our web site, and we see the configuration has adapted to what we wrote in our configuration file.

    top

    Context aware configurations

    Introduction to context aware configurations

    In Apache HTTP Server 2.4, different URLs, virtual hosts, directories etc can have very different meanings to the user of the server, and thus different contexts within which modules must operate. For example, let's assume you have this configuration set up for mod_rewrite:

    <Directory "/var/www">
        RewriteCond "%{HTTP_HOST}" "^example.com$"
        RewriteRule "(.*)" "http://www.example.com/$1"
    </Directory>
    <Directory "/var/www/sub">
        RewriteRule "^foobar$" "index.php?foobar=true"
    </Directory>

    In this example, you will have set up two different contexts for mod_rewrite:

    1. Inside /var/www, all requests for http://example.com must go to http://www.example.com
    2. Inside /var/www/sub, all requests for foobar must go to index.php?foobar=true

    If mod_rewrite (or the entire server for that matter) wasn't context aware, then these rewrite rules would just apply to every and any request made, regardless of where and how they were made, but since the module can pull the context specific configuration straight from the server, it does not need to know itself, which of the directives are valid in this context, since the server takes care of this.

    So how does a module get the specific configuration for the server, directory or location in question? It does so by making one simple call:

    example_config *config = (example_config*) ap_get_module_config(r->per_dir_config, &example_module);

    That's it! Of course, a whole lot goes on behind the scenes, which we will discuss in this chapter, starting with how the server came to know what our configuration looks like, and how it came to be set up as it is in the specific context.

    Our basic configuration setup

    In this chapter, we will be working with a slightly modified version of our previous context structure. We will set a context variable that we can use to track which context configuration is being used by the server in various places:

    typedef struct {
        char        context[256];
        char        path[256];
        int         typeOfAction;
        int         enabled;
    } example_config;

    Our handler for requests will also be modified, yet still very simple:

    static int example_handler(request_rec *r)
    {
        if(!r->handler || strcmp(r->handler, "example-handler")) return(DECLINED);
        example_config *config = (example_config*) ap_get_module_config(r->per_dir_config, &example_module);
        ap_set_content_type(r, "text/plain");
        ap_rprintf("Enabled: %u\n", config->enabled);
        ap_rprintf("Path: %s\n", config->path);
        ap_rprintf("TypeOfAction: %x\n", config->typeOfAction);
        ap_rprintf("Context: %s\n", config->context);
        return OK;
    }

    Choosing a context

    Before we can start making our module context aware, we must first define, which contexts we will accept. As we saw in the previous chapter, defining a directive required five elements be set:

    AP_INIT_TAKE1("exampleEnabled", example_set_enabled, NULL, RSRC_CONF, "Enable or disable mod_example"),

    The RSRC_CONF definition told the server that we would only allow this directive in a global server context, but since we are now trying out a context aware version of our module, we should set this to something more lenient, namely the value ACCESS_CONF, which lets us use the directive inside <Directory> and <Location> blocks. For more control over the placement of your directives, you can combine the following restrictions together to form a specific rule:

    • RSRC_CONF: Allow in .conf files (not .htaccess) outside <Directory> or <Location>
    • ACCESS_CONF: Allow in .conf files (not .htaccess) inside <Directory> or <Location>
    • OR_OPTIONS: Allow in .conf files and .htaccess when AllowOverride Options is set
    • OR_FILEINFO: Allow in .conf files and .htaccess when AllowOverride FileInfo is set
    • OR_AUTHCFG: Allow in .conf files and .htaccess when AllowOverride AuthConfig is set
    • OR_INDEXES: Allow in .conf files and .htaccess when AllowOverride Indexes is set
    • OR_ALL: Allow anywhere in .conf files and .htaccess

    Using the server to allocate configuration slots

    A much smarter way to manage your configurations is by letting the server help you create them. To do so, we must first start off by changing our name tag to let the server know, that it should assist us in creating and managing our configurations. Since we have chosen the per-directory (or per-location) context for our module configurations, we'll add a per-directory creator and merger function reference in our tag:

    module AP_MODULE_DECLARE_DATA   example_module =
    {
        STANDARD20_MODULE_STUFF,
        create_dir_conf, /* Per-directory configuration handler */
        merge_dir_conf,  /* Merge handler for per-directory configurations */
        NULL,            /* Per-server configuration handler */
        NULL,            /* Merge handler for per-server configurations */
        directives,      /* Any directives we may have for httpd */
        register_hooks   /* Our hook registering function */
    };

    Creating new context configurations

    Now that we have told the server to help us create and manage configurations, our first step is to make a function for creating new, blank configurations. We do so by creating the function we just referenced in our name tag as the Per-directory configuration handler:

    void *create_dir_conf(apr_pool_t *pool, char *context) {
        context = context ? context : "(undefined context)";
        example_config *cfg = apr_pcalloc(pool, sizeof(example_config));
        if(cfg) {
            /* Set some default values */
            strcpy(cfg->context, context);
            cfg->enabled = 0;
            cfg->path = "/foo/bar";
            cfg->typeOfAction = 0x11;
        }
        return cfg;
    }

    Merging configurations

    Our next step in creating a context aware configuration is merging configurations. This part of the process particularly applies to scenarios where you have a parent configuration and a child, such as the following:

    <Directory "/var/www">
        ExampleEnabled On
        ExamplePath "/foo/bar"
        ExampleAction file allow
    </Directory>
    <Directory "/var/www/subdir">
        ExampleAction file deny
    </Directory>

    In this example, it is natural to assume that the directory /var/www/subdir should inherit the values set for the /var/www directory, as we did not specify an ExampleEnabled nor an ExamplePath for this directory. The server does not presume to know if this is true, but cleverly does the following:

    1. Creates a new configuration for /var/www
    2. Sets the configuration values according to the directives given for /var/www
    3. Creates a new configuration for /var/www/subdir
    4. Sets the configuration values according to the directives given for /var/www/subdir
    5. Proposes a merge of the two configurations into a new configuration for /var/www/subdir

    This proposal is handled by the merge_dir_conf function we referenced in our name tag. The purpose of this function is to assess the two configurations and decide how they are to be merged:

    void *merge_dir_conf(apr_pool_t *pool, void *BASE, void *ADD) {
        example_config *base = (example_config *) BASE ; /* This is what was set in the parent context */
        example_config *add = (example_config *) ADD ;   /* This is what is set in the new context */
        example_config *conf = (example_config *) create_dir_conf(pool, "Merged configuration"); /* This will be the merged configuration */
        
        /* Merge configurations */
        conf->enabled = ( add->enabled == 0 ) ? base->enabled : add->enabled ;
        conf->typeOfAction = add->typeOfAction ? add->typeOfAction : base->typeOfAction;
        strcpy(conf->path, strlen(add->path) ? add->path : base->path);
        
        return conf ;
    }

    Trying out our new context aware configurations

    Now, let's try putting it all together to create a new module that is context aware. First off, we'll create a configuration that lets us test how the module works:

    <Location "/a">
        SetHandler example-handler
        ExampleEnabled on
        ExamplePath "/foo/bar"
        ExampleAction file allow
    </Location>
    
    <Location "/a/b">
        ExampleAction file deny
        ExampleEnabled off
    </Location>
    
    <Location "/a/b/c">
        ExampleAction db deny
        ExamplePath "/foo/bar/baz"
        ExampleEnabled on
    </Location>

    Then we'll assemble our module code. Note, that since we are now using our name tag as reference when fetching configurations in our handler, I have added some prototypes to keep the compiler happy:

    /*$6
     +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
     * mod_example_config.c
     +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
     */
    
    
    #include <stdio.h>
    #include "apr_hash.h"
    #include "ap_config.h"
    #include "ap_provider.h"
    #include "httpd.h"
    #include "http_core.h"
    #include "http_config.h"
    #include "http_log.h"
    #include "http_protocol.h"
    #include "http_request.h"
    
    /*$1
     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        Configuration structure
     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     */
    
    typedef struct
    {
        char    context[256];
        char    path[256];
        int     typeOfAction;
        int     enabled;
    } example_config;
    
    /*$1
     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        Prototypes
     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     */
    
    static int    example_handler(request_rec *r);
    const char    *example_set_enabled(cmd_parms *cmd, void *cfg, const char *arg);
    const char    *example_set_path(cmd_parms *cmd, void *cfg, const char *arg);
    const char    *example_set_action(cmd_parms *cmd, void *cfg, const char *arg1, const char *arg2);
    void          *create_dir_conf(apr_pool_t *pool, char *context);
    void          *merge_dir_conf(apr_pool_t *pool, void *BASE, void *ADD);
    static void   register_hooks(apr_pool_t *pool);
    
    /*$1
     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        Configuration directives
     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     */
    
    static const command_rec    directives[] =
    {
        AP_INIT_TAKE1("exampleEnabled", example_set_enabled, NULL, ACCESS_CONF, "Enable or disable mod_example"),
        AP_INIT_TAKE1("examplePath", example_set_path, NULL, ACCESS_CONF, "The path to whatever"),
        AP_INIT_TAKE2("exampleAction", example_set_action, NULL, ACCESS_CONF, "Special action value!"),
        { NULL }
    };
    
    /*$1
     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        Our name tag
     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     */
    
    module AP_MODULE_DECLARE_DATA    example_module =
    {
        STANDARD20_MODULE_STUFF,
        create_dir_conf,    /* Per-directory configuration handler */
        merge_dir_conf,     /* Merge handler for per-directory configurations */
        NULL,               /* Per-server configuration handler */
        NULL,               /* Merge handler for per-server configurations */
        directives,         /* Any directives we may have for httpd */
        register_hooks      /* Our hook registering function */
    };
    
    /*
     =======================================================================================================================
        Hook registration function
     =======================================================================================================================
     */
    static void register_hooks(apr_pool_t *pool)
    {
        ap_hook_handler(example_handler, NULL, NULL, APR_HOOK_LAST);
    }
    
    /*
     =======================================================================================================================
        Our example web service handler
     =======================================================================================================================
     */
    static int example_handler(request_rec *r)
    {
        if(!r->handler || strcmp(r->handler, "example-handler")) return(DECLINED);
    
        /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
        example_config    *config = (example_config *) ap_get_module_config(r->per_dir_config, &example_module);
        /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
    
        ap_set_content_type(r, "text/plain");
        ap_rprintf(r, "Enabled: %u\n", config->enabled);
        ap_rprintf(r, "Path: %s\n", config->path);
        ap_rprintf(r, "TypeOfAction: %x\n", config->typeOfAction);
        ap_rprintf(r, "Context: %s\n", config->context);
        return OK;
    }
    
    /*
     =======================================================================================================================
        Handler for the "exampleEnabled" directive
     =======================================================================================================================
     */
    const char *example_set_enabled(cmd_parms *cmd, void *cfg, const char *arg)
    {
        /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
        example_config    *conf = (example_config *) cfg;
        /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
    
        if(conf)
        {
            if(!strcasecmp(arg, "on"))
                conf->enabled = 1;
            else
                conf->enabled = 0;
        }
    
        return NULL;
    }
    
    /*
     =======================================================================================================================
        Handler for the "examplePath" directive
     =======================================================================================================================
     */
    const char *example_set_path(cmd_parms *cmd, void *cfg, const char *arg)
    {
        /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
        example_config    *conf = (example_config *) cfg;
        /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
    
        if(conf)
        {
            strcpy(conf->path, arg);
        }
    
        return NULL;
    }
    
    /*
     =======================================================================================================================
        Handler for the "exampleAction" directive ;
        Let's pretend this one takes one argument (file or db), and a second (deny or allow), ;
        and we store it in a bit-wise manner.
     =======================================================================================================================
     */
    const char *example_set_action(cmd_parms *cmd, void *cfg, const char *arg1, const char *arg2)
    {
        /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
        example_config    *conf = (example_config *) cfg;
        /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
    
        if(conf)
        {
            {
                if(!strcasecmp(arg1, "file"))
                    conf->typeOfAction = 0x01;
                else
                    conf->typeOfAction = 0x02;
                if(!strcasecmp(arg2, "deny"))
                    conf->typeOfAction += 0x10;
                else
                    conf->typeOfAction += 0x20;
            }
        }
    
        return NULL;
    }
    
    /*
     =======================================================================================================================
        Function for creating new configurations for per-directory contexts
     =======================================================================================================================
     */
    void *create_dir_conf(apr_pool_t *pool, char *context)
    {
        context = context ? context : "Newly created configuration";
    
        /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
        example_config    *cfg = apr_pcalloc(pool, sizeof(example_config));
        /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
    
        if(cfg)
        {
            {
                /* Set some default values */
                strcpy(cfg->context, context);
                cfg->enabled = 0;
                memset(cfg->path, 0, 256);
                cfg->typeOfAction = 0x00;
            }
        }
    
        return cfg;
    }
    
    /*
     =======================================================================================================================
        Merging function for configurations
     =======================================================================================================================
     */
    void *merge_dir_conf(apr_pool_t *pool, void *BASE, void *ADD)
    {
        /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
        example_config    *base = (example_config *) BASE;
        example_config    *add = (example_config *) ADD;
        example_config    *conf = (example_config *) create_dir_conf(pool, "Merged configuration");
        /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
    
        conf->enabled = (add->enabled == 0) ? base->enabled : add->enabled;
        conf->typeOfAction = add->typeOfAction ? add->typeOfAction : base->typeOfAction;
        strcpy(conf->path, strlen(add->path) ? add->path : base->path);
        return conf;
    }
    top

    Summing up

    We have now looked at how to create simple modules for Apache HTTP Server 2.4 and configuring them. What you do next is entirely up to you, but it is my hope that something valuable has come out of reading this documentation. If you have questions on how to further develop modules, you are welcome to join our mailing lists or check out the rest of our documentation for further tips.

    top

    Some useful snippets of code

    Retrieve variables from POST form data

    typedef struct {
        const char *key;
        const char *value;
    } keyValuePair;
    
    keyValuePair *readPost(request_rec *r) {
        apr_array_header_t *pairs = NULL;
        apr_off_t len;
        apr_size_t size;
        int res;
        int i = 0;
        char *buffer;
        keyValuePair *kvp;
    
        res = ap_parse_form_data(r, NULL, &pairs, -1, HUGE_STRING_LEN);
        if (res != OK || !pairs) return NULL; /* Return NULL if we failed or if there are is no POST data */
        kvp = apr_pcalloc(r->pool, sizeof(keyValuePair) * (pairs->nelts + 1));
        while (pairs && !apr_is_empty_array(pairs)) {
            ap_form_pair_t *pair = (ap_form_pair_t *) apr_array_pop(pairs);
            apr_brigade_length(pair->value, 1, &len);
            size = (apr_size_t) len;
            buffer = apr_palloc(r->pool, size + 1);
            apr_brigade_flatten(pair->value, buffer, &size);
            buffer[len] = 0;
            kvp[i].key = apr_pstrdup(r->pool, pair->name);
            kvp[i].value = buffer;
            i++;
        }
        return kvp;
    }
    
    static int example_handler(request_rec *r)
    {
        /*~~~~~~~~~~~~~~~~~~~~~~*/
        keyValuePair *formData;
        /*~~~~~~~~~~~~~~~~~~~~~~*/
    
        formData = readPost(r);
        if (formData) {
            int i;
            for (i = 0; &formData[i]; i++) {
                if (formData[i].key && formData[i].value) {
                    ap_rprintf(r, "%s = %s\n", formData[i].key, formData[i].value);
                } else if (formData[i].key) {
                    ap_rprintf(r, "%s\n", formData[i].key);
                } else if (formData[i].value) {
                    ap_rprintf(r, "= %s\n", formData[i].value);
                } else {
                    break;
                }
            }
        }
        return OK;
    }

    Printing out every HTTP header received

    static int example_handler(request_rec *r)
    {
        /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
        const apr_array_header_t    *fields;
        int                         i;
        apr_table_entry_t           *e = 0;
        /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
    
        fields = apr_table_elts(r->headers_in);
        e = (apr_table_entry_t *) fields->elts;
        for(i = 0; i < fields->nelts; i++) {
            ap_rprintf(r, "%s: %s\n", e[i].key, e[i].val);
        }
        return OK;
    }

    Reading the request body into memory

    static int util_read(request_rec *r, const char **rbuf, apr_off_t *size)
    {
        /*~~~~~~~~*/
        int rc = OK;
        /*~~~~~~~~*/
    
        if((rc = ap_setup_client_block(r, REQUEST_CHUNKED_ERROR))) {
            return(rc);
        }
    
        if(ap_should_client_block(r)) {
    
            /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
            char         argsbuffer[HUGE_STRING_LEN];
            apr_off_t    rsize, len_read, rpos = 0;
            apr_off_t length = r->remaining;
            /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
    
            *rbuf = (const char *) apr_pcalloc(r->pool, (apr_size_t) (length + 1));
            *size = length;
            while((len_read = ap_get_client_block(r, argsbuffer, sizeof(argsbuffer))) > 0) {
                if((rpos + len_read) > length) {
                    rsize = length - rpos;
                }
                else {
                    rsize = len_read;
                }
    
                memcpy((char *) *rbuf + rpos, argsbuffer, (size_t) rsize);
                rpos += rsize;
            }
        }
        return(rc);
    }
    
    static int example_handler(request_rec *r) 
    {
        /*~~~~~~~~~~~~~~~~*/
        apr_off_t   size;
        const char  *buffer;
        /*~~~~~~~~~~~~~~~~*/
    
        if(util_read(r, &buffer, &size) == OK) {
            ap_rprintf(r, "We read a request body that was %" APR_OFF_T_FMT " bytes long", size);
        }
        return OK;
    }

    Available Languages:  en 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/developer/index.html0000644000000000000500000000032412274455360017432 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: index.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: index.html.zh-cn.utf8 Content-Language: zh-cn Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/developer/thread_safety.html.en0000644000000000000500000004321513412755316021553 0ustar rootsrc Apache HTTP Server 2.x Thread Safety Issues - Apache HTTP Server Version 2.4
    <-

    Apache HTTP Server 2.x Thread Safety Issues

    Available Languages:  en 

    When using any of the threaded mpms in the Apache HTTP Server 2.x it is important that every function called from Apache be thread safe. When linking in 3rd party extensions it can be difficult to determine whether the resulting server will be thread safe. Casual testing generally won't tell you this either as thread safety problems can lead to subtle race conditions that may only show up in certain conditions under heavy load.

    top

    Global and static variables

    When writing your module or when trying to determine if a module or 3rd party library is thread safe there are some common things to keep in mind.

    First, you need to recognize that in a threaded model each individual thread has its own program counter, stack and registers. Local variables live on the stack, so those are fine. You need to watch out for any static or global variables. This doesn't mean that you are absolutely not allowed to use static or global variables. There are times when you actually want something to affect all threads, but generally you need to avoid using them if you want your code to be thread safe.

    In the case where you have a global variable that needs to be global and accessed by all threads, be very careful when you update it. If, for example, it is an incrementing counter, you need to atomically increment it to avoid race conditions with other threads. You do this using a mutex (mutual exclusion). Lock the mutex, read the current value, increment it and write it back and then unlock the mutex. Any other thread that wants to modify the value has to first check the mutex and block until it is cleared.

    If you are using APR, have a look at the apr_atomic_* functions and the apr_thread_mutex_* functions.

    top

    errno

    This is a common global variable that holds the error number of the last error that occurred. If one thread calls a low-level function that sets errno and then another thread checks it, we are bleeding error numbers from one thread into another. To solve this, make sure your module or library defines _REENTRANT or is compiled with -D_REENTRANT. This will make errno a per-thread variable and should hopefully be transparent to the code. It does this by doing something like this:

    #define errno (*(__errno_location()))

    which means that accessing errno will call __errno_location() which is provided by the libc. Setting _REENTRANT also forces redefinition of some other functions to their *_r equivalents and sometimes changes the common getc/putc macros into safer function calls. Check your libc documentation for specifics. Instead of, or in addition to _REENTRANT the symbols that may affect this are _POSIX_C_SOURCE, _THREAD_SAFE, _SVID_SOURCE, and _BSD_SOURCE.

    top

    Common standard troublesome functions

    Not only do things have to be thread safe, but they also have to be reentrant. strtok() is an obvious one. You call it the first time with your delimiter which it then remembers and on each subsequent call it returns the next token. Obviously if multiple threads are calling it you will have a problem. Most systems have a reentrant version of the function called strtok_r() where you pass in an extra argument which contains an allocated char * which the function will use instead of its own static storage for maintaining the tokenizing state. If you are using APR you can use apr_strtok().

    crypt() is another function that tends to not be reentrant, so if you run across calls to that function in a library, watch out. On some systems it is reentrant though, so it is not always a problem. If your system has crypt_r() chances are you should be using that, or if possible simply avoid the whole mess by using md5 instead.

    top

    Common 3rd Party Libraries

    The following is a list of common libraries that are used by 3rd party Apache modules. You can check to see if your module is using a potentially unsafe library by using tools such as ldd(1) and nm(1). For PHP, for example, try this:

    % ldd libphp4.so
    libsablot.so.0 => /usr/local/lib/libsablot.so.0 (0x401f6000)
    libexpat.so.0 => /usr/lib/libexpat.so.0 (0x402da000)
    libsnmp.so.0 => /usr/lib/libsnmp.so.0 (0x402f9000)
    libpdf.so.1 => /usr/local/lib/libpdf.so.1 (0x40353000)
    libz.so.1 => /usr/lib/libz.so.1 (0x403e2000)
    libpng.so.2 => /usr/lib/libpng.so.2 (0x403f0000)
    libmysqlclient.so.11 => /usr/lib/libmysqlclient.so.11 (0x40411000)
    libming.so => /usr/lib/libming.so (0x40449000)
    libm.so.6 => /lib/libm.so.6 (0x40487000)
    libfreetype.so.6 => /usr/lib/libfreetype.so.6 (0x404a8000)
    libjpeg.so.62 => /usr/lib/libjpeg.so.62 (0x404e7000)
    libcrypt.so.1 => /lib/libcrypt.so.1 (0x40505000)
    libssl.so.2 => /lib/libssl.so.2 (0x40532000)
    libcrypto.so.2 => /lib/libcrypto.so.2 (0x40560000)
    libresolv.so.2 => /lib/libresolv.so.2 (0x40624000)
    libdl.so.2 => /lib/libdl.so.2 (0x40634000)
    libnsl.so.1 => /lib/libnsl.so.1 (0x40637000)
    libc.so.6 => /lib/libc.so.6 (0x4064b000)
    /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x80000000)

    In addition to these libraries you will need to have a look at any libraries linked statically into the module. You can use nm(1) to look for individual symbols in the module.

    top

    Library List

    Please drop a note to dev@httpd.apache.org if you have additions or corrections to this list.

    LibraryVersionThread Safe?Notes
    ASpell/PSpell ?
    Berkeley DB 3.x, 4.x Yes Be careful about sharing a connection across threads.
    bzip2 Yes Both low-level and high-level APIs are thread-safe. However, high-level API requires thread-safe access to errno.
    cdb ?
    C-Client Perhaps c-client uses strtok() and gethostbyname() which are not thread-safe on most C library implementations. c-client's static data is meant to be shared across threads. If strtok() and gethostbyname() are thread-safe on your OS, c-client may be thread-safe.
    libcrypt ?
    Expat Yes Need a separate parser instance per thread
    FreeTDS ?
    FreeType ?
    GD 1.8.x ?
    GD 2.0.x ?
    gdbm No Errors returned via a static gdbm_error variable
    ImageMagick 5.2.2 Yes ImageMagick docs claim it is thread safe since version 5.2.2 (see Change log).
    Imlib2 ?
    libjpeg v6b ?
    libmysqlclient Yes Use mysqlclient_r library variant to ensure thread-safety. For more information, please read http://dev.mysql.com/doc/mysql/en/Threaded_clients.html.
    Ming 0.2a ?
    Net-SNMP 5.0.x ?
    OpenLDAP 2.1.x Yes Use ldap_r library variant to ensure thread-safety.
    OpenSSL 0.9.6g Yes Requires proper usage of CRYPTO_num_locks, CRYPTO_set_locking_callback, CRYPTO_set_id_callback
    liboci8 (Oracle 8+) 8.x,9.x ?
    pdflib 5.0.x Yes PDFLib docs claim it is thread safe; changes.txt indicates it has been partially thread-safe since V1.91: http://www.pdflib.com/products/pdflib-family/pdflib/.
    libpng 1.0.x ?
    libpng 1.2.x ?
    libpq (PostgreSQL) 8.x Yes Don't share connections across threads and watch out for crypt() calls
    Sablotron 0.95 ?
    zlib 1.1.4 Yes Relies upon thread-safe zalloc and zfree functions Default is to use libc's calloc/free which are thread-safe.

    Available Languages:  en 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/developer/modules.html.ja.utf80000644000000000000500000003744713412755316021270 0ustar rootsrc モジュール㮠Apache 1.3 ã‹ã‚‰ Apache 2.0 ã¸ã®ç§»æ¤ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    モジュール㮠Apache 1.3 ã‹ã‚‰ Apache 2.0 ã¸ã®ç§»æ¤

    翻訳済ã¿è¨€èªž:  en  |  ja 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。

    ã“ã®æ–‡æ›¸ã¯ mod_mmap_static モジュールを Apache 2.0 用ã«ç§»æ¤ã—ãŸæ™‚㫠学んã çµŒé¨“ã‚’ã‚‚ã¨ã«æ›¸ã„ãŸã€æœ€åˆã®æ‰‹å¼•ãæ›¸ã§ã™ã€‚ã¾ã ã¾ã å®Œå…¨ã˜ã‚ƒãªã„ã—〠ã²ã‚‡ã£ã¨ã™ã‚‹ã¨é–“é•ã£ã¦ã„る部分もã‚ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“ãŒã€ å–ã£æŽ›ã‚Šã«ã¯ãªã‚‹ã§ã—ょã†ã€‚

    top

    ç°¡å˜ãªå¤‰æ›´ç‚¹

    クリーンナップ ルーãƒãƒ³

    クリーンナップルーãƒãƒ³ã¯ apr_status_t åž‹ã§ã‚ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚ ãã—ã¦ã€apr_status_t åž‹ã®å€¤ã‚’è¿”ã•ãªãã¦ã¯ãªã‚Šã¾ã›ã‚“。 クリーンナップ中ã®ã‚¨ãƒ©ãƒ¼ã‚’通知ã™ã‚‹å¿…è¦ãŒãªã‘れã°ã€è¿”ã‚Šå€¤ã¯æ™®é€šã€ ARP_SUCCESS ã§ã™ã€‚ãŸã¨ãˆã‚¨ãƒ©ãƒ¼ã‚’通知ã—ãŸã¨ã—ã¦ã‚‚〠ã™ã¹ã¦ã®ã‚³ãƒ¼ãƒ‰ãŒãã®é€šçŸ¥ã‚’ãƒã‚§ãƒƒã‚¯ã—ãŸã‚Šã€ エラーã«å¿œã˜ãŸå‹•作をã™ã‚‹ã‚ã‘ã§ã¯ãªã„ã“ã¨ã«æ°—ã‚’ã¤ã‘ã¦ãã ã•ã„。

    åˆæœŸåŒ–ルーãƒãƒ³

    åˆæœŸåŒ–ルーãƒãƒ³ã¯å‡¦ç†å…¨ä½“ã‹ã‚‰è¦‹ã¦ã—ã£ãりãるよã†ãªæ„味を表ã™ã‚ˆã†ã«ã€ åå‰ãŒå¤‰æ›´ã•れã¾ã—ãŸã€‚ã§ã™ã‹ã‚‰ã€mmap_init ã‹ã‚‰ mmap_post_config ã®ã‚ˆã†ã«ã¡ã‚‡ã£ã¨å¤‰æ›´ã•れã¾ã—ãŸã€‚ 渡ã•れる引数ã¯å¤§å¹…ã«å¤‰æ›´ã•ã‚Œã€æ¬¡ã®ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚

    • apr_pool_t *p
    • apr_pool_t *plog
    • apr_pool_t *ptemp
    • server_rec *s

    データ型

    データ型ã®ã»ã¨ã‚“ã©ã¯ APR ã«ç§»ã•れã¾ã—ãŸã€‚ã¤ã¾ã‚Šã€ ã„ãã¤ã‹ã®åå‰ãŒå‰è¿°ã®ã‚ˆã†ã«å¤‰æ›´ã•れã¦ã„ã¾ã™ã€‚ æ–½ã™ã¹ã変更点ã®ç°¡å˜ãªä¸€è¦§ã‚’以下ã«ç¤ºã—ã¾ã™ã€‚

    • pool becomes apr_pool_t
    • table becomes apr_table_t
    top

    ã‚‚ã£ã¨åބ介ãªå¤‰æ›´ç‚¹â€¦

    フックã®ç™»éŒ²

    æ–°ã—ã„アーキテクãƒãƒ£ã§ã¯ä½œæˆã—ãŸé–¢æ•°ã‚’呼ã³å‡ºã™ã®ã« 一連ã®ãƒ•ックを使用ã—ã¾ã™ã€‚ã“ã®ãƒ•ックã¯ã€æ–°ã—ã„関数 static void register_hooks(void) を使ã£ã¦ç™»éŒ²ã™ã‚‹ã‚ˆã†ã€ ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«æ›¸ãè¶³ã•ãªãã¦ã¯ãªã‚Šã¾ã›ã‚“。 ã“ã®é–¢æ•°ã¯ã€ãªã«ã‚’ã™ã¹ãã‹ä¸€æ—¦ç†è§£ã—ã¦ã—ã¾ãˆã°ã€ å分ã«ã‚ã‹ã‚Šã‚„ã™ã„ã‚‚ã®ã§ã™ã€‚ リクエストã®å‡¦ç†ã®ã‚るステージã§å‘¼ã³å‡ºã•ãªãã¦ã¯ãªã‚‰ãªã„ 関数ã¯ç™»éŒ²ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚ãƒãƒ³ãƒ‰ãƒ©ã¯ç™»éŒ²ã™ã‚‹å¿…è¦ã¯ã‚りã¾ã›ã‚“。 関数を登録ã§ãるフェーズã¯ãŸãã•ã‚“ã‚りã¾ã™ã€‚ ãれãžã‚Œã®ãƒ•ェーズã§ã€é–¢æ•°ã‚’呼ã³å‡ºã™ç›¸å¯¾çš„ãªé †ç•ªã¯ã€ ã‹ãªã‚Šã®ç¨‹åº¦åˆ¶å¾¡ã§ãã¾ã™ã€‚

    以下ã¯ã€mod_mmap_static ã«è¿½åŠ ã—ãŸã‚³ãƒ¼ãƒ‰ã§ã™:

    static void register_hooks(void)
    {
        static const char * const aszPre[]={ "http_core.c",NULL };
        ap_hook_post_config(mmap_post_config,NULL,NULL,HOOK_MIDDLE);
        ap_hook_translate_name(mmap_static_xlat,aszPre,NULL,HOOK_LAST);
    };

    ã“ã“ã§ã¯å‘¼ã³ã ã™ã¹ã二ã¤ã®é–¢æ•°ã‚’登録ã—ã¦ã„ã¾ã™ã€‚一ã¤ã¯ post_config ステージ用 (ã»ã¨ã‚“ã©ã™ã¹ã¦ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« ã¯ã“れãŒå¿…è¦ã§ã™) ã§ã€ã‚‚ã†ä¸€ã¤ã¯ translate_name フェーズ用ã§ã™ã€‚ ãれãžã‚Œã®é–¢æ•°ã¯åå‰ã¯é•ã†ã‘れã©ã‚‚å½¢å¼ã¯åŒã˜ã§ã‚ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。 ãれã§ã¯ã€å½¢å¼ã¯ã©ã®ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã§ã—ょã†ã‹?

    ap_hook_phase_name(function_name, predecessors, successors, position);

    三ã¤ã®ä½ç½®ãŒå®šç¾©ã•れã¦ã„ã¾ã™â€¦

    • HOOK_FIRST
    • HOOK_MIDDLE
    • HOOK_LAST

    ä½ç½®ã‚’定義ã™ã‚‹ã«ã¯ã€ä¸Šè¨˜ã®ã€Œä½ç½®ã€ã‚’指定ã—〠修飾å­ã§ã‚る「先行ã€ã¨ã€Œå¾Œè¡Œã€ã§æ‰‹ã‚’加ãˆã¾ã™ã€‚ 「先行ã€ã€Œå¾Œè¡Œã€ã¯ã€å‘¼ã°ã‚Œã‚‹ã¹ã関数ã®ãƒªã‚¹ãƒˆã§ã™ã€‚ 「先行ã€ã¯é–¢æ•°ã®å®Ÿè¡Œå‰ã«å‘¼ã°ã‚Œã‚‹ã‚‚ã®ã§ã€ 「後行ã€ã¯å®Ÿè¡Œå¾Œã«å‘¼ã°ã‚Œã‚‹ã‚‚ã®ã§ã™ã€‚

    mod_mmap_static ã®å ´åˆã€post_config ステージã§ã¯å¿…è¦ã‚りã¾ã›ã‚“ãŒã€ mmap_static_xlat ㌠core モジュールãŒåå‰ã®å¤‰æ›ã‚’実行ã—ãŸå¾Œã« 呼ã°ã‚Œãªã‘れã°ãªã‚Šã¾ã›ã‚“。 ãã“ã§ aszPre を使ã£ã¦ HOOK_LAST ã®ä¿®é£¾å­ã‚’定義ã—ã¦ã„ã¾ã™ã€‚

    モジュールã®å®šç¾©

    モジュールã®å®šç¾©ã‚’作æˆã™ã‚‹éš›ã«æ³¨æ„ã—ãªã‘れã°ãªã‚‰ãªã„ ã‚¹ãƒ†ãƒ¼ã‚¸ã®æ•°ã¯æ¿€æ¸›ã—ã¦ã„ã¾ã™ã€‚å¤ã„å®šç¾©ã¯æ¬¡ã®ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã—ãŸã€‚

    module MODULE_VAR_EXPORT module_name_module =
    {
        STANDARD_MODULE_STUFF,
        /* initializer */
        /* dir config creater */
        /* dir merger --- default is to override */
        /* server config */
        /* merge server config */
        /* command handlers */
        /* handlers */
        /* filename translation */
        /* check_user_id */
        /* check auth */
        /* check access */
        /* type_checker */
        /* fixups */
        /* logger */
        /* header parser */
        /* child_init */
        /* child_exit */
        /* post read-request */
    };

    æ–°ã—ã„æ§‹é€ ä½“ã¯ã¨ã£ã¦ã‚‚シンプルã§ã™â€¦

    module MODULE_VAR_EXPORT module_name_module =
    {
        STANDARD20_MODULE_STUFF,
        /* create per-directory config structures */
        /* merge per-directory config structures  */
        /* create per-server config structures    */
        /* merge per-server config structures     */
        /* command handlers */
        /* handlers */
        /* register hooks */
    };

    ã“ã®ã†ã¡ã®ã„ãã¤ã‹ã¯å¤ã„ã‚‚ã®ã‹ã‚‰æ–°ã—ã„ã‚‚ã®ã«ç›´æŽ¥èª­ã¿æ›¿ãˆã‚‰ã‚Œã‚‹ã‚‚ã®ã§ã€ ã„ãã¤ã‹ã¯ãã†ã§ã¯ã‚りã¾ã›ã‚“。ã©ã†ã™ã‚Œã°ã„ã„ã®ã‹ã‚’è¦ç´„ã—ã¦ã¿ã¾ã™ã€‚

    ç›´æŽ¥èª­ã¿æ›¿ãˆã‚‰ã‚Œã‚‹ã‚¹ãƒ†ãƒ¼ã‚¸:

    /* ディレクトリ設定作æˆé–¢æ•° */
    /* ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæ¯Žè¨­å®šæ§‹é€ ä½“ä½œæˆ */
    /* サーãƒè¨­å®šä½œæˆé–¢æ•° */
    /* ã‚µãƒ¼ãƒæ¯Žè¨­å®šæ§‹é€ ä½“ä½œæˆ */
    /* ディレクトリ設定マージ関数 */
    /* ディレクトリ毎設定構造体マージ */
    /* サーãƒè¨­å®šãƒžãƒ¼ã‚¸é–¢æ•° */
    /* ã‚µãƒ¼ãƒæ¯Žè¨­å®šæ§‹é€ ä½“作æˆãƒžãƒ¼ã‚¸ */
    /* コマンド・テーブル */
    /* コマンド apr_table_t */
    /* ãƒãƒ³ãƒ‰ãƒ© */
    /* ãƒãƒ³ãƒ‰ãƒ© */

    å¤ã„é–¢æ•°ã®æ®‹ã‚Šã®ã‚‚ã®ã¯ãƒ•ックã¨ã—ã¦ç™»éŒ²ã•れるã¹ãã§ã™ã€‚ ç¾æ™‚ç‚¹ã§æ¬¡ã®ã‚ˆã†ãªãƒ•ック・ステージãŒå®šç¾©ã•れã¦ã„ã¾ã™â€¦

    ap_hook_post_config
    (以å‰ã® _init ルーãƒãƒ³ãŒç™»éŒ²ã•れるã¹ã場所ã§ã™)
    ap_hook_http_method
    (リクエストã‹ã‚‰ HTTP メソッドをå–å¾—ã—ã¾ã™ (互æ›ç”¨))
    ap_hook_open_logs
    (特定ã®ãƒ­ã‚°ã®ã‚ªãƒ¼ãƒ—ン)
    ap_hook_auth_checker
    (ãƒªã‚½ãƒ¼ã‚¹ãŒæ¨©é™ã‚’å¿…è¦ã¨ã™ã‚‹ã‹ã©ã†ã‹ã®ç¢ºèª)
    ap_hook_access_checker
    (モジュール固有ã®åˆ¶ç´„ã®ç¢ºèª)
    ap_hook_check_user_id
    (ユーザ ID ã¨ãƒ‘スワードã®ç¢ºèª)
    ap_hook_default_port
    (サーãƒã®ãƒ‡ãƒ•ォルト・ãƒãƒ¼ãƒˆã®å–å¾—)
    ap_hook_pre_connection
    (処ç†ã®ç›´å‰ã«å¿…è¦ãªã“ã¨ã‚’実行。ãŸã ã— accept 直後ã«å‘¼ã°ã‚Œã‚‹)
    ap_hook_process_connection
    (プロトコルã®å‡¦ç†)
    ap_hook_child_init
    (å­ãƒ—ロセル起動直後)
    ap_hook_create_request
    (??)
    ap_hook_fixups
    (応答内容ã®ç”Ÿæˆã‚’変更ã™ã‚‹ãƒ©ã‚¹ãƒˆãƒ»ãƒãƒ£ãƒ³ã‚¹)
    ap_hook_handler
    (応答内容ã®ç”Ÿæˆ)
    ap_hook_header_parser
    (モジュールã«ãƒ˜ãƒƒãƒ€ã®ç…§ä¼šã‚’ã•ã›ã‚‹ã€‚ã»ã¨ã‚“ã©ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ã¯ä½¿ã‚れã¾ã›ã‚“。post_read_request を使ã„ã¾ã™)
    ap_hook_insert_filter
    (フィルタ・ãƒã‚§ã‚¤ãƒ³ã«ãƒ•ィルタを挿入)
    ap_hook_log_transaction
    (リクエストã«ã¤ã„ã¦ã®æƒ…報を記録ã™ã‚‹)
    ap_hook_optional_fn_retrieve
    (オプションã¨ã—ã¦ç™»éŒ²ã•れãŸé–¢æ•°ã®å–å¾—)
    ap_hook_post_read_request
    (リクエストを読ã¿ã“ã‚“ã å¾Œã€ä»–ã®ãƒ•ェーズã®å‰ã«å‘¼ã°ã‚Œã‚‹)
    ap_hook_quick_handler
    リクエストã®å‡¦ç†ãŒå§‹ã¾ã‚‹å‰ã«å‘¼ã°ã‚Œã‚‹ã€‚キャッシュモジュール㌠使用ã—ã¦ã„ã‚‹
    ap_hook_translate_name
    (URI をファイルåã«å¤‰æ›ã™ã‚‹)
    ap_hook_type_checker
    (æ–‡æ›¸åž‹ã®æ±ºå®šã¨è¨­å®šã€‚ã‚ã‚‹ã„ã¯ãã®ç‰‡æ–¹)

    翻訳済ã¿è¨€èªž:  en  |  ja 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/index.html.en0000644000000000000500000002171413412755316016053 0ustar rootsrc Apache HTTP Server Version 2.4 Documentation - Apache HTTP Server Version 2.4
    <-

    Available Languages:  da  |  de  |  en  |  es  |  fr  |  ja  |  ko  |  pt-br  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/rewrite/0002755000000000000500000000000013523273357015136 5ustar rootsrchttpd-2.4.41/docs/manual/rewrite/tech.html.en0000644000000000000500000003153013412755316017345 0ustar rootsrc Apache mod_rewrite Technical Details - Apache HTTP Server Version 2.4
    <-

    Apache mod_rewrite Technical Details

    Available Languages:  en  |  fr 

    This document discusses some of the technical details of mod_rewrite and URL matching.

    top

    API Phases

    The Apache HTTP Server handles requests in several phases. At each of these phases, one or more modules may be called upon to handle that portion of the request lifecycle. Phases include things like URL-to-filename translation, authentication, authorization, content, and logging. (This is not an exhaustive list.)

    mod_rewrite acts in two of these phases (or "hooks", as they are often called) to influence how URLs may be rewritten.

    First, it uses the URL-to-filename translation hook, which occurs after the HTTP request has been read, but before any authorization starts. Secondly, it uses the Fixup hook, which is after the authorization phases, and after per-directory configuration files (.htaccess files) have been read, but before the content handler is called.

    So, after a request comes in and a corresponding server or virtual host has been determined, the rewriting engine starts processing any mod_rewrite directives appearing in the per-server configuration. (i.e., in the main server configuration file and <Virtualhost> sections.) This happens in the URL-to-filename phase.

    A few steps later, once the final data directories have been found, the per-directory configuration directives (.htaccess files and <Directory> blocks) are applied. This happens in the Fixup phase.

    In each of these cases, mod_rewrite rewrites the REQUEST_URI either to a new URL, or to a filename.

    In per-directory context (i.e., within .htaccess files and Directory blocks), these rules are being applied after a URL has already been translated to a filename. Because of this, the URL-path that mod_rewrite initially compares RewriteRule directives against is the full filesystem path to the translated filename with the current directories path (including a trailing slash) removed from the front.

    To illustrate: If rules are in /var/www/foo/.htaccess and a request for /foo/bar/baz is being processed, an expression like ^bar/baz$ would match.

    If a substitution is made in per-directory context, a new internal subrequest is issued with the new URL, which restarts processing of the request phases. If the substitution is a relative path, the RewriteBase directive determines the URL-path prefix prepended to the substitution. In per-directory context, care must be taken to create rules which will eventually (in some future "round" of per-directory rewrite processing) not perform a substitution to avoid looping. (See RewriteLooping for further discussion of this problem.)

    Because of this further manipulation of the URL in per-directory context, you'll need to take care to craft your rewrite rules differently in that context. In particular, remember that the leading directory path will be stripped off of the URL that your rewrite rules will see. Consider the examples below for further clarification.

    Location of rule Rule
    VirtualHost section RewriteRule "^/images/(.+)\.jpg" "/images/$1.gif"
    .htaccess file in document root RewriteRule "^images/(.+)\.jpg" "images/$1.gif"
    .htaccess file in images directory RewriteRule "^(.+)\.jpg" "$1.gif"

    For even more insight into how mod_rewrite manipulates URLs in different contexts, you should consult the log entries made during rewriting.

    top

    Ruleset Processing

    Now when mod_rewrite is triggered in these two API phases, it reads the configured rulesets from its configuration structure (which itself was either created on startup for per-server context or during the directory walk of the Apache kernel for per-directory context). Then the URL rewriting engine is started with the contained ruleset (one or more rules together with their conditions). The operation of the URL rewriting engine itself is exactly the same for both configuration contexts. Only the final result processing is different.

    The order of rules in the ruleset is important because the rewriting engine processes them in a special (and not very obvious) order. The rule is this: The rewriting engine loops through the ruleset rule by rule (RewriteRule directives) and when a particular rule matches it optionally loops through existing corresponding conditions (RewriteCond directives). For historical reasons the conditions are given first, and so the control flow is a little bit long-winded. See Figure 1 for more details.

    Flow of RewriteRule and RewriteCond matching
    Figure 1:The control flow through the rewriting ruleset

    First the URL is matched against the Pattern of each rule. If it fails, mod_rewrite immediately stops processing this rule, and continues with the next rule. If the Pattern matches, mod_rewrite looks for corresponding rule conditions (RewriteCond directives, appearing immediately above the RewriteRule in the configuration). If none are present, it substitutes the URL with a new value, which is constructed from the string Substitution, and goes on with its rule-looping. But if conditions exist, it starts an inner loop for processing them in the order that they are listed. For conditions, the logic is different: we don't match a pattern against the current URL. Instead we first create a string TestString by expanding variables, back-references, map lookups, etc. and then we try to match CondPattern against it. If the pattern doesn't match, the complete set of conditions and the corresponding rule fails. If the pattern matches, then the next condition is processed until no more conditions are available. If all conditions match, processing is continued with the substitution of the URL with Substitution.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/intro.html.fr.utf80000644000000000000500000005733213412755316020457 0ustar rootsrc Introduction au module Apache mod_rewrite - Serveur HTTP Apache Version 2.4
    <-

    Introduction au module Apache mod_rewrite

    Langues Disponibles:  en  |  fr 

    Ce document est un complément à la documentation de référence du module mod_rewrite. Il décrit les concepts de base dont la connaissance est nécessaire pour l'utilisation de mod_rewrite. D'autres documents entrent d'avantage dans les détails, mais celui-ci devrait aider le débutant à se mouiller les pieds.

    top

    Introduction

    Le module Apache mod_rewrite est un module puissant et sophistiqué qui permet la réécriture des URLs. Grâce à lui, vous pouvez effectuer quasiment tous les types de réécriture d'URLs dont vous avez besoin. Il est cependant assez complexe, et peut paraître intimidant au débutant. Certains ont aussi tendance à traiter les règles de réécriture comme des incantations magiques, et à les utiliser sans vraiment comprendre leur manière d'agir.

    Ce document a pour ambition d'être suffisamment explicite pour permettre la compréhension, et non la copie en aveugle, de ce qui suit.

    Gardez à l'esprit que de nombreuses tâches de manipulation d'URLs courantes n'ont pas besoin de la puissance et de la complexité de mod_rewrite. Pour les tâches simples, voir mod_alias et la documentation sur la Mise en correspondance des URLs avec le système de fichiers.

    Enfin, avant de procéder, assurez-vous d'avoir configuré le niveau de journalisation de mod_rewrite à un des niveaux de trace via la directive LogLevel. Bien que ceci risque de vous submerger sous une énorme quantité d'informations, le débogage des problèmes avec la configuration de mod_rewrite est à ce prix car vous verrez alors exactement comment chaque règle est traitée.

    top

    Expressions rationnelles

    mod_rewrite utilise le vocabulaire des Expressions rationnelles compatibles Perl. Ce document n'a pas pour prétention d'être une référence détaillée des expressions rationnelles. A cet effet, nous recommandons les pages de manuel de PCRE, la page de manuel des expressions rationnelles Perl, et l'ouvrage Mastering Regular Expressions, by Jeffrey Friedl.

    Dans ce document, nous avons pour but de vous fournir suffisamment de vocabulaire des expressions rationnelles pour vous mettre le pied à l'étrier, sans être dépassé, en espérant que les directives RewriteRule vous apparaîtront comme des formules scientifiques, plutôt que comme des incantations magiques.

    Vocabulaire des expressions rationnelles

    Vous trouverez dans ce qui suit le minimum à connaître pour être en mesure d'écrire des expressions rationnelles et des règles RewriteRule. Ceci ne représente certainement pas un vocabulaire des expressions rationnelles complet, mais constitue un bon point de départ, et devrait vous aider à déchiffrer les expressions rationnelles simples, et à écrire vos propres expressions.

    Motif Signification Exemple
    .Correspond à tout caractère unique c.t correspondra à cat, cot, cut, etc.
    +Répète le caractère de correspondance précédent une ou plusieurs fois a+ correspond à a, aa, aaa, etc.
    *Répète le caractère de correspondance précédent zéro ou plusieurs fois a* correspond à tout ce à quoi correspond a+, mais correspond aussi à la chaîne vide.
    ?Rend la correspondance optionnelle. colou?r correspondra à color et colour.
    ^Appelé ancrage, correspond au début de la chaîne ^a correspond à une chaîne qui commence par a
    $L'autre ancrage, correspond à la fin de la chaîne. a$ correspond à une chaîne qui se termine par a.
    ( )Regroupe plusieurs caractères en une seule entité, et conserve une correspondance à des fins d'utilisation dans une référence arrière. (ab)+ correspond à ababab - à savoir, le + s'applique au groupe. Pour plus de détails sur les références arrières, voir ci-dessous.
    [ ]Une classe de caractères - correspond à un des caractères de la classe c[uoa]t correspond à cut, cot ou cat.
    [^ ]Négation de la classe de caractères - correspond à tout caractère ne faisant pas partie de la classe c[^/]t correspond à cat ou c=t mais pas à c/t

    Avec mod_rewrite, le caractère ! peut préfixer une expression rationnelle afin d'en exprimer la négation. Autrement dit, une chaîne ne correspondra que si elle ne correspond pas à l'expression située après le !.

    Disponibilité des références arrières dans les expressions rationnelles

    Vous devez vous souvenir d'une chose importante : chaque fois que vous utilisez des parenthèses dans un Modèle ou dans un des modèles de conditions, des références arrières sont créées en interne et peuvent être rappelées via les chaînes $N et %N (voir ci-dessous). Ces références sont disponibles lors de la création de la chaîne de substitution d'une directive RewriteRule ou de la chaîne de test d'une directive RewriteCond.

    Les captures dans les modèles de directives RewriteRule sont paradoxalement disponibles dans toutes les directives RewriteCond qui précèdent, car les expressions des directives RewriteRule sont évaluées avant les conditions individuelles.

    La figure 1 montre à quels endroits les références arrières sont suceptibles d'être développées, et illustre le flux des comparaisons effectuées par les règles RewriteRule et RewriteCond. Dans les chapitres suivants, nous examinerons comment utiliser ces références arrières, donc ne vous affolez pas si elles vous paraissent un peu exotiques au premier abord.

    Flux des comparaisons effectuées par les règles RewriteRule       et RewriteCond
    Figure 1 : Le cheminement d'une référence arrière à travers une règle.
    Dans cet exemple, une requête pour /test/1234 serait transformée en /admin.foo?page=test&id=1234&host=admin.example.com.

    top

    Les bases des règles de réécriture

    Une règle de réécriture RewriteRule est constituée de trois arguments séparés par des espaces. Les arguments sont :

    1. Modèle: le modèle des URLs auxquelles la règle doit s'appliquer;
    2. Substitution: vers quoi la requête correspondante doit être transformée;
    3. [drapeaux]: options affectant la requête réécrite.

    Le Modèle est une expression rationnelle. Au sein de la première règle de réécriture, ou jusqu'à ce qu'une substitution survienne, elle est comparée au chemin de l'URL de la requête entrante (la partie située après le nom d'hôte mais avant tout point d'interrogation qui indique le début d'une chaîne de paramètres de requête) ou, dans un contexte de répertoire, au chemin de la requête relativement au répertoire pour lequel la règle est définie. Lorsqu'une substitution a eu lieu, les règles suivantes effectuent leurs comparaisons par rapport à la valeur substituée.

    Syntaxe de la directive RewriteRule
    Figure 2 : Syntaxe de la directive RewriteRule.

    La chaîne de Substitution peut, quant à elle, être de trois types :

    Un chemin complet du système de fichiers vers une ressource
    RewriteRule "^/jeux" "/usr/local/jeux/web"

    Ceci peut faire correspondre une requête à toute localisation voulue de votre système de fichiers, un peu comme la directive Alias.

    Un chemin web vers une ressource
    RewriteRule "^/foo$" "/bar"

    Si la directive DocumentRoot a pour valeur /usr/local/apache2/htdocs, cette règle va faire correspondre les requêtes pour http://example.com/foo au chemin /usr/local/apache2/htdocs/bar.

    Une URL absolue
    RewriteRule "^/produits/vues$" "http://site2.example.com/voirproduits.html" [R]

    Ceci informe le client qu'il doit effectuer une nouvelle requête vers l'URL spécifiée.

    La chaîne de Substitution peut aussi contenir des références arrières vers des parties du chemin d'URL entrant correspondant au Modèle. Considérons ce qui suit :

    RewriteRule "^/produits/(.*)/view$" "/var/web/produitsdb/$1"

    La variable $1 sera remplacée par tout texte correspondant à l'expression située entre les parenthèses dans le Modèle. Par exemple, une requête pour http://example.com/produits/r14df/vue correspondra au chemin /var/web/produitsdb/r14df.

    S'il y a plus d'une expression entre parenthèses, elle seront accessibles selon leur ordre d'apparition via les variables $1, $2, $3, etc...

    top

    Drapeaux de réécriture

    Le comportement d'une règle RewriteRule peut être modifié par la présence d'un ou plusieurs drapeaux en fin de règle. Par exemple, les conditions de correspondance d'une règle peuvent être rendues insensibles à la casse par la présence du drapeau [NC] :

    RewriteRule "^puppy.html" "petitchien.html" [NC]

    Pour une liste des drapeaux disponibles, leurs significations, et des exemples, voir le document Drapeaux de réécriture.

    top

    Conditions de réécriture

    Il est possible d'utiliser une ou plusieurs directives RewriteCond pour restreindre les types de requêtes auxquelles devra s'appliquer la règle RewriteRule suivante. Le premier argument est une variable décrivant une caractéristique de la requête, le second argument est une expression rationnelle qui doit correspondre à la variable, et un troisième argument optionnel est une liste de drapeaux qui modifient la manière dont la correspondance est évaluée.

    Syntaxe de la directive RewriteCond
    Figure 3 : Syntaxe de la directive RewriteCond

    Par exemple, pour renvoyer toutes les requêtes en provenance d'une certaine tranche d'adresses IP vers un autre serveur, vous pouvez utiliser :

    RewriteCond "%{REMOTE_ADDR}" "^10\.2\."
    RewriteRule "(.*)" "http://intranet.example.com$1"

    Si vous spécifiez plus d'une directive RewriteCond, ces directives doivent toutes être satisfaites pour que la règle RewriteRule suivante s'applique. Par exemple, pour interdire les requêtes qui contiennent le mot "hack" dans la chaîne de requête, sauf si elles contiennent aussi un cookie contenant le mot "go", vous pouvez utiliser :

    RewriteCond "%{QUERY_STRING}" "hack"
    RewriteCond "%{HTTP_COOKIE}" "!go"
    RewriteRule "." "-" [F]

    Notez que le point d'exclamation indique une correspondance négative ; ainsi, la règle n'est appliquée que si le cookie ne contient pas "go"

    Les correspondances dans les expressions rationnelles contenues dans les directives RewriteCond peuvent constituer des parties de la chaîne de Substitution de la règle RewriteRule via les variables %1, %2, etc... Par exemple, ce qui suit va diriger la requête vers un répertoire différent en fonction du nom d'hôte utilisé pour accéder au site :

    RewriteCond "%{HTTP_HOST}" "(.*)"
    RewriteRule "^/(.*)" "/sites/%1/$1"

    Si la requête concernait http://example.com/foo/bar, alors %1 contiendrait example.com et $1 contiendrait foo/bar.

    top

    Tables de réécriture

    La directive RewriteMap permet en quelque sorte de faire appel à une fonction externe pour effectuer la réécriture à votre place. Tout ceci est décrit plus en détails dans la Documentation supplémentaire sur RewriteMap.

    top

    Fichiers .htaccess

    La réécriture est en général définie au niveau de la configuration du serveur principal (en dehors de toute section <Directory>) ou dans une section <VirtualHost>. Il s'agit là de la manière la plus simple de mettre en oeuvre la réécriture et nous la recommandons. Il est possible, cependant, de mettre en oeuvre la réécriture au sein d'une section <Directory> ou d'un fichier .htaccess ; ce type de configuration est cependant plus complexe. Cette technique est appelée réécriture par répertoire.

    La principale différence avec les réécritures au niveau du serveur réside dans le fait que le préfixe du chemin du répertoire contenant le fichier .htaccess est supprimé avant la mise en correspondance dans la règle RewriteRule. De plus, on doit utiliser la directive RewriteBase pour s'assurer que la requête est correctement mise en correspondance.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/remapping.html.fr.utf80000644000000000000500000007431313412755316021304 0ustar rootsrc Redirection et remise en correspondance avec mod_rewrite - Serveur HTTP Apache Version 2.4
    <-

    Redirection et remise en correspondance avec mod_rewrite

    Langues Disponibles:  en  |  fr 

    Ce document est un complément à la Documentation de référence de mod_rewrite. Il montre comment utiliser mod_rewrite pour rediriger et remettre en correspondance une requête. Il contient de nombreux exemples d'utilisation courante de mod_rewrite avec une description détaillée de leur fonctionnement.

    Vous devez vous attacher à comprendre le fonctionnement des exemples, car la plupart d'entre eux ne fonctionneront pas sur votre système si vous vous contentez de les copier/coller dans vos fichiers de configuration.
    top

    De l'ancienne à la nouvelle URL (en interne)

    Description :

    Supposons que nous ayons récemment renommé la page foo.html en bar.html, et voulions maintenant que l'ancienne URL soit toujours valide à des fins de compatibilité ascendante. En fait, on voudrait que le changement de nom soit transparent aux utilisateurs de l'ancienne URL.

    Solution :

    On réécrit l'ancienne URL en interne vers la nouvelle via la règle suivante :

    RewriteEngine  on
    RewriteRule    "^/foo\.html$" "/bar.html" [PT]
    top

    De l'ancien au nouveau (en externe)

    Description :

    Supposons toujours que nous ayons récemment renommé la page foo.html en bar.html, et voulions maintenant que l'ancienne URL soit toujours valide à des fins de compatibilité ascendante. En revanche, nous voulons cette fois que la nouvelle URL soit suggérée aux utilisateurs de l'ancienne URL, c'est à dire que l'adresse vue depuis leur navigateur doit également être modifiée.

    Solution :

    On force une redirection HTTP vers la nouvelle URL, ce qui entraîne une modification de celle du navigateur et aussi de ce que voit l'utilisateur :

    RewriteEngine  on
    RewriteRule    "^foo\.html$"  "bar.html"  [R]
    Discussion

    Dans l'exemple interne, on a utilisé mod_rewrite afin de dissimuler la redirection au client. Dans cet exemple, en revanche, on aurait pu se contenter d'une directive Redirect :

    Redirect "/foo.html" "/bar.html"
    top

    Ressource déplacée vers un autre serveur

    Description :

    Si une ressource a été déplacée vers un autre serveur, vous pouvez faire en sorte que les URLs de l'ancien serveur continuent de fonctionner pendant un certain temps, afin de laisser au utilisateurs le temps de modifier leurs favoris.

    Solution :

    Vous pouvez utiliser mod_rewrite pour rediriger ces URLs vers le nouveau serveur, mais vous pouvez aussi utiliser les directives Redirect ou RedirectMatch.

    #Avec mod_rewrite
    RewriteEngine on
    RewriteRule   "^/docs/(.+)"  "http://nouveau.example.com/docs/$1"  [R,L]
    #Avec RedirectMatch
    RedirectMatch "^/docs/(.*)" "http://nouveau.example.com/docs/$1"
    #Avec Redirect
    Redirect "/docs/" "http://nouveau.example.com/docs/"
    top

    De statique à dynamique

    Description :

    Comment transformer une page statique foo.html en sa variante dynamique foo.cgi de manière transparente, c'est à dire sans en avertir le navigateur/utilisateur.

    Solution :

    On réécrit simplement l'URL en script CGI et force le gestionnaire de contenu à cgi-script de façon à ce que le script s'exécute en tant que programme CGI. Ainsi, une requête vers /~quux/foo.html conduit en interne à l'invocation de /~quux/foo.cgi.

    RewriteEngine  on
    RewriteBase    "/~quux/"
    RewriteRule    "^foo\.html$"  "foo.cgi"  [H=cgi-script]
    top

    Compatibilité ascendante dans le cadre d'une modification d'extension de nom de fichier

    Description :

    Comment conférer une compatibilité ascendante aux URLs (existant encore virtuellement) après avoir migré document.YYYY vers document.XXXX, c'est à dire après avoir par exemple traduit un lot de fichiers .html en fichiers .php ?

    Solution :

    On réécrit simplement le nom du fichier en son nom de base et vérifie s'il existe aussi avec la nouvelle extension. Si c'est le cas, on utilise ce nom, sinon on réécrit l'URL sous sa forme originale.

    #   jeu de règles assurant une compatibilité ascendante en réécrivant
    # document.html en document.php si et seulement si document.php
    # existe <Directory "/var/www/htdocs"> RewriteEngine on RewriteBase "/var/www/htdocs" RewriteCond "$1.php" -f RewriteCond "$1.html" !-f RewriteRule "^(.*).html$" "$1.php" </Directory>
    Discussion

    Cet exemple utilise une fonctionnalité souvent méconnue de mod_rewrite, en tirant avantage de l'ordre d'exécution du jeu de règles. En particulier, mod_rewrite évalue la partie gauche des règles de réécriture avant d'évaluer les directives RewriteCond. En conséquence, $1 est déjà défini au moment où les directives RewriteCond sont évaluées. Ceci nous permet de tester l'existence du fichier original (document.html) et du fichier cible (document.php) en utilisant le même nom de base.

    Ce jeu de règles est conçu pour une utilisation dans un contexte de répertoire (au sein d'une section <Directory> ou d'un fichier .htaccess), de façon à ce que les vérifications -f effectuent leurs recherches dans le bon répertoire. Vous serez peut-être amené à définir une directive RewriteBase pour spécifier le répertoire de base à partir duquel vous travaillez.

    top

    Noms d'hôtes canoniques

    Description :
    Le but de cette règle est de préférer l'utilisation d'un nom d'hôte particulier à d'autres noms d'hôte utilisables pour atteindre le même site. Par exemple, si vous voulez utiliser www.example.com à la place de example.com, vous pouvez utiliser une solution du style :
    Solution :

    Pour y parvenir, il vaut mieux se passer de mod_rewrite, et utiliser plutôt la directive Redirect dans une section de serveur virtuel pour le/les noms d'hôte non canoniques.

    <VirtualHost *:80>
      ServerName undesired.example.com
      ServerAlias example.com notthis.example.com
    
      Redirect "/" "http://www.example.com/"
    </VirtualHost>
    
    <VirtualHost *:80>
      ServerName www.example.com
    </VirtualHost>

    Vous pouvez aussi utiliser la directive <If> :

    <If "%{HTTP_HOST} != 'www.example.com'">
    	Redirect "/" "http://www.example.com/"
    </If>

    Ou, par exemple, pour rediriger une portion de votre site vers HTTPS :

    <If "%{SERVER_PROTOCOL} != 'HTTPS'">
    	Redirect "/admin/" "https://www.example.com/admin/"
    </If>

    Si, pour une raison particulière, vous voulez tout de même utiliser mod_rewrite - dans le cas, par exemple, où vous avez besoin d'un jeu plus important de règles de réécritures - vous pouvez utiliser la recette suivante :

    Pour les sites écoutant sur un port autre que 80:

    RewriteCond "%{HTTP_HOST}"   "!^www\.example\.com" [NC]
    RewriteCond "%{HTTP_HOST}"   "!^$"
    RewriteCond "%{SERVER_PORT}" "!^80$"
    RewriteRule "^/?(.*)"         "http://www.example.com:%{SERVER_PORT}/$1" [L,R,NE]

    Et pour un site écoutant sur le port 80

    RewriteCond "%{HTTP_HOST}"   "!^www\.example\.com" [NC]
    RewriteCond "%{HTTP_HOST}"   "!^$"
    RewriteRule "^/?(.*)"         "http://www.example.com/$1" [L,R,NE]

    Si vous souhaitez que cette règle s'applique à tous les noms de domaine - en d'autres termes, si vous voulez rediriger example.com vers www.example.com pour toutes les valeurs possibles de example.com, vous pouvez utiliser le jeu de règles suivants :

    RewriteCond "%{HTTP_HOST}" "!^www\." [NC]
    RewriteCond "%{HTTP_HOST}" "!^$"
    RewriteRule "^/?(.*)" "http://www.%{HTTP_HOST}/$1" [L,R,NE]

    Vous pouvez utiliser ce jeu de règles aussi bien dans le fichier de configuration de votre serveur principal que dans un fichier .htaccess placé dans le répertoire défini par la directive DocumentRoot du serveur.

    top

    Recherche de pages dans plus d'un répertoire

    Description:

    Une ressource peut exister dans plusieurs répertoires, et nous voulons rechercher cette ressource dans ces répertoires lorsqu'elle fait l'objet d'une requête. Il est possible que nous ayons récemment réorganisé la structure de notre site en répartissant son contenu dans plusieurs répertoires.

    Solution :

    Le jeu de règles suivant recherche la ressource dans deux répertoires, et s'il ne la trouve dans aucun des deux, il tentera simplement de la servir à partir de l'adresse fournie dans la requête.

    RewriteEngine on
    
    #   on cherche tout d'abord dans dir1/...
    #   ... et si on trouve, on est content et on arrête :
    RewriteCond         "%{DOCUMENT_ROOT}/dir1/%{REQUEST_URI}"  -f
    RewriteRule  "^(.+)"  "%{DOCUMENT_ROOT}/dir1/$1"  [L]
    
    #   on cherche ensuite dans dir2/...
    #   ... et si on trouve, on est content et on arrête :
    RewriteCond         "%{DOCUMENT_ROOT}/dir2/%{REQUEST_URI}"  -f
    RewriteRule  "^(.+)"  "%{DOCUMENT_ROOT}/dir2/$1"  [L]
    
    #   sinon, on continue la recherche avec d'autres directives Alias
    #   ou ScriptAlias, etc...
    RewriteRule   "^"  "-"  [PT]
    top

    Redirection vers des serveurs géographiquement distribués

    Description :

    Notre site web possède de nombreux miroirs, et nous voulons rediriger les utilisateurs vers celui qui se situe dans le pays où ils se trouvent.

    Solution :

    En consultant le nom d'hôte du client demandeur, on détermine le pays dans lequel il se trouve. S'il est impossible d'effectuer une recherche sur leur adresse IP, on se rabat sur un serveur par défaut.

    Nous allons utiliser une directive RewriteMap afin de construire une liste des serveurs que nous voulons utiliser.

    HostnameLookups on
    RewriteEngine on
    RewriteMap    multiplex         "txt:/path/to/map.mirrors"
    RewriteCond  "%{REMOTE_HOST}"     "([a-z]+)$ [NC]"
    RewriteRule   "^/(.*)$"  "${multiplex:%1|http://www.example.com/}$1"  [R,L]

    ## liste_miroirs -- Table de correspondance pays - serveurs

    de http://www.exemple.de/
    uk http://www.exemple.uk/
    com http://www.example.com/
    ##EOF##

    Discussion
    Ce jeu de règles nécessite la définition à on de la directive HostNameLookups, ce qui peut induire une baisse de performance significative.

    La directive RewriteCond extrait la dernière partie du nom d'hôte du client demandeur - le code du pays - et la règle de réécriture qui suit utilise cette valeur pour rechercher le serveur miroir approprié dans le fichier de correspondances.

    top

    Contenu dépendant du navigateur

    Description :

    Nous voulons fournir des contenus différents en fonction du navigateur (user-agent) qui effectue la requête.

    Solution :

    Nous devons déterminer quel contenu servir, en nous basant sur l'en-tête HTTP "User-Agent". La configuration suivante effectue ceci : si l'en-tête HTTP "User-Agent" commence par "Mozilla/3", le nom de la page foo.html est réécrit en foo.NS.html et la réécriture s'arrête. Si le navigateur est "Lynx" ou "Mozilla" version 1 ou 2, l'URL devient foo.20.html. Tous les autres navigateurs reçoivent la page foo.32.html. Tout ceci est effectué par le jeu de règles suivant :

    RewriteCond "%{HTTP_USER_AGENT}"  "^Mozilla/3.*"
    RewriteRule "^foo\.html$"         "foo.NS.html"          [L]
    
    RewriteCond "%{HTTP_USER_AGENT}"  "^Lynx/" [OR]
    RewriteCond "%{HTTP_USER_AGENT}"  "^Mozilla/[12]"
    RewriteRule "^foo\.html$"         "foo.20.html"          [L]
    
    RewriteRule "^foo\.html$"         "foo.32.html"          [L]
    top

    URLs canoniques

    Description :

    Sur certains serveurs, une ressource peut posséder plusieurs URLs. Il y a en général les URLs canoniques (celles qui sont réellement distribuées et utilisées), et celles qui correspondent à des raccourcis, les URLs internes, etc... Quelle que soit l'adresse que l'utilisateur fournit dans la requête, il devrait finalement voir l'URL canonique dans la barre d'adresse de son navigateur.

    Solution :

    Nous effectuons une redirection HTTP externe pour toutes les URLs non canoniques afin de les corriger dans la barre d'adresse du navigateur, et ceci pour toutes les requêtes futures. Dans le jeu de règles suivant, nous remplaçons /matous et /minettes par le canonique /chats.

    RewriteRule   "^/(matous|minettes)/(.*)"    "/chats/$2"  [R]
    Discussion :
    On serait mieux inspiré d'utiliser ici les directives Redirect ou RedirectMatch :
    RedirectMatch "^/(matous|minettes)/(.*)" "/chats/$2"
    top

    Déplacement du répertoire DocumentRoot

    Description :

    En général, le répertoire DocumentRoot du serveur web correspond à l'URL "/". Ce répertoire ne contient cependant pas forcément des ressources de première importance pour l'utilisateur. Par exemple, vous préférerez peut-être que le répertoire d'accueil d'un visiteur accédant pour la première fois à votre site soit un répertoire particulier /a-propos-de/. Pour y parvenir, utilisez le jeu de règles suivant :

    Solution :

    On redirige l'URL / vers /a-propos-de/ :

    RewriteEngine on
    RewriteRule   "^/$"  "/a-propos-de/"  [R]

    Notez que l'on peut aussi y parvenir en utilisant la directive RedirectMatch :

    RedirectMatch "^/$" "http://example.com/a-propos-de/"

    Notez aussi que cet exemple ne réécrit que l'URL racine. En d'autres termes, il réécrit une requête pour http://example.com/, mais pas pour une requête http://example.com/page.html. Si vous avez effectivement modifié la racine de vos documents - c'est à dire si tous vos contenus se trouvent dans un sous-répertoire, il est largement préférable de modifier simplement votre directive DocumentRoot, ou de déplacer l'ensemble du contenu vers le répertoire supérieur, plutôt que de réécrire les URLs.

    top

    Ressource par défaut

    Description :
    Vous voulez qu'une seule ressource (disons un certain fichier tel que index.php) soit servie pour toutes les requêtes à destination d'un certain répertoire, sauf pour celles qui concernent une ressource existant effectivement comme une image, ou un fichier css.
    Solution :

    Depuis la version 2.2.16, vous pouvez y parvenir via la directive FallbackResource :

    <Directory "/var/www/my_blog">
      FallbackResource "index.php"
    </Directory>

    Cependant, si vos besoins étaient plus complexes, vous pouviez, dans les versions plus anciennes d'Apache, utiliser un jeu de règles du style :

    <Directory "/var/www/my_blog">
      RewriteBase "/my_blog"
    
      RewriteCond "/var/www/my_blog/%{REQUEST_FILENAME}" !-f
      RewriteCond "/var/www/my_blog/%{REQUEST_FILENAME}" !-d
      RewriteRule "^" "index.php" [PT]
    </Directory>

    D'autre part, si vous voulez transmettre l'URI de la requête en tant que chaîne de paramètres à index.php, vous pouvez remplacer cette règle de réécriture par :

    RewriteRule "(.*)" "index.php?$1" [PT,QSA]

    Notez que l'on peut utiliser ces jeux de règles aussi bien dans un fichier .htaccess que dans une section <Directory>.

    top

    Rewrite query string

    Description :
    Vous voulez extraire une valeur particulière d'une chaîne de paramètres d'une URL, et soit la remplacer, soit l'incorporer dans un autre composant de l'URL.
    Solutions :

    Dans la plupart des solutions de cette section, on utilise la même condition qui stocke la valeur recherchée dans la référence arrière %2. %1 est le début de la requête, et %3 ce qui reste. Cette condition est un peu complexe car elle introduit de la flexibilité et évite les doubles perluettes '&&' dans les substitutions.

    • Cette solution supprime le couple clé/valeur recherché :
      # Remove mykey=???
      RewriteCond "%{QUERY_STRING}" "(.*(?:^|&))mykey=([^&]*)&?(.*)&?$"
      RewriteRule "(.*)" "$1?%1%3"
    • Cette solution remplace la partie de l'URL qui suit la valeur recherchée par un '?' :
      # Copy from query string to PATH_INFO
      RewriteCond "%{QUERY_STRING}" "(.*(?:^|&))mykey=([^&]*)&?(.*)&?$"
      RewriteRule "(.*)" "$1/products/%2/?" [PT]
    • Cette solution utilise la valeur recherchée dans une deuxième condition ::
      # Capture the value of mykey in the query string
      RewriteCond "%{QUERY_STRING}" "(.*(?:^|&))mykey=([^&]*)&?(.*)&?$""
      RewriteCond "%2" !=not-so-secret-value 
      RewriteRule "(.*)" - [F]
    • Cette solution produit l'effet inverse des précédentes ; elle copie des composantes du chemin (peut-être PATH_INFO) depuis l'URL vers sa chaîne de paramètres :
      # The desired URL might be /products/kitchen-sink, and the script expects 
      # /path?products=kitchen-sink.
      RewriteRule "^/?path/([^/]+)/([^/]+)" "/path?$1=$2" [PT]

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/index.html.fr.utf80000644000000000000500000001633113412755316020425 0ustar rootsrc Le module Apache mod_rewrite - Serveur HTTP Apache Version 2.4
    <-

    Le module Apache mod_rewrite

    Langues Disponibles:  en  |  fr  |  tr  |  zh-cn 

    mod_rewrite permet de modifier les requêtes entrantes dynamiquement, en fonction de règles manipulant des expressions rationnelles. Vous pouvez ainsi relier des URLs arbitraires à votre propre structure d'URLs interne comme vous le souhaitez.

    Il fournit un mécanisme de manipulation d'URL particulièrement souple et puissant en supportant un nombre illimité de règles et de conditions attachées à chaque règle. Les manipulations d'URLs peuvent dépendre de tests variés : les URLs peuvent être finement caractérisées en fonction de variables du serveur, de variables d'environnement, d'en-têtes HTTP, de repères temporels, de recherches dans des bases de données externes, ou même de requêtes vers des bases de données externes et de différents gestionnaires ou programmes externes.

    Les règles de réécriture peuvent agir sur l'ensemble des URLs (la partie chemin et la chaîne de paramètres) et peuvent être utilisées dans le contexte du serveur principal (httpd.conf), mais aussi dans le contexte des serveurs virtuels (sections <VirtualHost>), ou dans le contexte des répertoires (fichiers .htaccess et blocs <Directory>. Le résultat réécrit peut conduire vers d'autres règles à un traitement secondaire interne, une redirection vers une requête externe ou même l'envoi vers un serveur mandataire, en fonction des drapeaux que vous attachez aux règles

    mod_rewrite étant très puissant, il peut par conséquent être très complexe. Ce document complète la documentation de référence du module mod_rewrite, et est sensé alléger un peu cette complexité, et présenter des exemples largement commentés, ainsi que des situations courantes que vous pourrez traiter avec mod_rewrite. Mais nous voulons aussi vous montrer des situations où vous ne devrez pas utiliser mod_rewrite, et lui préférer d'autres fonctionnalités standard d'Apache, évitant ainsi d'entrer dans une complexité inutile.

    Langues Disponibles:  en  |  fr  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/rewrite/access.html.en0000644000000000000500000003423113412755316017664 0ustar rootsrc Using mod_rewrite to control access - Apache HTTP Server Version 2.4
    <-

    Using mod_rewrite to control access

    Available Languages:  en  |  fr 

    This document supplements the mod_rewrite reference documentation. It describes how you can use mod_rewrite to control access to various resources, and other related techniques. This includes many examples of common uses of mod_rewrite, including detailed descriptions of how each works.

    Note that many of these examples won't work unchanged in your particular server configuration, so it's important that you understand them, rather than merely cutting and pasting the examples into your configuration.
    top

    Forbidding Image "Hotlinking"

    Description:

    The following technique forbids the practice of other sites including your images inline in their pages. This practice is often referred to as "hotlinking", and results in your bandwidth being used to serve content for someone else's site.

    Solution:

    This technique relies on the value of the HTTP_REFERER variable, which is optional. As such, it's possible for some people to circumvent this limitation. However, most users will experience the failed request, which should, over time, result in the image being removed from that other site.

    There are several ways that you can handle this situation.

    In this first example, we simply deny the request, if it didn't initiate from a page on our site. For the purpose of this example, we assume that our site is www.example.com.

    RewriteCond "%{HTTP_REFERER}" "!^$"
    RewriteCond "%{HTTP_REFERER}" "!www.example.com" [NC]
    RewriteRule "\.(gif|jpg|png)$"    "-"   [F,NC]

    In this second example, instead of failing the request, we display an alternate image instead.

    RewriteCond "%{HTTP_REFERER}" "!^$"
    RewriteCond "%{HTTP_REFERER}" "!www.example.com" [NC]
    RewriteRule "\.(gif|jpg|png)$"    "/images/go-away.png"   [R,NC]

    In the third example, we redirect the request to an image on some other site.

    RewriteCond "%{HTTP_REFERER}" "!^$"
    RewriteCond "%{HTTP_REFERER}" "!www.example.com" [NC]
    RewriteRule "\.(gif|jpg|png)$" "http://other.example.com/image.gif"   [R,NC]

    Of these techniques, the last two tend to be the most effective in getting people to stop hotlinking your images, because they will simply not see the image that they expected to see.

    Discussion:

    If all you wish to do is deny access to the resource, rather than redirecting that request elsewhere, this can be accomplished without the use of mod_rewrite:

    SetEnvIf Referer "example\.com" localreferer
    <FilesMatch "\.(jpg|png|gif)$">
        Require env localreferer
    </FilesMatch>
    top

    Blocking of Robots

    Description:

    In this recipe, we discuss how to block persistent requests from a particular robot, or user agent.

    The standard for robot exclusion defines a file, /robots.txt that specifies those portions of your website where you wish to exclude robots. However, some robots do not honor these files.

    Note that there are methods of accomplishing this which do not use mod_rewrite. Note also that any technique that relies on the clients USER_AGENT string can be circumvented very easily, since that string can be changed.

    Solution:

    We use a ruleset that specifies the directory to be protected, and the client USER_AGENT that identifies the malicious or persistent robot.

    In this example, we are blocking a robot called NameOfBadRobot from a location /secret/files. You may also specify an IP address range, if you are trying to block that user agent only from the particular source.

    RewriteCond "%{HTTP_USER_AGENT}"   "^NameOfBadRobot"
    RewriteCond "%{REMOTE_ADDR}"       "=123\.45\.67\.[8-9]"
    RewriteRule "^/secret/files/"   "-"   [F]
    Discussion:

    Rather than using mod_rewrite for this, you can accomplish the same end using alternate means, as illustrated here:

    SetEnvIfNoCase User-Agent "^NameOfBadRobot" goaway
    <Location "/secret/files">
        <RequireAll>
            Require all granted
            Require not env goaway
        </RequireAll>
    </Location>

    As noted above, this technique is trivial to circumvent, by simply modifying the USER_AGENT request header. If you are experiencing a sustained attack, you should consider blocking it at a higher level, such as at your firewall.

    top

    Denying Hosts in a Blacklist

    Description:

    We wish to maintain a blacklist of hosts, rather like hosts.deny, and have those hosts blocked from accessing our server.

    Solution:
    RewriteEngine on
    RewriteMap    hosts-deny  "txt:/path/to/hosts.deny"
    RewriteCond   "${hosts-deny:%{REMOTE_ADDR}|NOT-FOUND}" "!=NOT-FOUND" [OR]
    RewriteCond   "${hosts-deny:%{REMOTE_HOST}|NOT-FOUND}" "!=NOT-FOUND"
    RewriteRule   "^"  "-"  [F]

    ##
    ## hosts.deny
    ##
    ## ATTENTION! This is a map, not a list, even when we treat it as such.
    ## mod_rewrite parses it for key/value pairs, so at least a
    ## dummy value "-" must be present for each entry.
    ##

    193.102.180.41 -
    bsdti1.sdm.de -
    192.76.162.40 -

    Discussion:

    The second RewriteCond assumes that you have HostNameLookups turned on, so that client IP addresses will be resolved. If that's not the case, you should drop the second RewriteCond, and drop the [OR] flag from the first RewriteCond.

    top

    Referer-based Deflector

    Description:

    Redirect requests based on the Referer from which the request came, with different targets per Referer.

    Solution:

    The following ruleset uses a map file to associate each Referer with a redirection target.

    RewriteMap  deflector "txt:/path/to/deflector.map"
    
    RewriteCond "%{HTTP_REFERER}" !=""
    RewriteCond "${deflector:%{HTTP_REFERER}}" "=-"
    RewriteRule "^" "%{HTTP_REFERER}" [R,L]
    
    RewriteCond "%{HTTP_REFERER}" !=""
    RewriteCond "${deflector:%{HTTP_REFERER}|NOT-FOUND}" "!=NOT-FOUND"
    RewriteRule "^" "${deflector:%{HTTP_REFERER}}" [R,L]

    The map file lists redirection targets for each referer, or, if we just wish to redirect back to where they came from, a "-" is placed in the map:

    ##
    ##  deflector.map
    ##
    
    http://badguys.example.com/bad/index.html    -
    http://badguys.example.com/bad/index2.html   -
    http://badguys.example.com/bad/index3.html   http://somewhere.example.com/

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/flags.html.fr.utf80000644000000000000500000013213613412755316020414 0ustar rootsrc Les drapeaux de réécriture - Serveur HTTP Apache Version 2.4
    <-

    Les drapeaux de réécriture

    Langues Disponibles:  en  |  fr 

    Ce document décrit les drapeaux disponibles dans la directive RewriteRule, en fournissant des explications détaillées et des exemples.

    top

    Introduction

    Le comportement d'une directive RewriteRule peut être modifié par un ou plusieurs drapeaux. Les drapeaux sont situés en fin de règle, entourés de crochets, et séparés le cas échéant par des virgules.

    RewriteRule pattern target [Flag1,Flag2,Flag3]

    Chaque drapeau (à quelques exceptions près) possède une forme courte, comme CO, ainsi qu'une forme longue, comme cookie. Bien que la forme courte soit la plus couramment utilisée, nous vous recommandons de vous familiariser avec les drapeaux sous leur forme longue, afin de bien mémoriser ce que chaque drapeau est supposé faire. Certains drapeaux acceptent un ou plusieurs arguments. Les drapeaux ne sont pas sensibles à la casse.

    Les drapeaux qui modifient les métadonnées associées à la requête (T=, H=, E=) n'ont aucun effet dans un contexte de répertoire ou de fichier htaccess, lorsqu'une substitution (autre que '-') est effectuée au cours de la même passe du processus de réécriture.

    Chaque drapeau disponible est présenté ici, avec un exemple d'utilisation.

    top

    B (échappement dans les références arrières)

    Avec le drapeau [B], la directive RewriteRule échappe les caractères non-alphanumériques avant d'appliquer la transformation. A partir de la version 2.4.26, vous pouvez limiter l'échappement dans les références arrières à une liste de caractères que vous pouvez spécifiez comme dans cet exemple : [B=#?;]. Notez que l'espace peut faire partie de la liste des caractères à échapper, mais qu'il ne doit pas être le dernier caractère de cette liste.

    mod_rewrite doit supprimer les séquences d'échappement des URLs avant leur mise en correspondance avec le système de fichiers ; les séquences d'échappement sont donc supprimées des références arrières au moment où ces dernières sont appliquées. Avec le drapeau B, les caractères non-alphanumériques des références arrières seront échappés. Considérons par exemple cette règle :

    RewriteRule "^search/(.*)$" "/search.php?term=$1"

    Soit le terme de recherche 'x & y/z' ; un navigateur va le coder en 'x%20%26%20y%2Fz', transformant la requête en 'search/x%20%26%20y%2Fz'. Sans le drapeau B, cette règle de réécriture va réécrire la requête en 'search.php?term=x & y/z', ce qui ne correspond pas à une URL valide et cette dernière sera encodée en search.php?term=x%20&y%2Fz=, ce qui ne correspond pas à ce que l'on souhaitait.

    Avec le drapeau B, les paramètres sont réencodés avant d'être passés à l'URL résultante, ce qui fournit une réécriture correcte en /search.php?term=x%20%26%20y%2Fz.

    RewriteRule "^search/(.*)$" "/search.php?term=$1" [B,PT]

    Notez que vous devrez peut-être aussi définir la directive AllowEncodedSlashes à On pour que cet exemple particulier fonctionne, car httpd ne permet pas les slashes encodés dans les URLs, et renvoie une erreur 404 s'il en rencontre un.

    Ce processus d'échappement est en particulier nécessaire dans le contexte d'un mandataire, où l'accès au serveur d'arrière-plan échouera si on présente à ce dernier une URL non échappée.

    Une alternative à ce drapeau consiste à utiliser une directive RewriteCond pour capturer %{THE_REQUEST}, les chaînes capturées se présentant alors sous la forme codée.

    top

    BNP|backrefnoplus (ne pas échapper l'espace en +)

    Si le drapeau [BNP] est spécifié, la directive RewriteRule échappera le caractère espace en %20 au lieu de '+' dans les références arrières. Ceci s'avère utile lorsque la référence arrière est utilisée dans la partie chemin, et non dans les paramètres de la requête.

    Ce drapeau est disponible à partir de la version 2.4.26 du serveur HTTP Apache.

    top

    C|chain

    Le drapeau [C] ou [chain] indique que la règle RewriteRule est chaînée avec la suivante. Autrement dit, si la règle s'applique, elle est traitée normalement et passe le contrôle à la règle suivante. Par contre, si elle ne s'applique pas, la règle suivante, ainsi que toutes les règles chaînées qui suivent, seront sautées.

    top

    CO|cookie

    Le drapeau [CO], ou [cookie], vous permet de définir un cookie lorsqu'une règle RewriteRule s'applique. Il possède trois arguments obligatoires et quatre arguments optionnels.

    La syntaxe complète de ce drapeau, avec tous ses attributs, est la suivante :

    [CO=NAME:VALUE:DOMAIN:lifetime:path:secure:httponly]

    Si un caractère littéral ':' doit être insérer dans un des champs du cookie, une autre syntaxe est disponible. Pour utiliser cette syntaxe alternative, le contenu du champ "Name" doit être précédé du caractère ';', et les sépateurs de champs deviendront des ';'.

    [CO=;NAME;VALUE:MOREVALUE;DOMAIN;lifetime;path;secure;httponly]

    Vous devez déclarer un nom, une valeur et un domaine pour que le cookie puisse être défini.

    Domain
    Le domaine pour lequel vous souhaitez que le cookie soit valide. Ce peut être un nom de serveur, comme www.example.com, ou un domaine, comme .example.com. Il doit comporter au moins deux parties séparées par un point. C'est à dire que vous ne pouvez pas utiliser les valeurs .com ou .net. En effet, ce style de cookie est interdit par le modèle de sécurité des cookies.

    Vous pouvez aussi définir les valeurs suivantes :

    Lifetime
    La durée de vie du cookie, en minutes.
    Une valeur de 0 indique une durée de vie correspondant à la session courante du navigateur. Il s'agit de la valeur par défaut.
    Path
    Le chemin, sur le site web concerné, pour lequel le cookie est valide, du style /clients/ or /fichiers/telechargement/.
    La valeur par défaut est / - c'est à dire l'ensemble du site web.
    Secure
    Si cet argument a pour valeur secure, true, ou 1, le cookie ne pourra être transmis que dans le cadre d'une connexion sécurisée (https).
    httponly
    Si cet argument a pour valeur HttpOnly, true, ou 1, le cookie aura son drapeau HttpOnly activé, ce qui signifie qu'il sera inaccessible au code JavaScript pour les navigateurs qui supportent cette fonctionnalité.

    Voici un exemple :

    RewriteEngine On
    RewriteRule "^/index\.html" "-" [CO=frontdoor:yes:.example.org:1440:/]

    Dans l'exemple ci-dessus, la règle ne réécrit pas la requête. La cible de réécriture "-" indique à mod_rewrite de transmettre la requête sans modification. Par contre, il définit un cookie nommé 'frontdoor' avec une valeur 'yes'. Le cookie est valide pour tout hôte situé dans le domaine .example.org. Sa durée de vie est limitée à 1440 minutes (24 heures), et il sera renvoyé pour tous les URIs.

    top

    DPI|discardpath

    Avec le drapeau DPI, la partie PATH_INFO de l'URI réécrit est supprimée.

    Ce drapeau est disponible dans les versions 2.2.12 et supérieures.

    Dans un contexte de répertoire, l'URI mis en comparaison par chaque règle RewriteRule est la concaténation des valeurs courantes de l'URI et de PATH_INFO.

    L'URI courant peut être l'URI initial tel qu'il a été fourni par le client, le résultat d'une passe précédente du processus de réécriture, ou le résultat de la règle précédente dans le processus courant de réécriture.

    Par contre, la partie PATH_INFO ajoutée à l'URI avant chaque règle ne reflète que la valeur de PATH_INFO avant la passe courante du processus de réécriture. En conséquence, si de larges portions de l'URI correspondent et sont traduites via plusieurs directives RewriteRule, sans prendre en compte quelles parties de l'URI provenaient du PATH_INFO courant, l'URI final pourra se voir ajouter plusieurs copies de PATH_INFO.

    Utilisez ce drapeau pour toute substitution où la présence du PATH_INFO qui résultait de la mise en correspondance précédente de cette requête avec le système de fichier n'est pas nécessaire. Avec ce drapeau, le PATH_INFO établi avant que cette passe du processus de réécriture ne débute est oublié. PATH_INFO ne sera pas recalculé tant que la passe courante du processus de réécriture ne sera pas achevée. Les règles suivantes de cette passe ne verront que le résultat direct des substitutions, sans aucun PATH_INFO ajouté.

    top

    E|env

    Avec le drapeau [E], ou [env], vous pouvez définir la valeur d'une variable d'environnement. Notez que certaines variables d'environnement peuvent être définies après le traitement de la règle, annulant par la-même ce que vous avez défini. Voir le document sur les variables d'environnement pour plus de détails sur le fonctionnement des variables d'environnement.

    La syntaxe complète pour ce drapeau est :

    [E=!VAR]

    VAL peut comporter des références arrières ($N ou %N) qui seront développées.

    En utilisant la version courte

    [E=VAR]

    vous pouvez définir la variable d'environnement nommée VAR avec une valeur vide.

    La forme

    [E=!VAR]

    permet d'annuler la définition de la variable VAR.

    Les variables d'environnement s'emploient dans différents contextes, comme les programmes CGI, d'autres directives RewriteRule, ou des directives CustomLog.

    L'exemple suivant définit une variable d'environnement nommée 'image' avec une valeur de '1' si l'URI de la requête correspond à un fichier image. Cette variable d'environnement est ensuite utilisée pour exclure une telle requête du journal des accès.

    RewriteRule "\.(png|gif|jpg)" "-" [E=image:1]
    CustomLog "logs/access_log" combined env=!image

    Notez que le même effet peut être obtenu à l'aide de la directive SetEnvIf. Cette technique est présentée à titre d'exemple et non de recommandation.

    top

    END

    L'utilisation du drapeau [END] permet non seulement de terminer le processus de réécriture en cours (comme [L]), mais aussi d'empêcher tout processus de réécriture ultérieur dans un contexte de répertoire (htaccess).

    Ceci ne s'applique pas aux nouvelles requêtes résultant d'une redirection externe.

    top

    F|forbidden

    L'utilisation du drapeau [F] permet de faire envoyer par le serveur au client un code de statut "403 Forbidden". Le même effet peut être obtenu à l'aide de la directive Deny, mais ce drapeau offre plus de souplesse dans l'attribution d'un statut Forbidden.

    La règle suivante va interdire la téléchargement de fichiers .exe depuis votre serveur.

    RewriteRule "\.exe" "-" [F]

    Cet exemple utilise la syntaxe "-" pour la cible de réécriture, ce qui signifie que l'URI de la requête n'est pas modifié. Il n'y a aucune raison de réécrire un URI, si vous avez l'intention d'interdire la requête.

    Lorsqu'on utilise [F], [L] est implicite - c'est à dire que la réponse est renvoyée immédiatement, et aucune autre règle n'est évaluée.

    top

    G|gone

    Le drapeau [G] permet de faire envoyer par le serveur un code de statut "410 Gone" avec la réponse. Ce code indique qu'une ressource qui était disponible auparavant ne l'est plus actuellement.

    Comme dans le cas du drapeau [F], on utilise en général la syntaxe "-" pour la cible de réécriture lorsqu'on utilise le drapeau [G] :

    RewriteRule "oldproduct" "-" [G,NC]

    Lorsqu'on utilise [G], [L] est implicite - c'est à dire que la réponse est renvoyée immédiatement, et aucune autre règle n'est évaluée.

    top

    H|handler

    Force le traitement de la requête résultante par le gestionnaire spécifié. Par exemple, on peut utiliser ce drapeau pour forcer l'interprétation de tous les fichiers sans extension par le gestionnaire php :

    RewriteRule "!\." "-" [H=application/x-httpd-php]

    L'expression rationnelle ci-dessus - !\. - correspond à toute requête qui ne contient pas le caractère ..

    On peut aussi utiliser ce drapeau pour forcer l'utilisation d'un certain gestionnaire en fonction de certaines conditions. Par exemple, l'extrait suivant utilisé dans un contexte de niveau serveur permet de faire en sorte que les fichiers .php soient affichés par mod_php dans le cas où ils font l'objet d'une requête avec l'extension .phps :

    RewriteRule "^(/source/.+\.php)s$" "$1" [H=application/x-httpd-php-source]

    L'expression rationnelle ci-dessus - ^(/source/.+\.php)s$ - va correspondre à toute requête qui débutera par /source/, continuera par 1 ou n caractères puis par .phps. La référence arrière $1 fait référence à la correspondance capturée entre parenthèses de l'expression rationnelle.

    top

    L|last

    Lorsque le drapeau [L] est présent, mod_rewrite arrête le traitement du jeu de règles. Cela signifie dans la plupart des situations que si la règle s'applique, aucune autre règle ne sera traitée. Ce drapeau correspond à la commande Perl last, ou à la commande break en C. Utilisez ce drapeau pour indiquer que la règle courante doit être appliquée immédiatement, sans tenir compte des règles ultérieures.

    Si vous utilisez des règles RewriteRule dans des fichiers .htaccess ou des sections <Directory>, il est important d'avoir quelques notions sur la manière dont les règles sont traitées. Pour simplifier, une fois les règles traitées, la requête réécrite est passée à nouveau au moteur d'interprétation des URLs afin que ce dernier puisse la traiter. Il est possible qu'au cours du traitement de la requête réécrite, le fichier .htaccess ou la section <Directory> soient à nouveau rencontrés, entraînant un nouveau traitement du jeu de règles depuis le début. Cette situation se présente le plus souvent lorsqu'une des règles provoque une redirection - interne ou externe - ce qui réinitialise le traitement de la requête.

    Si vous utilisez des directives RewriteRule dans un de ces contextes, il importe par conséquent de prévoir explicitement des étapes permettant d'éviter un bouclage infini sur les règles, et de ne pas compter seulement sur le drapeau [L] pour terminer l'exécution d'une série de règles, comme décrit ci-dessous.

    Un autre drapeau, [END], permet non seulement d'interrompre le cycle courant du processus de réécriture, mais aussi d'empêcher toute réécriture ultérieure dans le contexte de répertoire (htaccess). Ceci ne s'applique pas aux nouvelles requêtes résultant de redirections externes.

    Dans l'exemple donné ici, toute requête est réécrite en index.php, la requête originale étant ajoutée comme chaîne de requête en argument à index.php ; cependant, la directive RewriteCond permet de s'assurer que si la requête concerne déjà index.php, la directive RewriteRule sera sautée.

    RewriteBase "/"
    RewriteCond "%{REQUEST_URI}" "!=/index.php"
    RewriteRule "^(.*)" "/index.php?req=$1" [L,PT]
    top

    N|next

    Le drapeau [N] provoque un redémarrage du traitement des règles depuis le début, en utilisant le résultat du jeu de règles, sous réserve qu'il existe un point de démarrage ; à utiliser avec précautions car il peut provoquer un bouclage infini.

    Le drapeau [Next] peut servir, par exemple, à remplacer de manière répétitive une chaîne de caractère ou une lettre dans une requête. Dans l'exemple suivant, chaque occurence de A sera remplacée par B dans la requête, et ceci jusqu'il n'y ait plus de A à remplacer.

    RewriteRule "(.*)A(.*)" "$1B$2" [N]

    Vous pouvez vous représenter ce traitement comme une boucle while : tant que le modèle de la règle correspond (c'est à dire, tant que l'URI contient un A), effectuer la substitution (c'est à dire, remplacer le A par un B).

    A partir de la version 2.4.8, ce module renvoie une erreur après 32000 itérations afin d'éviter les boucles infinies. Ce nombre maximum d'itération peut être modifié via le drapeau N.

    # On veut remplacer 1 caractère à chaque itération de la boucle
    RewriteRule "(.+)[><;]$" "$1" [N=64000]
    # ... ou s'arrêter après 10 itérations
    RewriteRule "(.+)[><;]$" "$1" [N=10]
    top

    NC|nocase

    Avec le drapeau [NC], le modèle de la règle RewriteRule est comparé à la requête de manière insensible à la casse. C'est à dire que cette comparaison s'effectue sans tenir compte des majuscules/minuscules dans l'URI comparé.

    Dans l'exemple suivant, toute requête pour un fichier image sera transmise par Apache à votre serveur d'images dédié. La correspondance est insensible à la casse, si bien que par exemple, .jpg aussi bien que .JPG seront acceptés.

    RewriteRule "(.*\.(jpg|gif|png))$" "http://images.example.com$1" [P,NC]
    top

    NE|noescape

    Par défaut, les caractères spéciaux, comme & et ?, sont convertis en leur équivalent hexadécimal. Le drapeau [NE] permet d'éviter cette conversion.

    RewriteRule "^/anchor/(.+)" "/bigpage.html#$1" [NE,R]

    Dans l'exemple ci-dessus, /anchor/xyz est réécrit en /bigpage.html#xyz. En l'absence du drapeau [NE], le # aurait été converti en son équivalent hexadécimal, %23, ce qui aurait provoqué un code d'erreur "404 Not Found".

    top

    NS|nosubreq

    Le drapeau [NS] empêche la règle de s'appliquer aux sous-requêtes. Par exemple, une page incluse au moyen d'une SSI (Server Side Include) est une sous-requête, et vous ne voudrez probablement pas que la réécriture s'applique à ces sous-requêtes. Ainsi, lorsque mod_dir recherche des informations à propos des fichiers par défaut du répertoire (comme les fichiers index.html), il s'agit d'une sous-requête interne, et vous ne désirez en général pas que ces sous-requêtes soient réécrites. Cette réécriture n'est pas toujours utile pour les sous-requêtes, et peut même causer des erreurs si l'ensemble du jeu de règles est appliqué. L'utilisation de ce drapeau permet d'exclure les règles qui peuvent poser problème.

    Comment déterminer si vous devez utiliser cette règle ou non : si vous préfixez les URLs avec des scripts CGI, afin de forcer leur traitement par le script CGI, vous vous exposez à des problèmes (ou du moins à une surcharge significative) avec les sous-requêtes. Dans ces cas, vous devez utiliser ce drapeau.

    Les images, scripts java, ou fichiers css, chargés en tant que partie d'une page html, ne sont pas des sous-requêtes - le navigateur les appelle sous forme de requêtes HTTP à part entière.

    top

    P|proxy

    L'utilisation du drapeau [P] entraîne le traitement de la requête par le module mod_proxy, et ceci via une requête de mandataire. Par exemple, si vous voulez que toutes les requêtes d'images soient traitées par un serveur d'images annexe, vous pouvez utiliser une règle de ce style :

    RewriteRule "/(.*)\.(jpg|gif|png)$" "http://images.example.com/$1.$2" [P]

    L'utilisation du drapeau [P] provoque aussi l'effet du drapeau [L] - autrement dit, la requête est immédiatement envoyée au mandataire, et toute règle ultérieure sera ignorée.

    Vous devez vous assurer que la chaîne de substitution soit un URI valide (commençant typiquement par http://nom-serveur) qui puisse être traitée par le module mod_proxy. Dans le cas contraire, le module mandataire vous renverra une erreur. L'utilisation de ce drapeau implémente de manière plus puissante la directive ProxyPass, pour faire correspondre le contenu distant à l'espace de nommage du serveur local.

    Avertissement à propos de la sécurité

    Lors de la construction de l'URL cible de la règle, il convient de prendre en compte l'impact en matière de sécurité qu'aura le fait de permettre au client d'influencer le jeu d'URLs pour lesquelles votre serveur agira en tant que mandataire. Assurez-vous que la partie protocole://nom-serveur de l'URL soit fixe, ou ne permette pas au client de l'influencer induement.

    Avertissement au sujet des performances

    Utiliser ce drapeau fait intervenir mod_proxy sans la gestion des connexions persistantes, ce qui signifie que vous obtiendrez des performances meilleurs si vous utilisez ProxyPass ou ProxyPassMatch.

    Ceci est du au fait que ce drapeau induit l'utilisation du worker par défaut, qui ne gère pas la mise en commun et la réutilisation des connexions.

    Partout où cela est possible, préférez l'utilisation de ces directives.

    Note: mod_proxy doit être activé pour pouvoir utiliser ce drapeau.

    top

    PT|passthrough

    Par défaut, la cible (ou chaîne de substitution) d'une règle RewriteRule est sensée être un chemin de fichier. Avec le drapeau [PT], par contre, elle est traitée comme un URI. Autrement dit, avec le drapeau [PT], le résultat de la règle RewriteRule est passé à nouveau au système de mise en correspondance des URLs avec le système de fichiers, de façon à ce que les systèmes de mise en correspondance basés sur les chemins de fichiers, comme la directive Alias, Redirect, ou ScriptAlias, par exemple, puissent avoir une chance d'accomplir leur tâche.

    Si par exemple, vous avez un Alias pour /icons, et une règle RewriteRule qui renvoie vers /icons, vous devez utiliser le drapeau [PT] pour être sûr que l'Alias sera bien évalué.

    Alias "/icons" "/usr/local/apache/icons"
    RewriteRule "/pics/(.+)\.jpg$" "/icons/$1.gif" [PT]

    Dans l'exemple précédent, en l'absence du drapeau [PT], l'Alias aurait été ignoré, ce qui aurait provoqué une erreur 'File not found'.

    Avec le drapeau PT, le drapeau L est implicite : la réécriture s'arrêtera afin de transmettre la requête à la phase suivante du traitement.

    Notez que le drapeau PT est implicite dans des contextes de répertoire comme les sections <Directory> ou les fichiers .htaccess. Le seul moyen de contourner ceci consiste à réécrire vers -.

    top

    QSA|qsappend

    Quand l'URI de remplacement contient une chaîne de requête, le comportement par défaut de la règle RewriteRule est de supprimer la query string (il s'agit des paramètres éventuellement passés dans l'URL après le caractère ?, usuellement pour les formulaires traités par la méthode HTTP GET) existante, et de la remplacer par celle nouvellement créée. Avec le drapeau [QSA], les chaînes de requête peuvent être combinées.

    Considérons la règle suivante :

    RewriteRule "/pages/(.+)" "/page.php?page=$1" [QSA]

    Avec le drapeau [QSA], une requête pour /pages/123?one=two sera réécrite en /page.php?page=123&one=two. Sans le drapeau [QSA], la même requête sera réécrite en /page.php?page=123 - autrement dit, la chaîne de requête (query string) existante sera supprimée.

    top

    QSD|qsdiscard

    Lorsque l'URI de la requête contient une chaîne de paramètres, et si l'URI cible n'en contient pas, le comportement par défaut de la directive RewriteRule consiste à copier cette chaîne de paramètres dans l'URI cible. Avec le drapeau [QSD], la chaîne de paramètres est supprimée.

    Ce drapeau est disponible dans les versions 2.4.0 et supérieures.

    Lorsque les drapeaux [QSD] et [QSA] sont utilisés ensemble, c'est le drapeau [QSD] qui l'emporte.

    Si l'URI cible possède une chaîne de paramètres, le comportement par défaut sera respecté - c'est à dire que la chaîne de paramètres originale sera supprimée et remplacée par la chaîne de paramètres de l'URI cible.

    top

    QSL|qslast

    Par défaut, le premier (le plus à gauche) point d'interrogation de la substitution sépare le chemin de la requête de sa chaîne de paramètres. Avec le drapeau [QSL] au contraire, les deux composants seront séparés en utilisant le dernier (le plus à droite) point d'interrogation.

    Cela peut s'avérer utile lorsqu'on recherche un fichier dont le nom contient des points d'interrogation. Si aucune chaîne de paramètre n'est présente dans la substitution, il est alors possible d'ajouter un point d'interrogation à la fin et d'utiliser ce drapeau.

    Ce drapeau est disponible à partir de la version 2.4.19 du serveur HTTP Apache.

    top

    R|redirect

    L'utilisation du drapeau [R] provoque l'envoi d'une redirection au navigateur. Si une URL pleinement qualifiée (FQDN - fully qualified domain name) est spécifiée (c'est à dire incluant http://nom-du-serveur/), une redirection sera effectuée vers cette adresse. Dans le cas contraire, le protocole courant, le nom du serveur et le numéro de port seront utilisés pour générer l'URL envoyée avec la redirection.

    Tout code de statut de réponse HTTP valide peut être spécifié, en utilisant la syntaxe [R=305], le code de statut 302 étant utilisé par défaut si aucun code n'est spécifié. Le code de statut spécifié n'est pas nécessairement un code de statut de redirection (3xx). Cependant, si le code de statut est en dehors de la plage des codes de redirection (300-399), la chaîne de substitution est entièrement supprimée, et la réécriture s'arrête comme si le drapeau L était utilisé.

    En plus des codes de statut de réponse, vous pouvez spécifier les codes de redirection en utilisant leurs noms symboliques : temp (défaut), permanent, ou seeother.

    Vous utiliserez presque toujours [R] en conjonction avec [L] (c'est à dire [R,L]), car employé seul, le drapeau [R] préfixe l'URI avec http://cet-hôte[:ce-port], mais passe ensuite cette adresse à la règle suivante, ce qui provoquera le plus souvent des avertissements 'Invalid URI in request'.

    top

    S|skip

    Le drapeau [S] sert à sauter des règles que vous ne voulez pas voir exécuter. La syntaxe du drapeau [S] est [S=N], où N correspond au nombre de règles à sauter (sous réserve que la règle RewriteRule corresponde). Ceci peut s'interpréter comme une instruction goto dans votre jeu de règles de réécriture. Dans l'exemple suivant, nous ne voulons exécuter la règle RewriteRule que si l'URI demandé ne correspond pas à un fichier existant.

    # La requête concerne-t-elle un fichier qui n'existe pas ?
    RewriteCond "%{REQUEST_FILENAME}" "!-f"
    RewriteCond "%{REQUEST_FILENAME}" "!-d"
    # Si c'est la cas, on saute les deux règles de réécriture suivantes
    RewriteRule ".?" "-" [S=2]
    
    RewriteRule "(.*\.gif)" "images.php?$1"
    RewriteRule "(.*\.html)" "docs.php?$1"

    Cette technique trouve son utilité dans le fait qu'une directive RewriteCond ne s'applique qu'à la règle qui la suit immédiatement. Ainsi, si vous voulez qu'une directive RewriteCond s'applique à plusieurs règles RewriteRule, une technique possible consiste à inverser ces conditions et ajouter une RewriteRule avec le drapeau [Skip]. Cette technique permet d'élaborer des pseudo-constructions if-then-else : la dernière règle du bloc then contiendra skip=N, où N est le nombre de règles contenues dans le bloc else :

    # Est-ce que le fichier existe ?
    RewriteCond "%{REQUEST_FILENAME}" "!-f"
    RewriteCond "%{REQUEST_FILENAME}" "!-d"
    # Create an if-then-else construct by skipping 3 lines if we meant to go to the "else" stanza.
    RewriteRule ".?" "-" [S=3]
    
    # Si le fichier existe, alors :
    RewriteRule "(.*\.gif)" "images.php?$1"
        RewriteRule "(.*\.html)" "docs.php?$1"
        # Skip past the "else" stanza.
        RewriteRule ".?" "-" [S=1]
    # ELSE...
    RewriteRule "(.*)" "404.php?file=$1
    # END

    Il est probablement plus aisé de définir ce genre de configuration via les directives <If>, <ElseIf>, et <Else>.

    top

    T|type

    Définit le type MIME de la réponse résultante renvoyée. L'effet est identique à celui de la directive AddType.

    Par exemple, vous pouvez utiliser la technique suivante pour servir du code source Perl en tant que plein texte, s'il est requis d'une certaine manière :

    # Sert les fichier .pl en tant que plein texte
    RewriteRule "\.pl$" "-" [T=text/plain]

    Ou encore, si vous possédez une caméra qui produit des fichiers images jpeg sans extension, vous pouvez forcer le renvoi de ces images avec le type MIME correct en se basant sur le nom du fichier :

    # Les fichiers dont le nom contient 'IMG' sont des images jpg.
    RewriteRule "IMG" "-" [T=image/jpg]

    Notez cependant qu'il s'agit d'un exemple trivial, et que le problème aurait pu être résolu en utilisant à la place la directive <FilesMatch>. Il faut toujours envisager la possibilité d'une solution alternative à un problème avant d'avoir recours à la réécriture, qui sera toujours moins efficace qu'une solution alternative.

    Dans un contexte de niveau répertoire, n'utilisez que - (tiret) comme substitution, dans toute la séquence de réécriture de mod_rewrite, sinon le type MIME défini avec ce drapeau sera perdu suite à un retraitement interne (y compris les séquences de réécriture suivantes de mod_rewrite). Dans ce contexte, vous pouvez utiliser le drapeau L pour terminer la séquence courante de réécriture de mod_rewrite.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/rewritemap.html.en0000644000000000000500000006062413442045057020604 0ustar rootsrc Using RewriteMap - Apache HTTP Server Version 2.4
    <-

    Using RewriteMap

    Available Languages:  en  |  fr 

    This document supplements the mod_rewrite reference documentation. It describes the use of the RewriteMap directive, and provides examples of each of the various RewriteMap types.

    Note that many of these examples won't work unchanged in your particular server configuration, so it's important that you understand them, rather than merely cutting and pasting the examples into your configuration.
    top

    Introduction

    The RewriteMap directive defines an external function which can be called in the context of RewriteRule or RewriteCond directives to perform rewriting that is too complicated, or too specialized to be performed just by regular expressions. The source of this lookup can be any of the types listed in the sections below, and enumerated in the RewriteMap reference documentation.

    The syntax of the RewriteMap directive is as follows:

    RewriteMap MapName MapType:MapSource
    

    The MapName is an arbitray name that you assign to the map, and which you will use in directives later on. Arguments are passed to the map via the following syntax:

    ${ MapName : LookupKey }
    ${ MapName : LookupKey | DefaultValue }

    When such a construct occurs, the map MapName is consulted and the key LookupKey is looked-up. If the key is found, the map-function construct is substituted by SubstValue. If the key is not found then it is substituted by DefaultValue or by the empty string if no DefaultValue was specified.

    For example, you can define a RewriteMap as:

    RewriteMap examplemap "txt:/path/to/file/map.txt"

    You would then be able to use this map in a RewriteRule as follows:

    RewriteRule "^/ex/(.*)" "${examplemap:$1}"

    A default value can be specified in the event that nothing is found in the map:

    RewriteRule "^/ex/(.*)" "${examplemap:$1|/not_found.html}"

    Per-directory and .htaccess context

    The RewriteMap directive may not be used in <Directory> sections or .htaccess files. You must declare the map in server or virtualhost context. You may use the map, once created, in your RewriteRule and RewriteCond directives in those scopes. You just can't declare it in those scopes.

    The sections that follow describe the various MapTypes that may be used, and give examples of each.

    top

    int: Internal Function

    When a MapType of int is used, the MapSource is one of the available internal RewriteMap functions. Module authors can provide additional internal functions by registering them with the ap_register_rewrite_mapfunc API. The functions that are provided by default are:

    • toupper:
      Converts the key to all upper case.
    • tolower:
      Converts the key to all lower case.
    • escape:
      Translates special characters in the key to hex-encodings.
    • unescape:
      Translates hex-encodings in the key back to special characters.

    To use one of these functions, create a RewriteMap referencing the int function, and then use that in your RewriteRule:

    Redirect a URI to an all-lowercase version of itself

    RewriteMap lc int:tolower
    RewriteRule "(.*)" "${lc:$1}" [R]

    Please note that the example offered here is for illustration purposes only, and is not a recommendation. If you want to make URLs case-insensitive, consider using mod_speling instead.

    top

    txt: Plain text maps

    When a MapType of txt is used, the MapSource is a filesystem path to a plain-text mapping file, containing one space-separated key/value pair per line. Optionally, a line may contain a comment, starting with a '#' character.

    A valid text rewrite map file will have the following syntax:

    # Comment line
    MatchingKey SubstValue
    MatchingKey SubstValue # comment

    When the RewriteMap is invoked the argument is looked for in the first argument of a line, and, if found, the substitution value is returned.

    For example, we can use a mapfile to translate product names to product IDs for easier-to-remember URLs, using the following recipe:

    Product to ID configuration

    RewriteMap product2id "txt:/etc/apache2/productmap.txt"
    RewriteRule "^/product/(.*)" "/prods.php?id=${product2id:$1|NOTFOUND}" [PT]

    We assume here that the prods.php script knows what to do when it received an argument of id=NOTFOUND when a product is not found in the lookup map.

    The file /etc/apache2/productmap.txt then contains the following:

    Product to ID map

    ##
    ## productmap.txt - Product to ID map file
    ##

    television 993
    stereo 198
    fishingrod 043
    basketball 418
    telephone 328

    Thus, when http://example.com/product/television is requested, the RewriteRule is applied, and the request is internally mapped to /prods.php?id=993.

    Note: .htaccess files

    The example given is crafted to be used in server or virtualhost scope. If you're planning to use this in a .htaccess file, you'll need to remove the leading slash from the rewrite pattern in order for it to match anything:
    RewriteRule "^product/(.*)" "/prods.php?id=${product2id:$1|NOTFOUND}" [PT]

    Cached lookups

    The looked-up keys are cached by httpd until the mtime (modified time) of the mapfile changes, or the httpd server is restarted. This ensures better performance on maps that are called by many requests.

    top

    rnd: Randomized Plain Text

    When a MapType of rnd is used, the MapSource is a filesystem path to a plain-text mapping file, each line of which contains a key, and one or more values separated by |. One of these values will be chosen at random if the key is matched.

    For example, you can use the following map file and directives to provide a random load balancing between several back-end servers, via a reverse-proxy. Images are sent to one of the servers in the 'static' pool, while everything else is sent to one of the 'dynamic' pool.

    Rewrite map file

    ##
    ## map.txt -- rewriting map
    ##

    static www1|www2|www3|www4
    dynamic www5|www6

    Configuration directives

    RewriteMap servers "rnd:/path/to/file/map.txt"
    
    RewriteRule "^/(.*\.(png|gif|jpg))" "http://${servers:static}/$1"  [NC,P,L]
    RewriteRule "^/(.*)"                "http://${servers:dynamic}/$1" [P,L]

    So, when an image is requested and the first of these rules is matched, RewriteMap looks up the string static in the map file, which returns one of the specified hostnames at random, which is then used in the RewriteRule target.

    If you wanted to have one of the servers more likely to be chosen (for example, if one of the server has more memory than the others, and so can handle more requests) simply list it more times in the map file.

    static www1|www1|www2|www3|www4

    top

    dbm: DBM Hash File

    When a MapType of dbm is used, the MapSource is a filesystem path to a DBM database file containing key/value pairs to be used in the mapping. This works exactly the same way as the txt map, but is much faster, because a DBM is indexed, whereas a text file is not. This allows more rapid access to the desired key.

    You may optionally specify a particular dbm type:

    RewriteMap examplemap "dbm=sdbm:/etc/apache/mapfile.dbm"

    The type can be sdbm, gdbm, ndbm or db. However, it is recommended that you just use the httxt2dbm utility that is provided with Apache HTTP Server, as it will use the correct DBM library, matching the one that was used when httpd itself was built.

    To create a dbm file, first create a text map file as described in the txt section. Then run httxt2dbm:

    $ httxt2dbm -i mapfile.txt -o mapfile.map

    You can then reference the resulting file in your RewriteMap directive:

    RewriteMap mapname "dbm:/etc/apache/mapfile.map"

    Note that with some dbm types, more than one file is generated, with a common base name. For example, you may have two files named mapfile.map.dir and mapfile.map.pag. This is normal, and you need only use the base name mapfile.map in your RewriteMap directive.

    Cached lookups

    The looked-up keys are cached by httpd until the mtime (modified time) of the mapfile changes, or the httpd server is restarted. This ensures better performance on maps that are called by many requests.

    top

    prg: External Rewriting Program

    When a MapType of prg is used, the MapSource is a filesystem path to an executable program which will providing the mapping behavior. This can be a compiled binary file, or a program in an interpreted language such as Perl or Python.

    This program is started once, when the Apache HTTP Server is started, and then communicates with the rewriting engine via STDIN and STDOUT. That is, for each map function lookup, it expects one argument via STDIN, and should return one new-line terminated response string on STDOUT. If there is no corresponding lookup value, the map program should return the four-character string "NULL" to indicate this.

    External rewriting programs are not started if they're defined in a context that does not have RewriteEngine set to on.

    By default, external rewriting programs are run as the user:group who started httpd. This can be changed on UNIX systems by passing user name and group name as third argument to RewriteMap in the username:groupname format.

    This feature utilizes the rewrite-map mutex, which is required for reliable communication with the program. The mutex mechanism and lock file can be configured with the Mutex directive.

    A simple example is shown here which will replace all dashes with underscores in a request URI.

    Rewrite configuration

    RewriteMap d2u "prg:/www/bin/dash2under.pl" apache:apache
    RewriteRule "-" "${d2u:%{REQUEST_URI}}"

    dash2under.pl

    #!/usr/bin/perl
    $| = 1; # Turn off I/O buffering
    while (<STDIN>) {
        s/-/_/g; # Replace dashes with underscores
        print $_;
    }

    Caution!

    • Keep your rewrite map program as simple as possible. If the program hangs, it will cause httpd to wait indefinitely for a response from the map, which will, in turn, cause httpd to stop responding to requests.
    • Be sure to turn off buffering in your program. In Perl this is done by the second line in the example script: $| = 1; This will of course vary in other languages. Buffered I/O will cause httpd to wait for the output, and so it will hang.
    • Remember that there is only one copy of the program, started at server startup. All requests will need to go through this one bottleneck. This can cause significant slowdowns if many requests must go through this process, or if the script itself is very slow.
    top

    dbd or fastdbd: SQL Query

    When a MapType of dbd or fastdbd is used, the MapSource is a SQL SELECT statement that takes a single argument and returns a single value.

    mod_dbd will need to be configured to point at the right database for this statement to be executed.

    There are two forms of this MapType. Using a MapType of dbd causes the query to be executed with each map request, while using fastdbd caches the database lookups internally. So, while fastdbd is more efficient, and therefore faster, it won't pick up on changes to the database until the server is restarted.

    If a query returns more than one row, a random row from the result set is used.

    Example

    RewriteMap myquery "fastdbd:SELECT destination FROM rewrite WHERE source = %s"

    Note

    The query name is passed to the database driver as a label for an SQL prepared statement, and will therefore need to follow any rules (such as case-sensitivity) required for your database.

    top

    Summary

    The RewriteMap directive can occur more than once. For each mapping-function use one RewriteMap directive to declare its rewriting mapfile.

    While you cannot declare a map in per-directory context (.htaccess files or <Directory> blocks) it is possible to use this map in per-directory context.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/avoid.html.fr.utf80000644000000000000500000004212413412755316020417 0ustar rootsrc Quand ne pas utiliser mod_rewrite - Serveur HTTP Apache Version 2.4
    <-

    Quand ne pas utiliser mod_rewrite

    Langues Disponibles:  en  |  fr 

    Ce document est un complément à la Documentation de référence de mod_rewrite. Il décrit peut-être un des concepts les plus importants à propos de mod_rewrite - à savoir, quand doit-on éviter de l'utiliser.

    mod_rewrite doit être considéré comme un dernier recours, lorsqu'aucune alternative n'est possible. Utiliser mod_rewrite lorsqu'il existe des alternatives plus simples conduit à des configurations confuses, fragiles, et difficiles à maintenir. La compréhension des autres alternatives disponibles est une étape très importante sur le chemin de la maîtrise de mod_rewrite.

    Vous devez vous attacher à comprendre le fonctionnement des exemples, car la plupart d'entre eux ne fonctionneront pas sur votre système si vous vous contentez de les copier/coller dans vos fichiers de configuration.

    Le cas le plus courant dans lequel mod_rewrite est l'outil approprié est la situation où la seule solution envisageable nécessite l'accès aux fichiers de configuration du serveur, alors que cet accès ne vous est pas accordé. Certaines directives de configuration ne sont disponibles que dans le fichier de configuration du serveur. Si vous ne pouvez agir que sur les fichiers .htaccess, vous devrez donc vous tourner vers mod_rewrite.

    top

    Redirection simple

    mod_alias fournit les directives Redirect et RedirectMatch qui permettent de rediriger une URL vers une autre. Plutôt que d'utiliser la directive RewriteRule pour ce genre de redirection simple d'une URL ou d'une classe d'URLs vers une autre, on préfèrera l'utilisation de ces directives. En outre, avec RedirectMatch, vous pouvez inclure une expression rationnelle dans votre critère de redirection, ce qui vous permet de bénéficier de nombreux avantages de la directive RewriteRule.

    Une utilisation courante de la directive RewriteRule est la redirection de toute une classe d'URLs. Par exemple, toutes les URLs faisant référence au répertoire /un doivent être redirigées vers http://un.example.com/, ou toutes les requêtes http doivent être redirigées vers https.

    Pour ce faire, il est préférable d'utiliser la directive Redirect. Souvenez-vous que la directive Redirect conserve les informations relatives au chemin. En d'autres termes, la redirection d'une URL /un va aussi rediriger toutes les URLs de niveaux inférieurs comme /un/deux.html et /un/trois/quatre.html.

    Pour rediriger les URLs sous /un vers http://un.example.com/, utilisez cette définition :

    Redirect /one/ http://one.example.com/

    Pour rediriger un nom d'hôte vers un autre nom d'hôte, par exemple example.com vers www.example.com, voir la méthode Noms d'hôtes canoniques.

    Pour rediriger les URLs http vers https, utilisez cette définition :

    <VirtualHost *:80>
    ServerName www.example.com
    Redirect "/" "https://www.example.com/"
    </VirtualHost>
    
    <VirtualHost *:443>
    ServerName www.example.com
    #  ... insérer ici la configuration SSL
    </VirtualHost>

    L'utilisation de la directive RewriteRule pour accomplir cette tâche peut se justifier s'il existe d'autres directives RewriteRule dans la même portée. En effet, lorsque des directives Redirect et RewriteRule se trouvent dans la même portée, les directives RewriteRule sont exécutées en premier, sans tenir compte de leur ordre d'apparition dans le fichier de configuration.

    Dans le cas de la redirection http-vers-https, l'utilisation de règles RewriteRule se justifie si vous n'avez pas accès au fichier de configuration principal, et devez donc accomplir cette tâche au sein d'un fichier .htaccess.

    top

    Alias d'URL

    La directive Alias permet de mettre en correspondance un URI avec un répertoire, ce dernier étant en général situé en dehors de l'arborescence définie par la directive DocumentRoot. Bien qu'il soit possible d'effectuer cette mise en correspondance avec mod_rewrite, il est préférable d'utiliser la directive Alias pour des raisons de simplicité et de performances.

    Utilisation de la directive Alias

    Alias "/cats" "/var/www/virtualhosts/felines/htdocs"

    Pour effectuer cette mise en correspondance, mod_rewrite s'impose si vous n'avez pas accès aux fichiers de configuration du serveur. En effet, la directive Alias ne peut pas être utilisée dans un fichier .htaccess, mais seulement dans un contexte de serveur principal ou de serveur virtuel.

    En outre, vous pouvez arriver au même résultat avec les liens symboliques, pourvu que Options FollowSymLinks soit activé sur votre serveur.

    top

    Hébergement virtuel

    Bien qu'il soit possible de gérer les serveurs virtuels avec mod_rewrite, il s'agit rarement de la bonne méthode. Il est pratiquement toujours préférable de créer des blocs <VirtualHost> individuels. Dans l'éventualité où vous devez gérer un grand nombre de serveurs virtuels, vous devez vous tourner vers mod_vhost_alias pour créer ces serveurs automatiquement.

    Il est aussi possible d'utiliser des modules comme mod_macro pour créer un grand nombre de serveurs virtuels dynamiquement.

    L'utilisation de mod_rewrite pour la création de serveurs virtuels peut se révéler appropriée si votre service d'hébergement ne vous permet pas d'accéder aux fichiers de configuration du serveur, et que vous soyez par conséquent obligé de passer par les fichiers .htaccess.

    Voir le document création de serveurs virtuels avec mod_rewrite pour plus de détails sur la manière d'y parvenir si cela semble être tout de même la meilleure approche.

    top

    Mandat simple

    La directive RewriteRule fournit le drapeau [P] qui permet de faire passer les URIs réécrits par mod_proxy.

    RewriteRule "^/?images(.*)" "http://serveur-images.local/images$1" [P]

    Cependant, dans les nombreux cas où aucune correspondance au modèle n'est vraiment nécessaire, comme dans l'exemple ci-dessus, il est préférable d'utiliser la directive ProxyPass. L'exemple précédent pourrait être remplacé par :

    ProxyPass "/images/" "http://serveur-images.local/images/"

    Que vous utilisiez RewriteRule ou ProxyPass, vous devrez dans tous les cas utiliser aussi la directive ProxyPassReverse pour intercepter les redirections en provenance du serveur d'arrière-plan :

    ProxyPassReverse "/images/" "http://serveur-images.local/images/"

    Vous devrez cependant tout de même utiliser RewriteRule lorsque d'autres RewriteRules se trouvent dans la même portée, car elles agissent en général avant les directives ProxyPass, et peuvent ainsi les court-circuiter.

    top

    Test de variables d'environnement

    mod_rewrite est souvent utilisé pour effectuer une action en fonction de la présence ou de l'absence d'une variable d'environnement particulière ou d'un en-tête de requête, ce qui peut être accompli de manière plus efficace via la directive <If>.

    Considérons par exemple le scénario courant où la directive RewriteRule est utilisée pour forcer un nom d'hôte canonique, tel que www.example.com au lieu de example.com. Il est possible d'utiliser à la place la directive <If> comme suit :

    <If "req('Host') != 'www.example.com'">
        Redirect "/" "http://www.example.com"
    </If>

    On peut utiliser cette technique dans de nombreux scénarios courant pour remplacer mod_rewrite pour effectuer des actions en fonction d'en-têtes de requêtes ou de réponses, ou de variables d'environnement.

    Voir en particulier la documentation sur l'évaluation des expressions pour une vue d'ensemble des types d'expressions que vous pouvez utiliser dans les sections <If>, ainsi que dans certaines directives.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/index.html.en0000644000000000000500000001506513412755316017536 0ustar rootsrc Apache mod_rewrite - Apache HTTP Server Version 2.4
    <-

    Apache mod_rewrite

    Available Languages:  en  |  fr  |  tr  |  zh-cn 

    mod_rewrite provides a way to modify incoming URL requests, dynamically, based on regular expression rules. This allows you to map arbitrary URLs onto your internal URL structure in any way you like.

    It supports an unlimited number of rules and an unlimited number of attached rule conditions for each rule to provide a really flexible and powerful URL manipulation mechanism. The URL manipulations can depend on various tests: server variables, environment variables, HTTP headers, time stamps, external database lookups, and various other external programs or handlers, can be used to achieve granular URL matching.

    Rewrite rules can operate on the full URLs, including the path-info and query string portions, and may be used in per-server context (httpd.conf), per-virtualhost context (<VirtualHost> blocks), or per-directory context (.htaccess files and <Directory> blocks). The rewritten result can lead to further rules, internal sub-processing, external request redirection, or proxy passthrough, depending on what flags you attach to the rules.

    Since mod_rewrite is so powerful, it can indeed be rather complex. This document supplements the reference documentation, and attempts to allay some of that complexity, and provide highly annotated examples of common scenarios that you may handle with mod_rewrite. But we also attempt to show you when you should not use mod_rewrite, and use other standard Apache features instead, thus avoiding this unnecessary complexity.

    Available Languages:  en  |  fr  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/rewrite/tech.html0000644000000000000500000000031413362070302016725 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: tech.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: tech.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/rewrite/flags.html0000644000000000000500000000031613362070302017100 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: flags.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: flags.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/rewrite/advanced.html.fr.utf80000644000000000000500000004224013412755316021061 0ustar rootsrc Advanced Techniques with mod_rewrite - Serveur HTTP Apache Version 2.4
    <-

    Advanced Techniques with mod_rewrite

    Langues Disponibles:  en  |  fr 

    Ce document complète la documentation de référence du module mod_rewrite. Il présente un certain nombre de techniques avancées quant à l'utilisation de mod_rewrite.

    Notez que la plupart des exemples ne fonctionneront pas en l'état dans la configuration particulière de votre serveur ; il est donc important de bien comprendre leur fonctionnement, plutôt que de simplement les copier/coller dans votre configuration.
    top

    Distribution de la charge entre plusieurs serveurs d'arrière-plan en fonction de l'adresse IP

    Description :

    La fragmentation ou "sharding" est une technique courante de distribution de la charge du serveur ou de l'espace de stockage. Quand on utilise cette méthode, un serveur frontal utilise l'URL pour répartir de manière appropriée les utilisateurs et objets entre différents serveurs d'arrière-plan.

    Solution :

    On maintient une table de correspondance entre utilisateurs et serveurs cibles dans des fichiers externes. Ces derniers se présentent comme suit :

    utilisateur1 serveur_physique_utilisateur1
    utilisateur2 serveur_physique_utilisateur2
    : :

    Tout ceci est enregistré dans un fichier correspondances-utilisateurs-serveurs. Le but est de faire correspondre

    /u/utilisateur1/chemin

    avec

    http://serveur_physique_utilisateur1/u/utilisateur/chemin

    il n'est ainsi pas nécessaire que tous les chemins URL soient valides sur tous les serveurs physiques d'arrière-plan. Le jeu de règles suivant fait tout ceci pour nous, en s'appuyant sur les fichiers de correspondances, en supposant que serveur0 est un serveur par défaut qui sera utilisé lorsqu'un utilisateur ne possèdera pas d'entrée dans la table de correspondances :

    RewriteEngine on
    RewriteMap      users-to-hosts   "txt:/path/to/map.users-to-hosts"
    RewriteRule   "^/u/([^/]+)/?(.*)"   "http://${users-to-hosts:$1|server0}/u/$1/$2"

    Voir la documentation de RewriteMap pour une description plus approfondie de la syntaxe de cette directive.

    top

    Régéneration de contenu à la volée

    Description :

    Nous voulons générer du contenu de manière dynamique, mais le conserver de manière statique lorsqu'il a été généré. La règle suivante vérifie l'existence du fichier statique, et le génère s'il est absent. Les fichiers statiques peuvent être supprimés périodiquement si on le désire (par exemple via cron), et seront régénérés à la demande.

    Solution :
    A cet effet, on utilise le jeu de règles suivant :
    # Cet exemple n'est valable que dans un contexte de répertoire
    RewriteCond "%{REQUEST_URI}"   "!-U"
    RewriteRule "^(.+)\.html$"          "/regenerate_page.cgi"   [PT,L]

    L'opérateur -U permet de déterminer si la chaîne de test (dans ce cas REQUEST_URI) est une URL valide. Pour ce faire, il utilise une sous-requête. Si cette sous-requête échoue, ou en d'autres termes, si la ressource demandée n'existe pas, cette règle invoque le programme CGI /regenerate_page.cgi qui génère la ressource demandée et la sauvegarde dans le répertoire des documents, de façon à ce qu'une copie statique puisse être servie lors d'une demande ultérieure.

    De cette façon, les documents qui ne sont pas mis à jour régulièrement peuvent être servis sous une forme statique. Si ces documents doivent être réactualisés, on peut les supprimer du répertoire des documents, et ils seront ainsi régénérés à la prochaine demande.

    top

    Répartition de charge

    Description :

    Nous voulons répartir la charge de manière aléatoire entre plusieurs serveurs en utilisant mod_rewrite.

    Solution :

    Pour y parvenir, nous allons utiliser la directive RewriteMap et une liste de serveurs.

    RewriteEngine on
    RewriteMap lb "rnd:/path/to/serverlist.txt"
    RewriteRule "^/(.*)" "http://${lb:serveurs}/$1" [P,L]

    liste-serveurs.txt contiendra la liste des serveurs :

    ## liste-serveurs.txt

    serveurs un.example.com|deux.example.com|trois.example.com

    Si vous voulez qu'un serveur se voit confier d'avantage de charge que les autres, faites le figurer plusieurs fois dans la liste.

    Discussion

    Apache possède un module de répartition de charge - mod_proxy_balancer - beaucoup plus souple et présentant plus de fonctionnalités dans ce domaine que mod_rewrite.

    top

    Répertoires Home structurés

    Description :

    Certains sites avec des milliers d'utilisateurs organisent les répertoires utilisateurs de manière structurée, c'est à dire que chaque répertoire utilisateur se trouve dans un sous-répertoire dont le nom commence (par exemple) par le premier caractère du nom de l'utilisateur. Ainsi, /~larry/chemin correspond à /home/l/larry/public_html/chemin, alors que /~waldo/chemin correspond à /home/w/waldo/public_html/chemin.

    Solution :

    On utilise le jeu de règles suivant pour développer les URLs avec tilde selon l'organisation structurée précédente.

    RewriteEngine on
    RewriteRule   "^/~(([a-z])[a-z0-9]+)(.*)"  "/home/$2/$1/public_html$3"
    top

    Redirection des ancrages

    Description :

    Par défaut, la redirection vers un ancrage HTML ne fonctionne pas, car mod_rewrite échappe le caractère # en le transformant en %23, ce qui rend la redirection inopérante.

    Solution :

    On utilise le drapeau [NE] dans la règle RewriteRule. NE signifie "No Escape".

    Discussion :
    Cette technique fonctionne bien entendu pour tout autre caractère spécial que mod_rewrite, par défaut, code pour insertion dans une URL.
    top

    Réécriture dépendant de l'heure

    Description :

    Nous voulons servir des contenus différents selon l'heure du jour en utilisant mod_rewrite.

    Solution :

    Il existe de nombreuses variables nommées TIME_xxx utilisables dans les conditions de réécriture. Utilisées en conjonction avec les modèles de comparaison lexicographique spéciaux <STRING, >STRING et =STRING, elles permettent d'effectuer des redirections dépendant de l'heure :

    RewriteEngine on
    RewriteCond   "%{TIME_HOUR}%{TIME_MIN}" ">0700"
    RewriteCond   "%{TIME_HOUR}%{TIME_MIN}" "<1900"
    RewriteRule   "^foo\.html$"             "foo.day.html" [L]
    RewriteRule   "^foo\.html$"             "foo.night.html"

    Avec cet exemple, l'URL foo.html renvoie le contenu de foo.jour.html durant le créneau horaire 07:01-18:59, et le contenu de foo.nuit.html le reste du temps.

    mod_cache, les mandataires intermédiaires et les navigateurs peuvent chacun mettre en cache les réponses et ainsi afficher une des deux pages en dehors de la fenêtre de temps configurée. On peut utiliser mod_expires pour contourner ce problème. Il est cependant bien plus commode de servir un contenu dynamique, et de le personnaliser en fonction de l'heure du jour.
    top

    Définir des variables d'environnement en fonction de certaines parties de l'URL

    Description :

    Ici, nous voulons conserver une certaine forme de statut lorsqu'une réécriture a eu lieu. Par exemple, vous souhaitez consigner le fait que cette réécriture a eu lieu, et vous servir plus tard de cette information pour déterminer si une requête sera concernée par cette réécriture. Pour y parvenir, on peut utiliser une variable d'environnement.

    Solution :

    Utiliser le drapeau [E] pour définir une variable d'environnement.

    RewriteEngine on
    RewriteRule   "^/cheval/(.*)"   "/poney/$1" [E=rewritten:1]

    Plus loin dans votre jeu de règles, vous pouvez vérifier le contenu de cette variable d'environnement via une directive RewriteCond :

    RewriteCond "%{ENV:rewritten}" "=1"

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/rewritemap.html.fr.utf80000644000000000000500000006613313412755316021502 0ustar rootsrc Utilisation de RewriteMap - Serveur HTTP Apache Version 2.4
    <-

    Utilisation de RewriteMap

    Langues Disponibles:  en  |  fr 

    Ce document est un complément à la documentation de référence du module mod_rewrite. Il décrit l'utilisation de la directive RewriteMap, et fournit des exemples pour chacun des différents types de RewriteMap.

    Notez que la plupart de ces exemples ne fonctionneront pas en l'état dans le contexte de votre configuration particulière ; vous devez donc vous attacher à les comprendre, plutôt que de simplement les insérer dans votre configuration par copier/coller.
    top

    Introduction

    La directive RewriteMap définit une fonction externe qui peut être appelée depuis une directive RewriteRule ou RewriteCond pour accomplir une réécriture trop compliquée, ou trop spécialisée pour être effectuée à partir d'expressions rationnelles. Vous trouverez ci-dessous les différents types disponibles pour la source de données, ceux-ci étant par ailleurs énumérés dans la documentation de référence de RewriteMap.

    La syntaxe de la directive RewriteMap est la suivante :

    RewriteMap MapName MapType:MapSource

    L'argument MapName est un nom arbitraire que vous associez à la table de correspondances, et que vous pourrez utilisez par la suite dans les directives de réécriture. Les recherches dans la table de correspondance s'effectuent en respectant cette syntaxe :

    ${ nom-map : clé-recherche }
    ${ nom-map : clé-recherche | DefaultValue }

    Lorsque cette syntaxe est employée, la table de correspondances nom-map est consultée et la clé clé-recherche recherchée. Si la clé est trouvée, la fonction de recherche dans la table de correspondance est remplacée par SubstValue, ou par DefaultValue dans le cas contraire, ou par la chaîne vide si aucune DefaultValue n'a été spécifiée.

    Par exemple, vous pouvez définir une directive RewriteMap comme suit :

    RewriteMap examplemap "txt:/path/to/file/map.txt"

    Vous pourrez par la suite utiliser cette table de correspondances dans une directive RewriteRule comme suit :

    RewriteRule "^/ex/(.*)" "${examplemap:$1}"

    Il est possible de spécifier une valeur par défaut qui sera utilisée si la recherche dans la table de correspondances est infructueuse :

    RewriteRule "^/ex/(.*)" "${examplemap:$1|/not_found.html}"

    Contexte de répertoire et fichiers.htaccess

    Vous ne pouvez utiliser la directive RewriteMap ni dans les sections <Directory>, ni dans les fichiers .htaccess. Vous devez déclarer la table de correspondances au niveau du serveur principal ou dans un contexte de serveur virtuel. En revanche, si vous ne pouvez pas déclarer la table dans une section <Directory> ou dans un fichier .htaccess, vous pourrez y faire référence dans ces contextes, une fois cette table créée.

    Les sections suivantes décrivent les différents types de tables de correspondances type-map disponibles, et fournissent des exemples pour chacun d'entre eux.

    top

    int: Fonction interne

    Lorsque le type-map int est spécifié, la source est une des fonctions RewriteMap internes disponibles. Les développeurs de modules peuvent fournir des fonctions internes supplémentaires en les enregistrant via l'API ap_register_rewrite_mapfunc. Les fonctions fournies par défaut sont :

    • toupper:
      Met tous les caractères de la clé en majuscules.
    • tolower:
      Met tous les caractères de la clé en minuscules.
    • escape:
      Protège les caractères spéciaux de la clé en les transformant en leur code hexadécimal.
    • unescape:
      Retraduit les codes hexadécimaux de la clé en caractères spéciaux.

    Pour utiliser une de ces fonctions, créez une RewriteMap faisant référence à cette fonction int, et utilisez-la dans votre règle RewriteRule :

    Redirige un URI vers son équivalent en minuscules

    RewriteMap lc int:tolower
    RewriteRule "(.*)" "${lc:$1}" [R]

    Notez que cet exemple n'est fourni qu'à titre d'illustration, et ne constitue en aucun cas une recommandation. Si vous voulez rendre des URLs insensibles à la casse, vous devez plutôt vous tourner vers mod_speling.

    top

    txt: tables de correspondances au format texte

    Lorsqu'un type-map txt est utilisé, la source-map est un chemin du système de fichiers vers un fichier de correspondances au format texte, contenant sur chaque ligne une paire clé/valeur séparées par un espace. Il est possible d'insérer des commentaires sous la forme de chaînes commençant par le caractère '#'.

    Voici un exemple d'entrées valides dans un fichier de correspondances :

    # Ligne de commentaires
    clé valeur-substitution
    clé valeur-substitution # commentaire

    Lorsque la table de correspondance fait l'objet d'une recherche, la valeur spécifiée est recherchée dans le premier champ, et si elle est trouvée, la valeur de substitution est renvoyée.

    Par exemple, nous pourrions utiliser un fichier de correspondances pour traduire des noms de produits en identifiants produits pour obtenir des URLs plus simples à mémoriser, en utilisant la recette suivante :

    Product to ID configuration

    RewriteMap product2id "txt:/etc/apache2/productmap.txt"
    RewriteRule "^/product/(.*)" "/prods.php?id=${product2id:$1|NOTFOUND}" [PT]

    Nous supposons ici que le script prods.php sait quoi faire lorsqu'il reçoit un argument id=NOTFOUND, dans le cas où le produit ne se trouve pas dans la table de correspondances.

    Le fichier /etc/apache2/map-produit.txt contient ce qui suit :

    Fichier de correspondances Produit - Identifiant

    ##
    ## map-produit.txt - Fichier de correspondances Produit - Identifiant
    ##

    TELEVISION 993
    STEREO 198
    CANNE-A-PECHE 043
    BALLON-BASKET 418
    TELEPHONE 328

    Ainsi, lorsqu'une requête pour http://example.com/produit/TELEVISION arrive, la directive RewriteRule s'applique, et la requête est transformée en interne en /prods.php?id=993.

    Note: fichiers .htaccess

    L'exemple donné est conçu pour être utilisé dans un contexte de serveur principal ou de serveur virtuel. Si vous voulez l'utiliser dans un fichier .htaccess, vous devrez supprimer le slash de début dans le modèle de réécriture afin que ce dernier puisse correspondre à toute URL :
    RewriteRule "^product/(.*)" "/prods.php?id=${product2id:$1|NOTFOUND}" [PT]

    Recherches mises en cache

    Les clés de recherche sont mises en cache par httpd jusqu'à ce que le mtime (date de modification) du fichier de correspondances soit modifié, ou que le serveur httpd soit redémarré, ce qui améliore les performances pour les tables de correspondances consultées par de nombreuses requêtes.

    top

    rnd: Fichier texte à valeurs de substitution multiples choisies de manière aléatoire

    Lorsque le type-map spécifié est rnd, la source est un chemin du système de fichiers vers un fichier de correspondances au format texte dont chaque ligne contient une clé, et une ou plusieurs valeurs séparées par le caractère |. Si une clé convient, une des valeurs correspondantes sera choisie de manière aléatoire.

    Par exemple, vous pouvez utiliser le fichier de correspondances et les directives suivants pour implémenter une répartition de charge aléatoire entre plusieurs serveurs d'arrière-plan, par l'intermédiaire d'un mandataire inverse. Les images sont envoyées vers un des serveurs de l'ensemble 'statique', tandis que tout le reste est envoyé vers un des serveurs de l'ensemble 'dynamique'.

    Fichier de correspondances

    ##
    ## map.txt -- table de réécriture
    ##

    statique www1|www2|www3|www4
    dynamique www5|www6

    Directives de configuration

    RewriteMap servers "rnd:/path/to/file/map.txt"
    
    RewriteRule "^/(.*\.(png|gif|jpg))" "http://${servers:static}/$1" [NC,P,L]
    RewriteRule "^/(.*)"                "http://${servers:dynamic}/$1" [P,L]

    Ainsi, lorsqu'une image est demandée et que la première règle convient, RewriteMap recherche la chaîne statique dans le fichier de correspondances qui renvoie un des noms de serveurs spécifiés de manière aléatoire, ce dernier étant utilisé dans la cible de la règle RewriteRule.

    Si vous voulez qu'un des serveurs soit plus souvent sollicité que les autres (par exemple s'il possède plus de mémoire, et peut donc traiter d'avantage de requêtes), spécifiez-le plusieurs fois dans la liste des serveurs.

    statique www1|www1|www2|www3|www4

    top

    dbm: Fichier condensé DBM

    Lorsque le type-map dbm est utilisé, la source est un chemin du système de fichiers vers un fichier de données DBM contenant des paires clé/valeur permettant d'effectuer la correspondance. Le fonctionnement est identique à celui du type-map txt, mais beaucoup plus rapide car un fichier DBM est indexé, alors qu'un fichier texte ne l'est pas. L'accès à la clé recherchée est donc plus rapide.

    Vous pouvez éventuellement spécifier un type dbm particulier :

    RewriteMap examplemap "dbm=sdbm:/etc/apache/mapfile.dbm"

    Ce type peut être choisi parmi sdbm, gdbm, ndbm ou db. Il est cependant recommandé d'utiliser l'utilitaire httxt2dbm fourni avec le serveur HTTP Apache, car il utilise la bibliothèque DBM appropriée, à savoir celle qui a été utilisée lors de la compilation de httpd.

    Pour créer un fichier dbm, créez tout d'abord un fichier de correspondances au format texte comme décrit dans la section txt. Traitez ensuite ce fichier avec httxt2dbm :

    $ httxt2dbm -i fichier-map.txt -o fichier-map.map

    Vous pouvez alors faire référence au fichier obtenu dans votre directive RewriteMap :

    RewriteMap mapname "dbm:/etc/apache/mapfile.map"

    Notez qu'avec certains types dbm, plusieurs fichiers possédant le même nom de base sont créés. Par exemple, vous pouvez obtenir deux fichiers nommés fichier-map.map.dir et fichier-map.map.pag. Ceci est tout à fait normal, et vous ne devez utiliser que le nom de base fichier-map.map dans votre directive RewriteMap.

    Mise en cache des recherches

    Les clés de recherche sont mises en cache par httpd jusqu'à ce que le mtime (date de modification) du fichier de correspondances soit modifié, ou que le serveur httpd soit redémarré, ce qui améliore les performances pour les tables de correspondances consultées par de nombreuses requêtes.

    top

    prg: Programme de réécriture externe

    Lorque le type-map prg est spécifié, la source est un chemin du système de fichiers vers un programme exécutable destiné à effectuer la mise en correspondance. Il peut s'agir d'un fichier binaire compilé, ou d'un programme en langage interprété comme Perl ou Python.

    Ce programme est lancé une fois au démarrage du serveur HTTP Apache, puis communique avec le moteur de réécriture via STDIN et STDOUT. En d'autres termes, pour chaque recherche de correspondance, il reçoit un argument via STDIN, et doit renvoyer en guise de réponse une chaîne terminée par un caractère nouvelle-ligne sur STDOUT. Si la recherche de correspondance est infructueuse, le programme doit l'indiquer en retournant la chaîne de quatre caractères "NULL".

    Les programmes de réécriture externes ne sont pas lancés s'il n'ont pas été définis dans un contexte où la directive RewriteEngine est définie à on.

    Par défaut, les programmes de réécriture externes sont lancés par l'utilisateur/groupe qui a démarré httpd. Pour changer ce comportement, il est possible sur les systèmes de style Unix de spécifier un autre couple utilisateur/groupe via le troisième argument de la directive RewriteMap, et ceci au format utilisateur:groupe.

    Cette fonctionnalité utilise le mutex rewrite-map nécessaire à la fiabilité des communications avec le programme. Le mécanisme de mutex et le fichier verrou peuvent être définis via la directive Mutex.

    Voici un exemple simple qui remplace tous les tirets par des caractères de soulignement dans l'URI de la requête.

    Configuration de la réécriture

    RewriteMap d2u "prg:/www/bin/dash2under.pl" apache:apache
    RewriteRule "-" "${d2u:%{REQUEST_URI}}"

    dash2under.pl

        #!/usr/bin/perl
        $| = 1; # Turn off I/O buffering
        while (<STDIN>) {
            s/-/_/g; # Remplace tous les tirets par des caractères de soulignement
            print $_;
        }

    Mises en garde !

    • Votre programme doit être le plus simple possible. Si le programme se bloque, httpd va attendre indéfiniment une réponse de sa part, et par conséquent ne répondra plus aux requêtes.
    • Assurez-vous de bien désactiver la mise en tampon dans votre programme. En Perl, ceci est effectué à la seconde ligne du script de l'exemple - $| = 1; - La syntaxe sera bien entendu différente dans d'autres langages. Si les entrées/sorties sont mises en tampon, httpd va attendre une sortie, et va par conséquent se bloquer.
    • Rappelez-vous qu'il n'existe qu'une copie du programme lancé au démarrage du serveur, et que toutes les requêtes vont devoir passer par ce goulot d'étranglement. Ceci peut provoquer des ralentissements significatifs si de nombreuses requêtes doivent être traitées, ou si le script lui-même est très lent.
    top

    dbd ou fastdbd: requête SQL

    Lorsque le type-map dbd ou fastdbd est spécifié, la source est une requête SQL SELECT qui reçoit un argument et renvoie une seule valeur.

    Pour que cette requête puisse être exécutée, mod_dbd doit être configuré pour attaquer la base de données concernée.

    Ce type-map existe sous deux formes. Avec le type-map dbd, la requête est exécutée à chaque demande, tandis qu'avec le type-map fastdbd, les recherches dans la base de données sont mises en cache en interne. fastdbd est donc plus efficace et donc plus rapide ; par contre, il ne tiendra pas compte des modifications apportées à la base de données jusqu'à ce que le serveur soit redémarré.

    Si une requête renvoie plusieurs enregistrements, un de ceux-ci sera sélectionné aléatoirement.

    Exemple

    RewriteMap ma-requete "fastdbd:SELECT destination FROM rewrite WHERE source = %s"

    Note

    Le nom de la requête est transmis au pilote de base de données en tant que label pour une requête SQL préparée, et doit donc respecter toutes les règles imposées par votre base de données (comme la sensibilité à la casse).

    top

    Résumé

    La directive RewriteMap peut apparaître plusieurs fois. Utilisez une directive RewriteMap pour chaque fonction de mise en correspondance pour déclarer son fichier de correspondances.

    Bien que l'on ne puisse pas déclarer de fonction de mise en correspondance dans un contexte de répertoire (fichier .htaccess ou section <Directory>), il est possible d'utiliser cette fonction dans un tel contexte.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/htaccess.html.fr.utf80000644000000000000500000001321013412755316021104 0ustar rootsrc mod_rewrite et les fichiers .htaccess - Serveur HTTP Apache Version 2.4
    <-

    mod_rewrite et les fichiers .htaccess

    Langues Disponibles:  en  |  fr 

    Ce document est un complément de la documentation de référence du module mod_rewrite. Il décrit les changements apportés aux règles lorsqu'on utilise mod_rewrite dans les fichiers .htaccess, et comment travailler avec ces changements.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/advanced.html.en0000644000000000000500000003723513412755316020177 0ustar rootsrc Advanced Techniques with mod_rewrite - Apache HTTP Server Version 2.4
    <-

    Advanced Techniques with mod_rewrite

    Available Languages:  en  |  fr 

    This document supplements the mod_rewrite reference documentation. It provides a few advanced techniques using mod_rewrite.

    Note that many of these examples won't work unchanged in your particular server configuration, so it's important that you understand them, rather than merely cutting and pasting the examples into your configuration.
    top

    URL-based sharding across multiple backends

    Description:

    A common technique for distributing the burden of server load or storage space is called "sharding". When using this method, a front-end server will use the url to consistently "shard" users or objects to separate backend servers.

    Solution:

    A mapping is maintained, from users to target servers, in external map files. They look like:

    user1 physical_host_of_user1
    user2 physical_host_of_user2
    : :

    We put this into a map.users-to-hosts file. The aim is to map;

    /u/user1/anypath

    to

    http://physical_host_of_user1/u/user/anypath

    thus every URL path need not be valid on every backend physical host. The following ruleset does this for us with the help of the map files assuming that server0 is a default server which will be used if a user has no entry in the map:

    RewriteEngine on
    RewriteMap      users-to-hosts   "txt:/path/to/map.users-to-hosts"
    RewriteRule   "^/u/([^/]+)/?(.*)"   "http://${users-to-hosts:$1|server0}/u/$1/$2"

    See the RewriteMap documentation for more discussion of the syntax of this directive.

    top

    On-the-fly Content-Regeneration

    Description:

    We wish to dynamically generate content, but store it statically once it is generated. This rule will check for the existence of the static file, and if it's not there, generate it. The static files can be removed periodically, if desired (say, via cron) and will be regenerated on demand.

    Solution:
    This is done via the following ruleset:
    # This example is valid in per-directory context only
    RewriteCond "%{REQUEST_URI}"   "!-U"
    RewriteRule "^(.+)\.html$"          "/regenerate_page.cgi"   [PT,L]

    The -U operator determines whether the test string (in this case, REQUEST_URI) is a valid URL. It does this via a subrequest. In the event that this subrequest fails - that is, the requested resource doesn't exist - this rule invokes the CGI program /regenerate_page.cgi, which generates the requested resource and saves it into the document directory, so that the next time it is requested, a static copy can be served.

    In this way, documents that are infrequently updated can be served in static form. if documents need to be refreshed, they can be deleted from the document directory, and they will then be regenerated the next time they are requested.

    top

    Load Balancing

    Description:

    We wish to randomly distribute load across several servers using mod_rewrite.

    Solution:

    We'll use RewriteMap and a list of servers to accomplish this.

    RewriteEngine on
    RewriteMap lb "rnd:/path/to/serverlist.txt"
    RewriteRule "^/(.*)" "http://${lb:servers}/$1" [P,L]

    serverlist.txt will contain a list of the servers:

    ## serverlist.txt

    servers one.example.com|two.example.com|three.example.com

    If you want one particular server to get more of the load than the others, add it more times to the list.

    Discussion

    Apache comes with a load-balancing module - mod_proxy_balancer - which is far more flexible and featureful than anything you can cobble together using mod_rewrite.

    top

    Structured Userdirs

    Description:

    Some sites with thousands of users use a structured homedir layout, i.e. each homedir is in a subdirectory which begins (for instance) with the first character of the username. So, /~larry/anypath is /home/l/larry/public_html/anypath while /~waldo/anypath is /home/w/waldo/public_html/anypath.

    Solution:

    We use the following ruleset to expand the tilde URLs into the above layout.

    RewriteEngine on
    RewriteRule   "^/~(([a-z])[a-z0-9]+)(.*)"  "/home/$2/$1/public_html$3"
    top

    Redirecting Anchors

    Description:

    By default, redirecting to an HTML anchor doesn't work, because mod_rewrite escapes the # character, turning it into %23. This, in turn, breaks the redirection.

    Solution:

    Use the [NE] flag on the RewriteRule. NE stands for No Escape.

    Discussion:
    This technique will of course also work with other special characters that mod_rewrite, by default, URL-encodes.
    top

    Time-Dependent Rewriting

    Description:

    We wish to use mod_rewrite to serve different content based on the time of day.

    Solution:

    There are a lot of variables named TIME_xxx for rewrite conditions. In conjunction with the special lexicographic comparison patterns <STRING, >STRING and =STRING we can do time-dependent redirects:

    RewriteEngine on
    RewriteCond   "%{TIME_HOUR}%{TIME_MIN}" ">0700"
    RewriteCond   "%{TIME_HOUR}%{TIME_MIN}" "<1900"
    RewriteRule   "^foo\.html$"             "foo.day.html" [L]
    RewriteRule   "^foo\.html$"             "foo.night.html"

    This provides the content of foo.day.html under the URL foo.html from 07:01-18:59 and at the remaining time the contents of foo.night.html.

    mod_cache, intermediate proxies and browsers may each cache responses and cause the either page to be shown outside of the time-window configured. mod_expires may be used to control this effect. You are, of course, much better off simply serving the content dynamically, and customizing it based on the time of day.
    top

    Set Environment Variables Based On URL Parts

    Description:

    At time, we want to maintain some kind of status when we perform a rewrite. For example, you want to make a note that you've done that rewrite, so that you can check later to see if a request can via that rewrite. One way to do this is by setting an environment variable.

    Solution:

    Use the [E] flag to set an environment variable.

    RewriteEngine on
    RewriteRule   "^/horse/(.*)"   "/pony/$1" [E=rewritten:1]

    Later in your ruleset you might check for this environment variable using a RewriteCond:

    RewriteCond "%{ENV:rewritten}" "=1"

    Note that environment variables do not survive an external redirect. You might consider using the [CO] flag to set a cookie.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/htaccess.html0000644000000000000500000000032413362070302017600 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: htaccess.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: htaccess.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/rewrite/proxy.html.en0000644000000000000500000001676613412755316017621 0ustar rootsrc Using mod_rewrite for Proxying - Apache HTTP Server Version 2.4
    <-

    Using mod_rewrite for Proxying

    Available Languages:  en  |  fr 

    This document supplements the mod_rewrite reference documentation. It describes how to use the RewriteRule's [P] flag to proxy content to another server. A number of recipes are provided that describe common scenarios.

    top

    Proxying Content with mod_rewrite

    Description:

    mod_rewrite provides the [P] flag, which allows URLs to be passed, via mod_proxy, to another server. Two examples are given here. In one example, a URL is passed directly to another server, and served as though it were a local URL. In the other example, we proxy missing content to a back-end server.

    Solution:

    To simply map a URL to another server, we use the [P] flag, as follows:

    RewriteEngine  on
    RewriteBase    "/products/"
    RewriteRule    "^widget/(.*)$"  "http://product.example.com/widget/$1"  [P]
    ProxyPassReverse "/products/widget/" "http://product.example.com/widget/"

    In the second example, we proxy the request only if we can't find the resource locally. This can be very useful when you're migrating from one server to another, and you're not sure if all the content has been migrated yet.

    RewriteCond "%{REQUEST_FILENAME}"       !-f
    RewriteCond "%{REQUEST_FILENAME}"       !-d
    RewriteRule "^/(.*)" "http://old.example.com/$1" [P]
    ProxyPassReverse "/" "http://old.example.com/"
    Discussion:

    In each case, we add a ProxyPassReverse directive to ensure that any redirects issued by the backend are correctly passed on to the client.

    Consider using either ProxyPass or ProxyPassMatch whenever possible in preference to mod_rewrite.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/rewritemap.html0000644000000000000500000000033013362070302020157 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: rewritemap.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: rewritemap.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/rewrite/avoid.html.en0000644000000000000500000003745713412755316017542 0ustar rootsrc When not to use mod_rewrite - Apache HTTP Server Version 2.4
    <-

    When not to use mod_rewrite

    Available Languages:  en  |  fr 

    This document supplements the mod_rewrite reference documentation. It describes perhaps one of the most important concepts about mod_rewrite - namely, when to avoid using it.

    mod_rewrite should be considered a last resort, when other alternatives are found wanting. Using it when there are simpler alternatives leads to configurations which are confusing, fragile, and hard to maintain. Understanding what other alternatives are available is a very important step towards mod_rewrite mastery.

    Note that many of these examples won't work unchanged in your particular server configuration, so it's important that you understand them, rather than merely cutting and pasting the examples into your configuration.

    The most common situation in which mod_rewrite is the right tool is when the very best solution requires access to the server configuration files, and you don't have that access. Some configuration directives are only available in the server configuration file. So if you are in a hosting situation where you only have .htaccess files to work with, you may need to resort to mod_rewrite.

    top

    Simple Redirection

    mod_alias provides the Redirect and RedirectMatch directives, which provide a means to redirect one URL to another. This kind of simple redirection of one URL, or a class of URLs, to somewhere else, should be accomplished using these directives rather than RewriteRule. RedirectMatch allows you to include a regular expression in your redirection criteria, providing many of the benefits of using RewriteRule.

    A common use for RewriteRule is to redirect an entire class of URLs. For example, all URLs in the /one directory must be redirected to http://one.example.com/, or perhaps all http requests must be redirected to https.

    These situations are better handled by the Redirect directive. Remember that Redirect preserves path information. That is to say, a redirect for a URL /one will also redirect all URLs under that, such as /one/two.html and /one/three/four.html.

    To redirect URLs under /one to http://one.example.com, do the following:

    Redirect "/one/" "http://one.example.com/"

    To redirect one hostname to another, for example example.com to www.example.com, see the Canonical Hostnames recipe.

    To redirect http URLs to https, do the following:

    <VirtualHost *:80>
        ServerName www.example.com
        Redirect "/" "https://www.example.com/"
    </VirtualHost>
    
    <VirtualHost *:443>
        ServerName www.example.com
        # ... SSL configuration goes here
    </VirtualHost>

    The use of RewriteRule to perform this task may be appropriate if there are other RewriteRule directives in the same scope. This is because, when there are Redirect and RewriteRule directives in the same scope, the RewriteRule directives will run first, regardless of the order of appearance in the configuration file.

    In the case of the http-to-https redirection, the use of RewriteRule would be appropriate if you don't have access to the main server configuration file, and are obliged to perform this task in a .htaccess file instead.

    top

    URL Aliasing

    The Alias directive provides mapping from a URI to a directory - usually a directory outside of your DocumentRoot. Although it is possible to perform this mapping with mod_rewrite, Alias is the preferred method, for reasons of simplicity and performance.

    Using Alias

    Alias "/cats" "/var/www/virtualhosts/felines/htdocs"

    The use of mod_rewrite to perform this mapping may be appropriate when you do not have access to the server configuration files. Alias may only be used in server or virtualhost context, and not in a .htaccess file.

    Symbolic links would be another way to accomplish the same thing, if you have Options FollowSymLinks enabled on your server.

    top

    Virtual Hosting

    Although it is possible to handle virtual hosts with mod_rewrite, it is seldom the right way. Creating individual <VirtualHost> blocks is almost always the right way to go. In the event that you have an enormous number of virtual hosts, consider using mod_vhost_alias to create these hosts automatically.

    Modules such as mod_macro are also useful for creating a large number of virtual hosts dynamically.

    Using mod_rewrite for vitualhost creation may be appropriate if you are using a hosting service that does not provide you access to the server configuration files, and you are therefore restricted to configuration using .htaccess files.

    See the virtual hosts with mod_rewrite document for more details on how you might accomplish this if it still seems like the right approach.

    top

    Simple Proxying

    RewriteRule provides the [P] flag to pass rewritten URIs through mod_proxy.

    RewriteRule "^/?images(.*)" "http://imageserver.local/images$1" [P]

    However, in many cases, when there is no actual pattern matching needed, as in the example shown above, the ProxyPass directive is a better choice. The example here could be rendered as:

    ProxyPass "/images/" "http://imageserver.local/images/"

    Note that whether you use RewriteRule or ProxyPass, you'll still need to use the ProxyPassReverse directive to catch redirects issued from the back-end server:

    ProxyPassReverse "/images/" "http://imageserver.local/images/"

    You may need to use RewriteRule instead when there are other RewriteRules in effect in the same scope, as a RewriteRule will usually take effect before a ProxyPass, and so may preempt what you're trying to accomplish.

    top

    Environment Variable Testing

    mod_rewrite is frequently used to take a particular action based on the presence or absence of a particular environment variable or request header. This can be done more efficiently using the <If>.

    Consider, for example, the common scenario where RewriteRule is used to enforce a canonical hostname, such as www.example.com instead of example.com. This can be done using the <If> directive, as shown here:

    <If "req('Host') != 'www.example.com'">
        Redirect "/" "http://www.example.com/"
    </If>

    This technique can be used to take actions based on any request header, response header, or environment variable, replacing mod_rewrite in many common scenarios.

    See especially the expression evaluation documentation for a overview of what types of expressions you can use in <If> sections, and in certain other directives.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/proxy.html.fr.utf80000644000000000000500000001747313412755316020507 0ustar rootsrc Utilisation de mod_rewrite comme mandataire - Serveur HTTP Apache Version 2.4
    <-

    Utilisation de mod_rewrite comme mandataire

    Langues Disponibles:  en  |  fr 

    Ce document est un complément de la documentation de référence du module mod_rewrite. Il décrit comment utiliser le drapeau [P] de la directive RewriteRule pour mandater un contenu vers un autre serveur. Plusieurs recettes décrivant des scénarios courants sont fournies.

    top

    Mandater du contenu avec mod_rewrite

    Description :

    mod_rewrite implémente le drapeau [P] qui permet de passer des URLs, via mod_proxy, à un autre serveur. Deux exemples sont fournis ici. Dans le premier, une URL est passée directement à un autre serveur, et servie comme si c'était une URL locale. Dans le deuxième, nous mandatons un contenu manquant vers un serveur d'arrière-plan.

    Solution :

    Pour passer une URL à un autre serveur, on utilise le drapeau [P] comme suit :

    RewriteEngine  on
    RewriteBase    "/produits/"
    RewriteRule    "^widget/(.*)$"  "http://produits.example.com/widget/$1"  [P]
    ProxyPassReverse "/produits/objet/" "http://produits.example.com/objet/"

    Dans le deuxième exemple, nous ne mandatons la requête que si nous ne trouvons pas la ressource localement. Ceci peut s'avérer très utile lorsque vous effectuez une migration d'un serveur vers un autre, et que vous n'êtes pas certain que tout le contenu a déjà été migré.

    RewriteCond "%{REQUEST_FILENAME}"       !-f
    RewriteCond "%{REQUEST_FILENAME}"       !-d
    RewriteRule "^/(.*)" "http://ancien.exemple.com/$1" [P]
    ProxyPassReverse "/" "http://ancien.exemple.com/"
    Discussion :

    Dans les deux cas, on ajoute une directive ProxyPassReverse afin de s'assurer que toute redirection en provenance du serveur d'arrière-plan est renvoyée correctement au client.

    Chaque fois que cela est possible, préférez l'utilisation de la directive ProxyPass ou ProxyPassMatch à mod_rewrite.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/vhosts.html0000644000000000000500000000032013362070302017325 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: vhosts.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: vhosts.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/rewrite/remapping.html.en0000644000000000000500000007005313412755316020407 0ustar rootsrc Redirecting and Remapping with mod_rewrite - Apache HTTP Server Version 2.4
    <-

    Redirecting and Remapping with mod_rewrite

    Available Languages:  en  |  fr 

    This document supplements the mod_rewrite reference documentation. It describes how you can use mod_rewrite to redirect and remap request. This includes many examples of common uses of mod_rewrite, including detailed descriptions of how each works.

    Note that many of these examples won't work unchanged in your particular server configuration, so it's important that you understand them, rather than merely cutting and pasting the examples into your configuration.
    top

    From Old to New (internal)

    Description:

    Assume we have recently renamed the page foo.html to bar.html and now want to provide the old URL for backward compatibility. However, we want that users of the old URL even not recognize that the pages was renamed - that is, we don't want the address to change in their browser.

    Solution:

    We rewrite the old URL to the new one internally via the following rule:

    RewriteEngine  on
    RewriteRule    "^/foo\.html$"  "/bar.html" [PT]
    top

    Rewriting From Old to New (external)

    Description:

    Assume again that we have recently renamed the page foo.html to bar.html and now want to provide the old URL for backward compatibility. But this time we want that the users of the old URL get hinted to the new one, i.e. their browsers Location field should change, too.

    Solution:

    We force a HTTP redirect to the new URL which leads to a change of the browsers and thus the users view:

    RewriteEngine  on
    RewriteRule    "^/foo\.html$"  "bar.html"  [R]
    Discussion

    In this example, as contrasted to the internal example above, we can simply use the Redirect directive. mod_rewrite was used in that earlier example in order to hide the redirect from the client:

    Redirect "/foo.html" "/bar.html"
    top

    Resource Moved to Another Server

    Description:

    If a resource has moved to another server, you may wish to have URLs continue to work for a time on the old server while people update their bookmarks.

    Solution:

    You can use mod_rewrite to redirect these URLs to the new server, but you might also consider using the Redirect or RedirectMatch directive.

    #With mod_rewrite
    RewriteEngine on
    RewriteRule   "^/docs/(.+)"  "http://new.example.com/docs/$1"  [R,L]
    #With RedirectMatch
    RedirectMatch "^/docs/(.*)" "http://new.example.com/docs/$1"
    #With Redirect
    Redirect "/docs/" "http://new.example.com/docs/"
    top

    From Static to Dynamic

    Description:

    How can we transform a static page foo.html into a dynamic variant foo.cgi in a seamless way, i.e. without notice by the browser/user.

    Solution:

    We just rewrite the URL to the CGI-script and force the handler to be cgi-script so that it is executed as a CGI program. This way a request to /~quux/foo.html internally leads to the invocation of /~quux/foo.cgi.

    RewriteEngine  on
    RewriteBase    "/~quux/"
    RewriteRule    "^foo\.html$"  "foo.cgi"  [H=cgi-script]
    top

    Backward Compatibility for file extension change

    Description:

    How can we make URLs backward compatible (still existing virtually) after migrating document.YYYY to document.XXXX, e.g. after translating a bunch of .html files to .php?

    Solution:

    We rewrite the name to its basename and test for existence of the new extension. If it exists, we take that name, else we rewrite the URL to its original state.

    #   backward compatibility ruleset for
    #   rewriting document.html to document.php
    #   when and only when document.php exists
    <Directory "/var/www/htdocs">
        RewriteEngine on
        RewriteBase "/var/www/htdocs"
    
        RewriteCond "$1.php" -f
        RewriteCond "$1.html" !-f
        RewriteRule "^(.*).html$" "$1.php"
    </Directory>
    Discussion

    This example uses an often-overlooked feature of mod_rewrite, by taking advantage of the order of execution of the ruleset. In particular, mod_rewrite evaluates the left-hand-side of the RewriteRule before it evaluates the RewriteCond directives. Consequently, $1 is already defined by the time the RewriteCond directives are evaluated. This allows us to test for the existence of the original (document.html) and target (document.php) files using the same base filename.

    This ruleset is designed to use in a per-directory context (In a <Directory> block or in a .htaccess file), so that the -f checks are looking at the correct directory path. You may need to set a RewriteBase directive to specify the directory base that you're working in.

    top

    Canonical Hostnames

    Description:
    The goal of this rule is to force the use of a particular hostname, in preference to other hostnames which may be used to reach the same site. For example, if you wish to force the use of www.example.com instead of example.com, you might use a variant of the following recipe.
    Solution:

    The very best way to solve this doesn't involve mod_rewrite at all, but rather uses the Redirect directive placed in a virtual host for the non-canonical hostname(s).

    <VirtualHost *:80>
      ServerName undesired.example.com
      ServerAlias example.com notthis.example.com
    
      Redirect "/" "http://www.example.com/"
    </VirtualHost>
    
    <VirtualHost *:80>
      ServerName www.example.com
    </VirtualHost>

    You can alternatively accomplish this using the <If> directive:

    <If "%{HTTP_HOST} != 'www.example.com'">
        Redirect "/" "http://www.example.com/"
    </If>

    Or, for example, to redirect a portion of your site to HTTPS, you might do the following:

    <If "%{SERVER_PROTOCOL} != 'HTTPS'">
        Redirect "/admin/" "https://www.example.com/admin/"
    </If>

    If, for whatever reason, you still want to use mod_rewrite - if, for example, you need this to work with a larger set of RewriteRules - you might use one of the recipes below.

    For sites running on a port other than 80:

    RewriteCond "%{HTTP_HOST}"   "!^www\.example\.com" [NC]
    RewriteCond "%{HTTP_HOST}"   "!^$"
    RewriteCond "%{SERVER_PORT}" "!^80$"
    RewriteRule "^/?(.*)"        "http://www.example.com:%{SERVER_PORT}/$1" [L,R,NE]

    And for a site running on port 80

    RewriteCond "%{HTTP_HOST}"   "!^www\.example\.com" [NC]
    RewriteCond "%{HTTP_HOST}"   "!^$"
    RewriteRule "^/?(.*)"        "http://www.example.com/$1" [L,R,NE]

    If you wanted to do this generically for all domain names - that is, if you want to redirect example.com to www.example.com for all possible values of example.com, you could use the following recipe:

    RewriteCond "%{HTTP_HOST}" "!^www\." [NC]
    RewriteCond "%{HTTP_HOST}" "!^$"
    RewriteRule "^/?(.*)"      "http://www.%{HTTP_HOST}/$1" [L,R,NE]

    These rulesets will work either in your main server configuration file, or in a .htaccess file placed in the DocumentRoot of the server.

    top

    Search for pages in more than one directory

    Description:

    A particular resource might exist in one of several places, and we want to look in those places for the resource when it is requested. Perhaps we've recently rearranged our directory structure, dividing content into several locations.

    Solution:

    The following ruleset searches in two directories to find the resource, and, if not finding it in either place, will attempt to just serve it out of the location requested.

    RewriteEngine on
    
    #   first try to find it in dir1/...
    #   ...and if found stop and be happy:
    RewriteCond         "%{DOCUMENT_ROOT}/dir1/%{REQUEST_URI}"  -f
    RewriteRule "^(.+)" "%{DOCUMENT_ROOT}/dir1/$1"  [L]
    
    #   second try to find it in dir2/...
    #   ...and if found stop and be happy:
    RewriteCond         "%{DOCUMENT_ROOT}/dir2/%{REQUEST_URI}"  -f
    RewriteRule "^(.+)" "%{DOCUMENT_ROOT}/dir2/$1"  [L]
    
    #   else go on for other Alias or ScriptAlias directives,
    #   etc.
    RewriteRule   "^"  "-"  [PT]
    top

    Redirecting to Geographically Distributed Servers

    Description:

    We have numerous mirrors of our website, and want to redirect people to the one that is located in the country where they are located.

    Solution:

    Looking at the hostname of the requesting client, we determine which country they are coming from. If we can't do a lookup on their IP address, we fall back to a default server.

    We'll use a RewriteMap directive to build a list of servers that we wish to use.

    HostnameLookups on
    RewriteEngine on
    RewriteMap    multiplex         "txt:/path/to/map.mirrors"
    RewriteCond   "%{REMOTE_HOST}"  "([a-z]+)$" [NC]
    RewriteRule   "^/(.*)$"  "${multiplex:%1|http://www.example.com/}$1"  [R,L]

    ## map.mirrors -- Multiplexing Map

    de http://www.example.de/
    uk http://www.example.uk/
    com http://www.example.com/
    ##EOF##

    Discussion
    This ruleset relies on HostNameLookups being set on, which can be a significant performance hit.

    The RewriteCond directive captures the last portion of the hostname of the requesting client - the country code - and the following RewriteRule uses that value to look up the appropriate mirror host in the map file.

    top

    Browser Dependent Content

    Description:

    We wish to provide different content based on the browser, or user-agent, which is requesting the content.

    Solution:

    We have to decide, based on the HTTP header "User-Agent", which content to serve. The following config does the following: If the HTTP header "User-Agent" contains "Mozilla/3", the page foo.html is rewritten to foo.NS.html and the rewriting stops. If the browser is "Lynx" or "Mozilla" of version 1 or 2, the URL becomes foo.20.html. All other browsers receive page foo.32.html. This is done with the following ruleset:

    RewriteCond "%{HTTP_USER_AGENT}"  "^Mozilla/3.*"
    RewriteRule "^foo\.html$"         "foo.NS.html"          [L]
    
    RewriteCond "%{HTTP_USER_AGENT}"  "^Lynx/" [OR]
    RewriteCond "%{HTTP_USER_AGENT}"  "^Mozilla/[12]"
    RewriteRule "^foo\.html$"         "foo.20.html"          [L]
    
    RewriteRule "^foo\.html$"         "foo.32.html"          [L]
    top

    Canonical URLs

    Description:

    On some webservers there is more than one URL for a resource. Usually there are canonical URLs (which are be actually used and distributed) and those which are just shortcuts, internal ones, and so on. Independent of which URL the user supplied with the request, they should finally see the canonical one in their browser address bar.

    Solution:

    We do an external HTTP redirect for all non-canonical URLs to fix them in the location view of the Browser and for all subsequent requests. In the example ruleset below we replace /puppies and /canines by the canonical /dogs.

    RewriteRule   "^/(puppies|canines)/(.*)"    "/dogs/$2"  [R]
    Discussion:
    This should really be accomplished with Redirect or RedirectMatch directives:
    RedirectMatch "^/(puppies|canines)/(.*)" "/dogs/$2"
    top

    Moved DocumentRoot

    Description:

    Usually the DocumentRoot of the webserver directly relates to the URL "/". But often this data is not really of top-level priority. For example, you may wish for visitors, on first entering a site, to go to a particular subdirectory /about/. This may be accomplished using the following ruleset:

    Solution:

    We redirect the URL / to /about/:

    RewriteEngine on
    RewriteRule   "^/$"  "/about/"  [R]

    Note that this can also be handled using the RedirectMatch directive:

    RedirectMatch "^/$" "http://example.com/about/"

    Note also that the example rewrites only the root URL. That is, it rewrites a request for http://example.com/, but not a request for http://example.com/page.html. If you have in fact changed your document root - that is, if all of your content is in fact in that subdirectory, it is greatly preferable to simply change your DocumentRoot directive, or move all of the content up one directory, rather than rewriting URLs.

    top

    Fallback Resource

    Description:
    You want a single resource (say, a certain file, like index.php) to handle all requests that come to a particular directory, except those that should go to an existing resource such as an image, or a css file.
    Solution:

    As of version 2.2.16, you should use the FallbackResource directive for this:

    <Directory "/var/www/my_blog">
      FallbackResource "index.php"
    </Directory>

    However, in earlier versions of Apache, or if your needs are more complicated than this, you can use a variation of the following rewrite set to accomplish the same thing:

    <Directory "/var/www/my_blog">
      RewriteBase "/my_blog"
    
      RewriteCond "/var/www/my_blog/%{REQUEST_FILENAME}" !-f
      RewriteCond "/var/www/my_blog/%{REQUEST_FILENAME}" !-d
      RewriteRule "^" "index.php" [PT]
    </Directory>

    If, on the other hand, you wish to pass the requested URI as a query string argument to index.php, you can replace that RewriteRule with:

    RewriteRule "(.*)" "index.php?$1" [PT,QSA]

    Note that these rulesets can be used in a .htaccess file, as well as in a <Directory> block.

    top

    Rewrite query string

    Description:
    You want to capture a particular value from a query string and either replace it or incorporate it into another component of the URL.
    Solutions:

    Many of the solutions in this section will all use the same condition, which leaves the matched value in the %2 backreference. %1 is the beginining of the query string (up to the key of intererest), and %3 is the remainder. This condition is a bit complex for flexibility and to avoid double '&&' in the substitutions.

    • This solution removes the matching key and value:
      # Remove mykey=???
      RewriteCond "%{QUERY_STRING}" "(.*(?:^|&))mykey=([^&]*)&?(.*)&?$"
      RewriteRule "(.*)" "$1?%1%3"
    • This solution uses the captured value in the URL subsitution, discarding the rest of the original query by appending a '?':
      # Copy from query string to PATH_INFO
      RewriteCond "%{QUERY_STRING}" "(.*(?:^|&))mykey=([^&]*)&?(.*)&?$"
      RewriteRule "(.*)" "$1/products/%2/?" [PT]
    • This solution checks the captured value in a subsequent condition:
      # Capture the value of mykey in the query string
      RewriteCond "%{QUERY_STRING}" "(.*(?:^|&))mykey=([^&]*)&?(.*)&?$"
      RewriteCond "%2" !=not-so-secret-value 
      RewriteRule "(.*)" - [F]
    • This solution shows the reverse of the previous ones, copying path components (perhaps PATH_INFO) from the URL into the query string.
      # The desired URL might be /products/kitchen-sink, and the script expects
      # /path?products=kitchen-sink.
      RewriteRule "^/?path/([^/]+)/([^/]+)" "/path?$1=$2" [PT]

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/flags.html.en0000644000000000000500000012100713412755316017515 0ustar rootsrc RewriteRule Flags - Apache HTTP Server Version 2.4
    <-

    RewriteRule Flags

    Available Languages:  en  |  fr 

    This document discusses the flags which are available to the RewriteRule directive, providing detailed explanations and examples.

    top

    Introduction

    A RewriteRule can have its behavior modified by one or more flags. Flags are included in square brackets at the end of the rule, and multiple flags are separated by commas.

    RewriteRule pattern target [Flag1,Flag2,Flag3]

    Each flag (with a few exceptions) has a short form, such as CO, as well as a longer form, such as cookie. While it is most common to use the short form, it is recommended that you familiarize yourself with the long form, so that you remember what each flag is supposed to do. Some flags take one or more arguments. Flags are not case sensitive.

    Flags that alter metadata associated with the request (T=, H=, E=) have no affect in per-directory and htaccess context, when a substitution (other than '-') is performed during the same round of rewrite processing.

    Presented here are each of the available flags, along with an example of how you might use them.

    top

    B (escape backreferences)

    The [B] flag instructs RewriteRule to escape non-alphanumeric characters before applying the transformation.

    In 2.4.26 and later, you can limit the escaping to specific characters in backreferences by listing them: [B=#?;]. Note: The space character can be used in the list of characters to escape, but it cannot be the last character in the list.

    mod_rewrite has to unescape URLs before mapping them, so backreferences are unescaped at the time they are applied. Using the B flag, non-alphanumeric characters in backreferences will be escaped. For example, consider the rule:

    RewriteRule "^search/(.*)$" "/search.php?term=$1"

    Given a search term of 'x & y/z', a browser will encode it as 'x%20%26%20y%2Fz', making the request 'search/x%20%26%20y%2Fz'. Without the B flag, this rewrite rule will map to 'search.php?term=x & y/z', which isn't a valid URL, and so would be encoded as search.php?term=x%20&y%2Fz=, which is not what was intended.

    With the B flag set on this same rule, the parameters are re-encoded before being passed on to the output URL, resulting in a correct mapping to /search.php?term=x%20%26%20y%2Fz.

    RewriteRule "^search/(.*)$" "/search.php?term=$1" [B,PT]

    Note that you may also need to set AllowEncodedSlashes to On to get this particular example to work, as httpd does not allow encoded slashes in URLs, and returns a 404 if it sees one.

    This escaping is particularly necessary in a proxy situation, when the backend may break if presented with an unescaped URL.

    An alternative to this flag is using a RewriteCond to capture against %{THE_REQUEST} which will capture strings in the encoded form.

    top

    BNP|backrefnoplus (don't escape space to +)

    The [BNP] flag instructs RewriteRule to escape the space character in a backreference to %20 rather than '+'. Useful when the backreference will be used in the path component rather than the query string.

    This flag is available in version 2.4.26 and later.

    top

    C|chain

    The [C] or [chain] flag indicates that the RewriteRule is chained to the next rule. That is, if the rule matches, then it is processed as usual and control moves on to the next rule. However, if it does not match, then the next rule, and any other rules that are chained together, are skipped.

    top

    CO|cookie

    The [CO], or [cookie] flag, allows you to set a cookie when a particular RewriteRule matches. The argument consists of three required fields and four optional fields.

    The full syntax for the flag, including all attributes, is as follows:

    [CO=NAME:VALUE:DOMAIN:lifetime:path:secure:httponly]

    If a literal ':' character is needed in any of the cookie fields, an alternate syntax is available. To opt-in to the alternate syntax, the cookie "Name" should be preceded with a ';' character, and field separators should be specified as ';'.

    [CO=;NAME;VALUE:MOREVALUE;DOMAIN;lifetime;path;secure;httponly]

    You must declare a name, a value, and a domain for the cookie to be set.

    Domain
    The domain for which you want the cookie to be valid. This may be a hostname, such as www.example.com, or it may be a domain, such as .example.com. It must be at least two parts separated by a dot. That is, it may not be merely .com or .net. Cookies of that kind are forbidden by the cookie security model.

    You may optionally also set the following values:

    Lifetime
    The time for which the cookie will persist, in minutes.
    A value of 0 indicates that the cookie will persist only for the current browser session. This is the default value if none is specified.
    Path
    The path, on the current website, for which the cookie is valid, such as /customers/ or /files/download/.
    By default, this is set to / - that is, the entire website.
    Secure
    If set to secure, true, or 1, the cookie will only be permitted to be translated via secure (https) connections.
    httponly
    If set to HttpOnly, true, or 1, the cookie will have the HttpOnly flag set, which means that the cookie is inaccessible to JavaScript code on browsers that support this feature.

    Consider this example:

    RewriteEngine On
    RewriteRule "^/index\.html" "-" [CO=frontdoor:yes:.example.com:1440:/]

    In the example give, the rule doesn't rewrite the request. The "-" rewrite target tells mod_rewrite to pass the request through unchanged. Instead, it sets a cookie called 'frontdoor' to a value of 'yes'. The cookie is valid for any host in the .example.com domain. It is set to expire in 1440 minutes (24 hours) and is returned for all URIs.

    top

    DPI|discardpath

    The DPI flag causes the PATH_INFO portion of the rewritten URI to be discarded.

    This flag is available in version 2.2.12 and later.

    In per-directory context, the URI each RewriteRule compares against is the concatenation of the current values of the URI and PATH_INFO.

    The current URI can be the initial URI as requested by the client, the result of a previous round of mod_rewrite processing, or the result of a prior rule in the current round of mod_rewrite processing.

    In contrast, the PATH_INFO that is appended to the URI before each rule reflects only the value of PATH_INFO before this round of mod_rewrite processing. As a consequence, if large portions of the URI are matched and copied into a substitution in multiple RewriteRule directives, without regard for which parts of the URI came from the current PATH_INFO, the final URI may have multiple copies of PATH_INFO appended to it.

    Use this flag on any substitution where the PATH_INFO that resulted from the previous mapping of this request to the filesystem is not of interest. This flag permanently forgets the PATH_INFO established before this round of mod_rewrite processing began. PATH_INFO will not be recalculated until the current round of mod_rewrite processing completes. Subsequent rules during this round of processing will see only the direct result of substitutions, without any PATH_INFO appended.

    top

    E|env

    With the [E], or [env] flag, you can set the value of an environment variable. Note that some environment variables may be set after the rule is run, thus unsetting what you have set. See the Environment Variables document for more details on how Environment variables work.

    The full syntax for this flag is:

    [E=VAR:VAL]
    [E=!VAR]

    VAL may contain backreferences ($N or %N) which are expanded.

    Using the short form

    [E=VAR]

    you can set the environment variable named VAR to an empty value.

    The form

    [E=!VAR]

    allows to unset a previously set environment variable named VAR.

    Environment variables can then be used in a variety of contexts, including CGI programs, other RewriteRule directives, or CustomLog directives.

    The following example sets an environment variable called 'image' to a value of '1' if the requested URI is an image file. Then, that environment variable is used to exclude those requests from the access log.

    RewriteRule "\.(png|gif|jpg)$" "-" [E=image:1]
    CustomLog "logs/access_log" combined env=!image

    Note that this same effect can be obtained using SetEnvIf. This technique is offered as an example, not as a recommendation.

    top

    END

    Using the [END] flag terminates not only the current round of rewrite processing (like [L]) but also prevents any subsequent rewrite processing from occurring in per-directory (htaccess) context.

    This does not apply to new requests resulting from external redirects.

    top

    F|forbidden

    Using the [F] flag causes the server to return a 403 Forbidden status code to the client. While the same behavior can be accomplished using the Deny directive, this allows more flexibility in assigning a Forbidden status.

    The following rule will forbid .exe files from being downloaded from your server.

    RewriteRule "\.exe" "-" [F]

    This example uses the "-" syntax for the rewrite target, which means that the requested URI is not modified. There's no reason to rewrite to another URI, if you're going to forbid the request.

    When using [F], an [L] is implied - that is, the response is returned immediately, and no further rules are evaluated.

    top

    G|gone

    The [G] flag forces the server to return a 410 Gone status with the response. This indicates that a resource used to be available, but is no longer available.

    As with the [F] flag, you will typically use the "-" syntax for the rewrite target when using the [G] flag:

    RewriteRule "oldproduct" "-" [G,NC]

    When using [G], an [L] is implied - that is, the response is returned immediately, and no further rules are evaluated.

    top

    H|handler

    Forces the resulting request to be handled with the specified handler. For example, one might use this to force all files without a file extension to be parsed by the php handler:

    RewriteRule "!\." "-" [H=application/x-httpd-php]

    The regular expression above - !\. - will match any request that does not contain the literal . character.

    This can be also used to force the handler based on some conditions. For example, the following snippet used in per-server context allows .php files to be displayed by mod_php if they are requested with the .phps extension:

    RewriteRule "^(/source/.+\.php)s$" "$1" [H=application/x-httpd-php-source]

    The regular expression above - ^(/source/.+\.php)s$ - will match any request that starts with /source/ followed by 1 or n characters followed by .phps literally. The backreference $1 referrers to the captured match within parenthesis of the regular expression.

    top

    L|last

    The [L] flag causes mod_rewrite to stop processing the rule set. In most contexts, this means that if the rule matches, no further rules will be processed. This corresponds to the last command in Perl, or the break command in C. Use this flag to indicate that the current rule should be applied immediately without considering further rules.

    If you are using RewriteRule in either .htaccess files or in <Directory> sections, it is important to have some understanding of how the rules are processed. The simplified form of this is that once the rules have been processed, the rewritten request is handed back to the URL parsing engine to do what it may with it. It is possible that as the rewritten request is handled, the .htaccess file or <Directory> section may be encountered again, and thus the ruleset may be run again from the start. Most commonly this will happen if one of the rules causes a redirect - either internal or external - causing the request process to start over.

    It is therefore important, if you are using RewriteRule directives in one of these contexts, that you take explicit steps to avoid rules looping, and not count solely on the [L] flag to terminate execution of a series of rules, as shown below.

    An alternative flag, [END], can be used to terminate not only the current round of rewrite processing but prevent any subsequent rewrite processing from occurring in per-directory (htaccess) context. This does not apply to new requests resulting from external redirects.

    The example given here will rewrite any request to index.php, giving the original request as a query string argument to index.php, however, the RewriteCond ensures that if the request is already for index.php, the RewriteRule will be skipped.

    RewriteBase "/"
    RewriteCond "%{REQUEST_URI}" "!=/index.php"
    RewriteRule "^(.*)" "/index.php?req=$1" [L,PT]
    top

    N|next

    The [N] flag causes the ruleset to start over again from the top, using the result of the ruleset so far as a starting point. Use with extreme caution, as it may result in loop.

    The [Next] flag could be used, for example, if you wished to replace a certain string or letter repeatedly in a request. The example shown here will replace A with B everywhere in a request, and will continue doing so until there are no more As to be replaced.

    RewriteRule "(.*)A(.*)" "$1B$2" [N]

    You can think of this as a while loop: While this pattern still matches (i.e., while the URI still contains an A), perform this substitution (i.e., replace the A with a B).

    In 2.4.8 and later, this module returns an error after 32,000 iterations to protect against unintended looping. An alternative maximum number of iterations can be specified by adding to the N flag.

    # Be willing to replace 1 character in each pass of the loop
    RewriteRule "(.+)[><;]$" "$1" [N=64000]
    # ... or, give up if after 10 loops
    RewriteRule "(.+)[><;]$" "$1" [N=10]
    top

    NC|nocase

    Use of the [NC] flag causes the RewriteRule to be matched in a case-insensitive manner. That is, it doesn't care whether letters appear as upper-case or lower-case in the matched URI.

    In the example below, any request for an image file will be proxied to your dedicated image server. The match is case-insensitive, so that .jpg and .JPG files are both acceptable, for example.

    RewriteRule "(.*\.(jpg|gif|png))$" "http://images.example.com$1" [P,NC]
    top

    NE|noescape

    By default, special characters, such as & and ?, for example, will be converted to their hexcode equivalent. Using the [NE] flag prevents that from happening.

    RewriteRule "^/anchor/(.+)" "/bigpage.html#$1" [NE,R]

    The above example will redirect /anchor/xyz to /bigpage.html#xyz. Omitting the [NE] will result in the # being converted to its hexcode equivalent, %23, which will then result in a 404 Not Found error condition.

    top

    NS|nosubreq

    Use of the [NS] flag prevents the rule from being used on subrequests. For example, a page which is included using an SSI (Server Side Include) is a subrequest, and you may want to avoid rewrites happening on those subrequests. Also, when mod_dir tries to find out information about possible directory default files (such as index.html files), this is an internal subrequest, and you often want to avoid rewrites on such subrequests. On subrequests, it is not always useful, and can even cause errors, if the complete set of rules are applied. Use this flag to exclude problematic rules.

    To decide whether or not to use this rule: if you prefix URLs with CGI-scripts, to force them to be processed by the CGI-script, it's likely that you will run into problems (or significant overhead) on sub-requests. In these cases, use this flag.

    Images, javascript files, or css files, loaded as part of an HTML page, are not subrequests - the browser requests them as separate HTTP requests.

    top

    P|proxy

    Use of the [P] flag causes the request to be handled by mod_proxy, and handled via a proxy request. For example, if you wanted all image requests to be handled by a back-end image server, you might do something like the following:

    RewriteRule "/(.*)\.(jpg|gif|png)$" "http://images.example.com/$1.$2" [P]

    Use of the [P] flag implies [L] - that is, the request is immediately pushed through the proxy, and any following rules will not be considered.

    You must make sure that the substitution string is a valid URI (typically starting with http://hostname) which can be handled by the mod_proxy. If not, you will get an error from the proxy module. Use this flag to achieve a more powerful implementation of the ProxyPass directive, to map remote content into the namespace of the local server.

    Security Warning

    Take care when constructing the target URL of the rule, considering the security impact from allowing the client influence over the set of URLs to which your server will act as a proxy. Ensure that the scheme and hostname part of the URL is either fixed, or does not allow the client undue influence.

    Performance warning

    Using this flag triggers the use of mod_proxy, without handling of persistent connections. This means the performance of your proxy will be better if you set it up with ProxyPass or ProxyPassMatch

    This is because this flag triggers the use of the default worker, which does not handle connection pooling/reuse.

    Avoid using this flag and prefer those directives, whenever you can.

    Note: mod_proxy must be enabled in order to use this flag.

    top

    PT|passthrough

    The target (or substitution string) in a RewriteRule is assumed to be a file path, by default. The use of the [PT] flag causes it to be treated as a URI instead. That is to say, the use of the [PT] flag causes the result of the RewriteRule to be passed back through URL mapping, so that location-based mappings, such as Alias, Redirect, or ScriptAlias, for example, might have a chance to take effect.

    If, for example, you have an Alias for /icons, and have a RewriteRule pointing there, you should use the [PT] flag to ensure that the Alias is evaluated.

    Alias "/icons" "/usr/local/apache/icons"
    RewriteRule "/pics/(.+)\.jpg$" "/icons/$1.gif" [PT]

    Omission of the [PT] flag in this case will cause the Alias to be ignored, resulting in a 'File not found' error being returned.

    The PT flag implies the L flag: rewriting will be stopped in order to pass the request to the next phase of processing.

    Note that the PT flag is implied in per-directory contexts such as <Directory> sections or in .htaccess files. The only way to circumvent that is to rewrite to -.

    top

    QSA|qsappend

    When the replacement URI contains a query string, the default behavior of RewriteRule is to discard the existing query string, and replace it with the newly generated one. Using the [QSA] flag causes the query strings to be combined.

    Consider the following rule:

    RewriteRule "/pages/(.+)" "/page.php?page=$1" [QSA]

    With the [QSA] flag, a request for /pages/123?one=two will be mapped to /page.php?page=123&one=two. Without the [QSA] flag, that same request will be mapped to /page.php?page=123 - that is, the existing query string will be discarded.

    top

    QSD|qsdiscard

    When the requested URI contains a query string, and the target URI does not, the default behavior of RewriteRule is to copy that query string to the target URI. Using the [QSD] flag causes the query string to be discarded.

    This flag is available in version 2.4.0 and later.

    Using [QSD] and [QSA] together will result in [QSD] taking precedence.

    If the target URI has a query string, the default behavior will be observed - that is, the original query string will be discarded and replaced with the query string in the RewriteRule target URI.

    top

    QSL|qslast

    By default, the first (left-most) question mark in the substitution delimits the path from the query string. Using the [QSL] flag instructs RewriteRule to instead split the two components using the last (right-most) question mark.

    This is useful when mapping to files that have literal question marks in their filename. If no query string is used in the substitution, a question mark can be appended to it in combination with this flag.

    This flag is available in version 2.4.19 and later.

    top

    R|redirect

    Use of the [R] flag causes a HTTP redirect to be issued to the browser. If a fully-qualified URL is specified (that is, including http://servername/) then a redirect will be issued to that location. Otherwise, the current protocol, servername, and port number will be used to generate the URL sent with the redirect.

    Any valid HTTP response status code may be specified, using the syntax [R=305], with a 302 status code being used by default if none is specified. The status code specified need not necessarily be a redirect (3xx) status code. However, if a status code is outside the redirect range (300-399) then the substitution string is dropped entirely, and rewriting is stopped as if the L were used.

    In addition to response status codes, you may also specify redirect status using their symbolic names: temp (default), permanent, or seeother.

    You will almost always want to use [R] in conjunction with [L] (that is, use [R,L]) because on its own, the [R] flag prepends http://thishost[:thisport] to the URI, but then passes this on to the next rule in the ruleset, which can often result in 'Invalid URI in request' warnings.

    top

    S|skip

    The [S] flag is used to skip rules that you don't want to run. The syntax of the skip flag is [S=N], where N signifies the number of rules to skip (provided the RewriteRule matches). This can be thought of as a goto statement in your rewrite ruleset. In the following example, we only want to run the RewriteRule if the requested URI doesn't correspond with an actual file.

    # Is the request for a non-existent file?
    RewriteCond "%{REQUEST_FILENAME}" "!-f"
    RewriteCond "%{REQUEST_FILENAME}" "!-d"
    # If so, skip these two RewriteRules
    RewriteRule ".?" "-" [S=2]
    
    RewriteRule "(.*\.gif)" "images.php?$1"
    RewriteRule "(.*\.html)" "docs.php?$1"

    This technique is useful because a RewriteCond only applies to the RewriteRule immediately following it. Thus, if you want to make a RewriteCond apply to several RewriteRules, one possible technique is to negate those conditions and add a RewriteRule with a [Skip] flag. You can use this to make pseudo if-then-else constructs: The last rule of the then-clause becomes skip=N, where N is the number of rules in the else-clause:

    # Does the file exist?
    RewriteCond "%{REQUEST_FILENAME}" "!-f"
    RewriteCond "%{REQUEST_FILENAME}" "!-d"
    # Create an if-then-else construct by skipping 3 lines if we meant to go to the "else" stanza.
    RewriteRule ".?" "-" [S=3]
    
    # IF the file exists, then:
        RewriteRule "(.*\.gif)" "images.php?$1"
        RewriteRule "(.*\.html)" "docs.php?$1"
        # Skip past the "else" stanza.
        RewriteRule ".?" "-" [S=1]
    # ELSE...
        RewriteRule "(.*)" "404.php?file=$1"
    # END

    It is probably easier to accomplish this kind of configuration using the <If>, <ElseIf>, and <Else> directives instead.

    top

    T|type

    Sets the MIME type with which the resulting response will be sent. This has the same effect as the AddType directive.

    For example, you might use the following technique to serve Perl source code as plain text, if requested in a particular way:

    # Serve .pl files as plain text
    RewriteRule "\.pl$" "-" [T=text/plain]

    Or, perhaps, if you have a camera that produces jpeg images without file extensions, you could force those images to be served with the correct MIME type by virtue of their file names:

    # Files with 'IMG' in the name are jpg images.
    RewriteRule "IMG" "-" [T=image/jpg]

    Please note that this is a trivial example, and could be better done using <FilesMatch> instead. Always consider the alternate solutions to a problem before resorting to rewrite, which will invariably be a less efficient solution than the alternatives.

    If used in per-directory context, use only - (dash) as the substitution for the entire round of mod_rewrite processing, otherwise the MIME-type set with this flag is lost due to an internal re-processing (including subsequent rounds of mod_rewrite processing). The L flag can be useful in this context to end the current round of mod_rewrite processing.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/index.html.tr.utf80000644000000000000500000001554313412755316020447 0ustar rootsrc Apache mod_rewrite - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache mod_rewrite

    Mevcut Diller:  en  |  fr  |  tr  |  zh-cn 

    mod_rewrite modülü gelen URL isteklerinde değişiklik yapabilmek için düzenli ifade kurallarına dayalı, devingen bir yol sunar. Böylece, keyfi URL'leri dahili URL yapınızla kolayca eşleyebilirsiniz.

    Gerçekten esnek ve güçlü bir URL kurgulama mekanizması oluşturmak için sınısız sayıda kural ve her kural için de sınırsız sayıda koşul destekler. URL değişiklikleri çeşitli sınamalara dayanır; sunucu değişkenleri, HTTP başlıkları, ortam değişkenleri, zaman damgaları hatta çeşitli biçimlerde harici veritabanı sorguları bile bu amaçla kullanılabilir.

    Yeniden yazma kuralları URL’lerin tamamında (path-info kısmı ve sorgu dizgesi dahil) hem sunucu bağlamında (httpd.conf) hem sanal konaklar bağlamında (<VirtualHost> bölümleri), hem de dizin bağlamında (.htaccess dosyaları ve <Directory> bölümleri) çalışır ve URL üzerinde sorgu dizgesi bölümleri bile oluşturabilir. Kurallara atadığınız seçeneklere bağlı olarak, yeniden yazılan URL sonuçta dahili işlemlerde, harici yönlendirmelerde ve vekalet işlemlerinde kullanılabilir.

    mod_rewrite modülü çok güçlü olduğundan, gerçekten çok karmaşık olabilir. Bu belge, başvuru belgelerinin tamamlayıcısı olup karmaşıklığı biraz azaltmaya çalışır ve mod_rewrite ile elde edilebilen ortak senaryoların oldukça açıklamalı örneklerini sağlar. Fakat ayrıca, mod_rewrite modülünü kullanmamanız, yerine standart Apache özelliklerini kullanmanız gereken durumları da göstermeye, böylece gereksiz karmaşıklıktan kurtulmanızı sağlamaya çalıştık.

    Mevcut Diller:  en  |  fr  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/rewrite/access.html0000644000000000000500000000032013362070302017240 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: access.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: access.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/rewrite/proxy.html0000644000000000000500000000031613362070302017165 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: proxy.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: proxy.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/rewrite/intro.html0000644000000000000500000000031613362070302017137 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: intro.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: intro.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/rewrite/avoid.html0000644000000000000500000000031613362070302017106 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: avoid.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: avoid.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/rewrite/tech.html.fr.utf80000644000000000000500000003431713412755316020245 0ustar rootsrc Détails techniques sur le module Apache mod_rewrite - Serveur HTTP Apache Version 2.4
    <-

    Détails techniques sur le module Apache mod_rewrite

    Langues Disponibles:  en  |  fr 

    Ce document passe en revue certains détails techniques à propos du module mod_rewrite et de la mise en correspondance des URLs

    top

    Phases de l'API

    Le traitement des requêtes par le serveur HTTP Apache se déroule en plusieurs phases. Au cours de chaque phase, un ou plusieurs modules peuvent être appelés pour traiter la partie concernée du cycle de vie de la requête. Les différentes phases peuvent consister en traduction d'URL en nom de fichier, authentification, autorisation, gestion de contenu ou journalisation (la liste n'est pas exhaustive).

    mod_rewrite agit dans deux de ces phases (ou accroches - hooks - comme on les nomme souvent) pour la réécriture des URLs.

    Tout d'abord, il utilise le hook traduction URL vers nom de fichier qui intervient après la lecture de la requête HTTP, mais avant le processus d'autorisation. Ensuite, il utilise le hook Fixup, qui intervient après les phases d'autorisation, après la lecture des fichiers de configuration de niveau répertoire (fichiers .htaccess), mais avant l'appel du gestionnaire de contenu.

    Ainsi, lorsqu'une requête arrive et une fois le serveur correspondant ou le serveur virtuel déterminé, le moteur de réécriture commence à traiter toute directive apparaissant dans la configuration de niveau serveur (autrement dit dans le fichier de configuration principal du serveur et les sections <Virtualhost>). Tout ce processus s'exécute au cours de la phase de traduction URL vers nom de fichier.

    Quelques étapes plus loin, une fois les répertoires de données finaux trouvés, les directives de configuration de niveau répertoire (fichiers .htaccess et sections <Directory>) sont appliquées. Ce processus s'exécute au cours de la phase Fixup.

    Dans tous ces cas, mod_rewrite réécrit le REQUEST_URI soit vers une nouvelle URL, soit vers un nom de fichier.

    Dans un contexte de niveau répertoire (autrement dit dans les fichiers .htaccess et les sections Directory), les règles de réécriture s'appliquent après la traduction de l'URL en nom de fichier. C'est pourquoi le chemin URL auquel mod_rewrite compare initialement les directives RewriteRule est le chemin complet vers le nom de fichier traduit amputé de la partie répertoires (y compris le dernier slash).

    Un exemple : si les règles se trouvent dans /var/www/foo/.htaccess et si une requête pour /foo/bar/baz est traité, une expression comme ^bar/baz$ correspondra.

    Si une substitution intervient dans un contexte de répertoire, une nouvelle sous-requête interne est générée avec la nouvelle URL, ce qui relance le traitement des phases de la requête. Si la substitution est un chemin relatif, la directive RewriteBase détermine le chemin URL devant préfixer cette substitution. Dans un contexte de répertoire, il faut s'assurer de créer des règles qui n'effectueront pas de substitution au cours d'une passe ultérieure du processus de réécriture au niveau répertoire afin d'éviter les bouclages . Voir Bouclage dans le processus de réécriture pour une discussion plus détaillée à propos de ce problème.

    En conséquence de cette manipulation de l'URL , vous devrez pensez à confectionner différemment vos règles de réécriture dans un contexte de niveau répertoire. En particulier, rappelez-vous que le chemin de répertoire sera absent de l'URL que vos règles de réécriture verront. Voici quelques exemples qui permettront de clarifier les choses :

    Position de la règle Règle
    Section VirtualHost RewriteRule "^/images/(.+)\.jpg" "/images/$1.gif"
    Fichier .htaccess à la racine des documents RewriteRule "^images/(.+)\.jpg" "images/$1.gif"
    Fichier .htaccess dans le répertoire images RewriteRule "^(.+)\.jpg" "$1.gif"

    Pour une étude plus approfondie de la manière dont mod_rewrite manipule les URLs dans les différents contextes, vous pouvez consulter les entrées du journal générées au cours du processus de réécriture.

    top

    Traitement du jeu de règles

    Maintenant, quand mod_rewrite se lance dans ces deux phases de l'API, il lit le jeu de règles configurées depuis la structure contenant sa configuration (qui a été elle-même créée soit au démarrage d'Apache pour le contexte du serveur, soit lors du parcours des répertoires par le noyau d'Apache pour le contexte de répertoire). Puis le moteur de réécriture est démarré avec le jeu de règles contenu (une ou plusieurs règles associées à leurs conditions). En lui-même, le mode opératoire du moteur de réécriture d'URLs est exactement le même dans les deux contextes de configuration. Seul le traitement du résultat final diffère.

    L'ordre dans lequel les règles sont définies est important car le moteur de réécriture les traite selon une chronologie particulière (et pas très évidente). Le principe est le suivant : le moteur de réécriture traite les règles (les directives RewriteRule) les unes à la suite des autres, et lorsqu'une règle s'applique, il parcourt les éventuelles conditions (directives RewriteConddirectives) associées. Pour des raisons historiques, les conditions précèdent les règles, si bien que le déroulement du contrôle est un peu compliqué. Voir la figure 1 pour plus de détails.

    Flux des comparaisons des directives RewriteRule et RewriteCond
    Figure 1:Déroulement du contrôle à travers le jeu de règles de réécriture

    L'URL est tout d'abord comparée au Modèle de chaque règle. Lorsqu'une règle ne s'applique pas, mod_rewrite stoppe immédiatement le traitement de cette règle et passe à la règle suivante. Si l'URL correspond au Modèle, mod_rewrite recherche la présence de conditions correspondantes (les directives Rewritecond apparaissant dans la configuration juste avant les règles de réécriture). S'il n'y en a pas, mod_rewrite remplace l'URL par une chaîne élaborée à partir de la chaîne de Substitution, puis passe à la règle suivante. Si des conditions sont présentes, mod_rewrite lance un bouclage secondaire afin de les traiter selon l'ordre dans lequel elles sont définies. La logique de traitement des conditions est différente : on ne compare pas l'URL à un modèle. Une chaîne de test TestString est tout d'abord élaborée en développant des variables, des références arrières, des recherches dans des tables de correspondances, etc..., puis cette chaîne de test est comparée au modèle de condition CondPattern. Si le modèle ne correspond pas, les autres conditions du jeu ne sont pas examinées et la règle correspondante ne s'applique pas. Si le modèle correspond, la condition suivante est examinée et ainsi de suite jusqu'à la dernière condition. Si toutes les conditions sont satisfaites, le traitement de la règle en cours se poursuit avec le remplacement de l'URL par la chaîne de Substitution.

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/vhosts.html.en0000644000000000000500000003026013412755316017747 0ustar rootsrc Dynamic mass virtual hosts with mod_rewrite - Apache HTTP Server Version 2.4
    <-

    Dynamic mass virtual hosts with mod_rewrite

    Available Languages:  en  |  fr 

    This document supplements the mod_rewrite reference documentation. It describes how you can use mod_rewrite to create dynamically configured virtual hosts.

    mod_rewrite is not the best way to configure virtual hosts. You should first consider the alternatives before resorting to mod_rewrite. See also the "how to avoid mod_rewrite document.
    top

    Virtual Hosts For Arbitrary Hostnames

    Description:

    We want to automatically create a virtual host for every hostname which resolves in our domain, without having to create new VirtualHost sections.

    In this recipe, we assume that we'll be using the hostname www.SITE.example.com for each user, and serve their content out of /home/SITE/www.

    Solution:
    RewriteEngine on
    
    RewriteMap    lowercase int:tolower
    
    RewriteCond   "${lowercase:%{HTTP_HOST}}"   "^www\.([^.]+)\.example\.com$"
    RewriteRule   "^(.*)" "/home/%1/www$1"
    Discussion
    You will need to take care of the DNS resolution - Apache does not handle name resolution. You'll need either to create CNAME records for each hostname, or a DNS wildcard record. Creating DNS records is beyond the scope of this document.

    The internal tolower RewriteMap directive is used to ensure that the hostnames being used are all lowercase, so that there is no ambiguity in the directory structure which must be created.

    Parentheses used in a RewriteCond are captured into the backreferences %1, %2, etc, while parentheses used in RewriteRule are captured into the backreferences $1, $2, etc.

    As with many techniques discussed in this document, mod_rewrite really isn't the best way to accomplish this task. You should, instead, consider using mod_vhost_alias instead, as it will much more gracefully handle anything beyond serving static files, such as any dynamic content, and Alias resolution.

    top

    Dynamic Virtual Hosts Using mod_rewrite

    This extract from httpd.conf does the same thing as the first example. The first half is very similar to the corresponding part above, except for some changes, required for backward compatibility and to make the mod_rewrite part work properly; the second half configures mod_rewrite to do the actual work.

    Because mod_rewrite runs before other URI translation modules (e.g., mod_alias), mod_rewrite must be told to explicitly ignore any URLs that would have been handled by those modules. And, because these rules would otherwise bypass any ScriptAlias directives, we must have mod_rewrite explicitly enact those mappings.

    # get the server name from the Host: header
    UseCanonicalName Off
    
    # splittable logs
    LogFormat "%{Host}i %h %l %u %t \"%r\" %s %b" vcommon
    CustomLog "logs/access_log" vcommon
    
    <Directory "/www/hosts">
        # ExecCGI is needed here because we can't force
        # CGI execution in the way that ScriptAlias does
        Options FollowSymLinks ExecCGI
    </Directory>
    
    RewriteEngine On
    
    # a ServerName derived from a Host: header may be any case at all
    RewriteMap  lowercase  int:tolower
    
    ## deal with normal documents first:
    # allow Alias "/icons/" to work - repeat for other aliases
    RewriteCond  "%{REQUEST_URI}"  "!^/icons/"
    # allow CGIs to work
    RewriteCond  "%{REQUEST_URI}"  "!^/cgi-bin/"
    # do the magic
    RewriteRule  "^/(.*)$"  "/www/hosts/${lowercase:%{SERVER_NAME}}/docs/$1"
    
    ## and now deal with CGIs - we have to force a handler
    RewriteCond  "%{REQUEST_URI}"  "^/cgi-bin/"
    RewriteRule  "^/(.*)$"  "/www/hosts/${lowercase:%{SERVER_NAME}}/cgi-bin/$1"  [H=cgi-script]
    top

    Using a Separate Virtual Host Configuration File

    This arrangement uses more advanced mod_rewrite features to work out the translation from virtual host to document root, from a separate configuration file. This provides more flexibility, but requires more complicated configuration.

    The vhost.map file should look something like this:

    customer-1.example.com /www/customers/1
    customer-2.example.com /www/customers/2
    # ...
    customer-N.example.com /www/customers/N

    The httpd.conf should contain the following:

    RewriteEngine on
    
    RewriteMap   lowercase  int:tolower
    
    # define the map file
    RewriteMap   vhost      "txt:/www/conf/vhost.map"
    
    # deal with aliases as above
    RewriteCond  "%{REQUEST_URI}"               "!^/icons/"
    RewriteCond  "%{REQUEST_URI}"               "!^/cgi-bin/"
    RewriteCond  "${lowercase:%{SERVER_NAME}}"  "^(.+)$"
    # this does the file-based remap
    RewriteCond  "${vhost:%1}"                  "^(/.*)$"
    RewriteRule  "^/(.*)$"                      "%1/docs/$1"
    
    RewriteCond  "%{REQUEST_URI}"               "^/cgi-bin/"
    RewriteCond  "${lowercase:%{SERVER_NAME}}"  "^(.+)$"
    RewriteCond  "${vhost:%1}"                  "^(/.*)$"
    RewriteRule  "^/cgi-bin/(.*)$"                      "%1/cgi-bin/$1" [H=cgi-script]

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/index.html.zh-cn.utf80000644000000000000500000001434413412755316021037 0ustar rootsrc Apache mod_rewrite - Apache HTTP æœåС噍 版本 2.4
    <-

    Apache mod_rewrite

    å¯ç”¨è¯­è¨€:  en  |  fr  |  tr  |  zh-cn 

    此翻译å¯èƒ½è¿‡æœŸã€‚è¦äº†è§£æœ€è¿‘的更改,请阅读英文版。

    mod_rewrite æä¾›äº†åŸºäºŽæ­£åˆ™è¡¨è¾¾å¼è§„则动æ€ä¿®æ”¹ä¼ å…¥çš„请求的 URL 的方法。 è¿™å…è®¸ä½ ä»¥è‡ªå·±å–œæ¬¢çš„ä»»æ„æ–¹æ³•æ˜ å°„ä»»æ„ URL 到你的内部 URL 结构。

    å®ƒæ”¯æŒæ— é™çš„规则,以åŠä¸ºæ¯ä¸ªè§„则附加æ¡ä»¶ï¼Œä»Žè€Œæä¾›äº†ä¸€ä¸ªçœŸæ­£çµæ´»ä¸”强大的 URL æ“作机制。URL æ“作å¯ä»¥ä¾èµ–于å„ç§æµ‹è¯•,例如æœåС噍å˜é‡ï¼ŒçŽ¯å¢ƒå˜é‡ï¼ŒHTTP 头,时戳,甚至外部数æ®åº“æŸ¥è¯¢ç­‰ï¼Œä»¥ä¾¿å®Œæˆ URL å•元匹é…。

    这个模å—在æœåŠ¡å™¨ä¸Šä¸‹æ–‡ (httpd.conf),虚拟主机上下文 (<VirtualHost> 指令å—),目录上下文 (.htaccess 文件和 <Directory> 指令å—) 对完整的 URL (包å«ç›®å½•ä¿¡æ¯éƒ¨åˆ†å’ŒæŸ¥è¯¢å­—符串部分) æ“作。 é‡å†™ç»“æžœå¯ä»¥å¯¼è‡´æ–°çš„规则处ç†ï¼Œå†…部的åŽç»­å¤„ç†ï¼Œå¤–部请求é‡å®šå‘,甚至é€è¿‡å†…部代ç†ï¼Œ è¿™å–决于你为规则附加的标志。

    既然 mod_rewrite è¿™ä¹ˆå¼ºå¤§ï¼Œå®ƒå½“ç„¶æ˜¯ç›¸å½“å¤æ‚。这篇文档作为å‚考手册的补充,试图å‡è½»ä¸€äº›å¤æ‚性, æä¾›ä½ å¯èƒ½ä½¿ç”¨ mod_rewrite 的常è§åœºæ™¯çš„æœ‰å……分注释的例å­ã€‚ 但是,我们也试图告诉你,在什么时候你ä¸åº”当使用 mod_rewrite, å¯ä»¥ä½¿ç”¨å…¶å®ƒæ ‡å‡†çš„ Apache 特性æ¥è¾¾åˆ°ç›®çš„,以é¿å…æ— è°“çš„å¤æ‚性。

    å¯ç”¨è¯­è¨€:  en  |  fr  |  tr  |  zh-cn 

    httpd-2.4.41/docs/manual/rewrite/index.html0000644000000000000500000000057613362070302017123 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: index.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: index.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: index.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 URI: index.html.zh-cn.utf8 Content-Language: zh-cn Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/rewrite/intro.html.en0000644000000000000500000005243113412755316017560 0ustar rootsrc Apache mod_rewrite Introduction - Apache HTTP Server Version 2.4
    <-

    Apache mod_rewrite Introduction

    Available Languages:  en  |  fr 

    This document supplements the mod_rewrite reference documentation. It describes the basic concepts necessary for use of mod_rewrite. Other documents go into greater detail, but this doc should help the beginner get their feet wet.

    top

    Introduction

    The Apache module mod_rewrite is a very powerful and sophisticated module which provides a way to do URL manipulations. With it, you can do nearly all types of URL rewriting that you may need. It is, however, somewhat complex, and may be intimidating to the beginner. There is also a tendency to treat rewrite rules as magic incantation, using them without actually understanding what they do.

    This document attempts to give sufficient background so that what follows is understood, rather than just copied blindly.

    Remember that many common URL-manipulation tasks don't require the full power and complexity of mod_rewrite. For simple tasks, see mod_alias and the documentation on mapping URLs to the filesystem.

    Finally, before proceeding, be sure to configure mod_rewrite's log level to one of the trace levels using the LogLevel directive. Although this can give an overwhelming amount of information, it is indispensable in debugging problems with mod_rewrite configuration, since it will tell you exactly how each rule is processed.

    top

    Regular Expressions

    mod_rewrite uses the Perl Compatible Regular Expression vocabulary. In this document, we do not attempt to provide a detailed reference to regular expressions. For that, we recommend the PCRE man pages, the Perl regular expression man page, and Mastering Regular Expressions, by Jeffrey Friedl.

    In this document, we attempt to provide enough of a regex vocabulary to get you started, without being overwhelming, in the hope that RewriteRules will be scientific formulae, rather than magical incantations.

    Regex vocabulary

    The following are the minimal building blocks you will need, in order to write regular expressions and RewriteRules. They certainly do not represent a complete regular expression vocabulary, but they are a good place to start, and should help you read basic regular expressions, as well as write your own.

    Character Meaning Example
    .Matches any single characterc.t will match cat, cot, cut, etc.
    +Repeats the previous match one or more timesa+ matches a, aa, aaa, etc
    *Repeats the previous match zero or more times.a* matches all the same things a+ matches, but will also match an empty string.
    ?Makes the match optional. colou?r will match color and colour.
    ^Called an anchor, matches the beginning of the string^a matches a string that begins with a
    $The other anchor, this matches the end of the string.a$ matches a string that ends with a.
    ( )Groups several characters into a single unit, and captures a match for use in a backreference.(ab)+ matches ababab - that is, the + applies to the group. For more on backreferences see below.
    [ ]A character class - matches one of the charactersc[uoa]t matches cut, cot or cat.
    [^ ]Negative character class - matches any character not specifiedc[^/]t matches cat or c=t but not c/t

    In mod_rewrite the ! character can be used before a regular expression to negate it. This is, a string will be considered to have matched only if it does not match the rest of the expression.

    Regex Back-Reference Availability

    One important thing here has to be remembered: Whenever you use parentheses in Pattern or in one of the CondPattern, back-references are internally created which can be used with the strings $N and %N (see below). These are available for creating the Substitution parameter of a RewriteRule or the TestString parameter of a RewriteCond.

    Captures in the RewriteRule patterns are (counterintuitively) available to all preceding RewriteCond directives, because the RewriteRule expression is evaluated before the individual conditions.

    Figure 1 shows to which locations the back-references are transferred for expansion as well as illustrating the flow of the RewriteRule, RewriteCond matching. In the next chapters, we will be exploring how to use these back-references, so do not fret if it seems a bit alien to you at first.

    Flow of RewriteRule and RewriteCond matching
    Figure 1: The back-reference flow through a rule.
    In this example, a request for /test/1234 would be transformed into /admin.foo?page=test&id=1234&host=admin.example.com.

    top

    RewriteRule Basics

    A RewriteRule consists of three arguments separated by spaces. The arguments are

    1. Pattern: which incoming URLs should be affected by the rule;
    2. Substitution: where should the matching requests be sent;
    3. [flags]: options affecting the rewritten request.

    The Pattern is a regular expression. It is initially (for the first rewrite rule or until a substitution occurs) matched against the URL-path of the incoming request (the part after the hostname but before any question mark indicating the beginning of a query string) or, in per-directory context, against the request's path relative to the directory for which the rule is defined. Once a substitution has occurred, the rules that follow are matched against the substituted value.

    Syntax of the RewriteRule directive
    Figure 2: Syntax of the RewriteRule directive.

    The Substitution can itself be one of three things:

    A full filesystem path to a resource
    RewriteRule "^/games" "/usr/local/games/web"

    This maps a request to an arbitrary location on your filesystem, much like the Alias directive.

    A web-path to a resource
    RewriteRule "^/foo$" "/bar"

    If DocumentRoot is set to /usr/local/apache2/htdocs, then this directive would map requests for http://example.com/foo to the path /usr/local/apache2/htdocs/bar.

    An absolute URL
    RewriteRule "^/product/view$" "http://site2.example.com/seeproduct.html" [R]

    This tells the client to make a new request for the specified URL.

    The Substitution can also contain back-references to parts of the incoming URL-path matched by the Pattern. Consider the following:

    RewriteRule "^/product/(.*)/view$" "/var/web/productdb/$1"

    The variable $1 will be replaced with whatever text was matched by the expression inside the parenthesis in the Pattern. For example, a request for http://example.com/product/r14df/view will be mapped to the path /var/web/productdb/r14df.

    If there is more than one expression in parenthesis, they are available in order in the variables $1, $2, $3, and so on.

    top

    Rewrite Flags

    The behavior of a RewriteRule can be modified by the application of one or more flags to the end of the rule. For example, the matching behavior of a rule can be made case-insensitive by the application of the [NC] flag:

    RewriteRule "^puppy.html" "smalldog.html" [NC]

    For more details on the available flags, their meanings, and examples, see the Rewrite Flags document.

    top

    Rewrite Conditions

    One or more RewriteCond directives can be used to restrict the types of requests that will be subject to the following RewriteRule. The first argument is a variable describing a characteristic of the request, the second argument is a regular expression that must match the variable, and a third optional argument is a list of flags that modify how the match is evaluated.

    Syntax of the RewriteCond directive
    Figure 3: Syntax of the RewriteCond directive

    For example, to send all requests from a particular IP range to a different server, you could use:

    RewriteCond "%{REMOTE_ADDR}" "^10\.2\."
    RewriteRule "(.*)" "http://intranet.example.com$1"

    When more than one RewriteCond is specified, they must all match for the RewriteRule to be applied. For example, to deny requests that contain the word "hack" in their query string, unless they also contain a cookie containing the word "go", you could use:

    RewriteCond "%{QUERY_STRING}" "hack"
    RewriteCond "%{HTTP_COOKIE}" "!go"
    RewriteRule "." "-" [F]

    Notice that the exclamation mark specifies a negative match, so the rule is only applied if the cookie does not contain "go".

    Matches in the regular expressions contained in the RewriteConds can be used as part of the Substitution in the RewriteRule using the variables %1, %2, etc. For example, this will direct the request to a different directory depending on the hostname used to access the site:

    RewriteCond "%{HTTP_HOST}" "(.*)"
    RewriteRule "^/(.*)" "/sites/%1/$1"

    If the request was for http://example.com/foo/bar, then %1 would contain example.com and $1 would contain foo/bar.

    top

    Rewrite maps

    The RewriteMap directive provides a way to call an external function, so to speak, to do your rewriting for you. This is discussed in greater detail in the RewriteMap supplementary documentation.

    top

    .htaccess files

    Rewriting is typically configured in the main server configuration setting (outside any <Directory> section) or inside <VirtualHost> containers. This is the easiest way to do rewriting and is recommended. It is possible, however, to do rewriting inside <Directory> sections or .htaccess files at the expense of some additional complexity. This technique is called per-directory rewrites.

    The main difference with per-server rewrites is that the path prefix of the directory containing the .htaccess file is stripped before matching in the RewriteRule. In addition, the RewriteBase should be used to assure the request is properly mapped.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/advanced.html0000644000000000000500000000032413362070302017550 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: advanced.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: advanced.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/rewrite/htaccess.html.en0000644000000000000500000001277513412755316020231 0ustar rootsrc mod_rewrite and .htaccess files - Apache HTTP Server Version 2.4
    <-

    mod_rewrite and .htaccess files

    Available Languages:  en  |  fr 

    This document supplements the mod_rewrite reference documentation. It describes the way that the rules change when you use mod_rewrite in .htaccess files, and how to deal with these changes.

    Available Languages:  en  |  fr 

    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/access.html.fr.utf80000644000000000000500000003553513412755316020566 0ustar rootsrc Utiliser mod_rewrite pour le contrôle d'accès - Serveur HTTP Apache Version 2.4
    <-

    Utiliser mod_rewrite pour le contrôle d'accès

    Langues Disponibles:  en  |  fr 

    Ce document est un complément à la documentation de référence de mod_rewrite. Il explique comment utiliser mod_rewrite pour contrôler l'accès à diverses ressources, ainsi que d'autres techniques en rapport. Il contient de nombreux exemples d'utilisation courante de mod_rewrite avec une description détaillée de leur fonctionnement.

    Vous devez vous attacher à comprendre le fonctionnement des exemples, car la plupart d'entre eux ne fonctionneront pas sur votre système si vous vous contentez de les copier/coller dans vos fichiers de configuration.
    top

    Blocage du référencement à chaud (Hotlinking) d'images

    Description :

    Cette technique vous permet d'interdire à d'autres sites d'inclure directement vos images dans leurs pages. On fait souvent référence à cette pratique sous le nom de référencement à chaud (Hotlinking) qui entraîne l'utilisation de votre bande passante pour servir des contenus faisant partie du site de quelqu'un d'autre.

    Solution :

    Cette technique repose sur la valeur de la variable optionnelle HTTP_REFERER. Certaines personnes pourront donc contourner cette limitation. Pour la plupart des utilisateurs cependant, la requête échouera, en ce sens que l'image ne sera pas affichée depuis le site tiers.

    Il y a plusieurs manières de gérer cette situation.

    Dans le premier exemple, nous rejetons tout simplement la requête si elle ne provenait pas d'une page appartenant à notre site. Pour les besoins de cet exemple, nous supposons que le nom de votre site est www.example.com.

    RewriteCond "%{HTTP_REFERER}" "!^$"
    RewriteCond "%{HTTP_REFERER}" "!www.example.com" [NC]
    RewriteRule "\.(gif|jpg|png)$"    "-"   [F,NC]

    Dans le second exemple, plutôt que de rejeter la requête, nous affichons une autre image à la place.

    RewriteCond "%{HTTP_REFERER}" "!^$"
    RewriteCond "%{HTTP_REFERER}" "!www.example.com" [NC]
    RewriteRule "\.(gif|jpg|png)$"    "/images/go-away.png"   [R,NC]

    Dans le troisième exemple, nous redirigeons la requête vers une image appartenant à un autre site.

    RewriteCond "%{HTTP_REFERER}" "!^$"
    RewriteCond "%{HTTP_REFERER}" "!www.example.com" [NC]
    RewriteRule "\.(gif|jpg|png)$" "http://other.example.com/image.gif"   [R,NC]

    De tous ces exemples, les deux derniers semblent les plus efficaces pour faire en sorte que les gens arrêtent de référencer vos images à chaud, car il ne verront pas les images qu'ils s'attendent à voir.

    Discussion :

    Si vous ne voulez pas rediriger la requête, mais simplement interdire l'accès à la ressource, vous pouvez y parvenir sans utiliser mod_rewrite :

    SetEnvIf Referer "example\.com" localreferer
    <FilesMatch "\.(jpg|png|gif)$">
        Require env localreferer
    </FilesMatch>
    top

    Blocage des robots

    Description :

    Dans cet exemple, nous allons discuter d'une méthode permettant de bloquer les requêtes persistentes en provenance d'un robot particulier, ou d'un navigateur.

    La méthode classique pour exclure un robot consiste à définir un fichier, /robots.txt qui spécifie les parties de votre site web pour lesquelles vous voulez exclure les robots. Malheureusement, certains robots ne tiennent pas compte de ces fichiers.

    Notez qu'il existe des méthodes d'exclusion qui n'utilisent pas mod_rewrite. Notez aussi que toute technique qui repose sur le contenu de la chaîne client USER_AGENT peut être contournée très facilement car cette chaîne peut être modifiée.

    Solution :

    On utilise un jeu de règles qui spécifie le répertoire à protéger, ainsi que la chaîne client USER_AGENT qui identifie le robot malin ou envahissant.

    Dans cet exemple, nous bloquons un robot nommé Vilain_Robot pour le répertoire /secret/fichiers. Si vous voulez bloquer ce client seulement depuis une source particulière, vous pouvez aussi spécifier un intervalle d'adresses IP.

    RewriteCond "%{HTTP_USER_AGENT}"   "^NameOfBadRobot"
    RewriteCond "%{REMOTE_ADDR}"       "=123\.45\.67\.[8-9]"
    RewriteRule "^/secret/files/"   "-"   [F]
    Discussion :

    Vous pouvez cependant parvenir au même résultat sans utiliser mod_rewrite via la méthode alternative suivante :

    SetEnvIfNoCase User-Agent "^NameOfBadRobot" goaway
    <Location "/secret/files">
        <RequireAll>
            Require all granted
            Require not env goaway
        </RequireAll>
    </Location>

    Comme indiqué plus haut, il est aisé de contourner cette technique, simplement en modifiant le contenu de l'en-tête USER_AGENT. Si vous subissez une attaque en règle, vous allez devoir réfléchir à un blocage à un niveau supérieur, par exemple une règle de filtrage de votre pare-feu.

    top

    Rejet des clients contenus dans une liste noire

    Description :

    Nous voulons interdire l'accès à notre serveur aux clients contenus dans une liste noire similaire à hosts.deny.

    Solution :
    RewriteEngine on
    RewriteMap    hosts-deny  "txt:/path/to/hosts.deny"
    RewriteCond   "${hosts-deny:%{REMOTE_ADDR}|NOT-FOUND}" "!=NOT-FOUND" [OR]
    RewriteCond   "${hosts-deny:%{REMOTE_HOST}|NOT-FOUND}" "!=NOT-FOUND"
    RewriteRule   "^"  "-"  [F]

    ##
    ## hosts.deny
    ##
    ## ATTENTION! Ceci est une table de correspondances, non une liste,
    ## même si elle est traitée comme telle. mod_rewrite
    ## l'interprète comme une liste de paires clé/valeur, et
    ## chaque entrée doit au moins posséder une valeur par
    ## défaut "-".

    193.102.180.41 -
    bsdti1.sdm.de -
    192.76.162.40 -

    Discussion :

    La seconde condition RewriteCond présuppose que HostNameLookups est défini à On, de façon à ce que les adresses IP des clients puissent être résolues. Dans le cas contraire, vous devez supprimer la seconde condition, ainsi que le drapeau [OR] de la première.

    top

    Aiguillage basé sur l'en-tête Referer

    Description :

    Redirige les requêtes en fonction du Referer de provenance de la requête, avec des cibles différentes pour chaque Referer.

    Solution :

    Le jeu de règles suivant utilise un fichier de correspondances pour associer chaque Referer à une cible de redirection.

    RewriteMap  deflector "txt:/path/to/deflector.map"
    
    RewriteCond "%{HTTP_REFERER}" !=""
    RewriteCond "${deflector:%{HTTP_REFERER}}" "=-"
    RewriteRule "^" "%{HTTP_REFERER}" [R,L]
    
    RewriteCond "%{HTTP_REFERER}" !=""
    RewriteCond "${deflector:%{HTTP_REFERER}|NOT-FOUND}" "!=NOT-FOUND"
    RewriteRule "^" "${deflector:%{HTTP_REFERER}}" [R,L]

    Le fichier de correspondances contient les cibles de redirection associées à chaque Referer, ou, si nous voulons simplement rediriger les requêtes vers leur Referer, un "-" est inscrit dans le fichier de correspondances :

    ##
    ##  deflector.map
    ##
    
    http://badguys.example.com/bad/index.html    -
    http://badguys.example.com/bad/index2.html   -
    http://badguys.example.com/bad/index3.html   http://somewhere.example.com/

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/rewrite/remapping.html0000644000000000000500000000032613362070302017767 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: remapping.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: remapping.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/rewrite/vhosts.html.fr.utf80000644000000000000500000003231613412755316020645 0ustar rootsrc Hébergement virtuel de masse avec mod_rewrite - Serveur HTTP Apache Version 2.4
    <-

    Hébergement virtuel de masse avec mod_rewrite

    Langues Disponibles:  en  |  fr 

    Ce document est un complément à la documentation de référence du module mod_rewrite. Il décrit comment créer des serveurs virtuels dynamiquement configurés en utilisant mod_rewrite.

    L'utilisation de mod_rewrite n'est pas la meilleure méthode pour configurer des serveurs virtuels. Vous devez dans un premier temps tenter de résoudre votre problème via ces d'autres méthodes avant d'avoir recours à mod_rewrite. Voir aussi le document Comment éviter l'utilisation de mod_rewrite.
    top

    Serveurs virtuels pour des noms d'hôtes arbitraires

    Description :

    Nous voulons créer automatiquement un serveur virtuel pour tout nom d'hôte qui peut être résolu dans notre domaine, sans avoir à créer de nouvelle section VirtualHost.

    Dans cet exemple, nous supposons que nous utilisons le nom d'hôte www.SITE.example.com pour chaque utilisateur, et que nous servons leur contenu depuis /home/SITE/www.

    Solution :
    RewriteEngine on
    
    RewriteMap    lowercase int:tolower
    
    RewriteCond   "${lowercase:%{HTTP_HOST}}" "^www\.([^.]+)\.example\.com$"
    RewriteRule   "^(.*)" "/home/%1/www$1"
    Discussion
    Vous devez vérifier le bon fonctionnement de la résolution DNS - Apache ne gère pas la résolution de nom. Vous devrez créer soit des enregistrements CNAME pour chaque nom d'hôte, soit un enregistrement DNS avec caractères génériques. La création des enregistrements DNS est en dehors du sujet de ce document.

    La directive RewriteMap interne tolower permet de s'assurer que les noms d'hôtes utilisés seront tous en minuscules, de façon à éviter toute ambiguité dans la structure des répertoires qui doit être créée.

    Les contenus des parenthèses utilisées dans une directive RewriteCond sont enregistrés dans les références arrières %1, %2, etc..., alors que les contenus des parenthèses utilisées dans une directive RewriteRule le sont dans les références arrières $1, $2, etc...

    Comme c'est le cas pour de nombreuses techniques discutées dans ce document, mod_rewrite n'est vraiment pas la meilleure méthode pour accomplir cette tâche. Vous devez plutôt vous tourner vers mod_vhost_alias, car ce dernier sera bien plus à même de gérer tout ce qui est au delà du domaine des fichiers statiques, comme les contenus dynamiques et la résolution des alias.

    top

    Configuration dynamique de serveurs virtuels via mod_rewrite

    Cet extrait du fichier httpd.conf permet d'obtenir le même résultat que le premier exemple. La première moitié est très similaire à la partie correspondante ci-dessus, excepté quelques modifications requises à des fins de compatibilité ascendante et pour faire en sorte que la partie mod_rewrite fonctionne correctement ; la seconde moitié configure mod_rewrite pour effectuer le travail proprement dit.

    Comme mod_rewrite s'exécute avant tout autre module de traduction d'URI (comme mod_alias), il faut lui ordonner explicitement d'ignorer toute URL susceptible d'être traitée par ces autres modules. Et comme ces règles auraient sinon court-circuité toute directive ScriptAlias, nous devons faire en sorte que mod_rewrite déclare explicitement ces correspondances.

    # extrait le nom de serveur de l'en-tête Host:
    UseCanonicalName Off
    
    # journaux dissociables
    LogFormat "%{Host}i %h %l %u %t \"%r\" %s %b" vcommon
    CustomLog "logs/access_log" vcommon
    
    <Directory "/www/hosts">
        # ExecCGI est nécessaire ici car on ne peut pas forcer l'exécution
        # des CGI à la manière de ScriptAlias
        Options FollowSymLinks ExecCGI
    </Directory>
    
    RewriteEngine On
    
    # un nom de serveur extrait d'un en-tête Host: peut être dans n'importe
    # quelle casse
    RewriteMap  lowercase  int:tolower
    
    ## on s'occupe tout d'abord des documents normaux :
    # permet à Alias "/icons/" de fonctionner - répéter pour les autres RewriteCond "%{REQUEST_URI}" "!^/icons/" # permet aux CGIs de fonctionner RewriteCond "%{REQUEST_URI}" "!^/cgi-bin/" # le coeur du traitement RewriteRule "^/(.*)$" "/www/hosts/${lowercase:%{SERVER_NAME}}/docs/$1" ## on s'occupe maintenant des CGIs - on doit forcer l'utilisation d'un # gestionnaire RewriteCond "%{REQUEST_URI}" "^/cgi-bin/" RewriteRule "^/(.*)$" "/www/hosts/${lowercase:%{SERVER_NAME}}/cgi-bin/$1" [H=cgi-script]
    top

    Utilisation d'un fichier de configuration du serveur virtuel séparé

    Cette construction utilise des fonctionnalités plus avancées de mod_rewrite pour effectuer la traduction depuis le serveur virtuel vers la racine des documents, à partir d'un fichier de configuration séparé. Elle est plus souple mais nécessite une configuration plus compliquée.

    Le fichier vhost.map devrait ressembler à ceci :

    www.client-1.example.com /www/clients/1
    www.client-2.example.com /www/clients/2
    # ...
    www.client-N.example.com /www/clients/N

    On doit ajouter à httpd.conf :

    RewriteEngine on
    
    RewriteMap   lowercase  int:tolower
    
    # définit le fichier de correspondances
    RewriteMap   vhost      "txt:/www/conf/vhost.map"
    
    # on s'occupe des alias comme ci-dessus
    RewriteCond  "%{REQUEST_URI}"               "!^/icons/"
    RewriteCond  "%{REQUEST_URI}"               "!^/cgi-bin/"
    RewriteCond  "${lowercase:%{SERVER_NAME}}"  "^(.+)$"
    # on effectue ici la remise en correspondance à base de fichier
    RewriteCond  "${vhost:%1}"                  "^(/.*)$"
    RewriteRule  "^/(.*)$"                      "%1/docs/$1"
    
    RewriteCond  "%{REQUEST_URI}"               "^/cgi-bin/"
    RewriteCond  "${lowercase:%{SERVER_NAME}}"  "^(.+)$"
    RewriteCond  "${vhost:%1}"                  "^(/.*)$"
    RewriteRule  "^/cgi-bin/(.*)$"              "%1/cgi-bin/$1" [H=cgi-script]

    Langues Disponibles:  en  |  fr 

    top

    Commentaires

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/logs.html.tr.utf80000644000000000000500000012552613447004010016610 0ustar rootsrc Günlük Dosyaları - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Günlük Dosyaları

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    Bir HTTP sunucusunu verimli şekilde yönetebilmek için oluşabilecek sorunlardan başka sunucunun başarımı ve etkinliği hakkında da bazı geri bildirimler almak gerekir. Apache HTTP Sunucusu çok kapsamlı ve esnek bir günlükleme yeteneğine sahiptir. Bu belgede sunucunun günlükleme yeteneğini nasıl yapılandıracağınızdan ve günlük kayıtlarını nasıl yorumlayacağınızdan bahsedilecektir.

    top

    GiriÅŸ

    Apache HTTP Sunucusu, isteğin ilk alınışından itibaren, URL eşleme işlemleri, bağlantının son çözümlemesi ve bu işlemler sırasına ortaya çıkan hatalar da dahil olmak üzere sunucunuzda meydana gelen herşeyi günlüklemek için çok çeşitli mekanizmalar içerir. Buna ek olarak, günlükleme yetenekleri sağlayan üçüncü parti modüller de kullanılabilir veya mevcut günlük dosyalarına girdiler enjekte edilebilir. Ayrıca, CGI programları, PHP betikleri ve benzerleri sunucu hata günlüğüne kendi iletilerini gönderebilirler.

    Bu belgede Apache HTTP Sunucusunun standart parçası olan günlükleme modülleri hakkında bilgi verilecektir.

    top

    Güvenlik Uyarısı

    Apache httpd’nin günlük dosyalarını yazdığı dizine yazabilen birinin sunucuyu başlatan kullanıcı kimliğine (bu genellikle root olur) erişim kazanabileceğine hemen hemen kesin gözüyle bakılabilir. Sonuçlarının neler olacağını kestiremiyorsanız günlüklerin yazıldığı dizinde hiç kimseye yazma erişimi vermeyin; ayrıntılı bilgi için güvenlik ipuçları belgesine bakınız.

    Buna ilaveten, günlük dosyaları istemci tarafından sağlanmış bilgiler de içerebilir. Bu nedenle, kötü niyetli istemcilerin günlük dosyalarına denetim karakterleri girmeleri olasılığına karşı ham günlükler ele alınırken dikkatli olunmalıdır.

    top

    Hata Günlüğü

    İsmi ve yeri ErrorLog yönergesi ile belirtilen sunucu hata günlüğü, en önemli günlük dosyasıdır. Apache httpd tarafından istekler işlenirken saptanan hatalar ve tanı bilgileri bu dosyaya gönderilir. Sunucuyu başlatırken veya sunucu çalışırken bir sorunla karşılaşıldığında, neyin yanlış gittiğini öğrenmek için bakılacak ilk yer burasıdır. Günlük kaydı çoğunlukla sorunun nasıl düzeltileceği ile ilgili ayrıntıları da içerir.

    Hata günlüğü normal olarak bir dosyaya yazılır (genellikle, dosyanın ismi Unix sistemlerinde error_log, OS/2 ve Windows’ta ise error.log’dur). Ayrıca, Unix sistemlerinde sunucunun hataları syslog’a veya borulamak suretiyle bir programa aktarması da mümkündür.

    Hata günlüğünün biçemi ErrorLogFormat yönergesi ile belirlenir. Bu yönergeyi kullanarak günlüklenen değerleri özelleştirebilirsiniz. Bir biçem belirtmezseniz öntanımlı biçem kullanılır. Örnek tipik bir hata iletisi içermektedir:

    [Fri Sep 09 10:42:29.902022 2011] [core:error] [pid 35708:tid 4328636416] [client 72.15.99.187] Dosya yok: /usr/local/apache2/htdocs/favicon.ico

    Günlük girdisinin ilk öğesi iletinin yazıldığı tarih ve saatten oluşur. İkincisi iletiyi üreten modülün ismi (bu durumda: core) ile raporlanan bilginin önem derecesini belirtir. Bunu varsa sürecin kimliği ve yine varsa evre kimliği izler. Sonraki öğe hatanın üretilmesine sebep olan istemcinin IP adresini içerir. Kalanı iletinin kendisidir (duruma bakılırsa bir dosyaya yapılan istek yerine getirilememiş).

    Hata günlüğünde görünebilecek ileti çeşitliliği oldukça fazladır. Çoğu yukarıdaki örneğin benzeridir. Hata günlüğü ayrıca, CGI betiklerinin hata ayıklama çıktılarını da içerir. Bir CGI betiği tarafından standart hataya (stderr) yazılan her türlü bilgi doğrudan hata günlüğüne kopyalanır.

    Hata günlüğüne ve erişim günlüğüne %L dizgeciği konularak erişim günlüğündeki girdi ile hata günlüğündeki girdiyi ilişkilendirecek bir günlük girdisi kimliği oluşturulabilir. mod_unique_id yüklüyse günlük girdisi kimliği olarak onun eşsiz istek kimliği de kullanılır.

    Sunucuyu denerken olası sorunlara karşı hata günlüğünü sürekli izlemelisiniz. Unix sistemlerinde bunu şöyle bir komutla sağlayabilirsiniz:

    tail -f error_log

    top

    Modüllere göre günlükleme

    LogLevel yönergesi, günlük iletisinin üretilmesine sebep olan modüle bağlı bir önem seviyesi belirleyebilmenizi sağlar. Bu yolla sorun yaşadığınız modülle ilgili günlük musluklarını sonuna kadar açabiliri ek olarak ilgilendiğiniz diğer modüllerle ilgili ayrıntıları da edinebilirsiniz. Özellikle mod_proxy veya mod_rewrite gibi modüllerde yapılmak isteneni denerken neler olup bittiğini ayrıntılarıyla bilmek istediğiniz durumlarda kullanışlıdır.

    Bunu LogLevel yönergesinde modülün ismini belirterek yapabilirsiniz:

    LogLevel info rewrite:trace5

    Bu satırla ana LogLevel info'ya ayarlanırken mod_rewrite için musluk trace5 seviyesine kadar açılmaktadır.

    Bu yönerge, Apache HTTP Sunucusunun evvelki sürümlerinde mevcut olan RewriteLog gibi günlükleme modüllerinin yerini almıştır.
    top

    Erişim Günlüğü

    Sunucu erişim günlüğü sunucu tarafından işleme alınan tüm istekleri kaydeder. Erişim günlüğünün yeri ve içeriği CustomLog yönergesi ile belirlenir. LogFormat yönergesi ile günlük içeriğini kişiselleştirmek mümkündür. Bu bölümde sunucunun bilgileri erişim günlüğüne kaydetmesi için nasıl yapılandırılacağından bahsedilecektir.

    Şüphesiz, bilginin erişim günlüğünde saklanması günlük yönetiminde ilk adımı oluşturur. Sonraki adım yararlı istatistikleri üretmek için bu bilgiyi incelemektir. Günlük incelemesi bu belgenin kapsamına dahil değildir ve aslında bu işlem sunucunun yaptığı işlerden biri değildir. Bu konu ve günlük incelemesi yapan uygulamalar hakkında daha ayrıntılı bilgi edinmek için dmoz.org'a bakınız.

    Apache httpd’nin çeşitli sürümlerinde erişim günlüklerini denetlemek için kullanılan diğer modüller ve yönergeler arasında mod_log_referer, mod_log_agent modülleri ve TransferLog yönergesi sayılabilir. Artık, daha eski tüm diğer yönergelerin işlevselliklerini bir araya toplayan CustomLog yönergesi kullanılmaktadır.

    Erişim günlüğünün girdi biçemi kolayca isteğe göre düzenlenebilmektedir. Biçemi belirtmekte kullanılan biçem dizgesi, C tarzı printf(1) biçem dizgesini andırır. Sonraki bölümlerde bazı örneklere yer verilmiştir. Biçem dizgesini oluşturan belirteçlerin tam listesi için mod_log_config belgesinin Günlük Girdilerinin Kişiselleştirilmesi bölümüne bakınız.

    Ortak Günlük Biçemi (OGB)

    Erişim günlüğü için sıklıkla kullanılan bir yapılandırma:

    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    CustomLog logs/access_log common

    İlk satırda belli bir biçem dizgesi için common diye bir takma ad tanımlanmaktadır. Biçem dizgesi, sunucuya hangi belli bir bilgi parçalarını günlükleyeceğini söyleyen % imli biçem belirteçlerinden oluşur. Biçem dizgesine ayrıca dizgesel sabitler de yerleştirilebilir ve bunlar erişim günlüğüne oldukları gibi kopyalanırlar. Biçem dizgesi içinde çift tırnak karakteri (") biçem dizgesini vaktinden önce sonlandırmaması için ters bölü çizgisi ile öncelenmelidir. Biçem dizgesi ayrıca, satır sonlarını belirtmek için "\n" ve sekmeleri belirtmek için "\t" denetim karakterlerini de içerebilir.

    CustomLog yönergesi evvelce tanımlanmış bir takma adı kullanarak yeni bir günlük dosyası tanımlar. Erişim günlüğünün dosya ismi bölü çizgisi ile başlamadıkça dosya yolunun ServerRoot değerine göreli olduğu varsayılır.

    Yukarıdaki yapılandırma günlük dosyasına girdileri Ortak Günlük Biçemi (Common Log Format) adı verilen standart biçemde yazar. Bu standart biçem başka HTTP sunucuları tarafından da kullanılır ve çoğu günlük inceleme yazılımı tarafından tanınır. Ortak Günlük Biçeminde üretilen günlük girdileri şöyle görünür:

    127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET /apache_pb.gif HTTP/1.0" 200 2326

    Bu günlük girdisini parça parça açıklayalım:

    127.0.0.1 (%h)
    Bu, sunucuya istek yapan istemcinin (uzak konağın) IP adresidir. Eğer HostnameLookups yönergesine On değeri atanmışsa sunucu bu IP adresi için DNS sorgusu yapacak ve IP adresi yerine bulduğu konak ismini yazmaya çalışacaktır. Bununla birlikte, bu işlem sunucuyu epeyce yavaşlattığından önerilmemektedir. Konak isimlerini saptamak için en iyisi günlük girdilerini logresolve gibi bir günlük işlemcisinden geçirmektir. Burada raporlanan IP adresi doğrudan istemcinin IP adresi olmayabilir. Eğer sunucu ile istemci arasında bir vekil sunucu varsa bu IP adresi, vekil sunucunun IP adresi olacaktır.
    - (%l)
    Çıktıdaki bir "tire" imi istenen bilgi parçasının mevcut olmadığı anlamına gelir. Bu durumda, mevcut olmayan bilgi istemci makine üzerinde identd tarafından belirlenen istemcinin RFC 1413 kimliğidir. Bu bilgi oldukça güvenilmezdir ve sıkıca denetlenen iç ağlar haricinde hemen hemen asla kullanılmamalıdır. Apache, IdentityCheck yönergesine On değeri atanmış olmadıkça bu bilgiyi saptamaya uğraşmaz.
    frank (%u)
    Bu, belge isteğinde bulunan kişinin HTTP kimlik doğrulamasıyla saptanan kullanıcı kimliğidir. Bu değer CGI betiklerine REMOTE_USER ortam değişkeni ile sağlanır. Eğer istek için durum kodu 401 ise (aşağıya bakınız) henüz kullanıcının kimliği doğrulanmamış olacağından bu değere güvenilmemelidir. Eğer belge parola korumalı değilse günlüğün bu kısmı da yukarıdaki gibi "-" olacaktır.
    [10/Oct/2000:13:55:36 -0700] (%t)
    İsteğin alındığı tarih ve saat. Biçemi şöyledir:

    [gün/ay/yıl:saat:dakika:saniye dilim]
    gün    = 2 hane
    ay     = 3 harf
    yıl    = 4 hane
    saat   = 2 hane
    dakika = 2 hane
    saniye = 2 hane
    dilim  = (`+' | `-') 4 hane

    Günlük biçem dizgesinde zaman gösterim biçemini %{biçem}t şeklinde belirtmek de mümkündür. Buradaki biçem dizgesi, stardart C kütüphanesindeki strftime(3) işlevi için tanımlanmış biçem belirteçleriyle veya desteklenen özel belirteçlerle oluşturulabilir. Ayrıntılı bilgi için mod_log_config biçem dizgelerine bakın.

    "GET /apache_pb.gif HTTP/1.0" (\"%r\")
    İstemciden alınan istek satırının çift tırnaklar arasında gösterilmesi istenmiştir. İstek satırı en yararlı bilgi parçalarını içerir. Birincisi, istemci tarafından kullanılan yöntem GET’miş. İkinci olarak istemci /apache_pb.gif dosyasını istemiş ve üçüncü olarak istemci HTTP/1.0 protokolünü kullanmış. İstek satırının bazı parçalarını bağımsız olarak da günlüklemek mümkündür. Örneğin, "%m %U%q %H" dizgesi, yöntem, yol, sorgu dizgesi ve protokolü kaydedecektir; bu dizge "%r" biçem belirtecinin tek başına yaptığı işi yapar.
    200 (%>s)
    Bu, sunucunun istemciye gönderdiği durum kodudur. İsteğin başarıyla yerine getirilip getirilmediğini gösterdiği için bu bilgi çok değerlidir. Durum kodu 2 ile başlıyorsa istek başarıyla yerine getirilmiştir, 3 ile başlıyorsa yönlendirilmiştir, 4 ile başlıyorsa istemci tarafında bir hata oluşmuştur, 5 ile başlıyorsa sunucuda bir hata oluşmuştur. Olası hata kodlarının tam listesi RFC2616 Hiper Metin Aktarım Protokolünün 10. bölümünde bulunabilir.
    2326 (%b)
    Son parça istemciye döndürülen nesnenin yanıt başlığı hariç uzunluğudur. Eğer istemciye bir içerik döndürülmemişse bu değer "-" olacaktır. Bunun yerine günlüğe "0" yazdırmak için %B belirtecini kullanınız.

    Birleşik Günlük Biçemi

    Sıklıkla kullanılan diğer bir biçem dizgesi Birleşik Günlük Biçemi (Combined Log Format) olup şöyle kullanılabilir:

    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"" combined
    CustomLog log/access_log combined

    Bu biçem ilaveten 2 alan içermesi dışında Ortak Günlük Biçemi ile aynıdır. İlave alanların ikisi de %{başlık}i biçeminde olup buradaki başlık, HTTP isteğindeki başlık alanlarından biridir. Bu biçemin kullanıldığı bir erişim günlüğü girdisi şöyle olurdu:

    127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET /apache_pb.gif HTTP/1.0" 200 2326 "http://www.example.com/start.html" "Mozilla/4.08 [en] (Win98; I ;Nav)"

    Ek alanlar:

    "http://www.example.com/start.html" (\"%{Referer}i\")
    HTTP istek başlığı "Referer". İstemcinin raporladığı isteğin kaynaklandığı URI. (Bu isteğin yapılmasını sağlayan bağlantıyı içeren URL veya istek bir sayfanın bileşenleri ile ilgiliyse istenen sayfanın URL’si olabilir.)
    "Mozilla/4.08 [en] (Win98; I ;Nav)" (\"%{User-agent}i\")
    Tarayıcı kimliğini içeren HTTP istek başlığı. Bu istemcinin tarayıcısının raporladığı kendi tanıtım bilgisidir.

    Çok Sayıda Erişim Günlüğü

    Yapılandırma dosyasında çok sayıda CustomLog yönergesi kullanarak çok sayıda erişim günlüğü kolayca oluşturulabilir. Örneğin aşağıdaki yönergelerle 3 tane erişim günlüğü oluşturulacaktır. İlki temel OGB bilgisini içerirken diğer ikisi isteğin kaynaklandığı yeri ve tarayıcı kimliğini içerir. Son iki CustomLog satırı ayrıca, ReferLog ve AgentLog yönergelerinin etkilerinin nasıl taklit edileceğini de göstermektedir.

    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    CustomLog logs/access_log common
    CustomLog logs/referer_log "%{Referer}i -> %U"
    CustomLog logs/agent_log "%{User-agent}i"

    Bu örnek ayrıca, LogFormat yönergesi ile bir takma ad tanımlamanın şart olmadığını da göstermektedir. Günlük biçemi doğrudan CustomLog yönergesinde belirtilebilir.

    Şarta Bağlı Günlükler

    Bazı durumlarda istemcinin yaptığı isteğe bağlı olarak erişim günlüğünde belli girdilerin dışlanması gerekebilir. Bu, ortam değişkenleri sayesinde kolayca yerine getirilebilir. Önce isteğin belli koşulları sağladığını belirten bir ortam değişkeni ataması yapılır. Bu işlem SetEnvIf yönergesi ile yapılır. Sonra da, ortam değişkenine bağlı olarak isteklerin günlüğe dahil edilip edilmeyeceği CustomLog yönergesinin env= deyimi kullanılarak belirtilir. Bazı örnekler:

    # yerel konaktan kaynaklanan istekleri imleyelim
    SetEnvIf Remote_Addr "127\.0\.0\.1" kaydetme
    # robots.txt dosyası isteklerini imleyelim
    SetEnvIf Request_URI "^/robots\.txt$" kaydetme
    # Kalanları günlüğe kaydedelim
    CustomLog logs/access_log common env=!kaydetme

    Başka bir örnek olarak, Türkçe belge isteklerini bir dosyaya diğer dillerdeki istekleri başka bir dosyaya kaydedelim.

    SetEnvIf Accept-Language "tr" turkce
    CustomLog logs/turkce_log common env=turkce
    CustomLog logs/diger_diller_log common env=!turkce

    Bir arabellekleme senaryosuna arabelleğin verimli kullanılıp kullanılmadığını bilmek isteyelim. Bu basitçe şöyle yapılabilir:

    SetEnv CACHE_MISS 1
    LogFormat "%h %l %u %t "%r " %>s %b %{CACHE_MISS}e" common-cache
    CustomLog logs/access_log common-cache

    mod_cache önce mod_env modülünü çalıştıracak ve başarılı olunduğu takdirde içeriği onsuz teslim edecektir. Bu durumda arabellek kaybı 1 olarak günlüklenirken arabellek sunumu - olarak günlüklenecektir.

    env= sözdizimine ek olarak, LogFormat HTTP yanıt kodudaki koşul değerlerini günlüklemeyi de destekler:

    LogFormat "%400,501{User-agent}i" browserlog
    LogFormat "%!200,304,302{Referer}i" refererlog

    Bu örnekte, HTTP durum kodu 400 veya 501 ise User-agent başlığı günlüklenecektir. Aksi takdirde, günlüğe bir "-" yazılacaktır. Benzer şekilde ikinci örnekte, HTTP durum kodu 200, 204 veya 302 değilse (durum kodlarının öncesindeki "!" imine dikkat) Referer başlığı günlüklenecektir.

    Koşula bağlı günlük kaydının çok esnek ve güçlü olabileceğini göstermiş olsak da günlük içeriğini denetlemenin tek yolu bu değildir. Günlük dosyaları sunucu etkinliğini eksiksiz olarak kaydedebildikleri takdirde daha yararlı olurlar. Günlük dosyalarını sonradan işleme tabi tutarak istenmeyen girdileri kaldırılmış bir kopya almak hem kolay hem de daha yararlıdır.

    top

    Günlük Çevrimi

    Yükü ağır sunucularda günlük dosyalarına kaydedilen bilginin miktarı çok büyük boyutlara ulaşabilir. 10.000 istek içeren bir erişim günlüğü yaklaşık 1MB yer kaplar. Etkin günlük dosyasını belirli aralıklarla değiştirmek veya silmek gerekebilir. Apache httpd çalışırken dosyayı sürekli açık tuttuğu ve yazdığı için bu işlem sunucu çalışırken yapılamaz. Bu bakımdan, günlük dosyası değiştirildikten veya silindikten sonra yeni dosyanın açılması için sunucunun yeniden başlatılması gerekir.

    Nazikçe yeniden başlatmak suretiyle sunucunun, mevcut ve bekleyen bağlantıları kaybetmeden yeni günlük dosyalarını açması sağlanabilir. Bununla birlikte, bu işlem sırasında sunucunun eski isteklere sunumu bitirene kadar eski günlük dosyalarına yazmaya devam edebilmesi gerekir. Bu bakımdan, yeniden başlatmanın ardından eski günlük dosyaları üzerinde bir işlem yapmadan önce biraz beklemek gerekir. Günlük dosyalarını döndürürken kullanılan senaryolarda genellikle eski günlük dosyaları yer kazanmak için sıkıştırılırlar:

    mv access_log access_log.old
    mv error_log error_log.old
    apachectl graceful
    sleep 600
    gzip access_log.old error_log.old

    Günlük çevrimi yapmanın başka bir yolu da sonraki bölümde açıklandığı gibi borulu günlükler kullanmaktır.

    top

    Borulu Günlükler

    Apache httpd hata ve erişim günlüklerini doğrudan bir dosyaya yazmak yerine bir boru üzerinden başka bir sürece yazabilir. Bu yetenek ana sunucuya herhangi bir kod eklemeksizin günlükleme esnekliğini şaşırtıcı derecede arttırır. Günlükler boruya yazılmak istenirse dosya ismini boru karakteriyle ("|") değiştirip ardına günlük girdilerini standart girdisinden kabul edecek programın ismini eklemek yeterlidir. Apache httpd başlatıldığı zaman borulu günlük işlemini de başlatacaktır. Eğer sunucu çalışırken günlükleri kabul eden süreç çökerse Apache httpd bu programı yeniden başlatır. (Bu son özelliği sebebiyle bu tekniğe “güvenilir borulu günlükleme†adını veriyoruz.)

    Borulu günlük süreçleri ana Apache httpd süreci tarafından başlatılır ve bu süreçler ana Apache httpd sürecinin kullanıcı kimliğini miras alırlar. Yani borulu günlükleme programları aslında root tarafından çalıştırılmış gibi olur. Bu bakımdan, bu programları basit ve güvenilir kılmak çok önemlidir.

    Borulu günlüklerin önemli kullanım alanlarından biri de sunucuyu yeniden başlatmak gerekmeksizin günlük çevrimini mümkün kılmaktır. Apache HTTP sunucusu bu amaçla kullanılmak üzere rotatelogs diye bir program içerir. Örneğin, günlükleri 24 saatte bir döndürmek isterseniz bunu şöyle yapabilirsiniz:

    CustomLog "|/usr/local/apache/bin/rotatelogs /var/log/access_log 86400" common

    Borunun diğer ucundaki süreci başlatacak komutun tırnak içine alındığına dikkat ediniz. Bu örnekler erişim günlüğü için verilmişse de aynı teknik hata günlüğü için de kullanılabilir.

    Hariçten bir uygulama olarak cronolog isminde buna benzer ancak çok daha esnek bir program daha vardır.

    Borulu günlükler de şarta bağlı günlükleme kadar güçlü olmakla beraber çevrimdışı ardıl işlemler gibi daha basit çözümler için kullanılmamalıdır.

    Öntanımlı olarak borulu günlük süreci bir kabuk kullanmadan çalıştırılır. Kabuk kullanarak (genelde /bin/sh -c ile) yapılmak istenirse "|" yerine "|$" kullanılır:

    # Kabuk kullanarak "rotatelogs" çalıştırmak
    CustomLog "|$/usr/local/apache/bin/rotatelogs /var/log/access_log 86400" common

    Bu, Apache 2.2 için öntanımlı davranıştı. Kabuk özelliklerine bağlı olarak, yeniden başlatma sırasındaki sinyal işleme sorunları ve günlük borulama uygulamasının yaşam süresi için ek bir kabuk süreci ile sonuçlanabilir. Apache 2.2 ile uyumluluk açısından "||" gösterimi de desteklenmekte olup "|" kullanımına eşdeğerdir.

    Windows'ta yığın alanı

    Windows'ta çok sayıda borulu günlükleme süreci çalışırken ve özellikle HTTPD bir hizmet olarak çalışıyorsa sorunlar baş gösterebilir. Bunun başlıca sebebi masaüstü yığın alanının (heap) dışına taşılmasıdır. Her hizmete ayrılan masüstü yığın alanı, kayıt defterindeki HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SessionManager\SubSystems\Windows kaydındaki üçüncü değiştirge olan SharedSection değeridir. Bu değeri değiştirirken çok dikkatli olun; bu, Windows kayıt defterini değiştirirken verilen normal uyarılardandır, fakat eğer bu değer çok yüksek olursa masaüstü yığın alanının tükenebileceği dikkate alınmalıdır.

    top

    Sanal Konaklar

    Bir sunucu çok sayıda sanal konak ile hizmet sunarken bunların günlük kayıtları için çeşitli seçenekler mevcuttur. İlk seçenekte, sanki sunucu tek bir konakla hizmet sunuyormuş gibi günlük kaydı yapılır. Günlükleme yönergelerini <VirtualHost> bölümlerinin dışına, ana sunucu bağlamına yerleştirerek tüm isteklerin aynı erişim ve hata günlüğüne yazılmasını sağlamak olasıdır. Bu teknik, tek tek sanal konaklar için kolayca istatistik toplamaya izin vermez.

    Eğer CustomLog veya ErrorLog yönergesi bir <VirtualHost> bölümüne yerleştirilirse bu sanal konağa bütün erişimler veya hatalar belirtilen dosyaya günlüklenecektir. Böyle günlükleme yönergeleri içermeyen sanal konakların günlükleri hala ana sunucunun hata ve erişim günlüklerine yazılmaya devam edecektir. Bu teknik az sayıda sanal konak barındıran sunucular için çok kullanışlıdır. Fakat sanal konak sayısı çok fazlaysa bu teknikle günlük dosyalarını yönetmek çok karmaşık bir hal alabilir. Ayrıca, yetersiz dosya tanıtıcısı sorunlarıyla çok sık karşılaşılabilir.

    Erişim günlükleri için çok az bir fedakarlıkla çok iyi bir çözüm vardır. Günlük biçemine sanal konaklarla ilgili bilgi eklemek suretiyle tüm konakların aynı günlük dosyasını kullanmaları olasıdır. Böylece günlük dosyası sonradan her sanal konak için ayrı bir dosya oluşturmak üzere ayrıştırılabilir. Örneğin, bu işlem için şu yönergeler kullanılıyor olsun:

    LogFormat "%v %l %u %t \"%r\" %>s %b" ortaksankon
    CustomLog logs/access_log ortaksankon

    %v belirteci isteği sunan sanal konağın ismini günlüğe yazmak için kullanılır. Daha sonra split-logfile gibi bir program kullanarak, bu dosyadan her sanal konak için ayrı birer dosya elde edilebilir.

    top

    Diğer Günlük Dosyaları

    Gönderilen ve alınan bayt sayısının günlüklenmesi

    mod_logio modülü LogFormat yönergesinde kullanılan biçem belirteçlerine alınan ve gönderilen bayt sayıları için iki belirteç (%I ve %O) ekler.

    Adli Günlük

    mod_log_forensic modülü istemci isteklerinin kanıt olarak kullanılmak amacıyla günlüklenmesini sağlar. Günlükleme her istek için isteğe hizmet sunmadan önce ve sonra olmak üzere iki defa yapılır. Böylece günlük dosyasında başarılı her istek için iki satır bulunur. Adli günlükleme çok sıkı kurallara tabi olup kişiselleştirilemez. Güvenlik ve hata ayıklama aracı olarak yararlı değildir.

    PID Dosyası

    Apache httpd başlatıldığında, ana httpd sürecinin kimliği (PID) logs/httpd.pid dosyasına kaydedilir. Bu dosyanın ismi PidFile yönergesi ile değiştirilebilir. Bu süreç kimliği sistem yöneticisi tarafından ana sürece sinyal göndererek artalan sürecini sonlandırmak veya yeniden başlatmak için kullanılır. Windows üzerinde bu işlem için -k komut satırı seçeneği kullanılır. Bu konuda daha ayrıntılı bilgi edinmek için Durdurma ve Yeniden Başlatma belgesine bakınız.

    Betik Günlüğü

    ScriptLog yönergesi CGI betiklerinin girdi ve çıktılarını kaydetmenizi mümkün kılmak suretiyle hata ayıklamaya yardımcı olur. Bu sadece deneysel amaçla kullanılmalı, asıl sunucuya uygulanmamalıdır. mod_cgi belgesinde daha fazla bilgi bulunabilir.

    Mevcut Diller:  en  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/logs.html0000644000000000000500000000071313362070302015270 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: logs.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: logs.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: logs.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: logs.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: logs.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/suexec.html0000644000000000000500000000072513362070302015623 0ustar rootsrc# GENERATED FROM XML -- DO NOT EDIT URI: suexec.html.en Content-Language: en Content-type: text/html; charset=ISO-8859-1 URI: suexec.html.fr.utf8 Content-Language: fr Content-type: text/html; charset=UTF-8 URI: suexec.html.ja.utf8 Content-Language: ja Content-type: text/html; charset=UTF-8 URI: suexec.html.ko.euc-kr Content-Language: ko Content-type: text/html; charset=EUC-KR URI: suexec.html.tr.utf8 Content-Language: tr Content-type: text/html; charset=UTF-8 httpd-2.4.41/docs/manual/stopping.html.tr.utf80000644000000000000500000004707113447004010017505 0ustar rootsrc Apache HTTP Sunucusunun Durdurulması ve Yeniden Başlatılması - Apache HTTP Sunucusu Sürüm 2.4
    <-

    Apache HTTP Sunucusunun Durdurulması ve Yeniden Başlatılması

    Mevcut Diller:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr 

    Bu belge Apache HTTP Sunucusunun Unix benzeri sistemlerde durdurulması ve yeniden başlatılması konularını kapsar. Windows NT, 2000 ve XP kullanıcıları Apache HTTPd’yi bu platformlarda nasıl denetimlerine alacaklarını öğrenmek için httpd’nin Bir Hizmet Olarak Çalıştırılması sayfasına, Windows 9x ve ME kullanıcıları ise httpd’nin Bir Konsol Uygulaması Olarak Çalıştırılması sayfasına bakabilirler.

    top

    GiriÅŸ

    Apache HTTP Sunucusunu durdurmak ve yeniden başlatmak için çalışan httpd süreçlerine bir sinyal göndermeniz gerekir. Sinyal göndermek için iki yol vardır. İlki, süreçlere doğrudan sinyal göndermek için unix kill komutunun kullanımıdır. Bu suretle, sisteminizde çalışmakta olan bir çok httpd sürecini uyarabilirsiniz ama süreç kimliği PidFile yönergesi ile belirtilen dosyada tutulan ana süreç dışında hiçbirine sinyal göndermemelisiniz. Başka bir deyişle, ana süreç haricinde hiçbir sürece sinyal göndermeye normal olarak ihtiyacınız olmaması gerekir. Ana sürece gönderebileceğiniz dört çeşit sinyal vardır: TERM, USR1, HUP ve WINCH. Bunlar yeri geldikçe açıklanacaktır.

    Ana sürece kill ile sinyal göndermek için şöyle bir komut verebilirsiniz:

    kill -TERM `cat /usr/local/apache2/logs/httpd.pid`

    httpd süreçlerine sinyal göndermenin ikinci yolu -k komut satırı seçeneğini şu değerlerden biri ile kullanmaktır: stop, restart, graceful ve graceful-stop. Bunlar aşağıda açıklanacaktır. -k komut satırı seçeneği httpd’ye ait olsa da ana sürece bu sinyalleri göndermek için apachectl betiğini kullanmanızı öneririz. apachectl, komut satırı seçeneklerini httpd’ye aktaracaktır.

    httpd’ye sinyal gönderdikten sonra olup biteni şu komutla izleyebilirsiniz:

    tail -f /usr/local/apache2/logs/error_log

    Bu örnekleri, kendi ServerRoot ve PidFile yönergelerinizdeki ayarlara uygun olarak değiştirdikten sonra kullanınız.

    top

    Hemen Durdur

    Sinyal: TERM
    apachectl -k stop

    Ana sürece TERM veya stop sinyali göndererek tüm çocukların bir an önce öldürülmeye çalışılmasını sağlamış olursunuz. Tüm çocukların öldürülmesi bir kaç saniye sürebilir. Son olarak ana süreç çıkacaktır. Yanıtlanmakta olan istekler hemen sonlandırılacak ve artık isteklere yanıt verilmeyecektir.

    top

    Nazikçe Yeniden Başlat

    Sinyal: USR1
    apachectl -k graceful

    Ana sürece USR1 veya graceful sinyalinin gönderilmesi, çocuklara ellerindeki mevcut işleri bitirdikten sonra (veya sundukları bir şey yoksa hemen) çıkmalarının önerilmesi demektir. Ana süreç kendi yapılandırma dosyalarını yeniden okur ve kendi günlük dosyalarını yeniden açar. Ana sürecin öldürdüğü her sürecin yerine yeni yapılandırma kuşağından bir süreç başlatır ve hemen yeni isteklere hizmet sunulmaya başlanır.

    Bu kod MPM’lerin süreçleri denetleyen yönergelerine daima uyacak şekilde tasarlanmıştır. Bu suretle, istemcilere hizmet sunacak çocuk süreçler ve evreler, yeniden başlatma işleminde de uygun sayıda sağlanmış olur. Bununla birlikte, StartServers yönergesinde şöyle davranılır: İlk saniye içinde en azından StartServers sayıda yeni çocuk oluşturulmamışsa iş olmayan bir devreyi geçiştirecek kadarı oluşturulur. Ardından sunucunun mevcut yükünü karşılamak için gereken sayıda çocuk süreç oluşturulur. Bu suretle, kod her ikisi için de gereğini yerine getirmeye çalışmış olur.

    mod_status kullanıcıları USR1 gönderildiği zaman sunucu istatistiklerinin sıfırlanmadığı konusunda uyarılacaktır. Kod, sunucunun yeni isteklere yanıt veremediği zamanı en aza indirmenin yanısıra ayar parametrelerinize de uymak üzere tasarlanmıştır (yeni istekler işletim sistemi tarafından kuyruğa alınacağından bir istek kaybı olayı yaşanmaz). Bunu sağlamak için, her iki kuşağın çocuklarının izini sürecek bir çetele tutulur.

    mod_status modülü, nazikçe yeniden başlat komutunun verilmesinden önce başlamış ve sunulmaya devam eden isteklere bakan çocukları imlemek için ayrıca bir G (Graceful’un baş harfi) kullanır.

    Günlük dosyası döndürme betiğine, yeniden başlatma öncesi günlüğe yazan tüm çocukların işini bitirdiğini USR1 kullanarak bildirmenin bir yolu yoktur. Önerimiz, eski günlük kaydı üzerinde bir işlem yapmaya başlamadan önce USR1 sinyali gönderilmesinin ardından belli bir süre beklenilmesi olacaktır. Örneğin, düşük band genişliğine sahip istemcilere hizmet sunan çoğu sürecin işinin 10 dakikadan önce bitmeyeceğini gözönüne alarak eski günlük üzerinde işlem yapmaya başlamak için 15 dakika beklenebilir.

    Bir yeniden başlatma isteğinde, yapılandırma dosyalarında bir hata olmadığından emin olmak için önce bir sözdizimi denetimi yapılır. Eğer yapılandırma dosyalarınızda bir hata varsa bu sözdizimi hatasıyla ilgili bir hata iletisi alırsınız ve sunucu yeniden başlamayı reddeder. Bu yolla, bir hata sonucu sunucunun çökerek yeniden başlamaması nedeniyle işlevsiz bir sunucuyla başbaşa kalmanız önlenmiştir.

    Ancak, bu hala sunucunuzun düzgünce yeniden başlatılmasını garanti etmeyecektir. Yapılandırma dosyalarınızı sözdizimi denetiminin yanında anlamlandırılması bakımından da sınamak için httpd’nin root olmayan bir kullanıcı tarafından çalıştırılmasını deneyebilirsiniz. Eğer yapılandırma dosyalarında bir hata yoksa soketleri ve günlük dosyalarını açmaya çalışırken root aidiyetinde çalışmadığından veya çalışmakta olan asıl sunucu bu portları zaten dinlediğinden başarısız olacaktır. Eğer başka bir sebeple başarısız olursa olası sebep bir yapılandırma dosyası hatasıdır ve asıl sunucuya ‘nazikçe yeniden başla’ komutunu vermeden önce bu hatayı düzeltmeniz gerekir.

    top

    Hemen Yeniden BaÅŸlat

    Sinyal: HUP
    apachectl -k restart

    Ana sürece HUP veya restart sinyalinin gönderilmesi tüm çocukların TERM sinyali gönderilmiş gibi öldürülmesine sebep olur fakat ana sürecin çıkmasını sağlamaz. Ana süreç yapılandırma dosyalarını yeniden okur ve günlük kayıt dosyalarını yeniden açar. Bunların ardından isteklere yanıt verecek yeni kuşak çocukları oluşturmaya başlar.

    mod_status kullanıcıları bir HUP sinyalı gönderildiğinde sunucu istatistiklerinin sıfırlandığı konusunda uyarılırlar.

    ‘Nazikçe yeniden başlat’ komutundaki gibi yeniden başlatma öncesi bir sözdizimi denetimi yapılır. Eğer yapılandırma dosyalarınızda sözdizimi hatası varsa yeniden başlatma işlemi gerçekleşmez ve sözdizimi hatalarıyla ilgili bildirim alırsınız.
    top

    Nazikçe Durdur

    Sinyal: WINCH
    apachectl -k graceful-stop

    Ana sürecin WINCH veya graceful-stop sinyalini alması, çocuklara ellerindeki mevcut işleri bitirdikten sonra (veya sundukları bir şey yoksa hemen) çıkmalarının önerilmesine sebep olur. Ana süreç bunun hemen ardından PidFile dosyasını siler ve port dinlemeyi keser. Ana süreç çalışmaya ve isteklere yanıt vermekte olan çocuk süreçleri izlemeye devam eder. Tüm çocuklar işlerini bitirip çıktığında veya GracefulShutdownTimeout ile belirtilen zaman aşımı dolduğunda ana süreç de kendini sonlandırır. Eğer zaman aşımı devreye girmişse o an çalışmakta olan çocuk süreçlere TERM sinyali gönderilerek hemen çıkmaları sağlanır.

    Bir TERM sinyali ile "graceful" durumundaki tüm çocuklar ve ana süreç hemen sonlandırılacaktır. Bununla birlikte, PidFile dosyası da silineceğinden, artık apachectl veya httpd’yi bu sinyali göndermek için kullanamayacaksınız.

    graceful-stop sinyali, aynı anda, aynı yapılandırma ile çok sayıda httpd kopyasının çalıştırılabilmesine imkan verir. Bu, Apache nazikçe yükseltileceği zaman güçlü bir özellik haline gelmekteyse de, bazı yapılandırmalarda yarış koşullarının oluşmasına ve kısır çekişmelere (deadlock) sebep olabilir.

    Sunucunun süreç kimliğini içeren kilit dosyaları (Mutex) ve Unix soket dosyaları (ScriptSock) gibi dosyaların disk üzerindeki mevcudiyetlerinin sorunsuz olarak devam ettiğinden emin olunmaya çalışılmalıdır. Ayrıca, bir yapılandırma yönergesi, üçüncü parti bir modül veya kalıcı CGI uygulamalarına ait disk kilit veya durum dosyaları olabilir; httpd’nin birden fazla kopyasının çalışması nedeniyle bu dosyaların da üzerine yazılmadığından emin olunmaya çalışılmalıdır.

    rotatelogs tarzı borulu günlükleme kullanımı gibi durumlarda yarış koşullarının oluşması olasılığına karşı uyanık olunmalıdır. Aynı günlük kayıt dosyalarını aynı anda döndürmeye çalışan birden fazla rotatelogs kopyasının çalıştırılması halinde bunların her biri diğerlerinin günlük kayıt dosyalarının kaybına sebep olabilir.

    Mevcut Diller:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr 

    top

    Yorumlar

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/invoking.html.ja.utf80000644000000000000500000003406013412755316017443 0ustar rootsrc Apache ã®èµ·å‹• - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    Apache ã®èµ·å‹•

    翻訳済ã¿è¨€èªž:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr 

    Windows 上ã§ã¯ã€Apache ã¯é€šå¸¸ã¯ã‚µãƒ¼ãƒ“スã¨ã—ã¦å®Ÿè¡Œã•れã¾ã™ã€‚ 詳細ã«é–¢ã—ã¦ã¯ã€ã€Œ サービスã¨ã—ã¦å®Ÿè¡Œã™ã‚‹ã€ã‚’ã”覧下ã•ã„。

    Unixã§ã¯ã€httpd プログラムãŒã€ãƒãƒƒã‚¯ã‚°ãƒ©ã‚¦ãƒ³ãƒ‰ã§å¸¸ã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆå‡¦ç†ã‚’行ㆠデーモンã¨ã—ã¦å®Ÿè¡Œã•れã¾ã™ã€‚ã“ã®æ–‡æ›¸ã§ã¯ã©ã®ã‚ˆã†ã« httpd ã‚’èµ·å‹•ã™ã‚‹ã‹ã«ã¤ã„ã¦è¨˜è¿°ã—ã¦ã„ã¾ã™ã€‚

    top

    Apache ã®èµ·å‹•方法

    ã‚‚ã—ã€è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ä¸­ã§æŒ‡å®šã•れã¦ã„ã‚‹ Listen ãŒãƒ‡ãƒ•ォルト㮠80 (ã‚‚ã—ã㯠1024 以下ã®ä»–ã®ãƒãƒ¼ãƒˆ) ã§ã‚ã‚‹å ´åˆã¯ã€Apache ã‚’èµ·å‹•ã™ã‚‹ãŸã‚ã«ã¯ root 権é™ãŒå¿…è¦ã«ãªã‚Šã¾ã™ãŒã€ ã“れã¯ã“ã®ç‰¹æ¨©ãƒãƒ¼ãƒˆã«ãƒã‚¤ãƒ³ãƒ‰ã™ã‚‹ãŸã‚ã§ã™ã€‚ èµ·å‹•ã—ã¦ã€ä¸€åº¦ãƒ­ã‚°ãƒ•ァイルを開ãã¨ã„ã£ãŸæº–å‚™ã®ãŸã‚㮠動作を幾ã¤ã‹å®Ÿè¡Œã—ãŸå¾Œã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã™ã‚‹ listen ã¨å¿œç­”を実際ã«è¡Œã†å­ãƒ—ロセスを起動ã—ã¾ã™ã€‚ メイン㮠httpd プロセス㯠root 権é™ã§èµ°ã‚Šç¶šã‘ã¾ã™ãŒã€ å­ãƒ—ロセスã¯ã‚‚ã£ã¨ä½Žã„権é™ã§èµ°ã‚Šã¾ã™ã€‚ ã“れã¯é¸æŠžã—ãŸãƒžãƒ«ãƒãƒ—ロセッシングモジュールã§åˆ¶å¾¡ã•れã¾ã™ã€‚

    推奨㮠httpd 実行プログラムã®èµ·å‹•方法ã¯ã€ apachectl 制御スクリプトを使用ã™ã‚‹æ–¹æ³•ã§ã™ã€‚ã“ã®ã‚¹ã‚¯ãƒªãƒ—トã¯ã€httpd ãŒã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ä¸Šã§æ­£å¸¸ã«å‹•作ã™ã‚‹ã‚ˆã†ã«å¿…è¦ãªç’°å¢ƒå¤‰æ•°ã‚’ é©åˆ‡ã«è¨­å®šã—ã¦ã€httpd ãƒã‚¤ãƒŠãƒªã‚’èµ·å‹•ã—ã¾ã™ã€‚ apachectl ã¯ã©ã‚“ãªã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³å¼•数も通éŽã•ã›ã¾ã™ã®ã§ã€ httpd ã®ã©ã®ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‚ªãƒ—ションも apachectl ã®ã‚ªãƒ—ションã¨ã—ã¦ä½¿ç”¨ã§ãã¾ã™ã€‚ ã¾ãŸã€apachectl スクリプトを直接編集ã—〠スクリプト先頭付近㮠HTTPD 変数を変更ã™ã‚‹ã“ã¨ã§ã€ httpd ãƒã‚¤ãƒŠãƒªã®æ­£ã—ã„ä½ç½®ã‚’指定ã—ãŸã‚Šã€å¸¸ã« 付加ã•ã›ã‚‹ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³å¼•数を指定ã—ãŸã‚Šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    httpd ãŒèµ·å‹•ã•れã¦ã¾ãšæœ€åˆã«ã™ã‚‹ã“ã¨ã¯ã€ 設定ファイル httpd.conf ã®ä½ç½®ã‚’特定ã—ã¦èª­ã¿è¾¼ã‚€ã“ã¨ã§ã™ã€‚ ã“ã®ãƒ•ァイルã®ä½ç½®ã¯ã‚³ãƒ³ãƒ‘イル時ã«è¨­å®šã•れã¾ã™ãŒã€å®Ÿè¡Œæ™‚ã« -f コマンドラインオプションを使ã£ã¦ ä½ç½®ã‚’指定ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚例ãˆã°æ¬¡ã®ã‚ˆã†ã«ã§ã™ã€‚

    /usr/local/apache2/bin/apachectl -f /usr/local/apache2/conf/httpd.conf

    スタートアップãŒä¸‡äº‹ä¸Šæ‰‹ãã„ã£ãŸã‚‰ã€ã‚µãƒ¼ãƒã¯ã‚¿ãƒ¼ãƒŸãƒŠãƒ«ã‹ã‚‰ 切り離ã•れã¦ã€ã‚³ãƒžãƒ³ãƒ‰ãƒ—ロンプトãŒå³åº§ã«æˆ»ã£ã¦ãã‚‹ã§ã—ょã†ã€‚ ã“れã¯ã‚µãƒ¼ãƒãŒèµ·å‹•ã—ã¦ã„る状態を示ã—ã¦ã„ã¾ã™ã€‚ ãã®å¾Œã¯ãƒ–ラウザã§ã‚µãƒ¼ãƒã«æŽ¥ç¶šã—ã¦ã€ DocumentRoot ディレクトリã®ãƒ†ã‚¹ãƒˆãƒšãƒ¼ã‚¸ã‚’見るã“ã¨ãŒã§ãã‚‹ã§ã—ょã†ã€‚

    top

    起動時ã®ã‚¨ãƒ©ãƒ¼

    Apache ã¯ã€èµ·å‹•時ã«è‡´å‘½çš„ãªå•題ã«é­é‡ã™ã‚‹ã¨ã€ 終了ã™ã‚‹å‰ã«ã€ã‚³ãƒ³ã‚½ãƒ¼ãƒ«ã‹ ErrorLog ã®ã©ã¡ã‚‰ã‹ã«å•題を記述ã—ãŸãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’出力ã—ã¾ã™ã€‚ 最もよãã‚るエラーメッセージ㯠「Unable to bind to Port ...〠ã§ã™ã€‚ã“ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯æ™®é€šã¯æ¬¡ã®ã©ã¡ã‚‰ã‹ãŒåŽŸå› ã§ã™ã€‚

    • root ã§ãƒ­ã‚°ã‚¤ãƒ³ã—ã¦ã„ãªã„時ã«ã€ 特権ãƒãƒ¼ãƒˆã§ã‚µãƒ¼ãƒã‚’èµ·å‹•ã—よã†ã¨ã—ãŸã€‚
    • åŒã˜ãƒãƒ¼ãƒˆã«æ—¢ã«ãƒã‚¤ãƒ³ãƒ‰ã•れã¦ã„ã‚‹ Apache ãŒã‚‚ã†ä¸€ã¤ã‚ã‚‹ã¨ãã‚„ä»–ã®ã‚¦ã‚§ãƒ–サーãƒãŒå­˜åœ¨ã—ã¦ã„る時ã«ã€ サーãƒã‚’é–‹å§‹ã—よã†ã¨ã—ãŸã€‚

    より多ãã®å•é¡Œè§£æ±ºã®æ–¹ç­–ã®èª¬æ˜Žã¯ã€ Apache FAQ ã‚’ã”覧下ã•ã„。

    top

    ブート時ã®èµ·å‹•

    システムãŒãƒªãƒ–ートã—ãŸå¾Œã§ã‚‚ サーãƒãŒå®Ÿè¡Œã•れ続ã‘るよã†ã«ã—ãŸã„å ´åˆã¯ã€ apachectl を呼ã³å‡ºã™ã‚‚ã®ã‚’システムスタートアップファイル (通常 rc.local ã‚„ rc.N 内ã®ãƒ•ァイル) ã«è¿½åŠ ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 ã“ã®æ–¹æ³•ã§ã¯ Apache ã‚’ root 権é™ã§èµ·å‹•ã—ã¾ã™ã€‚ ã“れをã™ã‚‹å‰ã«ã€ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã‚„アクセス制é™ãŒ é©åˆ‡ã«è¨­å®šã•れã¦ã„ã¦ã„ã‚‹ã“ã¨ã‚’確èªã—ã¦ãã ã•ã„。

    apachectl スクリプトã¯é€šå¸¸ã¯ã€æ¨™æº–的㪠SysV init スクリプトã¨ã—ã¦å‹•作ã™ã‚‹ã‚ˆã†ã«è¨­è¨ˆã•れã¦ã„ã¾ã™ã€‚ start, restart, stop ã¨ã„ã£ãŸå¼•æ•°ã‚’ã¨ã£ã¦ã€httpd ã¸ã®é©åˆ‡ãªã‚·ã‚°ãƒŠãƒ«ã«å¤‰æ›ã—ã¾ã™ã€‚ ã§ã™ã‹ã‚‰ã€é€šå¸¸ã¯å˜ã«é©åˆ‡ãª init ディレクトリ内ã‹ã‚‰ apachectl ã¸ãƒªãƒ³ã‚¯ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã—ã‹ã—〠念ã®ãŸã‚システムã®è¦æ±‚ã«åˆè‡´ã—ã¦ã„ã‚‹ã“ã¨ã‚’確èªã—ã¦ãã ã•ã„。

    top

    追加情報

    httpd ã‚„ apachectlã€ã‚µãƒ¼ãƒã«å«ã¾ã‚Œã¦ã„ãŸãã®ä»–補助プログラムã®ã€ コマンドラインオプションã«é–¢ã™ã‚‹è¿½åŠ æƒ…å ±ã¯ã€ サーãƒã¨è£œåŠ©ãƒ—ãƒ­ã‚°ãƒ©ãƒ ãƒšãƒ¼ã‚¸ã« è¨˜è¼‰ã•れã¦ã„ã¾ã™ã€‚ Apache é…布ã«å«ã¾ã‚Œã¦ã„る全モジュール〠ãれã«ã‚ˆã£ã¦æä¾›ã•れるディレクティブ ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚‚ã‚りã¾ã™ã€‚

    翻訳済ã¿è¨€èªž:  de  |  en  |  es  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/bind.html.ja.utf80000644000000000000500000003453213412755316016537 0ustar rootsrc ãƒã‚¤ãƒ³ãƒ‰ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
    <-

    ãƒã‚¤ãƒ³ãƒ‰

    翻訳済ã¿è¨€èªž:  de  |  en  |  fr  |  ja  |  ko  |  tr 

    ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹ å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ 最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。

    Apache ãŒä½¿ç”¨ã™ã‚‹ã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ãƒãƒ¼ãƒˆã®è¨­å®šã‚’ã—ã¾ã™ã€‚

    top

    概è¦

    Apache ã¯èµ·å‹•時ã«ã€ãƒ­ãƒ¼ã‚«ãƒ«ãƒžã‚·ãƒ³ã®ã‚ã‚‹ãƒãƒ¼ãƒˆãŠã‚ˆã³ã‚¢ãƒ‰ãƒ¬ã‚¹ ã«å¯¾ã—ã¦æŽ¥ç¶šã—ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæ¥ã‚‹ã®ã‚’å¾…ã¡ã¾ã™ã€‚ デフォルトã§ã¯ãƒžã‚·ãƒ³ã®ã™ã¹ã¦ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã«å¯¾ã—㦠Listen ã—ã¾ã™ã€‚ 特定ã®ãƒãƒ¼ãƒˆã‹ã€ç‰¹å®šã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã®ã¿ã‹ã€ ã¾ãŸã¯ãれらã®çµ„ã¿åˆã‚ã›ã§ Listen ã™ã‚‹ã‚ˆã†ã«æŒ‡å®šã—ãŸã„å ´åˆã‚‚ã‚りã¾ã™ã€‚ ç•°ãªã‚‹ IP アドレスã€ãƒ›ã‚¹ãƒˆåã€ãƒãƒ¼ãƒˆã«å¯¾ã—㦠Apache ãŒã©ã®ã‚ˆã†ã« 応答ã™ã‚‹ã‹ã‚’制御ã™ã‚‹ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆæ©Ÿèƒ½ã¨çµ„ã¿åˆã‚ã›ã¦ã‚ˆã使ã‚れã¾ã™ã€‚

    Listen ディレクティブã§ã€ç‰¹å®šã®ãƒãƒ¼ãƒˆã‚„アドレス・ãƒãƒ¼ãƒˆã®çµ„ã‹ã‚‰å…¥ã£ã¦ãã‚‹ リクエストã®ã¿ã‚’å—ã‘付ã‘るよã†ã«ã§ãã¾ã™ã€‚ ã‚‚ã—ãƒãƒ¼ãƒˆç•ªå·ã ã‘㌠Listen ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã•れãŸå ´åˆã¯ã€ ã™ã¹ã¦ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ェースã®ä¸Žãˆã‚‰ã‚ŒãŸãƒãƒ¼ãƒˆç•ªå·ã«å¯¾ã—㦠Listen ã—ã¾ã™ã€‚ IP アドレスã¨ãƒãƒ¼ãƒˆç•ªå·ã¨ãŒåŒæ™‚ã«ä¸Žãˆã‚‰ã‚ŒãŸå ´åˆã¯ã€ サーãƒã¯ä¸Žãˆã‚‰ã‚ŒãŸã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ェースã®ãƒãƒ¼ãƒˆã‚’ Listen ã—ã¾ã™ã€‚ Listen ディレクティブを複数使ã£ã¦ Listen ã™ã‚‹ã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ãƒãƒ¼ãƒˆã‚’ã„ãã¤ã‚‚指定ã§ãã¾ã™ã€‚ サーãƒã¯æŒ‡å®šã•れãŸã‚¢ãƒ‰ãƒ¬ã‚¹ã‚„ãƒãƒ¼ãƒˆã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã™ã¹ã¦ã« 対ã—ã¦å¿œç­”ã—ã¾ã™ã€‚

    ãŸã¨ãˆã°ã€å…¨ã¦ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ェースã®ãƒãƒ¼ãƒˆ 80 㨠8000 ã®ä¸¡æ–¹ã«ãŠã„㦠接続をå—ã‘付ã‘ã‚‹ã«ã¯

    Listen 80
    Listen 8000

    ã¨ã—ã¾ã™ã€‚ ã‚るインターフェースã§ã¯ 80 番ã§ã€ã¾ãŸã€åŒæ™‚ã«ä»–ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ェース㮠8000 番ãƒãƒ¼ãƒˆã§æŽ¥ç¶šã‚’å—ã‘付ã‘ã‚‹ã«ã¯ã€

    Listen 192.0.2.1:80
    Listen 192.0.2.5:8000

    ã¨ã—ã¾ã™ã€‚ IPv6 アドレスã¯ã€è§’æ‹¬å¼§ã§æ¬¡ã®ä¾‹ã®ã‚ˆã†ã«å›²ã¾ãªã‘れã°ã„ã‘ã¾ã›ã‚“。

    Listen [2001:db8::a00:20ff:fea7:ccea]:80

    top

    IPv6 ã®ç‰¹è¨˜äº‹é …

    多ãã®ãƒ—ラットホーム㧠IPv6 ãŒã‚µãƒãƒ¼ãƒˆã•れã¦ãã¦ã„ã¦ã€ APR ã¯ã“れらã®ã»ã¨ã‚“ã©ã§ IPv6 をサãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã®ã§ã€ Apache 㯠IPv6 ソケットを割り当ã¦ã¦ IPv6 経由ã§é€ã‚‰ã‚Œã¦ããŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã†ã“ã¨ãŒã§ãã¾ã™ã€‚

    IPv6 ソケット㌠IPv4 㨠IPv6 コãƒã‚¯ã‚·ãƒ§ãƒ³ã®ä¸¡æ–¹ã‚’扱ã†ã“ã¨ãŒã§ãã‚‹ã‹ ã©ã†ã‹ã¯ã€Apache 管ç†è€…ã«ã¨ã£ã¦åބ介ãªå•題ã§ã™ã€‚ IPv4 コãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’ IPv6 ã‚½ã‚±ãƒƒãƒˆã§æ‰±ã†å ´åˆã¯ã€ IPv4 マップã•れ㟠IPv6 アドレスを使用ã—ã¦ã„ã¦ã€ ã»ã¨ã‚“ã©ã®ãƒ—ラットホームã§ã¯ãƒ‡ãƒ•ォルトã§ä½¿ç”¨å¯èƒ½ã§ã™ãŒã€ FreeBSD, NetBSD, OpenBSD ã§ã¯ã€ã‚·ã‚¹ãƒ†ãƒ å…¨ä½“ã¨ã—ã¦ã®ãƒãƒªã‚·ãƒ¼ã¨ã®æ•´åˆæ€§ã‹ã‚‰ã€ デフォルトã§ã¯ä½¿ç”¨ä¸å¯ã«è¨­å®šã•れã¦ã„ã¾ã™ã€‚ ã“れらã®ãƒ‡ãƒ•ォルトã§ä½¿ç”¨ä¸å¯ã®ãƒ—ラットホームã§ã‚ã£ã¦ã‚‚〠特別㪠configure 㮠設定パラメータ㧠Apache ã®æŒ™å‹•を変化ã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚

    一方ã§ã€Linux ã‚„ Tru64 ã¨ã„ã£ãŸãƒ—ラットホーム㧠IPv4 㨠IPv6 ã®ä¸¡æ–¹ã‚’扱ã†ã«ã¯ã€ãƒžãƒƒãƒ—ドアドレスを使用ã™ã‚‹ä»¥å¤–ã®æ–¹æ³•ã¯ã‚りã¾ã›ã‚“。 IPv4 㨠IPv6 ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’最å°é™ã®ã‚½ã‚±ãƒƒãƒˆã§æ‰±ã„ãŸã„ã®ã§ã‚れã°ã€ IPv4 マップ㮠IPv6 アドレスを使用ã™ã‚‹å¿…è¦ãŒã‚り〠--enable-v4-mapped configure オプションを指定ã—ã¾ã™ã€‚

    --enable-v4-mapped ã¯ã€ FreeBSD, NetBSD, OpenBSD 以外ã®å…¨ã¦ã®ãƒ—ラットホームã§ã®ãƒ‡ãƒ•ォルトã§ã™ã€‚ ã§ã™ã‹ã‚‰ã€ãŠãらããŠæ‰‹å…ƒã® Apache ã¯ã“ã®è¨­å®šã§ãƒ“ルドã•れã¦ã„ã‚‹ã§ã—ょã†ã€‚

    プラットフォームや APR ãŒä½•をサãƒãƒ¼ãƒˆã™ã‚‹ã‹ã«é–¢ã‚らãšã€ IPv4 コãƒã‚¯ã‚·ãƒ§ãƒ³ã®ã¿ã‚’扱ã†ã‚ˆã†ã«ã—ãŸã„å ´åˆã¯ã€ 次ã®ä¾‹ã®ã‚ˆã†ã«å…¨ã¦ã® Listen ディレクティブ㧠IPv4 アドレスを指定ã—ã¦ãã ã•ã„。

    Listen 0.0.0.0:80
    Listen 192.0.2.1:80

    æ¡ä»¶ã‚’満ãŸã™ãƒ—ラットホームã§ã€Apache ㌠IPv4 㨠IPv6 ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’別々ã®ã‚½ã‚±ãƒƒãƒˆã§æ‰±ã†ã‚ˆã†ã«ã—ãŸã„å ´åˆ (ã¤ã¾ã‚Š IPv4 マップã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’無効ã«ã—ãŸã„å ´åˆ) ã¯ã€--disable-v4-mapped configure オプションを指定ã—ã¦ã€æ¬¡ã®ã‚ˆã†ã«å€‹åˆ¥æŒ‡å®šã® Listen ディレクティブを使用ã—ã¦ãã ã•ã„。 --disable-v4-mapped ã¯ã€ FreeBSD, NetBSD, OpenBSD プラットホームã§ã®ãƒ‡ãƒ•ォルトã§ã™ã€‚

    top

    ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«å¯¾ã—ã¦ã©ã†åƒãã®ã‹

    Listen ディレクティブ ã§ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãŒå®Ÿè£…ã•れるã‚ã‘ã§ã¯ã‚りã¾ã›ã‚“。 Listen ã¯å˜ã«ãƒ¡ã‚¤ãƒ³ã‚µãƒ¼ãƒã«ã©ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ãƒãƒ¼ãƒˆã‚’ Listen ã™ã¹ãã‹ã‚’ æ•™ãˆã‚‹ã ã‘ã§ã™ã€‚ <VirtualHost> ディレクティブãŒä½¿ã‚れãªã„å ´åˆã¯ã€ å—ã‘入れãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã™ã¹ã¦ã«å¯¾ã—ã¦å…¨ãåŒã˜æŒ™å‹•ã‚’ã—ã¾ã™ã€‚ ã—ã‹ã—ãªãŒã‚‰ <VirtualHost> を使ã£ã¦ã€ 一ã¤ä»¥ä¸Šã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚„ãƒãƒ¼ãƒˆã«å¯¾ã—ã¦ç•°ãªã‚‹æŒ™å‹•ã‚’ã™ã‚‹ã‚ˆã†ã« 指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ VirtualHost を実装ã™ã‚‹ã«ã¯ã€ã¾ãšåˆã‚ã«ä½¿ç”¨ã—ãŸã„アドレスã¨ãƒãƒ¼ãƒˆã«å¯¾ã—㦠サーãƒãŒ Listen ã—ã¦ã„ãªã‘れã°ãªã‚Šã¾ã›ã‚“。 ãã—ã¦ã€ãã®æŒ‡å®šã—ãŸã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ãƒãƒ¼ãƒˆã§ã® ã“ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®æŒ™å‹•を設定ã™ã‚‹ãŸã‚ã«ã€ <VirtualHost> セクションを作りã¾ã™ã€‚ã‚‚ã— <VirtualHost> ㌠Listen ã—ã¦ã„ãªã„アドレスã¨ãƒãƒ¼ãƒˆã«å¯¾ã—㦠設定ã•れã¦ã—ã¾ã†ã¨ã€ ãれã«ã¯ã‚¢ã‚¯ã‚»ã‚¹ã§ããªã„ã¨ã„ã†ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。

    翻訳済ã¿è¨€èªž:  de  |  en  |  fr  |  ja  |  ko  |  tr 

    top

    コメント

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    httpd-2.4.41/docs/manual/style/0002755000000000000500000000000013523273357014615 5ustar rootsrchttpd-2.4.41/docs/manual/style/manualpage.dtd0000644000000000000500000000207212273272705017420 0ustar rootsrc %common; httpd-2.4.41/docs/manual/style/sitemap.dtd0000644000000000000500000000262112273272705016750 0ustar rootsrc %common; httpd-2.4.41/docs/manual/style/version.ent0000644000000000000500000000163513521115070016776 0ustar rootsrc httpd-2.4.41/docs/manual/style/lang.dtd0000644000000000000500000000161310455053115016217 0ustar rootsrc %HTTPD-VERSION; httpd-2.4.41/docs/manual/style/common.dtd0000644000000000000500000001336313206512634016576 0ustar rootsrc %HTMLlat1; %HTMLsymbol; %HTMLspecial; %HTTPD-VERSION; httpd-2.4.41/docs/manual/style/faq.dtd0000644000000000000500000000233712273272705016061 0ustar rootsrc %common; httpd-2.4.41/docs/manual/style/xsl/0002755000000000000500000000000013523273357015423 5ustar rootsrchttpd-2.4.41/docs/manual/style/xsl/util/0002755000000000000500000000000013523273357016400 5ustar rootsrchttpd-2.4.41/docs/manual/style/css/0002755000000000000500000000000013523273346015403 5ustar rootsrchttpd-2.4.41/docs/manual/style/css/prettify.css0000644000000000000500000000704012113256271017752 0ustar rootsrc/* Pretty printing styles. Used with prettify.js. */ /* SPAN elements with the classes below are added by prettyprint. */ .pln { color: #000 } /* plain text */ @media screen { .str { color: #060 } /* string content */ .kwd { color: #006 } /* a keyword */ .com { color: #600 } /* a comment */ .typ { color: #404 } /* a type name */ .lit { color: #066 } /* a literal value */ /* punctuation, lisp open bracket, lisp close bracket */ .pun, .opn, .clo { color: #660 } .tag { color: #008 } /* a markup tag name */ .atn { color: #606 } /* a markup attribute name */ .atv { color: #080 } /* a markup attribute value */ .dec, .var { color: #606 } /* a declaration; a variable name */ .fun { color: red } /* a function name */ } /* Use higher contrast and text-weight for printable form. */ @media print, projection { .str { color: #060 } .kwd { color: #006; font-weight: bold } .com { color: #600; font-style: italic } .typ { color: #404; font-weight: bold } .lit { color: #044 } .pun, .opn, .clo { color: #440 } .tag { color: #006; font-weight: bold } .atn { color: #404 } .atv { color: #060 } } /* Put a border around prettyprinted code snippets. */ pre.prettyprint { padding: 2px; border: 1px solid #888; tab-size: 4; overflow: auto; overflow-y: hidden; } /* Specify class=linenums on a pre to get line numbering */ ol.linenums { margin-top: 0; margin-bottom: 0 } /* IE indents via margin-left */ li.L0, li.L1, li.L2, li.L3, li.L5, li.L6, li.L7, li.L8 { list-style-type: none } /* Alternate shading for lines */ li.L1, li.L3, li.L5, li.L7, li.L9 { background: #eee } /* Highlighting style for Apache configuration files */ pre.lang-config{ background-color: #e5ecf3; color: #000; padding: 0.5em; margin: 1em 2em 1em 1em; border: none; } .lang-config .tag { color: #821; font-weight: bold } /* enclosures */ .lang-config .kwd { color: #128; font-weight: bold } /* directives */ .lang-config .com { color: #c46d34 } /* comments */ .lang-config .lit { color: #077 } /* miscellaneous types: Options arguments, handler names etc */ /* Highlighting style for C source code */ pre.lang-c{ background-color: #f8f6ee; color: #000; padding: 0.5em; margin: 1em 2em 1em 1em; border: 1px dotted #666; } .lang-c .com { color: #c46d34 } /* a comment */ .lang-c .lit { color: #088 } /* a literal */ .lang-c .str { color: #009606 } /* string content */ .lang-c .kwd { color: #00C; font-weight: bold } /* a keyword */ .lang-c .typ { color: #808 } /* a type name */ .lang-c .tag { color: #248 } /* a markup tag name */ /* Highlighting style for Lua source code */ pre.lang-lua{ background-color: #f8f6ee; color: #000; padding: 0.5em; margin: 1em 2em 1em 1em; border: 1px dotted #666; } .lang-lua .com { color: #c34e00 } /* a comment */ .lang-lua .lit { color: #088 } /* a literal (in this context; a known directive argument, a number or an IP address) */ .lang-lua .str { color: #009606 } /* string content */ .lang-lua .kwd { color: #00C; font-weight: bold } /* a keyword */ .lang-lua .typ { color: #808 } /* a type name */ /* Highlighting style for Perl source code */ pre.lang-perl{ background-color: #f8f6ee; color: #000; padding: 0.5em; margin: 1em 2em 1em 1em; border: 1px dotted #666; } .lang-perl .com { color: #c34e00 } /* a comment */ .lang-perl .lit { color: #088 } /* a literal */ .lang-perl .str { color: #009606 } /* string content */ .lang-perl .kwd { color: #00C; font-weight: bold } /* a keyword */ .lang-perl .typ { color: #808 } /* a type name */ httpd-2.4.41/docs/manual/style/css/manual-zip.css0000644000000000000500000000155210455056330020164 0ustar rootsrc@import url(manual.css); /* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ h1 { margin: 0 0 0.5em 0; } /* the end */ httpd-2.4.41/docs/manual/style/css/manual-print.css0000644000000000000500000003162010455056330020515 0ustar rootsrc/* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * manual.css for printers * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * mainframe ;-) * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ html { font-size: 11pt; } body { background-color: #fff; color: #000; padding: 0 0 0 0; margin: 0; font-family: "Times New Roman", serif; font-weight: normal; } pre, code { font-family: "Courier New", Courier, monospace; } strong { font-weight: bold; } q, em, var { font-style: italic; } span.transnote, span.phonetic { font-weight: normal; background-color: inherit; color: #888; } /* fixup IE & Opera * otherwise they forget to inherit * the computed font-size value */ table, code { font-size: 1em; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * Links * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* normal links */ /* ====================== */ a:link, a:visited, a:hover, a:active { color: #000; background-color: inherit; text-decoration: none; } /* sidebar */ div#quickview a:hover, div#quickview a:active { background-color: #fff; color: #000; } /* EXPERIMENTAL! I'm waiting for complaints... */ #page-content p > a[href]:after { content: " (\002197\0000A0" attr(href) ") "; color: #036; } /* code.module [links] */ /* ====================== */ code.module, code.module a:link, code.module a:visited, code.module a:hover, code.module a:active { color: #8b4513; background-color: inherit; text-decoration: none; } /* code.directive [links] */ /* ====================== */ code.directive, code.directive a:link, code.directive a:visited, code.directive a:hover, code.directive a:active { color: #287f00; background-color: inherit; text-decoration: none; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * Headings * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* h1 */ /* ====================== */ h1 { padding: 0 0 0.2em 0; margin: 1em 0 0.5em 0; border-style: none none solid none; border-bottom-width: 1px; border-bottom-color: #405871; background-color: inherit; color: #000; text-decoration: none; font-size: 17pt; font-weight: bold; text-align: center; } /* h2 */ /* ====================== */ h2 { padding: 0.2em 0 0.2em 0.2em; margin: 0 0 0.5em 0; width: 80%; text-decoration: none; font-size: 15pt; font-weight: bold; border-bottom: 1px solid #000; text-align: left; } .section h2, .directive-section h2, .category h2 { background-color: #fff; color: #000; } /* take care of s inside */ h2 a, h2 a:hover, h2 a:active { color: inherit; background-color: inherit; text-decoration: none; } /* h3, h4 */ /* ====================== */ h3 { background-color: inherit; color: #000; text-decoration: none; font-weight: bold; font-size: 13pt; margin: 1.3em 0 0.4em 0; padding: 0 0 0 0.2em; } h4 { background-color: inherit; color: #000; text-decoration: none; font-weight: bold; font-size: 11pt; margin: 1.3em 0 0.2em 0; padding: 0 0 0 0.2em; } /* margin adjustment */ h3 + *, h4 + * { margin-top: 0; } /* IE confuses the + * :-( * so reset some things */ ul, .section table, .directive-section table { margin-bottom: 1em; } /* titles for * examples, notes and warnings */ div.example h3, div.note h3, div.warning h3 { margin: 0 0 0.5em 0; text-align: left; font-size: 11pt; } /* sidebar */ div#quickview h3 { margin: 1em 0 0.3em 0; font-size: 13pt; } div#quickview h3.directives { margin-top: 0; } /* take care of s inside */ h3 a, h3 a:hover, h3 a:active, h4 a, h4 a:hover, h4 a:active { color: inherit; background-color: inherit; text-decoration: none; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * Up & Top helper images * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ div.up, div.top { display: none; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * Tables * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* general */ /* ====================== */ table { border: 1px solid #000; border-collapse: collapse; padding: 2px; margin-top: 0.5em; margin-bottom: 0; margin-left: 1px; /* border-width == 1px */ } td, th { empty-cells: show; /* show border around empty cells */ padding: 0.1em 0.2em; vertical-align: top; text-align: left; line-height: 1.1em; } th { font-weight: bold; } td.centered { text-align: center; } tr.header, tr.header th { border-top: 1px solid #000; border-bottom: 1px solid #000; } /* bordered table cells */ /* ====================== */ /* turn off borders in tables nested in * bordered tables per default */ table.bordered table td, table.bordered table th { border-style: none; } table.bordered td, table.bordered th, table table.bordered td, table table.bordered th { border: 1px solid #000; } /* mod/dir. overview table and quick reference */ /* ============================================ */ table.module th, table.directive th { white-space: nowrap; } table.qref { border-collapse: collapse; width: auto; } table.qref td { border-style: none solid; border-color: #000; border-width: 1px; } table.qref td.descr { padding-left: 1em; font-size: 11pt; } table#legend { width: 100%; border-style: none; border-width: 0; vertical-align: bottom; padding: 0; margin: 0; } table#legend td { vertical-align: bottom; margin: 0; padding: 0; } table#legend table { vertical-align: bottom; margin: 0 0 0 0.4em; padding: 0; height: 7.5em; } table#legend td.letters span { display: none; } table#legend table td, table#legend table th { vertical-align: middle; padding: 0.1ex 0.2em; line-height: 1em; } /* related modules & dir. */ /* ====================== */ /* assuming, all links are enclosed by * or * */ table.related { border-collapse: collapse; } table.related th, table.related td { background-color: #fff; color: #000; padding: 0.2ex 0.4em; border: 1px solid #000; } table.related th { vertical-align: middle; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * Lists * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* list default values */ /* ====================== */ ul { list-style-type: disc; } ul ul { list-style-type: square; } ul ul ul { list-style-type: circle; } li, dt, dd { line-height: 1.1em; } dt { margin-top: 0.5em; font-weight: bold; } ol li { margin-top: 0.5em; } ol.up-A { list-style-type: upper-alpha; } /* table of contents */ /* ====================== */ #toc, #topics { margin: 0; padding: 0; } #toc li, #topics li { list-style-type: square; margin: 0 0 1em 0; padding: 0; } #toc li img, #topics li img { margin-right: 19px; } /* see also */ /* ====================== */ .seealso { margin: 0; padding: 0; } .seealso li { list-style-type: square; margin: 0 0 1em 0; padding: 0 0 0 34px; } /* related modules & dir. */ /* ====================== */ table.related td ul, table.related td li { list-style-type: none; margin: 0; padding: 0; } /* list of all directives */ /* ====================== */ div#directive-list ul { margin: 0; padding: 0; } /* quickview */ /* ====================== */ div#quickview li { font-size: 11pt; } div#quickview ul { margin: 0; padding: 0; } div#quickview ul#toc { margin: 0; padding: 0; } div#quickview ul#toc li { margin: 0 0 0 1em; padding: 0; list-style-type: square; list-style-position: outside; } div#quickview li img { display: none; } #module-index div#quickview ul#toc, #manual-page div#quickview ul#toc, div#quickview #topics, div#quickview .seealso { padding-left: 0; } #module-index div#quickview ul#toc li, #manual-page div#quickview ul#toc li, div#quickview #topics li, div#quickview .seealso li { margin: 0 0 2px 1em; padding: 0; list-style-type: square; list-style-position: outside; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * main page sections * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* page header */ /* ====================== */ div#page-header { margin-left: 0; } div#page-header img { display: none; } div#page-header p.apache { background-color: #fff; color: #000; padding: 0; margin: 0; text-align: center; vertical-align: middle; font-size: 20pt; font-weight: bold; line-height: 20pt; } div#page-header p.menu { display: none; } /* breadcrumb navigation */ div#path { display: none; } /* content sections */ /* ====================== */ div#preamble { padding-bottom: 1em; margin-left: 0; } div.section, div.directive-section { margin: 0; padding: 0; } .section p, .directive-section p { margin: 0 0 1em 0; padding: 0; } /* look for this on directive * list pages */ div#directive-list { margin-left: 0; padding: 0 0 1em 1em; } div#directive-ref { margin: -1em 0 0 1px; padding: 0 0 1em 0; width: auto; } /* no sidebar */ div#quickview { position: static; margin: 0 0 1em 0; padding: 0; width: auto; background-color: #fff; color: inherit; } /* -> keep content wide */ div#page-content { padding-top: 0; margin-right: 0; padding-right: 0; } /* in general */ p { line-height: 1.1em; } /* page footer */ /* ====================== */ div#footer { margin-left: 0; font-size: 11pt; border-top: 1px solid #000; padding-top: 0.2em; } div#footer p.apache { float: none; text-align: center; padding: 0 0 1em 0; margin-top: 0; font-weight: bold; } div.toplang, div.bottomlang, div#footer p.menu { display: none; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * subsections (examples, notes, warnings) * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* examples */ /* ====================== */ div.example, div.note div.example { background-color: #fff; color: #000; padding: 0.5em; margin: 1em; border: 1px dotted #000; } /* the following [block] elements * may appear inside example... */ div.example p, div.example pre, div.example table { padding: 0; margin: 0; } div.example p { line-height: 1em; } div.example pre, div.example p > code { font-size: 10pt; } /* notes & warnings */ /* ====================== */ div.note, div.warning { background-color: #fff; color: #000; border: 1px solid #000; padding: 0.5em; margin: 1em; } div.note p, div.warning p { margin: 0; padding: 0; } div.note pre, div.warning pre { font-size: 10pt; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * quotations, indented paragraphs and figures * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ p.letters { display: none; } blockquote p { font-style: italic; margin: 0; } blockquote p.cite { font-style: normal; margin-top: 0; margin-left: 2em; } blockquote p.cite cite { font-style: normal; } p.indent { margin-left: 2em; margin-top: 1em; } #index-page form { display: none; } p.figure { margin-left: 2em; font-style: italic; } p.figure img { border: 1px solid #000; } p.figure dfn { font-weight: bold; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * -> The End <- * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ httpd-2.4.41/docs/manual/style/css/manual-chm.css0000644000000000000500000000162310455056330020130 0ustar rootsrc@import url(manual-loose-100pc.css); /* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ html { font-size: 95%; } h1 { margin: 0 0 0.5em 0; } /* the end */ httpd-2.4.41/docs/manual/style/css/manual-loose-100pc.css0000644000000000000500000000577110455056330021333 0ustar rootsrc/* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * manual.css - no sidebar, 100% normal font height * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* import the main CSS, so we * have to adjust only a few things */ @import url(manual.css); html { font-size: 100%; } /* "sidebar" background is white here */ div#quickview a:hover, div#quickview a:active { background-color: #f0f0f0; color: #0073c7; } div#quickview code.module a:hover, div#quickview code.module a:active { background-color: #f0f0f0; color: #8b4513; } div#quickview code.directive a:hover, div#quickview code.directive a:active { background-color: #f0f0f0; color: #287f00; } h1 { font-size: 1.5em; } h2 { font-size: 1.2em; } .category h2 { font-size: 1em; } h3 { font-size: 1.1em; } h4 { font-size: 1em; } div.example h3, div.note h3, div.warning h3 { font-size: 1em; } div#quickview h3, div#quickview h3.directives { margin: 1em 0 0.3em 0; font-size: 1.1em; } div#quickview h3.directives { margin-top: 0; } div#quickview li { font-size: 1em; } div#quickview ul { margin-bottom: 1em; } div#quickview ul#toc { margin-left: 0; } div#quickview li img { display: inline; margin-right: 19px; } #module-index div#quickview ul#toc, #manual-page div#quickview ul#toc, div#quickview #topics { padding-left: 0; } div#quickview .seealso { padding-left: 34px; } #module-index div#quickview ul#toc li, #manual-page div#quickview ul#toc li, div#quickview #topics li, div#quickview .seealso li { margin: 0; list-style-type: none; } div#page-header p.menu, div#path, div#footer { font-size: smaller; } div#quickview { position: static; margin: 0 0 1em 30px; padding: 0; width: auto; background-color: #fff; } div#page-content { margin-right: 0; padding-right: 0; } div.example pre, div.example p > code { font-size: 0.9em; } div.note pre, div.warning pre { font-size: 0.9em; } table.qref td.descr { font-size: 0.9em; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * -> The End <- * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ httpd-2.4.41/docs/manual/style/css/manual.css0000644000000000000500000004521113154522721017365 0ustar rootsrc/* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * manual.css * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * mainframe ;-) * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ html { font-size: 14px; } body { background-color: #fff; color: #036; padding: 0 1em 0 0; margin: 0; font-family: Arial, Helvetica, sans-serif; font-weight: normal; } pre, code { font-family: "Courier New", Courier, monospace; } strong { font-weight: bold; } q, em, var { font-style: italic; } span.transnote, span.phonetic { font-weight: normal; background-color: inherit; color: #888; } /* fixup IE & Opera * otherwise they forget to inherit * the computed font-size value */ table, code { font-size: 1em; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * Links * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* normal links */ /* ====================== */ a:link { color: #0073c7; background-color: inherit; } a:visited { color: #5A88B5; background-color: inherit; } a:link:hover, a:link:active, a:visited:hover, a:visited:active { color: #0073c7; background-color: #f0f0f0; } /* hover on non-white backgrounds */ tr.odd a:hover, tr.odd a:active, tr.header a:hover, tr.header a:active, div.note a:hover, div.note a:active, div.example a:hover, div.example a:active, div.warning a:hover, div.warning a:active, div#quickview a:hover, div#quickview a:active { background-color: #fff; color: #0073c7; } /* code.module [links] */ /* ====================== */ code.module, code.module a:link { color: #8b4513; background-color: inherit; } code.module a:visited { color: #bc8f8f; background-color: inherit; } code.module a:hover, code.module a:active { color: #8b4513; background-color: #f0f0f0; } /* hover on non-white backgrounds */ tr.odd code.module a:hover, tr.odd code.module a:active, tr.header code.module a:hover, tr.header code.module a:active, div.note code.module a:hover, div.note code.module a:active, div.example code.module a:hover, div.example code.module a:active, div.warning code.module a:hover, div.warning code.module a:active, div#quickview code.module a:hover, div#quickview code.module a:active { background-color: #fff; color: #8b4513; } /* code.directive [links] */ /* ====================== */ code.directive, code.directive a:link { color: #287f00; background-color: inherit; } code.directive a:visited { color: #35a500; background-color: inherit; } code.directive a:hover, code.directive a:active { color: #287f00; background-color: #f0f0f0; } /* hover on non-white backgrounds */ tr.odd code.directive a:hover, tr.odd code.directive a:active, tr.header code.directive a:hover, tr.header code.directive a:active, div.note code.directive a:hover, div.note code.directive a:active, div.example code.directive a:hover, div.example code.directive a:active, div.warning code.directive a:hover, div.warning code.directive a:active, div#quickview code.directive a:hover, div#quickview code.directive a:active { background-color: #fff; color: #287f00; } /* glossary [links] */ /* ====================== */ .glossarylink { cursor: help; border-bottom: 1px dashed #0073c7; text-decoration: none; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * Headings * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* h1 */ /* ====================== */ h1 { padding: 0.2em; margin: 0; border: 1px solid #405871; background-color: inherit; color: #036; text-decoration: none; font-size: 22px; font-weight: bold; } /* h2 */ /* ====================== */ h2 { padding: 0.2em 0 0.2em 0.7em; margin: 0 0 0.5em 0; text-decoration: none; font-size: 18px; font-weight: bold; } .section h2 { background-color: #405871; color: #fff; } .directive-section h2 { background-color: #557697; color: #fff; } .category h2 { background-color: #e5ecf3; color: #405871; font-size: 14px; } /* take care of s inside */ h2 a, h2 a:hover, h2 a:active { color: inherit; background-color: inherit; text-decoration: none; } /* h3, h4 */ /* ====================== */ h3 { background-color: inherit; color: #036; text-decoration: none; font-weight: bold; font-size: 16px; margin: 1.3em 0 0.4em 0; padding: 0; } h4 { background-color: inherit; color: #036; text-decoration: none; font-weight: bold; font-size: 14px; margin: 1.3em 0 0.2em 0; padding: 0; } /* margin adjustment */ h3 + *, h4 + * { margin-top: 0; } /* IE confuses the + * :-( * so reset some things */ ul, .section table, .directive-section table { margin-bottom: 1em; } /* titles for * examples, notes and warnings */ div.example h3, div.note h3, div.warning h3 { margin: 0 0 0.5em 0; text-align: left; font-size: 14px; } /* sidebar */ div#quickview h3 { margin: 1em 0 0.3em 0.5em; font-size: 15px; } div#quickview h3.directives { margin-top: 0.3em; } /* take care of s inside */ h3 a, h3 a:hover, h3 a:active, h4 a, h4 a:hover, h4 a:active { color: inherit; background-color: inherit; text-decoration: none; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * Up & Top helper images * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* arrow left */ /* ====================== */ div.up { width: 30px; height: 20px; padding: 0; margin: -20px 0 1px 0; text-align: center; vertical-align: top; } div.up img { vertical-align: top; width: 11px; height: 11px; border-style: none; } /* arrow up (to page top) */ /* ====================== */ div.top { width: 30px; padding: 0 0 0 30px; margin: 0; } div.top img { margin-top: 0.5em; vertical-align: bottom; width: 11px; height: 11px; border-style: none; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * Tables * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* general */ /* ====================== */ table { border: 1px solid #aaa; border-collapse: collapse; padding: 2px; margin-top: 0.5em; margin-bottom: 0; } td, th { empty-cells: show; /* show border around empty cells */ padding: 0.1em 0.2em; vertical-align: top; text-align: left; line-height: 1.3em; } th { font-weight: bold; } td.centered { text-align: center; } td.data { font-family: monospace; text-align: right; padding-left: 1em; } th.data { text-align: right; } tr.odd { /* for large tables alternating colors */ background-color: #f2f2f2; } tr.header, tr.header th { background-color: #e2e2e2; border-top: 1px solid #aaa; border-bottom: 1px solid #aaa; } /* bordered table cells */ /* ====================== */ /* turn off borders in tables nested in * bordered tables per default */ table.bordered table td, table.bordered table th { border-style: none; } table.bordered td, table.bordered th, table table.bordered td, table table.bordered th { border: 1px solid #aaa; } /* index page layout table */ /* ======================= */ body#index-page div#page-content { width: 100%; /* IE fun */ } body[id]#index-page div#page-content { width: auto; /* reasonable browsers. */ } table#indextable { width: 100%; border-collapse: collapse; border: 0 none; } table#indextable td { width: 33.3%; border-left: 1px solid #aaa; padding-top: 0; padding-bottom: 0; } table#indextable td.col1 { border-left: 0 none; padding-left: 0; } table#indextable td.col3 { padding-right: 0; } /* mod/dir. overview table and quick reference */ /* ============================================ */ table.module th, table.directive th { white-space: nowrap; } table.qref { border-collapse: collapse; width: 100%; } table.qref td { border-style: none solid; border-color: #aaa; border-width: 1px; } table.qref td.descr { padding-left: 1em; font-size: 13px; } table#legend { width: 100%; border-style: none; border-width: 0; vertical-align: bottom; padding: 0; margin: 0; } table#legend td { vertical-align: bottom; margin: 0; padding: 0; } table#legend td.letters { width: 100%; padding-bottom: 0.5em; } table#legend table { vertical-align: bottom; margin: 0 0 0 0.4em; padding: 0; height: 7.5em; } table#legend table td, table#legend table th { vertical-align: middle; padding: 0.1ex 0.2em; line-height: 1em; white-space: nowrap; } /* related modules & dir. */ /* ====================== */ /* assuming, all links are enclosed by * or * */ table.related { border-collapse: separate; } table.related th { padding: 0.2ex 0.3em; background-color: #e5ecf3; color: #405871; vertical-align: middle; } table.related td { padding: 0.2ex 0.3em; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * Lists * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* list default values */ /* ====================== */ ul { list-style-type: disc; } ul ul { list-style-type: square; } ul ul ul { list-style-type: circle; } li, dt, dd { line-height: 1.3em; } dt { margin-top: 0.5em; font-weight: bold; } ol li { margin-top: 0.5em; } ol.up-A { list-style-type: upper-alpha; } ol.lo-A { list-style-type: lower-alpha; } dd.separate { margin-bottom: 2em; } li.separate { margin-bottom: 1em; } /* table of contents */ /* ====================== */ #toc, #topics { margin: 0 0 1em 0; padding: 0; } #toc li, #topics li { list-style-type: none; margin: 0; padding: 0; } /* see also */ /* ====================== */ .seealso { margin: 0 0 1em 0; padding: 0; } .seealso li { list-style-type: none; margin: 0; padding: 0 0 0 34px; } /* related modules & dir. */ /* ====================== */ table.related td ul, table.related td li { list-style-type: none; margin: 0; padding: 0; } /* list of all directives */ /* ====================== */ div#directive-list ul { margin: 0; padding: 0; } /* override index */ /* ============== */ div#override-list td.module { width: 20%; } /* indextable */ /* ========== */ table#indextable td ul { list-style-type: none; margin: 0 0 1em 0.5em; padding: 0 0 0 0; } table#indextable td ul li { margin-top: 0.3em; } /* sidebar */ /* ====================== */ div#quickview li { font-size: 13px; } div#quickview ul { margin: 0 0 15px 0; padding: 0; } div#quickview ul#toc { margin: 0 0 0 0.5em; padding: 0; } #module-index div#quickview ul#toc, #manual-page div#quickview ul#toc { margin-left: 0; } div#quickview ul#toc li { margin: 0; padding: 0; list-style-type: none; } div#quickview li img { display: none; } #module-index div#quickview ul#toc, #manual-page div#quickview ul#toc, div#quickview #topics, div#quickview .seealso { padding-left: 15px; } #module-index div#quickview ul#toc li, #manual-page div#quickview ul#toc li, div#quickview #topics li, div#quickview .seealso li { margin: 0.4em 0 2px 0; padding: 0; list-style-type: square; list-style-position: outside; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * main page sections * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* page header */ /* ====================== */ div#page-header { margin-left: 30px; } div#page-header img { padding: 0; display: block; margin: -70px 0 1px 2em; width: 248px; height: 70px; } div#quickview a.badge { /* Temporary hack for the Support Apache badge */ background-color: transparent; } div#quickview a.badge img { /* Temporary hack for the Support Apache badge */ width: 95px; height: 95px; } div#page-header p.apache { background-color: #405871; color: #fff; padding: 0 0 0 248px; margin: 0; text-align: center; vertical-align: middle; font-size: 16px; font-weight: bold; line-height: 29px; } div#page-header p.menu { text-align: right; font-size: 13px; margin: 30px 0 0.5em 0; padding: 0; } /* breadcrumb navigation */ div#path { margin: 0.2em 0 1.2em 30px; padding: 0; font-size: 13px; } /* content sections */ /* ====================== */ div#preamble { padding-bottom: 1em; margin-left: 30px; } div.section, div.directive-section { margin: -1.2em 0 0 60px; padding: 0; } .section p, .directive-section p { margin: 0 0 1em 0; padding: 0; } /* look for this on directive * list pages */ div#directive-list { margin-left: 30px; padding: 0 0 1em 1em; } div#directive-ref { margin: -1em 0 0 0; padding: 0 0 1em 30px; width: 100%; /* IE is BAD (broken as designed) */ } div[id]#directive-ref { /* a big sorry to ICab, Amaya (and old Konquerors?) */ width: auto; /* other browsers are fine ;-) */ } /* sidebar position: right */ div#quickview { position: absolute; top: 5.5em; right: 1em; margin-left: 0; margin-top: 40px; padding: 4px; width: 13.5em; background-color: #f0f0f0; color: inherit; } /* -> move content left */ div#page-content { padding-top: 0; margin-right: 13em; padding-right: 30px; } /* unsqueeze on some pages... */ body.no-sidebar div#page-content, body#index-page div#page-content { margin-right: 0; padding-right: 0; } body#index-page div#page-content { margin-left: 30px; padding-bottom: 1em; } /* in general */ p { line-height: 1.3em; } /* translations */ /* ====================== */ .toplang { padding: 0; margin: 0.2em 0.2em 1em 0; } .bottomlang { padding: 0; margin: 0 0.2em 0.2em 0; } .toplang p, .bottomlang p { font-size: 13px; text-align: right; background-color: inherit; color: #ccc; margin: 0; padding: 0; } .toplang p span, .bottomlang p span { background-color: inherit; color: #036; } .toplang p a:link, .toplang p a:visited, .bottomlang p a:link, .bottomlang p a:visited { text-decoration: none; font-weight: bold; } .toplang p a:hover, .toplang p a:active, .bottomlang p a:hover, .bottomlang p a:active { font-weight: bold; } /* page footer */ /* ====================== */ div#footer { margin-left: 30px; font-size: 13px; border-top: 1px solid #405871; padding-top: 0.2em; } div#footer p.apache { float: left; text-align: left; padding: 0 0 1em 0; margin-top: 0; } div#footer p.menu { float: right; text-align: right; margin-top: 0; padding: 0 0 1em 0; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * subsections (examples, notes, warnings) * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ /* examples */ /* ====================== */ div.example { background-color: #e5ecf3; color: #000; padding: 0.5em; margin: 1em 2em 1em 1em; } /* example inside a note: * blue in gray doesn't look good * so simply draw a border around * and keep it gray */ div.note div.example, div.warning div.example { border: 1px solid #aaa; background-color: transparent; color: inherit; margin-right: 1em; } /* example inside table */ table div.example { margin-right: 1em; } /* the following [block] elements * may appear inside example... */ div.example p, div.example pre, div.example table { padding: 0; margin: 0; } div.example p { line-height: 1em; } div.example pre, div.example p > code { font-size: 13px; } /* notes & warnings */ /* ====================== */ div.note, div.warning { background-color: #eee; color: #036; padding: 0.5em; margin: 1em 2em 1em 1em; } div.warning { border: 1px solid #f00; } div.note p, div.warning p { margin: 0.5em 0 0 0; padding: 0; } div.note pre, div.warning pre { font-size: 13px; } /* inside table */ table div.note, table div.warning { margin-right: 1em; } div.outofdate, div.retired{ background-color: #ffffc0; color: #036; padding: 0.5em; margin: 1em 2em 1em 1em; } div.retired{ border: solid 1px #ff0000; margin-left: 3em; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * quotations, indented paragraphs, forms and figures * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ p.letters { margin: 1em 0 0 0; } p.centered { text-align: center; } .letters { text-align: center; background-color: inherit; color: #ccc; } .letters a:link, .letters a:visited { text-decoration: none; font-weight: bold; } .letters a:hover, .letters a:active { font-weight: bold; } blockquote p { font-style: italic; margin: 0; } blockquote p.cite { font-style: normal; margin-top: 0; margin-left: 2em; } blockquote p.cite cite { font-style: normal; } p.indent { margin-left: 2em; margin-top: 1em; } span.indent { padding-left: 1.5em; display: block; } #index-page form { text-align: center; } #index-page form p { line-height: 1.1em; } #index-page form input { font-size: 1em; } p.figure { margin-left: 2em; font-style: italic; } p.figure img { border: 1px solid #aaa; } p.figure dfn { font-weight: bold; } /* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * -> The End <- * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ */ httpd-2.4.41/docs/manual/style/css/manual-zip-100pc.css0000644000000000000500000000156510455056330021011 0ustar rootsrc@import url(manual-loose-100pc.css); /* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ h1 { margin: 0 0 0.5em 0; } /* the end */ httpd-2.4.41/docs/manual/style/build.properties0000644000000000000500000000074112273272705020027 0ustar rootsrc# This file contains version specific properties # No xml files yet or anymore #noxml.fr = rewrite/rewrite_guide.html.fr rewrite/rewrite_guide_advanced.html.fr # This httpd version is not retired # (run build bootstrap on change) retired = no manpages.8 = \ apachectl \ fcgistarter \ htcacheclean \ httpd \ rotatelogs \ suexec manpages.1 = \ ab \ apxs \ dbmmanage \ htdbm \ htdigest \ htpasswd \ httxt2dbm \ logresolve httpd-2.4.41/docs/manual/style/modulesynopsis.dtd0000644000000000000500000000543413206512634020403 0ustar rootsrc %sitemap; httpd-2.4.41/docs/manual/style/scripts/0002755000000000000500000000000013523273346016302 5ustar rootsrchttpd-2.4.41/docs/manual/style/scripts/prettify.min.js0000644000000000000500000011265213226752737021303 0ustar rootsrc// see prettify.js for copyright, license and expanded version window['PR_SHOULD_USE_CONTINUATION']=true;var prettyPrintOne;var prettyPrint;(function(){var win=window;var FLOW_CONTROL_KEYWORDS=["break,continue,do,else,for,if,return,while"];var C_KEYWORDS=[FLOW_CONTROL_KEYWORDS,"auto,case,char,const,default,"+"double,enum,extern,float,goto,int,long,register,short,signed,sizeof,module,"+"static,struct,switch,typedef,union,unsigned,void,volatile"];var COMMON_KEYWORDS=[C_KEYWORDS,"catch,class,delete,false,import,"+"new,operator,private,protected,public,this,throw,true,try,typeof"];var CPP_KEYWORDS=[COMMON_KEYWORDS,"alignof,align_union,asm,axiom,bool,"+"concept,concept_map,const_cast,constexpr,decltype,"+"dynamic_cast,explicit,export,friend,inline,late_check,"+"mutable,namespace,nullptr,reinterpret_cast,static_assert,static_cast,"+"template,typeid,typename,using,virtual,where,request_req"];var JAVA_KEYWORDS=[COMMON_KEYWORDS,"abstract,boolean,byte,extends,final,finally,implements,import,"+"instanceof,null,native,package,strictfp,super,synchronized,throws,"+"transient"];var CSHARP_KEYWORDS=[JAVA_KEYWORDS,"as,base,by,checked,decimal,delegate,descending,dynamic,event,"+"fixed,foreach,from,group,implicit,in,interface,internal,into,is,let,"+"lock,object,out,override,orderby,params,partial,readonly,ref,sbyte,"+"sealed,stackalloc,string,select,uint,ulong,unchecked,unsafe,ushort,"+"var,virtual,where"];var COFFEE_KEYWORDS="all,and,by,catch,class,else,extends,false,finally,"+"for,if,in,is,isnt,loop,new,no,not,null,of,off,on,or,return,super,then,"+"throw,true,try,unless,until,when,while,yes";var JSCRIPT_KEYWORDS=[COMMON_KEYWORDS,"debugger,eval,export,function,get,null,set,undefined,var,with,"+"Infinity,NaN"];var PERL_KEYWORDS="caller,delete,die,do,dump,else,elsif,eval,exit,foreach,for,"+"goto,if,import,last,local,my,next,no,our,print,printf,package,redo,require,"+"sub,undef,unless,until,use,wantarray,while,BEGIN,END";var PHP_KEYWORDS="abstract,and,array,as,break,case,catch,cfunction,class,"+"clone,const,continue,declare,default,do,else,elseif,enddeclare,endfor,"+"endforeach,endif,endswitch,endwhile,extends,final,for,foreach,function,"+"global,goto,if,implements,interface,instanceof,namespace,new,old_function,"+"or,private,protected,public,static,switch,throw,try,use,var,while,xor,"+"die,echo,empty,exit,eval,include,include_once,isset,list,require,"+"require_once,return,print,unset";var PYTHON_KEYWORDS=[FLOW_CONTROL_KEYWORDS,"and,as,assert,class,def,del,"+"elif,except,exec,finally,from,global,import,in,is,lambda,"+"nonlocal,not,or,pass,print,raise,try,with,yield,"+"False,True,None"];var RUBY_KEYWORDS=[FLOW_CONTROL_KEYWORDS,"alias,and,begin,case,class,"+"def,defined,elsif,end,ensure,false,in,module,next,nil,not,or,redo,"+"rescue,retry,self,super,then,true,undef,unless,until,when,yield,"+"BEGIN,END"];var SH_KEYWORDS=[FLOW_CONTROL_KEYWORDS,"case,done,elif,esac,eval,fi,"+"function,in,local,set,then,until,echo"];var CONFIG_ENVS=["User-Agent,HTTP_USER_AGENT,HTTP_REFERER,HTTP_COOKIE,HTTP_FORWARDED,HTTP_HOST,HTTP_PROXY_CONNECTION,HTTP_ACCEPT,REMOTE_ADDR,REMOTE_HOST,REMOTE_PORT,REMOTE_USER,REMOTE_IDENT,REQUEST_METHOD,SCRIPT_FILENAME,PATH_INFO,QUERY_STRING,AUTH_TYPE,DOCUMENT_ROOT,SERVER_ADMIN,SERVER_NAME,SERVER_ADDR,SERVER_PORT,SERVER_PROTOCOL,SERVER_SOFTWARE,TIME_YEAR,TIME_MON,TIME_DAY,TIME_HOUR,TIME_MIN,TIME_SEC,TIME_WDAY,TIME,API_VERSION,THE_REQUEST,REQUEST_URI,REQUEST_FILENAME,IS_SUBREQ,HTTPS,REQUEST_SCHEME"];var CONFIG_KEYWORDS=[",,,,,,,,,,,,,,,,,,,,,,,,AcceptFilter,AcceptPathInfo,AccessFileName,Action,AddAlt,AddAltByEncoding,AddAltByType,AddCharset,AddDefaultCharset,AddDescription,AddEncoding,AddHandler,AddIcon,AddIconByEncoding,AddIconByType,AddInputFilter,AddLanguage,AddModuleInfo,AddOutputFilter,AddOutputFilterByType,AddType,Alias,AliasMatch,Allow,AllowCONNECT,AllowEncodedSlashes,AllowMethods,AllowOverride,AllowOverrideList,Anonymous,Anonymous_LogEmail,Anonymous_MustGiveEmail,Anonymous_NoUserID,Anonymous_VerifyEmail,AsyncRequestWorkerFactor,AuthBasicAuthoritative,AuthBasicFake,AuthBasicProvider,AuthBasicUseDigestAlgorithm,AuthDBDUserPWQuery,AuthDBDUserRealmQuery,AuthDBMGroupFile,AuthDBMType,AuthDBMUserFile,AuthDigestAlgorithm,AuthDigestDomain,AuthDigestNonceLifetime,AuthDigestProvider,AuthDigestQop,AuthDigestShmemSize,AuthFormAuthoritative,AuthFormBody,AuthFormDisableNoStore,AuthFormFakeBasicAuth,AuthFormLocation,AuthFormLoginRequiredLocation,AuthFormLoginSuccessLocation,AuthFormLogoutLocation,AuthFormMethod,AuthFormMimetype,AuthFormPassword,AuthFormProvider,AuthFormSitePassphrase,AuthFormSize,AuthFormUsername,AuthGroupFile,AuthLDAPAuthorizePrefix,AuthLDAPBindAuthoritative,AuthLDAPBindDN,AuthLDAPBindPassword,AuthLDAPCharsetConfig,AuthLDAPCompareAsUser,AuthLDAPCompareDNOnServer,AuthLDAPDereferenceAliases,AuthLDAPGroupAttribute,AuthLDAPGroupAttributeIsDN,AuthLDAPInitialBindAsUser,AuthLDAPInitialBindPattern,AuthLDAPMaxSubGroupDepth,AuthLDAPRemoteUserAttribute,AuthLDAPRemoteUserIsDN,AuthLDAPSearchAsUser,AuthLDAPSubGroupAttribute,AuthLDAPSubGroupClass,AuthLDAPUrl,AuthMerging,AuthName,AuthType,AuthUserFile,AuthnCacheContext,AuthnCacheEnable,AuthnCacheProvideFor,AuthnCacheSOCache,AuthnCacheTimeout,AuthnzFcgiCheckAuthnProvider,AuthnzFcgiDefineProvider,AuthzDBDLoginToReferer,AuthzDBDQuery,AuthzDBDRedirectQuery,AuthzDBMType,AuthzSendForbiddenOnFailure,BalancerGrowth,BalancerInherit,BalancerMember,BalancerPersist,BrotliAlterETag,BrotliCompressionMaxInputBlock,BrotliCompressionQuality,BrotliCompressionWindow,BrotliFilterNote,BrowserMatch,BrowserMatchNoCase,BufferSize,BufferedLogs,CGIDScriptTimeout,CGIMapExtension,CGIPassAuth,CGIVar,CacheDefaultExpire,CacheDetailHeader,CacheDirLength,CacheDirLevels,CacheDisable,CacheEnable,CacheFile,CacheHeader,CacheIgnoreCacheControl,CacheIgnoreHeaders,CacheIgnoreNoLastMod,CacheIgnoreQueryString,CacheIgnoreURLSessionIdentifiers,CacheKeyBaseURL,CacheLastModifiedFactor,CacheLock,CacheLockMaxAge,CacheLockPath,CacheMaxExpire,CacheMaxFileSize,CacheMinExpire,CacheMinFileSize,CacheNegotiatedDocs,CacheQuickHandler,CacheReadSize,CacheReadTime,CacheRoot,CacheSocache,CacheSocacheMaxSize,CacheSocacheMaxTime,CacheSocacheMinTime,CacheSocacheReadSize,CacheSocacheReadTime,CacheStaleOnError,CacheStoreExpired,CacheStoreNoStore,CacheStorePrivate,CharsetDefault,CharsetOptions,CharsetSourceEnc,CheckCaseOnly,CheckSpelling,ChrootDir,ContentDigest,CookieDomain,CookieExpires,CookieName,CookieStyle,CookieTracking,CoreDumpDirectory,CustomLog,DBDExptime,DBDInitSQL,DBDKeep,DBDMax,DBDMin,DBDParams,DBDPersist,DBDPrepareSQL,DBDriver,DTracePrivileges,Dav,DavDepthInfinity,DavGenericLockDB,DavLockDB,DavMinTimeout,DefaultIcon,DefaultLanguage,DefaultRuntimeDir,DefaultType,Define,DeflateBufferSize,DeflateCompressionLevel,DeflateFilterNote,DeflateInflateLimitRequestBody,DeflateInflateRatioBurst,DeflateInflateRatioLimit,DeflateMemLevel,DeflateWindowSize,Deny,DirectoryCheckHandler,DirectoryIndex,DirectoryIndexRedirect,DirectorySlash,DocumentRoot,DumpIOInput,DumpIOOutput,EnableExceptionHook,EnableMMAP,EnableSendfile,Error,ErrorDocument,ErrorLog,ErrorLogFormat,Example,ExpiresActive,ExpiresByType,ExpiresDefault,ExtFilterDefine,ExtFilterOptions,ExtendedStatus,FallbackResource,FileETag,FilterChain,FilterDeclare,FilterProtocol,FilterProvider,FilterTrace,ForceLanguagePriority,ForceType,ForensicLog,GlobalLog,GprofDir,GracefulShutdownTimeout,Group,H2CopyFiles,H2Direct,H2EarlyHints,H2MaxSessionStreams,H2MaxWorkerIdleSeconds,H2MaxWorkers,H2MinWorkers,H2ModernTLSOnly,H2Push,H2PushDiarySize,H2PushPriority,H2PushResource,H2SerializeHeaders,H2StreamMaxMemSize,H2TLSCoolDownSecs,H2TLSWarmUpSize,H2Upgrade,H2WindowSize,Header,HeaderName,HeartbeatAddress,HeartbeatListen,HeartbeatMaxServers,HeartbeatStorage,HeartbeatStorage,HostnameLookups,HttpProtocolOptions,ISAPIAppendLogToErrors,ISAPIAppendLogToQuery,ISAPICacheFile,ISAPIFakeAsync,ISAPILogNotSupported,ISAPIReadAheadBuffer,IdentityCheck,IdentityCheckTimeout,ImapBase,ImapDefault,ImapMenu,Include,IncludeOptional,IndexHeadInsert,IndexIgnore,IndexIgnoreReset,IndexOptions,IndexOrderDefault,IndexStyleSheet,InputSed,KeepAlive,KeepAliveTimeout,KeptBodySize,LDAPCacheEntries,LDAPCacheTTL,LDAPConnectionPoolTTL,LDAPConnectionTimeout,LDAPLibraryDebug,LDAPOpCacheEntries,LDAPOpCacheTTL,LDAPReferralHopLimit,LDAPReferrals,LDAPRetries,LDAPRetryDelay,LDAPSharedCacheFile,LDAPSharedCacheSize,LDAPTimeout,LDAPTrustedClientCert,LDAPTrustedGlobalCert,LDAPTrustedMode,LDAPVerifyServerCert,LanguagePriority,LimitInternalRecursion,LimitRequestBody,LimitRequestFieldSize,LimitRequestFields,LimitRequestLine,LimitXMLRequestBody,Listen,ListenBackLog,ListenCoresBucketsRatio,LoadFile,LoadModule,LogFormat,LogIOTrackTTFB,LogLevel,LogMessage,LuaAuthzProvider,LuaCodeCache,LuaHookAccessChecker,LuaHookAuthChecker,LuaHookCheckUserID,LuaHookFixups,LuaHookInsertFilter,LuaHookLog,LuaHookMapToStorage,LuaHookTranslateName,LuaHookTypeChecker,LuaInherit,LuaInputFilter,LuaMapHandler,LuaOutputFilter,LuaPackageCPath,LuaPackagePath,LuaQuickHandler,LuaRoot,LuaScope,MDBaseServer,MDCAChallenges,MDCertificateAgreement,MDCertificateAuthority,MDCertificateProtocol,MDDriveMode,MDHttpProxy,MDMember,MDMembers,MDMustStaple,MDNotifyCmd,MDPortMap,MDPrivateKeys,MDRenewWindow,MDRequireHttps,MDStoreDir,MDomain,MMapFile,MaxConnectionsPerChild,MaxKeepAliveRequests,MaxMemFree,MaxRangeOverlaps,MaxRangeReversals,MaxRanges,MaxRequestWorkers,MaxSpareServers,MaxSpareThreads,MaxThreads,MemcacheConnTTL,MergeTrailers,MetaDir,MetaFiles,MetaSuffix,MimeMagicFile,MinSpareServers,MinSpareThreads,ModMimeUsePathInfo,ModemStandard,MultiviewsMatch,Mutex,NWSSLTrustedCerts,NWSSLUpgradeable,NameVirtualHost,NoProxy,Options,Order,OutputSed,PassEnv,PidFile,PrivilegesMode,Protocol,ProtocolEcho,Protocols,ProtocolsHonorOrder,ProxyAddHeaders,ProxyBadHeader,ProxyBlock,ProxyDomain,ProxyErrorOverride,ProxyExpressDBMFile,ProxyExpressDBMType,ProxyExpressEnable,ProxyFCGIBackendType,ProxyFCGISetEnvIf,ProxyFtpDirCharset,ProxyFtpEscapeWildcards,ProxyFtpListOnWildcard,ProxyHCExpr,ProxyHCTPsize,ProxyHCTemplate,ProxyHTMLBufSize,ProxyHTMLCharsetOut,ProxyHTMLDocType,ProxyHTMLEnable,ProxyHTMLEvents,ProxyHTMLExtended,ProxyHTMLFixups,ProxyHTMLInterp,ProxyHTMLLinks,ProxyHTMLMeta,ProxyHTMLStripComments,ProxyHTMLURLMap,ProxyIOBufferSize,ProxyMaxForwards,ProxyPass,ProxyPassInherit,ProxyPassInterpolateEnv,ProxyPassMatch,ProxyPassReverse,ProxyPassReverseCookieDomain,ProxyPassReverseCookiePath,ProxyPreserveHost,ProxyReceiveBufferSize,ProxyRemote,ProxyRemoteMatch,ProxyRequests,ProxySCGIInternalRedirect,ProxySCGISendfile,ProxySet,ProxySourceAddress,ProxyStatus,ProxyTimeout,ProxyVia,QualifyRedirectURL,RLimitCPU,RLimitMEM,RLimitNPROC,ReadmeName,ReceiveBufferSize,Redirect,RedirectMatch,RedirectPermanent,RedirectTemp,ReflectorHeader,RegisterHttpMethod,RemoteIPHeader,RemoteIPInternalProxy,RemoteIPInternalProxyList,RemoteIPProxiesHeader,RemoteIPTrustedProxy,RemoteIPTrustedProxyList,RemoveCharset,RemoveEncoding,RemoveHandler,RemoveInputFilter,RemoveLanguage,RemoveOutputFilter,RemoveType,RequestHeader,RequestReadTimeout,Require,RewriteBase,RewriteCond,RewriteEngine,RewriteMap,RewriteOptions,RewriteRule,SSIETag,SSIEndTag,SSIErrorMsg,SSILastModified,SSILegacyExprParser,SSIStartTag,SSITimeFormat,SSIUndefinedEcho,SSLCACertificateFile,SSLCACertificatePath,SSLCADNRequestFile,SSLCADNRequestPath,SSLCARevocationCheck,SSLCARevocationFile,SSLCARevocationPath,SSLCertificateChainFile,SSLCertificateFile,SSLCertificateKeyFile,SSLCipherSuite,SSLCompression,SSLCryptoDevice,SSLEngine,SSLFIPS,SSLHonorCipherOrder,SSLInsecureRenegotiation,SSLOCSPDefaultResponder,SSLOCSPEnable,SSLOCSPNoverify,SSLOCSPOverrideResponder,SSLOCSPProxyURL,SSLOCSPResponderCertificateFile,SSLOCSPResponderTimeout,SSLOCSPResponseMaxAge,SSLOCSPResponseTimeSkew,SSLOCSPUseRequestNonce,SSLOpenSSLConfCmd,SSLOptions,SSLPassPhraseDialog,SSLProtocol,SSLProxyCACertificateFile,SSLProxyCACertificatePath,SSLProxyCARevocationCheck,SSLProxyCARevocationFile,SSLProxyCARevocationPath,SSLProxyCheckPeerCN,SSLProxyCheckPeerExpire,SSLProxyCheckPeerName,SSLProxyCipherSuite,SSLProxyEngine,SSLProxyMachineCertificateChainFile,SSLProxyMachineCertificateFile,SSLProxyMachineCertificatePath,SSLProxyProtocol,SSLProxyVerify,SSLProxyVerifyDepth,SSLRandomSeed,SSLRenegBufferSize,SSLRequire,SSLRequireSSL,SSLSRPUnknownUserSeed,SSLSRPVerifierFile,SSLSessionCache,SSLSessionCacheTimeout,SSLSessionTicketKeyFile,SSLSessionTickets,SSLStaplingCache,SSLStaplingErrorCacheTimeout,SSLStaplingFakeTryLater,SSLStaplingForceURL,SSLStaplingResponderTimeout,SSLStaplingResponseMaxAge,SSLStaplingResponseTimeSkew,SSLStaplingReturnResponderErrors,SSLStaplingStandardCacheTimeout,SSLStrictSNIVHostCheck,SSLUseStapling,SSLUserName,SSLVerifyClient,SSLVerifyDepth,Satisfy,ScoreBoardFile,Script,ScriptAlias,ScriptAliasMatch,ScriptInterpreterSource,ScriptLog,ScriptLogBuffer,ScriptLogLength,ScriptSock,SecureListen,SeeRequestTail,SendBufferSize,ServerAdmin,ServerAlias,ServerLimit,ServerName,ServerPath,ServerRoot,ServerSignature,ServerTokens,Session,SessionCookieName,SessionCookieName2,SessionCookieRemove,SessionCryptoCipher,SessionCryptoDriver,SessionCryptoPassphrase,SessionCryptoPassphraseFile,SessionDBDCookieName,SessionDBDCookieName2,SessionDBDCookieRemove,SessionDBDDeleteLabel,SessionDBDInsertLabel,SessionDBDPerUser,SessionDBDSelectLabel,SessionDBDUpdateLabel,SessionEnv,SessionExclude,SessionHeader,SessionInclude,SessionMaxAge,SetEnv,SetEnvIf,SetEnvIfExpr,SetEnvIfNoCase,SetHandler,SetInputFilter,SetOutputFilter,StartServers,StartThreads,Substitute,SubstituteInheritBefore,SubstituteMaxLineLength,Suexec,SuexecUserGroup,ThreadLimit,ThreadStackSize,ThreadsPerChild,TimeOut,TraceEnable,TransferLog,TypesConfig,UnDefine,UndefMacro,UnsetEnv,Use,UseCanonicalName,UseCanonicalPhysicalPort,User,UserDir,VHostCGIMode,VHostCGIPrivs,VHostGroup,VHostPrivs,VHostSecure,VHostUser,VirtualDocumentRoot,VirtualDocumentRootIP,VirtualScriptAlias,VirtualScriptAliasIP,WatchdogInterval,XBitHack,xml2EncAlias,xml2EncDefault,xml2StartParse"] var CONFIG_OPTIONS=/^[\\+\\-]?(AuthConfig|IncludesNOEXEC|ExecCGI|FollowSymLinks|MultiViews|Includes|Indexes|SymLinksIfOwnerMatch)\b/i;var ALL_KEYWORDS=[CPP_KEYWORDS,CSHARP_KEYWORDS,JSCRIPT_KEYWORDS,PERL_KEYWORDS+ PYTHON_KEYWORDS,RUBY_KEYWORDS,SH_KEYWORDS,CONFIG_KEYWORDS,PHP_KEYWORDS];var C_TYPES=/^(DIR|FILE|vector|(de|priority_)?queue|list|stack|(const_)?iterator|(multi)?(set|map)|bitset|u?(int|float|char|void|const|static|struct)\d*(_t)?\b)|[a-z_]+_rec|cmd_parms\b/;var PR_STRING='str';var PR_KEYWORD='kwd';var PR_COMMENT='com';var PR_TYPE='typ';var PR_LITERAL='lit';var PR_PUNCTUATION='pun';var PR_PLAIN='pln';var PR_TAG='tag';var PR_DECLARATION='dec';var PR_SOURCE='src';var PR_ATTRIB_NAME='atn';var PR_ATTRIB_VALUE='atv';var PR_NOCODE='nocode';var REGEXP_PRECEDER_PATTERN='(?:^^\\.?|[+-]|[!=]=?=?|\\#|%=?|&&?=?|\\(|\\*=?|[+\\-]=|->|\\/=?|::?|<>?>?=?|,|;|\\?|@|\\[|~|{|\\^\\^?=?|\\|\\|?=?|break|case|continue|delete|do|else|finally|instanceof|return|throw|try|typeof)\\s*';function combinePrefixPatterns(regexs){var capturedGroupIndex=0;var needToFoldCase=false;var ignoreCase=false;for(var i=0,n=regexs.length;i122)){if(!(end<65||start>90)){ranges.push([Math.max(65,start)|32,Math.min(end,90)|32]);} if(!(end<97||start>122)){ranges.push([Math.max(97,start)&~32,Math.min(end,122)&~32]);}}}} ranges.sort(function(a,b){return(a[0]-b[0])||(b[1]-a[1]);});var consolidatedRanges=[];var lastRange=[];for(var i=0;irange[0]){if(range[1]+1>range[0]){out.push('-');} out.push(encodeEscape(range[1]));}} out.push(']');return out.join('');} function allowAnywhereFoldCaseAndRenumberGroups(regex){var parts=regex.source.match(new RegExp('(?:' +'\\[(?:[^\\x5C\\x5D]|\\\\[\\s\\S])*\\]' +'|\\\\u[A-Fa-f0-9]{4}' +'|\\\\x[A-Fa-f0-9]{2}' +'|\\\\[0-9]+' +'|\\\\[^ux0-9]' +'|\\(\\?[:!=]' +'|[\\(\\)\\^]' +'|[^\\x5B\\x5C\\(\\)\\^]+' +')','g'));var n=parts.length;var capturedGroups=[];for(var i=0,groupIndex=0;i=2&&ch0==='['){parts[i]=caseFoldCharset(p);}else if(ch0!=='\\'){parts[i]=p.replace(/[a-zA-Z]/g,function(ch){var cc=ch.charCodeAt(0);return'['+String.fromCharCode(cc&~32,cc|32)+']';});}}} return parts.join('');} var rewritten=[];for(var i=0,n=regexs.length;i=0;){shortcuts[shortcutChars.charAt(c)]=patternParts;}} var regex=patternParts[1];var k=''+regex;if(!regexKeys.hasOwnProperty(k)){allRegexs.push(regex);regexKeys[k]=null;}} allRegexs.push(/[\0-\uffff]/);tokenizer=combinePrefixPatterns(allRegexs);})();var nPatterns=fallthroughStylePatterns.length;var decorate=function(job){var sourceCode=job.sourceCode,basePos=job.basePos;var decorations=[basePos,PR_PLAIN];var pos=0;var tokens=sourceCode.match(tokenizer)||[];var styleCache={};for(var ti=0,nTokens=tokens.length;ti=5&&'lang-'===style.substring(0,5);if(isEmbedded&&!(match&&typeof match[1]==='string')){isEmbedded=false;style=PR_SOURCE;} if(!isEmbedded){styleCache[token]=style;}} var tokenStart=pos;pos+=token.length;if(!isEmbedded){decorations.push(basePos+tokenStart,style);}else{var embeddedSource=match[1];var embeddedSourceStart=token.indexOf(embeddedSource);var embeddedSourceEnd=embeddedSourceStart+embeddedSource.length;if(match[2]){embeddedSourceEnd=token.length-match[2].length;embeddedSourceStart=embeddedSourceEnd-embeddedSource.length;} var lang=style.substring(5);appendDecorations(basePos+tokenStart,token.substring(0,embeddedSourceStart),decorate,decorations);appendDecorations(basePos+tokenStart+embeddedSourceStart,embeddedSource,langHandlerForExtension(lang,embeddedSource),decorations);appendDecorations(basePos+tokenStart+embeddedSourceEnd,token.substring(embeddedSourceEnd),decorate,decorations);}} job.decorations=decorations;};return decorate;} function sourceDecorator(options){var shortcutStylePatterns=[],fallthroughStylePatterns=[];if(options['tripleQuotedStrings']){shortcutStylePatterns.push([PR_STRING,/^(?:\'\'\'(?:[^\'\\]|\\[\s\S]|\'{1,2}(?=[^\']))*(?:\'\'\'|$)|\"\"\"(?:[^\"\\]|\\[\s\S]|\"{1,2}(?=[^\"]))*(?:\"\"\"|$)|\'(?:[^\\\']|\\[\s\S])*(?:\'|$)|\"(?:[^\\\"]|\\[\s\S])*(?:\"|$))/,null,'\'"']);}else if(options['multiLineStrings']){shortcutStylePatterns.push([PR_STRING,/^(?:\'(?:[^\\\']|\\[\s\S])*(?:\'|$)|\"(?:[^\\\"]|\\[\s\S])*(?:\"|$)|\`(?:[^\\\`]|\\[\s\S])*(?:\`|$))/,null,'\'"`']);}else{shortcutStylePatterns.push([PR_STRING,/^(?:\'(?:[^\\\'\r\n]|\\.)*(?:\'|$)|\"(?:[^\\\"\r\n]|\\.)*(?:\"|$))/,null,'"\'']);} if(options['verbatimStrings']){fallthroughStylePatterns.push([PR_STRING,/^@\"(?:[^\"]|\"\")*(?:\"|$)/,null]);} var hc=options['hashComments'];if(hc){if(options['cStyleComments']){if(hc>1){shortcutStylePatterns.push([PR_COMMENT,/^#(?:##(?:[^#]|#(?!##))*(?:###|$)|.*)/,null,'#']);}else{shortcutStylePatterns.push([PR_COMMENT,/^#(?:(?:define|elif|else|endif|error|ifdef|include|ifndef|line|pragma|undef|warning)\b|[^\r\n]*)/,null,'#']);} fallthroughStylePatterns.push([PR_STRING,/^<(?:(?:(?:\.\.\/)*|\/?)(?:[\w-]+(?:\/[\w-]+)+)?[\w-]+\.h(?:h|pp|\+\+)?|[a-z]\w*)>/,null]);}else{shortcutStylePatterns.push([PR_COMMENT,/^#[^\r\n]*/,null,'#']);}} if(options['cStyleComments']){fallthroughStylePatterns.push([PR_COMMENT,/^\/\/[^\r\n]*/,null]);fallthroughStylePatterns.push([PR_COMMENT,/^\/\*[\s\S]*?(?:\*\/|$)/,null]);} if(options['regexLiterals']){var REGEX_LITERAL=('/(?=[^/*])' +'(?:[^/\\x5B\\x5C]' +'|\\x5C[\\s\\S]' +'|\\x5B(?:[^\\x5C\\x5D]|\\x5C[\\s\\S])*(?:\\x5D|$))+' +'/');fallthroughStylePatterns.push(['lang-regex',new RegExp('^'+REGEXP_PRECEDER_PATTERN+'('+REGEX_LITERAL+')')]);} var types=options['types'];if(types){fallthroughStylePatterns.push([PR_TYPE,types]);} if(options['strings']){var strings=(""+options['strings']).replace(/^ | $/g,'').replace(/-/g,'\\-');fallthroughStylePatterns.push([PR_STRING,new RegExp('(?:'+strings.replace(/[\s,]+/g,'|')+')'),,null]);} var keywords=(""+options['keywords']).replace(/^ | $/g,'');if(keywords.length){fallthroughStylePatterns.push([PR_KEYWORD,new RegExp('^(?:'+keywords.replace(/[\s,]+/g,'|')+')\\b'),null]);} shortcutStylePatterns.push([PR_PLAIN,/^\s+/,null,' \r\n\t\xA0']);if(options['httpdComments']){fallthroughStylePatterns.push([PR_PLAIN,/^.*\S.*#/i,null]);} fallthroughStylePatterns.push([PR_LITERAL,/^@[a-z_$][a-z_$@0-9]*|\bNULL\b/i,null],[PR_LITERAL,CONFIG_OPTIONS,null],[PR_TAG,/^\b(AuthzProviderAlias|AuthnProviderAlias|RequireAny|RequireAll|RequireNone|Directory|DirectoryMatch|Location|LocationMatch|VirtualHost|If|Else|ElseIf|Proxy\b|LoadBalancer|Files|FilesMatch|Limit|LimitExcept|IfDefine|IfModule|IfVersion)\b/,null],[PR_TYPE,/^(?:[@_]?[A-Z]+[a-z][A-Za-z_$@0-9]*|\w+_(t|req|module)\b)/,null],[PR_TAG,/^apr_[a-z_0-9]+|ap_[a-z_0-9]+/i,null],[PR_PLAIN,/^[a-z_$][a-z_$@0-9\-]*/i,null],[PR_LITERAL,new RegExp('^(?:' +'0x[a-f0-9]+' +'|[a-f0-9:]+:[a-f0-9:]+:[a-f0-9:]+:[a-f0-9:]+:[a-f0-9:]+:[a-f0-9:]+' +'|(?:\\d(?:_\\d+)*\\d*(?:\\.\\d*)?|\\.\\d\\+)' +'(?:e[+\\-]?\\d+)?' +')' +'[a-z]*','i'),null,'0123456789'],[PR_PLAIN,/^\\[\s\S]?/,null],[PR_PUNCTUATION,/^.[^\s\w\.$@\'\"\`\/\#\\]*/,null]);return createSimpleLexer(shortcutStylePatterns,fallthroughStylePatterns);} var decorateSource=sourceDecorator({'keywords':ALL_KEYWORDS,'hashComments':true,'cStyleComments':true,'multiLineStrings':true,'regexLiterals':true});function numberLines(node,opt_startLineNum,isPreformatted){var nocode=/(?:^|\s)nocode(?:\s|$)/;var lineBreak=/\r\n?|\n/;var document=node.ownerDocument;var li=document.createElement('li');while(node.firstChild){li.appendChild(node.firstChild);} var listItems=[li];function walk(node){switch(node.nodeType){case 1:if(nocode.test(node.className)){break;} if('br'===node.nodeName){breakAfter(node);if(node.parentNode){node.parentNode.removeChild(node);}}else{for(var child=node.firstChild;child;child=child.nextSibling){walk(child);}} break;case 3:case 4:if(isPreformatted){var text=node.nodeValue;var match=text.match(lineBreak);if(match){var firstLine=text.substring(0,match.index);node.nodeValue=firstLine;var tail=text.substring(match.index+match[0].length);if(tail){var parent=node.parentNode;parent.insertBefore(document.createTextNode(tail),node.nextSibling);} breakAfter(node);if(!firstLine){node.parentNode.removeChild(node);}}} break;}} function breakAfter(lineEndNode){while(!lineEndNode.nextSibling){lineEndNode=lineEndNode.parentNode;if(!lineEndNode){return;}} function breakLeftOf(limit,copy){var rightSide=copy?limit.cloneNode(false):limit;var parent=limit.parentNode;if(parent){var parentClone=breakLeftOf(parent,1);var next=limit.nextSibling;parentClone.appendChild(rightSide);for(var sibling=next;sibling;sibling=next){next=sibling.nextSibling;parentClone.appendChild(sibling);}} return rightSide;} var copiedListItem=breakLeftOf(lineEndNode.nextSibling,0);for(var parent;(parent=copiedListItem.parentNode)&&parent.nodeType===1;){copiedListItem=parent;} listItems.push(copiedListItem);} for(var i=0;i5000){break;} var spanStart=spans[spanIndex];var spanEnd=spans[spanIndex+2]||sourceLength;var decEnd=decorations[decorationIndex+2]||sourceLength;var end=Math.min(spanEnd,decEnd);var textNode=spans[spanIndex+1];var styledText;if(textNode.nodeType!==1&&(styledText=source.substring(sourceIndex,end))){if(isIE8OrEarlier){styledText=styledText.replace(newlineRe,'\r');} textNode.nodeValue=styledText;var document=textNode.ownerDocument;var span=document.createElement('span');span.className=decorations[decorationIndex+1];var parentNode=textNode.parentNode;parentNode.replaceChild(span,textNode);span.appendChild(textNode);if(sourceIndex=spanEnd){spanIndex+=2;} if(sourceIndex>=decEnd){decorationIndex+=2;}}}finally{if(sourceNode){sourceNode.style.display=oldDisplay;}}} var langHandlerRegistry={};function registerLangHandler(handler,fileExtensions){for(var i=fileExtensions.length;--i>=0;){var ext=fileExtensions[i];if(!langHandlerRegistry.hasOwnProperty(ext)){langHandlerRegistry[ext]=handler;}else if(win['console']){console['warn']('cannot override language handler %s',ext);}}} function langHandlerForExtension(extension,source){if(!(extension&&langHandlerRegistry.hasOwnProperty(extension))){extension=/^\s*]*(?:>|$)/],[PR_COMMENT,/^<\!--[\s\S]*?(?:-\->|$)/],['lang-',/^<\?([\s\S]+?)(?:\?>|$)/],['lang-',/^<%([\s\S]+?)(?:%>|$)/],[PR_PUNCTUATION,/^(?:<[%?]|[%?]>)/],['lang-',/^]*>([\s\S]+?)<\/xmp\b[^>]*>/i],['lang-js',/^]*>([\s\S]*?)(<\/script\b[^>]*>)/i],['lang-css',/^]*>([\s\S]*?)(<\/style\b[^>]*>)/i],['lang-in.tag',/^(<\/?[a-z][^<>]*>)/i]]),['default-markup','htm','html','mxml','xhtml','xml','xsl']);registerLangHandler(createSimpleLexer([[PR_PLAIN,/^[\s]+/,null,' \t\r\n'],[PR_ATTRIB_VALUE,/^(?:\"[^\"]*\"?|\'[^\']*\'?)/,null,'\"\'']],[[PR_TAG,/^^<\/?[a-z](?:[\w.:-]*\w)?|\/?>$/i],[PR_ATTRIB_NAME,/^(?!style[\s=]|on)[a-z](?:[\w:-]*\w)?/i],['lang-uq.val',/^=\s*([^>\'\"\s]*(?:[^>\'\"\s\/]|\/(?=\s)))/],[PR_PUNCTUATION,/^[=<>\/]+/],['lang-js',/^on\w+\s*=\s*\"([^\"]+)\"/i],['lang-js',/^on\w+\s*=\s*\'([^\']+)\'/i],['lang-js',/^on\w+\s*=\s*([^\"\'>\s]+)/i],['lang-css',/^style\s*=\s*\"([^\"]+)\"/i],['lang-css',/^style\s*=\s*\'([^\']+)\'/i],['lang-css',/^style\s*=\s*([^\"\'>\s]+)/i]]),['in.tag']);registerLangHandler(createSimpleLexer([],[[PR_ATTRIB_VALUE,/^[\s\S]+/]]),['uq.val']);registerLangHandler(sourceDecorator({'keywords':CPP_KEYWORDS,'hashComments':true,'cStyleComments':true,'types':C_TYPES}),['c','cc','cpp','cxx','cyc','m']);registerLangHandler(sourceDecorator({'keywords':PHP_KEYWORDS,'hashComments':false,'cStyleComments':true,'multiLineStrings':true,'regexLiterals':true}),['php','phtml','inc']);registerLangHandler(sourceDecorator({'keywords':'null,true,false'}),['json']);registerLangHandler(sourceDecorator({'keywords':CSHARP_KEYWORDS,'hashComments':true,'cStyleComments':true,'verbatimStrings':true,'types':C_TYPES}),['cs']);registerLangHandler(sourceDecorator({'keywords':JAVA_KEYWORDS,'cStyleComments':true}),['java']);registerLangHandler(sourceDecorator({'keywords':SH_KEYWORDS,'hashComments':true,'multiLineStrings':true}),['bsh','csh','sh']);registerLangHandler(sourceDecorator({'keywords':PYTHON_KEYWORDS,'hashComments':true,'multiLineStrings':true,'tripleQuotedStrings':true}),['cv','py']);registerLangHandler(sourceDecorator({'keywords':PERL_KEYWORDS,'hashComments':true,'multiLineStrings':true,'regexLiterals':true}),['perl','pl','pm']);registerLangHandler(sourceDecorator({'keywords':RUBY_KEYWORDS,'hashComments':true,'multiLineStrings':true,'regexLiterals':true}),['rb']);registerLangHandler(sourceDecorator({'keywords':JSCRIPT_KEYWORDS,'cStyleComments':true,'regexLiterals':true}),['js']);registerLangHandler(sourceDecorator({'keywords':COFFEE_KEYWORDS,'hashComments':3,'cStyleComments':true,'multilineStrings':true,'tripleQuotedStrings':true,'regexLiterals':true}),['coffee']);registerLangHandler(createSimpleLexer([],[[PR_STRING,/^[\s\S]+/]]),['regex']);registerLangHandler(sourceDecorator({'keywords':CONFIG_KEYWORDS,'literals':CONFIG_OPTIONS,'strings':CONFIG_ENVS,'hashComments':true,'cStyleComments':false,'multiLineStrings':false,'regexLiterals':false,'httpdComments':true}),['config']);function applyDecorator(job){var opt_langExtension=job.langExtension;try{var sourceAndSpans=extractSourceSpans(job.sourceNode,job.pre);var source=sourceAndSpans.sourceCode;job.sourceCode=source;job.spans=sourceAndSpans.spans;job.basePos=0;langHandlerForExtension(opt_langExtension,source)(job);recombineTagsAndDecorations(job);}catch(e){if(win['console']){console['log'](e&&e['stack']?e['stack']:e);}}} function prettyPrintOne(sourceCodeHtml,opt_langExtension,opt_numberLines){var container=document.createElement('pre');container.innerHTML=sourceCodeHtml;if(opt_numberLines){numberLines(container,opt_numberLines,true);} var job={langExtension:opt_langExtension,numberLines:opt_numberLines,sourceNode:container,pre:1};applyDecorator(job);return container.innerHTML;} function prettyPrint(opt_whenDone){function byTagName(tn){return document.getElementsByTagName(tn);} var codeSegments=[byTagName('pre'),byTagName('code'),byTagName('xmp')];var elements=[];for(var i=0;iprettify.min.js # needs python and rjsmin installed httpd-2.4.41/docs/manual/style/scripts/prettify.js0000644000000000000500000021755313226752737020527 0ustar rootsrc// Copyright (C) 2006 Google Inc. // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. /** * @fileoverview * some functions for browser-side pretty printing of code contained in html. * *

    * Usage:

      *
    1. include this source file in an html page via * {@code } *
    2. define style rules. See the example page for examples. *
    3. mark the {@code
      } and {@code } tags in your source with
       *    {@code class=prettyprint.}
       *    You can also use the (html deprecated) {@code } tag, but the pretty
       *    printer needs to do more substantial DOM manipulations to support that, so
       *    some css styles may not be preserved.
       * </ol>
       * That's it.  I wanted to keep the API as simple as possible, so there's no
       * need to specify which language the code is in, but if you wish, you can add
       * another class to the {@code <pre>} or {@code <code>} element to specify the
       * language, as in {@code <pre class="prettyprint lang-java">}.  Any class that
       * starts with "lang-" followed by a file extension, specifies the file type.
       * See the "lang-*.js" files in this directory for code that implements
       * per-language file handlers.
       * <p>
       * Change log:<br>
       * cbeust, 2006/08/22
       * <blockquote>
       *   Java annotations (start with "@") are now captured as literals ("lit")
       * </blockquote>
       * @requires console
       */
      
      // JSLint declarations
      /*global console, document, navigator, setTimeout, window, define */
      
      /**
       * Split {@code prettyPrint} into multiple timeouts so as not to interfere with
       * UI events.
       * If set to {@code false}, {@code prettyPrint()} is synchronous.
       */
      window['PR_SHOULD_USE_CONTINUATION'] = true;
      
      /**
       * Find all the {@code <pre>} and {@code <code>} tags in the DOM with
       * {@code class=prettyprint} and prettify them.
       *
       * @param {Function?} opt_whenDone if specified, called when the last entry
       *     has been finished.
       */
      var prettyPrintOne;
      /**
       * Pretty print a chunk of code.
       *
       * @param {string} sourceCodeHtml code as html
       * @return {string} code as html, but prettier
       */
      var prettyPrint;
      
      
      (function () {
        var win = window;
        // Keyword lists for various languages.
        // We use things that coerce to strings to make them compact when minified
        // and to defeat aggressive optimizers that fold large string constants.
        var FLOW_CONTROL_KEYWORDS = ["break,continue,do,else,for,if,return,while"];
        var C_KEYWORDS = [FLOW_CONTROL_KEYWORDS,"auto,case,char,const,default," + 
            "double,enum,extern,float,goto,int,long,register,short,signed,sizeof,module," +
            "static,struct,switch,typedef,union,unsigned,void,volatile"];
        var COMMON_KEYWORDS = [C_KEYWORDS,"catch,class,delete,false,import," +
            "new,operator,private,protected,public,this,throw,true,try,typeof"];
        var CPP_KEYWORDS = [COMMON_KEYWORDS,"alignof,align_union,asm,axiom,bool," +
            "concept,concept_map,const_cast,constexpr,decltype," +
            "dynamic_cast,explicit,export,friend,inline,late_check," +
            "mutable,namespace,nullptr,reinterpret_cast,static_assert,static_cast," +
            "template,typeid,typename,using,virtual,where,request_req"];
        var JAVA_KEYWORDS = [COMMON_KEYWORDS,
            "abstract,boolean,byte,extends,final,finally,implements,import," +
            "instanceof,null,native,package,strictfp,super,synchronized,throws," +
            "transient"];
        var CSHARP_KEYWORDS = [JAVA_KEYWORDS,
            "as,base,by,checked,decimal,delegate,descending,dynamic,event," +
            "fixed,foreach,from,group,implicit,in,interface,internal,into,is,let," +
            "lock,object,out,override,orderby,params,partial,readonly,ref,sbyte," +
            "sealed,stackalloc,string,select,uint,ulong,unchecked,unsafe,ushort," +
            "var,virtual,where"];
        var COFFEE_KEYWORDS = "all,and,by,catch,class,else,extends,false,finally," +
            "for,if,in,is,isnt,loop,new,no,not,null,of,off,on,or,return,super,then," +
            "throw,true,try,unless,until,when,while,yes";
        var JSCRIPT_KEYWORDS = [COMMON_KEYWORDS,
            "debugger,eval,export,function,get,null,set,undefined,var,with," +
            "Infinity,NaN"];
        var PERL_KEYWORDS = "caller,delete,die,do,dump,else,elsif,eval,exit,foreach,for," +
            "goto,if,import,last,local,my,next,no,our,print,printf,package,redo,require," +
            "sub,undef,unless,until,use,wantarray,while,BEGIN,END";
        var PHP_KEYWORDS = "abstract,and,array,as,break,case,catch,cfunction,class," +
            "clone,const,continue,declare,default,do,else,elseif,enddeclare,endfor," + 
            "endforeach,endif,endswitch,endwhile,extends,final,for,foreach,function," +
            "global,goto,if,implements,interface,instanceof,namespace,new,old_function," +
            "or,private,protected,public,static,switch,throw,try,use,var,while,xor," + 
            "die,echo,empty,exit,eval,include,include_once,isset,list,require," + 
            "require_once,return,print,unset";
        var PYTHON_KEYWORDS = [FLOW_CONTROL_KEYWORDS, "and,as,assert,class,def,del," +
            "elif,except,exec,finally,from,global,import,in,is,lambda," +
            "nonlocal,not,or,pass,print,raise,try,with,yield," +
            "False,True,None"];
        var RUBY_KEYWORDS = [FLOW_CONTROL_KEYWORDS, "alias,and,begin,case,class," +
            "def,defined,elsif,end,ensure,false,in,module,next,nil,not,or,redo," +
            "rescue,retry,self,super,then,true,undef,unless,until,when,yield," +
            "BEGIN,END"];
        var SH_KEYWORDS = [FLOW_CONTROL_KEYWORDS, "case,done,elif,esac,eval,fi," +
            "function,in,local,set,then,until,echo"];
        var CONFIG_ENVS = ["User-Agent,HTTP_USER_AGENT,HTTP_REFERER,HTTP_COOKIE,HTTP_FORWARDED,HTTP_HOST,HTTP_PROXY_CONNECTION,HTTP_ACCEPT,REMOTE_ADDR,REMOTE_HOST,REMOTE_PORT,REMOTE_USER,REMOTE_IDENT,REQUEST_METHOD,SCRIPT_FILENAME,PATH_INFO,QUERY_STRING,AUTH_TYPE,DOCUMENT_ROOT,SERVER_ADMIN,SERVER_NAME,SERVER_ADDR,SERVER_PORT,SERVER_PROTOCOL,SERVER_SOFTWARE,TIME_YEAR,TIME_MON,TIME_DAY,TIME_HOUR,TIME_MIN,TIME_SEC,TIME_WDAY,TIME,API_VERSION,THE_REQUEST,REQUEST_URI,REQUEST_FILENAME,IS_SUBREQ,HTTPS,REQUEST_SCHEME"];
        var CONFIG_KEYWORDS = ["<AuthnProviderAlias>,<AuthzProviderAlias>,<Directory>,<DirectoryMatch>,<Else>,<ElseIf>,<Files>,<FilesMatch>,<If>,<IfDefine>,<IfModule>,<IfVersion>,<Limit>,<LimitExcept>,<Location>,<LocationMatch>,<MDomainSet>,<Macro>,<Proxy>,<ProxyMatch>,<RequireAll>,<RequireAny>,<RequireNone>,<VirtualHost>,AcceptFilter,AcceptPathInfo,AccessFileName,Action,AddAlt,AddAltByEncoding,AddAltByType,AddCharset,AddDefaultCharset,AddDescription,AddEncoding,AddHandler,AddIcon,AddIconByEncoding,AddIconByType,AddInputFilter,AddLanguage,AddModuleInfo,AddOutputFilter,AddOutputFilterByType,AddType,Alias,AliasMatch,Allow,AllowCONNECT,AllowEncodedSlashes,AllowMethods,AllowOverride,AllowOverrideList,Anonymous,Anonymous_LogEmail,Anonymous_MustGiveEmail,Anonymous_NoUserID,Anonymous_VerifyEmail,AsyncRequestWorkerFactor,AuthBasicAuthoritative,AuthBasicFake,AuthBasicProvider,AuthBasicUseDigestAlgorithm,AuthDBDUserPWQuery,AuthDBDUserRealmQuery,AuthDBMGroupFile,AuthDBMType,AuthDBMUserFile,AuthDigestAlgorithm,AuthDigestDomain,AuthDigestNonceLifetime,AuthDigestProvider,AuthDigestQop,AuthDigestShmemSize,AuthFormAuthoritative,AuthFormBody,AuthFormDisableNoStore,AuthFormFakeBasicAuth,AuthFormLocation,AuthFormLoginRequiredLocation,AuthFormLoginSuccessLocation,AuthFormLogoutLocation,AuthFormMethod,AuthFormMimetype,AuthFormPassword,AuthFormProvider,AuthFormSitePassphrase,AuthFormSize,AuthFormUsername,AuthGroupFile,AuthLDAPAuthorizePrefix,AuthLDAPBindAuthoritative,AuthLDAPBindDN,AuthLDAPBindPassword,AuthLDAPCharsetConfig,AuthLDAPCompareAsUser,AuthLDAPCompareDNOnServer,AuthLDAPDereferenceAliases,AuthLDAPGroupAttribute,AuthLDAPGroupAttributeIsDN,AuthLDAPInitialBindAsUser,AuthLDAPInitialBindPattern,AuthLDAPMaxSubGroupDepth,AuthLDAPRemoteUserAttribute,AuthLDAPRemoteUserIsDN,AuthLDAPSearchAsUser,AuthLDAPSubGroupAttribute,AuthLDAPSubGroupClass,AuthLDAPUrl,AuthMerging,AuthName,AuthType,AuthUserFile,AuthnCacheContext,AuthnCacheEnable,AuthnCacheProvideFor,AuthnCacheSOCache,AuthnCacheTimeout,AuthnzFcgiCheckAuthnProvider,AuthnzFcgiDefineProvider,AuthzDBDLoginToReferer,AuthzDBDQuery,AuthzDBDRedirectQuery,AuthzDBMType,AuthzSendForbiddenOnFailure,BalancerGrowth,BalancerInherit,BalancerMember,BalancerPersist,BrotliAlterETag,BrotliCompressionMaxInputBlock,BrotliCompressionQuality,BrotliCompressionWindow,BrotliFilterNote,BrowserMatch,BrowserMatchNoCase,BufferSize,BufferedLogs,CGIDScriptTimeout,CGIMapExtension,CGIPassAuth,CGIVar,CacheDefaultExpire,CacheDetailHeader,CacheDirLength,CacheDirLevels,CacheDisable,CacheEnable,CacheFile,CacheHeader,CacheIgnoreCacheControl,CacheIgnoreHeaders,CacheIgnoreNoLastMod,CacheIgnoreQueryString,CacheIgnoreURLSessionIdentifiers,CacheKeyBaseURL,CacheLastModifiedFactor,CacheLock,CacheLockMaxAge,CacheLockPath,CacheMaxExpire,CacheMaxFileSize,CacheMinExpire,CacheMinFileSize,CacheNegotiatedDocs,CacheQuickHandler,CacheReadSize,CacheReadTime,CacheRoot,CacheSocache,CacheSocacheMaxSize,CacheSocacheMaxTime,CacheSocacheMinTime,CacheSocacheReadSize,CacheSocacheReadTime,CacheStaleOnError,CacheStoreExpired,CacheStoreNoStore,CacheStorePrivate,CharsetDefault,CharsetOptions,CharsetSourceEnc,CheckCaseOnly,CheckSpelling,ChrootDir,ContentDigest,CookieDomain,CookieExpires,CookieName,CookieStyle,CookieTracking,CoreDumpDirectory,CustomLog,DBDExptime,DBDInitSQL,DBDKeep,DBDMax,DBDMin,DBDParams,DBDPersist,DBDPrepareSQL,DBDriver,DTracePrivileges,Dav,DavDepthInfinity,DavGenericLockDB,DavLockDB,DavMinTimeout,DefaultIcon,DefaultLanguage,DefaultRuntimeDir,DefaultType,Define,DeflateBufferSize,DeflateCompressionLevel,DeflateFilterNote,DeflateInflateLimitRequestBody,DeflateInflateRatioBurst,DeflateInflateRatioLimit,DeflateMemLevel,DeflateWindowSize,Deny,DirectoryCheckHandler,DirectoryIndex,DirectoryIndexRedirect,DirectorySlash,DocumentRoot,DumpIOInput,DumpIOOutput,EnableExceptionHook,EnableMMAP,EnableSendfile,Error,ErrorDocument,ErrorLog,ErrorLogFormat,Example,ExpiresActive,ExpiresByType,ExpiresDefault,ExtFilterDefine,ExtFilterOptions,ExtendedStatus,FallbackResource,FileETag,FilterChain,FilterDeclare,FilterProtocol,FilterProvider,FilterTrace,ForceLanguagePriority,ForceType,ForensicLog,GlobalLog,GprofDir,GracefulShutdownTimeout,Group,H2CopyFiles,H2Direct,H2EarlyHints,H2MaxSessionStreams,H2MaxWorkerIdleSeconds,H2MaxWorkers,H2MinWorkers,H2ModernTLSOnly,H2Push,H2PushDiarySize,H2PushPriority,H2PushResource,H2SerializeHeaders,H2StreamMaxMemSize,H2TLSCoolDownSecs,H2TLSWarmUpSize,H2Upgrade,H2WindowSize,Header,HeaderName,HeartbeatAddress,HeartbeatListen,HeartbeatMaxServers,HeartbeatStorage,HeartbeatStorage,HostnameLookups,HttpProtocolOptions,ISAPIAppendLogToErrors,ISAPIAppendLogToQuery,ISAPICacheFile,ISAPIFakeAsync,ISAPILogNotSupported,ISAPIReadAheadBuffer,IdentityCheck,IdentityCheckTimeout,ImapBase,ImapDefault,ImapMenu,Include,IncludeOptional,IndexHeadInsert,IndexIgnore,IndexIgnoreReset,IndexOptions,IndexOrderDefault,IndexStyleSheet,InputSed,KeepAlive,KeepAliveTimeout,KeptBodySize,LDAPCacheEntries,LDAPCacheTTL,LDAPConnectionPoolTTL,LDAPConnectionTimeout,LDAPLibraryDebug,LDAPOpCacheEntries,LDAPOpCacheTTL,LDAPReferralHopLimit,LDAPReferrals,LDAPRetries,LDAPRetryDelay,LDAPSharedCacheFile,LDAPSharedCacheSize,LDAPTimeout,LDAPTrustedClientCert,LDAPTrustedGlobalCert,LDAPTrustedMode,LDAPVerifyServerCert,LanguagePriority,LimitInternalRecursion,LimitRequestBody,LimitRequestFieldSize,LimitRequestFields,LimitRequestLine,LimitXMLRequestBody,Listen,ListenBackLog,ListenCoresBucketsRatio,LoadFile,LoadModule,LogFormat,LogIOTrackTTFB,LogLevel,LogMessage,LuaAuthzProvider,LuaCodeCache,LuaHookAccessChecker,LuaHookAuthChecker,LuaHookCheckUserID,LuaHookFixups,LuaHookInsertFilter,LuaHookLog,LuaHookMapToStorage,LuaHookTranslateName,LuaHookTypeChecker,LuaInherit,LuaInputFilter,LuaMapHandler,LuaOutputFilter,LuaPackageCPath,LuaPackagePath,LuaQuickHandler,LuaRoot,LuaScope,MDBaseServer,MDCAChallenges,MDCertificateAgreement,MDCertificateAuthority,MDCertificateProtocol,MDDriveMode,MDHttpProxy,MDMember,MDMembers,MDMustStaple,MDNotifyCmd,MDPortMap,MDPrivateKeys,MDRenewWindow,MDRequireHttps,MDStoreDir,MDomain,MMapFile,MaxConnectionsPerChild,MaxKeepAliveRequests,MaxMemFree,MaxRangeOverlaps,MaxRangeReversals,MaxRanges,MaxRequestWorkers,MaxSpareServers,MaxSpareThreads,MaxThreads,MemcacheConnTTL,MergeTrailers,MetaDir,MetaFiles,MetaSuffix,MimeMagicFile,MinSpareServers,MinSpareThreads,ModMimeUsePathInfo,ModemStandard,MultiviewsMatch,Mutex,NWSSLTrustedCerts,NWSSLUpgradeable,NameVirtualHost,NoProxy,Options,Order,OutputSed,PassEnv,PidFile,PrivilegesMode,Protocol,ProtocolEcho,Protocols,ProtocolsHonorOrder,ProxyAddHeaders,ProxyBadHeader,ProxyBlock,ProxyDomain,ProxyErrorOverride,ProxyExpressDBMFile,ProxyExpressDBMType,ProxyExpressEnable,ProxyFCGIBackendType,ProxyFCGISetEnvIf,ProxyFtpDirCharset,ProxyFtpEscapeWildcards,ProxyFtpListOnWildcard,ProxyHCExpr,ProxyHCTPsize,ProxyHCTemplate,ProxyHTMLBufSize,ProxyHTMLCharsetOut,ProxyHTMLDocType,ProxyHTMLEnable,ProxyHTMLEvents,ProxyHTMLExtended,ProxyHTMLFixups,ProxyHTMLInterp,ProxyHTMLLinks,ProxyHTMLMeta,ProxyHTMLStripComments,ProxyHTMLURLMap,ProxyIOBufferSize,ProxyMaxForwards,ProxyPass,ProxyPassInherit,ProxyPassInterpolateEnv,ProxyPassMatch,ProxyPassReverse,ProxyPassReverseCookieDomain,ProxyPassReverseCookiePath,ProxyPreserveHost,ProxyReceiveBufferSize,ProxyRemote,ProxyRemoteMatch,ProxyRequests,ProxySCGIInternalRedirect,ProxySCGISendfile,ProxySet,ProxySourceAddress,ProxyStatus,ProxyTimeout,ProxyVia,QualifyRedirectURL,RLimitCPU,RLimitMEM,RLimitNPROC,ReadmeName,ReceiveBufferSize,Redirect,RedirectMatch,RedirectPermanent,RedirectTemp,ReflectorHeader,RegisterHttpMethod,RemoteIPHeader,RemoteIPInternalProxy,RemoteIPInternalProxyList,RemoteIPProxiesHeader,RemoteIPTrustedProxy,RemoteIPTrustedProxyList,RemoveCharset,RemoveEncoding,RemoveHandler,RemoveInputFilter,RemoveLanguage,RemoveOutputFilter,RemoveType,RequestHeader,RequestReadTimeout,Require,RewriteBase,RewriteCond,RewriteEngine,RewriteMap,RewriteOptions,RewriteRule,SSIETag,SSIEndTag,SSIErrorMsg,SSILastModified,SSILegacyExprParser,SSIStartTag,SSITimeFormat,SSIUndefinedEcho,SSLCACertificateFile,SSLCACertificatePath,SSLCADNRequestFile,SSLCADNRequestPath,SSLCARevocationCheck,SSLCARevocationFile,SSLCARevocationPath,SSLCertificateChainFile,SSLCertificateFile,SSLCertificateKeyFile,SSLCipherSuite,SSLCompression,SSLCryptoDevice,SSLEngine,SSLFIPS,SSLHonorCipherOrder,SSLInsecureRenegotiation,SSLOCSPDefaultResponder,SSLOCSPEnable,SSLOCSPNoverify,SSLOCSPOverrideResponder,SSLOCSPProxyURL,SSLOCSPResponderCertificateFile,SSLOCSPResponderTimeout,SSLOCSPResponseMaxAge,SSLOCSPResponseTimeSkew,SSLOCSPUseRequestNonce,SSLOpenSSLConfCmd,SSLOptions,SSLPassPhraseDialog,SSLProtocol,SSLProxyCACertificateFile,SSLProxyCACertificatePath,SSLProxyCARevocationCheck,SSLProxyCARevocationFile,SSLProxyCARevocationPath,SSLProxyCheckPeerCN,SSLProxyCheckPeerExpire,SSLProxyCheckPeerName,SSLProxyCipherSuite,SSLProxyEngine,SSLProxyMachineCertificateChainFile,SSLProxyMachineCertificateFile,SSLProxyMachineCertificatePath,SSLProxyProtocol,SSLProxyVerify,SSLProxyVerifyDepth,SSLRandomSeed,SSLRenegBufferSize,SSLRequire,SSLRequireSSL,SSLSRPUnknownUserSeed,SSLSRPVerifierFile,SSLSessionCache,SSLSessionCacheTimeout,SSLSessionTicketKeyFile,SSLSessionTickets,SSLStaplingCache,SSLStaplingErrorCacheTimeout,SSLStaplingFakeTryLater,SSLStaplingForceURL,SSLStaplingResponderTimeout,SSLStaplingResponseMaxAge,SSLStaplingResponseTimeSkew,SSLStaplingReturnResponderErrors,SSLStaplingStandardCacheTimeout,SSLStrictSNIVHostCheck,SSLUseStapling,SSLUserName,SSLVerifyClient,SSLVerifyDepth,Satisfy,ScoreBoardFile,Script,ScriptAlias,ScriptAliasMatch,ScriptInterpreterSource,ScriptLog,ScriptLogBuffer,ScriptLogLength,ScriptSock,SecureListen,SeeRequestTail,SendBufferSize,ServerAdmin,ServerAlias,ServerLimit,ServerName,ServerPath,ServerRoot,ServerSignature,ServerTokens,Session,SessionCookieName,SessionCookieName2,SessionCookieRemove,SessionCryptoCipher,SessionCryptoDriver,SessionCryptoPassphrase,SessionCryptoPassphraseFile,SessionDBDCookieName,SessionDBDCookieName2,SessionDBDCookieRemove,SessionDBDDeleteLabel,SessionDBDInsertLabel,SessionDBDPerUser,SessionDBDSelectLabel,SessionDBDUpdateLabel,SessionEnv,SessionExclude,SessionHeader,SessionInclude,SessionMaxAge,SetEnv,SetEnvIf,SetEnvIfExpr,SetEnvIfNoCase,SetHandler,SetInputFilter,SetOutputFilter,StartServers,StartThreads,Substitute,SubstituteInheritBefore,SubstituteMaxLineLength,Suexec,SuexecUserGroup,ThreadLimit,ThreadStackSize,ThreadsPerChild,TimeOut,TraceEnable,TransferLog,TypesConfig,UnDefine,UndefMacro,UnsetEnv,Use,UseCanonicalName,UseCanonicalPhysicalPort,User,UserDir,VHostCGIMode,VHostCGIPrivs,VHostGroup,VHostPrivs,VHostSecure,VHostUser,VirtualDocumentRoot,VirtualDocumentRootIP,VirtualScriptAlias,VirtualScriptAliasIP,WatchdogInterval,XBitHack,xml2EncAlias,xml2EncDefault,xml2StartParse"]
        var CONFIG_OPTIONS = /^[\\+\\-]?(AuthConfig|IncludesNOEXEC|ExecCGI|FollowSymLinks|MultiViews|Includes|Indexes|SymLinksIfOwnerMatch)\b/i;
        var ALL_KEYWORDS = [
            CPP_KEYWORDS, CSHARP_KEYWORDS, JSCRIPT_KEYWORDS, PERL_KEYWORDS +
            PYTHON_KEYWORDS, RUBY_KEYWORDS, SH_KEYWORDS, CONFIG_KEYWORDS, PHP_KEYWORDS];
        var C_TYPES = /^(DIR|FILE|vector|(de|priority_)?queue|list|stack|(const_)?iterator|(multi)?(set|map)|bitset|u?(int|float|char|void|const|static|struct)\d*(_t)?\b)|[a-z_]+_rec|cmd_parms\b/;
      
        // token style names.  correspond to css classes
        /**
         * token style for a string literal
         * @const
         */
        var PR_STRING = 'str';
        /**
         * token style for a keyword
         * @const
         */
        var PR_KEYWORD = 'kwd';
        /**
         * token style for a comment
         * @const
         */
        var PR_COMMENT = 'com';
        /**
         * token style for a type
         * @const
         */
        var PR_TYPE = 'typ';
        /**
         * token style for a literal value.  e.g. 1, null, true.
         * @const
         */
        var PR_LITERAL = 'lit';
        /**
         * token style for a punctuation string.
         * @const
         */
        var PR_PUNCTUATION = 'pun';
        /**
         * token style for plain text.
         * @const
         */
        var PR_PLAIN = 'pln';
      
        /**
         * token style for an sgml tag.
         * @const
         */
        var PR_TAG = 'tag';
        /**
         * token style for a markup declaration such as a DOCTYPE.
         * @const
         */
        var PR_DECLARATION = 'dec';
        /**
         * token style for embedded source.
         * @const
         */
        var PR_SOURCE = 'src';
        /**
         * token style for an sgml attribute name.
         * @const
         */
        var PR_ATTRIB_NAME = 'atn';
        /**
         * token style for an sgml attribute value.
         * @const
         */
        var PR_ATTRIB_VALUE = 'atv';
      
        /**
         * A class that indicates a section of markup that is not code, e.g. to allow
         * embedding of line numbers within code listings.
         * @const
         */
        var PR_NOCODE = 'nocode';
      
      
      
      /**
       * A set of tokens that can precede a regular expression literal in
       * javascript
       * http://web.archive.org/web/20070717142515/http://www.mozilla.org/js/language/js20/rationale/syntax.html
       * has the full list, but I've removed ones that might be problematic when
       * seen in languages that don't support regular expression literals.
       *
       * <p>Specifically, I've removed any keywords that can't precede a regexp
       * literal in a syntactically legal javascript program, and I've removed the
       * "in" keyword since it's not a keyword in many languages, and might be used
       * as a count of inches.
       *
       * <p>The link above does not accurately describe EcmaScript rules since
       * it fails to distinguish between (a=++/b/i) and (a++/b/i) but it works
       * very well in practice.
       *
       * @private
       * @const
       */
      var REGEXP_PRECEDER_PATTERN = '(?:^^\\.?|[+-]|[!=]=?=?|\\#|%=?|&&?=?|\\(|\\*=?|[+\\-]=|->|\\/=?|::?|<<?=?|>>?>?=?|,|;|\\?|@|\\[|~|{|\\^\\^?=?|\\|\\|?=?|break|case|continue|delete|do|else|finally|instanceof|return|throw|try|typeof)\\s*';
      
      // CAVEAT: this does not properly handle the case where a regular
      // expression immediately follows another since a regular expression may
      // have flags for case-sensitivity and the like.  Having regexp tokens
      // adjacent is not valid in any language I'm aware of, so I'm punting.
      // TODO: maybe style special characters inside a regexp as punctuation.
      
      
        /**
         * Given a group of {@link RegExp}s, returns a {@code RegExp} that globally
         * matches the union of the sets of strings matched by the input RegExp.
         * Since it matches globally, if the input strings have a start-of-input
         * anchor (/^.../), it is ignored for the purposes of unioning.
         * @param {Array.<RegExp>} regexs non multiline, non-global regexs.
         * @return {RegExp} a global regex.
         */
        function combinePrefixPatterns(regexs) {
          var capturedGroupIndex = 0;
        
          var needToFoldCase = false;
          var ignoreCase = false;
          for (var i = 0, n = regexs.length; i < n; ++i) {
            var regex = regexs[i];
            if (regex.ignoreCase) {
              ignoreCase = true;
            } else if (/[a-z]/i.test(regex.source.replace(
                           /\\u[0-9a-f]{4}|\\x[0-9a-f]{2}|\\[^ux]/gi, ''))) {
              needToFoldCase = true;
              ignoreCase = false;
              break;
            }
          }
        
          var escapeCharToCodeUnit = {
            'b': 8,
            't': 9,
            'n': 0xa,
            'v': 0xb,
            'f': 0xc,
            'r': 0xd
          };
        
          function decodeEscape(charsetPart) {
            var cc0 = charsetPart.charCodeAt(0);
            if (cc0 !== 92 /* \\ */) {
              return cc0;
            }
            var c1 = charsetPart.charAt(1);
            cc0 = escapeCharToCodeUnit[c1];
            if (cc0) {
              return cc0;
            } else if ('0' <= c1 && c1 <= '7') {
              return parseInt(charsetPart.substring(1), 8);
            } else if (c1 === 'u' || c1 === 'x') {
              return parseInt(charsetPart.substring(2), 16);
            } else {
              return charsetPart.charCodeAt(1);
            }
          }
        
          function encodeEscape(charCode) {
            if (charCode < 0x20) {
              return (charCode < 0x10 ? '\\x0' : '\\x') + charCode.toString(16);
            }
            var ch = String.fromCharCode(charCode);
            return (ch === '\\' || ch === '-' || ch === ']' || ch === '^')
                ? "\\" + ch : ch;
          }
        
          function caseFoldCharset(charSet) {
            var charsetParts = charSet.substring(1, charSet.length - 1).match(
                new RegExp(
                    '\\\\u[0-9A-Fa-f]{4}'
                    + '|\\\\x[0-9A-Fa-f]{2}'
                    + '|\\\\[0-3][0-7]{0,2}'
                    + '|\\\\[0-7]{1,2}'
                    + '|\\\\[\\s\\S]'
                    + '|-'
                    + '|[^-\\\\]',
                    'g'));
            var ranges = [];
            var inverse = charsetParts[0] === '^';
        
            var out = ['['];
            if (inverse) { out.push('^'); }
        
            for (var i = inverse ? 1 : 0, n = charsetParts.length; i < n; ++i) {
              var p = charsetParts[i];
              if (/\\[bdsw]/i.test(p)) {  // Don't muck with named groups.
                out.push(p);
              } else {
                var start = decodeEscape(p);
                var end;
                if (i + 2 < n && '-' === charsetParts[i + 1]) {
                  end = decodeEscape(charsetParts[i + 2]);
                  i += 2;
                } else {
                  end = start;
                }
                ranges.push([start, end]);
                // If the range might intersect letters, then expand it.
                // This case handling is too simplistic.
                // It does not deal with non-latin case folding.
                // It works for latin source code identifiers though.
                if (!(end < 65 || start > 122)) {
                  if (!(end < 65 || start > 90)) {
                    ranges.push([Math.max(65, start) | 32, Math.min(end, 90) | 32]);
                  }
                  if (!(end < 97 || start > 122)) {
                    ranges.push([Math.max(97, start) & ~32, Math.min(end, 122) & ~32]);
                  }
                }
              }
            }
        
            // [[1, 10], [3, 4], [8, 12], [14, 14], [16, 16], [17, 17]]
            // -> [[1, 12], [14, 14], [16, 17]]
            ranges.sort(function (a, b) { return (a[0] - b[0]) || (b[1]  - a[1]); });
            var consolidatedRanges = [];
            var lastRange = [];
            for (var i = 0; i < ranges.length; ++i) {
              var range = ranges[i];
              if (range[0] <= lastRange[1] + 1) {
                lastRange[1] = Math.max(lastRange[1], range[1]);
              } else {
                consolidatedRanges.push(lastRange = range);
              }
            }
        
            for (var i = 0; i < consolidatedRanges.length; ++i) {
              var range = consolidatedRanges[i];
              out.push(encodeEscape(range[0]));
              if (range[1] > range[0]) {
                if (range[1] + 1 > range[0]) { out.push('-'); }
                out.push(encodeEscape(range[1]));
              }
            }
            out.push(']');
            return out.join('');
          }
        
          function allowAnywhereFoldCaseAndRenumberGroups(regex) {
            // Split into character sets, escape sequences, punctuation strings
            // like ('(', '(?:', ')', '^'), and runs of characters that do not
            // include any of the above.
            var parts = regex.source.match(
                new RegExp(
                    '(?:'
                    + '\\[(?:[^\\x5C\\x5D]|\\\\[\\s\\S])*\\]'  // a character set
                    + '|\\\\u[A-Fa-f0-9]{4}'  // a unicode escape
                    + '|\\\\x[A-Fa-f0-9]{2}'  // a hex escape
                    + '|\\\\[0-9]+'  // a back-reference or octal escape
                    + '|\\\\[^ux0-9]'  // other escape sequence
                    + '|\\(\\?[:!=]'  // start of a non-capturing group
                    + '|[\\(\\)\\^]'  // start/end of a group, or line start
                    + '|[^\\x5B\\x5C\\(\\)\\^]+'  // run of other characters
                    + ')',
                    'g'));
            var n = parts.length;
        
            // Maps captured group numbers to the number they will occupy in
            // the output or to -1 if that has not been determined, or to
            // undefined if they need not be capturing in the output.
            var capturedGroups = [];
        
            // Walk over and identify back references to build the capturedGroups
            // mapping.
            for (var i = 0, groupIndex = 0; i < n; ++i) {
              var p = parts[i];
              if (p === '(') {
                // groups are 1-indexed, so max group index is count of '('
                ++groupIndex;
              } else if ('\\' === p.charAt(0)) {
                var decimalValue = +p.substring(1);
                if (decimalValue) {
                  if (decimalValue <= groupIndex) {
                    capturedGroups[decimalValue] = -1;
                  } else {
                    // Replace with an unambiguous escape sequence so that
                    // an octal escape sequence does not turn into a backreference
                    // to a capturing group from an earlier regex.
                    parts[i] = encodeEscape(decimalValue);
                  }
                }
              }
            }
        
            // Renumber groups and reduce capturing groups to non-capturing groups
            // where possible.
            for (var i = 1; i < capturedGroups.length; ++i) {
              if (-1 === capturedGroups[i]) {
                capturedGroups[i] = ++capturedGroupIndex;
              }
            }
            for (var i = 0, groupIndex = 0; i < n; ++i) {
              var p = parts[i];
              if (p === '(') {
                ++groupIndex;
                if (!capturedGroups[groupIndex]) {
                  parts[i] = '(?:';
                }
              } else if ('\\' === p.charAt(0)) {
                var decimalValue = +p.substring(1);
                if (decimalValue && decimalValue <= groupIndex) {
                  parts[i] = '\\' + capturedGroups[decimalValue];
                }
              }
            }
        
            // Remove any prefix anchors so that the output will match anywhere.
            // ^^ really does mean an anchored match though.
            for (var i = 0; i < n; ++i) {
              if ('^' === parts[i] && '^' !== parts[i + 1]) { parts[i] = ''; }
            }
        
            // Expand letters to groups to handle mixing of case-sensitive and
            // case-insensitive patterns if necessary.
            if (regex.ignoreCase && needToFoldCase) {
              for (var i = 0; i < n; ++i) {
                var p = parts[i];
                var ch0 = p.charAt(0);
                if (p.length >= 2 && ch0 === '[') {
                  parts[i] = caseFoldCharset(p);
                } else if (ch0 !== '\\') {
                  // TODO: handle letters in numeric escapes.
                  parts[i] = p.replace(
                      /[a-zA-Z]/g,
                      function (ch) {
                        var cc = ch.charCodeAt(0);
                        return '[' + String.fromCharCode(cc & ~32, cc | 32) + ']';
                      });
                }
              }
            }
        
            return parts.join('');
          }
        
          var rewritten = [];
          for (var i = 0, n = regexs.length; i < n; ++i) {
            var regex = regexs[i];
            if (regex.global || regex.multiline) { throw new Error('' + regex); }
            rewritten.push(
                '(?:' + allowAnywhereFoldCaseAndRenumberGroups(regex) + ')');
          }
        
          return new RegExp(rewritten.join('|'), ignoreCase ? 'gi' : 'g');
        }
      
      
        /**
         * Split markup into a string of source code and an array mapping ranges in
         * that string to the text nodes in which they appear.
         *
         * <p>
         * The HTML DOM structure:</p>
         * <pre>
         * (Element   "p"
         *   (Element "b"
         *     (Text  "print "))       ; #1
         *   (Text    "'Hello '")      ; #2
         *   (Element "br")            ; #3
         *   (Text    "  + 'World';")) ; #4
         * </pre>
         * <p>
         * corresponds to the HTML
         * {@code <p><b>print </b>'Hello '<br>  + 'World';</p>}.</p>
         *
         * <p>
         * It will produce the output:</p>
         * <pre>
         * {
         *   sourceCode: "print 'Hello '\n  + 'World';",
         *   //                     1          2
         *   //           012345678901234 5678901234567
         *   spans: [0, #1, 6, #2, 14, #3, 15, #4]
         * }
         * </pre>
         * <p>
         * where #1 is a reference to the {@code "print "} text node above, and so
         * on for the other text nodes.
         * </p>
         *
         * <p>
         * The {@code} spans array is an array of pairs.  Even elements are the start
         * indices of substrings, and odd elements are the text nodes (or BR elements)
         * that contain the text for those substrings.
         * Substrings continue until the next index or the end of the source.
         * </p>
         *
         * @param {Node} node an HTML DOM subtree containing source-code.
         * @param {boolean} isPreformatted true if white-space in text nodes should
         *    be considered significant.
         * @return {Object} source code and the text nodes in which they occur.
         */
        function extractSourceSpans(node, isPreformatted) {
          var nocode = /(?:^|\s)nocode(?:\s|$)/;
        
          var chunks = [];
          var length = 0;
          var spans = [];
          var k = 0;
        
          function walk(node) {
            switch (node.nodeType) {
              case 1:  // Element
                if (nocode.test(node.className)) { return; }
                for (var child = node.firstChild; child; child = child.nextSibling) {
                  walk(child);
                }
                var nodeName = node.nodeName.toLowerCase();
                if ('br' === nodeName || 'li' === nodeName) {
                  chunks[k] = '\n';
                  spans[k << 1] = length++;
                  spans[(k++ << 1) | 1] = node;
                }
                break;
              case 3: case 4:  // Text
                var text = node.nodeValue;
                if (text.length) {
                  if (!isPreformatted) {
                    text = text.replace(/[ \t\r\n]+/g, ' ');
                  } else {
                    text = text.replace(/\r\n?/g, '\n');  // Normalize newlines.
                    text = text.replace(/^(\r?\n\s*)+/g, '');  // Remove leading newlines
                    text = text.replace(/^\s*/g, '');  // Remove leading spaces due to indented formatting
                    text = text.replace(/(\r?\n\s*)+$/g, '');  // Remove ending newlines
                    
                  }
                  // TODO: handle tabs here?
                  chunks[k] = text;
                  spans[k << 1] = length;
                  length += text.length;
                  spans[(k++ << 1) | 1] = node;
                }
                break;
            }
          }
        
          walk(node);
        
          return {
            sourceCode: chunks.join('').replace(/\n$/, ''),
            spans: spans
          };
        }
      
      
        /**
         * Apply the given language handler to sourceCode and add the resulting
         * decorations to out.
         * @param {number} basePos the index of sourceCode within the chunk of source
         *    whose decorations are already present on out.
         */
        function appendDecorations(basePos, sourceCode, langHandler, out) {
          if (!sourceCode) { return; }
          var job = {
            sourceCode: sourceCode,
            basePos: basePos
          };
          langHandler(job);
          out.push.apply(out, job.decorations);
        }
      
        var notWs = /\S/;
      
        /**
         * Given an element, if it contains only one child element and any text nodes
         * it contains contain only space characters, return the sole child element.
         * Otherwise returns undefined.
         * <p>
         * This is meant to return the CODE element in {@code <pre><code ...>} when
         * there is a single child element that contains all the non-space textual
         * content, but not to return anything where there are multiple child elements
         * as in {@code <pre><code>...</code><code>...</code></pre>} or when there
         * is textual content.
         */
        function childContentWrapper(element) {
          var wrapper = undefined;
          for (var c = element.firstChild; c; c = c.nextSibling) {
            var type = c.nodeType;
            wrapper = (type === 1)  // Element Node
                ? (wrapper ? element : c)
                : (type === 3)  // Text Node
                ? (notWs.test(c.nodeValue) ? element : wrapper)
                : wrapper;
          }
          return wrapper === element ? undefined : wrapper;
        }
      
        /** Given triples of [style, pattern, context] returns a lexing function,
          * The lexing function interprets the patterns to find token boundaries and
          * returns a decoration list of the form
          * [index_0, style_0, index_1, style_1, ..., index_n, style_n]
          * where index_n is an index into the sourceCode, and style_n is a style
          * constant like PR_PLAIN.  index_n-1 <= index_n, and style_n-1 applies to
          * all characters in sourceCode[index_n-1:index_n].
          *
          * The stylePatterns is a list whose elements have the form
          * [style : string, pattern : RegExp, DEPRECATED, shortcut : string].
          *
          * Style is a style constant like PR_PLAIN, or can be a string of the
          * form 'lang-FOO', where FOO is a language extension describing the
          * language of the portion of the token in $1 after pattern executes.
          * E.g., if style is 'lang-lisp', and group 1 contains the text
          * '(hello (world))', then that portion of the token will be passed to the
          * registered lisp handler for formatting.
          * The text before and after group 1 will be restyled using this decorator
          * so decorators should take care that this doesn't result in infinite
          * recursion.  For example, the HTML lexer rule for SCRIPT elements looks
          * something like ['lang-js', /<[s]cript>(.+?)<\/script>/].  This may match
          * '<script>foo()<\/script>', which would cause the current decorator to
          * be called with '<script>' which would not match the same rule since
          * group 1 must not be empty, so it would be instead styled as PR_TAG by
          * the generic tag rule.  The handler registered for the 'js' extension would
          * then be called with 'foo()', and finally, the current decorator would
          * be called with '<\/script>' which would not match the original rule and
          * so the generic tag rule would identify it as a tag.
          *
          * Pattern must only match prefixes, and if it matches a prefix, then that
          * match is considered a token with the same style.
          *
          * Context is applied to the last non-whitespace, non-comment token
          * recognized.
          *
          * Shortcut is an optional string of characters, any of which, if the first
          * character, gurantee that this pattern and only this pattern matches.
          *
          * @param {Array} shortcutStylePatterns patterns that always start with
          *   a known character.  Must have a shortcut string.
          * @param {Array} fallthroughStylePatterns patterns that will be tried in
          *   order if the shortcut ones fail.  May have shortcuts.
          *
          * @return {function (Object)} a
          *   function that takes source code and returns a list of decorations.
          */
        function createSimpleLexer(shortcutStylePatterns, fallthroughStylePatterns) {
          var shortcuts = {};
          var tokenizer;
          (function () {
            var allPatterns = shortcutStylePatterns.concat(fallthroughStylePatterns);
            var allRegexs = [];
            var regexKeys = {};
            for (var i = 0, n = allPatterns.length; i < n; ++i) {
              var patternParts = allPatterns[i];
              var shortcutChars = patternParts[3];
              if (shortcutChars) {
                for (var c = shortcutChars.length; --c >= 0;) {
                  shortcuts[shortcutChars.charAt(c)] = patternParts;
                }
              }
              var regex = patternParts[1];
              var k = '' + regex;
              if (!regexKeys.hasOwnProperty(k)) {
                allRegexs.push(regex);
                regexKeys[k] = null;
              }
            }
            allRegexs.push(/[\0-\uffff]/);
            tokenizer = combinePrefixPatterns(allRegexs);
          })();
      
          var nPatterns = fallthroughStylePatterns.length;
      
          /**
           * Lexes job.sourceCode and produces an output array job.decorations of
           * style classes preceded by the position at which they start in
           * job.sourceCode in order.
           *
           * @param {Object} job an object like <pre>{
           *    sourceCode: {string} sourceText plain text,
           *    basePos: {int} position of job.sourceCode in the larger chunk of
           *        sourceCode.
           * }</pre>
           */
          var decorate = function (job) {
            var sourceCode = job.sourceCode, basePos = job.basePos;
            /** Even entries are positions in source in ascending order.  Odd enties
              * are style markers (e.g., PR_COMMENT) that run from that position until
              * the end.
              * @type {Array.<number|string>}
              */
            var decorations = [basePos, PR_PLAIN];
            var pos = 0;  // index into sourceCode
            var tokens = sourceCode.match(tokenizer) || [];
            var styleCache = {};
      
            for (var ti = 0, nTokens = tokens.length; ti < nTokens; ++ti) {
              var token = tokens[ti];
              var style = styleCache[token];
              var match = void 0;
      
              var isEmbedded;
              if (typeof style === 'string') {
                isEmbedded = false;
              } else {
                var patternParts = shortcuts[token.charAt(0)];
                if (patternParts) {
                  match = token.match(patternParts[1]);
                  style = patternParts[0];
                } else {
                  for (var i = 0; i < nPatterns; ++i) {
                    patternParts = fallthroughStylePatterns[i];
                    match = token.match(patternParts[1]);
                    if (match) {
                      style = patternParts[0];
                      break;
                    }
                  }
      
                  if (!match) {  // make sure that we make progress
                    style = PR_PLAIN;
                  }
                }
      
                isEmbedded = style.length >= 5 && 'lang-' === style.substring(0, 5);
                if (isEmbedded && !(match && typeof match[1] === 'string')) {
                  isEmbedded = false;
                  style = PR_SOURCE;
                }
      
                if (!isEmbedded) { styleCache[token] = style; }
              }
      
              var tokenStart = pos;
              pos += token.length;
      
              if (!isEmbedded) {
                decorations.push(basePos + tokenStart, style);
              } else {  // Treat group 1 as an embedded block of source code.
                var embeddedSource = match[1];
                var embeddedSourceStart = token.indexOf(embeddedSource);
                var embeddedSourceEnd = embeddedSourceStart + embeddedSource.length;
                if (match[2]) {
                  // If embeddedSource can be blank, then it would match at the
                  // beginning which would cause us to infinitely recurse on the
                  // entire token, so we catch the right context in match[2].
                  embeddedSourceEnd = token.length - match[2].length;
                  embeddedSourceStart = embeddedSourceEnd - embeddedSource.length;
                }
                var lang = style.substring(5);
                // Decorate the left of the embedded source
                appendDecorations(
                    basePos + tokenStart,
                    token.substring(0, embeddedSourceStart),
                    decorate, decorations);
                // Decorate the embedded source
                appendDecorations(
                    basePos + tokenStart + embeddedSourceStart,
                    embeddedSource,
                    langHandlerForExtension(lang, embeddedSource),
                    decorations);
                // Decorate the right of the embedded section
                appendDecorations(
                    basePos + tokenStart + embeddedSourceEnd,
                    token.substring(embeddedSourceEnd),
                    decorate, decorations);
              }
            }
            job.decorations = decorations;
          };
          return decorate;
        }
      
        /** returns a function that produces a list of decorations from source text.
          *
          * This code treats ", ', and ` as string delimiters, and \ as a string
          * escape.  It does not recognize perl's qq() style strings.
          * It has no special handling for double delimiter escapes as in basic, or
          * the tripled delimiters used in python, but should work on those regardless
          * although in those cases a single string literal may be broken up into
          * multiple adjacent string literals.
          *
          * It recognizes C, C++, and shell style comments.
          *
          * @param {Object} options a set of optional parameters.
          * @return {function (Object)} a function that examines the source code
          *     in the input job and builds the decoration list.
          */
        function sourceDecorator(options) {
          var shortcutStylePatterns = [], fallthroughStylePatterns = [];
          if (options['tripleQuotedStrings']) {
            // '''multi-line-string''', 'single-line-string', and double-quoted
            shortcutStylePatterns.push(
                [PR_STRING,  /^(?:\'\'\'(?:[^\'\\]|\\[\s\S]|\'{1,2}(?=[^\']))*(?:\'\'\'|$)|\"\"\"(?:[^\"\\]|\\[\s\S]|\"{1,2}(?=[^\"]))*(?:\"\"\"|$)|\'(?:[^\\\']|\\[\s\S])*(?:\'|$)|\"(?:[^\\\"]|\\[\s\S])*(?:\"|$))/,
                 null, '\'"']);
          } else if (options['multiLineStrings']) {
            // 'multi-line-string', "multi-line-string"
            shortcutStylePatterns.push(
                [PR_STRING,  /^(?:\'(?:[^\\\']|\\[\s\S])*(?:\'|$)|\"(?:[^\\\"]|\\[\s\S])*(?:\"|$)|\`(?:[^\\\`]|\\[\s\S])*(?:\`|$))/,
                 null, '\'"`']);
          } else {
            // 'single-line-string', "single-line-string"
            shortcutStylePatterns.push(
                [PR_STRING,
                 /^(?:\'(?:[^\\\'\r\n]|\\.)*(?:\'|$)|\"(?:[^\\\"\r\n]|\\.)*(?:\"|$))/,
                 null, '"\'']);
          }
          if (options['verbatimStrings']) {
            // verbatim-string-literal production from the C# grammar.  See issue 93.
            fallthroughStylePatterns.push(
                [PR_STRING, /^@\"(?:[^\"]|\"\")*(?:\"|$)/, null]);
          }
          var hc = options['hashComments'];
          if (hc) {
            if (options['cStyleComments']) {
              if (hc > 1) {  // multiline hash comments
                shortcutStylePatterns.push(
                    [PR_COMMENT, /^#(?:##(?:[^#]|#(?!##))*(?:###|$)|.*)/, null, '#']);
              } else {
                // Stop C preprocessor declarations at an unclosed open comment
                shortcutStylePatterns.push(
                    [PR_COMMENT, /^#(?:(?:define|elif|else|endif|error|ifdef|include|ifndef|line|pragma|undef|warning)\b|[^\r\n]*)/,
                     null, '#']);
              }
              // #include <stdio.h>
              fallthroughStylePatterns.push(
                  [PR_STRING,
                   /^<(?:(?:(?:\.\.\/)*|\/?)(?:[\w-]+(?:\/[\w-]+)+)?[\w-]+\.h(?:h|pp|\+\+)?|[a-z]\w*)>/,
                   null]);
            } else {
              shortcutStylePatterns.push([PR_COMMENT, /^#[^\r\n]*/, null, '#']);
            }
          }
          if (options['cStyleComments']) {
            fallthroughStylePatterns.push([PR_COMMENT, /^\/\/[^\r\n]*/, null]);
            fallthroughStylePatterns.push(
                [PR_COMMENT, /^\/\*[\s\S]*?(?:\*\/|$)/, null]);
          }
          if (options['regexLiterals']) {
            /**
             * @const
             */
            var REGEX_LITERAL = (
                // A regular expression literal starts with a slash that is
                // not followed by * or / so that it is not confused with
                // comments.
                '/(?=[^/*])'
                // and then contains any number of raw characters,
                + '(?:[^/\\x5B\\x5C]'
                // escape sequences (\x5C),
                +    '|\\x5C[\\s\\S]'
                // or non-nesting character sets (\x5B\x5D);
                +    '|\\x5B(?:[^\\x5C\\x5D]|\\x5C[\\s\\S])*(?:\\x5D|$))+'
                // finally closed by a /.
                + '/');
            fallthroughStylePatterns.push(
                ['lang-regex',
                 new RegExp('^' + REGEXP_PRECEDER_PATTERN + '(' + REGEX_LITERAL + ')')
                 ]);
          }
      
          var types = options['types'];
          if (types) {
            fallthroughStylePatterns.push([PR_TYPE, types]);
          }
      
          if (options['strings']) {
              var strings = ("" + options['strings']).replace(/^ | $/g, '').replace(/-/g, '\\-');
              fallthroughStylePatterns.push(
                  [PR_STRING,
                  new RegExp('(?:' + strings.replace(/[\s,]+/g, '|') + ')'),
                  , null]
              );
          }
          
          var keywords = ("" + options['keywords']).replace(/^ | $/g, '');
          if (keywords.length) {
            fallthroughStylePatterns.push(
                [PR_KEYWORD,
                 new RegExp('^(?:' + keywords.replace(/[\s,]+/g, '|') + ')\\b'),
                 null]);
          }
      
          shortcutStylePatterns.push([PR_PLAIN,       /^\s+/, null, ' \r\n\t\xA0']);
          if (options['httpdComments']) {
              fallthroughStylePatterns.push(
                  [PR_PLAIN,     /^.*\S.*#/i, null]
              );
          }
          
          fallthroughStylePatterns.push(
              // TODO(mikesamuel): recognize non-latin letters and numerals in idents
              [PR_LITERAL,     /^@[a-z_$][a-z_$@0-9]*|\bNULL\b/i, null],
              [PR_LITERAL,     CONFIG_OPTIONS, null],
              //[PR_STRING,     CONFIG_ENVS, null],
              [PR_TAG,     /^\b(AuthzProviderAlias|AuthnProviderAlias|RequireAny|RequireAll|RequireNone|Directory|DirectoryMatch|Location|LocationMatch|VirtualHost|If|Else|ElseIf|Proxy\b|LoadBalancer|Files|FilesMatch|Limit|LimitExcept|IfDefine|IfModule|IfVersion)\b/, null],
              [PR_TYPE,        /^(?:[@_]?[A-Z]+[a-z][A-Za-z_$@0-9]*|\w+_(t|req|module)\b)/, null],
              [PR_TAG,     /^apr_[a-z_0-9]+|ap_[a-z_0-9]+/i, null],
              [PR_PLAIN,       /^[a-z_$][a-z_$@0-9\-]*/i, null],
              [PR_LITERAL,
               new RegExp(
                   '^(?:'
                   // A hex number
                   + '0x[a-f0-9]+'
                   // An IPv6 Address
                   + '|[a-f0-9:]+:[a-f0-9:]+:[a-f0-9:]+:[a-f0-9:]+:[a-f0-9:]+:[a-f0-9:]+'
                   // or an octal or decimal number,
                   + '|(?:\\d(?:_\\d+)*\\d*(?:\\.\\d*)?|\\.\\d\\+)'
                   // possibly in scientific notation
                   + '(?:e[+\\-]?\\d+)?'
                   + ')'
                   // with an optional modifier like UL for unsigned long
                   + '[a-z]*', 'i'),
               null, '0123456789'],
              // Don't treat escaped quotes in bash as starting strings.  See issue 144.
              [PR_PLAIN,       /^\\[\s\S]?/, null],
              [PR_PUNCTUATION, /^.[^\s\w\.$@\'\"\`\/\#\\]*/, null]);
      
          return createSimpleLexer(shortcutStylePatterns, fallthroughStylePatterns);
        }
      
        var decorateSource = sourceDecorator({
              'keywords': ALL_KEYWORDS,
              'hashComments': true,
              'cStyleComments': true,
              'multiLineStrings': true,
              'regexLiterals': true
            });
      
        /**
         * Given a DOM subtree, wraps it in a list, and puts each line into its own
         * list item.
         *
         * @param {Node} node modified in place.  Its content is pulled into an
         *     HTMLOListElement, and each line is moved into a separate list item.
         *     This requires cloning elements, so the input might not have unique
         *     IDs after numbering.
         * @param {boolean} isPreformatted true iff white-space in text nodes should
         *     be treated as significant.
         */
        function numberLines(node, opt_startLineNum, isPreformatted) {
          var nocode = /(?:^|\s)nocode(?:\s|$)/;
          var lineBreak = /\r\n?|\n/;
        
          var document = node.ownerDocument;
        
          var li = document.createElement('li');
          while (node.firstChild) {
            li.appendChild(node.firstChild);
          }
          // An array of lines.  We split below, so this is initialized to one
          // un-split line.
          var listItems = [li];
        
          function walk(node) {
            switch (node.nodeType) {
              case 1:  // Element
                if (nocode.test(node.className)) { break; }
                if ('br' === node.nodeName) {
                  breakAfter(node);
                  // Discard the <BR> since it is now flush against a </LI>.
                  if (node.parentNode) {
                    node.parentNode.removeChild(node);
                  }
                } else {
                  for (var child = node.firstChild; child; child = child.nextSibling) {
                    walk(child);
                  }
                }
                break;
              case 3: case 4:  // Text
                if (isPreformatted) {
                  var text = node.nodeValue;
                  var match = text.match(lineBreak);
                  if (match) {
                    var firstLine = text.substring(0, match.index);
                    node.nodeValue = firstLine;
                    var tail = text.substring(match.index + match[0].length);
                    if (tail) {
                      var parent = node.parentNode;
                      parent.insertBefore(
                          document.createTextNode(tail), node.nextSibling);
                    }
                    breakAfter(node);
                    if (!firstLine) {
                      // Don't leave blank text nodes in the DOM.
                      node.parentNode.removeChild(node);
                    }
                  }
                }
                break;
            }
          }
        
          // Split a line after the given node.
          function breakAfter(lineEndNode) {
            // If there's nothing to the right, then we can skip ending the line
            // here, and move root-wards since splitting just before an end-tag
            // would require us to create a bunch of empty copies.
            while (!lineEndNode.nextSibling) {
              lineEndNode = lineEndNode.parentNode;
              if (!lineEndNode) { return; }
            }
        
            function breakLeftOf(limit, copy) {
              // Clone shallowly if this node needs to be on both sides of the break.
              var rightSide = copy ? limit.cloneNode(false) : limit;
              var parent = limit.parentNode;
              if (parent) {
                // We clone the parent chain.
                // This helps us resurrect important styling elements that cross lines.
                // E.g. in <i>Foo<br>Bar</i>
                // should be rewritten to <li><i>Foo</i></li><li><i>Bar</i></li>.
                var parentClone = breakLeftOf(parent, 1);
                // Move the clone and everything to the right of the original
                // onto the cloned parent.
                var next = limit.nextSibling;
                parentClone.appendChild(rightSide);
                for (var sibling = next; sibling; sibling = next) {
                  next = sibling.nextSibling;
                  parentClone.appendChild(sibling);
                }
              }
              return rightSide;
            }
        
            var copiedListItem = breakLeftOf(lineEndNode.nextSibling, 0);
        
            // Walk the parent chain until we reach an unattached LI.
            for (var parent;
                 // Check nodeType since IE invents document fragments.
                 (parent = copiedListItem.parentNode) && parent.nodeType === 1;) {
              copiedListItem = parent;
            }
            // Put it on the list of lines for later processing.
            listItems.push(copiedListItem);
          }
        
          // Split lines while there are lines left to split.
          for (var i = 0;  // Number of lines that have been split so far.
               i < listItems.length;  // length updated by breakAfter calls.
               ++i) {
            walk(listItems[i]);
          }
        
          // Make sure numeric indices show correctly.
          if (opt_startLineNum === (opt_startLineNum|0)) {
            listItems[0].setAttribute('value', opt_startLineNum);
          }
        
          var ol = document.createElement('ol');
          ol.className = 'linenums';
          var offset = Math.max(0, ((opt_startLineNum - 1 /* zero index */)) | 0) || 0;
          for (var i = 0, n = listItems.length; i < n; ++i) {
            li = listItems[i];
            // Stick a class on the LIs so that stylesheets can
            // color odd/even rows, or any other row pattern that
            // is co-prime with 10.
            li.className = 'L' + ((i + offset) % 1);
            if (!li.firstChild) {
              li.appendChild(document.createTextNode('\xA0'));
            }
            ol.appendChild(li);
          }
        
          node.appendChild(ol);
        }
      
        /**
         * Breaks {@code job.sourceCode} around style boundaries in
         * {@code job.decorations} and modifies {@code job.sourceNode} in place.
         * @param {Object} job like <pre>{
         *    sourceCode: {string} source as plain text,
         *    spans: {Array.<number|Node>} alternating span start indices into source
         *       and the text node or element (e.g. {@code <BR>}) corresponding to that
         *       span.
         *    decorations: {Array.<number|string} an array of style classes preceded
         *       by the position at which they start in job.sourceCode in order
         * }</pre>
         * @private
         */
        function recombineTagsAndDecorations(job) {
          var isIE8OrEarlier = /\bMSIE\s(\d+)/.exec(navigator.userAgent);
          isIE8OrEarlier = isIE8OrEarlier && +isIE8OrEarlier[1] <= 8;
          var newlineRe = /\n/g;
        
          var source = job.sourceCode;
          var sourceLength = source.length;
          // Index into source after the last code-unit recombined.
          var sourceIndex = 0;
        
          var spans = job.spans;
          var nSpans = spans.length;
          // Index into spans after the last span which ends at or before sourceIndex.
          var spanIndex = 0;
        
          var decorations = job.decorations;
          var nDecorations = decorations.length;
          // Index into decorations after the last decoration which ends at or before
          // sourceIndex.
          var decorationIndex = 0;
        
          // Remove all zero-length decorations.
          decorations[nDecorations] = sourceLength;
          var decPos, i;
          for (i = decPos = 0; i < nDecorations;) {
            if (decorations[i] !== decorations[i + 2]) {
              decorations[decPos++] = decorations[i++];
              decorations[decPos++] = decorations[i++];
            } else {
              i += 2;
            }
          }
          nDecorations = decPos;
        
          // Simplify decorations.
          for (i = decPos = 0; i < nDecorations;) {
            var startPos = decorations[i];
            // Conflate all adjacent decorations that use the same style.
            var startDec = decorations[i + 1];
            var end = i + 2;
            while (end + 2 <= nDecorations && decorations[end + 1] === startDec) {
              end += 2;
            }
            decorations[decPos++] = startPos;
            decorations[decPos++] = startDec;
            i = end;
          }
        
          nDecorations = decorations.length = decPos;
        
          var sourceNode = job.sourceNode;
          var oldDisplay;
          if (sourceNode) {
            oldDisplay = sourceNode.style.display;
            sourceNode.style.display = 'none';
          }
          try {
            var decoration = null;
            var X = 0;
            while (spanIndex < nSpans) {
              X = X + 1;
              if (X > 5000) { break; }
              var spanStart = spans[spanIndex];
              var spanEnd = spans[spanIndex + 2] || sourceLength;
        
              var decEnd = decorations[decorationIndex + 2] || sourceLength;
        
              var end = Math.min(spanEnd, decEnd);
        
              var textNode = spans[spanIndex + 1];
              var styledText;
              if (textNode.nodeType !== 1  // Don't muck with <BR>s or <LI>s
                  // Don't introduce spans around empty text nodes.
                  && (styledText = source.substring(sourceIndex, end))) {
                // This may seem bizarre, and it is.  Emitting LF on IE causes the
                // code to display with spaces instead of line breaks.
                // Emitting Windows standard issue linebreaks (CRLF) causes a blank
                // space to appear at the beginning of every line but the first.
                // Emitting an old Mac OS 9 line separator makes everything spiffy.
                if (isIE8OrEarlier) {
                  styledText = styledText.replace(newlineRe, '\r');
                }
                textNode.nodeValue = styledText;
                var document = textNode.ownerDocument;
                var span = document.createElement('span');
                span.className = decorations[decorationIndex + 1];
                var parentNode = textNode.parentNode;
                parentNode.replaceChild(span, textNode);
                span.appendChild(textNode);
                if (sourceIndex < spanEnd) {  // Split off a text node.
                  spans[spanIndex + 1] = textNode
                      // TODO: Possibly optimize by using '' if there's no flicker.
                      = document.createTextNode(source.substring(end, spanEnd));
                  parentNode.insertBefore(textNode, span.nextSibling);
                }
              }
        
              sourceIndex = end;
        
              if (sourceIndex >= spanEnd) {
                spanIndex += 2;
              }
              if (sourceIndex >= decEnd) {
                decorationIndex += 2;
              }
            }
          } finally {
            if (sourceNode) {
              sourceNode.style.display = oldDisplay;
            }
          }
        }
      
      
        /** Maps language-specific file extensions to handlers. */
        var langHandlerRegistry = {};
        /** Register a language handler for the given file extensions.
          * @param {function (Object)} handler a function from source code to a list
          *      of decorations.  Takes a single argument job which describes the
          *      state of the computation.   The single parameter has the form
          *      {@code {
          *        sourceCode: {string} as plain text.
          *        decorations: {Array.<number|string>} an array of style classes
          *                     preceded by the position at which they start in
          *                     job.sourceCode in order.
          *                     The language handler should assigned this field.
          *        basePos: {int} the position of source in the larger source chunk.
          *                 All positions in the output decorations array are relative
          *                 to the larger source chunk.
          *      } }
          * @param {Array.<string>} fileExtensions
          */
        function registerLangHandler(handler, fileExtensions) {
          for (var i = fileExtensions.length; --i >= 0;) {
            var ext = fileExtensions[i];
            if (!langHandlerRegistry.hasOwnProperty(ext)) {
              langHandlerRegistry[ext] = handler;
            } else if (win['console']) {
              console['warn']('cannot override language handler %s', ext);
            }
          }
        }
        function langHandlerForExtension(extension, source) {
          if (!(extension && langHandlerRegistry.hasOwnProperty(extension))) {
            // Treat it as markup if the first non whitespace character is a < and
            // the last non-whitespace character is a >.
            extension = /^\s*</.test(source)
                ? 'default-markup'
                : 'default-code';
          }
          return langHandlerRegistry[extension];
        }
        registerLangHandler(decorateSource, ['default-code']);
        registerLangHandler(
            createSimpleLexer(
                [],
                [
                 [PR_PLAIN,       /^[^<?]+/],
                 [PR_DECLARATION, /^<!\w[^>]*(?:>|$)/],
                 [PR_COMMENT,     /^<\!--[\s\S]*?(?:-\->|$)/],
                 // Unescaped content in an unknown language
                 ['lang-',        /^<\?([\s\S]+?)(?:\?>|$)/],
                 ['lang-',        /^<%([\s\S]+?)(?:%>|$)/],
                 [PR_PUNCTUATION, /^(?:<[%?]|[%?]>)/],
                 ['lang-',        /^<xmp\b[^>]*>([\s\S]+?)<\/xmp\b[^>]*>/i],
                 // Unescaped content in javascript.  (Or possibly vbscript).
                 ['lang-js',      /^<script\b[^>]*>([\s\S]*?)(<\/script\b[^>]*>)/i],
                 // Contains unescaped stylesheet content
                 ['lang-css',     /^<style\b[^>]*>([\s\S]*?)(<\/style\b[^>]*>)/i],
                 ['lang-in.tag',  /^(<\/?[a-z][^<>]*>)/i]
                ]),
            ['default-markup', 'htm', 'html', 'mxml', 'xhtml', 'xml', 'xsl']);
        registerLangHandler(
            createSimpleLexer(
                [
                 [PR_PLAIN,        /^[\s]+/, null, ' \t\r\n'],
                 [PR_ATTRIB_VALUE, /^(?:\"[^\"]*\"?|\'[^\']*\'?)/, null, '\"\'']
                 ],
                [
                 [PR_TAG,          /^^<\/?[a-z](?:[\w.:-]*\w)?|\/?>$/i],
                 [PR_ATTRIB_NAME,  /^(?!style[\s=]|on)[a-z](?:[\w:-]*\w)?/i],
                 ['lang-uq.val',   /^=\s*([^>\'\"\s]*(?:[^>\'\"\s\/]|\/(?=\s)))/],
                 [PR_PUNCTUATION,  /^[=<>\/]+/],
                 ['lang-js',       /^on\w+\s*=\s*\"([^\"]+)\"/i],
                 ['lang-js',       /^on\w+\s*=\s*\'([^\']+)\'/i],
                 ['lang-js',       /^on\w+\s*=\s*([^\"\'>\s]+)/i],
                 ['lang-css',      /^style\s*=\s*\"([^\"]+)\"/i],
                 ['lang-css',      /^style\s*=\s*\'([^\']+)\'/i],
                 ['lang-css',      /^style\s*=\s*([^\"\'>\s]+)/i]
                 ]),
            ['in.tag']);
        registerLangHandler(
            createSimpleLexer([], [[PR_ATTRIB_VALUE, /^[\s\S]+/]]), ['uq.val']);
        registerLangHandler(sourceDecorator({
                'keywords': CPP_KEYWORDS,
                'hashComments': true,
                'cStyleComments': true,
                'types': C_TYPES
              }), ['c', 'cc', 'cpp', 'cxx', 'cyc', 'm']);
        registerLangHandler(sourceDecorator({
                'keywords': PHP_KEYWORDS,
                'hashComments': false,
                'cStyleComments': true,
                'multiLineStrings': true,
                'regexLiterals': true
      //          'types': C_TYPES,
              }), ['php', 'phtml', 'inc']);
        registerLangHandler(sourceDecorator({
                'keywords': 'null,true,false'
              }), ['json']);
        registerLangHandler(sourceDecorator({
                'keywords': CSHARP_KEYWORDS,
                'hashComments': true,
                'cStyleComments': true,
                'verbatimStrings': true,
                'types': C_TYPES
              }), ['cs']);
        registerLangHandler(sourceDecorator({
                'keywords': JAVA_KEYWORDS,
                'cStyleComments': true
              }), ['java']);
        registerLangHandler(sourceDecorator({
                'keywords': SH_KEYWORDS,
                'hashComments': true,
                'multiLineStrings': true
              }), ['bsh', 'csh', 'sh']);
        registerLangHandler(sourceDecorator({
                'keywords': PYTHON_KEYWORDS,
                'hashComments': true,
                'multiLineStrings': true,
                'tripleQuotedStrings': true
              }), ['cv', 'py']);
        registerLangHandler(sourceDecorator({
                'keywords': PERL_KEYWORDS,
                'hashComments': true,
                'multiLineStrings': true,
                'regexLiterals': true
              }), ['perl', 'pl', 'pm']);
        registerLangHandler(sourceDecorator({
                'keywords': RUBY_KEYWORDS,
                'hashComments': true,
                'multiLineStrings': true,
                'regexLiterals': true
              }), ['rb']);
        registerLangHandler(sourceDecorator({
                'keywords': JSCRIPT_KEYWORDS,
                'cStyleComments': true,
                'regexLiterals': true
              }), ['js']);
        registerLangHandler(sourceDecorator({
                'keywords': COFFEE_KEYWORDS,
                'hashComments': 3,  // ### style block comments
                'cStyleComments': true,
                'multilineStrings': true,
                'tripleQuotedStrings': true,
                'regexLiterals': true
              }), ['coffee']);
        registerLangHandler(
            createSimpleLexer([], [[PR_STRING, /^[\s\S]+/]]), ['regex']);
        registerLangHandler(sourceDecorator({
                'keywords': CONFIG_KEYWORDS,
                'literals': CONFIG_OPTIONS,
                'strings': CONFIG_ENVS,
                'hashComments': true,
                'cStyleComments': false,
                'multiLineStrings': false,
                'regexLiterals': false,
                'httpdComments': true
              }), ['config']);
      
        function applyDecorator(job) {
          var opt_langExtension = job.langExtension;
      
          try {
            // Extract tags, and convert the source code to plain text.
            var sourceAndSpans = extractSourceSpans(job.sourceNode, job.pre);
            /** Plain text. @type {string} */
            var source = sourceAndSpans.sourceCode;
            job.sourceCode = source;
            job.spans = sourceAndSpans.spans;
            job.basePos = 0;
      
            // Apply the appropriate language handler
            langHandlerForExtension(opt_langExtension, source)(job);
      
            // Integrate the decorations and tags back into the source code,
            // modifying the sourceNode in place.
            recombineTagsAndDecorations(job);
          } catch (e) {
            if (win['console']) {
              console['log'](e && e['stack'] ? e['stack'] : e);
            }
          }
        }
      
        /**
         * @param sourceCodeHtml {string} The HTML to pretty print.
         * @param opt_langExtension {string} The language name to use.
         *     Typically, a filename extension like 'cpp' or 'java'.
         * @param opt_numberLines {number|boolean} True to number lines,
         *     or the 1-indexed number of the first line in sourceCodeHtml.
         */
        function prettyPrintOne(sourceCodeHtml, opt_langExtension, opt_numberLines) {
          var container = document.createElement('pre');
          // This could cause images to load and onload listeners to fire.
          // E.g. <img onerror="alert(1337)" src="nosuchimage.png">.
          // We assume that the inner HTML is from a trusted source.
          container.innerHTML = sourceCodeHtml;
          if (opt_numberLines) {
            numberLines(container, opt_numberLines, true);
          }
      
          var job = {
            langExtension: opt_langExtension,
            numberLines: opt_numberLines,
            sourceNode: container,
            pre: 1
          };
          applyDecorator(job);
          return container.innerHTML;
        }
      
        function prettyPrint(opt_whenDone) {
          function byTagName(tn) { return document.getElementsByTagName(tn); }
          // fetch a list of nodes to rewrite
          var codeSegments = [byTagName('pre'), byTagName('code'), byTagName('xmp')];
          var elements = [];
          for (var i = 0; i < codeSegments.length; ++i) {
            for (var j = 0, n = codeSegments[i].length; j < n; ++j) {
              elements.push(codeSegments[i][j]);
            }
          }
          codeSegments = null;
      
          var clock = Date;
          if (!clock['now']) {
            clock = { 'now': function () { return +(new Date); } };
          }
      
          // The loop is broken into a series of continuations to make sure that we
          // don't make the browser unresponsive when rewriting a large page.
          var k = 0;
          var prettyPrintingJob;
      
          var langExtensionRe = /\blang(?:uage)?-([\w.]+)(?!\S)/;
          var prettyPrintRe = /\bprettyprint\b/;
          var prettyPrintedRe = /\bprettyprinted\b/;
          var preformattedTagNameRe = /pre|xmp/i;
          var codeRe = /^code$/i;
          var preCodeXmpRe = /^(?:pre|code|xmp)$/i;
      
          function doWork() {
            var endTime = (win['PR_SHOULD_USE_CONTINUATION'] ?
                           clock['now']() + 250 /* ms */ :
                           Infinity);
            for (; k < elements.length && clock['now']() < endTime; k++) {
              var cs = elements[k];
              var className = cs.className;
              if (prettyPrintRe.test(className)
                  // Don't redo this if we've already done it.
                  // This allows recalling pretty print to just prettyprint elements
                  // that have been added to the page since last call.
                  && !prettyPrintedRe.test(className)) {
      
                // make sure this is not nested in an already prettified element
                var nested = false;
                for (var p = cs.parentNode; p; p = p.parentNode) {
                  var tn = p.tagName;
                  if (preCodeXmpRe.test(tn)
                      && p.className && prettyPrintRe.test(p.className)) {
                    nested = true;
                    break;
                  }
                }
                if (!nested) {
                  // Mark done.  If we fail to prettyprint for whatever reason,
                  // we shouldn't try again.
                  cs.className += ' prettyprinted';
      
                  // If the classes includes a language extensions, use it.
                  // Language extensions can be specified like
                  //     <pre class="prettyprint lang-cpp">
                  // the language extension "cpp" is used to find a language handler
                  // as passed to PR.registerLangHandler.
                  // HTML5 recommends that a language be specified using "language-"
                  // as the prefix instead.  Google Code Prettify supports both.
                  // http://dev.w3.org/html5/spec-author-view/the-code-element.html
                  var langExtension = className.match(langExtensionRe);
                  // Support <pre class="prettyprint"><code class="language-c">
                  var wrapper;
                  if (!langExtension && (wrapper = childContentWrapper(cs))
                      && codeRe.test(wrapper.tagName)) {
                    langExtension = wrapper.className.match(langExtensionRe);
                  }
      
                  if (langExtension) { langExtension = langExtension[1]; }
      
                  var preformatted;
                  if (preformattedTagNameRe.test(cs.tagName)) {
                    preformatted = 1;
                  } else {
                    var currentStyle = cs['currentStyle'];
                    var whitespace = (
                        currentStyle
                        ? currentStyle['whiteSpace']
                        : (document.defaultView
                           && document.defaultView.getComputedStyle)
                        ? document.defaultView.getComputedStyle(cs, null)
                        .getPropertyValue('white-space')
                        : 0);
                    preformatted = whitespace
                        && 'pre' === whitespace.substring(0, 3);
                  }
      
                  // Look for a class like linenums or linenums:<n> where <n> is the
                  // 1-indexed number of the first line.
                  var lineNums = cs.className.match(/\blinenums\b(?::(\d+))?/);
                  lineNums = lineNums
                      ? lineNums[1] && lineNums[1].length ? +lineNums[1] : true
                      : false;
                  if (lineNums) { numberLines(cs, lineNums, preformatted); }
      
                  // do the pretty printing
                  prettyPrintingJob = {
                    langExtension: langExtension,
                    sourceNode: cs,
                    numberLines: lineNums,
                    pre: preformatted
                  };
                  applyDecorator(prettyPrintingJob);
                }
              }
            }
            if (k < elements.length) {
              // finish up in a continuation
              setTimeout(doWork, 250);
            } else if (opt_whenDone) {
              opt_whenDone();
            }
          }
      
          doWork();
        }
      
        /**
         * Contains functions for creating and registering new language handlers.
         * @type {Object}
         */
        var PR = win['PR'] = {
              'createSimpleLexer': createSimpleLexer,
              'registerLangHandler': registerLangHandler,
              'sourceDecorator': sourceDecorator,
              'PR_ATTRIB_NAME': PR_ATTRIB_NAME,
              'PR_ATTRIB_VALUE': PR_ATTRIB_VALUE,
              'PR_COMMENT': PR_COMMENT,
              'PR_DECLARATION': PR_DECLARATION,
              'PR_KEYWORD': PR_KEYWORD,
              'PR_LITERAL': PR_LITERAL,
              'PR_NOCODE': PR_NOCODE,
              'PR_PLAIN': PR_PLAIN,
              'PR_PUNCTUATION': PR_PUNCTUATION,
              'PR_SOURCE': PR_SOURCE,
              'PR_STRING': PR_STRING,
              'PR_TAG': PR_TAG,
              'PR_TYPE': PR_TYPE,
              'prettyPrintOne': win['prettyPrintOne'] = prettyPrintOne,
              'prettyPrint': win['prettyPrint'] = prettyPrint
            };
         
      
      /* Register Lua syntaxes */   
         PR['registerLangHandler'](
          PR['createSimpleLexer'](
              [
               // Whitespace
               [PR['PR_PLAIN'],       /^[\t\n\r \xA0]+/, null, '\t\n\r \xA0'],
               // A double or single quoted, possibly multi-line, string.
               [PR['PR_STRING'],      /^(?:\"(?:[^\"\\]|\\[\s\S])*(?:\"|$)|\'(?:[^\'\\]|\\[\s\S])*(?:\'|$))/, null, '"\'']
              ],
              [
               // A comment is either a line comment that starts with two dashes, or
               // two dashes preceding a long bracketed block.
               [PR['PR_COMMENT'], /^--(?:\[(=*)\[[\s\S]*?(?:\]\1\]|$)|[^\r\n]*)/],
               [PR['PR_TYPE'], /^nil|false|true/],
               // A long bracketed block not preceded by -- is a string.
               [PR['PR_STRING'],  /^\[(=*)\[[\s\S]*?(?:\]\1\]|$)/],
               [PR['PR_KEYWORD'], /^(?:and|break|do|else|elseif|end|for|function|if|in|local|not|or|repeat|require|return|then|until|while)\b/, null],
               // A number is a hex integer literal, a decimal real literal, or in
               // scientific notation.
               [PR['PR_LITERAL'],
                /^[+-]?(?:0x[\da-f]+|(?:(?:\.\d+|\d+(?:\.\d*)?)(?:e[+\-]?\d+)?))/i],
               // An identifier
               [PR['PR_PLAIN'], /^[a-z_]\w*/i],
               // A run of punctuation
               [PR['PR_PUNCTUATION'], /^[^\w\t\n\r \xA0][^\w\t\n\r \xA0\"\'\-\+=]*/]
              ]),
          ['lua']);
      
      
        // Make PR available via the Asynchronous Module Definition (AMD) API.
        // Per https://github.com/amdjs/amdjs-api/wiki/AMD:
        // The Asynchronous Module Definition (AMD) API specifies a
        // mechanism for defining modules such that the module and its
        // dependencies can be asynchronously loaded.
        // ...
        // To allow a clear indicator that a global define function (as
        // needed for script src browser loading) conforms to the AMD API,
        // any global define function SHOULD have a property called "amd"
        // whose value is an object. This helps avoid conflict with any
        // other existing JavaScript code that could have defined a define()
        // function that does not conform to the AMD API.
        if (typeof define === "function" && define['amd']) {
          define("google-code-prettify", [], function () {
            return PR; 
          });
        }
      })();
      �����������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/style/lang/����������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273357�015536� 5����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/style/latex/���������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273357�015732� 5����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/style/latex/atbeginend.sty�������������������������������������������������0000644�0000000�0000050�00000005026�10455056574�020575� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������% atbeginend.sty 
      %
      % Licensed to the Apache Software Foundation (ASF) under one or more
      % contributor license agreements.  See the NOTICE file distributed with
      % this work for additional information regarding copyright ownership.
      % The ASF licenses this file to You under the Apache License, Version 2.0
      % (the "License"); you may not use this file except in compliance with
      % the License.  You may obtain a copy of the License at
      %
      %     http://www.apache.org/licenses/LICENSE-2.0
      %
      % Unless required by applicable law or agreed to in writing, software
      % distributed under the License is distributed on an "AS IS" BASIS,
      % WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
      % See the License for the specific language governing permissions and
      % limitations under the License.
      
      % defines
      % \BeforeBegin{environment}{code-to-execute}
      % \BeforeEnd  {environment}{code-to-execute}
      % \AfterBegin {environment}{code-to-execute}
      % \AfterEnd   {environment}{code-to-execute}
      %
      % Save \begin and \end to \BeginEnvironment and \EndEnvironment
      \let\BeginEnvironment=\begin
      \let\EndEnvironment=\end
      
      \def\IfUnDef#1{\expandafter\ifx\csname#1\endcsname\relax}
      
      % Null command needed to for \nothing{something}=.nothing.
      \def\NullCom#1{}
      
      \def\begin#1{%
      %
      % if defined \BeforeBeg for this environment, execute it
      \IfUnDef{BeforeBeg#1}\else\csname BeforeBeg#1\endcsname\fi%
      %
      %
      %
      \IfUnDef{AfterBeg#1}% This is done to skip the command for environments
      		     % which can take arguments, like multicols; YOU MUST NOT
      		     % USE \AfterBegin{...}{...} for such environments!
      	\let\SaveBegEng=\BeginEnvironment%
      \else%
      	% Start this environment
      		\BeginEnvironment{#1}%
      	% and execute code after \begin{environment}
      		\csname AfterBeg#1\endcsname%
      	% 
      	\let\SaveBegEng=\NullCom%
      \fi%
      \SaveBegEng{#1}%
      }
      
      
      \def\end#1{%
      %
      % execute code before \end{environment}
      \IfUnDef{BeforeEnd#1}\else\csname BeforeEnd#1\endcsname\fi%
      %
      % close this environment
      \EndEnvironment{#1}%
      %
      % and execute code after \begin{environment}
      \IfUnDef{AfterEnd#1}\else\csname AfterEnd#1\endcsname\fi%
      }
      
      
      %% Now, define commands
      % \BeforeBegin{environment}{code-to-execute}
      % \BeforeEnd  {environment}{code-to-execute}
      % \AfterBegin {environment}{code-to-execute}
      % \AfterEnd   {environment}{code-to-execute}
      
      \def\BeforeBegin#1#2{\expandafter\gdef\csname BeforeBeg#1\endcsname
      {#2}}
      \def\BeforeEnd  #1#2{\expandafter\gdef\csname BeforeEnd#1\endcsname
      {#2}}
      \def\AfterBegin #1#2{\expandafter\gdef\csname AfterBeg#1\endcsname {#2}}
      \def\AfterEnd   #1#2{\expandafter\gdef\csname AfterEnd#1\endcsname{#2}}
      ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/������������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273357�015307� 5����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/dbmmanage.html.tr.utf8��������������������������������������������0000644�0000000�0000050�00000035350�13447004010�021404� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>dbmmanage - DBM biçemli kullanıcı kimlik doğrulama dosyalarını yönetir - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>dbmmanage - DBM biçemli kullanıcı kimlik doğrulama dosyalarını yönetir</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/dbmmanage.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/dbmmanage.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/dbmmanage.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/dbmmanage.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code><strong>dbmmanage</strong></code>,
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> üzerinden HTTP kullanıcılarının temel
          kimlik doğrulaması için kullanıcı isimlerinin ve parolalarının
          saklanmasında kullanılacak DBM dosyalarını oluşturmak ve güncellemek için
          kullanılır. Apache HTTP sunucusunun mevcut özkaynaklarının kullanımı
          sadece <code><strong>dbmmanage</strong></code> tarafından oluşturulan
          dosyalarda listelenmiş kullanıcılara tahsis edilebilir. Bu program
          sadece, kullanıcı isimleri bir DBM dosyasında saklanmak istenirse işe
          yarar. Düz metin bir veritabanı kullanmak isterseniz
          <strong><code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code></strong> sayfasına bakınız.</p>
      
          <p>DBM parola veritabanı sağlayan diğer bir araç da
            <strong><code class="program"><a href="../programs/htdbm.html">htdbm</a></code></strong>'dir.</p>
      
          <p>Bu kılavuz sayfası sadece komut satırı değiştirgelerini listeler.
          Kullanıcı kimlik doğrulamasını
          <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong>'de yapılandırmak için gerekli
          yönergelerle ilgili ayrıntılar için Apache dağıtımının bir parçası olan
          ve <a href="http://httpd.apache.org/"> http://httpd.apache.org/</a>
          adresinde de bulunan Apache HTTP Sunucusu Belgelerine bakınız.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Kullanım</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#bugs">Hatalar</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="../programs/htdbm.html">htdbm</a></code></li><li><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code></li><li><code class="module"><a href="../mod/mod_authz_dbm.html">mod_authz_dbm</a></code></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Kullanım</a></h2>
          <p><code><strong>dbmmanage</strong> [ <var>kodlama</var> ]
          <var>dosyaismi</var> add|adduser|check|delete|update
          <var>kullanıcı</var>
          [ <var>ÅŸifreli_parola</var>
            [ <var>grup</var>[,<var>grup</var>...]
              [ <var>açıklama</var> ] ] ]</code></p>
      
          <p><code><strong>dbmmanage</strong> <var>dosyaismi</var>
          view [ <var>kullanıcı</var> ]</code></p>
      
          <p><code><strong>dbmmanage</strong> <var>dosyaismi</var> import</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
          <dl>
          <dt><code><var>dosyaismi</var></code></dt>
          <dd>DBM dosyasının ismi. Genellikle, <code>.db</code>, <code>.pag</code>
          veya <code>.dir</code> eklentisi olmaksızın belirtilir.</dd>
      
          <dt><code><var>kullanıcı</var></code></dt>
          <dd>İşlemleri gerçekleştirecek kullanıcı ismi.
          <code><var>kullanıcı</var></code> ismi ikinokta imi (<code>:</code>)
          içeremez.</dd>
      
          <dt><code><var>ÅŸifreli_parola</var></code></dt>
          <dd><code><strong>update</strong></code> ve
          <code><strong>add</strong></code> komutları için kullanılacak şifreli
          paroladır. Parolanın istenmesini sağlamak, fakat hemen ardından alanları
          doldurmak için bir tire imi (<code>-</code>) kullanabilirsiniz. Buna ek
          olarak, <code><strong>update</strong></code> komutunu kullanırken özgün
          parolaya dokunulmaması için bir nokta imi (<code>.</code>)
          kullanabilirsiniz.</dd>
      
          <dt><code><var>grup</var></code></dt>
          <dd>Kullanıcının üyesi olduğu grup. Grup ismi ikinokta imi
          (<code>:</code>) içeremez.Kullanıcıyı bir gruba atamadan açıklama alanını
          doldurmak istiyorsanız bir tire imi (<code>-</code>) kullanabilirsiniz.
          Buna ek olarak, <code><strong>update</strong></code> komutunu kullanırken
          özgün gruba dokunulmaması için bir nokta imi (<code>.</code>)
          kullanabilirsiniz.</dd>
      
          <dt><code><var>açıklama</var></code></dt>
          <dd>Adı ve soyadı, eposta adresi gibi kullanıcıyla ilgili bir takım
          bilgiler buraya yazılır. Sunucu bu alanı gözardı eder.</dd>
          </dl>
      
          <h3><a name="options.encodings" id="options.encodings">Kodlamalar</a></h3>
            <dl>
            <dt><code><strong>-d</strong></code></dt>
            <dd>CRYPT şifrelemesi (Win32 ve Netware hariç, öntanımlı)</dd>
      
            <dt><code><strong>-m</strong></code></dt>
            <dd>MD5 şifrelemesi (Win32 ve Netware için öntanımlı)</dd>
      
            <dt><code><strong>-s</strong></code></dt>
            <dd>SHA1 ÅŸifrelemesi</dd>
      
            <dt><code><strong>-p</strong></code></dt>
            <dd>düz metin (<em>önerilmez</em>)</dd>
            </dl>
          
      
          <h3><a name="options.commands" id="options.commands">Komutlar</a></h3>
            <dl>
            <dt><code><strong>add</strong></code></dt>
            <dd><code><var>şifreli_parola</var></code>'yı kullanarak
              <code><var>dosyaismi</var></code> dosyasına
              <code><var>kullanıcı</var></code> için bir girdi ekler.
      
            <div class="example"><p><code>dbmmanage passwords.dat add rbowen foKntnEF3KSXA</code></p></div>
            </dd>
      
            <dt><code><strong>adduser</strong></code></dt>
            <dd>Parola sorduktan sonra <code><var>dosyaismi</var></code>
              dosyasına <code><var>kullanıcı</var></code> için bir girdi ekler.
      
            <div class="example"><p><code>dbmmanage passwords.dat adduser krietz</code></p></div>
            </dd>
      
            <dt><code><strong>check</strong></code></dt>
            <dd>Parola sorduktan sonra belirtilen <code><var>kullanıcı</var></code>,
              <code><var>dosyaismi</var></code> dosyasında var mı diye bakar; varsa
              belirtilen parolayı kullanıcınınkiyle eşleştirmeye çalışır.
      
            <div class="example"><p><code>dbmmanage passwords.dat check rbowen</code></p></div>
            </dd>
      
            <dt><code><strong>delete</strong></code></dt>
            <dd><code><var>dosyaismi</var></code> dosyasından
              <code><var>kullanıcı</var></code> girdisini siler.
      
            <div class="example"><p><code>dbmmanage passwords.dat delete rbowen</code></p></div>
            </dd>
      
            <dt><code><strong>import</strong></code></dt>
            <dd>Standart girdiden
              <code><var>kullanıcı</var>:<var>parola</var></code> satırlarını (her
              satırda bir tane) okur ve bunları <code><var>dosyaismi</var></code>
              dosyasına ekler. Parola şifrelenmiş olmalıdır.</dd>
      
            <dt><code><strong>update</strong></code></dt>
            <dd>Belirtilen <code><var>kullanıcı</var></code>'nın
              <code><var>dosyaismi</var></code> dosyasında mevcut olması dışında
              <code><strong>adduser</strong></code> komutu gibidir.
      
            <div class="example"><p><code>dbmmanage passwords.dat update rbowen</code></p></div>
            </dd>
      
            <dt><code><strong>view</strong></code></dt>
            <dd>Sadece, DBM dosyasının içeriğini gösterir. Bir
              <code><var>kullanıcı</var></code> belirtirseniz sadece o kaydı
              gösterir.
      
            <div class="example"><p><code>dbmmanage passwords.dat view</code></p></div>
            </dd>
            </dl>
          
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="bugs" id="bugs">Hatalar</a></h2>
          <p>Birden fazla DBM dosya biçemi vardır ve büyük bir olasılıkla da
          sisteminizde bu birden fazla biçemle ilgili kütüphaneler vardır. SDBM,
          NDBM, GNU'nun GDBM projesi ve Berkeley DB 2 bunların başlıcalarıdır. Ne
          yazık ki, bu kütüphanelerin her birinin dosya biçimleri farklıdır. Bu
          bakımdan, <code><var>dosyaismi</var></code> dosyasında kullanılan dosya
          biçeminin <code><strong>dbmmanage</strong></code> tarafından kullanılanla
          aynı biçemde olduğundan emin olmalısınız.
          <code><strong>dbmmanage</strong></code> hangi tür DBM dosyasına baktığını
          saptayacak yeterliliğe sahip değildir. Yanlış biçemli bir dosya
          belirtirseniz hiçbir şey dönmeyebileceği gibi, başka isimde bir DBM
          dosyasının oluşturulması veya daha da kötüsü üzerine yazmaya
          çalışıyorsanız DBM dosyasının bozulması bile olasıdır.</p>
      
          <p><code><strong>dbmmanage</strong></code> programının başlangıcında
          <code>@AnyDBM::ISA</code> dizisi olarak tanımlanmış DBM biçem
          tercihlerinin bir listesi vardır. Berkeley DB 2 biçemini tercih
          ettiÄŸimizden <code><strong>dbmmanage</strong></code> sistem
          kütüphanelerini şu sıraya göre arar: Berkeley DB 2, NDBM, GDBM ve SDBM.
          <code><strong>dbmmanage</strong></code> DBM dosyası hareketleri için  bu
          sıralamaya göre bulduğu ilk kütüphaneyi kullanacaktır. Sıralama Perl'deki
          <code>dbmopen()</code> çağrısının kullandığından faklı olduğu gibi
          Perl'deki standart <code>@AnyDBM::ISA</code> sıralamasından da oldukça
          farklıdır. Bu bakımdan, DBM dosyalarınızı yönetmek için Perl ile yazılmış
          başka araçlar kullanıyorsanız, onların da bu tercih sırasını izlemesini
          sağlamalısınız. Benzer şekilde, bu dosyalara erişmek için diğer dillerde
          (C gibi) yazılmış programlar kullanıyorsanız bunlar için de aynı durum
          geçerlidir.</p>
      
          <p>Unix sistemlerinde, kullanılan DBM dosyasının biçemini öğrenmek için
          <code><strong>file</strong></code> programı kullanılabilir.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/dbmmanage.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/dbmmanage.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/dbmmanage.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/dbmmanage.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/dbmmanage.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/ab.html.ko.euc-kr�������������������������������������������������0000644�0000000�0000050�00000030616�13412755316�020355� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>ab - ¾ÆÆÄÄ¡ À¥¼­¹ö ¼º´É°Ë»ç µµ±¸ - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>ab - ¾ÆÆÄÄ¡ À¥¼­¹ö ¼º´É°Ë»ç µµ±¸</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/ab.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/ab.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/ab.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/ab.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p><code>ab</code>´Â ¾ÆÆÄÄ¡ ÇÏÀÌÆÛÅØ½ºÆ® Àü¼Û ÇÁ·ÎÅäÄÝ (HTTP)
          ¼­¹öÀÇ ¼º´ÉÀ» °Ë»çÇÏ´Â(benchmarking) µµ±¸ÀÌ´Ù. ÇöÀç ¾ÆÆÄÄ¡°¡
          ¾î¶»°Ô µ¿ÀÛÇÏ´ÂÁö ¾Ë·ÁÁØ´Ù. ƯÈ÷ ¾ÆÆÄÄ¡°¡ ÇöÀç ÃÊ´ç ¸î°³ÀÇ
          ¿äûÀ» ¼­ºñ½ºÇÏ´ÂÁö ¾Ë·ÁÁØ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">°³¿ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">¿É¼Ç</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#bugs">¹ö±×</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="httpd.html">httpd</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">°³¿ä</a></h2>
          <p><code><strong>ab</strong>
          [ -<strong>A</strong> <var>auth-username</var>:<var>password</var> ]
          [ -<strong>c</strong> <var>concurrency</var> ]
          [ -<strong>C</strong> <var>cookie-name</var>=<var>value</var> ]
          [ -<strong>d</strong> ]
          [ -<strong>e</strong> <var>csv-file</var> ]
          [ -<strong>g</strong> <var>gnuplot-file</var> ]
          [ -<strong>h</strong> ]
          [ -<strong>H</strong> <var>custom-header</var> ]
          [ -<strong>i</strong> ]
          [ -<strong>k</strong> ]
          [ -<strong>n</strong> <var>requests</var> ]
          [ -<strong>p</strong> <var>POST-file</var> ]
          [ -<strong>P</strong> <var>proxy-auth-username</var>:<var>password</var> ]
          [ -<strong>q</strong> ]
          [ -<strong>s</strong> ]
          [ -<strong>S</strong> ]
          [ -<strong>t</strong> <var>timelimit</var> ]
          [ -<strong>T</strong> <var>content-type</var> ]
          [ -<strong>v</strong> <var>verbosity</var>]
          [ -<strong>V</strong> ]
          [ -<strong>w</strong> ]
          [ -<strong>x</strong> <var>&lt;table&gt;-attributes</var> ]
          [ -<strong>X</strong> <var>proxy</var>[:<var>port</var>] ]
          [ -<strong>y</strong> <var>&lt;tr&gt;-attributes</var> ]
          [ -<strong>z</strong> <var>&lt;td&gt;-attributes</var> ]
          [http://]<var>hostname</var>[:<var>port</var>]/<var>path</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">¿É¼Ç</a></h2>
          <dl>
          <dt><code>-A <var>auth-username</var>:<var>password</var></code></dt>
          <dd>¼­¹ö¿¡°Ô BASIC Authentication Á¤º¸¸¦ Á¦°øÇÑ´Ù.
          <code>:</code>À¸·Î ±¸ºÐÇÑ »ç¿ëÀÚ¸í°ú ¾ÏÈ£¸¦ base64 ÀÎÄÚµùÇÏ¿©
          Àü¼ÛÇÑ´Ù. ¼­¹ö°¡ Á¤º¸¸¦ ¿ä±¸ÇÏ´ÂÁö (<em>¿¹¸¦ µé¾î</em>,
          401 ÀÎÁõ Çʿ並 º¸³»´ÂÁö) °ü°è¾øÀÌ ¹®ÀÚ¿­À» Àü¼ÛÇÑ´Ù.</dd>
      
          <dt><code>-c <var>concurrency</var></code></dt>
          <dd>µ¿½Ã¿¡ ¿äûÇÏ´Â ¿äû¼ö. ±âº»ÀûÀ¸·Î Çѹø¿¡ ÇÑ ¿äû¸¸À»
          º¸³½´Ù.</dd>
      
          <dt><code>-C <var>cookie-name</var>=<var>value</var></code></dt>
          <dd>¿äû¿¡ <code>Cookie:</code> Çì´õ¸¦ Ãß°¡ÇÑ´Ù. ¾Æ±Ô¸ÕÆ®´Â
          º¸Åë <code><var>name</var>=<var>value</var></code>¿Í °°Àº
          ½ÖÀÌ´Ù. ÀÌ ¿É¼ÇÀº ¿©·¯¹ø »ç¿ëÇÒ ¼ö ÀÖ´Ù.</dd>
      
          <dt><code>-d</code></dt>
          <dd>"percentage served within XX [ms] table"À» Ãâ·ÂÇÏÁö
          ¾Ê´Â´Ù. (ȣȯ¼ºÀ» À§ÇØ).</dd>
      
          <dt><code>-e <var>csv-file</var></code></dt>
          <dd>¿äûÀ» ó¸®Çϴµ¥ °É¸° (¹Ð¸®ÃÊ ´ÜÀ§) ½Ã°£µéÀÇ (1%¿¡¼­
          100%) ´©Àû¹éºÐÀ²À» ½°Ç¥·Î ±¸ºÐÇÑ Çü½Ä(CSV)À¸·Î Ãâ·ÂÇÑ´Ù.
          °á°ú¸¦ ÀÌ¹Ì 'Á¤¸®'ÇÏ¿´±â¶§¹®¿¡ 'gnuplot' ÆÄÀϺ¸´Ù º¸Åë ´õ
          À¯¿ëÇÏ´Ù.</dd>
      
          <dt><code>-g <var>gnuplot-file</var></code></dt>
          <dd>ÃøÁ¤ÇÑ ¸ðµç °ªÀ» 'gnuplot' ȤÀº TSV (Tab separate values,
          ÅÇÀ¸·Î ±¸ºÐÇÑ °ª) ÆÄÀÏ¿¡ ±â·ÏÇÑ´Ù. Gnuplot, IDL, Mathematica,
          Igor, ½ÉÁö¾î Excel °°Àº ÇÁ·Î±×·¥¿¡¼­µµ ÀÌ·± ÆÄÀÏÀ» ½±°Ô
          ÀÐÀ» ¼ö ÀÖ´Ù. ÆÄÀÏÀÇ Ã¹¹øÂ° ÁÙ¿¡ Ç׸ñÀ̸§ÀÌ ³ª¿Â´Ù. </dd>
      
          <dt><code>-h</code></dt>
          <dd>»ç¿ë¹ýÀ» Ãâ·ÂÇÑ´Ù.</dd>
      
          <dt><code>-H <var>custom-header</var></code></dt>
          <dd>¿äû¿¡ Çì´õ¸¦ Ãß°¡ÇÑ´Ù. ¾Æ±Ô¸ÕÆ®´Â º¸Åë ÄÝ·ÐÀ¸·Î ±¸ºÐÇÑ
          ½ÖÀÎ (<em>¿¹¸¦ µé¾î</em>,
          <code>"Accept-Encoding: zip/zop;8bit"</code>) À¯È¿ÇÑ
          Çì´õÁÙÀÌ´Ù.</dd>
      
          <dt><code>-i</code></dt>
          <dd><code>GET</code> ´ë½Å <code>HEAD</code> ¿äûÀ» ÇÑ´Ù.</dd>
      
          <dt><code>-k</code></dt>
          <dd>HTTP KeepAlive ±â´ÉÀ» »ç¿ëÇÑ´Ù. <em>¿¹¸¦ µé¾î</em>,
          ÇÑ HTTP ¼¼¼Ç¿¡¼­ ¿©·¯ ¿äûÀ» ÇÑ´Ù. ±âº»ÀûÀ¸·Î KeepAlive¸¦
          »ç¿ëÇÏÁö ¾Ê´Â´Ù.</dd>
      
          <dt><code>-n <var>requests</var></code></dt>
          <dd>¼º´ÉÀ» °Ë»çÇϱâÀ§ÇØ º¸³»´Â ¿äû¼ö. ±âº»°ªÀ¸·Î ¿äûÀ»
          Çѹø¸¸ º¸³»±â¶§¹®¿¡ ÀϹÝÀûÀÎ ¼º´É°Ë»ç °á°ú¸¦ ¾òÀ» ¼ö ¾ø´Ù.</dd>
      
          <dt><code>-p <var>POST-file</var></code></dt>
          <dd>POST ÀÚ·á ÆÄÀÏ.</dd>
      
          <dt><code>-P <var>proxy-auth-username</var>:<var>password</var></code></dt>
          <dd>ÇÁ·Ï½Ã¸¦ ÅëÇØ BASIC Authentication Á¤º¸¸¦ Á¦°øÇÑ´Ù.
          <code>:</code>·Î ±¸ºÐÇÑ »ç¿ëÀÚ¸í°ú ¾ÏÈ£¸¦ base64 ÀÎÄÚµùÇÏ¿©
          Àü¼ÛÇÑ´Ù. ÇÁ·Ï½Ã°¡ Á¤º¸¸¦ ¿ä±¸ÇÏ´ÂÁö (<em>¿¹¸¦ µé¾î</em>,
          401 ÀÎÁõ Çʿ並 º¸³»´ÂÁö) °ü°è¾øÀÌ ¹®ÀÚ¿­À» Àü¼ÛÇÑ´Ù.</dd>
      
          <dt><code>-q</code></dt>
          <dd>150°³ ÀÌ»ó ¿äûÀ» º¸³¾¶§ <code>ab</code>´Â 10% ȤÀº
          ¸Å 100 ¿äû´ç <code>Ç¥ÁØ¿À·ù</code>¿¡ ÁøÇà»óȲÀ» Ãâ·ÂÇÑ´Ù.
          <code>-q</code> ¿É¼ÇÀº ÀÌ ¹®±¸¸¦ Ãâ·ÂÇÏÁö ¾Ê´Â´Ù.</dd>
      
          <dt><code>-s</code></dt>
          <dd>±â´ÉÀ» Ãß°¡ÇÏ¿© ÄÄÆÄÀÏÇÏ¿´´Ù¸é (<code>ab -h</code>·Î
          È®ÀÎÇÒ ¼ö ÀÖ´Ù) <code>http</code> ÇÁ·ÎÅäÄÝ ´ë½Å SSLÀ» »ç¿ëÇÑ
          <code>https</code> ÇÁ·ÎÅäÄÝÀ» »ç¿ëÇÑ´Ù. ÀÌ ±â´ÉÀº ½ÇÇèÀûÀ̰í
          <em>¸Å¿ì</em> ±âÃÊÀûÀÌ´Ù. ¾Æ¸¶µµ »ç¿ëÀ» ²¨·ÁÇÒ °ÍÀÌ´Ù.</dd>
      
          <dt><code>-S</code></dt>
          <dd>Áß°£°ª°ú Ç¥ÁØÆíÂ÷¸¦ Ãâ·ÂÇÏÁö ¾Ê°í, Æò±Õ°ú Áß°£°ªÀÇ Â÷À̰¡
          Ç¥ÁØÆíÂ÷º¸´Ù Å©´õ¶óµµ °æ°í/¿À·ù¸¦ Ãâ·ÂÇÏÁö ¾Ê´Â´Ù.
          ÃÖ¼Ò/Æò±Õ/ÃÖ´ë °ªÀ» Ãâ·ÂÇÑ´Ù. (ȣȯ¼ºÀ» À§ÇØ).</dd>
      
          <dt><code>-t <var>timelimit</var></code></dt>
          <dd>¼º´ÉÀ» °Ë»çÇÏ´Â ÃÖ´ë ÃÊ´ÜÀ§ ½Ã°£. ³»ºÎÀûÀ¸·Î
          <code>-n 50000</code>À» °¡Á¤ÇÑ´Ù. Á¤ÇØÁø ½Ã°£µ¿¾È ¼­¹ö ¼º´ÉÀ»
          °Ë»çÇÒ¶§ »ç¿ëÇÑ´Ù. ±âº»ÀûÀ¸·Î ½Ã°£Á¦ÇÑ ¾øÀÌ °Ë»çÇÑ´Ù.</dd>
      
          <dt><code>-T <var>content-type</var></code></dt>
          <dd>POST ÀÚ·áÀÇ Content-type Çì´õ.</dd>
      
          <dt><code>-v <var>verbosity</var></code></dt>
          <dd>Ãâ·ÂÀÇ ÀÚ¼¼ÇÔ ¼öÁØÀ» ÁöÁ¤ÇÑ´Ù. <code>4</code> ÀÌ»óÀ̸é
          Çì´õ¿¡ ´ëÇÑ Á¤º¸¸¦, <code>3</code> ÀÌ»óÀ̸é (404, 202, µî)
          ÀÀ´äÄڵ带, <code>2</code> ÀÌ»óÀÌ¸é °æ°í(warning)¿Í
          Á¤º¸(info)¸¦ Ãâ·ÂÇÑ´Ù.</dd>
      
          <dt><code>-V</code></dt>
          <dd>¹öÀüÀ» Ãâ·ÂÇϰí Á¾·áÇÑ´Ù.</dd>
      
          <dt><code>-w</code></dt>
          <dd>°á°ú¸¦ HTML Ç¥·Î Ãâ·ÂÇÑ´Ù. ±âº»ÀûÀ¸·Î Ç¥¸¦ Èò ¹è°æ¿¡
          µÎ ¿­·Î ÀÛ¼ºÇÑ´Ù.</dd>
      
          <dt><code>-x <var>&lt;table&gt;-attributes</var></code></dt>
          <dd><code>&lt;table&gt;</code>ÀÇ ¼Ó¼ºÀ¸·Î »ç¿ëÇÒ ¹®ÀÚ¿­.
          ¼Ó¼ºÀ» <code>&lt;table <var>¿©±â¿¡</var> &gt;</code>
          Ãß°¡ÇÑ´Ù.</dd>
      
          <dt><code>-X <var>proxy</var>[:<var>port</var>]</code></dt>
          <dd>ÇÁ·Ï½Ã ¼­¹ö¸¦ »ç¿ëÇÏ¿© ¿äûÇÑ´Ù.</dd>
      
          <dt><code>-y <var>&lt;tr&gt;-attributes</var></code></dt>
          <dd><code>&lt;tr&gt;</code>ÀÇ ¼Ó¼ºÀ¸·Î »ç¿ëÇÒ ¹®ÀÚ¿­.</dd>
      
          <dt><code>-z <var>&lt;td&gt;-attributes</var></code></dt>
          <dd><code>&lt;td&gt;</code>ÀÇ ¼Ó¼ºÀ¸·Î »ç¿ëÇÒ ¹®ÀÚ¿­.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="bugs" id="bugs">¹ö±×</a></h2>
          <p>Á¤ÀûÀ¸·Î ±æÀ̰¡ °íÁ¤µÈ ¹öÆÛ¸¦ ¸¹ÀÌ »ç¿ëÇÑ´Ù. ¸í·ÉÇà
          ¾Æ±Ô¸ÕÆ®, ¼­¹öÀÇ ÀÀ´ä Çì´õ, ´Ù¸¥ ¿ÜºÎ ÀԷµéÀ» °°ÀÌ
          ÀоîµéÀ̸鼭 ¹®Á¦°¡ ¹ß»ýÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>ÀÌ ÇÁ·Î±×·¥Àº HTTP/1.x¸¦ ¿ÏÀüÈ÷ ±¸ÇöÇÏÁö ¾Ê´Â´Ù; ´ÜÁö
          '±â´ëÇÏ´Â' Çü½ÄÀÇ ÀÀ´ä¸¸À» ¹Þ´Â´Ù. <code>strstr(3)</code>À»
          ¸Å¿ì ¸¹ÀÌ »ç¿ë±â¶§¹®¿¡ ¼Óµµ°¡ ¹®Á¦°¡ µÉ ¼ö ÀÖ´Ù; <em>Áï</em>,
          ¼­¹ö ¼º´Éº¸´Ù´Â <code>ab</code> ¼º´ÉÀ» ÃøÁ¤ÇÏ°Ô µÉ ¼öµµ
          ÀÖ´Ù.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/ab.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/ab.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/ab.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/ab.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/ab.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/rotatelogs.html.tr.utf8�������������������������������������������0000644�0000000�0000050�00000041423�13447004010�021652� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>rotatelogs - Apache günlüklerini döndürmek için borulu günlük kayıt
        programı - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>rotatelogs - Apache günlüklerini döndürmek için borulu günlük kayıt
        programı</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/rotatelogs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/rotatelogs.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/rotatelogs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/rotatelogs.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
           <p><code><strong>rotatelogs</strong></code>, Apache'nin borulu günlük
           dosyaları özelliği ile birlikte kullanmak için tasarlanmış basit bir
           programdır. Günlük dosyasının azami boyutuna göre veya belli aralıklarla
           günlük dosyalarını döndürür.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Kullanım</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Örnekler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#portability">Taşınabilirlik</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Kullanım</a></h2>
      
           <p><code><strong>rotatelogs</strong>
           [ -<strong>l</strong> ]
           [ -<strong>L</strong> <var>isim</var> ]
           [ -<strong>p</strong> <var>program</var> ]
           [ -<strong>f</strong> ]
           [ -<strong>D</strong> ]
           [ -<strong>t</strong> ]
           [ -<strong>v</strong> ]
           [ -<strong>e</strong> ]
           [ -<strong>c</strong> ]
           [ -<strong>n</strong> <var>dosya_sayısı</var> ]
           <var>dosyaismi</var>
           <var>süre</var>|<var>boyut</var>(B|K|M|G)
           [ <var>saat_farkı</var> ]</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
      
      <dl>
          <dt><code><strong>-l</strong></code></dt>
          <dd>GMT yerine yerel zamanın kullanılmasını sağlar.</dd>
      
          <dt><code><strong>-L</strong></code> <var>bagismi</var></dt>
          <dd>Belirtilen bağ dosyası ismine geçerli günlük dosyasından kalıcı bir bağ
          oluşturulur. <code>tail -F bagismi</code> gibi bir komut kullanılarak
          günlüğün sürekli izlenmesi için kullanılabilir.</dd>
      
          <dt><code><strong>-p</strong></code> <var>program</var></dt>
      
          <dd>BelirtildiÄŸi takdirde, <code><strong>rotatelogs</strong></code> yeni
          bir günlük dosyasının her açılışında belirtilen programı çalıştırır. Yeni
          açılan dosyanın ismi programa ilk argüman olarak aktarılır. Bu işlem bir
          döndürme sonrası yapılırsa eski günlük dosyası ikinci argüman olarak
          aktarılır. <code><strong>rotatelogs</strong></code> işlemini sürdürmek için
          belirtilen programın sonlanmasını beklemez, dolayısıyla sonlanma soucunda
          döndürülen hata kodunu günlüğe kaydetmez. Çalıştırılan program
          <code><strong>rotatelogs</strong></code> ile aynı stdin, stdout ve stderr'i
          kullanır ve ortamı da miras alır.</dd>
      
          <dt><code><strong>-f</strong></code></dt>
          <dd>İlk günlük giridisinin okunmasını beklemeden
          <code><strong>rotatelogs</strong></code> başlar başlamaz günlük
          dosyasının açılmasını sağlar. Çok meşgul sitelerde, sunucu başlatılıp ilk
          istek sunuluncaya kadar geçen zamanda günlük dosyasının yokluğu
          özdevinimli işlemler yapan bazı günlükleme araçlarında sorunlara yol
          açabilir. Bu seçenek bu gibi durumlarda yararlıdır.</dd>
      
          <dt><code><strong>-D</strong></code></dt>
          <dd>Günlük dosyasının yerleştirileceği dizini (eğer yoksa) üst dizinleri ile 
          birlikte yapılandırır. Bu, <code>strftime(3)</code> işlevinin sırf dosya için 
          değil yol için de kullanılmasını sağlar.</dd>
      
          <dt><code><strong>-t</strong></code></dt>
          <dd>Günlük dosyasının döndürülmek yerine tepeden kırpılmasına sebep olur.
          Günlüğün <code><strong>tail</strong></code> gibi bir araç tarafından gerçek
          zamanda işlendiği ve veriyi saklamanın gerekmediği durumda kullanışlıdır.
          Dosya ismine bir sonek eklenmez, ancak biçem dizgesi '%' karakteri
          içeriyorsa buna uyulur.</dd>
      
          <dt><code><strong>-v</strong></code></dt>
          <dd>Standart hataya verilen çıktı daha ayrıntılı olur. Çıktı,
          yapılandırma çözümlemesinin sonuçlarını ve tüm dosya açma/kapama
          işlemlerini içerir.</dd>
      
          <dt><code><strong>-e</strong></code></dt>
          <dd>Günlüğü standart çıktıya basar. Günlüğün zincirdeki ilgili araç
          tarafından gerçek zamanda işlenmesi gerektiğinde kullanışlıdır.</dd>
      
          <dt><code><strong>-c</strong></code></dt>
          <dd>Create log file for each interval, even if empty.</dd>
      
          <dt><code><strong>-n</strong> <var>dosya_sayısı</var></code></dt>
          <dd>Zaman damgalarına bakılmaksızın bir dosya serisi açılır. Örneğin -n3
            belirtilirse "logfile", "logfile.1", "logfile.2" serisi açılır ve
            "logfile" üzerine yazılır.
            2.4.5 ve sonraki sürümler içindir.</dd>
      
          <dt><code><var>dosyaismi</var></code></dt>
          <dd><p>Günlük dosyasının ismi yoluyla birlikte belirtilir.
            <var>dosyaismi</var> '%' karakterleri içeriyorsa bunlar
            <code>strftime(3)</code> biçem belirteçleri olarak ele alınır. Aksi
            takdirde, özdevinimli olarak <var>.nnnnnnnnnn</var> uzantısı üretilir.
            (<code><strong>-t</strong></code> seçeneği kullanılmadıkça) Uzantı saniye
            cinsindendir  ve her iki durumda da bu değer, mevcut döngü
            diliminin başlangıcına göre hesaplanır. Örneğin, döndürmenin 86400
            saniyede bir yapılacağı belirtilmişse, <code>strftime(3)</code> biçeminde
            oluşturulan saat, dakika ve saniye alanları, 24 saatlik sürenin
            başlangıcını (geceyarısı) göstermek üzere sıfırlarla doldurulur.</p>
      
            <p><code>strftime(3)</code> dosyaismi biçemlemesi kullanılırken, günlük
            dosyası biçeminin günlük dosyası döndürülürken her zaman farklı bir dosya
            ismi üretecek yeterlilikte parçacıklı yapıya sahip olduğundan emin
            olmalısınız. Aks takdirde döndürme işlemi yeni bir dosya başlatmak yerine
            hep aynı dosyanın üzerine yazar. Örneğin, <var>logfile</var> için
            <code>/var/log/errorlog.%Y-%m-%d</code> belirtilmiÅŸse 5 mega baytta bir
            yeni bir günlük dosyasına başlanacaktır. Fakat 5 megabayta gün içinde iki
            kez ulaşılırsa aynı günlük dosyası üretilir ve günlük hep aynı dosyanın
            üzerine yazılır.</p>
          </dd>
      
          <dt><code><var>süre</var></code></dt>
          <dd>Günlük dosyasının yenisinin kaç saniyede bir açılacağı belirtilir.
          Örneğin, bu süre 3600 saniye ise günlük dosyası her saat başında
          yenilenir; 86400 saniye ise her geceyarısı yenilenir. (Bu süre zarfında
          günlüğe kaydedilecek bir olay gerçekleşmemişse dosya oluşturulmaz.)</dd>
      
          <dt><code><var>boyut</var>(B|K|M|G)</code></dt>
          <dd>Boyuta göre döndürme için azami dosya boyutu. Belirtilenin bir süre
          değil de bir boyut değeri olarak ele alınması için değerin sonuna şu
          karakterlerden biri eklenmelidir: <code>B</code> (Bayt), <code>K</code>
          (kilobayt), <code>M</code> (megabayt), <code>G</code> (gigabayt).
      
          <p>Süre ve boyut birlikte belirtilmişse boyut süreden sonra
          belirtilmelidir. Dosya yenilemesi, bunlardan hangisi daha önce aşılırsa o
          zaman gerçekleşir.</p></dd>
      
          <dt><code><var>saat_farkı</var></code></dt>
          <dd>Koordinatlı evrensel zamana göre "dakika" farkı. Belirtilmezse, sıfır
          öntanımlıdır. Örneğin, -5 saatlik bir zaman diliminde bulunuyorsanız bu
          değer <code>-300</code> olmalıdır. Çoğu durumda, bunun yerine
          <code><strong>-l</strong></code> seçeneğini kullanmak gerekir.</dd>
      </dl>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Örnekler</a></h2>
      
      <div class="example"><p><code>
           CustomLog "|bin/rotatelogs /var/log/logfile 86400" common
      </code></p></div>
      
           <p>nnnn, günlük kaydının başladığı sistem zamanı olmak üzere
           /var/log/logfile.nnnn dosyası oluşturulur. Bu zaman, daima döngü
           süresinin katları olacağından bunu cron betiklerinizi eşzamanlamakta
           kullanabilirsiniz. Her döngü süresinin sonunda (burada 24 saat sonra)
           yeni bir günlük dosyası açılır.</p>
      
      <div class="example"><p><code>
           CustomLog "|bin/rotatelogs -l /var/log/logfile.%Y.%m.%d 86400" common
      </code></p></div>
      
           <p>yyyy, yıl; mm, ay; dd, ayın gününü belirtmek üzere
           /var/log/logfile.yyyy.mm.dd dosyası oluşturulur. Her gün yerel zamanla
           geceyarısı yeni bir günlük dosyasına geçilecektir.</p>
      
      <div class="example"><p><code>
           CustomLog "|bin/rotatelogs /var/log/logfile 5M" common
      </code></p></div>
      
           <p>Günlük dosyası 5 megabaytlık olunca yenisinin oluşturulmasını sağlar.
           </p>
      
      <div class="example"><p><code>
           ErrorLog "|bin/rotatelogs /var/log/errorlog.%Y-%m-%d-%H_%M_%S 5M"
      </code></p></div>
           <p>Hata günlüğünün 5 megabaytta bir
           <code>errorlog.YYYY-mm-dd-HH_MM_SS</code> biçemli bir isimle
           oluşturulmasını sağlar.</p>
      
      <div class="example"><p><code>
           CustomLog "|bin/rotatelogs -t /var/log/logfile 86400" common
      </code></p></div>
      
           <p>/var/log/logfile dosyasını oluşturur, sunucu başlatılırken ve günde
             bir kere dosyanın tepesi kırpılır. Bu senaryoda ayrı bir sürecin (tail
             gibi) dosyayı gerçek zamanlı işleyeceği umulur.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="portability" id="portability">Taşınabilirlik</a></h2>
      
          <p>Aşağıdaki günlük dosyası biçem belirteçlerinin tüm
          <code>strftime(3)</code> gerçeklenimlerince desteklenmesi gerekir.
          Kullandığınız kütüphaneye özgü belirteçler için sisteminizdeki
          <code>strftime(3)</code> kılavuz sayfasına bakınız.</p>
      
      <table class="bordered"><tr><td><code>%A</code></td><td>tam gün ismi (yerelleştirilmiş)</td></tr>
      <tr class="odd"><td><code>%a</code></td><td>3 harflik gün ismi
      (yerelleÅŸtirilmiÅŸ)</td></tr>
      <tr><td><code>%B</code></td><td>tam ay ismi (yerelleÅŸtirilmiÅŸ)</td></tr>
      <tr class="odd"><td><code>%b</code></td><td>3 harflik ay ismi (yerelleÅŸtirilmiÅŸ)</td></tr>
      <tr><td><code>%c</code></td><td>tarih ve saat (yerelleÅŸtirilmiÅŸ)</td></tr>
      <tr class="odd"><td><code>%d</code></td><td>2 haneli ay günü numarası</td></tr>
      <tr><td><code>%H</code></td><td>2 haneli saat (24 saatlik)</td></tr>
      <tr class="odd"><td><code>%I</code></td><td>2 haneli saat (12 saatlik)</td></tr>
      <tr><td><code>%j</code></td><td>3 hanelik yıl günü numarası</td></tr>
      <tr class="odd"><td><code>%M</code></td><td>2 haneli dakika</td></tr>
      <tr><td><code>%m</code></td><td>2 haneli ay</td></tr>
      <tr class="odd"><td><code>%p</code></td><td>12 saatlik kip için öö/ös
      (yerelleÅŸtirilmiÅŸ)</td></tr>
      <tr><td><code>%S</code></td><td>2 haneli saniye</td></tr>
      <tr class="odd"><td><code>%U</code></td><td>2 haneli yılın hafta numarası
      (Haftanın ilk gününün Pazar olduğu varsayımıyla)</td></tr>
      <tr><td><code>%W</code></td><td>2 haneli yılın hafta numarası
      (Haftanın ilk gününün Pazartesi olduğu varsayımıyla)</td></tr>
      <tr class="odd"><td><code>%w</code></td><td>1 hanelik haftanın gün numarası
      (Haftanın ilk gününün Pazar olduğu varsayımıyla)</td></tr>
      <tr><td><code>%X</code></td><td>saat (yerelleÅŸtirilmiÅŸ)</td></tr>
      <tr class="odd"><td><code>%x</code></td><td>tarih (yerelleÅŸtirilmiÅŸ)</td></tr>
      <tr><td><code>%Y</code></td><td>4 hanelik yıl</td></tr>
      <tr class="odd"><td><code>%y</code></td><td>2 hanelik yıl</td></tr>
      <tr><td><code>%Z</code></td><td>zaman dilimi ismi</td></tr>
      <tr class="odd"><td><code>%%</code></td><td>`%' iminin kendisi</td></tr>
      </table>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/rotatelogs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/rotatelogs.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/rotatelogs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/rotatelogs.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/rotatelogs.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/suexec.html.ko.euc-kr���������������������������������������������0000644�0000000�0000050�00000015243�13412755316�021266� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>suexec - ¿ÜºÎ ÇÁ·Î±×·¥À» ½ÇÇàÇϱâ Àü¿¡ »ç¿ëÀÚ¸¦ º¯°æÇÑ´Ù - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>suexec - ¿ÜºÎ ÇÁ·Î±×·¥À» ½ÇÇàÇϱâ Àü¿¡ »ç¿ëÀÚ¸¦ º¯°æÇÑ´Ù</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/suexec.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/suexec.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/suexec.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/suexec.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
           <p>¾ÆÆÄÄ¡ À¥¼­¹ö´Â CGI ÇÁ·Î±×·¥À» ½ÇÇàÇϱâ Àü¿¡ ´Ù¸¥ »ç¿ëÀÚ·Î
           ÀüȯÇϱâÀ§ÇØ <code>suexec</code>¸¦ »ç¿ëÇÑ´Ù. À̸¦ »ç¿ëÇÏ·Á¸é
           ¼­¹ö¸¦ <code>root</code> °èÁ¤À¸·Î ½ÇÇàÇØ¾ß ÇÑ´Ù. º¸Åë À¥
           µ¥¸óÀ» <code>root</code> °èÁ¤À¸·Î ½ÇÇàÇÏÁö ¾Ê±â¶§¹®¿¡
           <code>suexec</code> ½ÇÇàÆÄÀÏ¿¡ setuid ºñÆ®¸¦ ¼³Á¤Çϰí
           <code>root</code>°¡ ¼ÒÀ¯ÁÖÀ̾î¾ß ÇÑ´Ù. <code>root</code>ÀÌ¿ÜÀÇ
           ´Ù¸¥ »ç¿ëÀÚ°¡ ¾²±â±ÇÇÑÀ» °¡Áö¸é ¾ÈµÈ´Ù.</p>
      
           <p>suexecÀÇ °³³ä°ú º¸¾È¸ðµ¨¿¡ ´ëÇÑ Á¤º¸´Â suexec ¹®¼­¸¦
           (<a href="http://httpd.apache.org/docs/2.4/suexec.html">http://httpd.apache.org/docs/2.4/suexec.html</a>) Âü°íÇ϶ó.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">°³¿ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">¿É¼Ç</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">°³¿ä</a></h2>
           <p><code><strong>suexec</strong> -<strong>V</strong></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">¿É¼Ç</a></h2>
      
      <dl>
      <dt><code>-V</code></dt>
      
      <dd><code>root</code>°¡ ½ÇÇàÇϸé <code>suexec</code>ÀÇ ÄÄÆÄÀÏ
      ¿É¼ÇÀ» Ãâ·ÂÇÑ´Ù. º¸¾È»ó ÀÌÀ¯·Î ¸ðµç ¼³Á¤¿É¼ÇÀº ÄÄÆÄÀÏÇÒ ¶§¸¸
      ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù.</dd>
      
      </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/suexec.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/suexec.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/suexec.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/suexec.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/suexec.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/fcgistarter.html.fr.utf8������������������������������������������0000644�0000000�0000050�00000015147�13412755316�022010� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>fcgistarter - Démarrer un programme FastCGI - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>fcgistarter - Démarrer un programme FastCGI</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/fcgistarter.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/fcgistarter.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/fcgistarter.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p />
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#note">Note</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Syntaxe</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_proxy_fcgi.html">mod_proxy_fcgi</a></code></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="note" id="note">Note</a></h2>
            <p>Ne fonctionne actuellement que sur les systèmes de type Unix.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Syntaxe</a></h2>
          <p><code><strong>fcgistarter</strong>
          -<strong>c</strong> <var>commande</var>
          -<strong>p</strong> <var>port</var>
          [ -<strong>i</strong> <var>interface</var> ]
          -<strong>N</strong> <var>nombre</var>
          </code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code>-c <var>commande</var></code></dt>
          <dd>Le programme FastCGI</dd>
      
          <dt><code>-p <var>port</var></code></dt>
          <dd>Port sur lequel le programme va se mettre en écoute</dd>
      
          <dt><code>-i <var>interface</var></code></dt>
          <dd>Interface sur laquelle le programme va se mettre en écoute</dd>
      
          <dt><code>-N <var>nombre</var></code></dt>
          <dd>Nombre d'instances du programme</dd>
      
          </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/fcgistarter.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/fcgistarter.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/fcgistarter.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/fcgistarter.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/split-logfile.html������������������������������������������������0000644�0000000�0000050�00000000336�13362070302�020731� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: split-logfile.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: split-logfile.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/configure.html.tr.utf8��������������������������������������������0000644�0000000�0000050�00000123000�13447004010�021440� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>configure - kaynak ağacını yapılandırır - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>configure - kaynak ağacını yapılandırır</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/configure.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/configure.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/configure.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/configure.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>configure</code> betiği, Apache HTTP Sunucusunun kaynak kodlarını
            belli bir platform için yapılandırmakta ve derlemekte kullanılır.
            Sunucuyu kişisel gereksinimlerinize uygun şekilde derlemek için çeşitli
            seçeneklere sahiptir.</p>
      
          <p>Bu betik Apache HTTP Sunucusu kaynak paketinin kök dizininde bulunur ve
            sadece Unix ve benzeri sistemlerde kullanılabilir. Kaynak paketinin
            diğer platformalarda yapılandırılması ve derlenmesi hakkında bilgi
            edinmek için <a href="../platform/">platform</a> belgelerine bakınız.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Komut Satırı</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#env">Ortam DeÄŸiÅŸkenleri</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="../install.html">Derleme ve Kurulum</a></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Komut Satırı</a></h2>
          <p><code>configure</code> betiğini kaynak paketinin kök dizininden başka
            bir yere kopyalayıp çalıştırmamalısınız.</p>
      
          <p><code><strong>./configure</strong> [<var>seçenek</var>]...
            [<var>deÄŸiÅŸken=deÄŸer</var>]...</code></p>
      
          <p><code>CC</code>, <code>CFLAGS</code> gibi ortam deÄŸiÅŸkenlerini
            <code><var>değişken</var>=<var>değer</var></code> atamaları biçiminde
            kullanabilirsiniz. Kullanışlı değişkenlerin bazıları <a href="#env">aşağıda</a> açıklanmıştır.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
        <ul>
          <li><a href="#configurationoptions">Yapılandırma seçenekleri</a></li>
          <li><a href="#installationdirectories">Kurulum dizinleri</a></li>
          <li><a href="#systemtypes">Sistem türleri</a></li>
          <li><a href="#optionalfeatures">Seçimlik özellikler</a></li>
          <li><a href="#supportopt">Destek programları için seçenekler</a></li>
        </ul>
      
        <h3><a name="configurationoptions" id="configurationoptions">Yapılandırma seçenekleri</a></h3>
      
          <p>Aşağıdaki seçenekler <code>configure</code> betiğinin kendi davranışını
            belirlemekte kullanılır.</p>
      
          <dl>
            <dt><code>-C</code></dt>
            <dt><code>--config-cache</code></dt>
            <dd><code>--cache-file=config.cache</code> için bir kısaltmadır.</dd>
      
            <dt><code>--cache-file=<var>dosya</var></code></dt>
            <dd>Sınama sonuçları <code><var>dosya</var></code> dosyasında saklanır.
              Bu seçenek açıkça belirtilmedikçe işlevsizdir.</dd>
      
            <dt><code>-h</code></dt>
            <dt><code>--help [short|recursive]</code></dt>
            <dd>Yardım metnini basar ve çıkar. <code>short</code> değeriyle sadece
              bu pakete özgü seçenekler listelenir. <code>recursive</code> değeriyle
              ise paketin içindeki tüm paketler için kısa bir yardım metni
              basılır.</dd>
      
            <dt><code>-n</code></dt>
            <dt><code>--no-create</code></dt>
            <dd><code>configure</code> betiği normal olarak çalışır fakat herhangi
              bir çıktı dosyası üretmez. Derleme için <code>Makefile</code>
              dosyalarını üretmeksizin sınamaların sonuçlarını görmek için
              yararlıdır.</dd>
      
            <dt><code>-q</code></dt>
            <dt><code>--quiet</code></dt>
            <dd>Yapılandırma sürecinde <code>checking ...</code> iletilerini basmaz.
            </dd>
      
            <dt><code>--srcdir=<var>dizin</var></code></dt>
            <dd><code><em>dizin</em></code> dizinini kaynak dosyaları dizini olarak
              tanımlar. <code>configure</code> betiğinin bulunduğu dizin veya bir
              üst dizin öntanımlıdır.</dd>
      
            <dt><code>--silent</code></dt>
            <dd><code>--quiet</code> ile aynı.</dd>
      
            <dt>-V</dt>
            <dt>--version</dt>
            <dd>Telif hakkı bilgilerini gösterir ve çıkar.</dd>
          </dl>
        
      
        <h3><a name="installationdirectories" id="installationdirectories">Kurulum dizinleri</a></h3>
      
          <p>Bu seçenekler kurulum dizinlerini tanımlar. Kurulum dizinleri seçilmiş
            yerleşime bağımlıdır.</p>
      
          <dl>
            <dt><code>--prefix=<var>PREFIX</var></code></dt>
            <dd>Mimariden bağımsız dosyalar <code><em>PREFIX</em></code> dizininin
              altına kurulur. <code>/usr/local/apache2</code> öntanımlı kurulum
              dizinidir.</dd>
      
            <dt><code>--exec-prefix=<var>EPREFIX</var></code></dt>
            <dd>Mimariye bağımlı dosyalar <code><em>EPREFIX</em></code> dizininin
              altına kurulur. Bunun için <code><em>PREFIX</em></code> dizini
              öntanımlı kurulum dizinidir.</dd>
          </dl>
      
          <p>Öntanımlı olarak, <code>make install</code> tüm dosyaların
            <code>/usr/local/apache2/bin</code>, <code>/usr/local/apache2/lib</code>
            gibi dizinlere kurulmasını sağlar. Kurulum dizini önekini örneğin,
            <code>--prefix=$HOME</code> ÅŸeklinde belirterek kurulumun baÅŸka bir yere
            yapılmasını sağlayabilirsiniz.</p>
      
          <h4><a name="layout" id="layout">Bir dizin yerleşimi tanımlamak</a></h4>
            <dl>
              <dt><code>--enable-layout=<var>LAYOUT</var></code></dt>
              <dd>Kaynak kodu ve derleme betikleri kurulum ağacının
                <code><em>LAYOUT</em></code> yerleşimine dayalı olduğu varsayımıyla
                yapılandırılır. Bu seçenek sayesinde Apache HTTP Sunucusu kurulumu
                içinde her dosya türü için farklı bir yer belirleyebilirsiniz.
                <code>config.layout</code> dosyasında böyle yapılandırma örnekleri
                vardır. Örnekleri izleyerek kendi yapılandırmanızı
                oluşturabilirsiniz. Bu dosyada örneğin <code>FOO</code> isimli
                yerleşim <code>&lt;Layout FOO&gt;...&lt;/Layout&gt;</code> bölümü
                içinde düzenlenmiştir ve her yerleşim için böyle ayrı bir bölüm
                vardır. Öntanımlı yerleşim <code>Apache</code>’dir.</dd>
            </dl>
          
      
          <h4><a name="directoryfinetuning" id="directoryfinetuning">Kurulum dizinlerinde ince ayar</a></h4>
            
      
            <p>Kurulum dizinlerini daha iyi denetim altında tutmak için aşağıdaki
              seçenekler kullanılır. Lütfen, dizin öntanımlılarının
              <code>autoconf</code> tarafından tanımlandığına ve seçilen yerleşim
              ayarlarının bunları yerini aldığına dikkat ediniz.</p>
      
            <dl>
              
              <dt><code>--bindir=<var>dizin</var></code></dt>
              <dd>Kullanıcı tarafından çalıştırılabilen dosyalar
                <code><em>dizin</em></code> dizinine kurulur. Bunlar
                <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code>, <code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code> gibi site
                yönetimi için yararlı destek programlarıdır. Öntanımlı olarak bu
                dosyalar <code><var>EPREFIX</var>/bin</code> dizinine kurulur.</dd>
      
              <dt><code>--datadir=<var>dizin</var></code></dt>
              <dd>Mimariden bağımsız salt okunur veriler <code><em>dizin</em></code>
                dizinine kurulur. Bunların öntanımlı kurulum dizini
                <code><var>PREFIX</var>/share</code> dizinidir. Bu seçenek
                <code>autoconf</code> tarafından atanır ve şimdilik
                kullanılmamıştır.</dd>
      
              <dt><code>--includedir=<var>dizin</var></code></dt>
              <dd>C başlık dosyaları <code><em>dizin</em></code> dizinine kurulur.
                Bunların öntanımlı kurulum dizini
                <code><var>PREFIX</var>/include</code> dizinidir.</dd>
      
              <dt><code>--infodir=<var>dizin</var></code></dt>
              <dd>Info belgeleri <code><em>dizin</em></code> dizinine kurulur.
                Bunların öntanımlı kurulum dizini
                <code><var>PREFIX</var>/info</code> dizinidir. Bu seçenek şimdilik
                kullanılmamıştır.</dd>
      
              <dt><code>--libdir=<var>dizin</var></code></dt>
              <dd>Nesne kod kütüphaneleri <code><em>dizin</em></code> dizinine
                kurulur. Bunların öntanımlı kurulum dizini
                <code><var>PREFIX</var>/lib</code> dizinidir.</dd>
      
              <dt><code>--libexecdir=<var>dizin</var></code></dt>
              <dd>Paylaşımlı modüller gibi program dosyaları
                <code><em>dizin</em></code> dizinine kurulur. Öntanımlı olarak
                <code>libexecdir</code> bu dizini
                <code><var>EPREFIX</var>/modules</code> olarak tanımlar.</dd>
      
              <dt><code>--localstatedir=<var>dizin</var></code></dt>
              <dd>Düzenlenebilir tek makinelik veri <code><em>dizin</em></code>
                dizinine kurulur. Öntanımlı olarak <code>localstatedir</code> bu
                dizini <code><var>PREFIX</var>/var</code> olarak tanımlar. Bu
                seçenek <code>autoconf</code> tarafından atanır ve şimdilik
                kullanılmamıştır.</dd>
      
              <dt><code>--mandir=<var>dizin</var></code></dt>
              <dd>Kılavuz sayfaları <code><em>dizin</em></code> dizinine kurulur.
                Öntanımlı olarak <code>mandir</code> bu dizini
                <code><var>EPREFIX</var>/man</code> olarak tanımlar.</dd>
      
              <dt><code>--oldincludedir=<var>dizin</var></code></dt>
              <dd>GCC harici C başlık dosyaları <code><em>dizin</em></code> dizinine
                kurulur. Öntanımlı olarak <code>oldincludedir</code> bu dizini
                <code>/usr/include</code> olarak tanımlar. Bu seçenek
                <code>autoconf</code> tarafından atanır ve şimdilik
                kullanılmamıştır.</dd>
      
              <dt><code>--sbindir=<var>dizin</var></code></dt>
              <dd>Sistem yöneticisi tarafından kullanılabilen programlar
                <code><em>dizin</em></code> dizinine kurulur. Bunlar
                <code class="program"><a href="../programs/httpd.html">httpd</a></code>, <code class="program"><a href="../programs/apachectl.html">apachectl</a></code>,
                <code class="program"><a href="../programs/suexec.html">suexec</a></code> gibi Apache HTTP Sunucusunu çalıştırmak
                için gereken programlardır. Öntanımlı olarak <code>sbindir</code> bu
                dizini <code><var>EPREFIX</var>/sbin</code> olarak tanımlar.</dd>
      
              <dt><code>--sharedstatedir=<var>dizin</var></code></dt>
              <dd>Mimariye bağımlı düzenlenebilir veriler
                <code><em>dizin</em></code> dizinine kurulur. Öntanımlı olarak
                <code>sharedstatedir</code> bu dizini
                <code><var>PREFIX</var>/com</code> olarak tanımlar. Bu seçenek
                <code>autoconf</code> tarafından atanır ve şimdilik
                kullanılmamıştır.</dd>
      
              <dt><code>--sysconfdir=<var>dizin</var></code></dt>
              <dd><code>httpd.conf</code>, <code>mime.types</code> gibi tek
                makinelik salt okunur sunucu yapılandırma dosyaları
                <code><em>dizin</em></code> dizinine kurulur. Öntanımlı olarak
                <code>sysconfdir</code> bu dizini
                <code><var>PREFIX</var>/conf</code> olarak tanımlar.</dd>
            </dl>
          
        
      
        <h3><a name="systemtypes" id="systemtypes">Sistem türleri</a></h3>
      
          <p>Bu seçenekleri Apache HTTP Sunucusunu başka bir platformda çalıştırmak
            üzere çapraz derleme yaparken kullanılır. Normal durumlarda sunucu
            derlendiği platformda çalıştırıldığından bu seçenekler kullanılmaz.</p>
      
          <dl>
            <dt><code>--build=<var>derleme-ortamı</var></code></dt>
            <dd>Derleme araçlarının derleneceği sistemin sistem türünü tanımlar.
              <code>config.guess</code> betiği ile elde edilen sonuç
              öntanımlıdır.</dd>
      
            <dt><code>--host=<var>çalışma-ortamı</var></code></dt>
            <dd>Sunucunun çalışacağı sistemin sistem türünü tanımlar. Öntanımlı
              sistem türü <code><var>derleme-ortamı</var></code>’dır.</dd>
      
            <dt><code>--target=<var>hedef-ortam</var></code></dt>
            <dd>Derleyicileri <code><var>hedef-ortam</var></code> sistem türü için
              yapılandırır. Öntanımlı sistem türü
              <code><var>çalışma-ortamı</var></code>’dır. Bu seçenek
              <code>autoconf</code> tarafından atanır ve Apache HTTP Sunucusu için
              gerekli deÄŸildir.</dd>
          </dl>
        
      
        <h3><a name="optionalfeatures" id="optionalfeatures">Seçimlik özellikler</a></h3>
      
          <p>Bu seçenekler HTTP sunucunuzun sahip olmasını istediğiniz özelliklerin
            hassas olarak ayarlanmasını sağlar.</p>
      
          <h4><a name="generaloptfeat" id="generaloptfeat">Genel sözdizimi</a></h4>
            <p>Bir özelliği etkin kılmak veya iptal etmek için genellikle şu
              sözdizimi kullanılır:</p>
      
            <dl>
              <dt><code>--disable-<var>özellik</var></code></dt>
              <dd>Sunucu <code><em>özellik</em></code> özelliğine sahip olmaz. Bu
                seçenek<code>--enable-<var>özellik</var>=no</code> seçeneğine
                eÅŸdeÄŸerdir.</dd>
      
              <dt><code>--enable-<var>özellik</var>[=<var>değer</var>]</code></dt>
              <dd>Sunucu <code><var>özellik</var></code> özelliğine sahip olur.
                <code><var>deÄŸer</var></code> belirtilmediÄŸi takdirde
                <code>yes</code> (evet) öntanımlıdır.</dd>
      
              <dt><code>--enable-<var>modül</var>=shared</code></dt>
              <dd>Belirtilen modül DSO modülü olarak derlenir. Öntanımlı olarak
                etkin modüller devingen ilintilenir.</dd>
      
              <dt><code>--enable-<var>modül</var>=static</code></dt>
              <dd>Belirtilen modül durağan ilintilenir.</dd>
            </dl>
      
            <div class="note"><h3>Bilginize</h3>
            <p><code>--enable-<var>filanca</var></code> seçeneğinin varlığı
              <code>configure</code> betiÄŸinin <code><var>filanca</var></code> diye
              bir modül var olmasa bile bundan şikayetçi olmasına sebep olmaz. Bu
              bakımdan dikkatli olunuz.</p>
            </div>
          
      
          <h4><a name="choosemodules" id="choosemodules">Derlenecek modüllerin seçimi</a></h4>
            <p>Modüllerin çoğu öntanımlı olarak derlenir ve ya açıkça iptal edilmek
              ya da <code>few</code> anahtar sözcüğü
              kullanılarak kaldırılmak zorunda kalınır (ayrıntılar için
              <code>--enable-modules</code>, <code>--enable-mods-shared</code> ve
              <code>--enable-mods-static</code> seçeneklerine bakın). Bir grubu 
              tamamen kaldırmak için <code>--enable-modules=none</code> gerekir.</p>
      
              <p>Öntanımlı olarak derlenmeyenler ise ya açıkça etkin kılınmak ya da
                <code>all</code> veya <code>reallyall</code> anahtar sözcükleriyle
                kullanılabilir yapılmak zorunda kalınır.</p>
      
              <p>Hangi modüllerin öntanımlı olarak derlendiğini öğrenmek için
                <code>./configure -h</code> veya <code>./configure --help</code>
                komutunu çalıştırın ve çıktıdaki <code>Optional Features</code>
                bölümüne bakın. Örnek olarak, <code>mod_example1</code> ve
                <code>mod_example2</code> modülleriyle ilgilendiğinizi
                varsayalım:</p>
      
              <div class="example"><pre>Optional Features:
        ...
        --disable-example1     example module 1
        --enable-example2      example module 2
        ...</pre></div>
      
              <p>Burada, <code>mod_example1</code> öntanımlı olarak etkindir ve
                derlenmemesini istiyorsanız <code>--disable-example1</code>
                seçeneğini kullanmalısınız. <code>mod_example2</code> ise öntanımlı
                olarak derlenmemektedir ve derlenmesini istiyorsanız
                <code>--enable-example2</code> seçeneğini kullanmalısınız.</p>
          
      
          <h4><a name="mpms" id="mpms">Çok Süreçlilik Modülleri</a></h4>
            <p><a href="../mpm.html">Çok Süreçlilik Modülleri</a> veya MPM'ler
              sunucunun temel davranışını belirler. Sunucuya yüklenebilecek azami MPM
              sayısı birdir. Kullanılabilecek modüller <a href="../mod/">modül
              dizini</a>nde listelenmiÅŸtir.</p>
      
            <p>MPM'ler devingen yükleme için DSO olarak derlenebileceği gibi
              sunucuyla duruk olarak da ilintilenebilir ve bunlar aşağıdaki
              seçeneklerle etkin kılınır:</p>
      
            <dl>
              <dt><code>--with-mpm=MPM</code></dt>
              <dd>
                <p>Sunucu için öntanımlı MPM'i seçer. MPM'ler DSO modülleri olarak
                  derleniyorsa (bak <code>--enable-mpms-shared</code>), bu seçenek
                  öntanımlı yapılandırma dosyasında yüklenecek MPM'i seçer. Aksi
                  takdirde, sunucuyla duruk olarak ilintilenecek, kullanılabilir tek
                  MPM'i seçer.</p>
      
                <p>Bu seçenek belirtilmezse, işletim sisteminiz için
                  <a href="../mpm.html#defaults">öntanımlı olan MPM</a> seçilir.</p>
              </dd>
      
             <dt><code>--enable-mpms-shared=<var>MPM-LISTESİ</var></code></dt>
              <dd>
                <p>MPM'leri devingen paylaşımlı modül olarak etkinleştirir.
                  <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> yönergesi
                  kullanılarak bu modüllerden biri devingen olarak yüklenmelidir.</p>
      
                <p><var>MPM-LISTESİ</var> MPM'lerin aralarına boşluk bırakılarak ve
                  tamamı tek tırnaklarla sarmalanarak oluşturulmuş bir listesidir.
                  Örnek:</p>
      
                <div class="example"><p><code>
                  --enable-mpms-shared='prefork worker'
                </code></p></div>
      
                <p>Ek olarak, kullandığınız platformda devingen yüklemeyi destekleyen
                  ve DSO modülü olarak derlenmiş tüm modülleri seçmek için
                  <code>all</code> anahtar sözcüğünü de kullanabilirsiniz. Örnek:</p>
      
                  <div class="example"><p><code>
                  --enable-mpms-shared=all
                </code></p></div>
             </dd>
           </dl>
          
      
          <h4><a name="modules" id="modules">Üçüncü parti modüller</a></h4>
            <p>Üçüncü parti modülleri etkin kılmak için şu seçenekler kullanılır:</p>
      
            <dl>
              <dt><code>--with-module=<var>modül-türü</var>:<var>modül-dosyası</var>[,<var>modül-türü</var>:<var>modül-dosyası</var>]</code></dt>
              <dd><p>Durağan ilintili modüller listesine belirtilen modülleri ekler.
                Modül kaynak dosyası <code><var>modül-dosyası</var></code>, önce
                Apache HTTP Sunucusu kaynak ağacı altında
                <code>modules/<var>modül-türü</var></code> alt dizininde aranır.
                Modül orada değilse <code>configure</code>  betiği
                <code><var>modül-dosyası</var></code> ile bir mutlak dosya yolu
                belirtildiği varsayımıyla kaynak dosyasını
                <code><var>modül-türü</var></code> alt dizinine kopyalamaya çalışır.
                Alt dizin mevcut değilse oluşturulur ve içine standart bir
                <code>Makefile.in</code> yerleÅŸtirilir.</p>
      
              <p>Bu seçenek tek kaynak dosyasından oluşan küçük harici modülleri
                eklemek için yararlıdır. Daha karmaşık modüller için modül üreticisi
                tarafından sağlanan belgelere bakınız.</p>
      
              <div class="note"><h3>Bilginize</h3>
                <p>Durağan ilintili modüller yerine bir DSO modülü derlemek
                  isterseniz <code class="program"><a href="../programs/apxs.html">apxs</a></code> programını kullanınız.</p>
              </div>
              </dd>
            </dl>
          
      
          <h4><a name="otheroptfeat" id="otheroptfeat">Kümeleme seçenekleri ve diğerleri</a></h4>
            <dl>
              <dt><code>--enable-maintainer-mode</code></dt>
              <dd>Hata ayıklama iletileri ve derleme sırasındaki uyarıların
                gösterilmesi etkin kılınır ve derlenmiş tüm modüller yüklenir.</dd>
      
              <dt><code>--enable-mods-shared=<var>modül-listesi</var></code></dt>
              <dd>
                <p>Etkinleştirilip devingen paylaşımlı modül olarak derlenecek
                  modüllerin listesi belirtilir. Yani, bu modüller <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> yönergesi kullanılarak
                  devingen olarak yüklenir.</p>
      
                <p><code><var>modül-listesi</var></code> tırnak içine alınmış boşluk
                  ayraçlı modül isimleri listesidir. Modül isimleri önlerindeki
                  <code>mod_</code> öneki olmaksızın belirtilirler. Örnek:</p>
      
                <div class="example"><p><code>
                  --enable-mods-shared='headers rewrite dav'
                </code></p></div>
      
                <p><code><var>modül-listesi</var></code> yerine
                  <code>reallyall</code>, <code>all</code>, <code>most</code> ve 
                  <code>few</code> anahtar sözcükleri de belirtilebilir. Örneğin,</p>
      
                <div class="example"><p><code>
                  --enable-mods-shared=most
                </code></p></div>
      
                <p>seçeneği ile çoğu modül DSO modülü olarak derlenir,</p>
      
                <div class="example"><p><code>
                  --enable-mods-shared=few
                </code></p></div>
      
                <p>seçeneği ile sadece en temel modüller derlenir.</p>
      
                <p><code>most</code> öntanımlıdır.</p>
      
                <p>Seçilen modüller için <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> yönergeleri ana yapılandırma dosyasında
                  kendiliğinden üretilir. Öntanımlı olarak, <code>--enable-foo</code>
                  yapılandıma seçeneği ile açıkça seçilen modüller ve gerekli olanlar
                  dışında kalan <code>LoadModule</code> yönergeleri açıklama haline
                  getirilir. Yüklü modülleri <code>httpd.conf</code> dosyasındaki
                  <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> yönergelerini
                  etkin kılarak veya açıklama haline getirerek değiştirebilirsiniz.
                  <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> yönergelerine ek
                  olarak, derlenmiş tüm modüller
                  <code>--enable-load-all-modules</code> yapılandırma seçeneği ile de
                  etkinleÅŸtirilebilir.</p></dd>
      
              <dt><code>--enable-mods-static=<var>modül-listesi</var></code></dt>
              <dd>Bu seçenek modülleri devingen değil de durağan ilintilemek dışında
                <code>--enable-mods-shared</code> seçeneğine benzer. Yani bu
                modüller <code class="program"><a href="../programs/httpd.html">httpd</a></code> çalıştırılır çalıştırılmaz etkin
                olurlar. Yüklenmeleri için <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> yönergesine ihtiyaçları
                yoktur.</dd>
      
              <dt><code>--enable-modules=<var>MODULE-LIST</var></code></dt>
              <dd>Bu seçenek <code>--enable-mods-shared</code> gibi davranır ve ek
                olarak belirtilen modülleri devingen olarak ilintiler.Özel
                <code>none</code> anahtar sözcüğü tüm modüllerin derlenmesini iptal
                eder.</dd>
      
              <dt><code>--enable-v4-mapped</code></dt>
              <dd>IPv6 soketlierinin IPv4 bağlantılar üzerinde kullanılması mümkün
                olur.</dd>
      
              <dt><code>--with-port=<var>port</var></code></dt>
              <dd>Bu seçenek <code class="program"><a href="../programs/httpd.html">httpd</a></code>'nin dinleyeceği portu
                belirler. Bu port <code>httpd.conf</code> yapılandırma dosyası
                üretilirken kullanılır. 80. port öntanımlıdır.</dd>
      
              <dt><code>--with-program-name</code></dt>
              <dd>Öntanımlı olan <code>httpd</code> yerine başka bir çalıştırabilir
                ismi tanımlar.</dd>
            </dl>
          
        
      
        <h3><a name="packages" id="packages">Seçimlik paketler</a></h3>
          <p>Buradaki seçenekler seçimlik paketleri tanımlamak için kullanılır.</p>
      
          <h4><a name="generalpackages" id="generalpackages">Genel sözdizimi</a></h4>
            <p>Bir seçimlik paketi tanımlamak için genellikle şöyle bir sözdizimi
              kullanılır:</p>
      
            <dl>
              <dt><code>--with-<var>paket</var>[=<var>deÄŸer</var>]</code></dt>
              <dd><code><var>paket</var></code> paketi kullanılır. Öntanımlı
                <code><var>değer</var></code> <code>yes</code>’tir.</dd>
      
              <dt><code>--without-<var>paket</var></code></dt>
              <dd><code><var>paket</var></code> paketi kullanılmaz. Öntanımlı
                <code><var>değer</var></code> <code>no</code>’dur. Bu seçenek
                <code>autoconf</code> tarafından sağlanmıştır ve Apache HTTP
                Sunucusu için pek yararlı değildir.</dd>
            </dl>
          
      
          
      
          <h4><a name="packageopt" id="packageopt">Özel paketler</a></h4>
            <dl>
              <dt><code>--with-apr=<var>dizin</var>|<var>dosya</var></code></dt>
              <dd><a class="glossarylink" href="../glossary.html#apr" title="sözlüğe bakınız">Apache Taşınabilir Arayüzü</a> (APR)
                httpd kaynak paketinin bir parçası olup HTTP Sunucu ile birlikte
                derlenir. Eğer kendi kurulu APR’nizi kullanmak isterseniz bunu
                <code>configure</code> betiÄŸine <code>apr-config</code> betiÄŸinin
                yolunu belirterek ifade edebilirsiniz. Kurulu APR için bid dizin,
                dosya ismi veya mutlak dosya yolu belirtebilirsiniz.
                <code>apr-config</code> ya belirttiÄŸiniz dizinde ya da
                <code>bin</code> alt dizininde bulunmalıdır.</dd>
      
              <dt><code>--with-apr-util=<var>dizin</var>|<var>dosya</var></code></dt>
              <dd>Apache Taşınabilir Arayüzü Araçları (APU) httpd kaynak paketinin
                bir parçası olup HTTP Sunucu ile birlikte derlenir. Eğer kendi
                kurulu APU’nuzu kullanmak isterseniz bunu <code>configure</code>
                betiÄŸine <code>apu-config</code> betiÄŸinin yolunu belirterek ifade
                edebilirsiniz. Kurulu APR için bir dizin, dosya ismi veya mutlak
                dosya yolu belirtebilirsiniz. <code>apr-config</code> ya
                belirttiÄŸiniz dizinde ya da <code>bin</code> alt dizininde
                bulunmalıdır.</dd>
      
              <dt><code>--with-ssl=<var>dizin</var></code></dt>
              <dd><code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> modülü etkinse <code>configure</code>
                betiği kurulu bir OpenSSL arayacaktır. Kendi SSL/TLS kurulumunuzun
                yolunu bu seçenekle belirtebilirsiniz.</dd>
      
              <dt><code>--with-z=<var>dizin</var></code></dt>
              <dd>Yapılandırmanız gerektirdiği takdirde (örneğin,
                <code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code> etkinse) <code>configure</code> betiÄŸi
                kurulu <code>zlib</code> kütüphanesinin yerini tespit etmeye
                çalışacaktır. Kendi sıkıştırma kütüphanenizin yerini bu seçenekle
                belirtebilirsiniz.</dd>
            </dl>
      
            <p>Apache HTTP Sunucusunun çeşitli bölümleri,
              <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> modülü ve <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>
              modülünün <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code>
              yönergesi bilgilere erişimi hızlandırmak için basit anahtar/değer
              veritabanları kullanırlar. SDBM, APU içinde mevcut olduğundan bu
              veritabanı her zaman kullanılabilir durumdadır. Eğer başka veritabanı
              türleri kullanmak isterseniz aşağıdaki seçeneklerle bunları etkin
              kılabilirsiniz:</p>
      
            <dl>
              <dt><code>--with-gdbm[=<var>dizin-yolu</var>]</code></dt>
              <dd>Bir <code><var>dizin-yolu</var></code> belirtilmemiÅŸse
                <code>configure</code> betiği GNU DBM kurulumunun kütüphanelerini ve
                başlık dosyalarını bulunması olası yerlerde arar.  Bir
                <code><var>dizin-yolu</var></code> belirtilmiÅŸse
                <code>configure</code> betiği kurulumun kütüphanelerini
                <code><var>dizin-yolu</var>/lib</code> altında, başlık dosyalarını
                ise <code><var>dizin-yolu</var>/include</code> altında arayacaktır.
                Bundan başka, başlık ve kütüphane dosyalarının bulundukları yerler
                iki nokta imi ile ayrılarak <code><var>dizin-yolu</var></code>
                olarak belirtilebilir.</dd>
      
              <dt><code>--with-ndbm[=<var>dizin-yolu</var>]</code></dt>
              <dd>New DBM kurulumunu araştırması dışında <code>--with-gdbm</code>
                seçeneği gibidir.</dd>
      
              <dt><code>--with-berkeley-db[=<var>dizin-yolu</var>]</code></dt>
              <dd>Berkeley DB kurulumunu araştırması dışında
                <code>--with-gdbm</code> seçeneği gibidir.</dd>
            </dl>
      
            <div class="note"><h3>Bilginize</h3>
              <p>DBM seçenekleri APU tarafından sağlanmış olup onun yapılandırma
                betiğine aktarılır. Bu seçenekler <code>--with-apr-util</code>
                seçeneği ile tanımlanmış bir kurulu APU varsa kullanışlı olur.</p>
              <p>HTTP sunucunuz ile birlikte birden fazla DBM gerçeklenimi
                kullanabilirsiniz. Kullanılacak DBM türünü her zaman çalışma anı
                yapılandırmanızla yapılandırabilirsiniz.</p>
            </div>
          
        
      
        <h3><a name="supportopt" id="supportopt">Destek programları için seçenekler</a></h3>
          <dl>
            <dt><code>--enable-static-support</code></dt>
            <dd>Destek programlarını durağan ilintili olarak derler. Yani
              çalıştırılabilirin kullandığı bütün kütüphaneler kodla
              bütünleştirilir. Bu seçenek belirtilmedikçe destek programları daima
              devingen ilintili olarak derlenir.</dd>
      
            <dt><code>--enable-suexec</code></dt>
            <dd>Çatallanan sürecin kullanıcı ve grup kimliklerinin
              değiştirilebilmesini sağlayan <code class="program"><a href="../programs/suexec.html">suexec</a></code> programının
              kullanımını etkinleştirir. <strong>Sunucunuz üzerinde suid biti
              etkinleştirilmiş bir program çalıştırmanın sistem güvenliğinde
              yaratacağı sorunlar hakkında bir fikriniz yoksa bu seçeneği
              etkinleştirmeyin</strong>. <code class="program"><a href="../programs/suexec.html">suexec</a></code> yapılandırma
              seçenekleri <a href="#suexec">aşağıda</a> açıklanmıştır.</dd>
          </dl>
      
          <p>Tek bir destek programını aşağıdaki seçenekleri kullanarak bir durağan
            ilintili çalıştırılabilir olarak derleyebilirsiniz:</p>
      
          <dl>
            <dt><code>--enable-static-ab</code></dt>
            <dd><code class="program"><a href="../programs/ab.html">ab</a></code> programının durağan ilintili sürümü
              derlenir.</dd>
      
            
            <dt><code>--enable-static-checkgid</code></dt>
            <dd><code>checkgid</code> programının durağan ilintili sürümü
              derlenir.</dd>
      
            <dt><code>--enable-static-htdbm</code></dt>
            <dd><code class="program"><a href="../programs/htdbm.html">htdbm</a></code> programının durağan ilintili sürümü
              derlenir.</dd>
      
            <dt><code>--enable-static-htdigest</code></dt>
            <dd><code class="program"><a href="../programs/htdigest.html">htdigest</a></code> programının durağan ilintili sürümü
              derlenir.</dd>
      
            <dt><code>--enable-static-htpasswd</code></dt>
            <dd><code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> programının durağan ilintili sürümü
              derlenir.</dd>
      
            <dt><code>--enable-static-logresolve</code></dt>
            <dd><code class="program"><a href="../programs/logresolve.html">logresolve</a></code> programının durağan ilintili sürümü
              derlenir.</dd>
      
            <dt><code>--enable-static-rotatelogs</code></dt>
            <dd><code class="program"><a href="../programs/rotatelogs.html">rotatelogs</a></code> programının durağan ilintili sürümü
              derlenir.</dd>
          </dl>
      
          <h4><a name="suexec" id="suexec"><code>suexec</code> yapılandırma seçenekleri</a></h4>
            
      
            <p>Aşağıdaki seçeneklerle <code class="program"><a href="../programs/suexec.html">suexec</a></code> programının
              davranışı hassas bir şekilde ayarlanabilir. Daha ayrıntılı bilgi için
              <a href="suexec.html#install">suEXEC yapılandırması ve kurulumu</a>na
              bakınız.</p>
      
            <dl>
              <dt><code>--with-suexec-bin</code></dt>
              <dd>Bu seçenek ile <code class="program"><a href="../programs/suexec.html">suexec</a></code> çalıştırılabilirinin yeri
                belirtilir. Öntanımlı olarak <code>--sbindir</code> ile belirtilen
                dizine kurulur (<a href="#directoryfinetuning">Kurulum dizinlerinde
                ince ayar</a> konusuna bakınız).</dd>
      
              <dt><code>--with-suexec-caller</code></dt>
              <dd>Bu seçenek ile <code class="program"><a href="../programs/suexec.html">suexec</a></code>’i çalıştırabilecek
                kullanıcı belirtilir. Normalde <code class="program"><a href="../programs/httpd.html">httpd</a></code> programını
                çalıştıran kullanıcı olmalıdır.</dd>
      
              <dt><code>--with-suexec-docroot</code></dt>
              <dd>Bu seçenek ile <code class="program"><a href="../programs/suexec.html">suexec</a></code>'e erişebilecek
                çalıştırılabilirlerin altında bulunacağı dizin belirtilir.
                <code>--datadir/htdocs</code> öntanımlıdır.</dd>
      
              <dt><code>--with-suexec-gidmin</code></dt>
              <dd><code class="program"><a href="../programs/suexec.html">suexec</a></code> için hedef kullanıcı olmasına izin
                verilen en küçük grup kimliğini tanımlamak için kullanılır. 100
                öntanımlıdır.</dd>
      
              <dt><code>--with-suexec-logfile</code></dt>
              <dd><code class="program"><a href="../programs/suexec.html">suexec</a></code> günlük dosyasının ismi belirtilir.
                Öntanımlı olarak bu dosyanın ismi <code>suexec_log</code> olup
                <code>--logfiledir</code> seçeneği ile belirtilen dizin altında
                bulunur.</dd>
      
              <dt><code>--with-suexec-safepath</code></dt>
              <dd><code class="program"><a href="../programs/suexec.html">suexec</a></code> tarafından çalıştırılacak süreçlerin
                çalıştırılabilirlerinin bulunabileceği dizinleri <code>PATH</code>
                ortam değişkenine tanımlamak için kullanılır.
                <code>/usr/local/bin:/usr/bin:/bin</code> öntanımlıdır.</dd>
      
              <dt><code>--with-suexec-userdir</code></dt>
              <dd>Bu seçenek, kullanıcı dizinleri altında <code class="program"><a href="../programs/suexec.html">suexec</a></code>
                tarafından çalıştırılacak süreçlerin çalıştırılabilirlerinin
                bulunabileceği alt dizini tanımlar. <code class="program"><a href="../programs/suexec.html">suexec</a></code>
                programını (<code class="module"><a href="../mod/mod_userdir.html">mod_userdir</a></code> tarafından sağlanan)
                kullanıcıya özel dizinlerde  kullanmak istediğinizde bu gereklidir.
                <code>public_html</code> alt dizini öntanımlıdır.</dd>
      
              <dt><code>--with-suexec-uidmin</code></dt>
              <dd><code class="program"><a href="../programs/suexec.html">suexec</a></code> için hedef kullanıcı olmasına izin
                verilen en küçük kullanıcı kimliğini tanımlamak için kullanılır.
                100 öntanımlıdır.</dd>
      
              <dt><code>--with-suexec-umask</code></dt>
              <dd><code class="program"><a href="../programs/suexec.html">suexec</a></code> tarafından çalıştırılacak süreçler için
                <code>umask</code> tanımlar. Sisteminiz için geçerli ayarlar
                öntanımlıdır.</dd>
            </dl>
          
        
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="env" id="env">Ortam DeÄŸiÅŸkenleri</a></h2>
        <p><code>configure</code> betiÄŸinin yerleri ve isimleri standartlara uygun
          olmayan kütüphaneleri ve programları bulmasını yardımcı olan veya
          <code>configure</code> betiği tarafından yapılan bazı seçimleri
          değiştirmenizi sağlayacak bazı ortam değişkenleri vardır.</p>
      
        
        <dl>
          <dt><code>CC</code></dt>
          <dd>Bu değişkenle derleme sırasında kullanılacak C derleyici komutu
            tanımlanır.</dd>
      
          <dt><code>CFLAGS</code></dt>
          <dd>Bu değişkenle derleme sırasında kullanılacak C derleyici seçenekleri
            tanımlanır.</dd>
      
          <dt><code>CPP</code></dt>
          <dd>Bu değişkenle derleme sırasında kullanılacak C önişlemci komutu
            tanımlanır.</dd>
      
          <dt><code>CPPFLAGS</code></dt>
          <dd>C/C++ önişlemci seçenekleri tanımlanır. Örneğin, eğer başlık
            dosyaları standart yerlerinde değil de
            <code><var>includedir</var></code> dizinindeyse bunu
            <code>-I<var>includedir</var></code> seçeneği olarak
            belirtebilirsiniz.</dd>
      
          <dt><code>LDFLAGS</code></dt>
          <dd>İlintileyici seçenekleri tanımlanır. Örneğin, eğer kütüphane
            dosyalarınız standart yerlerinde değil de
            <code><var>libdir</var></code> dizinindeyse bunu
            <code>-L<var>libdir</var></code> seçeneği olarak belirtebilirsiniz.</dd>
        </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/configure.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/configure.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/configure.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/configure.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/configure.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>httpd-2.4.41/docs/manual/programs/htdigest.html�����������������������������������������������������0000644�0000000�0000050�00000000607�13362070302�017773� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: htdigest.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: htdigest.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: htdigest.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: htdigest.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/index.html.fr.utf8������������������������������������������������0000644�0000000�0000050�00000015622�13412755316�020600� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Le serveur et ses utilitaires - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Le serveur et ses utilitaires</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/programs/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/programs/" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/programs/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
          <p>Cette page documente tous les utilitaires inclus
          dans le serveur HTTP Apache.</p>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="index" id="index">Index</a></h2>
      
          <dl>
            <dt><code class="program"><a href="../programs/httpd.html">httpd</a></code></dt>
      
            <dd>Le serveur de protocole de transfert hypertexte Apache</dd>
      
            <dt><code class="program"><a href="../programs/apachectl.html">apachectl</a></code></dt>
      
            <dd>L'interface de contrôle du serveur HTTP Apache</dd>
      
            <dt><code class="program"><a href="../programs/ab.html">ab</a></code></dt>
      
            <dd>L'outil de test de performances du serveur HTTP Apache</dd>
      
            <dt><code class="program"><a href="../programs/apxs.html">apxs</a></code></dt>
      
            <dd>L'outil de gestion des extensions Apache</dd>
      
            <dt><code class="program"><a href="../programs/configure.html">configure</a></code></dt>
      
            <dd>Configuration de l'arborescence des sources</dd>
      
            <dt><code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code></dt>
      
            <dd>Crée et met à jour les fichiers d'authentification utilisateurs au
            format DBM pour une authentification basique</dd>
      
            <dt><code class="program"><a href="../programs/fcgistarter.html">fcgistarter</a></code></dt>
      
            <dd>Lance un programme fastcgi</dd>
      
            <dt><code class="program"><a href="../programs/htcacheclean.html">htcacheclean</a></code></dt>
      
            <dd>Nettoie le cache sur disque</dd>
      
            <dt><code class="program"><a href="../programs/htdigest.html">htdigest</a></code></dt>
      
            <dd>Crée et met à jour les fichiers d'authentification pour une
            authentification sommaire</dd>
      
            <dt><code class="program"><a href="../programs/htdbm.html">htdbm</a></code></dt>
      
            <dd>Manipulation des bases de données DBM des mots de passe.</dd>
      
            <dt><code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code></dt>
      
            <dd>Crée et met à jour les fichiers d'authentification pour une
            authentification basique</dd>
      
            <dt><code class="program"><a href="../programs/httxt2dbm.html">httxt2dbm</a></code></dt>
      
            <dd>Crée des fichiers dbm destinés à être utilisés avec
            RewriteMap</dd>
      
            <dt><code class="program"><a href="../programs/logresolve.html">logresolve</a></code></dt>
      
            <dd>Résolution des noms d'hôtes en adresses IP dans les fichiers
            de traces d'Apache</dd>
      
            <dt><a href="other.html#log_server_status">log_server_status</a></dt>
      
             <dd>Journalisation périodique du statut du serveur</dd>
      
            <dt><code class="program"><a href="../programs/rotatelogs.html">rotatelogs</a></code></dt>
      
            <dd>Rotation des traces d'Apache sans devoir arrêter le serveur</dd>
      
            <dt><code class="program"><a href="../programs/split-logfile.html">split-logfile</a></code></dt>
      
             <dd>Divise un journal pour plusieurs hôtes virtuels en journaux
             spécifiques à chaque hôte</dd>
      
            <dt><code class="program"><a href="../programs/suexec.html">suexec</a></code></dt>
      
            <dd>Change d'utilisateur pour l'exécution de certains programmes</dd>
      
          </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/programs/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/programs/" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/programs/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/other.html��������������������������������������������������������0000644�0000000�0000050�00000000573�13362070302�017303� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: other.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: other.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: other.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: other.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/log_server_status.html.fr.utf8������������������������������������0000644�0000000�0000050�00000014356�13412755316�023246� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>log_server_status - Enregistrement périodique de l'état du serveur - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>log_server_status - Enregistrement périodique de l'état du serveur</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/log_server_status.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/log_server_status.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>Ce script perl a été conçu pour être exécuté à intervalles
          réguliers via un déclencheur de type cron. Il se connecte au serveur
          pour en extraire des informations quant à son état. Il formate ces
          informations sous la forme d'une seule ligne qu'il enregistre dans
          un fichier. Vous devez éditer la valeur des variables en tête de
          script afin de définir le chemin du fichier de sortie. Pour que ce
          script puisse fonctionner, <code class="module"><a href="../mod/mod_status.html">mod_status</a></code> doit au
          préalable être chargé et configuré.</p>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configure" id="configure">Mode d'emploi</a></h2>
      
      <p>Le script contient les sections suivantes :</p>
      
      <pre class="prettyprint lang-perl">my $wherelog = "/usr/local/apache2/logs/";  # Le fichier de sortie sera
      					# du style "/usr/local/apache2/logs/19960312"
      my $server   = "localhost";        # Nom du serveur, par exemple "www.foo.com"
      my $port     = "80";               # Port d'écoute du serveur
      my $request = "/server-status/?auto";    # Requête à soumettre</pre>
      
      
      <p>Ces variables doivent contenir des valeurs correctes, et le
      gestionnaire <code>/server-status</code> doit être configuré pour le
      répertoire considéré. En outre, l'utilisateur qui exécute le script doit
      avoir les droits d'écriture sur le chemin du fichier de sortie.</p>
      
      <p>L'exécution périodique du script via cron permet d'obtenir un jeu de
      rapports d'état qui pourra être utilisé à des fins d'analyse
      statistique.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/log_server_status.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/log_server_status.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/log_server_status.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/index.html.en�����������������������������������������������������0000644�0000000�0000050�00000015135�13412755316�017705� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Server and Supporting Programs - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Server and Supporting Programs</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/programs/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/programs/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/programs/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
          <p>This page documents all the executable programs included
          with the Apache HTTP Server.</p>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="index" id="index">Index</a></h2>
      
          <dl>
            <dt><code class="program"><a href="../programs/httpd.html">httpd</a></code></dt>
      
            <dd>Apache hypertext transfer protocol server</dd>
      
            <dt><code class="program"><a href="../programs/apachectl.html">apachectl</a></code></dt>
      
            <dd>Apache HTTP server control interface</dd>
      
            <dt><code class="program"><a href="../programs/ab.html">ab</a></code></dt>
      
            <dd>Apache HTTP server benchmarking tool</dd>
      
            <dt><code class="program"><a href="../programs/apxs.html">apxs</a></code></dt>
      
            <dd>APache eXtenSion tool</dd>
      
            <dt><code class="program"><a href="../programs/configure.html">configure</a></code></dt>
      
            <dd>Configure the source tree</dd>
      
            <dt><code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code></dt>
      
            <dd>Create and update user authentication files in DBM format
            for basic authentication</dd>
      
            <dt><code class="program"><a href="../programs/fcgistarter.html">fcgistarter</a></code></dt>
      
            <dd>Start a FastCGI program</dd>
      
            <dt><code class="program"><a href="../programs/htcacheclean.html">htcacheclean</a></code></dt>
      
            <dd>Clean up the disk cache</dd>
      
            <dt><code class="program"><a href="../programs/htdigest.html">htdigest</a></code></dt>
      
            <dd>Create and update user authentication files for digest
            authentication</dd>
      
            <dt><code class="program"><a href="../programs/htdbm.html">htdbm</a></code></dt>
      
            <dd>Manipulate DBM password databases.</dd>
      
            <dt><code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code></dt>
      
            <dd>Create and update user authentication files for basic
            authentication</dd>
      
            <dt><code class="program"><a href="../programs/httxt2dbm.html">httxt2dbm</a></code></dt>
      
            <dd>Create dbm files for use with RewriteMap</dd>
      
            <dt><code class="program"><a href="../programs/logresolve.html">logresolve</a></code></dt>
      
            <dd>Resolve hostnames for IP-addresses in Apache
            logfiles</dd>
      
            <dt><code class="program"><a href="../programs/log_server_status.html">log_server_status</a></code></dt>
      
            <dd>Periodically log the server's status</dd>
      
            <dt><code class="program"><a href="../programs/rotatelogs.html">rotatelogs</a></code></dt>
      
            <dd>Rotate Apache logs without having to kill the server</dd>
      
            <dt><code class="program"><a href="../programs/split-logfile.html">split-logfile</a></code></dt>
      
            <dd>Split a multi-vhost logfile into per-host logfiles</dd>
      
            <dt><code class="program"><a href="../programs/suexec.html">suexec</a></code></dt>
      
            <dd>Switch User For Exec</dd>
      
          </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/programs/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/programs/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/programs/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/suexec.html�������������������������������������������������������0000644�0000000�0000050�00000000577�13362070302�017462� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: suexec.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: suexec.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: suexec.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: suexec.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ���������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/apachectl.html.en�������������������������������������������������0000644�0000000�0000050�00000026562�13412755316�020530� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>apachectl - Apache HTTP Server Control Interface - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>apachectl - Apache HTTP Server Control Interface</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/apachectl.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apachectl.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apachectl.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apachectl.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
           <p><code>apachectl</code> is a front end to the Apache HyperText
           Transfer Protocol (HTTP) server.  It is designed to help the
           administrator control the functioning of the Apache
           <code class="program"><a href="../programs/httpd.html">httpd</a></code> daemon.</p>
      
           <p>The <code>apachectl</code> script can operate in two modes.
           First, it can act as a simple front-end to the <code class="program"><a href="../programs/httpd.html">httpd</a></code>
           command that simply sets any necessary environment variables and
           then invokes <code class="program"><a href="../programs/httpd.html">httpd</a></code>, passing through any command line
           arguments.  Second, <code>apachectl</code> can act as a SysV init
           script, taking simple one-word arguments like <code>start</code>,
           <code>restart</code>, and <code>stop</code>, and translating them
           into appropriate signals to <code class="program"><a href="../programs/httpd.html">httpd</a></code>.</p>
      
           <p>If your Apache installation uses non-standard paths, you will
           need to edit the <code>apachectl</code> script to set the
           appropriate paths to the <code class="program"><a href="../programs/httpd.html">httpd</a></code> binary.  You can also
           specify any necessary <code class="program"><a href="../programs/httpd.html">httpd</a></code> command line arguments.
           See the comments in the script for details.</p>
      
           <p>The <code>apachectl</code> script returns a 0 exit value on
           success, and &gt;0 if an error occurs.  For more details, view
           the comments in the script.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="../invoking.html">Starting Apache</a></li><li><a href="../stopping.html">Stopping Apache</a></li><li><a href="../configuring.html">Configuration Files</a></li><li><a href="../platform/">Platform Docs</a></li><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
      
      <p>When acting in pass-through mode, <code>apachectl</code> can take
      all the arguments available for the <code class="program"><a href="../programs/httpd.html">httpd</a></code>
      binary.</p>
      
      <p><code><strong>apachectl</strong> [ <var>httpd-argument</var> ]</code></p>
      
      <p>When acting in SysV init mode, <code>apachectl</code> takes simple,
      one-word commands, defined below.</p>
      
      <p><code><strong>apachectl</strong> <var>command</var></code></p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
      
      <p>Only the SysV init-style options are defined here.  Other arguments
      are defined on the <code class="program"><a href="../programs/httpd.html">httpd</a></code> manual page.</p>
      
      <dl>
      
      <dt><code>start</code></dt>
      
      <dd>Start the Apache <code class="program"><a href="../programs/httpd.html">httpd</a></code> daemon.  Gives an error if it
      is already running.  This is equivalent to <code>apachectl -k
      start</code>.</dd>
      
      <dt><code>stop</code></dt>
      
      <dd>Stops the Apache <code class="program"><a href="../programs/httpd.html">httpd</a></code> daemon.  This is equivalent to
      <code>apachectl -k stop</code>.</dd>
      
      <dt><code>restart</code></dt>
      
      <dd>Restarts the Apache <code class="program"><a href="../programs/httpd.html">httpd</a></code> daemon.  If the daemon is
      not running, it is started.  This command automatically checks the
      configuration files as in <code>configtest</code> before initiating
      the restart to make sure the daemon doesn't die.  This is equivalent
      to <code>apachectl -k restart</code>.</dd>
      
      <dt><code>fullstatus</code></dt>
      
      <dd>Displays a full status report from <code class="module"><a href="../mod/mod_status.html">mod_status</a></code>.
      For this to work, you need to have <code class="module"><a href="../mod/mod_status.html">mod_status</a></code> enabled
      on your server and a text-based browser such as <code>lynx</code>
      available on your system.  The URL used to access the status report
      can be set by editing the <code>STATUSURL</code> variable in the
      script.</dd>
      
      <dt><code>status</code></dt>
      
      <dd>Displays a brief status report.  Similar to the
      <code>fullstatus</code> option, except that the list of requests
      currently being served is omitted.</dd>
      
      <dt><code>graceful</code></dt>
      
      <dd>Gracefully restarts the Apache <code class="program"><a href="../programs/httpd.html">httpd</a></code> daemon.  If the
      daemon is not running, it is started.  This differs from a normal
      restart in that currently open connections are not aborted.  A side
      effect is that old log files will not be closed immediately.  This
      means that if used in a log rotation script, a substantial delay may
      be necessary to ensure that the old log files are closed before
      processing them.  This command automatically checks the configuration
      files as in <code>configtest</code> before initiating the
      restart to make sure Apache doesn't die.  This is equivalent to
      <code>apachectl -k graceful</code>.</dd>
      
      <dt><code>graceful-stop</code></dt>
      
      <dd>Gracefully stops the Apache <code class="program"><a href="../programs/httpd.html">httpd</a></code> daemon.
      This differs from a normal stop in that currently open connections are not
      aborted.  A side effect is that old log files will not be closed immediately.
      This is equivalent to <code>apachectl -k graceful-stop</code>.</dd>
      
      <dt><code>configtest</code></dt>
      
      <dd>Run a configuration file syntax test. It parses the configuration
      files and either reports <code>Syntax Ok</code>
      or detailed information about the particular syntax error.  This is
      equivalent to <code>apachectl -t</code>.</dd>
      
      </dl>
      
      <p>The following option was available in earlier versions but has been removed.</p>
      
      <dl>
      
      <dt><code>startssl</code></dt>
      
      <dd>To start <code class="program"><a href="../programs/httpd.html">httpd</a></code> with SSL support, you should edit
      your configuration file to include the relevant directives and then
      use the normal <code>apachectl start</code>.</dd>
      
      </dl>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/apachectl.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apachectl.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apachectl.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apachectl.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/apachectl.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htdigest.html.fr.utf8���������������������������������������������0000644�0000000�0000050�00000021050�13412755316�021274� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htdigest - Gestion des fichiers d'utilisateurs pour
      l'authentification à base de condensés - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>htdigest - Gestion des fichiers d'utilisateurs pour
      l'authentification à base de condensés</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/htdigest.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htdigest.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htdigest.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htdigest.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>htdigest</code> permet de créer et maintenir les fichiers
          textes dans lesquels sont stockés des noms d'utilisateurs, des
          domaines de protection (realms) et des mots de passe pour
          l'authentification à base de condensés des utilisateurs HTTP.
          L'accès aux ressources du serveur HTTP Apache peut être limité aux
          seuls utilisateurs enregistrés dans les fichiers créés par
          <code>htdigest</code>.</p>
      
          <p>Cette page de manuel ne décrit que les arguments de la ligne de
          commande. Pour plus de détails à propos des directives nécessaires à
          la configuration de l'authentification à base de condensés dans
          <code class="program"><a href="../programs/httpd.html">httpd</a></code>, voir le manuel Apache qui est fourni avec
          la distribution et peut être consulté à <a href="http://httpd.apache.org/">http://httpd.apache.org/</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Syntaxe</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#security">Considérations à propos de sécurité</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Syntaxe</a></h2>
          <p><code><strong>htdigest</strong> [ -<strong>c</strong> ]
          <var>fichier-mots-de-passe</var> <var>realm</var>
          <var>nom-utilisateur</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">options</a></h2>
          <dl>
          <dt><code>-c</code></dt>
          <dd>Crée le fichier <var>fichier-mots-de-passe</var>. Si
          <var>fichier-mots-de-passe</var> existe déjà, il est tout d'abord
          supprimé.</dd>
      
          <dt><code><var>fichier-mots-de-passe</var></code></dt>
          <dd>Nom du fichier contenant les noms utilisateurs, realms et mots
          de passe. Si l'option <code>-c</code> est spécifiée, le fichier est
          créé s'il n'existe pas, ou supprimé et recréé s'il existe
          déjà.</dd>
      
          <dt><code><var>realm</var></code></dt>
          <dd>Le nom du domaine de protection auquel le nom d'utilisateur
          appartient. Voir <a href="http://tools.ietf.org/html/rfc2617#section-3.2.1">http://tools.ietf.org/html/rfc2617#section-3.2.1</a>
          pour plus de détails.</dd>
      
          <dt><code><var>nom-utilisateur</var></code></dt>
          <dd>Le nom d'utilisateur à créer ou mettre à jour dans le
          <var>fichier-mots-de-passe</var>. Si <var>nom-utilisateur</var> est
          absent de ce fichier, une nouvelle entrée est ajoutée. Si
          l'utilisateur existe déjà, le mot de passe est modifié.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">Considérations à propos de sécurité</a></h2>
          <p>En tant qu'exécutable setuid, ce programme n'est pas sûr. En
          conséquence, évitez de lui attribuer des permissions setuid.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/htdigest.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htdigest.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htdigest.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htdigest.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htdigest.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/rotatelogs.html.fr.utf8�������������������������������������������0000644�0000000�0000050�00000041767�13412755316�021665� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>rotatelogs - Rotation des journaux d'Apache par redirection de
        ces derniers dans un "pipe" - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>rotatelogs - Rotation des journaux d'Apache par redirection de
        ces derniers dans un "pipe"</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/rotatelogs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/rotatelogs.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/rotatelogs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/rotatelogs.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
           <p><code>rotatelogs</code> est un programme simple à utiliser en
           conjonction avec la fonctionnalité d'Apache de redirection dans un
           "pipe" des fichiers journaux. Il supporte une rotation basée sur un
           intervalle de temps ou une taille maximale du journal.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Syntaxe</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Exemples</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#portability">Portabilité</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Syntaxe</a></h2>
      
           <p><code><strong>rotatelogs</strong>
           [ -<strong>l</strong> ]
           [ -<strong>L</strong> <var>nom-lien</var> ]
           [ -<strong>p</strong> <var>programme</var> ]
           [ -<strong>f</strong> ]
           [ -<strong>D</strong> ]
           [ -<strong>t</strong> ]
           [ -<strong>v</strong> ]
           [ -<strong>e</strong> ]
           [ -<strong>c</strong> ]
           [ -<strong>n</strong> <var>nombre-de-fichiers</var> ]
           <var>fichier-journal</var>
           <var>heure-de-rotation</var>|<var>taille-fichier</var>(B|K|M|G)
           [ <var>décalage</var> ]</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
      
      <dl>
      
      <dt><code>-l</code></dt>
      <dd>Utilise le temps local plutôt que GMT comme base pour l'intervalle
      de temps ou pour le formatage de <code>strftime(3)</code> avec une
      rotation basée sur la taille.</dd>
      
      <dt><code>-L</code> <var>nom-lien</var></dt>
      <dd>Etablit un lien physique entre le fichier journal courant et le lien
      spécifié. Cette option permet de consulter le journal de manière
      continue malgré les rotations via une commande du style <code>tail -F
      nom-lien</code>.</dd>
      
      <dt><code>-p</code> <var>programme</var></dt>
      <dd>Avec cette option, <code>rotatelogs</code> exécutera le programme
      <var>programme</var> chaque fois qu'un nouveau fichier journal sera
      ouvert. Le nom du fichier nouvellement ouvert est passé comme premier
      argument au programme. Si l'exécution se produit après une rotation,
      l'ancien nom du fichier journal est passé au programme comme second
      argument. <code>rotatelogs</code>
      n'attend pas la fin du <var>programme</var> pour continuer son
      exécution, et cessera tout enregistrement de codes d'erreur lorsqu'il
      aura terminé son processus. Le <var>programme</var> utilise les mêmes
      canaux stdin, stdout, et stderr que rotatelogs, et hérite de son
      environnement.</dd>
      
      <dt><code>-f</code></dt>
      <dd>Ouvre le fichier journal immédiatement, dès que
      <code>rotatelogs</code> démarre, au lieu d'attendre la lecture de la
      première entrée de journal (pour les sites peu chargés, il peut
      s'écouler un temps substantiel entre le démarrage du serveur et le
      traitement de la première requête, temps pendant lequel le fichier
      journal associé n'"existe" pas, ce qui peut causer des problèmes à
      certains utilitaires de journalisation automatiques).</dd>
      
      <dt><code>-D</code></dt>
      <dd>Crée les répertoires parents du répertoire dans lequel le fichier journal
      sera placé s'ils n'existent pas déjà. Cela permet d'utiliser le formatage
      <code>strftime(3)</code> non seulement dans le nom de fichier mais aussi dans le
      chemin.</dd>
      
      <dt><code>-t</code></dt>
      <dd>Provoque une troncature du fichier journal au lieu d'une rotation.
      Cela peut s'avérer utile lorsqu'un journal est élaboré en temps réel par
      une commande telle que tail, l'archivage des données n'étant ici pas
      nécessaire. Si aucun suffixe n'est ajouté au nom de fichier, les
      chaînes de format contenant des caractères '%' sont cependant
      respectées.
      </dd>
      
      <dt><code>-v</code></dt>
      <dd>Affiche une sortie verbeuse sur STDERR. La sortie contient le
      résultat de l'interprétation de la configuration, ainsi que toutes les
      opérations d'ouverture et de fermeture de fichiers.</dd>
      
      <dt><code>-c</code></dt>
      <dd>Crée un fichier journal pour chaque intervalle, même s'il est vide.</dd>
      
      <dt><code>-e</code></dt>
      <dd>Envoie les messages de journalisation vers stdout. Ceci s'avère
      utile lorsque les journaux doivent être traités par un autre programme.</dd>
      
      <dt><code>-n <var>nombre-de-fichiers</var></code></dt>
      <dd>Utilise une liste circulaire de fichiers sans repères de temps. Avec
      -n 3, la série de fichiers conservés sera "logfile",
      "logfile.1", "logfile.2" avec écrasement de "logfile".
      Disponible à partir de la version 2.4.5 du serveur HTTP Apache.</dd>
      
      <dt><code><var>fichier-journal</var></code></dt>
      <dd><p>Le chemin et le nom de base du fichier journal. Si
      <var>fichier-journal</var> contient des caractères '%', il est considéré
      comme une chaîne de formatage pour <code>strftime(3)</code>. Dans le cas
      contraire, le suffixe <var>.nnnnnnnnnn</var> est automatiquement ajouté
      et correspond au temps en secondes (sauf si l'option -t est spécifiée).
      Les deux formats calculent le temps
      de démarrage depuis le début de la période courante. Par exemple, si un
      temps de rotation de 86400 est spécifié, les champs heure, minute et
      seconde créés à partir du format <code>strftime(3)</code> auront tous
      pour valeur 0, en référence au début de la période de 24 heures courante
      (minuit).</p>
      <p>Si vous utilisez le formatage de noms de fichiers
      <code>strftime(3)</code>, assurez-vous que le format du fichier journal
      possède une granularité suffisamment importante pour générer un nom de
      fichier différent à chaque rotation des journaux. Si ce n'est pas le
      cas, la rotation va écraser le fichier existant au lieu d'en générer un
      nouveau. Par exemple, si <var>fichier-journal</var> était
      <code>/var/log/errorlog.%Y-%m-%d</code> avec une rotation à 5
      mégaoctets, et si la limite de 5 mégaoctets a été atteinte deux fois
      dans la même journée, le même nom de fichier va être généré, et la
      rotation va écraser le fichier existant.</p>
      </dd>
      
      <dt><code><var>temps-rotation</var></code></dt>
      
      <dd>Le temps entre deux rotations des fichiers journaux en secondes. La
      rotation intervient au début de cet intervalle. Par exemple, si le temps
      de rotation est de 3600, la rotation des fichiers journaux s'effectuera
      au début de chaque heure ; si le temps de rotation est de 86400, la
      rotation des fichiers journaux s'effectuera chaque nuit à minuit. (Si
      aucune donnée n'est enregistrée au cours d'un intervalle, aucun fichier
      ne sera créé).</dd>
      
      <dt><code><var>taille-fichier</var>(B|K|M|G)</code></dt>
      
      <dd>La taille maximale du fichier suivie par une des lettres
      <code>B</code> (Octets), <code>K</code> (KOctets), <code>M</code> (MOctets)
      ou <code>G</code> (GOctets).
      <p>
      Lorsque temps et taille sont spécifiés, la taille doit l'être après le
      temps. La rotation interviendra alors aussitôt que l'une des deux limites
      (temps ou taille) sera atteinte.
      </p>
      </dd>
      
      <dt><code><var>décalage</var></code></dt>
      
      <dd>Le décalage en minutes par rapport au temps UTC. Par défaut, le
      décalage est considéré comme nul et c'est le temps UTC qui est utilisé.
      Par exemple, pour utiliser le temps local de la zone UTC -5 heures,
      spécifiez une valeur de <code>-300</code> pour cette option. Dans la
      plupart des cas, il vaut mieux utiliser l'option <code>-l</code> que
      spécifier un décalage.</dd>
      
      </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Exemples</a></h2>
      
      <div class="example"><p><code>
           CustomLog "|bin/rotatelogs /var/log/fichier-journal 86400" common
      </code></p></div>
      
           <p>Cette directive crée les fichiers /var/log/fichier-journal.nnnn
           où nnnn correspond au temps système auquel la journalisation
           démarre effectivement (ce temps sera toujours un multiple du temps
           de rotation, si bien que vous pouvez synchroniser les scripts cron
           avec lui). A la fin de chaque temps de rotation (ici après 24
           heures), une nouvelle journalisation démarre.</p>
      
      <div class="example"><p><code>
           CustomLog "|bin/rotatelogs -l /var/log/fichier-journal.%Y.%m.%d 86400" common
      </code></p></div>
      
           <p>Cette directive crée les fichiers
           /var/log/fichier-journal.yyyy.mm.dd où yyyy correspond à l'année,
           mm au mois et dd au jour du mois. La journalisation basculera vers
           un nouveau fichier chaque jour à minuit, temps local.</p>
      
      <div class="example"><p><code>
           CustomLog "|bin/rotatelogs /var/log/fichier-journal 5M" common
      </code></p></div>
      
           <p>Cette directive va effectuer une rotation du fichier journal
           chaque fois que la taille de ce dernier atteindra 5 MOctets.</p>
      
      <div class="example"><p><code>
           ErrorLog "|bin/rotatelogs /var/log/journal-erreurs.%Y-%m-%d-%H_%M_%S 5M"
      </code></p></div>
           <p>Cette directive va effectuer une rotation du fichier journal des
           erreurs chaque fois que la taille de ce dernier atteindra 5
           MOctets, et le nom du fichier journal se présentera sous
           la forme <code>journal-erreurs.YYYY-mm-dd-HH_MM_SS</code>.</p>
      
      <div class="example"><p><code>
           CustomLog "|bin/rotatelogs -t /var/log/journal 86400" common
      </code></p></div>
      
           <p>Cet exemple crée le fichier /var/log/journal en le tronquant
           au démarrage, puis une fois par jour. Ce scénario implique qu'un
           processus séparé (tel que tail) traite le fichier en temps
           réel.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="portability" id="portability">Portabilité</a></h2>
      
      <p>Les substitutions des chaînes de format du fichier journal suivantes
      doivent être supportées par toutes les implémentations de
      <code>strftime(3)</code> ; voir la page de manuel de
      <code>strftime(3)</code> pour les extensions spécifiques à une
      bibliothèque.</p>
      
      <table class="bordered"><tr><td><code>%A</code></td><td>nom du jour de la semaine en entier
      (localisé)</td></tr>
      <tr class="odd"><td><code>%a</code></td><td>nom du jour de la semaine sur 3
      caractères (localisé)</td></tr>
      <tr><td><code>%B</code></td><td>nom du mois en entier (localisé)</td></tr>
      <tr class="odd"><td><code>%b</code></td><td>nom du mois sur 3 caractères (localisé)</td></tr>
      <tr><td><code>%c</code></td><td>date et heure (localisé)</td></tr>
      <tr class="odd"><td><code>%d</code></td><td>jour du mois sur 2 chiffres</td></tr>
      <tr><td><code>%H</code></td><td>heure sur 2 chiffres (de 0 à 24h)</td></tr>
      <tr class="odd"><td><code>%I</code></td><td>heure sur 2 chiffres (de 0 à 12h)</td></tr>
      <tr><td><code>%j</code></td><td>jour de l'année sur 3 chiffres</td></tr>
      <tr class="odd"><td><code>%M</code></td><td>minutes sur 2 chiffres</td></tr>
      <tr><td><code>%m</code></td><td>mois sur 2 chiffres</td></tr>
      <tr class="odd"><td><code>%p</code></td><td>suffixe am/pm pour l'heure de 0 à 12h
      (localisé)</td></tr>
      <tr><td><code>%S</code></td><td>secondes sur 2 chiffres</td></tr>
      <tr class="odd"><td><code>%U</code></td><td>semaine de l'année sur 2 chiffres
      (Dimanche est le premier jour de la semaine)</td></tr>
      <tr><td><code>%W</code></td><td> semaine de l'année sur 2 chiffres
      (Lundi est le premier jour de la semaine)</td></tr>
      <tr class="odd"><td><code>%w</code></td><td>jour de la semaine sur 1 chiffre
      (Dimanche est le premier jour de la semaine)</td></tr>
      <tr><td><code>%X</code></td><td>heure (localisée)</td></tr>
      <tr class="odd"><td><code>%x</code></td><td>date (localisée)</td></tr>
      <tr><td><code>%Y</code></td><td>année sur 4 chiffres</td></tr>
      <tr class="odd"><td><code>%y</code></td><td>année sur 2 chiffres</td></tr>
      <tr><td><code>%Z</code></td><td>nom de la zone de temps</td></tr>
      <tr class="odd"><td><code>%%</code></td><td>caractère littéral `%'</td></tr>
      </table>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/rotatelogs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/rotatelogs.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/rotatelogs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/rotatelogs.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/rotatelogs.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������httpd-2.4.41/docs/manual/programs/split-logfile.html.fr.utf8����������������������������������������0000644�0000000�0000050�00000014152�13412755316�022240� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>split-logfile - Eclatement des journaux en fonction des serveurs
      virtuels - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>split-logfile - Eclatement des journaux en fonction des serveurs
      virtuels</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/split-logfile.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/split-logfile.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>Ce script perl permet d'extraire un journal pour chaque serveur
          virtuel à partir d'un journal d'accès global du serveur web. Pour
          que ce script fonctionne, le premier champ de chaque ligne du
          journal global doit contenir l'identité du serveur virtuel ; ce
          champ aura été ajouté à la directive <code class="directive"><a href="../mod/mod_log_config.html#logformat">LogFormat</a></code> via la variable
          "<code>%v</code>".
          </p>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="split-logfile" id="split-logfile">Mode d'emploi</a></h2>
      
          <p>Création d'un fichier journal comportant l'identité du serveur
          virtuel considéré :</p>
      
          <pre class="prettyprint lang-config">LogFormat "%v %h %l %u %t \"%r\" %&gt;s %b \"%{Referer}i\" \"%{User-agent}i\"" combined_plus_vhost
      CustomLog logs/access_log combined_plus_vhost</pre>
      
      
          <p>Un fichier journal sera créé dans le répertoire à partir duquel
          vous exécutez le script pour chaque serveur virtuel qui apparaît
          dans le journal global. Ces fichiers journaux seront nommés à partir
          du nom du serveur virtuel considéré, avec l'extension
          <code>.log</code>.</p>
      
          <p>Le fichier journal global est lu depuis l'entrée standard stdin.
          Les entrées de ce journal sont alors ajoutées au journal du serveur
          virtuel correspondant.</p>
      
          <div class="example"><p><code>split-logfile &lt; access_log</code></p></div>
      
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/split-logfile.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/split-logfile.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/split-logfile.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/httxt2dbm.html����������������������������������������������������0000644�0000000�0000050�00000000457�13362070302�020103� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: httxt2dbm.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: httxt2dbm.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: httxt2dbm.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/other.html.fr.utf8������������������������������������������������0000644�0000000�0000050�00000012406�13412755316�020607� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Autres programmes - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>Autres programmes</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/other.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/other.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/other.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/other.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Cette page contenait la documentation de programmes qui possèdent
          maintenant leurs propres pages de documentation. Merci de bien
          vouloir mettre à jour vos liens.</p>
      
          <p><code class="program"><a href="../programs/log_server_status.html">log_server_status</a></code></p>
          <p><code class="program"><a href="../programs/split-logfile.html">split-logfile</a></code></p>
      </div>
      </div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/other.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/other.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/other.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/other.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/other.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/httxt2dbm.html.tr.utf8��������������������������������������������0000644�0000000�0000050�00000017772�13447004010�021421� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>httxt2dbm - RewriteMap ile kullanmak için DBM dosyaları üretir - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>httxt2dbm - RewriteMap ile kullanmak için DBM dosyaları üretir</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/httxt2dbm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/httxt2dbm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/httxt2dbm.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code><strong>httxt2dbm</strong></code>, <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> ile kullanmak için düz metin
          dosyalardan DBM dosyaları üretir.</p>
      
          <p>Çıktı dosyası mevcutsa dosya kırpılmaz. Yeni anahtarlar eklenir,
          mevcutlar da güncellenir.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Kullanım</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Örnekler</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Kullanım</a></h2>
          <p><code><strong>httxt2dbm</strong>
          [ -<strong>v</strong> ]
          [ -<strong>f</strong> <var>DBM_türü</var> ]
          -<strong>i</strong> <var>kaynak_metin</var>
          -<strong>o</strong> <var>çıktı_DBM</var>
          </code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
          <dl>
          <dt><code><strong>-v</strong></code></dt>
          <dd>Çıktı daha ayrıntılı olur.</dd>
      
          <dt><code><strong>-f</strong> <var>DBM_türü</var></code></dt>
          <dd>Çıktı için kullanılacak DBM türü belirtilir. Belirtilmediği takdirde
          <a class="glossarylink" href="../glossary.html#apr" title="sözlüğe bakınız">APR</a> öntanımlısı kullanılır. Belirtilebilecek DBM
          türleri:
          GDBM dosyalar için <code>GDBM</code>,
          SDBM dosyalar için <code>SDBM</code>,
          Berkeley DB dosyalar için <code>DB</code>,
          NDBM dosyalar için <code>NDBM</code>,
          öntanımlı DBM türü için <code>default</code>
          </dd>
      
          <dt><code><strong>-i</strong> <var>kaynak_metin</var></code></dt>
          <dd>DBM dosyasının üretiminde kullanılacak girdi dosyası belirtilir. Bu
          dosya, her satırda bir kayıt bulunmak üzere her satırı şöyle biçemlenmiş
          olmalıdır:
          <code>anahtar deÄŸer</code>.
          Bu dosyanın biçemi ve manası ile ilgili ayrıntılar için <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> yönergesinin açıklamasına
          bakınız.
          </dd>
      
          <dt><code><strong>-o</strong>  <var>çıktı_DBM</var></code></dt>
          <dd>Çıktılanacak DBM dosyasının ismi belirtilir.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Örnekler</a></h2>
          <div class="example"><p><code>
            httxt2dbm -i rewritemap.txt -o rewritemap.dbm<br />
            httxt2dbm -f SDBM -i rewritemap.txt -o rewritemap.dbm<br />
          </code></p></div>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/httxt2dbm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/httxt2dbm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/httxt2dbm.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/httxt2dbm.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������httpd-2.4.41/docs/manual/programs/htdbm.html��������������������������������������������������������0000644�0000000�0000050�00000000443�13362070302�017254� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: htdbm.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: htdbm.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: htdbm.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/httpd.html.en�����������������������������������������������������0000644�0000000�0000050�00000027721�13412755316�017725� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>httpd - Apache Hypertext Transfer Protocol Server - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>httpd - Apache Hypertext Transfer Protocol Server</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/httpd.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/httpd.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/httpd.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/httpd.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
           <p><code>httpd</code> is the Apache HyperText Transfer Protocol
           (HTTP) server program.  It is designed to be run as a standalone
           daemon process. When used like this it will create a pool of
           child processes or threads to handle requests.</p>
      
           <p>In general, <code>httpd</code> should not be invoked directly,
           but rather should be invoked via <code class="program"><a href="../programs/apachectl.html">apachectl</a></code> on Unix-based systems or <a href="../platform/windows.html#winsvc">as a service on Windows NT,
           2000 and XP</a> and <a href="../platform/windows.html#wincons">as
           a console application on Windows 9x and ME</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="../invoking.html">Starting Apache httpd</a></li><li><a href="../stopping.html">Stopping Apache httpd</a></li><li><a href="../configuring.html">Configuration Files</a></li><li><a href="../platform/">Platform-specific Documentation</a></li><li><code class="program"><a href="../programs/apachectl.html">apachectl</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
           <p><code><strong>httpd</strong> [ -<strong>d</strong>
           <var>serverroot</var> ] [ -<strong>f</strong> <var>config</var> ]
           [ -<strong>C</strong> <var>directive</var> ] [ -<strong>c</strong>
           <var>directive</var> ] [ -<strong>D</strong> <var>parameter</var> ]
           [ -<strong>e</strong> <var>level</var> ] [ -<strong>E</strong>
           <var>file</var> ]
           [ <strong>-k</strong> start|restart|graceful|stop|graceful-stop ]
           [ -<strong>h</strong> ]
           [ -<strong>l</strong> ] [ -<strong>L</strong> ] [ -<strong>S</strong> ]
           [ -<strong>t</strong> ] [ -<strong>v</strong> ] [ -<strong>V</strong> ]
           [ -<strong>X</strong> ] [ -<strong>M</strong> ] [ -<strong>T</strong> ]
           </code></p>
      
           <p>On <a href="../platform/windows.html">Windows systems</a>, the
           following additional arguments are available:</p>
      
           <p><code><strong>httpd</strong> [ -<strong>k</strong>
           install|config|uninstall ] [ -<strong>n</strong> <var>name</var> ]
           [ -<strong>w</strong> ]</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
      
      <dl>
      <dt><code>-d <var>serverroot</var></code></dt>
      
      <dd>Set the initial value for the <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> directive to
      <var>serverroot</var>.  This can be overridden by the ServerRoot
      directive in the configuration file. The default is
      <code>/usr/local/apache2</code>.</dd>
      
      <dt><code>-f <var>config</var></code></dt>
      
      <dd>Uses the directives in the file <var>config</var> on startup. If
      <var>config</var> does not begin with a /, then it is taken to be a
      path relative to the <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>. The default is
      <code>conf/httpd.conf</code>.</dd>
      
      <dt><code>-k <code>start|restart|graceful|stop|graceful-stop</code></code></dt>
      
      <dd>Signals <code>httpd</code> to start, restart, or stop.  See <a href="../stopping.html">Stopping Apache httpd</a> for more information.</dd>
      
      <dt><code>-C <var>directive</var></code></dt>
      
      <dd>Process the configuration <var>directive</var> before reading
      config files.</dd>
      
      <dt><code>-c <var>directive</var></code></dt>
      
      <dd>Process the configuration <var>directive</var> after reading config
      files.</dd>
      
      
      <dt><code>-D <var>parameter</var></code></dt>
      
      <dd>Sets a configuration <var>parameter </var>which can be used with
      <code class="directive"><a href="../mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code> sections
      in the configuration files to conditionally skip or process commands
      at server startup and restart. Also can be used to set certain
      less-common startup parameters including <code>-DNO_DETACH</code>
      (prevent the parent from forking) and <code>-DFOREGROUND</code>
      (prevent the parent from calling <code>setsid()</code> et al).</dd>
      
      <dt><code>-e <var>level</var></code></dt>
      
      <dd>Sets the <code class="directive"><a href="../mod/core.html#loglevel">LogLevel</a></code> to
      <var>level</var> during server startup.  This is useful for
      temporarily increasing the verbosity of the error messages to find
      problems during startup.</dd>
      
      <dt><code>-E <var>file</var></code></dt>
      
      <dd>Send error messages during server startup to <var>file</var>.</dd>
      
      <dt><code>-h</code></dt>
      
      <dd>Output a short summary of available command line options.</dd>
      
      <dt><code>-l</code></dt>
      
      <dd>Output a list of modules compiled into the server.  This will
      <strong>not</strong> list dynamically loaded modules included using
      the <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> directive.</dd>
      
      <dt><code>-L</code></dt>
      
      <dd>Output a list of directives provided by static modules, together with expected arguments and
      places where the directive is valid. Directives provided by shared modules are not listed.</dd>
      
      <dt><code>-M</code></dt>
      
      <dd>Dump a list of loaded Static and Shared Modules.</dd>
      
      <dt><code>-S</code></dt>
      
      <dd>Show the settings as parsed from the config file (currently only
      shows the virtualhost settings).</dd>
      
      <dt><code>-T</code> (Available in 2.3.8 and later)</dt>
      
      <dd>Skip document root check at startup/restart.</dd>
      
      <dt><code>-t</code></dt>
      
      <dd>Run syntax tests for configuration files only.  The program
      immediately exits after these syntax parsing tests with either a return code
      of 0 (Syntax OK) or return code not equal to 0 (Syntax Error).  If -D
      <var>DUMP</var>_<var>VHOSTS </var>is also set, details of the virtual host
      configuration will be printed. If -D <var>DUMP</var>_<var>MODULES </var> is
      set, all loaded modules will be printed.</dd>
      
      <dt><code>-v</code></dt>
      
      <dd>Print the version of <code>httpd</code>, and then exit.</dd>
      
      <dt><code>-V</code></dt>
      
      <dd>Print the version and build parameters of <code>httpd</code>, and
      then exit.</dd>
      
      <dt><code>-X</code></dt>
      
      <dd>Run httpd in debug mode.  Only one worker will be started and the
      server will not detach from the console.</dd>
      
      </dl>
      
      <p>The following arguments are available only on the <a href="../platform/windows.html">Windows platform</a>:</p>
      
      <dl>
      
      <dt><code>-k install|config|uninstall</code></dt>
      
      <dd>Install Apache httpd as a Windows NT service; change startup options for
      the Apache httpd service; and uninstall the Apache httpd service.</dd>
      
      <dt><code>-n <var>name</var></code></dt>
      
      <dd>The <var>name</var> of the Apache httpd service to signal.</dd>
      
      <dt><code>-w</code></dt>
      
      <dd>Keep the console window open on error so that the error message can
      be read.</dd>
      
      </dl>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/httpd.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/httpd.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/httpd.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/httpd.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/httpd.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������httpd-2.4.41/docs/manual/programs/rotatelogs.html.ko.euc-kr�����������������������������������������0000644�0000000�0000050�00000023630�13412755316�022154� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>rotatelogs - ¾ÆÆÄÄ¡ ·Î±×¸¦ ¼øÈ¯ÇϱâÀ§ÇØ ÆÄÀÌÇÁ·Î ¿¬°áÇÒ
        ·Î±× ÇÁ·Î±×·¥ - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>rotatelogs - ¾ÆÆÄÄ¡ ·Î±×¸¦ ¼øÈ¯ÇϱâÀ§ÇØ ÆÄÀÌÇÁ·Î ¿¬°áÇÒ
        ·Î±× ÇÁ·Î±×·¥</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/rotatelogs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/rotatelogs.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/rotatelogs.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/rotatelogs.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
           <p><code>rotatelogs</code>´Â ¾ÆÆÄÄ¡ÀÇ ÆÄÀÌÇÁ ·Î±×ÆÄÀÏ ±â´ÉÀ»
           À§ÇÑ °£´ÜÇÑ ÇÁ·Î±×·¥ÀÌ´Ù. ¿¹¸¦ µé¾î:</p>
      
      <div class="example"><p><code>
           CustomLog "|bin/rotatelogs /var/logs/logfile 86400" common
      </code></p></div>
      	 
           <p>±×·¯¸é /var/logs/logfile.nnnn ÆÄÀÏÀ» ¸¸µç´Ù. nnnnÀº
           ·Î±×¸¦ ½ÃÀÛÇÑ ½Ã½ºÅ۽ð£ÀÌ´Ù (ÀÌ ½Ã°£Àº Ç×»ó ¼øÈ¯±â°£ÀÇ
           ¹è¼öÀÌ´Ù. ±×·¡¼­ cron ½ºÅ©¸³Æ®·Î ó¸®Çϱ⠽±´Ù). ¼øÈ¯±â°£
           (¿©±â¼­´Â 24 ½Ã°£) ¸¶´Ù »õ·Î¿î ·Î±×¸¦ ½ÃÀÛÇÑ´Ù.</p>
      
      <div class="example"><p><code>
           CustomLog "|bin/rotatelogs /var/logs/logfile 5M" common
      </code></p></div>
      
           <p>ÀÌ ¼³Á¤Àº ·Î±×ÆÄÀÏ Å©±â°¡ 5 ¸Þ°¡¹ÙÀÌÆ®°¡ µÉ¶§¸¶´Ù
           ¼øÈ¯ÇÑ´Ù.</p>
      	 
      <div class="example"><p><code>
           ErrorLog "|bin/rotatelogs /var/logs/errorlog.%Y-%m-%d-%H_%M_%S 5M"
      </code></p></div>
           <p>ÀÌ ¼³Á¤Àº ¿À·ù·Î±× ÆÄÀÏ Å©±â°¡ 5 ¸Þ°¡¹ÙÀÌÆ®°¡ µÉ¶§¸¶´Ù
           <code>errorlog.YYYY-mm-dd-HH_MM_SS</code>¿Í °°Àº ÆÄÀÏÀ»
           ¸¸µé¾î¼­ ¿À·ù·Î±× ÆÄÀÏÀ» ¼øÈ¯ÇÑ´Ù.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">°³¿ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">¿É¼Ç</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#portability">Æ÷ÆÃ°¡´É¼º</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">°³¿ä</a></h2>
      
           <p><code><strong>rotatelogs</strong>
           [ -<strong>l</strong> ]
           <var>logfile</var>
           [ <var>rotationtime</var> [ <var>offset</var> ]] |
           [ <var>filesize</var>M ]</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">¿É¼Ç</a></h2>
      
      <dl>
      
      <dt><code>-l</code></dt>
      <dd>¼øÈ¯ÁÖ±â·Î GMT ´ë½Å Áö¿ª½Ã°£À» »ç¿ëÇÑ´Ù. (BST³ª DST¿Í °°ÀÌ)
      GMT ½Ã°£Â÷°¡ º¯Çϴ ȯ°æ¿¡¼­ <code>-l</code>À» »ç¿ëÇÏ¸é ¿¹±âÄ¡
      ¾ÊÀº °á°ú°¡ ¹ß»ýÇÒ ¼ö ÀÖ´Ù!</dd>
      
      <dt><code><var>logfile</var></code></dt>
      
      <dd>·Î±×ÆÄÀÏÀÇ °æ·Î¿Í À̸§. <var>logfile</var>¿¡ '%' ¹®ÀÚ°¡
      ÀÖ´Ù¸é <code>strftime(3)</code>ÀÇ Çü½Ä¹®ÀÚ¿­°ú °°ÀÌ Ã³¸®ÇÑ´Ù.
      '%' ¹®ÀÚ°¡ ¾ø´Ù¸é µÚ¿¡ ÃÊ´ÜÀ§ ½Ã°£ <var>.nnnnnnnnnn</var>À»
      ÀÚµ¿À¸·Î ºÙÀδÙ. µÎ Çü½Ä ¸ðµÎ ÇöÀç ±â°£ºÎÅÍ ½ÃÀ۽ð£À» °è»êÇÑ´Ù.</dd>
      
      <dt><code><var>rotationtime</var></code></dt>
      
      <dd>·Î±×ÆÄÀÏÀ» ¼øÈ¯ÇÒ ÃÊ´ÜÀ§ ½Ã°£.</dd>
      
      <dt><code><var>offset</var></code></dt>
      
      <dd>UTC¿¡¼­ ºÐ´ÜÀ§ ½Ã°£Â÷ÀÌ. »ý·«Çϸé 0À¸·Î °¡Á¤ÇÏ¿© UTC¸¦
      »ç¿ëÇÑ´Ù. ¿¹¸¦ µé¾î, UTC -5 ½Ã°£´ëÀÇ Áö¿ª½Ã°£À» »ç¿ëÇÑ´Ù¸é
      ¾Æ±Ô¸ÕÆ®·Î <code>-300</code>À» ÁöÁ¤ÇÑ´Ù.</dd>
      
      <dt><code><var>filesize</var>M</code></dt>
      
      <dd>½Ã°£ÀÌ ¾Æ´Ñ Å©±â¸¦ ÁöÁ¤ÇÒ¶§ ¸Þ°¡¹ÙÀÌÆ®´ÜÀ§ ÃÖ´ë ÆÄÀÏÅ©±â
      µÚ¿¡ <code>M</code>À» ºÙÀδÙ. rotationtime°ú offset ´ë½Å ÀÌ
      ÆÄ¶ó¹ÌÅ͸¦ »ç¿ëÇÑ´Ù.</dd>
      </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="portability" id="portability">Æ÷ÆÃ°¡´É¼º</a></h2>
      
      <p>´ÙÀ½ ·Î±×ÆÄÀÏ Çü½Ä¹®ÀÚ¿­ Ç¥ÇöÀº ¸ðµç <code>strftime(3)</code>
      ±¸ÇöÀÌ Áö¿øÇØ¾ß ÇÑ´Ù. ¶óÀ̺귯¸® ƯÀ¯ÀÇ È®ÀåÀº
      <code>strftime(3)</code> manpage¸¦ Âü°íÇ϶ó.</p>
      
      <table class="bordered"><tr><td><code>%A</code></td><td>(Áö¿ªÈ­µÈ) ¿ÏÀüÇÑ ¿äÀÏ À̸§</td></tr>
      <tr class="odd"><td><code>%a</code></td><td>(Áö¿ªÈ­µÈ) 3-¹®ÀÚ ¿äÀÏ À̸§</td></tr>
      <tr><td><code>%B</code></td><td>(Áö¿ªÈ­µÈ) ¿ÏÀüÇÑ ´Þ À̸§</td></tr>
      <tr class="odd"><td><code>%b</code></td><td>(Áö¿ªÈ­µÈ) 3-¹®ÀÚ ´Þ À̸§</td></tr>
      <tr><td><code>%c</code></td><td>(Áö¿ªÈ­µÈ) ³¯Â¥¿Í ½Ã°£</td></tr>
      <tr class="odd"><td><code>%d</code></td><td>2-ÀÚ¸® ÀÏ</td></tr>
      <tr><td><code>%H</code></td><td>2-ÀÚ¸® ½Ã°£ (24 ½Ã°£ ½Ã°è)</td></tr>
      <tr class="odd"><td><code>%I</code></td><td>2-ÀÚ¸® ½Ã°£ (12 ½Ã°£ ½Ã°è)</td></tr>
      <tr><td><code>%j</code></td><td>3-ÀÚ¸® ³¯Â¥¼ö</td></tr>
      <tr class="odd"><td><code>%M</code></td><td>2-ÀÚ¸® ºÐ</td></tr>
      <tr><td><code>%m</code></td><td>2-ÀÚ¸® ´Þ</td></tr>
      <tr class="odd"><td><code>%p</code></td><td>(Áö¿ªÈ­µÈ) 12 ½Ã°£ ½Ã°èÀÇ am/pm</td></tr>
      <tr><td><code>%S</code></td><td>2-ÀÚ¸® ÃÊ</td></tr>
      <tr class="odd"><td><code>%U</code></td><td>2-ÀÚ¸® ÁÖÀϼö (ÁÖÀÇ Ã¹¹øÀç ³¯Àº
      ÀÏ¿äÀÏ)</td></tr>
      <tr><td><code>%W</code></td><td>2-ÀÚ¸® ÁÖÀϼö (ÁÖÀÇ Ã¹¹øÀç ³¯Àº
      ¿ù¿äÀÏ)</td></tr>
      <tr class="odd"><td><code>%w</code></td><td>1-ÀÚ¸® ¿äÀϼö (ÁÖÀÇ Ã¹¹øÂ° ³¯Àº
      ÀÏ¿äÀÏ)</td></tr>
      <tr><td><code>%X</code></td><td>(Áö¿ªÈ­µÈ) ½Ã°£</td></tr>
      <tr class="odd"><td><code>%x</code></td><td>(Áö¿ªÈ­µÈ) ³¯Â¥</td></tr>
      <tr><td><code>%Y</code></td><td>4-ÀÚ¸® ¿¬µµ</td></tr>
      <tr class="odd"><td><code>%y</code></td><td>2-ÀÚ¸® ¿¬µµ</td></tr>
      <tr><td><code>%Z</code></td><td>½Ã°£´ë À̸§</td></tr>
      <tr class="odd"><td><code>%%</code></td><td>¹®ÀÚ±×´ë·Î `%'</td></tr>
      </table>
      
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/rotatelogs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/rotatelogs.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/rotatelogs.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/rotatelogs.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/rotatelogs.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/fcgistarter.html.tr.utf8������������������������������������������0000644�0000000�0000050�00000015232�13447004010�022003� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>fcgistarter - Bir FastCGI programını çalıştır - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>fcgistarter - Bir FastCGI programını çalıştır</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/fcgistarter.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/fcgistarter.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/fcgistarter.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p />
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#note">Bilginize</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Kullanım</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_proxy_fcgi.html">mod_proxy_fcgi</a></code></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="note" id="note">Bilginize</a></h2>
          <p>Şimdilik sadece Unix sistemlerinde çalışmaktadır.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Kullanım</a></h2>
          <p><code><strong>fcgistarter</strong>
          -<strong>c</strong> <var>komut</var>
          -<strong>p</strong> <var>port</var>
          [ -<strong>i</strong> <var>arabirim</var> ]
          -<strong>N</strong> <var>sayı</var>
          </code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
          <dl>
          <dt><code><strong>-c</strong> <var>komut</var></code></dt>
          <dd>Çalıştırılacak FastCGI programı</dd>
      
          <dt><code><strong>-p</strong> <var>port</var></code></dt>
          <dd>Programın dinleyeceği port</dd>
      
          <dt><code><strong>-i</strong> <var>arabirim</var></code></dt>
          <dd>Programın dinleyeceği arabirim</dd>
      
          <dt><code><strong>-N</strong> <var>sayı</var></code></dt>
          <dd>Program örneklerinin sayısı</dd>
          </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/fcgistarter.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/fcgistarter.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/fcgistarter.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/fcgistarter.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/dbmmanage.html.fr.utf8��������������������������������������������0000644�0000000�0000050�00000034531�13412755316�021404� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>dbmmanage - Gestion des fichiers d'authentification des
      utilisateurs au format DBM - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>dbmmanage - Gestion des fichiers d'authentification des
      utilisateurs au format DBM</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/dbmmanage.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/dbmmanage.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/dbmmanage.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/dbmmanage.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>dbmmanage</code> permet de créer et de maintenir les
          fichiers au format DBM où sont stockés les noms d'utilisateurs et
          mots de passe à des fins d'authentification de base des utilisateurs
          HTTP via le module <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code>. Il est possible
          de restreindre l'accès aux ressources disponibles sur le serveur
          HTTP Apache aux seuls utilisateurs spécifiés dans les fichiers créés
          par <code>dbmmanage</code>. Ce programme ne peut être utilisé
          qu'avec des fichiers d'utilisateurs au format DBM. Pour
          l'utilisation de fichiers textes, voir le programme
          <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code>.</p>
      
          <p>Le programme <code class="program"><a href="../programs/htdbm.html">htdbm</a></code> est aussi un utilitaire
          permettant de maintenir une base de données de mots de passe DBM.</p>
      
          <p>Cette page de manuel ne décrit que les arguments de la ligne de
          commande. Pour plus de détails à propos des directives nécessaires
          pour configurer l'authentification des utilisateurs dans
          <code class="program"><a href="../programs/httpd.html">httpd</a></code>, voir le manuel httpd qui est fourni avec
          la distribution d'Apache, ou peut être consulté à <a href="http://httpd.apache.org/">http://httpd.apache.org/</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Syntaxe</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#bugs">Bogues</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="../programs/htdbm.html">htdbm</a></code></li><li><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code></li><li><code class="module"><a href="../mod/mod_authz_dbm.html">mod_authz_dbm</a></code></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Syntaxe</a></h2>
          <p><code><strong>dbmmanage</strong> [ <var>codage</var> ]
          <var>nom-fichier</var> add|adduser|check|delete|update
          <var>nom-utilisateur</var>
          [ <var>mot-de-passe-chiffré</var>
            [ <var>groupe</var>[,<var>groupe</var>...]
              [ <var>commentaire</var> ] ] ]</code></p>
      
          <p><code><strong>dbmmanage</strong> <var>nom-fichier</var>
          view [ <var>nom-utilisateur</var> ]</code></p>
      
          <p><code><strong>dbmmanage</strong> <var>nom-fichier</var>import</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code><var>nom-fichier</var></code></dt>
          <dd>Le nom du fichier au format DBM, en général sans l'extension
          <code>.db</code>, <code>.pag</code>, ou <code>.dir</code>.</dd>
      
          <dt><code><var>nom-utilisateur</var></code></dt>
          <dd>L'utilisateur concerné par l'opération effectuée. Le
          <var>nom-utilisateur</var> ne doit pas contenir de caractère
          <code>:</code>.</dd>
      
          <dt><code><var>mot-de-passe-chiffré</var></code></dt>
          <dd>C'est le mot de passe sous sa forme chiffrée à utiliser avec les
          commandes <code>update</code> et <code>add</code>. Vous pouvez
          utiliser un tiret (<code>-</code>) si vous voulez que le mot de
          passe vous soit demandé, mais remplissez les champs par la suite. En
          outre, avec la commande <code>update</code>, un point
          (<code>.</code>) permet de conserver le mot de passe original.</dd>
      
          <dt><code><var>groupe</var></code></dt>
          <dd>Un groupe dont l'utilisateur est membre. Un nom de groupe ne
          doit pas contenir de caractère (<code>:</code>). Vous pouvez
          utiliser un tiret (<code>-</code>) si vous ne voulez pas associer
          l'utilisateur à un groupe, mais remplissez le champ commentaire. En
          outre, avec la commande <code>update</code>, un point
          (<code>.</code>) permet de conserver le groupe original.</dd>
      
          <dt><code><var>commentaire</var></code></dt>
          <dd>C'est l'endroit où vous pouvez enregistrer diverses informations
          à propos de l'utilisateur telles que son nom réel, sont e-mail,
          etc... Le serveur ignore ce champ.</dd>
          </dl>
      
          <h3><a name="options.encodings" id="options.encodings">Codages</a></h3>
            <dl>
            <dt><code>-d</code></dt>
            <dd>chiffrement crypt (chiffrement par défaut sauf sous Win32,
            Netware)</dd>
      
            <dt><code>-m</code></dt>
            <dd>chiffrement MD5 (chiffrement par défaut sous Win32,
            Netware)</dd>
      
            <dt><code>-s</code></dt>
            <dd>chiffrement SHA1</dd>
      
            <dt><code>-p</code></dt>
            <dd>en clair (<em>déconseillé</em>)</dd>
            </dl>
          
      
          <h3><a name="options.commands" id="options.commands">Commandes</a></h3>
            <dl>
            <dt><code>add</code></dt>
            <dd>Ajoute une entrée pour <var>nom-utilisateur</var> à
            <var>nom-fichier</var> en utilisant le mot de passe chiffré
            <var>mot-de-passe-chiffré</var>.
      
            <div class="example"><p><code>dbmmanage passwords.dat add rbowen foKntnEF3KSXA</code></p></div>
            </dd>
      
            <dt><code>adduser</code></dt>
            <dd>Demande un mot de passe puis ajoute une entrée pour
            <var>nom-utilisateur</var> à <var>nom-fichier</var>.
      
            <div class="example"><p><code>dbmmanage passwords.dat adduser krietz</code></p></div>
            </dd>
      
            <dt><code>check</code></dt>
            <dd>Demande un mot de passe puis vérifie si
            <var>nom-utilisateur</var> est présent dans <var>nom-fichier</var>
            et si son mot de passe correspond au mot de passe fourni.
      
            <div class="example"><p><code>dbmmanage passwords.dat check rbowen</code></p></div>
            </dd>
      
            <dt><code>delete</code></dt>
            <dd>Supprime l'entrée <var>nom-utilisateur</var> de
            <var>nom-fichier</var>.
      
            <div class="example"><p><code>dbmmanage passwords.dat delete rbowen</code></p></div>
            </dd>
      
            <dt><code>import</code></dt>
            <dd>Lit les entrées
            <code><var>nom-utilisateur</var>:<var>mot-de-passe</var></code>
            (une par ligne) depuis <code>STDIN</code>, et les ajoute à
            <var>nom-fichier</var>. Les mots de passe doivent être déjà
            chiffrés.</dd>
      
            <dt><code>update</code></dt>
            <dd>Identique à la commande <code>adduser</code>, à l'exception
            que la présence de <var>nom-utilisateur</var> dans
            <var>nom-fichier</var> est vérifiée.
      
            <div class="example"><p><code>dbmmanage passwords.dat update rbowen</code></p></div>
            </dd>
      
            <dt><code>view</code></dt>
            <dd>Affiche le contenu du fichier DBM. Si vous spécifiez un
            <var>nom-utilisateur</var>, seule l'entrée correspondante est
            affichée.
      
            <div class="example"><p><code>dbmmanage passwords.dat view</code></p></div>
            </dd>
            </dl>
          
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="bugs" id="bugs">Bogues</a></h2>
          <p>Vous devez garder à l'esprit qu'il existe de nombreux formats de
          fichiers DBM différents, et que selon toute vraisemblance, des
          bibliothèques pour plus d'un format sont présentes sur votre
          système. Les trois exemples de base sont SDBM, NDBM, le projet GNU
          GDBM, et Berkeley DB 2. Malheureusement, toutes ces bibliothèques
          utilisent des formats de fichiers différents, et vous devez vous
          assurer que le format de fichier utilisé par <var>nom-fichier</var>
          correspond au format attendu par <code>dbmmanage</code>.
          Actuellement, <code>dbmmanage</code> n'a aucun moyen de savoir à
          quel type de fichier DBM il a à faire. S'il est utilisé avec un
          format inapproprié, il ne renverra rien, ou pourra créer un fichier
          DBM différent avec un nom différent, ou au pire, va corrompre le
          fichier DBM si vous avez tenté de le modifier.</p>
      
          <p><code>dbmmanage</code> possède une liste de préférences en
          matière de formats DBM, définies dans le tableau
          <code>@AnyDBM::ISA</code> au début du programme. Comme nous
          préférons le format de fichier Berkeley DB 2, l'ordre dans lequel
          <code>dbmmanage</code> va rechercher les bibliothèques système est
          Berkeley DB 2, puis NDBM, GDBM et enfin SDBM. La première
          bibliothèque trouvée sera celle que <code>dbmmanage</code> tentera
          d'utiliser pour toutes les opérations sur les fichiers DBM. Cette
          ordre est sensiblement différent de l'ordre standard de Perl
          <code>@AnyDBM::ISA</code>, et de l'ordre utilisé par l'appel
          <code>dbmopen()</code> de Perl ; si vous utilisez un autre
          utilitaire pour gérer vos fichiers DBM, il doit donc se conformer à
          l'ordre de préférence indiqué précédemment. Vous devez prêter la
          même attention si vous utilisez des programmes écrits dans d'autres
          langages, comme C, pour accéder à ces fichiers.</p>
      
          <p>Vous pouvez utiliser le programme <code>file</code> fourni par la
          plupart des systèmes Unix pour déterminer le format d'un fichier
          DBM.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/dbmmanage.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/dbmmanage.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/dbmmanage.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/dbmmanage.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/dbmmanage.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/dbmmanage.html.en�������������������������������������������������0000644�0000000�0000050�00000032502�13412755316�020506� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>dbmmanage - Manage user authentication files in DBM format - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>dbmmanage - Manage user authentication files in DBM format</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/dbmmanage.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/dbmmanage.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/dbmmanage.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/dbmmanage.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>dbmmanage</code> is used to create and update the DBM format files
          used to store usernames and password for basic authentication of HTTP users
          via <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code>.
          Resources available from the Apache HTTP server can be restricted to just
          the users listed in the files created by <code>dbmmanage</code>. This
          program can only be used when the usernames are stored in a DBM file. To
          use a flat-file database see <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code>.</p>
      
          <p>Another tool to maintain a DBM password database is
          <code class="program"><a href="../programs/htdbm.html">htdbm</a></code>.</p>
      
          <p>This manual page only lists the command line arguments. For details of
          the directives necessary to configure user authentication in
          <code class="program"><a href="../programs/httpd.html">httpd</a></code> see the httpd manual, which is part of
          the Apache distribution or can be found at <a href="http://httpd.apache.org/">http://httpd.apache.org/</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#bugs">Bugs</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="../programs/htdbm.html">htdbm</a></code></li><li><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code></li><li><code class="module"><a href="../mod/mod_authz_dbm.html">mod_authz_dbm</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
          <p><code><strong>dbmmanage</strong> [ <var>encoding</var> ]
          <var>filename</var> add|adduser|check|delete|update
          <var>username</var>
          [ <var>encpasswd</var>
            [ <var>group</var>[,<var>group</var>...]
              [ <var>comment</var> ] ] ]</code></p>
      
          <p><code><strong>dbmmanage</strong> <var>filename</var>
          view [ <var>username</var> ]</code></p>
      
          <p><code><strong>dbmmanage</strong> <var>filename</var> import</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code><var>filename</var></code></dt>
          <dd>The filename of the DBM format file. Usually without the extension
          <code>.db</code>, <code>.pag</code>, or <code>.dir</code>.</dd>
      
          <dt><code><var>username</var></code></dt>
          <dd>The user for which the operations are performed. The <var>username</var>
          may not contain a colon (<code>:</code>).</dd>
      
          <dt><code><var>encpasswd</var></code></dt>
          <dd>This is the already encrypted password to use for the
          <code>update</code> and <code>add</code> commands. You may use a hyphen
          (<code>-</code>) if you want to get prompted for the password, but fill
          in the fields afterwards. Additionally when using the <code>update</code>
          command, a period (<code>.</code>) keeps the original password
          untouched.</dd>
      
          <dt><code><var>group</var></code></dt>
          <dd>A group, which the user is member of. A groupname may not contain a
          colon (<code>:</code>). You may use a hyphen (<code>-</code>) if you don't
          want to assign the user to a group, but fill in the comment field.
          Additionally when using the <code>update</code> command, a period
          (<code>.</code>) keeps the original groups untouched.</dd>
      
          <dt><code><var>comment</var></code></dt>
          <dd>This is the place for your opaque comments about the user, like
          realname, mailaddress or such things. The server will ignore this
          field.</dd>
          </dl>
      
          <h3><a name="options.encodings" id="options.encodings">Encodings</a></h3>
            <dl>
            <dt><code>-d</code></dt>
            <dd>crypt encryption (default, except on Win32, Netware)</dd>
      
            <dt><code>-m</code></dt>
            <dd>MD5 encryption (default on Win32, Netware)</dd>
      
            <dt><code>-s</code></dt>
            <dd>SHA1 encryption</dd>
      
            <dt><code>-p</code></dt>
            <dd>plaintext (<em>not recommended</em>)</dd>
            </dl>
          
      
          <h3><a name="options.commands" id="options.commands">Commands</a></h3>
            <dl>
            <dt><code>add</code></dt>
            <dd>Adds an entry for <var>username</var> to <var>filename</var> using the
            encrypted password <var>encpasswd</var>.
      
            <div class="example"><p><code>dbmmanage passwords.dat add rbowen foKntnEF3KSXA</code></p></div>
            </dd>
      
            <dt><code>adduser</code></dt>
            <dd>Asks for a password and then adds an entry for <var>username</var> to
            <var>filename</var>.
      
            <div class="example"><p><code>dbmmanage passwords.dat adduser krietz</code></p></div>
            </dd>
      
            <dt><code>check</code></dt>
            <dd>Asks for a password and then checks if <var>username</var> is in
            <var>filename</var> and if it's password matches the specified one.
      
            <div class="example"><p><code>dbmmanage passwords.dat check rbowen</code></p></div>
            </dd>
      
            <dt><code>delete</code></dt>
            <dd>Deletes the <var>username</var> entry from <var>filename</var>.
      
            <div class="example"><p><code>dbmmanage passwords.dat delete rbowen</code></p></div>
            </dd>
      
            <dt><code>import</code></dt>
            <dd>Reads <code><var>username</var>:<var>password</var></code> entries
            (one per line) from <code>STDIN</code> and adds them to
            <var>filename</var>. The passwords already have to be crypted.</dd>
      
            <dt><code>update</code></dt>
            <dd>Same as the <code>adduser</code> command, except that it makes
            sure <var>username</var> already exists in <var>filename</var>.
      
            <div class="example"><p><code>dbmmanage passwords.dat update rbowen</code></p></div>
            </dd>
      
            <dt><code>view</code></dt>
            <dd>Just displays the contents of the DBM file. If you specify a
            <var>username</var>, it displays the particular record only.
      
            <div class="example"><p><code>dbmmanage passwords.dat view</code></p></div>
            </dd>
            </dl>
          
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="bugs" id="bugs">Bugs</a></h2>
          <p>One should be aware that there are a number of different DBM file formats
          in existence, and with all likelihood, libraries for more than one format
          may exist on your system. The three primary examples are SDBM, NDBM, the GNU
          project's GDBM, and Berkeley DB 2. Unfortunately, all these libraries use
          different file formats, and you must make sure that the file format used
          by <var>filename</var> is the same format that <code>dbmmanage</code>
          expects to see. <code>dbmmanage</code> currently has no way of determining
          what type of DBM file it is looking at. If used against the wrong format,
          will simply return nothing, or may create a different DBM file with a
          different name, or at worst, it may corrupt the DBM file if you were
          attempting to write to it.</p>
      
          <p><code>dbmmanage</code> has a list of DBM format preferences, defined by
          the <code>@AnyDBM::ISA</code> array near the beginning of the program. Since
          we prefer the Berkeley DB 2 file format, the order in which
          <code>dbmmanage</code> will look for system libraries is Berkeley DB 2,
          then NDBM, then GDBM and then SDBM. The first library found will be the
          library <code>dbmmanage</code> will attempt to use for all DBM file
          transactions. This ordering is slightly  different than the standard
          <code>@AnyDBM::ISA</code> ordering in Perl, as well as the ordering used by
          the simple <code>dbmopen()</code> call in Perl, so if you use any other
          utilities to manage your DBM files, they must also follow this preference
          ordering. Similar care must be taken if using programs in other languages,
          like C, to access these files.</p>
      
          <p>One can usually use the <code>file</code> program supplied with most
          Unix systems to see what format a DBM file is in.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/dbmmanage.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/dbmmanage.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/dbmmanage.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/dbmmanage.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/dbmmanage.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htdbm.html.fr.utf8������������������������������������������������0000644�0000000�0000050�00000050425�13412755316�020567� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htdbm - Manipuler des bases de données DBM de mots de
      passe - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>htdbm - Manipuler des bases de données DBM de mots de
      passe</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/htdbm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htdbm.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/htdbm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>htdbm</code> permet de manipuler des fichiers au format DBM
          ou sont stockés des nom d'utilisateurs et mots de passe à des fins
          d'authentification de base des utilisateurs HTTP via le module
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code>. Voir la documentation de
          <code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code> pour plus de détails à propos de ces
          fichiers DBM.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Syntaxe</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#bugs">Bugs</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exit">Valeur renvoyée</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Exemples</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#security">Considérations à propos de sécurité</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#restrictions">Restrictions</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code></li><li><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Syntaxe</a></h2>
          <p><code><strong>htdbm</strong>
          [ -<strong>T</strong><var>DBTYPE</var> ]
          [ -<strong>i</strong> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>nom-fichier</var> <var>nom-utilisateur</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>b</strong>
          [ -<strong>T</strong><var>DBTYPE</var> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
          -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>nom-fichier</var> <var>nom-utilisateur</var> <var>mot-de-passe</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>n</strong>
          [ -<strong>i</strong> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>nom-utilisateur</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>nb</strong>
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>nom-utilisateur</var> <var>mot-de-passe</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>v</strong>
          [ -<strong>T</strong><var>DBTYPE</var> ]
          [ -<strong>i</strong> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>nom-fichier</var> <var>nom-utilisateur</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>vb</strong>
          [ -<strong>T</strong><var>DBTYPE</var> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>nom-fichier</var> <var>nom-utilisateur</var> <var>mot-de-passe</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>x</strong>
          [ -<strong>T</strong><var>DBTYPE</var> ]
          <var>nom-fichier</var> <var>nom-utilisateur</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>l</strong>
          [ -<strong>T</strong><var>DBTYPE</var> ]
          </code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code>-b</code></dt>
          <dd>Utilise le mode batch ; en d'autres termes, le mot de passe est
          extrait de la ligne de commande au lieu d'être demandé à
          l'opérateur. Cette option doit être utilisée avec la plus grande
          prudence, car <strong>le mot de passe est visible en clair</strong>
          dans la ligne de commande. Pour utiliser un script, voir l'option
          <code>-i</code>.</dd>
      
          <dt><code>-i</code></dt>
          <dd>Lit le mot de passe depuis stdin sans vérification (à utiliser
          dans le cadre d'un script).</dd>
      
          <dt><code>-c</code></dt>
          <dd>Crée le <var>fichier-mots-de-passe</var>. Si
          <var>fichier-mots-de-passe</var> existe déjà, il est réécrit et
          tronqué. Cette option ne peut pas être combinée avec l'option
          <code>-n</code>.</dd>
      
          <dt><code>-n</code></dt>
          <dd>Affiche les résultats sur la sortie standard et ne met pas à
          jour la base de données. Cette option modifie la syntaxe de la ligne
          de commande, car l'argument <var>fichier-mots-de-passe</var> (en
          général le premier) est omis. Elle ne peut pas être combinée avec
          l'option <code>-c</code>.</dd>
      
          <dt><code>-m</code></dt>
          <dd>Utilise un chiffrement MD5 pour les mots de passe. Sous Windows
          et Netware, c'est l'option par défaut..</dd>
      
          <dt><code>-B</code></dt>
          <dd>Utilise l'algorythme de chiffrement bcrypt pour les mots de
          passe. C'est un algorythme actuellement considéré comme sûr.</dd>
      
          <dt><code>-C</code></dt>
          <dd>Ce drapeau n'est autorisé qu'en conjonction avec le drapeau
          <code>-B</code> (chiffrement bcrypt). Il permet de définir la durée
          de traitement pour l'algorythme de chiffrement bcrypt (plus elle est
          longue, plus la sécurité est élevée, mais la rapidité est diminuée
          d'autant) ; la valeur par défaut est 5, les valeurs valides vont de
          4 à 31.</dd>
      
      
          <dt><code>-d</code></dt>
          <dd>Utilise un chiffrement <code>crypt()</code> pour les mots de
          passe. C'est l'option par défaut sur toutes les plates-formes, sauf
          Windows et Netware. Bien que <code>htdbm</code> supporte ce
          chiffrement sur toutes les plates-formes, il n'est pas supporté par
          le serveur <code class="program"><a href="../programs/httpd.html">httpd</a></code> sous Windows et Netware. Cet
          algorythme est considéré comme <strong>non sûr</strong> selon les
          standards actuels.</dd>
      
          <dt><code>-s</code></dt>
          <dd>Utilise le chiffrement SHA pour les mots de passe. Facilite la
          migration vers/depuis les serveurs Netscape qui utilisent le format
          LDAP Directory Interchange (ldif). Cet
          algorythme est considéré comme <strong>non sûr</strong> selon les
          standards actuels.</dd>
      
          <dt><code>-p</code></dt>
          <dd>Utilise des mots de passe au format texte en clair. Bien que
          <code>htdbm</code> supporte ce format sur toutes les plates-formes,
          le démon <code class="program"><a href="../programs/httpd.html">httpd</a></code> n'accepte les mots de passe au
          format texte en clair que sous Windows et Netware.</dd>
      
          <dt><code>-l</code></dt>
          <dd>Affiche chaque nom d'utilisateur de la base de données
          accompagné de son commentaire sur la sortie standard.</dd>
      
          <dt><code>-v</code></dt>
          <dd>Vérifie une association nom d'utilisateur/mot de passe. Le
          programme affichera un message indiquant si le mot de passe fourni
          est valide. Si le mot de passe n'est pas valide, le programme
          s'arrête et renvoie un code d'erreur 3.</dd>
      
          <dt><code>-x</code></dt>
          <dd>Supprime l'utilisateur. Si le nom d'utilisateur existe dans le
          fichier DBM spécifié, il sera supprimé.</dd>
      
          <dt><code>-t</code></dt>
          <dd>Interprète le dernier paramètre en tant que commentaire. Avec
          cette option, il est possible d'ajouter une chaîne supplémentaire à
          la fin de la ligne de commande ; le contenu de cette chaîne sera
          stocké dans la base de données dans le champ "Comment" associé au
          nom d'utilisateur spécifié.</dd>
      
          <dt><code><var>nom-fichier</var></code></dt>
          <dd>Le nom du fichier au format DBM en général sans l'extension
          <code>.db</code>, <code>.pag</code>, ou <code>.dir</code>. Avec
          l'option <code>-c</code>, le fichier DBM est mis à jour s'il existe
          ou créé dans le cas contraire.</dd>
      
          <dt><code><var>nom-utilisateur</var></code></dt>
          <dd>Le nom d'utilisateur à créer ou mettre à jour dans le
          <var>fichier-mots-de-passe</var>. Si <var>nom-utilisateur</var>
          n'existe pas dans ce fichier, une entrée est ajoutée. S'il existe,
          son mot de passe est modifié.</dd>
      
          <dt><code><var>mot-de-passe</var></code></dt>
          <dd>Le mot de passe en clair destiné à être chiffré et stocké dans
          le fichier DBM. Ne s'utilise qu'avec l'option <code>-b</code>.</dd>
      
          <dt><code>-T<var>DBTYPE</var></code></dt>
          <dd>Type de fichier DBM (SDBM, GDBM, DB, ou "default").</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="bugs" id="bugs">Bugs</a></h2>
          <p>Vous devez garder à l'esprit qu'il existe de nombreux formats de
          fichiers DBM différents, et que selon toute vraisemblance, des
          bibliothèques pour plus d'un format sont présentes sur votre
          système. Les trois exemples de base sont SDBM, NDBM, le projet GNU
          GDBM, et Berkeley/Sleepycat DB 2/3/4. Malheureusement, toutes ces
          bibliothèques
          utilisent des formats de fichiers différents, et vous devez vous
          assurer que le format de fichier utilisé par <var>nom-fichier</var>
          correspond au format attendu par <code>htdbm</code>.
          Actuellement, <code>htdbm</code> n'a aucun moyen de savoir à
          quel type de fichier DBM il a à faire. S'il est utilisé avec un
          format inapproprié, il ne renverra rien, ou pourra créer un fichier
          DBM différent avec un nom différent, ou au pire, va corrompre le
          fichier DBM si vous avez tenté de le modifier.</p>
      
          <p>Vous pouvez utiliser le programme <code>file</code> fourni par la
          plupart des systèmes Unix pour déterminer le format d'un fichier
          DBM.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exit" id="exit">Valeur renvoyée</a></h2>
          <p><code>htdbm</code> renvoie 0 ("true") si les nom d'utilisateur et
          mot de passe ont été créés ou mis à jour avec succès dans le fichier
          DBM. <code>htdbm</code> renvoie <code>1</code> s'il a rencontré un
          problème d'accès aux fichiers, <code>2</code> si la ligne de
          commande comportait une erreur de syntaxe, <code>3</code> si le mot
          de passe a été fourni interactivement et s'il est invalide pour
          l'entrée considérée, <code>4</code> si l'opération a été
          interrompue, <code>5</code> si une valeur est trop longue (nom
          utilisateur, nom fichier, mot de passe, ou l'enregistrement après
          son élaboration), <code>6</code> si le nom d'utilisateur contient
          des caractères illégaux (voir la section <a href="#restrictions">Restrictions</a>), et <code>7</code> si le
          fichier n'est pas un fichier de mots de passe DBM valide.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Exemples</a></h2>
          <div class="example"><p><code>
            htdbm /usr/local/etc/apache/.utilisateurs-htdbm jsmith
          </code></p></div>
      
          <p>Ajoute ou modifie le mot de passe de l'utilisateur
          <code>jsmith</code>. Le mot de passe est demandé à l'opérateur. Sous
          Windows, le mot de passe sera chiffré en utilisant l'algorithme MD5
          Apache modifié ; dans les autres cas, c'est la routine
          <code>crypt()</code> du système qui sera utilisée. Si le fichier
          n'existe pas, <code>htdbm</code> s'arrêtera et renverra une
          erreur.</p>
      
          <div class="example"><p><code>
            htdbm -c /home/doe/public_html/.htdbm jane
          </code></p></div>
      
          <p>Crée un nouveau fichier et y enregistre une entrée pour
          l'utilisateur <code>jane</code>. Le mot de passe est demandé à
          l'opérateur. Si le fichier existe et ne peut pas être lu, ou ne peut
          pas être écrit, il ne sera pas modifié et
          <code>htdbm</code> affichera un message et renverra un code
          d'erreur.</p>
      
          <div class="example"><p><code>
            htdbm -mb /usr/web/.htdbm-tous jones Pwd4Steve
          </code></p></div>
      
          <p>Chiffre le mot de passe entré avec la ligne de commande
          (<code>Pwd4Steve</code>) à l'aide de l'algorithme MD5, et
          l'enregistre dans le fichier spécifié.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">Considérations à propos de sécurité</a></h2>
          <p>Les fichiers de mots de passe Web tels que ceux que gère
          <code>htdbm</code> ne doivent <em>pas</em> être stockés dans
          l'espace d'URI du serveur Web -- en d'autres termes, il ne doit pas
          être possible d'y accéder à l'aide d'un navigateur.</p>
      
          <p>L'utilisation de l'option <code>-b</code> est déconseillée, car
          lorsqu'il est utilisé, le mot de passe apparaît en clair dans la
          ligne de commande.</p>
      
          <p>Notez que lorsque vous utilisez l'algorythme
          <code>crypt()</code>, seuls les 8 premiers caractères du mot de
          passe sont pris en compte. Si le mot de passe fourni est plus long,
          les caractères supplémentaires seront ignorés sans avertissement.</p>
      
          <p>L'algorythme SHA ne permet pas de spécifier une valeur
          d'initialisation pour la génération de nombres aléatoires (salting)
          : un mot de passe donné ne possède ainsi qu'une réprésentation
          chiffrée. Les algorythmes <code>crypt()</code> et MD5 permettent quant à
          eux des représentations chiffrées multiples en acceptant comme
          paramètre une chaîne d'initialisation (salt), rendant les attaques à
          base de dictionnaires contre les mots de passe plus difficiles.</p>
      
          <p>Les algorythmes SHA et <code>crypt()</code> sont considérés comme
          non sûrs selon les standards actuels.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="restrictions" id="restrictions">Restrictions</a></h2>
          <p>Sur la plate-forme Windows, les mots de passe chiffrés avec
          <code>htdbm</code> ont une taille limitée à <code>255</code>
          caractères. Si le mot de passe fourni est plus long, il sera tronqué
          à 255 caractères.</p>
      
          <p>L'algorithme MD5 utilisé par <code>htdbm</code> est spécifique à
          Apache ; les mots de passe chiffrés en utilisant cet algorithme
          seront inutilisables sur d'autres serveurs Web.</p>
      
          <p>Les noms d'utilisateurs ont une taille limitée à <code>255</code>
          octets et ne doivent pas contenir de caractère <code>:</code>.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/htdbm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htdbm.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/htdbm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htdbm.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htpasswd.html.en��������������������������������������������������0000644�0000000�0000050�00000042312�13523273316�020426� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htpasswd - Manage user files for basic authentication - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>htpasswd - Manage user files for basic authentication</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/htpasswd.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htpasswd.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htpasswd.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htpasswd.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>htpasswd</code> is used to create and update the flat-files used to
          store usernames and password for basic authentication of HTTP users. If
          <code>htpasswd</code> cannot access a file, such as not being able to write
          to the output file or not being able to read the file in order to update it,
          it returns an error status and makes no changes.</p>
      
          <p>Resources available from the Apache HTTP server can be restricted to
          just the users listed in the files created by <code>htpasswd</code>. This
          program can only manage usernames and passwords stored in a flat-file. It
          can encrypt and display password information for use in other types of data
          stores, though. To use a DBM database see <code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code> or
          <code class="program"><a href="../programs/htdbm.html">htdbm</a></code>.</p>
      
          <p><code>htpasswd</code> encrypts passwords using either bcrypt,
          a version of MD5 modified for Apache, SHA1, or the system's
          <code>crypt()</code> routine. Files
          managed by <code>htpasswd</code> may contain a mixture of different encoding
          types of passwords; some
          user records may have bcrypt or MD5-encrypted passwords while others in the
          same file may have passwords encrypted with <code>crypt()</code>.</p>
      
          <p>This manual page only lists the command line arguments. For details of
          the directives necessary to configure user authentication in
          <code class="program"><a href="../programs/httpd.html">httpd</a></code> see the Apache manual, which is part of the
          Apache distribution or can be found at <a href="http://httpd.apache.org">http://httpd.apache.org/</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exit">Exit Status</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Examples</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#security">Security Considerations</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#restrictions">Restrictions</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="../programs/htdbm.html">htdbm</a></code></li><li>The scripts in support/SHA1 which come with the
      distribution.</li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
          <p><code><strong>htpasswd</strong>
          [ -<strong>c</strong> ]
          [ -<strong>i</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>D</strong> ]
          [ -<strong>v</strong> ]  <var>passwdfile</var> <var>username</var></code></p>
      
          <p><code><strong>htpasswd</strong> -<strong>b</strong>
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>D</strong> ]
          [ -<strong>v</strong> ]  <var>passwdfile</var> <var>username</var>
          <var>password</var></code></p>
      
          <p><code><strong>htpasswd</strong> -<strong>n</strong>
          [ -<strong>i</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ] <var>username</var></code></p>
      
          <p><code><strong>htpasswd</strong> -<strong>nb</strong>
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ] <var>username</var>
          <var>password</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code>-b</code></dt>
          <dd>Use batch mode; <em>i.e.</em>, get the password from the command line
          rather than prompting for it. This option should be used with extreme care,
          since <strong>the password is clearly visible</strong> on the command
          line. For script use see the <code>-i</code> option.
          Available in 2.4.4 and later.</dd>
      
          <dt><code>-i</code></dt>
          <dd>Read the password from stdin without verification (for script usage).</dd>
      
          <dt><code>-c</code></dt>
          <dd>Create the <var>passwdfile</var>. If <var>passwdfile</var> already
          exists, it is rewritten and truncated. This option cannot be combined with
          the <code>-n</code> option.</dd>
      
          <dt><code>-n</code></dt>
          <dd>Display the results on standard output rather than updating a file.
          This is useful for generating password records acceptable to Apache for
          inclusion in non-text data stores. This option changes the syntax of the
          command line, since the <var>passwdfile</var> argument (usually the first
          one) is omitted. It cannot be combined with the <code>-c</code> option.</dd>
      
          <dt><code>-m</code></dt>
          <dd>Use MD5 encryption for passwords. This is the default (since version
          2.2.18).</dd>
      
          <dt><code>-B</code></dt>
          <dd>Use bcrypt encryption for passwords. This is currently considered to
          be very secure.</dd>
      
          <dt><code>-C</code></dt>
          <dd>This flag is only allowed in combination with <code>-B</code> (bcrypt
          encryption). It sets the computing time used for the bcrypt algorithm
          (higher is more secure but slower, default: 5, valid: 4 to 17).</dd>
      
          <dt><code>-d</code></dt>
          <dd>Use <code>crypt()</code> encryption for passwords. This is not
          supported by the <code class="program"><a href="../programs/httpd.html">httpd</a></code> server on Windows and
          Netware. This algorithm limits the password length to 8 characters.
          This algorithm is <strong>insecure</strong> by today's standards.
          It used to be the default algorithm until version 2.2.17.</dd>
      
          <dt><code>-s</code></dt>
          <dd>Use SHA encryption for passwords. Facilitates migration from/to Netscape
          servers using the LDAP Directory Interchange Format (ldif).
          This algorithm is <strong>insecure</strong> by today's standards.</dd>
      
          <dt><code>-p</code></dt>
          <dd>Use plaintext passwords. Though <code>htpasswd</code> will support
          creation on all platforms, the <code class="program"><a href="../programs/httpd.html">httpd</a></code> daemon will
          only accept plain text passwords on Windows and Netware.</dd>
      
          <dt><code>-D</code></dt>
          <dd>Delete user. If the username exists in the specified htpasswd file, it
          will be deleted.</dd>
      
          <dt><code>-v</code></dt>
          <dd>Verify password. Verify that the given password matches the password
          of the user stored in the specified htpasswd file.
          Available in 2.4.5 and later.</dd>
      
          <dt><code><var>passwdfile</var></code></dt>
          <dd>Name of the file to contain the user name and password. If
          <code>-c</code> is given, this file is created if it does not already exist,
          or rewritten and truncated if it does exist.</dd>
      
          <dt><code><var>username</var></code></dt>
          <dd>The username to create or update in <var>passwdfile</var>. If
          <var>username</var> does not exist in this file, an entry is added. If it
          does exist, the password is changed.</dd>
      
          <dt><code><var>password</var></code></dt>
          <dd>The plaintext password to be encrypted and stored  in the file. Only
          used with the <code>-b</code> flag.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exit" id="exit">Exit Status</a></h2>
          <p><code>htpasswd</code> returns a zero status ("true") if the username and
          password have been successfully added or updated in the
          <var>passwdfile</var>. <code>htpasswd</code> returns <code>1</code> if it
          encounters some problem accessing files, <code>2</code> if there was a
          syntax problem with the command line, <code>3</code> if the password was
          entered interactively and the verification entry didn't match,
          <code>4</code> if its operation was interrupted, <code>5</code> if a value
          is too long (username, filename, password, or final computed record),
          <code>6</code> if the username contains illegal characters (see the
          <a href="#restrictions">Restrictions section</a>), and <code>7</code>
          if the file is not a valid password file.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Examples</a></h2>
          <div class="example"><p><code>
            htpasswd /usr/local/etc/apache/.htpasswd-users jsmith
          </code></p></div>
      
          <p>Adds or modifies the password for user <code>jsmith</code>. The user
          is prompted for the password. The password will be encrypted using the
          modified Apache MD5 algorithm. If the file does not exist,
          <code>htpasswd</code> will do nothing except return an error.</p>
      
          <div class="example"><p><code>
            htpasswd -c /home/doe/public_html/.htpasswd jane
          </code></p></div>
      
          <p>Creates a new file and stores a record in it for user <code>jane</code>.
          The user is prompted for the password. If the file exists and cannot be
          read, or cannot be written, it is not altered and <code>htpasswd</code>
          will display a message and return an error status.</p>
      
          <div class="example"><p><code>
            htpasswd -db /usr/web/.htpasswd-all jones Pwd4Steve
          </code></p></div>
      
          <p>Encrypts the password from the command line (<code>Pwd4Steve</code>)
          using the <code>crypt()</code> algorithm, and stores it in the specified
          file.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">Security Considerations</a></h2>
          <p>Web password files such as those managed by <code>htpasswd</code> should
          <em>not</em> be within the Web server's URI space -- that is, they should
          not be fetchable with a browser.</p>
      
          <p>This program is not safe as a setuid executable. Do <em>not</em> make it
          setuid.</p>
      
          <p>The use of the <code>-b</code> option is discouraged, since when it is
          used the unencrypted password appears on the command line.</p>
      
          <p>When using the <code>crypt()</code> algorithm, note that only the first
          8 characters of the password are used  to form the password. If the supplied
          password is longer, the extra characters will be silently discarded.</p>
      
          <p>The SHA encryption format does not use salting: for a given password,
          there is only one encrypted representation. The <code>crypt()</code> and
          MD5 formats permute the representation by prepending a random salt string,
          to make dictionary attacks against the passwords more difficult.</p>
      
          <p>The SHA and <code>crypt()</code> formats are insecure by today's
          standards.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="restrictions" id="restrictions">Restrictions</a></h2>
          <p>On the Windows platform, passwords encrypted with
          <code>htpasswd</code> are limited to no more than <code>255</code>
          characters in length. Longer passwords will be truncated to 255
          characters.</p>
      
          <p>The MD5 algorithm used by <code>htpasswd</code> is specific to the Apache
          software; passwords encrypted using it will not be usable with other Web
          servers.</p>
      
          <p>Usernames are limited to <code>255</code> bytes and may not include the
          character <code>:</code>.</p>
      
          <p>The cost of computing a bcrypt password hash value increases
          with the number of rounds specified by the <code>-C</code> option.
          The <code>apr-util</code> library enforces a maximum number of
          rounds of 17 in version <code>1.6.0</code> and later.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/htpasswd.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htpasswd.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htpasswd.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htpasswd.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htpasswd.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htdbm.html.en�����������������������������������������������������0000644�0000000�0000050�00000044564�13412755316�017704� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htdbm - Manipulate DBM password databases - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>htdbm - Manipulate DBM password databases</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/htdbm.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htdbm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/htdbm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>htdbm</code> is used to manipulate the DBM format files used to
          store usernames and password for basic authentication of HTTP users via
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code>.  See the <code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code>
          documentation for more information about these DBM files.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#bugs">Bugs</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exit">Exit Status</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Examples</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#security">Security Considerations</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#restrictions">Restrictions</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code></li><li><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
          <p><code><strong>htdbm</strong>
          [ -<strong>T</strong><var>DBTYPE</var> ]
          [ -<strong>i</strong> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>filename</var> <var>username</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>b</strong>
          [ -<strong>T</strong><var>DBTYPE</var> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>filename</var> <var>username</var> <var>password</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>n</strong>
          [ -<strong>i</strong> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>username</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>nb</strong>
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>username</var> <var>password</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>v</strong>
          [ -<strong>T</strong><var>DBTYPE</var> ]
          [ -<strong>i</strong> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>filename</var> <var>username</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>vb</strong>
          [ -<strong>T</strong><var>DBTYPE</var> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>filename</var> <var>username</var> <var>password</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>x</strong>
          [ -<strong>T</strong><var>DBTYPE</var> ]
          <var>filename</var> <var>username</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>l</strong>
          [ -<strong>T</strong><var>DBTYPE</var> ]
          </code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code>-b</code></dt>
          <dd>Use batch mode; <em>i.e.</em>, get the password from the command line
          rather than prompting for it. This option should be used with extreme care,
          since <strong>the password is clearly visible</strong> on the command
          line. For script use see the <code>-i</code> option.</dd>
      
          <dt><code>-i</code></dt>
          <dd>Read the password from stdin without verification (for script usage).</dd>
      
          <dt><code>-c</code></dt>
          <dd>Create the <var>passwdfile</var>. If <var>passwdfile</var> already
          exists, it is rewritten and truncated. This option cannot be combined with
          the <code>-n</code> option.</dd>
      
          <dt><code>-n</code></dt>
          <dd>Display the results on standard output rather than updating a
          database.  This option changes the syntax of the command line, since the
          <var>passwdfile</var> argument (usually the first one) is omitted. It
          cannot be combined with the <code>-c</code> option.</dd>
      
          <dt><code>-m</code></dt>
          <dd>Use MD5 encryption for passwords. On Windows and Netware, this is
          the default.</dd>
      
          <dt><code>-B</code></dt>
          <dd>Use bcrypt encryption for passwords. This is currently considered to
          be very secure.</dd>
      
          <dt><code>-C</code></dt>
          <dd>This flag is only allowed in combination with <code>-B</code> (bcrypt
          encryption). It sets the computing time used for the bcrypt algorithm
          (higher is more secure but slower, default: 5, valid: 4 to 31).</dd>
      
          <dt><code>-d</code></dt>
          <dd>Use <code>crypt()</code> encryption for passwords. The default on all
          platforms but Windows and Netware. Though possibly supported by
          <code>htdbm</code> on all platforms, it is not supported by the
          <code class="program"><a href="../programs/httpd.html">httpd</a></code> server on Windows and Netware.
          This algorithm is <strong>insecure</strong> by today's standards.</dd>
      
          <dt><code>-s</code></dt>
          <dd>Use SHA encryption for passwords. Facilitates migration from/to Netscape
          servers using the LDAP Directory Interchange Format (ldif).
          This algorithm is <strong>insecure</strong> by today's standards.</dd>
      
          <dt><code>-p</code></dt>
          <dd>Use plaintext passwords. Though <code>htdbm</code> will support
          creation on all platforms, the <code class="program"><a href="../programs/httpd.html">httpd</a></code> daemon will
          only accept plain text passwords on Windows and Netware.</dd>
      
          <dt><code>-l</code></dt>
          <dd>Print each of the usernames and comments from the database on
          stdout.</dd>
      
          <dt><code>-v</code></dt>
          <dd>Verify the username and password.  The program will print a message
          indicating whether the supplied password is valid.  If the password is
          invalid, the program exits with error code 3.</dd>
      
          <dt><code>-x</code></dt>
          <dd>Delete user. If the username exists in the specified DBM file, it
          will be deleted.</dd>
      
          <dt><code>-t</code></dt>
          <dd>Interpret the final parameter as a comment.  When this option is
          specified, an additional string can be appended to the command line; this
          string will be stored in the "Comment" field of the database, associated
          with the specified username.</dd>
      
          <dt><code><var>filename</var></code></dt>
          <dd>The filename of the DBM format file. Usually without the extension
          <code>.db</code>, <code>.pag</code>, or <code>.dir</code>.  If
          <code>-c</code> is given, the DBM file is created if it does not already
          exist, or updated if it does exist.</dd>
      
          <dt><code><var>username</var></code></dt>
          <dd>The username to create or update in <var>passwdfile</var>. If
          <var>username</var> does not exist in this file, an entry is added. If it
          does exist, the password is changed.</dd>
      
          <dt><code><var>password</var></code></dt>
          <dd>The plaintext password to be encrypted and stored in the DBM file.
          Used only with the <code>-b</code> flag.</dd>
      
          <dt><code>-T<var>DBTYPE</var></code></dt>
          <dd>Type of DBM file (SDBM, GDBM, DB, or "default").</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="bugs" id="bugs">Bugs</a></h2>
          <p>One should be aware that there are a number of different DBM file
          formats in existence, and with all likelihood, libraries for more than
          one format may exist on your system. The three primary examples are
          SDBM, NDBM, GNU GDBM, and Berkeley/Sleepycat DB 2/3/4. Unfortunately,
          all these libraries use different file formats, and you must make sure
          that the file format used by <var>filename</var> is the same format that
          <code>htdbm</code> expects to see. <code>htdbm</code> currently has
          no way of determining what type of DBM file it is looking at. If used
          against the wrong format, will simply return nothing, or may create a
          different DBM file with a different name, or at worst, it may corrupt
          the DBM file if you were attempting to write to it.</p>
      
          <p>One can usually use the <code>file</code> program supplied with most
          Unix systems to see what format a DBM file is in.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exit" id="exit">Exit Status</a></h2>
          <p><code>htdbm</code> returns a zero status ("true") if the username and
          password have been successfully added or updated in the DBM File.
          <code>htdbm</code> returns <code>1</code> if it encounters some problem
          accessing files, <code>2</code> if there was a syntax problem with the
          command line, <code>3</code> if the password was entered interactively and
          the verification entry didn't match, <code>4</code> if its operation was
          interrupted, <code>5</code> if a value is too long (username, filename,
          password, or final computed record), <code>6</code> if the username
          contains illegal characters (see the <a href="#restrictions">Restrictions
          section</a>), and <code>7</code> if the file is not a valid DBM password
          file.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Examples</a></h2>
          <div class="example"><p><code>
            htdbm /usr/local/etc/apache/.htdbm-users jsmith
          </code></p></div>
      
          <p>Adds or modifies the password for user <code>jsmith</code>. The user
          is prompted for the password. If executed on a Windows system, the password
          will be encrypted using the  modified Apache MD5 algorithm; otherwise, the
          system's <code>crypt()</code> routine will be used. If the file does not
          exist, <code>htdbm</code> will do nothing except return an error.</p>
      
          <div class="example"><p><code>
            htdbm -c /home/doe/public_html/.htdbm jane
          </code></p></div>
      
          <p>Creates a new file and stores a record in it for user <code>jane</code>.
          The user is prompted for the password. If the file exists and cannot be
          read, or cannot be written, it is not altered and <code>htdbm</code>
          will display a message and return an error status.</p>
      
          <div class="example"><p><code>
            htdbm -mb /usr/web/.htdbm-all jones Pwd4Steve
          </code></p></div>
      
          <p>Encrypts the password from the command line (<code>Pwd4Steve</code>)
          using the MD5 algorithm, and stores it in the specified file.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">Security Considerations</a></h2>
          <p>Web password files such as those managed by <code>htdbm</code> should
          <em>not</em> be within the Web server's URI space -- that is, they should
          not be fetchable with a browser.</p>
      
          <p>The use of the <code>-b</code> option is discouraged, since when it is
          used the unencrypted password appears on the command line.</p>
      
          <p>When using the <code>crypt()</code> algorithm, note that only the first
          8 characters of the password are used  to form the password. If the supplied
          password is longer, the extra characters will be silently discarded.</p>
      
          <p>The SHA encryption format does not use salting: for a given password,
          there is only one encrypted representation. The <code>crypt()</code> and
          MD5 formats permute the representation by prepending a random salt string,
          to make dictionary attacks against the passwords more difficult.</p>
      
          <p>The SHA and <code>crypt()</code> formats are insecure by today's
          standards.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="restrictions" id="restrictions">Restrictions</a></h2>
          <p>On the Windows platform, passwords encrypted with
          <code>htdbm</code> are limited to no more than <code>255</code>
          characters in length. Longer passwords will be truncated to 255
          characters.</p>
      
          <p>The MD5 algorithm used by <code>htdbm</code> is specific to the Apache
          software; passwords encrypted using it will not be usable with other Web
          servers.</p>
      
          <p>Usernames are limited to <code>255</code> bytes and may not include the
          character <code>:</code>.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/htdbm.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htdbm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/htdbm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htdbm.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/apxs.html.en������������������������������������������������������0000644�0000000�0000050�00000046550�13412755316�017556� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>apxs - APache eXtenSion tool - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>apxs - APache eXtenSion tool</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/apxs.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apxs.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apxs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apxs.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>apxs</code> is a tool for building and installing extension
          modules for the Apache HyperText Transfer Protocol (HTTP) server. This is
          achieved by building a dynamic shared object (DSO) from one or more source
          or object <var>files</var> which then can be loaded into the Apache server
          under runtime via the <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code>
          directive from <code class="module"><a href="../mod/mod_so.html">mod_so</a></code>.</p>
      
          <p>So to use this extension mechanism your platform has to support the DSO
          feature and your Apache <code class="program"><a href="../programs/httpd.html">httpd</a></code> binary has to be built with the
          <code class="module"><a href="../mod/mod_so.html">mod_so</a></code> module. The <code>apxs</code> tool automatically
          complains if this is not the case. You can check this yourself by manually
          running the command</p>
      
          <div class="example"><p><code>
            $ httpd -l
          </code></p></div>
      
          <p>The module <code class="module"><a href="../mod/mod_so.html">mod_so</a></code> should be part of the displayed list.
          If these requirements are fulfilled you can easily extend your Apache
          server's functionality by installing your own modules with the DSO mechanism
          by the help of this <code>apxs</code> tool:</p>
      
          <div class="example"><p><code>
            $ apxs -i -a -c mod_foo.c<br />
            gcc -fpic -DSHARED_MODULE -I/path/to/apache/include -c mod_foo.c<br />
            ld -Bshareable -o mod_foo.so mod_foo.o<br />
            cp mod_foo.so /path/to/apache/modules/mod_foo.so<br />
            chmod 755 /path/to/apache/modules/mod_foo.so<br />
            [activating module `foo' in /path/to/apache/etc/httpd.conf]<br />
            $ apachectl restart<br />
            /path/to/apache/sbin/apachectl restart: httpd not running, trying to start<br />
            [Tue Mar 31 11:27:55 1998] [debug] mod_so.c(303): loaded module foo_module<br />
            /path/to/apache/sbin/apachectl restart: httpd started<br />
            $ _
          </code></p></div>
      
          <p>The arguments <var>files</var> can be any C source file (.c), a object
          file (.o) or even a library archive (.a). The <code>apxs</code> tool
          automatically recognizes these extensions and  automatically used the C
          source files for compilation while just using the object and archive files
          for the linking phase. But when using such pre-compiled objects make sure
          they are compiled for position independent code (PIC) to be able to use them
          for a dynamically loaded shared object. For instance with GCC you always
          just have to use <code>-fpic</code>. For other C compilers consult its
          manual page or at watch for the flags <code>apxs</code> uses to compile the
          object files.</p>
      
          <p>For more details about DSO support in Apache read the documentation of
          <code class="module"><a href="../mod/mod_so.html">mod_so</a></code> or perhaps even read the
          <code>src/modules/standard/mod_so.c</code> source file.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Examples</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><code class="program"><a href="../programs/apachectl.html">apachectl</a></code></li><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
          <p><code><strong>apxs</strong> -<strong>g</strong>
          [ -<strong>S</strong> <var>name</var>=<var>value</var> ]
          -<strong>n</strong> <var>modname</var></code></p>
      
          <p><code><strong>apxs</strong> -<strong>q</strong>
          [ -<strong>v</strong> ]
          [ -<strong>S</strong> <var>name</var>=<var>value</var> ]
          <var>query</var> ...</code></p>
      
          <p><code><strong>apxs</strong> -<strong>c</strong>
          [ -<strong>S</strong> <var>name</var>=<var>value</var> ]
          [ -<strong>o</strong> <var>dsofile</var> ]
          [ -<strong>I</strong> <var>incdir</var> ]
          [ -<strong>D</strong> <var>name</var>=<var>value</var> ]
          [ -<strong>L</strong> <var>libdir</var> ]
          [ -<strong>l</strong> <var>libname</var> ]
          [ -<strong>Wc,</strong><var>compiler-flags</var> ]
          [ -<strong>Wl,</strong><var>linker-flags</var> ]
          <var>files</var> ...</code></p>
      
          <p><code><strong>apxs</strong> -<strong>i</strong>
          [ -<strong>S</strong> <var>name</var>=<var>value</var> ]
          [ -<strong>n</strong> <var>modname</var> ]
          [ -<strong>a</strong> ]
          [ -<strong>A</strong> ]
          <var>dso-file</var> ...</code></p>
      
          <p><code><strong>apxs</strong> -<strong>e</strong>
          [ -<strong>S</strong> <var>name</var>=<var>value</var> ]
          [ -<strong>n</strong> <var>modname</var> ]
          [ -<strong>a</strong> ]
          [ -<strong>A</strong> ]
          <var>dso-file</var> ...</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <h3><a name="options.common" id="options.common">Common Options</a></h3>
            <dl>
            <dt><code>-n <var>modname</var></code></dt>
            <dd>This explicitly sets the module name for the <code>-i</code> (install)
            and <code>-g</code> (template generation) option. Use this to explicitly
            specify the module name. For option <code>-g</code> this is required, for
            option <code>-i</code> the <code>apxs</code> tool tries to determine the
            name from the source or (as a fallback) at least by guessing it from the
            filename.</dd>
            </dl>
          
      
          <h3><a name="options.query" id="options.query">Query Options</a></h3>
            <dl>
            <dt><code>-q</code></dt>
            <dd>Performs a query for variables and environment settings used to
            build <code>httpd</code>.  When invoked without <var>query</var> parameters,
            it prints all known variables and their values.  The optional <code>-v</code>
            parameter formats the list output.
      
            <p>Use this to manually determine settings used to build the
            <code>httpd</code> that will load your module.  For instance use</p>
            <div class="example"><p><code>
              INC=-I`apxs -q INCLUDEDIR`
            </code></p></div>
      
            <p>inside your own Makefiles if you need manual access to Apache's C
            header files.</p></dd>
            </dl>
          
      
          <h3><a name="options.conf" id="options.conf">Configuration Options</a></h3>
            <dl>
            <dt><code>-S <var>name</var>=<var>value</var></code></dt>
            <dd>This option changes the apxs settings described above.</dd>
            </dl>
          
      
          <h3><a name="options.template" id="options.template">Template Generation Options</a></h3>
            <dl>
            <dt><code>-g</code></dt>
            <dd>This generates a subdirectory <var>name</var> (see option
            <code>-n</code>) and there two files: A sample module source file named
            <code>mod_<var>name</var>.c</code> which can be used as a template for
            creating your own modules or as a quick start for playing with the
            apxs mechanism. And a corresponding <code>Makefile</code> for even easier
            build and installing of this module.</dd>
            </dl>
          
      
          <h3><a name="options.dso" id="options.dso">DSO Compilation Options</a></h3>
            <dl>
            <dt><code>-c</code></dt>
            <dd>This indicates the compilation operation. It first compiles the C
            source files (.c) of <var>files</var> into corresponding object files (.o)
            and then builds a dynamically shared object in <var>dsofile</var> by
            linking these object files plus the remaining object files (.o and .a) of
            <var>files</var>. If no <code>-o</code> option is specified the output
            file is guessed from the first filename in <var>files</var> and thus
            usually defaults to <code>mod_<var>name</var>.so</code>.</dd>
      
            <dt><code>-o <var>dsofile</var></code></dt>
            <dd>Explicitly specifies the filename of the created dynamically shared
            object. If not specified and the name cannot be guessed from the
            <var>files</var> list, the fallback name <code>mod_unknown.so</code> is
            used.</dd>
      
            <dt><code>-D <var>name</var>=<var>value</var></code></dt>
            <dd>This option is directly passed through to the compilation command(s).
            Use this to add your own defines to the build process.</dd>
      
            <dt><code>-I <var>incdir</var></code></dt>
            <dd>This option is directly passed through to the compilation command(s).
            Use this to add your own include directories to search to the build
            process.</dd>
      
            <dt><code>-L <var>libdir</var></code></dt>
            <dd>This option is directly passed through to the linker command. Use this
            to add your own library directories to search to the build  process.</dd>
      
            <dt><code>-l <var>libname</var></code></dt>
            <dd>This option is directly passed through to the linker command. Use this
            to add your own libraries to search to the build process.</dd>
      
            <dt><code>-Wc,<var>compiler-flags</var></code></dt>
            <dd>This option passes <var>compiler-flags</var> as additional flags to
            the <code>libtool --mode=compile</code> command. Use this to add local
            compiler-specific options.</dd>
      
            <dt><code>-Wl,<var>linker-flags</var></code></dt>
            <dd>This option passes <var>linker-flags</var> as additional
            flags to the <code>libtool --mode=link</code> command. Use this
            to add local linker-specific options.</dd>
      
            <dt><code>-p</code></dt>
            <dd>This option causes apxs to link against the apr/apr-util libraries.
            This is useful when compiling helper programs that use the apr/apr-util
            libraries.</dd>
            </dl>
          
      
          <h3><a name="options.dsoinstall" id="options.dsoinstall">DSO Installation and Configuration Options</a></h3>
          
            <dl>
            <dt><code>-i</code></dt>
            <dd>This indicates the installation operation and installs one or more
            dynamically shared objects into the server's <var>modules</var>
            directory.</dd>
      
            <dt><code>-a</code></dt>
            <dd>This activates the module by automatically adding a corresponding
            <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> line to Apache's
            <code>httpd.conf</code> configuration file, or by enabling it if it
            already exists.</dd>
      
            <dt><code>-A</code></dt>
            <dd>Same as option <code>-a</code> but the created <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> directive is prefixed with a hash
            sign (<code>#</code>), <em>i.e.</em>, the module is just prepared for
            later activation but initially disabled.</dd>
      
            <dt><code>-e</code></dt>
            <dd>This indicates the editing operation, which can be used with the
            <code>-a</code> and <code>-A</code> options similarly to the
            <code>-i</code> operation to edit Apache's <code>httpd.conf</code>
            configuration file without attempting to install the module.</dd>
            </dl>
          
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Examples</a></h2>
          <p>Assume you have an Apache module named <code>mod_foo.c</code> available
          which should extend Apache's server functionality. To accomplish this you
          first have to compile the C source into a shared object suitable for loading
          into the Apache server under runtime via the following command:</p>
      
          <div class="example"><p><code>
            $ apxs -c mod_foo.c<br />
            /path/to/libtool --mode=compile gcc ... -c mod_foo.c<br />
            /path/to/libtool --mode=link gcc ... -o mod_foo.la mod_foo.slo<br />
            $ _
          </code></p></div>
      
          <p>Then you have to update the Apache configuration by making sure a
          <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> directive is present to
          load this shared object. To simplify this step <code>apxs</code> provides
          an automatic way to install the shared object in its "modules" directory
          and updating the <code>httpd.conf</code> file accordingly. This can be
          achieved by running:</p>
      
          <div class="example"><p><code>
            $ apxs -i -a mod_foo.la<br />
            /path/to/instdso.sh mod_foo.la /path/to/apache/modules<br />
            /path/to/libtool --mode=install cp mod_foo.la /path/to/apache/modules
            ...
            chmod 755 /path/to/apache/modules/mod_foo.so<br />
            [activating module `foo' in /path/to/apache/conf/httpd.conf]<br />
            $ _
          </code></p></div>
      
          <p>This way a line named</p>
      
          <div class="example"><p><code>
            LoadModule foo_module modules/mod_foo.so
          </code></p></div>
      
          <p>is added to the configuration file if still not present. If you want to
          have this disabled per default use the <code>-A</code> option,
          <em>i.e.</em></p>
      
          <div class="example"><p><code>
            $ apxs -i -A mod_foo.c
          </code></p></div>
      
          <p>For a quick test of the apxs mechanism you can create a sample Apache
          module template plus a corresponding Makefile via:</p>
      
          <div class="example"><p><code>
            $ apxs -g -n foo<br />
            Creating [DIR]  foo<br />
            Creating [FILE] foo/Makefile<br />
            Creating [FILE] foo/modules.mk<br />
            Creating [FILE] foo/mod_foo.c<br />
            Creating [FILE] foo/.deps<br />
            $ _
          </code></p></div>
      
          <p>Then you can immediately compile this sample module into a shared object
          and load it into the Apache server:</p>
      
          <div class="example"><p><code>
            $ cd foo<br />
            $ make all reload<br />
            apxs -c mod_foo.c<br />
            /path/to/libtool --mode=compile gcc ... -c mod_foo.c<br />
            /path/to/libtool --mode=link gcc ... -o mod_foo.la mod_foo.slo<br />
            apxs -i -a -n "foo" mod_foo.la<br />
            /path/to/instdso.sh mod_foo.la /path/to/apache/modules<br />
            /path/to/libtool --mode=install cp mod_foo.la /path/to/apache/modules
            ...
            chmod 755 /path/to/apache/modules/mod_foo.so<br />
            [activating module `foo' in /path/to/apache/conf/httpd.conf]<br />
            apachectl restart<br />
            /path/to/apache/sbin/apachectl restart: httpd not running, trying to start<br />
            [Tue Mar 31 11:27:55 1998] [debug] mod_so.c(303): loaded module foo_module<br />
            /path/to/apache/sbin/apachectl restart: httpd started<br />
            $ _
          </code></p></div>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/apxs.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apxs.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apxs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apxs.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/apxs.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/httpd.html.ko.euc-kr����������������������������������������������0000644�0000000�0000050�00000026065�13412755316�021121� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>httpd - ¾ÆÆÄÄ¡ ÇÏÀÌÆÛÅØ½ºÆ® Àü¼Û ÇÁ·ÎÅäÄÝ ¼­¹ö - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>httpd - ¾ÆÆÄÄ¡ ÇÏÀÌÆÛÅØ½ºÆ® Àü¼Û ÇÁ·ÎÅäÄÝ ¼­¹ö</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/httpd.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/httpd.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/httpd.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/httpd.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
           <p><code>httpd</code>´Â ¾ÆÆÄÄ¡ ÇÏÀÌÆÛÅØ½ºÆ® Àü¼Û ÇÁ·ÎÅäÄÝ
           (HTTP) ¼­¹ö ÇÁ·Î±×·¥ÀÌ´Ù. ÀÚü(standalone) µ¥¸ó ÇÁ·Î¼¼½º·Î
           ½ÇÇàÇϵµ·Ï ¼³°èµÇ¾ú´Ù. ¿øÇÑ´Ù¸é ¿äûÀ» ó¸®ÇϱâÀ§ÇØ ÀÚ½Ä
           ÇÁ·Î¼¼½º¿Í ¾²·¹µåµéÀ» ¸¸µç´Ù.</p>
      
           <p>ÀϹÝÀûÀ¸·Î <code>httpd</code>¸¦ Á÷Á¢ ½ÇÇàÇϱ⺸´Ù´Â
           À¯´Ð½º±â¹Ý ½Ã½ºÅÛ¿¡¼­´Â <a href="apachectl.html">apachectl</a>À» ÅëÇØ, <a href="../platform/windows.html#winsvc">2000, XP¿¡¼­´Â
           ¼­ºñ½º·Î</a>, <a href="../platform/windows.html#wincons">Windows
           9x¿Í ME¿¡¼­´Â ÄÝ¼Ö ÇÁ·Î±×·¥À¸·Î</a> ½ÇÇàÇØ¾ß ÇÑ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">°³¿ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">¿É¼Ç</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="../invoking.html">¾ÆÆÄÄ¡ ½ÃÀÛ</a></li><li><a href="../stopping.html">¾ÆÆÄÄ¡ Áß´Ü</a></li><li><a href="../configuring.html">¼³Á¤ÆÄÀÏ</a></li><li><a href="../platform/">Ç÷¡Æûº° ¹®¼­</a></li><li><a href="apachectl.html">apachectl</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">°³¿ä</a></h2>
           <p><code><strong>httpd</strong> [ -<strong>d</strong>
           <var>serverroot</var> ] [ -<strong>f</strong> <var>config</var> ]
           [ -<strong>C</strong> <var>directive</var> ] [ -<strong>c</strong>
           <var>directive</var> ] [ -<strong>D</strong> <var>parameter</var> ]
           [ -<strong>e</strong> <var>level</var> ] [ -<strong>E</strong>
           <var>file</var> ] [ <strong>-k</strong> start|restart|graceful|stop ]
           [ -<strong>R</strong> <var>directory</var> ] [ -<strong>h</strong> ]
           [ -<strong>l</strong> ] [ -<strong>L</strong> ] [ -<strong>S</strong> ]
           [ -<strong>t</strong> ] [ -<strong>v</strong> ] [ -<strong>V</strong> ]
           [ -<strong>X</strong> ] [ -<strong>M</strong> ]</code></p>
      
           <p><a href="../platform/windows.html">Windows ½Ã½ºÅÛ</a>¿¡¼­´Â
           ´ÙÀ½ ¾Æ±Ô¸ÕÆ®¸¦ Ãß°¡·Î »ç¿ëÇÒ ¼ö ÀÖ´Ù:</p>
      
           <p><code><strong>httpd</strong> [ -<strong>k</strong>
           install|config|uninstall ] [ -<strong>n</strong> <var>name</var> ]
           [ -<strong>w</strong> ]</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">¿É¼Ç</a></h2>
      
      <dl>
      <dt><code>-d <var>serverroot</var></code></dt>
      
      <dd><code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> Áö½Ã¾îÀÇ
      ±âº»°ªÀ» <var>serverroot</var>·Î ¼³Á¤ÇÑ´Ù. ¼³Á¤ÆÄÀÏ¿¡¼­ ServerRoot
      Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ÀÌ °ªÀ» ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù. ±âº»°ªÀº
      <code>/usr/local/apache2</code>ÀÌ´Ù.</dd>
      
      <dt><code>-f <var>config</var></code></dt>
      
      <dd>½ÃÀÛÇÒ¶§ <var>config</var> ÆÄÀÏ¿¡ ÀÖ´Â Áö½Ã¾î¸¦ »ç¿ëÇÑ´Ù.
      <var>config</var>°¡ /·Î ½ÃÀÛÇÏÁö ¾ÊÀ¸¸é <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>¿¡ »ó´ë°æ·ÎÀÌ´Ù. ±âº»°ªÀº
      <code>conf/httpd.conf</code>ÀÌ´Ù.</dd>
      
      <dt><code>-k <code>start|restart|graceful|stop</code></code></dt>
      
      <dd><code>httpd</code>¸¦ ½ÃÀÛ, Àç½ÃÀÛ, Áß´ÜÇÑ´Ù. ´õ ÀÚ¼¼ÇÑ Á¤º¸´Â
      <a href="../stopping.html">¾ÆÆÄÄ¡ Áß´ÜÇϱâ</a>¸¦ Âü°íÇ϶ó.</dd>
      
      <dt><code>-C <var>directive</var></code></dt>
      
      <dd>¼³Á¤ÆÄÀÏÀ» ÀбâÀü¿¡ <var>directive</var> Áö½Ã¾î¸¦ ó¸®ÇÑ´Ù.</dd>
      
      <dt><code>-c <var>directive</var></code></dt>
      
      <dd>¼³Á¤ÆÄÀÏÀ» ÀбâÀü¿¡ <var>directive</var> Áö½Ã¾î¸¦ ó¸®ÇÑ´Ù.</dd>
      
      
      <dt><code>-D <var>parameter</var></code></dt>
      
      <dd>¼­¹ö ½ÃÀÛ È¤Àº Àç½ÃÀ۽à ¼±ÅÃÀûÀ¸·Î ¸í·É¾î¸¦ ó¸®ÇϱâÀ§ÇØ
      ¼³Á¤ÆÄÀÏÀÇ <code class="directive"><a href="../mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>
      ¼½¼Ç¿¡ »ç¿ëÇÒ <var>parameter</var>¸¦ ¼³Á¤ÇÑ´Ù.</dd>
      
      <dt><code>-e <var>level</var></code></dt>
      
      <dd>¼­¹ö°¡ ½ÃÀÛÇϴµ¿¾È <code class="directive"><a href="../mod/core.html#loglevel">LogLevel</a></code>À»
      <var>level</var>·Î ¼³Á¤ÇÑ´Ù. ÀÌ´Â ½ÃÀÛÁß ¹®Á¦¸¦ ã±âÀ§ÇØ Àá½Ã
      ´õ ÀÚ¼¼ÇÑ ¿À·ù¹®À» ¾òÀ»¶§ À¯¿ëÇÏ´Ù.</dd>
      
      <dt><code>-E <var>file</var></code></dt>
      
      <dd>¼­¹ö°¡ ½ÃÀÛÇϴµ¿¾È <var>file</var>·Î ¿À·ù¹®À» º¸³½´Ù.</dd>
      
      <dt><code>-R <var>directory</var></code></dt>
      
      <dd>¼­¹ö¸¦ <code>SHARED_CORE</code> ±ÔÄ¢À» »ç¿ëÇÏ¿© ÄÄÆÄÀÏÇÑ
      °æ¿ì °øÀ¯¿ÀºêÁ§Æ®ÆÄÀÏ <var>directory</var>¸¦ ÁöÁ¤ÇÑ´Ù.</dd>
      
      <dt><code>-h</code></dt>
      
      <dd>»ç¿ëÇÒ ¼ö ÀÖ´Â ¸í·ÉÇà ¿É¼ÇµéÀÇ ÂªÀº ¿ä¾àÀ» Ãâ·ÂÇÑ´Ù.</dd>
      
      <dt><code>-l</code></dt>
      
      <dd>¼­¹ö¿¡ °°ÀÌ ÄÄÆÄÀÏÇÑ ¸ðµâ ¸ñ·ÏÀ» Ãâ·ÂÇÑ´Ù. <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© µ¿ÀûÀ¸·Î
      ÀоîµéÀÌ´Â ¸ðµâÀº Ãâ·ÂÇÏÁö <strong>¾Ê´Â´Ù</strong>.</dd>
      
      <dt><code>-L</code></dt>
      
      <dd>Áö½Ã¾î ¸ñ·ÏÀ» Áö½Ã¾î°¡ ¹Þ´Â ¾Æ±Ô¸ÕÆ®¿Í Áö½Ã¾î »ç¿ëÀå¼Ò¿Í
      °°ÀÌ Ãâ·ÂÇÑ´Ù.</dd>
      
      <dt><code>-M</code></dt>
      
      <dd>ÀоîµéÀÎ Á¤Àû ¸ðµâ°ú °øÀ¯ ¸ðµâ ¸ñ·ÏÀ» Ãâ·ÂÇÑ´Ù.</dd>
      
      <dt><code>-S</code></dt>
      
      <dd>¼³Á¤ÆÄÀÏ¿¡¼­ ÀоîµéÀÎ ¼³Á¤À» º¸¿©ÁØ´Ù (ÇöÀç´Â °¡»óÈ£½ºÆ®
      ¼³Á¤¸¸À» º¸¿©ÁØ´Ù).</dd>
      
      <dt><code>-t</code></dt>
      
      <dd>¼³Á¤ÆÄÀÏÀÇ ¹®¹ý°Ë»ç¸¸ ÇÑ´Ù. ÇÁ·Î±×·¥Àº ¹®¹ýÀ» °Ë»çÇÑÈÄ
      (¹®¹ýÀÌ ¿Ã¹Ù¸¥ °æ¿ì) 0À̳ª (¹®¹ý¿¡ ¹®Á¦°¡ ÀÖ´Â °æ¿ì) 0ÀÌ ¾Æ´Ñ
      Á¾·áÄÚµå·Î Áï½Ã Á¾·áÇÑ´Ù. -D <var>DUMP</var>_<var>VHOSTS</var>À»
      »ç¿ëÇÏ¸é °¡»óÈ£½ºÆ® ¼³Á¤À» ÀÚ¼¼È÷ Ãâ·ÂÇÑ´Ù. -D
      <var>DUMP</var>_<var>MODULES</var>¸¦ »ç¿ëÇϸé ÀоîµéÀÎ ¸ðµâ
      ¸ñ·ÏÀ» Ãâ·ÂÇÑ´Ù.</dd>
      
      <dt><code>-v</code></dt>
      
      <dd><code>httpd</code>ÀÇ ¹öÀüÀ» Ãâ·ÂÇϰí Á¾·áÇÑ´Ù.</dd>
      
      <dt><code>-V</code></dt>
      
      <dd><code>httpd</code>ÀÇ ¹öÀü°ú ÄÄÆÄÀÏ ÆÄ¶ó¹ÌÅ͸¦ Ãâ·ÂÇϰí
      Á¾·áÇÑ´Ù.</dd>
      
      <dt><code>-X</code></dt>
      
      <dd>µð¹ö±× »óÅ·ΠÀ¥¼­¹ö¸¦ ½ÇÇàÇÑ´Ù. ¿ÀÁ÷ ÇÑ ÇÁ·Î¼¼½º³ª ¾²·¹µå·Î¸¸
      ¼­ºñ½ºÇϰí, ¼­¹ö´Â Äֿܼ¡¼­ ¶³¾îÁöÁö ¾Ê´Â´Ù.</dd>
      
      </dl>
      
      <p>´ÙÀ½ ¾Æ±Ô¸ÕÆ®´Â <a href="../platform/windows.html">Windows
      Ç÷¡Æû</a>¿¡¼­¸¸ »ç¿ëÇÒ ¼ö ÀÖ´Ù:</p>
      
      <dl>
      
      <dt><code>-k install|config|uninstall</code></dt>
      
      <dd>¾ÆÆÄÄ¡¸¦ Windows NT ¼­ºñ½º·Î ¼³Ä¡ÇÑ´Ù; ¾ÆÆÄÄ¡ ¼­ºñ½ºÀÇ ½ÃÀÛ
      ¿É¼ÇÀ» ¼öÁ¤ÇÑ´Ù; ¾ÆÆÄÄ¡ ¼­ºñ½º ¼³Ä¡¸¦ Áö¿î´Ù.</dd>
      
      <dt><code>-n <var>name</var></code></dt>
      
      <dd>¾ÆÆÄÄ¡ ¼­ºñ½ºÀÇ <var>name</var>.</dd>
      
      <dt><code>-w</code></dt>
      
      <dd>¿À·ù°¡ ¹ß»ýÇϸé ÄܼÖâÀ» ¿­¾î¼­ ¿À·ù¹®À» º¸¿©ÁØ´Ù.</dd>
      
      </dl>
      
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/httpd.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/httpd.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/httpd.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/httpd.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/httpd.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htcacheclean.html.tr.utf8�����������������������������������������0000644�0000000�0000050�00000036132�13523273316�022106� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htcacheclean - Disk arabelleğini temizler - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>htcacheclean - Disk arabelleğini temizler</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/htcacheclean.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htcacheclean.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htcacheclean.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htcacheclean.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">Bu çeviri güncel olmayabilir. Son değişiklikler için İngilizce sürüm geçerlidir.</div>
      
          <p><code><strong>htcacheclean</strong></code>,
          <code class="module"><a href="../mod/mod_cache_disk.html">mod_cache_disk</a></code> deposunun boyutlarını belli sınırlar
          içinde veya kullanımdaki dosya düğümlerinin sınırları içinde tutmak için
          kullanılır. Bu araç ya elle ya da bir artalan süreci
          olarak çalıştırılır. Artalan süreci olarak çalıştırıldığında, silinecek
          arabellek içeriğini tespit etmek için arabellek dizinlerine belli
          aralıklarla bakmak dışında uykuda olur. Artalan sürecini temiz olarak
          durdurmak için TERM veya INT sinyali göndermeniz yeterlidir. Elle
          çalıştırıldığında, silinecek arabellek içeriğini tespit etmek için
          arabellek dizinlerine bir kereliÄŸine bakar. Bir veya daha fazla URL
          belirtilmesi durumunda arabellekte olanlar arabellekten silinir.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Kullanım</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#delete">Belli bir URL'nin silinmesi</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#list">Arabellekteki URL'lerin listelenmesi</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exit">Çıkış Durumu</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_cache_disk.html">mod_cache_disk</a></code></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Kullanım</a></h2>
          <p><code><strong>htcacheclean</strong>
          [ -<strong>D</strong> ]
          [ -<strong>v</strong> ]
          [ -<strong>t</strong> ]
          [ -<strong>r</strong> ]
          [ -<strong>n</strong> ]
          [ -<strong>R</strong><var>boyut</var> ]
          -<strong>p</strong><var>yol</var>
          [ -<strong>l</strong><var>sınır</var> |
          -<strong>L</strong><var>limit</var> ]</code></p>
      
          <p><code><strong>htcacheclean</strong>
          [ -<strong>n</strong> ]
          [ -<strong>t</strong> ]
          [ -<strong>i</strong> ]
          [ -<strong>P</strong><var>piddosyası</var> ]
          [ -<strong>R</strong><var>boyut</var> ]
          -<strong>d</strong><var>süre</var>
          -<strong>p</strong><var>yol</var>
          [ -<strong>l</strong><var>sınır</var> |
          -<strong>L</strong><var>limit</var> ]</code></p>
      
          <p><code><strong>htcacheclean</strong>
          [ -<strong>v</strong> ]
          [ -<strong>R</strong><var>boyut</var> ]
          -<strong>p</strong><var>yol</var>
          [ -<strong>a</strong> ]
          [ -<strong>A</strong> ]</code></p>
      
          <p><code><strong>htcacheclean</strong>
          [ -<strong>D</strong> ]
          [ -<strong>v</strong> ]
          [ -<strong>t</strong> ]
          [ -<strong>R</strong><var>boyut</var> ]
          -<strong>p</strong><var>yol</var>
          <var>url</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
          <dl>
          <dt><code><strong>-d</strong><var> süre</var></code></dt>
          <dd>Artalanda çalışarak <code><var>süre</var></code> dakikada bir
          arabelleği temizler. Bu seçenek <code><strong>-D</strong></code>,
          <code><strong>-v</strong></code> ve <code><strong>-r</strong></code>
          seçenekleri ile birlikte kullanılamaz. Artalan sürecini temiz olarak
          sonlandırmak için <code>SIGTERM</code> veya <code>SIGINT</code> göndermek
          yeterlidir.</dd>
      
          <dt><code><strong>-D</strong></code></dt>
          <dd>Kuru kuruya çalışıp, hiçbir şeyi silmez.
          <code><strong>-d</strong></code> seçeneği ile birlikte kullanılamaz. Kuru
          çalıştırma sırasında <code><strong>-t</strong></code> seçeneği ile dizinler
          silinmek istenirse, statlarda silinmiş görünen dosya düğümleri silinmiş
          dizinler olarak hesaba katılmaz ve tahmini olarak imlenir.</dd>
      
          <dt><code><strong>-v</strong></code></dt>
          <dd>Çıktı daha ayrıntılı olur. <code><strong>-d</strong></code> seçeneği
          ile birlikte kullanılamaz.</dd>
      
          <dt><code><strong>-r</strong></code></dt>
          <dd>İyice temizlik yapılır. Bunun için Apache HTTP sunucusunun
          çalışmadığı varsayılır (aksi takdirde arabellek içeriği bozulabilir).
          <code><strong>-t</strong></code> seçeneğinin de uygulanmasını sağlar.
          <code><strong>-d</strong></code> seçeneği ile birlikte kullanılamaz.</dd>
      
          <dt><code><strong>-n</strong></code></dt>
          <dd>Nazik olur. Diğer süreçlerin yararına daha yavaş çalışır. (a) disk
          G/Ç işlemlerinde gecikmeler olursa ve (b) çekirdek bu arada başka bir
          süreci öne çekmişse <code><strong>htcacheclean</strong></code> uyumayı
          tercih edecektir.</dd>
      
          <dt><code><strong>-t</strong></code></dt>
          <dd>Tüm boş dizinleri siler. Öntanımlı olarak, sadece arabellek dosyaları
          silinirse de bazı yapılandırmalarda büyük miktarda dizin oluşturulması bu
          seçeneğin kullanılmasını gerektirebilir. Yapılandırmanız çok sayıda dizin
          gerektiriyorsa ve dosya düğümlerinin veya dosya ayırma tablolarının
          tükenmesi sözkonusu ise bu seçeneğin kullanılması önerilir.</dd>
      
          <dt><code><strong>-p</strong><var> yol</var></code></dt>
          <dd><code><var>yol</var></code>, disk arabelleğinin kök dizini olarak
          belirtilir. <code class="directive"><a href="../mod/mod_cache_disk.html#cacheroot">CacheRoot</a></code>
          yönergesinde belirtilen dizin olmalıdır.</dd>
      
          <dt><code><strong>-P</strong><var>piddosyası</var></code></dt>
          <dd>Artalan süreci olarak çalışmada süreç kimliğinin yazılacağı dosyanın
          adını belirtmek için kullanılır.</dd>
      
          <dt><code><strong>-R</strong><var>boyut</var></code></dt>
          <dd>Disk bloklarının boyunu denkleştirmek için yuvarlanacak üst boyutu
          belirtmekte kullanılır. Arabellek bölümünün blok boyutunu belirler.</dd>
      
          <dt><code><strong>-l</strong><var> sınır</var></code></dt>
          <dd><code><var>sınır</var></code>, disk arabelleğinin toplam boyutu
          olarak belirtilir. Değerin öntanımlı olarak bayt cinsinden belirtileceği
          varsayılır. Değerin sonuna kilobayt için <code>K</code>, megabayt
          <code>M</code>, bayt için <code>B</code>  harfi konulabilir.</dd>
      
          <dt><code><strong>-L</strong><var>limit</var></code></dt>
          <dd>Disk arabellek dosyası düğümü toplamının sınırını belirlemekte
          kullanılır.</dd>
      
          <dt><code><strong>-i</strong></code></dt>
          <dd>Akıllı olup sadece disk arabelleği değiştiği zaman çalışır. Bu
          seçenek <code><strong>-d</strong></code> seçeneği ile birlikte
          belirtilmek zorundadır.</dd>
      
          <dt><code><strong>-a</strong></code></dt>
          <dd>O an arabellekte saklanmakta olan URL'leri listeler. Birden fazla aynı
          URL varsa yalnız biri listelenir.</dd>
      
          <dt><code><strong>-A</strong></code></dt>
          <dd>O an arabellekte saklanmakta olan URL'leri öznitelikleri ile listeler.
          Öznitelikler şu sırayla verilir: url, header size, body size, status,
          entity version, date, expiry, request time, response time, body present,
          head request</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="delete" id="delete">Belli bir URL'nin silinmesi</a></h2>
          <p><code><strong>htcacheclean</strong></code> tarafından aktarılan URL'ler
          arabellekten silinir. Bir URL birden fazla mevcutsa hepsi silinir.</p>
      
          <p>Ters vekilli bir URL silinmişse, etkin URL <strong>Host</strong> başlığı
          <strong>port</strong>, <strong>yol</strong> ve <strong>sorgu</strong> ile
          oluşturulur. Bir sorgu dizgesi olsun olmasın, URL içinde '?' daima açıkça
          belirtilmelidir. Örneğin, <strong>localhost</strong> sunucusundaki
          <strong>/</strong> yolu silinmek istenirse silinecek URL
          <strong>http://localhost:80/?</strong> olurdu.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="list" id="list">Arabellekteki URL'lerin listelenmesi</a></h2>
          <p><code><strong>htcacheclean</strong></code>'e
          <code><strong>-a</strong></code> veya <code><strong>-A</strong></code>
          seçeneğinin aktarılmasıyla, arabellekteki URL'ler bulundukça her satıra bir
          URL gelecek biçemde listelenir. <code><strong>-A</strong></code> seçeneği
          URL'nin ardından arabellek içeriğini tamamını şu sırayla dökümler:</p>
      
          <dl>
              <dt>url</dt><dd>Öğenin URL'si.</dd>
              <dt>header size</dt><dd>Bayt cinsinden başlık uzunluğu.</dd>
              <dt>body size</dt><dd>Bayt cinsinden gövde uzunluğu.</dd>
              <dt>status</dt><dd>Arabellekteki yanıtın durumu.</dd>
              <dt>entity version</dt><dd>Öğenin silinmeksizin kaç kere
                doğrulandığı.</dd>
              <dt>date</dt><dd>Yanıt tarihi.</dd>
              <dt>expiry</dt><dd>Yanıtın zaman aşımı tarihi.</dd>
              <dt>request time</dt><dd>İsteğin başlama zamanı.</dd>
              <dt>response time</dt><dd>İsteğin bitiş zamanı.</dd>
              <dt>body present</dt><dd>0 ise istekle birlikte gövde saklanmaz, 1 ise
                saklanır.</dd>
              <dt>head request</dt><dd>1 ise, öğe, gövde olmaksızın arabellekli bir
                HEAD isteği içerir, 0 ise içermez.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exit" id="exit">Çıkış Durumu</a></h2>
          <p><code><strong>htcacheclean</strong></code>, tüm işlemler başarıyla
          yerine getirildiÄŸinde <code>0</code>, aksi takdirde <code>1</code>
          döndürür. Bir URL belirtildiğinde, bu URL arablleklenmi ve silinmişse
          <code>0</code>, aksi takdirde <code>2</code> döndürür. URL'nin silinmesi
          sırasında bir hata oluşursa <code>1</code> döndürür.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/htcacheclean.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htcacheclean.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htcacheclean.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htcacheclean.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htcacheclean.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/configure.html.ko.euc-kr������������������������������������������0000644�0000000�0000050�00000132675�13412755316�021764� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>configure - ¼Ò½º Æ®¸®¸¦ ±¸¼ºÇÑ´Ù - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>configure - ¼Ò½º Æ®¸®¸¦ ±¸¼ºÇÑ´Ù</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/configure.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/configure.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/configure.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/configure.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p><code>configure</code> ½ºÅ©¸³Æ®´Â ƯÁ¤ Ç÷¡Æû¿¡¼­ ¾ÆÆÄÄ¡
          À¥¼­¹ö¸¦ ÄÄÆÄÀÏÇÏ°í ¼³Ä¡ÇϱâÀ§ÇØ ¼Ò½º Æ®¸®¸¦ ±¸¼ºÇÑ´Ù. ¿©·¯
          ¿É¼ÇÀ» »ç¿ëÇÏ¿© ¿øÇÏ´Â ¿ä±¸Á¶°Ç¿¡ ¸Â°Ô ¼­¹ö¸¦ ÄÄÆÄÀÏÇÒ ¼ö
          ÀÖ´Ù.</p>
      
          <p>¼Ò½º ¹èÆ÷º»ÀÇ ÃÖ»óÀ§ µð·ºÅ丮¿¡ ÀÖ´Â ÀÌ ½ºÅ©¸³Æ®´Â À¯´Ð½º¿Í
          À¯´Ð½º·ù ½Ã½ºÅÛ¿¡¼­¸¸ »ç¿ëÇÑ´Ù. ´Ù¸¥ Ç÷¡ÆûÀ» »ç¿ëÇÑ´Ù¸é
          <a href="../platform/">Ç÷¡Æû</a> ¹®¼­¸¦ Âü°íÇ϶ó.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">°³¿ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">¿É¼Ç</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#env">ȯ°æº¯¼ö</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="../install.html">ÄÄÆÄÀϰú ¼³Ä¡</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">°³¿ä</a></h2>
          <p><code>configure</code> ½ºÅ©¸³Æ®´Â ¹èÆ÷º»ÀÇ ÃÖ»óÀ§
          µð·ºÅ丮¿¡¼­ ½ÇÇàÇØ¾ß ÇÑ´Ù.</p>
      
          <p><code><strong>./configure</strong> [<var>OPTION</var>]...
          [<var>VAR</var>=<var>VALUE</var>]...</code></p>
      
          <p>ȯ°æº¯¼ö¸¦ (¿¹¸¦ µé¾î, <code>CC</code>, <code>CFLAGS</code>,
          ...) ÁöÁ¤ÇÏ·Á¸é, <code><var>VAR</var>=<var>VALUE</var></code>¿Í
          °°ÀÌ Áö½ÃÇÑ´Ù. <a href="#env">¾Æ·¡¿¡¼­</a> À¯¿ëÇÑ È¯°æº¯¼öµéÀ»
          ¼³¸íÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">¿É¼Ç</a></h2>
        <ul>
          <li><a href="#configurationoptions">±¸¼º ¿É¼Ç</a></li>
          <li><a href="#installationdirectories">¼³Ä¡ µð·ºÅ丮</a></li>
          <li><a href="#systemtypes">½Ã½ºÅÛ Á¾·ù</a></li>
          <li><a href="#optionalfeatures">±â´É ¼±ÅÃ</a></li>
          <li><a href="#supportopt">Áö¿ø ÇÁ·Î±×·¥À» À§ÇÑ ¿É¼Ç</a></li>
        </ul>
      
        <h3><a name="configurationoptions" id="configurationoptions">±¸¼º ¿É¼Ç</a></h3>
      
          <p>ÀÌ ¿É¼ÇµéÀº <code>configure</code> ÀÚü Çൿ¿¡ ¿µÇâÀ»
          ÁØ´Ù.</p>
      
          <dl>
            <dt><code>-C</code></dt>
            <dt><code>--config-cache</code></dt>
            <dd><code>--cache-file=config.cache</code>¿Í °°´Ù.</dd>
      
            <dt><code>--cache-file=<var>FILE</var></code></dt>
            <dd>°Ë»ç °á°ú¸¦ <var>FILE</var> ÆÄÀÏ¿¡ ij½ÌÇÑ´Ù.
              ±âº»°ªÀº °Ë»ç °á°ú¸¦ ±â·ÏÇÏÁö ¾Ê´Â´Ù.</dd>
      
            <dt><code>-h</code></dt>
            <dt><code>--help [short|recursive]</code></dt>
            <dd>µµ¿ò¸»À» Ãâ·ÂÇϰí Á¾·áÇÑ´Ù. <code>short</code> ¾Æ±Ô¸ÕÆ®´Â
              ÀÌ ÆÐŰÁö ƯÀ¯ÀÇ ¿É¼Ç¸¸À» Ãâ·ÂÇÑ´Ù. <code>recursive</code>
              ¾Æ±Ô¸ÕÆ®´Â Æ÷ÇÔµÈ ¸ðµç ÆÐŰÁö¿¡ ´ëÇÑ ÂªÀº µµ¿ò¸»À»
              º¸¿©ÁØ´Ù.</dd>
      
            <dt><code>-n</code></dt>
            <dt><code>--no-create</code></dt>
            <dd><code>configure</code> ½ºÅ©¸³Æ®¸¦ Á¤»óÀûÀ¸·Î ½ÇÇàÇÏÁö¸¸,
              Ãâ·ÂÆÄÀÏÀ» ¸¸µéÁö ¾Ê´Â´Ù. ÀÌ ¿É¼ÇÀº ÄÄÆÄÀÏÀ» À§ÇÑ makefileÀ»
              ¸¸µé±â ÀÌÀü¿¡ °Ë»ç °á°ú¸¦ È®ÀÎÇØº¼¶§ À¯¿ëÇÏ´Ù.</dd>
      
            <dt><code>-q</code></dt>
            <dt><code>--quiet</code></dt>
            <dd>½ÇÇàÁß¿¡ <code>checking ...</code> ¹®±¸¸¦ Ãâ·ÂÇÏÁö
              ¾Ê´Â´Ù.</dd>
      
            <dt><code>--srcdir=<var>DIR</var></code></dt>
            <dd><var>DIR</var> µð·ºÅ丮¸¦ ¼Ò½ºÆÄÀÏ µð·ºÅ丮·Î ÁöÁ¤ÇÑ´Ù.
              ±âº»°ªÀº configure°¡ ÀÖ´Â µð·ºÅ丮 ȤÀº »óÀ§µð·ºÅ丮
              <code>..</code>ÀÌ´Ù.</dd>
      
            <dt><code>--silent</code></dt>
            <dd><code>--quiet</code>¿Í °°´Ù.</dd>
      
            <dt>-V</dt>
            <dt>--version</dt>
            <dd>ÀúÀÛ±Ç Á¤º¸¸¦ Ãâ·ÂÇϰí Á¾·áÇÑ´Ù.</dd>
          </dl>
        
      
        <h3><a name="installationdirectories" id="installationdirectories">¼³Ä¡ µð·ºÅ丮</a></h3>
      
          <p>ÀÌ ¿É¼ÇµéÀº ¼³Ä¡ µð·ºÅ丮¸¦ ÁöÁ¤ÇÑ´Ù. ¼³Ä¡ À§Ä¡´Â
            ¼±ÅÃÇÑ ±¸Á¶(layout)¿¡ µû¶ó ´Ù¸£´Ù.</p>
      
          <dl>
            <dt><code>--prefix=<var>PREFIX</var></code></dt>
            <dd>¾ÆÅ°ÅØÃÄ¿¡ µ¶¸³ÀûÀÎ ÆÄÀÏÀ» <var>PREFIX</var>¿¡ ¼³Ä¡ÇÑ´Ù.
              ±âº»°ªÀº <code>/usr/local/apache2</code>ÀÌ´Ù.</dd>
      
            <dt><code>--exec-prefix=<var>EPREFIX</var></code></dt>
            <dd>¾ÆÅ°ÅØÃÄ¿¡ ÀÇÁ¸ÀûÀÎ ÆÄÀÏÀ» <var>EPREFIX</var>¿¡ ¼³Ä¡ÇÑ´Ù.
              ±âº»°ªÀº <var>PREFIX</var> µð·ºÅ丮ÀÌ´Ù.</dd>
          </dl>
      
          <p>±âº»ÀûÀ¸·Î <code>make install</code>Àº
            <code>/usr/local/apache2/bin</code>,
            <code>/usr/local/apache2/lib</code>¿Í °°Àº À§Ä¡¿¡ ¸ðµç
            ÆÄÀÏÀ» ¼³Ä¡ÇÑ´Ù. <code>--prefix=$HOME</code>°ú °°ÀÌ
            <code>--prefix</code> ¿É¼ÇÀ» »ç¿ëÇÏ¿©
            <code>/usr/local/apache2</code> ÀÌ¿ÜÀÇ ¼³Ä¡ »óÀ§µð·ºÅ丮¸¦
            ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù.</p>
      
          <h4><a name="layout" id="layout">µð·ºÅ丮 ±¸Á¶ ÁöÁ¤</a></h4>
            <dl>
              <dt><code>--enable-layout=<var>LAYOUT</var></code></dt>
              <dd>¼³Ä¡ À§Ä¡¸¦ <var>LAYOUT</var> ±¸Á¶¿¡ µû¸£µµ·Ï
                ¼Ò½ºÄÚµå¿Í ÄÄÆÄÀÏ ½ºÅ©¸³Æ®¸¦ ±¸¼ºÇÑ´Ù. ±¸Á¶¸¦ »ç¿ëÇϸé
                ÆÄÀÏ Á¾·ù¿¡ µû¶ó ¼³Ä¡ À§Ä¡¸¦ µû·Î ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù.
                <code>config.layout</code> ÆÄÀÏ¿¡ ¿©·¯ ¼³Á¤ ¿¹°¡ ÀÖ°í,
                À̸¦ Âü°íÇÏ¿© Á÷Á¢ ¼³Á¤À» ¸¸µé ¼öµµ ÀÖ´Ù. ÆÄÀÏ¿¡¼­
                °¢ ±¸Á¶´Â <code>&lt;Layout
                  FOO&gt;...&lt;/Layout&gt;</code>·Î ±¸ºÐµÇ¸ç, ÀÌ
                ºÎºÐÀº <code>FOO</code>¶ó´Â À̸§ÀÇ ±¸Á¶¸¦ ³ªÅ¸³½´Ù.
                ±¸Á¶ÀÇ ±âº»°ªÀº <code>Apache</code>ÀÌ´Ù.</dd>
            </dl>
          
      
          <h4><a name="directoryfinetuning" id="directoryfinetuning">¼³Ä¡ µð·ºÅ丮ÀÇ
            ÀÚ¼¼ÇÑ Á¶Á¤</a></h4>
          
            <p>¼³Ä¡ µð·ºÅ丮¸¦ ´õ ¼öÁ¤ÇÑ´Ù¸é ¾Æ·¡ ¿É¼ÇÀ» »ç¿ëÇÑ´Ù.
              °¢ µð·ºÅ丮ÀÇ ±âº»°ªÀº <code>autoconf</code>°¡ ÁöÁ¤Çϸç,
              ¼±ÅÃÇÑ ±¸Á¶¿¡ µû¶ó ´Ù¸§À» ÁÖÀÇÇ϶ó.</p>
      
            <dl>
              
              <dt><code>--bindir=<var>DIR</var></code></dt>
              <dd>»ç¿ëÀÚ ½ÇÇàÆÄÀÏÀ» <var>DIR</var>¿¡ ¼³Ä¡ÇÑ´Ù. »ç¿ëÀÚ
                ½ÇÇàÆÄÀÏ¿¡´Â »çÀÌÆ® °ü¸®ÀÚ¿¡°Ô À¯¿ëÇÑ
                <code>htpasswd</code>¿Í <code>dbmmanage</code> °°Àº
                Áö¿ø ÇÁ·Î±×·¥µµ Æ÷ÇԵȴÙ. <var>DIR</var>ÀÇ ±âº»°ªÀº
                <code><var>EPREFIX</var>/bin</code>ÀÌ´Ù.</dd>
      
              <dt><code>--datadir=<var>DIR</var></code></dt>
              <dd>¾ÆÅ°ÅØÃÄ µ¶¸³ÀûÀÎ ÀбâÀü¿ë ÀڷḦ <var>DIR</var>¿¡
                ¼³Ä¡ÇÑ´Ù. <code>datadir</code>ÀÇ ±âº»°ªÀº
                <code><var>PREFIX</var>/share</code>ÀÌ´Ù.
                <code>autoconf</code>¿¡ ÀÌ ¿É¼ÇÀÌ ÀÖÁö¸¸ ÇöÀç »ç¿ëÇÏÁö
                ¾Ê´Â´Ù.</dd>
      
              <dt><code>--includedir=<var>DIR</var></code></dt>
              <dd>C Çì´õÆÄÀÏÀ» <var>DIR</var>¿¡ ¼³Ä¡ÇÑ´Ù.
                <code>includedir</code>ÀÇ ±âº»°ªÀº
                <code><var>EPREFIX</var>/include</code>ÀÌ´Ù.</dd>
      
              <dt><code>--infodir=<var>DIR</var></code></dt>
              <dd>info ¹®¼­¸¦ <var>DIR</var>¿¡ ¼³Ä¡ÇÑ´Ù.
                <code>infodir</code>ÀÇ ±âº»°ªÀº
                <code><var>PREFIX</var>/info</code>ÀÌ´Ù. ÇöÀç ÀÌ ¿É¼ÇÀº
                »ç¿ëÇÏÁö ¾Ê´Â´Ù.</dd>
              
              <dt><code>--libdir=<var>DIR</var></code></dt>
              <dd>¿ÀºêÁ§Æ®ÄÚµå ¶óÀ̺귯¸®¸¦ <var>DIR</var>¿¡ ¼³Ä¡ÇÑ´Ù.
                <code>libdir</code>ÀÇ ±âº»°ªÀº
                <code><var>EPREFIX</var>/lib</code>ÀÌ´Ù.</dd>
      
              <dt><code>--libexecdir=<var>DIR</var></code></dt>
              <dd>ÇÁ·Î±×·¥ ½ÇÇàÆÄÀÏÀ» (Áï, °øÀ¯¸ðµâ) <var>DIR</var>¿¡
                ¼³Ä¡ÇÑ´Ù. <code>libexecdir</code>ÀÇ ±âº»°ªÀº
                <code><var>EPREFIX</var>/libexec</code>ÀÌ´Ù.</dd>
      
              <dt><code>--localstatedir=<var>DIR</var></code></dt>
              <dd>º¯°æµÇ´Â ¸Ó½®º° Á¤º¸¸¦ <var>DIR</var>¿¡ ¼³Ä¡ÇÑ´Ù.
                <code>localstatedir</code>ÀÇ ±âº»°ªÀº
                <code><var>PREFIX</var>/var</code>ÀÌ´Ù.
                <code>autoconf</code>¿¡ ÀÌ ¿É¼ÇÀÌ ÀÖÁö¸¸ ÇöÀç »ç¿ëÇÏÁö
                ¾Ê´Â´Ù.</dd>
      
              <dt><code>--mandir=<var>DIR</var></code></dt>
              <dd>man ¹®¼­¸¦ <var>DIR</var>¿¡ ¼³Ä¡ÇÑ´Ù.
                <code>mandir</code>ÀÇ ±âº»°ªÀº
                <code><var>EPREFIX</var>/man</code>ÀÌ´Ù.</dd>
            
              <dt><code>--oldincludedir=<var>DIR</var></code></dt>
              <dd>gcc°¡ ¾Æ´Ñ ÄÄÆÄÀÏ·¯¸¦ À§ÇÑ C Çì´õÆÄÀÏÀ» <var>DIR</var>¿¡
                ¼³Ä¡ÇÑ´Ù. <code>oldincludedir</code>ÀÇ ±âº»°ªÀº
                <code>/usr/include</code>ÀÌ´Ù. <code>autoconf</code>¿¡
                ÀÌ ¿É¼ÇÀÌ ÀÖÁö¸¸ ÇöÀç »ç¿ëÇÏÁö ¾Ê´Â´Ù.</dd>
              
              <dt><code>--sbindir=<var>DIR</var></code></dt>
              <dd>½Ã½ºÅÛ °ü¸®ÀÚ¿ë ½ÇÇàÆÄÀÏÀ» <var>DIR</var>¿¡ ¼³Ä¡ÇÑ´Ù.
                ½Ã½ºÅÛ °ü¸®ÀÚ¿ë ½ÇÇàÆÄÀÏÀ̶õ ¾ÆÆÄÄ¡ À¥¼­¹ö¸¦ ½ÇÇàÇϴµ¥
                ÇÊ¿äÇÑ <code>httpd</code>, <code>apachectl</code>,
                <code>suexec</code> µî ¼­¹ö ÇÁ·Î±×·¥À» ¸»ÇÑ´Ù.
                <code>sbindir</code>ÀÇ ±âº»°ªÀº
                <code><var>EPREFIX</var>/sbin</code>ÀÌ´Ù.</dd>
      
              <dt><code>--sharedstatedir=<var>DIR</var></code></dt>
              <dd>º¯°æµÇ´Â ¾ÆÅ°ÅØÃÄ µ¶¸³ÀûÀÎ ÀڷḦ <var>DIR</var>¿¡
                ¼³Ä¡ÇÑ´Ù. <code>sharedstatedir</code>ÀÇ ±âº»°ªÀº
                <code><var>PREFIX</var>/com</code>ÀÌ´Ù.
                <code>autoconf</code>¿¡ ÀÌ ¿É¼ÇÀÌ ÀÖÁö¸¸ ÇöÀç »ç¿ëÇÏÁö
                ¾Ê´Â´Ù.</dd>
      
              <dt><code>--sysconfdir=<var>DIR</var></code></dt>
              <dd>¼­¹ö ¼³Á¤ÆÄÀÏ <code>httpd.conf</code>,
                <code>mime.types</code>¿Í °°Àº ÀбâÀü¿ë ¸Ó½®º° ÀڷḦ
                <var>DIR</var>¿¡ ¼³Ä¡ÇÑ´Ù. <code>sysconfdir</code>ÀÇ
                ±âº»°ªÀº <code><var>PREFIX</var>/etc</code>ÀÌ´Ù.</dd>
            </dl>        
          
        
        
        <h3><a name="systemtypes" id="systemtypes">½Ã½ºÅÛ Á¾·ù</a></h3>
      
          <p>´Ù¸¥ ½Ã½ºÅÛ¿¡¼­ ½ÇÇàÇÒ ¾ÆÆÄÄ¡ À¥¼­¹ö¸¦
            ±³Â÷ÄÄÆÄÀÏÇϱâ(cross-compile)Çϱâ À§ÇÑ ¿É¼ÇµéÀÌ´Ù. ¼­¹ö¸¦
            ÄÄÆÄÀÏÇÑ ½Ã½ºÅÛ¿¡¼­ ¼­¹ö¸¦ ½ÇÇàÇÏ´Â ÀϹÝÀûÀÎ °æ¿ì, ÀÌ
            ¿É¼ÇÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù.</p>
      
          <dl>
            <dt><code>--build=<var>BUILD</var></code></dt>
            <dd>µµ±¸¸¦ ÄÄÆÄÀÏÇÏ´Â ½Ã½ºÅÛÀÇ Á¾·ù¸¦ ÁöÁ¤ÇÑ´Ù. ±âº»°ªÀº
              <code>config.guess</code> ½ºÅ©¸³Æ®ÀÇ °á°úÀÌ´Ù.</dd>
      
            <dt><code>--host=<var>HOST</var></code></dt>
            <dd>¼­¹ö¸¦ ½ÇÇàÇÒ ½Ã½ºÅÛÀÇ Á¾·ù¸¦ ÁöÁ¤ÇÑ´Ù. <var>HOST</var>ÀÇ
              ±âº»°ªÀº <var>BUILD</var>ÀÌ´Ù.</dd>
      
            <dt><code>--target=<var>TARGET</var></code></dt>
            <dd><var>TARGET</var> ½Ã½ºÅÛ Á¾·ù¸¦ À§ÇÑ ÄÄÆÄÀÏ·¯¸¦ ¸¸µé¶§
              »ç¿ëÇÑ´Ù. ±âº»°ªÀº <var>HOST</var>ÀÌ´Ù.
              <code>autoconf</code>¿¡ ÀÌ ¿É¼ÇÀÌ ÀÖÁö¸¸ ¾ÆÆÄÄ¡ À¥¼­¹ö¿Í´Â
              °ü·ÃÀÌ ¾ø´Ù.</dd>
          </dl>
        
      
        <h3><a name="optionalfeatures" id="optionalfeatures">±â´É ¼±ÅÃ</a></h3>
      
          <p>ÀÌ ¿É¼ÇÀº À¥¼­¹öÀÇ ¼¼ºÎ ±â´ÉÀ» Á¶ÀýÇÑ´Ù.</p>
      
          <h4><a name="generaloptfeat" id="generaloptfeat">ÀϹÝÀûÀÎ ¹®¹ý</a></h4>
            <p>ÀϹÝÀûÀ¸·Î ´ÙÀ½ ¹®¹ýÀ» »ç¿ëÇÏ¿© ±â´ÉÀ» Æ÷ÇÔÇÏ°í »«´Ù:</p>
      
            <dl>
              <dt><code>--disable-<var>FEATURE</var></code></dt>
              <dd><var>FEATURE</var> ±â´ÉÀ» »«´Ù.
                <code>--enable-<var>FEATURE</var>=no</code>¿Í °°´Ù.</dd>
      
              <dt><code>--enable-<var>FEATURE</var>[=<var>ARG</var>]</code></dt>
              <dd><var>FEATURE</var> ±â´ÉÀ» Æ÷ÇÔÇÑ´Ù. <var>ARG</var>ÀÇ
                ±âº»°ªÀº <code>yes</code>ÀÌ´Ù.</dd>
      
              <dt><code>--enable-<var>MODULE</var>=shared</code></dt>
              <dd>ÇØ´ç ¸ðµâÀ» DSO ¸ðµâ·Î ÄÄÆÄÀÏÇÑ´Ù.</dd>
      
              <dt><code>--enable-<var>MODULE</var>=static</code></dt>
              <dd>Æ÷ÇÔÇÏ´Â ¸ðµâÀº ±âº»ÀûÀ¸·Î Á¤ÀûÀ¸·Î ¸µÅ©µÈ´Ù. ÀÌ
                ¿É¼ÇÀº ¸í½ÃÀûÀ¸·Î Á¤Àû ¸µÅ©¸¦ °­Á¦ÇÑ´Ù.</dd>
            </dl>
      
            <div class="note"><h3>ÁÖÀÇ</h3>
              <code>configure</code>´Â <var>foo</var>°¡ ¾ø´Â °æ¿ì
              <code>--enable-<var>foo</var></code>¸¦ »ç¿ëÇØµµ ÀÌ »ç½ÇÀ»
              ¾Ë·ÁÁÖÁö ¾ÊÀ¸¹Ç·Î ÁÖÀÇÇØ¼­ ÀÔ·ÂÇØ¾ß ÇÑ´Ù.
            </div>
          
      
          
          <h4><a name="enabledmodules" id="enabledmodules">±âº»ÀûÀ¸·Î Æ÷ÇÔÇÏ´Â ¸ðµâ</a></h4>
            <p>¾î¶² ¸ðµâÀº ±âº»ÀûÀ¸·Î ÄÄÆÄÀϵDZ⶧¹®¿¡ »ç¿ëÇÏÁö ¾Ê´Â´Ù¸é
              ¸í½ÃÀûÀ¸·Î »©Áà¾ß ÇÑ´Ù. ´ÙÀ½ ¿É¼ÇÀº ƯÁ¤ ¸ðµâÀ» ÄÄÆÄÀÏ
              °úÁ¤¿¡¼­ Á¦¿ÜÇÑ´Ù.</p>
      
            <dl>
              <dt><code>--disable-actions</code></dt>
              <dd><code class="module"><a href="../mod/mod_actions.html">mod_actions</a></code>°¡ Á¦°øÇÏ´Â ¿äû¿¡ ´ëÇÑ
                Çൿ ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù.</dd>
      
              <dt><code>--disable-alias</code></dt>
              <dd><code class="module"><a href="../mod/mod_alias.html">mod_alias</a></code>°¡ Á¦°øÇÏ´Â ¿äûÀ»
                ÆÄÀϽýºÅÛÀÇ ´Ù¸¥ ºÎºÐÀ¸·Î ´ëÀÀÇÏ´Â ±â´ÉÀ» »ç¿ëÇÏÁö
                ¾Ê´Â´Ù.</dd>
      
              <dt><code>--disable-asis</code></dt>
              <dd><code class="module"><a href="../mod/mod_asis.html">mod_asis</a></code>°¡ Á¦°øÇÏ´Â as-is ÆÄÀÏÇüÀ»
                Áö¿øÇÏÁö ¾Ê´Â´Ù.</dd>
      
              <dt><code>--disable-auth</code></dt>
              <dd><code class="module"><a href="../mod/mod_auth.html">mod_auth</a></code>°¡ Á¦°øÇÏ´Â »ç¿ëÀÚº° Á¢±ÙÁ¦¾î
                ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù. ÀÌ ¸ðµâÀº »ç¿ëÀÚ¸í°ú ¾ÏÈ£¸¦
                ÀÏ¹Ý ¹®ÀÚÆÄÀÏ¿¡ ÀúÀåÇÏ´Â HTTP Basic Authentication¿¡¼­
                »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--disable-autoindex</code></dt>
              <dd><code class="module"><a href="../mod/mod_autoindex.html">mod_autoindex</a></code>°¡ Á¦°øÇÏ´Â µð·ºÅ丮
                ¸ñ·Ï ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù.</dd>
      
              <dt><code>--disable-access</code></dt>
              <dd><code class="module"><a href="../mod/mod_access.html">mod_access</a></code>°¡ Á¦°øÇϴ ȣ½ºÆ®º°
                Á¢±ÙÁ¦¾î ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù.</dd>
      
              <dt><code>--disable-cgi</code></dt>
              <dd>ºñ¾²·¹µå MPMÀ» »ç¿ëÇÏ´Â °æ¿ì CGI ½ºÅ©¸³Æ®¸¦ Áö¿øÇÏ´Â
                <code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code>¸¦ ±âº»ÀûÀ¸·Î Æ÷ÇÔÇÑ´Ù. ÀÌ
                ¿É¼ÇÀ» »ç¿ëÇϸé CGI¸¦ Áö¿øÇÏÁö ¾Ê´Â´Ù.</dd>
      
              <dt><code>--disable-cgid</code></dt>
              <dd>¾²·¹µå MPMÀÎ <code class="module"><a href="../mod/worker.html">worker</a></code>³ª
                <code class="module"><a href="../mod/perchild.html">perchild</a></code>¸¦ »ç¿ëÇÏ´Â °æ¿ì ±âº»ÀûÀ¸·Î
                <code class="module"><a href="../mod/mod_cgid.html">mod_cgid</a></code>°¡ CGI ½ºÅ©¸³Æ®¸¦ Áö¿øÇÑ´Ù.
                ÀÌ ¿É¼ÇÀ» »ç¿ëÇϸé CGI¸¦ Áö¿øÇÏÁö ¾Ê´Â´Ù.</dd>
      
              <dt><code>--disable-charset-lite</code></dt>
              <dd><code class="module"><a href="../mod/mod_charset_lite.html">mod_charset_lite</a></code>°¡ Á¦°øÇÏ´Â ¹®ÀÚÁýÇÕ
                º¯È¯ ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù. ÀÌ ¸ðµâÀº EBCDIC ½Ã½ºÅÛ¿¡¼­¸¸
                ±âº»ÀûÀ¸·Î Æ÷ÇÔÇÑ´Ù.</dd>
      
              <dt><code>--disable-dir</code></dt>
              <dd><code class="module"><a href="../mod/mod_dir.html">mod_dir</a></code>ÀÌ Á¦°øÇÏ´Â µð·ºÅ丮 ¿äû
                ó¸® ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù.</dd>
      
              <dt><code>--disable-env</code></dt>
              <dd><code class="module"><a href="../mod/mod_env.html">mod_env</a></code>°¡ Á¦°øÇϴ ȯ°æº¯¼ö ¼³Á¤/ÇØÁ¦
                ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù.</dd>
      
              
              <dt><code>--disable-http</code></dt>
                <dd>HTTP ÇÁ·ÎÅäÄÝÀ» ó¸®ÇÏÁö ¾Ê´Â´Ù. <code>http</code>
                  ¸ðµâÀº ¼­¹ö°¡ À¥¼­¹ö·Î µ¿ÀÛÇϴµ¥ ±âº»ÀûÀÎ ¸ðµâÀÌ´Ù.
                  ´ë½Å ´Ù¸¥ ÇÁ·ÎÅäÄÝ ¸ðµâÀ» »ç¿ëÇÒ °æ¿ì¿¡¸¸ ÀÌ ¸ðµâÀÌ
                  À¯¿ëÇÏ´Ù. <strong>ÀÚ½ÅÀÌ ¹«¾ùÀ» ÇÏ´ÂÁö È®½ÇÈ÷ ¾ËÁö
                  ¸øÇÑ´Ù¸é ÀÌ ¿É¼ÇÀ» »©Áö ¸¶¶ó</strong>
                  <br />
                  ÁÖÀÇ: ÀÌ ¸ðµâÀº Ç×»ó Á¤ÀûÀ¸·Î ¸µÅ©µÈ´Ù.</dd>
      
              <dt><code>--disable-imagemap</code></dt>
              <dd><code class="module"><a href="../mod/mod_imagemap.html">mod_imagemap</a></code>ÀÌ Á¦°øÇÏ´Â ¼­¹ö±â¹Ý imagemap
                ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù.</dd>
      
              <dt><code>--disable-include</code></dt>
              <dd><code class="module"><a href="../mod/mod_include.html">mod_include</a></code>°¡ Á¦°øÇÏ´Â Server Side
                Includes ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù.</dd>
      
              <dt><code>--disable-log-config</code></dt>
              <dd><code class="module"><a href="../mod/mod_log_config.html">mod_log_config</a></code>°¡ Á¦°øÇÏ´Â ·Î±×
                ¼³Á¤À» »ç¿ëÇÏÁö ¾Ê´Â´Ù. ÀÌ ¸ðµâÀÌ ¾øÀ¸¸é ¼­¹öÀÇ ¿äûÀ»
                ·Î±×¿¡ ±â·ÏÇÒ ¼ö ¾ø´Ù.</dd>
      
              <dt><code>--disable-mime</code></dt>
              <dd><code class="module"><a href="../mod/mod_mime.html">mod_mime</a></code>Àº ¿äûÇÑ ÆÄÀϸíÀÇ È®ÀåÀÚ¿¡
                µû¶ó ÆÄÀÏÀÇ Çൿ°ú ³»¿ë(mime-type, ¾ð¾î, ¹®ÀÚÁýÇÕ,
                ÀÎÄÚµù)À» °áÁ¤ÇÑ´Ù. (ÀÌ ¸ðµâÀ» Á¦°ÅÇÏ¿©) ÆÄÀÏ È®ÀåÀÚ¸¦
                MIME°ú ¿¬°üÇÏÁö ¾Ê´Â °ÍÀ» ÀϹÝÀûÀ¸·Î ÃßõÇÏÁö ¾Ê´Â´Ù.</dd>
      
              <dt><code>--disable-negotiation</code></dt>
              <dd><code class="module"><a href="../mod/mod_negotiation.html">mod_negotiation</a></code>ÀÌ Á¦°øÇÏ´Â ³»¿ëÇù»ó
                ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù.</dd>
      
              <dt><code>--disable-setenvif</code></dt>
              <dd><code class="module"><a href="../mod/mod_setenvif.html">mod_setenvif</a></code>°¡ Á¦°øÇÏ´Â Çì´õ¿¡
                µû¶ó ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÏ´Â ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù.</dd>
      
              <dt><code>--disable-status</code></dt>
              <dd><code class="module"><a href="../mod/mod_status.html">mod_status</a></code>°¡ Á¦°øÇÏ´Â ÇÁ·Î¼¼½º/¾²·¹µå
                °¨½Ã ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù.</dd>
      
              <dt><code>--disable-userdir</code></dt>
              <dd><code class="module"><a href="../mod/mod_userdir.html">mod_userdir</a></code>ÀÌ Á¦°øÇÏ´Â ¿äûÀ» »ç¿ëÀÚº°
                µð·ºÅ丮¿¡ ´ëÀÀÇÏ´Â ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù.</dd>
            </dl>
          
      
          <h4><a name="disabledmodules" id="disabledmodules">±âº»ÀûÀ¸·Î Æ÷ÇÔÇÏÁö ¾Ê´Â ¸ðµâ</a></h4>
            <p>±âº»ÀûÀ¸·Î ÄÄÆÄÀϵǴ ¸ðµâµµ ÀÖÁö¸¸, ¸ðµâÀ» »ç¿ëÇÏ·Á¸é
              Á÷Á¢ ȤÀº <code>most</code>³ª <code>all</code> Ű¿öµå¸¦
              »ç¿ëÇÏ¿© ¸í½ÃÀûÀ¸·Î Æ÷ÇÔÇØ¾ß ÇÏ´Â ¸ðµâÀÌ ÀÖ´Ù. ±×·¡¼­
              ¾Æ·¡ ¿É¼ÇµéÀ» »ç¿ëÇÑ´Ù.</p>
      
            <dl>
              <dt><code>--enable-auth-anon</code></dt>
              <dd><code class="module"><a href="../mod/mod_auth_anon.html">mod_auth_anon</a></code>ÀÌ Á¦°øÇÏ´Â À͸í»ç¿ëÀÚ
                Á¢±Ù ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-auth-dbm</code></dt>
              <dd><code class="module"><a href="../mod/mod_auth_dbm.html">mod_auth_dbm</a></code>Àº »ç¿ëÀÚ¸í°ú ¾ÏÈ£¸¦
                DBMÇü½ÄÀÇ µ¥ÀÌÅͺ£À̽º ÆÄÀÏ¿¡ ÀúÀåÇÏ´Â HTTP Basic
                Authentication¿¡¼­ »ç¿ëÇÑ´Ù. ¸ðµâÀ» »ç¿ëÇÏ·Á¸é ÀÌ
                ¿É¼ÇÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-auth-digest</code></dt>
              <dd><code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code>°¡ Á¦°øÇÏ´Â RFC2617
                Digest authenticationÀ» »ç¿ëÇÑ´Ù. ÀÌ ¸ðµâÀº Á¤º¸¸¦
                ÀÏ¹Ý ¹®ÀÚÆÄÀÏ¿¡ ÀúÀåÇÑ´Ù.</dd>
      
              <dt><code>--enable-authnz-ldap</code></dt>
              <dd><code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code>ÀÌ Á¦°øÇÏ´Â LDAP±â¹Ý
                ÀÎÁõ ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
                
              <dt><code>--enable-cache</code></dt>
              <dd><code class="module"><a href="../mod/mod_cache.html">mod_cache</a></code>°¡ Á¦°øÇÏ´Â µ¿ÀûÀ¸·Î »ý¼ºÇÏ´Â
                ÆÄÀÏÀÇ Ä³½Ì ±â´ÉÀ» »ç¿ëÇÑ´Ù. ¸Å¿ì ºÎÇϰ¡ ¸¹°Å³ª ÇÁ·Ï½Ã
                ¼­¹ö¸¦ ij½ÌÇÏ´Â ¼­¹ö¿¡°Ô ÀÌ ½ÇÇèÀûÀÎ ¸ðµâÀÌ À¯¿ëÇÒ
                ¼ö ÀÖ´Ù. ÃÖ¼ÒÇÑ ÇѰ¡Áö ÀúÀå°ü¸®¸ðµâ(storage management
                module)À» (¿¹¸¦ µé¾î, <code class="module"><a href="../mod/mod_cache_disk.html">mod_cache_disk</a></code>³ª
                <code class="module"><a href="../mod/mod_mem_cache.html">mod_mem_cache</a></code>) °°ÀÌ »ç¿ëÇØ¾ß ÇÑ´Ù.</dd>
      
              <dt><code>--enable-cern-meta</code></dt>
              <dd><code class="module"><a href="../mod/mod_cern_meta.html">mod_cern_meta</a></code>°¡ Á¦°øÇÏ´Â CERN ¸ÞŸÆÄÀÏ
                Áö¿ø ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-charset-lite</code></dt>
              <dd><code class="module"><a href="../mod/mod_charset_lite.html">mod_charset_lite</a></code>°¡ Á¦°øÇÏ´Â ¹®ÀÚÁýÇÕ
                º¯È¯ ±â´ÉÀ» »ç¿ëÇÑ´Ù. ÀÌ ¸ðµâÀº EBCDIC ½Ã½ºÅÛ¿¡¼­¸¸
                ±âº»ÀûÀ¸·Î Æ÷ÇԵȴÙ. ´Ù¸¥ ½Ã½ºÅÛ¿¡¼­´Â Á÷Á¢ Æ÷ÇÔ½ÃÄÑÁà¾ß
                ÇÑ´Ù.</dd>
      
              <dt><code>--enable-dav</code></dt>
              <dd><code class="module"><a href="../mod/mod_dav.html">mod_dav</a></code>°¡ Á¦°øÇÏ´Â WebDAV ÇÁ·ÎÅäÄÝ
                ó¸® ±â´ÉÀ» »ç¿ëÇÑ´Ù. µ¶¸³µÈ <code class="module"><a href="../mod/mod_dav_fs.html">mod_dav_fs</a></code>
                ¸ðµâÀÌ ÆÄÀϽýºÅÛ ÀÚ¿øÀ» Áö¿øÇÑ´Ù. ÀÌ ¸ðµâÀº
                <code>--enable-dav</code>¸¦ »ç¿ëÇϸé ÀÚµ¿À¸·Î Æ÷ÇÔÇÑ´Ù.<br />
                ÁÖÀÇ: <code class="module"><a href="../mod/mod_dav.html">mod_dav</a></code>´Â <code>http</code>
                ÇÁ·ÎÅäÄÝ ¸ðµâ°ú °°ÀÌ »ç¿ëÇØ¾ß ÇÑ´Ù.</dd>
      
              <dt><code>--enable-dav-fs</code></dt>
              <dd><code class="module"><a href="../mod/mod_dav_fs.html">mod_dav_fs</a></code>°¡ Á¦°øÇÏ´Â DAVÀÇ ÆÄÀϽýºÅÛ
                ÀÚ¿ø Áö¿ø ±â´ÉÀ» »ç¿ëÇÑ´Ù. ÀÌ ¸ðµâÀº
                <code class="module"><a href="../mod/mod_dav.html">mod_dav</a></code> ¸ðµâÀ» À§ÇÑ Á¦°øÀÚÀ̱⠶§¹®¿¡
                <code>--enable-dav</code>µµ »ç¿ëÇØ¾ß ÇÑ´Ù.</dd>
      
              <dt><code>--enable-deflate</code></dt>
              <dd><code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code>°¡ Á¦°øÇÏ´Â ¾ÐÃàÀü¼Û
                ÀÎÄÚµù ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-disk-cache</code></dt>
              <dd><code class="module"><a href="../mod/mod_cache_disk.html">mod_cache_disk</a></code>°¡ Á¦°øÇÏ´Â µð½ºÅ©
                ij½Ì ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-expires</code></dt>
              <dd><code class="module"><a href="../mod/mod_expires.html">mod_expires</a></code>°¡ Á¦°øÇÏ´Â Expires
                Çì´õ Á¶Àý ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-ext-filter</code></dt>
              <dd><code class="module"><a href="../mod/mod_ext_filter.html">mod_ext_filter</a></code>°¡ Á¦°øÇÏ´Â ¿ÜºÎ
                ÇÊÅÍ Áö¿ø ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-file-cache</code></dt>
              <dd><code class="module"><a href="../mod/mod_file_cache.html">mod_file_cache</a></code>°¡ Á¦°øÇÏ´Â ÆÄÀÏ
                ij½Ì ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-headers</code></dt>
              <dd><code class="module"><a href="../mod/mod_headers.html">mod_headers</a></code>°¡ Á¦°øÇÏ´Â HTTP Çì´õ
                Á¶Àý ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-info</code></dt>
              <dd><code class="module"><a href="../mod/mod_info.html">mod_info</a></code>°¡ Á¦°øÇÏ´Â ¼­¹öÁ¤º¸ ±â´ÉÀ»
                »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-ldap</code></dt>
              <dd><code class="module"><a href="../mod/mod_ldap.html">mod_ldap</a></code>ÀÌ Á¦°øÇÏ´Â LDAP ij½Ì°ú
                ¿¬°áÇ® ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-logio</code></dt>
              <dd><code class="module"><a href="../mod/mod_logio.html">mod_logio</a></code>°¡ Á¦°øÇÏ´Â ·Î±×¿¡ Çì´õ¿Í
                ÀÔÃâ·Â ¹ÙÀÌÆ®¼ö¸¦ ±â·ÏÇÏ´Â ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-mem-cache</code></dt>
              <dd><code class="module"><a href="../mod/mod_mem_cache.html">mod_mem_cache</a></code>°¡ Á¦°øÇÏ´Â ¸Þ¸ð¸®
                ij½Ì ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-mime-magic</code></dt>
              <dd><code class="module"><a href="../mod/mod_mime_magic.html">mod_mime_magic</a></code>ÀÌ Á¦°øÇÏ´Â MIME
                type ÀÚµ¿ ÀÎ½Ä ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-isapi</code></dt>
              <dd><code class="module"><a href="../mod/mod_isapi.html">mod_isapi</a></code>°¡ Á¦°øÇÏ´Â isapi È®ÀåÀ»
                Áö¿øÇÑ´Ù.</dd>
      
              <dt><code>--enable-proxy</code></dt>
              <dd><code class="module"><a href="../mod/mod_proxy.html">mod_proxy</a></code>°¡ Á¦°øÇÏ´Â ÇÁ·Ï½Ã/°ÔÀÌÆ®¿þÀÌ
                ±â´ÉÀ» »ç¿ëÇÑ´Ù. <code>CONNECT</code>, <code>FTP</code>,
                <code>HTTP</code>¿¡ ´ëÇÑ ÇÁ·Ï½Ã ±â´ÉÀ» °¢°¢
                <code class="module"><a href="../mod/mod_proxy_connect.html">mod_proxy_connect</a></code>,
                <code class="module"><a href="../mod/mod_proxy_ftp.html">mod_proxy_ftp</a></code>,
                <code class="module"><a href="../mod/mod_proxy_http.html">mod_proxy_http</a></code>
                ¸ðµâÀÌ Á¦°øÇÑ´Ù. <code>--enable-proxy</code>¸¦ »ç¿ëÇϸé
                ÀÌ ¼¼ ¸ðµâÀ» ÀÚµ¿À¸·Î Æ÷ÇÔÇÑ´Ù.</dd>
      
              <dt><code>--enable-proxy-connect</code></dt>
              <dd><code class="module"><a href="../mod/mod_proxy_connect.html">mod_proxy_connect</a></code>°¡ Á¦°øÇÏ´Â
                <code>CONNECT</code> ¿äû¿¡ ´ëÇÑ ÇÁ·Ï½Ã Áö¿ø ±â´ÉÀ»
                »ç¿ëÇÑ´Ù. ÀÌ ¸ðµâÀº <code class="module"><a href="../mod/mod_proxy.html">mod_proxy</a></code> ¸ðµâÀÇ
                È®ÀåÀ̹ǷÎ, <code>--enable-proxy</code>µµ °°ÀÌ »ç¿ëÇØ¾ß
                ÇÑ´Ù.</dd>
      
              <dt><code>--enable-proxy-ftp</code></dt>
              <dd><code class="module"><a href="../mod/mod_proxy_ftp.html">mod_proxy_ftp</a></code>°¡ Á¦°øÇÏ´Â
                <code>FTP</code> ¿äû¿¡ ´ëÇÑ ÇÁ·Ï½Ã Áö¿ø ±â´ÉÀ» »ç¿ëÇÑ´Ù.
                ÀÌ ¸ðµâÀº <code class="module"><a href="../mod/mod_proxy.html">mod_proxy</a></code> ¸ðµâÀÇ È®ÀåÀ̹ǷÎ,
                <code>--enable-proxy</code>µµ °°ÀÌ »ç¿ëÇØ¾ß ÇÑ´Ù.</dd>
      
              <dt><code>--enable-proxy-http</code></dt>
              <dd><code class="module"><a href="../mod/mod_proxy_http.html">mod_proxy_http</a></code>°¡ Á¦°øÇÏ´Â
                <code>HTTP</code> ¿äû¿¡ ´ëÇÑ ÇÁ·Ï½Ã Áö¿ø ±â´ÉÀ» »ç¿ëÇÑ´Ù.
                ÀÌ ¸ðµâÀº <code class="module"><a href="../mod/mod_proxy.html">mod_proxy</a></code> ¸ðµâÀÇ È®ÀåÀ̹ǷÎ,
                <code>--enable-proxy</code>µµ °°ÀÌ »ç¿ëÇØ¾ß ÇÑ´Ù.</dd>
      
              <dt><code>--enable-rewrite</code></dt>
              <dd><code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>°¡ Á¦°øÇÏ´Â ±ÔÄ¢±â¹Ý
                URL Á¶ÀÛ ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-so</code></dt>
              <dd><code class="module"><a href="../mod/mod_so.html">mod_so</a></code>°¡ Á¦°øÇÏ´Â DSO ±â´ÉÀ» »ç¿ëÇÑ´Ù.
                <code>--enable-mods-shared</code> ¿É¼ÇÀ» »ç¿ëÇϸé
                ÀÚµ¿À¸·Î ÀÌ ¸ðµâÀ» Æ÷ÇÔÇÑ´Ù.</dd>
      
              <dt><code>--enable-speling</code></dt>
              <dd><code class="module"><a href="../mod/mod_spelling.html">mod_spelling</a></code>ÀÌ Á¦°øÇÏ´Â URL¿¡¼­
                ÀϹÝÀûÀÎ ¸ÂÃã¹ý ½Ç¼ö¸¦ °íÄ¡´Â ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-ssl</code></dt>
              <dd><code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>ÀÌ Á¦°øÇÏ´Â SSL/TLS ±â´ÉÀ»
                »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-unique-id</code></dt>
              <dd><code class="module"><a href="../mod/mod_unique_id.html">mod_unique_id</a></code>°¡ Á¦°øÇÏ´Â ¿äû¸¶´Ù
                À¯ÀÏÇÑ ½Äº°ÀÚ¸¦ ¸¸µå´Â ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-usertrack</code></dt>
              <dd><code class="module"><a href="../mod/mod_usertrack.html">mod_usertrack</a></code>ÀÌ Á¦°øÇÏ´Â »ç¿ëÀÚ¼¼¼Ç
                ÃßÀû ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-vhost-alias</code></dt>
              <dd><code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code>°¡ Á¦°øÇÏ´Â ´ë·®
                °¡»óÈ£½ºÆ® ±â´ÉÀ» »ç¿ëÇÑ´Ù.</dd>
            </dl>
          
      
          <h4><a name="developermodules" id="developermodules">°³¹ßÀÚ¸¦ À§ÇÑ ¸ðµâ</a></h4>
            <p>´ÙÀ½ ¸ðµâÀº Å×½ºÆ®¿ëÀ¸·Î °³¹ßÀÚ¿¡°Ô¸¸ À¯¿ëÇϸç, ±âº»ÀûÀ¸·Î
              Æ÷ÇÔÇÏÁö ¾Ê´Â´Ù. ÀÌ ¸ðµâÀ» »ç¿ëÇÏ·Á¸é ´ÙÀ½ ¿É¼ÇÀ» »ç¿ëÇÑ´Ù.
              ÀÌ ¸ðµâÀÌ ÇÊ¿äÇÑÁö È®½ÇÄ¡¾Ê´Ù¸é »ç¿ëÇÏÁö ¸¶¶ó.</p>
      
            <dl>
              
              <dt><code>--enable-bucketeer</code></dt>
              <dd><code>mod_bucketeer</code>°¡ Á¦°øÇÏ´Â ¹öŶ(bucket)
                Á¶ÀÛ ÇÊÅ͸¦ »ç¿ëÇÑ´Ù.</dd>
      
              
              <dt><code>--enable-case-filter</code></dt>
              <dd><code>mod_case_filter</code>ÀÇ ´ë¹®ÀÚº¯È¯ Ãâ·ÂÇÊÅÍ
                °ßº»À» »ç¿ëÇÑ´Ù.</dd>
      
              
              <dt><code>--enable-case-filter-in</code></dt>
              <dd><code>mod_case_filter_in</code>ÀÇ ´ë¹®ÀÚº¯È¯ ÀÔ·ÂÇÊÅÍ
                °ßº»À» »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-echo</code></dt>
              <dd><code class="module"><a href="../mod/mod_echo.html">mod_echo</a></code>°¡ Á¦°øÇÏ´Â ECHO ¼­¹ö¸¦
                »ç¿ëÇÑ´Ù.</dd>
      
              <dt><code>--enable-example</code></dt>
              <dd>°ßº» ¿¹Á¦¸ðµâÀÎ <code class="module"><a href="../mod/mod_example.html">mod_example</a></code>À»
                »ç¿ëÇÑ´Ù.</dd>
      
              
              <dt><code>--enable-optional-fn-export</code></dt>
              <dd><code>mod_optional_fn_export</code>°¡ Á¦°øÇÏ´Â ¼±ÅÃÀûÀÎ
                ÇÔ¼ö ¿¢½ºÆ÷Æ®(exporter)ÀÇ ¿¹¸¦ »ç¿ëÇÑ´Ù.</dd>
      
              
              <dt><code>--enable-optional-fn-import</code></dt>
              <dd><code>mod_optional_fn_import</code>°¡ Á¦°øÇÏ´Â ¼±ÅÃÀûÀÎ
                ÇÔ¼ö ÀÓÆ÷Æ®(importer)ÀÇ ¿¹¸¦ »ç¿ëÇÑ´Ù.</dd>
      
              
              <dt><code>--enable-optional-hook-export</code></dt>
              <dd><code>mod_optional_hook_export</code>°¡ Á¦°øÇÏ´Â
                ¼±ÅÃÀûÀÎ ÈÅ(hook) ¿¢½ºÆ÷Æ®ÀÇ ¿¹¸¦ »ç¿ëÇÑ´Ù.</dd>
      
              
              <dt><code>--enable-optional-hook-import</code></dt>
              <dd><code>mod_optional_hook_import</code>°¡ Á¦°øÇÏ´Â
                ¼±ÅÃÀûÀÎ ÈÅ ÀÓÆ÷Æ®ÀÇ ¿¹¸¦ »ç¿ëÇÑ´Ù.</dd>
            </dl>
          
      
          <h4><a name="modules" id="modules">MPM°ú Á¦»ïÀÚ°¡ ¸¸µç ¸ðµâ</a></h4>
            <p>´ÙÀ½ ¿É¼ÇÀ» »ç¿ëÇÏ¿© ÇÊ¿äÇÑ ´ÙÁß󸮸ðµâ°ú Á¦»ïÀÚ°¡
              ¸¸µç ¸ðµâÀ» Ãß°¡ÇÑ´Ù:</p>
      
            <dl>
              <dt><code>--with-module=<var>module-type</var>:<var>module-file</var>
                </code></dt>
              <dd><p>Á¦»ïÀÚ°¡ ¸¸µç ¸ðµâÀ» Á¤ÀûÀ¸·Î ¸µÅ©ÇÒ ¸ðµâ ¸ñ·Ï¿¡
                  Ãß°¡ÇÑ´Ù. ¾ÆÆÄÄ¡ À¥¼­¹ö ¼Ò½º Æ®¸®ÀÇ
                  <code>modules/<var>module-type</var></code>¿¡¼­ ¸ðµâÀÇ
                  ¼Ò½ºÆÄÀÏ <code><var>module-file</var></code>À» ã±â¶§¹®¿¡
                  ±×°÷¿¡ ¼Ò½ºÆÄÀÏÀÌ ÀÖ¾î¾ß ÇÑ´Ù. ±×°÷¿¡ ÆÄÀÏÀÌ ¾ø´Ù¸é
                  <code>configure</code>´Â <var>module-file</var>ÀÌ
                  Àý´ëÆÄÀϰæ·Î¶ó°í °¡Á¤ÇÏ°í ¼Ò½ºÆÄÀÏÀ»
                  <var>module-type</var> ÇÏÀ§µð·ºÅ丮¿¡ º¹»çÇÏ·Á°í
                  ½ÃµµÇÑ´Ù.</p>
                <p>ÀÌ ¿É¼ÇÀº ¼Ò½ºÆÄÀÏÀÌ ÇѰ³ÀÎ ÀÛÀº ¿ÜºÎ ¸ðµâÀ» Ãß°¡Çϴµ¥
                  À¯¿ëÇÏ´Ù. ´õ º¹ÀâÇÑ ¸ðµâÀº °³¹ß»ç°¡ Á¦°øÇÑ ¹®¼­¸¦
                  Âü°íÇØ¾ß ÇÑ´Ù.</p>
                <div class="note"><h3>ÁÖÀÇ</h3>
                  Á¤ÀûÀ¸·Î ¸µÅ©µÈ ¸ðµâÀÌ ¾Æ´Ñ DSO ¸ðµâÀ» ¿øÇÑ´Ù¸é
                  <a href="apxs.html">apxs</a>¸¦ »ç¿ëÇ϶ó.</div>
              </dd>
      
              <dt><code>--with-mpm=MPM</code></dt>
              <dd>¼­¹öÀÇ µ¿ÀÛ¹æ½ÄÀ» ¼±ÅÃÇÑ´Ù. Á¤È®È÷ ÇѰ¡Áö <a href="../mpm.html">´ÙÁß󸮸ðµâ</a>¸¸À» ¼±ÅÃÇØ¾ß ÇÑ´Ù.
                ¼±ÅÃÇÏÁö ¾ÊÀ¸¸é »ç¿ëÇÏ´Â ¿î¿µÃ¼Á¦ÀÇ <a href="../mpm.html#defaults">±âº» MPM</a>À» »ç¿ëÇÑ´Ù.
                »ç¿ëÇÒ ¼ö ÀÖ´Â MPM¿¡´Â <code class="module"><a href="../mod/beos.html">beos</a></code>,
                <code class="module"><a href="../mod/leader.html">leader</a></code>, <code class="module"><a href="../mod/mpmt_os2.html">mpmt_os2</a></code>,
                <code class="module"><a href="../mod/perchild.html">perchild</a></code>, <code class="module"><a href="../mod/prefork.html">prefork</a></code>,
                <code class="module"><a href="../mod/threadpool.html">threadpool</a></code>, <code class="module"><a href="../mod/worker.html">worker</a></code>°¡
                ÀÖ´Ù.</dd>
            </dl>
          
      
          <h4><a name="otheroptfeat" id="otheroptfeat">±âŸ ¿É¼Ç</a></h4>
            <dl>
              <dt><code>--enable-maintainer-mode</code></dt>
              <dd>µð¹ö±ë ¸ðµå¿Í ÄÄÆÄÀϽà °æ°í¸¦ ÀÛµ¿ÇÑ´Ù.</dd>
      
              <dt><code>--enable-mods-shared=<var>MODULE-LIST</var></code></dt>
              <dd>
                <p>µ¿Àû°øÀ¯¸ðµâ·Î ÄÄÆÄÀÏÇÒ ¸ðµâ ¸ñ·ÏÀ» ÁöÁ¤ÇÑ´Ù. Áï,
                  ÀÌ ¸ðµâµéÀº <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> Áö½Ã¾î¸¦
                  »ç¿ëÇÏ¿© µ¿ÀûÀ¸·Î Àоîµé¿©¾ß ÇÑ´Ù.</p>
                <p><var>MODULE-LIST</var>´Â °ø¹éÀ¸·Î ±¸ºÐÇÑ ¸ðµâ¸íµéÀ»
                  µû¿ÈÇ¥·Î ¹­Àº ¸ñ·ÏÀÌ´Ù. ¸ðµâ¸í¿¡¼­ ¾Õ¿¡
                  <code>mod_</code>´Â »«´Ù. ¿¹¸¦ µé¾î:</p>
                <div class="example"><p><code>
                  --enable-mods-shared='headers rewrite dav'
                </code></p></div>
                <p>¶Ç, Ưº°ÇÑ Å°¿öµå <code>all</code>°ú <code>most</code>¸¦
                  »ç¿ëÇÒ ¼ö ÀÖ´Ù. ¿¹¸¦ µé¾î,</p>
                <div class="example"><p><code>
                  --enable-mods-shared=most
                </code></p></div>
                <p>´Â ´ëºÎºÐÀÇ ¸ðµâÀ» DSO ¸ðµâ·Î ÄÄÆÄÀÏÇÑ´Ù.
                  </p>
              </dd>
                          
              <dt><code>--enable-modules=<var>MODULE-LIST</var></code></dt>
              <dd><code>--enable-mods-shared</code>¿Í ºñ½ÁÇÏÁö¸¸,
                ÀÌ ¿É¼ÇÀº ¿­°ÅÇÑ ¸ðµâµéÀ» Á¤ÀûÀ¸·Î ¸µÅ©ÇÑ´Ù. Áï, ÀÌ
                ¸ðµâµéÀº <code>httpd</code> ½ÇÇàÇÏ¸é ¾ðÁ¦³ª »ç¿ëÇÒ
                ¼ö ÀÖ´Ù. <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code>·Î ÀоîµéÀÏ
                Çʿ䰡 ¾ø´Ù.</dd>
      
              <dt><code>--enable-v4-mapped</code></dt>
              <dd>IPv6 ¼ÒÄÏÀÌ IPv4 ¿¬°áÀ» ó¸®ÇÒ ¼ö ÀÖµµ·Ï ÇÑ´Ù.</dd>
      
              <dt><code>--with-port=<var>PORT</var></code></dt>
              <dd><code>httpd</code>°¡ ±â´Ù¸± Æ÷Æ®¸¦ ÁöÁ¤ÇÑ´Ù. ÀÌ
                Æ÷Æ®¹øÈ£´Â ¼³Á¤ÆÄÀÏ <code>httpd.conf</code>¸¦ ¸¸µé¶§
                ¾²ÀδÙ. ±âº»°ªÀº 80ÀÌ´Ù.</dd>
      
              <dt><code>--with-program-name</code></dt>
              <dd>´Ù¸¥ ½ÇÇàÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù. ±âº»°ªÀº
                <code>httpd</code>ÀÌ´Ù.</dd>
            </dl>
          
        
      
        <h3><a name="packages" id="packages">Ãß°¡ ÆÐŰÁö ¼±ÅÃ</a></h3>
          <p>´ÙÀ½ ¿É¼ÇÀº Ãß°¡ ÆÐŰÁö¸¦ ¼±ÅÃÇÑ´Ù.</p>
      
          <h4><a name="generalpackages" id="generalpackages">ÀϹÝÀûÀÎ ¹®¹ý</a></h4>
            <p>ÀϹÝÀûÀ¸·Î ´ÙÀ½°ú °°Àº ¹®¹ýÀ» »ç¿ëÇÏ¿© Ãß°¡ ÆÐŰÁö¸¦
              ´Ù·é´Ù:</p>
      
            <dl>
              <dt><code>--with-<var>PACKAGE</var>[=<var>ARG</var>]</code></dt>
              <dd>ÆÐŰÁö <var>PACKAGE</var>¸¦ »ç¿ëÇÑ´Ù.
                <var>ARG</var>ÀÇ ±âº»°ªÀº <code>yes</code>ÀÌ´Ù.</dd>
      
              <dt><code>--without-<var>PACKAGE</var></code></dt>
              <dd>ÆÐŰÁö <var>PACKAGE</var>¸¦ »ç¿ëÇÏÁö ¾Ê´Â´Ù.
                <code>--with-<var>PACKAGE</var>=no</code>¿Í °°´Ù.
                <code>autoconf</code>¿¡ ÀÌ ¿É¼ÇÀÌ ÀÖÁö¸¸ ¾ÆÆÄÄ¡ À¥¼­¹ö¿Í´Â
                °ü°è°¡ ¾ø´Ù.</dd>
            </dl>
          
      
          
      
          <h4><a name="packageopt" id="packageopt">ƯÁ¤ ÆÐŰÁö</a></h4>
            <dl>
              <dt><code>--with-apr=<var>DIR</var>|<var>FILE</var></code></dt>
              <dd><code>httpd</code> ¼Ò½º ¹èÆ÷º»¿¡ Æ÷ÇÔµÈ Apache Portable
                Runtime (APR)Àº ÀÚµ¿À¸·Î À¥¼­¹ö¿Í °°ÀÌ ÄÄÆÄÀϵȴÙ.
                ¸¸¾à ÀÌ¹Ì ¼³Ä¡µÈ APRÀ» ´ë½Å »ç¿ëÇÏ°í ½Í´Ù¸é
                <code>configure</code>¿¡°Ô <code>apr-config</code>
                ½ºÅ©¸³Æ®ÀÇ °æ·Î¸¦ ¾Ë·ÁÁÖ¾î¾ß ÇÑ´Ù. APR°¡ ¼³Ä¡µÈ Àý´ë°æ·Î,
                ÆÄÀϸí, µð·ºÅ丮¸íÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù. ÁöÁ¤ÇÑ µð·ºÅ丮³ª
                ±× µð·ºÅ丮ÀÇ ÇÏÀ§µð·ºÅ丮 <code>bin</code>¿¡
                <code>apr-config</code>°¡ ÀÖ¾î¾ß ÇÑ´Ù.</dd>
              
              <dt><code>--with-apr-util=<var>DIR</var>|<var>FILE</var></code></dt>
              <dd><code>httpd</code> ¼Ò½º ¹èÆ÷º»¿¡ Æ÷ÇÔµÈ Apache Portable
                Runtime Utilities (APU)´Â ÀÚµ¿À¸·Î À¥¼­¹ö¿Í °°ÀÌ
                ÄÄÆÄÀϵȴÙ. ¸¸¾à ÀÌ¹Ì ¼³Ä¡µÈ APUÀ» ´ë½Å »ç¿ëÇÏ°í ½Í´Ù¸é
                <code>configure</code>¿¡°Ô <code>apu-config</code>
                ½ºÅ©¸³Æ®ÀÇ °æ·Î¸¦ ¾Ë·ÁÁÖ¾î¾ß ÇÑ´Ù. APU°¡ ¼³Ä¡µÈ Àý´ë°æ·Î,
                ÆÄÀϸí, µð·ºÅ丮¸íÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù. ÁöÁ¤ÇÑ µð·ºÅ丮³ª
                ±× µð·ºÅ丮ÀÇ ÇÏÀ§µð·ºÅ丮 <code>bin</code>¿¡
                <code>apu-config</code>°¡ ÀÖ¾î¾ß ÇÑ´Ù.</dd>
      
              <dt><code>--with-ssl=<var>DIR</var></code></dt>
              <dd><code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>À» »ç¿ëÇÏ´Â °æ¿ì
                <code>configure</code>´Â ¼³Ä¡µÈ OpenSSLÀ» ã´Â´Ù.
                ´ë½Å ÀÌ ¿É¼ÇÀ» »ç¿ëÇÏ¿© SSL/TLS µµ±¸ÀÇ µð·ºÅ丮°æ·Î¸¦
                ¾Ë·ÁÁÙ ¼ö ÀÖ´Ù.</dd>
      
              <dt><code>--with-z=<var>DIR</var></code></dt>
              <dd>(<code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code>¸¦ »ç¿ëÇÏ´Â °æ¿ì¿Í
                °°ÀÌ) ±¸¼º¿¡ ÇÊ¿äÇÏ´Ù¸é ÀÚµ¿À¸·Î <code>configure</code>´Â
                ¼³Ä¡µÈ <code>zlib</code> ¶óÀ̺귯¸®¸¦ ã´Â´Ù. ´ë½Å
                ÀÌ ¿É¼ÇÀ» »ç¿ëÇÏ¿© ¾ÐÃà ¶óÀ̺귯¸®ÀÇ µð·ºÅ丮°æ·Î¸¦
                ¾Ë·ÁÁÙ ¼ö ÀÖ´Ù.</dd>
            </dl>
      
            <p><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code>°ú
              <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>ÀÇ DBM <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> °°Àº ¾ÆÆÄÄ¡
              À¥¼­¹öÀÇ ÀϺΠ±â´ÉÀº Á¤º¸¸¦ »¡¸® ã±âÀ§ÇØ °£´ÜÇÑ Å°/°ª
              µ¥ÀÌÅͺ£À̽º¸¦ »ç¿ëÇÑ´Ù. APU¿¡ SDBMÀÌ µé¾îÀ־ ¾ðÁ¦³ª
              ÃÖ¼ÒÇÑ ÀÌ µ¥ÀÌÅͺ£À̽º´Â »ç¿ëÇÒ ¼ö ÀÖ´Ù. ´Ù¸¥ Á¾·ùÀÇ
              µ¥ÀÌÅͺ£À̽º¸¦ »ç¿ëÇÏ°í ½Í´Ù¸é ¾Æ·¡ ¿É¼ÇÀ» »ç¿ëÇÑ´Ù:</p>
      
            <dl>
              <dt><code>--with-gdbm[=<var>path</var>]</code></dt>
              <dd><var>path</var>¸¦ ÁöÁ¤ÇÏÁö ¾ÊÀ¸¸é,
                <code>configure</code>´Â ÀϹÝÀûÀÎ °Ë»ö°æ·Î¿¡¼­ ¼³Ä¡µÈ
                GNU DBM Çì´õÆÄÀϰú ¶óÀ̺귯¸®¸¦ ã´Â´Ù. Á÷Á¢
                <var>path</var>¸¦ ÁöÁ¤Çϸé <code>configure</code>´Â
                <code><var>path</var>/lib</code>°ú
                <code><var>path</var>/include</code>¿¡¼­ ÇÊ¿äÇÑ ÆÄÀÏÀ»
                ã´Â´Ù. ¸¶Áö¸·À¸·Î <var>path</var>¿¡ Çì´õÆÄÀÏ °æ·Î¿Í
                ¶óÀ̺귯¸® °æ·Î¸¦ ÄÝ·ÐÀ» »çÀÌ¿¡ µÎ°í °°ÀÌ ÀûÀ» ¼ö
                ÀÖ´Ù.</dd>
      
              <dt><code>--with-ndbm[=<var>path</var>]</code></dt>
              <dd><code>--with-gdbm</code>°ú °°Áö¸¸ ¼³Ä¡µÈ New DBMÀ»
                ã´Â´Ù.</dd>
      
              <dt><code>--with-berkeley-db[=<var>path</var>]</code></dt>
              <dd><code>--with-gdbm</code>°ú °°Áö¸¸ ¼³Ä¡µÈ Berkeley
                DB¸¦ ã´Â´Ù.</dd>
            </dl>
      
            <div class="note"><h3>ÁÖÀÇ</h3>
              <p>DBM ¿É¼ÇÀº APU°¡ Á¦°øÇϸç APU ±¸¼º½ºÅ©¸³Æ®·Î Á÷Á¢
                Àü´ÞµÈ´Ù. ±×·¡¼­ <code>--with-apr-util</code>À» »ç¿ëÇÏ¿©
                ÀÌ¹Ì ¼³Ä¡µÈ APU¸¦ »ç¿ëÇÑ´Ù¸é DBM ¿É¼ÇÀº ¼Ò¿ëÀÌ ¾ø´Ù.</p>
              <p>À¥¼­¹ö´Â ¿©·¯ DBM ±¸ÇöÀ» °°ÀÌ »ç¿ëÇÒ ¼ö ÀÖ´Ù. ½ÇÇà½Ã
                ÀûÀýÇÑ DBM Á¾·ù¸¦ ¼³Á¤ÇÒ ¼ö ÀÖ´Ù.</p>
            </div>
          
        
        
        <h3><a name="supportopt" id="supportopt">Áö¿ø ÇÁ·Î±×·¥À» À§ÇÑ ¿É¼Ç</a></h3>
          <dl>
            <dt><code>--enable-static-support</code></dt>
            <dd>Áö¿ø ÇÁ·Î±×·¥À» Á¤ÀûÀ¸·Î ¸µÅ©µÈ ½ÇÇàÆÄÀÏ·Î ¸¸µç´Ù.
              Áï, ÇÊ¿äÇÑ ¶óÀ̺귯¸®¸¦ ¸ðµÎ Æ÷ÇÔÇϵµ·Ï ½ÇÇàÆÄÀÏÀ»
              ÄÄÆÄÀÏÇÑ´Ù. ÀÌ ¿É¼ÇÀ» »ç¿ëÇÏÁö ¾ÊÀ¸¸é ±âº»°ªÀ¸·Î Áö¿ø
              ÇÁ·Î±×·¥À» µ¿ÀûÀ¸·Î ¸µÅ©ÇÑ´Ù.</dd>
      
            <dt><code>--enable-suexec</code></dt>
            <dd>À¥¼­¹ö°¡ ½ÇÇàÇÏ´Â ÇÁ·Î¼¼½ºÀÇ uid¿Í gid¸¦ ¼³Á¤ÇÏ´Â
              <code><a href="suexec.html">suexec</a></code>¸¦ »ç¿ëÇÏ·Á¸é
              ÀÌ ¿É¼ÇÀ» »ç¿ëÇÑ´Ù. <strong>suid ½ÇÇàÆÄÀÏÀÇ º¸¾È»ó À§ÇèÀ»
              ¸ðµÎ ¾ËÁö ¸øÇÑ´Ù¸é ÀÌ ¿É¼ÇÀ» »ç¿ëÇÏÁö ¸¶¶ó.</strong>
              <code>suexec</code>¸¦ ±¸¼ºÇÏ´Â ¿É¼ÇÀº
              <a href="#suexec">¾Æ·¡¿¡¼­</a> ¼³¸íÇÑ´Ù.</dd>
          </dl>
      
          <p>´ÙÀ½ ¿É¼ÇÀ» »ç¿ëÇÏ¿© Áö¿ø ÇÁ·Î±×·¥º°·Î Á¤ÀûÀ¸·Î ¸µÅ©µÈ
            ½ÇÇàÆÄÀÏÀ» ¸¸µé ¼ö ÀÖ´Ù:</p>
      
          <dl>
            <dt><code>--enable-static-ab</code></dt>
            <dd><code><a href="ab.html">ab</a></code>¸¦ Á¤ÀûÀ¸·Î ¸µÅ©µÈ
              ½ÇÇàÆÄÀÏ·Î ÄÄÆÄÀÏÇÑ´Ù.</dd>
      
            
            <dt><code>--enable-static-checkgid</code></dt>
            <dd><code>checkgid</code>¸¦ Á¤ÀûÀ¸·Î ¸µÅ©µÈ ½ÇÇàÆÄÀÏ·Î
              ÄÄÆÄÀÏÇÑ´Ù.</dd>
      
            
            <dt><code>--enable-static-htdbm</code></dt>
            <dd><code>htdbm</code>À» Á¤ÀûÀ¸·Î ¸µÅ©µÈ ½ÇÇàÆÄÀÏ·Î
              ÄÄÆÄÀÏÇÑ´Ù.</dd>
      
            <dt><code>--enable-static-htdigest</code></dt>
            <dd><code><a href="htdigest.html">htdigest</a></code>¸¦
              Á¤ÀûÀ¸·Î ¸µÅ©µÈ ½ÇÇàÆÄÀÏ·Î ÄÄÆÄÀÏÇÑ´Ù.</dd>
              
            <dt><code>--enable-static-htpasswd</code></dt>
            <dd><code><a href="htpasswd.html">htpasswd</a></code>¸¦
              Á¤ÀûÀ¸·Î ¸µÅ©µÈ ½ÇÇàÆÄÀÏ·Î ÄÄÆÄÀÏÇÑ´Ù.</dd>
      
            <dt><code>--enable-static-logresolve</code></dt>
            <dd><code><a href="logresolve.html">logresolve</a></code>¸¦
              Á¤ÀûÀ¸·Î ¸µÅ©µÈ ½ÇÇàÆÄÀÏ·Î ÄÄÆÄÀÏÇÑ´Ù.</dd>
      
            <dt><code>--enable-static-rotatelogs</code></dt>
            <dd><code><a href="rotatelogs.html">rotatelogs</a></code>¸¦
              Á¤ÀûÀ¸·Î ¸µÅ©µÈ ½ÇÇàÆÄÀÏ·Î ÄÄÆÄÀÏÇÑ´Ù.</dd>
          </dl>
      
          <h4><a name="suexec" id="suexec">suexec ¼³Á¤ ¿É¼Ç</a></h4>
            <p>¾Æ·¡ ¿É¼ÇÀº <code><a href="../suexec.html">suexec</a></code>¸¦ ÀÚ¼¼È÷ ¼³Á¤ÇÑ´Ù.
              ´õ ÀÚ¼¼ÇÑ Á¤º¸´Â <a href="../suexec.html#install">suEXEC
              ±¸¼º°ú ¼³Ä¡</a>¸¦ Âü°íÇ϶ó.</p>
      
            <dl>
              <dt><code>--with-suexec-bin</code></dt>
              <dd>suexec ½ÇÇàÆÄÀÏÀÇ °æ·Î¸¦ ÁöÁ¤ÇÑ´Ù. ±âº»°ªÀº
                <code>--sbindir</code>ÀÌ´Ù (<a href="#directoryfinetuning">¼³Ä¡ µð·ºÅ丮ÀÇ ÀÚ¼¼ÇÑ
                Á¶Á¤</a> Âü°í).</dd>
      
              <dt><code>--with-suexec-caller</code></dt>
              <dd><code>suexec</code>¸¦ ½ÇÇàÇÒ »ç¿ëÀÚ¸¦ ÁöÁ¤ÇÑ´Ù.
                ÀÌ »ç¿ëÀÚ´Â º¸Åë <code>httpd</code>¸¦ ½ÇÇàÇÏ´Â »ç¿ëÀÚ¿Í
                °°¾Æ¾ß ÇÑ´Ù.</dd>
      
              <dt><code>--with-suexec-docroot</code></dt>
              <dd><code>suexec</code>´Â ÀÌ ¿É¼ÇÀ¸·Î ÁöÁ¤ÇÑ µð·ºÅ丮
                ¾Æ·¡¿¡ ÀÖ´Â ½ÇÇàÆÄÀϸ¸À» ½ÇÇàÇÒ ¼ö ÀÖ´Ù. ±âº»°ªÀº
                <code>--datadir/htdocs</code>´Ù.</dd>
      
              <dt><code>--with-suexec-gidmin</code></dt>
              <dd><code>suexec</code>¿¡¼­ ÁöÁ¤°¡´ÉÇÑ ÃÖ¼Ò GID¸¦ ¼³Á¤ÇÑ´Ù.
                ±âº»°ªÀº 100ÀÌ´Ù.</dd>
      
              <dt><code>--with-suexec-logfile</code></dt>
              <dd><code>suexec</code> ·Î±×ÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù. ·Î±×ÆÄÀϸíÀÇ
                ±âº»°ªÀº <code>suexec_log</code>À̰í,
                <code>--logfiledir</code>¿¡ À§Ä¡ÇÑ´Ù.</dd>
      
              <dt><code>--with-suexec-safepath</code></dt>
              <dd><code>suexec</code>°¡ ½ÃÀÛÇÏ´Â ÇÁ·Î¼¼½ºÀÇ
                <code>PATH</code> ȯ°æº¯¼ö°ªÀ» ÁöÁ¤ÇÑ´Ù. ±âº»°ªÀº
                <code>/usr/local/bin:/usr/bin:/bin</code>ÀÌ´Ù.</dd>
      
              <dt><code>--with-suexec-userdir</code></dt>
              <dd>»ç¿ëÀÚ µð·ºÅ丮¿¡¼­ <code>suexec</code>°¡ Á¢±ÙÇÒ
                ¼ö ÀÖ´Â (½ÇÇàÆÄÀÏÀÌ ÀÖ´Â) ÇÏÀ§µð·ºÅ丮¸¦ ÁöÁ¤ÇÑ´Ù.
                ÀÌ ¼³Á¤Àº <code>suexec</code>¿Í
                (<code class="module"><a href="../mod/mod_userdir.html">mod_userdir</a></code>ÀÌ Á¦°øÇÏ´Â) »ç¿ëÀÚº°
                µð·ºÅ丮¸¦ °°ÀÌ »ç¿ëÇÒ¶§ ÇÊ¿äÇÏ´Ù. ±âº»°ªÀº
                <code>public_html</code>ÀÌ´Ù.</dd>
      
              <dt><code>--with-suexec-uidmin</code></dt>
              <dd><code>suexec</code>¿¡¼­ ÁöÁ¤°¡´ÉÇÑ ÃÖ¼Ò UID¸¦ ¼³Á¤ÇÑ´Ù.
                ±âº»°ªÀº 100ÀÌ´Ù.</dd>
      
              <dt><code>--with-suexec-umask</code></dt>
              <dd><code>suexec</code>°¡ ½ÇÇàÇÏ´Â ÇÁ·Î¼¼½ºÀÇ
                <code>umask</code>¸¦ ÁöÁ¤ÇÑ´Ù. ±âº»°ªÀº »ç¿ëÇÏ´Â ½Ã½ºÅÛÀÇ
                ±âº» ¼³Á¤°ú °°´Ù.</dd>
            </dl>
          
        
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="env" id="env">ȯ°æº¯¼ö</a></h2>
        <p><code>configure</code>ÀÇ ¼±ÅÃÀ» ¹«½ÃÇϰųª °ü·Ê¿Í ´Ù¸¥
          À̸§À̳ª À§Ä¡¿¡ ÀÖ´Â ¶óÀ̺귯¸®¿Í ÇÁ·Î±×·¥À» ãµµ·Ï µµ¿ÍÁÖ´Â
          À¯¿ëÇÑ È¯°æº¯¼öµéÀÌ ÀÖ´Ù.</p>
      
        
        <dl>
          <dt><code>CC</code></dt>
          <dd>ÄÄÆÄÀÏ¿¡ »ç¿ëÇÒ C ÄÄÆÄÀÏ·¯ ¸í·É¾î¸¦ ÁöÁ¤ÇÑ´Ù.</dd>
      
          <dt><code>CFLAGS</code></dt>
          <dd>ÄÄÆÄÀ϶§ »ç¿ëÇÏ±æ ¹Ù¶ó´Â C ÄÄÆÄÀÏ·¯ ¿É¼ÇÀ» ÁöÁ¤ÇÑ´Ù.</dd>
      
          <dt><code>CPP</code></dt>
          <dd>»ç¿ëÇÒ C ¼±Ã³¸®±â ¸í·É¾î¸¦ ÁöÁ¤ÇÑ´Ù.</dd>
      
          <dt><code>CPPFLAGS</code></dt>
          <dd>C/C++ ¼±Ã³¸®±â ¿É¼Ç. ¿¹¸¦ µé¾î, Çì´õÆÄÀÏÀÌ °ü·Ê¿Í ´Þ¸®
            <var>includedir</var> µð·ºÅ丮¿¡ ÀÖ´Ù¸é
            <code>-I<var>includedir</var></code>À» »ç¿ëÇÑ´Ù.</dd>
      
          <dt><code>LDFLAGS</code></dt>
          <dd>¸µÄ¿ ¿É¼Ç. ¿¹¸¦ µé¾î, ¶óÀ̺귯¸®°¡ °ü·Ê¿Í ´Þ¸®
            <var>libdir</var> µð·ºÅ丮¿¡ ÀÖ´Ù¸é
            <code>-L<var>libdir</var></code>À» »ç¿ëÇÑ´Ù.</dd>
        </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/configure.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/configure.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/configure.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/configure.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/configure.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htpasswd.html.tr.utf8���������������������������������������������0000644�0000000�0000050�00000044406�13523273316�021344� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htpasswd - Temel kimlik doğrulama dosyalarını yönetir - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>htpasswd - Temel kimlik doğrulama dosyalarını yönetir</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/htpasswd.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htpasswd.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htpasswd.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htpasswd.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">Bu çeviri güncel olmayabilir. Son değişiklikler için İngilizce sürüm geçerlidir.</div>
      
          <p><code><strong>htpasswd</strong></code>, HTTP kullanıcılarının temel
          kimlik doğrulaması için kullanıcı isimlerinin ve parolalarının
          saklanmasında kullanılacak düz metin dosyalarını oluşturmak ve güncellemek
          için kullanılır. <code><strong>htpasswd</strong></code>, güncelleme
          sırasında yazmak veya okumak için bir dosyaya erişemezse beklenen hiçbir
          işlemi yapmaz ve hata vererek çıkar.</p>
      
          <p>Apache HTTP sunucusunun mevcut özkaynaklarının kullanımı
          sadece <code><strong>htpasswd</strong></code> tarafından oluşturulan
          dosyalarda listelenmiş kullanıcılara tahsis edilebilir.
          <code><strong>htpasswd</strong></code> sadece düz metin dosyalarda
          saklanmış kullanıcı isimlerini ve parolalarını yönetirse de, diğer veri
          saklama türleri için parolayı şifreleyip gösterebilir. Bir DBM veritabanı
          kullanmak isterseniz <strong><code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code></strong> ve
          <strong><code class="program"><a href="../programs/htdbm.html">htdbm</a></code></strong> sayfasına bakınız.</p>
      
          <p><code><strong>htpasswd</strong></code>, parolaları şifrelemek için
          bcrypt, Apache'nin kendine özgü MD5 algoritması, SHA1 ya da sistemin
          <code>crypt()</code> yordamını kullanır. Bu bakımdan
          <code><strong>htpasswd</strong></code> tarafından yönetilen dosyalar farklı
          algoritmalarla şifrelenmiş parolalar içerebilir.</p>
      
          <p>Bu kılavuz sayfası sadece komut satırı değiştirgelerini listeler.
          Kullanıcı kimlik doğrulamasını
          <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong>'de yapılandırmak için gerekli
          yönergelerle ilgili ayrıntılar için Apache dağıtımının bir parçası olan
          ve <a href="http://httpd.apache.org/"> http://httpd.apache.org/</a>
          adresinde de bulunan Apache HTTP Sunucusu Belgelerine bakınız.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Kullanım</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exit">Çıkış Durumu</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Örnekler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#security">Güvenlik Değerlendirmeleri</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#restrictions">Kısıtlamalar</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="../programs/htdbm.html">htdbm</a></code></li><li>Kaynak paketinin support/SHA1 dizinindeki betikler.</li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Kullanım</a></h2>
          <p><code><strong>htpasswd</strong>
          [ -<strong>c</strong> ]
          [ -<strong>i</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>bedel</var> ]
          [ -<strong>D</strong> ]
          [ -<strong>v</strong> ] <var>parola-dosyası</var> <var>kullanıcı</var></code></p>
      
          <p><code><strong>htpasswd</strong> -<strong>b</strong>
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>bedel</var> ]
          [ -<strong>D</strong> ]
          [ -<strong>v</strong> ] <var>parola-dosyası</var> <var>kullanıcı</var>
          <var>parola</var></code></p>
      
          <p><code><strong>htpasswd</strong> -<strong>n</strong>
          [ -<strong>i</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>bedel</var> ] <var>kullanıcı</var></code></p>
      
          <p><code><strong>htpasswd</strong> -<strong>nb</strong>
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>bedel</var> ] <var>kullanıcı</var>
          <var>parola</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
          <dl>
          <dt><code><strong>-b</strong></code></dt>
          <dd>Betik kipi; parola için istek yapmak yerine parola komut satırından
          verilir. <strong>Parola komut satırında görünür</strong> olacağından çok
          dikkatli kullanmak gerekir. Betik kullanımı için
          <code><strong>-i</strong></code> seçeneğine bakınız.
          2.4.4 ve sonraki sürümler içindir.</dd>
      
          <dt><code><strong>-i</strong></code></dt>
          <dd>Parolayı doğrulamaksızın standart girdiden okur (betik kullanımı
          için).</dd>
      
          <dt><code><strong>-c</strong></code></dt>
          <dd><code><var>parola-dosyası</var></code> oluşturur. Dosya mevcutsa,
          dosya silinip yeniden yazılır. Bu seçenek
          <code><strong>-n</strong></code> seçeneği ile birlikte kullanılamaz.</dd>
      
          <dt><code><strong>-n</strong></code></dt>
          <dd>Sonuçları veritabanında güncellemek yerine standart çıktıya gönderir.
          Bu seçenek, Apache'nin metin veriler içermeyen veri depolarına dahil
          edilebilecek parolaları üretmekte yararlıdır.
          <code><var>parola-dosyası</var></code> belirtilmediğinden, bu seçenek
          komut satırı sözdizimini değiştirir. Bu seçenek
          <code><strong>-c</strong></code> seçeneği ile birlikte kullanılamaz.</dd>
      
          <dt><code><strong>-m</strong></code></dt>
          <dd>Parolalar için MD5 şifrelemesi kullanılır.
          Bu 2.2.18 sürümünden beri öntanımlıdır.</dd>
      
          <dt><code><strong>-B</strong></code></dt>
          <dd>Parolalar için bcrypt şifrelemesi kullanılır. Şu an için çok güvenli
          kabul edilmektedir.</dd>
      
          <dt><code><strong>-C</strong>  <var>bedel</var></code></dt>
          <dd>Bu seçenek sadece <code><strong>-B</strong></code> (bcrypt şifrelemesi)
          seçeneği ile birlikte kullanılabilir. Bcrypt algoritmasına hesaplama
          süresini belirtir (daha yüksek değerler daha güvenlidir, öntanımlı 5,
          geçerli değerler: 4 - 31).</dd>
      
          <dt><code><strong>-d</strong></code></dt>
          <dd>Parolaları şifrelemek için <code>crypt()</code> kullanılır.
          <code><strong>htpasswd</strong></code> tarafından tüm platformlarda
          destekleniyor olsa da Windows, Netware ve TPF üzerinde
          <code class="program"><a href="../programs/httpd.html">httpd</a></code> sunucusu tarafından desteklenmez. Bu algoritma
          günümüz standartlarında <strong>güvenilmez</strong> kabul
          edilmektedir. 2.2.17 sürümüne kadar öntanımlı algoritma olarak
          kullanılmıştı.</dd>
      
          <dt><code><strong>-s</strong></code></dt>
          <dd>Parolalar için SHA şifrelemesi kullanılır. LDAP Dizin değişim
          biçemini (ldif) kullanarak Netscape sunucularına/sunucularından göçü
          kolaylaştırır.Bu algoritma günümüz standartlarında
          <strong>güvenilmez</strong> kabul edilmektedir.</dd>
      
          <dt><code><strong>-p</strong></code></dt>
          <dd>Düz metin parolalar kullanılır. <code><strong>htpasswd</strong></code>
          tarafından tüm platformlarda destekleniyor olsa da Windows, Netware ve
          TPF üzerinde <code class="program"><a href="../programs/httpd.html">httpd</a></code> sunucusu tarafından sadece düz
          metin parolalar kabul edilir.</dd>
      
          <dt><code><strong>-D</strong></code></dt>
          <dd>Kullanıcıyı siler. Kullanıcı belirtilen dosyada mevcutsa
          silinir.</dd>
      
          <dt><code>-v</code></dt>
          <dd>Parolayı doğrular. Verilen parolayı belitilen htpasswd dosyasında
            saklanan kullanıcı parolası ile karşılaştırarak doğrulama yapar.
            2.4.5 ve sonraki sürümler içindir.</dd>
      
          <dt><code><var>parola-dosyası</var></code></dt>
          <dd>Kullanıcı ismini ve parolasını içeren dosyanın ismi.
          <code><strong>-c</strong></code> seçeneği verilmişse ve dosya mevcut
          deÄŸilse oluÅŸturulur, dosya mevcutsa silinip yeniden oluÅŸturulur.</dd>
      
          <dt><code><var>kullanıcı</var></code></dt>
          <dd><code><var>parola-dosyası</var></code>'nda oluşturulacak veya
          güncellenecek kullanıcı ismi. <code><var>kullanıcı</var></code> bu
          dosyada mevcut değilse yeni bir girdi eklenir. Girdi mevcutsa parolası
          deÄŸiÅŸtirilir.</dd>
      
          <dt><code><var>parola</var></code></dt>
          <dd>Şifrelenip dosyada saklanacak düz metin parola. Sadece
          <code><strong>-b</strong></code> seçeneği ile kullanılır.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exit" id="exit">Çıkış Durumu</a></h2>
          <p><code><strong>htpasswd</strong></code>, kullanıcı ismi ve parolasını DBM
          dosyasına başarıyla eklemiş veya güncellemişse <code>0</code>, dosyalara
          erişirken bir sorun çıkmışsa <code>1</code>, komut satırında bir
          sözdizimi hatası varsa <code>2</code>, parola etkileşimli alınmış fakat
          girdi ile eşleşme sağlanamamışsa <code>3</code>, işlem kesintiye
          uğramışsa <code>4</code>, bir değer çok uzunsa <code>5</code> (kullanıcı,
          parola, dosya ismi veya açıklama), kullanıcı ismi kuraldışı karakter
          içeriyorsa (<a href="#restrictions">Kısıtlamalar</a> bölümüne bakınız)
          <code>6</code> ve dosya geçerli bir DBM parola dosyası değilse
          <code>7</code> değeriyle döner.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Örnekler</a></h2>
          <div class="example"><p><code>
            htpasswd /usr/local/etc/apache/.htpasswd-users jsmith
          </code></p></div>
      
          <p><code>jsmith</code> kullanıcısı için parolayı ekler veya değiştirir.
          Parolayı vermesi için kullanıcıya parola isteği yapılır.
          Parola takviyeli Apache MD5 algoritması ile şifrelenir. Dosya mevcut
          değilse <code><strong>htpasswd</strong></code> beklenen hiçbir işlemi
          yapmadan bir hata vererek çıkar.</p>
      
          <div class="example"><p><code>
            htpasswd -c /home/doe/public_html/.htpasswd jane
          </code></p></div>
      
          <p>Yeni bir dosya oluşturur ve kullanıcı <code>jane</code> için kaydı bir
          girdi olarak bu dosyaya yazar. Dosya mevcutsa fakat okunamıyor veya
          yazılamıyorsa dosyada bir değişiklik yapılmaz ve
          <code><strong>htpasswd</strong></code> bir ileti gösterip bir hata durumu
          ile çıkar.</p>
      
          <div class="example"><p><code>
            htpasswd -db /usr/web/.htpasswd-all jones Pwd4Steve
          </code></p></div>
      
          <p>Komut satırından verilen parolayı (<code>Pwd4Steve</code>) <code>crypt()</code>
          algoritmasıyla şifreler ve bunu belirtilen dosyada saklar.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">Güvenlik Değerlendirmeleri</a></h2>
          <p><code><strong>htpasswd</strong></code> tarafından yönetilen parola
          dosyalarına sunucunun URI uzayından erişilememelidir; yani dosya bir
          tarayıcı ile okunabilecek bir yerde bulunmamalıdır.</p>
      
          <p>Bu program bir setuid çalıştırılabiliri olarak güvenilir olmadığından
          <em>setuid yapılmamalıdır</em>.</p>
      
          <p>Komut satırında parolanın şifrelenmemiş olarak görünmesi sebebiyle
          <code><strong>-b</strong></code> seçeneğinin kullanımından kaçınılmasını
          öneriyoruz.</p>
      
          <p><code>crypt()</code> algoritması kullanılırken, parolayı
          şekillendirmek için parolanın ilk 8 baytının kullanılacağına dikkat
          ediniz. Eğer parola 8 bayttan uzunsa kalanlar bir uyarı verilmeksizin
          iptal edilir.</p>
      
          <p>SHA şifreleme biçeminde tuz kullanılmaz; yani, bir parolanın
          sadece bir şifreli gösterimi olabilir. <code>crypt()</code> ve
          MD5 biçemleri parolanın önüne rasgele üretilmiş bir tuz dizgesi
          eklediklerinden sözlük saldırılarına karşı daha dayanıklıdırlar.</p>
      
          <p>SHA ve <code>crypt()</code> biçimleri günümüz standartlarında
          <strong>güvenilmez</strong> kabul edilmektedir.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="restrictions" id="restrictions">Kısıtlamalar</a></h2>
          <p>Windows platformuda, <code><strong>htpasswd</strong></code>
          ile ÅŸifrelenen parolalar <code>255</code> karakterden daha uzun olamaz.
          255 karakterden sonrası kırpılır.</p>
      
          <p><code><strong>htpasswd</strong></code> tarafından kullanılan MD5
          algoritması Apache yazılımına özeldir; bu algoritma ile şifrelenen
          parolalar başka HTTP sunucularında kullanılamayabilir.</p>
      
          <p>Kullanıcı isimleri <code>255</code> bayttan uzun olamaz ve iki nokta
          imi (<code>:</code>) içeremez.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/htpasswd.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htpasswd.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htpasswd.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htpasswd.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htpasswd.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/fcgistarter.html��������������������������������������������������0000644�0000000�0000050�00000000465�13362070302�020477� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: fcgistarter.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: fcgistarter.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: fcgistarter.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/index.html.tr.utf8������������������������������������������������0000644�0000000�0000050�00000016124�13412755316�020614� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Sunucu ve Destek Programları - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Sunucu ve Destek Programları</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/programs/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/programs/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/programs/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
          <p>Bu sayfada Apache HTTP Sunucusuna dahil tüm çalıştırılabilir programlar
            tanıtılmıştır.</p>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="index" id="index">Dizin</a></h2>
      
          <dl>
            <dt><code class="program"><a href="../programs/httpd.html">httpd</a></code></dt>
            <dd>Apache hiper metin aktarım protokolü sunucusu.</dd>
      
            <dt><code class="program"><a href="../programs/apachectl.html">apachectl</a></code></dt>
            <dd>Apache HTTP Sunucusu denetim arayüzü.</dd>
      
            <dt><code class="program"><a href="../programs/ab.html">ab</a></code></dt>
            <dd>Apache HTTP Sunucusu  başarım ölçme aracı.</dd>
      
            <dt><code class="program"><a href="../programs/apxs.html">apxs</a></code></dt>
            <dd>Apache HTTP Sunucusu eklenti aracı (APache eXtenSion tool).</dd>
      
            <dt><code class="program"><a href="../programs/configure.html">configure</a></code></dt>
            <dd>Kaynak ağacını yapılandırır.</dd>
      
            <dt><code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code></dt>
            <dd>Kullanıcı kimlik doğrulama dosyalarını temel kimlik doğrulaması için
              DBM biçeminde oluşturur ve günceller.</dd>
      
            <dt><code class="program"><a href="../programs/fcgistarter.html">fcgistarter</a></code></dt>
            <dd>Bir FastCGI programını çalıştırır.</dd>
      
            <dt><code class="program"><a href="../programs/htcacheclean.html">htcacheclean</a></code></dt>
            <dd>Disk arabelleÄŸini temizler.</dd>
      
            <dt><code class="program"><a href="../programs/htdigest.html">htdigest</a></code></dt>
      
            <dd>Kullanıcı kimlik doğrulama dosyalarını özet kimlik doğrulaması için
              oluşturur ve günceller.</dd>
      
            <dt><code class="program"><a href="../programs/htdbm.html">htdbm</a></code></dt>
            <dd>DBM parola veritabanlarını idare eder.</dd>
      
            <dt><code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code></dt>
            <dd>Kullanıcı kimlik doğrulama dosyalarını temel kimlik doğrulaması için
              oluşturur ve günceller.</dd>
      
            <dt><code class="program"><a href="../programs/httxt2dbm.html">httxt2dbm</a></code></dt>
            <dd><code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> ile kullanmak
              üzere DBM dosyaları oluşturur.</dd>
      
            <dt><code class="program"><a href="../programs/logresolve.html">logresolve</a></code></dt>
            <dd>Apache günlük dosyalarındaki IP adreslerini konak isimlerine
              dönüştürür.</dd>
      
            <dt><code class="program"><a href="../programs/log_server_status.html">log_server_status</a></code></dt>
            <dd>Sunucunun durumunu düzenli aralıklarla günlüğe kaydeder.</dd>
      
            <dt><code class="program"><a href="../programs/rotatelogs.html">rotatelogs</a></code></dt>
            <dd>Sunucuyu öldürmek gerekmeksizin günlük dosyalarının döndürülmesini
              saÄŸlar.</dd>
      
            <dt><code class="program"><a href="../programs/split-logfile.html">split-logfile</a></code></dt>
            <dd>Bir çok konaklı günlük dosyasını konak başına bir günlük dosyası düşecek şekilde böler.</dd>
      
            <dt><code class="program"><a href="../programs/suexec.html">suexec</a></code></dt>
            <dd>Bir dosyayı belli bir kullanıcı adına çalıştırır.</dd>
          </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/programs/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/programs/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/programs/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htpasswd.html.ko.euc-kr�������������������������������������������0000644�0000000�0000050�00000032665�13412755316�021636� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htpasswd - basic authentication¿¡ »ç¿ëÇÒ »ç¿ëÀÚÆÄÀÏÀ»
            °ü¸®ÇÑ´Ù - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>htpasswd - basic authentication¿¡ »ç¿ëÇÒ »ç¿ëÀÚÆÄÀÏÀ»
            °ü¸®ÇÑ´Ù</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/htpasswd.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htpasswd.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htpasswd.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htpasswd.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p><code>htpasswd</code>´Â HTTP basic authentication¿¡ »ç¿ëÇÒ
          »ç¿ëÀÚ¸í°ú ¾ÏÈ£¸¦ ÀúÀåÇÏ´Â ÀÏ¹ÝÆÄÀÏÀ» »ý¼ºÇÏ°í ¼öÁ¤ÇÑ´Ù.
          <code>htpasswd</code>°¡ ÆÄÀÏÀ» ¾²°Å³ª ÀÐÀ» ¼ö ¾ø´Ù¸é,
          ¿À·ù»óŸ¦ ¹ÝȯÇÏ°í ¾Æ¹«°Íµµ ¼öÁ¤ÇÏÁö ¾Ê´Â´Ù.</p>
      
          <p>¾ÆÆÄÄ¡ À¥¼­¹ö´Â ÀÚ¿øÀ» <code>htpasswd</code>·Î ¸¸µç ÆÄÀÏ¿¡
          ±â·ÏÇÑ »ç¿ëÀÚ¿¡°Ô¸¸ º¸¿©ÁÙ ¼ö ÀÖ´Ù. ÀÌ ÇÁ·Î±×·¥Àº »ç¿ëÀÚ¸í°ú
          ¾ÏÈ£¸¦ ÀúÀåÇÏ´Â ÀÏ¹Ý ÆÄÀÏÀ» °ü¸®ÇÑ´Ù. ±×·¯³ª ´Ù¸¥ ÀÚ·áÀúÀå
          ¹æ½ÄÀ» À§ÇØ ¾ÏÈ£ Á¤º¸¸¦ ¾ÏȣȭÇÏ¿© ÀúÀåÇÒ ¼ö ÀÖ´Ù. DBM
          µ¥ÀÌÅͺ£À̽º¸¦ »ç¿ëÇÏ·Á¸é <a href="dbmmanage.html">dbmmanage</a>¸¦ Âü°íÇ϶ó.</p>
      
          <p><code>htpasswd</code>´Â ¾ÆÆÄÄ¡ ƯÀ¯ÀÇ MD5 ȤÀº ½Ã½ºÅÛÀÇ
          <code>crypt()</code>¸¦ »ç¿ëÇÏ¿© ¾ÏÈ£¸¦ ¾ÏȣȭÇÑ´Ù.
          <code>htpasswd</code>°¡ °ü¸®ÇÏ´Â ÆÄÀÏÀº µÎ Á¾·ùÀÇ ¾ÏÈ£¸¦
          ¸ðµÎ ÀúÀåÇÒ ¼ö ÀÖ´Ù. Áï, °°Àº ÆÄÀÏ¿¡ MD5·Î ¾ÏȣȭÇÑ ¾ÏÈ£¸¦
          »ç¿ëÇÏ´Â »ç¿ëÀÚ¿Í <code>crypt()</code>·Î ¾ÏȣȭÇÑ ¾ÏÈ£¸¦
          »ç¿ëÇÏ´Â »ç¿ëÀÚ Á¤º¸ ¸ðµÎ ³ª¿Ã ¼ö ÀÖ´Ù.</p>
      
          <p>ÀÌ manpage´Â ¸í·ÉÇà ¿É¼Ç¸¸À» ¼³¸íÇÑ´Ù. <a href="httpd.html">httpd</a>¿¡¼­ »ç¿ëÀÚÀÎÁõÀ» ¼³Á¤ÇÏ´Â Áö½Ã¾î¿¡
          ´ëÇÑ ¼³¸íÀº ¾ÆÆÄÄ¡ ¹èÆ÷º»¿¡ Æ÷ÇÔµÇÀÖ°í <a href="http://httpd.apache.org">http://httpd.apache.org/</a>¿¡¼­µµ
          º¼ ¼ö ÀÖ´Â ¾ÆÆÄÄ¡ ¼³¸í¼­¸¦ Âü°íÇ϶ó.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">°³¿ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">¿É¼Ç</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exit">Á¾·áÄÚµå</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">¿¹Á¦</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#security">º¸¾È»ó °í·ÁÇÒ Á¡</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#restrictions">Á¦ÇÑ</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="httpd.html">httpd</a></li><li>¹èÆ÷º»¿¡´Â SHA1À» Áö¿øÇÏ´Â ½ºÅ©¸³Æ®µµ ÀÖ´Ù.</li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">°³¿ä</a></h2>
          <p><code><strong>htpasswd</strong>
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> ]
          [ -<strong>D</strong> ] <var>passwdfile</var> <var>username</var></code></p>
      
          <p><code><strong>htpasswd</strong> -<strong>b</strong>
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>d</strong> |
            -<strong>p</strong> |
            -<strong>s</strong> ] 
          [ -<strong>D</strong> ]  <var>passwdfile</var> <var>username</var>
          <var>password</var></code></p>
      
          <p><code><strong>htpasswd</strong> -<strong>n</strong>
          [ -<strong>m</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ] <var>username</var></code></p>
      
          <p><code><strong>htpasswd</strong> -<strong>nb</strong>
          [ -<strong>m</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ] <var>username</var> <var>password</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">¿É¼Ç</a></h2>
          <dl>
          <dt><code>-b</code></dt>
          <dd>¹èÄ¡(batch) ¸ðµå¸¦ »ç¿ëÇÑ´Ù. <em>¿¹¸¦ µé¾î</em>, ¾ÏÈ£¸¦
          ¹°¾îº¸Áö¾Ê°í ¸í·ÉÇà¿¡¼­ ¹Þ´Â´Ù. ¸í·ÉÇà¿¡ <strong>¾ÏÈ£°¡
          Á÷Á¢ µå·¯³ª¹Ç·Î</strong>, ÀÌ ¿É¼ÇÀº ¸Å¿ì Á¶½ÉÇØ¼­ »ç¿ëÇØ¾ß
          ÇÑ´Ù.</dd>
      
          <dt><code>-c</code></dt>
          <dd><var>passwdfile</var>À» ¸¸µç´Ù. <var>passwdfile</var>ÀÌ
          ÀÌ¹Ì Á¸ÀçÇÑ´Ù¸é, µ¤¾î¾´´Ù. ÀÌ ¿É¼ÇÀ» <code>-n</code> ¿É¼Ç°ú
          °°ÀÌ »ç¿ëÇÒ ¼ö ¾ø´Ù.</dd>
      
          <dt><code>-n</code></dt>
          <dd>ÆÄÀÏÀ» ¼öÁ¤ÇÏÁö¾Ê°í °á°ú¸¦ Ç¥ÁØÃâ·ÂÀ¸·Î Ãâ·ÂÇÑ´Ù.
          ¾ÆÆÄÄ¡°¡ ¹®¼­ÀÌ¿ÜÀÇ °÷¿¡ »ý¼ºÇÑ ¾ÏÈ£¸¦ ÀúÀåÇÒ¶§ À¯¿ëÇÏ´Ù.
          (Ç×»ó ù¹øÂ° ¾Æ±Ô¸ÕÆ®ÀÎ) <var>passwdfile</var> ¾Æ±Ô¸ÕÆ®°¡
          ¾ø±â¶§¹®¿¡ ¸í·ÉÇà ¹®¹ýÀÌ ´Ù¸£´Ù. <code>-c</code> ¿É¼Ç°ú
          °°ÀÌ »ç¿ëÇÒ ¼ö ¾ø´Ù.</dd>
      
          <dt><code>-m</code></dt>
          <dd>MD5¸¦ »ç¿ëÇÏ¿© ¾ÏÈ£¸¦ ¾ÏȣȭÇÑ´Ù. Windows, Netware,
          TPF¿¡¼­ ±âº»°ªÀÌ´Ù.</dd>
      
          <dt><code>-d</code></dt>
          <dd><code>crypt()</code>¸¦ »ç¿ëÇÏ¿© ¾ÏÈ£¸¦ ¾ÏȣȭÇÑ´Ù.
          Windows, Netware, TPF¸¦ Á¦¿ÜÇÑ ¸ðµç Ç÷¡Æû¿¡¼­ ±âº»°ªÀÌ´Ù.
          ¸ðµç Ç÷¡ÆûÀÇ <code>htpasswd</code>°¡ ÀÌ Çü½ÄÀ» Áö¿øÇÒ ¼ö´Â
          ÀÖÁö¸¸, Windows, Netware, TPFÀÇ <a href="httpd.html">httpd</a>
          ¼­¹ö´Â ÀÌ Çü½ÄÀ» Áö¿øÇÏÁö ¾Ê´Â´Ù.</dd>
      
          <dt><code>-s</code></dt>
          <dd>¾ÏÈ£¸¦ SHA ¾ÏȣȭÇÑ´Ù. LDAP µð·ºÅ丮±³È¯Çü½Ä(ldif)À»
          »ç¿ëÇÏ¿© Netscape ¼­¹ö·Î Á¤º¸¸¦ º¸³»°Å³ª °ÅÁ®¿Ã¶§ À¯¿ëÇÏ´Ù.</dd>
      
          <dt><code>-p</code></dt>
          <dd>¾ÏÈ£¸¦ ±×´ë·Î »ç¿ëÇÑ´Ù. ¸ðµç Ç÷¡ÆûÀÇ <code>htpasswd</code>°¡
          Áö¿øÇÏÁö¸¸, Windows, Netware, TPFÀÇ <a href="httpd.html">httpd</a>
          µ¥¸ó¸¸ÀÌ ÀÏ¹Ý ¾ÏÈ£¸¦ ¹Þ´Â´Ù.</dd>
      
          <dt><code>-D</code></dt>
          <dd>»ç¿ëÀÚ¸¦ »èÁ¦ÇÑ´Ù. htpasswd ÆÄÀÏ¿¡ »ç¿ëÀÚ¸íÀÌ ÀÖ´Ù¸é
          »èÁ¦ÇÑ´Ù.</dd>
          
          <dt><code><var>passwdfile</var></code></dt>
          <dd>»ç¿ëÀÚ¸í°ú ¾ÏÈ£¸¦ ÀúÀåÇÏ´Â ÆÄÀϸí. <code>-c</code>¸¦
          »ç¿ëÇÑ °æ¿ì ÆÄÀÏÀÌ ¾ø´Ù¸é »õ·Î ¸¸µé°í, ÀÖ´Ù¸é µ¤¾î¾´´Ù.</dd>
      
          <dt><code><var>username</var></code></dt>
          <dd><var>passwdfile</var>¿¡ ¸¸µé°Å³ª ¼öÁ¤ÇÒ »ç¿ëÀÚ¸í.
          <var>username</var>ÀÌ ÀÌ ÆÄÀÏ¿¡ ¾ø´Ù¸é Ç׸ñÀ» Ãß°¡ÇÑ´Ù.
          ÀÖ´Ù¸é ¾ÏÈ£¸¦ ¼öÁ¤ÇÑ´Ù.</dd>
      
          <dt><code><var>password</var></code></dt>
          <dd>¾ÏȣȭÇÏ¿© ÆÄÀÏ¿¡ ÀúÀåÇÒ ¾ÏÈ£. ¿ÀÁ÷ <code>-b</code>
          ¿É¼Ç°ú °°ÀÌ »ç¿ëÇÒ ¼ö ÀÖ´Ù.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exit" id="exit">Á¾·áÄÚµå</a></h2>
          <p><code>htpasswd</code>´Â <var>passwdfile</var>¿¡ »ç¿ëÀÚ¸í°ú
          ¾ÏÈ£¸¦ ¼º°øÀûÀ¸·Î Ãß°¡Çϰųª ¼öÁ¤ÇÑ °æ¿ì ("Âü") Á¾·áÄÚµå
          0À» ¹ÝȯÇÑ´Ù. <code>htpasswd</code>´Â ÆÄÀÏ¿¡ Á¢±ÙÇÒ¶§ ¹®Á¦°¡
          ¹ß»ýÇÑ °æ¿ì <code>1</code>À», ¸í·ÉÇà Çü½ÄÀÌ À߸øµÈ °æ¿ì
          <code>2</code>¸¦, ÀÔ·ÂÇÑ ¾ÏÈ£¿Í È®ÀÎÂ÷ ´Ù½Ã ÀÔ·ÂÇÑ °ªÀÌ
          ÀÏÄ¡ÇÏÁö ¾ÊÀº °æ¿ì <code>3</code>À», ¸í·ÉÀÌ Áß´ÜµÈ °æ¿ì
          <code>4</code>¸¦, (»ç¿ëÀÚ¸í, ÆÄÀϸí, ¾ÏÈ£, ÃÖÁ¾ °è»ê°á°ú)
          °ªÀÌ ³Ê¹« ±ä °æ¿ì <code>5</code>¸¦, »ç¿ëÀÚ¸í¿¡ Çã¿ëÇÏÁö¾Ê´Â
          ¹®ÀÚ°¡ Æ÷ÇÔµÈ °æ¿ì <a href="#restrictions">Á¦ÇÑ Àý</a> Âü°í)
          <code>6</code>¸¦, ÆÄÀÏÀÌ ¿Ã¹Ù¸¥ ¾ÏÈ£ÆÄÀÏÀÌ ¾Æ´Ñ °æ¿ì
          <code>7</code>À» ¹ÝȯÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">¿¹Á¦</a></h2>
          <div class="example"><p><code>
            htpasswd /usr/local/etc/apache/.htpasswd-users jsmith
          </code></p></div>
      
          <p>»ç¿ëÀÚ <code>jsmith</code>ÀÇ ¾ÏÈ£¸¦ Ãß°¡Çϰųª ¼öÁ¤ÇÑ´Ù.
          »ç¿ëÀÚ¿¡°Ô ¾ÏÈ£¸¦ ¹°¾îº»´Ù. Windows ½Ã½ºÅÛ¿¡¼­ ½ÇÇàÇϸé
          ¾ÏÈ£¸¦ ¾ÆÆÄÄ¡ ƯÀ¯ÀÇ MD5 ¾Ë°í¸®ÁòÀ» »ç¿ëÇÏ¿© ¾ÏȣȭÇϰí,
          ¾Æ´Ï¸é ½Ã½ºÅÛÀÇ <code>crypt()</code> ÇÔ¼ö¸¦ »ç¿ëÇÑ´Ù. ÆÄÀÏÀÌ
          ¾ø´Ù¸é <code>htpasswd</code>´Â ¾Æ¹« Àϵµ ÇÏÁö¾Ê°í ¿À·ù¸¦
          ³½´Ù.</p>
      
          <div class="example"><p><code>
            htpasswd -c /home/doe/public_html/.htpasswd jane
          </code></p></div>
      
          <p>»õ·Î ÆÄÀÏÀ» ¸¸µé°í ±× ÆÄÀÏ¿¡ »ç¿ëÀÚ <code>jane</code>À»
          Ãß°¡ÇÑ´Ù. »ç¿ëÀÚ¿¡°Ô ¾ÏÈ£¸¦ ¹°¾îº»´Ù. ÆÄÀÏÀÌ ÀÖÁö¸¸ Àаųª
          ¾µ ¼ö ¾ø´Ù¸é, <code>htpasswd</code>´Â ÆÄÀÏÀ» ¼öÁ¤ÇÏÁö¾Ê°í
          ¹®±¸¸¦ Ãâ·ÂÇÑÈÄ ¿À·ù»óŸ¦ ¹ÝȯÇÑ´Ù.</p>
      
          <div class="example"><p><code>
            htpasswd -mb /usr/web/.htpasswd-all jones Pwd4Steve
          </code></p></div>
      
          <p>¸í·ÉÇàÀÇ ¾ÏÈ£(<code>Pwd4Steve</code>)¸¦ MD5 ¾Ë°í¸®ÁòÀ¸·Î
          ¾ÏȣȭÇÏ¿© ÁöÁ¤ÇÑ ÆÄÀÏ¿¡ ÀúÀåÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">º¸¾È»ó °í·ÁÇÒ Á¡</a></h2>
          <p><code>htpasswd</code> µîÀÌ °ü¸®ÇÏ´Â À¥ ¾ÏÈ£ÆÄÀÏÀÌ À¥¼­¹öÀÇ
          URI °ø°£¿¡ ÀÖÀ¸¸é <em>¾ÈµÈ´Ù</em>. Áï, ºê¶ó¿ìÀú°¡ ÀÌ ÆÄÀÏÀ»
          º¼ ¼ö ¾ø¾î¾ß ÇÑ´Ù.</p>
      
          <p>¸í·ÉÇà¿¡ ¾ÏȣȭÇÏÁö¾ÊÀº ¾ÏÈ£¸¦ »ç¿ëÇϱ⶧¹®¿¡ <code>-b</code>
          ¿É¼ÇÀ» ÃßõÇÏÁö ¾Ê´Â´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="restrictions" id="restrictions">Á¦ÇÑ</a></h2>
          <p>Windows¿Í MPE Ç÷¡ÆûÀº <code>htpasswd</code>°¡ ¾ÏȣȭÇÏ´Â
          ¾ÏÈ£ÀÇ ±æÀ̸¦ <code>255</code> ¹®ÀÚ·Î Á¦ÇÑÇÑ´Ù. ´õ ±ä ¾ÏÈ£´Â
          255ÀÚ¿¡¼­ ©¸°´Ù.</p>
      
          <p><code>htpasswd</code>°¡ »ç¿ëÇÏ´Â MD5 ¾Ë°í¸®ÁòÀº ¾ÆÆÄÄ¡
          ¼ÒÇÁÆ®¿þ¾î ƯÀ¯ÀÇ °ÍÀÌ´Ù. À̸¦ »ç¿ëÇÏ¿© ¾ÏȣȭÇÑ ¾ÏÈ£¸¦
          ´Ù¸¥ À¥¼­¹ö¿¡¼­ »ç¿ëÇÒ ¼ö ¾ø´Ù.</p>
      
          <p>»ç¿ëÀÚ¸íÀº <code>255</code> ¹ÙÀÌÆ®·Î Á¦Çѵǰí <code>:</code>
          ¹®ÀÚ¸¦ Æ÷ÇÔÇÒ ¼ö ¾ø´Ù.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/htpasswd.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htpasswd.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htpasswd.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htpasswd.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htpasswd.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/apachectl.html.fr.utf8��������������������������������������������0000644�0000000�0000050�00000030213�13412755316�021406� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>apachectl - L'interface de contrôle du serveur HTTP
        Apache - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>apachectl - L'interface de contrôle du serveur HTTP
        Apache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/apachectl.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apachectl.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apachectl.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apachectl.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
           <p><code>apachectl</code> est un frontal pour le serveur HTTP
           Apache. Il a été conçu pour aider l'administrateur à contrôler le
           fonctionnement du démon Apache <code class="program"><a href="../programs/httpd.html">httpd</a></code>.</p>
      
           <p>Le script <code>apachectl</code> possède deux modes de
           fonctionnement. Il peut fonctionner en tant que simple frontal
           de la commande <code class="program"><a href="../programs/httpd.html">httpd</a></code> et ne fait alors que
           définir toute variable d'environnement nécessaire, puis invoque
           <code class="program"><a href="../programs/httpd.html">httpd</a></code> en lui passant tout argument de ligne de
           commande souhaité. Il peut aussi fonctionner en tant que script
           d'initialisation SysV n'acceptant qu'un seul argument tel que
           <code>start</code>, <code>restart</code> et <code>stop</code>, et
           traduisant ce dernier en signaux appropriés pour le démon
           <code class="program"><a href="../programs/httpd.html">httpd</a></code>.</p>
      
           <p>Si votre installation d'Apache utilise des chemins non
           standards, vous devrez éditer le script <code>apachectl</code> afin
           de définir les chemins appropriés pour le binaire
           <code class="program"><a href="../programs/httpd.html">httpd</a></code>. Vous pouvez aussi spécifier tout argument
           de ligne de commande de <code class="program"><a href="../programs/httpd.html">httpd</a></code> nécessaire. Voir
           les commentaires dans le script pour plus de détails.</p>
      
           <p>Le script <code>apachectl</code> renvoie une valeur égale à 0 en
           cas de succès, et une valeur supérieure à 0 en cas de problème.
           Voir les commentaires dans le script pour plus de détails.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Résumé</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="../invoking.html">Démarrer Apache</a></li><li><a href="../stopping.html">Arrêter Apache</a></li><li><a href="../configuring.html">Fichiers de
      configuration</a></li><li><a href="../platform/">Documentation spécifique aux
      plates-formes</a></li><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Résumé</a></h2>
      
      <p>En mode frontal (pass-through), <code>apachectl</code> peut spécifier
      tous les arguments qu'accepte le binaire <code class="program"><a href="../programs/httpd.html">httpd</a></code>.</p>
      
      <p><code><strong>apachectl</strong> [ <var>argument-httpd</var> ]</code></p>
      
      <p>En mode script d'initialisation SysV, <code>apachectl</code>
      n'accepte qu'un seul des arguments définis ci-dessous.</p>
      
      <p><code><strong>apachectl</strong> <var>commande</var></code></p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
      
      <p>Seules les options du style initialisation SysV sont décrites ici.
      Les autres arguments sont décrits dans la page de manuel de
      <code class="program"><a href="../programs/httpd.html">httpd</a></code>.</p>
      
      <dl>
      
      <dt><code>start</code></dt>
      
      <dd>Démarre le démon Apache <code class="program"><a href="../programs/httpd.html">httpd</a></code>. Renvoie une erreur
      s'il est déjà en cours d'exécution. Équivalent à <code>apachectl -k
      start</code>.</dd>
      
      <dt><code>stop</code></dt>
      
      <dd>Arrête le démon Apache <code class="program"><a href="../programs/httpd.html">httpd</a></code>. Équivalent à
      <code>apachectl -k stop</code>.</dd>
      
      <dt><code>restart</code></dt>
      
      <dd>Redémarre le démon Apache <code class="program"><a href="../programs/httpd.html">httpd</a></code>. Si le démon
      n'est pas en cours d'exécution, il est démarré. Cette option vérifie
      automatiquement les fichiers de configuration (de la même manière que
      l'option <code>configtest</code> ) avant de lancer le redémarrage, afin
      d'être sûr que le fonctionnement du démon ne sera pas compromis.
      Equivalent à <code>apachectl -k restart</code>.</dd>
      
      <dt><code>fullstatus</code></dt>
      
      <dd>Affiche le rapport d'état complet du module
      <code class="module"><a href="../mod/mod_status.html">mod_status</a></code>. Pour que ceci fonctionne,
      <code class="module"><a href="../mod/mod_status.html">mod_status</a></code> doit être activé dans votre serveur et vous
      devez disposer d'un navigateur en mode texte tel que <code>lynx</code>
      sur votre système. L'URL utilisée pour accéder au rapport d'état peut
      être modifiée en définissant la variable <code>STATUSURL</code> dans le
      script.</dd>
      
      <dt><code>status</code></dt>
      
      <dd>Affiche un rapport d'état succinct. Similaire à l'option
      <code>fullstatus</code>, excepté que la liste des requêtes en cours de
      traitement est omise.</dd>
      
      <dt><code>graceful</code></dt>
      
      <dd>Redémarre le démon Apache <code class="program"><a href="../programs/httpd.html">httpd</a></code> en douceur. Si le
      démon n'est pas en cours d'exécution, il est démarré. À la différence
      d'un redémarrage normal, les connexions en cours ne sont pas fermées.
      Comme effet de bord, les anciens fichiers journaux ne seront pas fermés
      immédiatement. Cela signifie que si l'on utilise un script de rotation
      des journaux, un délai suffisant sera nécessaire afin d'être sûr que les
      fichiers journaux seront bien fermés avant leur traitement par le script
      de rotation. Cette option vérifie
      automatiquement les fichiers de configuration (de la même manière que
      l'option <code>configtest</code> ) avant de lancer le redémarrage, afin
      d'être sûr que le fonctionnement du démon ne sera pas compromis.
      Équivalent à <code>apachectl -k graceful</code>.</dd>
      
      <dt><code>graceful-stop</code></dt>
      
      <dd>Arrête le démon Apache <code class="program"><a href="../programs/httpd.html">httpd</a></code> en douceur. À la
      différence d'un arrêt normal, les connexions en cours ne sont pas
      fermées. Comme effet de bord, les anciens fichiers journaux ne seront
      pas fermés immédiatement. Équivalent à <code>apachectl -k
      graceful-stop</code>.</dd>
      
      <dt><code>configtest</code></dt>
      
      <dd>Effectue une vérification de la syntaxe du fichier de configuration.
      Avec cette option, le script parcourt le fichier de configuration et
      renvoie soit <code>Syntax Ok</code>, soit des informations détaillées à
      propos des éventuelles erreurs de syntaxe. Equivalent à <code>apachectl
      -t</code>.</dd>
      
      </dl>
      
      <p>Les options suivantes étaient disponibles dans les anciennes versions
      et ont été supprimées.</p>
      
      <dl>
      
      <dt><code>startssl</code></dt>
      
      <dd>Pour démarrer <code class="program"><a href="../programs/httpd.html">httpd</a></code> avec le support SSL, vous
      devez éditer votre fichier de configuration et y inclure les
      directives appropriées, puis utiliser la commande de démarrage normale
      <code>apachectl start</code>.</dd>
      
      </dl>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/apachectl.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apachectl.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apachectl.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apachectl.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/apachectl.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htcacheclean.html.ko.euc-kr���������������������������������������0000644�0000000�0000050�00000021660�13412755316�022374� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htcacheclean - µð½ºÅ© ij½¬¸¦ û¼ÒÇÑ´Ù - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>htcacheclean - µð½ºÅ© ij½¬¸¦ û¼ÒÇÑ´Ù</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/htcacheclean.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htcacheclean.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htcacheclean.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htcacheclean.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p><code>htcacheclean</code>Àº <code class="module"><a href="../mod/mod_cache_disk.html">mod_cache_disk</a></code>°¡
          »ç¿ëÇÏ´Â ÀúÀå¼Ò ¿ë·®À» ÀÏÁ¤ Çѵµ·Î À¯ÁöÇÑ´Ù. ÀÌ µµ±¸´Â Á÷Á¢
          ½ÇÇàÇϰųª µ¥¸ó(daemon)À¸·Î ½ÇÇàÇÒ ¼ö ÀÖ´Ù. ÇÁ·Î±×·¥À» µ¥¸óÀ¸·Î
          ½ÇÇàÇÏ¸é ¹é±×¶ó¿îµå¿¡¼­ ÀáÀÚ°í ÀÖ´Ù°¡ ÀÏÁ¤ ÁÖ±â·Î ij½¬
          µð·ºÅ丮¿¡¼­ Áö¿ï °ÍÀÌ ÀÖ´ÂÁö °Ë»çÇÑ´Ù. µ¥¸ó¿¡°Ô TERMÀ̳ª
          INT ½Ã±×³ÎÀ» º¸³»¸é ¾ÈÀüÇÏ°Ô Á¾·áÇÑ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">°³¿ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">¿É¼Ç</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exit">Á¾·áÄÚµå</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_cache_disk.html">mod_cache_disk</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">°³¿ä</a></h2>
          <p><code><strong>htcacheclean</strong>
          [ -<strong>D</strong> ]
          [ -<strong>v</strong> ]
          [ -<strong>r</strong> ]
          [ -<strong>n</strong> ]
          -<strong>p</strong><var>path</var>
          -<strong>l</strong><var>limit</var></code></p>
      
          <p><code><strong>htcacheclean</strong> -<strong>b</strong>
          [ -<strong>n</strong> ]
          [ -<strong>i</strong> ]
          -<strong>d</strong><var>interval</var>
          -<strong>p</strong><var>path</var>
          -<strong>l</strong><var>limit</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">¿É¼Ç</a></h2>
          <dl>
          <dt><code>-d<var>interval</var></code></dt>
          <dd>µ¥¸óÀ¸·Î ½ÇÇàÇÏ¿© <var>interval</var> ºÐ¸¶´Ù ij½¬¸¦
          û¼ÒÇÑ´Ù. ÀÌ ¿É¼ÇÀº <code>-D</code>, <code>-v</code>,
          <code>-r</code> ¿É¼Ç°ú ÇÔ²² »ç¿ëÇÒ ¼ö ¾ø´Ù. µ¥¸óÀ» ¾ÈÀüÇϰÔ
          Á¾·áÇÏ·Á¸é µ¥¸ó¿¡°Ô <code>SIGTERM</code> ȤÀº
          <code>SIGINT</code> ½Ã±×³ÎÀ» º¸³»¸é µÈ´Ù.</dd>
      
          <dt><code>-D</code></dt>
          <dd>°Ë»ç¸¸ ÇÏ°í ½ÇÁ¦ ¾Æ¹«°Íµµ Áö¿ìÁö ¾Ê´Â´Ù. ÀÌ ¿É¼ÇÀº
          <code>-d</code> ¿É¼Ç°ú ÇÔ²² »ç¿ëÇÒ ¼ö ¾ø´Ù.</dd>
      
          <dt><code>-v</code></dt>
          <dd>ÀÚ¼¼ÇÑ Åë°è¸¦ Ãâ·ÂÇÑ´Ù. ÀÌ ¿É¼ÇÀº <code>-d</code> ¿É¼Ç°ú
          ÇÔ²² »ç¿ëÇÒ ¼ö ¾ø´Ù.</dd>
      
          <dt><code>-r</code></dt>
          <dd>¿ÏÀüÈ÷ û¼ÒÇÑ´Ù. ¾ÆÆÄÄ¡ À¥¼­¹ö°¡ µ¿ÀÛÇÏÁö ¾Ê´Â´Ù°í °¡Á¤ÇÑ´Ù
          (¸¸¾à µ¿ÀÛÇÑ´Ù¸é ij½¬¿¡ ÀÌ»óÇÑ °ªÀÌ ÀúÀåµÈ´Ù). ÀÌ ¿É¼ÇÀº
          <code>-d</code> ¿É¼Ç°ú ÇÔ²² »ç¿ëÇÒ ¼ö ¾ø´Ù.</dd>
      
          <dt><code>-n</code></dt>
          <dd>Ä£ÀýÇϰÔ(nice) µ¿ÀÛÇÑ´Ù. ´Ù¸¥ ÇÁ·Î¼¼½º¸¦ À§ÇØ ´À¸®°Ô
          µ¿ÀÛÇÑ´Ù. <code>htcacheclean</code>°¡ ÀÚÁÖ ÀáÀ» ÀڰԵǿ©
          (1) µð½ºÅ© ÀÔÃâ·ÂÀÌ Áö¿¬µÇ°í (2) ±×µ¿¾È Ä¿³ÎÀº ´Ù¸¥ ÇÁ·Î¼¼½º¸¦
          ½ºÄÉÁÙÇÒ ¼ö ÀÖ´Ù.</dd>
      
          <dt><code>-p<var>path</var></code></dt>
          <dd><var>path</var>¸¦ µð½ºÅ© ij½¬ÀÇ ÃÖ»óÀ§ µð·ºÅ丮·Î ÁöÁ¤ÇÑ´Ù.
          <code class="directive"><a href="../mod/mod_cache_disk.html#cacheroot">CacheRoot</a></code>
          Áö½Ã¾î¿¡ »ç¿ëÇÑ °ª°ú µ¿ÀÏÇÑ °ªÀ» »ç¿ëÇØ¾ß ÇÑ´Ù.</dd>
      
          <dt><code>-l<var>limit</var></code></dt>
          <dd>Àüü µð½ºÅ© ij½¬ ¿ë·® Á¦ÇÑÀ» <var>limit</var>·Î Á¦ÇÑÇÑ´Ù.
          °ªÀº ±âº»ÀûÀ¸·Î (ȤÀº ¼ýÀÚ¿¡ <code>B</code>¸¦ ºÙÀ̸é) ¹ÙÀÌÆ®
          ´ÜÀ§ÀÌ´Ù. ų·Î¹ÙÀÌÆ®´Â <code>K</code>¸¦, ¸Þ°¡¹ÙÀÌÆ®´Â
          <code>M</code>À» µÚ¿¡ ºÙÀδÙ.</dd>
      
          <dt><code>-i</code></dt>
          <dd>Áö´ÉÀûÀ¸·Î µð½ºÅ© ij½¬°¡ º¯°æµÈ °æ¿ì¿¡¸¸ µ¿ÀÛÇÑ´Ù. ÀÌ
          ¿É¼ÇÀº <code>-d</code> ¿É¼Ç°ú ÇÔ²²¸¸ »ç¿ëÇÒ ¼ö ÀÖ´Ù.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exit" id="exit">Á¾·áÄÚµå</a></h2>
          <p><code>htcacheclean</code>´Â ¸ðµç ÀÛ¾÷ÀÌ ¼º°øÇÑ °æ¿ì¿¡
          ("Âü") Á¾·áÄÚµå 0À» ¹ÝȯÇϰí, ½ÇÆÐÇÑ °æ¿ì¿¡´Â <code>1</code>À»
          ¹ÝȯÇÑ´Ù.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/htcacheclean.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htcacheclean.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htcacheclean.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htcacheclean.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htcacheclean.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htpasswd.html�����������������������������������������������������0000644�0000000�0000050�00000000607�13362070302�020015� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: htpasswd.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: htpasswd.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: htpasswd.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: htpasswd.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htcacheclean.html.en����������������������������������������������0000644�0000000�0000050�00000034352�13523273316�021200� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htcacheclean - Clean up the disk cache - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>htcacheclean - Clean up the disk cache</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/htcacheclean.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htcacheclean.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htcacheclean.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htcacheclean.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>htcacheclean</code> is used to keep the size of
          <code class="module"><a href="../mod/mod_cache_disk.html">mod_cache_disk</a></code>'s storage within a given size limit, or
          limit on inodes in use. This tool can run either manually or in daemon mode.
          When running in daemon mode, it sleeps in the background and checks the cache
          directory at regular intervals for cached content to be removed. You can stop
          the daemon cleanly by sending it a TERM or INT signal. When run manually, a
          once off check of the cache directory is made for cached content to be
          removed. If one or more URLs are specified, each URL will be deleted from
          the cache, if present.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#delete">Deleting a specific URL</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#list">Listing URLs in the Cache</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exit">Exit Status</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_cache_disk.html">mod_cache_disk</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
          <p><code><strong>htcacheclean</strong>
          [ -<strong>D</strong> ]
          [ -<strong>v</strong> ]
          [ -<strong>t</strong> ]
          [ -<strong>r</strong> ]
          [ -<strong>n</strong> ]
          [ -<strong>R</strong><var>round</var> ]
          -<strong>p</strong><var>path</var>
          [ -<strong>l</strong><var>limit</var> ]
          [ -<strong>L</strong><var>limit</var> ]</code></p>
      
          <p><code><strong>htcacheclean</strong>
          [ -<strong>n</strong> ]
          [ -<strong>t</strong> ]
          [ -<strong>i</strong> ]
          [ -<strong>P</strong><var>pidfile</var> ]
          [ -<strong>R</strong><var>round</var> ]
          -<strong>d</strong><var>interval</var>
          -<strong>p</strong><var>path</var>
          [ -<strong>l</strong><var>limit</var> ]
          [ -<strong>L</strong><var>limit</var> ]</code></p>
      
          <p><code><strong>htcacheclean</strong>
          [ -<strong>v</strong> ]
          [ -<strong>R</strong><var>round</var> ]
          -<strong>p</strong><var>path</var>
          [ -<strong>a</strong> ]
          [ -<strong>A</strong> ]</code></p>
      
          <p><code><strong>htcacheclean</strong>
          [ -<strong>D</strong> ]
          [ -<strong>v</strong> ]
          [ -<strong>t</strong> ]
          [ -<strong>R</strong><var>round</var> ]
          -<strong>p</strong><var>path</var>
          <var>url</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code>-d<var>interval</var></code></dt>
          <dd>Daemonize and repeat cache cleaning every <var>interval</var> minutes.
          This option is mutually exclusive with the <code>-D</code>, <code>-v</code>
          and <code>-r</code> options. To shutdown the daemon cleanly, just send it
          a <code>SIGTERM</code> or <code>SIGINT</code>.</dd>
      
          <dt><code>-D</code></dt>
          <dd>Do a dry run and don't delete anything. This option is mutually
              exclusive with the <code>-d</code> option. When doing a dry run and
              deleting directories with <code>-t</code>, the inodes reported deleted
              in the stats cannot take into account the directories deleted, and will
              be marked as an estimate.</dd>
      
          <dt><code>-v</code></dt>
          <dd>Be verbose and print statistics. This option is mutually exclusive
          with the <code>-d</code> option.</dd>
      
          <dt><code>-r</code></dt>
          <dd>Clean thoroughly. This assumes that the Apache web server is
          not running (otherwise you may get garbage in the cache). This option
          is mutually exclusive with the <code>-d</code> option and implies
          the <code>-t</code> option.</dd>
      
          <dt><code>-n</code></dt>
          <dd>Be nice. This causes slower processing in favour of other
          processes. <code>htcacheclean</code> will sleep from time to time
          so that (a) the disk IO will be delayed and (b) the kernel can schedule
          other processes in the meantime.</dd>
      
          <dt><code>-t</code></dt>
          <dd>Delete all empty directories. By default only cache files are
          removed, however with some configurations the large number of
          directories created may require attention. If your configuration
          requires a very large number of directories, to the point that
          inode or file allocation table exhaustion may become an issue, use
          of this option is advised.</dd>
      
          <dt><code>-p<var>path</var></code></dt>
          <dd>Specify <var>path</var> as the root directory of the disk cache. This
          should be the same value as specified with the <code class="directive"><a href="../mod/mod_cache_disk.html#cacheroot">CacheRoot</a></code> directive.</dd>
      
          <dt><code>-P<var>pidfile</var></code></dt>
          <dd>Specify <var>pidfile</var> as the name of the file to write the
          process ID to when daemonized.</dd>
      
          <dt><code>-R<var>round</var></code></dt>
          <dd>Specify <var>round</var> as the amount to round sizes up to, to
          compensate for disk block sizes. Set to the block size of the cache
          partition.</dd>
      
          <dt><code>-l<var>limit</var></code></dt>
          <dd>Specify <var>limit</var> as the total disk cache size limit. The value
          is expressed in bytes by default (or attaching <code>B</code> to the
          number). Attach <code>K</code> for Kbytes, <code>M</code> for
          MBytes or <code>G</code> for Gbytes.</dd>
      
          <dt><code>-L<var>limit</var></code></dt>
          <dd>Specify <var>limit</var> as the total disk cache inode limit.
          <code>K</code>, <code>M</code> or <code>G</code> suffix can also be
          used.</dd>
      
          <dt><code>-i</code></dt>
          <dd>Be intelligent and run only when there was a modification of the disk
          cache. This option is only possible together with the <code>-d</code>
          option.</dd>
      
          <dt><code>-a</code></dt>
          <dd>List the URLs currently stored in the cache. Variants of the same URL
          will be listed once for each variant.</dd>
      
          <dt><code>-A</code></dt>
          <dd>List the URLs currently stored in the cache, along with their
          attributes in the following order: url, header size, body size, status,
          entity version, date, expiry, request time, response time, body present,
          head request.</dd>
          </dl>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="delete" id="delete">Deleting a specific URL</a></h2>
          <p>If <code>htcacheclean</code> is passed one or more URLs, each URL will
          be deleted from the cache. If multiple variants of an URL exists, all
          variants would be deleted.</p>
      
          <p>When a reverse proxied URL is to be deleted, the effective URL is
          constructed from the <strong>Host</strong> header, the
          <strong>port</strong>, the <strong>path</strong> and the
          <strong>query</strong>. Note the '?' in the URL must always be specified
          explicitly, whether a query string is present or not. For example, an
          attempt to delete the path <strong>/</strong> from the server
          <strong>localhost</strong>, the URL to delete would be
          <strong>http://localhost:80/?</strong>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="list" id="list">Listing URLs in the Cache</a></h2>
          <p>By passing the <code>-a</code> or <code>-A</code> options to
          <code>htcacheclean</code>, the URLs within the cache will be listed
          as they are found, one URL per line. The <code>-A</code> option
          dumps the full cache entry after the URL, with fields in the
          following order:</p>
      
          <dl>
              <dt>url</dt><dd>The URL of the entry.</dd>
              <dt>header size</dt><dd>The size of the header in bytes.</dd>
              <dt>body size</dt><dd>The size of the body in bytes.</dd>
              <dt>status</dt><dd>Status of the cached response.</dd>
              <dt>entity version</dt><dd>The number of times this entry has been
              revalidated without being deleted.</dd>
              <dt>date</dt><dd>Date of the response.</dd>
              <dt>expiry</dt><dd>Expiry date of the response.</dd>
              <dt>request time</dt><dd>Time of the start of the request.</dd>
              <dt>response time</dt><dd>Time of the end of the request.</dd>
              <dt>body present</dt><dd>If 0, no body is stored with this request,
              1 otherwise.</dd>
              <dt>head request</dt><dd>If 1, the entry contains a cached HEAD
              request with no body, 0 otherwise.</dd>
          </dl>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exit" id="exit">Exit Status</a></h2>
          <p><code>htcacheclean</code> returns a zero status ("true") if all
          operations were successful, <code>1</code> otherwise. If an URL is
          specified, and the URL was cached and successfully removed,
          <code>0</code> is returned, <code>2</code> otherwise. If an error
          occurred during URL removal, <code>1</code> is returned.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/htcacheclean.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htcacheclean.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htcacheclean.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htcacheclean.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htcacheclean.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/ab.html�����������������������������������������������������������0000644�0000000�0000050�00000000557�13362070302�016546� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: ab.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: ab.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: ab.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: ab.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/suexec.html.fr.utf8�����������������������������������������������0000644�0000000�0000050�00000015547�13412755316�020773� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>suexec - Change d'utilisateur avant l'exécution d'un programme
      externe - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>suexec - Change d'utilisateur avant l'exécution d'un programme
      externe</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/suexec.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/suexec.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/suexec.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/suexec.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
           <p><code>suexec</code> permet au serveur HTTP Apache de changer
           d'utilisateur avant d'exécuter un programme CGI. Pour ce faire, il
           doit être exécuté par <code>root</code>. A cet effet, comme le
           démon HTTP ne s'exécute en général pas en tant que
           <code>root</code>, l'exécutable <code>suexec</code> doit posséder
           le bit setuid et avoir comme propriétaire <code>root</code>. Seul
           <code>root</code> doit en posséder les droits en écriture.</p>
      
           <p>Pour plus d'informations à propos des concepts et du modèle de
           sécurité du programme suexec, veuillez vous reporter à sa
           documentation : <a href="http://httpd.apache.org/docs/2.4/suexec.html">http://httpd.apache.org/docs/2.4/suexec.html</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
           <p><code><strong>suexec</strong> -<strong>V</strong></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
      
      <dl>
      <dt><code>-V</code></dt>
      
      <dd>Si vous êtes <code>root</code>, cette option permet d'afficher les
      options de compilation du programme <code>suexec</code>. Pour des
      raisons de sécurité, toutes les options de configuration ne sont
      modifiables qu'à la compilation.</dd>
      
      </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/suexec.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/suexec.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/suexec.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/suexec.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/suexec.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/apachectl.html����������������������������������������������������0000644�0000000�0000050�00000000613�13362070302�020101� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: apachectl.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: apachectl.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: apachectl.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: apachectl.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ���������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htpasswd.html.fr.utf8���������������������������������������������0000644�0000000�0000050�00000046223�13523273316�021325� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htpasswd - Gestion des fichiers d'utilisateurs pour
      l'authentification de base - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>htpasswd - Gestion des fichiers d'utilisateurs pour
      l'authentification de base</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/htpasswd.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htpasswd.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htpasswd.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htpasswd.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">Cette traduction peut être périmée. Vérifiez la version
                  anglaise pour les changements récents.</div>
      
          <p><code>htpasswd</code> permet de créer et de maintenir les
          fichiers textes où sont stockés les noms d'utilisateurs et mots de
          passe pour l'authentification de base des utilisateurs HTTP. Si
          <code>htpasswd</code> rencontre un problème d'accès à un fichier,
          que ce soit pour écrire dans le fichier de sortie, ou pour lire le
          fichier d'entrée dans le but de le mettre à jour, il renvoie un code
          d'erreur et n'effectue aucune modification.</p>
      
          <p>Il est possible de limiter l'accès aux ressources du serveur HTTP
          Apache aux seuls utilisateurs présents dans les fichiers créés par
          <code>htpasswd</code>. Ce programme ne sait gérer les noms
          d'utilisateurs et mots de passe que s'ils sont stockés dans des
          fichiers textes. Il peut cependant chiffrer et afficher les mots de
          passe à des fins d'utilisation dans d'autres types de bases de
          données. Pour utiliser une base de données DBM, voir le programme
          <code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code> ou <code class="program"><a href="../programs/htdbm.html">htdbm</a></code>.</p>
      
          <p><code>htpasswd</code> chiffre les mots de passe en utilisant soit
          bcrypt,
          une version de MD5 modifiée pour Apache, soit SHA1, soit la routine
          <code>crypt()</code> du système. Les fichiers gérés par
          <code>htpasswd</code> peuvent contenir deux types de mots de passe ;
          certaines entrées peuvent contenir des mots de passe chiffrés en
          MD5 ou bcrypt, alors que d'autres entrées du même fichier contiendront des
          mots de passe chiffrés avec <code>crypt()</code>.</p>
      
          <p>Cette page de manuel ne décrit que les arguments de la ligne de
          commande. Pour plus de détails à propos des directives nécessaires à
          la configuration de l'authentification des utilisateurs dans
          <code class="program"><a href="../programs/httpd.html">httpd</a></code>, voir le manuel Apache qui est fourni avec
          la distribution ou peut être consulté à <a href="http://httpd.apache.org">http://httpd.apache.org/</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Syntaxe</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exit">Valeur renvoyée</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Exemples</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#security">Considérations à propos de sécurité</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#restrictions">Restrictions</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="../programs/htdbm.html">htdbm</a></code></li><li>Les scripts fournis avec la distibution d'Apache et situés dans
      support/SHA1.</li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Syntaxe</a></h2>
          <p><code><strong>htpasswd</strong>
          [ -<strong>c</strong> ]
          [ -<strong>i</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>D</strong> ]
          [ -<strong>v</strong> ]  <var>fichier-mots-de-passe</var> <var>nom-utilisateur</var></code></p>
      
          <p><code><strong>htpasswd</strong> -<strong>b</strong>
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ]
          [ -<strong>D</strong> ]
          [ -<strong>v</strong> ]  <var>fichier-mots-de-passe</var> <var>nom-utilisateur</var>
          <var>mot-de-passe</var></code></p>
      
          <p><code><strong>htpasswd</strong> -<strong>n</strong>
          [ -<strong>i</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ] <var>nom-utilisateur</var></code></p>
      
          <p><code><strong>htpasswd</strong> -<strong>nb</strong>
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>cost</var> ] <var>nom-utilisateur</var>
          <var>mot-de-passe</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code>-b</code></dt>
          <dd>Utilise le mode batch ; c'est à dire, extrait le mot de passe de
          la ligne de commande au lieu de le demander à l'opérateur. Cette
          option doit être utilisée avec la plus grande prudence, car
          <strong>le mot de passe est visible en clair</strong> dans la ligne
          de commande. Pour utiliser un script, voir l'option
          <code>-i</code>.
          Disponible à partir de la version 2.4.4 du serveur HTTP Apache.</dd>
      
          <dt><code>-i</code></dt>
          <dd>Lit le mot de passe depuis stdin sans vérification (à utiliser
          dans les scripts).</dd>
      
          <dt><code>-c</code></dt>
          <dd>Crée le <var>fichier-mots-de-passe</var>. Si
          <var>fichier-mots-de-passe</var> existe déjà, il est réécrit et
          tronqué. Cette option ne peut pas être combinée avec l'option
          <code>-n</code>.</dd>
      
          <dt><code>-n</code></dt>
          <dd>Affiche le résultat du traitement sur la sortie standard au lieu
          de mettre à jour le fichier. Ceci peut s'avérer utile pour générer
          des enregistrements de mots de passe qu'Apache pourra utiliser à des
          fins d'inclusion dans des fichiers de données au format autre que
          texte. Cette option modifie la syntaxe de la ligne de commande, car
          l'argument <var>fichier-mots-de-passe</var> (en général le premier)
          est omis. Elle ne peut pas être combinée avec l'option
          <code>-c</code> option.</dd>
      
          <dt><code>-m</code></dt>
          <dd>Utilise le chiffrement MD5 pour les mots de passe. C'est le
          comportement par défaut (depuis la version 2.2.18).</dd>
      
          <dt><code>-B</code></dt>
          <dd>Utilise bcrypt pour chiffrer les mots de passe. c'est un
          algorythme de chiffrement actuellement considéré comme sûr.</dd>
      
          <dt><code>-C</code></dt>
          <dd>Ce drapeau n'est autorisé qu'en conjonction avec le drapeau
          <code>-B</code> (chiffrement bcrypt). Il permet de définir la durée
          de traitement pour l'algorytme bcrypt (plus elle est longue,
          meilleure sera la sécurité, mais inférieure la rapidité). La valeur
          par défaut est 5 et les valeurs autorisées vont de 4 à 31.</dd>
      
      
          <dt><code>-d</code></dt>
          <dd>Utilise le chiffrement <code>crypt()</code> pour les mots de
          passe. Cette option n'est pas supportée par le
          serveur <code class="program"><a href="../programs/httpd.html">httpd</a></code> sous Windows ou Netware. Cet
          algorithme limite la longueur des mots de passe à 8 caractères ; il
          est considéré comme <strong>non sur</strong> du point de vue des
          standards actuels. C'était l'algorithme par défaut jusqu'à la
          version 2.2.17.</dd>
      
          <dt><code>-s</code></dt>
          <dd>Utilise le chiffrement SHA pour les mots de passe. Facilite la
          migration vers/depuis les serveurs Netscape qui utilisent le format
          LDAP Directory Interchange (ldif). Cet algorithme
          est considéré comme <strong>non sur</strong> du point de vue des
          standards actuels.</dd>
      
          <dt><code>-p</code></dt>
          <dd>Enregistre les mots de passe en clair. Bien que
          <code>htpasswd</code> supporte la création des mots de passe en
          clair sur toutes les plates-formes, le démon
          <code class="program"><a href="../programs/httpd.html">httpd</a></code> n'accepte les mots de passe en clair que
          sous Windows et Netware.</dd>
      
          <dt><code>-D</code></dt>
          <dd>Supprime un utilisateur, sous réserve qu'il existe dans le
          fichier spécifié par htpasswd.</dd>
      
          <dt><code>-v</code></dt>
          <dd>Vérifie si le mot de passe fourni correspond au mot de passe de
          l'utilisateur enregistré dans le fichier de mots de passe spécifié.
          Disponible à partir de la version 2.4.5 du serveur HTTP Apache.</dd>
      
          <dt><code><var>fichier-mots-de-passe</var></code></dt>
          <dd>Le nom du fichier contenant les noms d'utilisateurs et mots de
          passe. Avec l'option <code>-c</code>, le fichier est créé s'il
          n'existe pas, ou réécrit et tronqué s'il existe déjà.</dd>
      
          <dt><code><var>nom-utilisateur</var></code></dt>
          <dd>Le nom d'utilisateur à créer ou mettre à jour dans le
          <var>fichier-mots-de-passe</var>. Si <var>nom-utilisateur</var>
          n'existe pas, une nouvelle entrée est ajoutée. Dans le cas
          contraire, le mot de passe est modifié.</dd>
      
          <dt><code><var>mot-de-passe</var></code></dt>
          <dd>Le mot de passe en clair et destiné à être chiffré puis stocké
          dans le fichier. Cet argument ne s'utilise qu'avec l'option
          <code>-b</code>.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exit" id="exit">Valeur renvoyée</a></h2>
          <p><code>htpasswd</code> renvoie 0 ("true") si le nom d'utilisateur
          et le mot de passe ont été enregistrés ou mis à jour avec succès
          dans le <var>fichier-mots-de-passe</var>. <code>htpasswd</code>
          renvoie <code>1</code> s'il a rencontré un problème d'accès aux
          fichiers, <code>2</code> si la ligne de commande comportait une
          erreur de syntaxe, <code>3</code> si le mot de passe entré
          interactivement ne correspondait pas au nom d'utilisateur,
          <code>4</code> si l'opération a été interrompue, <code>5</code> si
          une valeur était trop longue (nom-utilisateur, nom-fichier,
          mot-de-passe, ou l'enregistrement résultant), <code>6</code> si le
          nom d'utilisateur contenait des caractères illégaux (voir la section
          <a href="#restrictions">Restrictions</a>), et <code>7</code> si le
          fichier spécifié n'était pas un fichier de mots de passe
          valide.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Exemples</a></h2>
          <div class="example"><p><code>
            htpasswd /usr/local/etc/apache/.utilisateurs-htpasswd jsmith
          </code></p></div>
      
          <p>Ajoute ou modifie le mot de passe de l'utilisateur
          <code>jsmith</code>. Le mot de passe est demandé à l'opérateur. Le
          mot de passe sera chiffré en utilisant l'algorithme MD5
          modifié pour Apache. Si le fichier spécifié
          n'existe pas, <code>htpasswd</code> renverra un code d'erreur.</p>
      
          <div class="example"><p><code>
            htpasswd -c /home/doe/public_html/.htpasswd jane
          </code></p></div>
      
          <p>Crée un nouveau fichier de mots de passe et y enregistre une
          entrée pour l'utilisateur <code>jane</code>. Le mot de passe est
          demandé à l'opérateur. Si le fichier existe et ne peut être ni lu ni
          écrit, il n'est pas modifié et <code>htpasswd</code> affichera un
          message et renverra un code d'erreur.</p>
      
          <div class="example"><p><code>
            htpasswd -db /usr/web/.htpasswd-tous jones Pwd4Steve
          </code></p></div>
      
          <p>Chiffre le mot de passe spécifié dans la ligne de commande
          (<code>Pwd4Steve</code>) en utilisant l'algorithme
          <code>crypt()</code>, et le stocke dans le fichier spécifié.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">Considérations à propos de sécurité</a></h2>
          <p>Les fichiers de mots de passe Web comme ceux que gère
          <code>htpasswd</code> ne doivent <em>pas</em> être situés dans
          l'espace d'URI du serveur Web -- en d'autres termes, il ne doit pas
          être possible d'y accéder à partir d'un navigateur.</p>
      
          <p>En tant qu'exécutable setuid, ce programme n'est pas sûr, et il
          ne faut par conséquent <em>pas</em> lui attribuer de permissions
          setuid.</p>
      
          <p>L'utilisation de l'option <code>-b</code> est déconseillée, car
          avec elle, les mots de passe apparaissent en clair dans la ligne de
          commande.</p>
      
          <p>Notez qu'avec l'algorithme <code>crypt()</code>, seuls les huit
          premiers caractères du mot de passe spécifié sont pris en compte. Si
          le mot de passe spécifié est plus long, les caractères
          supplémentaires sont ignorés.</p>
      
          <p>Le format de chiffrement SHA n'utilise pas d'amorçage aléatoire
          (salting) : à un mot de passe donné correspond une seule
          représentation chiffrée. Les formats <code>crypt()</code> et MD5
          permutent la représentation en la préfixant par une chaîne d'amorce
          aléatoire, afin de rendre les attaques de mots de passe à base de
          dictionnaires plus difficiles.</p>
      
          <p>Les algorithmes de chiffrement SHA et <code>crypt()</code> 
          sont considérés comme <strong>non surs</strong> du point de vue des
          standards actuels.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="restrictions" id="restrictions">Restrictions</a></h2>
          <p>Sur les plates-formes Windows, la taille des mots de passe
          chiffrés avec <code>htpasswd</code> est limitée à <code>255</code>
          caractères. Les mots de passe dont la taille est supérieure seront
          tronqués.</p>
      
          <p>L'algorithme MD5 utilisé par <code>htpasswd</code> est spécifique
          à Apache ; les mots de passe chiffrés en utilisant cet algorithme
          seront inutilisables sur d'autres serveurs Web.</p>
      
          <p>La taille des noms d'utilisateurs est limitée à <code>255</code>
          octets et ceux-ci ne doivent pas contenir de caractère
          <code>:</code>.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/htpasswd.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htpasswd.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htpasswd.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htpasswd.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htpasswd.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/index.html.es�����������������������������������������������������0000644�0000000�0000050�00000016064�13412755316�017714� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>El Servidor Apache y Programas de Soporte - Servidor HTTP Apache Versión 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="../">Versión 2.4</a></div><div id="page-content"><div id="preamble"><h1>El Servidor Apache y Programas de Soporte</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="../en/programs/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/programs/" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/programs/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/programs/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
          <p>Esta página contiene toda la documentación sobre los programas
          ejecutables incluidos en el servidor Apache.</p>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="index" id="index">Índice</a></h2>
      
          <dl>
            <dt><code class="program"><a href="../programs/httpd.html">httpd</a></code></dt>
      
            <dd>Servidor Apache del Protocolo de Transmisión de
            Hipertexto (HTTP)</dd>
      
            <dt><code class="program"><a href="../programs/apachectl.html">apachectl</a></code></dt>
      
            <dd>Interfaz de control del servidor HTTP Apache </dd>
      
            <dt><code class="program"><a href="../programs/ab.html">ab</a></code></dt>
      
            <dd>Herramienta de benchmarking del Servidor HTTP Apache</dd>
      
            <dt><code class="program"><a href="../programs/apxs.html">apxs</a></code></dt>
      
            <dd>Herramienta de Extensión de Apache</dd>
      
            <dt><code class="program"><a href="../programs/configure.html">configure</a></code></dt>
      
            <dd>Configuración de la estructura de directorios de Apache</dd>
      
            <dt><code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code></dt>
      
            <dd>Crea y actualiza los archivos de autentificación de usuarios
            en formato DBM para autentificación básica</dd>
      
            <dt><code class="program"><a href="../programs/fcgistarter.html">fcgistarter</a></code></dt>
      
            <dd>Ejecuta un programa FastCGI.</dd>
      
            <dt><code class="program"><a href="../programs/htcacheclean.html">htcacheclean</a></code></dt>
      
            <dd>Vacía la caché del disco.</dd>
      
            <dt><code class="program"><a href="../programs/htdigest.html">htdigest</a></code></dt>
      
            <dd>Crea y actualiza los ficheros de autentificación de usuarios
            para autentificación tipo digest</dd>
      
            <dt><code class="program"><a href="../programs/htdbm.html">htdbm</a></code></dt>
      
            <dd>Manipula la base de datos DBM de contraseñas.</dd>
      
            <dt><code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code></dt>
      
            <dd>Crea y actualiza los ficheros de autentificación de usuarios
            para autentificación tipo básica</dd>
      
            <dt><code class="program"><a href="../programs/httxt2dbm.html">httxt2dbm</a></code></dt>
      
            <dd>Crea ficheros dbm para que se usen con RewriteMap</dd>
      
            <dt><code class="program"><a href="../programs/logresolve.html">logresolve</a></code></dt>
      
            <dd>Resuelve los nombres de host para direcciones IP que están
            en los ficheros log de Apache</dd>
      
            <dt><code class="program"><a href="../programs/log_server_status.html">log_server_status</a></code></dt>
      
            <dd>Logea de forma periódica el estado del servidor.</dd>
      
            <dt><code class="program"><a href="../programs/rotatelogs.html">rotatelogs</a></code></dt>
      
            <dd>Renueva los logs de Apache sin tener que parar el servidor</dd>
      
            <dt><code class="program"><a href="../programs/split-logfile.html">split-logfile</a></code></dt>
      
            <dd>Divide un archivo de registro multi-host virtual en 
            	archivos de registro por host</dd>
      
            <dt><code class="program"><a href="../programs/suexec.html">suexec</a></code></dt>
      
            <dd>Programa para cambiar la identidad de
            	 usuario con la que se ejecuta un CGI</dd>
        </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="../en/programs/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/programs/" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/programs/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/programs/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/ab.html.tr.utf8���������������������������������������������������0000644�0000000�0000050�00000050725�13447004010�020056� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>ab - Apache HTTP sunucusu başarım ölçme aracı - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>ab - Apache HTTP sunucusu başarım ölçme aracı</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/ab.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/ab.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/ab.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/ab.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code><strong>ab</strong></code> Apache Hiper Metin Aktarım Protokolü
            (HTTP) sunucunuzun başarımını ölçmek amacıyla kullanabileceğiniz bir
            kıyaslama aracıdır. Mevcut Apache kurulumunuzun görevini nasıl yerine
            getirdiği hakkında bir izlenim edinmeniz için tasarlanmıştır.
            Özellikle, Apache kurulumunuzun saniyede kaç isteği sunma yeteneğinde
            olduğunu gösterir.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Kullanım</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#output">Çıktı</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#bugs">Börtü böcek</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Kullanım</a></h2>
          <p><code><strong>ab</strong>
          [ -<strong>A</strong> <var>yetkili-kullanıcı:parola</var> ]
          [ -<strong>b</strong> <var>tampon-boyu</var> ]
          [ -<strong>B</strong> <var>yerel-adres</var> ]
          [ -<strong>c</strong> <var>bağlantı-sayısı</var> ]
          [ -<strong>C</strong> <var>çerez-ismi=değer</var> ]
          [ -<strong>d</strong> ]
          [ -<strong>e</strong> <var>csv-dosyası</var> ]
          [ -<strong>E</strong> <var>istemci-sertifikası-dosyası</var> ]
          [ -<strong>f</strong> <var>protokol</var> ]
          [ -<strong>g</strong> <var>gnuplot-dosyası</var> ]
          [ -<strong>h</strong> ]
          [ -<strong>H</strong> <var>özel-başlık</var> ]
          [ -<strong>i</strong> ]
          [ -<strong>k</strong> ]
          [ -<strong>l</strong> ]
          [ -<strong>m</strong> <var>HTTP-yöntemi</var> ]
          [ -<strong>n</strong> <var>istek-sayısı</var> ]
          [ -<strong>p</strong> <var>POST-dosyası</var> ]
          [ -<strong>P</strong> <var>vekil-yetkilisi:parola</var> ]
          [ -<strong>q</strong> ]
          [ -<strong>r</strong> ]
          [ -<strong>s</strong> <var>zamanasimi</var> ]
          [ -<strong>S</strong> ]
          [ -<strong>t</strong> <var>saniye</var> ]
          [ -<strong>T</strong> <var>içerik-türü</var> ]
          [ -<strong>u</strong> <var>PUT-dosyası</var> ]
          [ -<strong>v</strong> <var>ayrıntı-düzeyi</var>]
          [ -<strong>V</strong> ]
          [ -<strong>w</strong> ]
          [ -<strong>x</strong> <var>&lt;table&gt;-öznitelikleri</var> ]
          [ -<strong>X</strong> <var>vekil</var>[:<var>port</var>] ]
          [ -<strong>y</strong> <var>&lt;tr&gt;-öznitelikleri</var> ]
          [ -<strong>z</strong> <var>&lt;td&gt;-öznitelikleri</var> ]
          [ -<strong>Z</strong> <var>şifre-kümesi</var> ]
          [http[s]://]<var>konakadı</var>[:<var>port</var>]/<var>dizin</var>
          </code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
          <dl>
          <dt><code><strong>-A</strong>
            <var>yetkili-kullanıcı</var>:<var>parola</var></code></dt>
          <dd>Sunucuya TEMEL Kimlik Doğrulamada kullanılmak üzere kanıt sağlar.
            Kullanıcı adı ile parola arasına sadece <code>:</code> konur ve
            sunucunun buna ihtiyacı olup olmadığına bakılmaksızın (yani, bir "401
            kimlik doğrulaması gerekli" yanıtı beklenmeden) bağlantı üzerinden
            base64 kodlu olarak sunucuya gönderilir.</dd>
      
          <dt><code><strong>-b</strong> <var>tampon-boyu</var></code></dt>
          <dd>TCP gönderme/alma tamponlarının bayt cinsinden uzunluğu.</dd>
      
          <dt><code><strong>-B</strong> <var>yerel-adres</var></code></dt>
          <dd>Uzak bağlantılar yaparken dinlenecek adres.</dd>
      
          <dt><code><strong>-c</strong> <var>bağlantı-sayısı</var></code></dt>
          <dd>Aynı anda işleme sokulacak bağlantı sayısı. Aynı anda bir bağlantı
            öntanımlı değerdir.</dd>
      
          <dt><code><strong>-C</strong>
            <var>çerez-ismi</var>=<var>değer</var></code></dt>
          <dd>İsteğe bir <code>Cookie:</code> satırı ekler. Argüman olarak
            genellikle bir <code><var>isim=değer</var></code> çifti kullanılır. Bu
            çiftler birden fazla olabilir.</dd>
      
          <dt><code><strong>-d</strong></code></dt>
          <dd>"percentage served within XX [ms] table" iletisi gösterilmez. (Geriye
            uyumluluk için vardır).</dd>
      
          <dt><code><strong>-e</strong> <var>csv-dosyası</var></code></dt>
          <dd>Sunulan isteğin birim zamanda (milisaniye) ne kadarının (yüzde
            cinsinden) sunulduğunu gösteren virgül ayraçlı değerler (CSV) dosyası.
            Sonuçlar 'bobin haline' getirilmiş olduğundan doğal olarak 'gnuplot'
            dosyasından daha yararlıdır.</dd>
      
          <dt><code>-E <var>istemci-sertifikası-dosyası</var></code></dt>
          <dd>Bir SSL sitesine bağlanırken, sunucu ile kimlik doğrulaması için
            PEM biçeminde sağlanan sertifika kullanılır. Dosyanın sırayla istemci 
            sertifikasını, ara sertifikaları ve özel anahtarı içermesi beklenir. 
            2.4.36 ve sonrasında kullanılabilir.</dd>
      
          <dt><code><strong>-f</strong> <var>protokol</var></code></dt>
          <dd>SSL/TLS protokolü belirtilir (SSL2, SSL3, TLS1, TLS1.1, TLS1.2 veya
            ALL). TLS1.1 ve TLS1.2 desteği 2.4.4 ve sonraki sürümler
            içindir.</dd>
      
          <dt><code><strong>-g</strong> <var>gnuplot-dosyası</var></code></dt>
          <dd>Ölçülen değerler bir 'gnuplot' veya TSV (sekme ayraçlı değerler)
            dosyasına yazılır. Bu dosya, Gnuplot, IDL, Mathematica, Igor hatta
            Excel tarafından veri dosyası olarak kabul edilir. Veri sütunlarının
            başlıkları dosyanın ilk satırında bulunur. </dd>
      
          <dt><code><strong>-h</strong></code></dt>
          <dd>Kullanım bilgisi gösterir.</dd>
      
          <dt><code><strong>-H</strong> <var>özel-başlık</var></code></dt>
          <dd>İsteğe fazladan başlık ekler. <var>özel-başlık</var>, aralarında iki
            nokta imi bulunan bir isim-değer çifti olarak belirtilir. Örnek:
            <code>"Accept-Encoding: zip/zop;8bit"</code></dd>
      
          <dt><code><strong>-i</strong></code></dt>
          <dd><code>GET</code> istekleri yerine <code>HEAD</code> istekleri
            yapılır.</dd>
      
          <dt><code><strong>-k</strong></code></dt>
          <dd>HTTP KeepAlive (kalıcı bağlantı) özelliğini etkinleştirir, yani tek
            bir oturum içinde çok sayıda isteğe hizmet sunulabilir. Özellik
            öntanımlı olarak kapalıdır.</dd>
      
          <dt><code><strong>-l</strong></code></dt>
          <dd>Yanıtarın uzunluğu sabit değilse hataları raporlamaz. Özdevinimli
            sayfalarda kullanışlı olabilir. 2.4.7 ve sonraki sürümler
            içindir.</dd>
      
          <dt><code><strong>-m</strong> <var>HTTP-yöntemi</var></code></dt>
          <dd>İstekler için özel HTTP yöntemi, belirtilir.
          2.4.10 ve sonraki sürümler içindir.</dd>
      
          <dt><code><strong>-n</strong> <var>istek-sayısı</var></code></dt>
          <dd>Kıyaslama oturumu sırasında sunucuya uygulanacak istek sayısı.
            Öntanımlı olarak hiçbir başarım ölçütü sağlamayan tek bir istek
            yapılır.</dd>
      
          <dt><code><strong>-p</strong> <var>POST-dosyası</var></code></dt>
          <dd>POST isteği ile ilgili verileri içeren dosya. Ayrıca
            <code><strong>-T</strong></code> seçeneğini de belirtmeyi
            unutmayın..</dd>
      
          <dt><code><strong>-P</strong>
            <var>vekil-yetkilisi</var>:<var>parola</var></code></dt>
          <dd>Vekil sunucuya TEMEL Kimlik Doğrulamasında kullanılacak kanıtları
            sağlar. Kullanıcı adı ile parola arasına sadece <code>:</code> konur ve
            vekilin buna ihtiyacı olup olmadığına bakılmaksızın (yani, bir "407
            vekilde kimlik doğrulaması gerekiyor" yanıtı beklenmeden) bağlantı
            üzerinden base64 kodlu olarak sunucuya gönderilir.</dd>
      
          <dt><code><strong>-q</strong></code></dt>
          <dd>İstek sayısı 150'den fazla olduğunda,
            <code><strong>ab</strong></code> her 100 veya %10 istekte bir, standart
            hataya bir işlenen istek sayacı çıktılar.
            <code><strong>-q</strong></code> seçeneği bu çıktının üretilmemesini
            saÄŸlar.</dd>
      
          <dt><code><strong>-r</strong></code></dt>
          <dd>Soket hata alsa bile program çıkmaz.</dd>
      
          <dt><code><strong>-s</strong> <var>zamanasimi</var></code></dt>
          <dd>Soket zaman aşımına uğramadan önce beklenecek azami saniye sayısı.
            30 saniye öntanımlı süredir.
            2.4.4 ve sonraki sürümler içindir.</dd>
      
          <dt><code><strong>-S</strong></code></dt>
          <dd>Ortalama ve ortanca değerler arasında bir veya iki standart sapmadan
            fazlası varsa ne ortalama değer ne standart sapma değeri ne de
            uyarı/hata iletileri gösterilir. Öntanımlı olarak,
            asgari/ortalama/azami değerler gösterilir. (Geriye uyumluluk).</dd>
      
          <dt><code><strong>-t</strong> <var>saniye</var></code></dt>
          <dd>Ölçümleme işleminin ne kadar süreyle uygulanacağı belirtilir. Dahili
            olarak <code><strong>-n 50000</strong></code> seçeneği uygulanır. Bunu
            belli bir süreye göre kıyaslama yapmak amacıyla kullanabilirsiniz.
            Öntanımlı olarak bir süre kısıtlaması yoktur.</dd>
      
          <dt><code><strong>-T</strong> <var>içerik-türü</var></code></dt>
          <dd>POST/PUT verisi için kullanılacak içerik türü belirtilir. Örnek:
            <code>application/x-www-form-urlencoded</code>.
            Öntanımlı değer: <code>text/plain</code>.</dd>
      
          <dt><code><strong>-v</strong> <var>ayrıntı-düzeyi</var></code></dt>
          <dd>Çıktının ayrıntı düzeyi belirtilir.  <code>4</code> ve üstü ile
            başlıklar hakkında bilgi, <code>3</code> ve üstü ile yanıt kodları
            (404, 200, vb.), <code>2</code> ve üstü ile ise uyarı ve bilgi
            iletileri gösterilir.</dd>
      
          <dt><code>-u <var>PUT-dosyası</var></code></dt>
          <dd>PUT verisini içeren dosya.  Ayrıca, <code>-T</code> seçeneğini
            belirtmeyi de unutmayın.</dd>
      
          <dt><code><strong>-V</strong></code></dt>
          <dd>Sürüm bilgilerini gösterir ve çıkar.</dd>
      
          <dt><code><strong>-w</strong></code></dt>
          <dd>Sonuçları HTML tabloları olarak basar. Öntanımlı tablo, beyaz
            artalanlı ve iki sütunludur.</dd>
      
          <dt><code><strong>-x</strong>
            <var>&lt;table&gt;-öznitelikleri</var></code></dt>
          <dd><code>&lt;table&gt;</code> etiketinde kullanılacak öznitelikler
            belirtilir. Belirtilen öznitelikler etiket içine <code>&lt;table
            <var>buraya</var> &gt;</code> biçeminde yerleştirilir.</dd>
      
          <dt><code><strong>-X</strong>
            <var>vekil</var>[:<var>port</var>]</code></dt>
          <dd>İstekler için bir vekil sunucu kullanılır.</dd>
      
          <dt><code><strong>-y</strong>
            <var>&lt;tr&gt;-öznitelikleri</var></code></dt>
          <dd><code>&lt;tr&gt;</code> etiketinde kullanılacak öznitelikler
            belirtilir.</dd>
      
          <dt><code><strong>-z</strong>
            <var>&lt;td&gt;-öznitelikleri</var></code></dt>
          <dd><code>&lt;td&gt;</code> etiketinde kullanılacak öznitelikler
            belirtilir.</dd>
      
          <dt><code>-Z <var>şifre-kümesi</var></code></dt>
          <dd>SSL/TLS şifre kümesi belirtilir
            (<code><strong>openssl</strong></code>(1) şifrelerine bakınız).</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="output" id="output">Çıktı</a></h2>
          <p>Aşağıda <code><strong>ab</strong></code> tarafından döndürülen değerler
            açıklanmıştır:</p>
      
          <dl>
              <dt>Server Software</dt>
              <dd>İlk başarılı yanıtın, varsa, <var>server</var> HTTP başlığında
                döndürülen değer. Bu başlıktaki başlangıçtan 32 ondalık değerli
                karaktere (genellikle boşluk veya CR/LF karakteri) kadar tüm
                karakterleri içerir.</dd>
      
              <dt>Server Hostname</dt>
              <dd>Komut satırında belirtilen DNS veya IP adresi.</dd>
      
              <dt>Server Port</dt>
              <dd><code><strong>ab</strong></code>'nin bağlandığı port. Komut
                satırında port belirtilmemişse, öntanımlı olarak http için 80, https
                için 443'tür.</dd>
      
              <dt>SSL/TLS Protocol</dt>
              <dd>İstemci le sunucu arasında uzlaşılmış protokol değerleri. Bu sadece
                SSL kullanılıyorsa çıktılanır.</dd>
      
              <dt>Document Path</dt>
              <dd>Komut satırı dizgesinden çözümlenen isteğin URI'si.</dd>
      
              <dt>Document Length</dt>
              <dd>Başarıyla döndürülen ilk belgenin bayt cinsinden uzunluğu. Eğer
                belge uzunluğu sınama sırasında değişirse yanıt bir hata
                içerecektir.</dd>
      
              <dt>Concurrency Level</dt>
              <dd>Sınama sırasında kullanılan eşzamanlı istemcilerin sayısı.</dd>
      
              <dt>Time taken for tests</dt>
              <dd>İlk soket bağlantısının alındığı andan son yanıtın alındığı ana
                kadar geçen süre.</dd>
      
              <dt>Complete requests</dt>
              <dd>Alınan başarılı yanıtların sayısı.</dd>
      
              <dt>Failed requests</dt>
              <dd>Başarısızlık olarak addedilen isteklerin sayısı. Sayı sıfırdan
                büyükse, diğer satırda,  bağlanma, okuma, yanlış içerik uzunluğu,
                istisnalar gibi sebeplerle başarısız olmuş istekler gösterilir.</dd>
      
              <dt>Write errors</dt>
              <dd>Başarısız yazma hatalarının (kırık boru) sayısı.</dd>
      
              <dt>Non-2xx responses</dt>
              <dd>200 serisi yanıt kodları ile açıklanamayan yanıtların sayısı. Tüm
                yanıtlar 200 olursa bu alan çıktılanmaz.</dd>
      
              <dt>Keep-Alive requests</dt>
              <dd>Keep-Alive isteklerinde sonuçlanan bağlantı sayısı.</dd>
      
              <dt>Total body sent</dt>
              <dd>Sınamanın parçası olarak veri gönderimi yapılandırılmışsa, bu
                sınama sırasında gönderilen toplam bayt sayısıdır. Sınama sırasında
                gövde gönderilmiyorsa bu alan çıktılanmaz.</dd>
      
              <dt>Total transferred</dt>
              <dd>Sunucudan alınan toplam bayt sayısı. Bu sayı aslında hattan
                gönderilen bayt sayısıdır.</dd>
      
              <dt>HTML transferred</dt>
              <dd>Sunucudan alınan belge baytlarının sayısı. Bu sayı HTTP
                başlıklarının bayt sayısını içermez.</dd>
      
              <dt>Requests per second</dt>
              <dd>Saniyedeki istek sayısı. İstek sayısının toplam süreye
                oranıdır.</dd>
      
              <dt>Time per request</dt>
              <dd>İstek başına harcanan süre. İlk değer <code>eşzamanlılık * süre *
                1000 / biten</code> formülüyle hesaplanırken ikincisi için
                <code>süre * 1000 / biten</code> formülü kullanılır.</dd>
      
              <dt>Transfer rate</dt>
              <dd><code>okunantoplam / 1024 / süre</code> formülüyle hesaplanan
                aktarım hızı.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="bugs" id="bugs">Börtü böcek</a></h2>
          <p>Duruk bildirimli sabit uzunlukta çeşitli tamponlar vardır.
            Sunucudan gelen yanıt başlıkları ve diğer harici girdiler, komut satırı
            argümanları ile birlikte basitçe çözümlenir, bu size can sıkıcı
            gelebilir.</p>
      
          <p>HTTP/1.x protokolünü tamamen gerçeklemez; sadece yanıtların 'belli
            başlı' bazı biçimlerini kabul eder. Aksi takdirde,
            <code><strong>strstr</strong></code>(3) işlevinin yoğun kullanımı
            nedeniyle sunucu yerine <code><strong>ab</strong></code>'nin başarımını
            ölçerdiniz.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/ab.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/ab.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/ab.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/ab.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/ab.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������httpd-2.4.41/docs/manual/programs/suexec.html.tr.utf8�����������������������������������������������0000644�0000000�0000050�00000015724�13447004010�020770� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>suexec - harici programları çalıştırmadan önce kullanıcıyı değiştirir - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>suexec - harici programları çalıştırmadan önce kullanıcıyı değiştirir</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/suexec.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/suexec.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/suexec.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/suexec.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code><strong>suexec</strong></code>, CGI programlarını çalıştırmadan
          önce Apache HTTP Sunucusu tarafından kullanıcı değiştirmek için kullanılır.
          Bunu yapabilmek için sunucunun <code>root</code> tarafından çalıştırılmış
          olması gerekir. HTTP artalan süreci normalde <code>root</code> aidiyetinde
          çalışmadığından <code><strong>suexec</strong></code>'in çalıştırılabilir
          dosyasının sahibi <code>root</code> olmalı, setuid biti etkin
          (<code>u+s</code>) olmalı ve dosyaya <code>root</code> dışında hiç kimse
          yazamamalıdır.</p>
      
          <p><code><strong>suexec</strong></code> güvenlik modeli ve kavramlar
          hakkında bilgi edinmek için suexec belgesine (<a href="../suexec.html">http://httpd.apache.org/docs/2.4/suexec.html</a>) bakınız.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Kullanım</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Kullanım</a></h2>
          <p><code><strong>suexec</strong> -<strong>V</strong></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
        <dl>
          <dt><code><strong>-V</strong></code></dt>
          <dd><code>root</code> iseniz, bu seçenek
            <code><strong>suexec</strong></code>
          derleme seçeneklerini gösterir. Güvenlik sebebiyle tüm yapılandırma
          seçenekleri sadece derleme sırasında değiştirilebilir.</dd>
        </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/suexec.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/suexec.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/suexec.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/suexec.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/suexec.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������httpd-2.4.41/docs/manual/programs/rotatelogs.html���������������������������������������������������0000644�0000000�0000050�00000000617�13362070302�020344� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: rotatelogs.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: rotatelogs.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: rotatelogs.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: rotatelogs.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �����������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/logresolve.html.en������������������������������������������������0000644�0000000�0000050�00000015520�13412755316�020755� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>logresolve - Resolve IP-addresses to hostnames in Apache
         log files - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>logresolve - Resolve IP-addresses to hostnames in Apache
         log files</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/logresolve.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/logresolve.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/logresolve.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/logresolve.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
           <p><code>logresolve</code> is a post-processing program to
           resolve IP-addresses in Apache's access logfiles.  To minimize
           impact on your nameserver, logresolve has its very own internal
           hash-table cache.  This means that each IP number will only be
           looked up the first time it is found in the log file.</p>
      
           <p>Takes an Apache log file on standard input.  The IP addresses
           must be the first thing on each line and must be separated from
           the remainder of the line by a space.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
      
           <p><code><strong>logresolve</strong> [ -<strong>s</strong>
           <var>filename</var> ] [ -<strong>c</strong> ] &lt;
           <var>access_log</var> &gt; <var>access_log.new</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
      
      <dl>
      
      <dt><code>-s <var>filename</var></code></dt>
      
      <dd>Specifies a filename to record statistics.</dd>
      
      <dt><code>-c</code></dt>
      
      <dd>This causes <code>logresolve</code> to apply some DNS checks:
      after finding the hostname from the IP address, it looks up the IP
      addresses for the hostname and checks that one of these matches the
      original address.</dd>
      
      </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/logresolve.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/logresolve.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/logresolve.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/logresolve.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/logresolve.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/other.html.en�����������������������������������������������������0000644�0000000�0000050�00000012275�13412755316�017721� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Other Programs - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>Other Programs</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/other.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/other.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/other.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/other.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>This page used to contain documentation for programs which now
          have their own docs pages. Please update any links.</p>
      
          <p><code class="program"><a href="../programs/log_server_status.html">log_server_status</a></code></p>
          <p><code class="program"><a href="../programs/split-logfile.html">split-logfile</a></code></p>
      </div>
      </div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/other.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/other.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/other.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/other.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/other.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/httpd.html��������������������������������������������������������0000644�0000000�0000050�00000000573�13362070302�017305� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: httpd.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: httpd.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: httpd.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: httpd.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/logresolve.html.ko.euc-kr�����������������������������������������0000644�0000000�0000050�00000015336�13412755316�022156� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>logresolve - ¾ÆÆÄÄ¡ ·Î±×ÆÄÀÏÀÇ IP-ÁÖ¼Ò¸¦ È£½ºÆ®¸íÀ¸·Î
        º¯È¯ÇÑ´Ù - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>logresolve - ¾ÆÆÄÄ¡ ·Î±×ÆÄÀÏÀÇ IP-ÁÖ¼Ò¸¦ È£½ºÆ®¸íÀ¸·Î
        º¯È¯ÇÑ´Ù</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/logresolve.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/logresolve.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/logresolve.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/logresolve.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
           <p><code>logresolve</code>´Â ¾ÆÆÄÄ¡ Á¢±Ù·Î±×ÆÄÀÏ¿¡ ÀÖ´Â
           IP-ÁÖ¼Ò¸¦ ã´Â ÈÄó¸® ÇÁ·Î±×·¥ÀÌ´Ù. ³×ÀÓ¼­¹öÀÇ ºÎÇϸ¦
           ÃÖ¼ÒÈ­ÇϱâÀ§ÇØ logresolve´Â ³»ºÎÀûÀ¸·Î ÇØ½¬Å×À̺í ij½¬¸¦
           »ç¿ëÇÑ´Ù. Áï, IP ÁÖ¼Ò°¡ ·Î±×ÆÄÀÏ¿¡ óÀ½ ³ª¿Ã¶§¸¸ ã´Â´Ù.</p>
      
           <p>Ç¥ÁØÀÔ·ÂÀ¸·Î ¾ÆÆÄÄ¡ ·Î±×ÆÄÀÏÀ» Àд´Ù. °¢ ÁÙÀÇ Ã¹¹øÂ°
           Ç׸ñÀÌ IP ÁÖ¼ÒÀ̰í, ³ª¸ÓÁö ºÎºÐ°ú °ø¹éÀ¸·Î ±¸ºÐµÇ¾ß ÇÑ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">°³¿ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">¿É¼Ç</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">°³¿ä</a></h2>
      
           <p><code><strong>logresolve</strong> [ -<strong>s</strong>
           <var>filename</var> ] [ -<strong>c</strong> ] &lt;
           <var>access_log</var> &gt; <var>access_log.new</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">¿É¼Ç</a></h2>
      
      <dl>
      
      <dt><code>-s <var>filename</var></code></dt>
      
      <dd>Åë°è¸¦ ±â·ÏÇÒ ÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù.</dd>
      
      <dt><code>-c</code></dt>
      
      <dd><code>logresolve</code>°¡ ¸î°¡Áö DNS °Ë»ç¸¦ Çϵµ·Ï ÇÑ´Ù:
      IP ÁּҷΠȣ½ºÆ®¸íÀ» ãÀºÈÄ ±× È£½ºÆ®¸íÀ¸·Î ´Ù½Ã IP ÁÖ¼ÒµéÀ»
      ã¾Æ¼­ ±×Áß Çϳª°¡ ¿ø·¡ ÁÖ¼Ò¿Í ÀÏÄ¡ÇÏ´ÂÁö °Ë»çÇÑ´Ù.</dd>
      
      </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/logresolve.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/logresolve.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/logresolve.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/logresolve.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/logresolve.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/apachectl.html.ko.euc-kr������������������������������������������0000644�0000000�0000050�00000023432�13412755316�021715� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>apachectl - ¾ÆÆÄÄ¡ À¥¼­¹ö Á¶Àý ÀÎÅÍÆäÀ̽º - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>apachectl - ¾ÆÆÄÄ¡ À¥¼­¹ö Á¶Àý ÀÎÅÍÆäÀ̽º</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/apachectl.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apachectl.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apachectl.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apachectl.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
           <p><code>apachectl</code>Àº ¾ÆÆÄÄ¡ ÇÏÀÌÆÛÅØ½ºÆ® Àü¼Û
           ÇÁ·ÎÅäÄÝ (HTTP) ¼­¹öÀÇ ¾Õ´ÜÀÌ´Ù. ÀÌ ÇÁ·Î±×·¥Àº °ü¸®ÀÚ°¡
           ¾ÆÆÄÄ¡ <a href="httpd.html">httpd</a> µ¥¸óÀ» Á¶Á¤Çϵµ·Ï
           µ½´Â´Ù.</p>
      
           <p><code>apachectl</code> ½ºÅ©¸³Æ®´Â µÎ°¡Áö ¹æ¹ýÀ¸·Î ½ÇÇàÇÑ´Ù.
           ù¹øÂ° ¹æ¹ýÀº <code>httpd</code>À» ºÎ¸£´Â °£´ÜÇÑ ½ºÅ©¸³Æ®
           ¿ªÇÒÀ» ÇÏ¿©, ÇÊ¿äÇÑ È¯°æº¯¼ö¸¦ ¼³Á¤ÇÏ°í ¹ÞÀº ¸í·ÉÇà ¾Æ±Ô¸ÕÆ®¸¦
           °¡Áö°í <code>httpd</code>¸¦ ½ÇÇàÇÑ´Ù. µÎ¹øÂ° ¹æ¹ýÀº
           <code>apachectl</code>¸¦ SysV init ½ºÅ©¸³Æ®·Î »ç¿ëÇÏ¿©,
           <code>start</code>, <code>restart</code>, <code>stop</code>
           °°Àº ÇÑ´Ü¾î ¾Æ±Ô¸ÕÆ®¸¦ ¹Þ¾Æ¼­ <code>httpd</code>¿¡°Ô
           ÀûÀýÇÑ ½ÅÈ£¸¦ º¸³½´Ù.</p>
      
           <p>¾ÆÆÄÄ¡¸¦ ÀϹÝÀûÀÎ °æ·Î¿¡ ¼³Ä¡ÇÏÁö ¾Ê¾Ò´Ù¸é, ÀûÀýÇÑ
           <code>httpd</code> °æ·Î·Î <code>apachectl</code> ½ºÅ©¸³Æ®¸¦
           ¼öÁ¤ÇØ¾ß ÇÑ´Ù. ¶Ç, <code>httpd</code> ¸í·ÉÇà ¾Æ±Ô¸ÕÆ®¸¦
           Ãß°¡·Î ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù. ÀÚ¼¼ÇÑ ³»¿ëÀº ½ºÅ©¸³Æ®ÀÇ ÁÖ¼®À»
           Âü°íÇ϶ó.</p>
      
           <p><code>apachectl</code> ½ºÅ©¸³Æ®´Â ¼º°ø½Ã Á¾·áÄÚµå 0À»,
           ¿À·ù½Ã &gt;0À» ¹ÝȯÇÑ´Ù. ÀÚ¼¼ÇÑ ³»¿ëÀº ½ºÅ©¸³Æ®ÀÇ ÁÖ¼®À»
           Âü°íÇ϶ó.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">°³¿ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">¿É¼Ç</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="../invoking.html">¾ÆÆÄÄ¡ ½ÃÀÛ</a></li><li><a href="../stopping.html">¾ÆÆÄÄ¡ Áß´Ü</a></li><li><a href="../configuring.html">¼³Á¤ÆÄÀÏ</a></li><li><a href="../platform/">Ç÷¡Æû ¹®¼­</a></li><li><a href="httpd.html">httpd</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">°³¿ä</a></h2>
      
      <p>°£´ÜÇÑ ½ÇÇà ½ºÅ©¸³Æ®·Î µ¿ÀÛÇϸé, <code>apachectl</code>Àº
      <a href="httpd.html">httpd</a> ½ÇÇàÆÄÀÏÀÇ ¸ðµç ¾Æ±Ô¸ÕÆ®¸¦ ¹Þ´Â´Ù.</p>
      
      <p><code><strong>apachectl</strong> [ <var>httpd-argument</var> ]</code></p>
      
      <p>SysV init ¹æ½ÄÀ¸·Î µ¿ÀÛÇϸé, <code>apachectl</code>Àº ¾Æ·¡¼­
      ¼³¸íÇÒ °£´ÜÇÑ ÇÑ´Ü¾î ¸í·É¾î¸¦ ¹Þ´Â´Ù.</p>
      
      <p><code><strong>apachectl</strong> <var>command</var></code></p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">¿É¼Ç</a></h2>
      
      <p>¿©±â¼­´Â SysV init-½Ä ¿É¼Ç¸¸ ¼³¸íÇÑ´Ù. ´Ù¸¥ ¿É¼ÇÀº <a href="httpd.html">httpd</a> manpage¿¡¼­ ¼³¸íÇÑ´Ù.</p>
      
      <dl>
      
      <dt><code>start</code></dt>
      
      <dd>¾ÆÆÄÄ¡ <code>httpd</code> µ¥¸óÀ» ½ÃÀÛÇÑ´Ù. ÀÌ¹Ì ½ÇÇàÁßÀ̶ó¸é
      ¿À·ù¸¦ ³½´Ù. <code>apachectl -k start</code>¿Í °°´Ù.</dd>
      
      <dt><code>stop</code></dt>
      
      <dd>¾ÆÆÄÄ¡ <code>httpd</code> µ¥¸óÀ» Áß´ÜÇÑ´Ù. <code>apachectl
      -k stop</code>°ú °°´Ù.</dd>
      
      <dt><code>restart</code></dt>
      
      <dd>¾ÆÆÄÄ¡ <code>httpd</code> µ¥¸óÀ» Àç½ÃÀÛÇÑ´Ù. µ¥¸óÀÌ ½ÇÇàÁßÀÌ
      ¾Æ´Ï¶ó¸é, ½ÃÀÛÇÑ´Ù. µ¥¸óÀÌ Àç½ÃÀ۽à ½ÇÆÐÇÏÁö ¾ÊÀ½À» È®ÀÎÇϱâÀ§ÇØ
      Àç½ÃÀÛ Àü¿¡ ÀÚµ¿À¸·Î <code>configtest</code> ¸í·É°ú °°ÀÌ ¼³Á¤ÆÄÀÏÀ»
      °Ë»çÇÑ´Ù. <code>apachectl -k restart</code>¿Í °°´Ù.</dd>
      
      <dt><code>fullstatus</code></dt>
      
      <dd><code class="module"><a href="../mod/mod_status.html">mod_status</a></code>ÀÇ ¸ðµç »óÅ Á¤º¸¸¦ Ãâ·ÂÇÑ´Ù.
      ÀÌ ¸í·ÉÀ» »ç¿ëÇϱâÀ§Çؼ­´Â ¼­¹ö°¡ <code class="module"><a href="../mod/mod_status.html">mod_status</a></code>¸¦
      »ç¿ëÇϰí, ½Ã½ºÅÛ¿¡ <code>lynx</code> °°Àº ¹®ÀÚ±â¹Ý ºê¶ó¿ìÀú°¡
      ÇÊ¿äÇÏ´Ù. »óÅ Á¤º¸¿¡ Á¢±ÙÇÏ´Â URLÀº ½ºÅ©¸³Æ®ÀÇ
      <code>STATUSURL</code> º¯¼ö¸¦ ¼öÁ¤ÇÏ¿© ¼³Á¤ÇÒ ¼ö ÀÖ´Ù.</dd>
      
      <dt><code>status</code></dt>
      
      <dd>°£´ÜÇÑ »óÅ Á¤º¸¸¦ Ãâ·ÂÇÑ´Ù. <code>fullstatus</code> ¿É¼Ç°ú
      ºñ½ÁÇÏÁö¸¸, ÇöÀç ¼­ºñ½ºÁßÀÎ ¿äû ¸ñ·ÏÀ» Ãâ·ÂÇÏÁö ¾Ê´Â´Ù.</dd>
      
      <dt><code>graceful</code></dt>
      
      <dd>¾ÆÆÄÄ¡ <code>httpd</code> µ¥¸óÀ» Á¡ÀݰÔ(gracefully) Àç½ÃÀÛÇÑ´Ù.
      µ¥¸óÀÌ ½ÇÇàÁßÀÌ ¾Æ´Ï¶ó¸é, ½ÃÀÛÇÑ´Ù. ÀϹÝÀûÀÎ Àç½ÃÀÛ°ú ´Þ¸® ÇöÀç
      ¿­·ÁÀÖ´Â ¿¬°áÀ» ²÷Áö¾Ê´Â´Ù. ¶Ç, ÀÌÀü ·Î±×ÆÄÀÏÀ» Áï½Ã ´ÝÁö ¾Ê´Â´Ù.
      Áï, ·Î±×¼øÈ¯ ½ºÅ©¸³Æ®¿¡¼­ ÀÌ ¸í·ÉÀ» »ç¿ëÇÑ´Ù¸é, ÀÌÀü ·Î±×ÆÄÀÏÀ»
      ó¸®ÇϱâÀü¿¡ ·Î±×ÆÄÀÏÀ» ´ÝÇûÀ½À» º¸ÀåÇϱâÀ§ÇØ »ó´çÈ÷ ±â´Ù·Á¾ß
      ÇÑ´Ù. ¾ÆÆÄÄ¡°¡ Àç½ÃÀ۽à ½ÇÆÐÇÏÁö ¾ÊÀ½À» È®ÀÎÇϱâÀ§ÇØ Àç½ÃÀÛ
      Àü¿¡ ÀÚµ¿À¸·Î <code>configtest</code> ¸í·É°ú °°ÀÌ ¼³Á¤ÆÄÀÏÀ»
      °Ë»çÇÑ´Ù. <code>apachectl -k graceful</code>°ú °°´Ù.</dd>
      
      <dt><code>configtest</code></dt>
      
      <dd>¼³Á¤ÆÄÀÏÀÇ ¹®¹ýÀ» °Ë»çÇÑ´Ù. ¼³Á¤ÆÄÀÏÀ» Àаí <code>Syntax
      Ok</code> ȤÀº ƯÁ¤ ¼³Á¤¿À·ù¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ Á¤º¸¸¦ ¾Ë·ÁÁØ´Ù.
      <code>apachectl -t</code>¿Í °°´Ù.</dd>
      
      </dl>
      
      <p>¾Æ·¡ ¿É¼ÇÀ» »ç¿ëÇÒ ¼ö ÀÖÁö¸¸, ¾ÕÀ¸·Î »ç¶óÁú °ÍÀÌ´Ù.</p>
      
      <dl>
      
      <dt><code>startssl</code></dt>
      
      <dd><code>apachectl -k start -DSSL</code>°ú °°´Ù. ¿ì¸®´Â Á÷Á¢
      ¾ÕÀÇ ¸í·É¾î¸¦ »ç¿ëÇϰųª Ç×»ó SSLÀ» »ç¿ëÇϵµ·Ï
      <code>httpd.conf</code>¿¡¼­ <code class="directive"><a href="../mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code> ¼½¼ÇÀ» Á¦°ÅÇÏ±æ ±ÇÇÑ´Ù.</dd>
      
      </dl>
      
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/apachectl.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apachectl.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apachectl.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apachectl.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/apachectl.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/httpd.html.tr.utf8������������������������������������������������0000644�0000000�0000050�00000033521�13447004010�020612� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>httpd - Apache Hiper Metin Aktarım Protokolü Sunucusu - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>httpd - Apache Hiper Metin Aktarım Protokolü Sunucusu</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/httpd.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/httpd.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/httpd.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/httpd.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
           <p><strong><code>httpd</code></strong>, Apache Hiper Metin Aktarım
            Protokolü (HTTP) sunucusu programıdır. Tek başına çalışan bir artalan
            süreci olarak tasarlanmıştır. Bu tarz kullanıldığında istekleri işleme
            sokmak için çocuk süreçlerden ve evrelerden oluşan bir havuz
            oluÅŸturur.</p>
      
           <p>Genelde, <strong><code>httpd</code></strong>'nin doğrudan çağrılmaması
            gerekir. Unix ve benzerlerinde <code class="program"><a href="../programs/apachectl.html">apachectl</a></code>
            aracılığıyla, <a href="../platform/windows.html#winsvc">Windows NT, 2000
            ve XP</a>'de bir hizmet olarak,  <a href="../platform/windows.html#wincons">Windows 9x ve ME</a>'de ise bir
            konsol uygulaması olarak çalıştırılır.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Kullanım</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="../invoking.html">Apache httpd'nin Başlatılması</a></li><li><a href="../stopping.html">Apache httpd'nin Durdurulması</a></li><li><a href="../configuring.html">Yapılandırma Dosyaları</a></li><li><a href="../platform/">Platforma Özgü Belgeler</a></li><li><code class="program"><a href="../programs/apachectl.html">apachectl</a></code></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Kullanım</a></h2>
           <p><code><strong>httpd</strong> [ -<strong>d</strong>
           <var>sunucu-kök-dizini</var> ] [ -<strong>f</strong>
           <var>yapılandırma-dosyası</var> ]
           [ -<strong>C</strong> <var>yönerge</var> ] [ -<strong>c</strong>
           <var>yönerge</var> ] [ -<strong>D</strong> <var>parametre</var> ]
           [ -<strong>e</strong> <var>seviye</var> ] [ -<strong>E</strong>
           <var>dosya</var> ]
           [ <strong>-k</strong> start | restart | graceful | stop | graceful-stop ]
           [ -<strong>h</strong> ]
           [ -<strong>l</strong> ] [ -<strong>L</strong> ] [ -<strong>S</strong> ]
           [ -<strong>t</strong> ] [ -<strong>v</strong> ] [ -<strong>V</strong> ]
           [ -<strong>X</strong> ] [ -<strong>M</strong> ] [ -<strong>T</strong> ]
           </code></p>
      
           <p><a href="../platform/windows.html">Windows sistemlerinde</a>, ek
            olarak şunlar vardır:</p>
      
           <p><code><strong>httpd</strong> [ -<strong>k</strong> install | config |
            uninstall ] [ -<strong>n</strong> <var>isim</var> ]
           [ -<strong>w</strong> ]</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
      
        <dl>
          <dt><code><strong>-d</strong> <var>sunucu-kök-dizini</var></code></dt>
            <dd><var>sunucu-kök-dizini</var>'ni <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> yönergesine ilk değer olarak atar. Yapılandırma
            dosyasındaki bir <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>
            yönergesiyle bu atama geçersiz kılınabilir. Bu seçenek belirtilmediği
            takdirde <code>/usr/local/apache2</code> dizini öntanımlıdır.</dd>
      
          <dt><code><strong>-f</strong> <var>yapılandırma-dosyası</var></code></dt>
            <dd>Başlatma sırasında <var>yapılandırma-dosyası</var>'ndaki yönergeler
            kullanılır. Eğer <var>yapılandırma-dosyası</var> bir / ile başlamıyorsa
            dosyanın <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> yönergesinin
            değerine göreli olduğu varsayılır. Seçenek belirtilmediği takdirde
            <code>conf/httpd.conf</code> öntanımlı değerdir.</dd>
      
          <dt><code><strong>-k</strong> <code>start | restart | graceful | stop |
            graceful-stop</code></code></dt>
          <dd><strong><code>httpd</code></strong>'yi baÅŸlatmak, durdurmak ve yeniden
            başlatmak için sinyal gönderir. Daha ayrıntılı bilgi edinmek için <a href="../stopping.html">Apache httpd'nin Durdurulması</a> belgesine
            bakınız.</dd>
      
          <dt><code><strong>-C</strong> <var>yönerge</var></code></dt>
          <dd>Yapılandırma <var>yönerge</var>'sini yapılandırma dosyalarını okumadan
            önce işleme sokar.</dd>
      
          <dt><code><strong>-c</strong> <var>yönerge</var></code></dt>
          <dd>Yapılandırma <var>yönerge</var>'sini yapılandırma dosyalarını
            okuduktan sonra iÅŸleme sokar.</dd>
      
          <dt><code><strong>-D</strong> <var>parametre</var></code></dt>
          <dd>Sunucu başlatılırken veya yeniden başlatılırken komutları şarta bağlı
            olarak işleme sokmak veya atlamak için yapılandırma dosyalarında
            kullanılan <code class="directive"><a href="../mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>
            bölümlerinde kullanılmak üzere bir yapılandırma <var>parametre</var>'si
            tanımlar. Ayrıca, <code>-DNO_DETACH</code> (ana sürecin çatallanmasını
            engellemek için), <code>-DFOREGROUND</code> (ana sürecin
            <code>setsid()</code> ve benzerlerinden çağrılmasını engellemek için)
            gibi daha az bilinen bazı başlatma parametrelerini atamakta da
            kullanılabilir.</dd>
      
          <dt><code><strong>-e</strong> <var>seviye</var></code></dt>
          <dd>Hata günlüğü seviyesi olarak <code class="directive"><a href="../mod/core.html#loglevel">LogLevel</a></code> yönergesine sunucu başlatılırken <var>seviye</var>
            değerini atar. Bu seçenek, başlatma sırasındaki sorunları saptamak
            amacıyla hata iletilerinin ayrıntı seviyesini geçici olarak arttırmak
            için kullanılır.</dd>
      
          <dt><code><strong>-E</strong> <var>dosya</var></code></dt>
          <dd>Sunucunun başlatılması sırasında hata iletilerinin belirtilen
            <var>dosya</var>'ya gönderilmesini sağlar.</dd>
      
          <dt><code><strong>-h</strong></code></dt>
          <dd>Mevcut komut satırı seçeneklerinin kısa bir özetini çıktılar.</dd>
      
          <dt><code><strong>-l</strong></code></dt>
          <dd>Sunucunun içinde derlenmiş modüllerin listesini çıktılar. Bu liste
            <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> yönergesi kullanılarak
            devingen olarak yüklenen modülleri içermez.</dd>
      
          <dt><code><strong>-L</strong></code></dt>
          <dd>Durağan modüllerce sağlanmış yönergeleri olası değerleriyle geçerli
            konumlarına yerleştirerek listeler. Paylaşımlı modüllerce sağlanan
            yönergeleri listelemez.</dd>
      
          <dt><code><strong>-M</strong></code></dt>
          <dd>Yüklü durağan ve paylaşımlı modülleri listeler.</dd>
      
          <dt><code><strong>-S</strong></code></dt>
          <dd>Yapılandırma dosyasından çözümlenmiş haliyle ayarları gösterir (şu an
            sadece sanal konak ayarları gösterilmektedir).</dd>
      
          <dt><code><strong>-T</strong></code> (2.3.8 ve sonrasında
          kullanılabilmektedir)</dt>
          <dd>Başlatma ve yeniden başlatma sırasında belge kökü sınanmadan
            geçilir.</dd>
      
          <dt><code><strong>-t</strong></code></dt>
          <dd>Yapılandırma dosyasını sözdizimi hatalarına karşı denetler. Program
            sözdizimini denetledikten sonra sözdizimi geçerliyse 0 ile, değilse
            sıfırdan farklı bir değerle çıkar.
            <code><strong>-D</strong>DUMP_VHOSTS</code> seçeneği ile birlikte
            kullanılmışsa ek olarak sanal konak ayrıntıları da basılır.
            <code><strong>-D</strong>DUMP_MODULES</code> seçeneği ile ise ek olarak
            tüm modüller listelenir.</dd>
      
          <dt><code><strong>-v</strong></code></dt>
          <dd><strong><code>httpd</code></strong> sürümünü basar ve çıkar.</dd>
      
          <dt><code><strong>-V</strong></code></dt>
          <dd>Sürümü ve <strong><code>httpd</code></strong> kurulum parametrelerini
            basar ve çıkar.</dd>
      
          <dt><code><strong>-X</strong></code></dt>
          <dd><strong><code>httpd</code></strong> hata ayıklama kipinde çalışır. Tek
            çocuk süreç başlatılır ve sunucu konsolu terketmez.</dd>
        </dl>
      
        <p>Aşağıdaki seçenekler sadece <a href="../platform/windows.html">Windows
          platformunda geçerlidir</a>:</p>
      
        <dl>
          <dt><code><strong>-k</strong> install | config | uninstall</code></dt>
          <dd>Parametreler bakımından sırasıyla: Apache httpd bir Windows NT hizmeti
            haline getirilir; başlatma seçenekleri Apache httpd hizmeti için
            değiştirilir; ve Apache httpd hizmeti sistemden kaldırılır.</dd>
      
          <dt><code><strong>-n</strong> <var>isim</var></code></dt>
          <dd>Sinyal gönderilecek Apache httpd hizmetinin <var>ismi</var>.</dd>
      
          <dt><code><strong>-w</strong></code></dt>
          <dd>Hata durumunda konsol penceresi açık tutularak hata iletilerinin
            okunması sağlanır.</dd>
        </dl>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/httpd.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/httpd.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/httpd.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/httpd.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/httpd.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/apxs.html.fr.utf8�������������������������������������������������0000644�0000000�0000050�00000052516�13412755316�020447� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>apxs - Utilitaire pour les extensions d'Apache - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>apxs - Utilitaire pour les extensions d'Apache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/apxs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apxs.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apxs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apxs.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>apxs</code> est un utilitaire permettant de compiler et
          d'installer des modules en tant qu'extensions du serveur HTTP
          Apache. A cet effet, un objet dynamique partagé (DSO) est compilé à
          partir d'un ou plusieurs <var>fichiers</var> sources ou objets et
          peut être chargé pendant l'exécution du serveur Apache via la
          directive <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> du
          module <code class="module"><a href="../mod/mod_so.html">mod_so</a></code>.</p>
      
          <p>Pour pouvoir utiliser ce mécanisme d'extensions, votre
          plate-forme doit supporter la fonctionnalité DSO, et votre binaire
          <code class="program"><a href="../programs/httpd.html">httpd</a></code> Apache doit être compilé avec le module
          <code class="module"><a href="../mod/mod_so.html">mod_so</a></code>. Si ce n'est pas le cas, l'utilitaire
          <code>apxs</code> vous le signalera. Vous pouvez aussi vérifier
          vous-même ces prérequis en exécutant manuellement la commande :</p>
      
          <div class="example"><p><code>
            $ httpd -l
          </code></p></div>
      
          <p>Le module <code class="module"><a href="../mod/mod_so.html">mod_so</a></code> doit faire partie de la liste
          des modules affichée. Si ces prérequis sont présents, vous pouvez
          facilement étendre les fonctionnalités de votre serveur Apache en
          installant vos propres modules à l'aide de l'utilitaire
          <code>apxs</code>, via le mécanisme DSO :</p>
      
          <div class="example"><p><code>
            $ apxs -i -a -c mod_foo.c<br />
            gcc -fpic -DSHARED_MODULE -I/chemin/vers/apache/include -c mod_foo.c<br />
            ld -Bshareable -o mod_foo.so mod_foo.o<br />
            cp mod_foo.so /chemin/vers/apache/modules/mod_foo.so<br />
            chmod 755 /chemin/vers/apache/modules/mod_foo.so<br />
            [activation du module `foo' dans /chemin/vers/apache/etc/httpd.conf]<br />
            $ apachectl restart<br />
            /chemin/vers/apache/sbin/apachectl restart: httpd not running, trying to start<br />
            [Tue Mar 31 11:27:55 1998] [debug] mod_so.c(303): loaded module foo_module<br />
            /chemin/vers/apache/sbin/apachectl restart: httpd started<br />
            $ _
          </code></p></div>
      
          <p>Les arguments <var>fichiers</var> peuvent correspondre à un
          fichier source C (.c), un fichier objet (.o) ou même une archive de
          bibliothèques (.a). L'utilitaire <code>apxs</code> reconnaît
          automatiquement ces extensions et utilise automatiquement les
          fichiers source C pour la compilation, et les fichiers objets et
          archives pour l'édition de liens. Cependant, si vous utilisez des
          fichiers objets précompilés, assurez-vous que leur code soit
          indépendant de la position (PIC), afin de pouvoir les utiliser avec
          un objet partagé chargé dynamiquement. Avec GCC, par exemple, il
          vous suffit de toujours utiliser l'option de compilation
          <code>-fpic</code>. Pour les autres compilateurs C, consultez leur
          page de manuel, ou vérifiez les drapeaux qu'<code>apxs</code>
          utilise pour compiler les fichiers objets.</p>
      
          <p>Pour plus de détails à propos du support DSO dans Apache, lire la
          documentation du module <code class="module"><a href="../mod/mod_so.html">mod_so</a></code>, ou même, consultez
          le fichier source <code>src/modules/standard/mod_so.c</code>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Syntaxe</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Exemples</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><code class="program"><a href="../programs/apachectl.html">apachectl</a></code></li><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Syntaxe</a></h2>
          <p><code><strong>apxs</strong> -<strong>g</strong>
          [ -<strong>S</strong> <var>nom</var>=<var>valeur</var> ]
          -<strong>n</strong> <var>nom-module</var></code></p>
      
          <p><code><strong>apxs</strong> -<strong>q</strong>
          [ -<strong>v</strong> ]
          [ -<strong>S</strong> <var>nom</var>=<var>valeur</var> ]
          <var>requête</var> ...</code></p>
      
          <p><code><strong>apxs</strong> -<strong>c</strong>
          [ -<strong>S</strong> <var>nom</var>=<var>valeur</var> ]
          [ -<strong>o</strong> <var>fichier-dso</var> ]
          [ -<strong>I</strong> <var>répertoire-inc</var> ]
          [ -<strong>D</strong> <var>nom</var>=<var>valeur</var> ]
          [ -<strong>L</strong> <var>répertoire-lib</var> ]
          [ -<strong>l</strong> <var>nom-bibliothèque</var> ]
          [ -<strong>Wc,</strong><var>options-compilation</var> ]
          [ -<strong>Wl,</strong><var>options-edition-liens</var> ]
          <var>fichiers</var> ...</code></p>
      
          <p><code><strong>apxs</strong> -<strong>i</strong>
          [ -<strong>S</strong> <var>nom</var>=<var>valeur</var> ]
          [ -<strong>n</strong> <var>nom-module</var> ]
          [ -<strong>a</strong> ]
          [ -<strong>A</strong> ]
          <var>fichier-dso</var> ...</code></p>
      
          <p><code><strong>apxs</strong> -<strong>e</strong>
          [ -<strong>S</strong> <var>nom</var>=<var>valeur</var> ]
          [ -<strong>n</strong> <var>nom-module</var> ]
          [ -<strong>a</strong> ]
          [ -<strong>A</strong> ]
          <var>fichier-dso</var> ...</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <h3><a name="options.common" id="options.common">Options courantes</a></h3>
            <dl>
            <dt><code>-n <var>nom-module</var></code></dt>
            <dd>Définit explicitement le nom du module pour les options
            <code>-i</code> (install) et <code>-g</code> (génération de
            modèles). Utilisez cette option pour spécifier de manière
            explicite le nom du module. Pour l'option <code>-g</code>, cette
            option est nécessaire ; pour l'option <code>-i</code>,
            l'utilitaire <code>apxs</code> tente de déterminer le nom du
            module à partir des sources, ou (à défaut) en le déduisant du nom
            de fichier.</dd>
            </dl>
          
      
          <h3><a name="options.query" id="options.query">Options de requête</a></h3>
            <dl>
            <dt><code>-q</code></dt>
            <dd>Effectue une requête à propos des variables et de
            l'environnement utilisés pour compiler <code>httpd</code>.
            Lorsqu'elle est invoquée sans paramètre <var>requête</var>, cette
            option affiche toutes les variables connues, ainsi que leurs
            valeurs. Le paramètre optionnel <code>-v</code> formate la liste
            affichée.
      
            <p>Utilisez cette option pour déterminer manuellement les options
            utilisées pour compiler le binaire <code>httpd</code> qui chargera
            votre module. Ajoutez par exemple</p>
            <div class="example"><p><code>
              INC=-I`apxs -q INCLUDEDIR`
            </code></p></div>
      
            <p>dans vos propres Makefiles si vous devez accéder manuellement
            aux fichiers d'en-têtes C d'Apache.</p></dd>
            </dl>
          
      
          <h3><a name="options.conf" id="options.conf">Options de configuration</a></h3>
            <dl>
            <dt><code>-S <var>nom</var>=<var>valeur</var></code></dt>
            <dd>Cette option permet de modifier la configuration d'apxs
            décrite ci-dessus.</dd>
            </dl>
          
      
          <h3><a name="options.template" id="options.template">Option de génération des
          modèles</a></h3>
            <dl>
            <dt><code>-g</code></dt>
            <dd>Cette option permet de générer un sous-répertoire
            <var>nom</var> (voir option <code>-n</code>) contenant deux
            fichiers : le premier fichier est un exemple de fichier source de
            module nommé <code>mod_<var>nom</var>.c</code> que l'on peut
            utiliser comme modèle pour créer ses propres modules, ou comme
            point de départ pour se familiariser avec le mécanisme apxs ; le
            second fichier est le <code>Makefile</code> correspondant
            facilitant la compilation et l'installation de ce module.</dd>
            </dl>
          
          <h3><a name="options.dso" id="options.dso">Options de compilation DSO</a></h3>
            <dl>
            <dt><code>-c</code></dt>
            <dd>Cette option indique une opération de compilation. Tout
            d'abord, les fichiers sources (.c) spécifiés par
            <var>fichiers</var> sont compilés en fichiers objets
            correspondants (.o), puis un objet dynamiquement partagé
            <var>fichier-dso</var> est compilé via une édition de liens de ces
            fichiers objets avec les autres fichiers objets (.o and .a)
            spécifiés par <var>fichiers</var>. Si l'option <code>-o</code>
            n'est pas spécifiée, le nom du fichier résultant est déduit du
            premier nom de fichier spécifié par <var>fichiers</var>, et ainsi
            prend en général pour valeur par défaut
            <code>mod_<var>nom</var>.so</code>.</dd>
      
            <dt><code>-o <var>fichier-dso</var></code></dt>
            <dd>Spécifie de manière explicite le nom de fichier de l'objet
            partagé dynamiquement créé. Sans cette option, et si le nom ne
            peut pas être déduit de la liste <var>fichiers</var>, c'est le nom
            par défaut <code>mod_unknown.so</code> qui sera utilisé.</dd>
      
            <dt><code>-D <var>nom</var>=<var>valeur</var></code></dt>
            <dd>Cette option est transmise directement à la commande de
            compilation. Vous pouvez l'utiliser pour ajouter vos propres
            définitions au processus de compilation. </dd>
      
            <dt><code>-I <var>répertoire-inc</var></code></dt>
            <dd>Cette option est transmise directement à la commande de
            compilation. Vous pouvez l'utiliser pour ajouter vos propres
            chemins de recherche des répertoires <code>include</code> au processus de
            compilation.</dd>
      
            <dt><code>-L <var>répertoire-lib</var></code></dt>
            <dd>Cette option est transmise directement à la commande d'édition
            de liens. Vous pouvez l'utiliser pour ajouter vos propres
            chemins de recherche des répertoires de bibliothèques au processus
            de compilation.</dd>
      
            <dt><code>-l <var>nom-bibliothèque</var></code></dt>
            <dd>Cette option est transmise directement à la commande d'édition
            de liens. Vous pouvez l'utiliser pour ajouter vos propres
            bibliothèques à rechercher au processus de compilation.</dd>
      
            <dt><code>-Wc,<var>options-compilation</var></code></dt>
            <dd>Cette option transmet les <var>options-compilation</var> en
            tant qu'options supplémentaires à la commande <code>libtool
            --mode=compile</code>. Vous pouvez l'utiliser pour ajouter des
            options locales spécifiques au compilateur.</dd>
      
            <dt><code>-Wl,<var>options-edition-liens</var></code></dt>
            <dd>Cette option transmet les <var>options-edition-liens</var> en
            tant qu'options supplémentaires à la commande <code>libtool
            --mode=link</code>. Vous pouvez l'utiliser pour ajouter des
            options locales spécifiques à l'éditeur de liens.</dd>
            
            <dt><code>-p</code></dt>
            <dd>Avec cette option, apxs effectue l'édition de liens avec les
            bibliothèques apr/apr-util. Elle permet de compiler les programmes
            helper qui utilisent les bibliothèques apr/apr-util.</dd>
            </dl>
          
      
          <h3><a name="options.dsoinstall" id="options.dsoinstall">Options d'installation et de configuration DSO</a></h3>
          
            <dl>
            <dt><code>-i</code></dt>
            <dd>Cette option indique une opération d'installation et installe
            un ou plusieurs objets dynamiquement partagés dans le répertoire
            <var>modules</var> du serveur.</dd>
      
            <dt><code>-a</code></dt>
            <dd>Cette option active le module en ajoutant automatiquement une
            directive <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code>
            correspondante au fichier de configuration d'Apache
            <code>httpd.conf</code>, ou en l'activant s'il existe déjà.</dd>
      
            <dt><code>-A</code></dt>
            <dd>Identique à l'option <code>-a</code>, à la différence que la
            directive <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> créée
            est préfixée par un caractère dièse (<code>#</code>) ; le module
            est ainsi préparé pour une activation ultérieure, mais est
            désactivé dans un premier temps.</dd>
      
            <dt><code>-e</code></dt>
            <dd>Cette option indique une opération d'édition de liens et peut
            être utilisée avec les options <code>-a</code> et <code>-A</code>
            de la même manière qu'au cours de l'opération d'installation pour
            éditer le fichier de configuration d'Apache
            <code>httpd.conf</code>, sans toutefois installer le module.</dd>
            </dl>
          
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Exemples</a></h2>
          <p>Supposons que vous disposiez d'un module Apache nommé
          <code>mod_foo.c</code> et destiné à étendre les fonctionnalités du
          serveur. Pour ce faire, vous devez tout d'abord compiler le fichier
          source C en un objet partagé pouvant être chargé dans le serveur
          Apache à l'exécution, via la commande suivante :</p>
      
          <div class="example"><p><code>
            $ apxs -c mod_foo.c<br />
            /chemin/vers/libtool --mode=compile gcc ... -c mod_foo.c<br />
            /chemin/vers/libtool --mode=link gcc ... -o mod_foo.la mod_foo.slo<br />
            $ _
          </code></p></div>
      
          <p>Vous devez ensuite vérifier la configuration d'Apache en vous
          assurant qu'une directive <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> est bien présente pour
          charger cet objet partagé. Pour simplifier cette étape,
          <code>apxs</code> propose une méthode automatique d'installation de
          l'objet partagé dans son répertoire "modules", et de mise à jour du
          fichier <code>httpd.conf</code> en conséquence. Pour bénéficier de
          cette automatisation, utilisez la commande suivante :</p>
      
          <div class="example"><p><code>
            $ apxs -i -a mod_foo.la<br />
            /chemin/vers/instdso.sh mod_foo.la /chemin/vers/apache/modules<br />
            /chemin/vers/libtool --mode=install cp mod_foo.la /chemin/vers/apache/modules
            ...
            chmod 755 /chemin/vers/apache/modules/mod_foo.so<br />
            [activation du module `foo' dans /chemin/vers/apache/conf/httpd.conf]<br />
            $ _
          </code></p></div>
      
          <p>Une ligne contenant</p>
      
          <div class="example"><p><code>
            LoadModule foo_module modules/mod_foo.so
          </code></p></div>
      
          <p>est alors ajoutée au fichier de configuration si ce n'est pas
          déjà fait. Si vous voulez que le module soit désactivé par défaut,
          utilisez l'option <code>-A</code> comme suit :</p>
      
          <div class="example"><p><code>
            $ apxs -i -A mod_foo.c
          </code></p></div>
      
          <p>Pour un test rapide du mécanisme apxs, vous pouvez créer un
          exemple de modèle de module Apache, ainsi que le Makefile
          correspondant via :</p>
      
          <div class="example"><p><code>
            $ apxs -g -n foo<br />
            Creating [DIR]  foo<br />
            Creating [FILE] foo/Makefile<br />
            Creating [FILE] foo/modules.mk<br />
            Creating [FILE] foo/mod_foo.c<br />
            Creating [FILE] foo/.deps<br />
            $ _
          </code></p></div>
      
          <p>Vous pouvez ensuite compiler immédiatement ce module exemple en
          objet partagé et le charger dans le serveur Apache :</p>
      
          <div class="example"><p><code>
            $ cd foo<br />
            $ make all reload<br />
            apxs -c mod_foo.c<br />
            /chemin/vers/libtool --mode=compile gcc ... -c mod_foo.c<br />
            /chemin/vers/libtool --mode=link gcc ... -o mod_foo.la mod_foo.slo<br />
            apxs -i -a -n "foo" mod_foo.la<br />
            /chemin/vers/instdso.sh mod_foo.la /chemin/vers/apache/modules<br />
            /chemin/vers/libtool --mode=install cp mod_foo.la /chemin/vers/apache/modules
            ...
            chmod 755 /chemin/vers/apache/modules/mod_foo.so<br />
            [activation du module `foo' dans /chemin/vers/apache/conf/httpd.conf]<br />
            apachectl restart<br />
            /chemin/vers/apache/sbin/apachectl restart: httpd not running, trying to start<br />
            [Tue Mar 31 11:27:55 1998] [debug] mod_so.c(303): loaded module foo_module<br />
            /chemin/vers/apache/sbin/apachectl restart: httpd started<br />
            $ _
          </code></p></div>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/apxs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apxs.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apxs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apxs.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/apxs.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htdigest.html.en��������������������������������������������������0000644�0000000�0000050�00000017752�13412755316�020420� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htdigest - manage user files for digest authentication - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>htdigest - manage user files for digest authentication</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/htdigest.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htdigest.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htdigest.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htdigest.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>htdigest</code> is used to create and update the flat-files used
          to store usernames, realm and password for digest authentication of HTTP
          users. Resources available from the Apache HTTP server can be restricted
          to just the users listed in the files created by <code>htdigest</code>.</p>
      
          <p>This manual page only lists the command line arguments. For details of
          the directives necessary to configure digest authentication in
          <code class="program"><a href="../programs/httpd.html">httpd</a></code> see the Apache manual, which is part
          of the Apache distribution or can be found at
          <a href="http://httpd.apache.org/">http://httpd.apache.org/</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#security">Security Considerations</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
          <p><code><strong>htdigest</strong> [ -<strong>c</strong> ]
          <var>passwdfile</var> <var>realm</var> <var>username</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code>-c</code></dt>
          <dd>Create the <var>passwdfile</var>. If <var>passwdfile</var> already
          exists, it is deleted first.</dd>
      
          <dt><code><var>passwdfile</var></code></dt>
          <dd>Name of the file to contain the username, realm and password. If
          <code>-c</code> is given, this file is created if it does not already
          exist, or deleted and recreated if it does exist.</dd>
      
          <dt><code><var>realm</var></code></dt>
          <dd>The realm name to which the user name belongs. See 
          <a href="http://tools.ietf.org/html/rfc2617#section-3.2.1">
          http://tools.ietf.org/html/rfc2617#section-3.2.1</a> for more details.
          </dd>
      
          <dt><code><var>username</var></code></dt>
          <dd>The user name to create or update in <var>passwdfile</var>. If
          <var>username</var> does not exist is this file, an entry is added. If it
          does exist, the password is changed.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">Security Considerations</a></h2>
          <p>This program is not safe as a setuid executable. Do <em>not</em> make it
          setuid.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/htdigest.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htdigest.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htdigest.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htdigest.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htdigest.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������httpd-2.4.41/docs/manual/programs/suexec.html.en����������������������������������������������������0000644�0000000�0000050�00000015270�13412755316�020072� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>suexec - Switch user before executing external programs - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>suexec - Switch user before executing external programs</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/suexec.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/suexec.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/suexec.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/suexec.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
           <p><code>suexec</code> is used by the Apache HTTP Server to switch
           to another user before executing CGI programs. In order to achieve this,
           it must run as <code>root</code>. Since the HTTP daemon normally doesn't
           run as <code>root</code>, the <code>suexec</code> executable needs the
           setuid bit set and must be owned by <code>root</code>. It should never be
           writable for any other person than <code>root</code>.</p>
      
           <p>For further information about the concepts and the security model
           of suexec please refer to the suexec documentation (<a href="http://httpd.apache.org/docs/2.4/suexec.html">http://httpd.apache.org/docs/2.4/suexec.html</a>).</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
           <p><code><strong>suexec</strong> -<strong>V</strong></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
      
      <dl>
      <dt><code>-V</code></dt>
      
      <dd>If you are <code>root</code>, this option displays the compile options of
      <code>suexec</code>. For security reasons all configuration options are
      changeable only at compile time.</dd>
      
      </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/suexec.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/suexec.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/suexec.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/suexec.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/suexec.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/other.html.tr.utf8������������������������������������������������0000644�0000000�0000050�00000012346�13447004010�020612� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Diğer Programlar - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>Diğer Programlar</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/other.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/other.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/other.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/other.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Bu sayfada daha önce belgelenen programlar şimdi kendi belgelerine
          sahiptir. Bu sayfaya verilmiş bağlantıları lütfen güncelleyin.</p>
      
          <p><code class="program"><a href="../programs/log_server_status.html">log_server_status</a></code></p>
          <p><code class="program"><a href="../programs/split-logfile.html">split-logfile</a></code></p>
      </div>
      </div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/other.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/other.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/other.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/other.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/other.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/dbmmanage.html.ko.euc-kr������������������������������������������0000644�0000000�0000050�00000026620�13412755316�021706� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>dbmmanage - DBM Çü½ÄÀÇ »ç¿ëÀÚÀÎÁõ ÆÄÀÏÀ» °ü¸®ÇÑ´Ù - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>dbmmanage - DBM Çü½ÄÀÇ »ç¿ëÀÚÀÎÁõ ÆÄÀÏÀ» °ü¸®ÇÑ´Ù</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/dbmmanage.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/dbmmanage.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/dbmmanage.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/dbmmanage.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p><code>dbmmanage</code>´Â HTTP basic authentication¿¡
          »ç¿ëÇÒ »ç¿ëÀÚ¸í°ú ¾ÏÈ£¸¦ ÀúÀåÇÏ´Â DBMÇü½ÄÀÇ ÆÄÀÏÀ» ¸¸µé°í
          ¼öÁ¤ÇÑ´Ù. ¾ÆÆÄÄ¡ À¥¼­¹ö´Â ÀÚ¿øÀ» <code>dbmmanage</code>·Î
          ¸¸µç ÆÄÀÏ¿¡ ±â·ÏÇÑ »ç¿ëÀÚ¿¡°Ô¸¸ º¸¿©ÁÙ ¼ö ÀÖ´Ù. »ç¿ëÀÚ¸íÀÌ
          DBM ÆÄÀÏ¿¡ ±â·ÏµÇÀÖÀ»¶§¸¸ ÀÌ ÇÁ·Î±×·¥À» »ç¿ëÇÒ ¼ö ÀÖ´Ù.
          ÀÏ¹ÝÆÄÀÏÀ» µ¥ÀÌÅͺ£À̽º·Î »ç¿ëÇÏ·Á¸é <a href="htpasswd.html">htpasswd</a>¸¦ Âü°íÇ϶ó.</p>
      
          <p>ÀÌ manpage´Â ¸í·ÉÇà ¿É¼Ç¸¸À» ¼³¸íÇÑ´Ù. <a href="httpd.html">httpd</a>¿¡¼­ »ç¿ëÀÚÀÎÁõÀ» ¼³Á¤ÇÏ´Â Áö½Ã¾î¿¡
          ´ëÇÑ ¼³¸íÀº ¾ÆÆÄÄ¡ ¹èÆ÷º»¿¡ Æ÷ÇÔµÇÀÖ°í <a href="http://httpd.apache.org">http://httpd.apache.org/</a>¿¡¼­µµ
          º¼ ¼ö ÀÖ´Â ¾ÆÆÄÄ¡ ¼³¸í¼­¸¦ Âü°íÇ϶ó.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">°³¿ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">¿É¼Ç</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#bugs">¹ö±×</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="httpd.html">httpd</a></li><li><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code></li><li><code class="module"><a href="../mod/mod_authz_dbm.html">mod_authz_dbm</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">°³¿ä</a></h2>
          <p><code><strong>dbmmanage</strong> [ <var>encoding</var> ]
          <var>filename</var> add|adduser|check|delete|update
          <var>username</var>
          [ <var>encpasswd</var>
            [ <var>group</var>[,<var>group</var>...]
              [ <var>comment</var> ] ] ]</code></p>
      
          <p><code><strong>dbmmanage</strong> <var>filename</var>
          view [ <var>username</var> ]</code></p>
      
          <p><code><strong>dbmmanage</strong> <var>filename</var> import</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">¿É¼Ç</a></h2>
          <dl>
          <dt><code><var>filename</var></code></dt>
          <dd>DBMÇü½Ä ÆÄÀÏÀÇ ÆÄÀϸí. º¸Åë <code>.db</code>,
          <code>.pag</code>, <code>.dir</code> È®ÀåÀÚ¸¦ »«´Ù.</dd>
      
          <dt><code><var>username</var></code></dt>
          <dd>ÀÛ¾÷ÇÒ »ç¿ëÀÚ¸í. <var>username</var>¿¡ ÄÝ·Ð(<code>:</code>)À»
          »ç¿ëÇÒ ¼ö ¾ø´Ù.</dd>
      
          <dt><code><var>encpasswd</var></code></dt>
          <dd><code>update</code>³ª <code>add</code> ¸í·É¿¡ »ç¿ëÇÒ
          ÀÌ¹Ì ¾ÏȣȭµÈ ¾ÏÈ£ÀÌ´Ù. ¾ÏÈ£¸¦ ³ªÁß¿¡ ÁöÁ¤ÇÏ°í ½ÍÀº °æ¿ì
          »©±â±âÈ£(<code>-</code>)¸¦ »ç¿ëÇÑ´Ù. ¶Ç, <code>update</code>
          ¸í·ÉÀ» »ç¿ëÇÒ¶§ ¸¶Ä§Ç¥(<code>.</code>)¸¦ »ç¿ëÇÏ¸é ¿ø·¡
          ¾ÏÈ£¸¦ ±×´ë·Î µÐ´Ù.</dd>
      
          <dt><code><var>group</var></code></dt>
          <dd>»ç¿ëÀÚ°¡ ¼ÓÇÑ ±×·ì. ±×·ì¸í¿¡ ÄÝ·Ð(<code>:</code>)À»
          »ç¿ëÇÒ ¼ö ¾ø´Ù. »ç¿ëÀÚ¸¦ ±×·ì¿¡ Ãß°¡ÇÏÁö´Â ¾ÊÁö¸¸ ¼³¸í¶õÀ»
          ä¿ì°í ½Í´Ù¸é »©±â±âÈ£(<code>-</code>)¸¦ »ç¿ëÇÑ´Ù. ¶Ç,
          <code>update</code> ¸í·ÉÀ» »ç¿ëÇÒ¶§ ¸¶Ä§Ç¥(<code>.</code>)¸¦
          »ç¿ëÇÑ´Ù¸é ¿ø·¡ ±×·ìÀ» ±×´ë·Î µÐ´Ù.</dd>
      
          <dt><code><var>comment</var></code></dt>
          <dd>½ÇÁ¦ À̸§, ¸ÞÀÏ ÁÖ¼Ò µî »ç¿ëÀÚ¿¡ ´ëÇÑ ¼³¸íÀ» Àû´Â ¶õÀÌ´Ù.
          ¼­¹ö´Â ÀÌ Ç׸ñÀ» ¹«½ÃÇÑ´Ù.</dd>
          </dl>
      
          <h3><a name="options.encodings" id="options.encodings">ÀÎÄÚµù</a></h3>
            <dl>
            <dt><code>-d</code></dt>
            <dd>crypt ¾Ïȣȭ (Win32³ª Netware°¡ ¾Æ´Ï¶ó¸é ±âº»°ª)</dd>
      
            <dt><code>-m</code></dt>
            <dd>MD5 ¾Ïȣȭ (Win32°ú Netware¿¡¼­ ±âº»°ª)</dd>
      
            <dt><code>-s</code></dt>
            <dd>SHA1 ¾Ïȣȭ</dd>
      
            <dt><code>-p</code></dt>
            <dd>¾ÏÈ£¸¦ ±×´ë·Î ±â·Ï (<em>ÃßõÇÏÁö ¾ÊÀ½</em>)</dd>
            </dl>
          
      
          <h3><a name="options.commands" id="options.commands">¸í·É</a></h3>
            <dl>
            <dt><code>add</code></dt>
            <dd>¾ÏȣȭµÈ ¾ÏÈ£ <var>encpasswd</var>¸¦ »ç¿ëÇÏ¿©
            <var>filename</var>¿¡ <var>username</var> Ç׸ñÀ» Ãß°¡ÇÑ´Ù.</dd>
      
            <dt><code>adduser</code></dt>
            <dd>¾ÏÈ£¸¦ ¹°¾îº¸°í <var>filename</var>¿¡
            <var>username</var> Ç׸ñÀ» Ãß°¡ÇÑ´Ù.</dd>
      
            <dt><code>check</code></dt>
            <dd>¾ÏÈ£¸¦ ¹°¾îº»ÈÄ <var>filename</var>¿¡
            <var>username</var>ÀÌ ÀÖ°í ¾ÏÈ£°¡ ÀÏÄ¡ÇÏ´ÂÁö °Ë»çÇÑ´Ù.</dd>
      
            <dt><code>delete</code></dt>
            <dd><var>filename</var>¿¡¼­ <var>username</var> Ç׸ñÀ»
            »èÁ¦ÇÑ´Ù.</dd>
      
            <dt><code>import</code></dt>
            <dd><code>STDIN</code>¿¡¼­
            <code><var>username</var>:<var>password</var></code> Ç׸ñÀ»
            (ÇÑÁÙ¿¡ Çϳª¾¿) Àо <var>filename</var>¿¡ Ãß°¡ÇÑ´Ù.
            ¾ÏÈ£´Â ÀÌ¹Ì ¾ÏȣȭµÇÀÖ¾î¾ß ÇÑ´Ù.</dd>
      
            <dt><code>update</code></dt>
            <dd><code>adduser</code> ¸í·É°ú ºñ½ÁÇÏÁö¸¸,
            <var>filename</var>¿¡ ÀÌ¹Ì <var>username</var>ÀÌ ÀÖ´ÂÁö
            È®ÀÎÇÑ´Ù.</dd>
      
            <dt><code>view</code></dt>
            <dd>DBM ÆÄÀÏ ³»¿ëÀ» Ãâ·ÂÇÑ´Ù. <var>username</var>À»
            ÁöÁ¤ÇÏ¸é Æ¯Á¤ Ç׸ñ¸¸À» Ãâ·ÂÇÑ´Ù.</dd>
            </dl>
          
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="bugs" id="bugs">¹ö±×</a></h2>
          <p>¿©·¯ ´Ù¸¥ DBM ÆÄÀÏÇü½ÄµéÀÌ ÀÖ°í ´ç½ÅÀÇ ½Ã½ºÅÛ¿¡ ¿©·¯
          Çü½Ä¿¡ ´ëÇÑ ºñ½ÁÇÑ ¶óÀ̺귯¸®µéÀÌ ÀÖÀ½À» ÁÖÀÇÇØ¾ß ÇÑ´Ù.
          °¡Àå ´ëÇ¥ÀûÀÎ ³×°¡Áö°¡ SDBM, NDBM, GNU ÇÁ·ÎÁ§Æ®ÀÇ GDBM,
          Berkeley DB 2ÀÌ´Ù. ºÒÇàÈ÷µµ ÀÌ ¶óÀ̺귯¸®µéÀº ¸ðµÎ ´Ù¸¥
          ÆÄÀÏÇü½ÄÀ» »ç¿ëÇÑ´Ù. ±×·¡¼­ <var>filename</var>ÀÌ »ç¿ëÇÏ´Â
          ÆÄÀÏÇü½ÄÀÌ <code>dbmmanage</code>°¡ ¿øÇÏ´Â Çü½Ä°ú °°ÀºÁö
          È®ÀÎÇØ¾ß ÇÑ´Ù. <code>dbmmanage</code>´Â DBM ÆÄÀÏÀÇ Çü½ÄÀ»
          ¾Ë¾Æ³»Áö ¸øÇÑ´Ù. ´Ù¸¥ Çü½ÄÀ» »ç¿ëÇÏ¸é ¾Æ¹«Àϵµ ÇÏÁö ¾Ê°Å³ª,
          ´Ù¸§ À̸§ÀÇ DBM ÆÄÀÏÀ» ¸¸µé°Å³ª, ÃÖ¾ÇÀÇ °æ¿ì ÆÄÀÏÀ» ±â·ÏÇÏ¿©
          DBM ÆÄÀÏÀ» ¸ÁÄ¥ ¼ö ÀÖ´Ù.</p>
      
          <p><code>dbmmanage</code> ÇÁ·Î±×·¥ ¾ÕºÎºÐ¿¡ ÀÖ´Â
          <code>@AnyDBM::ISA</code> ¹è¿­ÀÌ DBMÇü½Ä ¼±È£¼ø¼­ÀÌ´Ù.
          ¿ì¸®´Â Berkeley DB 2 ÆÄÀÏÇü½ÄÀ» ¼±È£ÇϹǷÎ
          <code>dbmmanage</code>°¡ ½Ã½ºÅÛ ¶óÀ̺귯¸®¸¦ ã´Â ¼ø¼­´Â
          Berkeley DB 2, NDBM, GDBM, SDBM ¼øÀÌ´Ù. <code>dbmmanage</code>´Â
          Á¦ÀÏ ¸ÕÀú ãÀº ¶óÀ̺귯¸®¸¦ »ç¿ëÇÏ¿© ¸ðµç DBM ÆÄÀÏ ÀÛ¾÷À»
          ÇÑ´Ù. ÀÌ ¼ø¼­´Â PerlÀÇ °£´ÜÇÑ <code>dbmopen()</code> È£ÃâÀÌ
          »ç¿ëÇÏ´Â ¼ø¼­³ª PerlÀÇ Ç¥ÁØ <code>@AnyDBM::ISA</code> ¼ø¼­¿Í
          Á¶±Ý ´Ù¸£´Ù. ±×·¡¼­ ´Ù¸¥ µµ±¸¸¦ »ç¿ëÇÏ¿© DBM ÆÄÀÏÀ» °ü¸®ÇÑ´Ù¸é
          ÀÌ ¼ø¼­¸¦ µû¶ó¾ß ÇÑ´Ù. C¿Í °°ÀÌ ´Ù¸¥ ¾ð¾î·Î ÀÛ¼ºÇÑ ÇÁ·Î±×·¥À»
          »ç¿ëÇÏ¿© ÆÄÀÏÀ» ´Ù·ç´Â °æ¿ì¿¡µµ ¸¶Âù°¡Áö´Ù.</p>
      
          <p>´ëºÎºÐÀÇ À¯´Ð½º ½Ã½ºÅÛ¿¡¼­ <code>file</code> ÇÁ·Î±×·¥À¸·Î
          DBM ÆÄÀÏÇü½ÄÀ» È®ÀÎÇÒ ¼ö ÀÖ´Ù.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/dbmmanage.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/dbmmanage.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/dbmmanage.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/dbmmanage.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/dbmmanage.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/rotatelogs.html.en������������������������������������������������0000644�0000000�0000050�00000036545�13412755316�020771� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>rotatelogs - Piped logging program to rotate Apache logs - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>rotatelogs - Piped logging program to rotate Apache logs</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/rotatelogs.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/rotatelogs.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/rotatelogs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/rotatelogs.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
           <p><code>rotatelogs</code> is a simple program for use in
           conjunction with Apache's piped logfile feature.  It supports
           rotation based on a time interval or maximum size of the log.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Examples</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#portability">Portability</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
      
           <p><code><strong>rotatelogs</strong>
           [ -<strong>l</strong> ]
           [ -<strong>L</strong> <var>linkname</var> ]
           [ -<strong>p</strong> <var>program</var> ]
           [ -<strong>f</strong> ]
           [ -<strong>D</strong> ]
           [ -<strong>t</strong> ]
           [ -<strong>v</strong> ]
           [ -<strong>e</strong> ]
           [ -<strong>c</strong> ]
           [ -<strong>n</strong> <var>number-of-files</var> ]
           <var>logfile</var>
           <var>rotationtime</var>|<var>filesize</var>(B|K|M|G)
           [ <var>offset</var> ]</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
      
      <dl>
      
      <dt><code>-l</code></dt>
      <dd>Causes the use of local time rather than GMT as the base for the
      interval or for <code>strftime(3)</code> formatting with size-based
      rotation.</dd>
      
      <dt><code>-L</code> <var>linkname</var></dt>
      <dd>Causes a hard link to be made from the current logfile
      to the specified link name.  This can be used to watch
      the log continuously across rotations using a command like
      <code>tail -F linkname</code>.</dd>
      
      <dt><code>-p</code> <var>program</var></dt>
      
      <dd>If given, <code>rotatelogs</code> will execute the specified
      program every time a new log file is opened.  The filename of the
      newly opened file is passed as the first argument to the program.  If
      executing after a rotation, the old log file is passed as the second
      argument.  <code>rotatelogs</code> does not wait for the specified
      program to terminate before continuing to operate, and will not log
      any error code returned on termination.  The spawned program uses the
      same stdin, stdout, and stderr as rotatelogs itself, and also inherits
      the environment.</dd>
      
      <dt><code>-f</code></dt>
      <dd>Causes the logfile to be opened immediately, as soon as
      <code>rotatelogs</code> starts, instead of waiting for the
      first logfile entry to be read (for non-busy sites, there may be
      a substantial delay between when the server is started
      and when the first request is handled, meaning that the
      associated logfile does not "exist" until then, which
      causes problems from some automated logging tools)</dd>
      
      <dt><code>-D</code></dt>
      <dd>Creates the parent directories of the path that the log file will be
      placed in if they do not already exist.  This allows <code>strftime(3)</code>
      formatting to be used in the path and not just the filename.</dd>
      
      <dt><code>-t</code></dt>
      <dd>Causes the logfile to be truncated instead of rotated. This is
      useful when a log is processed in real time by a command like tail,
      and there is no need for archived data. No suffix will be added to
      the filename, however format strings containing '%' characters
      will be respected.
      </dd>
      
      <dt><code>-v</code></dt>
      <dd>Produce verbose output on STDERR. The output contains
      the result of the configuration parsing, and all file open and
      close actions.</dd>
      
      <dt><code>-e</code></dt>
      <dd>Echo logs through to stdout. Useful when logs need to be further
      processed in real time by a further tool in the chain.</dd>
      
      <dt><code>-c</code></dt>
      <dd>Create log file for each interval, even if empty.</dd>
      
      <dt><code>-n <var>number-of-files</var></code></dt>
      <dd>Use a circular list of filenames without timestamps.
      With -n 3, the series of log files opened would be
      "logfile", "logfile.1", "logfile.2", then overwriting "logfile".
      Available in 2.4.5 and later.</dd>
      
      <dt><code><var>logfile</var></code></dt>
      
      <dd><p>The path plus basename of the logfile.  If <var>logfile</var>
      includes any '%' characters, it is treated as a format string for
      <code>strftime(3)</code>.  Otherwise, the suffix
      <var>.nnnnnnnnnn</var> is automatically added and is the time in
      seconds (unless the -t option is used). Both formats compute the
      start time from the beginning of the current period.  For example,
      if a rotation time of 86400 is specified, the hour, minute, and
      second fields created from the <code>strftime(3)</code> format will
      all be zero, referring to the beginning of the current 24-hour
      period (midnight).</p>
      <p>When using <code>strftime(3)</code> filename formatting,
      be sure the log file format has enough granularity to produce
      a different file name each time the logs are rotated.  Otherwise
      rotation will overwrite the same file instead of starting a new
      one.  For example, if <var>logfile</var> was
      <code>/var/log/errorlog.%Y-%m-%d</code> with log rotation at 5
      megabytes, but 5 megabytes was reached twice in the same day, the
      same log file name would be produced and log rotation would keep
      writing to the same file.</p>
      </dd>
      
      <dt><code><var>rotationtime</var></code></dt>
      
      <dd>The time between log file rotations in seconds.  The rotation
      occurs at the beginning of this interval.  For example, if the
      rotation time is 3600, the log file will be rotated at the beginning
      of every hour; if the rotation time is 86400, the log file will be
      rotated every night at midnight.  (If no data is logged during an
      interval, no file will be created.)</dd>
      
      <dt><code><var>filesize</var>(B|K|M|G)</code></dt>
      
      <dd>The maximum file size in followed by exactly one of the letters
      <code>B</code> (Bytes), <code>K</code> (KBytes), <code>M</code> (MBytes)
      or <code>G</code> (GBytes).
      <p>
      When time and size are specified, the size must be given after the time.
      Rotation will occur whenever either time or size limits are reached.
      </p>
      </dd>
      
      <dt><code><var>offset</var></code></dt>
      
      <dd>The number of minutes offset from UTC.  If omitted, zero is
      assumed and UTC is used.  For example, to use local time in the zone
      UTC -5 hours, specify a value of <code>-300</code> for this argument.
      In most cases, <code>-l</code> should be used instead of specifying
      an offset.</dd>
      
      </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Examples</a></h2>
      
      <div class="example"><p><code>
           CustomLog "|bin/rotatelogs /var/log/logfile 86400" common
      </code></p></div>
      
           <p>This creates the files /var/log/logfile.nnnn where nnnn  is
           the system time at which the log nominally starts (this time
           will always be a multiple of the rotation time, so  you  can
           synchronize cron scripts with it).  At the end of each rotation
           time (here after 24 hours) a new log is started.</p>
      
      <div class="example"><p><code>
           CustomLog "|bin/rotatelogs -l /var/log/logfile.%Y.%m.%d 86400" common
      </code></p></div>
      
           <p>This creates the files /var/log/logfile.yyyy.mm.dd where
           yyyy is the year, mm is the month, and dd is the day of the month.
           Logging will switch to a new file every day at midnight, local time.</p>
      
      <div class="example"><p><code>
           CustomLog "|bin/rotatelogs /var/log/logfile 5M" common
      </code></p></div>
      
           <p>This configuration will rotate the logfile whenever it reaches
           a size of 5 megabytes.</p>
      
      <div class="example"><p><code>
           ErrorLog "|bin/rotatelogs /var/log/errorlog.%Y-%m-%d-%H_%M_%S 5M"
      </code></p></div>
           <p>This configuration will rotate the error logfile whenever it
           reaches a size of 5 megabytes, and the suffix to the logfile name
           will be created of the form
           <code>errorlog.YYYY-mm-dd-HH_MM_SS</code>.</p>
      
      <div class="example"><p><code>
           CustomLog "|bin/rotatelogs -t /var/log/logfile 86400" common
      </code></p></div>
      
           <p>This creates the file /var/log/logfile, truncating the file at
           startup and then truncating the file once per day. It is expected
           in this scenario that a separate process (such as tail) would
           process the file in real time.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="portability" id="portability">Portability</a></h2>
      
      <p>The following logfile format string substitutions should be
      supported by all <code>strftime(3)</code> implementations, see
      the <code>strftime(3)</code> man page for library-specific
      extensions.</p>
      
      <table class="bordered"><tr><td><code>%A</code></td><td>full weekday name (localized)</td></tr>
      <tr class="odd"><td><code>%a</code></td><td>3-character weekday name (localized)</td></tr>
      <tr><td><code>%B</code></td><td>full month name (localized)</td></tr>
      <tr class="odd"><td><code>%b</code></td><td>3-character month name (localized)</td></tr>
      <tr><td><code>%c</code></td><td>date and time (localized)</td></tr>
      <tr class="odd"><td><code>%d</code></td><td>2-digit day of month</td></tr>
      <tr><td><code>%H</code></td><td>2-digit hour (24 hour clock)</td></tr>
      <tr class="odd"><td><code>%I</code></td><td>2-digit hour (12 hour clock)</td></tr>
      <tr><td><code>%j</code></td><td>3-digit day of year</td></tr>
      <tr class="odd"><td><code>%M</code></td><td>2-digit minute</td></tr>
      <tr><td><code>%m</code></td><td>2-digit month</td></tr>
      <tr class="odd"><td><code>%p</code></td><td>am/pm of 12 hour clock (localized)</td></tr>
      <tr><td><code>%S</code></td><td>2-digit second</td></tr>
      <tr class="odd"><td><code>%U</code></td><td>2-digit week of year
      (Sunday first day of week)</td></tr>
      <tr><td><code>%W</code></td><td>2-digit week of year
      (Monday first day of week)</td></tr>
      <tr class="odd"><td><code>%w</code></td><td>1-digit weekday
      (Sunday first day of week)</td></tr>
      <tr><td><code>%X</code></td><td>time (localized)</td></tr>
      <tr class="odd"><td><code>%x</code></td><td>date (localized)</td></tr>
      <tr><td><code>%Y</code></td><td>4-digit year</td></tr>
      <tr class="odd"><td><code>%y</code></td><td>2-digit year</td></tr>
      <tr><td><code>%Z</code></td><td>time zone name</td></tr>
      <tr class="odd"><td><code>%%</code></td><td>literal `%'</td></tr>
      </table>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/rotatelogs.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/rotatelogs.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/rotatelogs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/rotatelogs.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/rotatelogs.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/log_server_status.html��������������������������������������������0000644�0000000�0000050�00000000346�13362070302�021732� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: log_server_status.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: log_server_status.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/split-logfile.html.en���������������������������������������������0000644�0000000�0000050�00000013425�13412755316�021350� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>split-logfile - Split up multi-vhost logfiles - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>split-logfile - Split up multi-vhost logfiles</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/split-logfile.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/split-logfile.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>This perl script will take a combined Web server access log file and
          break its contents into separate files. It assumes that the first field of
          each line is the virtual host identity, put there using the "<code>%v</code>"
          variable in <code class="directive"><a href="../mod/mod_log_config.html#logformat">LogFormat</a></code>.
          </p>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="split-logfile" id="split-logfile">Usage</a></h2>
      
          <p>Create a log file with virtual host information in it:</p>
      
          <pre class="prettyprint lang-config">LogFormat "%v %h %l %u %t \"%r\" %&gt;s %b \"%{Referer}i\" \"%{User-agent}i\"" combined_plus_vhost
      CustomLog logs/access_log combined_plus_vhost</pre>
      
      
          <p>Log files will be created, in the directory where you run the
          script, for each virtual host name that appears in the combined log file.
          These logfiles will named after the hostname, with a
          <code>.log</code> file extension.</p>
      
          <p>The combined log file is read from stdin. Records read will be appended
          to any existing log files.</p>
      
          <div class="example"><p><code>split-logfile &lt; access_log</code></p></div>
      
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/split-logfile.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/split-logfile.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/split-logfile.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/other.html.ko.euc-kr����������������������������������������������0000644�0000000�0000050�00000015137�13412755316�021115� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Other Programs - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>Other Programs</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/other.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/other.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/other.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/other.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p>´ÙÀ½Àº °£´ÜÇÏ¿© manpage°¡ ¾ø´Â, ¾ÆÆÄÄ¡ À¥¼­¹ö¿¡ Æ÷ÇÔµÈ
          Áö¿ø ÇÁ·Î±×·¥µéÀÌ´Ù. ÀÚµ¿À¸·Î À̵éÀ» ¼³Ä¡ÇÏÁö ¾Ê´Â´Ù.
          ±¸¼º°úÁ¤ÈÄ <code>support/</code> µð·ºÅ丮¿¡¼­ ÀÌ ÇÁ·Î±×·¥µéÀ»
          ãÀ» ¼ö ÀÖ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#log_server_status">log_server_status</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#split-logfile">split-logfile</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="log_server_status" id="log_server_status">log_server_status</a></h2>
          <p>ÀÌ perl ½ºÅ©¸³Æ®´Â cron µî¿¡¼­ ÀÚÁÖ ½ÇÇàÇϵµ·Ï ¼³°èµÇ¾ú´Ù.
          ÀÌ ½ºÅ©¸³Æ®¸¦ ¼­¹ö¿¡ ¿¬°áÇÏ¿© »óÅ Á¤º¸¸¦ ´Ù¿î·ÎµåÇÑ´Ù.
          ±×·±ÈÄ ÀÌ Á¤º¸¸¦ ÇÑÁÙ·Î Á¤¸®ÇÏ¿© ÆÄÀÏ¿¡ ±â·ÏÇÑ´Ù. ·Î±×ÆÄÀÏÀÇ
          À§Ä¡¸¦ ÁöÁ¤ÇÏ·Á¸é ½ºÅ©¸³Æ® ¾ÕºÎºÐÀÇ º¯¼ö¸¦ ¼öÁ¤ÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="split-logfile" id="split-logfile">split-logfile</a></h2>
          <p>ÀÌ perl ½ºÅ©¸³Æ®´Â °áÇÕµÈ À¥¼­¹ö Á¢±Ù·Î±×ÆÄÀÏÀÇ ³»¿ëÀ»
          ¿©·¯ ÆÄÀÏ·Î ³ª´«´Ù. °¢ ÁÙÀÇ Ã¹¹øÂ° Ç׸ñÀÌ ("<code>%v</code>"·Î
          Ãß°¡ÇÑ) °¡»óÈ£½ºÆ® Á¤º¸À̰í, ·Î±×ÆÄÀϸíÀº ÇöÀç µð·ºÅ丮¿¡
          °¡»óÈ£½ºÆ®¸í + "<code>.log</code>"¶ó°í °¡Á¤ÇÑ´Ù.</p>
      
          <p>°áÇÕµÈ ·Î±×ÆÄÀÏÀ» Ç¥ÁØÀÔ·ÂÀ¸·Î Àд´Ù. ÀÐÀº ³»¿ëÀ» ±âÁ¸ÀÇ
          ·Î±×ÆÄÀϵ鿡 Ãß°¡ÇÑ´Ù.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/other.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/other.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/other.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/other.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/other.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/apxs.html.ko.euc-kr�����������������������������������������������0000644�0000000�0000050�00000043045�13412755316�020746� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>apxs - APache eXtenSion µµ±¸ - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>apxs - APache eXtenSion µµ±¸</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/apxs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apxs.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apxs.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apxs.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p><code>apxs</code>´Â ¾ÆÆÄÄ¡ ÇÏÀÌÆÛÅØ½ºÆ® Àü¼Û ÇÁ·ÎÅäÄÝ
          (HTTP) ¼­¹öÀÇ È®Àå¸ðµâÀ» ÄÄÆÄÀÏÇÏ°í ¼³Ä¡ÇÏ´Â µµ±¸ÀÌ´Ù. ÀÌ
          µµ±¸´Â ¿©·¯ ¼Ò½º¿Í ¿ÀºêÁ§Æ®<var>ÆÄÀÏ</var>À» °¡Áö°í,
          <code class="module"><a href="../mod/mod_so.html">mod_so</a></code>ÀÇ <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> Áö½Ã¾î·Î ½ÇÇàÁß¿¡
          ¾ÆÆÄÄ¡ ¼­¹ö·Î ÀоîµéÀÏ ¼ö ÀÖ´Â µ¿Àû°øÀ¯°´Ã¼(DSO)¸¦ ¸¸µç´Ù.</p>
      
          <p>±×·¡¼­ ÀÌ·± È®À广½ÄÀ» »ç¿ëÇÏ·Á¸é Ç÷¡ÆûÀÌ DSO ±â´ÉÀ»
          Áö¿øÇÏ°í ¾ÆÆÄÄ¡ <code>httpd</code> ½ÇÇàÆÄÀÏÀ»
          <code class="module"><a href="../mod/mod_so.html">mod_so</a></code> ¸ðµâ°ú °°ÀÌ ÄÄÆÄÀÏÇØ¾ß ÇÑ´Ù.
          <code>apxs</code> µµ±¸´Â ÀÌ Á¶°ÇÀÌ ¸¸Á·ÇÏÁö¾ÊÀ¸¸é ½ÇÇàÇÏÁö
          ¾Ê´Â´Ù. Á÷Á¢ ¸í·É¾î¸¦ ½ÇÇàÇÏ¿© Á¶°ÇÀÌ ¸¸Á·ÇÏ´ÂÁö ¾Ë¾Æº¼
          ¼ö ÀÖ´Ù</p>
      
          <div class="example"><p><code>
            $ httpd -l
          </code></p></div>
      
          <p>¸ñ·Ï¿¡ <code class="module"><a href="../mod/mod_so.html">mod_so</a></code> ¸ðµâÀÌ ³ª¿Í¾ß ÇÑ´Ù. Á¶°ÇÀ»
          ¸¸Á·Çϸé <code>apxs</code> µµ±¸·Î DSO ¸ðµâÀ» ¼³Ä¡ÇÏ¿©
          ¾ÆÆÄÄ¡¼­¹öÀÇ ±â´ÉÀ» ½±°Ô È®ÀåÇÒ ¼ö ÀÖ´Ù:</p>
      
          <div class="example"><p><code>
            $ apxs -i -a -c mod_foo.c<br />
            gcc -fpic -DSHARED_MODULE -I/path/to/apache/include -c mod_foo.c<br />
            ld -Bshareable -o mod_foo.so mod_foo.o<br />
            cp mod_foo.so /path/to/apache/modules/mod_foo.so<br />
            chmod 755 /path/to/apache/modules/mod_foo.so<br />
            [activating module `foo' in /path/to/apache/etc/httpd.conf]<br />
            $ apachectl restart<br />
            /path/to/apache/sbin/apachectl restart: httpd not running, trying to start<br />
            [Tue Mar 31 11:27:55 1998] [debug] mod_so.c(303): loaded module foo_module<br />
            /path/to/apache/sbin/apachectl restart: httpd started<br />
            $ _
          </code></p></div>
      
          <p>¾Æ±Ô¸ÕÆ® <var>files</var>¿¡´Â C ¼Ò½ºÆÄÀÏ (.c) À̳ª
          ¿ÀºêÁ§Æ®ÆÄÀÏ (.o), ¶óÀ̺귯¸®¸ðÀ½ (.a)À» »ç¿ëÇÒ ¼ö ÀÖ´Ù.
          <code>apxs</code> µµ±¸´Â È®ÀåÀÚ¸¦ º¸°í ÀÚµ¿À¸·Î C ¼Ò½ºÆÄÀÏÀº
          ÄÄÆÄÀÏÇϰí, ¿ÀºêÁ§Æ®¿Í ¸ðÀ½ÆÄÀÏÀº ¸µÅ©¿¡¸¸ »ç¿ëÇÑ´Ù. ±×·¯³ª
          ÄÄÆÄÀÏÇÑ ¿ÀºêÁ§Æ®¸¦ »ç¿ëÇÏ·Á¸é µ¿ÀûÀ¸·Î ÀоîµéÀÏ ¼ö ÀÖ´Â
          °øÀ¯°´Ã¼·Î »ç¿ëÇϱâÀ§ÇØ ¹Ýµå½Ã ¿ÀºêÁ§Æ®¸¦ À§Ä¡µ¶¸³ÄÚµå(PIC,
          position independent code)·Î ÄÄÆÄÀÏÇØ¾ß ÇÑ´Ù. GCCÀÇ °æ¿ì
          <code>-fpic</code>À» »ç¿ëÇÏ¸é µÈ´Ù. ´Ù¸¥ C ÄÄÆÄÀÏ·¯´Â ¼³¸í¼­¸¦
          Âü°íÇϰųª <code>apxs</code>°¡ ¿ÀºêÁ§Æ®ÆÄÀÏÀ» ÄÄÆÄÀÏÇÒ¶§
          »ç¿ëÇÏ´Â ¿É¼ÇÀ» Âü°íÇ϶ó.</p>
      
          <p>¾ÆÆÄÄ¡ÀÇ DSO Áö¿ø¿¡ ´ëÇÑ ´õ ÀÚ¼¼ÇÑ ³»¿ëÀº
          <code class="module"><a href="../mod/mod_so.html">mod_so</a></code> ¹®¼­¸¦ Âü°íÇϰųª
          <code>src/modules/standard/mod_so.c</code> ¼Ò½ºÆÄÀÏÀ» ÀоîºÁ¶ó.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">°³¿ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">¿É¼Ç</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">¿¹Á¦</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="apachectl.html">apachectl</a></li><li><a href="httpd.html">httpd</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">°³¿ä</a></h2>
          <p><code><strong>apxs</strong> -<strong>g</strong>
          [ -<strong>S</strong> <var>name</var>=<var>value</var> ]
          -<strong>n</strong> <var>modname</var></code></p>
      
          <p><code><strong>apxs</strong> -<strong>q</strong>
          [ -<strong>S</strong> <var>name</var>=<var>value</var> ]
          <var>query</var> ...</code></p>
      
          <p><code><strong>apxs</strong> -<strong>c</strong>
          [ -<strong>S</strong> <var>name</var>=<var>value</var> ]
          [ -<strong>o</strong> <var>dsofile</var> ]
          [ -<strong>I</strong> <var>incdir</var> ]
          [ -<strong>D</strong> <var>name</var>=<var>value</var> ]
          [ -<strong>L</strong> <var>libdir</var> ]
          [ -<strong>l</strong> <var>libname</var> ]
          [ -<strong>Wc,</strong><var>compiler-flags</var> ]
          [ -<strong>Wl,</strong><var>linker-flags</var> ]
          <var>files</var> ...</code></p>
      
          <p><code><strong>apxs</strong> -<strong>i</strong>
          [ -<strong>S</strong> <var>name</var>=<var>value</var> ]
          [ -<strong>n</strong> <var>modname</var> ]
          [ -<strong>a</strong> ]
          [ -<strong>A</strong> ]
          <var>dso-file</var> ...</code></p>
      
          <p><code><strong>apxs</strong> -<strong>e</strong>
          [ -<strong>S</strong> <var>name</var>=<var>value</var> ]
          [ -<strong>n</strong> <var>modname</var> ]
          [ -<strong>a</strong> ]
          [ -<strong>A</strong> ]
          <var>dso-file</var> ...</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">¿É¼Ç</a></h2>
          <h3><a name="options.common" id="options.common">°øÅë ¿É¼Ç</a></h3>
            <dl>
            <dt><code>-n <var>modname</var></code></dt>
            <dd><code>-i</code> (install)°ú <code>-g</code> (template
            generation) ¿É¼ÇÀ» »ç¿ëÇÒ¶§ Á÷Á¢ ¸ðµâ¸íÀ» ÁöÁ¤ÇÑ´Ù. ÀÌ
            ¿É¼ÇÀ» »ç¿ëÇÏ¿© ¸ðµâ¸íÀ» Á÷Á¢ ÁöÁ¤ÇÑ´Ù. <code>-g</code>
            ¿É¼ÇÀ» »ç¿ëÇÑ´Ù¸é ÀÌ ¿É¼ÇÀ» ¹Ýµå½Ã »ç¿ëÇØ¾ßÇϰí,
            <code>-i</code> ¿É¼ÇÀ» »ç¿ëÇÑ´Ù¸é <code>apxs</code> µµ±¸´Â
            ¼Ò½º³ª (¸¶Áö¸· ½Ãµµ·Î) ÆÄÀϸíÀ» °¡Áö°í À̸§À» ÃßÃøÇÑ´Ù.</dd>
            </dl>
          
      
          <h3><a name="options.query" id="options.query">ÁúÀÇ ¿É¼Ç</a></h3>
            <dl>
            <dt><code>-q</code></dt>
            <dd><code>apxs</code>ÀÇ ¼³Á¤°ªÀ» ¾Ë¾Æ³½´Ù. <var>query</var>¿¡´Â
            ´ÙÀ½À» »ç¿ëÇÒ ¼ö ÀÖ´Ù: <code>CC</code>, <code>CFLAGS</code>,
            <code>CFLAGS_SHLIB</code>, <code>INCLUDEDIR</code>,
            <code>LD_SHLIB</code>, <code>LDFLAGS_SHLIB</code>,
            <code>LIBEXECDIR</code>, <code>LIBS_SHLIB</code>,
            <code>SBINDIR</code>, <code>SYSCONFDIR</code>, <code>TARGET</code>.
      
            <p>¼³Á¤À» Á÷Á¢ ¾Ë¾Æ³¾¶§ »ç¿ëÇÑ´Ù.</p>
            <div class="example"><p><code>
              INC=-I`apxs -q INCLUDEDIR`
            </code></p></div>
      
            <p>¿¹¸¦ µé¾î, ¾ÆÆÄÄ¡ C Çì´õÆÄÀÏÀ» Á÷Á¢ Á¢±ÙÇÑ´Ù¸é
            Makefile¿¡¼­ À§¿Í °°ÀÌ »ç¿ëÇÑ´Ù.</p></dd>
            </dl>
          
      
          <h3><a name="options.conf" id="options.conf">¼³Á¤ ¿É¼Ç</a></h3>
            <dl>
            <dt><code>-S <var>name</var>=<var>value</var></code></dt>
            <dd>ÀÌ ¿É¼ÇÀº À§¿¡¼­ ¼³¸íÇÑ apxs ¼³Á¤À» º¯°æÇÑ´Ù.</dd>
            </dl>
          
      
          <h3><a name="options.template" id="options.template">°ßº»(template) »ý¼º ¿É¼Ç</a></h3>
            <dl>
            <dt><code>-g</code></dt>
            <dd>ÇÏÀ§µð·ºÅ丮 <var>name</var>À» ¸¸µé°í (<code>-n</code>
            ¿É¼Ç Âü°í) ±×°÷¿¡ ÆÄÀÏ µÎ°³¸¦ ¸¸µç´Ù: ÇÑ ÆÄÀÏÀº
            <code>mod_<var>name</var>.c</code>¶ó´Â °ßº» ¸ðµâ¼Ò½ºÆÄÀÏ·Î,
            ÀÚ½ÅÀÇ ¸ðµâÀ» ¸¸µé¶§ °ßº»À¸·Î »ç¿ëÇϰųª apxs ±â´ÉÀ»
            ½ÃÇèÇØº¼¶§ »ç¿ëÇÑ´Ù. ´Ù¸¥ ÆÄÀÏÀº ÀÌ ¸ðµâÀ» ½±°Ô ÄÄÆÄÀÏÇϰí
            ¼³Ä¡ÇϱâÀ§ÇÑ <code>Makefile</code>ÀÌ´Ù.</dd>
            </dl>
          
      
          <h3><a name="options.dso" id="options.dso">DSO ÄÄÆÄÀÏ ¿É¼Ç</a></h3>
            <dl>
            <dt><code>-c</code></dt>
            <dd>ÄÄÆÄÀÏÀ» Áö½ÃÇÑ´Ù. ¸ÕÀú <var>files</var>¿¡¼­ C
            ¼Ò½ºÆÄÀϵé(.c)À» ¿ÀºêÁ§Æ®ÆÄÀÏ(.o)·Î ÄÄÆÄÀÏÇϰí,
            <var>files</var>ÀÇ ³ª¸ÓÁö ¿ÀºêÁ§Æ®ÆÄÀϵé(.o°ú .a)°ú
            ¸µÅ©ÇÏ¿© µ¿Àû°øÀ¯°´Ã¼ <var>dsofile</var>À» ¸¸µç´Ù.
            <code>-o</code> ¿É¼ÇÀ» »ç¿ëÇÏÁö¾ÊÀ¸¸é <var>files</var>ÀÇ
            ù¹øÂ° ÆÄÀÏ¸í¿¡¼­ À̸§À» ÃßÃøÇÏ¿© º¸Åë
            <code>mod_<var>name</var>.so</code>¸¦ »ç¿ëÇÑ´Ù.</dd>
      
            <dt><code>-o <var>dsofile</var></code></dt>
            <dd>»ý¼ºÇÒ µ¿Àû°øÀ¯°´Ã¼ ÆÄÀϸíÀ» Á÷Á¢ ÁöÁ¤ÇÑ´Ù. À̸§À»
            ÁöÁ¤ÇÏÁö¾Ê°í <var>files</var> ¸ñ·Ï¿¡¼­ À̸§À» ÃßÃøÇÏÁö
            ¸øÇÏ¸é ¸¶Áö¸·À¸·Î <code>mod_unknown.so</code>¸¦ À̸§À¸·Î
            »ç¿ëÇÑ´Ù.</dd>
      
            <dt><code>-D <var>name</var>=<var>value</var></code></dt>
            <dd>ÀÌ ¿É¼ÇÀ» ÄÄÆÄÀÏ ¸í·É¾î·Î Á÷Á¢ Àü´ÞÇÑ´Ù.
            ÄÄÆÄÀ϶§ ÀÚ½ÅÀÇ defineÀ» Ãß°¡ÇÑ´Ù.</dd>
      
            <dt><code>-I <var>incdir</var></code></dt>
            <dd>ÀÌ ¿É¼ÇÀ» ÄÄÆÄÀÏ ¸í·É¾î·Î Á÷Á¢ Àü´ÞÇÑ´Ù.
            ÄÄÆÄÀ϶§ include¸¦ ãÀ» µð·ºÅ丮¸¦ Ãß°¡ÇÑ´Ù.</dd>
      
            <dt><code>-L <var>libdir</var></code></dt>
            <dd>ÀÌ ¿É¼ÇÀ» ¸µÄ¿ ¸í·É¾î·Î Á÷Á¢ Àü´ÞÇÑ´Ù.
            ÄÄÆÄÀ϶§ ¶óÀ̺귯¸®¸¦ ãÀ» µð·ºÅ丮¸¦ Ãß°¡ÇÑ´Ù.</dd>
      
            <dt><code>-l <var>libname</var></code></dt>
            <dd>ÀÌ ¿É¼ÇÀ» ¸µÄ¿ ¸í·É¾î·Î Á÷Á¢ Àü´ÞÇÑ´Ù.
            ÄÄÆÄÀ϶§ »ç¿ëÇÒ ¶óÀ̺귯¸®¸¦ Ãß°¡ÇÑ´Ù.</dd>
      
            <dt><code>-Wc,<var>compiler-flags</var></code></dt>
            <dd>ÀÌ ¿É¼ÇÀº Ãß°¡ ¿É¼Ç <var>compiler-flags</var>¸¦
            <code>libtool --mode=compile</code> ¸í·É¾î·Î Àü´ÞÇÑ´Ù.
            ÄÄÆÄÀÏ·¯ ƯÀ¯ÀÇ ¿É¼ÇÀ» Ãß°¡ÇÒ¶§ »ç¿ëÇÑ´Ù.</dd>
      
            <dt><code>-Wl,<var>linker-flags</var></code></dt>
            <dd>ÀÌ ¿É¼ÇÀº Ãß°¡ ¿É¼Ç <var>linker-flags</var>¸¦
            <code>libtool --mode=link</code> ¸í·É¾î·Î Àü´ÞÇÑ´Ù. ¸µÄ¿
            ƯÀ¯ÀÇ ¿É¼ÇÀ» Ãß°¡ÇÒ¶§ »ç¿ëÇÑ´Ù.</dd>
            </dl>
          
      
          <h3><a name="options.dsoinstall" id="options.dsoinstall">DSO ¼³Ä¡°ú ¼³Á¤ ¿É¼Ç</a></h3>
          
            <dl>
            <dt><code>-i</code></dt>
            <dd>¼³Ä¡¸¦ Áö½ÃÇÑ´Ù. ¿©·¯ µ¿Àû°øÀ¯°´Ã¼¸¦ ¼­¹öÀÇ
            <var>modules</var> µð·ºÅ丮¿¡ ¼³Ä¡ÇÑ´Ù.</dd>
      
            <dt><code>-a</code></dt>
            <dd>¾ÆÆÄÄ¡ <code>httpd.conf</code> ¼³Á¤ÆÄÀÏ¿¡ ÀûÀýÇÑ
            <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> ÁÙÀ»
            Ãß°¡Çϰųª ÀÌ¹Ì ÀÖ´Ù¸é Ȱ¼ºÈ­ÇÏ¿© ¸ðµâÀ» »ç¿ëÇϵµ·Ï
            ¸¸µç´Ù.</dd>
      
            <dt><code>-A</code></dt>
            <dd><code>-a</code>¿Í ºñ½ÁÇÏÁö¸¸, <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> Áö½Ã¾î ¾Õ¿¡
            ¿ì¹°Á¤ÀÚ(<code>#</code>)¸¦ ºÙÀδÙ. <em>Áï</em>, ÇöÀç´Â
            »ç¿ëÇÏÁö¾ÊÁö¸¸ ³ªÁß¿¡ »ç¿ëÇÒ ¼ö ÀÖµµ·Ï ¸ðµâÀ» ÁغñÇÑ´Ù.</dd>
      
            <dt><code>-e</code></dt>
            <dd>ÆíÁýÀ» Áö½ÃÇÑ´Ù. <code>-a</code> ȤÀº <code>-A</code>
            ¿É¼Ç°ú °°ÀÌ »ç¿ëÇÒ ¼ö ÀÖÀ¸¸ç, <code>-i</code> ¸í·É°ú
            ºñ½ÁÇÏÁö¸¸ ¸ðµâÀ» ¼³Ä¡ÇÏÁö¾Ê°í ¾ÆÆÄÄ¡
            <code>httpd.conf</code> ¼³Á¤ÆÄÀϸ¸ ÆíÁýÇÑ´Ù.</dd>
            </dl>
          
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">¿¹Á¦</a></h2>
          <p>¾ÆÆÄÄ¡¼­¹öÀÇ ±â´ÉÀ» È®ÀåÇÏ´Â <code>mod_foo.c</code>¶ó´Â
          ¾ÆÆÄÄ¡ ¸ðµâÀÌ ÀÖ´Ù°í °¡Á¤ÇÏÀÚ. ¸ÕÀú ´ÙÀ½ ¸í·É¾î¸¦ »ç¿ëÇÏ¿©
          C ¼Ò½º¸¦ ¾ÆÆÄÄ¡ ¼­¹ö°¡ ÀоîµéÀÏ °øÀ¯°´Ã¼·Î ÄÄÆÄÀÏÇÑ´Ù:</p>
      
          <div class="example"><p><code>
            $ apxs -c mod_foo.c<br />
            /path/to/libtool --mode=compile gcc ... -c mod_foo.c<br />
            /path/to/libtool --mode=link gcc ... -o mod_foo.la mod_foo.slo<br />
            $ _
          </code></p></div>
      
          <p>±×¸®°í ÀÌ °øÀ¯°´Ã¼¸¦ ÀоîµéÀÌ´Â <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> Áö½Ã¾î¸¦ ¾ÆÆÄÄ¡
          ¼³Á¤¿¡ Ãß°¡ÇÑ´Ù. <code>apxs</code>´Â ÀÚµ¿À¸·Î °øÀ¯°´Ã¼¸¦
          "modules" µð·ºÅ丮¿¡ ¼³Ä¡Çϰí <code>httpd.conf</code> ÆÄÀÏÀ»
          ¾Ë¸Â°Ô ¼öÁ¤ÇÏ¿© °£´ÜÈ÷ ÀÛ¾÷À» ¸¶Ä£´Ù. ´ÙÀ½ °°ÀÌ ½ÇÇàÇÑ´Ù:</p>
      
          <div class="example"><p><code>
            $ apxs -i -a mod_foo.la<br />
            /path/to/instdso.sh mod_foo.la /path/to/apache/modules<br />
            /path/to/libtool --mode=install cp mod_foo.la /path/to/apache/modules
            ...
            chmod 755 /path/to/apache/modules/mod_foo.so<br />
            [/path/to/apache/conf/httpd.conf¿¡¼­ `foo' ¸ðµâÀ» Ȱ¼ºÈ­ÇÑ´Ù]<br />
            $ _
          </code></p></div>
      
          <p>±×·¯¸é ´ÙÀ½°ú °°Àº ÁÙÀ»</p>
      
          <div class="example"><p><code>
            LoadModule foo_module modules/mod_foo.so
          </code></p></div>
      
          <p>¼³Á¤ÆÄÀÏ¿¡ ¾ø´Ù¸é Ãß°¡ÇÑ´Ù. ÀÌ ¼³Á¤À» ±âº»ÀûÀ¸·Î »ç¿ëÇÏÁö
          ¾Ê´Â´Ù¸é <code>-A</code> ¿É¼ÇÀ» »ç¿ëÇÑ´Ù. <em>Áï</em></p>
      
          <div class="example"><p><code>
            $ apxs -i -A mod_foo.c
          </code></p></div>
      
          <p>apxs¸¦ ½±°Ô »ç¿ëÇÏ·Á°í ´ÙÀ½°ú °°ÀÌ ¾ÆÆÄÄ¡ ¸ðµâ °ßº»°ú
          MakefileÀ» ¸¸µé ¼ö ÀÖ´Ù:</p>
      
          <div class="example"><p><code>
            $ apxs -g -n foo<br />
            Creating [DIR]  foo<br />
            Creating [FILE] foo/Makefile<br />
            Creating [FILE] foo/modules.mk<br />
            Creating [FILE] foo/mod_foo.c<br />
            Creating [FILE] foo/.deps<br />
            $ _
          </code></p></div>
      
          <p>±×·±ÈÄ ¹Ù·Î °ßº» ¸ðµâÀ» °øÀ¯°´Ã¼·Î ÄÄÆÄÀÏÇÏ¿© ¾ÆÆÄÄ¡
          ¼­¹ö°¡ Àеµ·ÏÇÑ´Ù:</p>
      
          <div class="example"><p><code>
            $ cd foo<br />
            $ make all reload<br />
            apxs -c mod_foo.c<br />
            /path/to/libtool --mode=compile gcc ... -c mod_foo.c<br />
            /path/to/libtool --mode=link gcc ... -o mod_foo.la mod_foo.slo<br />
            apxs -i -a -n "foo" mod_foo.la<br />
            /path/to/instdso.sh mod_foo.la /path/to/apache/modules<br />
            /path/to/libtool --mode=install cp mod_foo.la /path/to/apache/modules
            ...
            chmod 755 /path/to/apache/modules/mod_foo.so<br />
            [/path/to/apache/conf/httpd.conf¿¡¼­ `foo' ¸ðµâÀ» Ȱ¼ºÈ­ÇÑ´Ù]<br />
            apachectl restart<br />
            /path/to/apache/sbin/apachectl restart: httpd not running, trying to start<br />
            [Tue Mar 31 11:27:55 1998] [debug] mod_so.c(303): loaded module foo_module<br />
            /path/to/apache/sbin/apachectl restart: httpd started<br />
            $ _
          </code></p></div>
      
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/apxs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apxs.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apxs.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apxs.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/apxs.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/apachectl.html.tr.utf8��������������������������������������������0000644�0000000�0000050�00000032415�13447004010�021414� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>apachectl - Apache HTTP Sunucusu Denetim Arayüzü - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>apachectl - Apache HTTP Sunucusu Denetim Arayüzü</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/apachectl.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apachectl.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apachectl.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apachectl.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code><strong>apachectl</strong></code> Apache Hiper Metin Aktarım
            Protokolü (HTTP) sunucusu için bir denetim aracıdır. Sistem
            yöneticisinin Apache <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong> artalan
            sürecini denetimi altında tutabilmesine yardımcı olmak amacıyla
            tasarlanmıştır.</p>
      
          <p><code><strong>apachectl</strong></code> iki kipte iÅŸleyebilir.
            İlkinde, <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong> komutu için basit
            bir önyüz gibi davranarak, gerekli ortam değişkenlerini atar ve
            belirtilen komut satırı seçenekleriyle
            <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong> sürecini başlatır. İkinci
            kipte ise, <code><strong>apachectl</strong></code> bir SysV baÅŸlatma
            betiÄŸi olarak <code><strong>start</strong></code>,
            <code><strong>restart</strong></code>,
            <code><strong>stop</strong></code> gibi tek sözcüklük basit argümanlar
            alır ve bunları uygun sinyallere dönüştürerek
            <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong>'ye gönderir.</p>
      
          <p>Eğer Apache kurulumunuzda standart dışı dosya yolları kullanmışsanız,
            <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong> programına uygun yolları
            atamak için <code><strong>apachectl</strong></code> betiğini elden
            geçirmelisiniz. Bu arada gerek gördüğünüz
            <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong> komut satırı argümanlarını da
            belirtebilirsiniz. Ayrıntılar için betik içindeki açıklamalara
            bakınız.</p>
      
          <p><code><strong>apachectl</strong></code> betiği başarı durumunda 0
            çıkış değeri ile döner. Bir hata durumunda ise sıfırdan farklı bir
            değerle döner. Daha fazla bilgi için betik içindeki açıklamalara
            bakınız.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Kullanım</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="../invoking.html">Apache'nin Başlatılması</a></li><li><a href="../stopping.html">Apache'nin Durdurulması</a></li><li><a href="../configuring.html">Yapılandırma Dosyaları</a></li><li><a href="../platform/">Platform Belgeleri</a></li><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Kullanım</a></h2>
      
          <p><code><strong>apachectl</strong></code> önyüz kipinde çalıştığında
            <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong> programının bütün komut
            satırı argümanlarını kabul edebilir.</p>
      
          <p><code><strong>apachectl</strong> [ <var>httpd-argümanları</var> ]
          </code></p>
      
          <p>SysV baÅŸlatma betiÄŸi kipinde ise,
            <code><strong>apachectl</strong></code> aşağıda tanımlanan basit, tek
            sözcüklük komutları kabul eder.</p>
      
          <p><code><strong>apachectl</strong> <var>komut</var></code></p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
      
          <p>Burada sadece SysV başlatma betiğine özgü seçeneklere yer verilmiştir.
            Diğer argümanlar için <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong> kılavuz
            sayfasına bakınız.</p>
      
          <dl>
            <dt><code><strong>start</strong></code></dt>
            <dd>Apache <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong> artalan sürecini
              başlatır. Zaten çalışmaktaysa bir hata verir. <code><strong>apachectl
              -k start</strong></code> komutuna eÅŸdeÄŸerdir.</dd>
      
            <dt><code><strong>stop</strong></code></dt>
            <dd>Apache <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong> artalan sürecini
              durdurur. <code><strong>apachectl -k stop</strong></code> komutuna
              eÅŸdeÄŸerdir.</dd>
      
            <dt><code><strong>restart</strong></code></dt>
            <dd>Apache <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong> artalan sürecini
              yeniden başlatır; çalışmıyorsa çalıştırılır. Artalan sürecinin ölü
              olmadığından emin olmak için yeniden başlatmadan önce
              <code><strong>configtest</strong></code> seçeneği verilmiş gibi
              yapılandırma dosyaları sınanır. <code><strong>apachectl -k
              restart</strong></code> komutuna eÅŸdeÄŸerdir.</dd>
      
            <dt><code><strong>fullstatus</strong></code></dt>
            <dd><strong><code class="module"><a href="../mod/mod_status.html">mod_status</a></code></strong> üzerinden tam bir
              durum raporu gösterir. Bunun çalışması için sunucuda
              <strong><code class="module"><a href="../mod/mod_status.html">mod_status</a></code></strong> etkinleştirilmiş olmalı
              ve sisteminizde <code><strong>lynx</strong></code> gibi bir metin
              kipi HTTP tarayıcı kurulu olmalıdır. Durum raporuna erişmek için
              kullanılacak adres betik içinde <code>STATUSURL</code> değişkenine
              atanabilir.</dd>
      
            <dt><code><strong>status</strong></code></dt>
            <dd>Özet halinde bir durum raporu gösterir. O an sunulmakta olan
              isteklerin gösterilmemesi dışında
              <code><strong>fullstatus</strong></code> seçeneği gibidir.</dd>
      
            <dt><code><strong>graceful</strong></code></dt>
            <dd>Apache <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong> artalan sürecini
              <em>nazikçe</em> yeniden başlatır; çalışmıyorsa çalıştırılır. O an
              hizmet sunmakta olan çocuk süreçleri hemen durdurmaması dışında
              normal yeniden başlatma gibidir. Bir yan etki olarak eski günlük
              dosyaları hemen kapatılmaz. Yani, günlük dosyalarını döndüren bir
              betik kullanıyorsanız yenilerini başlatmadan önce eski dosyaların
              tamamen kapandığından emin olmak için belli bir süre beklemeniz
              gerekecektir. Artalan sürecinin ölü olmadığından emin olmak için
              yeniden başlatmadan önce  <code><strong>configtest</strong></code>
              seçeneği verilmiş gibi yapılandırma dosyaları sınanır.
              <code><strong>apachectl -k graceful</strong></code> komutuna
              eÅŸdeÄŸerdir.</dd>
      
            <dt><code><strong>graceful-stop</strong></code></dt>
            <dd>Apache <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong> artalan sürecini
              <em>nazikçe</em> durdurur. O an hizmet sunmakta olan çocuk süreçleri
              hemen durdurmaması dışında normal durdurma gibidir. Bir yan etki
              olarak eski günlük dosyaları hemen kapatılmaz.
              <code><strong>apachectl -k graceful-stop</strong></code> komutuna
              eÅŸdeÄŸerdir.</dd>
      
            <dt><code><strong>configtest</strong></code></dt>
            <dd>Yapılandırma dosyasında sözdizimi denetimi yapılmasını sağlar.
              Yapılandırma dosyaları çözümlenir ve bir sorun yoksa bir <code>Syntax
              Ok</code> raporu verilir fakat, bir hata varsa o hataya iliÅŸkin
              ayrıntılı bilgi verilir. <code><strong>apachectl -t</strong></code>
              komutuna eÅŸdeÄŸerdir.</dd>
      
          </dl>
      
          <p>Aşağıdaki seçenek eski sürümlerde kullanılmaktaydı, fakat artık
            kullanılmamaktadır.</p>
      
          <dl>
            <dt><code>startssl</code></dt>
            <dd><strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong> programını SSL destekli
              başlatmak için, yapılandırma dosyanızı ilgili yönergeleri içermesi
              için elden geçirmeli ve normal <code><strong>apachectl
              start</strong></code> komutunu kullanmalısınız.</dd>
          </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/apachectl.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apachectl.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apachectl.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apachectl.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/apachectl.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htcacheclean.html.fr.utf8�����������������������������������������0000644�0000000�0000050�00000036744�13523273316�022101� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htcacheclean - Nettoyage du cache sur disque - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>htcacheclean - Nettoyage du cache sur disque</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/htcacheclean.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htcacheclean.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htcacheclean.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htcacheclean.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">Cette traduction peut être périmée. Vérifiez la version
                  anglaise pour les changements récents.</div>
      
          <p><code>htcacheclean</code> permet de maintenir la taille de
          l'espace de stockage réservé à <code class="module"><a href="../mod/mod_disk_cache.html">mod_disk_cache</a></code> en
          dessous d'une limite de taille donnée ou d'inodes utilisés. Cet
          utilitaire peut s'exécuter
          soit manuellement, soit en mode démon. Lorsqu'il fonctionne en mode
          démon, il se met en attente en arrière-plan et recherche à
          intervalles réguliers dans le répertoire du cache les contenus à
          supprimer. Pour arrêter proprement le démon, vous pouvez lui envoyer
          un signal TERM ou INT. Lorsqu'il est lancé manuellement, une
          recherche des contenus du cache qui peuvent être supprimés est
          effectuée une seule fois. Si une ou plusieurs URLs sont spécifiées,
          chacune d'entre elles sera supprimée du cache, si elle est présente.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Syntaxe</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#delete">Suppression d'une URL particulière</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#list">Affichage des URLs présentes dans le cache</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exit">Valeur renvoyée</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_disk_cache.html">mod_disk_cache</a></code></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Syntaxe</a></h2>
          <p><code><strong>htcacheclean</strong>
          [ -<strong>D</strong> ]
          [ -<strong>v</strong> ]
          [ -<strong>t</strong> ]
          [ -<strong>r</strong> ]
          [ -<strong>n</strong> ]
          [ -<strong>R</strong><var>arrondi</var> ]
          -<strong>p</strong><var>chemin</var>
          [-<strong>l</strong><var>limite</var>|
          -<strong>L</strong><var>limite</var>]</code></p>
      
          <p><code><strong>htcacheclean</strong>
          [ -<strong>n</strong> ]
          [ -<strong>t</strong> ]
          [ -<strong>i</strong> ]
          [ -<strong>P</strong><var>fichier-pid</var> ]
          [ -<strong>R</strong><var>arrondi</var> ]
          -<strong>d</strong><var>intervalle</var>
          -<strong>p</strong><var>chemin</var>
          [-<strong>l</strong><var>limite</var>|
          -<strong>L</strong><var>limite</var>]</code></p>
      
          <p><code><strong>htcacheclean</strong>
          [ -<strong>v</strong> ]
          [ -<strong>R</strong><var>arrondi</var> ]
          -<strong>p</strong><var>chemin</var>
          [ -<strong>a</strong> ]
          [ -<strong>A</strong> ]</code></p>
      
          <p><code><strong>htcacheclean</strong>
          [ -<strong>D</strong> ]
          [ -<strong>v</strong> ]
          [ -<strong>t</strong> ]
          [ -<strong>R</strong><var>arrondi</var> ]
          -<strong>p</strong><var>chemin</var>
          <var>url</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code>-d<var>intervalle</var></code></dt>
          <dd>Configure en mode démon et planifie le nettoyage du cache toutes
          les <var>intervalle</var> minutes. Cette option et les options
          <code>-D</code>, <code>-v</code> et <code>-r</code> s'excluent
          mutuellement. Pour arrêter le démon proprement, il suffit de lui
          envoyer un signal <code>SIGTERM</code> ou <code>SIGINT</code>.</dd>
      
          <dt><code>-D</code></dt>
          <dd>Le programme s'exécute mais ne supprime aucun contenu ("dry run"). Cette
          option et l'option <code>-d</code> s'excluent mutuellement. Si ce mode
          est combiné avec la suppression des répertoires avec
          <code>-t</code>, les inodes signalés comme supprimés dans les
          statistiques ne peuvent pas prendre en compte les répertoires
          supprimés, et seront marqués en tant qu'estimation.</dd>
      
          <dt><code>-v</code></dt>
          <dd>Exécution verbeuse et affichage de statistiques. Cette
          option et l'option <code>-d</code> s'excluent mutuellement.</dd>
      
          <dt><code>-r</code></dt>
          <dd>Nettoyage en profondeur. Le serveur web Apache doit être arrêté
          (dans le cas contraire, il risque de rester des déchets dans le
          cache). Cette option implique l'option <code>-t</code> et s'exclue
          mutuellement avec l'option <code>-d</code>.</dd>
      
          <dt><code>-n</code></dt>
          <dd>Exécution en retrait. L'exécution du programme est ralentie en
          faveur des autres processus. <code>htcacheclean</code> s'interrompt
          de temps en temps de façon à ce que a) les entrées/sorties disque
          soient retardées et b) que le noyau puisse mettre ce temps
          processeur à disposition des autres processus.</dd>
      
          <dt><code>-t</code></dt>
          <dd>Supprime tous les répertoires vides. Par défaut, seuls les
          fichiers sont supprimés du cache ; avec certaines configurations,
          cependant, un grand nombre de répertoires sont créés et méritent que
          l'on y prête attention. Si votre configuration nécessite un grand
          nombre de répertoires, au point que le remplissage de la table
          d'inodes ou d'allocation de fichiers puisse poser problème,
          l'utilisation de cette option est conseillée.</dd>
      
          <dt><code>-p<var>chemin</var></code></dt>
          <dd>Définit <var>chemin</var> comme répertoire racine du cache sur
          disque. Cette valeur doit correspondre à celle spécifiée par la
          directive <code class="directive"><a href="../mod/mod_disk_cache.html#cacheroot">CacheRoot</a></code>.</dd>
      
          <dt><code>-P<var>fichier-pid</var></code></dt>
          <dd>Permet de spécifier <var>fichier-pid</var> comme nom du fichier
          dans le lequel sera enregistré l'identifiant du processus en mode
          démon.</dd>
      
          <dt><code>-R<var>round</var></code></dt>
          <dd>Permet de spécifier le plus petit commun multiple de la taille
          du cache, afin de tenir compte de la taille des blocs. Définir ce
          paramètre à la taille d'un bloc de la partition du cache.</dd>
      
          <dt><code>-l<var>limite</var></code></dt>
          <dd>Définit <var>limite</var> comme la taille maximale du cache sur
          disque. La valeur s'exprime par défaut en octets (ou en ajoutant le
          suffixe <code>B</code> à la valeur). Ajoutez le suffixe
          <code>K</code> pour KOctets ou <code>M</code> pour MOctets.</dd>
      
          <dt><code>-L<var>limite</var></code></dt>
          <dd>Spécifie <var>limite</var> comme la limite totale en inodes du
          cache disque.</dd>
      
          <dt><code>-i</code></dt>
          <dd>Exécution intelligente. Le programme ne s'exécute que lorsque le
          cache sur disque a été modifié. Cette option ne peut s'utiliser
          qu'avec l'option <code>-d</code>.</dd>
      
          <dt><code>-a</code></dt>
          <dd>Affiche la liste des URLs actuellement stockées dans le cache.
          Les variantes de la même URL seront listées une seule fois par
          variante.</dd>
      
          <dt><code>-A</code></dt>
          <dd>Affiche la liste des URLs actuellement stockées dans le cache,
          ainsi que leurs attributs dans l'ordre suivant : url, header size,
          body size, status, entity version, date, expiry, request time,
          response time, body present, head request.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="delete" id="delete">Suppression d'une URL particulière</a></h2>
          <p>Si une ou plusieurs URLs sont passées en argument à
          <code>htcacheclean</code>, chacune d'entre elles sera supprimée du
          cache. S'il existe plusieurs variantes de ces URLs, elles seront
          toutes supprimées.</p>
      
          <p>Lorsqu'une URL mandatée en inverse doit être supprimée, l'URL
          effective est construite à partir de l'en-tête
          <strong>Host</strong>, du <strong>port</strong>, du
          <strong>chemin</strong> et de la <strong>requête</strong>. Notez que
          le '?' doit toujours être spécifié explicitement dans l'URL, qu'une
          chaîne de paramètres soit présente ou non. Par exemple, pour
          supprimer le chemin <strong>/</strong> du serveur
          <strong>localhost</strong>, l'URL devra être spécifiée comme suit :
          <strong>http://localhost:80/?</strong>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="list" id="list">Affichage des URLs présentes dans le cache</a></h2>
          <p>Les options <code>-a</code> ou <code>-A</code> permettent
          d'afficher les URLs présentes dans le cache telles qu'elles s'y
          trouvent, une URL par ligne. L'option <code>-A</code> affiche
          l'entrée du cache complète pour chaque URL, avec ses différents
          champs dans l'ordre suivant :</p>
      
          <dl>
              <dt>url</dt><dd>L'URL de l'entrée considérée.</dd>
              <dt>header size</dt><dd>La taille de l'en-tête en octets.</dd>
              <dt>body size</dt><dd>La taille du corps en octets.</dd>
              <dt>status</dt><dd>Etat de la réponse en cache.</dd>
              <dt>entity version</dt><dd>Le nombre de fois que cette entrée a
      	été revalidée sans être effacée.</dd>
              <dt>date</dt><dd>Date de la réponse.</dd>
              <dt>expiry</dt><dd>Date d'expiration de la réponse.</dd>
              <dt>request time</dt><dd>Date du début de la requête.</dd>
              <dt>response time</dt><dd>Date de la fin de la requête.</dd>
              <dt>body present</dt><dd>Ce champ contient la valeur 0 si aucun
      	corps n'est stocké avec cette requête, 1 dans le cas contraire.</dd>
              <dt>head request</dt><dd>Ce champ contient la valeur 1 si
      	l'entrée comporte une requête HEAD en cache sans corps, 0 dans
      	le cas contraire.</dd>
          </dl>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exit" id="exit">Valeur renvoyée</a></h2>
          <p><code>htcacheclean</code> renvoie zéro ("true") si toutes les
          opérations se sont déroulées normalement, et <code>1</code> dans le
          cas contraire. Si une URL est spécifiée, et si cette URL était
          présente dans le cache et a été supprimée avec succès,
          <code>htcacheclean</code> renvoie <code>0</code>, et <code>2</code>
          dans le cas contraire. Si une erreur est survenue au cours de la
          suppression de l'URL, <code>htcacheclean</code> renvoie
          <code>1</code>.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/htcacheclean.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htcacheclean.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htcacheclean.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htcacheclean.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htcacheclean.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������httpd-2.4.41/docs/manual/programs/index.html.zh-cn.utf8���������������������������������������������0000644�0000000�0000050�00000015030�13412755316�021201� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="zh-cn" xml:lang="zh-cn"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache HTTP æœåŠ¡å™¨ä¸Žæ”¯æŒç¨‹åº - Apache HTTP æœåС噍 版本 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">模å—</a> | <a href="../mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="../glossary.html">术语</a> | <a href="../sitemap.html">网站导航</a></p>
      <p class="apache">Apache HTTP æœåŠ¡å™¨ç‰ˆæœ¬ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP æœåС噍</a> &gt; <a href="http://httpd.apache.org/docs/">文档</a> &gt; <a href="../">版本 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache HTTP æœåŠ¡å™¨ä¸Žæ”¯æŒç¨‹åº</h1>
      <div class="toplang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="../en/programs/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/programs/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/programs/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/programs/" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">此翻译å¯èƒ½è¿‡æœŸã€‚è¦äº†è§£æœ€è¿‘的更改,请阅读英文版。</div>
      
          <p>本页æè¿°äº† Apache HTTP æœåŠ¡å™¨åŒ…å«çš„æ‰€æœ‰å¯æ‰§è¡Œç¨‹åºã€‚</p>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="index" id="index">索引</a></h2>
      
          <dl>
            <dt><code class="program"><a href="../programs/httpd.html">httpd</a></code></dt>
      
            <dd>Apache æœåŠ¡å™¨ã€‚</dd>
      
            <dt><code class="program"><a href="../programs/apachectl.html">apachectl</a></code></dt>
      
            <dd>Apache HTTP æœåŠ¡å™¨æŽ§åˆ¶å·¥å…·ã€‚</dd>
      
            <dt><code class="program"><a href="../programs/ab.html">ab</a></code></dt>
      
            <dd>Apache HTTP æœåŠ¡å™¨æ€§èƒ½åŸºå‡†å·¥å…·ã€‚</dd>
      
            <dt><code class="program"><a href="../programs/apxs.html">apxs</a></code></dt>
      
            <dd>Apache 扩展工具。</dd>
      
            <dt><code class="program"><a href="../programs/configure.html">configure</a></code></dt>
      
            <dd>é…ç½®æºä»£ç ã€‚</dd>
      
            <dt><code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code></dt>
      
            <dd>为基本认è¯åˆ›å»ºå’Œæ›´æ–° DBM æ ¼å¼çš„ç”¨æˆ·è®¤è¯æ–‡ä»¶ã€‚</dd>
      
            <dt><code class="program"><a href="../programs/fcgistarter.html">fcgistarter</a></code></dt>
      
            <dd>å¯åЍ FastCGI 程åºã€‚</dd>
      
            <dt><code class="program"><a href="../programs/htcacheclean.html">htcacheclean</a></code></dt>
            <dd>清ç†ç£ç›˜ç¼“存。</dd>
      
            <dt><code class="program"><a href="../programs/htdigest.html">htdigest</a></code></dt>
      
            <dd>为摘è¦è®¤è¯åˆ›å»ºå’Œæ›´æ–°ç”¨æˆ·è®¤è¯æ–‡ä»¶ã€‚</dd>
      
            <dt><code class="program"><a href="../programs/htdbm.html">htdbm</a></code></dt>
      
            <dd>æ“作 DBM å¯†ç æ•°æ®åº“。</dd>
      
            <dt><code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code></dt>
      
            <dd>为基本认è¯åˆ›å»ºå’Œæ›´æ–°ç”¨æˆ·è®¤è¯æ–‡ä»¶ã€‚</dd>
      
            <dt><code class="program"><a href="../programs/httxt2dbm.html">httxt2dbm</a></code></dt>
      
            <dd>为 RewriteMap 创建 dbm 文件。</dd>
      
            <dt><code class="program"><a href="../programs/logresolve.html">logresolve</a></code></dt>
      
            <dd>å°† Apache 日志文件中的 IP 地å€è§£æžåˆ°ä¸»æœºå称。</dd>
      
            <dt><a href="other.html#log_server_status">log_server_status</a></dt>
      
            <dd>周期性的记录æœåŠ¡å™¨çŠ¶æ€ã€‚</dd>
      
            <dt><code class="program"><a href="../programs/rotatelogs.html">rotatelogs</a></code></dt>
      
            <dd>ä¸å…³é—­ Apache è€Œåˆ‡æ¢æ—¥å¿—文件。</dd>
      
            <dt><a href="other.html#split-logfile">split-logfile</a></dt>
      
            <dd>将多个虚拟主机的日志文件按照主机拆分。</dd>
      
            <dt><code class="program"><a href="../programs/suexec.html">suexec</a></code></dt>
      
            <dd>执行外部程åºå‰åˆ‡æ¢ç”¨æˆ·ã€‚</dd>
          </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="../en/programs/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/programs/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/programs/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/programs/" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />基于 <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> 许å¯è¯.</p>
      <p class="menu"><a href="../mod/">模å—</a> | <a href="../mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="../glossary.html">术语</a> | <a href="../sitemap.html">网站导航</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/fcgistarter.html.en�����������������������������������������������0000644�0000000�0000050�00000015005�13412755316�021107� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>fcgistarter - Start a FastCGI program - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>fcgistarter - Start a FastCGI program</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/fcgistarter.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/fcgistarter.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/fcgistarter.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p />
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#note">Note</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_proxy_fcgi.html">mod_proxy_fcgi</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="note" id="note">Note</a></h2>
            <p>Currently only works on Unix systems.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
          <p><code><strong>fcgistarter</strong>
          -<strong>c</strong> <var>command</var>
          -<strong>p</strong> <var>port</var>
          [ -<strong>i</strong> <var>interface</var> ]
          -<strong>N</strong> <var>num</var>
          </code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code>-c <var>command</var></code></dt>
          <dd>FastCGI program</dd>
      
          <dt><code>-p <var>port</var></code></dt>
          <dd>Port which the program will listen on</dd>
      
          <dt><code>-i <var>interface</var></code></dt>
          <dd>Interface which the program will listen on</dd>
      
          <dt><code>-N <var>num</var></code></dt>
          <dd>Number of instances of the program</dd>
      
          </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/fcgistarter.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/fcgistarter.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/fcgistarter.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/fcgistarter.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/ab.html.fr.utf8���������������������������������������������������0000644�0000000�0000050�00000051203�13412755316�020046� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>ab - L'outil de test des performances du serveur HTTP
      Apache - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>ab - L'outil de test des performances du serveur HTTP
      Apache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/ab.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/ab.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/ab.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/ab.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>ab</code> est un utilitaire qui vous permet de tester les
          performances de votre serveur HTTP Apache. Il a été conçu pour vous
          donner une idée du degré de performances de votre installation
          d'Apache. Il vous permet en particulier de déterminer le nombre de
          réquêtes que votre installation d'Apache est capable de servir par
          seconde.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Syntaxe</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#output">Sortie</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#bugs">Bogues</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Syntaxe</a></h2>
          <p><code><strong>ab</strong>
          [ -<strong>A</strong> <var>nom-utilisateur</var>:<var>mot-de-passe</var> ]
          [ -<strong>b</strong> <var>taille-tampon</var> ]
          [ -<strong>B</strong> <var>adresse-locale</var> ]
          [ -<strong>c</strong> <var>simultanéité</var> ]
          [ -<strong>C</strong> <var>nom-cookie</var>=<var>valeur</var> ]
          [ -<strong>d</strong> ]
          [ -<strong>e</strong> <var>fichier-csv</var> ]
          [ -<strong>E</strong> <var>fichier du certificat client</var> ]
          [ -<strong>f</strong> <var>protocole</var> ]
          [ -<strong>g</strong> <var>fichier-gnuplot</var> ]
          [ -<strong>h</strong> ]
          [ -<strong>H</strong> <var>en-tête-personnalisé</var> ]
          [ -<strong>i</strong> ]
          [ -<strong>k</strong> ]
          [ -<strong>l</strong> ]
          [ -<strong>m</strong> <var>HTTP-method</var> ]
          [ -<strong>n</strong> <var>requêtes</var> ]
          [ -<strong>p</strong> <var>fichier-POST</var> ]
          [ -<strong>P</strong>
          <var>nom-utilisateur-mandataire</var>:<var>mot-de-passe</var> ]
          [ -<strong>q</strong> ]
          [ -<strong>r</strong> ]
          [ -<strong>s</strong> <var>timeout</var> ]
          [ -<strong>S</strong> ]
          [ -<strong>t</strong> <var>limite-de-durée</var> ]
          [ -<strong>T</strong> <var>type-de-contenu</var> ]
          [ -<strong>u</strong> <var>fichier PUT</var> ]
          [ -<strong>v</strong> <var>verbosité</var>]
          [ -<strong>V</strong> ]
          [ -<strong>w</strong> ]
          [ -<strong>x</strong> <var>&lt;table&gt;-attributs</var> ]
          [ -<strong>X</strong> <var>mandataire</var>[:<var>port</var>] ]
          [ -<strong>y</strong> <var>&lt;tr&gt;-attributs</var> ]
          [ -<strong>z</strong> <var>&lt;td&gt;-attributs</var> ]
          [ -<strong>Z</strong> <var>algorithme-chiffrement</var> ]
          [http[s]://]<var>nom-serveur</var>[:<var>port</var>]/<var>chemin</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code>-A <var>nom-utilisateur</var>:<var>mot-de-passe</var></code></dt>
          <dd>Fournit le support d'une authentification de base vers le
          serveur. Les nom-utilisateur et mot-de-passe sont séparés par un
          seul caractère <code>:</code> et transmis sous forme codée base64.
          La chaîne est envoyée que le serveur en ait besoin ou non (qu'il ait
          renvoyé un code "401 authentication needed" ou non).</dd>
      
          <dt><code>-b <var>taille-tampon</var></code></dt>
          <dd>Taille du tampon d'émission/réception TCP, en octets.</dd>
      
          <dt><code>-B <var>adresse-locale</var></code></dt>
          <dd>Adresse à laquelle se rattacher lors des connexions sortantes.</dd>
      
          <dt><code>-c <var>simultanéité</var></code></dt>
          <dd>Nombre de requêtes à effectuer simultanément. Par défaut, une
          seule requête est effectuée à la fois.</dd>
      
          <dt><code>-C <var>nom-cookie</var>=<var>valeur</var></code></dt>
          <dd>Ajoute une ligne <code>Cookie:</code> à la requête. L'argument
          se présente en général sous la forme d'une
          paire <code><var>nom</var>=<var>valeur</var></code>. Ce champ peut
          être répété.</dd>
      
          <dt><code>-d</code></dt>
          
          <dd>N'affiche pas le "pourcentage servi dans la table XX [ms]".
          (support de l'héritage).</dd>
      
          <dt><code>-e <var>fichier-csv</var></code></dt>
          <dd>Enregistre des valeurs séparées par des virgules (CSV) dans un
          fichier, indiquant pour chaque pourcentage (de 1% à 100 %), le temps
          (en millisecondes) mis pour servir ce pourcentage de requêtes. Ce
          fichier est en général plus utile qu'un fichier 'gnuplot', car les
          résultats sont déjà sous forme binaire.</dd>
      
          <dt><code>-E <var>fichier du certificat client</var></code></dt>
          <dd>Utilise le certificat client au format PEM qu'il contient pour
          s'authentifier auprès du serveur lors d'une connexion à un site web sous
          SSL. Ce fichier doit contenir le certificat client suivi des certificats
          intermédiaires et de la clé privé. Disponible à partir de la version 2.4.36
          du serveur HTTP Apache.</dd>
      
          <dt><code>-f <var>protocole</var></code></dt>
          <dd>Spécifie le protocole SSL/TLS (SSL2, SSL3, TLS1, TLS1.1, TLS1.2, or ALL).
          TLS1.1 et TLS1.2 sont supportés à partir de la version 2.4.4 du
          serveur HTTP Apache.</dd>
      
          <dt><code>-g <var>fichier-gnuplot</var></code></dt>
          <dd>Enregistre toutes les valeurs mesurées dans un fichier 'gnuplot'
          ou TSV (valeurs séparées par des tabulations). Ce fichier peut être
          facilement importé dans des programmes comme Gnuplot, IDL,
          Mathematica, Igor ou même Excel. La première ligne du fichier
          contient les noms des valeurs.</dd>
      
          <dt><code>-h</code></dt>
          <dd>Affiche une aide à propos de l'utilisation du programme.</dd>
      
          <dt><code>-H <var>en-tête-personnalisé</var></code></dt>
          <dd>Ajoute des en-têtes supplémentaires à la requête. L'argument se
          présente sous la forme d'une ligne d'en-tête valide, autrement dit
          une paire champ/valeur séparés par un caractère ':' (par exemple
          <code>"Accept-Encoding: zip/zop;8bit"</code>).</dd>
      
          <dt><code>-i</code></dt>
          <dd>Effectue des requêtes <code>HEAD</code> plutôt que
          <code>GET</code>.</dd>
      
          <dt><code>-k</code></dt>
          <dd>Active la fonctionnalité des connexions HTTP persistantes
          (KeepAlive), c'est à dire effectue plusieurs requêtes au cours d'une
          seule session HTTP. Cette fonctionnalité est désactivée par
          défaut.</dd>
      
          <dt><code>-l</code></dt>
          <dd>Ne signale pas les erreurs si la taille de la réponse n'est pas
          constante. Cette option peut s'avérer utile pour les pages
          dynamiques. Disponible à partir de la version 2.4.7 du serveur HTTP
          Apache.
          </dd>
      
          <dt><code>-m <var>HTTP-method</var></code></dt>
          <dd>Méthode HTTP personnalisée à utiliser pour les requêtes.
          Disponible à partir de la version 2.4.10 du serveur HTTP
          Apache.</dd>
      
          <dt><code>-n <var>requêtes</var></code></dt>
          <dd>Nombre de requêtes à effectuer au cours du test de performances.
          Par défaut, une seule requête est effectuée, ce qui ne permet pas
          d'obtenir des résultats représentatifs.</dd>
      
          <dt><code>-p <var>fichier-POST</var></code></dt>
          <dd>Fichier contenant les données pour les requêtes POST.
          Assurez-vous de spécifier aussi le paramètre <code>-T</code>.</dd>
      
          <dt><code>-P <var>nom-utilisateur-mandataire</var>:<var>mot-de-passe</var></code></dt>
          <dd>Fournit les informations d'authentification basique pour un
          mandataire en-route. Les nom d'utilisateur et mot de passe sont
          séparés par un simple caractère <code>:</code> et envoyés sur le
          réseau codés en base64. La chaîne est envoyée, que le mandataire en
          ait besoin ou non (qu'il ait renvoyé un code "407 proxy
          authentication needed" ou non).</dd>
      
          <dt><code>-q</code></dt>
          <dd>Lorsque plus de 150 requêtes sont traitées, <code>ab</code>
          affiche la progression du traitement sur <code>stderr</code> tous
          les 10% du nombre total ou toutes les 100 requêtes. Le drapeau
          <code>-q</code> permet de supprimer ces messages.</dd>
      
          <dt><code>-r</code></dt>
          <dd>Ne s'arrête pas en cas d'erreur de réception du socket.</dd>
      
          <dt><code>-s <var>timeout</var></code></dt>
          <dd>Temps maximum d'attente en secondes du socket avant de considérer
          le délai comme dépassé. La valeur par défaut est de 30 secondes.
          Disponible à partir de la version 2.4.4 du serveur HTTP
          Apache.</dd>
      
          <dt><code>-S</code></dt>
          <dd>N'affiche ni les valeurs de déviation standards et médianes, ni
          les messages d'erreur et d'avertissement lorsque les valeurs
          médianes et moyennes sont égales à une ou deux fois la valeur de
          déviation standard. Par défaut les valeurs mini/moyenne/maxi sont
          affichées (support de l'héritage).</dd>
          
      
          <dt><code>-t <var>limite-durée</var></code></dt>
          <dd>Durée maximale en secondes du test de performances. Ceci
          implique un <code>-n 50000</code> en interne. Utilisez cette option
          si vous souhaitez tester les performances du serveur pendant une
          durée fixée à l'avance. Par défaut, il n'y a pas de limite de
          durée.</dd>
      
          <dt><code>-T <var>type-contenu</var></code></dt>
          <dd>Valeur de l'en-tête Content-type à utiliser pour les données
          POST/PUT, par exemple
          <code>application/x-www-form-urlencoded</code>.
          La valeur par défaut est <code>text/plain</code>.</dd>
      
          <dt><code>-u <var>fichier PUT</var></code></dt>
          <dd>Fichier contenant des données PUT.  Ne pas oublier de spécifier
          aussi <code>-T</code>.</dd>
      
          <dt><code>-v <var>verbosité</var></code></dt>
          <dd>Définit le niveau de verbosité - les niveaux <code>4</code> et
          supérieurs permettent d'afficher des informations à propos des
          en-têtes, les niveaux <code>3</code> et supérieurs les codes de
          réponse (404, 200, etc...), et les niveaux <code>2</code> et
          supérieurs les messages d'avertissement et d'information.</dd>
      
          <dt><code>-V</code></dt>
          <dd>Affiche le numéro de version et s'arrête.</dd>
      
          <dt><code>-w</code></dt>
          <dd>Affiche les résultats dans des tables HTML. La table par défaut
          comporte deux colonnes sur fond blanc.</dd>
      
          <dt><code>-x <var>&lt;table&gt;-attributs</var></code></dt>
          <dd>La chaîne à utiliser comme attributs pour
          <code>&lt;table&gt;</code>. Les attributs sont insérés
          <code>&lt;table <var>ici</var> &gt;</code>.</dd>
      
          <dt><code>-X <var>mandataire</var>[:<var>port</var>]</code></dt>
          <dd>Utilise un serveur mandataire pour les requêtes.</dd>
      
          <dt><code>-y <var>&lt;tr&gt;-attributs</var></code></dt>
          <dd>La chaîne à utiliser comme attributs pour
          <code>&lt;tr&gt;</code>.</dd>
      
          <dt><code>-z <var>&lt;td&gt;-attributs</var></code></dt>
          <dd>La chaîne à utiliser comme attributs pour
          <code>&lt;td&gt;</code>.</dd>
      
          <dt><code>-Z <var>algorithme-chiffrement</var></code></dt>
          <dd>Spécifie l'algorithme de chiffrement SSL/TLS (Voir les
          algorithme de chiffrement openssl).</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="output" id="output">Sortie</a></h2>
          <p>Vous touverez dans ce qui suit la liste des valeurs retournées
          par <code>ab</code> :
          </p>
      
          <dl>
              <dt>Server Software</dt>
              <dd>La valeur, si elle existe, de l'en-tête HTTP
      	<var>server</var> renvoyée dans la première réponse réussie.
      	Elle comporte tous les caractères de l'en-tête jusqu'à ce qu'un
      	caractère de valeur décimale 32 soit rencontré (le plus souvent
      	un espace ou une fin de ligne).</dd>
      
              <dt>Server Hostname</dt>
              <dd>Le nom DNS ou l'adresse IP fourni dans la ligne de commande.</dd>
      
              <dt>Server Port</dt>
              <dd>Le port auquel ab est connecté. Si la ligne de commande ne
      	spécifie aucun port, le port par défaut sera 80 pour http et 443
      	pour https.</dd>
      
              <dt>SSL/TLS Protocol</dt>
              <dd>Les paramètres de protocole négociés entre le client et le
      	serveur. Uniquement si SSL est utilisé.</dd>
      
              <dt>Document Path</dt>
              <dd>L'URI de la requête interprété à partir de la chaîne de la
      	ligne de commande.</dd>
      
              <dt>Document Length</dt>
              <dd>Il s'agit de la taille en octets du premier document renvoyé
      	avec succès. Si la taille du document est modifiée au cours
      	du test, la réponse est considérée comme une erreur.</dd>
      
              <dt>Concurrency Level</dt>
              <dd>Le nombre de clients simultanés utilisés au cours du test.</dd>
      
              <dt>Time taken for tests</dt>
              <dd>Il s'agit du temps écoulé entre le moment de la première
      	connexion au socket et la réception de la dernière
      	réponse.</dd>
      
              <dt>Complete requests</dt>
              <dd>Le nombre de réponses reçues avec succès.</dd>
      
              <dt>Failed requests</dt>
              <dd>Le nombre de requêtes considérées comme erronées. Si ce
      	nombre est différent de 0, une ligne supplémentaire indiquera le
      	nombre de requêtes ayant échoué suite à un problème de
      	connexion, de lecture, de taille de contenu erronée ou
      	d'exceptions.</dd>
      
              <dt>Write errors</dt>
              <dd>Le nombre d'erreurs rencontrées en cours d'écriture (broken pipe).</dd>
      
              <dt>Non-2xx responses</dt>
              <dd>Le nombre de réponses dont le code était en dehors de la
      	série 200. Si toutes les réponses appartiennent à la série 200,
      	cette ligne est absente.</dd>
      
              <dt>Keep-Alive requests</dt>
              <dd>Le nombre de connexions promues à l'état de connexions
      	persistantes.</dd>
      
              <dt>Total body sent</dt>
              <dd>Si le test a été configuré dans ce sens, il s'agit du nombre
      	total d'octets envoyés au cours du test. Ce champ est omis si le
      	test ne prévoyait pas d'envoi de corps.</dd>
      
              <dt>Total transferred</dt>
              <dd>Le nombre total d'octets reçus du serveur. Ce nombre
      	correspond à peu près au nombre d'octets envoyés sur la ligne.</dd>
      
              <dt>HTML transferred</dt>
              <dd>Le nombre total d'octets utiles (contenus) reçus du serveur.
      	Ce nombre n'inclut pas les octets correspondant aux en-têtes
      	HTTP.</dd>
      
              <dt>Requests per second</dt>
              <dd>Il s'agit du nombre de requêtes par seconde. Il correspond
      	au nombre de requêtes divisé par la durée totale du traitement.</dd>
      
              <dt>Time per request</dt>
              <dd>La durée moyenne du traitement d'une requête. La première
      	valeur est calculée selon la formule <code>concurrency *
      	timetaken * 1000 / done</code>, alors que la seconde valeur est
      	calculée selon la formule <code>timetaken * 1000 / done</code>.</dd>
      
              <dt>Transfer rate</dt>
              <dd>Le taux de transfert calculé selon la formule
      	<code>totalread / 1024 / timetaken</code>.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="bugs" id="bugs">Bogues</a></h2>
          <p>De nombreux tampons de taille fixe sont déclarés statiquement.
          Combiné avec l'interprétation poussive des arguments de la ligne de
          commande, les en-têtes de réponse du serveur et autres entrées
          externes, ceci peut vous affecter.</p>
      
          <p>HTTP/1.x n'est pas complètement implémenté ; seules certaines
          formes de réponses 'attendues' sont acceptées. L'utilisation
          relativement intense de <code>strstr(3)</code> provoque un affichage
          en tête de profil, ce qui peut faire croire à un problème de
          performances ; en d'autres termes, vous mesurez les performances de
          <code>ab</code> plutôt que celles du serveur.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/ab.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/ab.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/ab.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/ab.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/ab.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/ab.html.en��������������������������������������������������������0000644�0000000�0000050�00000045432�13412755316�017163� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>ab - Apache HTTP server benchmarking tool - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>ab - Apache HTTP server benchmarking tool</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/ab.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/ab.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/ab.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/ab.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>ab</code> is a tool for benchmarking your Apache Hypertext
          Transfer Protocol (HTTP) server. It is designed to give you an impression
          of how your current Apache installation performs. This especially shows
          you how many requests per second your Apache installation is capable of
          serving.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#output">Output</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#bugs">Bugs</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
          <p><code><strong>ab</strong>
          [ -<strong>A</strong> <var>auth-username</var>:<var>password</var> ]
          [ -<strong>b</strong> <var>windowsize</var> ]
          [ -<strong>B</strong> <var>local-address</var> ]
          [ -<strong>c</strong> <var>concurrency</var> ]
          [ -<strong>C</strong> <var>cookie-name</var>=<var>value</var> ]
          [ -<strong>d</strong> ]
          [ -<strong>e</strong> <var>csv-file</var> ]
          [ -<strong>E</strong> <var>client-certificate file</var> ]
          [ -<strong>f</strong> <var>protocol</var> ]
          [ -<strong>g</strong> <var>gnuplot-file</var> ]
          [ -<strong>h</strong> ]
          [ -<strong>H</strong> <var>custom-header</var> ]
          [ -<strong>i</strong> ]
          [ -<strong>k</strong> ]
          [ -<strong>l</strong> ]
          [ -<strong>m</strong> <var>HTTP-method</var> ]
          [ -<strong>n</strong> <var>requests</var> ]
          [ -<strong>p</strong> <var>POST-file</var> ]
          [ -<strong>P</strong> <var>proxy-auth-username</var>:<var>password</var> ]
          [ -<strong>q</strong> ]
          [ -<strong>r</strong> ]
          [ -<strong>s</strong> <var>timeout</var> ]
          [ -<strong>S</strong> ]
          [ -<strong>t</strong> <var>timelimit</var> ]
          [ -<strong>T</strong> <var>content-type</var> ]
          [ -<strong>u</strong> <var>PUT-file</var> ]
          [ -<strong>v</strong> <var>verbosity</var>]
          [ -<strong>V</strong> ]
          [ -<strong>w</strong> ]
          [ -<strong>x</strong> <var>&lt;table&gt;-attributes</var> ]
          [ -<strong>X</strong> <var>proxy</var>[:<var>port</var>] ]
          [ -<strong>y</strong> <var>&lt;tr&gt;-attributes</var> ]
          [ -<strong>z</strong> <var>&lt;td&gt;-attributes</var> ]
          [ -<strong>Z</strong> <var>ciphersuite</var> ]
          [http[s]://]<var>hostname</var>[:<var>port</var>]/<var>path</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code>-A <var>auth-username</var>:<var>password</var></code></dt>
          <dd>Supply BASIC Authentication credentials to the server. The username and
          password are separated by a single <code>:</code> and sent on the wire
          base64 encoded. The string is sent regardless of whether the server needs
          it (<em>i.e.</em>, has sent an 401  authentication needed).</dd>
      
          <dt><code>-b <var>windowsize</var></code></dt>
          <dd>Size of TCP send/receive buffer, in bytes.</dd>
      
          <dt><code>-B <var>local-address</var></code></dt>
          <dd>Address to bind to when making outgoing connections.</dd>
      
          <dt><code>-c <var>concurrency</var></code></dt>
          <dd>Number of multiple requests to perform at a time. Default is one
          request at a time.</dd>
      
          <dt><code>-C <var>cookie-name</var>=<var>value</var></code></dt>
          <dd>Add a <code>Cookie:</code> line to the request. The  argument  is
          typically in the form of a <code><var>name</var>=<var>value</var></code>
          pair. This field is repeatable.</dd>
      
          <dt><code>-d</code></dt>
          <dd>Do not display the "percentage served within XX [ms] table". (legacy
          support).</dd>
      
          <dt><code>-e <var>csv-file</var></code></dt>
          <dd>Write a Comma separated value (CSV) file which contains for each
          percentage (from 1% to 100%) the time (in milliseconds) it took to serve
          that percentage of the requests. This is usually more useful than the
          'gnuplot' file; as the results are already 'binned'.</dd>
      
          <dt><code>-E <var>client-certificate-file</var></code></dt>
          <dd>When connecting to an SSL website, use the provided client certificate
          in PEM format to authenticate with the server. The file is expected to
          contain the client certificate, followed by intermediate certificates,
          followed by the private key. Available in 2.4.36 and later.</dd>
      
          <dt><code>-f <var>protocol</var></code></dt>
          <dd>Specify SSL/TLS protocol (SSL2, SSL3, TLS1, TLS1.1, TLS1.2, or ALL).
          TLS1.1 and TLS1.2 support available in 2.4.4 and later.</dd>
      
          <dt><code>-g <var>gnuplot-file</var></code></dt>
          <dd>Write all measured values out as a 'gnuplot' or TSV (Tab separate
          values) file. This file can easily be imported into packages like Gnuplot,
          IDL, Mathematica, Igor or even Excel. The labels are on the first line of
          the file. </dd>
      
          <dt><code>-h</code></dt>
          <dd>Display usage information.</dd>
      
          <dt><code>-H <var>custom-header</var></code></dt>
          <dd>Append extra headers to the request.  The  argument  is typically in
          the form of a valid header line, containing a colon-separated field-value
          pair (<em>i.e.</em>, <code>"Accept-Encoding: zip/zop;8bit"</code>).</dd>
      
          <dt><code>-i</code></dt>
          <dd>Do <code>HEAD</code> requests instead of <code>GET</code>.</dd>
      
          <dt><code>-k</code></dt>
          <dd>Enable the HTTP KeepAlive feature, <em>i.e.</em>, perform multiple
          requests within one HTTP session. Default is no KeepAlive.</dd>
      
          <dt><code>-l</code></dt>
          <dd>Do not report errors if the length of the responses is not constant. This 
          can be useful for dynamic pages.
          Available in 2.4.7 and later.
          </dd>
      
          <dt><code>-m <var>HTTP-method</var></code></dt>
          <dd>Custom HTTP method for the requests.
          Available in 2.4.10 and later.</dd>
      
          <dt><code>-n <var>requests</var></code></dt>
          <dd>Number of requests to perform for the benchmarking session. The default
          is to just perform a single request which usually leads to
          non-representative benchmarking results.</dd>
      
          <dt><code>-p <var>POST-file</var></code></dt>
          <dd>File containing data to POST.  Remember to also set <code>-T</code>.</dd>
      
          <dt><code>-P <var>proxy-auth-username</var>:<var>password</var></code></dt>
          <dd>Supply BASIC Authentication credentials to a proxy en-route. The
          username and password are separated by a single <code>:</code> and sent on
          the  wire base64 encoded. The string is sent regardless of whether the
          proxy needs it (<em>i.e.</em>, has  sent an 407 proxy authentication
          needed).</dd>
      
          <dt><code>-q</code></dt>
          <dd>When processing more than 150 requests, <code>ab</code> outputs a
          progress count on <code>stderr</code> every 10% or 100 requests or so. The
          <code>-q</code> flag will suppress these messages.</dd>
      
          <dt><code>-r</code></dt>
          <dd>Don't exit on socket receive errors.</dd>
      
          <dt><code>-s <var>timeout</var></code></dt>
          <dd>Maximum number of seconds to wait before the socket times out.
          Default is 30 seconds.
          Available in 2.4.4 and later.</dd>
      
          <dt><code>-S</code></dt>
          <dd>Do not display the median and standard deviation values, nor display
          the warning/error messages when the average and median are more than
          one or two times the standard deviation apart. And default to the
          min/avg/max values. (legacy support).</dd>
      
          <dt><code>-t <var>timelimit</var></code></dt>
          <dd>Maximum number of seconds to  spend  for  benchmarking. This implies a
          <code>-n 50000</code> internally. Use this to benchmark the server within a
          fixed total amount of time. Per default there is no timelimit.</dd>
      
          <dt><code>-T <var>content-type</var></code></dt>
          <dd>Content-type header to use for POST/PUT data, eg.
          <code>application/x-www-form-urlencoded</code>.
          Default is <code>text/plain</code>.</dd>
      
          <dt><code>-u <var>PUT-file</var></code></dt>
          <dd>File containing data to PUT.  Remember to also set <code>-T</code>.</dd>
      
          <dt><code>-v <var>verbosity</var></code></dt>
          <dd>Set verbosity level - <code>4</code> and above prints information on
          headers, <code>3</code> and above prints response codes (404, 200, etc.),
          <code>2</code> and above prints warnings and info.</dd>
      
          <dt><code>-V</code></dt>
          <dd>Display version number and exit.</dd>
      
          <dt><code>-w</code></dt>
          <dd>Print out results in HTML tables. Default table is two columns wide,
          with a white background.</dd>
      
          <dt><code>-x <var>&lt;table&gt;-attributes</var></code></dt>
          <dd>String to use as attributes for <code>&lt;table&gt;</code>. Attributes
          are inserted <code>&lt;table <var>here</var> &gt;</code>.</dd>
      
          <dt><code>-X <var>proxy</var>[:<var>port</var>]</code></dt>
          <dd>Use a proxy server for the requests.</dd>
      
          <dt><code>-y <var>&lt;tr&gt;-attributes</var></code></dt>
          <dd>String to use as attributes for <code>&lt;tr&gt;</code>.</dd>
      
          <dt><code>-z <var>&lt;td&gt;-attributes</var></code></dt>
          <dd>String to use as attributes for <code>&lt;td&gt;</code>.</dd>
      
          <dt><code>-Z <var>ciphersuite</var></code></dt>
          <dd>Specify SSL/TLS cipher suite (See openssl ciphers)</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="output" id="output">Output</a></h2>
          <p>The following list describes the values returned by <code>ab</code>:
          </p>
      
          <dl>
              <dt>Server Software</dt>
              <dd>The value, if any, returned in the <var>server</var> HTTP header
              of the first successful response. This includes all characters in the
              header from beginning to the point a character with decimal value of 32
              (most notably: a space or CR/LF) is detected.</dd>
      
              <dt>Server Hostname</dt>
              <dd>The DNS or IP address given on the command line</dd>
      
              <dt>Server Port</dt>
              <dd>The port to which ab is connecting. If no port is given on the
              command line, this will default to 80 for http and 443 for
              https.</dd>
      
              <dt>SSL/TLS Protocol</dt>
              <dd>The protocol parameters negotiated between the client and server.
              This will only be printed if SSL is used.</dd>
      
              <dt>Document Path</dt>
              <dd>The request URI parsed from the command line string.</dd>
      
              <dt>Document Length</dt>
              <dd>This is the size in bytes of the first successfully returned document.
              If the document length changes during testing, the response is
              considered an error.</dd>
      
              <dt>Concurrency Level</dt>
              <dd>The number of concurrent clients used during the test</dd>
      
              <dt>Time taken for tests</dt>
              <dd>This is the time taken from the moment the first socket connection
              is created to the moment the last response is received</dd>
      
              <dt>Complete requests</dt>
              <dd>The number of successful responses received</dd>
      
              <dt>Failed requests</dt>
              <dd>The number of requests that were considered a failure. If the
              number is greater than zero, another line will be printed showing the
              number of requests that failed due to connecting, reading, incorrect
              content length, or exceptions.</dd>
      
              <dt>Write errors</dt>
              <dd>The number of errors that failed during write (broken pipe).</dd>
      
              <dt>Non-2xx responses</dt>
              <dd>The number of responses that were not in the 200 series of response
              codes. If all responses were 200, this field is not printed.</dd>
      
              <dt>Keep-Alive requests</dt>
              <dd>The number of connections that resulted in Keep-Alive requests</dd>
      
              <dt>Total body sent</dt>
              <dd>If configured to send data as part of the test, this is the total
              number of bytes sent during the tests. This field is omitted if the test
              did not include a body to send.</dd>
      
              <dt>Total transferred</dt>
              <dd>The total number of bytes received from the server. This number
              is essentially the number of bytes sent over the wire.</dd>
      
              <dt>HTML transferred</dt>
              <dd>The total number of document bytes received from the server. This
              number excludes bytes received in HTTP headers</dd>
      
              <dt>Requests per second</dt>
              <dd>This is the number of requests per second. This value is the result
              of dividing the number of requests by the total time taken</dd>
      
              <dt>Time per request</dt>
              <dd>The average time spent per request. The first value is calculated
              with the formula <code>concurrency * timetaken * 1000 / done</code>
              while the second value is calculated with the formula
              <code>timetaken * 1000 / done</code></dd>
      
              <dt>Transfer rate</dt>
              <dd>The rate of transfer as calculated by the formula
              <code>totalread / 1024 / timetaken</code></dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="bugs" id="bugs">Bugs</a></h2>
          <p>There are various statically declared buffers of fixed length. Combined
          with the lazy parsing of the command line arguments, the response headers
          from the server and other external inputs, this might bite you.</p>
      
          <p>It does not implement HTTP/1.x fully; only accepts some 'expected' forms
          of responses. The rather heavy use of <code>strstr(3)</code> shows up top
          in profile, which might indicate a performance problem; <em>i.e.</em>, you
          would measure the <code>ab</code> performance rather than the server's.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/ab.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/ab.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/ab.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/ab.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/ab.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/index.html��������������������������������������������������������0000644�0000000�0000050�00000001053�13362070302�017263� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: index.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: index.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: index.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: index.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: index.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      
      URI: index.html.zh-cn.utf8
      Content-Language: zh-cn
      Content-type: text/html; charset=UTF-8
      �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/configure.html.en�������������������������������������������������0000644�0000000�0000050�00000112040�13412755316�020550� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>configure - Configure the source tree - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>configure - Configure the source tree</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/configure.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/configure.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/configure.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/configure.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>The <code>configure</code> script configures the source tree
          for compiling and installing the Apache HTTP Server on your
          particular platform. Various options allow the compilation of a
          server corresponding to your personal requirements.</p>
      
          <p>This script, included in the root directory of the source
          distribution, is for compilation on Unix and Unix-like systems
          only. For other platforms, see the <a href="../platform/">platform</a> documentation.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#env">Environment variables</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="../install.html">Compiling and Installing</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
          <p>You should call the <code>configure</code> script from within the
          root directory of the distribution.</p>
      
          <p><code><strong>./configure</strong> [<var>OPTION</var>]...
          [<var>VAR</var>=<var>VALUE</var>]...</code></p>
      
          <p>To assign environment variables (e.g. <code>CC</code>,
          <code>CFLAGS</code> ...), specify them as
          <code><var>VAR</var>=<var>VALUE</var></code>. See <a href="#env">below</a>
          for descriptions of some of the useful variables.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
        <ul>
          <li><a href="#configurationoptions">Configuration options</a></li>
          <li><a href="#installationdirectories">Installation directories</a></li>
          <li><a href="#systemtypes">System types</a></li>
          <li><a href="#optionalfeatures">Optional features</a></li>
          <li><a href="#supportopt">Options for support programs</a></li>
        </ul>
      
        <h3><a name="configurationoptions" id="configurationoptions">Configuration options</a></h3>
      
          <p>The following options influence the behavior of
          <code>configure</code> itself.</p>
      
          <dl>
            <dt><code>-C</code></dt>
            <dt><code>--config-cache</code></dt>
            <dd>This is an alias for <code>--cache-file=config.cache</code></dd>
      
            <dt><code>--cache-file=<var>FILE</var></code></dt>
            <dd>The test results will be cached in file <var>FILE</var>.
              This option is disabled by default.</dd>
      
            <dt><code>-h</code></dt>
            <dt><code>--help [short|recursive]</code></dt>
            <dd>Output the help and exit. With the argument <code>short</code> only
              options specific to this package will displayed. The argument
              <code>recursive</code> displays the short help of all the included
              packages.</dd>
      
            <dt><code>-n</code></dt>
            <dt><code>--no-create</code></dt>
            <dd>The <code>configure</code> script is run normally but does
              not create output files. This is useful to check the test results
              before generating makefiles for compilation.</dd>
      
            <dt><code>-q</code></dt>
            <dt><code>--quiet</code></dt>
            <dd>Do not print <code>checking ...</code> messages during the
              configure process.</dd>
      
            <dt><code>--srcdir=<var>DIR</var></code></dt>
            <dd>Defines directory <var>DIR</var> to be the source file directory.
              Default is the directory where <code>configure</code> is located, or
              the parent directory.</dd>
      
            <dt><code>--silent</code></dt>
            <dd>Same as <code>--quiet</code></dd>
      
            <dt>-V</dt>
            <dt>--version</dt>
            <dd>Display copyright information and exit.</dd>
          </dl>
        
      
        <h3><a name="installationdirectories" id="installationdirectories">Installation
          directories</a></h3>
      
          <p>These options define the installation directory. The installation
            tree depends on the selected layout.</p>
      
          <dl>
            <dt><code>--prefix=<var>PREFIX</var></code></dt>
            <dd>Install architecture-independent files in <var>PREFIX</var>.
              By default the installation directory is set to
              <code>/usr/local/apache2</code>.</dd>
      
            <dt><code>--exec-prefix=<var>EPREFIX</var></code></dt>
            <dd>Install architecture-dependent files in <var>EPREFIX</var>.
              By default the installation directory is set to the
              <var>PREFIX</var> directory.</dd>
          </dl>
      
          <p>By default, <code>make install</code> will install all the files in
            <code>/usr/local/apache2/bin</code>, <code>/usr/local/apache2/lib</code>
            etc. You can specify an installation prefix other than
            <code>/usr/local/apache2</code> using <code>--prefix</code>,
            for instance <code>--prefix=$HOME</code>.</p>
      
          <h4><a name="layout" id="layout">Define a directory layout</a></h4>
            <dl>
              <dt><code>--enable-layout=<var>LAYOUT</var></code></dt>
              <dd>Configure the source code and build scripts to assume an
                installation tree based on the layout <var>LAYOUT</var>. This allows
                you to separately specify the locations for each type of file within
                the Apache HTTP Server installation. The <code>config.layout</code>
                file contains several example configurations, and you can also create
                your own custom configuration following the examples. The different
                layouts in this file are grouped into <code>&lt;Layout
                  FOO&gt;...&lt;/Layout&gt;</code> sections and referred to by name as
                in <code>FOO</code>. The default layout is <code>Apache</code>.</dd>
            </dl>
          
      
          <h4><a name="directoryfinetuning" id="directoryfinetuning">Fine tuning of the installation
            directories</a></h4>
      
            <p>For better control of the installation directories, use the options
              below. Please note that the directory defaults are set by
              <code>autoconf</code> and are overwritten by the corresponding layout
              setting.</p>
      
            <dl>
              
              <dt><code>--bindir=<var>DIR</var></code></dt>
              <dd>Install user executables in <var>DIR</var>. The user executables
                are supporting programs like <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code>,
                <code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code>, etc. which are useful for site
                administrators. By default <var>DIR</var> is set to
                <code><var>EPREFIX</var>/bin</code>.</dd>
      
              <dt><code>--datadir=<var>DIR</var></code></dt>
              <dd>Install read-only architecture-independent data in <var>DIR</var>.
                By default <code>datadir</code> is set to
                <code><var>PREFIX</var>/share</code>. This option is offered by
                <code>autoconf</code> and currently unused.</dd>
      
              <dt><code>--includedir=<var>DIR</var></code></dt>
              <dd>Install C header files in <var>DIR</var>. By default
                <code>includedir</code> is set to
                <code><var>EPREFIX</var>/include</code>.</dd>
      
              <dt><code>--infodir=<var>DIR</var></code></dt>
              <dd>Install info documentation in <var>DIR</var>.
                By default <code>infodir</code> is set to
                <code><var>PREFIX</var>/info</code>. This option is currently
                unused.</dd>
      
              <dt><code>--libdir=<var>DIR</var></code></dt>
              <dd>Install object code libraries in <var>DIR</var>. By default
                <code>libdir</code> is set to
                <code><var>EPREFIX</var>/lib</code>.</dd>
      
              <dt><code>--libexecdir=<var>DIR</var></code></dt>
              <dd>Install the program executables (i.e., shared modules) in
                <var>DIR</var>. By default <code>libexecdir</code> is set to
                <code><var>EPREFIX</var>/modules</code>.</dd>
      
              <dt><code>--localstatedir=<var>DIR</var></code></dt>
              <dd>Install modifiable single-machine data in <var>DIR</var>.
                By default <code>localstatedir</code> is set to
                <code><var>PREFIX</var>/var</code>. This option is offered by
                <code>autoconf</code> and currently unused.</dd>
      
              <dt><code>--mandir=<var>DIR</var></code></dt>
              <dd>Install the man documentation in <var>DIR</var>. By default
                <code>mandir</code> is set to
                <code><var>EPREFIX</var>/man</code>.</dd>
      
              <dt><code>--oldincludedir=<var>DIR</var></code></dt>
              <dd>Install C header files for non-gcc in <var>DIR</var>.
                By default <code>oldincludedir</code> is set to
                <code>/usr/include</code>. This option is offered by
                <code>autoconf</code> and currently unused.</dd>
      
              <dt><code>--sbindir=<var>DIR</var></code></dt>
              <dd>Install the system administrator executables in <var>DIR</var>.
                Those are server programs like <code class="program"><a href="../programs/httpd.html">httpd</a></code>,
                <code class="program"><a href="../programs/apachectl.html">apachectl</a></code>, <code class="program"><a href="../programs/suexec.html">suexec</a></code>, etc. which
                are necessary to run the Apache HTTP Server. By default
                <code>sbindir</code> is set to
                <code><var>EPREFIX</var>/sbin</code>.</dd>
      
              <dt><code>--sharedstatedir=<var>DIR</var></code></dt>
              <dd>Install modifiable architecture-independent data in <var>DIR</var>.
                By default <code>sharedstatedir</code> is set to
                <code><var>PREFIX</var>/com</code>. This option is offered by
                <code>autoconf</code> and currently unused.</dd>
      
              <dt><code>--sysconfdir=<var>DIR</var></code></dt>
              <dd>Install read-only single-machine data like the server configuration
                files <code>httpd.conf</code>, <code>mime.types</code>, etc. in
                <var>DIR</var>. By default <code>sysconfdir</code> is set to
                <code><var>PREFIX</var>/conf</code>.</dd>
            </dl>
          
        
      
        <h3><a name="systemtypes" id="systemtypes">System types</a></h3>
      
          <p>These options are used to cross-compile the Apache HTTP Server to run on
            another system. In normal cases, when building and running the server on
            the same system, these options are not used.</p>
      
          <dl>
            <dt><code>--build=<var>BUILD</var></code></dt>
            <dd>Defines the system type of the system on which the tools are being
              built. It defaults to the result of the script
              <code>config.guess</code>.</dd>
      
            <dt><code>--host=<var>HOST</var></code></dt>
            <dd>Defines the system type of the system on which the server will run.
              <var>HOST</var> defaults to <var>BUILD</var>.</dd>
      
            <dt><code>--target=<var>TARGET</var></code></dt>
            <dd>Configure for building compilers for the system type
              <var>TARGET</var>. It defaults to <var>HOST</var>. This option is
              offered by <code>autoconf</code> and not necessary for the Apache HTTP
              Server.</dd>
          </dl>
        
      
        <h3><a name="optionalfeatures" id="optionalfeatures">Optional Features</a></h3>
      
          <p>These options are used to fine tune the features your HTTP server will
            have.</p>
      
          <h4><a name="generaloptfeat" id="generaloptfeat">General syntax</a></h4>
            <p>Generally you can use the following syntax to enable or disable a
              feature:</p>
      
            <dl>
              <dt><code>--disable-<var>FEATURE</var></code></dt>
              <dd>Do not include <var>FEATURE</var>. This is the same as
                <code>--enable-<var>FEATURE</var>=no</code>.</dd>
      
              <dt><code>--enable-<var>FEATURE</var>[=<var>ARG</var>]</code></dt>
              <dd>Include <var>FEATURE</var>. The default value for <var>ARG</var>
                is <code>yes</code>.</dd>
      
              <dt><code>--enable-<var>MODULE</var>=shared</code></dt>
              <dd>The corresponding module will be build as DSO module.
                  By default enabled modules are linked dynamically.</dd>
      
              <dt><code>--enable-<var>MODULE</var>=static</code></dt>
              <dd>The corresponding module will be linked statically.</dd>
            </dl>
      
            <div class="note"><h3>Note</h3>
              <code>configure</code> will not complain about
              <code>--enable-<var>foo</var></code> even if <var>foo</var> doesn't
              exist, so you need to type carefully.
            </div>
          
      
          <h4><a name="choosemodules" id="choosemodules">Choosing modules to compile</a></h4>
            <p>Most modules are compiled by default and have to be disabled
              explicitly or by using the keyword <code>few</code> 
              (see <code>--enable-modules</code>, <code>--enable-mods-shared</code>
              and <code>--enable-mods-static</code> below for further explanation)
              or <code>--enable-modules=none</code> to be removed as a group.</p>
      
              <p>Other modules are not compiled by default and have to be enabled
              explicitly or by using the keywords <code>all</code> or
              <code>reallyall</code> to be available.</p>
      
              <p>To find out which modules are compiled by default, run
              <code>./configure -h</code> or <code>./configure --help</code>
              and look under <code>Optional Features</code>.  Suppose you
              are interested in <code>mod_example1</code> and
              <code>mod_example2</code>, and you
              see this:</p>
      
              <div class="example"><pre>Optional Features:
        ...
        --disable-example1     example module 1
        --enable-example2      example module 2
        ...</pre></div>
      
              <p>Then <code>mod_example1</code> is enabled by default,
              and you would use <code>--disable-example1</code> to not
              compile it.  <code>mod_example2</code> is disabled by
              default, and you would use <code>--enable-example2</code>
              to compile it.</p>
          
      
          <h4><a name="mpms" id="mpms">Multi-Processing Modules</a></h4>
            <p><a href="../mpm.html">Multi-Processing Modules</a>, or MPMs, implement
              the basic behavior of the server.  A single MPM must be active in order
              for the server to function.  The list of available MPMs appears on the
              <a href="../mod/">module index page</a>.</p>
      
            <p>MPMs can be built as DSOs for dynamic loading or statically linked with
              the server, and are enabled using the following options:</p>
      
            <dl>
              <dt><code>--with-mpm=MPM</code></dt>
              <dd>
                <p>Choose the default MPM for your server.  If MPMs are built as DSO
                  modules (see <code>--enable-mpms-shared</code>), this directive
                  selects the MPM which will be loaded in the default configuration
                  file.  Otherwise, this directive selects the only available MPM,
                  which will be statically linked into the server.</p>
                <p>If this option is omitted, the <a href="../mpm.html#defaults">default
                MPM</a> for your operating system will be used.</p>
              </dd>
      
              <dt><code>--enable-mpms-shared=<var>MPM-LIST</var></code></dt>
              <dd>
                <p>Enable a list of MPMs as dynamic shared modules.  One of these
                  modules must be loaded dynamically using the
                  <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> directive.</p>
                <p><var>MPM-LIST</var> is a space-separated list of MPM names
                  enclosed by quotation marks.  For example:</p>
                <div class="example"><p><code>
                  --enable-mpms-shared='prefork worker'
                </code></p></div>
                <p>Additionally you can use the special keyword <code>all</code>,
                  which will select all MPMs which support dynamic loading on the
                  current platform and build them as DSO modules.  For example:</p>
                <div class="example"><p><code>
                  --enable-mpms-shared=all
                </code></p></div>
      	</dd>
            </dl>
          
      
          <h4><a name="modules" id="modules">Third-party modules</a></h4>
            <p>To add additional third-party modules use the following options:</p>
      
            <dl>
              <dt><code>--with-module=<var>module-type</var>:<var>module-file</var>[,
                <var>module-type</var>:<var>module-file</var>]</code></dt>
              <dd><p>Add one or more third-party modules to the list of statically linked
                  modules. The module source file <code><var>module-file</var></code>
                  will be searched in the <code>modules/<var>module-type</var></code>
                  subdirectory of your Apache HTTP server source tree. If it is not found
                  there <code>configure</code> is considering <var>module-file</var> to be
                  an absolute file path and tries to copy the source file into the
                  <var>module-type</var> subdirectory. If the subdirectory doesn't
                  exist it will be created and populated with a standard
                  <code>Makefile.in</code>.</p>
                <p>This option is useful to add small external modules consisting of
                  one source file. For more complex modules you should read the
                  vendor's documentation.</p>
                <div class="note"><h3>Note</h3>
                  If you want to build a DSO module instead of a statically linked
                  use <code class="program"><a href="../programs/apxs.html">apxs</a></code>.</div>
              </dd>
            </dl>
          
      
          <h4><a name="otheroptfeat" id="otheroptfeat">Cumulative and other options</a></h4>
            <dl>
              <dt><code>--enable-maintainer-mode</code></dt>
              <dd>Turn on debugging and compile time warnings
                  and load all compiled modules.</dd>
      
              <dt><code>--enable-mods-shared=<var>MODULE-LIST</var></code></dt>
              <dd>
                <p>Defines a list of modules to be enabled and build as dynamic
                  shared modules. This mean, these module have to be loaded
                  dynamically by using the  <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> directive.</p>
                <p><var>MODULE-LIST</var> is a space separated list of modulenames
                  enclosed by quotation marks. The module names are given without the
                  preceding <code>mod_</code>. For example:</p>
                <div class="example"><p><code>
                  --enable-mods-shared='headers rewrite dav'
                </code></p></div>
                <p>Additionally you can use the special keywords <code>reallyall</code>,
                  <code>all</code>, <code>most</code> and <code>few</code>.
                  For example,</p>
                <div class="example"><p><code>
                  --enable-mods-shared=most
                </code></p></div>
                <p>will compile most modules and build them as DSO modules,</p>
                <div class="example"><p><code>
                  --enable-mods-shared=few
                </code></p></div>
                <p>will only compile a very basic set of modules.</p>
                <p>The default set is <code>most</code>.</p>
                  
                <p>The <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> directives for
                the chosen modules will be automatically generated in the main
                configuration file. By default, all those directives will be commented
                out except for the modules that are either required or explicitly selected
                by a configure <code>--enable-foo</code> argument. You can change the set
                of loaded modules by activating or deactivating the <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> directives in
                <code>httpd.conf</code>. In addition the
                <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> directives for all
                built modules can be activated via the configure option
                <code>--enable-load-all-modules</code>.</p>
              </dd>
      
              <dt><code>--enable-mods-static=<var>MODULE-LIST</var></code></dt>
              <dd>This option behaves similar to <code>--enable-mods-shared</code>,
                but will link the given modules statically. This mean, these modules
                will always be present while running <code class="program"><a href="../programs/httpd.html">httpd</a></code>. They need
                not be loaded with <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code>.</dd>
      
              <dt><code>--enable-modules=<var>MODULE-LIST</var></code></dt>
              <dd>This option behaves like to <code>--enable-mods-shared</code>,
                and will also link the given modules dynamically. The special
                keyword <code>none</code> disables the build of all modules.</dd>
      
              <dt><code>--enable-v4-mapped</code></dt>
              <dd>Allow IPv6 sockets to handle IPv4 connections.</dd>
      
              <dt><code>--with-port=<var>PORT</var></code></dt>
              <dd>This defines the port on which <code class="program"><a href="../programs/httpd.html">httpd</a></code> will listen.
                This port number is used when generating the configuration file
                <code>httpd.conf</code>. The default is 80.</dd>
      
              <dt><code>--with-program-name</code></dt>
              <dd>Define an alternative executable name. The default is
                <code>httpd</code>.</dd>
            </dl>
          
        
      
        <h3><a name="packages" id="packages">Optional packages</a></h3>
          <p>These options are used to define optional packages.</p>
      
          <h4><a name="generalpackages" id="generalpackages">General syntax</a></h4>
            <p>Generally you can use the following syntax to define an optional
              package:</p>
      
            <dl>
              <dt><code>--with-<var>PACKAGE</var>[=<var>ARG</var>]</code></dt>
              <dd>Use the package <var>PACKAGE</var>. The default value for
                <var>ARG</var> is <code>yes</code>.</dd>
      
              <dt><code>--without-<var>PACKAGE</var></code></dt>
              <dd>Do not use the package <var>PACKAGE</var>. This is the same as
                <code>--with-<var>PACKAGE</var>=no</code>. This option is provided by
                <code>autoconf</code> but not very useful for the Apache HTTP
                Server.</dd>
            </dl>
          
      
          
      
          <h4><a name="packageopt" id="packageopt">Specific packages</a></h4>
            <dl>
              <dt><code>--with-apr=<var>DIR</var>|<var>FILE</var></code></dt>
              <dd>The <a class="glossarylink" href="../glossary.html#apr" title="see glossary">Apache Portable Runtime</a> (APR)
                is part of the httpd
                source distribution and will automatically be build together with the
                HTTP server. If you want to use an already installed APR instead you
                have to tell <code>configure</code> the path to the
                <code>apr-config</code> script. You may set the absolute path and name
                or the directory to the installed APR. <code>apr-config</code> must
                exist within this directory or the subdirectory
                <code>bin</code>.</dd>
      
              <dt><code>--with-apr-util=<var>DIR</var>|<var>FILE</var></code></dt>
              <dd>The Apache Portable Runtime Utilities (APU) are part of the
                httpd source distribution and will automatically be build
                together with the HTTP server. If you want to use an already installed
                APU instead you have to tell <code>configure</code> the path to the
                <code>apu-config</code> script. You may set the absolute path and name
                or the directory to the installed APU. <code>apu-config</code> must
                exist within this directory or the subdirectory
                <code>bin</code>.</dd>
      
              <dt><code>--with-ssl=<var>DIR</var></code></dt>
              <dd>If <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> has been enabled <code>configure</code>
                searches for an installed OpenSSL. You can set the directory path
                to the SSL/TLS toolkit instead.</dd>
      
              <dt><code>--with-z=<var>DIR</var></code></dt>
              <dd><code>configure</code> searches automatically for an installed
                <code>zlib</code> library if your source configuration requires one
                (e.g., when <code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code> is enabled). You can set the
                directory path to the compression library instead.</dd>
            </dl>
      
            <p>Several features of the Apache HTTP Server, including
              <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> and <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>'s DBM
              <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> use simple
              key/value databases for quick lookups of information. SDBM is included
              in the APU, so this database is always available. If you would like to
              use other database types, use the following options to enable
              them:</p>
      
            <dl>
              <dt><code>--with-gdbm[=<var>path</var>]</code></dt>
              <dd>If no <var>path</var> is specified, <code>configure</code> will
                search for the include files and libraries of a GNU DBM
                installation in the usual search paths. An explicit
                <var>path</var> will cause <code>configure</code> to look in
                <code><var>path</var>/lib</code> and
                <code><var>path</var>/include</code> for the relevant files.
                Finally, the <var>path</var> may specify specific include and
                library paths separated by a colon.</dd>
      
              <dt><code>--with-ndbm[=<var>path</var>]</code></dt>
              <dd>Like <code>--with-gdbm</code>, but searches for a New DBM
                installation.</dd>
      
              <dt><code>--with-berkeley-db[=<var>path</var>]</code></dt>
              <dd>Like <code>--with-gdbm</code>, but searches for a Berkeley DB
                installation.</dd>
            </dl>
      
            <div class="note"><h3>Note</h3>
              <p>The DBM options are provided by the APU and passed through to its
                configuration script. They are useless when using an already
                installed APU defined by <code>--with-apr-util</code>.</p>
              <p>You may use more then one DBM implementation together with your
                HTTP server. The appropriated DBM type will be configured within
                the runtime configuration at each time.</p>
            </div>
          
        
      
        <h3><a name="supportopt" id="supportopt">Options for support programs</a></h3>
          <dl>
            <dt><code>--enable-static-support</code></dt>
            <dd>Build a statically linked version of the support binaries. This
              means, a stand-alone executable will be built with all the necessary
              libraries integrated. Otherwise the support binaries are linked
              dynamically by default.</dd>
      
            <dt><code>--enable-suexec</code></dt>
            <dd>Use this option to enable <code class="program"><a href="../programs/suexec.html">suexec</a></code>, which allows you to set
              uid and gid for spawned processes. <strong>Do not use this
              option unless you understand all the security implications of
              running a suid binary on your server.</strong> Further options
              to configure <code class="program"><a href="../programs/suexec.html">suexec</a></code> are described <a href="#suexec">below</a>.</dd>
          </dl>
      
          <p>It is possible to create a statically linked binary of a single
            support program by using the following options:</p>
      
          <dl>
            <dt><code>--enable-static-ab</code></dt>
            <dd>Build a statically linked version of <code class="program"><a href="../programs/ab.html">ab</a></code>.</dd>
      
            
            <dt><code>--enable-static-checkgid</code></dt>
            <dd>Build a statically linked version of <code>checkgid</code>.</dd>
      
            <dt><code>--enable-static-htdbm</code></dt>
            <dd>Build a statically linked version of <code class="program"><a href="../programs/htdbm.html">htdbm</a></code>.</dd>
      
            <dt><code>--enable-static-htdigest</code></dt>
            <dd>Build a statically linked version of <code class="program"><a href="../programs/htdigest.html">htdigest</a></code>.</dd>
      
            <dt><code>--enable-static-htpasswd</code></dt>
            <dd>Build a statically linked version of <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code>.</dd>
      
            <dt><code>--enable-static-logresolve</code></dt>
            <dd>Build a statically linked version of <code class="program"><a href="../programs/logresolve.html">logresolve</a></code>.</dd>
      
            <dt><code>--enable-static-rotatelogs</code></dt>
            <dd>Build a statically linked version of <code class="program"><a href="../programs/rotatelogs.html">rotatelogs</a></code>.</dd>
          </dl>
      
          <h4><a name="suexec" id="suexec"><code>suexec</code> configuration options</a></h4>
            
            <p>The following options are used to fine tune the behavior of <code class="program"><a href="../programs/suexec.html">suexec</a></code>. See <a href="suexec.html#install">Configuring and installing suEXEC</a>
              for further information.</p>
      
            <dl>
              <dt><code>--with-suexec-bin</code></dt>
              <dd>This defines the path to <code class="program"><a href="../programs/suexec.html">suexec</a></code> binary.
              Default is <code>--sbindir</code> (see <a href="#directoryfinetuning">Fine tuning of installation directories</a>).</dd>
      
              <dt><code>--with-suexec-caller</code></dt>
              <dd>This defines the user allowed to call <code class="program"><a href="../programs/suexec.html">suexec</a></code>.
                It should be the same as the user under which
                <code class="program"><a href="../programs/httpd.html">httpd</a></code> normally runs.</dd>
      
              <dt><code>--with-suexec-docroot</code></dt>
              <dd>This defines the directory tree under which <code class="program"><a href="../programs/suexec.html">suexec</a></code> access is allowed for executables. Default value is
                <code>--datadir/htdocs</code>.</dd>
      
              <dt><code>--with-suexec-gidmin</code></dt>
              <dd>Define this as the lowest GID allowed to be a target user for
                <code class="program"><a href="../programs/suexec.html">suexec</a></code>. The default value is 100.</dd>
      
              <dt><code>--with-suexec-logfile</code></dt>
              <dd>This defines the filename of the <code class="program"><a href="../programs/suexec.html">suexec</a></code> logfile.
                By default the logfile is named <code>suexec_log</code> and located in
                <code>--logfiledir</code>.</dd>
      
              <dt><code>--with-suexec-safepath</code></dt>
              <dd>Define the value of the environment variable <code>PATH</code> to
                be set for processes started by <code class="program"><a href="../programs/suexec.html">suexec</a></code>. Default
                value is <code>/usr/local/bin:/usr/bin:/bin</code>.</dd>
      
              <dt><code>--with-suexec-userdir</code></dt>
              <dd>This defines the subdirectory under the user's directory that
                contains all executables for which <code class="program"><a href="../programs/suexec.html">suexec</a></code> access
                is allowed. This setting is necessary when you want to use
                <code class="program"><a href="../programs/suexec.html">suexec</a></code> together with user-specific directories (as
                provided by <code class="module"><a href="../mod/mod_userdir.html">mod_userdir</a></code>). The default is
                <code>public_html</code>.</dd>
      
              <dt><code>--with-suexec-uidmin</code></dt>
              <dd>Define this as the lowest UID allowed to be a target user for
                <code class="program"><a href="../programs/suexec.html">suexec</a></code>. The default value is 100.</dd>
      
              <dt><code>--with-suexec-umask</code></dt>
              <dd>Set <code>umask</code> for processes started by
                <code class="program"><a href="../programs/suexec.html">suexec</a></code>. It defaults to your system settings.</dd>
            </dl>
          
        
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="env" id="env">Environment variables</a></h2>
        <p>There are some useful environment variables to override the choices made by
          <code>configure</code> or to help it to find libraries and programs with
          nonstandard names or locations.</p>
      
        
        <dl>
          <dt><code>CC</code></dt>
          <dd>Define the C compiler command to be used for compilation.</dd>
      
          <dt><code>CFLAGS</code></dt>
          <dd>Set C compiler flags you want to use for compilation.</dd>
      
          <dt><code>CPP</code></dt>
          <dd>Define the C preprocessor command to be used.</dd>
      
          <dt><code>CPPFLAGS</code></dt>
          <dd>Set C/C++ preprocessor flags, e.g. <code>-I<var>includedir</var></code>
            if you have headers in a nonstandard directory <var>includedir</var>.</dd>
      
          <dt><code>LDFLAGS</code></dt>
          <dd>Set linker flags, e.g. <code>-L<var>libdir</var></code> if you have
            libraries in a nonstandard directory <var>libdir</var>.</dd>
        </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/configure.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/configure.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/configure.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/configure.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/configure.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/configure.html.fr.utf8��������������������������������������������0000644�0000000�0000050�00000117142�13412755316�021452� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>configure - Configure l'arborescence des sources - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>configure - Configure l'arborescence des sources</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/configure.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/configure.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/configure.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/configure.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Le script <code>configure</code> permet de configurer
          l'arborescence des sources afin de compiler et installer le serveur
          HTTP Apache sur votre plate-forme spécifique. De nombreuses options
          vous permettent de compiler un serveur correspondant à vos propres
          besoins.</p>
      
          <p>Ce script, situé dans le répertoire racine de la distribution des
          sources, ne concerne que la compilation sur les systèmes Unix et
          apparentés. Pour les autres plates-formes, voir la <a href="../platform/">documentation spécifique</a> de ces
          dernières.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Résumé</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#env">Variables d'environnement</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="../install.html">Compilation et installation</a></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Résumé</a></h2>
          <p>Vous devez appeler le script <code>configure</code> depuis le
          répertoire racine de la distribution.</p>
      
          <p><code><strong>./configure</strong> [<var>OPTION</var>]...
          [<var>VARIABLE</var>=<var>VALEUR</var>]...</code></p>
      
          <p>Pour définir des variables d'environnement (par exemple
          <code>CC</code>,<code>CFLAGS</code>, etc...), utilisez la clause
          <code><var>VARIABLE</var>=<var>VALEUR</var></code>. Voir <a href="#env">ci-dessous</a> pour la description de quelques variables
          usuelles.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
        <ul>
          <li><a href="#configurationoptions">Options de Configuration</a></li>
          <li><a href="#installationdirectories">Répertoires d'installation</a></li>
          <li><a href="#systemtypes">Types de Systèmes</a></li>
          <li><a href="#optionalfeatures">Fonctionnalités optionnelles</a></li>
          <li><a href="#supportopt">Options pour les programmes support</a></li>
        </ul>
      
        <h3><a name="configurationoptions" id="configurationoptions">Options de Configuration</a></h3>
      
          <p>Les options suivantes affectent le comportement du script
          <code>configure</code>.</p>
      
          <dl>
            <dt><code>-C</code></dt>
            <dt><code>--config-cache</code></dt>
            <dd>C'est un alias pour <code>--cache-file=config.cache</code></dd>
      
            <dt><code>--cache-file=<var>FICHIER</var></code></dt>
            <dd>Les résultats des tests seront mis en cache dans le fichier
            <var>FICHIER</var>. Cette option est désactivée par défaut.</dd>
      
            <dt><code>-h</code></dt>
            <dt><code>--help [short|recursive]</code></dt>
            <dd>Affichage de l'aide et sortie du script. Avec l'argument
            <code>short</code>, seules les options spécifiques à ce paquet
            seront affichées. L'argument <code>recursive</code> permet
            d'afficher l'aide de tous les paquets inclus.</dd>
      
            <dt><code>-n</code></dt>
            <dt><code>--no-create</code></dt>
            <dd>Le script <code>configure</code> s'exécute normalement, mais
            ne crée pas les fichiers résultants. Ceci permet de vérifier les
            résultats des tests avant de générer les fichiers makefile pour la
            compilation.</dd>
      
            <dt><code>-q</code></dt>
            <dt><code>--quiet</code></dt>
            <dd>Les messages <code>checking ...</code> ne sont pas affichés au
            cours du processus de configuration.</dd>
      
            <dt><code>--srcdir=<var>DIR</var></code></dt>
            <dd>Définit le répertoire <var>DIR</var> comme répertoire des
            fichiers sources. Par défaut, c'est le répertoire où se situe le
            script <code>configure</code>, ou le répertoire parent.</dd>
      
            <dt><code>--silent</code></dt>
            <dd>Identique à <code>--quiet</code></dd>
      
            <dt>-V</dt>
            <dt>--version</dt>
            <dd>Affichage des informations de copyright et sortie du
            script.</dd>
          </dl>
        
      
        <h3><a name="installationdirectories" id="installationdirectories">Répertoires
        d'installation</a></h3>
      
          <p>Ces options permettent de spécifier le répertoire d'installation.
          L'arborescence de l'installation dépend de l'organisation (layout)
          sélectionnée.</p>
      
          <dl>
            <dt><code>--prefix=<var>PREFIX</var></code></dt>
            <dd>Installe les fichiers indépendants de l'architecture dans
            <var>PREFIX</var>. Par défaut, le répertoire d'installation est
            <code>/usr/local/apache2</code>.</dd>
      
            <dt><code>--exec-prefix=<var>EPREFIX</var></code></dt>
            <dd>Installe les fichiers dépendants de l'architecture dans
            <var>EPREFIX</var>. La valeur par défaut de cette option
            correspond à la valeur de la variable
            <var>PREFIX</var>.</dd>
          </dl>
      
          <p>Par défaut, <code>make install</code> va installer tous les
          fichiers dans <code>/usr/local/apache2/bin</code>,
          <code>/usr/local/apache2/lib</code>, etc... Vous pouvez cependant
          spécifier un préfixe d'installation autre que
          <code>/usr/local/apache2</code> en utilisant l'option
          <code>--prefix</code> (par exemple <code>--prefix=$HOME</code>).</p>
      
          <h4><a name="layout" id="layout">Spécifier une organisation (layout) des
          répertoires</a></h4>
            <dl>
              <dt><code>--enable-layout=<var>LAYOUT</var></code></dt>
              <dd>Configure le code source et les scripts de compilation de
      	façon à ce que l'arborescence d'installation adopte
      	l'organisation <var>LAYOUT</var>. Ceci vous permet de spécifier
      	des chemins séparés pour chaque type de fichier de
      	l'installation du serveur HTTP Apache. Le fichier
      	<code>config.layout</code> contient de nombreux exemples de
      	configurations, et vous pouvez créer vos propres configurations
      	personnalisées en vous basant sur ces exemples. Les différentes
      	organisations contenues dans ce fichier sont enregistrées sous
      	forme de sections <code>&lt;Layout
      	FOO&gt;...&lt;/Layout&gt;</code> et référencées dans ce cas par
      	le nom <code>FOO</code>. L'organisation par défaut
      	est <code>Apache</code>.</dd>
            </dl>
          
      
          <h4><a name="directoryfinetuning" id="directoryfinetuning">Configuration avancée des
          répertoires d'installation</a></h4>
      
            <p>Pour une définition plus précise des répertoires
            d'installation, utilisez les options ci-dessous. Notez que les
            répertoires par défaut sont définis par <code>autoconf</code>, et
            que leurs valeurs sont écrasées par les valeurs correspondantes
            définies lors du choix de l'organisation des répertoires
            (layout).</p>
      
            <dl>
              <dt><code>--bindir=<var>DIR</var></code></dt>
              <dd>Installe les exécutables utilisateur dans <var>DIR</var>.
      	Les exécutables utilisateur sont des programmes support comme
      	<code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code>, <code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code>,
      	etc..., et destinés aux administrateurs du site. Par défaut,
      	<var>DIR</var> est défini à
      	<code><var>EPREFIX</var>/bin</code>.</dd>
      
              <dt><code>--datadir=<var>DIR</var></code></dt>
              <dd>Installe les données non modifiables indépendantes de
      	l'architecture dans <var>DIR</var>. Par défaut,
      	<code>datadir</code> est défini à
      	<code><var>PREFIX</var>/share</code>. Cette option est fournie
      	par autoconf et actuellement inutilisée.</dd>
      
              <dt><code>--includedir=<var>DIR</var></code></dt>
              <dd>Installe les fichiers d'en-têtes C dans <var>DIR</var>. Par
      	défaut, <code>includedir</code> est défini à
      	<code><var>EPREFIX</var>/include</code>.</dd>
      
              <dt><code>--infodir=<var>DIR</var></code></dt>
              <dd>Installe la documentation info dans <var>DIR</var>. Par
      	défaut, <code>infodir</code> est défini à
      	<code><var>PREFIX</var>/info</code>. Cette option est
      	actuellement inutilisée.</dd>
      
              <dt><code>--libdir=<var>DIR</var></code></dt>
              <dd>Installe les fichiers objet des bibliothèques dans
      	<var>DIR</var>. Par défaut, <code>libdir</code> est défini à
      	<code><var>EPREFIX</var>/lib</code>.</dd>
      
              <dt><code>--libexecdir=<var>DIR</var></code></dt>
              <dd>Installe les exécutables du programme (autrement dit les
      	modules partagés) dans <var>DIR</var>. Par défaut,
      	<code>libexecdir</code> est défini à
      	<code><var>EPREFIX</var>/modules</code>.</dd>
      
              <dt><code>--localstatedir=<var>DIR</var></code></dt>
              <dd>Installe les données temporaires modifiables spécifiques à
      	la machine dans
      	<var>DIR</var>. Par défaut, <code>localstatedir</code> est
      	défini à <code><var>PREFIX</var>/var</code>. Cette option est
      	fournie par <code>autoconf</code> et est actuellement
      	inutilisée.</dd>
      
              <dt><code>--mandir=<var>DIR</var></code></dt>
              <dd>Installe les pages de manuel dans  <var>DIR</var>. Par
      	défaut, <code>mandir</code> est défini à
      	<code><var>EPREFIX</var>/man</code>.</dd>
      
              <dt><code>--oldincludedir=<var>DIR</var></code></dt>
              <dd>Installe les fichiers d'en-têtes C pour les programmes
      	autres que gcc dans <var>DIR</var>. Par défaut,
      	<code>oldincludedir</code> est défini à
      	<code>/usr/include</code>. Cette option est fournie par
      	<code>autoconf</code> et est actuellement inutilisée.</dd>
      
              <dt><code>--sbindir=<var>DIR</var></code></dt>
              <dd>Installe les exécutables de l'administrateur système dans
      	<var>DIR</var>. Ce sont les programmes du serveur comme
      	<code class="program"><a href="../programs/httpd.html">httpd</a></code>, <code class="program"><a href="../programs/apachectl.html">apachectl</a></code>,
      	<code class="program"><a href="../programs/suexec.html">suexec</a></code>, etc..., qui sont nécessaires à
      	l'exécution du serveur HTTP Apache. Par défaut,
      	<code>sbindir</code> est défini à
      	<code><var>EPREFIX</var>/sbin</code>.</dd>
      
              <dt><code>--sharedstatedir=<var>DIR</var></code></dt>
              <dd>Installe les données modifiables indépendantes de
      	l'architecture dans <var>DIR</var>. Par défaut,
      	<code>sharedstatedir</code> est défini à
      	<code><var>PREFIX</var>/com</code>. Cette option est fournie par
      	<code>autoconf</code> et est actuellement inutilisée.</dd>
      
              <dt><code>--sysconfdir=<var>DIR</var></code></dt>
              <dd>Installe les données non modifiables spécifiques à la
      	machine comme les fichiers de configuration du serveur
      	<code>httpd.conf</code>, <code>mime.types</code>, etc... dans
      	<var>DIR</var>. Par défaut, <code>sysconfdir</code> est défini à
      	<code><var>PREFIX</var>/conf</code>.</dd>
            </dl>
          
        
      
        <h3><a name="systemtypes" id="systemtypes">Types de systèmes</a></h3>
      
          <p>Ces options sont utilisées pour la cross-compilation du serveur
          HTTP Apache afin de pouvoir l'utiliser sur un autre système. Dans le
          cas général où la compilation et l'exécution du serveur ont lieu sur
          le même système, ces options ne sont pas utilisées.</p>
      
          <dl>
            <dt><code>--build=<var>BUILD</var></code></dt>
            <dd>Définit le type du système sur lequel les outils sont
            compilés. Par défaut, il s'agit de la chaîne renvoyée par le
            script <code>config.guess</code>.</dd>
      
            <dt><code>--host=<var>HOST</var></code></dt>
            <dd>Définit le type du système sur lequel le serveur s'exécutera.
            Par défaut, <var>HOST</var> est identique à <var>BUILD</var>.</dd>
      
            <dt><code>--target=<var>TARGET</var></code></dt>
            <dd>Configure pour construire des compilateurs pour le type de
            système <var>TARGET</var>. Par défaut, <var>TARGET</var> est
            identique à <var>HOST</var>. Cette option est fournie par
      	<code>autoconf</code> et n'est pas requise par le serveur HTTP
      	Apache.</dd>
          </dl>
        
      
        <h3><a name="optionalfeatures" id="optionalfeatures">Fonctionnalités
        optionnelles</a></h3>
      
          <p>Ces options vous permettent de configurer avec précision les
          fonctionnalités de votre futur serveur HTTP.</p>
      
          <h4><a name="generaloptfeat" id="generaloptfeat">Syntaxe générale</a></h4>
            <p>D'une manière générale, vous pouvez utiliser la syntaxe
            suivante pour activer ou désactiver une fonctionnalité :</p>
      
            <dl>
              <dt><code>--disable-<var>FONCTIONNALITE</var></code></dt>
              <dd>Désactive la fonctionnalité <var>FONCTIONNALITE</var>.
      	Identique à
      	<code>--enable-<var>FONCTIONNALITE</var>=no</code>.</dd>
      
              <dt><code>--enable-<var>FONCTIONNALITE</var>[=<var>ARG</var>]</code></dt>
              <dd>Active la fonctionnalité <var>FONCTIONNALITE</var>. La
      	valeur par défaut de <var>ARG</var> est <code>yes</code>.</dd>
      
              <dt><code>--enable-<var>MODULE</var>=shared</code></dt>
              <dd>Le module spécifié sera compilé en tant que module DSO. Par
      	défaut, les modules activés sont liés dynamiquement.</dd>
      
              <dt><code>--enable-<var>MODULE</var>=static</code></dt>
              <dd>Le module correspondant sera lié statiquement.</dd>
            </dl>
      
            <div class="note"><h3>Note</h3>
              Si vous spécifiez <code>--enable-<var>foo</var></code>, et si
      	<var>foo</var> n'existe pas, <code>configure</code> ne le
      	signalera pas ; vous devez donc prendre soin de taper les
      	options correctement.
            </div>
          
      
          <h4><a name="choosemodules" id="choosemodules">Choix des modules à compiler</a></h4>
            <p>La plupart des modules sont compilés par défaut et ils doivent être
            désactivés de manière explicite ou via le mots-clé <code>few</code> (voir
            ci-dessous <code>--enable-modules</code>,
            <code>--enable-mods-shared</code> et <code>--enable-mods-static</code>
            pour une explication plus détaillée), ou
            <code>--enable-modules=none</code> pour les désactiver tous.</p>
      
            <p>Par défaut, les autres modules ne sont pas compilés et doivent
            être activés explicitement, ou en utilisant les mots-clés
            <code>all</code> ou <code>reallyall</code> pour être disponibles.</p>
      
            <p>Pour déterminer quels modules sont compilés par défaut,
            exécutez la commande <code>./configure -h</code> ou
            <code>./configure --help</code>, et consultez les <code>Optional
            Features</code>. Par exemple, supposons que vous soyez intéressé
            par les modules <code>mod_example1</code> et
            <code>mod_example2</code>, et que vous voyiez ceci :</p>
      
              <div class="example"><pre>Optional Features:
        ...
        --disable-example1     example module 1
        --enable-example2      example module 2
        ...</pre></div>
      
              <p>Le module <code>mod_example1</code> est ici activé par
      	défaut, et vous devez spécifier <code>--disable-example1</code>
      	si vous ne voulez pas le compiler. Par contre, le module
      	<code>mod_example2</code> est désactivé par défaut, et vous
      	devez spécifier <code>--enable-example2</code> si vous voulez le
      	compiler.</p>
      
          
      
          <h4><a name="mpms" id="mpms">Modules Multi-Processus</a></h4>
            <p>Les <a href="../mpm.html">Modules Multi-Processus</a>, ou MPMs,
            constituent le coeur du serveur. Un seul MPM doit être actif pour
            que le serveur puisse fonctionner. Vous trouverez la liste des
            MPMs disponibles à <a href="../mod/">module index page</a>.</p>
      
            <p>Les MPMs peuvent être compilés en tant que modules DSO pour un
            chargement dynamique, ou liés statiquement avec le serveur, et
            sont activés via les options suivantes :</p>
      
            <dl>
              <dt><code>--with-mpm=MPM</code></dt>
              <dd>
                <p>Sélectionne le MPM par défaut pour votre serveur. Si les
      	  MPMs sont compilés en tant que modules DSO (voir
      	  <code>--enable-mpms-shared</code>), cette option spécifie le
      	  MPM qui sera chargé par défaut selon le fichier de
      	  configuration. Dans le cas contraire, cette option spécifie le
      	  seul MPM disponible qui sera lié statiquement avec le
      	  serveur.</p>
                <p>Si cette option est omise, c'est le <a href="../mpm.html#defaults">MPM par défaut</a> pour votre
      	  système d'exploitation qui sera utilisé.</p>
              </dd>
      
              <dt><code>--enable-mpms-shared=<var>Liste de MPM</var></code></dt>
              <dd>
                <p>Définit une liste de MPMs à compiler en tant que modules
      	  dynamiquement partagés (DSO). Un de ces modules doit être
      	  chargé dynamiquement via la directive <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code>.</p>
                <p><var>Liste de MPM</var> est une liste, entourée
      	  d'apostrophes,  de noms de MPM séparés par des espaces. Par
      	  exemple :</p>
                <div class="example"><p><code>
                  --enable-mpms-shared='prefork worker'
                </code></p></div>
                <p>Vous pouvez aussi utiliser le mot-clé <code>all</code>, ce
      	  qui aura pour effet de spécifier tous les MPMs qui supportent
      	  le chargement dynamique sur la plate-forme considérée, et de
      	  les compiler en tant que modules DSO. Par exemple :</p>
                <div class="example"><p><code>
                  --enable-mpms-shared=all
                </code></p></div>
      	</dd>
            </dl>
          
      
          <h4><a name="modules" id="modules">Modules tiers</a></h4>
            <p>Pour ajouter des modules tiers, utilisez les options suivantes
            :</p>
      
            <dl>
              <dt><code>--with-module=<var>type-module</var>:<var>fichier-module</var>[,
                <var>type-module</var>:<var>fichier-module</var>]</code></dt>
              <dd><p>Ajoute un ou plusieurs modules tiers à la liste des
      	modules liés statiquement. Le fichier source du module
      	<var>fichier-module</var> sera recherché dans le sous-répertoire
      	<var>type-module</var> de l'arborescence des sources de votre
      	serveur HTTP Apache. S'il ne l'y trouve pas,
      	<code>configure</code> considèrera <var>fichier-module</var>
      	comme un chemin de fichier absolu et essaiera de copier le
      	fichier source dans le sous-répertoire <var>type-module</var>.
      	Si ce sous-répertoire n'existe pas, il sera créé et un fichier
      	<code>Makefile.in</code> standard y sera enregistré.</p>
                <p>Cette option est conçue pour ajouter de petits modules
      	  externes ne comportant qu'un seul fichier source. Pour des
      	  modules plus complexes, vous devrez lire la documentation du
      	  fournisseur du module.</p>
                <div class="note"><h3>Note</h3>
                  Si vous voulez compiler un module DSO (lié de manière
      	    dynamique au lieu de statique), utilisez le programme
      	    <code class="program"><a href="../programs/apxs.html">apxs</a></code>.</div>
              </dd>
      
            </dl>
          
      
          <h4><a name="otheroptfeat" id="otheroptfeat">Options cumulatives et autres
          options</a></h4>
            <dl>
              <dt><code>--enable-maintainer-mode</code></dt>
              <dd>Active les avertissements de débogage et de compilation et
      	charge tous les modules compilés.</dd>
      
              <dt><code>--enable-mods-shared=<var>LISTE-MODULES</var></code></dt>
              <dd>
                <p>Définit une liste de modules à activer et à compiler en
      	  tant que modules dynamiques partagés. Cela signifie que ces
      	  modules doivent être chargés dynamiquement en utilisant la
      	  directive <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code>.</p>
                <p><var>LISTE-MODULES</var> est une liste, entourée
      	  d'apostrophes, de noms de modules
      	  séparés par des espaces. Les noms
      	  des modules sont spécifiés sans le préfixe <code>mod_</code>.
      	  Par exemple :</p>
                <div class="example"><p><code>
                  --enable-mods-shared='headers rewrite dav'
                </code></p></div>
                <p>Vous pouvez aussi utiliser les mots-clés <code>reallyall</code>,
      	  <code>all</code>, <code>most</code> et <code>few</code>. Par
      	  exemple,</p>
                <div class="example"><p><code>
                  --enable-mods-shared=most
                </code></p></div>
                <p>va compiler la plupart des modules en tant que modules DSO,</p>
      	  <div class="example"><p><code>
                  --enable-mods-shared=few
                </code></p></div>
                <p>ne compilera qu'un jeu de modules de base.</p>
                <p>Le jeu par défaut correspond au mot-clé <code>most</code>.</p>
                  
      	  <p>Les directives <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> correspondant aux
      	  différents modules choisis sont automatiquement générées dans
      	  le fichier de configuration principal. Par défaut, toutes ces
      	  directives sont mises en commentaire, sauf pour les modules
      	  requis ou ceux explicitement sélectionnés par un argument
      	  <code>--enable-nom-module</code> du script configure. Vous
      	  pouvez modifier le jeu de modules chargé en activant ou
      	  désactivant les directives <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> dans le fichier
      	  <code>httpd.conf</code>. En outre, les directives <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> peuvent être activées
      	  pour tous les modules compilés via l'option
      	  <code>--enable-load-all-modules</code> du script configure.</p>
                
              </dd>
      
              <dt><code>--enable-mods-static=<var>MODULE-LIST</var></code></dt>
              <dd>Cette option produit le même effet que l'option
      	<code>--enable-mods-shared</code>, à l'exception que les modules
      	seront liés statiquement. Cela signifie que les modules
      	spécifiés seront toujours disponibles au cours du fonctionnement
      	de <code class="program"><a href="../programs/httpd.html">httpd</a></code>. Ils n'ont pas besoin d'être chargés
      	via la directive <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code>.</dd>
      
      	<dt><code>--enable-modules=<var>MODULE-LIST</var></code></dt>
              <dd>Cette option se comporte comme
      	<code>--enable-mods-shared</code>, et va aussi lier les modules
      	concernés dynamiquement. Le mot-clé spécial <code>none</code>
      	désactive la compilation de tous les modules.</dd>
      
              <dt><code>--enable-v4-mapped</code></dt>
              <dd>Permet aux sockets IPv6 de traiter les connexions IPv4.</dd>
      
              <dt><code>--with-port=<var>PORT</var></code></dt>
              <dd>Permet de définir le port que le programme
      	<code class="program"><a href="../programs/httpd.html">httpd</a></code> va écouter. Ce numéro de port est
      	utilisé lors de la génération du fichier de configuration
      	<code>httpd.conf</code>. Sa valeur par défaut est 80.</dd>
      
              <dt><code>--with-program-name</code></dt>
              <dd>Permet de définir un nom d'exécutable alternatif. Le nom par
      	défaut est <code>httpd</code>.</dd>
            </dl>
          
        
      
        <h3><a name="packages" id="packages">Paquets optionnels</a></h3>
          <p>Ces options permettent de définir des paquets optionnels.</p>
      
          <h4><a name="generalpackages" id="generalpackages">Syntaxe générale</a></h4>
            <p>D'une manière générale, vous pouvez utiliser la syntaxe
            suivante pour définir un paquet optionnel :</p>
      
            <dl>
              <dt><code>--with-<var>PAQUET</var>[=<var>ARG</var>]</code></dt>
              <dd>Utilise le paquet <var>PAQUET</var>. La valeur par défaut de
      	<var>ARG</var> est <code>yes</code>.</dd>
      
              <dt><code>--without-<var>PAQUET</var></code></dt>
              <dd>N'utilise pas le paquet <var>PAQUET</var>. Cette option est
      	identique à <code>--with-<var>PAQUET</var>=no</code>. Elle est
      	fournie par <code>autoconf</code> mais n'est pas très utile pour
      	le serveur HTTP Apache.</dd>
            </dl>
          
      
          
      
          <h4><a name="packageopt" id="packageopt">Paquets spécifiques</a></h4>
            <dl>
              <dt><code>--with-apr=<var>REP</var>|<var>FICHIER</var></code></dt>
              <dd>La <a class="glossarylink" href="../glossary.html#apr" title="voir glossaire">Bibliothèque pour la portabilité
      	d'Apache ou
      	Apache Portable Runtime</a> (APR) fait partie de la
      	distribution des sources de httpd et est compilée
      	automatiquement avec le serveur HTTP. Si vous voulez utiliser
      	une APR déjà installée à la place, vous devez indiquer à
      	<code>configure</code> le chemin du script
      	<code>apr-config</code>. Vous pouvez spécifier le chemin absolu
      	et le nom ou le répertoire d'installation de l'APR.
      	<code>apr-config</code> doit se trouver dans ce répertoire ou
      	dans le sous-repertoire <code>bin</code>.</dd>
      
              <dt><code>--with-apr-util=<var>REP</var>|<var>FICHIER</var></code></dt>
              <dd>Les utilitaires pour la Bibliothèque pour la portabilité
      	d'Apache ou Apache Portable Runtime Utilities (APU) font partie de la
      	distribution des sources de httpd et sont compilés
      	automatiquement avec le serveur HTTP. Si vous voulez utiliser
      	des APU déjà installés à la place, vous devez indiquer à
      	<code>configure</code> le chemin du script
      	<code>apu-config</code>. Vous pouvez spécifier le chemin absolu
      	et le nom ou le répertoire d'installation des APU.
      	<code>apu-config</code> doit se trouver dans ce répertoire ou
      	dans le sous-repertoire <code>bin</code>.</dd>
      
              <dt><code>--with-ssl=<var>REP</var></code></dt>
              <dd>Si <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> a été activé,
      	<code>configure</code> recherche une installation d'OpenSSL.
      	Vous pouvez définir le répertoire de la boîte à outils SSL/TLS à
      	la place.</dd>
      
              <dt><code>--with-z=<var>REP</var></code></dt>
              <dd><code>configure</code> recherche automatiquement une
      	bibliothèque <code>zlib</code> installée si la configuration de
      	vos sources en nécessite une (par exemple lorsque
      	<code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code> est activé). Vous pouvez définir le
      	répertoire de la bibliothèque de compression à la place.</dd>
            </dl>
      
            <p>De nombreuses fonctionnalités du serveur HTTP Apache, y compris
            les directives <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> DBM de
            <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code> et <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code>
            utilisent une base de données simple
            de la forme clé/valeur pour une recherche rapide d'informations.
            SDBM, inclus dans les APU, est donc toujours disponible. Si vous
            souhaitez utiliser d'autres types de bases de données, utilisez
            les options suivantes afin de les activer :</p>
      
            <dl>
              <dt><code>--with-gdbm[=<var>chemin</var>]</code></dt>
              <dd>Si aucun <var>chemin</var> n'est spécifié,
      	<code>configure</code> va rechercher les fichiers d'en-têtes et
      	les bibliothèques d'une installation DBM GNU dans les chemins
      	standards. Avec un <var>chemin</var> explicite,
      	<code>configure</code> recherchera les fichiers concernés dans
      	<code><var>chemin</var>/lib</code> et
      	<code><var>chemin</var>/include</code>. En fait,
      	<var>chemin</var> permet de spécifier plusieurs chemins
      	d'en-têtes et bibliothèques spécifiques en les séparant par des
      	caractères ':'.</dd>
      
              <dt><code>--with-ndbm[=<var>chemin</var>]</code></dt>
              <dd>Identique à <code>--with-gdbm</code>, mais recherche une
      	installation de New DBM.</dd>
      
              <dt><code>--with-berkeley-db[=<var>chemin</var>]</code></dt>
              <dd>Identique à <code>--with-gdbm</code>, mais recherche une
      	installation de Berkeley DB.</dd>
            </dl>
      
            <div class="note"><h3>Note</h3>
              <p>Les options DBM sont fournies par les APU et passées en
      	paramètres à son script de configuration. Elles sont inutiles
      	lorsqu'on utilise des APU déjà installés définis par
      	<code>--with-apr-util</code>.</p>
              <p>Vous pouvez utiliser plusieurs implémentations DBM avec votre
      	serveur HTTP. Le type DBM approprié sera choisi au cours de la
      	configuration de l'exécution à chaque démarrage.</p>
            </div>
          
        
      
        <h3><a name="supportopt" id="supportopt">Options pour les programmes de
        support</a></h3>
          <dl>
            <dt><code>--enable-static-support</code></dt>
            <dd>Permet de compiler une version des binaires de support liés
            statiquement. En d'autres termes, la compilation produira un
            exécutable indépendant comportant toutes les bibliothèques
            nécessaires. Sans cette option, les binaires de supports sont liés
            dynamiquement.</dd>
      
            <dt><code>--enable-suexec</code></dt>
            <dd>Utilisez cette option pour activer la programme
            <code class="program"><a href="../programs/suexec.html">suexec</a></code>, qui vous permet de définir un uid et un
            gid pour les processus lancés. <strong>N'utilisez cette option que
            si vous maîtrisez toutes les implications en matière de sécurité
            de l'exécution d'un binaire suid sur votre serveur.</strong>
            D'autres options permettent de configurer
            <code class="program"><a href="../programs/suexec.html">suexec</a></code> comme décrit <a href="#suexec">ci-dessous</a>.</dd>
          </dl>
      
          <p>Il est possible de lier statiquement le binaire d'un programme
          support particulier en utilisant les options suivantes :</p>
      
          <dl>
            <dt><code>--enable-static-ab</code></dt>
            <dd>Compile une version liée statiquement du programme
            <code class="program"><a href="../programs/ab.html">ab</a></code>.</dd>
      
            
            <dt><code>--enable-static-checkgid</code></dt>
            <dd>&gt;Compile une version liée statiquement du programme
            <code>checkgid</code>.</dd>
      
            <dt><code>--enable-static-htdbm</code></dt>
            <dd>Compile une version liée statiquement du programme <code class="program"><a href="../programs/htdbm.html">htdbm</a></code>.</dd>
      
            <dt><code>--enable-static-htdigest</code></dt>
            <dd>Compile une version liée statiquement du programme <code class="program"><a href="../programs/htdigest.html">htdigest</a></code>.</dd>
      
            <dt><code>--enable-static-htpasswd</code></dt>
            <dd>Compile une version liée statiquement du programme <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code>.</dd>
      
            <dt><code>--enable-static-logresolve</code></dt>
            <dd>Compile une version liée statiquement du programme <code class="program"><a href="../programs/logresolve.html">logresolve</a></code>.</dd>
      
            <dt><code>--enable-static-rotatelogs</code></dt>
            <dd>Compile une version liée statiquement du programme <code class="program"><a href="../programs/rotatelogs.html">rotatelogs</a></code>.</dd>
          </dl>
      
          <h4><a name="suexec" id="suexec">Options de configuration de <code>suexec</code></a></h4>
            
            <p>Les options suivantes permettent de définir avec précision le
            comportement du programme <code class="program"><a href="../programs/suexec.html">suexec</a></code>. Voir <a href="suexec.html#install">Configurer et installer suEXEC</a>
      	pour plus de détails.</p>
      
            <dl>
              <dt><code>--with-suexec-bin</code></dt>
              <dd>Définit le chemin du binaire <code class="program"><a href="../programs/suexec.html">suexec</a></code>. La
      	valeur par défaut est <code>--sbindir</code> (voir <a href="#directoryfinetuning">Définition précise des répertoires
      	d'installation</a>).</dd>
      
              <dt><code>--with-suexec-caller</code></dt>
              <dd>Définit l'utilisateur qui a l'autorisation d'appeler
      	<code class="program"><a href="../programs/suexec.html">suexec</a></code>. Il est en général souhaitable que ce
      	soit le même que celui sous lequel <code class="program"><a href="../programs/httpd.html">httpd</a></code>
      	s'exécute.</dd>
      
              <dt><code>--with-suexec-docroot</code></dt>
              <dd>Définit l'arborescence des répertoires dans laquelle le
      	lancement des exécutables via <code class="program"><a href="../programs/suexec.html">suexec</a></code> est
      	autorisé. La valeur par défaut est
      	<code>--datadir/htdocs</code>.</dd>
      
              <dt><code>--with-suexec-gidmin</code></dt>
              <dd>Définit la valeur de GID la plus basse autorisée comme
      	valeur cible pour <code class="program"><a href="../programs/suexec.html">suexec</a></code>. La valeur par
      	défaut est 100.</dd>
      
              <dt><code>--with-suexec-logfile</code></dt>
              <dd>Définit le nom du fichier journal de
      	<code class="program"><a href="../programs/suexec.html">suexec</a></code>. La valeur par défaut est
      	<code>--logfiledir/suexec_log</code>.</dd>
      
              <dt><code>--with-suexec-safepath</code></dt>
              <dd>Définit la valeur de la variable d'environnement
      	<code>PATH</code> pour les processus lancés par
      	<code class="program"><a href="../programs/suexec.html">suexec</a></code>. La valeur par défaut est
      	<code>/usr/local/bin:/usr/bin:/bin</code>.</dd>
      
              <dt><code>--with-suexec-userdir</code></dt>
              <dd>Définit le sous-répertoire du répertoire utilisateur qui
      	contient tous les exécutables pouvant être lancés par
      	<code class="program"><a href="../programs/suexec.html">suexec</a></code>. Cette option est nécessaire si vous
      	souhaitez utiliser <code class="program"><a href="../programs/suexec.html">suexec</a></code> avec des
      	répertoires utilisateurs (définis via
      	<code class="module"><a href="../mod/mod_userdir.html">mod_userdir</a></code>). La valeur par défaut est
      	<code>public_html</code>.</dd>
      
              <dt><code>--with-suexec-uidmin</code></dt>
              <dd>Définit la valeur d'UID la plus basse autorisée comme
      	valeur cible pour <code class="program"><a href="../programs/suexec.html">suexec</a></code>. La valeur par
      	défaut est 100.</dd>
      
              <dt><code>--with-suexec-umask</code></dt>
              <dd>Définit le masque de permissions <code>umask</code> pour les
      	processus lancés par <code class="program"><a href="../programs/suexec.html">suexec</a></code>. Il correspond
      	par défaut au masque défini par la configuration de votre
      	système.</dd>
            </dl>
          
        
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="env" id="env">Variables d'environnement</a></h2>
        <p>Certaines variables d'environnement permettent de modifier les
        choix effectués par <code>configure</code>, ou d'aider ce dernier à
        trouver les bibliothèques et programmes possédant des noms et chemins
        non standards.</p>
      
        
        <dl>
          <dt><code>CC</code></dt>
          <dd>Définit la commande du compilateur C à utiliser pour la
          compilation.</dd>
      
          <dt><code>CFLAGS</code></dt>
          <dd>Définit les paramètres du compilateur C que vous voulez utiliser
          pour la compilation.</dd>
      
          <dt><code>CPP</code></dt>
          <dd>Définit la commande du préprocesseur C à utiliser.</dd>
      
          <dt><code>CPPFLAGS</code></dt>
          <dd>Définit les paramètres du préprocesseur C/C++, par exemple
          <code>-I<var>répertoire-include</var></code>, si certains de vos
          fichiers d'en-têtes se trouvent dans le répertoire non standard
          <var>répertoire-include</var>.</dd>
      
          <dt><code>LDFLAGS</code></dt>
          <dd>Définit les paramètres de l'éditeur de liens, par exemple
          <code>-L<var>répertoire-lib</var></code>, si certaines de vos
          bibliothèques se trouvent dans le répertoire non standard
          <var>répertoire-lib</var>.</dd>
        </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/configure.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/configure.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/configure.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/configure.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/configure.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/logresolve.html.fr.utf8�������������������������������������������0000644�0000000�0000050�00000016225�13412755316�021652� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>logresolve - Résoud les adresses IP en noms d'hôtes dans les
        fichiers journaux d'Apache - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>logresolve - Résoud les adresses IP en noms d'hôtes dans les
        fichiers journaux d'Apache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/logresolve.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/logresolve.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/logresolve.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/logresolve.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
           <p><code>logresolve</code> est un programme agissant après
           traitement pour résoudre les adresses IP dans les journaux d'accès
           d'Apache. Pour minimiser la charge de votre serveur de noms,
           logresolve possède son propre cache interne sous forme d'une table
           de hashage. Cela implique que chaque numéro IP ne fera l'objet
           d'une requête DNS que la première fois où il est rencontré dans le
           fichier journal.</p>
      
           <p>Le programme reçoit le fichier journal sur son entrée standard.
           Les adresses IP doivent se trouver en tête de chaque ligne et
           doivent être séparées du reste de la ligne par un espace.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Syntaxe</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Syntaxe</a></h2>
      
           <p><code><strong>logresolve</strong> [ -<strong>s</strong>
           <var>nom-fichier</var> ] [ -<strong>c</strong> ] &lt;
           <var>access_log</var> &gt; <var>access_log.new</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
      
      <dl>
      
      <dt><code>-s <var>nom-fichier</var></code></dt>
      
      <dd>Spécifie le nom du fichier où seront enregistrées des
      statistiques.</dd>
      
      <dt><code>-c</code></dt>
      
      <dd>Avec cette option, <code>logresolve</code> effectue certaines
      vérifications DNS : après avoir trouvé le nom d'hôte correspondant à une
      adresse IP, <code>logresolve</code> effectue une recherche DNS sur ce
      nom d'hôte et vérifie si une des adresses IP trouvées correspond à
      l'adresse originale.</dd>
      
      </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/logresolve.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/logresolve.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/logresolve.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/logresolve.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/logresolve.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/httxt2dbm.html.fr.utf8��������������������������������������������0000644�0000000�0000050�00000020052�13412755316�021402� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>httxt2dbm - Génère des fichiers dbm à utiliser avec
      RewriteMap - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>httxt2dbm - Génère des fichiers dbm à utiliser avec
      RewriteMap</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/httxt2dbm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/httxt2dbm.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/httxt2dbm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>httxt2dbm</code> permet, à partir d'une entrée au format
          texte, de générer des fichiers dbm à utiliser dans les directives
          <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> avec le type
          de table <code>dbm</code>.
          </p>
      
          <p>Si le fichier de sortie existe déjà, il ne sera pas tronqué. Les
          nouvelles clés seront ajoutées et les clés préexistantes mises à
          jour.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Syntaxe</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Exemples</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Syntaxe</a></h2>
          <p><code><strong>httxt2dbm</strong>
          [ -<strong>v</strong> ]
          [ -<strong>f</strong> <var>TYPE_DBM</var> ]
          -<strong>i</strong> <var>TEXTE_SOURCE</var>
          -<strong>o</strong> <var>SORTIE_DBM</var>
          </code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code>-v</code></dt>
          <dd>Sortie plus verbeuse</dd>
      
          <dt><code>-f <var>TYPE_DBM</var></code></dt>
          <dd>Spécifie le type DBM à utiliser pour le fichier de sortie.
          S'il n'est pas spécifié, c'est la valeur par défaut de
          l'<a class="glossarylink" href="../glossary.html#apr" title="voir glossaire">APR</a> qui sera utilisée. Les types disponibles
          sont :
          <code>GDBM</code> pour les fichiers GDBM,
          <code>SDBM</code> pour les fichiers SDBM,
          <code>DB</code> pour les fichiers DB,
          <code>NDBM</code> pour les fichiers NDBM,
          <code>default</code> pour le type DBM par défaut
          </dd>
      
          <dt><code>-i <var>TEXTE_SOURCE</var></code></dt>
          <dd>Le fichier d'entrée à partir duquel le fichier dbm sera créé. Le
          fichier doit être formaté de façon à ne contenir qu'un seul
          enregistrement par ligne, de la forme : <code>clé valeur</code>.
          Voir la documentation de la directive <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> pour plus de détails à
          propos du format de ce fichier et de sa signification.
          </dd>
      
          <dt><code>-o <var>SORTIE_DBM</var></code></dt>
          <dd>Nom du fichier dbm de sortie.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Exemples</a></h2>
          <div class="example"><p><code>
            httxt2dbm -i rewritemap.txt -o rewritemap.dbm<br />
            httxt2dbm -f SDBM -i rewritemap.txt -o rewritemap.dbm<br />
          </code></p></div>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/httxt2dbm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/httxt2dbm.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/httxt2dbm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/httxt2dbm.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/log_server_status.html.en�����������������������������������������0000644�0000000�0000050�00000014000�13412755316�022336� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>log_server_status - Log periodic status summaries - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>log_server_status - Log periodic status summaries</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/log_server_status.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/log_server_status.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>This perl script is designed to be run at a frequent interval by
          something like cron. It connects to the server and downloads the status
          information. It reformats the information to a single line and logs it to
          a file. Adjust the variables at the top of the script to specify the
          location of the resulting logfile. <code class="module"><a href="../mod/mod_status.html">mod_status</a></code> will
          need to be loaded and configured in order for this script to do its
          job.</p>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configure" id="configure">Usage</a></h2>
      
      <p>The script contains the following section.</p>
      
      <pre class="prettyprint lang-perl">my $wherelog = "/usr/local/apache2/logs/";  # Logs will be like "/usr/local/apache2/logs/19960312"
      my $server   = "localhost";        # Name of server, could be "www.foo.com"
      my $port     = "80";               # Port on server
      my $request = "/server-status/?auto";    # Request to send</pre>
      
      
      <p>You'll need to ensure that these variables have the correct values,
      and you'll need to have the <code>/server-status</code> handler
      configured at the location specified, and the specified log location
      needs to be writable by the user which will run the script.</p>
      
      <p>Run the script periodically via cron to produce a daily log file,
      which can then be used for statistical analysis.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/log_server_status.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/log_server_status.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/log_server_status.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>httpd-2.4.41/docs/manual/programs/configure.html����������������������������������������������������0000644�0000000�0000050�00000000613�13362070302�020136� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: configure.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: configure.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: configure.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: configure.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ���������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/dbmmanage.html����������������������������������������������������0000644�0000000�0000050�00000000613�13362070302�020070� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: dbmmanage.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: dbmmanage.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: dbmmanage.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: dbmmanage.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ���������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htcacheclean.html�������������������������������������������������0000644�0000000�0000050�00000000627�13362070302�020564� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: htcacheclean.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: htcacheclean.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: htcacheclean.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: htcacheclean.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ���������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/httxt2dbm.html.en�������������������������������������������������0000644�0000000�0000050�00000017335�13412755316�020522� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>httxt2dbm - Generate dbm files for use with RewriteMap - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>httxt2dbm - Generate dbm files for use with RewriteMap</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/programs/httxt2dbm.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/httxt2dbm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/httxt2dbm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code>httxt2dbm</code> is used to generate dbm files from text input, for
          use in <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> with the
          <code>dbm</code> map type.</p>
          
          <p>If the output file already exists, it will not be truncated. New keys will be
          added and existing keys will be updated.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Examples</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Synopsis</a></h2>
          <p><code><strong>httxt2dbm</strong>
          [ -<strong>v</strong> ]
          [ -<strong>f</strong> <var>DBM_TYPE</var> ]
          -<strong>i</strong> <var>SOURCE_TXT</var>
          -<strong>o</strong> <var>OUTPUT_DBM</var>
          </code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
          <dl>
          <dt><code>-v</code></dt>
          <dd>More verbose output</dd>
      
          <dt><code>-f <var>DBM_TYPE</var></code></dt>
          <dd>Specify the DBM type to be used for the output. If not specified, will
          use the <a class="glossarylink" href="../glossary.html#apr" title="see glossary">APR</a> Default. Available types are:
          <code>GDBM</code> for GDBM files,
          <code>SDBM</code> for SDBM files,
          <code>DB</code> for berkeley DB files,
          <code>NDBM</code> for NDBM files,
          <code>default</code> for the default DBM type.
          </dd>
      
          <dt><code>-i <var>SOURCE_TXT</var></code></dt>
          <dd>Input file from which the dbm is to be created. The file should be formated
          with one record per line, of the form: <code>key value</code>.
          See the documentation for <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> for
          further details of this file's format and meaning.
          </dd>
      
          <dt><code>-o <var>OUTPUT_DBM</var></code></dt>
          <dd>Name of the output dbm files.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Examples</a></h2>
          <div class="example"><p><code>
            httxt2dbm -i rewritemap.txt -o rewritemap.dbm<br />
            httxt2dbm -f SDBM -i rewritemap.txt -o rewritemap.dbm<br />
          </code></p></div>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/programs/httxt2dbm.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/httxt2dbm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/httxt2dbm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/httxt2dbm.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/apxs.html.tr.utf8�������������������������������������������������0000644�0000000�0000050�00000053526�13447004010�020451� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>apxs - Apache Eklenti Aracı - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>apxs - Apache Eklenti Aracı</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/apxs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apxs.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apxs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apxs.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code><strong>apxs</strong></code>, Apache Hiper Metin Aktarım
           Protokolü (HTTP) sunucusu için ek modül derleme ve kurulum aracıdır. Bu
           araç sayesinde, bir veya daha fazla kaynak veya nesne
           <var>dosya</var>sından bir devingen paylaşımlı nesne (DSO - "Dynamic
           Shared Object" kısaltması) derlemek ve bu nesneyi (modülü) Apache
           sunucusuna çalışma anında <strong><code class="module"><a href="../mod/mod_so.html">mod_so</a></code></strong>
           modülünün <strong><code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code></strong> yönergesi üzerinden yüklemek mümkün
           olmaktadır.</p>
      
          <p>Bu eklenti mekanizmasını platformunuzda kullanmak için DSO desteğinin
           olması ve <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong> programının
           <strong><code class="module"><a href="../mod/mod_so.html">mod_so</a></code></strong> modülünü içerecek şekilde
           derlenmiş olması gerekir. Eğer bunlar mevcut değilse
           <strong><code>apxs</code></strong> aracı durumu size bildirecektir. Bunu
           aşağıdaki komutla kendiniz de sınayabilirsiniz:</p>
      
          <div class="example"><p><code>
            $ httpd -l
          </code></p></div>
      
          <p><strong><code class="module"><a href="../mod/mod_so.html">mod_so</a></code></strong> modülü gösterilen listede yer
           almalıdır. Bu gereksinimler sağlandığı takdirde
           <strong><code>apxs</code></strong> aracı sayesinde DSO mekanizması
           üzerinden kendi modüllerinizi kurmak suretiyle Apache sunucunuzun
           işlevselliğini kolayca arttırabilirsiniz. Örnek bir uygulama:</p>
      
          <div class="example"><p><code>
            $ apxs -i -a -c mod_foo.c<br />
            gcc -fpic -DSHARED_MODULE -I/dosya/yolu/apache/include -c mod_foo.c<br />
            ld -Bshareable -o mod_foo.so mod_foo.o<br />
            cp mod_foo.so /dosya/yolu/apache/modules/mod_foo.so<br />
            chmod 755 /dosya/yolu/apache/modules/mod_foo.so<br />
            [`foo' modülü /dosya/yolu/apache/etc/httpd.conf'ta etkinleştiriliyor]<br />
            $ apachectl restart<br />
            /dosya/yolu/apache/sbin/apachectl restart: httpd not running, trying to start<br />
            [Tue Mar 31 11:27:55 1998] [debug] mod_so.c(303): loaded module foo_module<br />
            /dosya/yolu/apache/sbin/apachectl restart: httpd started<br />
            $ _
          </code></p></div>
      
          <p><var>dosya</var> olarak bir C kaynak dosyası (.c), bir nesne dosyası
           (.o) ve hatta bir kütüphane arşivi archive (.a) belirtebilirsiniz.
           <strong><code>apxs</code></strong> aracı bu dosya uzantılarını
           tanıdığından C dosyalarını derleme işleminden, arşiv ve nesne
           dosyalarını ise doğrudan ilintileme işleminden geçirir. Fakat böyle
           önceden derlenmiş nesne dosyalarını kullanırken, devingen paylaşımlı
           nesne olarak kullanılmalarını sağlamak üzere konumdan bağımsız kod (PIC)
           üretecek şekilde derlenmiş olduklarından emin olmalısınız. Örneğin
           GCC'yi bunun için daima <strong><code>-fpic</code></strong> seçeneği ile
           kullanmalısınız. Diğer C derleyiciler için,
           <strong><code>apxs</code></strong>'in nesne dosyalarını derlerken
           kullanacağı seçenekleri öğrenmek için o derleyicilerin kılavuz
           sayfalarına bakınız.</p>
      
          <p>Apache'deki DSO desteği ile ilgili daha ayrıntılı bilgi edinmek için
           <strong><code class="module"><a href="../mod/mod_so.html">mod_so</a></code></strong> belgesini okumakla yetinmeyip
           <code>src/modules/standard/mod_so.c</code> kaynak dosyasını da
           okuyunuz.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Kullanım</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Örnekler</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><code class="program"><a href="../programs/apachectl.html">apachectl</a></code></li><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Kullanım</a></h2>
          <p><code><strong>apxs</strong> -<strong>g</strong>
          [ -<strong>S</strong> <var>isim=deÄŸer</var> ]
          -<strong>n</strong> <var>modüladı</var></code></p>
      
          <p><code><strong>apxs</strong> -<strong>q</strong>
          [ -<strong>v</strong> ]
          [ -<strong>S</strong> <var>isim=deÄŸer</var> ]
          <var>sorgu</var> ...</code></p>
      
          <p><code><strong>apxs</strong> -<strong>c</strong>
          [ -<strong>S</strong> <var>isim=deÄŸer</var> ]
          [ -<strong>o</strong> <var>dso-dosyası</var> ]
          [ -<strong>I</strong> <var>include-dizini</var> ]
          [ -<strong>D</strong> <var>isim=deÄŸer</var> ]
          [ -<strong>L</strong> <var>lib-dizini</var> ]
          [ -<strong>l</strong> <var>kütüphane-adı</var> ]
          [ -<strong>Wc,</strong><var>derleyici-seçenekleri</var> ]
          [ -<strong>Wl,</strong><var>ilintileyici-seçenekleri</var> ]
          [ -<strong>p</strong> ]
          <var>dosya</var> ...</code></p>
      
          <p><code><strong>apxs</strong> -<strong>i</strong>
          [ -<strong>S</strong> <var>isim=deÄŸer</var> ]
          [ -<strong>n</strong> <var>modüladı</var> ]
          [ -<strong>a</strong> ]
          [ -<strong>A</strong> ]
          <var>dso-dosyası</var> ...</code></p>
      
          <p><code><strong>apxs</strong> -<strong>e</strong>
          [ -<strong>S</strong> <var>isim=deÄŸer</var> ]
          [ -<strong>n</strong> <var>modüladı</var> ]
          [ -<strong>a</strong> ]
          [ -<strong>A</strong> ]
          <var>dso-dosyası</var> ...</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
          <h3><a name="options.common" id="options.common">Ortak Seçenekler</a></h3>
            <dl>
              <dt><code><strong>-n</strong> <var>modüladı</var></code></dt>
              <dd><code><strong>-i</strong></code> (kurulum) ve
               <code><strong>-g</strong></code> (şablon üretimi)
               seçenekleri için modül ismi belirtmek amacıyla kullanılır. Bir modül
               ismi belirtmek için bu seçeneği kullanın.
               <code><strong>-g</strong></code> seçeneği için bu gereklidir.
               <code><strong>-i</strong></code> seçeneği için ise araç, modül
               ismini kaynağın ismine bakarak veya (son çare olarak) dosya isminden
               tahmin etmeye çalışarak saptamaya çalışır.</dd>
            </dl>
          
      
          <h3><a name="options.query" id="options.query">Sorgu Seçenekleri</a></h3>
            <dl>
              <dt><code><strong>-q</strong> <var>sorgu</var></code></dt>
              <dd><code>httpd</code>'yi derlemekte kullanılacak değişkenler ve
               ortam ayarları için bir sorgu gerçekleştirir.  When invoked without
               <code><var>sorgu</var></code> belirtilmeksizin çağrıldığında, bilinen
               değişkenleri değerleriyle birlikte basar. İsteğe bağlı
               <code><strong>-v</strong></code> seçeneği liste çıktısını biçemler.
      
               <p>Modülünüzü yükleyecek <code><strong>httpd</strong></code>'yi
                derlemek için kullanılacak ayarları elle belirtmek için kullanılır.
                Örneğin, Apache'nin C başlık dosyalarının yerini kendi Makefile
                dosyalarınızın içinde şöyle belirtebilirsiniz:</p>
              <div class="example"><p><code>
                INC=-I`apxs -q INCLUDEDIR`
              </code></p></div></dd>
            </dl>
          
      
          <h3><a name="options.conf" id="options.conf">Yapılandırma Seçenekleri</a></h3>
            <dl>
            <dt><code><strong>-S</strong> <var>isim=deÄŸer</var></code></dt>
            <dd>Bu seçenek yukarıda açıklanan <code><strong>apxs</strong></code>
              ayarlarını değiştirir.</dd>
            </dl>
          
      
          <h3><a name="options.template" id="options.template">Şablon Üretme Seçenekleri</a></h3>
            <dl>
            <dt><code><strong>-g</strong></code></dt>
            <dd><code><var>modüladı</var></code> (<strong><code>-n</code></strong>
             seçeneğine bakınız) adında bir alt dizin oluşturur ve içine iki dosya
             yerleştirir: Kendi modülünüzü oluşturabilmeniz için veya
             <code><strong>apxs</strong></code> mekanizmaları ile hemen oynamaya
             başlayabilmeniz için <code>mod_<var>modüladı</var>.c</code> adında bir
             modül kaynak dosyası örneği ve bu modülü derleyip kurmayı
             kolaylaştırmak için bir <code>Makefile</code> dosyası.</dd>
            </dl>
          
      
          <h3><a name="options.dso" id="options.dso">DSO Derleme Seçenekleri</a></h3>
            <dl>
            <dt><code><strong>-c</strong></code></dt>
            <dd>Bu seçenek derleme yapılacağını belirtir. Önce belirtilen C kaynak
             <var>dosyalar</var>ını (.c), nesne dosyalarını (.o) elde etmek için
             derler. Sonra bunları kalan nesne dosyaları (.o ve .a) ile
             ilintileyerek <var>dso-dosyası</var> adında bir devingen paylaşımlı
             nesne oluşturur. Eğer <strong><code>-o</code></strong> seçeneği ile
             modül ismi belirtilmemişse <var>dosyalar</var> arasındaki ilk dosyanın
             ismine bakarak dosya ismi tahmin edilmeye çalışılır ve
             <code>mod_<var>isim</var>.so</code> dosya adı bu isimden elde
             edilir.</dd>
      
            <dt><code><strong>-o</strong> <var>dso-dosyası</var></code></dt>
            <dd>Oluşturulacak devingen paylaşımlı nesnenin ismini belirtmek için
             kullanılır. Modül ismi bu seçenekle belirtilmez ve <var>dosya</var>
             listesinden bir isim tahmini de yapılamazsa son çare olarak
             <code>mod_unknown.so</code> ismi kullanılır.</dd>
      
            <dt><code><strong>-D</strong> <var>isim=deÄŸer</var></code></dt>
            <dd>Bu seçenek doğrudan derleme komutlarına aktarılır. Bu seçeneği
             derleme işlemine kendi tanımlarınızı belirtmek için kullanın.</dd>
      
            <dt><code><strong>-I</strong> <var>include-dizini</var></code></dt>
            <dd>Bu seçenek doğrudan derleme komutlarına aktarılır. Bu seçeneği
             derleme işleminde kullanılmak üzere kendi başlık dosyalarınızı içeren
             dizinleri arama yollarına eklemek için kullanın.</dd>
      
            <dt><code><strong>-L</strong> <var>lib-dizini</var></code></dt>
            <dd>Bu seçenek doğrudan derleme komutlarına aktarılır. Bu seçeneği
             derleme işleminde kullanılmak üzere kendi kütüphane dizinlerinizi
             arama yollarına eklemek için kullanın.</dd>
      
            <dt><code><strong>-l</strong> <var>kütüphane-adı</var></code></dt>
            <dd>Bu seçenek doğrudan derleme komutlarına aktarılır. Bu seçeneği
             derleme işleminde kullanılmak üzere kendi kütüphanelerinizi arama
             yollarına eklemek için kullanın.</dd>
      
            <dt><code><strong>-Wc</strong>,<var>derleyici-seçenekleri</var></code></dt>
            <dd>Bu seçenek <code>libtool --mode=compile</code> komutuna doğrudan
             seçenek aktarmak için kullanılır. Bu seçeneği yerel derleyiciniz için
             gereken ek seçenekleri belirtmek için kullanın.</dd>
      
            <dt><code><strong>-Wl</strong>,<var>ilintileyici-seçenekleri</var></code></dt>
            <dd>Bu seçenek <code>libtool --mode=link</code> komutuna doğrudan
             seçenek aktarmak için kullanılır. Bu seçeneği yerel ilintileyiciniz
             için gereken ek seçenekleri belirtmek için kullanın.</dd>
      
           <dt><code><strong>-p</strong></code></dt>
           <dd>Bu seçenek apxs'in apr/apr-util kütüphaneleriyle ilintilenmesini
             sağlar. apr/apr-util kütüphanelerini kullanan yardımcı uygulamaları
             derlerken yararlıdır.</dd>
            </dl>
          
      
          <h3><a name="options.dsoinstall" id="options.dsoinstall">DSO Kurulum ve Yapılandırma Seçenekleri</a></h3>
          
            <dl>
            <dt><code><strong>-i</strong></code></dt>
            <dd>Kurulum işlemini belirtir ve devingen olarak paylaşımlı nesneleri
             sunucunun <var>modules</var> dizinine kurar.</dd>
      
            <dt><code><strong>-a</strong></code></dt>
            <dd>İlgili <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> satırını
             Apache'nin <code>httpd.conf</code> yapılandırma dosyasına özdevinimli
             olarak ekleyerek veya böyle bir satır varsa bunu etkin kılarak modülü
             etkinleÅŸtirir.</dd>
      
            <dt><code><strong>-A</strong></code></dt>
            <dd><strong><code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code></strong>
             yönergesini daha sonra etkinleştirmek üzere satırın başına bir diyez
             imi (<code>#</code>) yerleştirmesi dışında
             <strong><code>-a</code></strong> seçeneği ile aynıdır.</dd>
      
            <dt><code><strong>-e</strong></code></dt>
            <dd>Modülü kurmaya çalışmaksızın Apache'nin <code>httpd.conf</code>
             yapılandırma dosyasını <strong><code>-i</code></strong> işlemine
             benzer ÅŸekilde <strong><code>-a</code></strong> ve
             <strong><code>-A</code></strong> seçenekleri ile düzenleme işlemini
             belirtir.</dd>
            </dl>
          
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Örnekler</a></h2>
          <p>Apache'nin sunucu işlevselliğini genişletmek amacıyla kullanacağınız
           <code>mod_foo.c</code> adında bir Apache modülünüz olduğunu varsayalım.
           Öncelikle, C kaynak dosyasını, Apache sunucusuna çalışma anında
           yüklenmeye uygun bir paylaşımlı nesne olarak derlemeniz gerekir. Bunu
           sağlamak için şu komutları vermelisiniz:</p>
      
          <div class="example"><p><code>
            $ apxs -c mod_foo.c<br />
            /dosya/yolu/libtool --mode=compile gcc ... -c mod_foo.c<br />
            /dosya/yolu/libtool --mode=link gcc ... -o mod_foo.la mod_foo.slo<br />
            $ _
          </code></p></div>
      
          <p>Bundan sonra, Apache yapılandırmanızın bu paylaşımlı nesneyi yüklemek
           için bir <strong><code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code></strong> yönergesi içermesini
           sağlamalısınız. <strong><code>apxs</code></strong> bu adımı
           basitleştirmek amacıyla, paylaşımlı nesneyi sunucunun <var>modules</var>
           dizinine özdevinimli olarak kurmak ve <code>httpd.conf</code> dosyasını
           buna uygun olarak güncellemek için bir yol sağlar. Bu sonuç şöyle elde
           edilebilir:</p>
      
          <div class="example"><p><code>
            $ apxs -i -a mod_foo.la<br />
            /dosya/yolu/instdso.sh mod_foo.la /path/to/apache/modules<br />
            /dosya/yolu/libtool --mode=install cp mod_foo.la /dosya/yolu/apache/modules
            ...
            chmod 755 /dosya/yolu/apache/modules/mod_foo.so<br />
            [`foo' modülü /dosya/yolu/apache/conf/httpd.conf'da etkinleştiriliyor] <br />
            $ _
          </code></p></div>
      
          <p>Yapılandıma dosyasına (eğer yoksa) şu satır eklenir:</p>
      
          <div class="example"><p><code>
            LoadModule foo_module modules/mod_foo.so
          </code></p></div>
      
          <p>Bunu öntanımlı olarak iptal etmek isterseniz
           <strong><code>-A</code></strong> seçeneğini kullanmanız gerekir:</p>
      
          <div class="example"><p><code>
            $ apxs -i -A mod_foo.c
          </code></p></div>
      
          <p><strong><code>apxs</code></strong> mekanizmalarını hızlıca denemek
           için örnek bir Apache modül şablonunu ve bir Makefile dosyasını şöyle
           oluÅŸturabilirsiniz:</p>
      
          <div class="example"><p><code>
            $ apxs -g -n foo<br />
            Creating [DIR]  foo<br />
            Creating [FILE] foo/Makefile<br />
            Creating [FILE] foo/modules.mk<br />
            Creating [FILE] foo/mod_foo.c<br />
            Creating [FILE] foo/.deps<br />
            $ _
          </code></p></div>
      
          <p>Ardından bu örnek modülü bir paylaşımlı nesne olarak derleyip Apache
           sunucusuna yükleyebilirsiniz:</p>
      
          <div class="example"><p><code>
            $ cd foo<br />
            $ make all reload<br />
            apxs -c mod_foo.c<br />
            /dosya/yolu/libtool --mode=compile gcc ... -c mod_foo.c<br />
            /dosya/yolu/libtool --mode=link gcc ... -o mod_foo.la mod_foo.slo<br />
            apxs -i -a -n "foo" mod_foo.la<br />
            /dosya/yolu/instdso.sh mod_foo.la /dosya/yolu/apache/modules<br />
            /dosya/yolu/libtool --mode=install cp mod_foo.la /dosya/yolu/apache/modules
            ...
             chmod 755 /dosya/yolu/apache/modules/mod_foo.so<br />
            [`foo' modülü /dosya/yolu/apache/conf/httpd.conf'ta etkinleştiriliyor]<br />
             apachectl restart<br />
             /dosya/yolu/apache/sbin/apachectl restart: httpd not running, trying to start<br />
            chmod 755 /dosya/yolu/apache/modules/mod_foo.so<br />
            [`foo' modülü /dosya/yolu/apache/etc/httpd.conf'ta etkinleştiriliyor]<br />
            apachectl restart<br />
            /dosya/yolu/apache/sbin/apachectl restart: httpd not running, trying to start<br />
            [Tue Mar 31 11:27:55 1998] [debug] mod_so.c(303): loaded module foo_module<br />
            /dosya/yolu/apache/sbin/apachectl restart: httpd started<br />
            $ _
          </code></p></div>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/apxs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/apxs.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/apxs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/apxs.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/apxs.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/logresolve.html.tr.utf8�������������������������������������������0000644�0000000�0000050�00000016042�13447004010�021647� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>logresolve - Apache günlük dosyalarındaki IP adreslerini konak
        isimlerine dönüştürür - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>logresolve - Apache günlük dosyalarındaki IP adreslerini konak
        isimlerine dönüştürür</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/logresolve.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/logresolve.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/logresolve.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/logresolve.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
           <p><code><strong>logresolve</strong></code>, Apache'nin eriÅŸim
           günlüklerindeki IP adreslerini çözümlemek için bir ardıl işlem
           uygulamasıdır. İsim sunucunuza bindirdiği yükü en aza indirmek için
           <code><strong>logresolve</strong></code> kendi arabelleÄŸinde oluÅŸturduÄŸu
           eşleme tablosunu kullanır.</p>
      
           <p>Apache günlük dosyasını standart girdisinden okur. IP adresleri günlük
           dosyası satırlarında ilk bileşen olmalı ve sonraki bileşenlerden bir
           boşluk ile ayrılmalıdır.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Kullanım</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Kullanım</a></h2>
      
           <p><code><strong>logresolve</strong> [ -<strong>s</strong>
           <var>dosyaismi</var> ] [ -<strong>c</strong> ] &lt;
           <var>günlük_dosyası</var> &gt; <var>yeni_günlük_dosyası</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
      
      <dl>
          <dt><code>-s <var>dosyaismi</var></code></dt>
          <dd>İstatistiklerin kaydedileceği dosyanın ismi belirtilir.</dd>
      
          <dt><code>-c</code></dt>
          <dd><code><strong>logresolve</strong></code> uygulamasının bazı DNS
          sorguları yapmasına sebep olur: IP adresine karşılık olan konak ismini
          bulduktan sonra özgün adresle karşılaştırmak için bu konak ismine karşılık
          gelen IP adresini sorgular.</dd>
      
      </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/logresolve.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/logresolve.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/logresolve.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/logresolve.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/logresolve.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/index.html.ko.euc-kr����������������������������������������������0000644�0000000�0000050�00000012765�13412755316�021107� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¼­¹ö¿Í Áö¿ø ÇÁ·Î±×·¥ - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>¼­¹ö¿Í Áö¿ø ÇÁ·Î±×·¥</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/programs/" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="../fr/programs/" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/programs/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p>¾ÆÆÄÄ¡ À¥¼­¹ö¿¡ Æ÷ÇÔµÈ ÇÁ·Î±×·¥µéÀÌ´Ù.</p>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="index" id="index">¸ñ·Ï</a></h2>
      
          <dl>
            <dt><a href="httpd.html">httpd</a></dt>
      
            <dd>¾ÆÆÄÄ¡ ÇÏÀÌÆÛÅØ½ºÆ® Àü¼Û ÇÁ·ÎÅäÄÝ ¼­¹ö</dd>
      
            <dt><a href="apachectl.html">apachectl</a></dt>
      
            <dd>¾ÆÆÄÄ¡ À¥¼­¹ö Á¶Àý ÀÎÅÍÆäÀ̽º</dd>
      
            <dt><a href="ab.html">ab</a></dt>
      
            <dd>¾ÆÆÄÄ¡ À¥¼­¹ö ¼º´É°Ë»ç µµ±¸</dd>
      
            <dt><a href="apxs.html">apxs</a></dt>
      
            <dd>¾ÆÆÄÄ¡ È®Àå µµ±¸ (APache eXtenSion tool)</dd>
      
            <dt><a href="configure.html">configure</a></dt>
      
            <dd>¼Ò½º Æ®¸®¸¦ ±¸¼ºÇÑ´Ù</dd>
      
            <dt><a href="dbmmanage.html">dbmmanage</a></dt>
      
            <dd>basic authentication¿¡ »ç¿ëÇÒ DBM Çü½ÄÀÇ »ç¿ëÀÚ
            ÀÎÁõÆÄÀÏÀ» ¸¸µé°í ¼öÁ¤ÇÑ´Ù</dd>
      
            <dt><a href="htcacheclean.html">htcacheclean</a></dt>
            <dd>µð½ºÅ© ij½¬¸¦ û¼ÒÇÑ´Ù</dd>
      
            <dt><a href="htdigest.html">htdigest</a></dt>
      
            <dd>digest authentication¿¡ »ç¿ëÇÒ »ç¿ëÀÚ ÀÎÁõÆÄÀÏÀ»
            ¸¸µé°í ¼öÁ¤ÇÑ´Ù</dd>
      
            <dt><a href="htpasswd.html">htpasswd</a></dt>
      
            <dd>basic authentication¿¡ »ç¿ëÇÒ »ç¿ëÀÚ ÀÎÁõÆÄÀÏÀ» ¸¸µé°í
            ¼öÁ¤ÇÑ´Ù</dd>
      
            <dt><a href="logresolve.html">logresolve</a></dt>
      
            <dd>¾ÆÆÄÄ¡ ·Î±×ÆÄÀÏÀÇ IP-ÁÖ¼Ò¸¦ È£½ºÆ®¸íÀ¸·Î º¯È¯ÇÑ´Ù</dd>
      
            <dt><a href="rotatelogs.html">rotatelogs</a></dt>
      
            <dd>¼­¹ö¸¦ Á×ÀÌÁö¾Ê°í ¾ÆÆÄÄ¡ ·Î±×¸¦ ¼øÈ¯ÇÑ´Ù</dd>
      
            <dt><a href="suexec.html">suexec</a></dt>
      
            <dd>½ÇÇàÀ» À§ÇØ »ç¿ëÀÚ¸¦ º¯°æÇÑ´Ù (Switch User For Exec)</dd>
      
            <dt><a href="other.html">´Ù¸¥ ÇÁ·Î±×·¥µé</a></dt>
            <dd>manpage°¡ ¾ø´Â Áö¿ø µµ±¸µé.</dd>
          </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/programs/" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="../fr/programs/" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/programs/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������httpd-2.4.41/docs/manual/programs/htdigest.html.ko.euc-kr�������������������������������������������0000644�0000000�0000050�00000016366�13412755316�021614� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htdigest - digest authentication¿¡ »ç¿ëÇÒ »ç¿ëÀÚÆÄÀÏÀ»
      °ü¸®ÇÑ´Ù - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programs</a></div><div id="page-content"><div id="preamble"><h1>htdigest - digest authentication¿¡ »ç¿ëÇÒ »ç¿ëÀÚÆÄÀÏÀ»
      °ü¸®ÇÑ´Ù</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/htdigest.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htdigest.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htdigest.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htdigest.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p><code>htdigest</code>´Â HTTP »ç¿ëÀÚÀÇ digest authentication¿¡
          »ç¿ëÇÒ »ç¿ëÀÚ¸í, ¿µ¿ª, ¾ÏÈ£¸¦ ÀúÀåÇÏ´Â ÀÏ¹ÝÆÄÀÏÀ» ¸¸µé°í
          ¼öÁ¤ÇÑ´Ù. ¾ÆÆÄÄ¡ À¥¼­¹ö´Â ÀÚ¿øÀ» <code>htdigest</code>·Î
          ¸¸µç ÆÄÀÏ¿¡ ±â·ÏÇÑ »ç¿ëÀÚ¿¡°Ô¸¸ º¸¿©ÁÙ ¼ö ÀÖ´Ù.</p>
      
          <p>ÀÌ manpage´Â ¸í·ÉÇà ¿É¼Ç¸¸À» ¼³¸íÇÑ´Ù. <a href="httpd.html">httpd</a>¿¡¼­ digest authenticationÀ»
          ¼³Á¤ÇÏ´Â Áö½Ã¾î¿¡ ´ëÇÑ ¼³¸íÀº ¾ÆÆÄÄ¡ ¹èÆ÷º»¿¡ Æ÷ÇÔµÇÀÖ°í
          <a href="http://httpd.apache.org">http://httpd.apache.org/</a>¿¡¼­µµ
          º¼ ¼ö ÀÖ´Â ¾ÆÆÄÄ¡ ¼³¸í¼­¸¦ Âü°íÇ϶ó.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">°³¿ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">¿É¼Ç</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="httpd.html">httpd</a></li><li><code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">°³¿ä</a></h2>
          <p><code><strong>htdigest</strong> [ -<strong>c</strong> ]
          <var>passwdfile</var> <var>realm</var> <var>username</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">¿É¼Ç</a></h2>
          <dl>
          <dt><code>-c</code></dt>
          <dd><var>passwdfile</var>À» ¸¸µç´Ù. <var>passwdfile</var>ÀÌ
          ÀÌ¹Ì ÀÖ´Ù¸é ¸ÕÀú Áö¿ì°í ¸¸µç´Ù.</dd>
      
          <dt><code><var>passwdfile</var></code></dt>
          <dd>»ç¿ëÀÚ¸í, ¿µ¿ª, ¾ÏÈ£¸¦ ÀúÀåÇÒ ÆÄÀϸí. <code>-c</code>¸¦
          °°ÀÌ »ç¿ëÇÑ °æ¿ì ÆÄÀÏÀÌ ¾ø´Ù¸é ¸¸µé°í, ÀÖ´Ù¸é ÆÄÀÏÀ» Áö¿ì°í
          ´Ù½Ã ¸¸µç´Ù.</dd>
      
          <dt><code><var>realm</var></code></dt>
          <dd>»ç¿ëÀÚ¸íÀÌ ¼ÓÇÑ ¿µ¿ªÀ̸§.</dd>
      
          <dt><code><var>username</var></code></dt>
          <dd><var>passwdfile</var>¿¡ ¸¸µé°Å³ª ¼öÁ¤ÇÒ »ç¿ëÀÚ¸í. ÆÄÀÏ¿¡
          <var>username</var>ÀÌ ¾ø´Ù¸é Ç׸ñÀ» Ãß°¡ÇÑ´Ù. ÀÖ´Ù¸é ¾ÏÈ£¸¦
          ¼öÁ¤ÇÑ´Ù.</dd>
          </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/programs/htdigest.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htdigest.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htdigest.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htdigest.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htdigest.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/httpd.html.fr.utf8������������������������������������������������0000644�0000000�0000050�00000031401�13412755316�020605� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>httpd - Le serveur HTTP d'Apache - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Programmes</a></div><div id="page-content"><div id="preamble"><h1>httpd - Le serveur HTTP d'Apache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/httpd.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/httpd.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/httpd.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/httpd.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
           <p><code>httpd</code> est le programme du serveur HTTP d'Apache. Il
           a été conçu pour fonctionner sous forme de processus démon
           indépendant. Lorsqu'il est utilisé ainsi, il va créer un jeu de
           processus enfants ou de threads qui traiteront les requêtes.</p>
      
           <p>En général, <code>httpd</code> n'est pas invoqué directement,
           mais plutôt via <code class="program"><a href="../programs/apachectl.html">apachectl</a></code> sur les systèmes de
           style Unix ou <a href="../platform/windows.html#winsvc">en tant que service sous
           Windows NT, 2000 et XP</a> et <a href="../platform/windows.html#wincons">comme application de
           console sous Windows 9x et ME</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Syntaxe</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="../invoking.html">Démarrer Apache httpd</a></li><li><a href="../stopping.html">Arrêter Apache httpd</a></li><li><a href="../configuring.html">Fichiers de configuration</a></li><li><a href="../platform/">Documentations spécifiques aux
      plates-formes</a></li><li><code class="program"><a href="../programs/apachectl.html">apachectl</a></code></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Syntaxe</a></h2>
           <p><code><strong>httpd</strong> [ -<strong>d</strong>
           <var>racine-serveur</var> ] [ -<strong>f</strong> <var>config</var> ]
           [ -<strong>C</strong> <var>directive</var> ] [ -<strong>c</strong>
           <var>directive</var> ] [ -<strong>D</strong> <var>paramètre</var> ]
           [ -<strong>e</strong> <var>niveau</var> ] [ -<strong>E</strong>
           <var>fichier</var> ]
           [ <strong>-k</strong> start|restart|graceful|stop|graceful-stop ]
           [ -<strong>h</strong> ]
           [ -<strong>l</strong> ] [ -<strong>L</strong> ] [ -<strong>S</strong> ]
           [ -<strong>t</strong> ] [ -<strong>v</strong> ] [ -<strong>V</strong> ]
           [ -<strong>X</strong> ] [ -<strong>M</strong> ] [ -<strong>T</strong> ]
           </code></p>
      
           <p>Sur les <a href="../platform/windows.html">systèmes Windows</a>,
           les options additionnelles suivantes sont disponibles :</p>
      
           <p><code><strong>httpd</strong> [ -<strong>k</strong>
           install|config|uninstall ] [ -<strong>n</strong> <var>nom</var> ]
           [ -<strong>w</strong> ]</code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Options</a></h2>
      
      <dl>
      <dt><code>-d <var>racine-serveur</var></code></dt>
      
      <dd>Définit la valeur initiale de la directive <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> à <var>racine-serveur</var>. Cette
      valeur peut être écrasée par la directive ServerRoot du fichier de
      configuration. La valeur par défaut est
      <code>/usr/local/apache2</code>.</dd>
      
      <dt><code>-f <var>config</var></code></dt>
      
      <dd>Utilise les directives du fichier <var>config</var> au démarrage. Si
      <var>config</var> ne commence pas par un '/', il est considéré comme
      relatif au chemin défini par la directive <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>. La valeur par défaut est
      <code>conf/httpd.conf</code>.</dd>
      
      <dt><code>-k <code>start|restart|graceful|stop|graceful-stop</code></code></dt>
      
      <dd>Permet de démarrer, redémarrer ou arrêter <code>httpd</code>. Voir <a href="../stopping.html">Arrêter Apache httpd</a> pour plus d'informations.</dd>
      
      <dt><code>-C <var>directive</var></code></dt>
      
      <dd>Exécute la directive de configuration <var>directive</var> avant de
      lire les fichiers de configurations.</dd>
      
      <dt><code>-c <var>directive</var></code></dt>
      
      <dd>Exécute la directive de configuration <var>directive</var> après
      avoir lu les fichiers de configurations.</dd>
      
      
      <dt><code>-D <var>paramètre</var></code></dt>
      
      <dd>Définit un <var>paramètre</var> de configuration à utiliser dans les
      sections <code class="directive"><a href="../mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>
      des fichiers de configuration, ces dernières permettant d'exécuter ou
      non des
      commandes au démarrage ou au redémarrage du serveur. Sert aussi à
      définir certains paramètres de démarrage moins courants comme
      <code>-DNO_DETACH</code> (empêche le processus parent de lancer des
      processus enfants) et <code>-DFOREGROUND</code> (empêche le processus
      parent d'appeler <code>setsid()</code> et autres).</dd>
      
      <dt><code>-e <var>niveau</var></code></dt>
      
      <dd>Définit la directive <code class="directive"><a href="../mod/core.html#loglevel">LogLevel</a></code> à
      <var>niveau</var> pendant le démarrage du serveur. Ceci permet
      d'augmenter temporairement la verbosité des messages d'erreur afin de
      déterminer les problèmes de démarrage.</dd>
      
      <dt><code>-E <var>fichier</var></code></dt>
      
      <dd>Envoie les messages d'erreur de démarrage vers le fichier
      <var>fichier</var>.</dd>
      
      <dt><code>-h</code></dt>
      
      <dd>Affiche un bref résumé des options de ligne de commande
      disponibles.</dd>
      
      <dt><code>-l</code></dt>
      
      <dd>Affiche la liste des modules compilés dans le le serveur. Ce
      paramètre n'affiche <strong>pas</strong> les modules chargés
      dynamiquement via la directive <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code>.</dd>
      
      <dt><code>-L</code></dt>
      
      <dd>Affiche une liste des directives fournies par les modules statiques
      avec les arguments associés, ainsi que les contextes dans lesquels elles
      sont valides. Les directives fournies par les modules partagés
      (dynamiques) ne sont pas affichées).</dd>
      
      <dt><code>-M</code></dt>
      
      <dd>Affiche une liste des modules statiques et des modules chargés
      dynamiquement.</dd>
      
      <dt><code>-S</code></dt>
      
      <dd>Affiche la configuration telle qu'elle est issue de l'interprétation
      du fichier de configuration (actuellement, seule la configuration des
      serveurs virtuels est affichée).</dd>
      
      <dt><code>-T</code> (disponible depuis la version 2.3.8)</dt>
      
      <dd>Empêche la vérification de la racine des documents (DocumentRoot) au
      démarrage/redémarrage.</dd>
      
      <dt><code>-t</code></dt>
      
      <dd>Exécute une vérification de syntaxe pour les fichiers de
      configuration seulement. Le programme se termine immédiatement après ces
      tests de vérification de syntaxe avec soit un code de retour de 0
      (syntaxe OK), soit un code de retour différent de 0 (erreur de
      syntaxe). Si -D <var>DUMP</var>_<var>VHOSTS </var> est défini, les
      détails de la configuration des serveurs virtuels seront affichés. Si -D
      <var>DUMP</var>_<var>MODULES </var> est défini, tous les modules chargés
      seront affichés.</dd>
      
      <dt><code>-v</code></dt>
      
      <dd>Print the version of <code>httpd</code>, and then exit.</dd>
      
      <dt><code>-V</code></dt>
      
      <dd>Le programme affiche la version et les paramètres de compilation de
      <code>httpd</code>, puis se termine.</dd>
      
      <dt><code>-X</code></dt>
      
      <dd>Exécute httpd en mode debug. Un seul processus sera démarré, et le
      serveur ne rendra pas la main à la console.</dd>
      
      </dl>
      
      <p>Les arguments suivants ne sont disponibles que sur la <a href="../platform/windows.html">plate-forme Windows</a> :</p>
      
      <dl>
      
      <dt><code>-k install|config|uninstall</code></dt>
      
      <dd>Respectivement : installe Apache httpd en tant que service Windows NT ;
      modifie les options de démarrage du service Apache httpd ; désinstalle le
      service Apache httpd.</dd>
      
      <dt><code>-n <var>nom</var></code></dt>
      
      <dd>Le <var>nom</var> du service Apache httpd à actionner.</dd>
      
      <dt><code>-w</code></dt>
      
      <dd>Garde la console Windows ouverte en cas de problème de façon à ce
      que le message d'erreur puisse être lu.</dd>
      
      </dl>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/programs/httpd.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/httpd.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/httpd.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/httpd.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/httpd.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htdbm.html.tr.utf8������������������������������������������������0000644�0000000�0000050�00000047243�13447004010�020573� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htdbm - DBM parola veritabanlarını yönetir - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>htdbm - DBM parola veritabanlarını yönetir</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/htdbm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htdbm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/htdbm.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code><strong>htdbm</strong></code>,
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> üzerinden HTTP kullanıcılarının temel
          kimlik doğrulaması için kullanıcı isimlerinin ve parolalarının
          saklanmasında kullanılacak DBM dosyalarını yönetmek için kullanılır. DBM
          dosyaları hakkında daha ayrıntılı bilgi edinmek için
          <strong><code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code></strong> sayfasına bakınız.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Kullanım</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#bugs">Hatalar</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exit">Çıkış Durumu</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#examples">Örnekler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#security">Güvenlik Değerlendirmeleri</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#restrictions">Kısıtlamalar</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code></li><li><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Kullanım</a></h2>
          <p><code><strong>htdbm</strong>
          [ -<strong>T</strong><var>VTtürü</var> ]
          [ -<strong>i</strong> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>bedel</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>parola-dosyası</var> <var>kullanıcı</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>b</strong>
          [ -<strong>T</strong><var>VTtürü</var> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>bedel</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>parola-dosyası</var> <var>kullanıcı</var> <var>parola</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>n</strong>
          [ -<strong>i</strong> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>bedel</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>kullanıcı</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>nb</strong>
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>bedel</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>kullanıcı</var> <var>parola</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>v</strong>
          [ -<strong>T</strong><var>VTtürü</var> ]
          [ -<strong>i</strong> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong> |
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>bedel</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>parola-dosyası</var> <var>kullanıcı</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>vb</strong>
          [ -<strong>T</strong><var>VTtürü</var> ]
          [ -<strong>c</strong> ]
          [ -<strong>m</strong> |
            -<strong>B</strong>
            -<strong>d</strong> |
            -<strong>s</strong> |
            -<strong>p</strong> ]
          [ -<strong>C</strong> <var>bedel</var> ]
          [ -<strong>t</strong> ]
          [ -<strong>v</strong> ]
          <var>parola-dosyası</var> <var>kullanıcı</var> <var>parola</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>x</strong>
          [ -<strong>T</strong><var>VTtürü</var> ]
          <var>parola-dosyası</var> <var>kullanıcı</var></code></p>
      
          <p><code><strong>htdbm</strong> -<strong>l</strong>
          [ -<strong>T</strong><var>VTtürü</var> ]
          </code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
          <dl>
          <dt><code><strong>-b</strong></code></dt>
          <dd>Betik kipi; parola için istek yapmak yerine parola komut satırından
          verilir. <strong>Parola komut satırında görünür</strong> olacağından çok
          dikkatli kullanmak gerekir. Betik kullanımı için
          <code><strong>-i</strong></code> seçeneğine bakınız.</dd>
      
          <dt><code><strong>-i</strong></code></dt>
          <dd>Parolayı doğrulamaksızın standart girdiden okur (betik kullanımı
          için).</dd>
      
          <dt><code><strong>-c</strong></code></dt>
          <dd><code><var>parola-dosyası</var></code> oluşturur. Dosya mevcutsa,
          dosya silinip yeniden yazılır. Bu seçenek
          <code><strong>-n</strong></code> seçeneği ile birlikte kullanılamaz.</dd>
      
          <dt><code><strong>-n</strong></code></dt>
          <dd>Sonuçları veritabanında güncellemek yerine standart çıktıya gönderir.
          <code><var>parola-dosyası</var></code> belirtilmediğinden, bu seçenek
          komut satırı sözdizimini değiştirir. Bu seçenek
          <code><strong>-c</strong></code> seçeneği ile birlikte kullanılamaz.</dd>
      
          <dt><code><strong>-m</strong></code></dt>
          <dd>Parolalar için MD5 şifrelemesi kullanılır. Windows ve Netware
          için bu öntanımlıdır.</dd>
      
          <dt><code><strong>-B</strong></code></dt>
          <dd>Parolalar için bcrypt şifrelemesi kullanılır. Şu an için çok güvenli
          kabul edilmektedir.</dd>
      
          <dt><code><strong>-C</strong>  <var>bedel</var></code></dt>
          <dd>Bu seçenek sadece <code><strong>-B</strong></code> (bcrypt şifrelemesi)
          seçeneği ile birlikte kullanılabilir. Bcrypt algoritmasına hesaplama
          süresini belirtir (daha yüksek değerler daha güvenlidir, öntanımlı 5,
          geçerli değerler: 4 - 31).</dd>
      
          <dt><code><strong>-d</strong></code></dt>
          <dd>Parolaları şifrelemek için <code>crypt()</code> kullanılır. Windows,
          ve Netware dışında öntanımlıdır.
          <code><strong>htdbm</strong></code> tarafından tüm platformlarda
          destekleniyor olsa da Windows ve Netware üzerinde
          <code class="program"><a href="../programs/httpd.html">httpd</a></code> sunucusu tarafından desteklenmez. Bu algoritma
          günümüz standartlarında <strong>güvenilmez</strong> kabul
          edilmektedir.</dd>
      
          <dt><code><strong>-s</strong></code></dt>
          <dd>Parolalar için SHA şifrelemesi kullanılır. LDAP Dizin değişim
          biçemini (ldif) kullanarak Netscape sunucularına/sunucularından göçü
          kolaylaştırır. Bu algoritma günümüz standartlarında
          <strong>güvenilmez</strong> kabul edilmektedir.</dd>
      
          <dt><code><strong>-p</strong></code></dt>
          <dd>Düz metin parolalar kullanılır. <code><strong>htdbm</strong></code>
          tarafından tüm platformlarda destekleniyor olsa da Windows, Netware ve
          TPF üzerinde <code class="program"><a href="../programs/httpd.html">httpd</a></code> sunucusu tarafından sadece düz
          metin parolalar kabul edilir.</dd>
      
          <dt><code><strong>-l</strong></code></dt>
          <dd>Veritabanındaki kullanıcıları açıklamalarıyla birlikte standart
          çıktıya gönderir.</dd>
      
          <dt><code><strong>-v</strong></code></dt>
          <dd>Kullanıcı adını ve parolasını doğrular. Program belirtilen parolanın
          geçerli olup olmadığını belirten bir ileti basar. Eğer parola geçersizse
          program hata kodu 3 ile çıkar.</dd>
      
          <dt><code><strong>-x</strong></code></dt>
          <dd>Kullanıcıyı siler. Kullanıcı belirtilen DBM dosyasında mevcutsa
          silinir.</dd>
      
          <dt><code><strong>-t</strong></code></dt>
          <dd>Son değiştirgenin bir açıklama olarak yorumlanmasını sağlar. Bu
          seçenek kullanıldığında komut satırının sonuna fazladan bir dizge
          eklenebilir. Bu dizge, veritabanında belirtilen kullanıcının "Comment"
          alanında saklanır.</dd>
      
          <dt><code><var>parola-dosyası</var></code></dt>
          <dd>DBM dosyasının ismi. Genellikle, <code>.db</code>, <code>.pag</code>
          veya <code>.dir</code> eklentisi olmaksızın belirtilir.
          <code><strong>-c</strong></code> seçeneği ile birlikte verilmişse ve DBM
          dosyası mevcut değilse dosya oluşturulur, mevcutsa dosya güncellenir.</dd>
      
          <dt><code><var>kullanıcı</var></code></dt>
          <dd><code><var>parola-dosyası</var></code>'nda oluşturulacak veya
          güncellenecek kullanıcı ismi. <code><var>kullanıcı</var></code> bu
          dosyada mevcut değilse yeni bir girdi eklenir. Girdi mevcutsa parolası
          deÄŸiÅŸtirilir.</dd>
      
          <dt><code><var>parola</var></code></dt>
          <dd>Şifrelenip DBM dosyasında saklanacak düz metin parola. Sadece
          <code><strong>-b</strong></code> seçeneği ile kullanılır.</dd>
      
          <dt><code><strong>-T</strong> <var>VTtürü</var></code></dt>
          <dd>DBM dosyasının türü; SDBM, GDBM, DB, veya "default" olabilir.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="bugs" id="bugs">Hatalar</a></h2>
          <p>Birden fazla DBM dosya biçemi vardır ve büyük bir olasılıkla da
          sisteminizde bu birden fazla biçemle ilgili kütüphaneler vardır. SDBM,
          NDBM, GNU'nun GDBM projesi ve Berkeley/Sleepycat DB 2/3/4 bunların
          başlıcalarıdır. Ne yazık ki, bu kütüphanelerin her birinin dosya
          biçimleri farklıdır. Bu bakımdan, <code><var>dosyaismi</var></code>
          dosyasında kullanılan dosya biçeminin <code><strong>htdbm</strong></code>
          tarafından kullanılanla aynı biçemde olduğundan emin olmalısınız.
          <code><strong>htdbm</strong></code> hangi tür DBM dosyasına baktığını
          saptayacak yeterliliğe sahip değildir. Yanlış biçemli bir dosya
          belirtirseniz hiçbir şey dönmeyebileceği gibi, başka isimde bir DBM
          dosyasının oluşturulması veya daha da kötüsü üzerine yazmaya
          çalışıyorsanız DBM dosyasının bozulması bile olasıdır.</p>
      
          <p>Unix sistemlerinde, kullanılan DBM dosyasının biçemini öğrenmek için
          <code><strong>file</strong></code> programı kullanılabilir.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exit" id="exit">Çıkış Durumu</a></h2>
          <p><code><strong>htdbm</strong></code>, kullanıcı ismi ve parolasını DBM
          dosyasına başarıyla eklemiş veya güncellemişse <code>0</code>, dosyalara
          erişirken bir sorun çıkmışsa <code>1</code>, komut satırında bir
          sözdizimi hatası varsa <code>2</code>, parola etkileşimli alınmış fakat
          girdi ile eşleşme sağlanamamışsa <code>3</code>, işlem kesintiye
          uğramışsa <code>4</code>, bir değer çok uzunsa <code>5</code> (kullanıcı,
          parola, dosya ismi veya açıklama), kullanıcı ismi kuraldışı karakter
          içeriyorsa (<a href="#restrictions">Kısıtlamalar</a> bölümüne bakınız)
          <code>6</code> ve dosya geçerli bir DBM parola dosyası değilse
          <code>7</code> değeriyle döner.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Örnekler</a></h2>
          <div class="example"><p><code>
            htdbm /usr/local/etc/apache/.htdbm-users jsmith
          </code></p></div>
      
          <p><code>jsmith</code> kullanıcısı için parolayı ekler veya değiştirir.
          Parolayı vermesi için kullanıcıya parola isteği yapılır. Windows üzerinde
          çalıştırılırsa parola Apache MD5 algoritması ile şifrelenir, aksi
          takdirde sistemin <code>crypt()</code> yordamı kullanılır. Dosya mevcut
          değilse <code><strong>htdbm</strong></code> beklenen hiçbir işlemi
          yapmadan bir hata vererek çıkar.</p>
      
          <div class="example"><p><code>
            htdbm -c /home/doe/public_html/.htdbm jane
          </code></p></div>
      
          <p>Yeni bir dosya oluşturur ve kullanıcı <code>jane</code> için kaydı bir
          girdi olarak bu dosyaya yazar. Dosya mevcutsa fakat okunamıyor veya
          yazılamıyorsa dosyada bir değişiklik yapılmaz ve
          <code><strong>htdbm</strong></code> bir ileti gösterip bir hata durumu
          ile çıkar.</p>
      
          <div class="example"><p><code>
            htdbm -mb /usr/web/.htdbm-all jones Pwd4Steve
          </code></p></div>
      
          <p>Komut satırından verilen parolayı (<code>Pwd4Steve</code>) MD5
          algoritmasıyla şifreler ve bunu belirtilen dosyada saklar.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">Güvenlik Değerlendirmeleri</a></h2>
          <p><code><strong>htdbm</strong></code> tarafından yönetilen parola
          dosyalarına sunucunun URI uzayından erişilememelidir; yani dosya bir
          tarayıcı ile okunabilecek bir yerde bulunmamalıdır.</p>
      
          <p>Komut satırında parolanın şifrelenmemiş olarak görünmesi sebebiyle
          <code><strong>-b</strong></code> seçeneğinin kullanımından kaçınılmasını
          öneriyoruz.</p>
      
          <p><code>crypt()</code> algoritması kullanılırken, parolayı
          şekillendirmek için parolanın ilk 8 baytının kullanılacağına dikkat
          ediniz. Eğer parola 8 bayttan uzunsa kalanlar bir uyarı verilmeksizin
          iptal edilir.</p>
      
          <p>SHA şifreleme biçeminde tuz kullanılmaz; yani, bir parolanın
          sadece bir şifreli gösterimi olabilir. <code>crypt()</code> ve
          MD5 biçemleri parolanın önüne rasgele üretilmiş bir tuz dizgesi
          eklediklerinden sözlük saldırılarına karşı daha dayanıklıdır.</p>
      
          <p>SHA ve <code>crypt()</code> biçimleri günümüz standartlarında
          <strong>güvenilmez</strong> kabul edilmektedir.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="restrictions" id="restrictions">Kısıtlamalar</a></h2>
          <p>Windows platformunda, <code><strong>htdbm</strong></code>
          ile ÅŸifrelenen parolalar <code>255</code> karakterden daha uzun olamaz.
          255 karakterden sonrası kırpılır.</p>
      
          <p><code><strong>htdbm</strong></code> tarafından kullanılan MD5
          algoritması Apache yazılımına özeldir; bu algoritma ile şifrelenen
          parolalar başka HTTP sunucularında kullanılamayabilir.</p>
      
          <p>Kullanıcı isimleri <code>255</code> bayttan uzun olamaz ve iki nokta
          imi (<code>:</code>) içeremez.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/htdbm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htdbm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../tr/programs/htdbm.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htdbm.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/htdigest.html.tr.utf8���������������������������������������������0000644�0000000�0000050�00000020660�13447004010�021302� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>htdigest - Özet kimlik doğrulama dosyalarını yönetir - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Programlar</a></div><div id="page-content"><div id="preamble"><h1>htdigest - Özet kimlik doğrulama dosyalarını yönetir</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/htdigest.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htdigest.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htdigest.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htdigest.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><code><strong>htdigest</strong></code>, HTTP kullanıcılarının digest
          türü kimlik doğrulaması için kullanıcı isimlerinin ve parolalarının
          saklanmasında kullanılacak düz metin dosyalarını oluşturmak ve güncellemek
          için kullanılır. Apache HTTP sunucusunun mevcut özkaynaklarının kullanımı
          sadece <code><strong>htdigest</strong></code> tarafından oluşturulan
          dosyalarda listelenmiş kullanıcılara tahsis edilebilir.</p>
      
          <p>Bu kılavuz sayfası sadece komut satırı değiştirgelerini listeler.
          Kullanıcı kimlik doğrulamasını
          <strong><code class="program"><a href="../programs/httpd.html">httpd</a></code></strong>'de yapılandırmak için gerekli
          yönergelerle ilgili ayrıntılar için Apache dağıtımının bir parçası olan
          ve <a href="http://httpd.apache.org/"> http://httpd.apache.org/</a>
          adresinde de bulunan Apache HTTP Sunucusu Belgelerine bakınız.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Kullanım</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#options">Seçenekler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#security">Güvenlik Değerlendirmeleri</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><code class="program"><a href="../programs/httpd.html">httpd</a></code></li><li><code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="synopsis" id="synopsis">Kullanım</a></h2>
          <p><code><strong>htdigest</strong> [ -<strong>c</strong> ]
          <var>parola-dosyası</var> <var>bölge</var> <var>kullanıcı</var></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="options" id="options">Seçenekler</a></h2>
          <dl>
          <dt><code><strong>-c</strong></code></dt>
          <dd><code><var>parola-dosyası</var></code> oluşturur. Dosya mevcutsa,
          dosya silinip yeniden yazılır.</dd>
      
          <dt><code><var>parola-dosyası</var></code></dt>
          <dd>Kullanıcı ismi, parola ve bölge bilgilerini içeren dosyanın ismi.
          <code><strong>-c</strong></code> seçeneği verilmişse ve dosya mevcut
          deÄŸilse oluÅŸturulur, dosya mevcutsa silinip yeniden oluÅŸturulur.</dd>
      
          <dt><code><var>bölge</var></code></dt>
          <dd>Kullanıcının mensup olduğu bölge ismi. Daha fazla bilgi için:
          <a href="http://tools.ietf.org/html/rfc2617#section-3.2.1">
          http://tools.ietf.org/html/rfc2617#section-3.2.1</a></dd>
      
          <dt><code><var>kullanıcı</var></code></dt>
          <dd><code><var>parola-dosyası</var></code>'nda oluşturulacak veya
          güncellenecek kullanıcı ismi. <code><var>kullanıcı</var></code> bu
          dosyada mevcut değilse yeni bir girdi eklenir. Girdi mevcutsa parolası
          deÄŸiÅŸtirilir.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">Güvenlik Değerlendirmeleri</a></h2>
          <p>Bu program bir setuid çalıştırılabiliri olarak güvenilir olmadığından
          <em>setuid yapılmamalıdır</em>.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/programs/htdigest.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/programs/htdigest.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/programs/htdigest.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/programs/htdigest.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/programs/htdigest.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/logresolve.html���������������������������������������������������0000644�0000000�0000050�00000000617�13362070302�020342� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: logresolve.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: logresolve.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: logresolve.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: logresolve.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �����������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/programs/apxs.html���������������������������������������������������������0000644�0000000�0000050�00000000567�13362070302�017140� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: apxs.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: apxs.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: apxs.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: apxs.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �����������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/sections.html��������������������������������������������������������������0000644�0000000�0000050�00000000737�13362070302�016161� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: sections.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: sections.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: sections.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: sections.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: sections.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ���������������������������������httpd-2.4.41/docs/manual/glossary.html.ja.utf8������������������������������������������������������0000644�0000000�0000050�00000100037�13412755316�017460� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>用語 - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>用語</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./de/glossary.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/glossary.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/glossary.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/glossary.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/glossary.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/glossary.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/glossary.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
          <p>ã“ã®ç”¨èªžé›†ã§ã¯ Apacheã«ç‰¹åŒ–ã—ãŸç”¨èªžã¨ã€
          ウェブサーãƒå…¨èˆ¬ã§ä¸€èˆ¬çš„ãªç”¨èªžã‚’ã„ãã¤ã‹å®šç¾©ã—ã¦ã„ã¾ã™ã€‚
          ãれãžã‚Œã®æ¦‚念ã®ã€ã‚ˆã‚Šè©³ç´°ãªæƒ…å ±ã¯ãƒªãƒ³ã‚¯å…ˆã«ã‚りã¾ã™ã€‚</p>
        </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="definitions" id="definitions">定義</a></h2>
      
        <dl>
          <dt><a name="accesscontrol" id="accesscontrol">アクセス制御</a></dt>
          <dd>ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯èªå¯é ˜åŸŸã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’制é™ã—ã¾ã™ã€‚Apache ã«ãŠã„ã¦ã¯ã€
          普通ã¯ã‚¢ã‚¯ã‚»ã‚¹ã®åˆ¶é™ã¯ <em>URL</em> ã«å¯¾ã™ã‚‹ã‚‚ã®ã¨ãªã‚Šã¾ã™ã€‚<br />
          å‚ç…§: <a href="howto/auth.html">èªè¨¼ã€æ‰¿èªã€ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡</a>
          </dd>
          
          <dt><a name="algorithm" id="algorithm">アルゴリズム</a></dt>
          <dd>有é™å›žã®ã‚¹ãƒ†ãƒƒãƒ—ã§å•題を解ããŸã‚ã®ã‚ã„ã¾ã„ã§ãªã„å¼ã‚‚ã—ãã¯è¦å‰‡ã®
          集åˆã€‚æš—å·ã®ãŸã‚ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¯é€šå¸¸ <dfn>Cipher</dfn> ã¨å‘¼ã°ã‚Œã¾ã™ã€‚
          </dd>
          
          <dt><a name="apacheextensiontool" id="apacheextensiontool">APache
              eXtension Tool</a> <a name="apxs" id="apxs">(apxs)</a></dt>
          <dd><a class="glossarylink" href="./glossary.html#module" title="用語集をå‚ç…§">モジュール</a> ソースを
          動的共有オブジェクト (<a class="glossarylink" href="./glossary.html#dso" title="用語集をå‚ç…§">DSO</a>) ã«ã‚³ãƒ³ãƒ‘イルã—ã€
          Apache Web サーãƒã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹æ‰‹åŠ©ã‘ã‚’ã™ã‚‹ perl スクリプト。<br />
            å‚ç…§: マニュアルページ: <code class="program"><a href="./programs/apxs.html">apxs</a></code>
          </dd>
      
          <dt><a name="apacheportableruntime" id="apacheportableruntime">Apache Portable Runtime</a> <a name="apr" id="apr">(APR)</a></dt>
          <dd>サーãƒ<span class="transnote">(<em>訳注:</em> Apache HTTP Server)</span>㨠OS ã®
            é–“ã®åŸºæœ¬çš„ãªã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ェースã®å¤šãã‚’æä¾›ã™ã‚‹<span class="transnote">(<em>訳注:</em> 
            OS ã®å·®ã‚’å¸åŽã™ã‚‹)</span>ライブラリã®ã‚»ãƒƒãƒˆã€‚ APR 㯠独立ã—ãŸ
            プロジェクトã¨ã—㦠Apache HTTP Server ã¨å¹³è¡Œã—ã¦é–‹ç™ºãŒè¡Œã‚れã¦ã„ã¾ã™ã€‚<br />
            å‚ç…§: <a href="http://apr.apache.org/">Apache Portable Runtime
            プロジェクト</a>
          </dd>
      
          <dt><a name="authentication" id="authentication">èªè¨¼</a></dt>
          <dd>サーãƒã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã€ãƒ¦ãƒ¼ã‚¶ã¨ã„ã£ãŸãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®
          身元ã®ç‰¹å®šã€‚<br />
            å‚ç…§: <a href="howto/auth.html">èªè¨¼ã€æ‰¿èªã€ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡</a>
          </dd>
      
          <dt><a name="certificate" id="certificate">証明書</a></dt>
          <dd>サーãƒã‚„クライアントã¨ã„ã£ãŸãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã‚’èªè¨¼ã™ã‚‹ã®ã«
          使用ã•れるデータレコード。証明書ã«ã¯ (subject ã¨å‘¼ã°ã‚Œã‚‹) 所有者ã¨ã€
          (issuer ã¨å‘¼ã°ã‚Œã‚‹) <a class="glossarylink" href="./glossary.html#certificationauthority" title="用語集をå‚ç…§">èªè¨¼å±€</a> ã®ç½²åã€æ‰€æœ‰è€…ã®
          <a class="glossarylink" href="./glossary.html#publickey" title="用語集をå‚ç…§">公開éµ</a> ã¨ã€CA ã«ã‚ˆã‚‹ç½²åã¨ã„ã†
          X.509 ã®æƒ…å ±ãŒå«ã¾ã‚Œã¾ã™ã€‚ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã¯ãれらã®ç½²åã‚’
          CA 証明書を使ã£ã¦æ¤œè¨¼ã—ã¾ã™ã€‚<br />
            å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd>
      
          <dt><a name="certificatsigningrequest" id="certificatsigningrequest">証明書署åリクエスト</a>
            <span class="transnote">(<em>訳注:</em> Certificate Signing Request)</span>
            <a name="csr" id="csr">(CSR)</a></dt>
          <dd><a class="glossarylink" href="./glossary.html#certificationauthority" title="用語集をå‚ç…§">èªè¨¼å±€</a> ã«æå‡º
          ã™ã‚‹æœªç½²åã® <a class="glossarylink" href="./glossary.html#certificate" title="用語集をå‚ç…§">証明書</a>。
          èªè¨¼å±€ã¯ CA <em>証明書</em> ã® <a class="glossarylink" href="./glossary.html#privatekey" title="用語集をå‚ç…§">秘密éµ</a> ã§ç½²åã—ã¾ã™ã€‚
          一旦 CSR ã«ç½²åãŒãªã•れるã¨ã€ãã‚Œã¯æœ¬ç‰©ã®è¨¼æ˜Žæ›¸ã«ãªã‚Šã¾ã™ã€‚<br />
            å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd>
      
          <dt><a name="certificationauthority" id="certificationauthority">証明局</a>
            <span class="transnote">(<em>訳注:</em> Certification Authority)</span>
            <a name="ca" id="ca">(CA)</a></dt>
          <dd>å®‰å…¨ãªæ–¹æ³•ã§èªè¨¼ã‚’行ãªã£ãŸãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®è¨¼æ˜Žæ›¸ã‚’
          ç½²åã™ã‚‹ãŸã‚ã®ä¿¡é ¼ã§ãる第三者機関。他ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã¯
          証明書ã®ä¿æŒè€…㌠CA ã«èªè¨¼ã•れãŸã‹ã‚’ç½²åを検証ã™ã‚‹ã“ã¨ã§èª¿ã¹ã‚‹ã“ã¨ãŒ
          ã§ãã¾ã™ã€‚<br />
            å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd>
      
          <dt><a name="cipher" id="cipher">Cipher</a></dt>
          <dd>データ暗å·åŒ–ã®ãŸã‚ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã€‚例ãˆã° DES, IDEA, RC4 ãªã©ã€‚<br />
            å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd>
      
          <dt><a name="ciphertext" id="ciphertext">æš—å·æ–‡</a></dt>
          <dd><a class="glossarylink" href="./glossary.html#plaintext" title="用語集をå‚ç…§">平文</a> ãŒ
          <a class="glossarylink" href="./glossary.html#cipher" title="用語集をå‚ç…§">Cipher</a> ã‚’ã‹ã‘られãŸçµæžœã€‚<br />
          å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd>
      
          <dt><a name="commongatewayinterface" id="commongatewayinterface">Common
              Gateway Interface</a> <a name="cgi" id="cgi">(CGI)</a></dt>
          <dd>外部プログラムãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã†ã“ã¨ãŒã§ãるよã†ã«ã™ã‚‹ãŸã‚ã®
          ウェブサーãƒã¨å¤–部プログラム間ã®ã‚¤ãƒ³ã‚¿ãƒ•ã‚§ãƒ¼ã‚¹ã®æ¨™æº–仕様。
          インタフェースã¯å…ƒã€… <a href="http://hoohoo.ncsa.uiuc.edu/cgi/overview.html">NCSA</a> ã«ã‚ˆã‚Šå®šç¾©
          ã•れã¦ã„ã¾ã—ãŸãŒ
          <a href="http://cgi-spec.golux.com/">RFC プロジェクト</a> も存在ã—ã¾ã™ã€‚<br />
            å‚ç…§: <a href="howto/cgi.html">CGI ã«ã‚ˆã‚‹å‹•的コンテンツ</a>
          </dd>
      
          <dt><a name="configurationdirective" id="configurationdirective">設定ディレクティブ</a></dt>
          <dd>å‚ç…§: <a class="glossarylink" href="./glossary.html#directive" title="用語集をå‚ç…§">ディレクティブ</a></dd>
      
          <dt><a name="configurationfile" id="configurationfile">設定ファイル</a></dt>
          <dd>Apache ã®è¨­å®šã‚’制御ã™ã‚‹ <a class="glossarylink" href="./glossary.html#directive" title="用語集をå‚ç…§">ディレクティブ</a>
          ã®æ›¸ã‹ã‚ŒãŸãƒ†ã‚­ã‚¹ãƒˆãƒ•ァイル。<br />
            å‚ç…§: <a href="configuring.html">設定ファイル</a>
          </dd>
      
          <dt><a name="connect" id="connect">CONNECT</a></dt>
          <dd>データãƒãƒ£ãƒãƒ«ã‚’ãã®ã¾ã¾ HTTP 上ã§ãƒ—ロキシã™ã‚‹ãŸã‚ã® HTTP
          <a class="glossarylink" href="./glossary.html#method" title="用語集をå‚ç…§">メソッド</a>。SSL ã®ã‚ˆã†ãªä»–ã®
          プロトコルをãã‚‹ã‚€ãŸã‚ã«ä½¿ã†ã“ã¨ãŒã§ãã¾ã™ã€‚
          </dd>
          
          <dt><a name="context" id="context">コンテキスト</a></dt>
          <dd><a class="glossarylink" href="./glossary.html#configurationfile" title="用語集をå‚ç…§">設定ファイル</a> 中ã§ã€
          特定ã®ç¨®é¡žã® <a class="glossarylink" href="./glossary.html#directive" title="用語集をå‚ç…§">ディレクティブ</a> ãŒè¨±å¯ã•れã¦ã„る場所。<br />
            å‚ç…§: <a href="mod/directive-dict.html#Context">Apache ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®
          説明ã«ä½¿ã‚れã¦ã„る用語</a>
          </dd>
      
          <dt><a name="digitalsignature" id="digitalsignature">デジタル署å</a></dt>
          <dd>証明書や他ã®ãƒ•ァイルを検証ã™ã‚‹ãŸã‚ã®æš—å·åŒ–ã•れãŸãƒ†ã‚­ã‚¹ãƒˆãƒ–ロック。
          <a class="glossarylink" href="./glossary.html#certificationauthority" title="用語集をå‚ç…§">èªè¨¼å±€</a> ã¯
          <em>証明書</em> ã«åŸ‹ã‚è¾¼ã¾ã‚ŒãŸ <em>公開éµ</em> ã®ãƒãƒƒã‚·ãƒ¥ã‚’作æˆã—ã€
          ãれを自身㮠<em>秘密éµ</em> ã§æš—å·åŒ–ã™ã‚‹ã“ã¨ã§ç½²åを作æˆã—ã¾ã™ã€‚
          CA ã®å…¬é–‹éµã§ã®ã¿ãã®ç½²åを復å·ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã®ã§ã€ãれã«ã‚ˆã‚Š
          <em>証明書</em> ã‚’ä¿æœ‰ã™ã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã‚’ CA ãŒèªè¨¼ã—ãŸ
          ã“ã¨ã‚’検証ã§ãã¾ã™ã€‚<br />
          å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd>
          
          <dt><a name="directive" id="directive">ディレクティブ</a></dt>
          <dd>Apache ã®ã„ã‚ã„ã‚ãªæŒ¯ã‚‹èˆžã„を制御ã™ã‚‹è¨­å®šã‚³ãƒžãƒ³ãƒ‰ã€‚ディレクティブã¯
          <a class="glossarylink" href="./glossary.html#configurationfile" title="用語集をå‚ç…§">設定ファイル</a> ã«
          書ã‹ã‚Œã¾ã™ã€‚<br />
          å‚ç…§: <a href="mod/directives.html">ディレクティブ索引</a>
          </dd>
      
          <dt><a name="dynamicsharedobject" id="dynamicsharedobject">å‹•çš„
          共有オブジェクト</a> <span class="transnote">(<em>訳注:</em> Dynamic
              Shared Object)</span> <a name="dso" id="dso">(DSO)</a></dt>
          <dd>å¿…è¦ã«å¿œã˜ã¦èª­ã¿è¾¼ã‚€ã“ã¨ãŒå¯èƒ½ãªã€Apache <code class="program"><a href="./programs/httpd.html">httpd</a></code> ã¨ã¯
            別ã«ã‚³ãƒ³ãƒ‘イルã•れ㟠<a class="glossarylink" href="./glossary.html#module" title="用語集をå‚ç…§">モジュール</a><br />
            å‚ç…§: <a href="dso.html">動的共有オブジェクトサãƒãƒ¼ãƒˆ</a>
          </dd>
      
          <dt><a name="environmentvariable" id="environmentvariable">環境変数</a>
          <a name="env-variable" id="env-variable">(env-variable)</a></dt>
          <dd>情報をä¿ç®¡ã—ãŸã‚Šã€ãƒ—ログラム間ã®é€šä¿¡ã‚’ã™ã‚‹ãŸã‚ã«ä½¿ã‚れるã€
          オペレーティングシステムã®ã‚·ã‚§ãƒ«ã«ã‚ˆã‚Šç®¡ç†ã•れã¦ã„ã‚‹åå‰ä»˜ãã®å¤‰æ•°ã€‚
          Apache も環境変数ã¨å‘¼ã°ã‚Œã‚‹å†…部変数をæŒã£ã¦ã„ã¾ã™ãŒã€ã“ã¡ã‚‰ã¯
          シェル環境ã§ã¯ãªãã€Apache ã®å†…部構造体ã«ä¿æŒã•れã¦ã„ã¾ã™ã€‚<br />
            å‚ç…§: <a href="env.html">Apache ã®ç’°å¢ƒå¤‰æ•°</a>
          </dd>
      
          <dt><a name="export-crippled" id="export-crippled">輸出強度削減</a>
          <span class="transnote">(<em>訳注:</em> Export-Crippled)</span></dt>
          <dd>アメリカ㮠Export Administration Regulations (EAR)
          <span class="transnote">(<em>訳注:</em> 輸出管ç†è¦å‰‡)</span> ã«å¾“ã†ãŸã‚ã«æš—å·ã®å¼·åº¦ (ã¨ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£)
          を削減ã™ã‚‹ã“ã¨ã€‚輸出強度削減ã•ã‚ŒãŸæš—å·ã‚½ãƒ•トウェアã¯å°ã•ã„キーã«
          制é™ã•れã€é€šå¸¸ç·å½“ãŸã‚Šæ”»æ’ƒã§å¾©å·ã§ãã¦ã—ã¾ã† <em>æš—å·æ–‡</em> を生æˆã™ã‚‹
          ã“ã¨ã«ãªã‚Šã¾ã™ã€‚<br />
            å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd>
      
          <dt><a name="filter" id="filter">フィルタ</a></dt>
          <dd>サーãƒã‹ã‚‰é€ã‚‰ã‚Œã‚‹ãƒ‡ãƒ¼ã‚¿ã¨ã‚µãƒ¼ãƒãŒå—ã‘å–るデータã«é©ç”¨ã•れる処ç†ã€‚
          入力フィルタã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã‚µãƒ¼ãƒã«é€ã‚‰ã‚ŒãŸãƒ‡ãƒ¼ã‚¿ã‚’処ç†ã—ã€
          出力フィルタã¯ã‚µãƒ¼ãƒã«ã‚る文書をクライアントã«é€ã‚‹å‰ã«å‡¦ç†ã—ã¾ã™ã€‚
          例ãˆã°ã€<code>INCLUDES</code> 出力フィルタã¯
          <a class="glossarylink" href="./glossary.html#ssi" title="用語集をå‚ç…§">Server Side Includes</a> ã®æ–‡æ›¸ã‚’
          処ç†ã—ã¾ã™ã€‚<br />
            å‚ç…§: <a href="filter.html">フィルタ</a>
          </dd>
      
          <dt><a name="fully-qualifieddomain-name" id="fully-qualifieddomain-name">完全修飾ドメインå</a>
            <span class="transnote">(<em>訳注:</em> Fully-Qualified Domain-Name)</span>
            <a name="fqdn" id="fqdn">(FQDN)</a></dt>
          <dd>IP アドレスã«è§£æ±ºã§ãるホストåã¨ã€ãƒ‰ãƒ¡ã‚¤ãƒ³åã‹ã‚‰ãªã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯
          エンティティã®ä¸€æ„ãªåå‰ã€‚例ãˆã°ã€<code>www</code> ã¯ãƒ›ã‚¹ãƒˆåã§ã€
          <code>example.com</code> ã¯ãƒ‰ãƒ¡ã‚¤ãƒ³åãªã®ã§ã€
          <code>www.example.com</code> ã¯å®Œå…¨ä¿®é£¾ãƒ‰ãƒ¡ã‚¤ãƒ³åã«ãªã‚Šã¾ã™ã€‚</dd> 
          
          <dt><a name="handler" id="handler">ãƒãƒ³ãƒ‰ãƒ©</a></dt>
          <dd>ファイルãŒå‘¼ã°ã‚ŒãŸã¨ãã«è¡Œãªã‚れる動作㮠Apache ã®å†…部ã§ã®è¡¨ç¾ã€‚
          一般ã«ãƒ•ァイルã«ã¯ãƒ•ァイルã®ç¨®é¡žã«å¿œã˜ã¦æš—é»™ã®ãƒãƒ³ãƒ‰ãƒ©ãŒè¨­å®šã•れã¦
          ã„ã¾ã™ã€‚普通ã¯ã™ã¹ã¦ã®ãƒ•ァイルãŒã‚µãƒ¼ãƒã«ã‚ˆã‚Šé€ã‚‰ã‚Œã¾ã™ãŒã€åˆ¥ã«
          扱ã‚れる <span class="transnote">(<em>訳注:</em> handle)</span> ファイルã®ç¨®é¡žã‚‚存在ã—ã¾ã™ã€‚
          例ãˆã° <code>cgi-script</code> ã¯ãƒ•ァイルãŒ
          <a class="glossarylink" href="./glossary.html#cgi" title="用語集をå‚ç…§">CGI</a> ã¨ã—ã¦å‡¦ç†ã•れるよã†ã«æŒ‡å®šã—ã¾ã™ã€‚<br />
            å‚ç…§: <a href="handler.html">Apache ã®ãƒãƒ³ãƒ‰ãƒ©ã®ä½¿ç”¨</a>
          </dd>
      
          <dt><a name="hash" id="hash">ãƒãƒƒã‚·ãƒ¥</a></dt>
          <dd>ä»»æ„ã®æ–‡å­—列ã‹ã‚‰å›ºå®šé•·ã®æ–‡å­—列を生æˆã™ã‚‹ã€æ•°å­¦çš„ãªä¸€æ–¹å‘ã§ä¸å¯é€†ãª
          アルゴリズム。異ãªã£ãŸå…¥åŠ›æ–‡å­—åˆ—ã‹ã‚‰ã¯æ™®é€šã¯é•ã†ãƒãƒƒã‚·ãƒ¥ãŒç”Ÿæˆã•れã¾ã™
          (ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã«ä¾å­˜ã—ã¾ã™)。</dd>
      
          <dt><a name="header" id="header">ヘッダ</a></dt>
          <dd>実際ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®å‰ã«é€ã‚‰ã‚Œã€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„を説明ã™ã‚‹ãƒ¡ã‚¿æƒ…å ±ã®
          å…¥ã£ãŸ <a class="glossarylink" href="./glossary.html#http" title="用語集をå‚ç…§">HTTP</a> リクエストã¨å¿œç­”ã®ä¸€éƒ¨åˆ†ã€‚</dd> 
          
          <dt><a name="htaccess" id="htaccess">.htaccess</a></dt> 
          <dd>ウェブツリーã«ç½®ã‹ã‚Œã¦ã€ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¨ã‚µãƒ–ディレクトリã«
          <a class="glossarylink" href="./glossary.html#directive" title="用語集をå‚ç…§">ディレクティブ</a> ã‚’é©ç”¨ã™ã‚‹
          <a class="glossarylink" href="./glossary.html#configurationfile" title="用語集をå‚ç…§">設定ファイル</a>。
          åå‰ã¨ã¯è£è…¹ã«ã€ã“ã®ãƒ•ァイルã«ã¯ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã ã‘ã§ãªãã€
          ã»ã¨ã‚“ã©ã©ã‚“ãªç¨®é¡žã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§ã‚‚書ãã“ã¨ãŒã§ãã¾ã™ã€‚<br />
            å‚ç…§: <a href="configuring.html">設定ファイル</a>
          </dd>
      
          <dt><a name="httpd.conf" id="httpd.conf">httpd.conf</a></dt>
          <dd>メイン㮠Apache <a class="glossarylink" href="./glossary.html#configurationfile" title="用語集をå‚ç…§">設定
          ファイル</a>。デフォルトã®å ´æ‰€ã¯
          <code>/usr/local/apache2/conf/httpd.conf</code>
          ã§ã™ãŒã€å®Ÿè¡Œæ™‚やコンパイル時ã®è¨­å®šã«ã‚ˆã‚Šé•ã†å ´æ‰€ã«ç§»å‹•ã•れã¦
          ã„ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。<br />
            å‚ç…§: <a href="configuring.html">設定ファイル</a>
          </dd>
      
          <dt><a name="hypertexttransferprotocol" id="hypertexttransferprotocol">HyperText Transfer Protocol</a>
            <a name="http" id="hhtp">(HTTP)</a></dt>
          <dd>World Wide Web ã§ä½¿ã‚れる標準ã®è»¢é€ãƒ—ロトコル。Apache
          㯠HTTP/1.1 ã¨å‘¼ã°ã‚Œã€<a href="http://ietf.org/rfc/rfc2616.txt">RFC 2616</a>
          ã§å®šç¾©ã•れã¦ã„るプロトコルã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 1.1 を実装ã—ã¦ã„ã¾ã™ã€‚</dd>
      
          <dt><a name="https" id="https">HTTPS</a></dt>
          <dd>The HyperText Transfer Protocol (Secure),
          World Wide Web ã§ã®æš—å·åŒ–ã•ã‚ŒãŸæ¨™æº–ã®é€šä¿¡æ©Ÿæ§‹ã€‚ã“れã¯å®Ÿéš›ã¯
          å˜ã« <a class="glossarylink" href="./glossary.html#ssl" title="用語集をå‚ç…§">SSL</a> 上ã§ã® HTTP ã§ã™ã€‚<br />
            å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd> 
      
          <dt><a name="method" id="method">メソッド</a></dt>
          <dd><a class="glossarylink" href="./glossary.html#http" title="用語集をå‚ç…§">HTTP</a> ã®æ–‡è„ˆã§ã¯ã€
          クライアントã‹ã‚‰æŒ‡å®šã•れãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆè¡Œã«å¯¾å¿œã™ã‚‹ãƒªã‚½ãƒ¼ã‚¹
          ã«å¯¾ã—ã¦è¡Œãªã†å‹•作。HTTP ã§ã¯ <code>GET</code>, <code>POST</code>,
          <code>PUT</code> ã¨ã„ã£ãŸã‚ˆã†ãªãƒ¡ã‚½ãƒƒãƒ‰ãŒã‚りã¾ã™ã€‚</dd> 
          
          <dt><a name="messagedigest" id="messagedigest">メッセージダイジェスト</a></dt>
          <dd>メッセージã®ãƒãƒƒã‚·ãƒ¥ã§ã€ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®å†…容ãŒè»¢é€æ™‚ã«å¤‰æ›´ã•れã¦ã„ãªã„ã“ã¨ã®æ¤œè¨¼ã«
          使ãˆã‚‹ã€‚<br />
            å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd>
      
          <dt><a name="mime-type" id="mime-type">MIME タイプ</a></dt>
          <dd>é€ä¿¡ã•れã¦ã„るドキュメントã®ç¨®é¡žã‚’表ã™ãŸã‚ã®æ–¹æ³•。
          ã“ã®åå‰ã¯ãƒ•ォーマット㌠Multipurpose Internet Mail Extensions ã‹ã‚‰
          借りã¦ã“られãŸã“ã¨ã«ã‚ˆã‚Šã¾ã™ã€‚ã“れã¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§åˆ†é›¢ã•れãŸã€
          主タイプã¨å‰¯ã‚¿ã‚¤ãƒ—ã‹ã‚‰ãªã‚Šã¾ã™ã€‚例ãˆã°ã€<code>text/html</code>,
          <code>image/gif</code>,  <code>application/octet-stream</code> ãªã©
          ãŒã‚りã¾ã™ã€‚HTTP ã§ã¯ã€MIME タイプ㯠<code>Content-Type</code>
          <a class="glossarylink" href="./glossary.html#header" title="用語集をå‚ç…§">ヘッダ</a> ã§é€ä¿¡ã•れã¾ã™ã€‚<br />
          å‚ç…§: <a href="mod/mod_mime.html">mod_mime</a>
          </dd>
      
          <dt><a name="module" id="module">モジュール</a></dt>
          <dd>プログラムã®ç‹¬ç«‹ã—ãŸä¸€éƒ¨åˆ†ã€‚Apache ã®æ©Ÿèƒ½ã®å¤šãã¯ä½¿ç”¨ã™ã‚‹ã‹ã—ãªã„ã‹ã‚’
          é¸æŠžã§ãるモジュールã®ä¸­ã«ã‚りã¾ã™ã€‚Apache <code class="program"><a href="./programs/httpd.html">httpd</a></code>
          ã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„るモジュールã¯<dfn>é™çš„モジュール</dfn>ã¨å‘¼ã°ã‚Œã€
          別ã«ä¿å­˜ã•れã€å®Ÿè¡Œæ™‚ã«èª­ã¿è¾¼ã‚€ã“ã¨ã®ã§ãるモジュールã¯
          <dfn>動的モジュール</dfn> ã‚‚ã—ã㯠<a class="glossarylink" href="./glossary.html#dso" title="用語集をå‚ç…§">DSO</a> ã¨
          呼ã°ã‚Œã¾ã™ã€‚デフォルトã§å«ã¾ã‚Œã¦ã„るモジュールã¯<dfn>base モジュール</dfn>
          ã¨å‘¼ã°ã‚Œã¾ã™ã€‚Apache HTTP サーãƒã® <a class="glossarylink" href="./glossary.html#tarball" title="用語集をå‚ç…§">tarball</a>
          ã®ä¸€éƒ¨ã¨ã—ã¦ã¯é…られã¦ã„ãªã„ Apache 用ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒã‚りã¾ã™ã€‚
          ãれら㯠<dfn>サードパーティモジュール</dfn> ã¨å‘¼ã°ã‚Œã¾ã™ã€‚<br />
            å‚ç…§: <a href="mod/">モジュール索引</a>
          </dd>
      
          <dt><a name="modulemagicnumber" id="modulemagicnumber">Module Magic
            Number</a> (<a name="mmn" id="mmn">MMN</a>)</dt>
          <dd>Apache ソースコードã§å®šç¾©ã•れã¦ã„ã‚‹ã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ãƒã‚¤ãƒŠãƒªäº’æ›æ€§ã«
          é–¢ã™ã‚‹å®šæ•°ã€‚ãƒã‚¤ãƒŠãƒªäº’æ›æ€§ãŒä¿ã¦ãªããªã‚‹ã‚ˆã†ãª Apache å†…éƒ¨ã®æ§‹é€ ä½“ã‚„ã€
          関数呼ã³å‡ºã—ã€ãã®ä»–ã® API ã®é‡è¦ãªéƒ¨åˆ†ã®å¤‰æ›´ãŒã‚ã£ãŸã¨ãã«å¤‰æ›´ã•れã¾ã™ã€‚
          MMN ãŒå¤‰ã‚ã‚‹ã¨ã€ã™ã¹ã¦ã®ã‚µãƒ¼ãƒ‰ãƒ‘ーティモジュールã¯å°‘ãªãã¨ã‚‚å†ã‚³ãƒ³ãƒ‘イルを
          ã™ã‚‹å¿…è¦ãŒã‚りã€å ´åˆã«ã‚ˆã£ã¦ã¯æ–°ã—ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã® Apache ã§å‹•作ã™ã‚‹ãŸã‚ã«
          å°‘ã—変更ã™ã‚‹å¿…è¦ã•ãˆã‚ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。</dd>
      
          <dt><a name="openssl" id="openssl">OpenSSL</a></dt>
          <dd>SSL/TLS 用ã®ã‚ªãƒ¼ãƒ—ンソースツールキット<br />
            å‚ç…§ <a href="http://www.openssl.org/">http://www.openssl.org/</a>#
          </dd>
      
          <dt><a name="passphrase" id="passphrase">パスフレーズ</a></dt>
          <dd>秘密éµã®ãƒ•ァイルをä¿è­·ã™ã‚‹ãŸã‚ã®èªžå¥ã€‚権é™ã®ç„¡ã„ユーザãŒ
          æš—å·åŒ–ã™ã‚‹ã®ã‚’防ãŽã¾ã™ã€‚通常ã¯å˜ã« <a class="glossarylink" href="./glossary.html#cipher" title="用語集をå‚ç…§">Cipher</a> ã®ç§˜å¯†ã®æš—å·ç”¨ã¨å¾©å·ç”¨ã®ã‚­ãƒ¼ã§ã™ã€‚<br />
            å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd>
      
          <dt><a name="plaintext" id="plaintext">平文</a></dt>
          <dd>æš—å·åŒ–ã•れã¦ã„ãªã„テキスト。</dd>
      
          <dt><a name="privatekey" id="privatekey">秘密éµ</a></dt>
          <dd>å—ã‘å–るメッセージã®å¾©å·ã¨é€å‡ºã™ã‚‹ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®ç½²åã«ä½¿ã‚れるã€
          <a class="glossarylink" href="./glossary.html#publickeycryptography" title="用語集をå‚ç…§">公開鵿š—å·</a> ã®
          秘密éµã€‚<br />
            å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd>
          
          <dt><a name="proxy" id="proxy">プロキシ</a></dt>
          <dd>クライアント㨠<em>オリジンã®ã‚µãƒ¼ãƒ</em> ã®é–“ã«å­˜åœ¨ã™ã‚‹ä¸­é–“サーãƒã€‚
          クライアントã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘å–りã€ã‚ªãƒªã‚¸ãƒ³ã®ã‚µãƒ¼ãƒã«é€ä¿¡ã—ã¦ã€ã‚ªãƒªã‚¸ãƒ³ã®
          サーãƒã‹ã‚‰ã®å¿œç­”をクライアントã«è¿”ã—ã¾ã™ã€‚複数ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒåŒã˜
          ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’è¦æ±‚ã™ã‚‹å ´åˆã¯ã€æ¯Žå›žå…ƒã®ã‚µãƒ¼ãƒã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é€ã‚‹ä»£ã‚り
          プロキシã¯ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‹ã‚‰ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’é€ã‚Šã€å¿œç­”時間を短縮ã™ã‚‹ã“ã¨ãŒ
          ã§ãã¾ã™ã€‚<br />
            å‚ç…§: <a href="mod/mod_proxy.html">mod_proxy</a>
          </dd>
      
          <dt><a name="publickey" id="publickey">公開éµ</a></dt>
          <dd>所有者ã«å‘ã‘られãŸãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®æš—å·åŒ–ã¨æ‰€æœ‰è€…ã«ã‚ˆã‚‹ç½²åã®å¾©å·ã«ä½¿ã‚れるã€
          <a class="glossarylink" href="./glossary.html#publickeycryptography" title="用語集をå‚ç…§">公開鵿š—å·</a>システムã«
          ãŠã‘ã‚‹å…¬ã‘ã«ã•れã¦ã„ã‚‹éµã€‚<br />
            å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd>
      
          <dt><a name="publickeycryptography" id="publickeycryptography">公開鵿š—å·</a></dt>
          <dd>ã‚ã‚‹éµã‚’æš—å·ã«ä½¿ã„ã€åˆ¥ã®éµã‚’復å·ã«ä½¿ã†éžå¯¾ç§°æš—å·ã‚·ã‚¹ãƒ†ãƒ ã«ã¤ã„ã¦ã®ç ”ç©¶ã‚„
          ãã®å¿œç”¨ã‚’指ã™ã€‚対応ã™ã‚‹éµã¯ã‚­ãƒ¼ãƒšã‚¢ã¨å‘¼ã°ã‚Œã¾ã™ã€‚éžå¯¾ç§°æš—å·ã¨ã‚‚呼ã°ã‚Œã¾ã™ã€‚<br />
            å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd> 
      
          <dt><a name="regularexpresion" id="regularexpresion">æ­£è¦è¡¨ç¾</a>
            <a name="regex" id="regex">(Regex)</a></dt>
          <dd>テキストã®ãƒ‘ターンを表ç¾ã™ã‚‹æ–¹å¼ã®ä¸€ã¤ã€‚例ãˆã°ã€
          「A ã§å§‹ã¾ã‚‹ã™ã¹ã¦ã®å˜èªžã€ã‚„「ã™ã¹ã¦ã® 10 æ¡ã®é›»è©±ç•ªå·ã€ã‚„ã€
          「コンマãŒäºŒã¤ã‚りã€å¤§æ–‡å­—ã® Q ãŒãªã„ã™ã¹ã¦ã®æ–‡ã€ã¨ã„ã†ã®ã§ã•ãˆè¡¨ç¾
          ã§ãã¾ã™ã€‚
          æ­£è¦è¡¨ç¾ã¯ Apache ã«ãŠã„ã¦ã‚‚便利ãªã‚‚ã®ã§ã€ãƒ•ァイルやリソースã®é›†ã¾ã‚Šã«å¯¾ã—ã¦
          何らã‹ã®å±žæ€§ã‚’é©ç”¨ã™ã‚‹ã“ã¨ãŒã¨ã¦ã‚‚柔軟ã«ã§ãã¾ã™ã€‚例ãˆã°ã€
          ã™ã¹ã¦ã® "images" ディレクトリã®ä¸‹ã®ã€ã™ã¹ã¦ã® .gif 㨠.jpg ファイル
          㯠<code>/images/.*(jpg|gif)$</code> ã¨æ›¸ãã“ã¨ãŒã§ãã¾ã™ã€‚
          Apache ã§ã¯ <a href="http://www.pcre.org/">PCRE</a> ãƒ©ã‚¤ãƒ–ãƒ©ãƒªãŒæä¾›ã™ã‚‹
          Perl äº’æ›æ­£è¦è¡¨ç¾ <span class="transnote">(<em>訳注:</em> Perl Compatible Regular Expressions)</span>
          を使ã„ã¾ã™ã€‚</dd> 
      
          <dt><a name="reverseproxy" id="reverseproxy">リãƒãƒ¼ã‚¹ãƒ—ロキシ</a></dt>
          <dd>クライアントã«ã¯ <em>オリジンã®ã‚µãƒ¼ãƒ</em> ã®ã‚ˆã†ã«è¦‹ãˆã‚‹
          <a class="glossarylink" href="./glossary.html#proxy" title="用語集をå‚ç…§">プロキシ</a> サーãƒã€‚セキュリティã®
          ãŸã‚ã‚„ã€è² è·åˆ†æ•£ã®ãŸã‚ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã‚ªãƒªã‚¸ãƒ³ã®ã‚µãƒ¼ãƒã‚’éš ã—ãŸã„ã¨ãã«
          便利ã§ã™ã€‚</dd>
        
          <dt><a name="securesocketslayer" id="securesocketslayer">Secure Sockets
            Layer</a> <a name="ssl" id="ssl">(SSL)</a></dt>
          <dd>Netscape Communications Corporation ã«ã‚ˆã‚Š
          TCP/IP ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã§ä¸€èˆ¬ã®é€šä¿¡ã®èªè¨¼ã¨æš—å·ç”¨ã«ä½œã‚‰ã‚ŒãŸãƒ—ロトコル。
          最もよã使ã‚れã¦ã„ã‚‹ã‚‚ã®ã¯ <em>HTTPS</em> ã¤ã¾ã‚Š SSL 上ã§ã®
          HyperText Transfer Protocol (HTTP) ã§ã™ã€‚<br />
          å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd> 
      
          <dt><a name="serversideincludes" id="serversideincludes">Server Side
            Includes</a> <a name="ssi" id="ssi">(SSI)</a></dt>
          <dd>HTML ファイル中ã«å‡¦ç†ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を埋ã‚込む技術ã®ä¸€ã¤ã€‚<br />
          å‚ç…§: <a href="howto/ssi.html">Server Side Includes 入門</a>
          </dd>
        
          <dt><a name="session" id="session">セッション</a></dt>
          <dd>一般的ãªé€šä¿¡ã«ãŠã‘る文脈情報。</dd>
      
          <dt><a name="ssleay" id="ssleay">SSLeay</a></dt>
          <dd>Eric A. Young æ°ã«ã‚ˆã‚‹ SSL/TLS を実装ã—ãŸå…ƒã€…ã®ãƒ©ã‚¤ãƒ–ラリ。</dd>
      
          <dt><a name="symmetriccryptophraphy" id="symmetriccryptophraphy">対称暗å·</a>
          </dt>
          <dd>一ã¤ã®ç§˜å¯†éµã‚’æš—å·åŒ–ã¨å¾©å·ã®ä¸¡æ–¹ã«ä½¿ã† <em>Cipher</em> ã®
          研究や応用を指ã™ã€‚</dd>
      
          <dt><a name="tarball" id="tarball">Tarball</a></dt>
          <dd><code>tar</code> ユーティリティを使ã£ã¦ã¾ã¨ã‚られãŸãƒ•ァイルã®ãƒ‘ッケージ。
            Apache é…布ã¯åœ§ç¸®ã•れ㟠tar アーカイブ㋠pkzip ã§ä¿ç®¡ã•れã¦ã„ã¾ã™ã€‚</dd> 
      
          <dt><a name="transportlayersecurity" id="transportlayersecurity">Transport
              Layer Security</a> <a name="tls" id="tls">(TLS)</a></dt>
          <dd>TCP/IP ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã§ã®ä¸€èˆ¬é€šä¿¡ã®èªè¨¼ã¨æš—å·åŒ–用ã«
            Internet Engineering Task Force (IETF) ã«ã‚ˆã‚Šä½œæˆã•れ㟠SSL ã®
            後継プロトコル。TLS ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 1 㯠SSL ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 3 ã¨ã»ã¼åŒã˜ã§ã™ã€‚<br />
              å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd>
      
          <dt><a name="uniformresourcelocator" id="uniformresourcelocator">Uniform
              Resource Locator</a> <a name="url" id="url">(URL)</a></dt>
          <dd>Internet ã®ãƒªã‚½ãƒ¼ã‚¹ã®åå‰ã€ã‚‚ã—ãã¯ã‚¢ãƒ‰ãƒ¬ã‚¹ã€‚ã“ã‚Œã¯æ­£å¼ã«ã¯
            <a class="glossarylink" href="./glossary.html#uniformresourceidentifier" title="用語集をå‚ç…§">Uniform Resource Identifier</a>
            ã¨å‘¼ã°ã‚Œã‚‹ã‚‚ã®ã®ã‚ˆã使ã‚れるéžå…¬å¼ãªåå‰ã§ã™ã€‚URL ã¯æ™®é€šã¯ã€
            <code>http</code> ã‚„ <code>https</code> ã¨ã„ã£ãŸã‚¹ã‚­ãƒ¼ãƒ ã¨ãƒ›ã‚¹ãƒˆåã€
            パスã‹ã‚‰ãªã‚Šã¾ã™ã€‚ã“ã®ãƒšãƒ¼ã‚¸ã® URL ã¯ãŠãらã
            <code>http://httpd.apache.org/docs/2.4/glossary.html</code>
            ã¨æ€ã‚れã¾ã™ã€‚
          </dd> 
      
          <dt><a name="uniformresourceidentifier" id="uniformresourceidentifier">Uniform Resource Identifier</a>
            <a name="URI" id="URI">(URI)</a></dt>
          <dd>抽象的ãªãƒªã‚½ãƒ¼ã‚¹ã‚„物ç†ãƒªã‚½ãƒ¼ã‚¹ã‚’åŒå®šã™ã‚‹ãŸã‚ã®ã‚³ãƒ³ãƒ‘ã‚¯ãƒˆãªæ–‡å­—列。
            æ­£å¼ã«ã¯ <a href="http://www.ietf.org/rfc/rfc2396.txt">RFC 2396</a> ã§
            定義ã•れã¦ã„ã¾ã™ã€‚WWW ã§ä½¿ã‚れã¦ã„ã‚‹ URI  ã¯é€šå¸¸
            <a class="glossarylink" href="./glossary.html#url" title="用語集をå‚ç…§">URL</a> ã¨å‘¼ã°ã‚Œã¾ã™ã€‚
          </dd> 
      
          <dt><a name="virtualhosting" id="virtualhosting">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></dt>
          <dd>一ã¤ã® Apache を使ã£ã¦è¤‡æ•°ã®ã‚¦ã‚§ãƒ–サイトを扱ã†ã“ã¨ã€‚
            <em>IP ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</em> 㯠IP アドレスを使ã£ã¦ã‚¦ã‚§ãƒ–サイトを
            区別ã—ã¾ã™ã€‚ã¾ãŸ <em>åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</em> ã¯
            ホストã®åå‰ã ã‘を使ã£ã¦åŒºåˆ¥ã™ã‚‹ã®ã§ã€åŒã˜ IP アドレス上ã§ã®å¤šãã®ã‚µã‚¤ãƒˆã‚’
            ホストã§ãã¾ã™ã€‚<br />
            å‚ç…§: <a href="vhosts/">Apache ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®æ–‡æ›¸</a>
          </dd>
      
          <dt><a name="x.509" id="x.509">X.509</a></dt>
          <dd>SSL/TLS èªè¨¼ã«ä½¿ã‚れã¦ã„ã‚‹ International
            Telecommunication Union (ITU-T) ã«ã‚ˆã‚пލ奍ã•れã¦ã„ã‚‹èªè¨¼è¨¼æ˜Žæ›¸ã®å½¢å¼ã€‚<br />
            å‚ç…§: <a href="ssl/">SSL/TLS æš—å·åŒ–</a>
          </dd>
        </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./de/glossary.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/glossary.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/glossary.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/glossary.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/glossary.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/glossary.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/glossary.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/glossary.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/filter.html.ja.utf8��������������������������������������������������������0000644�0000000�0000050�00000022356�13412755316�017111� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>フィルタ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>フィルタ</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/filter.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/filter.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/filter.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/filter.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/filter.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/filter.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
          <p>Apache ã§ã®ãƒ•ィルタã®ä½¿ã„æ–¹ã«ã¤ã„ã¦è¨˜è¿°ã—ã¦ã„ã¾ã™ã€‚</p>
        </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="filters" id="filters">フィルタ</a></h2>
          
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code></li><li><code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code></li><li><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_mime.html#addinputfilter">AddInputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#addoutputfilter">AddOutputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#removeinputfilter">RemoveInputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#removeoutputfilter">RemoveOutputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_ext_filter.html#extfilterdefine">ExtFilterDefine</a></code></li><li><code class="directive"><a href="./mod/mod_ext_filter.html#extfilteroptions">ExtFilterOptions</a></code></li><li><code class="directive"><a href="./mod/core.html#setinputfilter">SetInputFilter</a></code></li><li><code class="directive"><a href="./mod/core.html#setoutputfilter">SetOutputFilter</a></code></li></ul></td></tr></table>
      
          <p><em>フィルタ</em> ã¨ã¯ã€ã‚µãƒ¼ãƒãŒé€å—ä¿¡ã—ãŸãƒ‡ãƒ¼ã‚¿ã«
          é©ç”¨ã•れる処ç†ãƒ—ロセスã®ã“ã¨ã‚’ã„ã„ã¾ã™ã€‚クライアントã‹ã‚‰ã‚µãƒ¼ãƒã«
          é€ã‚‰ã‚ŒãŸãƒ‡ãƒ¼ã‚¿ã¯ <em>入力フィルタ</em> ã«ã‚ˆã£ã¦ã€ã‚µãƒ¼ãƒã‹ã‚‰
          クライアントã«é€ã‚‰ã‚Œã‚‹ãƒ‡ãƒ¼ã‚¿ã¯<em>出力フィルタ</em>ã«ã‚ˆã£ã¦
          処ç†ã•れã¾ã™ã€‚複数ã®ãƒ•ィルタをé©ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã€
          ãã®é †ç•ªã‚’åŽ³å¯†ã«æŒ‡å®šã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚</p>
      
          <p>Apache 内部ã§ã¯ã€ãƒãƒ£ãƒ³ã‚¯ (データã®ã¶ã¤åˆ‡ã‚Š) を行ã£ãŸã‚Šã€
          ãƒã‚¤ãƒˆç¯„å›²ã®æŒ‡å®šã•れãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã£ãŸã‚Šã¨ã„ã£ãŸæ©Ÿèƒ½ã‚’
          行ã†éš›ã«ã€ãƒ•ィルタãŒä½¿ã‚れã¦ã„ã¾ã™ã€‚ãれã«åŠ ãˆã¦ã€
          実行時ã®è¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§é¸æŠžãŒå¯èƒ½ãªãƒ•ィルタを
          ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒæä¾›ã§ãã¾ã™ã€‚
          データã«é©å¿œã•れるフィルタã®ã‚»ãƒƒãƒˆã¯ã€
          <code class="directive"><a href="./mod/core.html#setinputfilter">SetInputFilter</a></code>,
          <code class="directive"><a href="./mod/core.html#setoutputfilter">SetOutputFilter</a></code>,
          <code class="directive"><a href="./mod/core.html#addinputfilter">AddInputFilter</a></code>,
          <code class="directive"><a href="./mod/core.html#addoutputfilter">AddOutputFilter</a></code>,
          <code class="directive"><a href="./mod/mod_mime.html#removeinputfilter">RemoveInputFilter</a></code>,
          <code class="directive"><a href="./mod/mod_mime.html#removeoutputfilter">RemoveOutputFilter</a></code>
          ディレクティブã§åˆ¶å¾¡ã§ãã¾ã™ã€‚</p>
      
          <p>ç¾è¡Œã® Apache HTTP サーãƒã®é…布ã§ã¯ã€
          次ã®ãƒ¦ãƒ¼ã‚¶é¸æŠžå¯èƒ½ãªãƒ•ã‚£ãƒ«ã‚¿ãŒæä¾›ã•れã¦ã„ã¾ã™ã€‚</p>
      
          <dl>
            <dt>INCLUDES</dt>
            <dd><code class="module"><a href="./mod/mod_include.html">mod_include</a></code> ã§ Server-Side Include ã‚’ã—ã¾ã™ã€‚</dd>
            <dt>DEFLATE</dt>
            <dd><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code>
            を使ã£ã¦ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ä¿¡ã™ã‚‹å‰ã«å‡ºåŠ›ã‚’åœ§ç¸®ã—ã¾ã™ã€‚</dd>
          </dl>
      
          <p>ã¾ãŸã€<code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code> モジュールã§
          外部プログラムをフィルタã¨ã—ã¦æŒ‡å®šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
        </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/filter.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/filter.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/filter.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/filter.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/filter.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/filter.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/filter.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/expr.html.fr.utf8����������������������������������������������������������0000644�0000000�0000050�00000114344�13412755316�016616� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Les expressions dans le serveur HTTP Apache - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Les expressions dans le serveur HTTP Apache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/expr.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/expr.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>Historiquement, il existe de nombreuses variantes dans la syntaxe
          des expressions permettant d'exprimer une condition dans les
          différents modules du serveur HTTP Apache. À ce titre, des travaux sont
          en cours pour n'utiliser qu'une seule variante nommée
          <em>ap_expr</em>, pour toutes les directives de configuration. Ce
          document décrit l'interpréteur d'expressions <em>ap_expr</em>.
          </p>
          <p>Le type d'expression <em>ap_expr</em> est appelé à remplacer la
          plupart des autres types d'expressions dans HTTPD. Par exemple, la
          directive obsolète <code class="directive"><a href="./mod/mod_ssl.html#sslrequire">SSLRequire</a></code> peut être remplacée par la
          directive <a href="mod/mod_authz_core.html#reqexpr">Require
          expr</a>.
          </p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#grammar">Syntaxe en Forme de Backus-Naur</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#vars">Variables</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#binop">Opérateurs binaires</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#unnop">Opérateurs unaires</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#functions">Fonctions</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#examples">Exemples d'expressions</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#other">Autres</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#sslrequire">Comparaison avec SSLRequire</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#compatibility">Historique de version</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><code class="directive"><a href="./mod/core.html#if">If</a></code></li><li><code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#elseif">&lt;ElseIf&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#else">&lt;Else&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#alias">Alias</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#scriptalias">ScriptAlias</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#redirect">Redirect</a></code></li><li><code class="directive"><a href="./mod/mod_auth_basic.html#authbasicfake">AuthBasicFake</a></code></li><li><code class="directive"><a href="./mod/mod_auth_form.html#authformloginrequiredlocation">AuthFormLoginRequiredLocation</a></code></li><li><code class="directive"><a href="./mod/mod_auth_form.html#authformloginsuccesslocation">AuthFormLoginSuccessLocation</a></code></li><li><code class="directive"><a href="./mod/mod_auth_form.html#authformlogoutlocation">AuthFormLogoutLocation</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#setenvifexpr">SetEnvIfExpr</a></code></li><li><code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code></li><li><code class="directive"><a href="./mod/mod_headers.html#requestheader">RequestHeader</a></code></li><li><code class="directive"><a href="./mod/mod_filter.html#filterprovider">FilterProvider</a></code></li><li><a href="mod/mod_authz_core.html#reqexpr">Require expr</a></li><li><a href="mod/mod_authnz_ldap.html#requser">Require ldap-user</a></li><li><a href="mod/mod_authnz_ldap.html#reqgroup">Require ldap-group</a></li><li><a href="mod/mod_authnz_ldap.html#reqdn">Require ldap-dn</a></li><li><a href="mod/mod_authnz_ldap.html#reqattribute">Require ldap-attribute</a></li><li><a href="mod/mod_authnz_ldap.html#reqfilter">Require ldap-filter</a></li><li><a href="mod/mod_authz_dbd.html#reqgroup">Require dbd-group</a></li><li><a href="mod/mod_authz_dbm.html#reqgroup">Require dbm-group</a></li><li><a href="mod/mod_authz_groupfile.html#reqgroup">Require group</a></li><li><a href="mod/mod_authz_host.html#reqhost">Require host</a></li><li><code class="directive"><a href="./mod/mod_ssl.html#sslrequire">SSLRequire</a></code></li><li><code class="directive"><a href="./mod/mod_log_debug.html#logmessage">LogMessage</a></code></li><li><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="grammar" id="grammar">Syntaxe en Forme de Backus-Naur</a></h2>
          
            <p>La <a href="http://fr.wikipedia.org/wiki/Forme_de_Backus-Naur">Forme de Backus-Naur</a>
            (souvent abrégée en BNF, de l'anglais Backus-Naur Form) est une notation permettant de décrire
            les règles syntaxiques des langages de programmation. En
            général, les expressions représentent des valeurs booléennes. Dans
            ce cas, le point de départ de la BNF est <code>expr</code>.
            Cependant, certaines directives comme <code class="directive"><a href="./mod/mod_log_debug.html#logmessage">LogMessage</a></code> utilisent comme
            paramètres des expressions qui représentent des chaînes de
            caractères. Dans ce cas, le point de départ de la BNF est
            <code>string</code>.
            </p>
      <blockquote>
      <pre>expr        ::= "<strong>true</strong>" | "<strong>false</strong>"
                    | "<strong>!</strong>" expr
                    | expr "<strong>&amp;&amp;</strong>" expr
                    | expr "<strong>||</strong>" expr
                    | "<strong>(</strong>" expr "<strong>)</strong>"
                    | comp
      
      comp        ::= stringcomp
                    | integercomp
                    | unaryop word
                    | word binaryop word
                    | word "<strong>in</strong>" "<strong>{</strong>" wordlist "<strong>}</strong>"
                    | word "<strong>in</strong>" listfunction
                    | word "<strong>=~</strong>" regex
                    | word "<strong>!~</strong>" regex
      
      
      stringcomp  ::= word "<strong>==</strong>" word
                    | word "<strong>!=</strong>" word
                    | word "<strong>&lt;</strong>"  word
                    | word "<strong>&lt;=</strong>" word
                    | word "<strong>&gt;</strong>"  word
                    | word "<strong>&gt;=</strong>" word
      
      integercomp ::= word "<strong>-eq</strong>" word | word "<strong>eq</strong>" word
                    | word "<strong>-ne</strong>" word | word "<strong>ne</strong>" word
                    | word "<strong>-lt</strong>" word | word "<strong>lt</strong>" word
                    | word "<strong>-le</strong>" word | word "<strong>le</strong>" word
                    | word "<strong>-gt</strong>" word | word "<strong>gt</strong>" word
                    | word "<strong>-ge</strong>" word | word "<strong>ge</strong>" word
      
      wordlist    ::= word
                    | wordlist "<strong>,</strong>" word
      
      word        ::= word "<strong>.</strong>" word
                    | digit
                    | "<strong>'</strong>" string "<strong>'</strong>"
                    | "<strong>"</strong>" string "<strong>"</strong>"
                    | variable
      	      | rebackref
                    | function
      
      string      ::= stringpart
                    | string stringpart
      
      stringpart  ::= cstring
                    | variable
      	      | rebackref
      
      cstring     ::= ...
      digit       ::= [0-9]+
      
      variable    ::= "<strong>%{</strong>" varname "<strong>}</strong>"
                    | "<strong>%{</strong>" funcname "<strong>:</strong>" funcargs "<strong>}</strong>"
      
      rebackref   ::= "<strong>$</strong>" [0-9]
      
      function     ::= funcname "<strong>(</strong>" word "<strong>)</strong>"
      
      listfunction ::= listfuncname "<strong>(</strong>" word "<strong>)</strong>"</pre>
      </blockquote>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="vars" id="vars">Variables</a></h2>
          
      
          <p>L'interpréteur d'expressions fournit plusieurs variables de la
          forme <code>%{HTTP_HOST}</code>. Notez que la valeur d'une variable
          peut dépendre de la phase du traitement de la requête au cours de
          laquelle elle est évaluée. Par exemple, une expression utilisée dans
          une directive <code class="directive">&lt;If &gt;</code> sera évaluée avant
          la phase d'authentification. Par conséquent, la variable
          <code>%{REMOTE_USER}</code> ne sera pas encore définie à ce stade.</p>
      
          <p>Les variables suivantes contiennent la valeur de l'en-tête de
          requête HTTP correspondant. La <a href="#functions">fonction</a>
          <code>req</code> permet d'extraire les valeurs des autres
          en-têtes. L'utilisation de ces variables peut provoquer
          l'ajout du nom d'en-tête correspondant à l'en-tête Vary de la
          réponse HTTP, sauf spécification contraire pour la directive
          qui accepte l'expression comme paramètre. La <a href="#functions">function</a> <code>req_novary</code> permet de
          modifier ce comportement.</p>
      
          <table class="bordered"><tr class="header"><th>Nom</th></tr>
      <tr><td><code>HTTP_ACCEPT</code></td></tr>
      <tr class="odd"><td><code>HTTP_COOKIE</code></td></tr>
      <tr><td><code>HTTP_FORWARDED</code></td></tr>
      <tr class="odd"><td><code>HTTP_HOST</code></td></tr>
      <tr><td><code>HTTP_PROXY_CONNECTION</code></td></tr>
      <tr class="odd"><td><code>HTTP_REFERER</code></td></tr>
      <tr><td><code>HTTP_USER_AGENT</code></td></tr>
      </table>
      
          <p>Autres variables liées aux requêtes</p>
      
          <table class="bordered"><tr class="header"><th>Nom</th><th>Description</th></tr>
      <tr><td><code>REQUEST_METHOD</code></td>
              <td>La méthode HTTP de la requête entrante (par exemple
      	<code>GET</code>)</td></tr>
      <tr class="odd"><td><code>REQUEST_SCHEME</code></td>
              <td>Le protocole associé à l'URI de la requête</td></tr>
      <tr><td><code>REQUEST_URI</code></td>
              <td>La partie chemin de l'URI de la requête</td></tr>
      <tr class="odd"><td><code>DOCUMENT_URI</code></td>
              <td>Idem <code>REQUEST_URI</code></td></tr>
      <tr><td><code>REQUEST_FILENAME</code></td>
              <td>Le chemin complet dans le système de fichiers local du
      	fichier ou du script correspondant à la requête, si le serveur
      	l'a dèjà déterminé à l'instant où <code>REQUEST_FILENAME</code>
      	est référencée. Dans le cas contraire, comme dans un
      	contexte de serveur virtuel, même valeur que <code>REQUEST_URI</code> </td></tr>
      <tr class="odd"><td><code>SCRIPT_FILENAME</code></td>
              <td>Identique à <code>REQUEST_FILENAME</code></td></tr>
      <tr><td><code>LAST_MODIFIED</code></td>
              <td>La date et heure de dernière modification du fichier au
      	format <code>20101231235959</code>, si elle est déjà connue du
      	serveur au moment où <code>LAST_MODIFIED</code> est référencé.
              </td></tr>
      <tr class="odd"><td><code>SCRIPT_USER</code></td>
              <td>Le nom d'utilisateur du propriétaire du script.</td></tr>
      <tr><td><code>SCRIPT_GROUP</code></td>
              <td>Le nom du groupe auquel appartient le script.</td></tr>
      <tr class="odd"><td><code>PATH_INFO</code></td>
              <td>L'information relative au nom de chemin située en fin, voir
      	la directive <code class="directive"><a href="./mod/core.html#acceptpathinfo">AcceptPathInfo</a></code></td></tr>
      <tr><td><code>QUERY_STRING</code></td>
              <td>La chaîne de paramètres de la requête courante</td></tr>
      <tr class="odd"><td><code>IS_SUBREQ</code></td>
              <td>"<code>true</code>" si la requête courante est une
      	sous-requête, "<code>false</code>" dans le cas contraire</td></tr>
      <tr><td><code>THE_REQUEST</code></td>
              <td>La requête complète (par exemple "<code>GET /index.html
      	HTTP/1.1</code>")</td></tr>
      <tr class="odd"><td><code>REMOTE_ADDR</code></td>
              <td>L'adresse IP de l'hôte distant</td></tr>
      <tr><td><code>REMOTE_PORT</code></td>
              <td>Le port de l'hôte distant (versions 2.4.26 et supérieures)</td></tr>
      <tr class="odd"><td><code>REMOTE_HOST</code></td>
              <td>Le nom d'hôte de l'hôte distant</td></tr>
      <tr><td><code>REMOTE_USER</code></td>
              <td>Le nom de l'utilisateur authentifié, s'il existe (non
      	disponible à l'intérieur d'un bloc <code class="directive">&lt;If&gt;</code>)</td></tr>
      <tr class="odd"><td><code>REMOTE_IDENT</code></td>
              <td>Le nom de l'utilisateur défini par <code class="module"><a href="./mod/mod_ident.html">mod_ident</a></code></td></tr>
      <tr><td><code>SERVER_NAME</code></td>
              <td>La valeur de la directive <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code> du serveur virtuel courant</td></tr>
      <tr class="odd"><td><code>SERVER_PORT</code></td>
              <td>Le port associé au serveur virtuel courant ; voir la
      	directive <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code></td></tr>
      <tr><td><code>SERVER_ADMIN</code></td>
              <td>La valeur de la directive <code class="directive"><a href="./mod/core.html#serveradmin">ServerAdmin</a></code> du serveur virtuel courant</td></tr>
      <tr class="odd"><td><code>SERVER_PROTOCOL</code></td>
              <td>Le protocole utilisé par la requête</td></tr>
      <tr><td><code>DOCUMENT_ROOT</code></td>
              <td>La valeur de la directive <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> du serveur virtuel
      	courant</td></tr>
      <tr class="odd"><td><code>AUTH_TYPE</code></td>
              <td>La valeur de la directive <code class="directive"><a href="./mod/mod_authn_core.html#authtype">AuthType</a></code> (par exemple
      	"<code>basic</code>")</td></tr>
      <tr><td><code>CONTENT_TYPE</code></td>
              <td>Le type de contenu de la réponse (non
      	disponible à l'intérieur d'un bloc <code class="directive">&lt;If&gt;</code>)</td></tr>
      <tr class="odd"><td><code>HANDLER</code></td>
              <td>Le nom du <a href="handler.html">gestionnaire</a> qui a
      	généré la réponse</td></tr>
      <tr><td><code>HTTP2</code></td>
              <td>"<code>on</code>" si la requête utilise http/2,
                  "<code>off</code>" dans le cas contraire</td></tr>
      <tr class="odd"><td><code>HTTPS</code></td>
              <td>"<code>on</code>" si la requête utilise https,
      	"<code>off</code>" dans le cas contraire</td></tr>
      <tr><td><code>IPV6</code></td>
              <td>"<code>on</code>" si la connexion utilise IPv6,
      	"<code>off</code>" dans le cas contraire</td></tr>
      <tr class="odd"><td><code>REQUEST_STATUS</code></td>
              <td>Le code d'erreur HTTP de la requête (non
      	disponible à l'intérieur d'un bloc <code class="directive">&lt;If&gt;</code>)</td></tr>
      <tr><td><code>REQUEST_LOG_ID</code></td>
              <td>L'identifiant du message d'erreur associé à la requête (voir
      	la directive <code class="directive"><a href="./mod/core.html#errorlogformat">ErrorLogFormat</a></code>)</td></tr>
      <tr class="odd"><td><code>CONN_LOG_ID</code></td>
              <td>L'identifiant du message d'erreur associé à la connexion
      	(voir la directive <code class="directive"><a href="./mod/core.html#errorlogformat">ErrorLogFormat</a></code>)</td></tr>
      <tr><td><code>CONN_REMOTE_ADDR</code></td>
              <td>L'adresse IP du correspondant pour la connexion (voir le module
      	<code class="module"><a href="./mod/mod_remoteip.html">mod_remoteip</a></code>)</td></tr>
      <tr class="odd"><td><code>CONTEXT_PREFIX</code></td>
              <td /></tr>
      <tr><td><code>CONTEXT_DOCUMENT_ROOT</code></td>
              <td /></tr>
      </table>
      
          <p>Variables diverses</p>
      
          <table class="bordered"><tr class="header"><th>Nom</th><th>Description</th></tr>
      <tr><td><code>TIME_YEAR</code></td>
              <td>L'année courante (par exemple <code>2010</code>)</td></tr>
      <tr class="odd"><td><code>TIME_MON</code></td>
              <td>Le mois courant (<code>01</code>, ..., <code>12</code>)</td></tr>
      <tr><td><code>TIME_DAY</code></td>
              <td>Le jour courant dans le mois (<code>01</code>, ...)</td></tr>
      <tr class="odd"><td><code>TIME_HOUR</code></td>
              <td>Les heures de la date courante (<code>00</code>, ...,
      	<code>23</code>)</td></tr>
      <tr><td><code>TIME_MIN</code></td>
              <td>Les minutes de la date courante</td></tr>
      <tr class="odd"><td><code>TIME_SEC</code></td>
              <td>Les secondes de la date courante</td></tr>
      <tr><td><code>TIME_WDAY</code></td>
              <td>Le jour de la semaine (à partir de <code>0</code> pour
      	dimanche)</td></tr>
      <tr class="odd"><td><code>TIME</code></td>
              <td>La date et heure au format <code>20101231235959</code></td></tr>
      <tr><td><code>SERVER_SOFTWARE</code></td>
              <td>La chaîne contenant la version du serveur</td></tr>
      <tr class="odd"><td><code>API_VERSION</code></td>
              <td>La date de la version de l'API (module magic number)</td></tr>
      </table>
      
          <p>Certains modules, comme <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code>, définissent des
          variables supplémentaires.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="binop" id="binop">Opérateurs binaires</a></h2>
          
      
          <p>À l'exception de quelques opérateurs de comparaison internes, les
          opérateurs binaires sont de la forme
          "<code>-[a-zA-Z][a-zA-Z0-9_]+</code>", autrement dit un signe moins
          et au moins deux caractères. Le nom est insensible à la casse. Les
          modules peuvent fournir des opérateurs binaires supplémentaires.</p>
      
          <h3><a name="comp" id="comp">Opérateurs de comparaison</a></h3>
          
      
          <table class="bordered"><tr class="header"><th>Nom</th><th>Alternative</th> <th>Description</th></tr>
      <tr><td><code>==</code></td>
              <td><code>=</code></td>
              <td>Egalité de chaînes</td></tr>
      <tr class="odd"><td><code>!=</code></td>
              <td />
              <td>Inégalité de chaînes</td></tr>
      <tr><td><code>&lt;</code></td>
              <td />
              <td>Chaîne inférieure à</td></tr>
      <tr class="odd"><td><code>&lt;=</code></td>
              <td />
              <td>Chaîne inférieure ou égale à</td></tr>
      <tr><td><code>&gt;</code></td>
              <td />
              <td>Chaîne supérieure à</td></tr>
      <tr class="odd"><td><code>&gt;=</code></td>
              <td />
              <td>Chaîne supérieure ou égale à</td></tr>
      <tr><td><code>=~</code></td>
              <td />
              <td>La chaîne correspond à l'expression rationnelle</td></tr>
      <tr class="odd"><td><code>!~</code></td>
              <td />
              <td>La chaîne ne correspond pas à l'expression rationnelle</td></tr>
      <tr><td><code>-eq</code></td>
              <td><code>eq</code></td>
              <td>Egalité d'entiers</td></tr>
      <tr class="odd"><td><code>-ne</code></td>
              <td><code>ne</code></td>
              <td>Inégalité d'entiers</td></tr>
      <tr><td><code>-lt</code></td>
              <td><code>lt</code></td>
              <td>Entier inférieur à</td></tr>
      <tr class="odd"><td><code>-le</code></td>
              <td><code>le</code></td>
              <td>Entier inférieur ou égal à</td></tr>
      <tr><td><code>-gt</code></td>
              <td><code>gt</code></td>
              <td>Entier supérieur à</td></tr>
      <tr class="odd"><td><code>-ge</code></td>
              <td><code>ge</code></td>
              <td>Entier supérieur ou égal à</td></tr>
      </table>
          
      
          <h3><a name="binaryother" id="binaryother">Autres opérateurs binaires</a></h3>
          
      
          <table class="bordered"><tr class="header"><th>Nom</th><th>Description</th></tr>
      <tr><td><code>-ipmatch</code></td>
              <td>L'adresse IP correspond à adresse/masque</td></tr>
      <tr class="odd"><td><code>-strmatch</code></td>
              <td>la chaîne de gauche correspond au modèle constitué par la
      	chaîne de droite (contenant des caractères génériques *, ?, [])</td></tr>
      <tr><td><code>-strcmatch</code></td>
              <td>idem <code>-strmatch</code>, mais insensible à la casse</td></tr>
      <tr class="odd"><td><code>-fnmatch</code></td>
              <td>idem <code>-strmatch</code>, mais les slashes ne sont pas
      	pris en compte par les caractères génériques</td></tr>
      </table>
          
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="unnop" id="unnop">Opérateurs unaires</a></h2>
          
      
          <p>Les opérateurs unaires acceptent un seul argument et sont
          de la forme "<code>-[a-zA-Z]</code>",
          autrement dit le signe moins et un caractère. Le nom <em>est</em>
          sensible à la casse. Les modules peuvent fournir des opérateurs
          unaires supplémentaires.</p>
      
          <table class="bordered"><tr class="header"><th>Nom</th><th>Description</th><th>Remarques particulières</th></tr>
      <tr><td><code>-d</code></td>
              <td>L'argument est traité comme un nom de fichier. 
      	Vrai si le fichier existe et correspond à un
      	répertoire</td><td>oui</td></tr>
      <tr class="odd"><td><code>-e</code></td>
              <td>L'argument est traité comme un nom de fichier. Vrai si le
      	fichier (ou dir ou special) existe</td><td>oui</td></tr>
      <tr><td><code>-f</code></td>
              <td>L'argument est traité comme un nom de fichier. Vrai si le
      	fichier existe et correspond à un fichier
      	régulier</td><td>oui</td></tr>
      <tr class="odd"><td><code>-s</code></td>
              <td>L'argument est traité comme un nom de fichier. Vrai si le
      	fichier existe et n'est pas vide</td><td>oui</td></tr>
      <tr><td><code>-L</code></td>
              <td>L'argument est traité comme un nom de fichier. Vrai si le
      	fichier existe et correspond à un lien
      	symbolique</td><td>oui</td></tr>
      <tr class="odd"><td><code>-h</code></td>
              <td>L'argument est traité comme un nom de fichier. Vrai si le
      	fichier existe et correspond à un lien symbolique
      	(identique à <code>-L</code>)</td><td>oui</td></tr>
      <tr><td><code>-F</code></td>
              <td>Vrai si la chaîne correspond a un fichier valide, accessible
      	avec tous les contrôles d'accès configurés pour ce chemin. A
      	cette fin, une sous-requête effectue la vérification, et vous
      	devez utiliser ce drapeau avec soin car il peut impacter les
      	performances de votre serveur !</td><td /></tr>
      <tr class="odd"><td><code>-U</code></td>
              <td>Vrai si la chaîne correspond a une URL valide, accessible
      	avec tous les contrôles d'accès configurés pour ce chemin. A
      	cette fin, une sous-requête effectue la vérification, et vous
      	devez utiliser ce drapeau avec soin car il peut impacter les
      	performances de votre serveur !</td><td /></tr>
      <tr><td><code>-A</code></td>
              <td>Alias pour <code>-U</code></td><td /></tr>
      <tr class="odd"><td><code>-n</code></td>
              <td>Vrai si la chaîne n'est pas vide</td><td /></tr>
      <tr><td><code>-z</code></td>
              <td>Vrai si la chaîne est vide</td><td /></tr>
      <tr class="odd"><td><code>-T</code></td>
              <td>Faux si la chaîne est vide, "<code>0</code>",
      	"<code>off</code>", "<code>false</code>", ou "<code>no</code>"
      	(insensibilité à la casse). Vrai dans le cas contraire.</td><td /></tr>
      <tr><td><code>-R</code></td>
              <td>Idem "<code>%{REMOTE_ADDR} -ipmatch ...</code>", en plus
      	efficace
              </td><td /></tr>
      </table>
      
          <p>Les opérateurs marqués comme "restreints" ne sont pas disponibles
          avec certains modules comme <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="functions" id="functions">Fonctions</a></h2>
          
      
          <p>Normalement, les fonctions dont la valeur est une chaîne acceptent une chaîne
          comme argument et renvoient une chaîne. Les noms de fonctions sont
          insensibles à la casse. Les modules peuvent fournir des fonctions
          supplémentaires.</p>
      
          <table class="bordered"><tr class="header"><th>Nom</th><th>Description</th><th>Notes particulières</th></tr>
      <tr><td><code>req</code>, <code>http</code></td>
              <td>Lit l'en-tête de requête HTTP ; les noms
      	d'en-tête correspondants peuvent être ajoutés
      	à l'en-tête Vary,
      	voir ci-dessous</td><td /></tr>
      <tr class="odd"><td><code>req_novary</code></td>
              <td>Identique à <code>req</code>, mais aucun nom d'en-tête n'est
      	ajouté à l'en-tête Vary</td><td /></tr>
      <tr><td><code>resp</code></td>
              <td>Lit l'en-tête de réponse HTTP (La plupart des en-têtes de la réponse
      	ne seront pas encore définis pendant le traitement de la directive
      	<code class="directive">&lt;If&gt;</code>)</td><td /></tr>
      <tr class="odd"><td><code>reqenv</code></td>
              <td>Recherche une variable d'environnement de requête (on
      	peut aussi utiliser le raccourci <code>v</code>).
      	</td>
      	<td>ordonnancement</td></tr>
      <tr><td><code>osenv</code></td>
              <td>Recherche une variable d'environnement du système
      	d'exploitation</td><td /></tr>
      <tr class="odd"><td><code>note</code></td>
              <td>Recherche une note de requête</td><td>ordonnancement</td></tr>
      <tr><td><code>env</code></td>
              <td>Renvoie le premier résultat positif de <code>note</code>,
      	<code>reqenv</code>, <code>osenv</code></td><td>ordonnancement</td></tr>
      <tr class="odd"><td><code>tolower</code></td>
              <td>Convertit une chaîne en minuscules</td><td /></tr>
      <tr><td><code>toupper</code></td>
              <td>Convertit une chaîne en majuscules</td><td /></tr>
      <tr class="odd"><td><code>escape</code></td>
              <td>Echappe les caractères spéciaux en codage hexadécimal</td><td /></tr>
      <tr><td><code>unescape</code></td>
              <td>"Déséchappe" les chaînes codées
      	en hexadécimal, en ne gardant encodés que les slashes; renvoie la chaîne vide
      	si la séquence %00 est rencontrée</td><td /></tr>
      <tr class="odd"><td><code>base64</code></td>
              <td>Encode la chaîne en base64</td><td /></tr>
      <tr><td><code>unbase64</code></td>
              <td>Décode les chaînes codées en base64, renvoie une chaîne
      	tronquée si le caractère 0x00 est rencontré</td><td /></tr>
      <tr class="odd"><td><code>md5</code></td>
              <td>Génère un hash de la chaîne en utilisant MD5, puis code le
      	hash obtenu en hexadécimal</td><td /></tr>
      <tr><td><code>sha1</code></td>
              <td>Génère un hash de la chaîne en utilisant SHA1, puis encode
      	le hash obtenu en hexadécimal</td><td /></tr>
      <tr class="odd"><td><code>file</code></td>
              <td>Lit le contenu d'un fichier(fins de lignes incluses, si
      	elles existent)</td><td>limité</td></tr>
      <tr><td><code>filemod</code></td>
              <td>Renvoie la date de dernière modification d'un fichier (ou 0 si le
      	fichier n'existe pas ou n'est pas un fichier régulier)</td><td>limité</td></tr>
      <tr class="odd"><td><code>filesize</code></td>
              <td>Renvoie la taille d'un fichier (ou 0 si le fichier n'existe
      	pas ou ne correspond pas à un fichier régulier)</td><td>limité</td></tr>
      </table>
      
          <p>Les fonctions marquées comme "limité" dans la dernière colonne ne sont
          pas disponibles avec certains modules comme
          <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>.</p>
      
          <p>Les fonctions marquées comme "ordonnancement" dans la dernière colonne
          nécessitent une attention particulière pour l'ordonnancement des différents
          composants du serveur, spécialement lorsque la fonction est utilisée au sein
          d'une directive &lt;<code class="directive"><a href="./mod/core.html#if">If</a></code>&gt; qui est
          évaluée relativement tôt.</p>
          <div class="note">
          <h3>Ordonnancement des variables d'environnement</h3>
          Lorsque des variables d'environnement sont évaluées au sein d'une directive
          &lt;<code class="directive"><a href="./mod/core.html#if">If</a></code>&gt;, il est important de tenir
          compte du moment où cette évaluation intervient dans le traitement de la
          requête. Par exemple, toute directive définie en dehors d'un contexte de
          serveur virtuel (directory, location, htaccess) aura peu de chance d'être
          déjà exécutée. Ainsi la directive <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code> est une directive qui s'exécute
          avant cette évaluation.
          <br />
          <br />
          Lorsque <code>reqenv</code> est utilisé en dehors de la directive
          &lt;<code class="directive"><a href="./mod/core.html#if">If</a></code>&gt;, l'évaluation survient en
          général plus tard, mais le moment exact dépend de la directive dans laquelle
          l'expression a été utilisée.
          </div>
      
          <p>Lorsque les fonctions <code>req</code> ou <code>http</code> sont
          utilisées, le nom d'en-tête sera automatiquement ajouté à l'en-tête
          Vary de la réponse HTTP, sauf spécification contraire pour la
          directive qui accepte l'expression comme paramètre. La
          fonction <code>req_novary</code> permet d'empêcher l'ajout de noms
          d'en-têtes à l'en-tête Vary.</p>
      
          <p>En plus des fonctions dont la valeur est une chaîne, il existe
          aussi des fonctions dont la valeur est une liste, qui acceptent une
          chaîne comme argument, et renvoient une liste de mots, autrement dit
          une liste de chaînes. La liste de mot peut être utilisée avec
          l'opérateur spécial <code>-in</code>. Les noms de fonctions sont
          insensibles à la casse. Les modules peuvent fournir des fonctions
          supplémentaires.</p>
      
          <p>Il n'existe pas de fonctions internes dont la valeur est une
          liste. Le module <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> fournit la fonction
          <code>PeerExtList</code>. Voir la description de la directive
          <code class="directive"><a href="./mod/mod_ssl.html#sslrequire">SSLRequire</a></code> pour plus de
          détails (notez que la fonction <code>PeerExtList</code> peut aussi
          être utilisée en dehors de la directive <code class="directive"><a href="./mod/mod_ssl.html#sslrequire">SSLRequire</a></code>).</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Exemples d'expressions</a></h2>
          
      	
      	<p>Les exemples suivants montent comment utiliser les
      	expressions pour évaluer les requêtes :</p>
      	
      	<pre class="prettyprint lang-config"># Comparer le nom d'hôte avec example.com et rediriger vers
      # www.example.com si le nom d'hôte correspond
      &lt;If "%{HTTP_HOST} == 'example.com'"&gt;
          Redirect permanent "/" "http://www.example.com/"
      &lt;/If&gt;
      
      # Forcer le type text/plain si un fichier fait l'objet d'une
      # requête dont la chaîne de paramètres contient 'forcetext'
      &lt;If "%{QUERY_STRING} =~ /forcetext/"&gt;
          ForceType text/plain
      &lt;/If&gt;
      
      # N'autoriser l'accès à ce contenu que pendant les heures de
      # travail
      &lt;Directory "/foo/bar/business"&gt;
           Require expr %{TIME_HOUR} -gt 9 &amp;&amp; %{TIME_HOUR} -lt 17
      &lt;/Directory&gt;
      
      # Vérifie si un en-tête HTTP correspond à une des valeurs d'une liste
      &lt;If "%{HTTP:X-example-header} in { 'foo', 'bar', 'baz' }"&gt;
          La définition de l'en-tête correspond à une des valeurs recherchées
      &lt;/If&gt;
      
      # Recherche la valeur d'une expression rationnelle dans une variable
      # d'environnement, et renvoie la négation du résultat.
      &lt;If "! reqenv('REDIRECT_FOO') =~ /bar/"&gt;
          La condition est vérifiée
      &lt;/If&gt;
      
      # Vérifie le résultat de la recherche d'une correspondance d'URI dans un
      # contexte de répertoire avec l'option -f
      &lt;Directory "/var/www"&gt;
          AddEncoding x-gzip gz
      &lt;If "-f '%{REQUEST_FILENAME}.unzipme' &amp;&amp; ! %{HTTP:Accept-Encoding} =~ /gzip/"&gt;
            SetOutputFilter INFLATE
      &lt;/If&gt;
      &lt;/Directory&gt;
      
      # Vérifie l'adresse IP du client
      &lt;If "-R '192.168.1.0/24'"&gt;
          Header set matched true
      &lt;/If&gt;
      
      # Exemple de fonction dans un contexte booléen
      &lt;If "md5('foo') == 'acbd18db4cc2f85cedef654fccc4a4d8'"&gt;
        Header set checksum-matched true
      &lt;/If&gt;
      
      # Function example in string context
      Header set foo-checksum "expr=%{md5:foo}"
      
      # L'exemple suivant retarde l'évaluation de la clause de condition par rapport à
      # &lt;If&gt;
      Header always set CustomHeader my-value "expr=%{REQUEST_URI} =~ m#^/special_path\.php$#"
      
      # Journalisation conditionnelle
      CustomLog logs/access-errors.log common "expr=%{REQUEST_STATUS} &gt;= 400"
      CustomLog logs/access-errors-specific.log common "expr=%{REQUEST_STATUS} -in {'405','410'}"</pre>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="other" id="other">Autres</a></h2>
          
      
          <table class="bordered"><tr class="header"><th>Nom</th><th>Alternative</th> <th>Description</th></tr>
      <tr><td><code>-in</code></td>
              <td><code>in</code></td>
              <td>chaîne contenue dans une liste de mots</td></tr>
      <tr class="odd"><td><code>/regexp/</code></td>
              <td><code>m#regexp#</code></td>
              <td>Expression rationnelle (la seconde forme permet de spécifier
      	des délimiteurs autres que /)</td></tr>
      <tr><td><code>/regexp/i</code></td>
              <td><code>m#regexp#i</code></td>
              <td>Expression rationnelle insensible à la casse</td></tr>
      <tr class="odd"><td><code>$0 ... $9</code></td>
              <td />
              <td>Références arrières dans les expressions rationnelles</td></tr>
      </table>
      
          <h3><a name="rebackref" id="rebackref">Références arrières dans les expressions rationnelles</a></h3>
              
              <p>Les chaînes <code>$0</code> ... <code>$9</code> permettent de
      	référencer les groupes de capture en provenance d'expressions
      	rationnelles précédemment exécutées et mises en correspondance avec
      	succès. Elles ne peuvent normalement être utilisées que dans la
      	même expression que celle mise en correspondance, mais certains
      	modules permettent de les utiliser de manière spéciale.</p>
          
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="sslrequire" id="sslrequire">Comparaison avec SSLRequire</a></h2>
          
          <p>La syntaxe <em>ap_expr</em> consiste principalement en une
          surcouche de la syntaxe de la directive obsolète <code class="directive"><a href="./mod/mod_ssl.html#sslrequire">SSLRequire</a></code>. Vous pouvez consulter la
          liste de leur différences dans la documentation de la directive
          <code class="directive"><a href="./mod/mod_ssl.html#sslrequire">SSLRequire</a></code>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="compatibility" id="compatibility">Historique de version</a></h2>
          
          <p>La <a href="#functions">fonction</a> <code>req_novary</code> est
          disponible à partir de la version 2.4.4 du serveur HTTP Apache.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/expr.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/expr.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/expr.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/configuring.html.en��������������������������������������������������������0000644�0000000�0000050�00000042565�13412755316�017265� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Configuration Files - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Configuration Files</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./de/configuring.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/configuring.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/configuring.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/configuring.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/configuring.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/configuring.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      <p>This document describes the files used to configure Apache HTTP
      Server.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#main">Main Configuration Files</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#syntax">Syntax of the Configuration Files</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#modules">Modules</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#scope">Scope of Directives</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#htaccess">.htaccess Files</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="main" id="main">Main Configuration Files</a></h2>
          
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_mime.html">mod_mime</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#include">Include</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#typesconfig">TypesConfig</a></code></li></ul></td></tr></table>
      
          <p>Apache HTTP Server is configured by placing <a href="mod/directives.html">directives</a> in plain text
          configuration files. The main configuration file is usually called
          <code>httpd.conf</code>. The location of this file is set at
          compile-time, but may be overridden with the <code>-f</code>
          command line flag. In addition, other configuration files may be
          added using the <code class="directive"><a href="./mod/core.html#include">Include</a></code>
          directive, and wildcards can be used to include many configuration
          files. Any directive may be placed in any of these configuration
          files. Changes to the main configuration files are only
          recognized by httpd when it is started or restarted.</p>
      
          <p>The server also reads a file containing mime document types;
          the filename is set by the <code class="directive"><a href="./mod/mod_mime.html#typesconfig">TypesConfig</a></code> directive,
          and is <code>mime.types</code> by default.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="syntax" id="syntax">Syntax of the Configuration Files</a></h2>
          
      
          <p>httpd configuration files contain one directive per line.
          The backslash "\" may be used as the last character on a line
          to indicate that the directive continues onto the next line.
          There must be no other characters or white space between the
          backslash and the end of the line.</p>
      
          <p>Arguments to directives are separated by whitespace. If an 
          argument contains spaces, you must enclose that argument in quotes.</p>
      
          <p>Directives in the configuration files are case-insensitive,
          but arguments to directives are often case sensitive. Lines
          that begin with the hash character "#" are considered
          comments, and are ignored. Comments may <strong>not</strong> be
          included on the same line as a configuration directive. 
          White space occurring before a directive is ignored, so
          you may indent directives for clarity. Blank lines are also ignored.</p>
      
          <p>The values of variables defined with the <code class="directive"><a href="./mod/core.html#define">Define</a></code> of or shell environment variables can
          be used in configuration file lines using the syntax <code>${VAR}</code>.
          If "VAR" is the name of a valid variable, the value of that variable is
          substituted into that spot in the configuration file line, and processing
          continues as if that text were found directly in the configuration file.
          Variables defined with <code class="directive"><a href="./mod/core.html#define">Define</a></code> take
          precedence over shell environment variables.
          If the "VAR" variable is not found, the characters <code>${VAR}</code>
          are left unchanged, and a warning is logged.
          Variable names may not contain colon ":" characters, to avoid clashes with
          <code class="directive"><a href="./mod/mod_rewrite.html#rewritemap">RewriteMap</a></code>'s syntax.</p>
      
          <p>Only shell environment variables defined before the server is started
          can be used in expansions. Environment variables defined in the
          configuration file itself, for example with <code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code>, take effect too late to be used for
          expansions in the configuration file.</p>
      
          <p>The maximum length of a line in normal configuration files, after
          variable substitution and joining any continued lines, is approximately
          16 MiB. In <a href="configuring.html#htaccess">.htaccess files</a>, the
          maximum length is 8190 characters.</p>
      
          <p>You can check your configuration files for syntax errors
          without starting the server by using <code>apachectl
          configtest</code> or the <code>-t</code> command line
          option.</p>
      
          <p>You can use <code class="module"><a href="./mod/mod_info.html">mod_info</a></code>'s <code>-DDUMP_CONFIG</code> to
          dump the configuration with all included files and environment
          variables resolved and all comments and non-matching
          <code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code> and
          <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code> sections
          removed. However, the output does not reflect the merging or overriding
          that may happen for repeated directives.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="modules" id="modules">Modules</a></h2>
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_so.html">mod_so</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code></li></ul></td></tr></table>
      
          <p>httpd is a modular server. This implies that only the most
          basic functionality is included in the core server. Extended
          features are available through <a href="mod/">modules</a> which can be loaded
          into httpd. By default, a <a href="mod/module-dict.html#Status">base</a> set of modules is
          included in the server at compile-time. If the server is
          compiled to use <a href="dso.html">dynamically loaded</a>
          modules, then modules can be compiled separately and added at
          any time using the <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code>
          directive.
          Otherwise, httpd must be recompiled to add or remove modules.
          Configuration directives may be included conditional on a
          presence of a particular module by enclosing them in an <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code> block. However,
          <code class="directive">&lt;IfModule&gt;</code> blocks are not
          required, and in some cases may mask the fact that you're missing an
          important module.</p>
      
          <p>To see which modules are currently compiled into the server,
          you can use the <code>-l</code> command line option. You can also
          see what modules are loaded dynamically using the <code>-M</code>
          command line option.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="scope" id="scope">Scope of Directives</a></h2>
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
          <p>Directives placed in the main configuration files apply to
          the entire server. If you wish to change the configuration for
          only a part of the server, you can scope your directives by
          placing them in <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>, <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>, and <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code>
          sections. These sections limit the application of the
          directives which they enclose to particular filesystem
          locations or URLs. They can also be nested, allowing for very
          fine grained configuration.</p>
      
          <p>httpd has the capability to serve many different websites
          simultaneously. This is called <a href="vhosts/">Virtual
          Hosting</a>. Directives can also be scoped by placing them
          inside <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          sections, so that they will only apply to requests for a
          particular website.</p>
      
          <p>Although most directives can be placed in any of these
          sections, some directives do not make sense in some contexts.
          For example, directives controlling process creation can only
          be placed in the main server context. To find which directives
          can be placed in which sections, check the <a href="mod/directive-dict.html#Context">Context</a> of the
          directive. For further information, we provide details on <a href="sections.html">How Directory, Location and Files sections
          work</a>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="htaccess" id="htaccess">.htaccess Files</a></h2>
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#accessfilename">AccessFileName</a></code></li><li><code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code></li></ul></td></tr></table>
      
          <p>httpd allows for decentralized management of configuration
          via special files placed inside the web tree. The special files
          are usually called <code>.htaccess</code>, but any name can be
          specified in the <code class="directive"><a href="./mod/core.html#accessfilename">AccessFileName</a></code>
          directive. Directives placed in <code>.htaccess</code> files
          apply to the directory where you place the file, and all
          sub-directories. The <code>.htaccess</code> files follow the
          same syntax as the main configuration files. Since
          <code>.htaccess</code> files are read on every request, changes
          made in these files take immediate effect.</p>
      
          <p>To find which directives can be placed in
          <code>.htaccess</code> files, check the <a href="mod/directive-dict.html#Context">Context</a> of the
          directive. The server administrator further controls what
          directives may be placed in <code>.htaccess</code> files by
          configuring the <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code>
          directive in the main configuration files.</p>
      
          <p>For more information on <code>.htaccess</code> files, see
          the <a href="howto/htaccess.html">.htaccess tutorial</a>.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./de/configuring.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/configuring.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/configuring.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/configuring.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/configuring.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/configuring.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/configuring.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_0.html.en���������������������������������������������������0000644�0000000�0000050�00000037406�13412755316�020100� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Overview of new features in Apache HTTP Server 2.0 - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Overview of new features in Apache HTTP Server 2.0</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./de/new_features_2_0.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/new_features_2_0.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_0.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/new_features_2_0.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/new_features_2_0.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_0.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./ru/new_features_2_0.html" hreflang="ru" rel="alternate" title="Russian">&nbsp;ru&nbsp;</a> |
      <a href="./tr/new_features_2_0.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
        <p>This document describes some of the major changes between the
           1.3 and 2.0 versions of the Apache HTTP Server.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#core">Core Enhancements</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#module">Module Enhancements</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="upgrading.html">Upgrading to 2.0 from 1.3</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="core" id="core">Core Enhancements</a></h2>
          
      
          <dl>
            <dt>Unix Threading</dt>
      
            <dd>On Unix systems with POSIX threads support, Apache httpd can
            now run in a hybrid multiprocess, multithreaded mode. This
            improves scalability for many, but not all configurations.</dd>
      
            <dt>New Build System</dt>
      
            <dd>The build system has been rewritten from scratch to be
            based on <code>autoconf</code> and <code>libtool</code>.
            This makes Apache httpd's configuration system more similar to
            that of other packages.</dd>
      
            <dt>Multiprotocol Support</dt>
      
            <dd>Apache HTTP Server now has some of the infrastructure in place to
            support serving multiple protocols. <code class="module"><a href="./mod/mod_echo.html">mod_echo</a></code> has
            been written as an example.</dd>
      
            <dt>Better support for non-Unix
            platforms</dt>
      
            <dd>Apache HTTP Server 2.0 is faster and more stable on non-Unix
            platforms such as BeOS, OS/2, and Windows. With the
            introduction of platform-specific <a href="mpm.html">multi-processing modules</a> (MPMs) and the
            Apache Portable Runtime (APR), these platforms are now
            implemented in their native API, avoiding the often buggy and
            poorly performing POSIX-emulation layers.</dd>
      
            <dt>New Apache httpd API</dt>
      
            <dd>The API for modules has changed significantly for 2.0.
            Many of the module-ordering/-priority problems from 1.3 should
            be gone. 2.0 does much of this automatically, and module ordering
            is now done per-hook to allow more flexibility. Also, new calls
            have been added that provide additional module capabilities
            without patching the core Apache HTTP Server.</dd>
      
            <dt>IPv6 Support</dt>
      
            <dd>On systems where IPv6 is supported by the underlying
            Apache Portable Runtime library, Apache httpd gets IPv6 listening
            sockets by default. Additionally, the <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>, <code class="directive"><a href="./mod/core.html#namevirtualhost">NameVirtualHost</a></code>, and <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code> directives support
            IPv6 numeric address strings (e.g., "<code>Listen
            [2001:db8::1]:8080</code>").</dd>
      
            <dt>Filtering</dt>
      
            <dd>Apache httpd modules may now be written as filters which act on
            the stream of content as it is delivered to or from the
            server. This allows, for example, the output of CGI scripts to
            be parsed for Server Side Include directives using the
            <code>INCLUDES</code> filter in <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>. The
            module <code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code> allows external programs to
            act as filters in much the same way that CGI programs can act as
            handlers.</dd>
      
            <dt>Multilanguage Error Responses</dt>
      
            <dd>Error response messages to the browser are now provided in
            several languages, using SSI documents. They may be customized
            by the administrator to achieve a consistent look and feel.</dd>
      
            <dt>Simplified configuration</dt>
      
            <dd>Many confusing directives have been simplified. The often
            confusing <code>Port</code> and <code>BindAddress</code> directives
            are gone; only the <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
            directive is used for IP address binding; the <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code> directive specifies the
            server name and port number only for redirection and vhost
            recognition.</dd>
      
            <dt>Native Windows NT Unicode Support</dt>
      
            <dd>Apache httpd 2.0 on Windows NT now uses utf-8 for all filename
            encodings. These directly translate to the underlying Unicode
            file system, providing multilanguage support for all Windows
            NT-based installations, including Windows 2000 and Windows XP.
            <em>This support does not extend to Windows 95, 98 or ME, which
            continue to use the machine's local codepage for filesystem
            access.</em></dd>
      
            <dt>Regular Expression Library Updated</dt>
      
            <dd>Apache httpd 2.0 includes the <a href="http://www.pcre.org/">Perl
            Compatible Regular Expression Library</a> (PCRE).  All regular
            expression evaluation now uses the more powerful Perl 5
            syntax.</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="module" id="module">Module Enhancements</a></h2>
          
      
          <dl>
            <dt><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></dt>
      
            <dd>New module in Apache httpd 2.0. This module is an interface
            to the SSL/TLS encryption protocols provided by
            OpenSSL.</dd>
      
            <dt><code class="module"><a href="./mod/mod_dav.html">mod_dav</a></code></dt>
      
            <dd>New module in Apache httpd 2.0. This module implements the HTTP
            Distributed Authoring and Versioning (DAV) specification for
            posting and maintaining web content.</dd>
      
            <dt><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code></dt>
      
            <dd>New module in Apache httpd 2.0.  This module allows supporting
            browsers to request that content be compressed before delivery,
            saving network bandwidth.</dd>
      
            <dt><code class="module">mod_auth_ldap</code></dt>
      
            <dd>New module in Apache httpd 2.0.41.  This module allows an LDAP
            database to be used to store credentials for HTTP Basic
            Authentication.  A companion module, <code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code>
            provides connection pooling and results caching.</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_digest.html">mod_auth_digest</a></code></dt>
      
            <dd>Includes additional support for session caching across
            processes using shared memory.</dd>
      
            <dt><code class="module"><a href="./mod/mod_charset_lite.html">mod_charset_lite</a></code></dt>
      
            <dd>New module in Apache httpd 2.0. This experimental module allows
            for character set translation or recoding.</dd>
      
            <dt><code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code></dt>
      
            <dd>New module in Apache httpd 2.0. This module includes the
            functionality of <code>mod_mmap_static</code> in Apache HTTP
            Server version 1.3, plus adds further caching abilities.</dd>
      
            <dt><code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code></dt>
      
            <dd>This module is much more flexible in Apache httpd 2.0. It can now
            modify request headers used by <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>, and
            it can conditionally set response headers.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dt>
      
            <dd>The proxy module has been completely rewritten to take
            advantage of the new filter infrastructure and to implement a
            more reliable, HTTP/1.1 compliant proxy. In addition, new
            <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>
            configuration sections provide more readable (and internally
            faster) control of proxied sites; overloaded <code>&lt;Directory
            "proxy:..."&gt;</code> configuration are not supported. The module
            is now divided into specific protocol support modules including
            <code>proxy_connect</code>, <code>proxy_ftp</code> and
            <code>proxy_http</code>.</dd>
      
            <dt><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></dt>
      
            <dd>A new <code class="directive"><a href="./mod/mod_negotiation.html#forcelanguagepriority">ForceLanguagePriority</a></code> directive can be used to assure that
            the client receives a single document in all cases, rather than
            NOT ACCEPTABLE or MULTIPLE CHOICES responses. In addition, the
            negotiation and MultiViews algorithms have been cleaned up to
            provide more consistent results and a new form of type map that
            can include document content is provided.</dd>
      
            <dt><code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code></dt>
      
            <dd>Autoindex'ed directory listings can now be configured to
            use HTML tables for cleaner formatting, and allow finer-grained
            control of sorting, including version-sorting, and wildcard
            filtering of the directory listing.</dd>
      
            <dt><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></dt>
      
            <dd>New directives allow the default start and end tags for SSI elements
            to be changed and allow for error and time format configuration
            to take place in the main configuration file rather than in the
            SSI document. Results from regular expression parsing and grouping
            (now based on Perl's regular expression syntax) can be retrieved
            using <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>'s variables <code>$0</code>
            .. <code>$9</code>.</dd>
      
            <dt><code class="module">mod_auth_dbm</code></dt>
      
            <dd>Now supports multiple types of DBM-like databases using the
            <code class="directive">AuthDBMType</code> directive.</dd>
      
          </dl>
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./de/new_features_2_0.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/new_features_2_0.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_0.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/new_features_2_0.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/new_features_2_0.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_0.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./ru/new_features_2_0.html" hreflang="ru" rel="alternate" title="Russian">&nbsp;ru&nbsp;</a> |
      <a href="./tr/new_features_2_0.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/new_features_2_0.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/upgrading.html�������������������������������������������������������������0000644�0000000�0000050�00000000326�13362070302�016304� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: upgrading.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: upgrading.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/sitemap.html.zh-cn.utf8����������������������������������������������������0000644�0000000�0000050�00000057546�13520523022�017707� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="zh-cn" xml:lang="zh-cn"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>站点导航 - Apache HTTP æœåС噍 版本 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page">
      <div id="page-header">
      <p class="menu"><a href="./mod/">模å—</a> | <a href="./mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="./glossary.html">术语</a> | <a href="./sitemap.html">网站导航</a></p>
      <p class="apache">Apache HTTP æœåŠ¡å™¨ç‰ˆæœ¬ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP æœåС噍</a> &gt; <a href="http://httpd.apache.org/docs/">文档</a> &gt; <a href="./">版本 2.4</a></div>
      <div id="page-content"><div id="preamble"><h1>站点导航</h1>
      <div class="toplang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="./de/sitemap.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/sitemap.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/sitemap.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/sitemap.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sitemap.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sitemap.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sitemap.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/sitemap.html" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">此翻译å¯èƒ½è¿‡æœŸã€‚è¦äº†è§£æœ€è¿‘的更改,请阅读英文版。</div>
      
      <p>本页列出了
      <a href="./">Apache HTTP æœåС噍 2.4
      的全部文档</a>。</p>
      </div>
      <div id="quickview"><ul id="toc">
      <li><img alt="" src="./images/down.gif" /> <a href="#release">å‘行说明</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#using">使用 Apache HTTP æœåС噍</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#vhosts">Apache 虚拟主机文档</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#rewrite">URL 改写指å—</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#ssl">Apache SSL/TLS 加密</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#howto">指å—与教程</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#platform">å¹³å°ç›¸å…³è¯´æ˜Ž</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programs">Apache HTTP æœåŠ¡å™¨ä¸Žæ”¯æŒç¨‹åº</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#misc">Apache æ‚项文档</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#modules">Apache 模å—</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#developer">å¼€å‘者文档</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#index">术语与索引</a></li>
      </ul>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="release" id="release">å‘行说明</a></h2>
      <ul><li><a href="upgrading.html">从 2.2 å‡çº§åˆ° 2.4</a></li>
      <li><a href="new_features_2_4.html">Apache 2.3/2.4 的新特性</a></li>
      <li><a href="new_features_2_2.html">Apache 2.1/2.2 的新特性</a></li>
      <li><a href="new_features_2_0.html">Apache 2.0 的新特性</a></li>
      <li><a href="license.html">Apache 许å¯è¯</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="using" id="using">使用 Apache HTTP æœåС噍</a></h2>
      <ul><li><a href="install.html">编译与安装 Apache</a></li>
      <li><a href="invoking.html">å¯åЍ Apache</a></li>
      <li><a href="stopping.html">åœæ­¢ä¸Žé‡å¯ Apache</a></li>
      <li><a href="configuring.html">é…置文件</a></li>
      <li><a href="sections.html">é…置片段</a></li>
      <li><a href="caching.html">缓存指å—</a></li>
      <li><a href="server-wide.html">æœåС噍免局é…ç½®</a></li>
      <li><a href="logs.html">日志文件</a></li>
      <li><a href="urlmapping.html">从 URL 映射到文件系统</a></li>
      <li><a href="misc/security_tips.html">安全技巧</a></li>
      <li><a href="dso.html">动æ€å…±äº«å¯¹è±¡(DSO)</a></li>
      <li><a href="content-negotiation.html">内容å商</a></li>
      <li><a href="custom-error.html">定制错误å“应</a></li>
      <li><a href="bind.html">绑定指定地å€ä¸Žç«¯å£</a></li>
      <li><a href="mpm.html">å¤šå¤„ç†æ¨¡å—(MPM)</a></li>
      <li><a href="env.html">环境å˜é‡</a></li>
      <li><a href="handler.html">Apache 的处ç†å™¨</a></li>
      <li><a href="filter.html">过滤器</a></li>
      <li><a href="suexec.html">执行 CGI å‰çš„用户切æ¢(suEXEC)</a></li>
      <li><a href="misc/perf-tuning.html">性能调è°</a></li>
      <li><a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="vhosts" id="vhosts">Apache 虚拟主机文档</a></h2>
      <ul><li class="separate"><a href="vhosts/">概述</a></li>
      <li><a href="vhosts/name-based.html">基于å称的虚拟主机</a></li>
      <li><a href="vhosts/ip-based.html">基于 IP 的虚拟主机</a></li>
      <li><a href="vhosts/mass.html">动æ€é…置的大规模虚拟主机</a></li>
      <li><a href="vhosts/examples.html">虚拟主机样例</a></li>
      <li><a href="vhosts/details.html">虚拟主机匹é…的深入讨论</a></li>
      <li><a href="vhosts/fd-limits.html">æ–‡ä»¶å¥æŸ„é™åˆ¶</a></li>
      <li><a href="dns-caveats.html">Apache 的 DNS 相关问题</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="rewrite" id="rewrite">URL 改写指å—</a></h2>
      <ul><li class="separate"><a href="rewrite/">概述</a></li>
      <li><a href="mod/mod_rewrite.html">mod_rewrite å‚考文档</a></li>
      <li><a href="rewrite/intro.html">简介</a></li>
      <li><a href="rewrite/flags.html">标志</a></li>
      <li><a href="rewrite/tech.html">技术细节</a></li>
      <li><a href="rewrite/remapping.html">釿–°æ˜ å°„ URL</a></li>
      <li><a href="rewrite/access.html">访问控制</a></li>
      <li><a href="rewrite/advanced.html">高级技术</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="ssl" id="ssl">Apache SSL/TLS 加密</a></h2>
      <ul><li class="separate"><a href="ssl/">概述</a></li>
      <li><a href="ssl/ssl_intro.html">SSL/TLS 加密: 简介</a></li>
      <li><a href="ssl/ssl_compat.html">SSL/TLS 加密: 兼容性</a></li>
      <li><a href="ssl/ssl_howto.html">SSL/TLS 加密: å¸¸è§æ“作</a></li>
      <li><a href="ssl/ssl_faq.html">SSL/TLS 加密: 常è§é—®é¢˜</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="howto" id="howto">指å—与教程</a></h2>
      <ul><li class="separate"><a href="howto/">概述</a></li>
      <li><a href="howto/auth.html">认è¯ï¼ŒæŽˆæƒä¸Žè®¿é—®æŽ§åˆ¶</a></li>
      <li><a href="howto/cgi.html">CGI 与动æ€å†…容</a></li>
      <li><a href="howto/ssi.html">æœåŠ¡å™¨ç«¯æ’å…¥</a></li>
      <li><a href="howto/htaccess.html">.htaccess 文件</a></li>
      <li><a href="howto/public_html.html">用户ç§äººç½‘站目录(public_html)</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="platform" id="platform">å¹³å°ç›¸å…³è¯´æ˜Ž</a></h2>
      <ul><li class="separate"><a href="platform/">概述</a></li>
      <li><a href="platform/windows.html">在 Microsoft Windows 中使用 Apache</a></li>
      <li><a href="platform/win_compiling.html">为 Microsoft Windows 编译 Apache</a></li>
      <li><a href="platform/netware.html">在 Novell NetWare 中使用 Apache</a></li>
      <li><a href="platform/perf-hp.html">在 HPUX 中è¿è¡Œé«˜æ€§èƒ½ web æœåС噍</a></li>
      <li><a href="platform/ebcdic.html">Apache 与 EBCDIC 系统</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="programs" id="programs">Apache HTTP æœåŠ¡å™¨ä¸Žæ”¯æŒç¨‹åº</a></h2>
      <ul><li class="separate"><a href="programs/">概述</a></li>
      <li><a href="programs/httpd.html">手册: httpd</a></li>
      <li><a href="programs/ab.html">手册: ab</a></li>
      <li><a href="programs/apachectl.html">手册: apachectl</a></li>
      <li><a href="programs/apxs.html">手册: apxs</a></li>
      <li><a href="programs/configure.html">手册: configure</a></li>
      <li><a href="programs/dbmmanage.html">手册: dbmmanage</a></li>
      <li><a href="programs/htcacheclean.html">手册: htcacheclean</a></li>
      <li><a href="programs/htdbm.html">手册: htdbm</a></li>
      <li><a href="programs/htdigest.html">手册: htdigest</a></li>
      <li><a href="programs/htpasswd.html">手册: htpasswd</a></li>
      <li><a href="programs/logresolve.html">手册: logresolve</a></li>
      <li><a href="programs/rotatelogs.html">手册: rotatelogs</a></li>
      <li><a href="programs/suexec.html">手册: suexec</a></li>
      <li><a href="programs/other.html">其它程åº</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="misc" id="misc">Apache æ‚项文档</a></h2>
      <ul><li class="separate"><a href="misc/">概述</a></li>
      <li><a href="misc/relevant_standards.html">相关标准</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="modules" id="modules">Apache 模å—</a></h2>
      <ul><li><a href="mod/module-dict.html">æè¿°æ¨¡å—的术语</a></li>
      <li><a href="mod/directive-dict.html">æè¿°æŒ‡ä»¤çš„æœ¯è¯­</a></li>
      </ul><ul><li><a href="mod/core.html">Apache 核心特性</a></li>
      <li><a href="mod/mpm_common.html">Apache MPM 通用指令</a></li>
      <li><a href="mod/event.html">Apache MPM event</a></li>
      <li><a href="mod/mpm_netware.html">Apache MPM netware</a></li>
      <li><a href="mod/mpmt_os2.html">Apache MPM os2</a></li>
      <li><a href="mod/prefork.html">Apache MPM prefork</a></li>
      <li><a href="mod/mpm_winnt.html">Apache MPM winnt</a></li>
      <li><a href="mod/worker.html">Apache MPM worker</a></li>
      </ul><ul><li><a href="mod/mod_access_compat.html">Apache æ¨¡å— mod_access_compat</a></li>
      <li><a href="mod/mod_actions.html">Apache æ¨¡å— mod_actions</a></li>
      <li><a href="mod/mod_alias.html">Apache æ¨¡å— mod_alias</a></li>
      <li><a href="mod/mod_allowmethods.html">Apache æ¨¡å— mod_allowmethods</a></li>
      <li><a href="mod/mod_asis.html">Apache æ¨¡å— mod_asis</a></li>
      <li><a href="mod/mod_auth_basic.html">Apache æ¨¡å— mod_auth_basic</a></li>
      <li><a href="mod/mod_auth_digest.html">Apache æ¨¡å— mod_auth_digest</a></li>
      <li><a href="mod/mod_auth_form.html">Apache æ¨¡å— mod_auth_form</a></li>
      <li><a href="mod/mod_authn_anon.html">Apache æ¨¡å— mod_authn_anon</a></li>
      <li><a href="mod/mod_authn_core.html">Apache æ¨¡å— mod_authn_core</a></li>
      <li><a href="mod/mod_authn_dbd.html">Apache æ¨¡å— mod_authn_dbd</a></li>
      <li><a href="mod/mod_authn_dbm.html">Apache æ¨¡å— mod_authn_dbm</a></li>
      <li><a href="mod/mod_authn_file.html">Apache æ¨¡å— mod_authn_file</a></li>
      <li><a href="mod/mod_authn_socache.html">Apache æ¨¡å— mod_authn_socache</a></li>
      <li><a href="mod/mod_authnz_fcgi.html">Apache æ¨¡å— mod_authnz_fcgi</a></li>
      <li><a href="mod/mod_authnz_ldap.html">Apache æ¨¡å— mod_authnz_ldap</a></li>
      <li><a href="mod/mod_authz_core.html">Apache æ¨¡å— mod_authz_core</a></li>
      <li><a href="mod/mod_authz_dbd.html">Apache æ¨¡å— mod_authz_dbd</a></li>
      <li><a href="mod/mod_authz_dbm.html">Apache æ¨¡å— mod_authz_dbm</a></li>
      <li><a href="mod/mod_authz_groupfile.html">Apache æ¨¡å— mod_authz_groupfile</a></li>
      <li><a href="mod/mod_authz_host.html">Apache æ¨¡å— mod_authz_host</a></li>
      <li><a href="mod/mod_authz_owner.html">Apache æ¨¡å— mod_authz_owner</a></li>
      <li><a href="mod/mod_authz_user.html">Apache æ¨¡å— mod_authz_user</a></li>
      <li><a href="mod/mod_autoindex.html">Apache æ¨¡å— mod_autoindex</a></li>
      <li><a href="mod/mod_brotli.html">Apache æ¨¡å— mod_brotli</a></li>
      <li><a href="mod/mod_buffer.html">Apache æ¨¡å— mod_buffer</a></li>
      <li><a href="mod/mod_cache.html">Apache æ¨¡å— mod_cache</a></li>
      <li><a href="mod/mod_cache_disk.html">Apache æ¨¡å— mod_cache_disk</a></li>
      <li><a href="mod/mod_cache_socache.html">Apache æ¨¡å— mod_cache_socache</a></li>
      <li><a href="mod/mod_cern_meta.html">Apache æ¨¡å— mod_cern_meta</a></li>
      <li><a href="mod/mod_cgi.html">Apache æ¨¡å— mod_cgi</a></li>
      <li><a href="mod/mod_cgid.html">Apache æ¨¡å— mod_cgid</a></li>
      <li><a href="mod/mod_charset_lite.html">Apache æ¨¡å— mod_charset_lite</a></li>
      <li><a href="mod/mod_data.html">Apache æ¨¡å— mod_data</a></li>
      <li><a href="mod/mod_dav.html">Apache æ¨¡å— mod_dav</a></li>
      <li><a href="mod/mod_dav_fs.html">Apache æ¨¡å— mod_dav_fs</a></li>
      <li><a href="mod/mod_dav_lock.html">Apache æ¨¡å— mod_dav_lock</a></li>
      <li><a href="mod/mod_dbd.html">Apache æ¨¡å— mod_dbd</a></li>
      <li><a href="mod/mod_deflate.html">Apache æ¨¡å— mod_deflate</a></li>
      <li><a href="mod/mod_dialup.html">Apache æ¨¡å— mod_dialup</a></li>
      <li><a href="mod/mod_dir.html">Apache æ¨¡å— mod_dir</a></li>
      <li><a href="mod/mod_dumpio.html">Apache æ¨¡å— mod_dumpio</a></li>
      <li><a href="mod/mod_echo.html">Apache æ¨¡å— mod_echo</a></li>
      <li><a href="mod/mod_env.html">Apache æ¨¡å— mod_env</a></li>
      <li><a href="mod/mod_example_hooks.html">Apache æ¨¡å— mod_example_hooks</a></li>
      <li><a href="mod/mod_expires.html">Apache æ¨¡å— mod_expires</a></li>
      <li><a href="mod/mod_ext_filter.html">Apache æ¨¡å— mod_ext_filter</a></li>
      <li><a href="mod/mod_file_cache.html">Apache æ¨¡å— mod_file_cache</a></li>
      <li><a href="mod/mod_filter.html">Apache æ¨¡å— mod_filter</a></li>
      <li><a href="mod/mod_headers.html">Apache æ¨¡å— mod_headers</a></li>
      <li><a href="mod/mod_heartbeat.html">Apache æ¨¡å— mod_heartbeat</a></li>
      <li><a href="mod/mod_heartmonitor.html">Apache æ¨¡å— mod_heartmonitor</a></li>
      <li><a href="mod/mod_http2.html">Apache æ¨¡å— mod_http2</a></li>
      <li><a href="mod/mod_ident.html">Apache æ¨¡å— mod_ident</a></li>
      <li><a href="mod/mod_imagemap.html">Apache æ¨¡å— mod_imagemap</a></li>
      <li><a href="mod/mod_include.html">Apache æ¨¡å— mod_include</a></li>
      <li><a href="mod/mod_info.html">Apache æ¨¡å— mod_info</a></li>
      <li><a href="mod/mod_isapi.html">Apache æ¨¡å— mod_isapi</a></li>
      <li><a href="mod/mod_lbmethod_bybusyness.html">Apache æ¨¡å— mod_lbmethod_bybusyness</a></li>
      <li><a href="mod/mod_lbmethod_byrequests.html">Apache æ¨¡å— mod_lbmethod_byrequests</a></li>
      <li><a href="mod/mod_lbmethod_bytraffic.html">Apache æ¨¡å— mod_lbmethod_bytraffic</a></li>
      <li><a href="mod/mod_lbmethod_heartbeat.html">Apache æ¨¡å— mod_lbmethod_heartbeat</a></li>
      <li><a href="mod/mod_ldap.html">Apache æ¨¡å— mod_ldap</a></li>
      <li><a href="mod/mod_log_config.html">Apache æ¨¡å— mod_log_config</a></li>
      <li><a href="mod/mod_log_debug.html">Apache æ¨¡å— mod_log_debug</a></li>
      <li><a href="mod/mod_log_forensic.html">Apache æ¨¡å— mod_log_forensic</a></li>
      <li><a href="mod/mod_logio.html">Apache æ¨¡å— mod_logio</a></li>
      <li><a href="mod/mod_lua.html">Apache æ¨¡å— mod_lua</a></li>
      <li><a href="mod/mod_macro.html">Apache æ¨¡å— mod_macro</a></li>
      <li><a href="mod/mod_md.html">Apache æ¨¡å— mod_md</a></li>
      <li><a href="mod/mod_mime.html">Apache æ¨¡å— mod_mime</a></li>
      <li><a href="mod/mod_mime_magic.html">Apache æ¨¡å— mod_mime_magic</a></li>
      <li><a href="mod/mod_negotiation.html">Apache æ¨¡å— mod_negotiation</a></li>
      <li><a href="mod/mod_nw_ssl.html">Apache æ¨¡å— mod_nw_ssl</a></li>
      <li><a href="mod/mod_privileges.html">Apache æ¨¡å— mod_privileges</a></li>
      <li><a href="mod/mod_proxy.html">Apache æ¨¡å— mod_proxy</a></li>
      <li><a href="mod/mod_proxy_ajp.html">Apache æ¨¡å— mod_proxy_ajp</a></li>
      <li><a href="mod/mod_proxy_balancer.html">Apache æ¨¡å— mod_proxy_balancer</a></li>
      <li><a href="mod/mod_proxy_connect.html">Apache æ¨¡å— mod_proxy_connect</a></li>
      <li><a href="mod/mod_proxy_express.html">Apache æ¨¡å— mod_proxy_express</a></li>
      <li><a href="mod/mod_proxy_fcgi.html">Apache æ¨¡å— mod_proxy_fcgi</a></li>
      <li><a href="mod/mod_proxy_fdpass.html">Apache æ¨¡å— mod_proxy_fdpass</a></li>
      <li><a href="mod/mod_proxy_ftp.html">Apache æ¨¡å— mod_proxy_ftp</a></li>
      <li><a href="mod/mod_proxy_hcheck.html">Apache æ¨¡å— mod_proxy_hcheck</a></li>
      <li><a href="mod/mod_proxy_html.html">Apache æ¨¡å— mod_proxy_html</a></li>
      <li><a href="mod/mod_proxy_http.html">Apache æ¨¡å— mod_proxy_http</a></li>
      <li><a href="mod/mod_proxy_http2.html">Apache æ¨¡å— mod_proxy_http2</a></li>
      <li><a href="mod/mod_proxy_scgi.html">Apache æ¨¡å— mod_proxy_scgi</a></li>
      <li><a href="mod/mod_proxy_uwsgi.html">Apache æ¨¡å— mod_proxy_uwsgi</a></li>
      <li><a href="mod/mod_proxy_wstunnel.html">Apache æ¨¡å— mod_proxy_wstunnel</a></li>
      <li><a href="mod/mod_ratelimit.html">Apache æ¨¡å— mod_ratelimit</a></li>
      <li><a href="mod/mod_reflector.html">Apache æ¨¡å— mod_reflector</a></li>
      <li><a href="mod/mod_remoteip.html">Apache æ¨¡å— mod_remoteip</a></li>
      <li><a href="mod/mod_reqtimeout.html">Apache æ¨¡å— mod_reqtimeout</a></li>
      <li><a href="mod/mod_request.html">Apache æ¨¡å— mod_request</a></li>
      <li><a href="mod/mod_rewrite.html">Apache æ¨¡å— mod_rewrite</a></li>
      <li><a href="mod/mod_sed.html">Apache æ¨¡å— mod_sed</a></li>
      <li><a href="mod/mod_session.html">Apache æ¨¡å— mod_session</a></li>
      <li><a href="mod/mod_session_cookie.html">Apache æ¨¡å— mod_session_cookie</a></li>
      <li><a href="mod/mod_session_crypto.html">Apache æ¨¡å— mod_session_crypto</a></li>
      <li><a href="mod/mod_session_dbd.html">Apache æ¨¡å— mod_session_dbd</a></li>
      <li><a href="mod/mod_setenvif.html">Apache æ¨¡å— mod_setenvif</a></li>
      <li><a href="mod/mod_slotmem_plain.html">Apache æ¨¡å— mod_slotmem_plain</a></li>
      <li><a href="mod/mod_slotmem_shm.html">Apache æ¨¡å— mod_slotmem_shm</a></li>
      <li><a href="mod/mod_so.html">Apache æ¨¡å— mod_so</a></li>
      <li><a href="mod/mod_socache_dbm.html">Apache æ¨¡å— mod_socache_dbm</a></li>
      <li><a href="mod/mod_socache_dc.html">Apache æ¨¡å— mod_socache_dc</a></li>
      <li><a href="mod/mod_socache_memcache.html">Apache æ¨¡å— mod_socache_memcache</a></li>
      <li><a href="mod/mod_socache_redis.html">Apache æ¨¡å— mod_socache_redis</a></li>
      <li><a href="mod/mod_socache_shmcb.html">Apache æ¨¡å— mod_socache_shmcb</a></li>
      <li><a href="mod/mod_speling.html">Apache æ¨¡å— mod_speling</a></li>
      <li><a href="mod/mod_ssl.html">Apache æ¨¡å— mod_ssl</a></li>
      <li><a href="mod/mod_status.html">Apache æ¨¡å— mod_status</a></li>
      <li><a href="mod/mod_substitute.html">Apache æ¨¡å— mod_substitute</a></li>
      <li><a href="mod/mod_suexec.html">Apache æ¨¡å— mod_suexec</a></li>
      <li><a href="mod/mod_unique_id.html">Apache æ¨¡å— mod_unique_id</a></li>
      <li><a href="mod/mod_unixd.html">Apache æ¨¡å— mod_unixd</a></li>
      <li><a href="mod/mod_userdir.html">Apache æ¨¡å— mod_userdir</a></li>
      <li><a href="mod/mod_usertrack.html">Apache æ¨¡å— mod_usertrack</a></li>
      <li><a href="mod/mod_version.html">Apache æ¨¡å— mod_version</a></li>
      <li><a href="mod/mod_vhost_alias.html">Apache æ¨¡å— mod_vhost_alias</a></li>
      <li><a href="mod/mod_watchdog.html">Apache æ¨¡å— mod_watchdog</a></li>
      <li><a href="mod/mod_xml2enc.html">Apache æ¨¡å— mod_xml2enc</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="developer" id="developer">å¼€å‘者文档</a></h2>
      <ul><li class="separate"><a href="developer/">概述</a></li>
      <li><a href="developer/API.html">Apache API 说明</a></li>
      <li><a href="developer/debugging.html">在 APR 中调试内存分é…</a></li>
      <li><a href="developer/documenting.html">Apache 2.x 文档</a></li>
      <li><a href="developer/hooks.html">Apache 2.x é’©å­å‡½æ•°</a></li>
      <li><a href="developer/modules.html">将模å—从 Apache 1.3 ç§»æ¤åˆ° Apache 2.x</a></li>
      <li><a href="developer/request.html">Apache 2.x 中的请求处ç†</a></li>
      <li><a href="developer/filters.html">Apache 2.x 中的过滤器</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="index" id="index">术语与索引</a></h2>
      <ul><li><a href="glossary.html">术语</a></li>
      <li><a href="mod/">模å—索引</a></li>
      <li><a href="mod/directives.html">指令索引</a></li>
      <li><a href="mod/quickreference.html">指令快速å‚考</a></li>
      </ul>
      </div></div>
      <div class="bottomlang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="./de/sitemap.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/sitemap.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/sitemap.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/sitemap.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sitemap.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sitemap.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sitemap.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/sitemap.html" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">评论</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/sitemap.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />基于 <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> 许å¯è¯.</p>
      <p class="menu"><a href="./mod/">模å—</a> | <a href="./mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="./glossary.html">术语</a> | <a href="./sitemap.html">网站导航</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/urlmapping.html.fr.utf8����������������������������������������������������0000644�0000000�0000050�00000070622�13412755316�020016� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title> Mise en correspondance des URLs avec le système de fichiers - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1> Mise en correspondance des URLs avec le système de fichiers</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/urlmapping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/urlmapping.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/urlmapping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/urlmapping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/urlmapping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Ce document explique comment le serveur HTTP Apache utilise l'URL contenue dans une
          requête pour déterminer le noeud du système de fichier à partir duquel le
          fichier devra être servi.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#related">Modules et directives concernés</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#documentroot">Racine des documents (DocumentRoot)</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#outside">Fichiers situés en dehors de
      l'arborescence DocumentRoot</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#user">Répertoires des utilisateurs</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#redirect">Redirection d'URL</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#proxy">Mandataire inverse (Reverse Proxy)</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#rewrite">Moteur de réécriture</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#notfound">Fichier non trouvé (File Not Found)</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#other">Autres modules de mise en correspondance des
      URLs</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Modules et directives concernés</a></h2>
      
      <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_actions.html">mod_actions</a></code></li><li><code class="module"><a href="./mod/mod_alias.html">mod_alias</a></code></li><li><code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code></li><li><code class="module"><a href="./mod/mod_dir.html">mod_dir</a></code></li><li><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code></li><li><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></li><li><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li><li><code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code></li><li><code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code></li><li><code class="module"><a href="./mod/mod_vhost_alias.html">mod_vhost_alias</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_alias.html#alias">Alias</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code></li><li><code class="directive"><a href="./mod/mod_speling.html#checkspelling">CheckSpelling</a></code></li><li><code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code></li><li><code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code></li><li><code class="directive"><a href="./mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreverse">ProxyPassReverse</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiedomain">ProxyPassReverseCookieDomain</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiepath">ProxyPassReverseCookiePath</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#redirect">Redirect</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#redirectmatch">RedirectMatch</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#scriptalias">ScriptAlias</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#scriptaliasmatch">ScriptAliasMatch</a></code></li><li><code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code></li></ul></td></tr></table>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="documentroot" id="documentroot">Racine des documents (DocumentRoot)</a></h2>
      
          <p>La méthode par défaut de httpd pour déterminer quel fichier servir pour
          une requête donnée, consiste à extraire le chemin du fichier de la requête
          (la partie de l'URL qui suit le nom d'hôte et le port), puis de l'ajouter
          à la fin de la valeur de la directive
          <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> définie dans vos fichiers
          de configuration.
          Ainsi, les fichiers et répertoires
          situés en dessous de <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>
          constituent l'arborescence de base des documents qui seront visibles
          depuis le web.</p>
      
          <p>Par exemple, si la directive
          <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> contient
          <code>/var/www/html</code>, une requête pour
          <code>http://www.example.com/fish/guppies.html</code> retournera le
          fichier <code>/var/www/html/fish/guppies.html</code> au client.</p>
      
          <p>Si la requête concerne un répertoire (autrement dit un chemin se
          terminant par un slash <code>/</code>), le nom du fichier qui sera
          recherché et servi depuis ce répertoire est défini via la directive
          <code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code>. Par exemple,
          supposons que <code>DocumentRoot</code> ait été définie comme
          précédemment, et que vous ayez défini <code>DirectoryIndex</code>
          comme suit :</p>
      
          <div class="example"><p><code>DirectoryIndex index.html index.php</code></p></div>
      
          <p>Si httpd reçoit alors une requête pour
          <code>http://www.example.com/fish/</code>, il tentera de servir le
          fichier <code>/var/www/html/fish/index.html</code>. Si ce fichier
          n'existe pas, il tentera de servir le fichier
          <code>/var/www/html/fish/index.php</code>.</p>
      
          <p>Si aucun de ces fichiers existe, httpd tentera de générer et
          d'afficher un index du répertoire, à condition que
          <code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code> ait été chargé et configuré pour le
          permettre.</p>
      
          <p>httpd supporte aussi les <a href="vhosts/">Hôtes virtuels</a>,
          ce qui lui permet de traiter des requêtes pour plusieurs hôtes.
          Dans ce cas, un <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>
          différent peut être défini pour chaque hôte virtuel;
          les directives fournies par le module
          <code class="module"><a href="./mod/mod_vhost_alias.html">mod_vhost_alias</a></code> peuvent aussi être utilisées afin de
          déterminer dynamiquement le noeud approprié du système de fichiers
          à partir duquel servir un contenu en fonction de l'adresse IP
          ou du nom d'hôte.</p>
      
          <p>La directive <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>  est
          définie dans le fichier de configuration de votre serveur principal
          (<code>httpd.conf</code>), mais peut aussi être redéfinie pour chaque
          <a href="vhosts/">Hôte virtuel</a> supplémentaire que vous avez créé.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="outside" id="outside">Fichiers situés en dehors de
      l'arborescence DocumentRoot</a></h2>
      
          <p>Il existe de nombreuses circonstances pour lesquelles il est nécessaire
          d'autoriser l'accès web à des portions du système de fichiers qui ne se
          trouvent pas dans l'arborescence <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>.  httpd propose de nombreuses
          solutions pour réaliser cela. Sur les systèmes Unix, les liens
          symboliques permettent de rattacher d'autres portions du système de
          fichiers au <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>. Pour des raisons de sécurité,
          httpd ne suivra les liens symboliques que si les <code class="directive"><a href="./mod/core.html#options">Options</a></code> pour le répertoire concerné contiennent
          <code>FollowSymLinks</code> ou <code>SymLinksIfOwnerMatch</code>.</p>
      
          <p>Une autre méthode consiste à utiliser la directive <code class="directive"><a href="./mod/mod_alias.html#alias">Alias</a></code> pour rattacher toute portion
          du système de fichiers à l'arborescence du site web. Par exemple, avec</p>
      
      <pre class="prettyprint lang-config">Alias "/docs" "/var/web"</pre>
      
      
          <p>l'URL <code>http://www.example.com/docs/dir/file.html</code>
          correspondra au fichier <code>/var/web/dir/file.html</code>. La
          directive
          <code class="directive"><a href="./mod/mod_alias.html#scriptalias">ScriptAlias</a></code>
          fonctionne de la même manière, excepté que tout contenu localisé dans le
          chemin cible sera traité comme un script <a class="glossarylink" href="./glossary.html#cgi" title="voir glossaire">CGI</a>.</p>
      
          <p>Pour les situations qui nécessitent plus de flexibilité, vous disposez
          des directives <code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code>
          et <code class="directive"><a href="./mod/mod_alias.html#scriptaliasmatch">ScriptAliasMatch</a></code>
          qui permettent des substitutions et comparaisons puissantes basées
          sur les <a class="glossarylink" href="./glossary.html#regex" title="voir glossaire">expressions rationnelles</a>.
          Par exemple,</p>
      
      <pre class="prettyprint lang-config">ScriptAliasMatch "^/~([a-zA-Z0-9]+)/cgi-bin/(.+)" "/home/$1/cgi-bin/$2"</pre>
      
      
          <p>fera correspondre une requête du style
          <code>http://example.com/~user/cgi-bin/script.cgi</code> au chemin
          <code>/home/user/cgi-bin/script.cgi</code>, et traitera le fichier résultant
          comme un script CGI.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="user" id="user">Répertoires des utilisateurs</a></h2>
      
          <p>Sur les systèmes Unix, on peut traditionnellement faire référence
          au répertoire personnel d'un <em>utilisateur</em> particulier à l'aide de
          l'expression <code>~user/</code>.
          Le module <code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code>
          étend cette idée au web en autorisant l'accès aux fichiers situés dans les
          répertoires home des utilisateurs à l'aide d'URLs
          comme dans ce qui suit :</p>
      
      <div class="example"><p><code>http://www.example.com/~user/file.html</code></p></div>
      
          <p>Pour des raisons de sécurité, il est déconseillé de permettre un accès
          direct à un répertoire home d'utilisateur depuis le web. A cet effet, la
          directive <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code>
          spécifie un répertoire où sont situés les fichiers accessibles depuis le web
          dans le répertoire home de l'utilisateur.
          Avec la configuration par défaut
          <code>Userdir public_html</code>, l'URL ci-dessus correspondra à un fichier
          dont le chemin sera du style
          <code>/home/user/public_html/file.html</code> où
          <code>/home/user/</code> est le répertoire home de l'utilisateur tel qu'il
          est défini dans <code>/etc/passwd</code>.</p>
      
          <p>La directive <code>Userdir</code> met à votre disposition de nombreuses
          formes différentes pour les systèmes où <code>/etc/passwd</code> ne
          spécifie pas la localisation du répertoire home.</p>
      
          <p>Certains jugent le symbole "~" (dont le code sur le web est souvent
          <code>%7e</code>) inapproprié et préfèrent utiliser une chaîne de
          caractères différente pour représenter les répertoires utilisateurs.
          mod_userdir ne supporte pas cette fonctionnalité. Cependant, si les
          répertoires home des utilisateurs sont structurés de manière rationnelle,
          il est possible d'utiliser la directive
          <code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code>
          pour obtenir l'effet désiré. Par exemple, pour faire correspondre
          <code>http://www.example.com/upages/user/file.html</code> à
          <code>/home/user/public_html/file.html</code>, utilisez la directive
          <code>AliasMatch</code> suivante :</p>
      
      <pre class="prettyprint lang-config">AliasMatch "^/upages/([a-zA-Z0-9]+)(/(.*))?$"   "/home/$1/public_html/$3"</pre>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="redirect" id="redirect">Redirection d'URL</a></h2>
      
          <p>Les directives de configuration décrites dans les sections précédentes
          demandent à httpd d'extraire un contenu depuis un emplacement spécifique
          du système de fichiers
          et de la retourner au client. Il est cependant parfois
          souhaitable d'informer le
          client que le contenu demandé est localisé à une URL différente, et de
          demander au client d'élaborer une nouvelle requête avec la nouvelle URL.
          Ce processus se nomme <em>redirection</em> et est implémenté par la
          directive <code class="directive"><a href="./mod/mod_alias.html#redirect">Redirect</a></code>.
          Par exemple, si le contenu du répertoire <code>/foo/</code> sous
          <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> est déplacé vers le
          nouveau répertoire <code>/bar/</code>, vous pouvez demander aux clients
          de le requérir à sa nouvelle localisation comme suit :</p>
      
      <pre class="prettyprint lang-config">Redirect permanent "/foo/"   "http://www.example.com/bar/"</pre>
      
      
          <p>Ceci aura pour effet de rediriger tout chemin d'URL commençant par
          <code>/foo/</code> vers le même chemin d'URL sur le serveur
          <code>www.example.com</code> en remplaçant <code>/foo/</code> par
          <code>/bar/</code>. Vous pouvez rediriger les clients non seulement sur le
          serveur d'origine, mais aussi vers n'importe quel autre serveur.</p>
      
          <p>httpd propose aussi la directive <code class="directive"><a href="./mod/mod_alias.html#redirectmatch">RedirectMatch</a></code> pour traiter les problèmes
          de réécriture d'une plus grande complexité. Par exemple, afin de rediriger
          les requêtes pour la page d'accueil du site vers un site différent, mais
          laisser toutes les autres requêtes inchangées, utilisez la
          configuration suivante :</p>
      
      <pre class="prettyprint lang-config">RedirectMatch permanent "^/$"    "http://www.example.com/startpage.html"</pre>
      
      
          <p>De même, pour rediriger temporairement toutes les pages d'un site
          vers une page particulière d'un autre site, utilisez ce qui suit :</p>
      
      <pre class="prettyprint lang-config">RedirectMatch temp ".*"  "http://othersite.example.com/startpage.html"</pre>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="proxy" id="proxy">Mandataire inverse (Reverse Proxy)</a></h2>
      
      <p>httpd vous permet aussi de rapatrier des documents distants
      dans l'espace des URL du serveur local.
      Cette technique est appelée <em>mandataire inverse ou reverse
      proxying</em> car le serveur web agit comme un serveur mandataire en
      rapatriant les documents depuis un serveur distant puis les renvoyant
      au client. Ceci diffère d'un service de mandataire usuel (direct) car, pour le client,
      les documents semblent appartenir au serveur mandataire inverse.</p>
      
      <p>Dans l'exemple suivant, quand les clients demandent des documents situés
      dans le répertoire
      <code>/foo/</code>, le serveur rapatrie ces documents depuis le répertoire
      <code>/bar/</code> sur <code>internal.example.com</code>
      et les renvoie au client comme s'ils appartenaient au serveur local.</p>
      
      <pre class="prettyprint lang-config">ProxyPass "/foo/" "http://internal.example.com/bar/"
      ProxyPassReverse "/foo/" "http://internal.example.com/bar/"
      ProxyPassReverseCookieDomain internal.example.com public.example.com
      ProxyPassReverseCookiePath "/foo/" "/bar/"</pre>
      
      
      <p>La directive <code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code> configure
      le serveur pour rapatrier les documents appropriés, alors que la directive
      <code class="directive"><a href="./mod/mod_proxy.html#proxypassreverse">ProxyPassReverse</a></code>
      réécrit les redirections provenant de
      <code>internal.example.com</code> de telle manière qu'elles ciblent le
      répertoire approprié sur le serveur local. De manière similaire, les directives
      <code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiedomain">ProxyPassReverseCookieDomain</a></code>
      et <code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiepath">ProxyPassReverseCookiePath</a></code>
      réécrivent les cookies élaborés par le serveur d'arrière-plan.</p>
      <p>Il est important de noter cependant, que les liens situés dans les documents
      ne seront pas réécrits.  Ainsi, tout lien absolu sur
      <code>internal.example.com</code> fera décrocher le client
      du serveur mandataire et effectuer sa requête directement sur
      <code>internal.example.com</code>. Vous pouvez modifier ces liens (et
      d'utres contenus) situés dans la page au moment où elle est envoyée au
      client en utilisant le module <code class="module"><a href="./mod/mod_substitute.html">mod_substitute</a></code>.</p>
      
      <pre class="prettyprint lang-config">Substitute "s/internal\.example\.com/www.example.com/i"</pre>
      
      
      <p>Le module <code class="module"><a href="./mod/mod_proxy_html.html">mod_proxy_html</a></code> rend possible une réécriture plus
      élaborée des liens en HTML et XHTML. Il permet de créer des listes
      d'URLs et de leurs réécritures, de façon à pouvoir gérer des scénarios
      de réécriture complexes.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rewrite" id="rewrite">Moteur de réécriture</a></h2>
      
          <p>Le moteur de réécriture <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> peut s'avérer
          utile lorsqu'une substitution plus puissante est nécessaire.
          Les directives fournies par ce module peuvent utiliser des caractéristiques de la
          requête comme le type de navigateur ou l'adresse IP source afin de décider
          depuis où servir le contenu. En outre, mod_rewrite peut utiliser des
          fichiers ou programmes de bases de données externes pour déterminer comment
          traiter une requête. Le moteur de réécriture peut effectuer les trois types
          de mise en correspondance discutés plus haut :
          redirections internes (aliases), redirections externes, et services mandataires.
          De nombreux exemples pratiques utilisant mod_rewrite sont discutés dans la
          <a href="rewrite/">documentation détaillée de mod_rewrite</a>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="notfound" id="notfound">Fichier non trouvé (File Not Found)</a></h2>
      
          <p>Inévitablement, apparaîtront des URLs qui ne correspondront à aucun
          fichier du système de fichiers.
          Ceci peut arriver pour de nombreuses raisons.
          Il peut s'agir du déplacement de documents d'une
          localisation vers une autre. Dans ce cas, le mieux est d'utiliser la
          <a href="#redirect">redirection d'URL</a> pour informer les clients de la
          nouvelle localisation de la ressource. De cette façon, vous êtes sur que
          les anciens signets et liens continueront de fonctionner, même si la
          ressource est déplacée.</p>
      
          <p>Une autre cause fréquente d'erreurs "File Not Found" est l'erreur de
          frappe accidentelle dans les URLs, soit directement dans le navigateur,
          soit dans les liens HTML. httpd propose le module
          <code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code> (sic) pour tenter de résoudre ce problème.
          Lorsque ce module est activé, il intercepte les erreurs
          "File Not Found" et recherche une ressource possédant un nom de fichier
          similaire. Si un tel fichier est trouvé, mod_speling va envoyer une
          redirection HTTP au client pour lui communiquer l'URL correcte.
          Si plusieurs fichiers proches sont trouvés, une liste des alternatives
          possibles sera présentée au client.</p>
      
          <p>mod_speling possède une fonctionnalité particulièrement utile :
          il compare les noms de fichiers sans tenir compte de la casse.
          Ceci peut aider les systèmes où les utilisateurs ne connaissent pas la
          sensibilité des URLs à la casse et bien sûr les systèmes de fichiers unix.
          Mais l'utilisation de mod_speling pour toute autre chose que la correction
          occasionnelle d'URLs peut augmenter la charge du serveur, car chaque
          requête "incorrecte" entraîne une redirection d'URL et une nouvelle requête
          de la part du client.</p>
      
          <p><code class="module"><a href="./mod/mod_dir.html">mod_dir</a></code> fournit la directive <code class="directive"><a href="./mod/mod_dir.html#fallbackresource">FallbackResource</a></code> qui permet d'associer
          des URIs virtuels à une ressource réelle qui peut ainsi les servir.
          Cette directive remplace avantageusement
          <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> lors de l'implémentation d'un
          "contrôleur frontal".</p>
      
          <p>Si toutes les tentatives pour localiser le contenu
          échouent, httpd
          retourne une page d'erreur avec le code de statut HTTP 404
          (file not found). L'apparence de cette page est contrôlée à l'aide de la
          directive <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code>
          et peut être personnalisée de manière très flexible comme discuté dans le
          document
          <a href="custom-error.html">Réponses personnalisées aux erreurs</a>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="other" id="other">Autres modules de mise en correspondance des
      URLs</a></h2>
      
      
      
          <p>Les autres modules disponibles pour la mise en correspondance des
          URLs sont :</p>
          <ul>
          <li><code class="module"><a href="./mod/mod_actions.html">mod_actions</a></code> - Met une URL en correspondance
          avec un script CGI en fonction de la méthode de la requête, ou du
          type MIME de la ressource.</li>
          <li><code class="module"><a href="./mod/mod_dir.html">mod_dir</a></code> - Permet une mise en correspondance
          basique d'un slash terminal dans un fichier index comme
          <code>index.html</code>.</li>
          <li><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code> - Met en correspondance une
          requête avec une URL en fonction de la zone d'une image intégrée à
          un document HTML dans laquelle un utilisateur clique.</li>
          <li><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> - Sélectionne le document
          approprié en fonction de préférences du client telles que la langue
          ou la compression du contenu.</li>
          </ul>
          
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/urlmapping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/urlmapping.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/urlmapping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/urlmapping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/urlmapping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/urlmapping.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/upgrading.html.fr.utf8�����������������������������������������������������0000644�0000000�0000050�00000102637�13412755316�017622� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Mise à jour de la version 2.2 vers la version 2.4 - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Mise à jour de la version 2.2 vers la version 2.4</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/upgrading.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/upgrading.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
        <p>Afin d'assister les utilisateurs lors de leurs opérations de mise à
        jour, nous maintenons un document
        qui comporte des informations critiques à l'attention des personnes qui
        utilisent déjà le serveur HTTP Apache. Ces informations
        ne sont que de brèves notes, et vous
        trouverez plus d'informations dans le document <a href="new_features_2_4.html">Nouvelles fonctionnalités</a>, ou dans
        le fichier <code>src/CHANGES</code>. Les développeurs d'applications
        et de modules trouveront un résumé des modifications de l'API dans la
        vue d'ensemble <a href="developer/new_api_2_4.html">Mises à jour de
        l'API</a>.</p>
      
        <p>Ce document présente les changements de comportement du serveur qui
        peuvent nécessiter une modification de la configuration, et une
        méthode pour utiliser la version 2.4 du serveur en parallèle avec la
        version 2.2. Pour tirer parti des nouvelles fonctionnalités de la
        version 2.4, reportez-vous au document "Nouvelles fonctionnalités".</p>
      
        <p>Ce document ne décrit que les modifications intervenues entre les versions
        2.2 et 2.4. Si vous effectuez une mise à jour depuis la version 2.0, vous
        devez aussi consulter le
        <a href="http://httpd.apache.org/docs/2.2/upgrading.html">document de mise
        à jour de 2.0 vers 2.2.</a></p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#compile-time">Modifications des paramètres de compilation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#run-time">Modifications de la configuration à l'exécution</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#misc">Changements divers</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#third-party">Modules tiers</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#commonproblems">Problèmes de mise à jour courants</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="new_features_2_4.html">Vue d'ensemble des nouvelles
      fonctionnalités du serveur HTTP Apache 2.4</a></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="compile-time" id="compile-time">Modifications des paramètres de compilation</a></h2>
          
           <p>Le processus de compilation est très similaire à celui de la
           version 2.2. Dans la plupart des cas, vous pourrez utiliser votre
           ancienne ligne de commande <code>configure</code> (telle qu'elle
           est enregistrée dans le fichier <code>build/config.nice</code>
           situé dans le répertoire de compilation du serveur). Voici certains
           changements intervenus dans la configuration par défaut :</p>
      
          <ul>
            <li>Les modules suivants ont été supprimés : mod_authn_default,
            mod_authz_default et mod_mem_cache. Si vous utilisiez
            mod_mem_cache sous la version 2.2, vous devez maintenant utiliser
            <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code> dans la version 2.4.</li>
      
            <li>Toutes les implémentations de répartition de charge ont été
            déplacées vers des sous-modules spécifiques de mod_proxy, comme
            <code class="module"><a href="./mod/mod_lbmethod_bybusyness.html">mod_lbmethod_bybusyness</a></code>. Vous devrez compiler et
            chargés tous les modules correspondants que votre configuration
            utilise.</li>
      
            <li>Le support de BeOS, TPF, et des anciennes plates-formes telles
            que A/UX, Next, et Tandem a été supprimé, car
            elles ne sont plus considérées comme maintenues.</li>
      
            <li>configure: les modules dynamiques (DSO) sont compilés par
            défaut</li>
      
            <li>configure: par défaut, seul un jeu de modules de base est
            chargé. Les autres directives <code class="directive">LoadModule</code>
            sont mises en commentaires dans le fichier de configuration.</li>
      
            <li>configure: le jeu de modules "most" est compilé par défaut</li>
      
            <li>configure: le jeu de modules "reallyall" ajoute les modules de
            développeur au jeu "all".</li>
          </ul>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="run-time" id="run-time">Modifications de la configuration à l'exécution</a></h2>
          
      <p>Des changements significatifs dans la configuration de
      l'autorisation, ainsi que quelques changements mineurs, peuvent
      nécessiter une mise à jour des fichiers de configuration de la version
      2.2 avant de les utiliser sous la version 2.4.</p>
      
          <h3><a name="authz" id="authz">Autorisation</a></h3>
            
      
            <p>Tout fichier de configuration qui gère des autorisations devra
            probablement être mis à jour.</p>
      
          <p>Vous devez vous reporter au document <a href="howto/auth.html">Authentification, autorisation et contrôle
          d'accès</a>, et plus particulièrement à la section <a href="howto/auth.html#beyond">Pour aller plus loin qu'une simple
          autorisation</a> qui explique les nouveaux mécanismes permettant de
          contrôler l'ordre dans lequel les directives d'autorisation sont
          appliquées.</p>
      
          <p>Les directives qui contrôlent la manière dont les modules
          d'autorisation réagissent lorsqu'ils ne reconnaissent pas
          l'utilisateur authentifié ont été supprimées : elles comprennent les
          directives AuthzLDAPAuthoritative, AuthzDBDAuthoritative,
          AuthzDBMAuthoritative, AuthzGroupFileAuthoritative,
          AuthzUserAuthoritative et AuthzOwnerAuthoritative. Ces directives
          ont été remplacées par les directives plus explicites <code class="directive"><a href="./mod/mod_authz_core.html#requireany">RequireAny</a></code>, <code class="directive"><a href="./mod/mod_authz_core.html#requirenone">RequireNone</a></code>, et <code class="directive"><a href="./mod/mod_authz_core.html#requireall">RequireAll</a></code>.</p>
      
          <p>Si vous utilisez <code class="module"><a href="./mod/mod_authz_dbm.html">mod_authz_dbm</a></code>, vous devez
          mettre à jour votre configuration en remplaçant les directives du
          style <code>Require group ...</code> par des directives du style
          <code>Require dbm-group ...</code>.</p>
      
          <h4><a name="access" id="access">Contrôle d'accès</a></h4>
            
      
            <p>Dans la version 2.2, le contrôle d'accès basé sur le nom d'hôte
            du client, son adresse IP, ou d'autres caractéristiques de la
            requête était assuré via les directives <code class="directive"><a href="./mod/mod_access_compat.html#order">Order</a></code>, <code class="directive"><a href="./mod/mod_access_compat.html#allow">Allow</a></code>, <code class="directive"><a href="./mod/mod_access_compat.html#deny">Deny</a></code>, et <code class="directive"><a href="./mod/mod_access_compat.html#satisfy">Satisfy</a></code>.</p>
      
            <p>Dans la version 2.4, ce contrôle d'accès est assuré, comme tout
            contrôle d'autorisation, par le nouveau module
            <code class="module"><a href="./mod/mod_authz_host.html">mod_authz_host</a></code>. Bien que le module
            <code class="module"><a href="./mod/mod_access_compat.html">mod_access_compat</a></code> soit fourni à des fins de
            compatibilité avec les anciennes configurations, les anciennes
            directives de contrôle d'accès devront être remplacées par les
            nouveaux mécanismes d'authentification.</p>
      
            <div class="note"><h3>Mélanger anciennes et nouvelles directives</h3>
            <p>Mélanger d'anciennes directives comme <code class="directive"><a href="./mod/mod_access_compat.html#order">Order</a></code>, <code class="directive"><a href="./mod/mod_access_compat.html#allow">Allow</a></code> ou <code class="directive"><a href="./mod/mod_access_compat.html#deny">Deny</a></code> avec des nouvelles comme
            <code class="directive"><a href="./mod/mod_authz_core.html#require">Require</a></code> est techniquement
            possible mais déconseillé. En effet, <code class="module"><a href="./mod/mod_access_compat.html">mod_access_compat</a></code> a
            été conçu pour supporter des configurations ne contenant que des anciennes
            directives afin de faciliter le passage à la version 2.4. Les
            exemples ci-dessous vous permettront de vous faire une meilleure idée des
            problèmes qui peuvent survenir.
            </p>
            </div>
      
            <p>Voici quelques exemples de contrôle d'accès avec l'ancienne et
            la nouvelle méthode :</p>
      
            <p>Dans cet exemple, il n'y a pas d'authentification et toutes les requêtes sont rejetées :</p>
            <div class="example"><h3>version 2.2 :</h3><pre class="prettyprint lang-config">Order deny,allow
      Deny from all</pre>
      </div>
            <div class="example"><h3>version 2.4 :</h3><pre class="prettyprint lang-config">Require all denied</pre>
      </div>
      
            <p>Dans cet exemple, il n'y a pas d'authentification et toutes les requêtes sont acceptées :</p>
            <div class="example"><h3>version 2.2 :</h3><pre class="prettyprint lang-config">Order allow,deny
      Allow from all</pre>
      </div>
            <div class="example"><h3>version 2.4 :</h3><pre class="prettyprint lang-config">Require all granted</pre>
      </div>
      
            <p>Dans l'exemple suivant, il n'y a pas d'authentification et tous les
            hôtes du domaine example.org ont l'autorisation d'accès, tous les autres
            étant rejetés :</p>
      
            <div class="example"><h3>version 2.2 :</h3><pre class="prettyprint lang-config">Order Deny,Allow
      Deny from all
      Allow from example.org</pre>
      </div>
            <div class="example"><h3>version 2.4 :</h3><pre class="prettyprint lang-config">Require host example.org</pre>
      </div>
          <p>Dans l'exemple suivant, tous les hôtes du domaine example.org
            ont l'autorisation d'accès, tous les autres sont rejetés :</p>
      
            <div class="example"><h3>version 2.2 :</h3><pre class="prettyprint lang-config">Order Deny,Allow
      Deny from all
      Allow from example.org</pre>
      </div>
            <div class="example"><h3>version 2.4 :</h3><pre class="prettyprint lang-config">Require host example.org</pre>
      </div>
      
            <p>Dans l'exemple suivant, le mélange d'anciennes et de nouvelles
            directives produit des résultats inattendus.</p>
       
            <div class="example"><h3>Mélange d'anciennes et de nouvelles directives : RESULTAT
      	INATTENDU</h3><pre class="prettyprint lang-config">DocumentRoot "/var/www/html"
      
      &lt;Directory "/"&gt;
          AllowOverride None
          Order deny,allow
          Deny from all
      &lt;/Directory&gt;
      
      &lt;Location "/server-status"&gt;
          SetHandler server-status
          Require local
      &lt;/Location&gt;
      
      access.log - GET /server-status 403 127.0.0.1
      error.log - AH01797: client denied by server configuration: /var/www/html/server-status</pre>
      </div>
            <p>Pourquoi httpd interdit l'accès à server-status alors que la
            configuration semble l'autoriser ? Parce que dans ce scénario de <a href="sections.html#merging">fusion</a> de configuration, les
            directives de <code class="module"><a href="./mod/mod_access_compat.html">mod_access_compat</a></code> sont prioritaires par
            rapport à celles de <code class="module"><a href="./mod/mod_authz_host.html">mod_authz_host</a></code>.</p>
      
            <p>L'exemple suivant quant à lui produit un résultat conforme :</p>
      
            <div class="example"><h3>Mélange d'anciennes et de nouvelles directives : RESULTAT
      	CONFORME</h3><pre class="prettyprint lang-config">DocumentRoot "/var/www/html"
      
      &lt;Directory "/"&gt;
          AllowOverride None
          Require all denied
      &lt;/Directory&gt;
      
      &lt;Location "/server-status"&gt;
          SetHandler server-status
          Order deny,allow
          Deny from all
          Allow From 127.0.0.1
      &lt;/Location&gt;
      
      access.log - GET /server-status 200 127.0.0.1</pre>
      </div> 
            <p>En conclusion, même si une configuration hybride peut fonctionner,
            essayez de l'éviter lors de la mise à jour : soit conservez les anciennes
            directives, puis migrez-les vers les nouvelles ultérieurement, soit
            effectuez une migration immédiate de toutes les anciennes directives vers
            les nouvelles.  
            </p>      
          
      
          <p>Dans de nombreuses configurations avec authentification où la directive
           <code class="directive">Satisfy</code> était définie à sa valeur par défaut
           <em>ALL</em>, les lignes de configuration qui désactivent le contrôle
           d'accès basé sur l'hôte sont maintenant omises :</p>
      
            <div class="example"><h3>Version 2.2 :</h3><pre class="prettyprint lang-config"># configuration en version 2.2 qui désactive le contrôle d'accès basé sur le nom
      # d'hôte pour n'utiliser que l'authentification
      Order Deny,Allow
      Allow from all
      AuthType Basic
      AuthBasicProvider file
      AuthUserFile /example.com/conf/users.passwd
      AuthName secure
      Require valid-user</pre>
      </div>
            <div class="example"><h3>Version 2.4 :</h3><pre class="prettyprint lang-config"># Pas besoin de remplacer les directives de contrôle d'accès basées sur le nom
      # d'hôte désactivées
      AuthType Basic
      AuthBasicProvider file
      AuthUserFile /example.com/conf/users.passwd
      AuthName secure
      Require valid-user</pre>
      </div>
      
           <p>Dans les configurations où l'authentification et le contrôle d'accès se
           combinaient dans un but précis, les directives de contrôle d'accès doivent
           être migrées. Dans l'exemple suivant, les requêtes qui correspondent aux
           <em>deux</em> critères sont acceptées :</p>
            <div class="example"><h3>Version 2.2 :</h3><pre class="prettyprint lang-config">Order allow,deny
      Deny from all
      # ALL est la valeur par défaut de Satisfy
      Satisfy ALL
      Allow from 127.0.0.1
      AuthType Basic
      AuthBasicProvider file
      AuthUserFile /example.com/conf/users.passwd
      AuthName secure
      Require valid-user</pre>
      </div>
            <div class="example"><h3>Version 2.4 :</h3><pre class="prettyprint lang-config">AuthType Basic
      AuthBasicProvider file
      AuthUserFile /example.com/conf/users.passwd
      AuthName secure
      &lt;RequireAll&gt;
        Require valid-user
        Require ip 127.0.0.1
      &lt;/RequireAll&gt;</pre>
      </div>
      
           <p>Dans les configurations où l'authentification et le contrôle d'accès se
           combinaient dans un but précis, les directives de contrôle d'accès doivent
           être migrées. Dans l'exemple suivant, les requêtes qui correspondent à
           <em>au moins un</em> critère sont acceptées :</p>
            <div class="example"><h3>Version 2.2 :</h3><pre class="prettyprint lang-config">Order allow,deny
      Deny from all
      Satisfy any
      Allow from 127.0.0.1
      AuthType Basic
      AuthBasicProvider file
      AuthUserFile /example.com/conf/users.passwd
      AuthName secure
      Require valid-user</pre>
      </div>
            <div class="example"><h3>Version 2.4 :</h3><pre class="prettyprint lang-config">AuthType Basic
      AuthBasicProvider file
      AuthUserFile /example.com/conf/users.passwd
      AuthName secure
      # Implicite : &lt;RequireAny&gt;
      Require valid-user
      Require ip 127.0.0.1</pre>
      </div>
      
          
          
          <h3><a name="config" id="config">Autres changements dans la configuration</a></h3>
            
      
            <p>D'autres ajustements mineurs peuvent s'avérer nécessaires pour
            certaines configurations particulières, comme décrit ci-dessous.</p>
      
            <ul>
              <li>La directive <code class="directive">MaxRequestsPerChild</code> a été renommée en
      	<code class="directive"><a href="./mod/mpm_common.html#maxconnectionsperchild">MaxConnectionsPerChild</a></code>;
      	ce nouveau nom reflète mieux l'usage de cette directive.
      	L'ancien nom est encore supporté.</li>
      
      	<li>La directive <code class="directive">MaxClients</code> a
      	été renommée en <code class="directive"><a href="./mod/mpm_common.html#maxrequestworkers">MaxRequestWorkers</a></code>; ce nouveau
      	nom reflète mieux l'usage de cette directive. Pour les
      	modules multiprocessus asynchrones, comme <code class="module"><a href="./mod/event.html">event</a></code>, le nombre
      	maximal de clients n'est pas équivalent au nombre de threads du
      	worker. L'ancien nom est encore supporté.</li>
      
              <li>La directive <code class="directive"><a href="./mod/core.html#defaulttype">DefaultType</a></code> ne produit plus aucun
      	effet, si ce n'est d'émettre un avertissement si elle est
      	définie à une valeur autre que <code>none</code>. D'autres
      	directives de configuration la remplacent dans la version 2.4.
              </li>
      
      	<li>La valeur par défaut de la directive <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> est maintenant
      	<code>None</code>.</li>
      
      	<li>La valeur par défaut de la directive <code class="directive"><a href="./mod/core.html#enablesendfile">EnableSendfile</a></code> est maintenant Off.</li>
      
      	<li>La valeur par défaut de la directive <code class="directive"><a href="./mod/core.html#fileetag">FileETag</a></code> est maintenant "MTime Size"
      	(sans INode).</li>
      
              <li><code class="module"><a href="./mod/mod_dav_fs.html">mod_dav_fs</a></code>: le format du fichier <code class="directive"><a href="./mod/mod_dav_fs.html#davlockdb">DavLockDB</a></code> a changé pour les systèmes
      	avec inodes. L'ancien fichier <code class="directive"><a href="./mod/mod_dav_fs.html#davlockdb">DavLockDB</a></code> doit être supprimé dans le
      	cadre de la mise à jour.
              </li>
      
              <li>La directive <code class="directive"><a href="./mod/core.html#keepalive">KeepAlive</a></code>
      	n'accepte que les valeurs <code>On</code> ou <code>Off</code>.
      	Avant, toute valeur autre que "Off" ou "0" était traitée comme
      	"On".</li>
      
              <li>Les directives AcceptMutex, LockFile, RewriteLock, SSLMutex,
      	SSLStaplingMutex et WatchdogMutexPath ont été remplacées par la
      	directive unique <code class="directive"><a href="./mod/core.html#mutex">Mutex</a></code>.
      	Vous devez évaluer l'impact de ces directives obsolètes dans
      	votre configuration version 2.2 afin de déterminer si elles
      	peuvent être simplement supprimées, ou si elles doivent être
      	remplacées par la directive <code class="directive"><a href="./mod/core.html#mutex">Mutex</a></code>.</li>
      
              <li><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>: la directive <code class="directive"><a href="./mod/mod_cache.html#cacheignoreurlsessionidentifiers">CacheIgnoreURLSessionIdentifiers</a></code>
      	effectue maintenant une correspondance exacte dans la chaîne de
      	paramètres au lieu d'une correspondance partielle. Si votre
      	configuration mettait en jeu des sous-chaînes comme
      	<code>sessionid</code> pour correspondre à
      	<code>/une-application/image.gif;jsessionid=123456789</code>,
      	vous devez maintenant utiliser la chaîne de correspondance
      	complète <code>jsessionid</code>.
              </li>
      
      	<li><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>: le second paramètre de la
      	directive <code class="directive"><a href="./mod/mod_cache.html#cacheenable">CacheEnable</a></code>
      	ne concerne les contenus en mandat direct que s'ils débutent par
      	le protocole approprié. Dans les versions 2.2 et antérieures, un
      	paramètre tel que '/' concernait tous les contenus.</li>
      
              <li><code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code>: la directive <code class="directive"><a href="./mod/mod_ldap.html#ldaptrustedclientcert">LDAPTrustedClientCert</a></code> s'utilise
      	maintenant exclusivement au sein d'une configuration de niveau
      	répertoire. Si vous utilisez cette directive, passez en revue
      	votre configuration pour vous assurer qu'elle est bien présente
      	dans tous les contextes de répertoire nécessaires.</li>
      
      	<li><code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code>: la syntaxe de la directive
      	<code class="directive"><a href="./mod/mod_filter.html#filterprovider">FilterProvider</a></code> utilise
      	maintenant une expression booléenne pour déterminer si un filtre
      	s'applique.
              </li>
      
      	<li><code class="module"><a href="./mod/mod_include.html">mod_include</a></code>:
                  <ul>
                  <li>L'élément <code>#if expr</code> utilise maintenant le
      	    nouvel <a href="expr.html">interpréteur d'expressions</a>.
      	    L'ancienne syntaxe peut être réactivée via la directive
      	    <code class="directive"><a href="./mod/mod_include.html#ssilegacyexprparser">SSILegacyExprParser</a></code>.
                  </li>
                  <li>Dans la portée du répertoire, une directive de
      	    configuration SSI* ne provoque plus la réinitialisation à
      	    leur valeur par défaut de toutes les directives SSI* de
      	    niveau répertoire.</li>
                  </ul>
              </li>
      
              <li><code class="module"><a href="./mod/mod_charset_lite.html">mod_charset_lite</a></code> : l'option
      	<code>DebugLevel</code> a été supprimée en faveur d'une
      	configuration de la directive <code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code> au niveau répertoire.
              </li>
      
              <li><code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code> : l'option
      	<code>DebugLevel</code> a été supprimée en faveur d'une
      	configuration de la directive <code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code> au niveau répertoire.
              </li>
      
      	<li><code class="module"><a href="./mod/mod_proxy_scgi.html">mod_proxy_scgi</a></code>: certaines applications web
      	ne fonctionneront plus correctement avec la nouvelle
      	configuration de <code>PATH_INFO</code> qui est différente de
      	celle de la version 2.2. La configuration
      	précédente peut être
      	restaurée en définissant la variable
      	<code>proxy-scgi-pathinfo</code>.</li>
      
      	<li><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code>: le contrôle de révocation des
      	certificats basé sur les CRL doit être maintenant explicitement
      	configuré via la directive <code class="directive"><a href="./mod/mod_ssl.html#sslcarevocationcheck">SSLCARevocationCheck</a></code>.
              </li>
      
              <li><code class="module"><a href="./mod/mod_substitute.html">mod_substitute</a></code>: la taille maximale d'une
      	ligne est maintenant 1Mo.
              </li>
      
              <li><code class="module"><a href="./mod/mod_reqtimeout.html">mod_reqtimeout</a></code>: si ce module est chargé, il
      	définit maintenant certains temps d'attente par défaut.</li>
      
      	<li><code class="module"><a href="./mod/mod_dumpio.html">mod_dumpio</a></code>: la directive
      	<code class="directive">DumpIOLogLevel</code> n'est plus supportée. Les
      	données sont toujours enregistrées au niveau <code>trace7</code>
      	de <code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code></li>
      
              <li>Jusqu'à la version 2.2, sur les plateformes de style Unix, 
      	les commandes de redirection des logs définies via <code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code> ou <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> étaient invoquées
      	en utilisant <code>/bin/sh -c</code>. A
      	partir de la version 2.4, les commandes de redirection des logs
      	sont exécutées directement. Pour retrouver l'ancien
      	comportement, voir la <a href="logs.html#piped">documentation
      	sur la redirection des logs</a></li>
      
          </ul>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="misc" id="misc">Changements divers</a></h2>
          
      
          <ul>
            <li><code class="module"><a href="./mod/mod_auto_index.html">mod_auto_index</a></code>: extrait maintenant les titres
            et affiche la description pour les fichiers .xhtml qui étaient
            jusqu'alors ignorés.</li>
      
            <li><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> : le format par défaut des variables
            <code>*_DN</code> a changé. Il est cependant encore possible
            d'utiliser l'ancien format via la nouvelle option
            <code>LegacyDNStringFormat</code> de la directive <code class="directive"><a href="./mod/mod_ssl.html#ssloptions">SSLOptions</a></code>. Le protocole SSLv2 n'est
            plus supporté. Les directives <code class="directive"><a href="./mod/mod_ssl.html#sslproxycheckpeercn">SSLProxyCheckPeerCN</a></code> et
            <code class="directive"><a href="./mod/mod_ssl.html#sslproxycheckpeerexpire">SSLProxyCheckPeerExpire</a></code>
            sont maintenant définies par défaut à On, et les requêtes mandatées
            vers des serveurs HTTPS possèdant des certificats non conformes ou
            périmés échoueront donc avec un code d'erreur 502 (Bad gateway).</li>
      
            <li><code class="program"><a href="./programs/htpasswd.html">htpasswd</a></code> utilise maintenant par défaut les
            condensés MD5 sur toutes les plates-formes.</li>
      
            <li>La directive <code class="directive"><a href="./mod/core.html#namevirtualhost">NameVirtualHost</a></code> n'a plus aucun effet, si
            ce n'est l'émission d'un avertissement. Toute combinaison
            adresse/port apparaissant dans plusieurs serveurs virtuels est
            traitée implicitement comme un serveur virtuel basé sur le nom.
            </li>
      
            <li><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code> n'effectue plus de compression
            s'il s'aperçoit que la quantité de données ajoutée par la
            compression est supérieure à la quantité de données à compresser.
            </li>
      
            <li>Les pages d'erreur multilingues de la version 2.2.x ne
            fonctionneront qu'après avoir été corrigées pour
            respecter la nouvelle syntaxe de l'élément <code>#if expr=</code>
            du module <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>, ou si la directive
            <code class="directive"><a href="./mod/mod_include.html#ssilegacyexprparser">SSILegacyExprParser</a></code> a
            été activée pour le répertoire contenant les pages d'erreur.
            </li>
      
            <li>La fonctionnalité fournie par <code>mod_authn_alias</code>
            dans les précédentes versions (en fait la directive
            <code class="directive"><a href="./mod/mod_authn_core.html#authnprovideralias">AuthnProviderAlias</a></code>)
            est maintenant fournie par <code class="module"><a href="./mod/mod_authn_core.html">mod_authn_core</a></code>.  
            </li>
      
            <li>Les directives RewriteLog et RewriteLogLevel ont été
            supprimées. Leur fonctions sont maintenant assurées par la
            directive <code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code> qui permet de définir
            un niveau de journalisation approprié pour le module
            <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>. Voir aussi la section <a href="mod/mod_rewrite.html#logging">journalisation de
            mod_rewrite</a>.</li>
      
          </ul>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="third-party" id="third-party">Modules tiers</a></h2>
          
      
      	<p>Tous les modules tiers doivent être recompilés pour la
      	version 2.4 avant d'être chargés.</p>
      
          <p>De nombreux modules tiers conçus pour la version 2.2
          fonctionneront sans changement avec le serveur HTTP Apache
          version 2.4. Certains nécessiteront cependant des modifications ; se
          reporter à la vue d'ensemble <a href="developer/new_api_2_4.html">Mise à jour de l'API</a>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="commonproblems" id="commonproblems">Problèmes de mise à jour courants</a></h2>
          
          <ul><li>Erreurs au démarrage :
          <ul>
            <li><code>Invalid command 'User', perhaps misspelled or defined by
            a module not included in the server configuration</code> - chargez
            le module <code class="module"><a href="./mod/mod_unixd.html">mod_unixd</a></code></li>
      
            <li><code>Invalid command 'Require', perhaps misspelled or defined
            by a module not included in the server configuration</code>, ou
            <code>Invalid command 'Order', perhaps misspelled or defined by a
            module not included in the server configuration</code> - chargez
            le module <code class="module"><a href="./mod/mod_access_compat.html">mod_access_compat</a></code>, ou mettez à jour
            vers la version 2.4 les directives d'autorisation.</li>
      
            <li><code>Ignoring deprecated use of DefaultType in line NN of
            /path/to/httpd.conf</code> - supprimez la directive <code class="directive"><a href="./mod/core.html#defaulttype">DefaultType</a></code> et remplacez-la par les
            directives de configuration appropriées.</li>
      
            <li><code>Invalid command 'AddOutputFilterByType', perhaps misspelled 
            or defined by a module not included in the server configuration
            </code> - la directive <code class="directive"><a href="./mod/mod_filter.html#addoutputfilterbytype">AddOutputFilterByType</a></code> qui était
            jusqu'alors implémentée par le module core, l'est maintenant par
            le module mod_filter, qui doit donc être chargé.</li>
      
          </ul></li>
          <li>Erreurs de traitement des requêtes :
          <ul>
            <li><code>configuration error:  couldn't check user: /path</code> -
            chargez le module <code class="module"><a href="./mod/mod_authn_core.html">mod_authn_core</a></code>.</li>
            <li>Les fichiers <code>.htaccess</code> ne sont pas traités -
            Vérifiez la présence d'une directive <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> appropriée ; sa valeur par
            défaut est maintenant <code>None</code>.</li>
          </ul>
          </li>
      </ul>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/upgrading.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/upgrading.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/upgrading.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/invoking.html.tr.utf8������������������������������������������������������0000644�0000000�0000050�00000032616�13447004010�017465� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache HTTPd’nin başlatılması - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache HTTPd’nin başlatılması</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./de/invoking.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/invoking.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/invoking.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/invoking.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/invoking.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/invoking.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/invoking.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Apache normal olarak, Windows'ta bir hizmet olarak çalışır. Ayrıntılı
            bilgi için <a href="platform/windows.html#winsvc">Apache HTTPD’nin bir
            hizmet olarak çalıştırılması</a> bölümüne bakınız.</p>
      
          <p>Unix’te ise artalanda isteklere yanıt vermek için sürekli çalışan bir
            artalan sürecidir. Bu belgede <code class="program"><a href="./programs/httpd.html">httpd</a></code>’nin nasıl
            çalıştırılacağı açıklanmaktadır.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#startup">Apache Nasıl Başlatılır?</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#errors">Başlatma Sırasındaki Hatalar</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#boot">Sistem Açılışında Başlatma</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#info">Ek Bilgiler</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="stopping.html">Durdurma ve Yeniden Başlatma</a></li><li><code class="program"><a href="./programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="./programs/apachectl.html">apachectl</a></code></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="startup" id="startup">Apache Nasıl Başlatılır?</a></h2>
      
          <p>Yapılandırma dosyasında <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> yönergesi ile öntanımlı olan port
            80 (veya 1024’ten küçük herhangi bir port) belirtilmişse Apache HTTP
            Sunucusunu başlatmak için root yetkileri gerekecektir. Sunucu başlatılıp
            günlük dosyalarını açmak gibi bazı ön hazırlık etkinliklerinde
            bulunduktan sonra istemcilerden gelen istekleri dinlemek ve yanıt vermek
            için çeşitli <em>çocuk</em> süreçler başlatır. Ana
            <code class="program"><a href="./programs/httpd.html">httpd</a></code> süreci root kullanıcısının aidiyetinde
            çalışmasını sürdürürken çocuk süreçler daha az yetkili bir kullanıcının
            aidiyetinde çalışır. Bu işlem seçilen <a href="mpm.html">Çok Süreçlilik
            Modülü</a> tarafından denetlenir.</p>
      
          <p><code class="program"><a href="./programs/httpd.html">httpd</a></code>’yi çalıştırmak için önerilen yöntem
            <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> betiğini kullanmaktır. Bu betik,
            <code class="program"><a href="./programs/httpd.html">httpd</a></code>’nin bazı işletim sistemlerinde işlevini
            gerektiği gibi yerine getirebilmesi için gereken belli ortam
            değişkenlerini ayarlar ve <code class="program"><a href="./programs/httpd.html">httpd</a></code>’yi çalıştırır.
            <code class="program"><a href="./programs/apachectl.html">apachectl</a></code>, komut satırı argümanlarını
            <code class="program"><a href="./programs/httpd.html">httpd</a></code>’ye aktarabildiğinden gerekli
            <code class="program"><a href="./programs/httpd.html">httpd</a></code> seçenekleri <code class="program"><a href="./programs/apachectl.html">apachectl</a></code>
            betiğine komut satırı seçenekleri olarak belirtilebilir. Ayrıca,
            <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> betiğinin içeriğini doğrudan düzenlemek
            suretiyle betiğin başlangıç satırlarındaki <code>HTTPD</code>
            değişkenine <code class="program"><a href="./programs/httpd.html">httpd</a></code> çalıştırılabilir dosyasının doğru
            yerini ve <em>daima</em> mevcut olmasını istediğiniz komut satırı
            seçeneklerini belirtebilirsiniz.</p>
      
          <p><code>httpd</code> çalıştırıldığında yaptığı ilk şey <a href="configuring.html">yapılandırma dosyası</a>
            <code>httpd.conf</code>’u bulup okumaktır. Bu dosyanın yeri derleme
            sırasında belirtilmekteyse de <code>-f</code> komut satırı seçeneği
            kullanılarak çalıştırma sırasında belirtmek de mümkündür:</p>
      
          <div class="example"><p><code>/usr/local/apache2/bin/apachectl -f
            /usr/local/apache2/conf/httpd.conf</code></p></div>
      
          <p>Başlatma sırasında herşey yolunda giderse sunucu kendini uçbirimden
            ayıracak ve hemen ardından uçbirim, komut istemine düşecektir. Bu,
            sunucunun etkin ve çalışmakta olduğunu gösterir. Artık tarayıcınızı
            kullanarak sunucuya bağlanabilir ve <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> dizinindeki deneme sayfasını
            görebilirsiniz.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="errors" id="errors">Başlatma Sırasındaki Hatalar</a></h2>
      
          <p>Apache başlatma sırasında ölümcül bir sorunla karşılaşacak olursa
            çıkmadan önce sorunu açıklayan bir iletiyi konsola veya <code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code> yönergesi ile belirtilen hata
            günlüğüne yazacaktır. En çok karşılaşılan hata iletilerinden biri
            "<code>Unable to bind to Port ...</code>" dizgesidir. Bu iletiye
            genellikle ÅŸu iki durumdan biri sebep olur:</p>
      
          <ul>
            <li>Sunucunun, root yetkileri gerektiren bir portu kullanmak üzere root
              kullanıcısı tarafından çalıştırılmamış olması.</li>
      
            <li>Aynı portu kullanan başka bir Apache Sunucusunun veya başka bir HTTP
              sunucusunun zaten çalışmakta oluşu.</li>
          </ul>
      
          <p>Bu ve diğer sorun çözme talimatları için Apache <a href="http://wiki.apache.org/httpd/FAQ">SSS</a>’sini inceleyiniz.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="boot" id="boot">Sistem Açılışında Başlatma</a></h2>
      
          <p>Sunucunuzun sistem yeniden başlatıldıktan sonra çalışmasına devam
            etmesini istiyorsanız sistem başlatma betiklerinize (genellikle ya
            <code>rc.local</code> dosyasıdır ya da bir <code>rc.N</code> dizininde
            bir dosyadır) <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> betiği için bir çağrı
            eklemelisiniz. Bu, Apache sunucunuzu root yetkileriyle başlatacaktır.
            Bunu yapmadan önce sunucunuzun güvenlik ve erişim kısıtlamaları
            bakımından gerektiği gibi yapılandırıldığından emin olunuz.</p>
      
          <p><code class="program"><a href="./programs/apachectl.html">apachectl</a></code> betiÄŸi, bir standart SysV init betiÄŸi gibi
            davranacak şekilde tasarlanmıştır. <code>start</code>,
            <code>restart</code> ve <code>stop</code> argümanlarını kabul edebilir
            ve bunları <code class="program"><a href="./programs/httpd.html">httpd</a></code>’ye uygun sinyallere dönüştürebilir.
            Bu bakımdan, çoğunlukla uygun init dizinlerinden birine
            <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> betiği için basitçe bir bağ
            yerleştirebilirsiniz. Fakat bunu yapmadan önce betiğin sisteminizin
            gereklerini yerine getirdiÄŸinden emin olunuz.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="info" id="info">Ek Bilgiler</a></h2>
      
          <p><code class="program"><a href="./programs/httpd.html">httpd</a></code>, <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> ve sunucuyla
            gelen diğer destek programlarının komut satırı seçenekleri hakkında ek
            bilgi  <a href="programs/">Sunucu ve Destek Programları</a> sayfasında
            bulunabilir. Ayrıca, Apache dağıtımında bulunan tüm <a href="mod/">modüller</a> ve bunlarla sağlanan <a href="mod/directives.html">yönergeler</a> hakkında da belgeler
            vardır.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./de/invoking.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/invoking.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/invoking.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/invoking.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/invoking.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/invoking.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/invoking.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/invoking.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/custom-error.html.ko.euc-kr������������������������������������������������0000644�0000000�0000050�00000027024�13412755316�020601� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>»ç¿ëÀÚÁ¤ÀÇ ¿À·ù ÀÀ´ä - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>»ç¿ëÀÚÁ¤ÀÇ ¿À·ù ÀÀ´ä</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/custom-error.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/custom-error.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/custom-error.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/custom-error.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/custom-error.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/custom-error.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p>À¥¸¶½ºÅÍ´Â ¿À·ù³ª ¹®Á¦°¡ ¹ß»ýÇßÀ»¶§ ¾ÆÆÄÄ¡ÀÇ ÀÀ´äÀ»
          ¼³Á¤ÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>¼­¹ö°¡ ¿À·ù³ª ¹®Á¦¸¦ ¹ß°ßÇßÀ»¶§ º¸³¾ »ç¿ëÀÚÁ¤ÀÇ ÀÀ´äÀ»
          Á¤ÀÇÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>½ºÅ©¸³Æ®°¡ Á×Àº °æ¿ì "500 Server Error" ÀÀ´ä ´ë½Å »ç¿ëÀÚ¿¡°Ô
          ´õ Ä£±ÙÇÑ ¹®±¸¸¦ »ç¿ëÇϰųª ´Ù¸¥ (°°Àº »çÀÌÆ®³ª ¿ÜºÎ »çÀÌÆ®ÀÇ)
          URL·Î ¸®´ÙÀÌ·º¼ÇÀ» ÇÒ ¼ö ÀÖ´Ù.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#behavior">Çൿ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#configuration">¼³Á¤</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#custom">»ç¿ëÀÚÁ¤ÀÇ ¿À·ù ÀÀ´ä°ú ¸®´ÙÀÌ·º¼Ç</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="behavior" id="behavior">Çൿ</a></h2>
          
      
          <h3>ÀÌÀü Çൿ</h3>
            
      
            <p>NCSA httpd 1.3Àº »ç¿ëÀÚ¿¡°Ô ¹«ÀǹÌÇϰí Áö·çÇÑ ¿À·ù¹®À»
            º¸³Â´Ù. ¹®Á¦°¡ ¹ß»ýÇÑ ÀÌÀ¯¸¦ ·Î±×¿¡ ³²±æ ¼öµµ ¾ø¾ú´Ù.</p>
          
      
          <h3>»õ·Î¿î Çൿ</h3>
            
      
            <p>¼­¹ö´Â ´ÙÀ½°ú °°Àº ÀÏÀ» ÇÒ ¼ö ÀÖ´Ù:</p>
      
            <ol>
              <li>NCSAÀÇ °íÁ¤µÈ ¹®±¸ ´ë½Å ´Ù¸¥ ¹®±¸¸¦ º¸¿©Áְųª</li>
      
              <li>°°Àº »çÀÌÆ®ÀÇ URL·Î ¸®´ÙÀÌ·º¼ÇÇϰųª</li>
      
              <li>¿ÜºÎ »çÀÌÆ®ÀÇ URL·Î ¸®´ÙÀÌ·º¼ÇÇÑ´Ù.</li>
            </ol>
      
            <p>´Ù¸¥ »çÀÌÆ®ÀÇ URL·Î ¸®´ÙÀÌ·º¼ÇÇÏ´Â °ÍÀÌ À¯¿ëÇÒ ¼ö ÀÖÁö¸¸,
            ÀÌ °æ¿ì ¹®Á¦¸¦ ¼³¸íÇϰųª ·Î±×Çϴµ¥ ÇÊ¿äÇÑ Á¤º¸Áß ÀϺθ¸
            Àü´ÞµÈ´Ù.</p>
      
            <p>¿À·ù¿¡ ´ëÇÑ Á¤º¸¸¦ Àü´ÞÇϱâÀ§ÇØ ¾ÆÆÄÄ¡´Â CGI½ÄÀÇ »õ·Î¿î
            ȯ°æº¯¼ö¸¦ Á¤ÀÇÇÑ´Ù:</p>
      
            <div class="example"><p><code>
              REDIRECT_HTTP_ACCEPT=*/*, image/gif, image/x-xbitmap, 
                  image/jpeg<br />
              REDIRECT_HTTP_USER_AGENT=Mozilla/1.1b2 (X11; I; HP-UX A.09.05 
                  9000/712)<br />
              REDIRECT_PATH=.:/bin:/usr/local/bin:/etc<br />
              REDIRECT_QUERY_STRING=<br />
              REDIRECT_REMOTE_ADDR=121.345.78.123<br />
              REDIRECT_REMOTE_HOST=ooh.ahhh.com<br />
              REDIRECT_SERVER_NAME=crash.bang.edu<br />
              REDIRECT_SERVER_PORT=80<br />
              REDIRECT_SERVER_SOFTWARE=Apache/0.8.15<br />
              REDIRECT_URL=/cgi-bin/buggy.pl
            </code></p></div>
      
            <p><code>REDIRECT_</code> Á¢µÎ»ç¿¡ ÁÖ¸ñÇ϶ó.</p>
      
            <p>ÃÖ¼ÒÇÑ <code>REDIRECT_URL</code>°ú
            <code>REDIRECT_QUERY_STRING</code>Àº (cgi-script³ª
            cgi-includeÀÏ) »õ URL·Î ³Ñ°ÜÁø´Ù. ´Ù¸¥ º¯¼ö´Â ¿À·ù°¡
            ¹ß»ýÇϱâ ÀÌÀü¿¡ <span class="transnote">(<em>¿ªÁÖ;</em> À̸§¿¡¼­ <code>REDIRECT_</code>¸¦
            »« ȯ°æº¯¼ö°¡)</span> Á¸ÀçÇÑ °æ¿ì¿¡¸¸ ÀÖ´Ù.
            <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code>°¡
            <em>¿ÜºÎ·Î</em> (°°Àº ¼­¹ö¶óµµ <code>http:</code>¿Í
            °°Àº ½ºÅ´(scheme)À¸·Î ½ÃÀÛÇÑ´Ù¸é) ¸®´ÙÀÌ·º¼ÇÇÑ´Ù¸é
            ÀÌÁß ¾î¶² °Íµµ ¼³Á¤µÇÁö <strong>¾Ê´Â´Ù</strong>.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuration" id="configuration">¼³Á¤</a></h2>
          
      
          <p><code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code>°¡
          ÀûÀýÈ÷ ¼³Á¤µÇ¾ú´Ù¸é .htaccess ÆÄÀÏ¿¡¼­
          <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code>¸¦ »ç¿ëÇÒ
          ¼ö ÀÖ´Ù.</p>
      
          <p>´ÙÀ½Àº ¿¹ÀÌ´Ù...</p>
      
          <div class="example"><p><code>
            ErrorDocument 500 /cgi-bin/crash-recover <br />
            ErrorDocument 500 "Sorry, our script crashed. Oh dear" <br />
            ErrorDocument 500 http://xxx/ <br />
            ErrorDocument 404 /Lame_excuses/not_found.html <br />
            ErrorDocument 401 /Subscription/how_to_subscribe.html
          </code></p></div>
      
          <p>¹®¹ýÀº,</p>
      
          <div class="example"><p><code>
            ErrorDocument &lt;3-digit-code&gt; &lt;action&gt;
          </code></p></div>
      
          <p>°¡´ÉÇÑ actionÀº,</p>
      
          <ol>
            <li>Ãâ·ÂÇÒ ¹®±¸. µû¿ÈÇ¥ (")¸¦ ¹®±¸ ¾Õ¿¡ ºÙÀδÙ. µÚ¿¡ ³ª¿À´Â
            µû¿ÈÇ¥´Â Ãâ·ÂµÈ´Ù. <em>ÁÖÀÇ: ¾Õ¿¡ ºÙÀº µû¿ÈÇ¥ (")´Â Ãâ·ÂµÇÁö
            ¾Ê´Â´Ù.</em></li>
      
            <li>¸®´ÙÀÌ·º¼ÇÇÒ ¿ÜºÎ URL.</li>
      
            <li>¸®´ÙÀÌ·º¼ÇÇÒ ³»ºÎ URL.</li>
          </ol>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="custom" id="custom">»ç¿ëÀÚÁ¤ÀÇ ¿À·ù ÀÀ´ä°ú ¸®´ÙÀÌ·º¼Ç</a></h2>
          
      
          <p>URL·Î ¸®´ÙÀÌ·º¼ÇÇÏ´Â ¾ÆÆÄÄ¡ ÇൿÀº
          ½ºÅ©¸³Æ®/server-include¿¡ ȯ°æº¯¼ö¸¦ ´õ ³Ñ°ÜÁÖµµ·Ï º¯°æµÇ¾ú´Ù.</p>
      
          <h3>ÀÌÀü Çൿ</h3>
            
      
            <p>¸®´ÙÀÌ·º¼ÇµÇ´Â ½ºÅ©¸³Æ®¿¡ Ç¥ÁØ CGI º¯¼öµéÀÌ ³Ñ¾î°£´Ù.
            ¾îµð¿¡¼­ ¸®´ÙÀÌ·º¼ÇÀÌ ÀϾ´ÂÁö ¾Ë ¼ö ¾ø´Ù.</p>
          
      
          <h3>»õ·Î¿î Çൿ</h3>
            
      
            <p>¸®´ÙÀÌ·º¼ÇµÈ ½ºÅ©¸³Æ®´Â »õ·Î¿î ȯ°æº¯¼öµéÀ» »ç¿ëÇÒ
            ¼ö ÀÖ´Ù. ¸ðµÎ ¾Õ¿¡ <code>REDIRECT_</code>°¡ ºÙ¾îÀÖ´Ù.
            <code>REDIRECT_</code> ȯ°æº¯¼ö´Â ¿ø·¡ CGI ȯ°æº¯¼ö¸í
            ¾Õ¿¡ <code>REDIRECT_</code>¸¦ ºÙ¿©¼­ ¸¸µç´Ù. <em>¿¹¸¦
            µé¾î</em>, <code>HTTP_USER_AGENT</code>´Â
            <code>REDIRECT_HTTP_USER_AGENT</code>°¡ µÇ¾ú´Ù. ÀÌ·± º¯¼ö¿¡
            Ãß°¡·Î ½ºÅ©¸³Æ®°¡ ¿ø·¡ URLÀ» ¾Ëµµ·Ï ¾ÆÆÄÄ¡´Â
            <code>REDIRECT_URL</code>°ú <code>REDIRECT_STATUS</code>¸¦
            Á¤ÀÇÇÑ´Ù. ¿ø·¡ URL°ú ¸®´ÙÀÌ·º¼ÇµÈ URL ¸ðµÎ Á¢±Ù ·Î±×¿¡
            ±â·ÏÇÒ ¼ö ÀÖ´Ù.</p>
      
            <p>ErrorDocument°¡ °°Àº ¼­¹ö¿¡ ÀÖ´Â CGI ½ºÅ©¸³Æ®·Î
            ¸®´ÙÀÌ·º¼ÇÇÑ´Ù¸é, ½ºÅ©¸³Æ®´Â Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ¿À·ù »óȲÀ»
            È®½ÇÈ÷ Àü´ÞÇϱâÀ§ÇØ Ãâ·Â¿¡ "<code>Status:</code>" Çì´õ
            Çʵ带 Æ÷ÇÔÇØ¾ß ÇÑ´Ù. ¿¹¸¦ µé¾î, Perl·Î ÀÛ¼ºÇÑ ErrorDocument
            ½ºÅ©¸³Æ®´Â ´ÙÀ½°ú °°´Ù:</p>
      
            <div class="example"><p><code>
              ... <br />
              print  "Content-type: text/html\n"; <br />
              printf "Status: %s Condition Intercepted\n", $ENV{"REDIRECT_STATUS"}; <br />
              ...
            </code></p></div>
      
            <p><code>404&nbsp;Not&nbsp;Found</code>¿Í °°Àº ƯÁ¤ ¿À·ù
            »óȲ¿¡ ´ëÇÑ ½ºÅ©¸³Æ®¶ó¸é, ´ë½Å <span class="transnote">(<em>¿ªÁÖ;</em> °íÁ¤µÈ)</span>
            ƯÁ¤ »óÅÂÄÚµå¿Í ¿À·ù¹®À» »ç¿ëÇÒ ¼ö ÀÖ´Ù.</p>
      
            <p>(Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ¸®´ÙÀÌ·º¼ÇÀ» ¿äûÇϱâÀ§ÇØ) ÀÀ´ä¿¡
            <code>Location:</code> Çì´õ¸¦ Æ÷ÇÔÇÑ´Ù¸é, ½ºÅ©¸³Æ®´Â
            <em>¹Ýµå½Ã</em> (<code>302&nbsp;Found</code> °°Àº) ÀûÀýÇÑ
            <code>Status:</code> Çì´õ¸¦ Ãâ·ÂÇØ¾ß ÇÔÀ» ÁÖÀÇÇ϶ó. ±×·¸Áö¾ÊÀ¸¸é
            <code>Location:</code> Çì´õ°¡ ¾Æ¹« ¼Ò¿ë¾ø°Ô µÉ ¼ö ÀÖ´Ù.</p>
          
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/custom-error.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/custom-error.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/custom-error.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/custom-error.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/custom-error.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/custom-error.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/custom-error.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/dns-caveats.html.tr.utf8���������������������������������������������������0000644�0000000�0000050�00000031456�13447004010�020052� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache HTTP Sunucusu ve DNS ile ilgili Konular - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache HTTP Sunucusu ve DNS ile ilgili Konular</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./en/dns-caveats.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/dns-caveats.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/dns-caveats.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/dns-caveats.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/dns-caveats.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Bu sayfanın konusu şöyle özetlenebilirdi: Yapılandırma dosyalarınızda
            DNS sorguları yapılmasını gerektirecek ayarlamalardan kaçınınız. Eğer
            yapılandırma dosyalarınızda DNS sorgusu yapılarak çözümlenebilecek
            adresler bulunursa sunucunuz beklenmedik davranışlar (hiç
            başlamayabilir) gösterebileceği gibi hizmet reddi veya hizmet
            hırsızlığı (bazı sanal konakların diğerlerine giden sayfaları çalma
            olasılığı dahil) saldırılarına açık hale gelebilir.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#example">Basit Bir Örnek</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#denial">Hizmet Reddi</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#main">"Ana Sunucu" Adresi</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#tips">Bu Sorunlardan Kaçınmak için İpuçları</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="example" id="example">Basit Bir Örnek</a></h2>
          
      
          <pre class="prettyprint lang-config"># Bu yetersiz bir yapılandırma örneğidir, sunucunuzda kullanmayın.
      &lt;VirtualHost falan.fesmekan.dom&gt;
        ServerAdmin filanca@fesmekan.dom
        DocumentRoot "/siteler/fesmekan"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>httpd’nin beklendiği gibi işlemesi için her sanal konak için iki
            veriye mutlaka ihtiyacı vardır: <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code> ve sunucunun bağlantı kabul edip hizmet
            sunacağı en az bir IP adresi. Yukarıdaki örnekte IP adresi
            bulunmamaktadır, dolayısıyla Apache, <code>falan.fesmekan.dom</code>
            adresi için bir DNS sorgusu yapmak zorundadır. Eğer sunucu,
            yapılandırma dosyasını çözümlediği sırada bir sebeple DNS sunucusuna
            erişemezse bu sanal konak <em>yapılandırılmayacak</em> ve bu sanal konağa
            yapılan isteklere yanıt verilemeyecektir.</p>
      
          <p><code>falan.fesmekan.dom</code>’un 192.168.2.1 IP adresine sahip
            olduğunu varsayarsak yapılandırma şöyle olurdu:</p>
      
          <pre class="prettyprint lang-config"># Bu yetersiz bir yapılandırma örneğidir, sunucunuzda kullanmayın.
      &lt;VirtualHost 192.168.2.1&gt;
        ServerAdmin filanca@fesmekan.dom
        DocumentRoot "/siteler/fesmekan"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Ancak, bu sefer de bu sanal konağın sunucu ismini öğrenmek için
            httpd’nin bir ters DNS sorgusu yapması gerekecektir. Eğer bu sorgu
            başarısız olursa kısmi bir yapılandırmaya gidilir.
            Eğer sanal konak isme dayalı ise sanal konak
            kısmen bile yapılandırılmaz. IP’ye dayalı sanal konaklar büyük oranda
            çalışır, fakat (örneğin, bir Redirect varlığında olduğu gibi) sunucu ismini
            içeren tam bir adres üretilmesini gerektiren bir durumda, sunucu geçerli
            bir adres üretemez.</p>
      
          <p>Her iki sorunu da çözen yapılandırma şöyle olurdu:</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost 192.168.2.1&gt;
        ServerName falan.fesmekan.dom
        ServerAdmin filanca@fesmekan.dom
        DocumentRoot "/siteler/fesmekan"
      &lt;/VirtualHost&gt;</pre>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="denial" id="denial">Hizmet Reddi</a></h2>
          
      
          <p>Şöyle bir yapılandırmanız olsun:</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost falan.fesmekan.dom&gt;
        ServerAdmin filanca@fesmekan.dom
        DocumentRoot "/siteler/fesmekan"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost misal.mesela.dom&gt;
        ServerAdmin falanca@mesela.dom
        DocumentRoot "/siteler/mesela"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p><code>falan.fesmekan.dom</code>’a 192.168.2.1,
            <code>misal.mesela.dom</code>’a 192.168.2.2 atadığınızı fakat,
            <code>mesela.dom</code>’un DNS kaydının sizin denetiminizde olmadığını
            varsayalım. Bu yapılandırmayla, <code>mesela.dom</code>’u
            <code>fesmekan.dom</code>’a giden tüm trafiği çalabilecek duruma
            getirirsiniz. Bunu gerçekleştirmek için DNS kaydında
            <code>misal.mesela.dom</code>’a 192.168.2.1 adresinin atanması
            yeterlidir. Kendi DNS’lerine sahip olduklarından dolayı
            <code>misal.mesela.dom</code>’a istedikleri IP adresini atamaktan
            onları alıkoyamazsınız.</p>
      
          <p>192.168.2.1’e gelen isteklerin hepsine
            (<code>http://falan.fesmekan.dom/biryer</code> şeklinde yazılan
            adresler dahil) <code>mesela.dom</code> sanal konağınca hizmet
            sunulacaktır. Apache’nin gelen istekleri sunduğu sanal konaklarla nasıl
            eşleştirdiğini bilirseniz bunun sebebini kolayca anlarsınız. Bunu
            kabataslak açıklayan  <a href="vhosts/details.html">bir belgemiz
            mevcuttur</a>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="main" id="main">"Ana Sunucu" Adresi</a></h2>
          
      
          <p><a href="vhosts/name-based.html">İsme dayalı sanal konak
            desteği</a>, httpd’nin çalıştığı makinenin IP adres(ler)ini de bilmesini
            gerektirir. Bu adresi elde etmek için sunucu, ya sunucu genelinde geçerli
            <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code> yönergesine bakar ya da bir
            C işlevi olan <code>gethostname</code>’i kullanır (işlev, komut
            isteminden <code>hostname</code> komutuna dönen yanıtın aynısını
            döndürür) ve ardından bu adresle ilgili olarak bir DNS sorgusu yapar.
            Bu sorgudan kaçınmanın henüz bir yolu yoktur.</p>
      
          <p>Eğer bu sorgunun (DNS sunucusunun çökmüş olması gibi bir nedenle)
            başarısız olabileceğinden korkuyorsanız, makine ismini ve IP adresini
            <code>/etc/hosts</code> dosyanıza yazabilirsiniz (Makinenizin düzgün
            olarak açılabilmesi için zaten bu kaydı yapmış olmanız gerekir).
            Kullandığınız işletim sistemine bağlı olarak bu kaydın
            <code>/etc/resolv.conf</code> veya <code>/etc/nsswitch.conf</code>
            dosyasında bulunması gerekebilir.</p>
      
          <p>Herhangi bir nedenle sunucunuz bir DNS sorgusu yapmıyorsa veya
            yapmamalıysa, httpd’yi <code>HOSTRESORDER</code> ortam değişkenine
            "<code>local</code>" değerini atadıktan sonra çalıştırabilirsiniz. Bu
            tamamen işletim sistemine ve kullandığınız çözümleyici kütüphanelere
            bağlıdır. Ayrıca, ortamı denetlemek için <code class="module"><a href="./mod/mod_env.html">mod_env</a></code>
            kullanmıyorsanız, CGI’ler de bundan etkilenir. En iyisi işletim
            sisteminizin SSS belgelerini ve kılavuz sayfalarını okumaktır.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="tips" id="tips">Bu Sorunlardan Kaçınmak için İpuçları</a></h2>
          
      
          <ul>
            <li><code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code> yönergelerinizde
              IP adresleri kullanınız.</li>
      
            <li><code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> yönergelerinizde
              IP adresleri kullanınız.</li>
      
            <li>Tüm sanal konakların ayrı birer <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code> yönergesi olsun.</li>
      
            <li>Hiçbir sayfa sunulmayan bir <code>&lt;VirtualHost
              _default_:*&gt;</code> sanal konağınız olsun.</li>
          </ul>
        </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./en/dns-caveats.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/dns-caveats.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/dns-caveats.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/dns-caveats.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/dns-caveats.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/dns-caveats.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/server-wide.html.ko.euc-kr�������������������������������������������������0000644�0000000�0000050�00000024647�13412755316�020404� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¼­¹ö Àü¿ª ¼³Á¤ - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>¼­¹ö Àü¿ª ¼³Á¤</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/server-wide.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/server-wide.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/server-wide.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/server-wide.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/server-wide.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      <p>ÀÌ ¹®¼­´Â <code class="module"><a href="./mod/core.html">core</a></code> ¼­¹ö°¡ ¼­¹öÀÇ ±âº» ÇൿÀ»
      ¼³Á¤ÇϱâÀ§ÇØ Á¦°øÇÏ´Â Áö½Ã¾îÁß ÀϺθ¦ ¼³¸íÇÑ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#identification">¼­¹ö ½Äº°</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#locations">ÆÄÀÏ À§Ä¡</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#resource">ÀÚ¿ø»ç¿ë Á¦ÇÑ</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="identification" id="identification">¼­¹ö ½Äº°</a></h2>
          
      
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#servername">ServerName</a></code></li><li><code class="directive"><a href="./mod/core.html#serveradmin">ServerAdmin</a></code></li><li><code class="directive"><a href="./mod/core.html#serversignature">ServerSignature</a></code></li><li><code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code></li><li><code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code></li></ul></td></tr></table>
      
          <p><code class="directive"><a href="./mod/core.html#serveradmin">ServerAdmin</a></code>°ú
          <code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code> Áö½Ã¾î´Â
          ¿À·ù¹® µî ¼­¹ö°¡ »ý¼ºÇÏ´Â ¹®¼­¿¡ ³ª¿Ã ¼­¹ö¿¡ ´ëÇÑ Á¤º¸¸¦
          ¼³Á¤ÇÑ´Ù. <code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code>
          Áö½Ã¾î´Â ¼­¹ö HTTP ÀÀ´ä Çì´õ¸¦ ¼³Á¤ÇÑ´Ù.</p>
      
          <p>¼­¹ö´Â <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>°ú
          <code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code>
          Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ÀÚ±âÂüÁ¶ URLÀ» ¸¸µç´Ù. ¿¹¸¦ µé¾î,
          Ŭ¶óÀÌ¾ðÆ®°¡ µð·ºÅ丮¸¦ ¿äûÇßÁö¸¸ µð·ºÅ丮¸í µÚ¿¡ ½½·¡½¬¸¦
          ºÙÀÌÁö¾ÊÀº °æ¿ì ¾ÆÆÄÄ¡´Â µÚ¿¡ ½½·¡½¬¸¦ ºÙÀÎ Àüü À̸§À»
          Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ¸®´ÙÀÌ·ºÆ®ÇÏ¿©, Ŭ¶óÀÌ¾ðÆ®°¡ ¹®¼­ÀÇ »ó´ëÂüÁ¶¸¦
          ¿Ã¹Ù·Î ã°Ô ÇÑ´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="locations" id="locations">ÆÄÀÏ À§Ä¡</a></h2>
          
      
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/mpm_common.html#coredumpdirectory">CoreDumpDirectory</a></code></li><li><code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#lockfile">LockFile</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#scoreboardfile">ScoreBoardFile</a></code></li><li><code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code></li></ul></td></tr></table>
      
          <p>ÀÌ Áö½Ã¾îµéÀº ¾ÆÆÄÄ¡°¡ Á¤»óÀûÀ¸·Î µ¿ÀÛÇϱâÀ§ÇØ ÇÊ¿äÇÑ
          ¿©·¯ ÆÄÀϵéÀÇ À§Ä¡¸¦ ¼³Á¤ÇÑ´Ù. °æ·Î¸íÀÌ ½½·¡½¬(/)·Î ½ÃÀÛÇÏÁö
          ¾ÊÀ¸¸é, <code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code>¿¡
          »ó´ëÀûÀÎ ÆÄÀÏÀ» ã´Â´Ù. root°¡ ¾Æ´Ñ »ç¿ëÀÚ¿¡°Ô ¾²±â±ÇÇÑÀÌ
          ÀÖ´Â °æ·Î¿¡ ÆÄÀÏÀ» µÎÁö¾Êµµ·Ï Á¶½ÉÇØ¶ó. ´õ ÀÚ¼¼ÇÑ Á¤º¸´Â
          <a href="misc/security_tips.html#serverroot">º¸¾È ÆÁ</a>
          ¹®¼­¸¦ Âü°íÇ϶ó.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="resource" id="resource">ÀÚ¿ø»ç¿ë Á¦ÇÑ</a></h2>
          
      
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#limitrequestbody">LimitRequestBody</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestfields">LimitRequestFields</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestfieldsize">LimitRequestFieldsize</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestline">LimitRequestLine</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitcpu">RLimitCPU</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitmem">RLimitMEM</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitnproc">RLimitNPROC</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code></li></ul></td></tr></table>
      
          <p><code class="directive">LimitRequest</code>* Áö½Ã¾î´Â ¾ÆÆÄÄ¡°¡
          Ŭ¶óÀ̾ðÆ®ÀÇ ¿äûÀ» ÀÐÀ» ¶§ »ç¿ëÇÒ ÀÚ¿ø·®À» Á¦ÇÑÇÑ´Ù. ÀÌ·±
          °ªµéÀ» Á¦ÇÑÇÏ¿© ¼­ºñ½º°ÅºÎ(denial of service)·ù °ø°ÝÀ»
          ÁÙÀÏ ¼ö ÀÖ´Ù.</p>
      
          <p><code class="directive">RLimit</code>* Áö½Ã¾î´Â ¾ÆÆÄÄ¡ ÀÚ½ÄÀÌ
          »ý¼ºÇÏ´Â ÇÁ·Î¼¼½º°¡ »ç¿ëÇÒ ÀÚ¿ø·®À» Á¦ÇÑÇÑ´Ù. ƯÈ÷ CGI
          ½ºÅ©¸³Æ®³ª SSI exec ¸í·É¾î°¡ »ç¿ëÇÒ ÀÚ¿øÀ» Á¦ÇÑÇÑ´Ù.</p>
      
          <p><code class="directive"><a href="./mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code>
          Áö½Ã¾î´Â ½ºÅà ũ±â¸¦ Á¶ÀýÇϱâÀ§ÇØ Netware¿¡¼­¸¸ »ç¿ëÇÑ´Ù.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/server-wide.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/server-wide.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/server-wide.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/server-wide.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/server-wide.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/server-wide.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/server-wide.html.fr.utf8���������������������������������������������������0000644�0000000�0000050�00000030642�13412755316�020072� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Configuration à l'échelle du serveur - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Configuration à l'échelle du serveur</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/server-wide.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/server-wide.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/server-wide.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/server-wide.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/server-wide.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      <p>Ce document explique le fonctionnement de certaines directives du serveur
      de base qui sont utilisées pour configurer les opérations élémentaires du
      serveur.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#identification">Identification du serveur</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#locations">Localisation des fichiers</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#resource">Limitation de l'utilisation des ressources</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#implementation">Choix d'implémentation</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="identification" id="identification">Identification du serveur</a></h2>
          
      
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#servername">ServerName</a></code></li><li><code class="directive"><a href="./mod/core.html#serveradmin">ServerAdmin</a></code></li><li><code class="directive"><a href="./mod/core.html#serversignature">ServerSignature</a></code></li><li><code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code></li><li><code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code></li><li><code class="directive"><a href="./mod/core.html#usecanonicalphysicalport">UseCanonicalPhysicalPort</a></code></li></ul></td></tr></table>
      
          <p>Les directives <code class="directive"><a href="./mod/core.html#serveradmin">ServerAdmin</a></code> et
          <code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code> contrôlent la nature des
          informations à propos du serveur qui seront affichées dans les documents
          générés par le serveur comme les messages d'erreur. La directive
          <code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code> définit la valeur du
          champ d'en-tête de la réponse du serveur HTTP.</p>
      
          <p>Le serveur utilise les directives
          <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>,
          <code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code> et
          <code class="directive"><a href="./mod/core.html#usecanonicalphysicalport">UseCanonicalPhysicalPort</a></code> pour
          déterminer la manière de construire des URLs vers ses propres ressources.
          Par exemple, quand un client émet une requête vers un répertoire, mais
          n'ajoute pas le slash final au nom du répertoire, httpd doit rediriger le
          client vers le nom complet incluant le slash final afin que le client
          puisse résoudre correctement les références relatives présentes dans
          le document.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="locations" id="locations">Localisation des fichiers</a></h2>
          
      
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/mpm_common.html#coredumpdirectory">CoreDumpDirectory</a></code></li><li><code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code></li><li><code class="directive"><a href="./mod/core.html#mutex">Mutex</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#scoreboardfile">ScoreBoardFile</a></code></li><li><code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code></li></ul></td></tr></table>
      
          <p>Ces directives contrôlent la localisation des différents fichiers
          nécessaires au bon fonctionnement de httpd. Quand le chemin utilisé ne
          commence pas par un slash (/), la localisation des fichiers est relative
          à la valeur de la directive
          <code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code>. Soyez prudent avec la
          localisation de fichiers dans des répertoires où les utilisateurs non root
          ont les droits en écriture. Voir la documention sur les
          <a href="misc/security_tips.html#serverroot">Conseils à propos
          de la sécurité</a> pour plus de détails.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="resource" id="resource">Limitation de l'utilisation des ressources</a></h2>
          
      
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#limitrequestbody">LimitRequestBody</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestfields">LimitRequestFields</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestfieldsize">LimitRequestFieldsize</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestline">LimitRequestLine</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitcpu">RLimitCPU</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitmem">RLimitMEM</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitnproc">RLimitNPROC</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code></li></ul></td></tr></table>
      
          <p>Les directives <code class="directive">LimitRequest</code>* permettent de
          limiter la quantité de ressources consommées par httpd pour le traitement
          des requêtes des clients. Cette limitation permet de minimiser les effets
          de certains types d'attaques par déni de service.</p>
      
          <p>Les directives <code class="directive">RLimit</code>* permettent de limiter la
          quantité de ressources utilisable par les processus initiés (forked) par
          les processus enfants httpd. Elles permettent en particulier de contrôler
          les ressources utilisées par les scripts CGI et les commandes exec des
          "Inclusions côté serveur" (Server Side Includes ou SSI).</p>
      
          <p>La directive <code class="directive"><a href="./mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code>
          permet sur certaines plates-formes de contrôler la taille de la pile.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="implementation" id="implementation">Choix d'implémentation</a></h2>
          
      
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#mutex">Mutex</a></code></li></ul></td></tr></table>
      
          <p>La directive <code class="directive">Mutex</code> permet de modifier
          l'implémentation sous-jacente des mutex, afin de résoudre les
          problèmes de fonctionnement ou de performance dus au choix par
          défaut d'<a class="glossarylink" href="./glossary.html#apr" title="voir glossaire">APR</a>.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/server-wide.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/server-wide.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/server-wide.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/server-wide.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/server-wide.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/server-wide.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/sitemap.html���������������������������������������������������������������0000644�0000000�0000050�00000001345�13362070302�015770� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: sitemap.html.de
      Content-Language: de
      Content-type: text/html; charset=ISO-8859-1
      
      URI: sitemap.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: sitemap.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: sitemap.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: sitemap.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: sitemap.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: sitemap.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      
      URI: sitemap.html.zh-cn.utf8
      Content-Language: zh-cn
      Content-type: text/html; charset=UTF-8
      �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/mpm.html.es����������������������������������������������������������������0000644�0000000�0000050�00000024300�13412755316�015534� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Módulos de MultiProcesamiento (MPMs) - Servidor HTTP Apache Versión 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="./glossary.html">Glosario</a> | <a href="./sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="./">Versión 2.4</a></div><div id="page-content"><div id="preamble"><h1>Módulos de MultiProcesamiento (MPMs)</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="./de/mpm.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/mpm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/mpm.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/mpm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/mpm.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/mpm.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/mpm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/mpm.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
      <p>Este documento describe que es un Módulo de Multiprocesamiento y
      como los usa Apache.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#introduction">Introducción</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#defaults">MPM por defecto</a></li>
      </ul><h3>Consulte también</h3><ul class="seealso"><li><a href="#comments_section">Comentarios</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">Introducción</a></h2>
      
          <p>Apache está diseñado para ser un servidor web potente
          y flexible que pueda funcionar en la más amplia variedad de
          plataformas y entornos. Las diferentes plataformas y los
          diferentes entornos, hacen que a menudo sean necesarias diferentes
          características o funcionalidades, o que una misma
          característica o funcionalidad sea implementada de diferente
          manera para obtener una mayor eficiencia. Apache se ha adaptado
          siempre a una gran variedad de entornos a través de su
          diseño modular. Este diseño permite a los
          administradores de sitios web elegir que características van
          a ser incluidas en el servidor seleccionando que módulos se
          van a cargar, ya sea al compilar o en tiempo de ejecución.</p>
      
          <p>Apache 2.0 extiende este diseño modular hasta las
          funciones más básicas de un servidor web. El servidor
          viene con una serie de Módulos de MultiProcesamiento que son
          responsables de conectar con los puertos de red de la
          máquina, aceptar las peticiones, y generar los procesos hijo
          que se encargan de servirlas.</p>
      
          <p>La extensión del diseño modular a este nivel del
          servidor ofrece dos beneficios importantes:</p>
      
          <ul>
            <li>Apache puede soportar de una forma más fácil y
            eficiente una amplia variedad de sistemas operativos. En
            concreto, la versión de Windows de Apache es mucho más
            eficiente, porque el módulo <code class="module"><a href="./mod/mpm_winnt.html">mpm_winnt</a></code>
            puede usar funcionalidades nativas de red en lugar de usar la
            capa POSIX como hace Apache 1.3. Este beneficio se extiende
            también a otros sistemas operativos que implementan sus
            respectivos MPMs.</li>
      
            <li>El servidor puede personalizarse mejor para las necesidades
            de cada sitio web. Por ejemplo, los sitios web que necesitan
            más que nada escalabilidad pueden usar un proceso MPM como
            <code class="module"><a href="./mod/worker.html">worker</a></code>, mientras que los sitios web que
            requieran por encima de otras cosas estabilidad o compatibilidad
            con software antiguo pueden usar
            <code class="module"><a href="./mod/prefork.html">prefork</a></code>.
            </li>
          </ul>
      
          <p>A nivel de usuario, los MPMs son como cualquier otro
          módulo de Apache. La diferencia más importante es que
          solo un MPM puede estar cargado en el servidor en un determinado
          momento. La lista de MPMs disponibles está en la <a href="mod/">sección índice de Módulos</a>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="defaults" id="defaults">MPM por defecto</a></h2>
      
      <p>En la siguiente tabla se muestran los MPMs por defecto para varios
      sistemas operativos.  Estos serán los MPM seleccionados si no se
      especifica lo contrario al compilar.</p>
      
      <table class="bordered"><tr><td>Netware</td><td><code class="module"><a href="./mod/mpm_netware.html">mpm_netware</a></code></td></tr>
      <tr class="odd"><td>OS/2</td><td><code class="module"><a href="./mod/mpmt_os2.html">mpmt_os2</a></code></td></tr>
      <tr><td>Unix</td><td><code class="module"><a href="./mod/prefork.html">prefork</a></code>, <code class="module"><a href="./mod/worker.html">worker</a></code>, or
          <code class="module"><a href="./mod/event.html">event</a></code>, depending on platform capabilities</td></tr>
      <tr class="odd"><td>Windows</td><td><code class="module"><a href="./mod/mpm_winnt.html">mpm_winnt</a></code></td></tr>
      </table>
      
      <div class="note"><p>aquí, 'Unix' se usa para designar a los sistemas operativos "Unix-like", como
      Linux, BSD, Solaris, Mac OS X, etc.</p></div>
      
      <p>En el caso de los Unix, la decisión de que MPM se va a instalar
        depende de dos pregunas:</p>
      <p>1. ¿Nos permite el Sistema Operativo hilos?</p>
      <p>2. -¿Nos permite el sistema operativo soporte a pila de hilos seguros 
        (Especificamente, las funciones kqueue y epoll)?</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="./de/mpm.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/mpm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/mpm.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/mpm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/mpm.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/mpm.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/mpm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/mpm.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentarios</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/mpm.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="./glossary.html">Glosario</a> | <a href="./sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/socache.html.en������������������������������������������������������������0000644�0000000�0000050�00000023060�13444161410�016334� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Shared Object Cache in Apache HTTP Server - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Shared Object Cache in Apache HTTP Server</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/socache.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/socache.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>The Shared Object Cache provides a means to share simple data
          across all a server's workers, regardless of <a href="mpm.html">thread
          and process models</a>.  It is used where the advantages of sharing
          data across processes outweigh the performance overhead of
          inter-process communication.</p>
        </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="providers" id="providers">Shared Object Cache Providers</a></h2>
          
          <p>The shared object cache as such is an abstraction.  Four different
          modules implement it.  To use the cache, one or more of these modules
          must be present, and configured.</p>
          <p>The only configuration required is to select which cache provider
          to use.  This is the responsibility of modules using the cache, and
          they enable selection using directives such as
          <code class="directive"><a href="./mod/mod_cache_socache.html#cachesocache">CacheSocache</a></code>,
          <code class="directive"><a href="./mod/mod_authn_socache.html#authncachesocache">AuthnCacheSOCache</a></code>,
          <code class="directive"><a href="./mod/mod_ssl.html#sslsessioncache">SSLSessionCache</a></code>, and
          <code class="directive"><a href="./mod/mod_ssl.html#sslstaplingcache">SSLStaplingCache</a></code>.</p>
          <p>Currently available providers are:</p>
          <dl>
          <dt>"dbm" (<code class="module"><a href="./mod/mod_socache_dbm.html">mod_socache_dbm</a></code>)</dt>
          <dd>This makes use of a DBM hash file.
           The choice of underlying DBM used may be configurable
           if the installed APR version supports multiple DBM implementations.</dd>
          <dt>"dc" (<code class="module"><a href="./mod/mod_socache_dc.html">mod_socache_dc</a></code>)</dt>
          <dd>This makes use of the <a href="http://distcache.sourceforge.net/">distcache</a>
          distributed session caching libraries.</dd>
          <dt>"memcache" (<code class="module"><a href="./mod/mod_socache_memcache.html">mod_socache_memcache</a></code>)</dt>
          <dd>This makes use of the <a href="http://memcached.org/">memcached</a>
          high-performance, distributed memory object caching system.</dd>
          <dt>"redis" (<code class="module"><a href="./mod/mod_socache_redis.html">mod_socache_redis</a></code>)</dt>
          <dd>This makes use of the <a href="http://redis.io/">Redis</a>
          high-performance, distributed memory object caching system.</dd>
          <dt>"shmcb" (<code class="module"><a href="./mod/mod_socache_shmcb.html">mod_socache_shmcb</a></code>)</dt>
          <dd>This makes use of a high-performance cyclic buffer inside a
           shared memory segment.</dd>
          </dl>
      
          <p>The API provides the following functions:</p>
      
          <dl>
            <dt>const char *create(ap_socache_instance_t **instance, const char *arg,
                                apr_pool_t *tmp, apr_pool_t *p);</dt>
            <dd>Create a session cache based on the given configuration string.
            The instance pointer returned in the instance parameter will be
            passed as the first argument to subsequent invocations.</dd>
      
            <dt>apr_status_t init(ap_socache_instance_t *instance, const char *cname,
                               const struct ap_socache_hints *hints,
                               server_rec *s, apr_pool_t *pool)</dt>
            <dd>Initialize the cache.  The cname must be of maximum length 16
            characters, and uniquely identifies the consumer of the cache
            within the server; using the module name is recommended, e.g.
            "mod_ssl-sess".  This string may be used within a filesystem
            path so use of only alphanumeric [a-z0-9_-] characters is
            recommended.  If hints is non-NULL, it gives a set of hints for
            the provider.  Return APR error code.</dd>
      
            <dt>void destroy(ap_socache_instance_t *instance, server_rec *s)</dt>
            <dd>Destroy a given cache instance object.</dd>
      
            <dt>apr_status_t store(ap_socache_instance_t *instance, server_rec *s,
                                const unsigned char *id, unsigned int idlen,
                                apr_time_t expiry,
                                unsigned char *data, unsigned int datalen,
                                apr_pool_t *pool)</dt>
            <dd>Store an object in a cache instance.</dd>
      
            <dt>apr_status_t retrieve(ap_socache_instance_t *instance, server_rec *s,
                                   const unsigned char *id, unsigned int idlen,
                                   unsigned char *data, unsigned int *datalen,
                                   apr_pool_t *pool)</dt>
            <dd>Retrieve a cached object.</dd>
      
            <dt>apr_status_t remove(ap_socache_instance_t *instance, server_rec *s,
                                 const unsigned char *id, unsigned int idlen,
                                 apr_pool_t *pool)</dt>
            <dd>Remove an object from the cache.</dd>
      
            <dt>void status(ap_socache_instance_t *instance, request_rec *r, int flags)</dt>
            <dd>Dump the status of a cache instance for mod_status.</dd>
      
            <dt>apr_status_t iterate(ap_socache_instance_t *instance, server_rec *s,
                                  void *userctx, ap_socache_iterator_t *iterator,
                                  apr_pool_t *pool)</dt>
            <dd>Dump all cached objects through an iterator callback.</dd>
          </dl>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/socache.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/socache.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/socache.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/glossary.html��������������������������������������������������������������0000644�0000000�0000050�00000001217�13362070302�016167� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: glossary.html.de
      Content-Language: de
      Content-type: text/html; charset=ISO-8859-1
      
      URI: glossary.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: glossary.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: glossary.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: glossary.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: glossary.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: glossary.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/filter.html.fr.utf8��������������������������������������������������������0000644�0000000�0000050�00000040146�13412755316�017123� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Filtres - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Filtres</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/filter.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/filter.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/filter.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/filter.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/filter.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/filter.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Ce document décrit l'utilisation des filtres avec Apache.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#intro">Le filtrage avec Apache 2</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#smart">Filtrage intelligent</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#service">Présentation des filtres en tant que service HTTP</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#using">Utilisation des filtres</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="intro" id="intro">Le filtrage avec Apache 2</a></h2>
          
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code></li><li><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code></li><li><code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code></li><li><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="./mod/mod_charset_lite.html">mod_charset_lite</a></code></li><li><code class="module"><a href="./mod/mod_reflector.html">mod_reflector</a></code></li><li><code class="module"><a href="./mod/mod_buffer.html">mod_buffer</a></code></li><li><code class="module"><a href="./mod/mod_data.html">mod_data</a></code></li><li><code class="module"><a href="./mod/mod_ratelimit.html">mod_ratelimit</a></code></li><li><code class="module"><a href="./mod/mod_reqtimeout.html">mod_reqtimeout</a></code></li><li><code class="module"><a href="./mod/mod_request.html">mod_request</a></code></li><li><code class="module"><a href="./mod/mod_sed.html">mod_sed</a></code></li><li><code class="module"><a href="./mod/mod_substitute.html">mod_substitute</a></code></li><li><code class="module"><a href="./mod/mod_xml2enc.html">mod_xml2enc</a></code></li><li><code class="module"><a href="./mod/mod_proxy_html.html">mod_proxy_html</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_filter.html#filterchain">FilterChain</a></code></li><li><code class="directive"><a href="./mod/mod_filter.html#filterdeclare">FilterDeclare</a></code></li><li><code class="directive"><a href="./mod/mod_filter.html#filterprotocol">FilterProtocol</a></code></li><li><code class="directive"><a href="./mod/mod_filter.html#filterprovider">FilterProvider</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#addinputfilter">AddInputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#addoutputfilter">AddOutputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#removeinputfilter">RemoveInputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#removeoutputfilter">RemoveOutputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_reflector.html#reflectorheader">ReflectorHeader</a></code></li><li><code class="directive"><a href="./mod/mod_ext_filter.html#extfilterdefine">ExtFilterDefine</a></code></li><li><code class="directive"><a href="./mod/mod_ext_filter.html#extfilteroptions">ExtFilterOptions</a></code></li><li><code class="directive"><a href="./mod/core.html#setinputfilter">SetInputFilter</a></code></li><li><code class="directive"><a href="./mod/core.html#setoutputfilter">SetOutputFilter</a></code></li></ul></td></tr></table>
      
      <p>La chaîne de filtrage est disponible depuis la version 2.0 d'Apache,
      et permet aux applications de traiter les données en entrée et en sortie
      d'une manière hautement flexible et configurable, quelle que soit la
      provenance de ces données.  Il est possible de pré-traiter les données
      en entrée, et post-traiter les données en sortie, selon
      vos souhaits.
      Ces traitements sont tout à fait indépendants des traditionnelles phases
      de traitement des requêtes.</p>
      <p class="figure">
      <img src="images/filter_arch.png" width="569" height="392" alt="les filtres peuvent s'enchaîner, perpendiculairement au traitement des requêtes" />
      </p>
      <p>Voici quelques exemples de filtrage avec la distribution standard d'Apache:</p>
      <ul>
      <li><code class="module"><a href="./mod/mod_include.html">mod_include</a></code>, implémente les inclusions côté serveur.</li>
      <li><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code>, implémente le cryptage SSL (https).</li>
      <li><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code>, implémente la compression/décompression
      à la volée.</li>
      <li><code class="module"><a href="./mod/mod_charset_lite.html">mod_charset_lite</a></code>, transcodage entre différents
      jeux de caractères.</li>
      <li><code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code>, utilisation d'un programme externe
      comme filtre.</li>
      </ul>
      <p>Apache utilise aussi plusieurs filtres en interne pour accomplir des tâches
      comme le découpage des grosses requêtes (chunking) et la gestion des
      requêtes portant sur une partie d'un fichier (byte-range).</p>
      
      <p>Un grand choix d'applications sont implémentées par des modules de filtrage
      tiers disponibles à <a href="http://modules.apache.org/">modules.apache.org</a> entre autres.
      En voici quelques exemples :</p>
      
      <ul>
      <li>Traitement et réécriture HTML et XML</li>
      <li>Transformations XSLT et inclusions XML (XIncludes)</li>
      <li>Support de l'espace de nommage XML</li>
      <li>Gestion du chargement de fichier et décodage des formulaires HTML</li>
      <li>Traitement d'image</li>
      <li>Protection des applications vulnérables comme les scripts PHP</li>
      <li>Edition de texte par Chercher/Remplacer</li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="smart" id="smart">Filtrage intelligent</a></h2>
      
      <p class="figure">
      <img src="images/mod_filter_new.png" width="423" height="331" alt="Le filtrage intelligent applique différents fournisseurs de filtrage en fonction de l'état du traitement de la requête" />
      </p>
      <p><code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code>, inclus dans les version 2.1 et supérieures
      d'Apache, permet de configurer la chaîne de filtrage dynamiquement
      à l'exécution.
      Ainsi par exemple, vous pouvez définir un proxy pour réécrire du code HTML
      avec un filtre HTML et traiter des images JPEG avec un filtre totalement
      séparé, bien que le proxy ne possède aucune information préliminaire
      sur ce que le serveur à l'origine des données à filtrer va envoyer.
      Ceci fonctionne grâce à l'utilisation d'un gestionnaire de filtre,
      qui distribue les tâches à différents fournisseurs de filtrage en fonction
      du contenu réel à filtrer à l'exécution.  Tout filtre peut se voir soit
      inséré directement dans la chaîne et lancé inconditionnellement, soit
      utilisé comme un fournisseur de filtrage et inséré dynamiquement.
      Par exemple,</p>
      <ul>
      <li>un filtre de traitement HTML sera lancé uniquement si le contenu est
      de type text/html ou application/xhtml+xml</li>
      <li>Un filtre de compression sera lancé uniquement si les données en entrée
      sont de type compressible et non déjà compressées</li>
      <li>Un filtre de conversion de jeux de caractères ne sera inséré que si
      le document texte n'est pas déjà dans le jeu de caractères voulu</li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="service" id="service">Présentation des filtres en tant que service HTTP</a></h2>
      
      
      <p>Les filtres permettent de traiter les requêtes des clients avant
      traitement par le serveur, ainsi que les contenus issus du serveur avant de les renvoyer
      au client. Le module <code class="module"><a href="./mod/mod_reflector.html">mod_reflector</a></code> permet aussi
      d'utiliser les filtres pour traiter les requêtes des clients avant de
      les renvoyer directement à ces derniers.</p>
      
      <p>Le module <code class="module"><a href="./mod/mod_reflector.html">mod_reflector</a></code> reçoit les requêtes POST des
      clients, et en répercute le corps dans la requête POST constituant la
      réponse, lors de l'envoi de cette dernière au client en passant à travers la
      pile de filtres en sortie.</p>
      
      <p>Cette technique peut être utilisée comme alternative à un service web
      s'exécutant à l'intérieur de la pile d'un serveur d'applications, où un
      filtre en sortie effectue la transformation requise sur le corps de la
      requête. Par exemple, on peut utiliser le module
      <code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code> pour fournir un service général de
      compression ; un filtre de transformation d'images peut aussi se voir
      mué en service de transformation d'images.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="using" id="using">Utilisation des filtres</a></h2>
      
      <p>Il y a deux manières d'utiliser le filtrage : Simple et Dynamique.
      En général, vous utiliserez l'une ou l'autre méthode; le mélange des deux
      peut avoir des conséquences inattendues (bien que le filtrage simple en entrée
      puisse être associé sans problème avec le filtrage simple ou dynamique
      en sortie).</p>
      <p>La méthode Simple est la seule permettant de configurer les filtres
      en entrée, et suffit pour les filtres en sortie pour lesquels vous avez besoin
      d'une chaîne de filtres statique.
      Les directives correspondantes sont
          <code class="directive"><a href="./mod/core.html#setinputfilter">SetInputFilter</a></code>,
          <code class="directive"><a href="./mod/core.html#setoutputfilter">SetOutputFilter</a></code>,
          <code class="directive"><a href="./mod/mod_mime.html#addinputfilter">AddInputFilter</a></code>,
          <code class="directive"><a href="./mod/mod_mime.html#addoutputfilter">AddOutputFilter</a></code>,
          <code class="directive"><a href="./mod/mod_mime.html#removeinputfilter">RemoveInputFilter</a></code>, et
          <code class="directive"><a href="./mod/mod_mime.html#removeoutputfilter">RemoveOutputFilter</a></code>.</p>
      
      <p>La méthode Dynamique permet une configuration dynamique des filtres en
      sortie à la fois statique et flexible, comme discuté dans la page
      <code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code>.
      Les directives correspondantes sont
          <code class="directive"><a href="./mod/mod_filter.html#filterchain">FilterChain</a></code>,
          <code class="directive"><a href="./mod/mod_filter.html#filterdeclare">FilterDeclare</a></code>, et
          <code class="directive"><a href="./mod/mod_filter.html#filterprovider">FilterProvider</a></code>.</p>
      
      <p>Une autre directive <code class="directive"><a href="./mod/mod_filter.html#addoutputfilterbytype">AddOutputFilterByType</a></code> est encore supportée,
      mais obsolète. Utilisez la
      configuration dynamique à la place.</p>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/filter.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/filter.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/filter.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/filter.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/filter.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/filter.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/filter.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/env.html.ko.euc-kr���������������������������������������������������������0000644�0000000�0000050�00000054223�13412755316�016731� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¾ÆÆÄÄ¡ÀÇ È¯°æº¯¼ö - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>¾ÆÆÄÄ¡ÀÇ È¯°æº¯¼ö</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/env.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/env.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/env.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/env.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/env.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p>¾ÆÆÄÄ¡ À¥¼­¹ö´Â <em>ȯ°æº¯¼ö(environment variable)</em>¶ó´Â
          º¯¼ö¿¡ Á¤º¸¸¦ ÀúÀåÇÒ ¼ö ÀÖ´Ù. ÀÌ Á¤º¸¸¦ »ç¿ëÇÏ¿© ·Î±×³ª
          Á¢±ÙÁ¦¾î µî ¿©·¯ ÀÛ¾÷À» Á¶ÀýÇÑ´Ù. ¶Ç, ȯ°æº¯¼ö´Â CGI ½ºÅ©¸³Æ®¿Í
          °°Àº ¿ÜºÎ ÇÁ·Î±×·¥°ú Åë½ÅÇÏ´Â ¼ö´ÜÀÌ µÈ´Ù. ÀÌ ¹®¼­´Â ȯ°æº¯¼ö¸¦
          ´Ù·ç°í »ç¿ëÇÏ´Â ´Ù¾çÇÑ ¹æ¹ýµéÀ» ¼³¸íÇÑ´Ù.</p>
      
          <p>ÀÌ º¯¼öµéÀ» <em>ȯ°æº¯¼ö</em>¶ó°í ºÎ¸£Áö¸¸, ¿î¿µÃ¼Á¦¿¡¼­
          ¸»Çϴ ȯ°æº¯¼ö¿Í ´Ù¸£´Ù. ÀÌ º¯¼ö´Â ¾ÆÆÄÄ¡ ³»ºÎ¿¡ ÀúÀåµÇ°í
          »ç¿ëµÈ´Ù. ȯ°æº¯¼ö´Â CGI ½ºÅ©¸³Æ®³ª Server Side Include
          ½ºÅ©¸³Æ®·Î ³Ñ°ÜÁú¶§¸¸ ½ÇÁ¦ ¿î¿µÃ¼Á¦ ȯ°æº¯¼ö°¡ µÈ´Ù. ¼­¹ö¸¦
          ½ÇÇàÇÏ´Â ¿î¿µÃ¼Á¦ ȯ°æÀ» ¼öÁ¤ÇÏ°í ½Í´Ù¸é ¿î¿µÃ¼Á¦ ½©¿¡¼­
          ȯ°æÀ» ¼öÁ¤ÇØ¾ß ÇÑ´Ù.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#setting">ȯ°æº¯¼ö ¼³Á¤Çϱâ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#using">ȯ°æº¯¼ö »ç¿ëÇϱâ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#special">Ưº°ÇÑ ¸ñÀûÀÇ È¯°æº¯¼ö</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#examples">¿¹Á¦</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="setting" id="setting">ȯ°æº¯¼ö ¼³Á¤Çϱâ</a></h2>
          
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_env.html">mod_env</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li><li><code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code></li><li><code class="module"><a href="./mod/mod_unique_id.html">mod_unique_id</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_setenvif.html#browsermatch">BrowserMatch</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#browsermatchnocase">BrowserMatchNoCase</a></code></li><li><code class="directive"><a href="./mod/mod_env.html#passenv">PassEnv</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code></li><li><code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#setenvifnocase">SetEnvIfNoCase</a></code></li><li><code class="directive"><a href="./mod/mod_env.html#unsetenv">UnsetEnv</a></code></li></ul></td></tr></table>
      
          <h3><a name="basic-manipulation" id="basic-manipulation">±âº»ÀûÀΠȯ°æ¼³Á¤</a></h3>
              
      
              <p>¾ÆÆÄÄ¡¿¡¼­ ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÏ´Â °¡Àå ±âº»ÀûÀÎ ¹æ¹ýÀº
              ¹«Á¶°ÇÀûÀÎ <code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code> Áö½Ã¾î¸¦ »ç¿ëÇÏ´Â °ÍÀÌ´Ù. <code class="directive"><a href="./mod/mod_env.html#passenv">PassEnv</a></code> Áö½Ã¾î¸¦ »ç¿ëÇÏ¿©
              ¼­¹ö¸¦ ½ÃÀÛÇÑ ½©¿¡¼­ ȯ°æº¯¼ö¸¦ °¡Á®¿Ã ¼öµµ ÀÖ´Ù.</p>
      
          
          <h3><a name="conditional" id="conditional">¿äû¿¡ µû¸¥ Á¶°ÇºÎ ¼³Á¤</a></h3>
              
      
              <p>´õ À¯¿¬ÇϰÔ, mod_setenvif°¡ Á¦°øÇÏ´Â Áö½Ã¾î´Â ¿äû¸¶´Ù
              ¿äûÀÇ Æ¯Â¡¿¡ µû¶ó ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù. ¿¹¸¦ µé¾î, ƯÁ¤
              ºê¶ó¿ìÀú·Î (User-Agent) ¿äûÇϰųª ƯÁ¤ Referer (¸ÂÃã¹ýÀÌ
              Ʋ¸®Áö ¾Ê¾Ò´Ù) Çì´õ°¡ ÀÖ´Â °æ¿ì¿¡¸¸ º¯¼ö¸¦ ¼³Á¤ÇÒ ¼ö
              ÀÖ´Ù. ½ÉÁö¾î mod_rewrite¿¡ ÀÖ´Â <code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code>ÀÇ
              <code>[E=...]</code> ¿É¼ÇÀ» »ç¿ëÇÏ¿© ´õ À¯¿¬ÇÏ°Ô È¯°æº¯¼ö¸¦
              ¼³Á¤ÇÒ ¼öµµ ÀÖ´Ù.</p>
      
          
          <h3><a name="unique-identifiers" id="unique-identifiers">À¯ÀÏÇÑ ½Äº°ÀÚ</a></h3>
              
      
              <p>¸¶Áö¸·À¸·Î mod_unique_id´Â °¢ ¿äû¿¡ ´ëÇØ ¾î¶² °æ¿ì¿¡µµ
              "¸ðµç" ¿äûÁß¿¡ È®½ÇÈ÷ À¯ÀÏÇÑ(°ãÄ¡Áö¾ÊÀº) °ªÀ¸·Î
              <code>UNIQUE_ID</code> ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù.</p>
      
          
          <h3><a name="standard-cgi" id="standard-cgi">Ç¥ÁØ CGI º¯¼ö</a></h3>
              
      
              <p>CGI ½ºÅ©¸³Æ®¿Í SSI ¹®¼­´Â ¾ÆÆÄÄ¡ ¼³Á¤¿¡¼­ ¼³Á¤ÇÏ¿´°Å³ª
              ½©¿¡¼­ °¡Á®¿Â ȯ°æº¯¼ö ¿Ü¿¡ Ãß°¡·Î <a href="http://cgi-spec.golux.com/">CGI ±Ô¾à</a>ÀÌ ±ÔÁ¤ÇÑ
              ¿äû¿¡ ´ëÇÑ Á¤º¸¸¦ ¾Ë·ÁÁִ ȯ°æº¯¼öµéÀ» ¹Þ´Â´Ù.</p>
      
          
          <h3><a name="caveats" id="caveats">ÁÖÀÇÇÒ Á¡</a></h3>
              
      
              <ul>
                <li>ȯ°æ¼³Á¤ Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© Ç¥ÁØ CGI º¯¼ö¸¦ ¹«½ÃÇϰųª
                ¼öÁ¤ÇÒ ¼ö ¾ø´Ù.</li>
      
                <li><a href="suexec.html">suexec</a>°¡ CGI ½ºÅ©¸³Æ®¸¦
                ½ÇÇàÇÏ´Â °æ¿ì, ½ÃÀÛÇϱâÀü¿¡ CGI ½ºÅ©¸³Æ®ÀÇ È¯°æÀº
                <em>¾ÈÀüÇÑ</em> º¯¼öµé¸¸ °¡Áöµµ·Ï û¼ÒµÈ´Ù.
                <em>¾ÈÀüÇÑ</em> º¯¼ö ¸ñ·ÏÀº ÄÄÆÄÀϽÃ
                <code>suexec.c</code>¿¡ Á¤ÀǵȴÙ.</li>
      
                <li>Æ÷ÆÃÀ» À§ÇØ È¯°æº¯¼ö À̸§¿¡´Â ¿ÀÁ÷ ¹®ÀÚ, ¼ýÀÚ,
                ¹ØÁÙ¹®ÀÚ¸¸ »ç¿ëÇÏ´Â °ÍÀÌ ÁÁ´Ù. ¶Ç, ù¹øÂ° ¹®ÀÚ·Î
                ¼ýÀÚ¸¦ »ç¿ëÇÏÁö¾Ê´Â °ÍÀÌ ÁÁ´Ù. CGI ½ºÅ©¸³Æ®³ª SSI
                ÆäÀÌÁö¿¡ ³Ñ¾î°¥¶§ ÀÌ¿ÜÀÇ ¹®ÀÚ´Â ¹ØÁÙ·Î ´ëüµÈ´Ù.</li>
              </ul>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="using" id="using">ȯ°æº¯¼ö »ç¿ëÇϱâ</a></h2>
          
      
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_authz_host.html">mod_authz_host</a></code></li><li><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code></li><li><code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code></li><li><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="./mod/mod_log_config.html">mod_log_config</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_authz_host.html#allow">Allow</a></code></li><li><code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code></li><li><code class="directive"><a href="./mod/mod_authz_host.html#deny">Deny</a></code></li><li><code class="directive"><a href="./mod/mod_ext_filter.html#extfilterdefine">ExtFilterDefine</a></code></li><li><code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code></li><li><code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code></li></ul></td></tr></table>
      
          <h3><a name="cgi-scripts" id="cgi-scripts">CGI ½ºÅ©¸³Æ®</a></h3>
              
      
              <p>ȯ°æº¯¼öÀÇ ÁÖµÈ ¿ëµµÁß Çϳª´Â CGI ½ºÅ©¸³Æ®¿Í Á¤º¸¸¦
              ±³È¯ÇÏ´Â °ÍÀÌ´Ù. ¾Õ¿¡¼­ ¼³¸íÇßµíÀÌ ¾ÆÆÄÄ¡ ¼³Á¤¿¡¼­ ¼³Á¤ÇÑ
              º¯¼ö¿Ü¿¡ ¿äû¿¡ ´ëÇÑ Ç¥ÁØ Á¤º¸¸¦ °¡Áø º¯¼ö°¡ CGI ½ºÅ©¸³Æ®·Î
              ³Ñ¾î°£´Ù. ´õ ÀÚ¼¼ÇÑ ³»¿ëÀº <a href="howto/cgi.html">CGI
              ÅõÅ丮¾ó</a>À» Âü°íÇ϶ó.</p>
      
          
          <h3><a name="ssi-pages" id="ssi-pages">SSI ÆäÀÌÁö</a></h3>
              
      
              <p>mod_includeÀÇ <code>INCLUDES</code> ÇÊÅͰ¡ ó¸®ÇÏ´Â
              ¼­¹öÆÄ½Ì (SSI) ¹®¼­´Â <code>echo</code> ¿ä¼Ò¸¦ »ç¿ëÇÏ¿©
              ȯ°æº¯¼ö¸¦ Ãâ·ÂÇÒ ¼ö ÀÖ°í, ȯ°æº¯¼ö¸¦ »ç¿ëÇÏ¿© ¿äûÀÇ
              Ư¡¿¡ µû¶ó È帧Á¦¾î ¿ä¼Ò·Î ÆäÀÌÁöÀÇ ÀϺθ¦ º¯°æÇÒ ¼ö
              ÀÖ´Ù. ¾ÆÆÄÄ¡´Â ¶Ç SSI ¹®¼­¿¡°Ô À§¿¡¼­ ¼³¸íÇÑ Ç¥ÁØ CGI
              ȯ°æº¯¼ö¸¦ Á¦°øÇÑ´Ù. ´õ ÀÚ¼¼ÇÑ ³»¿ëÀº <a href="howto/ssi.html">SSI ÅõÅ丮¾ó</a>À» Âü°íÇ϶ó.</p>
      
          
          <h3><a name="access-control" id="access-control">Á¢±ÙÁ¦¾î</a></h3>
              
      
              <p><code>allow from env=</code>°ú <code>deny from env=</code>
              Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ȯ°æº¯¼ö °ª¿¡ µû¶ó ¼­¹ö·ÎÀÇ Á¢±ÙÀ»
              Á¶ÀýÇÒ ¼ö ÀÖ´Ù. <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code>¿Í °°ÀÌ »ç¿ëÇϸé
              Ŭ¶óÀ̾ðÆ®ÀÇ Æ¯Â¡¿¡ µû¶ó ÀÚÀ¯·Ó°Ô ¼­¹ö·ÎÀÇ Á¢±ÙÀ» Á¦¾îÇÒ
              ¼ö ÀÖ´Ù. ¿¹¸¦ µé¾î, ƯÁ¤ ºê¶ó¿ìÀúÀÇ (User-Agent) Á¢±ÙÀ»
              °ÅºÎÇÒ ¼ö ÀÖ´Ù.</p>
      
          
          <h3><a name="logging" id="logging">Á¶°ÇºÎ ·Î±×</a></h3>
              
      
              <p><code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code>ÀÇ
              <code>%e</code> ¿É¼ÇÀ» »ç¿ëÇÏ¿© ȯ°æº¯¼ö¸¦ Á¢±Ù ·Î±×¿¡
              ±â·ÏÇÒ ¼ö ÀÖ´Ù. ¶Ç, <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> Áö½Ã¾îÀÇ
              Á¶°ÇºÎ Çü½ÄÀ» »ç¿ëÇϸé ȯ°æº¯¼öÀÇ »óȲ¿¡ µû¶ó ¿äûÀ»
              ·Î±×ÇÒÁö ¿©ºÎ¸¦ °áÁ¤ÇÒ ¼ö ÀÖ´Ù. <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code>¿Í °°ÀÌ »ç¿ëÇÏ¿©
              ¾î¶² ¿äûÀ» ·Î±×ÇÒÁö ÀÚÀ¯·Ó°Ô °áÁ¤ÇÒ ¼ö ÀÖ´Ù. ¿¹¸¦ µé¾î,
              ÆÄÀϸíÀÌ <code>gif</code>·Î ³¡³ª´Â ¿äûÀº ·Î±×ÇÏÁö ¾Ê°Å³ª,
              ¿ÜºÎ ³×Æ®¿÷¿¡ Àִ Ŭ¶óÀ̾ðÆ®ÀÇ ¿äû¸¸À» ·Î±×ÇÒ ¼ö ÀÖ´Ù.</p>
      
          
          <h3><a name="response-headers" id="response-headers">Á¶°ÇºÎ ÀÀ´ä Çì´õ</a></h3>
              
      
              <p><code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code>
              Áö½Ã¾î´Â Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ÀÀ´äÀ» º¸³¾¶§ ȯ°æº¯¼öÀÇ À¯¹«¿¡
              µû¶ó ¾î¶² HTTP Çì´õ¸¦ Æ÷ÇÔÇÒÁö °áÁ¤ÇÒ ¼ö ÀÖ´Ù. ¿¹¸¦
              µé¾î, Ŭ¶óÀ̾ðÆ®ÀÇ ¿äû¿¡ ƯÁ¤ Çì´õ°¡ ÀÖ´Â °æ¿ì¿¡¸¸
              ¾î¶² ÀÀ´ä Çì´õ¸¦ º¸³¾ ¼ö ÀÖ´Ù.</p>
      
          
      
          <h3><a name="external-filter" id="external-filter">¿ÜºÎ ÇÊÅÍ ½ÇÇàÇϱâ</a></h3>
              
      
              <p><code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code>ÀÇ <code class="directive"><a href="./mod/mod_ext_filter.html#extfilterdefine">ExtFilterDefine</a></code>
              Áö½Ã¾î·Î ¼³Á¤ÇÑ ¿ÜºÎ ÇÊÅ͸¦ <code>disableenv=</code>¿Í
              <code>enableenv=</code> ¿É¼ÇÀ» »ç¿ëÇÏ¿© ȯ°æº¯¼ö¿¡ µû¶ó
              ¼±ÅÃÀûÀ¸·Î ½ÇÇàÇÒ ¼ö ÀÖ´Ù.</p>
          
      
          <h3><a name="url-rewriting" id="url-rewriting">URL ÀçÀÛ¼º(Rewriting)</a></h3>
              
      
              <p><code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code>ÀÇ
              <em>TestString</em>¿¡ <code>%{ENV:...}</code> Çü½ÄÀ»
              »ç¿ëÇϸé mod_rewriteÀÇ ÀçÀÛ¼º ¿£ÁøÀÌ È¯°æº¯¼ö¿¡ µû¶ó
              ´Ù¸£°Ô ÇൿÇÑ´Ù. mod_rewrite¿¡¼­ ¾Õ¿¡ <code>ENV:</code>¸¦
              ºÙÀÌÁö¾Ê°í Á¢±ÙÇÏ´Â º¯¼ö´Â ½ÇÁ¦ ȯ°æº¯¼ö°¡ ¾Æ´ÔÀ» ÁÖÀÇÇ϶ó.
              ±×µéÀº ´Ù¸¥ ¸ðµâ¿¡¼­ ÀÐÀ» ¼ö ¾ø´Â mod_rewrite¿¡ ÇÑÁ¤µÈ
              º¯¼ö´Ù.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="special" id="special">Ưº°ÇÑ ¸ñÀûÀÇ È¯°æº¯¼ö</a></h2>
          
      
              <p>Ŭ¶óÀÌ¾ðÆ®¿Í ¿øÈ°ÇÑ µ¿ÀÛÇϱâÀ§ÇØ ¾ÆÆÄÄ¡´Â Ưº°ÇÑ
              Ŭ¶óÀÌ¾ðÆ®¿¡ ´ëÇØ ÀÚ½ÅÀÇ ÇൿÀ» ¼öÁ¤ÇÑ´Ù. º¸Åë <code class="directive"><a href="./mod/mod_setenvif.html#browsermatch">BrowserMatch</a></code>¿¡¼­
              ȯ°æº¯¼ö¸¦ Á¤ÀÇÇÏ¿© ÀÌ·± ¹®Á¦¸¦ ÇØ°áÇÑ´Ù. ±×·¯³ª <code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code>¿Í <code class="directive"><a href="./mod/mod_env.html#passenv">PassEnv</a></code>·Îµµ °¡´ÉÇÏ´Ù.</p>
      
          <h3><a name="downgrade" id="downgrade">downgrade-1.0</a></h3>
              
      
              <p>¿äûÀÌ ÀÌÈÄ ¹öÀüÀ» »ç¿ëÇÏ´õ¶óµµ HTTP/1.0 ¿äûÀ¸·Î
              ó¸®ÇÑ´Ù.</p>
      
          
          <h3><a name="force-gzip" id="force-gzip">force-gzip</a></h3>
              
                <p><code>DEFLATE</code> ÇÊÅ͸¦ »ç¿ëÇÒ¶§ ÀÌ È¯°æº¯¼ö´Â
                ºê¶ó¿ìÀúÀÇ accept-encoding ¼³Á¤À» ¹«½ÃÇÏ°í ¹«Á¶°Ç
                ¾ÐÃàµÈ °á°ú¸¦ º¸³½´Ù.</p>
          
          <h3><a name="force-no-vary" id="force-no-vary">force-no-vary</a></h3>
              
      
              <p>ÀÀ´äÀ» Ŭ¶óÀÌ¾ðÆ®¿¡°Ô º¸³»±â Àü¿¡ ÀÀ´ä Çì´õ¿¡¼­
              <code>Vary</code> Çʵ带 »«´Ù. ¾î¶² Ŭ¶óÀÌ¾ðÆ®´Â ÀÌ
              Çʵ带 Á¦´ë·Î ÇØ¼®ÇÏÁö ¸øÇÑ´Ù. ÀÌ º¯¼ö´Â ÀÌ·± ¹®Á¦¸¦
              ÇØ°áÇÑ´Ù. ¶ÇÇÑ, ÀÌ º¯¼ö´Â
              <strong>force-response-1.0</strong>À» °¡Á¤ÇÑ´Ù.</p>
      
          
          <h3><a name="force-response" id="force-response">force-response-1.0</a></h3>
              
      
              <p>HTTP/1.0 ¿äûÀ» Çϴ Ŭ¶óÀÌ¾ðÆ®¿¡°Ô HTTP/1.0 ÀÀ´äÀ»
              °­Á¦ÇÑ´Ù. ¿ø·¡ AOL ÇÁ·Ï½Ã¿¡ ¹®Á¦°¡ À־ ¸¸µé¾îÁ³´Ù.
              ¾î¶² HTTP/1.0 Ŭ¶óÀÌ¾ðÆ®´Â HTTP/1.1 ÀÀ´äÀ» ¹ÞÀ¸¸é Á¦´ë·Î
              µ¿ÀÛÇÏÁö ¾ÊÀ¸¹Ç·Î, ÀÌ ¹®Á¦¸¦ ÇØ°áÇϱâÀ§ÇØ »ç¿ëÇÑ´Ù.</p>
          
      
          <h3><a name="gzip-only-text-html" id="gzip-only-text-html">gzip-only-text/html</a></h3>
              
      
            <p>°ªÀÌ "1"À̸é <code>text/html</code>ÀÌ ¾Æ´Ñ content-type¿¡
            ´ëÇØ <code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code>ÀÇ DEFLATE Ãâ·ÂÇÊÅ͸¦
            »ç¿ëÇÏÁö ¾Ê´Â´Ù. (gzip »Ó¸¸ ¾Æ´Ï¶ó "identity"°¡ ¾Æ´Ñ ¸ðµç
            ÀÎÄÚµùÀÇ) Á¤ÀûÀ¸·Î ¾ÐÃàÇÑ ÆÄÀÏÀÇ °æ¿ì¿¡µµ
            <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>Àº ÀÌ º¯¼ö¸¦ Âü°íÇÑ´Ù.</p>
          
      
          <h3><a name="no-gzip" id="no-gzip">no-gzip</a></h3>
      
              <p>ÀÌ ¿É¼ÇÀ» ¼³Á¤Çϸé <code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code>ÀÇ
              <code>DEFLATE</code> ÇÊÅ͸¦ »ç¿ëÇÏÁö ¾Ê°í,
              <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>Àº ÀÎÄÚµùµÈ ÀÚ¿øÀ»
              º¸³»Áö ¾Ê´Â´Ù.</p>
      
          
      
          <h3><a name="nokeepalive" id="nokeepalive">nokeepalive</a></h3>
              
      
              <p><code class="directive"><a href="./mod/core.html#keepalive">KeepAlive</a></code>¸¦
              ¹«½ÃÇÑ´Ù.</p>
      
          
      
          <h3><a name="prefer-language" id="prefer-language">prefer-language</a></h3>
      
              <p>ÀÌ º¯¼ö´Â <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>ÀÇ Çൿ¿¡
              ¿µÇâÀ» ¹ÌÄ£´Ù. º¯¼ö°¡ (<code>en</code>, <code>ja</code>,
              <code>x-klingon</code> µî) ¾ð¾îű׸¦ ´ã°íÀÖ´Ù¸é,
              <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>´Â ±× ¾ð¾î·Î µÈ º¯ÇüÀ»
              º¸³»±æ ½ÃµµÇÑ´Ù. ±×·± º¯ÇüÀÌ ¾ø´Ù¸é ÀϹÝÀûÀÎ <a href="content-negotiation.html">Çù»ó</a> °úÁ¤À» ½ÃÀÛÇÑ´Ù.</p>
      
          
      
          <h3><a name="redirect-carefully" id="redirect-carefully">redirect-carefully</a></h3>
              
      
              <p>¼­¹ö°¡ ´õ Á¶½ÉÈ÷ Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ¸®´ÙÀÌ·º¼ÇÀ» º¸³½´Ù.
              º¸Åë ¸®´ÙÀÌ·º¼ÇÀ» ó¸®Çϴµ¥ ¹®Á¦°¡ Àִ Ŭ¶óÀ̾ðÆ®À»
              À§ÇØ »ç¿ëÇÑ´Ù. ¿ø·¡ MicrosoftÀÇ WebFolders ¼ÒÇÁÆ®¿þ¾î°¡
              DAV ¸Þ½áµå¸¦ ÅëÇØ µð·ºÅ丮 ÀÚ¿øÀÇ ¸®´ÙÀÌ·º¼ÇÀ» ó¸®Çϴµ¥
              ¹®Á¦°¡ À־ ¸¸µé¾îÁ³´Ù.</p>
      
          
      
         <h3><a name="suppress-error-charset" id="suppress-error-charset">suppress-error-charset</a></h3>
             
      
          <p><em>2.0.40 ÀÌÈÄ ¹öÀü¿¡ ÀÖ´Ù</em></p>
      
          <p>¾ÆÆÄÄ¡°¡ Ŭ¶óÀ̾ðÆ®ÀÇ ¿äû¿¡ ´ëÇÑ ÀÀ´äÀ¸·Î ¸®´ÙÀÌ·º¼ÇÀ»
          º¸³¾¶§ Ŭ¶óÀÌ¾ðÆ®°¡ ÀÚµ¿À¸·Î ¸®´ÙÀÌ·º¼ÇÀ» µû¶ó°¡Áö ¸øÇÏ´Â(ȤÀº
          ¾Ê´Â) °æ¿ì¿¡ ´ëºñÇÏ¿© ÀÀ´ä¿¡ »ç¿ëÀÚ¿¡°Ô º¸¿©ÁÙ ¹®±¸¸¦ Æ÷ÇÔÇÑ´Ù.
          ¾ÆÆÄÄ¡´Â º¸Åë ÀÌ ±ÛÀ» ¾ÆÆÄÄ¡°¡ »ç¿ëÇÏ´Â ¹®ÀÚÁýÇÕÀÎ ISO-8859-1·Î
          Ç¥½ÃÇÑ´Ù.</p>
          <p>±×·¯³ª ¸®´ÙÀÌ·º¼ÇµÈ ÆäÀÌÁö°¡ ´Ù¸¥ ¹®ÀÚÁýÇÕÀ» »ç¿ëÇÒ °æ¿ì
          ¾î¶² ÀÌ»óÇÑ ºê¶ó¿ìÀú ¹öÀüÀº ½ÇÁ¦ ÆäÀÌÁö°¡ ¾Æ´Ï¶ó ¸®´ÙÀÌ·º¼Ç
          ÆäÀÌÁöÀÇ ¹®ÀÚÁýÇÕÀ» »ç¿ëÇÏ·Á°í ÇÑ´Ù. ¿¹¸¦ µé¾î, ±×¸®½º¾î°¡
          ÀÌ»óÇÏ°Ô º¸ÀÏ ¼ö ÀÖ´Ù.</p>
          <p>ÀÌ È¯°æº¯¼ö´Â ¾ÆÆÄÄ¡°¡ ¸®´ÙÀÌ·º¼Ç ÆäÀÌÁö¿¡ ¹®ÀÚÁýÇÕÀ»
          ¼³Á¤ÇÏÁö¾Êµµ·Ï ÇÏ¿©, ÀÌ·± ºê¶ó¿ìÀú°¡ ½ÇÁ¦ ÆäÀÌÁöÀÇ ¹®ÀÚÁýÇÕÀ»
          ¿Ã¹Ù·Î »ç¿ëÇÏ°Ô ¸¸µç´Ù.</p>
      
         
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">¿¹Á¦</a></h2>
          
      
          <h3><a name="misbehaving" id="misbehaving">À߸ø µ¿ÀÛÇϴ Ŭ¶óÀÌ¾ðÆ®µéÀ» À§ÇØ ÇÁ·ÎÅäÄÝ Çൿ
              º¯°æÇϱâ</a></h3>
              
      
              <p>Ŭ¶óÀÌ¾ðÆ®µéÀÇ ÀÌ¹Ì ¾Ë·ÁÁø ¹®Á¦¸¦ ÇØ°áÇϱâÀ§ÇØ
              httpd.conf¿¡ ´ÙÀ½ ³»¿ëÀ» Æ÷ÇÔÇÏ±æ ¹Ù¶õ´Ù.</p>
      <div class="example"><pre>#
      # ´ÙÀ½ Áö½Ã¾îµéÀº ÀϹÝÀûÀÎ HTTP ÀÀ´äÀ» º¯°æÇÑ´Ù.
      # ù¹øÂ° Áö½Ã¾î´Â Netscape 2.x¿Í À̸¦ °¡ÀåÇÑ ºê¶ó¿ìÀú¿¡°Ô
      # keepalive¸¦ »ç¿ëÇÏÁö ¾Ê´Â´Ù. ÀÌµé ºê¶ó¿ìÀú ±¸Çö¿¡ ¹®Á¦°¡ ÀÖ´Ù.
      # µÎ¹øÂ° Áö½Ã¾î´Â HTTP/1.1 ±¸ÇöÀÌ À߸øµÇ¾ú°í 301À̳ª 302
      # (¸®´ÙÀÌ·º¼Ç) ÀÀ´ä¿¡ »ç¿ëÇÑ keepalive¸¦ Á¦´ë·Î Áö¿øÇÏÁö
      # ¸øÇÏ´Â Microsoft Internet Explorer 4.0b2¸¦ À§ÇÑ °ÍÀÌ´Ù.
      #
      BrowserMatch "Mozilla/2" nokeepalive
      BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
      
      #
      # ´ÙÀ½ Áö½Ã¾î´Â ±âº»ÀûÀÎ HTTP/1.1 ÀÀ´äÀ» ÀÌÇØÇÏÁö ¸øÇÏ¿©
      # HTTP/1.0 ±Ô¾àÀ» ¾î±â´Â ºê¶ó¿ìÀú¿¡°Ô HTTP/1.1 ÀÀ´äÀ» º¸³»Áö ¾Ê´Â´Ù.
      #
      BrowserMatch "RealPlayer 4\.0" force-response-1.0
      BrowserMatch "Java/1\.0" force-response-1.0
      BrowserMatch "JDK/1\.0" force-response-1.0</pre></div>
      
          
          <h3><a name="no-img-log" id="no-img-log">Á¢±Ù ·Î±×¿¡ À̹ÌÁö¿¡ ´ëÇÑ ¿äûÀ» ·Î±×ÇÏÁö ¾Ê±â</a></h3>
              
      
              <p>ÀÌ ¿¹Á¦´Â À̹ÌÁö¿¡ ´ëÇÑ ¿äûÀ» Á¢±Ù ·Î±×¿¡ ±â·ÏÇÏÁö
              ¾Ê´Â´Ù. ƯÁ¤ µð·ºÅ丮¿¡ ´ëÇÑ È¤Àº ƯÁ¤ È£½ºÆ®¿¡¼­ ¿Â
              ¿äûÀ» ·Î±×ÇÏÁö ¾Êµµ·Ï ½±°Ô ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù.</p>
          <div class="example"><pre>SetEnvIf Request_URI \.gif image-request
      SetEnvIf Request_URI \.jpg image-request
      SetEnvIf Request_URI \.png image-request
      CustomLog logs/access_log common env=!image-request</pre></div>
      
          
          <h3><a name="image-theft" id="image-theft">"À̹ÌÁö µµµÏ" ¹æÁö</a></h3>
              
      
              <p>ÀÌ ¿¹´Â ÇöÀç ¼­¹ö¿ÜÀÇ »ç¿ëÀÚ°¡ ÆäÀÌÁö¿¡ ¼­¹ö¿¡ ÀÖ´Â
              À̹ÌÁö¸¦ Æ÷ÇÔÇÏÁö ¸øÇϵµ·Ï ÇÏ´Â ¹æ¹ýÀ» ¼³¸íÇÑ´Ù. ÀÌ
              ¼³Á¤À» ±ÇÀåÇÏÁö´Â ¾ÊÀ¸¸ç, Á¦ÇÑµÈ °æ¿ì¿¡¸¸ µ¿ÀÛÇÑ´Ù.
              ¿ì¸®´Â ¸ðµç À̹ÌÁö°¡ /web/images µð·ºÅ丮 ¾È¿¡ ÀÖ´Ù°í
              °¡Á¤ÇÑ´Ù.</p>
          <div class="example"><pre>SetEnvIf Referer "^http://www.example.com/" local_referal
      # Referer Á¤º¸¸¦ º¸³»Áö ¾Ê´Â ºê¶ó¿ìÀú¸¦ Çã¿ëÇÑ´Ù
      SetEnvIf Referer "^$" local_referal
      &lt;Directory /web/images&gt;
         Order Deny,Allow
         Deny from all
         Allow from env=local_referal
      &lt;/Directory&gt;</pre></div>
      
              <p>ÀÌ ±â¹ý¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ¼³¸íÀº ApacheToday ÅõÅ丮¾ó "<a href="http://apachetoday.com/news_story.php3?ltsn=2000-06-14-002-01-PS">
          Keeping Your Images from Adorning Other Sites</a>"¸¦ Âü°íÇ϶ó.</p>
          
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/env.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/env.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/env.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/env.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/env.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/env.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/configuring.html.ko.euc-kr�������������������������������������������������0000644�0000000�0000050�00000033327�13412755316�020455� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¼³Á¤ÆÄÀÏ - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>¼³Á¤ÆÄÀÏ</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/configuring.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/configuring.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/configuring.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/configuring.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/configuring.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/configuring.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      <p>ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡ À¥¼­¹ö¸¦ ¼³Á¤ÇÏ´Â ÆÄÀϵéÀ» ¼³¸íÇÑ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#main">ÁÖ¼³Á¤ÆÄÀÏ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#syntax">¼³Á¤ÆÄÀÏ ¹®¹ý</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#modules">¸ðµâ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#scope">Áö½Ã¾î Àû¿ë¹üÀ§</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#htaccess">.htaccess ÆÄÀÏ</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="main" id="main">ÁÖ¼³Á¤ÆÄÀÏ</a></h2>
          
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_mime.html">mod_mime</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#include">Include</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#typesconfig">TypesConfig</a></code></li></ul></td></tr></table>
      
          <p>ÀÏ¹Ý ¹®¼­ ÆÄÀÏÀÎ ¼³Á¤ÆÄÀÏ¿¡ <a href="mod/directives.html">Áö½Ã¾î</a>¸¦ »ç¿ëÇÏ¿© ¾ÆÆÄÄ¡¸¦
          ¼³Á¤ÇÑ´Ù. ÁÖ¼³Á¤ÆÄÀÏÀ» º¸Åë <code>httpd.conf</code>¶ó°í
          ºÎ¸¥´Ù. ÀÌ ÆÄÀÏÀÇ À§Ä¡´Â ÄÄÆÄÀϽà Á¤ÇØÁö³ª, <code>-f</code>
          ¸í·ÉÇà ¿É¼ÇÀ¸·Î ÁöÁ¤ÇØÁÙ ¼ö ÀÖ´Ù. ¶Ç ´Ù¸¥ ¼³Á¤ÆÄÀÏÀ» <code class="directive"><a href="./mod/core.html#include">Include</a></code> Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© Æ÷ÇÔÇÒ
          ¼ö ÀÖ°í, ¿ÍÀϵåÄ«µå¸¦ »ç¿ëÇÏ¿© ¸¹Àº ¼³Á¤ÆÄÀÏÀ» Æ÷ÇÔÇÒ ¼öµµ
          ÀÖ´Ù. ÀÌ °æ¿ì Áö½Ã¾î¸¦ ¾î¶² ¼³Á¤ÆÄÀÏ¿¡³ª »ç¿ëÇØµµ µÈ´Ù.
          ÁÖ¼³Á¤ÆÄÀÏÀ» ¼öÁ¤ÇÏ¸é ¾ÆÆÄÄ¡¸¦ ½ÃÀÛÇϰųª Àç½ÃÀÛÇÑ ÀÌÈÄ¿¡
          ¹Ý¿µµÈ´Ù.</p>
      
          <p>¼­¹ö´Â mime ¹®¼­Å¸ÀÔÀ» ´ãÀº ÆÄÀϵµ Àд´Ù. ÆÄÀϸíÀº
          <code class="directive"><a href="./mod/mod_mime.html#typesconfig">TypesConfig</a></code> Áö½Ã¾î·Î
          ¼³Á¤Çϰí, ±âº»°ªÀº <code>mime.types</code>ÀÌ´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="syntax" id="syntax">¼³Á¤ÆÄÀÏ ¹®¹ý</a></h2>
          
      
          <p>¾ÆÆÄÄ¡ ¼³Á¤ÆÄÀÏÀº ÇÑÁÙ¿¡ ÇÑ Áö½Ã¾î¸¦ »ç¿ëÇÑ´Ù. ÁÙ ¸¶Áö¸·
          ¹®ÀÚ°¡ ¹é½½·¡½¬ "\"À̸é Áö½Ã¾î°¡ ´ÙÀ½ ÁÙ¿¡¼­ °è¼ÓµÊÀ» ¶æÇÑ´Ù.
          ÀÌ °æ¿ì ¹é½½·¡½¬ µÚ¿¡ ¾î¶² ¹®ÀÚ³ª °ø¹éµµ ³ª¿À¸é ¾ÈµÈ´Ù.</p>
      
          <p>¼³Á¤ÆÄÀÏÀÇ Áö½Ã¾î´Â ´ë¼Ò¹®ÀÚ¸¦ ±¸º°ÇÏÁö ¾ÊÁö¸¸, Áö½Ã¾îÀÇ
          ¾Æ±Ô¸ÕÆ®´Â ´ë¼Ò¹®ÀÚ¸¦ ±¸º°ÇÏ´Â °æ¿ì°¡ ÀÖ´Ù. ÇØ½¬¹®ÀÚ "#"·Î
          ½ÃÀÛÇÏ´Â ÁÙÀº ÁÖ¼®À¸·Î ¹«½ÃÇÑ´Ù. ÁÖ¼®À» ¼³Á¤ Áö½Ã¾î¿Í °°Àº
          ÁÙ¿¡ »ç¿ëÇÒ ¼ö <strong>¾ø´Ù</strong>. ºóÁÙ°ú Áö½Ã¾î ¾Õ¿¡ ³ª¿À´Â
          °ø¹éÀº ¹«½ÃÇϹǷÎ, °£°áÇÏ°Ô º¸À̵µ·Ï Áö½Ã¾î¸¦ ÁÙµéÀÓÇÒ(indent)
          ¼ö ÀÖ´Ù.</p>
      
          <p><code>apachectl configtest</code>³ª <code>-t</code> ¸í·ÉÇà
          ¿É¼ÇÀ» »ç¿ëÇÏ¿© ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÏÁö ¾Ê°íµµ ¼³Á¤ÆÄÀÏÀÇ ¹®¹ý
          ¿À·ù¸¦ °Ë»çÇÒ ¼ö ÀÖ´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="modules" id="modules">¸ðµâ</a></h2>
          
      
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_so.html">mod_so</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code></li></ul></td></tr></table>
      
          <p>¾ÆÆÄÄ¡´Â ¸ðµâÈ­µÈ ¼­¹ö´Ù. ÀÌ´Â ¸Å¿ì ±âº»ÀûÀÎ ±â´É¸¸ÀÌ
          ¼­¹ö Çٽɿ¡ Æ÷ÇÔµÇÀÖÀ½À» ¶æÇÑ´Ù. ¾ÆÆÄÄ¡´Â <a href="mod/">¸ðµâ</a>À» Àоîµé¿©¼­ ±â´ÉÀ»
          È®ÀåÇÑ´Ù. ±âº»ÀûÀ¸·Î ÄÄÆÄÀÏÇÏ¸é ¼­¹ö¿¡ <a href="mod/module-dict.html#Status">base</a> ¸ðµâµéÀÌ Æ÷ÇԵȴÙ.
          ¼­¹ö¸¦ <a href="dso.html">µ¿ÀûÀ¸·Î ÀоîµéÀÌ´Â</a> ¸ðµâÀ»
          »ç¿ëÇÒ ¼ö ÀÖ°Ô ÄÄÆÄÀÏÇÏ¿´´Ù¸é ¸ðµâÀ» µû·Î ÄÄÆÄÀÏÇÏ¿© ¾Æ¹«¶§³ª
          <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> Áö½Ã¾î·Î
          Ãß°¡ÇÒ ¼ö ÀÖ´Ù. ±×·¸Áö ¾ÊÀ¸¸é ¸ðµâÀ» Ãß°¡Çϰųª »©±âÀ§ÇØ
          ¾ÆÆÄÄ¡¸¦ ´Ù½Ã ÄÄÆÄÀÏÇØ¾ß ÇÑ´Ù. ¼³Á¤ Áö½Ã¾î¸¦ <code class="directive"><a href="./mod/core.html#ifmodule">IfModule</a></code> ºí·ÏÀ¸·Î °¨½Î¼­ ƯÁ¤
          ¸ðµâÀÌ ÀÖ´Â °æ¿ì¿¡¸¸ ¼±ÅÃÀûÀ¸·Î ó¸®ÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>ÇöÀç ¼­¹ö¿¡ ¾î¶² ¸ðµâÀÌ ÄÄÆÄÀϵÇÀÖ´ÂÁö º¸·Á¸é <code>-l</code>
          ¸í·ÉÇà ¿É¼ÇÀ» »ç¿ëÇÑ´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="scope" id="scope">Áö½Ã¾î Àû¿ë¹üÀ§</a></h2>
          
      
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
          <p>ÁÖ¼³Á¤ÆÄÀÏ¿¡ ÀÖ´Â Áö½Ã¾î´Â ¼­¹ö Àüü¿¡ Àû¿ëµÈ´Ù. Áö½Ã¾î°¡
          ¼­¹öÀÇ ÀϺο¡¸¸ Àû¿ëµÇ°Ô ÇÏ·Á¸é Áö½Ã¾î¸¦ <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>, <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>, <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code> ¼½¼Ç ¾È¿¡ µÎ¾î¾ßÇÑ´Ù.
          ÀÌ ¼½¼ÇµéÀº ±×µéÀÌ °¨½Î´Â Áö½Ã¾îÀÇ Àû¿ë¹üÀ§¸¦ ÆÄÀϽýºÅÛÀ̳ª
          URLÀÇ Æ¯Á¤ À§Ä¡·Î ÇÑÁ¤ÇÑ´Ù. ¶Ç, ¼­·Î °ãÃļ­ »ç¿ëÇÒ ¼ö Àֱ⶧¹®¿¡
          ¸Å¿ì ¼¼¹ÐÇÑ ¼³Á¤ÀÌ °¡´ÉÇÏ´Ù.</p>
      
          <p>¾ÆÆÄÄ¡´Â ¿©·¯ ´Ù¸¥ À¥»çÀÌÆ®¸¦ µ¿½Ã¿¡ ¼­ºñ½ºÇÏ´Â
          ´É·ÂÀÌ ÀÖ´Ù. À̸¦ <a href="vhosts/">°¡»óÈ£½ºÆ®</a>¶ó°í ÇÑ´Ù.
          Áö½Ã¾î¸¦
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          ¼½¼Ç ¾È¿¡ µÎ¾î ƯÁ¤ À¥»çÀÌÆ®¿¡¸¸ Áö½Ã¾î¸¦ Àû¿ëÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>Áö½Ã¾î´Â ´ëºÎºÐ ¾î¶² ¼½¼Ç¿¡ ³ª¿Íµµ µÇÁö¸¸, ¾î¶² Áö½Ã¾î´Â
          ƯÁ¤ Àå¼Ò¿¡¼­ Àǹ̰¡ ¾ø´Ù. ¿¹¸¦ µé¾î ÇÁ·Î¼¼½º »ý¼ºÀ» Á¶ÀýÇÏ´Â
          Áö½Ã¾î´Â ÁÖ¼­¹ö¼³Á¤ Àå¼Ò¿¡¼­¸¸ »ç¿ëÇÒ ¼ö ÀÖ´Ù. Áö½Ã¾î°¡
          ¾î¶² ¼½¼Ç¿¡ À§Ä¡ÇÒ ¼ö ÀÖ´ÂÁö ¾Ë·Á¸é Áö½Ã¾îÀÇ <a href="mod/directive-dict.html#Context">»ç¿ëÀå¼Ò</a>¸¦ È®ÀÎÇ϶ó.
          ´õ ÀÚ¼¼ÇÑ Á¤º¸´Â <a href="sections.html">¾î¶»°Ô Directory,
          Location, Files ¼½¼ÇÀÌ µ¿ÀÛÇϳª</a>¸¦ Âü°íÇ϶ó.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="htaccess" id="htaccess">.htaccess ÆÄÀÏ</a></h2>
          
      
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#accessfilename">AccessFileName</a></code></li><li><code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code></li></ul></td></tr></table>
      
          <p>¾ÆÆÄÄ¡´Â Ưº°ÇÑ ÆÄÀÏÀ» »ç¿ëÇÏ¿© ¼³Á¤À»
          ³ª´²¼­(ºÐ±ÇÀûÀ¸·Î) °ü¸®ÇÒ ¼ö ÀÖ´Ù. ÀÌ Æ¯º°ÇÑ ÆÄÀÏÀ» º¸Åë
          <code>.htaccess</code>¶ó°í ºÎ¸£Áö¸¸, À̸§Àº <code class="directive"><a href="./mod/core.html#accessfilename">AccessFileName</a></code> Áö½Ã¾î·Î
          ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù. <code>.htaccess</code> ÆÄÀÏ¿¡ ÀÖ´Â Áö½Ã¾î´Â
          ÆÄÀÏÀÌ ÀÖ´Â µð·ºÅ丮¿Í ¸ðµç ÇÏÀ§µð·ºÅ丮¿¡ Àû¿ëµÈ´Ù.
          <code>.htaccess</code> ÆÄÀÏÀº ÁÖ¼³Á¤ÆÄÀϰú °°Àº ¹®¹ýÀ»
          µû¸¥´Ù. <code>.htaccess</code> ÆÄÀÏÀº ¸Å ¿äû¶§¸¶´Ù Àб⶧¹®¿¡
          ÆÄÀÏÀ» ¼öÁ¤Çϸé Áï½Ã È¿°ú¸¦ º¼ ¼ö ÀÖ´Ù.</p>
      
          <p>¾î¶² Áö½Ã¾î¸¦ <code>.htaccess</code> ÆÄÀÏ¿¡ »ç¿ëÇÒ ¼ö
          ÀÖ´ÂÁö ¾Ë·Á¸é Áö½Ã¾îÀÇ <a href="mod/directive-dict.html#Context">»ç¿ëÀå¼Ò</a>¸¦
          È®ÀÎÇ϶ó. ¼­¹ö °ü¸®ÀÚ´Â ÁÖ¼³Á¤ÆÄÀÏÀÇ <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> Áö½Ã¾î·Î
          <code>.htaccess</code> ÆÄÀÏ¿¡ ¾î¶² Áö½Ã¾î¸¦ »ç¿ëÇÒ ¼ö ÀÖ´ÂÁö
          Á¶ÀýÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p><code>.htaccess</code> ÆÄÀÏ¿¡ ´ëÇÑ ´õ ÀÚ¼¼ÇÑ Á¤º¸´Â
          <a href="howto/htaccess.html">.htaccess ÅõÅ丮¾ó</a>À»
          Âü°íÇ϶ó.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/configuring.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/configuring.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/configuring.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/configuring.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/configuring.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/configuring.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/configuring.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_0.html.ko.euc-kr��������������������������������������������0000644�0000000�0000050�00000035353�13412755316�021273� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache 2.0ÀÇ »õ·Î¿î ±â´É °³¿ä - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache 2.0ÀÇ »õ·Î¿î ±â´É °³¿ä</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/new_features_2_0.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/new_features_2_0.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_0.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/new_features_2_0.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/new_features_2_0.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_0.html" hreflang="pt-br" rel="alternate" title="Portugu&#234;s (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./ru/new_features_2_0.html" hreflang="ru" rel="alternate" title="Russian">&nbsp;ru&nbsp;</a> |
      <a href="./tr/new_features_2_0.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
        <p>ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡ À¥¼­¹ö 1.3 ¹öÀü°ú 2.0 ¹öÀü°£ÀÇ ÁÖµÈ Â÷ÀÌÁ¡À»
           ¼³¸íÇÑ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#core">ÇÙ½É ºÎºÐ¿¡¼­ ³ª¾ÆÁø Á¡</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#module">¸ðµâ¿¡¼­ ³ª¾ÆÁø Á¡</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="upgrading.html">1.3¿¡¼­ 2.0À¸·Î ¾÷±×·¹À̵å</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="core" id="core">ÇÙ½É ºÎºÐ¿¡¼­ ³ª¾ÆÁø Á¡</a></h2>
          
      
          <dl>
            <dt>À¯´Ð½º ¾²·¹µå</dt>
      
            <dd>POSIX ¾²·¹µå¸¦ Áö¿øÇÏ´Â À¯´Ð½º ½Ã½ºÅÛ¿¡¼­ ¾ÆÆÄÄ¡¸¦
            ¿©·¯ ÇÁ·Î¼¼½º¿Í ¿©·¯ ¾²·¹µå·Î È¥ÇÕÇØ¼­ ½ÇÇàÇÒ ¼ö ÀÖ´Ù.
            ÀüºÎ´Â ¾Æ´ÏÁö¸¸ ¸¹Àº °æ¿ì È®Àå°¡´É¼º(scalability)À» ³ôÀδÙ.</dd>
      
            <dt>»õ·Î¿î ÄÄÆÄÀÏ ½Ã½ºÅÛ</dt>
      
            <dd>ÄÄÆÄÀÏ ½Ã½ºÅÛÀÌ <code>autoconf</code>¿Í <code>libtool</code>À»
            »ç¿ëÇϵµ·Ï ÀçÀÛ¼ºµÇ¾ú´Ù. ±×·¡¼­ ¾ÆÆÄÄ¡ ±¸¼º ½Ã½ºÅÛÀÌ ´Ù¸¥
            ÆÐŰÁöµé°ú Á»´õ ºñ½ÁÇØÁ³´Ù.</dd>
      
            <dt>¿©·¯ ÇÁ·ÎÅäÄÝ Áö¿ø</dt>
      
            <dd>ÀÌÁ¦ ¾ÆÆÄÄ¡´Â ¿©·¯ ÇÁ·ÎÅäÄÝÀ» ¼­ºñ½ºÇÒ ¼ö ÀÖ´Â ±¸Á¶¸¦
            °®Ãè´Ù. <code class="module"><a href="./mod/mod_echo.html">mod_echo</a></code>°¡ ±× ¿¹·Î ÀÛ¼ºµÇ¾ú´Ù.</dd>
      
            <dt>ºñÀ¯´Ð½º Ç÷¡Æû¿¡ ´ëÇÑ ´õ ³ªÀº Áö¿ø</dt>
      
            <dd>Apache 2.0´Â BeOS, OS/2, À©µµ¿ìÁî¿Í °°Àº ºñÀ¯´Ð½º
            Ç÷¡Æû¿¡¼­ ´õ ºü¸£°í ¾ÈÁ¤È­µÇ¾ú´Ù. ÀÌÁ¦ ¾ÆÆÄÄ¡´Â À̵é
            Ç÷¡Æû¿¡¼­ ¹ö±×°¡ ¸¹°í ¼º´ÉÀÌ ´À·È´ø POSIX ȣȯÃþ ´ë½Å
            ÀÚü API·Î ±¸ÇöµÈ Ç÷¡Æû ƯÀ¯ÀÇ <a href="mpm.html">´ÙÁßó¸® ¸ðµâ</a>
            (MPM)°ú Apache Portable Runtime (APR)À» »ç¿ëÇÏ¿© ±¸ÇöµÈ´Ù.</dd>
      
            <dt>»õ·Î¿î ¾ÆÆÄÄ¡ API</dt>
      
            <dd>¸ðµâ API°¡ 2.0¿¡¼­ »ó´çÈ÷ º¯Çß´Ù. 1.3ÀÇ ¿©·¯ ¸ðµâ
            ¼ø¼­¿Í ¿ì¼±¼øÀ§ ¹®Á¦°¡ »ç¶óÁ³´Ù. 2.0Àº À̸¦ ´ëºÎºÐ ÀÚµ¿À¸·Î
            ó¸®Çϸç, ¸ðµâ ¼ø¼­´Â ÀÌÁ¦ ´õ À¯¿¬ÇÑ ÈÅ(hook) ´ÜÀ§·Î ÁöÁ¤ÇÑ´Ù.
            ¶Ç, ¾ÆÆÄÄ¡ ¼­¹ö ÇÙ½É ºÎºÐÀ» ¼öÁ¤ÇÏÁö ¾Ê°í »õ·Î¿î ¸ðµâ ±â´ÉÀ»
            Á¦°øÇÏ´Â ÇÔ¼ö°¡ Ãß°¡µÇ¾ú´Ù.</dd>
      
            <dt>IPv6 Áö¿ø</dt>
      
            <dd>ÇÏÀ§ Apache Portable Runtine ¶óÀ̺귯¸®°¡ IPv6¸¦ Áö¿øÇÏ´Â
            ½Ã½ºÅÛ¿¡¼­ ¾ÆÆÄÄ¡´Â ±âº»ÀûÀ¸·Î IPv6 ¼ÒÄÏÀ» ±â´Ù¸°´Ù. ¶Ç,
            <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>,
            <code class="directive"><a href="./mod/core.html#namevirtualhost">NameVirtualHost</a></code>,
            <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code> Áö½Ã¾î°¡
            IPv6 ¼ýÀÚ ÁÖ¼Ò¸¦ Áö¿øÇÑ´Ù. (¿¹,
            "<code>Listen [2001:db8::1]:8080</code>").</dd>
      
            <dt>ÇÊÅ͸µ</dt>
      
            <dd>ÀÌÁ¦ ¾ÆÆÄÄ¡ ¸ðµâÀ» ¼­¹ö·Î ¿À°í°¡´Â È帧¿¡ ´ëÇÑ
            ÇÊÅÍ·Î »ç¿ëÇÒ ¼ö ÀÖ´Ù. ¿¹¸¦ µé¾î <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>ÀÇ
            <code>INCLUDES</code> ÇÊÅ͸¦ »ç¿ëÇÏ¿© CGI ½ºÅ©¸³Æ® Ãâ·Â¿¡¼­
            Server Side Include Áö½Ã¾î¸¦ ó¸®ÇÒ ¼ö ÀÖ´Ù.
            <code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code> ¸ðµâÀº CGI ÇÁ·Î±×·¥À»
            Çڵ鷯·Î »ç¿ëÇÏ´Â °Í°ú °°ÀÌ ¿ÜºÎ ÇÁ·Î±×·¥À» ÇÊÅÍ·Î
            »ç¿ëÇÒ ¼ö ÀÖ°Ô ÇÑ´Ù.</dd>
      
            <dt>´Ù±¹¾î ¿À·ù ÀÀ´ä</dt>
      
            <dd>ºê¶ó¿ìÀú·Î º¸³»´Â ¿À·ù ÀÀ´ä¹®ÀÌ ÀÌÁ¦ SSI ¹®¼­¸¦
            »ç¿ëÇÏ¿© ´Ù±¹¾î·Î Á¦°øµÈ´Ù. °ü¸®ÀÚ´Â ÅëÀÏµÈ ¿Ü°üÀ» À§ÇØ
            ÀÌ ¹®¼­¸¦ ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù.</dd>
      
            <dt>°£´ÜÇØÁø ¼³Á¤</dt>
      
            <dd>È¥¶õÀ» ÁÖ´ø ¸¹Àº Áö½Ã¾îµéÀÌ °£´ÜÇØÁ³´Ù. ÀÚÁÖ È¥¶õÀ»
            ÁÖ´ø <code>Port</code>¿Í <code>BindAddress</code> Áö½Ã¾î´Â
            ¾ø¾îÁö°í IP ÁÖ¼Ò ¿¬°á¿¡
            <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> Áö½Ã¾î¸¸À»
            »ç¿ëÇÑ´Ù. <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>
            Áö½Ã¾î´Â ¸®´ÙÀÌ·º¼Ç°ú °¡»óÈ£½ºÆ® ÀνĿ¡¸¸ »ç¿ëµÉ ¼­¹ö¸í°ú
            Æ÷Æ®¸¦ ÁöÁ¤ÇÑ´Ù.</dd>
      
            <dt>Windows NT À¯´ÏÄÚµå ÀÚü Áö¿ø</dt>
      
            <dd>Windows NT¿¡¼­ Apache 2.0Àº ÀÌÁ¦ ¸ðµç ÆÄÀϸí ÀÎÄÚµù¿¡
            utf-8À» »ç¿ëÇÑ´Ù. ÆÄÀϸíÀº ÇÏÀ§ À¯´ÏÄÚµå ÆÄÀϽýºÅÛÀ¸·Î Á÷Á¢
            º¯¿ªµÇ¾î, Windows 2000°ú Windows XP¸¦ Æ÷ÇÔÇÑ ¸ðµç Windows NT±â¹Ý
            ½Ã½ºÅÛ¿¡ ´Ù±¹¾î Áö¿øÀ» Á¦°øÇÑ´Ù. <em>ÀÌ ±â´ÉÀº Windows 95,
            98, ME¿¡´Â Áö¿øµÇÁö¾Ê°í, ÆÄÀϽýºÅÛ Á¢±Ù¿¡ Àü°ú °°ÀÌ ½Ã½ºÅÛÀÇ
            Áö¿ª ÄÚµåÆäÀÌÁö¸¦ »ç¿ëÇÑ´Ù.</em></dd>
      
            <dt>Á¤±ÔÇ¥Çö½Ä ¶óÀ̺귯¸® Updated</dt>
      
            <dd>Apache 2.0Àº <a href="http://www.pcre.org/">Perlȣȯ
            Á¤±ÔÇ¥Çö½Ä ¶óÀ̺귯¸® (Perl Compatible Regular Expression
            Library)</a> (PCRE)¸¦ Æ÷ÇÔÇÑ´Ù. ÀÌÁ¦ ¸ðµç Á¤±ÔÇ¥Çö½Ä¿¡
            ´õ °­·ÂÇÑ Perl 5 ¹®¹ýÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù.</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="module" id="module">¸ðµâ¿¡¼­ ³ª¾ÆÁø Á¡</a></h2>
          
      
          <dl>
            <dt><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></dt>
      
            <dd>Apache 2.0¿¡¼­ »õ·Î Ãß°¡µÇ¾ú´Ù. ÀÌ ¸ðµâÀº OpenSSLÀÌ
            Á¦°øÇÏ´Â SSL/TLS ¾Ïȣȭ ÇÁ·ÎÅäÄÝÀÇ ÀÎÅׯäÀ̽º´Ù.</dd>
      
            <dt><code class="module"><a href="./mod/mod_dav.html">mod_dav</a></code></dt>
      
            <dd>Apache 2.0¿¡¼­ »õ·Î Ãß°¡µÇ¾ú´Ù. ÀÌ ¸ðµâÀº À¥ÄÁÅÙÃ÷¸¦
            ¿Ã¸®°í °ü¸®ÇϱâÀ§ÇÑ HTTP Distributed Authoring and Versioning
            (DAV) Ç¥ÁØÀ» ±¸ÇöÇÑ´Ù.</dd>
      
            <dt><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code></dt>
      
            <dd>Apache 2.0¿¡¼­ »õ·Î Ãß°¡µÇ¾ú´Ù. ³×Æ®¿÷ »ç¿ë·®À»
            ÁÙÀ̱âÀ§ÇØ ºê¶ó¿ìÀú¿¡°Ô ÄÁÅÙÃ÷¸¦ ¾ÐÃàÇØ¼­ º¸³»¶ó°í ¿äûÇÒ
            ¼ö ÀÖ´Ù.</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_ldap.html">mod_auth_ldap</a></code></dt>
      
            <dd>Apache 2.0.41¿¡¼­ »õ·Î Ãß°¡µÇ¾ú´Ù. ÀÌ ¸ðµâÀº HTTP
            Basic Authentication¿¡ »ç¿ëÇÏ´Â Á¤º¸¸¦ LDAP µ¥ÀÌÅͺ£À̽º¿¡
            ÀúÀåÇÑ´Ù. °ü·ÃµÈ <code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code> ¸ðµâÀº
            ¿¬°áÇ®(connection pool)À» Á¦°øÇϰí, °á°ú¸¦ ij½ÌÇÑ´Ù.</dd> 
      
            <dt><code class="module"><a href="./mod/mod_auth_digest.html">mod_auth_digest</a></code></dt>
      
            <dd>°øÀ¯¸Þ¸ð¸®¸¦ »ç¿ëÇÏ¿© ÇÁ·Î¼¼½º°£ ¼¼¼Ç ij½ÌÀ» Áö¿øÇÑ´Ù.</dd>
      
            <dt><code class="module"><a href="./mod/mod_charset_lite.html">mod_charset_lite</a></code></dt>
      
            <dd>Apache 2.0¿¡¼­ »õ·Î Ãß°¡µÇ¾ú´Ù. ÀÌ ½ÇÇèÀûÀÎ ¸ðµâÀº
            ¹®ÀÚÁýÇÕ º¯È¯°ú ¹®ÀÚÁýÇÕ ÀçÀÛ¼º ±â´ÉÀ» Á¦°øÇÑ´Ù.</dd>
      
            <dt><code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code></dt>
      
            <dd>Apache 2.0¿¡¼­ »õ·Î Ãß°¡µÇ¾ú´Ù. ÀÌ ¸ðµâÀº Apache 1.3ÀÇ
            <code>mod_mmap_static</code> ±â´É¿¡ ´õ ³ªÀº ij½¬ ±â´ÉÀ»
            Ãß°¡Çß´Ù.</dd>
      
            <dt><code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code></dt>
      
            <dd>ÀÌ ¸ðµâÀº Apache 2.0¿¡¼­ ´õ À¯¿¬ÇØÁ³´Ù. ÀÌÁ¦
            <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>°¡ »ç¿ëÇÏ´Â ¿äû Çì´õ¸¦ ¼öÁ¤ÇÒ
            ¼ö ÀÖ°í, °æ¿ì¿¡ µû¶ó¼­ ÀÀ´ä Çì´õ¸¦ ¼³Á¤ÇÒ ¼öµµ ÀÖ´Ù.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dt>
      
            <dd>ÀÌ ÇÁ·Ï½Ã ¸ðµâÀº »õ·Î¿î ÇÊÅÍ ±¸Á¶¸¦ ÀÌ¿ëÇÏ°í ´õ ¹ÏÀ»¸¸ÇÑ
            HTTP/1.1 ÇÁ·Ï½Ã¸¦ ±¸ÇöÇϱâÀ§ÇØ ¿ÏÀüÈ÷ ÀçÀÛ¼ºµÇ¾ú´Ù. Ãß°¡·Î
            »õ·Î¿î <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>
            ¼³Á¤ ¼½¼ÇÀº ÇÁ·Ï½Ã ¼³Á¤À» ´õ ½±°Ô (±×¸®°í ³»ºÎÀûÀ¸·Î ´õ
            ºü¸£°Ô) ¸¸µç´Ù. °ú°Å <code>&lt;Directory "proxy:..."&gt;</code>
            ¼³Á¤Àº ÀÌÁ¦ Áö¿øÇÏÁö ¾Ê´Â´Ù. ¸ðµâÀº <code>proxy_connect</code>,
            <code>proxy_ftp</code>, <code>proxy_http</code>¿Í °°ÀÌ
            Áö¿øÇÏ´Â ÇÁ·ÎÅäÄÝ º°·Î ³ª´²Á³´Ù.</dd>
      
            <dt><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></dt>
      
            <dd>»õ·Î¿î <code class="directive"><a href="./mod/mod_negotiation.html#forcelanguagepriority">ForceLanguagePriority</a></code>
            Áö½Ã¾î´Â Ŭ¶óÀÌ¾ðÆ®°¡ NOT ACCEPTABLEÀ̳ª MULTIPLE CHOICES
            ÀÀ´ä ´ë½Å ¸ðµç °æ¿ì ÇÑ ¹®¼­¸¦ ¹ÞÀ½À» º¸ÀåÇÑ´Ù. Ãß°¡·Î
            Çù»ó ¾Ë°í¸®Áò°ú MultiViews ¾Ë°í¸®ÁòÀÌ ´õ ÀϰüµÈ °á°ú¸¦
            ³»µµ·Ï ¼öÁ¤µÇ¾ú°í, ¹®¼­ ³»¿ëÀ» Æ÷ÇÔÇÒ ¼ö ÀÖ´Â »õ·Î¿î Çü½ÄÀÇ
            type mapÀÌ Ãß°¡µÇ¾ú´Ù.</dd>
      
            <dt><code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code></dt>
      
            <dd>ÀÚµ¿À¸·Î »ý¼ºµÈ µð·ºÅ丮 ¸ñ·ÏÀÌ ÀÌÁ¦ ´õ ±ò²ûÇÑ Çü½ÄÀ»
            À§ÇØ HTML Ç¥¸¦ »ç¿ëÇÒ ¼ö ÀÖ°Ô µÇ¾ú°í, ¹öÀü Á¤·ÄÀ» Æ÷ÇÔÇÏ¿©
            Á¤·Ä¼ø¼­¸¦ ÀÚ¼¼È÷ Á¶ÀýÇÒ ¼ö ÀÖÀ¸¸ç, µð·ºÅ丮 ¸ñ·ÏÀ» ¿ÍÀϵåÄ«µå·Î
            °É·¯³¾ ¼ö ÀÖ´Ù.</dd>
      
            <dt><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></dt>
      
            <dd>»õ·Î¿î Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© SSI ¿ä¼ÒÀÇ ±âº» ½ÃÀÛ Å±׿Í
            ¸¶Ä§ ű׸¦ º¯°æÇÒ ¼ö ÀÖ°í, ¿À·ù¿Í ½Ã°£Çü½ÄÀ» SSI ¹®¼­¿Ü¿¡
            ÁÖ ¼³Á¤ÆÄÀÏ¿¡¼­µµ ¼³Á¤ÇÒ ¼ö ÀÖ°Ô µÇ¾ú´Ù. mod_include¿¡¼­ (ÀÌÁ¦
            Perl Á¤±ÔÇ¥Çö½Ä ¹®¹ýÀ¸·Î) Á¤±ÔÇ¥Çö½Ä ÆÄ½Ì°ú ±×·ìÀÇ
            °á°ú¸¦ <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>ÀÇ <code>$0</code>
            ... <code>$9</code> º¯¼ö·Î ¾òÀ» ¼ö ÀÖ´Ù.</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_dbm.html">mod_auth_dbm</a></code></dt>
      
            <dd>ÀÌÁ¦ <code class="directive"><a href="./mod/mod_auth_dbm.html#authdbmtype">AuthDBMType</a></code>
            Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ¿©·¯ DBM·ù µ¥ÀÌÅͺ£À̽º¸¦ Áö¿øÇÑ´Ù.</dd>
      
          </dl>
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/new_features_2_0.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/new_features_2_0.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_0.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/new_features_2_0.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/new_features_2_0.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_0.html" hreflang="pt-br" rel="alternate" title="Portugu&#234;s (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./ru/new_features_2_0.html" hreflang="ru" rel="alternate" title="Russian">&nbsp;ru&nbsp;</a> |
      <a href="./tr/new_features_2_0.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/new_features_2_0.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/mpm.html.en����������������������������������������������������������������0000644�0000000�0000050�00000032412�13412755316�015532� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Multi-Processing Modules (MPMs) - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Multi-Processing Modules (MPMs)</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./de/mpm.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/mpm.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/mpm.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/mpm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/mpm.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/mpm.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/mpm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/mpm.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
      <p>This document describes what a Multi-Processing Module is and
      how they are used by the Apache HTTP Server.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#introduction">Introduction</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#defaults">MPM Defaults</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#static">Building an MPM as a static module</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#dynamic">Building an MPM as a DSO module</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">Introduction</a></h2>
      
          <p>The Apache HTTP Server is designed to be a powerful and
          flexible web server that can work on a very wide variety of
          platforms in a range of different environments. Different
          platforms and different environments often require different
          features, or may have different ways of implementing the same
          feature most efficiently. Apache httpd has always accommodated a wide
          variety of environments through its modular design. This design
          allows the webmaster to choose which features will be included
          in the server by selecting which modules to load either at
          compile-time or at run-time.</p>
      
          <p>Apache HTTP Server 2.0 extends this modular design to the most basic
          functions of a web server. The server ships with a selection of
          Multi-Processing Modules (MPMs) which are responsible for
          binding to network ports on the machine, accepting requests,
          and dispatching children to handle the requests.</p>
      
          <p>Extending the modular design to this level of the server
          allows two important benefits:</p>
      
          <ul>
            <li>Apache httpd can more cleanly and efficiently support a wide
            variety of operating systems. In particular, the Windows
            version of the server is now much more efficient, since
            <code class="module"><a href="./mod/mpm_winnt.html">mpm_winnt</a></code> can use native
            networking features in place of the POSIX layer used in
            Apache httpd 1.3. This benefit also extends to other operating
            systems that implement specialized MPMs.</li>
      
            <li>The server can be better customized for the needs of the
            particular site. For example, sites that need a great deal of
            scalability can choose to use a threaded MPM like
            <code class="module"><a href="./mod/worker.html">worker</a></code> or <code class="module"><a href="./mod/event.html">event</a></code>, while sites requiring
            stability or compatibility with older software can use a
            <code class="module"><a href="./mod/prefork.html">prefork</a></code>.</li>
          </ul>
      
          <p>At the user level, MPMs appear much like other Apache httpd
          modules. The main difference is that one and only one MPM must
          be loaded into the server at any time. The list of available
          MPMs appears on the <a href="mod/">module index page</a>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="defaults" id="defaults">MPM Defaults</a></h2>
      
      <p>The following table lists the default MPMs for various operating
      systems.  This will be the MPM selected if you do not make another
      choice at compile-time.</p>
      
      <table class="bordered"><tr><td>Netware</td><td><code class="module"><a href="./mod/mpm_netware.html">mpm_netware</a></code></td></tr>
      <tr class="odd"><td>OS/2</td><td><code class="module"><a href="./mod/mpmt_os2.html">mpmt_os2</a></code></td></tr>
      <tr><td>Unix</td><td><code class="module"><a href="./mod/prefork.html">prefork</a></code>, <code class="module"><a href="./mod/worker.html">worker</a></code>, or
          <code class="module"><a href="./mod/event.html">event</a></code>, depending on platform capabilities</td></tr>
      <tr class="odd"><td>Windows</td><td><code class="module"><a href="./mod/mpm_winnt.html">mpm_winnt</a></code></td></tr>
      </table>
      
      <div class="note"><p>Here, 'Unix' is used to mean Unix-like operating systems, such as
      Linux, BSD, Solaris, Mac OS X, etc.</p></div>
      
      <p>In the case of Unix, the decision as to which MPM is installed is
      based on two questions:</p>
      <p>1. Does the system support threads?</p>
      <p>2. Does the system support thread-safe polling (Specifically, the
      kqueue and epoll functions)?</p>
      
      <p>If the answer to both questions is 'yes', the default MPM is
      <code class="module"><a href="./mod/event.html">event</a></code>.</p>
      
      <p>If The answer to #1 is 'yes', but the answer to #2 is 'no', the
      default will be <code class="module"><a href="./mod/worker.html">worker</a></code>.</p>
      
      <p>If the answer to both questions is 'no', then the default MPM will be
      <code class="module"><a href="./mod/prefork.html">prefork</a></code>.</p>
      
      <p>In practical terms, this means that the default will almost always be
      <code class="module"><a href="./mod/event.html">event</a></code>, as all modern operating systems support these
      two features.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="static" id="static">Building an MPM as a static module</a></h2>
      
          <p>MPMs can be built as static modules on all platforms.  A single MPM
          is chosen at build time and linked into the server.  The server must
          be rebuilt in order to change the MPM.</p>
      
          <p>To override the default MPM choice, use the
          <code>--with-mpm=<em>NAME</em></code> option of the
          <code class="program"><a href="./programs/configure.html">configure</a></code> script. <em>NAME</em> is the name of the
          desired MPM.</p>
      
          <p>Once the server has been compiled, it is possible to determine which MPM
          was chosen by using <code>./httpd -l</code>. This command will list every
          module that is compiled into the server, including the MPM.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="dynamic" id="dynamic">Building an MPM as a DSO module</a></h2>
      
          <p>On Unix and similar platforms, MPMs can be built as DSO modules and
          dynamically loaded into the server in the same manner as other DSO
          modules.  Building MPMs as DSO modules allows the MPM to be changed by
          updating the <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> directive
          for the MPM instead of by rebuilding the server.</p>
      
          <pre class="prettyprint lang-config">LoadModule mpm_prefork_module modules/mod_mpm_prefork.so</pre>
      
      
          <p>Attempting to <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code>
          more than one MPM will result in a startup failure with the
          following error.</p>
      
          <div class="example"><p><code>AH00534: httpd: Configuration error: More than one MPM
          loaded.</code></p></div>
      
          <p>This feature is enabled using the
          <code>--enable-mpms-shared</code> option of the <code class="program"><a href="./programs/configure.html">configure</a></code>
          script.
          With argument <code><em>all</em></code>, all possible MPMs for the platform
          will be installed.  Alternately, a list of MPMs can be specified as the
          argument.</p>
      
          <p>The default MPM, either selected automatically or specified with the
          <code>--with-mpm</code> option of the <code class="program"><a href="./programs/configure.html">configure</a></code>
          script, will be loaded in the generated server configuration file.  Edit the
          <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> directive to select a
          different MPM.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./de/mpm.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/mpm.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/mpm.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/mpm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/mpm.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/mpm.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/mpm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/mpm.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/mpm.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/handler.html.zh-cn.utf8����������������������������������������������������0000644�0000000�0000050�00000026535�13412755316�017671� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="zh-cn" xml:lang="zh-cn"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache 的处ç†å™¨ - Apache HTTP æœåС噍 版本 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">模å—</a> | <a href="./mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="./glossary.html">术语</a> | <a href="./sitemap.html">网站导航</a></p>
      <p class="apache">Apache HTTP æœåŠ¡å™¨ç‰ˆæœ¬ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP æœåС噍</a> &gt; <a href="http://httpd.apache.org/docs/">文档</a> &gt; <a href="./">版本 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache 的处ç†å™¨</h1>
      <div class="toplang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="./en/handler.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/handler.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/handler.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/handler.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/handler.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/handler.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/handler.html" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">此翻译å¯èƒ½è¿‡æœŸã€‚è¦äº†è§£æœ€è¿‘的更改,请阅读英文版。</div>
      
          <p>本页æè¿° Apache 处ç†å™¨çš„用法。</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#definition">什么是处ç†å™¨</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#examples">例å­</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programmer">对程åºå‘˜çš„说明</a></li>
      </ul><h3>å‚è§</h3><ul class="seealso"><li><a href="#comments_section">评论</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="definition" id="definition">什么是处ç†å™¨</a></h2>
          
          <table class="related"><tr><th>相关模å—</th><th>相关指令</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_actions.html">mod_actions</a></code></li><li><code class="module"><a href="./mod/mod_asis.html">mod_asis</a></code></li><li><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code></li><li><code class="module"><a href="./mod/mod_info.html">mod_info</a></code></li><li><code class="module"><a href="./mod/mod_mime.html">mod_mime</a></code></li><li><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></li><li><code class="module"><a href="./mod/mod_status.html">mod_status</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_actions.html#action">Action</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#removehandler">RemoveHandler</a></code></li><li><code class="directive"><a href="./mod/core.html#sethandler">SetHandler</a></code></li></ul></td></tr></table>
      
      
          <p>“处ç†å™¨â€æ˜¯å½“文件被调用时,Apache è¦æ‰§è¡Œçš„动作的内部表示形å¼ã€‚
          一般æ¥è¯´ï¼Œæ¯ä¸ªæ–‡ä»¶éƒ½æœ‰åŸºäºŽå…¶æ–‡ä»¶ç±»åž‹çš„éšå¼å¤„ç†å™¨ã€‚通常的文件会被
          æœåŠ¡å™¨ç®€å•处ç†ï¼Œä½†æ˜¯æŸäº›æ–‡ä»¶ç±»åž‹ä¼šè¢«åˆ†åˆ«â€œå¤„ç†â€ã€‚</p>
      
          <p>处ç†å™¨ä¹Ÿå¯ä»¥è¢«åŸºäºŽæ‰©å±•åæˆ–ä½ç½®æ¥æ˜Žç¡®é…置。它们都很有用,这ä¸ä»…
          因为它是优雅的方案,而且还å…许类型<strong>与</strong>处ç†å™¨å…³è”到文件
          (å‚è§<a href="mod/mod_mime.html#multipleext">文件与多个扩展å</a>)。</p>
      
          <p>处ç†å™¨å¯ä»¥ç¼–译到æœåŠ¡å™¨ä¸­ï¼Œæˆ–è€…åŒ…å«åœ¨æ¨¡å—中,它们还å¯ä»¥è¢« <code class="directive"><a href="./mod/mod_actions.html#action">Action</a></code> 指令增加。标准å‘行版中内置的处ç†å™¨æœ‰:</p>
      
          <ul>
            <li><strong>default-handler</strong>: 使用
            <code>default_handler()</code> å‘逿–‡ä»¶ï¼Œå®ƒæ˜¯ç”¨æ¥å¤„ç†é™æ€å†…容的处ç†å™¨(核心)。</li>
      
            <li><strong>send-as-is</strong>: 直接å‘é€ï¼Œä¸å¢žåŠ  HTTP 头(<code class="module"><a href="./mod/mod_asis.html">mod_asis</a></code>)。</li>
      
            <li><strong>cgi-script</strong>: 按 CGI 脚本处ç†(<code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code>)。</li>
      
            <li><strong>imap-file</strong>: 按 imagemap 规则处ç†(<code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code>)。</li>
      
            <li><strong>server-info</strong>: å–å¾—æœåС噍é…置信æ¯(<code class="module"><a href="./mod/mod_info.html">mod_info</a></code>)。</li>
      
            <li><strong>server-status</strong>: å–å¾—æœåŠ¡å™¨çŠ¶æ€æŠ¥å‘Š(<code class="module"><a href="./mod/mod_status.html">mod_status</a></code>)。</li>
      
            <li><strong>type-map</strong>: 用于内容å商,按类型映射文件处ç†(<code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>)。</li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">例å­</a></h2>
          
      
          <h3><a name="example1" id="example1">使用 CGI è„šæœ¬ä¿®æ”¹é™æ€å†…容</a></h3>
            
      
            <p>下é¢çš„æŒ‡ä»¤å°†ä¼šä½¿å…·æœ‰<code>html</code>扩展åçš„æ–‡ä»¶ï¼Œè§¦å‘ CGI 脚本<code>footer.pl</code>的执行。</p>
      
            <div class="example"><p><code>
              Action add-footer /cgi-bin/footer.pl<br />
              AddHandler add-footer .html
            </code></p></div>
      
            <p>于是 CGI è´Ÿè´£å‘é€è¯·æ±‚的文档(<code>PATH_TRANSLATED</code> 环境å˜é‡æŒ‡å‘它),按照需è¦ä½œå‡º  and making
            whatever modifications or additions are desired.</p>
      
          
          <h3><a name="example2" id="example2">嫿œ‰ HTTP 头的文件</a></h3>
            
      
            <p>下é¢çš„æŒ‡ä»¤ä¼šå¯ç”¨
            <code>send-as-is</code> 处ç†å™¨ï¼Œç”¨äºŽåŒ…å«è‡ªå·±çš„ HTTP 的文件。ä¸ç®¡ä»€ä¹ˆæ‰©å±•å,
            所有ä½äºŽ <code>/web/htdocs/asis/</code> 目录的文件会被
            <code>send-as-is</code> 处ç†å™¨å¤„ç†ã€‚</p>
      
            <div class="example"><p><code>
              &lt;Directory /web/htdocs/asis&gt;<br />
              SetHandler send-as-is<br />
              &lt;/Directory&gt;
            </code></p></div>
      
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="programmer" id="programmer">对程åºå‘˜çš„说明</a></h2>
          
      
          <p>为了实现处ç†å™¨ç‰¹æ€§ï¼Œå¢žåŠ äº†éœ€è¦ä½¿ç”¨çš„ <a href="developer/API.html">Apache API</a>。
          特别的,结构 <code>request_rec</code> 增加了新æˆå‘˜:</p>
      
          <div class="example"><p><code>
            char *handler
          </code></p></div>
      
          <p>å¦‚æžœä½ æƒ³è¦æ¨¡å—实现处ç†å™¨ï¼Œåªéœ€è¦åœ¨åœ¨å¤„ç†è¯·æ±‚,调用 <code>invoke_handler</code>
          之å‰ï¼Œå°† <code>r-&gt;handler</code> 指å‘处ç†å™¨å称。处ç†å™¨çš„实现与以å‰ä¸€æ ·ï¼Œåªæ˜¯ç”¨å¤„ç†å™¨åç§°å–代了内容类型。
          è™½ç„¶ä¸æ˜¯å¿…è¦ï¼Œå¤„ç†å™¨çš„命å约定是使用破折å·åˆ†å‰²çš„å•è¯ï¼Œæ²¡æœ‰æ–œæ ï¼Œä»Žè€Œä¸ä¾µå…¥åª’体类型å称空间。</p>
        </div></div>
      <div class="bottomlang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="./en/handler.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/handler.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/handler.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/handler.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/handler.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/handler.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/handler.html" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">评论</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/handler.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />基于 <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> 许å¯è¯.</p>
      <p class="menu"><a href="./mod/">模å—</a> | <a href="./mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="./glossary.html">术语</a> | <a href="./sitemap.html">网站导航</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/bind.html.fr.utf8����������������������������������������������������������0000644�0000000�0000050�00000040765�13412755316�016561� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Ecoute sélective - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Ecoute sélective</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./de/bind.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/bind.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/bind.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/bind.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/bind.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/bind.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Configuration du serveur HTTP Apache pour l'écoute
          sur un port et une adresse IP spécifiques.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#overview">Vue d'ensemble</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#reload">Changer la configuration de l'écoute au redémarrage</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#ipv6">Remarques spécifiques à IPv6</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#protocol">Spécification du protocole avec Listen</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#virtualhost">Comment tout ceci fonctionne-t-il avec les hôtes virtuels</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="vhosts/">Hôtes virtuels</a></li><li><a href="dns-caveats.html">Problèmes liés à DNS</a></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">Vue d'ensemble</a></h2>
          
      
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="./mod/core.html">core</a></code></li><li><code class="module"><a href="./mod/mpm_common.html">mpm_common</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code></li></ul></td></tr></table>
      
      
          <p>Au démarrage de httpd, un port et une adresse lui sont associés sur
          l'hôte local et le serveur se met en attente de l'arrivée d'une requête.
          Par défaut, le serveur écoute toutes les adresses de l'hôte local.
          Cependant, on peut lui préciser des ports et des adresses spécifiques à écouter,
          ou une combinaison des deux.
          Tout ceci est souvent associé avec la fonctionnalité
          des <a href="vhosts/">hôtes virtuels</a>
          qui détermine la manière dont <code>httpd</code> répond aux différents ports,
          noms d'hôtes et adresses IP.</p>
      
          <p>La directive <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
          enjoint le serveur de n'accepter des requêtes que sur le(s)
          port(s) spécifiés ou
          une combinaison adresse/port. Si seul un numéro de port est spécifié
          dans la directive <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>,
          le serveur se met à l'écoute sur ce port, sur toutes les interfaces réseau.
          Si une adresse IP est spécifiée en plus du port, le serveur va écouter
          sur ce port, uniquement sur l'interface réseau correspondante. On peut utiliser
          de multiples directives
          <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> pour
          spécifier plusieurs adresses et ports à écouter. Le serveur répondra alors
          aux requêtes sur ces ports et adresses spécifiés.</p>
      
          <p>Par exemple, pour faire en sorte que le serveur accepte des connexions
          sur les ports 80 et 8000, sur toutes les interfaces, utilisez :</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 80
      Listen 8000</pre>
      </div>
      
          <p>Pour faire en sorte que le serveur accepte des connexions sur le port 80
          pour une interface, et sur le port 8000 pour une
          autre interface, utilisez :</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 192.0.2.1:80
      Listen 192.0.2.5:8000</pre>
      </div>
      
          <p>Les adresses IPv6 doivent être mises entre crochets, comme dans
          l'exemple suivant :</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen [2001:db8::a00:20ff:fea7:ccea]:80</pre>
      </div>
      
          <div class="warning"><p>Des directives <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
          imbriquées provoqueront une erreur fatale qui
          empêchera le serveur de démarrer.</p>
      
          <div class="example"><p><code>
            (48)Address already in use: make_sock: could not bind to address [::]:80
          </code></p></div>
      
          <p>Voir <a href="http://wiki.apache.org/httpd/CouldNotBindToAddress">cette
          discussion dans le wiki</a> pour plus de conseils pour résoudre ce
          problème.</p>
      
          </div>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="reload" id="reload">Changer la configuration de l'écoute au redémarrage</a></h2>
          
      
          <p>Lorsque httpd est redémarré, certaines remarques sont à prendre en compte
          quant aux modifications apportées aux directives <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>. Au cours du redémarrage, httpd
          conserve la liaison avec les ports de la configuration précédente afin
          d'éviter l'obtention d'un message d'erreur "Connection refused" lors d'une
          tentative ultérieure de connexion au serveur. Si les modifications apportées au jeu de
          directives <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> utilisé entrent
          en conflit avec ce dernier, le serveur refusera de redémarrer.</p>
      
          <p>Par exemple, modifier la configuration suivante :</p>
          
          <div class="example"><pre class="prettyprint lang-config">Listen 127.0.0.1:80</pre>
      </div>
      
          <p>pour utiliser la suivante pourra échouer car écouter le port 80 sur
          toutes les adresses IP entre en conflit avec une écoute sélective du port 80
          sur la seule adresse IP 127.0.0.1.</p>
          
          <div class="example"><pre class="prettyprint lang-config">Listen 80</pre>
      </div>
      
          <p>Pour qu'une telle modification de configuration soit prise en compte avec
          succès, il est nécessaire d'arrêter, puis de démarrer le serveur.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ipv6" id="ipv6">Remarques spécifiques à IPv6</a></h2>
          
      
          <p>Un nombre croissant de plateformes implémentent IPv6, et
          <a class="glossarylink" href="./glossary.html#apr" title="voir glossaire">APR</a> supporte IPv6 sur la plupart d'entre elles,
          ce qui permet à httpd d'allouer des points de connexion (sockets) IPv6
          et de traiter des requêtes envoyées sur IPv6.</p>
      
          <p>Les administrateurs de httpd doivent se préoccuper de la possibilité
          pour un point de connexion IPv6 de traiter à la fois des connexions IPv4
          et des connexions IPv6.
          Le traitement de connexions IPv4 avec un point de connexion IPv6 utilise
          des adresses IPv6 traduites en IPv4, qui sont autorisées par défaut sur la
          plupart des plateformes, mais sont interdites par défaut sous FreeBSD, NetBSD,
          et OpenBSD, afin de respecter la politique de sécurité du système sur ces plateformes.
          Sur les systèmes où ces adresses sont interdites par défaut, un
          paramètre spécial du script <code class="program"><a href="./programs/configure.html">configure</a></code> permet de modifier
          ce comportement pour httpd.</p>
      
          <p>En revanche, sur certaines plateformes comme Linux et Tru64, la
          <strong>seule</strong> manière de gérer à la fois IPv6 et IPv4 passe
          par l'utilisation d'adresses traduites. Si vous voulez que <code>httpd</code> gère
          des connexions IPv4 et IPv6 avec un minimum de points de connexion,
          ce qui nécessite l'utilisation d'adresses IPv6 traduites en IPv4,
          utilisez l'option <code>--enable-v4-mapped</code> du script <code class="program"><a href="./programs/configure.html">configure</a></code>.</p>
      
          <p>L'option <code>--enable-v4-mapped</code> est utilisée par défaut sur
          toutes les plateformes sauf FreeBSD, NetBSD, et OpenBSD;
          votre httpd a donc probablement été construit avec cette option.</p>
      
          <p>Si vous souhaitez que httpd ne gère que des connexions IPv4, sans se
          soucier de ce que vos plateforme et APR supportent, spécifiez une adresse
          IPv4 dans toutes les directives
          <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>, comme dans l'exemple
          suivant :</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 0.0.0.0:80
      Listen 192.0.2.1:80</pre>
      </div>
      
          <p>Si votre plateforme le supporte et si vous souhaitez que httpd gère
          des connexions IPv4 et IPv6 sur des points de connexion séparés
          (c'est à dire désactiver la traduction des adresses IPv6 au format IPv4),
          utilisez l'option <code>--disable-v4-mapped</code> du script
          <code class="program"><a href="./programs/configure.html">configure</a></code>. <code>--disable-v4-mapped</code> est
          utilisé par défaut sur FreeBSD, NetBSD, et OpenBSD.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="protocol" id="protocol">Spécification du protocole avec Listen</a></h2>
          
          <p>Dans la plupart des configurations, le second paramètre optionnel
          <var>protocol</var> de la directive <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> n'est pas obligatoire. S'il
          n'est pas spécifié, les protocoles par défaut
          sont <code>https</code> pour le port 443, et <code>http</code> pour
          tous les autres ports. Le protocole sert à déterminer quel module
          doit traiter une requête, et à appliquer les optimisations
          spécifiques au protocole via la directive <code class="directive"><a href="./mod/core.html#acceptfilter">AcceptFilter</a></code>.</p>
      
          <p>Vous ne devez définir le protocole que si vous travaillez avec
          des ports non standards. Par exemple, pour travailler en
          <code>https</code> sur le port 8443 :</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 192.170.2.1:8443 https</pre>
      </div>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="virtualhost" id="virtualhost">Comment tout ceci fonctionne-t-il avec les hôtes virtuels</a></h2>
          
      
          <p> La directive <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> n'implémente pas les hôtes virtuels.
          Elle indique simplement au serveur principal sur quels adresses et ports
          il doit écouter. Si aucune directive
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          n'est présente, le serveur se comportera de la même façon pour toutes
          les requêtes acceptées. En revanche, la directive
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          peut être utilisée pour provoquer une réaction différente du serveur
          pour un ou plusieurs adresses ou ports. Pour implémenter un hôte virtuel,
          on doit d'abord indiquer au serveur sur quels adresses et ports il doit écouter.
          Ensuite, une section
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          doit être créée pour le couple adresse+port spécifié afin de définir le
          comportement de cet hôte virtuel. Notez que si la directive
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          est définie pour une adresse et un port sur lesquels le serveur n'est pas censé
          écouter, cet hôte virtuel ne sera pas accessible.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./de/bind.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/bind.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/bind.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/bind.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/bind.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/bind.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/bind.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������httpd-2.4.41/docs/manual/bind.html������������������������������������������������������������������0000644�0000000�0000050�00000001037�13362070302�015240� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: bind.html.de
      Content-Language: de
      Content-type: text/html; charset=ISO-8859-1
      
      URI: bind.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: bind.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: bind.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: bind.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: bind.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_0.html.pt-br������������������������������������������������0000644�0000000�0000050�00000041131�13412755316�020510� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="pt-br" xml:lang="pt-br"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Descrição das novas funcionalidades do Apache 2.0 - Servidor HTTP Apache Versão 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Diretrizes</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossário</a> | <a href="./sitemap.html">Mapa do site</a></p>
      <p class="apache">Servidor HTTP Apache Versão 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentação</a> &gt; <a href="./">Versão 2.4</a></div><div id="page-content"><div id="preamble"><h1>Descrição das novas funcionalidades do Apache 2.0</h1>
      <div class="toplang">
      <p><span>Línguas Disponíveis: </span><a href="./de/new_features_2_0.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/new_features_2_0.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_0.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/new_features_2_0.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/new_features_2_0.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_0.html" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./ru/new_features_2_0.html" hreflang="ru" rel="alternate" title="Russian">&nbsp;ru&nbsp;</a> |
      <a href="./tr/new_features_2_0.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">Esta tradução pode estar desatualizada.
              Confira a versão em Inglês para mudanças recentes.</div>
      
        <p>Esse documento descreve algumas das mudanças principais
           entre as versões 1.3 e 2.0 do Servidor HTTP Apache.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#core">Principais Melhorias</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#module">Melhorias nos Módulos</a></li>
      </ul><h3>Veja também</h3><ul class="seealso"><li><a href="upgrading.html">Atualizando da versão 1.3 para 2.0</a></li><li><a href="#comments_section">Comentários</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="core" id="core">Principais Melhorias</a></h2>
          
      
          <dl>
            <dt>Threading Unix</dt>
      
            <dd>Em sistemas Unix com suporte a threads POSIX, o Apache pode
            funcionar em modo híbrido multiprocesso e multithread. Não funciona
            em todas configurações, mas melhora a escalabilidade em muitas.</dd>
      
            <dt>Novo Sistema de Compilação</dt>
      
            <dd>O sistema de compilação foi reescrito do zero para utilizar o
            <code>autoconf</code> e o <code>libtool</code>, tornando a
            configuração do sistema Apache mais similar a de outros
            pacotes.</dd>
      
            <dt>Suporte Multi-protocolo</dt>
      
            <dd>O Apache possui agora uma infraestrutura feita para suportar
            múltiplos protocolos. O módulo <code class="module"><a href="./mod/mod_echo.html">mod_echo</a></code> é  um
            exemplo ilustrativo de sua utilização.</dd>
      
            <dt>Suporte Aperfeiçoado para Plataformas Não-Unix</dt>
      
            <dd>O Apache 2.0 está  mais rápido e mais estável em plataformas
            Não-Unix como BeOS, OS/2 e Windows. Com a introdução de módulos
            <a href="mpm.html">multi-processamento</a> (MPMs) específicos e a
            Apache Portable Runtime (APR), essas plataformas estão implementando
            as suas APIs nativas, evitando as camadas de emulação POSIX que se
            mostravam lentas e defeituosas.</dd>
      
            <dt>Nova API Apache</dt>
      
            <dd>A API para módulos mudou significativamente na versão 2.0.
            Muitos dos problemas de ordenamento/prioridade da versão
            1.3 foram resolvidos. A versão 2.0 faz o ordenamento automático
            "per-hook" para permitir mais flexibilidade. Novas chamadas foram
            adicionadas para fornecer capacidades adicionais sem a necessidade
            de se aplicar nenhum patch ao servidor Apache principal.</dd>
      
            <dt>Suporte IPv6</dt>
      
            <dd>Em sistemas onde o IPv6 é suportado pela biblioteca de base
            Apache Portable Runtime, o Apache monitora por padrão
            as interfaces IPv6. Em adição as diretrizes  <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>, <code class="directive"><a href="./mod/core.html#namevirtualhost">NameVirtualHost</a></code> e <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code>, suportam correntes (strings) de
            endereços numéricos do tipo IPv6. (ex. "<code>Listen
            [2001:db8::1]:8080</code>").</dd>
      
            <dt>Filtrando</dt>
      
            <dd>Os módulos do Apache agora são feito filtros que
            agem na corrente do conteúdo na medida que este é entregue, tanto
            na entrada quando na saída de dados do servidor. É possível então,
            por exemplo, que o retorno de dados de scripts CGI sejam analisados
            pelas diretrizes do "Server Side Include" usando o filtro <code>INCLUDES</code> do <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>. O módulo <code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code>, permite que programas externos trabalhem
            como filtros do mesmo modo que aplicações CGI funcionam como
            manipuladores.</dd>
      
            <dt>Respostas de Erro Multi-linguais</dt>
      
            <dd>Mensagens de erro para o navegador agora são fornecidas em
            diversas línguas, usando documentos SSI. Podem ser personalizadas
            pelo administrador que desejar definir seus próprios
            padrões.</dd>
      
            <dt>Configuração Simplificada</dt>
      
            <dd>Muitas diretrizes confusas foram simplificadas. Entre elas,
            <code>Port</code> e <code>BindAddress</code> não existem
            mais; apenas a diretriz <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
            é usada para direcionar endereços IP; a diretriz <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code> especifica o nome do servidor
            e o número da porta apenas para redirecionamento e reconhecimento
            de hospedeiros virtuais.</dd>
      
            <dt>Suporte Nativo ao Unicode do Windows NT</dt>
      
            <dd>O Apache 2.0 para Windows NT agora usa utf-8 para codificação
            de todos os nomes de arquivos. A tradução para o sistema
            base Unicode, torna possível o suporte multi-lingual para todas
            as instalações da família NT, incluindo o Windows 2000 e Windows XP.
            <em>Esse suporte não se estende ao Windows 95, 98 ou ME, que
            continuam usando o código de páginas da máquina local para o
            acesso ao sistema de arquivos.</em></dd>
      
            <dt>Biblioteca de Expressões Regulares Atualizada</dt>
      
            <dd>O Apache 2.0 inclui a <a href="http://www.pcre.org/">Biblioteca
            de Expressões Regulares Compatíveis Perl</a> (PCRE).  Todas as
            avaliações de expressões regulares usam a mais poderosa sintaxe
            do Perl 5.</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="module" id="module">Melhorias nos Módulos</a></h2>
          
      
          <dl>
            <dt><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></dt>
      
            <dd>Novo módulo no Apache 2.0. Esse módulo é uma interface
            para os protocolos de codificação SSL/TLS fornecidos pela
            OpenSSL.</dd>
      
            <dt><code class="module"><a href="./mod/mod_dav.html">mod_dav</a></code></dt>
      
            <dd>Novo módulo no Apache 2.0. Este módulo implementa as
            especificações de Autoria Distribuída e Versões (Distributed
            Authoring and Versioning - DAV) para HTTP, para a publicação
            e a manutenção de conteúdo da web.</dd>
      
            <dt><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code></dt>
      
            <dd>Novo módulo no Apache 2.0.  Esse módulo permite o suporte
            a navegadores que solicitam que o conteúdo seja comprimido antes
            da entrega, economizando banda da rede.</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_ldap.html">mod_auth_ldap</a></code></dt>
      
            <dd>Novo módulo no Apache 2.0.41. Este módulo permite que 
            bancos de dados LDAP sejam usados para armazenar credenciais
            para Autenticação Básica HTTP. Um módulo que o acompanha <code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code>, fornece a conciliação de conexões e armazenamento
            de resultados.</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_digest.html">mod_auth_digest</a></code></dt>
      
            <dd>Inclui suporte adicional para armazenamento de sessões
            através de processos que usam memória compartilhada.</dd>
      
            <dt><code class="module"><a href="./mod/mod_charset_lite.html">mod_charset_lite</a></code></dt>
      
            <dd>Novo módulo no Apache 2.0. Este modo experimental permite a
            tradução de tabelas de caracteres ou re-codificação.</dd>
      
            <dt><code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code></dt>
      
            <dd>Novo módulo no Apache 2.0. Esse módulo inclui a funcionalidade
            do <code>mod_mmap_static</code> do Apache 1.3, além de disponibilizar
            outras possibilidades de armazenamento.</dd>
      
            <dt><code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code></dt>
      
            <dd>Este módulo está muito mais flexível no Apache 2.0. Pode
            modificar pedidos de cabeçalhos usados pelo <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>, e incondicionalmente pode ajustar cabeçalhos de respostas.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dt>
      
            <dd>O módulo proxy foi totalmente reescrito para levar vantagem
            da nova infraestrutura de filtro e implementar um proxy mais fiel e 
            de acordo com o padrão HTTP/1.1. Além disso, uma nova seção
            de configuração <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code> fornece controles mais legíveis (e internamente
            mais rápidos) para sites com proxies; configurações
            sobrecarregadas <code>&lt;Directory "proxy:..."&gt;</code>, não
            são suportadas. O módulo agora é dividido em suporte
            de protocolos específicos incluindo <code>proxy_connect</code>,
            <code>proxy_ftp</code> e <code>proxy_http</code>.</dd>
      
            <dt><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></dt>
      
            <dd>A nova diretriz <code class="directive"><a href="./mod/mod_negotiation.html#forcelanguagepriority">ForceLanguagePriority</a></code> pode ser usada para assegurar que
            o cliente receba um único documento em todos os casos, ao invés de
            respostas "NOT ACCEPTABLE" ou "MULTIPLE CHOICES". Novos algoritmos
            de negociação e visões múltiplas (MultiViews) foram organizados para
            obter resultados mais consistentes e uma nova forma de tipo de mapa
            (map type) que podem incluir o conteúdo de documentos é fornecido.</dd>
      
            <dt><code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code></dt>
      
            <dd>As listagens de diretórios automáticas podem ser
            configuradas para usar tabelas HTML para formatações mais limpas
            e permitir controles mais acurados de classificação, incluindo
            ordenação por versão e filtro da lista de
            diretórios através de caracteres-coringa.</dd>
      
            <dt><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></dt>
      
            <dd>Novas diretrizes permitem que as tags padrões <em>start</em> e
            <em>end</em> para elementos SSI, possam ser alteradas e permitir que
            as configurações de formatos de erro e hora sejam incluídos no
            arquivo de configuração principal, ao invés de serem adicionadas
            ao documento SSI. Resultados de análises de expressões regulares
            e agrupamento (baseadas na sintaxe de expressões regulares do Perl)
            podem ser obtidas usando as variáveis do módulo <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>, de <code>$0</code> a <code>$9</code>.</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_dbm.html">mod_auth_dbm</a></code></dt>
      
            <dd>Agora suporta múltiplos tipos de banco de dados similares ao DBM,
            usando a diretriz <a href="../2.0/mod/mod_auth_dbm.html#AuthDBMType">
      	  <code>AuthDBMType</code></a>
            .</dd>
      
          </dl>
        </div></div>
      <div class="bottomlang">
      <p><span>Línguas Disponíveis: </span><a href="./de/new_features_2_0.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/new_features_2_0.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_0.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/new_features_2_0.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/new_features_2_0.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_0.html" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./ru/new_features_2_0.html" hreflang="ru" rel="alternate" title="Russian">&nbsp;ru&nbsp;</a> |
      <a href="./tr/new_features_2_0.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentários</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/new_features_2_0.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licenciado sob a <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Diretrizes</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossário</a> | <a href="./sitemap.html">Mapa do site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/stopping.html.en�����������������������������������������������������������0000644�0000000�0000050�00000042631�13412755316�016610� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Stopping and Restarting Apache HTTP Server - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Stopping and Restarting Apache HTTP Server</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./de/stopping.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/stopping.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/stopping.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/stopping.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/stopping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/stopping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/stopping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>This document covers stopping and restarting Apache HTTP Server on
          Unix-like systems. Windows NT, 2000 and XP users should see
          <a href="platform/windows.html#winsvc">Running httpd as a
          Service</a> and Windows 9x and ME users should see <a href="platform/windows.html#wincons">Running httpd as a
          Console Application</a> for information on how to control
          httpd on those platforms.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#introduction">Introduction</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#term">Stop Now</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#graceful">Graceful Restart</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#hup">Restart Now</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#gracefulstop">Graceful Stop</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><code class="program"><a href="./programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="./programs/apachectl.html">apachectl</a></code></li><li><a href="invoking.html">Starting</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">Introduction</a></h2>
      
          <p>In order to stop or restart the Apache HTTP Server, you must send a signal to
          the running <code class="program"><a href="./programs/httpd.html">httpd</a></code> processes.  There are two ways to
          send the signals.  First, you can use the unix <code>kill</code>
          command to directly send signals to the processes. You will
          notice many <code class="program"><a href="./programs/httpd.html">httpd</a></code> executables running on your system,
          but you should not send signals to any of them except the parent,
          whose pid is in the <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code>. That is to say you
          shouldn't ever need to send signals to any process except the
          parent. There are four signals that you can send the parent:
          <code><a href="#term">TERM</a></code>,
          <code><a href="#graceful">USR1</a></code>,
          <code><a href="#hup">HUP</a></code>, and
          <code><a href="#gracefulstop">WINCH</a></code>, which
          will be described in a moment.</p>
      
          <p>To send a signal to the parent you should issue a command
          such as:</p>
      
      <div class="example"><p><code>kill -TERM `cat /usr/local/apache2/logs/httpd.pid`</code></p></div>
      
          <p>The second method of signaling the <code class="program"><a href="./programs/httpd.html">httpd</a></code> processes
          is to use the <code>-k</code> command line options: <code>stop</code>,
          <code>restart</code>, <code>graceful</code> and <code>graceful-stop</code>,
          as described below.  These are arguments to the <code class="program"><a href="./programs/httpd.html">httpd</a></code> binary, but we recommend that
          you send them using the <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> control script, which
          will pass them through to <code class="program"><a href="./programs/httpd.html">httpd</a></code>.</p>
      
          <p>After you have signaled <code class="program"><a href="./programs/httpd.html">httpd</a></code>, you can read about
          its progress by issuing:</p>
      
      <div class="example"><p><code>tail -f /usr/local/apache2/logs/error_log</code></p></div>
      
          <p>Modify those examples to match your <code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code> and <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code> settings.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="term" id="term">Stop Now</a></h2>
      
      <dl><dt>Signal: TERM</dt>
      <dd><code>apachectl -k stop</code></dd>
      </dl>
      
          <p>Sending the <code>TERM</code> or <code>stop</code> signal to
          the parent causes it to immediately attempt to kill off all of its
          children. It may take it several seconds to complete killing off
          its children.  Then the parent itself exits. Any requests in
          progress are terminated, and no further requests are served.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="graceful" id="graceful">Graceful Restart</a></h2>
      
      <dl><dt>Signal: USR1</dt>
      <dd><code>apachectl -k graceful</code></dd>
      </dl>
      
          <p>The <code>USR1</code> or <code>graceful</code> signal causes
          the parent process to <em>advise</em> the children to exit after
          their current request (or to exit immediately if they're not
          serving anything). The parent re-reads its configuration files and
          re-opens its log files. As each child dies off the parent replaces
          it with a child from the new <em>generation</em> of the
          configuration, which begins serving new requests immediately.</p>
      
          <p>This code is designed to always respect the process control
          directive of the MPMs, so the number of processes and threads
          available to serve clients will be maintained at the appropriate
          values throughout the restart process.  Furthermore, it respects
          <code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code> in the
          following manner: if after one second at least <code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code> new children have not
          been created, then create enough to pick up the slack. Hence the
          code tries to maintain both the number of children appropriate for
          the current load on the server, and respect your wishes with the
          <code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code>
          parameter.</p>
      
          <p>Users of <code class="module"><a href="./mod/mod_status.html">mod_status</a></code>
          will notice that the server statistics are <strong>not</strong>
          set to zero when a <code>USR1</code> is sent. The code was
          written to both minimize the time in which the server is unable
          to serve new requests (they will be queued up by the operating
          system, so they're not lost in any event) and to respect your
          tuning parameters. In order to do this it has to keep the
          <em>scoreboard</em> used to keep track of all children across
          generations.</p>
      
          <p>The status module will also use a <code>G</code> to indicate
          those children which are still serving requests started before
          the graceful restart was given.</p>
      
          <p>At present there is no way for a log rotation script using
          <code>USR1</code> to know for certain that all children writing
          the pre-restart log have finished. We suggest that you use a
          suitable delay after sending the <code>USR1</code> signal
          before you do anything with the old log. For example if most of
          your hits take less than 10 minutes to complete for users on
          low bandwidth links then you could wait 15 minutes before doing
          anything with the old log.</p>
      
          <div class="note">
          <p>When you issue a restart, a syntax check is first run, to
          ensure that there are no errors in the configuration files.
          If your configuration file has errors in it, you will get an
          error message about that syntax error, and the server will refuse to
          restart. This avoids the situation where the server halts and then
          cannot restart, leaving you with a non-functioning server.</p>
      
          <p>This still will not
          guarantee that the server will restart correctly. To check the
          semantics of the configuration files as well as the syntax, you
          can try starting <code class="program"><a href="./programs/httpd.html">httpd</a></code> as a non-root user. If there
          are no errors it will attempt to open its sockets and logs and fail
          because it's not root (or because the currently running
          <code class="program"><a href="./programs/httpd.html">httpd</a></code> already has those ports bound). If it fails
          for any other reason then it's probably a config file error and the error
          should be fixed before issuing the graceful restart.</p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="hup" id="hup">Restart Now</a></h2>
      
      <dl><dt>Signal: HUP</dt>
      <dd><code>apachectl -k restart</code></dd>
      </dl>
      
          <p>Sending the <code>HUP</code> or <code>restart</code> signal to
          the parent causes it to kill off its children like in
          <code>TERM</code>, but the parent doesn't exit. It re-reads its
          configuration files, and re-opens any log files. Then it spawns a
          new set of children and continues serving hits.</p>
      
          <p>Users of <code class="module"><a href="./mod/mod_status.html">mod_status</a></code>
          will notice that the server statistics are set to zero when a
          <code>HUP</code> is sent.</p>
      
      <div class="note">As with a graceful restart, a syntax check is run before the
      restart is attempted. If your configuration file has errors in it, the
      restart will not be attempted, and you will receive notification of the
      syntax error(s).</div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="gracefulstop" id="gracefulstop">Graceful Stop</a></h2>
      
      <dl><dt>Signal: WINCH</dt>
      <dd><code>apachectl -k graceful-stop</code></dd>
      </dl>
      
          <p>The <code>WINCH</code> or <code>graceful-stop</code> signal causes
          the parent process to <em>advise</em> the children to exit after
          their current request (or to exit immediately if they're not
          serving anything). The parent will then remove its <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code> and cease listening on
          all ports. The parent will continue to run, and monitor children
          which are handling requests. Once all children have finalised
          and exited or the timeout specified by the <code class="directive"><a href="./mod/mpm_common.html#gracefulshutdowntimeout">GracefulShutdownTimeout</a></code> has been
          reached, the parent will also exit.  If the timeout is reached,
          any remaining children will be sent the <code>TERM</code> signal
          to force them to exit.</p>
      
          <p>A <code>TERM</code> signal will immediately terminate the
          parent process and all children when in the "graceful" state. However
          as the <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code> will
          have been removed, you will not be able to use
          <code>apachectl</code> or <code>httpd</code> to send this signal.</p>
      
          <div class="note"><p>The <code>graceful-stop</code> signal allows you to run multiple
          identically configured instances of <code class="program"><a href="./programs/httpd.html">httpd</a></code> at the
          same time. This is a powerful feature when performing graceful
          upgrades of httpd, however it can also cause deadlocks and race
          conditions with some configurations.</p>
      
          <p>Care has been taken to ensure that on-disk files such as lock files
          (<code class="directive"><a href="./mod/core.html#mutex">Mutex</a></code>) and Unix socket files
          (<code class="directive"><a href="./mod/mod_cgid.html#scriptsock">ScriptSock</a></code>) contain the server
          PID, and should coexist without problem. However, if a configuration
          directive, third-party module or persistent CGI utilises any other on-disk
          lock or  state files, care should be taken to ensure that multiple running
          instances of <code class="program"><a href="./programs/httpd.html">httpd</a></code> do not clobber each other's files.</p>
      
          <p>You should also be wary of other potential race conditions, such as
          using <code class="program"><a href="./programs/rotatelogs.html">rotatelogs</a></code> style piped logging. Multiple running
          instances of <code class="program"><a href="./programs/rotatelogs.html">rotatelogs</a></code> attempting to rotate the same
          logfiles at the same time may destroy each other's logfiles.</p></div>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./de/stopping.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/stopping.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/stopping.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/stopping.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/stopping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/stopping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/stopping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/stopping.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/server-wide.html�����������������������������������������������������������0000644�0000000�0000050�00000000756�13362070302�016567� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: server-wide.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: server-wide.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: server-wide.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: server-wide.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: server-wide.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ������������������httpd-2.4.41/docs/manual/handler.html.en������������������������������������������������������������0000644�0000000�0000050�00000027450�13412755316�016364� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache's Handler Use - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache's Handler Use</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/handler.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/handler.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/handler.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/handler.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/handler.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/handler.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/handler.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
          <p>This document describes the use of Apache's Handlers.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#definition">What is a Handler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#examples">Examples</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programmer">Programmer's Note</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="definition" id="definition">What is a Handler</a></h2>
          
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_actions.html">mod_actions</a></code></li><li><code class="module"><a href="./mod/mod_asis.html">mod_asis</a></code></li><li><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code></li><li><code class="module"><a href="./mod/mod_info.html">mod_info</a></code></li><li><code class="module"><a href="./mod/mod_mime.html">mod_mime</a></code></li><li><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></li><li><code class="module"><a href="./mod/mod_status.html">mod_status</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_actions.html#action">Action</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#removehandler">RemoveHandler</a></code></li><li><code class="directive"><a href="./mod/core.html#sethandler">SetHandler</a></code></li></ul></td></tr></table>
      
      
          <p>A "handler" is an internal Apache representation of the
          action to be performed when a file is called. Generally, files
          have implicit handlers, based on the file type. Normally, all
          files are simply served by the server, but certain file types
          are "handled" separately.</p>
      
          <p>Handlers may also be configured explicitly,
          based on either filename extensions or on location,
          without relation to file type. This is
          advantageous both because it is a more elegant solution, and
          because it also allows for both a type <strong>and</strong> a
          handler to be associated with a file. (See also <a href="mod/mod_mime.html#multipleext">Files with Multiple
          Extensions</a>.)</p>
      
          <p>Handlers can either be built into the server or included in
          a module, or they can be added with the <code class="directive"><a href="./mod/mod_actions.html#action">Action</a></code> directive. The
          built-in handlers in the standard distribution are as
          follows:</p>
      
          <ul>
            <li><strong>default-handler</strong>: Send the file using the
            <code>default_handler()</code>, which is the handler used by
            default to handle static content. (core)</li>
      
            <li><strong>send-as-is</strong>: Send file with HTTP headers
            as is. (<code class="module"><a href="./mod/mod_asis.html">mod_asis</a></code>)</li>
      
            <li><strong>cgi-script</strong>: Treat the file as a CGI
            script. (<code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code>)</li>
      
            <li><strong>imap-file</strong>: Parse as an imagemap rule
            file. (<code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code>)</li>
      
            <li><strong>server-info</strong>: Get the server's
            configuration information. (<code class="module"><a href="./mod/mod_info.html">mod_info</a></code>)</li>
      
            <li><strong>server-status</strong>: Get the server's status
            report. (<code class="module"><a href="./mod/mod_status.html">mod_status</a></code>)</li>
      
            <li><strong>type-map</strong>: Parse as a type map file for
            content negotiation. (<code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>)</li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Examples</a></h2>
          
      
          <h3><a name="example1" id="example1">Modifying static content using a CGI script</a></h3>
            
      
            <p>The following directives will cause requests for files with
            the <code>html</code> extension to trigger the launch of the
            <code>footer.pl</code> CGI script.</p>
      
            <pre class="prettyprint lang-config">Action add-footer /cgi-bin/footer.pl
      AddHandler add-footer .html</pre>
      
      
            <p>Then the CGI script is responsible for sending the
            originally requested document (pointed to by the
            <code>PATH_TRANSLATED</code> environment variable) and making
            whatever modifications or additions are desired.</p>
      
          
          <h3><a name="example2" id="example2">Files with HTTP headers</a></h3>
            
      
            <p>The following directives will enable the
            <code>send-as-is</code> handler, which is used for files which
            contain their own HTTP headers. All files in the
            <code>/web/htdocs/asis/</code> directory will be processed by
            the <code>send-as-is</code> handler, regardless of their
            filename extensions.</p>
      
            <pre class="prettyprint lang-config">&lt;Directory "/web/htdocs/asis"&gt;
          SetHandler send-as-is
      &lt;/Directory&gt;</pre>
      
      
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="programmer" id="programmer">Programmer's Note</a></h2>
          
      
          <p>In order to implement the handler features, an addition has
          been made to the <a href="developer/API.html">Apache API</a> that
          you may wish to make use of. Specifically, a new record has
          been added to the <code>request_rec</code> structure:</p>
      
          <pre class="prettyprint lang-c">char *handler</pre>
      
      
          <p>If you wish to have your module engage a handler, you need
          only to set <code>r-&gt;handler</code> to the name of the
          handler at any time prior to the <code>invoke_handler</code>
          stage of the request. Handlers are implemented as they were
          before, albeit using the handler name instead of a content
          type. While it is not necessary, the naming convention for
          handlers is to use a dash-separated word, with no slashes, so
          as to not invade the media type name-space.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/handler.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/handler.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/handler.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/handler.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/handler.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/handler.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/handler.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/handler.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_0.html.ja.utf8����������������������������������������������0000644�0000000�0000050�00000045413�13412755316�020752� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache 2.0 ã®æ–°æ©Ÿèƒ½ã®æ¦‚è¦ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache 2.0 ã®æ–°æ©Ÿèƒ½ã®æ¦‚è¦</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./de/new_features_2_0.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/new_features_2_0.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_0.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/new_features_2_0.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/new_features_2_0.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_0.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./ru/new_features_2_0.html" hreflang="ru" rel="alternate" title="Russian">&nbsp;ru&nbsp;</a> |
      <a href="./tr/new_features_2_0.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
        <p>ã“ã®æ–‡æ›¸ã§ã¯ã€Apache HTTP サーãƒãƒãƒ¼ã‚¸ãƒ§ãƒ³ 1.3 㨠2.0
           ã®ä¸»ãªé•ã„ã«ã¤ã„ã¦è¨˜è¿°ã—ã¦ã„ã¾ã™ã€‚</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#core">ã‚³ã‚¢æ©Ÿèƒ½ã®æ‹¡å¼µ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#module">ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æ‹¡å¼µ</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="upgrading.html">1.3 ã‹ã‚‰ 2.0 ã¸ã®ã‚¢ãƒƒãƒ—グレード</a></li><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="core" id="core">ã‚³ã‚¢æ©Ÿèƒ½ã®æ‹¡å¼µ</a></h2>
          
      
          <dl>
            <dt>Unix ã®ã‚¹ãƒ¬ãƒƒãƒ‰</dt>
      
            <dd>POSIX スレッドをサãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ Unix システム上ã§ã¯ã€
            Apache ã¯ãƒžãƒ«ãƒãƒ—ロセスã€ãƒžãƒ«ãƒã‚¹ãƒ¬ãƒƒãƒ‰ã®ãƒã‚¤ãƒ–リッドモードã§
            実行ã§ãるよã†ã«ãªã‚Šã¾ã—ãŸã€‚ã“れã«ã‚ˆã‚Š
            多ãã®è¨­å®šã«ãŠã„ã¦ã‚¹ã‚±ãƒ¼ãƒ©ãƒ“リティãŒå‘上ã—ã¾ã™ã€‚</dd>
      
            <dt>æ–°ã—ã„ビルドシステム</dt>
      
            <dd>ビルドシステム㯠<code>autoconf</code> 㨠<code>libtool</code>
            ã«åŸºã¥ã„ãŸã‚‚ã®ã«ãªã‚‹ã‚ˆã†ã«ã€
            æ–°ã—ãæ›¸ãç›´ã•れã¾ã—ãŸã€‚ã“れã«ã‚ˆã‚Šã€Apache ã® configure ã®ã‚·ã‚¹ãƒ†ãƒ ã¯
            ä»–ã®ãƒ‘ッケージã¨ä¼¼ãŸã‚‚ã®ã«ãªã‚Šã¾ã—ãŸã€‚</dd>
      
            <dt>マルãƒãƒ—ロトコルサãƒãƒ¼ãƒˆ</dt>
      
            <dd>Apache ã«è¤‡æ•°ã®ãƒ—ロトコルを扱ã†ãŸã‚ã®æ©Ÿæ§‹ãŒå‚™ã‚りã¾ã—ãŸã€‚
            例ã¨ã—㦠<code class="module"><a href="./mod/mod_echo.html">mod_echo</a></code> ãŒæ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚</dd>
      
            <dt>Unix 以外ã®ãƒ—ラットフォームã®ã‚µãƒãƒ¼ãƒˆã®æ”¹å–„</dt>
      
            <dd>Apache 2.0 㯠BeOSã€OS/2ã€Windows ãªã©ã® Unix 以外ã®
            プラットフォームã§ã€ã‚ˆã‚Šé€Ÿãã€ã‚ˆã‚Šå®‰å®šã—ã¦å‹•作ã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚
            プラットフォーム特有㮠<a href="mpm.html">マルãƒãƒ—ロセッシングモジュール</a> (MPM) ã¨
            Apache Portable Runtime (APR) ã®å°Žå…¥ã«ã‚ˆã‚Šã€
            ãƒã‚¤ãƒ†ã‚£ãƒ´ã® API ã§å®Ÿè£…ã•れるよã†ã«ãªã‚Šã€
            ãƒã‚°ãŒå¤šãã€æ€§èƒ½ã®æ‚ªã„ã“ã¨ãŒå¤šã„ POSIX エミュレーションレイヤã®ä½¿ç”¨ã‚’
            回é¿ã™ã‚‹ã“ã¨ãŒã§ãã¾ã—ãŸã€‚</dd>
      
            <dt>æ–°ã—ã„ Apache API</dt>
      
            <dd>2.0 ã§ã¯ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã® API ãŒå¤§ãã変ã‚りã¾ã—ãŸã€‚
            1.3 ã«ã‚ã£ãŸãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®é †ç•ª/優先度ã®å•題ã®å¤šãã¯
            ãªããªã£ã¦ã„ã‚‹ã¯ãšã§ã™ã€‚2.0 ã¯å„ªå…ˆåº¦ã®é¸æŠžã‚’ã»ã¨ã‚“ã©ã‚’自動的ã«è¡Œãªã„ã€
            モジュールã®é †ç•ªã¯ã‚ˆã‚ŠæŸ”軟性を高ã‚ã‚‹ãŸã‚ã«ãƒ•ック毎ã«è¡Œãªã‚れるよã†ã«
            ãªã‚Šã¾ã—ãŸã€‚ã¾ãŸã€ã‚³ã‚¢ Apache サーãƒã«ãƒ‘ッãƒã‚’ã‚ã¦ã‚‹ã“ã¨ãªã
            追加ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«æ©Ÿèƒ½ã‚’æä¾›ã™ã‚‹ã“ã¨ãŒã§ãるよã†ã«æ–°ã—ã„関数ãŒ
            追加ã•れã¾ã—ãŸã€‚</dd>
      
            <dt>IPv6 サãƒãƒ¼ãƒˆ</dt>
      
            <dd>Apache ãŒä½¿ç”¨ã—ã¦ã„ã‚‹ Apache Portable Runtime library ãŒ
            IPv6 をサãƒãƒ¼ãƒˆã—ã¦ã„るシステムã§ã¯ Apache 㯠デフォルトã§
            IPv6 ã®ã‚½ã‚±ãƒƒãƒˆã‚’ listen ã—ã¾ã™ã€‚ã•らã«ã€
            <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>,
            <code class="directive"><a href="./mod/core.html#namevirtualhost">NameVirtualHost</a></code>,
            <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code>
            ã®å„ディレクティブ㌠IPv6 ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’
            サãƒãƒ¼ãƒˆã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—㟠(例ãˆã°ã€
            "<code>Listen [2001:db8::1]:8080</code>")。</dd>
      
            <dt>フィルタ</dt>
      
            <dd>Apache ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã‚µãƒ¼ãƒã‹ã‚‰é€ã‚‰ã‚Œã¦ããŸã‚Šã€ã‚µãƒ¼ãƒã¸
            é€ã‚‹ã‚¹ãƒˆãƒªãƒ¼ãƒ ã«å¯¾ã—ã¦å‹•作ã™ã‚‹ãƒ•ィルタã¨ã—ã¦æ›¸ãã“ã¨ãŒã§ãるよã†ã«
            ãªã‚Šã¾ã—ãŸã€‚ã“れã«ã‚ˆã‚Šã€ä¾‹ãˆã° CGI スクリプトã®å‡ºåŠ›ã‚’
            <code class="module"><a href="./mod/mod_include.html">mod_include</a></code> ã® <code>INCLUDES</code> フィルタを使ã£ã¦
            Server Side Include ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’è§£æžã™ã‚‹ã€
            ã¨ã„ã†ã‚ˆã†ãªã“ã¨ãŒå¯èƒ½ã«ãªã‚Šã¾ã—ãŸã€‚<code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code>
            ã§å¤–部プログラムをフィルタã¨ã—ã¦å‹•作ã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
            ã“れ㯠CGI プログラムをãƒãƒ³ãƒ‰ãƒ©ã¨ã—ã¦å‹•作ã•ã›ã‚‹ã®ã¨
            よãä¼¼ãŸæ–¹æ³•ã§ã§ãã¾ã™ã€‚</dd>
      
            <dt>多言語エラー応答</dt>
      
            <dd>ブラウザã¸ã®ã‚¨ãƒ©ãƒ¼å¿œç­”ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒã€SSI ã®æ–‡æ›¸ã‚’使ã£ã¦
            複数ã®è¨€èªžã§æä¾›ã•れるよã†ã«ãªã‚Šã¾ã—ãŸã€‚見ãŸã‚ã®ä¸€è²«æ€§ã‚’ä¿ã¤ãŸã‚ã«
            管ç†è€…ãŒã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚</dd>
      
            <dt>設定ã®ç°¡ç´ åŒ–</dt>
      
            <dd>多ãã®æ··ä¹±ã‚’æ‹›ããŒã¡ãªãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒç°¡ç´ åŒ–ã•れã¾ã—ãŸã€‚
            ã‚ˆãæ··ä¹±ã‚’引ãèµ·ã“ã—ã¦ã„㟠<code>Port</code> ディレクティブ㨠
            <code>Bind</code> ディレクティブã¯
            ãªããªã‚Šã¾ã—ãŸã€‚<code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
            ディレクティブã®ã¿ãŒ IP アドレスã®ãƒã‚¤ãƒ³ãƒ‰ã«ä½¿ã‚れã¾ã™ã€‚
            <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code> ディレクティブã§ã¯
            リダイレクト㨠vhost ã®èªè­˜ã®ãŸã‚ã ã‘ã«ã‚µãƒ¼ãƒã®åå‰ã¨ãƒãƒ¼ãƒˆç•ªå·ã‚’
            指定ã—ã¾ã™ã€‚</dd>
      
            <dt>Windows NT ã®ãƒã‚¤ãƒ†ã‚£ãƒ´ Unicode サãƒãƒ¼ãƒˆ</dt>
      
            <dd>Windows NT 上㮠Apache 2.0 ã¯ãƒ•ァイルåã®æ–‡å­—エンコード全ã¦ã«
            utf-8 を使ã†ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ã“れら㯠Unicode ファイルシステムã«
            直接変æ›ã•れるã®ã§ã€Windows 2000 㨠Windows XP ã‚’å«ã‚€ã€å…¨ã¦ã®
            Windows NT ç³»ã§å¤šè¨€èªžã‚µãƒãƒ¼ãƒˆãŒæä¾›ã•れã¾ã™ã€‚
            <em>ã“ã®ã‚µãƒãƒ¼ãƒˆã¯ã€ãƒ•ァイルシステムã®ã‚¢ã‚¯ã‚»ã‚¹æ™‚ã«ãƒ­ãƒ¼ã‚«ãƒ«ã®
            コードページを使ㆠWindows 95, 98, ME ã«ã¯é©ç”¨ã•れã¾ã›ã‚“。</em></dd>
      
            <dt>æ­£è¦è¡¨ç¾ãƒ©ã‚¤ãƒ–ラリã®ã‚¢ãƒƒãƒ—デート</dt>
      
            <dd>Apache 2.0 㯠<a href="http://www.pcre.org/">Perl
            äº’æ›æ­£è¦è¡¨ç¾ãƒ©ã‚¤ãƒ–ラリ (PCRE) </a>ã‚’å«ã‚“ã§ã„ã¾ã™ã€‚
            æ­£è¦è¡¨ç¾ã®è©•価ã«ã¯ã€ã‚ˆã‚Šå¼·åŠ›ã«ãªã£ãŸ Perl 5
            構文を使用ã—ã¾ã™ã€‚</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="module" id="module">ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æ‹¡å¼µ</a></h2>
          
      
          <dl>
            <dt><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></dt>
      
            <dd>Apache 2.0 ã®æ–°ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã€‚ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ OpenSSL ãŒ
            æä¾›ã™ã‚‹ SSL/TLS æš—å·ãƒ—ロトコルã¸ã®ã‚¤ãƒ³ã‚¿ãƒ•ェースã§ã™ã€‚</dd>
      
            <dt><code class="module"><a href="./mod/mod_dav.html">mod_dav</a></code></dt>
      
            <dd>Apache 2.0 ã®æ–°ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã€‚ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã‚¦ã‚§ãƒ–コンテンツを
            é€ã‚Šã€ç¶­æŒã™ã‚‹ãŸã‚ã®è¦æ ¼
            HTTP Distributed Authoring and Versioning (DAV) を実装ã—ã¦ã„ã¾ã™ã€‚</dd>
      
            <dt><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code></dt>
      
            <dd>Apache 2.0 ã®æ–°ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã€‚é€ä¿¡å‰ã«é€ä¿¡å†…容を圧縮ã—ã¦
            ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯å¸¯åŸŸã‚’節約ã™ã‚‹ã€ã¨ã„ã†ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ブラウザãŒ
            è¦æ±‚ã§ãるよã†ã«ã—ã¾ã™ã€‚</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_ldap.html">mod_auth_ldap</a></code></dt>
      
            <dd>Apache 2.0.41 ã®æ–°ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã€‚HTTP 基本èªè¨¼ã®è¨¼æ˜Žæ›¸ã‚’ä¿å­˜ã™ã‚‹ã®ã«ã€
            LDAP データベースを使用ã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚
            関連モジュール㮠<code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code> ã§ã€
            コãƒã‚¯ã‚·ãƒ§ãƒ³ã®ãƒ—ール機能ã¨çµæžœã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥æ©Ÿèƒ½ãŒæä¾›ã•れã¾ã™ã€‚</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_digest.html">mod_auth_digest</a></code></dt>
      
            <dd>ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯å…±æœ‰ãƒ¡ãƒ¢ãƒªã‚’使ã†ã“ã¨ã«ã‚ˆã‚Šã€ãƒ—ロセスをã¾ãŸã„ã 
            セッションã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’サãƒãƒ¼ãƒˆã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚</dd>
      
            <dt><code class="module"><a href="./mod/mod_charset_lite.html">mod_charset_lite</a></code></dt>
      
            <dd>Apache 2.0 ã®æ–°ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã€‚ã“ã®å®Ÿé¨“çš„ãªãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯
            キャラクタセットã®å¤‰æ›ã‚„å†ç¬¦å·åŒ–ã‚’å¯èƒ½ã«ã—ã¾ã™ã€‚</dd>
      
            <dt><code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code></dt>
      
            <dd>Apache 2.0 ã®æ–°ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã€‚ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ã¯ã€
            Apache 1.3 ã«ãŠã‘ã‚‹ <code>mod_mmap_static</code> 機能ãŒå«ã¾ã‚Œã€
            ã¾ãŸã€è¿½åŠ ã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥æ©Ÿèƒ½ãŒåŠ ã‚ã£ã¦ã„ã¾ã™ã€‚</dd>
      
            <dt><code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code></dt>
      
            <dd>ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ Apache 2.0 ã§éžå¸¸ã«æŸ”軟性ãŒ
            高ããªã‚Šã¾ã—ãŸã€‚<code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>
            ã§ä½¿ã‚れるリクエストã®ãƒ˜ãƒƒãƒ€ã‚’変更ã§ãるよã†ã«ãªã‚Šã¾ã—ãŸã—ã€
            応答ヘッダをæ¡ä»¶ã«å¿œã˜ã¦è¨­å®šã§ãるよã†ã«ãªã‚Šã¾ã—ãŸã€‚</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dt>
      
            <dd>proxy ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯æ–°ã—ã„ãƒ•ã‚£ãƒ«ã‚¿ã®æ©Ÿæ§‹ã‚’利用ã™ã‚‹ãŸã‚ã¨ã€
            より信頼ã§ãã‚‹ã€HTTP/1.1 ã«æº–æ‹ ã—㟠proxy を実装ã™ã‚‹ãŸã‚ã«
            å®Œå…¨ã«æ›¸ãç›´ã•れã¾ã—ãŸã€‚ã•らã«ã€æ–°ã—ã„ 
            <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>
            設定セクションãŒproxy ã•れるサイトã®ã‚ˆã‚Šèª­ã¿ã‚„ã™ã (内部的ã«ã‚‚より速ã„)
            設定をæä¾›ã—ã¾ã™ã€‚オーãƒãƒ¼ãƒ­ãƒ¼ãƒ‰ã•れãŸ
            <code>&lt;Directory "proxy:... &gt;</code>
            設定ã¯ã‚µãƒãƒ¼ãƒˆã•れã¦ã„ã¾ã›ã‚“。ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ <code>proxy_connect</code>,
            <code>proxy_ftp</code>, <code>proxy_http</code> 
            ã¨ã„ã£ãŸã€ç‰¹å®šã®ãƒ—ロトコルをサãƒãƒ¼ãƒˆã™ã‚‹
            モジュールã«åˆ†å‰²ã•れるよã†ã«ãªã‚Šã¾ã—ãŸã€‚</dd>
      
            <dt><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></dt>
      
            <dd>クライアント㌠NOT ACCEPTABLE ã‚„ MULTIPLE CHOICES 応答ã®
            代ã‚りã«å¸¸ã«å˜ç‹¬ã®æ–‡æ›¸ã‚’å—ã‘ã¨ã‚‹ã‚ˆã†ã«ã™ã‚‹ãŸã‚ã«ã€æ–°ã—ã„ディレクティブ
            <code class="directive"><a href="./mod/mod_negotiation.html#forcelanguagepriority">ForceLanguagePriority</a></code>
            を使ã†ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã—ãŸã€‚
            ã•らã«ã€ã‚ˆã‚Šä¸€è²«æ€§ã®ã‚ã‚‹çµæžœã‚’æä¾›ã™ã‚‹ãŸã‚ã«
            ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã¨ MultiViews ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒæ”¹å–„ã•れã€
            文書ã®å†…容をå«ã‚ã‚‹ã“ã¨ã®ã§ãã‚‹ã€æ–°ã—ã„å½¢å¼ã®ã‚¿ã‚¤ãƒ—マップãŒ
            æä¾›ã•れるよã†ã«ãªã‚Šã¾ã—ãŸã€‚</dd>
      
            <dt><code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code></dt>
      
            <dd>Autoindex ã•れるディレクトリã®å†…容一覧ãŒã€
            ãれã„ã«è¡¨ç¤ºã•れるãŸã‚ã« HTML ã®ãƒ†ãƒ¼ãƒ–ルを使ã†ã‚ˆã†ã«
            設定ã§ãるよã†ã«ãªã‚Šã¾ã—ãŸã€‚ã¾ãŸã€ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ã‚ˆã‚‹ã‚½ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ãªã©ã€
            より細ã‹ã„ソーティングã®åˆ¶å¾¡ãŒã§ãるよã†ã«ãªã‚Šã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒª
            ã®å†…容一覧をワイルドカードã«ã‚ˆã‚Šé¸åˆ¥ã™ã‚‹ã“ã¨ãŒã§ãるよã†ã«ã‚‚ãªã‚Šã¾ã—ãŸã€‚</dd>
      
            <dt><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></dt>
      
            <dd>æ–°ã—ã„ディレクティブã«ã‚ˆã‚Šã€SSI ã®ãƒ‡ãƒ•ォルトã®é–‹å§‹ã‚¿ã‚°ã¨çµ‚了タグを
            変更ã§ãるよã†ã«ãªã‚Šã¾ã—ãŸã€‚ã¾ãŸã€ã‚¨ãƒ©ãƒ¼ã¨æ™‚刻ã®å½¢å¼ã®è¨­å®šãŒ SSI ã®
            文書中ã§ã¯ãªãã€ä¸»è¨­å®šãƒ•ァイル中ã§è¡Œãªãˆã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚
            æ­£è¦è¡¨ç¾ã®è§£æžã¨ã‚°ãƒ«ãƒ¼ãƒ—化ã®çµæžœ (Perl ã®æ­£è¦è¡¨ç¾ã®æ§‹æ–‡ã«
            基ã¥ã„ãŸã‚‚ã®ã«ãªã‚Šã¾ã—ãŸ) ã‚’ <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>
            ã®å¤‰æ•° $0 .. $9 ã«ã‚ˆã‚Šå–å¾—ã§ãるよã†ã«ãªã‚Šã¾ã—ãŸã€‚</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_dbm.html">mod_auth_dbm</a></code></dt>
      
            <dd><code class="directive"><a href="./mod/mod_auth_dbm.html#authdbmtype">AuthDBMType</a></code>
            ディレクティブã«ã‚ˆã‚Šã€è¤‡æ•°ã® DBM åž‹ã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‚’サãƒãƒ¼ãƒˆã™ã‚‹
            よã†ã«ãªã‚Šã¾ã—ãŸã€‚</dd>
      
          </dl>
        </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./de/new_features_2_0.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/new_features_2_0.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_0.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/new_features_2_0.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/new_features_2_0.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_0.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./ru/new_features_2_0.html" hreflang="ru" rel="alternate" title="Russian">&nbsp;ru&nbsp;</a> |
      <a href="./tr/new_features_2_0.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/new_features_2_0.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/content-negotiation.html.tr.utf8�������������������������������������������0000644�0000000�0000050�00000112130�13447004010�021617� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>İçerik Uzlaşımı - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>İçerik Uzlaşımı</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./en/content-negotiation.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/content-negotiation.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/content-negotiation.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/content-negotiation.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/content-negotiation.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Apache HTTPD, içerik uzlaşımını HTTP/1.1 belirtiminde bahsedildiği şekliyle
            destekler. Bir özkaynağın en iyi gösterimini, tarayıcının sağladığı
            karakter kodlaması, karakter kümesi, dil, ortam türü gibi kullanıcı
            tercihlerine bağlı olarak seçebilir. Ayrıca, tarayıcının kullanıcı
            tercihlerini tam yansıtamadığı durumlarda istekleri daha akıllıca ele
            alabilmeyi sağlayacak bir takım özelliklere de sahiptir.</p>
      
          <p>İçerik uzlaşımı öntanımlı olarak derlenen
            <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> modülü tarafından sağlanır.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#about">İçerik Uzlaşımı Hakkında</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#negotiation">httpd’de İçerik Uzlaşımı</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#methods">Uzlaşım Yöntemleri</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#better">Üstünlük Değerleriyle Oynamak</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#extensions">Şeffaf İçerik Uzlaşımının Genişletilmesi</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#naming">Hiperbağlar ve İsimlendirme Uzlaşımları</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#caching">Arabellekler Hakkında</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="about" id="about">İçerik Uzlaşımı Hakkında</a></h2>
      
          <p>Bir özkaynağın bir çok farklı gösterimi olabilir. Örneğin, bir belgenin
            farklı ortam türleri ve/veya farklı diller için gösterimleri olabilir.
            En uygun seçimi yapmanın tek yolu kullanıcıya bir liste verip seçmesini
            istemektir. Bununla birlikte sunucunun bu seçimi kendiliğinden yapması
            da mümkündür. Tarayıcılar isteğin bir parçası olarak kullanıcı
            tercihlerini de gönderdiğinden bu istendiği gibi çalışır. Örneğin bir
            tarayıcı, kullanıcısınının mümkünse Fransızca içerik tercih ettiğini
            yoksa İngilizce içeriğe de razı olabileceğini belirtebilirdi.
            Tarayıcılar bu tercihleri başlıkta belirtirler. Tarayıcı sadece Türkçe
            içerik istendiğini şöyle belirtebilirdi:</p>
      
          <div class="example"><p><code>Accept-Language: tr</code></p></div>
      
          <p>Bu tercihin yerine getirilebilmesininin sadece, desteklenen diller
            arasında bu dilin varlığına ve istenen belgenin bu dilde bir
            gösteriminin bulunmasına bağlı oluşuna dikkat ediniz.</p>
      
          <p>Daha karmaşık bir istek örneği olarak, tarayıcının Fransızca ve
            İngilizce içerik kabul etmeye ayarlandığını fakat Fransızcayı tercih
            ettiğini ve çeşitli ortam türlerini kabul etmekle birlikte salt metin ve
            diğer metin türlerinden ziyade HTML tercih ettiğini, ayrıca, diğer ortam
            türleri üzerinde GIF veya JPEG tercih ettiğini fakat başka çare yoksa
            her ortam türüne de izin verdiğini belirtiyor olsun:</p>
      
          <div class="example"><p><code>
            Accept-Language: fr; q=1.0, en; q=0.5<br />
            Accept: text/html; q=1.0, text/*; q=0.8, image/gif; q=0.6, image/jpeg;
            q=0.6, image/*; q=0.5, */*; q=0.1
          </code></p></div>
      
          <p>httpd, HTTP/1.1 belirtiminde tanımlanan şekliyle ‘sunucu yönetiminde’
            içerik uzlaşımını destekler. <code>Accept</code>,
            <code>Accept-Language</code>, <code>Accept-Charset</code> ve
            <code>Accept-Encoding</code> istek başlıklarını tamamen destekler.
            httpd ayrıca, RFC 2295 ve RFC 2296’da tanımlanan bir deneysel uzlaşım
            olarak ‘şeffaf’ içerik uzlaşımını da destekler. Fakat ‘özellik
            uzlaşımını’ bu RFC’lerde tanımlandığı gibi desteklemez.</p>
      
          <p>Bir <strong>özkaynak</strong> bir URI (RFC 2396) tarafından betimlenen
            kavramsal bir öğedir. Apache gibi bir HTTP sunucusu, ortam türü,
            karakter kümesi, kodlama ve saire ile tanımlanmış bir bayt dizisi
            şeklindeki her gösterimiyle, özkaynaklara kendi isim alanları dahilinde
            erişim sağlar. Her özkaynağın aynı anda bir veya daha fazla gösterimi
            mevcut olabileceği gibi hiç mevcut olmayabilir de. Eğer çok sayıda
            gösterim mevcutsa, bu özkaynağın <strong>uzlaşılabilir</strong>
            olduğundan ve her gösteriminin  bir <strong>çeşitlilik</strong>
            oluşturduğundan bunun da uzlaşımın <strong>boyutlar</strong>ından
            kaynaklandığından bahsedilebilir.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="negotiation" id="negotiation">httpd’de İçerik Uzlaşımı</a></h2>
      
          <p>Bir özkaynak üzerinde uzlaşılırken gösterim çeşitlerinin her biri
            hakkında sunucuya bilgi verilmesi gerekir. Bu iki yolla yapılabilir:</p>
      
          <ul>
            <li>Ya gösterim çeşitlerini içeren dosyaların isimleriyle eşleşmeyi
              sağlayan bir tür eşlemi kullanılır (bir <code>*.var</code> dosyası
              gibi).</li>
      
            <li>Ya da sunucu örtük bir dosya ismi kalıbı eşleşmesinin ardından
              sonuçlar arasından seçim yapar; buna ‘Çoklu Görünüm’ araması adı
              verilir.</li>
          </ul>
      
         <h3><a name="type-map" id="type-map">Bir türeşlem dosyası kullanmak</a></h3>
      
          <p>Bir türeşlem dosyası, <code>type-map</code> eylemcisi ile ilişkili bir
            belgedir (ya da eski httpd yapılandırmaları ile geriye uyumluluk için,
            <code>application/x-type-map</code> <a class="glossarylink" href="./glossary.html#mime türü" title="sözlüğe bakınız">MIME türü</a>nde
            bir belgedir). Bu özelliği kullanmak için, yapılandırmada bir tür
            eşleyici olarak her dosya ismi uzantısı için bir <code>type-map</code>
            eylemcisi tanımlamalısınız. Bu, sunucu yapılandırma dosyasında en iyi
            şöyle yapılabilir:</p>
      
          <pre class="prettyprint lang-config">AddHandler type-map .var</pre>
      
      
          <p>Türeşlem dosyaları kendilerini tanımlayan özkaynak ile aynı isimde
            olmalı ve isim bir <code>.var</code> uzantısı içermelidir. Aşağıdaki
            örneklerde özkaynak ismi <code>foo</code> olduğundan türeşlem dosyasının
            ismi <code>foo.var</code>'dır.</p>
      
          <p>Bu dosya her gösterim çeşidi için bir girdi içermelidir; bu girdiler
            ardarda belirtilen HTTP biçem başlık satırlarından oluşur. Farklı
            gösterimlerin girdileri bir boş satırla diğerlerinden ayrılır. Aynı
            girdi içinde boş satır kullanılamaz. Bir eşlem dosyasını bir birleşik
            öğenin tamamı için bir girdi ile başlatmak adet olmuştur (ise de, bu
            gerekli değildir, hele yoksayılacaksa hiç gerekli değildir). Eşlem
            dosyası için aşağıda bir örnek verilmiştir.</p>
      
         <p>Bu dosyadaki URI'ler türeşlem dosyasının yerine görelidir. Dolayısıyla,
           bu dosyaların aynı dizinde bulunması beklenirse de bu gerekli değildir.
           Aynı sunucuda bulunan tüm dosyalar için türeşlem dosyasındaki gibi mutlak
           veya göreli URI'ler belirtebilirsiniz.</p>
      
          <div class="example"><p><code>
            URI: misal<br />
          <br />
            URI: misal.en.html<br />
            Content-type: text/html<br />
            Content-language: en<br />
          <br />
            URI: misal.fr.de.html<br />
            Content-type: text/html;charset=iso-8859-2<br />
            Content-language: fr, de<br />
          </code></p></div>
      
          <p>Ayrıca, <code>MultiViews</code> etkin olsa bile bir türeşlem dosyasının
            dosya ismi uzantılarının taranmasına göre öncelik alacağına dikkat
            ediniz. Eğer gösterimler bu örnekteki resim dosyasında olduğu gibi
            farklı kaynak üstünlüklerine sahipseler, ortam türünün <code>qs</code>
            parametresi kullanılarak kaynak üstünlükleri belirtilebilir: </p>
      
          <div class="example"><p><code>
            URI: misal<br />
          <br />
            URI: misal.jpeg<br />
            Content-type: image/jpeg; <strong>qs=0.8</strong><br />
          <br />
            URI: misal.gif<br />
            Content-type: image/gif; <strong>qs=0.5</strong><br />
          <br />
            URI: misal.txt<br />
            Content-type: text/plain; <strong>qs=0.01</strong><br />
          </code></p></div>
      
          <p><code>qs</code> değerleri 0.000-1.000 değer aralığı içinde
            belirtilebilir. 0.000 <code>qs</code> değerine sahip gösterimin asla
            seçilmeyeceğine dikkat ediniz. Bir <code>qs</code> değeri belirtilmeyen
            gösterimlerin kaynak üstünlüğü 1.000 kabul edilir. <code>qs</code>
            parametresinin belirttiği değer istemcinin yeteneklerinden bağımsız
            olarak olası gösterimler arasında göreli bir üstünlük ifade eder.
            Örneğin bir fotoğraf sözkonusu olduğunda bir JPEG dosyasının kaynak
            üstünlüğü bir ASCII çiziminkinden yüksek olacaktır. Diğer taraftan özgün
            resim bir ASCII çizim olduğu takdirde, ASCII çizim, bir JPEG gösterimine
            göre öncelikli olacaktır. Bu nedenle <code>qs</code> değeri özkaynağın
            doğasına bakarak belirlenir.</p>
      
          <p>Tanınan başlıkların tam listesini <a href="mod/mod_negotiation.html#typemaps">mod_negotiation</a> modülünün
            belgesinde bulabilirsiniz.</p>
        
      
        <h3><a name="multiviews" id="multiviews">Çoklu Görünümler</a></h3>
      
          <p><code>MultiViews</code>, <code>httpd.conf</code> dosyasındaki veya
            (<code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> yönergesinin
            değerine bağlı olarak) <code>.htaccess</code> dosyalarındaki <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> veya <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> bölümleri içinde
            <code class="directive"><a href="./mod/core.html#options">Options</a></code> yönergeleri ile
            belirtilebilen, dizine özgü bir seçenektir. Yalnız, dikkatli olun,
            <code>Options All</code> yaparak <code>MultiViews</code> seçeneğini
            etkin kılamazsınız; seçeneği ismiyle açıkça belirtmelisiniz.</p>
      
          <p><code>MultiViews</code> şöyle etki eder: Sunucudan,
            <code>MultiViews</code> seçeneğinin etkin olduğu <code>/bir/dizin</code>
            dizininden <code>filanca</code> dosyası için bir istekte bulunulmuşsa
            fakat dizinde bu dosya yoksa, sunucu dizin içeriğini
            <code>filanca.*</code> dosyaları için tarar ve bu dosyalar için
            istemcinin ismiyle talep ettiği ortam türlerini ve kodlamaları
            kullanarak bir türeşlem dosyası uydurup bu gösterimler arasından
            istemcinin gereksinimlerine en uygun gösterimi seçer.</p>
      
          <p><code>MultiViews</code> ayrıca, sunucunun bir dizin içeriğini
            listelemeye çalıştığı durumda <code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code> yönergesi ile belirtilen dosya için de bir
            arama tertipleyebilir. Eğer yapılandırma dosyalarında</p>
      
          <pre class="prettyprint lang-config">DirectoryIndex index</pre>
      
      
          <p>ÅŸeklinde bir atama varsa ve dizinde <code>index.html</code> ve
            <code>index.html3</code> dosyaları varsa sunucu bunlar arasından hakem
            sıfatıyla bir seçim yapacaktır; ama bu ikisi yerine dizinde sadece
            <code>index.cgi</code> mevcutsa sunucu sadece bu dosyayı
            çalıştıracaktır.</p>
      
          <p>Okunan dizinde bulunan dosyalar arasında <code>mod_mime</code>
            tarafından tanınan karakter kümesi, içerik türü, dil ve kodlama
            başlıklarına uygun gösterim uzantılarından birine sahip bir dosya yoksa
            sonuç <code class="directive"><a href="./mod/mod_mime.html#multiviewsmatch">MultiViewsMatch</a></code>
            yönergesiyle yapılan tanıma bağlı olur. Bu yönerge hangi diğer dosya
            uzantılarının, eylemcilerin veya süzgeçlerin çok gösterimli uzlaşımla
            ilintileneceÄŸini belirler.</p>
        
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="methods" id="methods">Uzlaşım Yöntemleri</a></h2>
      
          <p>httpd’nin, bir türeşlem dosyası veya dizin içindeki bir dosya
            sayesinde belli bir özkaynağın gösterim çeşitlerinin bir listesini elde
            ettikten sonra ‘en uygun’ gösterime karar vermek için kullanabileceği
            iki yöntem vardır. httpd’nin içerik uzlaşım özelliklerinin kullanımı
            sırasında uzlaşımın nasıl yerine getirileceği ile ilgili ayrıntıları
            bilmek aslında gerekli değildir. Bununla birlikte belgenin kalanında bu
            konu açıklanmaya çalışılmıştır.</p>
      
          <p>İki uzlaşım yöntemi vardır:</p>
      
          <ol>
            <li>Normal durumda <strong>sunucu yönetiminde httpd uzlaşım
              algoritması</strong> kullanılır. Bu algoritma aşağıda ayrıntılı olarak
              açıklanmıştır. Bu algoritma kullanıldığı zaman, httpd, en iyi sonuca
              ulaşmak için bazen belli boyutların üstünlük katsayılarıyla ‘oynar’.
              httpd’nin bu katsayılarla oynama işini nasıl yaptığı aşağıda daha
              ayrıntılı açıklanmıştır.</li>
      
            <li>İstemci bu işlem için özellikle RFC 2295’te tanımlanan mekanizmanın
              kullanılmasını isterse <strong>şeffaf içerik uzlaşımı</strong>
              kullanılır. Bu uzlaşım yöntemi, en uygun gösterimin seçilmesi
              konusunda tarayıcıya tam denetim imkanı verir; dolayısıyla sonuç
              tarayıcının bu işlem için kullandığı algoritmanın başarısına bağlıdır.
              Şeffaf uzlaşım sürecinin bir parçası olarak, tarayıcı, RFC 2296’da
              tanımlanan ‘gösterim çeşidini uzaktan seçme algoritması’nın
              çalıştırılmasını httpd’den isteyebilir.</li>
          </ol>
      
        <h3><a name="dimensions" id="dimensions">Uzlaşımın Boyutları</a></h3>
      
          <table>
            
            <tr valign="top">
              <th>Boyut</th>
      
              <th>Açıklama</th>
            </tr>
      
            <tr valign="top">
              <td>Ortam Türü</td>
      
              <td>Tarayıcı ortam türü tercihlerini <code>Accept</code> başlık alanı
                ile belirtir. Her öğenin kendine özgü bir üstünlük katsayısı
                olabilir. Gösterimin açıklaması da ayrıca bir kaynak üstünlüğüne
                (<code>qs</code> parametresi) sahip olabilir.</td>
            </tr>
      
            <tr valign="top">
              <td>Dil</td>
      
              <td>Tarayıcı dil tercihlerini <code>Accept-Language</code> başlık
                alanı ile belirtir. Her öğenin kendine özgü bir üstünlük katsayısı
                olabilir. Gösterimler bir kaç dilde olabileceği gibi hiç bir dille
                iliÅŸkilendirimemiÅŸ de olabilir.</td>
            </tr>
      
            <tr valign="top">
              <td>Kodlama</td>
      
              <td>Tarayıcı kodlama tercihlerini <code>Accept-Encoding</code> başlık
                alanı ile belirtir. Her öğenin kendine özgü bir üstünlük katsayısı
                olabilir.</td>
            </tr>
      
            <tr valign="top">
              <td>Karakter Kümesi</td>
      
              <td>Tarayıcı karakter kümesi tercihlerini <code>Accept-Charset</code>
                başlık alanı ile belirtir. Her öğenin kendine özgü bir üstünlük
                katsayısı olabilir. Gösterim çeşitleri karakter kümesini ortam
                türünün bir parametresi olarak belirtebilirler.</td>
            </tr>
          </table>
        
      
        <h3><a name="algorithm" id="algorithm">httpd Uzlaşım Algoritması</a></h3>
      
          <p>httpd, tarayıcıya döndürülecek en uygun gösterim çeşidini (varsa)
            seçmek için aşağıdaki algoritmayı kullanabilir. Bu algoritma pek de
            yapılandırılabilir değildir. Şöyle çalışır:</p>
      
          <ol>
            <li>Önce her uzlaşım boyutu için ilgili <em>Accept*</em> başlık alanına
              bakılıp her gösterim çeşidine bir üstünlük katsayısı atanır. Eğer
              boyutlardan bazıları için ilgili <em>Accept*</em> başlığı
              uygulanabilir değilse bu boyut elenir ve sonuçta hiçbir gösterim
              çeşidi kalmasza 4. adıma atlanır.</li>
      
            <li>‘En uygun’ gösterim çeşidi bir eleme süreciyle seçilir. Bu süreç
              sırasında aşağıdaki sınamalar sırayla uygulanır. Sınamalardan
              geçemeyen bir gösterim çeşidi elenir.  Sınamaların bir aşamasında tek
              bir gösterim çeşidi kalırsa bu en uygun eşleşme olarak seçilmiş olur
              ve 3. adıma atlanır. Eğer birden fazla gösterim çeşidi kalırsa sonraki
              sınamaya geçilir.
      
              <ol>
                <li><code>Accept</code> başlığındaki üstünlük katsayısı ile
                  gösterimin ortam türünde belirtilen kaynak üstünlüğünün çarpımı en
                  büyük olan gösterim çeşidi seçilir.</li>
      
                <li>En yüksek dil üstünlük katsayısına sahip gösterim çeşidi seçilir.
                </li>
      
                <li>En uygun dil eşleşmesine sahip gösterim çeşidini seçmek için
                  önce varsa <code>Accept-Language</code> başlığındaki dil
                  sıralamasına bakılır, aksi takdirde <code>LanguagePriority</code>
                  yönergesi ile atanmışsa oradaki dil sıralamasına bakılır.</li>
      
                <li>En yüksek ‘seviyeden’ ortam parametresine (text/html ortam türü
                  sürümünü belirtmekte kullanılır) sahip gösterim çeşitleri
                  seçilir.</li>
      
                <li><code>Accept-Charset</code> başlık satırında belirtilene bakarak
                  en uygun karakter kümesine sahip gösterim çeşitleri seçilir.
                  Alenen dışlanmadıkça ISO-8859-1 kabul edilebilir karakter
                  kümesidir. <code>text/*</code> ortam türüne sahip gösterim
                  çeşitlerinden belli bir karakter kümesi ile ilişkilendirilmemiş
                  olanların karakter kümesinin ISO-8859-1 olduğu varsayılır.</li>
      
                <li>ISO-8859-1 karakter kümesi ile ilişkilendirilmemiş gösterim
                  çeşitleri seçilir. Böyle hiçbir gösterim yoksa bütün gösterimler
                  seçilir.</li>
      
                <li>En uygun kodlamaya sahip gösterim çeşitleri seçilir. Tarayıcı
                  tarafından kabul edilebilir kodlamaya sahip gösterim çeşitleri
                  varsa bunlar seçilir. Yoksa kodlanmış ve kodlanmamış gösterim
                  çeşitleri karışık olarak mevcutsa sadece kodlanmamış olanlar
                  seçilir. Eğer bütün gösterim çeşitlerinin sadece kodlanmış ya da
                  sadece kodlanmamış gösterimleri mevcutsa hepsi seçilir.</li>
      
                <li>En küçük içerik uzunluğuna sahip gösterim çeşitleri seçilir.</li>
      
                <li>Kalan gösterim çeşitlerinin ilki seçilir. Bu ilk, ya türeşlem
                  dosyasında listelenen ilk çeşittir ya da gösterimler bir dizinden
                  okunuyorsa ASCII kod sıralamasına göre ilk sıradaki dosya ismine
                  sahip gösterimdir.</li>
              </ol>
            </li>
      
            <li>Algoritma, artık seçilmiş en uygun gösterim çeşidine sahipse bu
              artık yanıt olarak döndürülebilir. HTTP yanıt başlığı
              <code>Vary</code>’ye uzlaşım boyutları atanır (tarayıcı ve
              arabellekler özkaynağı kaydederken bu bilgiyi kullanırlar)
              ve algoritma sonlandırılır.</li>
      
            <li>Buraya gelinmişse hiçbir gösterim seçilmemiş demektir (hiçbiri
              tarayıcı tarafından kabul edilebilir bulunmadığından dolayı).
              Gövdesinde mevcut gösterim çeşitlerini listeleyen bir HTML belgesi 406
              durum koduyla döndürülür (406: ‘kabul edilebilir bir gösterim yok’).
              Ayrıca HTTP <code>Vary</code> başlığında gösterim çeşitliliğinin
              boyutları belirtilir.</li>
          </ol>
        
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="better" id="better">Üstünlük Değerleriyle Oynamak</a></h2>
      
          <p>httpd bazen yukarıdaki httpd uzlaşım algoritmasının kesin sonucunun
            beklenenden farklı olması için üstünlük değerleriyle oynar. Bunu tam ve
            doğru bilgi göndermeyen tarayıcılar için algoritmadan en iyi sonucu elde
            etmek amacıyla yapar. Bazen günümüzün en tanınmış tarayıcıları bile çoğu
            durumda yanlış bir seçimle sonuçlanmayacaksa <code>Accept</code> başlık
            bilgilerini göndermemektedir. Eğer tarayıcı eksiksiz ve doğru bilgi
            gönderirse httpd bu değerlerle oynamayacaktır.</p>
      
        <h3><a name="wildcards" id="wildcards">Ortam Türleri ve Dosyaismi Kalıpları</a></h3>
      
          <p><code>Accept:</code> istek başlığı ortam türü tercihlerini yansıtır.
            Ayrıca, * bir dizge ile eşleşmek üzere "image/*" veya  "*/*" gibi ortam
            türü kalıpları da içerebilir. Dolayısıyla şöyle bir istek,</p>
      
          <div class="example"><p><code>Accept: image/*, */*</code></p></div>
      
          <p>diğer türler gibi "image/" ile başlayan ortam türlerini kabul
            edilebilir kılacaktır. Bazı tarayıcılar ortam türlerini örtük olarak
            elde etmek amacıyla hep bu tür kalıplar gönderirler. Örnek:</p>
      
          <div class="example"><p><code>
            Accept: text/html, text/plain, image/gif, image/jpeg, */*
          </code></p></div>
      
          <p>Bunun amacı, açıkça listelenmiş türlerin tercih edildiğini, fakat
            farklı gösterimler varsa onların da kabul edilebileceğini belirtmektir.
            Üstünlük değerlerini doğrudan kullanarak tarayıcılar gerçekte ne
            istediklerini ÅŸuna benzer ÅŸekilde belirtebilirler:</p>
      
          <div class="example"><p><code>
            Accept: text/html, text/plain, image/gif, image/jpeg, */*; q=0.01
          </code></p></div>
      
          <p>Açıkça belirtilen türler için üstünlük katsayısı belirtilmemiştir,
            dolayısıyla üstünlük katsayılarının 1.0 (en yüksek) olduğu
            varsayılmaktadır. */* kalıbı 0.01 gibi çok daha düşük bir öncelik
            belirtmektedir. Bu bakımdan, ancak, açıkça belirtilen türlerden
            hiçbirinin bulunmaması halinde diğer türler eşleşecektir.</p>
      
          <p>Eğer <code>Accept:</code> başlığı <em>hiçbir</em> <code>q</code>
            katsayısı içermiyorsa ve başlıkta "*/*" belirtilmişse, httpd istenen
            davranışı taklit etmek için bu kalıba 0.01 katsayısını atar. Keza
            "type/*" kalıbına da 0.02 katsayısını atar (yani, */* kalıbına göre
            tercihli olur). Eğer  <code>Accept:</code> alanındaki her ortam türü bir
            <code>q</code> katsayısı içeriyorsa bu özel değerler uygulanmaz.
            Dolayısıyla gerekli bilgiyi açıkça bildiren tarayıcılardan gelen
            istekler umulduğu gibi işlem görecektir.</p>
        
      
        <h3><a name="exceptions" id="exceptions">Dil Uzlaşımında İstisnalar</a></h3>
      
          <p>httpd 2.0’dan itibaren, uzlaşım algoritmasına, bir eşleşme bulmak
            konusunda algoritma başarılı olamadığı takdirde hoş bir son çareye izin
            vermek için bazı istisnalar eklenmiştir.</p>
      
          <p>İstemci sunucudan bir sayfa istediğinde, sunucu, tarayıcı tarafından
            gönderilen <code>Accept-language</code> başlığıyla eşleşen tek bir sayfa
            bulamadığı takdirde istemciye ya “Kabul edilebilir bir gösterim çeşidi
            yok†ya da “Çok sayıda seçim belirtilmiş†yanıtını döndürür. Bu hata
            iletilerinden kaçınmak için bu gibi durumlarda httpd
            <code>Accept-language</code> başlığını yoksaymaya ayarlanabilir. Böylece
            istemcinin isteğine tam olarak uymasa da bir belge sağlanır. Bu hata
            iletilerinin birini veya her ikisini de geçersiz kılmak için <code class="directive"><a href="./mod/mod_negotiation.html#forcelanguagepriority">ForceLanguagePriority</a></code> yönergesi
            kullanılabilir ve sunucunun kararını <code class="directive"><a href="./mod/mod_negotiation.html#languagepriority">LanguagePriority</a></code> yönergesine
            dayanarak vermesi saÄŸlanabilir.</p>
      
          <p>Sunucu ayrıca, tam bir eşleşme bulunmadığı zaman lehçelerle de eşleşme
            arayabilir. Örneğin, bir istemci Britanya İngilizcesi
            (<code>en-GB</code>) ile yazılmış belgeler için istekte bulunursa,
            sunucu normalde HTTP/1.1 standardına göre bir belgenin basitçe
            <code>en</code> olarak imlenmesine izin vermez. (Bir okuyucu Britanya
            İngilizcesini anlıyor ama genel İngilizceyi anlamıyor diye
            <code>Accept-Language</code> başlığında <code>en</code>  değil de
            <code>en-GB</code>’yi belirtmesinin hemen hemen daima bir yapılandırma
            hatasına yol açacağına dikkat ediniz. Maalesef, mevcut istemcilerin çoğu
            öntanımlı yapılandırmalarında buna benzer şeyler yapmaktadır.) Bununla
            birlikte, başka bir dille eşleşme mümkün değilse ve sunucu “Kabul
            edilebilir bir gösterim çeşidi yok†hatasını döndürmeye hazırsa veya
            <code class="directive"><a href="./mod/mod_negotiation.html#languagepriority">LanguagePriority</a></code> son
            çaresine ayarlanmışsa alt küme belirtimini yok sayacak ve
            <code>en</code> belge isteklerine <code>en-GB</code> belgelerle yanıt
            verecektir. httpd, lehçenin üyesi olduğu anadili, istemcinin kabul
            edilebilir diller listesine örtük olarak düşük bir üstünlük değeri ile
            ekler. Yalnız şuna dikkat edin, eğer istemci tercihini "en-GB; q=0.9,
            fr; q=0.8" olarak belirtirse ve sunucuda sadece "en" ve "fr" belgeleri
            varsa sunucu "fr" belge ile yanıt verecektir. HTTP/1.1 belirtimi ile
            uyumluluğu sağlamak ve düzgün yapılandırılmış istemcilerle gerektiği
            gibi çalışabilmek için bu gereklidir.</p>
      
          <p>Gelişmiş tekniklerin (çerezler, özel URL yolları gibi) desteklenmesi
            sırasında, kullanıcının tercih ettiği dili saptamak için httpd 2.0.47
            sürümünden beri <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> modülü
            <code>prefer-language</code> <a href="env.html">ortam deÄŸiÅŸkenini</a>
            tanımaktadır. Değişken mevcutsa ve uygun bir dil yaftası içeriyorsa
            <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> uygun gösterimi seçmeyi deneyecektir.
            Böyle bir gösterim çeşidi mevcut değilse normal uzlaşım işlemi
            uygulanacaktır.</p>
      
          <div class="example"><h3>Örnek</h3><pre class="prettyprint lang-config">SetEnvIf Cookie "language=(.+)" prefer-language=$1
      Header append Vary cookie</pre>
      </div>
        
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="extensions" id="extensions">Şeffaf İçerik Uzlaşımının Genişletilmesi</a></h2>
        
      
        <p>httpd, şeffaf içerik uzlaşımı protokolünü (RFC 2295) şöyle genişletir:
          Sadece içerik kodlamasına özgü olmak üzere gösterim çeşidi listelerinde
          gösterim çeşitlerini imlemek için yeni bir <code>{encoding ..}</code>
          elemanı kullanılır. RVSA/1.0 algoritmasının (RFC 2296) gerçeklenimi,
          listedeki kodlanmış gösterim çeşitlerini tanımak ve onları
          <code>Accept-Encoding</code> başlık alanıyla ilgili olarak kabul
          edilebilir kodlamalara aday gösterim çeşitleri olarak kullanmak üzere
          genişletilmiştir. RVSA/1.0 gerçeklenimi, en uygun gösterim çeşidi
          seçiminin öncesinde hesaplanmış üstünlük katsayısını virgülden sonra beş
          haneye yuvarlamaz.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="naming" id="naming">Hiperbağlar ve İsimlendirme Uzlaşımları</a></h2>
      
          <p>Eğer dil uzlaşımı kullanıyorsanız ve birden fazla dosya ismi uzantısına
            sahip dosyalarınız varsa uzantıların sıralamasının normalde uygunsuz
            düştüğü farklı isimlendirme yaklaşımlarında bulunabilirsiniz (ayrıntılar
            için <a href="mod/mod_mime.html#multipleext">mod_mime</a> belgesine
            bakınız).</p>
      
          <p>Bir MIME türü uzantısına sahip bir dosyanın (<code>html</code> gibi),
            kodlanmış bir gösterimi (<code>gz</code> gibi) mevcut olabilir. Bu
            dosyanın ayrıca farklı dillerdeki gösterimleri için de bir uzantısı
            (<code>en</code> gibi) olabilir.</p>
      
          <p>Örnekler:</p>
      
          <ul>
            <li>misal.en.html</li>
      
            <li>misal.html.en</li>
      
            <li>misal.en.html.gz</li>
          </ul>
      
          <p>Hiperbağ olarak geçerli ve geçersiz bazı dosya ismi örnekleri:</p>
      
          <table class="bordered">
            
            <tr>
              <th>Dosya ismi</th>
      
              <th>Geçerli Hiperbağ</th>
      
              <th>Geçersiz Hiperbağ</th>
            </tr>
      
            <tr>
              <td><em>misal.html.en</em></td>
      
              <td>misal<br />
               misal.html</td>
      
              <td>-</td>
            </tr>
      
            <tr>
              <td><em>misal.en.html</em></td>
      
              <td>misal</td>
      
              <td>misal.html</td>
            </tr>
      
            <tr>
              <td><em>misal.html.en.gz</em></td>
      
              <td>misal<br />
               misal.html</td>
      
              <td>misal.gz<br />
               misal.html.gz</td>
            </tr>
      
            <tr>
              <td><em>misal.en.html.gz</em></td>
      
              <td>misal</td>
      
              <td>misal.html<br />
               misal.html.gz<br />
               misal.gz</td>
            </tr>
      
            <tr>
              <td><em>misal.gz.html.en</em></td>
      
              <td>misal<br />
               misal.gz<br />
               misal.gz.html</td>
      
              <td>misal.html</td>
            </tr>
      
            <tr>
              <td><em>misal.html.gz.en</em></td>
      
              <td>misal<br />
               misal.html<br />
               misal.html.gz</td>
      
              <td>misal.gz</td>
            </tr>
          </table>
      
          <p>Yukarıdaki tabloya bakarak hiperbağlarda bir dosya ismini uzantısız
            olarak (<code>misal</code> gibi) kullanmanın daima mümkün olduğunu
            farkedeceksiniz. Böylece bir belgenin asıl türünü gizleyebilir ve
            sonradan bir hiperbağ değişikliği yapmaksızın örneğin
            <code>html</code>’den <code>shtml</code> veya <code>cgi</code>’ye
            geçebilirsiniz.</p>
      
          <p>Hiperbağlarda MIME türlerini (<code>misal.html</code> gibi) kullanmaya
            devam etmek istiyorsanız dil uzantısı MIME türü uzantısının sağında
            kalmalıdır (<code>misal.html.en</code> gibi).</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="caching" id="caching">Arabellekler Hakkında</a></h2>
      
          <p>Bir arabellek, bir gösterimi istek URL’si ile ilişkilendirerek saklar.
            Böylece, sonradan aynı URL için bir istek yapıldığında kaydettiği
            gösterimi kullanabilir. Fakat özkaynak sunucuyla uzlaşılan türdeyse
            arabelleğe ilk istenen çeşit saklanmış olacağından isteğe yanlış
            gösterimle yanıt verilmiş olacaktır. Bunun olmaması için httpd, normal
            olarak içerik uzlaşımının sonucu olarak döndürülen tüm yanıtları
            HTTP/1.0 istemciler tarafından arabelleklenemez olarak imler. httpd
            ayrıca, uzlaşımlı yanıtların arabelleklenmesini mümkün kılan HTTP/1.1
            protokolünü de destekler.</p>
      
          <p>HTTP/1.0 uyumlu istemcilerden (bir tarayıcı veya arabellek) gelen
            istekler için, uzlaşıma konu yanıtların arabelleklenmesini mümkün kılmak
            üzere <code class="directive"><a href="./mod/mod_negotiation.html#cachenegotiateddocs">CacheNegotiatedDocs</a></code> yönergesi kullanılabilir. Bu yönerge
            argümansızdır ve sunucu genelinde veya sanal konakların
            yapılandırılmasında kullanılabilir. Bunun HTTP/1.1 istemcilerinden gelen
            isteklere bir etkisi yoktur.</p>
      
          <p>HTTP/1.1 istemciler için, httpd, yanıtın uzlaşım boyutlarını göstermek
            üzere bir <code>Vary</code> HTTP yanıt başlığı gönderir. Arabellekler bu
            bilgiyi sonraki istekleri yerel kopyadan sunarken kullanabilirler. Bir
            arabelleğin uzlaşım boyutlarına bakmaksızın yerel kopyasını kullanmaya
            teşvik etmek için <code>force-no-vary</code> <a href="env.html#special">ortam değişkenini</a> etkin kılabilirsiniz.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./en/content-negotiation.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/content-negotiation.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/content-negotiation.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/content-negotiation.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/content-negotiation.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/content-negotiation.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/sections.html.ko.euc-kr����������������������������������������������������0000644�0000000�0000050�00000062177�13412755316�017777� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¼½¼Ç ¼³Á¤ - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>¼½¼Ç ¼³Á¤</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/sections.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/sections.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sections.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sections.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sections.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
       <p><a href="configuring.html">¼³Á¤ÆÄÀÏ</a>¿¡ ÀÖ´Â
      Áö½Ã¾î´Â ¼­¹ö Àüü¿¡ Àû¿ëµÇ°Å³ª, ƯÁ¤ µð·ºÅ丮, ÆÄÀÏ, È£½ºÆ®,
      URL¿¡¸¸ Àû¿ëµÉ ¼ö ÀÖ´Ù. ÀÌ ¹®¼­´Â ´Ù¸¥ Áö½Ã¾îÀÇ Àû¿ë¹üÀ§¸¦
      Á¦ÇÑÇϱâÀ§ÇØ ¼³Á¤ ¼½¼ÇÀ̳ª <code>.htaccess</code> ÆÄÀÏÀ»
      »ç¿ëÇÏ´Â ¹æ¹ýÀ» ¼³¸íÇÑ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#types">¼³Á¤ ¼½¼ÇÀÇ Á¾·ù</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#file-and-web">ÆÄÀϽýºÅÛ°ú À¥°ø°£</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#virtualhost">°¡»óÈ£½ºÆ®</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#proxy">ÇÁ·Ï½Ã</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#whatwhere">¾È¿¡ ¾î¶² Áö½Ã¾î¸¦ »ç¿ëÇÒ ¼ö
      ÀÖ³ª?</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#mergin">¼½¼ÇµéÀÌ °áÇÕÇÏ´Â ¹æ¹ý</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="types" id="types">¼³Á¤ ¼½¼ÇÀÇ Á¾·ù</a></h2>
      
      <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="./mod/core.html">core</a></code></li><li><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
      <p>¼½¼Ç¿¡´Â µÎ°¡Áö Á¾·ù°¡ ÀÖ´Ù. ´ëºÎºÐÀº ¸Å¿äû¸¶´Ù 󸮵ȴÙ.
      ÇØ´çÇÏ´Â ¿äû¿¡¸¸ ¾È¿¡ Æ÷ÇÔÇÑ Áö½Ã¾î¸¦ Àû¿ëÇÑ´Ù. ¹Ý´ë·Î, <code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>°ú <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>Àº ¼­¹ö°¡
      ½ÃÀÛÇÒ¶§¿Í ²¨Áú¶§¸¸ ó¸®ÇÑ´Ù. ½ÃÀÛÇÒ¶§ »óŰ¡ ÂüÀÌ¸é ¾È¿¡ ÀÖ´Â
      Áö½Ã¾î°¡ ¸ðµç ¿äû¿¡ Àû¿ëµÈ´Ù. ÂüÀÌ ¾Æ´Ï¸é ¾È¿¡ ÀÖ´Â Áö½Ã¾î´Â
      ¹«½ÃÇÑ´Ù.</p>
      
      <p><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>
      Áö½Ã¾î´Â <code>httpd</code> ¸í·ÉÇà¿¡ ÀûÀýÇÑ ÆÄ¶ó¹ÌÅͰ¡ ÀÖ´Â
      °æ¿ì¿¡¸¸ ¾È¿¡ Æ÷ÇÔÇÑ Áö½Ã¾î¸¦ Àû¿ëÇÑ´Ù. ´ÙÀ½ ¼³Á¤À» ¿¹·Î µé¸é,
      ¼­¹ö¸¦ <code>httpd -DClosedForNow</code>·Î ½ÃÀÛÇÒ °æ¿ì¿¡¸¸
      ¸ðµç ¿äûÀÌ ´Ù¸¥ »çÀÌÆ®·Î ¸®´ÙÀÌ·º¼ÇµÈ´Ù:</p>
      
      <div class="example"><p><code>
      &lt;IfDefine ClosedForNow&gt;<br />
      Redirect / http://otherserver.example.com/<br />
      &lt;/IfDefine&gt;
      </code></p></div>
      
      <p><code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>
      Áö½Ã¾îµµ ƯÁ¤ ¸ðµâÀÌ ¼­¹ö¿¡ Æ÷ÇÔµÈ °æ¿ì¿¡¸¸ ¾È¿¡ µç Áö½Ã¾î¸¦
      Àû¿ëÇÑ´Ù´Â Á¡À» Á¦¿ÜÇϰí´Â ¸Å¿ì ºñ½ÁÇÏ´Ù. ¸ðµâÀ» ¼­¹ö¿¡ Á¤ÀûÀ¸·Î
      ÄÄÆÄÀÏÇϰųª µ¿ÀûÀ¸·Î ÄÄÆÄÀÏÇÑÈÄ ¼³Á¤ÆÄÀÏ ¾Õ¿¡ <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> ÁÙÀÌ ÀÖ¾î¾ß ÇÑ´Ù. ÀÌ
      Áö½Ã¾î´Â ƯÁ¤ ¸ðµâÀÇ ¼³Ä¡À¯¹«¿¡ µû¶ó ¼³Á¤ÆÄÀÏÀÌ ´Ù¸¦ Çʿ䰡
      ÀÖÀ»¶§¸¸ »ç¿ëÇØ¾ß ÇÑ´Ù. ¸ðµâÀÌ ¾ø´Â °æ¿ì À¯¿ëÇÑ ¿À·ù¹®ÀÌ ³ª¿ÀÁö¾ÊÀ»
      ¼ö Àֱ⠶§¹®¿¡ ¾ðÁ¦³ª »ç¿ëÇÏ±æ ¿øÇÏ´Â Áö½Ã¾î¸¦ ¾È¿¡ µÎ¸é ¾ÈµÈ´Ù.</p>
      
      <p>´ÙÀ½ ¿¹¿¡¼­ <code class="module"><a href="./mod/mod_mime_magic.html">mod_mime_magic</a></code>ÀÌ ÀÖÀ»¶§¸¸ <code class="directive"><a href="./mod/mod_mime_magic.html#mimemagicfiles">MimeMagicFiles</a></code> Áö½Ã¾î¸¦
      ó¸®ÇÑ´Ù.</p>
      
      <div class="example"><p><code>
      &lt;IfModule mod_mime_magic.c&gt;<br />
      MimeMagicFile conf/magic<br />
      &lt;/IfModule&gt;
      </code></p></div>
      
      <p><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>°ú
      <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>ÀÇ
      °Ë»ç ¾Õ¿¡ "!"À» ºÙ¿© Á¶°ÇÀ» ¿ªÀ¸·Î ÇÒ ¼ö ÀÖ´Ù. ¶Ç, ¿©·¯ ¼½¼ÇµéÀ»
      °ãÃļ­ »ç¿ëÇÏ¿© ´õ º¹ÀâÇÑ È¿°ú¸¦ ¾òÀ» ¼ö ÀÖ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="file-and-web" id="file-and-web">ÆÄÀϽýºÅÛ°ú À¥°ø°£</a></h2>
      
      <p>°¡Àå ÀÚÁÖ »ç¿ëµÇ´Â ¼³Á¤ ¼½¼ÇÀº ÆÄÀϽýºÅÛ°ú À¥°ø°£(webspace)ÀÇ
      ƯÁ¤ Àå¼Ò¿¡ ´ëÇÑ ¼³Á¤À» º¯°æÇÏ´Â °ÍµéÀÌ´Ù. ¸ÕÀú ÀÌ µÑÀÇ Â÷À̸¦
      ÀÌÇØÇÏ´Â °ÍÀÌ Áß¿äÇÏ´Ù. ÆÄÀϽýºÅÛÀº ¿î¿µÃ¼Á¦ ÀÔÀå¿¡¼­ µð½ºÅ©¸¦
      º¸´Â °üÁ¡ÀÌ´Ù. ¿¹¸¦ µé¾î, ±âº»°ªÀ¸·Î ¾ÆÆÄÄ¡¸¦ ¼³Ä¡¸¦ Çϸé À¯´Ð½º
      ÆÄÀϽýºÅÛÀÇ °æ¿ì <code>/usr/local/apache2</code>, À©µµ¿ìÁî
      ÆÄÀϽýºÅÛÀÇ °æ¿ì <code>"c:/Program Files/Apache
      Group/Apache2"</code>¿¡ ¼³Ä¡µÈ´Ù. (¾ÆÆÄÄ¡´Â À©µµ¿ìÁî¿¡¼­ Á¶Â÷
      Ç×»ó, ¿ª½½·¡½¬°¡ ¾Æ´Ñ, ½½·¡½¬¸¦ »ç¿ëÇÔÀ» ÁÖÀÇÇ϶ó.) ¹Ý´ë·Î
      À¥°ø°£Àº À¥¼­¹ö°¡ Á¦°øÇϰí Ŭ¶óÀÌ¾ðÆ®°¡ º¸°ÔµÉ »çÀÌÆ®ÀÇ °üÁ¡ÀÌ´Ù.
      ±×·¡¼­ À¯´Ð½º¿¡¼­ ±âº» ¾ÆÆÄÄ¡ ¼³Ä¡¸¦ ÇÑ °æ¿ì À¥°æ·ÎÀÇ °æ·Î
      <code>/dir/</code>Àº ÆÄÀϽýºÅÛ °æ·Î
      <code>/usr/local/apache2/htdocs/dir/</code>¿¡ ÇØ´çÇÑ´Ù. À¥°ø°£Àº
      µ¥ÀÌŸº£À̽º µî¿¡¼­ µ¿ÀûÀ¸·Î »ý¼ºµÉ ¼ö Àֱ⶧¹®¿¡ ¹Ýµå½Ã
      ÆÄÀϽýºÅÛ¿¡ Á÷Á¢ ´ëÀÀµÉ ÇÊ¿ä´Â ¾ø´Ù.</p>
      
      <h3><a name="filesystem" id="filesystem">ÆÄÀϽýºÅÛ ¼½¼Ç</a></h3>
      
      <p><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>¿Í
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> Áö½Ã¾î¿Í
      Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÏ´Â Áö½Ã¾î´Â ÆÄÀϽýºÅÛÀÇ Æ¯Á¤ ºÎºÐ¿¡ Áö½Ã¾î¸¦
      Àû¿ëÇÑ´Ù. <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> Áö½Ã¾î¿¡ Æ÷ÇÔµÈ Áö½Ã¾îµéÀº
      ÁöÁ¤ÇÑ ÆÄÀϽýºÅÛ µð·ºÅ丮¿Í ±× ÇÏÀ§ µð·ºÅ丮¿¡ Àû¿ëµÈ´Ù. <a href="howto/htaccess.html">.htaccess ÆÄÀÏ</a>À» »ç¿ëÇØµµ °á°ú´Â
      °°´Ù. ´ÙÀ½ ¼³Á¤À» ¿¹·Î µé¸é, µð·ºÅ丮 ¸ñ·Ï(index)ÀÌ
      <code>/var/web/dir1</code> ÀÌÇÏ µð·ºÅ丮¿¡¼­ µð·ºÅ丮 ¸ñ·Ï(index)ÀÌ
      °¡´ÉÇÏ´Ù.</p>
      
      <div class="example"><p><code>
      &lt;Directory /var/web/dir1&gt;<br />
      Options +Indexes<br />
      &lt;/Directory&gt;
      </code></p></div>
      
      <p><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> ¼½¼Ç¿¡ Æ÷ÇÔµÈ Áö½Ã¾îµéÀº ¾î¶²
      µð·ºÅ丮¿¡ ÀÖ´ÂÁö °ü°è¾øÀÌ ÁöÁ¤ÇÑ À̸§À» °¡Áø ÆÄÀÏ¿¡ Àû¿ëµÈ´Ù.
      ¼³Á¤ÆÄÀÏÀÇ ÁÖ¼³Á¤ºÎºÐ¿¡ ÀÖ´Â ´ÙÀ½ ¼³Á¤À» ¿¹·Î µé¸é, Àå¼Ò¿Í
      °ü°è¾øÀÌ <code>private.html</code>À̶õ À̸§À» ÇÑ ÆÄÀÏÀÇ Á¢±ÙÀ»
      °ÅºÎÇÑ´Ù.</p>
      
      <div class="example"><p><code>
      &lt;Files private.html&gt;<br />
      Order allow,deny<br />
      Deny from all<br />
      &lt;/Files&gt;
      </code></p></div>
      
      <p>ÆÄÀϽýºÅÛÀÇ Æ¯Á¤ ºÎºÐ¿¡ ÀÖ´Â ÆÄÀÏÀ» ÁöĪÇϱâÀ§ÇØ <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>¿Í <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> ¼½¼ÇÀ» °°ÀÌ
      »ç¿ëÇÑ´Ù. ´ÙÀ½ ¼³Á¤À» ¿¹·Î µé¸é,
      <code>/var/web/dir1/private.html</code>,
      <code>/var/web/dir1/subdir2/private.html</code>,
      <code>/var/web/dir1/subdir3/private.html</code> °°ÀÌ
      <code>/var/web/dir1/</code> µð·ºÅ丮 ¾Æ·¡¿¡ ÀÖ´Â À̸§ÀÌ
      <code>private.html</code>ÀÎ ÆÄÀÏÀÇ Á¢±ÙÀ» °ÅºÎÇÑ´Ù.</p>
      
      <div class="example"><p><code>
      &lt;Directory /var/web/dir1&gt;<br />
      &lt;Files private.html&gt;<br />
      Order allow,deny<br />
      Deny from all<br />
      &lt;/Files&gt;<br />
      &lt;/Directory&gt;
      </code></p></div>
      
      
      <h3><a name="webspace" id="webspace">À¥°ø°£ ¼½¼Ç</a></h3>
      
      <p><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
      Áö½Ã¾î¿Í ÀÌ¿¡ ÇØ´çÇÏ´Â Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÏ´Â Áö½Ã¾î´Â ¹Ý´ë·Î
      ƯÁ¤ À¥°ø°£ÀÇ ¼³Á¤À» ¹Ù²Û´Ù. ´ÙÀ½ ¼³Á¤À» ¿¹·Î µé¸é, /privateÀ¸·Î
      ½ÃÀÛÇÏ´Â URL-°æ·ÎÀÇ Á¢±ÙÀÌ °ÅºÎµÈ´Ù. ¿©±â¿¡´Â
      <code>http://yoursite.example.com/private</code>,
      <code>http://yoursite.example.com/private123</code>,
      <code>http://yoursite.example.com/private/dir/file.html</code>
      °°ÀÌ <code>/private</code> ¹®ÀÚ¿­·Î ½ÃÀÛÇÏ´Â ¿äûÀÌ ÇØ´çµÈ´Ù.</p>
      
      <div class="example"><p><code>
      &lt;Location /private&gt;<br />
      Order Allow,Deny<br />
      Deny from all<br />
      &lt;/Location&gt;
      </code></p></div>
      
      <p><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
      Áö½Ã¾î´Â ÆÄÀϽýºÅÛ¿¡ ´ëÀÀÇÒ Çʿ䰡 ¾ø´Ù. ´ÙÀ½ ¿¹´Â ¾î¶»°Ô ƯÁ¤
      URLÀ» <code class="module"><a href="./mod/mod_status.html">mod_status</a></code>°¡ Á¦°øÇÏ´Â ¾ÆÆÄÄ¡ ³»ºÎ Çڵ鷯·Î
      ´ëÀÀ½ÃŰ´ÂÁö¸¦ º¸¿©ÁØ´Ù. ÆÄÀϽýºÅÛ¿¡ <code>server-status</code>¶ó´Â
      ÆÄÀÏÀº ÇÊ¿ä¾ø´Ù.</p>
      
      <div class="example"><p><code>
      &lt;Location /server-status&gt;<br />
      SetHandler server-status<br />
      &lt;/Location&gt;
      </code></p></div>
      
      
      <h3><a name="wildcards" id="wildcards">¿ÍÀϵåÄ«µå¿Í Á¤±ÔÇ¥Çö½Ä</a></h3>
      
      <p><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
      Áö½Ã¾î¿¡¼­ C Ç¥ÁØ ÆÄÀ̺귯¸®ÀÇ <code>fnmatch</code>¿Í °°Àº
      ½©¿¡¼­ »ç¿ëÇÏ´Â ¿ÍÀϵåÄ«µå ¹®ÀÚ¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù.
      "*" ¹®ÀÚ´Â ¾î¶² ¹®ÀÚ¿­ÀÌ¶óµµ ³ªÅ¸³»°í, "?" ¹®ÀÚ´Â ¾î¶² ¹®ÀÚ ÇѰ³¸¦
      ³ªÅ¸³»¸ç, "[<em>seq</em>]"´Â <em>seq</em> Áß¿¡ ÇÑ ¹®ÀÚ¸¦ ³ªÅ¸³½´Ù.
      ¾î¶² ¿ÍÀϵåÄ«µåµµ "/" ¹®ÀÚ¸¦ ³ªÅ¸³»Áö´Â ¸øÇÑ´Ù. ±×·¡¼­ ÀÌ ¹®ÀÚ´Â
      Á÷Á¢ »ç¿ëÇØ¾ß ÇÑ´Ù.</p>
      
      <p>´õ À¯¿¬ÇÑ ¼³Á¤ÀÌ ÇÊ¿äÇϸé perlȣȯ <a href="glossary.html#regex">Á¤±ÔÇ¥Çö½Ä</a>À» »ç¿ëÇÏ´Â <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code>¸¦ »ç¿ëÇÒ
      ¼ö ÀÖ´Ù. ±×·¯³ª ¾Æ·¡ ¼³Á¤ÀÇ °áÇÕ¿¡ °üÇÑ Àý¿¡¼­ Á¤±ÔÇ¥Çö½Ä ¼½¼ÇÀ»
      »ç¿ëÇϸé Áö½Ã¾î°¡ Àû¿ëµÇ´Â ¹æ¹ýÀÌ ¾î¶»°Ô º¯ÇÏ´ÂÁö »ìÆìºÁ¶ó.</p>
      
      <p>¸ðµç »ç¿ëÀÚ µð·ºÅ丮 ¼³Á¤À» º¯°æÇÏ´Â ºñÁ¤±ÔÇ¥Çö½Ä ¿ÍÀϵåÄ«µå
      ¼½¼ÇÀº ´ÙÀ½°ú °°´Ù:</p>
      
      <div class="example"><p><code>
      &lt;Directory /home/*/public_html&gt;<br />
      Options Indexes<br />
      &lt;/Directory&gt;
      </code></p></div>
      
      <p>Á¤±ÔÇ¥Çö½Ä ¼½¼ÇÀ» »ç¿ëÇÏ¿© Çѹø¿¡ ¿©·¯ Á¾·ùÀÇ ±×¸²ÆÄÀÏ¿¡
      ´ëÇÑ Á¢±ÙÀ» °ÅºÎÇÒ ¼ö ÀÖ´Ù:</p>
      <div class="example"><p><code>
      &lt;FilesMatch \.(?i:gif|jpe?g|png)$&gt;<br />
      Order allow,deny<br />
      Deny from all<br />
      &lt;/FilesMatch&gt;
      </code></p></div>
      
      
      
      <h3><a name="whichwhen" id="whichwhen">¹«¾ùÀ» »ç¿ëÇϳª</a></h3>
      
      <p>ÆÄÀϽýºÅÛ ¼½¼Ç°ú À¥°ø°£ ¼½¼Ç Áß Çϳª¸¦ ¼±ÅÃÇÏ´Â °ÍÀº ½ÇÁ¦·Î
      ¸Å¿ì ½±´Ù. ÆÄÀϽýºÅÛ¿¡ ÀÖ´Â °´Ã¼¿¡ Áö½Ã¾î¸¦ Àû¿ëÇÒ¶§´Â Ç×»ó
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>³ª
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>¸¦
      »ç¿ëÇÑ´Ù. (µ¥ÀÌŸº£À̽º¿¡¼­ »ý¼ºÇÑ À¥ÆäÀÌÁö¿Í °°ÀÌ) ÆÄÀϽýºÅÛ¿¡
      ÀÖÁö ¾Ê´Â °´Ã¼¿¡ Áö½Ã¾î¸¦ Àû¿ëÇÒ¶§´Â <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>À» »ç¿ëÇÑ´Ù.</p>
      
      <p>ÆÄÀϽýºÅÛ¿¡ ÀÖ´Â °´Ã¼ÀÇ Á¢±ÙÀ» Á¦ÇÑÇϱâÀ§ÇØ <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>À» »ç¿ëÇϸé
      Àý´ë ¾ÈµÈ´Ù. ¿©·¯ ´Ù¸¥ À¥°ø°£ Àå¼Ò(URL)°¡ °°Àº ÆÄÀϽýºÅÛ Àå¼Ò¿¡
      ´ëÀÀµÉ ¼ö ÀÖÀ¸¹Ç·Î, °É¾îµÐ Á¦ÇÑÀ» ¿ìȸÇÒ ¼ö Àֱ⠶§¹®ÀÌ´Ù. ´ÙÀ½
      ¼³Á¤ÀÇ ¿¹¸¦ »ìÆìº¸ÀÚ:</p>
      
      <div class="example"><p><code>
      &lt;Location /dir/&gt;<br />
      Order allow,deny<br />
      Deny from all<br />
      &lt;/Location&gt;
      </code></p></div>
      
      <p>ÀÌ ¼³Á¤Àº <code>http://yoursite.example.com/dir/</code>À»
      ¿äûÇÑ´Ù¸é Àß ÀÛµ¿ÇÑ´Ù. ±×·¯³ª ´ë¼Ò¹®ÀÚ¸¦ ±¸º°ÇÏÁö¾Ê´Â ÆÄÀϽýºÅÛÀ»
      »ç¿ëÇÑ´Ù¸é ¾î¶»°ÔµÇ³ª?
      <code>http://yoursite.example.com/DIR/</code>À» ¿äûÇÏ¿© ½±°Ô
      Á¦ÇÑÀ» ¿ìȸÇÒ ¼ö ÀÖ´Ù. ¹Ý´ë·Î <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> Áö½Ã¾î´Â ¾î¶»°Ô ¿äûÇÏ¿´´ÂÁö
      °ü°è¾øÀÌ ±× Àå¼Ò¿¡¼­ ¼­ºñ½ºµÇ´Â ³»¿ë¿¡ Àû¿ëµÈ´Ù. (¿¹¿Ü´Â ÆÄÀϽýºÅÛ
      ¸µÅ©¸¦ »ç¿ëÇÏ´Â °æ¿ì´Ù. ½Éº¼¸µÅ©¸¦ »ç¿ëÇÏ¿© ÇÑ µð·ºÅ丮¸¦
      ÆÄÀϽýºÅÛÀÇ ¿©·¯ Àå¼Ò¿¡ µÑ ¼ö ÀÖ´Ù. <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> Áö½Ã¾î´Â ½Éº¼¸µÅ©¸¦ µû¶ó°£´Ù.
      ±×·¯¹Ç·Î ³ôÀº ¼öÁØÀÇ º¸¾ÈÀ» À§Çؼ­´Â ÀûÀýÇÑ <code class="directive"><a href="./mod/core.html#options">Options</a></code> Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ½Éº¼¸µÅ©¸¦
      ¹«½ÃÇØ¾ß ÇÑ´Ù.)</p>
      
      <p>¾Æ¸¶µµ ´ç½ÅÀº ´ë¼Ò¹®ÀÚ¸¦ ±¸º°ÇÏ´Â ÆÄÀϽýºÅÛÀ» »ç¿ëÇϹǷÎ
      ÀÌ·± ÀÏÀÌ ÀϾÁö ¾Ê´Â´Ù°í »ý°¢ÇÒÁöµµ ¸ð¸¥´Ù. ±×·¯³ª ´Ù¸¥
      ¹æ¹ýÀ¸·Îµµ ¿©·¯ À¥°ø°£ À§Ä¡°¡ ÇÑ ÆÄÀϽýºÅÛ À§Ä¡¿¡ ´ëÀÀµÉ ¼ö
      ÀÖÀ½À» ±â¾ïÇ϶ó. ±×·¡¼­ °¡´ÉÇϸé Ç×»ó ÆÄÀϽýºÅÛ ¼½¼ÇÀ» »ç¿ëÇØ¾ß
      ÇÑ´Ù. ±×·¯³ª ÀÌ ±ÔÄ¢¿¡ ¿¹¿Ü°¡ Çϳª ÀÖ´Ù. ¼³Á¤ Á¦ÇÑÀ»
      <code>&lt;Location /&gt;</code> ¼½¼Ç¿¡ µÎ¸é ÀÌ ¼½¼ÇÀÌ Æ¯Á¤
      URLÀÌ ¾Æ´Ñ ¸ðµç ¿äû¿¡ Àû¿ëµÇ¹Ç·Î ¿Ïº®ÇÏ°Ô ¾ÈÀüÇÏ´Ù.</p>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="virtualhost" id="virtualhost">°¡»óÈ£½ºÆ®</a></h2>
      
      <p><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
      ¼½¼ÇÀº ƯÁ¤ È£½ºÆ®¿¡ Àû¿ëµÇ´Â Áö½Ã¾îµéÀ» Æ÷ÇÔÇÑ´Ù. ÀÌ´Â ÇÑ
      ÄÄÇ»ÅÍ¿¡¼­ °¢°¢ ´Ù¸¥ ¼³Á¤À» »ç¿ëÇÑ ¿©·¯ È£½ºÆ®¸¦ ¼­ºñ½ºÇÒ¶§
      À¯¿ëÇÏ´Ù. ´õ ÀÚ¼¼ÇÑ Á¤º¸´Â <a href="vhosts/">°¡»óÈ£½ºÆ® ¹®¼­</a>¸¦
      Âü°íÇ϶ó.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="proxy" id="proxy">ÇÁ·Ï½Ã</a></h2>
      
      <p><code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>¿Í
      <code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code>
      ¼½¼ÇÀº ÁöÁ¤ÇÑ URL¿¡ ´ëÇØ <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> ÇÁ·Ï½Ã ¼­¹ö¸¦
      °ÅÃÄ Á¢±ÙÇÏ´Â °æ¿ì¿¡¸¸ Àû¿ëµÈ´Ù. ´ÙÀ½ ¼³Á¤À» ¿¹·Î µé¸é, ÇÁ·Ï½Ã
      ¼­¹ö¸¦ ÅëÇØ <code>cnn.com</code> À¥»çÀÌÆ®¿¡ Á¢±ÙÇÒ ¼ö ¾ø´Ù.</p>
      
      <div class="example"><p><code>
      &lt;Proxy http://cnn.com/*&gt;<br />
      Order allow,deny<br />
      Deny from all<br />
      &lt;/Proxy&gt;
      </code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="whatwhere" id="whatwhere">¾È¿¡ ¾î¶² Áö½Ã¾î¸¦ »ç¿ëÇÒ ¼ö
      ÀÖ³ª?</a></h2>
      
      <p>¾î¶² ¼³Á¤ ¼½¼Ç¾È¿¡ »ç¿ëÇÒ ¼ö ÀÖ´Â Áö½Ã¾î¸¦ ¾Ë·Á¸é Áö½Ã¾îÀÇ
      <a href="mod/directive-dict.html#Context">»ç¿ëÀå¼Ò</a>¸¦ È®ÀÎÇ϶ó.
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>¿¡¼­
      »ç¿ë°¡´ÉÇÑ Áö½Ã¾î´Â <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>, <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>, <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code>, <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>, <code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code> ¼½¼Ç¿¡¼­µµ »ç¿ë°¡´ÉÇÏ´Ù.
      ±×·¯³ª, ¿¹¿Ü°¡ ÀÖ´Ù:</p>
      
      <ul>
      <li><code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> Áö½Ã¾î´Â
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
      ¼½¼Ç¿¡¼­¸¸ »ç¿ëÇÒ ¼ö ÀÖ´Ù.</li>
      
      <li><code>FollowSymLinks</code>, <code>SymLinksIfOwnerMatch</code>,
      <code class="directive"><a href="./mod/core.html#options">Options</a></code>´Â <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> ¼½¼ÇÀ̳ª
      <code>.htaccess</code> ÆÄÀÏ¿¡¼­¸¸ »ç¿ëÇÒ ¼ö ÀÖ´Ù.</li>
      
      <li><code class="directive"><a href="./mod/core.html#options">Options</a></code> Áö½Ã¾î´Â
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>°ú
      <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>
      ¼½¼Ç¿¡¼­ »ç¿ëÇÒ ¼ö ¾ø´Ù.</li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mergin" id="mergin">¼½¼ÇµéÀÌ °áÇÕÇÏ´Â ¹æ¹ý</a></h2>
      
      <p>¼³Á¤ ¼½¼ÇÀº ¸Å¿ì Ưº°ÇÑ ¹æ¹ýÀ¸·Î Àû¿ëµÈ´Ù. ÀÌ ¼ø¼­°¡ ¼³Á¤
      Áö½Ã¾î¸¦ ÇØ¼®ÇÏ´Â ¹æ¹ý¿¡ Áß¿äÇÑ ¿µÇâÀ» Áֱ⶧¹®¿¡ ÀÌ ¹æ¹ýÀ»
      ÀÌÇØÇÏ´Â °ÍÀÌ Áß¿äÇÏ´Ù.</p>
      
          <p>°áÇÕÇÏ´Â ¼ø¼­´Â:</p>
      
          <ol>
            <li> (Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÏÁö¾Ê´Â) <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>¿Í <code>.htaccess</code>´Â
            µ¿½Ã¿¡ ÀϾ´Ù (°æ¿ì¿¡ µû¶ó <code>.htaccess</code>ÀÌ
            <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>¸¦
            ¹«½ÃÇϵµ·Ï ¼³Á¤ÇÒ ¼ö ÀÖ´Ù)</li>
      
            <li><code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code> (±×¸®°í
            <code>&lt;Directory ~&gt;</code>)</li>
      
            <li><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>¿Í <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>´Â µ¿½Ã¿¡ ÀϾ´Ù</li>
      
            <li><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>°ú <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code>´Â µ¿½Ã¿¡ ÀϾ´Ù</li>
          </ol>
      
          <p><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>¸¦ Á¦¿ÜÇÏ°í °¢ ¼½¼ÇµéÀ»
          ¼³Á¤ÆÄÀÏ¿¡ ³ª¿Â ¼ø¼­´ë·Î 󸮵ȴÙ. (À§ÀÇ ¼ø¼­ 1) <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>´Â µð·ºÅ丮
          ³»¿ëÀÌ °¡Àå ªÀº °Í¿¡¼­ ±äÂÊÀ¸·Î 󸮵ȴÙ. ±×·¡¼­ ¿¹¸¦ µé¾î,
          <code>&lt;Directory /var/web/dir&gt;</code>À»
          <code>&lt;Directory /var/web/dir/subdir&gt;</code> ÀÌÀü¿¡
          ó¸®ÇÑ´Ù. °°Àº µð·ºÅ丮¸¦ ÁöĪÇÏ´Â ¿©·¯ <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> ¼½¼ÇÀÌ
          ÀÖ´Ù¸é À̵éÀ» ¼³Á¤ÆÄÀÏ ¼ø¼­´ë·Î ó¸®ÇÑ´Ù. <code class="directive"><a href="./mod/core.html#include">Include</a></code> Áö½Ã¾î·Î Æ÷ÇÔÇÑ ¼³Á¤Àº
          <code class="directive"><a href="./mod/core.html#include">Include</a></code> Áö½Ã¾î À§Ä¡¿¡
          Æ÷ÇÔÇÑ ÆÄÀÏ ³»¿ëÀÌ ÀÖ´Â °Íó·³ ó¸®ÇÑ´Ù.</p>
      
          <p><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> ¼½¼Ç ¾È¿¡ Æ÷ÇÔµÈ ¼½¼ÇÀº
          °¡»óÈ£½ºÆ® Á¤ÀÇ ¹Û¿¡ ÀÖ´Â ÇØ´ç ¼½¼Ç <em>ÀÌÈÄ¿¡</em> Àû¿ëµÈ´Ù.
          ±×·¡¼­ °¡»óÈ£½ºÆ® ¾È¿¡¼­ ÁÖ¼­¹öÀÇ ¼³Á¤»çÇ×À» ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>°¡ ¿äû ¼­ºñ½ºÇÒ¶§, <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code> ¼½¼ÇÀÇ
          󸮼ø¼­´Â <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> ¼½¼Ç°ú °°´Ù.</p>
      
          <p>´ÙÀ½¿¡ ³ª¿À´Â ¼½¼ÇÀº ÀÌÀü ¼½¼ÇÀÇ °á°ú¸¦ ¼öÁ¤ÇÑ´Ù.</p>
      
      <div class="note"><h3>±â¼úÀû ÁÖÀÇ</h3>
            ½ÇÁ¦·Î
            <code>&lt;Location&gt;</code>/<code>&lt;LocationMatch&gt;</code>´Â
            (<code>Aliases</code>¿Í <code>DocumentRoot</code>¸¦ »ç¿ëÇÏ¿©
            URLÀ» ÆÄÀϸíÀ¸·Î º¯È¯ÇÏ´Â) À̸§¹ø¿ª ´Ü°è ÀÌÀü¿¡ 󸮵ȴÙ.
            º¯¿ªÀÌ ³¡³­ ÀÌÈÄ¿¡´Â ¿ÏÀüÈ÷ ¹«½ÃÇÑ´Ù.
      </div>
      
      <h3><a name="merge-examples" id="merge-examples">¿¹Á¦</a></h3>
      
      <p>´ÙÀ½Àº °ãÇÕÇÏ´Â ¼ø¼­¸¦ ¼³¸íÇÏ´Â ¿¹´Ù. ÀÌµé ¸ðµÎ ¿äû¿¡
      Àû¿ëµÈ´Ù°í °¡Á¤Çϸé Áö½Ã¾î´Â A &gt; B &gt; C &gt; D &gt; E
      ¼ø¼­·Î 󸮵ȴÙ.</p>
      
      <div class="example"><p><code>
      &lt;Location /&gt;<br />
      E<br />
      &lt;/Location&gt;<br />
      <br />
      &lt;Files f.html&gt;<br />
      D<br />
      &lt;/Files&gt;<br />
      <br />
      &lt;VirtualHost *&gt;<br />
      &lt;Directory /a/b&gt;<br />
      B<br />
      &lt;/Directory&gt;<br />
      &lt;/VirtualHost&gt;<br />
      <br />
      &lt;DirectoryMatch "^.*b$"&gt;<br />
      C<br />
      &lt;/DirectoryMatch&gt;<br />
      <br />
      &lt;Directory /a/b&gt;<br />
      A<br />
      &lt;/Directory&gt;<br />
      <br />
      </code></p></div>
      
      <p>´õ Çö½ÇÀûÀÎ ¿¹´Â ´ÙÀ½°ú °°´Ù. <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> ¼½¼ÇÀ» ³ªÁß¿¡ ó¸®ÇϹǷÎ
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
      ¼½¼Ç¿¡ ÀÖ´Â Á¢±ÙÁ¦ÇѰú °ü°è¾øÀÌ ¼­¹ö¿¡ ¹«Á¦ÇÑ Á¢±ÙÀ» °¡´ÉÇÏ´Ù.
      Áï, °áÇÕÇÏ´Â ¼ø¼­´Â Áß¿äÇϹǷΠÁÖÀÇÇ϶ó!</p>
      
      <div class="example"><p><code>
      &lt;Location /&gt;<br />
      Order deny,allow<br />
      Allow from all<br />
      &lt;/Location&gt;<br />
      <br />
      # ¾Ç!  ÀÌ &lt;Directory&gt; ¼½¼ÇÀº ¾Æ¹«·± È¿°ú°¡ ¾ø´Ù<br />
      &lt;Directory /&gt;<br />
      Order allow,deny<br />
      Allow from all<br />
      Deny from badguy.example.com<br />
      &lt;/Directory&gt;
      </code></p></div>
      
      
      
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/sections.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/sections.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sections.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sections.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sections.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/sections.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_0.html.tr.utf8����������������������������������������������0000644�0000000�0000050�00000043115�13447004010�020764� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache HTTP Sunucusu 2.0’da Yeni olan Özellikler - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache HTTP Sunucusu 2.0’da Yeni olan Özellikler</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./de/new_features_2_0.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/new_features_2_0.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_0.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/new_features_2_0.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/new_features_2_0.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_0.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./ru/new_features_2_0.html" hreflang="ru" rel="alternate" title="Russian">&nbsp;ru&nbsp;</a> |
      <a href="./tr/new_features_2_0.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
        <p>Bu belgede Apache HTTP Sunucusunun 1.3 ve 2.0 sürümleri arasındaki
          başlıca değişikliklerin bazılarına değinilmiştir.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#core">Çekirdekteki Gelişmeler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#module">Modüllerdeki Gelişmeler</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="upgrading.html">1.3’ten 2.0’a Yükseltme</a></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="core" id="core">Çekirdekteki Gelişmeler</a></h2>
          
      
          <dl>
            <dt>Unix Evreleri</dt>
      
            <dd>POSIX evreleri desteği olan Unix sistemlerinde Apache httpd, çok evreli
              kipte çok süreçlilik şeklinde melez bir yapıda çalışır. Bu bir çok
              bakımdan ölçeklenebilirliği arttırsa da bütün yapılandırmalarda
              saÄŸlanamaz.</dd>
      
            <dt>Yeni Paket Derleme Sistemi</dt>
      
            <dd>Yeni kaynak paketi derleme sistemi <code>autoconf</code> ve
              <code>libtool</code>’a dayalı olarak sıfırdan, yeni baştan yazıldı.
              Böylece Apache httpd’nin paket yapılandırma sistemi diğer paketlerinkiyle
              benzerlik kazanmış oldu.</dd>
      
            <dt>Çok Sayıda Protokol Desteği</dt>
      
            <dd>Apache HTTP Sunucusu artık çok sayıda protokol ile hizmet sunacak bir
              alt yapıya sahiptir. Örneğin, <code class="module"><a href="./mod/mod_echo.html">mod_echo</a></code> modülü bu
              amaçla yazılmıştır.</dd>
      
            <dt>Unix dışı platformalara daha iyi destek</dt>
      
            <dd>Apache HTTP Sunucusu 2.0 sürümleri,  BeOS, OS/2, Windows gibi Unix olmayan
              platformlarda daha hızlı ve daha kararlı çalışacak duruma
              getirilmiştir. Genelde iyi geliştirilmemiş olan dolayısıyla istenen
              başarımı sağlayamayan POSIX taklit katmanlarının kullanımından
              vazgeçilmiş, platforma özgü <a href="mpm.html">çok süreçlilik
              modülleri</a> (MPM) ve Apache Taşınabilirlik Arayüzü (APR) sayesinde
              bu platformlar artık kendi doğal programlama arayüzleriyle
              gerçeklenir olmuştur.</dd>
      
            <dt>Yeni Apache httpd Programlama Arayüzü</dt>
      
            <dd>Modüller için kullanılan programlama arayüzü 2.0 sürümüyle önemli
              değişikliklere uğramıştır. 1.3 sürümünde görülen modüllerle ilgili
              sıralama/öncelik sorunlarının çoğu giderilmiştir. 2.0 sürümü bu
              işlemleri daha bir özdevimli yapar olmuştur; daha fazla esneklik
              sağlamak için artık kancalı modül sıralaması kullanılabilmektedir.
              Ayrıca, arayüze, Apache HTTP Sunucususu çekirdeğini yamamaya gerek kalmadan
              modüllerle sunucu yeteneklerinin arttırılabilmesini sağlayan yeni
              çağrılar eklenmiştir.</dd>
      
            <dt>IPv6 DesteÄŸi</dt>
      
            <dd>IPv6’nın Apache Taşınabilirlik Arayüzü kütüphanesi tarafından
              desteklendiği sistemlerde Apache httpd öntanımlı olarak IPv6 soketlerini
              dinler. Bundan başka, <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>, <code class="directive"><a href="./mod/core.html#namevirtualhost">NameVirtualHost</a></code> ve <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code> yönergelerinin IPv6 sayısal adres
              dizgelerini desteklemesi sağlanmıştır.<br />Örnek: <code>Listen
              [2001:db8::1]:8080</code></dd>
      
            <dt>Süzme</dt>
      
            <dd>Apache httpd modülleri, artık, sunucuya teslim edilen veya sunucudan
              teslim alınan içerik akımları üzerinde süzgeç gibi davranacak şekilde
              yazılabilmektedir. Bu sayede, örneğin CGI betiklerinin çıktılarının
              <code class="module"><a href="./mod/mod_include.html">mod_include</a></code> modülünün <code>INCLUDES</code> süzgeci
              kullanılarak SSI yönergeleri için çözümlenmesi mümkündür. CGI
              programlarının birer eylemci olarak davranması gibi,
              <code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code> modülü de harici programların birer
              süzgeç olarak davranabilmesini mümkün kılar.</dd>
      
            <dt>Çok Dilli Hata Yanıtları</dt>
      
            <dd>Hata yanıtlarının tarayıcılara yönelik iletileri artık SSI
              belgeleri kullanılarak çeşitli dillerde sağlanabilmektedir. Bunlar
              ayrıca yönetici tarafından görünüş ve kullanışlılık tutarlılığı
              bakımından kişiselleştirilebilmektedir.</dd>
      
            <dt>Basitleştirilmiş Yapılandırma</dt>
      
            <dd>Bazı yönergelerle ilgili kafa karışıklıkları giderilmiştir.
              Bilhassa belli bir IP adresini dinlemek için kullanılan
              <code>Port</code> ve <code>BindAddress</code> yönergeleri ile ilgili
              karışıklığın önüne geçmek için sadece <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> yönergesi yeterli olmaktadır. <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code> yönergesi ise sadece yönlendirme
              ve sanal konak tanıma amacıyla sunucu ismi ve port belirtiminde
              kullanılmaktadır.</dd>
      
            <dt>DoÄŸal Windows NT Unicode DesteÄŸi</dt>
      
            <dd>Apache httpd 2.0, Windows NT üzerinde artık tüm dosya sistemi
              kodlamalarında utf-8 kullanmaktadır. Bu destek, Windows 2000 ve
              Windows XP dahil tüm Windows NT temelli sistemlere çok dillilik
              desteğini sağlamak üzere mevcut Unicode dosya sistemine doğrudan
              uyarlanır. <em>Dosya sisteminde makinenin yerel karakter kodlamasını
              kullanan kullanan Windows 95, 98 ve ME için bu destek
              yoktur.</em></dd>
      
            <dt>Düzenli İfade Kütüphanesi Güncellemesi</dt>
      
            <dd>Apache httpd 2.0’da <a href="http://www.pcre.org/">Perl uyumlu düzenli
              ifade kütüphanesi</a> bulunur. Tüm düzenli ifadelerde artık çok daha
              güçlü olan Perl 5 sözdizimi kullanılmaktadır.</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="module" id="module">Modüllerdeki Gelişmeler</a></h2>
          
      
          <dl>
            <dt><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></dt>
      
            <dd>Apache httpd 2.0’da yeni olan bu modül,  OpenSSL tarafından sağlanan
              SSL/TLS şifreleme protokollerine bir arayüzdür.</dd>
      
            <dt><code class="module"><a href="./mod/mod_dav.html">mod_dav</a></code></dt>
      
            <dd>Apache httpd 2.0’da yeni olan bu modül, site içeriğinin destek ve bakımı
              için HTTP dağıtık yazım ve sürüm yönetimi (DAV - Distributed
              Authoring and Versioning) belirtimini gerçekler.</dd>
      
            <dt><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code></dt>
      
            <dd>Apache httpd 2.0’da yeni olan bu modül sayesinde ağ band genişliğinden
              daha verimli yararlanabilmek için içeriğin sıkıştırılarak
              gönderilmesini talep eden tarayıcıların desteklenmesi mümkün
              olmuÅŸtur.</dd>
      
            <dt><code class="module">mod_auth_ldap</code></dt>
      
            <dd>Apache httpd 2.0.41’de yeni olan bu modül, HTTP temel kimlik
              doğrulamasında kullanılan delillerin saklanması için LDAP
              veritabanının kullanılabilmesini mümkün kılar. Kardeş modülü olan
              <code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code> ise bağlantı havuzlaması ve sonuçların
              önbelleğe alınması ile ilgilenir.</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_digest.html">mod_auth_digest</a></code></dt>
      
            <dd>Paylaşımlı belleği kullanan süreçlere karşı oturum önbelleklemesi
              için ek destek içerir.</dd>
      
            <dt><code class="module"><a href="./mod/mod_charset_lite.html">mod_charset_lite</a></code></dt>
      
            <dd>Apache httpd 2.0’da yeni olan bu deneysel modül, karakter kümesi
              dönüşümleri veya kaydı için destek sağlar.</dd>
      
            <dt><code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code></dt>
      
            <dd>Apache httpd 2.0’da yeni olan bu modül, Apache HHP Sunucusu 1.3’teki
              <code>mod_mmap_static</code> modülünün işlevselliğini içermenin
              yanında buna önbellekleme yetenekleri de ekler.</dd>
      
            <dt><code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code></dt>
      
            <dd>Bu modül Apache httpd 2.0’da daha esnek hale getirilmiştir. Artık
              <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> tarafından kullanılan istek başlıkları
              değiştirilebilmekte ve bunlar yanıt başlıklarına şartlı olarak
              atanabilmektedir.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dt>
      
            <dd>Bu modül HTTP/1.1 uyumlu vekaleti daha güvenilir kılmak ve yeni
              süzgeç alt yapısının getirilerinden de yararlanmak amacıyla yeni
              baştan yazılmıştır. Bunun yanında, <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code> bölümünün yeni hali vekil siteleri
              desteklemek bakımından daha okunabilir (ve kendi içinde daha hızlı)
              olması sağlanmıştır; <code>&lt;Directory "proxy:..."&gt;</code>
              yapılandırması artık desteklenmemektedir. Modül,
              <code>proxy_connect</code>, <code>proxy_ftp</code> ve
              <code>proxy_http</code> şeklinde her biri belli bir protokolü
              destekleyen ayrı modüllere bölünmüştür.</dd>
      
            <dt><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></dt>
      
            <dd>Yeni <code class="directive"><a href="./mod/mod_negotiation.html#forcelanguagepriority">ForceLanguagePriority</a></code> yönergesi sayesinde istemciye
              “Kabul edilebilir bir gösterim çeşidi yok†ya da “Çok sayıda seçim
              belirtilmiş†yanıtını döndürmek yerine tüm durumlara uyan bir
              sayfanın gönderilebilmesi sağlanmıştır. Bundan başka, uzlaşım ve
              <code>MultiViews</code> algoritmaları daha tutarlı sonuçlar elde
              etmek amacıyla elden geçirilmiş ve belge içeriği ile daha iyi eşleşen
              yeni bir tür eşlem yapısı sağlanmıştır.</dd>
      
            <dt><code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code></dt>
      
            <dd>Dizin içeriklerinin özdevimli listelenmesi artık HTML tabloları
              kullanılacak şekilde yapılandırılabilmektedir. Böylece sayfa daha iyi
              biçemlenebilmekte, içerik daha hassas sıralanabilmekte, sürüm
              numarasına göre sıralama yapılabilmekte ve dosya ismi kalıpları
              kullanılarak sadece istenen içerik listelenebilmektedir.</dd>
      
            <dt><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></dt>
      
            <dd>Yeni yönergeler, değiştirilecek SSI elemanları için öntanımlı
              başlangıç ve bitiş etiketlerine izin vermekte, hataların ve zaman
              biçemleme yapılandırmalarının SSI belgesinde değil ana yapılandırma
              dosyasında bulunması mümkün olmaktadır. Düzenli ifadelerin gruplanmış
              sonuçları (Perl düzenli ifade sözdizimi kullanılmaktadır)
              <code class="module"><a href="./mod/mod_include.html">mod_include</a></code> modülünün <code>$0</code> ..
              <code>$9</code> değişkenleri sayesinde kullanılabilmektedir.</dd>
      
            <dt><code class="module">mod_auth_dbm</code></dt>
      
            <dd><code class="directive">AuthDBMType</code> yönergesi
              sayesinde artık çok sayıda DBM tarzı veritabanı türü
              desteklenmektedir.</dd>
          </dl>
        </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./de/new_features_2_0.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/new_features_2_0.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_0.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/new_features_2_0.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/new_features_2_0.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_0.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./ru/new_features_2_0.html" hreflang="ru" rel="alternate" title="Russian">&nbsp;ru&nbsp;</a> |
      <a href="./tr/new_features_2_0.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/new_features_2_0.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/sections.html.fr.utf8������������������������������������������������������0000644�0000000�0000050�00000121443�13412755316�017465� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Sections de configuration - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Sections de configuration</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/sections.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/sections.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sections.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sections.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sections.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
       <p>Les directives des <a href="configuring.html">fichiers de configuration</a> peuvent s'appliquer
      au serveur dans son ensemble, ou seulement à des répertoires, fichiers, hôtes,
      ou URLs particuliers.  Ce document décrit comment utiliser les conteneurs de
      sections de configuration ou les fichiers <code>.htaccess</code> pour
      modifier la portée des directives de configuration.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#types">Types de conteneurs de sections de
      configuration</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#file-and-web">Système de fichiers,
      arborescence du site web et expressions booléennes</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#virtualhost">Hôtes virtuels</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#proxy">Mandataire</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#whatwhere">Quelles sont les directives autorisées ?</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#merging">Comment les sections sont combinées entre elles</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="types" id="types">Types de conteneurs de sections de
      configuration</a></h2>
      
      <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="./mod/core.html">core</a></code></li><li><code class="module"><a href="./mod/mod_version.html">mod_version</a></code></li><li><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_md.html#mdomainsetsection">&lt;MDomainSet&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
      <p>Il existe deux grands types de conteneurs.  La plupart des conteneurs sont
      évalués pour chaque requête.  Les directives qu'ils contiennent s'appliquent
      seulement aux requêtes qui sont concernées par le conteneur.  En revanche,
      les conteneurs
      <code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>, <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>, et
      <code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code> sont
      évalués seulement au démarrage et au redémarrage du serveur.
      Si leurs conditions sont vérifiées au démarrage, les directives qu'ils contiennent
      s'appliqueront à toutes les requêtes.  Si leurs conditions ne sont pas vérifiées, les
      directives qu'ils contiennent seront ignorées.</p>
      
      <p>Le conteneur <code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>
      contient des directives qui ne seront appliquées que si un paramètre
      approprié a été défini dans la ligne de commande de <code class="program"><a href="./programs/httpd.html">httpd</a></code>.
      Par exemple,
      avec la configuration suivante, toutes les requêtes seront redirigées vers
      un autre site si le serveur est démarré en utilisant la ligne de commande :
      <code>httpd -DClosedForNow</code>:</p>
      
      <pre class="prettyprint lang-config">&lt;IfDefine ClosedForNow&gt;
          Redirect "/" "http://otherserver.example.com/"
      &lt;/IfDefine&gt;</pre>
      
      
      <p>Le conteneur <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>
      est similaire; les directives qu'il contient ne s'appliqueront que si
      un module particulier est disponible au niveau du serveur.
      Le module doit être soit compilé statiquement dans le serveur, soit
      dynamiquement et dans ce cas, la ligne <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> correspondante doit apparaître
      plus haut dans le fichier de configuration.  Ce conteneur ne doit être
      utilisé que dans le cas où votre fichier de configuration doit fonctionner
      indépendamment de la présence ou de l'absence de certains modules.
      Il ne doit pas contenir de directives que vous souhaitez voir s'appliquer
      systématiquement, car vous pouvez perdre ainsi de précieux messages d'erreur
      à propos de modules manquants.</p>
      
      <p>Dans l'exemple suivant, la directive <code class="directive"><a href="./mod/mod_mime_magic.html#mimemagicfile">MimeMagicFile</a></code> ne s'appliquera que si le
      module <code class="module"><a href="./mod/mod_mime_magic.html">mod_mime_magic</a></code> est disponible.</p>
      
      <pre class="prettyprint lang-config">&lt;IfModule mod_mime_magic.c&gt;
          MimeMagicFile "conf/magic"
      &lt;/IfModule&gt;</pre>
      
      
      <p>Le conteneur
      <code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code>
      est similaire aux conteneurs <code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code> et <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>; les directives qu'il contient ne
      s'appliqueront que si une version particulière du serveur s'exécute.  Ce
      conteneur a été conçu pour une utilisation dans les suites de tests
      et les grands réseaux qui doivent prendre en compte différentes versions
      et configurations de httpd.</p>
      
      <pre class="prettyprint lang-config">&lt;IfVersion &gt;= 2.4&gt;
          # les directives situées ici ne s'appliquent que si la version <br />
          # est supérieure ou égale à 2.4.0.
      &lt;/IfVersion&gt;</pre>
      
      
      <p><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>, et
      <code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code>
      peuvent inverser leur test conditionnel en le faisant précéder d'un "!".
      De plus, ces sections peuvent être imbriquées afin de définir des restrictions
      plus complexes.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="file-and-web" id="file-and-web">Système de fichiers,
      arborescence du site web et expressions booléennes</a></h2>
      
      <p>Les conteneurs de sections de configuration les plus couramment utilisés
      sont ceux qui modifient la configuration de points particuliers du système de
      fichiers ou de l'arborescence du site web.  Tout d'abord, il est important de
      comprendre la différence entre les deux.  Le système de fichiers est une vue
      de vos disques tels qu'ils sont perçus par votre système d'exploitation.
      Par exemple, avec une installation par défaut,
      Apache httpd est situé dans <code>/usr/local/apache2</code> pour le système de
      fichiers UNIX, ou <code>"c:/Program Files/Apache Group/Apache2"</code> pour
      le système de fichiers Windows.  (Notez que des slashes directs doivent
      toujours être utilisés comme séparateur de chemin
      dans les fichiers de configuration d'Apache httpd, même sous
      Windows.)  Quant à
      l'arborescence du site web, il s'agit d'une vue de votre site
      tel que présenté par le
      serveur web et perçue par le client.  Ainsi le chemin <code>/dir/</code> dans
      l'arborescence du site web correspond au chemin
      <code>/usr/local/apache2/htdocs/dir/</code> dans le système de fichiers pour
      une installation d'Apache httpd par défaut sous UNIX.
      En outre, l'arborescence du site web n'a pas besoin de correspondre en permanence au
      système de fichiers, car les pages web peuvent être générées dynamiquement
      à partir de bases de données ou d'autres emplacements.</p>
      
      <h3><a name="filesystem" id="filesystem">Conteneurs de système de fichiers</a></h3>
      
      <p>Les conteneurs <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
      et <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>,
      ainsi que leurs équivalents acceptant les
      <a class="glossarylink" href="./glossary.html#regex" title="voir glossaire">expressions rationnelles</a>,
      appliquent des directives à certaines parties du système de fichiers.
      Les directives contenues dans une section <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> s'appliquent au répertoire
      précisé, ainsi qu'à tous ses sous-répertoires et aux fichiers que ces
      derniers contiennent.
      Le même effet peut être obtenu en utilisant les <a href="howto/htaccess.html">fichiers .htaccess</a>.  Par exemple, avec la
      configuration suivante, l'indexation sera activée pour le répertoire
      <code>/var/web/dir1</code> et tous ses sous-répertoires.</p>
      
      <pre class="prettyprint lang-config">&lt;Directory "/var/web/dir1"&gt;
          Options +Indexes
      &lt;/Directory&gt;</pre>
      
      
      <p>Les directives contenues dans une section <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> s'appliquent à tout fichier
      avec le nom spécifié, quel que soit le répertoire dans lequel il se trouve.
      Ainsi par exemple, les directives de configuration suivantes, si elles sont
      placées dans la section principale du fichier de configuration, vont interdire
      l'accès à tout fichier nommé <code>private.html</code> quel que soit
      l'endroit où il se trouve.</p>
      
      <pre class="prettyprint lang-config">&lt;Files "private.html"&gt;
          Require all denied
      &lt;/Files&gt;</pre>
      
      
      <p>Pour faire référence à des fichiers qui se trouvent en des points
      particuliers du système de fichiers, les sections
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> et
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
      peuvent être combinées.  Par exemple, la configuration suivante va interdire
      l'accès à <code>/var/web/dir1/private.html</code>,
      <code>/var/web/dir1/subdir2/private.html</code>,
      <code>/var/web/dir1/subdir3/private.html</code>, ainsi que toute instance de
      <code>private.html</code> qui se trouve dans l'arborescence
      <code>/var/web/dir1/</code>.</p>
      
      <pre class="prettyprint lang-config">&lt;Directory "/var/web/dir1"&gt;
          &lt;Files "private.html"&gt;
              Require all denied
          &lt;/Files&gt;
      &lt;/Directory&gt;</pre>
      
      
      
      <h3><a name="webspace" id="webspace">Conteneurs de l'arborescence du site web</a></h3>
      
      <p>le conteneur <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
      et son équivalent acceptant les
      <a class="glossarylink" href="./glossary.html#regex" title="voir glossaire">expressions rationnelles</a>, modifient quant à eux la
      configuration de parties de l'arborescence du site web.  Par exemple, la
      configuration suivante interdit l'accès à toute URL dont la partie chemin
      commence par /private.
      En particulier, l'interdiction s'appliquera aux requêtes pour :
      <code>http://yoursite.example.com/private</code>,
      <code>http://yoursite.example.com/private123</code>, et
      <code>http://yoursite.example.com/private/dir/file.html</code> ainsi qu'à
      toute requête commençant par la chaîne de caractères <code>/private</code>.</p>
      
      <pre class="prettyprint lang-config">&lt;LocationMatch "^/private"&gt;
          Require all denied
      &lt;/LocationMatch&gt;</pre>
      
      
      <p>Le conteneur <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
      n'a pas besoin de faire référence à un élément du système de fichiers.
      Par exemple, l'exemple suivant montre comment faire référence à une URL
      particulière vers un gestionnaire interne du serveur HTTP Apache fourni par le module
      <code class="module"><a href="./mod/mod_status.html">mod_status</a></code>.
      Il n'est pas nécessaire de trouver un fichier nommé <code>server-status</code>
      dans le système de fichiers.</p>
      
      <pre class="prettyprint lang-config">&lt;Location "/server-status"&gt;
          SetHandler server-status
      &lt;/Location&gt;</pre>
      
      
      
      <h3><a name="overlapping-webspace" id="overlapping-webspace">Espace web imbriqué</a></h3>
      <p>Pour contrôler deux URLs imbriquées, on doit tenir compte de l'ordre
      dans lequel certaines sections ou directives sont évaluées. Pour
      <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>, on doit
      avoir :</p>
      <pre class="prettyprint lang-config">&lt;Location "/foo"&gt;
      &lt;/Location&gt;
      &lt;Location "/foo/bar"&gt;
      &lt;/Location&gt;</pre>
      
      <p>Les directives <code class="directive"><a href="./mod/mod_alias.html#alias">&lt;Alias&gt;</a></code>, quant à elles, sont évaluées vice-versa :</p>
      <pre class="prettyprint lang-config">Alias "/foo/bar" "/srv/www/uncommon/bar"
      Alias "/foo" "/srv/www/common/foo"</pre>
      
      <p>Ceci est aussi vrai pour les directives <code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code> :</p>
      <pre class="prettyprint lang-config">ProxyPass "/special-area" "http://special.example.com" smax=5 max=10
      ProxyPass "/" "balancer://mycluster/" stickysession=JSESSIONID|jsessionid nofailover=On</pre>
      
      
      
      
      <h3><a name="wildcards" id="wildcards">Caractères de remplacement
      et expressions rationnelles</a></h3>
      
      <p>Les conteneurs
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>, et
      <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
      peuvent utiliser des caractères de remplacement de style shell comme dans
      la fonction <code>fnmatch</code> de la bibliothèque C standard.
      Le caractère "*"
      correspond à toute séquence de caractères, "?" à un caractère seul,
      et "[<em>seq</em>]" à tout caractère contenu dans <em>seq</em>.
      Le caractère "/"
      ne peut pas faire l'objet d'un remplacement;
      il doit être spécifié explicitement.</p>
      
      <p>Si une définition des critères de correspondance
      encore plus souple est nécessaire, chaque conteneur
      possède son équivalent acceptant les expressions rationnelles : <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>, et <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code> acceptent les
      <a class="glossarylink" href="./glossary.html#regex" title="voir glossaire">expressions rationnelles</a> compatibles Perl
      pour définir les critères de correspondance.  Mais voyez plus loin la section
      à propos de la combinaison des sections de configuration
      pour comprendre comment l'utilisation de
      conteneurs avec des expressions rationnelles va modifier la manière
      dont les directives sont appliquées.</p>
      
      <p>Un conteneur qui modifie la configuration de tous les
      répertoires utilisateurs à l'aide de caractères de remplacement
      mais sans utiliser
      les expressions rationnelles pourrait ressembler à ceci :</p>
      
      <pre class="prettyprint lang-config">&lt;Directory "/home/*/public_html"&gt;
          Options Indexes
      &lt;/Directory&gt;</pre>
      
      
      <p>Avec les conteneurs utilisant les expressions rationnelles,
      on peut interdire l'accès à de nombreux types de fichiers d'images
      simultanément :</p>
      <pre class="prettyprint lang-config">+&lt;FilesMatch "\.(?i:gif|jpe?g|png)$"&gt;
          Require all denied
      &lt;/FilesMatch&gt;</pre>
      
      
      <p>Les expressions rationnelles contenant des <strong>groupes nommés et
      des références arrières</strong> sont ajoutées à l'environnement avec
      leur nom en majuscules. Ceci permet de référencer des éléments de
      chemins de fichiers et d'URLs depuis une <a href="expr.html">expression</a> et au sein de modules comme
      <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>.</p>
      
      <pre class="prettyprint lang-config">&lt;DirectoryMatch "^/var/www/combined/(?&lt;SITENAME&gt;[^/]+)"&gt;
          require ldap-group "cn=%{env:MATCH_SITENAME},ou=combined,o=Example"
      &lt;/DirectoryMatch&gt;</pre>
      
      
      
      
      <h3><a name="expressions" id="expressions">Expressions booléennes</a></h3>
      <p>La directive <code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code>
      permet de modifier la configuration en fonction d'une condition qui peut
      être définie sous la forme d'une expression booléenne. Dans l'exemple
      suivant, l'accès est interdit si l'en-tête HTTP Referer ne commence pas
      par "http://www.example.com/".</p>
      <pre class="prettyprint lang-config">&lt;If "!(%{HTTP_REFERER} -strmatch 'http://www.example.com/*')"&gt;
          Require all denied
      &lt;/If&gt;</pre>
      
      
      
      
      <h3><a name="whichwhen" id="whichwhen">Que faut-il utiliser et quand ?</a></h3>
      
      <p>Choisir entre des conteneurs de système de fichiers et des conteneurs
      d'arborescence du site web est vraiment très simple.
      Pour appliquer des directives à des objets qui résident dans le système de
      fichiers, utilisez toujours un conteneur <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> ou <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>.  Pour appliquer des directives à des objets
      qui ne résident pas dans le système de fichiers (comme une page web générée
      par une base de données), utilisez un conteneur <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>.</p>
      
      <p>Il ne faut jamais utiliser un conteneur <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> pour restreindre l'accès à des
      objets du système de fichiers, car plusieurs localisations de
      l'arborescence du site web (URLs) peuvent correspondre à la même localisation
      du système de fichier, ce qui peut permettre de contourner vos restrictions.
      Par exemple, imaginez la configuration suivante :</p>
      
      <pre class="prettyprint lang-config">&lt;Location "/dir/"&gt;
          Require all denied
      &lt;/Location&gt;</pre>
      
      
      <p>Elle fonctionne correctement si la requête appelle
      <code>http://yoursite.example.com/dir/</code>.  Mais que va-t-il se passer si
      votre système de fichiers est insensible à la casse ?
      Votre restriction va pouvoir être tout simplement contournée en envoyant une
      requête sur
      <code>http://yoursite.example.com/DIR/</code>.  Le conteneur <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, quant à lui, s'appliquera
      à tout contenu servi à partir de cette localisation,
      sans tenir compte de la manière dont il est appelé.
      (Les liens du système de fichiers constituent une exception.
      Le même répertoire peut être placé dans plusieurs parties du système de
      fichiers en utilisant des liens symboliques.  Le conteneur
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> va suivre le
      lien symbolique sans modifier le nom du chemin.  Par conséquent, pour plus de
      sécurité, les liens symboliques doivent être désactivés à l'aide de la
      directive
      <code class="directive"><a href="./mod/core.html#options">Options</a></code> appropriée.)</p>
      
      <p>Si vous pensez que vous n'êtes pas concerné par ce problème
      parceque vous utilisez un système de fichiers sensible à la casse,
      gardez à l'esprit qu'il y a de nombreuses autres manières pour faire
      correspondre plusieurs localisations de l'arborescence du site web à la même
      localisation du système de fichiers.  C'est pourquoi vous devez autant que
      possible toujours utiliser les conteneurs de système de fichiers.
      Il y a cependant une exception à cette règle.  Placer des restrictions de
      configuration dans un conteneur <code>&lt;Location
      "/"&gt;</code> est tout à fait sans rique car ce conteneur va s'appliquer à
      toutes les requêtes sans tenir compte de l'URL spécifique.</p>
      
      
      <h3><a name="nesting" id="nesting">Imbrication des sections</a></h3>
      
      <p>Certains types de sections peuvent être imbriqués : d'une part, on peut
      utiliser les sections <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>
      à l'intérieur des sections <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, d'autre part, on peut utiliser les
      directives <code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code> à l'intérieur
      des sections <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> et <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> (mais pas à l'intérieur d'une
      autre section <code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code>). Les
      valeurs des expressions rationnelles correspondant aux sections nommées se
      comportent de manière identique.</p>
      
      <p>Les sections imbriquées sont fusionnées après les sections
      non-imbriquées de même type.</p>
      
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="virtualhost" id="virtualhost">Hôtes virtuels</a></h2>
      
      <p>Le conteneur <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
      contient des directives qui s'appliquent à des hôtes spécifiques.
      Ceci s'avère utile pour servir des hôtes multiples à partir de la même machine,
      chacun d'entre eux possédant une configuration différente.  Pour de plus amples
      informations,
      voir la <a href="vhosts/">Documentation sur les hôtes virtuels</a>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="proxy" id="proxy">Mandataire</a></h2>
      
      <p>Les conteneurs
      <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>
      et <code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code>
      appliquent les directives de configuration qu'ils contiennent uniquement aux
      sites qui correspondent à l'URL spécifiée et auxquels on a
      accédé via le serveur mandataire du module <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>.
      Par exemple, la configuration suivante n'autorisera qu'un sous-ensemble de
      clients à accéder au site <code>www.example.com</code> en passant par le serveur
      mandataire :.</p>
      
      <pre class="prettyprint lang-config">&lt;Proxy "http://www.example.com/*"&gt;
          Require host yournetwork.example.com
      &lt;/Proxy&gt;</pre>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="whatwhere" id="whatwhere">Quelles sont les directives autorisées ?</a></h2>
      
      <p>Pour déterminer quelles sont les directives autorisées pour tel type de
      section de configuration, vérifiez le <a href="mod/directive-dict.html#Context">Contexte</a> de la directive.
      Tout ce qui est autorisé dans les sections
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
      l'est aussi d'un point de vue syntaxique dans les sections
      <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code>,
      <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>,
      et <code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code>.
      Il y a cependant quelques exceptions :</p>
      
      <ul>
      <li>La directive <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code>
      ne fonctionne que dans les sections
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>.</li>
      
      <li>Les <code class="directive"><a href="./mod/core.html#options">Options</a></code> <code>FollowSymLinks</code> et
      <code>SymLinksIfOwnerMatch</code>  ne fonctionnent que dans les sections
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> ou les fichiers
      <code>.htaccess</code>.</li>
      
      <li>La directive <code class="directive"><a href="./mod/core.html#options">Options</a></code> ne peut pas être
      utilisée dans les sections
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>
      et <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>.</li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="merging" id="merging">Comment les sections sont combinées entre elles</a></h2>
      
      <p>Les sections de configuration sont appliquées dans un ordre très particulier.
      Il est important de savoir comment cet ordre est défini car il peut avoir
      des effets importants sur la manière dont les directives de configuration
      sont interprétées.</p>
      
          <p>L'ordre dans lequel les sections sont combinées est :</p>
      
          <ol>
            <li> Les sections <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> (à l'exception des
            expressions rationnelles)
            et les fichiers <code>.htaccess</code> sont appliqués simultanément (avec
            la possibilité pour <code>.htaccess</code>, s'il y est autorisé, de
            prévaloir sur
            <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>)</li>
      
            <li>Les sections
            <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>
            (et <code>&lt;Directory "~"&gt;</code>)</li>
      
            <li>Les sections <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> et <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code> sont appliquées
            simultanément</li>
      
            <li>Les sections
            <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
            et <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code> sont appliquées
            simultanément</li>
      
            <li>Les directives <code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code>
            </li>
          </ol>
      
          <p>Quelques remarques importantes :</p>
          <ul>
          <li>Mises à part les sections <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, dans chaque groupe, les sections sont
          traitées selon
          l'ordre dans lequel elles apparaissent dans les fichiers de configuration.
          Par exemple, une requête pour <em>/foo/bar</em> correspondra à
          <code>&lt;Location "/foo/bar"&gt;</code> et <code>&lt;Location
          "/foo"&gt;</code> (dans ce cas le groupe 4) : les deux sections seront
          évaluées mais selon l'ordre dans lequel elles apparaissent dans le fichier
          de configuration..</li>
          <li>Les sections <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> (groupe 1 ci-dessus)
          sont traitées dans l'ordre du répertoire le plus court vers le plus long.
          Par exemple, <code>&lt;Directory "/var/web/dir"&gt;</code> sera
          traité avant <code>&lt;Directory
          "/var/web/dir/subdir"&gt;</code>.</li>
          <li>Si plusieurs sections <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> s'appliquent au même
          répertoire, elles sont traitées selon l'ordre dans lequel elles
          apparaissent dans le fichier de configuration.</li>
          <li>Les sections de configuration incluses via la directive <code class="directive"><a href="./mod/core.html#include">Include</a></code> sont traitées comme si elles se
          trouvaient réellement dans le fichier qui les inclut à la position de la
          directive
          <code class="directive"><a href="./mod/core.html#include">Include</a></code>.</li>
          <li>Les sections situées à l'intérieur de sections <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          sont appliquées <em>après</em> les sections correspondantes situées en
          dehors de la définition de l'hôte virtuel, ce qui permet à l'hôte virtuel
          de prévaloir sur la configuration du serveur principal.</li>
          <li>Quand la requête est servie par le module <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>,
          le conteneur <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>
          prend la place du conteneur <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> dans l'ordre de traitement.</li>
          </ul>
      
      	<div class="note"><h3>Note technique</h3>
      	Une séquence <code>&lt;Location&gt;</code>/<code>&lt;LocationMatch&gt;</code>
      	est réellement traitée juste avant la phase de traduction du nom
      	(où <code>Aliases</code> et <code>DocumentRoots</code>
            sont utilisés pour faire correspondre les URLs aux noms de fichiers).
            Les effets de cette séquence disparaissent totalement lorsque
            la traduction est terminée.
      	</div>
      
      <h3><a name="relationship-module-configuration" id="relationship-module-configuration">Interactions entre
      modules et sections de configuration</a></h3>
          <p>Une question se pose souvent après avoir lu comment les sections de
          configuration sont fusionnées : comment et quand les directives de modules
          particuliers comme <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> sont-elles interprétées ? La
          réponse n'est pas triviale et nécessite un approfondissement. Chaque module
          httpd gère sa propre configuration, et chacune de ses directives dans
          httpd.conf définit un élément de configuration dans un contexte particulier.
          httpd n'exécute pas un commande au moment où elle est lue.</p>
          <p>A l'exécution, le noyau de httpd parcours les sections de configuration
          dans l'ordre décrit ci-dessus afin de déterminer lesquelles s'appliquent à
          la requête courante. Lorsqu'une première section s'applique, elle est
          considérée comme la configuration courante pour cette requête. Si une
          section suivante s'applique aussi, chaque module qui possède des directives
          dans chacune de ces sections a la possibilité de fusionner sa configuration
          entre ces deux sections. Il en résulte une troisième configuration et le
          processus de fusion se poursuit jusqu'à ce que toutes les sections de
          configuration aient été évaluées.</p>
          <p>Après l'étape précédente, le traitement proprement dit de la requête HTTP
          peut commencer : chaque module peut effectuer toute tâche qui lui incombe,
          et pour déterminer de quelle manière dont il doit agir, il peut s'appuyer
          sur le noyau de httpd pour retrouver sa configuration globale issue de la
          fusion précédente.</p>
          <p>Un exemple permet de mieux visualiser l'ensemble du processus. la
          configuration suivante utilise la directive <code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code> du module
          <code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code> pour définir un en-tête HTTP spécifique. Quelle
          valeur httpd va-t-il affecter à l'en-tête <code>CustomHeaderName</code> pour
          une requête vers <code>/example/index.html</code> ?
          </p>
          <pre class="prettyprint lang-config">&lt;Directory "/"&gt;
          Header set CustomHeaderName one
          &lt;FilesMatch ".*"&gt;
              Header set CustomHeaderName three
          &lt;/FilesMatch&gt;
      &lt;/Directory&gt;
      
      &lt;Directory "/example"&gt;
          Header set CustomHeaderName two
      &lt;/Directory&gt;</pre>
      
          <ul>
              <li><code class="directive">Directory</code> "/" s'applique, et une configuration
      	initiale est créée qui définit l'en-tête <code>CustomHeaderName</code>
      	avec la valeur <code>one</code>.</li>
              <li><code class="directive">Directory</code> "/example" s'applique, et comme
      	<code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code> spécifie dans son code que
      	la valeur d'un en-tête doit être écrasée si ce dernier est défini à
      	nouveau, une nouvelle configuration est créée qui définit l'en-tête
      	<code>CustomHeaderName</code> avec la valeur <code>two</code>.</li>
              <li><code class="directive">FilesMatch</code> ".*" s'applique, une nouvelle
      	opportunité de fusion surgit, et l'en-tête <code>CustomHeaderName</code>
      	est défini à la valeur <code>three</code>.</li>
              <li>Finalement, au cours des étapes suivantes du traitement de la
      	requête HTTP, <code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code> sera sollicité, et il se
      	basera sur la configuration qui a défini l'en-tête
      	<code>CustomHeaderName</code> à la valeur <code>three</code>.
      	<code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code> utilise normalement cette configuration pour
      	accomplir sa tâche, à savoir définir des en-têtes HTTP. Cela ne veut
      	cependant pas dire qu'un module ne peut pas effectuer des actions plus
      	complexes comme désactiver des directives car elle ne sont pas
      	nécessaires ou obsolètes, etc...</li>
          </ul>
      
          <p>Ceci est aussi vrai pour les fichiers .htaccess car ils possèdent la même
          priorité que les sections <code class="directive">Directory</code> dans l'ordre de
          fusion. Il faut bien comprendre que les sections de configuration comme
          <code class="directive">Directory</code> et <code class="directive">FilesMatch</code> ne
          sont pas comparables avec les directives spécifiques de modules comme
          <code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code> ou <code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> car elles agissent à des
          niveaux différents.
          </p>
      
      
      <h3><a name="merge-examples" id="merge-examples">Quelques exemples utiles</a></h3>
      
      <p>Voici un exemple imaginaire qui montre l'ordre de combinaison des sections.
      En supposant qu'elles s'appliquent toutes à la requête, les directives de
      cet exemple seront appliquées dans l'ordre suivant : A &gt; B &gt; C &gt; D &gt;
      E.</p>
      
      <pre class="prettyprint lang-config">&lt;Location "/"&gt;
          E
      &lt;/Location&gt;
      
      &lt;Files "f.html"&gt;
          D
      &lt;/Files&gt;
      
      &lt;VirtualHost *&gt;
         &lt;Directory "/a/b"&gt;
              B
         &lt;/Directory&gt;
      &lt;/VirtualHost&gt;
      
      &lt;DirectoryMatch "^.*b$"&gt;
          C
      &lt;/DirectoryMatch&gt;
      
      &lt;Directory "/a/b"&gt;
          A
      &lt;/Directory&gt;</pre>
      
      
      <p>Pour un exemple plus concret, considérez ce qui suit.  Sans tenir compte
      de toute restriction d'accès placée dans les sections <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, la section <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> sera
      évaluée en dernier et permettra un accès au serveur sans aucune restriction.
      En d'autres termes, l'ordre de la combinaison des sections est important,
      soyez donc prudent !</p>
      
      <pre class="prettyprint lang-config">&lt;Location "/"&gt;
          Require all granted
      &lt;/Location&gt;
      
      # Arrghs!  Cette section &lt;Directory&gt; n'aura aucun effet
      &lt;Directory "/"&gt;
          &lt;RequireAll&gt;
              Require all granted
              Require not host badguy.example.com
          &lt;/RequireAll&gt;
      &lt;/Directory&gt;</pre>
      
      
      
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/sections.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/sections.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sections.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sections.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sections.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/sections.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_4.html������������������������������������������������������0000644�0000000�0000050�00000000504�13362070302�017455� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: new_features_2_4.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: new_features_2_4.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: new_features_2_4.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/mpm.html.ko.euc-kr���������������������������������������������������������0000644�0000000�0000050�00000023431�13412755316�016727� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>´ÙÁßó¸® ¸ðµâ (MPM) - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>´ÙÁßó¸® ¸ðµâ (MPM)</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/mpm.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/mpm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/mpm.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/mpm.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/mpm.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/mpm.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/mpm.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/mpm.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      <p>ÀÌ ¹®¼­´Â ´ÙÁßó¸® ¸ðµâ (Multi-Processing Module)ÀÌ ¹«¾ùÀ̸ç,
      ¾ÆÆÄÄ¡ À¥¼­¹ö°¡ À̸¦ ¾î¶»°Ô »ç¿ëÇÏ´ÂÁö ¼³¸íÇÑ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#introduction">¼Ò°³</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#choosing">MPM ¼±ÅÃÇϱâ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#defaults">MPM ±âº»°ª</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">¼Ò°³</a></h2>
      
          <p>¾ÆÆÄÄ¡ À¥¼­¹ö´Â ´Ù¾çÇÑ È¯°æÀÇ ´Ù¾çÇÑ Ç÷¡Æû¿¡¼­ µ¿ÀÛÇÒ
          ¼ö ÀÖµµ·Ï °­·ÂÇϰí À¯¿¬ÇÏ°Ô ¼³°èµÇ¾ú´Ù. ´Ù¸¥ Ç÷¡Æû°ú ´Ù¸¥
          ȯ°æÀº º¸Åë ´Ù¸¥ ±â´ÉÀ» ¿ä±¸Çϸç, ¾î¶² ±â´ÉÀ» °¡Àå È¿À²ÀûÀ¸·Î
          ±¸ÇöÇÏ´Â ¹æ¹ýÀÌ ´Ù¸¦ ¼ö ÀÖ´Ù. ¾ÆÆÄÄ¡´Â ¸ðµâÈ­µÈ ¼³°è·Î ÀÌ·±
          ´Ù¾çÇÑ È¯°æ¿¡ Ç×»ó ÀûÀÀÇØ¿Ô´Ù. ±×·¡¼­ À¥¸¶½ºÅÍ´Â ÄÄÆÄÀϽÃ
          ȤÀº ½ÇÇà½Ã ¾î¶² ¸ðµâÀ» ÀоîµéÀÏÁö ¼±ÅÃÇÏ¿© ¼­¹ö¿¡ Æ÷ÇÔÇÒ
          ±â´ÉÀ» °áÁ¤ÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>Apache 2.0Àº ÀÌ·± ¸ðµâÈ­µÈ ¼³°è¸¦ À¥¼­¹öÀÇ °¡Àå ±âº»ÀûÀÎ
          ºÎºÐ¿¡±îÁö È®ÀåÇß´Ù. ¼­¹ö´Â ½Ã½ºÅÛÀÇ ³×Æ®¿÷ Æ÷Æ®¿¡ ¿¬°áÇϰí,
          ¿äûÀ» ¹Þ¾ÆµéÀ̸ç, ¹Þ¾ÆµéÀÎ ¿äûÀ» ó¸®ÇϱâÀ§ÇØ Àڽĵ鿡°Ô
          ºÐ¹èÇÏ´Â ´ÙÁßó¸® ¸ðµâ (Multi-Processing Modules, MPMs)À»
          ¼±ÅÃÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>¼­¹ö¸¦ ÀÌ Á¤µµ·Î ¸ðµâÈ­ÇÏ¸é µÎ°¡Áö Áß¿äÇÑ ÀåÁ¡ÀÌ
          ÀÖ´Ù:</p>
      
          <ul>
            <li><code class="module"><a href="./mod/mpm_winnt.html">mpm_winnt</a></code>°¡ Apache 1.3¿¡¼­ »ç¿ëÇÑ
            POSIXÃþ ´ë½Å ÀÚü ³×Æ®¿÷ ±â´ÉÀ» »ç¿ëÇÒ ¼ö ÀÖ´Â µî,
            ¾ÆÆÄÄ¡´Â ¿©·¯ ´Ù¾çÇÑ ¿î¿µÃ¼Á¦¸¦ ´õ ±ò²ûÇϰí È¿À²ÀûÀ¸·Î
            Áö¿øÇÒ ¼ö ÀÖ´Ù. ÀÌ ÀåÁ¡Àº ƯȭµÈ MPMÀ» ±¸ÇöÇÑ ´Ù¸¥
            ¿î¿µÃ¼Á¦¿¡µµ Àû¿ëµÈ´Ù.</li>
      
            <li>¼­¹ö´Â ƯÁ¤ »çÀÌÆ®ÀÇ ¿ä±¸Á¶°Ç¿¡ ´õ ƯȭµÉ ¼ö ÀÖ´Ù.
            ¿¹¸¦ µé¾î ³ôÀº È®Àå°¡´É¼º(scalability)ÀÌ ÇÊ¿äÇÑ »çÀÌÆ®´Â
            <code class="module"><a href="./mod/worker.html">worker</a></code>¿Í °°Àº ¾²·¹µå MPMÀ» »ç¿ëÇϰí,
            ¾ÈÁ¤¼º°ú ¿À·¡µÈ ¼ÒÇÁÆ®¿þ¾î¿ÍÀÇ È£È¯¼ºÀÌ ÇÊ¿äÇÑ »çÀÌÆ®´Â
            <code class="module"><a href="./mod/prefork.html">prefork</a></code>ing MPM À» »ç¿ëÇÒ ¼ö ÀÖ´Ù.
            Ãß°¡·Î ´Ù¸¥ »ç¿ëÀÚ¾ÆÀ̵ð·Î ¿©·¯ È£½ºÆ®¸¦ ¼­ºñ½ºÇÏ´Â
            °Í(<code class="module"><a href="./mod/perchild.html">perchild</a></code>)°ú °°Àº Ưº°ÇÑ ±â´Éµµ
            Á¦°øµÈ´Ù.</li>
          </ul>
      
          <p>»ç¿ëÀÚ°¡ º¸±â¿¡ MPMÀº ´Ù¸¥ ¾ÆÆÄÄ¡ ¸ðµâ°ú °ÅÀÇ ºñ½ÁÇØ
          º¸ÀδÙ. ÁÖµÈ Â÷ÀÌ´Â ¼­¹ö´Â Çѹø¿¡ ¿ÀÁ÷ ÇÑ MPM¸¸À» »ç¿ëÇØ¾ß
          ÇÑ´Ù´Â Á¡ÀÌ´Ù. »ç¿ë°¡´ÉÇÑ MPM ¸ñ·ÏÀº <a href="mod/">¸ðµâ
          ¸ñ·Ï ÆäÀÌÁö</a>¿¡ ÀÖ´Ù.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="choosing" id="choosing">MPM ¼±ÅÃÇϱâ</a></h2>
      
          <p>MPMs´Â ±¸¼ºÁß¿¡ ¼±ÅÃÇÏ¿© ¼­¹ö¿¡ ÄÄÆÄÀÏµÇ¾ß ÇÑ´Ù.
          ¾²·¹µå¸¦ »ç¿ëÇÏ´Â °ÍÀ» ÄÄÆÄÀÏ·¯°¡ ¾Ë¸é ¸¹Àº ÇÔ¼ö¸¦
          ÃÖÀûÈ­ÇÒ ¼ö ÀÖ´Ù. À¯´Ð½º¿¡¼­ ¸î¸î MPMÀº ¾²·¹µå¸¦ ¾²°í
          ³ª¸ÓÁö´Â ¾Æ´Ï¹Ç·Î, MPMÀÌ ±¸¼ºÁß¿¡ ¼±ÅÃµÇ¾î ¾ÆÆÄÄ¡¿¡
          ÄÄÆÄÀϵɶ§ ¾ÆÆÄÄ¡´Â ´õ ºü¸¥ ¼Óµµ¸¦ ³½´Ù.</p>
      
          <p>¿øÇÏ´Â MPMÀ» ¼±ÅÃÇÏ·Á¸é ./configure ½ºÅ©¸³Æ®¿¡
          with-mpm= <em>NAME</em> ¾Æ±Ô¸ÕÆ®¸¦ »ç¿ëÇ϶ó. <em>NAME</em>Àº
          ¿øÇÏ´Â MPM À̸§ÀÌ´Ù.</p>
      
          <p>¼­¹ö¸¦ ÄÄÆÄÀÏÇÑÈÄ <code>./httpd -l</code> ¸í·É¾î·Î ¼±ÅÃÇÑ
          MPMÀ» ¾Ë ¼ö ÀÖ´Ù.  ÀÌ ¸í·É¾î´Â MPMÀ» Æ÷ÇÔÇÏ¿© ¼­¹ö¿¡ ÄÄÆÄÀϵÈ
          ¸ðµç ¸ðµâÀ» ¾Ë·ÁÁØ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="defaults" id="defaults">MPM ±âº»°ª</a></h2>
      
      <p>´ÙÀ½ Ç¥´Â ¿©·¯ ¿î¿µÃ¼Á¦ÀÇ ±âº» MPMÀ» º¸¿©ÁØ´Ù. ÄÄÆÄÀϽÃ
      ´Ù¸£°Ô ¼±ÅÃÇÏÁö ¾ÊÀ¸¸é ÀÌ MPMÀÌ ¼±ÅõȴÙ.</p>
      
      <table>
      
      <tr><td>BeOS</td><td><code class="module"><a href="./mod/beos.html">beos</a></code></td></tr>
      <tr><td>Netware</td><td><code class="module"><a href="./mod/mpm_netware.html">mpm_netware</a></code></td></tr>
      <tr><td>OS/2</td><td><code class="module"><a href="./mod/mpmt_os2.html">mpmt_os2</a></code></td></tr>
      <tr><td>À¯´Ð½º</td><td><code class="module"><a href="./mod/prefork.html">prefork</a></code></td></tr>
      <tr><td>À©µµ¿ìÁî</td><td><code class="module"><a href="./mod/mpm_winnt.html">mpm_winnt</a></code></td></tr>
      </table>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/mpm.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/mpm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/mpm.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/mpm.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/mpm.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/mpm.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/mpm.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/mpm.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/mpm.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/index.html.de��������������������������������������������������������������0000644�0000000�0000050�00000022012�13412755316�016031� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="de" xml:lang="de"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Dokumentation zum Apache HTTP Server Version
      2.4 - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="index-page">
      <div id="page-header">
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="http://httpd.apache.org/docs-project/"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP-Server</a> &gt; <a href="http://httpd.apache.org/docs/">Dokumentation</a></div>
      <div id="page-content"><h1>Dokumentation zum Apache HTTP Server Version
      2.4</h1>
      <div class="toplang">
      <p><span>Verfügbare Sprachen: </span><a href="./da/" hreflang="da" rel="alternate" title="Dansk">&nbsp;da&nbsp;</a> |
      <a href="./de/" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">Diese Übersetzung ist möglicherweise
                  nicht mehr aktuell. Bitte prüfen Sie die englische Version auf
                  die neuesten Änderungen.</div>
      <form method="get" action="http://www.google.com/search"><p><input name="as_q" value="" type="text" /> <input value="Google-Suche" type="submit" /><input value="10" name="num" type="hidden" /><input value="de" name="hl" type="hidden" /><input value="ISO-8859-1" name="ie" type="hidden" /><input value="Google Search" name="btnG" type="hidden" /><input name="as_epq" value="Version 2.4" type="hidden" /><input name="as_oq" value="" type="hidden" /><input name="as_eq" value="&quot;List-Post&quot;" type="hidden" /><input value="" name="lr" type="hidden" /><input value="i" name="as_ft" type="hidden" /><input value="" name="as_filetype" type="hidden" /><input value="all" name="as_qdr" type="hidden" /><input value="any" name="as_occt" type="hidden" /><input value="i" name="as_dt" type="hidden" /><input value="httpd.apache.org" name="as_sitesearch" type="hidden" /><input value="off" name="safe" type="hidden" /></p></form>
      <table id="indextable"><tr><td class="col1"><div class="category"><h2><a name="release" id="release">Hinweise zur Version</a></h2>
      <ul><li><a href="new_features_2_4.html">Neue Funktionen in Version 2.3/2.4</a></li>
      <li><a href="new_features_2_2.html">Neue Funktionen in Version 2.1/2.2</a></li>
      <li><a href="new_features_2_0.html">Neue Funktionen in Version 2.0</a></li>
      <li><a href="upgrading.html">Upgrade auf Version 2.4</a></li>
      <li><a href="license.html">Apache-Lizenz</a></li>
      </ul>
      </div><div class="category"><h2><a name="manual" id="manual">Bedienungsanleitung</a></h2>
      <ul><li><a href="install.html">Kompilieren und Installieren</a></li>
      <li><a href="invoking.html">Starten</a></li>
      <li><a href="stopping.html">Stoppen und Neustarten</a></li>
      <li><a href="mod/quickreference.html">Konfigurationsanweisungen</a></li>
      <li><a href="mod/">Module</a></li>
      <li><a href="mpm.html">Multi-Processing-Module (MPMs)</a></li>
      <li><a href="filter.html">Filter</a></li>
      <li><a href="handler.html">Handler</a></li>
      <li><a href="expr.html">Der Ausdrucksparser</a></li>
      <li><a href="programs/">Server und Hilfsprogramme</a></li>
      <li><a href="glossary.html">Glossar</a></li>
      </ul>
      </div></td><td><div class="category"><h2><a name="usersguide" id="usersguide">Benutzerhandbuch</a></h2>
      <ul><li><a href="getting-started.html">Erste Schritte</a></li>
      <li><a href="bind.html">An Adressen und Ports binden</a></li>
      <li><a href="configuring.html">Konfigurationsdateien</a></li>
      <li><a href="sections.html">Konfigurationsabschnitte</a></li>
      <li><a href="caching.html">Caching von Inhalten</a></li>
      <li><a href="content-negotiation.html">Content Negotiation</a></li>
      <li><a href="dso.html">Dynamic Shared Objects (DSO)</a></li>
      <li><a href="env.html">Umgebungsvariablen</a></li>
      <li><a href="logs.html">Log-Dateien</a></li>
      <li><a href="urlmapping.html">URLs auf das Dateisystem abbilden</a></li>
      <li><a href="misc/perf-tuning.html">Performance-Hinweise</a></li>
      <li><a href="misc/security_tips.html">Tipps zur Sicherheit</a></li>
      <li><a href="server-wide.html">Serverweite Konfiguration</a></li>
      <li><a href="ssl/">SSL/TLS-Verschlüsselung</a></li>
      <li><a href="suexec.html">Suexec für CGI</a></li>
      <li><a href="rewrite/">Einführung in die
          URL-Manipulation</a></li>
      <li><a href="vhosts/">Virtual-Hosts</a></li>
      </ul>
      </div></td><td class="col3"><div class="category"><h2><a name="howto" id="howto">Praxis / Anleitungen</a></h2>
      <ul><li><a href="howto/auth.html">Authentisierung und Autorisierung</a></li>
      <li><a href="howto/access.html">Zugriffskontrolle</a></li>
      <li><a href="howto/cgi.html">CGI: Dynamische Inhalte</a></li>
      <li><a href="howto/htaccess.html">.htaccess-Dateien</a></li>
      <li><a href="howto/ssi.html">Server Side Includes (SSI)</a></li>
      <li><a href="howto/public_html.html">Web-Verzeichnisse für Benutzer
          (public_html)</a></li>
      </ul>
      </div><div class="category"><h2><a name="platform" id="platform">Plattform-spezifische Anmerkungen</a></h2>
      <ul><li><a href="platform/windows.html">Microsoft Windows</a></li>
      <li><a href="platform/rpm.html">RPM-basierte Systeme (Redhat / CentOS / Fedora)</a></li>
      <li><a href="platform/netware.html">Novell NetWare</a></li>
      <li><a href="platform/ebcdic.html">EBCDIC-Portierung</a></li>
      </ul>
      </div><div class="category"><h2><a name="other" id="other">Weitere Themen</a></h2>
      <ul><li><a href="http://wiki.apache.org/httpd/FAQ">Häufig gestellte
          Fragen (FAQ)</a></li>
      <li><a href="sitemap.html">Seitenindex</a></li>
      <li><a href="developer/">Dokumentation für Entwickler</a></li>
      <li><a href="http://httpd.apache.org/docs-project/">Mithilfe bei der Dokumentation</a></li>
      <li><a href="misc/">Sonstiges</a></li>
      <li><a href="http://wiki.apache.org/httpd/">Wiki</a></li>
      </ul>
      </div></td></tr></table></div>
      <div class="bottomlang">
      <p><span>Verfügbare Sprachen: </span><a href="./da/" hreflang="da" rel="alternate" title="Dansk">&nbsp;da&nbsp;</a> |
      <a href="./de/" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Lizenziert unter der <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/index.html.ja.utf8���������������������������������������������������������0000644�0000000�0000050�00000022621�13412755316�016726� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
      ドキュメント - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="index-page">
      <div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="http://httpd.apache.org/docs-project/"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a></div>
      <div id="page-content"><h1>Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4
      ドキュメント</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./da/" hreflang="da" rel="alternate" title="Dansk">&nbsp;da&nbsp;</a> |
      <a href="./de/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      <form method="get" action="http://www.google.com/search"><p><input name="as_q" value="" type="text" /> <input value="Google 検索" type="submit" /><input value="10" name="num" type="hidden" /><input value="ja" name="hl" type="hidden" /><input value="UTF-8" name="ie" type="hidden" /><input value="Google Search" name="btnG" type="hidden" /><input name="as_epq" value="ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4" type="hidden" /><input name="as_oq" value="" type="hidden" /><input name="as_eq" value="&quot;List-Post&quot;" type="hidden" /><input value="" name="lr" type="hidden" /><input value="i" name="as_ft" type="hidden" /><input value="" name="as_filetype" type="hidden" /><input value="all" name="as_qdr" type="hidden" /><input value="any" name="as_occt" type="hidden" /><input value="i" name="as_dt" type="hidden" /><input value="httpd.apache.org" name="as_sitesearch" type="hidden" /><input value="off" name="safe" type="hidden" /></p></form>
      <table id="indextable"><tr><td class="col1"><div class="category"><h2><a name="release" id="release">リリースノート</a></h2>
      <ul><li><a href="new_features_2_4.html">Apache 2.3/2.4 ã®æ–°æ©Ÿèƒ½</a></li>
      <li><a href="new_features_2_2.html">Apache 2.1/2.2 ã®æ–°æ©Ÿèƒ½</a></li>
      <li><a href="new_features_2_0.html">Apache 2.0 ã®æ–°æ©Ÿèƒ½</a></li>
      <li><a href="upgrading.html">2.2 ã‹ã‚‰ 2.4 ã¸ã®ã‚¢ãƒƒãƒ—グレード</a></li>
      <li><a href="license.html">Apache ライセンス</a></li>
      </ul>
      </div><div class="category"><h2><a name="manual" id="manual">リファレンスマニュアル</a></h2>
      <ul><li><a href="install.html">コンパイルã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«</a></li>
      <li><a href="invoking.html">èµ·å‹•</a></li>
      <li><a href="stopping.html">終了ã¨å†èµ·å‹•</a></li>
      <li><a href="mod/quickreference.html">実行ã®è¨­å®šç”¨ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–</a></li>
      <li><a href="mod/">モジュール</a></li>
      <li><a href="mpm.html">マルãƒãƒ—ロセッシングモジュール (MPM)</a></li>
      <li><a href="filter.html">フィルタ</a></li>
      <li><a href="handler.html">ãƒãƒ³ãƒ‰ãƒ©</a></li>
      <li><a href="expr.html">Expression parser</a></li>
      <li><a href="programs/">サーãƒã¨ã‚µãƒãƒ¼ãƒˆãƒ—ログラム</a></li>
      <li><a href="glossary.html">用語集</a></li>
      </ul>
      </div></td><td><div class="category"><h2><a name="usersguide" id="usersguide">ãƒ¦ãƒ¼ã‚¶ã®æ‰‹å¼•</a></h2>
      <ul><li><a href="getting-started.html">Getting Started</a></li>
      <li><a href="bind.html">アドレスã¨ãƒãƒ¼ãƒˆã®ãƒã‚¤ãƒ³ãƒ‰</a></li>
      <li><a href="configuring.html">設定ファイル</a></li>
      <li><a href="sections.html">セクションã®è¨­å®š</a></li>
      <li><a href="caching.html">キャッシュ機能</a></li>
      <li><a href="content-negotiation.html">コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³</a></li>
      <li><a href="dso.html">動的共有オブジェクト (DSO)</a></li>
      <li><a href="env.html">環境変数</a></li>
      <li><a href="logs.html">ログファイル</a></li>
      <li><a href="urlmapping.html">URL をファイルシステムã«ãƒžãƒƒãƒ—ã™ã‚‹</a></li>
      <li><a href="misc/perf-tuning.html">性能ã«é–¢ã™ã‚‹èª¿æ•´</a></li>
      <li><a href="misc/security_tips.html">セキュリティ情報</a></li>
      <li><a href="server-wide.html">サーãƒå…¨ä½“ã®è¨­å®š</a></li>
      <li><a href="ssl/">SSL/TLS ã«ã‚ˆã‚‹æš—å·åŒ–</a></li>
      <li><a href="suexec.html">CGI 㮠Suexec 実行</a></li>
      <li><a href="rewrite/">mod_rewriteã«ã‚ˆã‚‹ URL Rewriting</a></li>
      <li><a href="vhosts/">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></li>
      </ul>
      </div></td><td class="col3"><div class="category"><h2><a name="howto" id="howto">How-To / ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«</a></h2>
      <ul><li><a href="howto/auth.html">èªè¨¼ã€æ‰¿èªã€ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡
          </a></li>
      <li><a href="howto/cgi.html">CGI: 動的コンテンツ</a></li>
      <li><a href="howto/htaccess.html">.htaccess ファイル</a></li>
      <li><a href="howto/ssi.html">Server Side Includes (SSI)</a></li>
      <li><a href="howto/public_html.html">ユーザ専用ディレクトリ
          (public_html)</a></li>
      </ul>
      </div><div class="category"><h2><a name="platform" id="platform">ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ å›ºæœ‰ã®æƒ…å ±</a></h2>
      <ul><li><a href="platform/windows.html">Microsoft Windows</a></li>
      <li><a href="platform/rpm.html">RPMベースã®ã‚·ã‚¹ãƒ†ãƒ  (Redhat / CentOS / Fedora)</a></li>
      <li><a href="platform/netware.html">Novell NetWare</a></li>
      <li><a href="platform/ebcdic.html">EBCDIC 版</a></li>
      </ul>
      </div><div class="category"><h2><a name="other" id="other">ãã®ä»–</a></h2>
      <ul><li><a href="http://wiki.apache.org/httpd/FAQ">よãã‚ã‚‹è³ªå• (FAQ)</a></li>
      <li><a href="sitemap.html">サイトマップ</a></li>
      <li><a href="developer/">開発者ã®ãŸã‚ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆ</a></li>
      <li><a href="http://httpd.apache.org/docs-project/">ドキュメンテーションプロジェクトã¸ã®å”力</a></li>
      <li><a href="misc/">ãã®ä»–</a></li>
      <li><a href="http://wiki.apache.org/httpd/">ウィキ</a></li>
      </ul>
      </div></td></tr></table></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./da/" hreflang="da" rel="alternate" title="Dansk">&nbsp;da&nbsp;</a> |
      <a href="./de/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/install.html.de������������������������������������������������������������0000644�0000000�0000050�00000061617�13412755316�016406� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="de" xml:lang="de"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Kompilieren und Installieren - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP-Server</a> &gt; <a href="http://httpd.apache.org/docs/">Dokumentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Kompilieren und Installieren</h1>
      <div class="toplang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/install.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/install.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/install.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/install.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/install.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/install.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/install.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">Diese Übersetzung ist möglicherweise
                  nicht mehr aktuell. Bitte prüfen Sie die englische Version auf
                  die neuesten Änderungen.</div>
      
          <p>Dieses Dokument umfaßt nur die Kompilierung und Installation des
          Apache auf Unix und Unix-ähnlichen Systemen. Für die
          Kompilierung und Installation unter Windows lesen Sie bitte <a href="platform/windows.html">Den Apache unter Microsoft Windows
          betreiben</a>. Für andere Plattformen lesen Sie bitte die
          Dokumentation <a href="platform/">Plattformen</a>.</p>
      
          <p>Die Konfigurations- und Installationsumgebung des Apache 2.0 hat sich
          seit dem Apache 1.3 komplett verändert. Der Apache 1.3 benutzt einen
          speziellen Satz von Skripten, um eine einfache Installation zu
          ermöglichen. Der Apache 2.0 dagegen verwendet nun
          <code>libtool</code> und <code>autoconf</code>, um eine Umgebung zu
          schaffen, die der vieler anderer Open Source Projekte ähnlich
          sieht.</p>
      
          <p>Wenn Sie von einer Unterversion auf die nächste aktualisieren (z.B.
          von 2.0.50 auf 2.0.51), springen Sie bitte zum Abschnitt <a href="#upgrading">Upgrade</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#overview">Überblick für die Ungeduldigen</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#requirements">Anforderungen</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#download">Download</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#extract">Auspacken</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#configure">Den Codebaum konfigurieren</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#compile">Erstellen</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#install">Installieren</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#customize">Anpassen</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#test">Testen</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#upgrading">Upgrade</a></li>
      </ul><h3>Siehe auch</h3><ul class="seealso"><li><a href="programs/configure.html">Den Quellcode konfigurieren</a></li><li><a href="invoking.html">Apache starten</a></li><li><a href="stopping.html">Beenden und Neustarten</a></li><li><a href="#comments_section">Kommentare</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">Überblick für die Ungeduldigen</a></h2>
      
          <table>
            
            <tr>
              <td><a href="#download">Download</a></td>
      
              <td><code>$ lynx http://httpd.apache.org/download.cgi</code>
              </td>
            </tr>
      
            <tr>
              <td><a href="#extract">Auspacken</a></td>
      
              <td><code>$ gzip -d httpd-2_1_<em>NN</em>.tar.gz<br />
               $ tar xvf httpd-2_1_<em>NN</em>.tar</code> </td>
            </tr>
      
            <tr>
              <td><a href="#configure">Konfigurieren</a></td>
      
              <td><code>$ ./configure --prefix=<em>PREFIX</em></code>
              </td>
            </tr>
      
            <tr>
              <td><a href="#compile">Kompilieren</a></td>
      
              <td><code>$ make</code> </td>
            </tr>
      
            <tr>
              <td><a href="#install">Installieren</a></td>
      
              <td><code>$ make install</code> </td>
            </tr>
      
            <tr>
              <td><a href="#customize">Anpassen</a></td>
      
              <td><code>$ vi <em>PREFIX</em>/conf/httpd.conf</code> </td>
            </tr>
      
            <tr>
              <td><a href="#test">Testen</a></td>
      
              <td><code>$ <em>PREFIX</em>/bin/apachectl start</code>
              </td>
            </tr>
          </table>
      
          <p><em>NN</em> muss durch die Nummer der Unterversion ersetzt werden,
          und <em>PREFIX</em> durch den Verzeichnispfad,
          in dem der Server installiert werden soll. Wenn <em>PREFIX</em> nicht
          angegeben ist, wird die Voreinstellung <code>/usr/local/apache2</code>
          verwendet.</p>
      
          <p>Beginnend mit den Anforderungen
          für die Kompilierung und Installation des Apache HTTPD ist
          weiter unten jeder Abschnitt des Kompilierungs- und
          Installationsvorganges genauer beschrieben.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="requirements" id="requirements">Anforderungen</a></h2>
      
          <p>Folgende Anforderungen gelten für die Erstellung des
          Apache:</p>
      
          <dl>
            <dt>Plattenplatz</dt>
            <dd>Stellen Sie sicher, dass Sie kurzzeitig wenigstens 50 MB freien
            Festplattenplatz zur Verfügung haben. Nach der Installation
            belegt der Apache ungefähr 10 MB Plattenplatz. Der
            tatsächliche Platzbedarf variiert in Abhängigkeit von den
            gewählten Konfigurationseinstellungen und
            Modulen von Drittanbietern.</dd>
      
            <dt>ANSI-C-Compiler und Generierungswerkzeuge</dt>
            <dd>Stellen Sie sicher, dass Sie einen ANSI-C Compiler installiert
            haben. Der <a href="http://www.gnu.org/software/gcc/gcc.html">GNU C
            Compiler (GCC)</a> der <a href="http://www.gnu.org/">Free Software
            Foundation (FSF)</a> ist empfehlenswert (Version 2.7.2 ist gut). Wenn
            Sie den GCC nicht besitzen, stellen Sie zumindest sicher, dass der
            Compiler Ihres Anbieters ANSI-kompatibel ist. Außerdem muss Ihr
            <code>PATH</code> wesentliche Generierungswerkzeuge wie
            <code>make</code> enthalten.</dd>
      
            <dt>Zeitgenauigkeit bewahren</dt>
            <dd>Elemente des HTTP-Protokolls werden in Form einer Tageszeit
            ausgedrückt. Darum sollten Sie jetzt prüfen, ob Ihr System
            die Fähigkeit zur Zeitsynchronisation besitzt, und diese
            gegebenenfalls installieren. Üblicherweise werden hierfür
            die Programme <code>ntpdate</code> oder <code>xntpd</code> verwendet,
            die auf dem Network Time Protocol (NTP) basieren. Nähere
            Informationen über NTP Software und öffentliche Zeitserver
            finden Sie in der Usenet Newsgroup <a href="news:comp.protocols.time.ntp">comp.protocols.time.ntp</a>
            und auf der <a href="http://www.ntp.org">NTP
            Homepage</a>.</dd>
      
            <dt><a href="http://www.perl.org/">Perl 5</a>
            [OPTIONAL]</dt>
            <dd>Für einige Hilfsskripte wie <code class="program"><a href="./programs/apxs.html">apxs</a></code>
            oder <code class="program"><a href="./programs/dbmmanage.html">dbmmanage</a></code> (die in Perl
            geschrieben sind) wird der Perl 5 Interpreter benötigt (die
            Versionen ab 5.003 sind ausreichend). Wenn Sie mehrere Perl
            Interpreter haben (beispielsweise eine systemweite Installation von
            Perl 4 und Ihre eigene Perl 5-Installation), dann sollten Sie die
            <code>--with-perl</code>-Option (siehe unten) verwenden, um
            sicherzustellen, dass der richtige Interpreter von
            <code class="program"><a href="./programs/configure.html">configure</a></code> ausgewählt wird.
            Wenn kein Perl 5-Interpreter vom <code class="program"><a href="./programs/configure.html">configure</a></code>-Skript
            gefunden werden kann, können Sie die betroffenen Hilfsskripte nicht
            verwenden, sind jedoch selbstverständlich nach wie vor in der Lage,
            den Apache 2.0 zu bauen und zu installieren.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="download" id="download">Download</a></h2>
      
          <p>Der Apache kann von der <a href="http://httpd.apache.org/download.cgi">Apache HTTP Server
          Downloadseite</a> heruntergeladen werden, auf der verschiedene Spiegelserver
          angegeben sind. Für die meisten Benutzer des Apache ist es auf
          Unix-ähnlichen Systemen am Besten, die Quellcodeversion herunterzuladen
          und zu kompilieren. Der Erstellungsprozess (weiter unten beschrieben) ist
          einfach und erlaubt es Ihnen, den Server Ihren Bedürfnissen anzupassen.
          Dazu kommt, dass Binärdistributionen gegenüber der aktuellen
          Quellcodeversion oft veraltet sind. Wenn Sie tatsächlich ein
          Binärpaket herunterladen, folgen Sie bitte den Anweisungen in der Datei
          <code>INSTALL.bindist</code>, die der Distribution beiliegt.</p>
      
          <p>Es ist wichtig, dass Sie nach dem Herunterladen überprüfen,
          dass es sich um einer vollständige und unveränderte Version des
          Apache HTTP Servers handelt. Das können Sie erreichen, indem Sie das
          heruntergeladene Paket gegen die PGP-Signatur prüfen. Einzelheiten dazu
          erfahren Sie auf der <a href="http://httpd.apache.org/download.cgi#verify">Download-Seite</a>. Es
          ist auch ein erweitertes Beispiel verfügbar, dass die <a href="http://httpd.apache.org/dev/verification.html">Anwendung von PGP</a>
          beschreibt.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="extract" id="extract">Auspacken</a></h2>
      
          <p>Das Auspacken des Quellcodes aus dem Apache HTTPD Tarball besteht
          aus einem simplen Dekomprimieren und danach "Ent-tarren":</p>
      
        <div class="example"><p><code>
            $ gzip -d httpd-2_1_<em>NN</em>.tar.gz<br />
            $ tar xvf httpd-2_1_<em>NN</em>.tar
        </code></p></div>
      
          <p>Dies erstellt unterhalb des aktuellen Verzeichnisses ein neues
          Verzeichnis, das den Quellcode für die Distribution enthält.
          Sie sollten mit <code>cd</code> in dieses Verzeichnis wechseln,
          bevor Sie mit der Kompilierung des Servers weitermachen. </p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configure" id="configure">Den Codebaum konfigurieren</a></h2>
      
          <p>Der nächste Schritt ist die Konfiguration des
          Apache-Codebaumes für Ihre spezielle Plattform und Ihre
          persönlichen Bedürfnisse. Dies wird mit dem Skript
          <code class="program"><a href="./programs/configure.html">configure</a></code> durchgeführt, das im Wurzelverzeichnis
          der Distribution enthalten ist. (Entwickler, welche die CVS Version
          des Apache-Codebaumes herunterladen, müssen <code>autoconf</code>
          und <code>libtool</code> installiert haben und müssen
          <code>buildconf</code> ausführen, bevor sie mit den
          nächsten Schritten fortfahren können. Dies wird bei
          offiziellen Releases nicht notwendig sein.)</p>
      
          <p>Um den Codebaum mit den Standardeinstellungen zu konfigurieren,
          geben Sie einfach <code>./configure</code> ein. Zur Änderung
          dieser Voreinstellungen akzeptiert <code class="program"><a href="./programs/configure.html">configure</a></code> eine
          Reihe von Variablen und Kommandozeilenoptionen.</p>
      
          <p>Die wichtigste Option ist <code>--prefix</code>, der Ablageort, an dem
          der Apache später installiert wird, da er für diesen Ort
          konfiguriert werden muss, um korrekt zu arbeiten. Eine feinere Einstellung
          der Dateiablagen ist mit weiteren <a href="programs/configure.html#installationdirectories">configure-Optionen</a>
          möglich.</p>
      
          <p>Weiterhin können Sie zu diesem Zeitpunkt festlegen, welche <a href="programs/configure.html#optionalfeatures">Funktionalität</a> Sie
          in den Apache aufnehmen möchten, indem Sie <a href="mod/">Module</a>
          aktivieren oder deaktivieren. Der Apache bindet standardmäßig
          einen Satz von <a href="mod/module-dict.html#Status">Basismodulen</a> ein.
          Andere Module werden mit Hilfe der Option
          <code>--enable-<var>module</var></code> aktiviert, wobei <var>module</var>
          den Namen des Moduls ohne das Präfix <code>mod_</code> darstellt.
          Ausserdem sind alle Unterstriche durch Bindestriche zu ersetzen. Sie
          können sich auch entscheiden, Module als "<a href="dso.html">Shared
          Objects (DSOs)</a>" zu kompilieren, welche zur Laufzeit ge- und entladen
          werden können. Dazu verwenden Sie die Option
          <code>--enable-<var>module</var>=shared</code>. Entsprechend können Sie
          Basismodule mit der Option <code>--disable-<var>module</var></code>
          deaktivieren. Lassen Sie Vorsicht walten. wenn Sie diese Optionen verwenden,
          da <code class="program"><a href="./programs/configure.html">configure</a></code> Sie nicht warnen kann, wenn die von Ihnen
          angegebenen Module nicht existieren; die Option wird dann einfach
          ignoriert.</p>
      
          <p>Zusätzlich ist es zuweilen notwendig, das
          <code class="program"><a href="./programs/configure.html">configure</a></code>-Skript mit Extrainformationen zum Ablageort
          Ihres Compilers, Ihrer Bibliotheken oder Header-Dateien zu versorgen. Das
          tun Sie, indem Sie entweder Umgebungsvariablen oder Kommandozeilenoptionen
          an <code class="program"><a href="./programs/configure.html">configure</a></code> übergeben. Für mehr Informationen
          lesen Sie bitte die Hilfeseite zu <code class="program"><a href="./programs/configure.html">configure</a></code>.</p>
      
          <p>Um einen kurzen Eindruck zu gewinnen, welche Möglichkeiten Sie
          haben, folgt hier ein typisches Beispiel, das den Apache mit einem
          speziellen Compiler und Compilerflags für das
          Installationsverzeichnis <code>/sk/pkg/apache</code> kompiliert, sowie
          die beiden zusätzlichen Module <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> und
          <code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code> für späteres Laden durch den
          DSO-Mechanismus:</p>
      
        <div class="example"><p><code>
            $ CC="pgcc" CFLAGS="-O2" \<br />
             ./configure --prefix=/sw/pkg/apache \<br />
             --enable-rewrite=shared \<br />
             --enable-speling=shared
        </code></p></div>
      
          <p>Wenn <code class="program"><a href="./programs/configure.html">configure</a></code> startet, benötigt es mehrere
          Minuten, um die Verfügbarkeit von Features auf Ihrem System zu
          prüfen und ein Makefile zu generieren, das später zur
          Kompilierung des Servers verwendet wird.</p>
      
          <p>Einzelheiten zu den vielen verschiedenen <code class="program"><a href="./programs/configure.html">configure</a></code>-Optionen finden Sie auf der Hilfeseite zu
          <code class="program"><a href="./programs/configure.html">configure</a></code>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="compile" id="compile">Erstellen</a></h2>
      
          <p>Nun können Sie die verschiedenen Teile, die das Apache-Paket
          bilden, einfach durch Ausführen des folgenden Befehls erstellen:</p>
      
        <div class="example"><p><code>$ make</code></p></div>
      
          <p>Seien Sie hierbei bitte geduldig, denn eine Basiskonfiguration
          benötigt ungefähr 3 Minuten auf einem Pentium III/Linux 2.2.
          System. Dies kann aber abhängig von Ihrer Hardware und der Anzahl
          der Module, die Sie aktiviert haben, sehr stark variieren.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="install" id="install">Installieren</a></h2>
      
          <p>Nun endlich installieren Sie das Package unter dem konfigurierten
          Installations-<em>PREFIX</em> (siehe oben: Option <code>--prefix</code>
          durch Aufrufen von:</p>
      
        <div class="example"><p><code>$ make install</code></p></div>
      
          <p>Wenn Sie upgraden, wird die Installation Ihre Konfigurationsdateien
          oder Dokumente nicht überschrieben.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="customize" id="customize">Anpassen</a></h2>
      
          <p>Als nächstes können Sie Ihren Apache HTTP Server anpassen,
          indem Sie die <a href="configuring.html">Konfigurationsdateien</a>
          unterhalb von <code><em>PREFIX</em>/conf/</code> editieren.</p>
      
        <div class="example"><p><code>$ vi <em>PREFIX</em>/conf/httpd.conf</code></p></div>
      
          <p>Werfen Sie auch einen Blick in das Apache-Handbuch unter <a href="./">docs/manual/</a>. Die aktuellste Version dieses Handbuchs
          sowie eine komplette Referenz der verfügbaren <a href="mod/directives.html">Konfigurationsanweisungen</a> finden
          Sie unter <a href="http://httpd.apache.org/docs/2.4/">http://httpd.apache.org/docs/2.4/</a>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="test" id="test">Testen</a></h2>
      
          <p>Sie können nun Ihren Apache HTTP Server <a href="invoking.html">starten</a>, indem Sie einfach</p>
      
        <div class="example"><p><code>$ <em>PREFIX</em>/bin/apachectl start</code></p></div>
      
          <p>ausführen.</p>
      
          <p>Danach sollten Sie Ihr erstes Dokument unter dem URL
          <code>http://localhost/</code> anfordern können. Die Webseite,
          die Sie sehen, ist im <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>
          abgelegt, welches üblicherweise <code><em>PREFIX</em>/htdocs/</code>
          ist. Den Server <a href="stopping.html">stoppen</a> Sie wieder durch
          Ausführen von:</p>
      
        <div class="example"><p><code>$ <em>PREFIX</em>/bin/apachectl stop</code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="upgrading" id="upgrading">Upgrade</a></h2>
      
          <p>Der erste Schritt beim Aktualisieren besteht darin, die
          Versionsankündigung sowie die <code>CHANGES</code>-Datei in der
          Quelltextdistribution zu lesen, um Änderungen zu finden, die Ihr
          System möglicherweise betreffen. Wenn Sie einen größeren
          Versionssprung durchführen (z.B. vom 1.3 auf 2.0 oder von 2.0 auf
          2.2), wird es wahrscheinlich auch größere Unterschiede in der
          Kompilier- und Laufzeitkonfiguration geben, die manuelle Nacharbeiten
          erfordern. Außerdem müssen alle Module aktualisiert
          werden, um den Änderungen der Modul-API gerecht zu werden.</p>
      
          <p>Die Aktualisierung einer Unterversion auf eine andere (z.B. von 2.0.55
          auf 2.0.57) ist einfacher. <code>make install</code> überschreibt
          keine der bereits existierenden Dokumente, Log- und Konfigurationsdateien.
          Ausserdem bemühen sich die Entwickler, inkompatible Änderungen
          der <code class="program"><a href="./programs/configure.html">configure</a></code>-Optionen, der Laufzeitkonfiguration sowie
          der Modul-API zu vermeiden. In den meisten Fällen sollten Sie in der
          Lage sein, den gleichen <code class="program"><a href="./programs/configure.html">configure</a></code>-Befehl, die gleiche
          Konfiguration und die gleichen Module wieder zu verwenden. (Das gilt erst
          seit Version 2.0.41 -- frühere Versionen enthielten noch inkompatible
          Änderungen).</p>
      
          <p>Um auf eine neue Unterversion zu aktualisieren, suchen Sie zunächst
          die Datei <code>config.nice</code> im <code>build</code>-Verzeichnis
          Ihrer Serverinstallation oder im Wurzelverzeichnis des Quelltextbaums
          der alten Installation. Die Datei enthält den genauen
          <code class="program"><a href="./programs/configure.html">configure</a></code>-Befehl, der verwendet wurde, um den
          Quellcode zu konfigurieren. Um jetzt von einer Version auf die
          nächste zu aktualisieren, kopieren Sie einfach die
          <code>config.nice</code> in das Verzeichnis der neuen Version,
          passen sie bei Bedarf an, und führen Sie sie aus:</p>
      
          <div class="example"><p><code>
            $ ./config.nice<br />
            $ make<br />
            $ make install<br />
            $ <var>PREFIX</var>/bin/apachectl stop<br />
            $ <var>PREFIX</var>/bin/apachectl start<br />
          </code></p></div>
      
          <div class="warning">Sie sollten jede neue Version immer in Ihrer Umgebung
          testen, bevor Sie sie produktiv schalten. Beispielsweise können Sie
          die neue Version neben der alten installieren, indem Sie ein anderes
          <code>--prefix</code> und einen anderen Port wählen (durch Anpassen der
          <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>-Direktive). So
          können Sie auf eventuelle Inkompatibilitäten testen, bevor Sie
          endgültig die neue Version verwenden.</div>
      </div></div>
      <div class="bottomlang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/install.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/install.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/install.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/install.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/install.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/install.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/install.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Kommentare</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/install.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Lizenziert unter der <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/server-wide.html.en��������������������������������������������������������0000644�0000000�0000050�00000027612�13412755316�017203� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Server-Wide Configuration - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Server-Wide Configuration</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/server-wide.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/server-wide.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/server-wide.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/server-wide.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/server-wide.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      <p>This document explains some of the directives provided by
      the <code class="module"><a href="./mod/core.html">core</a></code> server which are used to configure
      the basic operations of the server.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#identification">Server Identification</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#locations">File Locations</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#resource">Limiting Resource Usage</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#implementation">Implementation Choices</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="identification" id="identification">Server Identification</a></h2>
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#servername">ServerName</a></code></li><li><code class="directive"><a href="./mod/core.html#serveradmin">ServerAdmin</a></code></li><li><code class="directive"><a href="./mod/core.html#serversignature">ServerSignature</a></code></li><li><code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code></li><li><code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code></li><li><code class="directive"><a href="./mod/core.html#usecanonicalphysicalport">UseCanonicalPhysicalPort</a></code></li></ul></td></tr></table>
      
          <p>The <code class="directive"><a href="./mod/core.html#serveradmin">ServerAdmin</a></code> and
          <code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code> directives
          control what information about the server will be presented
          in server-generated documents such as error messages. The
          <code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code> directive
          sets the value of the Server HTTP response header field.</p>
      
          <p>The <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>,
          <code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code> and
          <code class="directive"><a href="./mod/core.html#usecanonicalphysicalport">UseCanonicalPhysicalPort</a></code>
          directives are used by the server to determine how to construct
          self-referential URLs. For example, when a client requests a
          directory, but does not include the trailing slash in the
          directory name, httpd must redirect the client to the full
          name including the trailing slash so that the client will
          correctly resolve relative references in the document.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="locations" id="locations">File Locations</a></h2>
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/mpm_common.html#coredumpdirectory">CoreDumpDirectory</a></code></li><li><code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code></li><li><code class="directive"><a href="./mod/core.html#mutex">Mutex</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#scoreboardfile">ScoreBoardFile</a></code></li><li><code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code></li></ul></td></tr></table>
      
          <p>These directives control the locations of the various files
          that httpd needs for proper operation. When the pathname used
          does not begin with a slash (/), the files are located relative
          to the <code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code>. Be careful
          about locating files in paths which are writable by non-root users.
          See the <a href="misc/security_tips.html#serverroot">security tips</a>
          documentation for more details.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="resource" id="resource">Limiting Resource Usage</a></h2>
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#limitrequestbody">LimitRequestBody</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestfields">LimitRequestFields</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestfieldsize">LimitRequestFieldsize</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestline">LimitRequestLine</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitcpu">RLimitCPU</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitmem">RLimitMEM</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitnproc">RLimitNPROC</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code></li></ul></td></tr></table>
      
          <p>The <code class="directive">LimitRequest</code>*
          directives are used to place limits on the amount of resources
          httpd will use in reading requests from clients. By limiting
          these values, some kinds of denial of service attacks can be
          mitigated.</p>
      
          <p>The <code class="directive">RLimit</code>* directives
          are used to limit the amount of resources which can be used by
          processes forked off from the httpd children. In particular,
          this will control resources used by CGI scripts and SSI exec
          commands.</p>
      
          <p>The <code class="directive"><a href="./mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code>
          directive is used with some platforms to control the stack size.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="implementation" id="implementation">Implementation Choices</a></h2>
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#mutex">Mutex</a></code></li></ul></td></tr></table>
      
          <p>The <code class="directive">Mutex</code> directive can be used to change
          the underlying implementation used for mutexes, in order to relieve
          functional or performance problems with <a class="glossarylink" href="./glossary.html#apr" title="see glossary">APR</a>'s
          default choice.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/server-wide.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/server-wide.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/server-wide.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/server-wide.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/server-wide.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/server-wide.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/handler.html.tr.utf8�������������������������������������������������������0000644�0000000�0000050�00000030624�13447004010�017253� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache Eylemcilerinin Kullanımı - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache Eylemcilerinin Kullanımı</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./en/handler.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/handler.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/handler.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/handler.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/handler.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/handler.html" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/handler.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
          <p>Bu belgede Apache Eylemcilerinin kullanımı açıklanmıştır.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#definition">Eylemci Nedir?</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#examples">Örnekler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programmer">Yazılım Geliştirenler İçin</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="definition" id="definition">Eylemci Nedir?</a></h2>
          
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_actions.html">mod_actions</a></code></li><li><code class="module"><a href="./mod/mod_asis.html">mod_asis</a></code></li><li><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code></li><li><code class="module"><a href="./mod/mod_info.html">mod_info</a></code></li><li><code class="module"><a href="./mod/mod_mime.html">mod_mime</a></code></li><li><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></li><li><code class="module"><a href="./mod/mod_status.html">mod_status</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_actions.html#action">Action</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#removehandler">RemoveHandler</a></code></li><li><code class="directive"><a href="./mod/core.html#sethandler">SetHandler</a></code></li></ul></td></tr></table>
      
      
          <p>Bir <em>eylemci</em> bir dosya çağrıldığında uygulanacak eylemin Apache
            dahilindeki gösterimidir. Genellikle dosyaların kendi türüne bağlı
            olarak örtük eylemcileri vardır. Normalde tüm dosyalar basitçe sunucu
            tarafından sunulurlar, fakat bazı dosya türleri normalden farklı şekilde
            ele alınırlar.</p>
      
          <p>Eylemciler, dosya türünden bağımsız olarak dosyanın bulunduğu yere veya
            dosya ismi uzantısına göre de yapılandırılabilirler. Gerek, zarif bir
            çözüm oluşuyla gerekse, hem dosya türünü hem de bir dosya ile ilişkili
            bir eylemciyi mümkün kılması sebebiyle bunun getirisi daha yüksektir.
            (Ayrıca, <a href="mod/mod_mime.html#multipleext">çok uzantılı
            dosyalara</a> da bakınız.)</p>
      
          <p>Eylemciler sunucu içinde derlenebileceği gibi bir modül olarak ya da
            <code class="directive"><a href="./mod/mod_actions.html#action">Action</a></code> yönergesi ile de
            sunucuya dahil edilebilirler. Standart dağıtımda bulunan yerleşik
            eylemciler şunlardır:</p>
      
          <ul>
            <li><strong>default-handler</strong>: Dosyayı, öntanımlı olarak durağan
              içeriği işlemekte kullanılan <code>default_handler()</code> işlevini
              kullanarak gönderir. (<code class="module"><a href="./mod/core.html">core</a></code>)</li>
      
            <li><strong>send-as-is</strong>: Dosyayı HTTP başlıklarıyla olduğu gibi
              gönderir. (<code class="module"><a href="./mod/mod_asis.html">mod_asis</a></code>)</li>
      
            <li><strong>cgi-script</strong>: Dosyayı bir CGI betiği olarak ele alır.
              (<code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code>)</li>
      
            <li><strong>imap-file</strong>: Dosyayı bir resim eşleme kuralları
              dosyası olarak çözümler. (<code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code>)</li>
      
            <li><strong>server-info</strong>: Sunucunun yapılandırma bilgisini
              döndürür. (<code class="module"><a href="./mod/mod_info.html">mod_info</a></code>)</li>
      
            <li><strong>server-status</strong>: Sunucunun durum raporunu döndürür.
              (<code class="module"><a href="./mod/mod_status.html">mod_status</a></code>)</li>
      
            <li><strong>type-map</strong>: Dosyayı içerik uzlaşımı için bir tür
              eşlem dosyası olarak çözümler. (<code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>)</li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Örnekler</a></h2>
          
      
          <h3><a name="example1" id="example1">Bir CGI betiği kullanarak durağan içeriğin değiştirilmesi</a></h3>
            
      
            <p>Aşağıdaki yönergeler sayesinde, <code>html</code> uzantılı dosyalar
              için yapılan istekler <code>footer.pl</code> CGI betiğininin
              çalıştırılmasına sebep olacaktır.</p>
      
            <pre class="prettyprint lang-config">Action add-footer /cgi-bin/footer.pl
      AddHandler add-footer .html</pre>
      
      
            <p>Bu yapılandırmayla, istenen belgenin özgün haliyle mi (yeri
              <code>PATH_TRANSLATED</code> ortam deÄŸiÅŸkenindedir) yoksa istenen
              değişiklikler veya eklemeler yapıldıktan sonra mı gönderileceğinden
              CGI betiği sorumlu olacaktır.</p>
      
          
          <h3><a name="example2" id="example2">HTTP başlıklı dosyalar</a></h3>
            
      
            <p>Aşağıdaki yönergeler kendi HTTP başlıklarını içeren dosyalar için
              kullanılan <code>send-as-is</code> eylemcisini etkinleştirmek amacıyla
              kullanılmıştır. <code>/siteler/htdocs/asis/</code> dizinindeki tüm
              dosyalar dosya ismi uzantılarına bakılmaksızın <code>send-as-is</code>
              eylemcisi tarafından işleme sokulacaktır.</p>
      
            <pre class="prettyprint lang-config">&lt;Directory "/web/htdocs/asis"&gt;
          SetHandler send-as-is
      &lt;/Directory&gt;</pre>
      
      
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="programmer" id="programmer">Yazılım Geliştirenler İçin</a></h2>
          
      
          <p>Eylemci özellikleri gerçeklenirken kullanılmak üzere <a href="developer/API.html">Apache API</a>’ye bir ekleme yapılmıştır.
            Özellikle de, <code>request_rec</code> yapısına yeni bir kayıt
            eklenmiÅŸtir:</p>
      
          <pre class="prettyprint lang-c">char *handler</pre>
      
      
          <p>Modülünüzün bir eylemciyi devreye sokmasını isterseniz, tek yapacağınız
            isteğin <code>invoke_handler</code> aşamasının hemen öncesinde
            <code>r-&gt;handler</code> alanına eylemcinin ismini atamak olacaktır.
            Eylemciler daha önce de bahsedildiği gibi bir içerik türü yerine bir
            eylemci ismi kullanılarak gerçeklenirler. Çok gerekli olmamakla
            birlikte, eylemciler için kullanılan adlandırma uzlaşımları gereğince,
            ismi oluşturan sözcükler, ortam türü isim alanını ihlal etmemek amacıyla
            bölü imleri ile değil tire imleri ile ayrılırlar.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./en/handler.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/handler.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/handler.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/handler.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/handler.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/handler.html" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/handler.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/handler.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/invoking.html.fr.utf8������������������������������������������������������0000644�0000000�0000050�00000032655�13412755316�017470� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Démarrage d'Apache - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Démarrage d'Apache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./de/invoking.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/invoking.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/invoking.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/invoking.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/invoking.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/invoking.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/invoking.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Sous Windows, Apache est habituellement lancé en tant que
          service. Pour plus de détails, voir <a href="platform/windows.html#winsvc">Démarrer Apache en tant
          que service</a>.</p>
      
          <p>Sous Unix, le programme <code class="program"><a href="./programs/httpd.html">httpd</a></code>
          est lancé en mode démon et s'exécute de manière permanente en
          arrière-plan pour gérer les requêtes.  Ce document décrit comment invoquer
           <code class="program"><a href="./programs/httpd.html">httpd</a></code>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#startup">Comment Apache démarre</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#errors">Erreurs en cours de démarrage</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#boot">Lancement au démarrage du système</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#info">Informations supplémentaires</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="stopping.html">Arrêt et redémarrage</a></li><li><code class="program"><a href="./programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="./programs/apachectl.html">apachectl</a></code></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="startup" id="startup">Comment Apache démarre</a></h2>
      
          <p>Si la directive <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
          spécifiée dans le fichier de configuration est à sa valeur par défaut
          de 80 (ou tout autre port inférieur à 1024), il est nécessaire de
          posséder les privilèges root pour pouvoir démarrer apache, et lui
          permettre d'être associé à ce port privilégié. Lorsque le serveur est
          démarré, il effectue quelques opérations préliminaires
          comme ouvrir ses fichiers de log, puis il lance plusieurs processus
          <em>enfants</em> qui ont pour rôle d'écouter et de répondre aux
          requêtes des clients. Le processus <code>httpd</code> principal
          continue à s'exécuter sous l'utilisateur root, tandis que les processus
          enfants s'exécutent sous un utilisateur aux privilèges restreints.
          Ceci s'effectue par la voie du
          <a href="mpm.html">Module Multi-Processus (MPM)</a>.</p>
      
          <p>Il est recommandé d'utiliser le script de contrôle
          <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> pour invoquer l'exécutable
          <code class="program"><a href="./programs/httpd.html">httpd</a></code>. A cet effet, ce script définit certaines variables
          d'environnement nécessaires pour permettre à
          <code class="program"><a href="./programs/httpd.html">httpd</a></code> de fonctionner correctement sous certains systèmes
          d'exploitation.
          <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> accepte des arguments de ligne de
          commande ;
          ainsi toute option de <code class="program"><a href="./programs/httpd.html">httpd</a></code> peut aussi être utilisée avec
          <code class="program"><a href="./programs/apachectl.html">apachectl</a></code>.  Vous pouvez aussi éditer directement le
          script <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> en modifiant la variable
          <code>HTTPD</code> située en début de script pour spécifier la
          localisation du binaire <code class="program"><a href="./programs/httpd.html">httpd</a></code> et tout argument de ligne
          de commande que vous souhaitez voir <em>systématiquement</em> présent.</p>
      
          <p>La première chose qu'effectue <code class="program"><a href="./programs/httpd.html">httpd</a></code> quand il est
          invoqué est de localiser et lire le <a href="configuring.html">fichier de configuration</a>
          <code>httpd.conf</code>. La localisation de ce fichier est définie à la
          compilation, mais il est possible d'en spécifier une autre à
          l'exécution en utilisant l'option de ligne de commande <code>-f</code> comme suit:</p>
      
      <div class="example"><p><code>/usr/local/apache2/bin/apachectl -f
            /usr/local/apache2/conf/httpd.conf</code></p></div>
      
          <p>Si tout se passe bien pendant le démarrage, le serveur va se dissocier
          du terminal et l'invite de commande réapparaîtra presque immédiatement.
          Ceci indique que le serveur a démarré et est en cours d'exécution.
          À partir de ce moment, vous pouvez utiliser votre navigateur pour vous connecter
          au serveur et afficher la page de test située dans le répertoire défini
          par la directive <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code></p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="errors" id="errors">Erreurs en cours de démarrage</a></h2>
      
          <p>Si un problème fatal survient pendant le démarrage
          d'Apache, ce dernier va
          afficher un message décrivant le problème sur la console ou
          enregistrer ces informations dans le fichier défini par la directive
          <code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code> avant de quitter.
          Un des messages d'erreur les plus courants est "<code>Unable
          to bind to Port ...</code>". Ce message d'erreur est habituellement
          provoqué par :</p>
      
          <ul>
            <li>Une tentative de démarrage du serveur avec un port privilégié sans
            être connecté root</li>
      
            <li>Une tentative de démarrage du serveur alors qu'une autre instance
            d'Apache ou un autre serveur web est déjà associé au même port.</li>
          </ul>
      
          <p>Pour plus d'instructions de dépannage, consultez la
          <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> Apache.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="boot" id="boot">Lancement au démarrage du système</a></h2>
      
          <p>Si vous souhaitez que votre serveur web soit automatiquement
          disponible après
          un redémarrage du système, vous devez ajouter un appel à
          <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> à vos
          fichiers de démarrage système (en général <code>rc.local</code> ou un
          fichier dans un répertoire <code>rc.N</code>), ce qui démarrera Apache sous
          l'utilisateur root. Avant de faire ceci, assurez-vous que votre serveur
          soit correctement configuré en ce qui concerne la sécurité et les
          restrictions d'accès.</p>
      
          <p>Le script <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> est conçu pour fonctionner
          comme un script d'initialisation SysV standard ; il accepte les arguments
          <code>start</code>, <code>restart</code>, et <code>stop</code>
          et les traduit en signaux appropriés pour
          <code class="program"><a href="./programs/httpd.html">httpd</a></code>, et il suffit en général d'installer
          un lien vers
          <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> dans le répertoire d'initialisation approprié.
          Mais prenez soin de vérifier les besoins exacts de votre système
          en la matière.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="info" id="info">Informations supplémentaires</a></h2>
      
          <p>Des informations supplémentaires à propos des options en ligne de
          commande de <code class="program"><a href="./programs/httpd.html">httpd</a></code> et <code class="program"><a href="./programs/apachectl.html">apachectl</a></code>
          ainsi que d'autres programmes support inclus dans la distribution
          sont disponibles sur la page
          <a href="programs/">Le serveur et ses programmes support</a>.
          Il existe aussi une documentation sur tous les <a href="mod/">modules</a> inclus dans la distribution Apache
          et les <a href="mod/directives.html">directives</a>
          qu'ils supportent.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./de/invoking.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/invoking.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/invoking.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/invoking.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/invoking.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/invoking.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/invoking.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/invoking.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������httpd-2.4.41/docs/manual/content-negotiation.html���������������������������������������������������0000644�0000000�0000050�00000001026�13362070302�020312� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: content-negotiation.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: content-negotiation.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: content-negotiation.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: content-negotiation.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: content-negotiation.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/sitemap.html.de������������������������������������������������������������0000644�0000000�0000050�00000063465�13520523022�016370� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="de" xml:lang="de"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Seitenindex - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page">
      <div id="page-header">
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP-Server</a> &gt; <a href="http://httpd.apache.org/docs/">Dokumentation</a> &gt; <a href="./">Version 2.4</a></div>
      <div id="page-content"><div id="preamble"><h1>Seitenindex</h1>
      <div class="toplang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/sitemap.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/sitemap.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/sitemap.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/sitemap.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sitemap.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sitemap.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sitemap.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/sitemap.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">Diese Übersetzung ist möglicherweise
                  nicht mehr aktuell. Bitte prüfen Sie die englische Version auf
                  die neuesten Änderungen.</div>
      
      <p>Diese Seite verzeichnet die zur Zeit verfügbaren Dokumente der
      <a href="./">Dokumentation zum Apache HTTP Server Version
      2.4</a>.</p>
      </div>
      <div id="quickview"><ul id="toc">
      <li><img alt="" src="./images/down.gif" /> <a href="#release">Hinweise zur Version</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#using">Bedienung des Apache HTTP Servers</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#vhosts">Apache-Dokumentation zu virtuellen Hosts</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#rewrite">Einführung in die URL-Manipulation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#ssl">SSL/TLS-Verschlüsselung des Apache</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#howto">Praxis / Anleitungen</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#platform">Plattform-spezifische Anmerkungen</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programs">Apache HTTP Server und Hilfsprogramme</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#misc">Weitere Apache-Dokumentationen</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#modules">Apache-Module</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#developer">Dokumentation für Entwickler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#index">Glossar und Index</a></li>
      </ul>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="release" id="release">Hinweise zur Version</a></h2>
      <ul><li><a href="upgrading.html">Upgrade von 2.2 auf 2.4</a></li>
      <li><a href="new_features_2_4.html">Neue Funktionen in Version 2.3/2.4</a></li>
      <li><a href="new_features_2_2.html">Neue Funktionen in Version 2.1/2.2</a></li>
      <li><a href="new_features_2_0.html">Neue Funktionen in Version 2.0</a></li>
      <li><a href="license.html">Apache-Lizenz</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="using" id="using">Bedienung des Apache HTTP Servers</a></h2>
      <ul><li><a href="install.html">Kompilieren und Installieren</a></li>
      <li><a href="invoking.html">Apache starten</a></li>
      <li><a href="stopping.html">Beenden und Neustarten des Servers</a></li>
      <li><a href="configuring.html">Konfigurationsdateien</a></li>
      <li><a href="sections.html">Konfigurationsabschnitte</a></li>
      <li><a href="caching.html">Caching von Inhalten</a></li>
      <li><a href="server-wide.html">Serverweite Konfiguration</a></li>
      <li><a href="logs.html">Log-Dateien</a></li>
      <li><a href="urlmapping.html">URLs auf das Dateisystem abbilden</a></li>
      <li><a href="dso.html">Dynamic Shared Object (DSO)</a></li>
      <li><a href="content-negotiation.html">Content Negotiation</a></li>
      <li><a href="custom-error.html">Individuelle Fehlermeldungen</a></li>
      <li><a href="bind.html">Bestimmen der vom Apache verwendeten Adressen und Ports</a></li>
      <li><a href="mpm.html">Multi-Processing-Module (MPMs)</a></li>
      <li><a href="env.html">Umgebungsvariablen</a></li>
      <li><a href="expr.html">Parsen von Ausdrücken</a></li>
      <li><a href="handler.html">Handler</a></li>
      <li><a href="filter.html">Filter</a></li>
      <li><a href="socache.html">Unterstützung für gemeinsame Objekt-Zwischenspeicher</a></li>
      <li><a href="suexec.html">suEXEC Unterstützung</a></li>
      <li><a href="dns-caveats.html">Probleme bezüglich DNS und Apache</a></li>
      <li><a href="http://wiki.apache.org/httpd/FAQ">Häufig gestellte Fragen
          (FAQ)</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="vhosts" id="vhosts">Apache-Dokumentation zu virtuellen Hosts</a></h2>
      <ul><li class="separate"><a href="vhosts/">Übersicht</a></li>
      <li><a href="vhosts/name-based.html">Namensbasierte virtuelle Hosts</a></li>
      <li><a href="vhosts/ip-based.html">IP-basierte virtuelle Hosts</a></li>
      <li><a href="vhosts/mass.html">Dynamisch konfiguriertes Massen-Virtual-Hosting</a></li>
      <li><a href="vhosts/examples.html">Beispiele für virtuelle Hosts in
        typischen Installationen</a></li>
      <li><a href="vhosts/details.html">Tiefergehende Erörterung der Zuweisung
        virtueller Hosts</a></li>
      <li><a href="vhosts/fd-limits.html">Datei-Deskriptor-Begrenzungen</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="rewrite" id="rewrite">Einführung in die URL-Manipulation</a></h2>
      <ul><li class="separate"><a href="rewrite/">Übersicht</a></li>
      <li><a href="mod/mod_rewrite.html">Referenz-Dokumentation von
      mod_rewrite</a></li>
      <li><a href="rewrite/intro.html">Einführung in reguläre Ausdrücke und mod_rewrite</a></li>
      <li><a href="rewrite/remapping.html">Verwendung von mod_rewrite, um URLs umzuleiten oder umzuschreiben</a></li>
      <li><a href="rewrite/access.html">Zugriffskontrolle mit mod_rewrite</a></li>
      <li><a href="rewrite/vhosts.html">Dynamische virtuelle Hosts mit mod_rewrite</a></li>
      <li><a href="rewrite/proxy.html">Dynamische Proxy-Konfigurationen mit mod_rewrite</a></li>
      <li><a href="rewrite/rewritemap.html">RewriteMap einsetzen</a></li>
      <li><a href="rewrite/advanced.html">Fortgeschrittene Techniken</a></li>
      <li><a href="rewrite/avoid.html">Wann man auf mod_rewrite verzichten sollte</a></li>
      <li><a href="rewrite/flags.html">Schalter / Flags</a></li>
      <li><a href="rewrite/tech.html">Technische Details</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="ssl" id="ssl">SSL/TLS-Verschlüsselung des Apache</a></h2>
      <ul><li class="separate"><a href="ssl/">Übersicht</a></li>
      <li><a href="ssl/ssl_intro.html">SSL/TLS-Verschlüsselung: Einführung</a></li>
      <li><a href="ssl/ssl_compat.html">SSL/TLS-Verschlüsselung: Kompatibilität</a></li>
      <li><a href="ssl/ssl_howto.html">SSL/TLS-Verschlüsselung: Praxis</a></li>
      <li><a href="ssl/ssl_faq.html">SSL/TLS-Verschlüsselung: FAQ</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="howto" id="howto">Praxis / Anleitungen</a></h2>
      <ul><li class="separate"><a href="howto/">Übersicht</a></li>
      <li><a href="howto/auth.html">Authentisierung und Autorisierung</a></li>
      <li><a href="howto/access.html">Zugriffskontrolle</a></li>
      <li><a href="howto/cgi.html">Dynamische Inhalte mit CGI</a></li>
      <li><a href="howto/ssi.html">Einführung in Server Side Includes</a></li>
      <li><a href="howto/htaccess.html">.htaccess-Dateien</a></li>
      <li><a href="howto/public_html.html">Web-Verzeichnisse für Benutzer</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="platform" id="platform">Plattform-spezifische Anmerkungen</a></h2>
      <ul><li class="separate"><a href="platform/">Übersicht</a></li>
      <li><a href="platform/windows.html">Apache unter Microsoft
      Windows einsetzen</a></li>
      <li><a href="platform/win_compiling.html">Kompilieren des Apache für
      Microsoft Windows</a></li>
      <li><a href="platform/rpm.html">Apache auf RPM-basierten Systemen einsetzen</a></li>
      <li><a href="platform/netware.html">Apache unter Novell NetWare einsetzen</a></li>
      <li><a href="platform/perf-hp.html">Einen Hochleistungs-Web-Server auf
      HPUX betreiben</a></li>
      <li><a href="platform/ebcdic.html">Die Apache EBCDIC-Portierung</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="programs" id="programs">Apache HTTP Server und Hilfsprogramme</a></h2>
      <ul><li class="separate"><a href="programs/">Übersicht</a></li>
      <li><a href="programs/httpd.html">httpd</a></li>
      <li><a href="programs/ab.html">ab</a></li>
      <li><a href="programs/apachectl.html">apachectl</a></li>
      <li><a href="programs/apxs.html">apxs</a></li>
      <li><a href="programs/configure.html">configure</a></li>
      <li><a href="programs/dbmmanage.html">dbmmanage</a></li>
      <li><a href="programs/fcgistarter.html">fcgistarter</a></li>
      <li><a href="programs/htcacheclean.html">htcacheclean</a></li>
      <li><a href="programs/htdbm.html">htdbm</a></li>
      <li><a href="programs/htdigest.html">htdigest</a></li>
      <li><a href="programs/htpasswd.html">htpasswd</a></li>
      <li><a href="programs/httxt2dbm.html">httxt2dbm</a></li>
      <li><a href="programs/logresolve.html">logresolve</a></li>
      <li><a href="programs/log_server_status.html">log_server_status</a></li>
      <li><a href="programs/rotatelogs.html">rotatelogs</a></li>
      <li><a href="programs/split-logfile.html">split-logfile</a></li>
      <li><a href="programs/suexec.html">suexec</a></li>
      <li><a href="programs/other.html">Sonstige Programme</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="misc" id="misc">Weitere Apache-Dokumentationen</a></h2>
      <ul><li class="separate"><a href="misc/">Übersicht</a></li>
      <li><a href="misc/perf-tuning.html">Performance-Hinweise</a></li>
      <li><a href="misc/security_tips.html">Tipps zur Sicherheit</a></li>
      <li><a href="misc/relevant_standards.html">Wichtige Standards</a></li>
      <li><a href="misc/password_encryptions.html">Verschlüsselungsformate für Passworte</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="modules" id="modules">Apache-Module</a></h2>
      <ul><li><a href="mod/module-dict.html">Erklärung der Fachbegriffe zu Apache-Modulen</a></li>
      <li><a href="mod/directive-dict.html">Erklärung der Fachbegriffe zu Apache-Direktiven</a></li>
      </ul><ul><li><a href="mod/core.html">Apache-Kernfunktionen</a></li>
      <li><a href="mod/mpm_common.html">Allgemeine Direktiven der Apache-MPMs</a></li>
      <li><a href="mod/event.html">Apache-MPM event</a></li>
      <li><a href="mod/mpm_netware.html">Apache-MPM netware</a></li>
      <li><a href="mod/mpmt_os2.html">Apache-MPM os2</a></li>
      <li><a href="mod/prefork.html">Apache-MPM prefork</a></li>
      <li><a href="mod/mpm_winnt.html">Apache-MPM winnt</a></li>
      <li><a href="mod/worker.html">Apache-MPM worker</a></li>
      </ul><ul><li><a href="mod/mod_access_compat.html">Apache-Modul mod_access_compat</a></li>
      <li><a href="mod/mod_actions.html">Apache-Modul mod_actions</a></li>
      <li><a href="mod/mod_alias.html">Apache-Modul mod_alias</a></li>
      <li><a href="mod/mod_allowmethods.html">Apache-Modul mod_allowmethods</a></li>
      <li><a href="mod/mod_asis.html">Apache-Modul mod_asis</a></li>
      <li><a href="mod/mod_auth_basic.html">Apache-Modul mod_auth_basic</a></li>
      <li><a href="mod/mod_auth_digest.html">Apache-Modul mod_auth_digest</a></li>
      <li><a href="mod/mod_auth_form.html">Apache-Modul mod_auth_form</a></li>
      <li><a href="mod/mod_authn_anon.html">Apache-Modul mod_authn_anon</a></li>
      <li><a href="mod/mod_authn_core.html">Apache-Modul mod_authn_core</a></li>
      <li><a href="mod/mod_authn_dbd.html">Apache-Modul mod_authn_dbd</a></li>
      <li><a href="mod/mod_authn_dbm.html">Apache-Modul mod_authn_dbm</a></li>
      <li><a href="mod/mod_authn_file.html">Apache-Modul mod_authn_file</a></li>
      <li><a href="mod/mod_authn_socache.html">Apache-Modul mod_authn_socache</a></li>
      <li><a href="mod/mod_authnz_fcgi.html">Apache-Modul mod_authnz_fcgi</a></li>
      <li><a href="mod/mod_authnz_ldap.html">Apache-Modul mod_authnz_ldap</a></li>
      <li><a href="mod/mod_authz_core.html">Apache-Modul mod_authz_core</a></li>
      <li><a href="mod/mod_authz_dbd.html">Apache-Modul mod_authz_dbd</a></li>
      <li><a href="mod/mod_authz_dbm.html">Apache-Modul mod_authz_dbm</a></li>
      <li><a href="mod/mod_authz_groupfile.html">Apache-Modul mod_authz_groupfile</a></li>
      <li><a href="mod/mod_authz_host.html">Apache-Modul mod_authz_host</a></li>
      <li><a href="mod/mod_authz_owner.html">Apache-Modul mod_authz_owner</a></li>
      <li><a href="mod/mod_authz_user.html">Apache-Modul mod_authz_user</a></li>
      <li><a href="mod/mod_autoindex.html">Apache-Modul mod_autoindex</a></li>
      <li><a href="mod/mod_brotli.html">Apache-Modul mod_brotli</a></li>
      <li><a href="mod/mod_buffer.html">Apache-Modul mod_buffer</a></li>
      <li><a href="mod/mod_cache.html">Apache-Modul mod_cache</a></li>
      <li><a href="mod/mod_cache_disk.html">Apache-Modul mod_cache_disk</a></li>
      <li><a href="mod/mod_cache_socache.html">Apache-Modul mod_cache_socache</a></li>
      <li><a href="mod/mod_cern_meta.html">Apache-Modul mod_cern_meta</a></li>
      <li><a href="mod/mod_cgi.html">Apache-Modul mod_cgi</a></li>
      <li><a href="mod/mod_cgid.html">Apache-Modul mod_cgid</a></li>
      <li><a href="mod/mod_charset_lite.html">Apache-Modul mod_charset_lite</a></li>
      <li><a href="mod/mod_data.html">Apache-Modul mod_data</a></li>
      <li><a href="mod/mod_dav.html">Apache-Modul mod_dav</a></li>
      <li><a href="mod/mod_dav_fs.html">Apache-Modul mod_dav_fs</a></li>
      <li><a href="mod/mod_dav_lock.html">Apache-Modul mod_dav_lock</a></li>
      <li><a href="mod/mod_dbd.html">Apache-Modul mod_dbd</a></li>
      <li><a href="mod/mod_deflate.html">Apache-Modul mod_deflate</a></li>
      <li><a href="mod/mod_dialup.html">Apache-Modul mod_dialup</a></li>
      <li><a href="mod/mod_dir.html">Apache-Modul mod_dir</a></li>
      <li><a href="mod/mod_dumpio.html">Apache-Modul mod_dumpio</a></li>
      <li><a href="mod/mod_echo.html">Apache-Modul mod_echo</a></li>
      <li><a href="mod/mod_env.html">Apache-Modul mod_env</a></li>
      <li><a href="mod/mod_example_hooks.html">Apache-Modul mod_example_hooks</a></li>
      <li><a href="mod/mod_expires.html">Apache-Modul mod_expires</a></li>
      <li><a href="mod/mod_ext_filter.html">Apache-Modul mod_ext_filter</a></li>
      <li><a href="mod/mod_file_cache.html">Apache-Modul mod_file_cache</a></li>
      <li><a href="mod/mod_filter.html">Apache-Modul mod_filter</a></li>
      <li><a href="mod/mod_headers.html">Apache-Modul mod_headers</a></li>
      <li><a href="mod/mod_heartbeat.html">Apache-Modul mod_heartbeat</a></li>
      <li><a href="mod/mod_heartmonitor.html">Apache-Modul mod_heartmonitor</a></li>
      <li><a href="mod/mod_http2.html">Apache-Modul mod_http2</a></li>
      <li><a href="mod/mod_ident.html">Apache-Modul mod_ident</a></li>
      <li><a href="mod/mod_imagemap.html">Apache-Modul mod_imagemap</a></li>
      <li><a href="mod/mod_include.html">Apache-Modul mod_include</a></li>
      <li><a href="mod/mod_info.html">Apache-Modul mod_info</a></li>
      <li><a href="mod/mod_isapi.html">Apache-Modul mod_isapi</a></li>
      <li><a href="mod/mod_lbmethod_bybusyness.html">Apache-Modul mod_lbmethod_bybusyness</a></li>
      <li><a href="mod/mod_lbmethod_byrequests.html">Apache-Modul mod_lbmethod_byrequests</a></li>
      <li><a href="mod/mod_lbmethod_bytraffic.html">Apache-Modul mod_lbmethod_bytraffic</a></li>
      <li><a href="mod/mod_lbmethod_heartbeat.html">Apache-Modul mod_lbmethod_heartbeat</a></li>
      <li><a href="mod/mod_ldap.html">Apache-Modul mod_ldap</a></li>
      <li><a href="mod/mod_log_config.html">Apache-Modul mod_log_config</a></li>
      <li><a href="mod/mod_log_debug.html">Apache-Modul mod_log_debug</a></li>
      <li><a href="mod/mod_log_forensic.html">Apache-Modul mod_log_forensic</a></li>
      <li><a href="mod/mod_logio.html">Apache-Modul mod_logio</a></li>
      <li><a href="mod/mod_lua.html">Apache-Modul mod_lua</a></li>
      <li><a href="mod/mod_macro.html">Apache-Modul mod_macro</a></li>
      <li><a href="mod/mod_md.html">Apache-Modul mod_md</a></li>
      <li><a href="mod/mod_mime.html">Apache-Modul mod_mime</a></li>
      <li><a href="mod/mod_mime_magic.html">Apache-Modul mod_mime_magic</a></li>
      <li><a href="mod/mod_negotiation.html">Apache-Modul mod_negotiation</a></li>
      <li><a href="mod/mod_nw_ssl.html">Apache-Modul mod_nw_ssl</a></li>
      <li><a href="mod/mod_privileges.html">Apache-Modul mod_privileges</a></li>
      <li><a href="mod/mod_proxy.html">Apache-Modul mod_proxy</a></li>
      <li><a href="mod/mod_proxy_ajp.html">Apache-Modul mod_proxy_ajp</a></li>
      <li><a href="mod/mod_proxy_balancer.html">Apache-Modul mod_proxy_balancer</a></li>
      <li><a href="mod/mod_proxy_connect.html">Apache-Modul mod_proxy_connect</a></li>
      <li><a href="mod/mod_proxy_express.html">Apache-Modul mod_proxy_express</a></li>
      <li><a href="mod/mod_proxy_fcgi.html">Apache-Modul mod_proxy_fcgi</a></li>
      <li><a href="mod/mod_proxy_fdpass.html">Apache-Modul mod_proxy_fdpass</a></li>
      <li><a href="mod/mod_proxy_ftp.html">Apache-Modul mod_proxy_ftp</a></li>
      <li><a href="mod/mod_proxy_hcheck.html">Apache-Modul mod_proxy_hcheck</a></li>
      <li><a href="mod/mod_proxy_html.html">Apache-Modul mod_proxy_html</a></li>
      <li><a href="mod/mod_proxy_http.html">Apache-Modul mod_proxy_http</a></li>
      <li><a href="mod/mod_proxy_http2.html">Apache-Modul mod_proxy_http2</a></li>
      <li><a href="mod/mod_proxy_scgi.html">Apache-Modul mod_proxy_scgi</a></li>
      <li><a href="mod/mod_proxy_uwsgi.html">Apache-Modul mod_proxy_uwsgi</a></li>
      <li><a href="mod/mod_proxy_wstunnel.html">Apache-Modul mod_proxy_wstunnel</a></li>
      <li><a href="mod/mod_ratelimit.html">Apache-Modul mod_ratelimit</a></li>
      <li><a href="mod/mod_reflector.html">Apache-Modul mod_reflector</a></li>
      <li><a href="mod/mod_remoteip.html">Apache-Modul mod_remoteip</a></li>
      <li><a href="mod/mod_reqtimeout.html">Apache-Modul mod_reqtimeout</a></li>
      <li><a href="mod/mod_request.html">Apache-Modul mod_request</a></li>
      <li><a href="mod/mod_rewrite.html">Apache-Modul mod_rewrite</a></li>
      <li><a href="mod/mod_sed.html">Apache-Modul mod_sed</a></li>
      <li><a href="mod/mod_session.html">Apache-Modul mod_session</a></li>
      <li><a href="mod/mod_session_cookie.html">Apache-Modul mod_session_cookie</a></li>
      <li><a href="mod/mod_session_crypto.html">Apache-Modul mod_session_crypto</a></li>
      <li><a href="mod/mod_session_dbd.html">Apache-Modul mod_session_dbd</a></li>
      <li><a href="mod/mod_setenvif.html">Apache-Modul mod_setenvif</a></li>
      <li><a href="mod/mod_slotmem_plain.html">Apache-Modul mod_slotmem_plain</a></li>
      <li><a href="mod/mod_slotmem_shm.html">Apache-Modul mod_slotmem_shm</a></li>
      <li><a href="mod/mod_so.html">Apache-Modul mod_so</a></li>
      <li><a href="mod/mod_socache_dbm.html">Apache-Modul mod_socache_dbm</a></li>
      <li><a href="mod/mod_socache_dc.html">Apache-Modul mod_socache_dc</a></li>
      <li><a href="mod/mod_socache_memcache.html">Apache-Modul mod_socache_memcache</a></li>
      <li><a href="mod/mod_socache_redis.html">Apache-Modul mod_socache_redis</a></li>
      <li><a href="mod/mod_socache_shmcb.html">Apache-Modul mod_socache_shmcb</a></li>
      <li><a href="mod/mod_speling.html">Apache-Modul mod_speling</a></li>
      <li><a href="mod/mod_ssl.html">Apache-Modul mod_ssl</a></li>
      <li><a href="mod/mod_status.html">Apache-Modul mod_status</a></li>
      <li><a href="mod/mod_substitute.html">Apache-Modul mod_substitute</a></li>
      <li><a href="mod/mod_suexec.html">Apache-Modul mod_suexec</a></li>
      <li><a href="mod/mod_unique_id.html">Apache-Modul mod_unique_id</a></li>
      <li><a href="mod/mod_unixd.html">Apache-Modul mod_unixd</a></li>
      <li><a href="mod/mod_userdir.html">Apache-Modul mod_userdir</a></li>
      <li><a href="mod/mod_usertrack.html">Apache-Modul mod_usertrack</a></li>
      <li><a href="mod/mod_version.html">Apache-Modul mod_version</a></li>
      <li><a href="mod/mod_vhost_alias.html">Apache-Modul mod_vhost_alias</a></li>
      <li><a href="mod/mod_watchdog.html">Apache-Modul mod_watchdog</a></li>
      <li><a href="mod/mod_xml2enc.html">Apache-Modul mod_xml2enc</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="developer" id="developer">Dokumentation für Entwickler</a></h2>
      <ul><li class="separate"><a href="developer/">Übersicht</a></li>
      <li><a href="developer/API.html">Anmerkungen zur Apache-API</a></li>
      <li><a href="developer/new_api_2_4.html">API-Änderungen im Apache HTTPD
      2.4</a></li>
      <li><a href="developer/modguide.html">Module für Apache HTTPD 2.4 entwickeln</a></li>
      <li><a href="developer/documenting.html">Apache HTTPD dokumentieren</a></li>
      <li><a href="developer/hooks.html">Hook-Funktionen des Apache 2.x</a></li>
      <li><a href="developer/modules.html">Module von 1.3 nach 2.x konvertieren</a></li>
      <li><a href="developer/request.html">Verarbeitung der Anfragen in Version 2.x</a></li>
      <li><a href="developer/filters.html">Wie Filter in Version 2.x funktionieren</a></li>
      <li><a href="developer/output-filters.html">Richtlinien für Ausgangsfilter in Version 2.x</a></li>
      <li><a href="developer/thread_safety.html">Thread-Sicherheit in Version 2.x</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="index" id="index">Glossar und Index</a></h2>
      <ul><li><a href="glossary.html">Glossar</a></li>
      <li><a href="mod/">Modul-Index</a></li>
      <li><a href="mod/directives.html">Direktiven-Index</a></li>
      <li><a href="mod/quickreference.html">Kurzreferenz der Direktiven</a></li>
      </ul>
      </div></div>
      <div class="bottomlang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/sitemap.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/sitemap.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/sitemap.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/sitemap.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sitemap.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sitemap.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sitemap.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/sitemap.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Kommentare</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/sitemap.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Lizenziert unter der <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/handler.html.ko.euc-kr�����������������������������������������������������0000644�0000000�0000050�00000026550�13412755316�017560� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¾ÆÆÄÄ¡¿¡¼­ Çڵ鷯 »ç¿ë - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>¾ÆÆÄÄ¡¿¡¼­ Çڵ鷯 »ç¿ë</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/handler.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/handler.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/handler.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/handler.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/handler.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/handler.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/handler.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p>ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡¿¡¼­ Çڵ鷯¸¦ »ç¿ëÇÏ´Â ¹æ¹ýÀ» ¼³¸íÇÑ´Ù.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#definition">Çڵ鷯°¡ ¹«¾ùÀΰ¡</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#examples">¿¹Á¦</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programmer">ÇÁ·Î±×·¡¸Ó¸¦ À§ÇÑ Á¤º¸</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="definition" id="definition">Çڵ鷯°¡ ¹«¾ùÀΰ¡</a></h2>
          
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_actions.html">mod_actions</a></code></li><li><code class="module"><a href="./mod/mod_asis.html">mod_asis</a></code></li><li><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code></li><li><code class="module"><a href="./mod/mod_info.html">mod_info</a></code></li><li><code class="module"><a href="./mod/mod_mime.html">mod_mime</a></code></li><li><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></li><li><code class="module"><a href="./mod/mod_status.html">mod_status</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_actions.html#action">Action</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#removehandler">RemoveHandler</a></code></li><li><code class="directive"><a href="./mod/core.html#sethandler">SetHandler</a></code></li></ul></td></tr></table>
      
      
          <p>ÆÄÀÏÀ» ¿äûÇÒ¶§ ¾ÆÆÄÄ¡°¡ ³»ºÎÀûÀ¸·Î ¼öÇàÇÒ ÀÛ¾÷À»
          "Çڵ鷯(handler)"¶ó°í ÇÑ´Ù. ÀϹÝÀûÀ¸·Î ÆÄÀÏÀº ÆÄÀÏ Á¾·ù¿¡
          µû¶ó ¾Ï¹¬ÀûÀÎ Çڵ鷯¸¦ °¡Áö°í ÀÖ´Ù. ¸ðµç ÆÄÀÏÀº º¸Åë °£´ÜÈ÷
          ¼­¹ö°¡ ¼­ºñ½ºÇÏÁö¸¸, ¾î¶² ÆÄÀÏ Á¾·ù´Â µû·Î "󸮵ȴÙ(handled)".</p>
      
          <p>Apache 1.1ºÎÅÍ Çڵ鷯¸¦ ¸í½ÃÀûÀ¸·Î »ç¿ëÇÒ ¼ö ÀÖ°Ô µÇ¾ú´Ù.
          ÆÄÀÏ Á¾·ù¿Í °ü°è¾øÀÌ Çڵ鷯¸¦ ÆÄÀÏÀÇ È®ÀåÀÚ³ª À§Ä¡¿¡ µû¶ó
          ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù. ÀÌ´Â ´õ ÈǸ¢ÇÑ ¹æ¹ýÀÌ°í ÆÄÀÏÀ» Á¾·ù¿Í Çڵ鷯
          µÑ ¸ðµÎ¿Í ¿¬°èÇÒ ¼ö Àֱ⶧¹®¿¡ ÁÁ´Ù. (<a href="mod/mod_mime.html#multipleext">¿©·¯ È®ÀåÀÚ¸¦ °¡Áø ÆÄÀÏ</a>µµ
          Âü°í)</p>
      
          <p>Çڵ鷯´Â ¼­¹ö³ª ¸ðµâ·Î ±¸ÇöÇÏ¿©, <code class="directive"><a href="./mod/mod_actions.html#action">Action</a></code> Áö½Ã¾î·Î Ãß°¡ÇÒ
          ¼ö ÀÖ´Ù. Ç¥ÁØ ¹èÆ÷º»¿¡ ÀÖ´Â ±âº» Çڵ鷯´Â ´ÙÀ½°ú °°´Ù:</p>
      
          <ul>
            <li><strong>default-handler</strong>: Á¤ÀûÀÎ ³»¿ëÀ»
            ó¸®ÇϱâÀ§ÇØ ±âº»ÀûÀ¸·Î »ç¿ëÇÏ´Â Çڵ鷯
            <code>default_handler()</code>¸¦ »ç¿ëÇÏ¿© ÆÄÀÏÀ» º¸³½´Ù.
            (core)</li>
      
            <li><strong>send-as-is</strong>: HTTP Çì´õ°¡ ÀÖ´Â ÆÄÀÏÀ»
            ±×´ë·Î º¸³½´Ù. (<code class="module"><a href="./mod/mod_asis.html">mod_asis</a></code>)</li>
      
            <li><strong>cgi-script</strong>: ÆÄÀÏÀ» CGI·Î ó¸®ÇÑ´Ù.
            (<code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code>)</li>
      
            <li><strong>imap-file</strong>: imagemap ±ÔÄ¢ ÆÄÀÏ·Î
            ó¸®ÇÑ´Ù. (<code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code>)</li>
      
            <li><strong>server-info</strong>: ¼­¹öÀÇ ¼³Á¤ Á¤º¸¸¦
            ¾Ë·ÁÁØ´Ù. (<code class="module"><a href="./mod/mod_info.html">mod_info</a></code>)</li>
      
            <li><strong>server-status</strong>: ¼­¹öÀÇ »óŸ¦ º¸°íÇÑ´Ù.
            (<code class="module"><a href="./mod/mod_status.html">mod_status</a></code>)</li>
      
            <li><strong>type-map</strong>: ³»¿ëÇù»ó¿¡ »ç¿ëÇÒ
            type mapÀ¸·Î ó¸®ÇÑ´Ù.
            (<code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>)</li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">¿¹Á¦</a></h2>
          
      
          <h3><a name="example1" id="example1">CGI ½ºÅ©¸³Æ®¸¦ »ç¿ëÇÏ¿© Á¤ÀûÀÎ ³»¿ë ¼öÁ¤Çϱâ</a></h3>
            
      
            <p>´ÙÀ½ Áö½Ã¾î´Â È®ÀåÀÚ°¡ <code>html</code>ÀÎ ÆÄÀÏÀ»
            ¿äûÇÒ °æ¿ì <code>footer.pl</code> CGI ½ºÅ©¸³Æ®¸¦ ¶ç¿î´Ù.</p>
      
            <div class="example"><p><code>
              Action add-footer /cgi-bin/footer.pl<br />
              AddHandler add-footer .html
            </code></p></div>
      
            <p>CGI ½ºÅ©¸³Æ®´Â
            (<code>PATH_TRANSLATED</code> ȯ°æº¯¼ö°¡ ÁöĪÇÏ´Â) ¿ø·¡
            ¿äûÇÑ ¹®¼­¸¦ ÀûÀýÈ÷ ¼öÁ¤ÇÑ ÈÄ º¸³½´Ù.</p>
       
          
          <h3><a name="example2" id="example2">HTTP Çì´õ¸¦ Æ÷ÇÔÇÏ´Â ÆÄÀÏ</a></h3>
            
      
            <p>´ÙÀ½ Áö½Ã¾î´Â HTTP Çì´õ¸¦ Æ÷ÇÔÇÏ´Â ÆÄÀÏ¿¡
            <code>send-as-is</code> Çڵ鷯¸¦ Áö½ÃÇÑ´Ù.
            <code>/web/htdocs/asis/</code> µð·ºÅ丮 ¾È¿¡ ÀÖ´Â ¸ðµç
            ÆÄÀÏÀº È®ÀåÀÚ¿Í °ü°è¾øÀÌ <code>send-as-is</code> Çڵ鷯°¡
            ó¸®ÇÑ´Ù.</p>
      
            <div class="example"><p><code>
              &lt;Directory /web/htdocs/asis&gt;<br />
              SetHandler send-as-is<br />
              &lt;/Directory&gt;
            </code></p></div>
      
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="programmer" id="programmer">ÇÁ·Î±×·¡¸Ó¸¦ À§ÇÑ Á¤º¸</a></h2>
          
      
          <p>Çڵ鷯 ±â´ÉÀ» ±¸ÇöÇϱâÀ§ÇØ »ç¿ëÇÔÁ÷ÇÑ
          <a href="developer/API.html">Apache API</a>°¡ Ãß°¡µÇ¾ú´Ù.
          ƯÈ÷ <code>request_rec</code> ±¸Á¶Ã¼¿¡ »õ·Î¿î Çʵ尡
          Ãß°¡µÇ¾ú´Ù:</p>
      
          <div class="example"><p><code>
            char *handler
          </code></p></div>
      
          <p>¸ðµâÀÌ Çڵ鷯¸¦ »ç¿ëÇÏ·Á¸é, ¿äûÀÇ
          <code>invoke_handler</code> ´Ü°è ÀÌÀü¿¡
          <code>r-&gt;handler</code>¿¡ Çڵ鷯 À̸§À» ÁöÁ¤ÇØÁֱ⸸
          ÇÏ¸é µÈ´Ù. Çڵ鷯´Â content type ´ë½Å Çڵ鷯 À̸§À» »ç¿ëÇÑ
          °ÍÀ» Á¦¿ÜÇϰí´Â Àü°ú °°ÀÌ ±¸ÇöµÇ¾ú´Ù. ²À Áöų ÇÊ¿ä´Â ¾øÁö¸¸
          Çڵ鷯 À̸§¿¡ ½½·¡½¬¸¦ »ç¿ëÇÏÁö ¾Ê°í, ´Ü¾îµé »çÀÌ¿¡ »©±â
          ±âÈ£¸¦ »ç¿ëÇÏ´Â °ÍÀÌ ÀϹÝÀûÀÌ´Ù. ±×·¡¼­ Çڵ鷯 À̸§ÀÌ
          media type°ú °ãÄ¡Áö ¾Ê´Â´Ù.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/handler.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/handler.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/handler.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/handler.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/handler.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/handler.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/handler.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/handler.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/env.html.fr.utf8�����������������������������������������������������������0000644�0000000�0000050�00000101747�13412755316�016433� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache et les variables d'environnement - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache et les variables d'environnement</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/env.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/env.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/env.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/env.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/env.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
           <p>Deux types de variables d'environnement affectent le serveur
           HTTP Apache.</p>
      
          <p>Le premier type correspond aux variables d'environnement
          contrôlées par le système d'exploitation sous-jacent et définies
          avant le démarrage du serveur. Leurs valeurs peuvent être utilisées
          directement dans les fichiers de configuration, et peuvent
          éventuellement être transmises aux scripts CGI et SSI via la
          directive PassEnv.</p>
      
          <p>Le second type correspond aux variables nommées appelées aussi
          <em>variables d'environnement</em> dans lesquelles le serveur HTTP
          Apache stocke des informations via un mécanisme spécial. Ces
          informations peuvent servir à contrôler diverses opérations comme
          l'enregistrement des traces ou le contrôle d'accès. On utilise aussi ces
          variables dans le mécanisme de communication avec les programmes externes
          comme les scripts CGI. Ce document présente différentes méthodes pour
          manipuler et utiliser ces variables.</p>
      
          <p>Bien que ces variables soient référencées comme <em>variables
          d'environnement</em>, il ne faut pas les confondre avec les variables
          d'environnement contrôlées par le système d'exploitation sous-jacent.
          En fait, ces variables sont stockées et manipulées dans une structure
          interne à Apache. Elles ne deviennent de véritables variables
          d'environnement du système d'exploitation que lorsqu'elles sont mises à la
          disposition de scripts CGI et de scripts inclus côté serveur (SSI). Si vous
          souhaitez manipuler l'environnement du système d'exploitation sous lequel
          le serveur s'exécute, vous devez utiliser les mécanismes standards de
          manipulation de l'environnement fournis par l'interpréteur de commandes
          (shell) de votre système d'exploitation.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#setting">Définition des variables d'environnement</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#using">Utilisation des variables d'environnement</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#special">Variables d'environnement à usage spécial</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#examples">Exemples</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="setting" id="setting">Définition des variables d'environnement</a></h2>
          
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code></li><li><code class="module"><a href="./mod/mod_env.html">mod_env</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li><li><code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code></li><li><code class="module"><a href="./mod/mod_unique_id.html">mod_unique_id</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_setenvif.html#browsermatch">BrowserMatch</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#browsermatchnocase">BrowserMatchNoCase</a></code></li><li><code class="directive"><a href="./mod/mod_env.html#passenv">PassEnv</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code></li><li><code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#setenvifnocase">SetEnvIfNoCase</a></code></li><li><code class="directive"><a href="./mod/mod_env.html#unsetenv">UnsetEnv</a></code></li></ul></td></tr></table>
      
          <h3><a name="basic-manipulation" id="basic-manipulation">Manipulations de base de l'environnement</a></h3>
              
      
              <p>La méthode la plus élémentaire pour définir une variable
      	d'environnement au niveau d'Apache consiste à utiliser la directive
      	inconditionnelle <code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code>. Les variables peuvent aussi être transmises depuis
      	l'environnement du shell à partir duquel le serveur a été démarré en
      	utilisant la directive
              <code class="directive"><a href="./mod/mod_env.html#passenv">PassEnv</a></code>.</p>
      
          
          <h3><a name="conditional" id="conditional">Définitions conditionnelles en fonction des requêtes</a></h3>
              
      
              <p>Pour plus de souplesse, les directives fournies par le module
              <code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code> permettent de définir les
      	variables d'environnement en tenant compte des caractéristiques
      	de chaque requête. Par exemple, une
      	variable pourrait n'être définie que lorsqu'un navigateur spécifique
      	(User-Agent) a généré la requête, ou seulement quand un en-tête
      	Referer particulier est présent. La directive
      	<code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> du module
      	<code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> qui utilise l'option
      	<code>[E=...]</code> pour définir
      	les variables d'environnement apporte encore plus de souplesse.</p>
      
          
          <h3><a name="unique-identifiers" id="unique-identifiers">Identifiants uniques</a></h3>
              
      
              <p>Finalement, le module <code class="module"><a href="./mod/mod_unique_id.html">mod_unique_id</a></code> définit la variable
      	d'environnement <code>UNIQUE_ID</code> pour chaque requête à une valeur
      	qui est garantie unique parmi "toutes" les requêtes sous des
      	conditions très spécifiques.</p>
      
          
          <h3><a name="standard-cgi" id="standard-cgi">Variables CGI standards</a></h3>
              
      
              <p>En plus de l'ensemble des variables d'environnement internes à la
      	configuration d'Apache et de celles transmises depuis le shell,
      	les scripts CGI	et les pages SSI
      	se voient affectés un ensemble de variables
      	d'environnement contenant des méta-informations à propos de la requête
      	comme préconisé dans la
      	<a href="http://www.ietf.org/rfc/rfc3875">spécification
      	sur les CGIs</a>.</p>
      
          
          <h3><a name="caveats" id="caveats">Quelques mises en garde</a></h3>
              
      
              <ul>
                <li>Les directives de manipulation de l'environnement ne permettent
      	  pas de supplanter ou modifier les variables CGI standards.</li>
      
                <li>Lorsqu'on utilise <code class="program"><a href="./programs/suexec.html">suexec</a></code> pour exécuter des
      	  scripts CGI, l'environnement est nettoyé et réduit à un ensemble de
      	  variables <em>sûres</em> avant l'exécution du script. La liste des
      	  variables <em>sûres</em> est définie à la compilation dans
                <code>suexec.c</code>.</li>
      
                <li>Pour des raisons de portabilité, les noms des variables
      	  d'environnement ne peuvent contenir que des lettres, des chiffres, et
      	  le caractère "sousligné". En outre, le premier caractère ne doit pas
      	  être un chiffre. Les caractères qui ne satisfont pas à ces conditions
      	  seront remplacés par un caractère "sousligné" quand ils seront
      	  transmis aux scripts CGI et aux pages SSI.</li>
      
      	  <li>Les contenus d'en-têtes HTTP transmis aux scripts de type
      	  CGI ou autre via des variables d'environnement constituent un
      	  cas particulier (voir plus loin). Leur nom est converti en
      	  majuscules et seuls les tirets sont remplacés par des
      	  caractères '_' ("souligné") ; si le format du nom de l'en-tête
      	  n'est pas valide, celui-ci est ignoré. Voir <a href="#fixheader">plus loin</a> pour une solution de
      	  contournement du problème.</li>
      
                <li>La directive <code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code> s'exécute assez tard au
      	  cours du traitement de la requête, ce qui signifie que des
      	  directives telles que <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code> et <code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code> ne verront pas
      	  les variables qu'elle aura définies.</li>
      
      	  <li>Lorsque le serveur cherche un chemin via une <a class="glossarylink" href="./glossary.html#subrequest" title="voir glossaire">sous-requête</a> interne (par exemple la
         recherche d'un <code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code>), ou lorsqu'il génère un
         listing du contenu d'un répertoire via le module
         <code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code>, la sous-requête n'hérite pas des
         variables d'environnement spécifiques à la requête. En outre, à cause
         des phases de l'API auxquelles <code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code> prend
         part, les directives <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code> ne sont pas évaluées
         séparément dans la sous-requête.</li>
              </ul>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="using" id="using">Utilisation des variables d'environnement</a></h2>
          
      
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_authz_host.html">mod_authz_host</a></code></li><li><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code></li><li><code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code></li><li><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="./mod/mod_log_config.html">mod_log_config</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_authz_core.html#require">Require</a></code></li><li><code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code></li><li><code class="directive"><a href="./mod/mod_access_compat.html#deny">Deny</a></code></li><li><code class="directive"><a href="./mod/mod_ext_filter.html#extfilterdefine">ExtFilterDefine</a></code></li><li><code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code></li><li><code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code></li></ul></td></tr></table>
      
          <h3><a name="cgi-scripts" id="cgi-scripts">Scripts CGI</a></h3>
              
      
              <p>La communication d'informations aux scripts CGI constitue une des
      	principales utilisations des variables d'environnement. Comme indiqué
      	plus haut, l'environnement transmis aux scripts CGI comprend des
      	méta-informations standards à propos de la requête, en plus des
      	variables définies dans la configuration d'Apache. Pour plus de
      	détails, se référer au
              <a href="howto/cgi.html">tutoriel CGI</a>.</p>
      
          
          <h3><a name="ssi-pages" id="ssi-pages">Pages SSI</a></h3>
              
      
              <p>Les documents inclus côté serveur (SSI) traités par le filtre
              <code>INCLUDES</code> du module <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>,
      	peuvent afficher les
      	variables d'environnement à l'aide de l'élément <code>echo</code>,
      	et peuvent utiliser des variables d'environnement dans les éléments
      	de contrôle de flux pour rendre certaines parties d'une page
              conditionnelles en fonction des caractéristiques de la requête.
      	Apache fournit aussi les variables d'environnement CGI standards
      	aux pages SSI
      	comme indiqué plus haut. Pour plus de détails, se référer au
      	<a href="howto/ssi.html">tutoriel SSI</a>.</p>
      
          
          <h3><a name="access-control" id="access-control">Contrôle d'accès</a></h3>
              
      
              <p>L'accès au serveur peut être contrôlé en fonction de la valeur de
      	variables d'environnement à l'aide des directives
      	<code>allow from env=</code> et <code>deny from env=</code>.
      	En association avec la directive
              <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code>, ceci confère une
      	grande souplesse au contrôle d'accès au serveur en fonction des
      	caractéristiques du client. Par exemple, vous pouvez utiliser ces
              directives pour interdire l'accès depuis un navigateur particulier
      	(User-Agent).
              </p>
      
          
          <h3><a name="logging" id="logging">Enregistrement conditionnel des traces</a></h3>
              
      
              <p>Les variables d'environnement peuvent être enregistrées dans le
      	fichier de log des accès à l'aide de l'option <code>%e</code> de la
      	directive <code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code>.
      	En outre, la décision de tracer ou non les requêtes peut être prise
      	en fonction de l'état de variables d'environnement en utilisant la
      	forme conditionnelle de la directive
              <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code>. En
      	association avec la directive <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code>, ceci confère une grande souplesse au contrôle
      	du traçage des requêtes. Par exemple, vous pouvez choisir de ne pas
      	tracer les requêtes pour des noms de fichiers se terminant par
      	<code>gif</code>, ou encore de ne tracer que les requêtes des clients
      	n'appartenant pas à votre sous-réseau.</p>
      
          
          <h3><a name="response-headers" id="response-headers">En-têtes de réponse conditionnels</a></h3>
              
      
              <p>La directive <code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code>
              peut se baser sur la présence ou l'absence d'une variable
      	d'environnement pour décider si un certain en-tête HTTP sera placé
      	dans la réponse au client. Ceci permet, par exemple, de n'envoyer un
      	certain en-tête de réponse que si un en-tête correspondant est présent
      	dans la requête du client.</p>
      
          
      
          <h3><a name="external-filter" id="external-filter">Activation de filtres externes</a></h3>
              
      
              <p>Les filtres externes configurés par le module
      	<code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code> à l'aide de la directive <code class="directive"><a href="./mod/mod_ext_filter.html#extfilterdefine">ExtFilterDefine</a></code> peuvent être
      	activés de manière conditionnelle en fonction d'une variable
      	d'environnement à l'aide des options
              <code>disableenv=</code> et <code>enableenv=</code>.</p>
          
      
          <h3><a name="url-rewriting" id="url-rewriting">Réécriture d'URL</a></h3>
              
      
              <p>La forme <code>%{ENV:<em>variable</em>}</code> de
      	<em>TestString</em> dans la
      	directive <code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code>
              permet au moteur de réécriture du module
      	<code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> de prendre des
      	décisions conditionnées par des variables d'environnement.
              Notez que les variables accessibles dans
      	<code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> sans le préfixe
              <code>ENV:</code> ne sont pas de véritables variables
      	d'environnement. Ce sont plutôt des variables spécifiques à
      	<code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>
              qui ne sont pas accessibles pour les autres modules.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="special" id="special">Variables d'environnement à usage spécial</a></h2>
          
      
              <p>Des problèmes d'interopérabilité ont conduit à l'introduction de
      	mécanismes permettant de modifier le comportement d'Apache lorsqu'il
      	dialogue avec certains clients. Afin de rendre ces mécanismes aussi
      	souples que possible, ils sont invoqués en définissant des variables
      	d'environnement, en général à l'aide de la directive
      	<code class="directive"><a href="./mod/mod_setenvif.html#browsermatch">BrowserMatch</a></code>, bien que les
      	directives <code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code> et
      	<code class="directive"><a href="./mod/mod_env.html#passenv">PassEnv</a></code> puissent aussi être
      	utilisées, par exemple.</p>
      
          <h3><a name="downgrade" id="downgrade">downgrade-1.0</a></h3>
              
      
              <p>Ceci force le traitement d'une requête comme une requête HTTP/1.0
              même si elle a été rédigée dans un langage plus récent.</p>
      
          
          <h3><a name="force-gzip" id="force-gzip">force-gzip</a></h3>
              
                <p>Si le filtre <code>DEFLATE</code> est activé, cette variable
      	  d'environnement ignorera les réglages accept-encoding de votre
      	  navigateur et enverra une sortie compressée inconditionnellement.</p>
          
          <h3><a name="force-no-vary" id="force-no-vary">force-no-vary</a></h3>
              
      
              <p>Cette variable entraîne la suppression de tout champ
      	<code>Vary</code> des en-têtes de la réponse avant que cette dernière
      	soit renvoyée au client. Certains clients n'interprètent pas ce champ
      	correctement, et la définition de cette variable permet de contourner
      	ce problème, mais implique aussi la définition de
      	<strong>force-response-1.0</strong>.</p>
      
          
          <h3><a name="force-response" id="force-response">force-response-1.0</a></h3>
              
      
            <p>Cette variable force une réponse en langage HTTP/1.0 aux clients
            qui envoient des requêtes dans le même langage. Elle fut implémentée à
            l'origine suite à des problèmes avec les mandataires d'AOL. Certains
            clients en langage HTTP/1.0 ne réagissent pas correctement face à une
            réponse en langage HTTP/1.1, et cette variable peut être utilisée pour
            assurer l'interopérabilité avec eux.</p>
      
          
      
          <h3><a name="gzip-only-text-html" id="gzip-only-text-html">gzip-only-text/html</a></h3>
              
      
              <p>Positionnée à "1", cette variable désactive le filtre en sortie
      	<code>DEFLATE</code> fourni par le module <code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code> pour les
      	types de contenu autres que <code>text/html</code>. Si vous préférez
      	utiliser des fichiers compressés statiquement,
      	<code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> évalue aussi la variable (non
      	seulement pour gzip, mais aussi pour tous les encodages autres que
      	"identity").</p>
          
      
          <h3><a name="no-gzip" id="no-gzip">no-gzip</a></h3>
      
              <p>Quand cette variable est définie, le filtre <code>DEFLATE</code> du
      	module <code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code> est désactivé, et
              <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> refusera de délivrer des ressources
      	encodées.</p>
      
          
      
          <h3><a name="no-cache" id="no-cache">no-cache</a></h3>
          	<p><em>Disponible dans les versions 2.2.12 et ultérieures d'Apache</em></p>
      
              <p>Lorsque cette variable est définie,
      	<code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> ne sauvegardera pas de réponse
      	susceptible d'être mise en cache. Cette variable d'environnement
      	n'a aucune incidence sur le fait qu'une réponse déjà enregistrée
      	dans la cache soit utilisée ou non pour la requête courante.</p>
      
          
      
          <h3><a name="nokeepalive" id="nokeepalive">nokeepalive</a></h3>
              
      
              <p>Quand cette variable est définie, la directive
      	<code class="directive"><a href="./mod/core.html#keepalive">KeepAlive</a></code> est désactivée.</p>
      
          
      
          <h3><a name="prefer-language" id="prefer-language">prefer-language</a></h3>
      
              <p>Cette variable modifie le comportement du module
      	<code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>. Si elle contient un symbole de
      	langage (tel que <code>en</code>, <code>ja</code>
              ou <code>x-klingon</code>), <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> essaie de
      	délivrer une variante dans ce langage. S'il n'existe pas de telle
      	variante, le processus normal de
      	<a href="content-negotiation.html">négociation</a> s'applique.</p>
      
          
      
          <h3><a name="redirect-carefully" id="redirect-carefully">redirect-carefully</a></h3>
              
      
              <p>Cette variable force le serveur à être plus prudent lors de l'envoi
      	d'une redirection au client. Elle est en général utilisée quand un
      	client présente un problème connu avec les redirections. Elle fut
      	implémentée à l'origine suite a un problème rencontré avec le logiciel
      	WebFolders de Microsoft qui ne gère pas correctement les redirections
      	vers des ressources de type répertoire via des méthodes DAV.</p>
      
          
      
         <h3><a name="suppress-error-charset" id="suppress-error-charset">suppress-error-charset</a></h3>
             
      
          <p><em>Disponible dans les versions postérieures à 2.0.54</em></p>
      
          <p>Quand Apache génère une redirection en réponse à une requête client,
          la réponse inclut un texte destiné à être affiché au cas où le client ne
          suivrait pas, ou ne pourrait pas suivre automatiquement la redirection.
          Habituellement, Apache marque ce texte en accord avec le jeu de caractères
          qu'il utilise, à savoir ISO-8859-1.</p>
          <p> Cependant, si la redirection fait référence à une page qui utilise un
          jeu de caractères différent, certaines versions de navigateurs obsolètes
          essaieront d'utiliser le jeu de caractères du texte de la redirection
          plutôt que celui de la page réelle.
          Ceci peut entraîner, par exemple, un rendu incorrect du Grec.</p>
          <p>Si cette variable d'environnement est définie, Apache omettra le jeu de
          caractères pour le texte de la redirection, et les navigateurs obsolètes
          précités utiliseront correctement celui de la page de destination.</p>
      
          <div class="warning">
            <h3>Note concernant la sécurité</h3>
      
            <p>L'envoi de pages d'erreur sans spécifier un jeu de caractères peut
            conduire à des attaques de type "cross-site-scripting" pour les
            navigateurs qui ne respectent pas la spécification HTTP/1.1 (MSIE) et
            tentent de déduire le jeu de caractères à partir du contenu. De tels
            navigateurs peuvent être facilement trompés et utiliser le jeu de
            caractères UTF-7 ; les contenus des données en entrée de type UTF-7
            (comme les URI de requête) ne seront alors plus protégés par les
            mécanismes d'échappement usuels conçus pour prévenir les attaques
            de type "cross-site-scripting".</p>
          </div>
      
         
      
         <h3><a name="proxy" id="proxy">force-proxy-request-1.0, proxy-nokeepalive, proxy-sendchunked,
         proxy-sendcl, proxy-chain-auth, proxy-interim-response, proxy-initial-not-pooled</a></h3>
      
         <p>Ces directives modifient le comportement protocolaire du module
         <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>.  Voir la documentation sur
         <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> et <code class="module"><a href="./mod/mod_proxy_http.html">mod_proxy_http</a></code> pour plus de détails.</p>
         
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Exemples</a></h2>
          
      
          <h3><a name="fixheader" id="fixheader">Transmission du contenu d'en-têtes non valides aux scripts
            CGI</a></h3>
            
      
            <p>Avec la version 2.4, Apache est plus strict avec la conversion
            des en-têtes HTTP en variables d'environnement dans
            <code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code> et d'autres modules : dans les versions
            précédentes, tout caractère invalide dans les noms d'en-têtes
            était tout simplement remplacé par un caractère '_', ce qui
            pouvait exposer à des attaques de type cross-site-scripting via
            injection d'en-têtes (voir <a href="http://events.ccc.de/congress/2007/Fahrplan/events/2212.en.html">Bogues
            du Web inhabituelles</a>, planche 19/20).</p>
      
            <p>Si vous devez supporter un client qui envoie des en-têtes non
            conformes et si ceux-ci ne peuvent pas être corrigés, il existe
            une solution de contournement simple mettant en jeu les modules
            <code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code> et <code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code>,
            et permettant de prendre en compte ces en-têtes :</p>
      
      <pre class="prettyprint lang-config"># L'exemple suivant montre comment prendre en compte un en-tête<br />
      # Accept_Encoding non conforme envoyé par un client.
      #
      SetEnvIfNoCase ^Accept.Encoding$ ^(.*)$ fix_accept_encoding=$1
      RequestHeader set Accept-Encoding %{fix_accept_encoding}e env=fix_accept_encoding</pre>
      
      
          
      
          <h3><a name="misbehaving" id="misbehaving">Modification du comportement protocolaire face à des clients
      	réagissant de manière non conforme</a></h3>
              
      
              <p>Les versions antérieures recommandaient l'ajout de ces lignes dans
              httpd.conf pour tenir compte de problèmes connus avec certains clients.
      	Comme les clients concernés sont maintenant très peu utilisés, cet
      	ajout n'est pratiquement plus nécessaire.</p>
      <pre class="prettyprint lang-config">#
      # The following directives modify normal HTTP response behavior.
      # The first directive disables keepalive for Netscape 2.x and browsers that
      # spoof it. There are known problems with these browser implementations.
      # The second directive is for Microsoft Internet Explorer 4.0b2
      # which has a broken HTTP/1.1 implementation and does not properly
      # support keepalive when it is used on 301 or 302 (redirect) responses.
      #
      BrowserMatch "Mozilla/2" nokeepalive
      BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
      
      #
      # The following directive disables HTTP/1.1 responses to browsers which
      # are in violation of the HTTP/1.0 spec by not being able to grok a
      # basic 1.1 response.
      #
      BrowserMatch "RealPlayer 4\.0" force-response-1.0
      BrowserMatch "Java/1\.0" force-response-1.0
      BrowserMatch "JDK/1\.0" force-response-1.0</pre>
      
      
          
          <h3><a name="no-img-log" id="no-img-log">Ne pas tracer les requêtes pour des images dans le fichier de
      	trace des accès</a></h3>
              
      
              <p>Dans cet exemple, les requêtes pour des images n'apparaissent pas
      	dans le fichier de trace des accès. Il peut être facilement adapté pour
      	empêcher le traçage de répertoires particuliers, ou de requêtes
              en provenance de certains hôtes.</p>
               <pre class="prettyprint lang-config">SetEnvIf Request_URI \.gif image-request
      SetEnvIf Request_URI \.jpg image-request
      SetEnvIf Request_URI \.png image-request
      CustomLog logs/access_log common env=!image-request</pre>
      
      
          
          <h3><a name="image-theft" id="image-theft">Prévention du "Vol d'image"</a></h3>
              
      
              <p>Cet exemple montre comment empêcher les utilisateurs ne faisant pas
      	partie de votre serveur d'utiliser des images de votre serveur comme
      	images en ligne dans leurs pages. Cette configuration n'est pas
      	recommandée, mais elle peut fonctionner dans des circonstances bien
      	définies. Nous supposons que toutes vos images sont enregistrées dans
      	un répertoire nommé <code>/web/images</code>.</p>
          	<pre class="prettyprint lang-config">SetEnvIf Referer "^http://www\.example\.com/" local_referal
      # Autorise les navigateurs qui n'envoient aucune information de Referer
      SetEnvIf Referer "^$" local_referal
      &lt;Directory "/web/images"&gt;
          Require env local_referal
      &lt;/Directory&gt;</pre>
      
      
              <p>Pour plus d'informations sur cette technique, voir le tutoriel sur
      	ServerWatch
      	"<a href="http://www.serverwatch.com/tutorials/article.php/1132731">Keeping Your Images from Adorning Other Sites</a>".</p>
          
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/env.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/env.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/env.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/env.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/env.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/env.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������httpd-2.4.41/docs/manual/index.html.tr.utf8���������������������������������������������������������0000644�0000000�0000050�00000022264�13412755316�016764� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache HTTP Sunucusu Sürüm 2.4
      Belgeleri - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="index-page">
      <div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="http://httpd.apache.org/docs-project/"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a></div>
      <div id="page-content"><h1>Apache HTTP Sunucusu Sürüm 2.4
      Belgeleri</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./da/" hreflang="da" rel="alternate" title="Dansk">&nbsp;da&nbsp;</a> |
      <a href="./de/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <form method="get" action="http://www.google.com/search"><p><input name="as_q" value="" type="text" /> <input value="Google’de Ara" type="submit" /><input value="10" name="num" type="hidden" /><input value="tr" name="hl" type="hidden" /><input value="UTF-8" name="ie" type="hidden" /><input value="Google Search" name="btnG" type="hidden" /><input name="as_epq" value="Sürüm 2.4" type="hidden" /><input name="as_oq" value="" type="hidden" /><input name="as_eq" value="&quot;List-Post&quot;" type="hidden" /><input value="" name="lr" type="hidden" /><input value="i" name="as_ft" type="hidden" /><input value="" name="as_filetype" type="hidden" /><input value="all" name="as_qdr" type="hidden" /><input value="any" name="as_occt" type="hidden" /><input value="i" name="as_dt" type="hidden" /><input value="httpd.apache.org" name="as_sitesearch" type="hidden" /><input value="off" name="safe" type="hidden" /></p></form>
      <table id="indextable"><tr><td class="col1"><div class="category"><h2><a name="release" id="release">Sürümlerin Dağıtım Bilgileri</a></h2>
      <ul><li><a href="new_features_2_4.html">2.3/2.4’deki yeni özellikler</a></li>
      <li><a href="new_features_2_2.html">Apache 2.1/2.2’deki yeni özellikler</a></li>
      <li><a href="new_features_2_0.html">Apache 2.0’daki yeni özellikler</a></li>
      <li><a href="upgrading.html">2.2’den 2.4’e yükseltme</a></li>
      <li><a href="license.html">Apache Lisansı</a></li>
      </ul>
      </div><div class="category"><h2><a name="manual" id="manual">Başvuru Kılavuzu</a></h2>
      <ul><li><a href="install.html">Derleme ve Kurulum</a></li>
      <li><a href="invoking.html">BaÅŸlatma</a></li>
      <li><a href="stopping.html">Durdurma ve Yeniden BaÅŸlatma</a></li>
      <li><a href="mod/quickreference.html">Çalışma anı Yapılandırma Yönergeleri</a></li>
      <li><a href="mod/">Modüller</a></li>
      <li><a href="mpm.html">Çok Süreçlilik Modülleri (MPM’ler)</a></li>
      <li><a href="filter.html">Süzgeçler</a></li>
      <li><a href="handler.html">Eylemciler</a></li>
      <li><a href="expr.html">İfade Çözümleyici</a></li>
      <li><a href="mod/overrides.html">.htaccess için Geçersizleştirme Sınıfları</a></li>
      <li><a href="programs/">Sunucu ve Desteklenen Programlar</a></li>
      <li><a href="glossary.html">Terimler</a></li>
      </ul>
      </div></td><td><div class="category"><h2><a name="usersguide" id="usersguide">Kullanıcı Kılavuzu</a></h2>
      <ul><li><a href="getting-started.html">BaÅŸlarken</a></li>
      <li><a href="bind.html">Adres ve Portları Dinleme</a></li>
      <li><a href="configuring.html">Yapılandırma Dosyaları</a></li>
      <li><a href="sections.html">Yapılandırma Bölümleri</a></li>
      <li><a href="caching.html">İçerik Bellekleme</a></li>
      <li><a href="content-negotiation.html">İçerik Dili Yönetimi</a></li>
      <li><a href="dso.html">Devingen Paylaşımlı Nesneler (DSO’lar)</a></li>
      <li><a href="env.html">Ortam DeÄŸiÅŸkenleri</a></li>
      <li><a href="logs.html">Günlük Dosyaları</a></li>
      <li><a href="urlmapping.html">URL’lerin Dosya Sistemi ile Eşlenmesi</a></li>
      <li><a href="misc/perf-tuning.html">Başarım Arttırma</a></li>
      <li><a href="misc/security_tips.html">Güvenlik İpuçları</a></li>
      <li><a href="server-wide.html">Sunucu Genelinde Yapılandırma</a></li>
      <li><a href="ssl/">SSL/TLS Åžifrelemesi</a></li>
      <li><a href="suexec.html">CGI için Suexec Desteği</a></li>
      <li><a href="rewrite/">mod_rewrite ile URL Yeniden Yazma Rehberi</a></li>
      <li><a href="vhosts/">Sanal Konaklar</a></li>
      </ul>
      </div></td><td class="col3"><div class="category"><h2><a name="howto" id="howto">Nasıllar ve Öğreticiler</a></h2>
      <ul><li><a href="howto/auth.html">Kimlik DoÄŸrulama ve Yetkilendirme</a></li>
      <li><a href="howto/access.html">EriÅŸim Denetimi</a></li>
      <li><a href="howto/cgi.html">CGI: Devingen İçerik</a></li>
      <li><a href="howto/htaccess.html">.htaccess dosyaları</a></li>
      <li><a href="howto/ssi.html">Sunucu Taraflı İçerik Yerleştirme (SSI)</a></li>
      <li><a href="howto/public_html.html">Kullanıcı Dizinleri (public_html)</a></li>
      <li><a href="howto/reverse_proxy.html">Ters vekil yapılandırma rehberi</a></li>
      <li><a href="howto/http2.html">HTTP/2 rehberi</a></li>
      </ul>
      </div><div class="category"><h2><a name="platform" id="platform">Platformlara Özgü Bilgiler</a></h2>
      <ul><li><a href="platform/windows.html">Microsoft Windows</a></li>
      <li><a href="platform/rpm.html">RPM tabanlı Sistemler (Redhat / CentOS / Fedora)</a></li>
      <li><a href="platform/netware.html">Novell NetWare</a></li>
      <li><a href="platform/ebcdic.html">EBCDIC Port</a></li>
      </ul>
      </div><div class="category"><h2><a name="other" id="other">DiÄŸer Konular</a></h2>
      <ul><li><a href="http://wiki.apache.org/httpd/FAQ">Sıkça Sorulan Sorular</a></li>
      <li><a href="sitemap.html">Site Haritası</a></li>
      <li><a href="developer/">Geliştiriciler için Belgeler</a></li>
      <li><a href="http://httpd.apache.org/docs-project/">Belgelendirmeye Yardım</a></li>
      <li><a href="misc/">DiÄŸer Bilgiler</a></li>
      <li><a href="http://wiki.apache.org/httpd/">Wiki</a></li>
      </ul>
      </div></td></tr></table></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./da/" hreflang="da" rel="alternate" title="Dansk">&nbsp;da&nbsp;</a> |
      <a href="./de/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/urlmapping.html.tr.utf8����������������������������������������������������0000644�0000000�0000050�00000067733�13447004010�020027� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>URL’lerin Dosya Sistemi ile Eşleştirilmesi - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>URL’lerin Dosya Sistemi ile Eşleştirilmesi</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./en/urlmapping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/urlmapping.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/urlmapping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/urlmapping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/urlmapping.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Bu belgede, bir istekte belirtilen URL’nin sunulacak dosyanın dosya
            sistemindeki yerini bulmak için Apache HTTP Sunucusu tarafından nasıl
            kullanıldığı açıklanmaktadır.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#related">İlgili Modüller ve Yönergeler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#documentroot"><code>DocumentRoot</code></a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#outside">Belge Kök Dizini Dışındaki Dosyalar</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#user">Kullanıcı Dizinleri</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#redirect">URL Yönlendirme</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#proxy">Karşı Vekil</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#rewrite">Yeniden Yazma Motoru</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#notfound">Dosya orada yok</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#other">Diğer URL Eşleme Modülleri</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">İlgili Modüller ve Yönergeler</a></h2>
      
      <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_actions.html">mod_actions</a></code></li><li><code class="module"><a href="./mod/mod_alias.html">mod_alias</a></code></li><li><code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code></li><li><code class="module"><a href="./mod/mod_dir.html">mod_dir</a></code></li><li><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code></li><li><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></li><li><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li><li><code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code></li><li><code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code></li><li><code class="module"><a href="./mod/mod_vhost_alias.html">mod_vhost_alias</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_alias.html#alias">Alias</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code></li><li><code class="directive"><a href="./mod/mod_speling.html#checkspelling">CheckSpelling</a></code></li><li><code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code></li><li><code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code></li><li><code class="directive"><a href="./mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreverse">ProxyPassReverse</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiedomain">ProxyPassReverseCookieDomain</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiepath">ProxyPassReverseCookiePath</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#redirect">Redirect</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#redirectmatch">RedirectMatch</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#scriptalias">ScriptAlias</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#scriptaliasmatch">ScriptAliasMatch</a></code></li><li><code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code></li></ul></td></tr></table>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="documentroot" id="documentroot"><code>DocumentRoot</code></a></h2>
      
          <p>Yapılan bir isteğe hangi dosyanın sunulacağına karar verirken
            httpd’nin öntanımlı davranışı istek için URL yolunu (URL’den konak ismi
            ve port ayrıldıktan sonra kalan kısım) alıp bunu yapılandırma dosyasında
            <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> yönergesi ile
            belirtilen dizinin sonuna eklemektir. Bu nedenle, <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> altındaki dizinler ve dosyalar
            sitenin dışardan görünen temel belge ağacını oluştururlar.</p>
      
          <p>Örneğin, <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> yönergesine
            <code>/var/http/html</code> atanmış olsun.
            <code>http://example.com/balıklar/zargana.html</code> şeklindeki bir
            istek için istemciye <code>/var/http/html/balıklar/zargana.html</code>
            dosyası sunulur.</p>
      
          <p>Bir dizin istenirse (<code>/</code> ile biten bir yol belirtilmesi
            durumu), sunulacak dosya <code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code> yönergesinde belirtilen dosya olacaktır.
            Örneğin, <code>DocumentRoot</code> yukarıdaki gibi belirtimiş ve siz de
            ÅŸunu belirtmiÅŸseniz:</p>
      
          <div class="example"><p><code>DirectoryIndex index.html index.php</code></p></div>
      
          <p><code>http://www.example.com/fish/</code> isteÄŸi, httpd'nin
            <code>/var/www/html/fish/index.html</code> dosyasını sunmaya, bu dosya
            bulunmuyorsa <code>/var/www/html/fish/index.php</code> dosyasını sunmaya
            çalışmasına sebep olacaktır.</p>
      
          <p>Bu dosyaların ikisi de bulunmuyorsa sonraki adım,
            <code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code> yüklü ve uygun şekilde yapılandırılmışsa
            bir dizin içeriği dosyası sağlamaya çalışmak olacaktır.</p>
      
          <p>httpd ayrıca, sunucunun birden fazla konak için istek kabul etmesini
            sağlayan <a href="vhosts/">sanal barındırmaya</a> da muktedirdir. Bu
            durumda her sanal konak için ayrı bir <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> belirtilebileceği gibi sunulacak içeriğin
            istekte bulunulan IP adresi veya konak ismine dayanarak devingen olarak
            saptanmasını sağlayabilen <code class="module"><a href="./mod/mod_vhost_alias.html">mod_vhost_alias</a></code> modülüyle
            gelen yönergeler de kullanılabilir.</p>
      
          <p><code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> yönergesi
            yapılandırma dosyanızda ana sunucu için bir tane ve muhtemelen
            oluşturduğunuz her <a href="vhosts/">sanal konak</a> için de birer
            tanedir.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="outside" id="outside">Belge Kök Dizini Dışındaki Dosyalar</a></h2>
      
          <p>Bazen dosya sisteminde doğrudan <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> altında bulunmayan dosyalara da erişim izni
            vermek gerekir. httpd’de bunu sağlamanın çeşitli yolları vardır. Unix
            sistemlerinde sembolik bağlar sayesinde dosya sisteminin farklı
            yerlerindeki dosyaları ve dizinleri <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> altındaymış gibi göstermek mümkündür.
            <code class="directive"><a href="./mod/core.html#options">Options</a></code> yönergesine değer olarak
            <code>FollowSymLinks</code> veya <code>SymLinksIfOwnerMatch</code>
            atanmadıkça httpd olası güvenlik açıklarına karşı öntanımlı olarak
            sembolik bağları izlemez.</p>
      
          <p>Bundan başka, dosya sisteminin farklı parçalarını belge kök dizini
            altında göstermek için <code class="directive"><a href="./mod/mod_alias.html#alias">Alias</a></code>
            yönergesi de kullanılabilir. Örneğin,</p>
      
          <pre class="prettyprint lang-config">Alias "/belgeler" "/var/http"</pre>
      
      
          <p>yapılandırması ile
            <code>http://example.com/belgeler/dizin/dosya.html</code> URL’si için
            dosya sistemindeki <code>/var/http/dizin/dosya.html</code> dosyası
            sunulacaktır. Hedef dizindeki dosyaları birer <a class="glossarylink" href="./glossary.html#cgi" title="sözlüğe bakınız">CGI</a> betiği olarak imlemesi dışında <code class="directive"><a href="./mod/mod_alias.html#scriptalias">ScriptAlias</a></code> yönergesi de aynı şekilde
            çalışır.</p>
      
          <p>Biraz daha fazla esnekliğin gerektiği durumlarda  <a class="glossarylink" href="./glossary.html#regex" title="sözlüğe bakınız">düzenli ifadelere</a> dayalı eşleşmeler sağlamak
            üzere <code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code> ve <code class="directive"><a href="./mod/mod_alias.html#scriptaliasmatch">ScriptAliasMatch</a></code> yönergelerinin gücünden
            yararlanılabilir. Örneğin,</p>
      
          <pre class="prettyprint lang-config">ScriptAliasMatch "^/~([a-zA-Z0-9]+)/cgi-bin/(.+)" "/home/$1/cgi-bin/$2"</pre>
      
      
          <p>satırı sayesinde <code>http://example.com/~user/cgi-bin/betik.cgi</code>
            URL’si <code>/home/user/cgi-bin/betik.cgi</code> dosyası ile
            eşleştirilir ve dosya bir CGI betiği olarak çalıştırılırdı.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="user" id="user">Kullanıcı Dizinleri</a></h2>
      
          <p>Geleneksel olarak Unix sistemlerinde belli bir kullanıcının (örn,
            <em>birisi</em>) ev dizinine <code>~birisi/</code> şeklinde atıfta
            bulunulabilir. <code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code> modülü bu özelliği site
            üzerinden kullanıcıların ev dizinlerindeki dosyaları kişisel sayfalar
            olarak sunmalarını sağlamak üzere kullanır. Örnek:</p>
      
          <div class="example"><p><code>http://example.com/~birisi/dosya.html</code></p></div>
      
          <p>Güvenlik sebebiyle kullanıcıların ev dizinlerine doğrudan HTTP erişimi
            vermek uygun olmaz. Bu bakımdan, kullanıcının ev dizini altında HTTP
            erişimi verilecek dosyaların bulunduğu dizini belirtmek için <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code> yönergesi sağlanmıştır.
            Öntanımlı olan <code>Userdir public_html</code> yapılandırması ile
            yukarıdaki gibi bir URL kullanıcının ev dizini (<code>/etc/passwd</code>
            dosyasında belirtilir) <code>/home/birisi/</code> altında yer alan
            <code>/home/birisi/public_html/dosya.html</code> dosyası ile
            eÅŸleÅŸirdi.</p>
      
          <p>Ev dizininin yerinin <code>/etc/passwd</code> dosyasında belirtilmediği
            sistemlerde kullanılmak üzere <code>Userdir</code> yönergesinin başka
            kullanım şekilleri de vardır.</p>
      
          <p>Bazı kişiler (genellikle URL üzerinde <code>%7e</code> olarak
            kodlanması sebebiyle) "~" simgesini biçimsiz bulabilir ve kullanıcı
            dizinlerini imlemek için başka bir karakter kullanmayı tercih
            edebilirler. Bu işlevsellik <code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code> tarafından
            desteklenmemektedir. Ancak, kullanıcı dizinleri düzgün şekilde
            yapılandırılmışsa istenen etki <code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code> yönergesi ile sağlanabilir.
            Örneğin, <code>http://example.com/sayfalar/birisi/dosya.html</code>
            URL’si ile <code>/home/birisi/public_html/dosya.html</code> dosyasını
            eşlemek için <code>AliasMatch</code> yönergesi şöyle
            kullanılabilirdi:</p>
      
          <pre class="prettyprint lang-config">AliasMatch "^/sayfalar/([a-zA-Z0-9]+)(/(.*))?$" "/home/$1/public_html/$3"</pre>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="redirect" id="redirect">URL Yönlendirme</a></h2>
      
          <p>Yukarıdaki bölümlerde açıklanan yapılandırma yönergeleri httpd’ye
            içeriği dosya sisteminin belli bir yerinden alıp istemciye göndermesini
            söyler. Bazen istemciye, istediği içeriğe farklı bir URL ile
            erişebileceğini ve bu URL için ayrı bir istek yapması gerektiğini
            bildirmek gerekir. Bu işleme <em>yönlendirme</em> adı verilir ve bu
            işlevsellik <code class="directive"><a href="./mod/mod_alias.html#redirect">Redirect</a></code> yönergesi
            ile sağlanır. Örneğin, <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>
            altındaki <code>/foo/</code> dizininin içeriğinin <code>/bar/</code>
            adında yeni bir dizine taşınması halinde istemciye yeni konumun
            bildirilmesi şöyle sağlanabilirdi:</p>
      
          <pre class="prettyprint lang-config">Redirect permanent "/foo/" "http://example.com/bar/"</pre>
      
      
          <p>Bu atama sayesinde <code>/foo/</code> ile başlayan URL yolları
            <code>example.com</code> sunucundaki <code>/bar/</code> dizini altındaki
            içeriğe yönlendirilmektedir. Yönlendirmeyi aynı sunucu üzerinde yapmak
            zorunda değilsiniz, bu yönerge ile başka bir sunucuya da yönlendirme
            yapabilirsiniz.</p>
      
          <p>httpd ayrıca, yeniden yazma ile ilgili daha karmaşık sorunlara çözüm
            olarak <code class="directive"><a href="./mod/mod_alias.html#redirectmatch">RedirectMatch</a></code> diye bir
            yönerge daha sağlar. Örneğin bir sitenin baş sayfasını diğer isteklerden
            ayrı olarak farklı bir siteye yönlendirmek için yönergeyi şöyle
            kullanabilirsiniz:</p>
      
          <pre class="prettyprint lang-config">RedirectMatch permanent "^/$" "http://example.com/ilksayfa.html"</pre>
      
      
          <p>Bundan başka, bir sitedeki tüm sayfalara yapılan istekleri başka bir
            siteye geçici olarak yönlendirmek için şöyle bir şey yapabilirsiniz:</p>
      
          <pre class="prettyprint lang-config">RedirectMatch temp ".*" "http://mesela.example.com/ilksayfa.html"</pre>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="proxy" id="proxy">Karşı Vekil</a></h2>
      
          <p>httpd ayrıca, uzak sunuculardaki belgelerin yerel sunucunun URL
            alanına getirilmesini de mümkün kılar. Bu tekniğe HTTP sunucunun
            belgeleri uzak bir sunucudan alıp istemciye sunmasını sağlayarak bir
            vekil sunucu gibi davranması nedeniyle <em>ters vekalet</em> adı
            verilir. Belgelerin istemciye özkaynağın bulunduğu sunucudan
            geliyormuş gibi değilde doğrudan isteği yaptığı sunucudan geliyormuş
            gibi sunulması nedeniyle bu işlem normal vekaletten farklıdır.</p>
      
          <p>Aşağıdaki örnekte, istemci <code>/foo/</code> dizini altından bir belge
            istemekte, sunucu ise bu belgeyi <code>dahili.example.com</code>
            üzerindeki <code>/bar/</code> dizininden alıp istemciye yerel sunucudan
            geliyormuş gibi sunmaktadır:</p>
      
          <pre class="prettyprint lang-config">ProxyPass "/foo/" "http://dahili.example.com/bar/"
      ProxyPassReverse "/foo/" "http://dahili.example.com/bar/"
      ProxyPassReverseCookieDomain dahili.example.com harici.example.com
      ProxyPassReverseCookiePath "/foo/" "/bar/"</pre>
      
      
          <p><code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code> sunucuyu uygun
            belgeleri alması için yapılandırırken <code class="directive"><a href="./mod/mod_proxy.html#proxypassreverse">ProxyPassReverse</a></code> yönergesi <code>dahili.example.com</code>
            sunucusundan kaynaklanan yönlendirmeleri yeniden yazar, böylece bunların
            yerel sunucudaki yerleri belirlenmiÅŸ olur. Benzer ÅŸekilde,  <code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiedomain">ProxyPassReverseCookieDomain</a></code> ve
            <code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiepath">ProxyPassReverseCookiePath</a></code>
            yönergeleri de arka sunucu tarafından atanan çerezleri yeniden yazar.</p>
      
          <p>Yalnız, belgelerin içindeki hiperbağların yeniden yazılmayacağına
            dikkat ediniz. Dolayısıyla, belge içinde
            <code>dahili.example.com</code>’u ismiyle hedef alan mutlak hiperbağlar
            varsa bunlar istemci tarafından vekil sunucudan değil doğrudan
            <code>dahili.example.com</code>’dan istenecektir. Bir sayfanın içindeki bu
            bağları (ve diğer içeriği) <code class="module"><a href="./mod/mod_substitute.html">mod_substitute</a></code> modülü
            kullanılarak istemciye sunuluyormuşçasına değiştirebilirsiniz.</p>
      
          <pre class="prettyprint lang-config">Substitute "s/dahili\.example\.com/harici.example.com/i"</pre>
      
      
           <p>HTML ve XHTML’de hiperbağları daha bilgece yeniden yazabilen
            <code class="module"><a href="./mod/mod_proxy_html.html">mod_proxy_html</a></code> modülü de kullanılabilir. Yeniden
            yazılması gereken URL eşlemlerini oluşturmanızı sağlar, böylece karmaşık
            vekil senaryoları oluşturulabilir.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rewrite" id="rewrite">Yeniden Yazma Motoru</a></h2>
      
          <p>Daha güçlü ikameler gerektiğinde <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> modülü
            tarafından sağlanan yeniden yazma motoru işe yarayabilir. Bu modüldeki
            yönergeler sunulacak içeriğin yerine karar vermek için kaynak IP adresi,
            tarayıcı türü gibi isteğe özgü özellikleri kullanırlar.
            <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> modülü buna ek olarak isteğin nasıl ele
            alınacağına karar vermek için harici yazılımları ve veritabanlarını
            kullanabilir. Yeniden yazma motoru yukarıda değinilen üç eşleşme türünü
            de uygulayabilecek yetenektedir: Dahili yönlendirmeler (rumuzlar),
            harici yönlendirmeler ve vekalet. <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> modülü
            tarafından sağlanan yeteneklerin ayrıntılı açıklamaları ve bunların
            kullanım örnekleri ayrıntılı olarak <a href="rewrite/">mod_rewrite
            belgeleri</a>nde bulunmaktadır.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="notfound" id="notfound">Dosya orada yok</a></h2>
      
          <p>Kaçınılmaz olarak, dosya sisteminde mevcut olmayan dosyalar için de
            istek yapılacaktır. Bunun çeşitli sebepleri olabilir.  Bazı durumlarda
            bu, belgelerin yerlerininin deÄŸiÅŸtirilmesinin bir sonucu olabilir. Bu
            durumda yapılacak en iyi şey, istemciyi belgeyi yeni yerinden istemesi
            için bilgilendirmek amacıyla  <a href="#redirect">URL yönlendirmesi</a>
            kullanmaktır. Bu şekilde, içeriğin yeri değişse bile eski yer imlerinin
            ve hiperbağların çalışmaya devam edeceklerinden emin olabilirsiniz.</p>
      
          <p>"Dosya orada yok" ("File Not Found") hatalarının diğer bir bildik
            sebebi de URL’lerin hiperbağlarda veya doğrudan tarayıcıda kasıtlı ya da
            kasıtsız, yanlış yazılmasıdır. Bu tür sorunlarda yardımcı olması için
            httpd <code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code> (sic) adında bir modülle gelir. Bu
            modül etkin kılındığında htpd, "Dosya orada yok" ("File Not Found")
            hatalarının önünü kesip başka bir yerde benzer isimde bir dosya var mı
            diye bakar. Böyle bir dosya varsa, <code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code>
            istemciye dosyanın doğru yerini bildiren bir HTTP yönlendirmesi yollar.
            Benzer çok sayıda dosya varsa bunlar istemciye bir liste halinde
            sunulur.</p>
      
          <p><code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code> modülünün en yararlı özelliklerinden biri
            de dosya isimlerini harf büyüklüğüne duyarsız olarak arayabilmesidir.
            Dosya isimlerinde harf büyüklüğünün önemli olduğu Unix benzeri sistemler
            hakkında bilgisi olmayan kullanıcılara sahip sistemlerin kullanıcılarına
            bu büyük yarar sağlar. Fakat modülün URL düzeltmekten başka şeyler için
            de kullanılması, istemcilerden gelen neredeyse her isteğin URL
            yönlendirmesine konu olmasına sebep olarak sunucunun yükünü
            arttırabilir.</p>
      
          <p><code class="module"><a href="./mod/mod_dir.html">mod_dir</a></code> modülü sanal URI'leri, onları sunan gerçek
            kaynağa eşlemekte kullanılan <code class="directive"><a href="./mod/mod_dir.html#fallbackresource">FallbackResource</a></code> yönergesini içerir. Bir 'ön denetleyici'
            gerçeklerken <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> modülünün kullanılmasını
            sağlamak için çok kullanışlıdır.</p>
      
          <p>Yerinde bulunmayan içeriğin bulunması çabalarının tümü Apache’nin 404
            (Dosya orada yok) HTTP durum kodlu bir hata sayfası döndürmesine yol
            açar. Bu sayfanın içeriği <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code> yönergesi ile denetlenebilir ve <a href="custom-error.html">Hata Yanıtlarının Kişiselleştirilmesi</a>
            bölümünde anlatıldığı gibi oldukça esnek bir şekilde
            kiÅŸiselleÅŸtirilebilir.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="other" id="other">Diğer URL Eşleme Modülleri</a></h2>
      
      
      
          <p>URL eşlemede kullanılabilecek diğer modüller:</p>
      
          <ul>
          <li><code class="module"><a href="./mod/mod_actions.html">mod_actions</a></code> - Bir isteği, özkaynağın MIME türüne veya
            istek yöntemine bakarak bir CGI betiğine eşler.</li>
      
          <li><code class="module"><a href="./mod/mod_dir.html">mod_dir</a></code> - URL'yi sonlandıran bölü çizgisini
            <code>index.html</code> bir dosyaya eÅŸler.</li>
      
          <li><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code> - Bir isteği, bir HTML belge içindeki
            bir resme yapılan kullanıcı tıklamalarına dayanarak bir URL'ye
            eÅŸler.</li>
      
          <li><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> - Dil veya içerik sıkıştırması gibi
            kullanıcı tercihlerine dayanarak uygun bir belgeyi seçer.</li>
          </ul>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./en/urlmapping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/urlmapping.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/urlmapping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/urlmapping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/urlmapping.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/urlmapping.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������httpd-2.4.41/docs/manual/logs.html.ja.utf8����������������������������������������������������������0000644�0000000�0000050�00000120207�13412755316�016562� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>ログファイル - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>ログファイル</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/logs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/logs.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/logs.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/logs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/logs.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
          <p>ウェブサーãƒã‚’効果的ã«ç®¡ç†ã™ã‚‹ãŸã‚ã«ã¯ã€ã‚µãƒ¼ãƒã®æ´»å‹•やパフォーマンスã€
          今発生ã—ã¦ã„ã‚‹ã‹ã‚‚ã—れãªã„å•題ã«é–¢ã™ã‚‹ãƒ•ィードãƒãƒƒã‚¯ã‚’å¾—ã‚‹ã“ã¨ãŒå¿…è¦ã§ã™ã€‚
          Apache HTTP サーãƒã«ã¯éžå¸¸ã«åŒ…æ‹¬çš„ã§æŸ”軟ãªãƒ­ã‚®ãƒ³ã‚°æ©Ÿèƒ½ãŒã‚りã¾ã™ã€‚
          ã“ã®æ–‡æ›¸ã¯ãƒ­ã‚®ãƒ³ã‚°æ©Ÿèƒ½ã®è¨­å®šã®ä»•æ–¹ã¨ã€ãƒ­ã‚°ã«ä½•ãŒæ›¸ã‹ã‚Œã¦ã„ã‚‹ã‹ã‚’
          ç†è§£ã™ã‚‹ãŸã‚ã®æ–¹æ³•を説明ã—ã¾ã™ã€‚</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#security">
          セキュリティã«é–¢ã™ã‚‹è­¦å‘Š</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#errorlog">エラーログ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#accesslog">アクセスログ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#rotation">ログã®äº¤æ›¿</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#piped">パイプ経由ã®ãƒ­ã‚°</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#virtualhosts">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#other">ä»–ã®ãƒ­ã‚°ãƒ•ァイル</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">
          セキュリティã«é–¢ã™ã‚‹è­¦å‘Š</a></h2>
      
          <p>Apache ãŒãƒ­ã‚°ãƒ•ァイルを書ã„ã¦ã„ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«æ›¸ãè¾¼ã‚る人ã¯ã€
          ã»ã¼ç¢ºå®Ÿã«ã‚µãƒ¼ãƒãŒèµ·å‹•ã•れ㟠uid ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’手ã«å…¥ã‚Œã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          ãã—ã¦ã€ãれã¯é€šå¸¸ã¯ root ユーザã§ã™ã€‚
          ã¡ã‚ƒã‚“ã¨çµæžœã‚’考ãˆã‚‹ã“ã¨ãªãã€ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¸ã®
          書ãè¾¼ã¿æ¨©é™ã‚’与ãˆ<em>ãªã„</em>ã§ãã ã•ã„。詳ã—ãã¯
          <a href="misc/security_tips.html">セキュリティã®ã“ã¤</a>ã®æ–‡æ›¸ã‚’
          読んã§ãã ã•ã„。</p>
      
          <p>加ãˆã¦ã€ãƒ­ã‚°ãƒ•ァイルã«ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®æƒ…å ±ãŒãã®ã¾ã¾ã€
          エスケープã•れるã“ã¨ãªã書ã‹ã‚Œã¦ã„ã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€æ‚ªæ„ã®ã‚ã‚‹
          クライアントãŒãƒ­ã‚°ãƒ•ァイルã«åˆ¶å¾¡æ–‡å­—を挿入ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          生ã®ãƒ­ã‚°ã‚’扱ã†ã¨ãã¯æ³¨æ„ã—ã¦ãã ã•ã„。</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="errorlog" id="errorlog">エラーログ</a></h2>
          
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code></li><li><code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code></li></ul></td></tr></table>
      
          <p><code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code> ディレクティブã«ã‚ˆã‚Š
          åå‰ã¨å ´æ‰€ãŒæ±ºã¾ã‚‹ã‚µãƒ¼ãƒã®ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã¯ã€ä¸€ç•ªé‡è¦ãªãƒ­ã‚°ãƒ•ァイルã§ã™ã€‚
          Apache ã®è¨ºæ–­æƒ…å ±ã¯ã“ã“ã«é€ã‚‰ã‚Œã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’処ç†ã—ã¦ã„ã‚‹ã¨ãã«
          発生ã—ãŸã‚¨ãƒ©ãƒ¼ã¯ã™ã¹ã¦ã“ã“ã«è¨˜éŒ²ã•れã¾ã™ã€‚サーãƒã‚’èµ·å‹•ã—ãŸã¨ãã‚„ã€
          サーãƒã®å‹•作ã«å•題ãŒèµ·ã“ã£ãŸã¨ãã¯ã€ä¸€ç•ªæœ€åˆã«èª¿ã¹ã‚‹ã¹ã
          ã¨ã“ã‚ã§ã™ã€‚é–“é•ã„ã®è©³ç´°ã‚„修正方法ãŒãã“ã«æ›¸ã‹ã‚Œã¦ã„ã‚‹ã“ã¨ãŒ
          よãã‚りã¾ã™ã€‚</p>
      
          <p>ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã¯æ™®é€šã¯ãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ã‹ã‚Œã¾ã™ (通常 Unix システムã§ã¯
          <code>error_log</code>ã€Windows 㨠OS/2 ã§ã¯ <code>error.log</code>)。
          Unix システムã§ã¯ã‚¨ãƒ©ãƒ¼ã‚’ <code>syslog</code> ã‚„
          <a href="#piped">パイプã§ãƒ—ログラムã«é€ã‚‹</a> ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã®æ›¸å¼ã¯æ¯”較的自由度ã®é«˜ã„ã‚‚ã®ã§ã€èª¬æ˜Žçš„ã«æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚
          ãŸã ã—ã€ã„ãã¤ã‹ã®æƒ…å ±ã¯ã»ã¨ã‚“ã©ã®ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã®ã‚¨ãƒ³ãƒˆãƒªã«ã‚りã¾ã™ã€‚
          例ãˆã°ã€ä»£è¡¨çš„ãªã‚‚ã®ã«æ¬¡ã®ã‚ˆã†ãªãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒã‚りã¾ã™ã€‚</p>
      
          <div class="example"><p><code>
            [Wed Oct 11 14:32:52 2000] [error] [client 127.0.0.1]
            client denied by server configuration:
            /export/home/live/ap/htdocs/test
          </code></p></div>
      
          <p>ãƒ­ã‚°ã‚¨ãƒ³ãƒˆãƒªã®æœ€åˆã®é …ç›®ã¯ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®æ—¥ä»˜ã¨æ™‚刻ã§ã™ã€‚
          二ã¤ã‚ã®é …ç›®ã¯å ±å‘Šã•れã¦ã„るエラーã®é‡è¦åº¦ã§ã™ã€‚
          <code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code> ã§é‡è¦åº¦ã®ãƒ¬ãƒ™ãƒ«ã‚’
          制é™ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã«é€ã‚‰ã‚Œã‚‹ã‚¨ãƒ©ãƒ¼ã®ç¨®é¡žã‚’制御ã™ã‚‹ã“ã¨ãŒ
          ã§ãã¾ã™ã€‚三ã¤ç›®ã®é …ç›®ã¯ã‚¨ãƒ©ãƒ¼ã‚’発生ã•ã›ãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã® IP アドレス
          ã§ã™ã€‚残りã¯ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã§ã€ã“ã®å ´åˆã¯ã‚µãƒ¼ãƒãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’
          æ‹’å¦ã™ã‚‹ã‚ˆã†ã«è¨­å®šã•れã¦ã„ã‚‹ã€ã¨ã„ã†ã“ã¨ã‚’示ã—ã¦ã„ã¾ã™ã€‚
          サーãƒã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã•ã‚ŒãŸæ–‡æ›¸ã® (ウェブã®ãƒ‘スã§ã¯ãªã) ファイルシステムã®
          パスを報告ã—ã¾ã™ã€‚</p>
      
          <p>éžå¸¸ã«åºƒç¯„囲ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã«ç¾ã‚Œã¾ã™ã€‚ãŸã„ã¦ã„ã®ã‚‚ã®ã¯
          上ã®ä¾‹ã®ã‚ˆã†ãªæ„Ÿã˜ã§ã™ã€‚エラーログã«ã¯ CGI スクリプトã®ãƒ‡ãƒãƒƒã‚°
          出力も書ã‹ã‚Œã¾ã™ã€‚CGI スクリプト㌠<code>stderr</code> ã«æ›¸ã„ãŸ
          ã™ã¹ã¦ã®æƒ…å ±ã¯ç›´æŽ¥ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã«ã‚³ãƒ”ーã•れã¾ã™ã€‚</p>
      
          <p>情報を追加ã—ãŸã‚Šå‰Šé™¤ã—ãŸã‚Šã—ã¦ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã‚’カスタマイズã™ã‚‹ã“ã¨ã¯
          ã§ãã¾ã›ã‚“。ã—ã‹ã—ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã™ã‚‹ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã®ã‚¨ãƒ³ãƒˆãƒªã¯ã€
          対応ã™ã‚‹ã‚¨ãƒ³ãƒˆãƒªãŒ<a href="#accesslog">アクセスログ</a>ã«ã‚りã¾ã™ã€‚
          例ãˆã°ã€ä¸Šã®ä¾‹ã®ã‚¨ãƒ³ãƒˆãƒªã¯ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ 403 ã®
          エントリã«å¯¾å¿œã—ã¾ã™ã€‚アクセスログã¯ã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºå¯èƒ½ã§ã™ã®ã§ã€
          ãã¡ã‚‰ã‚’使ã†ã“ã¨ã«ã‚ˆã‚Šã‚¨ãƒ©ãƒ¼ã®çжæ³ã«é–¢ã™ã‚‹æƒ…報をより多ã
          手ã«å…¥ã‚Œã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>ãƒ†ã‚¹ãƒˆã®æœ€ä¸­ã¯ã€å•題ãŒç™ºç”Ÿã—ã¦ã„ã‚‹ã‹ã©ã†ã‹ã‚’見るãŸã‚ã«ã€
          常ã«ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã‚’監視ã™ã‚‹ã®ãŒå½¹ã«ç«‹ã¤å ´åˆãŒã‚ˆãã‚りã¾ã™ã€‚
          Unix システムã§ã¯ã€æ¬¡ã®ã‚‚ã®ã‚’使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <div class="example"><p><code>
            tail -f error_log
          </code></p></div>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="accesslog" id="accesslog">アクセスログ</a></h2>
          
      
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_log_config.html">mod_log_config</a></code></li><li><code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code></li><li><code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code></li></ul></td></tr></table>
      
          <p>サーãƒã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã¯ã‚µãƒ¼ãƒãŒå‡¦ç†ã‚’ã—ãŸã™ã¹ã¦ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’
          記録ã—ã¾ã™ã€‚アクセスログã®å ´æ‰€ã¨å†…容㯠<code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code>
          ディレクティブã«ã‚ˆã‚Šæ±ºã¾ã‚Šã¾ã™ã€‚ログã®å†…容ã®é¸æŠžã‚’ç°¡æ½”ã«ã™ã‚‹ãŸã‚ã«
          <code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code>
          ディレクティブを使用ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã“ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã¯ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã«
          情報を記録ã™ã‚‹ãŸã‚ã®ã‚µãƒ¼ãƒã®è¨­å®šæ–¹æ³•を説明ã—ã¾ã™ã€‚</p>
      
          <p>ã‚‚ã¡ã‚ã‚“ã€ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã«æƒ…報を蓄ç©ã™ã‚‹ã“ã¨ã¯ãƒ­ã‚°ç®¡ç†ã®
          å§‹ã¾ã‚Šã«éŽãŽã¾ã›ã‚“ã€‚æ¬¡ã®æ®µéšŽã¯æœ‰ç”¨ãªçµ±è¨ˆã‚’å–ã‚‹ãŸã‚ã«ã“ã®æƒ…報を
          è§£æžã™ã‚‹ã“ã¨ã§ã™ã€‚一般的ãªãƒ­ã‚°è§£æžã¯ã“ã®æ–‡æ›¸ã®ç¯„囲外ã§ã€
          ウェブサーãƒè‡ªèº«ã®ä»•事ã¨ã„ã†ã‚ã‘ã§ã‚‚ã‚りã¾ã›ã‚“。ã“ã®è©±ã‚„ã€
          ログ解æžã‚’行ãªã†ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®æƒ…報を得るã«ã¯ã€<a href="http://dmoz.org/Computers/Software/Internet/Site_Management/Log_Analysis/">
          Open Directory</a> を調ã¹ã¦ãã ã•ã„。</p>
      
          <p>ã„ã‚ã‚“ãªãƒãƒ¼ã‚¸ãƒ§ãƒ³ã® Apache httpd ㌠mod_log_config,
          mod_log_agent, <code>TransferLog</code> ディレクティブã¨ã„ã£ãŸã€
          ä»–ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚„ディレクティブを使ã£ã¦ã‚¢ã‚¯ã‚»ã‚¹ã®ãƒ­ã‚®ãƒ³ã‚°ã‚’
          制御ã—ã¦ãã¾ã—ãŸã€‚今ã§ã¯ã€<code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> ãŒã™ã¹ã¦ã®å¤ã„
          ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æ©Ÿèƒ½ã‚’å«ã‚€ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚</p>
      
          <p>ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã®æ›¸å¼ã¯éžå¸¸ã«æŸ”軟ãªè¨­å®šãŒå¯èƒ½ã§ã™ã€‚
          書å¼ã¯ C ã® printf(1) フォーマット文字列ã«éžå¸¸ã«ä¼¼ãŸ
          <code class="directive"><a href="./mod/mod_log_config.html#フォーマット文字列">フォーマット文字列</a></code>
          ã«ã‚ˆã‚ŠæŒ‡å®šã•れã¾ã™ã€‚ã„ãã¤ã‹æ¬¡ã®ç¯€ã§ä¾‹ã‚’示ã—ã¾ã™ã€‚
          フォーマット文字列ã«ä½¿ç”¨ã§ãる内容ã®ä¸€è¦§ã¯ <a href="mod/mod_log_config.html">mod_log_config ã®æ–‡æ›¸</a>
          を見ã¦ãã ã•ã„。</p>
      
          <h3><a name="common" id="common">Common Log Format</a></h3>
            
      
            <p>アクセスログã®ã‚ˆãã‚る設定ã«ä»¥ä¸‹ã®ã‚‚ã®ãŒã‚りã¾ã™ã€‚</p>
      
            <div class="example"><p><code>
              LogFormat "%h %l %u %t \"%r\" %&gt;s %b" common<br />
               CustomLog logs/access_log common
            </code></p></div>
      
            <p>ã“れã¯ã€<em>ニックãƒãƒ¼ãƒ </em> <code>common</code> を定義ã—ã€
            ログã®ãƒ•ォーマット文字列ã®ä¸€ã¤ã¨é–¢é€£ä»˜ã‘ã¾ã™ã€‚フォーマット文字列ã¯
            パーセントディレクティブã‹ã‚‰ãªã‚Šã€ãれãžã‚Œã®ãƒ‘ーセントディレクティブã¯
            サーãƒã«ã©ã®æƒ…報をロギングã™ã‚‹ã‹ã‚’指示ã—ã¾ã™ã€‚フォーマット文字列ã«
            文字をãã®ã¾ã¾å…¥ã‚Œã‚‹ã“ã¨ã‚‚ã§ãã€ãれらã¯ãƒ­ã‚°ã®å‡ºåŠ›ã«ç›´æŽ¥ã‚³ãƒ”ーã•れã¾ã™ã€‚
            ãã“ã«å¼•用文字 (<code>"</code>) を書ãã¨ãã¯ã€
            ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆæ–‡å­—åˆ—ã®æœ€å¾Œã¨ã—ã¦è§£é‡ˆ
            ã•れるã“ã¨ã‚’防ããŸã‚ã«ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
            フォーマット文字列ã«ã¯æ”¹è¡Œç”¨ã® "<code>\n</code>"ã€ã‚¿ãƒ–用ã®
            "<code>\t</code>" ã¨ã„ã†ç‰¹åˆ¥ãªåˆ¶å¾¡æ–‡å­—ã‚‚å«ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
            <p><code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> ディレクティブã¯
            æ—¢ã«å®šç¾©ã•れãŸ
            <em>ニックãƒãƒ¼ãƒ </em> を使ã£ã¦æ–°ã—ã„ログファイルを設定ã—ã¾ã™ã€‚
            アクセスログã®ãƒ•ァイルåã¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§å§‹ã¾ã‚‰ãªã„é™ã‚Šã€
            <code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code> ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ã—ã¦
            扱ã‚れã¾ã™ã€‚</p>
      
            <p>上ã®è¨­å®šã¯ Common Log Format (CLF) ã¨å‘¼ã°ã‚Œã‚‹å½¢å¼ã§
            ログエントリを書ãã¾ã™ã€‚ã“ã®æ¨™æº–ã®å½¢å¼ã¯ç•°ãªã‚‹ã‚¦ã‚§ãƒ–サーãƒã®å¤šããŒ
            生æˆã™ã‚‹ã“ã¨ãŒã§ãã€å¤šãã®ãƒ­ã‚°è§£æžãƒ—ログラムãŒèª­ã¿ã“ã‚€ã“ã¨ãŒã§ãã¾ã™ã€‚
            CLF ã«ã‚ˆã‚Šç”Ÿæˆã•れãŸãƒ­ã‚°ãƒ•ァイルã®ã‚¨ãƒ³ãƒˆãƒªã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ãªã‚Šã¾ã™:</p>
      
            <div class="example"><p><code>
              127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET
              /apache_pb.gif HTTP/1.0" 200 2326
            </code></p></div>
      
            <p>ã“ã®ãƒ­ã‚°ã‚¨ãƒ³ãƒˆãƒªã®ãれãžã‚Œã®éƒ¨åˆ†ã®æ„味ã¯ä»¥ä¸‹ã§èª¬æ˜Žã—ã¾ã™ã€‚</p>
      
            <dl>
      	<dt><code>127.0.0.1</code> (<code>%h</code>)</dt>
      
      	<dd>ã“れã¯ã‚µãƒ¼ãƒã¸ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ã—ãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ (リモートホスト)
      	ã® IP アドレスã§ã™ã€‚<code class="directive"><a href="./mod/core.html#hostnamelookups">HostnameLookups</a></code> ãŒ
      	<code>On</code> ã®å ´åˆã¯ã€ã‚µãƒ¼ãƒã¯ãƒ›ã‚¹ãƒˆåを調ã¹ã¦ã€
      	IP ã‚¢ãƒ‰ãƒ¬ã‚¹ãŒæ›¸ã‹ã‚Œã¦ã„ã‚‹ã¨ã“ã‚ã«è¨˜éŒ²ã—ã¾ã™ã€‚ã—ã‹ã—ã€ã“ã®è¨­å®šã¯
      	サーãƒã‚’ã‹ãªã‚Šé…ãã™ã‚‹ã®ã§ã€ã‚ã¾ã‚ŠãŠå‹§ã‚ã§ãã¾ã›ã‚“。
      	ãã†ã§ã¯ãªãã€<code class="program"><a href="./programs/logresolve.html">logresolve</a></code> ã®
      	よã†ãªãƒ­ã‚°ã®å¾Œå‡¦ç†ã‚’行ãªã†ãƒ—ログラムã§ãƒ›ã‚¹ãƒˆåを調ã¹ã‚‹ã®ãŒè‰¯ã„ã§ã—ょã†ã€‚
      	ã“ã“ã«å ±å‘Šã•れる IP アドレスã¯å¿…ãšã—もユーザãŒä½¿ã£ã¦ã„るマシンã®
      	ã‚‚ã®ã§ã‚ã‚‹ã¨ã¯é™ã‚Šã¾ã›ã‚“。ユーザã¨ã‚µãƒ¼ãƒã®é–“ã«ãƒ—ロキシサーãƒãŒ
      	ã‚れã°ã€ã“ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã¯å…ƒã®ãƒžã‚·ãƒ³ã®ã‚‚ã®ã§ã¯ãªãã€ãƒ—ロキシã®
      	アドレスã«ãªã‚Šã¾ã™ã€‚</dd>
      
      	<dt><code>-</code> (<code>%l</code>)</dt>
      
      	<dd>出力中ã®ã€Œãƒã‚¤ãƒ•ンã€ã¯è¦æ±‚ã•ã‚ŒãŸæƒ…å ±ãŒæ‰‹ã«å…¥ã‚‰ãªã‹ã£ãŸã¨ã„ã†ã“ã¨ã‚’
      	æ„味ã—ã¾ã™ã€‚ã“ã®å ´åˆã€å–å¾—ã§ããªã‹ã£ãŸæƒ…å ±ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ãƒžã‚·ãƒ³ã®
      	<code>identd</code> ã«ã‚ˆã‚Šæ±ºã¾ã‚‹ RFC 1413 ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®
      	アイデンティティã§ã™ã€‚ã“ã®æƒ…å ±ã¯ã‚ã¾ã‚Šä¿¡ç”¨ã™ã‚‹ã“ã¨ãŒã§ããšã€
      	ã—ã£ã‹ã‚Šã¨ç®¡ç†ã•れãŸå†…部ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’除ã„ã¦ã¯ä½¿ã†ã¹ãã§ã¯ã‚りã¾ã›ã‚“。
      	Apache 㯠<code class="directive"><a href="./mod/core.html#identitycheck">IdentityCheck</a></code> ãŒ
      	<code>On</code> ã«ãªã£ã¦ã„ãªã„é™ã‚Šã€ã“ã®æƒ…報を得よã†ã¨ã™ã‚‰ã—ã¾ã›ã‚“。</dd>
      
      	<dt><code>frank</code> (<code>%u</code>)</dt>
      
      	<dd>ã“れ㯠HTTP èªè¨¼ã«ã‚ˆã‚‹ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’リクエストã—ãŸäººã®
      	ユーザ ID ã§ã™ã€‚CGI スクリプトã«ã¯é€šå¸¸åŒã˜å€¤ãŒ <code>REMOTE_USER</code>
      	環境変数ã¨ã—ã¦ä¸Žãˆã‚‰ã‚Œã¾ã™ã€‚リクエストã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰
      	(以下をå‚ç…§) ㌠401 ã§ã‚ã£ãŸå ´åˆã¯ã€ãƒ¦ãƒ¼ã‚¶ã¯èªè¨¼ã«å¤±æ•—ã—ã¦ã„ã‚‹ã®ã§ã€
      	ã“ã®å€¤ã¯ä¿¡ç”¨ã§ãã¾ã›ã‚“。ドキュメントãŒãƒ‘スワードã§ä¿è­·ã•れã¦ã„ãªã„
      	å ´åˆã¯ã€ã“ã®éƒ¨åˆ†ã¯å‰ã®ã‚‚ã®ã¨åŒã˜ã‚ˆã†ã« "<code>-</code>" ã«
      	ãªã‚Šã¾ã™ã€‚</dd>
      
      	<dt><code>[10/Oct/2000:13:55:36 -0700]</code>
      	(<code>%t</code>)</dt>
      
      	<dd>
      	  サーãƒãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘å–ã£ãŸæ™‚刻ã§ã™ã€‚書å¼ã¯:
      
      	    <p class="indent">
      	      <code>[day/month/year:hour:minute:second zone]<br />
      	       day = 2*digit<br />
      	       month = 3*letter<br />
      	       year = 4*digit<br />
      	       hour = 2*digit<br />
      	       minute = 2*digit<br />
      	       second = 2*digit<br />
      	       zone = (`+' | `-') 4*digit</code>
      	    </p>
      	  ログã®ãƒ•ォーマット文字列㫠<code>%{format}t</code> ã‚’
      	  指定ã™ã‚‹ã“ã¨ã§ã€åˆ¥ã®å½¢å¼ã§æ™‚刻を表示ã•ã›ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚
      	  ã“ã®ã¨ãã€<code>format</code> 㯠C ã®æ¨™æº–ライブラリã®
      	  <code>strftime(3)</code> ã®å½¢å¼ã«ãªã‚Šã¾ã™ã€‚
      	</dd>
      
      	<dt><code>"GET /apache_pb.gif HTTP/1.0"</code>
      	(<code>\"%r\"</code>)</dt>
      
      	<dd>クライアントã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒäºŒé‡å¼•用符ã®ä¸­ã«ç¤ºã•れã¦ã„ã¾ã™ã€‚
      	リクエストã«ã¯å¤šãã®æœ‰ç”¨ãªæƒ…å ±ãŒã‚りã¾ã™ã€‚ã¾ãšã€ã“ã®å ´åˆã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒ
      	使ã£ãŸãƒ¡ã‚½ãƒƒãƒ‰ã¯ <code>GET</code> ã§ã™ã€‚次ã«ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯
      	リソース <code>/apache_pb.gif</code> ã‚’è¦æ±‚ã—ã¾ã—ãŸã€‚ãã—ã¦ã€
      	クライアントã¯ãƒ—ロトコル <code>HTTP/1.0</code> を使用ã—ã¾ã—ãŸã€‚
      	リクエストã®å„部分を独立ã«ãƒ­ã‚°åŽé›†ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚例ãˆã°ã€
      	フォーマット文字列 "<code>%m %U%q %H</code>" ã¯
      	メソッドã€ãƒ‘スã€ã‚¯ã‚¨ãƒªæ–‡å­—列ã€ãƒ—ロトコルをログåŽé›†ã—ã€
      	çµå±€ "<code>%r</code>" ã¨ã¾ã£ãŸãåŒã˜å‡ºåŠ›ã«ãªã‚Šã¾ã™ã€‚</dd>
      
      	<dt><code>200</code> (<code>%&gt;s</code>)</dt>
      
      	<dd>サーãƒãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚Šè¿”ã™ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã§ã™ã€‚
      	ã“ã®æƒ…å ±ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæˆåŠŸå¿œç­” (2 ã§å§‹ã¾ã‚‹ã‚³ãƒ¼ãƒ‰) ã§ã‚ã£ãŸã‹ã€
      	リダイレクション (3 ã§å§‹ã¾ã‚‹ã‚³ãƒ¼ãƒ‰) ã§ã‚ã£ãŸã‹ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«ã‚ˆã‚‹
      	エラー (4 ã§å§‹ã¾ã‚‹ã‚³ãƒ¼ãƒ‰) ã§ã‚ã£ãŸã‹ã€ã‚µãƒ¼ãƒã®ã‚¨ãƒ©ãƒ¼ (5 ã§å§‹ã¾ã‚‹ã‚³ãƒ¼ãƒ‰)
      	ã§ã‚ã£ãŸã‹ã€ã‚’表ã™ã®ã§ã€éžå¸¸ã«å¤§åˆ‡ã§ã™ã€‚ステータスコードã®
      	完全ãªãƒªã‚¹ãƒˆã¯ <a href="http://www.w3.org/Protocols/rfc2616/rfc2616.txt">HTTP
      	è¦æ ¼</a> (RFC2616 第 10 節) ã«ã‚りã¾ã™ã€‚</dd>
      
      	<dt><code>2326</code> (<code>%b</code>)</dt>
      
      	<dd>ã“ã®æœ€å¾Œã®éƒ¨åˆ†ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ä¿¡ã•れãŸã‚ªãƒ–ジェクトã®ã€
      	応答ヘッダを除ã„ãŸã‚µã‚¤ã‚ºã‚’表ã—ã¾ã™ã€‚コンテントãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚‰ã‚Œãªã‹ã£ãŸ
      	å ´åˆã¯ã€ã“ã®å€¤ã¯ "<code>-</code>" ã«ãªã‚Šã¾ã™ã€‚コンテントãŒç„¡ã„å ´åˆã«
      	"<code>0</code>" をログåŽé›†ã™ã‚‹ã«ã¯ã€<code>%b</code> ã§ã¯ãªã
      	<code>%B</code> を使ã£ã¦ãã ã•ã„。</dd>
      
            </dl>
          
      
          <h3><a name="combined" id="combined">Combined Log Format</a></h3>
            
      
            <p>ã‚‚ã†ä¸€ã¤ã®ã‚ˆã使ã‚れる書å¼ã¯ Combined Log Format ã¨å‘¼ã°ã‚Œã¦ã„ã¾ã™ã€‚
            以下ã®ã‚ˆã†ã«ã—ã¦ä½¿ã†ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
            <div class="example"><p><code>
              LogFormat "%h %l %u %t \"%r\" %&gt;s %b \"%{Referer}i\"
              \"%{User-agent}i\"" combined<br />
               CustomLog log/access_log combined
            </code></p></div>
      
            <p>ã“ã®æ›¸å¼ã®æœ€åˆã®æ–¹ã¯ Common Log Format ã¨ã¾ã£ãŸãåŒã˜ã§ã€æœ€å¾Œã«
            二ã¤è¿½åŠ ã®ã‚¨ãƒ³ãƒˆãƒªãŒã‚りã¾ã™ã€‚追加ã®ã‚¨ãƒ³ãƒˆãƒªã¯ãƒ‘ーセントディレクティブ
            <code>%{<em>header</em>}i</code> を使ã£ã¦ã„ã¾ã™ã€‚ã“ã“ã§
            <em>header</em> 㯠HTTP ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ã®ã©ã‚Œã‹ã§ã™ã€‚ã“ã®æ›¸å¼ã«ã‚ˆã‚‹
            アクセスログã¯ä»¥ä¸‹ã®ã‚ˆã†ãªæ„Ÿã˜ã«ãªã‚Šã¾ã™:</p>
      
            <div class="example"><p><code>
              127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET
              /apache_pb.gif HTTP/1.0" 200 2326
              "http://www.example.com/start.html" "Mozilla/4.08 [en]
              (Win98; I ;Nav)"
            </code></p></div>
      
            <p>追加ã®ã‚¨ãƒ³ãƒˆãƒªã¯:</p>
      
            <dl>
      	<dt><code>"http://www.example.com/start.html"</code>
      	(<code>\"%{Referer}i\"</code>)</dt>
      
      	<dd>"Referer" (æ„図的ãªç¶´ã‚Šé–“é•ã„) HTTP リクエストヘッダã§ã™ã€‚
      	ã“れã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒå ±å‘Šã—ã¦ãã‚‹å‚ç…§å…ƒã®ã‚µã‚¤ãƒˆã‚’表ã—ã¾ã™ã€‚
      	(ã“ã®å ´åˆã¯ã€<code>/apache_pb.gif</code> ã«ãƒªãƒ³ã‚¯ã—ã¦ã„ã‚‹ã‹ã€
      	ãれをå«ã‚“ã§ã„るページã§ã™)。</dd>
      
      	<dt><code>"Mozilla/4.08 [en] (Win98; I ;Nav)"</code>
      	(<code>\"%{User-agent}i\"</code>)</dt>
      
      	<dd>User-Agent HTTP リクエストヘッダã§ã™ã€‚ã“れã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ãƒ–ラウザãŒ
      	自分自身ã®ã“ã¨ã‚’報告ã—ã¦ãる情報ã§ã™ã€‚</dd>
            </dl>
          
      
          <h3><a name="multiple" id="multiple">複数ã®ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°</a></h3>
            
      
          <p>複数ã®ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã¯å˜ã«è¨­å®šãƒ•ァイルã«è¤‡æ•°ã® <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code>
          ディレクティブを書ãã“ã¨ã§ä½œæˆã•れã¾ã™ã€‚例ãˆã°ã€ä»¥ä¸‹ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯
          三ã¤ã®ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã‚’作りã¾ã™ã€‚最åˆã®ã‚‚ã®ã¯åŸºæœ¬çš„㪠CLF ã®æƒ…å ±ã§ã€
          二ã¤ç›®ã¨ä¸‰ã¤ç›®ã¯ referer ã¨ãƒ–ãƒ©ã‚¦ã‚¶ã®æƒ…å ±ã§ã™ã€‚最後二ã¤ã®
          <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> ã¯
          <code>ReferLog</code> ディレクティブã¨
          <code>AgentLog</code> ディレクティブã®åŠ¹æžœã‚’ã¾ã­ã‚‹æ–¹æ³•を示ã—ã¦ã„ã¾ã™ã€‚</p>
      
            <div class="example"><p><code>
              LogFormat "%h %l %u %t \"%r\" %&gt;s %b" common<br />
              CustomLog logs/access_log common<br />
              CustomLog logs/referer_log "%{Referer}i -&gt; %U"<br />
              CustomLog logs/agent_log "%{User-agent}i"
            </code></p></div>
      
          <p>ã“ã®ä¾‹ã¯ <code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code> ã§
          ニックãƒãƒ¼ãƒ ã‚’定義ã™ã‚‹å¿…è¦ãŒãªã„ã€
          ã¨ã„ã†ã“ã¨ã‚‚示ã—ã¦ã„ã¾ã™ã€‚ニックãƒãƒ¼ãƒ ã®ä»£ã‚りã«ã€
          <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> ディレクティブã«
          ç›´æŽ¥ãƒ­ã‚°ã®æ›¸å¼ã‚’指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
          
      
          <h3><a name="conditional" id="conditional">æ¡ä»¶ä»˜ãログ</a></h3>
            
      
          <p>クライアントã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ç‰¹å¾´ã«åŸºã¥ã„ã¦ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã«ã‚¨ãƒ³ãƒˆãƒªã®
          一部をロギングã—ãªã„æ–¹ãŒä¾¿åˆ©ãªã“ã¨ãŒã‚りã¾ã™ã€‚ã“れ㯠<a href="env.html">環境変数</a> ã®è£œåŠ©ã«ã‚ˆã‚Šç°¡å˜ã«å®Ÿç¾ã§ãã¾ã™ã€‚ã¾ãšã€
          リクエストãŒä½•らã‹ã®æ¡ä»¶ã«åˆã†ã¨ã„ã†ã“ã¨ã‚’表ã™ãŸã‚ã«ç’°å¢ƒå¤‰æ•°ãŒ
          設定ã•れる必è¦ãŒã‚りã¾ã™ã€‚ã“れã¯é€šå¸¸ã¯ <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code> ã«ã‚ˆã‚Š
          行ãªã‚れã¾ã™ã€‚ãã—ã¦ã€<code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> ディレクティブã®
          <code>env=</code> 節を使ã£ã¦ç’°å¢ƒå¤‰æ•°ãŒè¨­å®šã•れã¦ã„るリクエストを
          å«ã‚ãŸã‚пޒ除ã—ãŸã‚Šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã„ãã¤ã‹ä¾‹ã‚’挙ã’ã¾ã™:</p>
      
            <div class="example"><p><code>
              # Mark requests from the loop-back interface<br />
              SetEnvIf Remote_Addr "127\.0\.0\.1" dontlog<br />
              # Mark requests for the robots.txt file<br />
              SetEnvIf Request_URI "^/robots\.txt$" dontlog<br />
              # Log what remains<br />
              CustomLog logs/access_log common env=!dontlog
            </code></p></div>
      
          <p>ä»–ã®ä¾‹ã¨ã—ã¦ã€è‹±èªžã‚’話ã™äººã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¨ãれ以外ã®äººã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’
          分ã‘ãŸã„ã€ã¨ã„ã†å ´åˆã‚’考ãˆã¦ã¿ã¦ãã ã•ã„。</p>
      
            <div class="example"><p><code>
              SetEnvIf Accept-Language "en" english<br />
              CustomLog logs/english_log common env=english<br />
              CustomLog logs/non_english_log common env=!english
            </code></p></div>
      
          <p>ã“ã“ã¾ã§ã§ã¯æ¡ä»¶ä»˜ãロギングãŒéžå¸¸ã«å¼·åŠ›ã§æŸ”軟ã§ã‚ã‚‹ã“ã¨ã‚’示ã—ã¦ãã¾ã—ãŸãŒã€
          ãれãŒãƒ­ã‚°ã®å†…容を制御ã™ã‚‹å”¯ä¸€ã®æ–¹æ³•ã¨ã„ã†ã‚ã‘ã§ã¯ã‚りã¾ã›ã‚“。ログファイルã¯
          サーãƒã®æ´»å‹•ã®å®Œå…¨ãªè¨˜éŒ²ã§ã‚ã‚‹æ–¹ãŒã‚ˆã‚Šå½¹ã«ç«‹ã¡ã¾ã™ã€‚å˜ç´”ã«ãƒ­ã‚°ãƒ•ァイルを
          後処ç†ã—ã¦ã€è€ƒæ…®ã—ãŸããªã„ログを削除ã™ã‚‹æ–¹ãŒç°¡å˜ã§ã‚ã‚‹ã“ã¨ãŒã‚ˆãã‚りã¾ã™ã€‚</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rotation" id="rotation">ログã®äº¤æ›¿</a></h2>
          
      
          <p>普通ã®è² è·ã®ã‚µãƒ¼ãƒã§ã•ãˆã€ãƒ­ã‚°ãƒ•ァイルã«ä¿å­˜ã•れる情報ã®é‡ã¯
          膨大ã«ãªã‚Šã¾ã™ã€‚アクセスログã®ãƒ•ã‚¡ã‚¤ãƒ«ã¯æ™®é€š 10,000 リクエスト毎ã«
          1 MB 以上増ãˆã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€æ—¢å­˜ã®ãƒ­ã‚°ã‚’移動ã—ãŸã‚Šã€å‰Šé™¤ã—ãŸã‚Šã—ã¦ã€
          定期的ã«ãƒ­ã‚°ã‚’交替ã•ã›ã‚‹ã“ã¨ãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ã“れã¯ã‚µãƒ¼ãƒã®å®Ÿè¡Œä¸­ã«ã¯
          行ãªãˆã¾ã›ã‚“。ã¨ã„ã†ã®ã¯ã€Apache ã¯ãƒ•ァイル㌠open ã•れã¦ã„ã‚‹é–“ã¯
          ãšã£ã¨å¤ã„ãƒ­ã‚°ãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ãç¶šã‘ã‚‹ã‹ã‚‰ã§ã™ã€‚
          æ–°ã—ã„ログファイルを open ã§ãるよã†ã«ã€ãƒ­ã‚°ãƒ•ァイルãŒç§»å‹•ã•れãŸã‚Š
          削除ã•れãŸå¾Œã«ã€ã‚µãƒ¼ãƒã‚’<a href="stopping.html">å†èµ·å‹•</a>ã™ã‚‹
          å¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      
          <p><em>優雅ãª</em> å†èµ·å‹•を行ãªã†ã“ã¨ã§ã€ã‚µãƒ¼ãƒã¯æ—¢å­˜ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚„
          処ç†å¾…ã¡ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’失ã†ã“ã¨ãªãæ–°ã—ã„ログファイルを open ã•ã›ã‚‹
          ã“ã¨ãŒã§ãã¾ã™ã€‚ã—ã‹ã—ã€ã“れを実ç¾ã™ã‚‹ãŸã‚ã«ã€ã‚µãƒ¼ãƒã¯å¤ã„リクエストを
          扱ã£ã¦ã„ã‚‹é–“ã¯å¤ã„ãƒ­ã‚°ãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ãç¶šã‘ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
          ã§ã™ã‹ã‚‰ã€å†èµ·å‹•ã®å¾Œã§ã¯ãƒ­ã‚°ãƒ•ァイルã®å‡¦ç†ã‚’å§‹ã‚ã‚‹å‰ã«ã€ã—ã°ã‚‰ãå¾…ãŸãªã‘れã°
          ãªã‚Šã¾ã›ã‚“。å˜ã«ãƒ­ã‚°ã‚’交替ã•ã›ã¦ã€ãƒ‡ã‚£ã‚¹ã‚¯ã®ç¯€ç´„ã®ãŸã‚ã«å¤ã„ログを
          圧縮ã™ã‚‹æ™®é€šã®ã‚·ãƒŠãƒªã‚ªã¯:</p>
      
          <div class="example"><p><code>
            mv access_log access_log.old<br />
            mv error_log error_log.old<br />
            apachectl graceful<br />
            sleep 600<br />
            gzip access_log.old error_log.old
          </code></p></div>
      
          <p>ログã®äº¤æ›¿ã‚’ã™ã‚‹ã‚‚ã†ä¸€ã¤ã®æ–¹æ³•ã¯<a href="#piped">パイプ経由ã®ãƒ­ã‚°</a>を使ã†ã‚‚ã®ã§ã€æ¬¡ã®ç¯€ã§èª¬æ˜Žã•れã¦ã„ã¾ã™ã€‚</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="piped" id="piped">パイプ経由ã®ãƒ­ã‚°</a></h2>
          
      
          <p>Apache httpd ã¯ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã¨ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã‚’ファイルã«ç›´æŽ¥æ›¸ã代ã‚りã«ã€
          パイプを通ã—ã¦åˆ¥ã®ãƒ—ãƒ­ã‚°ãƒ©ãƒ ã«æ›¸ã出ã™ã“ã¨ãŒã§ãã¾ã™ã€‚
          ã“ã®æ©Ÿèƒ½ã«ã‚ˆã‚Šã€ä¸»ã‚µãƒ¼ãƒã«ã‚³ãƒ¼ãƒ‰ã‚’追加ã™ã‚‹ã“ã¨ãªã
          ãƒ­ã‚®ãƒ³ã‚°ã®æŸ”軟性ãŒéžå¸¸ã«é«˜ã¾ã£ã¦ã„ã¾ã™ã€‚パイプã«ãƒ­ã‚°ã‚’書ããŸã‚ã«ã¯ã€
          å˜ã«ãƒ•ァイルåをパイプ文字 "<code>|</code>" ã«ç½®ãæ›ãˆã€ãã®ç¶šãã«
          標準入力ã‹ã‚‰ãƒ­ã‚°ã®ã‚¨ãƒ³ãƒˆãƒªã‚’å—ã‘ã¨ã‚‹å®Ÿè¡Œãƒ—ログラムã®åå‰ã‚’書ãã ã‘ã§ã™ã€‚
          Apache ã¯ãƒ‘イプ経由ã®ãƒ­ã‚°ç”¨ã®ãƒ—ロセスをサーãƒã®èµ·å‹•時ã«å®Ÿè¡Œã—ã€
          サーãƒã®å®Ÿè¡Œä¸­ã«ãã®ãƒ—ログラムãŒã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã—ãŸã¨ãã¯ãれをå†ã³
          実行ã—ã¾ã™ã€‚(ã“ã®æœ€å¾Œã®æ©Ÿèƒ½ãŒã“ã®æŠ€è¡“ãŒã€Œä¿¡é ¼æ€§ã®ã‚るパイプ経由ã®ãƒ­ã‚®ãƒ³ã‚°ã€
          ã¨å‘¼ã°ã‚Œã¦ã„ã‚‹ç†ç”±ã§ã™ã€‚)</p>
      
          <p>パイプ経由ã®ãƒ­ã‚°ç”¨ã®ãƒ—ロセス㯠Apache httpd ã®è¦ªãƒ—ロセスã‹ã‚‰èµ·å‹•ã•れã€
          ãã®ãƒ—ロセスã®ãƒ¦ãƒ¼ã‚¶ ID を継承ã—ã¾ã™ã€‚ã“れã¯ã€ãƒ‘イプ経由ã®ãƒ­ã‚°ç”¨ã®
          ãƒ—ãƒ­ã‚°ãƒ©ãƒ ã¯æ™®é€š root ã¨ã—ã¦å®Ÿè¡Œã•れるã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚
          ã§ã™ã‹ã‚‰ã€ãƒ—ログラムを簡å˜ã§å®‰å…¨ã«ä¿ã¤ã“ã¨ãŒéžå¸¸ã«é‡è¦ã§ã™ã€‚</p>
      
          <p>パイプ経由ã®ãƒ­ã‚°ã®é‡è¦ãªåˆ©ç”¨æ³•ã¯ã€ã‚µãƒ¼ãƒã®å†èµ·å‹•ãªã—ã§ãƒ­ã‚°ã®äº¤æ›¿ã‚’
          ã™ã‚‹ã“ã¨ã§ã™ã€‚Apache HTTP サーãƒã«ã¯ã“ã®ãŸã‚ã®  <code class="program"><a href="./programs/rotatelogs.html">rotatelogs</a></code> ã¨å‘¼ã°ã‚Œã‚‹ç°¡å˜ãª
          プログラムãŒä»˜å±žã—ã¦ã„ã¾ã™ã€‚ãŸã¨ãˆã°ã€24 時間毎ã«ãƒ­ã‚°ã‚’交替ã•ã›ã‚‹ã«ã¯ã€
          以下ã®ã‚‚ã®ã‚’使ã†ã“ã¨ãŒã§ãã¾ã™:</p>
      
          <div class="example"><p><code>
            CustomLog "|/usr/local/apache/bin/rotatelogs
            /var/log/access_log 86400" common
          </code></p></div>
      
          <p>パイプã®å…ˆã§å‘¼ã°ã‚Œã‚‹ã‚³ãƒžãƒ³ãƒ‰å…¨ä½“ãŒå¼•用符ã§å›²ã¾ã‚Œã¦ã„ã‚‹ã“ã¨ã«æ³¨ç›®ã—ã¦
          ãã ã•ã„。ã“ã®ä¾‹ã¯ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã‚’使ã£ã¦ã„ã¾ã™ãŒã€ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã«ã‚‚åŒã˜æŠ€è¡“ã‚’
          使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>ä¼¼ã¦ã„ã‚‹ã‘れã©ã€ã‚ˆã‚Šãšã£ã¨æŸ”軟ãª
          <a href="http://www.cronolog.org/">cronolog</a> ã¨ã„ã†ãƒ­ã‚°äº¤æ›¿ç”¨ã®
          プログラムãŒå¤–部ã®ã‚µã‚¤ãƒˆã«ã‚りã¾ã™ã€‚</p>
      
          <p>æ¡ä»¶ä»˜ãロギングã¨åŒæ§˜ã€ãƒ‘イプ経由ã®ãƒ­ã‚°ã¯éžå¸¸ã«å¼·åŠ›ãª
          é“å…·ã§ã™ãŒã€ã‚ªãƒ•ラインã®å¾Œå‡¦ç†ã®ã‚ˆã†ãªã€ã‚ˆã‚Šç°¡å˜ãªè§£æ±ºæ–¹æ³•ãŒã‚ã‚‹ã¨ãã¯
          使ã‚ãªã„æ–¹ãŒè‰¯ã„ã§ã—ょã†ã€‚</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="virtualhosts" id="virtualhosts">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></h2>
          
      
          <p>多ãã® <a href="vhosts/">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a> ã®ã‚るサーãƒã‚’実行ã—ã¦ã„ã‚‹
          ã¨ãã¯ã€ãƒ­ã‚°ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‰±ã„æ–¹ã«ã„ãã¤ã‹ã®æ–¹æ³•ãŒã‚りã¾ã™ã€‚
          ã¾ãšã€å˜ç‹¬ã®ãƒ›ã‚¹ãƒˆã®ã¿ã®ã‚µãƒ¼ãƒã¨ã¾ã£ãŸãåŒã˜ã‚ˆã†ã«ãƒ­ã‚°ã‚’使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚
          ロギングディレクティブを主サーãƒã®ã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆã®
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> セクションã®å¤–ã«ç½®ãã“ã¨ã§ã€
          ã™ã¹ã¦ã®ãƒ­ã‚°ã‚’åŒã˜ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã¨ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã«ãƒ­ã‚°åŽé›†ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          ã“ã®æ‰‹æ³•ã§ã¯å€‹ã€…ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®çµ±è¨ˆã‚’ç°¡å˜ã«ã¨ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“。</p>
      
          <p><code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> ã‚„
          <code class="directive"><a href="./mod/mod_log_config.html#errorlog">ErrorLog</a></code> ディレクティブãŒ
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> ã®ä¸­ã«
          ç½®ã‹ã‚ŒãŸå ´åˆã¯ã€ãã®ãƒãƒ¼ãƒãƒ£ãƒ«
          ホストã¸ã®ã™ã¹ã¦ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚„エラーãŒãã“ã§æŒ‡å®šã•れãŸãƒ•ァイルã«ã®ã¿
          ログåŽé›†ã•れã¾ã™ã€‚ロギングディレクティブã®ãªã„ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¯
          ä¾ç„¶ã¨ã—ã¦ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒä¸»ã‚µãƒ¼ãƒã®ãƒ­ã‚°ã«é€ã‚‰ã‚Œã¾ã™ã€‚ã“ã®æ‰‹æ³•ã¯å°‘ãªã„
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«å¯¾ã—ã¦ã¯éžå¸¸ã«æœ‰ç”¨ã§ã™ãŒã€ãƒ›ã‚¹ãƒˆã®æ•°ãŒéžå¸¸ã«å¤šããªã‚‹ã¨
          管ç†ãŒå¤§å¤‰ã«ãªã‚Šã¾ã™ã€‚ã•らã«ã€<a href="vhosts/fd-limits.html">ファイル記述å­ã®é™ç•Œ</a>ã®å•題を起ã“ã™ã“ã¨ãŒ
          ã‚りã¾ã™ã€‚</p>
      
          <p>アクセスログã«ã¯ã€éžå¸¸ã«è‰¯ã„妥唿¡ˆãŒã‚りã¾ã™ã€‚ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®
          情報をログã®ãƒ•ォーマット文字列ã«åŠ ãˆã‚‹ã“ã¨ã§ã€ã™ã¹ã¦ã®ãƒ›ã‚¹ãƒˆã¸ã®
          リクエストをåŒã˜ãƒ­ã‚°ã«ãƒ­ã‚°åŽé›†ã—ã¦ã€å¾Œã§ãƒ­ã‚°ã‚’個々ã®ãƒ•ァイルã«åˆ†å‰²ã™ã‚‹ã“ã¨ãŒ
          ã§ãã¾ã™ã€‚ãŸã¨ãˆã°ã€ä»¥ä¸‹ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を見ã¦ãã ã•ã„。</p>
      
          <div class="example"><p><code>
            LogFormat "%v %l %u %t \"%r\" %&gt;s %b"
            comonvhost<br />
            CustomLog logs/access_log comonvhost
          </code></p></div>
      
          <p><code>%v</code> ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã£ã¦ã„ã‚‹ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®åå‰ã‚’
          ログåŽé›†ã™ã‚‹ãŸã‚ã«ä½¿ã‚れã¦ã„ã¾ã™ã€‚ãã—ã¦ã€<a href="programs/other.html">split-logfile</a> ã®ã‚ˆã†ãªãƒ—ログラムを
          使ã£ã¦ã‚¢ã‚¯ã‚»ã‚¹ãƒ­ã‚°ã‚’後処ç†ã™ã‚‹ã“ã¨ã§ã€
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆæ¯Žã®ãƒ•ァイルã«ãƒ­ã‚°ã‚’分割ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>残念ãªãŒã‚‰ã€ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã«ã¯åŒæ§˜ã®æ‰‹æ³•ã¯ã‚りã¾ã›ã‚“。ã§ã™ã‹ã‚‰ã€
          ã™ã¹ã¦ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’åŒã˜ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã®ä¸­ã«æ··ãœã‚‹ã‹ã€
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆæ¯Žã«ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã‚’使ã†ã‹ã‚’é¸ã°ãªã‘れã°ãªã‚Šã¾ã›ã‚“。</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="other" id="other">ä»–ã®ãƒ­ã‚°ãƒ•ァイル</a></h2>
          
      
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_logio.html">mod_logio</a></code></li><li><code class="module"><a href="./mod/mod_log_forensic.html">mod_log_forensic</a></code></li><li><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code></li><li><code class="directive"><a href="./mod/mod_log_forensic.html#forensiclog">ForensicLog</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritelog">RewriteLog</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewriteloglevel">RewriteLogLevel</a></code></li><li><code class="directive"><a href="./mod/mod_cgi.html#scriptlog">ScriptLog</a></code></li><li><code class="directive"><a href="./mod/mod_cgi.html#scriptlogbuffer">ScriptLogBuffer</a></code></li><li><code class="directive"><a href="./mod/mod_cgi.html#scriptloglength">ScriptLogLength</a></code></li></ul></td></tr></table>
      
          <h3>実際ã«é€å—ä¿¡ã—ãŸãƒã‚¤ãƒˆæ•°ã®ãƒ­ã‚°</h3>
            
      
            <p><code class="module"><a href="./mod/mod_logio.html">mod_logio</a></code> ã¯ã€
               ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã§å®Ÿéš›ã«é€å—ä¿¡ã—ãŸæ•°ã‚’ログã™ã‚‹
               二ã¤ã®ãƒ•ィールド (%I 㨠%O) ã‚’
               <code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code> 
               ディレクティブã«è¿½åŠ ã—ã¾ã™ã€‚</p>
          
      
          <h3>Forensic ログ</h3>
            
      
            <p><code class="module"><a href="./mod/mod_log_forensic.html">mod_log_forensic</a></code> ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆã®
               forensic ログをå–りã¾ã™ã€‚ログã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆå‡¦ç†å‰ã¨å‡¦ç†å¾Œã«
               行ã‚れã¾ã™ã®ã§ã€1 リクエストã«å¯¾ã—㦠2 行ã®ãƒ­ã‚°ãŒå‡ºåŠ›ã•れã¾ã™ã€‚
               forensic ロガーã¯ã¨ã¦ã‚‚厳密ã§ã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºã§ãã¾ã›ã‚“。
               デãƒãƒƒã‚°ã‚„セキュリティ用ã®ãƒ„ールã¨ã—ã¦æœ‰åйã‹ã‚‚ã—れã¾ã›ã‚“。</p>
          
      
          <h3><a name="pidfile" id="pidfile">PID ファイル</a></h3>
            
      
            <p>起動時ã«ã€Apache ã¯è¦ª httpd プロセスã®ãƒ—ロセス ID ã‚’
            <code>logs/httpd.pid</code> ã«ä¿å­˜ã—ã¾ã™ã€‚ã“ã®
            ファイルå㯠<code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code> ディレクティブを使ã£ã¦
            変更ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚プロセス ID ã¯ç®¡ç†è€…ãŒè¦ªãƒ—ロセスã«
            シグナルをé€ã‚‹ã“ã¨ã§ãƒ‡ãƒ¼ãƒ¢ãƒ³ã‚’å†èµ·å‹•ã—ãŸã‚Šçµ‚了ã•ã›ãŸã‚Šã™ã‚‹ã¨ãã«
            使用ã—ã¾ã™ã€‚Windows ã§ã¯ã€ä»£ã‚り㫠-k コマンドオプションを
            使ã£ã¦ãã ã•ã„。詳ã—ã„æƒ…報㯠<a href="stopping.html">終了ã¨
            å†èµ·å‹•</a> ã®ãƒšãƒ¼ã‚¸ã‚’見ã¦ãã ã•ã„。</p>
          
      
          <h3><a name="scriptlog" id="scriptlog">スクリプトログ</a></h3>
            
      
            <p>デãƒãƒƒã‚°ã®è£œåŠ©ã®ãŸã‚ã«ã€<code class="directive"><a href="./mod/mod_cgi.html#scriptlog">ScriptLog</a></code> ディレクティブã¯
            CGI スクリプトã®å…¥åŠ›ã¨å‡ºåŠ›ã‚’è¨˜éŒ²ã™ã‚‹ã‚ˆã†ã«ã§ãã¾ã™ã€‚
            ã“れã¯ãƒ†ã‚¹ãƒˆç”¨ã«ã®ã¿ä½¿ç”¨ã—ã¦ã€é€šå¸¸ã®ã‚µãƒ¼ãƒã§ã¯ä½¿ç”¨ã—ãªã„ã§ãã ã•ã„。
            詳ã—ã„æƒ…報㯠<a href="mod/mod_cgi.html">mod_cgi ã®æ–‡æ›¸</a> ã«ã‚りã¾ã™ã€‚</p>
          
      
          <h3><a name="rewritelog" id="rewritelog">リライトログ</a></h3>
            
      
            <p><code class="directive"><a href="./mod/mod_rewrite.html#mod_rewrite">mod_rewrite</a></code> ã®å¼·åŠ›ã§
            è¤‡é›‘ãªæ©Ÿèƒ½ã‚’
            使ã£ã¦ã„ã‚‹ã¨ãã¯ã€ã»ã¼ã„ã¤ã‚‚デãƒãƒƒã‚°ã‚’ç°¡å˜ã«ã™ã‚‹ãŸã‚ã«
            <code class="directive"><a href="./mod/mod_rewrite.html#rewritelog">RewriteLog</a></code> ã®ä½¿ç”¨ãŒ
            å¿…è¦ã§ã—ょã†ã€‚ã“ã®ãƒ­ã‚°ãƒ•ァイルã«ã¯ãƒªãƒ©ã‚¤ãƒˆã‚¨ãƒ³ã‚¸ãƒ³ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’
            æ›¸ãæ›ãˆã‚‹æ–¹æ³•ã®è©³ç´°ãªè§£æžãŒå‡ºåŠ›ã•れã¾ã™ã€‚詳ã—ã•ã®åº¦åˆã¯ <code class="directive"><a href="./mod/mod_rewrite.html#rewriteloglevel">RewriteLogLevel</a></code>
            ã§åˆ¶å¾¡ã§ãã¾ã™ã€‚</p>
          
        </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/logs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/logs.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/logs.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/logs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/logs.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/logs.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/filter.html.ko.euc-kr������������������������������������������������������0000644�0000000�0000050�00000020571�13412755316�017425� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>ÇÊÅÍ - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>ÇÊÅÍ</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/filter.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/filter.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/filter.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/filter.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/filter.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/filter.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p>ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡¿¡¼­ ÇÊÅ͸¦ »ç¿ëÇÏ´Â ¹æ¹ýÀ» ¼³¸íÇÑ´Ù.</p>
        </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="filters" id="filters">ÇÊÅÍ</a></h2>
          
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code></li><li><code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code></li><li><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_mime.html#addinputfilter">AddInputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#addoutputfilter">AddOutputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#removeinputfilter">RemoveInputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#removeoutputfilter">RemoveOutputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_ext_filter.html#extfilterdefine">ExtFilterDefine</a></code></li><li><code class="directive"><a href="./mod/mod_ext_filter.html#extfilteroptions">ExtFilterOptions</a></code></li><li><code class="directive"><a href="./mod/core.html#setinputfilter">SetInputFilter</a></code></li><li><code class="directive"><a href="./mod/core.html#setoutputfilter">SetOutputFilter</a></code></li></ul></td></tr></table>
      
          <p><em>ÇÊÅÍ(filter)</em>´Â ¼­¹ö°¡ º¸³»°Å³ª ¹Þ´Â ÀÚ·á¿¡
          Àû¿ëµÇ´Â ÀÛ¾÷ÀÌ´Ù. Ŭ¶óÀÌ¾ðÆ®°¡ ¼­¹ö¿¡°Ô º¸³»´Â ÀÚ·á´Â
          <em>ÀÔ·ÂÇÊÅÍ(input filter)</em>°¡ ó¸®Çϰí, ¼­¹ö°¡
          Ŭ¶óÀÌ¾ðÆ®¿¡°Ô º¸³»´Â ÀÚ·á´Â <em>Ãâ·ÂÇÊÅÍ(output filter)</em>°¡
          ó¸®ÇÑ´Ù. ÀÚ·á¿¡ ¿©·¯ ÇÊÅ͸¦ »ç¿ëÇÒ ¼ö ÀÖ°í, Á÷Á¢ ÇÊÅÍÀÇ
          ¼ø¼­¸¦ ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>¾ÆÆÄÄ¡´Â À̾î¹Þ±â(byte-range) ¿äû µîÀ» ó¸®ÇϱâÀ§ÇØ
          ³»ºÎÀûÀ¸·Î ÇÊÅ͸¦ »ç¿ëÇÑ´Ù. ¶Ç, ¼³Á¤ Áö½Ã¾î¸¦
          »ç¿ëÇÏ¿© ¼±Åð¡´ÉÇÑ ÇÊÅ͸¦ Á¦°øÇÏ´Â ¸ðµâµµ ÀÖ´Ù.
          <code class="directive"><a href="./mod/core.html#setinputfilter">SetInputFilter</a></code>,
          <code class="directive"><a href="./mod/core.html#setoutputfilter">SetOutputFilter</a></code>,
          <code class="directive"><a href="./mod/mod_mime.html#addinputfilter">AddInputFilter</a></code>,
          <code class="directive"><a href="./mod/mod_mime.html#addoutputfilter">AddOutputFilter</a></code>,
          <code class="directive"><a href="./mod/mod_mime.html#removeinputfilter">RemoveInputFilter</a></code>,
          <code class="directive"><a href="./mod/mod_mime.html#removeoutputfilter">RemoveOutputFilter</a></code>
          Áö½Ã¾î·Î ÀڷḦ ó¸®ÇÏ´Â ÇÊÅ͸¦ Á¶ÀýÇÑ´Ù.</p>
      
          <p>ÇöÀç ¾ÆÆÄÄ¡ À¥¼­¹ö ¹èÆ÷º»Àº »ç¿ëÀÚ°¡ ¼±ÅÃÇÒ ¼ö ÀÖ´Â ´ÙÀ½°ú
          °°Àº ÇÊÅ͸¦ Á¦°øÇÑ´Ù.</p>
      
          <dl>
            <dt>INCLUDES</dt>
            <dd><code class="module"><a href="./mod/mod_include.html">mod_include</a></code>°¡ ó¸®ÇÏ´Â Server-Side Includes</dd>
            <dt>DEFLATE</dt>
            <dd><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code>¸¦ »ç¿ëÇÏ¿© Ãâ·ÂÀ»
                Ŭ¶óÀÌ¾ðÆ®·Î º¸³»±â Àü¿¡ ¾ÐÃà
            </dd>
          </dl>
      
          <p>¶Ç, <code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code> ¸ðµâÀ» »ç¿ëÇÏ¿©
          ¿ÜºÎ ÇÁ·Î±×·¥À» ÇÊÅÍ·Î »ç¿ëÇÒ ¼öµµ ÀÖ´Ù.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/filter.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/filter.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/filter.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/filter.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/filter.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/filter.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/filter.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/install.html.ja.utf8�������������������������������������������������������0000644�0000000�0000050�00000067117�13412755316�017276� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>コンパイルã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>コンパイルã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./de/install.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/install.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/install.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/install.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/install.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/install.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/install.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
      
          <p>ã“ã®æ–‡æ›¸ã§æ‰±ã†ç¯„囲ã¯ã€Unix ã‚„ Unix ã«é¡žä¼¼ã—ãŸã‚·ã‚¹ãƒ†ãƒ ã§ã®
          Apache ã®ã‚³ãƒ³ãƒ‘イルã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã§ã™ã€‚ Windows ã«ãŠã‘ã‚‹
          コンパイルã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã«é–¢ã—ã¦ã¯ã€Œ<a href="platform/windows.html">Microsoft
          Windows ã§ Apache を使ã†</a>ã€ã‚’ã”覧下ã•ã„。
          ãã®ä»–ã®ãƒ—ラットホームã«é–¢ã—ã¦ã¯ã€Œ<a href="platform/">プラットホーム</a>ã€ã‚’ã”覧下ã•ã„。</p>
      
          <p>Apache 2.0 ã§ã¯ä»–ã® Open Source プロジェクトã¨åŒæ§˜ã€
          ビルド環境構築㫠<code>libtool</code> 㨠<code>autoconf</code>
          を使ã†ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚</p>
      
          <p>マイナーãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‹ã‚‰ãã®æ¬¡ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ã‚¢ãƒƒãƒ—グレードã™ã‚‹
          (2.2.50 ã‹ã‚‰ 2.2.51 ã¸ç­‰) å ´åˆã¯ã€ã¾ãš <a href="#upgrading">
          アップグレード</a>ã‚’ã”覧下ã•ã„。</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#overview">æ¦‚è¦ (ã›ã£ã‹ã¡ãªäººå‘ã‘)</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#requirements">å¿…è¦ãªã‚‚ã®</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#download">ダウンロード</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#extract">展開</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#configure">ソースツリーを設定ã™ã‚‹</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#compile">ビルド</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#install">インストール</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#customize">カスタマイズ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#test">テスト</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#upgrading">アップグレード</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="programs/configure.html">ソースツリーã®è¨­å®š</a></li><li><a href="invoking.html">Apacheã®èµ·å‹•</a></li><li><a href="stopping.html">Apacheã®åœæ­¢ã¨å†èµ·å‹•</a></li><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">æ¦‚è¦ (ã›ã£ã‹ã¡ãªäººå‘ã‘)</a></h2>
      
          <table>
            
            <tr>
              <td><a href="#download">ダウンロード</a></td>
      
              <td><code>$ lynx http://httpd.apache.org/download.cgi</code>
              </td>
            </tr>
      
            <tr>
              <td><a href="#extract">展開</a></td>
      
              <td><code>$ gzip -d httpd-<em>NN</em>.tar.gz<br />
               $ tar xvf httpd-<em>NN</em>.tar<br />
               $ cd httpd-<em>NN</em></code></td>
            </tr>
      
            <tr>
              <td><a href="#configure">設定</a></td>
      
              <td><code>$ ./configure --prefix=<em>PREFIX</em></code>
              </td>
            </tr>
      
            <tr>
              <td><a href="#compile">コンパイル</a></td>
      
              <td><code>$ make</code> </td>
            </tr>
      
            <tr>
              <td><a href="#install">インストール</a></td>
      
              <td><code>$ make install</code> </td>
            </tr>
      
            <tr>
              <td><a href="#customize">カスタマイズ</a></td>
      
              <td><code>$ vi <em>PREFIX</em>/conf/httpd.conf</code> </td>
            </tr>
      
            <tr>
              <td><a href="#test">テスト</a></td>
      
              <td><code>$ <em>PREFIX</em>/bin/apachectl -k start</code>
              </td>
            </tr>
          </table>
      
          <p><em>NN</em> ã¯æœ€æ–°ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãƒŠãƒ³ãƒãƒ¼ã«ã€
          <em>PREFIX</em> ã¯ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã‚µãƒ¼ãƒã§ã®ãƒ•ァイルシステムã®ãƒ‘スã«ã€
          ç½®ãæ›ãˆã¦ãã ã•ã„。<em>PREFIX</em> を指定ã—ãªã‹ã£ãŸå ´åˆã¯ã€
          デフォルト㮠<code>/usr/local/apache2</code> ã«ãªã‚Šã¾ã™ã€‚</p>
      
          <p>Apache httpd ã®ã‚³ãƒ³ãƒ‘イルã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã«å¿…è¦ãªã‚‚ã®ã‚’ã¯ã˜ã‚ã¨ã—ã¦ã€
          コンパイルã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã«ã¤ã„ã¦ã¯ã€æ¬¡ã«è©³ã—ã記述ã•れã¦ã„ã¾ã™ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="requirements" id="requirements">å¿…è¦ãªã‚‚ã®</a></h2>
      
          <p>Apache ã®ãƒ“ルドã«ã¯æ¬¡ã®ã‚‚ã®ãŒå¿…è¦ã§ã™:</p>
      
          <dl>
            <dt>ディスクスペース</dt>
            <dd>ディスクã«å°‘ãªãã¨ã‚‚ 50 MB ã®ä¸€æ™‚çš„ãªç©ºã容é‡ãŒã‚るよã†ã«
            気を付ã‘ã¦ãã ã•ã„。インストール後㯠Apache 㯠10 MB 程度ã®
            ディスクスペースをå ã‚ã¾ã™ã€‚実際ã«å¿…è¦ã«ãªã‚‹ãƒ‡ã‚£ã‚¹ã‚¯ã‚¹ãƒšãƒ¼ã‚¹ã¯ã€
            設定オプションやサードパーティー製モジュールをã©ã†é¸æŠžã™ã‚‹ã‹ã«ã‚ˆã£ã¦
            大ãã変ã‚ã‚‹ã§ã—ょã†ã€‚</dd>
      
            <dt>ANSI-C コンパイラã¨ãƒ“ルドシステム</dt>
            <dd>ANSI-C コンパイラをインストールã—ã¦ãŠã„ã¦ä¸‹ã•ã„。ãŠè–¦ã‚㯠<a href="http://www.gnu.org/">Free Software Foundation (FSF)</a>
            ã«ã‚ˆã‚‹ <a href="http://www.gnu.org/software/gcc/gcc.html">GNU C
            compiler (GCC)</a> ã§ã™ã€‚GCC ãŒãªã„å ´åˆã¯ã€
            å°‘ãªãã¨ã‚‚æä¾›ã•れã¦ã„るコンパイラ㌠ANSI 準拠ã§ã‚ã‚‹ã“ã¨ã‚’確èªã—ã¦ãŠã„ã¦ä¸‹ã•ã„。
            ãれã‹ã‚‰ã€å¤‰æ•° <code>PATH</code> ã«ã¯ <code>make</code>
            ã¨ã„ã£ãŸåŸºæœ¬çš„ãªãƒ“ルドツールãŒå«ã¾ã‚Œã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚</dd>
      
            <dt>時刻を正確ã«ã™ã‚‹</dt>
            <dd>HTTP プロトコルã®è¦ç´ ã¯æ—¥æ™‚ã®æ™‚刻ã§è¡¨ç¾ã•れã¦ã„ã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€
            æ­£ç¢ºãªæ™‚刻ã«ã‚·ãƒ³ã‚¯ãƒ­ã•ã›ã‚‹æ©Ÿèƒ½ã‚’システムã«è¨­å®šã™ã‚‹ã“ã¨ã‚’åŸå‘³ã—ã¦ã¿ã¦ä¸‹ã•ã„。
            Network Time Protocol (NTP) をベースã¨ã—㟠ntpdate ã‚„ xntpd プログラムãŒ
            ã“ã®ç›®çš„ã«ã‚ˆã用ã„られã¾ã™ã€‚NTP ソフトウェアや公開 NTP 
            サーãƒã«é–¢ã™ã‚‹è©³ç´°ã¯ã€<a href="http://www.ntp.org">NTP ホームページ</a> ã‚’ã”覧下ã•ã„。</dd>
      
            <dt><a href="http://www.perl.org/">Perl 5</a>
            [オプション]</dt>
            <dd>æä¾›ã•れã¦ã„るスクリプト幾ã¤ã‹ã€ä¾‹ãˆã° <code class="program"><a href="./programs/apxs.html">apxs</a></code> ã‚„
            <code class="program"><a href="./programs/dbmmanage.html">dbmmanage</a></code> ã¯
            Perl ã§æ›¸ã‹ã‚Œã¦ã„ã‚‹ã®ã§ã€Perl 
            5 インタプリタãŒå¿…è¦ã«ãªã‚Šã¾ã™ (5.003 以é™)。
            Perl インタプリタを複数インストールã—ã¦ã„ã‚‹ (ãŸã¨ãˆã°å…¨ä½“ã®ã‚·ã‚¹ãƒ†ãƒ ã®ä¸€éƒ¨
            ã¨ã—ã¦ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•れã¦ã„ã‚‹ Perl 4 ã¨ã€è‡ªåˆ†ã§è¿½åŠ ã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸ
            Perl 5 ãŒã‚ã‚‹ãªã©ã®) å ´åˆã€<code>--with-perl</code> オプション (下記å‚ç…§)
            を使ã£ã¦ <code class="program"><a href="./programs/configure.html">configure</a></code> ãŒæ„図ã—ãŸã‚‚ã®ã‚’使ã†ã‚ˆã†ã«
            æ˜Žç¤ºçš„ã«æŒ‡å®šã™ã‚‹ã¨è‰¯ã„ã§ã—ょã†ã€‚
            <code class="program"><a href="./programs/configure.html">configure</a></code> スクリプト㧠Perl 5 インタプリタãŒ
            見ã¤ã‹ã‚‰ãªã„å ´åˆã¯ã€ã“ã®å½±éŸ¿ã‚’å—ã‘るサãƒãƒ¼ãƒˆã‚¹ã‚¯ãƒªãƒ—トãŒä½¿ãˆãªããªã‚Šã¾ã™ã€‚
            ã‚‚ã¡ã‚ã‚“ã€Apache httpd ã®ã‚³ãƒ³ãƒ‘イルã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã¯å•題ãªã行ãˆã¾ã™ã€‚</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="download" id="download">ダウンロード</a></h2>
      
          <p>Apache HTTP サーãƒã¯ <a href="http://httpd.apache.org/download.cgi">Apache HTTP
          サーãƒãƒ€ã‚¦ãƒ³ãƒ­ãƒ¼ãƒ‰ã‚µã‚¤ãƒˆ</a>ã‹ã‚‰ãƒ€ã‚¦ãƒ³ãƒ­ãƒ¼ãƒ‰ã§ãã¾ã™ã—ã€
          åŒã˜å ´æ‰€ã«å¹¾ã¤ã‹ã®ãƒŸãƒ©ãƒ¼ã‚µã‚¤ãƒˆã‚‚リストã—ã¦ã„ã¾ã™ã€‚
          UNIX ã«é¡žä¼¼ã™ã‚‹ã‚·ã‚¹ãƒ†ãƒ ã§ Apache を使ã†ãƒ¦ãƒ¼ã‚¶ã¯ã€ã‚½ãƒ¼ã‚¹ã‚’
          ダウンロードã—ã¦ãƒ“ルドã—ãŸã»ã†ãŒè‰¯ã„ã§ã—ょã†ã€‚
          ãƒ“ãƒ«ãƒ‰ã®æ‰‹é †ï¼ˆä¸‹è¨˜ï¼‰ã¯ç°¡å˜ã§ã™ã—ã€ãã®ãŠã‹ã’ã§ãƒ‹ãƒ¼ã‚ºã«
          見åˆã£ãŸã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºã‚’ç°¡å˜ã«ã§ãã¾ã™ã€‚
          ã•らã«ã€ãƒã‚¤ãƒŠãƒªã®ãƒªãƒªãƒ¼ã‚¹ã¯ã‚½ãƒ¼ã‚¹ãƒªãƒªãƒ¼ã‚¹ã‚ˆã‚Šã‚‚
          é…れã¦ã„ã‚‹ã“ã¨ãŒã‚ˆãã‚りã¾ã™ã€‚
          ãれã§ã‚‚ãƒã‚¤ãƒŠãƒªã‚’ダウンロードã—ãŸã®ã§ã‚れã°ã€
          ディストリビューションã®ä¸­ã«ã‚ã‚‹ <code>INSSTALL.bindist</code> 
          ファイルã®èª¬æ˜Žã«å¾“ã£ã¦ãã ã•ã„。</p>
      
          <p>ダウンロード後ã€ãƒ€ã‚¦ãƒ³ãƒ­ãƒ¼ãƒ‰ã—ãŸã‚‚ã®ãŒ Apache HTTP 
          サーãƒã®å®Œå…¨ã§æ”¹ç«„ã•れã¦ã„ãªã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã‚ã‚‹ã“ã¨ã‚’
          検証ã™ã‚‹ã“ã¨ãŒé‡è¦ã§ã™ã€‚ã“れã¯ãƒ€ã‚¦ãƒ³ãƒ­ãƒ¼ãƒ‰ã—㟠tarball ã® PGP ç½²åã‚’
          テストã™ã‚‹ã“ã¨ã«ã‚ˆã£ã¦æ¤œè¨¼ã—ã¾ã™ã€‚
          ã“ã®æ‰‹é †ã®è©³ç´°ã¯ <a href="http://httpd.apache.org/download.cgi#verify">ダウンロード
          ページ</a> ã«ã‚りã€ã•らã«è©³ã—ã„例㯠<a href="http://httpd.apache.org/dev/verification.html">PGP ã®ä½¿ç”¨
          </a> ã«è¨˜è¼‰ã•れã¦ã„ã¾ã™ã€‚</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="extract" id="extract">展開</a></h2>
      
          <p>Apache HTTPD ã® tarball
          ã‹ã‚‰ã‚½ãƒ¼ã‚¹ãƒ•ァイルを展開ã—ã¦å–り出ã™ã¨ã¯ã€
          å˜ãªã‚‹åœ§ç¸®ã®è§£é™¤ã¨ tar ã®å±•é–‹ã§ã™:</p>
      
      <div class="example"><p><code>
      $ gzip -d httpd-<em>NN</em>.tar.gz<br />
      $ tar xvf httpd-<em>NN</em>.tar
      </code></p></div>
      
          <p>é…布用ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ãŒã‚ã‚‹ç¾åœ¨ã„るディレクトリã®ä¸‹ã«ã€
          æ–°ã—ã„ディレクトリãŒä½œã‚‰ã‚Œã¾ã™ã€‚
          サーãƒã‚’コンパイルã™ã‚‹æ®µéšŽã«é€²ã‚€å‰ã«ã€ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«
          <code>cd</code> ã§ç§»å‹•ã—ã¦ãã ã•ã„。</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configure" id="configure">ソースツリーを設定ã™ã‚‹</a></h2>
      
          <p>次ã®ã‚¹ãƒ†ãƒƒãƒ—ã¯ã€ã‚ãªãŸã®ãƒ—ラットホームã¨
          個人的ãªè¦æ±‚ã«åˆã†ã‚ˆã†ã« Apache
          ソースツリーを設定ã™ã‚‹ã“ã¨ã§ã™ã€‚
          ã“れã¯é…布ディレクトリã®ãƒ«ãƒ¼ãƒˆãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã‚ã‚‹ã€
          <code class="program"><a href="./programs/configure.html">configure</a></code>
          スクリプトã§è¡Œãªã„ã¾ã™ã€‚
           (Apache ã‚½ãƒ¼ã‚¹ãƒ„ãƒªãƒ¼ã®æœªãƒªãƒªãƒ¼ã‚¹
          版をダウンロードã—ãŸé–‹ç™ºè€…ã¯ã€æ¬¡ã®ã‚¹ãƒ†ãƒƒãƒ—ã«é€²ã‚€å‰ã«
          <code>autoconf</code> ã¨<code>libtool</code>
          をインストールã—㦠<code>buildconf</code>
          を実行ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
          å…¬å¼ãƒªãƒªãƒ¼ã‚¹ã§ã¯ã“ã®ä½œæ¥­ã¯å¿…è¦ã‚りã¾ã›ã‚“。) </p>
      
          <p>デフォルトオプションを使ã£ã¦ã‚½ãƒ¼ã‚¹ãƒ„リーを全ã¦è¨­å®šã™ã‚‹
          ã®ã§ã‚れã°ã€å˜ç´”ã« <code>./configure</code> ã¨ã‚¿ã‚¤ãƒ—ã—ã¦ãã ã•ã„。
          デフォルトオプションを変更ã§ãるよã†ã«ã€<code class="program"><a href="./programs/configure.html">configure</a></code>
          ã«ã¯æ§˜ã€…ãªå¤‰æ•°ã‚„コマンドラインオプションãŒç”¨æ„ã•れã¦ã„ã¾ã™ã€‚</p>
      
          <p>最もé‡è¦ãªã‚ªãƒ—ションã¯ã€Apache ãŒã“ã®å¾Œã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•れるä½ç½®
          <code>--prefix</code> ã§ã™ã€‚Apache ã¯ã€ã“ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ä½ç½®ã«
          ãŠã„ã¦æ­£å¸¸ã«å‹•作ã™ã‚‹ã‚ˆã†ã«è¨­å®šã—ãªã‘れã°ãªã‚‰ãªã„ã‹ã‚‰ã§ã™ã€‚
          ã•らã«è©³ç´°ãªãƒ•ァイルä½ç½®ã®åˆ¶å¾¡ã¯è¿½åŠ ã® <a href="programs/configure.html#installationdirectories">設定オプション
          </a> ã§ã§ãã¾ã™ã€‚</p>
      
          <p>ã“ã®æ™‚点ã§ã€<a href="mod/">モジュール</a> を有効ã«ã—ãŸã‚Š
          無効ã«ã—ãŸã‚Šã™ã‚‹ã“ã¨ã§ Apache 本体ã«å«ã¾ã‚Œã‚‹ <a href="programs/configure.html#optionalfeatures">機能</a>
          を指定ã§ãã¾ã™ã€‚Apache 本体ã«ã¯ãƒ‡ãƒ•ォルトã§ã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã® <a href="mod/module-dict.html#Status">Base</a> セットãŒ
          å«ã¾ã‚Œã¾ã™ã€‚ãã®ä»–ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ 
          <code>--enable-<var>module</var></code> オプションã§
          有効ã«ãªã‚Šã¾ã™ã€‚ã“ã“ã§ <var>module</var> ã¯ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®åå‰ã§ã€
          ã¤ã¾ã‚Šãれã¯ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®åå‰ã‹ã‚‰ <code>mod_</code> 文字列をå–り除ã„ãŸå¾Œã«
          アンダースコアをダッシュã§ç½®æ›ã—ãŸæ–‡å­—列ã§ã™ã€‚
          ã“れã¨ã¯åˆ¥ã®æ–¹æ³•ã§ <code>--enable-<var>module</var>=shared</code>
          オプションを使ã£ã¦ã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’<a href="dso.html">
          シェアードオブジェクト (DSO)</a> -- 実行時ã«ãƒ­ãƒ¼ãƒ‰ã—ãŸã‚Š
          アンロードã—ãŸã‚Šã§ãã‚‹å½¢å¼ -- ã¨ã—ã¦ã‚³ãƒ³ãƒ‘イルã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚
          åŒæ§˜ã«ã€<code>--disable-<var>module</var></code> オプションã§
          Base モジュールを無効化ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚
          ã“れらã®ã‚ªãƒ—ションを使ã£ã¦ã„ã‚‹ã¨ãã«ã€ã‚‚ã—æŒ‡å®šã—ãŸãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒå­˜åœ¨ã—ãªãã¦ã‚‚
          <code class="program"><a href="./programs/configure.html">configure</a></code> ã¯è­¦å‘Šã‚’上ã’ã‚‹ã“ã¨ãªãã€å˜ç´”ã«ã‚ªãƒ—ションを
          無視ã™ã‚‹ã“ã¨ã«æ°—ã‚’ã¤ã‘ã¦ãã ã•ã„。</p>
      
          <p>上記ã«åŠ ãˆã¦ã€<code class="program"><a href="./programs/configure.html">configure</a></code> スクリプトã«ã€
          コンパイラã€ãƒ©ã‚¤ãƒ–ラリã€ãƒ˜ãƒƒãƒ€ãƒ•ァイルã®ä½ç½®ã‚’追加情報ã¨ã—ã¦æ¸¡ã™
          å¿…è¦ãŒã‚ã‚‹å ´åˆãŒã‚りã¾ã™ã€‚ã“ã®ã‚ˆã†ãªå ´åˆã«ã¯ã€ç’°å¢ƒå¤‰æ•°ã‚ã‚‹ã„ã¯
          コマンドラインオプション㧠<code class="program"><a href="./programs/configure.html">configure</a></code> ã«æ¸¡ã—ã¾ã™ã€‚
          詳細ã«é–¢ã—ã¦ã¯ <code class="program"><a href="./programs/configure.html">configure</a></code> マニュアルページ
          ã‚’ã”覧ãã ã•ã„。ã‚ã‚‹ã„㯠<code>--help</code> オプションã¤ãã§
          <code class="program"><a href="./programs/configure.html">configure</a></code> を呼ã³å‡ºã—ã¦ãã ã•ã„。</p>
      
          <p>ã¡ã‚‡ã£ã¨ã©ã‚“ãªã“ã¨ãŒã§ãã‚‹ã‹ã‚’見ã›ã¾ã—ょã†ã€‚
          ã“ã“ã§å…¸åž‹çš„ãªä¾‹ã¨ã—ã¦ã€<code>/sw/pkg/apache</code> 
          ã¨ã„ã†ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãƒ„リーã§ã‚³ãƒ³ãƒ‘イラã¨ãƒ•ラグを指定ã—ã¦ã€
          ã•らã«äºŒã¤ã®è¿½åŠ ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> ã¨
          <code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code> を後㧠DSO 
          メカニズムã§ãƒ­ãƒ¼ãƒ‰ã™ã‚‹ã‚ˆã†ã«ã‚³ãƒ³ãƒ‘イルã—ã¦ã¿ã¾ã™:</p>
      
      <div class="example"><p><code>
            $ CC="pgcc" CFLAGS="-O2" \<br />
             ./configure --prefix=/sw/pkg/apache \<br />
             --enable-rewrite=shared \<br />
             --enable-speling=shared
      </code></p></div>
      
          <p><code class="program"><a href="./programs/configure.html">configure</a></code> を実行ã—ãŸã‚‰ã€ã‚·ã‚¹ãƒ†ãƒ ã®æ©Ÿèƒ½ã‚’
          テストã—ãŸã‚Šã€å¾Œã§ã‚µãƒ¼ãƒã‚’コンパイルã™ã‚‹ãŸã‚ã«å¿…è¦ãª Makefile
          を生æˆã—ãŸã‚Šã™ã‚‹ã®ã«æ•°åˆ†é–“ã‹ã‹ã‚‹ã§ã—ょã†ã€‚</p>
      
          <p>個々㮠<code class="program"><a href="./programs/configure.html">configure</a></code> オプションã®è©³ç´°ã«é–¢ã—ã¦ã¯
          <code class="program"><a href="./programs/configure.html">configure</a></code> マニュアルページ
          ã‚’ã”覧ãã ã•ã„。</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="compile" id="compile">ビルド</a></h2>
      
          <p>ã“れ㧠Apache ã®æ§˜ã€…ãªãƒ‘ーツをビルドã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          次ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’å˜ç´”ã«å®Ÿè¡Œã™ã‚‹ã ã‘ã§ã™:</p>
      
      <div class="example"><p><code>$ make</code></p></div>
      
          <p>基本的ãªè¨­å®šã‚’ã™ã‚‹ã®ã«æ•°åˆ†ã‹ã‹ã‚Šã¾ã™ãŒã€
          ã‚らã‹ã˜ã‚ã”了承ãã ã•ã„。
          ã¾ãŸã€æ™‚é–“ã¯ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ã‚„有効ã«ã—ãŸãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æ•°ã«
          大ããä¾å­˜ã™ã‚‹ã§ã—ょã†ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="install" id="install">インストール</a></h2>
      
          <p>ã•ã¦ã€è¨­å®šã—ãŸã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« <em>PREFIX</em> 
           (å‰è¿°ã® <code>--prefix</code> オプションをå‚ç…§) 
          以下ã«ãƒ‘ッケージをインストールã™ã‚‹æ®µéšŽã«ãªã‚Šã¾ã—ãŸã€‚
          次ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’実行ã—ã¦ãã ã•ã„:</p>
      
      <div class="example"><p><code>$ make install</code></p></div>
      
          <p>通常 <em>PREFIX</em> ã¯æ›¸ãè¾¼ã¿ãƒ‘ーミッションãŒåˆ¶é™ã•れã¦ã„ã‚‹
          ディレクトリã«ãªã£ã¦ã„ã‚‹ã®ã§ã€ã“ã®ã‚¹ãƒ†ãƒƒãƒ—ã¯é€šå¸¸ã¯
          ルート権é™ãŒå¿…è¦ã§ã™ã€‚</p>
      
          <p>アップグレードã™ã‚‹å ´åˆã¯ã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã§ã¯è¨­å®šãƒ•ァイルや
          ドキュメントファイルã®ä¸Šæ›¸ãã¯è¡Œã„ã¾ã›ã‚“。</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="customize" id="customize">カスタマイズ</a></h2>
      
          <p>次㫠<code><em>PREFIX</em>/conf/</code> 以下ã«ã‚ã‚‹ <a href="configuring.html">設定ファイル</a>を編集ã—ã¦ã€
          Apache HTTP サーãƒã‚’カスタマイズã—ã¾ã™ã€‚</p>
      
      <div class="example"><p><code>$ vi <em>PREFIX</em>/conf/httpd.conf</code></p></div>
      
          <p><code><em>PREFIX</em>/docs/manual/</code> ã‚„
          <a href="./">docs/manual/</a> ã«ã‚ã‚‹ Apache マニュアルをã–ã£ã¨è¦‹ã¦ãã ã•ã„。
          ã¾ãŸã¯ã€<a href="http://httpd.apache.org/docs/2.4/">http://httpd.apache.org/docs/2.4/</a>
          ã«ã‚るマニュアル最新版ã€<a href="mod/directives.html">設定ディレクティブ</a>ã«å½“ãŸã£ã¦ã¿ã¦ãã ã•ã„。</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="test" id="test">テスト</a></h2>
      
          <p>次ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’実行ã—㦠Apache HTTP サーãƒã‚’<a href="invoking.html">é–‹å§‹</a>ã§ãã¾ã™:</p>
      
      <div class="example"><p><code>$ <em>PREFIX</em>/bin/apachectl -k start</code></p></div>
      
          <p>URL <code>http://localhost/</code> を通ã—ã¦æœ€åˆã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã«å¯¾ã™ã‚‹
          リクエストを発行ã™ã‚‹äº‹ãŒã§ãã‚‹ã¯ãšã§ã™ã€‚ã“れã§è¦‹ãˆã‚‹
          ウェブページ㯠<code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>
          以下ã«ç½®ã‹ã‚ŒãŸã‚‚ã®ã§ã€é€šå¸¸ã¯
          <code><em>PREFIX</em>/htdocs/</code> ã§ã—ょã†ã€‚
          サーãƒã‚’å†ã³<a href="stopping.html">åœæ­¢</a>ã™ã‚‹ã«ã¯ã€
          次ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’実行ã—ã¾ã™:</p>
      
      <div class="example"><p><code>$ <em>PREFIX</em>/bin/apachectl -k stop</code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="upgrading" id="upgrading">アップグレード</a></h2>
      
          <p>アップグレードã§ã¾ãšè¡Œãªã†ã¹ãã“ã¨ã¯ã€ãƒªãƒªãƒ¼ã‚¹ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã¨
          ソースディストリビューションã«å…¥ã£ã¦ã„ã‚‹ <code>CHANGES</code> を読んã§ã€
          自身ã®ã‚µã‚¤ãƒˆã«å¯¾ã—ã¦å½±éŸ¿ã‚’åŠã¼ã™å¤‰æ›´ç‚¹ã‚’探ã™ã“ã¨ã§ã™ã€‚
          メジャーリリース間ã®å¤‰æ›´ã‚’ã™ã‚‹å ´åˆ (例ãˆã° 1.3 ã‹ã‚‰ 2.0 ã¸ã€2.0 ã‹ã‚‰ 2.2 ã¸)
          ã¯ã€ã‚³ãƒ³ãƒ‘イル時や実行時ã®è¨­å®šã«å¤§ããªå·®ç•°ãŒã‚ã‚‹ã§ã—ょã†ã‹ã‚‰ã€
          手動ã®èª¿æ•´ãŒå¿…è¦ã«ãªã‚‹ã§ã—ょã†ã€‚モジュールも全ã¦ã€API
          ã®å¤‰æ›´ã«åˆã‚ã›ã‚‹ãŸã‚ã«ã‚¢ãƒƒãƒ—グレードãŒå¿…è¦ã«ãªã‚‹ã§ã—ょã†ã€‚</p>
      
          <p>マイナーãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‹ã‚‰æ¬¡ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ã‚¢ãƒƒãƒ—グレードã™ã‚‹å ´åˆ
          (例ãˆã° 2.2.55 ã‹ã‚‰ 2.2.57 ã¸) ã¯ã€ã‚‚ã£ã¨ç°¡å˜ã§ã™ã€‚
          <code>make install</code> を実行ã—ã¦ã‚‚今ã‚るドキュメントã€
          ログファイルã€è¨­å®šãƒ•ァイルã¯ä¸Šæ›¸ãã•れã¾ã›ã‚“。
          ã•らã«ã€ãƒžã‚¤ãƒŠãƒ¼ãƒãƒ¼ã‚¸ãƒ§ãƒ³é–“ã§ã¯ <code class="program"><a href="./programs/configure.html">configure</a></code> オプションã€
          実行時ã®è¨­å®šã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« API ã«ä¸æ•´åˆãŒèµ·ã“らãªã„よã†ã«ã€
          é–‹ç™ºè€…ã¯æœ€å¤§é™ã®åŠªåŠ›ã‚’ã—ã¦ã„ã¾ã™ã€‚
          大抵ã®å ´åˆã€åŒä¸€ã® <code class="program"><a href="./programs/configure.html">configure</a></code> コマンドラインã€
          åŒä¸€ã®è¨­å®šãƒ•ァイルã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«å…¨ã¦ãŒæ­£å¸¸ã«å‹•作ã™ã‚‹ã¯ãšã§ã™ã€‚</p>
      
          <p>マイナーãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã‚¢ãƒƒãƒ—グレードã™ã‚‹å ´åˆã¯ã€
          æ—¢ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•れã¦ã„るサーãƒã® <code>build</code> ディレクトリ内ã‹ã€
          以å‰ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã«ä½¿ã£ãŸã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ãƒ„ãƒªãƒ¼ã®æœ€ä¸Šä½ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªå†…ã«ã‚ã‚‹ã€
          <code>config.nice</code> ファイルを探ã—ã¦ãã ã•ã„。
          ã“ã®ãƒ•ァイルã«ã¯ã‚½ãƒ¼ã‚¹ãƒ„リーを設定ã—ãŸæ™‚ã«ä½¿ã£ãŸ
          <code class="program"><a href="./programs/configure.html">configure</a></code> コマンドラインãŒã€ãã®ã¾ã¾å…¥ã£ã¦ã„ã¾ã™ã€‚
          次ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ã‚¢ãƒƒãƒ—グレードã™ã‚‹å ´åˆã¯ <code>config.nice</code>
          ファイルを新ã—ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®ã‚½ãƒ¼ã‚¹ãƒ„リーã«ã‚³ãƒ”ーã—ã€
          å¿…è¦ã§ã‚れã°ãれを編集ã—ãŸå¾Œã«ã€æ¬¡ã®ã‚ˆã†ã«å®Ÿè¡Œã—ã¾ã™ã€‚</p>
      
          <div class="example"><p><code>
          $ ./config.nice<br />
          $ make<br />
          $ make install<br />
          $ <em>PREFIX</em>/bin/apachectl -k graceful-stop<br />
          $ <em>PREFIX</em>/bin/apachectl -k start<br />
          </code></p></div>
      
          <div class="warning">æ–°ã—ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’使用ã™ã‚‹å ´åˆã¯ã€
          実際ã«é‹ç”¨ã‚’å§‹ã‚ã‚‹å‰ã«ã€å¿…ãšè‡ªåˆ†ç”¨ã®ç’°å¢ƒã§ãƒ†ã‚¹ãƒˆã™ã¹ãã§ã™ã€‚
          最終的ã«ã‚¢ãƒƒãƒ—グレードã™ã‚‹å‰ã«ã€éžäº’æ›æ€§ãŒãªã„ã‹ã‚’テストã™ã‚‹ãŸã‚ã«ã€
          例ãˆã°ã€ç•°ãªã‚‹ <code>--prefix</code> ã¨ç•°ãªã‚‹ãƒãƒ¼ãƒˆ (<code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> ディレクティブã§è¨­å®šã—ã¾ã™) 
          を使用ã™ã‚‹ã“ã¨ã§ã€å¤ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«å½±éŸ¿ã‚’与ãˆãšã«æ–°ã—ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’
          インストールã—ã€å®Ÿè¡Œã§ãã¾ã™ã€‚</div>
      
          <p>ã‚‚ã¨ã® <code class="program"><a href="./programs/configure.html">configure</a></code> ã«è¿½åŠ ã™ã‚‹å½¢ã§ã€
          追加ã®å¼•æ•°ã‚’ <code>config.nice</code> ã«æ¸¡ã™ã“ã¨ã‚‚ã§ãã¾ã™:</p>
      
          <div class="example"><p><code>
          $ ./config.nice --prefix=/home/test/apache --with-port=90
          </code></p></div>
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./de/install.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/install.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/install.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/install.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/install.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/install.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/install.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/install.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/custom-error.html.es�������������������������������������������������������0000644�0000000�0000050�00000031764�13412755316�017420� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Respuestas de error personalizadas - Servidor HTTP Apache Versión 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="./glossary.html">Glosario</a> | <a href="./sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="./">Versión 2.4</a></div><div id="page-content"><div id="preamble"><h1>Respuestas de error personalizadas</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="./en/custom-error.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/custom-error.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/custom-error.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/custom-error.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/custom-error.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/custom-error.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Apache ofrece la posibilidad de que los webmasters puedan
          configurar las respuestas que muestra el servidor Apache cuando se
          producen algunos errores o problemas.</p>
      
          <p>Las respuestas personalizadas pueden definirse para activarse
          en caso de que el servidor detecte un error o problema.</p>
      
          <p>Si un script termina de forma anormal y se produce una respuesta
          "500 Server Error", esta respuesta puede ser sustituida por otro
          texto de su elección o por una redirección a otra URL
          (local o externa).</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#behavior">Comportamiento</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#configuration">Configuración</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#custom">Mesajes de error personalizados y redirecciones</a></li>
      </ul><h3>Consulte también</h3><ul class="seealso"><li><a href="#comments_section">Comentarios</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="behavior" id="behavior">Comportamiento</a></h2>
          
      
          <h3>Comportamiento anterior</h3>
            
      
            <p>NCSA httpd 1.3 devolvía mensajes antiguos del error o
            problema encontrado que con frecuencia no tenían
            significado alguno para el usuario, y que no incluían en
            los logs información que diera pistas sobre las causas de
            lo sucedido.</p>
          
      
          <h3>Comportamiento actual</h3>
            
      
            <p>Se puede hacer que el servidor siga uno de los siguientes
            comportamientos:</p>
      
            <ol>
              <li>Desplegar un texto diferente, en lugar de los mensajes de
              la NCSA, o</li>
      
              <li>redireccionar la petición a una URL local, o</li>
      
              <li>redireccionar la petición a una URL externa.</li>
            </ol>
      
            <p>Redireccionar a otra URL puede resultar de utilidad, pero
            solo si con ello se puede también pasar alguna
            información que pueda explicar el error o problema y/o
            registrarlo en el log correspondiente más claramente.</p>
      
            <p>Para conseguir esto, Apache define ahora variables de entorno
            similares a las de los CGI:</p>
      
            <div class="example"><p><code>
              REDIRECT_HTTP_ACCEPT=*/*, image/gif, image/x-xbitmap, 
                  image/jpeg<br />
              REDIRECT_HTTP_USER_AGENT=Mozilla/1.1b2 (X11; I; HP-UX A.09.05 
                  9000/712)<br />
              REDIRECT_PATH=.:/bin:/usr/local/bin:/etc<br />
              REDIRECT_QUERY_STRING=<br />
              REDIRECT_REMOTE_ADDR=121.345.78.123<br />
              REDIRECT_REMOTE_HOST=ooh.ahhh.com<br />
              REDIRECT_SERVER_NAME=crash.bang.edu<br />
              REDIRECT_SERVER_PORT=80<br />
              REDIRECT_SERVER_SOFTWARE=Apache/0.8.15<br />
              REDIRECT_URL=/cgi-bin/buggy.pl
            </code></p></div>
      
            <p>Tenga en cuenta el prefijo <code>REDIRECT_</code>.</p>
      
            <p>Al menos <code>REDIRECT_URL</code> y
            <code>REDIRECT_QUERY_STRING</code> se pasarán a la nueva
            URL (asumiendo que es un cgi-script o un cgi-include). Las otras
            variables existirán solo si existían antes de aparecer
            el error o problema. <strong>Ninguna</strong> de estas variables
            se creará si en la directiva <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code> ha especificado una
            redirección <em>externa</em> (cualquier cosa que empiece
            por un nombre de esquema del tipo <code>http:</code>, incluso si
            se refiere al mismo servidor).</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuration" id="configuration">Configuración</a></h2>
          
      
          <p>El uso de <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code>
          está activado para los ficheros .htaccess cuando <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> tiene el valor
          adecuado.</p>
      
          <p>Aquí hay algunos ejemplos más...</p>
      
          <div class="example"><p><code>
            ErrorDocument 500 /cgi-bin/crash-recover <br />
            ErrorDocument 500 "Sorry, our script crashed. Oh dear" <br />
            ErrorDocument 500 http://xxx/ <br />
            ErrorDocument 404 /Lame_excuses/not_found.html <br />
            ErrorDocument 401 /Subscription/how_to_subscribe.html
          </code></p></div>
      
          <p>La sintaxis es,</p>
      
          <div class="example"><p><code>
            ErrorDocument &lt;3-digit-code&gt; &lt;action&gt;
          </code></p></div>
      
          <p>donde action puede ser,</p>
      
          <ol>
            <li>Texto a mostrar. Ponga antes del texto que quiere que se
            muestre unas comillas ("). Lo que sea que siga a las comillas se
            mostrará. <em>Nota: las comillas (") no se
            muestran.</em></li>
      
            <li>Una URL local a la que se redireccionará la
            petición.</li>
      
            <li>Una URL externa a la que se redireccionará la
            petición.</li>
          </ol>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="custom" id="custom">Mesajes de error personalizados y redirecciones</a></h2>
          
      
          <p>El comportamiento de Apache en cuanto a las redirecciones ha
          cambiado para que puedan usarse más variables de entorno con
          los script/server-include.</p>
      
          <h3>Antiguo comportamiento</h3>
            
      
            <p>Las variables CGI estándar estaban disponibles para el
            script al que se hacía la redirección. No se incluía
            ninguna indicación sobre la precedencia de la
            redirección.</p>
          
      
          <h3>Nuevo comportamiento</h3>
            
      
            <p>Un nuevo grupo de variables de entorno se inicializa para que
            las use el script al que ha sido redireccionado. Cada
            nueva variable tendrá el prefijo <code>REDIRECT_</code>.
            Las variables de entorno <code>REDIRECT_</code> se crean a
            partir de de las variables de entorno CGI que existen antes de
            la redirección, se les cambia el nombre
            añadiéndoles el prefijo <code>REDIRECT_</code>, por
            ejemplo, <code>HTTP_USER_AGENT</code> pasa a ser
            <code>REDIRECT_HTTP_USER_AGENT</code>. Además, para esas
            nuevas variables, Apache definirá <code>REDIRECT_URL</code>
            y <code>REDIRECT_STATUS</code> para ayudar al script a seguir su
            origen. Tanto la URL original como la URL a la que es redirigida
            la petición pueden almacenarse en los logs de acceso.</p>
      
            <p>Si ErrorDocument especifica una redirección local a un
            script CGI, el script debe incluir una campo de cabeceraa
            "<code>Status:</code>" en el resultado final para asegurar que
            es posible hacer llegar al cliente de vuelta la condición
            de error que lo provocó. Por ejemplo, un script en Perl
            para usar con ErrorDocument podría incluir lo
            siguiente:</p>
      
            <div class="example"><p><code>
              ... <br />
              print  "Content-type: text/html\n"; <br />
              printf "Status: %s Condition Intercepted\n", $ENV{"REDIRECT_STATUS"}; <br />
              ...
            </code></p></div>
      
            <p>Si el script tiene como fin tratar una determinada
            condición de error, por ejemplo
            <code>404 Not Found</code>, se pueden usar los
            códigos de error y textos específicos en su lugar.</p>
      
            <p>Tenga en cuenta que el script <em>debe</em> incluir un campo
            de cabecera <code>Status:</code> apropiado (como
            <code>302 Found</code>), si la respuesta contiene un campo de
            cabecera <code>Location:</code> (para poder enviar una
            redirección que se interprete en el cliente). De otra
            manera, la cabecera
            <code>Location:</code> puede que no tenga efecto.</p>
          
        </div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="./en/custom-error.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/custom-error.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/custom-error.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/custom-error.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/custom-error.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/custom-error.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentarios</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/custom-error.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="./glossary.html">Glosario</a> | <a href="./sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������httpd-2.4.41/docs/manual/sitemap.html.en������������������������������������������������������������0000644�0000000�0000050�00000063513�13455350677�016421� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Sitemap - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page">
      <div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div>
      <div id="page-content"><div id="preamble"><h1>Sitemap</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./de/sitemap.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/sitemap.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/sitemap.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/sitemap.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sitemap.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sitemap.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sitemap.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/sitemap.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
      <p>This page lists the currently available documents of the
      <a href="./">Apache HTTP Server Version 2.4
      Documentation</a>.</p>
      </div>
      <div id="quickview"><ul id="toc">
      <li><img alt="" src="./images/down.gif" /> <a href="#release">Release Notes</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#using">Using the Apache HTTP Server</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#vhosts">Apache Virtual Host documentation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#rewrite">URL Rewriting Guide</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#ssl">Apache SSL/TLS Encryption</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#howto">Guides, Tutorials, and HowTos</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#platform">Platform-specific Notes</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programs">Apache HTTP Server and Supporting Programs</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#misc">Apache Miscellaneous Documentation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#modules">Apache modules</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#developer">Developer Documentation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#index">Glossary and Index</a></li>
      </ul>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="release" id="release">Release Notes</a></h2>
      <ul><li><a href="upgrading.html">Upgrading to 2.4 from 2.2</a></li>
      <li><a href="new_features_2_4.html">New features with Apache 2.3/2.4</a></li>
      <li><a href="new_features_2_2.html">New features with Apache 2.1/2.2</a></li>
      <li><a href="new_features_2_0.html">New features with Apache 2.0</a></li>
      <li><a href="license.html">Apache License</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="using" id="using">Using the Apache HTTP Server</a></h2>
      <ul><li><a href="install.html">Compiling and Installing Apache</a></li>
      <li><a href="invoking.html">Starting Apache</a></li>
      <li><a href="stopping.html">Stopping and Restarting the Server</a></li>
      <li><a href="configuring.html">Configuration Files</a></li>
      <li><a href="sections.html">How Directory, Location and Files sections work</a></li>
      <li><a href="caching.html">Content Caching</a></li>
      <li><a href="server-wide.html">Server-Wide Configuration</a></li>
      <li><a href="logs.html">Log Files</a></li>
      <li><a href="urlmapping.html">Mapping URLs to Filesystem Locations</a></li>
      <li><a href="dso.html">Dynamic Shared Object (DSO) support</a></li>
      <li><a href="content-negotiation.html">Content Negotiation</a></li>
      <li><a href="custom-error.html">Custom error responses</a></li>
      <li><a href="bind.html">Setting which addresses and ports Apache uses</a></li>
      <li><a href="mpm.html">Multi-Processing Modules (MPMs)</a></li>
      <li><a href="env.html">Environment Variables in Apache</a></li>
      <li><a href="expr.html">Expression Parsing in Apache</a></li>
      <li><a href="handler.html">Apache's Handler Use</a></li>
      <li><a href="filter.html">Filters</a></li>
      <li><a href="socache.html">Shared Object Cache Support</a></li>
      <li><a href="suexec.html">suEXEC Support</a></li>
      <li><a href="dns-caveats.html">Issues Regarding DNS and Apache</a></li>
      <li><a href="http://wiki.apache.org/httpd/FAQ">Frequently Asked Questions</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="vhosts" id="vhosts">Apache Virtual Host documentation</a></h2>
      <ul><li class="separate"><a href="vhosts/">Overview</a></li>
      <li><a href="vhosts/name-based.html">Name-based Virtual Hosts</a></li>
      <li><a href="vhosts/ip-based.html">IP-based Virtual Host Support</a></li>
      <li><a href="vhosts/mass.html">Dynamically configured mass virtual hosting</a></li>
      <li><a href="vhosts/examples.html">VirtualHost Examples</a></li>
      <li><a href="vhosts/details.html">An In-Depth Discussion of Virtual Host Matching</a></li>
      <li><a href="vhosts/fd-limits.html">File descriptor limitations</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="rewrite" id="rewrite">URL Rewriting Guide</a></h2>
      <ul><li class="separate"><a href="rewrite/">Overview</a></li>
      <li><a href="mod/mod_rewrite.html">mod_rewrite reference
      documentation</a></li>
      <li><a href="rewrite/intro.html">Introduction to regular expressions and
      mod_rewrite</a></li>
      <li><a href="rewrite/remapping.html">Using mod_rewrite for redirection and
      remapping of URLs</a></li>
      <li><a href="rewrite/access.html">Using mod_rewrite to control access</a></li>
      <li><a href="rewrite/vhosts.html">Dynamic virtual hosts with mod_rewrite</a></li>
      <li><a href="rewrite/proxy.html">Dynamic proxying with mod_rewrite</a></li>
      <li><a href="rewrite/rewritemap.html">Using RewriteMap</a></li>
      <li><a href="rewrite/advanced.html">Advanced techniques</a></li>
      <li><a href="rewrite/avoid.html">When NOT to use mod_rewrite</a></li>
      <li><a href="rewrite/flags.html">RewriteRule Flags</a></li>
      <li><a href="rewrite/tech.html">Technical details</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="ssl" id="ssl">Apache SSL/TLS Encryption</a></h2>
      <ul><li class="separate"><a href="ssl/">Overview</a></li>
      <li><a href="ssl/ssl_intro.html">SSL/TLS Encryption: An Introduction</a></li>
      <li><a href="ssl/ssl_compat.html">SSL/TLS Encryption: Compatibility</a></li>
      <li><a href="ssl/ssl_howto.html">SSL/TLS Encryption: How-To</a></li>
      <li><a href="ssl/ssl_faq.html">SSL/TLS Encryption: FAQ</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="howto" id="howto">Guides, Tutorials, and HowTos</a></h2>
      <ul><li class="separate"><a href="howto/">Overview</a></li>
      <li><a href="howto/auth.html">Authentication and Authorization</a></li>
      <li><a href="howto/access.html">Access Control</a></li>
      <li><a href="howto/cgi.html">Dynamic Content with CGI</a></li>
      <li><a href="howto/ssi.html">Introduction to Server Side Includes</a></li>
      <li><a href="howto/htaccess.html">.htaccess files</a></li>
      <li><a href="howto/public_html.html">Per-user web directories</a></li>
      <li><a href="howto/reverse_proxy.html">Reverse proxy setup guide</a></li>
      <li><a href="howto/http2.html">HTTP/2 guide</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="platform" id="platform">Platform-specific Notes</a></h2>
      <ul><li class="separate"><a href="platform/">Overview</a></li>
      <li><a href="platform/windows.html">Using Apache with Microsoft
      Windows</a></li>
      <li><a href="platform/win_compiling.html">Compiling Apache for
      Microsoft Windows</a></li>
      <li><a href="platform/rpm.html">Using Apache With RPM Based Systems</a></li>
      <li><a href="platform/netware.html">Using Apache with Novell NetWare</a></li>
      <li><a href="platform/perf-hp.html">Running a High-Performance Web
      Server on HPUX</a></li>
      <li><a href="platform/ebcdic.html">The Apache EBCDIC Port</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="programs" id="programs">Apache HTTP Server and Supporting Programs</a></h2>
      <ul><li class="separate"><a href="programs/">Overview</a></li>
      <li><a href="programs/httpd.html">Manual Page: httpd</a></li>
      <li><a href="programs/ab.html">Manual Page: ab</a></li>
      <li><a href="programs/apachectl.html">Manual Page: apachectl</a></li>
      <li><a href="programs/apxs.html">Manual Page: apxs</a></li>
      <li><a href="programs/configure.html">Manual Page: configure</a></li>
      <li><a href="programs/dbmmanage.html">Manual Page: dbmmanage</a></li>
      <li><a href="programs/fcgistarter.html">Manual Page: fcgistarter</a></li>
      <li><a href="programs/htcacheclean.html">Manual Page: htcacheclean</a></li>
      <li><a href="programs/htdbm.html">Manual Page: htdbm</a></li>
      <li><a href="programs/htdigest.html">Manual Page: htdigest</a></li>
      <li><a href="programs/htpasswd.html">Manual Page: htpasswd</a></li>
      <li><a href="programs/httxt2dbm.html">Manual Page: httxt2dbm</a></li>
      <li><a href="programs/logresolve.html">Manual Page: logresolve</a></li>
      <li><a href="programs/log_server_status.html">Manual Page:
      log_server_status</a></li>
      <li><a href="programs/rotatelogs.html">Manual Page: rotatelogs</a></li>
      <li><a href="programs/split-logfile.html">Manual Page: split-logfile</a></li>
      <li><a href="programs/suexec.html">Manual Page: suexec</a></li>
      <li><a href="programs/other.html">Other Programs</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="misc" id="misc">Apache Miscellaneous Documentation</a></h2>
      <ul><li class="separate"><a href="misc/">Overview</a></li>
      <li><a href="misc/perf-tuning.html">Performance Notes - Apache Tuning</a></li>
      <li><a href="misc/security_tips.html">Security Tips</a></li>
      <li><a href="misc/relevant_standards.html">Relevant Standards</a></li>
      <li><a href="misc/password_encryptions.html">Password Encryption Formats</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="modules" id="modules">Apache modules</a></h2>
      <ul><li><a href="mod/module-dict.html">Definitions of terms used to describe Apache modules</a></li>
      <li><a href="mod/directive-dict.html">Definitions of terms used to describe Apache directives</a></li>
      </ul><ul><li><a href="mod/core.html">Apache Core Features</a></li>
      <li><a href="mod/mpm_common.html">Apache MPM Common Directives</a></li>
      <li><a href="mod/event.html">Apache MPM event</a></li>
      <li><a href="mod/mpm_netware.html">Apache MPM netware</a></li>
      <li><a href="mod/mpmt_os2.html">Apache MPM os2</a></li>
      <li><a href="mod/prefork.html">Apache MPM prefork</a></li>
      <li><a href="mod/mpm_winnt.html">Apache MPM winnt</a></li>
      <li><a href="mod/worker.html">Apache MPM worker</a></li>
      </ul><ul><li><a href="mod/mod_access_compat.html">Apache Module mod_access_compat</a></li>
      <li><a href="mod/mod_actions.html">Apache Module mod_actions</a></li>
      <li><a href="mod/mod_alias.html">Apache Module mod_alias</a></li>
      <li><a href="mod/mod_allowmethods.html">Apache Module mod_allowmethods</a></li>
      <li><a href="mod/mod_asis.html">Apache Module mod_asis</a></li>
      <li><a href="mod/mod_auth_basic.html">Apache Module mod_auth_basic</a></li>
      <li><a href="mod/mod_auth_digest.html">Apache Module mod_auth_digest</a></li>
      <li><a href="mod/mod_auth_form.html">Apache Module mod_auth_form</a></li>
      <li><a href="mod/mod_authn_anon.html">Apache Module mod_authn_anon</a></li>
      <li><a href="mod/mod_authn_core.html">Apache Module mod_authn_core</a></li>
      <li><a href="mod/mod_authn_dbd.html">Apache Module mod_authn_dbd</a></li>
      <li><a href="mod/mod_authn_dbm.html">Apache Module mod_authn_dbm</a></li>
      <li><a href="mod/mod_authn_file.html">Apache Module mod_authn_file</a></li>
      <li><a href="mod/mod_authn_socache.html">Apache Module mod_authn_socache</a></li>
      <li><a href="mod/mod_authnz_fcgi.html">Apache Module mod_authnz_fcgi</a></li>
      <li><a href="mod/mod_authnz_ldap.html">Apache Module mod_authnz_ldap</a></li>
      <li><a href="mod/mod_authz_core.html">Apache Module mod_authz_core</a></li>
      <li><a href="mod/mod_authz_dbd.html">Apache Module mod_authz_dbd</a></li>
      <li><a href="mod/mod_authz_dbm.html">Apache Module mod_authz_dbm</a></li>
      <li><a href="mod/mod_authz_groupfile.html">Apache Module mod_authz_groupfile</a></li>
      <li><a href="mod/mod_authz_host.html">Apache Module mod_authz_host</a></li>
      <li><a href="mod/mod_authz_owner.html">Apache Module mod_authz_owner</a></li>
      <li><a href="mod/mod_authz_user.html">Apache Module mod_authz_user</a></li>
      <li><a href="mod/mod_autoindex.html">Apache Module mod_autoindex</a></li>
      <li><a href="mod/mod_brotli.html">Apache Module mod_brotli</a></li>
      <li><a href="mod/mod_buffer.html">Apache Module mod_buffer</a></li>
      <li><a href="mod/mod_cache.html">Apache Module mod_cache</a></li>
      <li><a href="mod/mod_cache_disk.html">Apache Module mod_cache_disk</a></li>
      <li><a href="mod/mod_cache_socache.html">Apache Module mod_cache_socache</a></li>
      <li><a href="mod/mod_cern_meta.html">Apache Module mod_cern_meta</a></li>
      <li><a href="mod/mod_cgi.html">Apache Module mod_cgi</a></li>
      <li><a href="mod/mod_cgid.html">Apache Module mod_cgid</a></li>
      <li><a href="mod/mod_charset_lite.html">Apache Module mod_charset_lite</a></li>
      <li><a href="mod/mod_data.html">Apache Module mod_data</a></li>
      <li><a href="mod/mod_dav.html">Apache Module mod_dav</a></li>
      <li><a href="mod/mod_dav_fs.html">Apache Module mod_dav_fs</a></li>
      <li><a href="mod/mod_dav_lock.html">Apache Module mod_dav_lock</a></li>
      <li><a href="mod/mod_dbd.html">Apache Module mod_dbd</a></li>
      <li><a href="mod/mod_deflate.html">Apache Module mod_deflate</a></li>
      <li><a href="mod/mod_dialup.html">Apache Module mod_dialup</a></li>
      <li><a href="mod/mod_dir.html">Apache Module mod_dir</a></li>
      <li><a href="mod/mod_dumpio.html">Apache Module mod_dumpio</a></li>
      <li><a href="mod/mod_echo.html">Apache Module mod_echo</a></li>
      <li><a href="mod/mod_env.html">Apache Module mod_env</a></li>
      <li><a href="mod/mod_example_hooks.html">Apache Module mod_example_hooks</a></li>
      <li><a href="mod/mod_expires.html">Apache Module mod_expires</a></li>
      <li><a href="mod/mod_ext_filter.html">Apache Module mod_ext_filter</a></li>
      <li><a href="mod/mod_file_cache.html">Apache Module mod_file_cache</a></li>
      <li><a href="mod/mod_filter.html">Apache Module mod_filter</a></li>
      <li><a href="mod/mod_headers.html">Apache Module mod_headers</a></li>
      <li><a href="mod/mod_heartbeat.html">Apache Module mod_heartbeat</a></li>
      <li><a href="mod/mod_heartmonitor.html">Apache Module mod_heartmonitor</a></li>
      <li><a href="mod/mod_http2.html">Apache Module mod_http2</a></li>
      <li><a href="mod/mod_ident.html">Apache Module mod_ident</a></li>
      <li><a href="mod/mod_imagemap.html">Apache Module mod_imagemap</a></li>
      <li><a href="mod/mod_include.html">Apache Module mod_include</a></li>
      <li><a href="mod/mod_info.html">Apache Module mod_info</a></li>
      <li><a href="mod/mod_isapi.html">Apache Module mod_isapi</a></li>
      <li><a href="mod/mod_lbmethod_bybusyness.html">Apache Module mod_lbmethod_bybusyness</a></li>
      <li><a href="mod/mod_lbmethod_byrequests.html">Apache Module mod_lbmethod_byrequests</a></li>
      <li><a href="mod/mod_lbmethod_bytraffic.html">Apache Module mod_lbmethod_bytraffic</a></li>
      <li><a href="mod/mod_lbmethod_heartbeat.html">Apache Module mod_lbmethod_heartbeat</a></li>
      <li><a href="mod/mod_ldap.html">Apache Module mod_ldap</a></li>
      <li><a href="mod/mod_log_config.html">Apache Module mod_log_config</a></li>
      <li><a href="mod/mod_log_debug.html">Apache Module mod_log_debug</a></li>
      <li><a href="mod/mod_log_forensic.html">Apache Module mod_log_forensic</a></li>
      <li><a href="mod/mod_logio.html">Apache Module mod_logio</a></li>
      <li><a href="mod/mod_lua.html">Apache Module mod_lua</a></li>
      <li><a href="mod/mod_macro.html">Apache Module mod_macro</a></li>
      <li><a href="mod/mod_md.html">Apache Module mod_md</a></li>
      <li><a href="mod/mod_mime.html">Apache Module mod_mime</a></li>
      <li><a href="mod/mod_mime_magic.html">Apache Module mod_mime_magic</a></li>
      <li><a href="mod/mod_negotiation.html">Apache Module mod_negotiation</a></li>
      <li><a href="mod/mod_nw_ssl.html">Apache Module mod_nw_ssl</a></li>
      <li><a href="mod/mod_privileges.html">Apache Module mod_privileges</a></li>
      <li><a href="mod/mod_proxy.html">Apache Module mod_proxy</a></li>
      <li><a href="mod/mod_proxy_ajp.html">Apache Module mod_proxy_ajp</a></li>
      <li><a href="mod/mod_proxy_balancer.html">Apache Module mod_proxy_balancer</a></li>
      <li><a href="mod/mod_proxy_connect.html">Apache Module mod_proxy_connect</a></li>
      <li><a href="mod/mod_proxy_express.html">Apache Module mod_proxy_express</a></li>
      <li><a href="mod/mod_proxy_fcgi.html">Apache Module mod_proxy_fcgi</a></li>
      <li><a href="mod/mod_proxy_fdpass.html">Apache Module mod_proxy_fdpass</a></li>
      <li><a href="mod/mod_proxy_ftp.html">Apache Module mod_proxy_ftp</a></li>
      <li><a href="mod/mod_proxy_hcheck.html">Apache Module mod_proxy_hcheck</a></li>
      <li><a href="mod/mod_proxy_html.html">Apache Module mod_proxy_html</a></li>
      <li><a href="mod/mod_proxy_http.html">Apache Module mod_proxy_http</a></li>
      <li><a href="mod/mod_proxy_http2.html">Apache Module mod_proxy_http2</a></li>
      <li><a href="mod/mod_proxy_scgi.html">Apache Module mod_proxy_scgi</a></li>
      <li><a href="mod/mod_proxy_uwsgi.html">Apache Module mod_proxy_uwsgi</a></li>
      <li><a href="mod/mod_proxy_wstunnel.html">Apache Module mod_proxy_wstunnel</a></li>
      <li><a href="mod/mod_ratelimit.html">Apache Module mod_ratelimit</a></li>
      <li><a href="mod/mod_reflector.html">Apache Module mod_reflector</a></li>
      <li><a href="mod/mod_remoteip.html">Apache Module mod_remoteip</a></li>
      <li><a href="mod/mod_reqtimeout.html">Apache Module mod_reqtimeout</a></li>
      <li><a href="mod/mod_request.html">Apache Module mod_request</a></li>
      <li><a href="mod/mod_rewrite.html">Apache Module mod_rewrite</a></li>
      <li><a href="mod/mod_sed.html">Apache Module mod_sed</a></li>
      <li><a href="mod/mod_session.html">Apache Module mod_session</a></li>
      <li><a href="mod/mod_session_cookie.html">Apache Module mod_session_cookie</a></li>
      <li><a href="mod/mod_session_crypto.html">Apache Module mod_session_crypto</a></li>
      <li><a href="mod/mod_session_dbd.html">Apache Module mod_session_dbd</a></li>
      <li><a href="mod/mod_setenvif.html">Apache Module mod_setenvif</a></li>
      <li><a href="mod/mod_slotmem_plain.html">Apache Module mod_slotmem_plain</a></li>
      <li><a href="mod/mod_slotmem_shm.html">Apache Module mod_slotmem_shm</a></li>
      <li><a href="mod/mod_so.html">Apache Module mod_so</a></li>
      <li><a href="mod/mod_socache_dbm.html">Apache Module mod_socache_dbm</a></li>
      <li><a href="mod/mod_socache_dc.html">Apache Module mod_socache_dc</a></li>
      <li><a href="mod/mod_socache_memcache.html">Apache Module mod_socache_memcache</a></li>
      <li><a href="mod/mod_socache_redis.html">Apache Module mod_socache_redis</a></li>
      <li><a href="mod/mod_socache_shmcb.html">Apache Module mod_socache_shmcb</a></li>
      <li><a href="mod/mod_speling.html">Apache Module mod_speling</a></li>
      <li><a href="mod/mod_ssl.html">Apache Module mod_ssl</a></li>
      <li><a href="mod/mod_status.html">Apache Module mod_status</a></li>
      <li><a href="mod/mod_substitute.html">Apache Module mod_substitute</a></li>
      <li><a href="mod/mod_suexec.html">Apache Module mod_suexec</a></li>
      <li><a href="mod/mod_unique_id.html">Apache Module mod_unique_id</a></li>
      <li><a href="mod/mod_unixd.html">Apache Module mod_unixd</a></li>
      <li><a href="mod/mod_userdir.html">Apache Module mod_userdir</a></li>
      <li><a href="mod/mod_usertrack.html">Apache Module mod_usertrack</a></li>
      <li><a href="mod/mod_version.html">Apache Module mod_version</a></li>
      <li><a href="mod/mod_vhost_alias.html">Apache Module mod_vhost_alias</a></li>
      <li><a href="mod/mod_watchdog.html">Apache Module mod_watchdog</a></li>
      <li><a href="mod/mod_xml2enc.html">Apache Module mod_xml2enc</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="developer" id="developer">Developer Documentation</a></h2>
      <ul><li class="separate"><a href="developer/">Overview</a></li>
      <li><a href="developer/API.html">Apache API notes</a></li>
      <li><a href="developer/new_api_2_4.html">API updates in Apache HTTPD 2.4</a></li>
      <li><a href="developer/modguide.html">Developing modules for Apache HTTPD 2.4</a></li>
      <li><a href="developer/documenting.html">Documenting Apache HTTPD</a></li>
      <li><a href="developer/hooks.html">Apache 2.x Hook Functions</a></li>
      <li><a href="developer/modules.html">Converting Modules from 1.3 to 2.x</a></li>
      <li><a href="developer/request.html">Request Processing in 2.x</a></li>
      <li><a href="developer/filters.html">How Filters Work in 2.x</a></li>
      <li><a href="developer/output-filters.html">Guidelines for output filters in 2.x</a></li>
      <li><a href="developer/thread_safety.html">Thread Safety Issues in 2.x</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="index" id="index">Glossary and Index</a></h2>
      <ul><li><a href="glossary.html">Glossary</a></li>
      <li><a href="mod/">Module index</a></li>
      <li><a href="mod/directives.html">Directive index</a></li>
      <li><a href="mod/quickreference.html">Directive Quick-Reference</a></li>
      <li><a href="mod/overrides.html">Override class index for .htaccess</a></li>
      </ul>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./de/sitemap.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/sitemap.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/sitemap.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/sitemap.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sitemap.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sitemap.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sitemap.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/sitemap.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/sitemap.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/sections.html.tr.utf8������������������������������������������������������0000644�0000000�0000050�00000121427�13447004010�017467� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Yapılandırma Bölümleri - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Yapılandırma Bölümleri</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./en/sections.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/sections.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sections.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sections.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sections.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><a href="configuring.html">Yapılandırma dosyaları</a>ndaki
             yönergeler sunucunun tamamına uygulanacağı gibi sadece belli dizinler,
             dosyalar, konaklar veya URL’lere uygulanmakla sınırlanabilir. Bu
             belgede, yapılandırma bölümü taşıyıcılarınının veya
             <code>.htaccess</code> dosyalarının, yapılandırma dosyalarındaki diğer
             yönergelerin etki alanlarını değiştirtirmek için nasıl kullanılacağı
             açıklanmıştır.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#types">Yapılandırma Bölümü Taşıyıcılarının Türleri</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#file-and-web">Dosya Sistemi, Site Alanı ve Mantıksal İfadeler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#virtualhost">Sanal Konaklar</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#proxy">Vekil</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#whatwhere">Hangi Yönergelere İzin Veriliyor?</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#merging">Bölümler Nasıl Katıştırılır?</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="types" id="types">Yapılandırma Bölümü Taşıyıcılarının Türleri</a></h2>
      
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td><ul><li><code class="module"><a href="./mod/core.html">core</a></code></li><li><code class="module"><a href="./mod/mod_version.html">mod_version</a></code></li><li><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_md.html#mdomainsetsection">&lt;MDomainSet&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
          <p>İki temel taşıyıcı türü vardır. Taşıyıcıların çoğu her istek için
            değerlendirmeye alınır. Taşıyıcılardaki yönergeler ise sadece bu
            taşıyıcılarla eşleşen istekler için uygulanır. Diğer yandan,
            <code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>,
            <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code> ve
            <code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code>
            taşıyıcıları sadece sunucu başlatılırken veya yeniden başlatılırken
            değerlendirmeye alınır. Başlatma sırasında gerektirdikleri koşullar
            sağlanıyorsa içerdikleri yönergeler tüm isteklere uygulanır. Aksi
            takdirde, içerdikleri yönergeler yok sayılır.</p>
      
          <p><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code> yönergesi
            sadece <code class="program"><a href="./programs/httpd.html">httpd</a></code> komut satırında uygun parametreler
            tanımlanmışsa uygulanabilecek yönergeleri içerir. Örneğin, aşağıdaki
            yapılandırma ile tüm isteklerin diğer siteye yönlendirilebilmesi sadece
            sunucu <code>httpd -DClosedForNow</code> komut satırı ile başlatıldığı
            takdirde mümkün olur:</p>
      
          <pre class="prettyprint lang-config">&lt;IfDefine ClosedForNow&gt;
        Redirect "/" "http://otherserver.example.com/"
      &lt;/IfDefine&gt;</pre>
      
      
          <p><code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code> yönergesi
            sadece belli bir modülün sunucuda kullanılabilir durumda olması halinde
            uygulanabilecek yönergeleri içerir. Modülün ya sunucuyla birlikte durağan
            olarak derlenmiş olması ya da devingen olarak derlenmiş ve yapılandırma
            dosyasında yönergeden önce o modüle ilişkin bir <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> satırının bulunması gerekir. Bu
            yönergeyi sadece belli bir modülün varlığının veya yokluğunun
            yapılandırma dosyanızın çalışmasını etkilememesini istediğiniz durumlarda
            kullanmalısınız. Eksik modüllerle ilgili hata iletilerini
            engellediğinden, taşıyıcı içine, her zaman çalışması istenen yönergeler
            konulmamalıdır.</p>
      
          <p>Aşağıdaki örnekte, <code class="directive"><a href="./mod/mod_mime_magic.html#mimemagicfile">MimeMagicFile</a></code> yönergesi sadece
            <code class="module"><a href="./mod/mod_mime_magic.html">mod_mime_magic</a></code> modülü mevcutsa uygulanacaktır.</p>
      
          <pre class="prettyprint lang-config">&lt;IfModule mod_mime_magic.c&gt;
        MimeMagicFile "conf/magic"
      &lt;/IfModule&gt;</pre>
      
      
          <p><code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code>
            yönergesi sunucunun belli bir sürümünün çalıştırılması halinde
            uygulanabilecek yönergeleri içerebilmesi dışında <code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code> ve <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code> yönergeleri gibidir.
            <code class="module"><a href="./mod/mod_version.html">mod_version</a></code> modülü farklı httpd sürümleri ve farklı
            yapılandırmalarla büyük ağlarda çalışmayı mümkün kılmak veya sürüm
            denemeleri yapabilmek amacıyla tasarlanmıştır.</p>
      
          <pre class="prettyprint lang-config">&lt;IfVersion &gt;= 2.4&gt;
        # burası sadece 2.4.0 veya daha üstü sürümlerde
        # iş görür.
      &lt;/IfVersion&gt;</pre>
      
      
          <p><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>,
            <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code> ve
            <code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code>
            yönergelerinin önüne "!" konularak olumsuz koşullar için uygulanabilir.
            Ayrıca, bu bölümler daha karmaşık sınırlamalar elde etmek amacıyla bir
            diğerinin içinde kullanılabilirler.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="file-and-web" id="file-and-web">Dosya Sistemi, Site Alanı ve Mantıksal İfadeler</a></h2>
          
      
          <p>En sık kullanılan yapılandırma bölümü taşıyıcıları dosya sistemindeki
            veya site alanındaki belli yerlerin yapılandırmalarını değiştirmekte
            kullanılanlardır. Öncelikle, bu ikisi arasındaki farkları bilmek
            önemlidir. Dosya sistemi disklerinizin işletim sistemi tarafından size
            gösterilen halidir. Örneğin, öntanımlı kurulumda Apache httpd, Unix
            sistemlerinde  <code>/usr/local/apache2</code> altındayken Windows
            sistemlerinde  <code>"c:/Program Files/Apache Group/Apache2"</code>
            altındadır. (Bilgi: Windows için bile, Apache httpd yapılandırma
            dosyalarında dosya yolu belirtilirken tersbölü değil normal bölü
            karakterleri kullanılır.) Site alanı ise sunucu tarafından istemciye
            sunulan dizin ağacıdır. Yani, site alanı içindeki <code>/dir/</code>
            dizini, Apache httpd’nin Unix üzerinde dosya sistemine öntanımlı olarak
            kurulduğu yer göz önüne alınarak, dosya sistemindeki
            <code>/usr/local/apache2/htdocs/dir/</code> dizinine karşılıktır. Site
            sayfaları veritabanlarından veya başka yerlerden devingen olarak
            üretilebildiğinden site alanlarının doğrudan dosya sistemine eşlenmesi
            gerekli deÄŸildir.</p>
      
        <h3><a name="filesystem" id="filesystem">Dosya Sistemi Taşıyıcıları</a></h3>
      
          <p><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
            ve <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>
            taşıyıcıları, <a class="glossarylink" href="./glossary.html#regex" title="sözlüğe bakınız">düzenli ifade</a> karşılıkları
            ile beraber, yönergeleri dosya sisteminin parçalarına uygularlar. Bir
            <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> bölümü
            içindeki yönergeler belli bir dosya sistemi dizinine ve onun alt
            dizinlerine uygulanır. Aynı etki <a href="howto/htaccess.html">.htaccess
            dosyaları</a> kullanılarak da sağlanabilir. Örneğin aşağıdaki
            yapılandırmada, <code>/var/web/dir1</code> dizini ve alt dizinlerinde
            dizin içeriğinin listelenmesi etkin kılınmaktadır.</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/var/web/dir1"&gt;
        Options +Indexes
      &lt;/Directory&gt;</pre>
      
      
          <p>Bir <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> bölümü
            içindeki yönergeler, hangi dizinde bulunduğuna bakılmaksızın ismi
            belirtilen dosyalara uygulanır. Örneğin, aşağıdaki yapılandırma
            yönergeleri yapılandırma dosyasının ana bölümüne yerleştirildiği takdirde
            <code>gizli.html</code> isimli dosyalara nerede bulunursa bulunsun
            eriÅŸime izin vermeyecektir.</p>
      
          <pre class="prettyprint lang-config">&lt;Files "gizli.html"&gt;
        Require all denied
      &lt;/Files&gt;</pre>
      
      
          <p>Dosya sisteminin belli bir yerindeki belli dosyalarla ilgili yaptırımlar
            için <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> ve
            <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> bölümleri
            birlikte kullanılabilir. Örneğin, aşağıdaki yapılandırma
            <code>/var/web/dir1/gizli.html</code>,
            <code>/var/web/dir1/subdir2/gizli.html</code>,
            <code>/var/web/dir1/subdir3/gizli.html</code> ve
            <code>/var/web/dir1/</code> altında bulunabilecek diğer tüm
            <code>gizli.html</code> dosyalarına erişimi yasaklar.</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/var/web/dir1"&gt;<br />
        &lt;Files "gizli.html"&gt;<br />
          Require all denied
        &lt;/Files&gt;<br />
      &lt;/Directory&gt;</pre>
      
        
      
        <h3><a name="webspace" id="webspace">Site Alanı Taşıyıcıları</a></h3>
      
          <p><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> yönergesi
            ve yönergenin <a class="glossarylink" href="./glossary.html#regex" title="sözlüğe bakınız">düzenli ifade</a> karşılığı
            site alanındaki içerik için yapılandırmayı değiştirir.  Örneğin aşağıdaki
            yapılandırma, <code>/gizli</code> ile başlayan URL yollarına erişimi
            engeller. Özellikle, <code>http://siteniz.mesela.dom/gizli</code>,
            <code>http://siteniz.mesela.dom/gizli123</code> ve
            <code>http://siteniz.mesela.dom/gizli/dir/dosya.html</code>
            istekleri yanında <code>/gizli</code> ile başlayan diğer isteklere de
            uygulanır.</p>
      
          <pre class="prettyprint lang-config">&lt;LocationMatch "^/gizli"&gt;
          Require all denied
      &lt;/LocationMatch&gt;</pre>
      
      
          <p>Dosya sistemi ile etkileşime girmeyen herşey için
            <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
            yönergesi gerekir. Aşağıdaki örnekte, belli bir URL’nin
            <code class="module"><a href="./mod/mod_status.html">mod_status</a></code> modülü tarafından sağlanan bir dahili
            Apache eylemcisine nasıl eşlenebileceği gösterilmiştir. Bu örnek
            için dosya sisteminde <code>server-status</code> adında bir dosya
            veya dizin bulunması gerekli değildir.</p>
      
          <pre class="prettyprint lang-config">&lt;Location "/server-status"&gt;
          SetHandler server-status
      &lt;/Location&gt;</pre>
      
        
      
        <h3><a name="overlapping-webspace" id="overlapping-webspace">Site Alanında Çakışma</a></h3>
          <p>Belli bölümler ve yönergeler değerlendirilirken çakışan iki URL bir URL
          olarak dikkate alınır. <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> yönergesi için bu şöyle olurdu:</p>
      
          <pre class="prettyprint lang-config">&lt;Location "/foo"&gt;
      &lt;/Location&gt;
      &lt;Location "/foo/bar"&gt;
      &lt;/Location&gt;</pre>
      
      
          <p>DiÄŸer yandan <code class="directive"><a href="./mod/mod_alias.html#takma adlar">&lt;Takma
            adlar&gt;</a></code> tam tersi eÅŸlenir:</p>
      
          <pre class="prettyprint lang-config">Alias "/foo/bar" "/srv/www/uncommon/bar"
      Alias "/foo"     "/srv/www/common/foo"</pre>
      
      
          <p>Aynısı <code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code>
            yönergeleri için de geçerlidir:</p>
      
          <pre class="prettyprint lang-config">ProxyPass "/special-area" "http://special.example.com" smax=5 max=10
      ProxyPass "/" "balancer://mycluster/" stickysession=JSESSIONID|jsessionid nofailover=On</pre>
      
        
      
        <h3><a name="wildcards" id="wildcards">Dosya Adı Şablonları ve Düzenli İfadeler</a></h3>
          
      
          <p><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>,
            <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> ve
            <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
            yönergelerinde, Standart C kütüphanesindeki <code>fnmatch</code>
            işlevindeki gibi kabuk tarzı dosya ismi kalıpları kullanılabilir. "*"
            karakteri herhangi bir karakter dizisi ile eÅŸleÅŸirken "?" karakteri tek
            tek karakterlerle ve "[<em>seq</em>]" kalıbı ise <em>seq</em> içindeki
            her karakterle eşleşir. "/" karakteri her hangi bir kalıp karakteri ile
            eşleşmez; açıkça belirtilmesi gerekir.</p>
      
          <p>Daha esnek bir eşleşmenin gerekli olduğu durumlar için her taşıyıcının
            bir düzenli ifade karşılığı vardır. <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code> ve <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code> yönergelerinde gerekli
            eşleşmeleri seçmek için perl uyumlu <a class="glossarylink" href="./glossary.html#regex" title="sözlüğe bakınız">düzenli
            ifadelerin</a> kullanımına izin verilir. Ayrıca, yönergelerin
            uygulanışının düzenli ifade bölümleri kullanılarak nasıl
            değiştirileceğini öğrenmek için, aşağıda, yapılandırmanın
            katıştırılmasıyla ilgili bölüme de bakınız.</p>
      
          <p>Tüm kullanıcı dizinlerine ilişkin yapılandırmayı değiştirmek için dosya
            ismi kalıpları şöyle kullanılabilirdi:</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/home/*/public_html"&gt;
          Options Indexes
      &lt;/Directory&gt;</pre>
      
      
          <p>Düzenli ifade bölümleri kullanarak çeşitli türlerdeki resim dosyalarına
            eriÅŸimi bir defada yasaklayabiliriz:</p>
      
          <pre class="prettyprint lang-config">&lt;FilesMatch "\.(?i:gif|jpe?g|png)$"&gt;
          Require all denied
      &lt;/FilesMatch&gt;</pre>
      
      
          <p><strong>İsimli gruplar ve geriye başvurular</strong> içeren düzenli
            ifadeler ortama eklenirken ilgili isimler büyük harfli yapılır. Böylece,
            URL'lere ve dosya yolları elemanlarına <a href="expr.html">ifadelerin
            içinden</a> ve <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> gibi modüllerden başvurmak
            mümkün olur.</p>
      
      <pre class="prettyprint lang-config">&lt;DirectoryMatch "^/var/www/combined/(?&lt;SITENAME&gt;[^/]+)"&gt;
          require ldap-group "cn=%{env:MATCH_SITENAME},ou=combined,o=Example"
      &lt;/DirectoryMatch&gt;</pre>
      
        
      
        <h3><a name="expressions" id="expressions">Mantıksal İfadeler</a></h3>
          <p><code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code> yönergesi bir
            mantıksal ifade olarak belirtilebilen bir kurala bağlı olarak
            yapılandırmayı değiştirebilir. Örneğin, aşağıdaki yapılandırmada,
            <code>HTTP Referer</code> başlığı "http://www.example.com/" ile
            başlamıyorsa erişimi yasaklar.</p>
      
          <pre class="prettyprint lang-config">&lt;If "!(%{HTTP_REFERER} -strmatch 'http://www.example.com/*')"&gt;
          Require all denied
      &lt;/If&gt;</pre>
      
        
      
        <h3><a name="whichwhen" id="whichwhen">Ne, Ne Zaman Kullanılır?</a></h3>
          <p>Dosya sistemi taşıyıcıları ile site alanı taşıyıcıları arasında seçim
            yapmak aslında oldukça kolaydır. Dosya sisteminde bulunan nesnelere
            uygulanacak yönergeler için daima <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> veya <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> kullanılır. Dosya sisteminde bulunmayan nesnelere
            (bir sayfanın bir veritabanı tarafından üretilmesi gibi) uygulanacak
            yönergeler için ise <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> kullanılır.</p>
      
          <p>Dosya sistemindeki nesnelere erişimi kısıtlarken asla
            <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
            kullanmamak önemlidir. Bunun sebebi farklı site alanı konumlarının
            (URL’ler) aynı dosya sistemi konumuna eşlenebilmesi dolayısıyla
            kısıtlamalarınızın etrafından dolaşılabilmesine izin vermesidir.
            Örneğin, aşağıdaki yapılandırmayı ele alalım:</p>
      
          <pre class="prettyprint lang-config">&lt;Location "/dir/"&gt;
          Require all denied
      &lt;/Location&gt;</pre>
      
      
          <p><code>http://siteniz.mesela.dom/dir/</code> için bir istek yapılmışsa
            bu doğru çalışacaktır. Fakat dosya sistemi harf büyüklüğüne duyarsızsa
            ne olacak? Kısıtlamanız, istek
            <code>http://siteniz.mesela.dom/DIR/</code>
            şeklinde yapılarak kolayca geçersiz kılınabilir. Halbuki <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> yönergesi isteğin
            nasıl yapıldığına bakılmaksızın bu konumdan sunulan her türlü içeriğe
            uygulanacaktı. (Dosya sistemi bağlarıyla bu da aşılabilir. Sembolik
            bağlar kullanılarak aynı dizin dosya sisteminin bir çok yerine
            yerleştirilebilir. <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> yönergesi dosya yolunu sıfırlamaksızın sembolik
            bağları izleyecektir. Bu bakımdan, en yüksek seviyede güvenlik için uygun
            <code class="directive"><a href="./mod/core.html#options">Options</a></code> yönergesi ile sembolik
            bağların izlenmesi devredışı bırakılabilir.)</p>
      
          <p>Belki de siz sırf harf büyüklüğüne duyarlı bir dosya sistemi
            kullanıyorsunuz diye böyle uygulamalara ihtiyacınız olmadığını düşünüyor
            olabilirsiniz, fakat aynı site alanını çok sayıda dosya sistemi konumuna
            eşleyecek daha bir sürü yol bulunduğunu unutmayınız. Bu bakımdan dosya
            sisteminde yapacağınız kısıtlamalarda daima dosya sistemi taşıyıcılarını
            kullanmalısınız. Bununla birlikte bu kuralın da bir istisnası vardır.
            Yapılandırma kısıtlamalarının bir <code>&lt;Location "/"&gt;</code> bölümü
            içine koyulması, bu bölüme konan yönergelerin etki alanının belli bir URL
            ile sınırlı olmaması nedeniyle mükemmelen güvenlidir.</p>
        
      
        <h3><a name="nesting" id="nesting">Bölüm iç içeliği</a></h3>
          <p>Bazı bölüm türleri başka bölüm türlerinin içinde olabilir. Bir yandan,
            <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> bölümü
            <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> bölümünün
            içinde bulunabilirken diğer yandan bir <code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code> bölümü <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> ve <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> bölümlerinde bulunabilir fakat 
            başka bir <code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code> bölümünün 
            içinde bulunamaz. Bu bölümlerin düzenli ifadeli türevleri de benzer tarzda 
            davranır.</p>
      
          <p>İç içe bölümler, aynı türdeki iç içe olmayan bölümlerin sonrasına
            yerleÅŸtirilir.</p>
        
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="virtualhost" id="virtualhost">Sanal Konaklar</a></h2>
      
          <p><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
            taşıyıcısının içinde belli bir konağa uygulanan yönergeler bulunur.
            Aynı makinede çok sayıda konağı farklı yapılandırmalarla  sunuyorsanız
            bu taşıyıcı çok işinize yarar. Daha fazla bilgi için
            <a href="vhosts/">Sanal Konak Belgeleri</a> bölümüne bakınız.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="proxy" id="proxy">Vekil</a></h2>
          <p><code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>
            ve <code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code>
            taşıyıcıları, sadece belli bir URL ile eşleşen <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>
            vekil sunucusu üzerinden erişilen sitelere uygulanan yapılandırma
            yönergelerini bulundururlar. Örneğin aşağıdaki yapılandırma
            <code>example.com</code> sitesine erişim için vekil sunucunun
            sadece ağdaki bazı kullanıcılar tarafından kullanılabilmesini sağlayacaktır.</p>
      
          <pre class="prettyprint lang-config">&lt;Proxy "http://www.example.com/*"&gt;
          Require host bizimki.example.com
      &lt;/Proxy&gt;</pre>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="whatwhere" id="whatwhere">Hangi Yönergelere İzin Veriliyor?</a></h2>
          <p>Hangi yönergelere hangi yapılandırma bölümlerinde izin verildiğini
            öğrenmek için yönerge <a href="mod/directive-dict.html#Context">bağlamına</a> bakınız. <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> bölümlerinde
            izin verilen herşeye sözdizimsel olarak ayrıca
            <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>,
            <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>,
            <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>,
            <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>,
            <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code>,
            <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>
            ve <code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code>
            bölümlerinde de izin verilir. Yine de bazı istisnai durumlar
            mevcuttur:</p>
      
          <ul>
            <li><code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> yönergesi sadece
            <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
            bölümlerinde çalışır.</li>
      
            <li><code class="directive"><a href="./mod/core.html#options">Options</a></code> yönergesinin
            <code>FollowSymLinks</code> ve <code>SymLinksIfOwnerMatch</code>
            seçenekleri sadece <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> bölümlerinde veya <code>.htaccess</code>
            dosyalarında çalışır.</li>
      
            <li><code class="directive"><a href="./mod/core.html#options">Options</a></code> yönergesi
            <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> ve
            <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>
            bölümlerinde kullanılamaz.</li>
          </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="merging" id="merging">Bölümler Nasıl Katıştırılır?</a></h2>
      
          <p>Yapılandırma bölümleri belli bir sıra ile uygulanır. Yapılandırma
            yönergelerinin yorumlanışı üzerinde önemli etkilere sahip olabilmesi
            nedeniyle neyin ne zaman çalıştığını anlamak çok önemlidir.</p>
      
          <p>Yapılandırma bölümlerinin katıştırılma sırası şöyledir:</p>
      
          <ol>
            <li><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> (düzenli ifadeler hariç)
            ve <code>.htaccess</code> aynı anda işleme sokulur
            (<code>.htaccess</code> ile eğer izin verilmişse <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> içindeki bazı
            yönergeler geçersiz kılınabileceği için).</li>
      
            <li><code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>
            (ve <code>&lt;Directory "~"&gt;</code>).</li>
      
            <li><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> ve
            <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code> aynı anda
            iÅŸleme sokulur.</li>
      
            <li><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
            ve <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code>
            aynı anda işleme sokulur.</li>
      
            <li><code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code>
            </li>
          </ol>
      
          <p>Bazı önemli durumlar:</p>
          <ul>
              <li><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
              bölümündekiler hariç, her grup, yapılandırma dosyasında bulundukları
              sıraya göre işleme sokulurlar. Örneğin, 4. grupta <em>/foo/bar</em> için yapılan 
              bir istek <code>&lt;Location "/foo/bar"&gt;</code> ve <code>&lt;Location 
              "/foo"&gt;</code> bölümleriyle de eşleşir ve bunlar yapılandırma 
              dosyalarında bulundukları sıraya göre değerlendirilir.</li>
            
              <li>Yukarıda 1. grup olan <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> bölümü en kısa dizin elemanından en uzun 
              dizin elemanına doğru işleme sokulur. Yani, örneğin, <code>&lt;Directory 
              "/var/web/dir"&gt;</code> bölümü <code>&lt;Directory    
              "/var/web/dir/subdir"&gt;</code> bölümünden önce işleme sokulacaktır.</li>
          
              <li>Eğer aynı dizin için birden fazla <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> bölümü varsa bunlar yapılandırma 
              dosyasında bulundukları sıraya göre işleme sokulurlar.</li>
            
              <li><code class="directive"><a href="./mod/core.html#include">Include</a></code> yönergeleri ile 
              yapılandırmaya dahil edilen dosyaların içerikleri <code class="directive"><a href="./mod/core.html#include">Include</a></code> yönergesinin bulunduğu yere konulduktan 
              sonra iÅŸleme sokulurlar.</li>
      
             <li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
             bölümlerinin içindeki bölümler, sanal konak tanımı dışındaki
             karşılıklarından <em>sonra</em> uygulanırlar. Bu yöntemle ana sunucu 
             yapılandırmasındaki tanımlar geçersiz kılınabilir</li>
      
             <li>İstek <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> tarafından sunulduğu takdirde,
             <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code> taşıyıcısı
             işlem sırasında <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> taşıyıcısının yerini alır.</li>
          </ul>
      
          <div class="note"><h3>Bazı Teknik Bilgiler</h3>
            Aslında, isim dönüşüm aşamasından (<code>Aliases</code> ve
            <code>DocumentRoots</code>, URL’leri dosya isimlerine eşlemek için
            kullanılırken) hemen önce uygulanan bir
            <code>&lt;Location&gt;</code>/<code>&lt;LocationMatch&gt;</code> dizisi
            vardır. Bu dizinin sonuçları isim dönüşüm aşaması tamamlandıktan sonra
            tamamen elden çıkarılır.
          </div>
      
        <h3><a name="relationship-module-configuration" id="relationship-module-configuration">Modüllerle 
          yapılandırma bölümleri arasındaki ilişki</a></h3>
        
          <p>Yapılandırma bölümlerini okurken örneğin <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>  
            gibi belli modüllerin yönergelerinin bu bölümlere nasıl katılacağı ve  
            ne zaman nasıl işleneceği gibi sorular sıkça aklımızdan geçer. Bunun 
            belli bir yanıtı yoktur ve biraz temel bilgi gerektirir. Her httpd 
            modülü yapılandırmasını kendi yönetir ve httpd.conf içindeki 
            yönergelerinin her biri belli bir bağlamdaki bir yapılandırmayı 
            belirtir. httpd bir komutu okunduğu sırada çalıştırmaz.</p>
          
          <p>Çalışma anında, httpd çekirdeği geçerli isteğe hangilerinin 
            uygulanacağını belirlemek için yukarıda açıklanan sırada tanımlı 
            yapılandırma bölümlerini tekrar tekrar okur. Eşleşen ilk bölümün bu 
            istek için geçerli yapılandırmayı içerdiği varsayılır. Eğer alt 
            bölümlerden biri de eşleşmişse bu bölümlerde yönergeleri bulunan her 
            modüle yapılandırmasını iki bölüm arasında katıştırma şansı verilir. 
            Sonuç üçüncü bir yapılandırma olup işlem bütün yapılandırma bölümleri 
            değerlendirilene kadar sürer.</p>
          
          <p>Yukarıdaki adımların ardından HTTP isteğiyle ilgili "asıl" işlem 
            başlar: her modül ondan istenen görevleri gerçekleştirme şansına sahip 
            olur. Nasıl davranacaklarını belirlemek için kendilerinin katıştırılmış 
            son yapılandırmalarını http çekirdeğinden alabilirler.</p>
          
          <p>Sürecin tamamı bir örnekle görselleştirilebilir. Aşağıdaki örnekte 
            belli bir HTTP başlığını ayarlamak için <code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code> 
            modülünün <code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code> yönergesi 
            kullanılmıştır. <code>/example/index.html</code> isteği için httpd 
            <code>CustomHeaderName</code> başlığına hangi değeri atayacaktır?
          </p>
          <pre class="prettyprint lang-config">&lt;Directory "/"&gt;
          Header set CustomHeaderName bir
          &lt;FilesMatch ".*"&gt;
              Header set CustomHeaderName yedi
          &lt;/FilesMatch&gt;
      &lt;/Directory&gt;
      
      &lt;Directory "/example"&gt;
          Header set CustomHeaderName iki
      &lt;/Directory&gt;</pre>
          
          <ul>
              <li><code class="directive">Directory</code> "/" eşleşir ve ilk yapılandırma 
                olarak <code>CustomHeaderName</code> başlığı <code>bir</code> 
                deÄŸeriyle oluÅŸturulur.</li>
              
              <li><code class="directive">Directory</code> "/example" eÅŸleÅŸir ve 
                <code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code> modülünün koduna göre bir katıştırma 
                durumundan yeni değer eskiyi geçersiz kılacağından yeni bir 
                yapılandırma ile <code>CustomHeaderName</code> başlığının değeri 
                <code>iki</code> yapılır.</li>
              
              <li><code class="directive">FilesMatch</code> ".*" eÅŸleÅŸir ve baÅŸka bir 
                katıştırma fırsatı doğar: <code>CustomHeaderName</code> başlığının 
                değeri <code>yedi</code> yapılır.</li>
              
              <li>Neticede HHP isteğinin sonraki adımlarında 
                <code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code> çağrılıp <code>yedi</code> değeri 
                atanmış <code>CustomHeaderName</code> başlığını işleme sokması 
                istenecektir. <code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code> normalde iÅŸini yapmak 
                için bu yapılandırmayı kullanacaktır. Fakat bundan, bir yönergenin  
                gerekli olmaması veya kullanımdan kaldırılması ve benzeri nedenlerle 
                yapılandırmada iptal edilmesi gibi daha karmaşık bir eylemi bir 
                modülün gerçekleştiremeyeceği anlamı çıkarılmamalıdır.</li>
          </ul>
      
          <p><code class="directive">Directory</code> ile aynı katıştırma sırasından dolayı 
            bu durum .htaccess için de geçerlidir. Burada anlaşılması gereken husus, 
            <code class="directive">Directory</code> ve <code class="directive">FilesMatch</code> 
            gibi yapılandırma bölümlerinin <code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code> veya <code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> gibi modüle özgü 
            yönergelerle karşılaştırılmamasıdır, çünkü bunlar farklı seviyelerde 
            işlem görür.
          </p>
        
      
        <h3><a name="merge-examples" id="merge-examples">Bazı Örnekler</a></h3>
      
          <p>Aşağıdaki yapay örnekte katıştırma sırası gösterilmiştir. Hepsinin aynı
            isteğe uygulandığı varsayımıyla, bu örnekteki yönergeler A &gt; B &gt; C
            &gt; D &gt; E sırasıyla uygulanacaktır.</p>
      
          <pre class="prettyprint lang-config">&lt;Location "/"&gt;
          E
      &lt;/Location&gt;
      
      &lt;Files "f.html"&gt;
          D
      &lt;/Files&gt;
      
      &lt;VirtualHost *&gt;
          &lt;Directory "/a/b"&gt;
              B
          &lt;/Directory&gt;
      &lt;/VirtualHost&gt;
      
      &lt;DirectoryMatch "^.*b$"&gt;
          C
      &lt;/DirectoryMatch&gt;
      
      &lt;Directory "/a/b"&gt;
          A
      &lt;/Directory&gt;</pre>
      
      
          <p>Daha somut bir örnek olarak aşağıdakini ele alalım.
            <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
            bölümlerindeki erişim sınırlamaları ne olursa olsun <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> bölümü son olarak
            değerlendirmeye alınacak ve sunucuya sınırsız erişim verecektir.
            Başka bir deyişle, katıştırma sırası önemlidir, bu nedenle dikkatli
            olmalısınız!</p>
      
          <pre class="prettyprint lang-config">&lt;Location "/"&gt;
          Require all granted
      &lt;/Location&gt;
      
      # Alooo!  Bu &lt;Directory&gt; bölümünün hiçbir hükmü yok.
      &lt;Directory "/"&gt;
          &lt;RequireAll&gt;
              Require all granted
              Require not host kkadam.example.com
          &lt;/RequireAll&gt;
      &lt;/Directory&gt;</pre>
      
      
        
      
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./en/sections.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/sections.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sections.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sections.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sections.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/sections.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_4.html.en���������������������������������������������������0000644�0000000�0000050�00000067265�13444161410�020101� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Overview of new features in Apache HTTP Server 2.4 - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Overview of new features in Apache HTTP Server 2.4</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/new_features_2_4.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_4.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./tr/new_features_2_4.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
        <p>This document describes some of the major changes between the
           2.2 and 2.4 versions of the Apache HTTP Server. For new features since
           version 2.0, see the <a href="new_features_2_2.html">2.2 new features</a>
           document.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#core">Core Enhancements</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#newmods">New Modules</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#module">Module Enhancements</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programs">Program Enhancements</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#documentation">Documentation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#developer">Module Developer Changes</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="core" id="core">Core Enhancements</a></h2>
          
          <dl>
            <dt>Run-time Loadable MPMs</dt>
            <dd>Multiple MPMs can now be <a href="mpm.html#dynamic">built
            as loadable modules</a> at compile time.
            The MPM of choice can be configured at run time via <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> directive.</dd>
      
            <dt>Event MPM</dt>
            <dd>The <a href="mod/event.html">Event MPM</a> is no longer experimental
            but is now fully supported.</dd>
      
            <dt>Asynchronous support</dt>
            <dd>Better support for asynchronous read/write for supporting MPMs and
            platforms.</dd>
      
            <dt>Per-module and per-directory LogLevel configuration</dt>
            <dd>The <code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code> can now be
            configured per module and per directory.  New levels <code>trace1</code>
            to <code>trace8</code> have been added above the <code>debug</code> log
            level.</dd>
      
            <dt>Per-request configuration sections</dt>
            <dd><code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code>,
                <code class="directive"><a href="./mod/core.html#elseif">&lt;ElseIf&gt;</a></code>,
                and <code class="directive"><a href="./mod/core.html#else">&lt;Else&gt;</a></code>
                sections can be used to set the configuration based on per-request
                criteria.</dd>
      
            <dt>General-purpose expression parser</dt>
            <dd>A new expression parser allows to specify
                <a href="expr.html">complex conditions</a> using a common syntax
                in directives like
                <code class="directive"><a href="./mod/mod_setenvif.html#setenvifexpr">SetEnvIfExpr</a></code>,
                <code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code>,
                <code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code>,
                <code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code>,
                and others.
            </dd>
      
            <dt>KeepAliveTimeout in milliseconds</dt>
            <dd>It is now possible to specify <code class="directive"><a href="./mod/core.html#keepalivetimeout">KeepAliveTimeout</a></code> in milliseconds.
            </dd>
      
            <dt>NameVirtualHost directive</dt>
            <dd>No longer needed and is now deprecated.</dd>
      
            <dt>Override Configuration</dt>
            <dd>The new <code class="directive"><a href="./mod/core.html#allowoverridelist">AllowOverrideList</a></code>
                directive allows more fine grained control which directives are
                allowed in <code>.htaccess</code> files. </dd>
      
            <dt>Config file variables</dt>
            <dd>It is now possible to <code class="directive"><a href="./mod/core.html#define">Define</a></code>
                variables in the configuration, allowing a clearer representation
                if the same value is used at many places in the configuration.
            </dd>
      
            <dt>Reduced memory usage</dt>
            <dd>Despite many new features, 2.4.x tends to use less memory than
            2.2.x.</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="newmods" id="newmods">New Modules</a></h2>
          
          <dl>
            <dt><code class="module"><a href="./mod/mod_proxy_fcgi.html">mod_proxy_fcgi</a></code></dt>
            <dd>FastCGI Protocol backend for <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_scgi.html">mod_proxy_scgi</a></code></dt>
            <dd>SCGI Protocol backend for <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_express.html">mod_proxy_express</a></code></dt>
            <dd>Provides dynamically configured mass reverse proxies for
            <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dd>
      
            <dt><code class="module"><a href="./mod/mod_remoteip.html">mod_remoteip</a></code></dt>
            <dd>Replaces the apparent client remote IP address and hostname for the request
            with the IP address list presented by a proxies or a load balancer via
            the request headers.</dd>
      
            <dt><code class="module"><a href="./mod/mod_heartmonitor.html">mod_heartmonitor</a></code>,
                <code class="module"><a href="./mod/mod_lbmethod_heartbeat.html">mod_lbmethod_heartbeat</a></code></dt>
            <dd>Allow <code class="module"><a href="./mod/mod_proxy_balancer.html">mod_proxy_balancer</a></code> to base loadbalancing decisions
            on the number of active connections on the backend servers.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_html.html">mod_proxy_html</a></code></dt>
            <dd>Formerly a third-party module, this supports fixing of HTML
            links in a reverse proxy situation, where the backend generates
            URLs that are not valid for the proxy's clients.</dd>
      
            <dt><code class="module"><a href="./mod/mod_sed.html">mod_sed</a></code></dt>
            <dd>An advanced replacement of <code class="module"><a href="./mod/mod_substitute.html">mod_substitute</a></code>, allows
            to edit the response body with the full power of sed.</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_form.html">mod_auth_form</a></code></dt>
            <dd>Enables form-based authentication.</dd>
      
            <dt><code class="module"><a href="./mod/mod_session.html">mod_session</a></code></dt>
            <dd>Enables the use of session state for clients, using cookie or
            database storage.</dd>
      
            <dt><code class="module"><a href="./mod/mod_allowmethods.html">mod_allowmethods</a></code></dt>
            <dd>New module to restrict certain HTTP methods without interfering with
            authentication or authorization.</dd>
      
            <dt><code class="module"><a href="./mod/mod_lua.html">mod_lua</a></code></dt>
            <dd>Embeds the <a href="http://www.lua.org/">Lua</a> language into httpd,
            for configuration and small business logic functions. (Experimental)</dd>
      
            <dt><code class="module"><a href="./mod/mod_log_debug.html">mod_log_debug</a></code></dt>
            <dd>Allows the addition of customizable debug logging at different phases of the
            request processing.</dd>
      
            <dt><code class="module"><a href="./mod/mod_buffer.html">mod_buffer</a></code></dt>
            <dd>Provides for buffering the input and output filter stacks</dd>
      
            <dt><code class="module"><a href="./mod/mod_data.html">mod_data</a></code></dt>
            <dd>Convert response body into an RFC2397 data URL</dd>
      
            <dt><code class="module"><a href="./mod/mod_ratelimit.html">mod_ratelimit</a></code></dt>
            <dd>Provides Bandwidth Rate Limiting for Clients</dd>
      
            <dt><code class="module"><a href="./mod/mod_request.html">mod_request</a></code></dt>
            <dd>Provides Filters to handle and make available HTTP request bodies</dd>
      
            <dt><code class="module"><a href="./mod/mod_reflector.html">mod_reflector</a></code></dt>
            <dd>Provides Reflection of a request body as a response via the output filter stack.</dd>
      
            <dt><code class="module"><a href="./mod/mod_slotmem_shm.html">mod_slotmem_shm</a></code></dt>
            <dd>Provides a Slot-based shared memory provider (ala the scoreboard).</dd>
      
            <dt><code class="module"><a href="./mod/mod_xml2enc.html">mod_xml2enc</a></code></dt>
            <dd>Formerly a third-party module, this supports internationalisation
            in libxml2-based (markup-aware) filter modules.</dd>
      
            <dt><code class="module"><a href="./mod/mod_macro.html">mod_macro</a></code> (available since 2.4.5)</dt>
            <dd>Provide macros within configuration files.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_wstunnel.html">mod_proxy_wstunnel</a></code> (available since 2.4.5)</dt>
            <dd>Support web-socket tunnels.</dd>
      
            <dt><code class="module"><a href="./mod/mod_authnz_fcgi.html">mod_authnz_fcgi</a></code> (available since 2.4.10)</dt>
            <dd>Enable FastCGI authorizer applications to authenticate and/or
            authorize clients.</dd>
      
            <dt><code class="module"><a href="./mod/mod_http2.html">mod_http2</a></code> (available since 2.4.17)</dt>
            <dd>Support for the HTTP/2 transport layer.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_http2.html">mod_proxy_http2</a></code> (available since 2.4.19)</dt>
            <dd>HTTP/2 Protocol backend for <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_hcheck.html">mod_proxy_hcheck</a></code> (available since 2.4.21)</dt>
            <dd>Support independent dynamic health checks for remote proxiy backend servers.</dd>
      
            <dt><code class="module"><a href="./mod/mod_brotli.html">mod_brotli</a></code> (available since 2.4.26)</dt>
            <dd>Support the Brotli compression algorithm.</dd>
      
            <dt><code class="module"><a href="./mod/mod_md.html">mod_md</a></code> (available since 2.4.30)</dt>
            <dd>Support the ACME protocol to automate certificate provisionning.</dd>
      
            <dt><code class="module"><a href="./mod/mod_socache_redis.html">mod_socache_redis</a></code> (available since 2.4.39)</dt>
            <dd>Support <a href="http://redis.io/">Redis</a> based shared object cache provider.</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="module" id="module">Module Enhancements</a></h2>
          
          <dl>
            <dt><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></dt>
      
            <dd><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> can now be configured to use an
            OCSP server to check the validation status of a client
            certificate.  The default responder is configurable, along with
            the decision on whether to prefer the responder designated in
            the client certificate itself.</dd>
      
            <dd><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> now also supports OCSP stapling, where the
            server pro-actively obtains an OCSP verification of its certificate and
            transmits that to the client during the handshake. </dd>
      
            <dd><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> can now be configured to share SSL Session
            data between servers through memcached</dd>
      
            <dd>EC keys are now supported in addition to RSA and DSA.</dd>
      
            <dd>Support for TLS-SRP (available in 2.4.4 and later).</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dt>
      
            <dd>The <code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code> directive
            is now most optimally configured within a
            <code class="directive"><a href="./mod/core.html#location">Location</a></code> or
            <code class="directive"><a href="./mod/core.html#locationmatch">LocationMatch</a></code>
            block, and offers a significant performance advantage over the traditional
            two-parameter syntax when present in large numbers.</dd>
            <dd>The source address used for proxy requests is now configurable.</dd>
            <dd>Support for Unix domain sockets to the backend (available in 2.4.7
            and later).</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_balancer.html">mod_proxy_balancer</a></code></dt>
      
            <dd>More runtime configuration changes for BalancerMembers via balancer-manager</dd>
      
            <dd>Additional BalancerMembers can be added at runtime via balancer-manager</dd>
      
            <dd>Runtime configuration of a subset of Balancer parameters</dd>
      
            <dd>BalancerMembers can be set to 'Drain' so that they only respond to existing sticky
            sessions, allowing them to be taken gracefully offline.</dd>
      
            <dd>Balancer settings can be persistent after restarts.</dd>
      
            <dt><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code></dt>
      
            <dd>The <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> CACHE filter can be optionally inserted
            at a given point in the filter chain to provide fine control over caching.
            </dd>
      
            <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> can now cache HEAD requests.</dd>
      
            <dd>Where possible, <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> directives can now be set
            per directory, instead of per server.</dd>
      
            <dd>The base URL of cached URLs can be customised, so that a cluster of
            caches can share the same endpoint URL prefix.</dd>
      
            <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> is now capable of serving stale cached
            data when a backend is unavailable (error 5xx).</dd>
      
            <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> can now insert HIT/MISS/REVALIDATE into
            an X-Cache header.</dd>
      
            <dt><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></dt>
            <dd>Support for the 'onerror' attribute within an 'include' element,
            allowing an error document to be served on error instead of the default
            error string.</dd>
      
            <dt><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code>, <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>,
                <code class="module"><a href="./mod/mod_isapi.html">mod_isapi</a></code>, ...</dt>
            <dd>Translation of headers to environment variables is more strict than
            before to mitigate some possible cross-site-scripting attacks via header
            injection. Headers containing invalid characters (including underscores)
            are now silently dropped. <a href="env.html">Environment Variables
            in Apache</a> has some pointers on how to work around broken legacy
            clients which require such headers. (This affects all modules which
            use these environment variables.)</dd>
      
            <dt><code class="module"><a href="./mod/mod_authz_core.html">mod_authz_core</a></code> Authorization Logic Containers</dt>
      
            <dd>Advanced authorization logic may now be specified using the
                <code class="directive"><a href="./mod/mod_authz_core.html#require">Require</a></code> directive
                and the related container directives, such as
                <code class="directive"><a href="./mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code>.</dd>
      
            <dt><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></dt>
            <dd><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> adds the <code>[QSD]</code>
                (Query String Discard) and <code>[END]</code> flags for
                <code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> to
                simplify common rewriting scenarios.</dd>
            <dd>Adds the possibility to use complex boolean expressions in <code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code>.</dd>
            <dd>Allows the use of SQL queries as <code class="directive"><a href="./mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> functions.</dd>
      
            <dt><code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code>, <code class="module"><a href="./mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></dt>
            <dd><code class="module"><a href="./mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code> adds support for nested groups.</dd>
            <dd><code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code> adds
                <code class="directive"><a href="./mod/mod_ldap.html#ldapconnectionpoolttl">LDAPConnectionPoolTTL</a></code>,
                <code class="directive"><a href="./mod/mod_ldap.html#ldaptimeout">LDAPTimeout</a></code>, and
                other improvements in the handling of timeouts.
                This is especially useful for setups where a
                stateful firewall drops idle connections to the LDAP server.</dd>
            <dd><code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code> adds
                <code class="directive"><a href="./mod/mod_ldap.html#ldaplibrarydebug">LDAPLibraryDebug</a></code> to log
                debug information provided by the used LDAP toolkit.</dd>
      
            <dt><code class="module"><a href="./mod/mod_info.html">mod_info</a></code></dt>
            <dd><code class="module"><a href="./mod/mod_info.html">mod_info</a></code> can now dump the pre-parsed configuration
                to stdout during server startup.</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_basic.html">mod_auth_basic</a></code></dt>
            <dd>New generic mechanism to fake basic authentication (available in
            2.4.5 and later).</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="programs" id="programs">Program Enhancements</a></h2>
          
          <dl>
              <dt><code class="program"><a href="./programs/fcgistarter.html">fcgistarter</a></code></dt>
              <dd>New FastCGI daemon starter utility</dd>
      
              <dt><code class="program"><a href="./programs/htcacheclean.html">htcacheclean</a></code></dt>
              <dd>Current cached URLs can now be listed, with optional metadata
              included.</dd>
              <dd>Allow explicit deletion of individual cached URLs from the
              cache.</dd>
              <dd>File sizes can now be rounded up to the given block size, making
              the size limits map more closely to the real size on disk.</dd>
              <dd>Cache size can now be limited by the number of inodes, instead
              of or in addition to being limited by the size of the files on
              disk.</dd>
      
              <dt><code class="program"><a href="./programs/rotatelogs.html">rotatelogs</a></code></dt>
              <dd>May now create a link to the current log file.</dd>
              <dd>May now invoke a custom post-rotate script.</dd>
      
              <dt><code class="program"><a href="./programs/htpasswd.html">htpasswd</a></code>, <code class="program"><a href="./programs/htdbm.html">htdbm</a></code></dt>
              <dd>Support for the bcrypt algorithm (available in 2.4.4 and later).
              </dd>
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="documentation" id="documentation">Documentation</a></h2>
          
          <dl>
              <dt>mod_rewrite</dt>
              <dd>The <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> documentation has been
              rearranged and almost completely rewritten, with a focus on
              examples and common usage, as well as on showing you when other
              solutions are more appropriate. The <a href="rewrite/">Rewrite
              Guide</a> is now a top-level section with much more detail and
              better organization.</dd>
      
              <dt>mod_ssl</dt>
              <dd>The <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> documentation has been greatly
              enhanced, with more examples at the getting started level, in
              addition to the previous focus on technical details.</dd>
      
              <dt>Caching Guide</dt>
              <dd>The <a href="caching.html">Caching Guide</a> has been rewritten
              to properly distinguish between the RFC2616 HTTP/1.1 caching
              features provided by <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>, and the generic
              key/value caching provided by the <a href="socache.html">socache</a>
              interface, as well as to cover specialised caching provided by
              mechanisms such as <code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code>.</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="developer" id="developer">Module Developer Changes</a></h2>
          
          <dl>
            <dt>Check Configuration Hook Added</dt>
      
            <dd>A new hook, <code>check_config</code>, has been added which runs
                between the <code>pre_config</code> and <code>open_logs</code>
                hooks.  It also runs before the <code>test_config</code> hook
                when the <code>-t</code> option is passed to
                <code class="program"><a href="./programs/httpd.html">httpd</a></code>.  The <code>check_config</code> hook
                allows modules to review interdependent configuration directive
                values and adjust them while messages can still be logged to the
                console.  The user can thus be alerted to misconfiguration problems
                before the core <code>open_logs</code> hook function redirects
                console output to the error log.</dd>
      
            <dt>Expression Parser Added</dt>
      
            <dd>We now have a general-purpose expression parser, whose API is
                exposed in <var>ap_expr.h</var>.  This is adapted from the
                expression parser previously implemented in
                <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code>.</dd>
      
            <dt>Authorization Logic Containers</dt>
      
            <dd>Authorization modules now register as a provider, via
            ap_register_auth_provider(), to support advanced authorization logic,
            such as <code class="directive"><a href="./mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code>.</dd>
      
            <dt>Small-Object Caching Interface</dt>
      
            <dd>The <var>ap_socache.h</var> header exposes a provider-based
            interface for caching small data objects, based on the previous
            implementation of the <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> session cache.
            Providers using a shared-memory cyclic buffer, disk-based dbm
            files, and a memcache distributed cache are currently
            supported.</dd>
      
            <dt>Cache Status Hook Added</dt>
      
            <dd>The <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> module now includes a new
            <code>cache_status</code> hook, which is called when the caching
            decision becomes known. A default implementation is provided
            which adds an optional <code>X-Cache</code> and
            <code>X-Cache-Detail</code> header to the response.</dd>
          </dl>
      
          <p>The developer documentation contains a
          <a href="developer/new_api_2_4.html">detailed list of API changes</a>.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/new_features_2_4.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_4.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./tr/new_features_2_4.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/new_features_2_4.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/env.html.en����������������������������������������������������������������0000644�0000000�0000050�00000075071�13412755316�015541� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Environment Variables in Apache - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Environment Variables in Apache</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/env.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/env.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/env.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/env.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/env.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>There are two kinds of environment variables that affect
          the Apache HTTP Server.</p>
      
          <p>First, there are the environment variables controlled by
          the underlying operating system.  These are set before the
          server starts.  They can be used in expansions in configuration
          files, and can optionally be passed to CGI scripts and SSI
          using the PassEnv directive.</p>
      
          <p>Second, the Apache HTTP Server provides a mechanism for storing
          information in named variables that are also called <em>environment
          variables</em>. This information can be used to control various
          operations such as logging or access control. The variables are
          also used as a mechanism to communicate with external programs
          such as CGI scripts. This document discusses different ways to
          manipulate and use these variables.</p>
      
          <p>Although these variables are referred to as <em>environment
          variables</em>, they are not the same as the environment
          variables controlled by the underlying operating system.
          Instead, these variables are stored and manipulated in an
          internal Apache structure. They only become actual operating
          system environment variables when they are provided to CGI
          scripts and Server Side Include scripts. If you wish to
          manipulate the operating system environment under which the
          server itself runs, you must use the standard environment
          manipulation mechanisms provided by your operating system
          shell.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#setting">Setting Environment Variables</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#using">Using Environment Variables</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#special">Special Purpose Environment Variables</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#examples">Examples</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="setting" id="setting">Setting Environment Variables</a></h2>
          
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code></li><li><code class="module"><a href="./mod/mod_env.html">mod_env</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li><li><code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code></li><li><code class="module"><a href="./mod/mod_unique_id.html">mod_unique_id</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_setenvif.html#browsermatch">BrowserMatch</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#browsermatchnocase">BrowserMatchNoCase</a></code></li><li><code class="directive"><a href="./mod/mod_env.html#passenv">PassEnv</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code></li><li><code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#setenvifnocase">SetEnvIfNoCase</a></code></li><li><code class="directive"><a href="./mod/mod_env.html#unsetenv">UnsetEnv</a></code></li></ul></td></tr></table>
      
          <h3><a name="basic-manipulation" id="basic-manipulation">Basic Environment Manipulation</a></h3>
              
      
              <p>The most basic way to set an environment variable in Apache
              is using the unconditional <code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code> directive. Variables may also be passed from
              the environment of the shell which started the server using the
              <code class="directive"><a href="./mod/mod_env.html#passenv">PassEnv</a></code> directive.</p>
      
          
          <h3><a name="conditional" id="conditional">Conditional Per-Request Settings</a></h3>
              
      
              <p>For additional flexibility, the directives provided by
              <code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code> allow environment variables to be set
              on a per-request basis, conditional on characteristics of particular
              requests. For example, a variable could be set only when a
              specific browser (User-Agent) is making a request, or only when
              a specific Referer [sic] header is found. Even more flexibility
              is available through the <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>'s <code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> which uses the
              <code>[E=...]</code> option to set environment variables.</p>
      
          
          <h3><a name="unique-identifiers" id="unique-identifiers">Unique Identifiers</a></h3>
              
      
              <p>Finally, <code class="module"><a href="./mod/mod_unique_id.html">mod_unique_id</a></code> sets the environment
              variable <code>UNIQUE_ID</code> for each request to a value which is
              guaranteed to be unique across "all" requests under very
              specific conditions.</p>
      
          
          <h3><a name="standard-cgi" id="standard-cgi">Standard CGI Variables</a></h3>
              
      
              <p>In addition to all environment variables set within the
              Apache configuration and passed from the shell, CGI scripts and
              SSI pages are provided with a set of environment variables
              containing meta-information about the request as required by
      	the <a href="http://www.ietf.org/rfc/rfc3875">CGI
              specification</a>.</p>
      
          
          <h3><a name="caveats" id="caveats">Some Caveats</a></h3>
              
      
              <ul>
                <li>It is not possible to override or change the standard CGI
                variables using the environment manipulation directives.</li>
      
                <li>When <code class="program"><a href="./programs/suexec.html">suexec</a></code> is used to launch
                CGI scripts, the environment will be cleaned down to a set of
                <em>safe</em> variables before CGI scripts are launched. The
                list of <em>safe</em> variables is defined at compile-time in
                <code>suexec.c</code>.</li>
      
                <li>For portability reasons, the names of environment
                variables may contain only letters, numbers, and the
                underscore character. In addition, the first character may
                not be a number. Characters which do not match this
                restriction will be replaced by an underscore when passed to
                CGI scripts and SSI pages.</li>
      
                <li>A special case are HTTP headers which are passed to CGI
                scripts and the like via environment variables (see below).
                They are converted to uppercase and only dashes are replaced with
                underscores; if the header contains any other (invalid) character,
                the whole header is silently dropped. See <a href="#fixheader">
                below</a> for a workaround.</li>
      
                <li>The <code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code> directive runs
                late during request processing meaning that directives such as
                <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code> and <code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code> will not see the
                variables set with it.</li>
       
                <li>When the server looks up a path via an internal 
                <a class="glossarylink" href="./glossary.html#subrequest" title="see glossary">subrequest</a> such as looking 
                for a <code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code> 
                or generating a directory listing with <code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code>,
                per-request environment variables are <em>not</em> inherited in the 
                subrequest. Additionally, 
                <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code> directives
                are not separately evaluated in the subrequest due to the API phases
                 <code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code> takes action in.</li>
              </ul>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="using" id="using">Using Environment Variables</a></h2>
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_authz_host.html">mod_authz_host</a></code></li><li><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code></li><li><code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code></li><li><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="./mod/mod_log_config.html">mod_log_config</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_authz_core.html#require">Require</a></code></li><li><code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code></li><li><code class="directive"><a href="./mod/mod_access_compat.html#deny">Deny</a></code></li><li><code class="directive"><a href="./mod/mod_ext_filter.html#extfilterdefine">ExtFilterDefine</a></code></li><li><code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code></li><li><code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code></li></ul></td></tr></table>
      
          <h3><a name="cgi-scripts" id="cgi-scripts">CGI Scripts</a></h3>
              
      
              <p>One of the primary uses of environment variables is to
              communicate information to CGI scripts. As discussed above, the
              environment passed to CGI scripts includes standard
              meta-information about the request in addition to any variables
              set within the Apache configuration. For more details, see the
              <a href="howto/cgi.html">CGI tutorial</a>.</p>
      
          
          <h3><a name="ssi-pages" id="ssi-pages">SSI Pages</a></h3>
              
      
              <p>Server-parsed (SSI) documents processed by
              <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>'s
              <code>INCLUDES</code> filter can print environment variables
              using the <code>echo</code> element, and can use environment
              variables in flow control elements to makes parts of a page
              conditional on characteristics of a request. Apache also
              provides SSI pages with the standard CGI environment variables
              as discussed above. For more details, see the <a href="howto/ssi.html">SSI tutorial</a>.</p>
      
          
          <h3><a name="access-control" id="access-control">Access Control</a></h3>
              
      
              <p>Access to the server can be controlled based on the value of
              environment variables using the <code>allow from env=</code>
              and <code>deny from env=</code> directives. In combination with
              <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code>, this
              allows for flexible control of access to the server based on
              characteristics of the client. For example, you can use these
              directives to deny access to a particular browser (User-Agent).
              </p>
      
          
          <h3><a name="logging" id="logging">Conditional Logging</a></h3>
              
      
              <p>Environment variables can be logged in the access log using
              the <code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code>
              option <code>%e</code>. In addition, the decision on whether
              or not to log requests can be made based on the status of
              environment variables using the conditional form of the
              <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code>
              directive. In combination with <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code> this allows for flexible control of which
              requests are logged. For example, you can choose not to log
              requests for filenames ending in <code>gif</code>, or you can
              choose to only log requests from clients which are outside your
              subnet.</p>
      
          
          <h3><a name="response-headers" id="response-headers">Conditional Response Headers</a></h3>
              
      
              <p>The <code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code>
              directive can use the presence or
              absence of an environment variable to determine whether or not
              a certain HTTP header will be placed in the response to the
              client. This allows, for example, a certain response header to
              be sent only if a corresponding header is received in the
              request from the client.</p>
      
          
      
          <h3><a name="external-filter" id="external-filter">External Filter Activation</a></h3>
              
      
              <p>External filters configured by <code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code>
              using the <code class="directive"><a href="./mod/mod_ext_filter.html#extfilterdefine">ExtFilterDefine</a></code> directive can
              by activated conditional on an environment variable using the
              <code>disableenv=</code> and <code>enableenv=</code> options.</p>
          
      
          <h3><a name="url-rewriting" id="url-rewriting">URL Rewriting</a></h3>
              
      
              <p>The <code>%{ENV:<em>variable</em>}</code> form of
              <em>TestString</em> in the <code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code> allows <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>'s rewrite
              engine to make decisions conditional on environment variables.
              Note that the variables accessible in <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>
              without the <code>ENV:</code> prefix are not actually environment
              variables. Rather, they are variables special to
              <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> which cannot be accessed from other
              modules.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="special" id="special">Special Purpose Environment Variables</a></h2>
          
      
              <p>Interoperability problems have led to the introduction of
              mechanisms to modify the way Apache behaves when talking to
              particular clients. To make these mechanisms as flexible as
              possible, they are invoked by defining environment variables,
              typically with <code class="directive"><a href="./mod/mod_setenvif.html#browsermatch">BrowserMatch</a></code>, though <code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code> and  <code class="directive"><a href="./mod/mod_env.html#passenv">PassEnv</a></code> could also be used, for example.</p>
      
          <h3><a name="downgrade" id="downgrade">downgrade-1.0</a></h3>
              
      
              <p>This forces the request to be treated as a HTTP/1.0 request
              even if it was in a later dialect.</p>
      
          
          <h3><a name="force-gzip" id="force-gzip">force-gzip</a></h3>
              
                <p>If you have the <code>DEFLATE</code> filter activated, this
                environment variable will ignore the accept-encoding setting of
                your browser and will send compressed output unconditionally.</p>
          
          <h3><a name="force-no-vary" id="force-no-vary">force-no-vary</a></h3>
              
      
              <p>This causes any <code>Vary</code> fields to be removed from
              the response header before it is sent back to the client. Some
              clients don't interpret this field correctly; setting this
              variable can work around this problem. Setting this variable
              also implies <strong>force-response-1.0</strong>.</p>
      
          
          <h3><a name="force-response" id="force-response">force-response-1.0</a></h3>
              
      
            <p>This forces an HTTP/1.0 response to clients making an HTTP/1.0
            request. It was originally
            implemented as a result of a problem with AOL's proxies. Some
            HTTP/1.0 clients may not behave correctly when given an HTTP/1.1
            response, and this can be used to interoperate with them.</p>
      
          
      
          <h3><a name="gzip-only-text-html" id="gzip-only-text-html">gzip-only-text/html</a></h3>
              
      
              <p>When set to a value of "1", this variable disables the
              <code>DEFLATE</code> output filter provided by
              <code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code> for content-types other than
              <code>text/html</code>. If you'd rather
              use statically compressed files, <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>
              evaluates the variable as well (not only for gzip, but for all
              encodings that differ from "identity").</p>
          
      
          <h3><a name="no-gzip" id="no-gzip">no-gzip</a></h3>
      
              <p>When set, the <code>DEFLATE</code> filter of
              <code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code> will be turned off and
              <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> will refuse to deliver encoded
              resources.</p>
      
          
      
          <h3><a name="no-cache" id="no-cache">no-cache</a></h3>
              <p><em>Available in versions 2.2.12 and later</em></p>
      
              <p>When set, <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> will not save an otherwise
              cacheable response.  This environment variable does not influence
              whether a response already in the cache will be served for the current
              request.</p>
      
          
      
          <h3><a name="nokeepalive" id="nokeepalive">nokeepalive</a></h3>
              
      
              <p>This disables <code class="directive"><a href="./mod/core.html#keepalive">KeepAlive</a></code>
              when set.</p>
      
          
      
          <h3><a name="prefer-language" id="prefer-language">prefer-language</a></h3>
      
              <p>This influences <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>'s behaviour. If
              it contains a language tag (such as <code>en</code>, <code>ja</code>
              or <code>x-klingon</code>), <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> tries
              to deliver a variant with that language. If there's no such variant,
              the normal <a href="content-negotiation.html">negotiation</a> process
              applies.</p>
      
          
      
          <h3><a name="redirect-carefully" id="redirect-carefully">redirect-carefully</a></h3>
              
      
              <p>This forces the server to be more careful when sending a redirect
              to the client.  This is typically used when a client has a known
              problem handling redirects.  This was originally implemented as a
              result of a problem with Microsoft's WebFolders software which has
              a problem handling redirects on directory resources via DAV
              methods.</p>
      
          
      
         <h3><a name="suppress-error-charset" id="suppress-error-charset">suppress-error-charset</a></h3>
             
      
          <p><em>Available in versions after 2.0.54</em></p>
      
          <p>When Apache issues a redirect in response to a client request,
          the response includes some actual text to be displayed in case
          the client can't (or doesn't) automatically follow the redirection.
          Apache ordinarily labels this text according to the character set
          which it uses, which is ISO-8859-1.</p>
      
          <p> However, if the redirection is to a page that uses a different
          character set, some broken browser versions will try to use the
          character set from the redirection text rather than the actual page.
          This can result in Greek, for instance, being incorrectly rendered.</p>
      
          <p>Setting this environment variable causes Apache to omit the character
          set for the redirection text, and these broken browsers will then correctly
          use that of the destination page.</p>
      
          <div class="warning">
            <h3>Security note</h3>
      
            <p>Sending error pages without a specified character set may
            allow a cross-site-scripting attack for existing browsers (MSIE)
            which do not follow the HTTP/1.1 specification and attempt to
            "guess" the character set from the content.  Such browsers can
            be easily fooled into using the UTF-7 character set, and UTF-7
            content from input data (such as the request-URI) will not be
            escaped by the usual escaping mechanisms designed to prevent
            cross-site-scripting attacks.</p>
          </div>
      
         
      
         <h3><a name="proxy" id="proxy">force-proxy-request-1.0, proxy-nokeepalive, proxy-sendchunked,
         proxy-sendcl, proxy-chain-auth, proxy-interim-response, proxy-initial-not-pooled</a></h3>
      
         <p>These directives alter the protocol behavior of
         <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>.  See the <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> and <code class="module"><a href="./mod/mod_proxy_http.html">mod_proxy_http</a></code>
         documentation for more details.</p>
         
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Examples</a></h2>
          
      
          <h3><a name="fixheader" id="fixheader">Passing broken headers to CGI scripts</a></h3>
            
      
            <p>Starting with version 2.4, Apache is more strict about how HTTP
            headers are converted to environment variables in <code class="module"><a href="./mod/mod_cgi.html">mod_cgi
            </a></code> and other modules:  Previously any invalid characters
            in header names were simply translated to underscores.  This allowed
            for some potential cross-site-scripting attacks via header injection
            (see <a href="http://events.ccc.de/congress/2007/Fahrplan/events/2212.en.html">
            Unusual Web Bugs</a>, slide 19/20).</p>
      
            <p>If you have to support a client which sends broken headers and
            which can't be fixed, a simple workaround involving <code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif
            </a></code> and <code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code> allows you to still accept
            these headers:</p>
      
      <pre class="prettyprint lang-config"># 
      # The following works around a client sending a broken Accept_Encoding
      # header.
      #
      SetEnvIfNoCase ^Accept.Encoding$ ^(.*)$ fix_accept_encoding=$1
      RequestHeader set Accept-Encoding %{fix_accept_encoding}e env=fix_accept_encoding</pre>
      
      
          
      
          <h3><a name="misbehaving" id="misbehaving">Changing protocol behavior with misbehaving clients</a></h3>
              
      
              <p>Earlier versions recommended that the following lines be included in
              httpd.conf to deal with known client problems.  Since the affected clients
              are no longer seen in the wild, this configuration is likely no-longer
              necessary.</p>
      <pre class="prettyprint lang-config">#
      # The following directives modify normal HTTP response behavior.
      # The first directive disables keepalive for Netscape 2.x and browsers that
      # spoof it. There are known problems with these browser implementations.
      # The second directive is for Microsoft Internet Explorer 4.0b2
      # which has a broken HTTP/1.1 implementation and does not properly
      # support keepalive when it is used on 301 or 302 (redirect) responses.
      #
      BrowserMatch "Mozilla/2" nokeepalive
      BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
      
      #
      # The following directive disables HTTP/1.1 responses to browsers which
      # are in violation of the HTTP/1.0 spec by not being able to understand a
      # basic 1.1 response.
      #
      BrowserMatch "RealPlayer 4\.0" force-response-1.0
      BrowserMatch "Java/1\.0" force-response-1.0
      BrowserMatch "JDK/1\.0" force-response-1.0</pre>
      
      
          
          <h3><a name="no-img-log" id="no-img-log">Do not log requests for images in the access log</a></h3>
              
      
              <p>This example keeps requests for images from appearing in the
              access log. It can be easily modified to prevent logging of
              particular directories, or to prevent logging of requests
              coming from particular hosts.</p>
      
              <pre class="prettyprint lang-config">SetEnvIf Request_URI \.gif image-request
      SetEnvIf Request_URI \.jpg image-request
      SetEnvIf Request_URI \.png image-request
      CustomLog logs/access_log common env=!image-request</pre>
      
      
          
          <h3><a name="image-theft" id="image-theft">Prevent "Image Theft"</a></h3>
              
      
              <p>This example shows how to keep people not on your server
              from using images on your server as inline-images on their
              pages. This is not a recommended configuration, but it can work
              in limited circumstances. We assume that all your images are in
              a directory called <code>/web/images</code>.</p>
      
              <pre class="prettyprint lang-config">SetEnvIf Referer "^http://www\.example\.com/" local_referal
      # Allow browsers that do not send Referer info
      SetEnvIf Referer "^$" local_referal
      &lt;Directory "/web/images"&gt;
          Require env local_referal
      &lt;/Directory&gt;</pre>
      
      
              <p>For more information about this technique, see the
              "<a href="http://www.serverwatch.com/tutorials/article.php/1132731">Keeping Your Images from Adorning Other Sites</a>"
              tutorial on ServerWatch.</p>
          
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/env.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/env.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/env.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/env.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/env.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/env.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/upgrading.html.en����������������������������������������������������������0000644�0000000�0000050�00000073770�13412755316�016735� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Upgrading to 2.4 from 2.2 - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Upgrading to 2.4 from 2.2</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/upgrading.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/upgrading.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
        <p>In order to assist folks upgrading, we maintain a document
        describing information critical to existing Apache HTTP Server users. These
        are intended to be brief notes, and you should be able to find
        more information in either the <a href="new_features_2_4.html">New Features</a> document, or in
        the <code>src/CHANGES</code> file.  Application and module developers
        can find a summary of API changes in the <a href="developer/new_api_2_4.html">API updates</a> overview.</p>
      
        <p>This document describes changes in server behavior that might
        require you to change your configuration or how you use the server
        in order to continue using 2.4 as you are currently using 2.2.
        To take advantage of new features in 2.4, see the New Features
        document.</p>
      
        <p>This document describes only the changes from 2.2 to 2.4.  If you
        are upgrading from version 2.0, you should also consult the <a href="http://httpd.apache.org/docs/2.2/upgrading.html">2.0 to 2.2
        upgrading document.</a></p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#compile-time">Compile-Time Configuration Changes</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#run-time">Run-Time Configuration Changes</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#misc">Misc Changes</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#third-party">Third Party Modules</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#commonproblems">Common problems when upgrading</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="new_features_2_4.html">Overview of new features in
        Apache HTTP Server 2.4</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="compile-time" id="compile-time">Compile-Time Configuration Changes</a></h2>
          
      
          <p>The compilation process is very similar to the one used in
          version 2.2.  Your old <code>configure</code> command line (as
          found in <code>build/config.nice</code> in the installed server
          directory) can be used in most cases.  There are some changes in
          the default settings.  Some details of changes:</p>
      
          <ul>
            <li>These modules have been removed: mod_authn_default,
            mod_authz_default, mod_mem_cache.  If you were using
            mod_mem_cache in 2.2, look at <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code> in
            2.4.</li>
      
            <li>All load balancing implementations have been moved to
            individual, self-contained mod_proxy submodules, e.g.
            <code class="module"><a href="./mod/mod_lbmethod_bybusyness.html">mod_lbmethod_bybusyness</a></code>.  You might need
            to build and load any of these that your configuration
            uses.</li>
      
            <li>Platform support has been removed for BeOS, TPF, and
            even older platforms such as A/UX, Next, and Tandem.  These were
            believed to be broken anyway.</li>
      
            <li>configure: dynamic modules (DSO) are built by default</li>
      
            <li>configure: By default, only a basic set of modules is loaded. The
            other <code class="directive">LoadModule</code> directives are commented
            out in the configuration file.</li>
      
            <li>configure: the "most" module set gets built by default</li>
      
            <li>configure: the "reallyall" module set adds developer modules
            to the "all" set</li>
          </ul>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="run-time" id="run-time">Run-Time Configuration Changes</a></h2>
          
          <p>There have been significant changes in authorization configuration,
          and other minor configuration changes, that could require changes to your 2.2
          configuration files before using them for 2.4.</p>
      
          <h3><a name="authz" id="authz">Authorization</a></h3>
            
      
            <p>Any configuration file that uses authorization will likely
            need changes.</p>
      
          <p>You should review the <a href="howto/auth.html">Authentication,
          Authorization and Access Control Howto</a>, especially the section
          <a href="howto/auth.html#beyond">Beyond just authorization</a>
          which explains the new mechanisms for controlling the order in
          which the authorization directives are applied.</p>
      
          <p>Directives that control how authorization modules respond when they don't match
          the authenticated user have been removed: This includes 
          AuthzLDAPAuthoritative, AuthzDBDAuthoritative, AuthzDBMAuthoritative, 
          AuthzGroupFileAuthoritative, AuthzUserAuthoritative,
          and AuthzOwnerAuthoritative.   These directives have been replaced by the
          more expressive <code class="directive"><a href="./mod/mod_authz_core.html#requireany">RequireAny</a></code>, 
          <code class="directive"><a href="./mod/mod_authz_core.html#requirenone">RequireNone</a></code>, and
          <code class="directive"><a href="./mod/mod_authz_core.html#requireall">RequireAll</a></code>.</p>
      
          <p>If you use <code class="module"><a href="./mod/mod_authz_dbm.html">mod_authz_dbm</a></code>, you must port your 
          configuration to use <code>Require dbm-group ...</code> in place
          of <code>Require group ...</code>.</p>
      
          <h4><a name="access" id="access">Access control</a></h4>
            
      
            <p>In 2.2, access control based on client hostname, IP address,
            and other characteristics of client requests was done using the
            directives <code class="directive"><a href="./mod/mod_access_compat.html#order">Order</a></code>, <code class="directive"><a href="./mod/mod_access_compat.html#allow">Allow</a></code>, <code class="directive"><a href="./mod/mod_access_compat.html#deny">Deny</a></code>, and <code class="directive"><a href="./mod/mod_access_compat.html#satisfy">Satisfy</a></code>.</p>
      
            <p>In 2.4, such access control is done in the same way as other
            authorization checks, using the new module
            <code class="module"><a href="./mod/mod_authz_host.html">mod_authz_host</a></code>.  The old access control idioms
            should be replaced by the new authentication mechanisms,
            although for compatibility with old configurations, the new
            module <code class="module"><a href="./mod/mod_access_compat.html">mod_access_compat</a></code> is provided.</p>
      
            <div class="note"><h3>Mixing old and new directives</h3>
            <p>Mixing old directives like <code class="directive"><a href="./mod/mod_access_compat.html#order">Order</a></code>, <code class="directive"><a href="./mod/mod_access_compat.html#allow">Allow</a></code> or <code class="directive"><a href="./mod/mod_access_compat.html#deny">Deny</a></code> with new ones like
            <code class="directive"><a href="./mod/mod_authz_core.html#require">Require</a></code> is technically possible 
            but discouraged. <code class="module"><a href="./mod/mod_access_compat.html">mod_access_compat</a></code> was created to support 
            configurations containing only old directives to facilitate the 2.4 upgrade. 
            Please check the examples below to get a better idea about issues that might arise.
            </p>
            </div>
      
            <p>Here are some examples of old and new ways to do the same
            access control.</p>
      
            <p>In this example, there is no authentication and all requests are denied.</p>
            <div class="example"><h3>2.2 configuration:</h3><pre class="prettyprint lang-config">Order deny,allow
      Deny from all</pre>
      </div>
            <div class="example"><h3>2.4 configuration:</h3><pre class="prettyprint lang-config">Require all denied</pre>
      </div>
      
            <p>In this example, there is no authentication and all requests are allowed.</p>
            <div class="example"><h3>2.2 configuration:</h3><pre class="prettyprint lang-config">Order allow,deny
      Allow from all</pre>
      </div>
            <div class="example"><h3>2.4 configuration:</h3><pre class="prettyprint lang-config">Require all granted</pre>
      </div>
      
            <p>In the following example, there is no authentication and all hosts in the example.org domain
            are allowed access; all other hosts are denied access.</p>
      
            <div class="example"><h3>2.2 configuration:</h3><pre class="prettyprint lang-config">Order Deny,Allow
      Deny from all
      Allow from example.org</pre>
      </div>
            <div class="example"><h3>2.4 configuration:</h3><pre class="prettyprint lang-config">Require host example.org</pre>
      </div>
      
            <p>In the following example, mixing old and new directives leads to 
            unexpected results.</p>
       
            <div class="example"><h3>Mixing old and new directives: NOT WORKING AS EXPECTED</h3><pre class="prettyprint lang-config">DocumentRoot "/var/www/html"
      
      &lt;Directory "/"&gt;
          AllowOverride None
          Order deny,allow
          Deny from all
      &lt;/Directory&gt;
      
      &lt;Location "/server-status"&gt;
          SetHandler server-status
          Require local
      &lt;/Location&gt;
      
      access.log - GET /server-status 403 127.0.0.1
      error.log - AH01797: client denied by server configuration: /var/www/html/server-status</pre>
      </div>
            <p>Why httpd denies access to servers-status even if the configuration seems to allow it?
              Because <code class="module"><a href="./mod/mod_access_compat.html">mod_access_compat</a></code> directives take precedence
              over the <code class="module"><a href="./mod/mod_authz_host.html">mod_authz_host</a></code> one in this configuration 
              <a href="sections.html#merging">merge</a> scenario.</p>
      
            <p>This example conversely works as expected:</p>
      
            <div class="example"><h3>Mixing old and new directives: WORKING AS EXPECTED</h3><pre class="prettyprint lang-config">DocumentRoot "/var/www/html"
      
      &lt;Directory "/"&gt;
          AllowOverride None
          Require all denied
      &lt;/Directory&gt;
      
      &lt;Location "/server-status"&gt;
          SetHandler server-status
          Order deny,allow
          Deny from all
          Allow From 127.0.0.1
      &lt;/Location&gt;
      
      access.log - GET /server-status 200 127.0.0.1</pre>
      </div> 
            <p>So even if mixing configuration is still
              possible, please try to avoid it when upgrading: either keep old directives and then migrate
              to the new ones on a later stage or just migrate everything in bulk.  
            </p>
          
      
           <p>In many configurations with authentication, where the value of the
           <code class="directive">Satisfy</code> was the default of <em>ALL</em>, snippets
           that simply disabled host-based access control are omitted:</p>
      
            <div class="example"><h3>2.2 configuration:</h3><pre class="prettyprint lang-config"># 2.2 config that disables host-based access control and uses only authentication
      Order Deny,Allow
      Allow from all
      AuthType Basic
      AuthBasicProvider file
      AuthUserFile /example.com/conf/users.passwd
      AuthName secure
      Require valid-user</pre>
      </div>
            <div class="example"><h3>2.4 configuration:</h3><pre class="prettyprint lang-config"># No replacement of disabling host-based access control needed
      AuthType Basic
      AuthBasicProvider file
      AuthUserFile /example.com/conf/users.passwd
      AuthName secure
      Require valid-user</pre>
      </div>
      
           <p>In configurations where both authentication and access control were meaningfully combined, the 
              access control directives should be migrated. This example allows requests meeting <em>both</em> criteria:</p>
            <div class="example"><h3>2.2 configuration:</h3><pre class="prettyprint lang-config">Order allow,deny
      Deny from all
      # Satisfy ALL is the default
      Satisfy ALL
      Allow from 127.0.0.1
      AuthType Basic
      AuthBasicProvider file
      AuthUserFile /example.com/conf/users.passwd
      AuthName secure
      Require valid-user</pre>
      </div>
            <div class="example"><h3>2.4 configuration:</h3><pre class="prettyprint lang-config">AuthType Basic
      AuthBasicProvider file
      AuthUserFile /example.com/conf/users.passwd
      AuthName secure
      &lt;RequireAll&gt;
        Require valid-user
        Require ip 127.0.0.1
      &lt;/RequireAll&gt;</pre>
      </div>
      
           <p>In configurations where both authentication and access control were meaningfully combined, the 
              access control directives should be migrated. This example allows requests meeting <em>either</em> criteria:</p>
            <div class="example"><h3>2.2 configuration:</h3><pre class="prettyprint lang-config">Order allow,deny
      Deny from all
      Satisfy any
      Allow from 127.0.0.1
      AuthType Basic
      AuthBasicProvider file
      AuthUserFile /example.com/conf/users.passwd
      AuthName secure
      Require valid-user</pre>
      </div>
            <div class="example"><h3>2.4 configuration:</h3><pre class="prettyprint lang-config">AuthType Basic
      AuthBasicProvider file
      AuthUserFile /example.com/conf/users.passwd
      AuthName secure
      # Implicitly &lt;RequireAny&gt;
      Require valid-user
      Require ip 127.0.0.1</pre>
      </div>
      
          
      
          <h3><a name="config" id="config">Other configuration changes</a></h3>
            
      
            <p>Some other small adjustments may be necessary for particular
            configurations as discussed below.</p>
      
            <ul>
              <li><code class="directive">MaxRequestsPerChild</code> has been renamed to
              <code class="directive"><a href="./mod/mpm_common.html#maxconnectionsperchild">MaxConnectionsPerChild</a></code>,
              describes more accurately what it does. The old name is still
              supported.</li>
      
              <li><code class="directive">MaxClients</code> has been renamed to
              <code class="directive"><a href="./mod/mpm_common.html#maxrequestworkers">MaxRequestWorkers</a></code>,
              which describes more accurately what it does. For async MPMs, like
              <code class="module"><a href="./mod/event.html">event</a></code>, the maximum number of clients is not
              equivalent than the number of worker threads. The old name is still
              supported.</li>
      
              <li>The <code class="directive"><a href="./mod/core.html#defaulttype">DefaultType</a></code>
              directive no longer has any effect, other than to emit a
              warning if it's used with any value other than
              <code>none</code>.  You need to use other configuration
              settings to replace it in 2.4.
              </li>
      
              <li><code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> now
              defaults to <code>None</code>.</li>
      
              <li><code class="directive"><a href="./mod/core.html#enablesendfile">EnableSendfile</a></code> now
              defaults to Off.</li>
      
              <li><code class="directive"><a href="./mod/core.html#fileetag">FileETag</a></code> now
              defaults to "MTime Size" (without INode).</li>
      
              <li><code class="module"><a href="./mod/mod_dav_fs.html">mod_dav_fs</a></code>: The format of the <code class="directive"><a href="./mod/mod_dav_fs.html#davlockdb">DavLockDB</a></code> file has changed for
              systems with inodes.  The old <code class="directive"><a href="./mod/mod_dav_fs.html#davlockdb">DavLockDB</a></code> file must be deleted on
              upgrade.
              </li>
      
              <li><code class="directive"><a href="./mod/core.html#keepalive">KeepAlive</a></code> only
              accepts values of <code>On</code> or <code>Off</code>.
              Previously, any value other than "Off" or "0" was treated as
              "On".</li>
      
              <li>Directives AcceptMutex, LockFile, RewriteLock, SSLMutex,
              SSLStaplingMutex, and WatchdogMutexPath have been replaced
              with a single <code class="directive"><a href="./mod/core.html#mutex">Mutex</a></code>
              directive.  You will need to evaluate any use of these removed
              directives in your 2.2 configuration to determine if they can
              just be deleted or will need to be replaced using <code class="directive"><a href="./mod/core.html#mutex">Mutex</a></code>.</li>
      
              <li><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>: <code class="directive"><a href="./mod/mod_cache.html#cacheignoreurlsessionidentifiers">CacheIgnoreURLSessionIdentifiers</a></code>
              now does an exact match against the query string instead of a
              partial match.  If your configuration was using partial
              strings, e.g. using <code>sessionid</code> to match
              <code>/someapplication/image.gif;jsessionid=123456789</code>,
              then you will need to change to the full string
              <code>jsessionid</code>.
              </li>
      
              <li><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>: The second parameter to 
              <code class="directive"><a href="./mod/mod_cache.html#cacheenable">CacheEnable</a></code> only
              matches forward proxy content if it begins with the correct
              protocol. In 2.2 and earlier, a parameter of '/' matched all
              content.</li>
      
              <li><code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code>: <code class="directive"><a href="./mod/mod_ldap.html#ldaptrustedclientcert">LDAPTrustedClientCert</a></code> is now
              consistently a per-directory setting only.  If you use this
              directive, review your configuration to make sure it is
              present in all the necessary directory contexts.</li>
      
              <li><code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code>: <code class="directive"><a href="./mod/mod_filter.html#filterprovider">FilterProvider</a></code> syntax has changed and
              now uses a boolean expression to determine if a filter is applied.
              </li>
      
              <li><code class="module"><a href="./mod/mod_include.html">mod_include</a></code>:
                  <ul>
                  <li>The <code>#if expr</code> element now uses the new <a href="expr.html">expression parser</a>. The old syntax can be
                  restored with the new directive <code class="directive"><a href="./mod/mod_include.html#ssilegacyexprparser">SSILegacyExprParser</a></code>.
                  </li>
                  <li>An SSI* config directive in directory scope no longer causes
                  all other per-directory SSI* directives to be reset to their
                  default values.</li>
                  </ul>
              </li>
      
              <li><code class="module"><a href="./mod/mod_charset_lite.html">mod_charset_lite</a></code>: The <code>DebugLevel</code>
              option has been removed in favour of per-module <code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code> configuration.
              </li>
      
              <li><code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code>: The <code>DebugLevel</code>
              option has been removed in favour of per-module <code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code> configuration.
              </li>
      
              <li><code class="module"><a href="./mod/mod_proxy_scgi.html">mod_proxy_scgi</a></code>: The default setting for
              <code>PATH_INFO</code> has changed from httpd 2.2, and
              some web applications will no longer operate properly with
              the new <code>PATH_INFO</code> setting.  The previous setting
              can be restored by configuring the <code>proxy-scgi-pathinfo</code>
              variable.</li>
      
              <li><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code>: CRL based revocation checking
              now needs to be explicitly configured through <code class="directive"><a href="./mod/mod_ssl.html#sslcarevocationcheck">SSLCARevocationCheck</a></code>.
              </li>
      
              <li><code class="module"><a href="./mod/mod_substitute.html">mod_substitute</a></code>: The maximum line length is now
              limited to 1MB.
              </li>
      
              <li><code class="module"><a href="./mod/mod_reqtimeout.html">mod_reqtimeout</a></code>: If the module is loaded, it
              will now set some default timeouts.</li>
      
              <li><code class="module"><a href="./mod/mod_dumpio.html">mod_dumpio</a></code>: <code class="directive">DumpIOLogLevel</code>
              is no longer supported.  Data is always logged at <code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code> <code>trace7</code>.</li>
      
              <li>On Unix platforms, piped logging commands configured using
              either <code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code> or
              <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> were invoked using
              <code>/bin/sh -c</code> in 2.2 and earlier.  In 2.4 and later,
              piped logging commands are executed directly.  To restore the
              old behaviour, see the <a href="logs.html#piped">piped logging
              documentation</a>.</li>
      
            </ul>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="misc" id="misc">Misc Changes</a></h2>
          
      
          <ul>
            <li><code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code>: will now extract titles and
            display descriptions for .xhtml files, which were previously
            ignored.</li>
      
            <li><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code>: The default format of the <code>*_DN</code>
            variables has changed. The old format can still be used with the new
            <code>LegacyDNStringFormat</code> argument to <code class="directive"><a href="./mod/mod_ssl.html#ssloptions">SSLOptions</a></code>. The SSLv2 protocol is
            no longer supported. <code class="directive"><a href="./mod/mod_ssl.html#sslproxycheckpeercn">SSLProxyCheckPeerCN
      	  </a></code> and <code class="directive"><a href="./mod/mod_ssl.html#sslproxycheckpeerexpire">SSLProxyCheckPeerExpire
      	  </a></code> now default to On, causing proxy requests to HTTPS hosts
      	  with bad or outdated certificates to fail with a 502 status code (Bad 
      	  gateway)</li>
      
            <li><code class="program"><a href="./programs/htpasswd.html">htpasswd</a></code> now uses MD5 hash by default on
            all platforms.</li>
      
            <li>The <code class="directive"><a href="./mod/core.html#namevirtualhost">NameVirtualHost</a></code>
            directive no longer has any effect, other than to emit a
            warning.  Any address/port combination appearing in multiple
            virtual hosts is implicitly treated as a name-based virtual host.
            </li>
      
            <li><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code> will now skip compression if it knows
            that the size overhead added by the compression is larger than the data
            to be compressed.
            </li>
      
            <li>Multi-language error documents from 2.2.x may not work unless
            they are adjusted to the new syntax of <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>'s
            <code>#if expr=</code> element or the directive
            <code class="directive"><a href="./mod/mod_include.html#ssilegacyexprparser">SSILegacyExprParser</a></code> is
            enabled for the directory containing the error documents.
            </li>
      
            <li>The functionality provided by <code>mod_authn_alias</code>
            in previous versions (i.e., the <code class="directive"><a href="./mod/mod_authn_core.html#authnprovideralias">AuthnProviderAlias</a></code> directive)
            has been moved into <code class="module"><a href="./mod/mod_authn_core.html">mod_authn_core</a></code>.  
            </li>
      
            <li>The RewriteLog and RewriteLogLevel directives have been removed.
            This functionality is now provided by configuring the appropriate
            level of logging for the <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> module using
            the <code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code> directive.
            See also the <a href="mod/mod_rewrite.html#logging">mod_rewrite logging</a>
            section.</li>
      
          </ul>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="third-party" id="third-party">Third Party Modules</a></h2>
          
          <p>All modules must be recompiled for 2.4 before being loaded.</p>
      
          <p>Many third-party modules designed for version 2.2 will
          otherwise work unchanged with the Apache HTTP Server version 2.4.
          Some will require changes; see the <a href="developer/new_api_2_4.html">API
          update</a> overview.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="commonproblems" id="commonproblems">Common problems when upgrading</a></h2>
          
          <ul><li>Startup errors:
          <ul>
            <li><code>Invalid command 'User', perhaps misspelled or defined by a module not included in the server configuration</code> - load module <code class="module"><a href="./mod/mod_unixd.html">mod_unixd</a></code></li>
            <li><code>Invalid command 'Require', perhaps misspelled or defined by a module not included in the server configuration</code>, or
      <code>Invalid command 'Order', perhaps misspelled or defined by a module not included in the server configuration</code>
       - load module <code class="module"><a href="./mod/mod_access_compat.html">mod_access_compat</a></code>, or update configuration to 2.4 authorization directives.</li>
            <li><code>Ignoring deprecated use of DefaultType in line NN of /path/to/httpd.conf</code> - remove <code class="directive"><a href="./mod/core.html#defaulttype">DefaultType</a></code>
            and replace with other configuration settings.</li>
            <li><code>Invalid command 'AddOutputFilterByType', perhaps misspelled 
            or defined by a module not included in the server configuration
            </code> - <code class="directive"><a href="./mod/mod_filter.html#addoutputfilterbytype">AddOutputFilterByType</a></code> 
            has moved from the core to mod_filter, which must be loaded.</li>
          </ul></li>
          <li>Errors serving requests:
          <ul>
            <li><code>configuration error:  couldn't check user: /path</code> -
            load module <code class="module"><a href="./mod/mod_authn_core.html">mod_authn_core</a></code>.</li>
            <li><code>.htaccess</code> files aren't being processed - Check for an
            appropriate <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> directive;
            the default changed to <code>None</code> in 2.4.</li>
          </ul>
          </li>
      </ul>
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/upgrading.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/upgrading.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/upgrading.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������httpd-2.4.41/docs/manual/glossary.html.en�����������������������������������������������������������0000644�0000000�0000050�00000074024�13412755316�016611� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Glossary - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Glossary</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./de/glossary.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/glossary.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/glossary.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/glossary.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/glossary.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/glossary.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/glossary.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>This glossary defines some of the common terminology related to Apache in
            particular, and web serving in general. More information on each concept
            is provided in the links.</p>
        </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="definitions" id="definitions">Definitions</a></h2>
      
        <dl>
          <dt><a name="accesscontrol" id="accesscontrol">Access Control</a></dt>
          <dd>The restriction of access to network realms. In an Apache context
            usually the restriction of access to certain <em>URLs</em>.<br /> See:  <a href="howto/auth.html">Authentication, Authorization, and Access
            Control</a>
          </dd>
      
          <dt><a name="algorithm" id="algorithm">Algorithm</a></dt>
          <dd>An unambiguous formula or set of rules for solving a problem in a finite
            number of steps. Algorithms for encryption are usually called
            <dfn>Ciphers</dfn>.
          </dd>
      
          <dt><a name="apacheextensiontool" id="apacheextensiontool">APache
              eXtension Tool</a> <a name="apxs" id="apxs">(apxs)</a></dt>
          <dd>A perl script that aids in compiling <a class="glossarylink" href="./glossary.html#module" title="see glossary">module</a> sources into Dynamic Shared Objects
            (<a class="glossarylink" href="./glossary.html#dso" title="see glossary">DSO</a>s) and helps install them in the
            Apache Web server.<br />
            See: Manual Page: <code class="program"><a href="./programs/apxs.html">apxs</a></code>
          </dd>
      
          <dt><a name="apacheportableruntime" id="apacheportableruntime">Apache Portable Runtime</a> <a name="apr" id="apr">(APR)</a></dt>
          <dd>A set of libraries providing many of the basic interfaces
            between the server and the operating system.  APR is developed
            parallel to the Apache HTTP Server as an independent project.<br />
            See: <a href="http://apr.apache.org/">Apache Portable Runtime
            Project</a>
          </dd>
      
          <dt><a name="authentication" id="authentication">Authentication</a></dt>
          <dd>The positive identification of a network entity such as a server, a
            client, or a user.<br />
            See: <a href="howto/auth.html">Authentication, Authorization, and Access
            Control</a>
          </dd>
      
          <dt><a name="certificate" id="certificate">Certificate</a></dt>
          <dd>A data record used for authenticating network entities such
            as a server or a client. A certificate contains X.509 information pieces
            about its owner (called the subject) and the signing <a class="glossarylink" href="./glossary.html#certificationauthority" title="see glossary">Certification Authority</a> (called
            the issuer), plus the owner's <a class="glossarylink" href="./glossary.html#publickey" title="see glossary">public
            key</a> and the
            signature made by the CA. Network entities verify these signatures
            using CA certificates.<br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="certificatsigningrequest" id="certificatsigningrequest">Certificate Signing Request</a>
            <a name="csr" id="csr">(CSR)</a></dt>
          <dd>An unsigned <a class="glossarylink" href="./glossary.html#certificate" title="see glossary">certificate</a> for
            submission to a <a class="glossarylink" href="./glossary.html#certificationauthority" title="see glossary">Certification
            Authority</a>, which signs it with the <a class="glossarylink" href="./glossary.html#privatekey" title="see glossary">Private Key</a> of their CA
            <em>Certificate</em>. Once the CSR is signed, it becomes a real
            certificate.<br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="certificationauthority" id="certificationauthority">Certification Authority</a>
            <a name="ca" id="ca">(CA)</a></dt>
          <dd>A trusted third party whose purpose is to sign certificates for network
            entities it has authenticated using secure means. Other network entities
            can check the signature to verify that a CA has authenticated the bearer
            of a certificate.<br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="cipher" id="cipher">Cipher</a></dt>
          <dd>An algorithm or system for data encryption. Examples are DES, IDEA, RC4,
            etc.<br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="ciphertext" id="ciphertext">Ciphertext</a></dt>
          <dd>The result after <a class="glossarylink" href="./glossary.html#plaintext" title="see glossary">Plaintext</a> is
            passed through a <a class="glossarylink" href="./glossary.html#cipher" title="see glossary">Cipher</a>.<br /> See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="commongatewayinterface" id="commongatewayinterface">Common
              Gateway Interface</a> <a name="cgi" id="cgi">(CGI)</a></dt>
          <dd>A standard definition for an interface between a web server and an
            external program that allows the external program to service requests.
            There is an <a href="http://www.ietf.org/rfc/rfc3875">Informational
            RFC</a> which covers the specifics.<br />
            See: <a href="howto/cgi.html">Dynamic Content with CGI</a>
          </dd>
      
          <dt><a name="configurationdirective" id="configurationdirective">Configuration Directive</a></dt>
          <dd>See: <a class="glossarylink" href="./glossary.html#directive" title="see glossary">Directive</a></dd>
      
          <dt><a name="configurationfile" id="configurationfile">Configuration
              File</a></dt>
          <dd>A text file containing <a class="glossarylink" href="./glossary.html#directive" title="see glossary">Directives</a>
            that control the configuration of Apache.<br />
            See: <a href="configuring.html">Configuration Files</a>
          </dd>
      
          <dt><a name="connect" id="connect">CONNECT</a></dt>
          <dd>An HTTP <a class="glossarylink" href="./glossary.html#method" title="see glossary">method</a> for proxying raw data
            channels over HTTP. It can be used to encapsulate other protocols, such as
            the SSL protocol.
          </dd>
      
          <dt><a name="context" id="context">Context</a></dt>
          <dd>An area in the <a class="glossarylink" href="./glossary.html#configurationfile" title="see glossary">configuration
            files</a> where certain types of <a class="glossarylink" href="./glossary.html#directive" title="see glossary">directives</a> are allowed.<br />
            See: <a href="mod/directive-dict.html#Context">Terms Used to Describe
            Apache Directives</a>
          </dd>
      
          <dt><a name="digitalsignature" id="digitalsignature">Digital
              Signature</a></dt>
          <dd>An encrypted text block that validates a certificate or other file. A
            <a class="glossarylink" href="./glossary.html#certificationauthority" title="see glossary">Certification Authority</a>
            creates a signature by generating a hash of the <em>Public Key</em>
            embedded in a <em>Certificate</em>, then encrypting the hash with its own
            <em>Private Key</em>. Only the CA's public key can decrypt the signature,
            verifying that the CA has authenticated the network entity that owns the
            <em>Certificate</em>.<br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="directive" id="directive">Directive</a></dt>
          <dd>A configuration command that controls one or more aspects of Apache's
            behavior.  Directives are placed in the <a class="glossarylink" href="./glossary.html#configurationfile" title="see glossary">Configuration File</a><br />
          See: <a href="mod/directives.html">Directive Index</a>
          </dd>
      
          <dt><a name="dynamicsharedobject" id="dynamicsharedobject">Dynamic
              Shared Object</a> <a name="dso" id="dso">(DSO)</a></dt>
          <dd><a class="glossarylink" href="./glossary.html#module" title="see glossary">Modules</a> compiled separately from the
            Apache <code class="program"><a href="./programs/httpd.html">httpd</a></code> binary that can be loaded on-demand.<br />
            See: <a href="dso.html">Dynamic Shared Object Support</a>
          </dd>
      
          <dt><a name="environmentvariable" id="environmentvariable">Environment
              Variable</a> <a name="env-variable" id="env-variable">(env-variable)</a></dt>
          <dd>Named variables managed by the operating system shell and used to store
            information and communicate between programs.  Apache also contains
            internal variables that are referred to as environment variables, but are
            stored in internal Apache structures, rather than in the shell
            environment.<br />
            See: <a href="env.html">Environment Variables in Apache</a>
          </dd>
      
          <dt><a name="export-crippled" id="export-crippled">Export-Crippled</a></dt>
          <dd>Diminished in cryptographic strength (and security) in order to comply
            with the United States' Export Administration Regulations (EAR).
            Export-crippled cryptographic software is limited to a small key size,
            resulting in <em>Ciphertext</em> which usually can be decrypted by brute
            force.<br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="filter" id="filter">Filter</a></dt>
          <dd>A process that is applied to data that is sent or received by the
            server.  Input filters process data sent by the client to the server,
            while output filters process documents on the server before they are sent
            to the client.  For example, the <code>INCLUDES</code> output filter
            processes documents for <a class="glossarylink" href="./glossary.html#ssi" title="see glossary">Server Side
            Includes</a>.<br />
            See: <a href="filter.html">Filters</a>
          </dd>
      
          <dt><a name="fully-qualifieddomain-name" id="fully-qualifieddomain-name">Fully-Qualified Domain-Name</a>
            <a name="fqdn" id="fqdn">(FQDN)</a></dt>
          <dd>The unique name of a network entity, consisting of a hostname and a
            domain name that can resolve to an IP address. For example,
            <code>www</code> is a hostname, <code>example.com</code> is a domain name,
            and <code>www.example.com</code> is a fully-qualified domain name.
          </dd>
      
          <dt><a name="handler" id="handler">Handler</a></dt>
          <dd>An internal Apache representation of the action to be performed when a
            file is called. Generally, files have implicit handlers, based on the file
            type. Normally, all files are simply served by the server, but certain
            file types are "handled" separately.  For example, the
            <code>cgi-script</code> handler designates files to be processed as
            <a class="glossarylink" href="./glossary.html#cgi" title="see glossary">CGIs</a>.<br />
            See: <a href="handler.html">Apache's Handler Use</a>
          </dd>
      
          <dt><a name="hash" id="hash">Hash</a></dt>
          <dd>A mathematical one-way, irreversible algorithm generating a string with
            fixed-length from another string of any length. Different input strings
            will usually produce different hashes (depending on the hash function).
          </dd>
      
          <dt><a name="header" id="header">Header</a></dt>
          <dd>The part of the <a class="glossarylink" href="./glossary.html#http" title="see glossary">HTTP</a> request and
            response that is sent before the actual content, and that contains
            meta-information describing the content.
          </dd>
      
          <dt><a name="htaccess" id="htaccess">.htaccess</a></dt>
          <dd>A <a class="glossarylink" href="./glossary.html#configurationfile" title="see glossary">configuration file</a> that
            is placed inside the web tree and applies configuration <a class="glossarylink" href="./glossary.html#directive" title="see glossary">directives</a> to the directory where it is
            placed and all sub-directories.  Despite its name, this file can hold
            almost any type of directive, not just access-control directives.<br />
            See: <a href="configuring.html">Configuration Files</a>
          </dd>
      
          <dt><a name="httpd.conf" id="httpd.conf">httpd.conf</a></dt>
          <dd>The main Apache <a class="glossarylink" href="./glossary.html#configurationfile" title="see glossary">configuration
            file</a>.  The default location is
            <code>/usr/local/apache2/conf/httpd.conf</code>, but it may be moved using
            run-time or compile-time configuration.<br />
            See: <a href="configuring.html">Configuration Files</a>
          </dd>
      
          <dt><a name="hypertexttransferprotocol" id="hypertexttransferprotocol">HyperText Transfer Protocol</a>
            <a name="http" id="hhtp">(HTTP)</a></dt>
          <dd>The standard transmission protocol used on the World Wide Web.  Apache
            implements version 1.1 of the protocol, referred to as HTTP/1.1 and
            defined by <a href="http://ietf.org/rfc/rfc2616.txt">RFC 2616</a>.
          </dd>
      
          <dt><a name="https" id="https">HTTPS</a></dt>
          <dd>The HyperText Transfer Protocol (Secure), the standard encrypted
            communication mechanism on the World Wide Web. This is actually just HTTP
            over <a class="glossarylink" href="./glossary.html#ssl" title="see glossary">SSL</a>.<br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="method" id="method">Method</a></dt>
          <dd>In the context of <a class="glossarylink" href="./glossary.html#http" title="see glossary">HTTP</a>, an action to
            perform on a resource, specified on the request line by the client.  Some
            of the methods available in HTTP are <code>GET</code>, <code>POST</code>,
            and <code>PUT</code>.
          </dd>
      
          <dt><a name="messagedigest" id="messagedigest">Message Digest</a></dt>
          <dd>A hash of a message, which can be used to verify that the contents of
            the message have not been altered in transit.<br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="mime-type" id="mime-type">MIME-type</a></dt>
          <dd>A way to describe the kind of document being transmitted.  Its name
            comes from that fact that its format is borrowed from the Multipurpose
            Internet Mail Extensions.  It consists of a major type and a minor type,
            separated by a slash.  Some examples are <code>text/html</code>,
            <code>image/gif</code>, and <code>application/octet-stream</code>.  In
            HTTP, the MIME-type is transmitted in the <code>Content-Type</code>
            <a class="glossarylink" href="./glossary.html#header" title="see glossary">header</a>.<br />
            See: <a href="mod/mod_mime.html">mod_mime</a>
          </dd>
      
          <dt><a name="module" id="module">Module</a></dt>
          <dd>An independent part of a program.  Much of Apache's functionality is
            contained in modules that you can choose to include or exclude.  Modules
            that are compiled into the Apache <code class="program"><a href="./programs/httpd.html">httpd</a></code> binary are
            called <dfn>static modules</dfn>, while modules that are stored
            separately and can be optionally loaded at run-time are called
            <dfn>dynamic modules</dfn> or <a class="glossarylink" href="./glossary.html#dso" title="see glossary">DSOs</a>.
            Modules that are included by default
            are called <dfn>base modules</dfn>. Many modules are available for Apache
            that are not distributed as part of the Apache HTTP Server <a class="glossarylink" href="./glossary.html#tarball" title="see glossary">tarball</a>.  These are referred to as
            <dfn>third-party modules</dfn>.<br />
            See: <a href="mod/">Module Index</a>
          </dd>
      
          <dt><a name="modulemagicnumber" id="modulemagicnumber">Module Magic
            Number</a> (<a name="mmn" id="mmn">MMN</a>)</dt>
          <dd>Module Magic Number is a constant defined in the Apache source code that
            is associated with binary compatibility of modules. It is changed when
            internal Apache structures, function calls and other significant parts of
            API change in such a way that binary compatibility cannot be guaranteed
            any more. On MMN change, all third party modules have to be at least
            recompiled, sometimes even slightly changed in order to work with the new
            version of Apache.
          </dd>
      
          <dt><a name="openssl" id="openssl">OpenSSL</a></dt>
          <dd>The Open Source toolkit for SSL/TLS<br />
            See <a href="http://www.openssl.org/">http://www.openssl.org/</a>#
          </dd>
      
          <dt><a name="passphrase" id="passphrase">Pass Phrase</a></dt>
          <dd>The word or phrase that protects private key files. It prevents
            unauthorized users from encrypting them. Usually it's just the secret
            encryption/decryption key used for <a class="glossarylink" href="./glossary.html#cipher" title="see glossary">Ciphers</a>.<br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="plaintext" id="plaintext">Plaintext</a></dt>
          <dd>The unencrypted text.</dd>
      
          <dt><a name="privatekey" id="privatekey">Private Key</a></dt>
          <dd>The secret key in a <a class="glossarylink" href="./glossary.html#publickeycryptography" title="see glossary">Public Key
            Cryptography</a> system, used to decrypt incoming messages and
            sign outgoing ones.<br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="proxy" id="proxy">Proxy</a></dt>
          <dd>An intermediate server that sits between the client and the <em>origin
              server</em>.  It accepts requests from clients, transmits those requests
            on to the origin server, and then returns the response from the origin
            server to the client.  If several clients request the same content, the
            proxy can deliver that content from its cache, rather than requesting it
            from the origin server each time, thereby reducing response time.<br />
            See: <a href="mod/mod_proxy.html">mod_proxy</a>
          </dd>
      
          <dt><a name="publickey" id="publickey">Public Key</a></dt>
          <dd>The publicly available key in a <a class="glossarylink" href="./glossary.html#publickeycryptography" title="see glossary">Public Key Cryptography</a> system,
            used to encrypt messages bound for its owner and to decrypt signatures
            made by its owner.<br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="publickeycryptography" id="publickeycryptography">Public Key Cryptography</a></dt>
          <dd>The study and application of asymmetric encryption systems, which use
            one key for encryption and another for decryption. A corresponding pair of
            such keys constitutes a key pair. Also called Asymmetric Cryptography.
            <br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="regularexpression" id="regularexpression">Regular Expression</a>
            <a name="regex" id="regex">(Regex)</a></dt>
          <dd>A way of describing a pattern in text - for example, "all the words that
            begin with the letter A" or "every 10-digit phone number" or even "Every
            sentence with two commas in it, and no capital letter Q". Regular
            expressions are useful in Apache because they let you apply certain
            attributes against collections of files or resources in very flexible ways
            - for example, all .gif and .jpg files under any "images" directory could
            be written as "<code>/images/.*(jpg|gif)$</code>".  In places where
            regular expressions are used to replace strings, the special variables
            $1 ... $9 contain backreferences to the grouped parts (in parentheses) of
            the matched expression. The special variable $0 contains a backreference
            to the whole matched expression. To write a literal dollar sign in a
            replacement string, it can be escaped with a backslash. Historically, the
            variable &amp; could be used as alias for $0 in some places. This is no
            longer possible since version 2.3.6.  Apache uses Perl Compatible Regular
            Expressions provided by the <a href="http://www.pcre.org/">PCRE</a>
            library.  You can find more documentation about PCRE's regular expression
            syntax at that site, or at
            <a href="http://en.wikipedia.org/wiki/PCRE">Wikipedia</a>.
          </dd>
      
          <dt><a name="reverseproxy" id="reverseproxy">Reverse Proxy</a></dt>
          <dd>A <a class="glossarylink" href="./glossary.html#proxy" title="see glossary">proxy</a> server that appears to the client
            as if it is an <em>origin server</em>.  This is useful to hide the real
            origin server from the client for security reasons, or to load balance.
          </dd>
      
          <dt><a name="securesocketslayer" id="securesocketslayer">Secure Sockets
              Layer</a> <a name="ssl" id="ssl">(SSL)</a></dt>
          <dd>A protocol created by Netscape Communications Corporation for general
            communication authentication and encryption over TCP/IP networks.  The most
            popular usage is <em>HTTPS</em>, i.e. the HyperText Transfer Protocol (HTTP)
            over SSL.<br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="servernameindication" id="servernameindication">Server Name
              Indication</a> <a name="sni" id="sni">(SNI)</a></dt>
          <dd>An SSL function that allows passing the desired server
            hostname in the initial SSL handshake message, so that the web
            server can select the correct virtual host configuration to use
            in processing the SSL handshake.  It was added to SSL starting
            with the TLS extensions, RFC 3546.  <br />
            See: <a href="ssl/ssl_faq.html">the SSL FAQ</a>
            and <a href="http://www.ietf.org/rfc/rfc3546.txt">RFC 3546</a>
          </dd>
      
          <dt><a name="serversideincludes" id="serversideincludes">Server Side
              Includes</a> <a name="ssi" id="ssi">(SSI)</a></dt>
          <dd>A technique for embedding processing directives inside HTML files.<br />
            See: <a href="howto/ssi.html">Introduction to Server Side Includes</a>
          </dd>
      
          <dt><a name="session" id="session">Session</a></dt>
          <dd>The context information of a communication in general.</dd>
      
          <dt><a name="ssleay" id="ssleay">SSLeay</a></dt>
          <dd>The original SSL/TLS implementation library developed by Eric A.
            Young
          </dd>
      
          <dt><a name="subrequest" id="subrequest">Subrequest</a></dt>
          <dd>Apache provides a subrequest API to modules that allows other
              filesystem or URL paths to be partially or fully evaluated by
              the server. Example consumers of this API are 
              <code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code>, 
              <code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code>, and <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>.
          </dd>
      
          <dt><a name="symmetriccryptophraphy" id="symmetriccryptophraphy">Symmetric
              Cryptography</a></dt>
          <dd>The study and application of <em>Ciphers</em> that use a single secret key
            for both encryption and decryption operations.<br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="tarball" id="tarball">Tarball</a></dt>
          <dd>A package of files gathered together using the <code>tar</code> utility.
            Apache distributions are stored in compressed tar archives or using
            pkzip.
          </dd>
      
          <dt><a name="transportlayersecurity" id="transportlayersecurity">Transport
              Layer Security</a> <a name="tls" id="tls">(TLS)</a></dt>
          <dd>The successor protocol to SSL, created by the Internet Engineering Task
            Force (IETF) for general communication authentication and encryption over
            TCP/IP networks. TLS version 1 is nearly identical with SSL version 3.<br />
            See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
      
          <dt><a name="uniformresourcelocator" id="uniformresourcelocator">Uniform
              Resource Locator</a> <a name="url" id="url">(URL)</a></dt>
          <dd>The name/address of a resource on the Internet.  This is the common
            informal term for what is formally called a <a class="glossarylink" href="./glossary.html#uniformresourceidentifier" title="see glossary">Uniform Resource Identifier</a>.
            URLs are usually made up of a scheme, like <code>http</code> or
            <code>https</code>, a hostname, and a path.  A URL for this page might
            be <code>http://httpd.apache.org/docs/2.4/glossary.html</code>.
          </dd>
      
          <dt><a name="uniformresourceidentifier" id="uniformresourceidentifier">Uniform Resource Identifier</a>
            <a name="URI" id="URI">(URI)</a></dt>
          <dd>A compact string of characters for identifying an abstract or physical
            resource.  It is formally defined by <a href="http://www.ietf.org/rfc/rfc2396.txt">RFC 2396</a>.  URIs used on the
            world-wide web are commonly referred to as <a class="glossarylink" href="./glossary.html#url" title="see glossary">URLs</a>.
          </dd>
      
          <dt><a name="virtualhosting" id="virtualhosting">Virtual Hosting</a></dt>
          <dd>Serving multiple websites using a single instance of Apache.  <em>IP
            virtual hosting</em> differentiates between websites based on their IP
            address, while <em>name-based virtual hosting</em> uses only the name of the
            host and can therefore host many sites on the same IP address.<br />
            See: <a href="vhosts/">Apache Virtual Host documentation</a>
          </dd>
      
          <dt><a name="x.509" id="x.509">X.509</a></dt>
          <dd>An authentication certificate scheme recommended by the International
            Telecommunication Union (ITU-T) which is used for SSL/TLS authentication.<br /> See: <a href="ssl/">SSL/TLS Encryption</a>
          </dd>
        </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./de/glossary.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/glossary.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/glossary.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/glossary.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/glossary.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/glossary.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/glossary.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/glossary.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/suexec.html.ja.utf8��������������������������������������������������������0000644�0000000�0000050�00000102326�13412755316�017114� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>suEXEC サãƒãƒ¼ãƒˆ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>suEXEC サãƒãƒ¼ãƒˆ</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/suexec.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/suexec.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/suexec.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/suexec.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/suexec.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
          <p><strong>suEXEC</strong>
          機能ã«ã‚ˆã‚Šã€Apache ユーザ㯠Web サーãƒã‚’実行ã—ã¦ã„るユーザ ID ã¨ã¯
          ç•°ãªã‚‹ãƒ¦ãƒ¼ã‚¶ ID ã§ <strong>CGI</strong> プログラムや <strong>SSI</strong> 
          プログラムを実行ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚CGI プログラムã¾ãŸã¯ SSI
          プログラムを実行ã™ã‚‹å ´åˆã€é€šå¸¸ã¯ web サーãƒã¨åŒã˜ãƒ¦ãƒ¼ã‚¶ã§å®Ÿè¡Œã•れã¾ã™ã€‚
          </p>
      
          <p>é©åˆ‡ã«ä½¿ç”¨ã™ã‚‹ã¨ã€ã“ã®æ©Ÿèƒ½ã«ã‚ˆã‚Šãƒ¦ãƒ¼ã‚¶ãŒå€‹åˆ¥ã® CGI
          ã‚„ SSI プログラムを開発ã—実行ã™ã‚‹ã“ã¨ã§ç”Ÿã˜ã‚‹ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å±é™ºã‚’ã€
          ã‹ãªã‚Šæ¸›ã‚‰ã™ã“ã¨ãŒã§ãã¾ã™ã€‚ã—ã‹ã—ã€suEXEC ã®è¨­å®šãŒä¸é©åˆ‡ã ã¨ã€
          多ãã®å•題ãŒç”Ÿã˜ã€ã‚ãªãŸã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã«æ–°ã—ã„セキュリティホールを
          作ã£ã¦ã—ã¾ã†å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚ã‚ãªãŸãŒ <em>setuid root</em>
          ã•れãŸãƒ—ログラムã¨ã€ãれらã‹ã‚‰ç”Ÿã˜ã‚‹ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•題ã®ç®¡ç†ã«
          詳ã—ããªã„よã†ãªã‚‰ã€suEXEC ã®ä½¿ç”¨ã‚’検討ã—ãªã„よã†ã«å¼·ã推奨ã—ã¾ã™ã€‚
          </p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#before">å§‹ã‚ã‚‹å‰ã«</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#model">suEXEC セキュリティモデル</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#install">suEXEC
          ã®è¨­å®šã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#enable">suEXEC
          ã®æœ‰åŠ¹åŒ–ã¨ç„¡åŠ¹åŒ–</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#usage">suEXEC ã®ä½¿ç”¨</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#debug">suEXEC ã®ãƒ‡ãƒãƒƒã‚°</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#jabberwock">ã¨ã‹ã’ã«æ³¨æ„: 警告ã¨äº‹ä¾‹</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="before" id="before">å§‹ã‚ã‚‹å‰ã«</a></h2>
      
          <p>ã“ã®æ–‡æ›¸ã®å…ˆé ­ã«é£›ã¶å‰ã«ã€Apache
          グループã¨ã“ã®æ–‡æ›¸ã§ã®ä»®å®šã‚’知ã£ã¦ãŠãã¹ãã§ã—ょã†ã€‚
          </p>
      
          <p>第 1 ã«ã€ã‚ãªãŸãŒ <strong>setuid</strong> ã¨
          <strong>setgid</strong> æ“作ãŒå¯èƒ½ãª UNIX
          ç”±æ¥ã®ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ã‚’使ã£ã¦ã„ã‚‹ã“ã¨ã‚’想定ã—ã¦ã„ã¾ã™ã€‚
          ã“れã¯ã€ã™ã¹ã¦ã®ã‚³ãƒžãƒ³ãƒ‰ä¾‹ã«ã‚ã¦ã¯ã¾ã‚Šã¾ã™ã€‚
          ãã®ä»–ã®ãƒ—ラットホームã§ã¯ã€ã‚‚ã— suEXEC
          ãŒã‚µãƒãƒ¼ãƒˆã•れã¦ã„ãŸã¨ã—ã¦ã‚‚設定ã¯ç•°ãªã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。</p>
      
          <p>第 2 ã«ã€ã‚ãªãŸãŒä½¿ç”¨ä¸­ã®ã‚³ãƒ³ãƒ”ュータã®
          セキュリティã«é–¢ã™ã‚‹åŸºæœ¬çš„ãªæ¦‚念ã¨ã€ãれらã®ç®¡ç†ã«ã¤ã„ã¦è©³ã—ã„ã“ã¨ã‚’
          想定ã—ã¦ã„ã¾ã™ã€‚ã“れã¯ã€<strong>setuid/setgid</strong>
          æ“作ã€ã‚ãªãŸã®ã‚·ã‚¹ãƒ†ãƒ ä¸Šã§ã®ãã®æ“作ã«ã‚ˆã‚‹æ§˜ã€…ãªåŠ¹æžœã€
          セキュリティレベルã«ã¤ã„ã¦ã‚ãªãŸãŒç†è§£ã—ã¦ã„ã‚‹ã¨ã„ã†ã“ã¨ã‚’å«ã¿ã¾ã™ã€‚
          </p>
      
          <p>第 3 ã«ã€<strong>改造ã•れã¦ã„ãªã„</strong> suEXEC
          コードã®ä½¿ç”¨ã‚’想定ã—ã¦ã„ã¾ã™ã€‚suEXEC ã®ã‚³ãƒ¼ãƒ‰ã¯ã€
          多ãã®ãƒ™ãƒ¼ã‚¿ãƒ†ã‚¹ã‚¿ã ã‘ã§ãªãã€é–‹ç™ºè€…ã«ã‚ˆã£ã¦ã‚‚æ³¨æ„æ·±ã精査ã•れ
          テストã•れã¦ã„ã¾ã™ã€‚ãã‚Œã‚‰ã®æ³¨æ„ã«ã‚ˆã‚Šã€ç°¡æ½”ã§ä¿¡é ¼ã§ãる安全ãª
          コードã®åŸºç›¤ãŒä¿è¨¼ã•れã¾ã™ã€‚ã“ã®ã‚³ãƒ¼ãƒ‰ã‚’改変ã™ã‚‹ã“ã¨ã§ã€
          予期ã•れãªã„å•題や新ã—ã„セキュリティ上ã®å±é™ºãŒç”Ÿã˜ã‚‹ã“ã¨ãŒã‚りã¾ã™ã€‚
          セキュリティプログラミングã®è©³ç´°ã«é€šã˜ã¦ã„ã¦ã€
          ä»Šå¾Œã®æ¤œè¨Žã®ãŸã‚ã«æˆæžœã‚’ Apache
          グループã¨å…±æœ‰ã—よã†ã¨æ€ã†ã®ã§ãªã‘れã°ã€suEXEC
          コードã¯å¤‰ãˆãªã„ã“ã¨ã‚’ <strong>å¼·ã</strong>推奨ã—ã¾ã™ã€‚</p>
      
          <p>第 4 ã«ã€ã“ã‚ŒãŒæœ€å¾Œã§ã™ãŒã€suEXEC ã‚’ Apache
          ã®ãƒ‡ãƒ•ォルトインストールã«ã¯<strong>å«ã‚ãªã„</strong>ã“ã¨ãŒ
          Apache ã‚°ãƒ«ãƒ¼ãƒ—ã§æ±ºå®šã•れã¦ã„ã¾ã™ã€‚ã“れã¯ã€suEXEC
          ã®è¨­å®šã«ã¯ç®¡ç†è€…ã®è©³ç´°ã«ã‚ãŸã‚‹æ…Žé‡ãªæ³¨æ„ãŒå¿…è¦ã ã‹ã‚‰ã§ã™ã€‚
          suEXEC ã®æ§˜ã€…ãªè¨­å®šã«ã¤ã„ã¦æ¤œè¨ŽãŒçµ‚ã‚れã°ã€ç®¡ç†è€…㯠suEXEC
          を通常ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«æ–¹æ³•ã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          ã“れらã®è¨­å®šå€¤ã¯ã€suEXEC
          機能ã®ä½¿ç”¨ä¸­ã«ã‚·ã‚¹ãƒ†ãƒ ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã‚’é©åˆ‡ã«ä¿ã¤ãŸã‚ã«ã€
          管ç†è€…ã«ã‚ˆã£ã¦æ…Žé‡ã«æ±ºå®šã•れ指定ã•れるã“ã¨ãŒå¿…è¦ã§ã™ã€‚
          ã“ã®è©³ç´°ãªæ‰‹é †ã«ã‚ˆã‚Šã€Apache グループã¯ã€suEXEC
          ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã«ã¤ã„ã¦ã€æ³¨æ„æ·±ãååˆ†ã«æ¤œè¨Žã—ã¦ãれを使用ã™ã‚‹ã“ã¨ã‚’
          決定ã—ãŸå ´åˆã«é™ã£ã¦ã„ãŸã ããŸã„ã¨è€ƒãˆã¦ã„ã¾ã™ã€‚
          </p>
      
          <p>ãれã§ã‚‚進ã¿ã¾ã™ã‹? よã‚ã—ã„。ã§ã¯ã€å…ˆã¸é€²ã¿ã¾ã—ょã†!</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="model" id="model">suEXEC セキュリティモデル</a></h2>
      
          <p>suEXEC ã®è¨­å®šã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‚’å§‹ã‚ã‚‹å‰ã«ã€
          ã¾ãšå®Ÿè£…ã—よã†ã¨ã—ã¦ã„るセキュリティモデルã«ã¤ã„ã¦è«–ã˜ã¦ãŠãã¾ã™ã€‚
          ãれã«ã¯ã€suEXEC ã®å†…部ã§è¡Œãªã‚れã¦ã„ã‚‹ã“ã¨ã€
          システムã®ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã‚’ä¿è¨¼ã™ã‚‹ãŸã‚ã«è­¦å‘Šã•れるã“ã¨ã‚’
          よãç†è§£ã—ã¦ãŠã„ãŸæ–¹ãŒã‚ˆã„ã§ã—ょã†ã€‚</p>
      
          <p><strong>suEXEC</strong> ã¯ã€Apache web
          サーãƒã‹ã‚‰å‘¼ã³å‡ºã•れる setuid ã•れ㟠"wrapper"
          プログラムãŒåŸºæœ¬ã¨ãªã£ã¦ã„ã¾ã™ã€‚設計ã—㟠CGIã€ã¾ãŸã¯ SSI
          プログラムã¸ã® HTTP リクエストãŒã‚ã‚‹ã¨ã€ã“ã® wrapper
          ãŒå‘¼ã³å‡ºã•れã¾ã™ã€‚ã“ã®ã‚ˆã†ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒã‚ã‚‹ã¨ã€Apache
          ã¯ãã®ãƒ—ログラムãŒå®Ÿè¡Œã•れる際ã®ãƒ—ログラムåã¨ãƒ¦ãƒ¼ã‚¶ ID ã¨ã‚°ãƒ«ãƒ¼ãƒ—
          ID を指定ã—㦠suEXEC wrapper を実行ã—ã¾ã™ã€‚
          </p>
      
          <p>ãれã‹ã‚‰ã€wrapper ã¯æˆåŠŸã¾ãŸã¯å¤±æ•—を決定ã™ã‚‹ãŸã‚
          以下ã®å‡¦ç†ã‚’行ãªã„ã¾ã™ã€‚ã“れらã®çŠ¶æ…‹ã®ã†ã¡ä¸€ã¤ã§ã‚‚失敗ã—ãŸå ´åˆã€
          プログラムã¯å¤±æ•—をログã«è¨˜éŒ²ã—ã¦ã‚¨ãƒ©ãƒ¼ã§çµ‚了ã—ã¾ã™ã€‚
          ãã†ã§ãªã‘れã°ã€å¾Œã®å‡¦ç†ãŒç¶šã‘られã¾ã™ã€‚</p>
      
          <ol>
            <li>
              <strong>wrapper
              を実行ã—ã¦ã„るユーザã¯ã“ã®ã‚·ã‚¹ãƒ†ãƒ ã®æ­£å½“ãªãƒ¦ãƒ¼ã‚¶ã‹?</strong>
      
              <p class="indent">
                ã“れã¯ã€wrapper を実行ã—ã¦ã„るユーザãŒ
                本当ã«ã‚·ã‚¹ãƒ†ãƒ ã®åˆ©ç”¨è€…ã§ã‚ã‚‹ã“ã¨ã‚’ä¿è¨¼ã™ã‚‹ãŸã‚ã§ã™ã€‚
              </p>
            </li>
      
      
           <li>
              <strong>wrapper ãŒé©åˆ‡ãªæ•°ã®å¼•æ•°ã§å‘¼ã³å‡ºã•れãŸã‹?</strong>
      
      
              <p class="indent">
                wrapper ã¯é©åˆ‡ãªæ•°ã®å¼•æ•°ãŒä¸Žãˆã‚‰ã‚ŒãŸå ´åˆã«ã®ã¿å®Ÿè¡Œã•れã¾ã™ã€‚
                é©åˆ‡ãªå¼•æ•°ã®ãƒ•ォーマット㯠Apache Web サーãƒã«è§£é‡ˆã•れã¾ã™ã€‚
                é©åˆ‡ãªæ•°ã®å¼•æ•°ã‚’å—ã‘å–らãªã‘れã°ã€æ”»æ’ƒã‚’ã•れãŸã‹
                ã‚ãªãŸã® Apache ãƒã‚¤ãƒŠãƒªã® suEXEC ã®éƒ¨åˆ†ãŒ
                ã©ã“ã‹ãŠã‹ã—ã„å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
              </p>
            </li>
      
            <li>
              <strong>ã“ã®æ­£å½“ãªãƒ¦ãƒ¼ã‚¶ã¯ wrapper
              ã®å®Ÿè¡Œã‚’許å¯ã•れã¦ã„ã‚‹ã‹?</strong>
      
              <p class="indent">
                ã“ã®ãƒ¦ãƒ¼ã‚¶ã¯ wrapper 実行を許å¯ã•れãŸãƒ¦ãƒ¼ã‚¶ã§ã™ã‹?
                ãŸã ä¸€äººã®ãƒ¦ãƒ¼ã‚¶ (Apache ユーザ) ã ã‘ãŒã€
                ã“ã®ãƒ—ログラムã®å®Ÿè¡Œã‚’許å¯ã•れã¾ã™ã€‚
              </p>
            </li>
      
            <li>
              <strong>対象㮠CGI, SSI プログラムãŒå®‰å…¨ã§ãªã„階層ã®å‚ç…§ã‚’ã—ã¦ã„ã‚‹ã‹?
              </strong>
      
              <p class="indent">
                対象㮠CGI, SSI プログラム㌠'/' ã‹ã‚‰å§‹ã¾ã‚‹ã€ã¾ãŸã¯
                '..' ã«ã‚ˆã‚‹å‚照を行ãªã£ã¦ã„ã¾ã™ã‹? ã“れらã¯è¨±å¯ã•れã¾ã›ã‚“。
                対象ã®ãƒ—ログラム㯠suEXEC ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ«ãƒ¼ãƒˆ
                (下記㮠<code>--with-suexec-docroot=<em>DIR</em></code> ã‚’å‚ç…§)
                内ã«å­˜åœ¨ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。
              </p>
            </li>
      
            <li>
              <strong>対象ã¨ãªã‚‹ãƒ¦ãƒ¼ã‚¶åã¯æ­£å½“ãªã‚‚ã®ã‹?</strong>
      
              <p class="indent">
                対象ã¨ãªã‚‹ãƒ¦ãƒ¼ã‚¶åã¯å­˜åœ¨ã—ã¦ã„ã¾ã™ã‹?
              </p>
            </li>
      
            <li>
              <strong>対象ã¨ãªã‚‹ã‚°ãƒ«ãƒ¼ãƒ—åã¯æ­£å½“ãªã‚‚ã®ã‹?</strong>
      
              <p class="indent">
                対象ã¨ãªã‚‹ã‚°ãƒ«ãƒ¼ãƒ—åã¯å­˜åœ¨ã—ã¦ã„ã¾ã™ã‹?
              </p>
            </li>
      
            <li>
              <strong>目的ã®ãƒ¦ãƒ¼ã‚¶ã¯ã‚¹ãƒ¼ãƒ‘ーユーザã§ã¯<em>ãªã„</em>ã‹?
              </strong>
      
              <p class="indent">
                今ã®ã¨ã“ã‚ã€suEXEC 㯠<code><em>root</em></code> ã«ã‚ˆã‚‹ CGI/SSI
                プログラムã®å®Ÿè¡Œã‚’許å¯ã—ã¦ã„ã¾ã›ã‚“。
              </p>
            </li>
      
            <li>
              <strong>対象ã¨ãªã‚‹ãƒ¦ãƒ¼ã‚¶ ID ã¯ã€æœ€å°ã® ID
              番å·ã‚ˆã‚Šã‚‚<em>大ãã„</em>ã‹?  </strong>
      
              <p class="indent">
                最å°ãƒ¦ãƒ¼ã‚¶ ID 番å·ã¯è¨­å®šæ™‚ã«æŒ‡å®šã•れã¾ã™ã€‚ã“れã¯ã€
                CGI/SSI プログラム実行を許å¯ã•れるユーザ ID
                ã®ã¨ã‚Šã†ã‚‹æœ€å°å€¤ã§ã™ã€‚ã“れã¯
                "system" 用ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’é–‰ã‚出ã™ã®ã«æœ‰åйã§ã™ã€‚
              </p>
            </li>
      
            <li>
              <strong>対象ã¨ãªã‚‹ã‚°ãƒ«ãƒ¼ãƒ—ã¯ã‚¹ãƒ¼ãƒ‘ーユーザã®ã‚°ãƒ«ãƒ¼ãƒ—ã§ã¯
              <em>ãªã„</em>ã‹?</strong>
      
              <p class="indent">
               今ã®ã¨ã“ã‚ã€suEXEC 㯠'root' グループã«ã‚ˆã‚‹ CGI/SSI
               プログラムã®å®Ÿè¡Œã‚’許å¯ã—ã¦ã„ã¾ã›ã‚“。
              </p>
            </li>
      
            <li>
              <strong>対象ã¨ãªã‚‹ã‚°ãƒ«ãƒ¼ãƒ— ID ã¯æœ€å°ã® ID
                番å·ã‚ˆã‚Šã‚‚<em>大ãã„</em>ã‹?</strong>
      
              <p class="indent">
                最å°ã‚°ãƒ«ãƒ¼ãƒ— ID 番å·ã¯è¨­å®šæ™‚ã«æŒ‡å®šã•れã¾ã™ã€‚ã“れã¯ã€
                CGI/SSI プログラム実行を許å¯ã•れるグループ
                ID ã®ã¨ã‚Šã†ã‚‹æœ€å°å€¤ã§ã™ã€‚
                ã“れ㯠"system" 用ã®ã‚°ãƒ«ãƒ¼ãƒ—ã‚’é–‰ã‚出ã™ã®ã«æœ‰åйã§ã™ã€‚
              </p>
            </li>
      
            <li>
              <strong>wrapper ãŒæ­£å¸¸ã«å¯¾è±¡ã¨ãªã‚‹ãƒ¦ãƒ¼ã‚¶ã¨ã‚°ãƒ«ãƒ¼ãƒ—ã«ãªã‚Œã‚‹ã‹?
              </strong>
      
              <p class="indent">
                ã“ã“ã§ã€setuid 㨠setgid
                ã®èµ·å‹•ã«ã‚ˆã‚Šãƒ—ログラムã¯å¯¾è±¡ã¨ãªã‚‹ãƒ¦ãƒ¼ã‚¶ã¨ã‚°ãƒ«ãƒ¼ãƒ—ã«ãªã‚Šã¾ã™ã€‚
                グループアクセスリストã¯ã€
                ユーザãŒå±žã—ã¦ã„ã‚‹ã™ã¹ã¦ã®ã‚°ãƒ«ãƒ¼ãƒ—ã§åˆæœŸåŒ–ã•れã¾ã™ã€‚
              </p>
            </li>
      
            <li>
              <strong>CGI/SSI プログラムãŒç½®ã‹ã‚Œã¦ã„るディレクトリã«ç§»å‹•
              (change directory) ã§ãã‚‹ã‹?</strong>
      
              <p class="indent">
                ディレクトリãŒå­˜åœ¨ã—ãªã„ãªã‚‰ã€ãã®ãƒ•ァイルも存在ã—ãªã„ã‹ã‚‚ã—れã¾ã›ã‚“。
                ディレクトリã«ç§»å‹•ã§ããªã„ã®ã§ã‚れã°ã€ãŠãらã存在もã—ãªã„ã§ã—ょã†ã€‚
              </p>
            </li>
      
            <li>
              <strong>ディレクトリ㌠Apache ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ„リー内ã«ã‚ã‚‹ã‹?
              </strong>
      
              <p class="indent">
                リクエストãŒã‚µãƒ¼ãƒå†…ã®ã‚‚ã®ã§ã‚れã°ã€
                è¦æ±‚ã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãŒ suEXEC ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ«ãƒ¼ãƒˆé…下ã«ã‚りã¾ã™ã‹?
                リクエスト㌠UserDir ã®ã‚‚ã®ã§ã‚れã°ã€è¦æ±‚ã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãŒ suEXEC 
                ã®ãƒ¦ãƒ¼ã‚¶ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ«ãƒ¼ãƒˆé…下ã«ã‚りã¾ã™ã‹?
                (<a href="#install">suEXEC 設定オプション</a> å‚ç…§)
              </p>
            </li>
      
            <li>
              <strong>ディレクトリを他ã®ãƒ¦ãƒ¼ã‚¶ãŒæ›¸ãè¾¼ã‚るよã†ã«ãªã£ã¦
              <em>ã„ãªã„</em>ã‹?</strong>
      
              <p class="indent">
                ディレクトリを他ユーザã«é–‹æ”¾ã—ãªã„よã†ã«ã—ã¾ã™ã€‚
                所有ユーザã ã‘ãŒã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®å†…容を改変ã§ãるよã†ã«ã—ã¾ã™ã€‚
              </p>
            </li>
      
      
            <li>
              <strong>対象ã¨ãªã‚‹ CGI/SSI プログラムã¯å­˜åœ¨ã™ã‚‹ã‹?</strong>
      
              <p class="indent">
                存在ã—ãªã‘れã°å®Ÿè¡Œã§ãã¾ã›ã‚“。
              </p>
            </li>
      
            <li>
              <strong>対象ã¨ãªã‚‹ CGI/SSI プログラムファイルãŒä»–アカウントã‹ã‚‰
              書ãè¾¼ã‚るよã†ã«ãªã£ã¦<em>ã„ãªã„</em>ã‹?</strong>
      
              <p class="indent">
                所有者以外ã«ã¯ CGI/SSI プログラムを変更ã™ã‚‹æ¨©é™ã¯ä¸Žãˆã‚‰ã‚Œã¾ã›ã‚“。
              </p>
            </li>
      
      
            <li>
              <strong>対象ã¨ãªã‚‹ CGI/SSI プログラム㌠setuid ã¾ãŸã¯ setgid 
              ã•れã¦<em>ã„ãªã„</em>ã‹?</strong>
      
              <p class="indent">
                UID/GID ã‚’å†åº¦å¤‰æ›´ã—ã¦ã®ãƒ—ログラム実行ã¯ã—ã¾ã›ã‚“
              </p>
            </li>
      
      
            <li>
              <strong>対象ã¨ãªã‚‹ãƒ¦ãƒ¼ã‚¶/グループãŒãƒ—ログラムã®
              ユーザ/グループã¨åŒã˜ã‹?</strong>
      
              <p class="indent">
                ユーザãŒãã®ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‰€æœ‰è€…ã§ã™ã‹?
              </p>
            </li>
      
            <li>
              <strong>安全ãªå‹•作をä¿è¨¼ã™ã‚‹ãŸã‚ã®ç’°å¢ƒå¤‰æ•°ã‚¯ãƒªã‚¢ãŒå¯èƒ½ã‹?
              </strong>
      
              <p class="indent">
                suEXEC ã¯ã€å®‰å…¨ãªç’°å¢ƒå¤‰æ•°ã®ãƒªã‚¹ãƒˆ
                (ã“れらã¯è¨­å®šæ™‚ã«ä½œæˆã•れã¾ã™) 内ã®å¤‰æ•°ã¨ã—ã¦æ¸¡ã•れる安全ãª
                PATH 変数 (è¨­å®šæ™‚ã«æŒ‡å®šã•れã¾ã™) を設定ã™ã‚‹ã“ã¨ã§ã€
                プロセスã®ç’°å¢ƒå¤‰æ•°ã‚’クリアã—ã¾ã™ã€‚
              </p>
            </li>
      
      
            <li>
              <strong>対象ã¨ãªã‚‹ CGI/SSI プログラムを exec ã—ã¦å®Ÿè¡Œã§ãã‚‹ã‹?</strong>
      
      
              <p class="indent">
                ã“ã“ã§ suEXEC ãŒçµ‚了ã—ã€å¯¾è±¡ã¨ãªã‚‹ãƒ—ログラムãŒé–‹å§‹ã•れã¾ã™ã€‚
              </p>
            </li>
          </ol>
      
          <p>ã“ã“ã¾ã§ãŒ suEXEC ã® wrapper
          ã«ãŠã‘ã‚‹ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ãƒ¢ãƒ‡ãƒ«ã®æ¨™æº–çš„ãªå‹•作ã§ã™ã€‚ã‚‚ã†å°‘ã—厳é‡ã«
          CGI/SSI 設計ã«ã¤ã„ã¦ã®æ–°ã—ã„制é™ã‚„è¦å®šã‚’å–り入れるã“ã¨ã‚‚ã§ãã¾ã™ãŒã€
          suEXEC ã¯ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã«æ³¨æ„ã—ã¦æ…Žé‡ã«å°‘ã—ãšã¤é–‹ç™ºã•れã¦ãã¾ã—ãŸã€‚
          </p>
      
          <p>ã“ã®ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ãƒ¢ãƒ‡ãƒ«ã‚’用ã„ã¦
          サーãƒè¨­å®šæ™‚ã«ã©ã®ã‚ˆã†ã«è¨±ã™ã“ã¨ã‚’制é™ã™ã‚‹ã‹ã€ã¾ãŸã€suEXEC
          ã‚’é©åˆ‡ã«è¨­å®šã™ã‚‹ã¨ã©ã®ã‚ˆã†ãªã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å±é™ºã‚’é¿ã‘られるã‹ã«
          é–¢ã™ã‚‹ã‚ˆã‚Šè©³ã—ã„æƒ…å ±ã«ã¤ã„ã¦ã¯ã€<a href="#jabberwock">"ã¨ã‹ã’ã«æ³¨æ„"
          (Beware the Jabberwock)</a> ã®ç« ã‚’å‚ç…§ã—ã¦ãã ã•ã„。
          </p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="install" id="install">suEXEC
          ã®è¨­å®šã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«</a></h2>
      
          <p>ã“ã“ã‹ã‚‰æ¥½ã—ããªã‚Šã¾ã™ã€‚</p>
      
          <p><strong>suEXEC
          設定オプション</strong><br />
          </p>
      
          <dl>
            <dt><code>--enable-suexec</code></dt>
      
            <dd>ã“ã®ã‚ªãƒ—ションã¯ã€ãƒ‡ãƒ•ォルトã§ã¯ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•れãšã€
            有効ã«ã¯ãªã‚‰ãªã„ suEXEC 機能を有効ã«ã—ã¾ã™ã€‚
            suEXEC を使ã†ã‚ˆã†ã« APACI ã«è¦æ±‚ã™ã‚‹ã«ã¯ã€<code>--enable-suexec</code>
            オプションã«ã‚ã‚ã›ã¦å°‘ãªãã¨ã‚‚一ã¤ã¯ <code>--with-suexec-xxxxx</code>
            ã‚ªãƒ—ã‚·ãƒ§ãƒ³ãŒæŒ‡å®šã•れãªã‘れã°ãªã‚Šã¾ã›ã‚“。</dd>
      
            <dt><code>--with-suexec-bin=<em>PATH</em></code></dt>
      
            <dd>セキュリティ上ã®ç†ç”±ã«ã‚ˆã‚Šã€<code>suexec</code> ãƒã‚¤ãƒŠãƒªã®ãƒ‘スã¯ã‚µãƒ¼ãƒã«
            ãƒãƒ¼ãƒ‰ã‚³ãƒ¼ãƒ‰ã•れã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚デフォルトã®ãƒ‘スを
            変ãˆãŸã„ã¨ãã¯ã“ã®ã‚ªãƒ—ションを使ã£ã¦ãã ã•ã„。<em>例ãˆã°</em>ã€
            <code>--with-suexec-bin=/usr/sbin/suexec</code> ã®ã‚ˆã†ã«ã€‚</dd>
      
            <dt><code>--with-suexec-caller=<em>UID</em></code></dt>
      
            <dd>Apache を通常動作ã•ã›ã‚‹<a href="mod/mpm_common.html#user">ユーザå</a>を指定ã—ã¾ã™ã€‚
            ã“ã®ãƒ¦ãƒ¼ã‚¶ã ã‘㌠suexec ã®å®Ÿè¡Œã‚’許å¯ã•れãŸãƒ¦ãƒ¼ã‚¶ã«ãªã‚Šã¾ã™ã€‚</dd>
      
            <dt><code>--with-suexec-userdir=<em>DIR</em></code></dt>
      
            <dd>suEXEC ãŒã‚¢ã‚¯ã‚»ã‚¹ã‚’許ã•れるユーザホームディレクトリé…下ã®
            サブディレクトリを指定ã—ã¾ã™ã€‚
            ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªä»¥ä¸‹ã®å…¨å®Ÿè¡Œãƒ•ァイルã¯ã€"安全ãª"プログラムã«ãªã‚‹ã‚ˆã†ã€
            suEXEC ãŒãã®ãƒ¦ãƒ¼ã‚¶ã¨ã—ã¦å®Ÿè¡Œã§ãるよã†ã«ã—ã¾ã™ã€‚
            "å˜ç´”ãª" UserDir ディレクティブを使ã£ã¦ã„ã‚‹å ´åˆ 
            (ã™ãªã‚ã¡ "*" ã‚’å«ã¾ãªã„ã‚‚ã®)ã€ã“れã¨åŒã˜å€¤ã‚’設定ã™ã¹ãã§ã™ã€‚
            Userdir ディレクティブãŒãã®ãƒ¦ãƒ¼ã‚¶ã®ãƒ‘スワードファイル内ã®
            ホームディレクトリã¨åŒã˜å ´æ‰€ã‚’指ã—ã¦ã„ãªã‘れã°ã€
            suEXEC ã¯é©åˆ‡ã«å‹•作ã—ã¾ã›ã‚“。デフォルト㯠"public_html" ã§ã™ã€‚
            <br />
            å„ UserDir ãŒç•°ãªã£ãŸä»®æƒ³ãƒ›ã‚¹ãƒˆã‚’設定ã—ã¦ã„ã‚‹å ´åˆã€
            ãれらを全ã¦ä¸€ã¤ã®è¦ªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«å«ã‚ã¦ã€
            ãã®è¦ªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®åå‰ã‚’ã“ã“ã§æŒ‡å®šã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
            <strong>ã“ã®ã‚ˆã†ã«æŒ‡å®šã•れãªã‘れ㰠"~userdir" cgi
            ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒå‹•作ã—ã¾ã›ã‚“。</strong></dd>
      
            <dt><code>--with-suexec-docroot=<em>DIR</em></code></dt>
      
            <dd>Apache ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ«ãƒ¼ãƒˆã‚’設定ã—ã¾ã™ã€‚ã“れ㌠suEXEC
            ã®å‹•作ã§ä½¿ç”¨ã™ã‚‹å”¯ä¸€ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªéšŽå±¤ã«ãªã‚Šã¾ã™ (UserDir
            ã®æŒ‡å®šã¯åˆ¥)。デフォルトã§ã¯ <code>--datedir</code> ã« "/htdocs"
            ã¨ã„ã†ã‚µãƒ•ィックスをã¤ã‘ãŸã‚‚ã®ã§ã™ã€‚
            "<code>--datadir=/home/apache</code>" ã¨ã—ã¦è¨­å®šã™ã‚‹ã¨ã€
            suEXEC wrapper ã«ã¨ã£ã¦ "/home/apache/htdocs"
            ãŒãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ«ãƒ¼ãƒˆã¨ã—ã¦ä½¿ã‚れã¾ã™ã€‚</dd>
      
            <dt><code>--with-suexec-uidmin=<em>UID</em></code></dt>
      
            <dd>suEXEC ã®å¯¾è±¡ãƒ¦ãƒ¼ã‚¶ã¨ã—ã¦è¨±ã•れる UID ã®æœ€å°å€¤ã‚’指定ã—ã¾ã™ã€‚
            大抵ã®ã‚·ã‚¹ãƒ†ãƒ ã§ã¯ 500 ã‹ 100 ãŒä¸€èˆ¬çš„ã§ã™ã€‚
            デフォルト値㯠100 ã§ã™ã€‚</dd>
      
            <dt><code>--with-suexec-gidmin=<em>GID</em></code></dt>
      
            <dd>suEXEC ã®å¯¾è±¡ã‚°ãƒ«ãƒ¼ãƒ—ã¨ã—ã¦è¨±ã•れる GID
            ã®æœ€å°å€¤ã‚’指定ã—ã¾ã™ã€‚大抵ã®ã‚·ã‚¹ãƒ†ãƒ ã§ã¯ 100 ãŒä¸€èˆ¬çš„ãªã®ã§ã€
            デフォルト値ã¨ã—ã¦ã‚‚ 100 ãŒä½¿ã‚れã¦ã„ã¾ã™ã€‚</dd>
      
            <dt><code>--with-suexec-logfile=<em>FILE</em></code></dt>
      
            <dd>suEXEC ã®å‡¦ç†ã¨ã‚¨ãƒ©ãƒ¼ãŒè¨˜éŒ²ã•れるファイルåを指定ã—ã¾ã™ã€‚
            (監査やデãƒãƒƒã‚°ç›®çš„ã«æœ‰ç”¨)
            デフォルトã§ã¯ãƒ­ã‚°ãƒ•ァイル㯠"suexec_log" ã¨ã„ã†åå‰ã§ã€
            標準ã®ãƒ­ã‚°ãƒ•ァイルディレクトリ (<code>--logfiledir</code>) ã«ç½®ã‹ã‚Œã¾ã™ã€‚
            </dd>
      
            <dt><code>--with-suexec-safepath=<em>PATH</em></code></dt>
      
            <dd>CGI å®Ÿè¡Œãƒ•ã‚¡ã‚¤ãƒ«ã«æ¸¡ã•れる安全㪠PATH 環境変数ã§ã™ã€‚
            デフォルト値㯠"/usr/local/bin:/usr/bin:/bin" ã§ã™ã€‚
            </dd>
          </dl>
      
          <p><strong>suEXEC wrapper
          ã®ã‚³ãƒ³ãƒ‘イルã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«</strong><br />
          <code>--enable-suexec</code> オプション㧠suEXEC 機能を有効ã«ã™ã‚‹ã¨ã€
          "make" コマンドを実行ã—ãŸæ™‚ã« <code>suexec</code> ã®ãƒã‚¤ãƒŠãƒª (Apache 自体も)
          ãŒè‡ªå‹•çš„ã«ä½œæˆã•れã¾ã™ã€‚
          <br />
          ã™ã¹ã¦ã®æ§‹æˆè¦ç´ ãŒä½œæˆã•れるã¨ã€ãれらã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã«ã¯
          <code>make install</code> コマンドãŒå®Ÿè¡Œã§ãã¾ã™ã€‚ãƒã‚¤ãƒŠãƒªã‚¤ãƒ¡ãƒ¼ã‚¸ã® <code>suexec</code>
          㯠<code>--sbindir</code> ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã§æŒ‡å®šã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•れã¾ã™ã€‚
          デフォルトã®å ´æ‰€ã¯ "/usr/local/apache/bin/suexec" ã§ã™ã€‚<br />
          インストール時ã«ã¯ <strong><em>root</em></strong>
          権é™ãŒå¿…è¦ãªã®ã§æ³¨æ„ã—ã¦ãã ã•ã„。wrapper ãŒãƒ¦ãƒ¼ã‚¶ ID
          を設定ã™ã‚‹ãŸã‚ã«ã€æ‰€æœ‰è€… <code><em>root</em></code>
          ã§ã®ã‚»ãƒƒãƒˆãƒ¦ãƒ¼ã‚¶ ID
          ビットをãã®ãƒ•ァイルã®ãƒ¢ãƒ¼ãƒ‰ã«è¨­å®šã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。
          </p>
      
          <p><strong>安全ãªãƒ‘ーミッションを設定ã™ã‚‹</strong><br />
          suEXEC ラッパーã¯ã€<code>--with-suexec-caller</code> <code class="program"><a href="./programs/configure.html">configure</a></code> 
          ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã§æŒ‡å®šã—ãŸæ­£ã—ã„ユーザã§èµ·å‹•ã•れã¦ã„ã‚‹ã“ã¨ã‚’確èªã—ã¾ã™ãŒã€
          システム上ã§ã“ã®ãƒã‚§ãƒƒã‚¯ãŒè¡Œãªã‚れるå‰ã«ã€
          suEXEC ãŒå‘¼ã¶ã‚·ã‚¹ãƒ†ãƒ ã‚„ライブラリãŒè„†å¼±ã§ã‚ã‚‹å¯èƒ½æ€§ã¯æ®‹ã‚Šã¾ã™ã€‚対抗策ã¨ã—ã¦ã€
          一般ã«è‰¯ã„ç¿’æ…£ã¨ã‚‚ã•れã„ã¾ã™ãŒã€
          ファイルシステムパーミッションを使ã£ã¦
          Apache ã®å®Ÿè¡Œæ™‚ã®ã‚°ãƒ«ãƒ¼ãƒ—ã®ã¿ãŒ suEXEC を実行ã§ãるよã†ã«
          ã™ã‚‹ã®ãŒè‰¯ã„ã§ã—ょã†ã€‚</p>
      
          <p>ãŸã¨ãˆã°ã€æ¬¡ã®ã‚ˆã†ã«ã‚µãƒ¼ãƒãŒè¨­å®šã•れã¦ã„ãŸã¨ã—ã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
          User www<br />
          Group webgroup<br />
      </code></p></div>
      
          <p><code class="program"><a href="./programs/suexec.html">suexec</a></code> ㌠"/usr/local/apache2/bin/suexec" 
          ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•れã¦ã„ãŸå ´åˆã€æ¬¡ã®ã‚ˆã†ã«è¨­å®šã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
          chgrp webgroup /usr/local/apache2/bin/suexec<br />
          chmod 4750 /usr/local/apache2/bin/suexec<br />
      </code></p></div>
      
          <p>ã“れ㧠Apache ãŒå®Ÿè¡Œã•れるグループã®ã¿ãŒ 
          suEXEC ラッパーを実行ã§ãã‚‹ã¨ã„ã†ã“ã¨ã‚’
          確証ã—ã¾ã™ã€‚</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="enable" id="enable">suEXEC
          ã®æœ‰åŠ¹åŒ–ã¨ç„¡åŠ¹åŒ–</a></h2>
      
          <p>起動時ã«ã€Apache 㯠<code>--sbindir</code>
          オプションã§è¨­å®šã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã§
          <code>suexec</code> を探ã—ã¾ã™
          (デフォルト㯠"/usr/local/apache/sbin/suexec") 。
          é©åˆ‡ã«è¨­å®šã•れ㟠suEXEC ãŒã¿ã¤ã‹ã‚‹ã¨ã€
          エラーログã«ä»¥ä¸‹ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒå‡ºåŠ›ã•れã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
          [notice] suEXEC mechanism enabled (wrapper: <var>/path/to/suexec</var>)
      </code></p></div>
      
          <p>サーãƒèµ·å‹•時ã«ã“ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒå‡ºãªã„å ´åˆã€
          大抵ã¯ã‚µãƒ¼ãƒãŒæƒ³å®šã—ãŸå ´æ‰€ã§ wrapper プログラムãŒè¦‹ã¤ã‹ã‚‰ãªã‹ã£ãŸã‹ã€
          <em>setuid root</em> ã¨ã—ã¦ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•れã¦ã„ãªã„ã‹ã§ã™ã€‚</p>
      
          <p>suEXEC ã®ä»•組ã¿ã‚’使用ã™ã‚‹ã®ãŒåˆã‚ã¦ã§ã€Apache ãŒæ—¢ã«å‹•作中ã§ã‚れã°ã€
          Apache ã‚’ kill ã—ã¦ã€å†èµ·å‹•ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。HUP シグナルや
          USR1 シグナルã«ã‚ˆã‚‹å˜ç´”ãªå†èµ·å‹•ã§ã¯ä¸å分ã§ã™ã€‚</p>
          <p>suEXEC を無効ã«ã™ã‚‹å ´åˆã¯ã€<code>suexec</code> ファイルを削除ã—ã¦ã‹ã‚‰
          Apache ã‚’ kill ã—ã¦å†èµ·å‹•ã—ã¾ã™ã€‚
          </p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="usage" id="usage">suEXEC ã®ä½¿ç”¨</a></h2>
      
          <p>CGI プログラムã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒ suEXEC ラッパーを呼ã¶ã®ã¯ã€
          <code class="directive"><a href="./mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code> ディレクティブを
          å«ã‚€ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‹ã€<code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code> ã«ã‚ˆã‚Š
          処ç†ã•れãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã®å ´åˆã«é™ã‚Šã¾ã™ã€‚</p>
      
          <p><strong>仮想ホスト:</strong><br />
          suEXEC wrapper ã®ä½¿ã„æ–¹ã¨ã—ã¦ã€
          <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code> 設定ã§ã®
          <code class="directive"><a href="./mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code>
          ディレクティブを通ã—ãŸã‚‚ã®ãŒã‚りã¾ã™ã€‚
          ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–をメインサーãƒã®ãƒ¦ãƒ¼ã‚¶ ID
          ã¨ç•°ãªã‚‹ã‚‚ã®ã«ã™ã‚‹ã¨ã€CGI リソースã¸ã®ã™ã¹ã¦ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ã€ãã®
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> ã§æŒ‡å®šã•れ㟠<em>User</em> ã¨
          <em>Group</em> ã¨ã—ã¦å®Ÿè¡Œã•れã¾ã™ã€‚<code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          ã§ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæŒ‡å®šã•れã¦ã„ãªã„å ´åˆã€
          メインサーãƒã®ãƒ¦ãƒ¼ã‚¶ ID ãŒæƒ³å®šã•れã¾ã™ã€‚</p>
      
          <p><strong>ユーザディレクトリ:</strong><br />
          <code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code> ã«ã‚ˆã‚Šå‡¦ç†ã•れãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯
          リクエストã•れãŸãƒ¦ãƒ¼ã‚¶ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ãƒ¦ãƒ¼ã‚¶ ID ã§ CGI プログラムを
          実行ã™ã‚‹ãŸã‚ã« suEXEC ラッパーを呼ã³ã¾ã™ã€‚
          ã“ã®æ©Ÿèƒ½ã‚’動作ã•ã›ã‚‹ãŸã‚ã«å¿…è¦ãªã“ã¨ã¯ã€CGI
          ã‚’ãã®ãƒ¦ãƒ¼ã‚¶ã§å®Ÿè¡Œã§ãã‚‹ã“ã¨ã€ãã®ã‚¹ã‚¯ãƒªãƒ—トãŒä¸Šè¨˜ã®<a href="#model">セキュリティ検査</a>をパスã§ãã‚‹ã“ã¨ã§ã™ã€‚
          <a href="#install">コンパイル
           時ã®ã‚ªãƒ—ション</a> <code>--with-suexec-userdir</code> ã‚‚å‚ç…§ã—ã¦ãã ã•ã„。</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="debug" id="debug">suEXEC ã®ãƒ‡ãƒãƒƒã‚°</a></h2>
      
          <p>suEXEC wrapper ã¯ã€ä¸Šè¨˜ã§è¿°ã¹ãŸ <code>--with-suexec-logfile</code>
          ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã§æŒ‡å®šã•れãŸãƒ•ァイルã«ãƒ­ã‚°æƒ…報を記録ã—ã¾ã™ã€‚
          wrapper ã‚’é©åˆ‡ã«è¨­å®šã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã§ãã¦ã„ã‚‹ã¨æ€ã†å ´åˆã€
          ã©ã“ã§è¿·ã£ã¦ã„ã‚‹ã‹è¦‹ã‚ˆã†ã¨ã™ã‚‹ãªã‚‰ã“ã®ãƒ­ã‚°ã¨ã‚µãƒ¼ãƒã®
          エラーログを見るã¨ã‚ˆã„ã§ã—ょã†ã€‚</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="jabberwock" id="jabberwock">ã¨ã‹ã’ã«æ³¨æ„: 警告ã¨äº‹ä¾‹</a></h2>
      
          <p><strong>注æ„!</strong>
          ã“ã®ç« ã¯å®Œå…¨ã§ã¯ã‚りã¾ã›ã‚“。ã“ã®ç« ã®æœ€æ–°æ”¹è¨‚版ã«ã¤ã„ã¦ã¯ã€
          Apache グループã®<a href="http://httpd.apache.org/docs/2.4/suexec.html">
          オンラインドキュメント</a>版をå‚ç…§ã—ã¦ãã ã•ã„。
          </p>
      
          <p>サーãƒã®è¨­å®šã«åˆ¶é™ã‚’ã‚‚ã†ã‘ã‚‹ wrapper ã«ã¤ã„ã¦ã€
          ã„ãã¤ã‹èˆˆå‘³æ·±ã„点ãŒã‚りã¾ã™ã€‚suEXEC ã«é–¢ã™ã‚‹ "ãƒã‚°"
          を報告ã™ã‚‹å‰ã«ã“れらを確èªã—ã¦ãã ã•ã„。</p>
      
          <ul>
            <li><strong>suEXEC ã®èˆˆå‘³æ·±ã„点</strong></li>
      
            <li>階層構造ã®åˆ¶é™
      
      
              <p class="indent">
                セキュリティã¨åŠ¹çŽ‡ã®ç†ç”±ã‹ã‚‰ã€<code>suEXEC</code> ã®å…¨ã¦ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯
                仮想ホストã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ãŠã‘る最上ä½ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ«ãƒ¼ãƒˆå†…ã‹ã€
                ユーザディレクトリã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ãŠã‘る個々ã®ãƒ¦ãƒ¼ã‚¶ã®æœ€ä¸Šä½ã®
                ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ«ãƒ¼ãƒˆå†…ã«æ®‹ã‚‰ãªã‘れã°ãªã‚Šã¾ã›ã‚“。
                例ãˆã°ã€å››ã¤ã®ä»®æƒ³ãƒ›ã‚¹ãƒˆã‚’設定ã—ã¦ã„ã‚‹å ´åˆã€
                仮想ホスト㮠suEXEC ã«æœ‰åˆ©ãªã‚ˆã†ã«ã€ãƒ¡ã‚¤ãƒ³ã® Apache
                ドキュメント階層ã®å¤–å´ã«å…¨ã¦ã®ä»®æƒ³ãƒ›ã‚¹ãƒˆã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãƒ«ãƒ¼ãƒˆã‚’
                構築ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚(例ã¯å¾Œæ—¥è¨˜è¼‰)
              </p>
            </li>
      
            <li>suEXEC 㮠PATH 環境変数
      
      
              <p class="indent">
                ã“れを変更ã™ã‚‹ã®ã¯å±é™ºã§ã™ã€‚ã“ã®æŒ‡å®šã«å«ã¾ã‚Œã‚‹å„パスãŒ
                <strong>ä¿¡é ¼ã§ãã‚‹</strong>
                ディレクトリã§ã‚ã‚‹ã“ã¨ã‚’確èªã—ã¦ãã ã•ã„。
                世界ã‹ã‚‰ã®ã‚¢ã‚¯ã‚»ã‚¹ã«ã‚ˆã‚Šã€èª°ã‹ãŒãƒ›ã‚¹ãƒˆä¸Šã§ãƒˆãƒ­ã‚¤ã®æœ¨é¦¬
                を実行ã§ãるよã†ã«ã¯ã—ãŸããªã„ã§ã—ょã†ã€‚
              </p>
            </li>
      
            <li>suEXEC ã‚³ãƒ¼ãƒ‰ã®æ”¹é€ 
      
      
              <p class="indent">
                繰り返ã—ã¾ã™ãŒã€ä½•ã‚’ã‚„ã‚ã†ã¨ã—ã¦ã„ã‚‹ã‹æŠŠæ¡ã›ãšã«ã“れをやるã¨
                <strong>大ããªå•題</strong>を引ãèµ·ã“ã—ã‹ã­ã¾ã›ã‚“。
                å¯èƒ½ãªé™ã‚Šé¿ã‘ã¦ãã ã•ã„。
              </p>
            </li>
          </ul>
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/suexec.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/suexec.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/suexec.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/suexec.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/suexec.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/suexec.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/glossary.html.tr.utf8������������������������������������������������������0000644�0000000�0000050�00000102157�13447004010�017502� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Terim Sözlüğü - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Terim Sözlüğü</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./de/glossary.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/glossary.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/glossary.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/glossary.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/glossary.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/glossary.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/glossary.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Bu sözlük, genelinde HTML sayfa sunumuna, özelinde Apache HTTP Sunucusuna
            özgü ortak terminolojinin bir kısmını içerir. Her kavram ile ilgili daha
            ayrıntılı bilgi bağlarla sağlanmıştır.</p>
        </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="definitions" id="definitions">Tanımlar</a></h2>
      
        <dl>
          <dt><a name="algorithm" id="algorithm">Algoritma</a></dt>
      
          <dd>Bir sorunu sonlu sayıda adımda çözümlemek için uygulanan kurallar
            kümesi veya anlam belirsizliği içermeyen bir formül. Şifreleme için
            kullanılan algoritmalara <dfn>şifre</dfn> denir.
          </dd>
      
          <dt><a name="transportlayersecurity" id="transportlayersecurity">Aktarım Katmanı Güvenliği</a></dt>
          <dd>İngilizcesi: Transport Layer Security <a name="tls" id="tls">(TLS)</a></dd>
          <dd>TCP/IP ağları üzerinden genel iletişimin kimlik doğrulamalı ve şifreli
            yapılabilmesi için SSL’nin ardılı olarak Genel Ağ Mühendisliği Görev Gücü
            (IETF) tarafından oluşturulmuş protokol. TLS’nin 1. sürümü ile SSL’in 3.
            sürümü hemen hemen aynıdır.<br />
            Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="subrequest" id="subrequest">Alt istek</a></dt>
          <dd>Diğer dosya sistemlerini veya URL yollarını kısmen veya tamamen
            değerlendiren modüller için sunucuda bir alt istek API'si mevcuttur. Bu
            API'nin olası müşterileri için
            <code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code>,
            <code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code> ve <code class="module"><a href="./mod/mod_include.html">mod_include</a></code> örnek
            verilebilir.
          </dd>
      
          <dt><a name="passphrase" id="passphrase">Anahtar Parolası</a></dt>
          <dd>Özel anahtar dosyalarını yetkisiz kişilerden koruyan sözcük veya
            cümle. Genellikle sadece <a class="glossarylink" href="./glossary.html#cipher" title="sözlüğe bakınız">şifreler</a>
            için kullanılan gizli şifreleme/şifre çözme anahtarını korur.<br />
            Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="apacheextensiontool" id="apacheextensiontool">Apache Eklenti
            Aracı</a> <a name="apxs" id="apxs">(apxs)</a></dt>
          <dd>İngilizcesi: APache eXtension Tool - apxs</dd>
          <dd><a class="glossarylink" href="./glossary.html#module" title="sözlüğe bakınız">Modül</a> kaynak kodlarının devinen
            paylaşımlı nesneler (<a class="glossarylink" href="./glossary.html#dso" title="sözlüğe bakınız">DSO</a>) halinde
            derlenmesine ve Apache Sunucusu içinde kurulmasına yardım eden bir Perl
            betiği.<br />Daha ayrıntılı bilgi için <code class="program"><a href="./programs/apxs.html">apxs</a></code> kılavuz
            sayfasına bakınız.
          </dd>
      
          <dt><a name="apacheportableruntime" id="apacheportableruntime">Apache Taşınabilir Arayüzü</a> <a name="apr" id="apr">(APR)</a></dt>
          <dd>İngilizcesi: Apache Portable Runtime - APR</dd>
          <dd>Sunucu ile işletim sistemi arasındaki temel arayüzleri oluşturan
            kütüphaneler kümesine verilen ad. APR, Apache HTTP Sunucusuna paralel
            bağımsız bir proje olarak geliştirilmektedir.<br />
            Bakınız: <a href="http://apr.apache.org/">Apache Taşınabilir Arayüzü
            Projesi</a>
          </dd>
      
          <dt><a name="context" id="context">BaÄŸlam</a></dt>
          <dd><a class="glossarylink" href="./glossary.html#configurationfile" title="sözlüğe bakınız">Yapılandırma dosyaları</a>nda
            sadece belli türdeki <a class="glossarylink" href="./glossary.html#directive" title="sözlüğe bakınız">yönerge</a>lerin
            bulunmasına izin verilen bir bölge.<br />
            Bakınız: <a href="mod/directive-dict.html#Context">Apache Yönergelerini
            Açıklamak için Kullanılan Terimler</a>
          </dd>
      
          <dt><a name="symmetriccryptophraphy" id="symmetriccryptophraphy">Bakışımlı Şifreleme Tekniği</a></dt>
          <dd>Şifreleme ve şifre çözme için tek bir anahtarın kullanıldığı
            bir ÅŸifreleme tekniÄŸi.<br />
            Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="header" id="header">Başlık</a></dt>
          <dd>Bir <a class="glossarylink" href="./glossary.html#http" title="sözlüğe bakınız">HTTP</a> isteğinin parçası olarak,
            gönderilen yanıtta asıl içerikten önce yer alan ve içerik hakkında
            mecazlar içeren veri.
          </dd>
      
          <dt><a name="connect" id="connect">CONNECT</a></dt>
          <dd>Ham veri kanallarını HTTP üzerinden yönlendirmek için kullanılan bir HTTP <a class="glossarylink" href="./glossary.html#method" title="sözlüğe bakınız">yöntemi</a>. SSL protokolü gibi diğer protokolleri sarmalamakta kullanılabilir.
          </dd>
      
          <dt><a name="dynamicsharedobject" id="dynamicsharedobject">Devingen
            Paylaşımlı Nesne</a> <a name="dso" id="dso">(DSO)</a></dt>
          <dd>İngilizcesi: Dynamic Shared Object (DSO)</dd>
          <dd>İstek halinde yüklenebilen, Apache <code class="program"><a href="./programs/httpd.html">httpd</a></code>
            çalıştırılabilir dosyasından ayrı olarak derlenmiş <a class="glossarylink" href="./glossary.html#module" title="sözlüğe bakınız">modül</a>lerin ortak adı.<br />
            Bakınız: <a href="dso.html">Devingen Paylaşımlı Nesne Desteği</a>
          </dd>
      
          <dt><a name="plaintext" id="plaintext">Düz Metin</a></dt>
          <dd>ÅžifrelenmemiÅŸ metin.</dd>
      
          <dt><a name="regularexpression" id="regularexpression">Düzenli İfade</a>
            <a name="regex" id="regex">(Regex)</a></dt>
          <dd>Metin içinde bir şablon tanımlama yolu. Örneğin, “A harfi ile
            başlayan bütün sözcükler†veya “10 rakamlı telefon numaraları†ya da
            “Baş harfi Z olmayan ve iki virgül içeren cümleler†gibi. Düzenli
            ifadeler, Apache’de belli özniteliklere uygun dosya veya özkaynakları
            toplamak için esnek bir yol sağlamasından ötürü oldukça yararlıdır.
            Örneğin, “resimler†dizini altındaki dosyalardan .gif ve .jpg uzantılı
            olanları toplamak için “<code>/resimler/.*(jpg|gif)$</code>†düzenli
            ifadesi yazılabilir. Dizgileri değiştirmek için düzenli ifadelerin
            kullanıldığı yerlerde, eşleşen (parantezlerin içinde) gruplanmış
            parçalara başvurmak için $1 ... $9 özel değişkenleri kullanılır. $0 özel
            değişkeni eşleşen ifadenin tamamına karşılık gelir. Bir dizgi içinde $
            işaretini kendisi olarak kullanmak isterseniz önüne bir \ imi
            koymalısınız. Geçmişe uyumluluk adına bazı yerlerde $0 yerine &amp;
            değişkeni kullanılabilir. Ancak 2.3.6 sürümünden beri bu artık mümkün
            değildir. Apache, <a href="http://www.pcre.org/">PCRE</a> kütüphanesi ile
            sağlanan Perl uyumlu düzenli ifadeleri kullanır. PCRE düzenli
            ifadelerinin sözdizimi ile ilgili ayrıntılı bilgiyi <a href="http://en.wikipedia.org/wiki/PCRE">Wikipedia</a>'da bulabilirsiniz.
          </dd>
      
          <dt><a name="accesscontrol" id="accesscontrol">EriÅŸim Denetimi</a></dt>
          
          <dd>Ağ bölgelerine erişimin kısıtlanması. Apache bağlamında normal
            olarak belli <em>URL</em>’lere erişimi kısıtlamak şeklinde
            uygulanır.<br /> Bakınız:  <a href="howto/auth.html">Kimlik Doğrulama,
            Yetkilendirme ve EriÅŸim Denetimi</a>
          </dd>
      
          <dt><a name="handler" id="handler">Eylemci</a></dt>
          <dd>Bir dosya istendiğinde uygulanacak eylemi Apache içinde gerçekleştiren
            nesne. Genellikle dosyalar, dosya türüne bağlı dolaylı eylemcilere
            sahiptir. Normalde tüm dosyalar sunucu tarafından sıradan birer dosya
            olarak işleme sokulduğu halde bazı belli dosyalar diğerlerinden ayrı
            ele alınır. Örneğin, <code>cgi-script</code> eylemcisi dosyaları
            <a class="glossarylink" href="./glossary.html#cgi" title="sözlüğe bakınız">CGI</a>’ler tarafından işlenebilir hale
            getirmek üzere işleme sokar.<br />
            Bakınız: <a href="handler.html">Apache Eylemcilerinin Kullanımı</a>
          </dd>
      
          <dt><a name="publickey" id="publickey">Genel Anahtar</a></dt>
          <dd><a class="glossarylink" href="./glossary.html#publickeycryptography" title="sözlüğe bakınız">Genel Anahtarlı
            Şifreleme Tekniği</a>nde, sahibinin yaptığı imzaları çözmeye ve
            sahibine gönderilen iletileri şifrelemeye yarayan genel erişime açık
            anahtar.<br />
            Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="publickeycryptography" id="publickeycryptography">Genel Anahtarlı Şifreleme Tekniği</a></dt>
          <dd>Şifreleme ve şifre çözme için iki ayrı anahtarın kullanıldığı
            bakışımsız şifreleme sistemlerinin konusu veya uygulaması. Bu amaçla
            kullanılan anahtarlar bir anahtar çiftinden oluşur. Genel Anahtarlı
            Şifrelemeye Bakışımsız Şifreleme de denir.<br />
            Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="privatekey" id="privatekey">Gizli Anahtar</a></dt>
          <dd><a class="glossarylink" href="./glossary.html#publickeycryptography" title="sözlüğe bakınız">Genel Anahtarlı
            Åžifreleme TekniÄŸi</a>nde, giden iletileri imzalamak ve gelen
            iletilerin şifrelerini çözmek amacıyla kullanılan gizli anahtar.<br />
            Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="https" id="https">Güvenli Hiper Metin Aktarım Protokolü
            (HTTPS)</a></dt>
          <dd>İngilizcesi: The HyperText Transfer Protocol (Secure), (HTTPS)</dd>
          <dd>Güvenli Hiper Metin Aktarım Protokolü, Genel Ağ’da kullanılan standart
            şifreli iletişim mekanizmasıdır. Aslında HTTP protokolünün <a class="glossarylink" href="./glossary.html#ssl" title="sözlüğe bakınız">SSL</a> üzerinden gerçekleştirilmesinden başka bir
            ÅŸey deÄŸildir.<br />
            Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="securesocketslayer" id="securesocketslayer">Güvenli Soket Katmanı</a></dt>
          <dd>İngilizcesi: Secure Sockets Layer <a name="ssl" id="ssl">(SSL)</a></dd>
          <dd>TCP/IP ağları üzerinden genel iletişimin kimlik doğrulamalı ve şifreli
            yapılabilmesi için Netscape Communications Corporation tarafından
            oluşturulmuş bir protokol. Günümüzde en çok <em>HTTPS</em>, yani SSL
            üzerinden Hiper Metin Aktarım Protokolü şeklinde kullanılmaktadır.<br />
            Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="hypertexttransferprotocol" id="hypertexttransferprotocol">Hiper Metin Aktarım Protokolü</a>
            <a name="http" id="hhtp">(HTTP)</a></dt>
          <dd>İngilizcesi: HyperText Transfer Protocol (HTTP)</dd>
          <dd>Genel Ağ’da kullanılan standart aktarım protokollerinden biri.
            Apache, <a href="http://ietf.org/rfc/rfc2616.txt">RFC 2616</a> ile
            tanımlanmış protokolün HTTP/1.1 olarak bilinen 1.1 sürümünü gerçekler.
          </dd>
      
          <dt><a name="htaccess" id="htaccess">.htaccess</a></dt>
          <dd>Belge dosyaları ağacı içine yerleştirilen bir <a class="glossarylink" href="./glossary.html#configurationfile" title="sözlüğe bakınız">yapılandırma dosyası</a> olup yerleştiği
            dizine ve o dizinin alt dizinlerine yapılandırma yönergeleri
            uygulanmasını sağlar. İsmine rağmen böyle bir dosyanın içerebileceği
            yönergeler erişim denetleme yönergeleri ile sınırlı değildir; hemen
            her tür yönergeyi içerebilir.<br />
            Bakınız: <a href="configuring.html">Yapılandırma Dosyaları</a>
          </dd>
      
          <dt><a name="httpd.conf" id="httpd.conf">httpd.conf</a></dt>
          <dd>Ana Apache <a class="glossarylink" href="./glossary.html#configurationfile" title="sözlüğe bakınız">yapılandırma
            dosyası</a>.  Dosya sistemindeki öntanımlı yeri
            <code>/usr/local/apache2/conf/httpd.conf</code> olup derleme
            sırasındaki yapılandırmayla veya çalışma anındaki yapılandırmayla
            baÅŸka bir yer belirtilebilir.<br />
            Bakınız: <a href="configuring.html">Yapılandırma Dosyaları</a>
          </dd>
      
          <dt><a name="export-crippled" id="export-crippled">İhracat Engelli</a></dt>
          <dd>İngilizcesi: Export-Crippled</dd>
          <dd>Amerika Birleşik Devletlerinin İhracat Yönetim Düzenlemelerine (EAR)
            uymak için şifreleme yoluyla sakatlanmış yazılım. İhracat engelli olması
            için şifrelenmiş yazılımları birer şifreli metin haline getiren şifre
            anahtarları küçük boyutlu olduğundan şifreleme zor
            kullanılarak kırılabilir.<br />
            Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="messagedigest" id="messagedigest">İleti Özeti</a></dt>
          <dd>İngilizcesi: Message Digest</dd>
          <dd>Aktarım sırasında içeriğinin değişme olasılığı bulunan bir iletinin
            içeriğini doğrulamak için kullanılan bir <a class="glossarylink" href="./glossary.html#hash" title="sözlüğe bakınız">özet</a>.<br />
            Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="reverseproxy" id="reverseproxy">Karşı Vekil</a></dt>
          <dd>İstemciye kendini <em>asıl sunucu</em> imiş gibi gösteren bir
            <a class="glossarylink" href="./glossary.html#proxy" title="sözlüğe bakınız">vekil</a> sunucu. Güvenlik, yük dengelemesi
            gibi sebeplerle asıl sunucuyu istemcilerden gizlemek için yararlıdır.
          </dd>
      
          <dt><a name="authentication" id="authentication">Kimlik DoÄŸrulama</a></dt>
          <dd>Sunucu, istemci veya kullanıcı gibi bir ağ öğesinin kimliğinin
            olumlanması.<br />Bakınız: <a href="howto/auth.html">Kimlik Doğrulama,
            Yetkilendirme ve EriÅŸim Denetimi</a>
          </dd>
      
          <dt><a name="mime-type" id="mime-type">MIME türü</a></dt>
          <dd>Aktarılan belgenin çeşidini betimlemenin bir yolu. MIME, Türkçe’ye
            ‘Çok Amaçlı Genel Ağ Posta Eklentileri’ olarak çevrilebilecek olan
            "Multipurpose Internet Mail Extensions" sözcüklerinden türetilmiş bir
            kısaltmadır. MIME türleri bir bölü çizgisi ile ayrılmış bir ana ve bir
            alt belge türünün birleşiminden oluşur. <code>text/html</code>,
            <code>image/gif</code> ve <code>application/octet-stream</code> örnek
            olarak verilebilir. HTTP protokolünde MIME türleri
            <code>Content-Type</code> <a class="glossarylink" href="./glossary.html#header" title="sözlüğe bakınız">başlığında</a>
            aktarılır.<br />Bakınız: <a href="mod/mod_mime.html">mod_mime</a>
          </dd>
      
          <dt><a name="module" id="module">Modül</a></dt>
          <dd>Bir programın bağımsız parçalarından her biri. Apache işlevselliğinin
            çoğu yapılandırmaya dahil edilip edilmeyeceğine kullanıcı tarafından
            karar verilebilen modüllerden oluşur. Apache <code class="program"><a href="./programs/httpd.html">httpd</a></code>
            çalıştırılabiliri içinde derlenmiş modüllere <dfn>durağan modüller</dfn>
            adı verilirken ayrı bir yerde saklanan ve çalışma anında isteğe bağlı
            olarak yüklenebilen modüllere <dfn>devingen modüller</dfn> veya
            <a class="glossarylink" href="./glossary.html#dso" title="sözlüğe bakınız">DSO</a>’lar denir. Yapılandırmaya öntanımlı
            olarak dahil edilen modüllere <dfn>temel modüller</dfn> denir. Apache
            için kullanılabilecek modüllerin çoğu Apache HTTP Sunucusunun
            <a class="glossarylink" href="./glossary.html#tarball" title="sözlüğe bakınız">tar paketi</a> içinde dağıtılmaz; bunlara
            <dfn>üçüncü parti modüller</dfn> denir.<br />
            Bakınız: <a href="mod/">Modül Dizini</a>
          </dd>
      
          <dt><a name="openssl" id="openssl">OpenSSL</a></dt>
          <dd>SSL/TLS için açık kaynak kodlu araç kiti.<br />Daha ayrıntılı bilgi
          için <a href="http://www.openssl.org/">http://www.openssl.org/</a>
          adresine bakınız.
          </dd>
      
          <dt><a name="commongatewayinterface" id="commongatewayinterface">Ortak Ağgeçidi Arayüzü</a> <a name="cgi" id="cgi">(CGI)</a></dt>
          <dd>İngilizcesi: Common Gateway Interface (CGI)</dd>
          <dd>Bir HTTP sunucusunun bir harici programa hizmet istekleri yapmasını
            mümkün kılan, sunucu ile bir harici program arasındaki bir arayüz
            standardı. Özellikleri kapsayan bir
            <a href="http://www.ietf.org/rfc/rfc3875">Bilgilendirici RFC </a>
            vardır.<br />
            Bakınız: <a href="howto/cgi.html">CGI ile Devingen İçerik</a>
          </dd>
      
          <dt><a name="environmentvariable" id="environmentvariable">Ortam DeÄŸiÅŸkeni</a> <a name="env-variable" id="env-variable">(ortam-deÄŸiÅŸkeni)</a></dt>
          <dd>İşletim sistemi kabuğu tarafından yönetilen ve programlar arasında
            bilgi alışverişi amacıyla kullanılan isimli değişkenler. Ayrıca,
            Apache de ortam değişkenleri olarak tanımlanabilecek dahili değişkenler
            içerir fakat bunlar kabuk ortamında değil dahili Apache yapıları içinde
            saklanır.<br />
            Bakınız: <a href="env.html">Apache Ortam Değişkenleri</a>
          </dd>
      
          <dt><a name="session" id="session">Oturum</a></dt>
          <dd>Bir iletiÅŸimin baÄŸlamsal bilgileri.</dd>
      
          <dt><a name="hash" id="hash">Özet</a></dt>
          <dd>UzunluÄŸu deÄŸiÅŸebilen bir dizgenin belli bir durumuna iliÅŸkin sabit
            uzunlukta bir dizge üretmek için kullanılan geri dönüşümsüz bir
            algoritma. Algoritmaya girdi olan farklı uzunluktaki dizgeler (özet
            işlevine bağlı olarak) aynı uzunlukta farklı özetler üretir.
          </dd>
      
          <dt><a name="virtualhosting" id="virtualhosting">Sanal Konaklık</a></dt>
          <dd>Tek bir Apache sunucusundan çok sayıda site sunulması. <em>IP tabanlı
            sanal konaklık</em>ta siteler birbirlerinden IP adreslerine göre
            ayrılırken, <em>isim tabanlı sanal konaklık</em>ta siteler aynı IP
            adresinden kendi isimleriyle sunulabilirler.<br />
            Bakınız: <a href="vhosts/">Apache Sanal Konak Belgeleri</a>
          </dd>
      
          <dt><a name="digitalsignature" id="digitalsignature">Sayısal İmza</a></dt>
          <dd>Bir sertifikayı veya bir dosyayı doğrulamakta kullanılan şifreli bir
            metin. Bir imza <a class="glossarylink" href="./glossary.html#certificationauthority" title="sözlüğe bakınız">Sertifika
            Makamı</a> tarafından bir <em>sertifikaya</em> gömülü olan
            <em>genel anahtardan</em> bir özet üretilerek oluşturulur. İmza şifresi
            sadece <em>sertifika</em> sahibi ağ öğesinin kimliğini doğrulayacak
            SM’nin genel anahtarı kullanılarak çözülebilir.<br />
            Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="certificate" id="certificate">Sertifika</a></dt>
          <dd>Sunucu, istemci gibi ağ öğelerinin kimliğini kanıtlamakta kullanılan
            bir veri kaydı. Bir sertifika, sertifika sahibi (buna sertifikanın
            konusu da denir), sertifikayı imzalayan <a class="glossarylink" href="./glossary.html#certificationauthority" title="sözlüğe bakınız">Sertifika Makamı</a> (SM) (buna
            sertifika yayıncısı da denir), sertifika sahibinin <a class="glossarylink" href="./glossary.html#publickey" title="sözlüğe bakınız">genel anahtarı</a> ve SM tarafından üretilen imza
            gibi parçalardan oluşan X.509 bilgisi içerir. Ağ öğeleri bu imzaları SM
            sertifikalarını kullanarak doğrular.<br />
            Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="certificatsigningrequest" id="certificatsigningrequest">Sertifika İmzalama İsteği</a> <a name="csr" id="csr">(Sİİ)</a></dt>
          <dd>İngilizcesi: Certificate Signing Request (CSR)</dd>
          <dd>İmzasız bir sertifikayı  <a class="glossarylink" href="./glossary.html#certificationauthority" title="sözlüğe bakınız">Sertifika Makamı</a>na kendi SM <em>Sertifika</em>sının
            <a class="glossarylink" href="./glossary.html#privatekey" title="sözlüğe bakınız">özel anahtar</a>ı ile imzalaması
            için yapılan istek. Sİİ imzalanınca bir gerçek sertifika haline
            gelir.<br />Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="certificationauthority" id="certificationauthority">Sertifika Makamı</a> <a name="ca" id="ca">(SM)</a></dt>
          <dd>İngilizcesi: Certification Authority (CA)</dd>
          <dd>Ağ öğelerinin güvenilir olarak kimliklerinin doğrulanması için
            sertifikaları imzalayan güvenilir üçüncü şahıs. Diğer ağ öğeleri,
            sertifikalı bir öğenin kimliğini kanıtlayan bir SM’yi doğrulamak
            için imzayı sınayabilir.<br />
            Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="modulemagicnumber" id="modulemagicnumber">Sihirli Modül
            Numarası</a> (<a name="mmn" id="mmn">SMN</a>)</dt>
          <dd>Sihirli Modül Numarası, modüllerin ikil uyumluluğu ile ilgili olarak
            Apache kaynak kodunda tanımlanmış bir sabittir. Apache dahili yapıları,
            uygulama programlama arayüzünün önemli parçaları ve işlev çağrıları artık
            ikil uyumluluÄŸun garanti edilemeyeceÄŸi kadar deÄŸiÅŸtiÄŸi zaman SMN
            değiştirilir. Bir SMN değişikliğinde ve bazen de sırf yeni bir Apache
            sürümü ile çalışmak icabettiğinde tüm üçüncü parti modüllerin en azından
            yeniden derlenmesi gerekir.
          </dd>
      
          <dt><a name="ssleay" id="ssleay">SSLeay</a></dt>
          <dd>Eric A. Young tarafından geliştirilmiş özgün SSL/TLS
            gerçeklenim kütüphanesi.
          </dd>
      
          <dt><a name="servernameindication" id="servernameindication">Sunucu Adı
            Belirtimi</a></dt>
            <dd>İngilizcesi: Server Name Indication <a name="sni" id="sni">(SNI)</a></dd>
          <dd>İlk SSL uzlaşımı sırasında istenen sunucu isminin aktarılmasını
            mümkün kılan bir SSL işlevidir. Böylece sunucunun, SSL uzlaşım
            işlemlerlerinde kullanılacak sanal konak yapılandırmasını doğru
            bir şekilde seçebilmesi sağlanmıştır. Bu özellik RFC 3546'da TLS
            eklentili SSL başlatma bölümüne eklenmiştir.<br />
            Bakınız: <a href="ssl/ssl_faq.html">SSL SSS</a>
            ve <a href="http://www.ietf.org/rfc/rfc3546.txt">RFC 3546</a>
          </dd>
      
          <dt><a name="serversideincludes" id="serversideincludes">Sunucu Taraflı İçerik Yerleştirme</a></dt>
          <dd>İngilizcesi: Server Side Includes <a name="ssi" id="ssi">(SSI)</a></dd>
          <dd>İşlem yönergelerini HTML dosyalara gömme tekniği.<br />
            Bakınız: <a href="howto/ssi.html">Sunucu Taraflı İçerik Yerleştirmeye
            GiriÅŸ</a>
          </dd>
      
          <dt><a name="filter" id="filter">Süzgeç</a></dt>
          <dd>Sunucu tarafından alınan ve gönderilen veriye uygulanan bir işlem.
            Giriş süzgeçleri sunucuya istemci tarafından gönderilen veriyi işlerken
            çıkış süzgeçleri sunucu tarafından istemciye gönderilen belgeleri işler.
            Örneğin, <code>INCLUDES</code> çıkış süzgeci, belgeleri <a class="glossarylink" href="./glossary.html#ssi" title="sözlüğe bakınız">sunucu taraflı içerik</a> için işleme sokar.<br />
            Bakınız: <a href="filter.html">Süzgeçler</a>
          </dd>
      
          <dt><a name="cipher" id="cipher">Åžifre</a></dt>
          <dd>Veri şifrelemek için kullanılan bir algoritma veya sistem. DES, IDEA
            veya RC4 örnek verilebilir.<br />
            Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="ciphertext" id="ciphertext">Åžifreli Metin</a></dt>
          <dd>Bir <a class="glossarylink" href="./glossary.html#plaintext" title="sözlüğe bakınız">Düz Metin</a> bir
            <a class="glossarylink" href="./glossary.html#cipher" title="sözlüğe bakınız">Şifre</a>den geçirilince elde edilen
            sonuç.<br />Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      
          <dt><a name="fully-qualifieddomain-name" id="fully-qualifieddomain-name">Tam Alan Adı</a>
            <a name="fqdn" id="fqdn">(TAA)</a></dt>
          <dd>İngilizcesi: Fully-Qualified Domain-Name (FQDN)</dd>
          <dd>Bir IP adresiyle eşleşebilen, bir konak adıyla bir alan adının
            birleşiminden oluşan eşsiz bir ağ öğesi ismi. Örneğin,
            <code>httpd.apache.org</code> tam alan adında <code>httpd</code> bir konak
            adıyken <code>apache.org</code> bir alan adıdır.
          </dd>
      
          <dt><a name="tarball" id="tarball">Tar Paketi</a></dt>
          <dd><code>tar</code> uygulaması kullanılarak bir araya getirilmiş
            dosyalardan oluşan bir paket. Apache dağıtımları sıkıştırılmış tar
            arşivleri içinde veya pkzip kullanılarak saklanır.
          </dd>
      
          <dt><a name="uniformresourceidentifier" id="uniformresourceidentifier">Tektip Özkaynak Betimleyici</a></dt>
          <dd>İngilizcesi: Uniform Resource Identifier
            <a name="URI" id="URI">(URI)</a></dd>
          <dd>Soyut veya somut bir özkaynağı betimlemek için kullanılan bütünleşik
            bir karakter dizisi. Aslen <a href="http://www.ietf.org/rfc/rfc2396.txt">RFC 2396</a> tarafından tanımlanmıştır. Genel Ağ’da kullanılan URI’lerden
            genellikle <a class="glossarylink" href="./glossary.html#url" title="sözlüğe bakınız">URL</a>’ler olarak bahsedilir.
          </dd>
      
          <dt><a name="uniformresourcelocator" id="uniformresourcelocator">Tektip Özkaynak Konumlayıcı</a></dt>
          <dd>İngilizcesi: Uniform Resource Locator <a name="url" id="url">(URL)</a></dd>
          <dd>Genel Ağ üzerindeki bir özkaynağın ismi veya adresi. Aslen <a class="glossarylink" href="./glossary.html#uniformresourceidentifier" title="sözlüğe bakınız">Tektip Özkaynak Betimleyici</a>
            denilen terimin gayrı resmi karşılığıdır. URL’ler <code>http</code> veya
            <code>https</code> gibi bir şemayı takip eden bir konak adı ve bir dosya
            yolundan oluşurlar.  Örneğin, bu sayfanın URL’si
            <code>http://httpd.apache.org/docs/2.4/glossary.html</code> olurdu.
          </dd>
      
          <dt><a name="proxy" id="proxy">Vekil</a></dt>
          <dd><em>Asıl sunucu</em> ile istemci arasında aracılık yapan sunucu.
            İstemciden aldığı istekleri asıl sunucuya gönderip, ondan aldığı
            yanıtları istemciye gönderir. Aynı içeriğe birden fazla istemci talip
            olursa vekil sunucu bu istekleri her seferinde asıl sunucudan istemek
            yerine kendi deposundan karşılar, böylece yanıt zamanı kısalır.<br />
            Bakınız: <a href="mod/mod_proxy.html">mod_proxy</a>
          </dd>
      
          <dt><a name="configurationfile" id="configurationfile">Yapılandırma Dosyası</a></dt>
          <dd>Apache yapılandırmasını denetim altına alan <a class="glossarylink" href="./glossary.html#directive" title="sözlüğe bakınız">yönergeleri</a> içeren bir metin dosyası.<br />
            Bakınız: <a href="configuring.html">Yapılandırma Dosyaları</a>
          </dd>
      
          <dt><a name="configurationdirective" id="configurationdirective">Yapılandırma Yönergesi</a></dt>
          <dd>Bakınız: <a class="glossarylink" href="./glossary.html#directive" title="sözlüğe bakınız">Yönerge</a></dd>
      
          <dt><a name="directive" id="directive">Yönerge</a></dt>
          <dd>Belli Apache davranışlarından bir veya daha fazlasını denetim altına
            alan bir yapılandırma komutu. Yönergeler <a class="glossarylink" href="./glossary.html#configurationfile" title="sözlüğe bakınız">yapılandırma dosyalarına</a> yerleştirilir.<br />
            Bakınız: <a href="mod/directives.html">Yönerge Dizini</a>
          </dd>
      
          <dt><a name="method" id="method">Yöntem</a></dt>
          <dd><a class="glossarylink" href="./glossary.html#http" title="sözlüğe bakınız">HTTP</a> bağlamında, istemci tarafından
            istek satırında belirtilen, bir özkaynağa uygulanacak bir eylem. HTTP
            bağlamında belirtilebilecek yöntemlere örnek olarak <code>GET</code>,
            <code>POST</code> ve <code>PUT</code> verilebilir.
          </dd>
      
          <dt><a name="x.509" id="x.509">X.509</a></dt>
          <dd>SSL/TLS kimlik doğrulamasında kullanılmak üzere Uluslararası Telekom
            Birliği (ITU-T) tarafından önerilmiş bir kimlik doğrulama sertitifası
            şeması<br /> Bakınız: <a href="ssl/">SSL/TLS Şifrelemesi</a>
          </dd>
      </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./de/glossary.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/glossary.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/glossary.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/glossary.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/glossary.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/glossary.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/glossary.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/glossary.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/invoking.html��������������������������������������������������������������0000644�0000000�0000050�00000001217�13362070302�016150� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: invoking.html.de
      Content-Language: de
      Content-type: text/html; charset=ISO-8859-1
      
      URI: invoking.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: invoking.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: invoking.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: invoking.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: invoking.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: invoking.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/filter.html.tr.utf8��������������������������������������������������������0000644�0000000�0000050�00000040232�13447004010�017117� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Süzgeçler - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Süzgeçler</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./en/filter.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/filter.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/filter.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/filter.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/filter.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/filter.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Bu belge, Apache’de süzgeç kullanımı hakkındadır.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#intro">Apache 2’de Süzme İşlemi</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#smart">Akıllı Süzme</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#service">Süzgeçleri bir HTTP Hizmeti gibi göstermek </a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#using">Süzgeçlerin Kullanımı</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="intro" id="intro">Apache 2’de Süzme İşlemi</a></h2> 
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code></li><li><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code></li><li><code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code></li><li><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="./mod/mod_charset_lite.html">mod_charset_lite</a></code></li><li><code class="module"><a href="./mod/mod_reflector.html">mod_reflector</a></code></li><li><code class="module"><a href="./mod/mod_buffer.html">mod_buffer</a></code></li><li><code class="module"><a href="./mod/mod_data.html">mod_data</a></code></li><li><code class="module"><a href="./mod/mod_ratelimit.html">mod_ratelimit</a></code></li><li><code class="module"><a href="./mod/mod_reqtimeout.html">mod_reqtimeout</a></code></li><li><code class="module"><a href="./mod/mod_request.html">mod_request</a></code></li><li><code class="module"><a href="./mod/mod_sed.html">mod_sed</a></code></li><li><code class="module"><a href="./mod/mod_substitute.html">mod_substitute</a></code></li><li><code class="module"><a href="./mod/mod_xml2enc.html">mod_xml2enc</a></code></li><li><code class="module"><a href="./mod/mod_proxy_html.html">mod_proxy_html</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_filter.html#filterchain">FilterChain</a></code></li><li><code class="directive"><a href="./mod/mod_filter.html#filterdeclare">FilterDeclare</a></code></li><li><code class="directive"><a href="./mod/mod_filter.html#filterprotocol">FilterProtocol</a></code></li><li><code class="directive"><a href="./mod/mod_filter.html#filterprovider">FilterProvider</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#addinputfilter">AddInputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#addoutputfilter">AddOutputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#removeinputfilter">RemoveInputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#removeoutputfilter">RemoveOutputFilter</a></code></li><li><code class="directive"><a href="./mod/mod_reflector.html#reflectorheader">ReflectorHeader</a></code></li><li><code class="directive"><a href="./mod/mod_ext_filter.html#extfilterdefine">ExtFilterDefine</a></code></li><li><code class="directive"><a href="./mod/mod_ext_filter.html#extfilteroptions">ExtFilterOptions</a></code></li><li><code class="directive"><a href="./mod/core.html#setinputfilter">SetInputFilter</a></code></li><li><code class="directive"><a href="./mod/core.html#setoutputfilter">SetOutputFilter</a></code></li></ul></td></tr></table>
      
          <p>Apache 2.0 ve sonrasında mevcut olan Süzgeç Zinciri, uygulamaların
            nereden geldiğine bakmaksızın gelen ve giden verileri oldukça esnek ve
            yapılandırılabilir tarzda işlemesini mümkün kılar. Böylece, gelen veriyi
            bir takım ön işlemlerden geçirebilir, giden veriyi de son bir defa bazı
            iÅŸlemlere sokabiliriz. Bu iÅŸlem temel olarak geleneksel istek iÅŸleme
            aşamalarından bağımsızdır.</p>
      
          <p class="figure">
            <img src="images/filter_arch.tr.png" width="569" height="392" alt="Süzgeçler, İstek işleme eksenine dik bir veri eksenine peş peşe  yerleştirilebilir." />
          </p>
      
          <p>Standard Apache dağıtımıyla gelen süzgeç uygulamalarından bazıları:</p>
      
          <ul>
            <li><code class="module"><a href="./mod/mod_include.html">mod_include</a></code>, sunucu taraflı içerik yerleştirmeyi
            gerçekler.</li>
            <li><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code>, SSL şifrelemesini gerçekler (https).</li>
            <li><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code>, veri sıkıştırma/açma işlemlerini
            çalışma anında gerçekleştirir.</li>
            <li><code class="module"><a href="./mod/mod_charset_lite.html">mod_charset_lite</a></code>, karakter kümeleri arasında
            dönüşümü gerçekleştirir.</li>
            <li><code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code>, harici bir yazılımı bir süzgeç
            olarak çalıştırır.</li>
          </ul>
      
          <p>Apache, bunlardan başka, bayt dizilerinin elde edilmesi ve içeriğin
            bölünmesi gibi işlemleri gerçekleştirmek için bir takım dahili süzgeçler
            de  kullanabilir.</p>
      
          <p>Üçüncü parti süzgeç modülleri tarafından gerçeklenmiş çok geniş bir
            uygulama alanı mevcuttur; <a href="http://modules.apache.org/">modules.apache.org</a> ve benzerlerinden temin edilebilecek bu tür
            modüllerden bazılarının uygulama alanları:</p>
      
          <ul>
            <li>HTML ve XML belgelerin işlenmesi ve yazılması</li>
            <li>XSLT dönüşümleri ve XInclude’lar</li>
            <li>XML İsim-alanı desteği</li>
            <li>HTML Formlarının çözümlenmesi ve sunucuya dosya yükleme</li>
            <li>Resim iÅŸleme</li>
            <li>PHP betikleri gibi zararlı olabilecek uygulamalardan korunma</li>
            <li>Metin düzenleme ve arama işlemleri</li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="smart" id="smart">Akıllı Süzme</a></h2>
          <p class="figure">
            <img src="images/mod_filter_new.tr.png" width="423" height="331" alt="Farklı süzgeç üreticilerinin uygulamaları istek işlemenin durumuna  bağlı olarak akıllıca uygulanabilir." />
          </p>
      
          <p><code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code>, Apache 2.1 ve sonrasında mevcut olup,
            süzgeç zincirinin çalışma anında devingen olarak yapılandırılabilmesini
            mümkün kılar. Böylece, örneğin, bir vekili, özgün sunucunun ne
            göndereceğini bilmeden HTML’yi bir HTML süzgeciyle yazmaya ve JPEG
            resimleri tamamen farklı bir süzgeçten geçirmeye ayarlayabilirsiniz. Bu,
            asıl içeriğe bağlı olarak çalışma anında içeriği farklı içerik
            sağlayıcılara dağıtan bir süzgeç düzeneği kullanılarak çalışır. Bir
            süzgeç, doğrudan zincire yerleştirilip koşulsuz olarak
            çalıştırılabileceği gibi bir içerik sağlayıcı gibi kullanılarak zincire
            devingen olarak yerleştirilebilir. Örneğin:</p>
      
          <ul>
            <li>Bir HTML işleme süzgeci sadece içerik text/html veya
            application/xhtml+xml olduğu takdirde çalışır.</li>
            <li>Bir sıkıştırma süzgeci sadece girdi sıkıştırılabilir nitelikteyse ve
            sıkıştırılmamışsa çalışır.</li>
            <li>Bir karakter kümesi dönüşüm süzgeci, bir metin belgesi istenen
            karakter kümesine sahip değilse zincire yerleştirilir.</li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="service" id="service">Süzgeçleri bir HTTP Hizmeti gibi göstermek </a></h2>
          
          <p>Süzgeçler, istemciden kaynaklanan içeriği işlemekte kullanılabileceği
            gibi <code class="module"><a href="./mod/mod_reflector.html">mod_reflector</a></code> modülü kullanılarak sunucudan
            kaynaklanan içeriği işlemekte de kullanılabilir.</p>
      
          <p><code class="module"><a href="./mod/mod_reflector.html">mod_reflector</a></code> istemcilerden gelen POST isteklerini
            kabul eder ve çıktı süzgeç yığıtı yoluyla istemciye aktararak, POST
            isteği içinde alınan içerik istek gövdesini yanıt içinde geri
            gönderir.</p>
      
          <p>Bu teknik, bir çıktı süzgeciyle istek gövdesinde gerekli dönüşümün
            sağlandığı durumda, bir uygulama sunucusu yığıtı içinde çalışan bir http
            hizmetinin yerine de kullanılabilir. Örneğin,
            <code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code> modülü genel bir sıkıştırma hizmeti
            sağlamakta kullanılabilir veya bir resim dönüştürme süzgeci bir resim
            dönüşüm hizmeti haline getirilebilir.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="using" id="using">Süzgeçlerin Kullanımı</a></h2>
          <p>Süzgeçler iki şekilde kullanılır: Basit ve Devingen.
            Genelde ikisinden biri kullanılır; karışık kullanılırsa istenmeyen
            sonuçlara yol açabilir (ise de, basit girdi süzme ile çıktı süzme işlemi
            basit olsun olmasın karışık kullanılabilir).</p>
      
          <p>Basit yol, girdi süzgeçlerini yapılandırmanın tek yoludur ve bir
            durağan süzgeç zincirinin gerektiği yerlerde çıktı süzgeçleri için
            yeterlidir. İlgili yönergeler:
            <code class="directive"><a href="./mod/core.html#setinputfilter">SetInputFilter</a></code>,
            <code class="directive"><a href="./mod/core.html#setoutputfilter">SetOutputFilter</a></code>,
            <code class="directive"><a href="./mod/mod_mime.html#addinputfilter">AddInputFilter</a></code>,
            <code class="directive"><a href="./mod/mod_mime.html#addoutputfilter">AddOutputFilter</a></code>,
            <code class="directive"><a href="./mod/mod_mime.html#removeinputfilter">RemoveInputFilter</a></code> ve
            <code class="directive"><a href="./mod/mod_mime.html#removeoutputfilter">RemoveOutputFilter</a></code>.</p>
      
          <p>Devingen yol, <code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code> belgesinde açıklandığı gibi,
            çıktı süzgeçlerinin hem durağan hem de esnek ve devingen olarak
            yapılandırılabilmesini mümkün kılar. İlgili yönergeler:
            <code class="directive"><a href="./mod/mod_filter.html#filterchain">FilterChain</a></code>,
            <code class="directive"><a href="./mod/mod_filter.html#filterdeclare">FilterDeclare</a></code> ve
            <code class="directive"><a href="./mod/mod_filter.html#filterprovider">FilterProvider</a></code>.</p>
      
          <p><code class="directive"><a href="./mod/core.html#addoutputfilterbytype">AddOutputFilterByType</a></code> yönergesi
            hala desteklenmekteyse de kullanımı artık
            önerilmemektedir. Onun yerine devingen yapılandırma kullanınız.</p>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./en/filter.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/filter.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/filter.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/filter.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/filter.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/filter.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/filter.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/stopping.html.fr.utf8������������������������������������������������������0000644�0000000�0000050�00000047254�13412755316�017510� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Arrêt et redémarrage du serveur HTTP Apache - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Arrêt et redémarrage du serveur HTTP Apache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./de/stopping.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/stopping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/stopping.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/stopping.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/stopping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/stopping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/stopping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Ce document couvre l'arrêt et le redémarrage du
          serveur HTTP Apache sur
          les systèmes Unix et similaires. Les utilisateurs de Windows NT, 2000
          and XP doivent consulter
          <a href="platform/windows.html#winsvc">Exécuter httpd en tant que
          service</a> et les utilisateurs de Windows 9x et ME doivent consulter
          <a href="platform/windows.html#wincons">Exécuter httpd comme une
          application de type console</a> pour plus d'informations sur le contrôle
          de httpd à partir de ces plateformes.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#introduction">Introduction</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#term">Arrêter immédiatement</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#graceful">Redémarrage en douceur</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#hup">Redémarrer immédiatement</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#gracefulstop">Arrêt en douceur</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><code class="program"><a href="./programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="./programs/apachectl.html">apachectl</a></code></li><li><a href="invoking.html">Démarrage</a></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">Introduction</a></h2>
      
          <p>Afin d'arrêter ou redémarrer le serveur HTTP Apache, vous devez envoyer un signal aux
          processus <code class="program"><a href="./programs/httpd.html">httpd</a></code> en cours d'exécution.  Les signaux
          peuvent être envoyés de deux manières. La
          première méthode consiste à
          utiliser la commande unix <code>kill</code>
          pour envoyer directement des signaux aux processus. Vous pouvez remarquer
          que plusieurs processus <code class="program"><a href="./programs/httpd.html">httpd</a></code> s'exécutent sur votre
          système, mais il vous suffit d'envoyer les signaux au processus parent,
          dont le PID est enregistré dans le fichier précisé par la directive
          <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code>. Autrement dit, vous
          n'aurez jamais besoin d'envoyer des signaux à aucun des
          processus enfants, mais seulement au processus parent. Quatre types
          de signaux peuvent être envoyés au processus parent :
          <code><a href="#term">TERM</a></code>,
          <code><a href="#graceful">USR1</a></code>,
          <code><a href="#hup">HUP</a></code>, et
          <code><a href="#gracefulstop">WINCH</a></code>, qui
          seront décrit plus loin.</p>
      
          <p>Pour envoyer un signal au processus parent, vous devez entrer une commande
          du style :</p>
      
      <div class="example"><p><code>kill -TERM `cat /usr/local/apache2/logs/httpd.pid`</code></p></div>
      
          <p>La seconde méthode permettant d'envoyer des signaux aux processus
          <code class="program"><a href="./programs/httpd.html">httpd</a></code>
          consiste à utiliser les options <code>stop</code>,
          <code>restart</code>, <code>graceful</code> et
          <code>graceful-stop</code> du commutateur <code>-k</code> de la ligne
          de commande comme décrit ci-dessous.  Ce sont des arguments du binaire
          <code class="program"><a href="./programs/httpd.html">httpd</a></code>, mais il est recommandé de les utiliser
          avec le script de contrôle <code class="program"><a href="./programs/apachectl.html">apachectl</a></code>, qui se
          chargera de les passer à <code class="program"><a href="./programs/httpd.html">httpd</a></code>.</p>
      
          <p>Après avoir envoyé un signal à <code class="program"><a href="./programs/httpd.html">httpd</a></code>, vous pouvez
          suivre le cours de son action en entrant :</p>
      
      <div class="example"><p><code>tail -f /usr/local/apache2/logs/error_log</code></p></div>
      
          <p>Adaptez ces exemples en fonction de la définition de vos directives
          <code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code> et
          <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="term" id="term">Arrêter immédiatement</a></h2>
      
      <dl><dt>Signal: TERM</dt>
      <dd><code>apachectl -k stop</code></dd>
      </dl>
      
          <p>A la réception du signal <code>TERM</code> ou <code>stop</code>,
          le processus parent tente immédiatement
          de tuer tous ses processus enfants. Cela peut durer plusieurs secondes.
          Après cela, le processus parent lui-même se termine. Toutes les requêtes
          en cours sont terminées, et plus aucune autre n'est traitée.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="graceful" id="graceful">Redémarrage en douceur</a></h2>
      
      <dl><dt>Signal: USR1</dt>
      <dd><code>apachectl -k graceful</code></dd>
      </dl>
      
          <p>A la réception du signal <code>USR1</code> ou
          <code>graceful</code>, le
          processus parent envoie aux processus enfants
          <em>l'ordre</em> de se terminer une fois leur requête courante
          traitée (ou de se terminer immédiatement s'ils n'ont plus rien à traiter).
          Le processus parent relit ses fichiers de configuration et
          réouvre ses fichiers de log. Chaque fois qu'un enfant s'éteint, le
          processus parent le remplace par un processus
          enfant de la nouvelle <em>génération</em> de la
          configuration, et celui-ci commence immédiatement à traiter les
          nouvelles requêtes.</p>
      
          <p>Ce code est conçu pour toujours respecter la directive de contrôle
          de processus des modules MPMs, afin que les nombres de processus et de
          threads
          disponibles pour traiter les demandes des clients soient maintenus à
          des valeurs appropriées tout au long du processus de démarrage.
          En outre, il respecte la directive
          <code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code> de la manière
          suivante : si après une seconde au moins <code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code> nouveaux processus
          enfants n'ont pas été créés, un nombre suffisant de processus
          supplémentaires est créé pour combler le manque. Ainsi le code
          tente de maintenir à la fois le nombre approprié de processus enfants
          en fonction de la charge du serveur, et le nombre de processus défini par la
          directive <code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code>.</p>
      
          <p>Les utilisateurs du module <code class="module"><a href="./mod/mod_status.html">mod_status</a></code>
          noteront que les statistiques du serveur ne sont <strong>pas</strong>
          remises à zéro quand un signal <code>USR1</code> est envoyé. Le code
          a été conçu à la fois pour minimiser la durée durant laquelle le
          serveur ne peut pas traiter de nouvelles requêtes (elle sont mises en
          file d'attente par le système d'exploitation, et ne sont ainsi jamais
          perdues) et pour respecter vos paramètres de personnalisation.
          Pour y parvenir, il doit conserver le
          <em>tableau</em> utilisé pour garder la trace de tous les processus
          enfants au cours des différentes générations.</p>
      
          <p>Dans son état des processus,
          le module status utilise aussi un caractère <code>G</code> afin d'indiquer
          quels processus enfants ont encore des traitements de requêtes en cours
          débutés avant que l'ordre graceful restart ne soit donné.</p>
      
          <p>Pour l'instant, il est impossible pour un script de rotation
          des logs utilisant
          <code>USR1</code> de savoir de manière certaine si tous les processus
          enfants inscrivant des traces de pré-redémarrage sont terminés.
          Nous vous suggérons d'attendre un délai suffisant après l'envoi du
          signal <code>USR1</code>
          avant de faire quoi que ce soit avec les anciens logs. Par exemple,
          si la plupart de vos traitements durent moins de 10 minutes pour des
          utilisateurs empruntant des liaisons à faible bande passante, alors vous
          devriez attendre 15 minutes avant de faire quoi que ce soit
          avec les anciens logs.</p>
      
          <div class="note">
          <p>Lorsque vous initiez un redémarrage, une vérification de
          la syntaxe est tout d'abord effectuée, afin de s'assurer qu'il n'y a
          pas d'erreurs dans les fichiers de configuration. Si votre fichier de
          configuration comporte des erreurs de syntaxe, vous recevrez un message
          d'erreur les concernant, et le serveur refusera de redémarrer. Ceci
          permet d'éviter la situation où un serveur a
          été arrêté et ne peut plus redémarrer,
          et où vous vous retrouvez avec un serveur hors-service.</p>
      
          <p>Ceci ne garantit pas encore que le serveur va redémarrer
          correctement. Pour vérifier la sémantique des fichiers de configuration
          en plus de leur syntaxe, vous pouvez essayer de démarrer
          <code class="program"><a href="./programs/httpd.html">httpd</a></code> sous un utilisateur non root.
          S'il n'y a pas d'erreur, il tentera d'ouvrir ses sockets et ses fichiers
          de log et échouera car il n'a pas les privilèges root (ou parce que
          l'instance actuelle de
          <code class="program"><a href="./programs/httpd.html">httpd</a></code> est déjà associée à ces ports). S'il échoue
          pour toute autre raison, il y a probablement une erreur dans le
          fichier de configuration et celle-ci doit être corrigée avant de lancer
          le redémarrage en douceur.</p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="hup" id="hup">Redémarrer immédiatement</a></h2>
      
      <dl><dt>Signal: HUP</dt>
      <dd><code>apachectl -k restart</code></dd>
      </dl>
      
          <p>A la réception du signal <code>HUP</code> ou
          <code>restart</code>, le
          processus parent tue ses processus enfants comme pour le signal
          <code>TERM</code>, mais le processus parent ne se termine pas.
          Il relit ses fichiers de configuration, et réouvre ses fichiers de log.
          Puis il donne naissance à un nouveau jeu de processus enfants
          et continue de traiter les requêtes.</p>
      
          <p>Les utilisateurs du module <code class="module"><a href="./mod/mod_status.html">mod_status</a></code>
          noteront que les statistiques du serveur sont remises à zéro quand un
          signal <code>HUP</code> est envoyé.</p>
      
      <div class="note">Comme dans le cas d'un redémarrage "graceful", une
      vérification de la syntaxe est effectuée avant que le
      redémarrage ne soit tenté. Si votre fichier de configuration comporte
      des erreurs de syntaxe, le redémarrage ne sera pas effectué, et
      vous recevrez un message concernant ces erreurs.</div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="gracefulstop" id="gracefulstop">Arrêt en douceur</a></h2>
      
      <dl><dt>Signal : WINCH</dt>
      <dd><code>apachectl -k graceful-stop</code></dd>
      </dl>
      
          <p>A la réception du signal <code>WINCH</code> ou
          <code>graceful-stop</code>, le
          processus parent <em>ordonne</em> à ses processus enfants
          de s'arrêter après le traitement de leur requête en cours
          (ou de s'arrêter immédiatement s'ils n'ont plus de requête à traiter).
          Le processus parent va alors supprimer son fichier
          <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code> et cesser l'écoute
          de tous ses ports. Le processus parent va continuer à s'exécuter,
          et va surveiller les processus enfants
          qui ont encore des requêtes à traiter. Lorsque tous les processus enfants
          ont terminé leurs traitements et se sont arrêtés ou lorsque le délai
          spécifié par la directive <code class="directive"><a href="./mod/mpm_common.html#gracefulshutdowntimeout">GracefulShutdownTimeout</a></code> a été atteint,
          le processus parent s'arrêtera à son tour.  Si ce délai est atteint,
          tout processus enfant encore en cours d'exécution se verra envoyer
          le signal <code>TERM</code>
          afin de le forcer à s'arrêter.</p>
      
          <p>L'envoi du signal <code>TERM</code> va arrêter immédiatement
          les processus parent et enfants en état "graceful". Cependant,
          comme le fichier <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code>
          aura été supprimé, vous ne pourrez pas utiliser
          <code>apachectl</code> ou <code>httpd</code> pour envoyer ce signal.</p>
      
          <div class="note"><p>Le signal <code>graceful-stop</code> vous permet d'exécuter
          simultanément plusieurs instances de <code class="program"><a href="./programs/httpd.html">httpd</a></code>
          avec des configurations identiques. Ceci s'avère une fonctionnalité
          puissante quand vous effectuez des mises à jour "en douceur"
          de httpd ; cependant, cela peut aussi causer des blocages fatals et des
          situations de compétition (race conditions)
          avec certaines configurations.</p>
      
          <p>On a pris soin de s'assurer que les fichiers sur disque
          comme les fichiers verrou (<code class="directive"><a href="./mod/core.html#mutex">Mutex</a></code>) et les fichiers socket Unix
          (<code class="directive"><a href="./mod/mod_cgid.html#scriptsock">ScriptSock</a></code>) contiennent le PID
          du serveur, et coexistent sans problème. Cependant, si une directive de
          configuration, un module tiers ou une CGI résidente utilise un autre
          verrou ou fichier d'état sur disque, il faut prendre soin de s'assurer
          que chaque instance de <code class="program"><a href="./programs/httpd.html">httpd</a></code> qui s'exécute
          n'écrase pas les fichiers des autres instances.</p>
      
          <p>Vous devez aussi prendre garde aux autres situations de compétition,
          comme l'enregistrement des logs avec un transfert de ceux-ci
          via un pipe vers le programme <code class="program"><a href="./programs/rotatelogs.html">rotatelogs</a></code>. Plusieurs instances
          du programme <code class="program"><a href="./programs/rotatelogs.html">rotatelogs</a></code> qui tentent d'effectuer
          une rotation des mêmes fichiers de log en même temps peuvent détruire
          mutuellement leurs propres fichiers de log.</p></div>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./de/stopping.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/stopping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/stopping.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/stopping.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/stopping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/stopping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/stopping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/stopping.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/install.html.ko.euc-kr�����������������������������������������������������0000644�0000000�0000050�00000047524�13412755316�017615� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>ÄÄÆÄÀϰú ¼³Ä¡ - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>ÄÄÆÄÀϰú ¼³Ä¡</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/install.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/install.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/install.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/install.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/install.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/install.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/install.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      
          <p>ÀÌ ¹®¼­´Â À¯´Ð½º¿Í À¯´Ð½º·ù ½Ã½ºÅÛ¿¡¼­ ¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇϰí
          ¼³Ä¡ÇÏ´Â °Í¸¸À» ´Ù·é´Ù. À©µµ¿ìÁî¿¡¼­ ÄÄÆÄÀÏÇÏ°í ¼³Ä¡ÇÏ´Â ¹æ¹ýÀº
          <a href="platform/windows.html">¸¶ÀÌÅ©·Î¼ÒÇÁÆ® À©µµ¿ìÁî¿¡¼­
          ¾ÆÆÄÄ¡ »ç¿ë</a>À» Âü°íÇ϶ó. ´Ù¸¥ Ç÷¡Æû¿¡ ´ëÇØ¼­´Â <a href="platform/">Ç÷¡Æû</a> ¹®¼­¸¦ Âü°íÇ϶ó.</p>
      
          <p>¾ÆÆÄÄ¡ 2.0ÀÇ ±¸¼º°ú ¼³Ä¡ ȯ°æÀº 1.3°ú ¸Å¿ì ´Ù¸£´Ù.
          ¾ÆÆÄÄ¡ 1.3Àº ½¬¿î ¼³Ä¡¸¦ À§ÇØ ÀÚü ½ºÅ©¸³Æ®¸¦ »ç¿ëÇß´Ù.
          ¾ÆÆÄÄ¡ 2.0Àº ÀÌÁ¦ ´Ù¸¥ ¿©·¯ ¿ÀǼҽº ÇÁ·ÎÁ§Æ®¿Í ºñ½ÁÇÑ È¯°æÀ»
          ¸¸µé±âÀ§ÇØ <code>libtool</code>°ú <code>autoconf</code>¸¦
          »ç¿ëÇÑ´Ù.</p>
      
          <p>¸¸¾à ÀÛÀº ¹öÀüÀ» ÇÑ´Ü°è ¾÷±×·¹À̵åÇÑ´Ù¸é (¿¹¸¦ µé¾î,
          2.0.50¿¡¼­ 2.0.51), <a href="#upgrading">¾÷±×·¹À̵å</a>
          ÀåÀ¸·Î ¹Ù·Î °¡±æ ¹Ù¶õ´Ù.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#overview">¼º¹Ì ±ÞÇÑ »ç¶÷À» À§ÇÑ °³¿ä</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#requirements">¿ä±¸»çÇ×</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#download">´Ù¿î·Îµå</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#extract">¾ÐÃà Ç®±â</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#configure">¼Ò½º Æ®¸® ±¸¼ºÇϱâ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#compile">ÄÄÆÄÀÏ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#install">¼³Ä¡</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#customize">¼³Á¤</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#test">°Ë»ç</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#upgrading">¾÷±×·¹À̵å</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="programs/configure.html">¼Ò½º Æ®¸® ±¸¼º</a></li><li><a href="invoking.html">¾ÆÆÄÄ¡ ½ÃÀÛ</a></li><li><a href="stopping.html">¾ÆÆÄÄ¡ Áߴܰú Àç½ÃÀÛ</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">¼º¹Ì ±ÞÇÑ »ç¶÷À» À§ÇÑ °³¿ä</a></h2>
      
          <table>
            
            <tr>
              <td><a href="#download">´Ù¿î·Îµå</a></td>
      
              <td><code>$ lynx http://httpd.apache.org/download.cgi</code>
              </td>
            </tr>
      
            <tr>
              <td><a href="#extract">¾ÐÃà Ç®±â</a></td>
      
              <td><code>$ gzip -d httpd-2_1_<em>NN</em>.tar.gz<br />
               $ tar xvf httpd-2_1_<em>NN</em>.tar</code> </td>
            </tr>
      
            <tr>
              <td><a href="#configure">±¸¼º</a></td>
      
              <td><code>$ ./configure --prefix=<em>PREFIX</em></code>
              </td>
            </tr>
      
            <tr>
              <td><a href="#compile">ÄÄÆÄÀÏ</a></td>
      
              <td><code>$ make</code> </td>
            </tr>
      
            <tr>
              <td><a href="#install">¼³Ä¡</a></td>
      
              <td><code>$ make install</code> </td>
            </tr>
      
            <tr>
              <td><a href="#customize">¼³Á¤</a></td>
      
              <td><code>$ vi <em>PREFIX</em>/conf/httpd.conf</code> </td>
            </tr>
      
            <tr>
              <td><a href="#test">°Ë»ç</a></td>
      
              <td><code>$ <em>PREFIX</em>/bin/apachectl start</code>
              </td>
            </tr>
          </table>
      
          <p><em>NN</em>Àº ÇöÀç ÀÛÀº ¹öÀü ¼ýÀÚ·Î, <em>PREFIX</em>´Â
          ¼­¹ö°¡ ¼³Ä¡µÉ ÆÄÀϽýºÅÛ °æ·Î·Î ´ëÃ¼ÇØ¾ß ÇÑ´Ù. <em>PREFIX</em>¸¦
          ÁöÁ¤ÇÏÁö ¾ÊÀ¸¸é ±âº»°ªÀ¸·Î <code>/usr/local/apache2</code>¸¦
          »ç¿ëÇÑ´Ù.</p>
      
          <p>¾Æ·¡´Â ¾ÆÆÄÄ¡ À¥¼­¹ö¸¦ ÄÄÆÄÀÏÇÏ°í ¼³Ä¡ÇϱâÀ§ÇÑ ¿ä±¸»çÇ׺ÎÅÍ
          ÄÄÆÄÀϰú ¼³Ä¡ °úÁ¤À» °¢°¢ ÀÚ¼¼È÷ ¼³¸íÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="requirements" id="requirements">¿ä±¸»çÇ×</a></h2>
      
          <p>¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇϱâÀ§ÇØ ´ÙÀ½°ú °°Àº °ÍµéÀÌ ÇÊ¿äÇÏ´Ù:</p>
      
          <dl>
            <dt>µð½ºÅ© °ø°£</dt>
            <dd>µð½ºÅ© ¿©À¯°ø°£ÀÌ ÃÖ¼Ò 50 MB ÀÌ»óÀÎÁö È®ÀÎÇ϶ó.
            ¼³Ä¡ÈÄ ¾ÆÆÄÄ¡´Â ¾à 10 MBÀÇ µð½ºÅ© °ø°£À» Â÷ÁöÇÑ´Ù.
            ½ÇÁ¦ ÇÊ¿äÇÑ µð½ºÅ© °ø°£Àº ¼±ÅÃÇÑ ±¸¼º ¿É¼Ç°ú Ãß°¡ ¸ðµâ¿¡
            µû¶ó »ó´çÈ÷ Â÷À̰¡ ³­´Ù.</dd>
      
            <dt>ANSI-C ÄÄÆÄÀÏ·¯¿Í ÄÄÆÄÀÏ ½Ã½ºÅÛ</dt>
            <dd>ANSI-C ÄÄÆÄÀÏ·¯°¡ ¼³Ä¡µÇÀÖ´ÂÁö È®ÀÎÇ϶ó. <a href="http://www.gnu.org/">Free Software Foundation (FSF)</a>ÀÇ
            <a href="http://www.gnu.org/software/gcc/gcc.html">GNU C
            compiler (GCC)</a>¸¦ ÃßõÇÑ´Ù. (¹öÀü 2.7.2¸é µÈ´Ù.) GCC°¡
            ¾ø´Ù¸é ÃÖ¼ÒÇÑ »ç¿ëÇÏ´Â ÄÄÆÄÀÏ·¯°¡ ANSI ȣȯÀÎÁö È®ÀÎÇ϶ó.
            Ãß°¡·Î <code>PATH</code> ȯ°æº¯¼ö´Â <code>make</code>¿Í
            °°Àº ±âº»ÀûÀÎ ÄÄÆÄÀÏ µµ±¸¸¦ Æ÷ÇÔÇØ¾ß ÇÑ´Ù.</dd>
      
            <dt>Á¤È®ÇÑ ½Ã°£</dt>
            <dd>HTTP ÇÁ·ÎÅäÄÝ¿¡´Â ÇÏ·çÁß ½Ã°£À» Ç¥ÇöÇÏ´Â ºÎºÐÀÌ ÀÖ´Ù. ±×·¡¼­
            ÀÌÁ¦ ½Ã½ºÅÛÀÇ ½Ã°£ µ¿±âÈ­ ±â´ÉÀ» »ìÆìº¼ ½Ã°£ÀÌ´Ù. º¸Åë
            À̸¦ À§ÇØ Network Time Protocol (NTP)¿¡ ±â¹ÝÇÑ
            <code>ntpdate</code>³ª <code>xntpd</code>¸¦ »ç¿ëÇÑ´Ù.
            NTP ¼ÒÇÁÆ®¿þ¾î¿Í °ø°³ ½Ã°£ ¼­¹ö¿¡ ´ëÇÑ Á¤º¸´Â ´º½º±×·ì
            <a href="news:comp.protocols.time.ntp">comp.protocols.time.ntp</a>¿Í
            <a href="http://www.ntp.org">NTP ȨÆäÀÌÁö</a>¸¦
            Âü°íÇ϶ó.</dd>
      
            <dt><a href="http://www.perl.org/">Perl 5</a>
            [¼±ÅûçÇ×]</dt>
            <dd>(Perl·Î ¾²¿©Áø) <a href="programs/apxs.html">apxs</a>³ª
            <a href="programs/dbmmanage.html">dbmmanage</a>¿Í °°Àº
            Áö¿ø ½ºÅ©¸³Æ®¸¦ À§ÇØ Perl 5 ÀÎÅÍÇÁ¸®ÅͰ¡ ÇÊ¿äÇÏ´Ù. (¹öÀü
            5.003 ÀÌ»óÀÌ¸é µÈ´Ù.) `<code>configure</code>' ½ºÅ©¸³Æ®°¡
            ÀÌ ÀÎÅÍÇÁ¸®Å͸¦ ãÁö ¸øÇصµ ¹®Á¦¾øÀÌ ¾ÆÆÄÄ¡ 2.0À»
            ÄÄÆÄÀÏÇÏ°í ¼³Ä¡ÇÒ ¼ö ÀÖ´Ù. ´Ù¸¸ Áö¿ø ½ºÅ©¸³Æ®¸¦ »ç¿ëÇÏÁö
            ¸øÇÒ »ÓÀÌ´Ù. ¿©·¯ Perl ÀÎÅÍÇÁ¸®ÅͰ¡ ¼³Ä¡µÇÀÖ´Ù¸é (¾Æ¸¶µµ
            »ì¶§ Æ÷ÇÔµÈ Perl 4¿Í Á÷Á¢ ÄÄÆÄÀÏÇÑ Perl 5)
            <code>./configure</code>°¡ ¿Ã¹Ù¸¥ °ÍÀ» ã±âÀ§ÇØ
            <code>--with-perl</code> ¿É¼ÇÀ» (¾Æ·¡ Âü°í) »ç¿ëÇÏ±æ ¹Ù¶õ´Ù.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="download" id="download">´Ù¿î·Îµå</a></h2>
      
          <p>¾ÆÆÄÄ¡´Â ¿©·¯ ¹Ì·¯ ¸ñ·ÏÀÌ ÀÖ´Â <a href="http://httpd.apache.org/download.cgi">¾ÆÆÄÄ¡ À¥¼­¹ö
          ´Ù¿î·Îµå »çÀÌÆ®</a>¿¡¼­ ´Ù¿î·ÎµåÇÒ ¼ö ÀÖ´Ù. À¯´Ð½º·ù ½Ã½ºÅÛÀ»
          »ç¿ëÇÑ´Ù¸é ¼Ò½ºÄڵ带 ´Ù¿î¹Þ¾Æ¼­ ÄÄÆÄÀÏÇÏ´Â ÆíÀÌ ³´´Ù. ½±°Ô
          (¾Æ·¡¿¡¼­ ¼³¸í) ÄÄÆÄÀÏÇÒ ¼ö ÀÖ°í, ÀÚ½ÅÀÇ ¿ëµµ¿¡ ¾Ë¸Â°Ô ¼­¹ö¸¦
          ¸ÂÃâ ¼ö ÀÖ´Ù. ¶Ç, ÃֽйöÀü ¹ÙÀ̳ʸ® ¹èÆ÷º»ÀÌ ¾ø´Â °æ¿ìµµ
          ¸¹´Ù. ¹ÙÀ̳ʸ®¸¦ ´Ù¿î¹Þ´Â´Ù¸é ¹èÆ÷º»¿¡ ÀÖ´Â
          <code>INSTALL.bindist</code> ÆÄÀÏÀÇ Áö½Ã¸¦ µû¸£¶ó.</p>
      
          <p>´Ù¿î·ÎµåÈÄ ´Ù¿î¹ÞÀº ÆÄÀÏÀÌ ¿ÏÀüÇϰí
          º¯°æµÇÁö¾ÊÀº ¾ÆÆÄÄ¡ À¥¼­¹öÀÓÀ» È®ÀÎÇÏ´Â °ÍÀÌ Áß¿äÇÏ´Ù.
          PGP ¼­¸íÀ» °¡Áö°í ´Ù¿î·ÎµåÇÑ Å¸º¼(tarball)À» °Ë»çÇÏ¿© È®ÀÎÇÑ´Ù.
          ÀÚ¼¼ÇÑ ¹æ¹ýÀº <a href="http://httpd.apache.org/download.cgi#verify">´Ù¿î·Îµå
          ÆäÀÌÁö</a>¿¡ ÀÖ°í, <a href="http://httpd.apache.org/dev/verification.html">PGP
          »ç¿ë¹ý</a>À» ¼³¸íÇÏ´Â »ó¼¼ÇÑ ¿¹µµ ÀÖ´Ù.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="extract" id="extract">¾ÐÃà Ç®±â</a></h2>
      
          <p>¾ÆÆÄÄ¡ À¥¼­¹ö Ÿº¼¿¡¼­ ¼Ò½º¸¦ Ǫ´Â ÀÛ¾÷Àº ´Ü¼øÈ÷ ¾ÐÃà°ú
          tar¸¦ Ǫ´Â °ÍÀÌ´Ù:</p>
      
      <div class="example"><p><code>
      $ gzip -d httpd-2_1_<em>NN</em>.tar.gz<br />
      $ tar xvf httpd-2_1_<em>NN</em>.tar
      </code></p></div>
      
          <p>±×·¯¸é ÇöÀç µð·ºÅ丮 ¾Æ·¡¿¡ ¹èÆ÷º»ÀÇ ¼Ò½ºÄڵ带 ´ãÀº
          »õ·Î¿î µð·ºÅ丮°¡ »ý±ä´Ù. ¼­¹ö¸¦ ÄÄÆÄÀÏÇϱâ Àü¿¡ ±×
          µð·ºÅ丮·Î <code>cd</code>ÇØ¾ß ÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configure" id="configure">¼Ò½º Æ®¸® ±¸¼ºÇϱâ</a></h2>
      
          <p>´ÙÀ½ °úÁ¤Àº ƯÁ¤ Ç÷¡Æû°ú °³ÀÎÀûÀÎ Çʿ信 µû¶ó ¾ÆÆÄÄ¡
          ¼Ò½º Æ®¸®¸¦ ±¸¼ºÇÏ´Â ÀÏÀÌ´Ù. À̸¦ À§ÇØ ¹èÆ÷º»ÀÇ ÃÖ»óÀ§ µð·ºÅ丮¿¡
          ÀÖ´Â <code><a href="programs/configure.html">configure</a></code>
          ½ºÅ©¸³Æ®¸¦ »ç¿ëÇÑ´Ù. (¾ÆÆÄÄ¡
          ¼Ò½º Æ®¸®ÀÇ CVS ¹öÀüÀ» ´Ù¿î·ÎµåÇÑ °³¹ßÀÚ´Â À̹Ì
          <code>autoconf</code>¿Í <code>libtool</code>°¡ ¼³Ä¡µÇÀÖ°í,
          ´ÙÀ½ °úÁ¤À¸·Î ³Ñ¾î°¡±â Àü¿¡ <code>buildconf</code>¸¦ ½ÇÇàÇØ¾ß
          ÇÑ´Ù. ÀÌ´Â Á¤½Ä ¹öÀü¿¡¼­´Â ÇÊ¿ä¾ø´Ù.)</p>
      
          <p>¸ðµÎ ±âº» ¿É¼ÇÀ» »ç¿ëÇÏ¿© ¼Ò½º Æ®¸®¸¦ ±¸¼ºÇÏ·Á¸é °£´ÜÈ÷
          <code>./configure</code>¸¦ ÀÔ·ÂÇϸéµÈ´Ù. ±âº» ¿É¼ÇÀ» ¼öÁ¤ÇÏ·Á¸é
          <code>./configure</code>¿¡ ¿©·¯ º¯¼ö¿Í ¸í·ÉÇà ¿É¼ÇÀ» »ç¿ëÇÑ´Ù.</p>
      
          <p>°¡Àå Áß¿äÇÑ ¿É¼ÇÀº ¾ÆÆÄÄ¡°¡ Á¤»óÀûÀ¸·Î ÀÛµ¿ÇϱâÀ§ÇØ ¾ÆÆÄÄ¡¸¦
          ±¸¼ºÇÏ°í ¼³Ä¡ÇÒ Àå¼ÒÀÎ <code>--prefix</code>´Ù. ´Ù¸¥ <a href="programs/configure.html#installationdirectories">configure
          ¿É¼Çµé</a>À» »ç¿ëÇÏ¿© ÆÄÀÏÀÇ À§Ä¡¸¦ ´õ ÀÚ¼¼È÷ ¼³Á¤ÇÒ ¼öµµ
          ÀÖ´Ù.</p>
      
          <p><a href="mod/">¸ðµâ</a>À» Æ÷ÇÔÇϰųª »©¼­ ¾ÆÆÄÄ¡¿¡ Æ÷ÇÔÇÒ
          <a href="programs/configure.html#optionalfeatures">±â´É</a>À»
          ¼±ÅÃÇÑ´Ù. <a href="mod/module-dict.html#Status">Base</a>
          »óÅÂÀÎ ¸ðµâÀº ±âº»ÀûÀ¸·Î ¾ÆÆÄÄ¡¿¡ Æ÷ÇԵȴÙ. ´Ù¸¥ »óÅÂÀÇ
          ¸ðµâÀº <code>--enable-<var>module</var></code> ¿É¼ÇÀ» »ç¿ëÇÏ¿©
          Æ÷ÇÔÇÑ´Ù. ¿©±â¼­ <em>module</em>Àº ¸ðµâ À̸§¿¡¼­
          <code>mod_</code>¸¦ »©°í ¹ØÁÙÀ» »©±â±âÈ£·Î º¯°æÇÑ °á°ú´Ù.
          <code>--enable-<var>module</var>=shared</code> ¿É¼ÇÀ» »ç¿ëÇϸé
          ¸ðµâÀ» ½ÇÇàÁß¿¡ Æ÷ÇÔÇϰųª »¬ ¼ö ÀÖ´Â <a href="dso.html">°øÀ¯°´Ã¼(shared object, DSO)</a>·Î ÄÄÆÄÀÏÇÑ´Ù.
          ¶Ç, <code>--disable-<var>module</var></code> ¿É¼ÇÀ» »ç¿ëÇÏ¿©
          Base ¸ðµâÀ» »¬ ¼ö ÀÖ´Ù. ÁöÁ¤ÇÑ ¸ðµâÀÌ ¾ø¾îµµ
          <code>configure</code>°¡ °æ°íÇÏÁö¾Ê°í ±×³É ¹«½ÃÇϱ⶧¹®¿¡
          ¸ðµâ À̸§À» Á¤È®È÷ ÀÔ·ÂÇ϶ó.</p>
      
          <p>°¡²û <code>configure</code> ½ºÅ©¸³Æ®¿¡°Ô ÄÄÆÄÀÏ·¯,
          ¶óÀ̺귯¸®, Çì´õÆÄÀÏ µîÀÇ À§Ä¡¸¦ ¾Ë·ÁÁà¾ß ÇÒ °æ¿ì°¡ ÀÖ´Ù.
          ÀÌ Á¤º¸´Â ȯ°æº¯¼ö³ª <code>configure</code>ÀÇ ¸í·ÉÇà ¿É¼ÇÀ»
          »ç¿ëÇÏ¿© Àü´ÞÇÑ´Ù. ÀÚ¼¼ÇÑ ³»¿ëÀº <a href="programs/configure.html">configure manpage</a>¸¦
          Âü°íÇ϶ó.</p>
      
          <p>¿©·¯ºÐÀÌ ¼±ÅÃÇÒ ¼ö ÀÖ´Â °¡´É¼ºÀ» º¸¿©ÁÖ±âÀ§ÇØ ´ÙÀ½Àº
          ƯÁ¤ ÄÄÆÄÀÏ·¯¿Í Ç÷¡±×¸¦ »ç¿ëÇÏ°í ³ªÁß¿¡ DSO·Î ÀоîµéÀÏ
          µÎ ¸ðµâ <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>¿Í
          <code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code>À» Ãß°¡ÇÏ¿©
          <code>/sw/pkg/apache</code>¿¡ ¼³Ä¡ÇÒ ¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇÏ´Â
          ÀüÇüÀûÀÎ ¿¹ÀÌ´Ù:</p>
      
      <div class="example"><p><code>
            $ CC="pgcc" CFLAGS="-O2" \<br />
             ./configure --prefix=/sw/pkg/apache \<br />
             --enable-rewrite=shared \<br />
             --enable-speling=shared
      </code></p></div>
      
          <p><code>configure</code>¸¦ ½ÇÇàÇÏ¸é ¸îºÐ°£ ½Ã½ºÅÛÀÇ ±â´ÉÀ»
          °Ë»çÇÏ¿© ³ªÁß¿¡ ¼­¹ö¸¦ ÄÄÆÄÀÏÇÒ¶§ »ç¿ëÇÒ MakefileµéÀ»
          ¸¸µç´Ù.</p>
      
          <p><code>configure</code> ¿É¼Çµé¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ¼³¸íÀº <a href="programs/configure.html">configure manpage</a>¿¡ ÀÖ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="compile" id="compile">ÄÄÆÄÀÏ</a></h2>
      
          <p>ÀÌÁ¦ ´ÙÀ½ ¸í·É¾î Çϳª·Î ¾ÆÆÄÄ¡ÀÇ ¿©·¯ ºÎºÐÀ» ÄÄÆÄÀÏÇÒ
          ¼ö ÀÖ´Ù:</p>
      
      <div class="example"><p><code>$ make</code></p></div>
      
          <p>¿©±â¼­ Á» ±â´Ù·Á¶ó. ÆæÆ¼¾ö III/¸®´ª½º 2.2 ½Ã½ºÅÛ¿¡¼­
          ±âº» ±¸¼ºÀ» ÄÄÆÄÀÏÇϴµ¥ ¾à 3ºÐ Á¤µµ °É¸°´Ù. ÀÌ ½Ã°£Àº
          Çϵå¿þ¾î¿Í Æ÷ÇÔÇÑ ¸ðµâ¼ö¿¡ µû¶ó Å©°Ô º¯ÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="install" id="install">¼³Ä¡</a></h2>
      
          <p>ÀÌÁ¦ ´ÙÀ½ ¸í·É¾î·Î ÆÐŰÁö¸¦ (À§ÀÇ <code>--prefix</code>
          ¿É¼Ç Âü°í) ÁöÁ¤ÇÑ ¼³Ä¡ À§Ä¡ <em>PREFIX</em>¿¡ ¼³Ä¡ÇÑ´Ù:</p>
      
      <div class="example"><p><code>$ make install</code></p></div>
      
          <p>¾÷±×·¹À̵åÇÑ´Ù¸é ÀÌ ¼³Ä¡ °úÁ¤ÀÌ ±âÁ¸ ¼³Á¤ÆÄÀÏÀ̳ª ¹®¼­¸¦
          µ¤¾î¾²Áö ¾Ê´Â´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="customize" id="customize">¼³Á¤</a></h2>
      
          <p>´ÙÀ½À¸·Î <code><em>PREFIX</em>/conf/</code>¿¡ ÀÖ´Â
          <a href="configuring.html">¼³Á¤ÆÄÀÏ</a>À» ÆíÁýÇÏ¿© ¾ÆÆÄÄ¡
          À¥¼­¹ö¸¦ ¼³Á¤ÇÑ´Ù.</p>
      
      <div class="example"><p><code>$ vi <em>PREFIX</em>/conf/httpd.conf</code></p></div>
      
          <p>»ç¿ë°¡´ÉÇÑ <a href="mod/directives.html">¼³Á¤ Áö½Ã¾î</a>¿¡
          ´ëÇÑ ¿ÏÀüÇÑ ¼³¸í°ú ÀÌ ¹®¼­ÀÇ °¡Àå ÃÖ±Ù ÆÇÀº <a href="./">docs/manual/</a>À̳ª <a href="http://httpd.apache.org/docs/2.4/">http://httpd.apache.org/docs/2.4/</a>¿¡ ÀÖ´Â ¾ÆÆÄÄ¡ ¼³¸í¼­¸¦
          Âü°íÇ϶ó.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="test" id="test">°Ë»ç</a></h2>
      
          <p>ÀÌÁ¦ ´ÙÀ½°ú °°ÀÌ ¾ÆÆÄÄ¡ À¥¼­¹ö¸¦ <a href="invoking.html">½ÃÀÛ</a>ÇÒ ¼ö ÀÖ´Ù:</p>
      
      <div class="example"><p><code>$ <em>PREFIX</em>/bin/apachectl start</code></p></div>
      
          <p>±×¸®°í URL <code>http://localhost/</code>·Î ù ¹®¼­¸¦
          ¿äûÇÑ´Ù. º¸°ÔµÉ À¥ÆäÀÌÁö´Â ¾Æ¸¶µµ
          <code><em>PREFIX</em>/htdocs/</code>ÀÏ <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> ¾Æ·¡¿¡ ÀÖ´Ù. ±×¸®°í
          ´ÙÀ½ ¸í·É¾î·Î ´Ù½Ã ¼­¹ö¸¦ <a href="stopping.html">Áß´Ü</a>ÇÑ´Ù:</p>
      
      <div class="example"><p><code>$ <em>PREFIX</em>/bin/apachectl stop</code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="upgrading" id="upgrading">¾÷±×·¹À̵å</a></h2>
      
          <p>¾÷±×·¹À̵åÇÑ´Ù¸é ¸ÕÀú »çÀÌÆ®¿¡ ¿µÇâÀ» ÁÙ ¼ö ÀÖ´Â º¯È­°¡
          ÀÖ´ÂÁö ¾Ë¾Æº¸±âÀ§ÇØ ¹ßÇ¥¹®°ú ¼Ò½º ¹èÆ÷º»ÀÇ <code>CHANGES</code>
          ÆÄÀÏÀ» Àд´Ù. (¿¹¸¦ µé¾î, 1.3¿¡¼­ 2.0À̳ª 2.0¿¡¼­ 2.2¿Í
          °°Àº) Å« ¹öÀüÀÌ º¯ÇÑ °æ¿ì ÄÄÆÄÀÏ ¿É¼Ç°ú ¼³Á¤À» Á÷Á¢ ¼öÁ¤ÇؾßÇÒ
          Á¤µµÀÇ Å« º¯È­°¡ ÀÖÀ» °ÍÀÌ´Ù. ¸ðµç ¸ðµâµµ ¸ðµâ APIÀÇ º¯È­¿¡
          ¾Ë¸Â°Ô ¾÷±×·¹À̵åÇØ¾ß ÇÑ´Ù.</p>
      
          <p>ÀÛÀº ¹öÀüÀ» ÇÑ´Ü°è ¾÷±×·¹À̵åÇÏ´Â °ÍÀº (¿¹¸¦ µé¾î,
          2.0.55¿¡¼­ 2.0.57) ½±´Ù. <code>make install</code> ÀÛ¾÷Àº
          ±âÁ¸ÀÇ ¹®¼­, ·Î±×ÆÄÀÏ, ¼³Á¤ÆÄÀÏÀ» ¼öÁ¤ÇÏÁö ¾Ê´Â´Ù. ¶Ç,
          °³¹ßÀÚ´Â ÀÛÀº ¹öÀü°£¿¡ <code>configure</code> ¿É¼Ç, ¼³Á¤,
          ¸ðµâ APIÀÇ È£È¯¼º¾ø´Â º¯È­¸¦ ÃÖ´ëÇÑ ¸·´Â´Ù. ´ëºÎºÐÀÇ °æ¿ì
          µ¿ÀÏÇÑ <code>configure</code> ¸í·ÉÇà, µ¿ÀÏÇÑ ¼³Á¤ÆÄÀÏÀ»
          »ç¿ëÇÒ ¼ö ÀÖ°í, ¸ðµâµéµµ ¸ðµÎ °è¼Ó µ¿ÀÛÇÒ °ÍÀÌ´Ù. (ÀÌ ¸»Àº
          2.0.41ÀÌÈÄ ¹öÀü¿¡¸¸ ÇØ´çÇÑ´Ù. ÀÌÀü ¹öÀüµé¿¡´Â ȣȯ¼º¾ø´Â
          º¯È­°¡ ÀÖ´Ù.)</p>
      
          <p>ÀÌÀü¿¡ ¼³Ä¡Çß´ø ¼Ò½º¸¦ °¡Áö°í ÀÖ´Ù¸é, ¾÷±×·¹À̵尡 ´õ
          ½¬¿öÁø´Ù. ÀÌÀü ¼Ò½º ÃÖ»óÀ§¿¡ ÀÖ´Â <code>config.nice</code>
          ÆÄÀÏ¿¡´Â ¼Ò½º¸¦ ±¸¼ºÇÒ ¶§ »ç¿ëÇß´ø <code>configure</code>
          ¸í·ÉÇà ¿É¼ÇÀÌ ±×´ë·Î ÀÖ´Ù. ±×·¡¼­ ´ÙÀ½ ¹öÀüÀ¸·Î ¾÷±×·¹À̵åÇÑ´Ù¸é
          »õ·Î¿î ¹öÀü ¼Ò½º·Î <code>config.nice</code> ÆÄÀÏÀ» º¹»çÇϰí,
          ¿øÇÑ´Ù¸é Á¶±Ý ¼öÁ¤À» ÇÑ ÈÄ, ´ÙÀ½°ú °°ÀÌ ½ÇÇàÇÑ´Ù:</p>
      
          <div class="example"><p><code>
          $ ./config.nice<br />
          $ make<br />
          $ make install<br />
          $ <em>PREFIX</em>/bin/apachectl stop<br />
          $ <em>PREFIX</em>/bin/apachectl start<br />
          </code></p></div>
      
          <div class="warning">»õ·Î¿î ¹öÀüÀ» »ç¿ëÇϱâ Àü¿¡ Ç×»ó °Ë»çÇØºÁ¾ß
          ÇÑ´Ù. ¿¹¸¦ µé¾î, ¾÷±×·¹À̵带 ¸¶Ä¡±â Àü¿¡ ȣȯ¼º ¹®Á¦°¡
          ÀÖ´ÂÁö ¾Ë¾Æº¸±âÀ§ÇØ ´Ù¸¥ <code>--prefix</code>¿Í (<code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> Áö½Ã¾î·Î) ´Ù¸¥ Æ÷Æ®¸¦
          »ç¿ëÇÏ¿© »õ·Î¿î ¹öÀüÀ» ¼³Ä¡ÇÑÈÄ ÀÌÀü ¹öÀü°ú °°ÀÌ ½ÇÇàÇØº¼
          ¼ö ÀÖ´Ù.</div>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/install.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/install.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/install.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/install.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/install.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/install.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/install.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/install.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/content-negotiation.html.fr.utf8�������������������������������������������0000644�0000000�0000050�00000115357�13412755316�021635� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Négociation de contenu - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Négociation de contenu</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/content-negotiation.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/content-negotiation.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/content-negotiation.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/content-negotiation.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/content-negotiation.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Apache HTTPD supporte la négociation de
          contenu telle qu'elle est décrite
          dans la spécification HTTP/1.1. Il peut choisir la meilleure représentation
          d'une ressource en fonction des préférences du navigateur pour ce qui
          concerne le type de media, les langages, le jeu de caractères et son
          encodage. Il implémente aussi quelques fonctionnalités pour traiter de
          manière plus intelligente les requêtes en provenance de navigateurs qui
          envoient des informations de négociation incomplètes.</p>
      
          <p>La négociation de contenu est assurée par le module
          <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> qui est compilé par défaut
          dans le serveur.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#about">À propos de la négociation de contenu</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#negotiation">La négociation avec httpd</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#methods">Les méthodes de négociation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#better">Ajustement des valeurs de qualité</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#extensions">Extensions à la négociation de contenu
      transparente</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#naming">Remarques à propos des liens hypertextes et des
      conventions de nommage</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#caching">Remarque sur la mise en cache</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="about" id="about">À propos de la négociation de contenu</a></h2>
      
          <p>Une ressource peut être disponible selon différentes représentations.
          Par exemple, elle peut être disponible en différents langages ou pour
          différents types de média, ou une combinaison des deux.
          Pour faire le meilleur choix, on peut fournir à l'utilisateur une page
          d'index, et le laisser choisir. Cependant, le serveur peut souvent faire
          ce choix automatiquement. Ceci est possible car les navigateurs peuvent
          envoyer des informations sur les
          représentations qu'ils préfèrent à l'intérieur de chaque requête.
          Par exemple, un navigateur peut indiquer
          qu'il préfère voir les informations en français, mais qu'en cas
          d'impossibilité l'anglais peut convenir. Les navigateurs indiquent leurs
          préférences à l'aide d'en-têtes dans la requête. Pour ne demander que des
          représentations en français, le navigateur peut utiliser l'en-tête :</p>
      
      <div class="example"><p><code>Accept-Language: fr</code></p></div>
      
          <p>Notez qu'il ne sera tenu compte de cette préférence que s'il existe un
          choix de représentations et que ces dernières varient en fonction
          du langage.</p>
      
          <p>À titre d'exemple d'une requête plus complexe, ce navigateur a été
          configuré pour accepter le français et l'anglais, avec une préférence pour
          le français, et accepter différents types de média, avec une préférence
          pour HTML par rapport à au texte plat ("plain text") ou autres types de fichiers texte, et
          avec une préférence pour GIF ou JPEG par rapport à tout autre type de
          média, mais autorisant tout autre type de média en dernier ressort :</p>
      
      <div class="example"><p><code>
        Accept-Language: fr; q=1.0, en; q=0.5<br />
        Accept: text/html; q=1.0, text/*; q=0.8, image/gif; q=0.6, image/jpeg; q=0.6, image/*; q=0.5, */*; q=0.1
      </code></p></div>
      
          <p>httpd supporte la négociation de contenu "server driven" (telle qu'elle
          est définie dans la spécification HTTP/1.1), où c'est le serveur qui
          décide quelle est la meilleure représentation à retourner pour la ressource
          demandée. Il supporte entièrement les en-têtes de requête
          <code>Accept</code>, <code>Accept-Language</code>,
          <code>Accept-Charset</code> et <code>Accept-Encoding</code>.
          httpd supporte aussi la négociation de contenu transparente, qui est un
          protocole de négociation expérimental défini dans les RFC 2295 et 2296.
          Il ne supporte pas la négociation de fonctionnalité (feature negotiation)
          telle qu'elle est définie dans ces RFCs.</p>
      
          <p>Une <strong>ressource</strong> est une entité conceptuelle identifiée
          par une URI (RFC 2396). Un serveur HTTP comme le serveur HTTP Apache
          propose l'accès à des
          <strong>représentations</strong> de la ressource à l'intérieur de son
          espace de nommage, chaque représentation étant composée d'une séquence
          d'octets avec la définition d'un type de media, d'un jeu de caractères,
          d'un encodage, etc... A un instant donné, chaque ressource peut être
          associée avec zéro, une ou plusieurs représentations. Si plusieurs
          représentations sont disponibles, la ressource est qualifiée de
          <strong>négociable</strong> et chacune de ses représentations se nomme
          <strong>variante</strong>. Les différences entre les
          variantes disponibles d'une ressource négociable constituent les
          <strong>dimensions</strong> de la négociation.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="negotiation" id="negotiation">La négociation avec httpd</a></h2>
      
          <p>Afin de négocier une ressource, on doit fournir au serveur des
          informations à propos de chacune des variantes. Il y a deux manières
          d'accomplir ceci :</p>
      
          <ul>
            <li>Utiliser une liste de correspondances de type ("type-map") (<em>c'est à dire</em>
            un fichier <code>*.var</code>) qui nomme explicitement les fichiers
            contenant les variantes, ou</li>
      
            <li>Utiliser une recherche "multivues", où le serveur effectue une
            recherche de correspondance sur un motif de nom de fichier implicite et
            fait son choix parmi les différents résultats.</li>
          </ul>
      
         <h3><a name="type-map" id="type-map">Utilisation d'un fichier de
         correspondances de types (type-map)</a></h3>
      
          <p>Une liste de correspondances de types est un document associé au
          gestionnaire <code>type-map</code> (ou, dans un souci de compatibilité
          ascendante avec des configurations de httpd plus anciennes, le
          <a class="glossarylink" href="./glossary.html#type mime" title="voir glossaire">type MIME</a>
          <code>application/x-type-map</code>). Notez que pour utiliser cette
          fonctionnalité, vous devez, dans le fichier de configuration, définir un
          gestionnaire qui associe un suffixe de fichier à une <code>type-map</code>;
          ce qui se fait simplement en ajoutant</p>
      
      <pre class="prettyprint lang-config">AddHandler type-map .var</pre>
      
      
          <p>dans le fichier de configuration du serveur.</p>
      
          <p>Les fichiers de correspondances de types doivent posséder le même nom que
          la ressource qu'ils décrivent, avec pour extension
          <code>.var</code>. Dans l'exemple ci-dessous, la ressource a pour
          nom <code>foo</code>, et le fichier de correspondances se nomme donc
          <code>foo.var</code>.</p>
      
          <p>Ce fichier doit comporter une entrée pour chaque variante
          disponible; chaque entrée consiste en une ligne contiguë d'en-têtes au
          format HTTP. les entrées sont séparées par des lignes vides. Les lignes
          vides à l'intérieur d'une entrée sont interdites. Par convention, le
          fichier de correspondances de types débute par une entrée concernant l'entité
          considérée dans son ensemble (bien que ce ne soit pas obligatoire, et
          ignoré si présent). Un exemple de fichier de
          correspondance de types est fourni
          ci-dessous.</p>
      
          <p>Les URIs de ce fichier sont relatifs à la localisation du fichier
          de correspondances de types. En général, ces fichiers se trouveront dans le
          même répertoire que le fichier de correspondances de types, mais ce
          n'est pas obligatoire. Vous pouvez utiliser des URIs absolus ou
          relatifs pour tout fichier situé sur le même serveur que le fichier
          de correspondances.</p>
      
      <div class="example"><p><code>
        URI: foo<br />
      <br />
        URI: foo.en.html<br />
        Content-type: text/html<br />
        Content-language: en<br />
      <br />
        URI: foo.fr.de.html<br />
        Content-type: text/html;charset=iso-8859-2<br />
        Content-language: fr, de<br />
      </code></p></div>
      
          <p>Notez aussi qu'un fichier de correspondances de types prend le pas sur
          les extensions de noms de fichiers, même si les Multivues sont activées.
          Si les variantes sont de qualités différentes, on doit l'indiquer
          à l'aide du paramètre "qs" à la suite du type de média, comme pour cette
          image
          (disponible aux formats JPEG, GIF, ou ASCII-art) : </p>
      
      <div class="example"><p><code>
        URI: foo<br />
      <br />
        URI: foo.jpeg<br />
        Content-type: image/jpeg; qs=0.8<br />
      <br />
        URI: foo.gif<br />
        Content-type: image/gif; qs=0.5<br />
      <br />
        URI: foo.txt<br />
        Content-type: text/plain; qs=0.01<br />
      </code></p></div>
      
          <p>Les valeurs de qs peuvent varier de 0.000 à 1.000. Notez que toute
          variante possédant une valeur de qs de 0.000 ne sera jamais choisie.
          Les variantes qui n'ont pas de paramètre qs défini se voient attribuer
          une valeur de 1.0. Le paramètre qs indique la qualité relative de la
          variante comparée à celle des autres variantes disponibles, sans tenir
          compte des capacités du client. Par exemple, un fichier JPEG possède
          en général une qualité supérieure à celle d'un fichier ASCII s'il
          représente une photographie. Cependant, si la ressource représentée est
          à un ASCII art original, la représentation ASCII sera de meilleure qualité
          que la représentation JPEG. Ainsi une valeur de qs est associée à une
          variante en fonction de la nature de la ressource qu'elle représente.</p>
      
          <p>La liste complète des en-têtes reconnus est disponible dans la
          documentation sur les <a href="mod/mod_negotiation.html#typemaps">correspondances de types du
          module mod_negotiation</a>.</p>
      
      
      <h3><a name="multiviews" id="multiviews">Multivues (option Multiviews)</a></h3>
      
          <p><code>MultiViews</code> est une option qui s'applique à un répertoire,
          ce qui signifie qu'elle peut être activée à l'aide d'une directive
          <code class="directive"><a href="./mod/core.html#options">Options</a></code> à l'intérieur d'une section
          <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> ou <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> dans
          <code>httpd.conf</code>, ou (si <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> est correctement positionnée) dans
          des fichiers
          <code>.htaccess</code>. Notez que <code>Options All</code>
          n'active pas <code>MultiViews</code>; vous devez activer cette option en
          la nommant explicitement.</p>
      
          <p>L'effet de <code>MultiViews</code> est le suivant : si le serveur reçoit
          une requête pour <code>/tel/répertoire/foo</code>, si
          <code>MultiViews</code> est activée pour
          <code>/tel/répertoire</code>, et si
          <code>/tel/répertoire/foo</code> n'existe <em>pas</em>, le serveur parcourt
          le répertoire à la recherche de fichiers nommés foo.*, et simule
          littéralement une correspondance de types (type map) qui liste tous ces
          fichiers, en leur associant les mêmes types de média et encodages de
          contenu qu'ils auraient eu si le client avait demandé l'accès à l'un
          d'entre eux par son nom. Il choisit ensuite ce qui correspond le mieux
          aux besoins du client.</p>
      
          <p><code>MultiViews</code> peut aussi s'appliquer à la recherche du fichier
          nommé par la directive <code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code>, si le serveur tente d'indexer
          un répertoire. Si les fichiers de configuration spécifient</p>
      <pre class="prettyprint lang-config">DirectoryIndex index</pre>
      
          <p>le serveur va choisir entre <code>index.html</code>
          et <code>index.html3</code> si les deux fichiers sont présents. Si aucun
          n'est présent, mais <code>index.cgi</code> existe,
          le serveur l'exécutera.</p>
      
          <p>Si, parcequ'elle n'est pas reconnue par <code>mod_mime</code>,
          l'extension d'un des fichiers du répertoire ne permet pas de
          déterminer son jeu de caractères, son type de contenu, son langage, ou son
          encodage,  alors
          le résultat dépendra de la définition de la directive <code class="directive"><a href="./mod/mod_mime.html#multiviewsmatch">MultiViewsMatch</a></code>. Cette directive détermine
          si les gestionnaires (handlers), les filtres, et autres types d'extensions
          peuvent participer à la négociation MultiVues.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="methods" id="methods">Les méthodes de négociation</a></h2>
      
          <p>Une fois obtenue la liste des variantes pour une ressource donnée,
          httpd dispose de deux méthodes pour choisir la meilleure variante à
          retourner, s'il y a lieu, soit à partir d'un fichier de
          correspondances de types, soit en se basant sur les noms de fichiers du
          répertoire. Il n'est pas nécessaire de connaître en détails comment la
          négociation fonctionne réellement pour pouvoir utiliser les fonctionnalités
          de négociation de contenu de httpd. La suite de ce document explique
          cependant les méthodes utilisées pour ceux ou celles qui sont
          intéressés(ées). </p>
      
          <p>Il existe deux méthodes de négociation :</p>
      
          <ol>
            <li><strong>La négociation effectuée par le serveur selon l'algorithme
            de httpd</strong> est normalement utilisée. l'algorithme de
            httpd est
            expliqué plus en détails ci-dessous. Quand cet algorithme est utilisé,
            httpd peut parfois "bricoler" le facteur de qualité (qs) d'une dimension
            particulière afin d'obtenir un meilleur résultat.
            La manière dont httpd peut modifier les facteurs de qualité est
            expliquée plus en détails ci-dessous.</li>
      
            <li><strong>La négociation de contenu transparente</strong> est utilisée
            quand le navigateur le demande explicitement selon le mécanisme défini
            dans la RFC 2295. Cette méthode de négociation donne au navigateur le
            contrôle total du choix de la meilleure variante; le résultat dépend
            cependant de la spécificité des algorithmes utilisés par le navigateur.
            Au cours du processus de négociation transparente, le navigateur peut
            demander à httpd d'exécuter l'"algorithme de sélection de variante à
            distance" défini dans la RFC 2296.</li>
          </ol>
      
      <h3><a name="dimensions" id="dimensions">Les dimensions de la négociation</a></h3>
      
          <table>
            
            <tr valign="top">
              <th>Dimension</th>
      
              <th>Notes</th>
            </tr>
      
            <tr valign="top">
              <td>Type de média</td>
      
              <td>Le navigateur affiche ses préférences à l'aide du champ d'en-tête
      	<code>Accept</code>. Chaque type de média peut se voir associé un facteur de
      	qualité. La description de la variante peut aussi avoir un facteur de
      	qualité (le paramètre "qs").</td>
            </tr>
      
            <tr valign="top">
              <td>Langage</td>
      
              <td>Le navigateur affiche ses préférences à l'aide du champ d'en-tête
              <code>Accept-Language</code>. Chaque langue peut se voir associé un facteur de
      	qualité. Les variantes peuvent être associées avec zéro, un ou
      	plusieurs langages.</td>
            </tr>
      
            <tr valign="top">
              <td>Encoding</td>
      
              <td>Le navigateur affiche ses préférences à l'aide du champ d'en-tête
              <code>Accept-Encoding</code>. Chaque encodage peut se voir associé un facteur de
      	qualité.</td>
            </tr>
      
            <tr valign="top">
              <td>Charset</td>
      
              <td>Le navigateur affiche ses préférences à l'aide du champ d'en-tête
              <code>Accept-Charset</code>. Chaque jeu de caractère peut se voir associé un facteur de
      	qualité. Les variantes peuvent préciser un jeu de caractères comme
      	paramètre du type de média.</td>
            </tr>
          </table>
      
      
      <h3><a name="algorithm" id="algorithm">L'algorithme de négociation de
      httpd</a></h3>
      
          <p>httpd peut utiliser l'algorithme suivant pour choisir la "meilleure"
          variante (s'il y en a une) à retourner au navigateur. Cet algorithme n'est pas
          configurable. Il fonctionne comme suit :</p>
      
          <ol>
            <li>En premier lieu, pour chaque dimension de la négociation, consulter
            le champ d'en-tête <em>Accept*</em> approprié et assigner une qualité à
            chaque variante. Si l'en-tête <em>Accept*</em> pour toute dimension
            implique que la variante n'est pas acceptable, éliminer cette dernière.
            S'il ne reste plus de variante, aller à l'étape 4.</li>
      
            <li>
              Choisir la "meilleure" variante par élimination. Chacun des tests
      	suivants est effectué dans cet ordre. Toute variante non sélectionnée
      	à l'issue d'un test est éliminée. Après chaque test, s'il reste une
      	seule variante, choisir cette dernière comme celle qui correspond le
      	mieux puis aller à l'étape 3. S'il reste plusieurs variantes, passer
      	au test suivant.
      
              <ol>
                <li>Multiplier le facteur de qualité de l'en-tête
      	  <code>Accept</code> par le facteur de qualité "qs" pour le type de
      	  média de ces variantes, et choisir la variante qui possède la valeur
      	  la plus importante.</li>
      
                <li>Sélectionner les variantes qui possèdent le facteur de qualité
      	  de langage le plus haut.</li>
      
                <li>Sélectionner les variantes dont le langage correspond le mieux,
                en se basant sur l'ordre des langages de l'en-tête
                <code>Accept-Language</code> (s'il existe), ou de la directive
      	  <code>LanguagePriority</code> (si elle existe).</li>
      
                <li>Sélectionner les variantes possédant le paramètre de média
      	  "level" le plus élevé (utilisé pour préciser la version des types de
      	  média text/html).</li>
      
                <li>Sélectionner les variantes possédant le paramètre de média
      	  "charset" (jeu de caractères) qui correspond le mieux, en se basant
      	  sur la ligne d'en-tête <code>Accept-Charset</code> . Le jeu de
      	  caractères ISO-8859-1 est acceptable sauf s'il est explicitement
      	  exclus. Les variantes avec un type de média <code>text/*</code>
                mais non explicitement associées avec un jeu de caractères
      	  particulier sont supposées être en ISO-8859-1.</li>
      
                <li>Sélectionner les variantes dont le paramètre de média "charset"
      	  associé n'est <em>pas</em> ISO-8859-1. S'il n'en existe pas,
      	  sélectionner toutes les variantes.</li>
      
                <li>Sélectionner les variantes avec le meilleur encodage. S'il existe
      	  des variantes avec un encodage acceptable pour le client,
      	  sélectionner celles-ci. Sinon, s'il existe des variantes encodées et
      	  des variantes non encodées, ne sélectionner que les variantes non
      	  encodées. Si toutes les variantes sont encodées ou si aucune
      	  ne l'est, sélectionner toutes les variantes.</li>
      
                <li>Sélectionner les variantes dont le contenu a la longueur
      	  la plus courte.</li>
      
                <li>Sélectionner la première des variantes restantes. Il s'agira
      	  soit de la première variante listée dans le fichier de
      	  correspondances de types, soit, quand les variantes sont lues depuis
      	  le répertoire, la première par ordre alphabétique quand elles sont
      	  triées selon le code ASCII.</li>
              </ol>
            </li>
      
            <li>L'algorithme a maintenant sélectionné une variante considérée comme
            la "meilleure", il la retourne donc au client en guise de réponse.
            L'en-tête HTTP <code>Vary</code> de la réponse est renseigné de façon à
            indiquer les dimensions de la négociation (les navigateurs et les caches
            peuvent utiliser cette information lors de la mise en cache de la
            ressource).  Travail terminé.</li>
      
            <li>Le passage par cette étape signifie qu'aucune variante n'a été
            sélectionnée (parcequ'aucune n'est acceptable pour le navigateur).
            Envoyer une réponse avec un code de statut 406 (qui signifie "Aucune
            représentation acceptable") et un corps comportant un document HTML qui
            affiche les variantes disponibles. Renseigner aussi l'en-tête HTTP
            <code>Vary</code> de façon à indiquer les dimensions de la variante.</li>
          </ol>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="better" id="better">Ajustement des valeurs de qualité</a></h2>
      
          <p>Parfois httpd modifie les valeurs de qualité par rapport à celles qui
          découleraient d'une stricte interprétation de l'algorithme de négociation
          de httpd ci-dessus, ceci pour améliorer les résultats de l'algorithme pour
          les navigateurs qui envoient des informations incomplètes ou inappropriées.
          Certains des navigateurs les plus populaires envoient des informations dans
          l'en-tête <code>Accept</code> qui, sans ce traitement, provoqueraient la
          sélection d'une variante inappropriée dans de nombreux cas. Quand un
          navigateur envoie des informations complètes et correctes ces ajustements
          ne sont pas effectués.</p>
      
      <h3><a name="wildcards" id="wildcards">Types de média et caractères génériques</a></h3>
      
          <p>L'en-tête de requête <code>Accept:</code> indique les types de média
          souhaités. Il peut aussi contenir des types de média avec caractères
          génériques, comme "image/*" ou "*/*" où * correspond à n'importe quelle
          chaîne de caractères. Ainsi une requête contenant :</p>
      
      <div class="example"><p><code>Accept: image/*, */*</code></p></div>
      
          <p>indiquerait que tout type de média est acceptable, avec une préférence
          pour les types commençant par "image/".
          Certains navigateurs ajoutent par défaut des types de média avec caractères
          génériques aux types explicitement nommés qu'ils peuvent gérer.
          Par exemple :</p>
      
      <div class="example"><p><code>
        Accept: text/html, text/plain, image/gif, image/jpeg, */*
      </code></p></div>
          <p>Ceci indique que les types explicitement listés sont préférés, mais
          qu'une représentation avec un type différent de ces derniers conviendra
          aussi.  Les valeurs de qualités explicites,
          afin de préciser ce que veut vraiment le navigateur, s'utilisent
          comme suit :</p>
      <div class="example"><p><code>
        Accept: text/html, text/plain, image/gif, image/jpeg, */*; q=0.01
      </code></p></div>
          <p>Les types explicites n'ont pas de facteur de qualité, la valeur par
          défaut de leur préférence est donc de 1.0 (la plus haute). Le type avec
          caractères génériques */* se voit attribuer une préférence basse de 0.01,
          si bien que les types autres que ceux explicitement listés ne seront retournés
          que s'il n'existe pas de variante correspondant à un type explicitement
          listé.</p>
      
          <p>Si l'en-tête <code>Accept:</code> ne contient <em>pas</em> aucun
          facteur de qualité, httpd positionne la valeur de qualité de
          "*/*", si present, à 0.01 pour simuler l'effet désiré. Il positionne aussi
          la valeur de qualité des types avec caractères génériques au format
          "type/*" à 0.02 (ils sont donc préférés à ceux correspondant à "*/*"). Si
          un type de média dans l'en-tête <code>Accept:</code> contient un facteur de
          qualité, ces valeurs spéciales ne seront <em>pas</em> appliquées, de façon
          à ce que les requêtes de navigateurs qui envoient les informations
          explicites à prendre en compte fonctionnent comme souhaité.</p>
      
      
      <h3><a name="exceptions" id="exceptions">Exceptions dans la négociation du
      langage</a></h3>
      
          <p>A partir de la version 2.0 de httpd, certaines exceptions ont été
          ajoutées à l'algorithme de négociation afin de ménager une issue de secours
          quand la négociation ne trouve aucun langage correspondant.</p>
      
          <p>Quand un client demande une page sur votre serveur, si ce dernier ne
          parvient pas à trouver une page dont la langue corresponde à l'en-tête
          <code>Accept-language</code> envoyé par le navigateur, il enverra au client
          une réponse "Aucune variante acceptable" ou "Plusieurs choix possibles".
          Pour éviter ces
          messages d'erreur, il est possible de configurer httpd de façon à ce que,
          dans ces cas, il ignore l'en-tête <code>Accept-language</code> et fournisse
          tout de même un document, même s'il ne correspond pas exactement à la
          demande explicite du client. La directive <code class="directive"><a href="./mod/mod_negotiation.html#forcelanguagepriority">ForceLanguagePriority</a></code>
          peut être utilisée pour éviter ces messages d'erreur et leur substituer une
          page dont le langage sera déterminé en fonction du contenu de la directive
          <code class="directive"><a href="./mod/mod_negotiation.html#languagepriority">LanguagePriority</a></code>.</p>
      
          <p>Le serveur va aussi essayer d'étendre sa recherche de correspondance aux
          sous-ensembles de langages quand aucune correspondance exacte ne peut être
          trouvée. Par exemple, si un client demande des documents possédant le
          langage <code>en-GB</code>, c'est à dire anglais britannique, le standard
          HTTP/1.1 n'autorise normalement pas le serveur à faire correspondre cette
          demande à un document dont le langage est simplement <code>en</code>.
          (Notez qu'inclure <code>en-GB</code> et non <code>en</code> dans l'en-tête
          <code>Accept-Language</code> constitue une quasi-erreur de configuration,
          car il est très peu probable qu'un lecteur qui comprend l'anglais
          britannique, ne comprenne pas l'anglais en général. Malheureusement, de
          nombreux clients ont réellement des configurations par défaut de ce type.)
          Cependant, si aucune autre correspondance de langage n'est possible, et que le
          serveur est sur le point de retourner une erreur "Aucune variable
          acceptable" ou de choisir le langage défini par la directive <code class="directive"><a href="./mod/mod_negotiation.html#languagepriority">LanguagePriority</a></code>, le serveur ignorera
          la spécification du sous-ensemble de langage et associera la demande en
          <code>en-GB</code> à des documents en <code>en</code>.  Implicitement,
          httpd ajoute le langage parent à la liste de langues acceptés par le
          client avec une valeur de qualité très basse. Notez cependant que si le
          client demande "en-GB; q=0.9, fr; q=0.8", et le serveur dispose de
          documents estampillés "en" et "fr", alors c'est le document "fr" qui sera
          retourné, tout ceci dans un souci de compatibilité avec la spécification
          HTTP/1.1 et afin de fonctionner efficacement avec les clients
          correctement configurés.</p>
      
          <p>Pour supporter les techniques avancées (comme les cookies ou les chemins
          d'URL spéciaux) afin de déterminer le langage préféré de l'utilisateur, le
          module <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> reconnaît la
          <a href="env.html">variable d'environnement</a>
          <code>prefer-language</code>
          depuis la version 2.0.47 de httpd. Si elle est définie et contient un
          symbole de langage approprié, <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> va essayer
          de sélectionner une variante correspondante. S'il n'existe pas de telle
          variante, le processus normal de négociation sera lancé.</p>
      
          <div class="example"><h3>Exemple</h3><pre class="prettyprint lang-config">SetEnvIf Cookie "language=(.+)" prefer-language=$1
      Header append Vary cookie</pre>
      </div>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="extensions" id="extensions">Extensions à la négociation de contenu
      transparente</a></h2>
      
      <p>httpd étend le protocole de négociation de contenu transparente (RFC
      2295) comme suit. Un nouvel élément <code>{encodage ..}</code> est utilisé dans
      les listes de variantes pour marquer celles qui ne sont disponibles qu'avec un
      encodage de contenu spécifique. L'implémentation de l'algorithme
      RVSA/1.0 (RFC 2296) est étendue à la reconnaissance de variantes encodées dans
      la liste, et à leur utilisation en tant que variantes candidates à partir du
      moment où leur encodage satisfait au contenu de l'en-tête de requête
      <code>Accept-Encoding</code>. L'implémentation RVSA/1.0 n'arrondit pas les
      facteurs de qualité calculés à 5 décimales avant d'avoir choisi la meilleure
      variante.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="naming" id="naming">Remarques à propos des liens hypertextes et des
      conventions de nommage</a></h2>
      
          <p>Si vous utilisez la négociation de langage, vous avez le choix entre
          différentes conventions de nommage, car les fichiers peuvent posséder
          plusieurs extensions, et l'ordre dans lequel ces dernières apparaissent
          est en général sans rapport (voir la documentation sur le module <a href="mod/mod_mime.html#multipleext">mod_mime</a>
          pour plus de détails).</p>
      
          <p>Un fichier type possède une extension liée au type MIME
          (<em>par exemple</em>, <code>html</code>), mais parfois aussi une
          extension liée à l'encodage (<em>par exemple</em>, <code>gz</code>),
          et bien sûr une extension liée au langage
          (<em>par exemple</em>, <code>en</code>) quand plusieurs variantes de
          langage sont disponibles pour ce fichier.</p>
      
          <p>Exemples :</p>
      
          <ul>
            <li>foo.en.html</li>
      
            <li>foo.html.en</li>
      
            <li>foo.en.html.gz</li>
          </ul>
      
          <p>Ci-dessous d'autres exemples de noms de fichiers avec des liens
          hypertextes valides et invalides :</p>
      
          <table class="bordered">
            
            <tr>
              <th>Nom fichier</th>
      
              <th>lien valide</th>
      
              <th>Lien invalide</th>
            </tr>
      
            <tr>
              <td><em>foo.html.en</em></td>
      
              <td>foo<br />
               foo.html</td>
      
              <td>-</td>
            </tr>
      
            <tr>
              <td><em>foo.en.html</em></td>
      
              <td>foo</td>
      
              <td>foo.html</td>
            </tr>
      
            <tr>
              <td><em>foo.html.en.gz</em></td>
      
              <td>foo<br />
               foo.html</td>
      
              <td>foo.gz<br />
               foo.html.gz</td>
            </tr>
      
            <tr>
              <td><em>foo.en.html.gz</em></td>
      
              <td>foo</td>
      
              <td>foo.html<br />
               foo.html.gz<br />
               foo.gz</td>
            </tr>
      
            <tr>
              <td><em>foo.gz.html.en</em></td>
      
              <td>foo<br />
               foo.gz<br />
               foo.gz.html</td>
      
              <td>foo.html</td>
            </tr>
      
            <tr>
              <td><em>foo.html.gz.en</em></td>
      
              <td>foo<br />
               foo.html<br />
               foo.html.gz</td>
      
              <td>foo.gz</td>
            </tr>
          </table>
      
          <p>En regardant la table ci-dessus, vous remarquerez qu'il est toujours
          possible d'utiliser le nom de fichier sans extension dans un lien
          (<em>par exemple</em>, <code>foo</code>). L'avantage est de pouvoir
          dissimuler le type réel du fichier associé à un document et de pouvoir
          le modifier
          ultérieurement, <em>par exemple</em>, de <code>html</code> à
          <code>shtml</code> ou <code>cgi</code> sans avoir à
          mettre à jour aucun lien.</p>
      
          <p>Si vous souhaitez continuer à utiliser un type MIME dans vos liens
          (<em>par exemple </em> <code>foo.html</code>), l'extension liée au langage
          (y compris une extension liée à l'encodage s'il en existe une)
          doit se trouver à droite de l'extension liée au type MIME
          (<em>par exemple</em>, <code>foo.html.en</code>).</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="caching" id="caching">Remarque sur la mise en cache</a></h2>
      
          <p>Quand un cache stocke une représentation, il l'associe avec l'URL de la
          requête. Lorsque cette URL est à nouveau demandée, le cache peut utiliser
          la représentation stockée. Cependant, si la ressource est négociable au
          niveau du serveur, il se peut que seule la première variante demandée soit
          mise en cache et de ce fait, la correspondance positive du cache peut
          entraîner une réponse inappropriée. Pour
          éviter ceci, httpd marque par
          défaut toutes les réponses qui sont retournées après une négociation de
          contenu comme "non-cachables" par les clients HTTP/1.0. httpd supporte
          aussi les fonctionnalités du protocole HTTP/1.1 afin de permettre la mise
          en cache des réponses négociées.</p>
      
          <p>Pour les requêtes en provenance d'un client compatible HTTP/1.0
          (un navigateur ou un cache), la directive <code class="directive"><a href="./mod/mod_negotiation.html#cachenegotiateddocs">CacheNegotiatedDocs</a></code> peut être utilisée
          pour permettre la mise en cache des réponses qui ont fait l'objet d'une
          négociation. Cette directive peut intervenir dans la configuration au
          niveau du serveur ou de l'hôte virtuel, et n'accepte aucun argument. Elle
          n'a aucun effet sur les requêtes en provenance de clients HTTP/1.1.</p>
      
          <p>Pour les clients HTTP/1.1, httpd envoie un en-tête de réponse HTTP
          <code>Vary</code> afin d'indiquer les dimensions de la négociation pour
          cette réponse. Les caches peuvent
          utiliser cette information afin de déterminer
          si une requête peut être servie à partir de la copie locale. Pour inciter
          un cache à utiliser la copie locale sans tenir compte des dimensions de la
          négociation, définissez la
          <a href="env.html#special">variable d'environnement</a>
          <code>force-no-vary</code>.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/content-negotiation.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/content-negotiation.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/content-negotiation.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/content-negotiation.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/content-negotiation.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/content-negotiation.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/stopping.html.ko.euc-kr����������������������������������������������������0000644�0000000�0000050�00000035256�13412755316�020011� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Áߴܰú Àç½ÃÀÛ - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Áߴܰú Àç½ÃÀÛ</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/stopping.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/stopping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/stopping.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/stopping.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/stopping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/stopping.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/stopping.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p>ÀÌ ¹®¼­´Â À¯´Ð½º·ù ½Ã½ºÅÛ¿¡¼­ ¾ÆÆÄÄ¡¸¦ Áß´ÜÇϰí Àç½ÃÀÛÇÏ´Â
          ³»¿ëÀ» ´ã°íÀÖ´Ù. À©µµ¿ìÁî NT, 2000, XP »ç¿ëÀÚ´Â <a href="platform/windows.html#winsvc">¼­ºñ½º·Î ¾ÆÆÄÄ¡
          ½ÇÇàÇϱâ</a>¿¡¼­, À©µµ¿ìÁî 9x¿Í ME »ç¿ëÀÚ´Â <a href="platform/windows.html#wincons">ÄÝ¼Ö ÇÁ·Î±×·¥À¸·Î
          ¾ÆÆÄÄ¡ ½ÇÇàÇϱâ</a>¿¡¼­ Ç÷¡Æûº° ¾ÆÆÄÄ¡ Á¶ÀÛ¹ýÀ» ¾Ë ¼ö ÀÖ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#introduction">¼Ò°³</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#term">´çÀå Áß´Ü</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#graceful">Á¡ÀÝÀº Àç½ÃÀÛ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#hup">´çÀå Àç½ÃÀÛ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#race">ºÎ·Ï: ½Ã±×³Î°ú ·¹À̽º ÄÁµð¼Ç</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="programs/httpd.html">httpd</a></li><li><a href="programs/apachectl.html">apachectl</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">¼Ò°³</a></h2>
      
          <p>¾ÆÆÄÄ¡¸¦ Áß´ÜÇϰí Àç½ÃÀÛÇÏ·Á¸é ½ÇÇàÇϰí ÀÖ´Â
          <code>httpd</code> ÇÁ·Î¼¼½º¿¡ ½Ã±×³ÎÀ» º¸³»¾ß ÇÑ´Ù. ½Ã±×³ÎÀ»
          º¸³»´Â ¹æ¹ýÀº µÎ°¡Áö´Ù. Çϳª´Â À¯´Ð½º <code>kill</code>
          ¸í·É¾î¸¦ »ç¿ëÇÏ¿© ÇÁ·Î¼¼½º¿¡ Á÷Á¢ ½Ã±×³ÎÀ» º¸³»´Â ¹æ¹ýÀÌ´Ù.
          ½Ã½ºÅÛ¿¡ ¸¹Àº <code>httpd</code>°¡ ½ÇÇàµÇÁö¸¸, <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code>¿¡ pid°¡ ±â·ÏµÈ ºÎ¸ð¿Ü¿¡
          ´Ù¸¥ ÇÁ·Î¼¼½º¿¡ ½Ã±×³Î(signal)À» º¸³»¸é ¾ÈµÈ´Ù. Áï, ºÎ¸ðÀ̿ܿ¡
          ´Ù¸¥ ÇÁ·Î¼¼½º¿¡ ½Ã±×³ÎÀ» º¸³¾ Çʿ䰡 ¾ø´Ù´Â ¸»ÀÌ´Ù. ºÎ¸ð¿¡°Ô
          º¸³¾ ¼ö ÀÖ´Â ½Ã±×³ÎÀº ¼¼°¡Áö·Î, ÀÌÁ¦ ¼³¸íÇÒ <code><a href="#term">TERM</a></code>, <code><a href="#hup">HUP</a></code>, <code><a href="#graceful">USR1</a></code>ÀÌ´Ù.</p>
      
          <p>´ÙÀ½°ú °°ÀÌ ºÎ¸ð¿¡°Ô ½Ã±×³ÎÀ» º¸³½´Ù:</p>
      
      <div class="example"><p><code>kill -TERM `cat /usr/local/apache2/logs/httpd.pid`</code></p></div>
      
          <p><code>httpd</code> ÇÁ·Î¼¼½º¿¡°Ô ½Ã±×³ÎÀ» º¸³»´Â ´Ù¸¥ ¹æ¹ýÀº
          ¸í·ÉÇà ¿É¼Ç <code>-k</code>¸¦ »ç¿ëÇÏ´Â °ÍÀÌ´Ù. ¾Æ·¡¼­ ¼³¸íÇÒ
          <code>stop</code>, <code>restart</code>, <code>graceful</code>˼
          <a href="programs/httpd.html">httpd</a> ½ÇÇàÆÄÀÏÀÇ ¾Æ±Ô¸ÕÆ®µéÀÌ´Ù.
          ±×·¯³ª ÀÌ ¾Æ±Ô¸ÕÆ®µé·Î <code>httpd</code>¸¦ ½ÇÇàÇÏ´Â, <a href="programs/apachectl.html">apachectl</a> ½ºÅ©¸³Æ®¸¦
          »ç¿ëÇÏ±æ ±ÇÇÑ´Ù.</p>
      
          <p><code>httpd</code>¿¡ ½Ã±×³ÎÀ» º¸³½ÈÄ, ´ÙÀ½ ¸í·É¾î·Î
          ÁøÇà»óȲÀ» ¾Ë ¼ö ÀÖ´Ù:</p>
      
      <div class="example"><p><code>tail -f /usr/local/apache2/logs/error_log</code></p></div>
      
          <p>À§ ¿¹¸¦ ´ç½ÅÀÇ <code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code>¿Í <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code> ¼³Á¤¿¡ ¾Ë¸Â°Ô ¼öÁ¤Ç϶ó.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="term" id="term">´çÀå Áß´Ü</a></h2>
      
      <dl><dt>½Ã±×³Î: TERM</dt>
      <dd><code>apachectl -k stop</code></dd>
      </dl>
      
          <p><code>TERM</code>À̳ª <code>stop</code> ½Ã±×³ÎÀ» ºÎ¸ð¿¡°Ô
          º¸³»¸é Áï½Ã ¸ðµç ÀÚ½ÄÀ» Á×ÀδÙ. ÀÚ½ÄÀ» ¿ÏÀüÈ÷ Á×À̴µ¥´Â
          ¸î Ãʰ¡ °É¸± ¼ö ÀÖ´Ù. ±×·±ÈÄ ºÎ¸ð°¡ Á¾·áÇÑ´Ù. ó¸®ÁßÀÎ ¿äûÀº
          Áߴܵǰí, ´õ ÀÌ»ó ¿äûÀ» ¹ÞÁö¾Ê´Â´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="graceful" id="graceful">Á¡ÀÝÀº Àç½ÃÀÛ</a></h2>
      
      <dl><dt>½Ã±×³Î: USR1</dt>
      <dd><code>apachectl -k graceful</code></dd>
      </dl>
      
          <p><code>USR1</code>À̳ª <code>graceful</code> ½Ã±×³ÎÀ»
          ºÎ¸ð¿¡°Ô º¸³»¸é ºÎ¸ð ÇÁ·Î¼¼½º´Â Àڽĵ鿡°Ô ÇöÀç ¿äûÀ»
          ó¸®ÇÑÈÄ Á¾·áÇ϶ó°í (ȤÀº ÇöÀç ¾Æ¹«°Íµµ ó¸®ÇÏÁö ¾Ê´Ù¸é
          Áï½Ã Á¾·áÇ϶ó°í) <em>Á¶¾ðÇÑ´Ù</em>. ºÎ¸ð´Â ¼³Á¤ÆÄÀÏÀ»
          ´Ù½ÃÀÐ°í ·Î±×ÆÄÀϵµ ´Ù½Ã ¿¬´Ù. ÀÚ½ÄÀÌ Á×À»¶§¸¶´Ù ºÎ¸ð´Â
          Á×Àº ÀڽĴë½Å »õ·Î¿î ¼³Á¤ <em>¼¼´ë</em>¿¡ ±âÃÊÇÑ ÀÚ½ÄÀ»
          ½ÇÇàÇÏ¿© Áï½Ã ¿äûÀ» ó¸®ÇÏ°Ô ÇÑ´Ù.</p>
      
          <div class="note">Á¡ÀÝÀº Àç½ÃÀÛ(graceful restart)À¸·Î <code>USR1</code>À»
          »ç¿ëÇÒ ¼ö ¾ø´Â Ç÷¡Æû¿¡¼­´Â ´ë½Å (<code>WINCH</code>¿Í °°Àº)
          ´Ù¸¥ ½Ã±×³ÎÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù. <code>apachectl graceful</code>Àº
          Ç÷¡Æû¿¡ ¾Ë¸ÂÀº ½Ã±×³ÎÀ» º¸³½´Ù.</div>
      
          <p>Á¡ÀÝÀº Àç½ÃÀÛÀº Ç×»ó MPMÀÇ ÇÁ·Î¼¼½º Á¶Àý Áö½Ã¾î ¼³Á¤À»
          °í·ÁÇÏ¿©, Àç½ÃÀÛµ¿¾È Ŭ¶óÀÌ¾ðÆ®¸¦ ¼­ºñ½ºÇÏ´Â ÇÁ·Î¼¼½º³ª ¾²·¹µå°¡
          Àû´çÇÑ ¼ö¸¦ À¯ÁöÇϵµ·Ï ¼³°èµÇ¾ú´Ù. °Ô´Ù°¡ <code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code>´Â, ÀÏÃÊ ÈÄ
          ÃÖ¼ÒÇÑ StartServers¸¸Å­ »õ·Î¿î ÀÚ½ÄÀÌ ¾È¸¸µé¾îÁö¸é ÀÚ½ÄÀÌ
          StartServers °³°¡ µÇµµ·Ï »õ·Î ¸¸µç´Ù. Áï, ÇÁ·Î±×·¥Àº ¼­¹öÀÇ
          ÇöÀç ºÎÇÏ¿¡ ¾Ë¸ÂÀº ÀÚ½ÄÀÇ °³¼ö¸¦ À¯ÁöÇϸç,
          <code class="directive">StartServers</code> ÆÄ¶ó¹ÌÅÍ·Î ÁöÁ¤ÇÑ ´ç½ÅÀÇ
          ±â´ë¸¦ Á¸ÁßÇÑ´Ù.</p>
      
          <p><code class="module"><a href="./mod/mod_status.html">mod_status</a></code> »ç¿ëÀÚ´Â <code>USR1</code>À»
          ¹ÞÀ»¶§ ¼­¹ö Åë°è°¡ 0ÀÌ µÇÁö <strong>¾ÊÀ½À»</strong> ºÃÀ»
          °ÍÀÌ´Ù. ¼­¹ö´Â »õ·Î¿î ¿äûÀ» (¿î¿µÃ¼Á¦´Â À̵éÀ» Å¥¿¡ ´ã¾Æ¼­
          ¾î¶² °æ¿ì¿¡µµ ÀÒ¾î¹ö¸®Áö ¾Ê´Â´Ù) ó¸®ÇÏÁö ¸øÇÏ´Â ½Ã°£À»
          ÃÖ¼ÒÈ­ÇÏ°í ´ç½ÅÀÇ Æ©´× ÆÄ¶ó¹ÌÅ͸¦ Á¸ÁßÇϵµ·Ï ¸¸µé¾îÁ³´Ù.
          À̸¦ À§ÇØ ¼¼´ë°£ ¸ðµç ÀÚ½ÄÀ» ±â·ÏÇÏ´Â <em>scoreboard</em>¸¦
          À¯ÁöÇÑ´Ù.</p>
      
          <p>status ¸ðµâÀº ¶ÇÇÑ Á¡ÀÝÀº Àç½ÃÀÛ Àü¿¡ ½ÃÀÛÇÏ¿© ¾ÆÁ÷µµ
          ¿äûÀ» ó¸®Çϰí ÀÖ´Â ÀÚ½ÄÀ» <code>G</code>·Î ¾Ë·ÁÁØ´Ù.</p>
      
          <p>ÇöÀç·Î´Â <code>USR1</code>À» »ç¿ëÇÏ´Â ·Î±×¼øÈ¯ ½ºÅ©¸³Æ®°¡
          Àç½ÃÀÛÀü¿¡ ¸ðµç ÀÚ½ÄÀÌ ·Î±×ÀÛ¼ºÀ» ¸¶ÃÆ´ÂÁö ¾Ë ¼ö ÀÖ´Â
          ¹æ¹ýÀÌ ¾ø´Ù. ¿ì¸®´Â <code>USR1</code> ½Ã±×³ÎÀ» º¸³»°í
          Àû´çÇÑ ½Ã°£ÀÌ Áö³­ÈÄ ÀÌÀü ·Î±×¸¦ ´Ù·çµµ·Ï Á¦¾ÈÇÑ´Ù. ¿¹¸¦
          µé¾î ³·Àº ´ë¿ªÆø »ç¿ëÀÚÀÇ °æ¿ì Á¢¼Ó ´ëºÎºÐÀÌ ¸¶Ä¡´Âµ¥ 10ºÐÀÌ
          ¾È°É¸°´Ù¸é, ÀÌÀü ·Î±×¸¦ ´Ù·ç±âÀü¿¡ 15ºÐ ±â´Ù¸°´Ù.</p>
      
          <div class="note">¼³Á¤ÆÄÀÏ¿¡ ¿À·ù°¡ ÀÖ´Ù¸é Àç½ÃÀ۽à ºÎ¸ð´Â Àç½ÃÀÛÇÏÁö
          ¾Ê°í ¿À·ù¸¦ ³»¸ç Á¾·áÇÑ´Ù. ¶Ç, Á¡ÀÝÀº Àç½ÃÀÛÀÇ °æ¿ì Á¾·áÇÒ¶§
          ÀÚ½ÄÀÌ ½ÇÇàµÇµµ·Ï ³öµÐ´Ù. (ÀڽĵéÀº ÀÚ½ÅÀÇ ¸¶Áö¸· ¿äûÀ»
          ó¸®Çϰí "Á¡ÀÝ°Ô Á¾·áÇÑ´Ù".) ÀÌ´Â ¼­¹ö¸¦ Àç½ÃÀÛÇÒ¶§
          ¹®Á¦°¡ µÈ´Ù. ¼­¹ö´Â ÀÚ½ÅÀÌ ±â´Ù¸± Æ÷Æ®¿¡ ¿¬°áÇÏÁö ¸øÇÑ´Ù.
          Àç½ÃÀÛÀü¿¡ <code>-t</code> ¸í·ÉÇà ¿É¼Ç(<a href="programs/httpd.html">httpd</a> Âü°í)À¸·Î ¼³Á¤ÆÄÀÏ
          ¹®¹ýÀ» °Ë»çÇÒ ¼ö ÀÖ´Ù. ±×·¯³ª ÀÌ·± °Ë»çµµ ¼­¹ö°¡ ¿Ã¹Ù·Î
          Àç½ÃÀÛÇÒÁö¸¦ º¸ÀåÇÏÁö ¸øÇÑ´Ù. ¼³Á¤ÆÄÀÏÀÇ ¹®¹ýÀÌ ¾Æ´Ñ Àǹ̸¦
          °Ë»çÇÏ·Á¸é root°¡ ¾Æ´Ñ »ç¿ëÀÚ·Î <code>httpd</code>¸¦ ½ÃÀÛÇØº¼ ¼ö ÀÖ´Ù.
          root°¡ ¾Æ´Ï±â¶§¹®¿¡ (¾Æ´Ï¸é ÇöÀç ±× Æ÷Æ®¸¦ »ç¿ëÇÏ´Â
          <code>httpd</code>°¡ ½ÇÇàµÇ±â¶§¹®¿¡) ¿À·ù°¡ ¾ø´Ù¸é ¼ÒÄϰú
          ·Î±×ÆÄÀÏÀ» ¿­·Á°í ½ÃµµÇÏ´Â °úÁ¤¿¡¼­ ½ÇÆÐÇÒ °ÍÀÌ´Ù. ´Ù¸¥
          ÀÌÀ¯¶§¹®¿¡ ½ÇÆÐÇÑ´Ù¸é ¾Æ¸¶µµ ¼³Á¤ÆÄÀÏ¿¡ ¿À·ù°¡ ÀÖÀ» °ÍÀÌ´Ù.
          Á¡ÀÝÀº Àç½ÃÀÛÀ» ÇϱâÀü¿¡ ¿À·ù¸¦ °íÃľßÇÑ´Ù.</div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="hup" id="hup">´çÀå Àç½ÃÀÛ</a></h2>
      
      <dl><dt>½Ã±×³Î: HUP</dt>
      <dd><code>apachectl -k restart</code></dd>
      </dl>
      
          <p><code>HUP</code>À̳ª <code>restart</code> ½Ã±×³ÎÀ»
          ºÎ¸ð¿¡°Ô º¸³»¸é <code>TERM</code>°ú °°ÀÌ ¸ðµç ÀÚ½ÄÀ»
          Á×ÀÌÁö¸¸ ºÎ¸ð´Â Á¾·áÇÏÁö ¾Ê´Â´Ù. ºÎ¸ð´Â ¼³Á¤ÆÄÀÏÀ» ´Ù½ÃÀаí
          ·Î±×ÆÄÀÏÀ» ´Ù½Ã ¿¬´Ù. ±×¸®°í »õ·Î¿î ÀڽĵéÀ» ¸¸µé°í ¼­ºñ½º¸¦
          °è¼ÓÇÑ´Ù.</p>
      
          <p><code class="module"><a href="./mod/mod_status.html">mod_status</a></code> »ç¿ëÀÚ´Â <code>HUP</code>¸¦
          º¸³»¸é ¼­¹ö Åë°è°¡ 0ÀÌ µÊÀ» ¾Ë ¼ö ÀÖ´Ù.</p>
      
      <div class="note">¼³Á¤ÆÄÀÏ¿¡ ¿À·ù°¡ ÀÖ´Ù¸é Àç½ÃÀÛÀ» ÇØµµ ºÎ¸ð´Â Àç½ÃÀÛÇÏÁö
      ¾Ê°í ¿À·ù¸¦ ³»¸ç Á¾·áÇÒ °ÍÀÌ´Ù. À̸¦ ÇÇÇÏ´Â ¹æ¹ýÀº À§¸¦ Âü°íÇ϶ó.</div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="race" id="race">ºÎ·Ï: ½Ã±×³Î°ú ·¹À̽º ÄÁµð¼Ç</a></h2>
      
          <p>Apache 1.2b9 ÀÌÀü¿¡´Â Àç½ÃÀÛ°ú Á¾·á ½Ã±×³Î¿¡ °ü°èµÈ
          <em>·¹À̽º ÄÁµð¼Ç(race condition)</em>ÀÌ ÀÖ¾ú´Ù. (·¹À̽º
          ÄÁµð¼ÇÀº °£´ÜÇÑ ¼³¸íÇÏÀÚ¸é, ¾î¶² ÀÏÀÌ À߸øµÈ¶§ ÀϾ¼­
          ±â´ëÇÑ´ë·Î µ¿ÀÛÇÏÁö ¾Ê´Â ½Ã°£¿¡ ¹Î°¨ÇÑ ¹®Á¦´Ù.) "¿Ã¹Ù¸¥"
          ±â´ÉÀÌ ÀÖ´Â ¾ÆÅ°ÅØÃÄ¿¡¼­ ¿ì¸®´Â ÀÌ·± ¹®Á¦¸¦ ÃÖ´ëÇÑ ÇØ°áÇß´Ù.
          ±×·¯³ª ¾î¶² ¾ÆÅ°ÅØÃÄ¿¡´Â ¾ÆÁ÷µµ ·¹À̽º ÄÁµð¼ÇÀÌ Á¸ÀçÇÔÀ»
          ÁÖÀÇÇ϶ó.</p>
      
          <p><code class="directive"><a href="./mod/mpm_common.html#scoreboardfile">ScoreBoardFile</a></code>À»
          µð½ºÅ©¿¡ ÀúÀåÇÏ´Â ¾ÆÅ°ÅØÃÄ´Â scoreboard¸¦ ¸Á°¡Æ®¸± °¡´É¼ºÀÌ
          ÀÖ´Ù. ±×·¯¸é (<code>HUP</code>ÈÄ) "bind: Address already in use"
          ȤÀº (<code>USR1</code> ÈÄ) "long lost child came home!"ÀÌ
          ¹ß»ýÇÒ ¼ö ÀÖ´Ù. ÀüÀÚ´Â ½É°¢ÇÑ ¿À·ùÀ̰í, ÈÄÀÚ´Â ´ÜÁö ¼­¹ö°¡
          scoreboard slotÀ» ÀÒ°Ô ¸¸µç´Ù. ±×·¡¼­ °­Á¦ Àç½ÃÀÛÀ» ÁÙÀ̰í
          Á¡ÀÝÀº Àç½ÃÀÛÀ» »ç¿ëÇϱæ ÃßõÇÑ´Ù. ÀÌ ¹®Á¦´Â ÇØ°áÇϱ⠸ſì
          Èûµé´Ù. ±×·¯³ª ´ÙÇàÈ÷µµ ´ëºÎºÐÀÇ ¾ÆÅ°ÅØÃÄ´Â scoreboard·Î ÆÄÀÏÀ»
          »ç¿ëÇÏÁö ¾Ê´Â´Ù. ÆÄÀÏÀ» »ç¿ëÇÏ´Â ¾ÆÅ°ÅØÃĶó¸é <code class="directive"><a href="./mod/mpm_common.html#scoreboardfile">ScoreBoardFile</a></code> ¹®¼­¸¦ Âü°íÇ϶ó.</p>
      
          <p>¸ðµç ¾ÆÅ°ÅØÃÄ¿¡´Â Áö¼ÓµÇ´Â HTTP ¿¬°á (KeepAlive)¿¡¼­
          µÎ¹øÂ° ÀÌÈÄ ¿äûÀ» ó¸®ÇÏ´Â ÀڽĿ¡ ¾à°£ÀÇ ·¹À̽º ÄÁµð¼ÇÀÌ
          ÀÖ´Ù. ÀÚ½ÄÀº ¿äûÁÙÀ» ÀÐÀº ÈÄ ¿äû Çì´õ¸¦ ÀбâÀü¿¡ Á¾·áÇÒ ¼ö
          ÀÖ´Ù. ÀÌ ¹®Á¦´Â ³Ê¹« ´Ê°Ô ¹ß°ßÇÏ¿© 1.2 ¹öÀüÀÌ ³ª¿ÂÈÄ¿¡¾ß
          ¼öÁ¤µÇ¾ú´Ù. ±×·¯³ª ³×Æ®¿÷ Áö¿¬À̳ª ¼­¹ö ½Ã°£Á¦ÇѶ§¹®¿¡ KeepAlive
          Ŭ¶óÀÌ¾ðÆ®´Â ÀÌ·± °æ¿ì¸¦ ¿¹»óÇØ¾ßÇϱ⠶§¹®¿¡ ÀÌ·Ð»ó ¹®Á¦´Â
          ¾ÈµÈ´Ù. ½ÇÁ¦·Î ¼­¹ö¸¦ °Ë»çÇϱâÀ§ÇØ ÀÏÃÊ¿¡ 20¹ø Àç½ÃÀÛÇÏ´Â µ¿¾È
          Ŭ¶óÀÌ¾ðÆ®°¡ ±úÁø ±×¸²À̳ª ºó ¹®¼­¾øÀÌ »çÀÌÆ®¸¦ ¼º°øÀûÀ¸·Î
          ÀоîµéÀÌ±æ ±â´ëÇÏÁö ¾Ê´Â´Ù¸é ¹®Á¦°¡ ¾ÈµÈ´Ù.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/stopping.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/stopping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/stopping.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/stopping.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/stopping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/stopping.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/stopping.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/stopping.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/dns-caveats.html.ja.utf8���������������������������������������������������0000644�0000000�0000050�00000042600�13412755316�020026� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>DNS 㨠Apache ã«ã¾ã¤ã‚る注æ„事項 - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>DNS 㨠Apache ã«ã¾ã¤ã‚る注æ„事項</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/dns-caveats.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/dns-caveats.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/dns-caveats.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/dns-caveats.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/dns-caveats.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
          <p>本文書ã®å†…å®¹ã¯æ¬¡ã®ä¸€è¨€ã«å°½ãã¾ã™ã€‚「Apache ãŒè¨­å®šãƒ•ァイルを読ã¿è¾¼ã‚€ã¨ãã«
          DNS を使用ã™ã‚‹å¿…è¦ãŒãªã„よã†ã«ã—ã¦ä¸‹ã•ã„ã€ã€‚Apache ãŒè¨­å®šãƒ•ァイルを
          読ã¿è¾¼ã‚€ã¨ãã« DNS を使用ã™ã‚‹å¿…è¦ãŒã‚ã‚‹å ´åˆã€ä¿¡é ¼æ€§ã®å•題
          (èµ·å‹•ã—ãªã„ã‹ã‚‚ã—れã¾ã›ã‚“) やサービス拒å¦ã‚„盗用アタック
          (ä»–ã®ãƒ¦ãƒ¼ã‚¶ã‹ã‚‰ãƒ’ットを盗むã“ã¨ã‚’å«ã¿ã¾ã™)
          ã®å•題ã«ç›´é¢ã™ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#example">ç°¡å˜ãªä¾‹</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#denial">サービス拒å¦</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#main">「主サーãƒã€ã‚¢ãƒ‰ãƒ¬ã‚¹</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#tips">以上ã®å•題を解決ã™ã‚‹æ–¹æ³•</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#appendix">付録: å°†æ¥çš„ãªæ–¹å‘性</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="example" id="example">ç°¡å˜ãªä¾‹</a></h2>
          
      
          <div class="example"><p><code>
            &lt;VirtualHost www.abc.dom&gt; <br />
            ServerAdmin webgirl@abc.dom <br />
            DocumentRoot /www/abc <br />
            &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>Apache ãŒæ­£å¸¸ã«æ©Ÿèƒ½ã™ã‚‹ã«ã¯ã€ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆæ¯Žã«å¿…ãšäºŒã¤ã®
          情報ãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ãれã¯ã€
          <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>
          ã¨ã€ãã®ã‚µãƒ¼ãƒãŒå¿œç­”ã™ã‚‹ãŸã‚ã® IP (最低一ã¤) ã§ã™ã€‚
          上記例ã§ã¯ IP アドレスをå«ã‚“ã§ã„ã¾ã›ã‚“ã®ã§ã€Apache 㯠DNS
          を使用ã—㦠<code>www.abc.dom</code> を見ã¤ã‘ãªã‘れã°ãªã‚Šã¾ã›ã‚“。
          何らã‹ã®ç†ç”±ã§è¨­å®šãƒ•ァイルを読ã¿è¾¼ã‚“ã§ã„ã‚‹ã¨ãã« DNS 
          ãŒåˆ©ç”¨ã§ããªã‹ã£ãŸå ´åˆã€
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¯<strong>設定ã•れã¾ã›ã‚“</strong>。
          ãã—ã¦ã€ãã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«å¯¾ã™ã‚‹ãƒ’ットã«ã¯å¿œç­”ãŒãªã•れã¾ã›ã‚“
          (Apache 1.2 以å‰ã§ã¯èµ·å‹•ã™ã‚‰ã—ã¾ã›ã‚“)。</p>
      
          <p><code>www.abc.dom</code> ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ãŒ 192.0.2.1
          ã ã¨ã—ã¾ã™ã€‚ã§ã¯ã€æ¬¡ã®è¨­å®šã«ã¤ã„ã¦è€ƒãˆã¦ã¿ã¾ã—ょã†ã€‚</p>
      
          <div class="example"><p><code>
            &lt;VirtualHost 192.0.2.1&gt; <br />
            ServerAdmin webgirl@abc.dom <br />
            DocumentRoot /www/abc <br />
            &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>ç¾åœ¨ã®ãƒªãƒªãƒ¼ã‚¹ã§ã¯ Apache 㯠DNS 逆引ãを使用ã—ã¦
          ã“ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã® <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>
          を見ã¤ã‘ã¾ã™ã€‚
          ãã®é€†å¼•ããŒå¤±æ•—ã—ãŸå ´åˆã¯éƒ¨åˆ†çš„ã«ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’無効ã«ã—ã¾ã™
          (Apache 1.2 よりå‰ã§ã¯èµ·å‹•ã™ã‚‰ã—ã¾ã›ã‚“)。
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãŒåå‰ãƒ™ãƒ¼ã‚¹ã§ã‚れã°å®Œå…¨ã«ç„¡åйã«ãªã‚Šã¾ã™ãŒã€
          IP ベースã§ã‚ã‚Œã°æ¦‚ã­å‹•作ã—ã¾ã™ã€‚ã—ã‹ã—ãªãŒã‚‰ã€ã‚µãƒ¼ãƒåã‚’
          å«ã‚€å®Œå…¨ãª URL を生æˆã—ãªã‘れã°ãªã‚‰ãªã„å ´åˆã¯ã€æ­£ã—ã„ URL
          ã®ç”ŸæˆãŒã§ãã¾ã›ã‚“。</p>
      
          <p>次ã®ä¾‹ã¯ä¸Šè¨˜ã®å•題を解決ã—ã¦ã„ã¾ã™ã€‚</p>
      
          <div class="example"><p><code>
            &lt;VirtualHost 192.0.2.1&gt; <br />
            ServerName www.abc.dom <br />
            ServerAdmin webgirl@abc.dom <br />
            DocumentRoot /www/abc <br />
            &lt;/VirtualHost&gt;
          </code></p></div>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="denial" id="denial">サービス拒å¦</a></h2>
          
      
          <p>サービス拒å¦ãŒèµ·ã“ã‚‹å ´åˆã€(å°‘ãªãã¨ã‚‚) 二ã¤ã®ã‚±ãƒ¼ã‚¹ãŒã‚りã¾ã™ã€‚
          Apache 1.2 よりå‰ã‚’実行ã—ã¦ã„ã‚‹å ´åˆã€ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ãŸã‚ã®
          上記ã®äºŒã¤ã® DNS 検索ã®ã†ã¡ä¸€ã¤å¤±æ•—ã™ã‚Œã°èµ·å‹•ã™ã‚‰ã—ã¾ã›ã‚“。
          ãã—ã¦ã“ã® DNS 検索ãŒè‡ªåˆ†ã®åˆ¶å¾¡ä¸‹ã«ã™ã‚‰ãªã„å ´åˆã‚‚ã‚りãˆã¾ã™ã€‚
          例ãˆã°ã€<code>abc.dom</code> ãŒé¡§å®¢ã®ã‚µãƒ¼ãƒã®ä¸€ã¤ã§ã€
          DNS ã¯é¡§å®¢è‡ªèº«ã§ç®¡ç†ã—ã¦ã„ã‚‹å ´åˆã€å˜ã«
          <code>www.abc.dom</code> レコードを削除ã™ã‚‹ã ã‘ã§ã€
          (1.2 よりå‰ã®) サーãƒã‚’èµ·å‹•ä¸èƒ½ã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>ã‚‚ã†ä¸€ã¤ã®ã‚±ãƒ¼ã‚¹ã¯ã€ã‚ˆã‚Šæ°—付ãã«ãã„ã‚‚ã®ã§ã™ã€‚
          次ã®è¨­å®šã«ã¤ã„ã¦è€ƒãˆã¦ã¿ã¾ã—ょã†ã€‚</p>
      
          <div class="example"><p><code>
            &lt;VirtualHost www.abc.dom&gt; <br />
            <span class="indent">
              ServerAdmin webgirl@abc.dom <br />
              DocumentRoot /www/abc <br />
            </span>
            &lt;/VirtualHost&gt; <br />
            <br />
            &lt;VirtualHost www.def.dom&gt; <br />
            <span class="indent">
              ServerAdmin webguy@def.dom <br />
              DocumentRoot /www/def <br />
            </span>
            &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>192.0.2.1 ã‚’ <code>www.abc.dom</code> ã«ã€
          192.0.2.2 ã‚’ <code>www.def.dom</code> ã«å‰²ã‚Šå½“ã¦ã¦ã„ã‚‹ã¨ã—ã¾ã™ã€‚
          ã¾ãŸã€<code>def.dom</code> ã¯é¡§å®¢è‡ªèº«ã® DNS
          ã®åˆ¶å¾¡ä¸‹ã«ã‚ã‚‹ã¨ã—ã¾ã™ã€‚ã“ã®è¨­å®šã§ã€<code>abc.dom</code>
          ã«å‘ã‘られãŸãƒˆãƒ©ãƒ•ィック全ã¦ã‚’奪ã†ã“ã¨ãŒã§ãã‚‹ä½ç½®ã«
          <code>def.dom</code> を設置ã§ãã¦ã„ã¾ã™ã€‚後ã¯å˜ã« 
          <code>www.def.dom</code> ㌠192.0.2.1 ã‚’å‚ç…§ã™ã‚‹ã‚ˆã†ã«
          設定ã™ã‚‹ã ã‘ã§ã™ã€‚DNS ã¯é¡§å®¢å´ã® DNS ã§ã‚³ãƒ³ãƒˆãƒ­ãƒ¼ãƒ«ã•れã¦ã„ã‚‹ã®ã§ã€
          <code>www.def.dom</code> レコードãŒå¥½ããªå ´æ‰€ã‚’指ã™ã‚ˆã†ã«
          設定ã§ãã¦ã—ã¾ã†ã®ã‚’æ­¢ã‚ã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã›ã‚“。</p>
      
          <p>192.0.2.1 ã«å¯¾ã™ã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆ
          (<code>http://www.abc.dom/whatever</code> å½¢å¼ã® URL 
          を入力ã—ãŸãƒ¦ãƒ¼ã‚¶ã‹ã‚‰ã®ã‚‚ã®å…¨ã¦ã‚’å«ã¿ã¾ã™) 
          ã¯ã€<code>def.dom</code> ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã§å¿œç­”ã•れã¾ã™ã€‚
          ã“ã®ã‚ˆã†ãªã“ã¨ãŒä½•æ•…èµ·ã“ã‚‹ã‹ã‚‚ã£ã¨è‰¯ã知るãŸã‚ã«ã¯ã€
          応答ã®å¿…è¦ãªãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—ã¦ã€
          Apache ãŒã©ã®ã‚ˆã†ã«æ•´åˆæ€§ã‚’確ä¿ã™ã‚‹ã‹ã«ã¤ã„ã¦ã€
          æ·±ã„è­°è«–ãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ãŠãŠã–ã£ã±ãªèª¬æ˜Žã¯<a href="vhosts/details.html">ã“ã¡ã‚‰</a>ã«è¨˜è¿°ã•れã¦ã„ã¾ã™ã€‚</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="main" id="main">「主サーãƒã€ã‚¢ãƒ‰ãƒ¬ã‚¹</a></h2>
          
      
          <p>Apache 1.1 ã§ã® <a href="vhost/name-based.html">åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ã‚µãƒãƒ¼ãƒˆ</a> 追加ã®éš›ã«ã€
          Apache 㯠<code class="program"><a href="./programs/httpd.html">httpd</a></code> ã®å®Ÿè¡Œã•れã¦ã„るホスト㮠IP
          アドレスを知る必è¦ãŒå‡ºã¦ãã¾ã—ãŸã€‚ã“ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’å¾—ã‚‹ãŸã‚ã«ã€
          (ã‚‚ã—ã‚れã°) グローãƒãƒ«ãª
          <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code> を使用ã™ã‚‹ã‹ã€
          C 言語ã®é–¢æ•° <code>gethostname</code> (コマンドプロンプトã§
          <code>hostname</code> ã¨ã‚¿ã‚¤ãƒ—ã—ãŸã¨ãã¨åŒã˜ã‚‚ã®ã‚’è¿”ã—ã¾ã™)
          を呼ã³å‡ºã™ã‹ã‚’ã—ã¾ã™ã€‚
          ãã®å¾Œã€å¾—られãŸã‚¢ãƒ‰ãƒ¬ã‚¹ã§ DNS 検索を行ãªã„ã¾ã™ã€‚
          ç¾åœ¨ã®ã¨ã“ã‚ã€ã“ã® DNS 検索を回é¿ã™ã‚‹æ–¹æ³•ã¯ã‚りã¾ã›ã‚“。</p>
      
          <p>DNS サーãƒãŒãƒ€ã‚¦ãƒ³ã—ã¦ã€ã“ã®æ¤œç´¢ãŒã§ããªã„事態ãŒèµ·ã“ã‚‹ã“ã¨ã‚’
          æã‚Œã¦ã„ã‚‹ã®ã§ã‚れã°ã€<code>/etc/hosts</code>
          ã«ãƒ›ã‚¹ãƒˆåを記述ã—ã¦ãŠãã“ã¨ãŒã§ãã¾ã™
          (ãƒžã‚·ãƒ³ãŒæ­£å¸¸ã«èµ·å‹•ã™ã‚‹ã‚ˆã†ã«æ—¢ã«è¨­å®šã•れã¦ã„ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“)。
          ãã®å ´åˆã€DNS å‚ç…§ãŒå¤±æ•—ã—ãŸå ´åˆã«ãƒžã‚·ãƒ³ãŒ <code>/etc/hosts</code>
          を使用ã™ã‚‹ã‚ˆã†ã«è¨­å®šã—ã¦ã„ã‚‹ã“ã¨ã‚’確èªã—ã¦ãã ã•ã„。
          ãã®æ–¹æ³•ã¯ã€ã©ã® OS を使用ã—ã¦ã„ã‚‹ã‹ã«ä¾å­˜ã—ã¾ã™ãŒã€
          <code>/etc/resolv.conf</code> ã‹ <code>/etc/nsswitch.conf</code>
          を編集ã™ã‚‹ã“ã¨ã§è¨­å®šã§ãã¾ã™ã€‚</p>
      
          <p>ã‚‚ã—ä»–ã®ç†ç”±ã§ DNS を利用ã™ã‚‹å¿…è¦ãŒãªã„å ´åˆã¯ã€
          <code>HOSTRESORDER</code> 環境変数を「 <code>local</code>
          ã€ã«è¨­å®šã™ã‚‹ã“ã¨ã§ãã®ã‚ˆã†ã«ã§ãã¾ã™ã€‚以上ã“れらã®äº‹æŸ„ã¯ã€ã©ã‚“ãª
          OS ã€ãƒ¬ã‚¾ãƒ«ãƒãƒ©ã‚¤ãƒ–ラリを使用ã—ã¦ã„ã‚‹ã‹ã«ä¾å­˜ã—ã¾ã™ã€‚ã¾ãŸã€
          <code class="module"><a href="./mod/mod_env.html">mod_env</a></code> を使用ã—ã¦ç’°å¢ƒå¤‰æ•°ã‚’制御ã—ãªã„é™ã‚Šã€
          CGI ã«ã‚‚影響を与ãˆã¾ã™ã€‚man ページや使用ã—ã¦ã„ã‚‹ OS
          ã® FAQ ã§èª¿ã¹ã‚‹ã¨è‰¯ã„ã§ã—ょã†ã€‚</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="tips" id="tips">以上ã®å•題を解決ã™ã‚‹æ–¹æ³•</a></h2>
          
      
          <ul>
            <li>
              <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code>
              ã§ IP アドレスを使用ã™ã‚‹ã€‚
            </li>
      
            <li>
              <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
              ã§ IP アドレスを使用ã™ã‚‹ã€‚
            </li>
      
            <li>
              å…¨ã¦ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãŒæ˜Žç¤ºçš„ã«
              <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>
              ã‚’æŒã¤ã‚ˆã†ã«ã™ã‚‹ã€‚
            </li>
      
            <li>何も応答ã—ãªã„
            <code>&lt;VirtualHost _default_:*&gt;</code>
            サーãƒã‚’作る。</li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="appendix" id="appendix">付録: å°†æ¥çš„ãªæ–¹å‘性</a></h2>
          
      
          <p>DNS ã«é–¢ã—ã¦ã€ç¾çжã¯å…¨ã宜ã—ãã‚りã¾ã›ã‚“。Apache 1.2 ã§ã€
          DNS ã®ã‚¤ãƒ™ãƒ³ãƒˆãŒå¤±æ•—ã—ã¦ã‚‚å°‘ãªãã¨ã‚‚起動プロセスãŒç¶šãよã†ã«ã—ã¾ã—ãŸãŒã€
          ã“ã‚ŒãŒæœ€é«˜ã®è§£æ±ºæ–¹æ³•ã§ã¯ãªã„ã§ã—ょã†ã€‚アドレスã®å†å‰²ã‚Šå½“ã¦ãŒå¿…è¦ä¸å¯é¿
          ã¨ãªã£ã¦ã„る今日ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«ãŠã„ã¦ã¯ã€
          設定ファイルã®ä¸­ã§æ˜Žç¤ºçš„㪠IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’è¦æ±‚ã™ã‚‹ä»•様ã¯ã€
          å…¨ã宜ã—ãã‚りã¾ã›ã‚“。</p>
      
          <p>盗用ã®ã‚µãƒ¼ãƒ“スアタックã«é–¢ã—ã¦è¡Œãªã†ã¹ã事ã¯ã€
          DNS 順引ãを行ãªã£ã¦å¾—られãŸã‚¢ãƒ‰ãƒ¬ã‚¹ã«å¯¾ã™ã‚‹ DNS 
          逆引ãを行ãªã£ã¦ã€äºŒã¤ã®åå‰ã‚’比較ã™ã‚‹ã“ã¨ã§ã™ã€‚
          ã“ã®äºŒã¤ãŒä¸€è‡´ã—ãªã‘れã°ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¯ç„¡åйã«ãªã‚‹ã‚ˆã†ã«ã—ã¾ã™ã€‚
          ã“ã†ã™ã‚‹ãŸã‚ã«ã¯é€†å¼•ã DNS ãŒé©åˆ‡ã«è¨­å®šã•れã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™
          (FTP サーãƒã‚„ TCP ラッパーã®ãŠã‹ã’ã§ã€ŒäºŒé‡é€†å¼•ãã€DNS ã¯ä¸€èˆ¬çš„ã«
          ãªã£ã¦ã„ã¾ã™ã®ã§ã€ç®¡ç†è€…ã«ã¯ãŠé¦´æŸ“ã¿ã‚‚ã®ã§ã—ょã†)。</p>
      
          <p>IP アドレスãŒä½¿ç”¨ã•れã¦ã„ãªã㦠DNS ãŒå¤±æ•—ã—ãŸå ´åˆã¯ã€
          ã©ã†ã—ã¦ã‚‚ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚¦ã‚§ãƒ–サーãƒã‚’信頼性を確ä¿ã—ã¦
          èµ·å‹•ã•ã›ã‚‹ã“ã¨ã¯ä¸å¯èƒ½ã®ã‚ˆã†ã§ã™ã€‚
          設定ã®ä¸€éƒ¨ã‚’無効ã«ã™ã‚‹ã¨ã„ã†ã‚ˆã†ãªéƒ¨åˆ†çš„ãªè§£æ±ºã§ã¯ã€
          サーãƒãŒä½•ã‚’ã™ã‚‹ã‚ˆã†ã«ã™ã‚‹ã‹ã«ã‚‚よりã¾ã™ãŒã€
          ãã®ã‚µãƒ¼ãƒãŒèµ·å‹•ã—ãªã„ã‚ˆã‚Šç¢ºå®Ÿã«æ‚ªã„状æ³ã«ãªã‚‹ã§ã—ょã†ã€‚</p>
      
          <p>HTTP/1.1 ãŒé–‹ç™ºã•れã€ãƒ–ラウザやプロキシ㌠<code>Host</code>
          ヘッダを発行ã™ã‚‹ã‚ˆã†ã«ãªã£ãŸã®ã§ã€IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’
          å…¨ã使用ã—ãªãã¦ã‚‚済むよã†ã«ãªã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。
          ã“ã®å ´åˆã€ã‚¦ã‚§ãƒ–サーãƒã¯è¨­å®šä¸­ã« DNS å‚ç…§ã‚’ã—ãªãã¦ã‚‚済ã¿ã¾ã™ã€‚
          ã—ã‹ã— 1997 å¹´ 3 月時点ã®çжæ³ã§ã¯ã€
          商用レベルã®ã‚¦ã‚§ãƒ–サーãƒã§ä½¿ç”¨ã§ãã‚‹ã»ã©ã«ã¯ã€
          ã“ã‚Œã‚‰ã®æ©Ÿèƒ½ã¯åºƒã開発ãŒé€²ã‚“ã§ã„ã¾ã›ã‚“。</p>
        </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/dns-caveats.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/dns-caveats.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/dns-caveats.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/dns-caveats.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/dns-caveats.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/dns-caveats.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/suexec.html.fr.utf8��������������������������������������������������������0000644�0000000�0000050�00000100604�13412755316�017126� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Support suEXEC - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Support suEXEC</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/suexec.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/suexec.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/suexec.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/suexec.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/suexec.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>La fonctionnalité <strong>suEXEC</strong> permet
          l'exécution des programmes <strong>CGI</strong> et
          <strong>SSI</strong> sous un utilisateur autre que celui sous
          lequel s'exécute le serveur web qui appelle ces programmes.
          Normalement, lorsqu'un programme CGI ou SSI est lancé, il
          s'exécute sous le même utilisateur que celui du serveur web qui
          l'appelle.</p>
      
          <p>Utilisée de manière appropriée, cette fonctionnalité peut
          réduire considérablement les risques de sécurité encourus
          lorsqu'on autorise les utilisateurs à développer et faire
          s'exécuter des programmes CGI ou SSI de leur cru. Cependant, mal
          configuré, suEXEC peut causer de nombreux problèmes et même créer
          de nouvelles failles dans la sécurité de votre ordinateur. Si
          vous n'êtes pas familier avec la gestion des programmes
          <em>setuid root</em> et les risques de sécurité qu'ils comportent,
          nous vous recommandons vivement de ne pas tenter
          d'utiliser suEXEC.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#before">Avant de commencer</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#model">Modèle de sécurité de suEXEC</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#install">Configurer et installer suEXEC</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#enable">Activation et désactivation
      de suEXEC</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#usage">Utilisation de suEXEC</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#debug">Débogage de suEXEC</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#jabberwock">Avis à la population !
          Avertissements et exemples</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="before" id="before">Avant de commencer</a></h2>
      
          <p>Avant de foncer tête baissée dans la lecture de ce document,
          vous devez tenir compte de certaines hypothèses concernant vous-même
          et l'environnement dans lequel vous allez utiliser suexec.</p>
      
          <p>Premièrement, vous devez utiliser un système d'exploitation
          UNIX ou dérivé, capable d'effectuer des opérations
          <strong>setuid</strong> et <strong>setgid</strong>. Tous les
          exemples de commande sont donnés en conséquence. D'autres
          plates-formes, même si elles supportent suEXEC, peuvent
          avoir une configuration différente.</p>
      
          <p>Deuxièmement, vous devez être familier avec les concepts de base
          relatifs à la sécurité de votre ordinateur et son administration.
          Ceci implique la compréhension des opérations
          <strong>setuid/setgid</strong> et des différents effets qu'elles
          peuvent produire sur votre système et son niveau de sécurité.</p>
      
          <p>Troisièmement, vous devez utiliser une version
          <strong>non modifiée</strong> du code de suEXEC. L'ensemble du
          code de suEXEC a été scruté et testé avec soin par les développeurs
          et de nombreux bêta testeurs. Toutes les précautions ont été prises
          pour s'assurer d'une base sûre de code non seulement simple, mais
          aussi solide. La modification de ce code peut causer des problèmes
          inattendus et de nouveaux risques de sécurité. Il est
          <strong>vivement</strong> recommandé de ne pas modifier le code de
          suEXEC, à moins que vous ne soyez un programmeur spécialiste des
          particularités liées à la sécurité, et souhaitez partager votre
          travail avec l'équipe de développement du serveur HTTP Apache afin
          de pouvoir en discuter.</p>
      
          <p>Quatrièmement et dernièrement, l'équipe de développement du
          serveur HTTP Apache a décidé de ne
          <strong>PAS</strong> inclure suEXEC dans l'installation par défaut
          d'Apache httpd. Pour pouvoir mettre en oeuvre suEXEC, l'administrateur
          doit porter la plus grande attention aux détails. Après avoir bien
          réfléchi aux différents points de la configuration de suEXEC,
          l'administrateur peut l'installer selon les méthodes classiques.
          Les valeurs des paramètres de configuration doivent être
          déterminées et spécifiées avec soin par l'administrateur, afin de
          maintenir la sécurité du système de manière appropriée lors de
          l'utilisation de la fonctionnalité suEXEC. C'est par le biais de
          ce processus minutieux que nous espérons réserver
          l'installation de suEXEC aux administrateurs prudents et
          suffisamment déterminés à vouloir l'utiliser.</p>
      
          <p>Vous êtes encore avec nous ? Oui ? Bien.
          Alors nous pouvons continuer !</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="model" id="model">Modèle de sécurité de suEXEC</a></h2>
      
          <p>Avant d'installer et configurer suEXEC, nous allons tout d'abord
          décrire le modèle de sécurité que vous êtes sur le point
          d'implémenter. Vous devriez ainsi mieux comprendre ce qui se passe
          vraiment à l'intérieur de suEXEC et quelles précautions ont été
          prises pour préserver la sécurité de votre système.</p>
      
          <p><strong>suEXEC</strong> est basé sur un programme "conteneur"
          (wrapper) setuid qui est appelé par le serveur HTTP Apache principal.
          Ce conteneur est appelé quand une requête HTTP concerne
          un programme CGI ou SSI que l'administrateur
          a décidé de faire s'exécuter
          sous un utilisateur autre que celui du serveur principal.
          Lorsqu'il reçoit une telle requête, Apache httpd fournit au conteneur
          suEXEC le nom du programme, ainsi que les identifiants utilisateur
          et groupe sous lesquels le programme doit s'exécuter.</p>
      
          <p>Le conteneur effectue ensuite les vérifications suivantes afin
          de déterminer la réussite ou l'échec du processus -- si une seule
          de ces conditions n'est pas vérifiée, le programme journalise
          l'erreur et se termine en retournant un code d'erreur, sinon il
          continue :</p>
      
          <ol>
            <li>
              <strong>L'utilisateur qui exécute le conteneur est-il un
      	utilisateur valide de ce système ?</strong>
      
              <p class="indent">
                Ceci permet de s'assurer que l'utilisateur qui exécute le
      	  conteneur est vraiment un utilisateur appartenant au système.
              </p>
           </li>
      
           <li>
              <strong>Le conteneur a-t-il été appelé avec un nombre
      	d'arguments correct ?</strong>
      
              <p class="indent">
                Le conteneur ne s'exécutera que si on lui fournit un nombre
      	  d'arguments correct. Le serveur HTTP apache sait quel est le
      	  bon format des arguments. Si le conteneur ne reçoit pas un
      	  nombre d'arguments correct, soit il a été modifié,
      	  soit quelque chose ne va pas dans la portion suEXEC de
      	  votre binaire Apache httpd.
              </p>
            </li>
      
            <li>
              <strong>Cet utilisateur valide est-il autorisé à exécuter le
      	conteneur ?</strong>
      
              <p class="indent">
                Cet utilisateur est-il celui autorisé à exécuter le
      	  conteneur ? Un seul utilisateur (celui d'Apache) est
      	  autorisé à exécuter ce programme.
              </p>
            </li>
      
            <li>
              <strong>Le chemin du programme CGI ou SSI cible est-il
      	non sûr ?</strong>
      
              <p class="indent">
                Le chemin du programme CGI ou SSI cible débute-t-il par un
      	  '/' ou contient-il une référence arrière '..' ? Ceci est
      	  interdit ; le programme CGI ou SSI cible doit se trouver dans
      	  la hiérarchie de la racine des documents de suEXEC (voir
      	  <code>--with-suexec-docroot=<em>DIR</em></code> ci-dessous).
              </p>
            </li>
      
            <li>
              <strong>Le nom utilisateur cible est-il valide ?</strong>
      
              <p class="indent">
                L'utilisateur cible existe-t-il ?
              </p>
            </li>
      
            <li>
              <strong>Le nom du groupe cible est-il valide ?</strong>
      
              <p class="indent">
                Le groupe cible existe-t-il ?
              </p>
            </li>
      
            <li>
              <strong>L'utilisateur cible n'est-il <em>PAS</em>
      	superutilisateur ?</strong>
      
      
              <p class="indent">
                suEXEc ne permet pas à
      	  <code><em>root</em></code> d'exécuter des programmes CGI/SSI.
              </p>
            </li>
      
            <li>
              <strong>Le numéro de l'identifiant de l'utilisateur cible
      	est-il <em>SUPERIEUR</em> au numéro d'identifiant
      	minimum ?</strong>
      
              <p class="indent">
                Le numéro d'identifiant utilisateur minimum est défini à
      	  l'exécution du script configure. Ceci vous permet de définir
      	  le numéro d'identifiant utilisateur le plus bas qui sera
      	  autorisé à éxécuter des programmes CGI/SSI. En particulier,
      	  cela permet d'écarter les comptes système.
              </p>
            </li>
      
            <li>
              <strong>Le groupe cible n'est-il <em>PAS</em> le groupe
      	superutilisateur ?</strong>
      
              <p class="indent">
                Actuellement, suEXEC ne permet pas au groupe
      	  <code><em>root</em></code> d'exécuter des programmes CGI/SSI.
              </p>
            </li>
      
            <li>
              <strong> Le numéro d'identifiant du groupe cible est-il
      	<em>SUPERIEUR</em> au numéro d'identifiant minimum ?</strong>
      
              <p class="indent">
                Le numéro d'identifiant de groupe minimum est spécifié lors
      	  de l'exécution du script configure. Ceci vous permet de
      	  définir l'identifiant de groupe le plus bas possible qui sera
      	  autorisé à exécuter des programmes CGI/SSI, et est
      	  particulièrement utile pour écarter les groupes "système".
              </p>
            </li>
      
            <li>
              <strong>Le conteneur peut-il obtenir avec succès l'identité
      	des utilisateur et groupe cibles ?</strong>
      
              <p class="indent">
                C'est ici que le programme obtient l'identité des utilisateur
      	  et groupe cibles via des appels à setuid et setgid. De même,
      	  la liste des accès groupe est initialisée avec tous les
      	  groupes auxquels l'utilisateur cible appartient.
              </p>
            </li>
      
            <li>
              <strong>Peut-on se positionner dans le répertoire dans dequel
      	sont situés les programmes CGI/SSI ?</strong>
      
              <p class="indent">
                S'il n'existe pas, il ne peut pas contenir de fichier. Et si
      	  l'on ne peut pas s'y positionner, il n'existe probablement
      	  pas.
              </p>
            </li>
      
            <li>
              <strong>Le répertoire est-il dans l'espace web
      	de httpd ?</strong>
      
              <p class="indent">
                Si la requête concerne une portion de la racine du serveur,
      	  le répertoire demandé est-il dans la hiérarchie de la racine
      	  des documents de suEXEC ? Si la requête concerne un
      	 <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code>, le répertoire demandé est-il dans
      	  la hiérarchie du répertoire défini comme le répertoire
      	  utilisateur de suEXEC (voir les
      	  <a href="#install">options de configuration de suEXEC</a>) ?
              </p>
            </li>
      
            <li>
              <strong>L'écriture dans le répertoire est-elle interdite pour
      	un utilisateur autre que le propriétaire </strong>
      
              <p class="indent">
                Le répertoire ne doit pas être ouvert aux autres
      	  utilisateurs ; seul l'utilisateur propriétaire doit pouvoir
      	  modifier le contenu du répertoire.
              </p>
            </li>
      
            <li>
              <strong>Le programme CGI/SSI cible existe-t-il ?</strong>
      
              <p class="indent">
                S'il n'existe pas, il ne peut pas être exécuté.
              </p>
            </li>
      
            <li>
              <strong>Les utilisateurs autres que le propriétaire n'ont-ils
      	<em>PAS</em> de droits en écriture sur le programme
      	CGI/SSI ?</strong>
      
              <p class="indent">
                Les utilisateurs autres que le propriétaire ne doivent pas
      	  pouvoir modifier le programme CGI/SSI.
              </p>
            </li>
      
            <li>
              <strong>Le programme CGI/SSI n'est-il <em>PAS</em> setuid ou
      	setgid ?</strong>
      
              <p class="indent">
                Les programmes cibles ne doivent pas pouvoir modifier à
      	  nouveau les identifiants utilisateur/groupe.
              </p>
            </li>
      
            <li>
              <strong>Le couple utilisateur/groupe cible est-il le même que
      	celui du programme ?</strong>
      
              <p class="indent">
                L'utilisateur est-il le propriétaire du fichier ?
              </p>
            </li>
      
            <li>
              <strong>Peut-on nettoyer avec succès l'environnement des
      	processus afin de garantir la sûreté des opérations ?</strong>
      
              <p class="indent">
                suExec nettoie l'environnement des processus en établissant
      	  un chemin d'exécution sûr (défini lors de la configuration),
      	  et en ne passant que les variables dont les noms font partie
      	  de la liste de l'environnement sûr (créée de même lors de la
      	  configuration).
              </p>
            </li>
      
            <li>
              <strong>Le conteneur peut-il avec succès se substituer au
      	programme CGI/SSI cible et s'exécuter ?</strong>
      
              <p class="indent">
                C'est là où l'exécution de suEXEC s'arrête et où commence
      	  celle du programme CGI/ssi cible.
              </p>
            </li>
          </ol>
      
          <p>Ce sont les opérations standards effectuées par le modèle de
          sécurité du conteneur suEXEC. Il peut paraître strict et est
          susceptible d'imposer de nouvelles limitations et orientations
          dans la conception des programmes CGI/SSI, mais il a été développé
          avec le plus grand soin, étape par étape, en se focalisant sur
          la sécurité.</p>
      
          <p>Pour plus d'informations sur la mesure dans laquelle ce modèle
          de sécurité peut limiter vos possibilités au regard de la
          configuration du serveur, ainsi que les risques de sécurité qui
          peuvent être évités grâce à une configuration appropriée de suEXEC,
          se référer à la section <a href="#jabberwock">"Avis à la population !"</a> de ce document.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="install" id="install">Configurer et installer suEXEC</a></h2>
      
          <p>C'est ici que nous entrons dans le vif du sujet.</p>
      
          <p><strong>Options de configuration de suEXEC</strong><br />
          </p>
      
          <dl>
            <dt><code>--enable-suexec</code></dt>
      
            <dd>Cette option active la fonctionnalité suEXEC qui n'est
            jamais installée ou activée par défaut. Au moins une option
            <code>--with-suexec-xxxxx</code> doit accompagner l'option
            <code>--enable-suexec</code> pour qu'APACI (l'utilitaire de
            configuration de la compilation d'Apache) accepte votre demande
            d'utilisation de la fonctionnalité suEXEC.</dd>
      
            <dt><code>--with-suexec-bin=<em>PATH</em></code></dt>
      
            <dd>Le chemin du binaire <code>suexec</code> doit être codé en
            dur dans le serveur pour des raisons de sécurité. Cette option
            vous permet de modifier le chemin par défaut.
            <em>Par exemple</em>
            <code>--with-suexec-bin=/usr/sbin/suexec</code></dd>
      
            <dt><code>--with-suexec-caller=<em>UID</em></code></dt>
      
            <dd>L'<a href="mod/mpm_common.html#user">utilisateur</a> sous
            lequel httpd s'exécute habituellement. C'est le seul utilisateur
            autorisé à exécuter le wrapper suEXEC.</dd>
      
            <dt><code>--with-suexec-userdir=<em>DIR</em></code></dt>
      
            <dd>Cette option définit le sous-répertoire de la hiérarchie des
            répertoires utilisateurs dans lequel l'utilisation
            de suEXEC sera autorisée. Tous les exécutables situés dans ce
            répertoire seront exécutables par suEXEC sous l'utilisateur
            cible ; ces programmes doivent donc être sûrs. Si vous utilisez
            une directive <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code>
            "simple" (c'est à dire ne contenant pas de
            "*"), l'option --with-suexec-userdir
            devra contenir la même valeur. SuEXEC ne fonctionnera pas
            correctement si la directive <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code> contient une valeur
            différente du répertoire home de l'utilisateur tel qu'il est
            défini dans le fichier <code>passwd</code>. la valeur par défaut
            est "<code>public_html</code>".<br />
            Si vous avez plusieurs hôtes virtuels avec une directive
            <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code> différente
            pour chacun d'entre eux, vous devrez faire en sorte que chaque
            UserDir possède un répertoire parent commun ; donnez alors à
            l'option --with-suexec-userdir le nom
            de ce répertoire commun. <strong>Si tout ceci n'est pas défini
            correctement, les requêtes CGI "~userdir" ne fonctionneront
            pas !</strong></dd>
      
            <dt><code>--with-suexec-docroot=<em>DIR</em></code></dt>
      
            <dd>Cette option fonctionne comme la directive DocumentRoot pour
            httpd. Il s'agit de la seule hiérarchie (en dehors des directives
            <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code>) dans laquelle la fonctionnalité suEXEC
            pourra être utilisée. La valeur par défaut est la valeur de
            <code>--datadir</code> accompagnée du suffixe
            "<code>/htdocs</code>" ;
            <em>Par exemple</em>, si vous exécutez configure avec
            "<code>--datadir=/home/apache</code>", la valeur
            "<code>/home/apache/htdocs</code>" sera utilisée par défaut comme
            racine des documents pour le conteneur suEXEC.</dd>
      
            <dt><code>--with-suexec-uidmin=<em>UID</em></code></dt>
      
            <dd>Cette option définit l'identifiant utilisateur le plus bas
            avec lequel un utilisateur pourra être la cible de
            suEXEC. 500 ou 100 sont des valeurs courantes sur la plupart des
            systèmes. la valeur par défaut est 100.</dd>
      
            <dt><code>--with-suexec-gidmin=<em>GID</em></code></dt>
      
            <dd>Cette option définit l'identifiant de groupe le plus bas
            avec lequel un utilisateur pourra être la cible de
            suEXEC. 100 est une valeur courante sur la plupart des
            systèmes et est par conséquent la valeur par défaut.</dd>
      
            <dt><code>--with-suexec-logfile=<em>FILE</em></code></dt>
      
            <dd>Cette option permet de définir le fichier dans lequel
            toutes les transactions et erreurs de suEXEC seront journalisées
            (à des fins d'analyse ou de débogage). Par défaut, le fichier
            journal se nomme "<code>suexec_log</code>" et se trouve dans votre
            répertoire standard des fichiers journaux défini par
            <code>--logfiledir</code></dd>
      
            <dt><code>--with-suexec-safepath=<em>PATH</em></code></dt>
      
            <dd>Cette option permet de définir une variable d'environnement
            PATH sûre à passer aux exécutables CGI. La valeur par défaut
            est "<code>/usr/local/bin:/usr/bin:/bin</code>".</dd>
          </dl>
      
          <h3>Compilation et installation du conteneur suEXEC</h3>
            
      
          <p>Si vous avez activé la fonctionnalité suEXEC à l'aide de
           l'option <code>--enable-suexec</code>, le binaire
           <code>suexec</code> sera automatiquement construit (en même temps
           que httpd) lorsque vous exécuterez la commande
           <code>make</code>.</p>
      
           <p>Lorsque tous les composants auront été construits, vous pourrez
           exécuter la commande <code>make install</code> afin de les
           installer. Le binaire <code>suexec</code> sera installé dans le
           répertoire défini à l'aide de l'option <code>--sbindir</code>. La
           localisation par défaut est "/usr/local/apache2/bin/suexec".</p>
           <p>Veuillez noter que vous aurez besoin des
           <strong><em>privilèges root</em></strong> pour passer l'étape de
           l'installation. Pour que le conteneur puisse changer
           l'identifiant utilisateur, il doit avoir comme propriétaire
           <code><em>root</em></code>, et les droits du fichier doivent
           inclure le bit d'exécution setuserid.</p>
         
      
         <h3>&gt;Mise en place de permissions pour
          paranoïaque</h3>
      	
          <p>Bien que le conteneur suEXEC vérifie que l'utilisateur qui
          l'appelle correspond bien à l'utilisateur spécifié à l'aide de
          l'option <code>--with-suexec-caller</code> du programme
          <code class="program"><a href="./programs/configure.html">configure</a></code>, il subsiste toujours le risque qu'un
          appel système ou une bibliothèque fasse appel à suEXEC avant que
          cette vérification ne soit exploitable sur votre système. Pour
          tenir compte de ceci, et parce que c'est en général la meilleure
          pratique, vous devez utiliser les permissions du système de
          fichiers afin de vous assurer que seul le groupe sous lequel
          s'exécute httpd puisse faire appel à suEXEC.</p>
      
          <p>Si, par exemple, votre serveur web est configuré pour
          s'exécuter en tant que :</p>
      
      <pre class="prettyprint lang-config">User www
      Group webgroup</pre>
      
      
          <p>et <code class="program"><a href="./programs/suexec.html">suexec</a></code> se trouve à
          "/usr/local/apache2/bin/suexec", vous devez exécuter les
          commandes</p>
      
      <div class="example"><p><code>
          chgrp webgroup /usr/local/apache2/bin/suexec<br />
          chmod 4750 /usr/local/apache2/bin/suexec<br />
      </code></p></div>
      
          <p>Ceci permet de s'assurer que seul le groupe sous lequel httpd
          s'exécute (ici webgroup) puisse faire appel au conteneur
          suEXEC.</p>
        
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="enable" id="enable">Activation et désactivation
      de suEXEC</a></h2>
      
          <p>Au démarrage, httpd vérifie la présence du fichier
          <code class="program"><a href="./programs/suexec.html">suexec</a></code> dans le répertoire défini par
          l'option <code>--sbindir</code> du script configure (le
          répertoire par défaut est "/usr/local/apache/sbin/suexec"). Si
          httpd trouve un conteneur suEXEC correctement configuré, il
          enregistrera le message suivant dans le journal des erreurs :</p>
      
      <div class="example"><p><code>
          [notice] suEXEC mechanism enabled (wrapper: <var>/path/to/suexec</var>)
      </code></p></div>
      
          <p>Si ce message n'est pas généré au démarrage du serveur, ce
          dernier ne trouve probablement pas le programme conteneur à
          l'endroit où il est sensé être, ou l'exécutable suexec n'est pas
          installé en <em>setuid root</em>.</p>
      
           <p>Si le serveur HTTP Apache est déjà en cours d'exécution, et si
           vous activez le mécanisme suEXEC pour la première fois, vous
           devez arrêter et redémarrer httpd. Un redémarrage
           à l'aide d'un simple signal HUP ou USR1 suffira. </p>
           <p>Pour désactiver suEXEC, vous devez supprimer le fichier
           <code class="program"><a href="./programs/suexec.html">suexec</a></code>, puis arrêter et redémarrer
           httpd.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="usage" id="usage">Utilisation de suEXEC</a></h2>
      
          <p>Les requêtes pour des programmes CGI ne feront appel au
          conteneur suEXEC que si elles concernent un hôte virtuel
          contenant une directive <code class="directive"><a href="./mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code>, ou si elles sont
          traitées par <code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code>.</p>
      
          <p><strong>Hôtes virtuels :</strong><br /> Une des méthodes
          d'utilisation du conteneur suEXEC consiste à insérer une
          directive <code class="directive"><a href="./mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code> dans une section
          <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code>. En définissant
          des valeurs différentes de celles du serveur principal, toutes les
          requêtes pour des ressources CGI seront exécutées sous
          les <em>User</em> et <em>Group</em> définis pour cette section
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>. Si cette
          directive est absente de la section <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>, l'utilisateur du
          serveur principal sera pris par défaut</p>
      
          <p><strong>Répertoires des utilisateurs :</strong><br /> Avec
          cette méthode, les
          requêtes traitées par <code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code> appelleront le
          conteneur suEXEC pour exécuter le programme CGI sous l'identifiant
          utilisateur du répertoire utilisateur concerné. Seuls prérequis
          pour pouvoir accéder à cette fonctionnalité : l'exécution des CGI
          doit être activée pour l'utilisateur concerné, et le script doit
          passer avec succès le test des <a href="#model">vérifications de
          sécurité</a> décrit plus haut. Voir aussi l'
          <a href="#install">option de compilation</a>
          <code>--with-suexec-userdir</code>.</p> </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="debug" id="debug">Débogage de suEXEC</a></h2>
      
          <p>Le conteneur suEXEC va écrire ses informations de journalisation
          dans le fichier défini par l'option de compilation
          <code>--with-suexec-logfile</code> comme indiqué plus haut. Si vous
          pensez avoir configuré et installé correctement le conteneur,
          consultez ce journal, ainsi que le journal des erreurs du serveur
          afin de déterminer l'endroit où vous avez fait fausse route.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="jabberwock" id="jabberwock">Avis à la population !
          Avertissements et exemples</a></h2>
      
          <p><strong>NOTE !</strong> Cette section est peut-être incomplète.
          Pour en consulter la dernière révision, voir la version de la <a href="http://httpd.apache.org/docs/2.4/suexec.html">Documentation en ligne</a>.</p>
      
          <p>Quelques points importants du conteneur peuvent
          imposer des contraintes du point de vue de la configuration du
          serveur. Veuillez en prendre connaissance avant de soumettre un
          rapport de bogue à propos de suEXEC.</p>
      
          <ul>
            <li><strong>Points importants de suEXEC</strong></li>
      
            <li>
              Limitations concernant la hiérarchie.
      
              <p class="indent">
                Pour des raisons de sécurité et d'efficacité, toutes les
      	  requêtes suEXEC ne doivent concerner que des ressources
      	  situées dans la racine des documents définie pour les
      	  requêtes concernant un hôte virtuel, ou des ressources
      	  situées dans la racine des documents définies pour les
      	  requêtes concernant un répertoire utilisateur. Par exemple,
      	  si vous avez configuré quatre hôtes virtuels, vous devrez
      	  définir la structure des racines de documents de vos hôtes
      	  virtuels en dehors d'une hiérarchie de documents principale
      	  de httpd, afin de tirer parti de suEXEC dans le contexte des
      	  hôtes virtuels (Exemple à venir).
              </p>
            </li>
      
            <li>
              La variable d'environnement PATH de suEXEC
      
              <p class="indent">
                Modifier cette variable peut s'avérer dangereux. Assurez-vous
      	  que tout chemin que vous ajoutez à cette variable est un
      	  répertoire <strong>de confiance</strong>. Vous n'avez
      	  probablement pas l'intention d'ouvrir votre serveur de façon
      	  à ce que l'on puisse y exécuter un cheval de Troie.
              </p>
            </li>
      
            <li>
              Modification de suEXEC
      
              <p class="indent">
                Encore une fois, ceci peut vous causer de
      	  <strong>graves ennuis</strong> si vous vous y essayez sans
      	  savoir ce que vous faites. Evitez de vous y risquer dans la
      	  mesure du possible.
              </p>
            </li>
          </ul>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/suexec.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/suexec.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/suexec.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/suexec.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/suexec.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/suexec.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/bind.html.en���������������������������������������������������������������0000644�0000000�0000050�00000036312�13412755316�015660� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Binding to Addresses and Ports - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Binding to Addresses and Ports</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./de/bind.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/bind.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/bind.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/bind.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/bind.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/bind.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Configuring Apache HTTP Server to listen on specific addresses and ports.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#overview">Overview</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#reload">Changing Listen configuration on restart</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#ipv6">Special IPv6 Considerations</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#protocol">Specifying the protocol with Listen</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#virtualhost">How This Works With Virtual Hosts</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="vhosts/">Virtual Hosts</a></li><li><a href="dns-caveats.html">DNS Issues</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">Overview</a></h2>
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/core.html">core</a></code></li><li><code class="module"><a href="./mod/mpm_common.html">mpm_common</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code></li></ul></td></tr></table>
      
      
          <p>When httpd starts, it binds to some port and address on
          the local machine and waits for incoming requests. By default,
          it listens to all addresses on the machine. However, it may need to
          be told to listen on specific ports, or only on selected
          addresses, or a combination of both. This is often combined with the
          <a href="vhosts/">Virtual Host</a> feature, which determines how
          <code>httpd</code> responds to different IP addresses, hostnames and
          ports.</p>
      
          <p>The <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
          directive tells the server to accept
          incoming requests only on the specified port(s) or
          address-and-port combinations. If only a port number is
          specified in the <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
          directive, the server listens to the given port on all interfaces.
          If an IP address is given as well as a port, the server will listen
          on the given port and interface. Multiple <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> directives may be used to
          specify a number of addresses and ports to listen on. The
          server will respond to requests from any of the listed
          addresses and ports.</p>
      
          <p>For example, to make the server accept connections on both
          port 80 and port 8000, on all interfaces, use:</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 80
      Listen 8000</pre>
      </div>
      
          <p>To make the server accept connections on port 80 for one interface,
             and port 8000 on another, use</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 192.0.2.1:80
      Listen 192.0.2.5:8000</pre>
      </div>
      
          <p>IPv6 addresses must be enclosed in square brackets, as in the
          following example:</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen [2001:db8::a00:20ff:fea7:ccea]:80</pre>
      </div>
      
          <div class="warning"><p>Overlapping <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> directives will result in a
          fatal error which will prevent the server from starting up.</p>
      
          <div class="example"><p><code>
            (48)Address already in use: make_sock: could not bind to address [::]:80
          </code></p></div>
      
          <p>See <a href="http://wiki.apache.org/httpd/CouldNotBindToAddress">the
          discussion in the wiki</a> for further troubleshooting tips.</p>
      
      </div>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="reload" id="reload">Changing Listen configuration on restart</a></h2>
          
      
          <p>When httpd is restarted, special consideration must be made for
          changes to <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> directives.  During a restart, httpd keeps ports
          bound (as in the original configuration) to avoid generating
          "Connection refused" errors for any new attempts to connect to the
          server. If changes are made to the set of <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> directives used
          which conflict with the old configuration, configuration will fail
          and the server will terminate.</p>
      
          <p>For example, changing from configuration:</p>
          
          <div class="example"><pre class="prettyprint lang-config">Listen 127.0.0.1:80</pre>
      </div>
      
          <p>to the following may fail, because binding to port 80 across
          all addresses conflicts with binding to port 80 on just
          127.0.0.1.</p>
          
          <div class="example"><pre class="prettyprint lang-config">Listen 80</pre>
      </div>
      
          <p>To have such configuration changes take effect, it is necessary
          to stop and then start the server.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ipv6" id="ipv6">Special IPv6 Considerations</a></h2>
          
      
          <p>A growing number of platforms implement IPv6, and
          <a class="glossarylink" href="./glossary.html#apr" title="see glossary">APR</a> supports IPv6 on most of these platforms,
          allowing httpd to allocate IPv6 sockets, and to handle requests sent
          over IPv6.</p>
      
          <p>One complicating factor for httpd administrators is whether or
          not an IPv6 socket can handle both IPv4 connections and IPv6
          connections. Handling IPv4 connections with an IPv6 socket uses
          IPv4-mapped IPv6 addresses, which are allowed by default on most
          platforms, but are disallowed by default on FreeBSD, NetBSD, and
          OpenBSD, in order to match the system-wide policy on those
          platforms. On systems where it is disallowed by default, a
          special <code class="program"><a href="./programs/configure.html">configure</a></code> parameter can change this behavior
          for httpd.</p>
      
          <p>On the other hand, on some platforms, such as Linux and Tru64, the
          <strong>only</strong> way to handle both IPv6 and IPv4 is to use
          mapped addresses. If you want <code>httpd</code> to handle IPv4 and IPv6 connections
          with a minimum of sockets, which requires using IPv4-mapped IPv6
          addresses, specify the <code>--enable-v4-mapped</code> <code class="program"><a href="./programs/configure.html">configure</a></code> option.</p>
      
          <p><code>--enable-v4-mapped</code> is the default on all platforms except
          FreeBSD, NetBSD, and OpenBSD, so this is probably how your httpd was
          built.</p>
      
          <p>If you want httpd to handle IPv4 connections only, regardless of
          what your platform and APR will support, specify an IPv4 address on all
          <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> directives, as in the
          following examples:</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 0.0.0.0:80
      Listen 192.0.2.1:80</pre>
      </div>
      
          <p>If your platform supports it and you want httpd to handle IPv4 and
          IPv6 connections on separate sockets (i.e., to disable IPv4-mapped
          addresses), specify the <code>--disable-v4-mapped</code> <code class="program"><a href="./programs/configure.html">configure</a></code> option. <code>--disable-v4-mapped</code> is the
          default on FreeBSD, NetBSD, and OpenBSD.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="protocol" id="protocol">Specifying the protocol with Listen</a></h2>
          
          <p>The optional second <var>protocol</var> argument of
             <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
             is not required for most
             configurations. If not specified, <code>https</code> is the default for
             port 443 and <code>http</code> the default for all other ports.  The
             protocol is used to determine which module should handle a request, and
             to apply protocol specific optimizations with the
             <code class="directive"><a href="./mod/core.html#acceptfilter">AcceptFilter</a></code> directive.</p>
      
          <p>You only need to set the protocol if you are running on non-standard
             ports.  For example, running an <code>https</code> site on port 8443:</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 192.170.2.1:8443 https</pre>
      </div>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="virtualhost" id="virtualhost">How This Works With Virtual Hosts</a></h2>
          
      
          <p> The <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> directive does not implement
          Virtual Hosts - it only tells the
          main server what addresses and ports to listen on. If no
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          directives are used, the server will behave
          in the same way for all accepted requests. However,
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          can be used to specify a different behavior
          for one or more of the addresses or ports. To implement a
          VirtualHost, the server must first be told to listen to the
          address and port to be used. Then a
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> section
          should be created for the specified address and port to set the
          behavior of this virtual host. Note that if the
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          is set for an address and port that the
          server is not listening to, it cannot be accessed.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./de/bind.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/bind.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/bind.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/bind.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/bind.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/bind.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/bind.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/dso.html�������������������������������������������������������������������0000644�0000000�0000050�00000000706�13362070302�015113� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: dso.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: dso.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: dso.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: dso.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: dso.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ����������������������������������������������������������httpd-2.4.41/docs/manual/install.html.es������������������������������������������������������������0000644�0000000�0000050�00000070246�13412755316�016423� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Compilar e Instalar - Servidor HTTP Apache Versión 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="./glossary.html">Glosario</a> | <a href="./sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="./">Versión 2.4</a></div><div id="page-content"><div id="preamble"><h1>Compilar e Instalar</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="./de/install.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/install.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/install.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/install.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/install.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/install.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/install.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">Esta traducción podría estar
                  obsoleta. Consulte la versión en inglés de la
                  documentación para comprobar si se han producido cambios
                  recientemente.</div>
      
      
          <p>Éste documento hace referencia a la compilación y la instalación del Apache 
          HTTP Server sólo para los sistemas Unix y  tipo Unix. Para la compilación e instalación en Windows  ir a  <a href="platform/windows.html">Usando Apache HTTP Server con Microsoft
          Windows</a> y <a href="platform/win_compiling.html">Compilando Apache para Microsoft Windows</a>.
          Para otras plataformas visite la documentación sobre <a href="platform/">plataformas</a>.</p>
      
          <p>Apache httpd usa <code>libtool</code> y <code>autoconf</code>
          para crear un entorno de compilación que se parece a muchos otros proyectos de código abierto</p>
      
          <p>Si está actualizando desde una versión menor a la siguiente (por
          ejemplo, 2.4.8 a 2.4.9), pasa a la sección de  <a href="#upgrading">actualización</a>.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#overview">Descripción general para los impacientes</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#requirements">Requisitos</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#download">Descargar</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#extract">Descomprimir</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#configure">Configuración de la estructura de
      directorios</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#compile">Build</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#install">Instalar</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#customize">Personalizar APACHE</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#test">Comprobar que la instalación
      funciona</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#upgrading">Actualizar una instalación previa</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#thirdp">Paquetes de terceros</a></li>
      </ul><h3>Consulte también</h3><ul class="seealso"><li><a href="programs/configure.html">Configuración del árbol de las fuentes de código</a></li><li><a href="invoking.html">Arrancando Apache httpd</a></li><li><a href="stopping.html">Parada y Reinicio</a></li><li><a href="#comments_section">Comentarios</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">Descripción general para los impacientes</a></h2>
      
          <table>
            
            <tr>
              <td><a href="#download">Descarga</a></td>
      
              <td>Descarga la última versión 
                desde <a href="http://httpd.apache.org/download.cgi#apache24">
                http://httpd.apache.org/download.cgi</a>
              </td>
            </tr>
      
            <tr>
              <td><a href="#extract">Extraer</a></td>
      
              <td><code>$ gzip -d httpd-<em>NN</em>.tar.gz<br />
               $ tar xvf httpd-<em>NN</em>.tar<br />
               $ cd httpd-<em>NN</em></code></td>
            </tr>
      
            <tr>
              <td><a href="#configure">Configura</a></td>
      
              <td><code>$ ./configure --prefix=<em>PREFIX</em></code>
              </td>
            </tr>
      
            <tr>
              <td><a href="#compile">Compila</a></td>
      
              <td><code>$ make</code> </td>
            </tr>
      
            <tr>
              <td><a href="#install">Instala</a></td>
      
              <td><code>$ make install</code> </td>
            </tr>
      
            <tr>
              <td><a href="#customize">Personalizalo</a></td>
      
              <td><code>$ vi <em>PREFIX</em>/conf/httpd.conf</code> </td>
            </tr>
      
            <tr>
              <td><a href="#test">Prueba</a></td>
      
              <td><code>$ <em>PREFIX</em>/bin/apachectl -k start</code>
              </td>
            </tr>
          </table>
      
          <p><em>NN</em> hay que reemplazarlo por el número de la versión menor, y <em>PREFIX</em> hay que reemplazarlo por la ruta en la que se va a instalar Apache. Si no especifica ningún valor en <em>PREFIX</em>, el valor por defecto que se toma es /usr/local/apache2.</p>
      
          <p>Cada parte del proceso de configuración e instalación se describe detalladamente más abajo, empezando por los requisitos para compilar e instalar Apache.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="requirements" id="requirements">Requisitos</a></h2>
      
          <p>Estos son los requisitos necesarios para compilar Apache:</p>
      
          <dl>
            <dt>APR y APR-Util</dt>
            <dd>Asegúrate de que tiene instalado ya en su sistema APR y APR-Util. Si no es así, o no quiere utilizar la versión que le proporciona el sistema, puede descargar la última versión de ambos APR y APR-Util de
            <a href="http://apr.apache.org/">Apache APR</a>, descomprimelo en
             <code>/httpd_source_tree_root/srclib/apr</code> y /httpd_source_tree_root<code>/srclib/apr-util</code>
            (cerciórate de que no existen directorios con números de versiones; por ejemplo,
            la distribución de APR debe estar en /httpd_source_tree_root/srclib/apr/) y usa el comando
            <code>./configure</code> <code>--con-las-opciones-incluidas-en-apr</code>.
            En algunas plataformas deberás instalar la parte correspondiente a los paquetes 
            <code>-dev</code> para permitir que httpd se genere contra la instalación de la copia de APR y APR-Util.</dd>
      
            <dt>Librería Compatible de expresiones regulares de Perl (PCRE)</dt>
            <dd>Esta librería es requerida, pero ya no incluido con httpd.
            Descarga el código fuente de <a href="http://www.pcre.org/">http://www.pcre.org</a>,
            o instala un Port o un  Paquete. Si la distrubución de su sistema no puede encontrar el escript pcre-config instalado por PCRE, seleccione utilizando el parámetro<code>--with-pcre</code>.En algunas plataformas,
            deberás instalar la correspondiente versión <code>-dev</code>
            del paquete para permitir a httpd que se genere contra la instalación de la copia del PCRE que se ha instalado.</dd>
      
            <dt>Espacio en disco</dt> 
            <dd>Compruebe que tiene disponibles al
            menos 50 MB de espacio libre en disco. Después de la
            instalación, Apache ocupa aproximadamente 10 MB. No
            obstante, la necesidad real de espacio en disco varía
            considerablemente en función de las opciones de
            configuración que elija y de los módulos externos que
            use, y como no del tamaño de la página web</dd>
      
            <dt>Systema de compilación ANSI-C</dt>
            <dd>Compruebe que tiene instalado un compilador de ANSI-C. Se recomienda el <a href="http://gcc.gnu.org/">Compilador GNU C
            (GCC)</a> de la <a href="http://www.gnu.org/">Free Software
            Foundation (FSF)</a> es el recomendado. Si no tiene instalado el GCC, entonces compruebe que
            el compilador que va a utilizar cumple con los estándares
            ANSI. Además, su <code>PATH</code> debe contener la
            ubicación donde de encuentran las herramientas básicas
            para compilar tales como <code>make</code>.</dd>
      
            <dt>Ajuste exacto del reloj del sistema</dt> 
            <dd>Los elementos
            del protocolo HTTP están expresados según la hora del
            día. Por eso, si quiere puede investigar como instalar alguna
            utilidad para sincronizar la hora de su sistema. Para esto,
            normalmente, se usan los programas <code>ntpdate</code> o
            <code>xntpd</code>, que están basados en el protocolo
            "Network Time Protocol" (NTP). Consulte el<a href="http://www.ntp.org">sitio web de NTP
            </a> para obtener más información sobre NTP y los
            servidores públicos de tiempo.</dd>
      
            <dt><a href="http://www.perl.org/">Perl 5</a>[OPCIONAL]</dt>
            <dd>Para algunos de los scripts de soporte como<code class="program"><a href="./programs/apxs.html">apxs</a></code> o <code class="program"><a href="./programs/dbmmanage.html">dbmmanage</a></code> (que están
            escritos en Perl) es necesario el intérprete de Perl 5 (las
            versiones 5.003 o posteriores son suficientes). Si el escript
            <code class="program"><a href="./programs/configure.html">configure</a></code> no se encuentra, no podrá usar los
      	  escripts correspondientes que lo necesiten. Pero por supuesto
      	  podrás compilar y usar Apache httpd.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="download" id="download">Descargar</a></h2>
      
          <p>Puede descargar Apache desde <a href="http://httpd.apache.org/download.cgi">la sección de
          descargas del sitio web de Apache</a> el cual tiene varios
          mirrors. Para la mayoría de los usuarios de Apache que tienen
          sistemas tipo Unix, se recomienda que se descarguen y compilen el
          código fuente. El proceso de compilación (descrito
          más abajo) es fácil, y permite adaptar el servidor
          Apache a sus necesidades. Además, las versiones de
          disponibles en archivos binarios no están siempre actualizadas
          con las últimas modificaciones en el código fuente. Si se
          descarga un binario, siga las instrucciones contenidas en el
          archivo <code>INSTALL.bindist</code> incluido en la
          distribución</p>
      
          <p>Después de la descarga, es importante que verifique que el
          archivo descargado del servidor HTTP Apache está completo y
          sin modificaciones.  Esto puede hacerlo comparando el archivo
          descargado (.tgz) con su firma PGP. Instrucciones detalladas de
          cómo hacer esto están disponibles en <a href="http://httpd.apache.org/download.cgi#verify"> la
          sección de descargas</a> junto con un ejemplo de cómo <a href="http://httpd.apache.org/dev/verification.html">usar
          PGP</a>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="extract" id="extract">Descomprimir</a></h2>
      
          <p>Extraer el código fuente del archivo .tgz del Servidor Apache HTTP que acabada 
            de descargar es muy fácil. Ejecute los siguientes comandos:</p>
      
      <div class="example"><p><code>
      $ gzip -d httpd-<em>NN</em>.tar.gz<br />
      $ tar xvf httpd-<em>NN</em>.tar
      </code></p></div>
      
          <p>Estos comandos crearán un nuevo directorio dentro del
          directorio en el que se encuentra y que contendrá el
          código fuente de distribución. Debe cambiarse a ese
          directorio con <code>cd</code> para proceder a compilar el
          servidor Apache.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configure" id="configure">Configuración de la estructura de
      directorios</a></h2>
      
          <p>El siguiente paso es configurar la estructura de directorios
          para su plataforma y sus necesidades personales. Esto se hace
          usando el script <code class="program"><a href="./programs/configure.html">configure</a></code> incluido en el directorio
          raíz de la distribución que acaba de descargar. (Los
          desarrolladores que se descarguen la versión del CVS de la
          estructura de directorios necesitarán tener instalados
          <code>autoconf</code> y <code>libtool</code>, y necesitarán
          ejecutar <code>buildconf</code> antes de continuar con los
          siguientes pasos. Esto no es preciso para las versiones
          oficiales.)</p>
      
          <p>Para configurar la estructura de directorios a partir del
          código fuente usando las opciones por defecto, solo tiene que
          ejecutar <code>./configure</code>.Para cambiar las opciones por
          defecto, <code class="program"><a href="./programs/configure.html">configure</a></code> acepta una serie de variables y
          opciones por la línea de comandos.</p>
      
          <p>La opción más importante es <code>--prefix</code>
          que es el directorio en el que Apache va a ser instalado después,
          porque Apache tiene que ser configurado para el directorio que se
          especifique para que funcione correctamente.  Es posible lograr un
          mayor control del lugar donde se van a instalar los ficheros de
          Apache con otras <a href="programs/configure.html#installationdirectories">opciones de
          configuración</a>.</p>
      
          <p>Llegados a este punto, puede especificar que <a href="programs/configure.html#optionalfeatures">características
          o funcionalidades</a> quiere incluir en Apache activando o
          desactivando <a href="mod/">modules</a>.Apache vine con una amplia
          selección de módulos incluidos por defecto. Que serán compilados como .
          <a href="dso.html">Objetos Compartidos (DSOs)</a> Que pueden ser activados
          o desactivados en tiempo de ejecución.
          También puede elegir por compilar módulos de forma estática usando las opciones
          <code>--enable-<var>module</var>=static</code>.</p>
      
      
      
          <p>Se pueden activar otros módulos usando la opción 
          <code>--enable-<var>module</var></code>, where
          <var>module</var> es el nombre del módulo sin el
          <code>mod_</code> y convirtiendo los guiones bajos que tenga en
          guiones normales.  Del mismo modo, puede desactivar los módulos con la
          opción <code>--disable-<var>module</var></code>. Tenga cuidado al utilizar esta opción, ya que
          <code class="program"><a href="./programs/configure.html">configure</a></code> no le avisará si el módulo que especifica no existe;
          simplemente ignorará esa opción.</p>
      
          <p>Además, a veces es necesario pasarle al script
          <code class="program"><a href="./programs/configure.html">configure</a></code> información adicional sobre donde esta
          su compilador, librerías o ficheros de cabecera.  Esto se puede
          hacer, tanto pasando variables de entorno, como pasandole opciones
          a <code class="program"><a href="./programs/configure.html">configure</a></code>.  Para más información, consulte el manual de
          <code class="program"><a href="./programs/configure.html">configure</a></code>. O use <code class="program"><a href="./programs/configure.html">configure</a></code> con la 
          opción <code>--help</code>.</p>
      
           <p>Para que se haga una idea sobre las posibilidades que tiene,
          aquí tiene un ejemplo típico que configura Apache para
          la ruta <code>/sw/pkg/apache</code> con un compilador y unos flags
          determinados, y además, con dos módulos adicionales
          <code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code> y <code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code> para
          cargarlos después a través del mecanismo DSO:</p>
      
      <div class="example"><p><code>
            $ CC="pgcc" CFLAGS="-O2" \<br />
             ./configure --prefix=/sw/pkg/apache \<br />
             --enable-ldap=shared \<br />
             --enable-lua=shared
      </code></p></div>
      
          <p>Cuando se ejecuta <code class="program"><a href="./programs/configure.html">configure</a></code> se comprueban que
          características o funcionalidades están disponibles en
          su sistema y se crean los Makefiles que serán usados a continuación
          para compilar el servidor. Esto tardará algunos minutos.</p>
      
          <p>Los detalles de todas las opciones de <code class="program"><a href="./programs/configure.html">configure</a></code> están disponibles
          en el manual de <code class="program"><a href="./programs/configure.html">configure</a></code> .</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="compile" id="compile">Build</a></h2>
      
          <p>Ahora puede compilar las diferentes partes que forman Apache
          simplemente ejecutando el siguiente comando:</p>
      
      <div class="example"><p><code>$ make</code></p></div>
      
          <p>Por favor sea paciente llegado a este punto, ya que una configuración básica lleva unos minutos
            para su compilación, y el tiempo puede variar mucho dependiendo de su hardware 
            y del número de módulos que haya habilitado para la compilación.(Se recomienda añadir al make el
            parámetro -j3 como mínimo para que vaya más rápido)</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="install" id="install">Instalar</a></h2>
      
          <p>Ahora es el momento de instalar el paquete en el diretorio
          elegido en <em>PREFIX</em> (consulte más arriba la opción
          <code>--prefix</code>) ejecutando:</p>
      
      <div class="example"><p><code>$ make install</code></p></div>
      
          <p>Este paso requiere de forma típica privilegios de root, ya que 
            el directorio de <em>PREFIX</em> es normalmente un directorio con 
            restricciones de permisos escritura.</p>
      
          <p>Si lo que esta es sólo actualizando, la instalación no sobreescribirá los
            archivos de configuración.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="customize" id="customize">Personalizar APACHE</a></h2>
      
          <p>Tras la instalación puede personalizarla, editando los 
          <a href="configuring.html">archivos de configuracion </a> en el directorio de
          <code><em>PREFIX</em>/conf/</code>.</p>
      
      <div class="example"><p><code>$ vi <em>PREFIX</em>/conf/httpd.conf</code></p></div>
      
          <p>Échele un vistazo al Manual de Apache que está en
          <code><em>PREFIX</em>/docs/manual/</code> o consulta <a href="http://httpd.apache.org/docs/2.4/">http://httpd.apache.org/docs/2.4/</a> para la versión más
          reciente de este manual y su completa
          referencia de las <a href="mod/directives.html">directivas de configuracion</a> disponibles.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="test" id="test">Comprobar que la instalación
      funciona</a></h2>
      
          <p>Ahora puedes  <a href="invoking.html">ejecutar</a> tu Apache
          HTTP server ejecutando directamente:</p>
      
      <div class="example"><p><code>$ <em>PREFIX</em>/bin/apachectl -k start</code></p></div>
      
          <p>Ahora debe poder acceder a su primer documento
          bajo la URL <code>http://localhost/</code>. La página o documento que ve se encuentra en
          <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>,
          que por norma general casi siempre será <code><em>PREFIX</em>/htdocs/</code>.
          Si quiere  <a href="stopping.html">parar</a> el servidor, puede hacerlo ejecutando:</p>
      
      <div class="example"><p><code>$ <em>PREFIX</em>/bin/apachectl -k stop</code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="upgrading" id="upgrading">Actualizar una instalación previa</a></h2>
      
          <p>El primer paso para actualizar una instalación anterior es
          leer las especificaciones de la versión y el fichero
          <code>CHANGES</code> en la distribución de código fuente
          que ha descargado para encontrar los cambios que puedan afectar a
          su instalación actual. Cuando el cambio sea entre versiones
          mayores(por ejemplo, de la 2.0 a 2.2 o de la 2.2 a la 2.4),
          entonces es más probable que haya diferencias importantes en
          la compilación y en la ejecución que necesitarán
          ajustes manuales. Todos los módulos necesitarán
          también ser actualizados para adaptarse a los cambios en el
          interfaz de programación (API) de módulos.</p>
      
          <p>Actualizando de una versión menor a la siguiente
            (por ejemplo, de la 2.2.55 a la  2.2.57) es mas fácil. El prodeso de realizar el <code>make install</code>
          no sobreescribirá ninguno de tus documentos existentes,archivos
          log, o archivos de configuración. De hecho, los desarrolladores están haciendo los esfuerzos
          necerarios para evitar cambios que generen incompatibilidades en las opciones de
          <code class="program"><a href="./programs/configure.html">configure</a></code>, la configuración al ser ejecutado, o el módulo de la API
          entre versiones menores. En la mayor parte de los casos debe poder usar un
          comando <code class="program"><a href="./programs/configure.html">configure</a></code> idéntico, un fichero de
          configuración idéntico, y todos sus módulos deben
          seguir funcionando.</p>
      
          <p>Para actualizar entre versiones menores, empecemos encontrando el archivo de configuración
          <code>config.nice</code> el directorio <code>de instalación</code> del servidor
          o en el directorio raiz del código fuente de tu antigua instalación. Este archivo contendrá
          los parámetros exactos para pasarle al 
          <code class="program"><a href="./programs/configure.html">configure</a></code> que usaste anteriormente para configurar tus directorios.
          Entonces, para actualizar su instalación de una versión a la
          siguinete, solo tiene que copiar el archivo
          <code>config.nice</code> a la estructura de directorios del
          código fuente de la nueva versión, editarlo, hacer
          cualquier cambio que desee, y ejecutarlo :</p>
      
          <div class="example"><p><code>
          $ ./config.nice<br />
          $ make<br />
          $ make install<br />
          $ <em>PREFIX</em>/bin/apachectl -k graceful-stop<br />
          $ <em>PREFIX</em>/bin/apachectl -k start<br />
          </code></p></div>
      
          <div class="warning">Tenga en cuenta que antes de poner una nueva
          versión de Apache en producción, debe siempre probarla
          antes en un entorno de pruebas. Por ejemplo, puede instalar y ejecutar la
          nueva versión junto con la antigua usando un
          <code>--prefix</code> diferente y un puerto diferente (modificando
          la directiva <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>)
          para comprobar que no existe ninguna incompatibilidad antes de
          hacer la actualización definitiva.</div>
      
          <p>Puede pasarle argumentos adicionales a <code>config.nice</code>,
          que se agregarán a susopciones originales de <code class="program"><a href="./programs/configure.html">configure</a></code>:</p>
      
          <div class="example"><p><code>
          $ ./config.nice --prefix=/home/test/apache --with-port=90
          </code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="thirdp" id="thirdp">Paquetes de terceros</a></h2>
      
          <p>Un gran número de terceros proporcionan sus propias 
          distribuciones empaquetadas del Apache HTTP Server para su
          instalación en plataformas específicas. Esto incluye las distintas
          distribuciones de Linux, varios paquetes de Windows de terceros,
          Mac OS X, Solaris, y muchos más.</p>
      
          <p>Nuestra licencia de software no sólo permite, sino que anima, 
          este tipo de redistribución. Sin embargo, se da lugar a una situación
          en la que el diseño y la configuración de los valores predeterminados
          de la instalación del servidor pueden diferir de lo que se indica
          en la documentación. Mientras lamentablemente, esta situación no es probable que cambie a corto plazo.</p>
      
          <p>Una <a href="http://wiki.apache.org/httpd/DistrosDefaultLayout">descripción
          de estas distribuciones de terceros </a> está siendo actualizada en el servidor de la WIKI de HTTP
          Server, y debería reflejar el actual estado de éstas distribuciones de terceros. 
          Sin embargo, tendrá que familiarizarse con los procedimientos de gestión
          e instalación de paquetes de su plataforma (SO) en particular.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="./de/install.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/install.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/install.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/install.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/install.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/install.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/install.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentarios</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/install.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="./glossary.html">Glosario</a> | <a href="./sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/��������������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273357�015003� 5����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/fd-limits.html.tr.utf8����������������������������������������������0000644�0000000�0000050�00000022513�13447004010�021052� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Dosya Tanıtıcı Sınırları - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Sanal Konaklar</a></div><div id="page-content"><div id="preamble"><h1>Dosya Tanıtıcı Sınırları</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/vhosts/fd-limits.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/fd-limits.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/fd-limits.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/fd-limits.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/fd-limits.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Çok büyük sayıda sanal konak kullanıyorsanız ve bunların her biri için
            ayrı günlük kayıtları tutuyorsanız, Apache dosya tanıtıcılarını
            tüketebilir. Apache tarafından, dahili olarak 10-20 dosya tanıtıcıya ek
            olarak her hata günlüğü için bir ve her diğer günlük kaydı için bir dosya
            tanıcı kullanılır. Unix işletim sisteminde dosya tanıtıcıların sayısı
            süreç başına 64 taneyle sınırlıdır ve gerekirse donanıma bağlı olarak
            arttırılabilir.</p>
      
          <p>Apache gerektiğinde bu sınırı kendisi arttırmaya çalışırsa da bu her
            zaman mümkün olmaz. Şöyle ki:</p>
      
          <ol>
            <li>Sisteminiz <code>setrlimit()</code> sistem çağrısını
              sağlamıyordur.</li>
      
            <li>Sisteminizde <code>setrlimit(RLIMIT_NOFILE)</code> çağrısı hiçbir işe
              yaramıyordur (örneğin, Solaris 2.3).</li>
      
            <li>Dosya tanıtıcılarının sayısı donanıma bağlı olarak daha fazla
              arttırılamıyordur.</li>
      
            <li>Sisteminiz dosya tanıtıcı sayısını başka sınırlara bağlı kılmıştır:
              örneğin stdio akımları ile ilgili sınır, dosya tanıtıcı sayısının
              256’nın altında ollmasını gerektiriyordur (Solaris 2).</li>
          </ol>
      
          <p>Böyle sorunlar karşısında yapabilecekleriniz:</p>
      
          <ul><li>Ana günlük dosyaları hariç, <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> bölümlerinde günlük dosyası
            belirtmeyerek günlük dosyası sayısını düşürürsünüz. (Bunun nasıl
            yapılacağını öğrenmek için <a href="#splitlogs">Günlük kayıtlarının
            ayrıştırılması</a> bölümüne bakınız.)</li>
      
            <li>Sisteminizde serbest dosya tanıtıcı sayısı 1-2 civarına düşerse
              Apache’yi aşağıdaki gibi bir betikle yeniden çalıştırarak dosya
              tanıtıcı sayısını arttırabilirsiniz:
      
              <div class="example"><p><code>
                <code>#!/bin/sh<br />
                 ulimit -S -n 100<br />
                 exec httpd</code>
              </code></p></div>
            </li>
          </ul>
      
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="splitlogs" id="splitlogs">Günlük kayıtlarının ayrıştırılması</a></h2>
      
          <p>Günlük dosyalarını çok sayıda sanal konak için ortak olarak
            kullanıyorsanız, sanal konaklar için istatistiksel çözümlemeler yapmak
            amacıyla sırası geldiğinde bunları ayrıştırabilirsiniz. Bu işlem aşağıda
            anlatıldığı gibi yapılabilir.</p>
      
          <p>İlk iş olarak, sanal konak bilgilerini günlük girdilerine eklemeniz
            gerekir. Bu işlem, <code class="directive"><a href="../mod/mod_log_config.html#logformat">LogFormat</a></code> yönergesi ve
            <code>%v</code> biçem değişkeni ile yapılabilir. Günlük girdisi biçem
            dizgesinin başına bunu ekleyiniz:</p>
      
          <pre class="prettyprint lang-config">LogFormat "%v %h %l %u %t \"%r\" %&gt;s %b" vhost
      CustomLog logs/multiple_vhost_log vhost</pre>
      
      
          <p>Bu yapılandırma ile her günlük kaydının başında sanal konağın
            <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> yönergesine belirtilen
            ismi eklenir. (Günlük dosyalarınızın kişiselleştirilmesi ile ilgili daha
            fazla bilgi için <code class="module"><a href="../mod/mod_log_config.html">mod_log_config</a></code> belgesine bakınız.)</p>
      
          <p>Günlük dosyanızdaki kayıtları bileşenlere göre gruplamak isterseniz
            <code><a href="../programs/other.html">split-logfile</a></code>
            programını kullanabilirsiniz. Bu programı Apache dağıtımının
            <code>support</code> dizininde bulabilirsiniz.</p>
      
          <p>Programı aşağıdaki gibi çalıştırın:</p>
      
          <div class="example"><p><code>
          split-logfile &lt; /logs/multiple_vhost_log
          </code></p></div>
      
          <p>Bu programı sanal konaklar için tuttuğunuz günlük dosyasının ismini
            argüman olarak belirterek çalıştırdığınızda o dosyadaki kayıtlardan her
            sanal konak için ayrı bir günlük dosyası
            (<code><em>konakadı</em>.log</code>) üretilir.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/vhosts/fd-limits.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/fd-limits.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/fd-limits.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/fd-limits.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/fd-limits.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/fd-limits.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/mass.html.fr.utf8���������������������������������������������������0000644�0000000�0000050�00000047623�13412755316�020136� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Hébergement virtuel de masse configuré dynamiquement - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Hébergement virtuel</a></div><div id="page-content"><div id="preamble"><h1>Hébergement virtuel de masse configuré dynamiquement</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/vhosts/mass.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/mass.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/mass.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/mass.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Ce document propose une méthode performante pour servir un nombre
          quelconque d'hôtes virtuels avec le serveur HTTP Apache. Un <a href="../rewrite/vhosts.html">document séparé</a> décrit comment
          utiliser <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code> pour gérer l'hébergement
          virtuel de masse dynamique.
          </p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#motivation">A qui ce document est-il destiné ?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#overview">Vue d'ensemble</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#simple">Hébergement virtuel
      dynamique avec mod_vhost_alias</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#homepages">Système de serveurs virtuels dynamiques
      simplifié</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#combinations">Utiliser plusieurs systèmes
      d'hébergement virtuel sur le même serveur</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ipbased">Pour un hébergement virtuel par IP plus
      efficace</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#rewrite">Hébergement virtuel de masse avec
      mod_rewrite</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#macro">Hébergement virtuel en masse avec mod_macro</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="motivation" id="motivation">A qui ce document est-il destiné ?</a></h2>
      
          <p>Les techniques décrites ici vous concernent si votre
          <code>httpd.conf</code> contient de nombreuses sections
          <code>&lt;VirtualHost&gt;</code> très semblables,
          dans le style :</p>
      
      <pre class="prettyprint lang-config">&lt;VirtualHost 111.22.33.44&gt;
          ServerName                 customer-1.example.com
          DocumentRoot        "/www/hosts/customer-1.example.com/docs"
          ScriptAlias  "/cgi-bin/" "/www/hosts/customer-1.example.com/cgi-bin"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 111.22.33.44&gt;
          ServerName                 customer-2.example.com
          DocumentRoot        "/www/hosts/customer-2.example.com/docs"
          ScriptAlias  "/cgi-bin/" "/www/hosts/customer-2.example.com/cgi-bin"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 111.22.33.44&gt;
          ServerName                 customer-N.example.com
          DocumentRoot        "/www/hosts/customer-N.example.com/docs"
          ScriptAlias  "/cgi-bin/" "/www/hosts/customer-N.example.com/cgi-bin"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Nous voulons remplacer toutes les configurations
          <code>&lt;VirtualHost&gt;</code> par un mécanisme qui les génère
          dynamiquement. Ceci présente certains avantages :</p>
      
          <ol>
            <li>Votre fichier de configuration est plus petit, ainsi Apache
            démarre plus rapidement et consomme moins de mémoire. Et ce qui
            est peut-être le plus important, le fichier de configuration plus
            petit est plus facile à maintenir, et le risque d'erreurs en est
            diminué d'autant.
            </li>
      
            <li>Pour ajouter des serveurs virtuels, il suffit de créer les
            répertoires appropriés dans le système de fichiers et les entrées
            dans le DNS - il n'est plus nécessaire de reconfigurer ou de
            redémarrer Apache.</li>
          </ol>
      
          <p>Le principal désavantage réside dans le fait que vous ne pouvez
          pas définir un fichier journal différent pour chaque serveur
          virtuel. De toute façon, ce serait une mauvaise idée si vous avez de
          nombreux serveurs virtuels, car cela nécessiterait un <a href="fd-limits.html">nombre important de descripteurs de
          fichier</a>. Il est préférable de rediriger <a href="../logs.html#piped">les journaux via un pipe ou
          une file fifo</a> vers un
          programme, et faire en sorte que ce dernier éclate les journaux
          en un journal par serveur virtuel. L'utilitaire <a href="../programs/split-logfile.html">split-logfile</a>
          constitue un exemple de ce traitement.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">Vue d'ensemble</a></h2>
      
          <p>Un serveur virtuel peut être défini par deux informations : son
          adresse IP, et le contenu de l'en-tête <code>Host:</code> de la
          requête HTTP. La technique d'hébergement virtuel dynamique de masse
          utilisée ici consiste à insérer automatiquement ces informations
          dans le chemin du fichier à utiliser pour répondre à la requête. On
          peut y parvenir assez facilement en utilisant
          <code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code> avec Apache httpd, mais on peut aussi
          <a href="../rewrite/vhosts.html">utiliser mod_rewrite</a>. </p>
          <p>Par défaut, ces deux modules
          sont désactivés ; vous devez activer l'un d'eux lors de la
          compilation et de la configuration d'Apache httpd si vous voulez utiliser
          cette technique.</p>
      
          <p>Certains paramètres doivent être extraits de la requête pour que le serveur
          dynamique se présente comme un serveur dynamique normal. Le plus
          important est le nom du serveur, que le serveur utilise pour générer des
          URLs d'auto-référencement, etc... Il est défini via la directive
          <code>ServerName</code>, et les CGIs peuvent s'y référer via la
          variable d'environnement <code>SERVER_NAME</code>. Sa véritable
          valeur utilisée à l'exécution est contrôlée par la définition de la
          directive
          <code class="directive"><a href="../mod/core.html#usecanonicalname">UseCanonicalName</a></code>. Avec
          <code>UseCanonicalName Off</code>, le nom du serveur correspond au
          contenu de l'en-tête <code>Host:</code> de la requête. Avec
          <code>UseCanonicalName DNS</code>, il est extrait d'une recherche
          DNS inverse sur l'adresse IP du serveur virtuel. La première
          configuration est utilisée pour l'hébergement virtuel dynamique par
          nom, et la deuxième pour l'hébergement virtuel dynamique par IP. Si
          httpd ne peut pas déterminer le nom du serveur, soit parce qu'il
          n'y a pas d'en-tête <code>Host:</code>, soit parce que la recherche
          DNS a échoué, il prend en compte la valeur définie par la directive
          <code>ServerName</code>.</p>
      
          <p>L'autre paramètre à extraire est la racine des documents (définie
          via la directive <code>DocumentRoot</code> et disponible pour les
          scripts CGI via la variable d'environnement <code>DOCUMENT_ROOT</code>).
          Dans une configuration classique, il est utilisé par le module core
          pour faire correspondre les URIs aux noms de fichiers, mais lorsque
          la configuration du serveur comporte des serveurs virtuels, ce
          traitement doit être pris en charge par un autre module (soit
          <code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code>, soit <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>), qui
          utilise un méthode de correspondance différente. Aucun de ces
          modules ne se chargeant de définir la variable d'environnement
          <code>DOCUMENT_ROOT</code>, si des CGIs ou des documents SSI
          doivent en faire usage, ils obtiendront une valeur erronée.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="simple" id="simple">Hébergement virtuel
      dynamique avec mod_vhost_alias</a></h2>
      
          <p>Cet extrait de fichier <code>httpd.conf</code> implémente
          l'hébergement virtuel décrit dans la section <a href="#motivation">À qui ce document est-il destiné ?</a> ci-dessus
          en utilisant <code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code>.</p>
      
      <pre class="prettyprint lang-config"># extrait le nom du serveur de l'en-tête Host:
      UseCanonicalName Off
      
      # ce format de journal peut être éclaté en journaux par serveur virtuel
      # à l'aide du premier champ via l'utilitaire split-logfile
      LogFormat "%V %h %l %u %t \"%r\" %s %b" vcommon
      CustomLog "logs/access_log" vcommon
      
      # inclut le nom du serveur dans les noms de fichiers ressources
      # nécessaires aux traitements des requêtes
      VirtualDocumentRoot "/www/hosts/%0/docs"
      VirtualScriptAlias  "/www/hosts/%0/cgi-bin"</pre>
      
      
          <p>Pour changer cette configuration en solution de serveur virtuel
          par IP, il suffit de remplacer <code>UseCanonicalName
          Off</code> par <code>UseCanonicalName DNS</code>. Le nom du serveur
          inséré dans le nom de fichier sera alors déduit de l'adresse IP du
          serveur virtuel. La variable <code>%0</code> fait référence au nom
          de serveur de la requête, tel qu'il est indiqué dans l'en-tête
          <code>Host:</code>.</p>
      
          <p>Voir la documentation du module <code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code>
          pour d'avantages d'exemples d'utilisation.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="homepages" id="homepages">Système de serveurs virtuels dynamiques
      simplifié</a></h2>
      
          <p>Il s'agit d'une adaptation du système ci-dessus, ajusté pour un
          serveur d'hébergement web de FAI. Grâce à la variable
          <code>%2</code>, on peut extraire des sous-chaînes de caractères du
          nom du serveur pour les utiliser dans le nom de fichier afin, par
          exemple, de définir <code>/home/user/www</code> comme emplacement des
          documents pour <code>www.user.example.com</code>. Un seul répertoire
          <code>cgi-bin</code> suffit pour l'ensemble des
          serveurs virtuels.</p>
      
      <pre class="prettyprint lang-config">UseCanonicalName Off
      
      LogFormat "%V %h %l %u %t \"%r\" %s %b" vcommon
      CustomLog "logs/access_log" vcommon
      
      # insertion d'une partie du nom du serveur dans les noms de fichiers
      VirtualDocumentRoot "/home/%2/www"
      
      # répertoire cgi-bin unique
      ScriptAlias  "/cgi-bin/"  "/www/std-cgi/"</pre>
      
      
          <p>Vous trouverez des exemples plus élaborés d'utilisation de la
          directive <code>VirtualDocumentRoot</code> dans la documentation du
          module <code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="combinations" id="combinations">Utiliser plusieurs systèmes
      d'hébergement virtuel sur le même serveur</a></h2>
      
          <p>Moyennant une configuration un peu plus compliquée, vous pouvez
          contrôler la portée des différentes configurations d'hébergement
          virtuel à l'aide des directives <code>&lt;VirtualHost&gt;</code>
          normales de httpd. Par exemple, on peut associer une adresse IP pour
          les pages d'accueil des clients en général, et une autre pour les
          clients commerciaux avec la configuration suivante. Cette
          configuration peut être combinée avec les sections
          <code>&lt;VirtualHost&gt;</code> conventionnelles, comme indiqué
          plus loin.</p>
      
      <pre class="prettyprint lang-config">UseCanonicalName Off
      
      LogFormat "%V %h %l %u %t \"%r\" %s %b" vcommon
      
      &lt;Directory "/www/commercial"&gt;
          Options FollowSymLinks
          AllowOverride All
      &lt;/Directory&gt;
      
      &lt;Directory "/www/homepages"&gt;
          Options FollowSymLinks
          AllowOverride None
      &lt;/Directory&gt;
      
      &lt;VirtualHost 111.22.33.44&gt;
          ServerName www.commercial.example.com
          
          CustomLog "logs/access_log.commercial" vcommon
          
          VirtualDocumentRoot "/www/commercial/%0/docs"
          VirtualScriptAlias  "/www/commercial/%0/cgi-bin"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 111.22.33.45&gt;
          ServerName www.homepages.example.com
          
          CustomLog "logs/access_log.homepages" vcommon
          
          VirtualDocumentRoot "/www/homepages/%0/docs"
          ScriptAlias         "/cgi-bin/" "/www/std-cgi/"
      &lt;/VirtualHost&gt;</pre>
      
      
      <div class="note">
      	<h3>Note</h3>
      	<p>Si le premier bloc VirtualHost ne comporte <em>pas</em> de
      	directive <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>, c'est
      	le nom issu d'une recherche DNS inverse à partir de l'adresse IP
      	du serveur virtuel qui sera utilisé. Si ce nom ne correspond pas
      	à celui que vous voulez utiliser, vous pouvez ajouter une entrée
      	de remplacement (par exemple <code>ServerName
      	none.example.com</code>) pour éviter ce comportement.</p>
      </div>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ipbased" id="ipbased">Pour un hébergement virtuel par IP plus
      efficace</a></h2>
      
          <p>Les changements de configuration suggérés pour transformer <a href="#simple">le premier exemple</a> en hébergement virtuel par IP
          conduisent à une configuration peu efficace. Chaque requête
          nécessite une nouvelle recherche DNS. Pour éviter cette surcharge de
          travail, le système de fichiers peut être organisé pour correspondre
          aux adresses IP, plutôt qu'aux noms de serveurs, supprimant par
          la-même la nécessité d'une recherche DNS. La journalisation doit
          aussi être adaptée pour fonctionner sur un tel système.</p>
      
      <pre class="prettyprint lang-config"># obtention du nom du serveur par recherche DNS inverse
      # sur l'adresse IP
      UseCanonicalName DNS
      
      # insertion de l'adresse IP dans les journaux afin de pouvoir les
      # éclater
      LogFormat "%A %h %l %u %t \"%r\" %s %b" vcommon
      CustomLog "logs/access_log" vcommon
      
      # insertion de l'adresse IP dans les noms de fichiers
      VirtualDocumentRootIP "/www/hosts/%0/docs"
      VirtualScriptAliasIP  "/www/hosts/%0/cgi-bin"</pre>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rewrite" id="rewrite">Hébergement virtuel de masse avec
      mod_rewrite</a></h2>
      
      <p>
      L'hébergement virtuel de masse peut aussi être effectué en utilisant
      <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>, soit à l'aide de simples directives <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code>, soit en utilisant des
      techniques plus compliquées comme le stockage externe des définitions
      des serveurs virtuels, ces dernières étant accessibles via des
      directives <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code>. Ces
      techniques sont décrites dans la <a href="../rewrite/vhosts.html">documentation sur la réécriture</a>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="macro" id="macro">Hébergement virtuel en masse avec mod_macro</a></h2>
      
      <p>Une autre option pour générer dynamiquement des serveurs virtuels :
      mod_macro ; ce module permet de créer un modèle de serveur virtuel que
      vous pourrez invoquer pour des noms d'hôtes multiples. La section
      <strong>Usage</strong> de la documentation du module présente un exemple qui
      illustre cette méthode.
      </p>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/vhosts/mass.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/mass.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/mass.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/mass.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/mass.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/name-based.html.tr.utf8���������������������������������������������0000644�0000000�0000050�00000043105�13447004010�021156� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>İsme Dayalı Sanal Konaklar - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Sanal Konaklar</a></div><div id="page-content"><div id="preamble"><h1>İsme Dayalı Sanal Konaklar</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../de/vhosts/name-based.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/name-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/name-based.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/name-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/name-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/name-based.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Bu belgede isme dayalı sanal konakların ne zaman, nasıl kullanılacakları
            açıklanmıştır.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#namevip">İsme dayalı ve IP’ye dayalı Sanal Konaklar</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#alg">Sunucu isme dayalı sanal konaklardan uygun olanını nasıl seçer</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#using">İsme Dayalı Sanal Konakların Kullanımı</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="ip-based.html">IP Adresine Dayalı Sanal Konaklar</a></li><li><a href="details.html">Konak Eşlemenin Derinliğine İncelenmesi</a>
      </li><li><a href="mass.html">Devingen olarak Yapılandırılan Kütlesel Sanal
      Barındırma</a></li><li><a href="examples.html">Çok kullanılan sanal konak yapılandırma
      örnekleri</a></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="namevip" id="namevip">İsme dayalı ve IP’ye dayalı Sanal Konaklar</a></h2>
      
          <p><a href="ip-based.html">IP’ye dayalı sanal konaklar</a>da sunulacak
            sanal konağı doğru tespit edebilmek için bağlantının yapıldığı IP
            adresine bakılır. Bu bakımdan her konak için ayrı bir IP adresine
            gereksinim vardır.</p>
      
          <p>İsme dayalı sanal konaklarda ise sunucu, istemcinin HTTP başlığının bir
            parçası olarak gönderdiği konak adını kullanır. Bu teknikte aynı IP
            adresini çok sayıda farklı konak kullanabilir.</p>
      
          <p>İsme dayalı sanal barındırma nispeten daha kolaydır, çünkü her konak
            ismini doğru IP adresiyle eşlemek için DNS sunucunuzu yapılandırdıktan
            sonra Apache HTTP sunucusunu farklı konak isimlerini tanıyacak şekilde
            yapılandırmanız yeterli olur. İsme dayalı sanal barındırma ayrıca zaten
            kıt olan IP adreslerine talebi de azaltır. Bu nedenle, IP’ye dayalı sanal
            konakları kullanmanızı gerektiren donanım kullanmadıkça isme  dayalı
            sanal konaklar kullanmalısınız. İstemci uyumuna bağlı IP’ye dayalı
            sanal barındırma için eskiden varolan sebepler genel amaçlı bir HTTP
            sunucusu için artık uygulanabilir değildir.</p>
      
          <p>İsme dayalı sanal barındırma, IP'ye dayalı sanal barındırma seçim
            algoritmasını kullanmaz, yani uygun sunucu ismini arama işlemi sadece en
            iyi IP'ye dayalı adrese sahip sanal konaklar arasında gerçekleşir.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="alg" id="alg">Sunucu isme dayalı sanal konaklardan uygun olanını nasıl seçer</a></h2>
        
      
          <p>İsme dayalı sanal konak çözümlemesinin ilk adımının IP'ye dayalı
            çözümleme olduğunun anlaşılması çok önemlidir. İsme dayalı sanal konak
            çözümlemesi en uygun isme dayalı sanal konağı seçerken önce en iyi IP'ye
            dayalı eşleşme adaylarının sayısını azaltır, sonra bunlar arasından en
            uygununu seçer. Tüm <code>VirtualHost</code> yönergelerinde IP adresi
            yerine joker kullanımı bu IP'ye dayalı eşlemeyi yersiz kılar.</p>
      
          <p>Bir istek geldiğinde, sunucu, istekte kullanılan IP adresi ve portu ile
            en iyi eşleşen <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> bileşenini bulur. Bu IP adresi ve port çifti ile
            eşleşen birden fazla sanal konak varsa, Apache httpd istekte kullanılan
            sunucu ismini <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> ve
            <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> yönergelerindeki
            isimlerle karşılaştırır.</p>
      
          <p>Herhangi bir isme dayalı sanal konakta <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> yönergesini kullanmazsanız, sunucu
            bu yönergeye sistem konak adından türetilmiş tam nitelenmiş alan adının
            (FQDN) tanımlandığını varsayacaktır. Bu örtük atama sezgiselliğin
            istenmediği bir sanal konak eşleşmesi ile sonuçlanabilir ve bu
            önerilmez.</p>
      
        <h3><a name="defaultvhost" id="defaultvhost">Bir IP adresi ve port çifti için öntanımlı isme dayalı sankon</a></h3>
         
          <p><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> ve
            <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> yönergelerinde bir
            eşleşme bulunamazsa, Apache httpd bu çift ile eşleşen <strong>sanal
            konaklar listesindeki ilk sanal konağı</strong> kullanır.</p>
        
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="using" id="using">İsme Dayalı Sanal Konakların Kullanımı</a></h2>
      
      <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td><ul><li><code class="module"><a href="../mod/core.html">core</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code></li><li><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code></li><li><code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
          <p>İlk adım sunacağınız her konak için ayrı bir <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> bölümü oluşturmaktır. Her
            <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> bölümü
            içinde sunulan konağı belirtmek üzere en azından bir adet <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> yönergesine ve konak içeriğinin
            dosya sisteminde bulunduğu yeri gösteren bir <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code> yönergesine ihtiyacınız
            olacaktır.</p>
      
          <div class="note"><h3>Ana konağı unutmayın</h3>
            <p>Mevcut <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
              yönergelerinin hiçbiriyle eşleşmeyen bir istek için, sunucu veya konak
              ismine bakılmaksızın genel sunucu yapılandırmanız kullanılır.</p>
      
            <p>Mevcut sitenize isme dayalı bir sanal konak eklerseniz ve bu sanal
              konak ana sunucunun IP adresi ve portuna sahipse, ana sunucuya yapılan
              istekler için bu sanal konak kullanılır. Bu bakımdan, <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> yönergesi ana sunucununki ile aynı
              olan bir <a href="#defaultvhost">öntanımlı sanal konak</a> oluşturmak
              akıllıca olacaktır. Aynı arayüz ve portu kullanan fakat farklı
              yapılandırmalara sahip diğer alan isimlerinin sanal konakları (yani
              öntanımlı olmayanlar) bu öntanımlı sanal konağın sonrasına
              yerleÅŸtirilmelidir.</p>
          </div>
      
          <div class="note"><h3>ServerName miras alma</h3>
             <p>İsme dayalı her sanal konak için daima bir <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> belirtmek en iyisidir.</p>
      
             <p>Eğer bir <code class="directive"><a href="../mod/core.html#virtualhost">VirtualHost</a></code> bölümü
             içinde bir <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>
             belirtilmezse, sunucu ismi olarak ana sunucu yapılandırmasındaki isim
             kullanılır. Orada da bir sunucu ismi belirtilmemişse, başlatma sırasında
             dinlenen ilk IP adresinden ters DNS araması ile elde edilen isim
             kullanılır. Her iki durumda da miras alınan isim gereksiz yere isme
             dayalı sanal konak ismi haline gelecektir; bu bakımdan isme dayalı her
             sanal konak için daima bir <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> belirtmek en iyisidir.</p>
          </div>
      
          <p>Örnek olarak, <code>site1.example.com</code> adresinden sitenizi
            sunmakta olduğunuzu ve bunun yanına aynı IP adresini kullanan
            <code>site2.example.com</code> sanal konağını eklemek istediğinizi
            varsayalım. Bunun için <code>httpd.conf</code> dosyanıza basitçe şu
            satırları ekleyebilirsiniz:</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost *:80&gt;
          #İlk sanal konak aynı zamanda *:80 için de öntanımlıdır.
          ServerName site1.example.com
          ServerAlias example.com
          DocumentRoot "/siteler/site1"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost *:80&gt;
          ServerName site2.example.com
          DocumentRoot "/siteler/site2"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>İsterseniz, <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> yönergesinde argüman olarak <code>*</code>
            yerine doÄŸrudan bir IP adresi belirtebilirsiniz. Hatta, daha sonra, isme
            dayalı sanal konakları bir IP adresinden ve IP’ye dayalı olanları veya
            isme dayalı diğer bir sanal konak grubunu diğer IP adreslerinden sunmak
            isteyebilirsiniz.</p>
      
          <p>Çoğu sunucunun birden fazla isim ile erişilebilir olması istenir. Bu,
            <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> bölümü
            içine bir <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> yönergesi
            yerleştirmek suretiyle mümkün olur. Örneğin yukarıdaki örnekte,
            kullanıcıların aynı siteye farklı isimlerle erişmelerini mümkün kılmak
            için bölüm içine şu satırı ekleyebilirsiniz:</p>
      
          <pre class="prettyprint lang-config">ServerAlias example.com *.example.com</pre>
      
      
          <p>Böylece <code>example.com</code> alanındaki tüm konaklar için gelen
            isteklere <code>www.example.com</code> sanal konağından hizmet sunulmuş
            olur. Konak isimleriyle eşleşmek üzere dosya ismi kalıp karakterleri
            <code>*</code> ve <code>?</code> kullanılabilir. Şüphesiz bu isimleri
            sırf <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> veya
            <code>ServerAlias</code> yönergesinde belirtmiş olmakla bu isimleri
            erişilebilir kılamazsınız. Öncelikle, bu isimleri sunucunuzdaki IP
            adresleriyle eşlemek üzere yapılandıracağınız bir DNS sunucunuz
            olmalıdır.</p>
      
          <p>İsme dayalı sanal konaklardan en iyi eşleşme kümesinde olanlar
            yapılandırmada göründükleri sıraya göre işleme sokulur. Joker
            kullanımları arasında fark gözetilmeksizin <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> veya <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> yönergesi eşleşen ilk sanal konak
            kullanılır.</p>
      
          <p><code>VirtualHost</code> içindeki isimlerin sırası (jokersiz) bir
            <code>ServerAlias</code> gibi ele alınır (fakat hiçbir
            <code>ServerAlias</code> yönergesi ile geçersiz kılınmaz).</p>
      
          <p>Son olarak, sanal konak yapılandırmanıza, <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> bölümlerinin içine başka yönergeler
            yerleştirerek ince ayar çekebilirsiniz. Çoğu yönerge bu bölümlere
            yerleştirilebilir ve sadece o sanal konakla ilgili yapılandırmayı
            değiştirmek için kullanılabilir. Belli bir yönergenin sanal konak
            bölümlerinde kullanılıp kullanılmayacağını yönergenin açıklamasında <a href="../mod/directive-dict.html#Context">Bağlam</a> satırına bakarak
            öğrenebilirsiniz. <em>Ana sunucu bağlamındaki</em> (<code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> bölümleri dışındaki)
            yapılandırma yönergelerinden sadece sanal konak bölümlerinde geçersiz
            kılınmamış olanlar kullanılacaktır.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../de/vhosts/name-based.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/name-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/name-based.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/name-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/name-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/name-based.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/name-based.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/mass.html�����������������������������������������������������������0000644�0000000�0000050�00000000567�13362070302�016624� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: mass.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: mass.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: mass.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: mass.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �����������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/index.html.fr.utf8��������������������������������������������������0000644�0000000�0000050�00000020367�13412755316�020276� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Documentation sur les serveurs virtuels Apache - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Documentation sur les serveurs virtuels Apache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../de/vhosts/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/vhosts/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
      
          <p>Le principe des <cite>Serveurs Virtuels</cite> consiste à 
          faire fonctionner un ou plusieurs serveurs Web (comme 
          <code>www.company1.example.com</code> et <code>www.company2.example.com</code>) 
          sur une même machine. Les serveurs virtuels peuvent être soit 
          "<a href="ip-based.html">par-IP</a>" où une adresse IP est 
          attribuée pour chaque serveur Web, soit "<a href="name-based.html">par-nom</a>" où plusieurs noms de domaine se côtoient sur 
          des mêmes adresses IP. L'utilisateur final ne perçoit pas 
          qu'en fait il s'agit d'un même serveur physique.</p>
      
          <p>Apache a été le précurseur des serveurs proposant cette 
          méthode de serveurs virtuels basés sur les adresses IP. Ses 
          versions 1.1 et suivantes proposent les deux 
          méthodes de serveurs virtuels : par-IP et par-nom. Cette 
          deuxième méthode est parfois également appelée <em>host-based</em> 
          ou <em>serveur virtuel non-IP</em>.</p>
      
          <p>Vous trouverez ci-dessous une liste documentaire qui vous 
          expliquera en détails le fonctionnement du support des serveurs
          virtuels par le serveur HTTP Apache.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#support">Support des serveurs virtuels</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#directives">Directives de configuration</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code></li><li><a href="name-based.html">Serveurs virtuels par-nom</a></li><li><a href="ip-based.html">Serveurs virtuels par-IP</a></li><li><a href="examples.html">Exemples de serveurs virtuels</a></li><li><a href="fd-limits.html">Limites des descripteurs de fichiers</a></li><li><a href="mass.html">Hébergement virtuel en masse</a></li><li><a href="details.html">Détails sur les critères de choix du serveur</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="support" id="support">Support des serveurs virtuels</a></h2>
      
          <ul>
            <li><a href="name-based.html">Serveurs Virtuels par-Nom</a> 
            (Un ou plusieurs sites Web par adresse IP)</li>
            <li><a href="ip-based.html">Serveurs Virtuels par-IP</a> 
            (Une adresse IP pour chaque site Web)</li>
            <li><a href="examples.html">Exemples de configurations classiques 
            de Serveurs Virtuels </a></li>
            <li><a href="fd-limits.html">Limites des descripteurs de fichiers</a> 
            (ou, <em>trop de fichiers journaux</em>)</li>
            <li><a href="mass.html">Configuration dynamique en masse de 
            Serveurs Virtuels</a></li>
            <li><a href="details.html">Explication approfondie des critères 
            de sélection d'un Serveur Virtuel</a></li>
          </ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="directives" id="directives">Directives de configuration</a></h2>
      
          <ul>
            <li><code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code></li>
          </ul>
      
          <p>Pour vérifier et analyser la configuration de vos serveurs 
          virtuels, vous pouvez utiliser l'argument <code>-S</code> sur 
          la ligne de commande.</p>
      
          <div class="example"><h3>Exemple Unix</h3><p><code>
          
          apachectl -S
          </code></p></div>
      
          <div class="example"><h3>Exemple Windows</h3><p><code>
          
          httpd.exe -S
          </code></p></div>
      
          <p>Cette commande affichera dans le détail comment Apache a 
          traité son fichier de configuration. Les erreurs de configuration 
          peuvent être corrigées par l'examen attentif des adresses IP et 
          des noms de serveurs. (Consultez la documentation du programme 
          <code class="program"><a href="../programs/httpd.html">httpd</a></code> pour les autres arguments de la ligne de 
          commande)</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../de/vhosts/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/vhosts/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/examples.html.tr.utf8�����������������������������������������������0000644�0000000�0000050�00000063677�13447004010�021020� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Sanal Konak Örnekleri - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Sanal Konaklar</a></div><div id="page-content"><div id="preamble"><h1>Sanal Konak Örnekleri</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/vhosts/examples.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/examples.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/examples.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/examples.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/examples.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Bu belgede <a href="index.html">sanal konaklarla</a> ile ilgili olarak
            karşılaşılması olası tüm  senaryolara yer verilmeye çalışılmıştır.
            Buradaki senaryolar, tek bir  sunucu üzerinde  <a href="name-       based.html">isme dayalı</a> veya <a href="ip-based.html">IP’ye dayalı</a>
            sanal konaklar aracılığıyla çok sayıda sitenin sunumu ile ilgilidir.
          </p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#purename">Tek bir IP ile çok sayıda isme dayalı site</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#twoips">IP adresleri farklı çok sayıda isme dayalı site</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#intraextra">Aynı içeriği farklı IP adresleriyle sunmak
          (örn., dahili ve harici ağlara)</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#port">Farklı portlarla farklı siteler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ip">IP’ye dayalı sanal konaklar</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ipport">Hem IP’ye hem de porta dayalı sanal konaklar</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#mixed">Hem isme hem de IP‘ye dayalı sanal konaklar</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#proxy"><code>Virtualhost</code> ve
          <code>mod_proxy</code>’nin birlikte kullanımı</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#default"><code>_default_</code> sanal konakları</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#migrate">Bir isme dayalı sanal konağı bir IP’ye dayalı
          sanal konakla yansılamak</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#serverpath"><code>ServerPath</code> yönergesinin kullanımı</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="purename" id="purename">Tek bir IP ile çok sayıda isme dayalı site</a></h2>
          
      
          <p>Bu örnekte, makinenizin tek bir IP adresine çözümlenen çok sayıda konak 
            adına sahip olduğunu, <code>example.com</code> ve 
            <code>example.org</code> gibi farklı isimlere farklı yanıtlar vermek 
            istediğinizi varsayalım.</p>
          
          <div class="note"><h3>Bilginize</h3><p>Apache sunucusu üzerinde sanal konakları
            yapılandırmakla bu konak isimleri için sihirli bir şekilde DNS
            kayıtlarının da oluşturulmasını sağlamış olmazsınız. Bu isimler için
            ilgili DNS kayıtlarında sizin IP adresinize çözümlenen A kayıtlarının
            olması gerekir, yoksa sitenize kimse erişemez. Sitelere erişimi yerel
            olarak denemek isterseniz, bu girdileri <code>hosts</code> dosyanıza
            yazabilirsiniz. Fakat bu sadece sizin makinenizde çalışır. Yerel
            ağınızdaki her makinenin <code>hosts</code> dosyasına bu girdileri
            yazarak yerel ağdan erişimi bu yolla sağlayabilirsiniz ama dış ağdan
            gelecek ziyaretçileriniz için DNS kayıtlarınızın olması şarttır.</p>
          </div>
      
          <pre class="prettyprint lang-config"># Apache’nin 80. portu dinlediğinden emin olalım
      Listen 80
      &lt;VirtualHost *:80&gt;
        DocumentRoot "/siteler/ecom"
        ServerName example.com
      
        # Diğer yönergeler, burada ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost *:80&gt;
        DocumentRoot "/siteler/eorg"
        ServerName example.org
      
        # Diğer yönergeler, burada ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Yıldız imleri tüm adreslerle eşleşmeyi sağladığından ana sunucu
            (yapılandırma dosyası genelindeki yapılandırma - sunucu geneli)
            erişilebilir olmayacaktır. Yapılandırma
            dosyasındaki <code>ServerName example.com</code> yönergeli konak, ilk
            sanal konak olduğundan en yüksek önceliğe sahiptir ve
            <cite>öntanımlı</cite> veya <cite>baskın</cite> site olarak davranır.
            Yani, hiçbir <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> yönergesi 
            ile eşleşmeyen bir istek alındığında bu istek ilk <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> yapılandırması ile
            karşılanır.</p>
          
          <p>Yukarıdaki yapılandırmayı hemen hemen tüm isme dayalı sanal konaklar
            için kullanabilirsiniz. Bu yapılandırmanın çalışmayacağı tek durum,
            farklı içerikleri farklı IP adres veya portlardan sunma gereğiyle
            karşılaşmaktır.</p>
      
          <div class="note"><h3>Bilginize</h3>
            <p><code>*</code> yerine sisteminizdeki belli bir IP adresini 
              yazabilirsiniz. Böyle sanal konaklar sadece, HTTP isteklerinin sadece 
              belirtilen IP adreslerinden alınması için kullanilabilir.</p>
      
            <pre class="prettyprint lang-config">NameVirtualHost 192.168.1.22
      
      &lt;VirtualHost 192.168.1.22&gt;
        # vs. ...
      &lt;/VirtualHost&gt;</pre>
      
      
            <p>Bununla birlikte, IP adresinin önceden kestirilebilir olmadığı
              sistemlerde, örneğin, hizmet sağlayıcınıza çevirmeli ağ ile bağlanıyor
              ve onun rasgele atadığı bir IP adresi için bir devingen DNS çözümü
              kullanıyorsanız, IP adresi değil de <code>*</code> kullanmak daha çok
              işinize yarayacaktır. Yıldız imi her IP adresi ile eşleşeceğinden IP
              adresiniz değişse bile bu yapılandırmayı değiştirmeden
              kullanabilirsiniz.</p>
          </div>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="twoips" id="twoips">IP adresleri farklı çok sayıda isme dayalı site</a></h2>
          
      
          <div class="note"><h3>Bilginize</h3>
            <p>Burada açıklanan teknikler istendiği kadar çok IP adresine
              geniÅŸletilebilir.</p>
          </div>
      
          <p>Sunucunun iki IP adresi olsun. Birinden "ana sunucu"
            (<code>192.168.1.2</code>) diÄŸerinden <code>example.com</code>
            <code>192.168.2.2</code> hizmet versin. Bu arada başka sanal konakları
            da sunabilelim istiyoruz.</p>
      
          <pre class="prettyprint lang-config">Listen 80
      
      # Bu, 192.168.1.2 adresindeki "ana sunucu" olsun
      ServerName sunucu.example.com
      DocumentRoot "/siteler/anasunucu"
      
      &lt;VirtualHost 192.168.1.20&gt;
          DocumentRoot "/siteler/ecom"
          ServerName example.com
      
          # Diğer yönergeler, burada ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 192.168.1.20&gt;
          DocumentRoot "/siteler/eorg"
          ServerName example.org
      
          # Diğer yönergeler, burada ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p><code>192.168.1.20</code> adresinden gelmeyen tüm isteklere ana sunucu
            (<code>sunucu.example.com</code>), <code>192.168.1.20</code> adresinden
            gelen sunucu ismi belirtmeyenler ile <code>Host:</code> başlığı
            belirtmeyenlere ise  <code>example.com</code> hizmet verecektir.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="intraextra" id="intraextra">Aynı içeriği farklı IP adresleriyle sunmak
          (örn., dahili ve harici ağlara)</a></h2>
      
          <p>Sunucu makine iki IP adresine sahip olsun. Biri iç ağa
            (<code>192.168.1.1</code>) diğeri dış ağa (<code>172.20.30.40</code>)
            bakıyor olsun. <code>sunucu.example.com</code> ismi dış ağda dış ağa
            bakan IP’ye, iç ağda ise iç ağa bakan IP’ye çözümleniyor olsun.</p>
      
          <p>Bu durumda, sunucu hem iç hem de dış ağdan gelen isteklere aynı içerik,
            dolayısıyla aynı <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> bölümü ile hizmet verebilir.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost 192.168.1.1 172.20.30.40&gt;
          DocumentRoot "/siteler/sunucu"
          ServerName sunucu.example.com
          ServerAlias sunucu
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Artık, hem iç hem de dış ağdan gelen isteklere aynı
            <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> 
            bölümünden hizmet sunulacaktır.</p>
      
          <div class="note"><h3>Bilginize:</h3>
            <p>İç ağdan istek yapan biri, tam nitelenmiş konak ismi
              <code>sunucu.example.com</code> yerine makine ismini
              (<code>sunucu</code>) kullanabilir (<code>ServerAlias sunucu</code>
              satırına dikkat).</p>
      
            <p>Ayrıca, yukarıdaki gibi iki ayrı IP adresi belirtmek yerine sadece
              <code>*</code> belirtmekle sunucunun tüm IP adreslerine yine aynı
              içerikle yanıt vereceğine dikkat ediniz.</p>
          </div>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="port" id="port">Farklı portlarla farklı siteler</a></h2>
      
          <p>Aynı IP adresine sahip çok sayıda konak ismine sahip olduğunuzu ve
            bunların bazılarının farklı portları kullanmasını istediğinizi
            varsayalım. Aşağıdaki örnekte, isim eşleşmesinin, en iyi eşleşen IP
            adresi ve port çifti saptandıktan sonra yer alması gösterilmiştir. </p>
      
          <pre class="prettyprint lang-config">Listen 80
      Listen 8080
      
      &lt;VirtualHost 172.20.30.40:80&gt;
          ServerName example.com
          DocumentRoot "/siteler/ecom-80"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40:8080&gt;
          ServerName example.com
          DocumentRoot "/siteler/ecom-8080"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40:80&gt;
          ServerName example.org
          DocumentRoot "/siteler/eorg-80"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40:8080&gt;
          ServerName example.org
          DocumentRoot "/siteler/eorg-8080"
      &lt;/VirtualHost&gt;</pre>
      
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ip" id="ip">IP’ye dayalı sanal konaklar</a></h2>
      
          <p>Sunucu makinenin, biri <code>example.com</code> adından çözümlenen
            <code>172.20.30.40</code>, diğeri <code>example.org</code> adından
            çözümlenen <code>172.20.30.50</code> diye iki IP adresi olsun.</p>
      
          <pre class="prettyprint lang-config">Listen 80
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/siteler/ecom"
          ServerName example.com
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.50&gt;
          DocumentRoot "/siteler/eorg"
          ServerName example.org
      &lt;/VirtualHost&gt;</pre>
      
      
          <p><code>&lt;VirtualHost&gt;</code> yönergelerinde belirtilmeyen
            adreslerle yapılan isteklere (örneğin, <code>localhost</code>) sunucu
            genelindeki yapılandırma ile ana sunucu yanıt verecektir.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ipport" id="ipport">Hem IP’ye hem de porta dayalı sanal konaklar</a></h2>
          
      
          <p>Sunucu makinenin, biri <code>example.com</code> adından çözümlenen
            <code>172.20.30.40</code>, diğeri <code>example.org</code> adından
            çözümlenen <code>172.20.30.50</code> diye iki IP adresi olsun ve iki
            konak da hem 80 hem de 8080 portlarında çalışsınlar istiyoruz.</p>
      
          <pre class="prettyprint lang-config">Listen 172.20.30.40:80
      Listen 172.20.30.40:8080
      Listen 172.20.30.50:80
      Listen 172.20.30.50:8080
      
      &lt;VirtualHost 172.20.30.40:80&gt;
          DocumentRoot "/siteler/ecom-80"
          ServerName example.com
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40:8080&gt;
          DocumentRoot "/siteler/ecom-8080"
          ServerName example.com
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.50:80&gt;
          DocumentRoot "/siteler/eorg-80"
          ServerName example.org
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.50:8080&gt;
          DocumentRoot "/siteler/eorg-8080"
          ServerName example.org
      &lt;/VirtualHost&gt;</pre>
      
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mixed" id="mixed">Hem isme hem de IP‘ye dayalı sanal konaklar</a></h2>
          
      
          <p>Bir <code>VirtualHost</code> yönergesinde belirtilen bir IP adresi başka
            bir sanal konakta görünmüyorsa bu sankon kesinlikle IP'ye dayalı bir
            sanal konaktır.</p>
      
          <pre class="prettyprint lang-config">Listen 80
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/siteler/ecom"
          ServerName example.com
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/siteler/eorg"
          ServerName example.org
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/siteler/enet"
          ServerName example.net
      &lt;/VirtualHost&gt;
      
      # IP'ye dayalı
      &lt;VirtualHost 172.20.30.50&gt;
          DocumentRoot "/siteler/eedu"
          ServerName example.edu
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.60&gt;
          DocumentRoot "/siteler/egov"
          ServerName example.gov
      &lt;/VirtualHost&gt;</pre>
      
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="proxy" id="proxy"><code>Virtualhost</code> ve
          <code>mod_proxy</code>’nin birlikte kullanımı</a></h2>
      
          <p>Bu örnekte bir arabirimi dışarıya bakan bir makinede, başka bir
            makinede çalışan bir sunucuya sanal konak olarak, bir vekil sunucu
            çalıştırmak istediğimizi varsayıyoruz. <code>192.168.111.2</code> IP
            adresli bir makinede aynı isimde bir sanal konak yapılandırılmış olsun.
            Çok sayıda konak ismi için vekil olarak tek bir makine kullandığımızdan
            ve konak isminin de aktarılmasını arzuladığımızdan <code class="directive"><a href="../mod/mod_proxy.html#proxypreservehost">ProxyPreserveHost
            On</a></code> yönergesini kullandık.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost *:*&gt;
          ProxyPreserveHost On
          ProxyPass        "/" "http://192.168.111.2/"
          ProxyPassReverse "/" "http://192.168.111.2/"
          ServerName konak.example.com
      &lt;/VirtualHost&gt;</pre>
      
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="default" id="default"><code>_default_</code> sanal konakları</a></h2>
      
          <h3><a name="defaultallports" id="defaultallports">Tüm portlar için <code>_default_</code></a></h3>
            
      
          <p>Bir IP adresi ve port belirtilmeyen veya hiçbir sanal konağın hiçbir
            adresi/portu ile eÅŸleÅŸmeyen istekleri yakalamak istersek...</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost _default_:*&gt;
          DocumentRoot "/siteler/default"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Bütün portlarla eşleşen böyle bir öntanımlı sanal konağın kullanımı
            hiçbir isteğin ana sunucuya gitmemesi sonucunu doğurur.</p>
      
          <p>Bir öntanımlı sanal konak, asla, isme dayalı sanal konaklar için
            kullanılmış bir adrese/porta gönderilmiş bir isteğe hizmet sunmaz. Eğer
            istek bilinmeyen bir <code>Host:</code> başlığına sahipse veya hiç
            <code>Host:</code> başlığı içermiyorsa isteğe daima ilk (yapılandırma
            dosyasındaki ilk) isme dayalı sanal konak hizmet sunar.</p>
      
          <p>Her isteği tek bir bilgilendirme sayfasına (veya betiğe) yönlendirmek
            isterseniz <code class="directive"><a href="../mod/mod_alias.html#aliasmatch">AliasMatch</a></code> veya
            <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> yönergesini
            kullanabilirsiniz.</p>
          
      
          <h3><a name="defaultdifferentports" id="defaultdifferentports">Farklı portlardan <code>_default_</code></a></h3>
            
      
          <p>Önceki yapılandırmaya ek olarak 80. portta ayrı bir
            <code>_default_</code> sanal konağı kullanmak istersek...</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost _default_:80&gt;
          DocumentRoot "/siteler/default80"
          # ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost _default_:*&gt;
          DocumentRoot "/siteler/default"
          # ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>80. porttan hizmet sunan <code>_default_</code> sanal konağı IP adresi
            belirtilmeyen tüm istekleri yakalar, bunu yapabilmesi için yapılandırma
            dosyasında tüm portlara hizmet sunan benzerinden önce yer almalıdır. Bu
            durumda ana sunucu hiçbir isteğe yanıt vermeyecektir.</p>
          
      
          <h3><a name="defaultoneport" id="defaultoneport">Tek portluk <code>_default_</code></a></h3>
            
      
          <p><code>_default_</code> sanal konağının sadece 80. porttan hizmet
            sunmasını istersek...</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost _default_:80&gt;
          DocumentRoot "/siteler/default"
          ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>80. porttan gelen IP adresi belirtilmemiÅŸ isteklere
            <code>_default_</code> sanal konağı, diğer portlardan gelen adres
            belirtilmemiÅŸ isteklere ise ana sunucu hizmet verecektir.</p>
      
          <p>Bir sanal konak bildiriminde <code>*</code> kullanımı
            <code>_default_</code> kullanımından daha yüksek öncelik sağlar.</p>
         
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="migrate" id="migrate">Bir isme dayalı sanal konağı bir IP’ye dayalı
          sanal konakla yansılamak</a></h2>
      
          <p>İsme dayalı sanal konak örneklerinin <a href="#twoips">2. sinde</a> adı
            geçen <code>example.org</code> bu örnekte kendi IP adresinden hizmet
            veriyor olsun. İsme dayalı sanal konağı eski IP adresiyle kaydetmiş
            vekiller ve isim sunucularından kaynaklanacak olası sorunlardan kaçınmak
            için yansılama sırasında sanal konağı hem eski hem de yeni IP adresiyle
            sunmamız lazım.</p>
      
          <p>Çözüm kolay, çünkü yapacağımız sadece <code>VirtualHost</code>
            yönergesine yeni IP adresini (<code>192.168.1.2</code>) eklemek
            olacak.</p>
      
          <pre class="prettyprint lang-config">Listen 80
      ServerName example.com
      DocumentRoot "/siteler/ecom"
      
      &lt;VirtualHost 192.168.1.20 192.168.1.2&gt;
          DocumentRoot "/siteler/eorg"
          ServerName example.org
          # ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 192.168.1.20&gt;
          DocumentRoot "/siteler/enet"
          ServerName example.enet
          ServerAlias *.example.net
          # ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Böylece sanal konağa hem yeni (bir IP’ye dayalı sanal konak olarak)
            hem de eski adresinden (bir isme dayalı sanal konak olarak)
            eriÅŸilebilecektir.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="serverpath" id="serverpath"><code>ServerPath</code> yönergesinin kullanımı</a></h2>
          
      
          <p>İsme dayalı iki sanal konağı olan bir sunucumuz olsun. Doğru sanal
            konağa erişebilmek için istemcinin doğru <code>Host:</code> başlığı
            göndermesi gerekir. Eski HTTP/1.0 istemcileri böyle bir başlık
            göndermedikleri için Apache istemcinin hangi sanal konağa erişmek
            istediÄŸini bilemez (ve isteÄŸe ilk sanal konaktan hizmet sunar). Daha iyi
            bir geriye uyumluluk sağlamak için isme dayalı sanal konağa bir önek
            bağlantısı içeren bir bilgilendirme sayfası sunmak üzere yeni bir sanal
            konak oluÅŸturabiliriz.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost 172.20.30.40&gt;
          # ilk sanal konak
          DocumentRoot "/siteler/baska"
          RewriteEngine On
          RewriteRule "." "/siteler/baska/index.html"
          # ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot /siteler/baska/bir
          ServerName "bir.baska.tld"
          ServerPath "/bir/"
          RewriteEngine On
          RewriteRule "^(/bir/.*) /siteler/baska$1"
          # ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/siteler/baska/iki"
          ServerName iki.baska.tld
          ServerPath "/iki/"
          RewriteEngine On
          RewriteRule "^(/iki/.*)" "/siteler/baska$1"
          # ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p><code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code> yönergesinden dolayı
            <code>http://bir.baska.tld/bir/</code> şeklinde yapılan isteklere
            <em>daima</em> “bir†sanal konağı hizmet sunacaktır.</p>
      
          <p><code>http://bir.baska.tld/</code> şeklinde yapılan isteklere ise
            istemcinin doğru <code>Host:</code> başlığı göndermesi şartıyla
            “bir†sanal konağı hizmet sunacaktır. İstemci, bir
            <code>Host:</code> başlığı göndermediği takdirde ilk konaktan bir
            bilgilendirme sayfası alacaktır.</p>
      
          <p>Yalnız buradaki bir tuhaflığa dikkat edin: Eğer istemci bir
            <code>Host:</code> başlığı göndermeden
            <code>http://iki.baska.tld/bir/</code> ÅŸeklinde bir istek yaparsa bu
            isteğe de “bir†sanal konağı hizmet sunacaktır.</p>
      
          <p><code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> yönergesi, bir
            istemcinin, bir URL öneki belirtsin ya da belirtmesin doğru
            <code>Host:</code> başlığı gönderdiğinden emin olmak için
            kullanılmıştır.</p>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/vhosts/examples.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/examples.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/examples.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/examples.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/examples.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/examples.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/details.html.ko.euc-kr����������������������������������������������0000644�0000000�0000050�00000047575�13412755316�021130� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>°¡»óÈ£½ºÆ® ã±â¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ¼³¸í - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">°¡»óÈ£½ºÆ®</a></div><div id="page-content"><div id="preamble"><h1>°¡»óÈ£½ºÆ® ã±â¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ¼³¸í</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/vhosts/details.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/details.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/details.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/details.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      
          <p>°¡»óÈ£½ºÆ® ÄÚµå´Â <strong>¾ÆÆÄÄ¡ 1.3</strong>¿¡¼­ °ÅÀÇ ´Ù½Ã
          ÀÛ¼ºµÇ¾ú´Ù. ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡°¡ ¿äûÀ» ¹ÞÀ¸¸é ¾î¶² °¡»óÈ£½ºÆ®°¡
          ¼­ºñ½ºÇÒÁö °áÁ¤ÇÏ´Â ¹æ¹ýÀ» ¼³¸íÇÑ´Ù. »õ·Î¿î <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code> Áö½Ã¾î¸¦ »ç¿ëÇÏ¿©
          °¡»óÈ£½ºÆ® ¼³Á¤ÀÌ 1.3 ¹öÀü ÀÌÀüº¸´Ù ´õ ½±°í ¾ÈÀüÇØÁ³´Ù.</p>
      
          <p>¾î¶»°Ô µ¿ÀÛÇÏ´ÂÁö ÀÌÇØÇÏÁö¾Ê°í ´ÜÁö <cite>µ¿ÀÛÇϰԸ¸</cite>
          ÇÏ°í ½Í´Ù¸é, <a href="examples.html">¿¹Á¦µé</a>À» Âü°íÇ϶ó.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#configparsing">¼³Á¤ÆÄÀÏ Àбâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#hostmatching">°¡»óÈ£½ºÆ® ã±â</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#tips">ÆÁ</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configparsing" id="configparsing">¼³Á¤ÆÄÀÏ Àбâ</a></h2>
      
          <p><code>&lt;VirtualHost&gt;</code> ¼³Á¤À» Á¦¿ÜÇÑ ¼³Á¤ÀÌ
          <em>ÁÖ¼­¹ö</em>¸¦ ¸¸µç´Ù. <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> ¼½¼ÇÀ¸·Î Á¤ÀÇÇÑ
          ºÎºÐÀ» °¡»óÈ£½ºÆ®¶ó°í ºÎ¸¥´Ù.</p>
      
          <p><code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code>,
          <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>,
          <code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code>,
          <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> Áö½Ã¾î´Â
          ¼­¹ö Á¤ÀÇ ¾î´À°÷¿¡¼­µµ »ç¿ëÇÒ ¼ö ÀÖ´Ù. ±×·¯³ª °°Àº Áö½Ã¾î°¡
          ¿©·¯¹ø ³ª¿À¸é (±× ¼­¹ö¿¡¼­) ¸¶Áö¸· Áö½Ã¾î¸¸ÀÌ À¯È¿ÇÏ´Ù.</p>
      
          <p>ÁÖ¼­¹ö <code>Listen</code>ÀÇ ±âº»°ªÀº 80ÀÌ´Ù. ÁÖ¼­¹öÀÇ
          <code>ServerPath</code>³ª <code>ServerAlias</code>¿¡´Â
          ±âº»°ªÀº ¾ø´Ù. <code>ServerName</code>ÀÇ ±âº»°ªÀº ¼­¹öÀÇ
          IP ÁÖ¼ÒÀÌ´Ù.</p>
      
          <p>ÁÖ¼­¹öÀÇ Listen Áö½Ã¾î´Â µÎ°¡Áö ±â´ÉÀ» ÇÑ´Ù. ù°´Â
          ¾ÆÆÄÄ¡°¡ ¿¬°áÇÒ ±âº» ³×Æ®¿÷ Æ÷Æ®¸¦ ÁöÁ¤ÇÏ´Â ÀÏÀÌ´Ù. µÑ°´Â
          ¸®´ÙÀÌ·º¼ÇÇÒ Àý´ë URI¿¡ »ç¿ëÇÒ Æ÷Æ® ¹øÈ£¸¦ ÁöÁ¤ÇÏ´Â ÀÏÀÌ´Ù.</p>
      
          <p>ÁÖ¼­¹ö¿Í ´Þ¸® °¡»óÈ£½ºÆ®ÀÇ Æ÷Æ®´Â ¾ÆÆÄÄ¡°¡ ¿¬°áÀ» ±â´Ù¸®´Â
          Æ÷Æ®¿¡ ¿µÇâÀ» ÁÖÁö <em>¾Ê´Â´Ù</em>.</p>
      
          <p><code>VirtualHost</code> Áö½Ã¾î¿¡ Æ÷Æ®¸¦ ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù.
          Æ÷Æ®¸¦ ÁöÁ¤ÇÏÁö¾ÊÀ¸¸é ÁÖ¼­¹öÀÇ °¡Àå ÃÖ±Ù <code>Listen</code>
          °ªÀ» »ç¿ëÇÑ´Ù. Ưº°ÇÑ Æ÷Æ® <code>*</code>´Â ¾î¶² Æ÷Æ®¶óµµ
          ÁöĪÇÏ´Â ¿ÍÀϵåÄ«µåÀÌ´Ù. (DNS °Ë»ö °á°úÀÇ ¿©·¯ <code>A</code>
          ·¹Äڵ带 Æ÷ÇÔÇÏ¿©) °¡»óÈ£½ºÆ®ÀÇ ÁÖ¼Ò¸¦ ¸ðµÎ ÃÑĪÇÏ¿© °¡»óÈ£½ºÆ®ÀÇ
          <em>ÁÖ¼ÒÁýÇÕ(address set)</em>À̶ó°í ºÎ¸¥´Ù.</p>
      
          <p>ƯÁ¤ IP ÁÖ¼Ò¿¡ ´ëÇÑ <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code> Áö½Ã¾î°¡ ¾ø´Ù¸é
          ±× ÁÖ¼Ò¸¦ Æ÷ÇÔÇϴ ù¹øÂ° °¡»óÈ£½ºÆ®¸¦ IP±â¹Ý °¡»óÈ£½ºÆ®·Î Ãë±ÞÇÑ´Ù.
          IP ÁÖ¼Ò¿¡ ¿ÍÀϵåÄ«µå <code>*</code>¸¦ »ç¿ëÇÒ ¼öµµ ÀÖ´Ù.</p>
      
          <p>À̸§±â¹Ý °¡»óÈ£½ºÆ®¸¦ »ç¿ëÇÑ´Ù¸é À̸§±â¹Ý °¡»óÈ£½ºÆ®¿¡
          »ç¿ëÇÒ IP ÁÖ¼Ò¸¦ <code>NameVirtualHost</code> Áö½Ã¾î¿¡
          »ç¿ëÇØ¾ß <em>ÇÑ´Ù</em>. Áï, ¼³Á¤ÆÄÀÏÀÇ <code>NameVirtualHost</code>
          Áö½Ã¾î¿¡ À̸§±â¹Ý °¡»óÈ£½ºÆ®ÀÇ È£½ºÆ®º°¸í(CNAME)¿¡ ÇØ´çÇÏ´Â
          IP ÁÖ¼Ò¸¦ ÁöÁ¤ÇØ¾ß ÇÑ´Ù.</p>
      
          <p>ƯÁ¤ IP:Æ÷Æ® ½Ö¿¡ ´ëÇØ ¿ÀÁ÷ ÇÑ <code>NameVirtualHost</code>
          Áö½Ã¾î¸¸À» »ç¿ëÇÑ´Ù¸é, ¿©·¯ <code>NameVirtualHost</code> Áö½Ã¾î¿Í
          <code>VirtualHost</code> Áö½Ã¾î¸¦ ¼¯¾î¼­ »ç¿ëÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p><code>NameVirtualHost</code>¿Í <code>VirtualHost</code>
          Áö½Ã¾îÀÇ ¼ø¼­´Â Áß¿äÇÏÁö ¾Ê±â¶§¹®¿¡ ´ÙÀ½ µÎ ¿¹´Â °°´Ù (¿ÀÁ÷
          <em>ÇÑ</em> ÁÖ¼ÒÁýÇÕ¿¡ ´ëÇÑ <code>VirtualHost</code>ÀÇ
          ¼ø¼­°¡ Áß¿äÇÏ´Ù. ¾Æ·¡ Âü°í):</p>
      
      <table><tr>
      <td><div class="example"><p><code>
        NameVirtualHost 111.22.33.44<br />
        &lt;VirtualHost 111.22.33.44&gt;<br />
        # ¼­¹ö A<br />
        ...<br />
        &lt;/VirtualHost&gt;<br />
        &lt;VirtualHost 111.22.33.44&gt;<br />
        # ¼­¹ö B<br />
        ...<br />
        &lt;/VirtualHost&gt;<br />
        <br />
        NameVirtualHost 111.22.33.55<br />
        &lt;VirtualHost 111.22.33.55&gt;<br />
        # ¼­¹ö C<br />
        ...<br />
        &lt;/VirtualHost&gt;<br />
        &lt;VirtualHost 111.22.33.55&gt;<br />
        # ¼­¹ö D<br />
        ...<br />
        &lt;/VirtualHost&gt;
      </code></p></div></td>
      <td><div class="example"><p><code>
        &lt;VirtualHost 111.22.33.44&gt;<br />
        # ¼­¹ö A<br />
        &lt;/VirtualHost&gt;<br />
        &lt;VirtualHost 111.22.33.55&gt;<br />
        # ¼­¹ö C<br />
        ...<br />
        &lt;/VirtualHost&gt;<br />
        &lt;VirtualHost 111.22.33.44&gt;<br />
        # ¼­¹ö B<br />
        ...<br />
        &lt;/VirtualHost&gt;<br />
        &lt;VirtualHost 111.22.33.55&gt;<br />
        # ¼­¹ö D<br />
        ...<br />
        &lt;/VirtualHost&gt;<br />
        <br />
        NameVirtualHost 111.22.33.44<br />
        NameVirtualHost 111.22.33.55<br />
        <br />
      </code></p></div></td>
      </tr></table>
      
      
          <p>(¿ÞÂÊ ¼³Á¤ÀÌ ´õ ÀÐ±â ÆíÇÏ´Ù.)</p>
      
          <p><code>VirtualHost</code> Áö½Ã¾î¸¦ ÀÐÀ» ´ÙÀ½, °¡»óÈ£½ºÆ®
          ¼­¹ö´Â <code>VirtualHost</code> Áö½Ã¾î¿¡ ÁöÁ¤ÇÑ Æ÷Æ®¸¦ ±âº»
          <code>Listen</code>À¸·Î ÇÑ´Ù.</p>
      
          <p><code>VirtualHost</code> Áö½Ã¾îÀÇ À̸§ÀÌ ¸ðµÎ °°Àº
          ÁÖ¼ÒÁýÇÕ¿¡ ¼ÓÇÑ´Ù¸é <code>ServerAlias</code>¿Í °°ÀÌ Ãë±ÞÇÑ´Ù
          (±×·¯³ª ´Ù¸¥ <code>ServerAlias</code>ÀÇ ¿µÇâÀ» ¹ÞÁö ¾Ê´Â´Ù).
          °¡»óÈ£½ºÆ®¿¡ Ãß°¡·Î »ç¿ëÇÑ <code>Listen</code>Àº ÁÖ¼ÒÁýÇÕÀÌ
          ÁöÁ¤ÇÑ Æ÷Æ®¿¡ ¿µÇâÀ» ÁÖÁö ¾ÊÀ½À» ÁÖÀÇÇ϶ó.</p>
      
          <p>½ÃÀÛÇÒ¶§ IP ÁÖ¼Ò ¸ñ·ÏÀ» ¸¸µé¾î ÇØ½¬Å×ÀÌºí¿¡ Ãß°¡ÇÑ´Ù.
          <code>NameVirtualHost</code> Áö½Ã¾î¿¡ IP ÁÖ¼Ò¸¦ »ç¿ëÇϸé
          ¸ñ·ÏÀº ±× IP ÁÖ¼Ò¿¡ ´ëÇÑ ¸ðµç À̸§±â¹Ý °¡»óÈ£½ºÆ®¸¦ Æ÷ÇÔÇÑ´Ù.
          ±× ÁÖ¼Ò¿¡ ´ëÇÑ °¡»óÈ£½ºÆ®°¡ ¾ø´Ù¸é <code>NameVirtualHost</code>
          Áö½Ã¾î¸¦ ¹«½ÃÇÏ°í ·Î±×¿¡ ¿À·ù¸¦ ±â·ÏÇÑ´Ù. IP±â¹Ý °¡»óÈ£½ºÆ®´Â
          ÇØ½¬Å×ÀÌºí¿¡ ¸ñ·ÏÀ» Ãß°¡ÇÏÁö ¾Ê´Â´Ù.</p>
      
          <p>ºü¸¥ ÇØ½¬ÇÔ¼ö¸¦ »ç¿ëÇϱ⶧¹®¿¡ ¿äû½Ã IP ÁÖ¼Ò¸¦ ÇØ½ÌÇÏ´Â
          ºÎ´ãÀº °ÅÀÇ ¾ø´Ù. ¶Ç ÇØ½¬Å×À̺íÀº IP ÁÖ¼ÒÀÇ ¸¶Áö¸· ºÎºÐÀÇ
          Â÷ÀÌ¿¡ ÃÖÀûÈ­µÇÀÖ´Ù.</p>
      
          <p>°¡»óÈ£½ºÆ®¿¡ ¿©·¯ ±âº»°ªÀÌ ¼³Á¤µÈ´Ù. ƯÈ÷:</p>
      
          <ol>
            <li>°¡»óÈ£½ºÆ®¿¡ <code class="directive"><a href="../mod/core.html#serveradmin">ServerAdmin</a></code>,
            <code class="directive"><a href="../mod/core.html#resourceconfig">ResourceConfig</a></code>,
            <code class="directive"><a href="../mod/core.html#accessconfig">AccessConfig</a></code>,
            <code class="directive"><a href="../mod/core.html#timeout">Timeout</a></code>,
            <code class="directive"><a href="../mod/core.html#keepalivetimeout">KeepAliveTimeout</a></code>,
            <code class="directive"><a href="../mod/core.html#keepalive">KeepAlive</a></code>,
            <code class="directive"><a href="../mod/core.html#maxkeepaliverequests">MaxKeepAliveRequests</a></code>,
            <code class="directive"><a href="../mod/core.html#sendbuffersize">SendBufferSize</a></code>
            Áö½Ã¾î°¡ ¾ø´Ù¸é ÁÖ¼­¹ö¿¡¼­ ÇØ´ç °ªÀ» °¡Á®¿Â´Ù. (Áï,
            ÁÖ¼­¹öÀÇ ¼³Á¤°ªÀ» »ç¿ëÇÑ´Ù.)</li>
      
            <li>°¡»óÈ£½ºÆ®ÀÇ µð·ºÅ丮 ±âº»±ÇÇÑÀ» Á¤ÀÇÇÏ´Â "ÂüÁ¶
            ±âº»°ª(lookup defaults)"Àº ÁÖ¼­¹öÀÇ ¼³Á¤°ú ÇÕÃÄÁø´Ù.
            ¸ðµâÀÇ µð·ºÅ丮´ç ¼³Á¤(per-directory configuration)µµ
            ¿©±â¿¡ ÇØ´çµÈ´Ù.</li>
      
            <li>°¢ ¸ðµâÀÇ ¼­¹ö´ç ¼³Á¤(per-server config)Àº ÁÖ¼­¹öÀÇ
            ¼³Á¤°ú °¡»óÈ£½ºÆ®ÀÇ ¼³Á¤À» ÇÕÄ£´Ù.</li>
          </ol>
      
          <p>±âº»ÀûÀ¸·Î ÁÖ¼­¹ö´Â °¡»óÈ£½ºÆ®¸¦ ¸¸µå´Â "±âº»" ȤÀº "±â¹Ý"ÀÌ
          µÈ´Ù. ±×·¯³ª ¼³Á¤ÆÄÀÏ¿¡¼­ ÁÖ¼­¹ö¸¦ Á¤ÀÇÇÏ´Â À§Ä¡´Â °ü°è¾ø´Ù.
          ¸¶Áö¸·À¸·Î ¼³Á¤À» ÇÕÄ¡±â Àü¿¡ ÁÖ¼­¹öÀÇ ¸ðµç ¼³Á¤À» ÀоîµéÀδÙ.
          ±×·¡¼­ ÁÖ¼­¹ö Á¤Àǰ¡ °¡»óÈ£½ºÆ® Á¤ÀÇ µÚ¿¡ ³ª¿Íµµ °¡»óÈ£½ºÆ®
          Á¤ÀÇ¿¡ ¿µÇâÀ» ÁØ´Ù.</p>
      
          <p>ÁÖ¼­¹ö¿¡ <code>ServerName</code>ÀÌ ¾ø´Ù¸é À¥¼­¹ö¸¦ ½ÇÇàÇÏ´Â
          ÄÄÇ»ÅÍÀÇ È£½ºÆ®¸íÀ» ´ë½Å »ç¿ëÇÑ´Ù. ÁÖ¼­¹öÀÇ
          <code>ServerName</code>À» DNS °Ì»öÇÏ¿© ¾òÀº IP ÁÖ¼ÒµéÀ»
          <em>ÁÖ¼­¹ö ÁÖ¼ÒÁýÇÕ</em>À̶ó°í ºÎ¸¥´Ù.</p>
      
          <p>À̸§±â¹Ý °¡»óÈ£½ºÆ®ÀÇ <code>ServerName</code>À» Á¤ÀÇÇÏÁö
          ¾ÊÀ¸¸é °¡»óÈ£½ºÆ®¸¦ Á¤ÀÇÇÏ´Â <code>VirtualHost</code>¿¡¼­
          óÀ½À¸·Î ³ª¿Â ÁÖ¼Ò¸¦ ±âº»°ªÀ¸·Î »ç¿ëÇÑ´Ù.</p>
      
          <p>Ưº°ÇÑ <code>_default_</code> ¿ÍÀÏÆ®Ä«µå¸¦ Æ÷ÇÔÇÏ´Â
          °¡»óÈ£½ºÆ®´Â ÁÖ¼­¹ö¿Í °°Àº <code>ServerName</code>À» °¡Áø´Ù.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="hostmatching" id="hostmatching">°¡»óÈ£½ºÆ® ã±â</a></h2>
      
          <p>¼­¹ö´Â ¾Æ·¡¿Í °°Àº ¹æ¹ýÀ¸·Î ¾î¶² °¡»óÈ£½ºÆ®°¡ ¿äûÀ»
          ó¸®ÇÒÁö °áÁ¤ÇÑ´Ù:</p>
      
          <h3><a name="hashtable" id="hashtable">ÇØ½¬Å×À̺í ã±â</a></h3>
      
          <p>Ŭ¶óÀÌ¾ðÆ®°¡ óÀ½ ¿¬°áÇÏ¸é ¿¬°áÇÑ IP ÁÖ¼Ò¸¦ ³»ºÎ IP
          ÇØ½¬Å×ÀÌºí¿¡¼­ ã´Â´Ù.</p>
      
          <p>IP ÁÖ¼Ò¸¦ ãÀ» ¼ö ¾ø°í Ŭ¶óÀÌ¾ðÆ®°¡ ¿äûÀ» º¸³½ Æ÷Æ®¿¡
          ÇØ´çÇÏ´Â °¡»óÈ£½ºÆ®°¡ ÀÖ´Ù¸é, <code>_default_</code> °¡»óÈ£½ºÆ®°¡
          ¿äûÀ» ¼­ºñ½ºÇÑ´Ù. <code>_default_</code> °¡»óÈ£½ºÆ®°¡
          ¾ø´Ù¸é ÁÖ¼­¹ö°¡ ¿äûÀ» ¼­ºñ½ºÇÑ´Ù.</p>
      
          <p>ÇØ½¬Å×ÀÌºí¿¡ IP ÁÖ¼Ò°¡ ¾øÁö¸¸ Æ÷Æ® ¹øÈ£°¡
          <code>NameVirtualHost *</code>¿¡ ÇØ´çÇÒ ¼ö ÀÖ´Ù. ÀÌ °æ¿ì
          À̸§±â¹Ý °¡»óÈ£½ºÆ®Ã³·³ ó¸®ÇÑ´Ù.</p>
      
          <p>ã¾Ò´Ù¸é (¸ñ·Ï¿¡¼­ IP ÁÖ¼Ò¿¡ ÇØ´çÇÏ´Â Ç׸ñÀ» ãÀ¸¸é),
          IP±â¹Ý °¡»óÈ£½ºÆ®ÀÎÁö À̸§±â¹Ý °¡»óÈ£½ºÆ®ÀÎÁö °áÁ¤ÇÑ´Ù.</p>
      
          
      
          <h3><a name="ipbased" id="ipbased">IP±â¹Ý °¡»óÈ£½ºÆ®</a></h3>
      
          <p>ãÀº Ç׸ñ¿¡ À̸§ ¸ñ·ÏÀÌ ¾ø´Ù¸é IP±â¹Ý °¡»óÈ£½ºÆ®ÀÌ´Ù.
          ´õ ÀÌ»ó ÀÛ¾÷ÀÌ ÇÊ¿ä¾ø°í, ±× °¡»óÈ£½ºÆ®°¡ ¿äûÀ» ó¸®ÇÑ´Ù.</p>
      
          
      
          <h3><a name="namebased" id="namebased">À̸§±â¹Ý °¡»óÈ£½ºÆ®</a></h3>
      
          <p>À̸§ ¸ñ·Ï¿¡ ÇѰ³ ÀÌ»óÀÇ °¡»óÈ£½ºÆ® ±¸Á¶°¡ Æ÷ÇԵǸé
          À̸§±â¹Ý °¡»óÈ£½ºÆ®ÀÌ´Ù. ÀÌ ¸ñ·Ï¿¡¼­ °¡»óÈ£½ºÆ®µéÀº ¼³Á¤ÆÄÀÏÀÇ
          <code>VirtualHost</code> ¼ø¼­´ë·Î À§Ä¡ÇÑ´Ù.</p>
      
          <p>¸ñ·Ï¿¡¼­ ù¹øÂ° °¡»óÈ£½ºÆ®(¼³Á¤ÆÄÀÏ¿¡¼­ ÇØ´ç IP ÁÖ¼Ò¸¦
          Æ÷ÇÔÇϴ ù¹øÂ° °¡»óÈ£½ºÆ®)´Â °¡Àå ³ôÀº ¿ì¼±¼øÀ§¸¦ °¡Áö¸ç,
          ¼­¹ö¸íÀ» ¾Ë ¼ö ¾ø°Å³ª <code>Host:</code> Çì´õ°¡ ¾ø´Â ¿äûÀ»
          ó¸®ÇÑ´Ù.</p>
      
          <p>Ŭ¶óÀÌ¾ðÆ®°¡ <code>Host:</code> Çì´õ¸¦ ÁÖ¸é, ¸ñ·Ï¿¡¼­
          ù¹øÂ°·Î <code>ServerName</code>À̳ª
          <code>ServerAlias</code>°¡ ´ëÀÀÇÏ´Â °¡»óÈ£½ºÆ®°¡ ¿äûÀ»
          ¼­ºñ½ºÇÑ´Ù. <code>Host:</code> Çì´õ¿¡ Æ÷Æ® ¹øÈ£°¡ ³ª¿Ã ¼ö
          ÀÖÁö¸¸, ¾ÆÆÄÄ¡´Â Ç×»ó Ŭ¶óÀÌ¾ðÆ®°¡ ¿äûÀ» º¸³½ ½ÇÁ¦ Æ÷Æ®¸¦
          ã´Â´Ù.</p>
      
          <p>Ŭ¶óÀÌ¾ðÆ®°¡ <code>Host:</code> Çì´õ¾øÀÌ HTTP/1.0 ¿äûÀ»
          Çϸé Ŭ¶óÀÌ¾ðÆ®°¡ ¾î¶² ¼­¹ö¿¡ ¿¬°áÇÏ·Á´ÂÁö ¾Ë ¼ö ¾ø±â¶§¹®¿¡
          ¿äûÀÇ URI¿¡ ÇØ´çÇÏ´Â <code>ServerPath</code>°¡ ÀÖ´ÂÁö ã´Â´Ù.
          ¸ñ·Ï¿¡¼­ Á¦ÀÏ ¸ÕÀú ãÀº °æ·Î¸¦ »ç¿ëÇϰí, ±× °¡»óÈ£½ºÆ®°¡
          ¿äûÀ» ¼­ºñ½ºÇÑ´Ù.</p>
      
          <p>´ëÀÀÇÏ´Â °¡»óÈ£½ºÆ®¸¦ ãÀ» ¼ö ¾ø´Ù¸é, (ÀÌ¹Ì ¾Õ¿¡ ¸»ÇßµíÀÌ)
          Ŭ¶óÀÌ¾ðÆ®°¡ ¿¬°áÇÑ IP¿¡ ´ëÇÑ ¸ñ·Ï¿¡¼­ ÀÏÄ¡ÇÏ´Â Æ÷Æ® ¹øÈ£¸¦
          Æ÷ÇÔÇϴ ù¹øÂ° °¡»óÈ£½ºÆ®°¡ ¿äûÀ» ¼­ºñ½ºÇÑ´Ù.</p>
      
          
      
          <h3><a name="persistent" id="persistent">Áö¼Ó ¿¬°á</a></h3>
      
          <p>IP´Â À§¿¡¼­ ¼³¸íÇѵ¥·Î ƯÁ¤ TCP/IP ¼¼¼Ç´ç <em>Çѹø¸¸</em>
          ãÁö¸¸, À̸§Àº KeepAlive/Áö¼Ó ¿¬°áµ¿¾È <em>¸Å</em> ¿äû¶§¸¶´Ù
          ã´Â´Ù. Áï, Ŭ¶óÀÌ¾ðÆ®´Â Áö¼Ó ¿¬°áµ¿¾È ¿©·¯ À̸§±â¹Ý
          °¡»óÈ£½ºÆ®ÀÇ ÆäÀÌÁö¸¦ ¿äûÇÒ ¼ö ÀÖ´Ù.</p>
      
          
      
          <h3><a name="absoluteURI" id="absoluteURI">Àý´ë URI</a></h3>
      
          <p>¿äûÀÇ URI°¡ Àý´ë URIÀ̰í Ŭ¶óÀÌ¾ðÆ®°¡ º¸³½ ¿äûÀÇ
          È£½ºÆ®¸í°ú Æ÷Æ®°¡ ÁÖ¼­¹ö³ª ƯÁ¤ °¡»óÈ£½ºÆ®¿¡ ÇØ´çÇϸé,
          ±× ÁÖ¼­¹ö ȤÀº °¡»óÈ£½ºÆ®´Â URI ¾ÕÀÇ ½ºÅ´/È£½ºÆ®¸í/Æ÷Æ®
          ºÎºÐÀ» Á¦¿ÜÇÑ ³ª¸ÓÁö »ó´ë URI¸¦ ¼­ºñ½ºÇÑ´Ù. ÇØ´çÇÏ´Â
          ÁÖ¼­¹ö³ª °¡»óÈ£½ºÆ®°¡ ¾ø´Ù¸é URI¸¦ ±×´ë·Î µÎ°í ¿äûÀ»
          ÇÁ·Ï½Ã ¿äûÀ¸·Î ó¸®ÇÑ´Ù.</p>
      
      
      <h3><a name="observations" id="observations">ÁÖÀÇ</a></h3>
      
          <ul>
            <li>À̸§±â¹Ý °¡»óÈ£½ºÆ®¿Í IP±â¹Ý °¡»óÈ£½ºÆ®´Â ¼­·Î¿¡°Ô
           ¿µÇâÀ» ÁÖÁö ¾Ê´Â´Ù. IP±â¹Ý °¡»óÈ£½ºÆ®¸¦ ÀÚ½ÅÀÇ À̸§ÁýÇÕ
           IP ÁÖ¼Ò¿Ü¿¡ ¾î¶² Áּҷεµ Á¢±ÙÇÒ ¼ö ¾ø´Ù. À̸§±â¹Ý
           °¡»óÈ£½ºÆ®µµ ¸¶Âù°¡Áö´Ù. À̸§±â¹Ý °¡»óÈ£½ºÆ®´Â
           <code>NameVirtualHost</code> Áö½Ã¾î·Î Á¤ÀÇÇÑ ÁÖ¼ÒÁýÇÕÀÇ
           IP ÁÖ¼Ò¸¦ ÅëÇØ¼­¸¸ Á¢±ÙÇÒ ¼ö ÀÖ´Ù.</li>
      
            <li>IP±â¹Ý °¡»óÈ£½ºÆ®´Â <code>ServerAlias</code>¿Í
            <code>ServerPath</code>¸¦ Àý´ë·Î °Ë»çÇÏÁö ¾Ê´Â´Ù.</li>
      
            <li>¼³Á¤ÆÄÀÏ¿¡¼­ À̸§±â¹Ý °¡»óÈ£½ºÆ®, IP±â¹Ý °¡»óÈ£½ºÆ®,
            <code>_default_</code> °¡»óÈ£½ºÆ®, <code>NameVirtualHost</code>
            Áö½Ã¾îÀÇ ¼ø¼­´Â Áß¿äÇÏÁö ¾Ê´Ù. ƯÁ¤ ÁÖ¼ÒÁýÇÕ¿¡ ´ëÇÑ
            À̸§±â¹Ý °¡»óÈ£½ºÆ®µéÀÇ ¼ø¼­¸¸ÀÌ Áß¿äÇÏ´Ù. ¼³Á¤ÆÄÀÏ¿¡¼­
            ¾Õ¿¡ ³ª¿À´Â À̸§±â¹Ý °¡»óÈ£½ºÆ®´Â ÀÚ½ÅÀÌ ¼ÓÇÑ ÁÖ¼ÒÁýÇÕ¿¡¼­
            °¡Àå ³ôÀº ¿ì¼±¼øÀ§¸¦ °¡Áø´Ù.</li>
      
            <li>º¸¾ÈÀ» À§ÇØ <code>Host:</code> Çì´õ¿¡ Æ÷ÇÔµÈ Æ÷Æ®
            ¹øÈ£´Â Àý´ë·Î »ç¿ëÇÏÁö ¾Ê´Â´Ù. ¾ÆÆÄÄ¡´Â Ç×»ó Ŭ¶óÀÌ¾ðÆ®°¡
            ¿äûÀ» º¸³½ ½ÇÁ¦ Æ÷Æ®¸¦ »ç¿ëÇÑ´Ù.</li>
      
            <li>(µÑ »çÀ̸¦ ±¸º°ÇÒ <code>Host:</code> Çì´õ°¡ ¾ø´Ù°í
            °¡Á¤Çϸé,) <code>ServerPath</code> Áö½Ã¾î°¡ ¼³Á¤ÆÄÀÏ¿¡¼­
            µÚ¿¡ ³ª¿À´Â ´Ù¸¥ <code>ServerPath</code> Áö½Ã¾îÀÇ ¾ÕºÎºÐÀ»
            ÁöĪÇÏ´Â °æ¿ì Ç×»ó ¾Õ¿¡ ³ª¿Â Áö½Ã¾î¸¦ »ç¿ëÇÑ´Ù.</li>
      
            <li>µÎ IP±â¹Ý °¡»óÈ£½ºÆ®°¡ °°Àº ÁÖ¼Ò¸¦ °¡Áö¸é, Ç×»ó
            ¼³Á¤ÆÄÀÏ¿¡¼­ ¾Õ¿¡ ³ª¿À´Â °¡»óÈ£½ºÆ®¸¦ »ç¿ëÇÑ´Ù. ÀÌ·± ÀÏÀº
            ¾Æ¹«µµ ¸ð¸£°Ô ÀϾ ¼ö ÀÖ´Ù. ¼­¹ö°¡ ÀÌ·± »óȲÀ» ¹ß°ßÇϸé
            ¿À·ù ·Î±×ÆÄÀÏ¿¡ °æ°í¸¦ ±â·ÏÇÑ´Ù.</li>
      
            <li><code>_default_</code> °¡»óÈ£½ºÆ®´Â ¿äûÀÇ IP ÁÖ¼Ò<em>¿Í</em>
            Æ÷Æ® ¹øÈ£¿¡ ÇØ´çÇÏ´Â °¡»óÈ£½ºÆ®°¡ ¾øÀ»¶§¸¸ ¿äûÀ» ó¸®ÇÑ´Ù.
            Ŭ¶óÀÌ¾ðÆ®°¡ ¿äûÀ» º¸³½ Æ÷Æ® ¹øÈ£°¡ <code>_default_</code>
            °¡»óÈ£½ºÆ®ÀÇ Æ÷Æ® ¹øÈ£(±âº»°ªÀº <code>Listen</code>)¿Í
            °°À»¶§¸¸ ¿äûÀ» ó¸®ÇÑ´Ù. ¾î¶² Æ÷Æ®ÀÇ ¿äûÀÌ¶óµµ Àâ±âÀ§ÇØ
            (<em>¿¹¸¦ µé¾î</em>, <code>_default_:*</code>) ¿ÍÀϵåÄ«µå
            Æ÷Æ®¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù. <code>NameVirtualHost *</code>
            °¡»óÈ£½ºÆ®µµ ¸¶Âù°¡Áö´Ù.</li>
      
            <li>ÁÖ¼­¹ö´Â Ŭ¶óÀÌ¾ðÆ®°¡ ¿¬°áÇÑ IP ÁÖ¼Ò¿Í Æ÷Æ® ¹øÈ£¿¡
            ÇØ´çÇÏ´Â (<code>_default_</code> °¡»óÈ£½ºÆ®¸¦ Æ÷ÇÔÇÏ¿©)
            °¡»óÈ£½ºÆ®°¡ ¾øÀ»¶§¸¸ ¿äûÀ» ¼­ºñ½ºÇÑ´Ù. Áï, ÁÖ¼­¹ö´Â
            (±× Æ÷Æ®¿¡ ÇØ´çÇÏ´Â <code>_default_</code> °¡»óÈ£½ºÆ®°¡
            ¾ø´Ù¸é) ÁöÁ¤ÇÏÁö¾ÊÀº ÁÖ¼Ò/Æ÷Æ® ½Ö¿¡ ´ëÇÑ ¿äû¸¸À» ó¸®ÇÑ´Ù.</li>
      
            <li>Ŭ¶óÀÌ¾ðÆ®°¡ (<em>¿¹¸¦ µé¾î</em>, <code>NameVirtualHost</code>
            Áö½Ã¾î¿¡¼­) À̸§±â¹Ý °¡»óÈ£½ºÆ® ÁÖ¼Ò(¿Í Æ÷Æ®)¿¡ ¿¬°áÇÑ
            °æ¿ì <code>Host:</code> Çì´õ¸¦ ¾Ë ¼ö ¾ø°Å³ª Çì´õ°¡ ¾ø´Â
            ¿äûÀ» º¸³»¸é ¿äûÀº <em>Àý´ë·Î</em> <code>_default_</code>
            °¡»óÈ£½ºÆ®³ª ÁÖ¼­¹ö¿¡¼­ ó¸®ÇÏÁö ¾Ê´Â´Ù.</li>
      
            <li>½ÃÀÛÇÒ¶§ ¼­¹ö°¡ DNS¸¦ ÀÇÁ¸ÇÏÁö ¾ÊÀ¸·Á¸é Àý´ë·Î
            <code>VirtualHost</code> Áö½Ã¾î¿¡ DNS À̸§À» »ç¿ëÇÏÁö¸¶¶ó.
            °Ô´Ù°¡ ¿­°ÅÇÑ ¸ðµç µµ¸ÞÀÎÀÇ DNS¸¦ ÅëÁ¦ÇÏÁö ¾Ê´Â´Ù¸é
            º¸¾È»ó À§Çèµµ ÀÖ´Ù. ÀÌ¿¡ ´ëÇÑ <a href="../dns-caveats.html">Á¤º¸</a>°¡ ÀÖ´Ù.</li>
      
            <li>°¢ °¡»óÈ£½ºÆ®¸¶´Ù <code>ServerName</code>¸¦ Ç×»ó
            Á¤ÀÇÇØ¾ß ÇÑ´Ù. ¾È±×·¯¸é °¡»óÈ£½ºÆ®¸¶´Ù DNS¸¦ ã°Ô µÈ´Ù.</li>
            </ul>
            
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="tips" id="tips">ÆÁ</a></h2>
      
          <p><a href="../dns-caveats.html#tips">DNS ¹®Á¦</a> ÆäÀÌÁöÀÇ
          ÆÁ¿¡ Ãß°¡·Î ¾Æ·¡¿¡ ÆÁÀÌ ÀÖ´Ù:</p>
      
          <ul>
            <li>¸ðµç ÁÖ¼­¹ö Á¤ÀǸ¦ <code>VirtualHost</code> Á¤ÀÇ ¾Õ¿¡
            µÎ¾î¶ó. (±×·¯¸é ¼³Á¤À» ÀÐ±â ÆíÇÏ´Ù. ¾È±×·¯¸é ³ªÁß¿¡ ¼³Á¤ÀÌ
            ÇÕÃÄÁú¶§ °¡»óÈ£½ºÆ®µé »çÀÌ¿¡ ¼¯ÀÎ Á¤Àǰ¡ ¸ðµç °¡»óÈ£½ºÆ®¿¡
            ¿µÇâÀ» ÁÙ ¼ö Àֱ⶧¹®¿¡ È¥¶õ½º·´´Ù.)</li>
      
            <li>ÀÐ±â ÆíÇϵµ·Ï ¼³Á¤¿¡¼­ ÇØ´çÇÏ´Â <code>NameVirtualHost</code>°ú
            <code>VirtualHost</code> Á¤ÀǵéÀ» ¹­¾î¶ó.</li>
      
            <li><code>ServerPath</code>°¡ ´Ù¸¥ <code>ServerPath</code>ÀÇ
            ¾ÕºÎºÐÀ» ÁöĪÇÏ´Â °æ¿ì¸¦ ÇÇÇ϶ó. ÇÇÇÒ ¼ö ¾ø´Ù¸é ¼³Á¤ÆÄÀÏ¿¡¼­
            ¾ÕºÎºÐÀÌ ´õ ±ä (´õ ÀÚ¼¼ÇÑ) °¡»óÈ£½ºÆ®¸¦ ªÀº (´ú ÀÚ¼¼ÇÑ)
            °¡»óÈ£½ºÆ®º¸´Ù ¾Õ¿¡ µÎ¾î¶ó. (<em>¿¹¸¦ µé¾î</em>,
            "ServerPath /abc"´Â "ServerPath /abc/def" ´ÙÀ½¿¡ µÎ¾î¾ß
            ÇÑ´Ù.</li>
          </ul>
      
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/vhosts/details.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/details.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/details.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/details.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/details.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/index.html.en�������������������������������������������������������0000644�0000000�0000050�00000017510�13412755316�017400� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache Virtual Host documentation - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache Virtual Host documentation</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../de/vhosts/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/vhosts/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
      
          <p>The term <cite>Virtual Host</cite> refers to the practice of
          running more than one web site (such as
          <code>company1.example.com</code> and <code>company2.example.com</code>)
          on a single machine. Virtual hosts can be "<a href="ip-based.html">IP-based</a>", meaning that you have a
          different IP address for every web site, or "<a href="name-based.html">name-based</a>", meaning that you have
          multiple names running on each IP address. The fact that they
          are running on the same physical server is not apparent to the
          end user.</p>
      
          <p>Apache was one of the first servers to support IP-based
          virtual hosts right out of the box. Versions 1.1 and later of
          Apache support both IP-based and name-based virtual hosts
          (vhosts). The latter variant of virtual hosts is sometimes also
          called <em>host-based</em> or <em>non-IP virtual hosts</em>.</p>
      
          <p>Below is a list of documentation pages which explain all
          details of virtual host support in Apache HTTP Server:</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#support">Virtual Host Support</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#directives">Configuration directives</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code></li><li><a href="name-based.html">Name-based virtual
      hosts</a></li><li><a href="ip-based.html">IP-based virtual hosts</a></li><li><a href="examples.html">Virtual host examples</a></li><li><a href="fd-limits.html">File descriptor limits</a></li><li><a href="mass.html">Mass virtual hosting</a></li><li><a href="details.html">Details of host matching</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="support" id="support">Virtual Host Support</a></h2>
      
          <ul>
            <li><a href="name-based.html">Name-based Virtual Hosts</a> (More
            than one web site per IP address)</li>
            <li><a href="ip-based.html">IP-based Virtual Hosts</a> (An IP
            address for each web site)</li>
            <li><a href="examples.html">Virtual Host examples for common
            setups</a></li>
            <li><a href="fd-limits.html">File Descriptor Limits</a> (or,
            <em>Too many log files</em>)</li>
            <li><a href="mass.html">Dynamically Configured Mass Virtual
            Hosting</a></li>
            <li><a href="details.html">In-Depth Discussion of Virtual Host
            Matching</a></li>
          </ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="directives" id="directives">Configuration directives</a></h2>
      
          <ul>
            <li><code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code></li>
          </ul>
      
          <p>If you are trying to debug your virtual host configuration, you
          may find the <code>-S</code> command line switch
          useful.</p>
      
          <div class="example"><h3>Unix example</h3><p><code>
          
          apachectl -S
          </code></p></div>
      
          <div class="example"><h3>Windows example</h3><p><code>
          
          httpd.exe -S
          </code></p></div>
      
      
          <p>This command will dump out a description of how Apache parsed
          the configuration file. Careful examination of the IP addresses and
          server names may help uncover configuration mistakes. (See
          the docs for the <code class="program"><a href="../programs/httpd.html">httpd</a></code> program for
          other command line options)</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../de/vhosts/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/vhosts/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/examples.html.ja.utf8�����������������������������������������������0000644�0000000�0000050�00000076757�13412755316�021006� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ä¾‹ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="../">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a> &gt; <a href="./">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></div><div id="page-content"><div id="preamble"><h1>ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ä¾‹</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/vhosts/examples.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/examples.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/examples.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/examples.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/examples.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
      
          <p>ã“ã®æ–‡æ›¸ã¯ã€ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®è¨­å®šã®éš›ã«
          よãã‚る質å•ã«ç­”ãˆã‚‹ã‚‚ã®ã§ã™ã€‚想定ã—ã¦ã„る対象㯠<a href="name-based.html">åå‰ãƒ™ãƒ¼ã‚¹</a> ã‚„ <a href="ip-based.html">IP ベース</a> ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’使ã£ã¦
          一ã¤ã®ã‚µãƒ¼ãƒã§è¤‡æ•°ã®ã‚¦ã‚§ãƒ–サイトをé‹ç”¨ã—ã¦ã„る状æ³ã§ã™ã€‚
          </p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#purename">一ã¤ã® IP アドレスã§ã„ãã¤ã‹ã®åå‰ãƒ™ãƒ¼ã‚¹ã®
          ウェブサイトを実行ã™ã‚‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#twoips">複数㮠IP アドレスã®ã‚るホストã§åå‰ãƒ™ãƒ¼ã‚¹ã®
          ホスティングを行ãªã†</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#intraextra">é•ㆠIP アドレス (例ãˆã°ã€å†…部ã¨å¤–部アドレス)
          ã§åŒã˜ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’é€ã‚‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#port">é•ã†ãƒãƒ¼ãƒˆã§é•ã†ã‚µã‚¤ãƒˆã‚’é‹å–¶ã™ã‚‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ip">IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒ†ã‚£ãƒ³ã‚°</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ipport">ãƒãƒ¼ãƒˆãƒ™ãƒ¼ã‚¹ã¨ IP ãƒ™ãƒ¼ã‚¹ã®æ··ã–ã£ãŸ
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#mixed">åå‰ãƒ™ãƒ¼ã‚¹ã¨ IP ベースを混ãœãŸ
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#proxy"><code>Virtual_host</code> ã¨
          mod_proxy を併用ã™ã‚‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#default"><code>_default_</code> ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’
          使ã†</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#migrate">åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‹ã‚‰ IP ベースã®
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ç§»è¡Œã™ã‚‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#serverpath"><code>ServerPath</code> ディレクティブを
          使ã†</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="purename" id="purename">一ã¤ã® IP アドレスã§ã„ãã¤ã‹ã®åå‰ãƒ™ãƒ¼ã‚¹ã®
          ウェブサイトを実行ã™ã‚‹</a></h2>
      
          <p>サーãƒã¯ IP アドレスを一ã¤å‰²ã‚Šå½“ã¦ã‚‰ã‚Œã¦ã„ã¦ã€DNS ã§ãƒžã‚·ãƒ³ã«
          複数ã®åå‰ (CNAME) ãŒæŒ‡å®šã•れã¦ã„ã¾ã™ã€‚ã“ã®ãƒžã‚·ãƒ³ã§
          <code>www.example.com</code> 㨠<code>www.example.org</code>
          ã®ãŸã‚ã®ã‚¦ã‚§ãƒ–サーãƒã‚’実行ã•ã›ãŸã„ã¨ã—ã¾ã™ã€‚</p>
      
          <div class="note"><h3>注</h3><p>
                Apache サーãƒã®è¨­å®šã§ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®è¨­å®šã‚’ã—ãŸã ã‘ã§ã€
                知らãªã„é–“ã«ãã®ãƒ›ã‚¹ãƒˆåã«å¯¾å¿œã™ã‚‹ DNS ã®ã‚¨ãƒ³ãƒˆãƒªãŒ
                作æˆã•れãŸã‚Šã¯ã—ã¾ã›ã‚“。ãã®ã‚µãƒ¼ãƒã® IP アドレスã«è§£æ±ºã•れる
                よã†ã« DNS ã«åå‰ã‚’登録ã—ãªã‘れã°<em>ãªã‚Šã¾ã›ã‚“</em>。
                ãã†ã§ãªã„ã¨èª°ã‚‚ã‚ãªãŸã®ã‚¦ã‚§ãƒ–サイトを見るã“ã¨ã¯ã§ãã¾ã›ã‚“。
                ローカルã§ã®ãƒ†ã‚¹ãƒˆã®ãŸã‚ã« <code>hosts</code> ファイルã«
                エントリを追加ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ãŒã€ã“ã®å ´åˆã¯ãã®
                hosts エントリã®ã‚るマシンã‹ã‚‰ã—ã‹å‹•作ã—ã¾ã›ã‚“。</p>
          </div>
      
          <div class="example"><h3>サーãƒè¨­å®š</h3><p><code>
          
      
          # Ensure that Apache listens on port 80<br />
          Listen 80<br />
          <br />
          # Listen for virtual host requests on all IP addresses<br />
          NameVirtualHost *:80<br />
          <br />
          &lt;VirtualHost *:80&gt;<br />
          <span class="indent">
            DocumentRoot /www/example1<br />
            ServerName www.example.com<br />
            <br />
            # Other directives here<br />
            <br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost *:80&gt;<br />
          <span class="indent">
            DocumentRoot /www/example2<br />
            ServerName www.example.org<br />
            <br />
            # Other directives here<br />
            <br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>アスタリスクã¯ã™ã¹ã¦ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã«ãƒžãƒƒãƒã—ã¾ã™ã®ã§ã€ä¸»ã‚µãƒ¼ãƒã¯
          リクエストを扱ã„ã¾ã›ã‚“。<code>www.example.com</code> ã¯
          最åˆã«ã‚ã‚‹ãŸã‚ã€å„ªå…ˆé †ä½ã¯ä¸€ç•ªé«˜ããªã‚Šã€<cite>default</cite> ã‚‚ã—ãã¯
          <cite>primary</cite>  ã®ã‚µãƒ¼ãƒã¨è€ƒãˆã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã¤ã¾ã‚Šã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒ
          ã©ã® <code>ServerName</code> ディレクティブã«ã‚‚マッãƒã—ãªã„å ´åˆã€
          一番最åˆã® <code>VirtualHost</code> ã«ã‚ˆã‚Šæ‰±ã‚れã¾ã™ã€‚</p>
      
          <div class="note"><h3>注</h3>
      
                <p><code>*</code> をシステムã®å®Ÿéš›ã® IP アドレスã«ç½®ãæ›ãˆã‚‹
                ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ãã®å ´åˆã¯ <code>VirtualHost</code> ã®å¼•æ•°ã¯
                <code>NameVirtualHost</code> ã®å¼•æ•°ã¨åŒã˜ã«<em>ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“
                </em>:</p>
      
                  <div class="example"><p><code>
                  NameVirtualHost 172.20.30.40<br />
                  <br />
                  &lt;VirtualHost 172.20.30.40&gt;<br />
                   # etc ...
                  </code></p></div>
      
                <p>ã—ã‹ã—ã€IP アドレスãŒäºˆæ¸¬ä¸å¯èƒ½ãªã‚·ã‚¹ãƒ†ãƒ 
                ――例ãˆã°ãƒ—ロãƒã‚¤ãƒ€ã‹ã‚‰å‹•的㫠IP アドレスをå–å¾—ã—ã¦ä½•らã‹ã®
                ダイナミック DNS を使ã£ã¦ã„ã‚‹å ´åˆãªã©â€•―ã«ãŠã„ã¦ã¯ã€<code>*</code> 
                指定ã¯ã•らã«ä¾¿åˆ©ã§ã™ã€‚<code>*</code> ã¯ã™ã¹ã¦ã® IP アドレスã«
                マッãƒã—ã¾ã™ã®ã§ã€ã“ã®è¨­å®šã«ã—ã¦ãŠã‘ã° IP アドレスãŒå¤‰æ›´ã•れã¦ã‚‚
                設定変更ã›ãšã«å‹•作ã—ã¾ã™ã€‚</p>
          </div>
      
          <p>åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒ†ã‚£ãƒ³ã‚°ã§ã¯ã»ã¼ã™ã¹ã¦ã®çжæ³ã§ã€
          上記ã®è¨­å®šã§å¸Œæœ›ã®è¨­å®šã«ãªã£ã¦ã„ã‚‹ã“ã¨ã§ã—ょã†ã€‚
          実際ã“ã®è¨­å®šãŒå‹•作ã—ãªã„ã®ã¯ã€IP アドレスやãƒãƒ¼ãƒˆã®é•ã„ã«ã‚ˆã£ã¦
          é•ã†ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’é€ã‚‹ã¨ãã ã‘ã§ã™ã€‚</p>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="twoips" id="twoips">複数㮠IP アドレスã®ã‚るホストã§åå‰ãƒ™ãƒ¼ã‚¹ã®
          ホスティングを行ãªã†</a></h2>
       
          <div class="note">
          <h3>注</h3><p>ã“ã“ã§èª¬æ˜Žã•れã¦ã„る方法㯠IP アドレスãŒ
          何個ã‚ã£ã¦ã‚‚åŒæ§˜ã«ã§ãã¾ã™ã€‚</p>
          </div>
      
          <p>サーãƒã«ã¯äºŒã¤ IP アドレスãŒã¤ã„ã¦ã„ã¾ã™ã€‚一ã¤ç›®
          (<code>172.20.30.40</code>) ã§ã¯ä¸»ã‚µãƒ¼ãƒ 
          <code>server.domain.com</code> を扱ã„ã€ã‚‚ã†ä¸€æ–¹
          (<code>172.20.30.50</code>) ã§ã¯äºŒã¤ã‹ãã‚Œä»¥ä¸Šã®æ•°ã®
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’扱ã„ã¾ã™ã€‚</p>
      
          <div class="example"><h3>サーãƒã®è¨­å®š</h3><p><code>
          
      
          Listen 80<br />
          <br />
          # This is the "main" server running on 172.20.30.40<br />
          ServerName server.domain.com<br />
          DocumentRoot /www/mainserver<br />
          <br />
          # This is the other address<br />
          NameVirtualHost 172.20.30.50<br />
          <br />
          &lt;VirtualHost 172.20.30.50&gt;<br />
          <span class="indent">
              DocumentRoot /www/example1<br />
              ServerName www.example.com<br />
              <br />
              # Other directives here ...<br />
              <br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost 172.20.30.50&gt;<br />
          <span class="indent">
              DocumentRoot /www/example2<br />
              ServerName www.example.org<br />
              <br />
              # Other directives here ...<br />
              <br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p><code>172.20.30.50</code> 以外ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ä¸»ã‚µãƒ¼ãƒ
          ãŒæ‰±ã„ã¾ã™ã€‚<code>172.20.30.50</code> ã¸ã®ã€æœªçŸ¥ã®ãƒ›ã‚¹ãƒˆåã¾ãŸã¯
          <code>Host:</code> ヘッダãªã—ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ <code>www.example.com</code>
          ãŒæ‰±ã„ã¾ã™ã€‚</p>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="intraextra" id="intraextra">é•ㆠIP アドレス (例ãˆã°ã€å†…部ã¨å¤–部アドレス)
          ã§åŒã˜ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’é€ã‚‹</a></h2>
      
          <p>サーãƒãƒžã‚·ãƒ³ã¯ IP アドレスを二㤠(<code>192.168.1.1</code>
          㨠<code>172.20.30.40</code>) æŒã£ã¦ã„ã¾ã™ã€‚ã“ã®ãƒžã‚·ãƒ³ã¯å†…部
          (イントラãƒãƒƒãƒˆ) 㨠外部 (インターãƒãƒƒãƒˆ) ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®é–“ã«
          ã‚りã¾ã™ã€‚<code>server.example.com</code> ã¯ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®å¤–ã‹ã‚‰ã¯
          外部アドレス (<code>172.20.30.40</code>) ã¨ã—ã¦è§£æ±ºã•れã¾ã™ãŒã€
          ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®ä¸­ã‹ã‚‰ã¯å†…部アドレス (<code>192.168.1.1</code>) 
          ã¨ã—ã¦è§£æ±ºã•れã¾ã™ã€‚</p>
      
          <p><code>VirtualHost</code> 一ã¤ã ã‘ã§ã‚µãƒ¼ãƒãŒå†…部ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¨
          外部ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ä¸¡æ–¹ã«åŒã˜ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã§å¿œç­”ã™ã‚‹ã‚ˆã†ã«ã§ãã¾ã™ã€‚</p>
      
          <div class="example"><h3>サーãƒã®è¨­å®š</h3><p><code>
          
      
          NameVirtualHost 192.168.1.1<br />
          NameVirtualHost 172.20.30.40<br />
          <br />
          &lt;VirtualHost 192.168.1.1 172.20.30.40&gt;<br />
          <span class="indent">
              DocumentRoot /www/server1<br />
              ServerName server.example.com<br />
              ServerAlias server<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>ã“れã§ã©ã¡ã‚‰ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚‚åŒã˜ <code>VirtualHost</code>
          ã§æ‰±ã‚れるよã†ã«ãªã‚Šã¾ã™ã€‚</p>
      
          <div class="note"><h3>注:</h3><p>内部ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã§ã¯å®Œå…¨ãªãƒ›ã‚¹ãƒˆåã®
                <code>server.example.com</code> ã®ä»£ã‚りã«ã€å˜ã« <code>server</code>
                を使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
                <p>上ã®ä¾‹ã§ã¯ã€IP アドレスã®ãƒªã‚¹ãƒˆã‚’ã€ã™ã¹ã¦ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã«
                 åŒã˜ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã§å¿œç­”ã™ã‚‹ <code>*</code> ã«ç½®ãæ›ãˆã‚‰ã‚Œã¾ã™ã€‚</p>
          </div>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="port" id="port">é•ã†ãƒãƒ¼ãƒˆã§é•ã†ã‚µã‚¤ãƒˆã‚’é‹å–¶ã™ã‚‹</a></h2>
      
          <p>åŒã˜ IP ã«è¤‡æ•°ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ãŒã‚りã€ã•らã«è¤‡æ•°ã®ãƒãƒ¼ãƒˆã‚’使ã£ã¦
          リクエストを扱ã„ãŸã„ã¨ããŒã‚りã¾ã™ã€‚"NameVirtualHost" ã‚¿ã‚°ã®ä¸­ã§
          ãƒãƒ¼ãƒˆã‚’定義ã™ã‚‹ã“ã¨ã§ã€ã“れを動作ã•ã›ã‚‰ã‚Œã¾ã™ã€‚
          NameVirtualHost name:port ç„¡ã—ã‚„ Listen ディレクティブã§
          &lt;VirtualHost name:port&gt; を使ãŠã†ã¨ã—ã¦ã‚‚ã€ãã®è¨­å®šã¯å‹•作ã—ã¾ã›ã‚“。</p>
      
          <div class="example"><h3>サーãƒã®è¨­å®š</h3><p><code>
          
      
          Listen 80<br />
          Listen 8080<br />
          <br />
          NameVirtualHost 172.20.30.40:80<br />
          NameVirtualHost 172.20.30.40:8080<br />
          <br />
          &lt;VirtualHost 172.20.30.40:80&gt;<br />
          <span class="indent">
              ServerName www.example.com<br />
              DocumentRoot /www/domain-80<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost 172.20.30.40:8080&gt;<br />
          <span class="indent">
              ServerName www.example.com<br />
              DocumentRoot /www/domain-8080<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost 172.20.30.40:80&gt;<br />
          <span class="indent">
              ServerName www.example.org<br />
              DocumentRoot /www/otherdomain-80<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost 172.20.30.40:8080&gt;<br />
          <span class="indent">
              ServerName www.example.org<br />
              DocumentRoot /www/otherdomain-8080<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ip" id="ip">IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒ†ã‚£ãƒ³ã‚°</a></h2>
      
          <p>サーãƒã¯ <code>www.example.com</code> 㨠<code>www.example.org</code>
          ã«ãれãžã‚Œè§£æ±ºã•れるã€äºŒã¤ã® IP アドレス (<code>172.20.30.40</code> ã¨
          <code>172.20.30.50</code>) ãŒã‚りã¾ã™ã€‚</p>
      
          <div class="example"><h3>サーãƒã®è¨­å®š</h3><p><code>
          
      
          Listen 80<br />
          <br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          <span class="indent">
              DocumentRoot /www/example1<br />
              ServerName www.example.com<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost 172.20.30.50&gt;<br />
          <span class="indent">
              DocumentRoot /www/example2<br />
              ServerName www.example.org<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p><code>&lt;VirtualHost&gt;</code> ディレクティブã®ã©ã‚Œã§ã‚‚
          指定ã•れã¦ã„ãªã„アドレス (例ãˆã° <code>localhost</code>) ã¯ã€
          主サーãƒãŒã‚れã°ãã“ã«è¡Œãã¾ã™ã€‚</p>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ipport" id="ipport">ãƒãƒ¼ãƒˆãƒ™ãƒ¼ã‚¹ã¨ IP ãƒ™ãƒ¼ã‚¹ã®æ··ã–ã£ãŸ
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></h2>
      
          <p>サーãƒãƒžã‚·ãƒ³ã¯ãれãžã‚Œ <code>www.example.com</code> ã¨
          <code>www.example.org</code> ã«ãれãžã‚Œè§£æ±ºã•れるã€IP アドレスを二ã¤
          (<code>172.20.30.40</code> 㨠<code>172.20.30.50</code>) æŒã£ã¦ã„ã¾ã™ã€‚
          ã©ã¡ã‚‰ã‚‚ãƒãƒ¼ãƒˆ 80 㨠8080 ã§ãƒ›ã‚¹ãƒˆã‚’走らã›ã¾ã™ã€‚</p>
      
          <div class="example"><h3>サーãƒã®è¨­å®š</h3><p><code>
          
      
          Listen 172.20.30.40:80<br />
          Listen 172.20.30.40:8080<br />
          Listen 172.20.30.50:80<br />
          Listen 172.20.30.50:8080<br />
          <br />
          &lt;VirtualHost 172.20.30.40:80&gt;<br />
          <span class="indent">
              DocumentRoot /www/example1-80<br />
              ServerName www.example.com<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost 172.20.30.40:8080&gt;<br />
          <span class="indent">
              DocumentRoot /www/example1-8080<br />
              ServerName www.example.com<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost 172.20.30.50:80&gt;<br />
          <span class="indent">
              DocumentRoot /www/example2-80<br />
              ServerName www.example.org<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost 172.20.30.50:8080&gt;<br />
          <span class="indent">
              DocumentRoot /www/example2-8080<br />
              ServerName www.example.org<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mixed" id="mixed">åå‰ãƒ™ãƒ¼ã‚¹ã¨ IP ベースを混ãœãŸ
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></h2>
      
          <p>ã„ãã¤ã‹ã®ãƒžã‚·ãƒ³ã§ã¯åå‰ãƒ™ãƒ¼ã‚¹ã®ã€ãã®ä»–ã§ã¯ IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«
          ホストをã—ã¾ã™ã€‚</p>
      
          <div class="example"><h3>サーãƒã®è¨­å®š</h3><p><code>
          
      
          Listen 80<br />
          <br />
          NameVirtualHost 172.20.30.40<br />
          <br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          <span class="indent">
              DocumentRoot /www/example1<br />
              ServerName www.example.com<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          <span class="indent">
              DocumentRoot /www/example2<br />
              ServerName www.example.org<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          <span class="indent">
              DocumentRoot /www/example3<br />
              ServerName www.example3.net<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          # IP-based<br />
          &lt;VirtualHost 172.20.30.50&gt;<br />
          <span class="indent">
              DocumentRoot /www/example4<br />
              ServerName www.example4.edu<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost 172.20.30.60&gt;<br />
          <span class="indent">
              DocumentRoot /www/example5<br />
              ServerName www.example5.gov<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="proxy" id="proxy"><code>Virtual_host</code> ã¨
          mod_proxy を併用ã™ã‚‹</a></h2>
      
          <p>次ã®ä¾‹ã¯ã€ãƒ•ロントå´ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã§ä»–ã®ãƒžã‚·ãƒ³ã¸ãƒ—ロクシã—ã¾ã™ã€‚
          例ã§ã¯ <code>192.168.111.2</code> ã®ãƒžã‚·ãƒ³ã§ã¯ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆåã¯
          åŒã˜åå‰ã§è¨­å®šã•れã¦ã„ã¾ã™ã€‚複数ã®ãƒ›ã‚¹ãƒˆåを一å°ã®ãƒžã‚·ãƒ³ã«ãƒ—ロクシã™ã‚‹
          å ´åˆã¯ã€<code class="directive"><a href="../mod/mod_proxy.html#proxypreservehost on">ProxyPreserveHost On</a></code>
          ディレクティブを使ã£ã¦ã€å¸Œæœ›ã®ãƒ›ã‚¹ãƒˆåを渡ã›ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚
          </p>
      
          <div class="example"><p><code>
          &lt;VirtualHost *:*&gt;<br />
              ProxyPreserveHost On<br />
              ProxyPass / http://192.168.111.2/<br />
              ProxyPassReverse / http://192.168.111.2/<br />
              ServerName hostname.example.com<br />
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="default" id="default"><code>_default_</code> ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’
          使ã†</a></h2> 
      
          <h3><a name="defaultallports" id="defaultallports">ã™ã¹ã¦ã®ãƒãƒ¼ãƒˆã«å¯¾ã™ã‚‹
          <code>_default_</code> ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></h3>
      
          <p>未指定㮠IP アドレスã¨ãƒãƒ¼ãƒˆã€<em>ã¤ã¾ã‚Š</em>ä»–ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«
          使ã‚れã¦ã„ãªã„アドレスã¨ãƒãƒ¼ãƒˆã®çµ„ã¿åˆã‚ã›ã€ã¸ã®<em>ã™ã¹ã¦ã®</em>リクエストを
          å—ã‘å–りã¾ã™ã€‚</p>
      
          <div class="example"><h3>サーãƒã®è¨­å®š</h3><p><code>
          
      
          &lt;VirtualHost _default_:*&gt;<br />
          <span class="indent">
              DocumentRoot /www/default<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>ã“ã®ã‚ˆã†ã«ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã®ãƒãƒ¼ãƒˆã§ãƒ‡ãƒ•ォルトã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’
          指定ã™ã‚‹ã¨ã€ä¸»ã‚µãƒ¼ãƒã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒè¡Œãã®ã‚’防ã’ã¾ã™ã€‚</p>
      
          <p>デフォルトã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¯åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«
          使ã‚れã¦ã„るアドレスã¨ãƒãƒ¼ãƒˆã®çµ„ã«é€ã‚‰ã‚ŒãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã†ã“ã¨ã¯
          ã‚りã¾ã›ã‚“。リクエストãŒä¸æ˜Žãª <code>Host:</code> ヘッダやãã®
          ヘッダãŒãªã‹ã£ãŸã‚Šã™ã‚‹å ´åˆã¯åŸºæœ¬åå‰ãƒ™ãƒ¼ã‚¹ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ (ãã®
          アドレスã¨ãƒãƒ¼ãƒˆã§è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ä¸­ã§æœ€åˆã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ) ã«ã‚ˆã‚Š
          扱ã‚れã¾ã™ã€‚</p>
      
          <p>ã©ã‚“ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã§ã‚‚ <code class="directive"><a href="../mod/mod_alias.html#aliasmatch">AliasMatch</a></code>
          ã‚„ <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> を使ã£ã¦
          å˜ä¸€ã®æƒ…報ページ (やスクリプト) ã«æ›¸ãæ›ãˆã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
          
      
          <h3><a name="defaultdifferentports" id="defaultdifferentports">é•ã†ãƒãƒ¼ãƒˆã®ãŸã‚ã®
          <code>_default_</code> ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></h3>
      
          <p>一ã¤ã‚ã®è¨­å®šã¨ã»ã¼åŒã˜ã§ã™ãŒã€ã‚µãƒ¼ãƒã¯è¤‡æ•°ã®ãƒãƒ¼ãƒˆã‚’ listen ã—ã¦ãŠã‚Šã€
          80 番ãƒãƒ¼ãƒˆã«å¯¾ã—ã¦äºŒã¤ã‚ã® <code>_default_</code> ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’
          設定ã—ãŸã„å ´åˆã§ã™ã€‚</p>
      
          <div class="example"><h3>サーãƒã®è¨­å®š</h3><p><code>
          
      
          &lt;VirtualHost _default_:80&gt;<br />
          <span class="indent">
              DocumentRoot /www/default80<br />
              # ...<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost _default_:*&gt;<br />
          <span class="indent">
              DocumentRoot /www/default<br />
              # ...<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>80 番ãƒãƒ¼ãƒˆã®ãƒ‡ãƒ•ォルトãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ (ワイルドカードãƒãƒ¼ãƒˆã®
          デフォルトãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚ˆã‚Šã‚‚å‰ã«æ›¸ã‹ã‚Œã¦ã„ãªã‘れã°<em>ãªã‚Šã¾ã›ã‚“</em>) ã¯
          未指定㮠IP アドレスã«é€ã‚‰ã‚ŒãŸã™ã¹ã¦ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã„ã¾ã™ã€‚
          主サーãƒã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã„ã¾ã›ã‚“。</p>
          
      
          <h3><a name="defaultoneport" id="defaultoneport">一ã¤ã®ãƒãƒ¼ãƒˆã«å¯¾ã—ã¦ã ã‘ã®
          <code>_default_</code> ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></h3>
      
          <p>80 番ãƒãƒ¼ãƒˆã«ã¯ãƒ‡ãƒ•ォルトã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãŒå¿…è¦ã§ã€ä»–ã®
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¯ãƒ‡ãƒ•ォルトãŒå¿…è¦ãªã„å ´åˆã§ã™ã€‚</p>
      
          <div class="example"><h3>サーãƒã®è¨­å®š</h3><p><code>
          
      
          &lt;VirtualHost _default_:80&gt;<br />
          DocumentRoot /www/default<br />
          ...<br />
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>80 番ãƒãƒ¼ãƒˆã¸ã®ã‚¢ãƒ‰ãƒ¬ã‚¹æœªæŒ‡å®šã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ãƒ‡ãƒ•ォルトã®ãƒãƒ¼ãƒãƒ£ãƒ«
          ホストã‹ã‚‰é€ã‚‰ã‚Œã¾ã™ã€‚ä»–ã®æœªæŒ‡å®šã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ãƒãƒ¼ãƒˆã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯
          主サーãƒã‹ã‚‰é€ã‚‰ã‚Œã¾ã™ã€‚</p>
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="migrate" id="migrate">åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‹ã‚‰ IP ベースã®
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ç§»è¡Œã™ã‚‹</a></h2>
      
          <p>ホストåãŒåå‰ <code>www.example.org</code> ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
          (<a href="#name">åå‰ãƒ™ãƒ¼ã‚¹</a>ã®ä¾‹ã® 2 番目ã®è¨­å®š) ãŒå°‚用㮠IP アドレスを
          å¾—ãŸã¨ã—ã¾ã™ã€‚åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®å¤ã„ IP アドレスを
          キャッシュã—ã¦ã„ã‚‹ãƒãƒ¼ãƒ ã‚µãƒ¼ãƒã‚„プロキシã®ãŸã‚ã«ç§»è¡ŒæœŸé–“中ã¯ä¸¡æ–¹ã®
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’æä¾›ã—ãŸã„ã¨ã—ã¾ã™ã€‚</p>
      
          <p>ç­”ã¯ç°¡å˜ã§ã™ã€‚å˜ã«æ–°ã—ã„ IP アドレス (<code>172.20.30.50</code>)
          ã‚’ <code>VirtualHost</code> ディレクティブã«è¿½åŠ ã™ã‚‹ã“ã¨ã§
          ã§ãã¾ã™ã€‚</p>
        
          <div class="example"><h3>サーãƒè¨­å®š</h3><p><code>
          
      
          Listen 80<br />
          ServerName www.example.com<br />
          DocumentRoot /www/example1<br />
          <br />
          NameVirtualHost 172.20.30.40<br />
          <br />
          &lt;VirtualHost 172.20.30.40 172.20.30.50&gt;<br />
          <span class="indent">
              DocumentRoot /www/example2<br />
              ServerName www.example.org<br />
              # ...<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          <span class="indent">
              DocumentRoot /www/example3<br />
              ServerName www.example.net<br />
              ServerAlias *.example.net<br />
              # ...<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>ã“ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¯æ–°ã—ã„アドレス (IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¨ã—ã¦)
          ã¨å¤ã„アドレス(åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¨ã—ã¦) ã®ä¸¡æ–¹ã‹ã‚‰
          アクセスã§ãã¾ã™ã€‚</p>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="serverpath" id="serverpath"><code>ServerPath</code> ディレクティブを
          使ã†</a></h2>
      
          <p>åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãŒäºŒã¤ã‚るサーãƒãŒã‚ã‚‹ã¨ã—ã¾ã™ã€‚
          æ­£ã—ã„ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’å¾—ã‚‹ãŸã‚ã«ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯æ­£ã—ã„
          <code>Host:</code> ヘッダをé€ã‚‰ãªã‘れã°ãªã‚Šã¾ã›ã‚“。
          å¤ã„ HTTP/1.0 ã¯ãã®ã‚ˆã†ãªãƒ˜ãƒƒãƒ€ã‚’é€ã‚‰ãªã„ã®ã§ã€Apache ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒ
          ã©ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’æ„図ã—ãŸã®ã‹ã•ã£ã±ã‚Šã‚ã‹ã‚Šã¾ã›ã‚“
          (ãªã®ã§ã€ä¸»ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã§ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã„ã¾ã™)。
          å¯èƒ½ãªé™ã‚Šã®ä¸‹ä½äº’æ›æ€§ã‚’å¾—ã‚‹ãŸã‚ã€åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®
          URL 接頭辞ã¸ã®ãƒªãƒ³ã‚¯ã®æ›¸ã‹ã‚ŒãŸãƒšãƒ¼ã‚¸ã‚’è¿”ã™ã€
          主ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãŒä½œæˆã•れã¾ã™ã€‚</p>
      
          <div class="example"><h3>サーãƒã®è¨­å®š</h3><p><code>
          
      
          NameVirtualHost 172.20.30.40<br />
          <br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          <span class="indent">
              # primary vhost<br />
              DocumentRoot /www/subdomain<br />
              RewriteEngine On<br />
              RewriteRule ^/.* /www/subdomain/index.html<br />
              # ...<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          DocumentRoot /www/subdomain/sub1<br />
          <span class="indent">
              ServerName www.sub1.domain.tld<br />
              ServerPath /sub1/<br />
              RewriteEngine On<br />
              RewriteRule ^(/sub1/.*) /www/subdomain$1<br />
              # ...<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          <span class="indent">
              DocumentRoot /www/subdomain/sub2<br />
              ServerName www.sub2.domain.tld<br />
              ServerPath /sub2/<br />
              RewriteEngine On<br />
              RewriteRule ^(/sub2/.*) /www/subdomain$1<br />
              # ...<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p><code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code> ディレクティブã®è¨­å®šã«
          よりã€URL <code>http://www.sub1.domain.tld/sub1/</code> ã¯
          <em>常ã«</em> sub1-vhost ã«ã‚ˆã‚Šæ‰±ã‚れã¾ã™ã€‚URL
          <code>http://www.sub1.domain.tld/</code> ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯
          ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒæ­£ã—ã„ <code>Host:</code> ヘッダをé€ã£ãŸã¨ãã«ã®ã¿
          sub1-vhost ã‹ã‚‰é€ã‚‰ã‚Œã¾ã™ã€‚<code>Host:</code> ヘッダãŒãªã‘れã°
          クライアントã¯ä¸»ãƒ›ã‚¹ãƒˆã®æƒ…報ページを得ã¾ã™ã€‚</p>
      
          <p>一ã¤å¥‡å¦™ãªå‹•作をã™ã‚‹ç‚¹ãŒã‚ã‚‹ã“ã¨ã¯è¦šãˆã¦ãŠã„ã¦ãã ã•ã„。
          <code>http://www.sub2.domain.tld/sub1/</code> ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚‚
          <code>Host:</code> ヘッダãŒãªã‘れ㰠sub1-vhost ã«ã‚ˆã‚Šæ‰±ã‚れã¾ã™ã€‚</p>
      
          <p>æ­£ã—ã„ <code>Host:</code> ヘッダをé€ã£ãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯ã©ã¡ã‚‰ã®
          URLã€<em>ã¤ã¾ã‚Š</em>接頭辞ãŒã‚ã‚‹æ–¹ã‚‚ç„¡ã„æ–¹ã‚‚使ãˆã‚‹ã‚ˆã†ã«
          <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> ディレクティブãŒ
          使ã‚れã¦ã„ã¾ã™ã€‚</p>
        </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/vhosts/examples.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/examples.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/examples.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/examples.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/examples.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/examples.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������httpd-2.4.41/docs/manual/vhosts/mass.html.tr.utf8���������������������������������������������������0000644�0000000�0000050�00000046720�13447004010�020133� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Devingen olarak Yapılandırılan Kitlesel Sanal Barındırma - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Sanal Konaklar</a></div><div id="page-content"><div id="preamble"><h1>Devingen olarak Yapılandırılan Kitlesel Sanal Barındırma</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/vhosts/mass.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/mass.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/mass.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/mass.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Bu belgede sanal konakların sonu belirsiz bir şekilde artışı karşısında
            Apache HTTP Sunucusunun nasıl daha verimli kullanılacağı açıklanmıştır.
            Devingen kitlesel konakları oluşturmak için <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>
            modülünün kullanımını açıklayan <a href="../rewrite/vhosts.html">ayrı bir
            belge</a> de mevcuttur.
          </p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#motivation">Amaç</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#overview">Genel Bakış</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#simple">mod_vhost_alias ile Kitlesel Sanal Konaklar</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#homepages">BasitleÅŸtirilmiÅŸ Kitlesel Sanal Konaklar</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#combinations">Aynı Sunucuda Kişisel ve Kurumsal Sanal Konaklar</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ipbased">IP’ye dayalı sanal konakları daha verimli kılmak</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#simple.rewrite"><code>mod_rewrite</code> ile Kitlesel Sanal Konaklar</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#macro"><code>mod_macro</code> ile Kitlesel Sanal Konaklar</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="motivation" id="motivation">Amaç</a></h2>
      
          <p>Burada açıklanan teknikler, <code>httpd.conf</code> dosyanızın
            örnekteki gibi, aslında hemen hemen birbirinin aynı çok sayıda
            <code>&lt;VirtualHost&gt;</code> bölümü içereceği zaman yapılacaklar ile
            ilgilidir.</p>
      
      <pre class="prettyprint lang-config">&lt;VirtualHost 111.22.33.44&gt;
          ServerName                 musteri-1.example.com
          DocumentRoot        "/siteler/musteri-1/belgeler"
          ScriptAlias  "/cgi-bin/"  "/siteler/musteri-1/cgi-bin"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 111.22.33.44&gt;
          ServerName                 musteri-2.example.com
          DocumentRoot        "/siteler/musteri-2/belgeler"
          ScriptAlias   "/cgi-bin/"   "/siteler/musteri-2/cgi-bin"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 111.22.33.44&gt;
          ServerName                 musteri-N.example.com
          DocumentRoot          "/siteler/musteri-N/belgeler"
          ScriptAlias   "/cgi-bin/"  "/siteler/musteri-N/cgi-bin"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>İsteğimiz çok sayıda <code>&lt;VirtualHost&gt;</code> bölümünü devingen
            olarak çalışan tek bir <code>&lt;VirtualHost&gt;</code> bölümüyle
            değiştirmektir. Bunun elbette bazı getirileri olacaktır:</p>
      
          <ol>
            <li>Yapılandırma dosyanız küçüleceği için Apache daha çabuk
              başlatılabilecek ve daha az bellek harcayacaktır. Muhtemelen daha da
              önemlisi, küçülmüş bir yapılandırmanın bakımı da kolaylaşacağı için
              hatalar da azalacaktır.</li>
      
            <li>Yeni sanal konakların eklenmesi, DNS’de yeni girdiler oluşturmak ve
              dosya sisteminde bununla ilgili dizinleri açmak dışında biraz daha
              basit olacaktır; en azından Apache’yi yeniden yapılandırmak ve yeniden
              başlatmak zorunda kalmayacaksınız.</li>
          </ol>
      
          <p>Ana götürüsü ise her sanal konak için ayrı birer günlük dosyasına sahip
            olamayacak olmanızdır. Öte yandan, <a href="fd-limits.html">dosya
            tanıtıcılarının sınırlı olması</a>  nedeniyle bunu yapmayı zaten
            istemezsiniz. Günlük kayıtları için bir <a href="../logs.html#piped">fifo
            veya bir boru hattı</a> oluşturmak ve diğer uçta çalışan bir süreç
            vasıtasıyla günlükleri müşterilere paylaştırmak daha iyidir. Böyle bir
            işlemle ilgili bir örneği <a href="../programs/split-logfile.html">split-logfile</a> aracının belgesinde bulabilirsiniz.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">Genel Bakış</a></h2>
      
          <p>Bir sanal konak iki bilgiye bakarak belirlenir: IP adresi ve HTTP
            isteğindeki <code>Host:</code> başlığının içeriği. Devingen sanal
            barındırma tekniği, isteği yerine getirmek için kullanılacak dosya
            yoluna bu bilgiyi kendiliğinden girmek esasına dayanır. Bu, Apache httpd
            ile <code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code> modülünü kullanarak oldukça kolay
            yapılabileceği gibi <a href="../rewrite/vhosts.html">mod_rewrite modülü
            de kullanılabilir</a>.</p>
      
          <p>Bu modüllerin her ikisi de öntanımlı olarak devre dışıdır. Bu tekniği
            kullanmak isterseniz  Apache httpd'yi yeniden yapılandırıp derleyerek bu
            iki modülü etkin duruma getirmeniz gerekir.</p>
      
          <p>Devingen sanal konağı normal bir sanal konak gibi göstermek için
            bazı bilgileri istekten saptamak gerekir. Bunlardan en önemlisi,
            httpd tarafından göreli URL’lerden normal URL’leri ve benzerlerini
            üretmek için kullanılan sunucu ismidir. Sunucu ismi
            <code>ServerName</code> yönergesi ile yapılandırılır ve CGI’ler
            tarafından <code>SERVER_NAME</code> ortam değişkeni üzerinden
            kullanılır. Çalışma anındaki asıl değer <code class="directive"><a href="../mod/core.html#usecanonicalname">UseCanonicalName</a></code> yönergesi tarafından denetlenir.
            <code>UseCanonicalName Off</code> olduÄŸunda sunucu ismi isteÄŸin
            <code>Host:</code> başlık alanından elde edilir. <code>UseCanonicalName
            DNS</code> belirtilmişse, sunucu ismi, sanal konağın IP adresinden
            tersine DNS sorgusu yapılarak elde edilir. Birincisi isme dayalı sanal
            konaklar tarafından ikincisi ise IP’ye dayalı sanal konaklar tarafından
            kullanılır. Eğer httpd, istekte <code>Host:</code> başlığının olmayışı
            veya DNS sorgusunun başarısız olması sebebiyle sunucu ismini elde
            edemezse son çare olarak <code>ServerName</code> yönergesinde yazılı
            değeri kullanır.</p>
      
          <p>Saptanan bilgilerden biri de <code>DocumentRoot</code>
            yönergesi ile yapılandırılan belge kök dizini olup CGI’ler tarafından
            <code>DOCUMENT_ROOT</code> ortam değişkeni üzerinden kullanılır. Normal
            yapılandırmada <code class="module"><a href="../mod/core.html">core</a></code> modülü tarafından dosya isimlerini
            URI’lere eşlerken kullanılır. Fakat sunucu devingen sanal konakları
            kullanmak üzere yapılandırıldığında, eşleştirmeyi farklı yollardan yapan
            başka bir modül devreye girer (<code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code> veya
            <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>). <code>DOCUMENT_ROOT</code> ortam
            değişkenine değerini atamaktan sorumlu olan bu iki modülden biri
            kullanılmazsa CGI veya SSI belgeleri yanlış değerlerle üretilirler.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="simple" id="simple">mod_vhost_alias ile Kitlesel Sanal Konaklar</a></h2>
      
          <p>Yukarıda <a href="#motivation">Amaç</a> bölümünde özetlenen sanal konak
            düzenlemesinin <code>mod_vhost_alias</code> kullanarak gerçekleştirilmiş
            halini içeren <code>httpd.conf</code> bölümü aşağıdadır.</p>
      
      <pre class="prettyprint lang-config"># sunucu ismini Host: başlığından elde edelim
      UseCanonicalName Off
      
      # Bu günlükleme biçiminde split-logfile aracı kullanılarak
      # sanal konak günlükleri ilk alana göre ayrıştırılabilir
      LogFormat "%V %h %l %u %t \"%r\" %s %b" vcommon
      CustomLog "logs/access_log vcommon"
      
      # istekleri yerine getirmek için kullanılacak
      # dosya isimlerine sunucu ismini ekleyelim
      VirtualDocumentRoot "/siteler/%0/belgeler"
      VirtualScriptAlias  "/siteler/%0/cgi-bin"</pre>
      
      
          <p>Bu yapılandırmayı IP’ye dayalı sanal konaklar için kullanmak isterseniz
            <code>UseCanonicalName Off</code> yerine <code>UseCanonicalName
            DNS</code> yazmanız yeterlidir. Böylece dosya ismine eklenecek konak
            ismi sanal konağın IP adresinden türetilir. <code>%0</code> değişkeni,
            <code>Host:</code> başlığı ile belirlenen istekteki sunucu isminin
            ifadesidir.</p>
      
          <p>Kullanım örnekleri için <code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code>modülünün
            belgesine bakınız.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="homepages" id="homepages">BasitleÅŸtirilmiÅŸ Kitlesel Sanal Konaklar</a></h2>
      
          <p>Bu sistem, yukarıdaki yapılandırmanın bir ISS’nin sunucusuna
            uyarlanmasından başka bir şey değildir. <code>%2</code> değişkenini
            kullanarak, dosya isminde kullanmak üzere sunucu isminin alt dizgelerini
            seçebiliriz, böylece, örneğin <code>www.user.example.com</code> belgeleri
            <code>/home/user/www</code> dizininde bulunabilir. Farklı olarak her
            sanal konak için bir tane değil hepsi için bir tane <code>cgi-bin</code>
            olacaktır.</p>
      
          <pre class="prettyprint lang-config">UseCanonicalName Off
      
      LogFormat "%V %h %l %u %t \"%r\" %s %b" vcommon
      CustomLog "logs/access_log" vcommon
      
      # sunucu ismini içerecek dosya isimlerini oluşturalım
      VirtualDocumentRoot "/home/%2/www"
      
      # ortak cgi-bin dizini
      ScriptAlias  "/cgi-bin/"  "/siteler/std-cgi/"</pre>
      
      
          <p><code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code> belgesinde daha karmaşık
            <code>VirtualDocumentRoot</code> örnekleri vardır.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="combinations" id="combinations">Aynı Sunucuda Kişisel ve Kurumsal Sanal Konaklar</a></h2>
      
          <p>Daha karmaşık ayarlamalar yaparak httpd’nin normal
            <code>&lt;VirtualHost&gt;</code> bölümlerini farklı kitlesel sanal konak
            yapılandırmaları için kullanabilirsiniz. Örneğin, bireysel
            müşterileriniz için bir IP adresiniz, kurumsal müşterileriniz için de
            başka bir IP adresiniz olsun. Her biri için ayrı ayrı sanal konaklar
            ayarlamak yerine aşağıdaki gibi bir yapılandırma kullanabilirsiniz:</p>
      
      <pre class="prettyprint lang-config">UseCanonicalName Off
      
      LogFormat "%V %h %l %u %t \"%r\" %s %b" vcommon
      
      &lt;Directory "/siteler/kurumsal"&gt;
          Options FollowSymLinks
          AllowOverride All
      &lt;/Directory&gt;
      
      &lt;Directory "/siteler/bireysel"&gt;
          Options FollowSymLinks
          AllowOverride None
      &lt;/Directory&gt;
      
      &lt;VirtualHost 111.22.33.44&gt;
          ServerName kurumsal.example.com
      
          CustomLog "logs/access_log.kurumsal" vcommon
      
          VirtualDocumentRoot "/siteler/kurumsal/%0/belgeler"
          VirtualScriptAlias  "/siteler/kurumsal/%0/cgi-bin"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 111.22.33.45&gt;
          ServerName bireysel.example.com
      
          CustomLog "logs/access_log.bireysel" vcommon
      
          VirtualDocumentRoot "/siteler/bireysel/%0/belgeler"
          ScriptAlias         "/cgi-bin/" "/siteler/std-cgi/"
      &lt;/VirtualHost&gt;</pre>
      
      
          <div class="note"><h3>Bilginize</h3>
            <p>Eğer ilk <code>&lt;VirtualHost&gt;</code> bölümü bir <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> yönergesi içermezse ilgili IP
              için ters DNS sorgusu yapılır. Eğer sorgudan elde edilen isim
              sunucunun ismi değilse bu istenmeyen duruma bir çözüm olarak bir
              bilgilendirme bölümü (örn, <code>ServerName bilgi.example.com</code>)
              eklenebilir.</p>
          </div>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ipbased" id="ipbased">IP’ye dayalı sanal konakları daha verimli kılmak</a></h2>
          
      
          <p><a href="#simple">İlk örnekte</a> IP’ye dayalı sanal konaklar için
            kullanılmak istenirse yapılandırmada neyin nasıl değiştirileceği
            belirtilmişti. Her istek için ayrı bir DNS sorgusu gerekeceğinden bu
            başarım düşmesine yol açar. DNS sorgusu ihtiyacını ortadan kaldırmak
            için, bir çözüm olarak dosya sistemi, konak isimleri yerine IP
            adreslerine göre düzenlenebilir. Günlük kayıtları da IP adreslerine göre
            ayrıştırılacak şekilde ayarlanabilir.</p>
      
      <pre class="prettyprint lang-config"># Sunucu ismini IP adresinden ters DNS sorgusu ile elde edelim
      UseCanonicalName DNS
      
      # Günlük kayıtları IP adreslerine göre ayrıştırılabilsin
      LogFormat "%A %h %l %u %t \"%r\" %s %b" vcommon
      CustomLog "logs/access_log" vcommon
      
      # dosya isimleri IP adreslerini içersin
      VirtualDocumentRootIP "/siteler/%0/belgeler"
      VirtualScriptAliasIP  "/siteler/%0/cgi-bin"</pre>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="simple.rewrite" id="simple.rewrite"><code>mod_rewrite</code> ile Kitlesel Sanal Konaklar</a></h2>
          
      
          <p>Kitlesel sanal barındırma <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code> modülü kullanarak
            da gerçeklenebilir. Ya basitçe <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> yönergelerini kullanırsınız ya da daha karmaşık
            olarak sanal konak tanımlarınızı harici bir yerde tutar ve bunlara
            <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> yönergesini
            kullanarak erişirsiniz. Bu teknikler ayrıntılı olarak
            <a href="../rewrite/vhosts.html">rewrite belgelerinde</a>
            açıklanmıştır.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="macro" id="macro"><code>mod_macro</code> ile Kitlesel Sanal Konaklar</a></h2>
          
      
          <p>Devingen olarak üretilen sanal konaklar için diğer bir seçenek 
            <code class="module"><a href="../mod/mod_macro.html">mod_macro</a></code> modülüdür. Bir sanal konak şablonu oluşturup 
            bunu çok sayıda konak ismi için çağırabilirsiniz. Modül belgelerinin 
            <strong>Kullanım</strong> bölümünde böyle bir örneğe yer verilmiştir.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/vhosts/mass.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/mass.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/mass.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/mass.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/mass.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������httpd-2.4.41/docs/manual/vhosts/fd-limits.html.en���������������������������������������������������0000644�0000000�0000050�00000021445�13412755316�020163� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>File Descriptor Limits - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Virtual Hosts</a></div><div id="page-content"><div id="preamble"><h1>File Descriptor Limits</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/vhosts/fd-limits.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/fd-limits.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/fd-limits.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/fd-limits.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/fd-limits.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>When using a large number of Virtual Hosts, Apache may run
          out of available file descriptors (sometimes called <cite>file
          handles</cite>) if each Virtual Host specifies different log
          files. The total number of file descriptors used by Apache is
          one for each distinct error log file, one for every other log
          file directive, plus 10-20 for internal use. Unix operating
          systems limit the number of file descriptors that may be used
          by a process; the limit is typically 64, and may usually be
          increased up to a large hard-limit.</p>
      
          <p>Although Apache attempts to increase the limit as required,
          this may not work if:</p>
      
          <ol>
            <li>Your system does not provide the <code>setrlimit()</code>
            system call.</li>
      
            <li>The <code>setrlimit(RLIMIT_NOFILE)</code> call does not
            function on your system (such as Solaris 2.3)</li>
      
            <li>The number of file descriptors required exceeds the hard
            limit.</li>
      
            <li>Your system imposes other limits on file descriptors,
            such as a limit on stdio streams only using file descriptors
            below 256. (Solaris 2)</li>
          </ol>
      
          <p>In the event of problems you can:</p>
      
          <ul>
            <li>Reduce the number of log files; don't specify log files
            in the <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
            sections, but only log to the main log files. (See <a href="#splitlogs">Splitting up your log files</a>, below, for more
            information on doing this.)</li>
      
            <li>
              If you system falls into 1 or 2 (above), then increase the
              file descriptor limit before starting Apache, using a
              script like
      
              <div class="example"><p><code>
                <code>#!/bin/sh<br />
                 ulimit -S -n 100<br />
                 exec httpd</code>
              </code></p></div>
            </li>
          </ul>
      
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="splitlogs" id="splitlogs">Splitting up your log files</a></h2>
      
      <p>If you want to log multiple virtual hosts to the same log file, you
      may want to split up the log files afterwards in order to run
      statistical analysis of the various virtual hosts. This can be
      accomplished in the following manner.</p>
      
      <p>First, you will need to add the virtual host information to the log
      entries. This can be done using the <code class="directive"><a href="../mod/mod_log_config.html#logformat">
      LogFormat</a></code>
      directive, and the <code>%v</code> variable. Add this to the beginning
      of your log format string:</p>
      
      <pre class="prettyprint lang-config">LogFormat "%v %h %l %u %t \"%r\" %&gt;s %b" vhost
      CustomLog logs/multiple_vhost_log vhost</pre>
      
      
      <p>This will create a log file in the common log format, but with the
      canonical virtual host (whatever appears in the
      <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> directive) prepended to
      each line. (See <code class="module"><a href="../mod/mod_log_config.html">mod_log_config</a></code> for
      more about customizing your log files.)</p>
      
      <p>When you wish to split your log file into its component parts (one
      file per virtual host) you can use the program <code><a href="../programs/other.html">split-logfile</a></code> to accomplish
      this. You'll find this program in the <code>support</code> directory
      of the Apache distribution.</p>
      
      <p>Run this program with the command:</p>
      
      <div class="example"><p><code>
      split-logfile &lt; /logs/multiple_vhost_log
      </code></p></div>
      
      <p>This program, when run with the name of your vhost log file, will
      generate one file for each virtual host that appears in your log file.
      Each file will be called <code>hostname.log</code>.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/vhosts/fd-limits.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/fd-limits.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/fd-limits.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/fd-limits.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/fd-limits.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/fd-limits.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/ip-based.html.ja.utf8�����������������������������������������������0000644�0000000�0000050�00000033713�13412755316�020635� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache ã® IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚µãƒãƒ¼ãƒˆ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="../">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a> &gt; <a href="./">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></div><div id="page-content"><div id="preamble"><h1>Apache ã® IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚µãƒãƒ¼ãƒˆ</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/vhosts/ip-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/ip-based.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/ip-based.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/ip-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/ip-based.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#requirements">システムè¦ä»¶</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#howto">Apache ã®è¨­å®šæ–¹æ³•</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#multiple">複数デーモンã®è¨­å®š</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#single">複数ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®è¨­å®šã‚’ã—ãŸ
      デーモンを一ã¤è¨­å®šã™ã‚‹</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li>
      <a href="name-based.html">åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚µãƒãƒ¼ãƒˆ</a>
      </li><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="requirements" id="requirements">システムè¦ä»¶</a></h2>
      
          <p><cite>IP ベース</cite> ã¨ã„ã†åå‰ãŒç¤ºã™ã‚ˆã†ã«ã€ã‚µãƒ¼ãƒã«ã¯
          <strong>IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãれãžã‚Œã«ã¤ãã€åˆ¥ã€…ã® IP アドレスãŒ
          å¿…è¦ã§ã™</strong>。複数ã®ç‰©ç†ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’æŒã£ã¦ã„るマシンを用æ„ã™ã‚‹ã‹ã€
          最近ã®ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ã§ã‚µãƒãƒ¼ãƒˆã•れã¦ã„ã‚‹ãƒãƒ¼ãƒãƒ£ãƒ«
          インタフェース (詳細ã¯ã‚·ã‚¹ãƒ†ãƒ ã®èª¬æ˜Žæ›¸ã‚’読んã§ãã ã•ã„。ãŸã„ã¦ã„ã¯
          "ip エイリアス" ã¨å‘¼ã°ã‚Œã¦ã„ã¦ã€è¨­å®šã«ã¯æ™®é€š "ifconfig" コマンドを
          使ã„ã¾ã™) を使ã†ã‹ã§å®Ÿç¾ã§ãã¾ã™ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="howto" id="howto">Apache ã®è¨­å®šæ–¹æ³•</a></h2>
      
          <p>複数ã®ãƒ›ã‚¹ãƒˆã‚’サãƒãƒ¼ãƒˆã™ã‚‹ã‚ˆã†ã« Apache を設定ã™ã‚‹æ–¹æ³•ã¯
          二通りã‚りã¾ã™ã€‚別㮠<code class="program"><a href="../programs/httpd.html">httpd</a></code> デーモンをå„ホスト毎ã«å®Ÿè¡Œã™ã‚‹ã‹ã€
          ã™ã¹ã¦ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’サãƒãƒ¼ãƒˆã™ã‚‹ãƒ‡ãƒ¼ãƒ¢ãƒ³ã‚’一ã¤å®Ÿè¡Œã™ã‚‹ã‹ã§ã™ã€‚</p>
      
          <p>以下ã®ã¨ãã«ã¯è¤‡æ•°ã®ãƒ‡ãƒ¼ãƒ¢ãƒ³ã‚’使ã†ã¨è‰¯ã„ã§ã—ょã†:</p>
      
          <ul>
            <li>会社1 ã¯ã‚¦ã‚§ãƒ–経由以外ã§ã¯ä¼šç¤¾2 ã‹ã‚‰ã¯ãƒ‡ãƒ¼ã‚¿ã‚’読ã¾ã‚ŒãŸããªã„ã€
            ã¨ã„ã£ãŸã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã®åˆ†é›¢ã®å•題ãŒã‚ã‚‹ã¨ã。ã“ã®å ´åˆã€ãれãžã‚Œ
            <code class="directive"><a href="../mod/mpm_common.html#user">User</a></code>, <code class="directive"><a href="../mod/mpm_common.html#group">Group</a></code>, <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code>, <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> ã®è¨­å®šãŒé•ã†äºŒã¤ã®ãƒ‡ãƒ¼ãƒ¢ãƒ³ã‚’
            実行ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚</li>
      
            <li>マシンã®ã™ã¹ã¦ã® IP エイリアスを listen ã™ã‚‹ã ã‘ã®
            メモリã¨ãƒ•ァイル記述å­ã®ä½™è£•ãŒã‚ã‚‹ã¨ã。<code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> ã¯ã€Œãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã€
            アドレスã‹ã€ç‰¹å®šã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã®ã¿ã‚’ listen ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
            ã§ã™ã‹ã‚‰ã€ä½•らã‹ã®ç†ç”±ã§ç‰¹å®šã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ listen ã—ãªã‘ã°ãªã‚‰ãªã„
            ã¨ãã¯ã€ãã®ç‰¹å®šã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ã™ã¹ã¦ listen ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
            (ãŸã ã—ã€ä¸€ã¤ã® <code class="program"><a href="../programs/httpd.html">httpd</a></code> ㌠N-1 個ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ listen ã—ã€
            別㮠<code class="program"><a href="../programs/httpd.html">httpd</a></code> ãŒæ®‹ã‚Šã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ listen ã™ã‚‹ã¨ã„ã£ãŸã“ã¨ã¯å¯èƒ½ã§ã™ã€‚)</li>
          </ul>
      
          <p>以下ã®ã¨ãã«ã¯å˜ç‹¬ã®ãƒ‡ãƒ¼ãƒ¢ãƒ³ã‚’使ã†ã¨è‰¯ã„ã§ã—ょã†:</p>
      
          <ul>
            <li>ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆé–“ã§ã® httpd ã®è¨­å®šã‚’共有ã—ã¦ã‚‚よã„ã¨ã。</li>
      
            <li>マシンãŒå¤šãã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã†ãŸã‚ã€åˆ¥ãƒ‡ãƒ¼ãƒ¢ãƒ³ã‚’実行ã™ã‚‹ã“ã¨ã«ã‚ˆã‚‹
            性能ã®ä½Žä¸‹ã®å½±éŸ¿ãŒè‘—ã—ã„ã¨ã。</li>
          </ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="multiple" id="multiple">複数デーモンã®è¨­å®š</a></h2>
      
          <p>å„ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«å¯¾ã—ã¦åˆ¥ã® <code class="program"><a href="../programs/httpd.html">httpd</a></code> ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‚’行ãªã„ã¾ã™ã€‚
          設定ファイル中㮠<code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> 
          ディレクティブを使ã£ã¦ã€
          å„インストールã§ãƒ‡ãƒ¼ãƒ¢ãƒ³ãŒæ‰±ã† IP アドレス (ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ) 
          ã‚’é¸æŠžã—ã¾ã™ã€‚例ãˆã°</p>
      
          <div class="example"><p><code>
          Listen www.smallco.com:80
          </code></p></div>
      
          <p>ã“ã“ã§ã€ãƒ›ã‚¹ãƒˆåã®ä»£ã‚り㫠IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ä½¿ã†æ–¹ãŒæŽ¨å¥¨ã•れã¦ã„ã‚‹ã“ã¨ã«
          注æ„ã—ã¦ãŠã„ã¦ãã ã•ã„
          (<a href="../dns-caveats.html">DNS ã®æ³¨æ„事項</a> å‚ç…§)。</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="single" id="single">複数ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®è¨­å®šã‚’ã—ãŸ
      デーモンを一ã¤è¨­å®šã™ã‚‹</a></h2>
      
          <p>ã“ã®å ´åˆã¯ã€ä¸€ã¤ã® <code class="program"><a href="../programs/httpd.html">httpd</a></code> ãŒä¸»ã‚µãƒ¼ãƒã¨ã™ã¹ã¦ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’
          処ç†ã—ã¾ã™ã€‚設定ファイル㮠<code class="directive"><a href="../mod/core.html#virtualhost">VirtualHost</a></code> ディレクティブを使ã£ã¦ã€
          <code class="directive"><a href="../mod/core.html#serveradmin">ServerAdmin</a></code>, <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>, <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>, <code class="directive"><a href="../mod/core.html#errorlog">ErrorLog</a></code>, <code class="directive"><a href="../mod/mod_log_config.html#transferlog">TransferLog</a></code>
          ã‚„ <code class="directive"><a href="../mod/mod_log_config.html#customlog">CustomLog</a></code>
          設定ディレクティブã®å€¤ãŒå„ホスト毎ã«ç•°ãªã‚‹å€¤ã«è¨­å®šã•れるよã†ã«ã—ã¾ã™ã€‚
          例ãˆã°</p>
      
          <div class="example"><p><code>
          &lt;VirtualHost www.smallco.com&gt;<br />
          ServerAdmin webmaster@mail.smallco.com<br />
          DocumentRoot /groups/smallco/www<br />
          ServerName www.smallco.com<br />
          ErrorLog /groups/smallco/logs/error_log<br />
          TransferLog /groups/smallco/logs/access_log<br />
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost www.baygroup.org&gt;<br />
          ServerAdmin webmaster@mail.baygroup.org<br />
          DocumentRoot /groups/baygroup/www<br />
          ServerName www.baygroup.org<br />
          ErrorLog /groups/baygroup/logs/error_log<br />
          TransferLog /groups/baygroup/logs/access_log<br />
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>ã“ã“ã§ã€ãƒ›ã‚¹ãƒˆåã®ä»£ã‚り㫠IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ä½¿ã†æ–¹ãŒæŽ¨å¥¨ã•れã¦ã„ã‚‹ã“ã¨ã«
          注æ„ã—ã¦ãŠã„ã¦ãã ã•ã„
          (<a href="../dns-caveats.html">DNS ã®æ³¨æ„事項</a> å‚ç…§)。</p>
      
          <p>プロセス生æˆã‚’制御ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚„ãã®ä»–ã®ã„ãã¤ã‹ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’
          除ã„ã¦ã€ã»ã¼<strong>ã™ã¹ã¦</strong>ã®è¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ VirtualHost
          ディレクティブã®ä¸­ã«æ›¸ãã“ã¨ãŒã§ãã¾ã™ã€‚ディレクティブ㌠VirtualHost
          ディレクティブã§ä½¿ç”¨ã§ãã‚‹ã‹ã©ã†ã‹ã¯ <a href="../mod/directives.html">ディレクティブ索引</a>を使ã£ã¦<a href="../mod/directive-dict.html#Context">コンテキスト</a>ã®
          欄を調ã¹ã¦ãã ã•ã„。</p>
      
          <p><a href="../suexec.html">suEXECラッパー</a>を使ã£ã¦ã„ã‚‹å ´åˆã¯ã€
          <code class="directive"><a href="../mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code>
          ディレクティブを VirtualHost
          ディレクティブã®ä¸­ã§ä½¿ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p><em>セキュリティ:</em> ログファイルを書ã場所を指定ã™ã‚‹ã¨ãã¯ã€
          Apache ã‚’èµ·å‹•ã—ãŸãƒ¦ãƒ¼ã‚¶ä»¥å¤–ãŒãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«æ›¸ãè¾¼ã¿æ¨©é™ã‚’
          æŒã£ã¦ã„ã‚‹å ´åˆã«ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å±é™ºãŒã‚ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。
          詳細ã¯<a href="../misc/security_tips.html">セキュリティã®ã“ã¤</a>ドキュメントを
          å‚ç…§ã—ã¦ãã ã•ã„。</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/vhosts/ip-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/ip-based.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/ip-based.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/ip-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/ip-based.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/ip-based.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������httpd-2.4.41/docs/manual/vhosts/examples.html.ko.euc-kr���������������������������������������������0000644�0000000�0000050�00000062220�13412755316�021301� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>°¡»óÈ£½ºÆ® ¿¹ - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">°¡»óÈ£½ºÆ®</a></div><div id="page-content"><div id="preamble"><h1>°¡»óÈ£½ºÆ® ¿¹</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/vhosts/examples.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/examples.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/examples.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/examples.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/examples.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      
          <p>ÀÌ ¹®¼­´Â ÀÚÁÖ ¹®ÀǵǴ °¡»óÈ£½ºÆ®
          Áú¹®¿¡ ´äÀ» ÇÏ·Á°í ¾²¿©Á³´Ù. »óȲÀº <a href="name-based.html">À̸§±â¹Ý</a>À̳ª <a href="ip-based.html">IP±â¹Ý</a> °¡»óÈ£½ºÆ®¸¦ ÅëÇØ ÇÑ ¼­¹ö¿¡¼­
          ¿©·¯ À¥»çÀÌÆ®¸¦ ¼­ºñ½ºÇÏ·Á´Â °æ¿ìÀÌ´Ù. ÇÑ ÇÁ·Ï½Ã ¼­¹ö µÚ¿¡¼­
          ¿©·¯ ¼­¹ö¸¦ »ç¿ëÇÏ¿© »çÀÌÆ®¸¦ ¿î¿µÇÏ´Â °æ¿ì¸¦ ´Ù·é ¹®¼­µµ
          °ð ³ª¿Ã °ÍÀÌ´Ù.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#purename">IP ÁÖ¼Ò ÇѰ³¿¡ ¿©·¯ À̸§±â¹Ý
          À¥»çÀÌÆ® ¿î¿µÇϱâ.</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#twoips">¿©·¯ IP ÁÖ¼Ò¿¡¼­ À̸§±â¹Ý
          È£½ºÆ®.</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#intraextra">(³»ºÎ¿Í ¿ÜºÎ ÁÖ¼Ò¿Í °°ÀÌ)
          ´Ù¸¥ IP ÁÖ¼Ò·Î °°Àº ³»¿ëÀ» ¼­ºñ½ºÇϱâ.</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#port">¿©·¯ Æ÷Æ®¿¡¼­ ¼­·Î ´Ù¸¥ »çÀÌÆ®
          ¿î¿µÇϱâ.</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ip">IP±â¹Ý °¡»óÈ£½ºÆ®</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ipport">Æ÷Æ®±â¹Ý°ú ip±â¹ÝÀÌ È¥ÇÕµÈ
          °¡»óÈ£½ºÆ®</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#mixed">À̸§±â¹Ý°ú IP±â¹ÝÀÌ È¥ÇÕµÈ
          °¡»óÈ£½ºÆ®</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#default"><code>_default_</code> °¡»óÈ£½ºÆ®
          »ç¿ëÇϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#migrate">À̸§±â¹Ý °¡»óÈ£½ºÆ®¸¦ IP±â¹Ý
          °¡»óÈ£½ºÆ®·Î ¿Å±â±â</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#serverpath"><code>ServerPath</code>
      	Áö½Ã¾î »ç¿ëÇϱâ</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="purename" id="purename">IP ÁÖ¼Ò ÇѰ³¿¡ ¿©·¯ À̸§±â¹Ý
          À¥»çÀÌÆ® ¿î¿µÇϱâ.</a></h2>
      
          <p>¼­¹ö¿¡ IP ÁÖ¼Ò°¡ ÇѰ³ ÀÖ°í, DNS¿¡¼­ ¿©·¯ ÁÖ¼Ò(CNAMES)°¡
          ÀÌ ÄÄÇ»Å͸¦ °¡¸®Å²´Ù. ÀÌ ÄÄÇ»ÅÍ¿¡¼­ <code>www.example.com</code>°ú
          <code>www.example.org</code>ÀÇ À¥¼­¹ö¸¦ ½ÇÇàÇÏ°í ½Í´Ù.</p>
      
          <div class="note"><h3>Note</h3><p>¾ÆÆÄÄ¡ ¼­¹ö¿¡ °¡»óÈ£½ºÆ® ¼³Á¤À»
                ÇÑ´Ù°í ±× È£½ºÆ®¸í¿¡ ´ëÇÑ DNS Ç׸ñÀÌ ÀÚµ¿ÀÌ·Î »ý¼ºµÇÁö
                ¾Ê´Â´Ù. <em>¹Ýµå½Ã</em> DNS¿¡ IP ÁÖ¼Ò¸¦ °¡¸®Å°´Â
                À̸§ÀÌ ÀÖ¾î¾ß ÇÑ´Ù. ¾È±×·¯¸é ¾Æ¹«µµ À¥»çÀÌÆ®¸¦ º¼
                ¼ö ¾ø´Ù. °Ë»çÇØº¸±â À§ÇØ <code>hosts</code> ÆÄÀÏ¿¡ Ç׸ñÀ»
                Ãß°¡ÇÒ ¼ö ÀÖÁö¸¸, ÀÌ´Â hosts Ç׸ñÀ» °¡Áø ÄÄÇ»ÅÍ¿¡¸¸
                ¹Ý¿µµÈ´Ù.</p>
          </div>
      
          <div class="example"><h3>¼­¹ö ¼³Á¤</h3><p><code>
          
      
          # ¾ÆÆÄÄ¡°¡ Æ÷Æ® 80À» ±â´Ù¸°´Ù<br />
          Listen 80<br />
          <br />
          # ¸ðµç IP ÁÖ¼Ò¿¡¼­ °¡»óÈ£½ºÆ® ¿äûÀ» ±â´Ù¸°´Ù<br />
          NameVirtualHost *:80<br />
          <br />
          &lt;VirtualHost *:80&gt;<br />
          <span class="indent">
            DocumentRoot /www/example1<br />
            ServerName www.example.com<br />
            <br />
            # ´Ù¸¥ Áö½Ã¾îµéµµ ÀÖ´Ù<br />
            <br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost *:80&gt;<br />
          <span class="indent">
            DocumentRoot /www/example2<br />
            ServerName www.example.org<br />
            <br />
            # ´Ù¸¥ Áö½Ã¾îµéµµ ÀÖ´Ù<br />
            <br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>º°Ç¥´Â ¸ðµç ÁÖ¼Ò¸¦ °¡¸®Å°¹Ç·Î, ÁÖ¼­¹ö´Â ¾î¶² ¿äûµµ
          ¼­ºñ½ºÇÏÁö ¾Ê´Â´Ù. <code>www.example.com</code>ÀÌ
          ¼³Á¤ÆÄÀÏ¿¡ óÀ½À¸·Î ³ª¿À¹Ç·Î °¡Àå ³ôÀº ¿ì¼±¼øÀ§¸¦ °¡Áö¸ç,
          <cite>±âº»</cite>ȤÀº <cite>Ãʱâ</cite> ¼­¹ö°¡ µÈ´Ù.
          ¾î¶² <code>ServerName</code> Áö½Ã¾î¿¡µµ ÇØ´çµÇÁö¾Ê´Â ¿äûÀº
          ù¹øÂ° <code>VirtualHost</code>°¡ ¼­ºñ½ºÇÑ´Ù.</p>
      
          <div class="note">
                  <h3>ÁÖÀÇ</h3>
      
                  <p>¿øÇÑ´Ù¸é <code>*</code> ´ë½Å ½Ã½ºÅÛÀÇ ½ÇÁ¦ IP
                  ÁÖ¼Ò¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù. ÀÌ °æ¿ì
                  <code>VirtualHost</code>ÀÇ ¾Æ±Ô¸ÕÆ®´Â
                  <code>NameVirtualHost</code>ÀÇ ¾Æ±Ô¸ÕÆ®¿Í ÀÏÄ¡ÇØ¾ß
                  <em>ÇÑ´Ù</em>:</p>
      
                  <div class="example"><p><code>
                  NameVirtualHost 172.20.30.40<br />
      						<br />
                  &lt;VirtualHost 172.20.30.40&gt;<br />
       		        # »ý·« ...
                  </code></p></div>
      
                 <p>±×·¯³ª ISP¿¡¼­ µ¿ÀûÀ¸·Î IP ÁÖ¼Ò¸¦ °¡Á®¿À´Â µî
                 IP ÁÖ¼Ò¸¦ ¸ð¸£´Â °æ¿ì¿¡´Â <code>*</code>¸¦ »ç¿ëÇÏ´Â
                 °ÍÀÌ À¯¿ëÇÏ´Ù. <code>*</code>´Â ¸ðµç IP ÁÖ¼Ò¿¡
                 ÇØ´çÇϹǷÎ, IP ÁÖ¼Ò°¡ º¯°æµÇ¾îµµ ¼³Á¤À» º¯°æÇÒ
                 Çʿ䰡 ¾ø´Ù.</p>
          </div>
      
          <p>°ÅÀÇ ´ëºÎºÐÀÇ À̸§±â¹Ý °¡»óÈ£½ºÆ® ¼³Á¤Àº À§¿Í °°´Ù.
          ¿¹¿Ü´Â ´Ù¸¥ IP ÁÖ¼Ò³ª Æ÷Æ®·Î ´Ù¸¥ ³»¿ëÀ» ¼­ºñ½ºÇÏ·Á´Â
          °æ¿ìÀÌ´Ù.</p>
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="twoips" id="twoips">¿©·¯ IP ÁÖ¼Ò¿¡¼­ À̸§±â¹Ý
          È£½ºÆ®.</a></h2>
      
        	<div class="note">
      		  <h3>ÁÖÀÇ</h3><p>¿©±â¼­ ¼³¸íÇÑ ¹æ¹ýÀº IP ÁÖ¼Ò°¡
                ¸î°³¶óµµ Àû¿ë°¡´ÉÇÏ´Ù.</p>
          </div>
      
          <p>¼­¹ö´Â IP ÁÖ¼Ò°¡ µÎ°³ÀÖ´Ù. Çϳª¿¡¼­
          (<code>172.20.30.40</code>) "ÁÖ" ¼­¹ö
          <code>server.domain.com</code>À» ¼­ºñ½ºÇϰí, ´Ù¸¥ Çϳª¿¡¼­
          (<code>172.20.30.50</code>) ¿©·¯ °¡»óÈ£½ºÆ®¸¦ ¼­ºñ½ºÇÒ
          °ÍÀÌ´Ù.</p>
      
          <div class="example"><h3>¼­¹ö ¼³Á¤</h3><p><code>
          
      
          Listen 80<br />
      		<br />
          # 172.20.30.40¿¡¼­ ½ÇÇàÇÏ´Â "ÁÖ"¼­¹öÀÌ´Ù<br />
          ServerName server.domain.com<br />
          DocumentRoot /www/mainserver<br />
      		<br />
          # ´Ù¸¥ ÁÖ¼Ò´Ù<br />
          NameVirtualHost 172.20.30.50<br />
      		<br />
          &lt;VirtualHost 172.20.30.50&gt;<br />
          <span class="indent">
              DocumentRoot /www/example1<br />
              ServerName www.example.com<br />
         			<br />
              # ´Ù¸¥ Áö½Ã¾îµéµµ ÀÖ´Ù ...<br />
      				<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost 172.20.30.50&gt;<br />
          <span class="indent">
              DocumentRoot /www/example2<br />
              ServerName www.example.org<br />
      				<br />
              # ´Ù¸¥ Áö½Ã¾îµéµµ ÀÖ´Ù ...<br />
      				<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p><code>172.20.30.50</code>ÀÌ ¾Æ´Ñ ÁÖ¼Ò¿¡ ´ëÇÑ ¿äûÀº
          ÁÖ¼­¹ö°¡ ¼­ºñ½ºÇÑ´Ù. È£½ºÆ®¸í ¾øÀÌ, Áï <code>Host:</code>
          Çì´õ¾øÀÌ <code>172.20.30.50</code>·Î ¿äûÇϸé
          <code>www.example.com</code>ÀÌ ¼­ºñ½ºÇÑ´Ù.</p>
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="intraextra" id="intraextra">(³»ºÎ¿Í ¿ÜºÎ ÁÖ¼Ò¿Í °°ÀÌ)
          ´Ù¸¥ IP ÁÖ¼Ò·Î °°Àº ³»¿ëÀ» ¼­ºñ½ºÇϱâ.</a></h2>
      
          <p>¼­¹ö ÄÄÇ»ÅÍ¿¡ IP ÁÖ¼Ò°¡ µÎ°³ (<code>192.168.1.1</code>°ú
          <code>172.20.30.40</code>) ÀÖ´Ù. ÄÄÇ»ÅÍ´Â ³»ºÎ (ÀÎÆ®¶ó³Ý)
          ³×Æ®¿÷°ú ¿ÜºÎ (ÀÎÅͳÝ) ³×Æ®¿÷ »çÀÌ¿¡ À§Ä¡ÇÑ´Ù. ³×Æ®¿÷ ¹Û¿¡¼­
          <code>server.example.com</code>Àº ¿ÜºÎ ÁÖ¼Ò¸¦
          (<code>172.20.30.40</code>) ÀǹÌÇϰí, ³×Æ®¿÷ ³»ºÎ¿¡¼­ °°Àº
          À̸§À» ³»ºÎ ÁÖ¼Ò·Î (<code>192.168.1.1</code>) »ç¿ëÇÑ´Ù.</p>
      
          <p>¼­¹ö´Â <code>VirtualHost</code> ¼½¼Ç ÇѰ³·Î ³»ºÎ¿Í ¿ÜºÎ
          ÀÀ´ä¿¡ °°Àº ³»¿ëÀ» ¼­ºñ½ºÇÒ ¼ö ÀÖ´Ù.</p>
      
          <div class="example"><h3>¼­¹ö ¼³Á¤</h3><p><code>
          
      
          NameVirtualHost 192.168.1.1<br />
          NameVirtualHost 172.20.30.40<br />
      		<br />
          &lt;VirtualHost 192.168.1.1 172.20.30.40&gt;<br />
          <span class="indent">
              DocumentRoot /www/server1<br />
              ServerName server.example.com<br />
              ServerAlias server<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>ÀÌÁ¦ µÎ ³×Æ®¿÷¿¡¼­ µé¾î¿Â ¿äûÀ» °°Àº
          <code>VirtualHost</code>¿¡¼­ ¼­ºñ½ºÇÑ´Ù.</p>
      
          <div class="note">
                <h3>ÁÖÀÇ:</h3><p>³»ºÎ ³×Æ®¿÷¿¡¼­´Â ¿ÏÀüÇÑ È£½ºÆ®¸í
                <code>server.example.com</code> ´ë½Å À̸§
                <code>server</code>µµ °¡´ÉÇÏ´Ù.</p>
      
                <p>¶ÇÇÑ À§ÀÇ ¿¹¿¡¼­ IP ÁÖ¼Ò ´ë½Å <code>*</code>À»
                »ç¿ëÇÏ¿© ¼­¹ö°¡ ¸ðµç ÁÖ¼Ò¿¡ µ¿ÀÏÇÏ°Ô µ¿ÀÛÇÒ ¼ö
                ÀÖ´Ù.</p>
          </div>
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="port" id="port">¿©·¯ Æ÷Æ®¿¡¼­ ¼­·Î ´Ù¸¥ »çÀÌÆ®
          ¿î¿µÇϱâ.</a></h2>
      
          <p>°°Àº IPÀÇ ¿©·¯ Æ÷Æ®¿¡¼­ ¼­·Î ´Ù¸¥ µµ¸ÞÀÎÀ» ¼­ºñ½ºÇÑ´Ù°í
          °¡Á¤ÇÏÀÚ. ÀÌ´Â "NameVirtualHost" ű׿¡ Æ÷Æ®¸¦ Á¤ÀÇÇϸé
          °¡´ÉÇÏ´Ù. NameVirtualHost name:port¾øÀÌ &lt;VirtualHost
          name:port&gt;¸¸ ȤÀº Listen Áö½Ã¾î¸¸ »ç¿ëÇÏ¸é ¾ÈµÈ´Ù.</p>
      
          <div class="example"><h3>¼­¹ö ¼³Á¤</h3><p><code>
          
      
          Listen 80<br />
          Listen 8080<br />
      		<br />
          NameVirtualHost 172.20.30.40:80<br />
          NameVirtualHost 172.20.30.40:8080<br />
      		<br />
          &lt;VirtualHost 172.20.30.40:80&gt;<br />
          <span class="indent">
              ServerName www.example.com<br />
              DocumentRoot /www/domain-80<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost 172.20.30.40:8080&gt;<br />
          <span class="indent">
              ServerName www.example.com<br />
              DocumentRoot /www/domain-8080<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost 172.20.30.40:80&gt;<br />
          <span class="indent">
              ServerName www.example.org<br />
              DocumentRoot /www/otherdomain-80<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost 172.20.30.40:8080&gt;<br />
          <span class="indent">
              ServerName www.example.org<br />
              DocumentRoot /www/otherdomain-8080<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ip" id="ip">IP±â¹Ý °¡»óÈ£½ºÆ®</a></h2>
      
          <p>¼­¹ö´Â °¢°¢ <code>www.example.com</code>°ú
          <code>www.example.org</code>¿¡ ÇØ´çÇÏ´Â µÎ IP ÁÖ¼Ò¸¦
          (<code>172.20.30.40</code>°ú <code>172.20.30.50</code>)
          °¡Áø´Ù.</p>
      
          <div class="example"><h3>¼­¹ö ¼³Á¤</h3><p><code>
          
      
          Listen 80<br />
      		<br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          <span class="indent">
              DocumentRoot /www/example1<br />
              ServerName www.example.com<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost 172.20.30.50&gt;<br />
          <span class="indent">
              DocumentRoot /www/example2<br />
              ServerName www.example.org<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p><code>&lt;VirtualHost&gt;</code> Áö½Ã¾î·Î ÁöÁ¤ÇÑ ÁÖ¼Ò¿¡
          ÇØ´çÇÏÁö¾Ê´Â ÁÖ¼Ò·Î (¿¹¸¦ µé¾î, <code>localhost</code>)
          ¿äûÀÌ µé¾î¿À¸é ÁÖ¼­¹ö°¡ ÀÖ´Â °æ¿ì ÁÖ¼­¹ö°¡ ¼­ºñ½ºÇÑ´Ù.</p>
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ipport" id="ipport">Æ÷Æ®±â¹Ý°ú ip±â¹ÝÀÌ È¥ÇÕµÈ
          °¡»óÈ£½ºÆ®</a></h2>
      
          <p>¼­¹ö´Â °¢°¢ <code>www.example.com</code>°ú
          <code>www.example.org</code>¿¡ ÇØ´çÇÏ´Â µÎ IP ÁÖ¼Ò¸¦
          (<code>172.20.30.40</code>°ú <code>172.20.30.50</code>)
          °¡Áø´Ù. °¢ IPÀÇ 80¹ø°ú 8080¹ø Æ÷Æ®¿¡ °¡»óÈ£½ºÆ®¸¦ µ¹¸°´Ù.</p>
      
          <div class="example"><h3>¼­¹ö ¼³Á¤</h3><p><code>
          
      
          Listen 172.20.30.40:80<br />
          Listen 172.20.30.40:8080<br />
          Listen 172.20.30.50:80<br />
          Listen 172.20.30.50:8080<br />
      		<br />
          &lt;VirtualHost 172.20.30.40:80&gt;<br />
          <span class="indent">
              DocumentRoot /www/example1-80<br />
              ServerName www.example.com<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost 172.20.30.40:8080&gt;<br />
          <span class="indent">
              DocumentRoot /www/example1-8080<br />
              ServerName www.example.com<br />
      		</span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost 172.20.30.50:80&gt;<br />
          <span class="indent">
              DocumentRoot /www/example2-80<br />
              ServerName www.example.org<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost 172.20.30.50:8080&gt;<br />
          <span class="indent">
              DocumentRoot /www/example2-8080<br />
              ServerName www.example.org<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mixed" id="mixed">À̸§±â¹Ý°ú IP±â¹ÝÀÌ È¥ÇÕµÈ
          °¡»óÈ£½ºÆ®</a></h2>
      
          <p>ÁÖ¼ÒÁß ¸î¸îÀº À̸§±â¹Ý °¡»óÈ£½ºÆ®·Î, ´Ù¸¥ °ÍÀº IP±â¹Ý
          °¡»óÈ£½ºÆ®·Î ¼­ºñ½ºÇÏ°í ½Í´Ù.</p>
      
          <div class="example"><h3>¼­¹ö ¼³Á¤</h3><p><code>
          
      
          Listen 80<br />
      		<br />
          NameVirtualHost 172.20.30.40<br />
      		<br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          <span class="indent">
              DocumentRoot /www/example1<br />
              ServerName www.example.com<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          <span class="indent">
              DocumentRoot /www/example2<br />
              ServerName www.example.org<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          <span class="indent">
              DocumentRoot /www/example3<br />
              ServerName www.example3.net<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          # IP-±â¹Ý<br />
          &lt;VirtualHost 172.20.30.50&gt;<br />
          <span class="indent">
              DocumentRoot /www/example4<br />
              ServerName www.example4.edu<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost 172.20.30.60&gt;<br />
          <span class="indent">
              DocumentRoot /www/example5<br />
              ServerName www.example5.gov<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="default" id="default"><code>_default_</code> °¡»óÈ£½ºÆ®
          »ç¿ëÇϱâ</a></h2>
      
        	<h3><a name="defaultallports" id="defaultallports">¸ðµç Æ÷Æ®¿¡ ´ëÇÑ
          <code>_default_</code> °¡»óÈ£½ºÆ®</a></h3>
      
          <p>¾î¶² °¡»óÈ£½ºÆ®¿¡µµ ÇØ´çÇÏÁö¾ÊÀº IP ÁÖ¼Ò¿Í Æ÷Æ®¿¡ ´ëÇÑ
          <em>¸ðµç</em> ¿äûÀ» ó¸®Çϱâ.</p>
      
          <div class="example"><h3>¼­¹ö ¼³Á¤</h3><p><code>
          
      
          &lt;VirtualHost _default_:*&gt;<br />
          <span class="indent">
              DocumentRoot /www/default<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>default(±âº») °¡»óÈ£½ºÆ®ÀÇ Æ÷Æ®·Î ¿ÍÀϵåÄ«µå¸¦ »ç¿ëÇÏ¿© ¾î¶² ¿äûµµ
          ÁÖ¼­¹ö·Î ¸ø°¡µµ·Ï ¸¸µç´Ù.</p>
      
          <p>default °¡»óÈ£½ºÆ®´Â Àý´ë·Î À̸§±â¹Ý °¡»óÈ£½ºÆ®°¡ »ç¿ëÇÏ´Â
          ÁÖ¼Ò/Æ÷Æ®·ÎÀÇ ¿äûÀ» ¼­ºñ½ºÇÏÁö ¾Ê´Â´Ù. ¾Ë ¼ö ¾ø°Å³ª
          <code>Host:</code> Çì´õ°¡ »ý·«µÈ ¿äûÀº Ç×»ó ÃÖÃÊÀÇ À̸§±â¹Ý
          °¡»óÈ£½ºÆ®(¼³Á¤ÆÄÀÏ¿¡¼­
          ÁÖ¼Ò/Æ÷Æ®°¡ óÀ½À¸·Î ³ª¿Â °¡»óÈ£½ºÆ®)°¡ ¼­ºñ½ºÇÑ´Ù.</p>
      
          <p><code class="directive"><a href="../mod/mod_alias.html#aliasmatch">AliasMatch</a></code>³ª
          <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code>À»
          »ç¿ëÇÏ¿© ¾î¶² ¿äûÀ» ƯÁ¤ ÆäÀÌÁö(ȤÀº ½ºÅ©¸³Æ®)·Î
          ÀçÀÛ¼ºÇÒ(rewrite) ¼ö ÀÖ´Ù.</p>
          
      
          <h3><a name="defaultdifferentports" id="defaultdifferentports">¿©·¯ Æ÷Æ®¿¡ ´ëÇÑ
          <code>_default_</code> °¡»óÈ£½ºÆ®</a></h3>
      
          <p>À§ÀÇ °æ¿ì¿Í °°Áö¸¸, ¼­¹ö´Â ¿©·¯ Æ÷Æ®¸¦ ±â´Ù¸®°í 80¹ø
          Æ÷Æ®¿¡ ´ëÇØ¼­ Ãß°¡·Î <code>_default_</code> °¡»óÈ£½ºÆ®¸¦
          »ç¿ëÇÏ°í ½Í´Ù.</p>
      
          <div class="example"><h3>¼­¹ö ¼³Á¤</h3><p><code>
          
      
          &lt;VirtualHost _default_:80&gt;<br />
          <span class="indent">
              DocumentRoot /www/default80<br />
              # ...<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost _default_:*&gt;<br />
          <span class="indent">
              DocumentRoot /www/default<br />
              # ...<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>80¹ø Æ÷Æ®¿¡ ´ëÇÑ default °¡»óÈ£½ºÆ®´Â (<em>¹Ýµå½Ã</em>
          ¿ÍÀϵåÄ«µå Æ÷Æ®¸¦ °¡Áø ±âº» °¡»óÈ£½ºÆ® ÀÌÀü¿¡ ³ª¿Í¾ß ÇÑ´Ù)
          ÁöÁ¤ÇÏÁö¾ÊÀº IP ÁÖ¼Ò·Î º¸³»Áø ¸ðµç ¿äûÀ» ¼­ºñ½ºÇÑ´Ù.
          ÁÖ¼­¹ö´Â Àý´ë·Î ¿äûÀ» ¼­ºñ½ºÇÏÁö ¸øÇÑ´Ù.</p>
          
      
          <h3><a name="defaultoneport" id="defaultoneport">ÇÑ Æ÷Æ®¿¡ ´ëÇÑ
          <code>_default_</code> °¡»óÈ£½ºÆ®</a></h3>
      
          <p>80¹ø Æ÷Æ®¿¡ ´ëÇØ¼­¸¸ default °¡»óÈ£½ºÆ®¸¦ ¸¸µé°í ½Í´Ù.</p>
      
          <div class="example"><h3>¼­¹ö ¼³Á¤</h3><p><code>
          
      
          &lt;VirtualHost _default_:80&gt;<br />
          DocumentRoot /www/default<br />
          ...<br />
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>Æ÷Æ® 80¹ø¿¡ ÁöÁ¤ÇÏÁö¾ÊÀº ÁÖ¼Ò¿¡ ´ëÇÑ ¿äûÀº ±âº»
          °¡»óÈ£½ºÆ®°¡ ¼­ºñ½ºÇϰí, ´Ù¸¥ ÁöÁ¤ÇÏÁö¾ÊÀº ÁÖ¼Ò¿Í Æ÷Æ®¸¦
          °¡Áø ¿äûÀº ÁÖ ¼­¹ö°¡ ¼­ºñ½ºÇÑ´Ù.</p>
          
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="migrate" id="migrate">À̸§±â¹Ý °¡»óÈ£½ºÆ®¸¦ IP±â¹Ý
          °¡»óÈ£½ºÆ®·Î ¿Å±â±â</a></h2>
      
          <p>(<a href="#name">À̸§±â¹Ý</a>ÀÇ Ã¹¹øÂ° ¿¹¿¡¼­) È£½ºÆ®¸í
          <code>www.example.org</code>¿¡ ´ëÇÑ À̸§±â¹Ý °¡»óÈ£½ºÆ®´Â
          ÀÚ½ÅÀÇ IP ÁÖ¼Ò¸¦ °¡Á®¾ß ÇÑ´Ù. À̸§±â¹Ý °¡»óÈ£½ºÆ®ÀÇ ÀÌÀü
          IP ÁÖ¼Ò¸¦ ij½ÌÇÏ´Â ³×ÀÓ¼­¹ö³ª ÇÁ·Ï½Ã¿ÍÀÇ ¹®Á¦¸¦ ÇÇÇϱâÀ§ÇØ
          ¿Å±â´Â µ¿¾È µÑ ¸ðµÎ¸¦ ¼­ºñ½ºÇÏ°í ½Í´Ù.</p>
      
          <p>
           ¹æ¹ýÀº <code>VirtualHost</code> Áö½Ã¾î¿¡ »õ IP ÁÖ¼Ò¸¸À»
          (<code>172.20.30.50</code>) Ãß°¡ÇϸéµÇ¹Ç·Î ½±´Ù.</p>
      
          <div class="example"><h3>¼­¹ö ¼³Á¤</h3><p><code>
          
      
          Listen 80<br />
          ServerName www.example.com<br />
          DocumentRoot /www/example1<br />
      		<br />
          NameVirtualHost 172.20.30.40<br />
      		<br />
          &lt;VirtualHost 172.20.30.40 172.20.30.50&gt;<br />
          <span class="indent">
              DocumentRoot /www/example2<br />
              ServerName www.example.org<br />
              # ...<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          <span class="indent">
              DocumentRoot /www/example3<br />
              ServerName www.example.net<br />
              ServerAlias *.example.net<br />
              # ...<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>ÀÌÁ¦ (IP±â¹Ý °¡»óÈ£½ºÆ®¸¦ ÅëÇÑ) »õ·Î¿î ÁÖ¼Ò¿Í (À̸§±â¹Ý
          °¡»óÈ£½ºÆ®¸¦ ÅëÇÑ) ÀÌÀü ÁÖ¼Ò ¸ðµÎ °¡»óÈ£½ºÆ®¿¡ Á¢±ÙÇÒ
          ¼ö ÀÖ´Ù.</p>
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="serverpath" id="serverpath"><code>ServerPath</code>
      	Áö½Ã¾î »ç¿ëÇϱâ</a></h2>
      
          <p>µÎ À̸§±â¹Ý °¡»óÈ£½ºÆ®¸¦ °¡Áø ¼­¹ö°¡ ÀÖ´Ù. ¿Ã¹Ù¸¥
          °¡»óÈ£½ºÆ®¸¦ ¼±ÅÃÇϱâÀ§ÇØ Å¬¶óÀÌ¾ðÆ®´Â ¿Ã¹Ù¸¥
          <code>Host:</code> Çì´õ¸¦ º¸³»¾ß ÇÑ´Ù. ¿À·¡µÈ HTTP/1.0
          Ŭ¶óÀÌ¾ðÆ®°¡ ÀÌ Çì´õ¸¦ º¸³»Áö ¸øÇÏ¸é ¾ÆÆÄÄ¡´Â Ŭ¶óÀÌ¾ðÆ®°¡
          ¾î¶² °¡»óÈ£½ºÆ®¸¦ º¸·Á°íÇÏ´ÂÁö ¾Ë ¼ö ¾ø´Ù (±×·¡¼­ ÃÖÃÊÀÇ
          °¡»óÈ£½ºÆ®°¡ ¿äûÀ» ¼­ºñ½ºÇÑ´Ù). ¿À·¡µÈ ºê¶ó¿ìÀú¿Í °¡´ÉÇÑ È£È¯À»
          À¯ÁöÇϱâÀ§ÇØ ÃÖÃÊÀÇ °¡»óÈ£½ºÆ®¸¦ ¸¸µé°í, ¿©±â¿¡ À̸§±â¹Ý
          °¡»óÈ£½ºÆ®ÀÇ URL Á¢µÎ»ç¸¦ Æ÷ÇÔÇÏ´Â ¸µÅ© ¸ñ·Ï ÆäÀÌÁö¸¦
          µÐ´Ù.</p>
      
          <div class="example"><h3>¼­¹ö ¼³Á¤</h3><p><code>
          
      
          NameVirtualHost 172.20.30.40<br />
      		<br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          <span class="indent">
              # primary vhost<br />
              DocumentRoot /www/subdomain<br />
              RewriteEngine On<br />
              RewriteRule ^/.* /www/subdomain/index.html<br />
              # ...<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          DocumentRoot /www/subdomain/sub1<br />
          <span class="indent">
              ServerName www.sub1.domain.tld<br />
              ServerPath /sub1/<br />
              RewriteEngine On<br />
              RewriteRule ^(/sub1/.*) /www/subdomain$1<br />
              # ...<br />
          </span>
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost 172.20.30.40&gt;<br />
          <span class="indent">
              DocumentRoot /www/subdomain/sub2<br />
              ServerName www.sub2.domain.tld<br />
              ServerPath /sub2/<br />
              RewriteEngine On<br />
              RewriteRule ^(/sub2/.*) /www/subdomain$1<br />
              # ...<br />
          </span>
          &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p><code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code> Áö½Ã¾î¶§¹®¿¡
          URL <code>http://www.sub1.domain.tld/sub1/</code>¿¡ ´ëÇÑ
          ¿äûÀº <em>Ç×»ó</em> subl-°¡»óÈ£½ºÆ®°¡ ¼­ºñ½ºÇÑ´Ù.<br />
          Ŭ¶óÀÌ¾ðÆ®°¡ ¿Ã¹Ù¸¥ <code>Host:</code> Çì´õ¸¦ º¸³½´Ù¸é,
          URL <code>http://www.sub1.domain.tld/</code>¿¡ ´ëÇÑ ¿äûÀº
          subl-°¡»óÈ£½ºÆ®¿¡¼­¸¸ ¼­ºñ½ºÇÑ´Ù. ¸¸¾à <code>Host:</code> Çì´õ¸¦
          º¸³»Áö¾ÊÀ¸¸é Ŭ¶óÀÌ¾ðÆ®´Â ÃÖÃÊÀÇ È£½ºÆ®¿¡ ÀÖ´Â Á¤º¸ÆäÀÌÁö¸¦
          º¸°ÔµÈ´Ù.</p>
      
          <p>¿©±â¿¡ ¹®Á¦°¡ ÀÖÀ½À» ÁÖÀÇÇ϶ó: Ŭ¶óÀÌ¾ðÆ®°¡
          <code>Host:</code> Çì´õ¸¦ º¸³»Áö¾ÊÀ¸¸é
          <code>http://www.sub2.domain.tld/sub1/</code>¿¡ ´ëÇÑ ¿äûµµ
          subl-°¡»óÈ£½ºÆ®°¡ ¼­ºñ½ºÇÑ´Ù.</p>
      
          <p><code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code>
          Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ¿Ã¹Ù¸¥ <code>Host:</code> Çì´õ¸¦ º¸³»´Â
          Ŭ¶óÀÌ¾ðÆ®´Â (<em>¿¹¸¦ µé¾î</em>, URL ÀüÄ¡»ç°¡ Àְųª ¾ø´Â)
          µÎ URLÀ» ¸ðµÎ »ç¿ëÇÒ ¼ö ÀÖ´Ù.</p>
      
      	</div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/vhosts/examples.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/examples.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/examples.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/examples.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/examples.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/examples.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/name-based.html.ja.utf8���������������������������������������������0000644�0000000�0000050�00000056253�13412755316�021151� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="../">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a> &gt; <a href="./">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></div><div id="page-content"><div id="preamble"><h1>åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../de/vhosts/name-based.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/name-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/name-based.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/name-based.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/name-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/name-based.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
          <p>ã“ã®æ–‡æ›¸ã§ã¯åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’ã©ã‚“ãªã¨ãã€
          ã©ã†ã‚„ã£ã¦ä½¿ã†ã‹ã‚’説明ã—ã¾ã™ã€‚</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#namevip">åå‰ãƒ™ãƒ¼ã‚¹ã¨ IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®æ¯”較</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#using">åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’利用ã™ã‚‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#compat">å¤ã„ブラウザã¨ã®äº’æ›æ€§</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="ip-based.html">ãƒãƒ¼ãƒ ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></li><li><a href="details.html">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ãƒžãƒƒãƒãƒ³ã‚°ã«ã¤ã„ã¦ã®è©³ç´°</a></li><li><a href="mass.html">大é‡ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®å‹•çš„ãªè¨­å®š</a></li><li><a href="examples.html">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ä¸€èˆ¬çš„ãªè¨­å®šä¾‹</a></li><li><a href="examples.html#serverpath">ServerPath 設定例</a></li><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="namevip" id="namevip">åå‰ãƒ™ãƒ¼ã‚¹ã¨ IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®æ¯”較</a></h2>
      
          <p>IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã§ã¯ã€å¿œç­”ã™ã‚‹
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¸ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’決定ã™ã‚‹ãŸã‚ã« IP
          アドレスを使用ã—ã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€ãれãžã‚Œã®ãƒ›ã‚¹ãƒˆã«å€‹ã€…ã« IP
          アドレスãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ã“れã«å¯¾ã—ã¦åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã§ã¯ã€
          クライアント㌠HTTP ヘッダã®ä¸€éƒ¨ã¨ã—ã¦ãƒ›ã‚¹ãƒˆåを告ã’ã‚‹ã€
          ã¨ã„ã†ã“ã¨ã«ä¾å­˜ã—ã¾ã™ã€‚ã“ã®æŠ€è¡“ã§åŒä¸€ IP 
          アドレスを異ãªã‚‹å¤šæ•°ã®ãƒ›ã‚¹ãƒˆã§å…±æœ‰ã—ã¦ã„ã¾ã™ã€‚</p>
      
          <p>åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¯é€šå¸¸å˜ç´”ã§ã€ãれãžã‚Œã®ãƒ›ã‚¹ãƒˆåã¨
          ãれã«å¯¾å¿œã™ã‚‹æ­£ç¢ºãª IP アドレスを DNS ã§è¨­å®šã—ã€ç•°ãªã‚‹
          ホストåを区別ã™ã‚‹ã‚ˆã†ã« Apache HTTP サーãƒã‚’設定ã™ã‚‹ã ã‘ã§ã™ã€‚
          ã•らã«ã€åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¯ä¸è¶³ã™ã‚‹ IP
          アドレスã®éœ€è¦ã‚’ç·©å’Œã—ã¾ã™ã€‚ã—ãŸãŒã£ã¦ã€IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’
          é¸æŠžã™ã¹ã特定ã®ç†ç”±ãŒãªã‘れã°åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’使ã†ã¹ãã§ã™ã€‚
          IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’使用ã™ã‚‹ã“ã¨ã‚’考慮ã™ã‚‹ç†ç”±ã¨ã—ã¦ã€</p>
      
          <ul> 
            <li>åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«å¯¾å¿œã—ã¦ã„ãªã„å¤ã„クライアントãŒã‚ã‚‹
            åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãŒåƒããŸã‚ã«ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯
            HTTP ホストヘッダをé€ã£ã¦ã“ãªã‘れã°ãªã‚Šã¾ã›ã‚“。
            ã“れ㯠HTTP/1.1 ã®ä»•様ã§è¦æ±‚ã•れã¦ã„ã¦ã€ã™ã¹ã¦ã®ç¾ä»£çš„ãª
            HTTP/1.0 ブラウザã§ã‚‚æ‹¡å¼µã¨ã—ã¦å®Ÿè£…ã•れã¦ã„ã¾ã™ã€‚
            ã¨ã¦ã‚‚å¤ã„クライアントをサãƒãƒ¼ãƒˆã—ã¤ã¤ã€åå‰ãƒ™ãƒ¼ã‚¹ã®
            ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’行ã„ãŸã„å ´åˆã¯ã€ã“ã®æ–‡æ›¸ã®æœ€å¾Œã®æ–¹ã«
            書ã‹ã‚Œã¦ã„る解決策ã«ãªã‚‹ã‹ã‚‚ã—れãªã„方法を見ã¦ãã ã•ã„。</li>
      
            <li>åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¯ SSL プロトコルã®ç‰¹å¾´ã«ã‚ˆã‚Šã€
            SSL セキュアサーãƒã«ã¯ä½¿ãˆã¾ã›ã‚“。</li>
      
            <li>オペレーティングシステムやãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯è£…ç½®ã®ãªã‹ã«ã¯ã€
            別㮠IP アドレス上ã§ãªã„å ´åˆã€è¤‡æ•°ã®ãƒ›ã‚¹ãƒˆã‚’別扱ã„ã§ããªã„よã†ãª
            帯域管ç†ã®æ–¹æ³•を実装ã—ã¦ã„ã‚‹ã‚‚ã®ãŒã‚りã¾ã™ã€‚</li>
          </ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="using" id="using">åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’利用ã™ã‚‹</a></h2>
      
      <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td><ul><li><code class="module"><a href="../mod/core.html">core</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code></li><li><code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code></li><li><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code></li><li><code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code></li><li><code class="directive"><a href="../mod/core.html#virtualhost">VirtualHost</a></code></li><li><code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
          <p>åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’使ã†ã«ã¯ã€ãã®ãƒ›ã‚¹ãƒˆã¸ã®
          リクエストをå—ã‘付ã‘るサーãƒã® IP アドレス (ã‚‚ã—ã‹ã—ãŸã‚‰ãƒãƒ¼ãƒˆã‚‚)
          を指定ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
          ã“れ㯠<code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code>
          ディレクティブã§è¨­å®šã—ã¾ã™ã€‚通常ã€<code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code> ã§
          <code>*</code> ã®å±žæ€§ã‚’使ã£ã¦ã‚µãƒ¼ãƒã®å…¨ã¦ã® IP アドレスを使ã„ã¾ã™ã€‚
          (例ãˆã° SSL ã®ä½¿ç”¨ãªã©ã§) 複数ã®ãƒãƒ¼ãƒˆã‚’使ã†ã“ã¨ã‚’計画ã—ã¦ã„ã‚‹ã®ã§ã‚れã°ã€
          引数㫠<code>*:80</code> ã®ã‚ˆã†ã«ãƒãƒ¼ãƒˆã‚‚å«ã‚るよã†ã«ã—ã¦ãã ã•ã„。
          <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code> ディレクティブã§
          IP アドレスを書ã„ã¦ã‚‚ã€
          自動的ã«ã‚µãƒ¼ãƒãŒãã® IP アドレスをリッスンã™ã‚‹ã¨ã„ã†ã“ã¨ã¯ãªã„ã“ã¨ã«
          注æ„ã—ã¦ãã ã•ã„。詳細ã¯ã€Œ<a href="../bind.html">Apache ã®ä½¿ã†ã‚¢ãƒ‰ãƒ¬ã‚¹ã¨
          ãƒãƒ¼ãƒˆã‚’設定ã™ã‚‹</a>ã€ã‚’読んã§ãã ã•ã„。ã•らã«ã€ã“ã“ã§æŒ‡å®šã•れãŸ
          IP アドレスã¯å…¨ã¦ã‚µãƒ¼ãƒã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ェースã¨é–¢é€£ä»˜ã‘られã¦
          ã„ãªã‘れã°ãªã‚Šã¾ã›ã‚“。</p>
      
          <p>次ã¯ã€æ‰±ã†ãƒ›ã‚¹ãƒˆãれãžã‚Œã«å¯¾ã—㦠<code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> ブロックを
          作æˆã—ã¦ãã ã•ã„。<code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          ディレクティブã®å¼•数㯠<code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code>
          ディレクティブã®å¼•æ•°ã¨åŒã˜ã«ã—ã¦ãã ã•ã„ (ã™ãªã‚ã¡ã€IP アドレスã‹ã€å…¨ã¦ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’æ„味ã™ã‚‹
          <code>*</code>)。ãれãžã‚Œã® <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          ディレクティブã®ä¸­ã«ã¯ã€æœ€ä½Žé™ã€ã©ã®ãƒ›ã‚¹ãƒˆãŒæ‰±ã‚れるã‹ã‚’示㙠<code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> ディレクティブã¨ã€
          ãã®ãƒ›ã‚¹ãƒˆç”¨ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ãŒãƒ•ァイルシステム上ã®ã©ã“ã«ã‚ã‚‹ã‹ã‚’示ã™
          <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code> ディレクティブを
          書ãå¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      
          <div class="note"><h3>メインホストã¯ãªããªã‚Šã¾ã™</h3>
              <p>æ—¢ã«ã‚るウェブサーãƒã«ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’追加ã™ã‚‹å ´åˆã€
              既存ã®ã‚¦ã‚§ãƒ–サーãƒã«å¯¾ã—ã¦ã‚‚ <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
              ブロックを作らãªã‘れã°ãªã‚Šã¾ã›ã‚“。ã“ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®
              <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> ã¨
              <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>
              ã¯ã€ã‚°ãƒ­ãƒ¼ãƒãƒ«ãª <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> ã¨
              <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>
              ã¨åŒã˜ã‚‚ã®ã«ã—ã¾ã™ã€‚ã¾ãŸã€ã“ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’設定ファイルã®ä¸­ã§
              先頭ã«ç½®ã„ã¦ã€ãƒ‡ãƒ•ォルトホストã¨ã—ã¦å‹•作ã™ã‚‹ã‚ˆã†ã«ã—ã¾ã™ã€‚</p>
          </div>
      
          <p>ãŸã¨ãˆã°ã€<code>www.domain.tld</code> ã‚’å‹•ã‹ã—ã¦ã„ã¦ã€
          ã•らã«ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ <code>www.otherdomain.tld</code>
          を追加ã™ã‚‹ã¨ã—ã¾ã—ょã†ã€‚ã“ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¯åŒä¸€ IP を指ã—ã¦ã„ã‚‹ã¨ã—ã¾ã™ã€‚
          ãã®ã‚ˆã†ãªå ´åˆã¯ã€<code>httpd.conf</code>
          ã«ä»¥ä¸‹ã®ã‚ˆã†ãªã‚³ãƒ¼ãƒ‰ã‚’追加ã™ã‚‹ã ã‘ã§ã™</p>
      
          <div class="example"><p><code>
              NameVirtualHost *:80<br />
              <br />
              &lt;VirtualHost *:80&gt;<br />
              <span class="indent">
                  ServerName www.domain.tld<br />
                  ServerAlias domain.tld *.domain.tld<br />
                  DocumentRoot /www/domain<br />
              </span>
              &lt;/VirtualHost&gt;<br />
              <br />
              &lt;VirtualHost *:80&gt;<br />
              <span class="indent">ServerName www.otherdomain.tld<br />
                  DocumentRoot /www/otherdomain<br />
              </span>
              &lt;/VirtualHost&gt;<br />
          </code></p></div>
      
          <p><code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code> åŠã³
          <code class="directive"><a href="../mod/core.html#virtualhost">VirtualHost</a></code> ã®ã©ã¡ã‚‰ã®å ´åˆã‚‚ã€
          * ã®éƒ¨åˆ†ã«ã¯æ˜Žç¤ºçš„ã« IP アドレスを指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          例ãˆã°ã€ã‚ã‚‹ IP アドレスã§ã¯åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’使ã„ãŸã„一方ã§ã€
          別㮠IP アドレスã§ã¯ã€ä»–ã® IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚„
          別組ã®åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’使ã„ãŸã„å ´åˆã€
          ãã†è¨­å®šã™ã‚‹ã“ã¨ã«ãªã‚‹ã§ã—ょã†ã€‚</p>
      
          <p>複数ã®åå‰ã§ã‚µãƒ¼ãƒã‚¢ã‚¯ã‚»ã‚¹ãŒã§ãるよã†ã«ã—ãŸã„ã“ã¨ã‚‚多ã„ã§ã—ょã†ã€‚
          ã“ã®ã‚ˆã†ãªã“ã¨ã¯ã€<code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> ディレクティブを <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          セクションã«è¨˜è¿°ã™ã‚‹ã“ã¨ã§å®Ÿç¾ã§ãã¾ã™ã€‚
          例ãˆã°ä¸Šè¨˜ã® <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> ã®ä¾‹ã§ã‚れã°ã€
          次ã®ã‚ˆã†ã«ä¸€è¦§ã«æŒ™ã’られãŸåå‰ãŒã€
          ユーザãŒåŒä¸€ã®ã‚¦ã‚§ãƒ–サイトã¨ã—ã¦ç›®ã«ã—ã¦ä½¿ç”¨ã§ãるサーãƒåã§ã‚ã‚‹ã€
          㨠<code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code>
          ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã§ãã¾ã™ã€‚</p> 
      
          <div class="example"><p><code>
              ServerAlias domain.tld *.domain.tld
          </code></p></div>
      
          <p><code>domain.tld</code> ドメインã¸ã®å…¨ã¦ã®ãƒ›ã‚¹ãƒˆã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯
          <code>www.domain.tld</code> ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãŒå‡¦ç†ã—ã¾ã™ã€‚
          åå‰ã‚’マッãƒã•ã›ã‚‹ãŸã‚ã«ã€ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰æ–‡å­— * ã‚„ ? 
          を使用ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ã‚‚ã¡ã‚ã‚“æ€ã„ã¤ãã®åå‰ã‚’作ã£ã¦ã€
          <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> ã‚„ 
          <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code>
          ã«ãã®åå‰ã‚’書ãã¨ã„ã£ãŸã“ã¨ã¯ã§ãã¾ã›ã‚“。ã¾ãšã¯ã€
          ã“れらã®åå‰ãŒ サーãƒã«ä»˜ã‘られ㟠IP アドレスã«ãƒžãƒƒãƒ—ã•れるよã†ã«
          DNS サーãƒã‚’é©åˆ‡ã«è¨­å®šã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。</p>
      
          <p>最後ã«ã€<code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> コンテナã®ä¸­ã«
          ä»–ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を書ãã“ã¨ã§ã€ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®è¨­å®šã‚’ç´°ã‹ã調整
          ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          ã»ã¨ã‚“ã©ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã“れらã®ã‚³ãƒ³ãƒ†ãƒŠã«è¨­ç½®ã™ã‚‹ã“ã¨ãŒã§ãã¦ã€
          変更点ã¯ãã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«å¯¾ã—ã¦ã®ã¿æœ‰åйã«ãªã‚Šã¾ã™ã€‚
          ã©ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を書ãã“ã¨ãŒã§ãã‚‹ã‹ã¯ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã® <a href="../mod/directive-dist.html#context">コンテキスト</a> ã‚’
          調ã¹ã¦ãã ã•ã„。<em>主サーãƒã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆ</em>
          (<code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          コンテナã®å¤–) ã®è¨­å®šç”¨ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã§ã®è¨­å®šã§
          上書ãã•れãªã„å ´åˆã®ã¿ä½¿ç”¨ã•れã¾ã™ã€‚</p>
      
          <p>ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæ¥ã‚‹ã¨ã€ã‚µãƒ¼ãƒã¯ã¾ãšæœ€åˆã« <code class="directive"><a href="../mod/core.html#namevirtualhost">&lt;NameVirtualHost&gt;</a></code>
          ã«ãƒžãƒƒãƒã™ã‚‹ IP アドレスã‹ã©ã†ã‹ã‚’ãƒã‚§ãƒƒã‚¯ã—ã¾ã™ã€‚マッãƒã™ã‚Œã°
          マッãƒã—㟠IP アドレス㮠<code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          ã®ãれãžã‚Œã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã®ä¸­ã‹ã‚‰ 
          <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> ã‹
          <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> 
          ã«è¦æ±‚ã•れãŸãƒ›ã‚¹ãƒˆåãŒã‚ã‚‹ã‹æŽ¢ã—ã¾ã™ã€‚
          見ã¤ã‹ã‚Œã°ãã®ã‚µãƒ¼ãƒç”¨ã®è¨­å®šã‚’使ã„ã¾ã™ã€‚マッãƒã™ã‚‹ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
          ãŒè¦‹ã¤ã‹ã‚‰ãªã‘れã°ã€ãƒžãƒƒãƒã—㟠IP アドレス㮠
          <strong>ãƒªã‚¹ãƒˆã®æœ€åˆã«ã‚ã‚‹ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</strong> ãŒä½¿ã‚れã¾ã™ã€‚</p>
      
          <p>çµæžœã¨ã—ã¦ã€ãƒªã‚¹ãƒˆã®æœ€åˆã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãŒ <em>デフォルト</em> ã®
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ãªã‚Šã¾ã™ã€‚IP アドレス㌠<code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code>
          ディレクティブã«ãƒžãƒƒãƒã—ãŸå ´åˆã¯ã€<em>メインã®ã‚µãƒ¼ãƒ</em> ã®
          <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code> 
          ã¯<strong>決ã—ã¦ä½¿ã‚れã¾ã›ã‚“</strong>
          ã©ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ã‚‚マッãƒã—ãªã„リクエストã«å¯¾ã—ã¦ã€
          特別ãªè¨­å®šã‚’ã—ãŸã„ã®ã§ã‚れã°ã€è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ä¸­ã®æœ€åˆã®
          <code>&lt;VirtualHost&gt;</code> コンテナã«ãれを記述ã—ã¦ãã ã•ã„。</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="compat" id="compat">å¤ã„ブラウザã¨ã®äº’æ›æ€§</a></h2>
      
          <p>以å‰è¿°ã¹ãŸã‚ˆã†ã«ã€åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãŒæ­£ã—ã動作ã™ã‚‹
          ãŸã‚ã«å¿…è¦ãªæƒ…報をé€ã£ã¦ã“ãªã„クライアントãŒä¾ç„¶ã¨ã—ã¦å­˜åœ¨ã—ã¦ã„ã¾ã™ã€‚
          ãã®ã‚ˆã†ãªã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«å¯¾ã—ã¦ã¯ã€è©²å½“ã™ã‚‹ IP アドレスã«ã¤ã„ã¦ã€
          一番最åˆã«è¨­å®šã•れã¦ã„ã‚‹ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
          (<cite>プライマリ</cite>ã®åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ)
          ã‹ã‚‰ãƒšãƒ¼ã‚¸ãŒé€ã‚Šè¿”ã•れã¾ã™ã€‚</p>
      
          <div class="note"><h3>ã©ã®ãらã„å¤ã„ã® ?</h3>
          <p>「å¤ã„ã€ã¨è¡¨ç¾ã—ã¦ã„ã‚‹å ´åˆã€æœ¬å½“ã«å¤ã„ã“ã¨ã‚’æ„味ã—ã¦ä½¿ã£ã¦ã„ã¾ã™ã€‚
          ä¸å¹¸ã«ã—ã¦ä»Šç¾åœ¨ã§ã‚‚ã“ã®ã‚ˆã†ãªå¤ã„ブラウザã«é­é‡ã™ã‚‹ã“ã¨ãŒã‚りã¾ã™ã€‚
          ç¾åœ¨ã®ãƒ–ラウザã¯å…¨ã¦ã€åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«å¿…è¦ãª
          <code>Host</code> ヘッダをé€ã‚Šã¾ã™ã€‚</p>
          </div>
      
          <p><a href="../mod/core.html#serverpath"><code>ServerPath</code></a>
          ディレクティブã§å¯¾å‡¦ãŒå¯èƒ½ã§ã™ã€‚ã¡ã‚‡ã£ã¨ä¸æ ¼å¥½ã§ã™ã‘れã©ã‚‚。</p>
      
          <p>設定例</p>
      
          <div class="example"><p><code>
              NameVirtualHost 111.22.33.44<br />
              <br />
              &lt;VirtualHost 111.22.33.44&gt;<br />
              <span class="indent">
                  ServerName www.domain.tld<br />
                  ServerPath /domain<br />
                  DocumentRoot /web/domain<br />
              </span>
              &lt;/VirtualHost&gt;<br />
          </code></p></div>
      
          <p>ã“ã®ä¾‹ã«ã¯ã©ã†ã„ã†æ„味ãŒã‚ã‚‹ã§ã—ょã†ã‹? ã“れã¯
          "<code>/domain</code>" ã§å§‹ã¾ã‚‹ URI ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ã™ã¹ã¦ã€
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ <code>www.domain.tld</code> ã§å‡¦ç†ã•れるã€
          ã¨ã„ã†æ„味ã§ã™ã€‚ã¤ã¾ã‚Šã€ã™ã¹ã¦ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã§
          <code>http://www.domain.tld/domain/</code> ã§ã‚¢ã‚¯ã‚»ã‚¹ã§ãるページãŒã€
          <code>Host:</code> ヘッダをé€ã£ã¦ãるクライアントã§ã‚れã°
          <code>http://www.domain.tld/</code> ã¨ã—ã¦ã‚‚アクセスã§ãã‚‹ã€
          ã¨ã„ã†æ„味ã§ã™ã€‚</p>
      
          <p>ã“れãŒå‹•作ã™ã‚‹ã‚ˆã†ã«ã™ã‚‹ã«ã¯ã€
          プライマリã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ãƒšãƒ¼ã‚¸ã«
          <code>http://www.domain.tld/domain/</code> ã¸ã®ãƒªãƒ³ã‚¯ã‚’設置ã—ã¾ã™ã€‚
          ãã—ã¦ã€ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ãƒšãƒ¼ã‚¸ã§ã¯ã€ç´”粋ãªç›¸å¯¾ãƒªãƒ³ã‚¯ (<em>例:</em>
          "<code>file.html</code>" ã‚„ "<code>../icons/image.gif</code>")ã€
          ã‚ã‚‹ã„㯠<code>/domain/</code> ã§å§‹ã¾ã‚‹ãƒªãƒ³ã‚¯ (<em>例:</em>
          "<code>http://www.domain.tld/domain/misc/file.html</code>" ã‚„
          "<code>/domain/misc/file.html</code>") ã ã‘を設置ã—ã¾ã™ã€‚</p>
      
          <p>ã“れã«ã¯ã€å¹¾åˆ†ã‹ã®è¦å¾‹ãŒå¿…è¦ã¨ãªã‚Šã¾ã™ãŒã€
          ã“ã®ã‚ˆã†ãªã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã‚’忠実ã«å®ˆã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ãŸã„ã¦ã„ã®å ´åˆã€
          ã™ã¹ã¦ã®ãƒ–ラウザ㧠― æ–°ã—ã„ブラウザã§ã‚‚å¤ã„ã‚‚ã®ã§ã‚‚ ―
          作æˆã—ãŸãƒšãƒ¼ã‚¸ãŒè¦‹ãˆã‚‹ã¨ã„ã†ã“ã¨ã‚’ä¿è¨¼ã—ã¾ã™ã€‚</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../de/vhosts/name-based.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/name-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/name-based.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/name-based.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/name-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/name-based.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/name-based.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/ip-based.html.fr.utf8�����������������������������������������������0000644�0000000�0000050�00000032255�13412755316�020652� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Support Apache des serveurs virtuels par IP - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Serveurs virtuels</a></div><div id="page-content"><div id="preamble"><h1>Support Apache des serveurs virtuels par IP</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/vhosts/ip-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/ip-based.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/ip-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/ip-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/ip-based.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#requirements">Système requis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#howto">Comment configurer Apache</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#multiple">Configuration de processus multiples</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#single">Configuration d'un unique processus
      résident pour des serveurs virtuels</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li>
      <a href="name-based.html">Support Apache des serveurs virtuels par nom</a>
      </li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="requirements" id="requirements">Système requis</a></h2>
      
          <p>Comme l'indique le terme <cite>par IP</cite>, le serveur
          <strong>doit disposer de différentes paires adresses IP/port pour chaque
          serveur virtuel par IP</strong>. La machine peut posséder
          plusieurs connexions physiques au réseau, ou utiliser des
          interfaces virtuelles qui sont supportées par la plupart des
          systèmes d'exploitation modernes (Consultez la documentation des
          systèmes d'exploitation pour plus de détails, notamment les "alias
          IP" et la commande "ifconfig" pour les activer), et/ou utiliser
          plusieurs numéros de port.</p>
      
          <p>Selon la terminologie du serveur HTTP Apache, l'utilisation d'une
          seule adresse IP avec plusieurs ports TCP s'apparente aussi à de
          l'hébergement virtuel basé sur IP.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="howto" id="howto">Comment configurer Apache</a></h2>
      
          <p>Il y a deux manières de configurer Apache pour le support de
          multiples serveurs virtuels. Il suffit soit de faire tourner un
          processus résident <code class="program"><a href="../programs/httpd.html">httpd</a></code> pour chaque nom de
          domaine, soit de faire tourner un unique processus résident qui
          gère tous les serveurs virtuels.</p>
      
          <p>Utilisez des processus résidents multiples lorsque&nbsp;:</p>
      
          <ul>
            <li>il y a des problèmes de répartition de sécurité, tels
            qu'une entreprise1 ne souhaite que personne d'une entreprise2
            ne puisse lire ses données excepté via le Web. Dans ce cas,
            vous aurez besoin de deux processus résidents, chacun fonctionnant
            avec des paramètres <code class="directive"><a href="../mod/mod_unixd.html#user">User</a></code>,
            <code class="directive"><a href="../mod/mod_unixd.html#group">Group</a></code>,
            <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code>, et
            <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> différents.</li>
      
            <li>vous disposez suffisamment de mémoire et de
            <a href="../misc/descriptors.html">descripteurs de fichiers</a>
            pour l'écoute de chaque alias IP de la machine. Il est seulement
            possible d'appliquer la directive
            <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code>, soit sur toutes
            les adresses avec le joker "*", soit uniquement sur des adresses
            spécifiques. Donc, si vous avez besoin d'écouter une adresse
            en particulier, vous devrez le faire pour l'ensemble des
            autres adresses (Bien qu'il soit plus simple de lancer un
            processus <code class="program"><a href="../programs/httpd.html">httpd</a></code> pour écouter N-1 adresses,
            et un autre pour l'adresse restante).</li>
          </ul>
      
          <p>Utilisez un unique processus résident lorsque&nbsp;:</p>
      
          <ul>
            <li>le partage de la configuration httpd entre les serveurs
            virtuels est acceptable.</li>
      
            <li>la machine assume déjà une grande quantité de requêtes, et
            que l'ajout de processus résidents supplémentaires en affecterait
            les performances.</li>
          </ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="multiple" id="multiple">Configuration de processus multiples</a></h2>
      
          <p>Créez une installation indépendante du programme
          <code class="program"><a href="../programs/httpd.html">httpd</a></code> pour chaque serveur virtuel. Pour
          chacune d'elle, utilisez la directive
          <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> dans le fichier
          de configuration pour définir l'adresse IP (ou serveur virtuel)
          que le processus résident doit gérer. Par exemple&nbsp;:</p>
      
          <pre class="prettyprint lang-config">Listen 192.0.2.100:80</pre>
      
      
          <p>Il est recommandé d'utiliser une adresse IP plutôt qu'un nom
          de domaine (consultez <a href="../dns-caveats.html">Problèmes DNS
          avec Apache</a>).</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="single" id="single">Configuration d'un unique processus
      résident pour des serveurs virtuels</a></h2>
      
          <p>Dans ce cas, un unique processus httpd va gérer les requêtes
          pour le serveur principal et tous les serveurs virtuels. Dans le
          fichier de configuration, la directive
          <code class="directive"><a href="../mod/core.html#virtualhost">VirtualHost</a></code> va servir à
          définir les autres directives
          <code class="directive"><a href="../mod/core.html#serveradmin">ServerAdmin</a></code>,
          <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>,
          <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>,
          <code class="directive"><a href="../mod/core.html#errorlog">ErrorLog</a></code> et
          <code class="directive"><a href="../mod/mod_log_config.html#transferlog">TransferLog</a></code> ou
          <code class="directive"><a href="../mod/mod_log_config.html#customlog">CustomLog</a></code> avec des
          valeurs différentes pour chaque serveur virtuel. Par exemple&nbsp;:</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost 172.20.30.40:80&gt;
          ServerAdmin webmaster@www1.example.com
          DocumentRoot "/www/vhosts/www1"
          ServerName www1.example.com
          ErrorLog "/www/logs/www1/error_log"
          CustomLog "/www/logs/www1/access_log" combined
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.50:80&gt;
          ServerAdmin webmaster@www2.example.org
          DocumentRoot "/www/vhosts/www2"
          ServerName www2.example.org
          ErrorLog "/www/logs/www2/error_log"
          CustomLog "/www/logs/www2/access_log" combined
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Il est recommandé d'utiliser une adresse IP plutôt qu'un nom
          de domaine comme argument à la directive &lt;VirtualHost&gt;
           (consultez <a href="../dns-caveats.html">Problèmes DNS
          avec Apache</a>).</p>
      
          <p>Presque <strong>toutes</strong> les directives de configuration
          peuvent être employées dans une directive VirtualHost, à l'exception
          des directives qui contrôlent la création du processus et de
          quelques autres. Pour connaître celles utilisables dans une
          directive VirtualHost, vérifiez leur
          <a href="../mod/directive-dict.html#Context">Contexte</a> en utilisant
          l'<a href="../mod/quickreference.html">directive index</a>.</p>
      
      
          <p><code class="directive"><a href="../mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code> peut être
          utilisées à l'intérieur d'une directive VirtualHost si l'exécution se fait
          sous suEXEC. (Voir <a href="../suexec.html">suEXEC</a>).</p>
      
          <p><em>SÉCURITÉ&nbsp;:</em> lorsque vous spécifiez où écrire les
          fichiers journaux, soyez attentif aux risques si quelqu'un d'autre
          que celui qui a démarré Apache dispose des droits d'écriture
          sur l'emplacement de ces fichiers. Consultez les
          <a href="../misc/security_tips.html">Conseils sur la sécurité</a>
          pour plus de détails.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/vhosts/ip-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/ip-based.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/ip-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/ip-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/ip-based.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/ip-based.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/examples.html�������������������������������������������������������0000644�0000000�0000050�00000000737�13362070302�017476� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: examples.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: examples.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: examples.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: examples.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: examples.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ���������������������������������httpd-2.4.41/docs/manual/vhosts/details.html.en�����������������������������������������������������0000644�0000000�0000050�00000044633�13412755316�017724� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>An In-Depth Discussion of Virtual Host Matching - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Virtual Hosts</a></div><div id="page-content"><div id="preamble"><h1>An In-Depth Discussion of Virtual Host Matching</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/vhosts/details.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/details.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/details.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/details.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>This document attempts to explain
          exactly what Apache HTTP Server does when deciding what virtual host to
          serve a request from.</p>
      
          <p>Most users should read about <a href="name-based.html#namevip">
          Name-based vs. IP-based Virtual Hosts</a> to decide which type they
          want to use, then read more about <a href="name-based.html">name-based</a>
          or <a href="ip-based.html">IP-based</a> virtualhosts, and then see
          <a href="examples.html">some examples</a>.</p>
      
          <p>If you want to understand all the details, then you can
          come back to this page.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#configparsing">Configuration File</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#hostmatching">Virtual Host Matching</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#tips">Tips</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="ip-based.html">IP-based Virtual Host Support</a></li><li><a href="name-based.html">Name-based Virtual Hosts Support</a></li><li><a href="examples.html">Virtual Host examples for common setups</a></li><li><a href="mass.html">Dynamically configured mass virtual hosting</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configparsing" id="configparsing">Configuration File</a></h2>
      
          <p>There is a <em>main server</em> which consists of all the
          definitions appearing outside of
          <code>&lt;VirtualHost&gt;</code> sections.</p>
      
          <p>There are virtual
          servers, called <em>vhosts</em>, which are defined by
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          sections.</p>
      
          <p>Each <code>VirtualHost</code> directive includes one
          or more addresses and optional ports.</p>
      
          <p>Hostnames can be used in place of IP addresses in a virtual
          host definition, but they are resolved at startup and if any name
          resolutions fail, those virtual host definitions are ignored.
          This is, therefore, not recommended.</p>
      
          <p>The address can be specified as
          <code>*</code>, which will match a request if no
          other vhost has the explicit address on which the request was
          received. </p>
      
          <p>The address appearing in the <code>VirtualHost</code>
          directive can have an optional port. If the port is unspecified,
          it is treated as a wildcard port, which can also be indicated
          explicitly using <code>*</code>.
          The wildcard port matches any port.</p>
      
          <p>(Port numbers specified in the <code>VirtualHost</code> directive do
          not influence what port numbers Apache will listen on, they only control
          which <code>VirtualHost</code> will be selected to handle a request.
          Use the <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> directive to
          control the addresses and ports on which the server listens.)
          </p>
      
          <p>Collectively the
          entire set of addresses (including multiple
          results from DNS lookups) are called the vhost's
          <em>address set</em>.</p>
      
          <p>Apache automatically discriminates on the
          basis of the HTTP <code>Host</code> header supplied by the client
          whenever the most specific match for an IP address and port combination
          is listed in multiple virtual hosts.</p>
      
          <p>The
          <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> directive
          may appear anywhere within the definition of a server. However,
          each appearance overrides the previous appearance (within that
          server).  If no <code>ServerName</code> is specified, the server
          attempts to deduce it from the server's IP address.</p>
      
          <p>The first name-based vhost in the configuration file for a
          given IP:port pair is significant because it is used for all
          requests received on that address and port for which no other
          vhost for that IP:port pair has a matching ServerName or
          ServerAlias.  It is also used for all SSL connections if the
          server does not support <a class="glossarylink" href="../glossary.html#servernameindication" title="see glossary">Server Name Indication</a>.</p>
      
          <p>The complete list of names in the <code>VirtualHost</code>
          directive are treated just like a (non wildcard) <code>ServerAlias</code>
          (but are not overridden by any <code>ServerAlias</code> statement).</p>
      
          <p>For every vhost various default values are set. In
          particular:</p>
      
          <ol>
            <li>If a vhost has no <code class="directive"><a href="../mod/core.html#serveradmin">ServerAdmin</a></code>,
            <code class="directive"><a href="../mod/core.html#timeout">Timeout</a></code>,
            <code class="directive"><a href="../mod/core.html#keepalivetimeout">KeepAliveTimeout</a></code>,
            <code class="directive"><a href="../mod/core.html#keepalive">KeepAlive</a></code>,
            <code class="directive"><a href="../mod/core.html#maxkeepaliverequests">MaxKeepAliveRequests</a></code>,
            <code class="directive"><a href="../mod/mpm_common.html#receivebuffersize">ReceiveBufferSize</a></code>,
            or <code class="directive"><a href="../mod/mpm_common.html#sendbuffersize">SendBufferSize</a></code>
            directive then the respective value is inherited from the
            main server. (That is, inherited from whatever the final
            setting of that value is in the main server.)</li>
      
            <li>The "lookup defaults" that define the default directory
            permissions for a vhost are merged with those of the
            main server. This includes any per-directory configuration
            information for any module.</li>
      
            <li>The per-server configs for each module from the
            main server are merged into the vhost server.</li>
          </ol>
      
          <p>Essentially, the main server is treated as "defaults" or a
          "base" on which to build each vhost. But the positioning of
          these main server definitions in the config file is largely
          irrelevant -- the entire config of the main server has been
          parsed when this final merging occurs. So even if a main server
          definition appears after a vhost definition it might affect the
          vhost definition.</p>
      
          <p>If the main server has no <code>ServerName</code> at this
          point, then the hostname of the machine that <code class="program"><a href="../programs/httpd.html">httpd</a></code>
          is running on is used instead. We will call the <em>main server address
          set</em> those IP addresses returned by a DNS lookup on the
          <code>ServerName</code> of the main server.</p>
      
          <p>For any undefined <code>ServerName</code> fields, a
          name-based vhost defaults to the address given first in the
          <code>VirtualHost</code> statement defining the vhost.</p>
      
          <p>Any vhost that includes the magic <code>_default_</code>
          wildcard is given the same <code>ServerName</code> as the
          main server.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="hostmatching" id="hostmatching">Virtual Host Matching</a></h2>
      
          <p>The server determines which vhost to use for a request as
          follows:</p>
      
          <h3><a name="hashtable" id="hashtable">IP address lookup</a></h3>
      
          <p>When the connection is first received on some address and port,
          the server looks for all the <code>VirtualHost</code> definitions
          that have the same IP address and port.</p>
      
          <p>If there are no exact matches for the address and port, then
          wildcard (<code>*</code>) matches are considered.</p>
      
          <p>If no matches are found, the request is served by the
          main server.</p>
      
          <p>If there are <code>VirtualHost</code> definitions for
          the IP address, the next step is to decide if we have to
          deal with an IP-based or a name-based vhost.</p>
      
          
      
          <h3><a name="ipbased" id="ipbased">IP-based vhost</a></h3>
      
          <p>If there is exactly one <code>VirtualHost</code> directive
          listing the IP address and port combination that was determined
          to be the best match, no further actions are performed and
          the request is served from the matching vhost.</p>
      
          
      
          <h3><a name="namebased" id="namebased">Name-based vhost</a></h3>
      
          <p>If there are multiple <code>VirtualHost</code> directives listing
          the IP address and port combination that was determined to be the
          best match, the "list" in the remaining steps refers to the list of vhosts
          that matched, in the order they were in the configuration file.</p>
      
          <p>If the connection is using SSL, the server supports <a class="glossarylink" href="../glossary.html#servernameindication" title="see glossary">Server Name Indication</a>, and
          the SSL client handshake includes the TLS extension with the
          requested hostname, then that hostname is used below just like the
          <code>Host:</code> header would be used on a non-SSL connection.
          Otherwise, the first name-based vhost whose address matched is
          used for SSL connections.  This is significant because the
          vhost determines which certificate the server will use for the
          connection.</p>
      
          <p>If the request contains a <code>Host:</code> header field, the
          list is searched for the first vhost with a matching
          <code>ServerName</code> or <code>ServerAlias</code>, and the
          request is served from that vhost. A <code>Host:</code> header
          field can contain a port number, but Apache always ignores it and
          matches against the real port to which the client sent the
          request.</p>
      
          <p>The first vhost in the config
          file with the specified IP address has the highest priority
          and catches any request to an unknown server name, or a request
          without a <code>Host:</code> header field (such as a HTTP/1.0
          request).</p>
      
          
      
          <h3><a name="persistent" id="persistent">Persistent connections</a></h3>
      
          <p>The <em>IP lookup</em> described above is only done <em>once</em> for a
          particular TCP/IP session while the <em>name lookup</em> is done on
          <em>every</em> request during a KeepAlive/persistent
          connection. In other words, a client may request pages from
          different name-based vhosts during a single persistent
          connection.</p>
      
          
      
          <h3><a name="absoluteURI" id="absoluteURI">Absolute URI</a></h3>
      
          <p>If the URI from the request is an absolute URI, and its
          hostname and port match the main server or one of the
          configured virtual hosts <em>and</em> match the address and
          port to which the client sent the request, then the
          scheme/hostname/port prefix is stripped off and the remaining
          relative URI is served by the corresponding main server or
          virtual host. If it does not match, then the URI remains
          untouched and the request is taken to be a proxy request.</p>
      
      
      <h3><a name="observations" id="observations">Observations</a></h3>
      
          <ul>
            <li>Name-based virtual hosting is a process applied after
            the server has selected the best matching IP-based virtual
            host.</li>
      
            <li>If you don't care what IP address the client has connected to, use a
            "*" as the address of every virtual host, and name-based virtual hosting
            is applied across all configured virtual hosts.</li>
      
            <li><code>ServerName</code> and <code>ServerAlias</code>
            checks are never performed for an IP-based vhost.</li>
      
            <li>Only the ordering of
            name-based vhosts for a specific address set is significant.
            The one name-based vhosts that comes first in the
            configuration file has the highest priority for its
            corresponding address set.</li>
      
            <li>Any port in the <code>Host:</code> header field is never used during the
            matching process. Apache always uses the real port to which
            the client sent the request.</li>
      
            <li>If two vhosts have an address in common, those common addresses
            act as name-based virtual hosts implicitly.  This is new behavior as of
            2.3.11.</li>
      
            <li>The main server is only used to serve a request if the IP
            address and port number to which the client connected
            does not match any vhost (including a
            <code>*</code> vhost). In other words, the main server
            only catches a request for an unspecified address/port
            combination (unless there is a <code>_default_</code> vhost
            which matches that port).</li>
      
            <li>You should never specify DNS names in
            <code>VirtualHost</code> directives because it will force
            your server to rely on DNS to boot. Furthermore it poses a
            security threat if you do not control the DNS for all the
            domains listed. There's <a href="../dns-caveats.html">more
            information</a> available on this and the next two
            topics.</li>
      
            <li><code>ServerName</code> should always be set for each
            vhost. Otherwise a DNS lookup is required for each
            vhost.</li>
            </ul>
            
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="tips" id="tips">Tips</a></h2>
      
          <p>In addition to the tips on the <a href="../dns-caveats.html#tips">DNS Issues</a> page, here are
          some further tips:</p>
      
          <ul>
            <li>Place all main server definitions before any
            <code>VirtualHost</code> definitions. (This is to aid the
            readability of the configuration -- the post-config merging
            process makes it non-obvious that definitions mixed in around
            virtual hosts might affect all virtual hosts.)</li>
          </ul>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/vhosts/details.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/details.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/details.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/details.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/details.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/name-based.html.ko.euc-kr�������������������������������������������0000644�0000000�0000050�00000043127�13412755316�021464� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>À̸§±â¹Ý °¡»óÈ£½ºÆ® Áö¿ø - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">°¡»óÈ£½ºÆ®</a></div><div id="page-content"><div id="preamble"><h1>À̸§±â¹Ý °¡»óÈ£½ºÆ® Áö¿ø</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../de/vhosts/name-based.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/name-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/name-based.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/name-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/name-based.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/name-based.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p>ÀÌ ¹®¼­´Â À̸§±â¹Ý °¡»óÈ£½ºÆ®¸¦ »ç¿ëÇÏ´Â °æ¿ì¿Í ¹æ¹ýÀ»
          ¼³¸íÇÑ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#namevip">À̸§±â¹Ý ´ë IP±â¹Ý °¡»óÈ£½ºÆ®</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#using">À̸§±â¹Ý °¡»óÈ£½ºÆ® »ç¿ëÇϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#compat">¿À·¡µÈ ºê¶ó¿ìÀú¿Í ȣȯ</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="ip-based.html">IP±â¹Ý °¡»óÈ£½ºÆ® Áö¿ø</a></li><li><a href="details.html">°¡»óÈ£½ºÆ® ã±â¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ¼³¸í</a></li><li><a href="mass.html">´ë·®ÀÇ °¡»óÈ£½ºÆ®¸¦ µ¿ÀûÀ¸·Î ¼³Á¤Çϱâ</a></li><li><a href="examples.html">ÀϹÝÀûÀÎ °¡»óÈ£½ºÆ® ¿¹</a></li><li><a href="examples.html#serverpath">ServerPath ¼³Á¤ ¿¹</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="namevip" id="namevip">À̸§±â¹Ý ´ë IP±â¹Ý °¡»óÈ£½ºÆ®</a></h2>
      
          <p>IP±â¹Ý °¡»óÈ£½ºÆ®´Â ¿¬°áÇÑ IP ÁÖ¼Ò¸¦ °¡Áö°í ¼­ºñ½ºÇÒ
          °¡»óÈ£½ºÆ®¸¦ °áÁ¤ÇÑ´Ù. ±×·¡¼­ °¢ È£½ºÆ®´Â ¼­·Î ´Ù¸¥ IP ÁÖ¼Ò¸¦
          °¡Á®¾ß ÇÑ´Ù. À̸§±â¹Ý °¡»óÈ£½ºÆ®ÀÇ °æ¿ì ¼­¹ö´Â Ŭ¶óÀÌ¾ðÆ®°¡
          HTTP Çì´õ·Î È£½ºÆ®¸íÀ» ¾Ë·ÁÁÖ±æ ¹Ù¶õ´Ù. ÀÌ·± ¹æ¹ýÀ¸·Î ÇÑ
          IP ÁÖ¼Ò·Î ¿©·¯ ´Ù¸¥ È£½ºÆ®¸¦ ¼­ºñ½ºÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>À̸§±â¹Ý °¡»óÈ£½ºÆ®´Â DNS ¼­¹ö°¡ °¢ È£½ºÆ®¸íÀÌ ¿Ã¹Ù¸¥
          IP ÁÖ¼Ò·Î ´ëÀÀÇϵµ·Ï °¡»óÈ£½ºÆ®¸¦ ¼³Á¤Çϰí, ´Ù¸¥ È£½ºÆ®¸íÀ» ±¸º°ÇÒ
          ¼ö ÀÖµµ·Ï ¾ÆÆÄÄ¡ À¥¼­¹ö¸¦ ¼³Á¤Çϱ⸸ ÇϸéµÇ¹Ç·Î ´õ °£´ÜÇÏ´Ù. À̸§±â¹Ý
          °¡»óÈ£½ºÆ®´Â ¶Ç ¿©·¯ IP ÁÖ¼Ò°¡ ÇÊ¿ä¾ø´Ù. ±×·¯¹Ç·Î Ưº°È÷
          IP±â¹Ý °¡»óÈ£½ºÆ®¸¦ ¼±ÅÃÇÒ ÀÌÀ¯°¡ ¾ø´Ù¸é À̸§±â¹Ý °¡»óÈ£½ºÆ®¸¦
          »ç¿ëÇØ¾ß ÇÑ´Ù. IP±â¹Ý °¡»óÈ£½ºÆ®¸¦ »ç¿ëÇØ¾ßÇÒ ÀÌÀ¯·Î´Â:</p>
      
      	<ul>
              <li>À̸§±â¹Ý °¡»óÈ£½ºÆ®¸¦ Áö¿øÇÏÁö¾Ê´Â ¿À·¡µÈ
              Ŭ¶óÀÌ¾ðÆ®µéÀÌ ÀÖ´Ù. À̸§±â¹Ý °¡»óÈ£½ºÆ®¸¦ »ç¿ëÇÏ·Á¸é
              Ŭ¶óÀÌ¾ðÆ®°¡ HTTP Host Çì´õ¸¦ º¸³»¾ß ÇÑ´Ù. ÀÌ´Â
              HTTP/1.1¿¡¼­´Â ÇʼöÀ̰í, ÃÖ±Ù ¸ðµç HTTP/1.0 ºê¶ó¿ìÀúµéµµ
              È®ÀåÀ¸·Î Áö¿øÇÑ´Ù. ¸¸¾à À̸§±â¹Ý °¡»óÈ£½ºÆ®¸¦ »ç¿ëÇϸ鼭
              ¿À·¡µÈ Ŭ¶óÀÌ¾ðÆ®¸¦ Áö¿øÇØ¾ß ÇÑ´Ù¸é ÀÌ ¹®¼­ ³¡¿¡ ÀÖ´Â
              ¹æ¹ýÀ» »ìÆìºÁ¶ó.</li>
      
              <li>SSL ÇÁ·ÎÅäÄÝÀÇ ¼º°Ý»ó SSL º¸¾È¼­¹ö¿¡¼­ À̸§±â¹Ý
              °¡»óÈ£½ºÆ®¸¦ »ç¿ëÇÒ ¼ö ¾ø´Ù.</li>
      
              <li>¾î¶² ¿î¿µÃ¼Á¦³ª ³×Æ®¿÷ ÀåÄ¡´Â ´Ù¸¥ IP ÁÖ¼Ò¸¦ »ç¿ëÇÏÁö
              ¾ÊÀ¸¸é È£½ºÆ®¸¦ ±¸º°ÇÏÁö ¸øÇÏ´Â ³×Æ®¿÷ »ç¿ë·®(bandwidth)
              °ü¸®±â¼úÀ» »ç¿ëÇÑ´Ù.</li>
      	</ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="using" id="using">À̸§±â¹Ý °¡»óÈ£½ºÆ® »ç¿ëÇϱâ</a></h2>
      
      <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="../mod/core.html">core</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code></li><li><code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code></li><li><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code></li><li><code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code></li><li><code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
          <p>À̸§±â¹Ý °¡»óÈ£½ºÆ®¸¦ »ç¿ëÇÏ·Á¸é ¼­¹ö´Â ¿¬°áÀ» ¹ÞÀ»
          IP ÁÖ¼Ò¸¦ (¾Æ¸¶ Æ÷Æ®µµ) Á¤ÇØ¾ß ÇÑ´Ù. ÀÌ´Â <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code> Áö½Ã¾î·Î °¡´ÉÇÏ´Ù.
          ÀϹÝÀûÀ¸·Î ¼­¹öÀÇ ¸ðµç IP ÁÖ¼Ò¸¦ »ç¿ëÇÑ´Ù¸é
          <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code>ÀÇ
          ¾Æ±Ô¸ÕÆ®·Î <code>*</code>¸¦ »ç¿ëÇÑ´Ù. ¿©·¯ Æ÷Æ®¸¦ »ç¿ëÇÒ
          (¿¹¸¦ µé¾î, SSLÀ» »ç¿ëÇÒ) °èȹÀ̶ó¸é <code>*:80</code>°ú
          °°ÀÌ ¾Æ±Ô¸ÕÆ®¿¡ Æ÷Æ®¸¦ Ãß°¡ÇØ¾ß ÇÑ´Ù. <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code> Áö½Ã¾î¿¡ IP ÁÖ¼Ò¸¦
          Àû¾îÁÖ¾ú´Ù°í ¼­¹ö°¡ ÀÚµ¿À¸·Î ±× IP ÁÖ¼Ò¸¦ ±â´Ù¸®Áö ¾ÊÀ½À»
          ÁÖÀÇÇ϶ó. ÀÚ¼¼ÇÑ ³»¿ëÀº <a href="../bind.html">¾ÆÆÄÄ¡°¡
          »ç¿ëÇÒ ÁÖ¼Ò¿Í Æ÷Æ® ¼³Á¤Çϱâ</a>¸¦ Âü°íÇ϶ó. ¶Ç, ¿©±â¼­
          ÁöÁ¤ÇÑ IP ÁÖ¼Ò´Â ¼­¹öÀÇ ³×Æ®¿÷ ÀÎÅÍÆäÀ̽ºÀ̾î¾ß ÇÑ´Ù.</p>
      
          <p>´ÙÀ½ ´Ü°è´Â ¼­ºñ½ºÇÏ·Á´Â È£½ºÆ®º°·Î <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> ºí·ÏÀ»
          ¸¸µå´Â ÀÏÀÌ´Ù. <code class="directive"><a href="../mod/core.html#virtualhost&gt;">&lt;VirtualHost&gt;&gt;</a></code> Áö½Ã¾îÀÇ ¾Æ±Ô¸ÕÆ®´Â
          <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code> Áö½Ã¾îÀÇ
          ¾Æ±Ô¸ÕÆ®(¿¹¸¦ µé¾î, IP ÁÖ¼Ò³ª ¸ðµç ÁÖ¼Ò¸¦ ¶æÇÏ´Â <code>*</code>)¿Í
          °°¾Æ¾ß ÇÑ´Ù. <code class="directive"><a href="../mod/core.html#virtualhost&gt;">&lt;VirtualHost&gt;&gt;</a></code> ºí·Ï ¾È¿¡´Â
          ÃÖ¼ÒÇÑ ¼­ºñ½ºÇÒ È£½ºÆ®¸¦ ÁöÁ¤ÇÏ´Â <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> Áö½Ã¾î¿Í È£½ºÆ®ÀÇ
          ³»¿ëÀÌ ÆÄÀϽýºÅÛ ¾îµð¿¡ ÀÖ´ÂÁö¸¦ ÁöÁ¤ÇÏ´Â <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code> Áö½Ã¾î°¡ ÇÊ¿äÇÏ´Ù.</p>
      
          <div class="note"><h3>ÁÖ È£½ºÆ®°¡ ¾ø¾îÁø´Ù</h3>
              <p>±âÁ¸¿¡ »ç¿ëÇÏ´ø À¥¼­¹ö¿¡ °¡»óÈ£½ºÆ®¸¦ Ãß°¡ÇÑ´Ù¸é
              ±âÁ¸¿¡ »ç¿ëÇÏ´ø È£½ºÆ®¿¡ ´ëÇÑ <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> ºí·Ïµµ Ãß°¡Çؾß
              ÇÑ´Ù. ÀÌ ºí·Ï¿¡ Æ÷ÇÔÇÏ´Â <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>°ú <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>´Â Àüü <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>°ú <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>¿Í °°¾Æ¾ß ÇÑ´Ù.
              ¼³Á¤ÆÄÀÏ¿¡¼­ ÀÌ °¡»óÈ£½ºÆ®¸¦ °¡Àå ¸ÕÀú ÀûÀ¸¸é ±âº» È£½ºÆ®°¡
              µÈ´Ù.</p>
          </div>
      
          <p>¿¹¸¦ µé¾î <code>www.domain.tld</code> µµ¸ÞÀÎÀ» ¼­ºñ½ºÇϰí
          ÀÖ¾ú´Âµ¥ °°Àº IP ÁÖ¼Ò¿¡
          <code>www.otherdomain.tld</code>¶õ °¡»óÈ£½ºÆ®¸¦ Ãß°¡Çϰí
          ½Í´Ù°í °¡Á¤ÇÏÀÚ. <code>httpd.conf</code>¿¡ ´ÙÀ½°ú °°ÀÌ
          Ãß°¡ÇÏ¸é µÈ´Ù:</p>
      
          <div class="example"><p><code>
              NameVirtualHost *:80<br />
              <br />
              &lt;VirtualHost *:80&gt;<br />
              <span class="indent">
                  ServerName www.domain.tld<br />
                  ServerAlias domain.tld *.domain.tld<br />
                  DocumentRoot /www/domain<br />
              </span>
              &lt;/VirtualHost&gt;<br />
              <br />
              &lt;VirtualHost *:80&gt;<br />
              <span class="indent">ServerName www.otherdomain.tld<br />
                  DocumentRoot /www/otherdomain<br />
              </span>
              &lt;/VirtualHost&gt;<br />
          </code></p></div>
      
          <p><code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code>¿Í
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          Áö½Ã¾î µÑ ¸ðµÎ <code>*</code> ´ë½Å Á÷Á¢ IP ÁÖ¼Ò¸¦ ÁöÁ¤ÇÒ
          ¼öµµ ÀÖ´Ù. ¿¹¸¦ µé¾î, ÀÌ·±½ÄÀ¸·Î ÇÑ IP ÁÖ¼Ò¿¡ ¿©·¯ À̸§±â¹Ý
          °¡»óÈ£½ºÆ®µéÀ» µ¹¸®°í, ´Ù¸¥ ÁÖ¼Ò¿¡ IP±â¹Ý ȤÀº À̸§±â¹Ý
          °¡»óÈ£½ºÆ®µéÀ» µ¹¸± ¼ö ÀÖ´Ù.</p>
      
          <p>¾î¶² ¼­¹ö´Â ¿©·¯ À̸§À¸·Î Á¢¼ÓÇÒ ¼ö ÀÖ±æ ¹Ù¶õ´Ù. ÀÌ´Â
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          ¼½¼Ç ¾È¿¡ <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code>
          Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© °¡´ÉÇÏ´Ù. ¿¹¸¦ µé¾î À§ÀÇ Ã¹¹øÂ° <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> ºí·Ï¿¡¼­
          <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> Áö½Ã¾î¸¦
          »ç¿ëÇÏ¸é ¿­°ÅÇÑ À̸§À¸·Î °°Àº À¥»çÀÌÆ®¸¦ º¼ ¼ö ÀÖ´Ù:</p>
      
          <div class="example"><p><code>
              ServerAlias domain.tld *.domain.tld
          </code></p></div>
      
          <p><code>domain.tld</code> µµ¸ÞÀο¡ ÀÖ´Â ¸ðµç È£½ºÆ®¿¡ ´ëÇÑ
          ¿äûÀ» <code>www.domain.tld</code> °¡»óÈ£½ºÆ®°¡ ¼­ºñ½ºÇÑ´Ù.
          À̸§À» ÁÙ¶§ ¿ÍÀϵåÄ«µå ¹®ÀÚ <code>*</code>¿Í <code>?</code>¸¦
          »ç¿ëÇÒ ¼ö ÀÖ´Ù. ¹°·Ð <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>À̳ª <code>ServerAlias</code>¿¡
          À̸§À» Àû¾îÁÖ¾ú´Ù°í ³¡ÀÌ ¾Æ´Ï´Ù. ¸ÕÀú ÀÌ À̸§µéÀÌ ¼­¹öÀÇ
          IP ÁÖ¼Ò·Î ´ëÀÀÇϵµ·Ï DNS ¼­¹ö¸¦ ¾Ë¸Â°Ô ¼³Á¤ÇØ¾ß ÇÑ´Ù.</p>
      
          <p>¸¶Áö¸·À¸·Î <code class="directive"><a href="../mod/core.html#&lt;virtualhost&gt;">&lt;&lt;VirtualHost&gt;&gt;</a></code> ¾È¿¡ ´Ù¸¥
          Áö½Ã¾îµéÀ» »ç¿ëÇÏ¿© °¡»óÈ£½ºÆ®¸¦ ÀÚ¼¼È÷ ¼³Á¤ÇÒ ¼ö ÀÖ´Ù.
          ´ëºÎºÐÀÇ Áö½Ã¾î¸¦ »ç¿ëÇÒ ¼ö ÀÖÀ¸¸ç, °ü·ÃµÈ °¡»óÈ£½ºÆ®ÀÇ ¼³Á¤¸¸À»
          º¯°æÇÑ´Ù. ¾î¶² Áö½Ã¾î°¡ »ç¿ë°¡´ÉÇÑÁö ¾Ë·Á¸é Áö½Ã¾îÀÇ <a href="../mod/directive-dict.html#Context">»ç¿ëÀå¼Ò</a>¸¦
          È®ÀÎÇ϶ó. (<code class="directive"><a href="../mod/core.html#&lt;virtualhost&gt;">&lt;&lt;VirtualHost&gt;&gt;</a></code> ¾ÈÀÌ ¾Æ´Ñ)
          <em>ÁÖ¼­¹ö¼³Á¤</em>¿¡¼­ ÁöÁ¤ÇÑ ¼³Á¤ Áö½Ã¾î´Â °¡»óÈ£½ºÆ®¿¡
          °°Àº ¼³Á¤ Áö½Ã¾î°¡ ¾ø´Â °æ¿ì¿¡¸¸ »ç¿ëµÈ´Ù.</p>
      
          <p>¿äûÀ» ¹ÞÀ¸¸é ¼­¹ö´Â ¸ÕÀú <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code>¿¡¼­ ÁöÁ¤ÇÑ IP
          ÁÖ¼ÒÀÎÁö °Ë»çÇÑ´Ù. ±×·¸´Ù¸é ±× IP ÁÖ¼Ò¸¦ °¡Áø <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          ¼½¼Çµé¿¡¼­ ¿äûÇÑ È£½ºÆ®¸í°ú ÀÏÄ¡ÇÏ´Â <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>À̳ª
          <code>ServerAlias</code>¸¦ ã´Â´Ù. ãÀ¸¸é ±× ¼³Á¤À» »ç¿ëÇÑ´Ù.
          ÀûÀýÇÑ °¡»óÈ£½ºÆ®¸¦ ãÁö¸øÇϸé, IP ÁÖ¼Ò¿¡ ÇØ´çÇÏ´Â
          <strong>°¡»óÈ£½ºÆ®µéÁß Ã¹¹øÂ° °Í</strong>À» »ç¿ëÇÑ´Ù.</p>
      
          <p>°á°úÀûÀ¸·Î óÀ½¿¡ ³ª¿Â °¡»óÈ£½ºÆ®°¡ <em>±âº»</em>
          °¡»óÈ£½ºÆ®°¡ µÈ´Ù. IP ÁÖ¼Ò°¡ <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code> Áö½Ã¾î¿¡ ÇØ´çÇϸé,
          <em>ÁÖ¼­¹ö</em>ÀÇ <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>´Â
          <strong>Àý´ë·Î</strong> »ç¿ëÇÏÁö ¾Ê´Â´Ù. ƯÁ¤ °¡»óÈ£½ºÆ®¿¡
          ÇØ´çÇÏÁö¾Ê´Â ¿äûÀ» ¼³Á¤ÇÏ·Á¸é ¼³Á¤À» <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>¿¡ ´ã°í ¼³Á¤ÆÄÀÏ¿¡¼­
          ¸ÕÀú ³ª¿Àµµ·Ï ÇÏ¸é µÈ´Ù.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="compat" id="compat">¿À·¡µÈ ºê¶ó¿ìÀú¿Í ȣȯ</a></h2>
      
          <p>ÀÌ¹Ì Àû¾úµíÀÌ À̸§±â¹Ý °¡»óÈ£½ºÆ®°¡ ¿Ã¹Ù·Î µ¿ÀÛÇϱâÀ§ÇØ
          ÇÊ¿äÇÑ Á¤º¸¸¦ º¸³»Áö¾Ê´Â Ŭ¶óÀÌ¾ðÆ®°¡ ÀÖ´Ù. ÀÌ·± Ŭ¶óÀÌ¾ðÆ®´Â
          Ç×»ó ¿äûÇÑ IP ÁÖ¼Ò¿¡ ´ëÇØ ù¹øÂ°·Î ³ª¿À´Â °¡»óÈ£½ºÆ®
          (<cite>ÃÖÃÊÀÇ</cite> À̸§±â¹Ý °¡»óÈ£½ºÆ®)°¡
          ¼­ºñ½ºÇÑ´Ù.</p>
      
          <div class="note"><h3>¾ó¸¶³ª ¿À·¡µÈ °ÍÀ» ¸»Çϴ°¡?</h3>
          <p>¿©±â¼­ ¿À·¡µÇ¾úÀ½Àº ½ÇÁ¦·Î »ó´çÈ÷ ¿À·¡µÈ °ÍÀ» ¶æÇÑ´Ù.
          ¿À´Ã³¯ ÀÌ·± ºê¶ó¿ìÀú¸¦ »ç¿ëÇÒ ÀÏÀº °ÅÀǾø´Ù. ¿äÁò
          ºê¶ó¿ìÀú´Â ¸ðµÎ À̸§±â¹Ý °¡»óÈ£½ºÆ®¿¡ ÇÊ¿äÇÑ <code>Host</code>
          Çì´õ¸¦ º¸³½´Ù.</p>
          </div>
      
          <p>ÀÌ ¹®Á¦´Â ¾à°£ °ÅÃßÀ彺·´Áö¸¸ <code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code> Áö½Ã¾î·Î ÇØ°áÇÒ ¼ö ÀÖ´Ù:</p>
      
          <p>¼³Á¤ ¿¹:</p>
      
          <div class="example"><p><code>
              NameVirtualHost 111.22.33.44<br />
              <br />
              &lt;VirtualHost 111.22.33.44&gt;<br />
              <span class="indent">
                  ServerName www.domain.tld<br />
                  ServerPath /domain<br />
                  DocumentRoot /web/domain<br />
              </span>
              &lt;/VirtualHost&gt;<br />
          </code></p></div>
      
          <p>ÀÌ°Ô ¹«½¼ ¶æÀΰ¡? "<code>/domain</code>"·Î ½ÃÀÛÇÏ´Â
          URI¿¡ ´ëÇÑ ¿äûÀº °¡»óÈ£½ºÆ® <code>www.domain.tld</code>°¡
          ¼­ºñ½ºÇÑ´Ù.  Áï, <code>Host:</code> Çì´õ¸¦ º¸³»´Â Ŭ¶óÀÌ¾ðÆ®´Â
          <code>http://www.domain.tld/</code>¸¸À¸·Îµµ Á¢±ÙÇÒ ¼ö ÀÖÁö¸¸,
          <code>http://www.domain.tld/domain/</code>À¸·Î´Â ¸ðµç
          Ŭ¶óÀÌ¾ðÆ®°¡ ÆäÀÌÁö¿¡ Á¢±ÙÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>À̸¦ À§ÇØ ÃÖÃÊÀÇ °¡»óÈ£½ºÆ®¿¡ ÀÖ´Â ÆäÀÌÁö¿¡
          <code>http://www.domain.tld/domain/</code>À¸·Î °¡´Â ¸µÅ©¸¦
          ³Ö´Â´Ù. ±×¸®°í °¡»óÈ£½ºÆ® ÆäÀÌÁö¿¡¼­´Â »ó´ë¸µÅ© (¿¹¸¦ µé¾î,
          "<code>file.html</code>" À̳ª "<code>../icons/image.gif</code>")
          ȤÀº ("<code>http://www.domain.tld/domain/misc/file.html</code>"À̳ª
          "<code>/domain/misc/file.html</code>"°ú °°ÀÌ) ¾Õ¿¡
          <code>/domain/</code>ÀÌ ºÙÀº ¸µÅ©¸¸À» »ç¿ëÇÑ´Ù.</p>
      
          <p>Á¶±Ý ±ÔÄ¢ÀÌ ÇÊ¿äÇÏÁö¸¸ ÀÌ ±ÔÄ¢À» µû¸£¸é ´ëºÎºÐÀÇ °æ¿ì
          ¿äÁò °ÍÀ̳ª ¿À·¡µÈ °ÍÀ̳ª °ü°è¾øÀÌ ¸ðµç ºê¶ó¿ìÀú·Î ÆäÀÌÁö¸¦
          º¼ ¼ö ÀÖ´Ù.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../de/vhosts/name-based.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/name-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/name-based.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/name-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/name-based.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/name-based.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/name-based.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/index.html.de�������������������������������������������������������0000644�0000000�0000050�00000020623�13412755316�017365� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="de" xml:lang="de"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache-Dokumentation zu virtuellen Hosts - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Module</a> | <a href="../mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossar</a> | <a href="../sitemap.html">Seitenindex</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP-Server</a> &gt; <a href="http://httpd.apache.org/docs/">Dokumentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache-Dokumentation zu virtuellen Hosts</h1>
      <div class="toplang">
      <p><span>Verfügbare Sprachen: </span><a href="../de/vhosts/" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/vhosts/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">Diese Übersetzung ist möglicherweise
                  nicht mehr aktuell. Bitte prüfen Sie die englische Version auf
                  die neuesten Änderungen.</div>
      
          <p>Der Begriff <cite>virtueller Host</cite> <span class="transnote">(<em>Anm.d.Ü.:</em> engl. 'virtual
          host')</span> bezieht sich auf die Praxis, mehr als ein Webangebot
          (z.B. <code>www.company1.com</code> und <code>www.company2.com</code>)
          auf einer einzigen Maschine zu betreiben. Virtuelle Hosts können
          "<a href="ip-based.html">IP-basiert</a>" sein, was bedeutet, dass jedes
          Webangebot eine andere IP besitzt, oder  "<a href="name-based.html">Namens-basiert</a>", was bedeutet, dass
          unter jeder IP-Adresse mehrere Namen laufen. Die Tatsache, dass sie
          auf dem gleichen physischen Server laufen, ist für den Endbenutzer
          nicht offensichtlich.</p>
      
          <p>Der Apache war einer der ersten Server, der IP-basierte
          virtuelle Hosts von Haus aus direkt unterstützt hat. Seit Version 1.1
          unterstützt der Apache sowohl IP-basierte als auch namensbasierte
          virtuelle Hosts (vhosts). Letzteres wird zuweilen auch
          <em>Host-basiert</em> oder <em>non-IP-Virtual-Host</em> genannt.</p>
      
          <p>Nachfolgend finden Sie eine Liste von Dokumenten, die alle Details
          der Unterstützung von virtuellen Hosts ab Apache Version 1.3
          beschreiben.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#support">Unterstützung virtueller Hosts</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#directives">Konfigurationsdirektiven</a></li>
      </ul><h3>Siehe auch</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code></li><li><a href="name-based.html">Namensbasierte virtuelle Hosts</a></li><li><a href="ip-based.html">IP-basierte virtuelle Hosts</a></li><li><a href="examples.html">Beispiele für virtuelle
        Hosts</a></li><li><a href="fd-limits.html">Datei-Deskriptor-Begrenzungen</a></li><li><a href="mass.html">Massen-Virtual-Hosting</a></li><li><a href="details.html">Zuweisung virtueller Hosts</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="support" id="support">Unterstützung virtueller Hosts</a></h2>
      
          <ul>
            <li><a href="name-based.html">Namensbasierte virtuelle Hosts</a> (Mehr
             als ein Webangebot pro IP-Adresse)</li>
            <li><a href="ip-based.html">IP-basierte virtuelle Hosts</a> (Eine
              IP-Adresse für jedes Webangebot)</li>
            <li><a href="examples.html">Beispiele für virtuelles Hosts in
              typischen Installationen</a></li>
            <li><a href="fd-limits.html">Datei-Deskriptor-Begrenzungen</a> (oder
            <em>Zu viele Protokolldateien</em>)</li>
            <li><a href="mass.html">Dynamisch konfiguriertes
              Massen-Virtual-Hosting</a></li>
            <li><a href="details.html">Tiefergehende Erörterung der Zuweisung
              virtueller Hosts</a></li>
          </ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="directives" id="directives">Konfigurationsdirektiven</a></h2>
      
          <ul>
            <li><code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code></li>
          </ul>
      
          <p>Bei der Suche von Fehlern in Ihrer Virtual-Host-Konfiguration ist
          die Apache-Befehlszeilenoption <code>-S</code> möglicherweise
          hilfreich. Geben Sie dazu den folgenden Befehl ein:</p>
      
          <div class="example"><p><code>
          /usr/local/apache2/bin/httpd -S
          </code></p></div>
      
          <p>Diese Anweisung gibt eine Beschreibung aus, wie der Apache die
          Konfigurationsdatei analysiert hat. Eine sorgfältige
          Überprüfung der IP-Adressen und Servernamen kann helfen,
          Konfigurationsfehler aufzudecken. (Lesen Sie die Dokumentation zum
          <code class="program"><a href="../programs/httpd.html">httpd</a></code>-Programm für weitere
          Befehlszeilenoptionen.)</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Verfügbare Sprachen: </span><a href="../de/vhosts/" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/vhosts/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Lizenziert unter der <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Module</a> | <a href="../mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossar</a> | <a href="../sitemap.html">Seitenindex</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/index.html.ja.utf8��������������������������������������������������0000644�0000000�0000050�00000021723�13412755316�020256� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆèª¬æ˜Žæ›¸ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="../">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆèª¬æ˜Žæ›¸</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../de/vhosts/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/vhosts/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
      
          <p><cite>ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</cite>ã¨ã„ã†ç”¨èªžã¯ã€1 å°ã®ãƒžã‚·ãƒ³ä¸Šã§
          (<code>www.company1.com</code> and <code>www.company2.com</code> ã®ã‚ˆã†ãª)
          二ã¤ä»¥ä¸Šã®ã‚¦ã‚§ãƒ–サイトを扱ã†é‹ç”¨æ–¹æ³•ã®ã“ã¨ã‚’指ã—ã¾ã™ã€‚
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ã¯ã€å„ウェブサイトã«é•ㆠIP アドレスãŒã‚ã‚‹
          「<a href="ip-based.html">IP ベース</a>ã€ã¨ã€ãれãžã‚Œã® IP アドレスã«
          複数ã®åå‰ãŒã‚る「<a href="name-based.html">åå‰ãƒ™ãƒ¼ã‚¹</a>ã€ã¨ãŒã‚りã¾ã™ã€‚
          複数ã®ã‚µã‚¤ãƒˆãŒç‰©ç†çš„ã«åŒã˜ã‚µãƒ¼ãƒã§æ‰±ã‚れã¦ã„ã‚‹ã€ã¨ã„ã†ã“ã¨ã¯ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ã«ã¯
          明らã‹ã§ã¯ã‚りã¾ã›ã‚“。</p>
      
          <p>Apache ã¯ã€ç‰¹ã«æ‰‹ã‚’入れãªã„状態㧠IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ
          をサãƒãƒ¼ãƒˆã—ãŸæœ€åˆã®ã‚µãƒ¼ãƒã®ä¸€ã¤ã§ã™ã€‚ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 1.1 以é™ã® Apache
          ã§ã¯ã€IP ベースã¨ãƒãƒ¼ãƒ ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ä¸¡æ–¹ã‚’サãƒãƒ¼ãƒˆ
          ã—ã¦ã„ã¾ã™ã€‚ãƒãƒ¼ãƒ ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¯ã€<em>ホストベース</em>ã‚ã‚‹ã„ã¯
          <em>éž IP ベース</em>ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã¨å‘¼ã°ã‚Œã‚‹ã“ã¨ã‚‚ã‚りã¾ã™ã€‚</p>
      
          <p>以下ã®ãƒšãƒ¼ã‚¸ã§ã¯ã€Apache ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 1.3
          以é™ã§ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ã‚µãƒãƒ¼ãƒˆã«ã¤ã„ã¦ã®è©³ç´°ã‚’説明ã—ã¾ã™ã€‚</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#support">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ã‚µãƒãƒ¼ãƒˆ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#directives">設定ディレクティブ</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code></li><li><a href="name-based.html">ãƒãƒ¼ãƒ ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></li><li><a href="ip-based.html">IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></li><li><a href="examples.html">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ä¸€èˆ¬çš„ãªè¨­å®šä¾‹</a></li><li><a href="fd-limits.html">ファイル記述å­ã®é™ç•Œ</a></li><li><a href="mass.html">大é‡ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®è¨­å®š</a></li><li><a href="details.html">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ãƒžãƒƒãƒãƒ³ã‚°ã«ã¤ã„ã¦ã®è©³ç´°</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="support" id="support">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ã‚µãƒãƒ¼ãƒˆ</a></h2>
      
          <ul>
            <li><a href="name-based.html">ãƒãƒ¼ãƒ ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a>
            (一ã¤ã® IP アドレスã«è¤‡æ•°ã®ã‚¦ã‚§ãƒ–サイト)</li>
            <li><a href="ip-based.html">IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a>
            (å„ウェブサイト㫠IP アドレス)</li>
            <li><a href="examples.html">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ä¸€èˆ¬çš„ãªè¨­å®šä¾‹</a></li>
            <li><a href="fd-limits.html">ファイル記述å­ã®é™ç•Œ</a>
            (ã¾ãŸã¯ã€<em>多éŽãŽã‚‹ãƒ­ã‚°ãƒ•ァイル</em>)</li>
            <li><a href="mass.html">大é‡ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®è¨­å®š</a></li>
            <li><a href="details.html">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ãƒžãƒƒãƒãƒ³ã‚°ã«ã¤ã„ã¦ã®è©³ç´°</a></li>
          </ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="directives" id="directives">設定ディレクティブ</a></h2>
      
          <ul>
            <li><code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code></li>
          </ul>
      
          <p>ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®è¨­å®šã®ãƒ‡ãƒãƒƒã‚°ã‚’ã™ã‚‹ã«ã¯
          Apache ã®ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‚¹ã‚¤ãƒƒãƒ <code>-S</code> ãŒä¾¿åˆ©ã§ã™ã€‚
          ã¤ã¾ã‚Šã€ä»¥ä¸‹ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’入力ã—ã¾ã™:</p>
      
          <div class="example"><p><code>
          /usr/local/apache2/bin/httpd -S
          </code></p></div>
      
          <p>ã“ã®ã‚³ãƒžãƒ³ãƒ‰ã¯ Apache ãŒè¨­å®šãƒ•ァイルをã©ã†è§£æžã—ãŸã‹ã«ã¤ã„ã¦å‡ºåŠ›ã—ã¾ã™ã€‚
          IP アドレスã¨ã‚µãƒ¼ãƒåã‚’æ³¨æ„æ·±ã調ã¹ã‚Œã°ã€
          設定ã®é–“é•ã„を見ã¤ã‘る助ã‘ã«ãªã‚‹ã§ã—ょã†ã€‚
          (ä»–ã®ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã®ã‚ªãƒ—ション㯠<code class="program"><a href="../programs/httpd.html">httpd</a></code>
          プログラムã®èª¬æ˜Žæ–‡æ›¸ã‚’見ã¦ãã ã•ã„)</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../de/vhosts/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/vhosts/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������httpd-2.4.41/docs/manual/vhosts/name-based.html.fr.utf8���������������������������������������������0000644�0000000�0000050�00000044553�13412755316�021166� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Support Apache des serveurs virtuels par nom - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Serveurs virtuels</a></div><div id="page-content"><div id="preamble"><h1>Support Apache des serveurs virtuels par nom</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../de/vhosts/name-based.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/name-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/name-based.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/name-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/name-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/name-based.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Ce document décrit quand et comment utiliser des serveurs
          virtuels par nom.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#namevip">Serveurs virtuels par nom vs. par IP</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#alg">Comment le serveur sélectionne-t-il le serveur
      virtuel basé sur le nom approprié</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#using">Utilisation de serveurs virtuels par nom</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="ip-based.html">Support Apache des serveurs virtuels par IP</a></li><li><a href="details.html">Détails sur le fonctionnement des serveurs virtuels</a></li><li><a href="mass.html">Configuration dynamique des hébergements virtuels de masse</a></li><li><a href="examples.html">Exemples d'utilisations de VirtualHost</a></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="namevip" id="namevip">Serveurs virtuels par nom vs. par IP</a></h2>
      
          <p>Les <a href="ip-based.html">serveurs virtuels</a> par IP utilisent l'adresse IP
          de la connexion afin de déterminer quel serveur virtuel doit
          répondre. Par conséquent, vous devez disposer d'adresses IP
          différentes pour chaque serveur.</p>
      
          <p>Avec un hébergement
          virtuel par nom, le serveur s'appuie sur les informations
          transmises par le client dans les en-têtes HTTP de ses requêtes.
          La technique présentée ici vous permet de disposer de serveurs
          virtuels différents partagés sur une même adresse IP.</p>
      
          <p>L'hébergement virtuel par nom est habituellement plus simple,
          car il vous suffit de configurer votre serveur DNS pour que
          chaque domaine pointe sur l'adresse IP dont vous disposez, et de
          configurer votre serveur Apache HTTP afin qu'il reconnaisse
          ces domaines. Il réduit aussi la pénurie en adresses IP. Par
          conséquent, vous devriez utiliser l'hébergement virtuel par
          nom, sauf dans le cas où vous utiliseriez des équipements qui
          nécessitent un hébergement basé sur IP. Les raisons historiques de
          l'hébergement basé sur IP dans un but de support de certains clients ne
          s'appliquent plus à un serveur web d'usage général.</p>
      
          <p>La sélection du serveur virtuel en fonction du nom s'opère en
          dehors de l'algorithme de sélection du serveur virtuel en fonction
          de l'adresse IP, ce qui signifie que les recherches du point de vue
          du nom du serveur ne s'effectuent que parmi le jeu de serveurs
          virtuels pour lesquels la correspondance avec la paire adresse
          IP/port est la plus exacte.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="alg" id="alg">Comment le serveur sélectionne-t-il le serveur
      virtuel basé sur le nom approprié</a></h2>
      
          <p>Il est important de savoir que la première étape de la résolution
          de serveur virtuel basée sur le nom est une résolution basée sur IP.
          La résolution de serveur virtuel basée sur le nom ne fait que
          choisir le serveur virtuel basé sur le nom le plus approprié, en se
          limitant aux candidats qui conviennent le mieux du point de vue IP.
          La résolution basée sur IP est sans objet si l'on
          utilise un caractère générique (*) pour l'adresse IP dans
          toutes les directives VirtualHost.</p>
      
          <p>A l'arrivée d'une requête, le serveur va rechercher l'argument de
          section <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> présentant la meilleure
          (la plus exacte) correspondance avec la paire adresse IP/port
          utilisée dans la requête. Si plusieurs serveurs virtuels possèdent
          cette même paire adresse IP/port, Apache va ensuite comparer les
          valeurs des directives <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> et <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> avec le nom de serveur
          présent dans la requête.</p>
      
          <p>Si vous ne définissez pas de directive <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> pour un serveur virtuel à base
          de nom, le serveur utilisera par défaut le nom de domaine
          entièrement qualifié (FQDN) déduit du nom d'hôte système. Cette
          configuration sans nom de serveur explicite peut conduire à des
          erreurs de choix du serveur virtuel à utiliser et est déconseillée.</p>
      
          <h3><a name="defaultvhost" id="defaultvhost">Le serveur virtuel à base de nom
          par défaut pour une paire adresse IP/port</a></h3>
          <p>Si aucune directive ServerName ou ServerAlias ne correspond dans
          la liste de serveurs virtuels présentant la meilleure correspondance
          du point de vue adresse IP/port, c'est <strong>le premier serveur
          virtuel de cette liste</strong> qui sera utilisé.</p>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="using" id="using">Utilisation de serveurs virtuels par nom</a></h2>
      
      <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="../mod/core.html">core</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code></li><li><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code></li><li><code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
      
          <p>La première étape consiste à créer une section
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          pour chacun des serveurs à définir. Dans chaque section
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>,
          vous devez définir au minimum une directive
          <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> pour désigner
          le serveur concerné et une directive
          <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code> pour préciser
          l'emplacement sur le système de fichiers du contenu de ce serveur.</p>
      
          <div class="note"><h3>Le serveur principal disparaît</h3>
              <p>Toute requête qui ne correspond à aucune section <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> existante
      	est traitée avec la configuration du serveur principal, sans
      	tenir compte du nom d'hôte ou de la directive ServerName.</p>
      
              <p>Lorsque vous ajoutez un serveur virtuel basé sur le nom à un
      	serveur existant, et si les caractéristiques de ce serveur
      	virtuel correspondent à des combinaisons IP/port préexistantes,
      	les requêtes seront alors traitées par un serveur virtuel
      	explicite. Dans ce cas, il est en général judicieux de créer un
      	<a href="#defaultvhost">serveur virtuel par défaut</a>
      	comportant une directive <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> correspondant au nom du
      	serveur principal. De nouveaux domaines sur les mêmes interface
      	et port, mais nécessitant des configurations distinctes,
      	pourront alors être ajoutés en tant que serveurs virtuels
      	spécifiques (et non par défaut).</p>
          </div>
      
          <div class="note"><h3>Héritage du nom de serveur</h3>
             <p>Il est toujours préférable de définir une directive <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> au niveau de chaque serveur
             virtuel à base de nom. Si un serveur virtuel ne définit pas
             de directive  <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>, le
             nom de ce serveur virtuel sera hérité du serveur principal. Si
             aucun nom de serveur n'a été explicitement défini au niveau du
             serveur principal, le serveur tentera de déterminer son nom via
             une résolution de nom DNS inverse sur la première adresse
             d'écoute. Dans tous les cas, ce nom de serveur hérité influencera
             la sélection du serveur virtuel à base de nom, c'est pourquoi il
             est toujours préférable de définir une directive <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> pour chaque serveur virtuel
             à base de nom.</p>
          </div>
      
          <p>Par exemple, supposez que vous hébergez le domaine
          <code>www.example.com</code> et que vous souhaitez ajouter le
          serveur virtuel <code>other.example.com</code> qui pointe sur
          la même adresse IP. Il vous suffit d'ajouter la configuration
          suivante à <code>httpd.conf</code>&nbsp;:</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost *:80&gt;
          # Le premier serveur virtuel de la liste est aussi le
          # serveur par défaut pour *:80
          ServerName www.example.com
          ServerAlias example.com
          DocumentRoot "/www/domain"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost *:80&gt;
          ServerName other.example.com
          DocumentRoot "/www/otherdomain"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Autrement, vous pouvez spécifiez une adresse IP explicite
          à la place de <code>*</code> dans la directive
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>.
          Par exemple, cette méthode est utile si vous souhaitez faire
          tourner quelques serveurs virtuels par nom sur une même adresse
          IP, et d'autres, soit par IP, soit basés sur un autre jeu de
          serveurs virtuels par nom sur une autre adresse IP.</p>
      
          <p>Plusieurs serveurs sont accessibles par plus d'un nom. Il
          suffit de placer la directive
          <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> dans une section
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>.
          Par exemple, dans la première section
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          ci-dessus, la directive <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code>
          indique aux utilisateurs les autres noms permis pour accéder au
          même site Web&nbsp;:</p>
      
          <pre class="prettyprint lang-config">ServerAlias example.com *.example.com</pre>
      
      
          <p>ainsi, toutes les requêtes portant sur un domaine
          <code>example.com</code> seront servies par le serveur virtuel
          <code>www.example.com</code>. Les caractères joker <code>*</code>
          et <code>?</code> peuvent être utilisés pour les correspondances.
          Bien entendu, vous ne pouvez pas inventer des noms et les placer
          dans une directive <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>
          ou <code>ServerAlias</code>. Tout d'abord, votre serveur DNS
          doit être correctement configuré pour lier ces noms à une
          adresse IP associée avec votre serveur.</p>
      
          <p>La recherche du serveur virtuel à base de nom qui correspond au
          plus près à la requête s'effectue parmi les <code class="directive"><a href="../mod/core.html#virtualhost">&lt;virtualhost&gt;</a></code> selon leur
          ordre d'apparition dans le fichier de configuration. Le premier
          serveur virtuel dont le <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> ou le <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> correspond est utilisé, sans
          priorité particulière en cas de présence de caractères génériques
          (que ce soit pour le ServerName ou le ServerAlias).</p>
      
          <p>La liste complète des noms dans la section <code class="directive"><a href="../mod/core.html#virtualhost">VirtualHost</a></code> sont traités comme une
          directive <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> sans
          caractères génériques.</p>
      
          <p>Finalement, vous pouvez affiner la configuration des serveurs
          virtuels en plaçant d'autres directives à l'intérieur des sections
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>.
          La plupart des directives peut être placée dans ces sections en
          y changeant seulement la configuration du serveur virtuel associé.
          Pour déterminer si une directive particulière est permise,
          consultez le <a href="../mod/directive-dict.html#Context">contexte</a> de la
          directive. Le jeu de directives configurées dans le contexte
          du <em>serveur principal</em> (en dehors de toutes sections
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>)
          sera utilisé seulement s'il n'y a pas de configuration contraire
          par un serveur virtuel.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../de/vhosts/name-based.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/name-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/name-based.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/name-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/name-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/name-based.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/name-based.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/name-based.html.de��������������������������������������������������0000644�0000000�0000050�00000051653�13412755316�020261� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="de" xml:lang="de"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Unterstützung namensbasierter virtueller Hosts - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Module</a> | <a href="../mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossar</a> | <a href="../sitemap.html">Seitenindex</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP-Server</a> &gt; <a href="http://httpd.apache.org/docs/">Dokumentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Virtual Hosts</a></div><div id="page-content"><div id="preamble"><h1>Unterstützung namensbasierter virtueller Hosts</h1>
      <div class="toplang">
      <p><span>Verfügbare Sprachen: </span><a href="../de/vhosts/name-based.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/name-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/name-based.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/name-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/name-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/name-based.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">Diese Übersetzung ist möglicherweise
                  nicht mehr aktuell. Bitte prüfen Sie die englische Version auf
                  die neuesten Änderungen.</div>
      
        <p>Das Dokument beschreibt, wann und wie namensbasierte virtuelle Hosts zu
          verwenden sind.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#namevip">Namensbasierte gegenüber IP-basierten
          virtuellen Hosts</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#using">Die Verwendung von namensbasierten virtuellen Hosts</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#compat">Kompatibilität mit älteren Browsern</a></li>
      </ul><h3>Siehe auch</h3><ul class="seealso"><li><a href="ip-based.html">Unterstützung IP-basierter virtueller
          Hosts</a></li><li><a href="details.html">Tiefergehende Erörterung der Zuweisung
          virtueller Hosts</a></li><li><a href="mass.html">Dynamisch konfiguriertes
          Massen-Virtual-Hosting</a></li><li><a href="examples.html">Beispiele für virtuelle Hosts in typischen
          Installationen</a></li><li><a href="examples.html#serverpath">ServerPath-Beispielkonfiguration</a></li><li><a href="#comments_section">Kommentare</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="namevip" id="namevip">Namensbasierte gegenüber IP-basierten
          virtuellen Hosts</a></h2>
      
        <p>IP-basierte virtuelle Hosts verwenden die IP-Adresse der Verbindung, um den
          korrekten virtuellen Host zur Bedienung einer Anfrage zu ermitteln. Folglich 
          benötigen Sie eine IP-Adresse für jeden virtuellen Host. Bei der 
          Verwendung von namensbasierten virtuellen Hosts verläßt sich der 
          Server darauf, dass der Client den Hostnamen als Bestandteil der HTTP-Header 
          angibt. Durch Anwendung dieser Technik können sich mehrere verschiedene 
          Hosts die gleiche IP-Adresse teilen.</p>
      
        <p>Die Verwendung von namensbasierten virtuellen Hosts ist gewöhnlich 
          einfacher. Sie müssen lediglich Ihren DNS-Server darauf einstellen, 
          jeden Hostnamen auf die richtige IP-Adresse abzubilden, und dann den Apache 
          HTTP Server so konfigurieren, dass er die verschiedenen Hostnamen erkennt.
          Namensbasierte virtuelle Hosts entschärfen auch den Bedarf an 
          knappen IP-Adressen. Daher sollten Sie namensbasierte virtuelle Hosts 
          verwenden, sofern kein besonderer Grund dafür existiert, IP-basierte 
          virtuelle Hosts zu wählen. Mögliche Gründe für die 
          Verwendung IP-basierter virtueller Hosts sind:</p>
      
        <ul>
          <li>Einige antike Clients sind nicht kompatibel zu namensbasierten
            virtuellen Hosts. Damit namensbasierte virtuelle Hosts funktionieren,
            muss der Client den HTTP-Host-Header senden. Dies ist bei HTTP/1.1
            vorgeschrieben und in allen modernen HTTP/1.0-Browsern als Erweiterung
            implementiert. Wenn Sie Unterstützung für veraltete Clients
            benötigen und dennoch namensbasierte virtuelle Hosts verwenden,
            dann finden Sie eine mögliche Lösung dafür am Ende des
            Dokuments.</li>
      
          <li>Namensbasierte virtuelle Hosts können aufgrund der Natur des
            SSL-Protokolls nicht mit SSL-gesicherten Servern verwendet werden.</li>
      
          <li>Einige Betriebssysteme und Netzwerkanlagen setzen Techniken zum 
            Bandbreiten-Management ein, die nicht zwischen Hosts unterscheiden
            können, wenn diese nicht auf verschiedenen IP-Adressen liegen.</li>
          </ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="using" id="using">Die Verwendung von namensbasierten virtuellen Hosts</a></h2>
      
        <table class="related"><tr><th>Referenzierte Module</th><th>Referenzierte Direktiven</th></tr><tr><td><ul><li><code class="module"><a href="../mod/core.html">core</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code></li><li><code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code></li><li><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code></li><li><code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code></li><li><code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
        <p>Um namensbasierte virtuelle Hosts zu verwenden, müssen Sie die
          IP-Adresse (und möglicherweise den Port) des Servers benennen, an
          der Anfragen für die Hosts entgegengenommen werden. Dies wird mit
          der Direktive <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code>
          eingestellt. Im Normalfall, wenn alle IP-Adressen des Server verwendet
          werden sollen, können Sie <code>*</code> als Argument für
          <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code> verwenden. Wenn Sie
          vorhaben, mehrere Ports zu nutzen (etwa wenn SSL läuft), sollten
          Sie dem Argument einen Port hinzufügen, wie zum Beispiel
          <code>*:80</code>. Beachten Sie,
          dass die Angabe einer IP-Adresse in einer <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code>-Anweisung den Server nicht
          automatisch an dieser Adresse lauschen läßt. Lesen Sie bitte "<a href="../bind.html">Bestimmen der vom Apache verwendeten Adressen und
          Ports</a>" für weitere Details. Zusätzlich muss jede hier
          angegebene IP-Adresse einer Netzwerkkarte des Servers zugeordnet sein.</p>
       
        <p>Der nächste Schritt ist die Erstellung eines <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>-Blocks für jeden einzelnen
          Host, den Sie bedienen wollen. Das Argument der Direktive <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> sollte das gleiche
          sein wie das Argument der <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code>-Anweisung (d.h. eine IP-Adresse
          oder <code>*</code> für alle Adressen). Innerhalb jedes <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>-Blocks benötigen
          Sie zumindestens eine <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>-Anweisung, um zu bestimmen, welcher
          Host bedient wird, und eine <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>-Anweisung, um anzugeben, wo im
          Dateisystem der Inhalt des Hosts abgelegt ist.</p>
      
        <div class="note"><h3>Der Hauptserver verschwindet</h3>
          Wenn Sie virtuelle Hosts zu einem bestehenden Webserver hinzufügen,
          müssen Sie auch einen <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>-Block für den bestehenden Host
          <span class="transnote">(<em>Anm.d.Ü.:</em> und bisherigen Hauptserver)</span> erstellen. 
          Die <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>- und
          <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>-Anweisungen zu diesem
          virtuellen Host sollten die gleichen sein wie die globalen <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>- und <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>-Anweisungen. Führen Sie diesen
          virtuellen Host als erstes in der Konfigurationsdatei auf, so dass er als
          Standard-Host fungiert.
        </div>
      
        <p>Vorausgesetzt, Sie bedienen z.B. die Domain
          <code>www.domain.tld</code> und möchten den virtuellen Host
          <code>www.otherdomain.tld</code> hinzufügen, welcher auf
          die gleiche IP-Adresse zeigt. Dann fügen Sie einfach Folgendes der
          <code>httpd.conf</code> hinzu:</p>
      
          <div class="example"><p><code>
          NameVirtualHost *:80<br />
          <br />
          &lt;VirtualHost *:80&gt;<br />
          <span class="indent">
          ServerName www.domain.tld<br />
          ServerAlias domain.tld *.domain.tld<br />
          DocumentRoot /www/domain<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          <br />
          &lt;VirtualHost *:80&gt;<br />
          <span class="indent">ServerName www.otherdomain.tld<br />
          DocumentRoot /www/otherdomain<br />
          </span>
          &lt;/VirtualHost&gt;<br />
          </code></p></div>
      
        <p>Sie können anstelle des <code>*</code> bei den beiden Anweisungen 
          <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code> und <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> alternativ eine 
          eindeutige IP-Adresse angeben. Das kann man beispielsweise machen, um 
          einige namensbasierte virtuelle Hosts auf einer IP-Adresse zu betreiben und 
          entweder IP-basierte oder ein anderes Set von namensbasierten virtuellen 
          Hosts auf einer anderen Adresse.</p>
        
        <p>Viele Server wollen unter mehr als einem Namen erreichbar sein. Die 
          Direktive <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code>, die innerhalb 
          des <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>-Abschnittes angegeben wird,
          ermöglicht dies. Zum Beispiel zeigt die <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code>-Anweisung in dem ersten <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>-Block oben an, dass die
          aufgeführten Namen alternative Namen sind, die man verwenden kann, um
          das gleiche Webangebot zu erreichen:</p>
      
          <div class="example"><p><code>
          ServerAlias domain.tld *.domain.tld
          </code></p></div>
      
        <p>Anfragen für alle Hosts der Domain <code>domain.tld</code> werden
          von dem virtuellen Host <code>www.domain.tld</code> bedient. Die
          Platzhalter <code>*</code> und <code>?</code> können anstelle
          entsprechender Namen verwendet werden. Natürlich können Sie nicht
          einfach Namen erfinden und diese bei <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> oder <code>ServerAlias</code>
          angeben, Sie müssen zunächst Ihren DNS Server entsprechend
          konfigurieren, dass er diese Namen auf die mit Ihrem Server verknüpfte
          IP-Adresse abbildet.</p>
      
        <p>Und schlußendlich können Sie die Konfiguration der virtuellen
          Hosts mittels Angabe weiterer Direktiven innherhalb der <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>-Container
          feineinstellen. Die meisten Direktiven können in diesen Containern
          angegeben werden und verändern dann ausschließlich die
          Konfiguration des entsprechenden virtuellen Hosts. Prüfen Sie den <a href="../mod/directive-dict.html#Context">Kontext</a> einer Direktive, um
          herauszufinden, ob eine bestimmte Direktive zulässig ist.
          Im <em>Hauptserver-Kontext</em> (außerhalb der <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>-Container) definierte
          Konfigurationsanweisungen werden nur dann angewendet, wenn sie nicht durch
          Einstellungen des virtuellen Hosts außer Kraft gesetzt wurden.</p>
      
        <p>Wenn nun eine Anfrage eintrifft, prüft der Server zuerst, ob sie eine
          IP-Adresse verwendet, die der <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code>-Anweisung entspricht. Ist dies der
          Fall, dann sieht er sich jeden <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>-Abschnitt mit einer passenden
          IP-Adresse an und versucht den einen zu finden, dessen <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>- oder <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code>-Anweisung mit dem gewünschten
          Hostnamen übereinstimmt. Findet er einen, dann verwendet er die
          Konfiguration dieses Servers. Wird kein passender virtueller Host gefunden,
          dann wird <strong>der erste angegeben virtuelle Host</strong> verwendet,
          dessen IP-Adresse paßt.</p>
      
        <p>Die Folge davon ist, dass der erste aufgeführte virtuelle Host der
          <em>Standard</em>-Virtual-Host ist. Die <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>-Anweisung des <em>Hauptservers</em>
          wird <strong>niemals</strong> verwendet, wenn eine IP-Adresse mit einer 
          <code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code>-Anweisung
          übereinstimmt. Wenn Sie eine spezielle Konfiguration für Anfragen
          angeben möchten, die keinem bestimmten virtuellen Host entsprechen,
          packen Sie diese Konfiguration einfach in einen <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>-Container und führen diesen als
          erstes in der Konfigurationsdatei auf.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="compat" id="compat">Kompatibilität mit älteren Browsern</a></h2>
        
        <p>Wie zuvor erwähnt gibt es einige Clients, die nicht die notwendigen
          Daten senden, mit denen namensbasierte virtuelle Hosts korrekt
          funktionieren. Diesen Clients werden stets die Seiten des ersten, für
          diese IP-Adresse aufgeführten virtuellen Hosts gesendet werden (des
          <cite>primären</cite> namensbasierten virtuellen Hosts).</p>
      
        <div class="note"><h3>Was bedeutet älter?</h3>
          <p>Beachten Sie bitte, wenn wir von älter sprechen, meinen wir auch
          älter. Es ist sehr unwahrscheinlich, dass sie einen dieser Browser
          heutzutage in Verwendung finden werden. Alle aktuellen Browser-Versionen
          senden den <code>Host</code>-Header, so wie er für namensbasierte
          virtuelle Hosts benäötigt wird.</p>
        </div>
      
        <p>Mit der Direktive <code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code> existiert  
          eine mögliche Behelfskonstruktion, obgleich sie etwas schwerfällig
          ist:</p>
      
        <p>Beispielkonfiguration:</p>
      
        <div class="example"><p><code>
          NameVirtualHost 111.22.33.44<br />
          <br />
          &lt;VirtualHost 111.22.33.44&gt;<br />
          <span class="indent">
          ServerName www.domain.tld<br />
          ServerPath /domain<br />
          DocumentRoot /web/domain<br />
          </span>
          &lt;/VirtualHost&gt;<br />
        </code></p></div>
      
        <p>Was bedeutet das? Es bedeutet, dass eine Anfrage für eine mit
          "<code>/domain</code>" beginnende URI von dem virtuellen Host
          <code>www.domain.tld</code> bedient wird. Dies heißt, dass die Seiten
          für alle Clients unter <code>http://www.domain.tld/domain/</code>
          abrufbar sind, wenngleich Clients, die den Header <code>Host:</code>
          senden, auch über <code>http://www.domain.tld/</code> auf sie zugreifen
          können.</p>
      
        <p>Legen Sie einen Link auf der Seite Ihres primären virtuellen Hosts zu 
          <code>http://www.domain.tld/domain/</code>, um die Behelfslösung
          verfügbar zu machen. Bei den Seiten der virtuellen Hosts müssen
          Sie dann sicherstellen, entweder außschließlich relative Links
          (<em>z.B.</em> "<code>file.html</code>" oder
          "<code>../icons/image.gif</code>") zu verwenden oder Links, die das
          einleitende <code>/domain/</code> enthalten (<em>z.B.</em>,
          "<code>http://www.domain.tld/domain/misc/file.html</code>" oder
          "<code>/domain/misc/file.html</code>").</p>
      
        <p>Dies erfordert etwas Disziplin, die Befolgung dieser Richtlinien stellt
          jedoch größtenteils sicher, dass Ihre Seiten mit allen Browsern
          funktionieren, alten wie neuen.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Verfügbare Sprachen: </span><a href="../de/vhosts/name-based.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/name-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/name-based.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/name-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/name-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/name-based.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Kommentare</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/name-based.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Lizenziert unter der <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Module</a> | <a href="../mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossar</a> | <a href="../sitemap.html">Seitenindex</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/index.html.tr.utf8��������������������������������������������������0000644�0000000�0000050�00000020150�13412755316�020302� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache Sanal Konak Belgeleri - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache Sanal Konak Belgeleri</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../de/vhosts/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/vhosts/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
      
          <p><cite>Sanal Konak</cite> (Virtual Host) terimi tek bir makine üzerinde
            birden fazla sitenin (sirket1.example.com, sirket2.example.com gibi)
            barındırılma uygulamasını betimler. Sanal konaklar,
            "<a href="ip-based.html">IP’ye dayalı</a>" veya
            "<a href="name-based.html">isme dayalı</a>" olabilir;
            birincisinde, her site ayrı bir IP adresinden sunulurken, ikincisinde her
            IP adresinde birden fazla site sunulur. Olayda aynı fiziksel sunucu
            kullanıldığı halde bu sunucu son kullanıcıya görünür değildir.</p>
      
          <p>Apache yazılımsal olarak IP’ye dayalı sanal konakları destekleyen ilk
            sunuculardan biridir. 1.1 sürümünden itibaren Apache hem IP’ye dayalı hem
            de isme dayalı sanal konakları desteklemektedir. İsme dayalı sanal
            konaklara bazen <em>konağa dayalı</em> sanal konaklar veya <em>IP’ye
            dayanmayan</em> sanal konaklar da denmektedir.</p>
      
          <p>Aşağıda, Apache HTTP Suncusundaki sanal konak desteğini bütün
            ayrıntıları ile açıklayan belgeler listelenmiştir.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#support">Sanal Konak DesteÄŸi</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#directives">Yapılandırma Yönergeleri</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code></li><li><a href="name-based.html">İsme Dayalı Sanal Konaklar</a></li><li><a href="ip-based.html">IP Adresine Dayalı Sanal Konaklar</a>
      </li><li><a href="examples.html">Sanal Konak Örnekleri</a></li><li><a href="fd-limits.html">Dosya Tanıtıcı Sınırları</a></li><li><a href="mass.html">Kütlesel Sanal Konaklık</a></li><li><a href="details.html">Ayrıntılı olarak Konak Eşleme</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="support" id="support">Sanal Konak DesteÄŸi</a></h2>
      
          <ul>
            <li><a href="name-based.html">İsme Dayalı Sanal Konaklar</a> (Her IP
              adresinde birden fazla site)</li>
            <li><a href="ip-based.html">IP Adresine Dayalı Sanal Konaklar</a> (Her
              site için ayrı IP adresi)</li>
            <li><a href="examples.html">Çok kullanılan sanal konak yapılandırma
              örnekleri</a></li>
            <li><a href="fd-limits.html">Dosya Tanıtıcı Sınırları</a> (veya,
            <em>çok fazla günlük dosyası</em>)</li>
            <li><a href="mass.html">Devingen olarak Yapılandırılan Kütlesel Sanal
              Barındırma</a></li>
            <li><a href="details.html">Konak EÅŸlemenin DerinliÄŸine
              İncelenmesi</a></li>
          </ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="directives" id="directives">Yapılandırma Yönergeleri</a></h2>
      
          <ul>
            <li><code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code></li>
          </ul>
      
          <p>Sanal konak yapılandırmanız üzerinde hata ayıklamaya çalışıyorsanız
            <code>-S</code> komut satırı seçeneği şu şekilde çok işinize
            yarayabilir:</p>
      
          <div class="example"><h3>Unix örneği</h3><p><code>
          apachectl -S
          </code></p></div>
      
          <div class="example"><h3>Windows örneği</h3><p><code>
          httpd.exe -S
          </code></p></div>
          
          <p>Bu komut, yapılandırma dosyasının Apache yorumunu dökümler. IP
            adreslerinin ve sunucu isimlerinin dikkatli bir incelemesi, yapılandırma
            yanlışlarınızı keşfetmenize yardımcı olabilir. (Diğer komut satırı
            seçenekleri için <code class="program"><a href="../programs/httpd.html">httpd</a></code> programının belgelerine
            bakınız.)</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../de/vhosts/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/vhosts/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/name-based.html.en��������������������������������������������������0000644�0000000�0000050�00000041435�13412755316�020270� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Name-based Virtual Host Support - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Virtual Hosts</a></div><div id="page-content"><div id="preamble"><h1>Name-based Virtual Host Support</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../de/vhosts/name-based.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/name-based.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/name-based.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/name-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/name-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/name-based.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>This document describes when and how to use name-based virtual hosts.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#namevip">Name-based vs. IP-based Virtual Hosts</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#alg">How the server selects the proper name-based virtual host</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#using">Using Name-based Virtual Hosts</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="ip-based.html">IP-based Virtual Host Support</a></li><li><a href="details.html">An In-Depth Discussion of Virtual Host Matching</a></li><li><a href="mass.html">Dynamically configured mass virtual hosting</a></li><li><a href="examples.html">Virtual Host examples for common setups</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="namevip" id="namevip">Name-based vs. IP-based Virtual Hosts</a></h2>
      
          <p><a href="ip-based.html">IP-based virtual hosts</a> use the IP address of the connection to
          determine the correct virtual host to serve.  Therefore you need to
          have a separate IP address for each host.</p>
      
          <p>With name-based virtual hosting, the server relies on the client to
          report the hostname as part of the HTTP headers.  Using this technique,
          many different hosts can share the same IP address.</p>
      
          <p>Name-based virtual hosting is usually simpler, since you need
          only configure your DNS server to map each hostname to the correct
          IP address and then configure the Apache HTTP Server to recognize
          the different hostnames. Name-based virtual hosting also eases
          the demand for scarce IP addresses. Therefore you should use
          name-based virtual hosting unless you are using equipment
          that explicitly demands IP-based hosting.  Historical reasons for
          IP-based virtual hosting based on client support are no longer
          applicable to a general-purpose web server.</p>
      
          <p> Name-based virtual hosting builds off of the IP-based virtual host
          selection algorithm, meaning that searches for the proper server name
          occur only between virtual hosts that have the best IP-based address.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="alg" id="alg">How the server selects the proper name-based virtual host</a></h2>
      
          <p>It is important to recognize that the first step in name-based virtual
          host resolution is IP-based resolution.  Name-based virtual host
          resolution only chooses the most appropriate name-based virtual host
          after narrowing down the candidates to the best IP-based match.  Using a wildcard (*)
          for the IP address in all of the VirtualHost directives makes this
          IP-based mapping irrelevant.</p>
      
          <p>When a request arrives, the server will find the best (most specific) matching
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> argument based on
          the IP address and port used by the request.  If there is more than one virtual host
          containing this best-match address and port combination, Apache will further
          compare the <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> and <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> directives to the server name
          present in the request.</p>
      
          <p>If you omit the <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> 
          directive from any name-based virtual host, the server will default
          to a fully qualified domain name (FQDN) derived from the system hostname.
          This implicitly set server name can lead to counter-intuitive virtual host
          matching and is discouraged.</p>
       
          <h3><a name="defaultvhost" id="defaultvhost">The default name-based vhost for an IP and port combination </a></h3>
          <p> If no matching ServerName or ServerAlias is found in the set of
          virtual hosts containing the most specific matching IP address and port
          combination, then <strong>the first listed virtual host</strong> that
          matches that will be used.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="using" id="using">Using Name-based Virtual Hosts</a></h2>
      
      <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="../mod/core.html">core</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code></li><li><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code></li><li><code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
          <p>The first step is to create a <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> block for
          each different host that you would like to serve.  Inside each <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> block, you will need at minimum a
          <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> directive to designate
          which host is served and a <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>
          directive to show where in the filesystem the content for that host
          lives.</p>
      
          <div class="note"><h3>Main host goes away</h3>
              <p> Any request that doesn't match an existing <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> is handled by the global
              server configuration, regardless of the hostname or ServerName.</p>
      
              <p> When you add a name-based virtual host to an existing server, and
              the virtual host arguments match preexisting IP and port combinations,
              requests will now be handled by an explicit virtual host.  In this case,
              it's usually wise to create a <a href="#defaultvhost">default virtual host</a>
              with a <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> matching that of
              the base server.  New domains on the same interface and port, but
              requiring separate configurations,  can then be added as subsequent (non-default)
              virtual hosts.</p>
          </div>
      
          <div class="note"><h3>ServerName inheritance</h3>
             <p> It is best to always explicitly list a  <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> in every name-based virtual host.</p>
             <p>If a <code class="directive"><a href="../mod/core.html#virtualhost">VirtualHost</a></code> doesn't specify 
             a <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>, a server name will be 
             inherited from the base server configuration.  If no server name was 
             specified globally, one is detected at startup through reverse DNS resolution
             of the first listening address.  In either case, this inherited server name
             will influence name-based virtual host resolution, so it is best to always
             explicitly list a  <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> in every
             name-based virtual host.</p>
          </div>
      
          <p>For example, suppose that you are serving the domain
          <code>www.example.com</code> and you wish to add the virtual host
          <code>other.example.com</code>, which points at the same IP address.
          Then you simply add the following to <code>httpd.conf</code>:</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost *:80&gt;
          # This first-listed virtual host is also the default for *:80
          ServerName www.example.com
          ServerAlias example.com 
          DocumentRoot "/www/domain"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost *:80&gt;
          ServerName other.example.com
          DocumentRoot "/www/otherdomain"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>You can alternatively specify an explicit IP address in place of the
          <code>*</code> in <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> directives. For example, you might want to do this
          in order to run some name-based virtual hosts on one IP address, and either
          IP-based, or another set of name-based virtual hosts on another address.</p>
      
          <p>Many servers want to be accessible by more than one name. This is
          possible with the <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code>
          directive, placed inside the <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> section. For example in the first <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> block above, the
          <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> directive indicates that
          the listed names are other names which people can use to see that same
          web site:</p>
      
          <pre class="prettyprint lang-config">ServerAlias example.com *.example.com</pre>
      
      
          <p>then requests for all hosts in the <code>example.com</code> domain will
          be served by the <code>www.example.com</code> virtual host. The wildcard
          characters <code>*</code> and <code>?</code> can be used to match names.
          Of course, you can't just make up names and place them in <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> or <code>ServerAlias</code>. You must
          first have your DNS server properly configured to map those names to an IP
          address associated with your server.</p>
      
          <p>Name-based virtual hosts for the best-matching set of  <code class="directive"><a href="../mod/core.html#virtualhost">&lt;virtualhost&gt;</a></code>s are processed 
          in the order they appear in the configuration.  The first matching <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> or <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code> is used, with no different precedence for wildcards
          (nor for ServerName vs. ServerAlias).  </p>
      
          <p>The complete list of names in the <code class="directive"><a href="../mod/core.html#virtualhost">VirtualHost</a></code>
          directive are treated just like a (non wildcard) 
          <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code>.</p>
      
          <p>Finally, you can fine-tune the configuration of the virtual hosts
          by placing other directives inside the <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> containers. Most directives can be
          placed in these containers and will then change the configuration only of
          the relevant virtual host. To find out if a particular directive is allowed,
          check the <a href="../mod/directive-dict.html#Context">Context</a> of the
          directive. Configuration directives set in the <em>main server context</em>
          (outside any <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          container) will be used only if they are not overridden by the virtual host
          settings.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../de/vhosts/name-based.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/name-based.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/name-based.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/name-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/name-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/name-based.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/name-based.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/ip-based.html.ko.euc-kr���������������������������������������������0000644�0000000�0000050�00000026342�13412755316�021154� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¾ÆÆÄÄ¡ IP±â¹Ý °¡»óÈ£½ºÆ® Áö¿ø - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">°¡»óÈ£½ºÆ®</a></div><div id="page-content"><div id="preamble"><h1>¾ÆÆÄÄ¡ IP±â¹Ý °¡»óÈ£½ºÆ® Áö¿ø</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/vhosts/ip-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/ip-based.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/ip-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/ip-based.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/ip-based.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#requirements">½Ã½ºÅÛ ¿ä±¸»çÇ×</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#howto">¾ÆÆÄÄ¡ ¼³Á¤¹æ¹ý</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#multiple">¿©·¯ ¼­¹ö¸¦ ½ÇÇàÇϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#single">¼­¹ö Çϳª·Î °¡»óÈ£½ºÆ® ½ÇÇàÇϱâ</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li>
      <a href="name-based.html">À̸§±â¹Ý °¡»óÈ£½ºÆ® Áö¿ø</a>
      </li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="requirements" id="requirements">½Ã½ºÅÛ ¿ä±¸»çÇ×</a></h2>
      
          <p><cite>IP±â¹Ý</cite>À̶õ ¸»ÀÌ ÀǹÌÇϵíÀÌ ¼­¹ö´Â
          <strong>IP±â¹Ý °¡»óÈ£½ºÆ® °¢°¢¿¡ ´ëÇØ ´Ù¸¥ IP ÁÖ¼Ò¸¦
          °¡Á®¾ßÇÑ´Ù</strong>. ÀÌ´Â ÄÄÇ»Å͸¦ ¹°¸®ÀûÀ¸·Î ¿©·¯ ³×Æ®¿÷¿¡
          ¿¬°áÇϰųª, ÃÖ±Ù ¿î¿µÃ¼Á¦¿¡¼­ Áö¿øÇÏ´Â °¡»ó ÀÎÅÍÆäÀ̽º¸¦
          (ÀÚ¼¼ÇÑ ³»¿ëÀº ½Ã½ºÅÛ ¹®¼­¸¦ Âü°íÇ϶ó. ÈçÈ÷ "ip aliases"¶ó°í
          Çϸç, º¸Åë "ifconfig" ¸í·É¾î·Î ¸¸µç´Ù) »ç¿ëÇÏ¿© °¡´ÉÇÏ´Ù.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="howto" id="howto">¾ÆÆÄÄ¡ ¼³Á¤¹æ¹ý</a></h2>
      
          <p>¿©·¯ È£½ºÆ®¸¦ Áö¿øÇϵµ·Ï ¾ÆÆÄÄ¡¸¦ ¼³Á¤ÇÏ´Â ¹æ¹ýÀº µÎ°¡Áö´Ù.
          Çϳª´Â °¢ È£½ºÆ®¸¶´Ù º°µµÀÇ À¥¼­¹ö¸¦ ½ÇÇàÇÏ´Â
          ¹ýÀ̰í, ´Ù¸¥ Çϳª´Â ¸ðµç °¡»óÈ£½ºÆ®¸¦ Áö¿øÇÏ´Â ¼­¹ö ÇѰ³¸¦
          ½ÇÇàÇÏ´Â ¹æ¹ýÀÌ´Ù.</p>
      
          <p>¾ðÁ¦ ¿©·¯ ¼­¹ö¸¦ »ç¿ëÇϳª:</p>
      
          <ul>
            <li>ȸ»ç2ÀÇ »ç¿ëÀÚ°¡ À¥ÀÌ¿ÜÀÇ ¹æ¹ýÀ¸·Î ȸ»ç1ÀÇ ÀڷḦ ÀÐÀ»
            ¼ö ¾ø°Ô ÇÏ´Â µî º¸¾È»ó ±¸ºÐÀÌ ÇÊ¿äÇÑ °æ¿ì. ÀÌ °æ¿ì
            µÎ ¼­¹ö¸¦ °¢°¢ ´Ù¸¥ <code class="directive"><a href="../mod/mpm_common.html#user">User</a></code>, <code class="directive"><a href="../mod/mpm_common.html#group">Group</a></code>, <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code>, <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> ¼³Á¤À¸·Î ½ÇÇàÇØ¾ß ÇÑ´Ù.</li>
      
            <li>ÃæºÐÇÑ ¸Þ¸ð¸®°¡ ÀÖ°í, ÄÄÇ»ÅÍÀÇ ¸ðµç IP¸¦ ±â´Ù¸®±âÀ§ÇÑ
            ÆÄÀϱâ¼úÀÚ(file descriptor) ¿ä±¸»çÇ×µµ ¸¸Á·ÇÑ´Ù. "¿ÍÀϵåÄ«µå"³ª
            ƯÁ¤ ÁÖ¼Ò¸¦ <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code>ÇÒ ¼ö¸¸ ÀÖ´Ù. ±×·¡¼­
            ¾î¶² ÀÌÀ¯¿¡¼­°Ç ƯÁ¤ ÁÖ¼Ò¸¦ ±â´Ù¸± Çʿ䰡 ÀÖ´Ù¸é, (ÇÑ
            À¥¼­¹ö°¡ ÇÑ ÁÖ¼Ò¸¦ Á¦¿ÜÇÑ ¸ðµç ÁÖ¼Ò¸¦ ±â´Ù¸®°í ´Ù¸¥ ÇÑ
            À¥¼­¹ö°¡ Á¦¿ÜÇÑ ÁÖ¼Ò¸¦ ±â´Ù¸± ¼ö ÀÖÁö¸¸) ÁöÁ¤ÇÑ ÁÖ¼Ò
            ¸ðµÎ¸¦ ±â´Ù·Á¾ß ÇÑ´Ù.</li>
          </ul>
      
          <p>¾ðÁ¦ ¼­¹ö ÇѰ³¸¦ »ç¿ëÇϳª:</p>
      
          <ul>
            <li>°¡»óÈ£½ºÆ®µéÀÇ À¥¼­¹ö ¼³Á¤À» °øÀ¯ÇÒ ¼ö ÀÖ´Â °æ¿ì.</li>
      
            <li>ÄÄÇ»ÅͰ¡ ¸Å¿ì ¸¹Àº ¿äûÀ» ¼­ºñ½ºÇÑ´Ù¸é ¿©·¯ ¼­¹ö¸¦
            ½ÇÇàÇϱ⿡ ¼Óµµ ¼Õ½ÇÀÌ Å¬ ¼ö ÀÖ´Ù.</li>
          </ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="multiple" id="multiple">¿©·¯ ¼­¹ö¸¦ ½ÇÇàÇϱâ</a></h2>
      
          <p>°¢ °¡»óÈ£½ºÆ®º°·Î À¥¼­¹ö¸¦ ¼³Ä¡ÇÑ´Ù. ¼³Á¤ÆÄÀÏÀÇ
          <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> Áö½Ã¾î¿¡
          ¼­¹ö°¡ ¼­ºñ½ºÇÒ IP ÁÖ¼Ò(ȤÀº °¡»óÈ£½ºÆ®)¸¦ Àû¾îÁØ´Ù. ¿¹¸¦
          µé¸é,</p>
      
          <div class="example"><p><code>
          Listen www.smallco.com:80
          </code></p></div>
      
          <p>È£½ºÆ®¸í º¸´Ù´Â IP ÁÖ¼Ò¸¦ »ç¿ëÇÏ±æ ¹Ù¶õ´Ù.
          (<a href="../dns-caveats.html">DNS ¹®Á¦</a> Âü°í)</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="single" id="single">¼­¹ö Çϳª·Î °¡»óÈ£½ºÆ® ½ÇÇàÇϱâ</a></h2>
      
          <p>ÀÌ °æ¿ì À¥¼­¹ö ÇѰ³·Î ÁÖ¼­¹ö¿Í ¸ðµç °¡»óÈ£½ºÆ®¿¡ ´ëÇÑ
          ¿äûÀ» ¼­ºñ½ºÇÑ´Ù. ¼³Á¤ÆÄÀÏÀÇ <code class="directive"><a href="../mod/core.html#virtualhost">VirtualHost</a></code> Áö½Ã¾î¿¡ °¡»óÈ£½ºÆ®¸¶´Ù
          ´Ù¸¥ <code class="directive"><a href="../mod/core.html#serveradmin">ServerAdmin</a></code>,
          <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>, <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>, <code class="directive"><a href="../mod/core.html#errorlog">ErrorLog</a></code>, <code class="directive"><a href="../mod/mod_log_config.html#transferlog">TransferLog</a></code>,
          <code class="directive"><a href="../mod/mod_log_config.html#customlog">CustomLog</a></code>
          Áö½Ã¾î °ªÀ» ¼³Á¤ÇÑ´Ù. ¿¹¸¦ µé¸é,</p>
      
          <div class="example"><p><code>
          &lt;VirtualHost www.smallco.com&gt;<br />
          ServerAdmin webmaster@mail.smallco.com<br />
          DocumentRoot /groups/smallco/www<br />
          ServerName www.smallco.com<br />
          ErrorLog /groups/smallco/logs/error_log<br />
          TransferLog /groups/smallco/logs/access_log<br />
          &lt;/VirtualHost&gt;<br />
      		<br />
          &lt;VirtualHost www.baygroup.org&gt;<br />
          ServerAdmin webmaster@mail.baygroup.org<br />
          DocumentRoot /groups/baygroup/www<br />
          ServerName www.baygroup.org<br />
          ErrorLog /groups/baygroup/logs/error_log<br />
          TransferLog /groups/baygroup/logs/access_log<br />
          &lt;/VirtualHost&gt;
      		</code></p></div>
      
          <p>È£½ºÆ®¸í º¸´Ù´Â IP ÁÖ¼Ò¸¦ »ç¿ëÇÏ±æ ¹Ù¶õ´Ù.
          (<a href="../dns-caveats.html">DNS ¹®Á¦</a> Âü°í)</p>
      
          <p>VirtualHost Áö½Ã¾î ¾È¿¡¼­´Â ÇÁ·Î¼¼½º »ý¼º°ú ±âŸ ¸î¸î Áö½Ã¾î¸¦
          Á¦¿ÜÇÏ°í °ÅÀÇ <strong>¸ðµç</strong> ¼³Á¤Áö½Ã¾î¸¦ »ç¿ëÇÒ
          ¼ö ÀÖ´Ù. VirtualHost Áö½Ã¾î ¾È¿¡¼­ Áö½Ã¾î¸¦ »ç¿ëÇÒ ¼ö ÀÖ´ÂÁö
          ¾Ë·Á¸é <a href="../mod/directives.html">Áö½Ã¾î ¸ñ·Ï</a>¿¡¼­
          <a href="../mod/directive-dict.html#Context">»ç¿ëÀå¼Ò</a>¸¦
          È®ÀÎÇ϶ó.</p>
      
          <p><a href="../suexec.html">suEXEC ÇÁ·Î±×·¥</a>À»
          »ç¿ëÇÑ´Ù¸é VirtualHost Áö½Ã¾î ¾È¿¡ <code class="directive"><a href="../mod/mpm_common.html#user">User</a></code>¿Í <code class="directive"><a href="../mod/mpm_common.html#group">Group</a></code>À» »ç¿ëÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p><em>º¸¾È:</em> ¼­¹ö¸¦ ½ÇÇàÇÏ´Â »ç¿ëÀÚ¿Ü¿¡ ´Ù¸¥ »ç¶÷¿¡°Ô
          ·Î±×ÆÄÀÏÀÌ ÀÖ´Â µð·ºÅ丮ÀÇ ¾²±â±ÇÇÑÀÌ ÀÖ´Ù¸é º¸¾È
          ¹®Á¦¸¦ Á¶½ÉÇ϶ó. ÀÚ¼¼ÇÑ ³»¿ëÀº <a href="../misc/security_tips.html">º¸¾È ÆÁ</a>À» Âü°íÇ϶ó.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/vhosts/ip-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/ip-based.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/ip-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/ip-based.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/ip-based.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/ip-based.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/ip-based.html.tr.utf8�����������������������������������������������0000644�0000000�0000050�00000034623�13447004010�020653� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>IP’ye Dayalı Sanal Konak Desteği - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Sanal Konaklar</a></div><div id="page-content"><div id="preamble"><h1>IP’ye Dayalı Sanal Konak Desteği</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/vhosts/ip-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/ip-based.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/ip-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/ip-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/ip-based.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#explanation">IP'ye dayalı sanal konak desteği nedir</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#requirements">Sistem gereksinimleri</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#howto">Apache nasıl ayarlanır?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#multiple">Çok sayıda sürecin yapılandırılması</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#single">Sanal konaklar tek bir sürecin yapılandırılması</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li>
      <a href="name-based.html">İsme Dayalı Sanal Konak Desteği</a>
      </li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="explanation" id="explanation">IP'ye dayalı sanal konak desteği nedir</a></h2>
          <p>IP'ye dayalı sanal konak desteği, bir isteğin alındığı IP adresi ve
            porta bağlı olarak farklı yönergeleri uygulamak için bir yoldur. Özetle,
            farklı siteleri farklı portlardan ve arayüzlerden sunmakta
            kullanılır.</p>
      
           <p>Çoğu durumda, <a href="name-based.html">isme dayalı sanal konaklar</a>
             birçok sanal konağın tek bir IP adresi/port çiftini paylaşmasını
             sağladığından daha kullanışlıdır. Neyi kullanacağınıza karar vermek için
             <a href="name-based.html#namevip">İsme dayalı ve IP’ye dayalı Sanal
             Konaklar</a> bölümüne bakınız.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="requirements" id="requirements">Sistem gereksinimleri</a></h2>
      
          <p><cite>IP’ye dayalı</cite> deyince, sunucunun <strong>her IP’ye dayalı
            sanal konak için ayrı bir IP adresi/port çifti</strong>ne sahip olduğunu
            anlıyoruz. Bunun olması için, makine ya çok sayıda ağ bağlantısına
            sahiptir ya da makinede, günümüzde çoğu işletim sistemi tarafından
            desteklenen sanal arabirimler ve/veya çok sayıda port kullanılıyordur.
            (Sanal arabirimlerle ilgili ayrıntılar için sistem belgelerinize bakınız;
            bu konu genellikle IP rumuzları (ip aliases) olarak geçer ve ayarlamak
            için genellikle "ifconfig" komutu kullanılır.)</p>
      
          <p>Apache HTTP Sunucusu terminolojisinde, tek bir IP adresinin çok sayıda
            TCP portuyla kullanımı IP'ye dayalı sanal konak desteği olarak
            bilinir.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="howto" id="howto">Apache nasıl ayarlanır?</a></h2>
      
          <p>Çok sayıda konağı desteklemek üzere Apache iki şekilde
            yapılandırılabilir. Ya her konak için ayrı bir <code class="program"><a href="../programs/httpd.html">httpd</a></code>
            süreci çalıştırırsınız ya da tüm sanal konakları destekleyen tek bir
            süreciniz olur.</p>
      
          <p>Çok sayıda süreç kullanıyorsanız:</p>
      
          <ul>
            <li>Güvenli bölgeler oluşturmanız gerekiyordur. Örneğin, şirket2’deki hiç
              kimse dosya sistemi üzerinden şirket1’e ait verileri okuyamasın, sadece
              herkes gibi tarayıcı kullanarak okuyabilsin istenebilir.  Bu durumda,
              <code class="directive"><a href="../mod/mod_unixd.html#user">User</a></code>,
              <code class="directive"><a href="../mod/mod_unixd.html#group">Group</a></code>,
              <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> ve
              <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> yönergeleri farklı
              değerlerle yapılandırılmış iki ayrı süreç çalıştırmanız gerekir.</li>
      
            <li>Makine üzerindeki her IP adresini dinlemek için gereken dosya tanıtıcı
              ve bellek miktarını makul bir seviyede tutabilirsiniz. Bu sadece belli
              adresleri dinleyerek veya çok sayıda adresle eşleşen adres kalıpları
              kullanarak mümükün olabilir. Zaten, bir sebeple belli bir adresi dinleme
              ihtiyacı duyarsanız, diğer tüm adresleri de ayrı ayrı dinlemeniz
              gerekir. (Bir <code class="program"><a href="../programs/httpd.html">httpd</a></code> programı N-1 adresi dinlerken
              diÄŸerleri kalan adresleri dinleyebilir.)</li>
          </ul>
      
          <p>Tek bir süreç kullanıyorsanız:</p>
      
          <ul>
            <li><code class="program"><a href="../programs/httpd.html">httpd</a></code> yapılandırmasının sanal konaklar arasında
              paylaşılmasına izin veriliyor demektir.</li>
      
            <li>Makine çok büyük miktarda isteği karşılayabilir ve ayrı ayrı
              süreçlerin çalışmasından kaynaklanan önemli başarım kayıpları
              yaÅŸanmaz.</li>
          </ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="multiple" id="multiple">Çok sayıda sürecin yapılandırılması</a></h2>
      
          <p>Her sanal konak için ayrı bir <code class="program"><a href="../programs/httpd.html">httpd</a></code> yapılandırması
            oluşturulur. Her yapılandırmada, o süreç tarafından sunulacak IP adresi
            (veya sanal konak) için <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code>
            yönergesi kullanılır. Örnek:</p>
      
          <pre class="prettyprint lang-config">Listen 192.0.2.100:80</pre>
      
      
          <p>Burada konak ismi yerine IP adresi kullanmanız önerilir (ayrıntılar için
            <a href="../dns-caveats.html">DNS ile ilgili konular</a> belgesine
            bakınız).</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="single" id="single">Sanal konaklar tek bir sürecin yapılandırılması</a></h2>
      
          <p>Bu durum için, ana sunucu ve sanal konakların tümüne gelen istekler tek
            bir <code class="program"><a href="../programs/httpd.html">httpd</a></code> süreci tarafından karşılanır. Yapılandırma
            dosyasında, her sanal konak için, farklı değerlere sahip <code class="directive"><a href="../mod/core.html#serveradmin">ServerAdmin</a></code>, <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>, <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>, <code class="directive"><a href="../mod/core.html#errorlog">ErrorLog</a></code>ve<code class="directive"><a href="../mod/mod_log_config.html#transferlog">TransferLog</a></code>
            veya <code class="directive"><a href="../mod/mod_log_config.html#customlog">CustomLog</a></code> yönergeleri
            içeren ayrı birer <code class="directive"><a href="../mod/core.html#virtualhost">VirtualHost</a></code> bölümü
            oluşturulur. Örnek:</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost 192.168.1.10:80&gt;
          ServerAdmin bilgi@example.com
          DocumentRoot "/siteler/belgeler/ecom"
          ServerName example.com
          ErrorLog "/siteler/gunlukler/ecom/hatalar.log"
          CustomLog "/siteler/gunlukler/ecom/erisim.log" combined
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 192.168.1.20:80&gt;
          ServerAdmin bilgi@example.org
          DocumentRoot "/siteler/belgeler/eorg"
          ServerName example.org
          ErrorLog "/siteler/gunlukler/eorg/hatalar.log"
          CustomLog "/siteler/gunlukler/eorg/erisim.log" combined
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>&lt;VirtualHost&gt; yönergesinde konak ismi yerine
             IP adresi kullanmanız önerilir (ayrıntılar için
             <a href="../dns-caveats.html">DNS ile ilgili konular</a>
             belgesine bakınız).</p>
      
          <p>Belli bir IP adresi veya port kullanımı bunların joker eşdeğerlerine
            göre daha yüksek öncelik sağlar ve eşleşen bir sanal konak da genel
            sunucuya göre öncelik alır.</p>
      
          <p>Süreç oluşturmayı denetleyen yönergeler ve bir kaç başka yönerge dışında
            hemen hemen tüm yapılandırma yönergeleri <code class="directive"><a href="../mod/core.html#virtualhost">VirtualHost</a></code> bölümleri içinde kullanılabilir.
            Bir yönergenin <code class="directive"><a href="../mod/core.html#virtualhost">VirtualHost</a></code>
            bölümlerinde kullanılıp kullanılmayacağını öğrenmek için <a href="../mod/quickreference.html">yönerge dizinini</a> kullanarak yönergenin
            <a href="../mod/directive-dict.html#Context">Bağlam</a>’ına bakınız.</p>
      
          <p><a href="../suexec.html">suEXEC sarmalayıcısı</a> kullanıldığı takdirde
            <code class="directive"><a href="../mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code> yönergesi de
            bir <code class="directive"><a href="../mod/core.html#virtualhost">VirtualHost</a></code> bölümü içinde
            kullanılabilir.</p>
      
          <p><em>GÜVENLİK:</em>Günlük dosyalarının yazılacağı yeri belirlerken,
            Apache’yi başlatan kullanıcıdan başka kimsenin yazamayacağı bir yerin
            seçilmesi bazı güvenlik risklerini ortadan kaldırmak bakımından
            önemlidir. Ayrıntılar için <a href="../misc/security_tips.html">güvenlik
            ipuçları</a> belgesine bakınız.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/vhosts/ip-based.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/ip-based.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/ip-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/ip-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/ip-based.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/ip-based.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/examples.html.en����������������������������������������������������0000644�0000000�0000050�00000060557�13412755316�020120� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>VirtualHost Examples - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Virtual Hosts</a></div><div id="page-content"><div id="preamble"><h1>VirtualHost Examples</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/vhosts/examples.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/examples.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/examples.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/examples.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/examples.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>This document attempts to answer the commonly-asked questions about
          setting up <a href="index.html">virtual hosts</a>. These scenarios are those involving multiple
          web sites running on a single server, via <a href="name-based.html">name-based</a> or <a href="ip-based.html">IP-based</a> virtual hosts.
          </p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#purename">Running several name-based web
          sites on a single IP address.</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#twoips">Name-based hosts on more than one
          IP address.</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#intraextra">Serving the same content on
          different IP addresses (such as an internal and external
          address).</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#port">Running different sites on different
          ports.</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ip">IP-based virtual hosting</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ipport">Mixed port-based and ip-based virtual
        hosts</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#mixed">Mixed name-based and IP-based
          vhosts</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#proxy">Using <code>Virtual_host</code> and
          mod_proxy together</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#default">Using <code>_default_</code>
          vhosts</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#migrate">Migrating a name-based vhost to an
          IP-based vhost</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#serverpath">Using the <code>ServerPath</code>
        directive</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="purename" id="purename">Running several name-based web
          sites on a single IP address.</a></h2>
      
          <p>Your server has multiple hostnames that resolve to a single address,
          and you want to respond differently for <code>www.example.com</code>
          and <code>www.example.org</code>.</p>
      
          <div class="note"><h3>Note</h3><p>Creating virtual
                host configurations on your Apache server does not magically
                cause DNS entries to be created for those host names. You
                <em>must</em> have the names in DNS, resolving to your IP
                address, or nobody else will be able to see your web site. You
                can put entries in your <code>hosts</code> file for local
                testing, but that will work only from the machine with those
                <code>hosts</code> entries.</p>
          </div>
      
          <pre class="prettyprint lang-config"># Ensure that Apache listens on port 80
      Listen 80
      &lt;VirtualHost *:80&gt;
          DocumentRoot "/www/example1"
          ServerName www.example.com
      
          # Other directives here
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost *:80&gt;
          DocumentRoot "/www/example2"
          ServerName www.example.org
      
          # Other directives here
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>The asterisks match all addresses, so the main server serves no
          requests. Due to the fact that the virtual host with
          <code>ServerName www.example.com</code> is first
          in the configuration file, it has the highest priority and can be seen
          as the <cite>default</cite> or <cite>primary</cite> server. That means
          that if a request is received that does not match one of the specified
          <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> directives, it will be served by this first
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>.</p>
      
          <p>The above configuration is what you will want to use in almost
          all name-based virtual hosting situations. The only thing that this
          configuration will not work for, in fact, is when you are serving
          different content based on differing IP addresses or ports.</p>
      
          <div class="note">
                  <h3>Note</h3>
      
                 <p>You may replace <code>*</code> with a specific IP address
                 on the system.  Such virtual hosts will only be used for
                 HTTP requests received on connection to the specified IP
                 address.</p>
      
                 <p>However, it is additionally useful to use <code>*</code>
                 on systems where the IP address is not predictable - for
                 example if you have a dynamic IP address with your ISP, and
                 you are using some variety of dynamic DNS solution. Since
                 <code>*</code> matches any IP address, this configuration
                 would work without changes whenever your IP address
                 changes.</p>
          </div>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="twoips" id="twoips">Name-based hosts on more than one
          IP address.</a></h2>
      
          <div class="note">
            <h3>Note</h3>
            <p>Any of the techniques discussed here can be extended to any
            number of IP addresses.</p>
          </div>
      
          <p>The server has two IP addresses. On one (<code>172.20.30.40</code>), we
          will serve the "main" server, <code>server.example.com</code> and on the
          other (<code>172.20.30.50</code>), we will serve two or more virtual hosts.</p>
      
          <pre class="prettyprint lang-config">Listen 80
      
      # This is the "main" server running on 172.20.30.40
      ServerName server.example.com
      DocumentRoot "/www/mainserver"
      
      &lt;VirtualHost 172.20.30.50&gt;
          DocumentRoot "/www/example1"
          ServerName www.example.com
      
          # Other directives here ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.50&gt;
          DocumentRoot "/www/example2"
          ServerName www.example.org
      
          # Other directives here ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Any request to an address other than <code>172.20.30.50</code> will be
          served from the main server. A request to <code>172.20.30.50</code> with an
          unknown hostname, or no <code>Host:</code> header, will be served from
          <code>www.example.com</code>.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="intraextra" id="intraextra">Serving the same content on
          different IP addresses (such as an internal and external
          address).</a></h2>
      
          <p>The server machine has two IP addresses (<code>192.168.1.1</code>
          and <code>172.20.30.40</code>). The machine is sitting between an
          internal (intranet) network and an external (internet) network. Outside
          of the network, the name <code>server.example.com</code> resolves to
          the external address (<code>172.20.30.40</code>), but inside the
          network, that same name resolves to the internal address
          (<code>192.168.1.1</code>).</p>
      
          <p>The server can be made to respond to internal and external requests
          with the same content, with just one <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> section.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost 192.168.1.1 172.20.30.40&gt;
          DocumentRoot "/www/server1"
          ServerName server.example.com
          ServerAlias server
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Now requests from both networks will be served from the same
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>.</p>
      
          <div class="note">
                <h3>Note:</h3><p>On the internal
                network, one can just use the name <code>server</code> rather
                than the fully qualified host name
                <code>server.example.com</code>.</p>
      
                <p>Note also that, in the above example, you can replace the list
                of IP addresses with <code>*</code>, which will cause the server to
                respond the same on all addresses.</p>
          </div>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="port" id="port">Running different sites on different
          ports.</a></h2>
      
          <p>You have multiple domains going to the same IP and also want to
          serve multiple ports.  The example below illustrates that the name-matching
          takes place after the best matching IP address and port combination
          is determined.</p>
      
          <pre class="prettyprint lang-config">Listen 80
      Listen 8080
      
      &lt;VirtualHost 172.20.30.40:80&gt;
          ServerName www.example.com
          DocumentRoot "/www/domain-80"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40:8080&gt;
          ServerName www.example.com
          DocumentRoot "/www/domain-8080"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40:80&gt;
          ServerName www.example.org
          DocumentRoot "/www/otherdomain-80"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40:8080&gt;
          ServerName www.example.org
          DocumentRoot "/www/otherdomain-8080"
      &lt;/VirtualHost&gt;</pre>
      
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ip" id="ip">IP-based virtual hosting</a></h2>
      
          <p>The server has two IP addresses (<code>172.20.30.40</code> and
          <code>172.20.30.50</code>) which resolve to the names
          <code>www.example.com</code> and <code>www.example.org</code>
          respectively.</p>
      
          <pre class="prettyprint lang-config">Listen 80
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/www/example1"
          ServerName www.example.com
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.50&gt;
          DocumentRoot "/www/example2"
          ServerName www.example.org
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Requests for any address not specified in one of the
          <code>&lt;VirtualHost&gt;</code> directives (such as
          <code>localhost</code>, for example) will go to the main server, if
          there is one.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ipport" id="ipport">Mixed port-based and ip-based virtual
        hosts</a></h2>
      
          <p>The server machine has two IP addresses (<code>172.20.30.40</code> and
          <code>172.20.30.50</code>) which resolve to the names
          <code>www.example.com</code> and <code>www.example.org</code>
          respectively. In each case, we want to run hosts on ports 80 and
          8080.</p>
      
          <pre class="prettyprint lang-config">Listen 172.20.30.40:80
      Listen 172.20.30.40:8080
      Listen 172.20.30.50:80
      Listen 172.20.30.50:8080
      
      &lt;VirtualHost 172.20.30.40:80&gt;
          DocumentRoot "/www/example1-80"
          ServerName www.example.com
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40:8080&gt;
          DocumentRoot "/www/example1-8080"
          ServerName www.example.com
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.50:80&gt;
          DocumentRoot "/www/example2-80"
          ServerName www.example.org
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.50:8080&gt;
          DocumentRoot "/www/example2-8080"
          ServerName www.example.org
      &lt;/VirtualHost&gt;</pre>
      
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mixed" id="mixed">Mixed name-based and IP-based
          vhosts</a></h2>
      
          <p>Any address mentioned in the argument to a virtualhost that never
          appears in another virtual host is a strictly IP-based virtual host.</p>
      
          <pre class="prettyprint lang-config">Listen 80
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/www/example1"
          ServerName www.example.com
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/www/example2"
          ServerName www.example.org
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/www/example3"
          ServerName www.example.net
      &lt;/VirtualHost&gt;
      
      # IP-based
      &lt;VirtualHost 172.20.30.50&gt;
          DocumentRoot "/www/example4"
          ServerName www.example.edu
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.60&gt;
          DocumentRoot "/www/example5"
          ServerName www.example.gov
      &lt;/VirtualHost&gt;</pre>
      
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="proxy" id="proxy">Using <code>Virtual_host</code> and
          mod_proxy together</a></h2>
      
          <p>The following example allows a front-end machine to proxy a
          virtual host through to a server running on another machine. In the
          example, a virtual host of the same name is configured on a machine
          at <code>192.168.111.2</code>. The <code class="directive"><a href="../mod/mod_proxy.html#proxypreservehost">ProxyPreserveHost
          On</a></code> directive is used so that the desired hostname is
          passed through, in case we are proxying multiple hostnames to a
          single machine.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost *:*&gt;
          ProxyPreserveHost On
          ProxyPass        "/" "http://192.168.111.2/"
          ProxyPassReverse "/" "http://192.168.111.2/"
          ServerName hostname.example.com
      &lt;/VirtualHost&gt;</pre>
      
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="default" id="default">Using <code>_default_</code>
          vhosts</a></h2>
      
          <h3><a name="defaultallports" id="defaultallports"><code>_default_</code> vhosts
          for all ports</a></h3>
      
          <p>Catching <em>every</em> request to any unspecified IP address and
          port, <em>i.e.</em>, an address/port combination that is not used for
          any other virtual host.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost _default_:*&gt;
          DocumentRoot "/www/default"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Using such a default vhost with a wildcard port effectively prevents
          any request going to the main server.</p>
      
          <p>A default vhost never serves a request that was sent to an
          address/port that is used for name-based vhosts. If the request
          contained an unknown or no <code>Host:</code> header it is always
          served from the primary name-based vhost (the vhost for that
          address/port appearing first in the configuration file).</p>
      
          <p>You can use <code class="directive"><a href="../mod/mod_alias.html#aliasmatch">AliasMatch</a></code> or
          <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> to rewrite any
          request to a single information page (or script).</p>
          
      
          <h3><a name="defaultdifferentports" id="defaultdifferentports"><code>_default_</code> vhosts
          for different ports</a></h3>
      
          <p>Same as setup 1, but the server listens on several ports and we want
          to use a second <code>_default_</code> vhost for port 80.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost _default_:80&gt;
          DocumentRoot "/www/default80"
          # ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost _default_:*&gt;
          DocumentRoot "/www/default"
          # ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>The default vhost for port 80 (which <em>must</em> appear before any
          default vhost with a wildcard port) catches all requests that were sent
          to an unspecified IP address. The main server is never used to serve a
          request.</p>
          
      
          <h3><a name="defaultoneport" id="defaultoneport"><code>_default_</code> vhosts
          for one port</a></h3>
      
          <p>We want to have a default vhost for port 80, but no other default
          vhosts.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost _default_:80&gt;
          DocumentRoot "/www/default"
      ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>A request to an unspecified address on port 80 is served from the
          default vhost. Any other request to an unspecified address and port is
          served from the main server.</p>
      
          <p>Any use of <code>*</code> in a virtual host declaration will have
          higher precedence than <code>_default_</code>.</p>
      
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="migrate" id="migrate">Migrating a name-based vhost to an
          IP-based vhost</a></h2>
      
          <p>The name-based vhost with the hostname
          <code>www.example.org</code> (from our <a href="#name">name-based</a> example, setup 2) should get its own IP
          address. To avoid problems with name servers or proxies who cached the
          old IP address for the name-based vhost we want to provide both
          variants during a migration phase.</p>
      
          <p>
           The solution is easy, because we can simply add the new IP address
          (<code>172.20.30.50</code>) to the <code>VirtualHost</code>
          directive.</p>
      
          <pre class="prettyprint lang-config">Listen 80
      ServerName www.example.com
      DocumentRoot "/www/example1"
      
      &lt;VirtualHost 172.20.30.40 172.20.30.50&gt;
          DocumentRoot "/www/example2"
          ServerName www.example.org
          # ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/www/example3"
          ServerName www.example.net
          ServerAlias *.example.net
          # ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>The vhost can now be accessed through the new address (as an
          IP-based vhost) and through the old address (as a name-based
          vhost).</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="serverpath" id="serverpath">Using the <code>ServerPath</code>
        directive</a></h2>
      
          <p>We have a server with two name-based vhosts. In order to match the
          correct virtual host a client must send the correct <code>Host:</code>
          header. Old HTTP/1.0 clients do not send such a header and Apache has
          no clue what vhost the client tried to reach (and serves the request
          from the primary vhost). To provide as much backward compatibility as
          possible we create a primary vhost which returns a single page
          containing links with an URL prefix to the name-based virtual
          hosts.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost 172.20.30.40&gt;
          # primary vhost
          DocumentRoot "/www/subdomain"
          RewriteEngine On
          RewriteRule "." "/www/subdomain/index.html"
          # ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/www/subdomain/sub1"
          ServerName www.sub1.domain.tld
          ServerPath "/sub1/"
          RewriteEngine On
          RewriteRule "^(/sub1/.*)" "/www/subdomain$1"
          # ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/www/subdomain/sub2"
          ServerName www.sub2.domain.tld
          ServerPath "/sub2/"
          RewriteEngine On
          RewriteRule "^(/sub2/.*)" "/www/subdomain$1"
          # ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Due to the <code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code>
          directive a request to the URL
          <code>http://www.sub1.domain.tld/sub1/</code> is <em>always</em> served
          from the sub1-vhost.<br /> A request to the URL
          <code>http://www.sub1.domain.tld/</code> is only
          served from the sub1-vhost if the client sent a correct
          <code>Host:</code> header. If no <code>Host:</code> header is sent the
          client gets the information page from the primary host.</p>
      
          <p>Please note that there is one oddity: A request to
          <code>http://www.sub2.domain.tld/sub1/</code> is also served from the
          sub1-vhost if the client sent no <code>Host:</code> header.</p>
      
          <p>The <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> directives
          are used to make sure that a client which sent a correct
          <code>Host:</code> header can use both URL variants, <em>i.e.</em>,
          with or without URL prefix.</p>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/vhosts/examples.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/examples.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/examples.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/examples.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/examples.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/examples.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/name-based.html�����������������������������������������������������0000644�0000000�0000050�00000001103�13362070302�017640� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: name-based.html.de
      Content-Language: de
      Content-type: text/html; charset=ISO-8859-1
      
      URI: name-based.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: name-based.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: name-based.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: name-based.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: name-based.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/fd-limits.html.fr.utf8����������������������������������������������0000644�0000000�0000050�00000023363�13412755316�021056� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Limites des descripteurs de fichiers - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Serveurs Virtuels</a></div><div id="page-content"><div id="preamble"><h1>Limites des descripteurs de fichiers</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/vhosts/fd-limits.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/fd-limits.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/fd-limits.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/fd-limits.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/fd-limits.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Quand de nombreux serveurs virtuels sont créés, Apache peut
          dépasser les limites en descripteurs de fichiers ('file descriptors',
          également appelés <cite>gestionnaires de fichiers</cite>) si chacun
          des serveurs virtuels utilise ses propres fichiers journaux. Le
          nombre total de descripteurs de fichiers utilisés par Apache est
          d'un par fichier journal, un pour chacune des autres directives
          de fichiers journaux, plus un nombre constant compris entre 10 et 20
          pour son fonctionnement interne. Les systèmes d'exploitation Unix
          limitent le nombre de descripteurs de fichiers utilisables par
          processus&nbsp;; une valeur courante pour cette limite est de 64, et
          cette valeur peut le plus souvent être augmentée.</p>
      
          <p>Apache tente d'accroître cette valeur limite si nécessaire, mais
          sans y parvenir dans les cas suivants&nbsp;:</p>
      
          <ol>
            <li>Le système d'exploitation ne permet pas l'utilisation d'appels
            systèmes <code>setrlimit()</code>.</li>
      
            <li>L'appel <code>setrlimit(RLIMIT_NOFILE)</code> ne fonctionne pas
            sur votre système d'exploitation (c'est le cas sous Solaris 2.3).</li>
      
            <li>Le nombre de descripteurs de fichiers nécessaires à Apache
            dépasse la limite physique du matériel.</li>
      
            <li>Le système impose d'autres limites sur l'utilisation des
            descripteurs de fichiers, comme par exemple une limite sur les
            flux stdio, utilisables uniquement sur les descripteurs de
            fichiers inférieurs à 256. (sous Solaris 2).</li>
          </ol>
      
          <p>En cas de problème, Vous pouvez&nbsp;:</p>
      
          <ul>
            <li>Réduire le nombre de fichiers journaux, en ne spécifiant
            aucun fichier journal dans les sections
            <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>,
            en donc en envoyant les informations aux fichiers journaux du
            serveur principal (Voir <a href="#splitlogs">Éclatement des
            fichiers journaux</a> ci-dessous pour plus d'informations sur
            cette possibilité).</li>
      
            <li>
              Dans les cas 1 ou 2 (évoqués ci-dessus), augmentez la limite sur
              les descripteurs de fichiers avant le démarrage d'Apache, au
              moyen d'un script comme
      
              <div class="example"><p><code>
                <code>#!/bin/sh<br />
                 ulimit -S -n 100<br />
                 exec httpd</code>
              </code></p></div>
            </li>
          </ul>
      
      
      
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="splitlogs" id="splitlogs">Éclatement des fichiers journaux</a></h2>
      
      <p>Lorsque vous choisissez d'enregistrer les informations émanant de
      plusieurs serveurs virtuels dans un même fichier journal, vous voudrez
      ensuite pouvoir scinder ces informations à des fins de statistiques, par
      exemple, sur les différents serveurs virtuels. Il est possible de procéder
      de la manière suivante&nbsp;:</p>
      
      <p>Tout d'abord, vous devez ajouter le nom du serveur virtuel à chaque
      entrée du journal. Ceci se paramètre au moyen de la directive
      <code class="directive"><a href="../mod/mod_log_config.html#logformat"> LogFormat</a></code> et de la
      variable <code>%v</code>. Ajoutez cette variable au début de la chaîne
      de définition du format de journalisations&nbsp;:</p>
      
      <pre class="prettyprint lang-config">LogFormat "%v %h %l %u %t \"%r\" %&gt;s %b" vhost
      CustomLog logs/multiple_vhost_log vhost</pre>
      
      
      <p>Cette configuration va provoquer la création d'un fichier de
      journalisation au format standard (CLF&nbsp;: 'Common Log Format'), mais dont
      chaque ligne débutera par le nom canonique du serveur virtuel (spécifié
      par la directive <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>).
      (Voir <code class="module"><a href="../mod/mod_log_config.html">mod_log_config</a></code> pour d'autres informations sur la
      personnalisation des fichiers journaux.)</p>
      
      <p>Au moment de séparer les informations du fichier journal en un fichier
      par serveur virtuel, le programme <code>
      <a href="../programs/other.html">split-logfile</a></code> peut être
      utilisé. Ce programme peut être trouvé dans le répertoire
      <code>support</code> de la distribution d'Apache.</p>
      
      <p>Exécutez ce programme au moyen de la commande&nbsp;:</p>
      
      <div class="example"><p><code>
      split-logfile &lt; /logs/multiple_vhost_log
      </code></p></div>
      
      <p>Une fois exécuté avec le nom du fichier contenant tous les journaux,
      ce programme va générer un fichier pour chacun des serveurs virtuels
      qui apparaît dans le fichier d'entrée. Chaque fichier en sortie est
      nommé <code>nomduserveur.log</code>.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/vhosts/fd-limits.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/fd-limits.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/fd-limits.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/fd-limits.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/fd-limits.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/fd-limits.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/fd-limits.html������������������������������������������������������0000644�0000000�0000050�00000000744�13362070302�017546� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: fd-limits.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: fd-limits.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: fd-limits.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: fd-limits.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: fd-limits.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ����������������������������httpd-2.4.41/docs/manual/vhosts/index.html.zh-cn.utf8�����������������������������������������������0000644�0000000�0000050�00000016750�13412755316�020707� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="zh-cn" xml:lang="zh-cn"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache 虚拟主机文档 - Apache HTTP æœåС噍 版本 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">模å—</a> | <a href="../mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="../glossary.html">术语</a> | <a href="../sitemap.html">网站导航</a></p>
      <p class="apache">Apache HTTP æœåŠ¡å™¨ç‰ˆæœ¬ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP æœåС噍</a> &gt; <a href="http://httpd.apache.org/docs/">文档</a> &gt; <a href="../">版本 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache 虚拟主机文档</h1>
      <div class="toplang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="../de/vhosts/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/vhosts/" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">此翻译å¯èƒ½è¿‡æœŸã€‚è¦äº†è§£æœ€è¿‘的更改,请阅读英文版。</div>
      
      
          <p>术语<cite>虚拟主机</cite>指的是在å•一机器上è¿è¡Œå¤šä¸ªç½‘ç«™
          (例如 <code>company1.example.com</code> 和
          <code>company2.example.com</code>) 。
          虚拟主机å¯ä»¥â€œ<a href="ip-based.html">基于 IP</a>â€ï¼Œå³æ¯ä¸ª IP 一个站点;
          或者“<a href="name-based.html">基于åç§°</a>â€ï¼Œ
          峿¯ä¸ª IP 多个站点。这些站点è¿è¡Œåœ¨åŒä¸€ç‰©ç†æœåŠ¡å™¨ä¸Šçš„äº‹å®žä¸ä¼šæ˜Žæ˜¾çš„逿¼ç»™æœ€ç»ˆç”¨æˆ·ã€‚</p>
      
          <p>Apache 是第一个支æŒåŸºäºŽ IP 的虚拟主机的æœåŠ¡å™¨ã€‚
          Apache 版本 1.1 å’Œæ›´æ–°çš„ç‰ˆæœ¬åŒæ—¶æ”¯æŒåŸºäºŽ IP 和基于å称的虚拟主机。
          基于å称的虚拟主机有时候称为<em>基于主机</em>或<em>éž IP</em> 的虚拟主机.</p>
      
          <p>以下解释是在 Apache 中支æŒè™šæ‹Ÿä¸»æœºçš„æ‰€æœ‰è¯¦ç»†ä¿¡æ¯çš„æ–‡æ¡£é¡µé¢åˆ—表。</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#support">虚拟主机支æŒ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#directives">é…置指令</a></li>
      </ul><h3>å‚è§</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code></li><li><a href="name-based.html">基于å称的虚拟主机</a></li><li><a href="ip-based.html">基于 IP 的虚拟主机</a></li><li><a href="examples.html">虚拟主机样例</a></li><li><a href="fd-limits.html">æ–‡ä»¶å¥æŸ„é™åˆ¶</a></li><li><a href="mass.html">动æ€é…置的大规模虚拟主机</a></li><li><a href="details.html">虚拟主机匹é…的深入讨论</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="support" id="support">虚拟主机支æŒ</a></h2>
      
          <ul>
            <li><a href="name-based.html">基于å称的虚拟主机</a> (æ¯ä¸ª IP 多个站点)</li>
            <li><a href="ip-based.html">基于 IP 的虚拟主机</a> (æ¯ä¸ª IP 一个站点)</li>
            <li><a href="examples.html">虚拟主机样例</a></li>
            <li><a href="fd-limits.html">æ–‡ä»¶å¥æŸ„é™åˆ¶</a> (或者<em>日志文件太多</em>)</li>
            <li><a href="mass.html">动æ€é…置的大规模虚拟主机</a></li>
            <li><a href="details.html">虚拟主机匹é…的深入讨论</a></li>
          </ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="directives" id="directives">é…置指令</a></h2>
      
          <ul>
            <li><code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code></li>
          </ul>
      
          <p>如果你è¦è°ƒè¯•虚拟主机é…置,你会å‘现 Apache çš„å‘½ä»¤è¡Œå‚æ•° <code>-S</code>
          éžå¸¸æœ‰ç”¨ã€‚å³è¾“入以下命令:</p>
      
          <div class="example"><p><code>
          /usr/local/apache2/bin/httpd -S
          </code></p></div>
      
          <p>这个命令将会显示 Apache 是如何解æžé…置文件的。仔细检查 IP
          地å€ä¸ŽæœåС噍åç§°å¯èƒ½ä¼šå¸®åЩ你å‘现é…置错误
          (å‚è§ <code class="program"><a href="../programs/httpd.html">httpd</a></code> ç¨‹åºæ–‡æ¡£ï¼Œä»¥ä¾¿äº†è§£å…¶å®ƒå‘½ä»¤è¡Œé€‰é¡¹)。</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="../de/vhosts/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/vhosts/" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />基于 <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> 许å¯è¯.</p>
      <p class="menu"><a href="../mod/">模å—</a> | <a href="../mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="../glossary.html">术语</a> | <a href="../sitemap.html">网站导航</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������httpd-2.4.41/docs/manual/vhosts/details.html.fr.utf8������������������������������������������������0000644�0000000�0000050�00000051666�13412755316�020622� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Détails sur le fonctionnement des serveurs virtuels - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Serveurs virtuels</a></div><div id="page-content"><div id="preamble"><h1>Détails sur le fonctionnement des serveurs virtuels</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/vhosts/details.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/details.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/details.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/details.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Ce document vise à expliquer dans le détail comment le serveur
          HTTP Apache procède lors du choix de l'utilisation
          d'un serveur virtuel en fonction d'une requête reçue.</p>
      
          <p>Il est recommandé de lire la documentation<a href="name-based.html#namevip">
          Serveurs virtuels à base de nom et serveurs virtuels à base
          d'adresse IP</a> pour déterminer quel type de serveur virtuel nous
          convient le mieux, puis de lire les documentations <a href="name-based.html">serveurs virtuels à base de nom</a> ou <a href="ip-based.html">serveurs virtuels à base d'adresse IP</a>, et enfin
          d'étudier <a href="examples.html">quelques exemples</a>.</p>
      
          <p>Si vous voulez entrer dans les détails, vous pouvez revenir vers
          cette page.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#configparsing">Fichier de configuration</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#hostmatching">Choix du serveur virtuel</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#tips">Trucs et astuces</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="ip-based.html">Support des serveurs virtuels à base
      d'adresse IP</a></li><li><a href="name-based.html">Support des serveurs virtuels à base
      de nom</a></li><li><a href="examples.html">Exemples de serveurs virtuels pour une
      configuration courante</a></li><li><a href="mass.html">Hébergement virtuel de masse configuré
      dynamiquement</a></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configparsing" id="configparsing">Fichier de configuration</a></h2>
      
          <p>Un <em>serveur  principal (main_server)</em> contient toutes
          les définitions qui apparaissent en dehors des sections
          <code>&lt;VirtualHost&gt;</code>.</p>
      
          <p>Les serveurs virtuels, aussi
          appelés <em>vhosts</em> (pour virtual hosts), sont définis par les
          sections <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>.</p>
      
          <p>Chaque directive <code>VirtualHost</code> comporte une ou
          plusieurs adresses et des ports optionnels.</p>
      
          <p>Il est possible d'utiliser des noms d'hôtes dans la définition
          d'un serveur virtuel, mais ils seront résolus en adresses IP au
          démarrage du serveur, et si une résolution de nom échoue, cette
          définition de serveur virtuel sera ignorée. Cette méthode est par
          conséquent déconseillée.</p>
      
          <p>L'adresse peut
          être spécifiée sous la forme <code>*</code>, ce qui conviendra à la
          requête si aucun autre serveur virtuel ne possède l'adresse IP
          explicite correspondant à celle de la requête.</p>
      
          <p>L'adresse qui apparaît dans la directive <code>VirtualHost</code>
          peut être associée à un port optionnel. Si aucun port n'est
          spécifié, il s'agit d'un port générique qui peut aussi être spécifié
          comme <code>*</code>. Le port générique correspond à toutes les
          valeurs de port.</p>
      
          <p>(Il ne faut pas confondre les numéros de port sur lesquels Apache
          est en écoute avec les numéros de port spécifiés dans la directive
          <code>VirtualHost</code> ; ces derniers ne servent qu'à définir le
          <code>serveur virtuel</code> qui sera sélectionné pour traiter la
          requête. Pour définir les ports sur lesquels Apache est en écoute,
          utilisez la directive <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code>).
          </p>
      
          <p>L'ensemble des adresses (y compris les résultats multiples
          <code>A</code> issus des requêtes DNS) est appelé <em>jeu
          d'adresses</em> du serveur virtuel.</p>
      
          <p>Apache fait automatiquement sa sélection à partir de l'en-tête
          HTTP <code>Host</code> fourni par le client, lorsque la
          correspondance la plus exacte du point de vue adresse IP/port a lieu
          pour plusieurs serveurs virtuels.</p>
      
          <p>La directive <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> peut
          apparaître en quelque endroit de la définition d'un serveur.
          Cependant, chaque occurrence écrase la précédente (pour ce serveur).
          Si aucune directive <code>ServerName</code> n'est spécifiée, le
          serveur tente de déterminer le nom du serveur à partir de l'adresse
          IP.</p>
      
          <p>Le premier serveur virtuel à base de nom apparaissant dans le
          fichier de configuration pour une paire IP:port donnée est
          significatif car c'est lui qui sera utilisé pour toutes les requêtes
          reçues sur cette adresse IP/port et pour laquelle aucun autre
          serveur virtuel ne possède un ServerName ou un ServerAlias
          correspondant. Il sera aussi utilisé pour toutes les connexions SSL
          si le serveur ne supporte pas l'<a class="glossarylink" href="../glossary.html#servernameindication" title="voir glossaire">Indication du nom du serveur</a>.</p>
      
          <p>Tous les noms spécifiés au sein d'une section
          <code>VirtualHost</code> sont traités comme un
          <code>ServerAlias</code> (sans caractères génériques), mais ne sont
          écrasés par aucune directive <code>ServerAlias</code>.</p>
      
          <p>Pour chaque serveur virtuel, diverses valeurs sont initialisées
          par défaut. En particulier&nbsp;:</p>
      
          <ol>
            <li>Dans le cas où un serveur virtuel ne contient pas de directives
            <code class="directive"><a href="../mod/core.html#serveradmin">ServerAdmin</a></code>,
            <code class="directive"><a href="../mod/core.html#timeout">Timeout</a></code>,
            <code class="directive"><a href="../mod/core.html#keepalivetimeout">KeepAliveTimeout</a></code>,
            <code class="directive"><a href="../mod/core.html#keepalive">KeepAlive</a></code>,
            <code class="directive"><a href="../mod/core.html#maxkeepaliverequests">MaxKeepAliveRequests</a></code>,
            <code class="directive"><a href="../mod/mpm_common.html#receivebuffersize">ReceiveBufferSize</a></code>,
            ou <code class="directive"><a href="../mod/mpm_common.html#sendbuffersize">SendBufferSize</a></code>,
            alors la valeur de chacun de ces paramètres est héritée de celle du
            serveur principal. (C'est à dire, héritée de la valeur finale après
            lecture de la configuration du serveur principal.)</li>
      
            <li>Les permissions par défaut sur les répertoires de chaque
            serveur virtuel sont assemblées avec celles du serveur principal.
            Elles concernent également toutes les informations de configuration
            par répertoire pour tous les modules.</li>
      
            <li>Les configurations par serveur pour chaque module sont assemblées
            à partir de celles du serveur principal.</li>
          </ol>
      
          <p>L'essentiel des valeurs de configuration des serveurs virtuels
          provient de valeurs par défaut issues du serveur principal.
          Mais la position dans le fichier de configuration des directives
          du serveur principal n'a pas d'importance -- l'ensemble de la
          configuration du serveur principal est lu avant que ces valeurs par
          défaut soient appliquées aux serveur virtuels. Ainsi, même si la
          définition d'une valeur apparaît après celle d'un serveur virtuel,
          cette valeur peut affecter la definition du serveur virtuel.</p>
      
          <p>Dans le cas où le serveur principal n'a pas de <code>ServerName</code>
          à ce stade, le nom de la machine sur laquelle tourne le programme
          <code class="program"><a href="../programs/httpd.html">httpd</a></code> est utilisé à sa place. Nous appellerons
          <em>jeu d'adresses du serveur principal</em> les adresses IP
          renvoyées par une résolution DNS sur le <code>ServerName</code>
          du serveur principal.</p>
      
          <p>Pour tous les champs <code>ServerName</code> non définis, dans
          le cas d'une configuration en serveur virtuel par nom, la valeur
          adoptée par défaut est la première adresse donnée dans la section
          <code>VirtualHost</code> qui définit le serveur virtuel.</p>
      
          <p>Si un serveur virtuel contient la valeur magique
          <code>_default_</code>, il fonctionne sur le même <code>ServerName</code>
          que le serveur principal.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="hostmatching" id="hostmatching">Choix du serveur virtuel</a></h2>
      
          <p>À la réception d'une requête, le serveur procède comme suit pour
          déterminer quel serveur virtuel utiliser&nbsp;:</p>
      
          <h3><a name="hashtable" id="hashtable">Recherche de l'adresse IP</a></h3>
      
          <p>Lors d'une première connexion sur une adresse/port, le serveur
          recherche toutes les directives <code>VirtualHost</code> qui
          possèdent la même adresse IP/port.</p>
      
          <p>S'il n'y a aucune correspondance exacte pour cette adresse/port,
          la recherche s'effectue sur la valeur générique (<code>*</code>).</p>
      
          <p>Si aucune correspondance n'est enfin trouvée, la requête sera
          servie par le serveur principal.</p>
      
          <p>S'il existe des définitions <code>VirtualHost</code> pour
          l'adresse IP, l'étape suivante consiste à déterminer si nous avons à
          faire à un serveur virtuel à base de nom ou d'adresse IP.</p>
      
          
      
          <h3><a name="ipbased" id="ipbased">Serveur virtuel par IP</a></h3>
      
          <p>Si une seule section <code>VirtualHost</code> présente la
          meilleure correspondance avec la paire adresse IP/port, aucune
          action n'est entreprise et la requête est
          traitée par le serveur virtuel qui correspond.</p>
      
          
      
          <h3><a name="namebased" id="namebased">Serveur virtuel par nom</a></h3>
      
          <p>Si plusieurs sections <code>VirtualHost</code> présentent la
          meilleure correspondance avec la paire adresse IP/port, le terme
          "liste" dans les étapes suivantes fait référence à la liste des
          serveurs virtuels qui correspondent, selon l'ordre dans lequel ils
          apparaissent dans le fichier de configuration.</p>
      
          <p>Si la connexion utilise SSL, si le serveur supporte l'<a class="glossarylink" href="../glossary.html#servernameindication" title="voir glossaire">Indication de nom de serveur</a>,
          et si la négociation du client SSL inclut l'extension TLS dans le
          nom d'hôte requis, alors ce nom d'hôte sera utilisé par la suite, tout
          comme un en-tête <code>Host:</code> aurait été utilisé dans le cas
          d'une connexion non-SSL. Si ces conditions ne sont pas réunies, le
          premier serveur virtuel à base de nom dont l'adresse correspond sera
          utilisé pour les connexions SSL. Ceci est important car c'est le
          serveur virtuel qui détermine quel certificat le serveur va utiliser
          pour la connexion.</p>
      
          <p>Si la requête contient un en-tête <code>Host:</code>, on
          recherche dans la liste le premier serveur virtuel dont le
          <code>ServerName</code> ou le <code>ServerAlias</code> correspond,
          et c'est celui-ci qui va traiter la requête. Un en-tête
          <code>Host:</code> peut comporter un numéro de port mais Apache
          l'ignore systématiquement et utilise toujours le
          port sur lequel il a effectivement reçu la requête.</p>
      
          <p>Le premier serveur virtuel du fichier de configuration qui
          possède l'adresse spécifiée est prioritaire et intercepte toutes les
          requêtes à destination d'un nom de serveur inconnu, ou toute requête
          sans en-tête <code>Host:</code> (comme les requêtes HTTP/1.0).</p>
      
          
      
          <h3><a name="persistent" id="persistent">Connexions persistantes</a></h3>
      
          <p>La <em>recherche par adresse IP</em> décrite ci-avant n'est faite
          qu'<em>une fois</em> pour chaque session TCP/IP, alors que la
          <em>recherche par nom</em> est réalisée pour <em>chaque</em> requête au
          cours d'une connexion persistante (KeepAlive). En d'autres termes,
          il est possible pour un client de faire des requêtes sur
          différents serveurs virtuels par nom, au cours d'une unique
          connexion persistante.</p>
      
          
      
          <h3><a name="absoluteURI" id="absoluteURI">URI absolu</a></h3>
      
          <p>Au cas où l'URI de la requête est absolu, et que son nom de
          serveur et son port correspondent au serveur principal (ou l'un
          des serveurs virtuels configurés), <em>et</em> qu'ils correspondent
          à l'adresse et au port de la requête, alors l'URI est amputé
          de son préfixe protocole/nom de serveur/port et traité par le
          serveur correspondant (principal ou virtuel). Si cette correspondance
          n'existe pas, l'URI reste inchangé et la requête est considérée
          comme une requête d'un serveur mandataire (proxy).</p>
      
      
      <h3><a name="observations" id="observations">Observations</a></h3>
      
          <ul>
            <li>La sélection d'un serveur virtuel en fonction de son nom est
            un processus qui intervient après la sélection par le serveur du
            serveur virtuel qui correspond le mieux du point de vue adresse
            IP/port.</li>
      
            <li>Si vous ne tenez pas compte de l'adresse IP à laquelle le
            client s'est connecté, indiquez un caractère "*" comme adresse
            pour tous les serveurs virtuels, et la sélection du serveur
            virtuel en fonction du nom s'appliquera alors à tous les serveurs
            virtuels définis.</li>
      
            <li>Les vérifications sur <code>ServerName</code> et
            <code>ServerAlias</code> ne sont jamais
            réalisées pour les serveurs virtuels par IP.</li>
      
            <li>Seul l'ordre des serveurs virtuels par nom
            pour une adresse donnée a une importance. Le serveur virtuel
            par nom qui est présent en premier dans la configuration se
            voit attribué la priorité la plus haute pour les requêtes
            arrivant sur son jeu d'adresses IP.</li>
      
            <li>Le numéro de port contenu dans l'en-tête <code>Host:</code> n'est jamais utilisé
            pour les tests de correspondances. Apache ne prend en compte
            que le numéro de port sur lequel le client a envoyé la requête.</li>
      
            <li>Si deux serveurs virtuels partagent la même adresse, la
            sélection se fera implicitement sur le nom. Il s'agit d'une
            nouvelle fonctionnalité de la version 2.3.11.</li>
      
            <li>Le serveur principal ne sert les requêtes que
            lorsque l'adresse IP et le port demandés par le client ne
            correspondent à aucun serveur virtuel (y compris un serveur
            virtuel <code>*</code>). En d'autres termes, le serveur
            principal n'est utile que pour les combinaisons adresse/port
            non spécifiées (sauf quand un serveur virtuel <code>_default_</code>
            correspond au port).</li>
      
            <li>Il ne faut jamais employer de noms DNS dans des directives
            <code>VirtualHost</code>, car cela oblige le serveur a s'appuyer
            sur le DNS au moment du démarrage. De plus, vous vous exposez
            à des problèmes de sécurité si vous n'avez pas la maîtrise du
            DNS pour la totalité de vos domaines. Voir la documentation
            <a href="../dns-caveats.html">disponible ici</a>, ainsi que
            les deux points précisés ci-après.</li>
      
            <li>Un nom de serveur <code>ServerName</code> devrait toujours
            être indiqué pour chaque serveur virtuel. Sans cela, une
            résolution DNS est nécessaire pour chaque serveur virtuel.</li>
            </ul>
            
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="tips" id="tips">Trucs et astuces</a></h2>
      
          <p>En plus des points évoqués sur la page des
          <a href="../dns-caveats.html#tips">problèmes liés au DNS</a>,
          voici quelques points intéressants&nbsp;:</p>
      
          <ul>
            <li>Toujours positionner les définitions relatives au serveur
            principal avant toute définition <code>VirtualHost</code>.
            (Ceci améliore grandement la lisibilité de la configuration
            -- la manière dont la configuration est interprétée après la
            lecture des fichiers ne met pas en évidence le fait que les
            définitions positionnées avant et surtout après les serveurs
            virtuels peuvent impacter le fonctionnement de tous les
            serveurs virtuels.)</li>
      
         </ul>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/vhosts/details.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/details.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/details.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/details.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/details.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/details.html��������������������������������������������������������0000644�0000000�0000050�00000000603�13362070302�017275� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: details.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: details.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: details.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: details.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �����������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/mass.html.ko.euc-kr�������������������������������������������������0000644�0000000�0000050�00000051147�13412755316�020434� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>´ë·®ÀÇ °¡»óÈ£½ºÆ®¸¦ µ¿ÀûÀ¸·Î ¼³Á¤Çϱâ - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">°¡»óÈ£½ºÆ®</a></div><div id="page-content"><div id="preamble"><h1>´ë·®ÀÇ °¡»óÈ£½ºÆ®¸¦ µ¿ÀûÀ¸·Î ¼³Á¤Çϱâ</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/vhosts/mass.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/mass.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/mass.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/mass.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      
          <p>ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡ 1.3¿¡¼­ ´ë·®ÀÇ °¡»óÈ£½ºÆ®¸¦ È¿À²ÀûÀ¸·Î
          ¼­ºñ½ºÇÏ´Â ¹æ¹ýÀ» ¼³¸íÇÑ´Ù. 
          </p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#motivation">µ¿±â</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#overview">°³¿ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#simple">°£´ÜÇÑ µ¿Àû °¡»óÈ£½ºÆ®</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#homepages">°¡»óÀ¸·Î È£½ºÆ®Çϴ ȨÆäÀÌÁö ½Ã½ºÅÛ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#combinations">ÇÑ ¼­¹ö¿¡ ¿©·¯ °¡»óÈ£½ºÆ®
          ½Ã½ºÅÛ »ç¿ëÇϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ipbased">´õ È¿À²ÀûÀÎ IP±â¹Ý °¡»óÈ£½ºÆ®</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#oldversion">¾ÆÆÄÄ¡ ÀÌÀü ¹öÀü »ç¿ëÇϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#simple.rewrite"><code>mod_rewrite</code>¸¦
          »ç¿ëÇÑ °£´ÜÇÑ µ¿Àû °¡»óÈ£½ºÆ®</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#homepages.rewrite"><code>mod_rewrite</code>¸¦
          »ç¿ëÇÑ È¨ÆäÀÌÁö ½Ã½ºÅÛ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#xtra-conf">º°µµÀÇ °¡»óÈ£½ºÆ® ¼³Á¤ÆÄÀÏ
          »ç¿ëÇϱâ</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="motivation" id="motivation">µ¿±â</a></h2>
      
          <p>´ç½ÅÀÇ <code>httpd.conf</code>¿¡ ´ÙÀ½°ú °°ÀÌ ¼­·Î ºñ½ÁÇÑ
          <code>&lt;VirtualHost&gt;</code> ¼½¼ÇµéÀ» ¸¹ÀÌ ÀÖ´Ù¸é ¿©±â¼­
          ¼³¸íÇÏ´Â ¹æ¹ýÀÌ µµ¿òÀÌ µÉ °ÍÀÌ´Ù:</p>
      
      <div class="example"><p><code>
      NameVirtualHost 111.22.33.44<br />
      &lt;VirtualHost 111.22.33.44&gt;<br />
      <span class="indent">
          ServerName                 www.customer-1.com<br />
          DocumentRoot        /www/hosts/www.customer-1.com/docs<br />
          ScriptAlias  /cgi-bin/  /www/hosts/www.customer-1.com/cgi-bin<br />
      </span>
      &lt;/VirtualHost&gt;<br />
      &lt;VirtualHost 111.22.33.44&gt;<br />
      <span class="indent">
          ServerName                 www.customer-2.com<br />
          DocumentRoot        /www/hosts/www.customer-2.com/docs<br />
          ScriptAlias  /cgi-bin/  /www/hosts/www.customer-2.com/cgi-bin<br />
      </span>
      &lt;/VirtualHost&gt;<br />
      # ¹Ùº¸ ¹Ùº¸ ¹Ùº¸<br />
      &lt;VirtualHost 111.22.33.44&gt;<br />
      <span class="indent">
          ServerName                 www.customer-N.com<br />
          DocumentRoot        /www/hosts/www.customer-N.com/docs<br />
          ScriptAlias  /cgi-bin/  /www/hosts/www.customer-N.com/cgi-bin<br />
      </span>
      &lt;/VirtualHost&gt;
      </code></p></div>
      
          <p>±âº» °³³äÀº Á¤ÀûÀÎ <code>&lt;VirtualHost&gt;</code>
          ¼³Á¤ ¸ðµÎ¸¦ µ¿ÀûÀ¸·Î ó¸®Çϵµ·Ï ´ëüÇÏ´Â °ÍÀÌ´Ù.
          ±×·¯¸é ¸¹Àº ÀåÁ¡ÀÌ ÀÖ´Ù:</p>
      
          <ol>
            <li>¼³Á¤ÆÄÀÏÀÌ ÀÛ¾ÆÁ®¼­ ¾ÆÆÄÄ¡°¡ »¡¸® ½ÃÀÛÇÏ°í ¸Þ¸ð¸®¸¦
            Àû°Ô »ç¿ëÇÑ´Ù.</li>
      
            <li>°¡»óÈ£½ºÆ®¸¦ Ãß°¡ÇϱâÀ§ÇØ ÆÄÀϽýºÅÛ¿¡ Àû´çÇÑ
            µð·ºÅ丮¸¦ ¸¸µé°í DNS¿¡ Ç׸ñÀ» Ãß°¡Çϱ⸸ ÇϸéµÈ´Ù. Áï,
            ¾ÆÆÄÄ¡¸¦ Àç¼³Á¤Çϰí Àç½ÃÀÛÇÒ Çʿ䰡 ¾ø´Ù.</li>
          </ol>
      
          <p>´ÜÁ¡Àº °¢ °¡»óÈ£½ºÆ®º°·Î ´Ù¸¥ ·Î±×ÆÄÀÏÀ» »ç¿ëÇÒ ¼ö ¾ø´Ù´Â
          Á¡ÀÌ´Ù. ±×·¯³ª ¸Å¿ì ¸¹Àº °¡»óÈ£½ºÆ®¸¦ »ç¿ëÇÑ´Ù¸é ÆÄÀϱâ¼úÀÚ¸¦
          ´Ù ½á¹ö¸®±â¶§¹®¿¡ ¼­·Î ´Ù¸¥ ·Î±×ÆÄÀÏÀ» »ç¿ëÇÒ ¼ö ¾ø´Ù. ÆÄÀÌÇÁ³ª
          fifo·Î ·Î±×¸¦ º¸³»°í, ¹Þ´Â Æí¿¡¼­ ·Î±×¸¦ ó¸®ÇÏ¿© ³ª´©´Â
          ¹æ¹ýÀÌ (Åë°è µîÀ» ¸ðÀ» ¼öµµ ÀÖ´Ù) ´õ ³´´Ù.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">°³¿ä</a></h2>
      
          <p>°¡»óÈ£½ºÆ®´Â IP ÁÖ¼Ò¿Í HTTP ¿äûÀÇ <code>Host:</code>
          Çì´õ Á¤º¸·Î Á¤ÀÇÇÑ´Ù. ±âº»ÀûÀ¸·Î ´ë·®ÀÇ
          µ¿Àû °¡»óÈ£½ºÆ® ±â¼úÀº ÀÚµ¿À¸·Î °¡»óÈ£½ºÆ® Á¤º¸¸¦ ¿äûÀÇ
          ÆÄÀϰæ·Î¿¡ Æ÷ÇÔÇÑ´Ù. ÀÌ´Â ´ëºÎºÐ <code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code>¸¦
          »ç¿ëÇÏ¿© ½±°Ô ÇØ°áÇÒ ¼ö ÀÖÁö¸¸, ¾ÆÆÄÄ¡ 1.3.6 ÀÌÇϸ¦ »ç¿ëÇÑ´Ù¸é
          <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>¸¦ »ç¿ëÇØ¾ß ÇÑ´Ù. ÀÌ µÎ ¸ðµâ
          ¸ðµÎ ±âº»ÀûÀ¸·Î ¼­¹ö¿¡ Æ÷ÇÔµÇÁö ¾Ê´Â´Ù. ÀÌ ¹æ¹ýÀ» »ç¿ëÇÏ·Á¸é
          ¾ÆÆÄÄ¡¸¦ ±¸¼ºÇϰí ÄÄÆÄÀÏÇÒ¶§ Æ÷ÇÔÇØ¾ß ÇÑ´Ù.</p>
      
          <p>µ¿Àû °¡»óÈ£½ºÆ®¸¦ ÀϹÝÀûÀÎ °¡»óÈ£½ºÆ®Ã³·³ º¸À̰ÔÇÏ·Á¸é
          ¿©·¯°¡Áö¸¦ `¼Ó¿©¾ß' ÇÑ´Ù. °¡Àå Áß¿äÇÑ °ÍÀº ¾ÆÆÄÄ¡°¡ ÀÚ±âÂüÁ¶
          URL µîÀ» ¸¸µé¶§ »ç¿ëÇÒ ¼­¹ö¸íÀÌ´Ù. ¼­¹ö¸íÀº
          <code>ServerName</code> Áö½Ã¾î·Î ¼³Á¤Çϸç, CGI¿¡´Â
          <code>SERVER_NAME</code> ȯ°æº¯¼ö·Î ÁÖ¾îÁø´Ù.  ½ÇÇàÁß ½ÇÁ¦
          ¼­¹ö¸íÀº <code class="directive"><a href="../mod/core.html#usecanonicalname">UseCanonicalName</a></code> ¼³Á¤¿¡ ´Þ·È´Ù.
          <code>UseCanonicalName Off</code>ÀÌ¸é ¿äûÀÇ <code>Host:</code>
          Çì´õ ³»¿ëÀÌ ¼­¹ö¸íÀÌ µÈ´Ù. <code>UseCanonicalName DNS</code>À̸é
          °¡»óÈ£½ºÆ®ÀÇ IP ÁÖ¼Ò¸¦ ¿ªDNS °Ë»öÇÏ¿© ¼­¹ö¸íÀ» ¾Ë¾Æ³½´Ù.
          ÀüÀÚ´Â À̸§±â¹Ý µ¿Àû °¡»óÈ£½ºÆ®¿¡¼­ »ç¿ëÇϰí, ÈÄÀÚ´Â IP±â¹Ý
          °¡»óÈ£½ºÆ®¿¡¼­ »ç¿ëÇÑ´Ù. <code>Host:</code> Çì´õ°¡ ¾ø°Å³ª
          DNS °Ë»öÀÌ ½ÇÆÐÇÏ¿© ¾ÆÆÄÄ¡°¡ ¼­¹ö¸íÀ» ¾Ë¾Æ³»Áö ¸øÇϸé
          <code>ServerName</code>À¸·Î ¼³Á¤ÇÑ °ªÀ» ´ë½Å »ç¿ëÇÑ´Ù.</p>
      
          <p>´Ù¸¥ `¼ÓÀÏ' °ÍÀº (<code>DocumentRoot</code>·Î ¼³Á¤Çϸç,
          CGI¿¡´Â <code>DOCUMENT_ROOT</code> ȯ°æº¯¼ö·Î ÁÖ¾îÁö´Â)
          ¹®¼­·çÆ®ÀÌ´Ù. ÀϹÝÀûÀÎ °æ¿ì core ¸ðµâÀÌ ÀÌ ¼³Á¤À» »ç¿ëÇÏ¿©
          URI¿¡ ÇØ´çÇÏ´Â ÆÄÀϸíÀ» ãÁö¸¸, ¼­¹ö¸¦ µ¿Àû °¡»óÈ£½ºÆÃÀ» ÇÒ¶§´Â ´Ù¸¥
          ¸ðµâÀÌ (<code>mod_vhost_alias</code>³ª <code>mod_rewrite</code>)
          ´Ù¸¥ ¹æ¹ýÀ¸·Î ÀÌ·± ÀÛ¾÷À» ÇÑ´Ù. µÎ ¸ðµâ ¸ðµÎ
          <code>DOCUMENT_ROOT</code> ȯ°æº¯¼ö¸¦ »ç¿ëÇÏÁö ¾ÊÀ¸¹Ç·Î
          CGI³ª SSI ¹®¼­°¡ ÀÌ °ªÀ» »ç¿ëÇÑ´Ù¸é À߸øµÈ °á°ú¸¦ ¾òÀ» ¼ö
          ÀÖ´Ù.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="simple" id="simple">°£´ÜÇÑ µ¿Àû °¡»óÈ£½ºÆ®</a></h2>
      
          <p>À§ <a href="#motivation">µ¿±â</a> ÀýÀÇ °¡»óÈ£½ºÆ®
          ¼³Á¤À» <code>mod_vhost_alias</code>¸¦ »ç¿ëÇÏ¿© ´õ ÀϹÝÀûÀ¸·Î
          ±¸ÇöÇß´Ù.</p>
      
      <div class="example"><p><code>
      # Host: Çì´õ¿¡¼­ ¼­¹ö¸íÀ» ¾Ë¾Æ³½´Ù<br />
      UseCanonicalName Off<br />
      <br />
      # ù¹øÂ° Çʵ带 »ç¿ëÇÏ¿© ÀÌ ·Î±×¸¦ °¡»óÈ£½ºÆ®º°·Î ³ª´­ ¼ö ÀÖ´Ù<br />
      LogFormat "%V %h %l %u %t \"%r\" %s %b" vcommon<br />
      CustomLog logs/access_log vcommon<br />
      <br />
      # ¿äûÀ» ó¸®ÇϱâÀ§ÇØ ÆÄÀÏ¸í¿¡ ¼­¹ö¸íÀ» Æ÷ÇÔÇÑ´Ù<br />
      VirtualDocumentRoot /www/hosts/%0/docs<br />
      VirtualScriptAlias  /www/hosts/%0/cgi-bin
      </code></p></div>
      
          <p>ÀÌ ¼³Á¤¿¡¼­ <code>UseCanonicalName Off</code>¸¦
          <code>UseCanonicalName DNS</code>·Î º¯°æÇϱ⸸ Çϸé IP±â¹Ý
          °¡»óÈ£½ºÆ®°¡ µÈ´Ù. °¡»óÈ£½ºÆ®ÀÇ IP ÁÖ¼Ò¸¦ °¡Áö°í
          ÆÄÀÏ¸í¿¡ Ãß°¡ÇÒ ¼­¹ö¸íÀ» ¾Ë ¼ö ÀÖ´Ù.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="homepages" id="homepages">°¡»óÀ¸·Î È£½ºÆ®Çϴ ȨÆäÀÌÁö ½Ã½ºÅÛ</a></h2>
      
          <p>ISP ȨÆäÀÌÁö ¼­¹ö¸¦ À§ÇØ À§ÀÇ ¼³Á¤À» ¼öÁ¤Çß´Ù. Á¶±Ý ´õ
          º¹ÀâÇÑ ¼³Á¤À» »ç¿ëÇϸé <code>www.user.isp.com</code>ÀÇ ¹®¼­¸¦
          <code>/home/user/</code>¿¡ µÎ´Â ½ÄÀ¸·Î ¼­¹ö¸íÀÇ ÀϺθ¦ °¡Áö°í
          ÆÄÀϸíÀ» ¸¸µé ¼ö ÀÖ´Ù. ÀÌ ¼³Á¤Àº
          <code>cgi-bin</code>À» °¢ °¡»óÈ£½ºÆ®°¡ µû·Î °¡ÁöÁö¾Ê°í
          ¸ðµç °¡»óÈ£½ºÆ®°¡ °°ÀÌ »ç¿ëÇÑ´Ù.</p>
      
      <div class="example"><p><code>
      # ±âº»ÀûÀÎ ³»¿ëÀº À§¿Í °°´Ù. ±×¸®°í<br />
      <br />
      # ÆÄÀÏ¸í¿¡ ¼­¹ö¸íÀÇ ÀϺθ¦ Æ÷ÇÔÇÑ´Ù<br />
      VirtualDocumentRoot /www/hosts/%2/docs<br />
      <br />
      # ÇϳªÀÇ cgi-bin µð·ºÅ丮<br />
      ScriptAlias  /cgi-bin/  /www/std-cgi/<br />
      </code></p></div>
      
          <p><code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code> ¹®¼­¿¡´Â ´õ º¹ÀâÇÑ
          <code>VirtualDocumentRoot</code> ¼³Á¤ÀÇ ¿¹°¡ ÀÖ´Ù.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="combinations" id="combinations">ÇÑ ¼­¹ö¿¡ ¿©·¯ °¡»óÈ£½ºÆ®
          ½Ã½ºÅÛ »ç¿ëÇϱâ</a></h2>
      
          <p>´õ º¹ÀâÇÑ ¼³Á¤ÀÇ ¿¹·Î ¾ÆÆÄÄ¡ÀÇ ÀϹÝÀûÀÎ
          <code>&lt;VirtualHost&gt;</code> Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ¿©·¯
          °¡»óÈ£½ºÆ® ¼³Á¤ÀÇ ¹üÀ§¸¦ Á¶ÀýÇÒ ¼ö ÀÖ´Ù. ¿¹¸¦ µé¾î, ´ÙÀ½°ú
          °°Àº ¼³Á¤Àº ȨÆäÀÌÁö °í°´¿¡ IP ÁÖ¼Ò ÇѰ³, »ó¾÷ÀûÀÎ
          °í°´¿¡°Ô ´Ù¸¥ IP ÁÖ¼Ò ÇѰ³¸¦ ºÎ¿©ÇÑ´Ù. ¹°·Ð ÀÌÀüó·³
          <code>&lt;VirtualHost&gt;</code> ¼³Á¤ ¼½¼Ç¿¡ ¸ðµÎ ¹­À» ¼öµµ
          ÀÖ´Ù.</p>
      
      <div class="example"><p><code>
      UseCanonicalName Off<br />
      <br />
      LogFormat "%V %h %l %u %t \"%r\" %s %b" vcommon<br />
      <br />
      &lt;Directory /www/commercial&gt;<br />
      <span class="indent">
          Options FollowSymLinks<br />
          AllowOverride All<br />
      </span>
      &lt;/Directory&gt;<br />
      <br />
      &lt;Directory /www/homepages&gt;<br />
      <span class="indent">
          Options FollowSymLinks<br />
          AllowOverride None<br />
      </span>
      &lt;/Directory&gt;<br />
      <br />
      &lt;VirtualHost 111.22.33.44&gt;<br />
      <span class="indent">
          ServerName www.commercial.isp.com<br />
          <br />
          CustomLog logs/access_log.commercial vcommon<br />
          <br />
          VirtualDocumentRoot /www/commercial/%0/docs<br />
          VirtualScriptAlias  /www/commercial/%0/cgi-bin<br />
      </span>
      &lt;/VirtualHost&gt;<br />
      <br />
      &lt;VirtualHost 111.22.33.45&gt;<br />
      <span class="indent">
          ServerName www.homepages.isp.com<br />
          <br />
          CustomLog logs/access_log.homepages vcommon<br />
          <br />
          VirtualDocumentRoot /www/homepages/%0/docs<br />
          ScriptAlias         /cgi-bin/ /www/std-cgi/<br />
      </span>
      &lt;/VirtualHost&gt;
      </code></p></div>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ipbased" id="ipbased">´õ È¿À²ÀûÀÎ IP±â¹Ý °¡»óÈ£½ºÆ®</a></h2>
      
          <p><a href="#simple">ù¹øÂ° ¿¹</a>¿¡¼­ ³ª´Â ¼³Á¤À» °£´ÜÈ÷
          IP±â¹Ý °¡»óÈ£½ºÆ®·Î ¹Ù²Ü ¼ö ÀÖ´Ù°í ¸»Çß´Ù. ºÒÇàÈ÷µµ
          ±×·± ¼³Á¤Àº ¸Å ¿äû¸¶´Ù DNS¸¦ ã¾Æ¾ßÇϹǷΠ¸Å¿ì ºñÈ¿À²ÀûÀÌ´Ù.
          À̸§´ë½Å IP ÁÖ¼Ò·Î ÆÄÀϽýºÅÛÀ» ±¸¼ºÇÏ°í °°Àº ¹æ½ÄÀ¸·Î
          ·Î±×¸¦ ¼öÁ¤ÇÏ¸é ¹®Á¦¸¦ ÇØ°áÇÒ ¼ö ÀÖ´Ù. ¾ÆÆÄÄ¡´Â ¼­¹ö¸íÀ»
          ´Ù·ê Çʿ䰡 ¾ø¾îÁö°í, DNS °Ë»öµµ ÇÏÁö ¾Ê°Ô µÈ´Ù.</p>
      
      <div class="example"><p><code>
      # IP ÁÖ¼Ò¸¦ ¿ªDNS °Ë»öÇÏ¿© ¼­¹ö¸íÀ» ¾Ë¾Æ³½´Ù<br />
      UseCanonicalName DNS<br />
      <br />
      # ·Î±×¸¦ ³ª´­ ¼ö ÀÖµµ·Ï IP ÁÖ¼Ò¸¦ Æ÷ÇÔÇÑ´Ù<br />
      LogFormat "%A %h %l %u %t \"%r\" %s %b" vcommon<br />
      CustomLog logs/access_log vcommon<br />
      <br />
      # ÆÄÀÏ¸í¿¡ IP ÁÖ¼Ò¸¦ Æ÷ÇÔÇÑ´Ù<br />
      VirtualDocumentRootIP /www/hosts/%0/docs<br />
      VirtualScriptAliasIP  /www/hosts/%0/cgi-bin<br />
      </code></p></div>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="oldversion" id="oldversion">¾ÆÆÄÄ¡ ÀÌÀü ¹öÀü »ç¿ëÇϱâ</a></h2>
      
          <p>À§ ¿¹µéÀº ¾ÆÆÄÄ¡ ¹öÀü 1.3.6 ÀÌÈÄ¿¡ Æ÷ÇÔµÈ
          <code>mod_vhost_alias</code>À» »ç¿ëÇÑ´Ù.
          <code>mod_vhost_alias</code>°¡ ¾ø´Â ¾ÆÆÄÄ¡ ¹öÀüÀ» »ç¿ëÇÑ´Ù¸é
          ÀÌ¹Ì ¸»ÇßµíÀÌ <code>mod_rewrite</code>¸¦ »ç¿ëÇÏ¿©, ´Ü
          Host:-Çì´õ±â¹Ý °¡»óÈ£½ºÆ®¸¸À», ±¸ÇöÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>¶Ç ·Î±×¿¡ °üÇÏ¿© ÁÖÀÇÇÒ Á¡ÀÌ ÀÖ´Ù. ¾ÆÆÄÄ¡ 1.3.6¿¡¼­
          ·Î±×Çü½Ä Áö½Ã¾î <code>%V</code>°¡ Æ÷ÇԵǾú°í, ¹öÀü 1.3.0
          - 1.3.3¿¡¼­ ÀÌ ±â´ÉÀ» <code>%v</code> ¿É¼ÇÀÌ ´ë½Å Çß´Ù. ±×·¯³ª
          ¹öÀü 1.3.4¿¡´Â ÀÌ·± ±â´ÉÀÌ ¾ø´Ù. ¾î¶² ¾ÆÆÄÄ¡ ¹öÀü¿¡¼­µµ
          <code>.htaccess</code> ÆÄÀÏ¿¡¼­ <code>UseCanonicalName</code>
          Áö½Ã¾î¸¦ »ç¿ëÇÒ ¼ö ÀÖÀ¸¹Ç·Î ·Î±×¿¡ ÀÌ»óÇÑ ³»¿ëÀÌ ±â·ÏµÉ ¼ö ÀÖ´Ù.
          ±×·¯¹Ç·Î °¡Àå ÁÁÀº ¹æ¹ýÀº <code>%{Host}i</code> Áö½Ã¾î¸¦
          »ç¿ëÇÏ¿© <code>Host:</code> Çì´õ¸¦ Á÷Á¢ ·Î±×¿¡ ³²±â´Â °ÍÀÌ´Ù.
          ¶Ç, ÀÌ ¹æ¹ýÀº <code>%V</code>´Â Æ÷ÇÔÇÏÁö¾Ê´Â <code>:port</code>¸¦
          µÚ¿¡ Ãß°¡ÇÒ ¼ö ÀÖ´Ù.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="simple.rewrite" id="simple.rewrite"><code>mod_rewrite</code>¸¦
          »ç¿ëÇÑ °£´ÜÇÑ µ¿Àû °¡»óÈ£½ºÆ®</a></h2>
      
          <p>´ÙÀ½Àº <a href="#simple">ù¹øÂ° ¿¹</a>¿Í °°Àº ÀÏÀ» ÇÏ´Â
          <code>httpd.conf</code> ¿¹ÀÌ´Ù. óÀ½ Àý¹ÝÀº ù¹øÂ° ¿¹¿Í
          °ÅÀÇ ºñ½ÁÇÏÁö¸¸, ÀÌÀü ¹öÀü°úÀÇ È£È¯¼º°ú <code>mod_rewrite</code>ÀÇ
          ÀûÀýÇÑ µ¿ÀÛÀ» À§ÇØ ¼öÁ¤µÇ¾ú´Ù. ³ª¸ÓÁö Àý¹ÝÀº ½ÇÁ¦ ÀÛ¾÷À»
          ÇÏ´Â <code>mod_rewrite</code>¸¦ ¼³Á¤ÇÑ´Ù.</p>
      
          <p>Ưº°È÷ ÁÖÀÇÇØ¾ß ÇÒ »çÇ×ÀÌ ÀÖ´Ù. ±âº»ÀûÀ¸·Î
          <code>mod_rewrite</code>´Â (<code>mod_alias</code> µî) ´Ù¸¥
          URI ¹ø¿ª ¸ðµâ ÀÌÀü¿¡ ½ÇÇàµÈ´Ù. ±×·¡¼­ ´Ù¸¥ URI ¹ø¿ª ¸ðµâµé°ú
          °°ÀÌ µ¿ÀÛÇÒ °ÍÀ» °í·ÁÇÏ¿© <code>mod_rewrite</code>¸¦ ¼³Á¤ÇØ¾ß ÇÑ´Ù.
          ¶Ç, µ¿Àû °¡»óÈ£½ºÆ®¿¡¼­ <code>ScriptAlias</code>°ú °°Àº
          ±â´ÉÀ» À§Çؼ­´Â Ưº°ÇÑ ÀÛ¾÷ÀÌ ÇÊ¿äÇÏ´Ù.</p>
      
      <div class="example"><p><code>
      # Host: Çì´õ¿¡¼­ ¼­¹ö¸íÀ» ¾ò´Â´Ù<br />
      UseCanonicalName Off<br />
      <br />
      # splittable logs<br />
      LogFormat "%{Host}i %h %l %u %t \"%r\" %s %b" vcommon<br />
      CustomLog logs/access_log vcommon<br />
      <br />
      &lt;Directory /www/hosts&gt;<br />
      <span class="indent">
          # ScriptAlias ½ÄÀ¸·Î CGI ½ÇÇàÀ» °­Á¦ÇÒ ¼ö ¾ø±â¶§¹®¿¡<br />
          # ¿©±â¿¡ ExecCGI¸¦ »ç¿ëÇÑ´Ù<br />
          Options FollowSymLinks ExecCGI<br />
      </span>
      &lt;/Directory&gt;<br />
      <br />
      # ÀÌÁ¦ ¾î·Á¿î ºÎºÐÀÌ´Ù<br />
      <br />
      RewriteEngine On<br />
      <br />
      # Host: Çì´õ¿¡¼­ °¡Á®¿Â ¼­¹ö¸í¿¡´Â ´ë¼Ò¹®ÀÚ°¡ µÚ¼¯¿©ÀÖÀ» ¼ö ÀÖ´Ù<br />
      RewriteMap  lowercase  int:tolower<br />
      <br />
      ## ÀÏ¹Ý ¹®¼­¸¦ ¸ÕÀú ó¸®ÇÑ´Ù:<br />
      # Alias /icons/ °¡ µ¿ÀÛÇϵµ·Ï - ´Ù¸¥ alias¿¡ ´ëÇØ¼­µµ ¹Ýº¹<br />
      RewriteCond  %{REQUEST_URI}  !^/icons/<br />
      # CGI°¡ µ¿ÀÛÇϵµ·Ï<br />
      RewriteCond  %{REQUEST_URI}  !^/cgi-bin/<br />
      # Ưº°ÇÑ ÀÛ¾÷<br />
      RewriteRule  ^/(.*)$  /www/hosts/${lowercase:%{SERVER_NAME}}/docs/$1<br />
      <br />
      ## ÀÌÁ¦ CGI¸¦ ó¸®ÇÑ´Ù - MIME typeÀ» °­Á¦ÇØ¾ß ÇÑ´Ù<br />
      RewriteCond  %{REQUEST_URI}  ^/cgi-bin/<br />
      RewriteRule  ^/(.*)$  /www/hosts/${lowercase:%{SERVER_NAME}}/cgi-bin/$1  [T=application/x-httpd-cgi]<br />
      <br />
      # ³¡!
      </code></p></div>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="homepages.rewrite" id="homepages.rewrite"><code>mod_rewrite</code>¸¦
          »ç¿ëÇÑ È¨ÆäÀÌÁö ½Ã½ºÅÛ</a></h2>
      
          <p>´ÙÀ½Àº <a href="#homepages">µÎ¹øÂ° ¿¹</a>¿Í °°Àº ÀÏÀ»
          ÇÑ´Ù.</p>
      
      <div class="example"><p><code>
      RewriteEngine on<br />
      <br />
      RewriteMap   lowercase  int:tolower<br />
      <br />
      # CGI°¡ µ¿ÀÛÇϵµ·Ï<br />
      RewriteCond  %{REQUEST_URI}  !^/cgi-bin/<br />
      <br />
      # RewriteRuleÀÌ µ¿ÀÛÇϵµ·Ï È£½ºÆ®¸íÀÌ ¿Ã¹Ù¸¥Áö °Ë»çÇÑ´Ù<br />
      RewriteCond  ${lowercase:%{SERVER_NAME}}  ^www\.[a-z-]+\.isp\.com$<br />
      <br />
      # °¡»óÈ£½ºÆ®¸íÀ» URI ¾Õ¿¡ ºÙÀδÙ<br />
      # [C]´Â ÀÌ °á°ú¸¦ °¡Áö°í ´ÙÀ½ ÀçÀÛ¼ºÀ» ¼öÇàÇÔÀ» ¶æÇÑ´Ù<br />
      RewriteRule  ^(.+)  ${lowercase:%{SERVER_NAME}}$1  [C]<br />
      <br />
      # ÀÌÁ¦ ½ÇÁ¦ ÆÄÀϸíÀ» ¸¸µç´Ù<br />
      RewriteRule  ^www\.([a-z-]+)\.isp\.com/(.*) /home/$1/$2<br />
      <br />
      # Àüü CGI µð·ºÅ丮¸¦ Á¤ÀÇÇÑ´Ù<br />
      ScriptAlias  /cgi-bin/  /www/std-cgi/
      </code></p></div>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="xtra-conf" id="xtra-conf">º°µµÀÇ °¡»óÈ£½ºÆ® ¼³Á¤ÆÄÀÏ
          »ç¿ëÇϱâ</a></h2>
      
          <p>´ÙÀ½Àº <code>mod_rewrite</code>ÀÇ °í±Þ ±â´ÉÀ» »ç¿ëÇÏ¿©
          º°µµÀÇ ¼³Á¤ÆÄÀÏÀ» °¡Áö°í °¡»óÈ£½ºÆ®ÀÇ ¹®¼­·çÆ®¸¦ ¾Ë¾Æ³½´Ù.
          ´õ À¯¿¬ÇÏÁö¸¸ ´õ º¹ÀâÇÑ ¼³Á¤ÀÌ ÇÊ¿äÇÏ´Ù.</p>
      
          <p><code>vhost.map</code> ÆÄÀÏÀº ´ÙÀ½°ú °°´Ù:</p>
      
      <div class="example"><p><code>
      www.customer-1.com  /www/customers/1<br />
      www.customer-2.com  /www/customers/2<br />
      # ...<br />
      www.customer-N.com  /www/customers/N<br />
      </code></p></div>
      
          <p><code>http.conf</code>´Â ´ÙÀ½°ú °°´Ù:</p>
      
      <div class="example"><p><code>
      RewriteEngine on<br />
      <br />
      RewriteMap   lowercase  int:tolower<br />
      <br />
      # ´ëÀÀÆÄÀÏÀ» Á¤ÀÇÇÑ´Ù<br />
      RewriteMap   vhost      txt:/www/conf/vhost.map<br />
      <br />
      # À§¿Í °°ÀÌ aliasµéÀ» ó¸®ÇÑ´Ù<br />
      RewriteCond  %{REQUEST_URI}               !^/icons/<br />
      RewriteCond  %{REQUEST_URI}               !^/cgi-bin/<br />
      RewriteCond  ${lowercase:%{SERVER_NAME}}  ^(.+)$<br />
      # ÆÄÀÏ ³»¿ëÀ» °¡Áö°í ã´Â´Ù<br />
      RewriteCond  ${vhost:%1}                  ^(/.*)$<br />
      RewriteRule  ^/(.*)$                      %1/docs/$1<br />
      <br />
      RewriteCond  %{REQUEST_URI}               ^/cgi-bin/<br />
      RewriteCond  ${lowercase:%{SERVER_NAME}}  ^(.+)$<br />
      RewriteCond  ${vhost:%1}                  ^(/.*)$<br />
      RewriteRule  ^/(.*)$                      %1/cgi-bin/$1
      </code></p></div>
      
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/vhosts/mass.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/mass.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/mass.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/mass.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/mass.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/index.html����������������������������������������������������������0000644�0000000�0000050�00000001200�13362070302�016751� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: index.html.de
      Content-Language: de
      Content-type: text/html; charset=ISO-8859-1
      
      URI: index.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: index.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: index.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: index.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: index.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      
      URI: index.html.zh-cn.utf8
      Content-Language: zh-cn
      Content-type: text/html; charset=UTF-8
      ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/ip-based.html.en����������������������������������������������������0000644�0000000�0000050�00000032430�13412755316�017753� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache IP-based Virtual Host Support - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Virtual Hosts</a></div><div id="page-content"><div id="preamble"><h1>Apache IP-based Virtual Host Support</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/vhosts/ip-based.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/ip-based.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/ip-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/ip-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/ip-based.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#explanation">What is IP-based virtual hosting</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#requirements">System requirements</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#howto">How to set up Apache</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#multiple">Setting up multiple daemons</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#single">Setting up a single daemon
        with virtual hosts</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li>
      <a href="name-based.html">Name-based Virtual Hosts Support</a>
      </li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="explanation" id="explanation">What is IP-based virtual hosting</a></h2>
      <p>IP-based virtual hosting is a method to apply different directives
      based on the IP address and port a request is received on.  Most commonly,
      this is used to serve different websites on different ports or interfaces.</p>
      
      <p>In many cases, <a href="name-based.html">name-based
      virtual hosts</a> are more convenient, because they allow
      many virtual hosts to share a single address/port.
      See <a href="name-based.html#namevip">Name-based vs. IP-based
      Virtual Hosts</a> to help you decide.  </p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="requirements" id="requirements">System requirements</a></h2>
      
          <p>As the term <cite>IP-based</cite> indicates, the server
          <strong>must have a different IP address/port combination for each IP-based
          virtual host</strong>. This can be achieved by the machine
          having several physical network connections, or by use of
          virtual interfaces which are supported by most modern operating
          systems (see system documentation for details, these are
          frequently called "ip aliases", and the "ifconfig" command is
          most commonly used to set them up), and/or using multiple
          port numbers.</p>
      
          <p> In the terminology of Apache HTTP Server, using a single IP address
          but multiple TCP ports, is also IP-based virtual hosting.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="howto" id="howto">How to set up Apache</a></h2>
      
          <p>There are two ways of configuring apache to support multiple
          hosts. Either by running a separate <code class="program"><a href="../programs/httpd.html">httpd</a></code> daemon for
          each hostname, or by running a single daemon which supports all the
          virtual hosts.</p>
      
          <p>Use multiple daemons when:</p>
      
          <ul>
            <li>There are security partitioning issues, such as company1
            does not want anyone at company2 to be able to read their
            data except via the web. In this case you would need two
            daemons, each running with different <code class="directive"><a href="../mod/mod_unixd.html#user">User</a></code>, <code class="directive"><a href="../mod/mod_unixd.html#group">Group</a></code>, <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code>, and <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> settings.</li>
      
            <li>You can afford the memory and file descriptor
            requirements of listening to every IP alias on the
            machine. It's only possible to <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> to the "wildcard"
            address, or to specific addresses. So if you have a need to
            listen to a specific address for whatever reason, then you
            will need to listen to all specific addresses. (Although one
            <code class="program"><a href="../programs/httpd.html">httpd</a></code> could listen to N-1 of the addresses, and another could
            listen to the remaining address.)</li>
          </ul>
      
          <p>Use a single daemon when:</p>
      
          <ul>
            <li>Sharing of the httpd configuration between virtual hosts
            is acceptable.</li>
      
            <li>The machine services a large number of requests, and so
            the performance loss in running separate daemons may be
            significant.</li>
          </ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="multiple" id="multiple">Setting up multiple daemons</a></h2>
      
          <p>Create a separate <code class="program"><a href="../programs/httpd.html">httpd</a></code> installation for each
          virtual host. For each installation, use the <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> directive in the
          configuration file to select which IP address (or virtual host)
          that daemon services. e.g.</p>
      
          <pre class="prettyprint lang-config">Listen 192.0.2.100:80</pre>
      
      
          <p>It is recommended that you use an IP address instead of a
          hostname (see <a href="../dns-caveats.html">DNS caveats</a>).</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="single" id="single">Setting up a single daemon
        with virtual hosts</a></h2>
      
          <p>For this case, a single <code class="program"><a href="../programs/httpd.html">httpd</a></code> will service
          requests for the main server and all the virtual hosts. The <code class="directive"><a href="../mod/core.html#virtualhost">VirtualHost</a></code> directive
          in the configuration file is used to set the values of <code class="directive"><a href="../mod/core.html#serveradmin">ServerAdmin</a></code>, <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>, <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>, <code class="directive"><a href="../mod/core.html#errorlog">ErrorLog</a></code> and <code class="directive"><a href="../mod/mod_log_config.html#transferlog">TransferLog</a></code>
          or <code class="directive"><a href="../mod/mod_log_config.html#customlog">CustomLog</a></code>
          configuration directives to different values for each virtual
          host. e.g.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost 172.20.30.40:80&gt;
          ServerAdmin webmaster@www1.example.com
          DocumentRoot "/www/vhosts/www1"
          ServerName www1.example.com
          ErrorLog "/www/logs/www1/error_log"
          CustomLog "/www/logs/www1/access_log" combined
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.50:80&gt;
          ServerAdmin webmaster@www2.example.org
          DocumentRoot "/www/vhosts/www2"
          ServerName www2.example.org
          ErrorLog "/www/logs/www2/error_log"
          CustomLog "/www/logs/www2/access_log" combined
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>It is recommended that you use an IP address instead of a
          hostname in the &lt;VirtualHost&gt; directive
          (see <a href="../dns-caveats.html">DNS caveats</a>).</p>
      
          <p> Specific IP addresses or ports have precedence over their wildcard
          equivalents, and any virtual host that matches has precedence over
          the servers base configuration.</p>
      
          <p>Almost <strong>any</strong> configuration directive can be
          put in the VirtualHost directive, with the exception of
          directives that control process creation and a few other
          directives. To find out if a directive can be used in the
          VirtualHost directive, check the <a href="../mod/directive-dict.html#Context">Context</a> using the
          <a href="../mod/quickreference.html">directive index</a>.</p>
      
          <p><code class="directive"><a href="../mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code>
          may be used inside a
          VirtualHost directive if the <a href="../suexec.html">suEXEC
          wrapper</a> is used.</p>
      
          <p><em>SECURITY:</em> When specifying where to write log files,
          be aware of some security risks which are present if anyone
          other than the user that starts Apache has write access to the
          directory where they are written. See the <a href="../misc/security_tips.html">security tips</a> document
          for details.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/vhosts/ip-based.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/ip-based.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/ip-based.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/ip-based.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/ip-based.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/ip-based.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/examples.html.fr.utf8�����������������������������������������������0000644�0000000�0000050�00000064635�13412755316�021013� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Exemples d'utilisations de VirtualHost - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Serveurs virtuels</a></div><div id="page-content"><div id="preamble"><h1>Exemples d'utilisations de VirtualHost</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/vhosts/examples.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/examples.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/examples.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/examples.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/examples.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Le but de ce document est d'essayer de répondre aux questions 
          les plus répandues sur la configuration des <a href="index.html">serveurs virtuels</a>. 
          Les scénarios présentés ici se rencontrent quand plusieurs 
          serveurs Webs doivent tourner sur une seule et même machine au 
          moyen de serveurs virtuels <a href="name-based.html">par nom</a> 
          ou <a href="ip-based.html">par IP</a>.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#purename">Fonctionnement de plusieurs serveurs 
        virtuels par nom sur une seule adresse IP.</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#twoips">Serveurs virtuels par nom sur plus 
          d'une seule adresse IP.</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#intraextra">Servir le même contenu sur des 
          adresses IP différentes (telle qu'une adresse interne et une 
          externe).</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#port">Servir différents sites sur différents 
          ports.</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ip">Hébergement virtuel basé sur IP</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ipport">Hébergements virtuels mixtes basés sur 
          les ports et sur les IP</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#mixed">Hébergements virtuels mixtes basé sur 
          les noms et sur IP</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#proxy">Utilisation simultanée de 
          <code>Virtual_host</code> et de mod_proxy</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#default">Utilisation de serveurs virtuels 
          <code>_default_</code></a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#migrate">Migration d'un serveur virtuel 
      	par nom en un serveur virtuel par IP</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#serverpath">Utilisation de la directive 
          <code>ServerPath</code></a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="purename" id="purename">Fonctionnement de plusieurs serveurs 
        virtuels par nom sur une seule adresse IP.</a></h2>
      
          <p>Votre serveur possède plusieurs noms d'hôte qui correspondent à une seule
          adresse IP, et vous souhaitez des réponses différentes si on demande
          <code>www.example.com</code> ou <code>www.example.org</code>.</p>
      
          <div class="note"><h3>Note&nbsp;:</h3><p>La configuration de serveurs virtuels 
          sous Apache ne provoque pas leur apparition magique dans la 
          configuration du DNS. Il <em>faut</em> que leurs noms soient 
          définis dans le DNS, et qu'ils y soient résolus sur l'adresse IP 
          du serveur, faute de quoi personne ne pourra visiter votre site Web. 
          Il est possible d'ajouter des entrées dans le fichier 
          <code>hosts</code> pour tests locaux, mais qui ne fonctionneront 
          que sur la machine possédant ces entrées.</p>
          </div>
      
          <pre class="prettyprint lang-config"># Apache doit écouter sur le port 80
      Listen 80
      &lt;VirtualHost *:80&gt;
          DocumentRoot "/www/example1"
          ServerName www.example.com
        
          # Autres directives ici
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost *:80&gt;
          DocumentRoot "/www/example2"
          ServerName www.example.org
      
          # Autres directives ici
      &lt;/VirtualHost&gt;</pre>
      
         
      
          <p>Les astérisques correspondent à toutes les adresses, si bien que 
          le serveur principal ne répondra jamais à aucune requête. Comme le
          serveur virtuel
          <code>ServerName www.example.com</code> se trouve en premier dans le fichier 
          de configuration, il a la plus grande priorité et peut être vu 
          comme serveur <cite>par défaut</cite> ou <cite>primaire</cite>&nbsp;; 
          ce qui signifie que toute requête reçue ne correspondant à aucune 
          des directives <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> sera servie par ce premier 
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>.</p>
      
          <p>La configuration ci-dessus correspond à ce que l'on souhaite pour
          la plupart des serveurs virtuels à base de nom. Il faudra cependant
          utiliser une configuration différente si vous souhaitez servir un
          contenu différent en fonction de l'adresse IP ou du port.</p>
      
          <div class="note">
                  <h3>Note&nbsp;:</h3>
      
                  <p>Vous pouvez remplacer <code>*</code> 
                  par une adresse IP du système. Le serveur virtuel concerné
      	    ne sera alors sélectionné que pour les requêtes HTTP vers
      	    cette adresse IP.</p>
      
                 <p>En général, il est commode d'utiliser <code>*</code> sur 
                 les systèmes dont l'adresse IP n'est pas constante - par 
                 exemple, pour des serveurs dont l'adresse IP est attribuée 
                 dynamiquement par le FAI, et où le DNS est géré au moyen 
                 d'un DNS dynamique quelconque. Comme <code>*</code> signifie 
                 <cite>n'importe quelle adresse</cite>, cette configuration 
                 fonctionne sans devoir être modifiée quand l'adresse IP du 
                 système est modifiée.</p>
          </div>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="twoips" id="twoips">Serveurs virtuels par nom sur plus 
          d'une seule adresse IP.</a></h2>
      
        	<div class="note">
                <h3>Note&nbsp;:</h3><p>Toutes les techniques présentées ici 
                peuvent être étendues à un plus grand nombre d'adresses IP.</p>
          </div>
      
          <p>Le serveur a deux adresses IP. Sur l'une 
          (<code>172.20.30.40</code>), le serveur "principal" 
          <code>server.example.com</code> doit répondre, et sur l'autre 
          (<code>172.20.30.50</code>), deux serveurs virtuels (ou plus) 
          répondront.</p>
      
          <pre class="prettyprint lang-config">Listen 80
      
      # Serveur "principal" sur 172.20.30.40
      ServerName server.example.com
      DocumentRoot "/www/mainserver"
      
      &lt;VirtualHost 172.20.30.50&gt;
          DocumentRoot "/www/example1"
          ServerName www.example.com
          
          # D'autres directives ici ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.50&gt;
          DocumentRoot "/www/example2"
          ServerName www.example.org
          
          # D'autres directives ici ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Toute requête arrivant sur une autre adresse que 
          <code>172.20.30.50</code> sera servie par le serveur principal. 
          Les requêtes vers <code>172.20.30.50</code> avec un nom de serveur 
          inconnu, ou sans en-tête <code>Host:</code>, seront servies par 
          <code>www.example.com</code>.</p>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="intraextra" id="intraextra">Servir le même contenu sur des 
          adresses IP différentes (telle qu'une adresse interne et une 
          externe).</a></h2>
      
          <p>La machine serveur dispose de deux adresses IP 
          (<code>192.168.1.1</code> et <code>172.20.30.40</code>). Cette 
          machine est placée à la fois sur le réseau interne (l'Intranet) 
          et le réseau externe (Internet). Sur Internet, le nom 
          <code>server.example.com</code> pointe vers l'adresse externe 
          (<code>172.20.30.40</code>), mais sur le réseau interne, ce même 
          nom pointe vers l'adresse interne (<code>192.168.1.1</code>).</p>
      
          <p>Le serveur peut être configuré pour répondre de la même manière 
          aux requêtes internes et externes, au moyen d'une seule section 
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost 192.168.1.1 172.20.30.40&gt;
          DocumentRoot "/www/server1"
          ServerName server.example.com
          ServerAlias server
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Ainsi, les requêtes en provenance de chacun des deux réseaux 
          seront servies par le même <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>.</p>
      
          <div class="note">
                <h3>Note&nbsp;:</h3><p>Sur le réseau interne, il est possible 
                d'utiliser le nom raccourci <code>server</code> au lieu du nom 
                complet <code>server.example.com</code>.</p>
      
                <p>Notez également que dans l'exemple précédent, vous pouvez 
                remplacer la liste des adresses IP par des <code>*</code> afin 
                que le serveur réponde de la même manière sur toutes ses 
                adresses.</p>
          </div>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="port" id="port">Servir différents sites sur différents 
          ports.</a></h2>
      
          <p>Vous disposez de plusieurs domaines pointant sur la même adresse 
          IP et vous voulez également servir de multiples ports. L'exemple
          suivant montre que la sélection en fonction du nom intervient après
          la sélection de la meilleure correspondance du point de vue adresse
          IP/port.</p>
      
          <pre class="prettyprint lang-config">Listen 80
      Listen 8080
      
      &lt;VirtualHost 172.20.30.40:80&gt;
          ServerName www.example.com
          DocumentRoot "/www/domain-80"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40:8080&gt;
          ServerName www.example.com
          DocumentRoot "/www/domain-8080"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40:80&gt;
          ServerName www.example.org
          DocumentRoot "/www/otherdomain-80"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40:8080&gt;
          ServerName www.example.org
          DocumentRoot "/www/otherdomain-8080"
      &lt;/VirtualHost&gt;</pre>
      
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ip" id="ip">Hébergement virtuel basé sur IP</a></h2>
      
          <p>Le serveur dispose de deux adresses IP (<code>172.20.30.40</code> 
          et <code>172.20.30.50</code>) correspondant respectivement aux noms 
          <code>www.example.com</code> et <code>www.example.org</code>.</p>
      
          <pre class="prettyprint lang-config">Listen 80
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/www/example1"
          ServerName www.example.com
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.50&gt;
          DocumentRoot "/www/example2"
          ServerName www.example.org
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Les requêtes provenant d'adresses non spécifiées dans l'une des 
          directives <code>&lt;VirtualHost&gt;</code> (comme pour 
          <code>localhost</code> par exemple) seront dirigées vers le serveur 
          principal, s'il en existe un.</p>
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ipport" id="ipport">Hébergements virtuels mixtes basés sur 
          les ports et sur les IP</a></h2>
      
          <p>Le serveur dispose de deux adresses IP (<code>172.20.30.40</code> 
          et <code>172.20.30.50</code>) correspondant respectivement aux noms 
          <code>www.example.com</code> et <code>www.example.org</code>. 
          Pour chacun d'eux, nous voulons un hébergement sur les ports 80 
          et 8080.</p>
      
          <pre class="prettyprint lang-config">Listen 172.20.30.40:80
      Listen 172.20.30.40:8080
      Listen 172.20.30.50:80
      Listen 172.20.30.50:8080
      
      &lt;VirtualHost 172.20.30.40:80&gt;
          DocumentRoot "/www/example1-80"
          ServerName www.example.com
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40:8080&gt;
          DocumentRoot "/www/example1-8080"
          ServerName www.example.com
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.50:80&gt;
          DocumentRoot "/www/example2-80"
          ServerName www.example.org
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.50:8080&gt;
          DocumentRoot "/www/example2-8080"
          ServerName www.example.org
      &lt;/VirtualHost&gt;</pre>
      
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mixed" id="mixed">Hébergements virtuels mixtes basé sur 
          les noms et sur IP</a></h2>
      
          <p>Toute adresse indiquée comme argument d'une section VirtualHost
          et n'apparaissant dans aucun autre serveur virtuel, fait de cette
          section un serveur virtuel sélectionnable uniquement en fonction de
          son adresse IP.</p>
      
          <pre class="prettyprint lang-config">Listen 80
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/www/example1"
          ServerName www.example.com
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/www/example2"
          ServerName www.example.org
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/www/example3"
          ServerName www.example.net
      &lt;/VirtualHost&gt;
      
      # IP-based
      &lt;VirtualHost 172.20.30.50&gt;
          DocumentRoot "/www/example4"
          ServerName www.example.edu
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.60&gt;
          DocumentRoot "/www/example5"
          ServerName www.example.gov
      &lt;/VirtualHost&gt;</pre>
      
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="proxy" id="proxy">Utilisation simultanée de 
          <code>Virtual_host</code> et de mod_proxy</a></h2>
      
          <p>L'exemple suivant montre comment une machine peut mandater 
          un serveur virtuel fonctionnant sur le serveur d'une autre machine. 
          Dans cet exemple, un serveur virtuel de même nom est configuré sur 
          une machine à l'adresse <code>192.168.111.2</code>. La directive 
          <code class="directive"><a href="../mod/mod_proxy.html#proxypreservehost">ProxyPreserveHost On</a></code> est
          employée pour permette au nom de domaine d'être préservé lors du 
          transfert, au cas où plusieurs noms de domaines cohabitent sur 
          une même machine.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost *:*&gt;
          ProxyPreserveHost On
          ProxyPass        "/" "http://192.168.111.2/"
          ProxyPassReverse "/" "http://192.168.111.2/"
          ServerName hostname.example.com
      &lt;/VirtualHost&gt;</pre>
      
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="default" id="default">Utilisation de serveurs virtuels 
          <code>_default_</code></a></h2>
      
          <h3><a name="defaultallports" id="defaultallports">Serveurs virtuels 
          <code>_default_</code> pour tous les ports</a></h3>
      
          <p>Exemple de capture de <em>toutes</em> les requêtes émanant 
          d'adresses IP ou de ports non connus, <em>c'est-à-dire</em>, d'un 
          couple adresse/port non traité par aucun autre serveur virtuel.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost _default_:*&gt;
          DocumentRoot "/www/default"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>L'utilisation d'un tel serveur virtuel avec un joker pour le 
          port empêche de manière efficace qu'une requête n'atteigne le 
          serveur principal.</p>
      
          <p>Un serveur virtuel par défaut ne servira jamais une requête 
          qui est envoyée vers un couple adresse/port utilisée par un 
          serveur virtuel par nom. Si la requête contient un en-tête 
          <code>Host:</code> inconnu, ou si celui-ci est absent, elle 
          sera toujours servie par le serveur virtuel primaire par nom 
          (celui correspondant à ce couple adresse/port trouvé en premier 
          dans le fichier de configuration).</p>
      
          <p>Vous pouvez utiliser une directive 
          <code class="directive"><a href="../mod/mod_alias.html#aliasmatch">AliasMatch</a></code> ou 
          <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> afin de 
          réécrire une requête pour une unique page d'information (ou pour 
          un script).</p>
          
      
          <h3><a name="defaultdifferentports" id="defaultdifferentports">Serveurs virtuels 
          <code>_default_</code> pour des ports différents</a></h3>
      
          <p>La configuration est similaire à l'exemple précédent, mais 
          le serveur écoute sur plusieurs ports et un second serveur virtuel 
          <code>_default_</code> pour le port 80 est ajouté.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost _default_:80&gt;
          DocumentRoot "/www/default80"
          # ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost _default_:*&gt;
          DocumentRoot "/www/default"
          # ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Le serveur virtuel par défaut défini pour le port 80 (il doit 
          impérativement être placé avant un autre serveur virtuel par 
          défaut traitant tous les ports grâce au joker *) capture toutes 
          les requêtes envoyées sur une adresse IP non spécifiée. Le 
          serveur principal n'est jamais utilisé pour servir une requête.</p>
          
      
          <h3><a name="defaultoneport" id="defaultoneport">Serveurs virtuels 
          <code>_default_</code> pour un seul port</a></h3>
      
          <p>Nous voulons créer un serveur virtuel par défaut seulement 
          pour le port 80.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost _default_:80&gt;
          DocumentRoot "/www/default"
      ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Une requête vers une adresse non spécifiée sur le port 80 
          sera servie par le serveur virtuel par défaut, et toute autre 
          requête vers une adresse et un port non spécifiés sera servie 
          par le serveur principal.</p>
      
          <p>L'utilisation du caractère générique <code>*</code> dans la
          déclaration d'un serveur virtuel l'emporte sur
          <code>_default_</code>.</p>
          
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="migrate" id="migrate">Migration d'un serveur virtuel 
      	par nom en un serveur virtuel par IP</a></h2>
      
          <p>Le serveur virtuel par nom avec le nom de domaine 
          <code>www.example.org</code> (de notre <a href="#name">exemple 
          par nom</a>) devrait obtenir sa propre adresse IP. Pendant la 
          phase de migration, il est possible d'éviter les problèmes avec 
          les noms de serveurs et autres serveurs mandataires qui mémorisent 
          les vielles adresses IP pour les serveurs virtuels par nom.<br />
          La solution est simple, car il suffit d'ajouter la nouvelle 
          adresse IP (<code>172.20.30.50</code>) dans la directive 
          <code>VirtualHost</code>.</p>
      
          <pre class="prettyprint lang-config">Listen 80
      ServerName www.example.com
      DocumentRoot "/www/example1"
      
      &lt;VirtualHost 172.20.30.40 172.20.30.50&gt;
          DocumentRoot "/www/example2"
          ServerName www.example.org
          # ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/www/example3"
          ServerName www.example.net
          ServerAlias *.example.net
          # ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Le serveur virtuel peut maintenant être joint par la nouvelle 
          adresse (comme un serveur virtuel par IP) et par l'ancienne 
          adresse (comme un serveur virtuel par nom).</p>
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="serverpath" id="serverpath">Utilisation de la directive 
          <code>ServerPath</code></a></h2>
      
          <p>Dans le cas où vous disposez de deux serveurs virtuels par nom, 
          le client doit transmettre un en-tête <code>Host:</code> correct 
          pour déterminer le serveur concerné. Les vieux clients HTTP/1.0 
          n'envoient pas un tel en-tête et Apache n'a aucun indice pour 
          connaître le serveur virtuel devant être joint (il sert la 
          requête à partir d'un serveur virtuel primaire). Dans un soucis 
          de préserver la compatibilité descendante, il suffit de créer 
          un serveur virtuel primaire chargé de retourner une page contenant 
          des liens dont les URLs auront un préfixe identifiant les serveurs 
          virtuels par nom.</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost 172.20.30.40&gt;
          # serveur virtuel primaire
          DocumentRoot "/www/subdomain"
          RewriteEngine On
          RewriteRule "." "/www/subdomain/index.html"
          # ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/www/subdomain/sub1"
          ServerName www.sub1.domain.tld
          ServerPath "/sub1/"
          RewriteEngine On
          RewriteRule "^(/sub1/.*)" "/www/subdomain$1
          # ...
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 172.20.30.40&gt;
          DocumentRoot "/www/subdomain/sub2"
          ServerName www.sub2.domain.tld
          ServerPath "/sub2/"
          RewriteEngine On
          RewriteRule "^(/sub2/.*)" "/www/subdomain$1"
          # ...
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>À cause de la directive 
          <code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code>, une requête sur 
          une URL <code>http://www.sub1.domain.tld/sub1/</code> est 
          <em>toujours</em> servie par le serveur sub1-vhost.<br />
          Une requête sur une URL <code>http://www.sub1.domain.tld/</code> n'est 
          servie par le serveur sub1-vhost que si le client envoie un en-tête 
          <code>Host:</code> correct. Si aucun en-tête <code>Host:</code> 
          n'est transmis, le serveur primaire sera utilisé.</p>
          <p>Notez qu'il y a une singularité&nbsp;: une requête sur 
          <code>http://www.sub2.domain.tld/sub1/</code> est également servie 
          par le serveur sub1-vhost si le client n'envoie pas d'en-tête 
          <code>Host:</code>.</p>
          <p>Les directives <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> 
          sont employées pour s'assurer que le client qui envoie un en-tête 
          <code>Host:</code> correct puisse utiliser d'autres variantes d'URLs, 
          <em>c'est-à-dire</em> avec ou sans préfixe d'URL.</p>
      
      	</div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/vhosts/examples.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/examples.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/examples.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/examples.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/examples.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/examples.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/mass.html.en��������������������������������������������������������0000644�0000000�0000050�00000044442�13412755316�017240� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Dynamically Configured Mass Virtual Hosting - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Virtual Hosts</a></div><div id="page-content"><div id="preamble"><h1>Dynamically Configured Mass Virtual Hosting</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/vhosts/mass.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/mass.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/mass.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/mass.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>This document describes how to efficiently serve an
          arbitrary number of virtual hosts with the Apache HTTP Server. A
          <a href="../rewrite/vhosts.html">separate document</a> discusses using
          <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code> to create dynamic mass virtual hosts.
          </p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#motivation">Motivation</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#overview">Overview</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#simple">Dynamic Virtual Hosts with
      mod_vhost_alias</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#homepages">Simplified Dynamic Virtual Hosts</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#combinations">Using Multiple Virtual
        Hosting Systems on the Same Server</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ipbased">More Efficient IP-Based Virtual Hosting</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#rewrite">Mass virtual hosts with
      mod_rewrite</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#macro">Mass virtual hosts with mod_macro</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="motivation" id="motivation">Motivation</a></h2>
      
          <p>The techniques described here are of interest if your
          <code>httpd.conf</code> contains many
          <code>&lt;VirtualHost&gt;</code> sections that are
          substantially the same, for example:</p>
      
      <pre class="prettyprint lang-config">&lt;VirtualHost 111.22.33.44&gt;
          ServerName                 customer-1.example.com
          DocumentRoot        "/www/hosts/customer-1.example.com/docs"
          ScriptAlias  "/cgi-bin/"  "/www/hosts/customer-1.example.com/cgi-bin"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 111.22.33.44&gt;
          ServerName                 customer-2.example.com
          DocumentRoot        "/www/hosts/customer-2.example.com/docs"
          ScriptAlias  "/cgi-bin/"  "/www/hosts/customer-2.example.com/cgi-bin"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 111.22.33.44&gt;
          ServerName                 customer-N.example.com
          DocumentRoot        "/www/hosts/customer-N.example.com/docs"
          ScriptAlias  "/cgi-bin/"  "/www/hosts/customer-N.example.com/cgi-bin"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>We wish to replace these multiple
          <code>&lt;VirtualHost&gt;</code> blocks with a mechanism
          that works them out dynamically. This has a number of
          advantages:</p>
      
          <ol>
            <li>Your configuration file is smaller, so Apache starts
            more quickly and uses less memory. Perhaps more importantly, the
            smaller configuration is easier to maintain, and leaves less room
            for errors.</li>
      
            <li>Adding virtual hosts is simply a matter of creating the
            appropriate directories in the filesystem and entries in the
            DNS - you don't need to reconfigure or restart Apache.</li>
          </ol>
      
          <p>The main disadvantage is that you cannot have a different log file for
          each virtual host; however, if you have many virtual hosts, doing
          this can be a bad idea anyway, because of the <a href="fd-limits.html">number of file descriptors needed</a>.
          It is better to <a href="../logs.html#piped">log to a pipe or a fifo</a>,
          and arrange for the process at the other end to split up the log
          files into one per virtual host. One example of such a process can
          be found in the <a href="../programs/split-logfile.html">split-logfile</a>
          utility.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">Overview</a></h2>
      
          <p>A virtual host is defined by two pieces of information: its
          IP address, and the contents of the <code>Host:</code> header
          in the HTTP request. The dynamic mass virtual hosting technique
          used here is based on automatically inserting this information into the
          pathname of the file that is used to satisfy the request. This
          can be most easily done by using <code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code>
          with Apache httpd. Alternatively,
          <a href="../rewrite/vhosts.html">mod_rewrite can
          be used</a>.</p>
          <p>Both of these modules are disabled by default; you must enable
          one of them when configuring and building Apache httpd if you want to
          use this technique.</p>
      
          <p>A couple of things need to be determined from the request in
          order to make the dynamic
          virtual host look like a normal one. The most important is the
          server name, which is used by the server to generate
          self-referential URLs etc. It is configured with the
          <code>ServerName</code> directive, and it is available to CGIs
          via the <code>SERVER_NAME</code> environment variable. The
          actual value used at run time is controlled by the <code class="directive"><a href="../mod/core.html#usecanonicalname">UseCanonicalName</a></code>
          setting. With <code>UseCanonicalName Off</code>, the server name
          is taken from the contents of the <code>Host:</code> header in the
          request. With <code>UseCanonicalName DNS</code>, it is taken from a
          reverse DNS lookup of the virtual host's IP address. The former
          setting is used for name-based dynamic virtual hosting, and the
          latter is used for IP-based hosting. If httpd cannot work out
          the server name because there is no <code>Host:</code> header,
          or the DNS lookup fails, then the value configured with
          <code>ServerName</code> is used instead.</p>
      
          <p>The other thing to determine is the document root (configured
          with <code>DocumentRoot</code> and available to CGI scripts via the
          <code>DOCUMENT_ROOT</code> environment variable). In a normal
          configuration, this is used by the core module when
          mapping URIs to filenames, but when the server is configured to
          do dynamic virtual hosting, that job must be taken over by another
          module (either <code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code> or
          <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>), which has a different way of doing
          the mapping. Neither of these modules is responsible for
          setting the <code>DOCUMENT_ROOT</code> environment variable so
          if any CGIs or SSI documents make use of it, they will get a
          misleading value.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="simple" id="simple">Dynamic Virtual Hosts with
      mod_vhost_alias</a></h2>
      
          <p>This extract from <code>httpd.conf</code> implements the
          virtual host arrangement outlined in the <a href="#motivation">Motivation</a> section above
          using <code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code>.</p>
      
      <pre class="prettyprint lang-config"># get the server name from the Host: header
      UseCanonicalName Off
      
      # this log format can be split per-virtual-host based on the first field
      # using the split-logfile utility.
      LogFormat "%V %h %l %u %t \"%r\" %s %b" vcommon
      CustomLog "logs/access_log" vcommon
      
      # include the server name in the filenames used to satisfy requests
      VirtualDocumentRoot "/www/hosts/%0/docs"
      VirtualScriptAlias  "/www/hosts/%0/cgi-bin"</pre>
      
      
          <p>This configuration can be changed into an IP-based virtual
          hosting solution by just turning <code>UseCanonicalName
          Off</code> into <code>UseCanonicalName DNS</code>. The server
          name that is inserted into the filename is then derived from
          the IP address of the virtual host. The variable <code>%0</code>
          references the requested servername, as indicated in the
          <code>Host:</code> header.</p>
      
      <p>See the <code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code> documentation for more usage
      examples.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="homepages" id="homepages">Simplified Dynamic Virtual Hosts</a></h2>
      
          <p>This is an adjustment of the above system, tailored for an
          ISP's web hosting server. Using <code>%2</code>,
          we can select substrings of the server name to
          use in the filename so that, for example, the documents for
          <code>www.user.example.com</code> are found in
          <code>/home/user/www</code>. It uses a single <code>cgi-bin</code>
          directory instead of one per virtual host.</p>
      
      <pre class="prettyprint lang-config">UseCanonicalName Off
      
      LogFormat "%V %h %l %u %t \"%r\" %s %b" vcommon
      CustomLog "logs/access_log" vcommon
      
      # include part of the server name in the filenames
      VirtualDocumentRoot "/home/%2/www"
      
      # single cgi-bin directory
      ScriptAlias  "/cgi-bin/"  "/www/std-cgi/"</pre>
      
      
          <p>There are examples of more complicated
          <code>VirtualDocumentRoot</code> settings in the
          <code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code> documentation.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="combinations" id="combinations">Using Multiple Virtual
        Hosting Systems on the Same Server</a></h2>
      
          <p>With more complicated setups, you can use httpd's normal
          <code>&lt;VirtualHost&gt;</code> directives to control the
          scope of the various virtual hosting configurations. For
          example, you could have one IP address for general customers' homepages,
          and another for commercial customers, with the following setup.
          This can be combined with conventional
          <code>&lt;VirtualHost&gt;</code> configuration sections, as shown
          below.</p>
      
      <pre class="prettyprint lang-config">UseCanonicalName Off
      
      LogFormat "%V %h %l %u %t \"%r\" %s %b" vcommon
      
      &lt;Directory "/www/commercial"&gt;
          Options FollowSymLinks
          AllowOverride All
      &lt;/Directory&gt;
      
      &lt;Directory "/www/homepages"&gt;
          Options FollowSymLinks
          AllowOverride None
      &lt;/Directory&gt;
      
      &lt;VirtualHost 111.22.33.44&gt;
          ServerName www.commercial.example.com
      
          CustomLog "logs/access_log.commercial" vcommon
      
          VirtualDocumentRoot "/www/commercial/%0/docs"
          VirtualScriptAlias  "/www/commercial/%0/cgi-bin"
      &lt;/VirtualHost&gt;
      
      &lt;VirtualHost 111.22.33.45&gt;
          ServerName www.homepages.example.com
      
          CustomLog "logs/access_log.homepages" vcommon
      
          VirtualDocumentRoot "/www/homepages/%0/docs"
          ScriptAlias         "/cgi-bin/" "/www/std-cgi/"
      &lt;/VirtualHost&gt;</pre>
      
      
      <div class="note">
          <h3>Note</h3>
          <p>If the first VirtualHost block does <em>not</em> include a
          <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> directive, the reverse
          DNS of the relevant IP will be used instead.
          If this is not the server name you
          wish to use, a bogus entry (eg. <code>ServerName
          none.example.com</code>) can be added to get around this
          behaviour.</p>
      </div>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ipbased" id="ipbased">More Efficient IP-Based Virtual Hosting</a></h2>
      
          <p>The configuration changes suggested to turn <a href="#simple">the first
          example</a> into an IP-based virtual hosting setup result in
          a rather inefficient setup. A new DNS lookup is required for every
          request. To avoid this overhead, the filesystem can be arranged to
          correspond to the IP addresses, instead of to the host names, thereby
          negating the need for a DNS lookup. Logging will also have to be adjusted
          to fit this system.</p>
      
      <pre class="prettyprint lang-config"># get the server name from the reverse DNS of the IP address
      UseCanonicalName DNS
      
      # include the IP address in the logs so they may be split
      LogFormat "%A %h %l %u %t \"%r\" %s %b" vcommon
      CustomLog "logs/access_log" vcommon
      
      # include the IP address in the filenames
      VirtualDocumentRootIP "/www/hosts/%0/docs"
      VirtualScriptAliasIP  "/www/hosts/%0/cgi-bin"</pre>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rewrite" id="rewrite">Mass virtual hosts with
      mod_rewrite</a></h2>
      
      <p>
      Mass virtual hosting may also be accomplished using
      <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>, either using simple <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> directives, or using more
      complicated techniques such as storing the vhost definitions externally
      and accessing them via <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code>. These techniques are
      discussed in the <a href="../rewrite/vhosts.html">rewrite
      documentation</a>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="macro" id="macro">Mass virtual hosts with mod_macro</a></h2>
      
      <p>Another option for dynamically generated virtual hosts is
      <code class="module"><a href="../mod/mod_macro.html">mod_macro</a></code>, with which you can create a virtualhost
      template, and invoke it for multiple hostnames. An example of this is
      provided in the <strong>Usage</strong> section of the module
      documentation.
      </p>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/vhosts/mass.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/mass.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/mass.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/mass.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/mass.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/fd-limits.html.ja.utf8����������������������������������������������0000644�0000000�0000050�00000024443�13412755316�021041� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>ファイル記述å­ã®é™ç•Œ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="../">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a> &gt; <a href="./">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></div><div id="page-content"><div id="preamble"><h1>ファイル記述å­ã®é™ç•Œ</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/vhosts/fd-limits.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/fd-limits.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/fd-limits.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/fd-limits.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/fd-limits.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
      
          <p>ãŸãã•ã‚“ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚’é‹ç”¨ã™ã‚‹å ´åˆã€ã‚‚ã—ã€
          å„ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã”ã¨ã«ç•°ãªã‚‹ãƒ­ã‚°ãƒ•ã‚¡ã‚¤ãƒ«ãŒæŒ‡å®šã—ã¦ã‚ã‚‹ã¨ã€
          Apache ãŒãƒ•ã‚¡ã‚¤ãƒ«è¨˜è¿°å­ (<cite>ファイルãƒãƒ³ãƒ‰ãƒ«</cite>ã¨ã‚‚呼ã°ã‚Œã¾ã™)
          を使ã„切ã£ã¦ã—ã¾ã†ã“ã¨ãŒã‚りã¾ã™ã€‚Apache ãŒä½¿ç”¨ã™ã‚‹ãƒ•ァイル
          記述å­ã®æ•°ã¯ã€å„エラーログファイルã«ã¤ã 1 ã¤ã€ä»–ã®ãƒ­ã‚°ãƒ•ァイルã®
          ディレクティブã«ã¤ã 1 ã¤ã€ã•らã«å†…部ã§ä½¿ç”¨ã™ã‚‹ 10 ã‹ã‚‰ 20ã€
          ã®åˆè¨ˆã«ãªã‚Šã¾ã™ã€‚Unix オペレーティングシステムã§ã¯ãƒ—ロセスã”ã¨ã«
          使用å¯èƒ½ãªãƒ•ァイル記述å­ã®æ•°ã‚’制é™ã—ã¦ã„ã¾ã™ã€‚ãŸã„ã¦ã„ã®å ´åˆã¯ 64 ã§ã€
          普通ã¯å¤§ããªå€¤ã®ãƒãƒ¼ãƒ‰ãƒªãƒŸãƒƒãƒˆã¾ã§å¢—ã‚„ã™ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>Apache ã¯å¿…è¦ã«å¿œã˜ã¦ä¸Šé™ã‚’拡大ã—よã†ã¨è©¦ã¿ã¾ã™ãŒã€
          以下ã®ã‚ˆã†ãªå ´åˆã«ã¯ã†ã¾ãã„ã‹ãªã„ã‹ã‚‚ã—れã¾ã›ã‚“。</p>
      
          <ol>
            <li>利用ã—ã¦ã„るシステム㧠<code>setrlimit()</code>
            ã‚·ã‚¹ãƒ†ãƒ ã‚³ãƒ¼ãƒ«ãŒæä¾›ã•れã¦ã„ãªã„。</li>
      
            <li>システム上㧠<code>setrlimit</code>(RLIMIT_NOFILE) ãŒå‹•作ã—ãªã„
            (ãŸã¨ãˆã° Solaris 2.3 ã®ã‚ˆã†ã«)。</li>
      
            <li>è¦æ±‚ã•れるファイル記述å­ã®æ•°ãŒ
            ãƒãƒ¼ãƒ‰ãƒªãƒŸãƒƒãƒˆã‚’è¶…ãˆã¦ã—ã¾ã†ã€‚</li>
            
            <li>システムã«ãƒ•ァイル記述å­ã«é–¢ã—ã¦åˆ¥ã®åˆ¶é™ãŒå­˜åœ¨ã—ã¦ã—ã¾ã£ã¦ã„る。
            ãŸã¨ãˆã°ã€stdio ストリームã§ã¯ãƒ•ァイル記述å­ã‚’ 256 以上使ãˆãªã„
            (Solaris 2)ã€ãªã©ã€‚</li>
          </ol>
      
          <p>å•題ãŒç™ºç”Ÿã—ãŸæ™‚ã«å–ã‚Šå¾—ã‚‹å¯¾å‡¦æ–¹æ³•ã¯æ¬¡ã®ã¨ãŠã‚Š:</p>
      
          <ul>
            <li>ãƒ­ã‚°ãƒ•ã‚¡ã‚¤ãƒ«ã®æ•°ã‚’減らã™ã€‚<code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
            セクションã§ãƒ­ã‚°ãƒ•ァイルを指定ã›ãšã€ãƒ¡ã‚¤ãƒ³ã®ãƒ­ã‚°ãƒ•ァイルã«ã®ã¿è¨˜éŒ²ã™ã‚‹ã€‚
            (ã“れã«é–¢ã™ã‚‹è©³ã—ã„æƒ…å ±ã¯ä»¥ä¸‹ã®<a href="#splitlogs">ログファイルã®åˆ†å‰²</a>を読んã§ãã ã•ã„。)</li>
      
            <li>
              ã‚‚ã—ã€å‰è¿°ã® 1 ã¾ãŸã¯ 2 ã®å ´åˆã§ã‚れã°ã€
              Apache ã‚’èµ·å‹•ã™ã‚‹å‰ã«ãƒ•ァイル記述å­ã‚’増やã—ã¾ã™ã€‚
              ãŸã¨ãˆã°æ¬¡ã®ã‚ˆã†ãªã‚¹ã‚¯ãƒªãƒ—トを使ã„ã¾ã™ã€‚
      
              <div class="example"><p><code>
                <code>#!/bin/sh<br />
                 ulimit -S -n 100<br />
                 exec httpd</code>
              </code></p></div>
            </li>
          </ul>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="splitlogs" id="splitlogs">ログファイルã®åˆ†å‰²</a></h2>
      
      <p>複数ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ãƒ­ã‚°ã‚’åŒã˜ãƒ­ã‚°ãƒ•ァイルã«åŽé›†ã—よã†ã¨ã—ã¦ã„ã‚‹ã¨ãã«ã¯ã€
      å„ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«ã¤ã„ã¦çµ±è¨ˆçš„ãªè§£æžã‚’実行ã™ã‚‹ãŸã‚ã«å¾Œã§ãƒ­ã‚°ãƒ•ァイルを
      分割ã—ãŸããªã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。ã“れã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ã—ã¦å®Ÿç¾ã§ãã¾ã™ã€‚</p>
      
      <p>ã¾ãšã€ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®æƒ…報をログã®ã‚¨ãƒ³ãƒˆãƒªã«è¿½åŠ ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
      ã“れ㯠<code class="directive"><a href="../mod/mod_log_config.html#logformat">LogFormat</a></code>
      ディレクティブ㮠<code>%v</code> 変数を使ã†ã“ã¨ã§ã§ãã¾ã™ã€‚
      ã“れをログã®ãƒ•ォーマット文字列ã®å…ˆé ­ã«è¿½åŠ ã—ã¾ã™:</p>
      
      <div class="example"><p><code>
      LogFormat "%v %h %l %u %t \"%r\" %&gt;s %b" vhost<br />
      CustomLog logs/multiple_vhost_log vhost
      </code></p></div>
      
      <p>ã“れ㯠common log format ã®ãƒ­ã‚°ã‚’作æˆã—ã¾ã™ãŒã€ãれãžã‚Œã®è¡Œã®å…ˆé ­ã«
      æ­£è¦åŒ–ã•れãŸãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®åå‰
      (<code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>
      ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«æ›¸ã‹ã‚Œã¦ã„ã‚‹ã‚‚ã®) ãŒä»˜åŠ ã•れã¾ã™ã€‚
      (ログファイルã®ã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºã®è©³ç´°ã«ã¤ã„ã¦ã¯ <a href="../mod/mod_log_config.html#formats">Custom Log Formats</a> ã‚’
      読んã§ãã ã•ã„。)</p>
      
      <p>ログファイルをå„部分 (ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆæ¯Žã« 1 ファイル) ã«åˆ†ã‘ãŸã„ã¨ãã¯ã€
      <code><a href="../programs/other.html">split-logfile</a></code>
      を使ã£ã¦è¡Œãªã†ã“ã¨ãŒã§ãã¾ã™ã€‚プログラム㯠Apache é…布㮠
      <code>support</code> ディレクトリã«ã‚りã¾ã™ã€‚</p>
      
      <p>以下ã®ã‚ˆã†ãªã‚³ãƒžãƒ³ãƒ‰ã§ã“ã®ãƒ—ログラムを実行ã—ã¾ã™:</p>
      
      <div class="example"><p><code>
      split-logfile &lt; /logs/multiple_vhost_log
      </code></p></div>
      
      <p>ã“ã®ãƒ—ログラムã¯ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ãƒ­ã‚°ãƒ•ァイルã®åå‰ã¨ã¨ã‚‚ã«å®Ÿè¡Œã•れã€
      ログファイルã«ç¾ã‚Œã‚‹ãれãžã‚Œã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆæ¯Žã«ä¸€ã¤ã®ãƒ•ァイルを作æˆã—ã¾ã™ã€‚
      ãれãžã‚Œã®ãƒ•ァイル㯠<code>ホストå.log</code> ã¨ã„ã†åå‰ã«ãªã‚Šã¾ã™ã€‚</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/vhosts/fd-limits.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/fd-limits.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/fd-limits.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/fd-limits.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/fd-limits.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/fd-limits.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/details.html.tr.utf8������������������������������������������������0000644�0000000�0000050�00000046211�13447004010�020610� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Sanal Konak Eşlemenin Derinliğine İncelenmesi - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Sanal Konaklar</a></div><div id="page-content"><div id="preamble"><h1>Sanal Konak Eşlemenin Derinliğine İncelenmesi</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/vhosts/details.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/details.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/details.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/details.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Bu belgede, bir istek aldığında Apache’nin hangi sanal konak
            ile hizmet sunacağına nasıl karar verdiği açıklanmaya çalışılmıştır.</p>
      
          <p>Çoğu kullanıcı hangi türü kullanacağına karar vermek için önce <a href="name-based.html#namevip">İsme dayalı ve IP’ye dayalı Sanal
            Konak</a> bölümünü, sonra <a href="name-based.html">İsme Dayalı Sanal
            Konak Desteği</a> veya <a href="ip-based.html">IP’ye Dayalı Sanal Konak
            Desteği</a> belgesini okumalı ve <a href="examples.html">bazı
            örneklere</a> göz atmalıdır.</p>
      
          <p>Bunlardan sonra tüm ayrıntıları anlamak isterseniz tekrar bu sayfaya
            gelebilirsiniz.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#configparsing">Yapılandırma Dosyası</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#hostmatching">Sanal Konağın Belirlenmesi</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#tips">İpuçları</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="ip-based.html">IP’ye Dayalı Sanal Konak Desteği</a></li><li><a href="name-based.html">İsme Dayalı Sanal Konak Desteği</a></li><li><a href="examples.html">Çok Kullanılan Sanal Konak Örnekleri</a></li><li><a href="mass.html">Devingen olarak Yapılandırılan Kitlesel Sanal Barındırma</a></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configparsing" id="configparsing">Yapılandırma Dosyası</a></h2>
      
          <p>Bu belgede <code>&lt;VirtualHost&gt;</code> bölümleri dışında kalan
            tanımlardan bahsederken <em>ana_sunucu</em> diyeceğiz.</p>
      
          <p><code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
            bölümlerindeki tanımlamalardan bahsederken <em>sankonlar</em>
            diyeceÄŸiz.</p>
      
          <p>Her <code>VirtualHost</code> bölümü en az bir adres ve isteğe bağlı
            portlar içerir.</p>
      
          <p>Sanal konak tanımlarının içindeki IP adreslerinin yerine konak isimleri
            kullanılabilir, fakat bunlar başlatma sırasında çözümleneceklerinden
            çözümlemedeki bir başarısızlık bu sanal konak tanımlarının yoksayılması
            ile sonuçlanacaktır. Bu bakımdan önerilmez.</p>
      
          <p><code>VirtualHost</code> yönergesinde görünen her adresin seçimlik bir
            portu olabilir. EÄŸer bir port belirtilmemiÅŸse, port olarak <code>*</code>
            belirtilmiş gibi bütün portlar dinlenir.</p>
      
          <p>(<code>VirtualHost</code> yönergesinde belirtilen port numaraları Apache
            httpd'nin dinleyeceği port numaraları olarak yorumlanmaz, sadece bir
            isteği işleme sokarken hangi <code>VirtualHost</code> bölümünün
            seçileceğini belirlerler. Sunucunun dinleyeceği adresleri ve portları
            belirtmek için <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code>
            yönergesini kullanın.)</p>
      
          <p>Adreslerin tamamını (DNS sorgularındaki çoklu sonuçlar dahil) içeren
            kümeye <em>sankonların adres kümesi</em> denir.</p>
      
          <p>Apache httpd, bir IP adresi ve port birleşimi için en belirgin
            eşleşmelerin listelendiği çok sayıdaki sanal konak arasında ayırdedici
            olarak istemci tarafından sağlanan HTTP <code>Host</code> başlığını
            kullanır.</p>
      
          <p><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> yönergesi sunucu
            tanımının içinde herhangi bir yerde görünebilirse de her göründüğü yerde
            bir öncekini iptal eder. Hiç <code>ServerName</code> belirtilmemişse,
            Apache httpd, sunucu ismini sunucunun IP adresinden saptamaya
            çalışır.</p>
      
          <p>Belli bir IP adresi ve port çifti için yapılandırma dosyasındaki ilk
            isme dayalı sankon önemlidir, çünkü başka hiçbir sankonun ServerName veya
            ServerAlias yönergesi ile eşleşmeyen bu adres ve port çifti için alınmış
            tüm isteklerde bu sankon kullanılır. Ayrıca, sunucunun <a class="glossarylink" href="../glossary.html#servernameindication" title="sözlüğe bakınız">Sunucu İsmi Belirtimi</a>ni
            desteklemediği durumlarda tüm SSL bağlantıları için bu sankon
            kullanılır.</p>
      
          <p><code>VirtualHost</code> içindeki isimlerin sırası (jokersiz) bir
            <code>ServerAlias</code> gibi ele alınır (fakat hiçbir
            <code>ServerAlias</code> yönergesi ile geçersiz kılınmaz).</p>
      
          <p>Her sankon için bazı değerler öntanımlı olarak atanır. Bunların
            başlıcaları:</p>
      
          <ol>
            <li>Sankon bir <code class="directive"><a href="../mod/core.html#serveradmin">ServerAdmin</a></code>
              yönergesi içermiyorsa,
              <code class="directive"><a href="../mod/core.html#timeout">Timeout</a></code>,
              <code class="directive"><a href="../mod/core.html#keepalivetimeout">KeepAliveTimeout</a></code>,
              <code class="directive"><a href="../mod/core.html#keepalive">KeepAlive</a></code>,
              <code class="directive"><a href="../mod/core.html#maxkeepaliverequests">MaxKeepAliveRequests</a></code>,
              <code class="directive"><a href="../mod/mpm_common.html#receivebuffersize">ReceiveBufferSize</a></code> ve
              <code class="directive"><a href="../mod/mpm_common.html#sendbuffersize">SendBufferSize</a></code> yönergeleri için
              öntanımlı değerler ana_sunucudaki eşdeğerlerinden miras alınır. (Yani,
              bu yönergeler için ana_sunucudaki son değerler miras alınır.)</li>
      
            <li>Sankon için öntanımlı dizin erişim izinlerinin tanımlandığı "arama
              öntanımlıları" ana_sunucununkilere katılır. Buna her modülün dizinlere
              özgü yapılandırma bilgileri dahildir.</li>
      
            <li>Her modülün ana_sunucudaki sunuculara özgü yapılandırmaları sankon
              sunucusununkilerle katıştırılır.</li>
          </ol>
      
          <p>Esasen, ana_sunucu, sankon sunucularını oluştururken bir öntanımlılar
            listesi veya öntanımlı değerlere dayanak noktası olarak ele alınır.
            Fakat bu ana_sunucu tanımlarının yapılandırma dosyasındaki yerlerinin
            saptanmasının konumuzla ilgisi yoktur; ana_sunucu yapılandırmasının
            tamamı son katıştırma yapılacağı zaman çözümlenir. Bu bakımdan,
            ana_sunucu tanımlarından bir kısmı sankon tanımlarından sonra yer alsa
            bile sankon tanımlarında etkili olabilir.</p>
      
          <p>Eğer, bu noktada ana_sunucu hiçbir <code>ServerName</code> satırı
            içermiyorsa <code class="program"><a href="../programs/httpd.html">httpd</a></code> programının çalıştığı makinenin
            konak ismi öntanımlıdır. Ana_sunucunun <code>ServerName</code> için
            yaptığı DNS sorgusundan dönen IP adreslerine <em>ana_sunucu adres
            kümesi</em> diyoruz.</p>
      
          <p>Tanımsız <code>ServerName</code> alanları için bir isme dayalı sankon,
            sankonu tanımlayan <code>VirtualHost</code> yönergesinde belirtilen ilk
            adresi öntanımlı değer kabul eder.</p>
      
          <p>Sihirli <code>_default_</code> sankonları için ana_sunucunun
            <code>ServerName</code> değeri kullanılır.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="hostmatching" id="hostmatching">Sanal Konağın Belirlenmesi</a></h2>
      
          <p>Sunucu bir istek durumunda hangi sankonun kullanılacağını şöyle
            belirler:</p>
      
          <h3><a name="hashtable" id="hashtable">IP adresi aranır</a></h3>
      
          <p>Bir adres ve port için bağlantı ilk alındığında Apache httpd tüm
            <code>VirtualHost</code> tanımlarında bu çifti arar.</p>
      
          <p>Arama başarısız olursa <code>*</code> (herşey) eşleşmelerine
            bakılır.</p>
      
          <p>Bir eÅŸleÅŸme bulunamazsa hizmet ana sunucudan sunulur.</p>
      
          <p>Arama sonucunda bu IP adresi için bulunmuş <code>VirtualHost</code>
            tanımları varsa sonraki adım hizmetin bir IP’ye dayalı sankondan mı yoksa
            isme dayalı bir sankondan mı sunulacağına karar vermektir.</p>
      
          
      
          <h3><a name="ipbased" id="ipbased">IP’ye dayalı sankon</a></h3>
      
          <p>Eğer en iyi eşleşme olarak saptanmış IP adresi ve port çiftini içeren
            sadece bir <code>VirtualHost</code> yönergesi varsa artık karar vermek
            için başka bir şey yapmaya gerek yoktur ve istek bu sankondan
            sunulur.</p>
      
          
      
          <h3><a name="namebased" id="namebased">İsme dayalı sankon</a></h3>
      
          <p>Eğer en iyi eşleşme olarak saptanmış IP adresi ve port çiftini içeren
            birden fazla <code>VirtualHost</code> yönergesi varsa, sonraki
            adımlardaki "liste" eşleşen sankonların listesi olup sankonlar listede
            yapılandırma dosyasındaki yerlerine göre sıralanırlar.</p>
      
          <p>Bağlantı SSL kullanıyorsa, sunucunun <a class="glossarylink" href="../glossary.html#servernameindication" title="sözlüğe bakınız">Sunucu İsmi Belirtimi</a>ni
            desteklediği durumlarda SSL istemci uzlaşımı, istenen konak ismiyle
            birlikte TLS eklentisini de içeriyorsa, konak ismi, SSL olmayan
            bağlantılardaki <code>Host:</code> başlığı kullanımına benzer şekilde
            aşağıdaki gibi kullanılır. Aksi takdirde, SSL bağlantıları için adresin
            eşleştiği ilk isme dayalı sankon kullanılır. Sunucunun bağlantı için
            hangi sertifikayı kullanacağını sankon belirlediği için bu önemlidir.</p>
      
          <p>İstek bir <code>Host:</code> başlık alanı içeriyorsa, listede
            <code>ServerName</code> veya <code>ServerAlias</code> alanı başlık alanı
            ile eşleşen ilk sankona bakılır. <code>Host:</code> alanı bir port
            içerebilirse de Apache httpd bunu yoksayarak daima istemcinin isteği
            gönderdiği portu gerçek port kabul eder.</p>
      
          <p>Yapılandırma dosyasındaki belirtilen IP adresiyle eşleşen ilk sankon en
            yüksek önceliğe sahiptir ve sunucu ismi bilinmeyen ve (bir HTTP/1.0
            isteği gibi) <code>Host:</code> başlık alanı içermeyen istekleri de
            yakalar.</p>
      
          
      
          <h3><a name="persistent" id="persistent">Kalıcı bağlantılar</a></h3>
      
          <p>Yukarıda açıklanan <em>IP araması</em> belli bir TCP/IP oturumunda
            <em>bir</em> defaya mahsus yapıldığı halde bir kalıcı/KeepAlive bağlantı
            sırasında <em>her</em> istek için ayrı bir <em>arama</em> yapılır. Başka
            bir deyişle, bir istemci tek bir kalıcı bağlantı üzerinde farklı isme
            dayalı sankonlardan sayfa talebinde bulunabilir.</p>
      
          
      
          <h3><a name="absoluteURI" id="absoluteURI">Mutlak URI</a></h3>
      
          <p>Eğer istekte belirtilen URI bir mutlak URI ise ve istek yapılan konak
            ismi ve port ana sunucuyla veya sankonlardan biriyle eÅŸleÅŸiyorsa,
            şema/konakadı/port öneki ayrılır ve elde edilen göreli URI ilgili
            sankondan veya ana sunucudan sunulur. EÄŸer bir eÅŸleÅŸme saÄŸlanamazsa
            URI’ye dokunulmaz ve istek bir vekil isteği olarak ele alınır.</p>
      
      
      <h3><a name="observations" id="observations">İzlenimler</a></h3>
      
          <ul>
            <li>İsme dayalı sanal konak işlemleri, sunucunun en iyi eşleşen IP'ye
              dayalı sanal konağı seçmesinin ardından uygulanır.</li>
      
            <li>İstemcinin hangi IP adresine bağlandığını umursamıyorsanız, sanal
              konaklarınızda adres olarak "*" kullanın, böylece yapılandırılmış
              sankonların hepsine isme dayalı sanal konak işlemleri uygulanır.</li>
      
            <li>Bir IP’ye dayalı sankon için asla <code>ServerAlias</code> ve
              <code>ServerPath</code> değerine bakılmaz.</li>
      
            <li>Sıralama sadece aynı IP adresine sahip isme dayalı sankonlar arasında
              önemlidir. Aynı adres kümesine mensup isme dayalı sankonlardan
              yapılandırma dosyasında ilk sırada yer alanı en yüksek önceliğe
              sahiptir.</li>
      
            <li>Eşleştirme işlemi sırasında <code>Host:</code>
              başlık alanında belirtilen port asla kullanılmaz. Apache httpd daima
              istemcinin isteği gönderdiği gerçek portu kullanır.</li>
      
            <li>Eğer aynı IP adresine sahip IP’ye dayalı iki sankon varsa, bunlara
              örtük olarak isme dayalı sanal konak işlemleri uygulanır. 2.3.11
              sürümünden beri yeni davranış şekli budur.</li>
      
            <li>Ana_sunucunun bir isteğe hizmet sunabilmesi için istemcinin
              bağlandığı IP adresi ve port hiçbir yerde belirtilmemiş ve
              hiçbir sankon ile eşleşme sağlanamamış olmalıdır. Başka bir deyişle,
              istemcinin bağlandığı port ile eşleşen bir <code>_default_</code>
              sankon olmadıkça adres ve port belirtmeyen bir isteğe ana_sunucu yanıt
              verecektir.</li>
      
            <li><code>VirtualHost</code> yönergelerinde asla DNS isimleri
              belirtmemelisiniz. Aksi takdirde sunucuyu başlatma sırasında DNS
              sorgusu yapmaya zorlamış olursunuz. Listelenen tüm alanlar için DNS
              üzerinde tam denetime sahip değilseniz bu ayrıca bir güvenlik
              tehdidine yol açar. Bu konuda daha ayrıntılı bilgi edinmek için <a href="../dns-caveats.html">DNS ile ilgili konular ve Apache</a>
              belgesine bakınız.</li>
      
            <li><code>ServerName</code> her sankon için ayrı ayrı belirlenmiş
              olmalıdır. Aksi takdirde her sankon için bir DNS sorgusu gerekir.</li>
            </ul>
            
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="tips" id="tips">İpuçları</a></h2>
      
          <p><a href="../dns-caveats.html#tips">DNS konuları</a> sayfasındaki
            ipuçlarına ilaveten burada da bazı ipuçları bulacaksınız:</p>
      
          <ul>
            <li>Ana sunucu tanımlarının hepsini <code>VirtualHost</code>
              tanımlarının öncesinde bitirin. Bu ayrıca yapılandırmanızın
              okunabilirliğini de arttırır; <code>VirtualHost</code> tanımlarının
              sonrasına sarkan yapılandırmaların katıştırılması işlemi tüm sanal
              konakları etkileyebilen tanımlar bakımından bir
              karışıklığa/belirsizliğe sebep olabilir.)</li>
          </ul>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/vhosts/details.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/details.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/vhosts/details.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/details.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/details.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/ip-based.html�������������������������������������������������������0000644�0000000�0000050�00000000737�13362070302�017344� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: ip-based.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: ip-based.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: ip-based.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: ip-based.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: ip-based.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ���������������������������������httpd-2.4.41/docs/manual/vhosts/index.html.ko.euc-kr������������������������������������������������0000644�0000000�0000050�00000017037�13412755316�020600� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¾ÆÆÄÄ¡ °¡»óÈ£½ºÆ® ¹®¼­ - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>¾ÆÆÄÄ¡ °¡»óÈ£½ºÆ® ¹®¼­</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../de/vhosts/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/vhosts/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      
          <p><cite>°¡»óÈ£½ºÆ® (Virtual Host)</cite>´Â ÇÑ ÄÄÇ»ÅÍ¿¡¼­
          ¿©·¯ À¥»çÀÌÆ®¸¦ (¿¹¸¦ µé¾î, <code>www.company1.com</code>°ú
          <code>www.company2.com</code>) ¼­ºñ½ºÇÔÀ» ¶æÇÑ´Ù.
          °¡»óÈ£½ºÆ®¿¡´Â °¢ À¥»çÀÌÆ®¸¶´Ù ´Ù¸¥ IP ÁÖ¼Ò¸¦ »ç¿ëÇÏ´Â
          "<a href="ip-based.html">IP±â¹Ý (IP-based)</a>" ¹æ½Ä°ú ÇÑ
          IP ÁÖ¼Ò´ç ¿©·¯ À̸§À» °¡Áö´Â "<a href="name-based.html">À̸§±â¹Ý (name-based)</a>" ¹æ½ÄÀÌ
          ÀÖ´Ù. ¿©·¯ »çÀÌÆ®µéÀÌ °°Àº ¼­¹ö¿¡¼­ µ¹°íÀÖ´Ù´Â »ç½ÇÀ» À¥»ç¿ëÀÚ´Â
          ´«Ä¡Ã¤Áö ¸øÇÑ´Ù.</p>
      
          <p>¾ÆÆÄÄ¡´Â ±âº»À¸·Î IP±â¹Ý °¡»óÈ£½ºÆ®¸¦ Áö¿øÇÑ ÃÊâ±â
          ¼­¹öµéÁß Çϳª´Ù. ¾ÆÆÄÄ¡ ¹öÀü 1.1 ÀÌ»óÀº IP±â¹Ý°ú À̸§±â¹Ý
          °¡»óÈ£½ºÆ®¸¦ ¸ðµÎ Áö¿øÇÑ´Ù. À̸§±â¹Ý °¡»óÈ£½ºÆ®¸¦
          <em>È£½ºÆ®±â¹Ý (host-based)</em> ¶Ç´Â <em>ºñIP °¡»óÈ£½ºÆ®
          (non-IP virtual hosts)</em>¶ó°íµµ ºÎ¸¥´Ù.</p>
      
          <p>´ÙÀ½Àº ¾ÆÆÄÄ¡ ¹öÀü 1.3 ÀÌ»óÀÇ °¡»óÈ£½ºÆ® Áö¿øÀ» ÀÚ¼¼È÷
          ¼³¸íÇÑ ¹®¼­µéÀÌ´Ù.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#support">°¡»óÈ£½ºÆ® Áö¿ø</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#directives">¼³Á¤ Áö½Ã¾î</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_vhost_alias.html">mod_vhost_alias</a></code></li><li><a href="name-based.html">À̸§±â¹Ý °¡»óÈ£½ºÆ®</a></li><li><a href="ip-based.html">IP±â¹Ý °¡»óÈ£½ºÆ®</a></li><li><a href="examples.html">°¡»óÈ£½ºÆ® ¿¹</a></li><li><a href="fd-limits.html">ÆÄÀϱâ¼úÀÚ ÇѰè</a></li><li><a href="mass.html">´ë·®ÀÇ °¡»óÈ£½ºÆ®</a></li><li><a href="details.html">°¡»óÈ£½ºÆ® ã±â¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ¼³¸í</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="support" id="support">°¡»óÈ£½ºÆ® Áö¿ø</a></h2>
      
          <ul>
            <li><a href="name-based.html">À̸§±â¹Ý °¡»óÈ£½ºÆ®</a>
            (IP ÁÖ¼Ò´ç ¿©·¯ À¥»çÀÌÆ®)</li>
            <li><a href="ip-based.html">IP±â¹Ý °¡»óÈ£½ºÆ®</a> (°¢
            À¥»çÀÌÆ®¸¶´Ù IP ÁÖ¼Ò)</li>
            <li><a href="examples.html">ÀϹÝÀûÀÎ °¡»óÈ£½ºÆ® ¿¹</a></li>
            <li><a href="fd-limits.html">ÆÄÀϱâ¼úÀÚ(file descriptor)
            ÇѰè</a> (Áï, <em>³Ê¹« ¸¹Àº ·Î±×ÆÄÀÏ</em>)</li>
            <li><a href="mass.html">´ë·®ÀÇ °¡»óÈ£½ºÆ®¸¦ µ¿ÀûÀ¸·Î
            ¼³Á¤Çϱâ</a></li>
            <li><a href="details.html">°¡»óÈ£½ºÆ® ã±â¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ
            ¼³¸í</a></li>
          </ul>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="directives" id="directives">¼³Á¤ Áö½Ã¾î</a></h2>
      
          <ul>
            <li><code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#namevirtualhost">NameVirtualHost</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#servername">ServerName</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code></li>
            <li><code class="directive"><a href="../mod/core.html#serverpath">ServerPath</a></code></li>
          </ul>
      
          <p>°¡»óÈ£½ºÆ® ¼³Á¤À» Å×½ºÆ®ÇÒ¶§ ¾ÆÆÄÄ¡ÀÇ <code>-S</code>
          ¸í·ÉÇà ¿É¼ÇÀÌ À¯¿ëÇÏ´Ù. Áï, ´ÙÀ½°ú °°ÀÌ ½ÇÇàÇÑ´Ù:</p>
      
          <div class="example"><p><code>
          /usr/local/apache2/bin/httpd -S
          </code></p></div>
      
          <p>ÀÌ ¸í·É¾î´Â ¾ÆÆÄÄ¡°¡ ÀÐÀº ¼³Á¤ÆÄÀÏ¿¡ ´ëÇÑ
          Á¤º¸¸¦ Ãâ·ÂÇÑ´Ù. IP ÁÖ¼Ò¿Í ¼­¹ö¸íÀ» ÀÚ¼¼È÷ »ìÆìº¸¸é ¼³Á¤¿¡¼­
          ½Ç¼ö¸¦ ¹ß°ßÇϴµ¥ µµ¿òÀÌ µÉ °ÍÀÌ´Ù. (´Ù¸¥ ¸í·ÉÇà ¿É¼ÇµéÀº
          <a href="../programs/httpd.html">httpd ÇÁ·Î±×·¥ ¹®¼­</a>¸¦
          Âü°íÇ϶ó.)</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../de/vhosts/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="../en/vhosts/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/vhosts/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/vhosts/fd-limits.html.ko.euc-kr��������������������������������������������0000644�0000000�0000050�00000020662�13412755316�021357� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>ÆÄÀϱâ¼úÀÚ(file descriptor) ÇѰè - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">°¡»óÈ£½ºÆ®</a></div><div id="page-content"><div id="preamble"><h1>ÆÄÀϱâ¼úÀÚ(file descriptor) ÇѰè</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/vhosts/fd-limits.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/fd-limits.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/fd-limits.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/fd-limits.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/fd-limits.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      
          <p>°¡»óÈ£½ºÆ®¸¦ ¸¹ÀÌ »ç¿ëÇÏ°í °¢ °¡»óÈ£½ºÆ®¿¡ ¼­·Î ´Ù¸¥
          ·Î±×ÆÄÀÏÀ» ÁöÁ¤Çϸé, ¾ÆÆÄÄ¡°¡ »ç¿ë°¡´ÉÇÑ ÆÄÀϱâ¼úÀÚ(file
          descriptor, ÈçÈ÷ <cite>ÆÄÀÏÇÚµé(file handle)</cite>À̶ó°í
          ºÎ¸§)¸¦ ´Ù ½á¹ö¸± ¼ö ÀÖ´Ù. ¾ÆÆÄÄ¡°¡ »ç¿ëÇÏ´Â ÆÄÀϱâ¼úÀÚÀÇ
          ÃÑ °³¼ö´Â ¿À·ù ·Î±×ÆÄÀÏ´ç ÇѰ³, ´Ù¸¥ ·Î±×ÆÄÀÏ Áö½Ã¾î´ç
          ÇѰ³, Ãß°¡·Î ³»ºÎ¿ëµµ·Î 10-20°³¸¦ ´õÇÑ ¼ö´Ù. À¯´Ð½º ¿î¿µÃ¼Á¦´Â
          ÇÁ·Î¼¼½º°¡ »ç¿ëÇÒ ¼ö ÀÖ´Â ÆÄÀϱâ¼úÀÚ °³¼ö¸¦ Á¦ÇÑÇÑ´Ù. ÀÌ ÇѰè´Â
          º¸Åë 64°³·Î, º¸Åë À̺¸´Ù Å« hard-limit±îÁö ´Ã¸± ¼ö ÀÖ´Ù.</p>
      
          <p>¾ÆÆÄÄ¡´Â ÀÌ ÇѰ踦 ÇÊ¿äÇѸ¸Å­ ´Ã¸®·Á°í ÇÏÁö¸¸, ½ÇÆÐÇÏ´Â
          °æ¿ì°¡ ÀÖ´Ù:</p>
      
          <ol>
            <li>½Ã½ºÅÛÀÌ <code>setrlimit()</code> ½Ã½ºÅÛÈ£ÃâÀ»
            Á¦°øÇÏÁö ¾Ê´Â´Ù.</li>
      
            <li>(Solaris 2.3°ú °°ÀÌ) ½Ã½ºÅÛ¿¡¼­
            <code>setrlimit(RLIMIT_NOFILE)</code> ÇÔ¼ö°¡ µ¿ÀÛÇÏÁö
            ¾Ê´Â´Ù.</li>
      
            <li>ÇÊ¿äÇÑ ÆÄÀϱâ¼úÀÚ °³¼ö°¡ hard limit º¸´Ù ¸¹´Ù.</li>
            
            <li>(Solaris 2) ½Ã½ºÅÛÀÌ stdio ½ºÆ®¸²À» 256ÀÌÇÏÀÇ
            ÆÄÀϱâ¼úÀÚ¸¸À» »ç¿ëÇϵµ·Ï Á¦ÇÑÇÏ´Â µî ÆÄÀϱâ¼úÀÚ¿¡
            Á¦¾àÀ» °¡ÇÑ´Ù.</li>
          </ol>
      
          <p>ÀÌ °æ¿ì ÇØ°áÃ¥Àº:</p>
      
          <ul>
            <li>·Î±×ÆÄÀÏ °³¼ö¸¦ ÁÙÀδÙ. <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> ¼½¼Ç¿¡¼­ ·Î±×ÆÄÀÏÀ»
            ÁöÁ¤ÇÏÁö ¾Ê°í ÁÖ ·Î±×ÆÄÀÏÀ» »ç¿ëÇÑ´Ù. (´õ ÀÚ¼¼ÇÑ ¹æ¹ýÀº
            ¾Æ·¡ <a href="#splitlogs">·Î±×ÆÄÀÏ ³ª´©±â</a>¸¦ Âü°íÇ϶ó.)</li>
      
            <li>
              »ç¿ëÇÏ´Â ½Ã½ºÅÛÀÌ (À§ÀÇ) 1¹øÂ°³ª 2¹øÂ° °æ¿ì¿¡ ÇØ´çÇÑ´Ù¸é,
              ´ÙÀ½°ú °°Àº ½ºÅ©¸³Æ®·Î ¾ÆÆÄÄ¡¸¦ ½ÃÀÛÇϱâ Àü¿¡ ÆÄÀϱâ¼úÀÚ
              ÇѰ踦 ´Ã¸°´Ù.
      
              <div class="example"><p><code>
                <code>#!/bin/sh<br />
                 ulimit -S -n 100<br />
                 exec httpd</code>
              </code></p></div>
            </li>
          </ul>
      
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="splitlogs" id="splitlogs">·Î±×ÆÄÀÏ ³ª´©±â</a></h2>
      
      <p>¿©·¯ °¡»óÈ£½ºÆ®°¡ °°Àº ·Î±×ÆÄÀÏÀ» »ç¿ëÇÑ´Ù¸é ³ªÁß¿¡ °¢
      °¡»óÈ£½ºÆ®ÀÇ Åë°èºÐ¼®À» À§ÇØ ·Î±×ÆÄÀÏÀ» ³ª´©°í ½ÍÀ» °ÍÀÌ´Ù.
      ÀÌ ÀÛ¾÷Àº ´ÙÀ½°ú °°ÀÌ ÇÒ ¼ö ÀÖ´Ù.</p>
      
      <p>¸ÕÀú ·Î±× Ç׸ñ¿¡ °¡»óÈ£½ºÆ® Á¤º¸¸¦ Ãß°¡ÇÑ´Ù. À̸¦ À§ÇØ
      <code class="directive"><a href="../mod/mod_log_config.html#logformat">LogFormat</a></code>
      Áö½Ã¾î¿Í <code>%v</code> º¯¼ö¸¦ »ç¿ëÇÑ´Ù. ÀÌ º¯¼ö¸¦ ·Î±×
      Çü½Ä¹®ÀÚ¿­ ¾Õ¿¡ Ãß°¡ÇÑ´Ù:</p>
      
      <div class="example"><p><code>
      LogFormat "%v %h %l %u %t \"%r\" %&gt;s %b" vhost<br />
      CustomLog logs/multiple_vhost_log vhost
      </code></p></div>
      
      <p>±×·¯¸é common ·Î±×Çü½Ä ¾Õ¿¡ (<code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> Áö½Ã¾î¿¡ ³ª¿À´Â) Á¤±Ô
      °¡»óÈ£½ºÆ®¸¦ Æ÷ÇÔÇÏ¿© ·Î±×ÆÄÀÏÀ» ±â·ÏÇÑ´Ù. (·Î±×ÆÄÀÏ
      »ç¿ëÀÚÁ¤ÀÇ¿¡ °üÇÑ ³»¿ëÀº <code class="directive"><a href="../mod/mod_log_config.html#»ç¿ëÀÚÁ¤ÀÇ ·Î±×Çü½Ä">»ç¿ëÀÚÁ¤ÀÇ ·Î±×Çü½Ä</a></code>À»
      Âü°íÇ϶ó.)</p>
      
      <p>·Î±×ÆÄÀÏÀ» (°¡»óÈ£½ºÆ®´ç ÇÑ ÆÄÀϾ¿) ³ª´©°í ½Í´Ù¸é <code><a href="../programs/other.html">split-logfile</a></code> ÇÁ·Î±×·¥À»
      »ç¿ëÇÑ´Ù. ÀÌ ÇÁ·Î±×·¥Àº ¾ÆÆÄÄ¡ ¹èÆ÷º»ÀÇ <code>support</code>
      µð·ºÅ丮¿¡ ÀÖ´Ù.</p>
      
      <p>´ÙÀ½°ú °°ÀÌ ÇÁ·Î±×·¥À» ½ÇÇàÇÑ´Ù:</p>
      
      <div class="example"><p><code>
      split-logfile &lt; /logs/multiple_vhost_log
      </code></p></div>
      
      <p>°¡»óÈ£½ºÆ® ·Î±×ÆÄÀÏÀ» °¡Áö°í ÀÌ ÇÁ·Î±×·¥À» ½ÇÇàÇÏ¸é ·Î±×ÆÄÀÏ¿¡
      ³ª¿À´Â °¢ °¡»óÈ£½ºÆ®´ç ÆÄÀÏÀ» Çϳª¾¿ ¸¸µç´Ù. °¢°¢ÀÇ ÆÄÀϸíÀº
      <code>hostname.log</code>ÀÌ´Ù.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/vhosts/fd-limits.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/vhosts/fd-limits.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/vhosts/fd-limits.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/vhosts/fd-limits.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/vhosts/fd-limits.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/vhosts/fd-limits.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������httpd-2.4.41/docs/manual/install.html.fr.utf8�������������������������������������������������������0000644�0000000�0000050�00000072656�13412755316�017317� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Compilation et installation - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Compilation et installation</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./de/install.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/install.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/install.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/install.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/install.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/install.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/install.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Ce document couvre l'installation et la compilation du serveur
          HTTP Apache
          sur les systèmes Unix et similaires seulement. Pour la compilation et
          l'installation sous Windows, voir <a href="platform/windows.html">Utiliser le serveur HTTP Apache avec Microsoft
          Windows</a> et <a href="platform/win_compiling.html">Compilation
          d'Apache sous Microsoft Windows</a>. Pour les autres plateformes, se
          référer à la documentation par
           <a href="platform/">plateforme</a>.</p>
      
          <p>Apache httpd utilise <code>libtool</code> et <code>autoconf</code>
          afin de créer un environnement de construction similaire à la plupart
          des projets Open Source .</p>
      
          <p>Si vous effectuez une mise à jour depuis une version mineure vers
          la suivante (par exemple, 2.4.9 à 2.4.10), veuillez passer à la section
          <a href="#upgrading">mise à jour</a>.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#overview">Aperçu pour les plus pressés</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#requirements">Prérequis</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#download">Téléchargement</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#extract">Extraction</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#configure">Configuration de l'arborescence des sources</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#compile">Construction</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#install">Installation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#customize">Personnalisation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#test">Test</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#upgrading">Mise à jour</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#thirdp">Paquets tiers</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="programs/configure.html">Configuration de l'arborescence
      	des sources</a></li><li><a href="invoking.html">Démarrer Apache httpd</a></li><li><a href="stopping.html">Arrêt et redémarrage</a></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">Aperçu pour les plus pressés</a></h2>
      
          <dl>
          <dt>Installation sous Fedora/CentOS/Red Hat Enterprise Linux</dt>
          <dd>
          <pre class="prettyprint lang-">sudo yum install httpd
      sudo service httpd start</pre>
      
      
          <div class="warning">Les dernières versions de ces distributions préfèrent
          <code>dnf</code> à <code>yum</code>. Voir la <a href="https://fedoraproject.org/wiki/Apache_HTTP_Server">documentation du
          projet Fedora</a> pour des informations spécifiques à cette plateforme.</div>
          </dd>
      
          <dt>Installation sous Ubuntu/Debian</dt>
          <dd>
      <pre class="prettyprint lang-">sudo apt install apache2
      sudo service apache2 start</pre>
      
      
          <div class="warning">Voir la <a href="https://help.ubuntu.com/lts/serverguide/httpd.html">documentation
          Ubuntu</a> pour des informations spécifiques à cette plateforme.</div>
      
          </dd>
      
          <dt>Installation à partir des sources</dt>
          <dd>
      
          <table>
            
            <tr>
              <td><a href="#download">Téléchargement</a></td>
      
              <td>Téléchargez la dernière version depuis <a href="http://httpd.apache.org/download.cgi#apache24">http://httpd.apache.org/download.cgi</a>
              </td>
            </tr>
      
            <tr>
              <td><a href="#extract">Extraction</a></td>
      
              <td><code>$ gzip -d httpd-<em>NN</em>.tar.gz<br />
               $ tar xvf httpd-<em>NN</em>.tar<br />
               $ cd httpd-<em>NN</em></code></td>
            </tr>
      
            <tr>
              <td><a href="#configure">Configuration</a></td>
      
              <td><code>$ ./configure --prefix=<em>PREFIX</em></code>
              </td>
            </tr>
      
            <tr>
              <td><a href="#compile">Compilation</a></td>
      
              <td><code>$ make</code> </td>
            </tr>
      
            <tr>
              <td><a href="#install">Installation</a></td>
      
              <td><code>$ make install</code> </td>
            </tr>
      
            <tr>
              <td><a href="#customize">Personnalisation</a></td>
      
              <td><code>$ vi <em>PREFIX</em>/conf/httpd.conf</code> </td>
            </tr>
      
            <tr>
              <td><a href="#test">Test</a></td>
      
              <td><code>$ <em>PREFIX</em>/bin/apachectl -k start</code>
              </td>
            </tr>
          </table>
      
          <p><em>NN</em> doit être remplacé par le numéro de version courant,
          et <em>PREFIX</em> par le
          chemin du répertoire d'installation. Si
          <em>PREFIX</em> n'est pas spécifié, le chemin du répertoire
          d'installation prendra sa valeur par défaut, à savoir
          <code>/usr/local/apache2</code>.</p>
      
          <p>Chaque étape du processus de compilation et d'installation est
          décrite plus en détails ci-dessous, à commencer par les prérequis
          pour compiler et installer Apache httpd.</p>
      
          </dd>
          </dl>
      
          <div class="warning">L'installation sous votre plateforme favorite n'est pas
          traitée ici ? N'hésitez pas à nous <a href="http://httpd.apache.org/docs-project/">aider à compléter cette
          documentation</a> en nous faisant profiter de votre expérience.</div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="requirements" id="requirements">Prérequis</a></h2>
      
          <p>Les prérequis pour la construction d'Apache httpd sont les suivants:</p>
      
          <dl>
            <dt>APR et APR-Util</dt>
            <dd>APR et APR-Util doivent être déjà installés sur votre système.
            Si ce n'est pas le cas, ou si vous préférez ne pas utiliser les
            versions fournies par le système, téléchargez les dernières
            versions d'APR et APR-Util depuis <a href="http://apr.apache.org/">Apache APR</a>, décompressez-les
            respectivement dans <code>/racine_sources_httpd/srclib/apr</code> et
            <code>/racine_sources_httpd/srclib/apr-util</code> (les noms des répertoires ne
            doivent pas comporter de numéros de versions ; par exemple, la
            distribution d'APR doit se trouver dans /racine_sources_httpd/srclib/apr/), et
            utilisez l'option <code>--with-included-apr</code> du script
            <code>./configure</code>. Sur certaines plateformes, vous devrez
            peut-être installer les paquets <code>-dev</code> correspondants
            pour permettre la compilation de httpd avec les versions
            installées d'APR et APR-Util.</dd>
      
            <dt>Bibliothèque d'expressions rationnelles compatibles Perl
            (PCRE)</dt>
            <dd>Cette bibliothèque est nécessaire mais n'est plus fournie avec la
            distribution de httpd. Téléchargez le code source depuis <a href="http://www.pcre.org/">http://www.pcre.org</a> ou installez
            un portage du paquet. Si votre suite de compilation ne trouve pas
            le script pcre-config installé au cours du processus de
            construction de PCRE, indiquez son chemin via l'option
            <code>--with-pcre</code> du script <code>./configure</code>. Sur
            certaines plateformes, vous devrez
            peut-être installer les paquets <code>-dev</code> correspondants
            pour permettre la compilation de httpd avec la version
            installée de PCRE.</dd>
      
            <dt>Espace disque</dt>
            <dd>Assurez-vous d'avoir au moins 50 Mo d'espace disque disponible
            temporaire. Après l'installation le serveur occupe
            approximativement 10 Mo d'espace disque. L'espace disque réellement
            nécessaire va varier considérablement en fonction de vos options
            de configuration, de la présence éventuelle de
            modules tiers, et bien entendu de la taille de votre site web et
            des sites que vous hébergez sur votre serveur.</dd>
      
            <dt>Compilateur ANSI-C et système de construction</dt>
            <dd>Vous devez disposer d'un compilateur ANSI-C. Le compilateur <a href="http://gcc.gnu.org/">GNU C (GCC)</a> de la <a href="http://www.gnu.org/">Free Software Foundation (FSF)</a>
            est recommandé. Si vous ne possédez pas GCC,
            assurez-vous au moins que votre compilateur soit compatible ANSI.
            En outre, votre <code>PATH</code> doit contenir
            les outils de construction de base tels que <code>make</code>.</dd>
      
            <dt>Connaissance de l'heure exacte</dt>
            <dd>Les éléments du protocole HTTP font référence à l'heure du jour.
            Par conséquent, il est nécessaire d'équiper votre système d'un
            dispositif de synchronisation du temps. Les programmes
            <code>ntpdate</code> ou <code>xntpd</code>, basés sur le protocole NTP,
            sont couramment utilisés à cet effet.
            Voir la <a href="http://www.ntp.org">page d'accueil de NTP</a>
            pour plus de détails à propos du logiciel NTP et des serveurs
            de temps publics.</dd>
      
            <dt><a href="http://www.perl.org/">Perl 5</a>
            [OPTIONNEL]</dt>
            <dd>L'interpréteur Perl 5 (les versions 5.003 ou supérieures conviennent)
            est nécessaire pour l'exécution de certains scripts comme
            <code class="program"><a href="./programs/apxs.html">apxs</a></code> ou <code class="program"><a href="./programs/dbmmanage.html">dbmmanage</a></code>
            (qui sont écrits en Perl).
            Si le script <code class="program"><a href="./programs/configure.html">configure</a></code> ne trouve pas d'interpréteur
            Perl 5, vous ne pourrez pas utiliser les scripts qui en ont besoin.
            Bien entendu, vous pourrez tout de même construire et utiliser
            Apache httpd.</dd>
      
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="download" id="download">Téléchargement</a></h2>
      
          <p>Le serveur HTTP Apache peut être téléchargé à partir du
          <a href="http://httpd.apache.org/download.cgi">site de téléchargement
          du serveur HTTP Apache</a>, qui fournit la liste de nombreux miroirs.
          Il sera plus commode à la plupart des utilisateurs d'Apache sur les
          systèmes UNIX ou similaires de télécharger et de compiler
          la version sources.  Le processus de construction (décrit ci-dessous) est
          simple, et vous permet de personnaliser votre serveur selon vos besoins.
          En outre, les versions binaires sont souvent plus anciennes que les
          dernières versions sources. Si vous téléchargez une version binaire,
          suivez les instructions décrites dans le fichier
          <code>INSTALL.bindist</code> inclus dans la distribution.</p>
      
          <p>Après le téléchargement, il est important de vérifier que vous
          disposez d'une version complète et non modifiée du serveur HTTP Apache.
          Vous pouvez le faire en testant l'archive téléchargée à l'aide de
          la signature PGP. Vous trouverez les détails de cette opération sur la <a href="http://httpd.apache.org/download.cgi#verify">page de téléchargement</a> ainsi qu'un exemple précis décrivant <a href="http://httpd.apache.org/dev/verification.html">l'utilisation de
          PGP</a>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="extract" id="extract">Extraction</a></h2>
      
          <p>L'extraction des sources depuis l'archive du serveur HTTP Apache consiste
          simplement à décompresser et à désarchiver cette dernière :</p>
      
      <div class="example"><p><code>
      $ gzip -d httpd-<em>NN</em>.tar.gz<br />
      $ tar xvf httpd-<em>NN</em>.tar
      </code></p></div>
      
          <p>Ceci créera, dans le répertoire courant, un nouveau répertoire
          contenant le code source de la distribution. Vous devrez vous positionner
          dans ce répertoire avant de procéder à la compilation du serveur.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configure" id="configure">Configuration de l'arborescence des sources</a></h2>
      
          <p>L'étape suivante consiste à configurer l'arborescence des sources
          d'Apache en fonction de votre plateforme et de vos besoins personnels.
          Le script  <code class="program"><a href="./programs/configure.html">configure</a></code>, situé à la racine du
          répertoire de la distribution, a été conçu à cet effet
          (Les développeurs qui téléchargent
          une version non officielle de l'arborescence des sources d'Apache
          devront disposer de
          <code>autoconf</code> et <code>libtool</code> et
          exécuter <code>buildconf</code> avant de passer à l'étape suivante,
          ce qui n'est pas nécessaire pour les versions officielles).</p>
      
          <p>Pour configurer l'arborescence des sources avec les valeurs par défaut
          pour toutes les options, entrez simplement <code>./configure</code>.
          Pour modifier les valeurs des options, <code class="program"><a href="./programs/configure.html">configure</a></code>
          accepte toute une variété de variables et
          d'options de ligne de commande.</p>
      
          <p>L'option la plus importante <code>--prefix</code> est le chemin
          du répertoire d'installation d'Apache, car Apache doit être configuré
          en fonction de ce chemin pour pouvoir fonctionner correctement.
          Il est possible de définir plus finement le chemin d'installation des fichiers
          à l'aide d'<a href="programs/configure.html#installationdirectories">options
          supplémentaires de configure</a>.</p>
      
          <p>À ce niveau, vous pouvez aussi spécifier de quelles <a href="programs/configure.html#optionalfeatures">fonctionnalités</a> vous
          voulez disposer dans Apache en activant ou désactivant des <a href="mod/">modules</a>.  Apache est fourni avec un grand nombre de
          modules inclus par défaut. Ils seront compilés en tant qu'<a href="dso.html">objets partagés (DSOs)</a> qui pourront être chargés
          ou déchargés à l'exécution. Vous pouvez aussi choisir de compiler
          les modules statiquement via l'option
          <code>--enable-<var>module</var>=static</code>.</p>
          <p>Des modules supplémentaires peuvent être activés à l'aide de l'option
          <code>--enable-<var>module</var></code>, où
          <var>module</var> est le nom du module sans la chaîne
          <code>mod_</code> et où tout caractère de soulignement est converti
          en tiret. D'une manière similaire,
          vous pouvez désactiver des modules à l'aide de l'option
          <code>--disable-<var>module</var></code>.  Faites très attention
          en utilisant ces options, car <code class="program"><a href="./programs/configure.html">configure</a></code> n'est pas en
          mesure de vous avertir si le module que vous avez spécifié n'existe pas;
          il ignorera tout simplement l'option.</p>
      
          <p>En outre, vous devrez peut-être fournir au script
          <code class="program"><a href="./programs/configure.html">configure</a></code> des informations supplémentaires sur
          le chemin de votre compilateur, de vos bibliothèques, ou de vos fichiers
          d'en-têtes.  A cet effet, vous pouvez passer des options de ligne de
          commande ou des variables d'environnement au script
          <code class="program"><a href="./programs/configure.html">configure</a></code>. Pour plus d'informations, voir la
          page de manuel de <code class="program"><a href="./programs/configure.html">configure</a></code>, ou lancez le script
          <code class="program"><a href="./programs/configure.html">configure</a></code> avec l'option <code>--help</code>.
          </p>
      
          <p>Pour vous faire une idée des possibilités qui s'offrent à vous, voici
          un exemple typique de compilation d'Apache avec le répertoire
          d'installation <code>/sw/pkg/apache</code>, un compilateur et des drapeaux
          particuliers et les deux modules additionnels <code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code>
          et <code class="module"><a href="./mod/mod_lua.html">mod_lua</a></code> :</p>
      
      <div class="example"><p><code>
            $ CC="pgcc" CFLAGS="-O2" \<br />
             ./configure --prefix=/sw/pkg/apache \<br />
             --enable-ldap=shared \<br />
             --enable-lua=shared
      </code></p></div>
      
          <p>Plusieurs minutes peuvent être nécessaires à
          <code class="program"><a href="./programs/configure.html">configure</a></code> pour tester la disponibilité des
          fonctionnalités
          au sein de votre système, et construire les Makefiles qui seront utilisés
          par la suite pour compiler le serveur.</p>
      
          <p>Vous trouverez une description détaillée des options de
          <code class="program"><a href="./programs/configure.html">configure</a></code> dans sa page de manuel.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="compile" id="compile">Construction</a></h2>
      
          <p>Vous pouvez maintenant construire les différents éléments qui
          composent le paquet Apache en lançant tout simplement la commande :</p>
      
      <div class="example"><p><code>$ make</code></p></div>
      
          <p>Vous devez être patient, car il faut plusieurs minutes pour compiler
          une configuration de base, et cette durée peut varier considérablement
          en fonction de votre matériel et du nombre de modules que vous avez activés.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="install" id="install">Installation</a></h2>
      
          <p>Il est temps maintenant d'installer le paquet dans le répertoire
          d'installation défini par <em>PREFIX</em> (voir plus haut l'option
          <code>--prefix</code>) en lançant:</p>
      
      <div class="example"><p><code>$ make install</code></p></div>
      
          <p>Cette étape nécessite habituellement les privilèges
          de root, car <em>PREFIX</em> est en général un
          répertoire possèdant des droits en écriture
          restreints.</p>
      
          <p>Si vous effectuez une mise à jour, l'installation n'écrasera pas
          vos fichiers de configuration ou autres documents.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="customize" id="customize">Personnalisation</a></h2>
      
          <p>Ensuite, vous pourrez personnaliser votre Serveur HTTP Apache en
          éditant les <a href="configuring.html">fichiers de configuration</a>
          situés dans <code><em>PREFIX</em>/conf/</code>.</p>
      
      <div class="example"><p><code>$ vi <em>PREFIX</em>/conf/httpd.conf</code></p></div>
      
          <p>Consultez le manuel d'Apache situé dans
          <code><em>PREFIX</em>/docs/manual/</code> ou
          <a href="http://httpd.apache.org/docs/2.4/">http://httpd.apache.org/docs/2.4/</a> pour la version la plus
          récente de ce manuel et la liste complète des <a href="mod/directives.html">directives de configuration</a> disponibles.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="test" id="test">Test</a></h2>
      
          <p>Vous pouvez maintenant <a href="invoking.html">démarrer</a> votre
          serveur HTTP Apache en lançant:</p>
      
      <div class="example"><p><code>$ <em>PREFIX</em>/bin/apachectl -k start</code></p></div>
      
          <p>Vous devriez alors pouvoir requérir votre premier document
          à l'aide de l'URL <code>http://localhost/</code>. La page web que vous
          voyez est située dans le répertoire défini par la directive
          <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>,
          qui est généralement <code><em>PREFIX</em>/htdocs/</code>.
          Pour <a href="stopping.html">arrêter</a> le serveur, lancez:</p>
      
      <div class="example"><p><code>$ <em>PREFIX</em>/bin/apachectl -k stop</code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="upgrading" id="upgrading">Mise à jour</a></h2>
      
          <p>La première étape d'une mise à jour consiste à lire l'annonce de la
          sortie de la nouvelle version et le fichier <code>CHANGES</code>
          dans la distribution des sources afin de déceler toutes les modifications
          qui pourraient affecter votre site. Lors d'un changement majeur de version
          (par exemple de 2.0 à 2.2 ou de 2.2 à 2.4),
          il y aura certainement des différences importantes quant à la
          configuration de la compilation et de l'exécution qui nécessiteront des
          ajustements manuels.  Tous les
          modules devront aussi être mis à jour pour qu'ils s'adaptent aux
          changements de l'API des modules.</p>
      
          <p>La mise à jour d'une version mineure à la suivante (par exemple, de
          2.2.55 à 2.2.57) est plus aisée.  Le processus <code>make install</code>
          n'écrasera aucun de vos documents existants, fichiers de log,
          ou fichiers de configuration.  De plus, les développeurs font tout
          leur possible pour éviter les changements entraînant une
          incompatibilité dans les options de
          <code class="program"><a href="./programs/configure.html">configure</a></code>, la configuration de l'exécution, ou l'API
          des modules d'une version mineure à l'autre.  Dans la plupart des cas,
          vous pourrez utiliser une ligne de commande
          <code class="program"><a href="./programs/configure.html">configure</a></code> identique, le même fichier de configuration,
          et tous vos modules continueront de fonctionner.</p>
      
          <p>Pour effectuer une mise à jour entre deux versions mineures,
          commencez par trouver le fichier
          <code>config.nice</code> dans le répertoire de <code>construction</code>
          de votre serveur installé ou à la racine de l'arborescence des sources
          de votre ancienne installation.  Il contient la reproduction exacte de la
          ligne de commande <code class="program"><a href="./programs/configure.html">configure</a></code> que vous avez utilisée pour
          configurer l'arborescence des sources.  Ensuite, pour mettre à jour
          l'ancienne version vers la nouvelle,
          il vous suffit de copier le fichier <code>config.nice</code> dans
          l'arborescence des sources de la nouvelle version, de l'éditer pour
          effectuer toute modification souhaitée, et de lancer :</p>
      
          <div class="example"><p><code>
          $ ./config.nice<br />
          $ make<br />
          $ make install<br />
          $ <em>PREFIX</em>/bin/apachectl -k graceful-stop<br />
          $ <em>PREFIX</em>/bin/apachectl -k start<br />
          </code></p></div>
      
          <div class="warning">Vous devez toujours effectuer un test de la nouvelle
          version dans votre environnement avant de la mettre en production.
          Par exemple, vous pouvez installer et exécuter la nouvelle version
          en parallèle avec l'ancienne en utilisant une option
          <code>--prefix</code> et un port différents (en ajustant la directive
          <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>) afin de déceler toute
          incompatibilité avant d'effectuer la mise à jour définitive.</div>
      
          <p>Vous pouvez ajouter des arguments supplémentaires à
          <code>config.nice</code> ; ils seront alors ajoutés aux options de
          votre script <code class="program"><a href="./programs/configure.html">configure</a></code> original :</p>
      
           <div class="example"><p><code>
           $ ./config.nice --prefix=/home/test/apache --with-port=90
           </code></p></div>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="thirdp" id="thirdp">Paquets tiers</a></h2>
      
          <p>De nombreux tiers fournissent leur propre distribution du
          serveur HTTP Apache à installer sur une plate-forme particulière. On
          peut citer les différentes distributions Linux, divers
          paquets tiers Windows, Mac OS X, Solaris et de nombreux autres.</p>
      
          <p>Notre license logicielle non seulement permet, mais aussi
          encourage ce genre de redistribution. Cependant, ceci conduit à une
          situation ou l'organisation de la configuration et les valeurs par
          défaut de votre installation du serveur peuvent ne pas correspondre
          à ce qui est écrit dans la documentation. Bien que fâcheuse, cette
          situation n'est pas appelée à évoluer de sitôt.</p>
      
          <p>Une  <a href="http://wiki.apache.org/httpd/DistrosDefaultLayout">description
          de ces distributions tierces</a> est maintenue dans le wiki du
          serveur HTTP, et doit en refléter l'état actuel. Vous devrez
          cependant vous familiariser par vous-même avec la gestion du paquet
          de votre plate-forme particulière et les procédures d'installation.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./de/install.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/install.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/install.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/install.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/install.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/install.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/install.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/install.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������httpd-2.4.41/docs/manual/custom-error.html.fr.utf8��������������������������������������������������0000644�0000000�0000050�00000035020�13412755316�020272� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Messages d'erreur personnalisés - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Messages d'erreur personnalisés</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/custom-error.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/custom-error.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/custom-error.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/custom-error.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/custom-error.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/custom-error.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Le serveur HTTP Apache fournit des messages d'erreur génériques
          pour les codes de statut 4xx ou 5xx ; ces messages sont cependant
          relativement austères, imprécis, et peuvent s'avérer intimidants
          pour les visiteurs du site. Si vous le souhaitez, vous pouvez
          afficher des messages d'erreur plus conviviaux, dans un langage
          autre que l'anglais, ou même sous une forme plus en adéquation avec
          le style de votre site.</p>
      
          <p>Il est possible de définir des messages d'erreur personnalisés
          pour chaque code de statut HTTP associé à une condition d'erreur -
          c'est à dire tout code de statut 4xx ou 5xx.</p>
      
          <p>De plus, il est possible de
          personnaliser le message d'erreur en fonction d'un jeu de valeurs
          fourni, en utilisant les <a href="howto/ssi.html">Inclusions Côté
          Serveur (SSI)</a>. Un programme CGI ou un autre gestionnaire
          dynamique (PHP, mod_perl, etc...) peut aussi utiliser ces variables
          pour gérer les conditions d'erreur.</p>
      
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#configuration">Configuration</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#variables">Variables disponibles</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#custom">Personnalisation des messages d'erreur</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#multi-lang">Messages d'erreur personnalisés
        multilingues</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuration" id="configuration">Configuration</a></h2>
      
          <p>Les messages d'erreur personnalisés sont configurés via la
          directive <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code>, qui
          peut être utilisée dans un contexte global, serveur virtuel ou
          répertoire. On peut utiliser cette directive dans les fichiers
          .htaccess si <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> est
          définie à FileInfo.</p>
      
          <pre class="prettyprint lang-config">ErrorDocument 500 "Désolé, notre script s'est
      crashé ; comme c'est dommage !"
      ErrorDocument 500 /cgi-bin/crash-recover
      ErrorDocument 500 http://error.example.com/server_error.html
      ErrorDocument 404 /errors/not_found.html 
      ErrorDocument 401 /subscription/how_to_subscribe.html</pre>
      
      
      <p>La syntaxe de la directive <code>ErrorDocument</code> est :</p>
            <pre class="prettyprint lang-config">ErrorDocument &lt;code_3_chiffres&gt; &lt;action&gt;</pre>
      
            <p>où action peut être traitée comme :</p>
              <ol>
            <li>Une URL de redirection local (si l'action commence par un "/").</li>
            <li>Une URL de redirection externe (si action est une URL valide).</li>
            <li>Le texte à afficher (si l'action ne répond à aucune des
            deux conditions précédentes). Entourez le texte de guillemets (")
            s'il contient plusieurs mots.</li>
              </ol>
      
          <p>Dans le cas d'une redirection vers une URL locale, des variables
          d'environnement supplémentaires sont définies de façon à ce que la
          réponse puisse être personnalisée par la suite. Elles ne sont pas
          envoyées aux URLs externes.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="variables" id="variables">Variables disponibles</a></h2>
      
            <p>La redirection vers une autre URL peut être utile, mais
            seulement s'il est possible de transmettre certaines informations
            qui pourront être utilisées pour expliquer ou journaliser
            la condition d'erreur ou le problème plus clairement.</p>
      
      	<p>Pour y parvenir, lorsque la redirection d'erreur est envoyée,
      	des variables d'environnement supplémentaires sont définies à
      	partir des en-têtes de la requête originale en préfixant le nom
      	d'origine de l'en-tête par 'REDIRECT_', ce qui permet de fournir au
      	message d'erreur le contexte de la requête originelle.</p>
      
            <p>Par exemple, en plus des variables d'environnement habituelles,
            vous pouvez recevoir ce qui suit :</p>
      
      
            <div class="example"><p><code>
              REDIRECT_HTTP_ACCEPT=*/*, image/gif, image/jpeg, image/png<br />
              REDIRECT_HTTP_USER_AGENT=Mozilla/5.0 Fedora/3.5.8-1.fc12 Firefox/3.5.8<br />
              REDIRECT_PATH=.:/bin:/usr/local/bin:/sbin<br />
              REDIRECT_QUERY_STRING=<br />
              REDIRECT_REMOTE_ADDR=121.345.78.123<br />
              REDIRECT_REMOTE_HOST=client.example.com<br />
              REDIRECT_SERVER_NAME=www.example.edu<br />
              REDIRECT_SERVER_PORT=80<br />
              REDIRECT_SERVER_SOFTWARE=Apache/2.2.15<br />
              REDIRECT_URL=/cgi-bin/buggy.pl
            </code></p></div>
      
            <p>Les variables d'environnement <code>REDIRECT_</code> sont
            créées à partir des variables d'environnement préexistantes à la
            redirection qui sont préfixées par la chaîne <code>REDIRECT_</code> ;
            par exemple, <code>HTTP_USER_AGENT</code> devient
            <code>REDIRECT_HTTP_USER_AGENT</code>.</p>
      
            <p><code>REDIRECT_URL</code>, <code>REDIRECT_STATUS</code>, et
            <code>REDIRECT_QUERY_STRING</code> sont systématiquement définies,
            les autres variables n'étant définies que si l'en-tête
            correspondant existait avant la condition d'erreur.</p>
      
            <p><strong>Aucune</strong> d'entre elles ne sera définie si votre
            directive <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code>
            spécifie une redirection <em>externe</em> (toute URL commençant
            par un protocole du style <code>http:</code>, même si elle fait
            référence au même hôte que le serveur).</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="custom" id="custom">Personnalisation des messages d'erreur</a></h2>
      
      
      	<p>Si vous faites pointer votre directive
      	<code>ErrorDocument</code> vers certains gestionnaires
      	dynamiques comme les inclusions côté serveur, les scripts CGI ou
      	d'autres gestionnaires, vous pouvez utiliser les variables
      	d'environnement supplémentaires disponibles pour personnaliser
      	le message.</p>
      
      
            <p>Si la directive ErrorDname-basedocument spécifie une redirection locale
            vers un script CGI, ce dernier doit ajouter un en-tête
            "<code>Status:</code>" dans sa sortie afin de s'assurer du bon
            acheminement jusqu'au client de la condition d'erreur qui a
            provoqué cette redirection. Par exemple, un script Perl spécifié
            par une directive ErrorDocument pourrait contenir ce qui suit
            :</p>
      
            <pre class="prettyprint lang-perl">...
      print  "Content-type: text/html\n"; 
      printf "Status: %s Condition Intercepted\n", $ENV{"REDIRECT_STATUS"}; 
      ...</pre>
      
      
            <p>Si un script est dédié à la gestion d'une condition d'erreur
            spécifique, telle que <code>404&nbsp;Not&nbsp;Found</code>, il
            peut utiliser le code et le texte de l'erreur spécifiques à la
            place.</p>
      
            <p>Notez que si la réponse contient un en-tête
            <code>Location:</code> (afin d'initier une redirection côté
            client), le script <em>doit</em> émettre un en-tête approprié
            (comme <code>302&nbsp;Found</code>). Dans le cas contraire,
            l'en-tête <code>Location:</code> ne produira aucun effet.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="multi-lang" id="multi-lang">Messages d'erreur personnalisés
        multilingues</a></h2>
      
          <p>Vous trouverez dans la distribution du serveur HTTP Apache un
          répertoire contenant des messages d'erreur personnalisés traduits en
          16 langues différentes. Pour activer cette fonctionnalité, vous
          pouvez aussi inclure un fichier de configuration qui se trouve dans
          le répertoire de configuration <code>conf/extra</code>.</p>
      
          <p>Dans le fichier de configuration de votre serveur, vous trouverez
          un groupe de lignes du style :</p>
      
          <pre class="prettyprint lang-config">    # Multi-language error messages
          #Include conf/extra/httpd-multilang-errordoc.conf</pre>
      
      
          <p>Décommentez la ligne <code>Include</code> pour activer cette
          fonctionnalité, et présenter des messages d'erreur dont le langage
          sera négocié en fonction du langage préféré défini au niveau du
          navigateur du client.</p>
      
          <p>De plus, ces documents contiennent diverses variables
          <code>REDIRECT_</code>, de façon à ce que l'utilisateur final
          dispose d'informations supplémentaires à propos de ce qui a pu se
          produire, et de ce qu'il est susceptible de faire maintenant.</p>
      
          <p>Ces documents peuvent être personnalisés en fournissant autant
          d'informations utiles que vous le souhaitez aux utilisateurs à
          propos de votre site, et de ce qu'ils sont susceptibles d'y trouver.</p>
      
          <p>Pour pouvoir utiliser cette fonctionnalité, vous devez activer
          <code class="module"><a href="./mod/mod_include.html">mod_include</a></code> et <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>.</p>
      
       </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/custom-error.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/custom-error.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/custom-error.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/custom-error.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/custom-error.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/custom-error.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/custom-error.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/socache.html.fr.utf8�������������������������������������������������������0000644�0000000�0000050�00000024363�13447706537�017257� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Le cache des objets partagés du serveur HTTP Apache - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Le cache des objets partagés du serveur HTTP Apache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/socache.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/socache.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>Le cache des objets partagés est un concept de partage de données
          de base entre tous les processus d'un serveur, sans se préoccuper du
          <a href="mpm.html">modèle de threads et de processus</a>. On
          l'utilise lorsque les avantages apportés par le partage de données
          entre processus contrebalance la perte de performances consécutive à
          la communication interprocessus.</p>
        </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="providers" id="providers">Fournisseurs du cache d'objets partagés</a></h2>
          
          <p>Le cache d'objets partagés en tant que tel est une abstraction.
          Il est implémenté par quatre modules différents. Pour pouvoir
          utiliser le cache, un ou plusieurs de ces modules doivent être
          présents et configurés.</p>
          <p>Le seul élément de configuration consiste à définir le
          fournisseur de cache à utiliser. Ceci est de la responsabilité des
          modules qui utilisent le cache, et pour cela, ils activent la
          sélection via des directives telles que <code class="directive"><a href="./mod/mod_cache_socache.html#cachesocache">CacheSocache</a></code>, <code class="directive"><a href="./mod/mod_authn_socache.html#authncachesocache">AuthnCacheSOCache</a></code>, <code class="directive"><a href="./mod/mod_ssl.html#sslsessioncache">SSLSessionCache</a></code>, et <code class="directive"><a href="./mod/mod_ssl.html#sslstaplingcache">SSLStaplingCache</a></code>.</p>
          <p>Les fournisseurs actuellement disponibles sont :</p>
          <dl>
          <dt>"dbm" (<code class="module"><a href="./mod/mod_socache_dbm.html">mod_socache_dbm</a></code>)</dt>
          <dd>Celui-ci utilise un fichier de hashage DBM. Le choix de la
          DBM sous-jacente peut être configurable si la version
          d'APR installée supporte de multiples implémentations de DBM.</dd>
          <dt>"dc" (<code class="module"><a href="./mod/mod_socache_dc.html">mod_socache_dc</a></code>)</dt>
          <dd>Celui-ci utilise les bibliothèques de mise en cache de sessions
          distribuées <a href="http://distcache.sourceforge.net/">distcache</a>.</dd>
          <dt>"memcache" (<code class="module"><a href="./mod/mod_socache_memcache.html">mod_socache_memcache</a></code>)</dt>
          <dd>Celui-ci utilise le système à hautes performances de mise en
          cache d'objets de mémoire distribuée <a href="http://memcached.org/">memcached</a>.</dd>
          <dt>"redis" (<code class="module"><a href="./mod/mod_socache_redis.html">mod_socache_redis</a></code>)</dt>
          <dd>Celui-ci utilise le système de mise en cache d'objets de mémoire
          distribuée à hautes performances <a href="http://redis.io/">Redis</a>.</dd>
          <dt>"shmcb" (<code class="module"><a href="./mod/mod_socache_shmcb.html">mod_socache_shmcb</a></code>)</dt>
          <dd>Celui-ci utilise un tampon cyclique à hautes performances au
          sein d'un segment de mémoire partagée.</dd>
          </dl>
      
          <p>L'API fournit les fonctions suivantes :</p>
      
          <dl>
            <dt>const char *create(ap_socache_instance_t **instance, const char *arg,
                                apr_pool_t *tmp, apr_pool_t *p);</dt>
            <dd>Cette fonction permet de créer un cache de session basé sur
            la chaîne de configuration spécifiée. Le pointeur d'instance
            renvoyé dans le paramètre instance sera passé comme premier
            argument des invocations subséquentes.</dd>
      
            <dt>apr_status_t init(ap_socache_instance_t *instance, const char *cname,
                               const struct ap_socache_hints *hints,
                               server_rec *s, apr_pool_t *pool)</dt>
            <dd>Cette fonction permet d'initialiser le cache. L'argument cname
            doit avoir une longueur maximale de 16 caractères et permet
            d'identifier de manière unique l'utilisateur du cache au sein du
            serveur ; il est recommandé d'utiliser le nom du module, par
            exemple "mod_ssl-sess". Comme cette chaîne peut être utilisée au
            sein d'un système de fichiers, il est conseillé de n'utiliser que
            des caractères alphanumériques [a-z0-9_-]. Si l'argument hints
            n'est pas égal à NULL, il fournit un ensemble d'indications au
            fournisseur. La valeur retournée est le code d'erreur APR.</dd>
      
            <dt>void destroy(ap_socache_instance_t *instance, server_rec *s)</dt>
            <dd>Cette fonction permet de détruire l'instance de cache
            spécifiée.</dd>
      
            <dt>apr_status_t store(ap_socache_instance_t *instance, server_rec *s,
                                const unsigned char *id, unsigned int idlen,
                                apr_time_t expiry,
                                unsigned char *data, unsigned int datalen,
                                apr_pool_t *pool)</dt>
            <dd>Cette fonction permet de stocker un objet dans une instance de
            cache.</dd>
      
            <dt>apr_status_t retrieve(ap_socache_instance_t *instance, server_rec *s,
                                   const unsigned char *id, unsigned int idlen,
                                   unsigned char *data, unsigned int *datalen,
                                   apr_pool_t *pool)</dt>
            <dd>Cette fonction permet d'extraire un objet du cache.</dd>
      
            <dt>apr_status_t remove(ap_socache_instance_t *instance, server_rec *s,
                                 const unsigned char *id, unsigned int idlen,
                                 apr_pool_t *pool)</dt>
            <dd>Supprime un objet du cache.</dd>
      
            <dt>void status(ap_socache_instance_t *instance, request_rec *r, int flags)</dt>
            <dd>Renvoie le statut d'une instance de cache à destination de mod_status.</dd>
      
            <dt>apr_status_t iterate(ap_socache_instance_t *instance, server_rec *s,
                                  void *userctx, ap_socache_iterator_t *iterator,
                                  apr_pool_t *pool)</dt>
            <dd>Envoie tous les objets gardés en cache à une fonction pour traitement itératif.</dd>
          </dl>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/socache.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/socache.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/socache.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/index.html.es��������������������������������������������������������������0000644�0000000�0000050�00000022545�13412755316�016063� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache HTTP Server Versión 2.4
      Documentación - Servidor HTTP Apache Versión 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="index-page">
      <div id="page-header">
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="./glossary.html">Glosario</a> | <a href="./sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="http://httpd.apache.org/docs-project/"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a></div>
      <div id="page-content"><h1>Apache HTTP Server Versión 2.4
      Documentación</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="./da/" hreflang="da" rel="alternate" title="Dansk">&nbsp;da&nbsp;</a> |
      <a href="./de/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <form method="get" action="http://www.google.com/search"><p><input name="as_q" value="" type="text" /> <input value="Buscar en Google" type="submit" /><input value="10" name="num" type="hidden" /><input value="es" name="hl" type="hidden" /><input value="ISO-8859-1" name="ie" type="hidden" /><input value="Google Search" name="btnG" type="hidden" /><input name="as_epq" value="Versión 2.4" type="hidden" /><input name="as_oq" value="" type="hidden" /><input name="as_eq" value="&quot;List-Post&quot;" type="hidden" /><input value="" name="lr" type="hidden" /><input value="i" name="as_ft" type="hidden" /><input value="" name="as_filetype" type="hidden" /><input value="all" name="as_qdr" type="hidden" /><input value="any" name="as_occt" type="hidden" /><input value="i" name="as_dt" type="hidden" /><input value="httpd.apache.org" name="as_sitesearch" type="hidden" /><input value="off" name="safe" type="hidden" /></p></form>
      <table id="indextable"><tr><td class="col1"><div class="category"><h2><a name="release" id="release">Notas de la versión</a></h2>
      <ul><li><a href="new_features_2_4.html">Nuevas funcionalidades en Apache 2.3/2.4</a></li>
      <li><a href="new_features_2_2.html">Nuevas funcionalidades en Apache 2.1/2.2</a></li>
      <li><a href="new_features_2_0.html">Nuevas funcionalidades en Apache 2.0</a></li>
      <li><a href="upgrading.html">Actualizar a la versión 2.4 desde la 2.2</a></li>
      <li><a href="license.html">Licencia Apache </a></li>
      </ul>
      </div><div class="category"><h2><a name="manual" id="manual">Manual de Referencia</a></h2>
      <ul><li><a href="install.html">Compilar e Instalar</a></li>
      <li><a href="invoking.html">Ejecutando Apache</a></li>
      <li><a href="stopping.html">Parada y Reinicio de Apache</a></li>
      <li><a href="mod/quickreference.html">Directivas de configuración en tiempo de ejecución</a></li>
      <li><a href="mod/">Módulos</a></li>
      <li><a href="mpm.html">Módulos de Procesamiento Múltiple (MPM)</a></li>
      <li><a href="filter.html">Filtros</a></li>
      <li><a href="handler.html">Handlers</a></li>
      <li><a href="expr.html">Analizador de Expresiones</a></li>
      <li><a href="mod/overrides.html">Sobreescritura de la clase índice .htaccess</a></li>
      <li><a href="programs/">Programas de Soporte y Servidor</a></li>
      <li><a href="glossary.html">Glosario</a></li>
      </ul>
      </div></td><td><div class="category"><h2><a name="usersguide" id="usersguide">Guía de Usuario</a></h2>
      <ul><li><a href="getting-started.html">Empezando</a></li>
      <li><a href="bind.html">Enlazando Direcciones y Puertos</a></li>
      <li><a href="configuring.html">Ficheros de Configuración</a></li>
      <li><a href="sections.html">Secciones de Configuración</a></li>
      <li><a href="caching.html">Almacenamiento de Contenido en Caché</a></li>
      <li><a href="content-negotiation.html">Negociación de Contenido</a></li>
      <li><a href="dso.html">Objetos Compartidos Dinámicamente (DSO)</a></li>
      <li><a href="env.html">Variables de Entorno</a></li>
      <li><a href="logs.html">Ficheros de Log</a></li>
      <li><a href="compliance.html">Cumplimiento del Protocolo HTTP</a></li>
      <li><a href="urlmapping.html">Mapeo de URLs al Sistema de Ficheros</a></li>
      <li><a href="misc/perf-tuning.html">Optimización del Rendimiento</a></li>
      <li><a href="misc/security_tips.html">Consejos de seguridad</a></li>
      <li><a href="server-wide.html">Configuración básica del Servidor</a></li>
      <li><a href="ssl/">Cifrado SSL/TLS</a></li>
      <li><a href="suexec.html">Ejecución de Suexec para CGI</a></li>
      <li><a href="rewrite/">Reescritura de URL con mod_rewrite</a></li>
      <li><a href="vhosts/">Servidores Virtuales</a></li>
      </ul>
      </div></td><td class="col3"><div class="category"><h2><a name="howto" id="howto">How-To / Tutoriales</a></h2>
      <ul><li><a href="howto">Índice de Tutoriales </a></li>
      <li><a href="howto/auth.html">Autenticación y Autorización</a></li>
      <li><a href="howto/access.html">Control de Acceso</a></li>
      <li><a href="howto/cgi.html">CGI: Contenido Dinámico</a></li>
      <li><a href="howto/htaccess.html">Ficheros .htaccess</a></li>
      <li><a href="howto/ssi.html">Inclusiones del Lado del Servidor (SSI)</a></li>
      <li><a href="howto/public_html.html">Directorios Web por Usuario
          (public_html)</a></li>
      <li><a href="howto/reverse_proxy.html">Guía de configuración de Proxy Inverso</a></li>
      <li><a href="howto/http2.html">Guía HTTP/2 </a></li>
      </ul>
      </div><div class="category"><h2><a name="platform" id="platform">Notas Sobre Plataformas Específicas</a></h2>
      <ul><li><a href="platform/windows.html">Microsoft Windows</a></li>
      <li><a href="platform/rpm.html">Sistemas Basados en RPM (Redhat / CentOS / Fedora)</a></li>
      <li><a href="platform/netware.html">Novell NetWare</a></li>
      </ul>
      </div><div class="category"><h2><a name="other" id="other">Otros Temas</a></h2>
      <ul><li><a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a></li>
      <li><a href="sitemap.html">Mapa del Sitio</a></li>
      <li><a href="developer/">Documentación para Desarrolladores</a></li>
      <li><a href="http://httpd.apache.org/docs-project/">Contribuir en la Documentación</a></li>
      <li><a href="misc/">Otras Notas</a></li>
      <li><a href="http://wiki.apache.org/httpd/">Wiki</a></li>
      </ul>
      </div></td></tr></table></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="./da/" hreflang="da" rel="alternate" title="Dansk">&nbsp;da&nbsp;</a> |
      <a href="./de/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="./glossary.html">Glosario</a> | <a href="./sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/dso.html.ja.utf8�����������������������������������������������������������0000644�0000000�0000050�00000056440�13412755316�016412� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>動的共有オブジェクト (DSO) サãƒãƒ¼ãƒˆ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>動的共有オブジェクト (DSO) サãƒãƒ¼ãƒˆ</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/dso.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/dso.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/dso.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/dso.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/dso.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
          <p>Apache HTTP サーãƒã¯ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«åŒ–ã•れãŸãƒ—ログラムã§ã€
          管ç†è€…ãŒãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’é¸æŠžã™ã‚‹ã“ã¨ã§ã‚µãƒ¼ãƒã«çµ„ã¿è¾¼ã‚€æ©Ÿèƒ½ã‚’é¸ã¶ã“ã¨ãŒã§ãã¾ã™ã€‚
          モジュールã¯ã‚µãƒ¼ãƒãŒãƒ“ルドã•れるã¨ãã« <code class="program"><a href="./programs/httpd.html">httpd</a></code> ãƒã‚¤ãƒŠãƒªã«
          é™çš„ã«çµ„ã¿è¾¼ã‚€ã“ã¨ãŒã§ãã¾ã™ã€‚ã‚‚ã—ãã¯ã€<code class="program"><a href="./programs/httpd.html">httpd</a></code> ãƒã‚¤ãƒŠãƒªã¨ã¯
          別ã«å­˜åœ¨ã™ã‚‹å‹•的共有オブジェクト (訳注: Dynamic Shared Object)
          (DSO) ã¨ã—ã¦ã‚³ãƒ³ãƒ‘イルã™ã‚‹ã“ã¨ã‚‚
          ã§ãã¾ã™ã€‚DSO モジュールã¯ã‚µãƒ¼ãƒãŒãƒ“ルドã•れるã¨ãã«ã‚³ãƒ³ãƒ‘イルã—ãŸã‚Šã€
          Apache 拡張ツール (<code class="program"><a href="./programs/apxs.html">apxs</a></code>) を
          使ã£ã¦å¾Œã§ã‚³ãƒ³ãƒ‘イルã—ã¦è¿½åŠ ã—ãŸã‚Šã§ãã¾ã™ã€‚</p>
      
          <p>ã“ã®æ–‡æ›¸ã¯ DSO モジュールã®ä½¿ã„æ–¹ã¨ã€ä»•組ã¿ã«ã¤ã„ã¦
          説明ã—ã¾ã™ã€‚</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#implementation">実装</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#usage">ä½¿ç”¨æ³•ã®æ¦‚è¦</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#background">背景</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#advantages">åˆ©ç‚¹ã¨æ¬ ç‚¹</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="implementation" id="implementation">実装</a></h2>
      
      <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_so.html">mod_so</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code></li></ul></td></tr></table>
      
          <p>個々㮠Apache モジュールをロードã™ã‚‹ãŸã‚ã® DSO サãƒãƒ¼ãƒˆã¯
          <code class="module"><a href="./mod/mod_so.c.html">mod_so.c</a></code> ã¨ã„ã†ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æ©Ÿèƒ½ã«åŸºã¥ã„ã¦ã„ã¾ã™ã€‚
          ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« 㯠Apache ã®ã‚³ã‚¢ã«é™çš„ã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
          ãれ㯠<code class="module"><a href="./mod/core.c.html">core.c</a></code> 以外ã§ã¯ DSO ã«ã§ããªã„唯一ã®
          モジュールã§ã™ã€‚事実上ã€ä»–ã®ã™ã¹ã¦ã® Apache ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã€
          <a href="install.html">ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã®æ–‡æ›¸</a>ã§èª¬æ˜Žã•れã¦ã„るよã†ã«ã€
          <code class="program"><a href="./programs/configure.html">configure</a></code> ã®
          <code>--enable-<em>module</em>=shared</code> オプションã§ãれãžã‚Œã‚’
          DSO ビルドã«ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€DSO モジュールã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          <code>mod_foo.so</code> ã®ã‚ˆã†ãª DSO ã«ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒã‚³ãƒ³ãƒ‘イルã•れれã°ã€
          <code>httpd.conf</code> ファイル中㧠<code class="module"><a href="./mod/mod_so.html">mod_so</a></code> ã®
          <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code>
          ディレクティブを使ã†ã“ã¨ã§ã‚µãƒ¼ãƒã®èµ·å‹•ã‚„å†èµ·å‹•時ã«ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’
          ロードã™ã‚‹ã‚ˆã†ã«ã§ãã¾ã™ã€‚</p>
      
          <p>Apache モジュール用㮠(特ã«ã‚µãƒ¼ãƒ‰ãƒ‘ーティモジュールã®) DSO ファイルã®
          作æˆã‚’ç°¡å˜ã«ã™ã‚‹ãŸã‚ã«ã€<code class="program"><a href="./programs/apxs.html">apxs</a></code>
          (<dfn>APache eXtenSion</dfn>) ã¨ã„ã†æ–°ã—ã„サãƒãƒ¼ãƒˆãƒ—ログラムãŒã‚りã¾ã™ã€‚
          Apache ã®ã‚½ãƒ¼ã‚¹ãƒ„リーã®<em>外ã§</em> DSO モジュールをビルドã™ã‚‹ãŸã‚ã«
          使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚発想ã¯å˜ç´”ã§ã™: Apache ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«æ™‚ã®
          <code class="program"><a href="./programs/configure.html">configure</a></code>ã€<code>make install</code> ã®ã¨ãã« Apache ã®
          C ヘッダをインストールã—ã€DSO ビルド用ã®ãƒ—ラットフォームä¾å­˜ã®
          コンパイラã¨ãƒªãƒ³ã‚«ã®ãƒ•ラグを <code class="program"><a href="./programs/apxs.html">apxs</a></code> プログラムã«è¿½åŠ ã—ã¾ã™ã€‚
          ã“れã«ã‚ˆã‚Šã€ãƒ¦ãƒ¼ã‚¶ãŒ Apache ã®é…布ソースツリーãªã—ã§ã€ã•らã«
          DSO サãƒãƒ¼ãƒˆã®ãŸã‚ã®ãƒ—ラットフォームä¾å­˜ã®ã‚³ãƒ³ãƒ‘イラやリンカã®
          フラグをã„ã˜ã‚‹ã“ã¨ãªã Apache ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ã‚½ãƒ¼ã‚¹ã‚’コンパイル
          ã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="usage" id="usage">ä½¿ç”¨æ³•ã®æ¦‚è¦</a></h2>
      
          <p>Apache 2.x ã® DSO æ©Ÿèƒ½ã®æ¦‚略を知るã“ã¨ãŒã§ãã‚‹ãŸã‚ã®ã€
          短ãç°¡æ½”ãªæ¦‚è¦ã§ã™:</p>
      
          <ol>
            <li>
              <em>é…布ã•れã¦ã„ã‚‹</em> Apache モジュールã€ä»®ã« <code>mod_foo.c</code>
              ã¨ã—ã¦ã€ãれを DSO <code>mod_foo.so</code> ã«ãƒ“ルドã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«: 
      
      <div class="example"><p><code>
      $ ./configure --prefix=/path/to/install --enable-foo=shared<br />
      $ make install
      </code></p></div>
            </li>
      
            <li>
              <em>サードパーティ</em> Apache モジュールã€ä»®ã« <code>mod_foo.c</code>
              ã¨ã—ã¦ã€ãれを DSO <code>mod_foo.so</code> ã«ãƒ“ルドã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«:
      
      <div class="example"><p><code>
      $ ./configure --add-module=<var>module_type</var>:/path/to/3rdparty/mod_foo.c \<br />
      <span class="indent">
        --enable-foo=shared<br />
      </span>
      $ make install
      </code></p></div>
            </li>
      
            <li>
              共有モジュール㮠<em>後々ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«</em> ã®ãŸã‚ã«
              Apache を設定:
      
      <div class="example"><p><code>
      $ ./configure --enable-so<br />
      $ make install
      </code></p></div>
            </li>
      
            <li>
              <em>サードパーティ</em> Apache モジュールã€ä»®ã« <code>mod_foo.c</code>
              ã¨ã—ã¦ã€ãれを <code class="program"><a href="./programs/apxs.html">apxs</a></code> を使ã£ã¦
              Apache ソースツリーã®<em>外ã§</em> DSO ã«ãƒ“ルドã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«:
      
      <div class="example"><p><code>
      $ cd /path/to/3rdparty<br />
      $ apxs -c mod_foo.c<br />
      $ apxs -i -a -n foo mod_foo.la
      </code></p></div>
            </li>
          </ol>
      
          <p>ã©ã®å ´åˆã«ãŠã„ã¦ã‚‚ã€å…±æœ‰ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’コンパイルã—ãŸå¾Œã§ã€
          <code>httpd.conf</code> ã§ 
          <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code>
          ディレクティブを使ã£ã¦ Apache ãŒãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’使用ã™ã‚‹ã‚ˆã†ã«
          ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="background" id="background">背景</a></h2>
      
          <p>最近㮠Unix 系㮠OS ã«ã¯ <em>動的共有オブジェクト</em> (DSO)
          ã®å‹•的リンク/ロードã¨ã„ã†æ°—ã®ãã„ãŸæ©Ÿæ§‹ãŒ
          存在ã—ã¾ã™ã€‚ã“れã¯ã€å®Ÿè¡Œæ™‚ã«ãƒ—ログラムã®ã‚¢ãƒ‰ãƒ¬ã‚¹ç©ºé–“ã«
          ロードã§ãるよã†ãªç‰¹åˆ¥ãªå½¢å¼ã§ãƒ—ログラムをビルドã™ã‚‹ã“ã¨ã‚’
          å¯èƒ½ã«ã—ã¾ã™ã€‚</p>
      
          <p>ã“ã®ãƒ­ãƒ¼ãƒ‰ã¯äºŒã¤ã®æ–¹æ³•ã§è¡Œãªã†ã“ã¨ãŒã§ãã¾ã™: 実行プログラムãŒ
          èµ·å‹•ã•れãŸã¨ãã« <code>ld.so</code> ã¨ã„ã†ã‚·ã‚¹ãƒ†ãƒ ãƒ—ログラム
          ã«ã‚ˆã‚Šè‡ªå‹•çš„ã«è¡Œãªã‚れる方法ã¨ã€å®Ÿè¡Œãƒ—ログラム中ã‹ã‚‰ã€ã‚·ã‚¹ãƒ†ãƒ ã‚³ãƒ¼ãƒ«
          <code>dlopen()/dlsym()</code> ã«ã‚ˆã‚‹ Unix ローダã¸ã®
          プログラムシステムã®ã‚¤ãƒ³ã‚¿ãƒ•ェースを使ã£ã¦æ‰‹å‹•ã§è¡Œãªã†æ–¹æ³•ã¨ãŒ
          ã‚りã¾ã™ã€‚</p>
      
          <p>最åˆã®æ–¹æ³•ã§ã¯ DSO ã¯æ™®é€šã¯<em>共有ライブラリ</em>ã‚„ <em>DSO
          ライブラリ</em> ã¨å‘¼ã°ã‚Œã¦ã„ã¦ã€DSO ã®åå‰ã¯
          <code>libfoo.so</code> ã‚„ <code>libfoo.so.1.2</code> ã®ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚
          ã“れらã¯ã‚·ã‚¹ãƒ†ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒª (通常 <code>/usr/lib</code>) ã«å­˜åœ¨ã—ã€
          実行プログラムã¸ã®ãƒªãƒ³ã‚¯ã¯ãƒ“ルド時㫠<code>-lfoo</code> をリンカã«
          指定ã™ã‚‹ã“ã¨ã§ç¢ºç«‹ã•れã¾ã™ã€‚ã“れã«ã‚ˆã‚Šãƒ©ã‚¤ãƒ–ラリã¸ã®å‚ç…§ãŒå®Ÿè¡Œãƒ—ログラムã®
          ãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ãè¾¼ã¾ã‚Œã¦ã€èµ·å‹•時㫠Unix ã®ãƒ­ãƒ¼ãƒ€ãŒ <code>/usr/lib</code> ã‚„ã€
          リンカ㮠<code>-R</code> ã®ã‚ˆã†ãªã‚ªãƒ—ションã«ã‚ˆã‚Šãƒãƒ¼ãƒ‰ã‚³ãƒ¼ãƒ‰ã•れãŸãƒ‘スã€
          環境変数 <code>LD_LIBRARY_PATH</code> ã«ã‚ˆã‚Šè¨­å®šã•れãŸãƒ‘スã€ã®ä¸­ã‹ã‚‰
          <code>libfoo.so</code> ã®å ´æ‰€ã‚’見ã¤ã‘ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ãれã‹ã‚‰ã€
          実行プログラム中㮠(ã¾ã æœªè§£æ±ºã®) シンボルを DSO ã«ã‚るシンボルã§
          解決ã—ã¾ã™ã€‚</p>
      
          <p>普通ã¯å®Ÿè¡Œãƒ—ログラム中ã®ã‚·ãƒ³ãƒœãƒ«ã¯ DSO ã‹ã‚‰ã¯å‚ç…§ã•れã¾ã›ã‚“
          (DSO ã¯ä¸€èˆ¬çš„ãªã‚³ãƒ¼ãƒ‰ã«ã‚ˆã‚‹å†åˆ©ç”¨å¯èƒ½ãªãƒ©ã‚¤ãƒ–ラリã§ã™ã®ã§)。
          ã§ã™ã‹ã‚‰ã€ã•らãªã‚‹ã‚·ãƒ³ãƒœãƒ«ã®è§£æ±ºã¯å¿…è¦ã‚りã¾ã›ã‚“。
          シンボル㯠Unix ローダã«ã‚ˆã‚Šå®Œå…¨ãªè§£æ±ºãŒè¡Œãªã‚れã¾ã™ã®ã§ã€å®Ÿè¡Œãƒ•ァイル自身ã¯
          何もã™ã‚‹å¿…è¦ãŒã‚りã¾ã›ã‚“。(実際ã®ã¨ã“ã‚ã€é™çš„ã§ãªã„方法ã§ãƒªãƒ³ã‚¯ã•れã¦ã„ã‚‹
          ã™ã¹ã¦ã®å®Ÿè¡Œãƒ—ログラムã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„る開始用ã®ã‚³ãƒ¼ãƒ‰ã®ä¸€éƒ¨ã«
          <code>ld.so</code> ã‚’èµ·å‹•ã™ã‚‹ã‚³ãƒ¼ãƒ‰ãŒå«ã¾ã‚Œã¦ã„ã¾ã™)。よã使ã‚れる
          ライブラリã®å‹•的ロードã®åˆ©ç‚¹ã¯æ˜Žã‚‰ã‹ã§ã™ã€‚ライブラリã®ã‚³ãƒ¼ãƒ‰ã¯
          システムライブラリ㫠<code>libc.so</code> ã®ã‚ˆã†ã«ã—ã¦ä¸€åº¦ä¿å­˜ã™ã‚‹ã ã‘ã§ã‚ˆãã€
          プログラムã®ãŸã‚ã«å¿…è¦ãªãƒ‡ã‚£ã‚¹ã‚¯ã®é ˜åŸŸã‚’節約ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>二ã¤ã‚ã®æ–¹æ³•ã§ã¯ DSO ã¯æ™®é€šã¯<em>共有オブジェクト</em>ã‚„
          <em>DSO ファイル</em>ã¨å‘¼ã°ã‚Œã¦ã„ã¦ã€ä»»æ„ã®æ‹¡å¼µå­ã‚’付ã‘ã‚‹ã“ã¨ãŒã§ãã¾ã™
          (ãŸã ã—ã€æ¨™æº–çš„ãªåå‰ã¯ <code>foo.so</code> ã§ã™)。
          ã“れらã®ãƒ•ァイルã¯é€šå¸¸ã¯ãƒ—ログラム専用ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ç½®ã‹ã‚Œã€
          ã“れらを使ã†å®Ÿè¡Œãƒ—ログラムã¸ã®ãƒªãƒ³ã‚¯ã¯è‡ªå‹•çš„ã«ã¯ã•れã¾ã›ã‚“。
          ã§ã™ã®ã§ã€å®Ÿè¡Œãƒ—ログラム㯠<code>dlopen()</code> を使ã£ã¦
          å®Ÿè¡Œæ™‚ã«æ‰‹å‹•ã§ DSO をプログラムã®ã‚¢ãƒ‰ãƒ¬ã‚¹ç©ºé–“ã«ãƒ­ãƒ¼ãƒ‰ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
          ã“ã®æ™‚点ã§ã¯å®Ÿè¡Œãƒ—ログラムã«å¯¾ã—㦠DSO ã®ã‚·ãƒ³ãƒœãƒ«ã®è§£æ±ºã¯è¡Œãªã‚れã¾ã›ã‚“。
          ã—ã‹ã—ã€ãã®ä»£ã‚り㫠Unix ã®ãƒ­ãƒ¼ãƒ€ãŒ DSO ã® (ã¾ã æœªè§£æ±ºã®) シンボルを
          実行プログラムã«ã‚ˆã‚Šã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã•れãŸã‚·ãƒ³ãƒœãƒ«ã¨æ—¢ã«ãƒ­ãƒ¼ãƒ‰ã•れãŸ
          DSO ライブラリã«ã‚ˆã‚Šã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã•れãŸã‚·ãƒ³ãƒœãƒ« (特ã«ã€ã©ã“ã«ã§ã‚‚ã‚ã‚‹
          <code>libc.so</code> ã®ã™ã¹ã¦ã®ã‚·ãƒ³ãƒœãƒ«) ã§è‡ªå‹•çš„ã«è§£æ±ºã—ã¾ã™ã€‚
          ã“ã†ã™ã‚‹ã“ã¨ã§ã€DSO ã¯æœ€åˆã‹ã‚‰é™çš„ã«ãƒªãƒ³ã‚¯ã•れã¦ã„ãŸã‹ã®ã‚ˆã†ã«ã€
          実行プログラムã®ã‚·ãƒ³ãƒœãƒ«ã‚’知るã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>最後ã«ã€DSO ã® API を利点を生ã‹ã™ãŸã‚ã«ã€ãƒ—ログラムã¯
          後ã§ãƒ‡ã‚£ã‚¹ãƒ‘ッãƒãƒ†ãƒ¼ãƒ–ル<em>ãªã©</em>ã§ã‚·ãƒ³ãƒœãƒ«ã‚’使ã†ã“ã¨ãŒã§ãるよã†ã«ã€
          <code>dlsym()</code> を使ã£ã¦ã„ãã¤ã‹ã®ã‚·ãƒ³ãƒœãƒ«ã‚’解決ã—ã¾ã™ã€‚
          ã™ãªã‚ã¡: 実行プログラムã¯å¿…è¦ãªã™ã¹ã¦ã®ã‚·ãƒ³ãƒœãƒ«ã‚’手動ã§è§£æ±ºã—ãªã‘れã°
          ãªã‚Šã¾ã›ã‚“。ã“ã®æ©Ÿæ§‹ã®åˆ©ç‚¹ã¯ãƒ—ログラムã®ã‚ªãƒ—ショナルãªéƒ¨åˆ†ã¯
          å¿…è¦ã«ãªã‚‹ã¾ã§ãƒ­ãƒ¼ãƒ‰ã™ã‚‹å¿…è¦ãŒãªã„ (ã ã‹ã‚‰ãƒ¡ãƒ¢ãƒªã‚‚消費ã—ãªã„)
          ã“ã¨ã§ã™ã€‚å¿…è¦ãªã‚‰ã°ã€åŸºæœ¬ãƒ—ãƒ­ã‚°ãƒ©ãƒ ã®æ©Ÿèƒ½ã‚’æ‹¡å¼µã™ã‚‹ãŸã‚ã«
          ã“れらã®éƒ¨åˆ†ã‚’å‹•çš„ã«ãƒ­ãƒ¼ãƒ‰ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>ã“ã® DSO 機構ã¯ç°¡å˜ãªã‚ˆã†ã«è¦‹ãˆã¾ã™ãŒã€å°‘ãªãã¨ã‚‚一ã¤é›£ã—ã„点ãŒ
          ã‚りã¾ã™: プログラムを拡張ã™ã‚‹ãŸã‚ã« DSO を使ã£ã¦ã„ã‚‹ã¨ãã«ã€
          DSO ãŒå®Ÿè¡Œãƒ—ログラムã‹ã‚‰ã‚·ãƒ³ãƒœãƒ«ã‚’解決ã™ã‚‹ç‚¹ã§ã™ (äºŒç•ªç›®ã®æ–¹æ³•)。
          ã“れã¯ãªãœã§ã—ょã†ã‹ã€‚ãれã¯ã€DSO ã®ã‚·ãƒ³ãƒœãƒ«ã‚’実行プログラムã®
          シンボルã‹ã‚‰ã€Œé€†è§£æ±ºã€ã™ã‚‹ã¨ã„ã†ã®ã¯ãƒ©ã‚¤ãƒ–ラリã®è¨­è¨ˆ
          (ライブラリã¯ãれを使用ã™ã‚‹ãƒ—ログラムã®ã“ã¨ã¯ä½•ã‚‚
          知らãªã„) ã«åã—ã¦ã„ã¦ã€ã“ã®æ©Ÿèƒ½ã¯ã™ã¹ã¦ã®ãƒ—ラットフォームã«
          ã‚ã‚‹ã‚ã‘ã§ã¯ãªãã€æ¨™æº–化もã•れã¦ã„ãªã„ã‹ã‚‰ã§ã™ã€‚
          実際ã«ã¯å®Ÿè¡Œãƒ—ログラムã®ã‚°ãƒ­ãƒ¼ãƒãƒ«ãªã‚·ãƒ³ãƒœãƒ«ã¯å†ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã•れるã“ã¨ã¯
          ã‚ã¾ã‚Šãªãã€DSO ã‹ã‚‰ä½¿ã†ã“ã¨ãŒã§ãã¾ã›ã‚“。リンカã«ã‚°ãƒ­ãƒ¼ãƒãƒ«ã‚·ãƒ³ãƒœãƒ«ã™ã¹ã¦ã‚’
          エクスãƒãƒ¼ãƒˆã™ã‚‹ã‚ˆã†ã«ã•ã›ã‚‹æ–¹æ³•を見ã¤ã‘ã‚‹ã“ã¨ãŒã€å®Ÿè¡Œæ™‚ã«ãƒ—ログラムを
          æ‹¡å¼µã™ã‚‹ãŸã‚ã« DSO を使ã†ã¨ãã®ä¸€ç•ªã®å•題ã§ã™ã€‚</p>
      
          <p>共有ライブラリã®ã‚¢ãƒ—ローãƒãŒæ™®é€šã®æ–¹æ³•ã§ã™ã€‚DSO 機構ã¯ãã®ãŸã‚ã«
          設計ã•れãŸã‚‚ã®ã§ã™ã‹ã‚‰ã€‚ã—ãŸãŒã£ã¦ã€ãã®æ–¹æ³•ã¯ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ãŒ
          æä¾›ã™ã‚‹ã»ã¨ã‚“ã©ã™ã¹ã¦ã®ç¨®é¡žã®ãƒ©ã‚¤ãƒ–ラリã§ä½¿ã‚れã¦ã„ã¾ã™ã€‚
          一方ã€ãƒ—ãƒ­ã‚°ãƒ©ãƒ ã®æ‹¡å¼µã®ãŸã‚ã«å…±æœ‰ã‚ªãƒ–ジェクトを使用ã™ã‚‹ã€ã¨ã„ã†æ–¹ã¯
          ã‚ã¾ã‚Šä½¿ã‚れã¦ã„ã¾ã›ã‚“。</p>
      
          <p>1998 å¹´ã®æ™‚点ã§ã€å®Ÿè¡Œæ™‚ã«å®Ÿéš›ã«æ©Ÿèƒ½æ‹¡å¼µã®ãŸã‚ã« DSO 機構を使ã£ã¦ã„ã‚‹
          ソフトウェアパッケージã¯å°‘ã—ã ã‘ã§ã—ãŸ: Perl 5 (XS 機構㨠DnaLoader モジュール
          ã«ã‚ˆã‚‹ã‚‚ã®)ã€Netscape サーãƒ<em>ãªã©</em>ã§ã™ã€‚Apache ã¯ã™ã§ã«
          ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æ¦‚念を使ã£ã¦æ©Ÿèƒ½æ‹¡å¼µã‚’ã—ã¦ã„ã¦ã€å†…部的ã«ãƒ‡ã‚£ã‚¹ãƒ‘ッãƒãƒªã‚¹ãƒˆã«
          基ã¥ã„ãŸå¤–部モジュール㮠Apache コア機能ã¸ã®ãƒªãƒ³ã‚¯ã‚’行ãªã£ã¦ã„ã¾ã—ãŸã®ã§ã€
          ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 1.3 ã‹ã‚‰ã€Apache ã‚‚ DSO 機構を使ã†ä»²é–“ã«ãªã‚Šã¾ã—ãŸã€‚
          Apache ã¯å®Ÿè¡Œæ™‚ã« DSO を使ã£ã¦ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ロードã™ã‚‹ã‚ˆã†ã«ã™ã§ã«
          é‹å‘½ä»˜ã‘られã¦ã„ãŸã®ã§ã™ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="advantages" id="advantages">åˆ©ç‚¹ã¨æ¬ ç‚¹</a></h2>
      
          <p>上記㮠DSO ã«åŸºã¥ã„ãŸæ©Ÿèƒ½ã¯ä»¥ä¸‹ã®åˆ©ç‚¹ãŒã‚りã¾ã™:</p>
      
          <ul>
            <li>実際ã®ã‚µãƒ¼ãƒãƒ—ロセスを組ã¿ç«‹ã¦ã‚‹ãŸã‚ã«ã€
            ビルド時㫠<code>configure</code> ã®ã‚ªãƒ—ションを使ã†ä»£ã‚りã«
            実行時㫠<code>httpd.conf</code> ã®è¨­å®šç”¨ã‚³ãƒžãƒ³ãƒ‰
            <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code>
            を使ã†ã“ã¨ãŒã§ãã¾ã™ã®ã§ã€ã‚µãƒ¼ãƒãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®æŸ”軟性ãŒé«˜ã¾ã‚Šã¾ã—ãŸã€‚
            ãŸã¨ãˆã°ã€ä¸€ã¤ã® Apache ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‹ã‚‰
            é•ã†æ§‹æˆã®ã‚µãƒ¼ãƒ (標準版㨠SSL ç‰ˆã€æœ€å°æ§‹æˆã¨æ‹¡å¼µç‰ˆ [mod_perl, PHP3]
            <em>ãªã©</em>) を実行ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</li>
      
            <li>インストールã®å¾Œã§ã‚ã£ã¦ã‚‚ã€ã‚µãƒ¼ãƒã®ãƒ‘ッケージをサードパーティ
            モジュールã§ç°¡å˜ã«æ‹¡å¼µã§ãるよã†ã«ãªã‚Šã¾ã—ãŸã€‚ã“れã¯ã€Apache コア
            パッケージã¨ã€PHP3, mod_perl, mod_fastcgi <em>ãªã©</em> ã®è¿½åŠ ã®
            パッケージを作æˆã§ãã‚‹ã®ã§ã€å°‘ãªãã¨ã‚‚ベンダã®ãƒ‘ッケージ管ç†è€…ã«ã¨ã£ã¦
            大ããªåˆ©ç‚¹ãŒã‚りã¾ã™ã€‚</li>
      
            <li>Apache モジュールã®é–‹ç™ºãŒç°¡å˜ã«ãªã‚Šã¾ã™ã€‚
            ã“れ㯠DSO 㨠<code class="program"><a href="./programs/apxs.html">apxs</a></code> ã®çµ„ã¿åˆã‚ã›ã«ã‚ˆã‚Šã€Apache ソースツリーã®
            外ã§ä½œæ¥­ã§ãã€é–‹ç™ºä¸­ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æ–°ã—ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’
            実行中㮠Apache サーãƒã«çµ„ã¿è¾¼ã‚€ãŸã‚ã« <code>apxs -i</code> ã¨
            <code>apachectl restart</code> を行ãªã†ã ã‘ã§è‰¯ããªã‚‹ã‹ã‚‰ã§ã™ã€‚</li>
          </ul>
      
          <p>DSO ã«ã¯ä»¥ä¸‹ã®æ¬ ç‚¹ãŒã‚りã¾ã™:</p>
      
          <ul>
            <li>ã™ã¹ã¦ã®ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ãŒãƒ—ログラムã®ã‚¢ãƒ‰ãƒ¬ã‚¹ç©ºé–“ã«
            コードを動的ロードã™ã‚‹ã“ã¨ã‚’サãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã‚ã§ã¯ãªã„ã®ã§ã€
            プラットフォームã«ã‚ˆã£ã¦ã¯ DSO 機構ã¯ä½¿ãˆã¾ã›ã‚“。</li>
      
            <li>Unix ã®ãƒ­ãƒ¼ãƒ€ãŒã‚·ãƒ³ãƒœãƒ«ã®è§£æ±ºã‚’ã™ã‚‹å¿…è¦ãŒã§ããŸã®ã§ã€
            ãã®ã‚ªãƒ¼ãƒãƒ˜ãƒƒãƒ‰ã«ã‚ˆã‚Šã‚µãƒ¼ãƒã®èµ·å‹•時間ãŒç´„ 20% é…ããªã£ã¦ã„ã¾ã™ã€‚</li>
      
            <li>ä½ç½®éžä¾å­˜ã‚³ãƒ¼ãƒ‰ (PIC) (訳注 position independent code) ã¯
            相対アドレスã®ãŸã‚ã«è¤‡é›‘ãªã‚¢ã‚»ãƒ³ãƒ–ラã®ãƒˆãƒªãƒƒã‚¯ãŒå¿…è¦ãªã“ã¨ãŒã‚りã€
            ãれã¯å¿…ãšã—も絶対アドレスã¨åŒã˜ãらã„ã®é€Ÿåº¦ãŒã§ã‚‹ã‚ã‘ã§ã¯ã‚りã¾ã›ã‚“ã®ã§ã€
            プラットフォームã«ã‚ˆã£ã¦ã¯ã‚µãƒ¼ãƒã®å®Ÿè¡Œé€Ÿåº¦ãŒç´„ 5% é…ããªã‚Šã¾ã™ã€‚</li>
      
            <li>DSO モジュールã¯ã™ã¹ã¦ã®ãƒ—ラットフォームã§ä»–ã® DSO ã«åŸºã¥ã„ãŸ
            ライブラリã«å¯¾ã—ã¦ãƒªãƒ³ã‚¯ã§ãã‚‹ (<code>ld -lfoo</code>)
            ã¨ã„ã†ã‚ã‘ã§ã¯ã‚りã¾ã›ã‚“ã®ã§ (ãŸã¨ãˆã°ã€a.out ã®ãƒ—ラットフォームã§ã¯
            ã“ã®æ©Ÿèƒ½ã¯ã‚りã¾ã›ã‚“ãŒã€ELF ã®ãƒ—ラットフォームã«ã¯ã‚りã¾ã™)ã€
            ã™ã¹ã¦ã®ç¨®é¡žã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã« DSO 機構を使ãˆã‚‹ã‚ã‘ã§ã¯ã‚りã¾ã›ã‚“。
            è¨€ã„æ›ãˆã‚‹ã¨ã€DSO ファイルã¨ã—ã¦ã‚³ãƒ³ãƒ‘イルã•れãŸãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®
            使ãˆã‚‹ã‚·ãƒ³ãƒœãƒ«ã¯ã€
            Apache ã®ã‚³ã‚¢ã®ã‚·ãƒ³ãƒœãƒ«ã€C ライブラリ (<code>libc</code>) ã¨
            Apache コアãŒä½¿ã£ã¦ã„ã‚‹ä»–ã®ã™ã¹ã¦ã®é™çš„ãªãƒ©ã‚¤ãƒ–ラリã¨å‹•的ライブラリã®
            シンボルã€PIC ã«ã‚ˆã‚‹é™çš„ãªãƒ©ã‚¤ãƒ–ラリ (<code>libfoo.a</code>) ã®
            シンボルã®ã¿ã«åˆ¶é™ã•れã¾ã™ã€‚ãã®ä»–ã®ã‚³ãƒ¼ãƒ‰ã‚’ä½¿ã†æ–¹æ³•ã¯ã€
            Apache コア自身ãŒã™ã§ã«ãã®ã‚³ãƒ¼ãƒ‰ã¸ã®å‚ç…§ãŒã‚るよã†ã«ã™ã‚‹ã‹ã€
            <code>dlopen ()</code> を使ã£ã¦ã‚³ãƒ¼ãƒ‰ã‚’自分自身ã§ãƒ­ãƒ¼ãƒ‰ã™ã‚‹ã‹ã®
           ã©ã¡ã‚‰ã‹ã—ã‹ã‚りã¾ã›ã‚“。</li>
          </ul>
      
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/dso.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/dso.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/dso.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/dso.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/dso.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/dso.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_0.html.de���������������������������������������������������0000644�0000000�0000050�00000042543�13412755316�020064� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="de" xml:lang="de"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Übersicht der neuen Funktionen im Apache HTTP Server 2.0 - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP-Server</a> &gt; <a href="http://httpd.apache.org/docs/">Dokumentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Übersicht der neuen Funktionen im Apache HTTP Server 2.0</h1>
      <div class="toplang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/new_features_2_0.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/new_features_2_0.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_0.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/new_features_2_0.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/new_features_2_0.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_0.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./ru/new_features_2_0.html" hreflang="ru" rel="alternate" title="Russian">&nbsp;ru&nbsp;</a> |
      <a href="./tr/new_features_2_0.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
        <p>Dieses Dokument beschreibt einige der wichtigsten Änderungen
           des Apache HTTP Servers 2.0 gegenüber der Version 1.3.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#core">Core-Erweiterungen</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#module">Modul-Erweiterungen</a></li>
      </ul><h3>Siehe auch</h3><ul class="seealso"><li><a href="upgrading.html">Upgrade von 1.3 auf 2.0</a></li><li><a href="#comments_section">Kommentare</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="core" id="core">Core-Erweiterungen</a></h2>
          
      
          <dl>
            <dt><strong>Unix-Threading</strong></dt>
      
            <dd>Auf Unix-Systemen mit Unterstützung für
            POSIX-Threads, kann der Apache httpd jetzt in einem Multi-Process,
            Multi-Threaded Hybrid-Mode gestartet werden. Dies verbessert die
            Skalierfähigkeit für viele, jedoch nicht unbedingt alle
            Konfigurationen.</dd>
      
            <dt><strong>Neues Build-System</strong></dt>
      
            <dd>Das Build-System wurde komplett auf der Basis von
            <code>autoconf</code> und <code>libtool</code> neu geschrieben.
            Dadurch wird das Konfigurationssystem des Apache httpd dem vieler
            anderer Packages ähnlicher.</dd>
      
            <dt><strong>Multi-Protokoll-Unterstützung</strong></dt>
      
            <dd>Der Apache HTTP Server stellt jetzt die notwendigen
            Grundfunktionalitäten bereit, um mehrere Protokolle
            unterstützen und verarbeiten zu können.
            <code class="module"><a href="./mod/mod_echo.html">mod_echo</a></code> wurde hierfür als Beispiel
            geschrieben.</dd>
      
            <dt><strong>Bessere Unterstützung von
            Nicht-Unix-Plattformen</strong></dt>
      
            <dd>Der Apache HTTP Server 2.0 ist schneller und stabiler auf
            Nicht-Unix-Plattformen wie BeOS, OS/2 und Windows. Mit der
            Einführung von Plattform-spezifischen <a href="mpm.html">Multi-Processing Modulen</a> (MPMs) und der Apache
            Portable Runtime (APR), sind diese Plattformen jetzt in ihrem
            nativen API implementiert, wodurch die Verwendung der häufig
            fehlerbehafteten und schlecht funktionierenden
            POSIX-Emulation-Layer vermieden wird.</dd>
      
            <dt><strong>Neues Apache-httpd API</strong></dt>
      
            <dd>Das API für Module hat sich in 2.0 stark verändert.
            Die meisten der Sortierungs-/Prioritätsprobleme von Modulen bei
            1.3 sollten nun verschwunden sein. In 2.0 wird hiervon vieles
            automatisch durchgeführt. Die Modulsortierung wird jetzt
            über einen pre-hook vorgenommen, um mehr Flexibilität
            zu bieten. Außerdem wurden neue API-Calls hinzugefügt,
            die zusätzliche Modulfähigkeiten zur Verfügung stellen,
            ohne den Kern des Apache HTTP Servers anpassen zu müssen.</dd>
      
            <dt><strong>IPv6-Unterstützung</strong></dt>
      
            <dd>Auf Systemen, bei denen die zugrundeliegende Apache Portable
            Runtime-Bibliothek IPv6 unterstützt, bekommt der Apache httpd
            standarmäßig IPv6 Listening Sockets. Zusätzlich
            unterstützen die Konfigurationsanweisungen <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>, <code class="directive"><a href="./mod/core.html#namevirtualhost">NameVirtualHost</a></code> und <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code> numerische IPv6-Adressangaben
            (z.B., "<code>Listen [2001:db8::1]:8080</code>").</dd>
      
            <dt><strong>Filterung</strong></dt>
      
            <dd>Apache-httpd-Module können jetzt als Filter entwickelt
            und zur Filterung des rein- und rausgehenden Datenstroms des
            Servers eingesetzt werden. Hierdurch kann beispielsweise die
            Ausgabe von CGI-Skripten durch den <code>INCLUDES</code>-Filter
            von <code class="module"><a href="./mod/mod_include.html">mod_include</a></code> bearbeitet werden und so
            Server-Side Include-Anweisungen ausgeführt werden. Das Modul
            <code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code> erlaubt externen Programmen als
            Filter zu agieren, in der gleichen Weise wie CGI-Programme als
            Eingabe dienen können.</dd>
      
            <dt><strong>Mehrsprachige Fehlermeldungen</strong></dt>
      
            <dd>Fehlermeldungen die an den Browser rausgehen, stehen jetzt als
            SSI-Dokumente in verschiedenen Sprachen zur Verfügung. Sie
            können bei Bedarf durch den Administrator angepasst werden,
            um ein einheitliches Design zu erreichen.</dd>
      
            <dt><strong>Vereinfachte Konfiguration</strong></dt>
      
            <dd>Viele der verwirrenden Konfigurationsanweisungen wurden vereinfacht.
            Die oft für Verwirrung sorgenden <code>Port</code>- und
            <code>BindAddress</code>-Anweisungen wurden entfernt.
            Ausschließlich die <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>-Anweisung wird nun zum
            Setzen von IP-Addressen und Portnummern benutzt.
            Der Servername und die Portnummer, die für Weiterleitungen und
            zur Erkennung virtueller Server verwendet werden, werden über
            die <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>-Anweisung
            konfiguriert.</dd>
      
            <dt><strong>Native Windows NT Unicode-Unterstützung</strong></dt>
      
            <dd>Der Apache httpd 2.0 auf Windows NT benutzt jetzt utf-8
            für alle Dateinamen-Kodierungen. Diese werden direkt auf das
            zugrundeliegende Unicode-Dateisystem abgebildet, wodurch
            Mehrsprach-Unterstützung für alle Windows NT-basierten
            Installationen, inklusive Windows 2000 und Windows XP, zur
            Verfügung gestellt wird.  <em>Diese Unterstützung ist
            nicht auf Windows 95, 98 oder ME verfügbar. Hier wird
            weiterhin die jeweils lokale Codepage des Rechners für den
            Zugriff auf das Dateisystem verwendet.</em></dd>
      
            <dt>Bibliothek für reguläre Ausdrücke aktualisiert</dt>
      
            <dd>Der Apache httpd 2.0 enthält die <a href="http://www.pcre.org/">"Perl Compatible
            Regular Expression Library"</a> (PCRE).
            Bei der Auswertung aller regulären Ausdrücke wird nun
            die leistungsfähigere Syntax von Perl 5 verwendet.</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="module" id="module">Modul-Erweiterungen</a></h2>
          
      
          <dl>
            <dt><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></dt>
      
            <dd>Neues Modul in Apache httpd 2.0. Dieses Modul ist ein
            Interface zu den von OpenSSL bereitgestellten SSL/TLS
            Verschlüsselungs-Protokollen.</dd>
      
            <dt><code class="module"><a href="./mod/mod_dav.html">mod_dav</a></code></dt>
      
            <dd>Neues Modul in Apache httpd 2.0. Dieses Modul implementiert
            die HTTP Distributed Authoring and Versioning (DAV) Spezifikation
            zur Erzeugung und Pflege von Web-Inhalten.</dd>
      
            <dt><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code></dt>
      
            <dd>Neues Modul in Apache httpd 2.0. Dieses Modul erlaubt es
            Browsern, die dies unterstützen, eine Komprimierung des
            Inhaltes vor der Auslieferung anzufordern, um so
            Netzwerk-Bandbreite zu sparen.</dd>
      
            <dt><code class="module">mod_auth_ldap</code></dt>
      
            <dd>Neues Modul in Apache httpd 2.0.41. Diese Modul
            ermöglicht die Verwendung einer LDAP-Datenbank zur
            Speicherung von Berechtigungsdaten für die
            HTTP-Basic-Authentication.  Ein Begleitmodul,
            <code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code>, stellt einen Verbindungs-Pool und die
            Pufferung von Abfrageergebnissen zur Verfügung.</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_digest.html">mod_auth_digest</a></code></dt>
      
            <dd>Zusätzliche Unterstützung für
            prozessübergreifendes Session-Caching mittels Shared-Memory.
            </dd>
      
            <dt><code class="module"><a href="./mod/mod_charset_lite.html">mod_charset_lite</a></code></dt>
      
            <dd>Neues Modul in Apache httpd 2.0.
            Dieses experimentelle Modul erlaubt Zeichensatz-Übersetzungen oder
            -Umschlüsselung.</dd>
      
            <dt><code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code></dt>
      
            <dd>Neues Modul in Apache httpd 2.0. Dieses Modul beinhaltet die
            Funktionalität von <code>mod_mmap_static</code> aus Version
            1.3 des Apache HTTP Server zuzüglich einiger weiterer
            Caching-Funktionen.</dd>
      
            <dt><code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code></dt>
      
            <dd>Dieses Modul ist in Apache httpd 2.0 deutlich flexibler
            geworden. Es kann jetzt die von <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>
            genutzten Request-Header manipulieren und es ist möglich
            Response-Header auf Basis von definierten Bedingungen zu
            verändern.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dt>
      
            <dd>Das Proxy Modul wurde komplett neu geschrieben um die
            Möglichkeiten der neuen Filter-Funktionalität
            auszuschöpfen und um einen zuverlässigen Proxy zu haben, der
            den HTTP/1.1-Spezifikationen entspricht. Neue <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>
            -Konfigurationsabschnitte bieten eine besser lesbare (und intern
            schnellere) Kontrolle der vermittelten Seiten.
            Die überladenen <code>&lt;Directory
            "proxy:..."&gt;</code>-Konfigurationen werden nicht
            mehr unterstützt. Das Modul ist nun in mehrere Module
            unterteilt, die jeweils ein bestimmtes Übertragungsprotokoll
            unterstützen, wie <code>proxy_connect</code>,
            <code>proxy_ftp</code> und <code>proxy_http</code>.</dd>
      
            <dt><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></dt>
      
            <dd>Die neue Konfigurationsanweisung <code class="directive"><a href="./mod/mod_negotiation.html#forcelanguagepriority">ForceLanguagePriority</a></code>
            kann benutzt werden, um sicherzustellen, dass ein Client auf jeden
            Fall ein einzelnes Dokument, anstatt einer NOT ACCEPTABLE- oder
            MULTIPLE CHOICES-Antwort, bekommt. Zusätzlich wurden die
            Negotiation- und Multiview-Algorithmen angepasst um einheitlichere
            Ergebnisse zu liefern. Außerdem wird ein neues
            Type-Map-Format bereitgestellt, das Dokumenteninhalte direkt
            enthalten kann.</dd>
      
            <dt><code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code></dt>
      
            <dd>Automatisch erzeugte Verzeichnisindizes können zur besseren
            Übersichtlichkeit durch HTML-Tabellen dargestellt werden.
            Genauere Sortierungen, wie Sortierung nach Versionsnummer und
            Wildcard-Filterung des Verzeichnisindizes werden unterstützt.</dd>
      
            <dt><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></dt>
      
            <dd>Neue Anweisungen erlauben es, die Standard Start- und Endtags von
            SSI-Elementen zu ändern. Zudem können die Default-Formate
            für Fehlermeldungen und Zeitangaben nun ebenfalls in der
            Serverkonfiguration vorgenommen werden. Auf die Ergebnisse der
            Auswertung und Gruppierung von regulären Ausdrücken (jetzt
            auf Basis der Perl-Syntax für reguläre Ausdrücke) kann
            über die <code class="module"><a href="./mod/mod_include.html">mod_include</a></code> Variablen <code>$0</code>
            bis <code>$9</code> zugegriffen werden.</dd>
      
            <dt><code class="module">mod_auth_dbm</code></dt>
      
            <dd>DBM-ähnliche Datenbanken werden jetzt durch die
            Konfigurationsaweisung <code>AuthDBMType</code>
            unterstützt.</dd>
          </dl>
        </div></div>
      <div class="bottomlang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/new_features_2_0.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/new_features_2_0.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_0.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/new_features_2_0.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/new_features_2_0.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_0.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./ru/new_features_2_0.html" hreflang="ru" rel="alternate" title="Russian">&nbsp;ru&nbsp;</a> |
      <a href="./tr/new_features_2_0.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Kommentare</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/new_features_2_0.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Lizenziert unter der <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_2.html.en���������������������������������������������������0000644�0000000�0000050�00000045124�13412755316�020076� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Overview of new features in Apache HTTP Server 2.2 - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Overview of new features in Apache HTTP Server 2.2</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/new_features_2_2.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_2.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ko/new_features_2_2.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_2.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/new_features_2_2.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
        <p>This document describes some of the major changes between the
           2.0 and 2.2 versions of the Apache HTTP Server. For new features since
           version 1.3, see the <a href="new_features_2_0.html">2.0 new features</a>
           document.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#core">Core Enhancements</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#module">Module Enhancements</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programs">Program Enhancements</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#developer">Module Developer Changes</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="core" id="core">Core Enhancements</a></h2>
          
          <dl>
      
            <dt>Authn/Authz</dt>
            <dd>The bundled authentication and authorization modules have
                been refactored.  The new mod_authn_alias(already removed from 2.3/2.4)
                module can greatly simplify certain authentication configurations.
                See <a href="#module">module name changes</a>, and
                <a href="#developer">the developer changes</a> for more
                information about how these changes affects users and module
                writers.</dd>
      
            <dt>Caching</dt>
            <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>, <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code>, and
                mod_mem_cache(already removed from 2.3/2.4) have undergone a lot of changes, and
                are now considered production-quality. <code class="program"><a href="./programs/htcacheclean.html">htcacheclean</a></code>
                has been introduced to clean up <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code>
                setups.</dd>
      
            <dt>Configuration</dt>
            <dd>The default configuration layout has been simplified and
                modularised. Configuration snippets which can be used to
                enable commonly-used features are now bundled with Apache, and
                can be easily added to the main server config.</dd>
      
            <dt>Graceful stop</dt>
            <dd>The <code class="module"><a href="./mod/prefork.html">prefork</a></code>, <code class="module"><a href="./mod/worker.html">worker</a></code> and
                <code class="module"><a href="./mod/event.html">event</a></code>  MPMs now allow <code class="program"><a href="./programs/httpd.html">httpd</a></code>
                to be shutdown gracefully via the
                <a href="stopping.html#gracefulstop"><code>graceful-stop</code></a>
                signal. The <code class="directive"><a href="./mod/mpm_common.html#gracefulshutdowntimeout">GracefulShutdownTimeout</a></code> directive
                has been added to specify an optional timeout, after which
                <code class="program"><a href="./programs/httpd.html">httpd</a></code> will terminate regardless of the status
                of any requests being served.</dd>
      
            <dt>Proxying</dt>
            <dd>The new <code class="module"><a href="./mod/mod_proxy_balancer.html">mod_proxy_balancer</a></code> module provides
                load balancing services for <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>.
                The new <code class="module"><a href="./mod/mod_proxy_ajp.html">mod_proxy_ajp</a></code> module adds support for the
                <code>Apache JServ Protocol version 1.3</code> used by
                <a href="http://tomcat.apache.org/">Apache Tomcat</a>.</dd>
      
            <dt>Regular Expression Library Updated</dt>
            <dd>Version 5.0 of the
                <a href="http://www.pcre.org/">Perl Compatible Regular Expression
                Library</a> (PCRE) is now included.  <code class="program"><a href="./programs/httpd.html">httpd</a></code> can be
                configured to use a system installation of PCRE by passing the
                <code>--with-pcre</code> flag to configure.</dd>
      
            <dt>Smart Filtering</dt>
            <dd><code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code> introduces dynamic configuration
                to the output filter chain.  It enables filters to be conditionally
                inserted, based on any Request or Response header or environment
                variable, and dispenses with the more problematic dependencies and
                ordering problems in the 2.0 architecture.</dd>
      
            <dt>Large File Support</dt>
            <dd><code class="program"><a href="./programs/httpd.html">httpd</a></code> is now built with support for files larger
                than 2GB on modern 32-bit Unix systems.  Support for handling
                &gt;2GB request bodies has also been added.</dd>
      
            <dt>Event MPM</dt>
            <dd>The <code class="module"><a href="./mod/event.html">event</a></code> MPM uses a separate thread to handle
                Keep Alive requests and accepting connections.  Keep Alive requests
                have traditionally required httpd to dedicate a worker to handle it.
                This dedicated worker could not be used again until the Keep Alive
                timeout was reached.</dd>
      
            <dt>SQL Database Support</dt>
            <dd><code class="module"><a href="./mod/mod_dbd.html">mod_dbd</a></code>, together with the <code>apr_dbd</code>
                framework, brings direct SQL support to modules that need it.
                Supports connection pooling in threaded MPMs.</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="module" id="module">Module Enhancements</a></h2>
          
          <dl>
            <dt>Authn/Authz</dt>
            <dd>Modules in the aaa directory have been renamed and offer
                better support for digest authentication.  For example,
                <code>mod_auth</code> is now split into
                <code class="module"><a href="./mod/mod_auth_basic.html">mod_auth_basic</a></code> and
                <code class="module"><a href="./mod/mod_authn_file.html">mod_authn_file</a></code>; <code>mod_auth_dbm</code> is now
                called <code class="module"><a href="./mod/mod_authn_dbm.html">mod_authn_dbm</a></code>; <code>mod_access</code> has
                been renamed <code class="module"><a href="./mod/mod_authz_host.html">mod_authz_host</a></code>.  There is also a new
                mod_authn_alias(already removed from 2.3/2.4) module for simplifying
                certain authentication configurations.
            </dd>
      
            <dt><code class="module"><a href="./mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></dt>
            <dd>This module is a port of the 2.0
                <code>mod_auth_ldap</code> module to the 2.2 <code>Authn/Authz</code>
                framework.  New features include using LDAP attribute values and
                complicated search filters in the
                <code class="directive"><a href="./mod/mod_authz_core.html#require">Require</a></code> directive.</dd>
      
            <dt><code class="module"><a href="./mod/mod_authz_owner.html">mod_authz_owner</a></code></dt>
            <dd>A new module that authorizes access to files based
                on the owner of the file on the file system</dd>
      
            <dt><code class="module"><a href="./mod/mod_version.html">mod_version</a></code></dt>
            <dd>A new module that allows configuration blocks to be enabled based on the
                version number of the running server.</dd>
      
            <dt><code class="module"><a href="./mod/mod_info.html">mod_info</a></code></dt>
            <dd>Added a new <code>?config</code> argument which will show
                the configuration directives as parsed by Apache, including
                their file name and line number.  The module also
                shows the order of all request hooks and additional
                build information, similar to <code>httpd -V</code>.</dd>
      
            <dt><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></dt>
            
            <dd>Added a support for
               <a href="http://www.ietf.org/rfc/rfc2817.txt">RFC 2817</a>, which
               allows connections to upgrade from clear text to TLS encryption.</dd>
      
            <dt><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code></dt>
            <dd><code>mod_imap</code> has been renamed to
                <code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code> to avoid user confusion.</dd>
          </dl>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="programs" id="programs">Program Enhancements</a></h2>
          
          <dl>
            <dt><code class="program"><a href="./programs/httpd.html">httpd</a></code></dt>
            <dd>A new command line option <code>-M</code> has been added that
            lists all modules that are loaded based on the current
            configuration. Unlike the <code>-l</code> option, this list
            includes DSOs loaded via <code class="module"><a href="./mod/mod_so.html">mod_so</a></code>.</dd>
      
            <dt><code class="program"><a href="./programs/httxt2dbm.html">httxt2dbm</a></code></dt>
            <dd>A new program used to generate dbm files from text input,
                for use in <code class="directive"><a href="./mod/mod_rewrite.html#rewritemap">RewriteMap</a></code>
                with the <code>dbm</code> map type.</dd>
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="developer" id="developer">Module Developer Changes</a></h2>
          
          <dl>
            <dt><a class="glossarylink" href="./glossary.html#apr" title="see glossary">APR</a> 1.0 API</dt>
      
            <dd>Apache 2.2 uses the APR 1.0 API.  All deprecated functions and
                symbols have been removed from <code>APR</code> and
                <code>APR-Util</code>. For details, see the
                <a href="http://apr.apache.org/">APR Website</a>.</dd>
      
            <dt>Authn/Authz</dt>
            <dd>The bundled authentication and authorization modules have
                been renamed along the following lines:
                <ul>
                <li><code>mod_auth_*</code>  -&gt; Modules that implement an HTTP
                authentication mechanism</li>
                <li><code>mod_authn_*</code> -&gt; Modules that provide a backend
                authentication provider</li>
                <li><code>mod_authz_*</code> -&gt; Modules that implement
                authorization (or access)</li>
                <li><code>mod_authnz_*</code> -&gt; Module that implements both
                authentication &amp; authorization</li>
                </ul>
                There is a new authentication backend provider
                scheme which greatly eases the construction of new authentication
                backends.</dd>
      
            <dt>Connection Error Logging</dt>
      
            <dd>A new function, <code>ap_log_cerror</code> has been added to log
                errors that occur with the client's connection.  When logged,
                the message includes the client IP address.</dd>
      
            <dt>Test Configuration Hook Added</dt>
      
            <dd>A new hook, <code>test_config</code> has been added to aid
                modules that want to execute special code only when the user passes
                <code>-t</code> to <code class="program"><a href="./programs/httpd.html">httpd</a></code>.</dd>
      
            <dt>Set Threaded MPM's Stacksize</dt>
      
            <dd>A new directive, <code class="directive"><a href="./mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code> has been added to
                set the stack size on all threaded MPMs.  This is required
                for some third-party modules on platforms with small default
                thread stack size.</dd>
      
            <dt>Protocol handling for output filters</dt>
      
            <dd>In the past, every filter has been responsible for ensuring
                that it generates the correct response headers where it affects
                them.  Filters can now delegate common protocol management to
                <code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code>, using the
                <code>ap_register_output_filter_protocol</code> or
                <code>ap_filter_protocol</code> calls.</dd>
      
            <dt>Monitor hook added</dt>
            <dd>Monitor hook enables modules to run regular/scheduled jobs
                in the parent (root) process.</dd>
      
            <dt>Regular expression API changes</dt>
      
            <dd>The <code>pcreposix.h</code> header is no longer available;
            it is replaced by the new <code>ap_regex.h</code> header.  The
            POSIX.2 <code>regex.h</code> implementation exposed by the old
            header is now available under the <code>ap_</code> namespace
            from <code>ap_regex.h</code>.  Calls to <code>regcomp</code>,
            <code>regexec</code> and so on can be replaced by calls to
            <code>ap_regcomp</code>, <code>ap_regexec</code>.</dd>
      
            <dt>DBD Framework (SQL Database API)</dt>
      
            <dd><p>With Apache 1.x and 2.0, modules requiring an SQL backend
            had to take responsibility for managing it themselves.  Apart
            from reinventing the wheel, this can be very inefficient, for
            example when several modules each maintain their own connections.</p>
      
            <p>Apache 2.1 and later provides the <code>ap_dbd</code> API for
            managing database connections (including optimised strategies
            for threaded and unthreaded MPMs), while APR 1.2 and later provides
            the <code>apr_dbd</code> API for interacting with the database.</p>
      
            <p>New modules SHOULD now use these APIs for all SQL database
            operations.  Existing applications SHOULD be upgraded to use it
            where feasible, either transparently or as a recommended option
            to their users.</p></dd>
          </dl>
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/new_features_2_2.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_2.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ko/new_features_2_2.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_2.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/new_features_2_2.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/new_features_2_2.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/suexec.html.tr.utf8��������������������������������������������������������0000644�0000000�0000050�00000076300�13447004010�017133� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>SuEXEC Desteği - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>SuEXEC Desteği</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./en/suexec.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/suexec.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/suexec.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/suexec.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/suexec.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p><strong>SuEXEC</strong> özelliği, Apache HTTP Sunucusu kullanıcılarına
            <strong>CGI</strong> ve <strong>SSI</strong> programlarını sunucunun
            aidiyetinde çalıştığı kullanıcıdan farklı bir kullanıcının aidiyetinde
            çalıştırma olanağı verir. Normalde, <strong>CGI</strong> ve
            <strong>SSI</strong> programlarını çalıştıranla sunucuyu çalıştıran
            aynı kullanıcıdır.</p>
      
          <p>Gerektiği gibi kullanıldığında bu özellik, kullanıcılara
            <strong>CGI</strong> ve <strong>SSI</strong> programlarını çalıştırma
            ve geliştirmeye izin vermekle ortaya çıkan güvenlik risklerini azaltır.
            Bununla birlikte, <strong>suEXEC</strong> gerektiÄŸi gibi
            yapılandırılmadığı takdirde bazı sorunlara yol açabilir ve bilgisayar
            güvenliğinizde yeni delikler ortaya çıkmasına sebep olabilir.
            Güvenlikle ilgili mevcut sorunlarla başa çıkmada ve <em>setuid
            root</em> programları yönetmekte bilgi ve deneyim sahibi değilseniz
            <strong>suEXEC</strong> kullanmayı kesinlikle düşünmemenizi
            öneririz.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#before">Başlamadan önce</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#model">SuEXEC Güvenlik Modeli</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#install">suEXEC’in Yapılandırılması ve Kurulumu</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#enable">suEXEC’in etkin kılınması ve iptal edilmesi</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#usage">SuEXEC’in kullanımı</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#debug">SuEXEC ve hata ayıklama</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#jabberwock">Uyarılar ve Örnekler</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="before" id="before">Başlamadan önce</a></h2>
      
          <p>Belgeye balıklama dalmadan önce, suexec'i kullanacağınız ortam ve
            kendiniz hakkında yapılmış çeşitli kabuller hakkında bilgi sahibi
            olmalısınız.</p>
      
          <p>Öncelikle, üzerinde <strong>setuid</strong> va <strong>setgid</strong>
            işlemlerinin yapılabildiği Unix türevi bir işletim sistemi
            kullandığınızı varsayıyoruz. Tüm komut örnekleri buna dayanarak
            verilmiÅŸtir. Bu desteÄŸe sahip baÅŸka platformlar varsa onlardaki
            yapılandırma burada anlattığımız yapılandırmadan farklı olabilir.</p>
      
          <p>İkinci olarak, bilgisayarınızın güvenliği ve yönetimi ile ilgili bazı
            temel kavramları bildiğinizi kabul ediyoruz. Buna
            <strong>setuid/setgid</strong> işlemlerinin sisteminiz ve güvenlik
            seviyesi üzerindeki etkilerini bilmek dahildir.</p>
      
          <p>Üçüncü olarak, <strong>suEXEC</strong> kodunun
            <strong>değiştirilmemiş</strong> bir sürümünü kullandığınızı
            varsayıyoruz. Tüm suEXEC kodu, geliştiricilerin yanında sayısız beta
            kullanıcısı tarafından dikkatle incelenmiş ve denenmiştir. Kodların hem
            basit hem de sağlam bir şekilde güvenli olması için gerekli tüm
            önlemler alınmıştır. Bu kodun değiştirilmesi beklenmedik sorunlara ve
            yeni güvenlik risklerine yol açabilir. Özellikle güvenlikle ilgili
            programlarda deneyimli deÄŸilseniz suEXEC kodunda kesinlikle bir
            değişiklik yapmamalısınız. Değişiklik yaparsanız kodlarınızı gözden
            geçirmek ve tartışmak üzere Apache HTTP Sunucusu geliştirme ekibi ile
            paylaşmanızı öneririz.</p>
      
          <p>Dördüncü ve son olarak, Apache HTTP Sunucusu geliştirme ekibinin
            suEXEC’i öntanımlı httpd kurulumunun bir parçası yapmama kararından
            bahsetmek gerekir. Bunun sonucu olarak, suEXEC yapılandırması sistem
            yöneticisinin ayrıntılı bir incelemesini gerektirir. Gerekli incelemeden
            sonra yönetici tarafından suEXEC yapılandırma seçeneklerine karar
            verilip, normal yollardan sisteme kurulumu yapılır. Bu seçeneklerin
            belirlenmesi, suEXEC işlevselliğinin kullanımı sırasında sistem
            güvenliğini gerektiği gibi sağlamak için yönetici tarafından dikkatle
            saptanmayı gerektirir. Bu sürecin ayrıntılarının yöneticiye bırakılma
            sebebi, suEXEC kurulumunu, suEXEC’i dikkatle kullanacak yeterliliğe sahip
            olanlarla sınırlama  beklentimizdir.</p>
      
          <p>Hala bizimle misiniz? Evet mi? Pekala, o halde devam!</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="model" id="model">SuEXEC Güvenlik Modeli</a></h2>
      
          <p>SuEXEC yapılandırması ve kurulumuna girişmeden önce biraz da
            gerçekleşmesini istediğiniz güvenlik modelinin ayrıntıları üzerinde
            duralım. Böylece, suEXEC’in içinde olup bitenleri ve sisteminizin
            güvenliği için alınacak önlemleri daha iyi anlayabilirsiniz.</p>
      
          <p><strong>suEXEC</strong> işlevselliği, Apache HTTP Sunucusu tarafından
            gerektiği takdirde artalanda çalıştırılan bir setuid programa dayanır.
            Bu program, bir CGI veya SSI betiğine bir HTTP isteği yapıldığı zaman,
            bu betiği, yöneticinin ana sunucunun aidiyetinde çalıştığı kullanıcıdan
            farklı olarak seçtiği bir kullanıcının aidiyetinde çalıştırmak için
            çağrılır. Böyle bir istek geldiğinde, Apache httpd artalandaki setuid
            programına, HTTP isteği yapılan programın ismiyle beraber aidiyetinde
            çalışacağı kullanıcı ve grup kimliklerini de aktarır.</p>
      
          <p>Artalanda çalıştırılan setuid program başarıyı ve başarısızlığı
            aşağıdaki süreci izleyerek saptar. Bunlardan herhangi biri başarısız
            olursa program başarısızlık durumunu günlüğe kaydeder ve bir hata
            vererek çıkar. Aksi takdirde çalışmaya devam eder.</p>
      
          <ol>
            <li>
              <strong>Setuid programı çalıştıran kullanıcı sistemin geçerli
              kullanıcılarından biri mi?</strong>
      
              <p class="indent">Bu, setuid programı çalıştıran kullanıcının
              sistemin gerçek bir kullanıcısı olduğunudan emin olunmasını sağlar.
              </p>
           </li>
      
           <li>
              <strong>Setuid program yeterli sayıda argümanla çağrılmış mı?
              </strong>
      
              <p class="indent">Apache HTTP Sunucusunun artalanda çağırdığı
                setuid program ancak yeterli sayıda argüman sağlandığı takdirde
                çalışacaktır. Argümanların sayısını ve sırasını Apache HTTP sunucusu
                bilir. Eğer setuid program yeterli sayıda argümanla çağrılmamışsa
                ya kendisinde bir değişiklik yapılmıştır ya da kurulu Apache httpd
                çalıştırılabilirinin suEXEC ile ilgili kısmında yanlış giden bir
                şeyler vardır.</p>
            </li>
      
            <li>
              <strong>Bu geçerli kullanıcının bu setuid programı çalıştırma
                yetkisi var mı?</strong>
      
              <p class="indent">Sadece tek bir kullanıcı (Apache’nin aidiyetinde
                çalıştığı kullanıcı) bu programı çalıştırmaya yetkilidir.</p>
            </li>
      
            <li>
              <strong>Hedef CGI veya SSI programı hiyerarşik olarak güvenliği
                bozacak bir dosya yolu üzerinde mi?</strong>
      
              <p class="indent">Hedef CGI veya SSI programının dosya yolu '/' veya
                '..' ile başlıyor  mu? Buna izin verilmez. Hedef CGI veya SSI
                programı suEXEC’in belge kök dizininde yer almalıdır (aşağıda
                <code>--with-suexec-docroot=<em>DİZİN</em></code> seçeneğine
                bakınız).</p>
            </li>
      
            <li>
              <strong>Hedef kullanıcı ismi geçerli mi?</strong>
      
              <p class="indent">Hedef kullanıcı mevcut mu?</p>
            </li>
      
            <li>
              <strong>Hedef grup ismi geçerli mi?</strong>
      
              <p class="indent">Hedef grup mevcut mu?</p>
            </li>
      
            <li>
              <strong>Hedef kullanıcı <code>root</code> değil, değil mi?</strong>
      
              <p class="indent">Mevcut durumda, <code>root</code> kullanıcısının
                CGI/SSI programlarını çalıştırmasına izin verilmemektedir.</p>
            </li>
      
            <li>
              <strong>Hedef kullanıcı kimliği asgari kullanıcı numarasından
                <em>BÜYÜK</em> mü?</strong>
      
              <p class="indent">Asgari kullanıcı numarası yapılandırma sırasında
                belirtilir. Böylece CGI/SSI programlarını çalıştırmasına izin
                verilecek olası en düşük kullanıcı numarasını belirlemeniz mümkün
                kılınmıştır. Bu bazı “sistem†hesaplarını devreden çıkarmak için
                yararlıdır.</p>
            </li>
      
            <li>
              <strong>Hedef grup <code>root</code>  deÄŸil, deÄŸil mi?</strong>
      
              <p class="indent"><code>root</code> grubunun CGI/SSI
                programlarını çalıştırmasına izin verilmemektedir.</p>
            </li>
      
            <li>
              <strong>Hedef grup numarası asgari grup numarasından
                <em>BÜYÜK</em> mü?</strong>
      
              <p class="indent">Asgari grup numarası yapılandırma sırasında
                belirtilir. Böylece CGI/SSI programlarını çalıştırmasına izin
                verilecek olası en düşük grup numarasını belirlemeniz mümkün
                kılınmıştır. Bu bazı “sistem†hesaplarını devreden çıkarmak için
                yararlıdır.</p>
            </li>
      
            <li>
              <strong>Apache’nin artalanda çağırdığı setuid program hedef
                kullanıcı ve grubun aidiyetine geçebildi mi?</strong>
      
              <p class="indent">Bu noktadan itibaren program setuid ve setgid
                çağrıları üzerinden hedef kullanıcı ve grubun aidiyetine geçer.
                Erişim grubu listesi de ayrıca kullanıcının üyesi olduğu tüm
                gruplara geniÅŸletilir.</p>
            </li>
      
            <li>
              <strong>Hedef CGI/SSI programının bulunduğu dizine geçebildik mi?
              </strong>
      
              <p class="indent">Dizin mevcut değilse dosyaları da içeremez. Hedef
                dizine geçemiyorsak bu, dizin mevcut olmadığından olabilir.</p>
            </li>
      
            <li>
              <strong>Hedef dizin Apache için izin verilen yerlerden biri mi?
              </strong>
      
              <p class="indent">İstek sunucunun normal bir bölümü için yapılmış
                olsa da istenen dizin acaba suEXEC’in belge kök dizini altında mı?
                Yani, istenen dizin, suEXEC’in aidiyetinde çalıştığı kullanıcının
                ev dizini altında bulunan, <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code> ile belirtilen dizinin altında mı? (<a href="#install">suEXEC’in yapılandırma seçeneklerine</a>
                bakınız).</p>
            </li>
      
            <li>
              <strong>Hedef dizin başkaları tarafından yazılabilen bir dizin değil,
                deÄŸil mi?</strong>
      
              <p class="indent">Başkaları da yazabilsin diye bir dizin açmıyoruz;
                dizin içeriğini sadece sahibi değiştirebilmelidir.</p>
            </li>
      
            <li>
              <strong>Hedef CGI/SSI programı mevcut mu?</strong>
      
              <p class="indent">Mevcut değilse çalıştırılamaz.</p>
            </li>
      
            <li>
              <strong>Hedef CGI/SSI program dosyasına başkaları tarafından
                yazılamıyor, değil mi?</strong>
      
              <p class="indent">Hedef CGI/SSI programının dosyasına sahibinden
                başka kimsenin bir şeyler yazmasını istemeyiz.</p>
            </li>
      
            <li>
              <strong>Hedef CGI/SSI program setuid veya setgid <em>deÄŸil</em>,
                deÄŸil mi?</strong>
      
              <p class="indent">UID/GID‘i tekrar değiştirecek programlar
                çalıştırmayı istemeyiz.</p>
            </li>
      
            <li>
              <strong>Hedef kullanıcı/grup, programın kullanıcı/grubu ile aynı mı?
              </strong>
      
              <p class="indent">Hedef kullanıcı dosyanın sahibi mi?</p>
            </li>
      
            <li>
              <strong>İşlemlerin güvenle yapılabilmesi için süreç ortamını
                başarıyla temizleyebildik mi?</strong>
      
              <p class="indent">suEXEC, sürecin çalışacağı ortama güvenli bir
                program çalıştırma yolu sağlamaktan başka, yapılandırma sırasında
                oluşturulan güvenli ortam değişkenleri listesinde isimleri bulunan
                ortam değişkenlerinden başkasını aktarmayacaktır.</p>
            </li>
      
            <li>
              <strong>Hedef CGI/SSI programı haline gelip çalışabildik mi?</strong>
      
              <p class="indent">Burası suEXEC’in bitip CGI/SSI programının
                başladığı yerdir.</p>
            </li>
          </ol>
      
          <p>Bu süreç suEXEC güvenlik modelinin standart işlemlerini oluşturur.
            Biraz zorlayıcı ve CGI/SSI tasarımına yeni kurallar ve sınırlamalar
            getiriyor olsa da düşünülen güvenliği adım adım sağlayacak şekilde
            tasarlanmıştır.</p>
      
          <p>Düzgün bir suEXEC yapılandırmasının hangi güvenlik risklerinden
            kurtulmayı sağladığı ve bu güvenlik modelinin sunucu yapılandırmasıyla
            ilgili sorumluluklarınızı nasıl sınırlayabildiği hakkında daha
            ayrıntılı bilgi edinmek için bu belgenin <a href="#jabberwock">"Uyarılar ve Örnekler"</a> bölümüne bakınız.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="install" id="install">suEXEC’in Yapılandırılması ve Kurulumu</a></h2>
      
          <p>Eğlence başlıyor.</p>
      
          <p><strong>suEXEC yapılandırma seçenekleri</strong><br />
          </p>
      
          <dl>
            <dt><code>--enable-suexec</code></dt>
      
            <dd>Bu seçenek, hiçbir zaman öntanımlı olarak kurulmayan ve
              etkinleştirilmeyen suEXEC özelliğini etkin kılar. suEXEC özelliğini
              kullanma isteğinizi Apache’nin kabul edebilmesi için
              <code>--enable-suexec</code> seçeneğinin yanında en azından bir tane
              de <code>--with-suexec-xxxxx</code> seçeneği belirtilmiş
              olmalıdır.</dd>
      
            <dt><code>--with-suexec-bin=<em>YOL</em></code></dt>
      
            <dd>Güvenlik sebebiyle <code>suexec</code> çalıştırılabilirinin
              bulunduğu yer sunucu koduna yazılır. Bu seçenekle öntanımlı yol
              değiştirilmiş olur. Örnek:<br />
              <code>--with-suexec-bin=/usr/sbin/suexec</code></dd>
      
            <dt><code>--with-suexec-caller=<em>KULLANICI</em></code></dt>
      
            <dd>Normalde httpd’nin aidiyetinde çalıştığı <a href="mod/mpm_common.html#user">kullanıcı</a>dır. Bu, suEXEC
              çalıştırıcısını çalıştırmasına izin verilen tek kullanıcıdır.</dd>
      
            <dt><code>--with-suexec-userdir=<em>DİZİN</em></code></dt>
      
            <dd><p>Kullanıcıların ev dizinleri altında suEXEC’in erişmesine izin
              verilen alt dizinin yerini tanımlar. Bu dizin altında suEXEC
              kullanıcısı tarafından çalıştırılacak tüm programlar "güvenilir"
              olmalıdır. EÄŸer “basit†bir <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code> yönergesi kullanıyorsanız ( içinde “*â€
              bulunmayan), bunun aynı dizin olması gerekir. Eğer burada belirtilen
              dizin, <code>passwd</code> dosyasında kullanıcı için belirtilmiş
              dizinin altında <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code>
              yönergesinde belirtilen dizin olmadığı takdirde suEXEC işini
              gerektiği gibi yapmayacaktır. Öntanımlı değer
              <code>public_html</code>’dir.</p>
      
            <p>Eğer, sanal konaklarınızın herbiri farklı <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code> yönergeleri içeriyorsa
              burada belirtilecek dizinin üst dizininin hepsinde aynı olması
              gerekir. <strong>Aksi takdirde, "~<em><code>kullanıcı</code></em>"
              istekleri düzgün çalışmayacaktır.</strong></p></dd>
      
            <dt><code>--with-suexec-docroot=<em>DİZİN</em></code></dt>
      
            <dd>httpd için belge kök dizinini belirler. Bu, (<code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code>’lardan başka) suEXEC için
              kullanılacak tek hiyerarşi olacaktır. Öntanımlı dizin sonuna
              "<code>/htdocs</code>" eklenmiÅŸ <code>--datadir</code> dizinidir.
              Yani, seçeneği "<code>--datadir=/home/apache</code>" olarak
              belirtmişseniz suEXEC çalıştırıcısı için belge kök dizini
              "<code>/home/apache/htdocs</code>" olur.</dd>
      
            <dt><code>--with-suexec-uidmin=<em>UID</em></code></dt>
      
            <dd>suEXEC kullanıcısının kullanıcı kimliği olarak izin verilen en
              düşük değeri belirler. Çoğu sistemde bu ya 500’dür ya da 100; 100
              öntanımlıdır.</dd>
      
            <dt><code>--with-suexec-gidmin=<em>GID</em></code></dt>
      
            <dd>suEXEC kullanıcısının grup kimliği olarak izin verilen en düşük
              değeri belirler. Çoğu sistemde bu 100 olup, seçeneğin de öntanımlı
              deÄŸeridir.</dd>
      
            <dt><code>--with-suexec-logfile=<em>DOSYA</em></code></dt>
      
            <dd>suEXEC hareketlerinin ve hatalarının kaydedileceği günlük
              dosyasının adını belirler (denetim ve hata ayıklama için
              kullanışlıdır). Öntanımlı günlük dosyası ismi
              "<code>suexec_log</code>" olup yeri (<code>--logfiledir</code>
              seçeneği ile belirtilen) günlük dosyaları dizinidir.</dd>
      
            <dt><code>--with-suexec-safepath=<em>YOL</em></code></dt>
      
            <dd>CGI çalıştırılabilirlerine aktarılacak güvenilir <code>PATH</code>
              ortam değişkeninin değerini tanımlar.
              "<code>/usr/local/bin:/usr/bin:/bin</code>" öntanımlıdır.</dd>
          </dl>
      
          <h3>SuEXEC çalıştırıcısının derlenmesi ve kurulumu</h3>
            
      
            <p>SuEXEC özelliğini <code>--enable-suexec</code> seçeneği ile
              etkinleÅŸtirdiyseniz <code>make</code> komutunu verdiÄŸinizde httpd
              ile birlikte <code>suexec</code> çalıştırılabilir dosyası da
              derlenecektir.</p>
      
            <p>Tüm bileşenler derlendikten sonra <code>make install</code> komutunu
              vererek kurulumu tamamlayabilirsiniz. <code>suexec</code>
              çalıştırılabilir dosyası <code>--sbindir</code> seçeneği ile
              tanımlanan dizine kurulacaktır; öntanımlı yeri
              <code>/usr/local/apache2/bin/</code> dizinidir.</p>
      
            <p>Kurulum adımında <strong><em>root yetkisine</em></strong> sahip
              olmanız gerektiğini unutmayın. Çalıştırıcıya kullanıcı kimliğinin
              atanabilmesi ve dosyanın sahibi olan kullanıcı kimliği ile
              çalıştırılabilmesini mümkün kılan bitinin etkin kılınabilmesi için
              kurulumun <code><em>root</em></code> tarafından yapılması
              önemlidir.</p>
          
      
          <h3>Paranoyak yetkilendirme</h3>
            
      
            <p>SuEXEC çalıştırıcısı kendini çalıştıran kullanıcının
              <code class="program"><a href="./programs/configure.html">configure</a></code> betiÄŸine
              <code>--with-suexec-caller</code> seçeneği ile belirtilen kullanıcı
              olup olmadığına bakacaksa da, bu sınamanın da bir sistem veya
              kütüphane çağrısı ile istismar edilmiş olma ihtimali gözardı
              edilmemelidir. Bunun meydana gelmesini önlemek için ve genelde
              yapıldığı gibi dosyanın izinlerini suEXEC çalıştırıcısı sadece
              httpd'nin aidiyetinde çalıştığı grup tarafından çalıştırılacak
              şekilde ayarlayınız.</p>
      
            <p>Örneğin, sunucunuz şöyle yapılandırılmışsa:</p>
      
            <pre class="prettyprint lang-config">User www
      Group webgroup</pre>
      
      
            <p>Ve <code class="program"><a href="./programs/suexec.html">suexec</a></code> çalıştırılabilir de
              <code>/usr/local/apache2/bin/</code> dizinine kurulmuşsa şu komutları
              vermelisiniz:</p>
      
            <div class="example"><p><code>
                chgrp apache-grup /usr/local/apache2/bin/suexec<br />
                chmod 4750 /usr/local/apache2/bin/suexec<br />
            </code></p></div>
      
            <p>Böylece suEXEC çalıştırıcısını httpd’yi çalıştıran grubun
              üyelerinden başkasının çalıştıramayacağından emin olabilirsiniz.</p>
          
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="enable" id="enable">suEXEC’in etkin kılınması ve iptal edilmesi</a></h2>
          
      
          <p>httpd başlatıldığı sırada <code class="program"><a href="./programs/suexec.html">suexec</a></code> çalıştırıcısı için
            <code>--sbindir</code> seçeneği ile tanımlanan dizine bakar (seçeneğin
            öntanımlı değeri <code>/usr/local/apache/sbin/suexec</code>’tir). httpd
            düzgün yapılandırılmış bir suEXEC çalıştırıcısı bulduğu takdirde hata
            günlüğüne şöyle bir ileti yazacaktır:</p>
      
      <div class="example"><p><code>
          [notice] suEXEC mechanism enabled (wrapper: <var>/dosya/yolu/suexec</var>)
      </code></p></div>
      
          <p>Sunucu başlatıldığında bu ileti yazılmazsa sunucu ya çalıştırıcı
            programı umduğu yerde bulamamıştır ya da dosyanın <em>setuid</em> biti
            <em>root</em> tarafından etkin kılınmamıştır.</p>
      
           <p>SuEXEC mekanizmasını etkin kılmak istediğiniz sunucu çalışmaktaysa
            sunucuyu önce öldürmeli sonra yeniden başlatmalısınız.  Basit bir
            <code>HUP</code> veya <code>USR1</code> sinyali ile yeniden başlamasını
            sağlamak yeterli olmayacaktır.</p>
      
           <p>SuEXEC mekanizmasını iptal etmek için ise <code class="program"><a href="./programs/suexec.html">suexec</a></code>
            dosyasını sildikten sonra httpd'yi öldürüp yeniden başlamalısınız.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="usage" id="usage">SuEXEC’in kullanımı</a></h2>
      
          <p>CGI programlarına yapılan isteklerin suEXEC çalıştırıcısı tarafından
            yerine getirilebilmesi için sanal konağın bir <code class="directive"><a href="./mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code> yönergesi içermesi veya
            isteğin <code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code> tarafından işleme konulması
            gerekir.</p>
      
          <p><strong>Sanal Konaklar:</strong><br />SuEXEC çalıştırıcısını farklı
            bir kullanıcı ile etkin kılmanın tek yolu <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code> bölümleri içinde <code class="directive"><a href="./mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code> yönergesini
            kullanmaktır. Bu yönergede ana sunucuyu çalıştıran kullanıcıdan farklı
            bir kullanıcı  belirterek ilgili sanal konak üzerinden CGI kaynakları
            için yapılan tüm isteklerin belirtilen <em>kullanıcı</em> ve
            <em>grup</em> tarafından çalıştırılması sağlanır. Bu yönergeyi
            içermeyen sanal konaklar için ana sunucunun kullanıcısı
            öntanımlıdır.</p>
      
          <p><strong>Kullanıcı dizinleri:</strong><br />
          <code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code> tarafından işleme sokulan tüm istekler için
          suEXEC çalıştırıcısı istek yapılan kullanıcı dizininin sahibinin
          aidiyetinde çalıştırılacaktır. Bu özelliğin çalışması için tek
          gereklilik, kullanıcının SuEXEC çalıştırıcısı için etkin kılınmış olması
          ve çalıştırıcının yukarıdaki <a href="#model">güvenlik sınamalarından</a>
          geçebilmesidir. Ayrıca,  <code>--with-suexec-userdir</code> <a href="#install">derleme</a> seçeneğinin açıklamasına da bakınız.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="debug" id="debug">SuEXEC ve hata ayıklama</a></h2>
      
          <p>SuEXEC çalıştırıcısı yukarıda değinildiği gibi günlük bilgilerini
            <code>--with-suexec-logfile</code> seçeneği ile belirtilen dosyaya
            yazacaktır. Çalıştırıcıyı doğru yapılandırarak kurduğunuzdan emin olmak
            istiyorsanız, yolunda gitmeyen şeyler var mı diye bu günlük dosyasına
            bakmayı ihmal etmeyin.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="jabberwock" id="jabberwock">Uyarılar ve Örnekler</a></h2>
          
      
          <p><strong>UYARI!</strong> Bu bölüm henüz bitmedi. Bu bölümün son hali
            için <a href="http://httpd.apache.org/docs/2.4/suexec.html">çevrimiçi
            belgelere</a> bakınız.</p>
      
          <p>SuEXEC çalıştırıcısından dolayı sunucu ayarlarına bazı sınırlamalar
            getiren bir kaç önemli nokta mevcuttur. SuEXEC ile ilgili hata
            bildiriminde bulunmadan önce bunlara bir göz atmalısınız.</p>
      
          <ul>
            <li><strong>suEXEC ile ilgili önemli noktalar</strong></li>
      
            <li>Hiyerarşik sınırlamalar
      
              <p class="indent">Güvenlik ve verimlilik adına, tüm suEXEC
                isteklerinin sanal konaklar için üst düzey belge kökünün altındaki
                dosyalarla, kullanıcı dizinleri için ise üst düzey bireysel belge
                köklerinin altındaki dosyalarla sınırlı kalması gerekir. Örneğin,
                dört sanal konağınız varsa ve suEXEC çalıştırıcısının
                getirilerinden faydalanmak istiyorsanız, sanal konaklarınızın belge
                kök dizinlerini ana sunucunun belge kök dizininin altında kalacak
                şekilde yapılandırmanız gerekir (örnek yolda).</p>
            </li>
      
            <li>SuEXEC'in <code>PATH</code> ortam deÄŸiÅŸkeni
      
              <p class="indent">Bunu deÄŸiÅŸtirmek tehlikeli olabilir. Bu deÄŸiÅŸkende
                tanımladığınız her yolun <strong>güvenli</strong> bir dizini işaret
                ettiğinden emin olmalısınız. Başkalarının oralarda bir truva atı
                çalıştırmasını istemiyorsanız buna çok dikkat ediniz.</p>
            </li>
      
            <li>SuEXEC kodunda deÄŸiÅŸiklik
      
              <p class="indent">Gerçekte ne yaptığınızı bilmiyorsanız bu,
                <strong>büyük bir sorun</strong> olabilir. Böyle şeyler yapmaktan
                mümkün olduğunca uzak durmalısınız.</p>
            </li>
          </ul>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./en/suexec.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/suexec.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/suexec.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/suexec.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/suexec.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/suexec.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/expr.html.en���������������������������������������������������������������0000644�0000000�0000050�00000107455�13412755316�015731� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Expressions in Apache HTTP Server - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Expressions in Apache HTTP Server</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/expr.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/expr.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>Historically, there are several syntax variants for expressions
          used to express a condition in the different modules of the Apache
          HTTP Server.  There is some ongoing effort to only use a single
          variant, called <em>ap_expr</em>, for all configuration directives.
          This document describes the <em>ap_expr</em> expression parser.
          </p>
          <p>The <em>ap_expr</em> expression is intended to replace most other
          expression variants in HTTPD. For example, the deprecated <code class="directive"><a href="./mod/mod_ssl.html#sslrequire">SSLRequire</a></code> expressions can be replaced
          by <a href="mod/mod_authz_core.html#reqexpr">Require expr</a>.  </p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#grammar">Grammar in Backus-Naur Form notation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#vars">Variables</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#binop">Binary operators</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#unnop">Unary operators</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#functions">Functions</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#examples">Example expressions</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#other">Other</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#sslrequire">Comparison with SSLRequire</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#compatibility">Version History</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#elseif">&lt;ElseIf&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#else">&lt;Else&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#alias">Alias</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#scriptalias">ScriptAlias</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#redirect">Redirect</a></code></li><li><code class="directive"><a href="./mod/mod_auth_basic.html#authbasicfake">AuthBasicFake</a></code></li><li><code class="directive"><a href="./mod/mod_auth_form.html#authformloginrequiredlocation">AuthFormLoginRequiredLocation</a></code></li><li><code class="directive"><a href="./mod/mod_auth_form.html#authformloginsuccesslocation">AuthFormLoginSuccessLocation</a></code></li><li><code class="directive"><a href="./mod/mod_auth_form.html#authformlogoutlocation">AuthFormLogoutLocation</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#setenvifexpr">SetEnvIfExpr</a></code></li><li><code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code></li><li><code class="directive"><a href="./mod/mod_headers.html#requestheader">RequestHeader</a></code></li><li><code class="directive"><a href="./mod/mod_filter.html#filterprovider">FilterProvider</a></code></li><li><a href="mod/mod_authz_core.html#reqexpr">Require expr</a></li><li><a href="mod/mod_authnz_ldap.html#requser">Require ldap-user</a></li><li><a href="mod/mod_authnz_ldap.html#reqgroup">Require ldap-group</a></li><li><a href="mod/mod_authnz_ldap.html#reqdn">Require ldap-dn</a></li><li><a href="mod/mod_authnz_ldap.html#reqattribute">Require ldap-attribute</a></li><li><a href="mod/mod_authnz_ldap.html#reqfilter">Require ldap-filter</a></li><li><a href="mod/mod_authz_dbd.html#reqgroup">Require dbd-group</a></li><li><a href="mod/mod_authz_dbm.html#reqgroup">Require dbm-group</a></li><li><a href="mod/mod_authz_groupfile.html#reqgroup">Require group</a></li><li><a href="mod/mod_authz_host.html#reqhost">Require host</a></li><li><code class="directive"><a href="./mod/mod_ssl.html#sslrequire">SSLRequire</a></code></li><li><code class="directive"><a href="./mod/mod_log_debug.html#logmessage">LogMessage</a></code></li><li><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="grammar" id="grammar">Grammar in Backus-Naur Form notation</a></h2>
          
            <p><a href="http://en.wikipedia.org/wiki/Backus%E2%80%93Naur_Form">Backus-Naur
            Form</a> (BNF) is a notation technique for context-free grammars,
            often used to describe the syntax of languages used in computing.
            In most cases, expressions are used to express boolean values.
            For these, the starting point in the BNF is <code>expr</code>.
            However, a few directives like <code class="directive"><a href="./mod/mod_log_debug.html#logmessage">LogMessage</a></code> accept expressions
            that evaluate to a string value. For those, the starting point in
            the BNF is <code>string</code>.
            </p>
      <blockquote>
      <pre>expr        ::= "<strong>true</strong>" | "<strong>false</strong>"
                    | "<strong>!</strong>" expr
                    | expr "<strong>&amp;&amp;</strong>" expr
                    | expr "<strong>||</strong>" expr
                    | "<strong>(</strong>" expr "<strong>)</strong>"
                    | comp
      
      comp        ::= stringcomp
                    | integercomp
                    | unaryop word
                    | word binaryop word
                    | word "<strong>in</strong>" "<strong>{</strong>" wordlist "<strong>}</strong>"
                    | word "<strong>in</strong>" listfunction
                    | word "<strong>=~</strong>" regex
                    | word "<strong>!~</strong>" regex
      
      
      stringcomp  ::= word "<strong>==</strong>" word
                    | word "<strong>!=</strong>" word
                    | word "<strong>&lt;</strong>"  word
                    | word "<strong>&lt;=</strong>" word
                    | word "<strong>&gt;</strong>"  word
                    | word "<strong>&gt;=</strong>" word
      
      integercomp ::= word "<strong>-eq</strong>" word | word "<strong>eq</strong>" word
                    | word "<strong>-ne</strong>" word | word "<strong>ne</strong>" word
                    | word "<strong>-lt</strong>" word | word "<strong>lt</strong>" word
                    | word "<strong>-le</strong>" word | word "<strong>le</strong>" word
                    | word "<strong>-gt</strong>" word | word "<strong>gt</strong>" word
                    | word "<strong>-ge</strong>" word | word "<strong>ge</strong>" word
      
      wordlist    ::= word
                    | wordlist "<strong>,</strong>" word
      
      word        ::= word "<strong>.</strong>" word
                    | digit
                    | "<strong>'</strong>" string "<strong>'</strong>"
                    | "<strong>"</strong>" string "<strong>"</strong>"
                    | variable
                    | rebackref
                    | function
      
      string      ::= stringpart
                    | string stringpart
      
      stringpart  ::= cstring
                    | variable
                    | rebackref
      
      cstring     ::= ...
      digit       ::= [0-9]+
      
      variable    ::= "<strong>%{</strong>" varname "<strong>}</strong>"
                    | "<strong>%{</strong>" funcname "<strong>:</strong>" funcargs "<strong>}</strong>"
      
      rebackref   ::= "<strong>$</strong>" [0-9]
      
      function     ::= funcname "<strong>(</strong>" word "<strong>)</strong>"
      
      listfunction ::= listfuncname "<strong>(</strong>" word "<strong>)</strong>"</pre>
      </blockquote>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="vars" id="vars">Variables</a></h2>
          
      
          <p>The expression parser provides a number of variables of the form
          <code>%{HTTP_HOST}</code>. Note that the value of a variable may depend
          on the phase of the request processing in which it is evaluated.  For
          example, an expression used in an <code class="directive">&lt;If &gt;</code>
          directive is evaluated before authentication is done. Therefore,
          <code>%{REMOTE_USER}</code> will not be set in this case.</p>
      
          <p>The following variables provide the values of the named HTTP request
          headers. The values of other headers can be obtained with the
          <code>req</code> <a href="#functions">function</a>. Using these
          variables may cause the header name to be added to the Vary
          header of the HTTP response, except where otherwise noted for the
          directive accepting the expression. The <code>req_novary</code>
          <a href="#functions">function</a> may be used to circumvent this
          behavior.</p>
      
          <table class="bordered"><tr class="header"><th>Name</th></tr>
      <tr><td><code>HTTP_ACCEPT</code></td></tr>
      <tr class="odd"><td><code>HTTP_COOKIE</code></td></tr>
      <tr><td><code>HTTP_FORWARDED</code></td></tr>
      <tr class="odd"><td><code>HTTP_HOST</code></td></tr>
      <tr><td><code>HTTP_PROXY_CONNECTION</code></td></tr>
      <tr class="odd"><td><code>HTTP_REFERER</code></td></tr>
      <tr><td><code>HTTP_USER_AGENT</code></td></tr>
      </table>
      
          <p>Other request related variables</p>
      
          <table class="bordered"><tr class="header"><th>Name</th><th>Description</th></tr>
      <tr><td><code>REQUEST_METHOD</code></td>
              <td>The HTTP method of the incoming request (e.g.
                  <code>GET</code>)</td></tr>
      <tr class="odd"><td><code>REQUEST_SCHEME</code></td>
              <td>The scheme part of the request's URI</td></tr>
      <tr><td><code>REQUEST_URI</code></td>
              <td>The path part of the request's URI</td></tr>
      <tr class="odd"><td><code>DOCUMENT_URI</code></td>
              <td>Same as <code>REQUEST_URI</code></td></tr>
      <tr><td><code>REQUEST_FILENAME</code></td>
              <td>The full local filesystem path to the file or script matching the
                  request, if this has already been determined by the server at the
                  time <code>REQUEST_FILENAME</code> is referenced. Otherwise, such
                  as when used in virtual host context, the same value as
                  <code>REQUEST_URI</code> </td></tr>
      <tr class="odd"><td><code>SCRIPT_FILENAME</code></td>
              <td>Same as <code>REQUEST_FILENAME</code></td></tr>
      <tr><td><code>LAST_MODIFIED</code></td>
              <td>The date and time of last modification of the file in the format
                  <code>20101231235959</code>, if this has already been determined by
                  the server at the time <code>LAST_MODIFIED</code> is referenced.
                  </td></tr>
      <tr class="odd"><td><code>SCRIPT_USER</code></td>
              <td>The user name of the owner of the script.</td></tr>
      <tr><td><code>SCRIPT_GROUP</code></td>
              <td>The group name of the group of the script.</td></tr>
      <tr class="odd"><td><code>PATH_INFO</code></td>
              <td>The trailing path name information, see
                  <code class="directive"><a href="./mod/core.html#acceptpathinfo">AcceptPathInfo</a></code></td></tr>
      <tr><td><code>QUERY_STRING</code></td>
              <td>The query string of the current request</td></tr>
      <tr class="odd"><td><code>IS_SUBREQ</code></td>
              <td>"<code>true</code>" if the current request is a subrequest,
                  "<code>false</code>" otherwise</td></tr>
      <tr><td><code>THE_REQUEST</code></td>
              <td>The complete request line (e.g.,
                  "<code>GET /index.html HTTP/1.1</code>")</td></tr>
      <tr class="odd"><td><code>REMOTE_ADDR</code></td>
              <td>The IP address of the remote host</td></tr>
      <tr><td><code>REMOTE_PORT</code></td>
              <td>The port of the remote host (2.4.26 and later)</td></tr>
      <tr class="odd"><td><code>REMOTE_HOST</code></td>
              <td>The host name of the remote host</td></tr>
      <tr><td><code>REMOTE_USER</code></td>
              <td>The name of the authenticated user, if any (not available during <code class="directive">&lt;If&gt;</code>)</td></tr>
      <tr class="odd"><td><code>REMOTE_IDENT</code></td>
              <td>The user name set by <code class="module"><a href="./mod/mod_ident.html">mod_ident</a></code></td></tr>
      <tr><td><code>SERVER_NAME</code></td>
              <td>The <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code> of
                  the current vhost</td></tr>
      <tr class="odd"><td><code>SERVER_PORT</code></td>
              <td>The server port of the current vhost, see
                  <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code></td></tr>
      <tr><td><code>SERVER_ADMIN</code></td>
              <td>The <code class="directive"><a href="./mod/core.html#serveradmin">ServerAdmin</a></code> of
                  the current vhost</td></tr>
      <tr class="odd"><td><code>SERVER_PROTOCOL</code></td>
              <td>The protocol used by the request</td></tr>
      <tr><td><code>DOCUMENT_ROOT</code></td>
              <td>The <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> of
                  the current vhost</td></tr>
      <tr class="odd"><td><code>AUTH_TYPE</code></td>
              <td>The configured <code class="directive"><a href="./mod/mod_authn_core.html#authtype">AuthType</a></code> (e.g.
              "<code>basic</code>")</td></tr>
      <tr><td><code>CONTENT_TYPE</code></td>
              <td>The content type of the response (not available during <code class="directive">&lt;If&gt;</code>)</td></tr>
      <tr class="odd"><td><code>HANDLER</code></td>
              <td>The name of the <a href="handler.html">handler</a> creating
                  the response</td></tr>
      <tr><td><code>HTTP2</code></td>
              <td>"<code>on</code>" if the request uses http/2,
                  "<code>off</code>" otherwise</td></tr>
      <tr class="odd"><td><code>HTTPS</code></td>
              <td>"<code>on</code>" if the request uses https,
                  "<code>off</code>" otherwise</td></tr>
      <tr><td><code>IPV6</code></td>
              <td>"<code>on</code>" if the connection uses IPv6,
                  "<code>off</code>" otherwise</td></tr>
      <tr class="odd"><td><code>REQUEST_STATUS</code></td>
              <td>The HTTP error status of the request (not available during <code class="directive">&lt;If&gt;</code>)</td></tr>
      <tr><td><code>REQUEST_LOG_ID</code></td>
              <td>The error log id of the request (see
                  <code class="directive"><a href="./mod/core.html#errorlogformat">ErrorLogFormat</a></code>)</td></tr>
      <tr class="odd"><td><code>CONN_LOG_ID</code></td>
              <td>The error log id of the connection (see
                  <code class="directive"><a href="./mod/core.html#errorlogformat">ErrorLogFormat</a></code>)</td></tr>
      <tr><td><code>CONN_REMOTE_ADDR</code></td>
              <td>The peer IP address of the connection (see the
                  <code class="module"><a href="./mod/mod_remoteip.html">mod_remoteip</a></code> module)</td></tr>
      <tr class="odd"><td><code>CONTEXT_PREFIX</code></td>
              <td /></tr>
      <tr><td><code>CONTEXT_DOCUMENT_ROOT</code></td>
              <td /></tr>
      </table>
      
          <p>Misc variables</p>
      
          <table class="bordered"><tr class="header"><th>Name</th><th>Description</th></tr>
      <tr><td><code>TIME_YEAR</code></td>
              <td>The current year (e.g. <code>2010</code>)</td></tr>
      <tr class="odd"><td><code>TIME_MON</code></td>
              <td>The current month (<code>01</code>, ..., <code>12</code>)</td></tr>
      <tr><td><code>TIME_DAY</code></td>
              <td>The current day of the month (<code>01</code>, ...)</td></tr>
      <tr class="odd"><td><code>TIME_HOUR</code></td>
              <td>The hour part of the current time
                  (<code>00</code>, ..., <code>23</code>)</td></tr>
      <tr><td><code>TIME_MIN</code></td>
              <td>The minute part of the current time </td></tr>
      <tr class="odd"><td><code>TIME_SEC</code></td>
              <td>The second part of the current time </td></tr>
      <tr><td><code>TIME_WDAY</code></td>
              <td>The day of the week (starting with <code>0</code>
                  for Sunday)</td></tr>
      <tr class="odd"><td><code>TIME</code></td>
              <td>The date and time in the format
              <code>20101231235959</code></td></tr>
      <tr><td><code>SERVER_SOFTWARE</code></td>
              <td>The server version string</td></tr>
      <tr class="odd"><td><code>API_VERSION</code></td>
              <td>The date of the API version (module magic number)</td></tr>
      </table>
      
          <p>Some modules register additional variables, see e.g.
          <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="binop" id="binop">Binary operators</a></h2>
          
      
          <p>With the exception of some built-in comparison operators, binary
          operators have the form "<code>-[a-zA-Z][a-zA-Z0-9_]+</code>", i.e. a
          minus and at least two characters. The name is not case sensitive.
          Modules may register additional binary operators.</p>
      
          <h3><a name="comp" id="comp">Comparison operators</a></h3>
          
      
          <table class="bordered"><tr class="header"><th>Name</th><th>Alternative</th> <th>Description</th></tr>
      <tr><td><code>==</code></td>
              <td><code>=</code></td>
              <td>String equality</td></tr>
      <tr class="odd"><td><code>!=</code></td>
              <td />
              <td>String inequality</td></tr>
      <tr><td><code>&lt;</code></td>
              <td />
              <td>String less than</td></tr>
      <tr class="odd"><td><code>&lt;=</code></td>
              <td />
              <td>String less than or equal</td></tr>
      <tr><td><code>&gt;</code></td>
              <td />
              <td>String greater than</td></tr>
      <tr class="odd"><td><code>&gt;=</code></td>
              <td />
              <td>String greater than or equal</td></tr>
      <tr><td><code>=~</code></td>
              <td />
              <td>String matches the regular expression</td></tr>
      <tr class="odd"><td><code>!~</code></td>
              <td />
              <td>String does not match the regular expression</td></tr>
      <tr><td><code>-eq</code></td>
              <td><code>eq</code></td>
              <td>Integer equality</td></tr>
      <tr class="odd"><td><code>-ne</code></td>
              <td><code>ne</code></td>
              <td>Integer inequality</td></tr>
      <tr><td><code>-lt</code></td>
              <td><code>lt</code></td>
              <td>Integer less than</td></tr>
      <tr class="odd"><td><code>-le</code></td>
              <td><code>le</code></td>
              <td>Integer less than or equal</td></tr>
      <tr><td><code>-gt</code></td>
              <td><code>gt</code></td>
              <td>Integer greater than</td></tr>
      <tr class="odd"><td><code>-ge</code></td>
              <td><code>ge</code></td>
              <td>Integer greater than or equal</td></tr>
      </table>
          
      
          <h3><a name="binaryother" id="binaryother">Other binary operators</a></h3>
          
      
          <table class="bordered"><tr class="header"><th>Name</th><th>Description</th></tr>
      <tr><td><code>-ipmatch</code></td>
              <td>IP address matches address/netmask</td></tr>
      <tr class="odd"><td><code>-strmatch</code></td>
              <td>left string matches pattern given by right string (containing
                  wildcards *, ?, [])</td></tr>
      <tr><td><code>-strcmatch</code></td>
              <td>same as <code>-strmatch</code>, but case insensitive</td></tr>
      <tr class="odd"><td><code>-fnmatch</code></td>
              <td>same as <code>-strmatch</code>, but slashes are not matched by
                  wildcards</td></tr>
      </table>
          
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="unnop" id="unnop">Unary operators</a></h2>
          
      
          <p>Unary operators take one argument and have the form
          "<code>-[a-zA-Z]</code>", i.e. a minus and one character.
          The name <em>is</em> case sensitive.
          Modules may register additional unary operators.</p>
      
          <table class="bordered"><tr class="header"><th>Name</th><th>Description</th><th>Restricted</th></tr>
      <tr><td><code>-d</code></td>
              <td>The argument is treated as a filename.
                  True if the file exists and is a directory</td><td>yes</td></tr>
      <tr class="odd"><td><code>-e</code></td>
              <td>The argument is treated as a filename.
                  True if the file (or dir or special) exists</td><td>yes</td></tr>
      <tr><td><code>-f</code></td>
              <td>The argument is treated as a filename.
                  True if the file exists and is regular file</td><td>yes</td></tr>
      <tr class="odd"><td><code>-s</code></td>
              <td>The argument is treated as a filename.
                  True if the file exists and is not empty</td><td>yes</td></tr>
      <tr><td><code>-L</code></td>
              <td>The argument is treated as a filename.
                  True if the file exists and is symlink</td><td>yes</td></tr>
      <tr class="odd"><td><code>-h</code></td>
              <td>The argument is treated as a filename.
                  True if the file exists and is symlink
                  (same as <code>-L</code>)</td><td>yes</td></tr>
      <tr><td><code>-F</code></td>
              <td>True if string is a valid file, accessible via all the server's
                  currently-configured access controls for that path. This uses an
                  internal subrequest to do the check, so use it with care - it can
                  impact your server's performance!</td><td /></tr>
      <tr class="odd"><td><code>-U</code></td>
              <td>True if string is a valid URL, accessible via all the server's
                  currently-configured access controls for that path. This uses an
                  internal subrequest to do the check, so use it with care - it can
                  impact your server's performance!</td><td /></tr>
      <tr><td><code>-A</code></td>
              <td>Alias for <code>-U</code></td><td /></tr>
      <tr class="odd"><td><code>-n</code></td>
              <td>True if string is not empty</td><td /></tr>
      <tr><td><code>-z</code></td>
              <td>True if string is empty</td><td /></tr>
      <tr class="odd"><td><code>-T</code></td>
              <td>False if string is empty, "<code>0</code>", "<code>off</code>",
                  "<code>false</code>", or "<code>no</code>" (case insensitive).
                  True otherwise.</td><td /></tr>
      <tr><td><code>-R</code></td>
              <td>Same as "<code>%{REMOTE_ADDR} -ipmatch ...</code>", but more
              efficient
              </td><td /></tr>
      </table>
      
          <p>The operators marked as "restricted" are not available in some modules
          like <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="functions" id="functions">Functions</a></h2>
          
      
          <p>Normal string-valued functions take one string as argument and return
          a string. Functions names are not case sensitive.
          Modules may register additional functions.</p>
      
          <table class="bordered"><tr class="header"><th>Name</th><th>Description</th><th>Special notes</th></tr>
      <tr><td><code>req</code>, <code>http</code></td>
              <td>Get HTTP request header; header names may be added to the Vary
                  header, see below</td><td /></tr>
      <tr class="odd"><td><code>req_novary</code></td>
              <td>Same as <code>req</code>, but header names will not be added to the
                  Vary header</td><td /></tr>
      <tr><td><code>resp</code></td>
              <td>Get HTTP response header (most response headers will not yet be set
                  during <code class="directive">&lt;If&gt;</code>)</td><td /></tr>
      <tr class="odd"><td><code>reqenv</code></td>
              <td>Lookup request environment variable (as a shortcut,
              <code>v</code> can also be used to access variables). 
              </td>
              <td>ordering</td></tr>
      <tr><td><code>osenv</code></td>
              <td>Lookup operating system environment variable</td><td /></tr>
      <tr class="odd"><td><code>note</code></td>
              <td>Lookup request note</td><td>ordering</td></tr>
      <tr><td><code>env</code></td>
              <td>Return first match of <code>note</code>, <code>reqenv</code>,
                  <code>osenv</code></td><td>ordering</td></tr>
      <tr class="odd"><td><code>tolower</code></td>
              <td>Convert string to lower case</td><td /></tr>
      <tr><td><code>toupper</code></td>
              <td>Convert string to upper case</td><td /></tr>
      <tr class="odd"><td><code>escape</code></td>
              <td>Escape special characters in %hex encoding</td><td /></tr>
      <tr><td><code>unescape</code></td>
              <td>Unescape %hex encoded string, leaving encoded slashes alone;
                  return empty string if %00 is found</td><td /></tr>
      <tr class="odd"><td><code>base64</code></td>
              <td>Encode the string using base64 encoding</td><td /></tr>
      <tr><td><code>unbase64</code></td>
              <td>Decode base64 encoded string, return truncated string if 0x00 is
                  found</td><td /></tr>
      <tr class="odd"><td><code>md5</code></td>
              <td>Hash the string using MD5, then encode the hash with hexadecimal
                  encoding</td><td /></tr>
      <tr><td><code>sha1</code></td>
              <td>Hash the string using SHA1, then encode the hash with hexadecimal
                  encoding</td><td /></tr>
      <tr class="odd"><td><code>file</code></td>
              <td>Read contents from a file (including line endings, when present)
              </td><td>restricted</td></tr>
      <tr><td><code>filemod</code></td>
              <td>Return last modification time of a file (or 0 if file does not exist
                  or is not regular file)</td><td>restricted</td></tr>
      <tr class="odd"><td><code>filesize</code></td>
              <td>Return size of a file (or 0 if file does not exist or is not
                  regular file)</td><td>restricted</td></tr>
      </table>
      
          <p>The functions marked as "restricted" in the final column are not 
          available in some modules like <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>.</p>
      
          <p>The functions marked as "ordering" in the final column require some
          consideration for the ordering of different components of the server,
          especially when the function is used within the 
          &lt;<code class="directive"><a href="./mod/core.html#if">If</a></code>&gt; directive which is
          evaluated relatively early.</p>
          <div class="note">
          <h3>Environment variable ordering</h3>
          When environment variables are looked up within an 
          &lt;<code class="directive"><a href="./mod/core.html#if">If</a></code>&gt; condition, it's important 
          to consider how extremely early in request processing that this 
          resolution occurs. As a guideline, any directive defined outside of virtual host 
          context (directory, location, htaccess) is not likely to have yet had a 
          chance to execute. <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code>
          in virtual host scope is one directive that runs prior to this resolution
          <br />
          <br />
          When <code>reqenv</code> is used outside of &lt;<code class="directive"><a href="./mod/core.html#if">If</a></code>&gt;, the resolution will generally occur later, but the 
          exact timing depends on the directive the expression has been used within.
          </div>
      
          <p>When the functions <code>req</code> or <code>http</code> are used,
          the header name will automatically be added to the Vary header of the
          HTTP response, except where otherwise noted for the directive accepting
          the expression. The <code>req_novary</code> function can be used to
          prevent names from being added to the Vary header.</p>
      
          <p>In addition to string-valued functions, there are also
          list-valued functions which take one string as argument and return a
          wordlist, i.e. a list of strings. The wordlist can be used with the
          special <code>-in</code> operator.  Functions names are not case
          sensitive.  Modules may register additional functions.</p>
      
          <p>There are no built-in list-valued functions. <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code>
          provides <code>PeerExtList</code>.  See the description of
          <code class="directive"><a href="./mod/mod_ssl.html#sslrequire">SSLRequire</a></code> for details
          (but <code>PeerExtList</code> is also usable outside
          of <code class="directive"><a href="./mod/mod_ssl.html#sslrequire">SSLRequire</a></code>).</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Example expressions</a></h2>
      
          
          <p>The following examples show how expressions might be used to
          evaluate requests:</p>
      
          
          <pre class="prettyprint lang-config"># Compare the host name to example.com and redirect to www.example.com if it matches
      &lt;If "%{HTTP_HOST} == 'example.com'"&gt;
          Redirect permanent "/" "http://www.example.com/"
      &lt;/If&gt;
      
      # Force text/plain if requesting a file with the query string contains 'forcetext'
      &lt;If "%{QUERY_STRING} =~ /forcetext/"&gt;
          ForceType text/plain
      &lt;/If&gt;
      
      # Only allow access to this content during business hours
      &lt;Directory "/foo/bar/business"&gt;
          Require expr %{TIME_HOUR} -gt 9 &amp;&amp; %{TIME_HOUR} -lt 17
      &lt;/Directory&gt;
      
      # Check a HTTP header for a list of values
      &lt;If "%{HTTP:X-example-header} in { 'foo', 'bar', 'baz' }"&gt;
          Header set matched true
      &lt;/If&gt;
      
      # Check an environment variable for a regular expression, negated.
      &lt;If "! reqenv('REDIRECT_FOO') =~ /bar/"&gt;
          Header set matched true
      &lt;/If&gt;
      
      # Check result of URI mapping by running in Directory context with -f
      &lt;Directory "/var/www"&gt;
          AddEncoding x-gzip gz
      &lt;If "-f '%{REQUEST_FILENAME}.unzipme' &amp;&amp; ! %{HTTP:Accept-Encoding} =~ /gzip/"&gt;
            SetOutputFilter INFLATE
      &lt;/If&gt;
      &lt;/Directory&gt;
      
      # Check against the client IP
      &lt;If "-R '192.168.1.0/24'"&gt;
          Header set matched true
      &lt;/If&gt;
      
      # Function example in boolean context
      &lt;If "md5('foo') == 'acbd18db4cc2f85cedef654fccc4a4d8'"&gt;
        Header set checksum-matched true
      &lt;/If&gt;
      
      # Function example in string context
      Header set foo-checksum "expr=%{md5:foo}"
      
      # This delays the evaluation of the condition clause compared to &lt;If&gt;
      Header always set CustomHeader my-value "expr=%{REQUEST_URI} =~ m#^/special_path\.php$#"
      
      # Conditional logging
      CustomLog logs/access-errors.log common "expr=%{REQUEST_STATUS} &gt;= 400"
      CustomLog logs/access-errors-specific.log common "expr=%{REQUEST_STATUS} -in {'405','410'}"</pre>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="other" id="other">Other</a></h2>
          
      
          <table class="bordered"><tr class="header"><th>Name</th><th>Alternative</th> <th>Description</th></tr>
      <tr><td><code>-in</code></td>
              <td><code>in</code></td>
              <td>string contained in wordlist</td></tr>
      <tr class="odd"><td><code>/regexp/</code></td>
              <td><code>m#regexp#</code></td>
              <td>Regular expression (the second form allows different
              delimiters than /)</td></tr>
      <tr><td><code>/regexp/i</code></td>
              <td><code>m#regexp#i</code></td>
              <td>Case insensitive regular expression</td></tr>
      <tr class="odd"><td><code>$0 ... $9</code></td>
              <td />
              <td>Regular expression backreferences</td></tr>
      </table>
      
          <h3><a name="rebackref" id="rebackref">Regular expression backreferences</a></h3>
              
              <p>The strings <code>$0</code> ... <code>$9</code> allow to reference
              the capture groups from a previously executed, successfully
              matching regular expressions. They can normally only be used in the
              same expression as the matching regex, but some modules allow special
              uses.</p>
          
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="sslrequire" id="sslrequire">Comparison with SSLRequire</a></h2>
          
          <p>The <em>ap_expr</em> syntax is mostly a superset of the syntax of the
          deprecated <code class="directive"><a href="./mod/mod_ssl.html#sslrequire">SSLRequire</a></code> directive.
          The differences are described in <code class="directive"><a href="./mod/mod_ssl.html#sslrequire">SSLRequire</a></code>'s documentation.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="compatibility" id="compatibility">Version History</a></h2>
          
          <p>The <code>req_novary</code> <a href="#functions">function</a>
          is available for versions 2.4.4 and later.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/expr.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/expr.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/expr.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/urlmapping.html.ja.utf8����������������������������������������������������0000644�0000000�0000050�00000063320�13412755316�017776� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>URL ã‹ã‚‰ãƒ•ァイルシステム上ã®ä½ç½®ã¸ã®ãƒžãƒƒãƒ— - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>URL ã‹ã‚‰ãƒ•ァイルシステム上ã®ä½ç½®ã¸ã®ãƒžãƒƒãƒ—</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/urlmapping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/urlmapping.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/urlmapping.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/urlmapping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/urlmapping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
          <p>ã“ã®æ–‡æ›¸ã¯ Apache ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã® URL ã‹ã‚‰é€ä¿¡ã™ã‚‹ãƒ•ァイルã®
          ファイルシステム上ã®ä½ç½®ã‚’決定ã™ã‚‹æ–¹æ³•を説明ã—ã¾ã™ã€‚</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#related">関連ã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#documentroot">DocumentRoot</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#outside">DocumentRoot 外ã®ãƒ•ァイル</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#user">ユーザディレクトリ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#redirect">URL リダイレクション</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#proxy">リãƒãƒ¼ã‚¹ãƒ—ロキシ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#rewrite">リライトエンジン</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#notfound">File Not Found</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">関連ã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–</a></h2>
      
      <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_alias.html">mod_alias</a></code></li><li><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li><li><code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code></li><li><code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code></li><li><code class="module"><a href="./mod/mod_vhost_alias.html">mod_vhost_alias</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_alias.html#alias">Alias</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code></li><li><code class="directive"><a href="./mod/mod_speling.html#checkspelling">CheckSpelling</a></code></li><li><code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code></li><li><code class="directive"><a href="./mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreverse">ProxyPassReverse</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiedomain">ProxyPassReverseCookieDomain</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiepath">ProxyPassReverseCookiePath</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#redirect">Redirect</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#redirectmatch">RedirectMatch</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritematch">RewriteMatch</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#scriptalias">ScriptAlias</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#scriptaliasmatch">ScriptAliasMatch</a></code></li><li><code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code></li></ul></td></tr></table>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="documentroot" id="documentroot">DocumentRoot</a></h2>
      
          <p>リクエストã«å¯¾ã—ã¦ã©ã®ãƒ•ァイルをé€ä¿¡ã™ã‚‹ã‹ã‚’決定ã™ã‚‹ã¨ãã®
          Apache ã®ãƒ‡ãƒ•ォルトã®å‹•作ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã® URL-Path (URL ã®ãƒ›ã‚¹ãƒˆåã¨
          ãƒãƒ¼ãƒˆç•ªå·ã®å¾Œã«ç¶šã部分) ã‚’å–り出ã—ã¦è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ã§æŒ‡å®šã•れã¦ã„ã‚‹
          <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> 
          ã®æœ€å¾Œã«è¿½åŠ ã™ã‚‹ã€ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚ã§ã™ã‹ã‚‰ã€
          <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> 
          ã®ä¸‹ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚„ファイルãŒã‚¦ã‚§ãƒ–ã‹ã‚‰è¦‹ãˆã‚‹åŸºæœ¬ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®æœ¨æ§‹é€ ã‚’
          ãªã—ã¾ã™ã€‚</p>
      
          <p>Apache ã«ã¯ã‚µãƒ¼ãƒãŒè¤‡æ•°ã®ãƒ›ã‚¹ãƒˆã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘å–ã‚‹
          <a href="vhosts/">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a> ã®æ©Ÿèƒ½ã‚‚ã‚りã¾ã™ã€‚
          ã“ã®å ´åˆã€ãれãžã‚Œã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«å¯¾ã—ã¦é•ã†
          <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>
          を指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã¾ãŸã€<code class="module"><a href="./mod/mod_vhost_alias.html">mod_vhost_alias</a></code>
          モジュールã«ã‚ˆã‚Šæä¾›ã•れるディレクティブを使ã£ã¦ã€
          é€ä¿¡ã™ã‚‹ãŸã‚ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®å ´æ‰€ã‚’リクエストã•れ㟠IP
          アドレスやホストåã‹ã‚‰å‹•çš„ã«æ±ºã‚ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="outside" id="outside">DocumentRoot 外ã®ãƒ•ァイル</a></h2>
      
          <p>ファイルシステム上ã®ã€
          厳密ã«ã¯ <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>
          ã®ä¸‹ã«ã¯ãªã„部分ã¸ã®ã‚¦ã‚§ãƒ–アクセスを許å¯ã™ã‚‹å¿…è¦ãŒã‚ã‚‹
          å ´åˆãŒã‚ˆãã‚りã¾ã™ã€‚Apache ã¯ã“ã®ãŸã‚ã«è¤‡æ•°ã®æ–¹æ³•を用æ„ã—ã¦ã„ã¾ã™ã€‚
          Unix システムã§ã¯ã€ãƒ•ァイルシステムã®ä»–ã®éƒ¨åˆ†ã‚’シンボリックリンクを
          使ã£ã¦ <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>
          ã®ä¸‹ã«æŒã£ã¦ãã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚セキュリティ上ã®ç†ç”±ã«ã‚ˆã‚Šã€
          Apache ã¯è©²å½“ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®
          <code class="directive"><a href="./mod/core.html#options">Options</a></code> ã®è¨­å®šã«
          <code>FollowSymLinks</code> ã‹ <code>SymLinksIfOwnerMatch</code> ãŒ
          ã‚ã‚‹å ´åˆã«ã®ã¿ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯ã‚’ãŸã©ã‚Šã¾ã™ã€‚</p>
      
          <p>代ã‚ã‚Šã®æ–¹æ³•ã¨ã—ã¦ã€<code class="directive"><a href="./mod/mod_alias.html#alias">Alias</a></code>
          ディレクティブを使ã£ã¦ãƒ•ァイルシステムã®ä»»æ„ã®éƒ¨åˆ†ã‚’ウェブã®ç©ºé–“ã«
          マップã§ãã¾ã™ã€‚ãŸã¨ãˆã°ã€</p>
      
      <div class="example"><p><code>Alias /docs /var/web</code></p></div>
      
          <p>ã¨ã„ã†è¨­å®šã®ã¨ãã¯ã€URL
          <code>http://www.example.com/docs/dir/file.html</code> ã«ã¯
          <code>/var/web/dir/file.html</code> ãŒé€ä¿¡ã•れã¾ã™ã€‚
          <code class="directive"><a href="./mod/mod_alias.html#scriptalias">ScriptAlias</a></code> ã‚‚ã€
          対象ã¨ãªã£ã¦ã„るパス㌠CGI スクリプトã¨ã—ã¦æ‰±ã‚れるã¨ã„ã†è¿½åŠ ã®
          効果以外ã¯åŒã˜ã‚ˆã†ã«å‹•作ã—ã¾ã™ã€‚</p>
      
          <p>ã‚‚ã£ã¨æŸ”軟ãªè¨­å®šãŒå¿…è¦ãªçжæ³ã§ã¯ã€
          <code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code> ディレクティブや
          <code class="directive"><a href="./mod/mod_alias.html#scriptaliasmatch">ScriptAliasMatch</a></code> ディレクティブ
          を使ã£ã¦å¼·åŠ›ãªæ­£è¦è¡¨ç¾ã«åŸºã¥ã„ãŸãƒžãƒƒãƒã¨ç½®æ›ã‚’行ãªã†ã“ã¨ãŒã§ãã¾ã™ã€‚
          ãŸã¨ãˆã°ã€</p>
      
      <div class="example"><p><code>ScriptAliasMatch ^/~([a-zA-Z0-9]+)/cgi-bin/(.+)
            /home/$1/cgi-bin/$2</code></p></div>
      
          <p>㯠<code>http://example.com/~user/cgi-bin/script.cgi</code> ã¸ã®
          リクエストを <code>/home/user/cgi-bin/script.cgi</code> ã¨ã„ã†ãƒ‘スã¸
          マップã—ã€ã“ã®ãƒžãƒƒãƒ—ã®çµæžœã¨ã—ã¦ã®ãƒ•ァイルを CGI スクリプトã¨ã—ã¦
          扱ã„ã¾ã™ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="user" id="user">ユーザディレクトリ</a></h2>
      
          <p>ä¼çµ±çš„ã« Unix システムã§ã¯ãƒ¦ãƒ¼ã‚¶ <em>user</em> ã®ãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’
          <code>~user/</code> ã¨ã—ã¦å‚ç…§ã§ãã¾ã™ã€‚<code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code> 
          モジュールã¯ã“ã®æ¦‚å¿µã‚’ã‚¦ã‚§ãƒ–ã«æ‹¡å¼µã—ã¦ã€
          ãれãžã‚Œã®ãƒ¦ãƒ¼ã‚¶ã®ãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ãƒ•ァイルを
          以下ã®ã‚ˆã†ãª URL を使ã£ã¦ã‚¢ã‚¯ã‚»ã‚¹ã§ãるよã†ã«ã—ã¾ã™ã€‚</p>
      
      <div class="example"><p><code>http://www.example.com/~user/file.html</code></p></div>
      
          <p>セキュリティã®è¦³ç‚¹ã‹ã‚‰ã€ã‚¦ã‚§ãƒ–ã‹ã‚‰ãƒ¦ãƒ¼ã‚¶ã®ãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¸
          直接アクセスã§ãるよã†ã«ã™ã‚‹ã“ã¨ã¯é©åˆ‡ã§ã¯ã‚りã¾ã›ã‚“。ã§ã™ã‹ã‚‰ã€
          <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code> ディレクティブã«ã¯
          ユーザã®ãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ä¸‹ã®ã€ã‚¦ã‚§ãƒ–ファイルã®
          ç½®ã‹ã‚Œã¦ã„るディレクトリを指定ã—ã¾ã™ã€‚デフォルトã®è¨­å®šã®
          <code>Userdir public_html</code> を使ã†ã¨ã€ä¸Šã® URL ã¯
          <code>/home/user/public_html/file.html</code> ã¨ã„ã†ã‚ˆã†ãªãƒ•ァイルã«
          マップã•れã¾ã™ã€‚ã“ã“ã§ã€<code>/home/user/</code> ã¯
          <code>/etc/passwd</code> ã§æŒ‡å®šã•れã¦ã„るユーザã®ãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã§ã™ã€‚</p>
      
          <p><code class="directive"><a href="./mod/mod_userdir.html#userdir">Userdir</a></code> ã«ã¯ã€
          <code>/etc/passwd</code> ã«ãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ä½ç½®ãŒæ›¸ã‹ã‚Œã¦ã„ãªã„
          システムã§ã‚‚使ã†ã“ã¨ã®ã§ãã‚‹ä»–ã®å½¢å¼ã‚‚ã‚りã¾ã™ã€‚</p>
      
          <p>中ã«ã¯ã‚·ãƒ³ãƒœãƒ« "~" (<code>%7e</code> ã®ã‚ˆã†ã«ç¬¦å·åŒ–ã•れるã“ã¨ãŒå¤šã„)
          ã‚’æ ¼å¥½ãŒæ‚ªã„ã¨æ€ã£ã¦ã€ãƒ¦ãƒ¼ã‚¶ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’表ã™ãŸã‚ã«åˆ¥ã®æ–‡å­—列ã®
          使用を好む人ãŒã„ã¾ã™ã€‚mod_userdir ã¯ã“ã®æ©Ÿèƒ½ã‚’サãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã›ã‚“。
          ã—ã‹ã—ã€ãƒ¦ãƒ¼ã‚¶ã®ãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãŒè¦å‰‡çš„ãªæ§‹æˆã®ã¨ãã¯ã€
          <code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code> を使ã£ã¦æœ›ã¿ã®
          åŠ¹æžœã‚’é”æˆã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ãŸã¨ãˆã°ã€
          <code>http://www.example.com/upages/user/file.html</code> ãŒ
          <code>/home/user/public_html/file.html</code> ã«ãƒžãƒƒãƒ—ã•れるよã†ã«ã™ã‚‹ã«ã¯ã€
          以下ã®ã‚ˆã†ã« <code>AliasMatch</code> ディレクティブを使ã„ã¾ã™:</p>
      
      <div class="example"><p><code>AliasMatch ^/upages/([a-zA-Z0-9]+)/?(.*)
            /home/$1/public_html/$2</code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="redirect" id="redirect">URL リダイレクション</a></h2>
      
          <p>上ã®ç¯€ã§èª¬æ˜Žã—ãŸè¨­å®šç”¨ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠Apache ã«
          ファイルシステムã®ç‰¹å®šã®å ´æ‰€ã‹ã‚‰ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’å–ã£ã¦ãã¦
          クライアントã«é€ã‚Šè¿”ã™ã‚ˆã†ã«ã—ã¾ã™ã€‚ã¨ãã«ã¯ã€ãã®ä»£ã‚りã«
          クライアントã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆã•れãŸã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã¯åˆ¥ã® URL ã«ã‚ã‚‹ã“ã¨ã‚’
          知らã›ã¦ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒæ–°ã—ã„ URL ã¸æ–°ã—ã„リクエストを行ãªã†ã‚ˆã†ã«
          ã™ã‚‹æ–¹ãŒæœ›ã¾ã—ã„ã“ã¨ãŒã‚りã¾ã™ã€‚ã“れã¯<em>リダイレクション</em>ã¨
          呼ã°ã‚Œã¦ã„ã¦ã€<code class="directive"><a href="./mod/mod_alias.html#redirect">Redirect</a></code>
          ディレクティブã«ã‚ˆã‚Šå®Ÿè£…ã•れã¦ã„ã¾ã™ã€‚ãŸã¨ãˆã°ã€
          <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> ã®ä¸‹ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒª
          <code>/foo/</code> ãŒæ–°ã—ã„ディレクトリ <code>/bar/</code> ã«ç§»å‹•ã—ãŸã¨ãã¯ã€
          以下ã®ã‚ˆã†ã«ã—ã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒæ–°ã—ã„場所ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„をリクエストã™ã‚‹ã‚ˆã†ã«
          指示ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™:</p>
      
      <div class="example"><p><code>Redirect permanent /foo/
            http://www.example.com/bar/</code></p></div>
      
          <p>ã“れã¯ã€<code>/foo/</code> ã§å§‹ã¾ã‚‹ã™ã¹ã¦ã® URL-Path ã‚’ã€
          <code>www.example.com</code> サーãƒã® <code>/bar/</code> ãŒ
          <code>/foo/</code> ã«ç½®æ›ã•れãŸã‚‚ã®ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã—ã¾ã™ã€‚
          サーãƒã¯è‡ªåˆ†è‡ªèº«ã®ã‚µãƒ¼ãƒã ã‘ã§ãªãã€ã©ã®ã‚µãƒ¼ãƒã«ã§ã‚‚クライアントを
          リダイレクトã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>Apache ã¯ã‚ˆã‚Šè¤‡é›‘ãªæ›¸ãæ›ãˆã®å•題ã®ãŸã‚ã«ã€
          <code class="directive"><a href="./mod/mod_alias.html#redirectmatch">RedirectMatch</a></code> ディレクティブを
          æä¾›ã—ã¦ã„ã¾ã™ã€‚ãŸã¨ãˆã°ã€ã‚µã‚¤ãƒˆã®ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã‚’é•ã†ã‚µã‚¤ãƒˆã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆ
          ã™ã‚‹ã‘れã©ã€ä»–ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ãã®ã¾ã¾æ‰±ã†ã€ã¨ã„ã†ã¨ãã¯ä»¥ä¸‹ã®è¨­å®šã‚’
          使ã„ã¾ã™:</p>
      
      <div class="example"><p><code>RedirectMatch permanent ^/$
            http://www.example.com/startpage.html</code></p></div>
      
          <p>ã‚ã‚‹ã„ã¯ã€ä¸€æ™‚çš„ã«ã‚µã‚¤ãƒˆã®ã™ã¹ã¦ã®ãƒšãƒ¼ã‚¸ã‚’ä»–ã®ã‚µã‚¤ãƒˆã®ç‰¹å®šã®
          ページã¸ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã™ã‚‹ã¨ãã¯ã€ä»¥ä¸‹ã‚’使ã„ã¾ã™:</p>
      
      <div class="example"><p><code>RedirectMatch temp .*
            http://othersite.example.com/startpage.html</code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="proxy" id="proxy">リãƒãƒ¼ã‚¹ãƒ—ロキシ</a></h2>
      
      <p>Apache ã¯é éš”地ã«ã‚るドキュメントをローカルã®ã‚µãƒ¼ãƒã® URL 空間ã«
      æŒã£ã¦ãã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ã“ã®æ‰‹æ³•ã¯<em>リãƒãƒ¼ã‚¹ãƒ—ロキシ</em>ã¨å‘¼ã°ã‚Œã¦ã„ã¾ã™ã€‚
      ウェブサーãƒãŒé éš”地ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’å–å¾—ã—ã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«é€ã‚Šè¿”ã™ã®ãŒ
      プロキシサーãƒã®å‹•作ã®ã‚ˆã†ã«è¦‹ãˆã‚‹ã‹ã‚‰ã§ã™ã€‚クライアントã«ã¯ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãŒ
      リãƒãƒ¼ã‚¹ãƒ—ロキシサーãƒã‹ã‚‰é€ã‚‰ã‚Œã¦ãã¦ã„るよã†ã«è¦‹ãˆã‚‹ç‚¹ãŒé€šå¸¸ã®
      プロキシã¨ã¯ç•°ãªã‚Šã¾ã™ã€‚</p>
      
      <p>次ã®ä¾‹ã§ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒ <code>/foo/</code> ディレクトリã®ä¸‹ã«ã‚ã‚‹
      ドキュメントをリクエストã™ã‚‹ã¨ã€ã‚µãƒ¼ãƒãŒ <code>internal.example.com</code> ã®
      <code>/bar/</code> ディレクトリã‹ã‚‰å–å¾—ã—ã¦ã€ã•もローカルサーãƒã‹ã‚‰ã®
      ドキュメントã®ã‚ˆã†ã«ã—ã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«è¿”ã—ã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
      ProxyPass /foo/ http://internal.example.com/bar/<br />
      ProxyPassReverse /foo/ http://internal.example.com/bar/<br />
      ProxyPassReverseCookieDomain internal.example.com public.example.com<br />
      ProxyPassReverseCookiePath /foo/ /bar/
      </code></p></div>
      
      <p><code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code> ディレクティブã¯
      サーãƒãŒé©åˆ‡ãªãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’å–å¾—ã™ã‚‹ã‚ˆã†ã«è¨­å®šã—ã€
      <code class="directive"><a href="./mod/mod_proxy.html#proxypassreverse">ProxyPassReverse</a></code> ディレクティブã¯
      <code>internal.example.com</code> ã‹ã‚‰ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆãŒãƒ­ãƒ¼ã‚«ãƒ«ã‚µãƒ¼ãƒã®
      é©åˆ‡ãªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’指ã™ã‚ˆã†ã«æ›¸ãæ›ãˆã¾ã™ã€‚
      åŒæ§˜ã« <code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiedomain">ProxyPassReverseCookieDomain</a></code>
      㨠<code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiepath">ProxyPassReverseCookiePath</a></code>
      ã§ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰å´ã‚µãƒ¼ãƒã®ç™ºè¡Œã—㟠Cookie ã‚’æ›¸ãæ›ãˆã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      <p>ãŸã ã—ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã®ä¸­ã®ãƒªãƒ³ã‚¯ã¯æ›¸ãæ›ãˆã‚‰ã‚Œãªã„ã€
      ã¨ã„ã†ã“ã¨ã¯çŸ¥ã£ã¦ãŠã„ã¦ãã ã•ã„。
      ã§ã™ã‹ã‚‰ã€<code>internal.example.com</code> ã¸ã®çµ¶å¯¾ãƒ‘スã«ã‚ˆã‚‹ãƒªãƒ³ã‚¯ã§ã¯ã€
      クライアントãŒãƒ—ロキシサーãƒã‚’抜ã‘出ã—㦠<code>internal.example.com</code> ã«
      直接リクエストをé€ã‚‹ã€ã¨ã„ã†ã“ã¨ã«ãªã‚Šã¾ã™ã€‚
      サードパーティ製モジュール㮠<a href="http://apache.webthing.com/mod_proxy_html/">mod_proxy_html</a>
      ã¯ã€HTML 㨠XHTML 中ã®ãƒªãƒ³ã‚¯ã‚’æ›¸ãæ›ãˆã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rewrite" id="rewrite">リライトエンジン</a></h2>
      
          <p>より一層強力ãªç½®æ›ãŒå¿…è¦ãªã¨ãã¯ã€<code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>
          ãŒæä¾›ã™ã‚‹ãƒªãƒ©ã‚¤ãƒˆã‚¨ãƒ³ã‚¸ãƒ³ãŒå½¹ã«ç«‹ã¤ã§ã—ょã†ã€‚
          ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ã‚ˆã‚Šæä¾›ã•れるディレクティブã¯
          ブラウザã®ç¨®é¡žã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆå…ƒã® IP アドレスãªã©ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ç‰¹å¾´ã‚’
          使ã£ã¦é€ã‚Šè¿”ã™ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®å ´æ‰€ã‚’決ã‚ã¾ã™ã€‚ã•らã«ã€<code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>
          ã¯å¤–部ã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãƒ•ァイルやプログラムを使ã£ã¦ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æ‰±ã„方を
          決ã‚ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚リライトエンジンã¯ä¸Šã§æŒ™ã’られã¦ã„る三ã¤ã®ãƒžãƒƒãƒ”ング
          ã™ã¹ã¦ã‚’行ãªã†ã“ã¨ãŒã§ãã¾ã™: 内部ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆ (エイリアス)ã€
          外部ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã€ãƒ—ロキシã§ã™ã€‚mod_rewrite を使ã†å¤šãã®å®Ÿç”¨çš„ãªä¾‹ã¯
          <a href="misc/rewriteguide.html">URL リライトガイド</a>
          ã§èª¬æ˜Žã•れã¦ã„ã¾ã™ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="notfound" id="notfound">File Not Found</a></h2>
      
          <p>å¿…ãšã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã•れ㟠URL ã«å¯¾å¿œã™ã‚‹ãƒ•ァイルãŒãƒ•ァイルシステムã«
          ç„¡ã„ã¨ã„ã†å ´åˆãŒç™ºç”Ÿã—ã¾ã™ã€‚ã“れãŒèµ·ã“ã‚‹ã®ã«ã¯ã„ãã¤ã‹ã®ç†ç”±ãŒã‚りã¾ã™ã€‚
          å ´åˆã«ã‚ˆã£ã¦ã¯ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’別ã®å ´æ‰€ã«ç§»å‹•ã—ãŸçµæžœã§ã‚ã‚‹ã“ã¨ãŒã‚りã¾ã™ã€‚
          ã“ã®å ´åˆã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«ãƒªã‚½ãƒ¼ã‚¹ã®æ–°ã—ã„ä½ç½®ã‚’知らã›ã‚‹ãŸã‚ã«
          <a href="#redirect">URL リダイレクション</a>を使ã†ã®ãŒæœ€å–„ã®æ–¹æ³•ã§ã™ã€‚
          ãã†ã™ã‚‹ã“ã¨ã«ã‚ˆã£ã¦ã€ãƒªã‚½ãƒ¼ã‚¹ã¯æ–°ã—ã„ä½ç½®ã«ç§»å‹•ã—ã¦ã„ã‚‹ã‘れã©ã‚‚ã€
          å¤ã„ブックマークやリンクãŒå‹•作ã—ç¶šã‘るよã†ã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>"File Not Found" エラーã®ã‚‚ã†ä¸€ã¤ã®ã‚ˆãã‚ã‚‹ç†ç”±ã¯ã€
          ブラウザã¸ã®ç›´æŽ¥å…¥åŠ›ã‚„ HTML リンクã‹ã‚‰ã®å¶ç™ºçš„㪠URL ã®å…¥åЛ間é•ã„ã§ã™ã€‚
          Apache ã¯ã“ã®å•題を改善ã™ã‚‹ãŸã‚ã«ã€<code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code>
          モジュール (æ„図的ãªç¶´ã‚Šé–“é•ã„)
          (訳注: æ­£ã—ã㯠spelling) ã‚’æä¾›ã—ã¦ã„ã¾ã™ã€‚ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒ
          使用ã•れã¦ã„ã‚‹ã¨ãã¯ã€"File Not Found" エラーを横å–りã—ã¦ã€
          ä¼¼ãŸãƒ•ァイルåã®ãƒªã‚½ãƒ¼ã‚¹ã‚’探ã—ã¾ã™ã€‚ã‚‚ã—一ã¤ã ã‘見ã¤ã‹ã£ãŸå ´åˆã¯
          mod_speling ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«æ­£ã—ã„ä½ç½®ã‚’知らã›ã‚‹ãŸã‚ã« HTTP リダイレクトを
          é€ã‚Šã¾ã™ã€‚ã‚‚ã—複数ã®ã€Œè¿‘ã„ã€ãƒ•ァイルãŒè¦‹ã¤ã‹ã£ãŸå ´åˆã¯ã€ãれら
          代替ã¨ãªã‚Šãˆã‚‹ã‚‚ã®ã®ãƒªã‚¹ãƒˆãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«è¡¨ç¤ºã•れã¾ã™ã€‚</p>
      
          <p>mod_speling ã®éžå¸¸ã«æœ‰ç”¨ãªæ©Ÿèƒ½ã¯ã€å¤§æ–‡å­—å°æ–‡å­—を区別ã›ãšã«
          ファイルåを比較ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ã“れ㯠URL 㨠unix ã®
          ファイルシステムãŒä¸¡æ–¹ã¨ã‚‚å¤§æ–‡å­—å°æ–‡å­—を区別ã™ã‚‹ã‚‚ã®ã§ã‚ã‚‹ã€
          ã¨ã„ã†ã“ã¨ã‚’ユーザãŒçŸ¥ã‚‰ãªã„システムã§å½¹ã«ç«‹ã¡ã¾ã™ã€‚ãŸã ã—ã€
          時折㮠URL è¨‚æ­£ç¨‹åº¦ã§æ¸ˆã¾ãšã€mod_speling をより多ã使用ã™ã‚‹ã¨ã€ã‚µãƒ¼ãƒã«
          ã•らãªã‚‹è² è·ãŒã‹ã‹ã‚Šã¾ã™ã€‚ã™ã¹ã¦ã®ã€Œæ­£ã—ããªã„ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®å¾Œã«
          URL ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®æ–°ã—ã„リクエストãŒãã‚‹ã“ã¨ã«
          ãªã‚Šã¾ã™ã‹ã‚‰ã€‚</p>
      
          <p>コンテンツã®ä½ç½®ã‚’決ã‚よã†ã¨ã™ã‚‹ã™ã¹ã¦ã®è©¦ã¿ãŒå¤±æ•—ã™ã‚‹ã¨ã€
          Apache ã¯ã€HTTP ステータスコード 404 (file not found) ã¨å…±ã«
          エラーページを返ã—ã¾ã™ã€‚ã“ã®ã‚¨ãƒ©ãƒ¼ãƒšãƒ¼ã‚¸ã®å¤–観ã¯
          <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code> 
          ディレクティブã§åˆ¶å¾¡ã•れã€
          <a href="custom-error.html">カスタムエラーレスãƒãƒ³ã‚¹</a> ã§
          説明ã•れã¦ã„るよã†ã«ã€æŸ”軟ãªè¨­å®šã‚’行ãªã†ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/urlmapping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/urlmapping.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/urlmapping.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/urlmapping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/urlmapping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/urlmapping.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_2.html������������������������������������������������������0000644�0000000�0000050�00000001015�13362070302�017451� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: new_features_2_2.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: new_features_2_2.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: new_features_2_2.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: new_features_2_2.html.pt-br
      Content-Language: pt-br
      Content-type: text/html; charset=ISO-8859-1
      
      URI: new_features_2_2.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/glossary.html.es�����������������������������������������������������������0000644�0000000�0000050�00000075606�13412755316�016625� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Glosario - Servidor HTTP Apache Versión 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="./glossary.html">Glosario</a> | <a href="./sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="./">Versión 2.4</a></div><div id="page-content"><div id="preamble"><h1>Glosario</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="./de/glossary.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/glossary.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/glossary.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/glossary.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/glossary.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/glossary.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/glossary.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      	<p>Éste glosario define las terminologías más comunes
      	relacionada con Apache en particular, y con los servidores web en
      	general. En los enlaces que hay asociados a cada término se puede
      	encontrar información más detallada de cada uno.</p>
      	</div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="definitions" id="definitions">Definiciones</a></h2>
      		<dl>
      		<dt><a name="algorithm" id="algorithm">Algoritmo</a></dt>
      		<dd>Un proceso definido sin ambigüedades o un conjunto de reglas 
      		para solucionar un problema en un número finito de pasos.
      		Los algoritmos para encriptar se llaman
      		normalmente <dfn>algoritmos de cifrado</dfn>.
      		</dd>
      
      
      		<dt><a name="cipher" id="cipher">Algoritmo de cifrado, (Cipher). </a></dt>
      		<dd>Es un algoritmo o sistema de encriptado de información. 
      		Ejemplos de estos algoritmos son DES, IDEA, RC4, etc.<br />
      		Consulte: <a href="ssl/">Encriptado SSL/TLS</a></dd>
      
      		<dt><a name="authentication" id="authentication">Autenticación.</a></dt>
      		<dd>La identificación positiva de una entidad de red tal como un
      		servidor, un cliente, o un usuario.<br /> 
      		Consulte: <a href="howto/auth.html">Autentificación, Autorización, 
      		y Control de Acceso</a></dd>
      
      
      		<dt><a name="certificationauthority" id="certificationauthority">Autoridad Certificadora.</a> <a name="ca">(CA)</a></dt> <dd>Es una entidad externa de confianza cuyo fin
      		es firmar certificados para las entidades de red que ha autentificado
      		usando medios seguros. Otras entidades de red pueden verificar la
      		firma para comprobar que una Autoridad Certificadora ha autentificado
      		al poseedor del certificado.<br /> Consulte: <a href="ssl/">Encriptado
      		SSL/TLS</a></dd>
      
      
      		<dt><a name="header" id="header">Cabecera.</a></dt> <dd>Es la parte de la
      		petición y la respuesta <a class="glossarylink" href="./glossary.html#http" title="ver glosario">HTTP</a> que se
      		envía antes del contenido propiamente dicho, y que contiene
      		meta-información describiendo el contenido.</dd>
      
      		<dt><a name="certificate" id="certificate">Certificado.</a></dt>
      		<dd>Una información que se almacena para autenticar entidades
      		de red tales como un servidor o un cliente. Un certificado
      		contiene piezas de información X.509 sobre su poseedor
      		(llamado sujeto) y sobre la <a class="glossarylink" href="./glossary.html#certificationauthority" title="ver glosario">Autoridad Certificadora</a>
      		(llamada el emisor) que lo firma, más la <a class="glossarylink" href="./glossary.html#publickey" title="ver glosario">clave pública</a> del propietario y la firma de
      		la AC(Autoridad Certificadora). Las entidades de red verifican las firmas usando
      		certificados de las AC.<br />
      		Consulte: <a href="ssl/">Encriptado SSL/TLS</a>
      		</dd>
      
      
      
      		<dt><a name="publickey" id="publickey">Clave Pública.</a></dt> 
      		<dd>La clave disponible
      		públicamente en un <a class="glossarylink" href="./glossary.html#publickeycryptography" title="ver glosario">sistema
      		criptográfico de Clave Pública</a>, usado para encriptar
      		mensajes destinados a su propietario y para desencriptar firmas hechas
      		por su propietario.<br /> Consulte: <a href="ssl/">Encriptado
      		SSL/TLS</a></dd>
      
      
      
      		<dt><a name="privatekey" id="privatekey">Clave Privada.</a></dt>
      		<dd>La clave secreta
      		de un <a class="glossarylink" href="./glossary.html#publickeycryptography" title="ver glosario">Sistema criptográfico de
      		Clave Pública</a>, usada para desencriptar los mensajes entrantes
      		y firmar los salientes.<br /> Consulte: <a href="ssl/">Encriptado
      		SSL/TLS</a></dd>
      
      
      		<dt><a name="connect" id="connect">CONNECT</a></dt> <dd>Un <a class="glossarylink" href="./glossary.html#method" title="ver glosario">método</a> de HTTP para hacer proxy a canales de
      		datos sin usar HTTP. Puede usarse para encapsular otros protocolos,
      		tales como el protocolo SSL.</dd>
      
      
      
      		<dt><a name="context" id="context">Contexto</a></dt> <dd>Un área en los
      		<a class="glossarylink" href="./glossary.html#configurationfile" title="ver glosario">ficheros de configuración</a>
      		donde están permitidos ciertos tipos de <a class="glossarylink" href="./glossary.html#directive" title="ver glosario">directivas</a>.<br />
      		Consulte: <a href="mod/directive-dict.html#Context">Términos 
      		usados para describir las directivas de Apache</a></dd>
      
      
      		<dt><a name="accesscontrol" id="accesscontrol">Control de Acceso.</a></dt> 
      		<dd>La
      		restricción en el acceso al entorno de una red. En el contexto de
      		Apache significa normalmente la restricción en el acceso a
      		ciertas <em>URLs</em>.<br /> 
      		Consulte: <a href="howto/auth.html">Autentificación, Autorización, y
      		Control de Acceso</a></dd>
      
      
      		<dt><a name="symmetriccryptophraphy">Criptografía
      		Simétrica</a></dt> <dd>El estudio y aplicación de
      		<em>Algoritmos de Cifrado</em> que usan una sola clave secreta tanto
      		para cifrar como para descifrar.<br /> Consulte: <a href="ssl/">Encriptado SSL/TLS</a></dd>
      
      
      		<dt><a name="directive" id="directive">Directiva</a></dt>
      		<dd>Un comando de
      		configuración que controla uno o más aspectos del
      		comportamiento de Apache.  Las directivas se ponen en el <a class="glossarylink" href="./glossary.html#configurationfile" title="ver glosario">Fichero de Configuración</a><br />
      		Consulte: <a href="mod/directives.html">Índice de
      		Directivas</a></dd>
      
      		<dt><a name="configurationdirective" id="configurationdirective">Directivas de
      		configuración.</a></dt> <dd>Consulte: <a class="glossarylink" href="./glossary.html#directive" title="ver glosario">Directivas</a></dd>
      
      		<dt><a name="apacheportableruntime" id="apacheportableruntime">Entorno Portable de tiempo de ejecución de Apache, </a> <a name="apr" id="apr">(APR, Apache Portable Runtime)</a></dt>
      		<dd>Es un conjunto de librerías que proveen las interfaces básicas 
      		entre el servidor y el sistema operativo. El desarrollo de APR es 
      		paralelo al del Servidor HTTP Apache, como un proyecto independiente. 
      		Puedes visitar el proyecto en:<br />
      		<a href="http://apr.apache.org/">Apache Portable Runtime
      		Project</a>
      		</dd>
      
      		<dt><a name="export-crippled" id="export-crippled">Export-Crippled</a></dt>
      		<dd>Disminución de la fortaleza criptográfica (y seguridad)
      		para cumplir con las Regulaciones sobre Exportación de la
      		Administración de los Estados Unidos (EAR). El software
      		criptográfico Export-crippled está limitado a una clave de
      		pequeño tamaño, de tal manera que el <em>texto cifrado</em>
      		que se consigue con él, puede descifrarse por medio de fuerza bruta.<br /> Consulte: <a href="ssl/">Encriptado SSL/TLS</a></dd>
      
      
      		<dt><a name="regularexpresion" id="regularexpresion">Expresiones Regulares</a> 
      		<a name="regex">(Regex)</a></dt> <dd>Una forma de describir un patrón en un 
      		texto - por ejemplo, "todas las palabras que empiezan con la letra "A"
      		o "todos los números de teléfono que contienen 10
      		dígitos" o incluso "Todas las frases entre comas, y que no
      		contengan ninguna letra Q". Las Expresiones Regulares son útiles en
      		Apache porque permiten aplicar ciertos atributos a colecciones de
      		ficheros o recursos de una forma flexible - por ejemplo, todos los
      		archivos .gif y .jpg que estén en el directorio "imágenes"
      		podrían ser escritos como "<code>/images/.*(jpg|gif)$</code>".
      		En los lugares donde expresiones regulares se utilizan para reemplazar
      		cadenas, las variables especiales $ 1 ... $ 9 contienen 
      		referencias inversa las partes agrupadas (entre paréntesis) 
      		de la expresión coincidente. La variable especial $ 0 contiene 
      		una referencia inversa a todo el ejemplar de la expresión.
      		Para escribir un símbolo de dolar literal en una sustitución de
      		una cadena, se puede escapar usando "\". Históricamente, la variable &amp;
      		se podía usar como un alias a $0 en algunos sitios. 
      		Esto ya no esta soportado desde la versión 2.3.6.
      		Apache usa Expresiones Regulares compatibles con Perl gracias a la
      		librería <a href="http://www.pcre.org/">PCRE</a>.
      		Puedes encontrar más documentación sobre las expresiones regulares 
      		de PCRE y su sintaxis en esa página o en la
      		<a href="http://en.wikipedia.org/wiki/PCRE">Wikipedia</a>.</dd>
      
      
      
      		<dt><a name="configurationfile" id="configurationfile">Fichero de Configuración.</a></dt>
      		<dd>Un fichero de texto que contiene <a class="glossarylink" href="./glossary.html#directive" title="ver glosario">Directivas</a> que controlan la configuración
      		de Apache.<br /> Consulte: <a href="configuring.html">Ficheros de
      		Configuración</a></dd>
      
      
      		<dt><a name="htaccess" id="htaccess">.htaccess</a></dt> 
      		<dd>Un <a class="glossarylink" href="./glossary.html#configurationfile" title="ver glosario">fichero de configuración</a> que se
      		pone dentro de la estructura de directorios del sitio web y aplica <a class="glossarylink" href="./glossary.html#directive" title="ver glosario">directivas</a> de configuración al directorio
      		en el que está y a sus subdirectorios. A pesar de su nombre, este
      		fichero puede contener cualquier tipo de directivas, no solo
      		directivas de control de acceso.<br /> Consulte: <a href="configuring.html">Ficheros de Configuración</a> para más información.</dd>
      
      		<dt><a name="httpd.conf" id="httpd.conf">httpd.conf</a></dt>
      		<dd>Es el <a class="glossarylink" href="./glossary.html#configurationfile" title="ver glosario">fichero de configuración</a> principal
      		de Apache. Su ubicación por defecto es
      		<code>/usr/local/apache2/conf/httpd.conf</code>, pero puede moverse
      		usando opciones de configuración al compilar o al iniciar
      		Apache.<br /> Consulte: <a href="configuring.html">Ficheros de
      		Configuración</a></dd>
      
      		<dt><a name="filter" id="filter">Filtro</a></dt>
      		<dd>Un proceso que se aplica a la
      		información que es enviada o recibida por el servidor. Los
      		ficheros de entrada procesan la información enviada por un
      		cliente al servidor, mientras que los filtros de salida procesan la
      		información en el servidor antes de enviársela al
      		cliente. Por ejemplo, el filtro de salida <code>INCLUDES</code>
      		procesa documentos para <a class="glossarylink" href="./glossary.html#ssi" title="ver glosario">Server Side Includes</a>.<br />
      		Consulte: <a href="filter.html">Filtros</a></dd>
      
      
      
      		<dt><a name="digitalsignature" id="digitalsignature">Firma Digital</a></dt>
      		<dd>Un bloque de
      		texto encriptado que verifica la validez de un certificado o de otro
      		fichero. Una <a class="glossarylink" href="./glossary.html#certificationauthority" title="ver glosario">Autoridad
      		Certificadora</a> crea una firma generando un hash a partir de la
      		<em>Clave Pública</em> que lleva incorporada en un
      		<em>Certificado</em>, después encriptando el hash con su propia
      		<em>Clave Privada</em>. Solo las claves públicas de las CAs
      		pueden desencriptar la firma, verificando que la CA ha autentificado a
      		la entidad de red propietaria del <em>Certificado</em>.<br />
      		Consulte: <a href="ssl/">Encriptado SSL/TLS</a></dd>
      
      		<dt><a name="handler" id="handler">Handler</a></dt> 
      		<dd>Es una representación
      		interna de Apache de una acción a ser ejecutada cuando se llama a
      		un fichero. Generalmente, los ficheros tienen un handler (manejador)
      		implícito, basado en el tipo de fichero. Normalmente, todos los
      		ficheros son simplemente servidos por el servidor, pero sobre algunos
      		tipos de ficheros se ejecutan acciones complementarias.  Por ejemplo,
      		el handler <code>cgi-script</code> designa los ficheros a ser
      		procesados como <a class="glossarylink" href="./glossary.html#cgi" title="ver glosario">CGIs</a>.<br /> Consulte: <a href="handler.html">Uso de Handlers en Apache</a></dd>
      
      		<dt><a name="apacheextensiontool" id="apacheextensiontool">Herramienta de extensión de
      		Apache.</a> <a name="apxs" id="apxs">(apxs)</a></dt>
      		<dd>Es un script escrito en Perl que ayuda a compilar el código
      		fuente de algunos <a class="glossarylink" href="./glossary.html#module" title="ver glosario">módulos</a> para 
      		convertirlos en Objetos Dinámicos Compartidos (<a class="glossarylink" href="./glossary.html#dso.html" title="ver glosario">DSO</a>s)
      		y ayuda a instalarlos en el Servidor Web de Apache.<br /> 
      		Consulte: Manual de: <code class="program"><a href="./programs/apxs.html">apxs</a></code></dd>
      
      
      
      		<dt><a name="hash" id="hash">Hash</a></dt>
      		<dd>Algoritmo matemático de un solo sentido e irreversible, que genera
      		una cadena de una determinada longitud de otra cadena de 
      		cualquier tamaño. Diferentes entradas darán diferentes hashes 
      		(dependiendo de la función hash.) 
      		</dd>
      
      
      
      
      
      		<dt><a name="virtualhosting">Hosting Virtual</a></dt> <dd>Se trata de
      		servir diferentes sitios web con una sola entidad de Apache.  <em>El
      		hosting virtual de IPs</em> diferencia los sitios web basándose en sus
      		direcciones IP, mientras que el <em>hosting virtual basado en
      		nombres</em> usa solo el nombre del host y de esta manera puede alojar
      		muchos sitios web con la misma dirección IP.<br /> Consulte: <a href="vhosts/">Documentación sobre Hosting Virtual en
      		Apache</a></dd>
      
      
      		<dt><a name="uniformresourceidentifier">Identificador de Recursos
      		Uniforme</a> <a name="URI">(URI)</a></dt> <dd>Una cadena de caracteres
      		compacta para identificar un recurso físico o abstracto.  Se
      		define formalmente en la <a href="http://www.ietf.org/rfc/rfc2396.txt">RFC 2396</a>.  Los URIs que
      		se usan en world-wide web se refieren normalmente como <a href="#url">URLs</a>.</dd>
      
      
      
      
      		<dt><a name="servernameindication" id="servernameindication">Indicador del Nombre del servidor</a>
      		<a name="sni" id="sni"> Server Name Indication (SNI) </a></dt>
      		<dd>Una función SSL que permite pasar el nombre de host del servidor deseado 
      		en el mensaje inicial del protocolo de enlace SSL, para que el servidor web 
      		pueda seleccionar la configuración correcta del host virtual para usar en el 
      		procesamiento del protocolo de enlace SSL. Se añadió a SSL 
      		con las extensiones TLS en el RFC 3546.  <br />
      		See: <a href="ssl/ssl_faq.html">the SSL FAQ</a>
      		and <a href="http://www.ietf.org/rfc/rfc3546.txt">RFC 3546</a>
      		</dd>
      
      
      
      
      		<dt><a name="commongatewayinterface" id="commongatewayinterface">Interfaz de Pasarela Común.</a> <a name="cgi"> Common Gateway Interface (CGI)</a></dt>
      		<dd>Una definición estándar para
      		un interfaz entre un servidor web y un programa externo que permite
      		hacer peticiones de servicio a los programas externos.  Este interfaz
      		esta definido en el  <a href="http://www.ietf.org/rfc/rfc3875">RFC-3875</a>.<br />
      		Consulte: <a href="howto/cgi.html">Contenido Dinámico con CGI</a>
      		</dd>
      
      		<dt><a name="uniformresourcelocator">Localizador de Recursos
      		Uniforme</a> <a name="url">(URL)</a></dt>
      		<dd>El nombre de un recurso
      		en Internet.  Es la manera informal de decir lo que formalmente se
      		llama un <a href="#uniformresourceidentifier">Identificador de
      		Recursos Uniforme</a>.  Las URLs están compuestas normalmente por
      		un esquema, tal como <code>http</code> o <code>https</code>, un nombre
      		de host, y una ruta.  Una URL para esta página es
      		<code>http://httpd.apache.org/docs/2.4/glossary.html</code>.</dd>
      
      
      		<dt><a name="module" id="module">Módulo</a></dt>
      		<dd>Una parte independiente
      		de un programa. La mayor parte de la funcionalidad de Apache
      		está contenida en módulos que pueden incluirse o excluirse.
      		Los módulos que se compilan con el binario <code class="program"><a href="./programs/httpd.html">httpd</a></code>de Apache se
      		llaman <em>módulos estáticos</em>, mientras que los que se
      		almacenan de forma separada y pueden ser cargados de forma opcional,
      		se llaman <em>módulos dinámicos</em> o <a class="glossarylink" href="./glossary.html#dso" title="ver glosario">DSOs</a>.
      		Los módulos que están incluidos por defecto de llaman
      		<em>módulos base</em>.  Hay muchos módulos disponibles para
      		Apache que no se distribuyen con la <a class="glossarylink" href="./glossary.html#tarball" title="ver glosario">tarball</a> del
      		Servidor HTTP Apache.  Estos módulos son llamados
      		<em>módulos de terceros</em>.<br /> Consulte: <a href="mod/">Índice de Módulos</a></dd>
      
      
      		<dt><a name="method" id="method">Método</a></dt> 
      		<dd>En el contexto de <a class="glossarylink" href="./glossary.html#http" title="ver glosario">HTTP</a>, es una acción a ejecutar sobre un recurso,
      		especificado en la líneas de petición por el cliente.
      		Algunos de los métodos disponibles en HTTP son <code>GET</code>,
      		<code>POST</code>, y <code>PUT</code>.</dd>
      
      		<dt><a name="messagedigest" id="messagedigest">Mensaje Resumen (Message Digest)</a></dt> 
      		<dd>Un hash de un
      		mensaje, el cual pude ser usado para verificar que el contenido del
      		mensaje no ha sido alterado durante la transmisión.<br />
      		Consulte: <a href="ssl/">Encriptado SSL/TLS</a></dd>
      
      		<dt><a name="mime-type" id="mime-type">MIME-type</a></dt> 
      		<dd>Una manera de describir
      		el tipo de documento a ser transmitido.  Su nombre viene del hecho de
      		que su formato se toma de las Extensiones del "Multipurpose Internet
      		Mail".  Consiste en dos componentes, uno principal y otro secundario,
      		separados por una barra.  Algunos ejemplos son <code>text/html</code>,
      		<code>image/gif</code>, y <code>application/octet-stream</code>.  En
      		HTTP, el tipo MIME se transmite en la <a class="glossarylink" href="./glossary.html#header" title="ver glosario">cabecera</a>
      		del <code>Tipo Contenido</code>.<br /> Consulte: <a href="mod/mod_mime.html">mod_mime</a></dd>
      
      		<dt><a name="modulemagicnumber" id="modulemagicnumber">Módulo del Número Mágico</a>
      		(<a name="mmn">MMN Module Magic
      		Number</a>)</dt> <dd> El módulo del número
      		mágico es una constante definida en el código
      		fuente de Apache que está asociado con la compatibilidad binaria
      		de los módulos. Ese número cambia cuando cambian las
      		estructuras internas de Apache, las llamadas a funciones y otras
      		partes significativas de la interfaz de programación de manera
      		que la compatibilidad binaria no puede garantizarse sin cambiarlo.  Si
      		cambia el número mágico de módulo, todos los
      		módulos de terceros tienen que ser al menos recompilados, y
      		algunas veces, incluso hay que introducir ligeras modificaciones para
      		que funcionen con la nueva versión de Apache </dd>
      
      
      		<dt><a name="fully-qualifieddomain-name" id="fully-qualifieddomain-name">Nombre de dominio
      		completamente qualificado</a> <a name="fqdn">(FQDN)</a></dt> 
      		<dd>El
      		nombre único de una entidad de red, que consiste en un nombre de
      		host y un nombre de dominio que puede traducirse a una dirección
      		IP. Por ejemplo, <code>www</code> es un nombre de host,
      		<code>example.com</code> es un nombre de dominio, y
      		<code>www.example.com</code> es un nombre de dominio completamente
      		qualificado.</dd>
      
      		<dt><a name="dynamicsharedobject" id="dynamicsharedobject">Objetos Dinámicos
      		Compartidos</a> <a name="dso">(DSO, dinamic shared objects)</a></dt>
      		<dd>Los <a class="glossarylink" href="./glossary.html#module" title="ver glosario">Módulos</a> compilados de forma separada al
      		binario httpd de Apache se pueden cargar según se necesiten.<br /> Consulte: <a href="dso.html">Soporte de Objetos Dinámicos
      		Compartidos</a></dd>
      
      
      		<dt><a name="openssl" id="openssl">OpenSSL</a></dt>
      		<dd>El toolkit Open Source para SSL/TLS<br />
      		Ver: <a href="http://www.openssl.org/">http://www.openssl.org/</a></dd>
      
      
      		<dt><a name="passphrase">Pass Phrase o frase de contraseña</a></dt> 
      		<dd>La palabra o frase
      		que protege los archivos de clave privada.  Evita que usuarios no
      		autorizados los encripten. Normalmente es solo la clave de
      		encriptado/desencriptado usada por los <a class="glossarylink" href="./glossary.html#cipher" title="ver glosario">Algoritmos de
      		Cifrado</a>.<br /> Consulte: <a href="ssl/">Encriptado
      		SSL/TLS</a></dd>
      
      		<dt><a name="certificatsigningrequest" id="certificatsigningrequest">Petición de firma de
      		Certificado.</a> <a name="csr">(CSR)</a></dt> 
      		<dd>Es la petición a
      		una <a class="glossarylink" href="./glossary.html#certificationauthority" title="ver glosario">Autoridad Certificadora</a> para
      		que firme un <a class="glossarylink" href="./glossary.html#certificate" title="ver glosario">certificado</a> aún sin
      		firmar. La Autoridad Certificadora firma el <em>Certificado</em> con
      		la <a class="glossarylink" href="./glossary.html#privatekey" title="ver glosario">Clave Privada</a> de su 
      		<em>certificado</em>. Una vez que el CSR está firmado, se 
      		convierte en un auténtico certificado.<br /> 
      		Consulte: <a href="ssl/">Encriptado SSL/TLS</a></dd>
      
      
      
      		<dt><a name="hypertexttransferprotocol" id="hypertexttransferprotocol">Protocolo de Transferencia de
      		Hipertexto</a> <a name="http">(HTTP)</a></dt> 
      		<dd>Es el protocolo de
      		transmisión estádar usado en la World Wide Web.  Apache
      		implementa la versión 1.1 de este protocolo, al que se hace
      		referencia como HTTP/1.1 y definido por el <a href="http://ietf.org/rfc/rfc2616.txt">RFC 2616</a>.</dd>
      
      		<dt><a name="https" id="https">HTTPS</a></dt>
      		<dd>Protocolo de transferencia de
      		Hipertexto (Seguro), es el mecanismo de comunicación encriptado
      		estándar en World Wide Web. En realidad es HTTP sobre <a class="glossarylink" href="./glossary.html#ssl" title="ver glosario">SSL</a>.<br /> Consulte: <a href="ssl/">Encriptado
      		SSL/TLS</a></dd>
      
      		<dt><a name="proxy" id="proxy">Proxy</a></dt> <dd>Un servidor intermedio que se
      		pone entre el cliente y el <em>servidor de origen</em>.  Acepta las
      		peticiones de los clientes, las transmite al servidor de origen, y
      		después devuelve la respuesta del servidor de origen al
      		cliente. Si varios clientes piden el mismo contenido, el proxy sirve
      		el contenido desde su caché, en lugar de pedirlo cada vez que lo
      		necesita al servidor de origen, reduciendo con esto el tiempo de
      		respuesta.<br /> Consulte: <a href="mod/mod_proxy.html">mod_proxy</a></dd>
      
      
      		<dt><a name="reverseproxy" id="reverseproxy">Proxy Inverso</a></dt>
      		<dd>Es un servidor
      		<a href="proxy">proxy</a> que se presenta al cliente como si fuera un
      		<em>servidor de origen</em>.  Es útil para esconder el
      		auténtico servidor de origen a los clientes por cuestiones de
      		seguridad, o para equilibrar la carga.</dd>
      
      
      		<dt><a name="securesocketslayer" id="securesocketslayer">SSL, Capa de Conexión Segura </a> <a name="ssl">Secure Sockets Layer(SSL)</a></dt> <dd>Es un protocolo creado por Netscape
      		Communications Corporation para la autenticación en
      		comunicaciones en general y encriptado sobre redes TCP/IP. Su
      		aplicación más popular es en <em>HTTPS</em>, ejemplo.: el Protocolo de
      		Transferencia de Hipertexto (HTTP) sobre SSL.<br /> Consulte: <a href="ssl/">Encriptado SSL/TLS</a></dd>
      
      
      		<dt><a name="ssleay" id="ssleay">SSLeay</a></dt> <dd>La implementación
      		original de la librería SSL/TLS desarrollada por Eric
      		A. Young</dd>
      
      
      
      		<dt><a name="serversideincludes" id="serversideincludes">Server Side Includes</a> <a name="ssi">(SSI)</a></dt> <dd>Una técnica para incluir directivas de
      		proceso en archivos HTML.<br /> Consulte: <a href="howto/ssi.html">Introducción a Server Side
      		Includes</a></dd>
      
      
      
      		<dt><a name="session" id="session">Sesión</a></dt> <dd>Información del
      		contexto de una comunicación en general.</dd>
      
      
      		<dt><a name="publickeycryptography" id="publickeycryptography">Sistema Criptográfico de Clave
      		Pública</a></dt> <dd>El estudio y aplicación de sistemas de
      		encriptado asimétricos, que usa una clave para encriptar y otra
      		para desencriptar. Una clave de cada uno de estos tipos constituye un
      		par de claves. También se llama Criptografía Asimétrica.<br />
      		Consulte: <a href="ssl/"> Encriptado SSL/TLS</a></dd>
      
      
      		<dt><a name="subrequest" id="subrequest">Subconsulta</a></dt>
      		<dd>Apache proporciona una API de subconsultasd a los módulos,
      		que permiten a otros sistemas de ficheros o paths de URL ser parcial o totalmente evaluados
      		por el servidor. Un ejemplo de los que usan esta API sería
      		<code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code>,
      		<code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code>, y <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>.
      		</dd>
      
      		<dt><a name="tarball" id="tarball">Tarball</a></dt> <dd>Un grupo de ficheros
      		puestos en un solo paquete usando la utilidad <code>tar</code>.  Las
      		distribuciones Apache se almacenan en ficheros comprimidos con tar o
      		con pkzip.</dd>
      
      		<dt><a name="ciphertext" id="ciphertext">Texto cifrado.</a></dt> 
      		<dd>El resultado de
      		haber aplicado a un <a class="glossarylink" href="./glossary.html#plaintext" title="ver glosario">texto plano</a> un <a class="glossarylink" href="./glossary.html#cipher" title="ver glosario">algoritmo de cifrado</a>.<br /> Consultar: <a href="ssl/">Encriptado SSL/TLS</a></dd>
      
      
      
      		<dt><a name="plaintext" id="plaintext">Texto plano</a></dt>
      		<dd>Un texto no encriptado.</dd>
      
      
      		<dt><a name="transportlayersecurity" id="transportlayersecurity">Transport 
      			Layer Security</a> <a name="tls">(TLS)</a></dt> <dd>Es el sucesor del protocolo SSL, creado
      		por el "Internet Engineering Task Force" (IETF) para la
      		autentificación en comunicaciones en general y encriptado sobre
      		redes TCP/IP. La versión 1 de TLS es casi idéntica a la
      		versión 3 de SSL.<br /> Consulte: <a href="ssl/">Encriptado
      		SSL/TLS</a></dd>
      
      
      		<dt><a name="environmentvariable" id="environmentvariable">Variable de Entorno</a> <a name="env-variable">(env-variable)</a></dt> 
      		<dd>Variables que
      		gestionan el shell del sistema operativo y que se usan para guardar
      		información y para la comunicación entre programas.  Apache
      		también contiene variables internas que son referidas como
      		variables de entorno, pero que son almacenadas en las estructuras
      		internas de Apache, en lugar de en el entorno del shell.<br />
      		Consulte: <a href="env.html">Variables de entorno de Apache</a></dd>
      
      
      		<dt><a name="x.509" id="x.509">X.509</a></dt> <dd>Un esquema de certificado de
      		autentificación recomendado por la International
      		Telecommunication Union (ITU-T) que se usa en la autentificación
      		SSL/TLS.<br /> Consulte: <a href="ssl/">Encriptado SSL/TLS</a></dd>
      
      		</dl>
      	</div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="./de/glossary.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/glossary.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/glossary.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/glossary.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/glossary.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/glossary.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/glossary.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentarios</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/glossary.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="./glossary.html">Glosario</a> | <a href="./sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/sections.html.ja.utf8������������������������������������������������������0000644�0000000�0000050�00000101473�13412755316�017451� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>セクションã®è¨­å®š - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>セクションã®è¨­å®š</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/sections.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/sections.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sections.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sections.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sections.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
       <p><a href="configuring.html">設定ファイル</a>中ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯
      サーãƒå…¨ä½“ã«é©ç”¨ã•れãŸã‚Šã€ç‰¹å®šã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚„ファイルã€ãƒ›ã‚¹ãƒˆã€URL ã«ã®ã¿
      é©ç”¨ã•れるよã†ã«åˆ¶é™ã—ãŸã‚Šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã“ã®æ–‡æ›¸ã¯è¨­å®šç”¨ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã®
      コンテナや <code>.htaccess</code> ファイルを使ã£ã¦ä»–ã®è¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®
      スコープを変更ã™ã‚‹æ–¹æ³•を説明ã—ã¾ã™ã€‚</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#types">設定用セクションコンテナã®ç¨®é¡ž</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#file-and-web">ファイルシステムã¨ã‚¦ã‚§ãƒ–空間</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#virtualhost">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#proxy">プロクシ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#whatwhere">ã©ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒä½¿ãˆã‚‹ã®?</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#mergin">セクションã®ãƒžãƒ¼ã‚¸æ–¹æ³•</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="types" id="types">設定用セクションコンテナã®ç¨®é¡ž</a></h2>
      
      <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td><ul><li><code class="module"><a href="./mod/core.html">core</a></code></li><li><code class="module"><a href="./mod/mod_version.html">mod_version</a></code></li><li><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
      <p>コンテナã«ã¯äºŒã¤ã®åŸºæœ¬ã¨ãªã‚‹ç¨®é¡žãŒã‚りã¾ã™ã€‚ã»ã¨ã‚“ã©ã®ã‚³ãƒ³ãƒ†ãƒŠã¯
      å„リクエストã«å¯¾ã—ã¦è©•価ã•れã¾ã™ã€‚ãã®å ´åˆã€ã‚³ãƒ³ãƒ†ãƒŠä¸­ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯
      コンテナã«ãƒžãƒƒãƒã™ã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ã®ã¿é©ç”¨ã•れã¾ã™ã€‚一方ã€
      <code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>, 
      <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>, 
      <code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code>
      コンテナã¯
      サーãƒã®èµ·å‹•時ã¨å†èµ·å‹•時ã«ã®ã¿è©•価ã•れã¾ã™ã€‚èµ·å‹•æ™‚ã«æ¡ä»¶ãŒçœŸã§ã‚れã°ã€
      コンテナ中ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã™ã¹ã¦ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«é©ç”¨ã•れã¾ã™ã€‚æ¡ä»¶ãŒ
      å½ã§ã‚れã°ã€ã‚³ãƒ³ãƒ†ãƒŠä¸­ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ç„¡è¦–ã•れã¾ã™ã€‚</p>
      
      <p><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code> ディレクティブã¯
      <code class="program"><a href="./programs/httpd.html">httpd</a></code> コマンドラインã§é©åˆ‡ãªãƒ‘ラメータãŒå®šç¾©ã•れãŸã¨ãã«ã®ã¿
      é©ç”¨ã•れるディレクティブを囲ã„ã¾ã™ã€‚例ãˆã°æ¬¡ã®è¨­å®šã§ã¯ã€ã‚µãƒ¼ãƒãŒ
      <code>httpd -DClosedForNow</code> を使ã£ã¦èµ·å‹•ã•れãŸã¨ãã ã‘ã™ã¹ã¦ã®
      リクエストを別ã®ã‚µã‚¤ãƒˆã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã—ã¾ã™:</p>
      
      <div class="example"><p><code>
      &lt;IfDefine ClosedForNow&gt;<br />
      Redirect / http://otherserver.example.com/<br />
      &lt;/IfDefine&gt;
      </code></p></div>
      
      <p><code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code> ã¯
      éžå¸¸ã«ä¼¼ã¦ã„ã¾ã™ãŒã€ä»£ã‚りã«ã‚µãƒ¼ãƒä¸Šã§ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒä½¿ç”¨å¯èƒ½ãªå ´åˆã«ã®ã¿
      é©ç”¨å¯èƒ½ãªãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を囲ã„ã¾ã™ã€‚モジュールã¯ã‚µãƒ¼ãƒã«
      é™çš„ã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹ã‹ã€å‹•çš„ã«çµ„ã¿è¾¼ã‚€ã‚ˆã†ã«ãªã£ã¦ã„ã¦ã€è¨­å®šãƒ•ァイル中ã§
      <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> ã®è¡ŒãŒã‚ˆã‚Šå‰ã®
      éƒ¨åˆ†ã«æ›¸ã‹ã‚Œã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ç‰¹å®šã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®
      存在ã«é–¢ã‚らãšè¨­å®šãƒ•ァイルãŒå‹•作ã™ã‚‹å¿…è¦ãŒã‚ã‚‹å ´åˆã«ã®ã¿ä½¿ã£ã¦ãã ã•ã„。
      常ã«å‹•作ã—ã¦æ¬²ã—ã„ディレクティブを囲むãŸã‚ã«ä½¿ã†ã¹ãã§ã¯ã‚りã¾ã›ã‚“。
      存在ã—ãªã„モジュールã«é–¢ã™ã‚‹æœ‰ç”¨ãªã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®ç™ºç”Ÿã‚’抑制ã—ã¦ã—ã¾ã„ã¾ã™ã®ã§ã€‚
      </p>
      
      <p>次ã®ä¾‹ã§ã¯ã€<code class="module"><a href="./mod/mod_mime_magic.html">mod_mime_magic</a></code> ãŒã‚ã‚‹ã¨ãã«ã®ã¿ <code class="directive"><a href="./mod/mod_mime_magic.html#mimemagicfiles">MimeMagicFiles</a></code> ディレクティブãŒ
      é©ç”¨ã•れã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
      &lt;IfModule mod_mime_magic.c&gt;<br />
      MimeMagicFile conf/magic<br />
      &lt;/IfModule&gt;
      </code></p></div>
      
      <p><code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code>
      ディレクティブã¯
      <code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code> ã‚„
      <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>ã¨ã€
      ã¨ã¦ã‚‚よãä¼¼ã¦ã„ã¾ã™ãŒã€ç¨¼åƒä¸­ã®ã‚µãƒ¼ãƒã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒç‰¹å®šã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®æ™‚ã«ã®ã¿
      é©ç”¨ã•れã¾ã™ã€‚様々ãªãƒãƒ¼ã‚¸ãƒ§ãƒ³ã® httpd を様々ãªè¨­å®šã§å‹•作ã•ã›ã‚‹ã“ã¨ã«ãªã‚‹å ´åˆã§ã€
      テストスイートや巨大ãªãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã§ã®ç”¨é€”を想定ã—ã¦ã€
      ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯è¨­è¨ˆã•れã¦ã„ã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
        &lt;IfVersion &gt;= 2.1&gt;<br />
        <span class="indent">
          # this happens only in versions greater or<br />
          # equal 2.1.0.<br />
        </span>
        &lt;/IfVersion&gt;
      </code></p></div>
      
      <p><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>, 
      <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>,
      <code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code> ディレクティブã¯
      テストã®å‰ã« "!" を付ã‘ã‚‹ã“ã¨ã§å¦å®šã®æ¡ä»¶ã‚’é©ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
      ã¾ãŸã€ã“れらã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã¯ã‚ˆã‚Šè¤‡é›‘ãªåˆ¶é™ã‚’課ã™ãŸã‚ã«å…¥ã‚Œå­ã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
      </p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="file-and-web" id="file-and-web">ファイルシステムã¨ã‚¦ã‚§ãƒ–空間</a></h2>
      
      <p>最もよã使ã‚れる設定ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã‚³ãƒ³ãƒ†ãƒŠã¯ãƒ•ァイルシステムやウェブ空間ã®
      特定ã®å ´æ‰€ã®è¨­å®šã‚’変更ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ã¾ãšã€ã“ã®äºŒã¤ã®é•ã„ã‚’ç†è§£ã™ã‚‹ã“ã¨ãŒ
      大切ã§ã™ã€‚ファイルシステムã¯ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ã‹ã‚‰è¦‹ãŸãƒ‡ã‚£ã‚¹ã‚¯ã®å†…容ã§ã™ã€‚
      ãŸã¨ãˆã°ã€ãƒ‡ãƒ•ォルトã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã§ã¯ Apache 㯠Unix ファイルシステムã§ã¯
      <code>/usr/local/apache2</code> ã«ã€Windows ファイルシステムã§ã¯
      <code>"c:/Program Files/Apache Group/Apache2"</code> ã«å­˜åœ¨ã—ã¾ã™ã€‚
      (Apache ã§ã¯ Windows ã§ã‚‚パスセパレータã¨ã—ã¦ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã‚’使ã†ã“ã¨ã«
      æ°—ã‚’ã¤ã‘ã¦ãã ã•ã„。) 対照的ã«ã€ã‚¦ã‚§ãƒ–空間ã¯ã‚ãªãŸã®ã‚µã‚¤ãƒˆã‚’
      ウェブサーãƒã‹ã‚‰é…ä¿¡ã•れるもã®ã¨ã—ã¦è¦‹ãŸã‚‚ã®ã§ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«è¦‹ãˆã‚‹ã‚‚ã®ã§ã™ã€‚
      デフォルト㮠Unix 上㮠Apache ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã§ã¯ã‚¦ã‚§ãƒ–空間ã®
      <code>/dir/</code> ã¨ã„ã†ãƒ‘スã¯ãƒ•ァイルシステムã®
      <code>/usr/local/apache2/htdocs/dir/</code> ã¨ã„ã†ãƒ‘スã«å¯¾å¿œã—ã¾ã™ã€‚
      ウェブページã¯ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‚„ä»–ã®å ´æ‰€ã‹ã‚‰å‹•çš„ã«ç”Ÿæˆã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã®ã§ã€
      ウェブ空間ã¯ãƒ•ァイルシステムã«ç›´æŽ¥ãƒžãƒƒãƒ—ã™ã‚‹å¿…è¦ã¯ã‚りã¾ã›ã‚“。</p>
      
      <h3><a name="filesystem" id="filesystem">ファイルシステムコンテナ</a></h3>
      
      <p><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> ディレクティブã¨
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> ディレクティブã€ãれã¨
      ãã‚Œã‚‰ã®æ­£è¦è¡¨ç¾ç‰ˆã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–をファイルシステムã®ä¸€éƒ¨åˆ†ã«å¯¾ã—ã¦é©ç”¨ã—ã¾ã™ã€‚
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> セクションã®
      中ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯æŒ‡å®šã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¨ãã®ã™ã¹ã¦ã®ã‚µãƒ–ディレクトリã«
      é©ç”¨ã•れã¾ã™ã€‚<a href="howto/htaccess.html">.htaccess ファイル</a>ã‚’
      使ã†ã“ã¨ã§ã‚‚åŒã˜åŠ¹æžœã‚’å¾—ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚例ãˆã°ã€æ¬¡ã®è¨­å®šã§ã¯
      <code>/var/web/dir1</code> ã¨ã™ã¹ã¦ã®ã‚µãƒ–ディレクトリã«å¯¾ã—ã¦
      ディレクトリインデックスを行ãªã„ã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
      &lt;Directory /var/web/dir1&gt;<br />
      Options +Indexes<br />
      &lt;/Directory&gt;
      </code></p></div>
      
      <p><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> セクションã®
      中ã«ã‚るディレクティブã¯ã©ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã‚ã‚‹ã‹ã«é–¢ã‚らãšã€æŒ‡å®šã•れãŸåå‰ã®
      ã™ã¹ã¦ã®ãƒ•ァイルã«é©ç”¨ã•れã¾ã™ã€‚ã§ã™ã‹ã‚‰ä¾‹ãˆã°ä»¥ä¸‹ã®è¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒ
      設定ファイルã®ä¸»ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã«æ›¸ã‹ã‚ŒãŸã¨ãã«ã¯ã€ã™ã¹ã¦ã®å ´æ‰€ã®
      <code>private.html</code> ã¨ã„ã†åå‰ã®ãƒ•ァイルã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’æ‹’å¦ã—ã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
      &lt;Files private.html&gt;<br />
      Order allow,deny<br />
      Deny from all<br />
      &lt;/Files&gt;
      </code></p></div>
      
      <p>ファイルシステムã®ç‰¹å®šã®å ´æ‰€ã«ã‚るファイルを指定ã™ã‚‹ãŸã‚ã«ã€
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> セクションã¨
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> セクションを
      組ã¿åˆã‚ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚例ãˆã°ã€æ¬¡ã®è¨­å®šã§ã¯
      <code>/var/web/dir1/private.html</code>, 
      <code>/var/web/dir1/subdir2/private.html</code>, 
      <code>/var/web/dir1/subdir3/private.html</code> ãªã©ã€
      <code>/var/web/dir1/</code> ディレクトリã®ä¸‹ã«ã‚ã‚‹ã™ã¹ã¦ã®
      <code>private.html</code> ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’æ‹’å¦ã—ã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
      &lt;Directory /var/web/dir1&gt;<br />
      &lt;Files private.html&gt;<br />
      Order allow,deny<br />
      Deny from all<br />
      &lt;/Files&gt;<br />
      &lt;/Directory&gt;
      </code></p></div>
      
      
      <h3><a name="webspace" id="webspace">ウェブ空間コンテナ</a></h3>
      
      <p>一方ã€<code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
      ディレクティブã¨ãã®<a class="glossarylink" href="./glossary.html#regex" title="用語集をå‚ç…§">æ­£è¦è¡¨ç¾</a>版ã¯
      ウェブ空間上ã®å†…容ã«å¯¾ã—ã¦è¨­å®šã‚’変更ã—ã¾ã™ã€‚
      ãŸã¨ãˆã°ã€æ¬¡ã®è¨­å®šã§ã¯ /private ã§å§‹ã¾ã‚‹ URL パスã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’制é™ã—ã¾ã™ã€‚
      具体的ã«ã¯ã€
      <code>http://yoursite.example.com/private</code>,
      <code>http://yoursite.example.com/private123</code>, 
      <code>http://yoursite.example.com/private/dir/file.html</code> 
      ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚„ã€
      ä»–ã®åŒæ§˜ã« <code>/private</code> 文字列ã§å§‹ã¾ã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«
      é©ç”¨ã•れã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
      &lt;Location /private&gt;<br />
      Order Allow,Deny<br />
      Deny from all<br />
      &lt;/Location&gt;
      </code></p></div>
      
      <p><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
      ディレクティブã¯ãƒ•ァイルシステムã¨é–¢ä¿‚ã‚ã‚‹å¿…è¦ãŒå…¨ãã‚りã¾ã›ã‚“。
      ãŸã¨ãˆã°æ¬¡ã®ä¾‹ã§ã¯ã€ã©ã®ã‚ˆã†ã«ã—ã¦ç‰¹å®šã® URL ã‚’
      <code class="module"><a href="./mod/mod_status.html">mod_status</a></code>ã§æä¾›ã•れã¦ã„ã‚‹ Apache 
      内部ãƒãƒ³ãƒ‰ãƒ©ã«ãƒžãƒƒãƒ—ã™ã‚‹ã‹ã‚’示ã—ã¦ã„ã¾ã™ã€‚ファイルシステムã«
      <code>server-status</code> ã¨ã„ã†ãƒ•ァイルãŒå­˜åœ¨ã™ã‚‹å¿…è¦ã¯ã‚りã¾ã›ã‚“。</p>
      
      <div class="example"><p><code>
      &lt;Location /server-status&gt;<br />
      SetHandler server-status<br />
      &lt;/Location&gt;
      </code></p></div>
      
      
      <h3><a name="wildcards" id="wildcards">ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã¨æ­£è¦è¡¨ç¾</a></h3>
      
      <p><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, 
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>, 
      <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> 
      ディレクティブã§ã¯ã€ C 標準ライブラリ㮠<code>fnmatch</code> ã®ã‚ˆã†ã«
      shell スタイルã®ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã‚­ãƒ£ãƒ©ã‚¯ã‚¿ãŒä½¿ç”¨ã§ãã¾ã™ã€‚
      "*" 文字ã¯ä»»æ„ã®æ–‡å­—列ã«ãƒžãƒƒãƒã—ã€"?" 文字ã¯ä»»æ„ã® 1 文字ã«ãƒžãƒƒãƒã—ã€
      "[<em>seq</em>]" 㯠<em>seq</em> ã®ä»»æ„ã®æ–‡å­—ã«ãƒžãƒƒãƒã—ã¾ã™ã€‚
      "/" 文字ã¯ã©ã®ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã§ã‚‚マッãƒã•れã¾ã›ã‚“。
      æ˜Žç¤ºçš„ã«æŒ‡å®šã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      
      <p>ã“れより柔軟ãªãƒžãƒƒãƒãƒ³ã‚°ãŒå¿…è¦ãªå ´åˆã¯ã€ã“れらã®ã‚³ãƒ³ãƒ†ãƒŠã«æ­£è¦è¡¨ç¾
      (regex) 版ã§ã‚ã‚‹
      <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>, 
      <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>, 
      <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code>
      ãŒã‚りã€ãƒžãƒƒãƒã‚’é¸æŠžã™ã‚‹ã®ã« perl 互æ›<a class="glossarylink" href="./glossary.html#regex" title="用語集をå‚ç…§">æ­£è¦è¡¨ç¾</a>を使用ã§ãã¾ã™ã€‚ã—ã‹ã—ã€æ¬¡ã®è¨­å®šã®ãƒžãƒ¼ã‚¸ã«ç›®ã‚’通ã—ã¦ã€
      regex セクションを使用ã™ã‚‹ã“ã¨ã§ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®é©ç”¨ãŒã©ã®ã‚ˆã†ã«
      変化ã™ã‚‹ã‹æŠŠæ¡ã—ã¦ãŠã„ã¦ãã ã•ã„。</p>
      
      <p>全ユーザディレクトリã®è¨­å®šã‚’変更ã™ã‚‹ã€éž regex
      ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã¯æ¬¡ã®ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
      &lt;Directory /home/*/public_html&gt;<br />
      Options Indexes<br />
      &lt;/Directory&gt;
      </code></p></div>
      
      <p>regex セクションを使用ã™ã‚‹ã“ã¨ã§ã€ç”»åƒãƒ•ァイルã®å¤šãã®ã‚¿ã‚¤ãƒ—ã«å¯¾ã™ã‚‹
      ã‚¢ã‚¯ã‚»ã‚¹ã‚’ä¸€åº¦ã«æ‹’å¦ã§ãã¾ã™ã€‚</p>
      <div class="example"><p><code>
      &lt;FilesMatch \.(?i:gif|jpe?g|png)$&gt;<br />
      Order allow,deny<br />
      Deny from all<br />
      &lt;/FilesMatch&gt;
      </code></p></div>
      
      
      
      <h3><a name="whichwhen" id="whichwhen">ã„ã¤ä½•を使ã†ã‹</a></h3>
      
      <p>ファイルシステムコンテナã¨ã‚¦ã‚§ãƒ–空間コンテナを使ã„分ã‘ã‚‹ã®ã¯ã€
      実際ã«ã¯éžå¸¸ã«ç°¡å˜ã§ã™ã€‚ファイルシステムã«ä¾å­˜ã™ã‚‹
      オブジェクトã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’é©å¿œã™ã‚‹å ´åˆã¯ã€å¿…ãš
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> ã‹
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>
      を使用ã—ã¾ã™ã€‚ファイルシステムã«ä¾å­˜ã—ãªã„オブジェクト
      (データベースã‹ã‚‰ç”Ÿæˆã•れるウェブページãªã©) 
      ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’é©ç”¨ã™ã‚‹éš›ã«ã¯ã€
      <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
      を使用ã—ã¾ã™ã€‚</p>
      
      <p>ファイルシステム上ã®ã‚ªãƒ–ジェクトã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’制é™ã™ã‚‹ãŸã‚ã«ã€
      <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
      を決ã—ã¦ä½¿ç”¨ãªã„よã†ã«ã—ã¾ã—ょã†ã€‚
      åŒä¸€ã®ãƒ•ァイルシステムä½ç½®ã«ãƒžãƒƒãƒ—ã—ã¦ã„ã‚‹ã€ã‚¦ã‚§ãƒ–空間ä½ç½® (URL)
      ãŒå¤šæ•°ã‚ã£ã¦ã€è¨­å®šã—ãŸåˆ¶é™ã‚’迂回ã•れã¦ã—ã¾ã†ã‹ã‚‚ã—れãªã„ã‹ã‚‰ã§ã™ã€‚
      例ãˆã°æ¬¡ã®è¨­å®šã‚’考ãˆã¦ã¿ã¾ã—ょã†ã€‚</p>
      
      <div class="example"><p><code>
      &lt;Location /dir/&gt;<br />
      Order allow,deny<br />
      Deny from all<br />
      &lt;/Location&gt;
      </code></p></div>
      
      <p><code>http://yoursite.example.com/dir/</code>
      ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§ã¯ä¸Šæ‰‹ã動作ã—ã¾ã™ã€‚ã—ã‹ã—å¤§æ–‡å­—å°æ–‡å­—を区別ã—ãªã„
      ファイルシステムを使ã£ã¦ã„ãŸã‚‰ã©ã†ãªã‚‹ã§ã—ょã†?
      <code>http://yoursite.example.com/DIR/</code> 
      ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§ç°¡å˜ã«ã‚¢ã‚¯ã‚»ã‚¹åˆ¶é™ã‚’迂回ã•れã¦ã—ã¾ã„ã¾ã™ã€‚ã“れã«å¯¾ã—ã¦
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
      ディレクティブを使用ã™ã‚‹ã¨ã€ã©ã®ã‚ˆã†ã«å‘¼ã³å‡ºã•れãŸã‹ã«é–¢ã‚らãš
      ãã®å ´æ‰€ã‹ã‚‰æä¾›ã•れる内容ã«é©ç”¨ã•れã¾ã™ã€‚
      (例外ã¯ãƒ•ァイルシステムã®ãƒªãƒ³ã‚¯ã§ã™ã€‚シンボリックリンクを使ã£ã¦ã€
      åŒä¸€ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’複数ã®ãƒ•ァイルシステムã«è¨­ç½®ã§ãã¾ã™ã€‚
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
      ディレクティブã¯ãƒ‘スåをリセットã™ã‚‹ã“ã¨ãªãシンボリックリンクを
      辿りã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€é«˜åº¦ãªã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ãŒè¦æ±‚ã•れる場åˆã¯ã€
      é©åˆ‡ã« <code class="directive"><a href="./mod/core.html#options">Options</a></code> 
      ディレクティブを使用ã—ã¦ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯ã‚’無効ã«ã™ã‚‹ã¹ãã§ã™ã€‚)</p>
      
      <p>å¤§æ–‡å­—å°æ–‡å­—を区別ã™ã‚‹ãƒ•ァイルシステムを使用ã—ã¦ã„ã‚‹ã‹ã‚‰ä¸Šè¨˜ã®ã“ã¨ã¯
      無関係ã ã¨æ€ã‚れるã‹ã‚‚ã—れã¾ã›ã‚“ãŒã€
      åŒä¸€ã®ãƒ•ァイルシステムä½ç½®ã«è¤‡æ•°ã®ã‚¦ã‚§ãƒ–空間ä½ç½®ã‚’マップã™ã‚‹æ–¹æ³•ã¯ã€
      ä»–ã«ã„ãらã§ã‚‚ã‚ã‚‹ã¨ã„ã†ã“ã¨ã‚’覚ãˆã¦ã„ã¦ãã ã•ã„。
      ã§ã™ã‹ã‚‰ã§ãã‚‹é™ã‚Šãƒ•ァイルシステムコンテナを使用ã—ã¦ãã ã•ã„。
      ã—ã‹ã—ãªãŒã‚‰ä¸€ã¤ã ã‘例外ãŒã‚りã¾ã™ã€‚
      <code>&lt;Location /&gt;</code> セクションã¯ã©ã‚“㪠URL 
      ã«ã‚‚é–¢ã‚らãšé©ç”¨ã•れるã®ã§ã€å®Œå…¨ã«å®‰å…¨ã§ã™ã€‚</p>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="virtualhost" id="virtualhost">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></h2>
      
      <p><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
      コンテナã¯ç‰¹å®šã®ãƒ›ã‚¹ãƒˆã«é©ç”¨ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’æ ¼ç´ã—ã¾ã™ã€‚
      一å°ã®ãƒžã‚·ãƒ³ã§è¤‡æ•°ã®ãƒ›ã‚¹ãƒˆã‚’ç•°ãªã‚‹è¨­å®šã§æä¾›ã—ãŸã„ã¨ãã«æœ‰ç”¨ã§ã™ã€‚
      詳細ã«é–¢ã—ã¦ã¯<a href="vhosts/">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆ</a>ã‚’
      ã”覧下ã•ã„。</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="proxy" id="proxy">プロクシ</a></h2>
      
      <p><code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>
      㨠<code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code>
      コンテナã¯ã€ç‰¹å®šã® URL ã«ãƒžãƒƒãƒã™ã‚‹ <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>
      プロクシサーãƒã‚’経由ã—ã¦ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸã‚µã‚¤ãƒˆã«å¯¾ã—ã¦ã®ã¿é©ç”¨ã•れる
      設定ディレクティブを格ç´ã—ã¾ã™ã€‚例ãˆã°æ¬¡ã®è¨­å®šã¯ã€<code>cnn.com</code> 
      ウェブサイトã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ãŸã‚ã«ç”¨ã„られるプロクシサーãƒã‚’
      制é™ã—ã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
      &lt;Proxy http://cnn.com/*&gt;<br />
      Order allow,deny<br />
      Deny from all<br />
      &lt;/Proxy&gt;
      </code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="whatwhere" id="whatwhere">ã©ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒä½¿ãˆã‚‹ã®?</a></h2>
      
      <p>ã©ã®ã‚¿ã‚¤ãƒ—ã®è¨­å®šã‚»ã‚¯ã‚·ãƒ§ãƒ³ã§ã©ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒä½¿ç”¨ã§ãã‚‹ã‹ã¯ã€
      ディレクティブ㮠<a href="mod/directive-dict.html#Context">Context</a>
      を見ã¦ãã ã•ã„。
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
      ã§ä½¿ç”¨å¯èƒ½ãªã‚‚ã®ã¯å…¨ã¦ã€åŒæ§˜ã«
      <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code>,
      <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>,
      <code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code>
      セクションã§ä½¿ç”¨å¯èƒ½ã§ã™ã€‚ã—ã‹ã—ãªãŒã‚‰å¹¾ã¤ã‹ä¾‹å¤–も存在ã—ã¾ã™ã€‚</p>
      
      <ul>
      <li><code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> ディレクティブã¯
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
      セクションã§ã®ã¿ä½¿ç”¨å¯èƒ½ã§ã™ã€‚</li>
      
      <li><code>FollowSymLinks</code> 㨠<code>SymLinksIfOwnerMatch</code> ã®
      <code class="directive"><a href="./mod/core.html#options">Options</a></code> ã¯ã€
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
      セクション㋠<code>.htaccess</code> ファイルã§ã®ã¿ä½¿ç”¨å¯èƒ½ã§ã™ã€‚</li>
      
      <li><code class="directive"><a href="./mod/core.html#options">Options</a></code> ディレクティブã¯ã€
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>
      㨠<code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>
      セクションã§ã¯ä½¿ç”¨ã§ãã¾ã›ã‚“。</li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mergin" id="mergin">セクションã®ãƒžãƒ¼ã‚¸æ–¹æ³•</a></h2>
      
          <p>マージã®é †ç•ªã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™:</p>
      
          <ol>
            <li><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> (æ­£è¦è¡¨ç¾ç„¡ã—) ã¨
            <code>.htaccess</code> ã‚’åŒæ™‚ã« (<code>.htaccess</code> ãŒè¨±å¯ã•れã¦ã„れã°ã€ãれãŒ
            <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> を上書ãã—ã¾ã™)
            </li>
      
            <li><code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>
            (㨠<code>&lt;Directory ~&gt;</code></li>
      
            <li><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> ã¨
            <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code> ã‚’åŒæ™‚ã«</li>
      
            <li><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> ã¨
            <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code> ã‚’åŒæ™‚ã«</li>
          </ol>
      
          <p><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
          以外ã¯ã€ãれãžã‚Œã®ã‚°ãƒ«ãƒ¼ãƒ—ã¯è¨­å®šãƒ•ァイルã«ç¾ã‚ŒãŸé †ç•ªã«å‡¦ç†ã•れã¾ã™ã€‚
          <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> (上ã®ã‚°ãƒ«ãƒ¼ãƒ— 1)
          ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãŒçŸ­ã„ã‚‚ã®ã‹ã‚‰é•·ã„ã‚‚ã®ã¸ã¨å‡¦ç†ã•れã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€
          例ãˆã° <code>&lt;Directory /var/web/dir1&gt;</code> ã¯
          <code>&lt;Directory /var/web/dir/subdir&gt;</code> ã®å‰ã«å‡¦ç†ã•れã¾ã™ã€‚複数ã®
          <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> セクションãŒ
          åŒã˜ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«
          é©ç”¨ã•れる場åˆã¯ã€è¨­å®šãƒ•ァイル中ã®é †ç•ªã«å¾“ã£ã¦å‡¦ç†ã•れã¾ã™ã€‚
          <code class="directive"><a href="./mod/core.html#include">Include</a></code>
          ã«ã‚ˆã£ã¦æŒ¿å…¥ã•れãŸè¨­å®šã¯ 挿入ã—ã¦ã„るファイルã®
          <code class="directive"><a href="./mod/core.html#include">Include</a></code>
          ディレクティブã®ä½ç½®ã«ã‚ã£ãŸã‹ã®ã‚ˆã†ã«æ‰±ã‚れã¾ã™ã€‚</p>
      
          <p><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> セクション中ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã¯
          ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®å®šç¾©ã®å¤–å´ã®å¯¾å¿œã™ã‚‹ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã®
          <em>後</em>ã«é©ç”¨ã•れã¾ã™ã€‚ã“れã«ã‚ˆã‚Šãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãŒ
          メインã®ã‚µãƒ¼ãƒè¨­å®šã‚’上書ãã§ãるよã†ãªã‚Šã¾ã™ã€‚</p>
      
          <p><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> ã§ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒå‡¦ç†ã•れる場åˆã¯ã€
          処ç†é †ç•ªã®ã†ã¡ã€<code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> コンテナã®éƒ¨åˆ†ãŒ
          <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>
          コンテナã«å–ã£ã¦ä»£ã‚られã¾ã™ã€‚</p>
      
          <p>後ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒå‰ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã®ã‚‚ã®ã‚’上書ãã—ã¾ã™ã€‚</p>
      
      
      <div class="note"><h3>技術メモ</h3>
            実際ã«ã¯ã€åå‰ã‚’変æ›ã™ã‚‹æ®µéšŽ (URL
            をファイルåã«ãƒžãƒƒãƒ—ã™ã‚‹ãŸã‚ã« <code>Alias</code> ã‚„
            <code>DocumentRoot</code> ãŒä½¿ç”¨ã•れるã¨ã“ã‚) ã®ç›´å‰ã«
            <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>/<code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code>
            ãŒè¡Œãªã‚れã¾ã™ã€‚
            ã“れらをé©ç”¨ã—ãŸçµæžœã¯å¤‰æ›ãŒçµ‚ã‚ã£ãŸå¾Œã«å®Œå…¨ã«æ¨ã¦ã‚‰ã‚Œã¾ã™ã€‚
      </div>
      <h3><a name="merge-examples" id="merge-examples">例</a></h3>
      
      <p>次ã¯ãƒžãƒ¼ã‚¸ã®é †ç•ªã‚’示ã™ãŸã‚ã®æ£æ„çš„ãªä¾‹ã«ãªã£ã¦ã„ã¾ã™ã€‚
      リクエスト全ã¦ã«é©ç”¨ã•れるã¨ã—ã¦ã€æœ¬ä¾‹ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯
      A &gt; B &gt; C &gt; D &gt; E ã®é †ç•ªã«é©ç”¨ã•れã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
      &lt;Location /&gt;<br />
      E<br />
      &lt;/Location&gt;<br />
      <br />
      &lt;Files f.html&gt;<br />
      D<br />
      &lt;/Files&gt;<br />
      <br />
      &lt;VirtualHost *&gt;<br />
      &lt;Directory /a/b&gt;<br />
      B<br />
      &lt;/Directory&gt;<br />
      &lt;/VirtualHost&gt;<br />
      <br />
      &lt;DirectoryMatch "^.*b$"&gt;<br />
      C<br />
      &lt;/DirectoryMatch&gt;<br />
      <br />
      &lt;Directory /a/b&gt;<br />
      A<br />
      &lt;/Directory&gt;<br />
      <br />
      </code></p></div>
      
      <p>ã‚‚ã£ã¨å…·ä½“çš„ãªã€æ¬¡ã®ä¾‹ã‚’考ãˆã¦ã¿ã¾ã—ょã†ã€‚
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> 
      セクションã«è¨­ç½®ã•れãŸã‚¢ã‚¯ã‚»ã‚¹åˆ¶é™ã«é–¢ã‚らãšã€
      <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
      ã‚»ã‚¯ã‚·ãƒ§ãƒ³ãŒæœ€å¾Œã«è©•価ã•れã¦ã€ã‚µãƒ¼ãƒã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã¯åˆ¶é™ã•れã¾ã›ã‚“。
      è¨€ã„æ›ãˆã‚Œã°ã€ãƒžãƒ¼ã‚¸ã®é †ç•ªã¯é‡è¦ã§ã€æ³¨æ„ã—ã¦ä½¿ç”¨ã—ã¦ãã ã•ã„!</p>
      
      <div class="example"><p><code>
      &lt;Location /&gt;<br />
      Order deny,allow<br />
      Allow from all<br />
      &lt;/Location&gt;<br />
      <br />
      # Woops!  This &lt;Directory&gt; section will have no effect<br />
      &lt;Directory /&gt;<br />
      Order allow,deny<br />
      Allow from all<br />
      Deny from badguy.example.com<br />
      &lt;/Directory&gt;
      </code></p></div>
      
      
      
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/sections.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/sections.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sections.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sections.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sections.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/sections.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/mpm.html.fr.utf8�����������������������������������������������������������0000644�0000000�0000050�00000034600�13412755316�016425� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Modules multi-processus (MPMs) - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Modules multi-processus (MPMs)</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./de/mpm.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/mpm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/mpm.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/mpm.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/mpm.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/mpm.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/mpm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/mpm.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
      <p>Ce document décrit ce qu'est un Module Multi-Processus, ainsi
      que la manière dont ces modules sont utilisés par le serveur HTTP Apache.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#introduction">Introduction</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#defaults">MPM par défaut</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#static">Compiler un module MPM en tant que module
      statique</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#dynamic">Compiler un module MPM en tant que module
      DSO (Dynamic Shared Object)</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">Introduction</a></h2>
      
          <p>La conception du serveur HTTP Apache en fait un serveur web puissant et
          flexible pouvant fonctionner sur une très grande variété de
          plateformes et toute une gamme d'environnements différents. Plateformes
          différentes et environnements différents signifient souvent fonctionnalités
          différentes, ou utilisation de différentes méthodes pour
          implémenter la même fonctionnalité le plus efficacement possible.
          Apache httpd s'est toujours accomodé d'une grande variété d'environnements
          grâce à sa conception modulaire. Cette conception autorise le webmaster
          à choisir quelles fonctionnalités seront incluses
          dans le serveur en sélectionnant les modules à charger soit à la
          compilation, soit à l'exécution.</p>
      
          <p>Le serveur HTTP Apache 2.0 a étendu cette conception modulaire aux
          fonctions les plus
          élémentaires d'un serveur web. Le serveur est fourni avec une variété de
          Modules Multi-Processus (MPMs) qui
          sont responsables de l'association aux ports réseau de la machine,
          acceptent les requêtes, et se chargent de répartir ces dernières
          entre les différents processus enfants.</p>
      
          <p>L'extension de la conception modulaire à ce niveau du serveur
          comporte deux avantages importants :</p>
      
          <ul>
            <li>Apache httpd peut supporter plus proprement et efficacement une grande
            variété de systèmes d'exploitation. En particulier, la version Windows
            du serveur est maintenant beaucoup plus efficace, depuis que
            <code class="module"><a href="./mod/mpm_winnt.html">mpm_winnt</a></code> peut utiliser les fonctionnalités réseau
            natives à la place de la couche POSIX utilisée par
            Apache httpd 1.3. Cet avantage s'étend aussi aux systèmes d'exploitation
            qui implémentent des MPMs spécialisés.</li>
      
            <li>le serveur est plus à même de répondre aux besoins d'un site
            particulier. Par exemple, les sites qui sont très sollicités peuvent
            utiliser un MPM threadé comme
            <code class="module"><a href="./mod/worker.html">worker</a></code> ou <code class="module"><a href="./mod/event.html">event</a></code>, tandis que les sites
            qui privilégient la stabilité ou la compatibilité avec des logiciels
            plus anciens peuvent utiliser un module comme
            <code class="module"><a href="./mod/prefork.html">prefork</a></code>.</li>
          </ul>
      
          <p>Du point de vue de l'utilisateur, les MPMs ne sont pas différents des
          autres modules Apache httpd. La principale différence réside dans le fait qu'un
          et un seul MPM à la fois doit être chargé
          lorsque le serveur s'exécute. La liste des
          MPMs disponibles est fournie dans <a href="mod/">l'index des
          modules</a>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="defaults" id="defaults">MPM par défaut</a></h2>
      
      <p>La table suivante fournit la liste des MPMs par défaut pour divers
      systèmes d'exploitation.  Il s'agit du MPM qui sera utilisé si
      vous n'en spécifiez pas un autre à la compilation.</p>
      
      <table class="bordered"><tr><td>Netware</td><td><code class="module"><a href="./mod/mpm_netware.html">mpm_netware</a></code></td></tr>
      <tr class="odd"><td>OS/2</td><td><code class="module"><a href="./mod/mpmt_os2.html">mpmt_os2</a></code></td></tr>
      <tr><td>Unix</td><td><code class="module"><a href="./mod/prefork.html">prefork</a></code>, <code class="module"><a href="./mod/worker.html">worker</a></code>,
      ou <code class="module"><a href="./mod/event.html">event</a></code>, selon les possibilités de la plate-forme</td></tr>
      <tr class="odd"><td>Windows</td><td><code class="module"><a href="./mod/mpm_winnt.html">mpm_winnt</a></code></td></tr>
      </table>
      
      <div class="note"><p>Ici, 'Unix' sous-entend les systèmes d'exploitation de type
      Unix, comme Linux, BSD, Solaris, Mac OS X, etc...</p></div>
      
      <p>Dans le cas des systèmes d'exploitation de type Unix, le choix du MPM
      à installer est orienté par deux questions :</p>
      <p>1. Est-ce que le système supporte les threads ?</p>
      <p>2. Est-ce que le système supporte le polling thread-safe (et en
      particulier les fonctions kqueue et epoll) ?</p>
      
      <p>Si la réponse aux deux questions est 'oui', le MPM par défaut sera
      <code class="module"><a href="./mod/event.html">event</a></code>.</p>
      
      <p>Si la réponse à la première question est 'oui', et la réponse à la
      deuxième 'non', le MPM par défaut sera <code class="module"><a href="./mod/worker.html">worker</a></code>.</p>
      
      <p>Si la réponse aux deux questions est 'non', le MPM par défaut sera
      <code class="module"><a href="./mod/prefork.html">prefork</a></code>.</p>
      
      <p>En pratique, cela signifie que le MPM par défaut sera presque
      toujours <code class="module"><a href="./mod/event.html">event</a></code> car tous les systèmes d'exploitation
      modernes satisfont aux deux conditions.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="static" id="static">Compiler un module MPM en tant que module
      statique</a></h2>
      
          <p>Les modules MPM peuvent être compilés en tant que modules
      statiques sur toutes les plates-formes. A la compilation d'Apache, un
      seul module MPM doit être choisi pour être compilé et lié avec le
      serveur. La recompilation du serveur sera donc nécessaire si vous
      souhaitez changer de module MPM.</p>
      
          <p>Pour choisir un module MPM autre que le MPM par défaut,
          utiliser l'argument
            <code>--with-mpm=<em>NOM</em></code> du script
            <code class="program"><a href="./programs/configure.html">configure</a></code>. <em>NOM</em> est le nom
            du MPM désiré.</p>
      
          <p>Une fois le serveur compilé, il est possible de savoir quel MPM
          a été choisi à l'aide de la commande <code>./httpd -l</code>.
          Cette commande fournit la liste de tous les modules compilés
          avec le serveur, y compris le MPM.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="dynamic" id="dynamic">Compiler un module MPM en tant que module
      DSO (Dynamic Shared Object)</a></h2>
      
          <p>Sous Unix et les plates-formes similaires, les modules MPM
          peuvent être compilés en tant que modules DSO et chargés
          dynamiquement dans le serveur comme tout module DSO. Compiler les
          modules MPM en tant que modules DSO permet de changer de MPM en
          modifiant la directive <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> concernée, sans avoir à
          recompiler le serveur.</p>
      
          <pre class="prettyprint lang-config">LoadModule mpm_prefork_module modules/mod_mpm_prefork.so</pre>
      
      
          <p>Toute tentative de charger plusieurs modules MPM via la directive
          <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> empêchera le
          serveur de démarrer et affichera l'erreur suivante :</p>
      
          <div class="example"><p><code>AH00534: httpd: Configuration error: More than one MPM
          loaded.</code></p></div>
      
          <p>Cette fonctionnalité est activée via l'option
          <code>--enable-mpms-shared</code> du script
          <code class="program"><a href="./programs/configure.html">configure</a></code>. Si on ajoute l'argument
          <code><em>all</em></code>, tous les modules MPM disponibles sur la
          plate-forme considérée seront installés. Cet argument peut aussi
          contenir une liste de modules MPM à installer.</p>
      
          <p>Le module MPM par défaut, sélectionné automatiquement ou spécifié
          via l'option <code>--with-mpm</code> du script
          <code class="program"><a href="./programs/configure.html">configure</a></code>, sera chargé via une directive
          <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> du fichier de
          configuration du serveur généré. Pour choisir un autre module MPM,
          vous devrez donc modifier cette directive</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./de/mpm.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/mpm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/mpm.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/mpm.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/mpm.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/mpm.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/mpm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/mpm.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/mpm.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/sitemap.html.tr.utf8�������������������������������������������������������0000644�0000000�0000050�00000065376�13520523022�017315� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Site Haritası - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page">
      <div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div>
      <div id="page-content"><div id="preamble"><h1>Site Haritası</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./de/sitemap.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/sitemap.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/sitemap.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/sitemap.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sitemap.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sitemap.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sitemap.html" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/sitemap.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
      <p>Bu sayfada <a href="./">Apache HTTP Sunucusu Sürüm 2.4
      Belgeleri</a>nin tamamı listelenmiştir.</p>
      </div>
      <div id="quickview"><ul id="toc">
      <li><img alt="" src="./images/down.gif" /> <a href="#release">Sürümlerin Dağıtım Bilgileri</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#using">Apache HTTP Sunucusunun Kullanımı</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#vhosts">Apache Sanal Konak (VirtualHost) Belgeleri</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#rewrite">URL’lerin Yeniden Yazılması</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#ssl">Apache SSL/TLS Åžifrelemesi</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#howto">Kılavuzlar, Öğreticiler ve Nasıllar</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#platform">Platformlara Özgü Bilgiler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programs">Apache HTTP Sunucusu  ve Desteklenen Programlar</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#misc">Çeşitli Belgeler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#modules">Apache Modülleri</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#developer">GeliÅŸtirici Belgeleri</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#index">Terimler ve Dizin</a></li>
      </ul>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="release" id="release">Sürümlerin Dağıtım Bilgileri</a></h2>
      <ul><li><a href="upgrading.html">2.4’e 2.2’den yükseltme</a></li>
      <li><a href="new_features_2_4.html">2.3/2.4’teki yeni özellikler</a></li>
      <li><a href="new_features_2_2.html">Apache 2.1/2.2’deki yeni özellikler</a></li>
      <li><a href="new_features_2_0.html">Apache 2.0’daki yeni özellikler</a></li>
      <li><a href="license.html">Apache Lisansı</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="using" id="using">Apache HTTP Sunucusunun Kullanımı</a></h2>
      <ul><li><a href="install.html">Derleme ve Kurulum</a></li>
      <li><a href="invoking.html">Sunucuyu BaÅŸlatma</a></li>
      <li><a href="stopping.html">Sunucuyu Durdurma ve Yeniden BaÅŸlatma</a></li>
      <li><a href="configuring.html">Yapılandırma Dosyaları</a></li>
      <li><a href="sections.html">Directory, Location ve Files Bölümleri Nasıl Çalışır</a></li>
      <li><a href="caching.html">İçerik Bellekleme</a></li>
      <li><a href="server-wide.html">Sunucu Genelinde Yapılandırma</a></li>
      <li><a href="logs.html">Günlük Dosyaları</a></li>
      <li><a href="urlmapping.html">URL’lerin Dosya Sistemi ile Eşlenmesi</a></li>
      <li><a href="dso.html">Devingen Paylaşımlı Nesne (DSO) Desteği</a></li>
      <li><a href="content-negotiation.html">İçerik Dili Uzlaşımı</a></li>
      <li><a href="custom-error.html">Özel Hata Yanıtları</a></li>
      <li><a href="bind.html">Sunucunun Kullandığı Adreslerin ve Portların Ayarlanması</a></li>
      <li><a href="mpm.html">Çok Süreçlilik Modülleri (MPM’ler)</a></li>
      <li><a href="env.html">Ortam DeÄŸiÅŸkenleri</a></li>
      <li><a href="expr.html">Apache'de İfadelerin Çözümlenmesi</a></li>
      <li><a href="handler.html">Eylemci Kullanımı</a></li>
      <li><a href="filter.html">Süzgeçler</a></li>
      <li><a href="socache.html">Paylaşımlı Nesne Arabelleği Desteği</a></li>
      <li><a href="suexec.html">CGI için Suexec Desteği</a></li>
      <li><a href="dns-caveats.html">DNS ile ilgili Konular ve Apache</a></li>
      <li><a href="http://wiki.apache.org/httpd/FAQ">Sıkça Sorulan Sorular</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="vhosts" id="vhosts">Apache Sanal Konak (VirtualHost) Belgeleri</a></h2>
      <ul><li class="separate"><a href="vhosts/">Genel Bakış</a></li>
      <li><a href="vhosts/name-based.html">İsme göre Sanal Konak Desteği</a></li>
      <li><a href="vhosts/ip-based.html">IP Adresine göre Sanal Konak Desteği</a></li>
      <li><a href="vhosts/mass.html">Sanal Konakların Devingen olarak Yapılandırılması</a></li>
      <li><a href="vhosts/examples.html">VirtualHost Örnekleri</a></li>
      <li><a href="vhosts/details.html">Sanal Konak Eşleştirmesinin Derinliğine İncelenmesi</a></li>
      <li><a href="vhosts/fd-limits.html">Dosya Tanıtıcı Sınırlamaları</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="rewrite" id="rewrite">URL’lerin Yeniden Yazılması</a></h2>
      <ul><li class="separate"><a href="rewrite/">Genel Bakış</a></li>
      <li><a href="mod/mod_rewrite.html">mod_rewrite BaÅŸvuru Belgesi</a></li>
      <li><a href="rewrite/intro.html">mod_rewrite ve düzenli ifadelere giriş</a></li>
      <li><a href="rewrite/remapping.html">URL'lerin yeniden eÅŸlenmesi ve
      yönlendirilmesi içinmod_rewrite kullanımı</a></li>
      <li><a href="rewrite/access.html">Erişim denetimi için mod_rewrite
      kullanımı</a></li>
      <li><a href="rewrite/vhosts.html">mod_rewrite ile devingen sanal konaklar</a></li>
      <li><a href="rewrite/proxy.html">mod_rewrite ile devingen vekil kullanımı</a></li>
      <li><a href="rewrite/rewritemap.html">RewriteMap kullanımı</a></li>
      <li><a href="rewrite/advanced.html">İleri seviye teknikler</a></li>
      <li><a href="rewrite/avoid.html">mod_rewrite ne zaman kullanılMAZ</a></li>
      <li><a href="rewrite/flags.html">RewriteRule Seçenekleri</a></li>
      <li><a href="rewrite/tech.html">Teknik Ayrıntılar</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="ssl" id="ssl">Apache SSL/TLS Åžifrelemesi</a></h2>
      <ul><li class="separate"><a href="ssl/">Genel Bakış</a></li>
      <li><a href="ssl/ssl_intro.html">SSL/TLS Åžifrelemesi: GiriÅŸ</a></li>
      <li><a href="ssl/ssl_compat.html">SSL/TLS Åžifrelemesi: Uyumluluk</a></li>
      <li><a href="ssl/ssl_howto.html">SSL/TLS Şifrelemesi: Nasıl</a></li>
      <li><a href="ssl/ssl_faq.html">SSL/TLS Åžifrelemesi: SSS</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="howto" id="howto">Kılavuzlar, Öğreticiler ve Nasıllar</a></h2>
      <ul><li class="separate"><a href="howto/">Genel Bakış</a></li>
      <li><a href="howto/auth.html">Kimlik DoÄŸrulama ve Yetkilendirme</a></li>
      <li><a href="howto/access.html">EriÅŸim Denetimi</a></li>
      <li><a href="howto/cgi.html">CGI ile Devingen İçerik</a></li>
      <li><a href="howto/ssi.html">Sunucu Taraflı İçerik Yerleştirme (SSI)</a></li>
      <li><a href="howto/htaccess.html">.htaccess Dosyaları</a></li>
      <li><a href="howto/public_html.html">Kullanıcı Dizinleri (public_html)</a></li>
      <li><a href="howto/reverse_proxy.html">Ters Vekil Yapılandırma Rehberi</a></li>
      <li><a href="howto/http2.html">HTTP/2 rehberi</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="platform" id="platform">Platformlara Özgü Bilgiler</a></h2>
      <ul><li class="separate"><a href="platform/">Genel Bakış</a></li>
      <li><a href="platform/windows.html">Microsoft
      Windows ile Apache Kullanımı</a></li>
      <li><a href="platform/win_compiling.html">Microsoft Windows için Apache Derleme</a></li>
      <li><a href="platform/rpm.html">RPM Temelli Sistemlerde Apache Kullanımı</a></li>
      <li><a href="platform/netware.html">Novell NetWare ile Apache Kullanımı</a></li>
      <li><a href="platform/perf-hp.html">HPUX üzerinde Yüksek Başarımlı HTTP Sunucusu Çalıştırma</a></li>
      <li><a href="platform/ebcdic.html">Apache EBCDIC Portu</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="programs" id="programs">Apache HTTP Sunucusu  ve Desteklenen Programlar</a></h2>
      <ul><li class="separate"><a href="programs/">Genel Bakış</a></li>
      <li><a href="programs/httpd.html">Kılavuz Sayfası: httpd</a></li>
      <li><a href="programs/ab.html">Kılavuz Sayfası: ab</a></li>
      <li><a href="programs/apachectl.html">Kılavuz Sayfası: apachectl</a></li>
      <li><a href="programs/apxs.html">Kılavuz Sayfası: apxs</a></li>
      <li><a href="programs/configure.html">Kılavuz Sayfası: configure</a></li>
      <li><a href="programs/dbmmanage.html">Kılavuz Sayfası: dbmmanage</a></li>
      <li><a href="programs/fcgistarter.html">Kılavuz Sayfası: fcgistarter</a></li>
      <li><a href="programs/htcacheclean.html">Kılavuz Sayfası: htcacheclean</a></li>
      <li><a href="programs/htdbm.html">Kılavuz Sayfası: htdbm</a></li>
      <li><a href="programs/htdigest.html">Kılavuz Sayfası: htdigest</a></li>
      <li><a href="programs/htpasswd.html">Kılavuz Sayfası: htpasswd</a></li>
      <li><a href="programs/httxt2dbm.html">Kılavuz Sayfası: httxt2dbm</a></li>
      <li><a href="programs/logresolve.html">Kılavuz Sayfası: logresolve</a></li>
      <li><a href="programs/log_server_status.html">Kılavuz Sayfası: log_server_status</a></li>
      <li><a href="programs/rotatelogs.html">Kılavuz Sayfası: rotatelogs</a></li>
      <li><a href="programs/split-logfile.html">Kılavuz Sayfası: split-logfile</a></li>
      <li><a href="programs/suexec.html">Kılavuz Sayfası: suexec</a></li>
      <li><a href="programs/other.html">DiÄŸer Programlar</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="misc" id="misc">Çeşitli Belgeler</a></h2>
      <ul><li class="separate"><a href="misc/">Genel Bakış</a></li>
      <li><a href="misc/perf-tuning.html">Başarım Arttırma İpuçları</a></li>
      <li><a href="misc/security_tips.html">Güvenlik İpuçları</a></li>
      <li><a href="misc/relevant_standards.html">İlgili Standartlar</a></li>
      <li><a href="misc/password_encryptions.html">Parola Şifreleme Çeşitleri</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="modules" id="modules">Apache Modülleri</a></h2>
      <ul><li><a href="mod/module-dict.html">Apache modüllerini tanımlamakta kullanılan terimlerin açıklamaları</a></li>
      <li><a href="mod/directive-dict.html">Apache yönergelerini tanımlamakta kullanılan terimlerin açıklamaları</a></li>
      </ul><ul><li><a href="mod/core.html">Apache Temel Özellikleri</a></li>
      <li><a href="mod/mpm_common.html">Apache MPM Ortak Yönergeleri</a></li>
      <li><a href="mod/event.html">Apache MPM event</a></li>
      <li><a href="mod/mpm_netware.html">Apache MPM netware</a></li>
      <li><a href="mod/mpmt_os2.html">Apache MPM os2</a></li>
      <li><a href="mod/prefork.html">Apache MPM prefork</a></li>
      <li><a href="mod/mpm_winnt.html">Apache MPM winnt</a></li>
      <li><a href="mod/worker.html">Apache MPM worker</a></li>
      </ul><ul><li><a href="mod/mod_access_compat.html">Apache Modülü mod_access_compat</a></li>
      <li><a href="mod/mod_actions.html">Apache Modülü mod_actions</a></li>
      <li><a href="mod/mod_alias.html">Apache Modülü mod_alias</a></li>
      <li><a href="mod/mod_allowmethods.html">Apache Modülü mod_allowmethods</a></li>
      <li><a href="mod/mod_asis.html">Apache Modülü mod_asis</a></li>
      <li><a href="mod/mod_auth_basic.html">Apache Modülü mod_auth_basic</a></li>
      <li><a href="mod/mod_auth_digest.html">Apache Modülü mod_auth_digest</a></li>
      <li><a href="mod/mod_auth_form.html">Apache Modülü mod_auth_form</a></li>
      <li><a href="mod/mod_authn_anon.html">Apache Modülü mod_authn_anon</a></li>
      <li><a href="mod/mod_authn_core.html">Apache Modülü mod_authn_core</a></li>
      <li><a href="mod/mod_authn_dbd.html">Apache Modülü mod_authn_dbd</a></li>
      <li><a href="mod/mod_authn_dbm.html">Apache Modülü mod_authn_dbm</a></li>
      <li><a href="mod/mod_authn_file.html">Apache Modülü mod_authn_file</a></li>
      <li><a href="mod/mod_authn_socache.html">Apache Modülü mod_authn_socache</a></li>
      <li><a href="mod/mod_authnz_fcgi.html">Apache Modülü mod_authnz_fcgi</a></li>
      <li><a href="mod/mod_authnz_ldap.html">Apache Modülü mod_authnz_ldap</a></li>
      <li><a href="mod/mod_authz_core.html">Apache Modülü mod_authz_core</a></li>
      <li><a href="mod/mod_authz_dbd.html">Apache Modülü mod_authz_dbd</a></li>
      <li><a href="mod/mod_authz_dbm.html">Apache Modülü mod_authz_dbm</a></li>
      <li><a href="mod/mod_authz_groupfile.html">Apache Modülü mod_authz_groupfile</a></li>
      <li><a href="mod/mod_authz_host.html">Apache Modülü mod_authz_host</a></li>
      <li><a href="mod/mod_authz_owner.html">Apache Modülü mod_authz_owner</a></li>
      <li><a href="mod/mod_authz_user.html">Apache Modülü mod_authz_user</a></li>
      <li><a href="mod/mod_autoindex.html">Apache Modülü mod_autoindex</a></li>
      <li><a href="mod/mod_brotli.html">Apache Modülü mod_brotli</a></li>
      <li><a href="mod/mod_buffer.html">Apache Modülü mod_buffer</a></li>
      <li><a href="mod/mod_cache.html">Apache Modülü mod_cache</a></li>
      <li><a href="mod/mod_cache_disk.html">Apache Modülü mod_cache_disk</a></li>
      <li><a href="mod/mod_cache_socache.html">Apache Modülü mod_cache_socache</a></li>
      <li><a href="mod/mod_cern_meta.html">Apache Modülü mod_cern_meta</a></li>
      <li><a href="mod/mod_cgi.html">Apache Modülü mod_cgi</a></li>
      <li><a href="mod/mod_cgid.html">Apache Modülü mod_cgid</a></li>
      <li><a href="mod/mod_charset_lite.html">Apache Modülü mod_charset_lite</a></li>
      <li><a href="mod/mod_data.html">Apache Modülü mod_data</a></li>
      <li><a href="mod/mod_dav.html">Apache Modülü mod_dav</a></li>
      <li><a href="mod/mod_dav_fs.html">Apache Modülü mod_dav_fs</a></li>
      <li><a href="mod/mod_dav_lock.html">Apache Modülü mod_dav_lock</a></li>
      <li><a href="mod/mod_dbd.html">Apache Modülü mod_dbd</a></li>
      <li><a href="mod/mod_deflate.html">Apache Modülü mod_deflate</a></li>
      <li><a href="mod/mod_dialup.html">Apache Modülü mod_dialup</a></li>
      <li><a href="mod/mod_dir.html">Apache Modülü mod_dir</a></li>
      <li><a href="mod/mod_dumpio.html">Apache Modülü mod_dumpio</a></li>
      <li><a href="mod/mod_echo.html">Apache Modülü mod_echo</a></li>
      <li><a href="mod/mod_env.html">Apache Modülü mod_env</a></li>
      <li><a href="mod/mod_example_hooks.html">Apache Modülü mod_example_hooks</a></li>
      <li><a href="mod/mod_expires.html">Apache Modülü mod_expires</a></li>
      <li><a href="mod/mod_ext_filter.html">Apache Modülü mod_ext_filter</a></li>
      <li><a href="mod/mod_file_cache.html">Apache Modülü mod_file_cache</a></li>
      <li><a href="mod/mod_filter.html">Apache Modülü mod_filter</a></li>
      <li><a href="mod/mod_headers.html">Apache Modülü mod_headers</a></li>
      <li><a href="mod/mod_heartbeat.html">Apache Modülü mod_heartbeat</a></li>
      <li><a href="mod/mod_heartmonitor.html">Apache Modülü mod_heartmonitor</a></li>
      <li><a href="mod/mod_http2.html">Apache Modülü mod_http2</a></li>
      <li><a href="mod/mod_ident.html">Apache Modülü mod_ident</a></li>
      <li><a href="mod/mod_imagemap.html">Apache Modülü mod_imagemap</a></li>
      <li><a href="mod/mod_include.html">Apache Modülü mod_include</a></li>
      <li><a href="mod/mod_info.html">Apache Modülü mod_info</a></li>
      <li><a href="mod/mod_isapi.html">Apache Modülü mod_isapi</a></li>
      <li><a href="mod/mod_lbmethod_bybusyness.html">Apache Modülü mod_lbmethod_bybusyness</a></li>
      <li><a href="mod/mod_lbmethod_byrequests.html">Apache Modülü mod_lbmethod_byrequests</a></li>
      <li><a href="mod/mod_lbmethod_bytraffic.html">Apache Modülü mod_lbmethod_bytraffic</a></li>
      <li><a href="mod/mod_lbmethod_heartbeat.html">Apache Modülü mod_lbmethod_heartbeat</a></li>
      <li><a href="mod/mod_ldap.html">Apache Modülü mod_ldap</a></li>
      <li><a href="mod/mod_log_config.html">Apache Modülü mod_log_config</a></li>
      <li><a href="mod/mod_log_debug.html">Apache Modülü mod_log_debug</a></li>
      <li><a href="mod/mod_log_forensic.html">Apache Modülü mod_log_forensic</a></li>
      <li><a href="mod/mod_logio.html">Apache Modülü mod_logio</a></li>
      <li><a href="mod/mod_lua.html">Apache Modülü mod_lua</a></li>
      <li><a href="mod/mod_macro.html">Apache Modülü mod_macro</a></li>
      <li><a href="mod/mod_md.html">Apache Modülü mod_md</a></li>
      <li><a href="mod/mod_mime.html">Apache Modülü mod_mime</a></li>
      <li><a href="mod/mod_mime_magic.html">Apache Modülü mod_mime_magic</a></li>
      <li><a href="mod/mod_negotiation.html">Apache Modülü mod_negotiation</a></li>
      <li><a href="mod/mod_nw_ssl.html">Apache Modülü mod_nw_ssl</a></li>
      <li><a href="mod/mod_privileges.html">Apache Modülü mod_privileges</a></li>
      <li><a href="mod/mod_proxy.html">Apache Modülü mod_proxy</a></li>
      <li><a href="mod/mod_proxy_ajp.html">Apache Modülü mod_proxy_ajp</a></li>
      <li><a href="mod/mod_proxy_balancer.html">Apache Modülü mod_proxy_balancer</a></li>
      <li><a href="mod/mod_proxy_connect.html">Apache Modülü mod_proxy_connect</a></li>
      <li><a href="mod/mod_proxy_express.html">Apache Modülü mod_proxy_express</a></li>
      <li><a href="mod/mod_proxy_fcgi.html">Apache Modülü mod_proxy_fcgi</a></li>
      <li><a href="mod/mod_proxy_fdpass.html">Apache Modülü mod_proxy_fdpass</a></li>
      <li><a href="mod/mod_proxy_ftp.html">Apache Modülü mod_proxy_ftp</a></li>
      <li><a href="mod/mod_proxy_hcheck.html">Apache Modülü mod_proxy_hcheck</a></li>
      <li><a href="mod/mod_proxy_html.html">Apache Modülü mod_proxy_html</a></li>
      <li><a href="mod/mod_proxy_http.html">Apache Modülü mod_proxy_http</a></li>
      <li><a href="mod/mod_proxy_http2.html">Apache Modülü mod_proxy_http2</a></li>
      <li><a href="mod/mod_proxy_scgi.html">Apache Modülü mod_proxy_scgi</a></li>
      <li><a href="mod/mod_proxy_uwsgi.html">Apache Modülü mod_proxy_uwsgi</a></li>
      <li><a href="mod/mod_proxy_wstunnel.html">Apache Modülü mod_proxy_wstunnel</a></li>
      <li><a href="mod/mod_ratelimit.html">Apache Modülü mod_ratelimit</a></li>
      <li><a href="mod/mod_reflector.html">Apache Modülü mod_reflector</a></li>
      <li><a href="mod/mod_remoteip.html">Apache Modülü mod_remoteip</a></li>
      <li><a href="mod/mod_reqtimeout.html">Apache Modülü mod_reqtimeout</a></li>
      <li><a href="mod/mod_request.html">Apache Modülü mod_request</a></li>
      <li><a href="mod/mod_rewrite.html">Apache Modülü mod_rewrite</a></li>
      <li><a href="mod/mod_sed.html">Apache Modülü mod_sed</a></li>
      <li><a href="mod/mod_session.html">Apache Modülü mod_session</a></li>
      <li><a href="mod/mod_session_cookie.html">Apache Modülü mod_session_cookie</a></li>
      <li><a href="mod/mod_session_crypto.html">Apache Modülü mod_session_crypto</a></li>
      <li><a href="mod/mod_session_dbd.html">Apache Modülü mod_session_dbd</a></li>
      <li><a href="mod/mod_setenvif.html">Apache Modülü mod_setenvif</a></li>
      <li><a href="mod/mod_slotmem_plain.html">Apache Modülü mod_slotmem_plain</a></li>
      <li><a href="mod/mod_slotmem_shm.html">Apache Modülü mod_slotmem_shm</a></li>
      <li><a href="mod/mod_so.html">Apache Modülü mod_so</a></li>
      <li><a href="mod/mod_socache_dbm.html">Apache Modülü mod_socache_dbm</a></li>
      <li><a href="mod/mod_socache_dc.html">Apache Modülü mod_socache_dc</a></li>
      <li><a href="mod/mod_socache_memcache.html">Apache Modülü mod_socache_memcache</a></li>
      <li><a href="mod/mod_socache_redis.html">Apache Modülü mod_socache_redis</a></li>
      <li><a href="mod/mod_socache_shmcb.html">Apache Modülü mod_socache_shmcb</a></li>
      <li><a href="mod/mod_speling.html">Apache Modülü mod_speling</a></li>
      <li><a href="mod/mod_ssl.html">Apache Modülü mod_ssl</a></li>
      <li><a href="mod/mod_status.html">Apache Modülü mod_status</a></li>
      <li><a href="mod/mod_substitute.html">Apache Modülü mod_substitute</a></li>
      <li><a href="mod/mod_suexec.html">Apache Modülü mod_suexec</a></li>
      <li><a href="mod/mod_unique_id.html">Apache Modülü mod_unique_id</a></li>
      <li><a href="mod/mod_unixd.html">Apache Modülü mod_unixd</a></li>
      <li><a href="mod/mod_userdir.html">Apache Modülü mod_userdir</a></li>
      <li><a href="mod/mod_usertrack.html">Apache Modülü mod_usertrack</a></li>
      <li><a href="mod/mod_version.html">Apache Modülü mod_version</a></li>
      <li><a href="mod/mod_vhost_alias.html">Apache Modülü mod_vhost_alias</a></li>
      <li><a href="mod/mod_watchdog.html">Apache Modülü mod_watchdog</a></li>
      <li><a href="mod/mod_xml2enc.html">Apache Modülü mod_xml2enc</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="developer" id="developer">GeliÅŸtirici Belgeleri</a></h2>
      <ul><li class="separate"><a href="developer/">Genel Bakış</a></li>
      <li><a href="developer/API.html">Apache API Bilgileri</a></li>
      <li><a href="developer/new_api_2_4.html">Apache HTTPD 2.4'te API güncellemeleri</a></li>
      <li><a href="developer/modguide.html">Apache HTTPD 2.4 için Modül Geliştirme</a></li>
      <li><a href="developer/documenting.html">Apache HTTPD'nin Belgelendirilmesi</a></li>
      <li><a href="developer/hooks.html">Apache 2.x Kullanıcı İşlevleri</a></li>
      <li><a href="developer/modules.html">Modüllerin 1.3’ten Apache 2.x’e Dönüştürülmesi</a></li>
      <li><a href="developer/request.html">2.x’de İsteklerin İşlenmesi</a></li>
      <li><a href="developer/filters.html">2.x’de Süzgeçler Nasıl Çalışır</a></li>
      <li><a href="developer/output-filters.html">2.x'de çıktı süzgeçleri için yol göstericiler</a></li>
      <li><a href="developer/thread_safety.html">2.x'de Çok Evrelilik Konuları</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="index" id="index">Terimler ve Dizin</a></h2>
      <ul><li><a href="glossary.html">Terimler</a></li>
      <li><a href="mod/">Modül Dizini</a></li>
      <li><a href="mod/directives.html">Yönerge Dizini</a></li>
      <li><a href="mod/quickreference.html">Hızlı Yönerge Kılavuzu</a></li>
      <li><a href="mod/overrides.html">.htaccess için Geçersizleştirme Sınıfları</a></li>
      </ul>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./de/sitemap.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/sitemap.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/sitemap.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/sitemap.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sitemap.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sitemap.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sitemap.html" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/sitemap.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/sitemap.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/handler.html���������������������������������������������������������������0000644�0000000�0000050�00000001216�13362070302�015740� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: handler.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: handler.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: handler.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: handler.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: handler.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: handler.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      
      URI: handler.html.zh-cn.utf8
      Content-Language: zh-cn
      Content-type: text/html; charset=UTF-8
      ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/stopping.html��������������������������������������������������������������0000644�0000000�0000050�00000001217�13362070302�016167� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: stopping.html.de
      Content-Language: de
      Content-type: text/html; charset=ISO-8859-1
      
      URI: stopping.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: stopping.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: stopping.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: stopping.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: stopping.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: stopping.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/install.html���������������������������������������������������������������0000644�0000000�0000050�00000001210�13362070302�015763� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: install.html.de
      Content-Language: de
      Content-type: text/html; charset=ISO-8859-1
      
      URI: install.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: install.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: install.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: install.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: install.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: install.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/invoking.html.ko.euc-kr����������������������������������������������������0000644�0000000�0000050�00000025573�13412755316�017773� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¾ÆÆÄÄ¡ ½ÃÀÛ - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>¾ÆÆÄÄ¡ ½ÃÀÛ</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/invoking.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/invoking.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/invoking.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/invoking.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/invoking.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/invoking.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/invoking.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p>º¸Åë ¾ÆÆÄÄ¡´Â Windows NT, 2000, XP¿¡¼­´Â ¼­ºñ½º·Î,
          Windows 95°ú ME¿¡¼­´Â ÄÜ¼Ö ÇÁ·Î±×·¥À¸·Î ½ÇÇàµÈ´Ù. ÀÚ¼¼ÇÑ
          ³»¿ëÀº <a href="platform/windows.html#winsvc">¼­ºñ½º·Î
          ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇϱâ</a>¿Í <a href="platform/windows.html#wincons">ÄÜ¼Ö ÇÁ·Î±×·¥À¸·Î
          ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇϱâ</a>.</p>
      
          <p>À¯´Ð½º¿¡¼­ <a href="programs/httpd.html">httpd</a>
          ÇÁ·Î±×·¥Àº ¹é±×¶ó¿îµå¿¡¼­ °è¼Ó ¿äûÀ» ó¸®ÇÏ´Â µ¥¸óÀ¸·Î
          ½ÇÇàµÈ´Ù. ÀÌ ¹®¼­´Â <code>httpd</code>¸¦ ½ÃÀÛÇÏ´Â ¹æ¹ýÀ»
          ¼³¸íÇÑ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#startup">¾î¶»°Ô ¾ÆÆÄÄ¡°¡ ½ÃÀÛÇϳª</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#errors">½ÃÀÛÁß ¿À·ù</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#boot">ºÎÆÃÇÒ¶§ ½ÃÀÛÇϱâ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#info">Ãß°¡ Á¤º¸</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="stopping.html">¾ÆÆÄÄ¡ Áߴܰú Àç½ÃÀÛ</a></li><li><a href="programs/httpd.html">httpd</a></li><li><a href="programs/apachectl.html">apachectl</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="startup" id="startup">¾î¶»°Ô ¾ÆÆÄÄ¡°¡ ½ÃÀÛÇϳª</a></h2>
      
          <p>¼³Á¤ÆÄÀÏ¿¡¼­ <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>ÀÌ ±âº»°ªÀÎ 80(ȤÀº
          1024ÀÌÇÏÀÇ ´Ù¸¥ Æ÷Æ®)À̶ó¸é ÀÌ Æ¯±Ç Æ÷Æ®¿¡ ¿¬°áÇϱâÀ§ÇØ
          root ±ÇÇÑÀÌ ÇÊ¿äÇÏ´Ù. ¼­¹ö´Â ½ÃÀÛÇÏ¿© ·Î±×ÆÄÀÏÀ» ¿©´Â µîÀÇ
          ¸î¸î ±âÃÊÀûÀÎ ÀÛ¾÷À» ¸¶Ä£ÈÄ, Ŭ¶óÀ̾ðÆ®ÀÇ ¿äûÀ» ±â´Ù¸®°í
          ÀÀ´äÇÏ´Â <em>ÀÚ½Ä(child)</em> ÇÁ·Î¼¼½º¸¦ ¿©·¯°³ ¶ç¿î´Ù.
          ÁÖ <code>httpd</code> ÇÁ·Î¼¼½º´Â °è¼Ó root »ç¿ëÀÚ·Î ½ÇÇàµÇÁö¸¸,
          ÀÚ½Ä ÇÁ·Î¼¼½ºµéÀº ´õ ±ÇÇÑÀÌ ÀÛÀº »ç¿ëÀÚ·Î ½ÇÇàµÈ´Ù. ÀÌ´Â
          ¼±ÅÃÇÑ <a href="mpm.html">´ÙÁßó¸® ¸ðµâ</a>·Î Á¶Á¤ÇÑ´Ù.</p>
      
          <p><a href="programs/apachectl.html">apachectl</a>
          ½ºÅ©¸³Æ®¸¦ »ç¿ëÇÏ¿© <code>httpd</code> ½ÇÇàÆÄÀÏÀ» ½ÃÀÛÇϱæ
          ±ÇÀåÇÑ´Ù. ÀÌ ½ºÅ©¸³Æ®´Â <code>httpd</code>°¡ ¸î¸î
          ¿î¿µÃ¼Á¦¿¡¼­ Á¤»óÀûÀ¸·Î µ¿ÀÛÇϱâÀ§ÇØ ÇÊ¿äÇÑ È¯°æº¯¼öµéÀ»
          ¼³Á¤Çϰí <code>httpd</code> ½ÇÇàÆÄÀÏÀ» ½ÃÀÛÇÑ´Ù.
          <code>apachectl</code>Àº ¸í·ÉÇà ¾Æ±Ô¸ÕÆ®¸¦ ±×´ë·Î ³Ñ±â±â¶§¹®¿¡,
          <code>httpd</code>ÀÇ ¾î¶² ¿É¼ÇÀÌ¶óµµ <code>apachectl</code>¿¡
          »ç¿ë°¡´ÉÇÏ´Ù. ¶Ç, <code>apachectl</code> ½ºÅ©¸³Æ®ÀÇ ¾ÕºÎºÐ¿¡
          ³ª¿À´Â <code>HTTPD</code> º¯¼ö¸¦ <code>httpd</code> ½ÇÇàÆÄÀÏÀÌ
          ÀÖ´Â À§Ä¡¿Í <em>Ç×»ó</em> »ç¿ëÇÒ ¸í·ÉÇà ¾Æ±Ô¸ÕÆ®·Î Á÷Á¢
          ¼öÁ¤ÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p><code>httpd</code>¸¦ ½ÇÇàÇÏ¸é ¸ÕÀú <a href="configuring.html">¼³Á¤ÆÄÀÏ</a> <code>httpd.conf</code>¸¦
          ã¾Æ¼­ Àд´Ù. ÀÌ ÆÄÀÏÀÇ À§Ä¡´Â ÄÄÆÄÀÏ Áß¿¡ ÁöÁ¤Çϳª, ½ÇÇà½Ã
          ´ÙÀ½°ú °°ÀÌ <code>-f</code> ¸í·ÉÇà ¿É¼ÇÀ¸·Î ÁöÁ¤ÇÒ ¼öµµ ÀÖ´Ù.</p>
      
      <div class="example"><p><code>/usr/local/apache2/bin/apachectl -f
            /usr/local/apache2/conf/httpd.conf</code></p></div>
      
          <p>½ÃÀÛÇÏ´Â °úÁ¤¿¡¼­ ¹®Á¦°¡ ¾ø´Ù¸é, ¼­¹ö´Â Å͹̳ο¡¼­
          ¶³¾îÁö°í ¸í·É ÇÁ·ÒÇÁÆ®°¡ °ÅÀÇ Áï½Ã ³ª¿À°ÔµÈ´Ù. ÀÌ´Â ¼­¹ö°¡
          ½ÇÇàµÊÀ» ÀǹÌÇÑ´Ù. ºê¶ó¿ìÀú·Î ¼­¹ö¿¡ ¿¬°áÇÏ¿© <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> µð·ºÅ丮¿¡ ÀÖ´Â
          Å×½ºÆ® ÆäÀÌÁö¿Í ±× ÆäÀÌÁö¿¡ ¸µÅ©µÈ (·ÎÄÃÄ«ÇÇ) ¼³¸í¼­¸¦ º¼
          ¼ö ÀÖ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="errors" id="errors">½ÃÀÛÁß ¿À·ù</a></h2>
      
          <p>¾ÆÆÄÄ¡°¡ ½ÃÀÛÇÏ´Â °úÁ¤Áß¿¡ ½É°¢ÇÑ ¹®Á¦°¡ ¹ß»ýÇϸé,
          Á¾·áÇϱâ Àü¿¡ ¹®Á¦¸¦ ¾Ë¸®´Â ¹®±¸¸¦ ÄܼÖÀ̳ª <code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code>¿¡ ¾´´Ù. °¡Àå ÈçÇÑ ¿À·ù¹® Áß
          Çϳª´Â "<code>Unable to bind to Port ...</code>"ÀÌ´Ù.
          ÀÌ ¸Þ¼¼Áö´Â º¸Åë ´ÙÀ½ µÎ °æ¿ì¿¡ ¹ß»ýÇÑ´Ù:</p>
      
          <ul>
            <li>root »ç¿ëÀÚ·Î ·Î±×ÀÎÇÏÁö ¾Ê°í Ư±Ç Æ÷Æ®¿¡ ¼­¹ö¸¦
            ½ÃÀÛÇÏ·Á ÇÑ °æ¿ì. ȤÀº</li>
      
            <li>ÀÌ¹Ì ¾ÆÆÄÄ¡³ª ´Ù¸¥ À¥¼­¹ö°¡ »ç¿ëÁßÀÎ Æ÷Æ®¿¡
            ¼­¹ö¸¦ ½ÃÀÛÇÏ·Á ÇÑ °æ¿ì.</li>
          </ul>
      
          <p>±âŸ ¹®Á¦ÇØ°á ¹æ¹ýÀº ¾ÆÆÄÄ¡ <a href="faq/">FAQ</a>¸¦
          Âü°íÇ϶ó.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="boot" id="boot">ºÎÆÃÇÒ¶§ ½ÃÀÛÇϱâ</a></h2>
      
          <p>½Ã½ºÅÛÀÌ Àç½ÃÀÛÇÑ ÈÄ¿¡µµ ¼­¹ö°¡ °è¼Ó ½ÇÇàµÇ±æ ¹Ù¶õ´Ù¸é,
          ½Ã½ºÅÛ ½ÃÀÛÆÄÀÏ(º¸Åë <code>rc.local</code>À̳ª <code>rc.N</code>
          µð·ºÅ丮¿¡ ÀÖ´Â ÆÄÀÏ)¿¡ <code>apachectl</code>À» Ãß°¡Çؾß
          ÇÑ´Ù. ÀÌ °æ¿ì ¾ÆÆÄÄ¡´Â root·Î ½ÃÀ۵ȴÙ. ÀÌÀü¿¡ ¼­¹öÀÇ º¸¾ÈÀ̳ª
          Á¢±Ù Á¦ÇÑ(ÆÄÀϱÇÇÑ)ÀÌ ¿Ã¹Ù·Î ¼³Á¤µÇ¾ú´ÂÁö È®ÀÎÇ϶ó.</p>
      
          <p><code>apachectl</code>Àº Ç¥ÁØ SysV init ½ºÅ©¸³Æ®¿Í ºñ½ÁÇϰÔ
          µ¿ÀÛÇϵµ·Ï ¸¸µé¾îÁ³´Ù. ½ºÅ©¸³Æ®´Â ¾Æ±Ô¸ÕÆ®·Î <code>start</code>,
          <code>restart</code>, <code>stop</code>À» ¹ÞÀ¸¸é °¢°¢ ÀûÀýÇÑ
          ½Ã±×³ÎÀ» <code>httpd</code>¿¡ º¸³½´Ù. ±×·¡¼­ º¸ÅëÀº
          <code>apachectl</code>À» ÀûÀýÇÑ init µð·ºÅ丮·Î ¸µÅ©¸¦ °É¸éµÈ´Ù.
          ±×·¯³ª »ç¿ëÇÏ´Â ½Ã½ºÅÛÀÇ Á¤È®ÇÑ ¿ä±¸»çÇ×À» È®ÀÎÇ϶ó.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="info" id="info">Ãß°¡ Á¤º¸</a></h2>
      
          <p><a href="programs/httpd.html">httpd</a>¿Í <a href="programs/apachectl.html">apachectl</a>, ±âŸ ¼­¹ö¿¡
          Æ÷ÇÔµÈ Áö¿ø ÇÁ·Î±×·¥µéÀÇ ¸í·ÉÇà ¿É¼ÇÀº
          <a href="programs/">¼­¹ö¿Í Áö¿ø ÇÁ·Î±×·¥</a> ÆäÀÌÁö¸¦
          Âü°íÇ϶ó. ¶Ç ¾ÆÆÄÄ¡ ¹èÆ÷º»¿¡´Â ¸ðµç <a href="mod/">¸ðµâ</a>°ú
          ±×µéÀÌ Á¦°øÇÏ´Â <a href="mod/directives.html">Áö½Ã¾î</a>¿¡
          ´ëÇÑ ¹®¼­°¡ ÀÖ´Ù.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/invoking.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/invoking.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/invoking.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/invoking.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/invoking.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/invoking.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/invoking.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/invoking.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/mpm.html.de����������������������������������������������������������������0000644�0000000�0000050�00000025564�13412755316�015532� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="de" xml:lang="de"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Multi-Processing-Module (MPMs) - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP-Server</a> &gt; <a href="http://httpd.apache.org/docs/">Dokumentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Multi-Processing-Module (MPMs)</h1>
      <div class="toplang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/mpm.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/mpm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/mpm.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/mpm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/mpm.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/mpm.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/mpm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/mpm.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">Diese Übersetzung ist möglicherweise
                  nicht mehr aktuell. Bitte prüfen Sie die englische Version auf
                  die neuesten Änderungen.</div>
      
        <p>Das Dokument beschreibt, was ein Multi-Processing-Modul ist und wie solche
          Module beim Apache HTTP Server verwendet werden.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#introduction">Einführung</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#choosing">Auswahl eines MPMs</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#defaults">MPM-Voreinstellungen</a></li>
      </ul><h3>Siehe auch</h3><ul class="seealso"><li><a href="#comments_section">Kommentare</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">Einführung</a></h2>
      
        <p>Der Apache HTTP Server wurde als leistungsfähiger und flexibler Webserver
          konzipiert, der auf einer Vielzahl von Plattformen in einer
          Reihe unterschiedlicher Umgebungen arbeiten kann. Unterschiedliche
          Plattformen und unterschiedliche Umgebungen verlangen oftmals verschiedene
          Fähigkeiten oder kennen verschiedene Wege, die gleiche
          Funktionaltät sehr effizient zu implementieren. Der Apache hat durch
          seinen modularen Aufbau schon immer eine breite Auswahl von Umgebungen
          unterstützt. Dieses Design erlaubt es dem Webmaster, durch Auswahl der
          Module, die zur Kompilierungszeit oder zur Laufzeit geladen werden, die
          Features auszuwählen, die in den Server intregiert werden.</p>
      
        <p>Der Apache 2.0 erweitert dieses modulare Design auf die grundlegenden
          Funktionen eines Webservers. Der Server wird mit einer Auswahl von
          Multi-Processing-Modulen (MPMs) ausgeliefert, die für die Bindung an
          Netzwerkports der Maschine, die Annahme von Anfragen und die Abfertigung von
          Kindprozessen zur Behandlung der Anfragen zuständig sind.</p>
      
        <p>Die Erweiterung des modularen Aufbaus auf diese Ebene des Servers
          bringt zwei wesentliche Vorteile:</p>
      
        <ul>
          <li>Der Apache kann nun eine Vielfalt von Betriebssystemen sauberer und
            effizienter unterstützen. Insbesondere die Windows-Version des Apache
            ist jetzt deutlich effizienter, da <code class="module"><a href="./mod/mpm_winnt.html">mpm_winnt</a></code> native
            Netzwerkfähigkeiten anstelle der im Apache 1.3 verwendeten
            POSIX-Schicht benutzen kann. Dieser Vorteil gilt auch für andere
            Betriebssysteme, für die spezielle MPMs implementiert sind.</li>
          
          <li>Der Server läßt sich besser auf die Bedürfnisse der
            jeweiligen Website anpassen. Sites beispielsweise, die eine hohe
            Skalierbarkeit benötigen, können ein Threaded-MPM wie
            <code class="module"><a href="./mod/worker.html">worker</a></code> oder <code class="module"><a href="./mod/event.html">event</a></code> wählen,
            während Sites, die Stabilität oder Kompatibilität mit
            älterer Software erfordern, <code class="module"><a href="./mod/prefork.html">prefork</a></code> wählen
            können.</li>
        </ul>
      
        <p>Auf Anwenderebene erscheinen MPMs fast wie andere Apache-Module. Der
          Hauptunterschied ist, dass jeweils nur ein einziges MPM in den Server
          geladen werden kann. Die Liste der verfügbaren MPMs finden Sie im <a href="mod/">Modul-Index</a>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="choosing" id="choosing">Auswahl eines MPMs</a></h2>
      
        <p>MPMs müssen während der
          <span class="transnote">(<em>Anm.d.Ü.:</em> Quelltext-)</span>Konfiguration ausgewählt und in den
          Server einkompiliert werden. Compiler sind in der Lage eine Reihe von
          Funktionen zu optimieren, wenn Threads verwendet werden. Sie können
          dies allerdings nur, wenn sie wissen, dass Threads benutzt werden.</p>
      
        <p>Um das gewünschte MPM tatsächlich auszuwählen, verwenden Sie
          beim <code class="program"><a href="./programs/configure.html">configure</a></code>-Skript das Argument
          <code>--with-mpm=<em>NAME</em></code>. <em>NAME</em> ist der Name des
          gewünschten MPMs.</p>
      
        <p>Ist der Server kompiliert, so ist es mittels <code>./httpd -l</code>
          möglich, das ausgewählte MPM zu ermitteln. Dieser Befehl listet
          alle in den Server einkompilierten Module auf, einschließlich des
          MPM.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="defaults" id="defaults">MPM-Voreinstellungen</a></h2>
      
        <p>Die folgende Tabelle gibt die voreingestellten MPMs für verschiedene
          Betriebssysteme an. Wenn Sie während der Kompilierung keine andere
          Auswahl treffen, wird dieses MPM gewählt.</p>
      
      <table>
      
      <tr><td>BeOS</td><td><code class="module"><a href="./mod/beos.html">beos</a></code></td></tr>
      <tr><td>Netware</td><td><code class="module"><a href="./mod/mpm_netware.html">mpm_netware</a></code></td></tr>
      <tr><td>OS/2</td><td><code class="module"><a href="./mod/mpmt_os2.html">mpmt_os2</a></code></td></tr>
      <tr><td>Unix</td><td><code class="module"><a href="./mod/prefork.html">prefork</a></code></td></tr>
      <tr><td>Windows</td><td><code class="module"><a href="./mod/mpm_winnt.html">mpm_winnt</a></code></td></tr>
      </table>
      </div></div>
      <div class="bottomlang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/mpm.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/mpm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/mpm.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/mpm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/mpm.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/mpm.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/mpm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/mpm.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Kommentare</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/mpm.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Lizenziert unter der <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/install.html.en������������������������������������������������������������0000644�0000000�0000050�00000065762�13412755316�016425� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Compiling and Installing - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Compiling and Installing</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./de/install.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/install.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/install.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/install.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/install.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/install.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/install.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>This document covers compilation and installation of the Apache HTTP Server
          on Unix and Unix-like systems only. For compiling and
          installation on Windows, see <a href="platform/windows.html">Using Apache HTTP Server with Microsoft
          Windows</a> and <a href="platform/win_compiling.html">Compiling Apache for Microsoft Windows</a>.
          For other platforms, see the <a href="platform/">platform</a> documentation.</p>
      
          <p>Apache httpd uses <code>libtool</code> and <code>autoconf</code>
          to create a build environment that looks like many other Open Source
          projects.</p>
      
          <p>If you are upgrading from one minor version to the next (for
          example, 2.4.9 to 2.4.10), please skip down to the <a href="#upgrading">upgrading</a> section.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#overview">Overview for the
          impatient</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#requirements">Requirements</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#download">Download</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#extract">Extract</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#configure">Configuring the source tree</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#compile">Build</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#install">Install</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#customize">Customize</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#test">Test</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#upgrading">Upgrading</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#thirdp">Third-party packages</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="programs/configure.html">Configure the source tree</a></li><li><a href="invoking.html">Starting Apache httpd</a></li><li><a href="stopping.html">Stopping and Restarting</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">Overview for the
          impatient</a></h2>
      
          <dl>
          <dt>Installing on Fedora/CentOS/Red Hat Enterprise Linux</dt>
          <dd>
          <pre class="prettyprint lang-">sudo yum install httpd
      sudo systemctl enable httpd
      sudo systemctl start httpd</pre>
      
      
          <div class="warning">Newer releases of these distros use
          <code>dnf</code> rather than <code>yum</code>. See <a href="https://fedoraproject.org/wiki/Apache_HTTP_Server">the
          Fedora project's documentation</a> for platform-specific notes.</div>
          </dd>
      
          <dt>Installing on Ubuntu/Debian</dt>
          <dd>
      <pre class="prettyprint lang-">sudo apt install apache2
      sudo service apache2 start</pre>
      
      
          <div class="warning">See <a href="https://help.ubuntu.com/lts/serverguide/httpd.html">Ubuntu's documentation</a> for platform-specific notes.</div>
      
          </dd>
      
          <dt>Installing from source</dt>
          <dd>
          <table>
            
            <tr>
              <td><a href="#download">Download</a></td>
      
              <td>Download the latest release from <a href="http://httpd.apache.org/download.cgi#apache24">http://httpd.apache.org/download.cgi</a>
              </td>
            </tr>
      
            <tr>
              <td><a href="#extract">Extract</a></td>
      
              <td><code>$ gzip -d httpd-<em>NN</em>.tar.gz<br />
               $ tar xvf httpd-<em>NN</em>.tar<br />
               $ cd httpd-<em>NN</em></code></td>
            </tr>
      
            <tr>
              <td><a href="#configure">Configure</a></td>
      
              <td><code>$ ./configure --prefix=<em>PREFIX</em></code>
              </td>
            </tr>
      
            <tr>
              <td><a href="#compile">Compile</a></td>
      
              <td><code>$ make</code> </td>
            </tr>
      
            <tr>
              <td><a href="#install">Install</a></td>
      
              <td><code>$ make install</code> </td>
            </tr>
      
            <tr>
              <td><a href="#customize">Customize</a></td>
      
              <td><code>$ vi <em>PREFIX</em>/conf/httpd.conf</code> </td>
            </tr>
      
            <tr>
              <td><a href="#test">Test</a></td>
      
              <td><code>$ <em>PREFIX</em>/bin/apachectl -k start</code>
              </td>
            </tr>
          </table>
      
              <p><em>NN</em> must be replaced with the current version
              number, and <em>PREFIX</em> must be replaced with the
              filesystem path under which the server should be installed. If
              <em>PREFIX</em> is not specified, it defaults to
              <code>/usr/local/apache2</code>.</p>
      
              <p>Each section of the compilation and installation process is
              described in more detail below, beginning with the requirements
              for compiling and installing Apache httpd.</p>
          </dd>
          </dl>
      
          <div class="warning">Don't see your favorite platform mentioned
          here? <a href="http://httpd.apache.org/docs-project/">Come help us
          improve this doc.</a></div>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="requirements" id="requirements">Requirements</a></h2>
      
          <p>The following requirements exist for building Apache httpd:</p>
      
          <dl>
            <dt>APR and APR-Util</dt>
            <dd>Make sure you have APR and APR-Util already installed on
            your system. If you don't, or prefer to not use the system-provided
            versions, download the latest versions of both APR and APR-Util
            from <a href="http://apr.apache.org/">Apache APR</a>, unpack
            them into <code>/httpd_source_tree_root/srclib/apr</code> and <code>/httpd_source_tree_root/srclib/apr-util</code>
            (be sure the directory names do not have version numbers; for example,
            the APR distribution must be under /httpd_source_tree_root/srclib/apr/) and use
            <code>./configure</code>'s <code>--with-included-apr</code>
            option.  On some platforms, you may have to install the 
            corresponding <code>-dev</code> packages to allow httpd to build 
            against your installed copy of APR and APR-Util.</dd>
      
            <dt>Perl-Compatible Regular Expressions Library (PCRE)</dt>
            <dd>This library is required but not longer bundled with httpd.  
            Download the source code from <a href="http://www.pcre.org/">http://www.pcre.org</a>, 
            or install a Port or Package.  If your build system can't find
            the pcre-config script installed by the PCRE build, point to it
            using the <code>--with-pcre</code> parameter.  On some platforms, 
            you may have to install the corresponding <code>-dev</code> 
            package to allow httpd to build against your installed copy 
            of PCRE.</dd>
            
            <dt>Disk Space</dt>
            <dd>Make sure you have at least 50 MB of temporary free disk
            space available. After installation the server occupies
            approximately 10 MB of disk space. The actual disk space
            requirements will vary considerably based on your chosen
            configuration options, any third-party modules, and, of course,
            the size of the web site or sites that you have on the server.</dd>
      
            <dt>ANSI-C Compiler and Build System</dt>
            <dd>Make sure you have an ANSI-C compiler installed. The <a href="http://gcc.gnu.org/">GNU C
            compiler (GCC)</a> from the <a href="http://www.gnu.org/">Free Software Foundation (FSF)</a>
            is recommended. If you don't have GCC
            then at least make sure your vendor's compiler is ANSI
            compliant. In addition, your <code>PATH</code> must contain
            basic build tools such as <code>make</code>.</dd>
      
            <dt>Accurate time keeping</dt>
            <dd>Elements of the HTTP protocol are expressed as the time of
            day. So, it's time to investigate setting some time
            synchronization facility on your system. Usually the
            <code>ntpdate</code> or <code>xntpd</code> programs are used for
            this purpose which are based on the Network Time Protocol (NTP).
            See the <a href="http://www.ntp.org">NTP
            homepage</a> for more details about NTP software and public
            time servers.</dd>
      
            <dt><a href="http://www.perl.org/">Perl 5</a>
            [OPTIONAL]</dt>
            <dd>For some of the support scripts like <code class="program"><a href="./programs/apxs.html">apxs</a></code> or <code class="program"><a href="./programs/dbmmanage.html">dbmmanage</a></code> (which are
            written in Perl) the Perl 5 interpreter is required (versions
            5.003 or newer are sufficient).  If no Perl 5 interpreter is found by the
            <code class="program"><a href="./programs/configure.html">configure</a></code> script, you will not be able to use
            the affected support scripts. Of course, you will still be able to
            build and use Apache httpd.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="download" id="download">Download</a></h2>
      
          <p>The Apache HTTP Server can be downloaded from the <a href="http://httpd.apache.org/download.cgi">Apache HTTP Server
          download site</a>, which lists several mirrors.  Most users of
          Apache on unix-like systems will be better off downloading and
          compiling a source version.  The build process (described below) is
          easy, and it allows you to customize your server to suit your needs.
          In addition, binary releases are often not up to date with the latest
          source releases.  If you do download a binary, follow the instructions
          in the <code>INSTALL.bindist</code> file inside the distribution.</p>
      
          <p>After downloading, it is important to verify that you have a
          complete and unmodified version of the Apache HTTP Server. This
          can be accomplished by testing the downloaded tarball against the
          PGP signature.  Details on how to do this are available on the <a href="http://httpd.apache.org/download.cgi#verify">download
          page</a> and an extended example is available describing the <a href="http://httpd.apache.org/dev/verification.html">use of
          PGP</a>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="extract" id="extract">Extract</a></h2>
      
          <p>Extracting the source from the Apache HTTP Server tarball is a
          simple matter of uncompressing, and then untarring:</p>
      
      <div class="example"><p><code>
      $ gzip -d httpd-<em>NN</em>.tar.gz<br />
      $ tar xvf httpd-<em>NN</em>.tar
      </code></p></div>
      
          <p>This will create a new directory under the current directory
          containing the source code for the distribution. You should
          <code>cd</code> into that directory before proceeding with
          compiling the server.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configure" id="configure">Configuring the source tree</a></h2>
      
          <p>The next step is to configure the Apache source tree for your
          particular platform and personal requirements. This is done using
          the script <code class="program"><a href="./programs/configure.html">configure</a></code> included in
          the root directory of the distribution. (Developers downloading
          an unreleased version of the Apache source tree will need to have
          <code>autoconf</code> and <code>libtool</code> installed and will
          need to run <code>buildconf</code> before proceeding with the next
          steps. This is not necessary for official releases.)</p>
      
          <p>To configure the source tree using all the default options,
          simply type <code>./configure</code>. To change the default
          options, <code class="program"><a href="./programs/configure.html">configure</a></code> accepts a variety of variables
          and command line options.</p>
      
          <p>The most important option is the location <code>--prefix</code>
          where Apache is to be installed later, because Apache has to be
          configured for this location to work correctly.  More fine-tuned
          control of the location of files is possible with additional <a href="programs/configure.html#installationdirectories">configure
          options</a>.</p>
      
          <p>Also at this point, you can specify which <a href="programs/configure.html#optionalfeatures">features</a> you
          want included in Apache by enabling and disabling <a href="mod/">modules</a>.  Apache comes with a wide range of modules
          included by default.  They will be compiled as
          <a href="dso.html">shared objects (DSOs)</a> which can be loaded
          or unloaded at runtime.
          You can also choose to compile modules statically by using the option
          <code>--enable-<var>module</var>=static</code>.</p>
      
          <p>Additional modules are enabled using the
          <code>--enable-<var>module</var></code> option, where
          <var>module</var> is the name of the module with the
          <code>mod_</code> string removed and with any underscore converted
          to a dash.  Similarly, you can disable modules with the
          <code>--disable-<var>module</var></code> option.  Be careful when
          using these options, since <code class="program"><a href="./programs/configure.html">configure</a></code> cannot warn you
          if the module you specify does not exist; it will simply ignore the
          option.</p>
      
          <p>In addition, it is sometimes necessary to provide the
          <code class="program"><a href="./programs/configure.html">configure</a></code> script with extra information about the
          location of your compiler, libraries, or header files.  This is
          done by passing either environment variables or command line
          options to <code class="program"><a href="./programs/configure.html">configure</a></code>.  For more information, see the
          <code class="program"><a href="./programs/configure.html">configure</a></code> manual page. Or invoke
          <code class="program"><a href="./programs/configure.html">configure</a></code> using the <code>--help</code> option.</p>
      
          <p>For a short impression of what possibilities you have, here
          is a typical example which compiles Apache for the installation
          tree <code>/sw/pkg/apache</code> with a particular compiler and flags
          plus the two additional modules <code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code> and
          <code class="module"><a href="./mod/mod_lua.html">mod_lua</a></code>:</p>
      
      <div class="example"><p><code>
            $ CC="pgcc" CFLAGS="-O2" \<br />
             ./configure --prefix=/sw/pkg/apache \<br />
             --enable-ldap=shared \<br />
             --enable-lua=shared
      </code></p></div>
      
          <p>When <code class="program"><a href="./programs/configure.html">configure</a></code> is run it will take several minutes to
          test for the availability of features on your system and build
          Makefiles which will later be used to compile the server.</p>
      
          <p>Details on all the different <code class="program"><a href="./programs/configure.html">configure</a></code> options are
          available on the <code class="program"><a href="./programs/configure.html">configure</a></code> manual page.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="compile" id="compile">Build</a></h2>
      
          <p>Now you can build the various parts which form the Apache
          package by simply running the command:</p>
      
      <div class="example"><p><code>$ make</code></p></div>
      
          <p>Please be patient here, since a base configuration takes
          several minutes to compile and the time will vary widely
          depending on your hardware and the number of modules that you
          have enabled.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="install" id="install">Install</a></h2>
      
          <p>Now it's time to install the package under the configured
          installation <em>PREFIX</em> (see <code>--prefix</code> option
          above) by running:</p>
      
      <div class="example"><p><code>$ make install</code></p></div>
      
          <p>This step will typically require root privileges, since
          <em>PREFIX</em> is usually a directory with restricted write
          permissions.</p>
      
          <p>If you are upgrading, the installation will not overwrite
          your configuration files or documents.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="customize" id="customize">Customize</a></h2>
      
          <p>Next, you can customize your Apache HTTP server by editing
          the <a href="configuring.html">configuration files</a> under
          <code><em>PREFIX</em>/conf/</code>.</p>
      
      <div class="example"><p><code>$ vi <em>PREFIX</em>/conf/httpd.conf</code></p></div>
      
          <p>Have a look at the Apache manual under
          <code><em>PREFIX</em>/docs/manual/</code> or consult <a href="http://httpd.apache.org/docs/2.4/">http://httpd.apache.org/docs/2.4/</a> for the most recent
          version of this manual and a complete reference of available <a href="mod/directives.html">configuration directives</a>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="test" id="test">Test</a></h2>
      
          <p>Now you can <a href="invoking.html">start</a> your Apache
          HTTP server by immediately running:</p>
      
      <div class="example"><p><code>$ <em>PREFIX</em>/bin/apachectl -k start</code></p></div>
      
          <p>You should then be able to request your first document
          via the URL <code>http://localhost/</code>. The web page you see is located
          under the <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>,
          which will usually be <code><em>PREFIX</em>/htdocs/</code>.
          Then <a href="stopping.html">stop</a> the server again by
          running:</p>
      
      <div class="example"><p><code>$ <em>PREFIX</em>/bin/apachectl -k stop</code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="upgrading" id="upgrading">Upgrading</a></h2>
      
          <p>The first step in upgrading is to read the release announcement
          and the file <code>CHANGES</code> in the source distribution to
          find any changes that may affect your site.  When changing between
          major releases (for example, from 2.0 to 2.2 or from 2.2 to 2.4),
          there will likely be major differences in the compile-time and
          run-time configuration that will require manual adjustments.  All
          modules will also need to be upgraded to accommodate changes in the
          module API.</p>
      
          <p>Upgrading from one minor version to the next (for example, from
          2.2.55 to 2.2.57) is easier.  The <code>make install</code>
          process will not overwrite any of your existing documents, log
          files, or configuration files.  In addition, the developers make
          every effort to avoid incompatible changes in the
          <code class="program"><a href="./programs/configure.html">configure</a></code> options, run-time configuration, or the
          module API between minor versions.  In most cases you should be able to
          use an identical <code class="program"><a href="./programs/configure.html">configure</a></code> command line, an identical
          configuration file, and all of your modules should continue to
          work.</p>
      
          <p>To upgrade across minor versions, start by finding the file
          <code>config.nice</code> in the <code>build</code> directory of
          your installed server or at the root of the source tree for your
          old install.  This will contain the exact
          <code class="program"><a href="./programs/configure.html">configure</a></code> command line that you used to
          configure the source tree.  Then to upgrade from one version to
          the next, you need only copy the <code>config.nice</code> file to
          the source tree of the new version, edit it to make any desired
          changes, and then run:</p>
      
          <div class="example"><p><code>
          $ ./config.nice<br />
          $ make<br />
          $ make install<br />
          $ <em>PREFIX</em>/bin/apachectl -k graceful-stop<br />
          $ <em>PREFIX</em>/bin/apachectl -k start<br />
          </code></p></div>
      
          <div class="warning">You should always test any new version in your
          environment before putting it into production.  For example, you
          can install and run the new version along side the old one by
          using a different <code>--prefix</code> and a
          different port (by adjusting the <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> directive) to test for any
          incompatibilities before doing the final upgrade.</div>
      
          <p>You can pass additional arguments to <code>config.nice</code>,
          which will be appended to your original <code class="program"><a href="./programs/configure.html">configure</a></code>
          options:</p>
      
          <div class="example"><p><code>
          $ ./config.nice --prefix=/home/test/apache --with-port=90
          </code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="thirdp" id="thirdp">Third-party packages</a></h2>
      
          <p>A large number of third parties provide their own packaged
          distributions of the Apache HTTP Server for installation on
          particular platforms. This includes the various Linux distributions,
          various third-party Windows packages, Mac OS X, Solaris, and many
          more.</p>
      
          <p>Our software license not only permits, but encourages, this kind
          of redistribution. However, it does result in a situation where the
          configuration layout and defaults on your installation of the server
          may differ from what is stated in the documentation. While
          unfortunate, this situation is not likely to change any time
          soon.</p>
      
          <p>A <a href="http://wiki.apache.org/httpd/DistrosDefaultLayout">description
          of these third-party distrubutions</a> is maintained in the HTTP
          Server wiki, and should reflect the current state of these
          third-party distributions. However, you will need to familiarize
          yourself with your particular platform's package management and
          installation procedures.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./de/install.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/install.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/install.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/install.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/install.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/install.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/install.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/install.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������httpd-2.4.41/docs/manual/invoking.html.en�����������������������������������������������������������0000644�0000000�0000050�00000031063�13412755316�016566� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Starting Apache - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Starting Apache</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./de/invoking.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/invoking.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/invoking.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/invoking.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/invoking.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/invoking.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/invoking.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>On Windows, Apache is normally run as a service.
          For details, see <a href="platform/windows.html#winsvc">Running Apache as a Service</a>.
          </p>
      
          <p>On Unix, the <code class="program"><a href="./programs/httpd.html">httpd</a></code> program
          is run as a daemon that executes continuously in the
          background to handle requests.  This document describes how
          to invoke <code class="program"><a href="./programs/httpd.html">httpd</a></code>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#startup">How Apache Starts</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#errors">Errors During Start-up</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#boot">Starting at Boot-Time</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#info">Additional Information</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="stopping.html">Stopping and Restarting</a></li><li><code class="program"><a href="./programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="./programs/apachectl.html">apachectl</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="startup" id="startup">How Apache Starts</a></h2>
      
          <p>If the <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
          specified in the configuration file is default of 80 (or any other
          port below 1024), then it is necessary to have root privileges in
          order to start apache, so that it can bind to this privileged
          port. Once the server has started and performed a few preliminary
          activities such as opening its log files, it will launch several
          <em>child</em> processes which do the work of listening for and
          answering requests from clients. The main <code>httpd</code>
          process continues to run as the root user, but the child processes
          run as a less privileged user. This is controlled by the selected
          <a href="mpm.html">Multi-Processing Module</a>.</p>
      
          <p>The recommended method of invoking the <code class="program"><a href="./programs/httpd.html">httpd</a></code>
          executable is to use the <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> control script. This
          script sets certain environment variables that are necessary for
          <code class="program"><a href="./programs/httpd.html">httpd</a></code> to function correctly under some operating
          systems, and then invokes the <code class="program"><a href="./programs/httpd.html">httpd</a></code> binary.
          <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> will pass through any command line
          arguments, so any <code class="program"><a href="./programs/httpd.html">httpd</a></code> options may also be used with
          <code class="program"><a href="./programs/apachectl.html">apachectl</a></code>.  You may also directly edit the
          <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> script by changing the <code>HTTPD</code>
          variable near the top to specify the correct location of the
          <code class="program"><a href="./programs/httpd.html">httpd</a></code> binary and any command-line arguments that you
          wish to be <em>always</em> present.</p>
      
          <p>The first thing that <code class="program"><a href="./programs/httpd.html">httpd</a></code> does when it is
          invoked is to locate and read the <a href="configuring.html">configuration file</a>
          <code>httpd.conf</code>. The location of this file is set at
          compile-time, but it is possible to specify its location at run
          time using the <code>-f</code> command-line option as in</p>
      
      <div class="example"><p><code>/usr/local/apache2/bin/apachectl -f
            /usr/local/apache2/conf/httpd.conf</code></p></div>
      
          <p>If all goes well during startup, the server will detach from
          the terminal and the command prompt will return almost
          immediately. This indicates that the server is up and running.
          You can then use your browser to connect to the server and view
          the test page in the <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> directory.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="errors" id="errors">Errors During Start-up</a></h2>
      
          <p>If Apache suffers a fatal problem during startup, it will
          write a message describing the problem either to the console or
          to the <code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code> before
          exiting. One of the most common error messages is "<code>Unable
          to bind to Port ...</code>". This message is usually caused by
          either:</p>
      
          <ul>
            <li>Trying to start the server on a privileged port when not
            logged in as the root user; or</li>
      
            <li>Trying to start the server when there is another instance
            of Apache or some other web server already bound to the same
            Port.</li>
          </ul>
      
          <p>For further trouble-shooting instructions, consult the
          Apache <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="boot" id="boot">Starting at Boot-Time</a></h2>
      
          <p>If you want your server to continue running after a system
          reboot, you should add a call to <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> to your
          system startup files (typically <code>rc.local</code> or a file in
          an <code>rc.N</code> directory). This will start Apache as
          root. Before doing this ensure that your server is properly
          configured for security and access restrictions.</p>
      
          <p>The <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> script is designed to act like a
          standard SysV init script; it can take the arguments
          <code>start</code>, <code>restart</code>, and <code>stop</code>
          and translate them into the appropriate signals to
          <code class="program"><a href="./programs/httpd.html">httpd</a></code>.  So you can often simply link
          <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> into the appropriate init directory. But be
          sure to check the exact requirements of your system.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="info" id="info">Additional Information</a></h2>
      
          <p>Additional information about the command-line options of <code class="program"><a href="./programs/httpd.html">httpd</a></code> and <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> as well as other support
          programs included with the server is available on the
          <a href="programs/">Server and Supporting Programs</a> page.
          There is also documentation on all the <a href="mod/">modules</a> included with the Apache distribution
          and the <a href="mod/directives.html">directives</a> that they
          provide.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./de/invoking.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/invoking.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/invoking.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/invoking.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/invoking.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/invoking.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/invoking.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/invoking.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/handler.html.ja.utf8�������������������������������������������������������0000644�0000000�0000050�00000032564�13412755316�017243� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache ã®ãƒãƒ³ãƒ‰ãƒ©ã®ä½¿ç”¨ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache ã®ãƒãƒ³ãƒ‰ãƒ©ã®ä½¿ç”¨</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/handler.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/handler.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/handler.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/handler.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/handler.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/handler.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/handler.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
          <p>Apache ã®ãƒãƒ³ãƒ‰ãƒ©ã®ä½¿ç”¨ã«é–¢ã—ã¦è¨˜è¿°ã—ã¦ã„ã¾ã™ã€‚</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#definition">ãƒãƒ³ãƒ‰ãƒ©ã¨ã¯</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#examples">例</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programmer">プログラマå‘ã‘ã®ãƒ¡ãƒ¢</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="definition" id="definition">ãƒãƒ³ãƒ‰ãƒ©ã¨ã¯</a></h2>
          
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_actions.html">mod_actions</a></code></li><li><code class="module"><a href="./mod/mod_asis.html">mod_asis</a></code></li><li><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code></li><li><code class="module"><a href="./mod/mod_info.html">mod_info</a></code></li><li><code class="module"><a href="./mod/mod_mime.html">mod_mime</a></code></li><li><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></li><li><code class="module"><a href="./mod/mod_status.html">mod_status</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_actions.html#action">Action</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#removehandler">RemoveHandler</a></code></li><li><code class="directive"><a href="./mod/core.html#sethandler">SetHandler</a></code></li></ul></td></tr></table>
      
      
          <p>「ãƒãƒ³ãƒ‰ãƒ©ã€ã¨ã¯ã€ãƒ•ァイルãŒå‘¼ã°ã‚ŒãŸã¨ãã«å®Ÿè¡Œã•れる動作ã®
          Apache ã«ãŠã‘る内部表ç¾ã§ã™ã€‚
          通常ã€ãƒ•ァイルã¯ãƒ•ァイルタイプ<span class="transnote">(<em>訳注:</em> MIME-type)</span>ã«åŸºã¥ã„ãŸæš—é»™ã®ãƒãƒ³ãƒ‰ãƒ©ãŒã‚りã¾ã™ã€‚
          普通ã¯ã™ã¹ã¦ã®ãƒ•ァイルã¯å˜ã«ã‚µãƒ¼ãƒã«æ‰±ã‚れã¾ã™ãŒã€
          ファイルタイプã®ä¸­ã«ã¯åˆ¥ã«ã€Œãƒãƒ³ãƒ‰ãƒ«ã€<span class="transnote">(<em>訳注:</em> 扱ã†)</span>
          ã•れるもã®ã‚‚ã‚りã¾ã™ã€‚</p>
      
          <p>ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã‚„ç½®ã„ã¦ã„る場所ã«åŸºã¥ã„ã¦ãƒ•ァイルタイプã¨é–¢ä¿‚ãªãã€
          ãƒãƒ³ãƒ‰ãƒ©ã‚’明示的ã«è¨­å®šã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚
          ã“れã¯ã‚ˆã‚Šå„ªé›…ãªè§£æ±ºæ³•ã¨ã„ã†ç‚¹ã¨ã€ãƒ•ァイルã«ã‚¿ã‚¤ãƒ—<strong>ã¨</strong>ãƒãƒ³ãƒ‰ãƒ©ã®ä¸¡æ–¹ã‚’関連付ã‘ã‚‹ã“ã¨ãŒã§ãã‚‹ã¨ã„ã†ç‚¹ã§å„ªã‚Œã¦ã„ã¾ã™ã€‚
          (<a href="mod/mod_mime.html#multipleext">è¤‡æ•°ã®æ‹¡å¼µå­ã®ã‚るファイル</a>ã‚‚å‚ç…§ã—ã¦ãã ã•ã„)。</p>
      
          <p>ãƒãƒ³ãƒ‰ãƒ©ã¯ã‚µãƒ¼ãƒã«çµ„ã¿è¾¼ã‚“ã ã‚Šã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ã—ã¦å«ã‚ãŸã‚Šã€
          <code class="directive"><a href="./mod/mod_actions.html#action">Action</a></code>
          ディレクティブã¨ã—ã¦è¿½åŠ ã—ãŸã‚Šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          ä»¥ä¸‹ã¯æ¨™æº–é…布ã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹ãƒãƒ³ãƒ‰ãƒ©ã§ã™ã€‚
          </p>
      
          <ul>
            <li><strong>default-handler</strong>:<code>default_handelr()</code>
            を使ã£ã¦ãƒ•ァイルをé€ã‚Šã¾ã™ã€‚
            é™çš„ãªã‚³ãƒ³ãƒ†ãƒ³ãƒ„を扱ã†ã¨ãã«ãƒ‡ãƒ•ォルトã§ä½¿ç”¨ã•れるãƒãƒ³ãƒ‰ãƒ©ã§ã™ã€‚
            (<code class="module"><a href="./mod/core.html">core</a></code>)</li>
      
            <li><strong>send-as-is</strong>:
            HTTP ヘッダã®ã‚るファイルをãã®ã¾ã¾é€ã‚Šã¾ã™ã€‚
            (<code class="module"><a href="./mod/mod_asis.html">mod_asis</a></code>)</li>
      
            <li><strong>cgi-script</strong>: ファイルを CGI
            スクリプトã¨ã—ã¦æ‰±ã„ã¾ã™ã€‚
            (<code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code>)</li>
      
            <li><strong>imap-file</strong>:
            イメージマップã®ãƒ«ãƒ¼ãƒ«ãƒ•ァイルã¨ã—ã¦è§£æžã—ã¾ã™ã€‚
            (<code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code>)</li>
      
            <li><strong>server-info</strong>: サーãƒã®è¨­å®šæƒ…報をå–å¾—ã—ã¾ã™ã€‚
            (<code class="module"><a href="./mod/mod_info.html">mod_info</a></code>)</li>
      
            <li><strong>server-status</strong>: サーãƒã®çŠ¶æ…‹å ±å‘Šã‚’å–å¾—ã—ã¾ã™ã€‚
            (<code class="module"><a href="./mod/mod_status.html">mod_status</a></code>)</li>
      
            <li><strong>type-map</strong>:
            コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã®ãŸã‚ã®ã‚¿ã‚¤ãƒ—マップã¨ã—ã¦è§£æžã—ã¾ã™ã€‚
            (<code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>)</li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">例</a></h2>
          
      
          <h3><a name="example1" id="example1">CGI スクリプトを用ã„ã¦é™çš„ãªã‚³ãƒ³ãƒ†ãƒ³ãƒ„を変更ã™ã‚‹</a></h3>
            
      
            <p>以下ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«ã‚ˆã£ã¦ã€æ‹¡å¼µå­ãŒ <code>html</code>
            ã§ã‚るファイル㯠<code>footer.pl</code>
            CGI スクリプトを起動ã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚</p>
      
            <pre class="prettyprint lang-config">Action add-footer /cgi-bin/footer.pl
      AddHandler add-footer .html</pre>
      
      
            <p>CGI スクリプトã¯å¸Œæœ›ã®ä¿®æ­£ã‚„追加を行ãªã£ã¦ã€å…ƒã€…è¦æ±‚ã•ã‚ŒãŸæ–‡æ›¸
            (環境変数 <code>PATH_TRANSLATED</code>
            ã§æŒ‡ã•れã¦ã„ã¾ã™) ã‚’é€ã‚‹è²¬ä»»ãŒã‚りã¾ã™ã€‚
            </p>
      
          
          <h3><a name="example2" id="example2">HTTP ヘッダã®ã‚るファイル</a></h3>
            
      
            <p>以下ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠<code>send-as-is</code>
            ãƒãƒ³ãƒ‰ãƒ©ã‚’使用ã™ã‚‹ã‚ˆã†ã«æŒ‡ç¤ºã—ã¾ã™ã€‚ã“ã®ãƒãƒ³ãƒ‰ãƒ©ã¯è‡ªåˆ†è‡ªèº«ã® HTTP
            ヘッダをæŒã£ã¦ã„るファイルã«ä½¿ç”¨ã•れã¾ã™ã€‚ã“ã“ã§ã¯ã€æ‹¡å¼µå­ã«é–¢ã‚らãšã€
            <code>/web/htdocs/asis</code> ディレクトリã«ã‚ã‚‹å…¨ã¦ã®ãƒ•ァイルã¯
            <code>send-as-is</code> ãƒãƒ³ãƒ‰ãƒ©ã«ã‚ˆã£ã¦æ‰±ã‚れã¾ã™ã€‚</p>
      
            <pre class="prettyprint lang-config">&lt;Directory /web/htdocs/asis&gt;
          SetHandler send-as-is
      &lt;/Directory&gt;</pre>
      
      
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="programmer" id="programmer">プログラマå‘ã‘ã®ãƒ¡ãƒ¢</a></h2>
          
      
          <p>ãƒãƒ³ãƒ‰ãƒ©ã®æ©Ÿèƒ½ã‚’実装ã™ã‚‹ãŸã‚ã«ã€åˆ©ç”¨ã™ã‚‹ã¨ä¾¿åˆ©ã‹ã‚‚ã—れãªã„ã‚‚ã®ãŒ
          <a href="developer/API.html">Apache API</a>
          ã«è¿½åŠ ã•れã¾ã—ãŸã€‚詳ã—ã言ã†ã¨ã€<code>request_rec</code>
          æ§‹é€ ä½“ã«æ–°ã—ã„レコードãŒè¿½åŠ ã•れãŸã¨ã„ã†ã“ã¨ã§ã™ã€‚</p>
      
          <pre class="prettyprint lang-c">char *handler</pre>
      
      
          <p>ã‚‚ã—モジュールãŒãƒãƒ³ãƒ‰ãƒ©ã«é–¢ã‚りãŸã„å ´åˆã€
          やらãªã‘れã°ãªã‚‰ãªã„ã“ã¨ã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒ <code>invoke_handler</code>
          ステージã«é”ã™ã‚‹ä»¥å‰ã« <code>r-&gt;handler</code>
          を設定ã™ã‚‹ã“ã¨ã ã‘ã§ã™ã€‚ãƒãƒ³ãƒ‰ãƒ©ã¯ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã®ä»£ã‚りã«
          ãƒãƒ³ãƒ‰ãƒ©åを使ã†ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã“ã¨ä»¥å¤–ã¯ã€ä»¥å‰ã¨åŒã˜ã‚ˆã†ã«å®Ÿè£…ã•れã¦ã„ã¾ã™ã€‚
          å¿…ãšè¦æ±‚ã•れã¦ã„ã‚‹ã‚ã‘ã§ã¯ã‚りã¾ã›ã‚“ãŒã€ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—
          ã®åå‰ç©ºé–“ã‚’ä¾µã•ãªã„よã†ã«ã€ãƒãƒ³ãƒ‰ãƒ©ã®åå‰ã«ã¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã‚’å«ã¾ãªã„ã€
          ダッシュ<span class="transnote">(<em>訳注:</em> "-")</span>ã§åˆ†é›¢ã•れãŸåå‰ã‚’付ã‘ã‚‹ç¿’æ…£ã«ãªã£ã¦ã„ã¾ã™ã€‚</p>
        </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/handler.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/handler.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/handler.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/handler.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/handler.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/handler.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/handler.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/handler.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/sitemap.html.ja.utf8�������������������������������������������������������0000644�0000000�0000050�00000064437�13520523022�017257� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Site Map - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page">
      <div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div>
      <div id="page-content"><div id="preamble"><h1>Site Map</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./de/sitemap.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/sitemap.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/sitemap.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/sitemap.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sitemap.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sitemap.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sitemap.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/sitemap.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
      <p>ã“ã®ãƒšãƒ¼ã‚¸ã¯ç¾æ™‚点ã§åˆ©ç”¨å¯èƒ½ãª
      <a href="./">Apache HTTP サーãƒãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4 ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³</a>
      ã®ä¸€è¦§ã§ã™ã€‚</p>
      </div>
      <div id="quickview"><ul id="toc">
      <li><img alt="" src="./images/down.gif" /> <a href="#release">リリースã®ãƒ¡ãƒ¢</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#using">Apache HTTP サーãƒã®ä½¿ç”¨</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#vhosts">Apache ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#faq">Apache サーãƒã®ã‚ˆãã‚る質å•</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#ssl">Apache ã® SSL/TLS æš—å·åŒ–</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#howto">ガイドã€ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«ã€ãƒã‚¦ãƒ„ー</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#platform">ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ å›ºæœ‰ã®æƒ…å ±</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programs">Apache HTTP サーãƒã¨ã‚µãƒãƒ¼ãƒˆãƒ—ログラム</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#misc">Apache ãã®ä»–</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#modules">Apache モジュール</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#developer">開発者ã®ãŸã‚ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#index">用語集ã¨ç´¢å¼•</a></li>
      </ul>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="release" id="release">リリースã®ãƒ¡ãƒ¢</a></h2>
      <ul><li><a href="upgrading.html">2.2 ã‹ã‚‰ 2.4 ã¸ã®ã‚¢ãƒƒãƒ—グレード</a></li>
      <li><a href="new_features_2_4.html">Apache 2.3/2.4 ã®æ–°æ©Ÿèƒ½</a></li>
      <li><a href="new_features_2_2.html">Apache 2.1/2.2 ã®æ–°æ©Ÿèƒ½</a></li>
      <li><a href="new_features_2_0.html">Apache 2.0 ã®æ–°æ©Ÿèƒ½</a></li>
      <li><a href="license.html">Apache License</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="using" id="using">Apache HTTP サーãƒã®ä½¿ç”¨</a></h2>
      <ul><li><a href="install.html">Apache ã®ã‚³ãƒ³ãƒ‘イルã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«</a></li>
      <li><a href="invoking.html">Apache ã®èµ·å‹•</a></li>
      <li><a href="stopping.html">サーãƒã®åœæ­¢ã¨å†èµ·å‹•</a></li>
      <li><a href="configuring.html">設定ファイル</a></li>
      <li><a href="sections.html">Directory, Location, Files セクションã®å‹•作方法</a></li>
      <li><a href="caching.html">Content Caching</a></li>
      <li><a href="server-wide.html">サーãƒå…¨ä½“ã®è¨­å®š</a></li>
      <li><a href="logs.html">ログファイル</a></li>
      <li><a href="urlmapping.html">URL ã‹ã‚‰ãƒ•ァイルシステム上ã®ä½ç½®ã¸ã®ãƒžãƒƒãƒ—</a></li>
      <li><a href="misc/security_tips.html">セキュリティã®ã‚³ãƒ„</a></li>
      <li><a href="dso.html">動的共有オブジェクト (DSO) サãƒãƒ¼ãƒˆ</a></li>
      <li><a href="content-negotiation.html">コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³</a></li>
      <li><a href="custom-error.html">カスタムエラーレスãƒãƒ³ã‚¹</a></li>
      <li><a href="bind.html">Apache ãŒä½¿ç”¨ã™ã‚‹ã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ãƒãƒ¼ãƒˆã®è¨­å®š</a></li>
      <li><a href="mpm.html">マルãƒãƒ—ロセッシングモジュール (MPM)</a></li>
      <li><a href="env.html">Apache ã«ãŠã‘る環境変数</a></li>
      <li><a href="handler.html">Apache ã®ãƒãƒ³ãƒ‰ãƒ©ã®ä½¿ç”¨</a></li>
      <li><a href="filter.html">フィルタ</a></li>
      <li><a href="suexec.html">suEXEC サãƒãƒ¼ãƒˆ</a></li>
      <li><a href="misc/perf-tuning.html">性能ã«é–¢ã™ã‚‹ãƒ’ント</a></li>
      <li><a href="misc/rewriteguide.html">URL リライトガイド</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="vhosts" id="vhosts">Apache ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆ</a></h2>
      <ul><li class="separate"><a href="vhosts/">概略</a></li>
      <li><a href="vhosts/name-based.html">åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></li>
      <li><a href="vhosts/ip-based.html">IP ベースã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ã‚µãƒãƒ¼ãƒˆ</a></li>
      <li><a href="vhosts/mass.html">å‹•çš„ã«è¨­å®šã•れãŸå¤§è¦æ¨¡ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a></li>
      <li><a href="vhosts/examples.html">VirtualHost ã®ä¾‹</a></li>
      <li><a href="vhosts/details.html">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã®ãƒžãƒƒãƒãƒ³ã‚°ã®è©³ã—ã„説明</a></li>
      <li><a href="vhosts/fd-limits.html">ファイル記述å­ã®é™ç•Œ</a></li>
      <li><a href="dns-caveats.html">DNS 㨠Apache ã¨ã«é–¢ä¿‚ã™ã‚‹å•題</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="faq" id="faq">Apache サーãƒã®ã‚ˆãã‚る質å•</a></h2>
      <ul><li><a href="faq/">概略</a></li>
      <li><a href="faq/background.html">背景ã®èª¬æ˜Ž</a></li>
      <li><a href="faq/support.html">サãƒãƒ¼ãƒˆ</a></li>
      <li><a href="faq/error.html">エラーメッセージ</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="ssl" id="ssl">Apache ã® SSL/TLS æš—å·åŒ–</a></h2>
      <ul><li class="separate"><a href="ssl/">概略</a></li>
      <li><a href="ssl/ssl_intro.html">SSL/TLS æš—å·åŒ–: 入門</a></li>
      <li><a href="ssl/ssl_compat.html">SSL/TLS æš—å·åŒ–: äº’æ›æ€§</a></li>
      <li><a href="ssl/ssl_howto.html">SSL/TLS æš—å·åŒ–: ãƒã‚¦ãƒ„ー</a></li>
      <li><a href="ssl/ssl_faq.html">SSL/TLS æš—å·åŒ–: FAQ</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="howto" id="howto">ガイドã€ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«ã€ãƒã‚¦ãƒ„ー</a></h2>
      <ul><li class="separate"><a href="howto/">概略</a></li>
      <li><a href="howto/auth.html">èªè¨¼</a></li>
      <li><a href="howto/cgi.html">CGI ã«ã‚ˆã‚‹å‹•的コンテンツ</a></li>
      <li><a href="howto/ssi.html">Server Side Includes 入門</a></li>
      <li><a href="howto/htaccess.html">.htaccess ファイル</a></li>
      <li><a href="howto/public_html.html">ユーザ毎ã®ã‚¦ã‚§ãƒ–ディレクトリ</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="platform" id="platform">ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ å›ºæœ‰ã®æƒ…å ±</a></h2>
      <ul><li class="separate"><a href="platform/">概略</a></li>
      <li><a href="platform/windows.html">Microsoft Windows ã§ã® Apache ã®ä½¿ç”¨</a></li>
      <li><a href="platform/win_compiling.html">Microsoft Windows ã§ã® Apache
      ã®ã‚³ãƒ³ãƒ‘イル</a></li>
      <li><a href="platform/netware.html">Novell NetWare ã§ Apache を使ã†</a></li>
      <li><a href="platform/perf-hp.html">HPUX ã§é«˜æ€§èƒ½ã‚¦ã‚§ãƒ–サーãƒã‚’実行ã™ã‚‹</a></li>
      <li><a href="platform/ebcdic.html">EBCDIC 版 Apache</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="programs" id="programs">Apache HTTP サーãƒã¨ã‚µãƒãƒ¼ãƒˆãƒ—ログラム</a></h2>
      <ul><li class="separate"><a href="programs/">概略</a></li>
      <li><a href="programs/httpd.html">マニュアルページ: httpd</a></li>
      <li><a href="programs/ab.html">マニュアルページ: ab</a></li>
      <li><a href="programs/apachectl.html">マニュアルページ: apachectl</a></li>
      <li><a href="programs/apxs.html">マニュアルページ: apxs</a></li>
      <li><a href="programs/configure.html">マニュアルページ: configure</a></li>
      <li><a href="programs/dbmmanage.html">マニュアルページ: dbmmanage</a></li>
      <li><a href="programs/htcacheclean.html">マニュアルページ: htcacheclean</a></li>
      <li><a href="programs/htdbm.html">マニュアルページ: htdbm</a></li>
      <li><a href="programs/htdigest.html">マニュアルページ: htdigest</a></li>
      <li><a href="programs/htpasswd.html">マニュアルページ: htpasswd</a></li>
      <li><a href="programs/logresolve.html">マニュアルページ: logresolve</a></li>
      <li><a href="programs/rotatelogs.html">マニュアルページ: rotatelogs</a></li>
      <li><a href="programs/suexec.html">マニュアルページ: suexec</a></li>
      <li><a href="programs/other.html">ä»–ã®ãƒ—ログラム</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="misc" id="misc">Apache ãã®ä»–</a></h2>
      <ul><li class="separate"><a href="misc/">概略</a></li>
      <li><a href="misc/relevant_standards.html">関連ã™ã‚‹æ¨™æº–è¦æ ¼</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="modules" id="modules">Apache モジュール</a></h2>
      <ul><li><a href="mod/module-dict.html">Apache ディレクティブã®èª¬æ˜Žã«ä½¿ã‚れる用語</a></li>
      <li><a href="mod/directive-dict.html">Apache ディレクティブを説明ã«ä½¿ã‚れる用語</a></li>
      </ul><ul><li><a href="mod/core.html">Apache コア機能</a></li>
      <li><a href="mod/mpm_common.html">Apache MPM 共通ディレクティブ</a></li>
      <li><a href="mod/event.html">Apache MPM event</a></li>
      <li><a href="mod/mpm_netware.html">Apache MPM netware</a></li>
      <li><a href="mod/mpmt_os2.html">Apache MPM os2</a></li>
      <li><a href="mod/prefork.html">Apache MPM prefork</a></li>
      <li><a href="mod/mpm_winnt.html">Apache MPM winnt</a></li>
      <li><a href="mod/worker.html">Apache MPM worker</a></li>
      </ul><ul><li><a href="mod/mod_access_compat.html">Apache モジュール mod_access_compat</a></li>
      <li><a href="mod/mod_actions.html">Apache モジュール mod_actions</a></li>
      <li><a href="mod/mod_alias.html">Apache モジュール mod_alias</a></li>
      <li><a href="mod/mod_allowmethods.html">Apache モジュール mod_allowmethods</a></li>
      <li><a href="mod/mod_asis.html">Apache モジュール mod_asis</a></li>
      <li><a href="mod/mod_auth_basic.html">Apache モジュール mod_auth_basic</a></li>
      <li><a href="mod/mod_auth_digest.html">Apache モジュール mod_auth_digest</a></li>
      <li><a href="mod/mod_auth_form.html">Apache モジュール mod_auth_form</a></li>
      <li><a href="mod/mod_authn_anon.html">Apache モジュール mod_authn_anon</a></li>
      <li><a href="mod/mod_authn_core.html">Apache モジュール mod_authn_core</a></li>
      <li><a href="mod/mod_authn_dbd.html">Apache モジュール mod_authn_dbd</a></li>
      <li><a href="mod/mod_authn_dbm.html">Apache モジュール mod_authn_dbm</a></li>
      <li><a href="mod/mod_authn_file.html">Apache モジュール mod_authn_file</a></li>
      <li><a href="mod/mod_authn_socache.html">Apache モジュール mod_authn_socache</a></li>
      <li><a href="mod/mod_authnz_fcgi.html">Apache モジュール mod_authnz_fcgi</a></li>
      <li><a href="mod/mod_authnz_ldap.html">Apache モジュール mod_authnz_ldap</a></li>
      <li><a href="mod/mod_authz_core.html">Apache モジュール mod_authz_core</a></li>
      <li><a href="mod/mod_authz_dbd.html">Apache モジュール mod_authz_dbd</a></li>
      <li><a href="mod/mod_authz_dbm.html">Apache モジュール mod_authz_dbm</a></li>
      <li><a href="mod/mod_authz_groupfile.html">Apache モジュール mod_authz_groupfile</a></li>
      <li><a href="mod/mod_authz_host.html">Apache モジュール mod_authz_host</a></li>
      <li><a href="mod/mod_authz_owner.html">Apache モジュール mod_authz_owner</a></li>
      <li><a href="mod/mod_authz_user.html">Apache モジュール mod_authz_user</a></li>
      <li><a href="mod/mod_autoindex.html">Apache モジュール mod_autoindex</a></li>
      <li><a href="mod/mod_brotli.html">Apache モジュール mod_brotli</a></li>
      <li><a href="mod/mod_buffer.html">Apache モジュール mod_buffer</a></li>
      <li><a href="mod/mod_cache.html">Apache モジュール mod_cache</a></li>
      <li><a href="mod/mod_cache_disk.html">Apache モジュール mod_cache_disk</a></li>
      <li><a href="mod/mod_cache_socache.html">Apache モジュール mod_cache_socache</a></li>
      <li><a href="mod/mod_cern_meta.html">Apache モジュール mod_cern_meta</a></li>
      <li><a href="mod/mod_cgi.html">Apache モジュール mod_cgi</a></li>
      <li><a href="mod/mod_cgid.html">Apache モジュール mod_cgid</a></li>
      <li><a href="mod/mod_charset_lite.html">Apache モジュール mod_charset_lite</a></li>
      <li><a href="mod/mod_data.html">Apache モジュール mod_data</a></li>
      <li><a href="mod/mod_dav.html">Apache モジュール mod_dav</a></li>
      <li><a href="mod/mod_dav_fs.html">Apache モジュール mod_dav_fs</a></li>
      <li><a href="mod/mod_dav_lock.html">Apache モジュール mod_dav_lock</a></li>
      <li><a href="mod/mod_dbd.html">Apache モジュール mod_dbd</a></li>
      <li><a href="mod/mod_deflate.html">Apache モジュール mod_deflate</a></li>
      <li><a href="mod/mod_dialup.html">Apache モジュール mod_dialup</a></li>
      <li><a href="mod/mod_dir.html">Apache モジュール mod_dir</a></li>
      <li><a href="mod/mod_dumpio.html">Apache モジュール mod_dumpio</a></li>
      <li><a href="mod/mod_echo.html">Apache モジュール mod_echo</a></li>
      <li><a href="mod/mod_env.html">Apache モジュール mod_env</a></li>
      <li><a href="mod/mod_example_hooks.html">Apache モジュール mod_example_hooks</a></li>
      <li><a href="mod/mod_expires.html">Apache モジュール mod_expires</a></li>
      <li><a href="mod/mod_ext_filter.html">Apache モジュール mod_ext_filter</a></li>
      <li><a href="mod/mod_file_cache.html">Apache モジュール mod_file_cache</a></li>
      <li><a href="mod/mod_filter.html">Apache モジュール mod_filter</a></li>
      <li><a href="mod/mod_headers.html">Apache モジュール mod_headers</a></li>
      <li><a href="mod/mod_heartbeat.html">Apache モジュール mod_heartbeat</a></li>
      <li><a href="mod/mod_heartmonitor.html">Apache モジュール mod_heartmonitor</a></li>
      <li><a href="mod/mod_http2.html">Apache モジュール mod_http2</a></li>
      <li><a href="mod/mod_ident.html">Apache モジュール mod_ident</a></li>
      <li><a href="mod/mod_imagemap.html">Apache モジュール mod_imagemap</a></li>
      <li><a href="mod/mod_include.html">Apache モジュール mod_include</a></li>
      <li><a href="mod/mod_info.html">Apache モジュール mod_info</a></li>
      <li><a href="mod/mod_isapi.html">Apache モジュール mod_isapi</a></li>
      <li><a href="mod/mod_lbmethod_bybusyness.html">Apache モジュール mod_lbmethod_bybusyness</a></li>
      <li><a href="mod/mod_lbmethod_byrequests.html">Apache モジュール mod_lbmethod_byrequests</a></li>
      <li><a href="mod/mod_lbmethod_bytraffic.html">Apache モジュール mod_lbmethod_bytraffic</a></li>
      <li><a href="mod/mod_lbmethod_heartbeat.html">Apache モジュール mod_lbmethod_heartbeat</a></li>
      <li><a href="mod/mod_ldap.html">Apache モジュール mod_ldap</a></li>
      <li><a href="mod/mod_log_config.html">Apache モジュール mod_log_config</a></li>
      <li><a href="mod/mod_log_debug.html">Apache モジュール mod_log_debug</a></li>
      <li><a href="mod/mod_log_forensic.html">Apache モジュール mod_log_forensic</a></li>
      <li><a href="mod/mod_logio.html">Apache モジュール mod_logio</a></li>
      <li><a href="mod/mod_lua.html">Apache モジュール mod_lua</a></li>
      <li><a href="mod/mod_macro.html">Apache モジュール mod_macro</a></li>
      <li><a href="mod/mod_md.html">Apache モジュール mod_md</a></li>
      <li><a href="mod/mod_mime.html">Apache モジュール mod_mime</a></li>
      <li><a href="mod/mod_mime_magic.html">Apache モジュール mod_mime_magic</a></li>
      <li><a href="mod/mod_negotiation.html">Apache モジュール mod_negotiation</a></li>
      <li><a href="mod/mod_nw_ssl.html">Apache モジュール mod_nw_ssl</a></li>
      <li><a href="mod/mod_privileges.html">Apache モジュール mod_privileges</a></li>
      <li><a href="mod/mod_proxy.html">Apache モジュール mod_proxy</a></li>
      <li><a href="mod/mod_proxy_ajp.html">Apache モジュール mod_proxy_ajp</a></li>
      <li><a href="mod/mod_proxy_balancer.html">Apache モジュール mod_proxy_balancer</a></li>
      <li><a href="mod/mod_proxy_connect.html">Apache モジュール mod_proxy_connect</a></li>
      <li><a href="mod/mod_proxy_express.html">Apache モジュール mod_proxy_express</a></li>
      <li><a href="mod/mod_proxy_fcgi.html">Apache モジュール mod_proxy_fcgi</a></li>
      <li><a href="mod/mod_proxy_fdpass.html">Apache モジュール mod_proxy_fdpass</a></li>
      <li><a href="mod/mod_proxy_ftp.html">Apache モジュール mod_proxy_ftp</a></li>
      <li><a href="mod/mod_proxy_hcheck.html">Apache モジュール mod_proxy_hcheck</a></li>
      <li><a href="mod/mod_proxy_html.html">Apache モジュール mod_proxy_html</a></li>
      <li><a href="mod/mod_proxy_http.html">Apache モジュール mod_proxy_http</a></li>
      <li><a href="mod/mod_proxy_http2.html">Apache モジュール mod_proxy_http2</a></li>
      <li><a href="mod/mod_proxy_scgi.html">Apache モジュール mod_proxy_scgi</a></li>
      <li><a href="mod/mod_proxy_uwsgi.html">Apache モジュール mod_proxy_uwsgi</a></li>
      <li><a href="mod/mod_proxy_wstunnel.html">Apache モジュール mod_proxy_wstunnel</a></li>
      <li><a href="mod/mod_ratelimit.html">Apache モジュール mod_ratelimit</a></li>
      <li><a href="mod/mod_reflector.html">Apache モジュール mod_reflector</a></li>
      <li><a href="mod/mod_remoteip.html">Apache モジュール mod_remoteip</a></li>
      <li><a href="mod/mod_reqtimeout.html">Apache モジュール mod_reqtimeout</a></li>
      <li><a href="mod/mod_request.html">Apache モジュール mod_request</a></li>
      <li><a href="mod/mod_rewrite.html">Apache モジュール mod_rewrite</a></li>
      <li><a href="mod/mod_sed.html">Apache モジュール mod_sed</a></li>
      <li><a href="mod/mod_session.html">Apache モジュール mod_session</a></li>
      <li><a href="mod/mod_session_cookie.html">Apache モジュール mod_session_cookie</a></li>
      <li><a href="mod/mod_session_crypto.html">Apache モジュール mod_session_crypto</a></li>
      <li><a href="mod/mod_session_dbd.html">Apache モジュール mod_session_dbd</a></li>
      <li><a href="mod/mod_setenvif.html">Apache モジュール mod_setenvif</a></li>
      <li><a href="mod/mod_slotmem_plain.html">Apache モジュール mod_slotmem_plain</a></li>
      <li><a href="mod/mod_slotmem_shm.html">Apache モジュール mod_slotmem_shm</a></li>
      <li><a href="mod/mod_so.html">Apache モジュール mod_so</a></li>
      <li><a href="mod/mod_socache_dbm.html">Apache モジュール mod_socache_dbm</a></li>
      <li><a href="mod/mod_socache_dc.html">Apache モジュール mod_socache_dc</a></li>
      <li><a href="mod/mod_socache_memcache.html">Apache モジュール mod_socache_memcache</a></li>
      <li><a href="mod/mod_socache_redis.html">Apache モジュール mod_socache_redis</a></li>
      <li><a href="mod/mod_socache_shmcb.html">Apache モジュール mod_socache_shmcb</a></li>
      <li><a href="mod/mod_speling.html">Apache モジュール mod_speling</a></li>
      <li><a href="mod/mod_ssl.html">Apache モジュール mod_ssl</a></li>
      <li><a href="mod/mod_status.html">Apache モジュール mod_status</a></li>
      <li><a href="mod/mod_substitute.html">Apache モジュール mod_substitute</a></li>
      <li><a href="mod/mod_suexec.html">Apache モジュール mod_suexec</a></li>
      <li><a href="mod/mod_unique_id.html">Apache モジュール mod_unique_id</a></li>
      <li><a href="mod/mod_unixd.html">Apache モジュール mod_unixd</a></li>
      <li><a href="mod/mod_userdir.html">Apache モジュール mod_userdir</a></li>
      <li><a href="mod/mod_usertrack.html">Apache モジュール mod_usertrack</a></li>
      <li><a href="mod/mod_version.html">Apache モジュール mod_version</a></li>
      <li><a href="mod/mod_vhost_alias.html">Apache モジュール mod_vhost_alias</a></li>
      <li><a href="mod/mod_watchdog.html">Apache モジュール mod_watchdog</a></li>
      <li><a href="mod/mod_xml2enc.html">Apache モジュール mod_xml2enc</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="developer" id="developer">開発者ã®ãŸã‚ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆ</a></h2>
      <ul><li class="separate"><a href="developer/">概略</a></li>
      <li><a href="developer/API.html">Apache API メモ</a></li>
      <li><a href="developer/debugging.html">APR
      ã®ãƒ¡ãƒ¢ãƒªã‚¢ãƒ­ã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒ‡ãƒãƒƒã‚°</a></li>
      <li><a href="developer/documenting.html">Apache 2.0 ã®èª¬æ˜Žã‚’書ã</a></li>
      <li><a href="developer/hooks.html">Apache 2.0 フック関数</a></li>
      <li><a href="developer/modules.html">Apache 1.3 ã‹ã‚‰ Apache 2.0 ã«ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’
      ç§»æ¤ã™ã‚‹</a></li>
      <li><a href="developer/request.html">Apache 2.0 ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆå‡¦ç†</a></li>
      <li><a href="developer/filters.html">Apache 2.0 ã®ãƒ•ィルタã®å‹•作ã®ä»•æ–¹</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="index" id="index">用語集ã¨ç´¢å¼•</a></h2>
      <ul><li><a href="glossary.html">用語集</a></li>
      <li><a href="mod/">モジュール索引</a></li>
      <li><a href="mod/directives.html">ディレクティブ索引</a></li>
      <li><a href="mod/quickreference.html">ディレクティブ クイックリファレンス</a></li>
      </ul>
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./de/sitemap.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/sitemap.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/sitemap.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/sitemap.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sitemap.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sitemap.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sitemap.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/sitemap.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/sitemap.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/sections.html.en�����������������������������������������������������������0000644�0000000�0000050�00000111503�13412755316�016567� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Configuration Sections - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Configuration Sections</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/sections.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/sections.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sections.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sections.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sections.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
       <p>Directives in the <a href="configuring.html">configuration files</a> may apply to the
      entire server, or they may be restricted to apply only to particular
      directories, files, hosts, or URLs.  This document describes how to
      use configuration section containers or <code>.htaccess</code> files
      to change the scope of other configuration directives.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#types">Types of Configuration Section Containers</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#file-and-web">Filesystem, Webspace, and Boolean Expressions</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#virtualhost">Virtual Hosts</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#proxy">Proxy</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#whatwhere">What Directives are Allowed?</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#merging">How the sections are merged</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="types" id="types">Types of Configuration Section Containers</a></h2>
      
      <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/core.html">core</a></code></li><li><code class="module"><a href="./mod/mod_version.html">mod_version</a></code></li><li><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_md.html#mdomainsetsection">&lt;MDomainSet&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
      <p>There are two basic types of containers.  Most containers are
      evaluated for each request.  The enclosed directives are applied only
      for those requests that match the containers.  The <code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>, <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>, and
      <code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code>
      containers, on the other hand, are evaluated only at server startup
      and restart.  If their conditions are true at startup, then the
      enclosed directives will apply to all requests.  If the conditions are
      not true, the enclosed directives will be ignored.</p>
      
      <p>The <code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code> directive
      encloses directives that will only be applied if an appropriate
      parameter is defined on the <code class="program"><a href="./programs/httpd.html">httpd</a></code> command line.  For example,
      with the following configuration, all requests will be redirected
      to another site only if the server is started using
      <code>httpd -DClosedForNow</code>:</p>
      
      <pre class="prettyprint lang-config">&lt;IfDefine ClosedForNow&gt;
          Redirect "/" "http://otherserver.example.com/"
      &lt;/IfDefine&gt;</pre>
      
      
      <p>The <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>
      directive is very similar, except it encloses directives that will
      only be applied if a particular module is available in the server.
      The module must either be statically compiled in the server, or it
      must be dynamically compiled and its <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> line must be earlier in the
      configuration file.  This directive should only be used if you need
      your configuration file to work whether or not certain modules are
      installed.  It should not be used to enclose directives that you want
      to work all the time, because it can suppress useful error messages
      about missing modules.</p>
      
      <p>In the following example, the <code class="directive"><a href="./mod/mod_mime_magic.html#mimemagicfile">MimeMagicFile</a></code> directive will be
      applied only if <code class="module"><a href="./mod/mod_mime_magic.html">mod_mime_magic</a></code> is available.</p>
      
      <pre class="prettyprint lang-config">&lt;IfModule mod_mime_magic.c&gt;
          MimeMagicFile "conf/magic"
      &lt;/IfModule&gt;</pre>
      
      
      <p>The <code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code>
      directive is very similar to <code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code> and <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>, except it encloses directives that will
      only be applied if a particular version of the server is executing.  This
      module is designed for the use in test suites and large networks which have to
      deal with different httpd versions and different configurations.</p>
      
      <pre class="prettyprint lang-config">&lt;IfVersion &gt;= 2.4&gt;
          # this happens only in versions greater or
          # equal 2.4.0.
      &lt;/IfVersion&gt;</pre>
      
      
      <p><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>, and the
      <code class="directive"><a href="./mod/mod_version.html#ifversion">&lt;IfVersion&gt;</a></code>
      can apply negative conditions by preceding their test with "!".
      Also, these sections can be nested to achieve more complex
      restrictions.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="file-and-web" id="file-and-web">Filesystem, Webspace, and Boolean Expressions</a></h2>
      
      <p>The most commonly used configuration section containers are the
      ones that change the configuration of particular places in the
      filesystem or webspace.  First, it is important to understand the
      difference between the two.  The filesystem is the view of your disks
      as seen by your operating system.  For example, in a default install,
      Apache httpd resides at <code>/usr/local/apache2</code> in the Unix
      filesystem or <code>"c:/Program Files/Apache Group/Apache2"</code> in
      the Windows filesystem.  (Note that forward slashes should always be
      used as the path separator in Apache httpd configuration files, even for Windows.)  In contrast,
      the webspace is the view of your site as delivered by the web server
      and seen by the client.  So the path <code>/dir/</code> in the
      webspace corresponds to the path
      <code>/usr/local/apache2/htdocs/dir/</code> in the filesystem of a
      default Apache httpd install on Unix.  The webspace need not map directly to
      the filesystem, since webpages may be generated dynamically
      from databases or other locations.</p>
      
      <h3><a name="filesystem" id="filesystem">Filesystem Containers</a></h3>
      
      <p>The <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
      and <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>
      directives, along with their <a class="glossarylink" href="./glossary.html#regex" title="see glossary">regex</a>
      counterparts, apply directives to
      parts of the filesystem.  Directives enclosed in a <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> section apply to
      the named filesystem directory and all subdirectories of that
      directory (as well as the files in those directories).
      The same effect can be obtained using <a href="howto/htaccess.html">.htaccess files</a>.  For example, in the
      following configuration, directory indexes will be enabled for the
      <code>/var/web/dir1</code> directory and all subdirectories.</p>
      
      <pre class="prettyprint lang-config">&lt;Directory "/var/web/dir1"&gt;
          Options +Indexes
      &lt;/Directory&gt;</pre>
      
      
      <p>Directives enclosed in a <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> section apply to any file with
      the specified name, regardless of what directory it lies in.
      So for example, the following configuration directives will,
      when placed in the main section of the configuration file,
      deny access to any file named <code>private.html</code> regardless
      of where it is found.</p>
      
      <pre class="prettyprint lang-config">&lt;Files "private.html"&gt;
          Require all denied
      &lt;/Files&gt;</pre>
      
      
      <p>To address files found in a particular part of the filesystem, the
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> and
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> sections
      can be combined.  For example, the following configuration will deny
      access to <code>/var/web/dir1/private.html</code>,
      <code>/var/web/dir1/subdir2/private.html</code>,
      <code>/var/web/dir1/subdir3/private.html</code>, and any other instance
      of <code>private.html</code> found under the <code>/var/web/dir1/</code>
      directory.</p>
      
      <pre class="prettyprint lang-config">&lt;Directory "/var/web/dir1"&gt;
          &lt;Files "private.html"&gt;
              Require all denied
          &lt;/Files&gt;
      &lt;/Directory&gt;</pre>
      
      
      
      <h3><a name="webspace" id="webspace">Webspace Containers</a></h3>
      
      <p>The <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
      directive and its <a class="glossarylink" href="./glossary.html#regex" title="see glossary">regex</a> counterpart, on
      the other hand, change the
      configuration for content in the webspace.  For example, the following
      configuration prevents access to any URL-path that begins in /private.
      In particular, it will apply to requests for
      <code>http://yoursite.example.com/private</code>,
      <code>http://yoursite.example.com/private123</code>, and
      <code>http://yoursite.example.com/private/dir/file.html</code> as well
      as any other requests starting with the <code>/private</code> string.</p>
      
      <pre class="prettyprint lang-config">&lt;LocationMatch "^/private"&gt;
          Require all denied
      &lt;/LocationMatch&gt;</pre>
      
      
      <p>The <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
      directive need not have anything to do with the filesystem.
      For example, the following example shows how to map a particular
      URL to an internal Apache HTTP Server handler provided by <code class="module"><a href="./mod/mod_status.html">mod_status</a></code>.
      No file called <code>server-status</code> needs to exist in the
      filesystem.</p>
      
      <pre class="prettyprint lang-config">&lt;Location "/server-status"&gt;
          SetHandler server-status
      &lt;/Location&gt;</pre>
      
      
      
      <h3><a name="overlapping-webspace" id="overlapping-webspace">Overlapping Webspace</a></h3>
      <p>In order to have two overlapping URLs one has to consider the order in which
      certain sections or directives are evaluated. For
      <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> this would be:</p>
      <pre class="prettyprint lang-config">&lt;Location "/foo"&gt;
      &lt;/Location&gt;
      &lt;Location "/foo/bar"&gt;
      &lt;/Location&gt;</pre>
      
      <p><code class="directive"><a href="./mod/mod_alias.html#alias">&lt;Alias&gt;</a></code>es on the other hand,
      are mapped vice-versa:</p>
      <pre class="prettyprint lang-config">Alias "/foo/bar" "/srv/www/uncommon/bar"
      Alias "/foo"     "/srv/www/common/foo"</pre>
      
      <p>The same is true for the <code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code>
      directives:</p>
      <pre class="prettyprint lang-config">ProxyPass "/special-area" "http://special.example.com" smax=5 max=10
      ProxyPass "/" "balancer://mycluster/" stickysession=JSESSIONID|jsessionid nofailover=On</pre>
      
      
      
      <h3><a name="wildcards" id="wildcards">Wildcards and Regular Expressions</a></h3>
      
      <p>The <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>, and
      <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
      directives can each use shell-style wildcard characters as in
      <code>fnmatch</code> from the C standard library.  The character "*"
      matches any sequence of characters, "?" matches any single character,
      and "[<em>seq</em>]" matches any character in <em>seq</em>.  The "/"
      character will not be matched by any wildcard; it must be specified
      explicitly.</p>
      
      <p>If even more flexible matching is required, each
      container has a regular expression (regex) counterpart <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>, and <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code> that allow
      perl-compatible
      <a class="glossarylink" href="./glossary.html#regex" title="see glossary">regular expressions</a>
      to be used in choosing the matches.  But see the section below on
      configuration merging to find out how using regex sections will change
      how directives are applied.</p>
      
      <p>A non-regex wildcard section that changes the configuration of
      all user directories could look as follows:</p>
      
      <pre class="prettyprint lang-config">&lt;Directory "/home/*/public_html"&gt;
          Options Indexes
      &lt;/Directory&gt;</pre>
      
      
      <p>Using regex sections, we can deny access to many types of image files
      at once:</p>
      <pre class="prettyprint lang-config">&lt;FilesMatch "\.(?i:gif|jpe?g|png)$"&gt;
          Require all denied
      &lt;/FilesMatch&gt;</pre>
      
      
      <p>Regular expressions containing <strong>named groups and
      backreferences</strong> are added to the environment with the
      corresponding name in uppercase. This allows elements of filename paths
      and URLs to be referenced from within <a href="expr.html">expressions</a>
      and modules like <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>.</p>
      
      <pre class="prettyprint lang-config">&lt;DirectoryMatch "^/var/www/combined/(?&lt;SITENAME&gt;[^/]+)"&gt;
          require ldap-group "cn=%{env:MATCH_SITENAME},ou=combined,o=Example"
      &lt;/DirectoryMatch&gt;</pre>
      
      
      
      
      <h3><a name="expressions" id="expressions">Boolean expressions</a></h3>
      <p>The <code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code>
      directive change the configuration depending on a condition which can be
      expressed by a boolean expression. For example, the following configuration
      denies access if the HTTP Referer header does not start with
      "http://www.example.com/".</p>
      <pre class="prettyprint lang-config">&lt;If "!(%{HTTP_REFERER} -strmatch 'http://www.example.com/*')"&gt;
          Require all denied
      &lt;/If&gt;</pre>
      
      
      
      
      <h3><a name="whichwhen" id="whichwhen">What to use When</a></h3>
      
      <p>Choosing between filesystem containers and webspace containers is
      actually quite easy.  When applying directives to objects that reside
      in the filesystem always use <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> or <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>.  When applying directives to objects
      that do not reside in the filesystem (such as a webpage generated from
      a database), use <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>.</p>
      
      <p>It is important to never use <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> when trying to restrict
      access to objects in the filesystem.  This is because many
      different webspace locations (URLs) could map to the same filesystem
      location, allowing your restrictions to be circumvented.
      For example, consider the following configuration:</p>
      
      <pre class="prettyprint lang-config">&lt;Location "/dir/"&gt;
          Require all denied
      &lt;/Location&gt;</pre>
      
      
      <p>This works fine if the request is for
      <code>http://yoursite.example.com/dir/</code>.  But what if you are on
      a case-insensitive filesystem?  Then your restriction could be easily
      circumvented by requesting
      <code>http://yoursite.example.com/DIR/</code>.  The <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> directive, in
      contrast, will apply to any content served from that location,
      regardless of how it is called.  (An exception is filesystem links.
      The same directory can be placed in more than one part of the
      filesystem using symbolic links.  The <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> directive will follow the symbolic
      link without resetting the pathname.  Therefore, for the highest level
      of security, symbolic links should be disabled with the appropriate
      <code class="directive"><a href="./mod/core.html#options">Options</a></code> directive.)</p>
      
      <p>If you are, perhaps, thinking that none of this applies to you
      because you use a case-sensitive filesystem, remember that there are
      many other ways to map multiple webspace locations to the same
      filesystem location.  Therefore you should always use the filesystem
      containers when you can.  There is, however, one exception to this
      rule.  Putting configuration restrictions in a <code>&lt;Location
      "/"&gt;</code> section is perfectly safe because this section will apply
      to all requests regardless of the specific URL.</p>
      
      
      <h3><a name="nesting" id="nesting">Nesting of sections</a></h3>
      
      <p>Some section types can be nested inside other section types. On the one
      hand, <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> can be used
      inside <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>.  On
      the other hand, <code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code> can
      be used inside <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>, and <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> sections (but not inside another
      <code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code>). The regex
      counterparts of the named section behave identically.</p>
      
      <p>Nested sections are merged after non-nested sections of the same type.</p>
      
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="virtualhost" id="virtualhost">Virtual Hosts</a></h2>
      
      <p>The <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
      container encloses directives that apply to specific hosts.
      This is useful when serving multiple hosts from the same machine
      with a different configuration for each.  For more information,
      see the <a href="vhosts/">Virtual Host Documentation</a>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="proxy" id="proxy">Proxy</a></h2>
      
      <p>The <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>
      and <code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code>
      containers apply enclosed configuration directives only
      to sites accessed through <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>'s proxy server
      that match the specified URL. For example, the following configuration
      will allow only a subset of clients to access the
      <code>www.example.com</code> website using the proxy server:</p>
      
      <pre class="prettyprint lang-config">&lt;Proxy "http://www.example.com/*"&gt;
          Require host yournetwork.example.com
      &lt;/Proxy&gt;</pre>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="whatwhere" id="whatwhere">What Directives are Allowed?</a></h2>
      
      <p>To find out what directives are allowed in what types of
      configuration sections, check the <a href="mod/directive-dict.html#Context">Context</a> of the directive.
      Everything that is allowed in
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
      sections is also syntactically allowed in
      <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>,
      <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code>,
      <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>,
      and <code class="directive"><a href="./mod/mod_proxy.html#proxymatch">&lt;ProxyMatch&gt;</a></code>
      sections.  There are some exceptions, however:</p>
      
      <ul>
      <li>The <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> directive
      works only in <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
      sections.</li>
      
      <li>The <code>FollowSymLinks</code> and
      <code>SymLinksIfOwnerMatch</code> <code class="directive"><a href="./mod/core.html#options">Options</a></code> work only in <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> sections or
      <code>.htaccess</code> files.</li>
      
      <li>The <code class="directive"><a href="./mod/core.html#options">Options</a></code> directive cannot
      be used in <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>
      and <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>
      sections.</li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="merging" id="merging">How the sections are merged</a></h2>
      
      <p>The configuration sections are applied in a very particular order.
      Since this can have important effects on how configuration directives
      are interpreted, it is important to understand how this works.</p>
      
          <p>The order of merging is:</p>
      
          <ol>
            <li> <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> (except regular expressions)
            and <code>.htaccess</code> done simultaneously (with
            <code>.htaccess</code>, if allowed, overriding
            <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>)</li>
      
            <li><code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>
            (and <code>&lt;Directory "~"&gt;</code>)</li>
      
            <li><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> and <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code> done
            simultaneously</li>
      
            <li><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>
            and <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code> done simultaneously</li>
      
            <li><code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code>
            </li>
      
          </ol>
      
          <p>Some important remarks:</p>
          <ul>
              <li>Apart from <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, within each group the sections are
              processed in the order they appear in the configuration files.
              For example, a request for <em>/foo/bar</em> will match
              <code>&lt;Location "/foo/bar"&gt;</code> and 
              <code>&lt;Location "/foo"&gt;</code> (group 4 in this case):
              both sections will be evaluated
              but in the order they appear in the configuration files.</li>
              <li><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>
              (group 1 above) is processed in the order shortest directory
              component to longest. For example,
              <code>&lt;Directory "/var/web/dir"&gt;</code> will be processed before
              <code>&lt;Directory "/var/web/dir/subdir"&gt;</code>.</li>
              <li>If multiple <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> sections apply
              to the same directory they are processed in the configuration file
              order.</li>
              <li>Configurations included via the <code class="directive"><a href="./mod/core.html#include">Include</a></code> directive will be treated as if
              they were inside the including file at the location of the
              <code class="directive"><a href="./mod/core.html#include">Include</a></code> directive.</li>
              <li>Sections inside <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> sections
              are applied <em>after</em> the corresponding sections outside
              the virtual host definition. This allows virtual hosts to
              override the main server configuration.</li>
              <li>When the request is served by <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>, the
              <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code>
              container takes the place of the <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> container in the processing
              order.</li>
          </ul>
      
          <div class="note"><h3>Technical Note</h3>
            There is actually a
            <code>&lt;Location&gt;</code>/<code>&lt;LocationMatch&gt;</code>
            sequence performed just before the name translation phase
            (where <code>Aliases</code> and <code>DocumentRoots</code>
            are used to map URLs to filenames). The results of this
            sequence are completely thrown away after the translation has
            completed.
          </div>
      
      <h3><a name="relationship-module-configuration" id="relationship-module-configuration">Relationship between modules and configuration sections</a></h3>
          <p>One question that often arises after reading how configuration sections are
          merged is related to how and when directives of specific modules like <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>
          are processed. The answer is not trivial and needs a bit of background. 
          Each httpd module manages its own configuration, and each of its directives in httpd.conf specify one piece 
          of configuration in a particular context. httpd does not execute a command as it is read.</p>
          <p>At runtime, the core of httpd iterates over the defined configuration sections in the order
          described above to determine which ones apply to the current request. When the first section matches, 
          it is considered the current configuration for this request. If a subsequent section matches too, 
          then each module with a directive in either of the sections is given a chance to merge its configuration between the two sections. The result is a third configuration, and the process goes on until all the configuration sections
          are evaluated.</p>
          <p>After the above step, the "real" processing of the HTTP request begins: each module has a chance to run 
          and perform whatever tasks they like. They can retrieve their own final merged configuration from the core
          of the httpd to determine how they should act.</p>
          <p>An example can help to visualize the whole process. The following configuration uses the 
              <code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code> directive of <code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code> to set
              a specific HTTP header. What value will httpd set in the <code>CustomHeaderName</code> header for a request to
              <code>/example/index.html</code> ?
          </p>
          <pre class="prettyprint lang-config">&lt;Directory "/"&gt;
          Header set CustomHeaderName one
          &lt;FilesMatch ".*"&gt;
              Header set CustomHeaderName three
          &lt;/FilesMatch&gt;
      &lt;/Directory&gt;
      
      &lt;Directory "/example"&gt;
          Header set CustomHeaderName two
      &lt;/Directory&gt;</pre>
          
          <ul>
              <li><code class="directive">Directory</code> "/" matches and an initial configuration to set the <code>CustomHeaderName</code> header with the value <code>one</code> is created.</li>
              <li><code class="directive">Directory</code> "/example" matches, and since <code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code> specifies in its code to override in case of a merge, a new configuration is created to set the <code>CustomHeaderName</code> header with the value <code>two</code>.</li>
              <li><code class="directive">FilesMatch</code> ".*" matches and another merge opportunity arises, causing the <code>CustomHeaderName</code> header to be set with the value <code>three</code>.</li>
              <li>Eventually during the next steps of the HTTP request processing <code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code> will be called and it will receive the configuration to set the <code>CustomHeaderName</code> header with the value <code>three</code>. <code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code> normally uses this configuration to perfom its job, namely setting the foo header. This does not mean that a module can't perform a more complex action like discarding directives because not needed or deprecated, etc..</li>
          </ul>
      
          <p>This is true for .htaccess too since they have the same priority as <code class="directive">Directory</code> in the merge order. The important concept to understand is that configuration sections like  <code class="directive">Directory</code> and <code class="directive">FilesMatch</code> are not comparable to module specific directives like <code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code> or <code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> because they operate on different levels.
          </p>
      
      
      <h3><a name="merge-examples" id="merge-examples">Some useful examples</a></h3>
      
      <p>Below is an artificial example to show the order of
      merging. Assuming they all apply to the request, the directives in
      this example will be applied in the order A &gt; B &gt; C &gt; D &gt;
      E.</p>
      
      <pre class="prettyprint lang-config">&lt;Location "/"&gt;
          E
      &lt;/Location&gt;
      
      &lt;Files "f.html"&gt;
          D
      &lt;/Files&gt;
      
      &lt;VirtualHost *&gt;
          &lt;Directory "/a/b"&gt;
              B
          &lt;/Directory&gt;
      &lt;/VirtualHost&gt;
      
      &lt;DirectoryMatch "^.*b$"&gt;
          C
      &lt;/DirectoryMatch&gt;
      
      &lt;Directory "/a/b"&gt;
          A
      &lt;/Directory&gt;</pre>
      
      
      
      <p>For a more concrete example, consider the following.  Regardless of
      any access restrictions placed in <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> sections, the <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> section will be
      evaluated last and will allow unrestricted access to the server.  In
      other words, order of merging is important, so be careful!</p>
      
      <pre class="prettyprint lang-config">&lt;Location "/"&gt;
          Require all granted
      &lt;/Location&gt;
      
      # Whoops!  This &lt;Directory&gt; section will have no effect
      &lt;Directory "/"&gt;
          &lt;RequireAll&gt;
              Require all granted
              Require not host badguy.example.com
          &lt;/RequireAll&gt;
      &lt;/Directory&gt;</pre>
      
      
      
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/sections.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/sections.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sections.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sections.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sections.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/sections.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_4.html.tr.utf8����������������������������������������������0000644�0000000�0000050�00000074165�13447004010�021001� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache HTTP Sunucusu 2.4'te Yeni olan Özellikler - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache HTTP Sunucusu 2.4'te Yeni olan Özellikler</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./en/new_features_2_4.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_4.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./tr/new_features_2_4.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
        <p>Bu belgede Apache HTTP Sunucusunun 2.2 ve 2.4 sürümleri arasındaki
          başlıca farklara değinilmiştir. 2.0 sürümüne göre yeni özellikler için <a href="new_features_2_2.html">Apache 2.2’de Yeni olan Özellikler</a>
          belgesine bakınız.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#core">Çekirdekteki Gelişmeler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#newmods">Yeni Modüller</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#module">Modüllerdeki Gelişmeler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programs">Programlardaki GeliÅŸmeler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#documentation">Belgelendirme</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#developer">Modül Geliştirici Değişiklikleri</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="core" id="core">Çekirdekteki Gelişmeler</a></h2>
          
          <dl>
            <dt>Çalışma anında yüklenebilen MPM'ler</dt>
            <dd>Çok sayıda MPM artık <a href="mpm.html#dynamic">yüklenebilir
              modül</a> olarak derlenebilmektedir. Kullanılacak MPM'in seçimi
              çalışma anında <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code>
              yönergesi üzerinden yapılabilmektedir.</dd>
      
            <dt>Event MPM</dt>
            <dd><a href="mod/event.html">Event MPM</a> artık deneysel değil, ancak
              tam olarak desteklenmiyor.</dd>
      
            <dt>Eşzamansıza destek</dt>
            <dd>MPM'leri ve platformları desteklemek için eşzamansız okuma/yazmaya
              destek iyileÅŸtirildi.</dd>
      
            <dt>Modul bazında ve dizin bazına LogLevel yapılandırması</dt>
            <dd><code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code> artık her modül ve her
                dizin için yapılandırılabilmektedir. <code>debug</code> log
                seviyesinin üstüne <code>trace1</code>'den <code>trace8</code>'e
                kadar yeni log seviyeleri eklendi.</dd>
      
            <dt>İstek bazında yapılandırma bölümleri</dt>
            <dd><code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code>,
                <code class="directive"><a href="./mod/core.html#elseif">&lt;ElseIf&gt;</a></code>,
                ve <code class="directive"><a href="./mod/core.html#else">&lt;Else&gt;</a></code> bölümleri
                artık HTTP isteklerine dayalı olarak yapılandırılabilmektedir.</dd>
      
            <dt>Genel amaçlı ifade çözümleyici</dt>
            <dd>Yeni ifade çözümleyici
                <code class="directive"><a href="./mod/mod_setenvif.html#setenvifexpr">SetEnvIfExpr</a></code>,
                <code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code>,
                <code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code>,
                <code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code> ve
                benzeri yönergelerde ortak bir sözdizimi kullanarak <a href="expr.html">karmaşık durumlar</a> belirtmeyi mümkün kılmaktadır.
            </dd>
      
            <dt>Milisaniye cinsinden KeepAliveTimeout</dt>
            <dd><code class="directive"><a href="./mod/core.html#keepalivetimeout">KeepAliveTimeout</a></code> milisaniye
              cinsinden belirtmek artık mümkündür.</dd>
      
            <dt>NameVirtualHost yönergesi</dt>
            <dd>Artık gerekmemekte ve kullanımı önerilmemektedir.</dd>
      
            <dt>Yapılandırma geçersizleştirme</dt>
            <dd>Yeni <code class="directive"><a href="./mod/core.html#allowoverridelist">AllowOverrideList</a></code>
                yönergesi <code>.htaccess</code> dosyalarında kullanılabilen
                yönergelerde daha ince ayarlara izin vermektedir.</dd>
      
            <dt>Yapılandırma dosyası değişkenleri</dt>
            <dd>Yapılandırmada değişkenler <code class="directive"><a href="./mod/core.html#define">Define</a></code> yönergesi ile tanımlanabilmekte, böylece aynı
                değer yapılandırmada bir çok yerde kullanılıyorsa daha temiz bir
                görünüm elde edilebilmektedir.</dd>
      
            <dt>Azaltılmış bellek kullanımı</dt>
            <dd>Bir çok yeni özelliğe karşın, 2.4.x'te 2.2.x'e nazaran bellek
              kullanımı azaltılmıştır.</dd>
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="newmods" id="newmods">Yeni Modüller</a></h2>
          
          <dl>
            <dt><code class="module"><a href="./mod/mod_proxy_fcgi.html">mod_proxy_fcgi</a></code></dt>
            <dd><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> için FastCGI Protokolü sağlayıcısı</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_scgi.html">mod_proxy_scgi</a></code></dt>
            <dd><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> için SCGI Protokolü sağlayıcısı</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_express.html">mod_proxy_express</a></code></dt>
            <dd><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> için devingen olarak yapılandırılmış tam
              tersinir vekiller saÄŸlar.</dd>
      
            <dt><code class="module"><a href="./mod/mod_remoteip.html">mod_remoteip</a></code></dt>
            <dd>İstek başlıklarında bir yük dengeleyici veya bir vekil tarafından
              sunulan IP adres listeli bir istek için görünen istemci IP adresi ve
              konak adını değiştirir.</dd>
      
            <dt><code class="module"><a href="./mod/mod_heartmonitor.html">mod_heartmonitor</a></code>,
                <code class="module"><a href="./mod/mod_lbmethod_heartbeat.html">mod_lbmethod_heartbeat</a></code></dt>
            <dd><code class="module"><a href="./mod/mod_proxy_balancer.html">mod_proxy_balancer</a></code> modülünün arka sunuculardaki
              etkin bağlantı sayısı üzerindeki yük dengeleme kararlarına dayalı işlem
              yapmasını sağlar.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_html.html">mod_proxy_html</a></code></dt>
            <dd>Başta bir üçüncü parti modüldü. Arka plandaki sağlayıcının vekil
              istemcileri için geçersiz URL'ler ürettiği tersinir vekil durumlarında
              HTML bağlarının düzeltilmesini sağlar.</dd>
      
            <dt><code class="module"><a href="./mod/mod_sed.html">mod_sed</a></code></dt>
            <dd><code class="module"><a href="./mod/mod_substitute.html">mod_substitute</a></code> modülünün geliştirilmiş hali olup
              yanıt gövdesinin sed'in tüm gücü ile yeniden düzenlenebilmesini
              saÄŸlar.</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_form.html">mod_auth_form</a></code></dt>
            <dd>Formlara dayalı kimlik kanıtlamayı etkinleştirir.</dd>
      
            <dt><code class="module"><a href="./mod/mod_session.html">mod_session</a></code></dt>
            <dd>Çerezleri ve veritabanı deposunu kullanarak istemciler için oturum
              durumunun saklanmasını etkinleştirir.</dd>
      
            <dt><code class="module"><a href="./mod/mod_allowmethods.html">mod_allowmethods</a></code></dt>
            <dd>Kimlik DoÄŸrulama ve Yetkilendirme ile etkileÅŸmeyen belli HTTP
              yöntemlerine sınır koymak için yeni bir modül.</dd>
      
            <dt><code class="module"><a href="./mod/mod_lua.html">mod_lua</a></code></dt>
            <dd>Küçük iş mantıksal işlevleri ve yapılandırması için httpd içine <a href="http://www.lua.org/">Lua</a> dilini gömer.</dd>
      
            <dt><code class="module"><a href="./mod/mod_log_debug.html">mod_log_debug</a></code></dt>
            <dd>İstek işlemlerinin farklı aşamalarına özelleştirilebilir hata
              ayıklama günlüğü eklenmesini sağlar.</dd>
      
            <dt><code class="module"><a href="./mod/mod_buffer.html">mod_buffer</a></code></dt>
            <dd>Girdi ve çıktı süzgeç yığıtlarına tampon bellek sağlar.</dd>
      
            <dt><code class="module"><a href="./mod/mod_data.html">mod_data</a></code></dt>
            <dd>Yanıt gövdesini bir RFC2397 veri URL'sine dönüştürür.</dd>
      
            <dt><code class="module"><a href="./mod/mod_ratelimit.html">mod_ratelimit</a></code></dt>
            <dd>İstemciler için band genişliği oranında sınırlama sağlar.</dd>
      
            <dt><code class="module"><a href="./mod/mod_request.html">mod_request</a></code></dt>
            <dd>Kullanılabilir HTTP istek gövdelerini yapmak ve elde etmek için
              Süzgeçleri sağlar.</dd>
      
            <dt><code class="module"><a href="./mod/mod_reflector.html">mod_reflector</a></code></dt>
            <dd>Çıktı süzgeci yığıtı üzerinden bir yanıt olarak bir istek gövdesinin
              yansısını sağlar.</dd>
      
            <dt><code class="module"><a href="./mod/mod_slotmem_shm.html">mod_slotmem_shm</a></code></dt>
            <dd>Yuva temelli bir paylaşımlı bellek sağlayıcı sağlar (scoreboard
              olarak da bilinir).</dd>
      
            <dt><code class="module"><a href="./mod/mod_xml2enc.html">mod_xml2enc</a></code></dt>
            <dd>Başta bir üçüncü parti modüldü. libxml2 temelli süzgeç modüllerinde
              i18n'i destekler.</dd>
      
            <dt><code class="module"><a href="./mod/mod_macro.html">mod_macro</a></code> (2.4.5'den itibaren kullanılabilir)</dt>
            <dd>Yapılandırma dosyalarında makro kullanımını sağlar.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_wstunnel.html">mod_proxy_wstunnel</a></code> (2.4.5'den itibaren kullanılabilir)</dt>
            <dd>Web-socket tünelleri için destek.</dd>
      
            <dt><code class="module"><a href="./mod/mod_authnz_fcgi.html">mod_authnz_fcgi</a></code> (2.4.10'dan itibaren kullanılabilir)</dt>
            <dd>Kimlik kanıtlama ve/veya istemcileri yetkilendirmek için FastCGI
              yetkilendirme uygulamalarını etkinleştirir.</dd>
      
            <dt><code class="module"><a href="./mod/mod_http2.html">mod_http2</a></code> (2.4.17'den itibaren kullanılabilir)</dt>
            <dd>HTTP/2 aktarım katmanı desteği.</dd>
            
            <dt><code class="module"><a href="./mod/mod_proxy_http2.html">mod_proxy_http2</a></code> (2.4.19'dan itibaren kullanılabilir)</dt>
            <dd><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> için HTTP/2 Protokol arayüzü</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_hcheck.html">mod_proxy_hcheck</a></code> (2.4.21'den itibaren
              kullanılabilir)</dt>
            <dd>Uzak vekil artuç sunucuları için bağımsız özdevinimli sağlık sınamalarını 
              destekler.</dd>
            
            <dt><code class="module"><a href="./mod/mod_brotli.html">mod_brotli</a></code> (2.4.26'dan itibaren kullanılabilir)</dt>
            <dd>Brotli sıkıştırma algoritması desteği.</dd>
      
            <dt><code class="module"><a href="./mod/mod_md.html">mod_md</a></code> (2.4.30'dan itibaren kullanılabilir)</dt>
            <dd>Sertifika sağlama işlemi için ACME protokolü desteği.</dd>
      
            <dt><code class="module"><a href="./mod/mod_socache_redis.html">mod_socache_redis</a></code> (2.4.39'dan itibaren kullanılabilir)</dt>
            <dd><a href="http://redis.io/">Redis</a> tabanlı paylaşımlı nesne arabelleği 
              sağlayıcı için destek.</dd>
            
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="module" id="module">Modüllerdeki Gelişmeler</a></h2>
          
          <dl>
            <dt><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></dt>
      
            <dd><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> bir istemci sertifikasının doğrulama
              durumunu sınamak için bir OCSP sunucusunu kullanmak üzere
              yapılandırılabilir. Öntanımlı yanıtlayıcı, istemci sertifikasının
              kendisinde tasarlanmış yanıtlayıcının tercih edilip edilmeyeceği
              kararına bağlı olarak yapılandırılabilir.</dd>
      
            <dd><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code>, ayrıca, sunucunun istemciyle anlaşma
              sırasında kendi sertifikasının OCSP doğrulamasını umursamazca sağlayıp
              aktardığı durumda OCSP zımbalamasını da destekler.</dd>
      
            <dd><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code>, sunucular arasında SSL Oturumu verisini
              memcached üzerinden paylaşmak üzere yapılandırılabilir.</dd>
      
            <dd>RSA ve DSA'ya ek olarak EC anahtarları da artık desteklenmektedir.
            </dd>
      
            <dd>TLS-SRP için destek (2.4.4 itibariyle kullanılabilir).</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dt>
      
            <dd><code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code> yönergesi bir
              <code class="directive"><a href="./mod/core.html#location">Location</a></code> veya
              <code class="directive"><a href="./mod/core.html#locationmatch">LocationMatch</a></code> bloku içinde en
              verimli şekilde yapılandırılabilir ve büyük sayıların varlığı durumunda
              geleneksel iki değiştirgeli sözdiziminin de üzerinde belirgin bir
              başarım artışı sağlar.</dd>
      
            <dd>Vekil istekleri için kullanılan kaynak adresi artık
              yapılandırılabilmektedir.</dd>
      
            <dd>Artalanda Unix alan soketleri için destek (2.4.7 itibariyle
              kullanılabilir).</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_balancer.html">mod_proxy_balancer</a></code></dt>
      
            <dd>Dengeleme yöneticisi üzerinden BalancerMembers için daha fazla
              çalışma anı yapılandırması</dd>
      
            <dd>Çalışma anında dengeleme yöneticisi üzerinden başka BalancerMembers
              eklenebilir.</dd>
      
            <dd>Çalışma anı yapılandırmasına yönelik dengeleyici değiştirgeleri</dd>
      
            <dd>BalancerMembers için 'Drain' değeri belirtilebilir; böylece sadece
              mevcut yapışık oturumlara yanıt verirler ve bunların güzellikle hattan
              alınması mümkün olur.</dd>
      
            <dd>Balancer ayarları sunucu yeniden başlatılssa bile kalıcı olabilir.
              </dd>
      
            <dt><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code></dt>
      
            <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> CACHE süzgeci, arabellekleme üzerinde daha
              hassas denetim sağlamak için istenirse süzgeç zincirinin belli bir
              noktasına yerleştirilebilmektedir.</dd>
      
            <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> artık HEAD isteklerini
              arabellekleyebiliyor.</dd>
      
            <dd>Mümkün olduğunda, <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> yönergeleri sunucu
              bazında değil, dizin bazında belirtilebiliyor.</dd>
      
            <dd>Arabellekli URL'lerin temel URL'si özelleştirilebiliyor; böylece
               arabelleğin bir bölümü aynı uç URL önekini paylaşabiliyor.</dd>
      
            <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>, ardalanda bir sağlayıcının olmadığı
              durumda (5xx hatası), arabelleklenmiş bayat içeriği sunabiliyor.</dd>
      
            <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> artık bir X-Cache başlığına bir
              HIT/MISS/REVALIDATE yerleÅŸtirebiliyor.</dd>
      
            <dt><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></dt>
            <dd>Bir hata durumunda öntanımlı hata dizgisi yerine bir hata sayfası
              sunmayı sağlayan 'onerror' özniteliği için 'include' elemanı içinde
              destek.</dd>
      
            <dt><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code>, <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>,
                <code class="module"><a href="./mod/mod_isapi.html">mod_isapi</a></code>, ...</dt>
            <dd>Başlıkların ortam değişkenlerine dönüşümü, başlık zerki yoluyla bazı
              olası karşı-site-betik saldırılarının hafifletilmesinden önce daha
              hızlı ve doğru yapılmaktadır. Geçersiz karakterler (altçizgiler dahil)
              içeren başlıklar artık sessizce bırakılmaktadır.<a href="env.html">Apache'deki Ortam değişkenleri</a>, böyle başlıkları
              gerektiren bozulmuş meşru istemcilerin çevresinden dolanabilen
              göstericilere sahiptir. (Bu durum, bu değişkenleri kullanan tüm
              modülleri etkiler.)</dd>
      
            <dt><code class="module"><a href="./mod/mod_authz_core.html">mod_authz_core</a></code> Yetkilendirme Kuralları
              Taşıyıcıları</dt>
      
            <dd>Gelişkin yetkilendirme kuralları artık <code class="directive"><a href="./mod/mod_authz_core.html#require">Require</a></code> yönergesi ve <code class="directive"><a href="./mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code> gibi
              ilgili taşıyıcı yönergeler kullanılarak belirtilebilmektedir.</dd>
      
            <dt><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></dt>
            <dd><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> bildik yeniden yazma senaryolarını
              basitleştirmek için <code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> yönergesine
              <code>[QSD]</code> (Query String Discard=sorgu dizgisini iptal) ve
              <code>[END]</code> seçeneklerini sağlamaktadır.</dd>
            <dd><code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code> içinde
              karmaşık mantıksal ifadeler kullanımını mümkün kılmaktadır.</dd>
            <dd>SQL sorgularının <code class="directive"><a href="./mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> işlevleri olarak
              kullanılması sağlanmıştır.</dd>
      
            <dt><code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code>, <code class="module"><a href="./mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></dt>
            <dd><code class="module"><a href="./mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code> kümelenmiş gruplara destek sağlar.
            </dd>
            <dd><code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code> zaman aşımlarını işleme sokabilmek için
                <code class="directive"><a href="./mod/mod_ldap.html#ldapconnectionpoolttl">LDAPConnectionPoolTTL</a></code>,
                <code class="directive"><a href="./mod/mod_ldap.html#ldaptimeout">LDAPTimeout</a></code> ve birtakım
                başka geliştirmeler sahiptir. Özellikle, bir LDAP sunucusunun boşta
                kalmış bağlantılarını bıraktıran bir durumsal güvenlik duvarı
                varlığında gerekli ayarlamaları yapmak için kullanışlıdır.</dd>
            <dd><code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code>, artık, LDAP araç kiti kullanarak sağlanan
              hata ayıklama bilgisini günlüklemek için <code class="directive"><a href="./mod/mod_ldap.html#ldaplibrarydebug">LDAPLibraryDebug</a></code> yönergesini
              içermektedir.</dd>
      
            <dt><code class="module"><a href="./mod/mod_info.html">mod_info</a></code></dt>
            <dd><code class="module"><a href="./mod/mod_info.html">mod_info</a></code> önceden çözümlenmiş yapılandırmayı artık
              sunucunun başlatılması sırasında standart çıktıya
              dökümleyebilmektedir.</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_basic.html">mod_auth_basic</a></code></dt>
            <dd>Temel kimlik kanıtlamayı taklit eden yeni temel mekanizma
              (2.4.5 itibariyle kullanılabilmektedir).</dd>
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="programs" id="programs">Programlardaki GeliÅŸmeler</a></h2>
          
          <dl>
              <dt><code class="program"><a href="./programs/fcgistarter.html">fcgistarter</a></code></dt>
              <dd>Yeni FastCGI artalan sunucusu başlatma aracı</dd>
      
              <dt><code class="program"><a href="./programs/htcacheclean.html">htcacheclean</a></code></dt>
              <dd>Arabellekli URL'ler, istenirse metadata'yı da dahil ederek
                listelenebilmektedir.</dd>
              <dd>Bazı URL'ler arabellekten tek tek silinebilmektedir.</dd>
              <dd>Dosya boyutları belirtilen blok boyutuna yukarı doğru
                yuvarlanabilmekte, böylece dosya boyutu sınırları diskteki gerçek
                boyutlarla daha iyi eÅŸlenebilmektedir.</dd>
              <dd>Arabellek boyutu artık, diskteki dosyaların boyutuna göre bir
                sınıra ek olarak veya bunun yerine dosya düğümü sayısı ile
                sınırlanabilmektedir.</dd>
      
              <dt><code class="program"><a href="./programs/rotatelogs.html">rotatelogs</a></code></dt>
              <dd>Artık geçerli günlük dosyasına bir bağ oluşturulabiliyor.</dd>
              <dd>Artık özel bir döndürme sonrası betiği çalıştırılabiliyor.</dd>
      
            <dt><code class="program"><a href="./programs/htpasswd.html">htpasswd</a></code>, <code class="program"><a href="./programs/htdbm.html">htdbm</a></code></dt>
            <dd>Bcrypt algoritması için destek (2.4.4 itibariyle
              kullanılabilmektedir).</dd>
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="documentation" id="documentation">Belgelendirme</a></h2>
          
          <dl>
              <dt>mod_rewrite</dt>
              <dd><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> belgeleri, yeniden düzenlenerek,
                genel kullanıma ve örneklere odaklı olarak ve diğer çözümlerin hangi
                durumlarda daha uygun olduğu da gösterilerek hemen hemen tamamen
                yeniden yazıldı. <a href="rewrite/">Yeniden Yazma Kılavuzu</a> artık
                bir sayfa olmaktan çıkıp, çok daha ayrıntılı ve daha iyi düzenlenmiş
                bir bölüm haline geldi.</dd>
      
              <dt>mod_ssl</dt>
              <dd><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> belgeleri, evvelki teknik ayrıntılara ek
                olarak başlarken seviyesinde daha fazla örnekle büyük oranda
                geniÅŸletildi.</dd>
      
              <dt>Önbellek Kullanım Kılavuzu</dt>
              <dd><a href="caching.html">Önbellek Kullanım Kılavuzu</a>
                <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> tarafından sağlanan RFC2616 HTTP/1.1
                önbellekleme özellikleri arasıda daha iyi ayrım yapılabilmesi için ve
                <a href="socache.html">socache</a> arayüzü ile sağlanan soysal
                anahtar/değer önbelleklemesi yanında <code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code>
                gibi mekanizmalarla sağlanan özelleştirilebilir arabelleklemeyi de
                kapsamak üzere yeniden yazıldı.</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="developer" id="developer">Modül Geliştirici Değişiklikleri</a></h2>
          
          <dl>
            <dt>Yapılandırma Denetleme Kancası Eklendi</dt>
      
            <dd>Yeni bir kanca, <code>check_config</code> kancası,
              <code>pre_config</code> ve <code>open_logs</code> kancaları arasında
              çalışmak üzere eklendi. Ayrıca, <code class="program"><a href="./programs/httpd.html">httpd</a></code>'ye
              <code>-t</code> seçeneği verildiğinde <code>test_config</code>
              kancasından önce çalışır. <code>check_config</code> kancası, modüllerin
              karşılıklı bağımlı yapılandırma yönergesi değerlerini yeniden
              yoklamasını ve iletiler konsola hala günlüklenebiliyorken bunların
              ayarlanabilmesini saÄŸlar. Temel <code>open_logs</code> kanca iÅŸlevi
              konsol çıktısını hata günlüğüne yönlendirmeden önce hatalı yapılandırma
              sorunlarına karşı kullanıcı uyarılabilir.</dd>
      
            <dt>İfade Çözümleyici Eklendi</dt>
      
            <dd>Artık genel amaçlı bir ifade çözümleyicimiz var. API
              <var>ap_expr.h</var> içinde incelenebilir. Evvelce
              <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> içinde gerçeklenmiş olan ifade çözümleyiciden
              esinlenildi.</dd>
      
            <dt>Yetkilendirme Kuralları Taşıyıcıları</dt>
      
            <dd>Yetkilendirme modülleri, <code class="directive"><a href="./mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code> gibi gelişmiş yetkilendirme
              kuralı taşıyıcılarını desteklemek için ap_register_auth_provider()
              üzerinden artık bir sağlayıcı olarak çalıştırılabilmektedir.</dd>
      
            <dt>Küçük Nesne Arabellekleme Arayüzü</dt>
      
            <dd><var>ap_socache.h</var>, evvelki <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> oturum
              arabelleği gerçeklenimine dayalı olarak küçük veri nesnelerini
              arabelleklemek için sağlayıcı temelli bir arayüz ortaya koyar.
              Paylaşımlı bellek çevrimsel tamponu kullanan sağlayıcılar, disk bazlı
              dbm dosyaları ve memcache ile dağıtılan arabellekler şu an
              desteklenmektedir.</dd>
      
            <dt>Arabellek Durum Kancası Eklendi</dt>
      
            <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> modülü artık, arabellekleme kararı bilinir
              olduğunda çağrılan yeni bir <code>cache_status</code> kancası içeriyor.
              Öntanımlı gerçeklenim, yanıta istemlik bir <code>X-Cache</code> ve
              <code>X-Cache-Detail</code> ekleyebilmektedir.</dd>
          </dl>
      
          <p>GeliÅŸtirici belgeleri <a href="developer/new_api_2_4.html">API
            değişikliklerinin ayrıntılı bir listesini</a> içermektedir.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./en/new_features_2_4.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_4.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./tr/new_features_2_4.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/new_features_2_4.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/logs.html.ko.euc-kr��������������������������������������������������������0000644�0000000�0000050�00000072037�13412755316�017110� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>·Î±×ÆÄÀÏ - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>·Î±×ÆÄÀÏ</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/logs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/logs.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/logs.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/logs.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/logs.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p>È¿À²ÀûÀ¸·Î À¥¼­¹ö¸¦ °ü¸®ÇÏ·Á¸é ¹ß»ýÇÏ´Â ¹®Á¦¿Í ÇÔ²² ¼­¹öÀÇ
          Ȱµ¿°ú ¼º´É¿¡ ´ëÇØ ¾Ë¾Æ¾ß ÇÑ´Ù. ¾ÆÆÄÄ¡ À¥¼­¹ö´Â ¸Å¿ì Á¾ÇÕÀûÀ̰í
          À¯¿¬ÇÑ ·Î±× ±â´ÉÀ» Á¦°øÇÑ´Ù. ÀÌ ¹®¼­´Â ·Î±× ±â´ÉÀ» ¼³Á¤ÇÏ´Â
          ¹æ¹ý°ú ·Î±×¿¡ µé¾î°¥ ³»¿ëÀ» ¼³¸íÇÑ´Ù.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#security">º¸¾È °æ°í</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#errorlog">¿À·ù ·Î±× (Error Log)</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#accesslog">Á¢±Ù ·Î±× (Access Log)</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#rotation">·Î±× ¼øÈ¯ (Log Rotation)</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#piped">·Î±×¸¦ ÆÄÀÌÇÁ·Î º¸³»±â</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#virtualhost">°¡»óÈ£½ºÆ®</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#other">´Ù¸¥ ·Î±×ÆÄÀÏ</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">º¸¾È °æ°í</a></h2>
          
      
          <p>´©±º°¡¿¡°Ô ¾ÆÆÄÄ¡ÀÇ ·Î±×ÆÄÀÏÀÌ ÀÖ´Â µð·ºÅ丮¿¡ ¾²±â±ÇÇÑÀÌ
          ÀÖ´Ù¸é (º¸Åë root) ¼­¹ö¸¦ ½ÇÇàÇÏ´Â uid¸¦ °ÅÀÇ È®½ÇÈ÷ ¾òÀ»
          ¼ö ÀÖ´Ù. À̸¦ °í·ÁÇÏÁö¾Ê°í ·Î±×°¡ ÀúÀåµÈ µð·ºÅ丮¿¡ ¾²±â±ÇÇÑÀ»
          ÁÖÁö <em>¸¶¶ó</em>. ÀÚ¼¼ÇÑ ³»¿ëÀº <a href="misc/security_tips.html">º¸¾È ÆÁ</a> ¹®¼­¸¦ Âü°íÇ϶ó.</p>
      
          <p>¶Ç, Ŭ¶óÀÌ¾ðÆ®°¡ Á¦°øÇÑ Á¤º¸´Â ·Î±×ÆÄÀÏ¿¡ °ÅÀÇ ±×´ë·Î
          ±â·ÏµÈ´Ù. ±×·¡¼­ ¾ÇÀǰ¡ Àִ Ŭ¶óÀÌ¾ðÆ®°¡ ·Î±×ÆÄÀÏ¿¡ Á¦¾î¹®ÀÚ¸¦
          ³ÖÀ» ¼ö ÀÖÀ¸¹Ç·Î, ·Î±×¸¦ ´Ù·ê¶§´Â ÁÖÀÇÇØ¾ß ÇÑ´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="errorlog" id="errorlog">¿À·ù ·Î±× (Error Log)</a></h2>
          
      
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code></li><li><code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code></li></ul></td></tr></table>
      
          <p><code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code> Áö½Ã¾î´Â
          °¡Àå Áß¿äÇÑ ·Î±×ÆÄÀÏÀÎ ¼­¹ö ¿À·ù ·Î±×ÀÇ À̸§°ú À§Ä¡¸¦ ÁöÁ¤ÇÑ´Ù.
          ¾ÆÆÄÄ¡ À¥¼­¹ö´Â ÀÌ ÆÄÀÏ¿¡ Áø´ÜÁ¤º¸¿Í ¿äûÀ» ó¸®ÇÏ´Â µµÁß
          ¹ß»ýÇÑ ¿À·ù¸¦ ±â·ÏÇÑ´Ù. ¼­¹ö°¡ ½ÃÀÛÇϰųª µ¿ÀÛÇϴµ¥ ¹®Á¦°¡
          ÀÖ´Ù¸é ¹«¾ùÀÌ À߸øµÇ¾ú°í ¶§¶§·Î ¾î¶»°Ô °íÄ¡´ÂÁö¸¦ ¾Ë·ÁÁÖ´Â
          À̰÷À» °¡Àå ¸ÕÀú »ìÆìºÁ¾ß ÇÑ´Ù.</p>
      
          <p>¿À·ù ·Î±×´Â º¸Åë (ÀüÇüÀûÀ¸·Î À¯´Ð½º ½Ã½ºÅÛ¿¡¼­´Â
          <code>error_log</code>, À©µµ¿ìÁî¿Í OS/2¿¡¼­´Â
          <code>error.log</code>) ÆÄÀÏ¿¡ ±â·ÏµÈ´Ù. À¯´Ð½º ½Ã½ºÅÛ¿¡¼­
          ¼­¹ö´Â ¿À·ù¸¦ <code>syslog</code>³ª <a href="#piped">ÆÄÀÌÇÁ¸¦
          »ç¿ëÇÏ¿© ´Ù¸¥ ÇÁ·Î±×·¥</a>À¸·Î º¸³¾ ¼öµµ ÀÖ´Ù.</p>
      
          <p>¿À·ù ·Î±×ÀÇ Çü½ÄÀº »ó´ëÀûÀ¸·Î ÀÚÀ¯·Ó°í ÀÚ¼¼ÇÏ´Ù. ±×·¯³ª
          ´ëºÎºÐÀÇ ¿À·ù ·Î±× Ç׸ñ¿¡ °øÅëÀûÀ¸·Î ³ª¿À´Â Á¤º¸°¡ ÀÖ´Ù.
          ¿¹¸¦ µé¾î, Ç׸ñÀº º¸Åë ´ÙÀ½°ú °°´Ù.</p>
      
          <div class="example"><p><code>
            [Wed Oct 11 14:32:52 2000] [error] [client 127.0.0.1]
            client denied by server configuration:
            /export/home/live/ap/htdocs/test
          </code></p></div>
      
          <p>·Î±× Ç׸ñ¿¡¼­ ù¹øÂ° Ç׸ñÀº ³¯Â¥¿Í ½Ã°£ÀÌ´Ù. µÎ¹øÂ°
          Ç׸ñÀº º¸°íÇÏ´Â ¿À·ùÀÇ ½É°¢¼ºÀ» ³ªÅ¸³½´Ù. <code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code> Áö½Ã¾î·Î ¿À·ù ·Î±×¿¡
          ±â·ÏµÇ´Â ¿À·ùÀÇ ½É°¢¼ºÀ» Á¦ÇÑÇÒ ¼ö ÀÖ´Ù. ¼¼¹øÂ° Ç׸ñÀº
          ¿À·ù¸¦ ¹ß»ýÇÑ Å¬¶óÀ̾ðÆ®ÀÇ IP ÁÖ¼ÒÀÌ´Ù. ÀÌ ´ÙÀ½ºÎÅÍ ¿À·ù¹®ÀÌ
          ³ª¿À¸ç, ÀÌ °æ¿ì ¼­¹ö°¡ Ŭ¶óÀ̾ðÆ®ÀÇ Á¢±ÙÀ» °ÅºÎÇϵµ·Ï
          ¼³Á¤µÇ¾ú´Ù°í ³ª¿ÍÀÖ´Ù. ¿äûÇÑ ¹®¼­ÀÇ (À¥ °æ·Î°¡ ¾Æ´Ñ)
          ÆÄÀϽýºÅÛ °æ·Îµµ º¸ÀδÙ.</p>
      
          <p>¿À·ù ·Î±×¿¡´Â ¸Å¿ì ´Ù¾çÇÑ Á¾·ùÀÇ ¹®±¸°¡ ³ª¿Ã ¼ö ÀÖ´Ù.
          ´ëºÎºÐÀº À§¿Í ºñ½ÁÇÏ´Ù. CGI ½ºÅ©¸³Æ®ÀÇ µð¹ö±ë Ãâ·Âµµ ¿À·ù
          ·Î±×¿¡ ±â·ÏµÈ´Ù. CGI ½ºÅ©¸³Æ®°¡ <code>stderr</code>¿¡ ¾´
          Á¤º¸´Â ±×´ë·Î ¿À·ù ·Î±×·Î º¹»çµÈ´Ù.</p>
      
          <p>¿À·ù ·Î±×¿¡ Á¤º¸¸¦ Ãß°¡Çϰ¡³ª »ý·«ÇÒ ¼ö ¾ø´Ù. ±×·¯³ª
          ¿äû¿¡ ´ëÇÑ ¿À·ù ·Î±×ÀÇ °æ¿ì <a href="#accesslog">Á¢±Ù
          ·Î±×</a>¿¡µµ ´ëÀÀÇÏ´Â Ç׸ñÀÌ »ý±ä´Ù. ¿¹¸¦ µé¾î, À§ÀÇ °æ¿ì
          »óÅÂÄڵ尡 403ÀÎ Á¢±Ù ·Î±× Ç׸ñÀÌ »ý±ä´Ù. Á¢±Ù ·Î±×´Â
          »ç¿ëÀÚÁ¤ÀÇÇÒ ¼ö ÀÖÀ¸¹Ç·Î ÀÌ ÆÄÀÏÀ» Âü°íÇÏ¿© ¿À·ù »óȲ¿¡
          ´ëÇÑ Ãß°¡Á¤º¸¸¦ ¾òÀ» ¼ö ÀÖ´Ù.</p>
      
          <p>°Ë»çÇÒ¶§ ¾î¶² ¹®Á¦°¡ »ý±â´ÂÁö ¿À·ù ·Î±×¸¦ °è¼Ó »ìÆìº¸´Â
          °ÍÀÌ ÁÁ´Ù. À¯´Ð½º ½Ã½ºÅÛ¿¡¼­ ´ÙÀ½°ú °°ÀÌ ÇÑ´Ù:</p>
      
          <div class="example"><p><code>
            tail -f error_log
          </code></p></div>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="accesslog" id="accesslog">Á¢±Ù ·Î±× (Access Log)</a></h2>
          
      
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_log_config.html">mod_log_config</a></code></li><li><code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code></li><li><code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code></li></ul></td></tr></table>
      
          <p>¼­¹ö Á¢±Ù ·Î±×´Â ¼­¹ö°¡ ó¸®ÇÏ´Â ¸ðµç ¿äûÀ» ±â·ÏÇÑ´Ù.
          <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code>
          Áö½Ã¾î´Â Á¢±Ù ·Î±×ÀÇ À§Ä¡¿Í ³»¿ëÀ» ÁöÁ¤ÇÑ´Ù. <code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code> Áö½Ã¾î¸¦
          »ç¿ëÇÏ¿© ·Î±×¿¡ Æ÷ÇÔÇÒ ³»¿ëÀ» ½±°Ô ¼±ÅÃÇÒ ¼ö ÀÖ´Ù. ÀÌ ÀýÀº
          ¼­¹ö°¡ Á¢±Ù ·Î±×¿¡ ¾µ ³»¿ëÀ» ¼³Á¤ÇÏ´Â ¹æ¹ýÀ» ¼³¸íÇÑ´Ù.</p>
      
          <p>¹°·Ð Á¢±Ù ·Î±×¿¡ Á¤º¸¸¦ ±â·ÏÇÏ´Â °ÍÀº ·Î±× °ü¸®ÀÇ ½ÃÀÛÀÏ
          »ÓÀÌ´Ù. ´ÙÀ½ ´Ü°è´Â ÀÌ Á¤º¸¸¦ ºÐ¼®ÇÏ¿© À¯¿ëÇÑ Åë°è¸¦ ¸¸µå´Â
          °ÍÀÌ´Ù. ÀÌ ¹®¼­´Â ÀϹÝÀûÀÎ ·Î±× ºÐ¼®¿¡ ´ëÇØ¼­ ´Ù·çÁö ¾ÊÀ¸¸ç,
          ·Î±× ºÐ¼®Àº ½ÇÁ¦ À¥¼­¹ö°¡ ÇÒ ÀÏÀÌ ¾Æ´Ï´Ù. ·Î±× ºÐ¼®¿¡ ´ëÇÑ
          Á¤º¸¿Í ·Î±×¸¦ ºÐ¼®ÇÏ´Â ¼ÒÇÁÆ®¿þ¾î¿¡ ´ëÇØ¼­´Â <a href="http://dmoz.org/Computers/Software/Internet/Site_Management/Log_Analysis/">Open Directory</a>³ª
          Âü°íÇ϶ó.</p>
      
          <p>¾ÆÆÄÄ¡ À¥¼­¹ö´Â ÀÌÀüºÎÅÍ mod_log_referer, mod_log_agent,
          <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code>
          °°Àº ¸ðµâ°ú Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© Á¢±Ù ·Î±×¸¦ ´Ù·ç¾ú´Ù. Áö±ÝÀº
          <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code>
          Áö½Ã¾î°¡ ¿À·¡µÈ Áö½Ã¾îµéÀÇ ¸ðµç ±â´ÉÀ» À̾î¹Þ¾Ò´Ù.</p>
      
          <p>Á¢±Ù ·Î±×ÀÇ Çü½ÄÀº ¸Å¿ì »ç¿ëÀÚÁ¤ÀÇ °¡´ÉÇÏ´Ù. Çü½ÄÀº CÀÇ
          printf(1) Çü½Ä¹®ÀÚ¿­°ú ¸Å¿ì À¯»çÇÑ Çü½Ä¹®ÀÚ¿­À» »ç¿ëÇÏ¿©
          ÁöÁ¤ÇÑ´Ù. ´ÙÀ½ Àý¿¡ ¿¹¸¦ µé¾ú´Ù. Çü½Ä¹®ÀÚ¿­¿¡ »ç¿ë°¡´ÉÇÑ
          ¸ðµç ³»¿ëÀ» ¾Ë·Á¸é <code class="module"><a href="./mod/mod_log_config.html">mod_log_config</a></code> <a href="mod/mod_log_config.html#formats">Çü½Ä¹®ÀÚ¿­</a>À»
          Âü°íÇ϶ó.</p>
      
          <h3><a name="common" id="common">Common ·Î±× Çü½Ä</a></h3>
            
      
            <p>Á¢±Ù ·Î±×ÀÇ ÀüÇüÀûÀÎ ¼³Á¤Àº ´ÙÀ½°ú °°´Ù.</p>
      
            <div class="example"><p><code>
              LogFormat "%h %l %u %t \"%r\" %&gt;s %b" common<br />
               CustomLog logs/access_log common
            </code></p></div>
      
            <p>±×·¯¸é ÁöÁ¤ÇÑ ·Î±× Çü½Ä¹®ÀÚ¿­À» <em>º°¸í</em>
            <code>common</code>À¸·Î Á¤ÀÇÇÑ´Ù. Çü½Ä¹®ÀÚ¿­Àº ÆÛ¼¾Æ®
            Áö½Ã¾îµé·Î ±¸¼ºµÇ¸ç, °¢°¢Àº ¾î¶² Á¤º¸¸¦ ±â·ÏÇÒÁö ¾Ë¸°´Ù.
            Çü½Ä¹®ÀÚ¿­¿¡ ÀÏ¹Ý ¹®ÀÚ¸¦ ÀûÀ¸¸é ±×´ë·Î ·Î±×¿¡ Ãâ·ÂµÈ´Ù.
            µû¿ÈÇ¥ ¹®ÀÚ(<code>"</code>)¸¦ Ãâ·ÂÇÏ°í ½Í´Ù¸é ¹é½½·¡½¬¸¦
            ¾Õ¿¡ ºÙ¿©¼­ Çü½Ä¹®ÀÚ¿­ÀÇ ³¡ÀÌ ¾Æ´ÔÀ» Ç¥½ÃÇÑ´Ù. Çü½Ä¹®ÀÚ¿­¿¡
            ÁÙ¹Ù²Þ "<code>\n</code>", ÅÇ "<code>\t</code>"¿Í °°Àº
            Ư¼ö Á¶Àý¹®ÀÚ¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù.</p>
      
            <p><code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code>
            Áö½Ã¾î´Â Á¤ÀÇÇÑ <em>º°¸í</em>À» »ç¿ëÇÏ´Â »õ·Î¿î ·Î±×ÆÄÀÏÀ»
            ¸¸µç´Ù. Á¢±Ù ·Î±×ÀÇ ÆÄÀϸíÀÌ ½½·¡½¬·Î ½ÃÀÛÇÏÁö¾ÊÀ¸¸é
            <code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code>ÀÇ »ó´ë°æ·ÎÀÌ´Ù.</p>
      
            <p>¾ÕÀÇ ¼³Á¤Àº °øÅë·Î±×Çü½Ä(Common Log Format, CLF)À̶ó´Â
            Çü½ÄÀ¸·Î ·Î±× Ç׸ñÀ» ±â·ÏÇÑ´Ù. ¿©·¯ ´Ù¸¥ À¥¼­¹öµéµµ ÀÌ·±
            Ç¥ÁØ Çü½ÄÀ¸·Î ·Î±×¸¦ ¸¸µé¸ç, ¿©·¯ ·Î±× ºÐ¼® ÇÁ·Î±×·¥¿¡¼­
            ÀÐÀ» ¼ö ÀÖ´Ù.  CLF·Î ¸¸µç ·Î±×ÆÄÀÏ Ç׸ñÀº ´ÙÀ½°ú °°´Ù:</p>
      
            <div class="example"><p><code>
              127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET
              /apache_pb.gif HTTP/1.0" 200 2326
            </code></p></div>
      
            <p>ÀÌÁ¦ ·Î±× Ç׸ñÀÇ °¢ ºÎºÐÀ» ¼³¸íÇÑ´Ù.</p>
      
            <dl>
              <dt><code>127.0.0.1</code> (<code>%h</code>)</dt>
      
              <dd>¼­¹ö¿¡ ¿äûÀ» ÇÑ Å¬¶óÀ̾ðÆ®(¿ø°Ý È£½ºÆ®)ÀÇ IP
              ÁÖ¼ÒÀÌ´Ù. <code class="directive"><a href="./mod/core.html#hostnamelookups">HostnameLookups</a></code>°¡
              <code>On</code>À̶ó¸é È£½ºÆ®¸íÀ» ã¾Æ¼­ IP ÁÖ¼Ò ÀÚ¸®¿¡
              ´ë½Å ¾´´Ù. ±×·¯³ª ÀÌ ¼³Á¤Àº ¼­¹ö¸¦ ¸Å¿ì ´À¸®°Ô ÇÒ ¼ö
              ÀÖÀ¸¹Ç·Î ÃßõÇÏÁö ¾Ê´Â´Ù. È£½ºÆ®¸íÀ» ¾Ë·Á¸é ´ë½Å ³ªÁß¿¡
              <a href="programs/logresolve.html">logresolve</a>¿Í
              °°Àº ·Î±×¸¦ ó¸®ÇÏ´Â ÇÁ·Î±×·¥À» »ç¿ëÇÏ´Â °ÍÀÌ ÁÁ´Ù.
              ¿©±â¿¡ ³ª¿Â IP ÁÖ¼Ò´Â »ç¿ëÀÚ°¡ »ç¿ëÇÏ´Â ÄÄÇ»ÅÍ ÁÖ¼Ò°¡
              ¾Æ´Ò ¼ö ÀÖ´Ù. ÇÁ·Ï½Ã ¼­¹ö°¡ »ç¿ëÀÚ¿Í ¼­¹ö»çÀÌ¿¡ Á¸ÀçÇÑ´Ù¸é,
              ¿ø·¡ ÄÄÇ»ÅÍ ÁÖ¼Ò°¡ ¾Æ´Ï¶ó ÇÁ·Ï½ÃÀÇ ÁÖ¼Ò°¡ ±â·ÏµÉ °ÍÀÌ´Ù.</dd>
      
              <dt><code>-</code> (<code>%l</code>)</dt>
      
              <dd>Ãâ·Â¿¡¼­ "»©±â±âÈ£"´Â ¿äûÇÑ Á¤º¸°¡ ¾øÀ½À» ³ªÅ¸³½´Ù.
              ÀÌ °æ¿ì ¿©±â¿¡ ³ª¿Ã Á¤º¸´Â Ŭ¶óÀÌ¾ðÆ® ÄÄÇ»ÅÍÀÇ
              <code>identd</code>°¡ Á¦°øÇÒ Å¬¶óÀ̾ðÆ®ÀÇ RFC 1413
              ½Å¿øÀÌ´Ù. ÀÌ Á¤º¸´Â ¸Å¿ì ¹ÏÀ» ¼ö ¾ø±â¶§¹®¿¡, ±ä¹ÐÈ÷
              °ü¸®µÇ´Â ³»ºÎ ³×Æ®¿÷ÀÌ ¾Æ´Ï¶ó¸é Àý´ë·Î ÀÌ Á¤º¸¸¦ »ç¿ëÇϸé
              ¾ÈµÈ´Ù. <code class="directive"><a href="./mod/core.html#identitycheck">IdentityCheck</a></code>°¡
              <code>On</code>ÀÌ ¾Æ´Ï¶ó¸é ¾ÆÆÄÄ¡ À¥¼­¹ö´Â ÀÌ Á¤º¸¸¦
              ¾Ë¾Æº¸·Á°í ½ÃµµÇÏÁöµµ ¾Ê´Â´Ù.</dd>
      
              <dt><code>frank</code> (<code>%u</code>)</dt>
      
              <dd>ÀÌ´Â HTTP ÀÎÁõÀ¸·Î ¾Ë¾Æ³½ ¹®¼­¸¦ ¿äûÇÑ »ç¿ëÀÚÀÇ
              useridÀÌ´Ù. º¸Åë ÀÌ °ªÀº CGI ½ºÅ©¸³Æ®¿¡°Ô
              <code>REMOTE_USER</code> ȯ°æº¯¼ö·Î ³Ñ°ÜÁø´Ù. ¿äûÀÇ
              »óÅÂÄڵ尡 401À̶ó¸é (¾Æ·¡ Âü°í) »ç¿ëÀÚ°¡ ¾ÆÁ÷ ÀÎÁõÀ»
              °ÅÄ¡Áö ¾Ê¾ÒÀ¸¹Ç·Î ÀÌ °ªÀ» ¹ÏÀ¸¸é ¾ÈµÈ´Ù. ¹®¼­¸¦ ¾ÏÈ£·Î
              º¸È£ÇÏÁö ¾Ê´Â´Ù¸é ÀÌ Ç׸ñÀº ÀÌÀü Ç׸ñ°ú °°ÀÌ
              "<code>-</code>"ÀÌ´Ù.</dd>
      
              <dt><code>[10/Oct/2000:13:55:36 -0700]</code>
              (<code>%t</code>)</dt>
      
              <dd>
                ¼­¹ö°¡ ¿äû󸮸¦ ¸¶Ä£ ½Ã°£.
                Çü½ÄÀº:
      
                <p class="indent">
                  <code>[day/month/year:hour:minute:second zone]<br />
                   day = ¼ýÀÚ 2°³<br />
                   month = ¼ýÀÚ 3°³<br />
                   year = ¼ýÀÚ 4°³<br />
                   hour = ¼ýÀÚ 2°³<br />
                   minute = ¼ýÀÚ 2°³<br />
                   second = ¼ýÀÚ 2°³<br />
                   zone = (`+' | `-') ¼ýÀÚ 4°³</code>
                </p>
                ·Î±× Çü½Ä¹®ÀÚ¿­¿¡ <code>%{format}t</code>¸¦ »ç¿ëÇÏ¿©
                ´Ù¸¥ Çü½ÄÀ¸·Î ½Ã°£À» Ãâ·ÂÇÒ ¼ö ÀÖ´Ù. <code>format</code>Àº
                C Ç¥ÁØ ¶óÀ̺귯¸®ÀÇ <code>strftime(3)</code>°ú °°´Ù.
              </dd>
      
              <dt><code>"GET /apache_pb.gif HTTP/1.0"</code>
              (<code>\"%r\"</code>)</dt>
      
              <dd>Ŭ¶óÀ̾ðÆ®ÀÇ ¿äûÁÙÀÌ ½Öµû¿ÈÇ¥·Î ¹­¿©ÀÖ´Ù. ¿äûÁÙÀº
              ¸Å¿ì À¯¿ëÇÑ Á¤º¸¸¦ ´ã°í ÀÖ´Ù. ù°, Ŭ¶óÀÌ¾ðÆ®°¡ »ç¿ëÇÑ
              ¸Þ½áµå´Â <code>GET</code>ÀÌ´Ù. µÑ°, Ŭ¶óÀÌ¾ðÆ®´Â ÀÚ¿ø
              <code>/apache_pb.gif</code>¸¦ ¿äûÇÑ´Ù. ¼¼¹øÂ°, Ŭ¶óÀÌ¾ðÆ®´Â
              <code>HTTP/1.0</code> ÇÁ·ÎÅäÄÝÀ» »ç¿ëÇÑ´Ù. ¿äûÁÙÀÇ
              ¿©·¯ ºÎºÐÀ» µû·Î ·Î±×ÇÒ ¼öµµ ÀÖ´Ù. ¿¹¸¦ µé¾î, Çü½Ä¹®ÀÚ¿­
              "<code>%m %U%q %H</code>"Àº "<code>%r</code>"°ú ¶È°°ÀÌ
              ¸Þ½áµå, °æ·Î, ÁúÀǹ®ÀÚ¿­, ÇÁ·ÎÅäÄÝÀ» ·Î±×ÇÑ´Ù.</dd>
      
              <dt><code>200</code> (<code>%&gt;s</code>)</dt>
      
              <dd>ÀÌ´Â ¼­¹ö°¡ Ŭ¶óÀÌ¾ðÆ®¿¡°Ô º¸³»´Â »óÅÂÄÚµåÀÌ´Ù. ÀÌ
              Á¤º¸´Â (2·Î ½ÃÀÛÇÏ´Â ÄÚµå) ¿äûÀÌ ¼º°øÇÏ¿´´ÂÁö, (4·Î
              ½ÃÀÛÇÏ´Â ÄÚµå) Ŭ¶óÀÌ¾ðÆ®¿¡ ¿À·ù°¡ ÀÖ´ÂÁö, (5·Î ½ÃÀÛÇÏ´Â
              ÄÚµå) ¼­¹ö¿¡ ¿À·ù°¡ ÀÖ´ÂÁö ¾Ë·ÁÁֹǷΠ¸Å¿ì Áß¿äÇÏ´Ù.
              »óÅÂÄÚµåÀÇ Àüü ¸ñ·ÏÀº <a href="http://www.w3.org/Protocols/rfc2616/rfc2616.txt">HTTP
              ±Ô¾à</a> (RFC2616 section 10)¿¡¼­ ãÀ» ¼ö ÀÖ´Ù.</dd>
      
              <dt><code>2326</code> (<code>%b</code>)</dt>
      
              <dd>¸¶Áö¸· Ç׸ñÀº ÀÀ´ä Çì´õ¸¦ Á¦¿ÜÇϰí Ŭ¶óÀÌ¾ðÆ®¿¡°Ô
              º¸³»´Â ³»¿ëÀÇ Å©±â¸¦ ³ªÅ¸³½´Ù. Ŭ¶óÀÌ¾ðÆ®¿¡°Ô º¸³»´Â
              ³»¿ëÀÌ ¾ø´Ù¸é ÀÌ °ªÀº "<code>-</code>"ÀÌ´Ù. ³»¿ëÀÌ
              ¾ø´Â °æ¿ì "<code>0</code>"À» ·Î±×ÇÏ·Á¸é ´ë½Å
              <code>%B</code>¸¦ »ç¿ëÇÑ´Ù.</dd>
            </dl>
          
      
          <h3><a name="combined" id="combined">Combined ·Î±× Çü½Ä</a></h3>
            
      
            <p>ÀÚÁÖ »ç¿ëµÇ´Â ´Ù¸¥ Çü½Ä¹®ÀÚ¿­Àº °áÇյȷα×Çü½Ä(Combined
            Log Format)ÀÌ´Ù. ´ÙÀ½°ú °°ÀÌ »ç¿ëÇÑ´Ù.</p>
      
            <div class="example"><p><code>
              LogFormat "%h %l %u %t \"%r\" %&gt;s %b \"%{Referer}i\"
              \"%{User-agent}i\"" combined<br />
               CustomLog log/access_log combined
            </code></p></div>
      
            <p>ÀÌ Çü½ÄÀº µÎ Ç׸ñÀ» ´õ Ãß°¡ÇÑ °ÍÀ» Á¦¿ÜÇϰí´Â Common
            ·Î±× Çü½Ä°ú ¿ÏÀüÈ÷ °°´Ù. Ãß°¡µÈ Ç׸ñµéÀº ÆÛ¼¾Æ® Áö½Ã¾î
            <code>%{<em>header</em>}i</code>¸¦ »ç¿ëÇÑ´Ù. ¿©±â¼­
            <em>header</em> ÀÚ¸®¿¡  HTTP ¿äû Çì´õ À̸§ÀÌ ³ª¿Ã ¼ö
            ÀÖ´Ù. ÀÌ Çü½ÄÀÇ Á¢±Ù ·Î±×´Â ´ÙÀ½°ú °°´Ù:</p>
      
            <div class="example"><p><code>
              127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET
              /apache_pb.gif HTTP/1.0" 200 2326
              "http://www.example.com/start.html" "Mozilla/4.08 [en]
              (Win98; I ;Nav)"
            </code></p></div>
      
            <p>Ãß°¡µÈ Ç׸ñÀº:</p>
      
            <dl>
              <dt><code>"http://www.example.com/start.html"</code>
              (<code>\"%{Referer}i\"</code>)</dt>
      
              <dd>"Referer" (¸ÂÃã¹ý Ʋ¸®Áö¾Ê¾ÒÀ½) HTTP ¿äû Çì´õ.
              Ŭ¶óÀÌ¾ðÆ®°¡ ÂüÁ¶Çß´Ù°í ¼­¹ö¿¡°Ô ¾Ë¸° »çÀÌÆ®ÀÌ´Ù.
              (Áï, <code>/apache_pb.gif</code>¸¦ ¸µÅ©ÇÏ¿´°Å³ª Æ÷ÇÔÇÑ
              »çÀÌÆ®ÀÌ´Ù.)</dd>
      
              <dt><code>"Mozilla/4.08 [en] (Win98; I ;Nav)"</code>
              (<code>\"%{User-agent}i\"</code>)</dt>
      
              <dd>User-Agent HTTP ¿äû Çì´õ. Ŭ¶óÀÌ¾ðÆ® ºê¶ó¿ìÀú°¡
              Àڽſ¡ ´ëÇØ ¾Ë¸®´Â ½Äº°Á¤º¸ÀÌ´Ù.</dd>
            </dl>
          
      
          <h3><a name="multiple" id="multiple">¿©·¯ Á¢±Ù ·Î±×</a></h3>
            
      
            <p>¼³Á¤ÆÄÀÏ¿¡ ¿©·¯ <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> Áö½Ã¾î¸¦
            »ç¿ëÇϸé Á¢±Ù ·Î±×°¡ ¿©·¯°³ ¸¸µé¾îÁø´Ù. ¿¹¸¦ µé¾î, ´ÙÀ½
            ¼³Á¤Àº ¼¼°¡Áö Á¢±Ù ·Î±×¸¦ ¸¸µç´Ù. ù¹øÂ°´Â ±âº» CLF Á¤º¸¸¦
            ±â·ÏÇϰí, µÎ¹øÂ°¿Í ¼¼¹øÂ°´Â referer¿Í ºê¶ó¿ìÀú Á¤º¸¸¦
            ±â·ÏÇÑ´Ù. ¸¶Áö¸· µÎ <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> ÁÙÀº ¾î¶»°Ô
            ÀÌÀü <code>ReferLog</code>¿Í <code>AgentLog</code> Áö½Ã¾îÀÇ
            ±â´ÉÀ» Èä³»³¾ ¼ö ÀÖ´ÂÁö º¸¿©ÁØ´Ù.</p>
      
            <div class="example"><p><code>
              LogFormat "%h %l %u %t \"%r\" %&gt;s %b" common<br />
              CustomLog logs/access_log common<br />
              CustomLog logs/referer_log "%{Referer}i -&gt; %U"<br />
              CustomLog logs/agent_log "%{User-agent}i"
            </code></p></div>
      
            <p>¶Ç, ÀÌ ¿¹´Â <code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code>À¸·Î ¹Ýµå½Ã
            º°¸íÀ» Á¤ÀÇÇÒ ÇÊ¿ä´Â ¾øÀ½À» º¸¿©ÁØ´Ù. ´ë½Å <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> Áö½Ã¾î¿¡
            Á÷Á¢ ·Î±× Çü½ÄÀ» ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù.</p>
          
      
          <h3><a name="conditional" id="conditional">Á¶°ÇºÎ ·Î±×</a></h3>
            
      
            <p>Ŭ¶óÀÌ¾ðÆ® ¿äûÀÇ ¼º°Ý¿¡ µû¶ó ÇØ´ç Ç׸ñÀ» Á¢±Ù ·Î±×¿¡
            ±â·ÏÇÏÁö¾Ê°í ½ÍÀ» ¶§°¡ ÀÖ´Ù. <a href="env.html">ȯ°æº¯¼ö</a>¸¦
            »ç¿ëÇÏ¸é ½±°Ô ÇØ°áµÈ´Ù. ¸ÕÀú, Ŭ¶óÀÌ¾ðÆ®°¡ ƯÁ¤ Á¶°ÇÀ»
            ¸¸Á·Çϸé ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÑ´Ù. ÀÌ ÀÛ¾÷¿¡´Â º¸Åë <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code>¸¦ »ç¿ëÇÑ´Ù.
            ±×¸®°í <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code>
            Áö½Ã¾î¿¡ <code>env=</code>À» »ç¿ëÇÏ¿© ȯ°æº¯¼ö À¯¹«¿¡
            µû¶ó ¿äûÀ» Áý¾î³Ö°Å³ª »«´Ù. ¿¹¸¦ µé¸é:</p>
      
            <div class="example"><p><code>
              # loop-back ÀÎÅÍÆäÀ̽º¿¡¼­ ¿äûÀ» Ç¥½ÃÇÑ´Ù<br />
              SetEnvIf Remote_Addr "127\.0\.0\.1" dontlog<br />
              # robots.txt ÆÄÀÏ¿¡ ´ëÇÑ ¿äûÀ» Ç¥½ÃÇÑ´Ù<br />
              SetEnvIf Request_URI "^/robots\.txt$" dontlog<br />
              # ³ª¸ÓÁö¸¦ ·Î±×¿¡ ³²±ä´Ù<br />
              CustomLog logs/access_log common env=!dontlog
            </code></p></div>
      
            <p>´Ù¸¥ ¿¹·Î ¿µ¾î±Ç »ç¿ëÀÚÀÇ ¿äû¸¸À» ÇÑ ·Î±×ÆÄÀÏ¿¡ ±â·ÏÇϰí,
            ºñ¿µ¾î±Ç »ç¿ëÀÚÀÇ ¿äûÀº ´Ù¸¥ ·Î±×ÆÄÀÏ¿¡ ±â·ÏÇÏ´Â °æ¿ì¸¦
            »ý°¢Çغ¸ÀÚ.</p>
      
            <div class="example"><p><code>
              SetEnvIf Accept-Language "en" english<br />
              CustomLog logs/english_log common env=english<br />
              CustomLog logs/non_english_log common env=!english
            </code></p></div>
      
            <p>Á¶°ÇºÎ ·Î±×´Â ¸Å¿ì °­·ÂÇϰí À¯¿¬ÇÏÁö¸¸, À̰ÍÀÌ ·Î±×
            ³»¿ëÀ» Á¶ÀýÇÏ´Â À¯ÀÏÇÑ ¹æ¹ýÀº ¾Æ´Ï´Ù. ·Î±×ÆÄÀÏÀº ¼­¹öÀÇ
            ¸ðµç ÇൿÀ» ±â·ÏÇÒ¶§ ´õ À¯¿ëÇÏ´Ù. ³ªÁß¿¡ ¿øÇÏÁö¾Ê´Â ¿äûÀ»
            Á¦¿ÜÇÏ°í ·Î±×ÆÄÀÏÀ» ºÐ¼®ÇÏ´Â °ÍÀÌ ´õ ½±´Ù.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rotation" id="rotation">·Î±× ¼øÈ¯ (Log Rotation)</a></h2>
          
      
          <p>Á¶±Ý ¹Ù»Û ¼­¹öÁ¶Â÷µµ ·Î±×ÆÄÀÏ¿¡ ÀúÀåµÇ´Â Á¤º¸·®Àº ¸Å¿ì
          ¸¹´Ù. Á¢¼Ó ·Î±×´Â º¸Åë ¸¸¹ø ¿äû´ç 1MB ÀÌ»ó Áõ°¡ÇÑ´Ù. °á°úÀûÀ¸·Î
          ±âÁ¸ÀÇ ·Î±×¸¦ ¿Å±â°Å³ª Áö¿ì´Â ¹æ¹ýÀ¸·Î ·Î±×¸¦ ÁÖ±âÀûÀ¸·Î
          ¼øÈ°ÇÒ Çʿ䰡 ÀÖ´Ù. ¾ÆÆÄÄ¡´Â ÆÄÀÏÀ» ¿­°íÀÖ´Â µ¿¾È¿¡´Â °è¼Ó
          ÀÌÀü ·Î±×ÆÄÀÏ¿¡ ¾²±â¶§¹®¿¡ ¼­¹ö°¡ ½ÇÇàÁßÀ϶§ ·Î±×¸¦ ¼øÈ¯ÇÒ
          ¼ö ¾ø´Ù. ´ë½Å ·Î±×ÆÄÀÏÀ» ¿Å±â°Å³ª Áö¿îÈÄ ¼­¹ö¸¦ <a href="stopping.html">Àç½ÃÀÛ</a>ÇÏ¿©, ·Î±×ÆÄÀÏÀ» »õ·Î ¿­¾î¾ß
          ÇÑ´Ù.</p>
      
          <p><em>Á¡ÀÝÀº</em> Àç½ÃÀÛÀ» »ç¿ëÇÏ¸é ¼­¹ö´Â Ŭ¶óÀÌ¾ðÆ®¿Í
          ±âÁ¸ÀÇ È¤Àº ´ë±âµÈ ¿¬°áÀ» ÀÒÁö¾Ê°í »õ ·Î±×ÆÄÀÏÀ» ¿­ ¼ö ÀÖ´Ù.
          ±×·¯³ª À̸¦ À§ÇØ ¼­¹ö´Â ¿À·¡µÈ ¿äûÀÇ ¼­ºñ½º¸¦ ³¡³»´Â µ¿¾È
          ÀÌÀü ·Î±×ÆÄÀÏÀ» °è¼Ó »ç¿ëÇØ¾ß ÇÑ´Ù. ±×·¯¹Ç·Î Àç½ÃÀÛÇÑÈÄ
          ·Î±×ÆÄÀÏÀ» ó¸®Çϱâ Àü¿¡ ¾ó¸¶°£ ±â´Ù¸± Çʿ䰡 ÀÖ´Ù. ÀϹÝÀûÀ¸·Î
          ´ÙÀ½°ú °°ÀÌ ·Î±×¸¦ ¼øÈ¯Çϰí, µð½ºÅ©°ø°£À» Àý¾àÇϱâÀ§ÇØ ÀÌÀü
          ·Î±×¸¦ ¾ÐÃàÇÑ´Ù:</p>
      
          <div class="example"><p><code>
            mv access_log access_log.old<br />
            mv error_log error_log.old<br />
            apachectl graceful<br />
            sleep 600<br />
            gzip access_log.old error_log.old
          </code></p></div>
      
          <p>·Î±×¸¦ ¼øÈ¯ÇÏ´Â ´Ù¸¥ ¹æ¹ýÀº ´ÙÀ½ Àý¿¡¼­ ¼³¸íÇÒ <a href="#piped">ÆÄÀÌÇÁ ·Î±×</a>¸¦ »ç¿ëÇÏ´Â °ÍÀÌ´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="piped" id="piped">·Î±×¸¦ ÆÄÀÌÇÁ·Î º¸³»±â</a></h2>
          
      
          <p>¾ÆÆÄÄ¡ À¥¼­¹ö´Â ¿À·ù ·Î±×¿Í Á¢±Ù ·Î±×¸¦ ÆÄÀÏ¿¡ Á÷Á¢
          ¾²Áö¾Ê°í ÆÄÀÌÇÁ¸¦ ÅëÇØ ´Ù¸¥ ÇÁ·Î¼¼½º·Î º¸³¾ ¼ö ÀÖ´Ù. ÀÌ
          ±â´ÉÀ» »ç¿ëÇÏ¸é ¼­¹ö¿¡ Äڵ带 Ãß°¡ÇÏÁö¾Ê°íµµ ¸Å¿ì À¯¿¬ÇϰÔ
          ·Î±×¸¦ ó¸®ÇÒ ¼ö ÀÖ´Ù. ·Î±×¸¦ ÆÄÀÌÇÁ¿¡ ¾²±âÀ§ÇØ ÆÄÀϸí
          ÀÚ¸®¿¡ ÆÄÀÌÇÁ¹®ÀÚ "<code>|</code>"¿Í µÚ¿¡ Ç¥ÁØÀÔ·ÂÀ¸·Î
          ·Î±× Ç׸ñÀ» ÀÐÀ» ½ÇÇàÆÄÀϸíÀ» ÀûÀ¸¸é µÈ´Ù. ¾ÆÆÄÄ¡´Â ¼­¹ö°¡
          ½ÃÀÛÇÒ¶§ ÆÄÀÌÇÁ·Î ¿¬°áÇÒ ·Î±× ÇÁ·Î¼¼½º¸¦ ½ÃÀÛÇϰí, ¼­¹ö°¡
          ½ÇÇàµÇ´Â µ¿¾È ÇÁ·Î¼¼½º°¡ Á×À¸¸é ´Ù½Ã ½ÃÀÛÇÑ´Ù. (ÀÌ ¸¶Áö¸·
          ±â´É¶§¹®¿¡ ¿ì¸®´Â ÀÌ ¹æ¹ýÀ» "¹ÏÀ» ¼ö ÀÖ´Â ÆÄÀÌÇÁ ·Î±×"¶ó°í
          ºÎ¸¥´Ù.)</p>
      
          <p>ÆÄÀÌÇÁ·Î ¿¬°áµÈ ·Î±× ÇÁ·Î¼¼½º´Â ºÎ¸ð ¾ÆÆÄÄ¡ httpd ÇÁ·Î¼¼½º°¡
          ¶ç¿ì°í, ÇÁ·Î¼¼½ºÀÇ useridµµ °°´Ù. Áï, ÆÄÀÌÇÁ·Î ¿¬°áµÈ ·Î±×
          ÇÁ·Î±×·¥Àº º¸Åë root·Î ½ÇÇàµÈ´Ù. ±×·¯¹Ç·Î ÇÁ·Î±×·¥À» °£´ÜÇϰí
          ¾ÈÀüÇÏ°Ô ¸¸µå´Â °ÍÀÌ ¸Å¿ì Áß¿äÇÏ´Ù.</p>
      
          <p>ÆÄÀÌÇÁ·Î ºÎ¸£´Â Àüü ¸í·É¾î¸¦ µû¿ÈÇ¥·Î ¹­À½À» ¸í½ÉÇ϶ó.
          ÀÌ ¿¹´Â Á¢±Ù ·Î±×¿¡ ´ëÇÑ °ÍÀÌÁö¸¸, ¿À·ù ·Î±×µµ ¸¶Âù°¡Áö´Ù.</p>
      
          <p>¼­¹ö¸¦ Àç½ÃÀÛÇÏÁö¾Ê°í ·Î±×¸¦ ¼øÈ¯ÇÒ ¼ö ÀÖ´Â °ÍÀÌ ÆÄÀÌÇÁ
          ·Î±×¸¦ »ç¿ëÇÏ´Â Áß¿äÇÑ ÀÌÀ¯´Ù. ¾ÆÆÄÄ¡ À¥¼­¹ö´Â À̸¦ À§ÇØ
          <a href="programs/rotatelogs.html">rotatelogs</a>¶ó´Â °£´ÜÇÑ
          ÇÁ·Î±×·¥À» Æ÷ÇÔÇÑ´Ù. ¿¹¸¦ µé¾î 24½Ã°£¸¶´Ù ·Î±×¸¦ ¼øÈ¯ÇÑ´Ù¸é:</p>
      
          <div class="example"><p><code>
            CustomLog "|/usr/local/apache/bin/rotatelogs
            /var/log/access_log 86400" common
          </code></p></div>
      
          <p>´Ù¸¥ »çÀÌÆ®¿¡ <a href="http://www.cronolog.org/">cronolog</a>¶ó´Â ºñ½ÁÇÏÁö¸¸
          ÈξÀ ´õ À¯¿¬ÇÑ ·Î±× ¼øÈ¯ ÇÁ·Î±×·¥ÀÌ ÀÖ´Ù.</p>
      
          <p>Á¶°ÇºÎ ·Î±×¿Í °°ÀÌ ÆÄÀÌÇÁ ·Î±×´Â ¸Å¿ì °­·ÂÇÑ µµ±¸Áö¸¸,
          ³ªÁß¿¡ ó¸®ÇÏ´Â µîÀÇ ´õ °£´ÜÇÑ ¹æ¹ýÀÌ °¡´ÉÇÑ °æ¿ì »ç¿ëÇØ¼­´Â
          ¾ÈµÈ´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="virtualhost" id="virtualhost">°¡»óÈ£½ºÆ®</a></h2>
          
      
          <p>¸¹Àº <a href="vhosts/">°¡»óÈ£½ºÆ®</a>°¡ ÀÖ´Â ¼­¹ö¸¦
          ¿î¿µÇÒ¶§ ¿©·¯°¡Áö ¹æ¹ýÀ¸·Î ·Î±×ÆÄÀÏÀ» ´Ù·ê ¼ö ÀÖ´Ù. ¸ÕÀú,
          È£½ºÆ®°¡ ÇѰ³ÀÎ ¼­¹ö¿Í °°ÀÌ ·Î±×¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù. <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> ¼½¼ÇÀÌ
          ¾Æ´Ñ ÁÖ¼­¹ö ¼³Á¤¿¡ ·Î±× Áö½Ã¾î¸¦ µÎ¸é ¸ðµç ¿äûÀÌ °°Àº Á¢±Ù
          ·Î±×¿Í ¿À·ù ·Î±×·Î ±â·ÏµÈ´Ù. ÀÌ ¹æ¹ýÀº °¡»óÈ£½ºÆ®º°·Î ½±°Ô
          Åë°è󸮸¦ ÇÒ ¼ö ¾ø´Ù.</p>
      
          <p><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          ¼½¼Ç ¾È¿¡ <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code>³ª
          <code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code> Áö½Ã¾î¸¦
          »ç¿ëÇϸé ÇØ´ç °¡»óÈ£½ºÆ®¿¡ ´ëÇÑ ¿äû°ú ¿À·ù¸¸ÀÌ ÁöÁ¤µÈ
          ÆÄÀÏ¿¡ ±â·ÏµÈ´Ù. ·Î±× Áö½Ã¾î°¡ ¾ø´Â ´Ù¸¥ °¡»óÈ£½ºÆ®´Â °è¼Ó
          ÁÖ¼­¹ö ·Î±×¿¡ ·Î±×¸¦ ±â·ÏÇÑ´Ù. ÀÌ ¹æ¹ýÀº °¡»óÈ£½ºÆ® °³¼ö°¡
          ÀûÀ» °æ¿ì ¸Å¿ì À¯¿ëÇÏÁö¸¸, È£½ºÆ® ¼ö°¡ ¸¹´Ù¸é °ü¸®Çϱâ
          Èûµé¾îÁø´Ù. ¶Ç, <a href="vhosts/fd-limits.html">ÆÄÀϱâ¼úÀÚ°¡
          ºÎÁ·ÇÑ</a> ¹®Á¦°¡ ÀÚÁÖ ¹ß»ýÇÑ´Ù.</p>
      
          <p>Á¢±Ù ·Î±×ÀÇ °æ¿ì ¸Å¿ì ÁÁÀº ÇØ°áÃ¥ÀÌ ÀÖ´Ù. ·Î±× Çü½Ä¹®ÀÚ¿­¿¡
          °¡»óÈ£½ºÆ®¿¡ ´ëÇÑ Á¤º¸¸¦ Ãß°¡ÇÏ¸é ¸ðµç È£½ºÆ®°¡ °°Àº ·Î±×¸¦
          »ç¿ëÇϰí, ³ªÁß¿¡ ·Î±×¸¦ °¡»óÈ£½ºÆ®º°·Î ³ª´­ ¼ö ÀÖ´Ù. ¿¹¸¦
          µé¾î, ´ÙÀ½ Áö½Ã¾î¸¦ ºÁ¶ó.</p>
      
          <div class="example"><p><code>
            LogFormat "%v %l %u %t \"%r\" %&gt;s %b"
            comonvhost<br />
            CustomLog logs/access_log comonvhost
          </code></p></div>
      
          <p><code>%v</code>´Â ¿äûÀ» ¼­ºñ½ºÇÏ´Â °¡»óÈ£½ºÆ® À̸§À»
          ±â·ÏÇÑ´Ù. ³ªÁß¿¡ <a href="programs/other.html">split-logfile</a>
          °°Àº ÇÁ·Î±×·¥À¸·Î Á¢±Ù ·Î±×¸¦ °¡»óÈ£½ºº°·Î ³ª´­ ¼ö ÀÖ´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="other" id="other">´Ù¸¥ ·Î±×ÆÄÀÏ</a></h2>
          
      
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritelog">RewriteLog</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewriteloglevel">RewriteLogLevel</a></code></li><li><code class="directive"><a href="./mod/mod_cgi.html#scriptlog">ScriptLog</a></code></li><li><code class="directive"><a href="./mod/mod_cgi.html#scriptlogbuffer">ScriptLogBuffer</a></code></li><li><code class="directive"><a href="./mod/mod_cgi.html#scriptloglength">ScriptLogLength</a></code></li></ul></td></tr></table>
      
          <h3><a name="pidfile" id="pidfile">PID ÆÄÀÏ</a></h3>
            
      
            <p>¾ÆÆÄÄ¡ À¥¼­¹ö´Â ½ÃÀÛÇÒ¶§ <code>logs/httpd.pid</code>
            ÆÄÀÏ¿¡ ºÎ¸ð httpd ÇÁ·Î¼¼½ºÀÇ process id¸¦ ÀúÀåÇÑ´Ù. ÀÌ
            ÆÄÀϸíÀº <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code>
            Áö½Ã¾î·Î º¯°æÇÒ ¼ö ÀÖ´Ù. process-id´Â °ü¸®ÀÚ°¡ ºÎ¸ð ÇÁ·Î¼¼½º¿¡
            ½Ã±×³ÎÀ» º¸³» ¼­¹ö¸¦ Àç½ÃÀÛÇϰųª Á×À϶§ »ç¿ëÇÑ´Ù.
            À©µµ¿ìÁî¿¡¼­´Â ´ë½Å -k ¸í·ÉÇà¿É¼ÇÀ» »ç¿ëÇÑ´Ù. ´õ ÀÚ¼¼ÇÑ
            Á¤º¸´Â <a href="stopping.html">Áߴܰú Àç½ÃÀÛ</a> ÆäÀÌÁö¸¦
            Âü°íÇ϶ó.</p>
          
      
          <h3><a name="scriptlog" id="scriptlog">½ºÅ©¸³Æ® ·Î±×</a></h3>
            
      
            <p>µð¹ö±ëÀ» µ½±âÀ§ÇØ <code class="directive"><a href="./mod/mod_cgi.html#scriptlog">ScriptLog</a></code> Áö½Ã¾î¸¦ »ç¿ëÇÏ¿©
            CGI ½ºÅ©¸³Æ®ÀÇ ÀԷ°ú Ãâ·ÂÀ» ±â·ÏÇÒ ¼ö ÀÖ´Ù. ÀÌ Áö½Ã¾î´Â
            ¿ÀÁ÷ Å×½ºÆ®¿ëÀ¸·Î¸¸ »ç¿ëÇØ¾ß ÇÑ´Ù. ½ÇÁ¦ »ç¿ëÇÏ´Â ¼­¹ö¿¡¼­
            »ç¿ëÇÏ¸é ¾ÈµÈ´Ù. ´õ ÀÚ¼¼ÇÑ Á¤º¸´Â <a href="mod/mod_cgi.html">mod_cgi</a> ¹®¼­¸¦ Âü°íÇ϶ó.</p>
          
      
          <h3><a name="rewritelog" id="rewritelog">ÀçÀÛ¼º ·Î±×</a></h3>
            
      
            <p><a href="mod/mod_rewrite.html">mod_rewrite</a>ÀÇ °­·ÂÇϰí
            º¹ÀâÇÑ ±â´ÉÀ» »ç¿ëÇÑ´Ù¸é µð¹ö±ëÀ» À§ÇØ °ÅÀÇ Ç×»ó <code class="directive"><a href="./mod/mod_rewrite.html#rewritelog">RewriteLog</a></code>¸¦ »ç¿ëÇÒ Çʿ䰡
            ÀÖ´Ù. ÀÌ ·Î±×ÆÄÀÏÀº ÀçÀÛ¼º ¿£ÁøÀÌ ¾î¶»°Ô ¿äûÀ» º¯È¯ÇÏ´ÂÁö¿¡
            ´ëÇØ ÀÚ¼¼È÷ ¾Ë·ÁÁØ´Ù. ÀÚ¼¼ÇÑ Á¤µµ´Â <code class="directive"><a href="./mod/mod_rewrite.html#rewriteloglevel">RewriteLogLevel</a></code> Áö½Ã¾î·Î
            Á¶ÀýÇÑ´Ù.</p>
          
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/logs.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/logs.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/logs.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/logs.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/logs.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/logs.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/caching.html.en������������������������������������������������������������0000644�0000000�0000050�00000145254�13412755316�016346� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Caching Guide - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Caching Guide</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/caching.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/caching.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./tr/caching.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>This document supplements the <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>,
          <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code>, <code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code> and <a href="programs/htcacheclean.html">htcacheclean</a> reference documentation.
          It describes how to use the Apache HTTP Server's caching features to accelerate web and
          proxy serving, while avoiding common problems and misconfigurations.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#introduction">Introduction</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#http-caching">Three-state RFC2616 HTTP caching</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#examples">Cache Setup Examples</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#socache-caching">General Two-state Key/Value Shared Object Caching</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#file-caching">Specialized File Caching</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#security">Security Considerations</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">Introduction</a></h2>
          
          
          <p>The Apache HTTP server offers a range of caching features that
          are designed to improve the performance of the server in various
          ways.</p>
      
          <dl>
              <dt>Three-state RFC2616 HTTP caching</dt>
              <dd>
                  <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>
                  and its provider modules
                  <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code>
                  provide intelligent, HTTP-aware caching. The content itself is stored
                  in the cache, and mod_cache aims to honor all of the various HTTP
                  headers and options that control the cacheability of content
                  as described in
                  <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html">Section
                  13 of RFC2616</a>.
                  <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>
                  is aimed at both simple and complex caching configurations, where
                  you are dealing with proxied content, dynamic local content or
                  have a need to speed up access to local files on a potentially
                  slow disk.
              </dd>
      
              <dt>Two-state key/value shared object caching</dt>
              <dd>
                  The <a href="socache.html">shared object cache API</a> (socache)
                  and its provider modules provide a
                  server wide key/value based shared object cache. These modules
                  are designed to cache low level data such as SSL sessions and
                  authentication credentials. Backends allow the data to be stored
                  server wide in shared memory, or datacenter wide in a cache such
                  as memcache or distcache.
              </dd>
      
              <dt>Specialized file caching</dt>
              <dd>
                  <code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code>
                  offers the ability to pre-load
                  files into memory on server startup, and can improve access
                  times and save file handles on files that are accessed often,
                  as there is no need to go to disk on each request.
              </dd>
          </dl>
      
          <p>To get the most from this document, you should be familiar with
          the basics of HTTP, and have read the Users' Guides to
          <a href="urlmapping.html">Mapping URLs to the Filesystem</a> and
          <a href="content-negotiation.html">Content negotiation</a>.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="http-caching" id="http-caching">Three-state RFC2616 HTTP caching</a></h2>
      
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code></li><li><code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_cache.html#cacheenable">CacheEnable</a></code></li><li><code class="directive"><a href="./mod/mod_cache.html#cachedisable">CacheDisable</a></code></li><li><code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code></li><li><code class="directive"><a href="./mod/mod_negotiation.html#cachenegotiateddocs">CacheNegotiatedDocs</a></code></li></ul></td></tr></table>
      
          <p>The HTTP protocol contains built in support for an in-line caching
          mechanism 
          <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html">
          described by section 13 of RFC2616</a>, and the
          <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> module can be used to take advantage of
          this.</p>
      
          <p>Unlike a simple two state key/value cache where the content
          disappears completely when no longer fresh, an HTTP cache includes
          a mechanism to retain stale content, and to ask the origin server
          whether this stale content has changed and if not, make it fresh
          again.</p>
      
          <p>An entry in an HTTP cache exists in one of three states:</p>
      
          <dl>
          <dt>Fresh</dt>
          <dd>
              If the content is new enough (younger than its <strong>freshness
              lifetime</strong>), it is considered <strong>fresh</strong>. An
              HTTP cache is free to serve fresh content without making any
              calls to the origin server at all.
          </dd>
          <dt>Stale</dt>
          <dd>
              <p>If the content is too old (older than its <strong>freshness
              lifetime</strong>), it is considered <strong>stale</strong>. An
              HTTP cache should contact the origin server and check whether
              the content is still fresh before serving stale content to a
              client. The origin server will either respond with replacement
              content if not still valid, or ideally, the origin server will
              respond with a code to tell the cache the content is still
              fresh, without the need to generate or send the content again.
              The content becomes fresh again and the cycle continues.</p>
      
              <p>The HTTP protocol does allow the cache to serve stale data
              under certain circumstances, such as when an attempt to freshen
              the data with an origin server has failed with a 5xx error, or
              when another request is already in the process of freshening
              the given entry. In these cases a <code>Warning</code> header
              is added to the response.</p>
          </dd>
          <dt>Non Existent</dt>
          <dd>
              If the cache gets full, it reserves the option to delete content
              from the cache to make space. Content can be deleted at any time,
              and can be stale or fresh. The <a href="programs/htcacheclean.html">htcacheclean</a> tool can be
              run on a once off basis, or deployed as a daemon to keep the size
              of the cache within the given size, or the given number of inodes.
              The tool attempts to delete stale content before attempting to
              delete fresh content.
          </dd>
          </dl>
      
          <p>Full details of how HTTP caching works can be found in
          <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html">
          Section 13 of RFC2616</a>.</p>
      
          <h3>Interaction with the Server</h3>
            
      
            <p>The <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> module hooks into the server in two
            possible places depending on the value of the
            <code class="directive"><a href="./mod/mod_cache.html#cachequickhandler">CacheQuickHandler</a></code> directive:
            </p>
      
            <dl>
              <dt>Quick handler phase</dt>
              <dd>
                <p>This phase happens very early on during the request processing,
                    just after the request has been parsed. If the content is
                    found within the cache, it is served immediately and almost
                    all request processing is bypassed.</p>
      
                    <p>In this scenario, the cache behaves as if it has been "bolted
                    on" to the front of the server.</p>
                    
                    <p>This mode offers the best performance, as the majority of
                    server processing is bypassed. This mode however also bypasses the
                    authentication and authorization phases of server processing, so
                    this mode should be chosen with care when this is important.</p>
        
                    <p> Requests with an "Authorization" header (for example, HTTP Basic
                    Authentication) are neither cacheable nor served from the cache 
                    when <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> is running in this phase.</p>
                </dd>
                <dt>Normal handler phase</dt>
                <dd>
                    <p>This phase happens late in the request processing, after all
                    the request phases have completed.</p>
      
                    <p>In this scenario, the cache behaves as if it has been "bolted
                    on" to the back of the server.</p>
      
                    <p>This mode offers the most flexibility, as the potential exists
                    for caching to occur at a precisely controlled point in the filter
                    chain, and cached content can be filtered or personalized before
                    being sent to the client.</p>
                </dd>
              </dl>
      
              <p>If the URL is not found within the cache, <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>
              will add a <a href="filter.html">filter</a> to the filter stack in order
              to record the response to the cache, and then stand down, allowing normal
              request processing to continue. If the content is determined to be
              cacheable, the content will be saved to the cache for future serving,
              otherwise the content will be ignored.</p>
      
              <p>If the content found within the cache is stale, the
              <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> module converts the request into a
              <strong>conditional request</strong>. If the origin server responds with
              a normal response, the normal response is cached, replacing the content
              already cached. If the origin server responds with a 304 Not Modified
              response, the content is marked as fresh again, and the cached content
              is served by the filter instead of saving it.</p>
          
      
          <h3>Improving Cache Hits</h3>
            
      
            <p>When a virtual host is known by one of many different server aliases,
            ensuring that <code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code> is
            set to <code>On</code> can dramatically improve the ratio of cache hits.
            This is because the hostname of the virtual-host serving the content is
            used within the cache key. With the setting set to <code>On</code>
            virtual-hosts with multiple server names or aliases will not produce
            differently cached entities, and instead content will be cached as
            per the canonical hostname.</p>
      
          
      
          <h3>Freshness Lifetime</h3>
            
      
            <p>Well formed content that is intended to be cached should declare an
            explicit freshness lifetime with the <code>Cache-Control</code>
            header's <code>max-age</code> or <code>s-maxage</code> fields, or
            by including an <code>Expires</code> header.</p>
            
            <p>At the same time, the origin server defined freshness lifetime can
            be overridden by a client when the client presents their own
            <code>Cache-Control</code> header within the request. In this case,
            the lowest freshness lifetime between request and response wins.</p>
      
            <p>When this freshness lifetime is missing from the request or the
            response, a default freshness lifetime is applied. The default
            freshness lifetime for cached entities is one hour, however
            this can be easily over-ridden by using the <code class="directive"><a href="./mod/mod_cache.html#cachedefaultexpire">CacheDefaultExpire</a></code> directive.</p>
      
            <p>If a response does not include an <code>Expires</code> header but does
            include a <code>Last-Modified</code> header, <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>
            can infer a freshness lifetime based on a heuristic, which can be
            controlled through the use of the <code class="directive"><a href="./mod/mod_cache.html#cachelastmodifiedfactor">CacheLastModifiedFactor</a></code> directive.</p>
      
            <p>For local content, or for remote content that does not define its own
            <code>Expires</code> header, <code class="module"><a href="./mod/mod_expires.html">mod_expires</a></code> may be used to
            fine-tune the freshness lifetime by adding <code>max-age</code> and
            <code>Expires</code>.</p>
      
            <p>The maximum freshness lifetime may also be controlled by using the
            <code class="directive"><a href="./mod/mod_cache.html#cachemaxexpire">CacheMaxExpire</a></code>.</p>
      
          
      
          <h3>A Brief Guide to Conditional Requests</h3>
            
      
            <p>When content expires from the cache and becomes stale, rather than
            pass on the original request, httpd will modify the request to make
            it conditional instead.</p>
      
            <p>When an <code>ETag</code> header exists in the original cached
            response, <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> will add an
            <code>If-None-Match</code> header to the request to the origin server.
            When a <code>Last-Modified</code> header exists in the original
            cached response, <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> will add an
            <code>If-Modified-Since</code> header to the request to the origin
            server. Performing either of these actions makes the request
            <strong>conditional</strong>.</p>
      
            <p>When a conditional request is received by an origin server, the
            origin server should check whether the ETag or the Last-Modified
            parameter has changed, as appropriate for the request. If not, the
            origin should respond with a terse "304 Not Modified" response. This
            signals to the cache that the stale content is still fresh should be
            used for subsequent requests until the content's new freshness lifetime
            is reached again.</p>
      
            <p>If the content has changed, then the content is served as if the
            request were not conditional to begin with.</p>
      
            <p>Conditional requests offer two benefits. Firstly, when making such
            a request to the origin server, if the content from the origin
            matches the content in the cache, this can be determined easily and
            without the overhead of transferring the entire resource.</p>
      
            <p>Secondly, a well designed origin server will be designed in such
            a way that conditional requests will be significantly cheaper to
            produce than a full response. For static files, typically all that is
            involved is a call to <code>stat()</code> or similar system call, to
            see if the file has changed in size or modification time. As such, even
            local content may still be served faster from the cache if it has not
            changed.</p>
            
            <p>Origin servers should make every effort to support conditional
            requests as is practical, however if conditional requests are not
            supported, the origin will respond as if the request was not
            conditional, and the cache will respond as if the content had changed
            and save the new content to the cache. In this case, the cache will
            behave like a simple two state cache, where content is effectively
            either fresh or deleted.</p>
          
      
          <h3>What Can be Cached?</h3>
            
      
            <p>The full definition of which responses can be cached by an HTTP
            cache is defined in
            <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html#sec13.4">
            RFC2616 Section 13.4 Response Cacheability</a>, and can be summed up as
            follows:</p>
      
            <ol>
              <li>Caching must be enabled for this URL. See the <code class="directive"><a href="./mod/mod_cache.html#cacheenable">CacheEnable</a></code> and <code class="directive"><a href="./mod/mod_cache.html#cachedisable">CacheDisable</a></code> directives.</li>
      
              <li>If the response has an HTTP status code other than 200, 203, 300, 
              301 or 410 it must also specify an "Expires" or "Cache-Control" header.
              </li>
      
              <li>The request must be a HTTP GET request.</li>
      
              <li>If the response contains an "Authorization:" header, it must
              also contain an "s-maxage", "must-revalidate" or "public" option
              in the "Cache-Control:" header, or it won't be cached.</li>
      
              <li>If the URL included a query string (e.g. from a HTML form GET
              method) it will not be cached unless the response specifies an
              explicit expiration by including an "Expires:" header or the max-age
              or s-maxage directive of the "Cache-Control:" header, as per RFC2616
              sections 13.9 and 13.2.1.</li>
      
              <li>If the response has a status of 200 (OK), the response must
              also include at least one of the "Etag", "Last-Modified" or
              the "Expires" headers, or the max-age or s-maxage directive of
              the "Cache-Control:" header, unless the
              <code class="directive"><a href="./mod/mod_cache.html#cacheignorenolastmod">CacheIgnoreNoLastMod</a></code>
              directive has been used to require otherwise.</li>
      
              <li>If the response includes the "private" option in a "Cache-Control:"
              header, it will not be stored unless the
              <code class="directive"><a href="./mod/mod_cache.html#cachestoreprivate">CacheStorePrivate</a></code> has been
              used to require otherwise.</li>
      
              <li>Likewise, if the response includes the "no-store" option in a
              "Cache-Control:" header, it will not be stored unless the
              <code class="directive"><a href="./mod/mod_cache.html#cachestorenostore">CacheStoreNoStore</a></code> has been
              used.</li>
      
              <li>A response will not be stored if it includes a "Vary:" header
              containing the match-all "*".</li>
            </ol>
          
      
          <h3>What Should Not be Cached?</h3>
            
      
            <p>It should be up to the client creating the request, or the origin
            server constructing the response to decide whether or not the content
            should be cacheable or not by correctly setting the
            <code>Cache-Control</code> header, and <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> should
            be left alone to honor the wishes of the client or server as appropriate.
            </p>
      
            <p>Content that is time sensitive, or which varies depending on the
            particulars of the request that are not covered by HTTP negotiation,
            should not be cached. This content should declare itself uncacheable
            using the <code>Cache-Control</code> header.</p>
            
            <p>If content changes often, expressed by a freshness lifetime of minutes
            or seconds, the content can still be cached, however it is highly
            desirable that the origin server supports
            <strong>conditional requests</strong> correctly to ensure that
            full responses do not have to be generated on a regular basis.</p>
      
            <p>Content that varies based on client provided request headers can be
            cached through intelligent use of the <code>Vary</code> response
            header.</p>
      
          
      
          <h3>Variable/Negotiated Content</h3>
            
      
            <p>When the origin server is designed to respond with different content
            based on the value of headers in the request, for example to serve
            multiple languages at the same URL, HTTP's caching mechanism makes it
            possible to cache multiple variants of the same page at the same URL.</p>
            
            <p>This is done by the origin server adding a <code>Vary</code> header
            to indicate which headers must be taken into account by a cache when
            determining whether two variants are different from one another.</p>
      
            <p>If for example, a response is received with a vary header such as;</p>
      
            <div class="example"><p><code>
      Vary: negotiate,accept-language,accept-charset
            </code></p></div>
      
            <p><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> will only serve the cached content to
            requesters with accept-language and accept-charset headers
            matching those of the original request.</p>
            
            <p>Multiple variants of the content can be cached side by side,
            <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> uses the <code>Vary</code> header and the
            corresponding values of the request headers listed by <code>Vary</code>
            to decide on which of many variants to return to the client.</p>
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Cache Setup Examples</a></h2>
      
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code></li><li><code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code></li><li><code class="module"><a href="./mod/mod_cache_socache.html">mod_cache_socache</a></code></li><li><code class="module"><a href="./mod/mod_socache_memcache.html">mod_socache_memcache</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_cache.html#cacheenable">CacheEnable</a></code></li><li><code class="directive"><a href="./mod/mod_cache_disk.html#cacheroot">CacheRoot</a></code></li><li><code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlevels">CacheDirLevels</a></code></li><li><code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlength">CacheDirLength</a></code></li><li><code class="directive"><a href="./mod/mod_cache_socache.html#cachesocache">CacheSocache</a></code></li></ul></td></tr></table>
      
          <h3><a name="disk" id="disk">Caching to Disk</a></h3>
            
      
            <p>The <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> module relies on specific backend store
            implementations in order to manage the cache, and for caching to disk
            <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code> is provided to support this.</p>
      
            <p>Typically the module will be configured as so;</p>
      
            <pre class="prettyprint lang-config">CacheRoot   "/var/cache/apache/"
      CacheEnable disk /
      CacheDirLevels 2
      CacheDirLength 1</pre>
      
      
            <p>Importantly, as the cached files are locally stored, operating system
            in-memory caching will typically be applied to their access also. So
            although the files are stored on disk, if they are frequently accessed
            it is likely the operating system will ensure that they are actually
            served from memory.</p>
      
          
      
          <h3>Understanding the Cache-Store</h3>
            
      
            <p>To store items in the cache, <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code> creates
            a 22 character hash of the URL being requested. This hash incorporates
            the hostname, protocol, port, path and any CGI arguments to the URL,
            as well as elements defined by the Vary header to ensure that multiple
            URLs do not collide with one another.</p>
      
            <p>Each character may be any one of 64-different characters, which mean
            that overall there are 64^22 possible hashes. For example, a URL might
            be hashed to <code>xyTGxSMO2b68mBCykqkp1w</code>. This hash is used
            as a prefix for the naming of the files specific to that URL within
            the cache, however first it is split up into directories as per
            the <code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlevels">CacheDirLevels</a></code> and
            <code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlength">CacheDirLength</a></code>
            directives.</p>
      
            <p><code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlevels">CacheDirLevels</a></code>
            specifies how many levels of subdirectory there should be, and
            <code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlength">CacheDirLength</a></code>
            specifies how many characters should be in each directory. With
            the example settings given above, the hash would be turned into
            a filename prefix as
            <code>/var/cache/apache/x/y/TGxSMO2b68mBCykqkp1w</code>.</p>
      
            <p>The overall aim of this technique is to reduce the number of
            subdirectories or files that may be in a particular directory,
            as most file-systems slow down as this number increases. With
            setting of "1" for
            <code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlength">CacheDirLength</a></code>
            there can at most be 64 subdirectories at any particular level.
            With a setting of 2 there can be 64 * 64 subdirectories, and so on.
            Unless you have a good reason not to, using a setting of "1"
            for <code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlength">CacheDirLength</a></code>
            is recommended.</p>
      
            <p>Setting
            <code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlevels">CacheDirLevels</a></code>
            depends on how many files you anticipate to store in the cache.
            With the setting of "2" used in the above example, a grand
            total of 4096 subdirectories can ultimately be created. With
            1 million files cached, this works out at roughly 245 cached
            URLs per directory.</p>
      
            <p>Each URL uses at least two files in the cache-store. Typically
            there is a ".header" file, which includes meta-information about
            the URL, such as when it is due to expire and a ".data" file
            which is a verbatim copy of the content to be served.</p>
      
            <p>In the case of a content negotiated via the "Vary" header, a
            ".vary" directory will be created for the URL in question. This
            directory will have multiple ".data" files corresponding to the
            differently negotiated content.</p>
          
      
          <h3>Maintaining the Disk Cache</h3>
            
      
            <p>The <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code> module makes no attempt to
            regulate the amount of disk space used by the cache, although it
            will gracefully stand down on any disk error and behave as if the
            cache was never present.</p>
      
            <p>Instead, provided with httpd is the <a href="programs/htcacheclean.html">htcacheclean</a> tool which allows you
            to clean the cache periodically. Determining how frequently to run <a href="programs/htcacheclean.html">htcacheclean</a> and what target size to
            use for the cache is somewhat complex and trial and error may be needed to
            select optimal values.</p>
      
            <p><a href="programs/htcacheclean.html">htcacheclean</a> has two modes of
            operation. It can be run as persistent daemon, or periodically from
            cron. <a href="programs/htcacheclean.html">htcacheclean</a> can take up to an hour
            or more to process very large (tens of gigabytes) caches and if you are
            running it from cron it is recommended that you determine how long a typical
            run takes, to avoid running more than one instance at a time.</p>
       
            <p>It is also recommended that an appropriate "nice" level is chosen for
            htcacheclean so that the tool does not cause excessive disk io while the
            server is running.</p>
      
            <p class="figure">
            <img src="images/caching_fig1.gif" alt="" width="600" height="406" /><br />
            <a id="figure1" name="figure1"><dfn>Figure 1</dfn></a>: Typical
            cache growth / clean sequence.</p>
      
            <p>Because <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code> does not itself pay attention
            to how much space is used you should ensure that
            <a href="programs/htcacheclean.html">htcacheclean</a> is configured to
            leave enough "grow room" following a clean.</p>
          
      
          <h3><a name="memcache" id="memcache">Caching to memcached</a></h3>
            
      
            <p>Using the <code class="module"><a href="./mod/mod_cache_socache.html">mod_cache_socache</a></code> module, <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>
            can cache data from a variety of implementations (aka: "providers"). Using the
            <code class="module"><a href="./mod/mod_socache_memcache.html">mod_socache_memcache</a></code> module, for example, one can specify that
            <a href="http://memcached.org">memcached</a> is to be used as the
            the backend storage mechanism.</p>
      
            <p>Typically the module will be configured as so:</p>
      
            <pre class="prettyprint lang-config">CacheEnable socache /
      CacheSocache memcache:memcd.example.com:11211</pre>
      
      
            <p>Additional <code>memcached</code> servers can be specified by
            appending them to the end of the <code>CacheSocache memcache:</code>
            line separated by commas:</p>
      
            <pre class="prettyprint lang-config">CacheEnable socache /
      CacheSocache memcache:mem1.example.com:11211,mem2.example.com:11212</pre>
      
      
            <p>This format is also used with the other various <code class="module"><a href="./mod/mod_cache_socache.html">mod_cache_socache</a></code>
            providers. For example:</p>
      
            <pre class="prettyprint lang-config">CacheEnable socache /
      CacheSocache shmcb:/path/to/datafile(512000)</pre>
      
      
            <pre class="prettyprint lang-config">CacheEnable socache /
      CacheSocache dbm:/path/to/datafile</pre>
      
      
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="socache-caching" id="socache-caching">General Two-state Key/Value Shared Object Caching</a></h2>
      
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_authn_socache.html">mod_authn_socache</a></code></li><li><code class="module"><a href="./mod/mod_socache_dbm.html">mod_socache_dbm</a></code></li><li><code class="module"><a href="./mod/mod_socache_dc.html">mod_socache_dc</a></code></li><li><code class="module"><a href="./mod/mod_socache_memcache.html">mod_socache_memcache</a></code></li><li><code class="module"><a href="./mod/mod_socache_shmcb.html">mod_socache_shmcb</a></code></li><li><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_authn_socache.html#authncachesocache">AuthnCacheSOCache</a></code></li><li><code class="directive"><a href="./mod/mod_ssl.html#sslsessioncache">SSLSessionCache</a></code></li><li><code class="directive"><a href="./mod/mod_ssl.html#sslstaplingcache">SSLStaplingCache</a></code></li></ul></td></tr></table>
          
          <p>The Apache HTTP server offers a low level shared object cache for
          caching information such as SSL sessions, or authentication credentials,
          within the <a href="socache.html">socache</a> interface.</p>
      
          <p>Additional modules are provided for each implementation, offering the
          following backends:</p>
      
          <dl>
          <dt><code class="module"><a href="./mod/mod_socache_dbm.html">mod_socache_dbm</a></code></dt>
          <dd>DBM based shared object cache.</dd>
          <dt><code class="module"><a href="./mod/mod_socache_dc.html">mod_socache_dc</a></code></dt>
          <dd>Distcache based shared object cache.</dd>
          <dt><code class="module"><a href="./mod/mod_socache_memcache.html">mod_socache_memcache</a></code></dt>
          <dd>Memcache based shared object cache.</dd>
          <dt><code class="module"><a href="./mod/mod_socache_shmcb.html">mod_socache_shmcb</a></code></dt>
          <dd>Shared memory based shared object cache.</dd>
          </dl>
      
          <h3><a name="mod_authn_socache-caching" id="mod_authn_socache-caching">Caching Authentication Credentials</a></h3>
            
      
            <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_authn_socache.html">mod_authn_socache</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_authn_socache.html#authncachesocache">AuthnCacheSOCache</a></code></li></ul></td></tr></table>
      
            <p>The <code class="module"><a href="./mod/mod_authn_socache.html">mod_authn_socache</a></code> module allows the result of
            authentication to be cached, relieving load on authentication backends.</p>
      
          
      
          <h3><a name="mod_ssl-caching" id="mod_ssl-caching">Caching SSL Sessions</a></h3>
            
      
            <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_ssl.html#sslsessioncache">SSLSessionCache</a></code></li><li><code class="directive"><a href="./mod/mod_ssl.html#sslstaplingcache">SSLStaplingCache</a></code></li></ul></td></tr></table>
      
            <p>The <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> module uses the <code>socache</code> interface
            to provide a session cache and a stapling cache.</p>
      
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="file-caching" id="file-caching">Specialized File Caching</a></h2>
      
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_file_cache.html#cachefile">CacheFile</a></code></li><li><code class="directive"><a href="./mod/mod_file_cache.html#mmapfile">MMapFile</a></code></li></ul></td></tr></table>
      
          <p>On platforms where a filesystem might be slow, or where file
          handles are expensive, the option exists to pre-load files into
          memory on startup.</p>
      
          <p>On systems where opening files is slow, the option exists to
          open the file on startup and cache the file handle. These
          options can help on systems where access to static files is
          slow.</p>
      
          <h3><a name="filehandle" id="filehandle">File-Handle Caching</a></h3>
            
      
            <p>The act of opening a file can itself be a source of delay, particularly
            on network filesystems. By maintaining a cache of open file descriptors
            for commonly served files, httpd can avoid this delay. Currently httpd
            provides one implementation of File-Handle Caching.</p>
      
            <h4>CacheFile</h4>
              
      
              <p>The most basic form of caching present in httpd is the file-handle
              caching provided by <code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code>. Rather than caching
              file-contents, this cache maintains a table of open file descriptors. Files
              to be cached in this manner are specified in the configuration file using
              the <code class="directive"><a href="./mod/mod_file_cache.html#cachefile">CacheFile</a></code>
              directive.</p>
      
              <p>The
              <code class="directive"><a href="./mod/mod_file_cache.html#cachefile">CacheFile</a></code> directive
              instructs httpd to open the file when it is started and to re-use
              this file-handle for all subsequent access to this file.</p>
      
              <pre class="prettyprint lang-config">CacheFile /usr/local/apache2/htdocs/index.html</pre>
      
      
              <p>If you intend to cache a large number of files in this manner, you
              must ensure that your operating system's limit for the number of open
              files is set appropriately.</p>
      
              <p>Although using <code class="directive"><a href="./mod/mod_file_cache.html#cachefile">CacheFile</a></code>
              does not cause the file-contents to be cached per-se, it does mean
              that if the file changes while httpd is running these changes will
              not be picked up. The file will be consistently served as it was
              when httpd was started.</p>
      
              <p>If the file is removed while httpd is running, it will continue
              to maintain an open file descriptor and serve the file as it was when
              httpd was started. This usually also means that although the file
              will have been deleted, and not show up on the filesystem, extra free
              space will not be recovered until httpd is stopped and the file
              descriptor closed.</p>
            
      
          
      
          <h3><a name="inmemory" id="inmemory">In-Memory Caching</a></h3>
            
      
            <p>Serving directly from system memory is universally the fastest method
            of serving content. Reading files from a disk controller or, even worse,
            from a remote network is orders of magnitude slower. Disk controllers
            usually involve physical processes, and network access is limited by
            your available bandwidth. Memory access on the other hand can take mere
            nano-seconds.</p>
      
            <p>System memory isn't cheap though, byte for byte it's by far the most
            expensive type of storage and it's important to ensure that it is used
            efficiently. By caching files in memory you decrease the amount of
            memory available on the system. As we'll see, in the case of operating
            system caching, this is not so much of an issue, but when using
            httpd's own in-memory caching it is important to make sure that you
            do not allocate too much memory to a cache. Otherwise the system
            will be forced to swap out memory, which will likely degrade
            performance.</p>
      
            <h4>Operating System Caching</h4>
              
      
              <p>Almost all modern operating systems cache file-data in memory managed
              directly by the kernel. This is a powerful feature, and for the most
              part operating systems get it right. For example, on Linux, let's look at
              the difference in the time it takes to read a file for the first time
              and the second time;</p>
      
              <div class="example"><pre>colm@coroebus:~$ time cat testfile &gt; /dev/null
      real    0m0.065s
      user    0m0.000s
      sys     0m0.001s
      colm@coroebus:~$ time cat testfile &gt; /dev/null
      real    0m0.003s
      user    0m0.003s
      sys     0m0.000s</pre></div>
      
              <p>Even for this small file, there is a huge difference in the amount
              of time it takes to read the file. This is because the kernel has cached
              the file contents in memory.</p>
      
              <p>By ensuring there is "spare" memory on your system, you can ensure
              that more and more file-contents will be stored in this cache. This
              can be a very efficient means of in-memory caching, and involves no
              extra configuration of httpd at all.</p>
      
              <p>Additionally, because the operating system knows when files are
              deleted or modified, it can automatically remove file contents from the
              cache when necessary. This is a big advantage over httpd's in-memory
              caching which has no way of knowing when a file has changed.</p>
            
      
            <p>Despite the performance and advantages of automatic operating system
            caching there are some circumstances in which in-memory caching may be
            better performed by httpd.</p>
      
            <h4>MMapFile Caching</h4>
              
      
              <p><code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code> provides the
              <code class="directive"><a href="./mod/mod_file_cache.html#mmapfile">MMapFile</a></code> directive, which
              allows you to have httpd map a static file's contents into memory at
              start time (using the mmap system call). httpd will use the in-memory
              contents for all subsequent accesses to this file.</p>
      
              <pre class="prettyprint lang-config">MMapFile /usr/local/apache2/htdocs/index.html</pre>
      
      
              <p>As with the
              <code class="directive"><a href="./mod/mod_file_cache.html#cachefile">CacheFile</a></code> directive, any
              changes in these files will not be picked up by httpd after it has
              started.</p>
      
              <p> The <code class="directive"><a href="./mod/mod_file_cache.html#mmapfile">MMapFile</a></code>
              directive does not keep track of how much memory it allocates, so
              you must ensure not to over-use the directive. Each httpd child
              process will replicate this memory, so it is critically important
              to ensure that the files mapped are not so large as to cause the
              system to swap memory.</p>
            
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">Security Considerations</a></h2>
          
      
          <h3>Authorization and Access Control</h3>
            
      
            <p>Using <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> in its default state where
            <code class="directive"><a href="./mod/mod_cache.html#cachequickhandler">CacheQuickHandler</a></code> is set to
            <code>On</code> is very much like having a caching reverse-proxy bolted
            to the front of the server. Requests will be served by the caching module
            unless it determines that the origin server should be queried just as an
            external cache would, and this drastically changes the security model of
            httpd.</p>
      
            <p>As traversing a filesystem hierarchy to examine potential
            <code>.htaccess</code> files would be a very expensive operation,
            partially defeating the point of caching (to speed up requests),
            <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> makes no decision about whether a cached
            entity is authorised for serving. In other words; if
            <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> has cached some content, it will be served
            from the cache as long as that content has not expired.</p>
      
            <p>If, for example, your configuration permits access to a resource by IP
            address you should ensure that this content is not cached. You can do this
            by using the <code class="directive"><a href="./mod/mod_cache.html#cachedisable">CacheDisable</a></code>
            directive, or <code class="module"><a href="./mod/mod_expires.html">mod_expires</a></code>. Left unchecked,
            <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> - very much like a reverse proxy - would cache
            the content when served and then serve it to any client, on any IP
            address.</p>
      
            <p>When the <code class="directive"><a href="./mod/mod_cache.html#cachequickhandler">CacheQuickHandler</a></code>
            directive is set to <code>Off</code>, the full set of request processing
            phases are executed and the security model remains unchanged.</p>
          
      
          <h3>Local exploits</h3>
            
      
            <p>As requests to end-users can be served from the cache, the cache
            itself can become a target for those wishing to deface or interfere with
            content. It is important to bear in mind that the cache must at all
            times be writable by the user which httpd is running as. This is in
            stark contrast to the usually recommended situation of maintaining
            all content unwritable by the Apache user.</p>
      
            <p>If the Apache user is compromised, for example through a flaw in
            a CGI process, it is possible that the cache may be targeted. When
            using <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code>, it is relatively easy to
            insert or modify a cached entity.</p>
      
            <p>This presents a somewhat elevated risk in comparison to the other
            types of attack it is possible to make as the Apache user. If you are
            using <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code> you should bear this in mind -
            ensure you upgrade httpd when security upgrades are announced and
            run CGI processes as a non-Apache user using <a href="suexec.html">suEXEC</a> if possible.</p>
      
          
      
          <h3>Cache Poisoning</h3>
            
      
            <p>When running httpd as a caching proxy server, there is also the
            potential for so-called cache poisoning. Cache Poisoning is a broad
            term for attacks in which an attacker causes the proxy server to
            retrieve incorrect (and usually undesirable) content from the origin
            server.</p>
      
            <p>For example if the DNS servers used by your system running httpd
            are vulnerable to DNS cache poisoning, an attacker may be able to control
            where httpd connects to when requesting content from the origin server.
            Another example is so-called HTTP request-smuggling attacks.</p>
      
            <p>This document is not the correct place for an in-depth discussion
            of HTTP request smuggling (instead, try your favourite search engine)
            however it is important to be aware that it is possible to make
            a series of requests, and to exploit a vulnerability on an origin
            webserver such that the attacker can entirely control the content
            retrieved by the proxy.</p>
          
      
          <h3>Denial of Service / Cachebusting</h3>
            
      
            <p>The Vary mechanism allows multiple variants of the same URL to be
            cached side by side. Depending on header values provided by the client,
            the cache will select the correct variant to return to the client. This
            mechanism can become a problem when an attempt is made to vary on a
            header that is known to contain a wide range of possible values under
            normal use, for example the <code>User-Agent</code> header. Depending
            on the popularity of the particular web site thousands or millions of
            duplicate cache entries could be created for the same URL, crowding
            out other entries in the cache.</p>
            
            <p>In other cases, there may be a need to change the URL of a particular
            resource on every request, usually by adding a "cachebuster" string to
            the URL. If this content is declared cacheable by a server for a
            significant freshness lifetime, these entries can crowd out
            legitimate entries in a cache. While <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>
            provides a
            <code class="directive"><a href="./mod/mod_cache.html#cacheignoreurlsessionidentifiers">CacheIgnoreURLSessionIdentifiers</a></code>
            directive, this directive should be used with care to ensure that
            downstream proxy or browser caches aren't subjected to the same denial
            of service issue.</p>
          
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/caching.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/caching.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./tr/caching.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/caching.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/content-negotiation.html.ko.euc-kr�����������������������������������������0000644�0000000�0000050�00000070752�13412755316�022136� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>³»¿ëÇù»ó (Content Negotiation) - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>³»¿ëÇù»ó (Content Negotiation)</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/content-negotiation.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/content-negotiation.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/content-negotiation.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/content-negotiation.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/content-negotiation.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      
          <p>¾ÆÆÄÄ¡´Â HTTP/1.1 ±Ô¾à¿¡ ±â¼úµÈ ³»¿ëÇù»ó(content
          negotiation)À» Áö¿øÇÑ´Ù. ³»¿ëÇù»óÀº media type, ¾ð¾î, ¹®ÀÚÁýÇÕ,
          ÀÎÄÚµù µî¿¡ ´ëÇØ ºê¶ó¿ìÀú°¡ Á¦°øÇÑ ¼±È£µµ¿¡ µû¶ó ÀÚ¿øÀÇ
          °¡Àå ÀûÇÕÇÑ Ç¥ÇöÀ» ¼±ÅÃÇÑ´Ù. ¶Ç ºÒ¿ÏÀüÇÑ Çù»ó Á¤º¸¸¦ º¸³»´Â
          ºê¶ó¿ìÀúÀÇ ¿äûÀ» Áö´ÉÀûÀ¸·Î ó¸®ÇÏ´Â ±â´Éµµ ÀÖ´Ù.</p>
      
          <p>±âº»ÀûÀ¸·Î ÄÄÆÄÀϵǴ <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>
          ¸ðµâÀÌ ³»¿ëÇù»ó ±â´ÉÀ» Á¦°øÇÑ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#about">³»¿ëÇù»ó¿¡ ´ëÇØ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#negotiation">¾ÆÆÄÄ¡ÀÇ Çù»ó</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#methods">Çù»ó¹æ¹ý</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#better">ǰÁú°è¼ö Á¶ÀÛÇϱâ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#extensions">ÀÚ¿¬½º·¯¿î(transparent) ³»¿ëÇù»óÀÇ È®Àå</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#naming">ÇÏÀÌÆÛ¸µÅ©¿Í À̸§±ÔÄ¢¿¡ ´ëÇÏ¿©</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#caching">ij½¬¿¡ ´ëÇÏ¿©</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="about" id="about">³»¿ëÇù»ó¿¡ ´ëÇØ</a></h2>
      
          <p>ÀÚ¿øÀº ¿©·¯ ´Ù¸¥ Ç¥ÇöÀ» °¡Áú ¼ö ÀÖ´Ù. ¿¹¸¦ µé¾î, ´Ù¸¥
          ¾ð¾î³ª ´Ù¸¥ media type ȤÀº µÑ ¸ðµÎ°¡ ´Ù¸¥ Ç¥ÇöµéÀÌ ÀÖÀ»
          ¼ö ÀÖ´Ù. °¡Àå Àû´çÇÑ Ç¥ÇöÀ» ¼±ÅÃÇÏ´Â ÇѰ¡Áö ¹æ¹ýÀº »ç¿ëÀÚ¿¡°Ô
          ¸ñ·Ï ÆäÀÌÁö¸¦ º¸¿©ÁÖ°í ¼±ÅÃÇÏ°Ô ÇÏ´Â °ÍÀÌ´Ù. ±×·¯³ª ¼­¹ö°¡
          ÀÚµ¿À¸·Î ¼±ÅÃÇÏ´Â °Íµµ °¡´ÉÇÏ´Ù. ÀÌ´Â ºê¶ó¿ìÀú°¡ ¿äûÀÇ
          ÀϺηΠ±×µéÀÌ ¼±È£Çϴ ǥÇö¿¡ ´ëÇÑ Á¤º¸¸¦ º¸³»±â¶§¹®¿¡
          °¡´ÉÇÏ´Ù. ¿¹¸¦ µé¾î, ºê¶ó¿ìÀú´Â °¡´ÉÇÑÇÑ ºÒ¾î·Î, ±×·¯³ª
          ¾ø´Ù¸é ¿µ¾î·Î Á¤º¸¸¦ º¸°í½Í´Ù°í ¾Ë·ÁÁÙ ¼ö ÀÖ´Ù. ºê¶ó¿ìÀú´Â
          ¿äûÀÇ Çì´õ·Î ±×µéÀÇ ±âÈ£¸¦ ³ªÅ¸³½´Ù. ¿ÀÁ÷ ºÒ¾î·ÎµÈ Ç¥Çö¸¸À»
          ¿äûÇÑ´Ù¸é ºê¶ó¿ìÀú´Â ´ÙÀ½°ú °°ÀÌ º¸³½´Ù.</p>
      
      <div class="example"><p><code>Accept-Language: fr</code></p></div>
      
          <p>ÀÌ·± ±âÈ£´Â Ç¥ÇöÀÌ ¾ð¾îº°·Î ´Ù¸¦ °æ¿ì¿¡¸¸ °í·ÁµÈ´Ù.</p>
      
          <p>´ÙÀ½Àº ´õ º¹ÀâÇÑ ¿äûÀÇ ¿¹·Î ºê¶ó¿ìÀú°¡ ºÒ¾î¿Í ¿µ¾î¸¦
          ¹ÞÀ» ¼ö ÀÖÁö¸¸, ºÒ¾î¸¦ ´õ ¼±È£Çϰí, ¿©·¯ media typeÀ» ¹ÞÀ»
          ¼ö ÀÖÁö¸¸, ÀÏ¹Ý ÅØ½ºÆ® º¸´Ù´Â HTML, ´Ù¸¥ media type º¸´Ù´Â
          GIF¿Í JPEGÀ» ¼±È£ÇÑ´Ù°í ¾Ë·ÁÁØ´Ù.</p>
      
      <div class="example"><p><code>
        Accept-Language: fr; q=1.0, en; q=0.5<br />
        Accept: text/html; q=1.0, text/*; q=0.8, image/gif; q=0.6, image/jpeg; q=0.6, image/*; q=0.5, */*; q=0.1
      </code></p></div>
      
          <p>¾ÆÆÄÄ¡´Â HTTP/1.1 ±Ô¾à¿¡ Á¤ÀÇµÈ '¼­¹ö ÁÖµµ(server driven)'
          ³»¿ëÇù»óÀ» Áö¿øÇÑ´Ù. ¾ÆÆÄÄ¡´Â <code>Accept</code>,
          <code>Accept-Language</code>, <code>Accept-Charset</code>,
          <code>Accept-Encoding</code> ¿äû Çì´õ¸¦ ¸ðµÎ Áö¿øÇÑ´Ù.
          ¶Ç, ¾ÆÆÄÄ¡´Â RFC 2295¿Í RFC 2296¿¡ Á¤ÀÇµÈ ½ÇÇèÀûÀÎ ³»¿ëÇù»óÀÎ
          'ÀÚ¿¬½º·¯¿î(transparent)' ¿äû Çì´õµµ Áö¿øÇÑ´Ù. ±×·¯³ª ÀÌ
          RFC¿¡ Á¤ÀÇµÈ '±â´É Çù»ó(feature negotiation)'Àº Áö¿øÇÏÁö
          ¾Ê´Â´Ù.</p>
      
          <p><strong>ÀÚ¿ø(resource)</strong>Àº (RFC 2396) URI·Î ±¸º°ÇÏ´Â
          °³³äÀûÀÎ Á¸Àç´Ù. ¾ÆÆÄÄ¡¿Í °°Àº À¥¼­¹ö´Â ÀÚ¿øÀÇ
          <strong>Ç¥Çö(representations)</strong>À» Á¦°øÇÑ´Ù. Ç¥ÇöÀº
          ÁöÁ¤µÈ media type, ¹®ÀÚÁýÇÕ, ÀÎÄÚµù µîÀ» °¡Áø ¹ÙÀÌÆ®µé·Î
          µÇÀÖ´Ù. ÀÚ¿øÀº ¿©·¯ Ç¥Çö°ú (¶§·Î´Â ¾øÀ» ¼öµµ ÀÖ´Ù) ¿¬°üµÈ´Ù.
          ÀÚ¿ø¿¡ ¿©·¯ Ç¥ÇöÀÌ ÀÖ´Ù¸é ÀÚ¿øÀ»
          <strong>Çù»ó°¡´ÉÇÏ´Ù°í(negotiable)</strong> ºÎ¸£¸ç, À̶§
          °¢ Ç¥ÇöÀ» <strong>º¯Çü(variant)</strong>À̶ó°í ÇÑ´Ù.
          Çù»ó°¡´ÉÇÑ ÀÚ¿øÀÇ º¯Çü Á¾·ù¸¦ Çù»óÀÇ
          <strong>¹üÀ§(dimension)</strong>¶ó°í ÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="negotiation" id="negotiation">¾ÆÆÄÄ¡ÀÇ Çù»ó</a></h2>
      
          <p>ÀÚ¿øÀ» Çù»óÇϱâÀ§ÇØ ¼­¹ö´Â °¢ º¯Çü¿¡ ´ëÇÑ Á¤º¸°¡ ÇÊ¿äÇÏ´Ù.
          ´ÙÀ½ µÎ°¡Áö ¹æ¹ýÁß Çϳª·Î Á¤º¸¸¦ ¾ò´Â´Ù:</p>
      
          <ul>
            <li>º¯ÇüÀ» ´ãÀº ÆÄÀϵéÀ» Á÷Á¢ ¿­°ÅÇÑ type mapÀ» (<em>¿¹¸¦
            µé¾î</em>, <code>*.var</code> ÆÄÀÏ) »ç¿ëÇϰųª,</li>
      
            <li>Á÷Á¢ ÁöÁ¤ÇÏÁö¾Ê¾Æµµ ¼­¹ö°¡ ÆÄÀÏ¸í¿¡¼­ ±ÔÄ¢À» ã¾Æ¼­
            °á°ú¸¦ ¼±ÅÃÇÏ´Â 'MultiViews'¸¦ »ç¿ëÇÑ´Ù.</li>
          </ul>
      
         <h3><a name="type-map" id="type-map">type-map ÆÄÀÏ »ç¿ëÇϱâ</a></h3>
      
          <p>type mapÀº <code>type-map</code>À̶õ Çڵ鷯¿Í ¿¬°áµÈ
          (ȤÀº ÀÌÀü ¾ÆÆÄÄ¡ ¼³Á¤°ú ȣȯÀ» À§ÇØ MIME typeÀÌ
          <code>application/x-type-map</code>ÀÎ) ¹®¼­´Ù. ÀÌ ±â´ÉÀ»
          »ç¿ëÇÏ·Á¸é ¼³Á¤¿¡¼­ <code>type-map</code> Çڵ鷯¿¡ ´ëÇÑ
          ÆÄÀÏ È®ÀåÀÚ¸¦ ÁöÁ¤ÇØ¾ß ÇÑ´Ù. ¼­¹ö ¼³Á¤ÆÄÀÏ¿¡ ´ÙÀ½°ú °°ÀÌ
          ¼³Á¤ÇÏ´Â °ÍÀÌ ÁÁ´Ù.</p>
      
      <div class="example"><p><code>AddHandler type-map .var</code></p></div>
      
          <p>Type map ÆÄÀÏÀº ÇØ´çÇÏ´Â ÀÚ¿ø°ú À̸§ÀÌ °°¾Æ¾ß Çϰí,
          °¢ º¯Çü¿¡ ´ëÇÑ Ç׸ñÀÌ ÀÖ¾î¾ß ÇÑ´Ù. Ç׸ñÀº ¿©·¯ HTTPÇü½Ä
          Çì´õ ÁÙ·Î ±¸¼ºµÈ´Ù. º¯Çü¿¡ ´ëÇÑ °¢°¢ÀÇ Ç׸ñµéÀº ºóÁÙ·Î
          ±¸ºÐÇÑ´Ù. Ç׸ñ¾È¿¡¼­ ºóÁÙÀ» »ç¿ëÇÒ ¼ö ¾ø´Ù. (ÀÌ·¸°Ô ÇÒ
          Çʿ䰡 ¾ø°í, À־ ¹«½ÃÇÏÁö¸¸) ¿©·¯ Ç׸ñÀÌ °øÅëÀ¸·Î °¡Áö°í
          ÀÖ´Â ³»¿ëÀ¸·Î map ÆÄÀÏÀ» ½ÃÀÛÇÏ´Â °ÍÀÌ º¸ÅëÀÌ´Ù. ´ÙÀ½Àº
          map ÆÄÀÏ ¿¹´Ù. ÀÌ ÆÄÀÏÀÇ À̸§Àº <code>foo.var</code>·Î,
          <code>foo</code>¶ó´Â ÀÚ¿øÀ» ¼³¸íÇÑ´Ù.</p>
      
      <div class="example"><p><code>
        URI: foo<br />
      <br />
        URI: foo.en.html<br />
        Content-type: text/html<br />
        Content-language: en<br />
      <br />
        URI: foo.fr.de.html<br />
        Content-type: text/html;charset=iso-8859-2<br />
        Content-language: fr, de<br />
      </code></p></div>
          <p>typemap ÆÄÀÏÀÌ ÆÄÀϸí È®ÀåÀÚ º¸´Ù, ½ÉÁö¾î Multiviews¸¦
          »ç¿ëÇÏ¿©µµ, ¿ì¼±±ÇÀ» °¡ÁüÀ» ÁÖÀÇÇ϶ó. º¯ÇüÀÌ ¼­·Î ´Ù¸¥ ǰÁúÀ»
          °¡Áø´Ù¸é, ´ÙÀ½°ú °°ÀÌ (JPEG, GIF, ASCII-art¿¡ ÇØ´çÇÏ´Â)
          media type¿¡ "qs" ÆÄ¶ó¹ÌÅͷΠǰÁú(source quality)À» Ç¥½ÃÇÒ
          ¼ö ÀÖ´Ù:</p>
      
      <div class="example"><p><code>
        URI: foo<br />
      <br />
        URI: foo.jpeg<br />
        Content-type: image/jpeg; qs=0.8<br />
      <br />
        URI: foo.gif<br />
        Content-type: image/gif; qs=0.5<br />
      <br />
        URI: foo.txt<br />
        Content-type: text/plain; qs=0.01<br />
      </code></p></div>
      
          <p>qs °ªÀº 0.000¿¡¼­ 1.000 »çÀÌ´Ù. qs °ªÀÌ 0.000ÀÎ º¯ÇüÀº
          Àý´ë ¼±ÅõÇÁö ¾ÊÀ½À» ÁÖÀÇÇ϶ó. 'qs' °ªÀÌ ¾ø´Â º¯ÇüÀº 1.0À¸·Î
          Ãë±ÞµÈ´Ù. qs °ªÀº Ŭ¶óÀ̾ðÆ®ÀÇ ´É·Â°ú´Â °ü°è¾øÀÌ ´Ù¸¥ º¯Çüµé°ú
          ºñ±³ÇÏ¿© ±× º¯ÇüÀÇ »ó´ëÀûÀÎ 'ǰÁú'À» ³ªÅ¸³½´Ù. ¿¹¸¦ µé¾î,
          »çÁøÀ» ³ªÅ¸³»·Á´Â °æ¿ì JPEG ÆÄÀÏÀÌ ASCII ÆÄÀϺ¸´Ù´Â Ç×»ó
          ³ôÀº ǰÁúÀ» °¡Áø´Ù. ±×·¯³ª ÀÚ¿øÀÌ ¿ø·¡ ASCII art¿´´Ù¸é
          ASCII Ç¥ÇöÀÌ JPEG Ç¥Çöº¸´Ù ´õ ³ôÀº ǰÁúÀ» °¡Áú ¼ö ÀÖ´Ù.
          ±×·¯¹Ç·Î ¾î¶² º¯ÇüÀÇ qs °ªÀº Ç¥ÇöÇÏ·Á´Â ÀÚ¿øÀÇ ¼ºÁú¿¡
          µû¶ó ´Ù¸£´Ù.</p>
      
          <p>Áö¿øÇÏ´Â ¸ðµç Çì´õ ¸ñ·ÏÀº <a href="mod/mod_negotiation.html#typemaps">mod_negotation
          typemap</a> ¹®¼­¸¦ Âü°íÇ϶ó.</p>
      
      
      <h3><a name="multiviews" id="multiviews">Multiviews</a></h3>
      
          <p><code>MultiViews</code>´Â µð·ºÅ丮º° ¿É¼ÇÀ̹ǷÎ,
          <code>httpd.conf</code>ÀÇ
          <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>,
          <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>,
          <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>
          ¼½¼Ç ȤÀº (<code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code>°¡
          ÀûÀýÈ÷ ¼³Á¤µÇ¾ú´Ù¸é) <code>.htaccess</code> ÆÄÀÏÀÇ
          <code class="directive"><a href="./mod/core.html#options">Options</a></code> Áö½Ã¾î¿¡ ¼³Á¤ÇÒ
          ¼ö ÀÖ´Ù. <code>Options All</code>Àº <code>MultiViews</code>¸¦
          Æ÷ÇÔÇÏÁö¾ÊÀ½À» ÁÖÀÇÇ϶ó. µû·Î Á÷Á¢ ½áÁà¾ß ÇÑ´Ù.</p>
      
          <p><code>MultiViews</code>¸¦ »ç¿ëÇÏ¸é ´ÙÀ½°ú °°Àº ÀÏÀÌ ÀϾ´Ù:
          ¼­¹ö°¡ <code>/some/dir/foo</code>¿¡ ´ëÇÑ ¿äûÀ» ¹Þ°í
          <code>/some/dir/foo</code>¿¡ <code>MultiViews</code>°¡ µ¿ÀÛÇϸç
          <code>/some/dir/foo</code>°¡ Á¸ÀçÇÏÁö <em>¾ÊÀ»</em> °æ¿ì,
          ¼­¹ö´Â µð·ºÅ丮¿¡¼­ À̸§ÀÌ foo.*ÀÎ ÆÄÀϵéÀ» ¸ðµç Æ÷ÇÔÇÏ´Â
          °¡»óÀÇ type mapÀ» ¸¸µç´Ù. Ŭ¶óÀÌ¾ðÆ®°¡ ¿äûÇÑ media type°ú
          content-encodingÀ» °¡Áö°í ÀÌÁß¿¡ °¡Àå ÀûÇÕÇÑ °ÍÀ» ¼±ÅÃÇÑ´Ù.</p>
      
          <p><code>MultiViews</code>´Â ¼­¹ö°¡ µð·ºÅ丮¸¦ ÂüÁ¶ÇÒ¶§
          ÆÄÀÏÀ» ã´Â <code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code> Áö½Ã¾î¿¡µµ
          Àû¿ëµÈ´Ù. ¼³Á¤ÆÄÀÏÀÌ ´ÙÀ½°ú °°´Ù¸é,</p>
      <div class="example"><p><code>DirectoryIndex index</code></p></div>
          <p><code>index.html</code>°ú <code>index.html3</code>ÀÌ
          ¸ðµÎ ÀÖ´Ù¸é ¼­¹ö´Â ÀÌµÑ Áß¿¡ Çϳª¸¦ °áÁ¤ÇÑ´Ù. µÑ ¸ðµÎ ¾ø°í
          <code>index.cgi</code>°¡ ÀÖ´Ù¸é, ¼­¹ö´Â ±×°ÍÀ» ½ÇÇàÇÑ´Ù.</p>
      
          <p>µð·ºÅ丮¸¦ ÀÐÀ»¶§ ÆÄÀÏÁß Çϳª°¡ Charset, Content-Type,
          Language, Encoding¸¦ ÆÇ´ÜÇÏ´Â <code>mod_mime</code>ÀÌ ¸ð¸£´Â
          È®ÀåÀÚ¸¦ °¡Áø´Ù¸é, °á°ú´Â <code class="directive"><a href="./mod/mod_mime.html#multiviewsmatch">MultiViewsMatch</a></code> Áö½Ã¾î ¼³Á¤¿¡
          ´Þ·Ç´Ù. ÀÌ Áö½Ã¾î´Â Çڵ鷯, ÇÊÅÍ, ´Ù¸¥ È®ÀåÇüµéÀÌ MultiViews
          Çù»ó¿¡ Âü¿©ÇÒÁö ¿©ºÎ¸¦ °áÁ¤ÇÑ´Ù.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="methods" id="methods">Çù»ó¹æ¹ý</a></h2>
      
          <p>¾ÆÆÄÄ¡°¡ type-map ÆÄÀÏÀ̳ª µð·ºÅ丮¿¡ ÀÖ´Â ÆÄÀϸíµé·Î
          ÁÖ¾îÁø ÀÚ¿ø¿¡ ´ëÇÑ º¯Çü ¸ñ·ÏÀ» ¾ò°ÔµÇ¸é 'ÃÖÀûÀÇ' º¯ÇüÀ»
          °áÁ¤ÇϱâÀ§ÇØ µÎ ¹æ¹ýÁß Çϳª¸¦ »ç¿ëÇÑ´Ù. ¾ÆÆÄÄ¡ ³»¿ëÇù»ó
          ±â´ÉÀ» »ç¿ëÇϱâÀ§ÇØ Á¤È®È÷ Çù»óÀÌ ¾î¶»°Ô ÀϾ´ÂÁö ÀÚ¼¼È÷
          ¾Ë ÇÊ¿ä´Â ¾ø´Ù. ±×·¯³ª ±Ã±ÝÇÑ »ç¶÷À» À§ÇØ ÀÌ ¹æ¹ýÀ» ¼³¸íÇÑ´Ù.</p>
      
          <p>µÎ°¡Áö Çù»ó¹æ¹ýÀÌ ÀÖ´Ù:</p>
      
          <ol>
            <li><strong>¾ÆÆÄÄ¡ ¾Ë°í¸®ÁòÀ» »ç¿ëÇÏ¿© ¼­¹ö°¡ ÁÖµµÇÏ´Â
            Çù»ó</strong>Àº ÀϹÝÀûÀÎ °æ¿ì¿¡ »ç¿ëÇÑ´Ù. ¾ÆÆÄÄ¡ ¾Ë°í¸®ÁòÀº
            ¾Æ·¡¼­ ÀÚ¼¼È÷ ¼³¸íÇÑ´Ù. ÀÌ ¾Ë°í¸®ÁòÀ» »ç¿ëÇÏ¸é ¾ÆÆÄÄ¡´Â
            ´õ ³ªÀº °á°ú¸¦ ¾ò±âÀ§ÇØ Á¾Á¾ ƯÁ¤ ¹üÀ§ÀÇ
            ǰÁú°è¼ö(quality factor)¸¦ 'Á¶ÀÛÇÑ´Ù'. ¾ÆÆÄÄ¡°¡ ǰÁú°è¼ö¸¦
            Á¶ÀÛÇÏ´Â ¹æ¹ýÀº ¾Æ·¡¼­ ÀÚ¼¼È÷ ¼³¸íÇÑ´Ù.</li>
      
            <li><strong>ÀÚ¿¬½º·¯¿î(Transparent) ³»¿ëÇù»ó</strong>Àº
            ºê¶ó¿ìÀú°¡ RFC 2295¿¡ Á¤ÀÇµÈ ¹æ¹ýÀ¸·Î ¿äûÇÒ °æ¿ì¿¡¸¸
            »ç¿ëÇÑ´Ù. ÀÌ Çù»ó¹æ¹ýÀº 'ÃÖÀûÀÇ' º¯ÇüÀ» °áÁ¤ÇÒ ±ÇÇÑÀ»
            ºê¶ó¿ìÀú¿¡°Ô ºÎ¿©ÇÑ´Ù. ±×·¡¼­ °á°ú´Â ºê¶ó¿ìÀúÀÇ ¾Ë°í¸®Áò¿¡
            ´Þ·È´Ù. ÀÚ¿¬½º·¯¿î Çù»ó°úÁ¤Áß¿¡ ºê¶ó¿ìÀú´Â ¾ÆÆÄÄ¡¿¡°Ô
            RFC 2296¿¡ Á¤ÀÇµÈ '¿ø°Ý º¯Çü¼±Åà ¾Ë°í¸®Áò(remote variant
            selection algorithm)'À» ¿äûÇÒ ¼ö ÀÖ´Ù.</li>
          </ol>
      
      <h3><a name="dimensions" id="dimensions">Çù»óÀÇ ¹üÀ§</a></h3>
      
          <table>
            
            <tr valign="top">
              <th>¹üÀ§</th>
      
              <th>¼³¸í</th>
            </tr>
      
            <tr valign="top">
              <td>Media Type</td>
      
              <td>ºê¶ó¿ìÀú´Â <code>Accept</code> Çì´õ·Î ¼±È£¸¦ ³ªÅ¸³½´Ù.
              °¢ Ç׸ñÀº ǰÁú°è¼ö¸¦ °¡Áú ¼ö ÀÖ´Ù. º¯ÇüÀÇ ¼³¸íµµ ǰÁú°è¼ö¸¦
              ("qs" ÆÄ¶ó¹ÌÅÍ) °¡Áú ¼ö ÀÖ´Ù.</td>
            </tr>
      
            <tr valign="top">
              <td>Language</td>
      
              <td>ºê¶ó¿ìÀú´Â <code>Accept-Language</code> Çì´õ·Î ¼±È£¸¦
              ³ªÅ¸³½´Ù. °¢ Ç׸ñÀº ǰÁú°è¼ö¸¦ °¡Áú ¼ö ÀÖ´Ù. º¯ÇüÀº
              ¿©·¯ ¾ð¾î¸¦ °¡Áú (ȤÀº ¾Æ¹« ¾ð¾îµµ ¾øÀ») ¼ö ÀÖ´Ù.</td>
            </tr>
      
            <tr valign="top">
              <td>Encoding</td>
      
              <td>ºê¶ó¿ìÀú´Â <code>Accept-Encoding</code> Çì´õ·Î ¼±È£¸¦
              ³ªÅ¸³½´Ù. °¢ Ç׸ñÀº ǰÁú°è¼ö¸¦ °¡Áú ¼ö ÀÖ´Ù.</td>
            </tr>
      
            <tr valign="top">
              <td>Charset</td>
      
              <td>ºê¶ó¿ìÀú´Â <code>Accept-Charset</code> Çì´õ·Î ¼±È£¸¦
              ³ªÅ¸³½´Ù. °¢ Ç׸ñÀº ǰÁú°è¼ö¸¦ °¡Áú ¼ö ÀÖ´Ù. º¯ÇüÀº
              media typeÀÇ ÆÄ¶ó¹ÌÅÍ·Î ¹®ÀÚÁýÇÕÀ» ³ªÅ¸³¾ ¼ö ÀÖ´Ù.</td>
            </tr>
          </table>
      
      
      <h3><a name="algorithm" id="algorithm">¾ÆÆÄÄ¡ Çù»ó ¾Ë°í¸®Áò</a></h3>
      
          <p>¾ÆÆÄÄ¡´Â ºê¶ó¿ìÀú¿¡°Ô º¸³¾ 'ÃÖÀûÀÇ' º¯ÇüÀ» (ÀÖ´Ù¸é)
          ¼±ÅÃÇϱâÀ§ÇØ ¾Æ·¡ ¾Ë°í¸®ÁòÀ» »ç¿ëÇÑ´Ù. ÀÌ ¾Ë°í¸®ÁòÀº º¯°æÇÒ
          ¼ö ¾ø´Ù. ´ÙÀ½¿Í °°ÀÌ µ¿ÀÛÇÑ´Ù:</p>
      
          <ol>
            <li>¸ÕÀú, Çù»óÀÇ °¢ ¹üÀ§¿¡ ´ëÇØ ÇØ´çÇÏ´Â <em>Accept*</em>
            Çì´õ¸¦ °Ë»çÇϰí, °¢ º¯Çü¿¡ ǰÁú°ªÀ» ¸Å±ä´Ù. ¾î¶² ¹üÀ§ÀÇ
            <em>Accept*</em> Çì´õ°¡ ¹Þ¾ÆµéÀÌÁö ¾Ê´Â º¯ÇüÀº Èĺ¸¿¡¼­
            Á¦¿ÜÇÑ´Ù. ¾î¶² º¯Çüµµ ³²Áö¾ÊÀ¸¸é 4 ´Ü°è·Î °£´Ù.</li>
      
            <li>
              Èĺ¸¿¡¼­ Çϳª¾¿ Á¦¿ÜÇÏ¿© 'ÃÖÀûÀÇ' º¯ÇüÀ» ã´Â´Ù. ´ÙÀ½
              °¢ °Ë»ç´Â ¼ø¼­´ë·Î ÀϾ´Ù. °¢ °Ë»ç¿¡¼­ ¼±ÅõÇÁö¾ÊÀº
              º¯ÇüÀº Á¦¿ÜµÈ´Ù. °¢ °Ë»çÈÄ ÇÑ º¯Çü¸¸ ³²À¸¸é À̸¦ ÃÖÀûÀÇ
              º¯ÇüÀ¸·Î ¼±ÅÃÇϰí 3 ´Ü°è·Î °£´Ù. ¿©·¯ º¯ÇüÀÌ ³²À¸¸é
              ´ÙÀ½ °Ë»ç¸¦ ÁøÇàÇÑ´Ù.
      
              <ol>
                <li><code>Accept</code> Çì´õÀÇ Ç°Áú°è¼ö¿Í º¯ÇüÀÇ
                media type¿¡ ´ëÇÑ Ç°Áú°ªÀ» °öÇÏ¿© °¡Àå ³ôÀº °ªÀ»
                °¡Áø º¯ÇüÀ» ¼±ÅÃÇÑ´Ù.</li>
      
                <li>°¡Àå ³ôÀº ¾ð¾î(language) ǰÁú°è¼ö¸¦ °¡Áø º¯ÇüÀ»
                ¼±ÅÃÇÑ´Ù.</li>
      
                <li><code>Accept-Language</code> Çì´õ¿¡ (ÀÖ´Ù¸é)
                ³ª¿Â ¾ð¾îÀÇ ¼ø¼­ ȤÀº <code>LanguagePriority</code>
                Áö½Ã¾î¿¡ (ÀÖ´Ù¸é) ³ª¿Â ¾ð¾îÀÇ ¼ø¼­¸¦ °¡Áö°í °¡Àå
                ÀûÇÕÇÑ ¾ð¾î¸¦ °¡Áø º¯ÇüÀ» ¼±ÅÃÇÑ´Ù.</li>
      
                <li>°¡Àå ³ôÀº (text/html media typeÀÇ ¹öÀüÀ» ³ªÅ¸³»´Â)
                'level' media ÆÄ¶ó¹ÌÅ͸¦ °¡Áø º¯ÇüÀ» ¼±ÅÃÇÑ´Ù.</li>
      
                <li><code>Accept-Charset</code> Çì´õ¸¦ °¡Áö°í °¡Àå
                ÀûÇÕÇÑ charset media ÆÄ¶ó¹ÌÅ͸¦ °¡Áø º¯ÇüÀ» ã´Â´Ù.
                Çì´õ°¡ ¾ø´Ù¸é ISO-8859-1 ¹®ÀÚÁýÇÕÀ» °¡Àå ¼±È£ÇÑ´Ù.
                <code>text/*</code> media typeÀ» °¡ÁöÁö¸¸ ¸í½ÃÀûÀ¸·Î
                ƯÁ¤ ¹®ÀÚÁýÇÕ°ú ¿¬°áµÇÁö¾ÊÀº º¯ÇüÀº ISO-8859-1·Î
                °¡Á¤ÇÑ´Ù.</li>
      
                <li>ISO-8859-1ÀÌ <em>¾Æ´Ñ</em> charset media ÆÄ¶ó¹ÌÅ͸¦
                °¡Áø º¯ÇüµéÀ» ¼±ÅÃÇÑ´Ù. ±×·± º¯ÇüÀÌ ¾ø´Ù¸é, ´ë½Å ¸ðµç
                º¯ÇüÀ» ¼±ÅÃÇÑ´Ù.</li>
      
                <li>°¡Àå ÀûÇÕÇÑ ÀÎÄÚµùÀ» °¡Áø º¯ÇüÀ» ¼±ÅÃÇÑ´Ù.
                user-agent¿¡ ÀûÇÕÇÑ ÀÎÄÚµùÀ» °¡Áø º¯ÇüÀÌ ÀÖ´Ù¸é ±×
                º¯Çü¸¸À» ¼±ÅÃÇÑ´Ù. ±×·¸Áö¾Ê°í ÀÎÄÚµùµÈ º¯Çü°ú ÀÎÄÚµù¾ÈµÈ
                º¯ÇüÀÌ °°ÀÌ ÀÖ´Ù¸é ÀÎÄÚµù¾ÈµÊ º¯Çü¸¸À» ¼±ÅÃÇÑ´Ù. º¯ÇüÀÌ
                ¸ðµÎ ÀÎÄÚµùµÇ¾ú°Å³ª ¸ðµÎ ÀÎÄÚµù¾ÈµÈ °æ¿ì ¸ðµç º¯ÇüÀ»
                ¼±ÅÃÇÑ´Ù.</li>
      
                <li>content length°¡ °¡Àå ÀûÀº º¯ÇüÀ» ¼±ÅÃÇÑ´Ù.</li>
      
                <li>³²Àº °ÍÁß Ã¹¹øÀç º¯ÇüÀ» ¼±ÅÃÇÑ´Ù. ÀÌ´Â type-map
                ÆÄÀÏÀÇ ¾Õ¿¡ ³ª¿Ô°Å³ª, µð·ºÅ丮¿¡¼­ º¯ÇüÀ» ÀÐÀº °æ¿ì
                ÆÄÀϸíÀ» ASCII ÄÚµå ¼ø¼­·Î ÇÏ¿© ¾Õ¿¡ ³ª¿À´Â °ÍÀÌ´Ù.</li>
              </ol>
            </li>
      
            <li>ÀÌÁ¦ ¾Ë°í¸®ÁòÀÌ 'ÃÖÀûÀÇ' º¯ÇüÀ» ¼±ÅÃÇß´Ù. À̰ÍÀ» ÀÀ´äÀ¸·Î
            º¸³½´Ù. HTTP ÀÀ´ä Çì´õ <code>Vary</code>´Â Çù»óÀÇ ¹üÀ§¸¦
            ³ªÅ¸³»°Ô µÈ´Ù. (ºê¶ó¿ìÀú¿Í ij½¬´Â ÀÚ¿øÀ» ij½¬ÇÒ¶§ ÀÌ Á¤º¸¸¦
            »ç¿ëÇÒ ¼ö ÀÖ´Ù.) ³¡.</li>
      
            <li>ÀÌ ´Ü°è¿¡ µµ´ÞÇß´Ù¸é (¸ðµÎ ºê¶ó¿ìÀú°¡ ¹ÞÁö¸øÇϱ⠶§¹®¿¡)
            ¾î¶² º¯Çüµµ ¼±ÅÃÀÌ ¾ÈµÈ °æ¿ì´Ù. ("No acceptable
            representation"¸¦ ¶æÇÏ´Â) »óÅ 406°ú ³»¿ëÀ¸·Î »ç¿ë°¡´ÉÇÑ
            º¯ÇüÀÇ ¸ñ·ÏÀ» ´ãÀº HTML ¹®¼­¸¦ ÀÀ´äÀ» º¸³½´Ù. ¶Ç, HTML
            <code>Vary</code> Çì´õ´Â º¯ÇüÀÇ ¹üÀ§¸¦ ³ªÅ¸³½´Ù.</li>
          </ol>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="better" id="better">ǰÁú°è¼ö Á¶ÀÛÇϱâ</a></h2>
      
          <p>¾ÆÆÄÄ¡´Â Á¾Á¾ À§ÀÇ ¾ÆÆÄÄ¡ Çù»ó ¾Ë°í¸®ÁòÀ» ¾ö°ÝÈ÷ ÁöŰÁö¾Ê°í
          ǰÁú°è¼ö¸¦ º¯°æÇÑ´Ù. ÀÌÀ¯´Â ¿ÏÀüÇϰí Á¤È®ÇÑ Á¤º¸¸¦ º¸³»Áö¾Ê´Â
          ºê¶ó¿ìÀú¿¡°Ô (¾Ë°í¸®ÁòÀÇ) ´õ ³ªÀº °á°ú¸¦ º¸³»±â À§Çؼ­´Ù.
          ³Î¸® ¾²ÀÌ´Â ºê¶ó¿ìÀúÁß ÀϺδ ÀÚÁÖ À߸øµÈ º¯ÇüÀ» ¼±ÅÃÇϵµ·Ï
          <code>Accept</code> Çì´õ¸¦ º¸³½´Ù. ºê¶ó¿ìÀú°¡ ¿ÏÀüÇÏ°í ¿Ã¹Ù¸¥
          Á¤º¸¸¦ º¸³½´Ù¸é, Á¶ÀÛÀ» ÇÏÁö¾Ê´Â´Ù.</p>
      
      <h3><a name="wildcards" id="wildcards">Media Type°ú ¿ÍÀϵåÄ«µå</a></h3>
      
          <p><code>Accept:</code> ¿äû Çì´õ´Â media type¿¡ ´ëÇÑ ¼±È£¸¦
          ³ªÅ¸³½´Ù. ¶Ç, *´Â ¾î¶² ¹®ÀÚ¿­ÀÌ¶óµµ °¡´ÉÇϱ⶧¹®¿¡ "image/*"³ª
          "*/*" °°ÀÌ '¿ÍÀϵåÄ«µå' media typeÀ» »ç¿ëÇÒ ¼öµµ ÀÖ´Ù. ±×·¡¼­
          ´ÙÀ½°ú °°Àº ¿äûÀº:</p>
      
      <div class="example"><p><code>Accept: image/*, */*</code></p></div>
      
          <p>"image/"·Î ½ÃÀÛÇÏ´Â ¾î¶² type°ú ´Ù¸¥ ¾î¶² typeµµ °¡´ÉÇÔÀ»
          ÀǹÌÇÑ´Ù. ¾î¶² ºê¶ó¿ìÀú´Â
          ÀÚ½ÅÀÌ ½ÇÁ¦·Î ´Ù·ê ¼ö ÀÖ´Â type¿¡ Ãß°¡·Î ¿ÍÀϵåÄ«µå¸¦ º¸³½´Ù.
          ¿¹¸¦ µé¸é:</p>
      
      <div class="example"><p><code>
        Accept: text/html, text/plain, image/gif, image/jpeg, */*
      </code></p></div>
          <p>ÀÌÀ¯´Â Á÷Á¢ ¿­°ÅÇÑ typeÀ» ¼±È£ÇÏÁö¸¸ ´Ù¸¥ Ç¥ÇöÀÌ ÀÖ´Ù¸é
          ±×°Íµµ ±¦ÂúÀ½À» ³ªÅ¸³»±â À§Çؼ­´Ù. ºê¶ó¿ìÀú°¡ ½ÇÁ¦·Î ¿øÇÑ
      	°ÍÀº ´ÙÀ½°ú °°ÀÌ ¸í½ÃÀûÀ¸·Î ǰÁú°ªÀ» »ç¿ëÇÑ °ÍÀÌ´Ù.</p>
      <div class="example"><p><code>
        Accept: text/html, text/plain, image/gif, image/jpeg, */*; q=0.01
      </code></p></div>
          <p>Á÷Á¢ ¿­°ÅÇÑ typeÀº ǰÁú°è¼ö°¡ ¾ø¾î¼­ ±âº»°ªÀÎ (°¡Àå ³ôÀº)
          1.0À» °¡Áø´Ù. ¿ÍÀϵåÄ«µå */*´Â ³·Àº ¼±È£µµ 0.01À» °¡Áö¹Ç·Î
          Á÷Á¢ ¿­°ÅÇÑ type¿¡ ¸Â´Â º¯ÇüÀÌ ¾ø´Â °æ¿ì¿¡¸¸ ´Ù¸¥ typeµéÀÌ
          »ç¿ëµÈ´Ù.</p>
      
          <p><code>Accept:</code> Çì´õ¿¡ q °è¼ö°¡ ÀüÇô <em>¾ø°í</em>
          "*/*"°¡ ÀÖ´Ù¸é, ¾ÆÆÄÄ¡´Â ¹Ù¶÷Á÷ÇÑ ÇൿÀ» À§ÇØ q °ªÀ¸·Î 0.01À»
          ÁöÁ¤ÇÑ´Ù. ¶Ç, "type/*" ÇüÅÂÀÇ ¿ÍÀϵåÄ«µå¿¡´Â ("*/*"º¸´Ù´Â
          ´õ ¼±È£Çϵµ·Ï) 0.02¸¦ ÁöÁ¤ÇÑ´Ù. <code>Accept:</code> Çì´õ¿¡¼­
          q °è¼ö¸¦ °¡Áö´Â media typeÀÌ ÀÖ´Ù¸é ÀÌ·± Ưº°ÇÑ °ªÀ» Ãß°¡ÇÏÁö
          <em>¾Ê´Â´Ù</em>. ±×·¡¼­ ¸í½ÃÀûÀÎ Á¤º¸¸¦ º¸³»´Â ºê¶ó¿ìÀúÀÇ
          ¿äûÀº ¿äûÇѵ¥·Î ó¸®ÇÑ´Ù.</p>
      
      
      <h3><a name="exceptions" id="exceptions">¾ð¾î(language) Çù»óÀÇ ¿¹¿Ü</a></h3>
      
          <p>¾ÆÆÄÄ¡ 2.0Àº ¾ð¾î Çù»óÀÌ ½ÇÆÐÇÑ °æ¿ì ºÎµå·´°Ô º¹±¸ÇϱâÀ§ÇØ
          Çù»ó ¾Ë°í¸®Áò¿¡ »õ·Î ¿¹¿Ü¸¦ ¸î°³ Ãß°¡Çß´Ù.</p>
      
          <p>Ŭ¶óÀÌ¾ðÆ®°¡ ¼­¹ö¿¡ ÆäÀÌÁö¸¦ ¿äûÇßÀ»¶§ ¼­¹ö°¡ ºê¶ó¿ìÀú°¡
          º¸³½ <code>Accept-language</code>¿¡ ¸Â´Â ÆäÀÌÁö¸¦ ´Ü ÇѰ³¸¸
          ãÀ¸¸é ¹®Á¦°¡ ¾øÁö¸¸, ±×·¯Áö ¾ÊÀº °æ¿ì ¼­¹ö´Â Ŭ¶óÀÌ¾ðÆ®¿¡°Ô
          "No Acceptable Variant"³ª "Multiple Choices" ÀÀ´äÀ» º¸³½´Ù.
          ÀÌ·± ¿À·ù¹®À» ÇÇÇϱâÀ§ÇØ ÀÌ °æ¿ì <code>Accept-language</code>¸¦
          ¹«½ÃÇϰí Ŭ¶óÀ̾ðÆ®ÀÇ ¿äû¿¡ ¸íÈ®È÷ ¸ÂÁö´Â ¾ÊÁö¸¸ ¹®¼­¸¦
          º¸³»µµ·Ï ¾ÆÆÄÄ¡¸¦ ¼³Á¤ÇÒ ¼ö ÀÖ´Ù. <code class="directive"><a href="./mod/mod_negotiation.html#forcelanguagepriority">ForceLanguagePriority</a></code>
          Áö½Ã¾î´Â ¼­¹ö°¡ ÀÌ·± ¿À·ù¹®Áß Çϳª ȤÀº µÑ´Ù¸¦ ¹«½ÃÇϰí
          <code class="directive"><a href="./mod/mod_negotiation.html#languagepriority">LanguagePriority</a></code>
          Áö½Ã¾î·Î ÆÇ´ÜÇϵµ·Ï ÇÑ´Ù.</p>
      
          <p>¶Ç, ¼­¹ö´Â ¸Â´Â ¾ð¾î¸¦ ¸øÃ£Àº °æ¿ì ºÎ¸ð¾ð¾î¸¦ ãÀ» ¼öµµ
          ÀÖ´Ù. ¿¹¸¦ µé¾î Ŭ¶óÀÌ¾ðÆ®°¡ ¿µ±¹¿µ¾î¸¦ ¶æÇÏ´Â
          <code>en-GB</code> ¾ð¾î·Î ¹®¼­¸¦ ¿äûÇÑ °æ¿ì, HTTP/1.1 Ç¥ÁØ¿¡
          µû¸£¸é ¼­¹ö´Â <code>en</code>À¸·Î¸¸ Ç¥½ÃµÈ ¹®¼­¸¦ ÀϹÝÀûÀ¸·Î
          ¼±ÅÃÇÏÁö ¸øÇÑ´Ù. (±×·¡¼­ ¿µ±¹¿µ¾î¸¦ ÀÌÇØÇÏ´Â µ¶ÀÚ°¡ ÀϹÝÀûÀÎ
          ¿µ¾îµµ ÀÌÇØÇÒ ¼ö ÀÖÀ¸¹Ç·Î <code>Accept-Language</code> Çì´õ¿¡
          <code>en-GB</code>¸¸ Æ÷ÇÔÇϰí <code>en</code>À» Æ÷ÇÔÇÏÁö¾ÊÀ¸¸é
          °ÅÀÇ È®½ÇÈ÷ À߸øµÈ ¼³Á¤ÀÓÀ» À¯ÀÇÇ϶ó. ºÒÇàÈ÷µµ ÇöÀç ¸¹Àº
          Ŭ¶óÀÌ¾ðÆ®µéÀº ÀÌ·± ½ÄÀ¸·Î ±âº»¼³Á¤µÇÀÖ´Ù.) ´Ù¸¥ ¾ð¾î¸¦
          ãÁö ¸øÇÏ¿© ¼­¹ö°¡ "No Acceptable Variants" ¿À·ù¸¦ º¸³»°Å³ª
          <code class="directive"><a href="./mod/mod_negotiation.html#languagepriority">LanguagePriority</a></code>·Î
          µ¹¾Æ°¡¾ß ÇÑ´Ù¸é, ¼­¹ö´Â ÇÏÀ§¾ð¾î ±Ô¾àÀ» ¹«½ÃÇϰí
          <code>en-GB</code>¸¦ <code>en</code> ¹®¼­¿¡ ´ëÀÀÇÑ´Ù.
          ¾Ï¹¬ÀûÀ¸·Î ¾ÆÆÄÄ¡´Â ºÎ¸ð¾ð¾î¸¦ ¸Å¿ì ³·Àº ǰÁú°ªÀ¸·Î
          Ŭ¶óÀ̾ðÆ®ÀÇ Çã¿ë¾ð¾î ¸ñ·Ï¿¡ Ãß°¡ÇÑ´Ù. ±×·¯³ª Ŭ¶óÀÌ¾ðÆ®°¡
          "en-GB; q=0.9, fr; q=0.8"À» ¿äûÇÏ°í ¼­¹ö¿¡ "en"°ú "fr"
          ¹®¼­°¡ ÀÖ´Ù¸é, "fr" ¹®¼­°¡ ¼±ÅõÊÀ» ÁÖÀÇÇ϶ó. ÀÌ´Â HTTP/1.1
          Ç¥ÁØÀ» Áö۰í, ¿Ã¹Ù·Î ¼³Á¤µÈ Ŭ¶óÀÌ¾ðÆ®¿Í È¿À²ÀûÀ¸·Î
          µ¿ÀÛÇϱâÀ§ÇÔÀÌ´Ù.</p>
      
          <p>»ç¿ëÀÚ°¡ ¼±È£ÇÏ´Â ¾ð¾î¸¦ ¾Ë¾Æ³»±âÀ§ÇÑ (ÄíŰ³ª Ưº°ÇÑ
          URL-°æ·Î °°Àº) °í±Þ ±â¹ýÀ» Áö¿øÇϱâÀ§ÇØ ¾ÆÆÄÄ¡ 2.0.47ºÎÅÍ
          <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>Àº <code>prefer-language</code>¶ó´Â
          <a href="env.html">ȯ°æº¯¼ö</a>¸¦ ÀνÄÇÑ´Ù. ÀÌ È¯°æº¯¼ö°¡
          Á¸ÀçÇϰí ÀûÀýÇÑ ¾ð¾îű׸¦ Æ÷ÇÔÇÑ´Ù¸é,
          <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>Àº ÇØ´çÇÏ´Â º¯ÇüÀ» ¼±ÅÃÇÏ·Á°í
          ½ÃµµÇÑ´Ù. ±×·± º¯ÇüÀÌ ¾ø´Ù¸é ÀϹÝÀûÀÎ Çù»ó°úÁ¤À» ½ÃÀÛÇÑ´Ù.</p>
      
          <div class="example"><h3>¿¹Á¦</h3><p><code>
            SetEnvIf Cookie "language=(.+)" prefer-language=$1
          </code></p></div>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="extensions" id="extensions">ÀÚ¿¬½º·¯¿î(transparent) ³»¿ëÇù»óÀÇ È®Àå</a></h2> 
      
      <p>¾ÆÆÄÄ¡´Â ´ÙÀ½°ú °°ÀÌ ÀÚ¿¬½º·¯¿î ³»¿ëÈ®Àå ÇÁ·ÎÅäÄÝÀ» (RFC 2295)
      È®ÀåÇÑ´Ù. º¯Çü ¸ñ·ÏÀÇ »õ·Î¿î <code>{encoding ..}</code>´Â ƯÁ¤
      content-encodingÀ» °¡Áø º¯Çü¸¸À» ÁöĪÇÑ´Ù. RVSA/1.0 ¾Ë°í¸®ÁòÀº
      (RFC 2296) ¸ñ·Ï¿¡¼­ ÀÎÄÚµùµÈ º¯ÇüÀ» ÀνÄÇÒ ¼ö ÀÖ°í, ÀÎÄÚµùÀÌ
      <code>Accept-Encoding</code> ¿äû Çì´õ¿¡ ¸Â´Â °æ¿ì ÀÎÄÚµùµÈ
      º¯Çüµéµµ È帷Π»ç¿ëÇϵµ·Ï È®ÀåµÇ¾ú´Ù. RVSA/1.0 ±¸ÇöÀº ÃÖÀûÀÇ
      º¯ÇüÀ» ã±â Àü¿¡ °è»êµÈ ǰÁú°è¼ö¸¦ ¼Ò¼öÁ¡ 5ÀÚ¸®¿¡¼­ ¹Ý¿Ã¸²ÇÏÁö
      ¾Ê´Â´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="naming" id="naming">ÇÏÀÌÆÛ¸µÅ©¿Í À̸§±ÔÄ¢¿¡ ´ëÇÏ¿©</a></h2>
      
          <p>¾ð¾î(language) Çù»óÀ» »ç¿ëÇÑ´Ù¸é ÆÄÀÏÀº ¿©·¯ È®ÀåÀÚ¸¦
          °¡Áö°í È®ÀåÀÚÀÇ ¼ø¼­´Â º¸Åë °ü°è¾øÀ¸¹Ç·Î ÆÄÀÏ¸í¿¡ ¿©·¯ ´Ù¸¥
          À̸§±ÔÄ¢À» »ç¿ëÇÒ ¼ö ÀÖ´Ù. (ÀÚ¼¼ÇÑ ³»¿ëÀº <a href="mod/mod_mime.html#multipleext">mod_mime</a> ¹®¼­¸¦
          Âü°íÇ϶ó.)</p>
      
          <p>ÀüÇüÀûÀÎ ÆÄÀÏÀº MIME-type È®ÀåÀÚ (<em>¿¹¸¦ µé¾î</em>,
          <code>html</code>), °æ¿ì¿¡ µû¶ó encoding È®ÀåÀÚ (<em>¿¹¸¦
          µé¾î</em>, <code>gz</code>), ÆÄÀÏ¿¡ ¿©·¯ ¾ð¾î º¯ÇüÀÌ ÀÖ´Â
          °æ¿ì ¹°·Ð ¾ð¾î È®ÀåÀÚ¸¦ (<em>¿¹¸¦ µé¾î</em>, <code>en</code>)
          °¡Áø´Ù.</p>
      
          <p>¿¹Á¦:</p>
      
          <ul>
            <li>foo.en.html</li>
      
            <li>foo.html.en</li>
      
            <li>foo.en.html.gz</li>
          </ul>
      
          <p>´ÙÀ½Àº ¸î¸î ÆÄÀϸí°ú ±× ÆÄÀÏ¿¡ ´ëÇÑ À¯È¿Çϰí À¯È¿ÇÏÁö¾ÊÀº
          ÇÏÀÌÆÛ¸µÅ©¸¦ º¸ÀδÙ:</p>
      
          <table class="bordered">
            
            <tr>
              <th>ÆÄÀϸí</th>
      
              <th>À¯È¿ÇÑ ÇÏÀÌÆÛ¸µÅ©</th>
      
              <th>À¯È¿ÇÏÁö¾ÊÀº ÇÏÀÌÆÛ¸µÅ©</th>
            </tr>
      
            <tr>
              <td><em>foo.html.en</em></td>
      
              <td>foo<br />
               foo.html</td>
      
              <td>-</td>
            </tr>
      
            <tr>
              <td><em>foo.en.html</em></td>
      
              <td>foo</td>
      
              <td>foo.html</td>
            </tr>
      
            <tr>
              <td><em>foo.html.en.gz</em></td>
      
              <td>foo<br />
               foo.html</td>
      
              <td>foo.gz<br />
               foo.html.gz</td>
            </tr>
      
            <tr>
              <td><em>foo.en.html.gz</em></td>
      
              <td>foo</td>
      
              <td>foo.html<br />
               foo.html.gz<br />
               foo.gz</td>
            </tr>
      
            <tr>
              <td><em>foo.gz.html.en</em></td>
      
              <td>foo<br />
               foo.gz<br />
               foo.gz.html</td>
      
              <td>foo.html</td>
            </tr>
      
            <tr>
              <td><em>foo.html.gz.en</em></td>
      
              <td>foo<br />
               foo.html<br />
               foo.html.gz</td>
      
              <td>foo.gz</td>
            </tr>
          </table>
      
          <p>À§ Ç¥¸¦ º¸¸é ÇÏÀÌÆÛ¸µÅ©¿¡ ¾î¶² È®ÀåÀÚµµ ¾ø´Â À̸§À»
          (<em>¿¹¸¦ µé¾î</em>, <code>foo</code>) Ç×»ó »ç¿ëÇÒ ¼ö ÀÖÀ½À»
          ¾Ë ¼ö ÀÖ´Ù. ÀÌ °æ¿ì ÀåÁ¡Àº ¹®¼­ÀÇ ½ÇÁ¦ Á¾·ù¸¦ ¼û±æ ¼ö À־,
          <em>¿¹¸¦ µé¾î</em> ÇÏÀÌ·¯¸µÅ© ÂüÁ¶¸¦ ¼öÁ¤ÇϾʰí
          <code>html</code> ÆÄÀÏÀ» <code>shtml</code>À̳ª
          <code>cgi</code>·Î º¯°æÇÒ ¼ö ÀÖ´Ù´Â Á¡ÀÌ´Ù.</p>
      
          <p>°è¼Ó ÇÏÀÌÆÛ¸µÅ©¿¡ MIME-typeÀ» (<em>¿¹¸¦ µé¾î</em>,
          <code>foo.html</code>) »ç¿ëÇÏ°í ½Í´Ù¸é (encoding È®ÀåÀÚ°¡
          ÀÖ´Ù¸é À̰͵µ Æ÷ÇÔÇÏ¿©) ¾ð¾î È®ÀåÀÚ¸¦ MIME-type È®ÀåÀÚº¸´Ù
          ¿À¸¥ÂÊ¿¡ (<em>¿¹¸¦ µé¾î</em>, <code>foo.html.en</code>)
          µÎ¾î¾ßÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="caching" id="caching">ij½¬¿¡ ´ëÇÏ¿©</a></h2>
      
          <p>ij½¬°¡ Ç¥ÇöÀ» ÀúÀåÇϸé Ç¥Çö°ú ¿äû URLÀ» ¿¬°ü½ÃŲ´Ù.
          ´ÙÀ½¹ø ±× URLÀ» ¿äûÇϸé ij½¬´Â ÀúÀåµÈ Ç¥ÇöÀ» »ç¿ëÇÑ´Ù.
          ±×·¯³ª ¼­¹ö¿Í Çù»óÀÌ °¡´ÉÇÑ ÀÚ¿øÀÎ °æ¿ì ù¹øÂ° ¿äûÇÑ º¯Çü¸¸
          ij½¬µÇ¾î ÀÌÈÄ ¿äûÀº ij½¬µÈ À߸øµÈ ÀÀ´äÀ» ¾òÀ» ¼ö ÀÖ´Ù.
          À̸¦ ¸·±âÀ§ÇØ ¾ÆÆÄÄ¡´Â º¸Åë ³»¿ëÇù»óÈÄ ¹ÝȯµÇ´Â ¸ðµç ¿äû¿¡
          HTTP/1.0 Ŭ¶óÀÌ¾ðÆ®°¡ ij½¬¸¦ ¸øÇϵµ·Ï Ç¥½Ã¸¦ ÇÑ´Ù. ¶Ç, ¾ÆÆÄÄ¡´Â
          Çù»óÇÑ ÀÀ´äÀÇ Ä³½¬¸¦ Çã¿ëÇÏ´Â HTTP/1.1 ÇÁ·ÎÅäÄÝÀÇ ±â´ÉÀ»
          Áö¿øÇÑ´Ù.</p>
      
          <p><code class="directive"><a href="./mod/mod_negotiation.html#cachenegotiateddocs">CacheNegotiatedDocs</a></code>
          Áö½Ã¾î´Â HTTP/1.0 ȣȯ Ŭ¶óÀ̾ðÆ®(ºê¶ó¿ìÀú ȤÀº ij½¬)°¡
          º¸³½ ¿äû¿¡ ´ëÇØ Çù»óÇÑ ÀÀ´äÀ» ij½¬ÇÒ ¼ö ÀÖ°Ô ÇÑ´Ù. ÀÌ Áö½Ã¾î´Â
          ¼­¹ö³ª °¡»óÈ£½ºÆ® ¼³Á¤¿¡ »ç¿ëÇϸç, ¾Æ±Ô¸ÕÆ®¸¦ ¹ÞÁö¾Ê´Â´Ù.
          ÀÌ Áö½Ã¾î´Â HTTP/1.1 Ŭ¶óÀ̾ðÆ®ÀÇ ¿äû°ú´Â °ü°è°¡ ¾ø´Ù.</p>
      
          <p>HTTP/1.1 Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ¾ÆÆÄÄ¡´Â ÀÀ´äÀÇ Çù»ó ¹üÀ§¸¦
          ¾Ë·ÁÁÖ´Â <code>Vary</code> HTTP ÀÀ´äÇì´õ¸¦ º¸³½´Ù. ÀÌ Á¤º¸¸¦
          »ç¿ëÇÏ¿© ´ÙÀ½ ¿äûÀ» ij½¬µÈ º¹»çº»À¸·Î ´ëüÇÒ ¼ö ÀÖ´ÂÁö
          ÆÇ´ÜÇÒ ¼ö ÀÖ´Ù. Çé»óÀÇ ¹üÀ§¿Í °ü°è¾øÀÌ Ä³½¬µÈ º¹»çº»À»
          ±ÇÇÑ´Ù¸é <code>force-no-vary</code> <a href="env.html#special">ȯ°æº¯¼ö</a>¸¦ ¼³Á¤ÇÑ´Ù.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/content-negotiation.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/content-negotiation.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/content-negotiation.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/content-negotiation.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/content-negotiation.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/content-negotiation.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������httpd-2.4.41/docs/manual/suexec.html.en�������������������������������������������������������������0000644�0000000�0000050�00000071354�13412755316�016245� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>suEXEC Support - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>suEXEC Support</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/suexec.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/suexec.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/suexec.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/suexec.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/suexec.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>The <strong>suEXEC</strong> feature provides users of the Apache
          HTTP Server the ability
          to run <strong>CGI</strong> and <strong>SSI</strong> programs
          under user IDs different from the user ID of the calling
          web server. Normally, when a CGI or SSI program executes, it
          runs as the same user who is running the web server.</p>
      
          <p>Used properly, this feature can reduce
          considerably the security risks involved with allowing users to
          develop and run private CGI or SSI programs. However, if suEXEC
          is improperly configured, it can cause any number of problems
          and possibly create new holes in your computer's security. If
          you aren't familiar with managing <em>setuid root</em> programs
          and the security issues they present, we highly recommend that
          you not consider using suEXEC.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#before">Before we begin</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#model">suEXEC Security Model</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#install">Configuring &amp; Installing
          suEXEC</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#enable">Enabling &amp; Disabling
          suEXEC</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#usage">Using suEXEC</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#debug">Debugging suEXEC</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#jabberwock">Beware the Jabberwock:
          Warnings &amp; Examples</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="before" id="before">Before we begin</a></h2>
      
          <p>Before jumping head-first into this document,
          you should be aware that certain assumptions are made about you and
          the environment in which you will be using suexec.</p>
      
          <p>First, it is assumed that you are using a UNIX
          derivative operating system that is capable of
          <strong>setuid</strong> and <strong>setgid</strong> operations.
          All command examples are given in this regard. Other platforms,
          if they are capable of supporting suEXEC, may differ in their
          configuration.</p>
      
          <p>Second, it is assumed you are familiar with
          some basic concepts of your computer's security and its
          administration. This involves an understanding of
          <strong>setuid/setgid</strong> operations and the various
          effects they may have on your system and its level of
          security.</p>
      
          <p>Third, it is assumed that you are using an
          <strong>unmodified</strong> version of suEXEC code. All code
          for suEXEC has been carefully scrutinized and tested by the
          developers as well as numerous beta testers. Every precaution
          has been taken to ensure a simple yet solidly safe base of
          code. Altering this code can cause unexpected problems and new
          security risks. It is <strong>highly</strong> recommended you
          not alter the suEXEC code unless you are well versed in the
          particulars of security programming and are willing to share
          your work with the Apache HTTP Server development team for consideration.</p>
      
          <p>Fourth, and last, it has been the decision of
          the Apache HTTP Server development team to <strong>NOT</strong> make suEXEC part of
          the default installation of Apache httpd. To this end, suEXEC
          configuration requires of the administrator careful attention
          to details. After due consideration has been given to the
          various settings for suEXEC, the administrator may install
          suEXEC through normal installation methods. The values for
          these settings need to be carefully determined and specified by
          the administrator to properly maintain system security during
          the use of suEXEC functionality. It is through this detailed
          process that we hope to limit suEXEC
          installation only to those who are careful and determined
          enough to use it.</p>
      
          <p>Still with us? Yes? Good. Let's move on!</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="model" id="model">suEXEC Security Model</a></h2>
      
          <p>Before we begin configuring and installing
          suEXEC, we will first discuss the security model you are about
          to implement. By doing so, you may better understand what
          exactly is going on inside suEXEC and what precautions are
          taken to ensure your system's security.</p>
      
          <p><strong>suEXEC</strong> is based on a setuid
          "wrapper" program that is called by the main Apache HTTP Server.
          This wrapper is called when an HTTP request is made for a CGI
          or SSI program that the administrator has designated to run as
          a userid other than that of the main server. When such a
          request is made, Apache httpd provides the suEXEC wrapper with the
          program's name and the user and group IDs under which the
          program is to execute.</p>
      
          <p>The wrapper then employs the following process
          to determine success or failure -- if any one of these
          conditions fail, the program logs the failure and exits with an
          error, otherwise it will continue:</p>
      
          <ol>
            <li>
              <strong>Is the user executing this wrapper a valid user of
              this system?</strong>
      
              <p class="indent">
                This is to ensure that the user executing the wrapper is
                truly a user of the system.
              </p>
           </li>
      
           <li>
              <strong>Was the wrapper called with the proper number of
              arguments?</strong>
      
              <p class="indent">
                The wrapper will only execute if it is given the proper
                number of arguments. The proper argument format is known
                to the Apache HTTP Server. If the wrapper is not receiving
                the proper number of arguments, it is either being
                hacked, or there is something wrong with the suEXEC
                portion of your Apache httpd binary.
              </p>
            </li>
      
            <li>
              <strong>Is this valid user allowed to run the
              wrapper?</strong>
      
              <p class="indent">
                Is this user the user allowed to run this wrapper? Only
                one user (the Apache user) is allowed to execute this
                program.
              </p>
            </li>
      
            <li>
              <strong>Does the target CGI or SSI program have an unsafe
              hierarchical reference?</strong>
      
              <p class="indent">
                Does the target CGI or SSI program's path contain a leading
                '/' or have a '..' backreference? These are not allowed; the
                target CGI/SSI program must reside within suEXEC's document
                root (see <code>--with-suexec-docroot=<em>DIR</em></code>
                below).
              </p>
            </li>
      
            <li>
              <strong>Is the target user name valid?</strong>
      
              <p class="indent">
                Does the target user exist?
              </p>
            </li>
      
            <li>
              <strong>Is the target group name valid?</strong>
      
              <p class="indent">
                Does the target group exist?
              </p>
            </li>
      
            <li>
              <strong>Is the target user <em>NOT</em> superuser?</strong>
      
      
              <p class="indent">
                suEXEC does not allow <code><em>root</em></code>
                to execute CGI/SSI programs.
              </p>
            </li>
      
            <li>
              <strong>Is the target userid <em>ABOVE</em> the minimum ID
              number?</strong>
      
              <p class="indent">
                The minimum user ID number is specified during
                configuration. This allows you to set the lowest possible
                userid that will be allowed to execute CGI/SSI programs.
                This is useful to block out "system" accounts.
              </p>
            </li>
      
            <li>
              <strong>Is the target group <em>NOT</em> the superuser
              group?</strong>
      
              <p class="indent">
                Presently, suEXEC does not allow the <code><em>root</em></code>
                group to execute CGI/SSI programs.
              </p>
            </li>
      
            <li>
              <strong>Is the target groupid <em>ABOVE</em> the minimum ID
              number?</strong>
      
              <p class="indent">
                The minimum group ID number is specified during
                configuration. This allows you to set the lowest possible
                groupid that will be allowed to execute CGI/SSI programs.
                This is useful to block out "system" groups.
              </p>
            </li>
      
            <li>
              <strong>Can the wrapper successfully become the target user
              and group?</strong>
      
              <p class="indent">
                Here is where the program becomes the target user and
                group via setuid and setgid calls. The group access list
                is also initialized with all of the groups of which the
                user is a member.
              </p>
            </li>
      
            <li>
              <strong>Can we change directory to the one in which the target
              CGI/SSI program resides?</strong>
      
              <p class="indent">
                If it doesn't exist, it can't very well contain files. If we
                can't change directory to it, it might as well not exist.
              </p>
            </li>
      
            <li>
              <strong>Is the directory within the httpd webspace?</strong>
      
              <p class="indent">
                If the request is for a regular portion of the server, is
                the requested directory within suEXEC's document root? If
                the request is for a <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code>, is the requested directory
                within the directory configured as suEXEC's userdir (see
                <a href="#install">suEXEC's configuration options</a>)?
              </p>
            </li>
      
            <li>
              <strong>Is the directory <em>NOT</em> writable by anyone
              else?</strong>
      
              <p class="indent">
                We don't want to open up the directory to others; only
                the owner user may be able to alter this directories
                contents.
              </p>
            </li>
      
            <li>
              <strong>Does the target CGI/SSI program exist?</strong>
      
              <p class="indent">
                If it doesn't exists, it can't very well be executed.
              </p>
            </li>
      
            <li>
              <strong>Is the target CGI/SSI program <em>NOT</em> writable
              by anyone else?</strong>
      
              <p class="indent">
                We don't want to give anyone other than the owner the
                ability to change the CGI/SSI program.
              </p>
            </li>
      
            <li>
              <strong>Is the target CGI/SSI program <em>NOT</em> setuid or
              setgid?</strong>
      
              <p class="indent">
                We do not want to execute programs that will then change
                our UID/GID again.
              </p>
            </li>
      
            <li>
              <strong>Is the target user/group the same as the program's
              user/group?</strong>
      
              <p class="indent">
                Is the user the owner of the file?
              </p>
            </li>
      
            <li>
              <strong>Can we successfully clean the process environment
              to ensure safe operations?</strong>
      
              <p class="indent">
                suEXEC cleans the process' environment by establishing a
                safe execution PATH (defined during configuration), as
                well as only passing through those variables whose names
                are listed in the safe environment list (also created
                during configuration).
              </p>
            </li>
      
            <li>
              <strong>Can we successfully become the target CGI/SSI program
              and execute?</strong>
      
              <p class="indent">
                Here is where suEXEC ends and the target CGI/SSI program begins.
              </p>
            </li>
          </ol>
      
          <p>This is the standard operation of the
          suEXEC wrapper's security model. It is somewhat stringent and
          can impose new limitations and guidelines for CGI/SSI design,
          but it was developed carefully step-by-step with security in
          mind.</p>
      
          <p>For more information as to how this security
          model can limit your possibilities in regards to server
          configuration, as well as what security risks can be avoided
          with a proper suEXEC setup, see the <a href="#jabberwock">"Beware the Jabberwock"</a> section of this
          document.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="install" id="install">Configuring &amp; Installing
          suEXEC</a></h2>
      
          <p>Here's where we begin the fun.</p>
      
          <p><strong>suEXEC configuration
          options</strong><br />
          </p>
      
          <dl>
            <dt><code>--enable-suexec</code></dt>
      
            <dd>This option enables the suEXEC feature which is never
            installed or activated by default. At least one
            <code>--with-suexec-xxxxx</code> option has to be provided
            together with the <code>--enable-suexec</code> option to let
            APACI accept your request for using the suEXEC feature.</dd>
      
            <dt><code>--with-suexec-bin=<em>PATH</em></code></dt>
      
            <dd>The path to the <code>suexec</code> binary must be hard-coded
            in the server for security reasons. Use this option to override
            the default path. <em>e.g.</em>
            <code>--with-suexec-bin=/usr/sbin/suexec</code></dd>
      
            <dt><code>--with-suexec-caller=<em>UID</em></code></dt>
      
            <dd>The <a href="mod/mpm_common.html#user">username</a> under which
            httpd normally runs. This is the only user allowed to
            execute the suEXEC wrapper.</dd>
      
            <dt><code>--with-suexec-userdir=<em>DIR</em></code></dt>
      
            <dd>Define to be the subdirectory under users' home
            directories where suEXEC access should be allowed. All
            executables under this directory will be executable by suEXEC
            as the user so they should be "safe" programs. If you are
            using a "simple" <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code>
            directive (ie. one without a "*" in it) this should be set to the same
            value. suEXEC will not work properly in cases where the <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code> directive points to
            a location that is not the same as the user's home directory
            as referenced in the <code>passwd</code> file. Default value is
            "<code>public_html</code>".<br />
            If you have virtual hosts with a different <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code> for each,
            you will need to define them to all reside in one parent
            directory; then name that parent directory here. <strong>If
            this is not defined properly, "~userdir" cgi requests will
            not work!</strong></dd>
      
            <dt><code>--with-suexec-docroot=<em>DIR</em></code></dt>
      
            <dd>Define as the DocumentRoot set for httpd. This will be
            the only hierarchy (aside from <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code>s) that can be used for suEXEC behavior. The
            default directory is the <code>--datadir</code> value with the suffix
            "<code>/htdocs</code>", <em>e.g.</em> if you configure with
            "<code>--datadir=/home/apache</code>" the directory
            "<code>/home/apache/htdocs</code>" is used as document root for the
            suEXEC wrapper.</dd>
      
            <dt><code>--with-suexec-uidmin=<em>UID</em></code></dt>
      
            <dd>Define this as the lowest UID allowed to be a target user
            for suEXEC. For most systems, 500 or 100 is common. Default
            value is 100.</dd>
      
            <dt><code>--with-suexec-gidmin=<em>GID</em></code></dt>
      
            <dd>Define this as the lowest GID allowed to be a target
            group for suEXEC. For most systems, 100 is common and
            therefore used as default value.</dd>
      
            <dt><code>--with-suexec-logfile=<em>FILE</em></code></dt>
      
            <dd>This defines the filename to which all suEXEC
            transactions and errors are logged (useful for auditing and
            debugging purposes). By default the logfile is named
            "<code>suexec_log</code>" and located in your standard logfile
            directory (<code>--logfiledir</code>).</dd>
      
            <dt><code>--with-suexec-safepath=<em>PATH</em></code></dt>
      
            <dd>Define a safe PATH environment to pass to CGI
            executables. Default value is
            "<code>/usr/local/bin:/usr/bin:/bin</code>".</dd>
          </dl>
      
          <h3>Compiling and installing the suEXEC wrapper</h3>
            
      
            <p>If you have enabled the suEXEC feature with the
            <code>--enable-suexec</code> option the <code>suexec</code> binary
            (together with httpd itself) is automatically built if you execute
            the <code>make</code> command.</p>
      
            <p>After all components have been built you can execute the
            command <code>make install</code> to install them. The binary image
            <code>suexec</code> is installed in the directory defined by the
            <code>--sbindir</code> option. The default location is
            "/usr/local/apache2/bin/suexec".</p>
      
            <p>Please note that you need <strong><em>root
            privileges</em></strong> for the installation step. In order
            for the wrapper to set the user ID, it must be installed as
            owner <code><em>root</em></code> and must have the setuserid
            execution bit set for file modes.</p>
          
      
          <h3>Setting paranoid permissions</h3>
            
      
            <p>Although the suEXEC wrapper will check to ensure that its
            caller is the correct user as specified with the
            <code>--with-suexec-caller</code> <code class="program"><a href="./programs/configure.html">configure</a></code>
            option, there is
            always the possibility that a system or library call suEXEC uses
            before this check may be exploitable on your system. To counter
            this, and because it is best-practise in general, you should use
            filesystem permissions to ensure that only the group httpd
            runs as may execute suEXEC.</p>
      
            <p>If for example, your web server is configured to run as:</p>
      
            <pre class="prettyprint lang-config">User www
      Group webgroup</pre>
      
      
            <p>and <code class="program"><a href="./programs/suexec.html">suexec</a></code> is installed at
            "/usr/local/apache2/bin/suexec", you should run:</p>
      
            <div class="example"><p><code>
                chgrp webgroup /usr/local/apache2/bin/suexec<br />
                chmod 4750 /usr/local/apache2/bin/suexec<br />
            </code></p></div>
      
            <p>This will ensure that only the group httpd runs as can even
            execute the suEXEC wrapper.</p>
          
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="enable" id="enable">Enabling &amp; Disabling
          suEXEC</a></h2>
      
          <p>Upon startup of httpd, it looks for the file
          <code class="program"><a href="./programs/suexec.html">suexec</a></code> in the directory defined by the
          <code>--sbindir</code> option (default is
          "/usr/local/apache/sbin/suexec"). If httpd finds a properly
          configured suEXEC wrapper, it will print the following message
          to the error log:</p>
      
      <div class="example"><p><code>
          [notice] suEXEC mechanism enabled (wrapper: <var>/path/to/suexec</var>)
      </code></p></div>
      
          <p>If you don't see this message at server startup, the server is
          most likely not finding the wrapper program where it expects
          it, or the executable is not installed <em>setuid root</em>.</p>
      
           <p>If you want to enable the suEXEC mechanism for the first time
          and an Apache HTTP Server is already running you must kill and
          restart httpd. Restarting it with a simple HUP or USR1 signal
          will not be enough. </p>
           <p>If you want to disable suEXEC you should kill and restart
          httpd after you have removed the <code class="program"><a href="./programs/suexec.html">suexec</a></code> file.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="usage" id="usage">Using suEXEC</a></h2>
      
          <p>Requests for CGI programs will call the suEXEC wrapper only if
          they are for a virtual host containing a <code class="directive"><a href="./mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code> directive or if
          they are processed by <code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code>.</p>
      
          <p><strong>Virtual Hosts:</strong><br /> One way to use the suEXEC
          wrapper is through the <code class="directive"><a href="./mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code> directive in
          <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code> definitions.  By
          setting this directive to values different from the main server
          user ID, all requests for CGI resources will be executed as the
          <em>User</em> and <em>Group</em> defined for that <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>. If this
          directive is not specified for a <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> then the main server userid
          is assumed.</p>
      
          <p><strong>User directories:</strong><br /> Requests that are
           processed by <code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code> will call the suEXEC
           wrapper to execute CGI programs under the userid of the requested
           user directory.  The only requirement needed for this feature to
           work is for CGI execution to be enabled for the user and that the
           script must meet the scrutiny of the <a href="#model">security
           checks</a> above.  See also the
           <code>--with-suexec-userdir</code> <a href="#install">compile
           time option</a>.</p> </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="debug" id="debug">Debugging suEXEC</a></h2>
      
          <p>The suEXEC wrapper will write log information
          to the file defined with the <code>--with-suexec-logfile</code>
          option as indicated above. If you feel you have configured and
          installed the wrapper properly, have a look at this log and the
          error_log for the server to see where you may have gone astray.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="jabberwock" id="jabberwock">Beware the Jabberwock:
          Warnings &amp; Examples</a></h2>
      
          <p><strong>NOTE!</strong> This section may not be
          complete. For the latest revision of this section of the
          documentation, see the <a href="http://httpd.apache.org/docs/2.4/suexec.html">Online
          Documentation</a> version.</p>
      
          <p>There are a few points of interest regarding
          the wrapper that can cause limitations on server setup. Please
          review these before submitting any "bugs" regarding suEXEC.</p>
      
          <ul>
            <li><strong>suEXEC Points Of Interest</strong></li>
      
            <li>
              Hierarchy limitations
      
              <p class="indent">
                For security and efficiency reasons, all suEXEC requests
                must remain within either a top-level document root for
                virtual host requests, or one top-level personal document
                root for userdir requests. For example, if you have four
                VirtualHosts configured, you would need to structure all
                of your VHosts' document roots off of one main httpd
                document hierarchy to take advantage of suEXEC for
                VirtualHosts. (Example forthcoming.)
              </p>
            </li>
      
            <li>
              suEXEC's PATH environment variable
      
              <p class="indent">
                This can be a dangerous thing to change. Make certain
                every path you include in this define is a
                <strong>trusted</strong> directory. You don't want to
                open people up to having someone from across the world
                running a trojan horse on them.
              </p>
            </li>
      
            <li>
              Altering the suEXEC code
      
              <p class="indent">
                Again, this can cause <strong>Big Trouble</strong> if you
                try this without knowing what you are doing. Stay away
                from it if at all possible.
              </p>
            </li>
          </ul>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/suexec.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/suexec.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/suexec.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/suexec.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/suexec.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/suexec.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/env.html�������������������������������������������������������������������0000644�0000000�0000050�00000000706�13362070302�015116� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: env.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: env.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: env.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: env.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: env.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ����������������������������������������������������������httpd-2.4.41/docs/manual/custom-error.html.tr.utf8��������������������������������������������������0000644�0000000�0000050�00000034260�13447004010�020277� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Hata Yanıtlarının Kişiselleştirilmesi - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Hata Yanıtlarının Kişiselleştirilmesi</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./en/custom-error.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/custom-error.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/custom-error.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/custom-error.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/custom-error.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/custom-error.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Apache HTTP Sunucusu 4xx veya 5xx HTTP durum kodları ile ilgili
            olaylarda soysal hata yanıtları üretse de bu yanıtlar site
            kullanıcılarına aşırı sade, bilgi vermez ve hatta korkutucu gelebilir.
            Daha dostça yazılmış, İngilizce değil de kendi dilinizde ve belki
            sayfalarınızın yerleşimine uygun daha hoş satırlarda özel hata yanıtları
            üretmek isteyebilirsiniz.</p>
      
          <p>Kişiselleştirilmiş hata yanıtları, bir hata durumuna göre tasarlanmış
            herhangi bir HTTP durum kodu (yani 4xx ve 5xx kodlarından biri) için
            tanımlanabilir.</p>
      
          <p>Ek olarak bir değer kümesi de sağlanmıştır. Böylece hata belgeleri, <a href="howto/ssi.html">Sunucu taraflı İçerik Yerleştirme</a> kullanılarak
            bu değişkenlerin değerlerine göre özelleştirilebilir. İsterseniz bunun
            yerine bir CGI programı veya devingen bir eylemci (PHP, mod_perl, vs.)
            kullanarak da bu değişkenlerin değerlerine göre hata sayfalarınızı
            üretebilirsiniz.</p>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#configuration">Yapılandırma</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#variables">Kullanılabilen Değişkenler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#custom">Özel Hata Yanıtları</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#multi-lang">Çok Dilli Özel Hata Belgeleri</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuration" id="configuration">Yapılandırma</a></h2>
      
          <p>Kişiselleştirilmiş hata belgeleri <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code> yönergesi kullanılarak yapılandırılabilir. Bu
            yönerge küresel bağlamda olabileceği gibi sanal konak ve dizin
            bağlamlarında da kullanılabilir. <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> yönergesine <code>FileInfo</code>
            atanarak <code>.htaccess</code> dosyalarında da kullanılabilir.</p>
      
          <pre class="prettyprint lang-config">ErrorDocument 500 "Pardon, galiba bizim betik hata verdi."
      ErrorDocument 500 /cgi-bin/hata-kurtarma
      ErrorDocument 500 http://error.example.com/server_error.html
      ErrorDocument 404 /ozuru_kabahatinden_buyuk/yok.html
      ErrorDocument 401 /Uyeler/NASIL_uye_olunur.html</pre>
      
      
          <p><code>ErrorDocument</code> yönergesinin sözdizimi:</p>
      
          <pre class="prettyprint lang-config">ErrorDocument &lt;3-rakamlı-kod&gt; &lt;eylem&gt;</pre>
      
      
          <p><var>eylem</var> ÅŸunlardan biri olabilir:</p>
      
          <ol>
            <li>Yönlendirmenin yapılacağı dahili adres (<var>eylem</var> bir "/" ile
              başlıyorsa).</li>
            <li>Yönlendirmenin yapılacağı harici adres (<var>eylem</var> geçerli bir
              URL ise).</li>
            <li>Gösterilecek metin (yukardakilerin hiçbiri yoksa). Birden fazla
              sözcük içeriyorsa tırnak (") içine alınmalıdır.</li>
          </ol>
      
          <p>Yerel bir adrese yönlendirme yapılırken ek ortam değişkenleri de
            atanarak yanıt daha da özelleştirilebilir. Bunlar harici URL'lere
            gönderilmez.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="variables" id="variables">Kullanılabilen Değişkenler</a></h2>
      
            <p>Hata durumunu açıklayacak veya hata günlüğüne daha açıkça
              kaydedilebilecek bazı bilgilerin aktarılması koşuluyla, başka bir
              adrese yönlendirme kullanışlı olabilir</p>
      
            <p>Hata yönlendirmesi yapılırken bunu sağlamak için ek ortam değişkenleri
              tanımlanır. Bu değişkenlerin isimleri, özgün istekle sağlanan
              başlık isimlerinin  önüne 'REDIRECT_' dizgesi getirilerek üretilir.
              Böylece özgün istek bağlamından hata belgesi üretilebilir.</p>
      
            <p>Örneğin, aşağıdaki gibi, daha yararlı olacak ek ortam değişkenleri
              alabilirsiniz.</p>
      
            <div class="example"><p><code>
              REDIRECT_HTTP_ACCEPT=*/*, image/gif, image/jpeg, image/png<br />
              REDIRECT_HTTP_USER_AGENT=Mozilla/5.0 Fedora/3.5.8-1.fc12 Firefox/3.5.8<br />
              REDIRECT_PATH=.:/bin:/usr/local/bin:/sbin<br />
              REDIRECT_QUERY_STRING=<br />
              REDIRECT_REMOTE_ADDR=121.345.78.123<br />
              REDIRECT_REMOTE_HOST=client.example.com<br />
              REDIRECT_SERVER_NAME=www.example.edu<br />
              REDIRECT_SERVER_PORT=80<br />
              REDIRECT_SERVER_SOFTWARE=Apache/2.2.15<br />
              REDIRECT_URL=/cgi-bin/buggy.pl
            </code></p></div>
      
            <p><code>REDIRECT_</code> ortam değişkenleri, yönlendirme öncesi varolan
              ortam değişkenlerinden üretilir. Bunlar önlerine <code>REDIRECT_</code>
              getirilerek yeniden isimlendirilir. Örneğin,
              <code>HTTP_USER_AGENT</code> deÄŸiÅŸkeni
              <code>REDIRECT_HTTP_USER_AGENT</code> haline gelir.</p>
      
            <p><code>REDIRECT_URL</code>, <code>REDIRECT_STATUS</code> ve
              <code>REDIRECT_QUERY_STRING</code> mutlaka atanır. Diğer başlıklarla
              ilgili olanlar ise hata durumu öncesinde mevcut oldukları takdirde
              üretilirler.</p>
      
            <p>EÄŸer <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code> hedefi bir
              <em>harici</em> yönlendirme ise bunların <strong>hiçbiri</strong>
              üretilmez (sunucunun bulunduğu konağı hedeflese bile <code>http:</code>
              ile başlayan herşey harici yönlendirme sayılır).</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="custom" id="custom">Özel Hata Yanıtları</a></h2>
      
            <p>Hata yanıtınızı üretmek için sunucu taraflı içerik yerleştirme, bir
              CGI betiÄŸi veya baÅŸka bir eylemciyi devingen eylemci olarak
              kullanıyorsanız, bu yanıtı özelleştirmek için bu kullanıma özel
              üretilmiş ortam değişkenlerini kullanmak isteyebilirsiniz.</p>
      
            <p><code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code> yönergesi bir CGI
              betiğine bir yerel yönlendirme belirtiyorsa, hatanın kaynağı hakkında
              istemciye bilgi vermek amacıyla betiğin çıktısında bir
              "<code>Status:</code>" başlık alanına yer verilmelidir. Örneğin, bir
              Perl betiği şunları içerebilirdi:</p>
      
            <pre class="prettyprint lang-perl">...
      print  "Content-type: text/html\n";
      printf "Status: %s durumu saptandı.\n", $ENV{"REDIRECT_STATUS"};
      ...</pre>
      
      
            <p>EÄŸer betik, <code>404&nbsp;Not&nbsp;Found</code> gibi, belli bir hata
              durumunu ele almaya adanmışsa duruma özel kod ve hata metni
              kullanılabilir.</p>
      
            <p>Eğer yanıt, (istemci taraflı yönlendirme yapılırken) bir
              <code>Location:</code> başlığı da içeriyorsa betiğin çıktıya uygun bir
              <code>Status:</code> başlığı (<code>302&nbsp;Found</code>) eklemesinin
              gerekli oluÅŸuna dikkat ediniz. Aksi takdirde, <code>Location:</code>
              başlığı etkisiz olabilir.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="multi-lang" id="multi-lang">Çok Dilli Özel Hata Belgeleri</a></h2>
      
          <p>Apache HTTP Sunucusunun kurulumunda, 16 dile çevrilmiş özel hata
            iletileri belgeleri içeren bir dizin bulunmaktadır. Ayrıca,
            <code>conf/extra</code> yaplandırma dizininde bu özelliği etkin kılmak
            için yapılandırmaya dahil edilebilecek bir yapılandırma dosyası
            vardır.</p>
      
          <p>Sunucu yapılandırma dosyanızda şöyle satırlar görebilirsiniz:</p>
      
          <pre class="prettyprint lang-config"># Multi-language error messages
      #Include conf/extra/httpd-multilang-errordoc.conf</pre>
      
      
          <p>Bu <code>Include</code> satırını açıklama olmaktan çıkarırsanız
            bu özelliği etkinleştirmiş olursunuz. Böylece, istemcinin tarayıcısında
            belirtilmiş dil tercihine uygun dil uzlaşımlı hata iletileri
            sağlanır.</p>
      
          <p>Ek olarak, bu belgeler çeşitli <code>REDIRECT_</code> değişkenleri
            içerir. Böylece, son kullanıcıya neler olduğu ve şimdi ne yapması
            beklendiği hakkında ek bilgiler sağlanabilir.</p>
      
          <p>Bu belgeleri istediğiniz kadar özelleştirebilir, kullanıcıya siteniz
            hakkında ve orada bulabilecekleri şeylere dair faydalı bilgiler de
            saÄŸlayabilirsiniz.</p>
      
          <p>Bu özelliği kullanmak için <code class="module"><a href="./mod/mod_include.html">mod_include</a></code> ve
            <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> etkin kılınmalıdır.</p>
      
       </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./en/custom-error.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/custom-error.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/custom-error.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/custom-error.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/custom-error.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/custom-error.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/custom-error.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/dns-caveats.html�����������������������������������������������������������0000644�0000000�0000050�00000000756�13362070302�016543� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: dns-caveats.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: dns-caveats.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: dns-caveats.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: dns-caveats.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: dns-caveats.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ������������������httpd-2.4.41/docs/manual/dns-caveats.html.en��������������������������������������������������������0000644�0000000�0000050�00000030601�13412755316�017147� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Issues Regarding DNS and Apache HTTP Server - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Issues Regarding DNS and Apache HTTP Server</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/dns-caveats.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/dns-caveats.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/dns-caveats.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/dns-caveats.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/dns-caveats.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>This page could be summarized with the statement: don't
          configure Apache HTTP Server in such a way that it relies on DNS resolution
          for parsing of the configuration files. If httpd requires DNS
          resolution to parse the configuration files then your server
          may be subject to reliability problems (ie. it might not start up),
          or denial and theft of service attacks (including virtual hosts able
          to steal hits from other virtual hosts).</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#example">A Simple Example</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#denial">Denial of Service</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#main">The "main server" Address</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#tips">Tips to Avoid These Problems</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="example" id="example">A Simple Example</a></h2>
          
      
          <pre class="prettyprint lang-config"># This is a misconfiguration example, do not use on your server
      &lt;VirtualHost www.example.dom&gt;
        ServerAdmin webgirl@example.dom
        DocumentRoot "/www/example"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>In order for the server to function properly, it absolutely needs
          to have two pieces of information about each virtual host: the
          <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code> and at least one
          IP address that the server will bind and respond to. The above
          example does not include the IP address, so httpd must use DNS
          to find the address of <code>www.example.dom</code>. If for some
          reason DNS is not available at the time your server is parsing
          its config file, then this virtual host <strong>will not be
          configured</strong>. It won't be able to respond to any hits
          to this virtual host.</p>
      
          <p>Suppose that <code>www.example.dom</code> has address 192.0.2.1.
          Then consider this configuration snippet:</p>
      
          <pre class="prettyprint lang-config"># This is a misconfiguration example, do not use on your server
      &lt;VirtualHost 192.0.2.1&gt;
        ServerAdmin webgirl@example.dom
        DocumentRoot "/www/example"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>This time httpd needs to use reverse DNS to find the
          <code>ServerName</code> for this virtualhost. If that reverse
          lookup fails then it will partially disable the virtualhost.
          If the virtual host is name-based then it will effectively be
          totally disabled, but if it is IP-based then it will mostly
          work. However, if httpd should ever have to generate a full
          URL for the server which includes the server name (such as when a
          Redirect is issued), then it will fail to generate a valid URL.</p>
      
          <p>Here is a snippet that avoids both of these problems:</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost 192.0.2.1&gt;
        ServerName www.example.dom
        ServerAdmin webgirl@example.dom
        DocumentRoot "/www/example"
      &lt;/VirtualHost&gt;</pre>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="denial" id="denial">Denial of Service</a></h2>
          
      
          <p>Consider this configuration snippet:</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost www.example1.dom&gt;
        ServerAdmin webgirl@example1.dom
        DocumentRoot "/www/example1"
      &lt;/VirtualHost&gt;
      &lt;VirtualHost www.example2.dom&gt;
        ServerAdmin webguy@example2.dom
        DocumentRoot "/www/example2"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Suppose that you've assigned 192.0.2.1 to
          <code>www.example1.dom</code> and 192.0.2.2 to
          <code>www.example2.dom</code>. Furthermore, suppose that
          <code>example1.dom</code> has control of their own DNS. With this
          config you have put <code>example1.dom</code> into a position where
          they can steal all traffic destined to <code>example2.dom</code>. To
          do so, all they have to do is set <code>www.example1.dom</code> to
          192.0.2.2. Since they control their own DNS you can't stop them
          from pointing the <code>www.example1.dom</code> record wherever they
          wish.</p>
      
          <p>Requests coming in to 192.0.2.2 (including all those where
          users typed in URLs of the form
          <code>http://www.example2.dom/whatever</code>) will all be served by
          the <code>example1.dom</code> virtual host. To better understand why
          this happens requires a more in-depth discussion of how httpd
          matches up incoming requests with the virtual host that will
          serve it. A rough document describing this <a href="vhosts/details.html">is available</a>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="main" id="main">The "main server" Address</a></h2>
          
      
          <p><a href="vhosts/name-based.html">Name-based
          virtual host support</a> requires httpd to know
          the IP address(es) of the host that <code class="program"><a href="./programs/httpd.html">httpd</a></code>
          is running on. To get this address it uses either the global
          <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>
          (if present) or calls the C function <code>gethostname</code>
          (which should return the same as typing "hostname" at the
          command prompt). Then it performs a DNS lookup on this address.
          At present there is no way to avoid this lookup.</p>
      
          <p>If you fear that this lookup might fail because your DNS
          server is down then you can insert the hostname in
          <code>/etc/hosts</code> (where you probably already have it so
          that the machine can boot properly). Then ensure that your
          machine is configured to use <code>/etc/hosts</code> in the
          event that DNS fails. Depending on what OS you are using this
          might be accomplished by editing <code>/etc/resolv.conf</code>,
          or maybe <code>/etc/nsswitch.conf</code>.</p>
      
          <p>If your server doesn't have to perform DNS for any other
          reason then you might be able to get away with running httpd
          with the <code>HOSTRESORDER</code> environment variable set to
          "local". This all depends on what OS and resolver libraries you
          are using. It also affects CGIs unless you use
          <code class="module"><a href="./mod/mod_env.html">mod_env</a></code> to control the environment. It's best
          to consult the man pages or FAQs for your OS.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="tips" id="tips">Tips to Avoid These Problems</a></h2>
          
      
          <ul>
            <li>
              use IP addresses in
              <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code>
            </li>
      
            <li>
              use IP addresses in
              <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
            </li>
      
            <li>
              ensure all virtual hosts have an explicit
              <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>
            </li>
      
            <li>create a <code>&lt;VirtualHost _default_:*&gt;</code>
            server that has no pages to serve</li>
          </ul>
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/dns-caveats.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/dns-caveats.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/dns-caveats.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/dns-caveats.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/dns-caveats.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/dns-caveats.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_4.html.fr.utf8����������������������������������������������0000644�0000000�0000050�00000076063�13447706537�021011� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Vue d'ensemble des nouvelles fonctionnalités de la version 2.4 du
      serveur HTTP Apache - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Vue d'ensemble des nouvelles fonctionnalités de la version 2.4 du
      serveur HTTP Apache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/new_features_2_4.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_4.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./tr/new_features_2_4.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
        <p>Ce document décrit les modifications majeures apportées par
        la version 2.4 du serveur HTTP Apache. Pour les nouvelles fonctionnalités
        ajoutées par la version 2.2, se référer au document
        <a href="new_features_2_2.html">Nouvelles fonctionnalités
        de la version 2.2</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#core">Améliorations du noyau</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#newmods">Nouveau modules</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#module">Améliorations des modules</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programs">Améliorations des programmes</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#documentation">Documentation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#developer">Modifications concernant les développeur de modules</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="core" id="core">Améliorations du noyau</a></h2>
          
          <dl>
            <dt>Modules multiprocessus (MPMs) chargeables à l'exécution</dt>
            <dd>Plusieurs MPMs peuvent maintenant être <a href="mpm.html#dynamic">compilés en tant que modules
            chargeables</a>. Le choix du MPM à utiliser s'effectue
            à l'exécution via la directive <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code>.</dd>
      
            <dt>MPM Event</dt>
            <dd>Le <a href="mod/event.html">MPM Event</a> n'en est plus au stade expérimental et est
            maintenant pleinement supporté.</dd>
      
            <dt>Support du mode asynchrone</dt>
            <dd>Le support des lectures/écritures asynchrones pour les MPMs et
            les plateformes qui l'implémentent a été amélioré.</dd>
      
            <dt>Configuration du niveau de journalisation (LogLevel) par
            module et par répertoire</dt>
            <dd>La directive <code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code>
            peut maintenant être définie par module et par répertoire. Les
            nouveaux niveaux <code>trace1</code> à <code>trace8</code> ont été
            ajoutés au dessus du niveau de journalisation <code>debug</code>.</dd>
      
            <dt>Sections de configuration au niveau requête</dt>
            <dd>Les sections <code class="directive"><a href="./mod/core.html#if">If</a></code>,
            <code class="directive"><a href="./mod/core.html#elseif">&lt;ElseIf&gt;</a></code> et
            <code class="directive"><a href="./mod/core.html#else">&lt;Else&gt;</a></code>
            permettent de définir une configuration en fonction de critères
            liés à la requête.</dd>
      
            <dt>Interpréteur d'expressions à usage général</dt>
            <dd>Un nouvel interpréteur d'expressions permet de spécifier des
            <a href="expr.html">conditions complexes</a> via des directives à
            syntaxe commune comme <code class="directive"><a href="./mod/mod_setenvif.html#setenvifexpr">SetEnvIfExpr</a></code>, <code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code>, <code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code>,
            <code class="directive"><a href="./mod/core.html#if">&lt;If&gt;</a></code>, etc...
            </dd>
      
            <dt>KeepAliveTimeout en millisecondes</dt>
            <dd>Il est maintenant possible de définir la directive <code class="directive"><a href="./mod/core.html#keepalivetimeout">KeepAliveTimeout</a></code> en millisecondes.
            </dd>
      
            <dt>Directive NameVirtualHost</dt>
            <dd>Cette directive n'est plus nécessaire et est maintenant obsolète.</dd>
      
            <dt>Directives autorisées dans les fichiers <code>.htaccess</code></dt>
            <dd>La nouvelle directive <code class="directive"><a href="./mod/core.html#allowoverridelist">AllowOverrideList</a></code> permet de contrôler de
            manière plus précise la liste des directives autorisées dans les
            fichiers <code>.htaccess</code>.</dd>
      
            <dt>Variables dans les fichiers de configuration</dt>
            <dd>La directive <code class="directive"><a href="./mod/core.html#define">Define</a></code>
            permet de définir des variables dans les fichiers de
            configuration, améliorant ainsi la clareté de la présentation si
            la même valeur est utilisée en plusieurs points de la
            configuration.
            </dd>
      
            <dt>Diminution de la mémoire utilisée</dt>
            <dd>Bien qu'elle propose de nombreuses nouvelles fonctionnalités,
            la version 2.4.x tend à utiliser moins de mémoire que la version
            2.2.x.</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="newmods" id="newmods">Nouveau modules</a></h2>
          
          <dl>      
      
            <dt><code class="module"><a href="./mod/mod_proxy_fcgi.html">mod_proxy_fcgi</a></code></dt>
            <dd>Mise à disposition du protocole FastCGI pour
            <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_scgi.html">mod_proxy_scgi</a></code></dt>
            <dd>Mise à disposition du protocole SCGI pour
            <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_express.html">mod_proxy_express</a></code></dt>
            <dd>Ajoute à <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> la configuration dynamique
            de mandataires inverses en masse.</dd>
      
            <dt><code class="module"><a href="./mod/mod_remoteip.html">mod_remoteip</a></code></dt>
            <dd>Remplace l'adresse IP distante et le nom d'hôte apparents du
            client pour la requête courante par la liste d'adresses IP
            présentée par un mandataire ou un répartiteur de charge via les
            en-têtes de la requête.</dd>
      
            <dt><code class="module"><a href="./mod/mod_heartmonitor.html">mod_heartmonitor</a></code>,
                <code class="module"><a href="./mod/mod_lbmethod_heartbeat.html">mod_lbmethod_heartbeat</a></code></dt>
            <dd>Permet à <code class="module"><a href="./mod/mod_proxy_balancer.html">mod_proxy_balancer</a></code> de répartir la
            charge en fonction du nombre de connexions actives sur les
            serveurs d'arrière-plan.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_html.html">mod_proxy_html</a></code></dt>
            <dd>Anciennement module tiers, il supporte la correction des liens
            HTML dans une situation de mandat inverse, où le serveur
            d'arrière-plan génère des URLs qui ne sont pas valides du point de
            vue des clients du mandataire.</dd>
      
            <dt><code class="module"><a href="./mod/mod_sed.html">mod_sed</a></code></dt>
            <dd>Une amélioration de <code class="module"><a href="./mod/mod_substitute.html">mod_substitute</a></code> qui permet
            d'éditer le corps de la réponse avec toute la puissance de la
            commande sed.</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_form.html">mod_auth_form</a></code></dt>
            <dd>Implémente une authentification à base de formulaire.</dd>
      
            <dt><code class="module"><a href="./mod/mod_session.html">mod_session</a></code></dt>
            <dd>Permet de conserver les données de sessions des clients sous
            forme de cookies ou dans une base de données.</dd>
      
            <dt><code class="module"><a href="./mod/mod_allowmethods.html">mod_allowmethods</a></code></dt>
            <dd>Permet de restreindre l'utilisation de
            certaines méthodes HTTP sans interférer avec l'authentification et
            l'autorisation.</dd>      
      
            <dt><code class="module"><a href="./mod/mod_lua.html">mod_lua</a></code></dt>
            <dd>Embarque le langage <a href="http://www.lua.org/">Lua</a> dans
            httpd pour la configuration et les fonctions logiques courantes
            (Expérimental).</dd>
      
            <dt><code class="module"><a href="./mod/mod_log_debug.html">mod_log_debug</a></code></dt>
            <dd>Permet d'introduire une journalisation personnalisée à
            différentes phases du traitement de la requête.</dd>
      
            <dt><code class="module"><a href="./mod/mod_buffer.html">mod_buffer</a></code></dt>
            <dd>Fournit un tampon pour les piles des filtres en entrée et en
            sortie.</dd>
      
            <dt><code class="module"><a href="./mod/mod_data.html">mod_data</a></code></dt>
            <dd>Convertit un corps de réponse en URL de type données RFC2397.</dd>
      
            <dt><code class="module"><a href="./mod/mod_ratelimit.html">mod_ratelimit</a></code></dt>
            <dd>Permet de limiter la bande passante pour certains
            clients.</dd>
      
            <dt><code class="module"><a href="./mod/mod_request.html">mod_request</a></code></dt>
            <dd>Fournit des filtres permettant de gérer et de mettre à
            disposition les corps des requêtes HTTP.</dd>
      
            <dt><code class="module"><a href="./mod/mod_reflector.html">mod_reflector</a></code></dt>
            <dd>Permet de renvoyer comme réponse le corps de la requête via la
            pile du filtre de sortie.</dd>
            
            <dt><code class="module"><a href="./mod/mod_slotmem_shm.html">mod_slotmem_shm</a></code></dt>
            <dd>Met à disposition un fournisseur de mémoire partagée à base de
            slots (du style tableau de bord).</dd>
      
            <dt><code class="module"><a href="./mod/mod_xml2enc.html">mod_xml2enc</a></code></dt>
            <dd>Anciennement module tiers, il supporte l'internationalisation
            dans les modules de filtrage basés sur libxml2 (support du
            markup)</dd>
      
            <dt><code class="module"><a href="./mod/mod_macro.html">mod_macro</a></code> (disponible à partir de la version 2.4.5)</dt>
            <dd>Permet d'utiliser des macros au sein des fichiers de
            configuration.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_wstunnel.html">mod_proxy_wstunnel</a></code> (disponible à partir de la version 2.4.5)</dt>
            <dd>Support des tunnels web-socket.</dd>
      
            <dt><code class="module"><a href="./mod/mod_authnz_fcgi.html">mod_authnz_fcgi</a></code> (disponible à partir de la version 2.4.10)</dt>
            <dd>Permet aux applications d'autorisation FastCGI d'authentifier
            et/ou autoriser les clients.</dd>
      
            <dt><code class="module"><a href="./mod/mod_http2.html">mod_http2</a></code> (disponible à partir de la version 2.4.17)</dt>
            <dd>Support de la couche transport HTTP/2.</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_http2.html">mod_proxy_http2</a></code> (disponible à partir de la version 2.4.19)</dt>
            <dd>Support du protocole HTTP/2 pour <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_hcheck.html">mod_proxy_hcheck</a></code> (disponible à partir de la version 2.4.21)</dt>
            <dd>Support d'un bilan de santé dynamique indépendant pour les serveurs
            d'arrière-plan mandatés distants.</dd>
      
            <dt><code class="module"><a href="./mod/mod_brotli.html">mod_brotli</a></code> (disponible à partir de la version 2.4.26)</dt>
            <dd>Support de l'algorithme de compression Brotli.</dd>
      
            <dt><code class="module"><a href="./mod/mod_md.html">mod_md</a></code> (disponible à partir de la version 2.4.30)</dt>
            <dd>Automatisation de l'obtention de certificats via le protocole ACME.</dd>
      
            <dt><code class="module"><a href="./mod/mod_socache_redis.html">mod_socache_redis</a></code> (disponible à partir de la version 2.4.39)</dt>
            <dd>Supporte le fournisseur de cache d'objets partagés basé sur <a href="http://redis.io/">Redis</a>.</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="module" id="module">Améliorations des modules</a></h2>
          
          <dl>
            <dt><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></dt>
      
            <dd><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> peut maintenant vérifier la
            validité des certificats clients en se connectant à
            un serveur OCSP. Il est possible de définir un
            répondeur par défaut, et de choisir si l'on
            préfère le répondeur désigné
            dans le certificat client.</dd>
      
      	<dd>En outre, <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> supporte maintenant
      	l'estampillage OCSP (OCSP stapling), qui permet au serveur
      	d'attester la validité de son certificat auprès du client au
      	cours de la phase de négociation de la connexion.</dd>
      
            <dd>Enfin, <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> peut maintenant être configuré pour
            que celui-ci partage les données de session SSL entre les serveurs
            via memcached.</dd>
      
            <dd>Le support des clés EC a été ajouté à celui des clés RSA et
            DSA.</dd>
      
            <dd>Support de TLS-SRP (disponible à partir de la version 2.4.4).</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dt>
      
            <dd>La directive <code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code> est maintenant configurée
            de manière optimale dans les sections <code class="directive"><a href="./mod/core.html#location">Location</a></code> ou <code class="directive"><a href="./mod/core.html#locationmatch">LocationMatch</a></code>, et offre un gain de
            performances important par rapport à la syntaxe traditionnelle à
            deux paramètres lorsqu'elle est présente en grand nombre.</dd>
      
            <dd>Il est maintenant possible de configurer l'adresse source dans
            les requêtes mandatées.</dd>
      
            <dd>Support des sockets de type Unix vers le serveur
            d'arrière-plan (disponible à partir de la version 2.4.7).</dd>
      
            <dt><code class="module"><a href="./mod/mod_proxy_balancer.html">mod_proxy_balancer</a></code></dt>
      
            <dd>Le gestionnaire de répartition de charge propose de nouvelles
            fonctionnalités. Ainsi, les possibilités de configuration des
            membres du groupe de répartition de charge pendant l'exécution ont
            été améliorées (possibilité d'ajout d'un membre supplémentaire).</dd>
      
            <dd>Configuration à l'exécution d'un sous-ensemble de paramètres
            de répartition de charge.</dd>
      
            <dd>Les membres du groupe de répartition peuvent être définis à
            'Drain' de façon à ce qu'ils ne répondent qu'aux sessions
            persistantes existantes, ce qui permet de les mettre hors ligne en
            douceur.</dd>
      
            <dd>Les règlages du répartiteur de charge peuvent être rendus
            persistants après redémarrage.</dd>
      
            <dt><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code></dt>
      
            <dd>Le filtre CACHE du module <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> peut être
            inséré à un certain point de la chaîne de filtrage pour contrôler
            plus finement la mise en cache.
            </dd>
      
            <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> peut maintenant mettre en cache des
            requêtes HEAD.</dd>
      
            <dd>Chaque fois que cela est possible, les directives de
            <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> peuvent maintenant être définies au
            niveau du répertoire, et non plus seulement au niveau du serveur
            principal.</dd>
      
            <dd>L'URL de base des URLs en cache peut être personnalisée de
            façon à ce qu'un cluster de caches puisse partager le même préfixe
            d'URL.</dd>
      
            <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> peut maintenant servir du contenu
            non mis à jour lorsqu'un serveur d'arrière-plan n'est pas
            disponible (erreur 5xx).</dd>
      
            <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> peut maintenant insérer
            HIT/MISS/REVALIDATE dans un en-tête X-Cache.</dd>
      
            <dt><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></dt>
            <dd>Support de l'attribut 'onerror' dans un élément 'include',
            permettant de renvoyer un message d'erreur personnalisé à la place
            du message d'erreur par défaut.</dd>
      
            <dt><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code>, <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>,
                <code class="module"><a href="./mod/mod_isapi.html">mod_isapi</a></code>, ...</dt>
            <dd>La traduction des en-têtes en variables d'environnement est
            plus stricte qu'avant, ce qui permet de diminuer l'exposition aux attaques
            de type cross-site-scripting via injection d'en-têtes. Les
            en-têtes contenant des caractères invalides (comme les caractères
            de soulignement) sont maintenant ignorés. Le document <a href="env.html">Les variables d'environnement dans Apache</a>
            présente quelques pistes pour contourner ce problème avec les
            clients anciens qui nécessitent de tels en-têtes (Ceci affecte
            tous les modules qui utilisent ces variables d'environnement).</dd>
      
            <dt><code class="module"><a href="./mod/mod_authz_core.html">mod_authz_core</a></code> Conteneurs de logique d'autorisation</dt>
      
            <dd>La directive <code class="directive"><a href="./mod/mod_authz_core.html#require">Require</a></code> et les directives de
            conteneurs associées, comme <code class="directive"><a href="./mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code>, permettent de définir une
            logique d'autorisation avancée.</dd>
      
            
      
            <dt><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></dt>
            <dd>La directive <code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> dispose maintenant
            des drapeaux <code>[QSD]</code> (Query String Discard) et
            <code>[END]</code> qui permettent de simplifier les scénarios de
            réécriture courants.</dd>
            <dd>Possibilité d'utiliser des expressions booléennes complexes
            dans la directive <code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code>.</dd>
            <dd>Possibilité d'utiliser des requêtes SQL en tant que fonctions
            dans la directive <code class="directive"><a href="./mod/mod_rewrite.html#rewritemap">RewriteMap</a></code>.</dd>
      
            <dt><code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code>, <code class="module"><a href="./mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></dt>
            <dd><code class="module"><a href="./mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code> ajoute le support des
            groupes imbriqués.</dd>
            <dd><code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code> apporte les directives <code class="directive"><a href="./mod/mod_ldap.html#ldapconnectionpoolttl">LDAPConnectionPoolTTL</a></code> et <code class="directive"><a href="./mod/mod_ldap.html#ldaptimeout">LDAPTimeout</a></code>, ainsi que d'autres
            améliorations dans le traitement des délais. Ceci s'avère utile
            pour les configurations où un pare-feu à mémoire d'état (stateful)
            rejète les connexions inactives vers le serveur LDAP.</dd>
            <dd><code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code> propose la directive <code class="directive"><a href="./mod/mod_ldap.html#ldaplibrarydebug">LDAPLibraryDebug</a></code> qui permet de
            journaliser les informations de débogage fournies par la boîte à
            outils LDAP utilisée.</dd>
      
            <dt><code class="module"><a href="./mod/mod_info.html">mod_info</a></code></dt>
            <dd><code class="module"><a href="./mod/mod_info.html">mod_info</a></code> est maintenant capable d'afficher la
            configuration préinterprétée sur stdout au cours du démarrage du
            serveur.</dd>
      
            <dt><code class="module"><a href="./mod/mod_auth_basic.html">mod_auth_basic</a></code></dt>
            <dd>Nouveau mécanisme générique permettant d'effectuer une
            authentification basique (disponible à partir de la version 2.4.5).</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="programs" id="programs">Améliorations des programmes</a></h2>
          
          <dl>
              <dt><code class="program"><a href="./programs/fcgistarter.html">fcgistarter</a></code></dt>
              <dd>Nouvel utilitaire pour le démarrage des démons
      	FastCGI.</dd>
      	<dt><code class="program"><a href="./programs/htcacheclean.html">htcacheclean</a></code></dt>
              <dd>Les URLs présentes dans le cache peuvent maintenant être
      	affichées, accompagnées éventuellement de leurs métadonnées.</dd>
              <dd>Possibilité de supprimer explicitement des URLs individuelles
      	présentes dans le cache.</dd>
              <dd>Les tailles de fichiers peuvent maintenant être arrondies au
      	multiple de la taille de bloc donnée, les limites de taille
      	collant de ce fait d'avantage à la taille réelle sur disque.</dd>
              <dd>La taille du cache peut maintenant être limitée par le
      	nombre d'inodes, en plus de la possibilité de limitation par la
      	taille des fichiers.</dd>
      
      	<dt><code class="program"><a href="./programs/rotatelogs.html">rotatelogs</a></code></dt>
              <dd>Possibilité de créer un lien vers le fichier journal
      	courant.</dd>
              <dd>Possibilité d'invoquer un script personnalisé après la
      	rotation.</dd>
      
      	<dt><code class="program"><a href="./programs/htpasswd.html">htpasswd</a></code>, <code class="program"><a href="./programs/htdbm.html">htdbm</a></code></dt>
              <dd>Support de l'algorithme bcrypt (disponible à partir de la
      	version 2.4.4).
              </dd>
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="documentation" id="documentation">Documentation</a></h2>
          
          <dl>
              <dt>mod_rewrite</dt>
              <dd>La documentation du module <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> a
      	été réorganisée et presque entièrement réécrite en mettant
      	l'accent sur les exemples et l'utilisation courante, ainsi que
      	sur l'incitation à utiliser d'autres solutions lorsque cela
      	s'avère plus approprié. Le document <a href="rewrite/">Rewrite
      	Guide</a> constitue maintenant une section de premier niveau ;
      	il est mieux organisé et contient beaucoup plus de détails.</dd>
      
              <dt>mod_ssl</dt>
              <dd>La documentation du module <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> a été
      	grandement améliorée, avec plus d'exemples et un niveau "Bien
      	démarrer" qui s'ajoutent aux détails techniques déjà présents
      	dans la précédente documentation.</dd>
      
              <dt>Caching Guide</dt>
              <dd>Le <a href="caching.html">Guide de la mise en cache</a> a
      	été réécrit afin de bien faire la différence entre les
      	fonctionnalités de mise en cache de la RFC2616 HTTP/1.1 fournies
      	par le module <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>, et la mise en cache
      	générique de type clé/valeur fournie par l'interface <a href="socache.html">socache</a>, mais aussi pour couvrir la mise
      	en cache spécialisée fournie par des mécanismes tels que ceux du
      	module <code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code>.</dd>
          </dl>
          </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="developer" id="developer">Modifications concernant les développeur de modules</a></h2>
          
          <dl>
            <dt>Ajout de code pour la vérification de la configuration</dt>
      
            <dd>Une nouvelle fonction, <code>check_config</code>, a été ajoutée et
            s'exécute entre les fonctions <code>pre_config</code> et
            <code>open_logs</code>. Elle s'exécute aussi avant la fonction
            <code>test_config</code> si l'option <code>-t</code> est passée au
            démon <code class="program"><a href="./programs/httpd.html">httpd</a></code>. La fonction <code>check_config</code>
            permet aux modules de vérifier l'interdépendance des valeurs des
            directives de configuration et d'ajuster ces valeurs, alors que les
            messages du serveur peuvent encore être affichés sur la console.
            L'utilisateur est ainsi averti des erreurs de configuration avant que la
            fonction du noyau <code>open_logs</code> ne redirige les sorties de la
            console vers le journal des erreurs.</dd>
      
            <dt>Ajout d'un analyseur syntaxique d'expressions</dt>
            <dd>Nous disposons à présent d'un analyseur générique d'expressions, dont l'API
            est décrite dans <var>ap_expr.h</var>. Il s'agit d'une adaptation de
            l'analyseur qu'on trouvait auparavant dans <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code>.</dd>
      
            <dt>Conteneurs de logique d'autorisation</dt>
      
            <dd>Afin de fournir une logique d'autorisation avancée via des
            directives telles que <code class="directive"><a href="./mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code>, les modules d'autorisation
            s'enregistrent maintenant en tant
            que fournisseur par le biais de ap_register_auth_provider().</dd>
      
            <dt>Interface de mise en cache des petits objets</dt>
      
            <dd>Le fichier d'en-têtes <var>ap_socache.h</var> fournit une
            interface à base de fournisseur pour la mise en cache des petits
            objets de données, en s'inspirant de
            l'implémentation précédente
            du cache de session par <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code>. Sont supportés
            actuellement : les fournisseurs utilisant un tampon cyclique en
            mémoire partagée, les fichiers dbm sur disque, et les caches
            distribués de type memcache.</dd>
      
            <dt>Ajout du point d'ancrage Cache Status</dt>
      
            <dd>Le module <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> inclut maintenant un
            nouveau point d'ancrage, <code>cache_status</code>, qui est appelé
            lorsque la décision à propos de la mise en cache est connue. Il en
            existe une implémentation par défaut qui ajoute les en-têtes
            optionnels <code>X-Cache</code> et <code>X-Cache-Detail</code> à
            la réponse.</dd>
      
      
          </dl>
          <p>La documentation du développeur contient une <a href="developer/new_api_2_4.html">liste détaillée des modifications
          de l'API</a>.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/new_features_2_4.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_4.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./tr/new_features_2_4.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/new_features_2_4.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/bind.html.tr.utf8����������������������������������������������������������0000644�0000000�0000050�00000040336�13447004010�016553� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Adresleri ve Portları Dinleme - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Adresleri ve Portları Dinleme</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./de/bind.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/bind.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/bind.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/bind.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/bind.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/bind.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Apache HTTPD sunucusunun belli adresleri ve portları dinlemek üzere
          yapılandırılması.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#overview">Genel Bakış</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#reload">Dinleme yapılandırmasının yeniden başlatırken değiştirilmesi</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#ipv6">IPv6 Adreslerin Durumu</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#protocol">Protokolü Listen ile Belirtme</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#virtualhost">Sanal Konaklarla Nasıl Çalışır?</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="vhosts/">Sanal Konaklar</a></li><li><a href="dns-caveats.html">DNS Konuları</a></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">Genel Bakış</a></h2>
          
      
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td><ul><li><code class="module"><a href="./mod/core.html">core</a></code></li><li><code class="module"><a href="./mod/mpm_common.html">mpm_common</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code></li></ul></td></tr></table>
      
      
          <p>httpd başlatıldığında yerel makinedeki bazı adres ve portları kendine
            bağlar ve gelecek istekleri bekler. Öntanımlı olarak makine üzerindeki
            tüm adresleri dinler. Bununla birlikte, belli portları veya sadece
            seçilmiş bazı adresleri ya da her ikisini de dinlemesi için bunun
            belirtilmesi gerekebilir. Bu çoğunlukla, httpd’nin farklı IP
            adreslerine, konak isimlerine ve portlarına nasıl yanıt vereceğinin
            belirlendiği <a href="vhosts/">sanal konak</a> özelliği ile birlikte
            yürür.</p>
      
          <p><code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> yönergesi sunucuya
            gelen istekleri sadece belli port(lar)dan veya belli adres ve port
            birleşimlerinden kabul etmesini söyler. <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> yönergesinde sadece port
            numarası belirtilmişse sunucu tüm arabirimlerin belirtilen portunu
            dinleyecektir. Portla birlikte bir IP adresi de belirtilmiÅŸse sunucu
            belirtilen portu ve arabirimi dinleyecektir. Çok sayıda adres ve portu
            dinlemek için çok sayıda <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> yönergesi kullanılabilir. Sunucu
            böyle bir durumda belirtilen bütün adres ve portlardan gelen isteklere
            yanıt verecektir.</p>
      
          <p>Örneğin, sunucunun hem 80 portundan hem de 8000 portundan gelen
            bağlantıları kabul etmesini sağlamak için,</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 80
      Listen 8000</pre>
      </div>
      
          <p>yapılandırmasını kullanabilirsiniz. Sunucunun 80 portuna gelen
            bağlantıları bir arabirimden 8000 portuna gelenleri ise başka bir
            arabirimden kabul etmesini sağlamak için ise,</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 192.0.2.1:80
      Listen 192.0.2.5:8000</pre>
      </div>
      
          <p>yapılandırmasını kullanabilirsiniz. IPv6 adresleri aşağıdaki örnekteki
            gibi köşeli ayraçlar içine alınarak belirtilmelidir:</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen [2001:db8::a00:20ff:fea7:ccea]:80</pre>
      </div>
      
          <div class="warning">
            <p>Bir <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> yönergesinin
            aynısının tekrarı sunucunun başlatılmasını engelleyen ölümcül bir hatayla
            sonuçlanacaktır.</p>
      
            <div class="example"><p><code>
            (48)Address already in use: make_sock: could not bind to address [::]:80
            </code></p></div>
      
            <p>Sorun giderme ile ilgili ipuçları için
            <a href="http://wiki.apache.org/httpd/CouldNotBindToAddress">wiki
            belgesine</a> bakınız.</p>
          </div>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="reload" id="reload">Dinleme yapılandırmasının yeniden başlatırken değiştirilmesi</a></h2>
          
      
          <p>httpd yeniden başlatılırken, 
          <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> yönergelerindeki 
          değişiklikler için özel değerlendirmeler yapılmalıdır. Yeniden başlatma 
          sırasında, httpd, yeni bağlanma çabalarında "Connection refused" (bağlantı 
          reddedildi) hatasından kaçınmak için [özgün yapılandırmadaki gibi] portları 
          bağlı tutar. Bu bakımdan, <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
          yönergelerinden yapılan değişiklikler yenden başlatılrken yapılandırmanın 
          başarısız olmasına ve sunucunun sonlanmasına sebep olur.</p>
      
          <p>Örneğin:</p>
          
          <div class="example"><pre class="prettyprint lang-config">Listen 127.0.0.1:80</pre>
      </div>
      
          <p>yapılandırmasını aşağıdakiyle değiştirmek yenden başlatma sırasında 
          sucunun hta verip sonlanmasına sebep olur. Çünkü, tüm adreslerden 80 porta 
          bağlanmak sadece 127.0.0.1 adresine bağlanmakla çelişir.</p>
          
          <div class="example"><pre class="prettyprint lang-config">Listen 80</pre>
      </div>
      
          <p>Böyle değişikliklerin etkili olabilmesi için sunucu önce durdurulmalı 
          sonra başlatımalıdır (restart yerine stop ve start kullanılmalıdır).</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ipv6" id="ipv6">IPv6 Adreslerin Durumu</a></h2>
          
      
          <p>IPv6’yı gerçekleyen platformların sayısı giderek artmaktadır. Bu
            platformların çoğunda <a class="glossarylink" href="./glossary.html#apr" title="sözlüğe bakınız">APR</a>, httpd’nin IPv6
            soketleri ayırmasını mümkün kılarak IPv6’yı desteklemekte ve IPv6
            üzerinden gönderilmiş istekleri elde etmektedir.</p>
      
          <p>httpd yöneticilerinin kafasını karıştırıran tek şey IPv6 soketlerin
            hem IPv4 hem de IPv6 bağlantılarını kabul edip etmeyeceğidir. IPv4
            bağlantılarını kabul eden IPv6 soketleri IPv4 eşlemli IPv6 adresleri
            kullanırlar. Bu çoğu sistemde öntanımlı olarak böyleyken, FreeBSD,
            NetBSD ve OpenBSD’de sistem geneline uygulanan kurallar gereğince
            öntanımlı olarak buna izin verilmez; bu sistemlerde özel bir
            <code class="program"><a href="./programs/configure.html">configure</a></code> parametresi ile <code>httpd</code>’nin
            davranışı değiştirilebilir.</p>
      
          <p>Diğer taraftan, Linux ve Tru64 gibi bazı platformlarda hem IPv4 hem de
            IPv6 adresleri kabul etmenin <strong>tek yolu</strong> eÅŸlemli adresler
            kullanmaktır. <code>httpd</code>’nin IPv4 ve IPv6 adresleri, IPv4 eşlemli
            IPv6 adreslerin kullanımını gerektiren en az sayıda soketle kabul etmesini
            istiyorsanız, <code class="program"><a href="./programs/configure.html">configure</a></code> betiğine
            <code>--enable-v4-mapped</code> seçeneğini belirtiniz.</p>
      
          <p><code>--enable-v4-mapped</code> seçeneği, FreeBSD, NetBSD ve OpenBSD
            hariç tüm platformlarda öntanımlıdır. Muhtemelen siz de
            <code>httpd</code>’nin böyle derlenmesini isterdiniz.</p>
      
          <p>Platformunuzun ve APR’nin neyi desteklediğine bakmaksızın
            <code>httpd</code>’nin sadece IPv4 adresleri kabul etmesini istiyorsanız,
            tüm <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> yönergelerinde
            örnekteki gibi IPv4 adresleri belirtiniz:</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 0.0.0.0:80
      Listen 192.0.2.1:80</pre>
      </div>
      
          <p>Platformunuz IPv4 ve IPv6 adresleri ayrı soketlerden kabul ediyorsa ve
            <code>httpd</code>’nin de buna uygun davranmasını (yani IPv4 eşlemli IPv6
            adreslerin iptalini)  istiyorsanız <code class="program"><a href="./programs/configure.html">configure</a></code>
            betiğine <code>--disable-v4-mapped</code> seçeneğini belirtiniz. Bu
            seçenek FreeBSD, NetBSD ve OpenBSD’de öntanımlıdır.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="protocol" id="protocol">Protokolü Listen ile Belirtme</a></h2>
          
          <p><code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> yönergesinin isteğe
            bağlı ikinci değiştirgesi <var>protokol</var> çoğu yapılandırmada gerekli
            olmaz. Belirtilmediği takdirde, <code>https</code> için 443,
            <code>http</code> için ise diğer bütün portlar öntanımlıdır. Protokol,
            isteğin hangi modül tarafından işleneceğini ve <code class="directive"><a href="./mod/core.html#acceptfilter">AcceptFilter</a></code> yönergesi ile uygulanacak
            protokole özgü en iyilemeleri belirlemekte kullanılır.</p>
      
          <p>Sadece standartdışı bir port kullanmak isterseniz protokolü belirtmeniz
            gerekir. Örneğin, bir<code>https</code> sitesini port 8443 üzerinde
            çalıştırmak isterseniz:</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 192.170.2.1:8443 https</pre>
      </div>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="virtualhost" id="virtualhost">Sanal Konaklarla Nasıl Çalışır?</a></h2>
          
      
          <p><code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> yönergesi sanal
            konaklar için gerçeklenmemiştir; sadece ana sunucuya hangi adresleri ve
            portları dinleyeceğini söyler. Hiç <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> yönergesi kullanılmamışsa sunucu
            kabul edilen tüm isteklere aynı şekilde davranacaktır. Eğer bir veya
            daha fazla adres ve port için farklı bir davranış belirtmek
            istiyorsanız <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> kullanabilirsiniz. Bir sanal
            konağı gerçeklemek için önce sunucunun sanal konak için kullanacağı
            adres ve portu dinleyeceÄŸini belirtmek gerekir. Bundan sonra bu sanal
            konağın davranışını ayarlamak üzere belirtilen adres ve port için bir
            <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> bölümü
            oluşturulmalıdır. Yalnız dikkat edin, eğer <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> için belirtilen adres ve port
            sunucu tarafından dinlenmiyorsa ona erişemezsiniz.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./de/bind.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/bind.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/bind.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/bind.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/bind.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/bind.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/bind.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/index.html.da��������������������������������������������������������������0000644�0000000�0000050�00000021125�13412755316�016031� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="da" xml:lang="da"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache HTTP Server Version 2.4
      Dokumentation - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="index-page">
      <div id="page-header">
      <p class="menu"><a href="./mod/">Moduler</a> | <a href="./mod/directives.html">Direktiver</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Ordbog</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="http://httpd.apache.org/docs-project/"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Dokumentation</a></div>
      <div id="page-content"><h1>Apache HTTP Server Version 2.4
      Dokumentation</h1>
      <div class="toplang">
      <p><span>Tilgængelige sprog: </span><a href="./da/" title="Dansk">&nbsp;da&nbsp;</a> |
      <a href="./de/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">Denne oversættelse kan være forældet. Se den Engelske version for de seneste opdateringer.</div>
      <form method="get" action="http://www.google.com/search"><p><input name="as_q" value="" type="text" /> <input value="Google Søgning" type="submit" /><input value="10" name="num" type="hidden" /><input value="da" name="hl" type="hidden" /><input value="ISO-8859-1" name="ie" type="hidden" /><input value="Google Search" name="btnG" type="hidden" /><input name="as_epq" value="Version 2.4" type="hidden" /><input name="as_oq" value="" type="hidden" /><input name="as_eq" value="&quot;List-Post&quot;" type="hidden" /><input value="" name="lr" type="hidden" /><input value="i" name="as_ft" type="hidden" /><input value="" name="as_filetype" type="hidden" /><input value="all" name="as_qdr" type="hidden" /><input value="any" name="as_occt" type="hidden" /><input value="i" name="as_dt" type="hidden" /><input value="httpd.apache.org" name="as_sitesearch" type="hidden" /><input value="off" name="safe" type="hidden" /></p></form>
      <table id="indextable"><tr><td class="col1"><div class="category"><h2><a name="release" id="release">Udgivelses Noter</a></h2>
      <ul><li><a href="new_features_2_4.html">Nye funktioner i Apache 2.3/2.4</a></li>
      <li><a href="new_features_2_2.html">Nye funktioner i Apache 2.1/2.2</a></li>
      <li><a href="new_features_2_0.html">Nye funktioner i Apache 2.0</a></li>
      <li><a href="upgrading.html">Opgradering fra 2.2 til 2.4</a></li>
      <li><a href="license.html">Apache Licens</a></li>
      </ul>
      </div><div class="category"><h2><a name="manual" id="manual">Reference Manual</a></h2>
      <ul><li><a href="install.html">Kompilering og installation</a></li>
      <li><a href="invoking.html">Opstart</a></li>
      <li><a href="stopping.html">At starte og stoppe serveren</a></li>
      <li><a href="mod/directives.html">Kørselstidskonfigurationsdirektiver</a></li>
      <li><a href="mod/quickreference.html">Hurtig oversigt over direktiver</a></li>
      <li><a href="mod/">Moduler</a></li>
      <li><a href="mpm.html">Multibehandlingsmoduler (MPM)</a></li>
      <li><a href="filter.html">Filtre</a></li>
      <li><a href="handler.html">Behandlere</a></li>
      <li><a href="programs/">Serveren og understøttende programmer</a></li>
      <li><a href="glossary.html">Anvendte gloser</a></li>
      </ul>
      </div></td><td><div class="category"><h2><a name="usersguide" id="usersguide">Brugerguide</a></h2>
      <ul><li><a href="bind.html">Binding</a></li>
      <li><a href="configuring.html">Konfigurationsfiler</a></li>
      <li><a href="sections.html">Konfigurationssektioner</a></li>
      <li><a href="caching.html">Caching af indhold</a></li>
      <li><a href="content-negotiation.html">Indholdsforhandling</a></li>
      <li><a href="dso.html">Dynamisk delte objekter (DSO)</a></li>
      <li><a href="env.html">Miljøvariabler</a></li>
      <li><a href="logs.html">Logfiler</a></li>
      <li><a href="urlmapping.html">Afbilding af URL'er til filsystem</a></li>
      <li><a href="misc/perf-tuning.html">Justering af ydeevne</a></li>
      <li><a href="misc/security_tips.html">Sikkerhedstips</a></li>
      <li><a href="server-wide.html">Global serverkonfiguration</a></li>
      <li><a href="ssl/">SSL/TLS-Kryptering</a></li>
      <li><a href="suexec.html">Suexec-afvikling for CGI</a></li>
      <li><a href="rewrite/">URL-omskrivning med mod_rewrite</a></li>
      <li><a href="vhosts/">Virtuelle værter</a></li>
      </ul>
      </div></td><td class="col3"><div class="category"><h2><a name="howto" id="howto">How-To / Gennemgange</a></h2>
      <ul><li><a href="howto/auth.html">Godkendelse, autorisation og adgangskontrol</a></li>
      <li><a href="howto/cgi.html">CGI: Dynamisk indhold</a></li>
      <li><a href="howto/htaccess.html">.htaccess filer</a></li>
      <li><a href="howto/ssi.html">Server Side Includes (SSI)</a></li>
      <li><a href="howto/public_html.html">Per-bruger webmapper (public_html)</a></li>
      </ul>
      </div><div class="category"><h2><a name="platform" id="platform">Platformspecifikke noter</a></h2>
      <ul><li><a href="platform/windows.html">Microsoft Windows</a></li>
      <li><a href="platform/netware.html">Novell NetWare</a></li>
      <li><a href="platform/ebcdic.html">EBCDIC Port</a></li>
      </ul>
      </div><div class="category"><h2><a name="other" id="other">Andre emner</a></h2>
      <ul><li><a href="faq/">Ofte stillede spørgsmål</a></li>
      <li><a href="sitemap.html">Sitemap</a></li>
      <li><a href="developer/">Dokumentation for udviklere</a></li>
      <li><a href="misc/">Andre noter</a></li>
      <li><a href="http://wiki.apache.org/httpd/">Wiki</a></li>
      </ul>
      </div></td></tr></table></div>
      <div class="bottomlang">
      <p><span>Tilgængelige sprog: </span><a href="./da/" title="Dansk">&nbsp;da&nbsp;</a> |
      <a href="./de/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licenseret under <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Moduler</a> | <a href="./mod/directives.html">Direktiver</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Ordbog</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/sitemap.html.ko.euc-kr�����������������������������������������������������0000644�0000000�0000050�00000055767�13520523022�017604� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>»çÀÌÆ®¸Ê - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page">
      <div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div>
      <div id="page-content"><div id="preamble"><h1>»çÀÌÆ®¸Ê</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/sitemap.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/sitemap.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/sitemap.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/sitemap.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sitemap.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sitemap.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sitemap.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/sitemap.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      <p>ÀÌ ÆäÀÌÁö´Â ÇöÀç
      <a href="./">Apache HTTP Server Version 2.4 ¹®¼­</a> ¸ñ·ÏÀ»
      º¸¿©ÁØ´Ù.</p>
      </div>
      <div id="quickview"><ul id="toc">
      <li><img alt="" src="./images/down.gif" /> <a href="#release">¹ßÇ¥¹®</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#using">¾ÆÆÄÄ¡ À¥¼­¹ö »ç¿ëÇϱâ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#vhosts">¾ÆÆÄÄ¡ °¡»óÈ£½ºÆ® ¹®¼­</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#faq">¾ÆÆÄÄ¡ ¼­¹ö¿¡ ´ëÇØ ÀÚÁÖ ¹°¾îº¸´Â Áú¹®</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#ssl">¾ÆÆÄÄ¡ SSL/TLS ¾Ïȣȭ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#howto">Áöħ¼­, ÅõÅ丮¾ó, HowTo</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#platform">Ç÷¡Æûº° ¼³¸í</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programs">¾ÆÆÄÄ¡ À¥¼­¹ö¿Í Áö¿ø ÇÁ·Î±×·¥</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#misc">±âŸ ¾ÆÆÄÄ¡ ¹®¼­</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#modules">¾ÆÆÄÄ¡ ¸ðµâ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#developer">°³¹ßÀÚ ¹®¼­</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#index">¿ë¾î¿Í »öÀÎ</a></li>
      </ul>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="release" id="release">¹ßÇ¥¹®</a></h2>
      <ul><li><a href="upgrading.html">1.3¿¡¼­ 2.0À¸·Î ¾÷±×·¹À̵å</a></li>
      <li><a href="new_features_2_0.html">¾ÆÆÄÄ¡ 2.0ÀÇ »õ·Î¿î ±â´É</a></li>
      <li><a href="license.html">¾ÆÆÄÄ¡ ¶óÀ̼±½º</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="using" id="using">¾ÆÆÄÄ¡ À¥¼­¹ö »ç¿ëÇϱâ</a></h2>
      <ul><li><a href="install.html">¾ÆÆÄÄ¡ ÄÄÆÄÀϰú ¼³Ä¡</a></li>
      <li><a href="invoking.html">¾ÆÆÄÄ¡ ½ÃÀÛ</a></li>
      <li><a href="stopping.html">¼­¹ö Áߴܰú Àç½ÃÀÛ</a></li>
      <li><a href="configuring.html">¼³Á¤ÆÄÀÏ</a></li>
      <li><a href="sections.html">¾î¶»°Ô Directory, Location, Files ¼½¼ÇÀÌ
      µ¿ÀÛÇϳª</a></li>
      <li><a href="server-wide.html">¼­¹ö Àü¿ª ¼³Á¤</a></li>
      <li><a href="logs.html">·Î±×ÆÄÀÏ</a></li>
      <li><a href="urlmapping.html">URLÀ» ÆÄÀϽýºÅÛ¿¡ ´ëÀÀ</a></li>
      <li><a href="misc/security_tips.html">º¸¾È ÆÁ</a></li>
      <li><a href="dso.html">µ¿Àû°øÀ¯°´Ã¼ (DSO) Áö¿ø</a></li>
      <li><a href="content-negotiation.html">³»¿ëÇù»ó (content negotiation)</a></li>
      <li><a href="custom-error.html">»ç¿ëÀÚÁ¤ÀÇ ¿À·ù ÀÀ´ä</a></li>
      <li><a href="bind.html">¾ÆÆÄÄ¡°¡ »ç¿ëÇÒ ÁÖ¼Ò¿Í Æ÷Æ® ÁöÁ¤</a></li>
      <li><a href="mpm.html">´ÙÁß󸮸ðµâ (MPM)</a></li>
      <li><a href="env.html">¾ÆÆÄÄ¡ÀÇ È¯°æº¯¼ö</a></li>
      <li><a href="handler.html">¾ÆÆÄÄ¡¿¡¼­ Çڵ鷯 »ç¿ë</a></li>
      <li><a href="filter.html">ÇÊÅÍ</a></li>
      <li><a href="suexec.html">suEXEC Áö¿ø</a></li>
      <li><a href="misc/perf-tuning.html">¼º´ÉÇâ»ó ÈùÆ®</a></li>
      <li><a href="misc/rewriteguide.html">URL ÀçÀÛ¼º(rewriting) Áöħ¼­</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="vhosts" id="vhosts">¾ÆÆÄÄ¡ °¡»óÈ£½ºÆ® ¹®¼­</a></h2>
      <ul><li class="separate"><a href="vhosts/">°³¿ä</a></li>
      <li><a href="vhosts/name-based.html">À̸§±â¹Ý °¡»óÈ£½ºÆ®</a></li>
      <li><a href="vhosts/ip-based.html">IP±â¹Ý °¡»óÈ£½ºÆ® Áö¿ø</a></li>
      <li><a href="vhosts/mass.html">´ë·®ÀÇ °¡»óÈ£½ºÆ®¸¦ µ¿ÀûÀ¸·Î ¼³Á¤Çϱâ</a></li>
      <li><a href="vhosts/examples.html">°¡»óÈ£½ºÆ® ¿¹</a></li>
      <li><a href="vhosts/details.html">°¡»óÈ£½ºÆ® ã±â¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ¼³¸í</a></li>
      <li><a href="vhosts/fd-limits.html">ÆÄÀϱâ¼úÀÚ(file descriptor) ÇѰè</a></li>
      <li><a href="dns-caveats.html">DNS¿Í ¾ÆÆÄÄ¡¿Í °ü·ÃµÈ »çÇ×</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="faq" id="faq">¾ÆÆÄÄ¡ ¼­¹ö¿¡ ´ëÇØ ÀÚÁÖ ¹°¾îº¸´Â Áú¹®</a></h2>
      <ul><li><a href="faq/">°³¿ä</a></li>
      <li><a href="faq/support.html">Áö¿ø</a></li>
      <li><a href="faq/error.html">¿À·ù¹®</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="ssl" id="ssl">¾ÆÆÄÄ¡ SSL/TLS ¾Ïȣȭ</a></h2>
      <ul><li class="separate"><a href="ssl/">¼Ò°³</a></li>
      <li><a href="ssl/ssl_intro.html">SSL/TLS ¾Ïȣȭ: ¼Ò°³</a></li>
      <li><a href="ssl/ssl_compat.html">SSL/TLS ¾Ïȣȭ: ȣȯ¼º</a></li>
      <li><a href="ssl/ssl_howto.html">SSL/TLS ¾Ïȣȭ: How-To</a></li>
      <li><a href="ssl/ssl_faq.html">SSL/TLS ¾Ïȣȭ: FAQ</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="howto" id="howto">Áöħ¼­, ÅõÅ丮¾ó, HowTo</a></h2>
      <ul><li class="separate"><a href="howto/">°³¿ä</a></li>
      <li><a href="howto/auth.html">ÀÎÁõ</a></li>
      <li><a href="howto/cgi.html">CGI·Î µ¿Àû ÆäÀÌÁö »ý¼º</a></li>
      <li><a href="howto/ssi.html">Server Side Includes ¼Ò°³</a></li>
      <li><a href="howto/htaccess.html">.htaccess ÆÄÀÏ</a></li>
      <li><a href="howto/public_html.html">»ç¿ëÀÚº° À¥µð·ºÅ丮</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="platform" id="platform">Ç÷¡Æûº° ¼³¸í</a></h2>
      <ul><li class="separate"><a href="platform/">°³¿ä</a></li>
      <li><a href="platform/windows.html">Microsoft Windows¿¡¼­ ¾ÆÆÄÄ¡
      »ç¿ëÇϱâ</a></li>
      <li><a href="platform/win_compiling.html">Microsoft Windows¿¡¼­
      ¾ÆÆÄÄ¡ ÄÄÆÄÀÏÇϱâ</a></li>
      <li><a href="platform/netware.html">Novell NetWare¿¡¼­ ¾ÆÆÄÄ¡
      »ç¿ëÇϱâ</a></li>
      <li><a href="platform/perf-hp.html">HPUX¿¡¼­ °í¼º´É À¥¼­¹ö
      ½ÇÇàÇϱâ</a></li>
      <li><a href="platform/ebcdic.html">¾ÆÆÄÄ¡ EBCDIC Æ÷ÆÃ</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="programs" id="programs">¾ÆÆÄÄ¡ À¥¼­¹ö¿Í Áö¿ø ÇÁ·Î±×·¥</a></h2>
      <ul><li class="separate"><a href="programs/">°³¿ä</a></li>
      <li><a href="programs/httpd.html">Manpage: httpd</a></li>
      <li><a href="programs/ab.html">Manpage: ab</a></li>
      <li><a href="programs/apachectl.html">Manpage: apachectl</a></li>
      <li><a href="programs/apxs.html">Manpage: apxs</a></li>
      <li><a href="programs/configure.html">Manpage: configure</a></li>
      <li><a href="programs/dbmmanage.html">Manpage: dbmmanage</a></li>
      <li><a href="programs/htcacheclean.html">Manpage: htcacheclean</a></li>
      <li><a href="programs/htdigest.html">Manpage: htdigest</a></li>
      <li><a href="programs/htpasswd.html">Manpage: htpasswd</a></li>
      <li><a href="programs/logresolve.html">Manpage: logresolve</a></li>
      <li><a href="programs/rotatelogs.html">Manpage: rotatelogs</a></li>
      <li><a href="programs/suexec.html">Manpage: suexec</a></li>
      <li><a href="programs/other.html">´Ù¸¥ ÇÁ·Î±×·¥µé</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="misc" id="misc">±âŸ ¾ÆÆÄÄ¡ ¹®¼­</a></h2>
      <ul><li class="separate"><a href="misc/">°³¿ä</a></li>
      <li><a href="misc/relevant_standards.html">°ü·ÃµÈ Ç¥Áصé</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="modules" id="modules">¾ÆÆÄÄ¡ ¸ðµâ</a></h2>
      <ul><li><a href="mod/module-dict.html">¾ÆÆÄÄ¡ ¸ðµâÀ» ¼³¸íÇϴµ¥ »ç¿ëÇÑ
      ¿ë¾îÁ¤ÀÇ</a></li>
      <li><a href="mod/directive-dict.html">¾ÆÆÄÄ¡ Áö½Ã¾î¸¦ ¼³¸íÇϴµ¥
      »ç¿ëÇÑ ¿ë¾îÁ¤ÀÇ</a></li>
      </ul><ul><li><a href="mod/core.html">¾ÆÆÄÄ¡ ÇÙ½É ±â´É</a></li>
      <li><a href="mod/mpm_common.html">¾ÆÆÄÄ¡ MPM °øÅë Áö½Ã¾î</a></li>
      <li><a href="mod/event.html">¾ÆÆÄÄ¡ MPM event</a></li>
      <li><a href="mod/mpm_netware.html">¾ÆÆÄÄ¡ MPM netware</a></li>
      <li><a href="mod/mpmt_os2.html">¾ÆÆÄÄ¡ MPM os2</a></li>
      <li><a href="mod/prefork.html">¾ÆÆÄÄ¡ MPM prefork</a></li>
      <li><a href="mod/mpm_winnt.html">¾ÆÆÄÄ¡ MPM winnt</a></li>
      <li><a href="mod/worker.html">¾ÆÆÄÄ¡ MPM worker</a></li>
      </ul><ul><li><a href="mod/mod_access_compat.html">¾ÆÆÄÄ¡ ¸ðµâ mod_access_compat</a></li>
      <li><a href="mod/mod_actions.html">¾ÆÆÄÄ¡ ¸ðµâ mod_actions</a></li>
      <li><a href="mod/mod_alias.html">¾ÆÆÄÄ¡ ¸ðµâ mod_alias</a></li>
      <li><a href="mod/mod_allowmethods.html">¾ÆÆÄÄ¡ ¸ðµâ mod_allowmethods</a></li>
      <li><a href="mod/mod_asis.html">¾ÆÆÄÄ¡ ¸ðµâ mod_asis</a></li>
      <li><a href="mod/mod_auth_basic.html">¾ÆÆÄÄ¡ ¸ðµâ mod_auth_basic</a></li>
      <li><a href="mod/mod_auth_digest.html">¾ÆÆÄÄ¡ ¸ðµâ mod_auth_digest</a></li>
      <li><a href="mod/mod_auth_form.html">¾ÆÆÄÄ¡ ¸ðµâ mod_auth_form</a></li>
      <li><a href="mod/mod_authn_anon.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authn_anon</a></li>
      <li><a href="mod/mod_authn_core.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authn_core</a></li>
      <li><a href="mod/mod_authn_dbd.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authn_dbd</a></li>
      <li><a href="mod/mod_authn_dbm.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authn_dbm</a></li>
      <li><a href="mod/mod_authn_file.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authn_file</a></li>
      <li><a href="mod/mod_authn_socache.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authn_socache</a></li>
      <li><a href="mod/mod_authnz_fcgi.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authnz_fcgi</a></li>
      <li><a href="mod/mod_authnz_ldap.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authnz_ldap</a></li>
      <li><a href="mod/mod_authz_core.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authz_core</a></li>
      <li><a href="mod/mod_authz_dbd.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authz_dbd</a></li>
      <li><a href="mod/mod_authz_dbm.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authz_dbm</a></li>
      <li><a href="mod/mod_authz_groupfile.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authz_groupfile</a></li>
      <li><a href="mod/mod_authz_host.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authz_host</a></li>
      <li><a href="mod/mod_authz_owner.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authz_owner</a></li>
      <li><a href="mod/mod_authz_user.html">¾ÆÆÄÄ¡ ¸ðµâ mod_authz_user</a></li>
      <li><a href="mod/mod_autoindex.html">¾ÆÆÄÄ¡ ¸ðµâ mod_autoindex</a></li>
      <li><a href="mod/mod_brotli.html">¾ÆÆÄÄ¡ ¸ðµâ mod_brotli</a></li>
      <li><a href="mod/mod_buffer.html">¾ÆÆÄÄ¡ ¸ðµâ mod_buffer</a></li>
      <li><a href="mod/mod_cache.html">¾ÆÆÄÄ¡ ¸ðµâ mod_cache</a></li>
      <li><a href="mod/mod_cache_disk.html">¾ÆÆÄÄ¡ ¸ðµâ mod_cache_disk</a></li>
      <li><a href="mod/mod_cache_socache.html">¾ÆÆÄÄ¡ ¸ðµâ mod_cache_socache</a></li>
      <li><a href="mod/mod_cern_meta.html">¾ÆÆÄÄ¡ ¸ðµâ mod_cern_meta</a></li>
      <li><a href="mod/mod_cgi.html">¾ÆÆÄÄ¡ ¸ðµâ mod_cgi</a></li>
      <li><a href="mod/mod_cgid.html">¾ÆÆÄÄ¡ ¸ðµâ mod_cgid</a></li>
      <li><a href="mod/mod_charset_lite.html">¾ÆÆÄÄ¡ ¸ðµâ mod_charset_lite</a></li>
      <li><a href="mod/mod_data.html">¾ÆÆÄÄ¡ ¸ðµâ mod_data</a></li>
      <li><a href="mod/mod_dav.html">¾ÆÆÄÄ¡ ¸ðµâ mod_dav</a></li>
      <li><a href="mod/mod_dav_fs.html">¾ÆÆÄÄ¡ ¸ðµâ mod_dav_fs</a></li>
      <li><a href="mod/mod_dav_lock.html">¾ÆÆÄÄ¡ ¸ðµâ mod_dav_lock</a></li>
      <li><a href="mod/mod_dbd.html">¾ÆÆÄÄ¡ ¸ðµâ mod_dbd</a></li>
      <li><a href="mod/mod_deflate.html">¾ÆÆÄÄ¡ ¸ðµâ mod_deflate</a></li>
      <li><a href="mod/mod_dialup.html">¾ÆÆÄÄ¡ ¸ðµâ mod_dialup</a></li>
      <li><a href="mod/mod_dir.html">¾ÆÆÄÄ¡ ¸ðµâ mod_dir</a></li>
      <li><a href="mod/mod_dumpio.html">¾ÆÆÄÄ¡ ¸ðµâ mod_dumpio</a></li>
      <li><a href="mod/mod_echo.html">¾ÆÆÄÄ¡ ¸ðµâ mod_echo</a></li>
      <li><a href="mod/mod_env.html">¾ÆÆÄÄ¡ ¸ðµâ mod_env</a></li>
      <li><a href="mod/mod_example_hooks.html">¾ÆÆÄÄ¡ ¸ðµâ mod_example_hooks</a></li>
      <li><a href="mod/mod_expires.html">¾ÆÆÄÄ¡ ¸ðµâ mod_expires</a></li>
      <li><a href="mod/mod_ext_filter.html">¾ÆÆÄÄ¡ ¸ðµâ mod_ext_filter</a></li>
      <li><a href="mod/mod_file_cache.html">¾ÆÆÄÄ¡ ¸ðµâ mod_file_cache</a></li>
      <li><a href="mod/mod_filter.html">¾ÆÆÄÄ¡ ¸ðµâ mod_filter</a></li>
      <li><a href="mod/mod_headers.html">¾ÆÆÄÄ¡ ¸ðµâ mod_headers</a></li>
      <li><a href="mod/mod_heartbeat.html">¾ÆÆÄÄ¡ ¸ðµâ mod_heartbeat</a></li>
      <li><a href="mod/mod_heartmonitor.html">¾ÆÆÄÄ¡ ¸ðµâ mod_heartmonitor</a></li>
      <li><a href="mod/mod_http2.html">¾ÆÆÄÄ¡ ¸ðµâ mod_http2</a></li>
      <li><a href="mod/mod_ident.html">¾ÆÆÄÄ¡ ¸ðµâ mod_ident</a></li>
      <li><a href="mod/mod_imagemap.html">¾ÆÆÄÄ¡ ¸ðµâ mod_imagemap</a></li>
      <li><a href="mod/mod_include.html">¾ÆÆÄÄ¡ ¸ðµâ mod_include</a></li>
      <li><a href="mod/mod_info.html">¾ÆÆÄÄ¡ ¸ðµâ mod_info</a></li>
      <li><a href="mod/mod_isapi.html">¾ÆÆÄÄ¡ ¸ðµâ mod_isapi</a></li>
      <li><a href="mod/mod_lbmethod_bybusyness.html">¾ÆÆÄÄ¡ ¸ðµâ mod_lbmethod_bybusyness</a></li>
      <li><a href="mod/mod_lbmethod_byrequests.html">¾ÆÆÄÄ¡ ¸ðµâ mod_lbmethod_byrequests</a></li>
      <li><a href="mod/mod_lbmethod_bytraffic.html">¾ÆÆÄÄ¡ ¸ðµâ mod_lbmethod_bytraffic</a></li>
      <li><a href="mod/mod_lbmethod_heartbeat.html">¾ÆÆÄÄ¡ ¸ðµâ mod_lbmethod_heartbeat</a></li>
      <li><a href="mod/mod_ldap.html">¾ÆÆÄÄ¡ ¸ðµâ mod_ldap</a></li>
      <li><a href="mod/mod_log_config.html">¾ÆÆÄÄ¡ ¸ðµâ mod_log_config</a></li>
      <li><a href="mod/mod_log_debug.html">¾ÆÆÄÄ¡ ¸ðµâ mod_log_debug</a></li>
      <li><a href="mod/mod_log_forensic.html">¾ÆÆÄÄ¡ ¸ðµâ mod_log_forensic</a></li>
      <li><a href="mod/mod_logio.html">¾ÆÆÄÄ¡ ¸ðµâ mod_logio</a></li>
      <li><a href="mod/mod_lua.html">¾ÆÆÄÄ¡ ¸ðµâ mod_lua</a></li>
      <li><a href="mod/mod_macro.html">¾ÆÆÄÄ¡ ¸ðµâ mod_macro</a></li>
      <li><a href="mod/mod_md.html">¾ÆÆÄÄ¡ ¸ðµâ mod_md</a></li>
      <li><a href="mod/mod_mime.html">¾ÆÆÄÄ¡ ¸ðµâ mod_mime</a></li>
      <li><a href="mod/mod_mime_magic.html">¾ÆÆÄÄ¡ ¸ðµâ mod_mime_magic</a></li>
      <li><a href="mod/mod_negotiation.html">¾ÆÆÄÄ¡ ¸ðµâ mod_negotiation</a></li>
      <li><a href="mod/mod_nw_ssl.html">¾ÆÆÄÄ¡ ¸ðµâ mod_nw_ssl</a></li>
      <li><a href="mod/mod_privileges.html">¾ÆÆÄÄ¡ ¸ðµâ mod_privileges</a></li>
      <li><a href="mod/mod_proxy.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy</a></li>
      <li><a href="mod/mod_proxy_ajp.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy_ajp</a></li>
      <li><a href="mod/mod_proxy_balancer.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy_balancer</a></li>
      <li><a href="mod/mod_proxy_connect.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy_connect</a></li>
      <li><a href="mod/mod_proxy_express.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy_express</a></li>
      <li><a href="mod/mod_proxy_fcgi.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy_fcgi</a></li>
      <li><a href="mod/mod_proxy_fdpass.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy_fdpass</a></li>
      <li><a href="mod/mod_proxy_ftp.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy_ftp</a></li>
      <li><a href="mod/mod_proxy_hcheck.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy_hcheck</a></li>
      <li><a href="mod/mod_proxy_html.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy_html</a></li>
      <li><a href="mod/mod_proxy_http.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy_http</a></li>
      <li><a href="mod/mod_proxy_http2.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy_http2</a></li>
      <li><a href="mod/mod_proxy_scgi.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy_scgi</a></li>
      <li><a href="mod/mod_proxy_uwsgi.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy_uwsgi</a></li>
      <li><a href="mod/mod_proxy_wstunnel.html">¾ÆÆÄÄ¡ ¸ðµâ mod_proxy_wstunnel</a></li>
      <li><a href="mod/mod_ratelimit.html">¾ÆÆÄÄ¡ ¸ðµâ mod_ratelimit</a></li>
      <li><a href="mod/mod_reflector.html">¾ÆÆÄÄ¡ ¸ðµâ mod_reflector</a></li>
      <li><a href="mod/mod_remoteip.html">¾ÆÆÄÄ¡ ¸ðµâ mod_remoteip</a></li>
      <li><a href="mod/mod_reqtimeout.html">¾ÆÆÄÄ¡ ¸ðµâ mod_reqtimeout</a></li>
      <li><a href="mod/mod_request.html">¾ÆÆÄÄ¡ ¸ðµâ mod_request</a></li>
      <li><a href="mod/mod_rewrite.html">¾ÆÆÄÄ¡ ¸ðµâ mod_rewrite</a></li>
      <li><a href="mod/mod_sed.html">¾ÆÆÄÄ¡ ¸ðµâ mod_sed</a></li>
      <li><a href="mod/mod_session.html">¾ÆÆÄÄ¡ ¸ðµâ mod_session</a></li>
      <li><a href="mod/mod_session_cookie.html">¾ÆÆÄÄ¡ ¸ðµâ mod_session_cookie</a></li>
      <li><a href="mod/mod_session_crypto.html">¾ÆÆÄÄ¡ ¸ðµâ mod_session_crypto</a></li>
      <li><a href="mod/mod_session_dbd.html">¾ÆÆÄÄ¡ ¸ðµâ mod_session_dbd</a></li>
      <li><a href="mod/mod_setenvif.html">¾ÆÆÄÄ¡ ¸ðµâ mod_setenvif</a></li>
      <li><a href="mod/mod_slotmem_plain.html">¾ÆÆÄÄ¡ ¸ðµâ mod_slotmem_plain</a></li>
      <li><a href="mod/mod_slotmem_shm.html">¾ÆÆÄÄ¡ ¸ðµâ mod_slotmem_shm</a></li>
      <li><a href="mod/mod_so.html">¾ÆÆÄÄ¡ ¸ðµâ mod_so</a></li>
      <li><a href="mod/mod_socache_dbm.html">¾ÆÆÄÄ¡ ¸ðµâ mod_socache_dbm</a></li>
      <li><a href="mod/mod_socache_dc.html">¾ÆÆÄÄ¡ ¸ðµâ mod_socache_dc</a></li>
      <li><a href="mod/mod_socache_memcache.html">¾ÆÆÄÄ¡ ¸ðµâ mod_socache_memcache</a></li>
      <li><a href="mod/mod_socache_redis.html">¾ÆÆÄÄ¡ ¸ðµâ mod_socache_redis</a></li>
      <li><a href="mod/mod_socache_shmcb.html">¾ÆÆÄÄ¡ ¸ðµâ mod_socache_shmcb</a></li>
      <li><a href="mod/mod_speling.html">¾ÆÆÄÄ¡ ¸ðµâ mod_speling</a></li>
      <li><a href="mod/mod_ssl.html">¾ÆÆÄÄ¡ ¸ðµâ mod_ssl</a></li>
      <li><a href="mod/mod_status.html">¾ÆÆÄÄ¡ ¸ðµâ mod_status</a></li>
      <li><a href="mod/mod_substitute.html">¾ÆÆÄÄ¡ ¸ðµâ mod_substitute</a></li>
      <li><a href="mod/mod_suexec.html">¾ÆÆÄÄ¡ ¸ðµâ mod_suexec</a></li>
      <li><a href="mod/mod_unique_id.html">¾ÆÆÄÄ¡ ¸ðµâ mod_unique_id</a></li>
      <li><a href="mod/mod_unixd.html">¾ÆÆÄÄ¡ ¸ðµâ mod_unixd</a></li>
      <li><a href="mod/mod_userdir.html">¾ÆÆÄÄ¡ ¸ðµâ mod_userdir</a></li>
      <li><a href="mod/mod_usertrack.html">¾ÆÆÄÄ¡ ¸ðµâ mod_usertrack</a></li>
      <li><a href="mod/mod_version.html">¾ÆÆÄÄ¡ ¸ðµâ mod_version</a></li>
      <li><a href="mod/mod_vhost_alias.html">¾ÆÆÄÄ¡ ¸ðµâ mod_vhost_alias</a></li>
      <li><a href="mod/mod_watchdog.html">¾ÆÆÄÄ¡ ¸ðµâ mod_watchdog</a></li>
      <li><a href="mod/mod_xml2enc.html">¾ÆÆÄÄ¡ ¸ðµâ mod_xml2enc</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="developer" id="developer">°³¹ßÀÚ ¹®¼­</a></h2>
      <ul><li class="separate"><a href="developer/">°³¿ä</a></li>
      <li><a href="developer/API.html">Apache API ¼³¸í</a></li>
      <li><a href="developer/debugging.html">APRÀÇ ¸Þ¸ð¸®ÇÒ´ç µð¹ö±ë</a></li>
      <li><a href="developer/documenting.html">Apache 2.0 ¹®¼­È­</a></li>
      <li><a href="developer/hooks.html">Apache 2.0 ÈÅ(hook) ÇÔ¼ö</a></li>
      <li><a href="developer/modules.html">Apache 1.3¿¡¼­ Apache 2.0À¸·Î
      ¸ðµâÀ» ¼öÁ¤Çϱâ</a></li>
      <li><a href="developer/request.html">Apache 2.0ÀÇ ¿äûó¸®</a></li>
      <li><a href="developer/filters.html">Apache 2.0ÀÇ ÇÊÅÍ µ¿ÀÛ¹ý</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="index" id="index">¿ë¾î¿Í »öÀÎ</a></h2>
      <ul><li><a href="glossary.html">¿ë¾î</a></li>
      <li><a href="mod/">¸ðµâ ¸ñ·Ï</a></li>
      <li><a href="mod/directives.html">Áö½Ã¾î ¸ñ·Ï</a></li>
      <li><a href="mod/quickreference.html">Áö½Ã¾î ºü¸¥ÂüÁ¶</a></li>
      </ul>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/sitemap.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/sitemap.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/sitemap.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/sitemap.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sitemap.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sitemap.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sitemap.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/sitemap.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/sitemap.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������httpd-2.4.41/docs/manual/configuring.html.ja.utf8���������������������������������������������������0000644�0000000�0000050�00000041760�13412755316�020136� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>設定ファイル - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>設定ファイル</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./de/configuring.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/configuring.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/configuring.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/configuring.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/configuring.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/configuring.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
      <p>ã“ã®æ–‡æ›¸ã§ã¯ã€Apache HTTP サーãƒã‚’設定ã™ã‚‹ã®ã«ä½¿ç”¨ã™ã‚‹ãƒ•ァイルã«ã¤ã„ã¦
      記述ã—ã¦ã„ã¾ã™ã€‚</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#main">メインã®è¨­å®šãƒ•ァイル</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#syntax">è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ã®æ§‹æ–‡</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#modules">モジュール</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#scope">ディレクティブã®é©ç”¨ç¯„囲</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#htaccess">.htaccess ファイル</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="main" id="main">メインã®è¨­å®šãƒ•ァイル</a></h2>
          
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_mime.html">mod_mime</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#include">Include</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#typesconfig">TypesConfig</a></code></li></ul></td></tr></table>
      
          <p>Apache 㯠<a href="mod/directives.html">ディレクティブ</a> を設定ファイルã«å¹³æ–‡ã§æ›¸ãã“ã¨ã«ã‚ˆã‚Šè¨­å®šã—ã¾ã™ã€‚
          メインã®è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ã¯æ™®é€šã¯ <code>httpd.conf</code> ã¨ã„ã†åå‰ã§ã™ã€‚
          ã“ã®ãƒ•ァイルã®ä½ç½®ã¯ã‚³ãƒ³ãƒ‘イル時ã«è¨­å®šã•れã¾ã™ãŒã€ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã®
          <code>-f</code> フラグã«ã‚ˆã‚Šä¸Šæ›¸ãã§ãã¾ã™ã€‚
          ã¾ãŸã€ä»–ã®è¨­å®šãƒ•ァイルを <code class="directive"><a href="./mod/core.html#include">Include</a></code>
          ディレクティブã«ã‚ˆã£ã¦è¿½åŠ ã§ãã€ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã‚’使用ã—ã¦å¤šæ•°ã®
          設定ファイルを追加ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          ã©ã‚“ãªãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚‚ã€ã“れらã®è¨­å®šãƒ•ァイルã©ã‚Œã«ã§ã‚‚入れるã“ã¨ãŒã§ãã¾ã™ã€‚
          Apache ã¯èµ·å‹•時ã‹å†èµ·å‹•時ã®ã¿ãƒ¡ã‚¤ãƒ³è¨­å®šãƒ•ァイルã®å¤‰æ›´ã‚’èªè­˜ã—ã¾ã™ã€‚</p>
      
          <p>サーãƒã¯ MIME
          ドキュメントタイプをå«ã‚“ã§ã„るファイルも読ã¿è¾¼ã¿ã¾ã™ã€‚ファイルåã¯
          <code class="directive"><a href="./mod/mod_mime.html#typesconfig">TypesConfig</a></code>
          ã§è¨­å®šã•れã€ãƒ‡ãƒ•ォルトã§ã¯ <code>mime.types</code>
          ã«ãªã£ã¦ã„ã¾ã™ã€‚</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="syntax" id="syntax">è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ã®æ§‹æ–‡</a></h2>
          
      
          <p>Apache ã®è¨­å®šãƒ•ァイル㯠1 行㫠1 ã¤ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‹ã‚‰ãªã‚Šã¾ã™ã€‚
          ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ "\" ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæ¬¡ã®è¡Œã«ç¶™ç¶šã—ã¦ã„ã‚‹ã“ã¨ã‚’
          示ã™ãŸã‚ã«è¡Œã®æœ€å¾Œã®æ–‡å­—ã¨ã—ã¦ä½¿ã‚れã¦ã„ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。
          è¡Œã®æœ€å¾Œã¨ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã®é–“ã«ä»–ã®æ–‡å­—や空白ãŒã‚ã£ã¦ã¯ã„ã‘ã¾ã›ã‚“。
          </p>
      
          <p>設定ファイルã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯å¤§æ–‡å­—å°æ–‡å­—を区別ã—ã¾ã›ã‚“ãŒã€
          引数ã«ã¯ã—ã°ã—ã°åŒºåˆ¥ã™ã‚‹ã‚‚ã®ãŒã‚りã¾ã™ã€‚ãƒãƒƒã‚·ãƒ¥æ–‡å­— "#"
          ã§å§‹ã¾ã‚‹è¡Œã¯ã‚³ãƒ¡ãƒ³ãƒˆã¨è¦‹ãªã•れã¦ç„¡è¦–ã•れã¾ã™ã€‚
          設定ディレクティブã¨åŒä¸€è¡Œã®æœ«å°¾ã«ã‚³ãƒ¡ãƒ³ãƒˆãŒå«ã¾ã‚Œã¦ã„ã¦ã¯<strong>ã„ã‘ã¾ã›ã‚“</strong>。ディレクティブã®å‰ã®ç©ºè¡Œã¨ç©ºç™½ã¯ç„¡è¦–ã•れã¾ã™ã®ã§ã€
          ã‚ã‹ã‚Šã‚„ã™ãã™ã‚‹ãŸã‚ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–をインデントã—ã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。
          </p>
      
          <p>è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ã®æ§‹æ–‡ã‚¨ãƒ©ãƒ¼ã¯ã€
          <code>apachectl configtest</code>
          ã‹ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‚ªãƒ—ション
          <code>-t</code> を使ã£ã¦èª¿ã¹ã‚‰ã‚Œã¾ã™ã€‚</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="modules" id="modules">モジュール</a></h2>
          
      
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_so.html">mod_so</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code></li></ul></td></tr></table>
      
          <p>Apache ã¯ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«åŒ–ã•れãŸã‚µãƒ¼ãƒã§ã™ã€‚
          コアサーãƒã«ã¯æœ€ã‚‚åŸºæœ¬çš„ãªæ©Ÿèƒ½ã ã‘ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚拡張機能ã¯
          Apache ã«ãƒ­ãƒ¼ãƒ‰ã•れる<a href="mod/">モジュール</a>ã¨ã—ã¦åˆ©ç”¨å¯èƒ½ã§ã™ã€‚デフォルトã§ã¯ã€ã‚³ãƒ³ãƒ‘イル時ã«ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®
          <a href="mod/module-dict.html#Status">Base</a> セット (基本セット) ãŒ
          サーãƒã«å«ã¾ã‚Œã¾ã™ã€‚サーãƒãŒ<a href="dso.html">動的ロード</a>モジュールを使ã†ã‚ˆã†ã«ã‚³ãƒ³ãƒ‘イルã•れã¦ã„ã‚‹å ´åˆã¯ã€
          モジュールを別ã«ã‚³ãƒ³ãƒ‘イルã—ã¦ã€ã„ã¤ã§ã‚‚
          <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code>
          ディレクティブを使ã£ã¦è¿½åŠ ã§ãã¾ã™ã€‚
          ãã†ã§ãªã„å ´åˆã¯ã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®è¿½åŠ ã‚„å‰Šé™¤ã‚’ã™ã‚‹ãŸã‚ã«ã¯ Apache
          ã‚’å†ã‚³ãƒ³ãƒ‘イルã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚設定ディレクティブ㯠<code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>
          ブロックã«å…¥ã‚Œã‚‹ã“ã¨ã§ç‰¹å®šã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒå­˜åœ¨ã™ã‚‹ã¨ãã ã‘
          設定ファイルã«å«ã¾ã‚Œã‚‹ã‚ˆã†ã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>コマンドラインオプション <code>-l</code> を使ã£ã¦ç¾æ™‚点ã§
          ã©ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒã‚µãƒ¼ãƒã«ã‚³ãƒ³ãƒ‘イルã•れã¦ã„ã‚‹ã‹ã‚’知るã“ã¨ãŒã§ãã¾ã™ã€‚</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="scope" id="scope">ディレクティブã®é©ç”¨ç¯„囲</a></h2>
          
      
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
          <p>メイン設定ファイルã«ã‚るディレクティブã¯ã‚µãƒ¼ãƒå…¨ä½“ã«é©ç”¨ã•れã¾ã™ã€‚
          サーãƒã®ä¸€éƒ¨åˆ†ã®è¨­å®šã ã‘を変更ã—ãŸã„å ´åˆã¯ <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>, <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>, <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code>
          セクションã®ä¸­ã«ç½®ãã“ã¨ã§é©ç”¨ç¯„囲を決ã‚られã¾ã™ã€‚
          ã“れらã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã¯ãã®ä¸­ã«ã‚るディレクティブã®é©ç”¨ç¯„囲を
          特定ã®ãƒ•ァイルシステムã®ä½ç½®ã‚„ URL ã«é™å®šã—ã¾ã™ã€‚
          éžå¸¸ã«ç´°ç²’度ã®è¨­å®šã‚’å¯èƒ½ã«ã™ã‚‹ãŸã‚ã«ã€
          セクションを入れå­ã«ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚</p>
      
          <p>Apache ã¯åŒæ™‚ã«å¤šãã®é•ã†ã‚¦ã‚§ãƒ–サイトを扱ã†èƒ½åŠ›ãŒã‚りã¾ã™ã€‚
          ã“れ㯠<a href="vhosts/">ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ</a> ã¨å‘¼ã°ã‚Œã¦ã„ã¾ã™ã€‚
          特定ã®ã‚¦ã‚§ãƒ–サイトã«ã®ã¿é©ç”¨ã•れるよã†ã«ã™ã‚‹ãŸã‚ã«ã€
          ディレクティブã¯
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          セクションã®ä¸­ã«ç½®ãã“ã¨ã§ã‚‚é©ç”¨ç¯„囲を変ãˆã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>ã»ã¨ã‚“ã©ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã©ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã«ã§ã‚‚書ã‘ã¾ã™ãŒã€
          中ã«ã¯ã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆã«ã‚ˆã£ã¦ã¯æ„味をãªã•ãªã„ã‚‚ã®ã‚‚ã‚りã¾ã™ã€‚
          例ãˆã°ã€ãƒ—ロセスã®ä½œæˆã‚’制御ã—ã¦ã„るディレクティブã¯ãƒ¡ã‚¤ãƒ³ã‚µãƒ¼ãƒã®
          コンテキストã«ã®ã¿æ›¸ãã“ã¨ãŒã§ãã¾ã™ã€‚
          ã©ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ã©ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã«æ›¸ãã“ã¨ãŒã§ãã‚‹ã‹ã‚’知るãŸã‚ã«ã¯
          ディレクティブ㮠<a href="mod/directive-dict.html#Context">コンテキスト</a> を調ã¹ã¦ãã ã•ã„。詳ã—ã„æƒ…å ±ã¯ã€
          <a href="sections.html">Directory, Location, Files
          セクションã®å‹•作法</a>ã«ã‚りã¾ã™ã€‚</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="htaccess" id="htaccess">.htaccess ファイル</a></h2>
          
      
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#accessfilename">AccessFileName</a></code></li><li><code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code></li></ul></td></tr></table>
      
          <p>Apache ã§ã¯ã‚¦ã‚§ãƒ–ツリーã®ä¸­ã«ç½®ã‹ã‚ŒãŸç‰¹åˆ¥ãªãƒ•ァイルを使ã£ã¦
          éžä¸­å¤®é›†æ¨©çš„ãªè¨­å®šç®¡ç†ã‚’ã§ãã¾ã™ã€‚ãã®ç‰¹åˆ¥ãªãƒ•ã‚¡ã‚¤ãƒ«ã¯æ™®é€šã¯
          <code>.htaccess</code> ã¨ã„ã†åå‰ã§ã€
          <code class="directive"><a href="./mod/core.html#accessfilename">AccessFileName</a></code>
          ディレクティブã§ã©ã‚“ãªåå‰ã«ã§ã‚‚指定ã§ãã¾ã™ã€‚
          <code>.htaccess</code>
          ãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ã‹ã‚ŒãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãƒ•ァイルを置ã„ãŸ
          ディレクトリã¨ãã®å…¨ã¦ã®ã‚µãƒ–ディレクトリã«é©ç”¨ã•れã¾ã™ã€‚
          <code>.htaccess</code> ファイルã¯ã€ãƒ¡ã‚¤ãƒ³ã®è¨­å®šãƒ•ァイルã¨åŒã˜
          構文を使ã„ã¾ã™ã€‚
          <code>.htaccess</code>
          ファイルã¯ã™ã¹ã¦ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§èª­ã¿è¾¼ã¾ã‚Œã‚‹ãŸã‚ã€
          変更ã¯ã™ãã«å映ã•れã¾ã™ã€‚</p>
      
          <p>ã©ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㌠<code>.htaccess</code>
          ãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ã‘ã‚‹ã‹ã‚’調ã¹ã‚‹ã«ã¯ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®<a href="mod/directive-dict.html#Context">コンテキスト</a>
          を調ã¹ã¦ãã ã•ã„。サーãƒç®¡ç†è€…ã¯ã•らã«ãƒ¡ã‚¤ãƒ³è¨­å®šãƒ•ァイルã®
          <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code>
          を設定ã™ã‚‹ã“ã¨ã§ã©ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ <code>.htaccess</code>
          ãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ã‘るよã†ã«ã™ã‚‹ã‹ã‚’制御ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p><code>.htaccess</code> ファイルã«é–¢ã™ã‚‹è©³ã—ã„æƒ…å ±ã¯
          <a href="howto/htaccess.html">.htaccess ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«</a>
          ã‚’å‚ç…§ã—ã¦ãã ã•ã„。</p>
        </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./de/configuring.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/configuring.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/configuring.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/configuring.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/configuring.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/configuring.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/configuring.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������httpd-2.4.41/docs/manual/index.html.zh-cn.utf8������������������������������������������������������0000644�0000000�0000050�00000021275�13412755316�017357� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="zh-cn" xml:lang="zh-cn"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache HTTP æœåС噍 2.4 文档 - Apache HTTP æœåС噍 版本 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="index-page">
      <div id="page-header">
      <p class="menu"><a href="./mod/">模å—</a> | <a href="./mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="./glossary.html">术语</a> | <a href="./sitemap.html">网站导航</a></p>
      <p class="apache">Apache HTTP æœåŠ¡å™¨ç‰ˆæœ¬ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="http://httpd.apache.org/docs-project/"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP æœåС噍</a> &gt; <a href="http://httpd.apache.org/docs/">文档</a></div>
      <div id="page-content"><h1>Apache HTTP æœåС噍 2.4 文档</h1>
      <div class="toplang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="./da/" hreflang="da" rel="alternate" title="Dansk">&nbsp;da&nbsp;</a> |
      <a href="./de/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <form method="get" action="http://www.google.com/search"><p><input name="as_q" value="" type="text" /> <input value="Google æœç´¢" type="submit" /><input value="10" name="num" type="hidden" /><input value="zh-cn" name="hl" type="hidden" /><input value="UTF-8" name="ie" type="hidden" /><input value="Google Search" name="btnG" type="hidden" /><input name="as_epq" value="版本 2.4" type="hidden" /><input name="as_oq" value="" type="hidden" /><input name="as_eq" value="&quot;List-Post&quot;" type="hidden" /><input value="" name="lr" type="hidden" /><input value="i" name="as_ft" type="hidden" /><input value="" name="as_filetype" type="hidden" /><input value="all" name="as_qdr" type="hidden" /><input value="any" name="as_occt" type="hidden" /><input value="i" name="as_dt" type="hidden" /><input value="httpd.apache.org" name="as_sitesearch" type="hidden" /><input value="off" name="safe" type="hidden" /></p></form>
      <table id="indextable"><tr><td class="col1"><div class="category"><h2><a name="release" id="release">å‘行说明</a></h2>
      <ul><li><a href="new_features_2_4.html">Apache 2.3/2.4 的新特性</a></li>
      <li><a href="new_features_2_2.html">Apache 2.1/2.2 的新特性</a></li>
      <li><a href="new_features_2_0.html">Apache 2.0 的新特性</a></li>
      <li><a href="upgrading.html">从 2.2 å‡çº§åˆ° 2.4</a></li>
      <li><a href="license.html">Apache 许å¯è¯</a></li>
      </ul>
      </div><div class="category"><h2><a name="manual" id="manual">å‚考手册</a></h2>
      <ul><li><a href="install.html">编译与安装</a></li>
      <li><a href="invoking.html">å¯åЍ</a></li>
      <li><a href="stopping.html">åœæ­¢ä¸Žé‡å¯</a></li>
      <li><a href="mod/quickreference.html">指令快速å‚考</a></li>
      <li><a href="mod/">模å—</a></li>
      <li><a href="mpm.html">å¤šå¤„ç†æ¨¡å—(MPM)</a></li>
      <li><a href="filter.html">过滤器</a></li>
      <li><a href="handler.html">处ç†å™¨</a></li>
      <li><a href="expr.html">表达å¼è§£æžå™¨</a></li>
      <li><a href="programs/">æœåŠ¡å™¨ä¸Žæ”¯æŒç¨‹åº</a></li>
      <li><a href="glossary.html">术语</a></li>
      </ul>
      </div></td><td><div class="category"><h2><a name="usersguide" id="usersguide">用户指å—</a></h2>
      <ul><li><a href="getting-started.html">入门指å—</a></li>
      <li><a href="bind.html">绑定指定地å€ä¸Žç«¯å£</a></li>
      <li><a href="configuring.html">é…置文件</a></li>
      <li><a href="sections.html">é…置片段</a></li>
      <li><a href="caching.html">缓存指å—</a></li>
      <li><a href="content-negotiation.html">内容å商</a></li>
      <li><a href="dso.html">动æ€å…±äº«å¯¹è±¡(DSO)</a></li>
      <li><a href="env.html">环境å˜é‡</a></li>
      <li><a href="logs.html">日志文件</a></li>
      <li><a href="urlmapping.html">从 URL 映射到文件系统</a></li>
      <li><a href="misc/perf-tuning.html">性能调è°</a></li>
      <li><a href="misc/security_tips.html">安全技巧</a></li>
      <li><a href="server-wide.html">æœåС噍免局é…ç½®</a></li>
      <li><a href="ssl/">SSL/TLS 加密</a></li>
      <li><a href="suexec.html">执行 CGI å‰çš„用户切æ¢(suEXEC)</a></li>
      <li><a href="rewrite/">URL 改写与 mod_rewrite</a></li>
      <li><a href="vhosts/">虚拟主机</a></li>
      </ul>
      </div></td><td class="col3"><div class="category"><h2><a name="howto" id="howto">指引/教程</a></h2>
      <ul><li><a href="howto/auth.html">认è¯ï¼ŒæŽˆæƒä¸Žè®¿é—®æŽ§åˆ¶</a></li>
      <li><a href="howto/access.html">访问控制</a></li>
      <li><a href="howto/cgi.html">CGI 与动æ€å†…容</a></li>
      <li><a href="howto/htaccess.html">.htaccess 文件</a></li>
      <li><a href="howto/ssi.html">æœåŠ¡å™¨ç«¯æ’å…¥(SSI)</a></li>
      <li><a href="howto/public_html.html">用户ç§äººç½‘站目录(public_html)</a></li>
      <li><a href="howto/reverse_proxy.html">åå‘代ç†è®¾ç½®æŒ‡å—</a></li>
      <li><a href="howto/http2.html">HTTP/2 指å—</a></li>
      </ul>
      </div><div class="category"><h2><a name="platform" id="platform">å¹³å°ç›¸å…³è¯´æ˜Ž</a></h2>
      <ul><li><a href="platform/windows.html">Microsoft Windows</a></li>
      <li><a href="platform/rpm.html">基于RPM安装包的系统 (Redhat / CentOS / Fedora)</a></li>
      <li><a href="platform/netware.html">Novell NetWare</a></li>
      <li><a href="platform/ebcdic.html">EBCDIC 系统</a></li>
      </ul>
      </div><div class="category"><h2><a name="other" id="other">其它主题</a></h2>
      <ul><li><a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a></li>
      <li><a href="sitemap.html">网站导航</a></li>
      <li><a href="developer/">开呿–‡æ¡£</a></li>
      <li><a href="http://httpd.apache.org/docs-project/">帮助改进文档</a></li>
      <li><a href="misc/">其它说明</a></li>
      <li><a href="http://wiki.apache.org/httpd/">维基</a></li>
      </ul>
      </div></td></tr></table></div>
      <div class="bottomlang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="./da/" hreflang="da" rel="alternate" title="Dansk">&nbsp;da&nbsp;</a> |
      <a href="./de/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />基于 <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> 许å¯è¯.</p>
      <p class="menu"><a href="./mod/">模å—</a> | <a href="./mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="./glossary.html">术语</a> | <a href="./sitemap.html">网站导航</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/glossary.html.de�����������������������������������������������������������0000644�0000000�0000050�00000103464�13412755316�016600� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="de" xml:lang="de"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Glossar - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP-Server</a> &gt; <a href="http://httpd.apache.org/docs/">Dokumentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Glossar</h1>
      <div class="toplang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/glossary.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/glossary.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/glossary.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/glossary.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/glossary.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/glossary.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/glossary.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">Diese Übersetzung ist möglicherweise
                  nicht mehr aktuell. Bitte prüfen Sie die englische Version auf
                  die neuesten Änderungen.</div>
      
          <p>Dieses Glossar erläutert einige gebräuchliche Fachbegriffe im
            Zusammenhang mit dem Apache im Speziellen und Web-Diensten im
            Allgemeinen. Weitere Informationen zum jeweiligen Begriff erreichen Sie
            über die Links.</p>
        </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="definitions" id="definitions">Definitionen</a></h2>
          
        <dl>
          <dt><a name="algorithm" id="algorithm">Algorithmus</a></dt>
          <dd>Eine eindeutige Formel oder ein Satz von Regeln zur Lösung eines
            Problems in einer endlichen Anzahl von Schritten. Algorithmen zur
            Verschlüsselung werden üblicherweise <a class="glossarylink" href="./glossary.html#cipher" title="siehe Glossar"><dfn>Chiffre</dfn></a> genannt.
          </dd>
      
          <dt><a name="apacheextensiontool" id="apacheextensiontool">APache
            eXtension Tool</a> <a name="apxs" id="apxs">(apxs)</a></dt>
          <dd>Ein Perl-Skript zur Kompilierung von <a href="#module">Modul</a>-Quelltexten zu Dynamic-Shared-Objects
            (<a class="glossarylink" href="./glossary.html#dso" title="siehe Glossar">DSOs</a>)  und zur Installation dieser zum
            Apache-Webserver.<br />
            Siehe: <code class="program"><a href="./programs/apxs.html">apxs</a></code>-Dokumentation
          </dd>
      
          <dt><a name="apacheportableruntime" id="apacheportableruntime">Apache Portable Runtime</a> <a name="apr" id="apr">(APR)</a></dt>
          <dd>Eine Menge von Bibliotheken, die viele grundlegende Schnittstellen
            zwischen dem Server und dem Betriebssystem anbietet. Die APR
            wird parallel zum Apache HTTP Server in einem eigenständigen Projekt
            entwickelt.<br />
            Siehe auch: <a href="http://apr.apache.org/">Apache Portable Runtime
            Project</a>
          </dd>
      
          <dt><a name="authentication" id="authentication">Authentifizierung</a></dt> 
          <dd>Die positive Identifizierung einer Netzwerkeinheit, wie z.B.
            eines Servers, eines Clients oder eines Benutzers.<br />
            Siehe: <a href="howto/auth.html">Authentisierung, Autorisierung und
            Zugriffskontrolle</a>
          </dd>
      
          <dt><a name="certificationauthority" id="certificationauthority">Certification Authority</a>
            <span class="phonetic">[s&#601;&#712;tifi&#712;kei&#643;&#601;n
            &#596;&#720;&#952;&#596;riti]</span>
            <a name="ca" id="ca">(CA)</a></dt>
          <dd><span class="transnote">(<em>Anm.d.Ü.:</em> die Zertifizierungsstelle)</span> Eine
            vertrauenswürdige dritte Partei, deren Zweck es ist,
            Zertifikate für Netzwerkeinheiten zu signieren. Andere
            Netzwerkeinheiten können die Signatur prüfen, um
            sicherzustellen, dass eine CA den Inhaber eines Zertifikats
            authentifiziert hat.<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
      
          <dt><a name="certificatsigningrequest" id="certificatsigningrequest">Certificate Signing Request</a>
            <span class="phonetic">[s&#601;&#712;tifikit saini&#331;
            ri&#712;kwest]</span>  <a name="csr" id="csr">(CSR)</a></dt> 
          <dd><span class="transnote">(<em>Anm.d.Ü.:</em> Zertifikats-Signierungsanfrage)</span> Ein unsigniertes
            <a class="glossarylink" href="./glossary.html#certificate" title="siehe Glossar">Zertifikat</a> zur Einreichung bei
            einer <a class="glossarylink" href="./glossary.html#certificationauthority" title="siehe Glossar">Zertifizierungsstelle</a>, welche
            es mit dem <a class="glossarylink" href="./glossary.html#privatekey" title="siehe Glossar">privaten Schlüssel</a>
            ihres CA-<em>Zertifikats</em> signiert. Durch die Signatur wird ein CSR
            zum echten Zertifikat.<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
      
          <dt><a name="cipher" id="cipher">Chiffre</a></dt> 
          <dd>Die <dfn>Chiffre</dfn> ist ein Algorithmus oder System zur
            Datenverschlüsselung. Beispiele sind DES, IDEA, RC4 usw. Im
            Englischen spricht man von
            <dfn>Cipher</dfn>&nbsp;<span class="phonetic">[&#712;saif&#601;]</span><br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
      
          <dt><a name="ciphertext" id="ciphertext">Chiffretext</a></dt>
          <dd>Das Ergebnis, nachdem ein <a class="glossarylink" href="./glossary.html#plaintext" title="siehe Glossar">Klartext</a>
            eine <a class="glossarylink" href="./glossary.html#cipher" title="siehe Glossar">Chiffre</a> durchlaufen hat.<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
          
          <dt><a name="commongatewayinterface" id="commongatewayinterface">Common
            Gateway Interface</a> <span class="phonetic">[&#712;k&#596;m&#601;n geitwei
            &#712;int&#601;&#720;feis]</span>
            <a name="cgi" id="cgi">(CGI)</a></dt>
          <dd>Eine einheitliche Definition einer Schnittstelle zwischen einem
            Webserver und einem externen Programm, welcher dem externen Programm die
            Behandlung von Anfragen ermöglicht. Die Schnittstelle ist
            ursprünglich von der <a href="http://hoohoo.ncsa.uiuc.edu/cgi/overview.html">NCSA</a>
            definiert worden. Es exisitert jedoch auch ein <a href="http://cgi-spec.golux.com/">RFC-Projekt</a>.<br />
            Siehe: <a href="howto/cgi.html">Dynamische Inhalte mit CGI</a>
          </dd>
      
          <dt><a name="connect" id="connect">CONNECT</a>
            <span class="phonetic">[k&#601;nekt]</span></dt> 
          <dd>Eine <a class="glossarylink" href="./glossary.html#method" title="siehe Glossar">HTTP-Methode</a> zur Weiterleitung
            von Rohdaten über HTTP. Sie kann dazu verwendet werden, andere
            Protokolle wie zum Beispiel das SSL-Protokoll zu kapseln.
          </dd>
      
          <dt><a name="digitalsignature" id="digitalsignature">Digitale
            Signatur</a></dt>
          <dd>Ein chiffrierter Textblock, der die Gültigkeit eines Zertifikats
            oder einer anderen Datei bestätigt. Eine <a class="glossarylink" href="./glossary.html#certificationauthority" title="siehe Glossar">Zertifizierungsstelle</a> erstellt 
            eine digitale Signatur durch Generierung eines <a class="glossarylink" href="./glossary.html#hash" title="siehe Glossar">Hashs</a> aus dem in einem <em>Zertifikat</em>
            enthaltenen <em>öffentlichen Schlüssel</em> und
            anschließender Codierung des Hashs mit dem <em>privaten
            Schlüssel</em> des Zertifikats. Nur der öffentliche
            Schlüssel der CA kann die Signatur decodieren. So wird
            sichergestellt, dass die CA die Netwerkeinheit, welche das
            <em>Zertifikat</em> besitzt, authentifiziert hat.<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
      
          <dt><a name="directive" id="directive">Direktive</a></dt> 
          <dd>Eine Konfigurationsanweisung, die das Verhalten des Apache in einem
            oder mehreren Punkten steuert. Direktiven werden in den <a class="glossarylink" href="./glossary.html#configurationfile" title="siehe Glossar">Konfigurationsdateien</a> gesetzt.<br />
            Siehe: <a href="mod/directives.html">Verzeichnis der Direktiven</a>
          </dd>
      
          <dt><a name="dynamicsharedobject" id="dynamicsharedobject">Dynamic
            Shared Object</a> 
            <span class="phonetic">[dai&#712;næmik &#643;&#603;&#601;d
            &#712;&#596;bd&#658;ikt]</span> <a name="dso" id="dso">(DSO)</a></dt>
          <dd>Separat von der Apache-Binärdatei <code class="program"><a href="./programs/httpd.html">httpd</a></code>
            kompilierte <a class="glossarylink" href="./glossary.html#module" title="siehe Glossar">Module</a>, die bei Bedarf
            geladen werden können.<br />
            Siehe: <a href="dso.html">Unterstützung für
            Dynamic-Shared-Objects</a>
          </dd>
      
          <dt><a name="export-crippled" id="export-crippled">exportbeschränkt</a></dt>
          <dd>Verminderte kryptografische Stärke (und Sicherheit), um den
            Exportbesimmungen der Vereinigten Staaten <span class="transnote">(<em>Anm.d.Ü.:</em> konkret: United
            States' Export Administration Regulations (EAR))</span> zu
            entsprechen. Exportbeschränkte Verschlüsselungssoftware ist
            auf eine kurze Schlüssellänge begrenzt, was zu
            <em>Chiffretexten</em> führt, die gewöhnlich mittels
            Brute-Force dekodiert werden können.<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
      
          <dt><a name="filter" id="filter">Filter</a></dt>
          <dd>Ein Verfahren, dass auf vom Server empfangene oder zu sendende Daten
            angewendet wird. Eingabefilter verarbeiten vom Client an den Server
            gesendetet Daten, während Ausgabefilter vom Server an den Client zu
            sendende Daten verarbeiten. Der Ausgabefilter <code>INCLUDES</code>
            beispielsweise untersucht Dokumente nach <a class="glossarylink" href="./glossary.html#ssi" title="siehe Glossar">Server-Side-Includes</a> und führt sie aus.<br />
            Siehe: <a href="filter.html">Filter</a>
          </dd>
      
          <dt><a name="handler" id="handler">Handler</a>
            <span class="phonetic">[&#712;hændl&#601;]</span></dt>
          <dd>Eine Apache-interne Darstellung der Aktion, die beim Aufruf einer
            Datei auszuführen ist. Im Allgemeinen besitzen Dateien implizite,
            auf dem Dateityp basierende Handler. Gewöhnlich werden alle Dateien
            vom Server bedient, einige Dateitypen werden jedoch separat "behandelt"
            <span class="transnote">(<em>Anm.d.Ü.:</em> besitzen einen separaten Handler)</span>. Der
            <code>cgi-script</code>-Handler beispielsweise kennzeichnet Dateien, die
            als <a class="glossarylink" href="./glossary.html#cgi" title="siehe Glossar">CGI-Programme</a> ausgeführt werden
            sollen.<br />
            Siehe: <a href="handler.html">Verwendung von Apache-Handlern</a>
          </dd>
      
          <dt><a name="hash" id="hash">Hash</a>
            <span class="phonetic">[hæ&#643;]</span></dt>
          <dd>Ein mathematischer, unumkehrbarer Einweg-Algorithmus zur Generierung
            einer Zeichenfolge fester Länge aus einer anderen Zeichenfolge
            beliebiger Länge. Unterschiedliche Zeichenfolgen bei der Eingabe
            ergeben üblischerweise unterschiedliche Hashes (abhängig von
            der Hash-Funktion).
          </dd>
      
          <dt><a name="header" id="header">Header</a>
            <span class="phonetic">[hed&#601;]</span></dt>
          <dd>Der Teil der <a class="glossarylink" href="./glossary.html#http" title="siehe Glossar">HTTP</a>-Anfrage und -Antwort,
            der vor den eigentlichen Daten übermittelt wird und den Inhalt
            beschreibende Meta-Informationen enthält.
          </dd>
      
          <dt><a name="htaccess" id="htaccess">.htaccess</a></dt>
          <dd>Eine <a class="glossarylink" href="./glossary.html#configurationfile" title="siehe Glossar">Konfigurationsdatei</a>,
            die innerhalb des Web-Verzeichnisbaums abgelegt wird und zu dem
            Verzeichnis, in dem sie abgelegt ist, sowie allen Unterverzeichnissen
            <a class="glossarylink" href="./glossary.html#directive" title="siehe Glossar">Konfigurationsdirektiven</a>
            enthält. Trotz ihres Namens kann diese Datei nahezu alle Arten von
            Direktiven enthalten, nicht nur Direktiven zur Zugriffskontrolle.<br />
            Siehe: <a href="configuring.html">Konfigurationsdateien</a>
          </dd>
      
          <dt><a name="httpd.conf" id="httpd.conf">httpd.conf</a></dt>
          <dd>Die <a class="glossarylink" href="./glossary.html#configurationfile" title="siehe Glossar">Haupt-Konfigurationsdatei</a> ist
            <code>/usr/local/apache2/conf/httpd.conf</code>. Dies kann aber zur
            Laufzeit oder zur Kompilierungszeit anders konfiguriert werden.<br />
            Siehe: <a href="configuring.html">Konfigurationsdateien</a>
          </dd>
      
          <dt><a name="https" id="https">HTTPS</a></dt>
          <dd>Das HyperText-Transfer-Protokoll (Secure), der
            Standard-Verschlüsselungsmechanismus im World Wide Web.
            Tatsächlich handelt es sich hierbei um HTTP über <a class="glossarylink" href="./glossary.html#ssl" title="siehe Glossar">SSL</a>.<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
          
          <dt><a name="hypertexttransferprotocol" id="hypertexttransferprotocol">HyperText-Transfer-Protokoll</a>
            <a name="http" id="http">(HTTP)</a></dt>
          <dd>Das Standard-Übertragungsprotokoll im World Wide Web. Der Apache
            implementiert die Protokollversion 1.1, bezeichnet als HTTP/1.1 und
            definiert in <a href="http://ietf.org/rfc/rfc2616.txt">RFC 2616</a>.
          </dd>
      
          <dt><a name="plaintext" id="plaintext">Klartext</a></dt>
          <dd>Der unverschlüsselte Text.</dd>
      
          <dt><a name="configurationdirective" id="configurationdirective">Konfigurationsanweisung</a></dt>
          <dd>Siehe: <a class="glossarylink" href="./glossary.html#directive" title="siehe Glossar">Direktive</a></dd>
      
          <dt><a name="configurationfile" id="configurationfile">Konfigurationsdatei</a></dt>
          <dd>Eine Textdatei mit <a class="glossarylink" href="./glossary.html#directive" title="siehe Glossar">Direktiven</a>,
            welche die Konfiguration des Apache steuern.<br />
            Siehe: <a href="configuring.html">Konfigurationsdateien</a>
          </dd>
      
          <dt><a name="context" id="context">Kontext</a></dt>
          <dd>Ein Bereich in den <a class="glossarylink" href="./glossary.html#configurationfile" title="siehe Glossar">Konfigurationsdateien</a>, in dem
            verschiedene Typen von <a class="glossarylink" href="./glossary.html#directive" title="siehe Glossar">Direktiven</a>
            erlaubt sind.<br />
            Siehe: <a href="mod/directive-dict.html#Context">Erklärung der
            Fachbegriffe zu Apache-Direktiven</a>
          </dd>
      
          <dt><a name="messagedigest" id="messagedigest">Message-Digest</a>
            <span class="phonetic">[&#712;mesid&#658;]</span></dt>
          <dd>Ein Hash einer Nachricht, mit dem sich sicherstellen läßt,
            dass der Inhalt der Nachricht während der Übertragung nicht
            verändert wurde. <span class="transnote">(<em>Anm.d.Ü.:</em> ein so genannter Extrakt der
            Nachricht)</span><br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
      
          <dt><a name="method" id="method">Methode</a></dt>
          <dd>Im <a class="glossarylink" href="./glossary.html#http" title="siehe Glossar">HTTP</a>-Kontext eine in der
            Anfrage(zeile) des Clients angegeben Aktion, die auf eine Ressource
            angewendet wird. <code>GET</code>, <code>POST</code> und <code>PUT</code>
            sind einige der verfügbaren HTTP-Methoden.
          </dd>
      
          <dt><a name="mime-type" id="mime-type">MIME-Typ</a>
            <span class="phonetic">[maim ty&#720;p]</span></dt>
          <dd>Eine Art und Weise, den Typ des übermittelten Dokuments zu
            beschreiben. Sein Name leitet sich davon ab, dass sein Format den
            Multipurpose Internet Mail Extensions entlehnt wurde. Er besteht aus
            einem Haupttyp und einem Untertyp, getrennt durch einen 
            Schrägstrich. Einige Beispiele sind <code>text/html</code>,
            <code>image/gif</code> und <code>application/octet-stream</code>.
            Bei HTTP wird der MIME-Typ mit dem <a class="glossarylink" href="./glossary.html#header" title="siehe Glossar">Header</a> <code>Content-Type</code>
            übermittelt.<br />
            Siehe: <a href="mod/mod_mime.html">mod_mime</a>
          </dd>
      
          <dt><a name="module" id="module">Modul</a></dt>
          <dd>Ein selbstständiger Teil eines Programms. Ein Großteil der
            Funktionalität des Apache ist in Modulen enthalten, die Sie einbinden
            oder entfernen können. In die Apache-Binärdatei <code class="program"><a href="./programs/httpd.html">httpd</a></code> einkompilierte Module werden <em>statische Module</em>
            genannt, während Module, die separat gespeichert sind und optional
            zur Laufzeit geladen werden können, <em>dynamische Module</em> oder
            <a class="glossarylink" href="./glossary.html#dso" title="siehe Glossar">DSOs</a> genannt werden.
            Standardmäßig eingebundene Module werden <em>Basismodule</em>
            genannt. Für den Apache sind viele Module verfügbar, die nicht
            als Bestandteil des <a class="glossarylink" href="./glossary.html#tarball" title="siehe Glossar">Apache-HTTP-Server-Tarballs</a> ausgeliefert
            werden. Diese werden als <em>Drittmodule</em> bezeichnet.<br />
            Siehe: <a href="mod/">Modulverzeichnis</a>
          </dd>
      
          <dt><a name="modulemagicnumber" id="modulemagicnumber">Module-Magic-Number</a>
            <span class="phonetic">[&#712;m&#596;ju&#720;l mæd&#658;ik
            &#712;n&#652;mb&#601;]</span>
            (<a name="mmn" id="mmn">MMN</a>)</dt>
          <dd>Die Module-Magic-Number ist eine Konstante, die im Apache-Quelltext
            definiert ist und im Zusammenhang mit der Binärkompatibilität
            von Modulen steht. Sie wird geändert, wenn sich interne
            Apache-Strukturen, -Funktionen oder andere signifikante Teile der API
            derart ändern, dass eine Binärkompatibilität nicht mehr
            gewährleistet werden kann. Bei einer MMN-Änderung müssen
            alle Module von Drittanbietern zumindest neu kompiliert und zuweilen auch
            geringfügig angepaßt werden, um mit der neuen Apache-Version zu
            funktionieren.
          </dd>
      
          <dt><a name="publickey" id="publickey">Öffentlicher
            Schlüssel</a></dt>
          <dd>Der öffentlich verfügbare Schlüssel in einem <a class="glossarylink" href="./glossary.html#publickeycryptography" title="siehe Glossar">Public-Key-Kryptographie</a>-System,
            mit dem für seinen Eigentümer bestimmte Nachrichten
            verschlüsselt und Signaturen von seinem Eigentümer
            entschlüsselt werden.<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
          
          <dt><a name="openssl" id="openssl">OpenSSL</a>
            <span class="phonetic">[&#712;&#601;up&#601;n&#603;s&#603;s&#712;&#603;l]</span>
          </dt>
          <dd>Das Open-Source-Toolkit für SSL/TLS<br />
            Siehe: <a href="http://www.openssl.org/">http://www.openssl.org/</a>
          </dd>
      
          <dt><a name="passphrase" id="passphrase">Passphrase</a>
            <span class="phonetic">[pa&#720;freiz]</span></dt>
          <dd>Das Wort oder die Phrase, welches private Schlüssel-Dateien
            schützt. Sie verhindert die Entschlüsselung durch nicht
            authorisierte Benutzer. Normalerweise ist dies einfach der geheimen
            (De-)Codierungsschlüssel, der für <a class="glossarylink" href="./glossary.html#cipher" title="siehe Glossar">Chiffren</a> verwendet wird.<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
      
          <dt><a name="privatekey" id="privatekey">Privater Schlüssel</a></dt>
          <dd>Der geheime Schlüssel in einem <a class="glossarylink" href="./glossary.html#publickeycryptography" title="siehe Glossar">Public-Key-Kryptographie</a>-System,
            mit dem hereinkommende Nachrichten decodiert und ausgehende signiert
            werden.<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
      
          <dt><a name="proxy" id="proxy">Proxy</a></dt>
          <dd>Ein zwischen dem Client und dem <em>ursprünglichen Server</em>
            <span class="transnote">(<em>Anm.d.Ü.:</em> der Server, den der Client tatsächlich erreichen
            möchte)</span> liegender Server. Er nimmt Anfragen von
            Clients entgegen, übermittelt diese Anfragen dem
            ursprünglichen Server und liefert die Antwort des
            ursprünglichen Servers an den Client zurück. Wenn mehrere
            Clients den gleichen Inhalt abfragen, dann kann der Proxy diesen Inhalt
            aus seinem Zwischenspeicher ausliefern, anstatt ihn jedesmal vom
            ursprünglichen Server anzufordern, und dadurch die Antwortzeit
            verringern.<br />
            Siehe: <a href="mod/mod_proxy.html">mod_proxy</a>
          </dd>
      
          <dt><a name="publickeycryptography" id="publickeycryptography">Public-Key-Kryptographie</a>
            <span class="phonetic">[&#712;p&#652;blik ki&#720;
            &#712;kyptogra&#712;fi&#720;]</span></dt>
          <dd>Theorie und Anwendung asymmetrischer Verschlüsselungssysteme,
            die einen Schlüssel zur Verschlüsselung und einen anderen zur
            Entschlüsselung verwenden. Zwei derart zusammengehörende
            Schlüssel bilden Schüsselpaar. Man spricht auch von
            "Asymetrischer Kryptographie".<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
          
          <dt><a name="regularexpresion" id="regularexpresion">Regulärer
            Ausdruck</a> <a name="regex" id="regex">(Regex)</a></dt>
          <dd>Eine Form, ein Muster im Text zu beschreiben - zum Beispiel: "alle
            Wörter, die mit dem Buchstaben A beginnen" oder "Jeder Satz mit
            zwei Kommata und ohne großes Q". Beim Apache sind reguläre
            Ausdrücke hilfreich, da sie auf sehr flexible Art und Weise die
            Anwendung bestimmter Eigenschaften auf eine Auswahl von Dateien oder
            Ressourcen ermöglichen. - Zum Beispiel können alle .gif- und
            .jpg-Dateien eines Verzeichnis "images" mit
            "<code>/images/.*(jpg|gif)$</code>" beschrieben werden. Der Apache
            verwendet Perl-kompatible reguläre Ausdrücke, wie sie die
            <a href="http://www.pcre.org/">PCRE</a>-Bibliothek bereitstellt.
          </dd>
      
          <dt><a name="reverseproxy" id="reverseproxy">Reverse Proxy</a>
            <span class="phonetic">[ri&#720;v&#601;&#720;s
            &#712;pr&#596;ksi]</span></dt>
          <dd>Ein <a class="glossarylink" href="./glossary.html#proxy" title="siehe Glossar">Proxy</a>-Server, der dem Client
            gegenüber als <em>ursprünglicher Server</em> erscheint. Dies
            ist nützlich, um den tatsächlichen Server aus
            Sicherheitsgründen oder zur Lastverteilung vor dem Client zu
            verstecken.
          </dd>
      
          <dt><a name="securesocketslayer" id="securesocketslayer">Secure Sockets
            Layer</a> <span class="phonetic">[si&#712;kju&#601; &#712;s&#596;kits
            &#712;lei&#601;]</span> <a name="ssl" id="ssl">(SSL)</a></dt>
          <dd>Ein von der Firma Netscape Communications Corporation entwickeltes
            Protokoll zur allgemeinen Authentisierung und Verschlüsselung der
            Kommunikation über TCP/IP-Netzwerke. Die meistverbreitete Nutzung
            ist <em>HTTPS</em>, d.h. HyperText Transfer Protocol (HTTP) über
            SSL.<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
      
          <dt><a name="serversideincludes" id="serversideincludes">Server Side
            Includes</a> <span class="phonetic">[s&#601;&#720;&#601; said
            in&#712;klu&#720;ds]</span> <a name="ssi" id="ssi">(SSI)</a></dt>
          <dd>Eine Technik zum Einbetten von weiterverarbeitenden Anweisungen in
            HMTL-Dateien.<br />
            Siehe: <a href="howto/ssi.html">Einführung in Server Side
            Includes</a>
          </dd>
      
          <dt><a name="session" id="session">Session</a>
            <span class="phonetic">[&#712;se&#643;&#601;n]</span></dt>
          <dd>Allgemein der Kontext einer Kommunikation.</dd>
      
          <dt><a name="ssleay" id="ssleay">SSLeay</a></dt>
          <dd>Die Bibliothek der Original-SSL/TLS-Implementation von Eric A.
            Young</dd>
      
          <dt><a name="symmetriccryptophraphy" id="symmetriccryptophraphy">Symmetrische Kryptographie</a></dt>
          <dd>Die Theorie und Anwendung von <em>Chiffren</em>, die einen einzigen
            geheimen Schlüssel sowohl zur Verschlüsswelung als auch zur
            Entschlüsselung benutzen.<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
      
          <dt><a name="tarball" id="tarball">Tarball</a>
            <span class="phonetic">[ta&#720;b&#596;&#720;l]</span></dt>
          <dd>Ein Paket von Dateien, die mit dem Hilfsprogramm <code>tar</code>
            zusammengefasst wurden. Apache-Distributionen werden in komprimierten
            tar-Archiven oder unter Verwendung von pkzip gespeichert.
          </dd>
      
          <dt><a name="transportlayersecurity" id="transportlayersecurity">Transport
            Layer Security</a> <span class="phonetic">[træns&#712;p&#596;&#720;t
            &#712;ei&#601; si&#712;kju&#601;riti]</span>
            <a name="tls" id="tls">(TLS)</a></dt>
          <dd>Das SSL-Nachfolgeprotokoll, das von der Internet Engineering Task
            Force (IETF) zur allgemeinen Authentisierung und Verschlüsselung
            einer Kommunikation über TCP/IP-Netzwerke entwickelt worden ist.
            TLS Version 1 ist nahezu identisch mit SSL Version 3.<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsseliung</a>
          </dd>
      
          <dt><a name="environmentvariable" id="environmentvariable">Umgebungsvariable</a> <a name="env-variable" id="env-variable">(env-Variable)</a></dt>
          <dd>Benannte, von der Betriebssystem-Shell verwaltete Variablen zur
            Speicherung von Informationen und zur Kommunikation zwischen Programmen.
            Der Apache beinhaltet auch interne Variablen, die ebenfalls
            Umgebungsvariablen genannt werden, die aber statt in der
            Shell-Umgebung in internen Apache-Strukturen gespeichert sind.<br />
            Siehe: <a href="env.html">Umgebungsvariablen im Apache</a>
          </dd>
      
          <dt><a name="uniformresourcelocator" id="uniformresourcelocator">Uniform
            Resource Locator</a> <span class="phonetic">[&#712;ju&#720;nif&#596;&#720;m
            ri&#712;s&#596;&#720;s l&#601;u&#712;keit&#601;]</span>
            <a name="url" id="url">(URL)</a></dt>
          <dd>Der Name bzw. die Adresse einer Ressource im Internet. Dies ist der
            allgemein gebräuchliche Audruck für die formale Bezeichnung
            <a class="glossarylink" href="./glossary.html#uniformresourceidentifier" title="siehe Glossar">Uniform Resource
            Identifier</a>. URLs bestehen üblicherweise aus einem
            Schema wie <code>http</code> oder <code>https</code>, einem Hostnamen
            und einem Pfad. Die URL für diese Seite ist
            <code>http://httpd.apache.org/docs/2.4/glossary.html</code>.
          </dd>
      
          <dt><a name="uniformresourceidentifier" id="uniformresourceidentifier">Uniform Resource Identifier</a>
            <span class="phonetic">[&#712;ju&#720;nif&#596;&#720;m
            ri&#712;s&#596;&#720;s ai&#712;dentifai&#601;]</span> 
            <a name="URI" id="URI">(URI)</a></dt>
          <dd>Eine kompakte Zeichenfolge zur Identifizierung einer abstrakten oder
            physischen Ressource. Er wird in dem <a href="http://www.ietf.org/rfc/rfc2396.txt">RFC 2396</a> formell
            definiert. Im World Wide Web verwendete URIs werden üblicherweise
            als <a class="glossarylink" href="./glossary.html#url" title="siehe Glossar">URLs</a> bezeichnet.
          </dd>
      
          <dt><a name="virtualhosting" id="virtualhosting">Virtual-Hosting</a>
            <span class="phonetic">[v&#601;&#712;tju&#601;l
            h&#601;usti&#331;]</span></dt>
          <dd>Die Bedienung mehrere Websites mit einer einzigen Apache-Instanz.
            <em>IP-basierte virtuelle Hosts</em> unterscheiden zwischen
            verschiedenen Websites aufgrund ihrer IP-Adressen, während
            <em>namensbasierte virtuelle Hosts</em> nur den Namen des Hosts
            verwenden und daher mehrere Angebote unter der gleichen IP-Adresse
            hosten können.<br />
            Siehe: <a href="vhosts/">Apache-Dokumentation zu virtuellen
            Hosts</a>
          </dd>
      
          <dt><a name="fully-qualifieddomain-name" id="fully-qualifieddomain-name">Voll-qualifizierter Domainname</a>
            <a name="fqdn" id="fqdn">(FQDN)</a></dt>
          <dd>Der eindeutige Name einer Netzwerkeinheit, bestehend aus einem
            Hostnamen und dem Domainnamen, welcher zu einer IP-Adresse
            aufgelöst werden kann. Zum Beispiel ist <code>www</code> ein
            Hostname, <code>example.com</code> ein Domainname und
            <code>www.example.com</code> ein voll-qualifizierter Domainname.
          </dd>
      
          
          <dt><a name="website" id="website">Website</a>
            <span class="phonetic">[websait]</span></dt>
          <dd>Im Gegensatz zur Webseite, die einer konkreten URL entspricht, ist mit
            Website ein komplettes Angebot unter einem bestimmten Hostnamen (und Port)
            gemeint. Dieses kann aus vielen verschiedenen Webseiten bestehen.
          </dd>
      
          <dt><a name="x.509" id="x.509">X.509</a></dt>
          <dd>Ein von der International Telecommunication Union (ITU-T) empfohlenes
            Schema für Authentifizierungszertifikate. Es wird für
            SSL/TLS-Authentifizierungen verwendet.<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
      
          <dt><a name="certificate" id="certificate">Zertifikat</a></dt>
          <dd>Ein Datensatz zur <a class="glossarylink" href="./glossary.html#authentication" title="siehe Glossar">Authentisierung</a> einer 
            Nertzwerkeinheit wie Server oder Client. Ein Zertifikat
            enthält <a class="glossarylink" href="./glossary.html#x.509" title="siehe Glossar">X.509</a>-Informationen
            über seinen Eigentümer (das sogenannte Betreff
            <span class="transnote">(<em>Anm.d.Ü.:</em> engl.: subject)</span>) und die
            signierende <a class="glossarylink" href="./glossary.html#certificationauthority" title="siehe Glossar">Certification
            Authority</a> (der sogenannte Aussteller <span class="transnote">(<em>Anm.d.Ü.:</em> engl.:
            issuer)</span>) sowie den <a class="glossarylink" href="./glossary.html#publickey" title="siehe Glossar">öffentlichen Schlüssel</a> des
            Eigentümers und die Signatur der CA. Netzwerkeinheiten
            überprüfen diese Signatur mit Hilfe von CA-Zertifikaten.<br />
            Siehe: <a href="ssl/">SSL/TLS-Verschlüsselung</a>
          </dd>
      
          <dt><a name="accesscontrol" id="accesscontrol">Zugriffskontrolle</a></dt>
          <dd>Die Beschränkung des Zugriffs auf Netzwerkbereiche. Im
            Apache-Kontext in der Regel die Zugriffsbeschränkung auf bestimmte
            <em>URLs</em>.<br />
            Siehe: <a href="howto/auth.html">Authentisierung, Autorisierung und
            Zugriffskontrolle</a>
          </dd>
        </dl>    
      </div></div>
      <div class="bottomlang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/glossary.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/glossary.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/glossary.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/glossary.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/glossary.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/glossary.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/glossary.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Kommentare</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/glossary.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Lizenziert unter der <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_2.html.fr.utf8����������������������������������������������0000644�0000000�0000050�00000051362�13412755316�020771� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Aperçu des nouvelles fonctionnalités de la version
      2.2 du serveur HTTP Apache - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Aperçu des nouvelles fonctionnalités de la version
      2.2 du serveur HTTP Apache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/new_features_2_2.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_2.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ko/new_features_2_2.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_2.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/new_features_2_2.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
        <p>Ce document décrit quelques uns des changements principaux entre
           les versions 2.0 et 2.2 du serveur HTTP Apache. Pour les
           nouvelles fonctionnalités ajoutées depuis la version 1.3, se
           référer au document
           <a href="new_features_2_0.html">2.0 new features</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#core">Améliorations du système de base</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#module">Améliorations des modules</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programs">Améliorations des programmes</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#developer">Changements pour le développeur de module</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="core" id="core">Améliorations du système de base</a></h2>
          
          <dl>
      
            <dt>Authn/Authz</dt>
            <dd>Les modules d'authentification et d'autorisation intégrés
      	ont été refondus. Le nouveau module
      	mod_authn_alias (supprimé dans la version 2.3/2.4) permet de
      	simplifier considérablement certaines configurations d'authentification.
                Voir <a href="#module">modification des noms de modules</a>,
      	  et
      	  <a href="#developer">les changements pour le développeur</a>
      	  pour plus d'informations sur les conséquences de ces
      	  changements pour les utilisateurs et les développeurs de
      	  modules.</dd>
      
            <dt>Mise en cache</dt>
            <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>, <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code>, et
                mod_mem_cache (supprimés dans la version 2.3/2.4) ont subi de nombreuses
      	  modifications, et l'on considère qu'ils ont maintenant atteint
      	  un degré de qualité suffisant pour leur mise en production. Le programme
      	  <code class="program"><a href="./programs/htcacheclean.html">htcacheclean</a></code> a été ajouté afin de rendre
      	  plus propre la configuration du module
      	  <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code>.</dd>
      
            <dt>Configuration</dt>
            <dd>L'agencement de la configuration par défaut a été simplifié
            	et modularisé. Les portions de configuration qui peuvent être
      	utilisées pour activer des fonctionnalités courantes sont
      	maintenant intégrées à Apache, et peuvent être facilement
      	ajoutées à la configuration principale du serveur.</dd>
      
            <dt>Arrêt en douceur</dt>
            <dd>Les modules MPM <code class="module"><a href="./mod/prefork.html">prefork</a></code>,
              <code class="module"><a href="./mod/worker.html">worker</a></code> et <code class="module"><a href="./mod/event.html">event</a></code> permettent
      	maintenant l'arrêt en douceur de <code class="program"><a href="./programs/httpd.html">httpd</a></code>
                au moyen du signal
                <a href="stopping.html#gracefulstop"><code>graceful-stop</code></a>.
      	  La directive <code class="directive"><a href="./mod/mpm_common.html#gracefulshutdowntimeout">GracefulShutdownTimeout</a></code> a été ajoutée dans le but
      	  de spécifier un délai optionnel, après lequel
                <code class="program"><a href="./programs/httpd.html">httpd</a></code> s'arrêtera quel que soit le statut
                des requêtes en cours.</dd>
      
            <dt>Mise en oeuvre du proxy</dt>
            <dd>Le nouveau module <code class="module"><a href="./mod/mod_proxy_balancer.html">mod_proxy_balancer</a></code> fournit
                des services de répartition de charge (load balancing) pour le
      	  module <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>.
                Le nouveau module <code class="module"><a href="./mod/mod_proxy_ajp.html">mod_proxy_ajp</a></code> ajoute le
      	  support pour le
                <code>Protocole JServ de Apache version 1.3</code> qu'utilise
                <a href="http://tomcat.apache.org/">Apache Tomcat</a>.</dd>
      
            <dt>Mise à jour de la bibliothèque des expressions rationnelles</dt>
            <dd>La version 5.0 de la
                <a href="http://www.pcre.org/">Perl Compatible Regular Expression
                Library</a> (PCRE) est maintenant disponible.
      	  <code class="program"><a href="./programs/httpd.html">httpd</a></code> peut être configuré pour utiliser une
      	  PCRE choisie en passant l'option <code>--with-pcre</code> au
      	  script configure.</dd>
      
            <dt>Filtrage intelligent</dt>
            <dd>Le module <code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code> permet la configuration
                dynamique de la chaîne de filtrage en sortie. Il permet
      	  d'insérer des filtres conditionnels basés sur toute
      	  requête, en-tête de réponse ou variable
      	  d'environnement, et fait table rase des problèmes de dépendances
      	  et d'ordonnancement rencontrés avec l'architecture 2.0.</dd>
      
            <dt>Support des gros fichiers</dt>
            <dd><code class="program"><a href="./programs/httpd.html">httpd</a></code> supporte maintenant les fichiers d'une taille supérieure
            à 2GB sur les systèmes 32 bits UNIX modernes.  Le support des
            corps de requête d'une taille supérieure à 2GB a aussi été
            ajouté.</dd>
      
            <dt>Module MPM Event</dt>
            <dd>Le module MPM <code class="module"><a href="./mod/event.html">event</a></code> utilise un thread séparé
            	pour gérer les requêtes "Keep alive" et accepter des connexions.
      	Les requêtes "Keep alive" requéraient traditionnellement un
      	processus httpd dédié pour leur gestion. Ce processus dédié
      	ne pouvait plus être réutilisé jusqu'à ce que le délai "Keep Alive"
                soit écoulé.</dd>
      
            <dt>Support des bases de données SQL</dt>
            <dd>Le module <code class="module"><a href="./mod/mod_dbd.html">mod_dbd</a></code>, associé à l'environnement
            	<code>apr_dbd</code>, fournit le support SQL direct aux modules
      	qui en ont besoin.  Supporte la mise en commun des connexions
                dans les modules MPM threadés.</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="module" id="module">Améliorations des modules</a></h2>
          
          <dl>
            <dt>Authn/Authz</dt>
            <dd>Les modules du répertoire aaa ont été renommés et fournissent
                un support amélioré pour la méthode d'authentification <strong>digest</strong>.  Par exemple, <code>mod_auth</code>
                est maintenant scindé en deux modules : <code class="module"><a href="./mod/mod_auth_basic.html">mod_auth_basic</a></code> et
                <code class="module"><a href="./mod/mod_authn_file.html">mod_authn_file</a></code>; <code>mod_auth_dbm</code> s'appelle maintenant
                <code class="module"><a href="./mod/mod_authn_dbm.html">mod_authn_dbm</a></code>; <code>mod_access</code> a été renommé en
                <code class="module"><a href="./mod/mod_authz_host.html">mod_authz_host</a></code>.  Est également apparu le nouveau module
                mod_authn_alias (supprimé dans la version 2.3/2.4) qui simplifie
                certaines configurations d'authentification.
            </dd>
      
            <dt><code class="module"><a href="./mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></dt>
            <dd>Ce module est un portage de la version 2.0 du module
                <code>mod_auth_ldap</code> vers la version 2.2 du framework
      	  <code>Authn/Authz</code>.
      	  Les nouvelles fonctionnalités comprennent l'utilisation des valeurs
      	  d'attributs LDAP et des filtres de recherche avancés dans la
                directive <code class="directive"><a href="./mod/mod_authz_core.html#require">Require</a></code>.</dd>
      
            <dt><code class="module"><a href="./mod/mod_authz_owner.html">mod_authz_owner</a></code></dt>
      	<dd>Un nouveau module qui autorise l'accès à un fichier
      	en fonction de son propriétaire dans le système de
      	fichiers</dd>
      
      	<dt><code class="module"><a href="./mod/mod_version.html">mod_version</a></code></dt>
      	<dd>Un nouveau module qui permet d'activer des blocs de
      	configuration en fonction de la version du serveur en cours
      	d'exécution.</dd>
      
            <dt><code class="module"><a href="./mod/mod_info.html">mod_info</a></code></dt>
            <dd>Un nouvel argument <code>?config</code> a été ajouté, qui permettra d'afficher
                les directives de configuration telles qu'elles sont interprétées
      	  par Apache, y compris le nom de fichier et le numéro de ligne.
      	  Le module montre aussi l'ordre des points d'entrée de traitement d'une
      	  requête (request hooks) ainsi que des informations de construction
      	  supplémentaires, d'une manière similaire à <code>httpd -V</code>.</dd>
      
            <dt><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></dt>
            
            <dd>Le support de la <a href="http://www.ietf.org/rfc/rfc2817.txt">RFC 2817</a> a été ajouté, ce qui permet de passer d'une
      	connexion en clair au chiffrement TLS.</dd>
      
            <dt><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code></dt>
            <dd><code>mod_imap</code> a été renommé en <code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code> afin
            d'éviter une confusion pour les utilisateurs.</dd>
          </dl>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="programs" id="programs">Améliorations des programmes</a></h2>
          
          <dl>
            <dt><code class="program"><a href="./programs/httpd.html">httpd</a></code></dt>
            <dd>Une nouvelle option de ligne de commande <code>-M</code>
           a été ajoutée, qui fournit la liste de tous les modules chargés
           en fonction de la configuration réelle. À la différence de l'option
           <code>-l</code>, cette liste inclut les Objets Dynamiques Partagés
           (DSOs) chargés par l'intermédiaire du module
           <code class="module"><a href="./mod/mod_so.html">mod_so</a></code>.</dd>
            <dt><code class="program"><a href="./programs/httxt2dbm.html">httxt2dbm</a></code></dt>
            <dd>Un nouveau programme servant à générer des fichiers dbm à partir
            d'une source au format texte, à utiliser avec la directive
            <code class="directive"><a href="./mod/mod_rewrite.html#rewritemap">RewriteMap</a></code>
                et le type de mise en correspondance <code>dbm</code>.</dd>
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="developer" id="developer">Changements pour le développeur de module</a></h2>
          
          <dl>
            <dt><a class="glossarylink" href="./glossary.html#apr" title="voir glossaire">APR</a> 1.0 API</dt>
      
            <dd>Apache 2.2 utilise l'API APR 1.0.  Toutes les fonctions et
            symboles obsolètes ont été supprimés du code de <code>APR</code> et
                <code>APR-Util</code>. Pour plus de détails, consultez le
                <a href="http://apr.apache.org/">site web d'APR</a>.</dd>
      
            <dt>Authn/Authz</dt>
            <dd>Les modules d'authentification et d'autorisation intégrés ont
                été renommés de la manière suivante:
                <ul>
                <li><code>mod_auth_*</code>  -&gt; Modules qui implémentent un mécanisme
      	  	d'authentification HTTP</li>
                <li><code>mod_authn_*</code> -&gt; Modules qui fournissent un dispositif
      	  	d'authentification en arrière-plan</li>
                <li><code>mod_authz_*</code> -&gt; Modules qui implémentent l'autorisation (ou l'accès)</li>
                <li><code>mod_authnz_*</code> -&gt; Modules qui implémentent à la fois
      	  l'authentification &amp; l'autorisation</li>
                </ul>
      	  L'organisation des méthodes d'authentification a également été revue, ce qui va simplifier
      	  grandement l'ajout de nouvelles méthodes d'authentification.</dd>
      
            <dt>Journalisation des erreurs de connexion</dt>
      
            <dd>Une nouvelle fonction a été ajoutée, <code>ap_log_cerror</code>,
            afin de pouvoir enregistrer les erreurs qui surviennent au cours de
            la connexion du client.  Une fois enregistré, le message inclut l'adresse IP du client.</dd>
      
            <dt>Ajout d'une portion de code pour la vérification de la configuration</dt>
      
            <dd>Un nouvel élément de traitement a été ajouté, <code>test_config</code>,
            afin d'aider les modules qui ne veulent exécuter un code spécial
            que si l'utilisateur passe le paramètre <code>-t</code> à
            <code class="program"><a href="./programs/httpd.html">httpd</a></code>.</dd>
      
            <dt>Définition de la taille de la pile pour les modules MPM en processus légers</dt>
      
            <dd>Une nouvelle directive a été ajoutée, <code class="directive"><a href="./mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code>
           afin de définir la taille de la pile pour tous les modules MPM en processus légers (modules threadés).
           Ceci s'avère nécessaire pour certains modules tiers sur des plateformes
           dont la taille de la pile des threads par défaut est
           trop petite.</dd>
      
            <dt>Gestion de protocole pour les filtres en sortie</dt>
      
            <dd>Par le passé, chaque filtre devait s'assurer que les en-têtes de
            réponse corrects étaient générés dans la mesure où il les affectait.
            Les filtres peuvent maintenant déléguer la gestion courante du
            protocole au module
                <code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code>, à l'aide des appels
                <code>ap_register_output_filter_protocol</code> ou
                <code>ap_filter_protocol</code>.</dd>
      
            <dt>Ajout d'un élément de traitement pour le processus père (monitor hook)</dt>
            <dd>Ce nouvel élément de traitement permet aux modules de lancer
            des jobs réguliers/planifiés au niveau du processus père
            (root).</dd>
      
            <dt>Modifications de l'API de traitement des expressions rationnelles</dt>
      
            <dd>Le fichier d'en-tête <code>pcreposix.h</code> n'est plus disponible ;
            il a été remplacé par le nouveau fichier
            d'en-tête <code>ap_regex.h</code>.  L'implémentation
            POSIX.2 <code>regex.h</code> exposée dans l'ancien fichier d'en-tête
            est maintenant disponible dans l'espace de nommage <code>ap_</code>
            depuis <code>ap_regex.h</code>.  Les appels à <code>regcomp</code>,
            <code>regexec</code>, etc... peuvent être remplacés par des appels à
            <code>ap_regcomp</code>, <code>ap_regexec</code>.</dd>
      
            <dt>Cadre d'application DBD (API pour base de données SQL)</dt>
      
            <dd><p>Avec Apache 1.x et 2.0, les modules nécessitant un processus
            SQL d'arrière-plan devaient s'en charger eux-mêmes.  En dehors du fait
            de réinventer la roue, ceci peut s'avérer très inefficace, par
            exemple lorsque plusieurs modules maintiennent chacun leurs
            propres connexions.</p>
            <p>Apache 2.1 et supérieur fournissent l'API <code>ap_dbd</code> qui
            permet la gestion des connexions à la base de données (y compris
            les stratégies optimisées pour les modules MPM threadés
            et non threadés), tandis que APR 1.2 et supérieur fournissent
            l'API <code>apr_dbd</code> qui permet l'interaction avec la
            base de données.</p>
            <p>Les nouveaux modules DEVRAIENT désormais utiliser ces APIs pour
            toutes les opérations liées aux bases de données SQL.
            De même, les applications existantes DEVRAIENT être mises à jour
            lorsque c'est possible, que ce soit de manière transparente ou sous forme
            d'une option recommandée à leurs utilisateurs.</p></dd>
          </dl>
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/new_features_2_2.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_2.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ko/new_features_2_2.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_2.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/new_features_2_2.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/new_features_2_2.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_2.html.ko.euc-kr��������������������������������������������0000644�0000000�0000050�00000022733�13412755316�021273� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¾ÆÆÄÄ¡ 2.2ÀÇ »õ·Î¿î ±â´É °³¿ä - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>¾ÆÆÄÄ¡ 2.2ÀÇ »õ·Î¿î ±â´É °³¿ä</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/new_features_2_2.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_2.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ko/new_features_2_2.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_2.html" hreflang="pt-br" rel="alternate" title="Portugu&#234;s (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/new_features_2_2.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
        <p>ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡ À¥¼­¹ö 2.0 ¹öÀü°ú 2.2 ¹öÀü°£ÀÇ ÁÖµÈ Â÷ÀÌÁ¡À»
           ¼³¸íÇÑ´Ù. 1.3 ¹öÀü ÀÌÈÄÀÇ »õ·Î¿î ±â´ÉÀº <a href="new_features_2_0.html">2.0 »õ·Î¿î ±â´É</a> ¹®¼­¸¦
           Âü°íÇ϶ó.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#core">ÇÙ½É ºÎºÐ¿¡¼­ ³ª¾ÆÁø Á¡</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#module">¸ðµâ¿¡¼­ ³ª¾ÆÁø Á¡</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#developer">¸ðµâ °³¹ßÀÚ¿¡°Ô ´Þ¶óÁø Á¡</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="core" id="core">ÇÙ½É ºÎºÐ¿¡¼­ ³ª¾ÆÁø Á¡</a></h2>
          
          <dl>
      
            <dt>Authn/Authz</dt>
            <dd>...</dd>
      
            <dt>ij½¬</dt>
            <dd>...</dd>
      
            <dt>ÇÁ·Ï½Ã</dt>
            <dd>»õ·Î¿î <code class="module"><a href="./mod/mod_proxy_balancer.html">mod_proxy_balancer</a></code> ¸ðµâÀÌ
            <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>¸¦ À§ÇÑ ºÎÇÏºÐ»ê ¼­ºñ½º¸¦ Á¦°øÇÑ´Ù.
            »õ·Î¿î <code class="module"><a href="./mod/mod_proxy_ajp.html">mod_proxy_ajp</a></code> ¸ðµâÀº <a href="http://tomcat.apache.org/">¾ÆÆÄÄ¡ ÅèĹ</a>ÀÌ
            »ç¿ëÇÏ´Â <code>Apache JServ Protocol 1.3 ¹öÀü</code>À»
            Áö¿øÇÑ´Ù.</dd>
      
            <dt>¶È¶ÈÇÑ ÇÊÅÍ</dt>
            <dd><code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code>´Â Ãâ·ÂÇÊÅͼø¼­¸¦ µ¿ÀûÀ¸·Î
            ¼³Á¤ÇÒ ¼ö ÀÖ´Ù. ±×·¡¼­ ¿äû Çì´õ, ÀÀ´ä Çì´õ, ȯ°æº¯¼ö¿¡
            µû¶ó ¼±ÅÃÀûÀ¸·Î ÇÊÅ͸¦ »ç¿ëÇÒ ¼ö ÀÖ°í, 2.0 ±¸Á¶ÀÇ Àǽɽº·¯¿î
            ÀÇÁ¸°ü°è¿Í ¼ø¼­ ¹®Á¦¸¦ ´ú¾îÁØ´Ù.</dd>
      
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="module" id="module">¸ðµâ¿¡¼­ ³ª¾ÆÁø Á¡</a></h2>
          
          <dl>
            <dt><code class="module"><a href="./mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></dt>
            <dd>ÀÌ ¸ðµâÀº 2.0ÀÇ <code>mod_auth_ldap</code> ¸ðµâÀ»
            2.2ÀÇ <code>Authn/Authz</code> ±¸Á¶·Î ¿Å±ä °ÍÀÌ´Ù. <code class="directive"><a href="./mod/core.html#require">Require</a></code> Áö½Ã¾î¿¡¼­ LDAP
            ¼Ó¼º(attribute) °ª°ú º¹ÀâÇÑ °Ë»ö ÇÊÅ͸¦ »ç¿ëÇÒ ¼ö ÀÖ´Â
            ±â´ÉÀÌ Ãß°¡µÇ¾ú´Ù.</dd>
      
            <dt><code class="module"><a href="./mod/mod_info.html">mod_info</a></code></dt>
            <dd>¾ÆÆÄÄ¡°¡ ÀоîµéÀÎ ¼³Á¤Áö½Ã¾î¸¦ ÆÄÀϸí°ú ÁÙ¹øÈ£¿Í °°ÀÌ
            º¸¿©ÁÖ´Â <code>?config</code> ¾Æ±Ô¸ÕÆ®°¡ Ãß°¡µÇ¾ú´Ù. ¸ðµâÀº
            ¸ðµç ¿äû ÈÅ(hook)ÀÇ ¼ø¼­¿Í <code>httpd -V</code>¿Í ºñ½ÁÇÑ
            ÄÄÆÄÀÏ Á¤º¸µµ º¸¿©ÁØ´Ù.</dd>
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="developer" id="developer">¸ðµâ °³¹ßÀÚ¿¡°Ô ´Þ¶óÁø Á¡</a></h2>
          
          <dl>
            <dt>APR 1.0 API</dt>
      
            <dd>¾ÆÆÄÄ¡ 2.2´Â APR 1.0 API¸¦ »ç¿ëÇÑ´Ù. <code>APR</code>°ú
            <code>APR-Util</code>¿¡¼­ ¾ø¾îÁö±â·Î ¿¹Á¤µÇ¾ú´ø ÇÔ¼ö¿Í
            ½Éº¼ÀÌ ¸ðµÎ ¾ø¾îÁ³´Ù. ÀÚ¼¼ÇÑ ³»¿ëÀº <a href="http://apr.apache.org/">APR À¥»çÀÌÆ®</a>¸¦ Âü°íÇ϶ó.</dd>
      
            <dt>¿¬°á ¿À·ù ·Î±× ±â·Ï</dt>
      
            <dd>Ŭ¶óÀÌ¾ðÆ®¿Í ¿¬°á¿¡ ¹ß»ýÇÑ ¿À·ù¸¦ ·Î±×¿¡ ±â·ÏÇϱâÀ§ÇØ
            ÇÔ¼ö <code>ap_log_cerror</code>¸¦ »õ·Î Ãß°¡Çß´Ù. ·Î±×¿¡
            ±â·ÏÇÏ¸é ¹®±¸¿¡ Ŭ¶óÀÌ¾ðÆ® IP ÁÖ¼Ò°¡ ³ª¿Â´Ù.</dd>
      
            <dt>¼³Á¤ Å×½ºÆ®¿ë ÈÅ Ãß°¡</dt>
      
            <dd>»ç¿ëÀÚ°¡ httpd¿¡ <code>-t</code> ¿É¼ÇÀ» »ç¿ëÇÑ °æ¿ì¿¡¸¸
            ¸ðµâÀÌ Æ¯º°ÇÑ Äڵ带 ½ÇÇàÇϵµ·Ï ÈÅ <code>test_config</code>¸¦
            »õ·Î Ãß°¡Çß´Ù.</dd>
      
            <dt>¾²·¹µå±â¹Ý MPMÀÇ ½ºÅÃÅ©±â ÁöÁ¤</dt>
      
            <dd>¸ðµç ¾²·¹µå±â¹Ý MPMÀÇ ½ºÅÃÅ©±â¸¦ ÁöÁ¤ÇϱâÀ§ÇØ
            <code>ThreadStackSize</code> Áö½Ã¾î¸¦ »õ·Î Ãß°¡Çß´Ù. ¾²·¹µå
            ½ºÅÃÅ©±â ±âº»°ªÀÌ ÀÛÀº Ç÷¹Æû¿¡¼­ ÀϺΠÁ¦»ïÀÚ°¡ ¸¸µç ¸ðµâÀ»
            »ç¿ëÇÒ °æ¿ì¿¡ ÇÊ¿äÇÏ´Ù.</dd>
      
            <dt>Ãâ·ÂÇÊÅ͸¦ À§ÇÑ ÇÁ·ÎÅäÄÝ Ã³¸®</dt>
      
            <dd>Àü¿¡´Â ¸ðµç ÇÊÅÍ¿¡°Ô ÀÚ½ÅÀÌ Ã³¸®ÇÑ ÀÀ´ä¿¡ ¿Ã¹Ù¸¥ ÀÀ´ä
            Çì´õ¸¦ »ý¼ºÇÏ´ÂÁö È®ÀÎÇÒ Ã¥ÀÓÀÌ ÀÖ¾ú´Ù. ÀÌÁ¦ ÇÊÅÍ´Â
            <code>ap_register_output_filter_protocol</code> ȤÀº
            <code>ap_filter_protocol</code> È£ÃâÀ» »ç¿ëÇÏ¿© ÀÏ»óÀûÀÎ
            ÇÁ·ÎÅäÄÝ °ü¸®¸¦ <code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code>¿¡°Ô ¶°³Ñ±æ
            ¼ö ÀÖ´Ù.</dd>
          </dl>
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/new_features_2_2.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_2.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ko/new_features_2_2.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_2.html" hreflang="pt-br" rel="alternate" title="Portugu&#234;s (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/new_features_2_2.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/new_features_2_2.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������httpd-2.4.41/docs/manual/socache.html���������������������������������������������������������������0000644�0000000�0000050�00000000322�13362070302�015725� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: socache.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: socache.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/configuring.html.de��������������������������������������������������������0000644�0000000�0000050�00000040533�13412755316�017244� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="de" xml:lang="de"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Konfigurationsdateien - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP-Server</a> &gt; <a href="http://httpd.apache.org/docs/">Dokumentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Konfigurationsdateien</h1>
      <div class="toplang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/configuring.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/configuring.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/configuring.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/configuring.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/configuring.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/configuring.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">Diese Übersetzung ist möglicherweise
                  nicht mehr aktuell. Bitte prüfen Sie die englische Version auf
                  die neuesten Änderungen.</div>
      
          <p>Dieses Dokument beschreibt die Dateien, die zur Konfiguration des Apache
            HTTP Servers verwendet werden.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#main">Hauptkonfigurationsdateien</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#syntax">Syntax der Konfigurationsdateien</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#modules">Module</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#scope">Der Gültigkeitsbereich von Direktiven</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#htaccess">.htaccess-Dateien</a></li>
      </ul><h3>Siehe auch</h3><ul class="seealso"><li><a href="#comments_section">Kommentare</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="main" id="main">Hauptkonfigurationsdateien</a></h2>
          
          <table class="related"><tr><th>Referenzierte Module</th><th>Referenzierte Direktiven</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_mime.html">mod_mime</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#include">Include</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#typesconfig">TypesConfig</a></code></li></ul></td></tr></table>
      
          <p>Der Apache wird konfiguriert, indem <a href="mod/directives.html">Direktiven</a> in einfache Textdateien
            eingetragen werden. Die Hauptkonfigurationsdatei heißt
            üblicherweise <code>httpd.conf</code>. Der Ablageort dieser Datei
            wird bei der Kompilierung festgelegt, kann jedoch mit der
            Befehlszeilenoption <code>-f</code> überschrieben werden. Durch
            Verwendung der Direktive  <code class="directive"><a href="./mod/core.html#include">Include</a></code>
            können außerdem weitere Konfigurationsdateien hinzugefügt
            werden. Zum Einfügen von mehreren Konfigurationsdateien können
            Platzhalter verwendet werden. Jede Direktive darf in jeder dieser
            Konfigurationsdateien angegeben werden. Änderungen in den
            Hauptkonfigurationsdateien werden vom Apache nur beim Start oder Neustart
            erkannt.</p>
      
          <p>Der Server liest auch eine Datei mit MIME-Dokumenttypen ein. Der
            Name dieser Datei wird durch die Direktive <code class="directive"><a href="./mod/mod_mime.html#typesconfig">TypesConfig</a></code> bestimmt. Die Voreinstellung
            ist <code>mime.types</code>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="syntax" id="syntax">Syntax der Konfigurationsdateien</a></h2>
          
      
          <p>Die Konfigurationsdateien des Apache enthalten eine Direktive pro Zeile.
            Der Backslash "\" läßt sich als letztes Zeichen in einer Zeile
            dazu verwenden, die Fortsetzung der Direktive in der nächsten Zeile
            anzuzeigen. Es darf kein weiteres Zeichen oder Whitespace zwischen dem
            Backslash und dem Zeilenende folgen.</p>
      
          <p>In den Konfigurationsdateien wird bei den Direktiven nicht zwischen
            Groß- und Kleinschreibung unterschieden. Bei den Argumenten der
            Direktiven wird dagegen oftmals zwischen Groß- und Kleinschreibung
            differenziert. Zeilen, die mit dem Doppelkreuz "#" beginnen, werden als
            Kommentare betrachtet und ignoriert. Kommentare dürfen
            <strong>nicht</strong> am Ende einer Zeile nach der Direktive
            eingefügt werden. Leerzeilen und Whitespaces vor einer Direktive
            werden ignoriert. Dadurch lassen sich Direktiven zur besseren Lesbarbeit
            einrücken.</p>
      
          <p>Sie können die Syntax Ihrer Konfigurationsdateien auf Fehler
            prüfen, ohne den Server zu starten, indem Sie <code>apachectl
              configtest</code> oder die Befehlszeilenoption <code>-t</code>
            verwenden.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="modules" id="modules">Module</a></h2>
          
      
          <table class="related"><tr><th>Referenzierte Module</th><th>Referenzierte Direktiven</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_so.html">mod_so</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code></li></ul></td></tr></table>
      
          <p>Der Apache ist ein modularer Server. Das bedeutet, dass nur die abolute
            Grundfunktionalität im Kernserver enthalten ist. Weitergehende
            Fähigkeiten sind mittels <a href="mod/">Modulen</a> verfügbar,
            die in den Apache geladen werden können. Standardmäßig
            wird bei der Kompilierung ein Satz von Basismodulen <span class="transnote">(<em>Anm.d.Ü.:</em> die so
              genannten <a href="mod/module-dict.html#Status">Base</a>-Module)</span> in den Server eingebunden. Wenn der
            Server für die Verwendung von <a href="dso.html">dynamisch
              ladbaren</a> Modulen kompiliert wurde, dann können Module separat
            kompiliert und jederzeit mittels der Direktive <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> hinzugefügt werden.
            Andernfalls muss der Apache neu kompiliert werden, um Module
            hinzuzufügen oder zu entfernen. Konfigurationsanweisungen können
            abhängig vom Vorhandensein eines bestimmten Moduls eingesetzt werden,
            indem sie in einen <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>-Block eingeschlossen werden.</p>
      
          <p>Um zu sehen, welche Module momentan in den Server einkompiliert sind,
            kann die Befehlszeilenoption <code>-l</code> verwendet werden.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="scope" id="scope">Der Gültigkeitsbereich von Direktiven</a></h2>
          
      
          <table class="related"><tr><th>Referenzierte Module</th><th>Referenzierte Direktiven</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
          <p>Direktiven in den Hauptkonfigurationsdateien gelten für den
            gesamten Server. Wenn Sie die Konfiguration nur für einen Teil des
            Servers verändern möchten, können Sie den
            Gültigkeitsbereich der Direktiven beschränken, indem Sie diese
            in <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>-,
            <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>-,
            <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>-,
            <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>-,
            <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>- oder
            <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code>-Abschnitte eingefügen.
            Diese Abschnitte begrenzen die Anwendung der umschlossenen Direktiven
            auf bestimmte Pfade des Dateisystems oder auf
            bestimmte URLs. Sie können für eine fein abgestimmte
            Konfiguration auch ineinander verschachtelt werden.</p>
          
          
          <p>Der Apache besitzt die Fähigkeit, mehrere verschiedene Websites
            gleichzeitig zu bedienen. Dies wird <a href="vhosts/">virtuelles
              Hosten</a> genannt. Direktiven können auch in ihrem
            Gültigkeitsgereich eingeschränkt werden, indem sie innerhalb
            eines <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>-Abschnittes angegeben werden.
            Sie werden dann nur auf Anfragen für eine bestimmte Website
            angewendet.</p>
      
          <p>Obwohl die meisten Direktiven in jedem dieser Abschnitte platziert
            werden können, ergeben einige Direktiven in manchen Kontexten
            keinen Sinn. Direktiven zur Prozesssteuerung beispielsweise
            dürfen nur im Kontext des Hauptservers angegeben werden. Prüfen
            Sie den <a href="mod/directive-dict.html#Context">Kontext</a> der
            Direktive, um herauszufinden, welche Direktiven in welche Abschnitte
            eingefügt werden können.  Weitere Informationen finden Sie unter
            "<a href="sections.html">Wie Directory-, Location- und Files-Abschnitte
              arbeiten</a>".</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="htaccess" id="htaccess">.htaccess-Dateien</a></h2>
          
      
          <table class="related"><tr><th>Referenzierte Module</th><th>Referenzierte Direktiven</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#accessfilename">AccessFileName</a></code></li><li><code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code></li></ul></td></tr></table>
      
          <p>Der Apache ermöglicht die dezentrale Verwaltung der
            Konfiguration mittes spezieller Dateien innerhalb des
            Web-Verzeichnisbaums. Diese speziellen Dateien heißen
            gewöhnlich <code>.htaccess</code>, mit der Direktive <code class="directive"><a href="./mod/core.html#accessfilename">AccessFileName</a></code> kann jedoch auch ein anderer
            Name festgelegt werden. In <code>.htaccess</code>-Dateien angegebene
            Direktiven werden auf das Verzeichnis und dessen Unterverzeichnisse
            angewendet, in dem die Datei abgelegt ist. <code>.htaccess</code>-Dateien
            folgen der gleichen Syntax wie die Hauptkonfigurationsdateien. Da
            <code>.htaccess</code>-Dateien bei jeder Anfrage eingelesen werden,
            werden Änderungen in diesen Dateien sofort wirksam.</p>
      
          <p>Prüfen Sie den <a href="mod/directive-dict.html#Context">Kontext</a> der Direktive, um
            herauszufinden, welche Direktiven in <code>.htaccess</code>-Dateien
            angegeben werden können. Darüber hinaus steuert der
            Serveradministrator mit der Einstellung der Direktive <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> in den
            Hauptkonfigurationsdateien welche Direktiven in
            <code>.htaccess</code>-Dateien verwendet werden dürfen.</p>
      
          <p>Weitere Informationen über <code>.htaccess</code>-Dateien finden
            Sie in der <a href="howto/htaccess.html">.htaccess-Einführung</a>.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/configuring.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/configuring.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/configuring.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/configuring.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/configuring.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/configuring.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Kommentare</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/configuring.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Lizenziert unter der <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/mpm.html.ja.utf8�����������������������������������������������������������0000644�0000000�0000050�00000027322�13412755316�016413� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>マルãƒãƒ—ロセッシングモジュール (MPM) - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>マルãƒãƒ—ロセッシングモジュール (MPM)</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./de/mpm.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/mpm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/mpm.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/mpm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/mpm.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/mpm.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/mpm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/mpm.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
      <p>ã“ã®æ–‡æ›¸ã§ã¯ãƒžãƒ«ãƒãƒ—ロセッシングモジュールãŒã©ã®ã‚ˆã†ãªã‚‚ã®ã§ã€
      Apache HTTP サーãƒã§ã©ã®ã‚ˆã†ã«ä½¿ç”¨ã•れるã‹ã«ã¤ã„ã¦è§£èª¬ã—ã¦ã„ã¾ã™ã€‚</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#introduction">ã¯ã˜ã‚ã«</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#choosing">MPM ã‚’é¸ã¶</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#defaults">MPM デフォルト値</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">ã¯ã˜ã‚ã«</a></h2>
      
          <p>Apache HTTP サーãƒã¯ç•°ãªã‚‹å¹…広ã„環境ã€å¤šç¨®å¤šæ§˜ãªãƒ—ラットホームã§
          動作ã™ã‚‹ã‚ˆã†ã«ã€ãƒ‘ãƒ¯ãƒ•ãƒ«ã§æŸ”軟性ã«å¯Œã‚“ã è¨­è¨ˆã«ãªã£ã¦ã„ã¾ã™ã€‚
          ç•°ãªã‚‹ãƒ—ラットホーム・異ãªã‚‹ç’°å¢ƒã§ã¯ã—ã°ã—ã°ã€
          ç•°ãªã‚‹æ©Ÿèƒ½ãŒå¿…è¦ã«ãªã£ãŸã‚Šã€
          åŒã˜æ©Ÿèƒ½ã§ã‚‚効率ã®ãŸã‚ã«ç•°ãªã‚‹å®Ÿè£…ãŒå¿…è¦ã«ãªã£ãŸã‚Šã—ã¾ã™ã€‚
          Apache ã§ã¯ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«åŒ–ã•れãŸè¨­è¨ˆã«ã‚ˆã‚Šå¹…広ã„環境ã«é©å¿œã—ã¦ãã¾ã—ãŸã€‚
          ã“ã®è¨­è¨ˆã®ãŠã‹ã’ã§ã€ç®¡ç†è€…ã¯
          コンパイル時ã¾ãŸã¯å®Ÿè¡Œæ™‚ã«ã©ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ロードã™ã‚‹ã‹é¸ã¶ã“ã¨ã«ã‚ˆã£ã¦ã€
          ã©ã®æ©Ÿèƒ½ã‚’サーãƒã«å–り込むã‹é¸æŠžã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>Apache 2.0 ã§ã¯ã€
          ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«åŒ–ã•れãŸè¨­è¨ˆã‚’サーãƒã®åŸºæœ¬æ©Ÿèƒ½ã«ã¾ã§æ‹¡å¼µã—ã¾ã—ãŸã€‚
          サーãƒã«ã¯ç²¾é¸ã•れãŸãƒžãƒ«ãƒãƒ—ロセッシングモジュール (MPM) 
          ãŒä»˜ã„ã¦ãã¦ã€ã“れらã¯ãƒžã‚·ãƒ³ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒãƒ¼ãƒˆã‚’ãƒã‚¤ãƒ³ãƒ‰ã—ãŸã‚Šã€
          リクエストをå—ã‘付ã‘ãŸã‚Šã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã†ã‚ˆã†å­ãƒ—ロセスã«å‰²ã‚Šå½“ã¦ãŸã‚Šã€
          ã¨ã„ã£ãŸå½¹å‰²ã‚’æŒã¡ã¾ã™ã€‚</p>
      
          <p>モジュール化ã•れãŸè¨­è¨ˆã‚’サーãƒã®ã“ã®ãƒ¬ãƒ™ãƒ«ã¾ã§æ‹¡å¼µã™ã‚‹ã“ã¨ã§
          二ã¤ã®é‡è¦ãªåˆ©ç‚¹ãŒç”Ÿã¾ã‚Œã¾ã™:</p>
      
          <ul>
            <li>Apache ã¯å¹…広ã„オペレーティングシステムを
            より美ã—ã効率的ã«ã‚µãƒãƒ¼ãƒˆã§ãã¾ã™ã€‚
            特㫠Windows 版㮠Apache ã¯éšåˆ†åŠ¹çŽ‡çš„ã«ãªã‚Šã¾ã—ãŸã€‚
            ãªãœãªã‚‰ <code class="module"><a href="./mod/mpm_winnt.html">mpm_winnt</a></code>
            ã«ã‚ˆã£ã¦ã€Apache 1.3 ã§ç”¨ã„られã¦ã„㟠POSIX 
            レイヤã®ä»£ã‚りã«ãƒã‚¤ãƒ†ã‚£ãƒ–ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯æ©Ÿèƒ½ã‚’
            利用ã§ãã‚‹ã‹ã‚‰ã§ã™ã€‚
            特別化ã•れ㟠MPM 
            を実装ã—ãŸä»–ã®ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ã§ã‚‚ã€
            åŒæ§˜ã«ã“ã®åˆ©ç‚¹ã¯ç”Ÿã¾ã‚Œã¾ã™ã€‚</li>
      
            <li>サーãƒã¯ç‰¹å®šã®ã‚µã‚¤ãƒˆå‘ã‘ã«ã€ã‚ˆã‚Šä¸Šæ‰‹ã«ã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºã§ãã¾ã™ã€‚
            例ãˆã°ã€éžå¸¸ã«å¤§ããªã‚¹ã‚±ãƒ¼ãƒ©ãƒ“リティを必è¦ã¨ã™ã‚‹ã‚µã‚¤ãƒˆã§ã¯ã€
            <code class="module"><a href="./mod/worker.html">worker</a></code> ã‚„ <code class="module"><a href="./mod/event.html">event</a></code> ã¨ã„ã£ãŸã‚¹ãƒ¬ãƒƒãƒ‰åŒ–ã•れãŸ
            MPM を利用ã§ãる一方ã§ã€å®‰å®šæ€§ã‚„å¤ã„ソフトウェアã¨ã®äº’æ›æ€§ã‚’
            å¿…è¦ã¨ã™ã‚‹ã‚µã‚¤ãƒˆã§ã¯ <code class="module"><a href="./mod/prefork.html">prefork</a></code>
            ãŒåˆ©ç”¨ã§ãã¾ã™ã€‚</li>
          </ul>
      
          <p>ユーザレベルã§ã¯ã€MPM ã¯ä»–ã® Apache 
          モジュールã¨åŒç­‰ã«è¦‹ãˆã¾ã™ã€‚
          主ãªé•ã„ã¯ã€ã„ã¤ã§ã‚‚唯一㮠MPM 
          ãŒãƒ­ãƒ¼ãƒ‰ã•れãªã‘れã°ãªã‚‰ãªã„ã¨ã„ã†ç‚¹ã§ã™ã€‚
          利用å¯èƒ½ãª MPM 㯠
          <a href="mod/">module インデックス</a>ã«ã‚りã¾ã™ã€‚</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="choosing" id="choosing">MPM ã‚’é¸ã¶</a></h2>
      
          <p>MPM ã¯è¨­å®šä¸­ã«é¸æŠžã—ã¦ã€ã‚µãƒ¼ãƒå†…部ã«ã‚³ãƒ³ãƒ‘イルã•れãªã‘れã°
          ãªã‚Šã¾ã›ã‚“。
          コンパイラã¯ã€ã‚¹ãƒ¬ãƒƒãƒ‰ãŒä½¿ç”¨ã•れã¦ã„ã‚‹å ´åˆã«æ§˜ã€…ãªæ©Ÿèƒ½ã‚’最é©åŒ–ã§ãã¾ã™ãŒã€
          ãã®ãŸã‚ã«ã¯ãã‚‚ãもスレッドãŒä½¿ã‚れã¦ã„ã‚‹ã¨ã„ã†ã“ã¨ã‚’知る必è¦ãŒã‚りã¾ã™ã€‚</p>
      
          <p>望ã¿ã® MPM を実際ã«é¸ã¶ãŸã‚ã«ã¯ã€<code class="program"><a href="./programs/configure.html">configure</a></code> スクリプトã§
          <code>--with-mpm=<em>NAME</em></code> 引数を用ã„ã¦ãã ã•ã„。
          <em>NAME</em> ã¯æœ›ã¿ã® MPM ã®åå‰ã§ã™ã€‚</p>
      
          <p>サーãƒã‚³ãƒ³ãƒ‘イル後ã¯ã€ã©ã® MPM ãŒé¸æŠžã•れãŸã‹ã‚’
          <code>./httpd -l</code> ã§ç¢ºã‹ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          ã“ã®ã‚³ãƒžãƒ³ãƒ‰ã¯ã€MPM
          ã‚’å«ã‚ã€ã‚µãƒ¼ãƒã«ã‚³ãƒ³ãƒ‘イルã§çµ„ã¿è¾¼ã¾ã‚ŒãŸãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«å…¨ã¦ã‚’
          列挙ã—ã¾ã™ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="defaults" id="defaults">MPM デフォルト値</a></h2>
      
      <p>æ¬¡è¡¨ã«æ§˜ã€…㪠OS å‘ã‘ã®ãƒ‡ãƒ•ォルト㮠MPM 一覧を掲載ã—ã¦ã„ã¾ã™ã€‚
      ã‚³ãƒ³ãƒ‘ã‚¤ãƒ«æ™‚ã«æ„図的ã«ä»–ã‚’é¸æŠžã—ãªã‘れã°ã€è‡ªå‹•çš„ã«ã“れら㮠MPM
      ãŒé¸æŠžã•れã¾ã™ã€‚</p>
      
      <table>
      
      <tr><td>BeOS</td><td><code class="module"><a href="./mod/beos.html">beos</a></code></td></tr>
      <tr><td>Netware</td><td><code class="module"><a href="./mod/mpm_netware.html">mpm_netware</a></code></td></tr>
      <tr><td>OS/2</td><td><code class="module"><a href="./mod/mpmt_os2.html">mpmt_os2</a></code></td></tr>
      <tr><td>Unix</td><td><code class="module"><a href="./mod/prefork.html">prefork</a></code></td></tr>
      <tr><td>Windows</td><td><code class="module"><a href="./mod/mpm_winnt.html">mpm_winnt</a></code></td></tr>
      </table>
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./de/mpm.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/mpm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/mpm.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/mpm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/mpm.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/mpm.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/mpm.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/mpm.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/mpm.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/BUILDING�������������������������������������������������������������������0000644�0000000�0000050�00000000146�11562045315�014564� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������For instructions on building the manual, see
      <https://httpd.apache.org/docs-project/docsformat.html>.
      ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/stopping.html.ja.utf8������������������������������������������������������0000644�0000000�0000050�00000047756�13412755316�017502� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache HTTP Server ã®åœæ­¢ã¨å†èµ·å‹• - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache HTTP Server ã®åœæ­¢ã¨å†èµ·å‹•</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./de/stopping.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/stopping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/stopping.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/stopping.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/stopping.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/stopping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/stopping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>ã“ã®æ–‡æ›¸ã§ã¯ Unix ã«é¡žä¼¼ã—ãŸã‚·ã‚¹ãƒ†ãƒ ã§ã®
          Apache HTTP Serverã®åœæ­¢ã¨å†èµ·å‹•ã«ã¤ã„ã¦æ‰±ã£ã¦ã„ã¾ã™ã€‚
          Windows NT, 2000, XP ユーザã¯<a href="platform/windows.html#winsvc">サービスã¨ã—ã¦
          httpd を実行ã™ã‚‹</a>ã§ã€Windows 9x, MEユーザã¯<a href="platform/windows.html#wincons">コンソールアプリケーションã¨ã—ã¦
          httpd を実行ã™ã‚‹</a>ã§ã€
          ã“れらã®ãƒ—ラットホームã§ã®ä½¿ç”¨æ–¹æ³•ã‚’ã”覧下ã•ã„。</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#introduction">イントロダクション</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#term">急ãªåœæ­¢</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#graceful">ç·©ã‚„ã‹ãªå†èµ·å‹•</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#hup">急ãªå†èµ·å‹•</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#gracefulstop">ç·©ã‚„ã‹ãªåœæ­¢</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><code class="program"><a href="./programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="./programs/apachectl.html">apachectl</a></code></li><li><a href="invoking.html">Starting</a></li><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">イントロダクション</a></h2>
      
          <p>Apache HTTP Server ã‚’åœæ­¢ã—ãŸã‚Šå†èµ·å‹•ã—ãŸã‚Šã™ã‚‹ãŸã‚ã«ã¯ã€å®Ÿè¡Œã•れã¦ã„ã‚‹
          <code class="program"><a href="./programs/httpd.html">httpd</a></code> プロセスã«ã‚·ã‚°ãƒŠãƒ«ã‚’é€ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
          シグナルをé€ã‚‹ã«ã¯äºŒã¤ã®æ–¹æ³•ãŒã‚りã¾ã™ã€‚
          一ã¤ç›®ã¯ãƒ—ロセスã«ç›´æŽ¥ã‚·ã‚°ãƒŠãƒ«ã‚’é€ã‚‹ unix ã® <code>kill</code>
          コマンドを使用ã™ã‚‹æ–¹æ³•ã§ã™ã€‚
          システムを見れã°ãŸãã•ã‚“ã® <code class="program"><a href="./programs/httpd.html">httpd</a></code> ãŒ
          実行ã•れã¦ã„ã‚‹ã®ã«æ°—ãŒä»˜ãã§ã—ょã†ãŒã€ã‚·ã‚°ãƒŠãƒ«ã‚’é€ã‚‹ã®ã¯
          親プロセスã ã‘ã§ã€ãれ以外ã®å€‹ã€…ã®ãƒ—ロセスã«ã¯
          シグナルをé€ã‚‰ãªã„ã§ä¸‹ã•ã„。ãã®è¦ªãƒ—ロセス㮠pid ã¯
          <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code>
          ã«æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚ã“れã¯ã¤ã¾ã‚Šã€è¦ªä»¥å¤–ã®ãƒ—ロセスã«
          シグナルをé€ã‚‹å¿…è¦ã™ã‚‰ãªã„ã€ã¨ã„ã†ã“ã¨ã§ã™ã€‚
          親プロセスã«é€ã‚‹ã“ã¨ãŒã§ãã‚‹ 4 種類ã®ã‚·ã‚°ãƒŠãƒ«ãŒã‚りã¾ã™:
          <code><a href="#term">TERM</a></code>,
          <code><a href="#hup">HUP</a></code>, 
          <code><a href="#graceful">USR1</a></code>,
          <code><a href="#gracefulstop">WINCH</a></code>
          ã§ã™ã€‚ã“れらã®èª¬æ˜Žã«ã¤ã„ã¦ã¯ç¶šãã‚’ã”覧下ã•ã„。</p>
      
          <p>親プロセスã«ã‚·ã‚°ãƒŠãƒ«ã‚’é€ã‚‹ã«ã¯ã€
          次ã®ã‚ˆã†ãªã‚³ãƒžãƒ³ãƒ‰ã‚’発行ã—ã¦ä¸‹ã•ã„:</p>
      
      <div class="example"><p><code>kill -TERM `cat /usr/local/apache2/logs/httpd.pid`</code></p></div>
      
          <p><code class="program"><a href="./programs/httpd.html">httpd</a></code> プロセスã«ã‚·ã‚°ãƒŠãƒ«ã‚’é€ã‚‹ 2 ç•ªç›®ã®æ–¹æ³•ã¯
          <code>-k</code> ã¨ã„ã†ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³å¼•数を使用ã™ã‚‹ã“ã¨ã§ã™ã€‚
          下ã§èª¬æ˜Žã•れã¦ã„るよã†ã«ã€<code>stop</code>, <code>restart</code>, 
          <code>graceful</code>, <code>graceful-stop</code> を指定ã§ãã¾ã™ã€‚
          ã“れら㯠<code class="program"><a href="./programs/httpd.html">httpd</a></code> ã®å¼•æ•°ã§ã™ãŒã€
          制御用ã®ã‚¹ã‚¯ãƒªãƒ—ト <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> ã¯ãれらã®å¼•æ•°ã‚’ãã®ã¾ã¾
          <code class="program"><a href="./programs/httpd.html">httpd</a></code> ã«æ¸¡ã—ã¾ã™ã€‚</p>
      
          <p><code class="program"><a href="./programs/httpd.html">httpd</a></code> ã«ã‚·ã‚°ãƒŠãƒ«ã‚’é€ã£ãŸå¾Œã€
          実行状æ³ã‚’次ã®ã‚³ãƒžãƒ³ãƒ‰ã§èª­ã‚€ã“ã¨ãŒã§ãã¾ã™:</p>
      
      <div class="example"><p><code>tail -f /usr/local/apache2/logs/error_log</code></p></div>
          <p>ã“ã“ã«æŒ™ã’ãŸä¾‹ã¯ã€å„自ã®
          <code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code>
          ã¨
          <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code>
          ã®è¨­å®šã«é©åˆã™ã‚‹ã‚ˆã†ã«é©å®œä¿®æ­£ã—ã¦ä¸‹ã•ã„。</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="term" id="term">急ãªåœæ­¢</a></h2>
      
      <dl><dt>シグナル: TERM</dt>
      <dd><code>apachectl -k stop</code></dd>
      </dl>
      
          <p><code>TERM</code> ã‚ã‚‹ã„㯠<code>stop</code> 
          シグナルを親プロセスã«é€ã‚‹ã¨ã€å³åº§ã«å­ãƒ—ロセス全ã¦ã‚’ kill ã—よã†ã¨ã—ã¾ã™ã€‚
          å­ãƒ—ロセスを完全㫠kill ã—終ã‚ã‚‹ã¾ã§ã«æ•°ç§’ã‹ã‹ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。
          ãã®å¾Œã€è¦ªãƒ—ロセス自身ãŒçµ‚了ã—ã¾ã™ã€‚
          処ç†ä¸­ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯å…¨ã¦åœæ­¢ã•れã€ã‚‚ã¯ã‚„リクエストã«å¯¾ã™ã‚‹
          応答ã¯ã•れã¾ã›ã‚“。</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="graceful" id="graceful">ç·©ã‚„ã‹ãªå†èµ·å‹•</a></h2>
      
      <dl><dt>シグナル: USR1</dt>
      <dd><code>apachectl -k graceful</code></dd>
      </dl>
      
          <p>親プロセス㯠<code>USR1</code> ã‚ã‚‹ã„㯠<code>graceful</code>
          シグナルをå—ã‘å–ã‚‹ã¨ã€å­ãƒ—ロセスã«ç¾åœ¨ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®å‡¦ç†ã®å¾Œã«çµ‚了ã™ã‚‹
          (ã‚ã‚‹ã„ã¯ä½•ã‚‚ã—ã¦ã„ãªã‘れã°ã™ãã«çµ‚了ã™ã‚‹)
          よã†ã«<em>助言</em>ã—ã¾ã™ã€‚
          親プロセスã¯è¨­å®šãƒ•ァイルをå†èª­è¾¼ã—ã¦ã€ãƒ­ã‚°ãƒ•ァイルを開ãç›´ã—ã¾ã™ã€‚
          å­ãƒ—ロセスãŒå¾ã€…ã«ãªããªã‚‹ã«å¾“ã£ã¦ã€
          æ–°ã—ã„<em>世代</em>ã®è¨­å®šã«ã‚ˆã‚‹å­ãƒ—ロセスã«ç½®ãæ›ãˆã¦ã„ãã¾ã™ã€‚
          ãã—ã¦ã€ã“ã‚Œã‚‰ãŒæ–°ãŸãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å³åº§ã«å¿œç­”ã—å§‹ã‚ã¾ã™ã€‚</p>
      
          <p>ã“ã®ã‚³ãƒ¼ãƒ‰ã¯å¸¸ã«
          MPM ã®ãƒ—ロセス制御ディレクティブã®è¨­å®šã‚’é‡è¦–ã—ã¾ã™ã®ã§ã€
          クライアントã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’扱ã†ãƒ—ロセスã¨ã‚¹ãƒ¬ãƒƒãƒ‰ã®æ•°ã‚’å†èµ·å‹•ã®å‡¦ç†ä¸­ã‚‚
          é©åˆ‡ãªå€¤ã«ç¶­æŒã•れã¾ã™ã€‚。ã¾ãŸã€æ¬¡ã®ã‚ˆã†ã«ã—ã¦
          <code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code>
          を守りã¾ã™:
          å°‘ãªãã¨ã‚‚ 1 秒後㫠<code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code> å€‹ã®æ–°ã—ã„å­ãƒ—ロセスãŒ
          生æˆã•れã¦ã„ãªã‘れã°ã€ãã®æ•°ã«ãªã‚‹ã‚ˆã†ã«é©å®œãƒ—ロセスを生æˆã—ã¾ã™ã€‚
          ã“ã®æŒ™å‹•ã¯ç¾åœ¨ã®è² è·ã«å¯¾ã—ã¦é©åˆ‡ãªå­ãƒ—ãƒ­ã‚»ã‚¹ã®æ•°ã¨
          <code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code> パラメータã§ã®
          å¸Œæœ›ã®æ•°ã®ä¸¡æ–¹ã‚’ç¶­æŒã—よã†ã¨ã—ã¦ã„ã¾ã™ã€‚</p>
      
          <p><code class="module"><a href="./mod/mod_status.html">mod_status</a></code> ã‚’
          使用ã—ã¦ã„ã‚‹å ´åˆã¯ã€<code>USR1</code> シグナルãŒé€ã‚‰ã‚ŒãŸéš›ã«
          サーãƒçµ±è¨ˆãŒã‚¼ãƒ­ã«<strong>設定ã•れãªã„</strong>ã“ã¨ã«
          注æ„ã—ã¦ãã ã•ã„。
          サーãƒãŒæ–°ã—ã„リクエストã«å¿œç­”ä¸èƒ½ãªæ™‚間を最å°ã«ã™ã‚‹ã‚ˆã†ã«
          (リクエスト㯠OS ã«ã‚ˆã£ã¦ã‚­ãƒ¥ãƒ¼ã«è¿½åŠ ã•れるã®ã§çµ¶å¯¾ã«ç´›å¤±ã¯ã—ã¾ã›ã‚“)ã€
          ã¾ãŸåŒæ™‚ã«ã€å¸Œæœ›ã®ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ãƒ‘ラメータを守るよã†ã«
          ã‚³ãƒ¼ãƒ‰ã¯æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚
          ã“ã®ã‚ˆã†ã«ã™ã‚‹ãŸã‚ã«ã€ä¸–代をã¾ãŸãŒã£ãŸå…¨å­ãƒ—ロセスã®è¿½è·¡ã«ä½¿ã‚れã¦ã„ã‚‹
          <em>スコアボード</em>ã‚’ç¶­æŒã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。</p>
      
          <p>status モジュールã¯ã€ç·©ã‚„ã‹ãªå†èµ·å‹•以å‰ã‹ã‚‰é–‹å§‹ã—ã¦
          リクエストã«å¿œç­”ã—ç¶šã‘ã¦ã„ã‚‹å­ãƒ—ロセスを特定ã™ã‚‹ãŸã‚ã«ã€
          <code>G</code> を使ã†ã“ã¨ã‚‚ã—ã¾ã™ã€‚</p>
      
          <p>ç¾åœ¨ã€<code>USR1</code> を使ã†ãƒ­ã‚°ç§»å‹•スクリプトã§ã¯ã€
          å†èµ·å‹•å‰ã®å­ãƒ—ロセスãŒãƒ­ã‚°ã‚’書ã終ã‚ã£ãŸã“ã¨ã‚’確証ã™ã‚‹æ–¹æ³•ãŒ
          ã‚りã¾ã›ã‚“。å¤ã„ログã«å¯¾ã—ã¦ä½•ã‹ã™ã‚‹å‰ã«ã€
          <code>USR1</code> シグナルをé€ã£ãŸå¾Œã„ãらã‹é©å½“ãªæ™‚é–“å¾…ã¤ã“ã¨ã‚’
          ææ¡ˆã—ã¾ã™ã€‚例ãˆã°ã€å¸¯åŸŸã®ç‹­ã„通信路ã®ãƒ¦ãƒ¼ã‚¶ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ã»ã¨ã‚“ã©ãŒ 10 
          分以下ã§å®Œäº†ã—ã¦ã„ã‚‹ã¨ã„ã†ã“ã¨ãŒåˆ†ã‹ã£ã¦ã„れã°ã€
          å¤ã„ログã«ä½•ã‹ã™ã‚‹å‰ã« 15 分待ã¤ã¨ã„ã†ã“ã¨ã§ã™ã€‚</p>
      
          <div class="note"><p>å†èµ·å‹•ãŒç™ºè¡Œã•れるã¨è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ã®æ§‹æ–‡ãƒã‚§ãƒƒã‚¯ãŒã¾ãšèµ°ã‚Šã€
          設定ファイル㫠(構文上ã®) 誤りãŒãªã„ã‹ãƒã‚§ãƒƒã‚¯ã•れã¾ã™ã€‚
          誤りãŒã‚ã£ãŸå ´åˆã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã§ãã®æ—¨ãŒç¤ºã•れã€ã‚µãƒ¼ãƒã¯å†èµ·å‹•ã•れã¾ã›ã‚“。
          ã“ã†ã™ã‚‹ã“ã¨ã§ã‚µãƒ¼ãƒãŒçµ‚了ã—ã¦ã„ã‚‹ã‘れã©ã‚‚å†èµ·å‹•ã§ããªã„ã¨ã„ã†çжæ³ã‚’
          防ãŽã€ã‚µãƒ¼ãƒãŒæ©Ÿèƒ½ä¸å…¨ãªçŠ¶æ…‹ã«ãªã‚‹ã®ã‚’防ã„ã§ã„ã¾ã™ã€‚</p>
      
          <p>ãŸã ã—ã“れã§ã‚‚サーãƒãŒæ­£ã—ãå†èµ·å‹•ã™ã‚‹ã“ã¨ã¯ä¿è¨¼ã•れã¾ã›ã‚“。
          è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ã®æ„味的ãªå†…容を構文ã¨åŒæ§˜ã«æ¤œè¨¼ã—ãŸã„å ´åˆã¯ã€
          éž root ユーザ㧠<code class="program"><a href="./programs/httpd.html">httpd</a></code> ã‚’èµ·å‹•ã—よã†ã¨ã™ã‚Œã°ã‚ã‹ã‚Šã¾ã™ã€‚
          ã‚‚ã—エラーãŒãªã‘れã°ã€ã‚½ã‚±ãƒƒãƒˆã‚„ログを開ã“ã†ã¨ã—ã¦
          root ã§ãªã„ãŸã‚
          (ã‚‚ã—ãã¯å®Ÿè¡Œä¸­ã® <code class="program"><a href="./programs/httpd.html">httpd</a></code>
          ãŒæ—¢ã«å¿…è¦ãªãƒãƒ¼ãƒˆã«ãƒã‚¤ãƒ³ãƒ‰ã—ã¦ã„ã‚‹ãŸã‚)
          ã«å¤±æ•—ã™ã‚‹ã§ã—ょã†ã€‚
          ã“れ以外ã®ç†ç”±ã§èµ·å‹•ã«å¤±æ•—ã—ãŸã®ã§ã‚れã°ã€
          ãれã¯è¨­å®šãƒ•ァイルã®ã‚¨ãƒ©ãƒ¼ã§ã€
          ç·©ã‚„ã‹ãªå†èµ·å‹•を行ã†å‰ã«ãã®èª¤ã‚Šã‚’修正ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。</p>
          </div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="hup" id="hup">急ãªå†èµ·å‹•</a></h2>
      
      <dl><dt>シグナル: HUP</dt>
      <dd><code>apachectl -k restart</code></dd>
      </dl>
      
          <p><code>HUP</code> ã‚ã‚‹ã„㯠<code>restart</code> シグナルを親プロセスã«é€ã‚‹ã¨ã€
          <code>TERM</code> ã¨åŒæ§˜ã«å­ãƒ—ロセスを kill ã—ã¾ã™ãŒã€
          親プロセスã¯çµ‚了ã—ã¾ã›ã‚“。
          設定ファイルをå†èª­è¾¼ã—ã¦ã€ãƒ­ã‚°ãƒ•ァイル全ã¦ã‚’é–‹ãç›´ã—ã¾ã™ã€‚
          ãã®å¾Œã€æ–°ã—ã„å­ãƒ—ロセスを起動ã—ã¦å¿œç­”ã‚’ç¶šã‘ã¾ã™ã€‚</p>
      
          <p><code class="module"><a href="./mod/mod_status.html">mod_status</a></code>
          を使ã£ã¦ã„ã‚‹å ´åˆã¯ã€<code>HUP</code> ãŒé€ã‚‰ã‚ŒãŸå ´åˆã«
          サーãƒçµ±è¨ˆãŒã‚¼ãƒ­ã«è¨­å®šã•れるã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。</p>
      
          <div class="note">graceful å†èµ·å‹•時ã¯ã€å†èµ·å‹•å‰ã«æ§‹æ–‡ãƒã‚§ãƒƒã‚¯ãŒè¡Œã‚れã¾ã™ã€‚
          ã‚‚ã—æ§‹æ–‡ã‚¨ãƒ©ãƒ¼ãŒã‚れã°ãã®æ—¨ãŒç¤ºã•れã€å†èµ·å‹•ã¯è¡Œã‚れã¾ã›ã‚“。</div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="gracefulstop" id="gracefulstop">ç·©ã‚„ã‹ãªåœæ­¢</a></h2>
      
      <dl><dt>Signal: WINCH</dt>
      <dd><code>apachectl -k graceful-stop</code></dd>
      </dl>
      
          <p><code>WINCH</code> ã‚„ <code>graceful-stop</code> シグナルをå—ã‘å–ã‚‹ã¨ã€
          親プロセスã¯å­ãƒ—ロセスã«ç¾åœ¨å‡¦ç†ä¸­ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®å¾Œã«çµ‚了ã™ã‚‹
          (ã‚ã‚‹ã„ã¯å‡¦ç†ä¸­ã®ã‚‚ã®ãŒä½•ã‚‚ãªã‘れã°ç›´ã¡ã«çµ‚了ã™ã‚‹)
          よã†ã«<em>アドãƒã‚¤ã‚¹</em>ã—ã¾ã™ã€‚
          ãã®å¾Œè¦ªãƒ—ロセス㯠<code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code>
          を削除ã—ã€ãƒãƒ¼ãƒˆã§ã® Listen ã‚’å…¨ã¦åœæ­¢ã—ã¾ã™ã€‚
          親プロセスã¯ã©ã®å­ãƒ—ロセスãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆå‡¦ç†ä¸­ã‹ã‚’監視ã—ç¶šã‘ã¦ã„ã¾ã™ã€‚
          å…¨ã¦ã®å­ãƒ—ロセスãŒçµ‚了ã™ã‚‹ã‹
          <code class="directive"><a href="./mod/mpm_common.html#gracefulshutdowntimeout">GracefulShutdownTimeout</a></code>
          ã§è¨­å®šã—ãŸæ™‚é–“ãŒéŽãŽã‚‹ã¨ã€è¦ªãƒ—ロセスも終了ã—ã¾ã™ã€‚
          タイムアウトã«é”ã—ãŸå ´åˆã€æ®‹ã‚Šã®å­ãƒ—ロセスã«ã¯ <code>TERM</code>
          シグナルãŒé€ä¿¡ã•れ強制的ã«çµ‚了ã•れã¾ã™ã€‚</p>
          
          <p>"graceful" 状態ã®å ´åˆ <code>TERM</code> シグナルをå—ã‘å–ã‚‹ã¨ã€
          親プロセスもå­ãƒ—ロセスもã™ãã«çµ‚了ã—ã¾ã™ã€‚ã—ã‹ã—ãªãŒã‚‰
          <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code>
          ãŒå‰Šé™¤ã•れã¦ã—ã¾ã£ã¦ã„ã‚‹ã®ã§ã€<code>apachectl</code>
          ã‚„ <code>httpd</code> ã«ã“ã®ã‚·ã‚°ãƒŠãƒ«ã‚’é€ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“。</p>
      
          <div class="note"><p><code>graceful-stop</code> を使ã†ã¨ã¾ã£ãŸãåŒä¸€ã«è¨­å®šã•れãŸ
          複数㮠<code class="program"><a href="./programs/httpd.html">httpd</a></code> ã‚’åŒæ™‚ã«å®Ÿè¡Œã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          httpd ã‚’ç·©ã‚„ã‹ã«ã‚¢ãƒƒãƒ—グレードã™ã‚‹ã®ã«ã¯ã¨ã¦ã‚‚便利ã§ã™ãŒã€
          設定ファイルã«ã‚ˆã£ã¦ã¯ãƒ‡ãƒƒãƒ‰ãƒ­ãƒƒã‚¯ã‚„レースコンディションを
          引ãèµ·ã“ã™ã“ã¨ã‚‚ã‚りã¾ã™ã€‚</p>
      
          <p>ディスク上ã®ãƒ•ァイルを使ã†ã‚‚ã®ã€ãŸã¨ãˆã°ãƒ­ãƒƒã‚¯ãƒ•ァイル
          (<code class="directive"><a href="./mod/core.html#mutex">Mutex</a></code>) や Unix ソケットファイル
          (<code class="directive"><a href="./mod/mod_cgid.html#scriptsock">ScriptSock</a></code>) 
          ãªã©ã¯ã‚µãƒ¼ãƒã® PID ã‚’å«ã‚ã¦ç®¡ç†ã•れã¦ã„ã¦ã€
          共存ã§ãã‚‹ã‚ˆã†æ³¨æ„ãŒæ‰•ã‚れã¦ã„ã¾ã™ã€‚
          ã—ã‹ã—ãã®ä»–設定ディレクティブやサードパーティ製ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã€
          CGI ユーティリティã®ãƒ‘ーシステント層ãªã©ã§
          ディスク上ã«ãƒ­ãƒƒã‚¯ãƒ•ァイルや状態管ç†ãƒ•ァイルを
          使ã£ã¦ã„ã‚‹å ´åˆã¯ã€å®Ÿè¡Œã•れã¦ã„る複数㮠<code class="program"><a href="./programs/httpd.html">httpd</a></code>
          ãŒäº’ã„ã«è¡çªã—ãªã„よã†ã«æ°—ã‚’ã¤ã‘ãªã‘れã°ãªã‚Šã¾ã›ã‚“。</p>
      
          <p><code class="program"><a href="./programs/rotatelogs.html">rotatelogs</a></code> å½¢å¼ã®ãƒ‘イプを使ã£ãŸãƒ­ã‚°ã¨ã„ã£ãŸã€
          ãã®ä»–潜在的ãªãƒ¬ãƒ¼ã‚¹ã‚³ãƒ³ãƒ‡ã‚£ã‚·ãƒ§ãƒ³ã«ã¤ã„ã¦ã‚‚注æ„ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。
          複数㮠<code class="program"><a href="./programs/rotatelogs.html">rotatelogs</a></code> ãŒåŒã˜ãƒ•ã‚¡ã‚¤ãƒ«ã‚’åŒæ™‚ã«
          rotate ã—よã†ã¨ã™ã‚‹ã¨ã€äº’ã„ã«ãƒ­ã‚°ãƒ•ァイルを破壊ã—ã¦ã—ã¾ã„ã¾ã™ã€‚</p>
          </div>
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./de/stopping.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/stopping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/stopping.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/stopping.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/stopping.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/stopping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/stopping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/stopping.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������httpd-2.4.41/docs/manual/bind.html.de���������������������������������������������������������������0000644�0000000�0000050�00000035764�13412755316�015660� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="de" xml:lang="de"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>An Adressen und Ports binden - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP-Server</a> &gt; <a href="http://httpd.apache.org/docs/">Dokumentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>An Adressen und Ports binden</h1>
      <div class="toplang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/bind.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/bind.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/bind.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/bind.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/bind.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/bind.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">Diese Übersetzung ist möglicherweise
                  nicht mehr aktuell. Bitte prüfen Sie die englische Version auf
                  die neuesten Änderungen.</div>
      
          <p>Konfiguration der vom Apache HTTP Server verwendeten Adressen und
          Ports.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#overview">Überblick</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#ipv6">Betrachtung von IPv6-Besonderheiten</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#protocol">Angabe des Protokolls bei Listen</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#virtualhost">Das Zusammenspiel mit virtuellen Hosts</a></li>
      </ul><h3>Siehe auch</h3><ul class="seealso"><li><a href="vhosts/">Virtuelle Hosts</a></li><li><a href="dns-caveats.html">Probleme bezüglich DNS und
          Apache</a></li><li><a href="#comments_section">Kommentare</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">Überblick</a></h2>
          
      
          <table class="related"><tr><th>Referenzierte Module</th><th>Referenzierte Direktiven</th></tr><tr><td><ul><li><code class="module"><a href="./mod/core.html">core</a></code></li><li><code class="module"><a href="./mod/mpm_common.html">mpm_common</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code></li></ul></td></tr></table>
      
          <p>Beim Start bindet sich der httpd an bestimmte Adressen und Ports
          der lokalen Maschine und wartet auf eingehende Anfragen.
          Standardmäßig lauscht er an allen Adressen des Systems.
          Es kann jeodch notwendig sein, ihm mit zuteilen, nur an bestimmten
          Ports zu lauschen oder nur an ausgewählten Adressen, bzw. einer
          Kombination aus beidem. Dies wird oft mit der Funktionalität <a href="vhosts/">virtueller Hosts</a> kombiniert, die bestimmt, wie
          der <code>httpd</code> auf verschiedene IP-Adressen, Hostnamen und
          Ports reagiert.</p>
      
          <p>Die Direktive <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
          weist den Server an, eingehende Anfragen nur an bestimmten Port(s)
          oder Adress/Port-Kombinationen zu akzeptieren. Wenn bei der
          <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>-Direktive nur eine
          Portnummer angegeben wird, dann lauscht der Server auf allen
          Netzwerkinterfaces an dem angegebenen Port. Ist auch eine IP-Adresse
          angegeben, dann lauscht der Server an der angegebenen Schnittstelle
          auf dem angegebenen Port.  Es können mehrere <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>-Anweisungen verwendet werden,
          um eine Reihe von Adressen und Ports anzugeben, an denen gelauscht
          werden soll. Der Server wird dann auf Anfragen an jeder der
          abgehörten Adressen und Ports antworten.</p>
      
          <p>Um beispielsweise den Server zu veranlassen, auf allen
          Netzwerkinterfaces sowohl an Port 80, als auch an Port 8000
          Verbindungen zu akzeptieren, geben Sie an:</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 80
      Listen 8000</pre>
      </div>
      
          <p>Um den Server Verbindungen an Port 80 auf einem Netzwerkinterface
          akzeptieren zu lassen und an Port 8080 auf einem anderen Interface, geben
          Sie an:</p>
            
          <div class="example"><pre class="prettyprint lang-config">Listen 192.0.2.1:80
      Listen 192.0.2.5:8000</pre>
      </div>
      
          <p>IPv6-Adressen müssen wie im folgenden Beispiel in eckigen
            Klammern angegeben werden:</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen [2001:db8::a00:20ff:fea7:ccea]:80</pre>
      </div>
      
          <div class="warning"><p>Sich überlappende <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>-Direktiven generieren einen
          fatalen Fehler, der verhindert, dass der Server hochfährt.</p>
      
          <div class="example"><p><code>
            (48)Address already in use: make_sock: could not bind to address [::]:80
          </code></p></div>
      
          <p><a href="http://wiki.apache.org/httpd/CouldNotBindToAddress">Diese
          Diskussion im Wiki</a> gibt weitere Tipps zur Fehlerbehebung.</p>
          </div>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ipv6" id="ipv6">Betrachtung von IPv6-Besonderheiten</a></h2>
          
      
          <p>Eine wachsende Anzahl von Plattformen implementiert IPv6. Die
          <a class="glossarylink" href="./glossary.html#apr" title="siehe Glossar">APR</a> unterstützt IPv6 auf den meisten
          dieser Plattformen und ermöglicht dem httpd, IPv6-Sockets zu
          verwenden und über IPv6 gesendete Anfragen zu behandeln.</p>
      
          <p>Für httpd-Administratoren kommt erschwerend die Frage hinzu,
          ob IPv6-Sockets sowohl IPv4- als auch IPv6-Verbindungen handhaben
          können. Zum Betrieb von IPv4-Verbindungen an IPv6-Sockets
          werden auf IPv6 abgebildete IPv4-Adressen <span class="transnote">(<em>Anm.d.Ü.:</em> so genannete
          IPv4-gemappte IPv6-Adressen)</span> verwendet, welche
          standardmäßig auf den meisten Plattformen erlaubt sind.
          Unter FreeBSD, NetBSD und OpenBSD jedoch sind sie
          standardmäßig deaktiviert, um den Systemgrundsätzen
          dieser Plattformen zu entsprechen. Auf Systemen, wo dies
          standardmäßig dekativiert ist, kann dieses Verhalten mit
          einem speziellen <code class="program"><a href="./programs/configure.html">configure</a></code>-Parameter für den
          httpd geändert werden.</p>
      
          <p>Auf der anderen Seite ist die Verwendung von gemappten Adressen
          bei einigen Plattformen wie Linux und True64 der
          <strong>einzige</strong> Weg, sowohl IPv4 wie auch IPv6 zu
          verwenden. Wenn Sie möchten, dass der <code>httpd</code> IPv4-
          und IPv6-Verbindungen mit einem Minimum an Sockets behandelt, was
          die Verwendung von IPv4-gemappten IPv6-Adressen erfordert, dann
          müssen Sie die <code class="program"><a href="./programs/configure.html">configure</a></code>-Option
          <code>--enable-v4-mapped</code> angeben.</p>
      
          <p><code>--enable-v4-mapped</code> ist die Voreinstellung auf allen
          Plattformen außer FreeBSD, NetBSD und OpenBSD, so dass Ihr
          httpd wahrscheinlich so übersetzt wurde.</p>
      
          <p>Geben Sie wie in dem folgenden Beispiel bei allen <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>-Anweisungen eine IPv4-Adresse
          an, wenn Sie möchten, dass Ihr httpd lediglich IPv4-Adressen
          behandelt, unabhängig davon, was Ihre Plattform und die APR
          unterstützen:</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 0.0.0.0:80
      Listen 192.0.2.1:80</pre>
      </div>
      
          <p>Wenn Sie möchten, dass der httpd IPv4- und IPv6-Verbindungen
          an separaten Sockets behandelt (d.h. IPv4-gemappte Adressen
          deaktiviert werden sollen) und Ihre Plattform es unterstützt,
          dann müssen Sie die <code class="program"><a href="./programs/configure.html">configure</a></code>-Option
          <code>--disable-v4-mapped</code> angeben.  Unter FreeBSD, NetBSD und
          OpenBSD ist <code>--disable-v4-mapped</code> voreingestellt.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="protocol" id="protocol">Angabe des Protokolls bei Listen</a></h2>
          
          <p>Das optionale zweite <var>Protokoll</var>-Argument von <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> ist für die meisten
          Konfigurationen gar nicht erforderlich. Wenn nicht angegeben, sind
          <code>https</code> für Port 443 und <code>http</code> für
          alle anderen Ports die Voreinstellungen. Die Protokollangabe wird
          sowohl dazu verwendet, herauszufinden, welches Modul Anfragen
          verarbeiten soll, als auch, um protokollspezifische Optimierungen
          bei der <code class="directive"><a href="./mod/core.html#acceptfilter">AcceptFilter</a></code>-Direktive
          zu aktivieren.</p>
      
          <p>Sie müssen das Protokoll nur angeben, wenn Sie
          ungewöhnliche Ports benutzen, beispielsweise <code>https</code>
          auf Port 8443:</p>
      
          <div class="example"><pre class="prettyprint lang-config">Listen 192.170.2.1:8443 https</pre>
      </div>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="virtualhost" id="virtualhost">Das Zusammenspiel mit virtuellen Hosts</a></h2>
          
      
          <p>Die Direktive <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
          implementiert keine virtuellen Hosts - sie teilt dem Hauptserver
          lediglich mit, an welchen Adressen und Ports er zu lauschen hat.
          Werden keine <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>-Container verwendet, dann
          verhält sich der Server bei allen angenommenen Anfragen gleich.
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>-Abschnitte können jedoch
          dazu verwendet werden, ein unterschiedliches Verhalten für eine
          oder mehrere Adressen und Ports festzulegen. Um einen virtuellen
          Host einzurichten, muss dem Server zunächst mitgeteilt werden,
          an den betreffenden Adressen oder Ports zu lauschen. Dann sollte ein
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>-Abschnitt für die
          angebene Adresse und den angegebenen Port erstellt werden, um das
          Verhalten dieses virtuellen Hosts festzulegen. Beachten Sie bitte,
          dass auf einen <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> nicht zugegriffen werden
          kann, wenn er für eine Adresse und einen Port eingerichtet
          wurde, an dem der Server nicht lauscht.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/bind.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/bind.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/bind.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/bind.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/bind.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/bind.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Kommentare</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/bind.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Lizenziert unter der <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������httpd-2.4.41/docs/manual/index.html�����������������������������������������������������������������0000644�0000000�0000050�00000001605�13362070302�015434� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: index.html.da
      Content-Language: da
      Content-type: text/html; charset=ISO-8859-1
      
      URI: index.html.de
      Content-Language: de
      Content-type: text/html; charset=ISO-8859-1
      
      URI: index.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: index.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: index.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: index.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: index.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: index.html.pt-br
      Content-Language: pt-br
      Content-type: text/html; charset=ISO-8859-1
      
      URI: index.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      
      URI: index.html.zh-cn.utf8
      Content-Language: zh-cn
      Content-type: text/html; charset=UTF-8
      ���������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/install.html.tr.utf8�������������������������������������������������������0000644�0000000�0000050�00000072101�13447004010�017300� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Derleme ve Kurulum - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Derleme ve Kurulum</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./de/install.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/install.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/install.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/install.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/install.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/install.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/install.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Bu belge Apache HTTP Sunucusunun sadece Unix ve Unix benzeri
            sistemlerde derlenmesini ve kurulmasını kapsar. Windows üzerinde
            derleme ve kurulum için <a href="platform/windows.html">Apache HTTP
            Sunucusunun Microsoft Windows ile kullanımı</a> ve <a href="platform/win_compiling.html">Apache HTTP
            Sunucusunun Microsoft Windows için Derlenmesi</a> bölümüne bakınız.
            Diğer platformlar için ise <a href="platform/">platform</a>
            belgelerine bakınız.</p>
      
          <p>Apache HTTP Sunucusunun, derleme ortamını oluşturmak için çoğu Açık
            Kaynak Kodlu projenin yaptığı gibi <code>libtool</code> ve
            <code>autoconf</code> kullanır.</p>
      
          <p>Eğer sadece sürüm yükseltiyorsanız (2.4.9’dan 2.4.10’a yükseltmek
            gibi) lütfen doğrudan <a href="#upgrading">Yükseltme</a> bölümüne
            atlayınız.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#overview">Tez canlılar için genel bir bakış</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#requirements">Gereksinimler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#download">İndirme</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#extract">Paketi açma</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#configure">Kaynak ağacının yapılandırılması</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#compile">Derleme</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#install">Kurulum</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#customize">KiÅŸiselleÅŸtirme</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#test">Deneme</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#upgrading">Yükseltme</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#thirdp">Üçüncü parti paketler</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="programs/configure.html">Kaynak ağacının yapılandırılması</a></li><li><a href="invoking.html">Apache httpd’nin başlatılması</a></li><li><a href="stopping.html">Durdurma ve yeniden başlatma</a></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">Tez canlılar için genel bir bakış</a></h2>
          <dl>
          <dt>Fedora/CentOS/Red Hat Enterprise Linux üzerinde kurulum</dt>
          <dd>
          <pre class="prettyprint lang-">sudo yum install httpd
      sudo systemctl enable httpd
      sudo systemctl start httpd</pre>
      
      
          <div class="warning">Bu dağıtımların yeni sürümlerinde <code>yum</code> 
          yerine <code>dnf</code> kullanılmaktadır.<code>yum</code>. Daha ayrıntılı 
          bilgi için <a href="https://fedoraproject.org/wiki/Apache_HTTP_Server">Fedora projesinin 
          belgelerine</a> bakınız.</div>
          </dd>
      
          <dt>Ubuntu/Debian üzerinde kurulum</dt>
          <dd>
      <pre class="prettyprint lang-">sudo apt install apache2
      sudo service apache2 start</pre>
      
      
          <div class="warning">Daha ayrıntılı bilgi için <a href="https://help.ubuntu.com/lts/serverguide/httpd.html">Ubuntu 
          belgelerine</a> bakınız.</div>
      
          </dd>
      
          <dt>Kaynak koddan kurulum</dt>
          <dd>
          <table>
            
            <tr>
              <td><a href="#download">İndirme</a></td>
      
              <td><a href="http://httpd.apache.org/download.cgi#apache24">http://httpd.apache.org/download.cgi</a> adresinden en son 
                dağıtımı indirin.
      
              </td>
            </tr>
      
            <tr>
              <td><a href="#extract">Paketi açma</a></td>
      
              <td><code>$ gzip -d httpd-<em>NN</em>.tar.gz<br />
               $ tar xvf httpd-<em>NN</em>.tar<br />
               $ cd httpd-<em>NN</em></code></td>
            </tr>
      
            <tr>
              <td><a href="#configure">Yapılandırma</a></td>
      
              <td><code>$ ./configure --prefix=<em>ÖNEK</em></code>
              </td>
            </tr>
      
            <tr>
              <td><a href="#compile">Derleme</a></td>
      
              <td><code>$ make</code> </td>
            </tr>
      
            <tr>
              <td><a href="#install">Kurulum</a></td>
      
              <td><code>$ make install</code> </td>
            </tr>
      
            <tr>
              <td><a href="#customize">KiÅŸiselleÅŸtirme</a></td>
      
              <td><code>$ vi <em>ÖNEK</em>/conf/httpd.conf</code> </td>
            </tr>
      
            <tr>
              <td><a href="#test">Deneme</a></td>
      
              <td><code>$ <em>ÖNEK</em>/bin/apachectl -k start</code>
              </td>
            </tr>
          </table>
      
          <p><em>NN</em> yerine kuracağınız sürümü, <code><em>ÖNEK</em></code>
            yerine de dosya sisteminde sunucunun altına kurulacağı dizin yolunu
            yazınız. <code><em>ÖNEK</em></code> belirtilmezse
            <code>/usr/local/apache2</code> öntanımlıdır.</p>
      
          <p>Derleme ve kurulum işleminin her aşaması, Apache HTTPd Sunucusunun
            derlenmesi ve kurulması için gerekenler başta olmak üzere aşağıda
            ayrıntılı olarak açıklanmıştır.</p>
          </dd>
          </dl>
      
          <div class="warning">Kullandığınız platformu burada göremiyor musunuz?
          <a href="http://httpd.apache.org/docs-project/">Bu belgeleri geliÅŸtirmek 
           için gelin bize yardımcı olun.</a></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="requirements" id="requirements">Gereksinimler</a></h2>
      
          <p>Apache httpd’yi derleyebilmek için şunlar mevcut olmalıdır:</p>
      
          <dl>
            <dt>APR ve APR-Util</dt>
            <dd>APR ve APR-Util'in sisteminizde kurulu olduÄŸundan emin olun. Kurulu
              değilse veya sisteminizce sağlanmış sürümlerini kullanmak
              istemiyorsanız APR ve APR-Util'in ikisini birden <a href="http://apr.apache.org/">Apache APR</a>'den indirin ve onları
              Apache httpd dağıtımını açtığınız dizinin altında
              <code>/httpd_kaynakkod_kök_dizini/srclib/apr</code> ve
              <code>/httpd_kaynakkod_kök_dizini/srclib/apr-util</code> dizinlerine
              açın (Dizin isimlerinin sürüm numarası içermemesine dikkat edin,
              örneğin, APR dağıtımı
              <code>/httpd_kaynakkod_kök_dizini/srclib/apr/</code> altında olsun.)
              ve <code>./configure</code> betiÄŸinin <code>--with-included-apr</code>
              seçeneğini kullanın. Bazı platformlarda, httpd'nin, kurulu APR ve
              APR-Util kopyanıza karşın derlenmesini sağlamak için ilgili
              <code>-dev</code> paketlerini kurmanız gerekebilir.</dd>
      
            <dt>Perl-Uyumlu Düzenli İfade Kütüphanesi (PCRE)</dt>
            <dd>Bu kütüphane gereklidir, ancak artık httpd ile birlikte
              dağıtılmamaktadır. Kaynak kodunu <a href="http://www.pcre.org/">http://www.pcre.org</a> sitesinden indirin ve bir port veya paket
              olarak kurun. Eğer derleme sisteminiz PCRE kurulumunuz tarafından
              kurulan <code>pcre-config</code> betiÄŸini bulamazsa
              <code>--with-pcre</code> seçeneğini kullanarak yerini belirtin. Bazı
              platformlarda, httpd'nin, kurulu PCRE kopyanıza karşın derlenmesini
              sağlamak için ilgili <code>-dev</code> paketlerini kurmanız
              gerekebilir.</dd>
      
            <dt>Disk Alanı</dt>
            <dd>Geçici olarak en azından 50 MB boş disk alanınız olduğundan emin
              olunuz. Kurulumdan sonra sunucu yaklaşık 10 MB disk alanı kaplıyor
              olacaktır. Asıl disk alanı gereksinimi seçtiğiniz yapılandırma
              seçeneklerine, üçüncü parti modüllere ve şüphesiz sitenizin veya sunucu
              üzerindeki sitelerin boyutlarına göre değişiklik
              gösterecektir.</dd>
      
            <dt>ANSI-C Derleyici ve Derleme Sistemi</dt>
            <dd>Bir ANSI-C derleyicinin kurulu olduÄŸundan emin olunuz. <a href="http://www.gnu.org/">Free Software Foundation (FSF)</a>
              tarafından dağıtılan <a href="http://gcc.gnu.org/">GNU C derleyicisini
              (GCC)</a> kullanmanız önerilir. GCC yoksa en azından satıcınızın
              derleyicisinin ANSI uyumlu olduğundan emin olunuz. Ayrıca,
              <code>PATH</code> ortam değişkeninizin içerdiği yollarda
              <code>make</code> gibi temel derleme araçları da bulunmalıdır.</dd>
      
            <dt>Zamanın doğru belirlenmesi</dt>
            <dd>HTTP protokolünün elemanları sunuldukları tarih ve saate göre ifade
              edilirler. Bu bakımdan sisteminizdeki zaman ayarlama oluşumunun
              ayarlarını gözden geçirmenizin tam sırasıdır. Bu amaçla, Ağ Zaman
              Protokolüne (NTP) göre çalışan <code>ntpdate</code> veya
              <code>xntpd</code> programları kullanılır. NTP yazılımları ve halka
              açık zaman sunucuları hakkında daha ayrıntılı bilgi için <a href="http://www.ntp.org">NTP sitesine bakınız</a>.</dd>
      
            <dt><a href="http://www.perl.org/">Perl 5</a> [SEÇİMLİK]</dt>
            <dd>Perl ile yazılmış <code class="program"><a href="./programs/apxs.html">apxs</a></code> veya
              <code class="program"><a href="./programs/dbmmanage.html">dbmmanage</a></code> gibi bazı betikleri desteklemek için
              Perl 5 yorumlayıcısı gerekir (5.003 veya daha yeni sürümleri
              yeterlidir). EÄŸer <code class="program"><a href="./programs/configure.html">configure</a></code> betiÄŸi sisteminizde
              Perl 5 yorumlayıcısı
              bulamazsa bu betikleri kullanamazsınız. Ancak, bu durum Apache
              HTTPd’nin derlenip kurulmasına engel değildir.</dd>
          </dl>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="download" id="download">İndirme</a></h2>
      
          <p>Apache HTTP Sunucusunu, çeşitli yansıların da listelendiği <a href="http://httpd.apache.org/download.cgi">Apache HTTP Sunucusu
            indirme sayfasından</a> indirebilirsiniz. Unix benzeri sistemler
            kullanan Apache HTTPd kullanıcılarının kaynak paketlerinden birini
            indirip derlemeleri daha iyi olacaktır. Derleme işlemi (aşağıda
            açıklanmıştır) kolaydır ve sunucunuzu ihtiyaçlarınıza uygun olarak
            kişiselleştirmenize imkan tanır. Ayrıca, hazır derlenmiş paketler
            çoğunlukla en son kaynak sürüm kadar güncel değildirler. Eğer böyle bir
            paket indirmişseniz, kurarken paketin içinde bulunan
            <code>INSTALL.bindist</code> dosyasındaki talimatlara uyunuz.</p>
      
          <p>İndirme işleminin ardından Apache HTTP Sunucusunun eksiksiz ve
            değişikliğe uğramamış olduğunun doğrulanması önemlidir. Bu indirilen
            tar paketinin PGP imzasına göre sınanması ile sağlanabilir. Bunun nasıl
            yapılacağı <a href="http://httpd.apache.org/download.cgi#verify">indirme
            sayfasında</a> anlatıldığı gibi <a href="http://httpd.apache.org/dev/verification.html">PGP
            kullanımının</a> anlatıldığı daha geniş bir örnek de vardır.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="extract" id="extract">Paketi açma</a></h2>
      
          <p>Apache HTTP Sunucusu tar paketinden sıkıştırmayı kaldırdıktan sonra tar
            arşivinden dosyaları çıkarmak basit bir işlemdir:</p>
      
          <div class="example"><p><code>
            $ gzip -d httpd-<em>NN</em>.tar.gz<br />
            $ tar xvf httpd-<em>NN</em>.tar
          </code></p></div>
      
          <p>Bu işlem bulunduğunuz dizinin içinde dağıtımın kaynak dosyalarını
            içeren yeni bir dizin oluşturacaktır. Sunucuyu derleme işlmine
            başlayabilmek için önce <code>cd</code> ile bu dizine geçmelisiniz.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configure" id="configure">Kaynak ağacının yapılandırılması</a></h2>
      
          <p>Sonraki adım, Apache HTTPd kaynak ağacının platformunuza ve kişisel
            gereksinimlerinize uygun olarak yapılandırılmasıdır. Bu işlem dağıtımın
            kök dizininde bulunan <code class="program"><a href="./programs/configure.html">configure</a></code> betiği kullanılarak
            yapılır. (Apache HTTPd kaynak ağacının resmen dağıtıma girmemiş bir
            sürümünü indiren geliştiricilerin sistemlerinde <code>autoconf</code> ve
            <code>libtool</code> kurulu olması ve sonraki adıma geçmek için
            <code>buildconf</code> çalıştırmaları gerekir. Bu işlem resmi
            dağıtımlar için gerekli değildir.)</p>
      
          <p>Kaynak ağacını tamamen öntanımlı seçenekler kullanılarak derlemek için
            <code>./configure</code> komutunu vermek yeterlidir. Öntanımlı
            seçenekleri değiştirmek için <code class="program"><a href="./programs/configure.html">configure</a></code> betiği
            çeşitli değişkenler ve komut satırı seçenekleri kabul eder.</p>
      
          <p>En önemli seçenek, Apache HTTP Sunucusunun kurulacağı yerin
            belirlenmesini, dolayısıyla Apache’nin bu konumda doğru olarak
            çalışması için yapılandırılmasını sağlayan <code>--prefix</code>’tir.
            Kurulacak dosyaların yerleri ile ilgili daha ayrıntılı denetim ek <a href="programs/configure.html#installationdirectories">yapılandırma
            seçenekleri</a> ile mümkün kılınmıştır.</p>
      
          <p>Bu noktada ayrıca, Apache HTTPd’de hangi özelliklerin bulunmasını
            istediğinizi <a href="mod/">modülleri</a> etkin kılarak veya iptal
            ederek belirtebilirsiniz. Apache, öntanımlı olarak içerilmiş pek çok
            modülle gelir. Bunlar çalışma anında devereye sokulup çıkarılabilen <a href="dso.html">paylaşımlaı nesneler (DSO'lar)</a> olarak derlenebilir.
            Ayrıca, istediğiniz modülleri derleme sırasında
            <code>--enable-<var>module</var>=static</code> seçeneğini kullanarak
            durağan olarak derleyebilirsiniz. Ek modüller <code>--enable-
            <var>modül</var></code> seçenekleri kullanılarak etkinleştirilir.
            Buradaki <code><var>modül</var></code>, önünden <code>mod_</code> dizgesi
            kaldırılmış ve içindeki altçizgi imleri tire imleri ile değiştirilmiş
            modül ismidir. Temel modülleri de benzer şekilde
            <code>--disable-<var>modül</var></code> seçenekleriyle iptal
            edebilirsiniz. <code class="program"><a href="./programs/configure.html">configure</a></code> betiÄŸi mevcut olmayan
            modüller için sizi uyarmayıp, seçeneği yok saymakla yetineceğinden, bu
            seçenekleri kullanırken dikkatli olmalısınız.</p>
      
          <p>Ek olarak, bazen kullandığınız derleyici, kütüphaneler veya başlık
            dosyalarının yerleri hakkında <code class="program"><a href="./programs/configure.html">configure</a></code> betiğine
            ilave bilgiler sağlamanız gerekir. Bu işlem
            <code class="program"><a href="./programs/configure.html">configure</a></code> betiÄŸine ya ortam deÄŸiÅŸkenleriyle ya da
            komut satırı seçenekleriyle bilgi aktarılarak yapılır. Daha fazla bilgi
            için <code class="program"><a href="./programs/configure.html">configure</a></code> kılavuz sayfasına bakınız.</p>
      
          <p>Apache’yi derlerken ne gibi olasılıklara sahip olduğunuz hakkında bir
            izlenim edinmeniz için aşağıda tipik bir örneğe yer verilmiştir. Bu
            örnekte, Apache’nin <code>/sw/pkg/apache</code> önekiyle başlayan
            dizinlere kurulması, belli bir derleyici ve derleyici seçenekleriyle
            derlenmesi ve <code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code> ve
            <code class="module"><a href="./mod/mod_lua.html">mod_lua</a></code>modüllerinin de DSO mekanizması üzerinden
            daha sonra yüklenmek üzere derlenmesi istenmektedir:</p>
      
          <div class="example"><p><code>
            $ CC="pgcc" CFLAGS="-O2" \<br />
             ./configure --prefix=/sw/pkg/apache \<br />
             --enable-ldap=shared \<br />
             --enable-lua=shared
          </code></p></div>
      
          <p><code class="program"><a href="./programs/configure.html">configure</a></code> betiği başlatıldığında sisteminizde
            mevcut özelliklerin işe yararlığını sınamak ve sonradan sunucuyu
            derlemek için kullanılacak Makefile dosyalarını oluşturmak için bir kaç
            dakika çalışacaktır.</p>
      
          <p><code class="program"><a href="./programs/configure.html">configure</a></code> seçeneklerinin tamamı ayrıtılı olarak
            <code class="program"><a href="./programs/configure.html">configure</a></code> kılavuz sayfasında açıklanmıştır.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="compile" id="compile">Derleme</a></h2>
      
          <p>Artık, Apache HTTPd paketini şekillendiren çeşitli parçaları derlemek
            için basitçe aşağıdaki komutu verebilirsiniz:</p>
      
          <div class="example"><p><code>$ make</code></p></div>
      
          <p>Bu komutu verdikten sonra lütfen sabırlı olunuz. Temel yapılandırmanın
            derlenmesi bir kaç dakika alsa da modüllerin derlenmesi donanımınıza ve
            seçtiğiniz modüllerin sayısına bağlı olarak daha uzun süre
            gerektirecektir.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="install" id="install">Kurulum</a></h2>
      
          <p>Şimdi sıra <code><em>ÖNEK</em></code> dizini altına kurulmak üzere
            yapılandırdığınız (yukarı <code>--prefix</code> seçeneğine bakınız)
            paketi kurmaya geldi. Basitçe şu komutu veriniz:</p>
      
      <div class="example"><p><code># make install</code></p></div>
      
          <p><code><em>ÖNEK</em></code> dizininde genellikle yazma izinlerinin
            sınırlı oluşu nedeniyle bu adım genellikle root yetkilerini
            gerektirir.</p>
      
          <p>Eğer sürüm yükseltiyorsanız, kurulum sırasında mevcut yapılandırma
            dosyalarının ve belgelerin üzerine yazılmayacaktır.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="customize" id="customize">KiÅŸiselleÅŸtirme</a></h2>
      
          <p>Bu adımda, Apache HTTP Sunucunuzu <code><em>ÖNEK</em>/conf/</code>
            dizini altındaki <a href="configuring.html">yapılandırma
            dosyalarını</a> düzenleyerek kişiselleştirebilirsiniz.</p>
      
          <div class="example"><p><code>$ vi <em>ÖNEK</em>/conf/httpd.conf</code></p></div>
      
          <p>Bu kılavuz ve kullanılabilecek <a href="mod/directives.html">yapılandırma yönergelerinin</a> kılavuzlarını
            <code><em>ÖNEK</em>/<a href="./">docs/manual/</a></code> altında
            bulabileceğiniz gibi en son sürümünü daima <a href="http://httpd.apache.org/docs/2.4/">http://httpd.apache.org/docs/2.4/</a> adresinde
            bulabilirsiniz.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="test" id="test">Deneme</a></h2>
      
          <p>Artık Apache HTTP Sunucunuzu <a href="invoking.html">başlatmaya</a>
            hazırsınız. Hemen şu komutu verin:</p>
      
          <div class="example"><p><code>$ <em>ÖNEK</em>/bin/apachectl -k start</code></p></div>
      
          <p><code>http://localhost/</code> üzerinden ilk belgeniz için bir istek
            yapmalısınız. Genellikle <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> olarak bilinen
            <code><em>ÖNEK</em>/htdocs/</code> altındaki sayfayı görürsünüz.
            Çalışmakta olan sunucuyu <a href="stopping.html">durdurmak</a> için şu
            komutu verebilirsiniz:</p>
      
          <div class="example"><p><code>$ <em>ÖNEK</em>/bin/apachectl -k stop</code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="upgrading" id="upgrading">Yükseltme</a></h2>
      
          <p>Sürüm yükseltme işleminin ilk adımı, sitenizi etkileyen değişiklikleri
            öğrenmek için dağıtım duyurusunu ve kaynak paketindeki
            <code>CHANGES</code> dosyasını okumaktır. Ana sürümlerden yükseltme
            yapıyorsanız (2.0’ten 2.2’ye veya 2.2’den 2.4’e gibi), derleme anı ve
            çalışma anı yapılandırmalarındaki ana farklılıklar elle ayarlamalar
            yapmanızı gerektirecektir. Ayrıca, tüm modüllerin de modül API’sindeki
            değişikliklere uyum sağlaması için yükseltilmesi gerekecektir.</p>
      
          <p>Aynı ana sürüm içinde yükseltme yapmak (2.2.55’ten 2.2.57’ye
            yükseltmek gibi) daha kolaydır. <code>make install</code> işlemi,
            mevcut yapılandırma ve günlük dosyalarınızın ve belgelerin üzerine
            yazmayacaktır. Ek olarak, geliştiriciler alt sürüm değişikliklerinde
            <code class="program"><a href="./programs/configure.html">configure</a></code> seçenekleri, çalışma anı yapılandırması
            veya modül API’sinde uyumsuz değişiklikler yapmamaya özen
            göstereceklerdir. Çoğu durumda, aynı <code class="program"><a href="./programs/configure.html">configure</a></code> komut
            satırını, aynı yapılandırma dosyasını kullanabileceksiniz ve tüm
            modülleriniz de çalışmaya devam edebilecektir.</p>
      
          <p>Aynı ana sürüm içinde yükseltme işlemine, eski kaynak ağacının kök
            dizininde veya kurulu sunucunuzun <code>build</code> dizininde
            bulacağınız <code>config.nice</code> dosyasını yeni kaynak ağacının kök
            dizinine kopyalamak suretiyle baÅŸlayabilirsiniz. Bu dosya evvelce
            kaynak ağacını yapılandırmakta kullandığınız
            <code class="program"><a href="./programs/configure.html">configure</a></code> komut satırını içerir.
            <code>config.nice</code> dosyasında yapmak istediğiniz değişiklikler
            varsa yaptıktan sonra şu komutları veriniz:</p>
      
          <div class="example"><p><code>
          $ ./config.nice<br />
          $ make<br />
          $ make install<br />
          $ <em>ÖNEK</em>/bin/apachectl -k graceful-stop<br />
          $ <em>ÖNEK</em>/bin/apachectl -k start<br />
          </code></p></div>
      
          <div class="warning">Her yeni sürümü hizmete sokmadan önce daima çalışma
            ortamınızda denemeniz gerekir. Örneğin, yükseltme işlemini
            sonuçlandırmadan önce eski sürümün çalışmasını durdurmadan yenisini
            farklı bir <code>--prefix</code> ile kurabilir ve farklı bir port ile
            (<code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> yönergesini
            ayarlamak suretiyle) çalıştırabilirsiniz.</div>
      
          <p>Özgün <code class="program"><a href="./programs/configure.html">configure</a></code> seçeneklerinizi değiştirmek veya
            yeni seçenekler eklemek isterseniz bunları <code>config.nice</code>
            betiğine komut satırı argümanları olarak belirtebilirsiniz:</p>
      
          <div class="example"><p><code>
          $ ./config.nice --prefix=/home/dnm/apache --with-port=90
          </code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="thirdp" id="thirdp">Üçüncü parti paketler</a></h2>
      
          <p>Üçüncü partilerin çoğunun, Apache HTTP Sunucusunun belli bir platforma
            kurulumu için paketlenmiş kendi dağıtımları vardır. Çeşitli Linux
            dağıtımları, üçüncü parti Windows paketleri, Mac OS X, Solaris ve daha
            pek çokları bunlar arasında sayılabilir.r</p>
      
          <p>Yazılım lisansımız bu çeşit yeniden dağıtımlara izin verdiği gibi
            bunları cesaretlendirir de. Ancak, sunucunun kurulum ve yapılandırmasının
            belgelerimizde belittiğimizden farklı olması gibi bir durum ortaya
            çıkabilir. Ne yazık ki, bu durum yakın zamanda değişecekmiş gibi
            görünmüyor.</p>
      
          <p>Bu <a href="http://wiki.apache.org/httpd/DistrosDefaultLayout">üçüncü parti
            dağıtımlarla ilgili bir açıklamaya</a> HTTP
            Sunucu wikisinde yer verilmiş olup bunların şu anki durumunu
            yansıtmaktadır. Ancak, yine de, dağıtımınızın belli platformlarla ilgili
            paket yönetimi ve kurulum işlemleri hakkında bilgi sahibi olmanız
            gerekmektir.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./de/install.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/install.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/install.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/install.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/install.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/install.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/install.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/install.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/license.html.en������������������������������������������������������������0000644�0000000�0000050�00000037000�13412755316�016361� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>The Apache License, Version 2.0 - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>The Apache License, Version 2.0</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/license.html" title="English">&nbsp;en&nbsp;</a></p>
      </div>
      
          <p class="centered">Apache License<br />
          Version 2.0, January 2004<br />
          <a href="http://www.apache.org/licenses/">http://www.apache.org/licenses/</a><br /><br />
      
          TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION</p>
      
          <ol>
          <li><strong>Definitions</strong><br />
      
          <p>"License" shall mean the terms and conditions for use, reproduction,
          and distribution as defined by Sections 1 through 9 of this document.</p>
      
          <p>"Licensor" shall mean the copyright owner or entity authorized by
          the copyright owner that is granting the License.</p>
      
          <p>"Legal Entity" shall mean the union of the acting entity and all
          other entities that control, are controlled by, or are under common
          control with that entity. For the purposes of this definition,
          "control" means (i) the power, direct or indirect, to cause the
          direction or management of such entity, whether by contract or
          otherwise, or (ii) ownership of fifty percent (50%) or more of the
          outstanding shares, or (iii) beneficial ownership of such entity.</p>
      
          <p>"You" (or "Your") shall mean an individual or Legal Entity
          exercising permissions granted by this License.</p>
      
          <p>"Source" form shall mean the preferred form for making modifications,
          including but not limited to software source code, documentation
          source, and configuration files.</p>
      
          <p>"Object" form shall mean any form resulting from mechanical
          transformation or translation of a Source form, including but
          not limited to compiled object code, generated documentation,
          and conversions to other media types.</p>
      
          <p>"Work" shall mean the work of authorship, whether in Source or
          Object form, made available under the License, as indicated by a
          copyright notice that is included in or attached to the work
          (an example is provided in the Appendix below).</p>
      
          <p>"Derivative Works" shall mean any work, whether in Source or Object
          form, that is based on (or derived from) the Work and for which the
          editorial revisions, annotations, elaborations, or other modifications
          represent, as a whole, an original work of authorship. For the purposes
          of this License, Derivative Works shall not include works that remain
          separable from, or merely link (or bind by name) to the interfaces of,
          the Work and Derivative Works thereof.</p>
      
          <p>"Contribution" shall mean any work of authorship, including
          the original version of the Work and any modifications or additions
          to that Work or Derivative Works thereof, that is intentionally
          submitted to Licensor for inclusion in the Work by the copyright owner
          or by an individual or Legal Entity authorized to submit on behalf of
          the copyright owner. For the purposes of this definition, "submitted"
          means any form of electronic, verbal, or written communication sent
          to the Licensor or its representatives, including but not limited to
          communication on electronic mailing lists, source code control systems,
          and issue tracking systems that are managed by, or on behalf of, the
          Licensor for the purpose of discussing and improving the Work, but
          excluding communication that is conspicuously marked or otherwise
          designated in writing by the copyright owner as "Not a Contribution."</p>
      
          <p>"Contributor" shall mean Licensor and any individual or Legal Entity
          on behalf of whom a Contribution has been received by Licensor and
          subsequently incorporated within the Work.</p></li>
      
          <li><strong>Grant of Copyright License.</strong> Subject to the terms
          and conditions of this License, each Contributor hereby grants to You
          a perpetual, worldwide, non-exclusive, no-charge, royalty-free,
          irrevocable copyright license to reproduce, prepare Derivative Works of,
          publicly display, publicly perform, sublicense, and distribute the
          Work and such Derivative Works in Source or Object form.</li>
      
          <li><strong>Grant of Patent License.</strong> Subject to the terms
          and conditions of this License, each Contributor hereby grants to You a
          perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable
          (except as stated in this section) patent license to make, have made,
          use, offer to sell, sell, import, and otherwise transfer the Work,
          where such license applies only to those patent claims licensable
          by such Contributor that are necessarily infringed by their
          Contribution(s) alone or by combination of their Contribution(s)
          with the Work to which such Contribution(s) was submitted. If You
          institute patent litigation against any entity (including a
          cross-claim or counterclaim in a lawsuit) alleging that the Work
          or a Contribution incorporated within the Work constitutes direct
          or contributory patent infringement, then any patent licenses
          granted to You under this License for that Work shall terminate
          as of the date such litigation is filed.</li>
      
          <li><strong>Redistribution.</strong> You may reproduce and distribute
          copies of the Work or Derivative Works thereof in any medium, with or
          without modifications, and in Source or Object form, provided that You
          meet the following conditions:
      
          <ol class="lo-A">
              <li>You must give any other recipients of the Work or
              Derivative Works a copy of this License; and</li>
      
              <li>You must cause any modified files to carry prominent notices
              stating that You changed the files; and</li>
      
              <li>You must retain, in the Source form of any Derivative Works
              that You distribute, all copyright, patent, trademark, and
              attribution notices from the Source form of the Work,
              excluding those notices that do not pertain to any part of
              the Derivative Works; and</li>
      
              <li>If the Work includes a "NOTICE" text file as part of its
              distribution, then any Derivative Works that You distribute must
              include a readable copy of the attribution notices contained
              within such NOTICE file, excluding those notices that do not
              pertain to any part of the Derivative Works, in at least one
              of the following places: within a NOTICE text file distributed
              as part of the Derivative Works; within the Source form or
              documentation, if provided along with the Derivative Works; or,
              within a display generated by the Derivative Works, if and
              wherever such third-party notices normally appear. The contents
              of the NOTICE file are for informational purposes only and
              do not modify the License. You may add Your own attribution
              notices within Derivative Works that You distribute, alongside
              or as an addendum to the NOTICE text from the Work, provided
              that such additional attribution notices cannot be construed
              as modifying the License.</li>
          </ol>
      
          <p>You may add Your own copyright statement to Your modifications and
          may provide additional or different license terms and conditions
          for use, reproduction, or distribution of Your modifications, or
          for any such Derivative Works as a whole, provided Your use,
          reproduction, and distribution of the Work otherwise complies with
          the conditions stated in this License.</p></li>
      
          <li><strong>Submission of Contributions.</strong> Unless You explicitly
          state otherwise, any Contribution intentionally submitted for inclusion
          in the Work by You to the Licensor shall be under the terms and
          conditions of this License, without any additional terms or conditions.
          Notwithstanding the above, nothing herein shall supersede or modify
          the terms of any separate license agreement you may have executed
          with Licensor regarding such Contributions.</li>
      
          <li><strong>Trademarks.</strong> This License does not grant permission
          to use the trade names, trademarks, service marks, or product names of
          the Licensor, except as required for reasonable and customary use in
          describing the origin of the Work and reproducing the content of the
          NOTICE file.</li>
      
          <li><strong>Disclaimer of Warranty.</strong> Unless required by
          applicable law or agreed to in writing, Licensor provides the Work (and
          each Contributor provides its Contributions) on an "AS IS" BASIS,
          WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
          implied, including, without limitation, any warranties or conditions
          of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
          PARTICULAR PURPOSE. You are solely responsible for determining the
          appropriateness of using or redistributing the Work and assume any
          risks associated with Your exercise of permissions under this License.</li>
      
          <li><strong>Limitation of Liability.</strong> In no event and under no
          legal theory, whether in tort (including negligence), contract, or
          otherwise, unless required by applicable law (such as deliberate and
          grossly negligent acts) or agreed to in writing, shall any Contributor be
          liable to You for damages, including any direct, indirect, special,
          incidental, or consequential damages of any character arising as a
          result of this License or out of the use or inability to use the
          Work (including but not limited to damages for loss of goodwill,
          work stoppage, computer failure or malfunction, or any and all
          other commercial damages or losses), even if such Contributor
          has been advised of the possibility of such damages.</li>
      
          <li><strong>Accepting Warranty or Additional Liability.</strong> While
          redistributing the Work or Derivative Works thereof, You may choose to
          offer, and charge a fee for, acceptance of support, warranty, indemnity,
          or other liability obligations and/or rights consistent with this
          License. However, in accepting such obligations, You may act only
          on Your own behalf and on Your sole responsibility, not on behalf
          of any other Contributor, and only if You agree to indemnify,
          defend, and hold each Contributor harmless for any liability
          incurred by, or claims asserted against, such Contributor by reason
          of your accepting any such warranty or additional liability.</li>
          </ol>
      
          <p class="centered">END OF TERMS AND CONDITIONS</p>
      
          <p class="centered">APPENDIX: How to apply the Apache License to your
          work.</p>
      
          <p>To apply the Apache License to your work, attach the following
          boilerplate notice, with the fields enclosed by brackets "[]"
          replaced with your own identifying information. (Don't include
          the brackets!)  The text should be enclosed in the appropriate
          comment syntax for the file format. We also recommend that a
          file or class name and description of purpose be included on the
          same "printed page" as the copyright notice for easier
          identification within third-party archives.</p>
      
          <div class="example"><pre>Copyright [yyyy] [name of copyright owner]
      
      Licensed under the Apache License, Version 2.0 (the "License");
      you may not use this file except in compliance with the License.
      You may obtain a copy of the License at
      
          http://www.apache.org/licenses/LICENSE-2.0
      
      Unless required by applicable law or agreed to in writing, software
      distributed under the License is distributed on an "AS IS" BASIS,
      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
      See the License for the specific language governing permissions and
      limitations under the License.</pre></div>
      </div>
      </div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/license.html" title="English">&nbsp;en&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/license.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>httpd-2.4.41/docs/manual/custom-error.html.en�������������������������������������������������������0000644�0000000�0000050�00000033125�13412755316�017404� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Custom Error Responses - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Custom Error Responses</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/custom-error.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/custom-error.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/custom-error.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/custom-error.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/custom-error.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/custom-error.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Although the Apache HTTP Server provides generic error responses
          in the event of 4xx or 5xx HTTP status codes, these responses are
          rather stark, uninformative, and can be intimidating to site users.
          You may wish to provide custom error responses which are either
          friendlier, or in some language other than English, or perhaps which
          are styled more in line with your site layout.</p>
      
          <p>Customized error responses can be defined for any HTTP status
          code designated as an error condition - that is, any 4xx or 5xx
          status.</p>
      
          <p>Additionally, a set of values are provided, so
          that the error document can be customized further based on the
          values of these variables, using <a href="howto/ssi.html">Server
          Side Includes</a>. Or, you can have error conditions handled by a
          cgi program, or other dynamic handler (PHP, mod_perl, etc) which
          makes use of these variables.</p>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#configuration">Configuration</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#variables">Available Variables</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#custom">Customizing Error Responses</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#multi-lang">Multi Language Custom Error Documents</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuration" id="configuration">Configuration</a></h2>
      
          <p>Custom error documents are configured using the <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code> directive,
          which may be used in global,
          virtualhost, or directory context. It may be used in .htaccess files
          if <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> is set to
          FileInfo.</p>
      
          <pre class="prettyprint lang-config">ErrorDocument 500 "Sorry, our script crashed. Oh dear"
      ErrorDocument 500 /cgi-bin/crash-recover
      ErrorDocument 500 http://error.example.com/server_error.html
      ErrorDocument 404 /errors/not_found.html
      ErrorDocument 401 /subscription/how_to_subscribe.html</pre>
      
      
          <p>The syntax of the <code>ErrorDocument</code> directive is:</p>
      
          <pre class="prettyprint lang-config">ErrorDocument &lt;3-digit-code&gt; &lt;action&gt;</pre>
      
      
          <p>where the action will be treated as:</p>
      
          <ol>
            <li>A local URL to redirect to (if the action begins with a "/").</li>
            <li>An external URL to redirect to (if the action is a valid URL).</li>
            <li>Text to be displayed (if none of the above). The text must be
                wrapped in quotes (") if it consists of more than one word.</li>
          </ol>
      
          <p>When redirecting to a local URL, additional environment variables
          are set so that the response can be further customized. They are not sent to
          external URLs.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="variables" id="variables">Available Variables</a></h2>
      
            <p>Redirecting to another URL can be useful, but only if some
            information can be passed which can then be used to explain or log
            the error condition more clearly.</p>
      
            <p>To achieve this, when the error redirect is sent, additional
            environment variables will be set, which will be generated from
            the headers provided to the original request by prepending
            'REDIRECT_' onto the original header name. This provides the error
            document the context of the original request.</p>
      
            <p>For example, you might receive, in addition to more usual
            environment variables, the following.</p>
      
            <div class="example"><p><code>
              REDIRECT_HTTP_ACCEPT=*/*, image/gif, image/jpeg, image/png<br />
              REDIRECT_HTTP_USER_AGENT=Mozilla/5.0 Fedora/3.5.8-1.fc12 Firefox/3.5.8<br />
              REDIRECT_PATH=.:/bin:/usr/local/bin:/sbin<br />
              REDIRECT_QUERY_STRING=<br />
              REDIRECT_REMOTE_ADDR=121.345.78.123<br />
              REDIRECT_REMOTE_HOST=client.example.com<br />
              REDIRECT_SERVER_NAME=www.example.edu<br />
              REDIRECT_SERVER_PORT=80<br />
              REDIRECT_SERVER_SOFTWARE=Apache/2.2.15<br />
              REDIRECT_URL=/cgi-bin/buggy.pl
            </code></p></div>
      
            <p><code>REDIRECT_</code> environment variables are created from
            the environment variables which existed prior to the
            redirect. They are renamed with a <code>REDIRECT_</code>
            prefix, <em>i.e.</em>, <code>HTTP_USER_AGENT</code> becomes
            <code>REDIRECT_HTTP_USER_AGENT</code>.</p>
      
            <p><code>REDIRECT_URL</code>, <code>REDIRECT_STATUS</code>, and
            <code>REDIRECT_QUERY_STRING</code> are guaranteed to be set, and
            the other headers will be set only if they existed prior to the
            error condition.</p>
      
            <p><strong>None</strong> of these will be
            set if the <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code> target is an
            <em>external</em> redirect (anything starting with a
            scheme name like <code>http:</code>, even if it refers to the same host
            as the server).</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="custom" id="custom">Customizing Error Responses</a></h2>
      
            <p>If you point your <code>ErrorDocument</code> to some variety of
            dynamic handler such as a server-side include document, CGI
            script, or some variety of other handler, you may wish to use the
            available custom environment variables to customize this
            response.</p>
      
            <p>If the ErrorDocument specifies a local redirect to a CGI
            script, the script should include a "<code>Status:</code>"
            header field in its output in order to ensure the propagation
            all the way back to the client of the error condition that
            caused it to be invoked. For instance, a Perl ErrorDocument
            script might include the following:</p>
      
             <pre class="prettyprint lang-perl">...
      print  "Content-type: text/html\n";
      printf "Status: %s Condition Intercepted\n", $ENV{"REDIRECT_STATUS"};
      ...</pre>
      
      
            <p>If the script is dedicated to handling a particular error
            condition, such as <code>404&nbsp;Not&nbsp;Found</code>, it can
            use the specific code and error text instead.</p>
      
            <p>Note that if the response contains <code>Location:</code>
            header (in order to issue a client-side redirect), the script
            <em>must</em> emit an appropriate <code>Status:</code> header
            (such as <code>302&nbsp;Found</code>). Otherwise the
            <code>Location:</code> header may have no effect.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="multi-lang" id="multi-lang">Multi Language Custom Error Documents</a></h2>
      
          <p>Provided with your installation of the Apache HTTP Server is a
          directory of custom error documents translated into 16 different
          languages. There's also a configuration file in the
          <code>conf/extra</code> configuration directory that can be included
          to enable this feature.</p>
      
          <p>In your server configuration file, you'll see a line such as:</p>
      
          <pre class="prettyprint lang-config"># Multi-language error messages
      #Include conf/extra/httpd-multilang-errordoc.conf</pre>
      
      
          <p>Uncommenting this <code>Include</code> line will enable this
          feature, and provide language-negotiated error messages, based on
          the language preference set in the client browser.</p>
      
          <p>Additionally, these documents contain various of the
          <code>REDIRECT_</code> variables, so that additional information can
          be provided to the end-user about what happened, and what they can
          do now.</p>
      
          <p>These documents can be customized to whatever degree you wish to
          provide more useful information to users about your site, and what
          they can expect to find there.</p>
      
          <p><code class="module"><a href="./mod/mod_include.html">mod_include</a></code> and <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>
          must be enabled to use this feature.</p>
      
       </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/custom-error.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/custom-error.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/custom-error.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/custom-error.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/custom-error.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/custom-error.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/custom-error.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/caching.html.fr.utf8�������������������������������������������������������0000644�0000000�0000050�00000160674�13412755316�017243� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Guide de la mise en cache - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Guide de la mise en cache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/caching.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/caching.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./tr/caching.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Ce document complète la documentation de référence des modules
          <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>, <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code>,
          <code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code> et du programme <a href="programs/htcacheclean.html">htcacheclean</a>.
          Il décrit l'utilisation des fonctionnalités de mise en
          cache du serveur HTTP Apache
          pour accélérer les services web et proxy, tout en évitant les problèmes
          courants et les erreurs de configuration.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#introduction">Introduction</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#http-caching">Mise en cache HTTP à trois états RFC2616</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#examples">Exemples de configuration du cache</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#socache-caching">Mise en cache générale d'objets partagés à deux états de forme
          clé/valeur</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#file-caching">Mise en cache à base de fichiers spécialisés</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#security">Considérations sur la sécurité</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">Introduction</a></h2>
          
      
          <p>Le serveur HTTP Apache offre tout un ensemble de fonctionnalités
          de mise en cache qui ont été conçues pour améliorer les performances
          du serveur de différentes manières.</p>
      
          <dl>
              <dt>Mise en cache HTTP à trois états RFC2616</dt>
              <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> et son module de fournisseur
      	<code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code> proposent une mise en cache
      	intelligente de niveau HTTP. Le contenu proprement dit est
      	stocké dans le cache, et mod_cache vise à respecter tous les
      	en-têtes HTTP, ainsi que les options qui contrôlent la mise en
      	cache du contenu comme décrit dans la <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html">Section
      	13 de la RFC2616</a>. <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> peut gérer des
      	configurations de mise en cache simples, mais aussi complexes
      	comme dans les cas où vous avez à faire à des contenus mandatés,
      	à des contenus locaux dynamiques, ou lorsque vous avez besoin
      	d'accélérer l'accès aux fichiers locaux situés sur disque
      	supposé lent.
              </dd>
      
              <dt>Mise en cache d'objets partagés de forme clé/valeur à deux
      	états</dt>
              <dd>
                  L'<a href="socache.html">API du cache d'objets partagés</a> (socache)
      	    et ses modules de fournisseurs
      	    proposent une mise en cache d'objets partagés à base de
      	    couples clé/valeur de niveau serveur. Ces modules sont
      	    conçus pour la mise en cache de données de bas niveau comme
      	    les sessions SSL et les données d'authentification. les
      	    serveurs d'arrière-plan permettent le stockage des données
      	    au niveau serveur en mémoire partagée, ou au niveau
      	    datacenter dans un cache comme memcache ou distcache.
              </dd>
      
              <dt>Mise en cache de fichiers spécialisée</dt>
              <dd>
                  <code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code> offre la possibilité de
      	    précharger des fichiers en mémoire au démarrage du serveur,
      	    et peut améliorer les temps d'accès et sauvegarder les
      	    gestionnaires de fichiers pour les fichiers qui font l'objet
      	    d'accès fréquents, évitant ainsi d'avoir à accéder au disque
      	    à chaque requête.
              </dd>
          </dl>
      
          <p>Pour tirer parti efficacement de ce document, les bases de HTTP doivent
          vous être familières, et vous devez avoir lu les sections
          <a href="urlmapping.html">Mise en correspondance des
          URLs avec le système de fichiers</a> et
          <a href="content-negotiation.html">Négociation sur le contenu</a>
          du guide de l'utilisateur.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="http-caching" id="http-caching">Mise en cache HTTP à trois états RFC2616</a></h2>
      
          
      
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code></li><li><code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_cache.html#cacheenable">CacheEnable</a></code></li><li><code class="directive"><a href="./mod/mod_cache.html#cachedisable">CacheDisable</a></code></li><li><code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code></li><li><code class="directive"><a href="./mod/mod_negotiation.html#cachenegotiateddocs">CacheNegotiatedDocs</a></code></li></ul></td></tr></table>
      
          <p>Le module <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> permet de tirer avantage du
          mécanisme de mise en cache en ligne faisant partie
          intégrante du protocole HTTP, et décrit dans la <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html">section
          13 de la RFC2616</a>.</p>
      
          <p>A la différence d'un cache simple clé/valeur à deux états où le
          contenu est supprimé lorsqu'il est périmé, un cache HTTP comporte un
          mécanisme permettant de conserver temporairement un contenu périmé,
          de demander au serveur original si ce contenu périmé a été modifié,
          et dans le cas contraire de le rendre à nouveau valide.</p>
      
          <p>Une entrée d'un cache HTTP peut se présenter sous un de ces trois
          états :</p>
      
          <dl>
          <dt>Frais</dt>
          <dd>
              Si un contenu est suffisamment récent (plus jeune que sa
      	<strong>durée de fraîcheur</strong>), il est considéré comme
      	<strong>frais</strong>. Un cache HTTP peut servir un contenu
      	frais sans avoir à demander quoi que ce soit au serveur
      	d'origine.
          </dd>
          <dt>Périmé</dt>
          <dd>
              <p>Si le contenu est trop ancien (plus vieux que sa
      	<strong>durée de fraîcheur</strong>), il est considéré comme
      	<strong>périmé</strong>. Un cache HTTP doit contacter le serveur
      	original pour vérifier si le contenu, même s'il est périmé, est
      	encore à jour avant de le servir au client. Soit le serveur
      	original va répondre en envoyant un contenu de remplacement si
      	le contenu périmé n'est plus à jour, soit dans le cas idéal il
      	renverra un code pour signaler au cache que le contenu est
      	encore à jour, et qu'il est inutile de le générer ou de
      	l'envoyer à nouveau. Le contenu repasse à l'état "frais" et le
      	cycle continue.</p>
      
              <p>Le protocole HTTP permet au cache de servir des données
      	périmées dans certaines circonstances, comme lorsqu'une
      	tentative de rafraîchir une entrée depuis un serveur original
      	se solde par un échec avec un code d'erreur 5xx, ou lorsqu'une
      	autre requête est déjà en train d'essayer de rafraîchir la même
      	entrée. Dans ces cas, un en-tête <code>Warning</code> est ajouté
      	à la réponse.</p>
          </dd>
          <dt>Non Existent</dt>
          <dd>
              Si le cache est plein, il se réserve la possibilité de supprimer
      	des entrées pour faire de la place. Une entrée peut être
      	supprimée à tout moment, qu'elle soit fraîche ou périmée.
      	L'outil <a href="programs/htcacheclean.html">htcacheclean</a>
      	peut être utilisé à la demande, ou lancé en tant que démon afin
      	de conserver la taille du cache ou le nombre d'inodes en deçà de
      	valeurs spécifiées. Cet outil essaie cependant de
      	supprimer les entrées périmées avant les entrées fraîches.
          </dd>
          </dl>
      
          <p>Le fonctionnement détaillé d'un cache HTTP est décrit dans la <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html">Section
          13 de la RFC2616</a>.</p>
      
          <h3>Interaction avec le serveur</h3>
            
      
            <p>Le module <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> interagit avec le serveur
            à deux niveaux possibles en fonction de la directive <code class="directive"><a href="./mod/mod_cache.html#cachequickhandler">CacheQuickHandler</a></code> :
            </p>
      
            <dl>
              <dt>Phase de gestion rapide</dt>
              <dd>
                <p>Cette phase se déroule très tôt au cours du traitement de
      	  la requête, juste après l'interprétation de cette dernière. Si
      	  le contenu se trouve dans le cache, il est servi immédiatement
      	  et pratiquement tout le reste du traitement de la requête est
      	  court-circuité.</p>
      
                    <p>Dans ce scénario, le cache se comporte comme s'il avait
      	      été "boulonné" à l'entrée du serveur.</p>
                    
                    <p>Ce mode possède les meilleures performances car la
      	      majorité des traitements au niveau du serveur sont
      	      court-circuités. Cependant, il court-circuite aussi les
      	      phases d'authentification et d'autorisation du traitement
      	      au niveau du serveur, et il doit donc être utilisé avec
      	      prudence lorsque que ces phases sont importantes.</p>
      
      	      <p>Les requêtes comportant un en-tête "Authorization"
      	      (comme par exemple l'authentification HTTP basique) ne
      	      peuvent être ni mises en cache, ni servies depuis ce
      	      dernier lorsque <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> s'exécute dans
      	      cette phase.</p>
                </dd>
                <dt>Phase de gestion normale</dt>
                <dd>
                    <p>Cette phase se déroule très tard au cours du traitement
      	      de la requête, en fait après toutes les phases de ce
      	      traitement.</p>
      
                    <p>Dans ce scénario, le cache se comporte comme s'il avait
      	      été "boulonné" à la sortie du serveur.</p>
      
                    <p>Ce mode offre la plus grande souplesse, car il permet
      	      de faire intervenir la mise en cache en un point
      	      précisément spécifié de la chaîne de filtrage, et le
      	      contenu issu du cache peut être filtré ou personnalisé
      	      avant d'être servi au client.</p>
                </dd>
              </dl>
      
              <p>Si l'URL ne se trouve pas dans le cache,
      	<code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> ajoutera un <a href="filter.html">filtre</a> à la chaîne de filtrage afin
      	d'enregistrer la réponse dans le cache, puis passera la main
      	pour permettre le déroulement normal de la suite du traitement
      	de la requête. Si la mise en cache du contenu est autorisée, il
      	sera enregistré dans le cache pour pouvoir être servi à nouveau
      	; dans le cas contraire, le contenu sera ignoré.</p>
      
              <p>Si le contenu trouvé dans le cache est périmé, le module
      	<code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> convertit la requête en
      	<strong>requête conditionnelle</strong>. Si le serveur original
      	renvoie une réponse normale, elle est enregistrée dans le cache
      	en lieu et place du contenu périmé. Si le serveur original
      	renvoie une réponse "304 Not Modified", le contenu repasse à
      	l'état "frais" et est servi par le filtre au lieu d'être
      	sauvegardé.</p>
          
      
          <h3>Amélioration du taux de présence dans le cache</h3>
            
      
            <p>Lorsqu'un serveur virtuel est connu sous la forme d'un des
            nombreux alias du serveur, la définition de la directive
            <code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code> à
            <code>On</code> peut augmenter de manière significative le nombre
            de correspondances positives dans le cache. Ceci est du au fait
            que la clé du cache contient le nom d'hôte du serveur virtuel.     
            Avec <code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code> positionnée
            à <code>On</code>,
            les hôtes virtuels possédant plusieurs noms de serveur ou alias ne
            généreront pas d'entités de cache différentes, et le contenu sera mis en
            cache en faisant référence au nom d'hôte canonique.</p>
      
          
      
          <h3>Durée de fraîcheur</h3>
            
      
             <p>Un contenu bien formé destiné à être mis en cache doit déclarer
             explicitement une durée de fraîcheur via les champs
             <code>max-age</code> ou <code>s-maxage</code> de l'en-tête
             <code>Cache-Control</code>, ou en incluant un en-tête
             <code>Expires</code>.</p>
            
            <p>De plus, un client peut passer outre la durée de fraîcheur
            définie pour le serveur original en ajoutant son propre en-tête
            <code>Cache-Control</code> à la requête. Dans ce cas, c'est la
            durée de fraîcheur la plus basse entre la requête et la réponse
            qui l'emporte.</p>
      
            <p>Lorsque cette durée de fraîcheur est absente de la requête ou
            de la réponse, une durée de fraîcheur par défaut s'applique. La
            durée de fraîcheur par défaut des entrées du cache est d'une heure
            ; elle peut cependant être facilement modifiée à l'aide de
            la directive <code class="directive"><a href="./mod/mod_cache.html#cachedefaultexpire">CacheDefaultExpire</a></code>.</p>
      
            <p>Si une réponse ne contient pas d'en-tête <code>Expires</code> mais
            inclut un en-tête <code>Last-Modified</code>, <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>
            peut déduire une durée de fraîcheur en se basant sur une
            heuristique, qui peut être contrôlée via la directive <code class="directive"><a href="./mod/mod_cache.html#cachelastmodifiedfactor">CacheLastModifiedFactor</a></code>.</p>
      
            <p>Pour les contenus locaux, ou les contenus distants qui ne
            spécifient pas leur propre en-tête <code>Expires</code>,
            <code class="module"><a href="./mod/mod_expires.html">mod_expires</a></code> permet de régler finement la durée de
            fraîcheur via les paramètres <code>max-age</code> et
            <code>Expires</code>.</p>
      
            <p>On peut aussi contrôler la durée de fraîcheur maximale en utilisant
            la directive <code class="directive"><a href="./mod/mod_cache.html#cachemaxexpire">CacheMaxExpire</a></code>.</p>
      
          
      
          <h3>Guide succinct des requêtes conditionnelles</h3>
            
      
           <p>Lorsqu'un contenu du cache est périmé, httpd modifie la requête
           pour en faire une requête conditionnelle</p>
      
            <p>Lorsque la réponse originale du cache contient un en-tête
            <code>ETag</code>, <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> ajoute un en-tête
            <code>If-None-Match</code> à la requête envoyée au serveur
            d'origine. Lorsque la réponse originale du cache contient un en-tête
            <code>Last-Modified</code>, <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> ajoute un en-tête
            <code>If-Modified-Since</code> à la requête envoyée au serveur
            d'origine. Dans ces deux cas, la requête devient une requête
            <strong>conditionnelle</strong>.</p>
      
            <p>Lorsqu'un serveur d'origine reçoit une requête conditionnelle,
            il vérifie si le paramètre Etag ou Last-Modified a été modifié en
            fonction des paramètres de la requête. Si ce n'est pas le cas, il
            répondra avec le message lapidaire "304 Not Modified". Ceci
            informe le cache que le contenu est périmé mais encore à jour, et
            peut être utilisé tel quel pour les prochaines requêtes jusqu'à ce
            qu'il atteigne à nouveau sa date de péremption.</p>
      
            <p>Si le contenu a été modifié, il est servi comme s'il s'agissait
            d'une requête normale et non conditionnelle.</p>
      
            <p>Les requêtes conditionnelles offrent deux avantages. D'une
            part, il est facile de déterminer si le contenu du serveur
            d'origine correspond à celui situé
            dans le cache, et ainsi d'économiser la consommation de ressources
            nécessaire au transfert du contenu dans son ensemble.</p>
      
            <p>D'autre part, un serveur d'origine bien conçu sera configuré de
            telle manière que les requêtes conditionnelles nécessitent pour
            leur production bien moins de ressources qu'une réponse complète.
            Dans le cas des fichiers statiques, il suffit en général d'un
            appel système de type <code>stat()</code> ou similaire pour
            déterminer si la taille ou la date de modification du fichier a
            été modifiée. Ainsi, même un contenu local pourra être servi plus
            rapidement depuis le cache s'il n'a pas été modifié.</p>
            
            <p>Il serait souhaitable que tous les serveurs d'origine
            supportent les requêtes conditionnelles, car dans le cas
            contraire, ils répondent comme s'il s'agissait d'une requête
            normale, et le cache répond comme si le contenu avait été
            modifié et enregistre ce dernier. Le cache se comporte alors
            comme un simple cache à deux état, où le contenu est servi s'il
            est à jour, ou supprimé dans le cas contraire.</p>
          
      
          <h3>Que peut-on mettre en cache ?</h3>
            
      
            <p>La liste complète des conditions nécessaires pour qu'une
            réponse puisse être enregistrée dans un cache HTTP est fournie
            dans la <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html#sec13.4">section
            13.4 Response Cacheability de la RFC2616</a>, et peut se résumer
            ainsi :</p>
      
            <ol>
              <li>La mise en cache doit être activée pour cette URL. Voir les
      	directives <code class="directive"><a href="./mod/mod_cache.html#cacheenable">CacheEnable</a></code> et <code class="directive"><a href="./mod/mod_cache.html#cachedisable">CacheDisable</a></code>.</li>
      
              <li>Si la reponse possède un code de statut HTTP autre que 200, 203, 300, 301
      	ou 410, elle doit aussi comporter un en-tête "Expires" ou
      	"Cache-Control".</li>
      
              <li>La requête doit être de type HTTP GET.</li>
      
              <li>Si la réponse contient un en-tête "Authorization:", elle doit aussi
      	contenir une option "s-maxage", "must-revalidate" ou "public"
      	dans l'en-tête "Cache-Control:".</li>
      
              <li>Si l'URL contient une chaîne de requête
      	(provenant par exemple d'une méthode GET de formulaire HTML), elle ne
      	sera pas mise en cache, à moins que la réponse ne
      	spécifie explicitement un délai d'expiration via un
      	en-tête "Expires:" ou une directive max-age ou s-maxage de
      	l'en-tête "Cache-Control:" comme indiqué dans les
      	sections 13.2.1. et 13.9 de la RFC2616.</li>
      
              <li>Si la réponse a un statut de 200 (OK), elle doit aussi contenir
      	au moins un des en-têtes "Etag", "Last-Modified" ou
              "Expires", ou une directive max-age ou s-maxage de
      	l'en-tête "Cache-Control:", à moins que la directive
              <code class="directive"><a href="./mod/mod_cache.html#cacheignorenolastmod">CacheIgnoreNoLastMod</a></code>
              ne précise d'autres contraintes.</li>
      
              <li>Si la réponse contient l'option "private" dans un en-tête
      	"Cache-Control:", elle ne sera pas mise en cache à moins que la
      	directive
              <code class="directive"><a href="./mod/mod_cache.html#cachestoreprivate">CacheStorePrivate</a></code>
      	ne précise d'autres contraintes.</li>
      
              <li>De même, si la réponse contient l'option "no-store" dans un en-tête
              "Cache-Control:", elle ne sera pas mise en cache à moins que la
      	directive
              <code class="directive"><a href="./mod/mod_cache.html#cachestorenostore">CacheStoreNoStore</a></code>
      	n'ait été utilisée.</li>
      
              <li>Une réponse ne sera pas mise en cache si elle comporte un en-tête
      	"Vary:" contenant le caractère "*" qui correspond à toute
      	chaîne de caractères.</li>
            </ol>
          
      
          <h3>Qu'est ce qui ne doit pas être mis en cache ?</h3>
            
      
            <p>Le client qui crée la requête ou le serveur d'origine qui
            génère la réponse doit être à même de déterminer si le contenu
            doit pouvoir être mis en cache ou non en définissant correctement
            l'en-tête <code>Cache-Control</code>, et
            <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> sera alors en mesure de satisfaire les
            souhaits du client ou du serveur de manière appropriée.
            </p>
      
            <p>Les contenus qui varient au cours du temps, ou en fonction de
            particularités de la requête non prises en compte par la
            négociation HTTP ne doivent pas être mis en cache. Ce type de
            contenu doit se déclarer lui-même "à ne pas mettre en cache" via
            l'en-tête <code>Cache-Control</code>.</p>
            
            <p>Si le contenu change souvent, suite par exemple à une durée de
            fraîcheur de l'ordre de la minute ou de la seconde, il peut tout
            de même être mis en cache, mais il est alors fortement souhaitable
            que le serveur d'origine supporte correctement les
            <strong>requêtes conditionnelles</strong> afin que des réponses
            complètes ne soient pas systématiquement générées.</p>
      
            <p>Un contenu qui varie en fonction d'en-têtes de requête fournis
            par le client peut être mis en cache, sous réserve d'une
            utilisation appropriée de l'en-tête de réponse <code>Vary</code>.</p>
          
      
          <h3>Contenu variable et/ou négocié</h3>
            
      
            <p>Lorsque le serveur d'origine est configuré pour servir des
            contenus différents en fonction de la valeur de certains en-têtes
            de la requête, par exemple pour servir une ressource en plusieurs
            langages à partir d'une seule URL, le mécanisme de mise en cache
            d'HTTP permet de mettre en cache plusieurs variantes de la même
            page à partir d'une seule URL.</p>
            
            <p>Pour y parvenir, le serveur d'origine ajoute un en-tête
            <code>Vary</code> pour indiquer quels en-têtes doivent être pris
            en compte par un cache pour déterminer si deux variantes sont
            différentes l'une de l'autre.</p>
      
            <p>Si par exemple, une réponse est reçue avec l'en-tête Vary suivant,</p>
      
            <div class="example"><p><code>
      Vary: negotiate,accept-language,accept-charset
            </code></p></div>
      
            <p><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> ne servira aux demandeurs que le contenu
            mis en cache qui correspond au contenu des en-têtes accept-language et
            accept-charset de la requête originale.</p>
      
            <p>Plusieurs variantes d'un contenu peuvent être mises en cache
            simultanément ; <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> utilise l'en-tête
            <code>Vary</code> et les valeurs correspondantes des en-têtes de
            la requête spécifiés dans ce dernier pour
            déterminer quelle variante doit être servie au client.</p>
                
          
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Exemples de configuration du cache</a></h2>
      
          
      
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code></li><li><code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code></li><li><code class="module"><a href="./mod/mod_cache_socache.html">mod_cache_socache</a></code></li><li><code class="module"><a href="./mod/mod_socache_memcache.html">mod_socache_memcache</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_cache.html#cacheenable">CacheEnable</a></code></li><li><code class="directive"><a href="./mod/mod_cache_disk.html#cacheroot">CacheRoot</a></code></li><li><code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlevels">CacheDirLevels</a></code></li><li><code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlength">CacheDirLength</a></code></li><li><code class="directive"><a href="./mod/mod_cache_socache.html#cachesocache">CacheSocache</a></code></li></ul></td></tr></table>
      
          <h3><a name="disk" id="disk">Mise en cache sur disque</a></h3>
            
      
            <p>Le module <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> s'appuie sur des
            implémentations de stockage sous-jacentes spécifiques pour gérer
            le cache ; à ce titre, <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code> fournit le
            support de la mise en cache sur disque.</p>
      
            <p>En général, le module se configure comme suit :</p>
      
            <pre class="prettyprint lang-config">CacheRoot   "/var/cache/apache/"
      CacheEnable disk /
      CacheDirLevels 2
      CacheDirLength 1</pre>
      
      
          <p>Il est important de savoir que, les fichiers mis en cache étant stockés
          localement, la mise en cache par l'intermédiaire du système d'exploitation
          sera en général aussi appliquée à leurs accès. Si bien que même si les
          fichiers sont stockés sur disque, s'il font l'objet d'accès fréquents,
          il est probable que le système d'exploitation s'appliquera à ce qu'ils
          soient servis à partir de la mémoire.</p>
      
          
      
          <h3>Comprendre le stockage dans le cache</h3>
            
      
            <p>Pour stocker des entités dans le cache,
            le module <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code> crée une empreinte (hash) de 22
            caractères de l'URL qui a fait l'objet d'une requête. Cette empreinte
            comprend le nom d'hôte, le protocole, le port, le chemin et tout argument
            de type CGI associé à l'URL, ainsi que les éléments
            spécifiés dans l'en-tête Vary afin d'être sur que plusieurs URLs
            n'interfèrent pas entre elles.</p>
      
            <p>Chaque position de l'empreinte peut contenir un caractère
            choisi parmi 64 caractères différents, il y a donc
            64^22 possibilités pour une empreinte. Par exemple, une URL peut posséder
            l'empreinte <code>xyTGxSMO2b68mBCykqkp1w</code>. Cette empreinte est
            utilisée pour préfixer les noms de fichiers spécifiques à cette URL à
            l'intérieur du cache; cependant, elle est tout d'abord placée dans les
            répertoires du cache selon les directives
            <code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlevels">CacheDirLevels</a></code> et
            <code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlength">CacheDirLength</a></code>.</p>
      
            <p>La directive
            <code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlevels">CacheDirLevels</a></code>
            définit le nombre de niveaux de sous-répertoires, et
            <code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlength">CacheDirLength</a></code>
            le nombre de caractères composant le nom des sous-répertoires. Dans
            l'exemple donné plus haut, l'empreinte se trouvera à :
            <code>/var/cache/apache/x/y/TGxSMO2b68mBCykqkp1w</code>.</p>
      
            <p>Cette technique a pour but principal de réduire le nombre de
            sous-répertoires ou de fichiers contenus dans un répertoire particulier,
            car le fonctionnement de la plupart des systèmes de fichiers est ralenti
            quand ce nombre augmente. Avec la valeur "1" pour la directive
            <code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlength">CacheDirLength</a></code>,
            il peut y avoir au plus 64 sous-répertoires à un niveau quelconque.
            Avec la valeur "2", il peut y en avoir 64 * 64, etc...
            A moins d'avoir une bonne raison pour ne pas le faire, l'utilisation de
            la valeur "1" pour la directive
            <code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlength">CacheDirLength</a></code>
            est recommandée.</p>
      
            <p>Le paramétrage de la directive
            <code class="directive"><a href="./mod/mod_cache_disk.html#cachedirlevels">CacheDirLevels</a></code>
            dépend du nombre de fichiers que vous pensez stocker dans le cache.
            Avec une valeur de "2" comme dans l'exemple donné plus haut,
            4096 sous-répertoires peuvent être créés au total. Avec 1 million de
            fichiers dans le cache, cela équivaut à environ 245 URLs mises en cache
            dans chaque répertoire.</p>
      
            <p>Chaque URL nécessite au moins deux fichiers dans le cache. Ce sont en
            général un fichier ".header", qui contient des meta-informations à propos
            de l'URL, comme la date de son arrivée à expiration,
            et un fichier ".data" qui est la copie exacte du contenu à servir.</p>
      
            <p>Dans le cas d'un contenu négocié via l'en-tête "Vary", un répertoire
            ".vary" sera créé pour l'URL en question. Ce répertoire contiendra de
            multiples fichiers ".data" correspondant aux différents contenus
            négociés.</p>
          
      
          <h3>Maintenance du cache sur disque</h3>
            
      
            <p>Le module <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code> n'effectue aucune
            régulation de l'espace disque utilisé par le cache, mais s'il
            s'arrête en douceur en cas d'erreur disque et se comporte alors
            comme si le cache n'avait jamais existé.</p>
      
            <p>Par contre l'utilitaire
            <a href="programs/htcacheclean.html">htcacheclean</a> fourni avec
            httpd
            vous permet de nettoyer le cache périodiquement.
            Déterminer la fréquence à laquelle lancer <a href="programs/htcacheclean.html">htcacheclean</a> et la taille souhaitée
            pour le cache est une tâche relativement complexe et il vous faudra de
            nombreux essais et erreurs pour arriver à sélectionner des valeurs
            optimales.</p>
      
            <p><a href="programs/htcacheclean.html">htcacheclean</a> opère selon deux
            modes. Il peut s'exécuter comme démon résident, ou être lancé
            périodiquement par cron. <a href="programs/htcacheclean.html">htcacheclean</a> peut mettre une heure
            ou plus pour traiter de très grands caches (plusieurs dizaines de
            Gigaoctets) et si vous l'exécutez à partir de cron, il vous est
            conseillé de déterminer la durée typique d'un traitement, afin d'éviter
            d'exécuter plusieurs instances à la fois.</p>
      
            <p>Il est aussi conseillé d'attribuer un niveau de priorité "nice"
            approprié à htcacheclean de façon à ce qu'il n'effectue pas trop
            d'accès disque pendant le fonctionnement du serveur.</p>
      
            <p class="figure">
            <img src="images/caching_fig1.gif" alt="" width="600" height="406" /><br />
            <a id="figure1" name="figure1"><dfn>Figure 1</dfn></a>: Croissance
            typique du cache / séquence de nettoyage.</p>
      
            <p>Comme <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code> ne tient pas compte de l'espace
            utilisé dans le cache, vous devez vous assurer que
            <a href="programs/htcacheclean.html">htcacheclean</a> est configuré de
            façon à laisser suffisamment d'"espace de croissance"
            à la suite d'un nettoyage.</p>
          
      
          <h3><a name="memcache" id="memcache">Cache en mémoire</a></h3>
            
      
            <p>En utilisant le module <code class="module"><a href="./mod/mod_cache_socache.html">mod_cache_socache</a></code>,
            <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> peut mettre en cache des données à partir de
            diverses implémentations aussi nommées "fournisseurs". Par exemple, en
            utilisant le module <code class="module"><a href="./mod/mod_socache_memcache.html">mod_socache_memcache</a></code>, on peut
            spécifier que c'est <a href="http://memcached.org">memcached</a> qui doit
            être utilisé comme mécanisme de stockage sous-jacent.</p>
      
            <p>Typiquement, le module sera configuré comme suit :</p>
      
            <pre class="prettyprint lang-config">CacheEnable socache /
      CacheSocache memcache:memcd.example.com:11211</pre>
      
      
            <p>En outre, il est possible de spécifier plusieurs serveurs
            <code>memcached</code> en les ajoutant à la fin de la ligne
            <code>CacheSocache memcache:</code> et en les séparant par des virgules :</p>
      
            <pre class="prettyprint lang-config">CacheEnable socache /
      CacheSocache memcache:mem1.example.com:11211,mem2.example.com:11212</pre>
      
      
            <p>Divers autres fournisseurs <code class="module"><a href="./mod/mod_cache_socache.html">mod_cache_socache</a></code> utilisent
            aussi ce format. Par exemple :</p>
      
            <pre class="prettyprint lang-config">CacheEnable socache /
      CacheSocache shmcb:/path/to/datafile(512000)</pre>
      
      
            <pre class="prettyprint lang-config">CacheEnable socache /
      CacheSocache dbm:/path/to/datafile</pre>
      
      
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="socache-caching" id="socache-caching">Mise en cache générale d'objets partagés à deux états de forme
          clé/valeur</a></h2>
      
          
      
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_authn_socache.html">mod_authn_socache</a></code></li><li><code class="module"><a href="./mod/mod_socache_dbm.html">mod_socache_dbm</a></code></li><li><code class="module"><a href="./mod/mod_socache_dc.html">mod_socache_dc</a></code></li><li><code class="module"><a href="./mod/mod_socache_memcache.html">mod_socache_memcache</a></code></li><li><code class="module"><a href="./mod/mod_socache_shmcb.html">mod_socache_shmcb</a></code></li><li><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_authn_socache.html#authncachesocache">AuthnCacheSOCache</a></code></li><li><code class="directive"><a href="./mod/mod_ssl.html#sslsessioncache">SSLSessionCache</a></code></li><li><code class="directive"><a href="./mod/mod_ssl.html#sslstaplingcache">SSLStaplingCache</a></code></li></ul></td></tr></table>
          
          <p>Le serveur HTTP Apache fournit un cache d'objets partagés de bas
          niveau pour la mise en cache d'informations comme les sessions SSL
          ou les données d'authentification dans l'interface <a href="socache.html">socache</a>.</p>
      
          <p>Pour chaque implémentation un module supplémentaire est fourni
          qui offre les services d'arrière-plan suivants :</p>
      
          <dl>
          <dt><code class="module"><a href="./mod/mod_socache_dbm.html">mod_socache_dbm</a></code></dt>
          <dd>Cache d'objets partagés basé sur DBM.</dd>
          <dt><code class="module"><a href="./mod/mod_socache_dc.html">mod_socache_dc</a></code></dt>
          <dd>Cache d'objets partagés basé sur Distcache.</dd>
          <dt><code class="module"><a href="./mod/mod_socache_memcache.html">mod_socache_memcache</a></code></dt>
          <dd>Cache d'objets partagés basé sur Memcache.</dd>
          <dt><code class="module"><a href="./mod/mod_socache_shmcb.html">mod_socache_shmcb</a></code></dt>
          <dd>Cache d'objets partagés basé sur la mémoire partagée.</dd>
          </dl>
      
          <h3><a name="mod_authn_socache-caching" id="mod_authn_socache-caching">Mise en cache des données d'authentification</a></h3>
            
      
            <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_authn_socache.html">mod_authn_socache</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_authn_socache.html#authncachesocache">AuthnCacheSOCache</a></code></li></ul></td></tr></table>
      
            <p>Le module <code class="module"><a href="./mod/mod_authn_socache.html">mod_authn_socache</a></code> permet la mise en
            cache des données issues d'une authentification, diminuant ainsi
            la charge des serveurs d'authentification d'arrière-plan.</p>
      
          
      
          <h3><a name="mod_ssl-caching" id="mod_ssl-caching">Mise en cache des sessions SSL</a></h3>
            
      
            <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_ssl.html#sslsessioncache">SSLSessionCache</a></code></li><li><code class="directive"><a href="./mod/mod_ssl.html#sslstaplingcache">SSLStaplingCache</a></code></li></ul></td></tr></table>
      
            <p>Le module <code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code> utilise l'interface
            <code>socache</code> pour fournir un cache de session et un cache
            de base.</p>
      
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="file-caching" id="file-caching">Mise en cache à base de fichiers spécialisés</a></h2>
      
          
      
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_file_cache.html#cachefile">CacheFile</a></code></li><li><code class="directive"><a href="./mod/mod_file_cache.html#mmapfile">MMapFile</a></code></li></ul></td></tr></table>
      
          <p>Sur les plateformes où le système de fichiers peut être lent, ou
          lorsque les descripteurs de fichiers sont gourmands en ressources,
          il est possible de précharger des fichiers en mémoire au démarrage
          du serveur.</p>
      
          <p>Sur les systèmes où l'ouverture des fichiers est lente, il est
          possible d'ouvrir le fichier au démarrage du serveur et de mettre en
          cache le descripteur de fichier. Ces options peuvent vous aider sur
          les systèmes où l'accès aux fichiers statiques est lent.</p>
      
          <h3><a name="filehandle" id="filehandle">Mise en cache des descripteurs de fichier</a></h3>
            
      
            <p>Le processus d'ouverture d'un fichier peut être en soi une
            source de ralentissement, en particulier sur les systèmes de
            fichiers sur le réseau. httpd permet d'éviter ce ralentissement en
            maintenant un cache des descripteurs de fichiers ouverts pour les
            fichiers souvent servis. Actuellement, httpd fournit une seule
            implémentation de mise en cache des descripteurs de fichiers.</p>
      
            <h4>CacheFile</h4>
              
      
              <p>La forme la plus basique de mise en cache que propose httpd
      	est la mise en cache des descripteurs de fichiers fournie par le
      	module <code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code>. Plutôt que de mettre en
      	cache le contenu des fichiers, ce cache maintient une table des
      	descripteurs de fichiers ouverts. Les fichiers devant faire
      	l'objet d'une mise en cache de ce type sont spécifiés dans le
      	fichier de configuration via la directive <code class="directive"><a href="./mod/mod_file_cache.html#cachefile">CacheFile</a></code>.</p>
      
              <p>La directive <code class="directive"><a href="./mod/mod_file_cache.html#cachefile">CacheFile</a></code> informe httpd
      	qu'il doit ouvrir le fichier lors de son démarrage et qu'il doit
      	réutiliser le descripteur de fichier mis en cache pour tous les
      	accès futurs à ce fichier.</p>
      
              <pre class="prettyprint lang-config">CacheFile /usr/local/apache2/htdocs/index.html</pre>
      
      
              <p>Si vous désirez mettre en cache un grand nombre de fichiers
      	de cette manière, vous devez vous assurer que le nombre maximal
      	de fichiers ouverts pour votre système d'exploitation est défini
      	à une valeur suffisante.</p>
      
              <p>Bien que l'utilisation de la directive <code class="directive"><a href="./mod/mod_file_cache.html#cachefile">CacheFile</a></code> n'entraîne pas de
      	mise en cache du contenu du fichier proprement dit, elle
      	implique que si le fichier est modifié pendant l'exécution du
      	serveur, ces modifications ne seront pas prises en compte. Le
      	fichier sera toujours servi dans l'état où il se trouvait au
      	moment du démarrage du serveur.</p>
      
              <p>Si le fichier est supprimé pendant l'exécution du serveur, ce
      	dernier conservera le descripteur de fichier ouvert associé et
      	servira le fichier dans l'état où il se trouvait au
      	moment du démarrage du serveur. Cela signifie aussi que même si
      	le fichier a été supprimé, et n'apparaît donc plus dans le
      	système de fichiers, l'espace disque libéré ne sera disponible
      	qu'une fois le serveur httpd arrêté et donc le descripteur de
      	fichier fermé.</p>
            
      
          
      
          <h3><a name="inmemory" id="inmemory">In-Memory Caching</a></h3>
            
      
          <p>Servir un contenu directement depuis la mémoire système est
          universellement reconnu comme la méthode la plus rapide. Lire des fichiers
          depuis un contrôleur de disque ou pire, depuis un réseau distant est plus
          lent de plusieurs ordres de grandeur. Les contrôleurs de disque réalisent
          en général des opérations mécaniques, et l'accès au réseau est limité par la
          bande passante dont vous disposez. Par contre, les temps d'accès à la
          mémoire sont de l'ordre de la nano-seconde.</p>
      
          <p>Cependant la mémoire système n'est pas bon marché; à capacité égale,
          c'est de loin le type de stockage le plus coûteux et il est important de
          s'assurer qu'elle est utilisée efficacement. Le fait de mettre en cache
          des fichiers en mémoire diminue d'autant la quantité de mémoire système
          disponible. Comme nous le verrons plus loin, ce n'est pas un problème en
          soi dans le cas de la mise en cache par l'intermédiaire du système
          d'exploitation, mais si l'on utilise la mise en cache en mémoire propre à
          httpd, il faut prendre garde à ne pas allouer trop de mémoire au cache.
          Sinon le système sera contraint d'utiliser le swap, ce qui dégradera
          sensiblement les performances.</p>
      
            <h4>Mise en cache par l'intermédiaire du système d'exploitation</h4>
            
      
            <p>Dans la plupart des systèmes d'exploitation modernes, c'est le noyau
            qui gère directement la mise en cache en mémoire des données relatives
            aux fichiers. C'est une fonctionnalité puissante, et les systèmes
            d'exploitation s'en acquittent fort bien pour la plus grande partie.
            Considérons par exemple, dans le cas de Linux, la différence entre le
            temps nécessaire à la première lecture d'un fichier et le temps
            nécessaire à sa deuxième lecture;</p>
      
              <div class="example"><pre>colm@coroebus:~$ time cat testfile &gt; /dev/null
      real    0m0.065s
      user    0m0.000s
      sys     0m0.001s
      colm@coroebus:~$ time cat testfile &gt; /dev/null
      real    0m0.003s
      user    0m0.003s
      sys     0m0.000s</pre></div>
      
            <p>Même pour ce petit fichier, il y a une grande différence entre les
            temps nécessaires pour lire le fichier. Ceci est du au fait que le
            noyau a mis en cache le contenu du fichier en mémoire.</p>
      
            <p>Du fait de toujours pouvoir disposer de mémoire système, vous pouvez
            être assuré qu'il y aura de plus en plus de contenus de fichiers stockés
            dans ce cache. Ceci peut s'avérer une méthode de mise en cache en mémoire
            très efficace, et ne nécessite aucune configuration supplémentaire
            de httpd.</p>
      
            <p>De plus, comme le système d'exploitation sait si des fichiers
            ont été
            supprimés ou modifiés, il peut effacer automatiquement des contenus de
            fichiers du cache lorsque cela s'avère nécessaire. Ceci constitue un gros
            avantage par rapport à la mise en cache en mémoire
            de httpd qui n'a
            aucune possibilité de savoir si un fichier a été modifié.</p>
            
      
          <p>En dépit des performances et des avantages de la mise en cache
          automatique par le système d'exploitation, la mise en cache en mémoire
          peut être effectuée plus efficacement par httpd dans certaines
          circonstances.</p>
      
          <h4>Mise en cache à l'aide de la directive MMapFile</h4>
            
      
            <p>La directive <code class="directive"><a href="./mod/mod_file_cache.html#mmapfile">MMapFile</a></code>
            fournie par le module <code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code> vous permet de
            demander à httpd de charger un contenu de fichier statique en mémoire
            lors de son démarrage (à l'aide de l'appel
            système mmap). httpd
            utilisera le contenu chargé en mémoire pour satisfaire ultérieurement
            toutes les demandes d'accès à ce fichier.</p>
      
              <pre class="prettyprint lang-config">MMapFile /usr/local/apache2/htdocs/index.html</pre>
      
      
            <p>Comme dans le cas de la directive
            <code class="directive"><a href="./mod/mod_file_cache.html#cachefile">CacheFile</a></code>, toute
            modification du fichier ne sera plus prise en compte par httpd une fois
            ce dernier démarré.</p>
      
            <p> La directive
            <code class="directive"><a href="./mod/mod_file_cache.html#mmapfile">MMapFile</a></code> ne gardant
            pas la trace de la quantité de mémoire qu'elle alloue, vous devez prendre
            garde de ne pas en abuser. Chaque processus enfant de httpd utilisant
            sa propre réplique de la mémoire allouée, il est donc d'une importance
            critique de s'assurer que les fichiers chargés ne sont pas d'une taille
            trop importante afin d'épargner au système l'utilisation du swap.</p>
            
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">Considérations sur la sécurité</a></h2>
          
      
          <h3>Autorisation et contrôle d'accès</h3>
            
      
            <p>Utiliser <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> revient sensiblement à la même
            chose qu'avoir un mandataire inverse intégré (reverse-proxy). Les requêtes
            seront servies par le module de mise en cache sauf si ce dernier
            détermine qu'un processus d'arrière-plan doit être appelé. La mise en
            cache de ressources locales modifie considérablement le modèle de
            sécurité de httpd.</p>
      
            <p>Comme le parcours de la hiérarchie d'un système de fichiers pour
            examiner le contenu d'éventuels fichiers
            <code>.htaccess</code> serait une opération très coûteuse en ressources,
            annulant partiellement de ce fait l'intérêt de la mise en cache
            (accélérer le traitement des requêtes),
            <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> ne se préoccupe pas de savoir s'il a
            l'autorisation de servir une entité mise en cache. En d'autres termes,
            si <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> a mis en cache un certain contenu, ce
            dernier sera servi à partir du cache tant qu'il ne sera pas arrivé à
            expiration.</p>
      
            <p>Si par exemple, votre configuration autorise l'accès à une ressource
            en fonction de l'adresse IP, vous devez vous assurer que ce contenu n'est
            pas mis en cache. Ceci est possible en utilisant la directive
            <code class="directive"><a href="./mod/mod_cache.html#cachedisable">CacheDisable</a></code>, ou le module
            <code class="module"><a href="./mod/mod_expires.html">mod_expires</a></code>. Livré à lui-même,
            <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> - pratiquement comme un mandataire inverse -
            mettrait en cache le contenu lors de son service, et le servirait ensuite
            à tout client, vers n'importe quelle adresse IP.</p>
      
            <p>Lorsque la directive <code class="directive"><a href="./mod/mod_cache.html#cachequickhandler">CacheQuickHandler</a></code> est définie à
            <code>Off</code>, toutes les phases du traitement de la requête
            sont exécutées et le modèle de sécurité reste le même.</p>
      
          
      
          <h3>Piratages locaux</h3>
            
      
            <p>Etant donné que les requêtes des utilisateurs finaux peuvent être
            servies depuis le cache, ce dernier est une cible potentielle pour ceux
            qui veulent défigurer un contenu ou interférer avec lui. Il est important
            de garder à l'esprit que l'utilisateur sous lequel tourne
            httpd doit
            toujours avoir l'accès en écriture dans le cache. Ceci est en contraste
            total avec la recommandation usuelle d'interdire à l'utilisateur sous
            lequel tourne Apache
            l'accès en écriture à tout contenu.</p>
      
            <p>Si l'utilisateur sous lequel tourne Apache est compromis,
            par exemple à cause d'une
            faille de sécurité dans un processus CGI, il est possible que le cache
            fasse l'objet d'une attaque. Il est relativement aisé d'insérer ou de
            modifier une entité dans le cache en utilisant le module
            <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code>.</p>
      
            <p>Cela représente un risque relativement élévé par rapport aux autres
            types d'attaques qu'il est possible de mener sous l'utilisateur apache.
            Si vous utilisez <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code>, vous devez garder ceci
            à l'esprit : effectuez toujours les mises à jour de
            httpdquand des
            correctifs de sécurité sont annoncés et exécutez les processus CGI sous
            un utilisateur autre qu'apache en utilisant
            <a href="suexec.html">suEXEC</a> dans la mesure du possible.</p>
      
          
      
          <h3>Empoisonnement du cache (Cache Poisoning)</h3>
            
      
            <p>Si vous utilisez httpd comme serveur mandataire avec mise en cache,
            vous vous exposez aussi à un éventuel "Empoisonnement du
            cache" (Cache poisoning). L'empoisonnement du cache est un terme général
            pour désigner les attaques au cours desquelles l'attaquant fait en sorte
            que le serveur mandataire renvoie à un contenu incorrect (et souvent
            indésirable) suite à en provenance du serveur d'arrière-plan.
            </p>
      
            <p>Par exemple, si les serveur DNS qu'utilise votre système où tourne
            httpd sont vulnérables à l'empoisonnement du cache des DNS, un attaquant
            pourra contrôler vers où httpd se connecte lorsqu'il demande un contenu
            depuis le serveur d'origine.
            Un autre exemple est constitué par les attaques ainsi nommées
            "Dissimulation de requêtes HTTP" (HTTP request-smuggling).</p>
      
            <p>Ce document n'est pas le bon endroit pour une discussion approfondie
            à propos de la Dissimulation de requêtes HTTP (utilisez plutôt votre
            moteur de recherche favori); il est cependant important de savoir qu'il
            est possible d'élaborer une série de requêtes, et d'exploiter une
            vulnérabilité d'un serveur web d'origine de telle façon que l'attaquant
            puisse contrôler entièrement le contenu renvoyé par le mandataire.</p>
          
      
          <h3>Déni de Service / Cachebusting</h3>
            
      
            <p>Le mécanisme utilisé via l'en-tête Vary permet de mettre en
            cache simultanément plusieurs variantes d'une ressource avec la
            même URL. Le cache sélectionne la variante correcte à envoyer au
            client en fonction des valeurs d'en-tête fournies par ce dernier.
            Ce mécanisme peut devenir un problème lorsqu'on tente d'appliquer
            le mécanisme des variantes à un en-tête connu pour pouvoir
            posséder un grand nombre de valeurs
            possibles en utilisation normal, comme par exemple l'en-tête
            <code>User-Agent</code>. En fonction de la popularité du site web,
            des milliers ou même des millions d'entrées de cache dupliquées
            peuvent être créées pour la même URL, submergeant les autres
            entrées du cache.</p>
            
            <p>Dans d'autres cas, il peut être nécessaire de modifier l'URL
            d'une ressource particulière à chaque requête, en général en lui
            ajoutant une chaîne "cachebuster". Si ce contenu est déclaré comme
            pouvant être mis en cache par un serveur avec une durée de
            fraîcheur significative, ces entrées peuvent submerger les entrées
            légitimes du cache. Alors que <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> fournit
            une directive <code class="directive"><a href="./mod/mod_cache.html#cacheignoreurlsessionidentifiers">CacheIgnoreURLSessionIdentifiers</a></code>,
            cette dernière doit être utilisée avec prudence pour s'assurer que
            les caches du navigateur ou du mandataire le plus proche
            (downstream proxy) ne sont pas victimes du même problème de Déni de
            service.</p>
          
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/caching.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/caching.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./tr/caching.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/caching.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������httpd-2.4.41/docs/manual/urlmapping.html.ko.euc-kr��������������������������������������������������0000644�0000000�0000050�00000046520�13412755316�020320� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>URLÀ» ÆÄÀϽýºÅÛ À§Ä¡·Î ´ëÀÀÇϱâ - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>URLÀ» ÆÄÀϽýºÅÛ À§Ä¡·Î ´ëÀÀÇϱâ</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/urlmapping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/urlmapping.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/urlmapping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/urlmapping.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/urlmapping.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p>ÀÌ ¹®¼­´Â ¿äûÀÇ URLÀ» °¡Áö°í ¾ÆÆÄÄ¡°¡ ¾î¶»°Ô ¼­ºñ½ºÇÒ 
          ÆÄÀÏÀÇ ÆÄÀϽýºÅÛ»ó À§Ä¡¸¦ ã´ÂÁö ¼³¸íÇÑ´Ù.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#related">°ü·ÃµÈ ¸ðµâ°ú Áö½Ã¾îµé</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#documentroot">DocumentRoot</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#outside">DocumentRoot ¹Û¿¡ ÀÖ´Â ÆÄÀϵé</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#user">»ç¿ëÀÚ µð·ºÅ丮</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#redirect">URL ¸®´ÙÀÌ·º¼Ç(Redirection)</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#proxy">¿ªÇÁ·Ï½Ã(Reverse Proxy)</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#rewrite">ÀçÀÛ¼º ¿£Áø (Rewriting Engine)</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#notfound">File Not Found</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">°ü·ÃµÈ ¸ðµâ°ú Áö½Ã¾îµé</a></h2>
      
      <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_alias.html">mod_alias</a></code></li><li><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li><li><code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code></li><li><code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code></li><li><code class="module"><a href="./mod/mod_vhost_alias.html">mod_vhost_alias</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_alias.html#alias">Alias</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code></li><li><code class="directive"><a href="./mod/mod_speling.html#checkspelling">CheckSpelling</a></code></li><li><code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code></li><li><code class="directive"><a href="./mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreverse">ProxyPassReverse</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiedomain">ProxyPassReverseCookieDomain</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiepath">ProxyPassReverseCookiePath</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#redirect">Redirect</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#redirectmatch">RedirectMatch</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritematch">RewriteMatch</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#scriptalias">ScriptAlias</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#scriptaliasmatch">ScriptAliasMatch</a></code></li><li><code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code></li></ul></td></tr></table>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="documentroot" id="documentroot">DocumentRoot</a></h2>
      
          <p>¿äûÀ» ¹ÞÀº ¾ÆÆÄÄ¡´Â ¾î¶² ÆÄÀÏÀ» ¼­ºñ½ºÇÒÁö °áÁ¤ÇϱâÀ§ÇØ
          ±âº»ÀûÀ¸·Î ¿äûÀÇ URL-°æ·Î(URL¿¡¼­ È£½ºÆ®¸í°ú Æ÷Æ® µÚ¿¡
          ³ª¿À´Â ºÎºÐ)¸¦ ¼³Á¤ÆÄÀÏ¿¡¼­ ÁöÁ¤ÇÑ <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> µÚ¿¡ ºÙÀδÙ. ±×·¡¼­
          <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> ¾Æ·¡ÀÖ´Â
          ÆÄÀϰú µð·ºÅ丮µéÀº À¥¿¡¼­ º¸°ÔµÉ ±âº»ÀûÀÎ ³»¿ëÀÌ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="outside" id="outside">DocumentRoot ¹Û¿¡ ÀÖ´Â ÆÄÀϵé</a></h2>
      
          <p>Á¾Á¾ ÆÄÀϽýºÅÛ¿¡¼­ <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> ¾Æ·¡ ÀÖÁö¾ÊÀº ºÎºÐÀ»
          À¥¿¡¼­ Á¢±ÙÇÒ Çʿ䰡 ÀÖ´Ù. ¾ÆÆÄÄ¡´Â ÀÌ °æ¿ì ¿©·¯°¡Áö ¹æ¹ýÀ»
          »ç¿ëÇÒ ¼ö ÀÖ´Ù. À¯´Ð½º ½Ã½ºÅÛ¿¡¼­ ½Éº¼¸µÅ©¸¦ »ç¿ëÇÏ¿©
          ÆÄÀϽýºÅÛÀÇ ´Ù¸¥ ºÎºÐÀ» <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> ¾Æ·¡¿¡ µÑ ¼ö ÀÖ´Ù.
          º¸¾ÈÀ» À§ÇØ ¾ÆÆÄÄ¡´Â ÇØ´ç µð·ºÅ丮ÀÇ <code class="directive"><a href="./mod/core.html#options">Options</a></code> ¼³Á¤¿¡
          <code>FollowSymLinks</code>³ª
          <code>SymLinksIfOwnerMatch</code>°¡ ÀÖ´Â °æ¿ì¿¡¸¸ ½Éº¼¸µÅ©¸¦
          µû¶ó°£´Ù.</p>
      
          <p>¶Ç, <code class="directive"><a href="./mod/mod_alias.html#alias">Alias</a></code>
          Áö½Ã¾î´Â ÆÄÀϽýºÅÛÀÇ Æ¯Á¤ ºÎºÐÀ» À¥°ø°£¿¡ ´ëÀÀÇÑ´Ù. ¿¹¸¦
          µé¾î ´ÙÀ½°ú °°´Ù¸é</p>
      
      <div class="example"><p><code>Alias /docs /var/web</code></p></div>
      
          <p>URL <code>http://www.example.com/docs/dir/file.html</code>˼
          <code>/var/web/dir/file.html</code>À» °¡Áö°í ¼­ºñ½ºÇÑ´Ù.
          ÁöÁ¤ÇÑ °æ·Î¿¡ ÀÖ´Â ¸ðµç ³»¿ëÀ» CGI ½ºÅ©¸³Æ®·Î Ãë±ÞÇÏ´Â °ÍÀ»
          Á¦¿ÜÇϰí´Â <code class="directive"><a href="./mod/mod_alias.html#scriptalias">ScriptAlias</a></code>
          Áö½Ã¾îµµ °°Àº ÀÏÀ» ÇÑ´Ù.</p>
      
          <p><code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code>¿Í
          <code class="directive"><a href="./mod/mod_alias.html#scriptaliasmatch">ScriptAliasMatch</a></code>
          Áö½Ã¾îÀÇ °­·ÂÇÑ Á¤±ÔÇ¥Çö½Ä±â¹Ý ´ëÀÀ°ú ´ëÄ¡¸¦ »ç¿ëÇÏ¿© ´õ
          À¯¿¬ÇÑ ¼³Á¤ÀÌ °¡´ÉÇÏ´Ù. ¿¹¸¦ µé¾î,</p>
      
      <div class="example"><p><code>ScriptAliasMatch ^/~([a-zA-Z0-9]+)/cgi-bin/(.+)
            /home/$1/cgi-bin/$2</code></p></div>
      
          <p>´Â <code>http://example.com/~user/cgi-bin/script.cgi</code>·ÎÀÇ
          ¿äûÀ» °æ·Î <code>/home/user/cgi-bin/script.cgi</code>·Î
          ´ëÀÀÇϰí, ÇØ´ç ÆÄÀÏÀ» CGI ½ºÅ©¸³Æ®·Î Ãë±ÞÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="user" id="user">»ç¿ëÀÚ µð·ºÅ丮</a></h2>
      
          <p>À¯´Ð½º ½Ã½ºÅÛÀº ÀüÅëÀûÀ¸·Î ƯÁ¤ »ç¿ëÀÚ <em>user</em>ÀÇ
          Ȩµð·ºÅ丮¸¦ <code>~user/</code>·Î ÁöĪÇÑ´Ù.
          <code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code> ¸ðµâÀº ÀÌ °³³äÀ» À¥¿¡±îÁö
          È®ÀåÇÏ¿©, ´ÙÀ½°ú °°Àº URLÀ» °¡Áö°í °¢ »ç¿ëÀÚ È¨µð·ºÅ丮
          ¾È¿¡ ÀÖ´Â ÆÄÀÏÀ» ¼­ºñ½ºÇÑ´Ù.</p>
      
      <div class="example"><p><code>http://www.example.com/~user/file.html</code></p></div>
      
          <p>º¸¾È»ó À¥¿¡¼­ »ç¿ëÀÚ È¨µð·ºÅ丮·Î Á÷Á¢ Á¢±ÙÇÒ ¼ö ÀÖÀ¸¸é
          ¾ÈµÈ´Ù. ±×·¡¼­ <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code>
          Áö½Ã¾î´Â »ç¿ëÀÚ È¨µð·ºÅ丮¿¡¼­ À¥¿ë ÆÄÀϵéÀÌ ÀÖÀ» µð·ºÅ丮¸¦
          ÁöÁ¤ÇÑ´Ù. ±âº» ¼³Á¤ <code>Userdir public_html</code>À» »ç¿ëÇϰí
          <code>/home/user/</code>°¡ <code>/etc/passwd</code>¿¡ ÁöÁ¤µÈ
          »ç¿ëÀÚ È¨µð·ºÅ丮¶ó¸é, À§ÀÇ URLÀº ÆÄÀÏ
          <code>/home/user/public_html/file.html</code>¿¡ ´ëÀÀÇÑ´Ù.</p>
      
          <p>¶Ç, <code>Userdir</code> Áö½Ã¾î´Â <code>/etc/passwd</code>¿¡
          Ȩµð·ºÅ丮ÀÇ À§Ä¡°¡ ÀúÀåµÇÁö¾Ê´Â ½Ã½ºÅÛÀ» À§ÇØ ¿©·¯ ´Ù¸¥
          ÇüŸ¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>¾î¶² »ç¶÷Àº (º¸Åë À¥¿¡¼­ <code>%7e</code>·Î ÀÎÄÚµùµÇ´Â)
          "~" ±âÈ£°¡ ÀÌ»óÇÏ¿© ´Ù¸¥ ¹æ½ÄÀ¸·Î »ç¿ëÀÚ µð·ºÅ丮¸¦ ³ªÅ¸³»°í
          ½Í¾îÇÑ´Ù. ÀÌ ±â´ÉÀº mod_userdirÀÌ Á¦°øÇÏÁö¾Ê´Â´Ù. ±×·¯³ª
          »ç¿ëÀÚ È¨µð·ºÅ丮°¡ ±ÔÄ¢ÀûÀÎ ¹æ¹ýÀ¸·Î ±¸¼ºµÇÀÖ´Ù¸é, <code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code> Áö½Ã¾î¸¦ »ç¿ëÇÏ¿©
          ¿øÇÏ´Â È¿°ú¸¦ ¾òÀ» ¼ö ÀÖ´Ù. ¿¹¸¦ µé¾î, ´ÙÀ½ÀÇ
          <code>AliasMatch</code> Áö½Ã¾î¸¦ »ç¿ëÇϸé
          <code>http://www.example.com/upages/user/file.html</code>ÀÌ
          <code>/home/user/public_html/file.html</code>¿¡ ´ëÀÀÇÑ´Ù:</p>
      
      <div class="example"><p><code>AliasMatch ^/upages/([a-zA-Z0-9]+)/?(.*)
            /home/$1/public_html/$2</code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="redirect" id="redirect">URL ¸®´ÙÀÌ·º¼Ç(Redirection)</a></h2>
      
          <p>¾Õ¿¡¼­ ¼³¸íÇÑ ¼³Á¤ Áö½Ã¾îµéÀº ¾ÆÆÄÄ¡°¡ ÆÄÀϽýºÅÛÀÇ Æ¯Á¤
          Àå¼Ò¿¡ ÀÖ´Â ³»¿ëÀ» Ŭ¶óÀÌ¾ðÆ®¿¡°Ô º¸³»°Ô ¸¸µç´Ù. ±×·¯³ª
          ¶§¶§·Î ¿äûÇÑ ³»¿ëÀÌ ´Ù¸¥ URL¿¡ ÀÖ´Ù°í Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ¾Ë·ÁÁÖ¾î,
          Ŭ¶óÀÌ¾ðÆ®°¡ »õ·Î ±× URLÀ» ¿äûÇϵµ·Ï ¸¸µå´Â °ÍÀÌ ÁÁÀ» ¶§°¡
          ÀÖ´Ù. À̸¦ <em>¸®´ÙÀÌ·º¼Ç(redirection)</em>À̶ó°í Çϸç,
          <code class="directive"><a href="./mod/mod_alias.html#redirect">Redirect</a></code> Áö½Ã¾î¸¦
          »ç¿ëÇÑ´Ù. ¿¹¸¦ µé¾î, <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> ¾Æ·¡ <code>/foo/</code>
          µð·ºÅ丮ÀÇ ³»¿ëÀ» »õ·Î <code>/bar/</code> µð·ºÅ丮·Î ¿Å°å´Ù¸é
          ´ÙÀ½°ú °°ÀÌ Å¬¶óÀÌ¾ðÆ®°¡ »õ·Î¿î À§Ä¡¸¦ ¿äûÇϵµ·Ï ÇÑ´Ù:</p>
      
      <div class="example"><p><code>Redirect permanent /foo/
            http://www.example.com/bar/</code></p></div>
      
          <p>±×·¯¸é <code>www.example.com</code> ¼­¹öÀÇ <code>/foo/</code>·Î
          ½ÃÀÛÇÏ´Â URL-°æ·Î´Â <code>/foo/</code>¸¦ <code>/bar/</code>·Î
          ¹Ù²Û URL·Î ¸®´ÙÀÌ·º¼ÇµÈ´Ù. Ŭ¶óÀÌ¾ðÆ®¸¦ ¿ø·¡ ¼­¹ö¿Ü¿¡ ¾î¶²
          ´Ù¸¥ ¼­¹ö·Îµµ ¸®´ÙÀÌ·º¼ÇÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>¶Ç, ¾ÆÆÄÄ¡´Â ´õ º¹ÀâÇÑ ÀçÀÛ¼º ¹®Á¦¸¦ À§ÇØ
          <code class="directive"><a href="./mod/mod_alias.html#redirectmatch">RedirectMatch</a></code>
          Áö½Ã¾î¸¦ Á¦°øÇÑ´Ù. ¿¹¸¦ µé¾î, ´Ù¸¥ ¿äûÀº ±×´ë·Î µÎ°í »çÀÌÆ®
          ȨÆäÀÌÁö¿¡ ´ëÇÑ ¿äû¸¸À» ´Ù¸¥ »çÀÌÆ®·Î ¸®´ÙÀÌ·º¼ÇÇÏ·Á¸é:</p>
      
      <div class="example"><p><code>RedirectMatch permanent ^/$
            http://www.example.com/startpage.html</code></p></div>
      
          <p>Àӽ÷Π»çÀÌÆ®ÀÇ ¸ðµç ÆäÀÌÁö¸¦ ´Ù¸¥ »çÀÌÆ®ÀÇ Æ¯Á¤ ÆäÀÌÁö·Î
          ¸®´ÙÀÌ·º¼ÇÇÏ·Á¸é:</p>
      
      <div class="example"><p><code>RedirectMatch temp .*
            http://othersite.example.com/startpage.html</code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="proxy" id="proxy">¿ªÇÁ·Ï½Ã(Reverse Proxy)</a></h2>
      
      <p>¾ÆÆÄÄ¡´Â ´Ù¸¥ ¼­¹ö¿¡ ÀÖ´Â ¹®¼­¸¦ ¼­¹öÀÇ URL °ø°£À¸·Î °¡Á®¿Ã
      ¼ö ÀÖ´Ù. ÀÌ °æ¿ì À¥¼­¹ö°¡ ¿ø°Ý ¼­¹ö¿¡¼­ ¹®¼­¸¦ °¡Á®¿Í¼­
      Ŭ¶óÀÌ¾ðÆ®¿¡°Ô Àü´ÞÇÏ´Â ÇÁ·Ï½Ã ¼­¹ö¿Í °°ÀÌ µ¿ÀÛÇϱ⶧¹®¿¡ ÀÌ·±
      ¹æ¹ýÀ» <em>¿ªÇÁ·Ï½Ã(reverse proxying)</em>¶ó°í ÇÑ´Ù. Ŭ¶óÀ̾ðÆ®ÀÇ
      ÀÔÀå¿¡¼­ ¿ªÇÁ·Ï½Ã ¼­¹ö°¡ ¹®¼­¸¦ º¸³»ÁÖ´Â °Íó·³ º¸À̹ǷΠÀϹÝ
      ÇÁ·Ï½Ã¿Í´Â ´Ù¸£´Ù.</p>
      
      <p>¾Æ·¡ ¼³Á¤¿¡¼­ Ŭ¶óÀÌ¾ðÆ®°¡ <code>/foo/</code>¿¡ ÀÖ´Â ¹®¼­¸¦
      ¿äûÇϸé, ¼­¹ö´Â <code>internal.example.com</code>ÀÇ
      <code>/bar/</code> µð·ºÅ丮¿¡¼­ ¹®¼­¸¦ °¡Á®¿Í¼­ ¹®¼­°¡ ¸¶Ä¡
      ¼­¹ö¿¡ ÀÖ¾ú´ø °Íó·³ Ŭ¶óÀÌ¾ðÆ®¿¡°Ô º¸³½´Ù.</p>
      
      <div class="example"><p><code>
      ProxyPass /foo/ http://internal.example.com/bar/<br />
      ProxyPassReverse /foo/ http://internal.example.com/bar/
      </code></p></div>
      
      <p><code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code>´Â ¼­¹ö°¡
      ÀûÀýÇÑ ¹®¼­¸¦ °¡Á®¿Àµµ·Ï ¼³Á¤Çϸç, <code class="directive"><a href="./mod/mod_proxy.html#proxypassreverse">ProxyPassReverse</a></code> Áö½Ã¾î´Â
      <code>internal.example.com</code>ÀÌ º¸³»´Â ¸®´ÙÀÌ·º¼ÇÀ» ÀçÀÛ¼ºÇÏ¿©
      ¸®´ÙÀÌ·º¼ÇÀÌ ÇöÀç ¼­¹öÀÇ ÀûÀýÇÑ µð·ºÅ丮¸¦ °¡¸®Å°µµ·Ï ÇÑ´Ù.
      ¶Ç, <code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiedomain">ProxyPassReverseCookieDomain</a></code>°ú
      <code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiedomain">ProxyPassReverseCookieDomain</a></code>˼
      °°Àº ¹æ¹ýÀ¸·Î ¿ø·¡ ¼­¹ö°¡ º¸³½ Äí۸¦ ÀçÀÛ¼ºÇÑ´Ù.</p>
      <p>±×·¯³ª ¹®¼­ ¾È¿¡ ÀÖ´Â ¸µÅ©´Â ÀçÀÛ¼ºÇÏÁö ¾ÊÀ½À» ÁÖÀÇÇ϶ó.
      <code>internal.example.com</code>¿¡ ´ëÇÑ Àý´ë¸µÅ©´Â Ŭ¶óÀÌ¾ðÆ®°¡
      ÇÁ·Ï½Ã¼­¹ö°¡ ¾Æ´Ï¶ó <code>internal.example.com</code>À¸·Î Á÷Á¢
      ¿äûÇÏ°Ô ÇÑ´Ù. Á¦»ïÀÚ°¡ ¸¸µç <a href="http://apache.webthing.com/mod_proxy_html/">mod_proxy_html</a>
      ¸ðµâÀ» »ç¿ëÇÏ¿© HTML°ú XHTML¿¡ ÀÖ´Â ¸µÅ©¸¦ ÀçÀÛ¼ºÇÒ ¼ö ÀÖ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rewrite" id="rewrite">ÀçÀÛ¼º ¿£Áø (Rewriting Engine)</a></h2>
      
          <p>´õ °­·ÂÇÑ Ä¡È¯ÀÌ ÇÊ¿äÇÒ¶§ <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>ÀÇ
          ÀçÀÛ¼º ¿£ÁøÀÌ µµ¿òÀÌ µÈ´Ù. ÀÌ ¸ðµâÀÇ Áö½Ã¾î´Â ºê¶ó¿ìÀú Á¾·ù³ª
          Ŭ¶óÀ̾ðÆ®ÀÇ IP ÁÖ¼Ò µî ¿äûÀÇ Æ¯Â¡À» °¡Áö°í ¾îµð¿¡ ÀÖ´Â
          ³»¿ëÀ» ¼­ºñ½ºÇÒÁö °áÁ¤ÇÒ ¼ö ÀÖ´Ù. ¶Ç, mod_rewrite´Â ¿äûÀ»
          ¾î¶»°Ô ó¸®ÇÒÁö °áÁ¤ÇϱâÀ§ÇØ ¿ÜºÎ µ¥ÀÌÅͺ£À̽º ÆÄÀÏÀ̳ª
          ÇÁ·Î±×·¥À» »ç¿ëÇÒ ¼ö ÀÖ´Ù. ÀçÀÛ¼º ¿£ÁøÀº À§¿¡¼­ ´Ù·é ¼¼
          Á¾·ù ´ëÀÀ, Áï, ³»ºÎ ¸®´ÙÀÌ·º¼Ç (alias), ¿ÜºÎ ¸®´ÙÀÌ·º¼Ç,
          ÇÁ·Ï½Ã, ¸ðµÎ¸¦ Áö¿øÇÑ´Ù. mod_rewrite¸¦ »ç¿ëÇÏ´Â ½ÇÁ¦ ¿¹´Â
          <a href="misc/rewriteguide.html">URL Á¦ÀÛ¼º Áöħ¼­</a>¿¡¼­
          ¼³¸íÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="notfound" id="notfound">File Not Found</a></h2>
      
          <p>°á±¹ ¿äûÇÑ URL¿¡ ´ëÀÀÇÏ´Â ÆÄÀÏÀ» ÆÄÀϽýºÅÛ¿¡¼­ ãÁö
          ¸øÇÑ °æ¿ìÀÌ´Ù. ¿©·¯ °¡Áö ÀÌÀ¯°¡ ÀÖ´Ù. ¾î¶² °æ¿ì ¹®¼­¸¦
          ´Ù¸¥ °÷À¸·Î ¿Å°å±â ¶§¹®ÀÏ ¼ö ÀÖ´Ù. ÀÌ °æ¿ì Ŭ¶óÀÌ¾ðÆ®¿¡°Ô
          <a href="#redirect">URL ¸®´ÙÀÌ·º¼Ç</a>À¸·Î ÀÚ¿øÀÇ »õ·Î¿î
          À§Ä¡¸¦ ¾Ë·ÁÁÖ´Â ¹æ¹ýÀÌ Á¦ÀÏ ÁÁ´Ù. ±×·¯¸é ÀÚ¿øÀ» ¿Å°Üµµ
          ¿À·¡µÈ ºÏ¸¶Å©³ª ¸µÅ©°¡ °è¼Ó À¯È¿ÇÏ´Ù.</p>
      
          <p>"File Not Found" ¿À·ùÀÇ ´Ù¸¥ ÀϹÝÀûÀÎ ¿øÀÎÀº ºê¶ó¿ìÀú¿¡
          Á÷Á¢ ȤÀº HTML ¸µÅ©¿¡ URLÀÌ À߸ø ÀÔ·ÂµÈ °æ¿ìÀÌ´Ù. ¾ÆÆÄÄ¡´Â
          <code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code> (¸ÂÃã¹ýÀÌ Æ²¸®Áö ¾Ê¾ÒÀ½) ¸ðµâ·Î
          ÀÌ¿Í °°Àº ¹®Á¦¸¦ µ½´Â´Ù. ÀÌ ¸ðµâÀ» »ç¿ëÇϸé "File Not Found"
          ¿À·ù°¡ ¹ß»ýÇÏ´Â °æ¿ì ºñ½ÁÇÑ ÆÄÀϸíÀ» °¡Áø ÀÚ¿øÀ» ã´Â´Ù.
          ¸¸¾à ¹ß°ßÇϸé mod_spelingÀº Ŭ¶óÀÌ¾ðÆ®¸¦ ¿Ã¹Ù¸¥ À§Ä¡·Î
          HTTP ¸®´ÙÀÌ·º¼ÇÇÑ´Ù. "ºñ½ÁÇÑ" ÆÄÀÏÀÌ ¿©·¯°³ ÀÖ´Ù¸é
          Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ¸ñ·ÏÀ» º¸³½´Ù.</p>
      
          <p>mod_spelingÀÇ Æ¯È÷ À¯¿ëÇÑ ÀåÁ¡Àº ´ë¼Ò¹®ÀÚ¸¦ ±¸º°ÇÏÁö¾Ê°í
          ÆÄÀϸíÀ» ºñ±³ÇÏ´Â ±â´ÉÀÌ´Ù. ±×·¡¼­ À¯´Ð½º ÆÄÀϽýºÅÛ°ú URLÀÇ
          ´ë¼Ò¹®ÀÚ ¼ºÁúÀ» ¾ËÁö¸øÇÏ´Â »ç¿ëÀÚ°¡ ÀÖ´Â ½Ã½ºÅÛ¿¡ µµ¿òÀÌ
          µÈ´Ù. ±×·¯³ª mod_spelingÀÌ ÀÚÁÖ URLÀ» °íÃľßÇÑ´Ù¸é, "À߸øµÈ"
          ¿äû¶§¸¶´Ù URL ¸®´ÙÀÌ·º¼Ç°ú Ŭ¶óÀ̾ðÆ®ÀÇ »õ·Î¿î ¿äûÀÌ
          ÀϾ¹Ç·Î ¼­¹ö¿¡ ºÎ´ãÀÌ µÈ´Ù.</p>
      
          <p>ã´Â ½Ãµµ°¡ ¸ðµÎ ½ÇÆÐÇÏ¸é ¾ÆÆÄÄ¡´Â HTTP status code 404
          (file not found) ¿À·ùÆäÀÌÁö¸¦ º¸³½´Ù. ÀÌ ÆäÀÌÁöÀÇ ³»¿ëÀº
          <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code> Áö½Ã¾î·Î
          Á¶ÀýÇϸç, <a href="custom-error.html">»ç¿ëÀÚÁ¤ÀÇ ¿À·ù ÀÀ´ä</a>
          ¹®¼­¸¦ Âü°íÇÏ¿© »ç¿ëÀÚÁ¤ÀÇÇÒ ¼ö ÀÖ´Ù.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/urlmapping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/urlmapping.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/urlmapping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/urlmapping.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/urlmapping.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/urlmapping.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/mpm.html�������������������������������������������������������������������0000644�0000000�0000050�00000001305�13362070302�015113� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: mpm.html.de
      Content-Language: de
      Content-type: text/html; charset=ISO-8859-1
      
      URI: mpm.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: mpm.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: mpm.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: mpm.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: mpm.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: mpm.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      
      URI: mpm.html.zh-cn.utf8
      Content-Language: zh-cn
      Content-type: text/html; charset=UTF-8
      ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/logs.html.en���������������������������������������������������������������0000644�0000000�0000050�00000116404�13412755316�015711� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Log Files - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Log Files</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/logs.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/logs.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/logs.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/logs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/logs.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>In order to effectively manage a web server, it is necessary
          to get feedback about the activity and performance of the
          server as well as any problems that may be occurring. The Apache HTTP Server
          provides very comprehensive and flexible logging
          capabilities. This document describes how to configure its
          logging capabilities, and how to understand what the logs
          contain.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#overview">Overview</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#security">Security Warning</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#errorlog">Error Log</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#permodule">Per-module logging</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#accesslog">Access Log</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#rotation">Log Rotation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#piped">Piped Logs</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#virtualhost">Virtual Hosts</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#other">Other Log Files</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">Overview</a></h2>
          
      
        <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_log_config.html">mod_log_config</a></code></li><li><code class="module"><a href="./mod/mod_log_forensic.html">mod_log_forensic</a></code></li><li><code class="module"><a href="./mod/mod_logio.html">mod_logio</a></code></li><li><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code></li></ul></td><td /></tr></table>
      
        <p>
        The Apache HTTP Server provides a variety of different mechanisms for
        logging everything that happens on your server, from the initial
        request, through the URL mapping process, to the final resolution of
        the connection, including any errors that may have occurred in the
        process. In addition to this, third-party modules may provide logging
        capabilities, or inject entries into the existing log files, and
        applications such as CGI programs, or PHP scripts, or other handlers,
        may send messages to the server error log.
        </p>
      
        <p>
        In this document we discuss the logging modules that are a standard
        part of the http server.
        </p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="security" id="security">Security Warning</a></h2>
          
      
          <p>Anyone who can write to the directory where Apache httpd is
          writing a log file can almost certainly gain access to the uid
          that the server is started as, which is normally root. Do
          <em>NOT</em> give people write access to the directory the logs
          are stored in without being aware of the consequences; see the
          <a href="misc/security_tips.html">security tips</a> document
          for details.</p>
      
          <p>In addition, log files may contain information supplied
          directly by the client, without escaping. Therefore, it is
          possible for malicious clients to insert control-characters in
          the log files, so care must be taken in dealing with raw
          logs.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="errorlog" id="errorlog">Error Log</a></h2>
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/core.html">core</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code></li><li><code class="directive"><a href="./mod/core.html#errorlogformat">ErrorLogFormat</a></code></li><li><code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code></li></ul></td></tr></table>
      
          <p>The server error log, whose name and location is set by the
          <code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code> directive, is the
          most important log file. This is the place where Apache httpd
          will send diagnostic information and record any errors that it
          encounters in processing requests. It is the first place to
          look when a problem occurs with starting the server or with the
          operation of the server, since it will often contain details of
          what went wrong and how to fix it.</p>
      
          <p>The error log is usually written to a file (typically
          <code>error_log</code> on Unix systems and
          <code>error.log</code> on Windows and OS/2). On Unix systems it
          is also possible to have the server send errors to
          <code>syslog</code> or <a href="#piped">pipe them to a
          program</a>.</p>
      
          <p>The format of the error log is defined by the <code class="directive"><a href="./mod/core.html#errorlogformat">ErrorLogFormat</a></code> directive, with which you
          can customize what values are logged. A default is format defined
          if you don't specify one. A typical log message follows:</p>
      
          <div class="example"><p><code>
          [Fri Sep 09 10:42:29.902022 2011] [core:error] [pid 35708:tid 4328636416]
          [client 72.15.99.187] File does not exist: /usr/local/apache2/htdocs/favicon.ico
          </code></p></div>
      
          <p>The first item in the log entry is the date and time of the
          message. The next is the module producing the message (core, in this
          case) and the severity level of that message. This is followed by
          the process ID and, if appropriate, the thread ID, of the process
          that experienced the condition. Next, we have the client address
          that made the request. And finally is the detailed error message,
          which in this case indicates a request for a file that did not
          exist.</p>
      
          <p>A very wide variety of different messages can appear in the
          error log. Most look similar to the example above. The error
          log will also contain debugging output from CGI scripts. Any
          information written to <code>stderr</code> by a CGI script will
          be copied directly to the error log.</p>
      
          <p>Putting a <code>%L</code> token in both the error log and the access
          log will produce a log entry ID with which you can correlate the entry
          in the error log with the entry in the access log. If
          <code class="module"><a href="./mod/mod_unique_id.html">mod_unique_id</a></code> is loaded, its unique request ID will be
          used as the log entry ID, too.</p>
      
          <p>During testing, it is often useful to continuously monitor
          the error log for any problems. On Unix systems, you can
          accomplish this using:</p>
      
          <div class="example"><p><code>
            tail -f error_log
          </code></p></div>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="permodule" id="permodule">Per-module logging</a></h2>
          
      
          <p>The <code class="directive"><a href="./mod/core.html#loglevel">LogLevel</a></code> directive
          allows you to specify a log severity level on a per-module basis. In
          this way, if you are troubleshooting a problem with just one
          particular module, you can turn up its logging volume without also
          getting the details of other modules that you're not interested in.
          This is particularly useful for modules such as
          <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> or <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> where you
          want to know details about what it's trying to do.</p>
      
          <p>Do this by specifying the name of the module in your
          <code class="directive">LogLevel</code> directive:</p>
      
          <pre class="prettyprint lang-config">LogLevel info rewrite:trace5</pre>
      
      
          <p>This sets the main <code class="directive">LogLevel</code> to info, but
          turns it up to <code>trace5</code> for
          <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>.</p>
      
          <div class="note">This replaces the per-module logging directives, such as
          <code>RewriteLog</code>, that were present in earlier versions of
          the server.</div>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="accesslog" id="accesslog">Access Log</a></h2>
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_log_config.html">mod_log_config</a></code></li><li><code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code></li><li><code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code></li></ul></td></tr></table>
      
          <p>The server access log records all requests processed by the
          server. The location and content of the access log are
          controlled by the <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code>
          directive. The <code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code>
          directive can be used to simplify the selection of
          the contents of the logs. This section describes how to configure the server
          to record information in the access log.</p>
      
          <p>Of course, storing the information in the access log is only
          the start of log management. The next step is to analyze this
          information to produce useful statistics. Log analysis in
          general is beyond the scope of this document, and not really
          part of the job of the web server itself. For more information
          about this topic, and for applications which perform log
          analysis, check the <a href="http://dmoz.org/Computers/Software/Internet/Site_Management/Log_Analysis/">
          Open Directory</a>.
          </p>
      
          <p>Various versions of Apache httpd have used other modules and
          directives to control access logging, including
          mod_log_referer, mod_log_agent, and the
          <code>TransferLog</code> directive. The <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> directive now subsumes
          the functionality of all the older directives.</p>
      
          <p>The format of the access log is highly configurable. The format
          is specified using a format string that looks much like a C-style
          printf(1) format string. Some examples are presented in the next
          sections. For a complete list of the possible contents of the
          format string, see the <code class="module"><a href="./mod/mod_log_config.html">mod_log_config</a></code> <a href="mod/mod_log_config.html#formats">format strings</a>.</p>
      
          <h3><a name="common" id="common">Common Log Format</a></h3>
            
      
            <p>A typical configuration for the access log might look as
            follows.</p>
      
            <pre class="prettyprint lang-config">LogFormat "%h %l %u %t \"%r\" %&gt;s %b" common
      CustomLog logs/access_log common</pre>
      
      
            <p>This defines the <em>nickname</em> <code>common</code> and
            associates it with a particular log format string. The format
            string consists of percent directives, each of which tell the
            server to log a particular piece of information. Literal
            characters may also be placed in the format string and will be
            copied directly into the log output. The quote character
            (<code>"</code>) must be escaped by placing a backslash before
            it to prevent it from being interpreted as the end of the
            format string. The format string may also contain the special
            control characters "<code>\n</code>" for new-line and
            "<code>\t</code>" for tab.</p>
      
            <p>The <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code>
            directive sets up a new log file using the defined
            <em>nickname</em>. The filename for the access log is relative to
            the <code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code> unless it
            begins with a slash.</p>
      
            <p>The above configuration will write log entries in a format
            known as the Common Log Format (CLF). This standard format can
            be produced by many different web servers and read by many log
            analysis programs. The log file entries produced in CLF will
            look something like this:</p>
      
            <div class="example"><p><code>
              127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET
              /apache_pb.gif HTTP/1.0" 200 2326
            </code></p></div>
      
            <p>Each part of this log entry is described below.</p>
      
            <dl>
              <dt><code>127.0.0.1</code> (<code>%h</code>)</dt>
      
              <dd>This is the IP address of the client (remote host) which
              made the request to the server. If <code class="directive"><a href="./mod/core.html#hostnamelookups">HostnameLookups</a></code> is
              set to <code>On</code>, then the server will try to determine
              the hostname and log it in place of the IP address. However,
              this configuration is not recommended since it can
              significantly slow the server. Instead, it is best to use a
              log post-processor such as <code class="program"><a href="./programs/logresolve.html">logresolve</a></code> to determine
              the hostnames. The IP address reported here is not
              necessarily the address of the machine at which the user is
              sitting. If a proxy server exists between the user and the
              server, this address will be the address of the proxy, rather
              than the originating machine.</dd>
      
              <dt><code>-</code> (<code>%l</code>)</dt>
      
              <dd>The "hyphen" in the output indicates that the requested
              piece of information is not available. In this case, the
              information that is not available is the RFC 1413 identity of
              the client determined by <code>identd</code> on the clients
              machine. This information is highly unreliable and should
              almost never be used except on tightly controlled internal
              networks. Apache httpd will not even attempt to determine
              this information unless <code class="directive"><a href="./mod/mod_ident.html#identitycheck">IdentityCheck</a></code> is set
              to <code>On</code>.</dd>
      
              <dt><code>frank</code> (<code>%u</code>)</dt>
      
              <dd>This is the userid of the person requesting the document
              as determined by HTTP authentication. The same value is
              typically provided to CGI scripts in the
              <code>REMOTE_USER</code> environment variable. If the status
              code for the request (see below) is 401, then this value
              should not be trusted because the user is not yet
              authenticated. If the document is not password protected,
              this part will be "<code>-</code>" just like the previous
              one.</dd>
      
              <dt><code>[10/Oct/2000:13:55:36 -0700]</code>
              (<code>%t</code>)</dt>
      
              <dd>
                The time that the request was received.
                The format is:
      
                <p class="indent">
                  <code>[day/month/year:hour:minute:second zone]<br />
                   day = 2*digit<br />
                   month = 3*letter<br />
                   year = 4*digit<br />
                   hour = 2*digit<br />
                   minute = 2*digit<br />
                   second = 2*digit<br />
                   zone = (`+' | `-') 4*digit</code>
                </p>
                <p>It is possible to have the time displayed in another format
                by specifying <code>%{format}t</code> in the log format
                string, where <code>format</code> is either as in
                <code>strftime(3)</code> from the C standard library,
                or one of the supported special tokens. For details see
                the <code class="module"><a href="./mod/mod_log_config.html">mod_log_config</a></code> <a href="mod/mod_log_config.html#formats">format strings</a>.</p>
              </dd>
      
              <dt><code>"GET /apache_pb.gif HTTP/1.0"</code>
              (<code>\"%r\"</code>)</dt>
      
              <dd>The request line from the client is given in double
              quotes. The request line contains a great deal of useful
              information. First, the method used by the client is
              <code>GET</code>. Second, the client requested the resource
              <code>/apache_pb.gif</code>, and third, the client used the
              protocol <code>HTTP/1.0</code>. It is also possible to log
              one or more parts of the request line independently. For
              example, the format string "<code>%m %U%q %H</code>" will log
              the method, path, query-string, and protocol, resulting in
              exactly the same output as "<code>%r</code>".</dd>
      
              <dt><code>200</code> (<code>%&gt;s</code>)</dt>
      
              <dd>This is the status code that the server sends back to the
              client. This information is very valuable, because it reveals
              whether the request resulted in a successful response (codes
              beginning in 2), a redirection (codes beginning in 3), an
              error caused by the client (codes beginning in 4), or an
              error in the server (codes beginning in 5). The full list of
              possible status codes can be found in the <a href="http://www.w3.org/Protocols/rfc2616/rfc2616.txt">HTTP
              specification</a> (RFC2616 section 10).</dd>
      
              <dt><code>2326</code> (<code>%b</code>)</dt>
      
              <dd>The last part indicates the size of the object returned
              to the client, not including the response headers. If no
              content was returned to the client, this value will be
              "<code>-</code>". To log "<code>0</code>" for no content, use
              <code>%B</code> instead.</dd>
            </dl>
          
      
          <h3><a name="combined" id="combined">Combined Log Format</a></h3>
            
      
            <p>Another commonly used format string is called the Combined
            Log Format. It can be used as follows.</p>
      
            <pre class="prettyprint lang-config">LogFormat "%h %l %u %t \"%r\" %&gt;s %b \"%{Referer}i\" \"%{User-agent}i\"" combined
      CustomLog log/access_log combined</pre>
      
      
            <p>This format is exactly the same as the Common Log Format,
            with the addition of two more fields. Each of the additional
            fields uses the percent-directive
            <code>%{<em>header</em>}i</code>, where <em>header</em> can be
            any HTTP request header. The access log under this format will
            look like:</p>
      
            <div class="example"><p><code>
              127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET
              /apache_pb.gif HTTP/1.0" 200 2326
              "http://www.example.com/start.html" "Mozilla/4.08 [en]
              (Win98; I ;Nav)"
            </code></p></div>
      
            <p>The additional fields are:</p>
      
            <dl>
              <dt><code>"http://www.example.com/start.html"</code>
              (<code>\"%{Referer}i\"</code>)</dt>
      
              <dd>The "Referer" (sic) HTTP request header. This gives the
              site that the client reports having been referred from. (This
              should be the page that links to or includes
              <code>/apache_pb.gif</code>).</dd>
      
              <dt><code>"Mozilla/4.08 [en] (Win98; I ;Nav)"</code>
              (<code>\"%{User-agent}i\"</code>)</dt>
      
              <dd>The User-Agent HTTP request header. This is the
              identifying information that the client browser reports about
              itself.</dd>
            </dl>
          
      
          <h3><a name="multiple" id="multiple">Multiple Access Logs</a></h3>
            
      
            <p>Multiple access logs can be created simply by specifying
            multiple <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code>
            directives in the configuration
            file. For example, the following directives will create three
            access logs. The first contains the basic CLF information,
            while the second and third contain referer and browser
            information. The last two <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> lines show how
            to mimic the effects of the <code>ReferLog</code> and <code>AgentLog</code> directives.</p>
      
            <pre class="prettyprint lang-config">LogFormat "%h %l %u %t \"%r\" %&gt;s %b" common
      CustomLog logs/access_log common
      CustomLog logs/referer_log "%{Referer}i -&gt; %U"
      CustomLog logs/agent_log "%{User-agent}i"</pre>
      
      
            <p>This example also shows that it is not necessary to define a
            nickname with the <code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code> directive. Instead,
            the log format can be specified directly in the <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> directive.</p>
          
      
          <h3><a name="conditional" id="conditional">Conditional Logs</a></h3>
            
      
            <p>There are times when it is convenient to exclude certain
            entries from the access logs based on characteristics of the
            client request. This is easily accomplished with the help of <a href="env.html">environment variables</a>. First, an
            environment variable must be set to indicate that the request
            meets certain conditions. This is usually accomplished with
            <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code>. Then the
            <code>env=</code> clause of the <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> directive is used to
            include or exclude requests where the environment variable is
            set. Some examples:</p>
      
            <pre class="prettyprint lang-config"># Mark requests from the loop-back interface
      SetEnvIf Remote_Addr "127\.0\.0\.1" dontlog
      # Mark requests for the robots.txt file
      SetEnvIf Request_URI "^/robots\.txt$" dontlog
      # Log what remains
      CustomLog logs/access_log common env=!dontlog</pre>
      
      
            <p>As another example, consider logging requests from
            english-speakers to one log file, and non-english speakers to a
            different log file.</p>
      
            <pre class="prettyprint lang-config">SetEnvIf Accept-Language "en" english
      CustomLog logs/english_log common env=english
      CustomLog logs/non_english_log common env=!english</pre>
      
      
            <p>In a caching scenario one would want to know about
            the efficiency of the cache. A very simple method to
            find this out would be:</p>
      
            <pre class="prettyprint lang-config">SetEnv CACHE_MISS 1
      LogFormat "%h %l %u %t "%r " %&gt;s %b %{CACHE_MISS}e" common-cache
      CustomLog logs/access_log common-cache</pre>
      
      
            <p><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> will run before
            <code class="module"><a href="./mod/mod_env.html">mod_env</a></code> and, when successful, will deliver the
            content without it. In that case a cache hit will log
            <code>-</code>, while a cache miss will log <code>1</code>.</p>
      
            <p>In addition to the <code>env=</code> syntax, <code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code> supports logging values
            conditional upon the HTTP response code:</p>
      
            <pre class="prettyprint lang-config">LogFormat "%400,501{User-agent}i" browserlog
      LogFormat "%!200,304,302{Referer}i" refererlog</pre>
      
      
            <p>In the first example, the <code>User-agent</code> will be
            logged if the HTTP status code is 400 or 501. In other cases, a
            literal "-" will be logged instead. Likewise, in the second
            example, the <code>Referer</code> will be logged if the HTTP
            status code is <strong>not</strong> 200, 204, or 302. (Note the
            "!" before the status codes.</p>
      
            <p>Although we have just shown that conditional logging is very
            powerful and flexible, it is not the only way to control the
            contents of the logs. Log files are more useful when they
            contain a complete record of server activity. It is often
            easier to simply post-process the log files to remove requests
            that you do not want to consider.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rotation" id="rotation">Log Rotation</a></h2>
          
      
          <p>On even a moderately busy server, the quantity of
          information stored in the log files is very large. The access
          log file typically grows 1 MB or more per 10,000 requests. It
          will consequently be necessary to periodically rotate the log
          files by moving or deleting the existing logs. This cannot be
          done while the server is running, because Apache httpd will continue
          writing to the old log file as long as it holds the file open.
          Instead, the server must be <a href="stopping.html">restarted</a> after the log files are
          moved or deleted so that it will open new log files.</p>
      
          <p>By using a <em>graceful</em> restart, the server can be
          instructed to open new log files without losing any existing or
          pending connections from clients. However, in order to
          accomplish this, the server must continue to write to the old
          log files while it finishes serving old requests. It is
          therefore necessary to wait for some time after the restart
          before doing any processing on the log files. A typical
          scenario that simply rotates the logs and compresses the old
          logs to save space is:</p>
      
          <div class="example"><p><code>
            mv access_log access_log.old<br />
            mv error_log error_log.old<br />
            apachectl graceful<br />
            sleep 600<br />
            gzip access_log.old error_log.old
          </code></p></div>
      
          <p>Another way to perform log rotation is using <a href="#piped">piped logs</a> as discussed in the next
          section.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="piped" id="piped">Piped Logs</a></h2>
          
      
          <p>Apache httpd is capable of writing error and access log
          files through a pipe to another process, rather than directly
          to a file. This capability dramatically increases the
          flexibility of logging, without adding code to the main server.
          In order to write logs to a pipe, simply replace the filename
          with the pipe character "<code>|</code>", followed by the name
          of the executable which should accept log entries on its
          standard input. The server will start the piped-log process when
          the server starts, and will restart it if it crashes while the
          server is running. (This last feature is why we can refer to
          this technique as "reliable piped logging".)</p>
      
          <p>Piped log processes are spawned by the parent Apache httpd
          process, and inherit the userid of that process. This means
          that piped log programs usually run as root. It is therefore
          very important to keep the programs simple and secure.</p>
      
          <p>One important use of piped logs is to allow log rotation
          without having to restart the server. The Apache HTTP Server
          includes a simple program called <code class="program"><a href="./programs/rotatelogs.html">rotatelogs</a></code>
          for this purpose. For example, to rotate the logs every 24 hours, you
          can use:</p>
      
          <pre class="prettyprint lang-config">CustomLog "|/usr/local/apache/bin/rotatelogs /var/log/access_log 86400" common</pre>
      
      
          <p>Notice that quotes are used to enclose the entire command
          that will be called for the pipe. Although these examples are
          for the access log, the same technique can be used for the
          error log.</p>
      
          <p>As with conditional logging, piped logs are a very powerful
          tool, but they should not be used where a simpler solution like
          off-line post-processing is available.</p>
      
          <p>By default the piped log process is spawned without invoking
          a shell. Use "<code>|$</code>" instead of "<code>|</code>"
          to spawn using a shell (usually with <code>/bin/sh -c</code>):</p>
      
          <pre class="prettyprint lang-config"># Invoke "rotatelogs" using a shell
      CustomLog "|$/usr/local/apache/bin/rotatelogs   /var/log/access_log 86400" common</pre>
      
      
          <p>This was the default behaviour for Apache 2.2.
          Depending on the shell specifics this might lead to
          an additional shell process for the lifetime of the logging
          pipe program and signal handling problems during restart.
          For compatibility reasons with Apache 2.2 the notation
          "<code>||</code>" is also supported and equivalent to using
          "<code>|</code>".</p>
      
          <div class="note"><h3>Windows note</h3>
          <p>Note that on Windows, you may run into problems when running many piped
          logger processes, especially when HTTPD is running as a service. This is
          caused by running out of desktop heap space. The desktop heap space given
          to each service is specified by the third argument to the
          <code>SharedSection</code> parameter in the
          HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SessionManager\SubSystems\Windows
          registry value. <strong>Change this value with care</strong>; the normal
          caveats for changing the Windows registry apply, but you might also exhaust
          the desktop heap pool if the number is adjusted too high.</p>
          </div>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="virtualhost" id="virtualhost">Virtual Hosts</a></h2>
          
      
          <p>When running a server with many <a href="vhosts/">virtual
          hosts</a>, there are several options for dealing with log
          files. First, it is possible to use logs exactly as in a
          single-host server. Simply by placing the logging directives
          outside the <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code> sections in the
          main server context, it is possible to log all requests in the
          same access log and error log. This technique does not allow
          for easy collection of statistics on individual virtual
          hosts.</p>
      
          <p>If <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code>
          or <code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code>
          directives are placed inside a
          <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          section, all requests or errors for that virtual host will be
          logged only to the specified file. Any virtual host which does
          not have logging directives will still have its requests sent
          to the main server logs. This technique is very useful for a
          small number of virtual hosts, but if the number of hosts is
          very large, it can be complicated to manage. In addition, it
          can often create problems with <a href="vhosts/fd-limits.html">insufficient file
          descriptors</a>.</p>
      
          <p>For the access log, there is a very good compromise. By
          adding information on the virtual host to the log format
          string, it is possible to log all hosts to the same log, and
          later split the log into individual files. For example,
          consider the following directives.</p>
      
          <pre class="prettyprint lang-config">LogFormat "%v %l %u %t \"%r\" %&gt;s %b" comonvhost
      CustomLog logs/access_log comonvhost</pre>
      
      
          <p>The <code>%v</code> is used to log the name of the virtual
          host that is serving the request. Then a program like <a href="programs/split-logfile.html">split-logfile</a> can be used to
          post-process the access log in order to split it into one file
          per virtual host.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="other" id="other">Other Log Files</a></h2>
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_logio.html">mod_logio</a></code></li><li><code class="module"><a href="./mod/mod_log_config.html">mod_log_config</a></code></li><li><code class="module"><a href="./mod/mod_log_forensic.html">mod_log_forensic</a></code></li><li><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code></li><li><code class="directive"><a href="./mod/mod_log_config.html#bufferedlogs">BufferedLogs</a></code></li><li><code class="directive"><a href="./mod/mod_log_forensic.html#forensiclog">ForensicLog</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code></li><li><code class="directive"><a href="./mod/mod_cgi.html#scriptlog">ScriptLog</a></code></li><li><code class="directive"><a href="./mod/mod_cgi.html#scriptlogbuffer">ScriptLogBuffer</a></code></li><li><code class="directive"><a href="./mod/mod_cgi.html#scriptloglength">ScriptLogLength</a></code></li></ul></td></tr></table>
      
          <h3>Logging actual bytes sent and received</h3>
            
      
            <p><code class="module"><a href="./mod/mod_logio.html">mod_logio</a></code> adds in two additional
               <code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code> fields
               (%I and %O) that log the actual number of bytes received and sent
               on the network.</p>
          
      
          <h3>Forensic Logging</h3>
            
      
            <p><code class="module"><a href="./mod/mod_log_forensic.html">mod_log_forensic</a></code> provides for forensic logging of
               client requests. Logging is done before and after processing a
               request, so the forensic log contains two log lines for each
               request. The forensic logger is very strict with no customizations.
               It can be an invaluable debugging and security tool.</p>
          
      
          <h3><a name="pidfile" id="pidfile">PID File</a></h3>
            
      
            <p>On startup, Apache httpd saves the process id of the parent
            httpd process to the file <code>logs/httpd.pid</code>. This
            filename can be changed with the <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code> directive. The
            process-id is for use by the administrator in restarting and
            terminating the daemon by sending signals to the parent
            process; on Windows, use the -k command line option instead.
            For more information see the <a href="stopping.html">Stopping
            and Restarting</a> page.</p>
          
      
          <h3><a name="scriptlog" id="scriptlog">Script Log</a></h3>
            
      
            <p>In order to aid in debugging, the
            <code class="directive"><a href="./mod/mod_cgi.html#scriptlog">ScriptLog</a></code> directive
            allows you to record the input to and output from CGI scripts.
            This should only be used in testing - not for live servers.
            More information is available in the <a href="mod/mod_cgi.html">mod_cgi</a> documentation.</p>
          
      
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/logs.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/logs.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/logs.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/logs.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/logs.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/logs.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/sitemap.html.es������������������������������������������������������������0000644�0000000�0000050�00000061310�13520523022�016372� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Mapa de este sitio web - Servidor HTTP Apache Versión 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page">
      <div id="page-header">
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="./glossary.html">Glosario</a> | <a href="./sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="./">Versión 2.4</a></div>
      <div id="page-content"><div id="preamble"><h1>Mapa de este sitio web</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="./de/sitemap.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/sitemap.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/sitemap.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/sitemap.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sitemap.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sitemap.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sitemap.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/sitemap.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">Esta traducción podría estar
                  obsoleta. Consulte la versión en inglés de la
                  documentación para comprobar si se han producido cambios
                  recientemente.</div>
      
      <p>Esta página contiene la lista con los documentos actualmente
      disponibles de la <a href="./">Versión 2.4 de la
      Documentación del Servidor HTTP Apache</a>.</p>
      </div>
      <div id="quickview"><ul id="toc">
      <li><img alt="" src="./images/down.gif" /> <a href="#release">Notas de la Versión</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#using">Funcionamiento del Servidor HTTP Apache</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#vhosts">Documentación sobre Hosting Virtual en Apache</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#faq">Preguntas Más Frecuentes sobre Apache</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#ssl">Encriptado SSL/TLS con Apache</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#howto">Guías, Tutoriales, y HowTos</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#platform">Notas específicas sobre plataformas</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programs">Programas de soporte y el Servidor HTTP Apache</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#misc">Documentación adicional sobre Apache</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#modules">Módulos de Apache</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#developer">Documentación para desarrolladores</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#index">Glosario e Índice</a></li>
      </ul>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="release" id="release">Notas de la Versión</a></h2>
      <ul><li><a href="upgrading.html">Pasar a usar Apache 2.0 desde Apache 1.3</a></li>
      <li><a href="new_features_2_0.html">Nuevas funcionalidades de Apache 2.0</a></li>
      <li><a href="license.html">Licencia Apache</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="using" id="using">Funcionamiento del Servidor HTTP Apache</a></h2>
      <ul><li><a href="install.html">Compilación e Instalación de Apache</a></li>
      <li><a href="invoking.html">Iniciar Apache</a></li>
      <li><a href="stopping.html">Parar y reiniciar Apache</a></li>
      <li><a href="configuring.html">Ficheros de Configuración</a></li>
      <li><a href="sections.html">Funcionamiento de las secciones Directory, Location y Files</a></li>
      <li><a href="server-wide.html">Configuración Básica de Apache</a></li>
      <li><a href="logs.html">Archivos Log</a></li>
      <li><a href="urlmapping.html">Mapear URLs a ubicaciones de un sistema de ficheros</a></li>
      <li><a href="misc/security_tips.html">Consejos de Seguridad</a></li>
      <li><a href="dso.html">Soporte de Objetos Dinámicos Compartidos (DSO)</a></li>
      <li><a href="content-negotiation.html">Negociación de Contenido</a></li>
      <li><a href="custom-error.html">Mensajes de Error Personalizados</a></li>
      <li><a href="bind.html">Fijar las direcciones y los puertos que usa Apache</a></li>
      <li><a href="mpm.html">Módulos de Multiproceso (MPMs)</a></li>
      <li><a href="env.html">Variables de entorno en Apache</a></li>
      <li><a href="handler.html">El uso de Handlers en Apache</a></li>
      <li><a href="filter.html">Filtros</a></li>
      <li><a href="suexec.html">Soporte de suEXEC</a></li>
      <li><a href="misc/perf-tuning.html">Rendimiento del servidor</a></li>
      <li><a href="misc/rewriteguide.html">Documentación adicional sobre mod_rewrite</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="vhosts" id="vhosts">Documentación sobre Hosting Virtual en Apache</a></h2>
      <ul><li class="separate"><a href="vhosts/">Visión General</a></li>
      <li><a href="vhosts/name-based.html">Hosting Virtual basado en nombres</a></li>
      <li><a href="vhosts/ip-based.html">Soporte de Hosting Virtual Basado en IPs</a></li>
      <li><a href="vhosts/mass.html">Configurar de forma Dinámica el Hosting Virtual masivo en Apache</a></li>
      <li><a href="vhosts/examples.html">Ejemplos de Hosting Virtual</a></li>
      <li><a href="vhosts/details.html">Discusión en profundidad sobre los tipos de Hosting Virtual</a></li>
      <li><a href="vhosts/fd-limits.html">Limitaciones de los descriptores de ficheros</a></li>
      <li><a href="dns-caveats.html">Asuntos relacionados con DNS y Apache</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="faq" id="faq">Preguntas Más Frecuentes sobre Apache</a></h2>
      <ul><li><a href="faq/">Visión General</a></li>
      <li><a href="faq/support.html">Soporte</a></li>
      <li><a href="faq/error.html">Mensajes de error</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="ssl" id="ssl">Encriptado SSL/TLS con Apache</a></h2>
      <ul><li class="separate"><a href="ssl/">Visión General</a></li>
      <li><a href="ssl/ssl_intro.html">Encriptado SSL/TLS: Introducción</a></li>
      <li><a href="ssl/ssl_compat.html">Encriptado SSL/TLS: Compatibilidad</a></li>
      <li><a href="ssl/ssl_howto.html">Encriptado SSL/TLS: How-To</a></li>
      <li><a href="ssl/ssl_faq.html">Encriptado SSL/TLS: Preguntas Frecuentes</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="howto" id="howto">Guías, Tutoriales, y HowTos</a></h2>
      <ul><li class="separate"><a href="howto/">Visión General</a></li>
      <li><a href="howto/auth.html">Autentificación</a></li>
      <li><a href="howto/cgi.html">Contenido Dinámico con CGIs</a></li>
      <li><a href="howto/ssi.html">Introducción a Server Side Includes</a></li>
      <li><a href="howto/htaccess.html">Archivos .htaccess</a></li>
      <li><a href="howto/public_html.html">Directorios web para cada usuario</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="platform" id="platform">Notas específicas sobre plataformas</a></h2>
      <ul><li class="separate"><a href="platform/">Visión General</a></li>
      <li><a href="platform/windows.html">Usar Apache con Microsoft Windows</a></li>
      <li><a href="platform/win_compiling.html">Compilar Apache para
      Microsoft Windows</a></li>
      <li><a href="platform/netware.html">Usar
      Apache con Novell NetWare</a></li>
      <li><a href="platform/perf-hp.html">Servidor Web de alto rendimiento con
      HPUX</a></li>
      <li><a href="platform/ebcdic.html">La versión EBCDIC de
      Apache</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="programs" id="programs">Programas de soporte y el Servidor HTTP Apache</a></h2>
      <ul><li class="separate"><a href="programs/">Visión General</a></li>
      <li><a href="programs/httpd.html">Página de Ayuda: httpd</a></li>
      <li><a href="programs/ab.html">Página de Ayuda: ab</a></li>
      <li><a href="programs/apachectl.html">Página de Ayuda: apachectl</a></li>
      <li><a href="programs/apxs.html">Página de Ayuda: apxs</a></li>
      <li><a href="programs/configure.html">Página de Ayuda: configure</a></li>
      <li><a href="programs/dbmmanage.html">Página de Ayuda: dbmmanage</a></li>
      <li><a href="programs/htcacheclean.html">Página de Ayuda: htcacheclean</a></li>
      <li><a href="programs/htdigest.html">Página de Ayuda: htdigest</a></li>
      <li><a href="programs/htpasswd.html">Página de Ayuda: htpasswd</a></li>
      <li><a href="programs/logresolve.html">Página de Ayuda: logresolve</a></li>
      <li><a href="programs/rotatelogs.html">Página de Ayuda: rotatelogs</a></li>
      <li><a href="programs/suexec.html">Página de Ayuda: suexec</a></li>
      <li><a href="programs/other.html">Otros Programas</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="misc" id="misc">Documentación adicional sobre Apache</a></h2>
      <ul><li class="separate"><a href="misc/">Visión General</a></li>
      <li><a href="misc/relevant_standards.html">Estándares Importantes</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="modules" id="modules">Módulos de Apache</a></h2>
      <ul><li><a href="mod/module-dict.html">Definiciones de términos usados
      para describir los módulos de Apache</a></li>
      <li><a href="mod/directive-dict.html">Definiciones de términos
      usados para describir las directivas de Apache</a></li>
      </ul><ul><li><a href="mod/core.html">Funcionalidad Básica de Apache</a></li>
      <li><a href="mod/mpm_common.html">Directivas Comunes de los MPM de
                  Apache</a></li>
      <li><a href="mod/event.html">MPM de Apache event</a></li>
      <li><a href="mod/mpm_netware.html">MPM de Apache netware</a></li>
      <li><a href="mod/mpmt_os2.html">MPM de Apache os2</a></li>
      <li><a href="mod/prefork.html">MPM de Apache prefork</a></li>
      <li><a href="mod/mpm_winnt.html">MPM de Apache winnt</a></li>
      <li><a href="mod/worker.html">MPM de Apache worker</a></li>
      </ul><ul><li><a href="mod/mod_access_compat.html">Módulo Apache mod_access_compat</a></li>
      <li><a href="mod/mod_actions.html">Módulo Apache mod_actions</a></li>
      <li><a href="mod/mod_alias.html">Módulo Apache mod_alias</a></li>
      <li><a href="mod/mod_allowmethods.html">Módulo Apache mod_allowmethods</a></li>
      <li><a href="mod/mod_asis.html">Módulo Apache mod_asis</a></li>
      <li><a href="mod/mod_auth_basic.html">Módulo Apache mod_auth_basic</a></li>
      <li><a href="mod/mod_auth_digest.html">Módulo Apache mod_auth_digest</a></li>
      <li><a href="mod/mod_auth_form.html">Módulo Apache mod_auth_form</a></li>
      <li><a href="mod/mod_authn_anon.html">Módulo Apache mod_authn_anon</a></li>
      <li><a href="mod/mod_authn_core.html">Módulo Apache mod_authn_core</a></li>
      <li><a href="mod/mod_authn_dbd.html">Módulo Apache mod_authn_dbd</a></li>
      <li><a href="mod/mod_authn_dbm.html">Módulo Apache mod_authn_dbm</a></li>
      <li><a href="mod/mod_authn_file.html">Módulo Apache mod_authn_file</a></li>
      <li><a href="mod/mod_authn_socache.html">Módulo Apache mod_authn_socache</a></li>
      <li><a href="mod/mod_authnz_fcgi.html">Módulo Apache mod_authnz_fcgi</a></li>
      <li><a href="mod/mod_authnz_ldap.html">Módulo Apache mod_authnz_ldap</a></li>
      <li><a href="mod/mod_authz_core.html">Módulo Apache mod_authz_core</a></li>
      <li><a href="mod/mod_authz_dbd.html">Módulo Apache mod_authz_dbd</a></li>
      <li><a href="mod/mod_authz_dbm.html">Módulo Apache mod_authz_dbm</a></li>
      <li><a href="mod/mod_authz_groupfile.html">Módulo Apache mod_authz_groupfile</a></li>
      <li><a href="mod/mod_authz_host.html">Módulo Apache mod_authz_host</a></li>
      <li><a href="mod/mod_authz_owner.html">Módulo Apache mod_authz_owner</a></li>
      <li><a href="mod/mod_authz_user.html">Módulo Apache mod_authz_user</a></li>
      <li><a href="mod/mod_autoindex.html">Módulo Apache mod_autoindex</a></li>
      <li><a href="mod/mod_brotli.html">Módulo Apache mod_brotli</a></li>
      <li><a href="mod/mod_buffer.html">Módulo Apache mod_buffer</a></li>
      <li><a href="mod/mod_cache.html">Módulo Apache mod_cache</a></li>
      <li><a href="mod/mod_cache_disk.html">Módulo Apache mod_cache_disk</a></li>
      <li><a href="mod/mod_cache_socache.html">Módulo Apache mod_cache_socache</a></li>
      <li><a href="mod/mod_cern_meta.html">Módulo Apache mod_cern_meta</a></li>
      <li><a href="mod/mod_cgi.html">Módulo Apache mod_cgi</a></li>
      <li><a href="mod/mod_cgid.html">Módulo Apache mod_cgid</a></li>
      <li><a href="mod/mod_charset_lite.html">Módulo Apache mod_charset_lite</a></li>
      <li><a href="mod/mod_data.html">Módulo Apache mod_data</a></li>
      <li><a href="mod/mod_dav.html">Módulo Apache mod_dav</a></li>
      <li><a href="mod/mod_dav_fs.html">Módulo Apache mod_dav_fs</a></li>
      <li><a href="mod/mod_dav_lock.html">Módulo Apache mod_dav_lock</a></li>
      <li><a href="mod/mod_dbd.html">Módulo Apache mod_dbd</a></li>
      <li><a href="mod/mod_deflate.html">Módulo Apache mod_deflate</a></li>
      <li><a href="mod/mod_dialup.html">Módulo Apache mod_dialup</a></li>
      <li><a href="mod/mod_dir.html">Módulo Apache mod_dir</a></li>
      <li><a href="mod/mod_dumpio.html">Módulo Apache mod_dumpio</a></li>
      <li><a href="mod/mod_echo.html">Módulo Apache mod_echo</a></li>
      <li><a href="mod/mod_env.html">Módulo Apache mod_env</a></li>
      <li><a href="mod/mod_example_hooks.html">Módulo Apache mod_example_hooks</a></li>
      <li><a href="mod/mod_expires.html">Módulo Apache mod_expires</a></li>
      <li><a href="mod/mod_ext_filter.html">Módulo Apache mod_ext_filter</a></li>
      <li><a href="mod/mod_file_cache.html">Módulo Apache mod_file_cache</a></li>
      <li><a href="mod/mod_filter.html">Módulo Apache mod_filter</a></li>
      <li><a href="mod/mod_headers.html">Módulo Apache mod_headers</a></li>
      <li><a href="mod/mod_heartbeat.html">Módulo Apache mod_heartbeat</a></li>
      <li><a href="mod/mod_heartmonitor.html">Módulo Apache mod_heartmonitor</a></li>
      <li><a href="mod/mod_http2.html">Módulo Apache mod_http2</a></li>
      <li><a href="mod/mod_ident.html">Módulo Apache mod_ident</a></li>
      <li><a href="mod/mod_imagemap.html">Módulo Apache mod_imagemap</a></li>
      <li><a href="mod/mod_include.html">Módulo Apache mod_include</a></li>
      <li><a href="mod/mod_info.html">Módulo Apache mod_info</a></li>
      <li><a href="mod/mod_isapi.html">Módulo Apache mod_isapi</a></li>
      <li><a href="mod/mod_lbmethod_bybusyness.html">Módulo Apache mod_lbmethod_bybusyness</a></li>
      <li><a href="mod/mod_lbmethod_byrequests.html">Módulo Apache mod_lbmethod_byrequests</a></li>
      <li><a href="mod/mod_lbmethod_bytraffic.html">Módulo Apache mod_lbmethod_bytraffic</a></li>
      <li><a href="mod/mod_lbmethod_heartbeat.html">Módulo Apache mod_lbmethod_heartbeat</a></li>
      <li><a href="mod/mod_ldap.html">Módulo Apache mod_ldap</a></li>
      <li><a href="mod/mod_log_config.html">Módulo Apache mod_log_config</a></li>
      <li><a href="mod/mod_log_debug.html">Módulo Apache mod_log_debug</a></li>
      <li><a href="mod/mod_log_forensic.html">Módulo Apache mod_log_forensic</a></li>
      <li><a href="mod/mod_logio.html">Módulo Apache mod_logio</a></li>
      <li><a href="mod/mod_lua.html">Módulo Apache mod_lua</a></li>
      <li><a href="mod/mod_macro.html">Módulo Apache mod_macro</a></li>
      <li><a href="mod/mod_md.html">Módulo Apache mod_md</a></li>
      <li><a href="mod/mod_mime.html">Módulo Apache mod_mime</a></li>
      <li><a href="mod/mod_mime_magic.html">Módulo Apache mod_mime_magic</a></li>
      <li><a href="mod/mod_negotiation.html">Módulo Apache mod_negotiation</a></li>
      <li><a href="mod/mod_nw_ssl.html">Módulo Apache mod_nw_ssl</a></li>
      <li><a href="mod/mod_privileges.html">Módulo Apache mod_privileges</a></li>
      <li><a href="mod/mod_proxy.html">Módulo Apache mod_proxy</a></li>
      <li><a href="mod/mod_proxy_ajp.html">Módulo Apache mod_proxy_ajp</a></li>
      <li><a href="mod/mod_proxy_balancer.html">Módulo Apache mod_proxy_balancer</a></li>
      <li><a href="mod/mod_proxy_connect.html">Módulo Apache mod_proxy_connect</a></li>
      <li><a href="mod/mod_proxy_express.html">Módulo Apache mod_proxy_express</a></li>
      <li><a href="mod/mod_proxy_fcgi.html">Módulo Apache mod_proxy_fcgi</a></li>
      <li><a href="mod/mod_proxy_fdpass.html">Módulo Apache mod_proxy_fdpass</a></li>
      <li><a href="mod/mod_proxy_ftp.html">Módulo Apache mod_proxy_ftp</a></li>
      <li><a href="mod/mod_proxy_hcheck.html">Módulo Apache mod_proxy_hcheck</a></li>
      <li><a href="mod/mod_proxy_html.html">Módulo Apache mod_proxy_html</a></li>
      <li><a href="mod/mod_proxy_http.html">Módulo Apache mod_proxy_http</a></li>
      <li><a href="mod/mod_proxy_http2.html">Módulo Apache mod_proxy_http2</a></li>
      <li><a href="mod/mod_proxy_scgi.html">Módulo Apache mod_proxy_scgi</a></li>
      <li><a href="mod/mod_proxy_uwsgi.html">Módulo Apache mod_proxy_uwsgi</a></li>
      <li><a href="mod/mod_proxy_wstunnel.html">Módulo Apache mod_proxy_wstunnel</a></li>
      <li><a href="mod/mod_ratelimit.html">Módulo Apache mod_ratelimit</a></li>
      <li><a href="mod/mod_reflector.html">Módulo Apache mod_reflector</a></li>
      <li><a href="mod/mod_remoteip.html">Módulo Apache mod_remoteip</a></li>
      <li><a href="mod/mod_reqtimeout.html">Módulo Apache mod_reqtimeout</a></li>
      <li><a href="mod/mod_request.html">Módulo Apache mod_request</a></li>
      <li><a href="mod/mod_rewrite.html">Módulo Apache mod_rewrite</a></li>
      <li><a href="mod/mod_sed.html">Módulo Apache mod_sed</a></li>
      <li><a href="mod/mod_session.html">Módulo Apache mod_session</a></li>
      <li><a href="mod/mod_session_cookie.html">Módulo Apache mod_session_cookie</a></li>
      <li><a href="mod/mod_session_crypto.html">Módulo Apache mod_session_crypto</a></li>
      <li><a href="mod/mod_session_dbd.html">Módulo Apache mod_session_dbd</a></li>
      <li><a href="mod/mod_setenvif.html">Módulo Apache mod_setenvif</a></li>
      <li><a href="mod/mod_slotmem_plain.html">Módulo Apache mod_slotmem_plain</a></li>
      <li><a href="mod/mod_slotmem_shm.html">Módulo Apache mod_slotmem_shm</a></li>
      <li><a href="mod/mod_so.html">Módulo Apache mod_so</a></li>
      <li><a href="mod/mod_socache_dbm.html">Módulo Apache mod_socache_dbm</a></li>
      <li><a href="mod/mod_socache_dc.html">Módulo Apache mod_socache_dc</a></li>
      <li><a href="mod/mod_socache_memcache.html">Módulo Apache mod_socache_memcache</a></li>
      <li><a href="mod/mod_socache_redis.html">Módulo Apache mod_socache_redis</a></li>
      <li><a href="mod/mod_socache_shmcb.html">Módulo Apache mod_socache_shmcb</a></li>
      <li><a href="mod/mod_speling.html">Módulo Apache mod_speling</a></li>
      <li><a href="mod/mod_ssl.html">Módulo Apache mod_ssl</a></li>
      <li><a href="mod/mod_status.html">Módulo Apache mod_status</a></li>
      <li><a href="mod/mod_substitute.html">Módulo Apache mod_substitute</a></li>
      <li><a href="mod/mod_suexec.html">Módulo Apache mod_suexec</a></li>
      <li><a href="mod/mod_unique_id.html">Módulo Apache mod_unique_id</a></li>
      <li><a href="mod/mod_unixd.html">Módulo Apache mod_unixd</a></li>
      <li><a href="mod/mod_userdir.html">Módulo Apache mod_userdir</a></li>
      <li><a href="mod/mod_usertrack.html">Módulo Apache mod_usertrack</a></li>
      <li><a href="mod/mod_version.html">Módulo Apache mod_version</a></li>
      <li><a href="mod/mod_vhost_alias.html">Módulo Apache mod_vhost_alias</a></li>
      <li><a href="mod/mod_watchdog.html">Módulo Apache mod_watchdog</a></li>
      <li><a href="mod/mod_xml2enc.html">Módulo Apache mod_xml2enc</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="developer" id="developer">Documentación para desarrolladores</a></h2>
      <ul><li class="separate"><a href="developer/">Visión General</a></li>
      <li><a href="developer/API.html">Notas sobre la API de Apache</a></li>
      <li><a href="developer/debugging.html">Debugear la Reserva de Memoria en APR</a></li>
      <li><a href="developer/documenting.html">Documentando Apache 2.0</a></li>
      <li><a href="developer/hooks.html">Funciones Hook de Apache 2.0</a></li>
      <li><a href="developer/modules.html">Convertir Módulos de Apache 1.3 a Apache 2.0</a></li>
      <li><a href="developer/request.html">Procesamiento de Peticiones en Apache 2.0</a></li>
      <li><a href="developer/filters.html">Funcionamiento de los filtros en Apache 2.0</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section"><h2><a name="index" id="index">Glosario e Índice</a></h2>
      <ul><li><a href="glossary.html">Glosario</a></li>
      <li><a href="mod/">Índice de Módulos</a></li>
      <li><a href="mod/directives.html">Índice de Directivas</a></li>
      <li><a href="mod/quickreference.html">Guía Rápida de
      Referencia de Directivas</a></li>
      </ul>
      </div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="./de/sitemap.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/sitemap.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/sitemap.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/sitemap.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/sitemap.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/sitemap.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/sitemap.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/sitemap.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentarios</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/sitemap.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="./glossary.html">Glosario</a> | <a href="./sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/dns-caveats.html.fr.utf8���������������������������������������������������0000644�0000000�0000050�00000032617�13412755316�020052� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Problèmes liés au DNS avec le serveur HTTP Apache - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Problèmes liés au DNS avec le serveur HTTP Apache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/dns-caveats.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/dns-caveats.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/dns-caveats.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/dns-caveats.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/dns-caveats.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Cette page pourrait se résumer ainsi : configurez le
          serveur HTTP Apache de façon
          à ce qu'il n'ait pas besoin de résolution DNS pour interpréter les
          fichiers de configuration. Si httpd doit effectuer des résolutions
          DNS pour interpréter les fichiers de configuration, votre serveur
          pourra présenter des problèmes de fiabilité (en d'autres termes,
          il est possible qu'il refuse de démarrer), ou d'attaques par déni ou
          usurpation de service (y compris l'attribution de requêtes à un
          serveur virtuel autre que le serveur virtuel voulu).</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#example">Un exemple simple</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#denial">Déni de service</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#main">L'adresse du "serveur principal"</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#tips">Conseils pour éviter ce genre de problème</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="example" id="example">Un exemple simple</a></h2>
          
      
          <pre class="prettyprint lang-config"># Ceci est un exemple de mauvaise configuration ; ne l'utilisez pas comme base
      # de configuration
      &lt;VirtualHost www.example.dom&gt;
        ServerAdmin webgirl@example.dom
        DocumentRoot "/www/example"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Pour fonctionner correctement, le serveur a absolument besoin de deux
          informations à propos de chaque serveur virtuel : le nom du serveur
          défini par la directive <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>, et au moins une adresse IP à
          laquelle le serveur va se rattacher et répondre. L'exemple ci-dessus
          ne comporte pas d'adresse IP, si bien que httpd devra utiliser le
          DNS pour trouver l'adresse IP de <code>www.example.dom</code>. Si pour
          une raison quelconque, le DNS n'est pas disponible au moment où
          votre serveur interprète son fichier de configuration, ce serveur
          virtuel <strong>ne sera pas pris en compte dans la
          configuration</strong>. Il sera incapable de
          répondre à toute requête pour ce serveur virtuel.</p>
      
          <p>Supposons que l'adresse de <code>www.example.dom</code> soit
          192.0.2.1, et examinons cet extrait de configuration :</p>
      
          <pre class="prettyprint lang-config"># Ceci est un exemple de mauvaise configuration ; ne l'utilisez pas comme base
      # de configuration
      &lt;VirtualHost 192.0.2.1&gt;
        ServerAdmin webgirl@example.dom
        DocumentRoot "/www/example"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Cette fois, httpd doit effectuer une recherche DNS inverse pour
          trouver le nom <code>ServerName</code> de ce serveur virtuel. Si
          cette recherche inverse échoue, le serveur virtuel sera
          partiellement désactivé. Si le serveur
          virtuel est à base de nom, il sera en fait totalement désactivé,
          mais s'il est à base d'adresse IP, il fonctionnera probablement.
          Cependant, httpd échouera s'il doit générer une URL complète pour
          le serveur qui inclut ce nom de serveur (comme dans le cas d'une
          redirection).</p>
      
          <p>Voici un extrait de configuration qui permet d'éviter ces deux
          types de problèmes :</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost 192.0.2.1&gt;
        ServerName www.example.dom
        ServerAdmin webgirl@example.dom
        DocumentRoot "/www/example"
      &lt;/VirtualHost&gt;</pre>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="denial" id="denial">Déni de service</a></h2>
          
      
          <p>Considérons cet extrait de configuration :</p>
      
          <pre class="prettyprint lang-config">&lt;VirtualHost www.example1.dom&gt;
        ServerAdmin webgirl@example1.dom
        DocumentRoot "/www/example1"
      &lt;/VirtualHost&gt;
      &lt;VirtualHost www.example2.dom&gt;
        ServerAdmin webguy@example2.dom
        DocumentRoot "/www/example2"
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Supposons que vous ayez assigné 192.0.2.1 à
          <code>www.example1.dom</code> et 192.0.2.2 à <code>www.example2.dom</code>. En
          outre, supposons que <code>example1.dom</code> gère son propre DNS. Avec
          cette configuration, <code>example1.dom</code> sera en mesure de
          détourner tout trafic destiné à <code>example2.dom</code>. Pour y
          parvenir, tout ce qu'ils ont à faire consiste à
          assigner 192.0.2.2 à
          <code>www.example1.dom</code>. Comme ils gèrent leur propre DNS, vous ne
          pouvez pas les empêcher de faire pointer l'enregistrement
          <code>www.example1.dom</code> vers l'adresse qu'ils veulent.</p>
      
          <p>Les requêtes à destination de 192.0.2.2 (y compris toutes celles
          où l'utilisateur à tapé une URL de la forme
          <code>http://www.example2.dom/quelquepart</code>), seront toutes servies
          par le serveur virtuel <code>example1.dom</code>. Une meilleur
          compréhension de la raison pour laquelle ceci peut se produire
          nécessite une discussion plus approfondie à propos de la manière
          dont httpd associe les requêtes entrantes aux différents serveurs
          virtuels qui vont les servir. Un document de base décrivant ceci <a href="vhosts/details.html">est disponible</a>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="main" id="main">L'adresse du "serveur principal"</a></h2>
          
      
          <p><a href="vhosts/name-based.html">Le support des
          serveurs virtuels à base de nom</a> oblige httpd à
          connaître la/les adresse(s) IP de l'hôte sur
          lequel <code class="program"><a href="./programs/httpd.html">httpd</a></code> s'exécute. Pour obtenir cette
          adresse, soit il utilise la directive <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code> globale (si elle est présente),
          soit il fait appel à la fonction C <code>gethostname</code> (qui
          doit renvoyer le même nom que la commande shell "hostname"). Il
          effectue ensuite une recherche DNS sur cette adresse. Pour le
          moment, il n'existe aucun moyen d'éviter cette recherche DNS.</p>
      
          <p>Si vous craignez que cette recherche DNS échoue parce que votre
          serveur DNS est arrêté, vous pouvez insérer le nom d'hôte dans le
          fichier <code>/etc/hosts</code> (où il est probablement déjà
          enregistré afin que la machine démarre correctement). Assurez-vous
          ensuite que la machine est configurée pour utiliser
          <code>/etc/hosts</code> dans le cas où la recherche DNS échoue.
          Suivant le système d'exploitation que vous utilisez, vous y
          parviendrez en éditant <code>/etc/resolv.conf</code>, ou
          <code>/etc/nsswitch.conf</code>.</p>
      
          <p>Si votre serveur n'a aucune autre raison d'effectuer des
          recherches DNS, vous pouvez définir la variable d'environnement
          <code>HOSTRESORDER</code> à "local", et vous serez alors en mesure
          d'exécuter httpd. Tout dépend du système d'exploitation et des
          bibliothèques de résolution de noms que vous utilisez. Elle affecte
          aussi les programmes CGI, à moins que vous n'utilisiez
          <code class="module"><a href="./mod/mod_env.html">mod_env</a></code> pour contrôler l'environnement. Il est
          conseillé de consulter les pages de manuel ou les FAQs de votre
          système d'exploitation.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="tips" id="tips">Conseils pour éviter ce genre de problème</a></h2>
          
      
          <ul>
            <li>
              utilisez des adresses IP au sein des <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code>
            </li>
      
            <li>
              utilisez des adresses IP avec la directive <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>
            </li>
      
            <li>
              vérifiez que tous les serveurs virtuels possèdent un nom
      	<code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>	explicite
            </li>
      
            <li>créez un serveur virtuel <code>&lt;VirtualHost
            _default_:*&gt;</code> qui n'a aucune page à servir</li>
          </ul>
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/dns-caveats.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/dns-caveats.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/dns-caveats.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/dns-caveats.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/dns-caveats.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/dns-caveats.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/server-wide.html.ja.utf8���������������������������������������������������0000644�0000000�0000050�00000030026�13412755316�020051� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>サーãƒå…¨ä½“ã®è¨­å®š - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>サーãƒå…¨ä½“ã®è¨­å®š</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/server-wide.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/server-wide.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/server-wide.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/server-wide.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/server-wide.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
      <p>ã“ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã§ã¯<code class="module"><a href="./mod/core.html">core</a></code>
      サーãƒã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®ä¸­ã§ã€
      基本動作を設定ã™ã‚‹ãŸã‚ã®ã‚‚ã®ã‚’説明ã—ã¾ã™ã€‚</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#identification">サームID</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#locations">ファイルã®ä½ç½®</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#resource">リソースã®åˆ¶é™</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="identification" id="identification">サームID</a></h2>
          
      
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#servername">ServerName</a></code></li><li><code class="directive"><a href="./mod/core.html#serveradmin">ServerAdmin</a></code></li><li><code class="directive"><a href="./mod/core.html#serversignature">ServerSignature</a></code></li><li><code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code></li><li><code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code></li><li><code class="directive"><a href="./mod/core.html#usecanonicalphysicalport">UseCanonicalPhysicalPort</a></code></li></ul></td></tr></table>
      
          <p><code class="directive"><a href="./mod/core.html#serveradmin">ServerAdmin</a></code> ディレクティブã¨
          <code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code>
          ディレクティブã¯ã€ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãªã©ã®ã‚µãƒ¼ãƒãŒä½œã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã«ã€
          ã©ã®ã‚ˆã†ãªã‚µãƒ¼ãƒã®æƒ…報を表示ã™ã‚‹ã‹ã‚’制御ã—ã¾ã™ã€‚
          <code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code> ディレクティブã¯ã€Server HTTP
          レスãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ãƒ•ィールドã®å€¤ã‚’設定ã—ã¾ã™ã€‚</p>
      
          <p><code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>,
          <code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code>,
          <code class="directive"><a href="./mod/core.html#usecanonicalphysicalport">UseCanonicalPhysicalPort</a></code>
          ディレクティブã¯ã€ã‚µãƒ¼ãƒãŒè‡ªåˆ†è‡ªèº«ã‚’å‚ç…§ã™ã‚‹ URL
          を作るã¨ãã«ä½¿ã‚れã¾ã™ã€‚
          ãŸã¨ãˆã°ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’è¦æ±‚ã—ã¦ã€
          ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªåã®æœ€å¾Œã«ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ãŒä»˜ã„ã¦ã„ãªã„よã†ãªå ´åˆã«ã¯ã€
          ドキュメントã®ç›¸å¯¾çš„ãªå‚ç…§ã‚’æ­£ã—ã解決ã§ãるよã†ã«ã™ã‚‹ãŸã‚ã«ã€
          Apache ã¯æœ€å¾Œã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã‚’å«ã‚“ã å®Œå…¨ãªãƒ‘スã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’
          リダイレクトã•ã›ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="locations" id="locations">ファイルã®ä½ç½®</a></h2>
          
      
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/mpm_common.html#coredumpdirectory">CoreDumpDirectory</a></code></li><li><code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#lockfile">LockFile</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#scoreboardfile">ScoreBoardFile</a></code></li><li><code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code></li></ul></td></tr></table>
      
          <p>ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠Apache
          ãŒé©åˆ‡ãªå‹•作をã™ã‚‹ãŸã‚ã«å¿…è¦ãªå„種ファイルã®ä½ç½®ã‚’制御ã—ã¾ã™ã€‚
          パスãŒã‚¹ãƒ©ãƒƒã‚·ãƒ¥ (/) ã§å§‹ã¾ã£ã¦ã„ãªã„ã¨ãã¯ã€ãƒ•ァイルã¯
          <code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code> ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ã—ã¦
          探ã•れã¾ã™ã€‚root
          以外ã®ãƒ¦ãƒ¼ã‚¶ãŒæ›¸ãè¾¼ã¿å¯èƒ½ãªãƒ‘スã«ãƒ•ァイルを置ãå ´åˆã¯æ³¨æ„ãŒå¿…è¦ã§ã™ã€‚
          詳細ã¯<a href="misc/security_tips.html#serverroot">「セキュリティ情報ã€</a>
          ã‚’å‚ç…§ã—ã¦ãã ã•ã„。</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="resource" id="resource">リソースã®åˆ¶é™</a></h2>
          
      
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#limitrequestbody">LimitRequestBody</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestfields">LimitRequestFields</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestfieldsize">LimitRequestFieldsize</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestline">LimitRequestLine</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitcpu">RLimitCPU</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitmem">RLimitMEM</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitnproc">RLimitNPROC</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code></li></ul></td></tr></table>
      
          <p><code class="directive">LimitRequest</code>* ディレクティブ㯠Apache
          ãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆèª­ã¿è¾¼ã¿ã§ä½¿ã†
          リソースを制é™ã™ã‚‹ãŸã‚ã«ä½¿ã‚れã¾ã™ã€‚ã“れらã®å€¤ã‚’制é™ã™ã‚‹ã“ã¨ã§ã€
          ã„ãã¤ã‹ã®ã‚µãƒ¼ãƒ“ã‚¹æ‹’å¦æ”»æ’ƒã¯å½±éŸ¿ã‚’和らã’ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p><code class="directive">RLimit</code>* ディレクティブã¯ã€Apache ã®å­ãƒ—ロセスã‹ã‚‰
          fork ã•れãŸãƒ—ロセスãŒä½¿ç”¨ã™ã‚‹ãƒªã‚½ãƒ¼ã‚¹ã‚’制é™ã™ã‚‹ãŸã‚ã«ä½¿ã‚れã¾ã™ã€‚
          特ã«ã€ã“れ㯠CGI スクリプト㨠SSI exec
          コマンドã§ä½¿ã‚れるリソースを制御ã—ã¾ã™ã€‚</p>
      
          <p><code class="directive"><a href="./mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code> 㯠Netware
          ã§ã®ã¿ã€ã‚¹ã‚¿ãƒƒã‚¯ã®å¤§ãã•を制御ã™ã‚‹ãŸã‚ã«ä½¿ã‚れã¾ã™ã€‚</p>
        </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/server-wide.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/server-wide.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/server-wide.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/server-wide.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/server-wide.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/server-wide.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/������������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273357�015301� 5����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/perf-hp.html������������������������������������������������������0000644�0000000�0000050�00000000454�13362070302�017513� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: perf-hp.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: perf-hp.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: perf-hp.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/rpm.html.fr.utf8��������������������������������������������������0000644�0000000�0000050�00000031714�13412755316�020261� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Utiliser Apache sur les systèmes à base de paquets RPM (Redhat
        / CentOS / Fedora) - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Notes spécifiques aux différentes
        plateformes</a></div><div id="page-content"><div id="preamble"><h1>Utiliser Apache sur les systèmes à base de paquets RPM (Redhat
        / CentOS / Fedora)</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/platform/rpm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/rpm.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
      
          <p>Alors que de nombreuses distributions mettent à disposition des
          paquets Apache httpd supportés par le système d'exploitation
          sous-jacent, il peut s'avérer nécessaire d'installer et d'utiliser
          la version de base d'Apache httpd en remplacement de la version des
          paquets.</p>
      
          <p>Bien que le projet Apache httpd ne crée pas actuellement de
          paquets RPM pour les différentes distributions, il est aisé de
          construire votre propre paquet RPM à partir du tarball de base
          d'Apache httpd.</p>
      
          <p>Ce document explique comment construire, installer, configurer et
          exécuter Apache httpd 2.4 sur les systèmes Unix à base de paquets
          RPM.</p>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#creating">Création d'un paquet RPM source</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#building">Création d'un paquet RPM</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#installing">Installation du serveur</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#default">Configuration de l'instance par défaut d'Apache httpd</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#additional">Configuration d'instances d'Apache httpd supplémentaires sur
          la même machine</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="creating" id="creating">Création d'un paquet RPM source</a></h2>
          
      
          <p>Le tarball d'Apache httpd peut être converti en paquet SRPM de la
          manière suivante :</p>
      
          <div class="example"><p><code>
            rpmbuild -ts httpd-2.4.x.tar.bz2
          </code></p></div>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="building" id="building">Création d'un paquet RPM</a></h2>
          
      
          <p>Le tarball d'Apache httpd peut être converti en paquet RPM de la
          manière suivante :</p>
      
          <div class="example"><p><code>
            rpmbuild -tb httpd-2.4.x.tar.bz2
          </code></p></div>
      
          <p>Il sera nécessaire d'installer les paquets "-devel"
          correspondants avant de construire les RPMs ; à cet effet, la
          commande <code>rpmbuild</code> détecte automatiquement les RPMs
          requis et en donne la liste sous forme de dépendances manquantes sur
          votre système. Ces paquets "-devel" ne seront d'ailleurs plus
          nécessaires une fois la création des RPMs terminée, et pourront
          alors être supprimés sans risque.</p>
      
          <p>Si tout va bien, les RPMs suivants seront créés :</p>
      
          <dl>
          <dt>httpd-2.4.x-1.i686.rpm</dt>
          <dd>Le serveur de base et le jeu de modules standards.</dd>
      
          <dt>httpd-debuginfo-2.4.x-1.i686.rpm</dt>
          <dd>Les symboles de débogage pour le serveur et tous les modules.</dd>
      
          <dt>httpd-devel-2.4.x-1.i686.rpm</dt>
          <dd>Les en-têtes et fichiers de développement pour le serveur.</dd>
      
          <dt>httpd-manual-2.4.x-1.i686.rpm</dt>
          <dd>Le manuel du serveur web.</dd>
      
          <dt>httpd-tools-2.4.x-1.i686.rpm</dt>
          <dd>Les utilitaires du serveur web.</dd>
      
          <dt>mod_authnz_ldap-2.4.x-1.i686.rpm</dt>
          <dd>Les modules <code class="module"><a href="../mod/mod_ldap.html">mod_ldap</a></code> et
          <code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code> avec les dépendances
          correspondantes sur openldap.</dd>
      
          <dt>mod_lua-2.4.x-1.i686.rpm</dt>
          <dd>Le module <code class="module"><a href="../mod/mod_lua.html">mod_lua</a></code> avec les dépendances
          correspondantes sur lua.</dd>
      
          <dt>mod_proxy_html-2.4.x-1.i686.rpm</dt>
          <dd>Le module <code class="module"><a href="../mod/mod_proxy_html.html">mod_proxy_html</a></code> avec les
          dépendances correspondantes sur libxml2.</dd>
      
          <dt>mod_socache_dc-2.4.x-1.i686.rpm</dt>
          <dd>Le module <code class="module"><a href="../mod/mod_socache_dc.html">mod_socache_dc</a></code> avec les
          dépendances correspondantes sur distcache.</dd>
      
          <dt>mod_ssl-2.4.x-1.i686.rpm</dt>
          <dd>Le module <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> avec les
          dépendances correspondantes sur openssl.</dd>
      
          </dl>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="installing" id="installing">Installation du serveur</a></h2>
          
      
          <p>Le RPM <code>httpd</code> est le seul paquet nécessaire pour
          obtenir un serveur de base fonctionnel. Vous pouvez l'installer
          comme suit :</p>
      
          <div class="example"><p><code>
            rpm -U httpd-2.4.x-1.i686.rpm
          </code></p></div>
      
          <p>Le jeu de modules standards est inclus dans le serveur. Les
          modules qui dépendent de bibliothèques externes sont fournis en tant
          que paquets RPM séparés et doivent être installés si nécessaire.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="default" id="default">Configuration de l'instance par défaut d'Apache httpd</a></h2>
          
      
          <p>Les répertoires par défaut sont
          <code>/etc/httpd</code> pour la configuration du serveur, et
          <code>/var/log/httpd</code> pour la journalisation. L'environnement
          par défaut du serveur web est défini dans le répertoire optionnel
          <code>/etc/sysconfig/httpd</code>.</p>
      
          <p>Démarrez le serveur comme suit :</p>
      
          <div class="example"><p><code>
            service httpd restart
          </code></p></div>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="additional" id="additional">Configuration d'instances d'Apache httpd supplémentaires sur
          la même machine</a></h2>
          
      
          <p>Il est possible d'exécuter simultanément plusieurs instances du
          serveur Apache httpd sur la même machine. Chaque instance peut
          posséder sa propre configuration et en fonction de cette dernière,
          s'exécuter sous un utilisateur différent.</p>
      
          <p>Pour parvenir à ce résultat, on a fait en sorte que le script de
          démarrage de httpd ait connaissance de son propre nom. Ce nom est
          par la suite utilisé pour trouver le fichier d'environnement associé
          au serveur, et par conséquent, la racine de l'instance du serveur
          considéré.</p>
      
          <p>Pour créer une instance supplémentaire appelée
          <code>httpd-additional</code>, suivez ces étapes :</p>
      
          <ul>
            <li>Créez un lien symbolique vers le script de démarrage pour
            l'instance supplémentaire :
      
            <div class="example"><p><code>
              ln -s /etc/rc.d/init.d/httpd /etc/rc.d/init.d/httpd-additional<br />
              chkconfig --add httpd-additional
            </code></p></div>
      
            </li>
      
            <li>Créez un fichier d'environnement pour l'instance
            supplémentaire, en utilisant le fichier
            <code>/etc/sysconfig/httpd</code> comme modèle :
      
            <div class="example"><p><code>
              # création du fichier d'environnement à partir du modèle httpd<br />
              cp /etc/sysconfig/httpd /etc/sysconfig/httpd-additional
            </code></p></div>
            
            <div class="example"><p><code>
              # création du fichier d'environnement à partir de zéro<br />
              touch /etc/sysconfig/httpd-additional
            </code></p></div>
      
            Editez le fichier <code>/etc/sysconfig/httpd-additional</code> et
            définissez la racine de la nouvelle instance du serveur via la
            variable d'environnement <code>OPTIONS</code>.
      
            <div class="example"><p><code>
              OPTIONS="-d /etc/httpd-additional -f conf/httpd-additional.conf"
            </code></p></div>
      
            </li>
      
            <li>Editez le fichier de configuration du serveur supplémentaire
            <code>/etc/httpd-additional/conf/httpd-additional.conf</code> et
            assurez-vous que les ports et chemins sont correctement définis.
            </li>
      
            <li>Démarrez le serveur supplémentaire comme suit :
      
            <div class="example"><p><code>
              service httpd-additional restart
            </code></p></div>
      
            </li>
      
            <li>Répétez ces opérations pour chaque instance supplémentaire
            souhaitée.</li>
          </ul>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/platform/rpm.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/rpm.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/rpm.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������httpd-2.4.41/docs/manual/platform/win_compiling.html������������������������������������������������0000644�0000000�0000050�00000000476�13362070302�021014� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: win_compiling.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: win_compiling.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: win_compiling.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/perf-hp.html.ko.euc-kr��������������������������������������������0000644�0000000�0000050�00000017361�13412755316�021330� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>HPUX¿¡¼­ °í¼º´É À¥¼­¹ö ½ÇÇàÇϱâ - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Platform Specific Notes</a></div><div id="page-content"><div id="preamble"><h1>HPUX¿¡¼­ °í¼º´É À¥¼­¹ö ½ÇÇàÇϱâ</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/platform/perf-hp.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/perf-hp.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/perf-hp.html" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      
      <pre>Date: Wed, 05 Nov 1997 16:59:34 -0800
      From: Rick Jones &lt;<a href="mailto:raj@cup.hp.com">raj@cup.hp.com</a>&gt;
      Reply-To: <a href="mailto:raj@cup.hp.com">raj@cup.hp.com</a>
      Organization: Network Performance
      Subject: HP-UX tuning tips</pre>
      
          <p>ÀÌ ±ÛÀº ¼º´ÉÇâ»ó ÆäÀÌÁö¿¡ Ãß°¡ÇÒ HP-UX ¼º´ÉÇâ»ó ÆÁÀÌ´Ù.</p>
      
          <p>HP-UX 9.X´Â: 10.20À¸·Î ¾÷±×·¹À̵åÇ϶ó<br />
          HP-UX 10.[00|01|10]Àº: 10.20À¸·Î ¾÷±×·¹À̵åÇ϶ó</p>
      
          <p>HP-UX 10.20˼:</p>
      
          <p>ÃÖ±Ù ARPA Transport ÆÐÄ¡ ¸ðÀ½À» ¼³Ä¡ÇÑ´Ù. ±×·¯¸é TCP
          ¿¬°áã±â ÇØ½¬Å×À̺í Å©±â¸¦ ¼³Á¤ÇÒ ¼ö ÀÖ´Ù. ±âº»°ªÀº
          256 °³À̰í, 2ÀÇ °ÅµìÁ¦°ö°ªÀ¸·Î ÁöÁ¤ÇØ¾ß ÇÑ´Ù. adb·Î Ä¿³ÎÀÇ
          *disc* À̹ÌÁö¸¦ ¼öÁ¤ÇÏ¿© ¼³Á¤ÇÑ´Ù. º¯¼ö¸íÀº
          <code>tcp_hash_size</code>ÀÌ´Ù. <code>tcp_hash_size</code>
          º¯¼ö°ªÀÌ 32ºñÆ®À̹ǷΠdisc À̹ÌÁö¸¦ ¼öÁ¤ÇÒ¶§ ¹Ýµå½Ã 16ºñÆ®
          °ªÀ» ±â·ÏÇÏ´Â "<code>w</code>" ´ë½Å 32ºñÆ® °ªÀ» ±â·ÏÇÏ´Â
          "<code>W</code>"¸¦ »ç¿ëÇØ¾ß ÇÑ´Ù.</p>
      
          <p>¾î¶² °ªÀ» °í¸¦±î? <a href="ftp://ftp.cup.hp.com/dist/networking/tools/connhist">ftp://ftp.cup.hp.com/dist/networking/tools/connhist</a>ÀÇ
          °á°ú¸¦ º¸°í, ½Ã½ºÅÛ¿¡ Á¸ÀçÇÏ´Â TCP ¿¬°á ÃѰ³¼ö¸¦ »ìÆìºÁ¶ó.
          ÀÌ ¼ýÀÚ¸¦ ÇØ½¬Å×À̺í Å©±â·Î ³ª´« °ªÀÌ »ó´çÈ÷ (10 ÀÌÇÏ) ÀÛÀ¸¸é
          ÁÁ´Ù. HPÀÇ SPECweb96 °á°ú¿¡¼­ ÀϹÝÀûÀÎ ¼³Á¤À» º¼ ¼ö ÀÖ´Ù.
          °á°ú´Â <a href="http://www.specbench.org/">http://www.specbench.org/</a>¿¡
          ÀÖ´Ù. HP-UX ½Ã½ºÅÛÀÌ ÃÊ´ç 1000¹ø SPECweb96 ¿¬°áÀ» ÇÏ´Â °æ¿ì
          <code>TIME_WAIT</code>°¡ 60Ãʶó¸é 60,000°³ÀÇ TCP "¿¬°á"À»
          ÃßÀûÇÑ´Ù´Â ¶æÀÌ´Ù.</p>
      
          <p><a href="ftp://ftp.cup.hp.com/dist/networking/misc/listenq">ftp://ftp.cup.hp.com/dist/networking/misc/listenq</a>¸¦
          ½ÇÇàÇÏ¿© ½Ã½ºÅÛÀÇ ¿¬°á´ë±âÇà·Ä ±íÀ̸¦ ¾Ë ¼ö ÀÖ´Ù.</p>
      
          <p>PA-8000±â¹Ý ½Ã½ºÅÛ¿¡¼­ ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÑ´Ù¸é, ¾ÆÆÄÄ¡
          ½ÇÇàÆÄÀÏÀÌ Å« ÆäÀÌÁöÅ©±â¸¦ »ç¿ëÇϵµ·Ï "chatr"ÇÑ´Ù. ¸í·ÉÀº
          "<code>chatr +pi L &lt;½ÇÇàÆÄÀÏ&gt;</code>"ÀÌ´Ù. ½ÇÇàÆÄÀÏÀ»
          ½ÇÇàÇÏ´Â GID¿¡ <code>MLOCK</code> ±ÇÇÑÀÌ ¹Ýµå½Ã ÇÊ¿äÇÏ´Ù.
          <code>MLOCK</code> ºÎ¿©¿¡ ´ëÇØ¼­´Â <code>Setprivgrp(1m)</code>¸¦
          Âü°íÇ϶ó. ¼öÁ¤ÈÄ Glance¸¦ ½ÇÇàÇÏ¿© ¼­¹öÀÇ ¸Þ¸ð¸®¿µ¿ªÀ» »ìÆìº¸¸é
          »ó´çÇÑ text ¼¼±×¸ÕÆ®°¡ Àá°ÜÀÖÀ½À» È®ÀÎÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>´ÙÁßÇÁ·Î¼¼½º ½Ã½ºÅÛ¿¡¼­ ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÑ´Ù¸é, ÇÁ·Î¼¼½º¸¦
          ÇÁ·Î¼¼½º¿¡ ¹èÁ¤ÇÏ´Â <code>mpctl()</code>¸¦ »ç¿ëÇÑ ÀÛÀº
          ÇÁ·Î±×·¥À» ÀÛ¼ºÇغÁ¶ó. ´Ü¼øÇÑ <code>pid % numcpu</code>
          ¾Ë°í¸®ÁòÀ¸·Îµµ ÃæºÐÇÒ °ÍÀÌ´Ù. ÀÌ ºÎºÐÀº ¾ÕÀ¸·Î ¼Ò½ºÄڵ忡
          Æ÷Ç﵃ ¼ö ÀÖ´Ù.</p>
      
          <p><code>FIN_WAIT_2</code> ¿¬°áÀÇ °³¼ö°¡ °ÆÁ¤½º·´´Ù¸é,
          nettuneÀ» »ç¿ëÇÏ¿© <code>tcp_keepstart</code> °ªÀ» ÁÙÀÏ
          ¼ö ÀÖ´Ù. ±×·¯³ª Á¶½ÉÇØ¾ß ÇÑ´Ù - 4ºÐ º¸´Ù ÀÛ°Ô ¼³Á¤ÇÏÁö ¸¶¶ó.
          <code>tcp_hash_size</code>¸¦ Àß ¼³Á¤ÇÏ¿´´Ù¸é,
          <code>FIN_WAIT_2</code> °ªÀÌ Ä¿µµ (½ÉÁö¾î ±âº»°ªÀÎ 2½Ã°£µµ)
          ¹®Á¦¾ø´Ù - º¸Åë ¼º´É¿¡ Å« ¿µÇâÀ» ÁÖÁö ¾Ê´Â´Ù.</p>
      
          <p>¾ÕÀ¸·Î ¼Ò½ºÄڵ忡 Æ÷Ç﵃ ºÎºÐÀÌ ´õ ÀÖÁö¸¸, ¿©±â¼­ ÁÙÀδÙ.
          °ü½ÉÀÌ ÀÖ´Ù¸é ¸ÞÀÏÀ» ÁÖ±æ ¹Ù¶õ´Ù.</p>
      
          <p>±×·³ À̸¸,</p>
      
          <p>rick jones</p>
      
          <p><a href="http://www.cup.hp.com/netperf/NetperfPage.html">http://www.cup.hp.com/netperf/NetperfPage.html</a></p>
      
        </div>
      </div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/platform/perf-hp.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/perf-hp.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/perf-hp.html" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/perf-hp.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/ebcdic.html.en����������������������������������������������������0000644�0000000�0000050�00000057750�13412755316�020012� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>The Apache EBCDIC Port - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Platform Specific Notes</a></div><div id="page-content"><div id="preamble"><h1>The Apache EBCDIC Port</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/platform/ebcdic.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../ko/platform/ebcdic.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      
      
          <div class="warning"><strong>Warning:</strong> This document
          has not been updated to take into account changes made in
          the 2.0 version of the Apache HTTP Server. Some of the
          information may still be relevant, but please use it with care.
          </div>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#overview">Overview of the Apache EBCDIC Port</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#design">Design Goals</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#technical">Technical Solution</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#porting">Porting Notes</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#document">Document Storage Notes</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#modules">Apache Modules' Status</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#third-party">Third Party Modules' Status</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">Overview of the Apache EBCDIC Port</a></h2>
      
          
      
          <p>Version 1.3 of the Apache HTTP Server was the first version
          which included a port to a (non-ASCII) mainframe machine which
          uses the EBCDIC character set as its native codeset.</p>
      
          <p>(It is the SIEMENS family of mainframes running the <a href="http://www.siemens.de/servers/bs2osd/osdbc_us.htm">BS2000/OSD
          operating system</a>. This mainframe OS nowadays features a
          SVR4-derived POSIX subsystem).</p>
      
          <p>The port was started initially to</p>
      
          <ul>
            <li>prove the feasibility of porting <a href="http://httpd.apache.org/">the Apache HTTP server</a> to
            this platform</li>
      
            <li>find a "worthy and capable" successor for the venerable
            <a href="http://www.w3.org/Daemon/">CERN-3.0</a> daemon
            (which was ported a couple of years ago), and to</li>
      
            <li>prove that Apache's preforking process model can on this
            platform easily outperform the accept-fork-serve model used
            by CERN by a factor of 5 or more.</li>
          </ul>
      
          <p>This document serves as a rationale to describe some of the
          design decisions of the port to this machine.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="design" id="design">Design Goals</a></h2>
      
          
      
          <p>One objective of the EBCDIC port was to maintain enough
          backwards compatibility with the (EBCDIC) CERN server to make
          the transition to the new server attractive and easy. This
          required the addition of a configurable method to define
          whether a HTML document was stored in ASCII (the only format
          accepted by the old server) or in EBCDIC (the native document
          format in the POSIX subsystem, and therefore the only realistic
          format in which the other POSIX tools like <code>grep</code> or
          <code>sed</code> could operate on the documents). The current
          solution to this is a "pseudo-MIME-format" which is intercepted
          and interpreted by the Apache server (see below). Future versions
          might solve the problem by defining an "ebcdic-handler" for all
          documents which must be converted.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="technical" id="technical">Technical Solution</a></h2>
      
          
      
          <p>Since all Apache input and output is based upon the BUFF
          data type and its methods, the easiest solution was to add the
          conversion to the BUFF handling routines. The conversion must
          be settable at any time, so a BUFF flag was added which defines
          whether a BUFF object has currently enabled conversion or not.
          This flag is modified at several points in the HTTP
          protocol:</p>
      
          <ul>
            <li><strong>set</strong> before a request is received
            (because the request and the request header lines are always
            in ASCII format)</li>
      
            <li><strong>set/unset</strong> when the request body is
            received - depending on the content type of the request body
            (because the request body may contain ASCII text or a binary
            file)</li>
      
            <li><strong>set</strong> before a reply header is sent
            (because the response header lines are always in ASCII
            format)</li>
      
            <li><strong>set/unset</strong> when the response body is sent
            - depending on the content type of the response body (because
            the response body may contain text or a binary file)</li>
          </ul>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="porting" id="porting">Porting Notes</a></h2>
      
          
      
          <ol>
            <li>
              <p>The relevant changes in the source are <code>#ifdef</code>'ed
              into two categories:</p>
      
              <dl>
                <dt><code><strong>#ifdef
                CHARSET_EBCDIC</strong></code></dt>
      
                <dd>
                  <p>Code which is needed for any EBCDIC based machine.
                  This includes character translations, differences in
                  contiguity of the two character sets, flags which
                  indicate which part of the HTTP protocol has to be
                  converted and which part doesn't <em>etc.</em></p>
                </dd>
      
                <dt><code><strong>#ifdef _OSD_POSIX</strong></code></dt>
      
                <dd>
                  <p>Code which is needed for the SIEMENS BS2000/OSD
                  mainframe platform only. This deals with include file
                  differences and socket implementation topics which are
                  only required on the BS2000/OSD platform.</p>
                </dd>
              </dl>
            </li>
      
            <li>
              <p>The possibility to translate between ASCII and EBCDIC at
              the socket level (on BS2000 POSIX, there is a socket option
              which supports this) was intentionally <em>not</em> chosen,
              because the byte stream at the HTTP protocol level consists
              of a mixture of protocol related strings and non-protocol
              related raw file data. HTTP protocol strings are always
              encoded in ASCII (the <code>GET</code> request, any Header: lines,
              the chunking information <em>etc.</em>) whereas the file transfer
              parts (<em>i.e.</em>, GIF images, CGI output <em>etc.</em>)
              should usually be just "passed through" by the server. This
              separation between "protocol string" and "raw data" is
              reflected in the server code by functions like <code>bgets()</code>
              or <code>rvputs()</code> for strings, and functions like
              <code>bwrite()</code> for binary data. A global translation
              of everything would therefore be inadequate.</p>
      
              <p>(In the case of text files of course, provisions must be
              made so that EBCDIC documents are always served in
              ASCII)</p>
            </li>
      
            <li>
              <p>This port therefore features a built-in protocol level
              conversion for the server-internal strings (which the
              compiler translated to EBCDIC strings) and thus for all
              server-generated documents. The hard coded ASCII escapes
              <code>\012</code> and <code>\015</code> which are ubiquitous
              in the server code are an exception: they are already the binary
              encoding of the ASCII <code>\n</code> and <code>\r</code> and
              must not be converted to ASCII a second time.
              This exception is only relevant for server-generated strings;
              and <em>external</em> EBCDIC documents are not expected to
              contain ASCII newline characters.</p>
            </li>
      
            <li>
              <p>By examining the call hierarchy for the BUFF management
              routines, I added an "ebcdic/ascii conversion layer" which
              would be crossed on every puts/write/get/gets, and a
              conversion flag which allowed enabling/disabling the
              conversions on-the-fly. Usually, a document crosses this
              layer twice from its origin source (a file or CGI output) to
              its destination (the requesting client): <code>file -&gt;
              Apache</code>, and <code>Apache -&gt; client</code>.</p>
      
              <p>The server can now read the header lines of a CGI-script
              output in EBCDIC format, and then find out that the remainder
              of the script's output is in ASCII (like in the case of the
              output of a WWW Counter program: the document body contains a
              GIF image). All header processing is done in the native
              EBCDIC format; the server then determines, based on the type
              of document being served, whether the document body (except
              for the chunking information, of course) is in ASCII already
              or must be converted from EBCDIC.</p>
            </li>
      
            <li>
              <p>For Text documents (MIME types text/plain, text/html
              <em>etc.</em>), an implicit translation to ASCII can be
              used, or (if the users prefer to store some documents in
              raw ASCII form for faster serving, or because the files
              reside on a NFS-mounted directory tree) can be served
              without conversion.</p>
      
              <p><strong>Example:</strong></p>
      
              <p>to serve files with the suffix <code>.ahtml</code> as a
              raw ASCII <code>text/html</code> document without implicit
              conversion (and suffix <code>.ascii</code> as ASCII
              <code>text/plain</code>), use the directives:</p>
      
              <div class="example"><p><code>
                AddType  text/x-ascii-html  .ahtml <br />
                AddType  text/x-ascii-plain .ascii
              </code></p></div>
      
              <p>Similarly, any <code>text/foo</code> MIME type can be
              served as "raw ASCII" by configuring a MIME type
              "<code>text/x-ascii-foo</code>" for it using
              <code>AddType</code>.</p>
            </li>
      
            <li>
              <p>Non-text documents are always served "binary" without
              conversion. This seems to be the most sensible choice for,
              .<em>e.g.</em>, GIF/ZIP/AU file types. This of course
              requires the user to copy them to the mainframe host using
              the "<code>rcp -b</code>" binary switch.</p>
            </li>
      
            <li>
              <p>Server parsed files are always assumed to be in native
              (<em>i.e.</em>, EBCDIC) format as used on the machine, and
              are converted after processing.</p>
            </li>
      
            <li>
              <p>For CGI output, the CGI script determines whether a
              conversion is needed or not: by setting the appropriate
              Content-Type, text files can be converted, or GIF output can
              be passed through unmodified. An example for the latter case
              is the wwwcount program which we ported as well.</p>
            </li>
      
          </ol>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="document" id="document">Document Storage Notes</a></h2>
      
          
      
          <h3><a name="binary" id="binary">Binary Files</a></h3>
      
            
      
            <p>All files with a <code>Content-Type:</code> which does not
            start with <code>text/</code> are regarded as <em>binary
            files</em> by the server and are not subject to any conversion.
            Examples for binary files are GIF images, gzip-compressed files
            and the like.</p>
      
            <p>When exchanging binary files between the mainframe host and
            a Unix machine or Windows PC, be sure to use the ftp "binary"
            (<code>TYPE I</code>) command, or use the
            <code>rcp -b</code> command from the mainframe host (the
            <code>-b</code> switch is not supported in unix
            <code>rcp</code>'s).</p>
      
          
      
          <h3><a name="text" id="text">Text Documents</a></h3>
      
            
      
            <p>The default assumption of the server is that Text Files
            (<em>i.e.</em>, all files whose <code>Content-Type:</code>
            starts with <code>text/</code>) are stored in the native
            character set of the host, EBCDIC.</p>
      
          
      
          <h3><a name="ssi" id="ssi">Server Side Included Documents</a></h3>
      
            
      
            <p>SSI documents must currently be stored in EBCDIC only.
            No provision is made to convert it from ASCII before
            processing.</p>
      
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="modules" id="modules">Apache Modules' Status</a></h2>
      
          
      
          <table class="bordered">
            <tr>
              <th>Module</th>
              <th>Status</th>
              <th>Notes</th>
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/core.html">core</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module">mod_access</code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_actions.html">mod_actions</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_alias.html">mod_alias</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_asis.html">mod_asis</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module">mod_auth</code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_authn_anon.html">mod_authn_anon</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code></td>
              <td class="centered">?</td>
              <td>with own <code>libdb.a</code></td>
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_authz_dbm.html">mod_authz_dbm</a></code></td>
              <td class="centered">?</td>
              <td>with own <code>libdb.a</code></td>
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_autoindex.html">mod_autoindex</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_cern_meta.html">mod_cern_meta</a></code></td>
              <td class="centered">?</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code>mod_digest</code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_dir.html">mod_dir</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_so.html">mod_so</a></code></td>
              <td class="centered">-</td>
              <td>no shared libs</td>
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_env.html">mod_env</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_example.html">mod_example</a></code></td>
              <td class="centered">-</td>
              <td>(test bed only)</td>
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_expires.html">mod_expires</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_headers.html">mod_headers</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_imagemap.html">mod_imagemap</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_include.html">mod_include</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_info.html">mod_info</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code>mod_log_agent</code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code>mod_log_config</code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module">mod_log_referer</code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_mime.html">mod_mime</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_mime_magic.html">mod_mime_magic</a></code></td>
              <td class="centered">?</td>
              <td>not ported yet</td>
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_negotiation.html">mod_negotiation</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_proxy.html">mod_proxy</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code></td>
              <td class="centered">+</td>
              <td>untested</td>
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_setenvif.html">mod_setenvif</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_speling.html">mod_speling</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_status.html">mod_status</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_unique_id.html">mod_unique_id</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_userdir.html">mod_userdir</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_usertrack.html">mod_usertrack</a></code></td>
              <td class="centered">?</td>
              <td>untested</td>
            </tr>
          </table>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="third-party" id="third-party">Third Party Modules' Status</a></h2>
      
          
      
          <table class="bordered">
            <tr>
              <th>Module</th>
              <th>Status</th>
              <th>Notes</th>
            </tr>
      
            <tr>
              <td><code><a href="https://tomcat.apache.org/connectors-doc-archive/jk2/">JK</a> (Formerly mod_jserv)
              </code></td>
              <td class="centered">-</td>
              <td>JAVA still being ported.</td>
            </tr>
      
            <tr>
              <td><code><a href="http://www.php.net/">mod_php3</a></code></td>
              <td class="centered">+</td>
              <td><code>mod_php3</code> runs fine, with LDAP and GD
              and FreeType libraries.</td>
            </tr>
      
            <tr>
              <td><code><a href="http://hpwww.ec-lyon.fr/~vincent/apache/mod_put.html">mod_put</a></code></td>
              <td class="centered">?</td>
              <td>untested</td>
            </tr>
      
            <tr>
              <td><code><a href="ftp://hachiman.vidya.com/pub/apache/">mod_session</a></code></td>
              <td class="centered">-</td>
              <td>untested</td>
            </tr>
          </table>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/platform/ebcdic.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../ko/platform/ebcdic.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/ebcdic.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������httpd-2.4.41/docs/manual/platform/index.html.fr.utf8������������������������������������������������0000644�0000000�0000050�00000014573�13412755316�020576� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Notes spécifiques aux différentes plateformes. - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Notes spécifiques aux différentes plateformes.</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/platform/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/platform/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#win">Microsoft Windows</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#unix">Systèmes de type Unix</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#other">Autres plateformes</a></li>
      </ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="win" id="win">Microsoft Windows</a></h2>
      
          
      
          <dl>
            <dt>Utilisation d'Apache</dt>
            <dd>
              <p>Ce document explique comment installer, configurer et
      	exécuter Apache 2.4 sous Microsoft Windows.</p>
      
              <p>Voir : <a href="windows.html">Utilisation d'Apache avec Microsoft Windows</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Compilation d'Apache</dt>
            <dd>
              <p>Il y a de nombreux points importants à connaître avant de se
      	lancer dans la compilation d'Apache. Ce document en donne la
      	description.</p>
      
              <p>Voir : <a href="win_compiling.html">Compilation d'Apache pour Microsoft Windows</a></p>
            </dd>
          </dl>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="unix" id="unix">Systèmes de type Unix</a></h2>
      
          
      
          <dl>
            <dt>Systèmes à base de paquets RPM (Redhat / CentOS / Fedora)</dt>
            <dd>
              <p>Ce document explique comment installer, configurer et
      	exécuter Apache 2.4 sur des systèmes qui supportent le format de
      	paquet RPM.</p>
      
              <p>Voir : <a href="rpm.html">Utilisation d'Apache avec les
      	systèmes à base de paquets RPM</a></p>
            </dd>
          </dl>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="other" id="other">Autres plateformes</a></h2>
      
          
      
          <dl>
            <dt>Novell NetWare</dt>
            <dd>
              <p>Ce document explique comment installer, configurer et
      	exécuter Apache 2.4 sous Novell NetWare versions 5.1 et
      	supérieures.</p>
      
              <p>Voir : <a href="netware.html">Utilisation d'Apache avec Novell NetWare</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>EBCDIC</dt>
            <dd>
              <p>La version 1.3 du serveur HTTP Apache est la première à
      	avoir été portée vers une machine de type mainframe (non-ASCII)
      	qui utilisait le jeu de caractères EBCDIC comme jeu de
      	caractères natif.</p>
      
              <div class="warning"><strong>Avertissement :</strong>Ce document
      	n'a pas fait l'objet d'une mise à jour pour intégrer les
      	modifications intervenues à partir de la version 2.4 du serveur
      	HTTP Apache. Certaines des informations qu'il contient sont
      	toujours pertinentes, mais il est conseillé de les utiliser avec
      	prudence.</div>
      
              <p>Voir : <a href="ebcdic.html">Le portage d'Apache vers EBCDIC</a></p>
            </dd>
          </dl>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/platform/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/platform/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/netware.html.en���������������������������������������������������0000644�0000000�0000050�00000101310�13412755316�020224� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Using Apache With Novell NetWare - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Platform Specific Notes</a></div><div id="page-content"><div id="preamble"><h1>Using Apache With Novell NetWare</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/platform/netware.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/netware.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/netware.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      
      
          <p>This document explains how to install, configure and run
          Apache 2.0 under Novell NetWare 6.0 and above. If you find any bugs,
          or wish to contribute in other ways, please use our
          <a href="http://httpd.apache.org/bug_report.html">bug reporting
          page.</a></p>
      
          <p>The bug reporting page and dev-httpd mailing list are
          <em>not</em> provided to answer questions about configuration or
          running Apache.  Before you submit a bug report or request, first
          consult this document, the <a href="http://wiki.apache.org/httpd/FAQ">Frequently Asked
          Questions</a> page and the other relevant documentation topics. If
          you still have a question or problem, post it to the <a href="news://developer-forums.novell.com/novell.devsup.webserver">
          novell.devsup.webserver</a> newsgroup, where many Apache users are
          more than willing to answer new and obscure questions about using
          Apache on NetWare.</p>
      
          <p>Most of this document assumes that you are installing Apache
          from a binary distribution. If you want to compile Apache
          yourself (possibly to help with development, or to track down
          bugs), see the section on <a href="#comp">Compiling Apache for
          NetWare</a> below.</p>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#req">Requirements</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#down">Downloading Apache for NetWare</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#inst">Installing Apache for NetWare</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#run">Running Apache for NetWare</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#use">Configuring Apache for NetWare</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#comp">Compiling Apache for NetWare</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="req" id="req">Requirements</a></h2>
      
          
      
          <p>Apache 2.0 is designed to run on NetWare 6.0 service pack 3
          and above. If you are running a service pack less
          than SP3, you must install the latest
          <a href="http://developer.novell.com/ndk/libc.htm">NetWare Libraries
          for C (LibC)</a>.</p>
      
          <p>NetWare service packs are available <a href="http://support.novell.com/misc/patlst.htm#nw">here</a>.</p>
      
          <p>Apache 2.0 for NetWare can also be run in a NetWare 5.1 environment
          as long as the latest service pack or the latest version
          of the <a href="http://developer.novell.com/ndk/libc.htm">NetWare Libraries
          for C (LibC)</a> has been installed .  <strong>WARNING:</strong> Apache 2.0
          for NetWare has not been targeted for or tested in this environment.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="down" id="down">Downloading Apache for NetWare</a></h2>
      
          
      
          <p>Information on the latest version of Apache can be found on
          the Apache web server at <a href="http://www.apache.org/">http://www.apache.org/</a>. This
          will list the current release, any more recent alpha or
          beta-test releases, together with details of mirror web and
          anonymous ftp sites. Binary builds of the latest releases of
          Apache 2.0 for NetWare can be downloaded from
          <a href="http://www.apache.org/dist/httpd/binaries/netware">here</a>.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="inst" id="inst">Installing Apache for NetWare</a></h2>
      
          
      
          <p>There is no Apache install program for NetWare currently. If you
          are building Apache 2.0 for NetWare from source, you will need to
          copy the files over to the server manually.</p>
      
          <p>Follow these steps to install Apache on NetWare from the
          binary download (assuming you will install to
          <code>sys:/apache2</code>):</p>
      
          <ul>
            <li>Unzip the binary download file to the root of the <code>SYS:</code>
            volume (may be installed to any volume)</li>
      
            <li>Edit the <code>httpd.conf</code> file setting <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> and <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> along with any file path values
            to reflect your correct server settings</li>
      
            <li>Add <code>SYS:/APACHE2</code> to the search path, for example:
              <div class="example"><p><code>SEARCH ADD SYS:\APACHE2</code></p></div>
            </li>
      
          </ul>
      
          <p>Follow these steps to install Apache on NetWare manually
          from your own build source (assuming you will install to
          <code>sys:/apache2</code>):</p>
      
          <ul>
            <li>Create a directory called <code>Apache2</code> on a
            NetWare volume</li>
      
            <li>Copy <code>APACHE2.NLM</code>, <code>APRLIB.NLM</code>
            to <code>SYS:/APACHE2</code></li>
      
            <li>Create a directory under <code>SYS:/APACHE2</code>
            called <code>BIN</code></li>
      
            <li>Copy <code>HTDIGEST.NLM</code>, <code>HTPASSWD.NLM</code>,
            <code>HTDBM.NLM</code>, <code>LOGRES.NLM</code>, <code>ROTLOGS.NLM</code>
            to <code>SYS:/APACHE2/BIN</code></li>
      
            <li>Create a directory under <code>SYS:/APACHE2</code>
            called <code>CONF</code></li>
      
            <li>Copy the <code>HTTPD-STD.CONF</code> file to the
            <code>SYS:/APACHE2/CONF</code> directory and rename to
            <code>HTTPD.CONF</code></li>
      
            <li>Copy the <code>MIME.TYPES</code>, <code>CHARSET.CONV</code> and
            <code>MAGIC</code> files to <code>SYS:/APACHE2/CONF</code> directory</li>
      
            <li>Copy all files and subdirectories in <code>\HTTPD-2.0\DOCS\ICONS</code>
            to <code>SYS:/APACHE2/ICONS</code></li>
      
            <li>Copy all files and subdirectories in <code>\HTTPD-2.0\DOCS\MANUAL</code>
            to <code>SYS:/APACHE2/MANUAL</code></li>
      
            <li>Copy all files and subdirectories in <code>\HTTPD-2.0\DOCS\ERROR</code>
            to <code>SYS:/APACHE2/ERROR</code></li>
      
            <li>Copy all files and subdirectories in <code>\HTTPD-2.0\DOCS\DOCROOT</code>
            to <code>SYS:/APACHE2/HTDOCS</code></li>
      
            <li>Create the directory <code>SYS:/APACHE2/LOGS</code>
            on the server</li>
      
            <li>Create the directory <code>SYS:/APACHE2/CGI-BIN</code>
            on the server</li>
      
            <li>Create the directory <code>SYS:/APACHE2/MODULES</code>
            and copy all nlm modules into the <code>modules</code> directory</li>
      
            <li>Edit the <code>HTTPD.CONF</code> file searching for all
            <code>@@Value@@</code> markers and replacing them with the
            appropriate setting</li>
      
            <li>Add <code>SYS:/APACHE2</code> to the search path, for example:
              <div class="example"><p><code>SEARCH ADD SYS:\APACHE2</code></p></div>
            </li>
          </ul>
      
          <p>Apache may be installed to other volumes besides the default <code>SYS</code> volume.</p>
      
          <p>During the build process, adding the keyword "install" to the makefile command line
          will automatically produce a complete distribution package under the subdirectory
          <code>DIST</code>. Install Apache by simply copying the distribution that was produced
          by the makfiles to the root of a NetWare volume (see: <a href="#comp">Compiling Apache for
          NetWare</a> below).</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="run" id="run">Running Apache for NetWare</a></h2>
      
          
      
          <p>To start Apache just type <code>apache</code> at the
          console. This will load apache in the OS address space. If you
          prefer to load Apache in a protected address space you may
          specify the address space with the load statement as follows:</p>
      
          <div class="example"><p><code>
            load address space = apache2 apache2
          </code></p></div>
      
          <p>This will load Apache into an address space called apache2.
          Running multiple instances of Apache concurrently on NetWare is
          possible by loading each instance into its own protected
          address space.</p>
      
          <p>After starting Apache, it will be listening to port 80
          (unless you changed the <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code>
          directive in the configuration files).
          To connect to the server and access the default page,
          launch a browser and enter the server's name or address. This
          should respond with a welcome page, and a link to the Apache
          manual. If nothing happens or you get an error, look in the
          <code>error_log</code> file in the <code>logs</code>
          directory.</p>
      
          <p>Once your basic installation is working, you should
          configure it properly by editing the files in the
          <code>conf</code> directory.</p>
      
          <p>To unload Apache running in the OS address space just type
          the following at the console:</p>
      
          <div class="example"><p><code>
            unload apache2
          </code></p></div>
      
          <p>or</p>
      
          <div class="example"><p><code>
            apache2 shutdown
          </code></p></div>
      
          <p>If apache is running in a protected address space specify the
          address space in the unload statement:</p>
      
          <div class="example"><p><code>
            unload address space = apache2 apache2
          </code></p></div>
      
          <p>When working with Apache it is important to know how it will
          find the configuration files. You can specify a configuration
          file on the command line in two ways:</p>
      
          <ul>
            <li><code>-f</code> specifies a path to a particular
            configuration file</li>
          </ul>
      
          <div class="example"><p><code>
            apache2 -f "vol:/my server/conf/my.conf"
          </code></p></div>
      
          <div class="example"><p><code>
            apache -f test/test.conf
          </code></p></div>
      
          <p>In these cases, the proper <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>
          should be set in the configuration file.</p>
      
          <p>If you don't specify a configuration file name with <code>-f</code>,
          Apache will use the file name compiled into the server, usually
          <code>conf/httpd.conf</code>. Invoking Apache with the <code>-V</code>
          switch will display this value labeled as <code>SERVER_CONFIG_FILE</code>.
          Apache will then determine its <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>
          by trying the following, in this order:</p>
      
          <ul>
            <li>A <code>ServerRoot</code> directive via a
            <code>-C</code> switch.</li>
      
            <li>The <code>-d</code> switch on the command line.</li>
      
            <li>Current working directory</li>
      
            <li>The server root compiled into the server.</li>
          </ul>
      
          <p>The server root compiled into the server is usually <code>sys:/apache2</code>.
          invoking apache with the <code>-V</code> switch will display this value labeled as
          <code>HTTPD_ROOT</code>.</p>
      
          <p>Apache 2.0 for NetWare includes a set of command line directives that can
          be used to modify or display information about the running instance of the
          web server. These directives are only available while Apache is running. Each
          of these directives must be preceded by the keyword <code>APACHE2</code>.</p>
      
          <dl>
            <dt>RESTART</dt>
            <dd>Instructs Apache to terminate all running worker
            threads as they become idle, reread the configuration file and restart each
            worker thread based on the new configuration.</dd>
      
            <dt>VERSION</dt>
            <dd>Displays version information about the currently
            running instance of Apache.</dd>
      
            <dt>MODULES</dt>
            <dd>Displays a list of loaded modules both built-in
            and external.</dd>
      
            <dt>DIRECTIVES</dt>
            <dd>Displays a list of all available directives.</dd>
      
            <dt>SETTINGS</dt>
            <dd>Enables or disables the thread status display
            on the console. When enabled, the state of each running threads is displayed
            on the Apache console screen.</dd>
      
            <dt>SHUTDOWN</dt>
            <dd>Terminates the running instance of the Apache
            web server.</dd>
      
            <dt>HELP</dt>
            <dd>Describes each of the runtime directives.</dd>
          </dl>
      
          <p>By default these directives are issued against the instance of Apache running
          in the OS address space. To issue a directive against a specific instance running
          in a protected address space, include the -p parameter along with the name of the
          address space. For more information type "apache2 Help" on the command line.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="use" id="use">Configuring Apache for NetWare</a></h2>
      
          
      
          <p>Apache is configured by reading configuration files usually stored
          in the <code>conf</code> directory. These are the same as files used
          to configure the Unix version, but there are a few different directives for
          Apache on NetWare. See the <a href="../mod/">Apache module
          documentation</a> for all the available directives.</p>
      
          <p>The main differences in Apache for NetWare are:</p>
      
          <ul>
            <li>
              <p>Because Apache for NetWare is multithreaded, it does not
              use a separate process for each request, as Apache does on some Unix
              implementations. Instead there are only threads running: a parent
              thread, and multiple child or worker threads which handle the requests.</p>
      
              <p>Therefore the "process"-management directives are different:</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#maxconnectionsperchild">MaxConnectionsPerChild</a></code> -
              Like the Unix directive, this controls how many connections
              a worker thread will serve before exiting. The recommended default,
              <code>MaxConnectionsPerChild 0</code>, causes the thread to continue servicing
              request indefinitely. It is recommended on NetWare, unless there is some
              specific reason, that this directive always remain set to <code>0</code>.</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#startthreads">StartThreads</a></code> -
              This directive tells the server how many threads it should start initially.
              The recommended default is <code>StartThreads 50</code>.</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#minsparethreads">MinSpareThreads</a></code> -
              This directive instructs the server to spawn additional worker threads
              if the number of idle threads ever falls below this value. The recommended
              default is <code>MinSpareThreads 10</code>.</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#maxsparethreads">MaxSpareThreads</a></code> -
              This directive instructs the server to begin terminating worker threads
              if the number of idle threads ever exceeds this value. The recommended
              default is <code>MaxSpareThreads 100</code>.</p>
      
              <p><code class="directive"><a href="../mod/mpm_netware.html#maxthreads">MaxThreads</a></code> -
              This directive limits the total number of work threads to a maximum
              value. The recommended default is <code>ThreadsPerChild 250</code>.</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code> -
              This directive tells the server what size of stack to use
              for the individual worker thread. The recommended default
              is <code>ThreadStackSize 65536</code>.</p>
            </li>
      
            <li>
              <p>The directives that accept filenames as arguments must use
              NetWare filenames instead of Unix names. However, because Apache
              uses Unix-style names internally, forward slashes must be used
              rather than backslashes. It is recommended that all rooted file paths
              begin with a volume name. If omitted, Apache will assume the
              <code>SYS:</code> volume which may not be correct.</p>
            </li>
      
            <li>
              <p>Apache for NetWare has the ability to load modules at
              runtime, without recompiling the server. If Apache is
              compiled normally, it will install a number of optional
              modules in the <code>\Apache2\modules</code> directory.
              To activate these, or other modules, the <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> directive
              must be used. For example, to active the status module, use
              the following:</p>
      
              <div class="example"><p><code>
                LoadModule status_module modules/status.nlm
              </code></p></div>
      
              <p>Information on <a href="../mod/mod_so.html#creating">creating loadable
              modules</a> is also available.</p>
            </li>
          </ul>
      
          <h3><a name="use-add" id="use-add">Additional NetWare specific directives:</a></h3>
      
            
      
            <ul>
              <li><code class="directive"><a href="../mod/core.html#cgimapextension">CGIMapExtension</a></code> -
              This directive maps a CGI file extension to a script interpreter.</li>
            </ul>
            <ul>
              <li><code class="directive"><a href="../mod/mod_nw_ssl.html#securelisten">SecureListen</a></code> -
              Enables SSL encryption for a specified port.</li>
            </ul>
            <ul>
              <li><code class="directive"><a href="../mod/mod_nw_ssl.html#nwssltrustedcerts">NWSSLTrustedCerts</a></code> -
              Adds trusted certificates that are used to create secure connections to proxied servers.</li>
            </ul>
            <ul>
              <li><code class="directive"><a href="../mod/mod_nw_ssl.html#nwsslupgradeable">NWSSLUpgradeable</a></code> -
              Allow a connection created on the specified address/port to be upgraded to an SSL connection.</li>
            </ul>
      
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="comp" id="comp">Compiling Apache for NetWare</a></h2>
      
          
      
          <p>Compiling Apache requires MetroWerks CodeWarrior 6.x or higher. Once
          Apache has been built, it can be installed to the root of any NetWare
          volume. The default is the <code>sys:/Apache2</code> directory.</p>
      
          <p>Before running the server you must fill out the <code>conf</code>
          directory. Copy the file <code>HTTPD-STD.CONF</code> from the distribution
          <code>conf</code> directory and rename it to <code>HTTPD.CONF</code>.
          Edit the <code>HTTPD.CONF</code> file searching for all <code>@@Value@@</code>
          markers and replacing them with the appropriate setting. Copy over
          the <code>conf/magic</code> and <code>conf/mime.types</code> files as well.
          Alternatively, a complete distribution can be built by including the keyword
          <code>install</code> when invoking the makefiles.</p>
      
          <h3><a name="comp-req" id="comp-req">Requirements:</a></h3>
      
            
      
            <p>The following development tools are required to build
            Apache 2.0 for NetWare:</p>
      
            <ul>
              <li>Metrowerks CodeWarrior 6.0 or higher with the
              <a href="http://developer.novell.com/ndk/cwpdk.htm">NetWare PDK 3.0</a>
              or higher.</li>
      
              <li><a href="http://developer.novell.com/ndk/libc.htm">NetWare Libraries
              for C (LibC)</a></li>
      
              <li><a href="http://developer.novell.com/ndk/cldap.htm">LDAP Libraries
              for C</a></li>
      
              <li><a href="http://www.gzip.org/zlib/">ZLIB Compression Library source code</a></li>
      
              <li>AWK utility (awk, gawk or similar). AWK can be downloaded from
              <a href="http://developer.novell.com/ndk/apache.htm">http://developer.novell.com/ndk/apache.htm</a>.
              The utility must be found in your windows path and must be named <code>awk.exe</code>.</li>
      
              <li>To build using the makefiles, you will need GNU make version 3.78.1 (GMake) available at
              <a href="http://developer.novell.com/ndk/apache.htm">http://developer.novell.com/ndk/apache.htm</a>.</li>
            </ul>
      
          
      
          <h3><a name="comp-make" id="comp-make">Building Apache using the NetWare makefiles:</a></h3>
      
            
      
            <ul>
              <li>Set the environment variable <code>NOVELLLIBC</code> to the
              location of the NetWare Libraries for C SDK, for example:
              <div class="example"><p><code>Set NOVELLLIBC=c:\novell\ndk\libc</code></p></div>
              </li>
      
              <li>Set the environment variable <code>METROWERKS</code> to the
              location where you installed the Metrowerks CodeWarrior compiler,
              for example:
              <div class="example"><p><code>Set METROWERKS=C:\Program Files\Metrowerks\CodeWarrior</code></p></div>
              If you installed to the default location <code>C:\Program
              Files\Metrowerks\CodeWarrior</code>, you don't need to set this.</li>
      
              <li>Set the environment variable <code>LDAPSDK</code> to the
              location where you installed the LDAP Libraries for C, for example:
              <div class="example"><p><code>Set LDAPSDK=c:\Novell\NDK\cldapsdk\NetWare\libc</code></p></div>
              </li>
      
              <li>Set the environment variable <code>ZLIBSDK</code> to the
              location where you installed the source code for the ZLib Library,
              for example:
              <div class="example"><p><code>Set ZLIBSDK=D:\NOVELL\zlib</code></p></div>
              </li>
      
              <li>Set the environment variable <code>PCRESDK</code> to the location
              where you installed the source code for the PCRE Library, for example:
              <div class="example"><p><code>Set PCRESDK=D:\NOVELL\pcre</code></p></div>
              </li>
      
              <li>Set the environment variable <code>AP_WORK</code> to the full path of
              the <code>httpd</code> source code directory.
              <div class="example"><p><code>Set AP_WORK=D:\httpd-2.0.x</code></p></div>
              </li>
      
              <li>Set the environment variable <code>APR_WORK</code> to the full path of
              the <code>apr</code> source code directory. Typically <code>\httpd\srclib\apr</code>
              but the APR project can be outside of the httpd directory structure.
              <div class="example"><p><code>Set APR_WORK=D:\apr-1.x.x</code></p></div>
              </li>
      
              <li>Set the environment variable <code>APU_WORK</code> to the full path of
              the <code>apr-util</code> source code directory. Typically <code>\httpd\srclib\apr-util</code>
              but the APR-UTIL project can be outside of the httpd directory structure.
              <div class="example"><p><code>Set APU_WORK=D:\apr-util-1.x.x</code></p></div>
              </li>
      
              <li>Make sure that the path to the AWK utility and the GNU make utility
              (<code>gmake.exe</code>) have been included in the system's
              <code>PATH</code> environment variable.</li>
      
              <li>Download the source code and unzip to an appropriate directory on
              your workstation.</li>
      
              <li>Change directory to <code>\httpd-2.0</code> and build the prebuild utilities
              by running "<code>gmake -f nwgnumakefile prebuild</code>". This target will create
              the directory <code>\httpd-2.0\nwprebuild</code> and copy each of the utilities
              to this location that are necessary to complete the following build steps.
              </li>
      
              <li>Copy the files <code>\httpd-2.0\nwprebuild\GENCHARS.nlm</code> and
              <code>\httpd-2.0\nwprebuild\DFTABLES.nlm</code> to the <code>SYS:</code> volume of a
              NetWare server and run them using the following commands:
                <div class="example"><p><code>
                  SYS:\genchars &gt; sys:\test_char.h<br />
                  SYS:\dftables sys:\chartables.c<br />
                </code></p></div>
              </li>
      
              <li>Copy the files <code>test_char.h</code> and <code>chartables.c</code>
              to the directory <code>\httpd-2.0\os\netware</code> on the build machine.</li>
      
              <li>Change directory to <code>\httpd-2.0</code> and build Apache by running
              "<code>gmake -f nwgnumakefile</code>". You can create a distribution directory by
              adding an install parameter to the command, for example:
              <div class="example"><p><code>gmake -f nwgnumakefile install</code></p></div>
              </li>
            </ul>
      
          
      
          <h3><a name="comp-add" id="comp-add">Additional make options</a></h3>
      
            
      
            <ul>
              <li><code>gmake -f nwgnumakefile</code><p>Builds release versions of all of the
              binaries and copies them to a <code>\release</code> destination directory.</p></li>
      
              <li><code>gmake -f nwgnumakefile DEBUG=1</code><p>Builds debug versions of all of the
              binaries and copies them to a <code>\debug</code> destination directory.</p></li>
      
              <li><code>gmake -f nwgnumakefile install</code><p>Creates a complete Apache
              distribution with binaries, docs and additional support files in a
              <code>\dist\Apache2</code> directory.</p></li>
      
              <li><code>gmake -f nwgnumakefile prebuild</code><p>Builds all of the prebuild utilities
              and copies them to the <code>\nwprebuild</code> directory.</p></li>
      
              <li><code>gmake -f nwgnumakefile installdev</code><p>Same as install but also creates a
              <code>\lib</code> and <code>\include</code> directory in the destination directory
              and copies headers and import files.</p></li>
      
              <li><code>gmake -f nwgnumakefile clean</code><p>Cleans all object files and binaries
              from the <code>\release.o</code> or <code>\debug.o</code> build areas depending on whether
              <code>DEBUG</code> has been defined.</p></li>
      
              <li><code>gmake -f nwgnumakefile clobber_all</code><p>Same as clean and also deletes
              the distribution directory if it exists.</p></li>
            </ul>
      
          
      
          <h3><a name="comp-add-env" id="comp-add-env">Additional environment variable options</a></h3>
      
            
      
            <ul>
              <li>To build all of the experimental modules, set the environment
              variable <code>EXPERIMENTAL</code>:
              <div class="example"><p><code>Set EXPERIMENTAL=1</code></p></div>
              </li>
      
              <li>To build Apache using standard BSD style sockets rather than
              Winsock, set the environment variable <code>USE_STDSOCKETS</code>:
              <div class="example"><p><code>Set USE_STDSOCKETS=1</code></p></div>
              </li>
      
            </ul>
      
          
      
          <h3><a name="comp-mod_ssl" id="comp-mod_ssl">Building mod_ssl for the NetWare platform</a></h3>
      
            
      
            <p>By default Apache for NetWare uses the built-in module
            <code class="module"><a href="../mod/mod_nw_ssl.html">mod_nw_ssl</a></code> to provide SSL services.  This module
            simply enables the native SSL services implemented in NetWare OS
            to handle all encryption for a given port.  Alternatively, mod_ssl
            can also be used in the same manner as on other platforms.</p>
      
            <p>Before mod_ssl can be built for the NetWare platform, the OpenSSL
            libraries must be provided.  This can be done through the following
            steps:</p>
      
            <ul>
                <li>Download the recent OpenSSL 0.9.8 release source code from the
                <a href="http://www.openssl.org/source/">OpenSSL Source</a>
                page (older 0.9.7 versions need to be patched and are therefore not
                recommended).</li>
      
                <li>Edit the file <code>NetWare/set_env.bat</code> and modify any
                tools and utilities paths so that they correspond to your build
                environment.</li>
      
                <li>From the root of the OpenSSL source directory, run the following
                scripts:
                <div class="example"><p><code>
                    Netware\set_env netware-libc<br />
                    Netware\build netware-libc
                </code></p></div>
                For performance reasons you should enable to build with ASM code.
                Download NASM from the <a href="http://nasm.sourceforge.net/">SF site</a>.
                Then configure OpenSSL to use ASM code:
                <div class="example"><p><code>
                    Netware\build netware-libc nw-nasm enable-mdc2 enable-md5
                </code></p></div>
                Warning: dont use the CodeWarrior Assembler - it produces broken code!
                </li>
      
                <li>Before building Apache, set the environment variable
                <code>OSSLSDK</code> to the full path to the root of the openssl
                source code directory, and set WITH_MOD_SSL to 1.
                <div class="example"><p><code>
                    Set OSSLSDK=d:\openssl-0.9.8x<br />
                    Set WITH_MOD_SSL=1
                </code></p></div></li>
      
            </ul>
      
          
      
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/platform/netware.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/netware.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/netware.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/netware.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/index.html.en�����������������������������������������������������0000644�0000000�0000050�00000014105�13412755316�017673� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Platform Specific Notes - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Platform Specific Notes</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/platform/" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/platform/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#win">Microsoft Windows</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#unix">Unix Systems</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#other">Other Platforms</a></li>
      </ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="win" id="win">Microsoft Windows</a></h2>
      
          
      
          <dl>
            <dt>Using Apache</dt>
            <dd>
              <p>This document explains how to install, configure and run Apache 2.4
              under Microsoft Windows.</p>
      
              <p>See: <a href="windows.html">Using Apache with Microsoft Windows</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Compiling Apache</dt>
            <dd>
              <p>There are many important points before you begin compiling Apache.
              This document explain them.</p>
      
              <p>See: <a href="win_compiling.html">Compiling Apache for Microsoft Windows</a></p>
            </dd>
          </dl>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="unix" id="unix">Unix Systems</a></h2>
      
          
      
          <dl>
            <dt>RPM Based Systems (Redhat / CentOS / Fedora)</dt>
            <dd>
              <p>This document explains how to build, install, and run Apache 2.4
              on systems supporting the RPM packaging format.</p>
      
              <p>See: <a href="rpm.html">Using Apache With RPM Based Systems</a></p>
            </dd>
          </dl>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="other" id="other">Other Platforms</a></h2>
      
          
      
          <dl>
            <dt>Novell NetWare</dt>
            <dd>
              <p>This document explains how to install, configure and run Apache 2.4
              under Novell NetWare 5.1 and above.</p>
      
              <p>See: <a href="netware.html">Using Apache With Novell NetWare</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>EBCDIC</dt>
            <dd>
              <p>Version 1.3 of the Apache HTTP Server is the first version which
              includes a port to a (non-ASCII) mainframe machine which uses the
              EBCDIC character set as its native codeset.</p>
      
              <div class="warning"><strong>Warning:</strong> This document
              has not been updated to take into account changes made in
              the 2.4 version of the Apache HTTP Server. Some of the
              information may still be relevant, but please use it
              with care.</div>
      
              <p>See: <a href="ebcdic.html">The Apache EBCDIC Port</a></p>
            </dd>
          </dl>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/platform/" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/platform/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/windows.html.ko.euc-kr��������������������������������������������0000644�0000000�0000050�00000077403�13412755316�021464� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Microsoft Windows¿¡¼­ ¾ÆÆÄÄ¡ »ç¿ë¹ý - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Platform Specific Notes</a></div><div id="page-content"><div id="preamble"><h1>Microsoft Windows¿¡¼­ ¾ÆÆÄÄ¡ »ç¿ë¹ý</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/platform/windows.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/windows.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/windows.html" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      
          <p>ÀÌ ¹®¼­´Â Microsoft Windows¿¡¼­ ¾ÆÆÄÄ¡ 2.0À» ¼³Ä¡, ¼³Á¤,
          ½ÇÇàÇÏ´Â ¹æ¹ýÀ» ¼³¸íÇÑ´Ù. À߸øµÈ ºÎºÐÀÌ Àְųª ´Ù¸¥ ¹æ¹ýÀ¸·Î
          µµ¿òÀ» ÁÖ·Á¸é, <a href="http://httpd.apache.org/bug_report.html">¹ö±× º¸°í
          ÆäÀÌÁö</a>¸¦ »ç¿ëÇÏ±æ ¹Ù¶õ´Ù.</p>
      
          <p>ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡ ¹ÙÀ̳ʸ® ¹èÆ÷º»À» ¼³Ä¡ÇÑ´Ù°í °¡Á¤ÇÑ´Ù.
          (¾Æ¸¶µµ °³¹ß ȤÀº ¹ö±×¸¦ ã±âÀ§ÇØ) Á÷Á¢ ¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇÏ·Á¸é
          <a href="win_compiling.html">Microsoft Windows¿ë ¾ÆÆÄÄ¡
          ÄÄÆÄÀÏ</a>À» Âü°íÇ϶ó.</p>
      
          <p><strong>ÇöÀç Microsoft Windows ¿î¿µÃ¼Á¦±ºÀÇ ¹öÀü Á¤Ã¥»ó
          ÀÌ ¹®¼­´Â ´ÙÀ½°ú °°ÀÌ ±¸ºÐÇÑ´Ù:</strong></p>
          <ul>
            <li><strong>Windows NT:</strong> Windows NT Ä¿³ÎÀ» ±â¹ÝÀ¸·Î
            ÇÏ´Â ¸ðµç Windows ¹öÀüÀ» ÀǹÌÇÑ´Ù. Windows NT, Windows
            2000, Windows XP, Windows .Net Server 2003À» ÁöĪÇÑ´Ù.</li>
            <li><strong>Windows 9x:</strong> ¼ÒºñÀÚ Áß½ÉÀÇ ¿À·¡µÈ
            Windows ¹öÀüÀ» ¶æÇÑ´Ù. Windows 95 (OSR2 Æ÷ÇÔ), Windows
            98, Windows ME¸¦ ÁöĪÇÑ´Ù.</li>
          </ul>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#req">¿î¿µÃ¼Á¦ ¿ä±¸Á¶°Ç</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#down">Windows¿ë ¾ÆÆÄÄ¡ ´Ù¿î·Îµå</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#inst">Windows¿ë ¾ÆÆÄÄ¡ ¼³Ä¡Çϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cust">Windows¿ë ¾ÆÆÄÄ¡ ¼³Á¤Çϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#winsvc">¾ÆÆÄÄ¡¸¦ Service·Î ½ÇÇàÇϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#wincons">¾ÆÆÄÄ¡¸¦ ÄÜ¼Ö ÇÁ·Î±×·¥À¸·Î ½ÇÇàÇϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#test">Á¤»óÀûÀ¸·Î ¼³Ä¡µÇ¾ú´ÂÁö °Ë»çÇϱâ</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="req" id="req">¿î¿µÃ¼Á¦ ¿ä±¸Á¶°Ç</a></h2>
          
      
          <p>¾ÆÆÄÄ¡ 2.0À» ½ÇÇàÇϱâÀ§ÇÑ ±âº» Windows Ç÷¡ÆûÀº Windows
          NTÀÌ´Ù. ¹ÙÀ̳ʸ® ¼³Ä¡ÇÁ·Î±×·¥Àº Intel°ú AMD¿Í °°Àº x86 °³¿­
          ÇÁ·Î¼¼¼­¿¡¼­¸¸ µ¿ÀÛÇÑ´Ù. ¾ÆÆÄÄ¡´Â Windows 9x¿¡¼­ ÃæºÐÈ÷
          °Ë»çÇÏÁö ¾Ê¾Ò±â¶§¹®¿¡ Àý´ë·Î ½ÇÁ¦ ¼­ºñ½º¿¡ »ç¿ëÇÏÁö ¾Ê±æ
          ¹Ù¶õ´Ù.
          </p>
      
          <p>¿î¿µÃ¼Á¦¿¡ ¼³Ä¡ÇÑ TCP/IP ³×Æ®¿öÅ©°¡ µ¿ÀÛÇØ¾ß ÇÑ´Ù. Windows
          95¿¡¼­ ½ÇÇàÇÑ´Ù¸é, Winsock 2 ¾÷±×·¹À̵带 ¼³Ä¡ÇØ¾ß ÇÑ´Ù.
          Windows 95¿ë Winsock 2´Â <a href="http://www.microsoft.com/windows95/downloads/contents/WUAdminTools/S_WUNetworkingTools/W95Sockets2/Default.asp">¿©±â</a>¿¡¼­
          ´Ù¿î¹ÞÀ» ¼ö ÀÖ´Ù.
          </p>
      
          <p>Windows NT 4.0À» »ç¿ëÇÑ´Ù¸é ¼­ºñ½ºÆÑ 4ÀÇ TCP/IP ¹®Á¦¿Í
          Winsock ¹®Á¦°¡ ´ÙÀ½ ¼­ºñ½ºÆÑ¿¡¼­ ÇØ°áµÇ¾ú±â¶§¹®¿¡, ¼­ºñ½ºÆÑ
          6À» ¼³Ä¡Çϱæ Àû±Ø ±ÇÇÑ´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="down" id="down">Windows¿ë ¾ÆÆÄÄ¡ ´Ù¿î·Îµå</a></h2>
          
      
          <p>¾ÆÆÄÄ¡ À¥¼­¹ö <a href="http://httpd.apache.org/download.cgi">http://httpd.apache.org/download.cgi</a>¿¡¼­
          ¾ÆÆÄÄ¡ ÃֽйöÀü¿¡ ´ëÇÑ Á¤º¸¸¦ ¾òÀ» ¼ö ÀÖ´Ù. ¿©±â¿¡´Â ÃÖ½Å
          ¹ßÇ¥ÆÇ°ú ¾ËÆÄ ȤÀº º£Å¸ Å×½ºÆ®¹öÀü°ú, ¾ÆÆÄÄ¡ À¥¼­¹ö¸¦ ´Ù¿î·ÎµåÇÒ
          ¼ö ÀÖ´Â HTTP ¹Ì·¯¿Í FTP ¹Ì·¯ ¸ñ·ÏÀÌ ÀÖ´Ù. ºü¸£°í ¾ÈÁ¤ÇϰÔ
          ´Ù¿î¹ÞÀ¸·Á¸é °¡±î¿î ¹Ì·¯¸¦ »ç¿ëÇÏ±æ ¹Ù¶õ´Ù.</p>
      
          <p>Windows¿¡ ¼³Ä¡ÇÏ·Á¸é È®ÀåÀÚ°¡ <code>.msi</code>ÀÎ Windows¿ë
          ¾ÆÆÄÄ¡ ¹öÀüÀ» ´Ù¿î¹Þ¾Æ¾ß ÇÑ´Ù. ÀÌ ÆÄÀÏÀº ¸·¹Ù·Î ½ÇÇàÇÒ ¼ö
          ÀÖ´Â ¾ÆÆÄÄ¡¸¦ ÀúÀåÇÑ Microsoft ¼³Ä¡ÆÄÀÏÀÌ´Ù. µû·Î ¼Ò½ºÄڵ常
          ¹­¾îµÐ <code>.zip</code> ÆÄÀÏÀÌ ÀÖ´Ù. Microsoft Visual C++
          (Visual Studio)À» »ç¿ëÇÏ¿© Á÷Á¢ ¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇÒ ¼öµµ ÀÖ´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="inst" id="inst">Windows¿ë ¾ÆÆÄÄ¡ ¼³Ä¡Çϱâ</a></h2>
          
      
          <p>¼³Ä¡ÇÏ·Á¸é Microsoft Installer 1.2 ÀÌ»ó ¹öÀüÀÌ ÇÊ¿äÇÏ´Ù.
          Windows 9x¸¦ »ç¿ëÇÑ´Ù¸é <a href="http://www.microsoft.com/downloads/release.asp?ReleaseID=32831">¿©±â</a>¿¡¼­
          Microsoft Installer¸¦ 2.0 ¹öÀüÀ¸·Î ¾÷±×·¹À̵åÇÒ ¼ö ÀÖ°í,
          Windows NT 4.0°ú 2000À» »ç¿ëÇÑ´Ù¸é <a href="http://www.microsoft.com/downloads/release.asp?ReleaseID=32832">¿©±â</a>¿¡¼­
          2.0 ¹öÀü ¾÷µ¥ÀÌÆ®¸¦ ±¸ÇÒ ¼ö ÀÖ´Ù. Windows XP´Â ¾÷µ¥ÀÌÆ®ÇÒ
          Çʿ䰡 ¾ø´Ù.</p>
      
          <p>¹ÙÀ̳ʸ® ¼³Ä¡ÆÄÀϷδ °°Àº ÄÄÇ»ÅÍ¿¡ ¼­·Î ´Ù¸¥ ¾ÆÆÄÄ¡
          2.0 ¹öÀüÀ» ¼³Ä¡ÇÒ ¼ö ¾øÀ½À» ÁÖÀÇÇ϶ó. ±×·¯³ª 1.3
          ¹öÀü<strong>°ú</strong> 2.0 ¹öÀüÀº °°Àº ÄÄÇ»ÅÍ¿¡ ¾Æ¹« ¹®Á¦¾øÀÌ
          ¼³Ä¡ÇÒ ¼ö ÀÖ´Ù. °°Àº ÄÄÇ»ÅÍ¿¡ µÎ°¡Áö ´Ù¸¥ 2.0 ¹öÀüÀ» ¼³Ä¡ÇÏ·Á¸é
          <a href="win_compiling.html">¼Ò½º¸¦ ÄÄÆÄÀÏÇÏ¿© ¾ÆÆÄÄ¡¸¦
          ¼³Ä¡</a>ÇØ¾ß ÇÑ´Ù.</p>
      
          <p>À§¿¡¼­ ´Ù¿î¹ÞÀº ¾ÆÆÄÄ¡ <code>.msi</code> ÆÄÀÏÀ» ½ÇÇàÇÑ´Ù.
          ¼³Ä¡ÇÒ¶§ ´ÙÀ½°ú °°Àº °ÍÀ» ¹°¾îº»´Ù:</p>
      
          <ol>
            <li><p><strong>³×Æ®¿öÅ© µµ¸ÞÀÎ (Network Domain).</strong>
            µî·ÏµÈ ¼­¹öÀÇ DNS µµ¸ÞÀÎÀ» ÀÔ·ÂÇÑ´Ù. ¿¹¸¦ µé¾î, ¼­¹öÀÇ
            Àüü DNS À̸§ÀÌ <code>server.mydomain.net</code>À̶ó¸é
            ¿©±â¿¡ <code>mydomain.net</code>À» ÀÔ·ÂÇÑ´Ù.</p></li>
      
            <li><p><strong>¼­¹ö¸í (Server Name).</strong> ¼­¹öÀÇ Àüü
            DNS À̸§. À§ÀÇ °æ¿ì ¿©±â¿¡ <code>server.mydomain.net</code>À»
            ÀÔ·ÂÇÑ´Ù.</p></li>
      
            <li><p><strong>°ü¸®ÀÚ ÀüÀÚ¿ìÆí ÁÖ¼Ò (Administrator's Email
            Address).</strong> ¿©±â¿¡ ¼­¹ö °ü¸®ÀÚ³ª À¥¸¶½ºÅÍÀÇ ÀüÀÚ¿ìÆí
            ÁÖ¼Ò¸¦ ÀÔ·ÂÇÑ´Ù. ±âº»ÀûÀ¸·Î Ŭ¶óÀÌ¾ðÆ®¿¡°Ô º¸³»´Â ¿À·ù¹®¿¡
            ÀÌ ÁÖ¼Ò¸¦ ±â·ÏÇÑ´Ù.</p></li>
      
            <li><p><strong>»ç¿ëÀÚ ´ë»ó (For whom to install
            Apache)</strong> »õ·Î ¼³Ä¡ÇÏ´Â ¾ÆÆÄÄ¡°¡ 80¹ø Æ÷Æ®¿¡¼­
            ¿äûÀ» ±â´Ù¸®°Ô ÇÏ·Á¸é <code>for All Users, on Port 80,
            as a Service - Recommended</code> (¸ðµç »ç¿ëÀÚ, 80¹ø Æ÷Æ®,
            service·Î - Ãßõ)¸¦ ¼±ÅÃÇÑ´Ù. ¾ÆÆÄÄ¡¸¦ service·Î ½ÇÇàÇÑ´Ù
            (Áï, ¾ÆÆÄÄ¡´Â ¼­¹ö¿¡ ·Î±×ÀÎÇÑ »ç¶÷ÀÌ ¾ø¾îµµ ½ÇÇàµÈ´Ù).
            °³ÀÎÀûÀ¸·Î Å×½ºÆ®Çغ¸°Å³ª ÀÌ¹Ì 80¹ø Æ÷Æ®¸¦ »ç¿ëÇÏ´Â ´Ù¸¥
            À¥¼­¹ö°¡ ÀÖ´Ù¸é <code>only for the Current User, on Port
            8080, when started Manually</code> (ÇöÀç »ç¿ëÀÚ¸¸, 8080¹ø
            Æ÷Æ®, Á÷Á¢ ½ÃÀÛ)¸¦ ¼±ÅÃÇÑ´Ù.</p></li>
      
            <li><p><strong>¼³Ä¡ Á¾·ù (The installation type).</strong>
            ¸ðµâ °³¹ß¿¡ ÇÊ¿äÇÑ ¼Ò½ºÄÚµå¿Í ¶óÀ̺귯¸®¸¦ Á¦¿ÜÇÑ ¸ðµç
            °ÍÀ» ¼³Ä¡ÇÏ·Á¸é <code>Typical</code>À» ¼±ÅÃÇÑ´Ù.
            <code>Custom</code>À» ¼±ÅÃÇÏ¸é ¼³Ä¡ÇÒ ³»¿ëÀ» ÁöÁ¤ÇÒ ¼ö
            ÀÖ´Ù. Àüü ¼³Ä¡½Ã µð½ºÅ©¿¡ ºó °ø°£ÀÌ ¾à 13 ¸Þ°¡¹ÙÀÌÆ®
            Á¤µµ ÇÊ¿äÇÏ´Ù. ÀÌ ¼öÄ¡´Â À¥»çÀÌÆ® Å©±â¸¦ <em>Á¦¿ÜÇÑ</em>
            °ÍÀÌ´Ù.</p></li>
      
            <li><p><strong>¼³Ä¡ Àå¼Ò (Where to install).</strong>
            ±âº» °æ·Î´Â <code>C:\Program Files\Apache Group</code>À̰í,
            À̰÷¿¡ <code>Apache2</code>¶ó´Â µð·ºÅ丮¸¦ ¸¸µç´Ù.</p></li>
          </ol>
      
          <p>¼³Ä¡ÇÒ µ¿¾È ¾ÆÆÄÄ¡´Â <code>conf</code> ÇÏÀ§µð·ºÅ丮¿¡
          ÀÖ´Â ÆÄÀϵéÀ» ¼±ÅÃÇÑ ¼³Ä¡ µð·ºÅ丮¿¡ ¸Â°Ô ±¸¼ºÇÑ´Ù. ±×·¯³ª
          ÀÌ µð·ºÅ丮¿¡ ¼³Á¤ÆÄÀÏÀÌ ÀÌ¹Ì ÀÖ´Ù¸é ±×´ë·Î µÐ´Ù. ´ë½Å,
          ÇØ´ç ÆÄÀÏÀÇ »õ·Î¿î º¹»çº»¿¡ È®ÀåÀÚ <code>.default</code>¸¦
          ºÙÀδÙ. ¿¹¸¦ µé¾î, <code>conf\httpd.conf</code>°¡ ÀÌ¹Ì ÀÖ´Ù¸é
          <code>conf\httpd.conf.default</code>·Î À̸§À» º¯°æÇÑ´Ù.
          ¼³Ä¡ÈÄ <code>.default</code> ÆÄÀÏÀÇ ¼³Á¤À» Á÷Á¢ »ìÆìº¸°í,
          ÇÊ¿äÇÏ´Ù¸é ±âÁ¸ ¼³Á¤ÆÄÀÏÀ» ¼öÁ¤ÇØ¾ß ÇÑ´Ù.</p>
      
          <p>¶Ç, ÀÌ¹Ì <code>htdocs\index.html</code>À̶ó´Â ÆÄÀÏÀÌ
          ÀÖ´Ù¸é ±×´ë·Î µÐ´Ù (<code>index.html.default</code>¶ó°í
          º¹»çÇÏÁöµµ ¾Ê´Â´Ù). Áï, ±âÁ¸¿¡ ¾ÆÆÄÄ¡°¡ ¼³Ä¡µÇÀÖ´õ¶óµµ ¾ÈÀüÇϰÔ
          ¾ÆÆÄÄ¡¸¦ »õ·Î ¼³Ä¡ÇÒ ¼ö ÀÖ´Ù. ¹°·Ð ¼³Ä¡Çϱâ Àü¿¡ ¼­¹ö¸¦
          Áß´ÜÇϰí, ¼³Ä¡ÈÄ »õ·Î¿î ¼­¹ö¸¦ ½ÃÀÛÇØ¾ß ÇÑ´Ù.</p>
      
          <p>¾ÆÆÄÄ¡ ¼³Ä¡ÈÄ ÇÊ¿äÇÏ´Ù¸é <code>conf</code> ÇÏÀ§µð·ºÅ丮¿¡
          ÀÖ´Â ¼³Á¤ÆÄÀÏÀ» ¼öÁ¤ÇØ¾ß ÇÑ´Ù. ÆÄÀÏÀº ¾ÆÆÄÄ¡¸¦ ¼³Ä¡ÇÑ µð·ºÅ丮ÀÇ
          <code>htdocs</code> ÇÏÀ§µð·ºÅ丮¿¡ ÀÖ´Â ¹®¼­¸¦ ¼­ºñ½ºÇϵµ·Ï
          ¼³Á¤µÇÀÖ´Ù. ½ÇÁ¦·Î ¾ÆÆÄÄ¡¸¦ »ç¿ëÇϱâ Àü¿¡ ¼³Á¤ÇØ¾ß ÇÒ ¿É¼ÇÀÌ
          ¸¹´Ù. ±×·¯³ª »¡¸® ½ÇÇàÇØº¼ ¼ö ÀÖµµ·Ï ±âº» ¼³Á¤ÆÄÀϷεµ µ¿ÀÛÇÑ´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cust" id="cust">Windows¿ë ¾ÆÆÄÄ¡ ¼³Á¤Çϱâ</a></h2>
          
      
          <p>¾ÆÆÄÄ¡´Â <code>conf</code> ÇÏÀ§µð·ºÅ丮¿¡ ÀÖ´Â ÆÄÀÏ·Î
          ¼³Á¤ÇÑ´Ù. ÀÌ ÆÄÀÏÀº À¯´Ð½º¿ë°ú °°Áö¸¸, Windows¿ë ¾ÆÆÄÄ¡
          ƯÀ¯ÀÇ Áö½Ã¾î°¡ ¸î°³ ÀÖ´Ù. »ç¿ë°¡´ÉÇÑ ¸ðµç Áö½Ã¾î¸¦ º¸·Á¸é
          <a href="../mod/directives.html">Áö½Ã¾î ¸ñ·Ï</a>À» Âü°íÇ϶ó.</p>
      
          <p>Windows¿ë ¾ÆÆÄÄ¡ÀÇ ÁÖµÈ Â÷ÀÌÁ¡Àº:</p>
          <ul>
            <li><p>Windows¿ë ¾ÆÆÄÄ¡´Â ´ÙÁß¾²·¹µå ¹æ½ÄÀ» »ç¿ëÇϱ⶧¹®¿¡,
            À¯´Ð½º¿Í ´Þ¸® ¿äû¸¶´Ù ´Ù¸¥ ÇÁ·Î¼¼½º¸¦ »ç¿ëÇÏÁö ¾Ê´Â´Ù.
            ´ë½Å ¾ÆÆÄÄ¡ ÇÁ·Î¼¼½º´Â Ç×»ó, ºÎ¸ð ÇÁ·Î¼¼½º¿Í ¿äûÀ» ó¸®ÇÏ´Â
            ÀÚ½Ä ÇÁ·Î¼¼½º, 2°³ÀÌ´Ù. ÀÚ½Ä ÇÁ·Î¼¼½º¿¡ ÀÖ´Â ¿©·¯ ¾²·¹µåµéÀÌ
            ¿äûµéÀ» ó¸®ÇÑ´Ù.
            </p>
      
            <p>ÇÁ·Î¼¼½º °ü¸® Áö½Ã¾îµµ ´Ù¸£´Ù:</p>
      
            <p><code class="directive"><a href="../mod/mpm_common.html#maxrequestsperchild">MaxRequestsPerChild</a></code>: À¯´Ð½º¿Í
            °°ÀÌ, ÀÚ½Ä ÇÁ·Î¼¼½º°¡ ¿äûÀ» ¾ó¸¶¸¸Å­ ó¸®Çϰí Á×À»Áö¸¦
            Á¶Á¤ÇÑ´Ù. ±×·¯³ª À¯´Ð½º¿Í ´Þ¸® ÇÁ·Î¼¼½º°¡ Çѹø¿¡ ÇÑ ¿äû¸¸À»
            ó¸®ÇÏÁö¾Ê°í Çѹø¿¡ ¸ðµç ¿äûÀ» ¼­ºñ½ºÇϱ⶧¹®¿¡, ¼³Á¤ÇÑ´Ù¸é
            ¸Å¿ì Å« °ªÀ» ¼³Á¤ÇÏ±æ ±ÇÇÑ´Ù. ±ÇÀåÇÏ´Â ±âº»°ª
            <code>MaxRequestsPerChild 0</code>À» »ç¿ëÇϸé ÀÚ½Ä ÇÁ·Î¼¼½º´Â
            Á×Áö¾Ê°í ¿µ¿øÈ÷ ¿äûÀ» ¼­ºñ½ºÇÑ´Ù.</p>
      
            <div class="warning"><strong>°æ°í: ÀÚ½Ä ÇÁ·Î¼¼½º´Â »õ·Î
            ½ÃÀÛÇÒ ¶§¸¶´Ù ¼­¹ö¼³Á¤ÆÄÀÏÀ» »õ·Î Àд´Ù.
            <code>httpd.conf</code>¸¦ ¼öÁ¤Çß´Ù¸é, ÀÚ½Ä ÇÁ·Î¼¼½º°¡
            ½ÃÀÛÇÏÁö ¾Ê°Å³ª ¿¹±âÄ¡¾ÊÀº °á°ú°¡ ¹ß»ýÇÒ ¼ö ÀÖ´Ù.</strong></div>
      
            <p><code class="directive"><a href="../mod/mpm_common.html#threadsperchild">ThreadsPerChild</a></code>:
            ÀÌ Áö½Ã¾î´Â »õ·Î Ãß°¡µÇ¾ú´Ù. ÀÌ Áö½Ã¾î´Â ¼­¹ö°¡ »ç¿ëÇÒ
            ¾²·¹µå °³¼ö¸¦ ÁöÁ¤ÇÑ´Ù. ÀÌ °ªÀÌ ¼­¹ö°¡ Çѹø¿¡ ó¸®ÇÒ ¼ö
            ÀÖ´Â ÃÖ´ë ¿¬°á°³¼öÀ̱⶧¹®¿¡, »çÀÌÆ®¿¡ Á¢¼Ó·®ÀÌ ¸¹´Ù¸é
            ÃæºÐÈ÷ Å« °ªÀ» ¼³Á¤ÇØ¾ß ÇÑ´Ù. ±ÇÀåÇÏ´Â ±âº»°ªÀº
            <code>ThreadsPerChild 50</code>ÀÌ´Ù.</p></li>
      
            <li><p>ÆÄÀϸíÀ» ¾Æ±Ô¸ÕÆ®·Î ¹Þ´Â Áö½Ã¾î´Â À¯´Ð½º ÆÄÀϸíÀÌ
            ¾Æ´Ñ Windows ÆÄÀϸíÀ» »ç¿ëÇØ¾ß ÇÑ´Ù. ±×·¯³ª ¾ÆÆÄÄ¡ ³»ºÎ¿¡¼­
            À¯´Ð½º½Ä À̸§À» »ç¿ëÇϱ⶧¹®¿¡ ¹é½½·¡½¬°¡ ¾Æ´Ñ ½½·¡½¬¸¦
            »ç¿ëÇØ¾ß ÇÑ´Ù. µå¶óÀÌºê ¹®ÀÚ¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù. µå¶óÀ̺긦
            ÁöÁ¤ÇÏÁö ¾ÊÀ¸¸é ¾ÆÆÄÄ¡ ½ÇÇàÆÄÀÏÀÌ ÀÖ´Â µå¶óÀ̺긦
            »ç¿ëÇÑ´Ù.</p></li>
      
            <li><p>Windows¿ë ¾ÆÆÄÄ¡´Â ¼­¹ö¸¦ ´Ù½Ã ÄÄÆÄÀÏÇÏÁö ¾Ê°í
            ½ÇÇàÁß¿¡ ¸ðµâÀ» ÀоîµéÀÏ ¼ö ÀÖ´Ù. ±âº»°ªÀ¸·Î ¾ÆÆÄÄ¡¸¦
            ÄÄÆÄÀÏÇϸé <code>\Apache2\modules</code> µð·ºÅ丮¿¡ ¿©·¯
            ¼±Åð¡´ÉÇÑ ¸ðµâÀ» ¼³Ä¡ÇÑ´Ù. ÀÌ ¸ðµâ ȤÀº ´Ù¸¥ ¸ðµâÀ»
            »ç¿ëÇÏ·Á¸é »õ·Î »ý±ä <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> Áö½Ã¾î¸¦ »ç¿ëÇÑ´Ù.
            ¿¹¸¦ µé¾î, status ¸ðµâÀ» »ç¿ëÇÑ´Ù¸é
            (<code>access.conf</code>¿¡ status°ü·Ã Áö½Ã¾î¿Í ÇÔ²²)
            ¾Æ·¡¿Í °°ÀÌ ¼³Á¤ÇÑ´Ù:</p>
      
            <div class="example"><p><code>
              LoadModule status_module modules/mod_status.so
            </code></p></div>
      
            <p><a href="../mod/mod_so.html#creating">ÀоîµéÀÏ ¼ö ÀÖ´Â
            ¸ðµâ ¸¸µé±â</a>¿¡ ´ëÇÑ Á¤º¸µµ ÀÖ´Ù.</p></li>
      
            <li><p>¾ÆÆÄÄ¡´Â Microsoft IIS¿Í ´Ù¸¥ Windows ¼­¹ö°¡ »ç¿ëÇÏ´Â
            ISAPI (Internet Server Application Programming Interface)
            È®ÀåÀ» (Áï, ÀÎÅÍ³Ý ¼­¹ö ÇÁ·Î±×·¥) ÀоîµéÀÏ ¼öµµ ÀÖ´Ù.
            <a href="../mod/mod_isapi.html">´õ ÀÚ¼¼ÇÑ Á¤º¸°¡ ÀÖ´Ù</a>.
            ¾ÆÆÄÄ¡´Â ISAPI ÇÊÅ͸¦ ÀоîµéÀÏ ¼ö <strong>¾øÀ½À»</strong>
            ÁÖÀÇÇ϶ó.</p></li>
      
            <li><p>CGI ½ºÅ©¸³Æ®¸¦ »ç¿ëÇÑ´Ù¸é <code class="directive"><a href="../mod/core.html#scriptinterpretersource">ScriptInterpreterSource</a></code> Áö½Ã¾î¸¦
            »ç¿ëÇÏ¿© ¾ÆÆÄÄ¡°¡ ½ºÅ©¸³Æ®ÀÇ ÀÎÅÍÇÁ¸®Å͸¦ ã´Â ¹æ¹ýÀ»
            ¼³Á¤ÇÒ ¼ö ÀÖ´Ù.</p></li>
      
            <li><p>Windows¿¡¼­ <code>.htaccess</code>¿Í °°Àº ÆÄÀϸíÀ»
            ´Ù·ç±â Èûµå¹Ç·Î, <code class="directive"><a href="../mod/core.html#accessfilename">AccessFilename</a></code> Áö½Ã¾î¸¦ »ç¿ëÇÏ¿©
            µð·ºÅ丮º° ¼³Á¤ÆÄÀÏ À̸§À» º¯°æÇÏ¸é ÆíÇÏ´Ù.</p></li>
      
            <li><p>Windows NT¶ó¸é ¾ÆÆÄÄ¡ ½ÃÀ۽à ¹ß»ýÇÑ ¿À·ù¸¦ Windows
            À̺¥Æ® ·Î±×¿¡ ±â·ÏÇÑ´Ù. ±×·¡¼­ ¾ÆÆÄÄ¡°¡ º¸Åë »ç¿ëÇÏ´Â
            <code>error.log</code> ÆÄÀÏÀ» »ç¿ëÇÒ ¼ö ¾ø´Â °æ¿ì¿¡ ´ëºñÇÑ´Ù.
            Windows À̺¥Æ® ·Î±×´Â Windows NT 4.0¿¡¼­´Â À̺¥Æ® ºä¾î
            ÇÁ·Î±×·¥À¸·Î, ÃֽŠWindows ¹öÀü¿¡¼­´Â À̺¥Æ® ºä¾î MMC
            ½º³ÀÀο¡¼­ º¼ ¼ö ÀÖ´Ù.</p>
      
            <div class="note"><strong>Windows 9x¿¡´Â Windows À̺¥Æ® ·Î±×°¡ ¾ø±â¶§¹®¿¡
            ½ÃÀ۽à ¹ß»ýÇÑ ¿À·ù¸¦ ±â·ÏÇÏÁö ¾Ê´Â´Ù.</strong></div></li>
          </ul>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="winsvc" id="winsvc">¾ÆÆÄÄ¡¸¦ Service·Î ½ÇÇàÇϱâ</a></h2>
          
      
          <p>Windows NT¿¡¼­´Â ¾ÆÆÄÄ¡¸¦ service·Î ½ÇÇàÇÒ ¼ö ÀÖ´Ù. Windows
          9x¿¡´Â ¸Å¿ì ½ÇÇèÀûÀÎ ¹æ¹ýÀ¸·Î ºñ½ÁÇÑ ±â´ÉÀ» Áö¿øÇÑ´Ù.</p>
      
          <p>¼³Ä¡½Ã ÀÚµ¿À¸·Î ¾ÆÆÄÄ¡¸¦ service·Î ¼³Ä¡ÇÒ ¼ö ÀÖ´Ù. "¸ðµç
          »ç¿ëÀÚ"¸¦ ¼±ÅÃÇϸé, ¾ÆÆÄÄ¡ service°¡ ¸¸µé¾îÁø´Ù. "ÇöÀç
          »ç¿ëÀÚ¸¸"À» ¼±ÅÃÇÏ´õ¶óµµ ¼³Ä¡ÈÄ Á÷Á¢ ¾ÆÆÄÄ¡¸¦ service·Î
          µî·ÏÇÒ ¼ö ÀÖ´Ù. service¸¦ ¼³Ä¡ÇÏ·Á¸é Administrators ±×·ìÀÇ
          ±¸¼º¿øÀ̾î¾ß ÇÑ´Ù.</p>
      
          <p>¾ÆÆÄÄ¡¿¡´Â Apache Service Monitor¶ó´Â µµ±¸°¡ ÀÖ´Ù. ÀÌ
          µµ±¸¸¦ »ç¿ëÇÏ¸é ³×Æ®¿÷¿¡ ÀÖ´Â ´Ù¸¥ ÄÄÇ»ÅÍ¿¡ ¼³Ä¡µÈ ¾ÆÆÄÄ¡
          »óŵµ È®ÀÎÇÏ°í °ü¸®ÇÒ ¼ö ÀÖ´Ù. monitor·Î ¾ÆÆÄÄ¡ service¸¦
          °ü¸®ÇÏ·Á¸é ¸ÕÀú service¸¦ (¼³Ä¡½Ã ÀÚµ¿À¸·Î ȤÀº Á÷Á¢) ¼³Ä¡Çؾß
          ÇÑ´Ù.
          </p>
      
          <p>¾ÆÆÄÄ¡ <code>bin</code> ÇÏÀ§µð·ºÅ丮¿¡¼­ ¸í·ÉÇà ÇÁ·ÒÇÁÆ®¿¡
          ´ÙÀ½°ú °°ÀÌ ÀÔ·ÂÇÏ¸é ¾ÆÆÄÄ¡¸¦ Windows NT service·Î ¼³Ä¡ÇÑ´Ù:</p>
      
          <div class="example"><p><code>
            apache -k install
          </code></p></div>
      
          <p>¼³Ä¡ÇÒ service À̸§À» ÁöÁ¤ÇÏ°í ½Í´Ù¸é ´ÙÀ½ ¸í·É¾î¸¦ »ç¿ëÇÑ´Ù.
          ÄÄÇ»ÅÍ¿¡ ¾ÆÆÄÄ¡°¡ ¿©·¯°³ ¼³Ä¡µÇÀÖ´Ù¸é À̸§À» ´Ù¸£°Ô ÁÖ¾î¾ß
          ÇÑ´Ù.</p>
      
          <div class="example"><p><code>
            apache -k install -n "MyServiceName"
          </code></p></div>
      
          <p>service°¡ »ç¿ëÇÒ ¼³Á¤ÆÄÀÏÀ» Á÷Á¢ ÁöÁ¤ÇÏ·Á¸é ´ÙÀ½°ú °°ÀÌ
          ÇÑ´Ù:</p>
      
          <div class="example"><p><code>
            apache -k install -n "MyServiceName" -f "c:\files\my.conf"
          </code></p></div>
      
          <p><code>-k install</code> ¿Ü¿¡ ´Ù¸¥ ÆÄ¶ó¹ÌÅ͸¦ »ç¿ëÇÏÁö
          ¾ÊÀ¸¸é, service À̸§Àº <code>Apache2</code>°¡ µÇ°í ¼³Á¤ÆÄÀÏÀº
          <code>conf\httpd.conf</code>°¡ µÈ´Ù.
          </p>
      
          <p>¾ÆÆÄÄ¡ service¸¦ Á¦°ÅÇϱ⠽±´Ù. °£´ÜÈ÷:</p>
      
          <div class="example"><p><code>
            apache -k uninstall
          </code></p></div>
      
          <p>´ÙÀ½°ú °°ÀÌ Á¦°ÅÇÒ ¾ÆÆÄÄ¡ service¸¦ ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù:</p>
      
          <div class="example"><p><code>
            apache -k uninstall -n "MyServiceName"
          </code></p></div>
      
          <p>º¸Åë ¾ÆÆÄÄ¡ service ½ÃÀÛ, Àç½ÃÀÛ, Á¾·á´Â Apache Service
          Monitor³ª <code>NET START Apache2</code>, <code>NET STOP
          Apache2</code> °°Àº ¸í·É¾î ȤÀº Windows ¼­ºñ½º °ü¸®Ã¢¿¡¼­
          ÇÑ´Ù. ¾î¶² ¹æ¹ýÀ» »ç¿ëÇϵçÁö ¾ÆÆÄÄ¡ service¸¦ ½ÃÀÛÇϱâ Àü¿¡
          ¼³Á¤ÆÄÀÏÀ» °Ë»çÇØºÁ¾ß ÇÑ´Ù:</p>
      
          <div class="example"><p><code>
            apache -n "MyServiceName" -t
          </code></p></div>
      
          <p>¸í·ÉÇà ¿É¼ÇÀ¸·Îµµ ¾ÆÆÄÄ¡ service¸¦ Á¶Á¤ÇÒ ¼ö ÀÖ´Ù. ¼³Ä¡ÇÑ
          ¾ÆÆÄÄ¡ serivce¸¦ ½ÃÀÛÇÏ·Á¸é:</p>
      
          <div class="example"><p><code>
            apache -k start
          </code></p></div>
      
          <p>¸í·ÉÇà ¿É¼ÇÀ¸·Î ¾ÆÆÄÄ¡ service¸¦ Á¾·áÇÏ·Á¸é:</p>
      
          <div class="example"><p><code>
            apache -k stop
          </code></p></div>
      
          <p>ȤÀº</p>
      
          <div class="example"><p><code>
            apache -k shutdown
          </code></p></div>
      
          <p>½ÇÇàÁßÀÎ service¸¦ Àç½ÃÀÛÇÏ¿© ¼³Á¤ÆÄÀÏÀ» ´Ù½Ã Àеµ·Ï
          ÇÒ ¼ö ÀÖ´Ù:</p>
      
          <div class="example"><p><code>
            apache -k restart
          </code></p></div>
      
          <p>±âº»ÀûÀ¸·Î ¸ðµç ¾ÆÆÄÄ¡ service´Â ½Ã½ºÅÛ »ç¿ëÀÚ
          (<code>LocalSystem</code> °èÁ¤) ±ÇÇÑÀ¸·Î ½ÇÇàÇϵµ·Ï µî·ÏµÈ´Ù.
          Windows º¸¾È±¸Á¶»ó <code>LocalSystem</code> °èÁ¤Àº ÆÄÀϽýºÅÛ,
          named pipes, DCOM, secure RPC µî ¾î¶² ¹æ¹ýÀ» »ç¿ëÇϵçÁö
          ³×Æ®¿÷¿¡ Á¢±ÙÇÒ ¼ö ¾ø´Ù. ±×·¯³ª ÇØ´ç ÄÄÇ»ÅÍ¿¡¼­´Â ¸¹Àº ±ÇÇÑÀ»
          °¡Áø´Ù.
          </p>
      
          <div class="warning"><strong><code>LocalSystem</code> °èÁ¤¿¡°Ô
          ³×Æ®¿÷ ±ÇÇÑÀ» Àý´ë·Î ÁÖÁö ¸¶¶ó! ¾ÆÆÄÄ¡°¡ ³×Æ®¿÷ ÀÚ¿ø¿¡ Á¢±ÙÇØ¾ß
          ÇÑ´Ù¸é, ¾Æ·¡¿¡¼­ ¼³¸íÇÏ´Â ¹æ¹ýÀ¸·Î ¾ÆÆÄÄ¡¸¦ À§ÇÑ º°µµÀÇ
          °èÁ¤À» ¸¸µé¾î¶ó.</strong></div>
      
          <p>¾ÆÆÄÄ¡ service¸¦ ½ÇÇàÇϱâÀ§ÇÑ º°µµÀÇ °èÁ¤À» ¸¸µé ¼öµµ
          ÀÖ´Ù. ƯÈ÷ ¾ÆÆÄÄ¡°¡ ³×Æ®¿÷ ÀÚ¿ø¿¡ Á¢±ÙÇØ¾ß ÇÑ´Ù¸é ÀÌ ¹æ¹ýÀ»
          °­·ÂÈ÷ ±ÇÇÑ´Ù.</p>
      
          <ol>
            <li>ÀÏ¹Ý µµ¸ÞÀÎ »ç¿ëÀÚ °èÁ¤À» ¸¸µé°í ¾ÏÈ£¸¦ ±â¾ïÇ϶ó.</li>
      
            <li>»õ·Î ¸¸µç °èÁ¤¿¡ <code>¼­ºñ½º·Î ·Î±×¿Â</code>¿Í
            <code>¿î¿µ üÁ¦ÀÇ ÀϺηΠȰµ¿</code> ±ÇÇÑÀ»
            ºÎ¿©ÇÑ´Ù. Windows NT 4.0¿¡¼­´Â User Manager for Domains¿¡¼­
            ±ÇÇÑÀ» ºÎ¿©ÇÒ ¼ö ÀÖ°í, Windows 2000°ú XP¿¡¼­´Â ¾Æ¸¶µµ
            "±×·ì Á¤Ã¥"À» »ç¿ëÇØ¾ß ÇÑ´Ù. "·ÎÄà º¸¾È ¼³Á¤" MMC
            ½º³ÀÀο¡¼­ Á÷Á¢ ¼³Á¤ÇØÁÙ ¼öµµ ÀÖ´Ù.
            </li>
      
            <li>»õ·Î ¸¸µç °èÁ¤ÀÌ Users ±×·ì¿¡ ¼ÓÇÏ´ÂÁö È®ÀÎÇÑ´Ù.</li>
      
            <li>¸ðµç ¹®¼­¿Í ½ºÅ©¸³Æ® Æú´õ¿¡ (¿¹¸¦ µé¾î
            <code>htdocs</code>¿Í <code>cgi-bin</code>) ´ëÇØ Àб⠹×
            ½ÇÇà (RX) ±ÇÇÑÀ» ºÎ¿©ÇÑ´Ù.</li>
      
            <li>¾ÆÆÄÄ¡ <code>logs</code> µð·ºÅ丮¿¡ ¼öÁ¤ (RWXD) ±ÇÇÑÀ»
            ºÎ¿©ÇÑ´Ù.</li>
      
            <li><code>Apache.exe</code> ½ÇÇàÆÄÀÏ¿¡ ÀÐ±â ¹× ½ÇÇà (RX)
            ±ÇÇÑÀ» ºÎ¿©ÇÑ´Ù.</li>
          </ol>
      
          <div class="note">¾ÆÆÄÄ¡ service¸¦ ½ÇÇàÇÏ´Â »ç¿ëÀÚ¿¡°Ô ÃÖ¼ÒÇÑ ¼öÁ¤ (RWXD)
          ±ÇÇÑÀÌ ÇÊ¿äÇÑ <code>logs</code> ÇÏÀ§µð·ºÅ丮¸¦ Á¦¿ÜÇϰí
          Apache2 µð·ºÅ丮 Àüü¿¡ ÀÐ±â ¹× ½ÇÇà (RX) ±ÇÇÑÀ» ºÎ¿©ÇÏ´Â
          °ÍÀÌ ÁÁ´Ù.</div>
      
          <p>°èÁ¤¿¡ "·ÎÄà ·Î±×¿Â"°ú "¼­ºñ½º·Î ·Î±×¿Â" ±ÇÇÑÀÌ ÀÖ´Ù¸é,
          ±× °èÁ¤À¸·Î ·Î±×¿ÂÇÏ¿© °èÁ¤ÀÌ ½ºÅ©¸³Æ®¸¦ ½ÇÇàÇϰí À¥ÆäÀÌÁö¸¦
          ÀÐÀ¸¸ç ÄܼÖâ¿¡¼­ ¾ÆÆÄÄ¡¸¦ ½ÃÀÛÇÒ ¼ö ÀÖ´ÂÁö °Ë»çÇØº¼ ¼ö
          ÀÖ´Ù. ¿©±â¼­ ¹®Á¦°¡ ¾ø´Ù¸é ¾ÆÆÄÄ¡¸¦ service·Î ½ÇÇàÇØµµ ¹®Á¦°¡
          ¾ø´Ù.</p>
      
          <div class="note"><strong>Error code 2186</strong>Àº ¾ÆÆÄÄ¡°¡ ÇÊ¿äÇÑ
          ³×Æ®¿÷ ÀÚ¿ø¿¡ Á¢±ÙÇÒ ¼ö ¾ø´Ù´Â ¸»·Î serviceÀÇ "·Î±×¿Â"
          ¼³Á¤À» È®ÀÎÇ϶ó. ¶Ç, ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÏ´Â °èÁ¤ÀÇ ±ÇÇÑÀ»
          »ìÆìºÁ¶ó.</div>
      
          <p>¾ÆÆÄÄ¡¸¦ service·Î ½ÇÇàÇϸé Windows Service Control
          Manager¿¡¼­ ¿À·ù¹®À» º¼ ¼ö ÀÖ´Ù. ¿¹¸¦ µé¾î, Á¦¾îÆÇ¿¡¼­
          "¼­ºñ½º"¸¦ »ç¿ëÇÏ¿© ¾ÆÆÄÄ¡¸¦ ½ÃÀÛÇÏ´Â °æ¿ì ´ÙÀ½°ú °°Àº ¹®±¸°¡
          ³ª¿Ã ¼ö ÀÖ´Ù:</p>
      
          <div class="example"><p><code>
            Could not start the Apache2 service on \\COMPUTER <br />
            Error 1067; The process terminated unexpectedly.
          </code></p></div>
      
          <p>¾ÆÆÄÄ¡ service¸¦ ½ÃÀÛÇÒ¶§ ¹®Á¦°¡ ÀÖÀ¸¸é ÀϹÝÀûÀÎ ÀÌ·±
          ¿À·ù°¡ ³ª¿Â´Ù. ½ÇÁ¦ ¾îµð°¡ ¹®Á¦ÀÎÁö ¾Ë·Á¸é ¾ÆÆÄÄ¡¸¦ ÄܼÖ
          ÇÁ·Î±×·¥À¸·Î ½ÇÇàÇØº¸¶ó.</p>
      
          <p>Windows 9x¿¡¼­ ¾ÆÆÄÄ¡´Â Windows NTÀÇ service¿Í ºñ½ÁÇÑ
          ¹æ¹ýÀ» Áö¿øÇÑ´Ù. ±×·¯³ª <strong>¸Å¿ì ½ÇÇèÀûÀÎ</strong> ±â´ÉÀÌ´Ù.
          ½ÇÁ¦ ¼­ºñ½º¿¡ »ç¿ëÇÒ¸¸Å­ ¾ÈÁ¤ÀûÀÌÁö ¾Ê°í ¾ÕÀ¸·Î °³¼±µÉÁö
          º¸ÀåÇÒ ¼öµµ ¾ø´Ù. À§ÇèÇϹǷΠȤ½Ã³ª »ç¿ëÇÑ´Ù¸é ÁÖÀÇÇØ¼­
          »ç¿ëÇØ¾ß ÇÑ´Ù!</p>
      
          <p>µÎ°¡Áö serviceÀÇ Áß¿äÇÑ Â÷ÀÌÁ¡Àº ´ÙÀ½°ú °°´Ù:</p>
      
          <ul>
            <li><p>¾ÆÆÄÄ¡°¡ ¼º°øÀûÀ¸·Î ½ÃÀÛÇÏ¸é ¹è°æ¿¡¼­ ½ÇÇàÇÑ´Ù.
            ¿¹¸¦ µé¾î, µ¥½ºÅ©Å¾¿¡ ¹Ù·Î°¡±â¸¦ ¸¸µé¾î¼­ ´ÙÀ½ ¸í·ÉÀ»
            ½ÇÇàÇÏ´Â °æ¿ì,</p>
      
            <div class="example"><p><code>
              apache -n "MyServiceName" -k start
            </code></p></div>
      
            <p>service°¡ ¼º°øÀûÀ¸·Î ½ÃÀÛÇϸé ÄܼÖâÀÌ »ý°å´Ù°¡ ±Ý¹æ
            »ç¶óÁø´Ù. httpd.conf ¼³Á¤ÆÄÀÏ¿¡ À߸øµÈ ³»¿ëÀÌ ÀÖ´Â µî
            ¾ÆÆÄÄ¡ ½ÃÀ۽à ¿À·ù°¡ ¹ß»ýÇϸé ÄܼÖâÀ» °è¼Ó º¸ÀδÙ. ÄܼÖâÀº
            ¹®Á¦ÀÇ ¿øÀÎÀ» ÆÄ¾ÇÇϴµ¥ µµ¿òÀ» ÁÖ´Â ¿À·ù¹®À» º¸¿©ÁØ´Ù.</p></li>
      
            <li><p>Windows 9x´Â <code>NET START</code>¿Í <code>NET
            STOP</code> ¸í·É¾î¸¦ Áö¿øÇÏÁö ¾Ê´Â´Ù. ¸í·ÉÇÁ·ÒÇÁÆ®¿¡¼­
            <code>-k</code> ¿É¼ÇÀ» »ç¿ëÇÏ¿© ¾ÆÆÄÄ¡ service¸¦ Á¶Á¤Çؾß
            ÇÑ´Ù.
            </p></li>
      
            <li><p>
            ¾ÆÆÄÄ¡¿Í Windows 9x´Â ³×Æ®¿÷ ±ÇÇÑÀ» °¡Áø ƯÁ¤ »ç¿ëÀÚ·Î
            ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÏÁö ¸øÇÑ´Ù. »ç½Ç Windows 9x´Â º¸¾ÈÀ» Á¦°øÇÏÁöµµ
            ¾Ê´Â´Ù. À̰ÍÀÌ ¹Ù·Î Apache Software FoundationÀÌ Windows
            9x ½Ã½ºÅÛÀ» °ø°³ À¥¼­¹ö·Î »ç¿ëÇÏ±æ ±ÇÇÏÁö ¾Ê´Â ÀÌÀ¯´Ù.
            »ç¿ëÀÚ°¡ À¥ ÄÁÅÙÃ÷¸¦ °³¹ßÇÏ°í ¾ÆÆÄÄ¡ ¼­¹ö ÇнÀÀ» µ½±âÀ§ÇØ,
            ¾Æ´Ï¸é ¾ÈÀüÇÑ »ç¼³ ³×Æ®¿÷¿¡ À§Ä¡ÇÒ ÀÎÆ®¶ó³Ý ¼­¹ö¸¦ À§ÇØ,
            Windows 9x¸¦ Áö¿øÇÒ »ÓÀÌ´Ù.</p></li>
      
          </ul>
      
          <p>¾ÆÆÄÄ¡°¡ ÄÜ¼Ö ÇÁ·Î±×·¥À¸·Î µ¿ÀÛÇÔÀ» È®ÀÎÇÏ¿´´Ù¸é Windows
          NT¿¡¼­¿Í °°Àº ¸í·É¾î·Î °¡»ó service¸¦ ¼³Ä¡, Á¶Àý, Á¦°ÅÇÒ
          ¼ö ÀÖ´Ù. ¶Ç, Apache Service Monitor¸¦ »ç¿ëÇÏ¿© Windows 9x
          °¡»ó service¸¦ °ü¸®ÇÒ ¼ö ÀÖ´Ù.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="wincons" id="wincons">¾ÆÆÄÄ¡¸¦ ÄÜ¼Ö ÇÁ·Î±×·¥À¸·Î ½ÇÇàÇϱâ</a></h2>
          
      
          <p>ÀϹÝÀûÀ¸·Î ¾ÆÆÄÄ¡¸¦ service·Î ½ÇÇàÇÏ±æ ±ÇÇÑ´Ù. ±×·¯³ª
          ¸í·ÉÇà¿¡¼­ ½ÇÇàÇÏ´Â°Ô ÆíÇÑ °æ¿ì°¡ ÀÖ´Ù (Windows 9x¿¡¼­´Â
          service¸¦ ¾ÈÁ¤ÀûÀ¸·Î Áö¿øÇÏÁö ¾Ê±â¶§¹®¿¡ ¸í·ÉÇà¿¡¼­ ¾ÆÆÄÄ¡¸¦
          ½ÇÇàÇÏ´Â ¹æ¹ýÀ» ±ÇÇÑ´Ù).</p>
      
          <p>¾ÆÆÄÄ¡¸¦ ÄÜ¼Ö ÇÁ·Î±×·¥À¸·Î ½ÇÇàÇÏ·Á¸é, ¸í·ÉÇà¿¡¼­ ´ÙÀ½
          ¸í·É¾î¸¦ »ç¿ëÇÑ´Ù:</p>
      
          <div class="example"><p><code>
            apache
          </code></p></div>
      
          <p>¾ÆÆÄÄ¡´Â Control-C¸¦ ´­·¯¼­ Á¤ÁöÇÒ ¶§±îÁö ½ÇÇàµÈ´Ù.</p>
      
          <p>¶Ç, <code>½ÃÀÛ ¸Þ´º --&gt; ÇÁ·Î±×·¥ --&gt; Apache HTTP
          Server 2.0.xx --&gt; Control Apache Server</code>¿¡ ¼³Ä¡µÈ
          Start Apache in Console ¹Ù·Î°¡±â·Î ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÒ ¼ö ÀÖ´Ù.
          ¹Ù·Î°¡±â¸¦ ½ÇÇàÇϸé ÄܼÖâÀ» ¿­°í ±× ¾È¿¡¼­ ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÑ´Ù.
          ¾ÆÆÄÄ¡¸¦ service·Î ¼³Ä¡ÇÏÁö ¾Ê¾Ò´Ù¸é, ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÏ´Â
          ÄܼÖâ¿¡¼­ Control-C¸¦ ´­·¯ ¾ÆÆÄÄ¡¸¦ Áß´ÜÇÒ¶§±îÁö âÀÌ ¶°ÀÖ´Ù.
          ÀÌ °æ¿ì ¼­¹ö´Â ¸îÃʾȿ¡ Á¾·áÇÑ´Ù. ±×·¯³ª, ¾ÆÆÄÄ¡¸¦ service·Î
          ¼³Ä¡ÇÏ¿´´Ù¸é ¹Ù·Î°¡±â´Â service¸¦ ½ÃÀÛÇÑ´Ù. ¾ÆÆÄÄ¡ service°¡
          ÀÌ¹Ì ½ÇÇàÁßÀ̶ó¸é ¹Ù·Î°¡±â´Â ¾Æ¹«Àϵµ ÇÏÁö ¾Ê´Â´Ù.</p>
      
          <p>´Ù¸¥ ÄܼÖâÀ» ¿­°í ´ÙÀ½°ú °°ÀÌ ÀÔ·ÂÇÏ¿© ½ÇÇàÁßÀÎ ¾ÆÆÄÄ¡¸¦
          Á¾·áÇÒ ¼ö ÀÖ´Ù:</p>
      
          <div class="example"><p><code>
            apache -k shutdown
          </code></p></div>
      
          <p>ÀÌ ¹æ¹ýÀº ¾ÆÆÄÄ¡°¡ ÇöÀç ÀÛ¾÷À» ¸¶Ä¡°í Á¡ÀÝ°Ô Á¾·áÇÒ ¼ö
          Àֱ⶧¹®¿¡ Control-C º¸´Ù ³´´Ù.</p>
      
          <p>¶Ç, ¾ÆÆÄÄ¡¸¦ Àç½ÃÀÛÇÒ ¼ö ÀÖ´Ù. ÀÌ °æ¿ì ¼³Á¤ÆÄÀÏÀ» ´Ù½Ã
          Àд´Ù. ÁøÇàÁßÀÎ ÀÛ¾÷À» Áß°£¿¡ ²÷Áö¾Ê°í ¿Ï·áÇÑ´Ù. ¾ÆÆÄÄ¡¸¦
          Àç½ÃÀÛÇÏ·Á¸é:</p>
      
          <div class="example"><p><code>
            apache -k restart
          </code></p></div>
      
          <div class="note">À¯´Ð½º¿ë ¾ÆÆÄÄ¡¿¡ Àͼ÷ÇÑ »ç¶÷À» À§ÇØ: ÀÌ ¸í·É¾î´Â
          <code>kill -TERM <em>pid</em></code>³ª <code>kill -USR1
          <em>pid</em></code>ÀÇ WindowsÆÇÀÌ´Ù. ¸í·ÉÇà ¿É¼Ç
          <code>-k</code>´Â À¯´Ð½º <code>kill</code> ¸í·É¾î À̸§À»
          º»µû Áö¾ú´Ù.</div>
      
          <p>¾ÆÆÄÄ¡ ÄܼÖâÀÌ Áï½Ã ȤÀº ½ÃÀÛÈÄ °©Àڱ⠴ÝÄ¡¸é ½ÃÀÛ ¸Þ´º
          --&gt; ÇÁ·Î±×·¥ÀÇ ¸í·É ÇÁ·ÒÇÁÆ®¸¦ ½ÇÇàÇÑ´Ù. ¾ÆÆÄÄ¡¸¦ ¼³Ä¡ÇÑ
          Æú´õ·Î °¡¼­ <code>apache</code> ¸í·É¾î¸¦ ½ÇÇàÇØº¸°í ¹ß»ýÇÑ
          ¿À·ù¹®À» »ìÆìº»´Ù. ±×¸®°í logs Æú´õ·Î °¡¼­, ¼³Á¤ÆÄÀÏÀÌ
          À߸øµÇ¾ú´ÂÁö <code>error.log</code> ÆÄÀÏÀ» »ìÆìº»´Ù. ¾ÆÆÄÄ¡¸¦
          ¼³Ä¡ÇÒ¶§ ±âº»°ªÀ» »ç¿ëÇß´Ù¸é ´ÙÀ½°ú °°´Ù:</p>
      
          <div class="example"><p><code>
            c: <br />
            cd "\Program Files\Apache Group\Apache2\bin" <br />
            apache
          </code></p></div>
      
          <p>¾ÆÆÄÄ¡°¡ Á¤ÁöÇÒ ¶§±îÁö ±â´Ù¸®°Å³ª Control-C¸¦ ´©¸¥´Ù.
          ±×¸®°í ´ÙÀ½°ú °°ÀÌ ÀÔ·ÂÇÑ´Ù:</p>
      
          <div class="example"><p><code>
            cd ..\logs <br />
            more &lt; error.log
          </code></p></div>
      
          <p>¾ÆÆÄÄ¡¸¦ ´Ù·ê¶§ ¾ÆÆÄÄ¡°¡ ¾î¶»°Ô ¼³Á¤ÆÄÀÏÀ» ã´ÂÁö ¾Æ´Â
          °ÍÀÌ Áß¿äÇÏ´Ù. µÎ°¡Áö ¹æ¹ýÀ¸·Î ¸í·ÉÇà¿¡¼­ ¼³Á¤ÆÄÀÏÀ» ÁöÁ¤ÇÒ
          ¼ö ÀÖ´Ù:</p>
      
          <ul>
            <li><p><code>-f</code>´Â ¼³Á¤ÆÄÀÏÀÇ Àý´ë°æ·Î ȤÀº »ó´ë°æ·Î¸¦
            ÁöÁ¤ÇÑ´Ù:</p>
      
            <div class="example"><p><code>
              apache -f "c:\my server files\anotherconfig.conf"
            </code></p></div>
      
            <p>ȤÀº</p>
      
            <div class="example"><p><code>
              apache -f files\anotherconfig.conf
            </code></p></div></li>
      
            <li><p><code>-n</code>Àº ¾ÆÆÄÄ¡ service¸¦ ¼±ÅÃÇϰí, ÇØ´ç
            serviceÀÇ ¼³Á¤ÆÄÀÏÀ» »ç¿ëÇÑ´Ù:</p>
      
            <div class="example"><p><code>
              apache -n "MyServiceName"
            </code></p></div>
            </li>
          </ul>
      
          <p>µÎ °æ¿ì ¸ðµÎ ¼³Á¤ÆÄÀÏÀÌ ÀûÀýÇÑ <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>¸¦ ÁöÁ¤ÇØ¾ß ÇÑ´Ù.</p>
      
          <p><code>-f</code>³ª <code>-n</code>À¸·Î ¼³Á¤ÆÄÀÏÀ» ÁöÁ¤ÇÏÁö
          ¾ÊÀ¸¸é, ¾ÆÆÄÄ¡´Â <code>conf\httpd.conf</code>¿Í °°ÀÌ ¼­¹ö¿¡
          ÄÄÆÄÀÏµÈ ÆÄÀϸíÀ» »ç¿ëÇÑ´Ù. ÀÌ ±âº» °æ·Î´Â ¼³Ä¡ µð·ºÅ丮¿¡
          »ó´ëÀûÀÌ´Ù. ´ÙÀ½°ú °°ÀÌ <code>-V</code> ¿É¼ÇÀ¸·Î ¾ÆÆÄÄ¡¸¦
          ½ÇÇàÇϸé <code>SERVER_CONFIG_FILE</code>À̶õ Ç׸ñ¿¡¼­ ¼­¹ö°¡
          »ç¿ëÇÒ ¼³Á¤ÆÄÀÏÀ» ¾Ë ¼ö ÀÖ´Ù:</p>
      
          <div class="example"><p><code>
            apache -V
          </code></p></div>
      
          <p>¾ÆÆÄÄ¡´Â ´ÙÀ½ ¼ø¼­´ë·Î <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>¸¦ ã´Â´Ù:</p>
      
          <ol>
            <li><code>-C</code> ¸í·ÉÇà ¿É¼Ç¿¡ »ç¿ëÇÑ <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> Áö½Ã¾î.</li>
      
            <li><code>-d</code> ¸í·ÉÇà ¿É¼Ç.</li>
      
            <li>ÇöÀç ÀÛ¾÷ µð·ºÅ丮.</li>
      
            <li>¹ÙÀ̳ʸ® ¼³Ä¡¸¦ Çß´Ù¸é ¼³Ä¡ÇÒ¶§ ¸¸µç registry Ç׸ñ.</li>
      
            <li>¼­¹ö¿¡ ÄÄÆÄÀÏµÈ server root. ±âº»°ªÀº
            <code>/apache</code>À̰í, <code>apache -V</code>¸¦ ½ÇÇàÇϸé
            <code>HTTPD_ROOT</code>¶ó´Â Ç׸ñ¿¡¼­ È®ÀÎÇÒ ¼ö ÀÖ´Ù.</li>
          </ol>
      
          <p>¼³Ä¡ÇÒ¶§ À©µµ¿ìÁî ·¹Áö½ºÆ®¸®¿¡ ¹öÀü ƯÀ¯ÀÇ ·¹Áö½ºÆ®¸®
          ۸¦ ¸¸µç´Ù. ŰÀÇ À§Ä¡´Â ¼³Ä¡ Á¾·ù¿¡ µû¶ó ´Ù¸£´Ù. install
          Apache for all users¸¦ ¼±ÅÃÇÏ¿´´Ù¸é
          <code>HKEY_LOCAL_MACHINE</code> ¾Æ·¡¿¡ ´ÙÀ½°ú °°Àº ۸¦
          ¸¸µç´Ù (¹°·Ð ¹öÀü¹øÈ£´Â ¾ÆÆÄÄ¡ ¹öÀü¸¶´Ù ´Ù¸£´Ù):
          </p>
      
          <div class="example"><p><code>
            HKEY_LOCAL_MACHINE\SOFTWARE\Apache Group\Apache\2.0.43
          </code></p></div>
      
          <p>"¸ðµç »ç¿ëÀÚ"¸¦ ´ë»óÀ¸·Î ¾ÆÆÄÄ¡¸¦ ¼³Ä¡ÇÏ¿´´Ù¸é
          <code>HKEY_CURRENT_USER</code> ¾Æ·¡ ۰¡ »ý±ä´Ù. ³»¿ëÀº
          ÇöÀç ·Î±×¿ÂÇÑ »ç¿ëÀÚ¿¡ µû¶ó ´Ù¸£´Ù:</p>
      
          <div class="example"><p><code>
            HKEY_CURRENT_USER\SOFTWARE\Apache Group\Apache\2.0.43
          </code></p></div>
      
          <p>Ű À̸§ÀÌ ¼­¹ö¿¡ ÄÄÆÄÀϵDZ⶧¹®¿¡ ÇöÀç ¹öÀüÀ» °Çµå¸®Áö¾Ê°í
          »õ·Î¿î ¹öÀüÀ» ¼³Ä¡ÇÏ¿© Å×½ºÆ®Çغ¼ ¼ö ÀÖ´Ù. ¹°·Ð »õ ¹öÀüÀ»
          ´Ù¸¥ ¹öÀü°ú °°Àº µð·ºÅ丮¿¡ ¼³Ä¡ÇÏÁö¾Êµµ·Ï ÁÖÀÇÇØ¾ß ÇÑ´Ù.</p>
      
          <p>¹ÙÀ̳ʸ® ¼³Ä¡¸¦ ÇÏÁö ¾ÊÀº °æ¿ì ¾ÆÆÄÄ¡´Â ·¹Áö½ºÆ®¸® ۰¡
          ¾ø´Ù°í ºÒÆòÇÒ ¼ö ÀÖ´Ù. ¼­¹ö°¡ ´Ù¸¥ ¹æ¹ýÀ¸·Î ¼³Á¤ÆÄÀÏÀ» ãÀ»
          ¼ö ÀÖ´Ù¸é ÀÌ °æ°í¸¦ ¹«½ÃÇØµµ µÈ´Ù.</p>
      
          <p>ŰÀÇ °ªÀº <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>
          µð·ºÅ丮À̸ç, ÀÌ µð·ºÅ丮¿¡ <code>conf</code>¶ó´Â ÇÏÀ§µð·ºÅ丮°¡
          ÀÖ´Ù. ¾ÆÆÄÄ¡¸¦ ½ÃÀÛÇϸé ÀÌ ÇÏÀ§µð·ºÅ丮¿¡¼­
          <code>httpd.conf</code> ÆÄÀÏÀ» Àд´Ù. ÀÌ ÆÄÀÏ¿¡ ³ª¿À´Â
          <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> Áö½Ã¾î°¡
          ·¹Áö½ºÆ®¸® Ű¿¡ ³ª¿Â µð·ºÅ丮¿Í ´Ù¸£´Ù¸é, ¾ÆÆÄÄ¡´Â ·¹Áö½ºÆ®¸®¿¡¼­
          ¾òÀº °ªÀ» ¹«½ÃÇÏ°í ¾ÕÀ¸·Î ¼³Á¤ÆÄÀÏ¿¡ ³ª¿Â µð·ºÅ丮¸¦ »ç¿ëÇÑ´Ù.
          ¾ÆÆÄÄ¡ µð·ºÅ丮³ª ¼³Á¤ÆÄÀÏÀ» ´Ù¸¥ Àå¼Ò·Î º¹»çÇÏ¸é ¹Ýµå½Ã
          <code>httpd.conf</code> ÆÄÀÏ¿¡ ÀÖ´Â <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> Áö½Ã¾î¸¦ ±× À§Ä¡·Î
          ¼öÁ¤Ç϶ó.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="test" id="test">Á¤»óÀûÀ¸·Î ¼³Ä¡µÇ¾ú´ÂÁö °Ë»çÇϱâ</a></h2>
          
      
          <p>(ÄܼÖâÀ̳ª service¸¦ ÅëÇØ) ¾ÆÆÄÄ¡¸¦ ½ÃÀÛÇϸé (¼³Á¤ÆÄÀÏÀÇ
          <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> Áö½Ã¾î¸¦
          ¼öÁ¤Çϰųª ¾ÆÆÄÄ¡¸¦ "ÇöÀç »ç¿ëÀÚ¸¸" ´ë»óÀ¸·Î ¼³Ä¡ÇÏÁö ¾Ê´Â
          °æ¿ì) 80¹ø Æ÷Æ®¸¦ ±â´Ù¸°´Ù. ºê¶ó¿ìÀú¸¦ ½ÃÀÛÇϰí URLÀ» ÀÔ·ÂÇÏ¿©
          ¼­¹öÀÇ ±âº» ÆäÀÌÁö¿¡ Á¢±ÙÇÏ´Ù:</p>
      
          <div class="example"><p><code>
            http://localhost/
          </code></p></div>
      
          <p>¾ÆÆÄÄ¡´Â ¾ÆÆÄÄ¡ ¼³¸í¼­ ¸µÅ©°¡ Àִ ȯ¿µÆäÀÌÁö¸¦ º¸¿©Áà¾ß
          ÇÑ´Ù. ¾Æ¹« Àϵµ ÀϾÁö ¾Ê°Å³ª ¿À·ù°¡ ³ª¿À¸é, <code>logs</code>
          ÇÏÀ§µð·ºÅ丮¿¡ ÀÖ´Â <code>error.log</code> ÆÄÀÏÀ» »ìÆìºÁ¶ó.
          È£½ºÆ®°¡ ³×Æ®¿÷¿¡ ¿¬°áµÇÀÖÁö ¾Ê°Å³ª DNS (Domain Name Service)
          ¼³Á¤¿¡ ¹®Á¦°¡ ÀÖ´Ù¸é ´ÙÀ½ URLÀ» »ç¿ëÇØ¾ß ÇÑ´Ù:</p>
      
          <div class="example"><p><code>
            http://127.0.0.1/
          </code></p></div>
      
          <p>±âº» ¼³Ä¡°¡ µ¿ÀÛÇϸé <code>conf</code> ÇÏÀ§µð·ºÅ丮¿¡
          ÀÖ´Â ÆÄÀÏÀ» ÀûÀýÈ÷ ¼³Á¤ÇÑ´Ù. ¶Ç, Windows NT ¾ÆÆÄÄ¡ service
          ¼³Á¤À» ¼öÁ¤ÇÑ °æ¿ì ¸ÕÀú ¸í·ÉÇà¿¡¼­ ¾ÆÆÄÄ¡¸¦ ½ÃÀÛÇÏ¿© ¿À·ù°¡
          ¹ß»ýÇÏÁö¾Ê´ÂÁö È®ÀÎÇØ¾ß ÇÑ´Ù.</p>
      
          <p>¾ÆÆÄÄ¡°¡ ´Ù¸¥ TCP/IP ÇÁ·Î±×·¥°ú °°Àº Æ÷Æ®¸¦ °øÀ¯ÇÒ ¼ö
          <strong>¾ø±â¶§¹®¿¡</strong> ¾ÆÆÄÄ¡¸¦ ½ÃÀÛÇϱâ Àü¿¡ ´Ù¸¥
          ¼­ºñ½º¸¦ Áß´Ü, Á¦°Å, Àç¼³Á¤ÇØ¾ß ÇÒÁöµµ ¸ð¸¥´Ù. ´Ù¸¥ À¥¼­¹ö³ª
          ƯÁ¤ ¹æÈ­º® ¼­¹ö½º¿Í Ãæµ¹ÇÒ ¼ö ÀÖ´Ù.
          </p>
      
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/platform/windows.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/windows.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/windows.html" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/windows.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/perf-hp.html.fr.utf8����������������������������������������������0000644�0000000�0000050�00000021771�13412755316�021026� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Mise en oeuvre d'un serveur Web hautes performances sous
        HPUX - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Notes spécifiques aux
        plates-formes</a></div><div id="page-content"><div id="preamble"><h1>Mise en oeuvre d'un serveur Web hautes performances sous
        HPUX</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/platform/perf-hp.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/perf-hp.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/perf-hp.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      
      
      <pre>Date: Wed, 05 Nov 1997 16:59:34 -0800
      From: Rick Jones &lt;<a href="mailto:raj@cup.hp.com">raj@cup.hp.com</a>&gt;
      Reply-To: <a href="mailto:raj@cup.hp.com">raj@cup.hp.com</a>
      Organization: Network Performance
      Subject: HP-UX tuning tips</pre>
      
          <p>Traduction du corps du message cité ci-dessus :</p>
      
          <p>Voici quelques conseils de personnalisation pour HPUX à ajouter à
          la page de personnalisation.</p>
      
          <p>Pour HP-UX 9.X: mettre à jour vers la version 10.20<br />
          Pour HP-UX 10.[00|01|10]: mettre à jour vers la version 10.20</p>
      
          <p>Pour HP-UX 10.20:</p>
      
          <p>Installez le dernier patch cumulatif à propos du transport ARPA.
          Ceci va vous permettre de configurer la taille de la table de
          hashage de recherche de connexion TCP. La valeur par défaut est 256
          conteneurs et doit être une puissance de deux. À cet effet, utilisez
          adb pour modifier l'image *disque* du noyau. Le nom de la variable
          est <code>tcp_hash_size</code>. Notez qu'il est impératif d'utiliser
          "<code>W</code>" pour spécifier une quantité sur 32 bits, et non
          "<code>w</code>" qui indique une valeur sur 16 bits, lors de la
          modification de l'image disque car la variable
          <code>tcp_hash_size</code> est une quantité sur 32 bits.</p>
      
          <p>Comment déterminer cette valeur ? Examinez la sortie de <a href="ftp://ftp.cup.hp.com/dist/networking/tools/connhist">ftp://ftp.cup.hp.com/dist/networking/tools/connhist</a>, et
          comptez le nombre total de connexions TCP existant sur le système.
          Il est en général souhaitable que ce nombre divisé par la taille de
          la table de hashage soit raisonnablement petit, disons inférieur à
          10. Les administrateurs peuvent consulter le document SPECweb96 de
          HP pour quelques réglages courants. On peut les trouver à <a href="http://www.specbench.org/">http://www.specbench.org/</a>. Si
          un système HP-UX traite 1000 connexions SPECweb96 par seconde, une
          valeur de temps <code>TIME_WAIT</code> de 60 secondes permettrait le
          suivi de 60000 connexions TCP.</p>
      
          <p>Les administrateurs peuvent tester la profondeur de leur file
          d'attente d'écoute avec <a href="ftp://ftp.cup.hp.com/dist/networking/misc/listenq">ftp://ftp.cup.hp.com/dist/networking/misc/listenq</a>.</p>
      
          <p>Si Apache s'exécute sur un système à base de PA-8000, il est
          conseillé de modifier l'exécutable Apache avec la commande chatr
          afin d'utiliser une page de grande taille. La commande sera du style
          "<code>chatr +pi L &lt;BINARY&gt;</code>". Le GID de l'exécutable en
          cours de fonctionnement doit posséder le privilège
          <code>MLOCK</code>. Pour assigner ce privilège <code>MLOCK</code>,
          consultez <code>Setprivgrp(1m)</code>. La modification peut être
          validée en exécutant Glance et en examinant les portions de mémoire
          du/des serveur(s) afin de s'assurer qu'elles montrent une fraction
          non triviale du segment de texte verrouillé.</p>
      
          <p>Si Apache s'exécute sur un système MP (multi-processeurs), il est
          conseillé d'écrire un petit programme qui utilise
          <code>mpctl()</code> et permettant d'associer les processus aux
          processeurs. Un simple algorithme <code>pid % numcpu</code> suffira
          probablement. Cette modification peut aussi être ajoutée dans le
          code source.</p>
      
          <p>Si l'administrateur s'intéresse au nombre de connexions
          <code>FIN_WAIT_2</code>, il peut utiliser nettune pour diminuer la
          valeur de <code>tcp_keepstart</code>. Il devra cependant être
          prudent - surtout ne pas diminuer cette valeur en dessous de, disons
          deux à quatre minutes. Si <code>tcp_hash_size</code> a été défini,
          il est probablement approprié de laisser les connexions
          <code>FIN_WAIT_2</code> prendre plus de temps à expirer (peut-être
          même la valeur par défaut de deux heures) - elles n'auront en
          général pas un grand impact sur les performances.</p>
      
          <p>On peut ajouter d'autres choses au code de base, mais elles
          feront peut-être l'objet d'un autre email. N'hésitez pas à m'envoyer
          un message si vous êtes intéressé.</p>
      
          <p>sincèrement ,</p>
      
          <p>rick jones</p>
      
          <p><a href="http://www.netperf.org/netperf/">http://www.netperf.org/netperf/</a></p>
      
        </div>
      </div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/platform/perf-hp.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/perf-hp.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/perf-hp.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/perf-hp.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������httpd-2.4.41/docs/manual/platform/netware.html.fr.utf8����������������������������������������������0000644�0000000�0000050�00000106734�13412755316�021135� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Utilisation d'Apache avec Novell NetWare - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Notes spécifiques à un système</a></div><div id="page-content"><div id="preamble"><h1>Utilisation d'Apache avec Novell NetWare</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/platform/netware.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/netware.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/netware.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      
      
          <p>Ce document explique l'installation, la configuration et le
          lancement d'Apache 2.0 sous Novell NetWare 6.0 et les versions
          ultérieures. Si vous trouvez une bogue, ou voulez tout simplement
          contribuer de quelque manière que ce soit, utilisez s'il vous plait
          notre <a href="http://httpd.apache.org/bug_report.html">page des
          rapports de bogues.</a></p>
      
          <p>La page des rapports de bogues et la liste de diffusion dev-httpd
          ne doivent pas être utilisées pour poser des questions à propos de
          la configuration ou du lancement d'Apache. Avant de soumettre un
          rapport de bogue ou une question, consultez ce document, la <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> ou tout autre sujet de la
          documentation en rapport avec votre problème. Si vous n'avez
          toujours pas résolu votre problème, postez votre question dans le
          newsgroup <a href="news://developer-forums.novell.com/novell.devsup.webserver">
          novell.devsup.webserver</a>, où de nombreux utilisateurs d'Apache
          sont prêts à répondre à toutes les nouvelles et obscures questions à
          propos de l'utilisation d'Apache sous Netware.</p>
      
          <p>Dans la majeure partie de ce document, vous êtes sensé avoir
          installé Apache à partir d'une distribution binaire. Si vous voulez
          compiler Apache vous-même (par exemple pour aider au développement,
          ou pour rechercher des bogues), reportez-vous à la section traitant
          de la <a href="#comp">Compilation d'Apache pour Netware</a>
          ci-dessous.</p>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#req">Prérequis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#down">Téléchargement d'Apache pour NetWare</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#inst">Installation d'Apache pour NetWare</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#run">Exécuter Apache pour NetWare</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#use">Configuration d'Apache pour NetWare</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#comp">Compilation d'Apache pour NetWare</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="req" id="req">Prérequis</a></h2>
      
          
      
          <p>Apache 2.0 nécessite NetWare 6.0 service pack 3 et supérieurs
          pour fonctionner. Si vous utilisez un service pack antérieur à SP3,
          vous devez installer les dernières <a href="http://developer.novell.com/ndk/libc.htm">Bibliothèques
          Netware pour C (LibC)</a>.</p>
      
          <p>Vous trouverez les service packs Netware <a href="http://support.novell.com/misc/patlst.htm#nw">ici</a>.</p>
      
          <p>Apache 2.0 pour NetWare peut aussi fonctionner dans un
          environnement NetWare 5.1, à partir du moment où le dernier service
          pack ou la dernière version des <a href="http://developer.novell.com/ndk/libc.htm">Bibliothèques
          Netware pour C (LibC)</a> ont été installés. <strong>ATTENTION
          :</strong> Apache 2.0 pour NetWare n'a pas été testé dans cet
          environnement car il n'a pas été conçu pour ce dernier.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="down" id="down">Téléchargement d'Apache pour NetWare</a></h2>
      
          
      
          <p>Les informations à propos de la dernière version
          d'Apache sont disponibles sur le site web d'Apache à <a href="http://www.apache.org/">http://www.apache.org/</a>. Vous y
          trouverez la version courante, des versions alpha ou bêta-test plus
          récentes, ainsi que des sites miroirs et des sites FTP anonymes. Les
          distributions binaires des dernières versions d'Apache 2.0 pour
          NetWare sont disponibles <a href="http://www.apache.org/dist/httpd/binaries/netware">ici</a>.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="inst" id="inst">Installation d'Apache pour NetWare</a></h2>
      
          
      
          <p>Il n'existe pas actuellement de programme d'installation d'Apache
          pour Netware. Si vous installez Apache 2.0 pour NetWare à partir des
          sources, vous devrez copier les fichiers sur le serveur
          manuellement.</p>
      
          <p>Suivez ces instructions pour installer Apache sous Netware à
          partir de la distribution binaire (en supposant que vous effectuez
          l'installation dans <code>sys:/apache2</code>) :</p>
      
          <ul>
            <li>Décompressez le fichier binaire téléchargé à la racine du
            volume <code>SYS:</code> (vous pouvez cependant l'installer dans
            tout volume)</li>
      
            <li>Editez le fichier <code>httpd.conf</code> et définissez les
            directives <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> et
            <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> avec les valeurs
            correctes des chemins de fichiers qui correspondent à la
            configuration de votre serveur.</li>
      
            <li>Ajoutez <code>SYS:/APACHE2</code> au chemin de recherche, par
            une commande du style : <div class="example"><p><code>SEARCH ADD
            SYS:\APACHE2</code></p></div></li>
      
          </ul>
      
          <p>Suivez ces instructions pour installer Apache pour Netware
          manuellement à partir de votre propre répertoire de sources (en
          supposant que vous effectuez l'installation dans
          <code>sys:/apache2</code>) :</p>
      
          <ul>
            <li>Créez un répertoire que vous appellerez <code>Apache2</code>
            dans un volume Netware.</li>
      
            <li>Copiez <code>APACHE2.NLM</code>, <code>APRLIB.NLM</code> dans
            <code>SYS:/APACHE2</code>.</li>
      
            <li>Créez un répertoire que vous appellerez <code>BIN</code> dans
            <code>SYS:/APACHE2</code>.</li>
      
            <li>Copiez <code>HTDIGEST.NLM</code>, <code>HTPASSWD.NLM</code>,
            <code>HTDBM.NLM</code>, <code>LOGRES.NLM</code>,
            <code>ROTLOGS.NLM</code> dans <code>SYS:/APACHE2/BIN</code>.</li>
      
            <li>Créez un répertoire que vous appellerez <code>CONF</code> dans
            <code>SYS:/APACHE2</code>.</li>
      
            <li>Copiez le fichier <code>HTTPD-STD.CONF</code> dans le
            répertoire <code>SYS:/APACHE2/CONF</code> et renommez-le en
            <code>HTTPD.CONF</code>.</li>
      
            <li>Copiez les fichiers <code>MIME.TYPES</code>,
            <code>CHARSET.CONV</code> et <code>MAGIC</code> dans le répertoire
            <code>SYS:/APACHE2/CONF</code>.</li>
      
            <li>Copiez tous les fichiers et sous-répertoires de
            <code>\HTTPD-2.0\DOCS\ICONS</code> dans
            <code>SYS:/APACHE2/ICONS</code>.</li>
      
            <li>Copiez tous les fichiers et sous-répertoires de
            <code>\HTTPD-2.0\DOCS\MANUAL</code> dans
            <code>SYS:/APACHE2/MANUAL</code>.</li>
      
            <li>Copiez tous les fichiers et sous-répertoires de
            <code>\HTTPD-2.0\DOCS\ERROR</code> dans
            <code>SYS:/APACHE2/ERROR</code>.</li>
      
            <li>Copiez tous les fichiers et sous-répertoires de
            <code>\HTTPD-2.0\DOCS\DOCROOT</code> dans
            <code>SYS:/APACHE2/HTDOCS</code>.</li>
      
            <li>Créez le répertoire <code>SYS:/APACHE2/LOGS</code> sur le
            serveur.</li>
      
            <li>Créez le répertoire <code>SYS:/APACHE2/CGI-BIN</code> sur le
            serveur.</li>
      
            <li>Créez le répertoire <code>SYS:/APACHE2/MODULES</code> et
            copiez tous les modules nlm dans le répertoire
            <code>modules</code>.</li>
      
            <li>Editez le fichier <code>HTTPD.CONF</code>, et recherchez
            toutes les marques <code>@@Value@@</code> afin de les remplacer
            par les valeurs appropriées.</li>
      
            <li>Ajoutez <code>SYS:/APACHE2</code> au chemin de recherche, par
            une commande du style : <div class="example"><p><code>SEARCH ADD
            SYS:\APACHE2</code></p></div>.</li>
          </ul>
      
          <p>Outre le volume par défaut <code>SYS</code>, Apache peut être
          installé dans tout autre volume.</p>
      
          <p>Au cours du processus d'installation, l'ajout du mot-clé
          "install" à la ligne de commande du makefile va provoquer la
          construction d'une distribution complète sous forme d'un paquetage
          dans le sous-répertoire <code>DIST</code>. Vous pouvez simplement
          installer Apache en copiant la distribution créée précédemment à la
          racine d'un volume Netware (voir <a href="#comp">Compilation
          d'Apache pour NetWare</a> ci-dessous).</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="run" id="run">Exécuter Apache pour NetWare</a></h2>
      
          
      
          <p>Pour démarrer Apache, tapez simplement <code>apache</code> dans
          la console. Ceci aura pour effet de charger Apache dans l'espace
          d'adressage du système d'exploitation. Si vous préférez charger
          Apache dans un espace d'adressage protégé, vous pouvez spécifier cet
          espace d'adressage à l'aide de l'instruction de chargement suivante
          :</p>
      
          <div class="example"><p><code>
            load address space = apache2 apache2
          </code></p></div>
      
          <p>Cette instruction va charger Apache dans un espace d'adressage
          appelé apache2. Il est possible d'exécuter plusieurs instances
          simultanées d'Apache sous Netware, en chargeant chacune d'entre
          elles dans son propre espace d'adressage protégé.</p>
      
          <p>Une fois démarré, Apache écoute le port 80 (à moins que vous
          n'ayez modifié la directive <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> dans les fichiers de
          configuration). Pour vous connecter au serveur et afficher la page
          par défaut, lancez un navigateur et entrez le nom du serveur ou son
          adresse IP. Vous devriez voir une page de bienvenue, et un lien vers
          le manuel Apache. Si rien ne se produit, ou si vous obtenez un
          message d'erreur, consultez le fichier <code>error_log</code> dans
          le répertoire <code>logs</code>.</p>
      
          <p>Lorsque votre installation de base fonctionne, vous devez la
          configurer correctement en éditant les fichiers du répertoire
          <code>conf</code>.</p>
      
          <p>Pour arrêter une instance d'Apache s'exécutant dans l'espace
          d'adressage du système d'exploitation, entrez simplement dans la
          console :</p>
      
          <div class="example"><p><code>
            unload apache2
          </code></p></div>
      
          <p>ou</p>
      
          <div class="example"><p><code>
            apache2 shutdown
          </code></p></div>
      
          <p>Si Apache s'exécute dans un espace d'adressage protégé, spécifiez
          cet espace d'adressage dans l'instruction d'arrêt :</p>
      
          <div class="example"><p><code>
            unload address space = apache2 apache2
          </code></p></div>
      
          <p>Lorsqu'on travaille avec Apache, il est important de savoir
          comment il trouve ses fichiers de configuration. Vous pouvez
          spécifier un fichier de configuration sur la ligne de commande de
          deux manières :</p>
      
          <ul>
            <li><code>-f</code> spécifie un chemin vers un fichier de
            configuration particulier</li>
          </ul>
      
          <div class="example"><p><code>
            apache2 -f "vol:/nom-serveur/conf/fich-conf.conf"
          </code></p></div>
      
          <div class="example"><p><code>
            apache -f test/test.conf
          </code></p></div>
      
          <p>Dans ces cas, la directive <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> doit être correctement définie
          dans le fichier de configuration.</p>
      
          <p>Si vous ne spécifiez pas de nom de fichier de configuration avec
          l'option <code>-f</code>, Apache utilisera le nom de fichier codé en
          dur dans le serveur, en général <code>conf/httpd.conf</code>.
          L'invocation d'Apache avec l'option <code>-V</code> indiquera ce nom
          comme valeur de l'étiquette <code>SERVER_CONFIG_FILE</code>. Apache
          va ensuite déterminer son <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> en effectuant les tests
          suivants, dans cet ordre </p>
      
          <ul>
            <li>Une directive <code>ServerRoot</code> via une option
            <code>-C</code> switch.</li>
      
            <li>L'option de ligne de commande <code>-d</code>.</li>
      
            <li>Le contenu du répertoire courant.</li>
      
            <li>La racine du répertoire d'installation codée en dur dans le
            serveur.</li>
          </ul>
      
          <p>La racine du répertoire d'installation codée en dur dans le
            serveur est en général <code>sys:/apache2</code>. L'invocation
            d'Apache avec l'option <code>-V</code> indiquera ce chemin comme
            valeur de l'étiquette <code>HTTPD_ROOT</code>.</p>
      
          <p>Apache 2.0 pour Netware comporte un jeu d'options de ligne de
          commande permettant d'afficher ou de modifier certaines
          caractéristiques de l'instance du serveur web en cours d'exécution.
          Ces options ne sont disponibles que lorsqu'Apache est en cours
          d'exécution. Chacune de ces options doit être précédée du mot-clé
          <code>APACHE2</code>.</p>
      
          <dl>
            <dt>RESTART</dt>
            <dd>Demande à Apache d'arrêter tout worker thread en cours
            d'exécution lorsqu'il devient inactif, de recharger le fichier de
            configuration, et de redémarrer chaque worker thread en fonction
            de la nouvelle configuration.</dd>
      
            <dt>VERSION</dt>
            <dd>Affiche des informations à propos de la version de l'instance
            d'Apache en cours d'exécution.</dd>
      
            <dt>MODULES</dt>
            <dd>Affiche la liste des modules chargés (intégrés et
            externes). </dd>
      
            <dt>DIRECTIVES</dt>
            <dd>Affiche la liste des directives disponibles.</dd>
      
            <dt>SETTINGS</dt>
            <dd>Active ou désactive l'affichage du statut des threads sur la
            console. En cas d'activation, l'état de chaque thread en cours
            d'exécution s'affiche sur l'écran de la console Apache.</dd>
      
            <dt>SHUTDOWN</dt>
            <dd>Arrête l'instance du serveur web Apache en cours
            d'exécution.</dd>
      
            <dt>HELP</dt>
            <dd>Décrit chacune des options disponibles au cours de l'exécution
            d'Apache.</dd>
          </dl>
      
          <p>Par défaut, ces options sont passées à l'instance d'apache
          s'exécutant dans l'espace d'adressage du système d'exploitation.
          Pour passer une option à une instance d'Apache spécifique
          s'exécutant dans un espace d'adressage protégé, ajouter le paramètre
          -p suivi du nom de l'espace d'adressage. Pour plus d'informations,
          tapez "apache2 Help" sur la ligne de commande.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="use" id="use">Configuration d'Apache pour NetWare</a></h2>
      
          
      
          <p>Apache lit en général ses fichiers de configuration dans le
          répertoire <code>conf</code>. Ces fichiers sont les mêmes que ceux
          de la version Unix, mais quelques directives sont différentes sous
          Netware. Voir la <a href="../mod/">Documentation Apache</a> pour
          l'ensemble des directives disponibles.</p>
      
          <p>Les principales différences propres à Apache pour NetWare sont
          : </p>
      
          <ul>
            <li>
              <p>Comme Apache pour Netware est une application multithread,
      	elle n'utilise pas de processus séparé pour chaque requête,
      	comme c'est le cas pour certaines implémentations sous Unix. Il
      	n'y a que des threads en cours d'exécution : un thread parent,
      	et plusieurs threads enfants ou worker qui traitent les
      	requêtes.</p>
      
              <p>En conséquence, les directives de gestion des "processus"
      	sont différentes :</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#maxconnectionsperchild">MaxConnectionsPerChild</a></code> - comme sous
      	Unix, cette directive contrôle le nombre maximum de connexions
      	qu'un worker thread peut traiter avant de s'arrêter. Avec la
      	valeur par défaut <code>MaxConnectionsPerChild 0</code>,
      	le thread va pouvoir traiter un nombre illimité de requêtes.
      	Cette valeur est recommandée sous Netware, à moins que vous
      	n'ayez des raisons particulières de la modifier.</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#startthreads">StartThreads</a></code> -
      	Cette directive indique au serveur le nombre de threads qu'il
      	doit lancer au démarrage. Il est recommandé de conserver la
      	valeur par défaut <code>StartThreads 50</code>.</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#minsparethreads">MinSpareThreads</a></code> -
      	Cette directive indique au serveur le nombre de worker threads
      	additionnels qu'il doit lancer si le nombre de threads inactifs
      	tombe en dessous de cette valeur. Il est recommandé de conserver la
      	valeur par défaut <code>MinSpareThreads 10</code>.</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#maxsparethreads">MaxSpareThreads</a></code> -
      	Cette directive indique au serveur qu'il doit commencer à
      	arrêter des worker threads si le nombre de threads inactifs
      	passe au dessus de cette valeur. Il est recommandé de conserver
      	la valeur par défaut <code>MaxSpareThreads 100</code>.</p>
      
              <p><code class="directive"><a href="../mod/mpm_netware.html#maxthreads">MaxThreads</a></code> -
      	Cette directive impose un nombre maximum de worker threads. Il
      	est recommandé de conserver la valeur par défaut
      	<code>ThreadsPerChild 250</code>.</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code> -
      	Cette directive indique au serveur la taille de la pile à
      	utiliser pour un worker thread individuel. Il est recommandé de
      	conserver la valeur par défaut <code>ThreadStackSize
      	65536</code>.</p>
            </li>
      
            <li>
              <p>Les directives qui acceptent des noms de fichiers comme
      	arguments ne doivent pas utiliser des noms de fichiers Unix,
      	mais des noms de fichiers Netware. Cependant, comme Apache
      	utilise des noms de style Unix en interne, on doit utiliser des
      	slashes et non des antislashes. Il est recommandé de préfixer
      	tous les chemins de fichiers racines par un nom de volume. Si ce
      	dernier est omis, Apache supposera que le volume est
      	<code>SYS:</code>, ce qui n'est pas forcément correct.</p>
            </li>
      
            <li>
              <p>Apache pour Netware a la possibilité de charger des modules
      	en cours d'exécution, sans avoir à recompiler le serveur. Si
      	Apache est compilé avec les options par défaut, il va installer
      	de nombreux modules optionnels dans le répertoire
      	<code>\Apache2\modules</code>. Pour les activer, ou en activer
      	d'autres, on doit utiliser la directive <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code>. Par exemple, pour
      	activer le module status, ajoutez la ligne suivante :</p>
      
              <div class="example"><p><code>
                LoadModule status_module modules/status.nlm
              </code></p></div>
      
              <p>Des informations à propos de la  <a href="../mod/mod_so.html#creating">création de modules
      	chargeables</a> sont aussi disponibles.</p>
            </li>
          </ul>
      
          <h3><a name="use-add" id="use-add">Autres directives spécifiques à Netware :</a></h3>
      
            
      
            <ul>
              <li><code class="directive"><a href="../mod/core.html#cgimapextension">CGIMapExtension</a></code> -
              Cette directive associe une extension de fichier CGI à un
      	interpréteur de script.</li>
            </ul>
            <ul>
              <li><code class="directive"><a href="../mod/mod_nw_ssl.html#securelisten">SecureListen</a></code> -
              Cette directive active le chiffrement SSL pour un port
      	spécifique.</li>
            </ul>
            <ul>
              <li><code class="directive"><a href="../mod/mod_nw_ssl.html#nwssltrustedcerts">NWSSLTrustedCerts</a></code> -
              Cette directive permet d'ajouter des certificats de confiance
      	pouvant être utilisés pour créer des connexions sécurisées vers
      	des serveurs mandataires.</li>
            </ul>
            <ul>
              <li><code class="directive"><a href="../mod/mod_nw_ssl.html#nwsslupgradeable">NWSSLUpgradeable</a></code> -
              Cette directive permet de faire passer en SSL une connexion
      	initialisée sur les adresse IP et Port spécifiés.</li>
            </ul>
      
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="comp" id="comp">Compilation d'Apache pour NetWare</a></h2>
      
          
      
          <p>La compilation d'Apache nécessite MetroWerks CodeWarrior 6.x ou
          supérieur. Une fois compilé, Apache peut être installé à la racine
          de tout volume Netware. Le répertoire d'installation par défaut est
          <code>sys:/Apache2</code>.</p>
      
          <p>Avant de démarrer Apache, vous devez remplir le répertoire
          <code>conf</code>. Copiez le fichier <code>HTTPD-STD.CONF</code>
          depuis le répertoire <code>conf</code> de la distribution et
          renommez-le en <code>HTTPD.CONF</code>. Editez le fichier
          <code>HTTPD.CONF</code> en recherchant les repères
          <code>@@Value@@</code>, et remplacez ces derniers par la valeur
          appropriée. Copiez de même les fichiers <code>conf/magic</code> et
          <code>conf/mime.types</code>. Vous pouvez aussi construire une
          distribution complète en ajoutant le mot-clé <code>install</code>
          lors de l'invocation des makefiles.</p>
      
          <h3><a name="comp-req" id="comp-req">Prérequis :</a></h3>
      
            
      
            <p>Les outils de développement suivants sont nécessaires pour la
            compilation d'Apache pour Netware :</p>
      
            <ul>
              <li>Metrowerks CodeWarrior 6.0 ou supérieur avec le <a href="http://developer.novell.com/ndk/cwpdk.htm">NetWare PDK
      	3.0</a> ou supérieur.</li>
      
              <li>Les <a href="http://developer.novell.com/ndk/libc.htm">Bibliothèques
      	Netware pour C (LibC)</a></li>
      
              <li>Les <a href="http://developer.novell.com/ndk/cldap.htm">Bibliothèques
      	LDAP pour C</a></li>
      
              <li>Le <a href="http://www.gzip.org/zlib/">Code source de la
      	bibliothèque de compression ZLIB</a></li>
      
              <li>L'utilitaire AWK (awk, gawk ou similaire). AWK peut être
      	téléchargé à <a href="http://developer.novell.com/ndk/apache.htm">http://developer.novell.com/ndk/apache.htm</a>.
      	L'utilitaire doit se trouver dans votre chemin windows et avoir
      	pour nom <code>awk.exe</code>.</li>
      
              <li>Pour utiliser les makefiles, vous devez disposer de GNU make
      	version 3.78.1 (GMake) disponible à <a href="http://developer.novell.com/ndk/apache.htm">http://developer.novell.com/ndk/apache.htm</a>.</li>
            </ul>
      
          
      
          <h3><a name="comp-make" id="comp-make">Compiler Apache en utilisant les makefiles Netware
            :</a></h3>
      
            
      
            <ul>
              <li>Définissez la variable d'environnement
      	<code>NOVELLLIBC</code> avec le chemin des bibliothèques Netware
      	pour C SDK ; par exemple : <div class="example"><p><code>Set
      	NOVELLLIBC=c:\novell\ndk\libc</code></p></div></li>
      
              <li>Définissez la variable d'environnement
      	<code>METROWERKS</code> avec le chemin de votre compilateur
      	Metrowerks CodeWarrior ; par exemple : <div class="example"><p><code>Set
      	METROWERKS=C:\Program Files\Metrowerks\CodeWarrior</code></p></div>. Si
      	vous l'avez installé dans le répertoire par défaut
      	<code>C:\Program Files\Metrowerks\CodeWarrior</code>, vous
      	n'avez pas besoin de définir cette variable.</li>
      
              <li>Définissez la variable d'environnement <code>LDAPSDK</code>
      	avec le chemin des bibliothèques LDAP pour C ; par exemple :
      	<div class="example"><p><code>Set
      	LDAPSDK=c:\Novell\NDK\cldapsdk\NetWare\libc</code></p></div></li>
      
              <li>Définissez la variable d'environnement <code>ZLIBSDK</code>
      	avec le chemin du code source de la bibliothèque Zlib ; par
      	exemple : <div class="example"><p><code>Set ZLIBSDK=D:\NOVELL\zlib</code></p></div></li>
      
      	<li>Définissez la variable d'environnement <code>PCRESDK</code>
      	avec le chemin d'installation du code source de la bibliothèque
      	PCRE ; par exemple :
      	<div class="example"><p><code>Set PCRESDK=D:\NOVELL\pcre</code></p></div>
      	</li>
      
              <li>Définissez la variable d'environnement <code>AP_WORK</code>
      	avec le chemin du code source de <code>httpd</code>.
      	<div class="example"><p><code>Set AP_WORK=D:\httpd-2.0.x</code></p></div></li>
      
              <li>Définissez la variable d'environnement <code>APR_WORK</code>
      	avec le chemin du code source d'<code>apr</code> ; en général
      	<code>\httpd\srclib\apr</code>, mais le projet APR peut se
      	trouver en dehors de la structure des répertoires de httpd.
      	<div class="example"><p><code>Set APR_WORK=D:\apr-1.x.x</code></p></div></li>
      
              <li>Définissez la variable d'environnement <code>APU_WORK</code>
      	avec le chemin du code source d'<code>apr-util</code> ; en
      	général <code>\httpd\srclib\apr-util</code>, mais le projet
      	APR-UTIL peut se trouver en dehors de la structure des
      	répertoires de httpd. <div class="example"><p><code>Set
      	APU_WORK=D:\apr-util-1.x.x</code></p></div></li>
      
              <li>Vérifiez que les chemins des utilitaires AWK et GNU make
      	(<code>gmake.exe</code>) ont bien été inclus dans la variable
      	d'environnement système <code>PATH</code>.</li>
      
              <li>Téléchargez le code source et décompressez-le dans un
      	répertoire de votre choix sur votre station de travail.</li>
      
              <li>Positionnez-vous dans le répertoire <code>\httpd-2.0</code>
      	et compilez les utilitaires précompilés à l'aide de la commande
      	"<code>gmake -f nwgnumakefile prebuild</code>". Cette cible va
      	créer le répertoire <code>\httpd-2.0\nwprebuild</code>, et y
      	copier tous les utilitaires nécessaires au franchissement des
      	étapes suivantes de la compilation.</li>
      
              <li>Copiez les fichiers
      	<code>\httpd-2.0\nwprebuild\GENCHARS.nlm</code> et
      	<code>\httpd-2.0\nwprebuild\DFTABLES.nlm</code> vers le volume
      	<code>SYS:</code> d'un serveur Netware et exécutez-les à l'aide
      	des commandes suivantes :
                <div class="example"><p><code>
                  SYS:\genchars &gt; sys:\test_char.h<br />
                  SYS:\dftables sys:\chartables.c<br />
                </code></p></div>
              </li>
      
              <li>Copiez les fichiers <code>test_char.h</code> et
      	<code>chartables.c</code> vers le répertoire
      	<code>\httpd-2.0\os\netware</code> de la machine où s'effectue
      	la compilation.</li>
      
              <li>Positionnez-vous dans le répertoire <code>\httpd-2.0</code>
      	et compilez Apache à l'aide de la commande "<code>gmake -f
      	nwgnumakefile</code>". Vous pouvez créer un répertoire pour la
      	distribution en ajoutant le paramètre install à la commande ;
      	par exemple :
              <div class="example"><p><code>gmake -f nwgnumakefile install</code></p></div>
              </li>
            </ul>
      
          
      
          <h3><a name="comp-add" id="comp-add">Options de make supplémentaires</a></h3>
      
            
      
            <ul>
              <li><code>gmake -f nwgnumakefile</code><p>Compile les versions
      	de distribution de tous les binaires et les copie dans un
      	répertoire <code>\release</code>.</p></li>
      
              <li><code>gmake -f nwgnumakefile DEBUG=1</code><p>Compile les versions
      	de débogage de tous les binaires et les copie dans un
      	répertoire <code>\debug</code>.</p></li>
      
              <li><code>gmake -f nwgnumakefile install</code><p>Crée une
      	distribution complète d'Apache avec les binaires, la
      	documentation et les fichiers support dans un répertoire
      	<code>\dist\Apache2</code>.</p></li>
      
              <li><code>gmake -f nwgnumakefile prebuild</code><p>Compile tous
      	les utilitaires précompilés et les copie dans le répertoire
      	<code>\nwprebuild</code>.</p></li>
      
              <li><code>gmake -f nwgnumakefile installdev</code><p>Même effet
      	que l'option install, mais en plus, les répertoires
      	<code>\lib</code> et <code>\include</code> sont créés dans le
      	répertoire de destination, et les en-têtes et fichiers d'import
      	y sont copiés.</p></li>
      
              <li><code>gmake -f nwgnumakefile clean</code><p>Supprime tous
      	les fichiers objets et les binaires de la zone de compilation
      	<code>\release.o</code>, ou <code>\debug.o</code> si
      	<code>DEBUG</code> a été défini.</p></li>
      
              <li><code>gmake -f nwgnumakefile clobber_all</code><p>Même effet
      	que clean, mais en plus, le répertoire de la distribution est
      	supprimé s'il existe.</p></li>
            </ul>
      
          
      
          <h3><a name="comp-add-env" id="comp-add-env">Variables d'environnement supplémentaires</a></h3>
      
            
      
            <ul>
              <li>Pour compiler tous les modules expérimentaux, définissez la
      	variable d'environnement <code>EXPERIMENTAL</code> :
              <div class="example"><p><code>Set EXPERIMENTAL=1</code></p></div>
              </li>
      
              <li>Pour compiler Apache en utilisant les sockets de style BSD
      	standard, plutôt que Winsock, définissez la variable
      	d'environnement <code>USE_STDSOCKETS</code> :
              <div class="example"><p><code>Set USE_STDSOCKETS=1</code></p></div>
              </li>
      
            </ul>
      
          
      
          <h3><a name="comp-mod_ssl" id="comp-mod_ssl">Compilation de mod_ssl pour la plate-forme Netware</a></h3>
      
            
      
            <p>Pour fournir les services SSL, Apache pour Netware utilise par
            défaut le module intégré <code class="module"><a href="../mod/mod_nw_ssl.html">mod_nw_ssl</a></code>. Ce module ne
            fournit que les services SSL implémentés par le système
            d'exploitation Netware lui-même pour gérer tous les chiffrements
            pour un port donné. Cependant, on peut aussi utiliser mod_ssl de
            la même manière que sur les autres plate-formes.</p>
      
            <p>Afin de pouvoir compiler mod_ssl pour la plate-forme Netware,
            les bibliothèques OpenSSL doivent être disponibles. Elles peuvent
            être installées de la manière suivante :</p>
      
            <ul>
                <li>Téléchargez la dernière distribution du code source
      	  d'OpenSSL 0.9.8 depuis la page <a href="http://www.openssl.org/source/">OpenSSL Source</a> (les
      	  versions 0.9.7 doivent être patchées, et ne sont donc pas
      	  recommandées).</li>
      
                <li>Editez le fichier <code>NetWare/set_env.bat</code>, et
      	  effectuez toutes modifications nécessaires des chemins des
      	  outils et utilitaires en fonction de votre environnement de
      	  développement.</li>
      
                <li>Exécutez les scripts suivants depuis la racine du
      	  répertoire des sources d'OpenSSL :
                <div class="example"><p><code>
                    Netware\set_env netware-libc<br />
                    Netware\build netware-libc
                </code></p></div>
                Pour des raisons de performances, vous devez activer la
      	  compilation avec le code ASM. Télécharger NASM depuis le <a href="http://nasm.sourceforge.net/">site SF</a>. Configurez
      	  ensuite OpenSSL pour utiliser le code ASM :
                <div class="example"><p><code>
                    Netware\build netware-libc nw-nasm enable-mdc2 enable-md5
                </code></p></div>
                Attention : n'utilisez pas l'Assembleur CodeWarrior - il
      	  produit un code de mauvaise qualité !</li>
      
                <li>Avant de compiler Apache, définissez la variable
      	  d'environnement <code>OSSLSDK</code> avec le chemin absolu de
      	  la racine du répertoire du code source d'openssl, et
      	  définissez WITH_MOD_SSL à 1.
                <div class="example"><p><code>
                    Set OSSLSDK=d:\openssl-0.9.8x<br />
                    Set WITH_MOD_SSL=1
                </code></p></div></li>
      
            </ul>
      
          
      
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/platform/netware.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/netware.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/netware.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/netware.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������httpd-2.4.41/docs/manual/platform/ebcdic.html�������������������������������������������������������0000644�0000000�0000050�00000000323�11656337540�017374� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: ebcdic.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: ebcdic.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/win_compiling.html.en���������������������������������������������0000644�0000000�0000050�00000066045�13412755316�021434� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Compiling Apache for Microsoft Windows - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Platform Specific Notes</a></div><div id="page-content"><div id="preamble"><h1>Compiling Apache for Microsoft Windows</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/platform/win_compiling.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/win_compiling.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/win_compiling.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      
      
          <p>There are many important points to consider before you begin compiling
          Apache HTTP Server (httpd). See <a href="windows.html">Using Apache HTTP
          Server on Microsoft Windows</a> before you begin.</p>
      
          <p>httpd can be built on Windows using a cmake-based build system or with
          Visual Studio project files maintained by httpd developers.  The cmake-based
          build system directly supports more versions of Visual Studio but currently
          has considerable functional limitations.</p>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#vstudio">Building httpd with the included Visual Studio project files</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cmake">Building httpd with cmake</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="vstudio" id="vstudio">Building httpd with the included Visual Studio project files</a></h2>
        
      
        <h3><a name="requirements" id="requirements">Requirements</a></h3>
      
          
      
          <p>Compiling Apache requires the following environment to be
          properly installed:</p>
      
          <ul>
            <li>
              <p>Disk Space</p>
      
              <p>Make sure you have at least 200 MB of free disk space
              available. After installation Apache requires approximately
              80 MB of disk space, plus space for log and cache files,
              which can grow rapidly. The actual disk space requirements
              will vary considerably based on your chosen configuration and
              any third-party modules or libraries, especially when OpenSSL
              is also built.  Because many files are text and very easily
              compressed, NTFS filesystem compression cuts these requirements
              in half.</p>
            </li>
      
            <li>
              <p>Appropriate Patches</p>
      
              <p>The httpd binary is built with the help of several patches to
              third party packages, which ensure the released code is buildable
              and debuggable.  These patches are available and distributed from <a href="http://www.apache.org/dist/httpd/binaries/win32/patches_applied/">http://www.apache.org/dist/httpd/binaries/win32/patches_applied/</a>
              and are recommended to be applied to obtain identical results as the
              "official" ASF distributed binaries.</p>
            </li>
      
            <li>
              <p>Microsoft Visual C++ 6.0 (Visual Studio 97) or later.</p>
      
              <p>Apache can be built using the command line tools, or from
              within the Visual Studio IDE Workbench.  The command line
              build requires the environment to reflect the <code>PATH</code>,
              <code>INCLUDE</code>, <code>LIB</code> and other variables
              that can be configured with the <code>vcvars32.bat</code> script.</p>
      
              <div class="note">You may want the Visual Studio Processor Pack for your older
              version of Visual Studio, or a full (not Express) version of newer
              Visual Studio editions, for the ml.exe assembler.  This will allow
              you to build OpenSSL, if desired, using the more efficient assembly
              code implementation.</div>
      
              <div class="note">Only the Microsoft compiler tool chain is actively supported by
              the active httpd contributors.  Although the project regularly accepts
              patches to ensure MinGW and other alternative builds work and improve
              upon them, they are not actively maintained and are often broken in
              the course of normal development.</div>
            </li>
      
            <li>
              <p>Updated Microsoft Windows Platform SDK, February 2003 or later.</p>
      
              <p>An appropriate Windows Platform SDK is included by default in the
              full (not express/lite) versions  of Visual C++ 7.1 (Visual Studio 2002)
              and later, these users can ignore these steps unless explicitly choosing
              a newer or different version of the Platform SDK.</p>
      
              <p>To use Visual C++ 6.0 or 7.0 (Studio 2000 .NET), the Platform SDK
              environment must be prepared using the <code>setenv.bat</code>
              script (installed by the Platform SDK) before starting the command
              line build or launching the msdev/devenv GUI environment.  Installing
              the Platform SDK for Visual Studio Express versions (2003 and later)
              should adjust the default environment appropriately.</p>
      
              <div class="example"><p><code>
                "c:\Program Files\Microsoft Visual Studio\VC98\Bin\VCVARS32"<br />
                "c:\Program Files\Platform SDK\setenv.bat"
              </code></p></div>
            </li>
      
            <li>
              <p>Perl and awk</p>
      
              <p>Several steps recommended here require a perl interpreter during
              the build preparation process, but it is otherwise not required.</p>
      
              <p>To install Apache within the build system, several files are
              modified using the <code>awk.exe</code> utility. awk was chosen since
              it is a very small download (compared with Perl or WSH/VB) and
              accomplishes the task of modifying configuration files upon
              installation.  Brian Kernighan's
              <a href="http://www.cs.princeton.edu/~bwk/btl.mirror/">http://www.cs.princeton.edu/~bwk/btl.mirror/</a>
              site has a compiled native Win32 binary,
              <a href="http://www.cs.princeton.edu/~bwk/btl.mirror/awk95.exe">http://www.cs.princeton.edu/~bwk/btl.mirror/awk95.exe</a> which
              you must save with the name <code>awk.exe</code> (rather than
              <code>awk95.exe</code>).</p>
      
              <div class="note">If awk.exe is not found, Makefile.win's install target
              will not perform substitutions in the installed .conf files.
              You must manually modify the installed .conf files to allow
              the server to start.  Search and replace all "@token@" tags
              as appropriate.</div>
      
              <div class="note">The Visual Studio IDE will only find <code>awk.exe</code>
              from the PATH, or executable path specified in the menu option
              Tools -&gt; Options -&gt; (Projects -&gt;) Directories.  Ensure
              awk.exe is in your system path.</div>
      
              <div class="note">Also note that if you are using Cygwin tools
              (<a href="http://www.cygwin.com/">http://www.cygwin.com/</a>)
              the awk utility is named <code>gawk.exe</code> and that the file
              <code>awk.exe</code> is really a symlink to the <code>gawk.exe</code>
              file. The Windows command shell does not recognize symlinks, and
              because of this building InstallBin will fail. A workaround is
              to delete <code>awk.exe</code> from the cygwin installation and
              copy <code>gawk.exe</code> to <code>awk.exe</code>.  Also note the
              cygwin/mingw ports of gawk 3.0.x were buggy, please upgrade to 3.1.x
              before attempting to use any gawk port.</div>
            </li>
      
            <li>
              <p>[Optional] zlib library (for <code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code>)</p>
      
              <p>Zlib must be installed into a <code>srclib</code> subdirectory named
              <code>zlib</code>.  This must be built in-place.  Zlib can be obtained
              from <a href="http://www.zlib.net/">http://www.zlib.net/</a> -- the
              <code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code> is confirmed to work correctly with
              version 1.2.3.</p>
      
              <div class="example"><p><code>
                nmake -f win32\Makefile.msc<br />
                nmake -f win32\Makefile.msc test
              </code></p></div>
            </li>
      
            <li>
              <p>[Optional] OpenSSL libraries (for <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>
              and <code>ab.exe</code> with ssl support)</p>
      
              <div class="note">The OpenSSL library is cryptographic software.  The country
              in which you currently reside may have restrictions on the import,
              possession, use, and/or re-export to another country, of encryption
              software.  BEFORE using any encryption software, please check your
              country's laws, regulations and policies concerning the import,
              possession, or use, and re-export of encryption software, to see
              if this is permitted.  See
              <a href="http://www.wassenaar.org/">http://www.wassenaar.org/</a>
              for more information.</div>
      
              <p>Configuring and building OpenSSL requires perl to be installed.</p>
      
              <p>OpenSSL must be installed into a <code>srclib</code> subdirectory
              named <code>openssl</code>, obtained from
              <a href="http://www.openssl.org/source/">http://www.openssl.org/source/</a>, in order to compile
              <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> or the <code>abs.exe</code> project, which
              is ab.c with SSL support enabled.  To prepare OpenSSL to be linked
              to Apache mod_ssl or abs.exe, and disable patent encumbered features
              in OpenSSL,  you might use the following build commands:</p>
      
              <div class="example"><p><code>
                perl Configure no-rc5 no-idea enable-mdc2 enable-zlib VC-WIN32
                     -Ipath/to/srclib/zlib -Lpath/to/srclib/zlib<br />
                ms\do_masm.bat<br />
                nmake -f ms\ntdll.mak
              </code></p></div>
      
              <div class="note">It is not advisable to use zlib-dynamic, as that transfers
              the cost of deflating SSL streams to the first request which must
              load the zlib dll.  Note the suggested patch enables the -L flag to
              work with windows builds, corrects the name of zdll.lib and ensures
              .pdb files are generated for troubleshooting.  If the assembler is
              not installed, you would add no-asm above and use ms\do_ms.bat
              instead of the ms\do_masm.bat script.</div>
            </li>
      
            <li>
              <p>[Optional] Database libraries (for <code class="module"><a href="../mod/mod_dbd.html">mod_dbd</a></code>
              and <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code>)</p>
      
              <p>The apr-util library exposes dbm (keyed database) and dbd (query
              oriented database) client functionality to the httpd server and its
              modules, such as authentication and authorization.  The sdbm dbm and
              odbc dbd providers are compiled unconditionally.</p>
      
              <p>The dbd support includes the Oracle instantclient package, MySQL,
              PostgreSQL and sqlite.  To build these all, for example, set up the
              LIB to include the library path, INCLUDE to include the headers path,
              and PATH to include the dll bin path of all four SDK's, and set the
              DBD_LIST environment variable to inform the build which client driver
              SDKs are installed correctly, e.g.;</p>
      
              <div class="example"><p><code>
                set DBD_LIST=sqlite3 pgsql oracle mysql
              </code></p></div>
      
              <p>Similarly, the dbm support can be extended with DBM_LIST to
              build a Berkeley DB provider (db) and/or gdbm provider, by similarly
              configuring LIB, INCLUDE and PATH first to ensure the client library
              libs and headers are available.</p>
      
              <div class="example"><p><code>
                set DBM_LIST=db gdbm
              </code></p></div>
      
              <div class="note">Depending on the choice of database distributions, it may be
              necessary to change the actual link target name (e.g. gdbm.lib vs.
              libgdb.lib) that are listed in the corresponding .dsp/.mak files
              within the directories srclib\apr-util\dbd or ...\dbm.</div>
      
              <p>See the README-win32.txt file for more hints on obtaining the
              various database driver SDKs.</p>
            </li>
          </ul>
      
        
      
        <h3><a name="unixsrcbuild" id="unixsrcbuild">Building from Unix sources</a></h3>
      
          
      
          <p>The policy of the Apache HTTP Server project is to only release Unix sources.
          Windows source packages made available for download have been supplied by 
          volunteers and may not be available for every release. You can still build 
          the server on Windows from the Unix source tarball with just a few additional
          steps.</p>
      
          <ol>
          	<li>Download and unpack the Unix source tarball for the latest version.</li>
          	<li>Download and unpack the Unix source tarball for latest version of
              APR, AR-Util and APR-Iconv, place these sources in directories  httpd-2.x.x\srclib\apr, httpd-2.x.x\srclib\apr-util and httpd-2.x.x\srclib\apr-iconv</li>
          	<li>Open a Command Prompt and CD to the httpd-2.x.x folder</li>
          	<li>Run the line endings conversion utility at the prompt;</li>
          </ol>
      
          <div class="example"><p><code>
            perl srclib\apr\build\lineends.pl
          </code></p></div>
      
          <p>You can now build the server with the Visual Studio development 
          environment using the IDE. Command-Line builds of the server are not 
          possible from Unix sources unless you export .mak files as explained 
          below.
          </p>
      
        
      
        <h3><a name="commandbuild" id="commandbuild">Command-Line Build</a></h3>
      
          
      
          <p><code>Makefile.win</code> is the top level Apache makefile.
          To compile Apache on Windows, simply use one of the following commands
          to build the <code>release</code> or <code>debug</code> flavor:</p>
      
          <div class="example"><p><code>
            nmake /f Makefile.win _apacher<br /><br />
            nmake /f Makefile.win _apached
          </code></p></div>
      
          <p>Either command will compile Apache. The latter will disable
          optimization of the resulting files, making it easier to single
          step the code to find bugs and track down problems.</p>
      
          <p>You can add your apr-util dbd and dbm provider choices with the
          additional make (environment) variables DBD_LIST and DBM_LIST,
          see the comments about [Optional] Database libraries, above.
          Review the initial comments in Makefile.win for additional options
          that can be provided when invoking the build.</p>
      
        
      
        <h3><a name="workspacebuild" id="workspacebuild">Developer Studio Workspace IDE Build</a></h3>
      
          
      
          <p>Apache can also be compiled using VC++'s Visual Studio
          development environment. To simplify this process, a
          Visual Studio workspace, <code>Apache.dsw</code>, is provided.
          This workspace exposes the entire list of working <code>.dsp</code>
          projects that are required for the complete Apache binary release.
          It includes dependencies between the projects to assure that they
          are built in the appropriate order.</p>
      
          <p>Open the <code>Apache.dsw</code> workspace, and select
          <code>InstallBin</code> (<code>Release</code> or <code>Debug</code> build,
          as desired) as the Active Project. <code>InstallBin</code> causes all
          related project to be built, and then invokes <code>Makefile.win</code> to
          move the compiled executables and dlls. You may personalize the
          <code>INSTDIR=</code> choice by changing <code>InstallBin</code>'s Settings,
          General tab, Build command line entry. <code>INSTDIR</code> defaults to the
          <code>/Apache2</code> directory. If you only want a test compile (without
          installing) you may build the <code>BuildBin</code> project instead.</p>
      
          <p>The <code>.dsp</code> project files are distributed in Visual Studio 6.0
          (98) format. Visual C++ 5.0 (97) will recognize them. Visual Studio
          2002 (.NET) and later users must convert <code>Apache.dsw</code> plus
          the <code>.dsp</code> files into an <code>Apache.sln</code> plus
          <code>.msproj</code> files.  Be sure you reconvert the <code>.msproj</code>
          file again if its source <code>.dsp</code> file changes! This is really
          trivial, just open <code>Apache.dsw</code> in the VC++ 7.0 IDE once again
          and reconvert.</p>
      
          <div class="note">There is a flaw in the .vcproj conversion of .dsp files.  devenv.exe
          will mis-parse the /D flag for RC flags containing long quoted /D'efines
          which contain spaces.  The command:
          <div class="example"><p><code>
            perl srclib\apr\build\cvtdsp.pl -2005
          </code></p></div>
          will convert the /D flags for RC flags to use an alternate, parseable
          syntax; unfortunately this syntax isn't supported by Visual Studio 97
          or its exported .mak files.  These /D flags are used to pass the long
          description of the mod_apachemodule.so files to the shared .rc resource
          version-identifier build.</div>
      
      	<div class="note"><strong>Building with OpenSSL 1.1.0 and up</strong>
          Due to difference in the build structure of OpenSSL begining with version
          1.1.0 you will need to convert the dsp files affected with cvtdsp.pl from
          APR 1.6 or greater.  The command:
          <div class="example"><p><code>
            perl srclib\apr\build\cvtdsp.pl -ossl11
          </code></p></div>
      	</div>
      
          <p>Visual Studio 2002 (.NET) and later users should also use the Build
          menu, Configuration Manager dialog to uncheck both the <code>Debug</code>
          and <code>Release</code> Solution modules <code>abs</code>,
          <code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code> and <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> components, as
          well as every component starting with <code>apr_db*</code>.  These modules
          are built by invoking <code>nmake</code>, or the IDE directly with the
          <code>BinBuild</code> target, which builds those modules conditionally
          if the <code>srclib</code> directories <code>openssl</code> and/or
          <code>zlib</code> exist, and based on the setting of <code>DBD_LIST</code>
          and <code>DBM_LIST</code> environment variables.</p>
      
        
      
        <h3><a name="exportingmakfiles" id="exportingmakfiles">Exporting command-line .mak files</a></h3>
      
          
      
          <p>Exported <code>.mak</code> files pose a greater hassle, but they are
          required for Visual C++ 5.0 users to build <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>,
          abs (<code class="program"><a href="../programs/ab.html">ab</a></code> with SSL support) and/or
          <code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code>.  The .mak files also support a broader
          range of C++ tool chain distributions, such as Visual Studio Express.</p>
      
          <p>You must first build all projects in order to create all dynamic
          auto-generated targets, so that dependencies can be parsed correctly.
          Build the entire project from within the Visual Studio 6.0 (98) IDE,
          using the <code>BuildAll</code> target, then use the Project Menu Export
          for all makefiles (checking on "with dependencies".)  Run the following
          command to correct absolute paths into relative paths so they will build
          anywhere:</p>
      
          <div class="example"><p><code>
            perl srclib\apr\build\fixwin32mak.pl
          </code></p></div>
      
          <p>You must type this command from the <em>top level</em>
          directory of the httpd source tree. Every
          <code>.mak</code> and <code>.dep</code> project file within
          the current directory and below will be corrected, and the
          timestamps adjusted to reflect the <code>.dsp</code>.</p>
      
          <p>Always review the generated <code>.mak</code> and <code>.dep</code>
          files for Platform SDK or other local, machine specific file paths.
          The <code>DevStudio\Common\MSDev98\bin\</code> (VC6) directory contains
          a <code>sysincl.dat</code> file, which lists all exceptions.  Update
          this file (including both forward and backslashed paths, such as both
          <code>sys/time.h</code> and <code>sys\time.h</code>) to ignore such
          newer dependencies.  Including local-install paths in a distributed
          <code>.mak</code> file will cause the build to fail completely.</p>
      
          <p>If you contribute back a patch that revises project files, we
          must commit project files in Visual Studio 6.0 format. Changes
          should be simple, with minimal compilation and linkage flags that
          can be recognized by all Visual Studio environments.</p>
      
        
      
        <h3><a name="installation" id="installation">Installation</a></h3>
      
          
      
          <p>Once Apache has been compiled, it needs to be installed in
          its server root directory. The default is the
          <code>\Apache2</code> directory, of the same drive.</p>
      
          <p>To build and install all the files into the desired folder
          <em>dir</em> automatically, use one of the following
          <code>nmake</code> commands:</p>
      
          <div class="example"><p><code>
            nmake /f Makefile.win installr INSTDIR=<em>dir</em><br />
            nmake /f Makefile.win installd INSTDIR=<em>dir</em>
          </code></p></div>
      
          <p>The <em>dir</em> argument to <code>INSTDIR</code> provides
          the installation directory; it can be omitted if Apache is
          to be installed into <code>\Apache22</code> (of the current
          drive).</p>
      
        
      
        <h3><a name="projectcomponents-warn" id="projectcomponents-warn">Warning about building Apache from the development tree</a></h3>
      
          
      
          <div class="note">Note only the <code>.dsp</code> files are maintained between <code>release</code>
          builds. The <code>.mak</code> files are NOT regenerated, due to the tremendous
          waste of reviewer's time. Therefore, you cannot rely on the <code>NMAKE</code>
          commands above to build revised <code>.dsp</code> project files unless you
          then export all <code>.mak</code> files yourself from the project. This is
          unnecessary if you build from within the Microsoft
          Developer Studio environment.</div>
      
        
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cmake" id="cmake">Building httpd with cmake</a></h2>
        
      
        <p>The primary documentation for this build mechanism is in the 
        <code>README.cmake</code> file in the source distribution.  Refer to that file
        for detailed instructions.</p>
      
        <p>Building httpd with cmake requires building APR and APR-util separately.
        Refer to their <code>README.cmake</code> files for instructions.</p>
      
        <p>The primary limitations of the cmake-based build are inherited from the APR-util
        project, and are listed below because of their impact on httpd:</p>
      
        <ul>
          <li>No cmake build for the APR-iconv subproject is available, and the
            APR-util cmake build cannot consume an existing APR-iconv build.  Thus,
            <code class="module"><a href="../mod/mod_charset_lite.html">mod_charset_lite</a></code> and possibly some third-party modules 
            cannot be used.</li>
          <li>The cmake build for the APR-util subproject does not support most of the
            optional DBM and DBD libraries supported by the included Visual Studio
            project files.  This limits the database backends supported by a number of
            bundled and third-party modules.</li>
        </ul>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/platform/win_compiling.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/win_compiling.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/win_compiling.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/win_compiling.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/windows.html.en���������������������������������������������������0000644�0000000�0000050�00000100702�13520523022�020240� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Using Apache HTTP Server on Microsoft Windows - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Platform Specific Notes</a></div><div id="page-content"><div id="preamble"><h1>Using Apache HTTP Server on Microsoft Windows</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/platform/windows.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/windows.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/windows.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      
          <p>This document explains how to install, configure and run
          Apache 2.4 under Microsoft Windows.  If you have questions after
          reviewing the documentation (and any event and error logs), you
          should consult the peer-supported
          <a href="http://httpd.apache.org/userslist.html">users' mailing
          list</a>.</p>
      
          <p>This document assumes that you are installing a binary
          distribution of Apache. If you want to compile Apache yourself
          (possibly to help with development or tracking down bugs),
          see <a href="win_compiling.html">Compiling Apache for Microsoft
          Windows</a>.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#req">Operating System Requirements</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#down">Downloading Apache for Windows</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cust">Customizing Apache for Windows</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#winsvc">Running Apache as a Service</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#wincons">Running Apache as a Console Application</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#test">Testing the Installation</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#windrivemap">Configuring Access to Network Resources</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#tuning">Windows Tuning</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="req" id="req">Operating System Requirements</a></h2>
          
      
          <p>The primary Windows platform for running Apache 2.4 is Windows
          2000 or later. Always obtain and
          install the current service pack to avoid operating system bugs.</p>
      
          <div class="note">Apache HTTP Server versions later than 2.2 will not run on any
          operating system earlier than Windows 2000.</div>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="down" id="down">Downloading Apache for Windows</a></h2>
          
      
          <p>The Apache HTTP Server Project itself does not provide binary releases of
          software, only source code. Individual committers <em>may</em> provide
          binary packages as a convenience, but it is not a release deliverable.</p>
          <p>If you cannot compile the Apache HTTP Server
          yourself, you can obtain a binary package from numerous binary distributions
          available on the Internet.</p>
      
          <p>Popular options for deploying Apache httpd, and, optionally, PHP
          and MySQL, on Microsoft Windows, include:</p>
          <ul>
          <li><a href="http://www.apachehaus.com/cgi-bin/download.plx">ApacheHaus</a></li>
          <li><a href="http://www.apachelounge.com/download/">Apache Lounge</a></li>
          <li><a href="http://bitnami.com/stack/wamp">Bitnami WAMP Stack</a></li>
          <li><a href="http://www.wampserver.com/">WampServer</a></li>
          <li><a href="http://www.apachefriends.org/en/xampp.html">XAMPP</a></li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cust" id="cust">Customizing Apache for Windows</a></h2>
          
      
          <p>Apache is configured by the files in the <code>conf</code>
          subdirectory. These are the same files used to configure the Unix
          version, but there are a few different directives for Apache on
          Windows. See the <a href="../mod/directives.html">directive index</a>
          for all the available directives.</p>
      
          <p>The main differences in Apache for Windows are:</p>
          <ul>
            <li><p>Because Apache for Windows is multithreaded, it does not
            use a separate process for each request, as Apache can on Unix.
            Instead there are usually only two Apache processes running: a
            parent process, and a child which handles the requests. Within
            the child process each request is handled by a separate thread.
            </p>
      
            <p>The process management directives are also different:</p>
      
            <p><code class="directive"><a href="../mod/mpm_common.html#maxconnectionsperchild">MaxConnectionsPerChild</a></code>:
            Like the Unix directive, this controls how many connections a single
            child process will serve before exiting.
            However, unlike on Unix, a replacement process is not instantly
            available.  Use the default <code>MaxConnectionsPerChild 0</code>,
            unless instructed to change the behavior to overcome a memory leak
            in third party modules or in-process applications.</p>
      
            <div class="warning"><strong>Warning: The server configuration
            file is reread when a new child process is started. If you have
            modified <code>httpd.conf</code>, the new child may not start or
            you may receive unexpected results.</strong></div>
      
            <p><code class="directive"><a href="../mod/mpm_common.html#threadsperchild">ThreadsPerChild</a></code>:
            This directive is new. It tells the server how many threads it
            should use. This is the maximum number of connections the server
            can handle at once, so be sure to set this number high enough for
            your site if you get a lot of hits. The recommended default is
            <code>ThreadsPerChild 150</code>, but this must be adjusted to
            reflect the greatest anticipated number of simultaneous
            connections to accept.</p></li>
      
            <li><p>The directives that accept filenames as arguments must use
            Windows filenames instead of Unix ones. However, because Apache
            may interpret backslashes as an "escape character" sequence, you
            should consistently use forward slashes in path names, not
            backslashes.</p></li>
      
            <li><p>While filenames are generally case-insensitive on
            Windows, URLs are still treated internally as case-sensitive
            before they are mapped to the filesystem.  For example, the
            <code class="directive"><a href="../mod/core.html#location">&lt;Location&gt;</a></code>,
            <code class="directive"><a href="../mod/mod_alias.html#alias">Alias</a></code>, and <code class="directive"><a href="../mod/mod_proxy.html#proxypass">ProxyPass</a></code> directives all use
            case-sensitive arguments.  For this reason, it is particularly
            important to use the <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> directive when attempting
            to limit access to content in the filesystem, since this
            directive applies to any content in a directory, regardless of
            how it is accessed.  If you wish to assure that only lowercase
            is used in URLs, you can use something like:</p>
      
            <pre class="prettyprint lang-config">RewriteEngine On
      RewriteMap lowercase int:tolower
      RewriteCond "%{REQUEST_URI}" "[A-Z]"
      RewriteRule "(.*)" "${lowercase:$1}" [R,L]</pre>
      </li>
      
            <li><p>When running, Apache needs write access only to the logs
            directory and any configured cache directory tree.  Due to the
            issue of case insensitive and short 8.3 format names, Apache must
            validate all path names given.  This means that each directory
            which Apache evaluates, from the drive root up to the directory
            leaf, must have read, list and traverse directory permissions.
            If Apache2.4 is installed at C:\Program Files, then the root
            directory, Program Files and Apache2.4 must all be visible
            to Apache.</p></li>
      
            <li><p>Apache for Windows contains the ability to load modules at
            runtime, without recompiling the server. If Apache is compiled
            normally, it will install a number of optional modules in the
            <code>\Apache2.4\modules</code> directory. To activate these or
            other modules, the <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code>
            directive must be used. For example, to activate the status
            module, use the following (in addition to the status-activating
            directives in <code>access.conf</code>):</p>
      
            <pre class="prettyprint lang-config">LoadModule status_module "modules/mod_status.so"</pre>
      
      
            <p>Information on <a href="../mod/mod_so.html#creating">creating
            loadable modules</a> is also available.</p></li>
      
            <li><p>Apache can also load ISAPI (Internet Server Application
            Programming Interface) extensions such as those used by Microsoft
            IIS and other Windows servers. <a href="../mod/mod_isapi.html">More
            information is available</a>. Note that Apache <strong>cannot</strong>
            load ISAPI Filters, and ISAPI Handlers with some Microsoft feature
            extensions will not work.</p></li>
      
            <li><p>When running CGI scripts, the method Apache uses to find
            the interpreter for the script is configurable using the
            <code class="directive"><a href="../mod/core.html#scriptinterpretersource">ScriptInterpreterSource</a></code>
            directive.</p></li>
      
            <li><p>Since it is often difficult to manage files with names
            like <code>.htaccess</code> in Windows, you may find it useful to
            change the name of this per-directory configuration file using
            the <code class="directive"><a href="../mod/core.html#accessfilename">AccessFilename</a></code>
            directive.</p></li>
      
            <li><p>Any errors during Apache startup are logged into the
            Windows event log when running on Windows NT. This mechanism
            acts as a backup for those situations where Apache is not yet
            prepared to use the <code>error.log</code> file. You can
            review the Windows Application Event Log by using the Event Viewer,
            e.g. Start - Settings - Control Panel - Administrative Tools
            - Event Viewer.</p></li>
          </ul>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="winsvc" id="winsvc">Running Apache as a Service</a></h2>
          
      
          <p>Apache comes with a utility called the Apache Service Monitor.
          With it you can see and manage the state of all installed Apache
          services on any machine on your network. To be able to manage an
          Apache service with the monitor, you have to first install the
          service (either automatically via the installation or manually).
          </p>
      
          <p>You can install Apache as a Windows NT service as follows from
          the command prompt at the Apache <code>bin</code> subdirectory:</p>
      
          <div class="example"><p><code>
            httpd.exe -k install
          </code></p></div>
      
          <p>If you need to specify the name of the service you want to
          install, use the following command. You have to do this if you
          have several different service installations of Apache on your
          computer. If you specify a name during the install, you have to
          also specify it during any other -k operation.</p>
      
          <div class="example"><p><code>
            httpd.exe -k install -n "MyServiceName"
          </code></p></div>
      
          <p>If you need to have specifically named configuration files for
          different services, you must use this:</p>
      
          <div class="example"><p><code>
            httpd.exe -k install -n "MyServiceName" -f "c:\files\my.conf"
          </code></p></div>
      
          <p>If you use the first command without any special parameters except
          <code>-k install</code>, the service will be called <code>Apache2.4</code>
          and the configuration will be assumed to be <code>conf\httpd.conf</code>.
          </p>
      
          <p>Removing an Apache service is easy. Just use:</p>
      
          <div class="example"><p><code>
            httpd.exe -k uninstall
          </code></p></div>
      
          <p>The specific Apache service to be uninstalled can be specified by using:</p>
      
          <div class="example"><p><code>
            httpd.exe -k uninstall -n "MyServiceName"
          </code></p></div>
      
          <p>Normal starting, restarting and shutting down of an Apache
          service is usually done via the Apache Service Monitor, by using
          commands like <code>NET START Apache2.4</code> and <code>NET STOP
          Apache2.4</code> or via normal Windows service management. Before
          starting Apache as a service by any means, you should test the
          service's configuration file by using:</p>
      
          <div class="example"><p><code>
            httpd.exe -n "MyServiceName" -t
          </code></p></div>
      
          <p>You can control an Apache service by its command line switches,
          too. To start an installed Apache service you'll use this:</p>
      
          <div class="example"><p><code>
            httpd.exe -k start -n "MyServiceName"
          </code></p></div>
      
          <p>To stop an Apache service via the command line switches, use
          this:</p>
      
          <div class="example"><p><code>
            httpd.exe -k stop -n "MyServiceName"
          </code></p></div>
      
          <p>or</p>
      
          <div class="example"><p><code>
            httpd.exe -k shutdown -n "MyServiceName"
          </code></p></div>
      
          <p>You can also restart a running service and force it to reread
          its configuration file by using:</p>
      
          <div class="example"><p><code>
            httpd.exe -k restart -n "MyServiceName"
          </code></p></div>
      
          <p>By default, all Apache services are registered to run as the
          system user (the <code>LocalSystem</code> account). The
          <code>LocalSystem</code> account has no privileges to your network
          via any Windows-secured mechanism, including the file system, named
          pipes, DCOM, or secure RPC. It has, however, wide privileges locally.
          </p>
      
          <div class="warning"><strong>Never grant any network privileges to
          the <code>LocalSystem</code> account! If you need Apache to be able
          to access network resources, create a separate account for Apache as
          noted below.</strong></div>
      
          <p>It is recommended that users create a separate account for running
          Apache service(s). If you have to access network resources via Apache,
          this is required.</p>
      
          <ol>
            <li>Create a normal domain user account, and be sure to
            memorize its password.</li>
      
            <li>Grant the newly-created user a privilege of <code>Log on
            as a service</code> and <code>Act as part of the operating
            system</code>. On Windows NT 4.0 these privileges are granted via
            User Manager for Domains, but on Windows 2000 and XP you probably
            want to use Group Policy for propagating these settings. You can
            also manually set these via the Local Security Policy MMC snap-in.
            </li>
      
            <li>Confirm that the created account is a member of the Users
            group.</li>
      
            <li>Grant the account read and execute (RX) rights to all document
            and script folders (<code>htdocs</code> and <code>cgi-bin</code>
            for example).</li>
      
            <li>Grant the account change (RWXD) rights to the
            Apache <code>logs</code> directory.</li>
      
            <li>Grant the account read and execute (RX) rights to the
            <code>httpd.exe</code> binary executable.</li>
          </ol>
      
          <div class="note">It is usually a good practice to grant the user the Apache
          service runs as read and execute (RX) access to the whole Apache2.4
          directory, except the <code>logs</code> subdirectory, where the
          user has to have at least change (RWXD) rights.</div>
      
          <p>If you allow the account to log in as a user and as a service,
          then you can log on with that account and test that the account has
          the privileges to execute the scripts, read the web pages, and that
          you can start Apache in a console window. If this works, and you
          have followed the steps above, Apache should execute as a service
          with no problems.</p>
      
          <div class="note"><strong>Error code 2186</strong> is a good indication that
          you need to review the "Log On As" configuration for the service,
          since Apache cannot access a required network resource. Also, pay
          close attention to the privileges of the user Apache is
          configured to run as.</div>
      
          <p>When starting Apache as a service you may encounter an error
          message from the Windows Service Control Manager. For example,
          if you try to start Apache by using the Services applet in the
          Windows Control Panel, you may get the following message:</p>
      
          <div class="example"><p><code>
            Could not start the Apache2.4 service on \\COMPUTER <br />
            Error 1067; The process terminated unexpectedly.
          </code></p></div>
      
          <p>You will get this generic error if there is any problem with
          starting the Apache service. In order to see what is really causing
          the problem you should follow the instructions for Running Apache
          for Windows from the Command Prompt.</p>
      
          <p>If you are having problems with the service, it is suggested
          you follow the instructions below to try starting httpd.exe from
          a console window, and work out the errors before struggling to
          start it as a service again.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="wincons" id="wincons">Running Apache as a Console Application</a></h2>
          
      
          <p>Running Apache as a service is usually the recommended way to
          use it, but it is sometimes easier to work from the command line,
          especially during initial configuration and testing.</p>
      
          <p>To run Apache from the command line as a console application,
          use the following command:</p>
      
          <div class="example"><p><code>
            httpd.exe
          </code></p></div>
      
          <p>Apache will execute, and will remain running until it is stopped
          by pressing Control-C.</p>
      
          <p>You can also run Apache via the shortcut Start Apache in Console
          placed to <code>Start Menu --&gt; Programs --&gt; Apache HTTP Server
          2.4.xx --&gt; Control Apache Server</code> during the installation.
          This will open a console window and start Apache inside it. If you
          don't have Apache installed as a service, the window will remain
          visible until you stop Apache by pressing Control-C in the console
          window where Apache is running in. The server will exit in a few
          seconds. However, if you do have Apache installed as a service, the
          shortcut starts the service. If the Apache service is running
          already, the shortcut doesn't do anything.</p>
      
          <p>If Apache is running as a service, you can tell it to stop by opening another console
          window and entering:</p>
      
          <div class="example"><p><code>
            httpd.exe -k shutdown
          </code></p></div>
      
          <p>Running as a service should be preferred over running in a
          console window because this lets Apache end any current operations
          and clean up gracefully.</p>
      
          <p>But if the server is running in a console window, you can
          only stop it by pressing Control-C in the same window.</p>
      
          <p>You can also tell Apache to restart. This forces it to reread
          the configuration file. Any operations in progress are allowed to
          complete without interruption. To restart Apache, either press
          Control-Break in the console window you used for starting Apache,
          or enter</p>
      
          <div class="example"><p><code>
            httpd.exe -k restart
          </code></p></div>
      
          <p>if the server is running as a service.</p>
      
          <div class="note">Note for people familiar with the Unix version of Apache:
          these commands provide a Windows equivalent to <code>kill -TERM
          <em>pid</em></code> and <code>kill -USR1 <em>pid</em></code>. The
          command line option used, <code>-k</code>, was chosen as a reminder
          of the <code>kill</code> command used on Unix.</div>
      
          <p>If the Apache console window closes immediately or unexpectedly
          after startup, open the Command Prompt from the Start Menu --&gt;
          Programs. Change to the folder to which you installed Apache, type
          the command <code>httpd.exe</code>, and read the error message. Then
          change to the logs folder, and review the <code>error.log</code>
          file for configuration mistakes. Assuming httpd was installed into
          <code>C:\Program Files\Apache Software Foundation\Apache2.4\</code>,
          you can do the following:</p>
      
          <div class="example"><p><code>
            c: <br />
            cd "\Program Files\Apache Software Foundation\Apache2.4\bin" <br />
            httpd.exe
          </code></p></div>
      
          <p>Then wait for Apache to stop, or press Control-C. Then enter the
          following:</p>
      
          <div class="example"><p><code>
            cd ..\logs <br />
            more &lt; error.log
          </code></p></div>
      
          <p>When working with Apache it is important to know how it will
          find the configuration file. You can specify a configuration file
          on the command line in two ways:</p>
      
          <ul>
            <li><p><code>-f</code> specifies an absolute or relative path to
            a particular configuration file:</p>
      
            <div class="example"><p><code>
              httpd.exe -f "c:\my server files\anotherconfig.conf"
            </code></p></div>
      
            <p>or</p>
      
            <div class="example"><p><code>
              httpd.exe -f files\anotherconfig.conf
            </code></p></div></li>
      
            <li><p><code>-n</code> specifies the installed Apache service
            whose configuration file is to be used:</p>
      
            <div class="example"><p><code>
              httpd.exe -n "MyServiceName"
            </code></p></div>
            </li>
          </ul>
      
          <p>In both of these cases, the proper
          <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> should be set in
          the configuration file.</p>
      
          <p>If you don't specify a configuration file with <code>-f</code>
          or <code>-n</code>, Apache will use the file name compiled into the
          server, such as <code>conf\httpd.conf</code>. This built-in path
          is relative to the installation directory. You can verify the compiled
          file name from a value labelled as <code>SERVER_CONFIG_FILE</code> when
          invoking Apache with the <code>-V</code> switch, like this:</p>
      
          <div class="example"><p><code>
            httpd.exe -V
          </code></p></div>
      
          <p>Apache will then try to determine its <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> by trying the following, in this order:</p>
      
          <ol>
            <li>A <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> directive
            via the <code>-C</code> command line switch.</li>
      
            <li>The <code>-d</code> switch on the command line.</li>
      
            <li>Current working directory.</li>
      
            <li>A registry entry which was created if you did a binary
            installation.</li>
      
            <li>The server root compiled into the server. This is <code>
            /apache</code> by default, you can verify it by using <code>
            httpd.exe -V</code> and looking for a value labelled as
            <code>HTTPD_ROOT</code>.</li>
          </ol>
      
          <p>If you did not do a binary install, Apache will in some
          scenarios complain about the missing registry key. This warning can
          be ignored if the server was otherwise able to find its
          configuration file.</p>
      
          <p>The value of this key is the
          <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> directory which
          contains the <code>conf</code> subdirectory. When Apache starts it
          reads the <code>httpd.conf</code> file from that directory. If
          this file contains a <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>
          directive which contains a different directory from the one
          obtained from the registry key above, Apache will forget the
          registry key and use the directory from the configuration file. If
          you copy the Apache directory or configuration files to a new
          location it is vital that you update the
          <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> directive in the
          <code>httpd.conf</code> file to reflect the new location.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="test" id="test">Testing the Installation</a></h2>
          
      
          <p>After starting Apache (either in a console window or as a
          service) it will be listening on port 80 (unless you changed the
          <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> directive in the
          configuration files or installed Apache only for the current user).
          To connect to the server and access the default page, launch a
          browser and enter this URL:</p>
      
          <div class="example"><p><code>
            http://localhost/
          </code></p></div>
      
          <p>Apache should respond with a welcome page and you should see
          "It Works!". If nothing happens or you get an error, look in the
          <code>error.log</code> file in the <code>logs</code> subdirectory.
          If your host is not connected to the net, or if you have serious
          problems with your DNS (Domain Name Service) configuration, you
          may have to use this URL:</p>
      
          <div class="example"><p><code>
            http://127.0.0.1/
          </code></p></div>
      
          <p>If you happen to be running Apache on an alternate port, you
          need to explicitly put that in the URL:</p>
      
          <div class="example"><p><code>
            http://127.0.0.1:8080/
          </code></p></div>
      
          <p>Once your basic installation is working, you should configure it
          properly by editing the files in the <code>conf</code> subdirectory.
          Again, if you change the configuration of the Windows NT service
          for Apache, first attempt to start it from the command line to
          make sure that the service starts with no errors.</p>
      
          <p>Because Apache <strong>cannot</strong> share the same port with
          another TCP/IP application, you may need to stop, uninstall or reconfigure
          certain other services before running Apache. These conflicting
          services include other WWW servers, some firewall implementations,
          and even some client applications (such as Skype) which will use port
          80 to attempt to bypass firewall issues.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="windrivemap" id="windrivemap">Configuring Access to Network Resources</a></h2>
          
      
        <p>Access to files over the network can be specified using two
        mechanisms provided by Windows:</p>
      
        <dl>
          <dt>Mapped drive letters</dt>
          <dd>e.g., <code>Alias "/images/" "Z:/"</code></dd>
      
          <dt>UNC paths</dt>
          <dd>e.g., <code>Alias "/images/" "//imagehost/www/images/"</code></dd>
        </dl>
      
        <p>Mapped drive letters allow the administrator to maintain the
        mapping to a specific machine and path outside of the Apache httpd
        configuration.  However, these mappings are associated only with
        interactive sessions and are not directly available to Apache httpd
        when it is started as a service.  <strong>Use only UNC paths for
        network resources in httpd.conf</strong> so that the resources can
        be accessed consistently regardless of how Apache httpd is started.
        (Arcane and error prone procedures may work around the restriction
        on mapped drive letters, but this is not recommended.)</p>
      
        <div class="example"><h3>Example DocumentRoot with UNC path</h3><pre class="prettyprint lang-config">DocumentRoot "//dochost/www/html/"</pre>
      </div>
      
        <div class="example"><h3>Example DocumentRoot with IP address in UNC path</h3><pre class="prettyprint lang-config">DocumentRoot "//192.168.1.50/docs/"</pre>
      </div>
      
        <div class="example"><h3>Example Alias and corresponding Directory with UNC path</h3><pre class="prettyprint lang-config">Alias "/images/" "//imagehost/www/images/"
      
      &lt;Directory "//imagehost/www/images/"&gt;
      #...
      &lt;/Directory&gt;</pre>
      </div>
      
        <p>When running Apache httpd as a service, you must create a
        separate account in order to access network resources, as described
        above.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="tuning" id="tuning">Windows Tuning</a></h2>
          
          <ul>
            <li><p>If more than a few dozen piped loggers are used on an operating system
            instance, scaling up the "desktop heap" is often necessary. For
            more detailed information, refer to the <a href="../logs.html#piped">piped logging</a> documentation.</p></li>
          </ul>
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/platform/windows.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/windows.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/windows.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/windows.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������httpd-2.4.41/docs/manual/platform/netware.html.ko.euc-kr��������������������������������������������0000644�0000000�0000050�00000064525�13412755316�021440� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Novell NetWare¿¡¼­ ¾ÆÆÄÄ¡ »ç¿ëÇϱâ - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Platform Specific Notes</a></div><div id="page-content"><div id="preamble"><h1>Novell NetWare¿¡¼­ ¾ÆÆÄÄ¡ »ç¿ëÇϱâ</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/platform/netware.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/netware.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/netware.html" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      
          <p>ÀÌ ¹®¼­´Â Novell NetWare 6.0 À̻󿡼­ ¾ÆÆÄÄ¡ 2.0À» ¼³Ä¡,
          ¼³Á¤, ½ÇÇàÇÏ´Â ¹æ¹ýÀ» ¼³¸íÇÑ´Ù. ¹ö±×¸¦ ã¾Ò°Å³ª ´Ù¸¥ ¹æ¹ýÀ¸·Î
          µ½°í½Í´Ù¸é, <a href="http://httpd.apache.org/bug_report.html">¹ö±×
          º¸°í ÆäÀÌÁö</a>¸¦ ÀÌ¿ëÇÏ±æ ¹Ù¶õ´Ù.</p>
      
          <p>¹ö±× º¸°í ÆäÀÌÁö³ª dev-httpd ¸ÞÀϸµ¸®½ºÆ®´Â ¾ÆÆÄÄ¡ ¼³Á¤°ú
          ½ÇÇà¿¡ ´ëÇÑ Áú¹®À» ´äÇÏÁö <em>¾Ê´Â´Ù</em>. ¹ö±×¸¦ º¸°íÇϱâ
          Àü¿¡ ¸ÕÀú ÀÌ ¹®¼­¿Í <a href="../faq/">ÀÚÁÖ ¹°¾îº¸´Â Áú¹®
          (FAQ)</a> ÆäÀÌÁö, ´Ù¸¥ °ü·Ã¹®¼­¸¦ »ìÆìºÁ¶ó. ±×·¡µµ ±Ã±ÝÇÑ
          Á¡À̳ª ¹®Á¦°¡ ÀÖ´Ù¸é, NetWare¿¡¼­ ¾ÆÆÄÄ¡ »ç¿ë¿¡ ´ëÇÑ ¾î·Æ°í
          »õ·Î¿î Áú¹®À» ´äÇØÁÙ ¸¹Àº ¾ÆÆÄÄ¡ »ç¿ëÀÚ°¡ ÀÖ´Â <a href="news://developer-forums.novell.com/novell.devsup.webserver">
          novell.devsup.webserver</a> ´º½º±×·ì¿¡ ±ÛÀ» ¿Ã¸®±æ ¹Ù¶õ´Ù.</p>
      
          <p>ÀÌ ¹®¼­´Â ¹ÙÀ̳ʸ® ¹èÆ÷º»À¸·Î ¾ÆÆÄÄ¡¸¦ ¼³Ä¡Çß´Ù°í °¡Á¤ÇÑ´Ù.
          (¾Æ¸¶µµ °³¹ß¿¡ µµ¿òÀ» Áְųª ¹ö±×¸¦ ã±âÀ§ÇØ) Á÷Á¢ ¾ÆÆÄÄ¡¸¦
          ÄÄÆÄÀÏÇÏ·Á¸é ¾Æ·¡ <a href="#comp">NetWare¿¡¼­ ¾ÆÆÄÄ¡
          ÄÄÆÄÀÏÇϱâ</a> ÀýÀ» Âü°íÇ϶ó.</p>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#req">¿ä±¸Á¶°Ç</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#down">NetWare¿ë ¾ÆÆÄÄ¡ ´Ù¿î¹Þ±â</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#inst">NetWare¿ë ¾ÆÆÄÄ¡ ¼³Ä¡Çϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#run">NetWare¿ë ¾ÆÆÄÄ¡ ½ÇÇàÇϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#use">NetWare¿ë ¾ÆÆÄÄ¡ ¼³Á¤Çϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#comp">Netware¿ë ¾ÆÆÄÄ¡ ÄÄÆÄÀÏÇϱâ</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="req" id="req">¿ä±¸Á¶°Ç</a></h2>
      
          
      
          <p>¾ÆÆÄÄ¡ 2.0Àº NetWare 6.0 service pack 3 À̻󿡼­ µ¿ÀÛÇϵµ·Ï
          ¼³°èµÇ¾ú´Ù. SP3º¸´Ù ³·Àº service packÀ» »ç¿ëÇÑ´Ù¸é ÃÖ½Å
          <a href="http://developer.novell.com/ndk/libc.htm">NetWare
          Libraries for C (LibC)</a>¸¦ ¼³Ä¡ÇØ¾ß ÇÑ´Ù.</p>
      
          <p>NetWare service packÀº <a href="http://support.novell.com/misc/patlst.htm#nw">¿©±â</a>¿¡
          ÀÖ´Ù.</p>
      
          <p>ÃֽŠservice packÀ̳ª ÃֽйöÀü <a href="http://developer.novell.com/ndk/libc.htm">NetWare
          Libraries for C (LibC)</a>¸¦ ¼³Ä¡Çß´Ù¸é NetWare 5.1 ȯ°æ¿¡¼­µµ
          NetWare¿ë ¾ÆÆÄÄ¡ 2.0À» ½ÇÇàÇÒ ¼ö ÀÖ´Ù. <strong>°æ°í:</strong>
          NetWare¿ë ¾ÆÆÄÄ¡ 2.0Àº ÀÌ È¯°æÀ» °í·ÁÇÏÁö ¾Ê¾Ò°í Å×½ºÆ®ÇÏÁö
          ¾Ê¾Ò´Ù.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="down" id="down">NetWare¿ë ¾ÆÆÄÄ¡ ´Ù¿î¹Þ±â</a></h2>
      
          
      
          <p>¾ÆÆÄÄ¡ ÃֽйöÀü¿¡ ´ëÇÑ Á¤º¸´Â <a href="http://www.apache.org/">http://www.apache.org/</a>¿¡¼­
          (¾ÆÆÄÄ¡ À¥¼­¹ö) ãÀ» ¼ö ÀÖ´Ù. ¿©±â¿¡´Â ÇöÀç ¹öÀü°ú ÃÖ±Ù
          ¾ËÆÄ/º£Å¸Å×½ºÆ® ¹öÀü, ¹Ì·¯ À¥»çÀÌÆ®¿Í ftp »çÀÌÆ® Á¤º¸°¡
          ÀÖ´Ù. NetWare¿ë ¾ÆÆÄÄ¡ 2.0ÀÇ ÃֽйÙÀ̳ʸ® ¹èÆ÷º»Àº <a href="http://www.apache.org/dist/httpd/binaries/netware">¿©±â</a>¿¡¼­
          ´Ù¿î¹ÞÀ» ¼ö ÀÖ´Ù.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="inst" id="inst">NetWare¿ë ¾ÆÆÄÄ¡ ¼³Ä¡Çϱâ</a></h2>
      
          
      
          <p>ÇöÀç NetWare¿ë ¾ÆÆÄÄ¡ ¼³Ä¡ÇÁ·Î±×·¥Àº ¾ø´Ù. NetWare¿ë
          ¾ÆÆÄÄ¡ 2.0 ¼Ò½º¸¦ Á÷Á¢ ÄÄÆÄÀÏÇÑ´Ù¸é ÆÄÀÏÀ» ¼­¹ö·Î Á÷Á¢
          º¹»çÇØÁà¾ß ÇÑ´Ù.</p>
      
          <p>¹ÙÀ̳ʸ®·Î ´Ù¿î¹ÞÀº NetWare¿ë ¾ÆÆÄÄ¡¸¦ ¼³Ä¡ÇÏ´Â °úÁ¤Àº
          ´ÙÀ½°ú °°´Ù (<code>sys:/apache2</code>¿¡ ¼³Ä¡ÇÑ´Ù°í °¡Á¤ÇÑ´Ù):</p>
      
          <ul>
            <li>¹ÙÀ̳ʸ®·Î ´Ù¿î¹ÞÀº ¾ÐÃàÆÄÀÏÀ» <code>SYS:</code> º¼·ý
            ÃÖ»óÀ§ µð·ºÅ丮¿¡ Ǭ´Ù (´Ù¸¥ º¼·ý¿¡ ¼³Ä¡Çصµ µÈ´Ù)</li>
      
            <li><code>httpd.conf</code> ÆÄÀÏÀ» ¼öÁ¤ÇÏ¿© <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>¿Í <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code>°ú ÆÄÀϰæ·Î °ªÀ» ¼­¹ö¿¡
            ¾Ë¸Â°Ô ÁöÁ¤ÇÑ´Ù</li>
      
            <li>¿¹¸¦ µé¾î <div class="example"><p><code>SEARCH ADD SYS:\APACHE2</code></p></div>¿Í
            °°ÀÌ °Ë»ö°æ·Î¿¡ <code>SYS:/APACHE2</code>¸¦ Ãß°¡ÇÑ´Ù
            </li>
      
          </ul>
      
          <p>Á÷Á¢ ¼Ò½º¸¦ ÄÄÆÄÀÏÇÑ °æ¿ì NetWare¿¡ ¾ÆÆÄÄ¡¸¦ ¼³Ä¡ÇÏ´Â
          ¹æ¹ýÀº ´ÙÀ½°ú °°´Ù (<code>sys:/apache2</code>¿¡ ¼³Ä¡ÇÑ´Ù°í
          °¡Á¤ÇÑ´Ù):</p>
      
          <ul>
            <li>NetWare º¼·ý¿¡ <code>Apache2</code>¶ó´Â µð·ºÅ丮¸¦
            ¸¸µç´Ù</li>
      
            <li><code>APACHE2.NLM</code>°ú <code>APRLIB.NLM</code>À»
            <code>SYS:/APACHE2</code>¿¡ º¹»çÇÑ´Ù</li>
      
            <li><code>SYS:/APACHE2</code> ¾Æ·¡¿¡ <code>BIN</code>À̶ó´Â
            µð·ºÅ丮¸¦ ¸¸µç´Ù</li>
      
            <li><code>HTDIGEST.NLM</code>, <code>HTPASSWD.NLM</code>, 
            <code>HTDBM.NLM</code>, <code>LOGRES.NLM</code>,
            <code>ROTLOGS.NLM</code>À» <code>SYS:/APACHE2/BIN</code>¿¡
            º¹»çÇÑ´Ù</li>
      
            <li><code>SYS:/APACHE2</code> ¾Æ·¡¿¡ <code>CONF</code>¶ó´Â
            µð·ºÅ丮¸¦ ¸¸µç´Ù</li>
      
            <li><code>HTTPD-STD.CONF</code> ÆÄÀÏÀ»
            <code>SYS:/APACHE2/CONF</code>¿¡ º¹»çÇÏ°í ÆÄÀϸíÀ»
            <code>HTTPD.CONF</code>·Î º¯°æÇÑ´Ù</li>
      
            <li><code>MIME.TYPES</code>, <code>CHARSET.CONV</code>,
            <code>MAGIC</code> ÆÄÀÏÀ» <code>SYS:/APACHE2/CONF</code>
            µð·ºÅ丮¿¡ º¹»çÇÑ´Ù</li>
      
            <li><code>\HTTPD-2.0\DOCS\ICONS</code>¿¡ ÀÖ´Â ¸ðµç ÆÄÀϰú
            ÇÏÀ§µð·ºÅ丮¸¦ <code>SYS:/APACHE2/ICONS</code>·Î º¹»çÇÑ´Ù</li>
      
            <li><code>\HTTPD-2.0\DOCS\MANUAL</code>¿¡ ÀÖ´Â ¸ðµç ÆÄÀϰú
            ÇÏÀ§µð·ºÅ丮¸¦ <code>SYS:/APACHE2/MANUAL</code>·Î º¹»çÇÑ´Ù</li>
      
            <li><code>\HTTPD-2.0\DOCS\ERROR</code>¿¡ ÀÖ´Â ¸ðµç ÆÄÀϰú
            ÇÏÀ§µð·ºÅ丮¸¦ <code>SYS:/APACHE2/ERROR</code>·Î º¹»çÇÑ´Ù</li>
      
            <li><code>\HTTPD-2.0\DOCS\DICROOT</code>¿¡ ÀÖ´Â ¸ðµç ÆÄÀϰú
            ÇÏÀ§µð·ºÅ丮¸¦ <code>SYS:/APACHE2/HTDOCS</code>·Î º¹»çÇÑ´Ù</li>
      
            <li>¼­¹ö¿¡ <code>SYS:/APACHE2/LOGS</code> µð·ºÅ丮¸¦ ¸¸µç´Ù</li>
      
            <li>¼­¹ö¿¡ <code>SYS:/APACHE2/APACHE2/CGI-BIN</code>À̶õ
            µð·ºÅ丮¸¦ ¸¸µç´Ù</li>
      
            <li><code>SYS:/APACHE2/MODULES</code> µð·ºÅ丮¸¦ ¸¸µé°í
            ¸ðµç nlm ¸ðµâÀ» <code>modules</code> µð·ºÅ丮·Î º¹»çÇÑ´Ù</li>
      
            <li><code>HTTPD.CONF</code> ÆÄÀÏÀÇ ¸ðµç <code>@@Value@@</code>
            Ç¥½Ã¸¦ ÀûÀýÇÑ ¼³Á¤À¸·Î ´ëüÇÑ´Ù</li>
      
            <li><div class="example"><p><code>SEARCH ADD SYS:\APACHE2</code></p></div> °°ÀÌ °Ë»ö°æ·Î¿¡
            <code>SYS:/APACHE2</code>¸¦ Ãß°¡ÇÑ´Ù
            </li>
          </ul>
      
          <p>±âº» <code>SYS</code> º¼·ýÀÌ ¾Æ´Ñ ´Ù¸¥ º¼·ý¿¡µµ ¾ÆÆÄÄ¡¸¦
          ¼³Ä¡ÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>makefile ¸í·É¾î¿¡ "install" Ű¿öµå¸¦ »ç¿ëÇϸé ÄÄÆÄÀϽÃ
          ÀÚµ¿À¸·Î <code>DIST</code> ÇÏÀ§µð·ºÅ丮¿¡ ¿ÏÀüÇÑ ¹èÆ÷º»À»
          ¸¸µç´Ù. makefile·Î ¸¸µç ¹èÆ÷º»À» NetWare º¼·ý ÃÖ»óÀ§ µð·ºÅ丮·Î
          º¹»çÇÏ¸é ¾ÆÆÄÄ¡°¡ ¼³Ä¡µÈ´Ù (¾Æ·¡ <a href="#comp">NetWare¿ë
          ¾ÆÆÄÄ¡ ÄÄÆÄÀÏÇϱâ</a> Âü°í).</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="run" id="run">NetWare¿ë ¾ÆÆÄÄ¡ ½ÇÇàÇϱâ</a></h2>
      
          
      
          <p>¾ÆÆÄÄ¡¸¦ ½ÃÀÛÇÏ·Á¸é Äֿܼ¡¼­ <code>apache</code>¸¦ ÀÔ·ÂÇϸé
          µÈ´Ù. ±×·¯¸é ¿î¿µÃ¼Á¦ ÁÖ¼Ò¿µ¿ª¿¡ ¾ÆÆÄÄ¡¸¦ ÀоîµéÀδÙ.
          º¸È£ÁÖ¼Ò¿µ¿ª¿¡ ¾ÆÆÄÄ¡¸¦ ÀоîµéÀÌ·Á¸é ´ÙÀ½°ú °°ÀÌ load ¸í·É¾î·Î
          ÁÖ¼Ò¿µ¿ªÀ» ÁöÁ¤ÇÑ´Ù:</p>
      
          <div class="example"><p><code>
            load address space = apache2 apache2
          </code></p></div>
      
          <p>±×·¯¸é ¾ÆÆÄÄ¡¸¦ apache2¶ó´Â ÁÖ¼Ò¿µ¿ª¿¡ ÀоîµéÀδÙ.
          NetWare´Â ¿©·¯ ¾ÆÆÄÄ¡¸¦ °¢°¢ ´Ù¸¥ º¸È£ÁÖ¼Ò¿µ¿ª¿¡ Àоîµé¿©¼­
          ¿©·¯ ¾ÆÆÄÄ¡¸¦ µ¿½Ã¿¡ ½ÇÇàÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>¾ÆÆÄÄ¡°¡ ½ÃÀÛÇϸé (¼³Á¤ÆÄÀÏ¿¡¼­ <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> Áö½Ã¾î¸¦ ¼öÁ¤ÇÏÁö
          ¾Ê´ÂÇÑ) Æ÷Æ® 80¹øÀ» ±â´Ù¸°´Ù. ºê¶ó¿ìÀú¸¦ ½ÃÀÛÇÏ¿© ¼­¹ö¸í
          ȤÀº ¼­¹ö ÁÖ¼Ò¸¦ ÀÔ·ÂÇÏ¸é ¼­¹ö¿¡ Á¢¼ÓÇÏ¿© ±âº»ÆäÀÌÁö¿¡
          Á¢±ÙÇÑ´Ù. ¾ÆÆÄÄ¡ ¼³¸í¼­ ¸µÅ©°¡ Àִ ȯ¿µÆäÀÌÁö°¡ ³ª¿Í¾ß
          ÇÑ´Ù. ¾Æ¹« Àϵµ ¾ø°Å³ª ¿À·ù°¡ ¹ß»ýÇϸé <code>logs</code>
          µð·ºÅ丮¿¡ ÀÖ´Â <code>error_log</code> ÆÄÀÏÀ» »ìÆìºÁ¶ó.</p>
      
          <p>±âº» ¼³Ä¡°¡ µ¿ÀÛÇϸé <code>conf</code> µð·ºÅ丮¿¡ ÀÖ´Â
          ÆÄÀÏÀ» ÀûÀýÈ÷ ¼³Á¤ÇÑ´Ù.</p>
      
          <p>¿î¿µÃ¼Á¦ ÁÖ¼Ò¿µ¿ª¿¡¼­ ½ÇÇàÁßÀÎ ¾ÆÆÄÄ¡¸¦ ³»¸±·Á¸é Äֿܼ¡
          ´ÙÀ½°ú °°ÀÌ ÀÔ·ÂÇÑ´Ù:</p>
      
          <div class="example"><p><code>
            unload apache2
          </code></p></div>
      
          <p>ȤÀº</p>
      
          <div class="example"><p><code>
            apache2 shutdown
          </code></p></div>
      
          <p>º¸È£ÁÖ¼Ò¿µ¿ª¿¡¼­ ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇß´Ù¸é unload ¸í·É¾î¿¡
          ÁÖ¼Ò¿µ¿ªÀ» ÁöÁ¤ÇÑ´Ù:</p>
      
          <div class="example"><p><code>
            unload address space = apache2 apache2
          </code></p></div>
      
          <p>¾ÆÆÄÄ¡°¡ ¼³Á¤ÆÄÀÏ À§Ä¡¸¦ ã´Â ¹æ¹ýÀ» ¾Ë¾ÆµÎ¾î¾ß ÇÑ´Ù.
          ¸í·ÉÇà¿¡¼­ ¼³Á¤ÆÄÀÏÀ» ÁöÁ¤ÇÏ´Â ¹æ¹ýÀº µÎ°¡Áö´Ù:</p>
      
          <ul>
            <li><code>-f</code>´Â ƯÁ¤ ¼³Á¤ÆÄÀÏ °æ·Î¸¦ ÁöÁ¤ÇÑ´Ù</li>
          </ul>
      
          <div class="example"><p><code>
            apache2 -f "vol:/my server/conf/my.conf"
          </code></p></div>
      
          <div class="example"><p><code>
            apache -f test/test.conf
          </code></p></div>
      
          <p>ÀÌ °æ¿ì ¼³Á¤ÆÄÀÏÀº ¿Ã¹Ù¸¥ <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>¸¦ ¼³Á¤ÇØ¾ß ÇÑ´Ù.</p>
      
          <p><code>-f</code>·Î ¼³Á¤ÆÄÀϸíÀ» ÁöÁ¤ÇÏÁö ¾ÊÀ¸¸é, ¾ÆÆÄÄ¡´Â
          ¼­¹ö¿¡ ÄÄÆÄÀÏµÈ ÆÄÀϸíÀ» (º¸Åë <code>conf/httpd.conf</code>)
          »ç¿ëÇÑ´Ù. <code>-V</code> ¿É¼ÇÀ¸·Î ¾ÆÆÄÄ¡¸¦ ½ÃÀÛÇϸé
          <code>SERVER_CONFIG_FILE</code>À̶ó´Â Ç׸ñÀ» º¸¿©ÁØ´Ù.
          ¾ÆÆÄÄ¡´Â ´ÙÀ½ ¼ø¼­´ë·Î <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>¸¦ ã´Â´Ù:</p>
      
          <ul>
            <li><code>-C</code> ¿É¼ÇÀÇ <code>ServerRoot</code> Áö½Ã¾î.</li>
      
            <li>¸í·ÉÇàÀÇ <code>-d</code> ¿É¼Ç.</li>
      
            <li>ÇöÀç µð·ºÅ丮</li>
      
            <li>¼­¹ö¿¡ ÄÄÆÄÀÏµÈ server root.</li>
          </ul>
      
          <p>¼­¹ö¿¡ ÄÄÆÄÀÏµÈ server root´Â º¸Åë
          <code>sys:/apache2</code>ÀÌ´Ù. <code>-V</code> ¿É¼ÇÀ¸·Î
          ¾ÆÆÄÄ¡¸¦ ½ÃÀÛÇϸé <code>HTTPD_ROOT</code>¶ó´Â Ç׸ñÀ» º¸¿©ÁØ´Ù.</p>
      
          <p>NetWare¿ë ¾ÆÆÄÄ¡ 2.0¿¡´Â ½ÇÇàÁßÀÎ À¥¼­¹ö¸¦ Á×À̰ųª Á¤º¸¸¦
          ¾Ë·ÁÁÖ´Â ¸í·ÉÇà Áö½Ã¾î°¡ ÀÖ´Ù. À̵é Áö½Ã¾î´Â ¾ÆÆÄÄ¡ µ¿ÀÛÁß¿¡¸¸
          »ç¿ëÇÒ ¼ö ÀÖ´Ù. Áö½Ã¾î ¾Õ¿¡´Â <code>APACHE2</code> Ű¿öµå¸¦
          ºÙ¿©¾ß ÇÑ´Ù.</p>
      
          <dl>
            <dt>RESTART</dt>
            <dd>¸ðµç ¾²·¹µå°¡ ½¬´Â »óÅÂÀ϶§ ¾ÆÆÄÄ¡¸¦ Á×À̰í, ¼³Á¤ÆÄÀÏÀ»
            ´Ù½Ã ÀÐÀºÈÄ »õ·Î¿î ¼³Á¤¿¡ µû¶ó worker ¾²·¹µåµéÀ» Àç½ÃÀÛÇÑ´Ù.</dd>
      
            <dt>VERSION</dt>
            <dd>ÇöÀç ½ÇÇàÁßÀÎ ¾ÆÆÄÄ¡ ¹öÀü Á¤º¸¸¦ Ãâ·ÂÇÑ´Ù.</dd>
      
            <dt>MODULES</dt>
            <dd>±âº» ¸ðµâ°ú ¿ÜºÎ ¸ðµâ ¸ñ·ÏÀ» Ãâ·ÂÇÑ´Ù.</dd>
      
            <dt>DIRECTIVES</dt>
            <dd>¸ðµç Áö½Ã¾î ¸ñ·ÏÀ» Ãâ·ÂÇÑ´Ù.</dd>
      
            <dt>SETTINGS</dt>
            <dd>Äֿܼ¡ ¾²·¹µå »óÅ ǥ½Ã¸¦ º¸À̰ųª ¾ø¾Ø´Ù. »óŸ¦
            º¸À̸é, ¾ÆÆÄÄ¡ ÄܼÖâ¿¡ µ¿ÀÛÇÏ´Â ¾²·¹µåµéÀÇ »óŰ¡ ³ª¿Â´Ù.</dd>
      
            <dt>SHUTDOWN</dt>
            <dd>½ÇÇàÁßÀÎ ¾ÆÆÄÄ¡ À¥¼­¹ö¸¦ Á×ÀδÙ.</dd>
      
            <dt>HELP</dt>
            <dd>½ÇÇà ¿É¼ÇµéÀ» ¼³¸íÇÑ´Ù.</dd>
          </dl>
      
          <p>±âº»ÀûÀ¸·Î ÀÌ Áö½Ã¾îµéÀº ¿î¿µÃ¼Á¦ ÁÖ¼Ò¿µ¿ª¿¡¼­ ½ÇÇàÁßÀÎ
          ¾ÆÆÄÄ¡¸¦ ´ë»óÀ¸·Î ÇÑ´Ù. ¾ÆÆÄÄ¡°¡ º¸È£ÁÖ¼Ò¿µ¿ª¿¡¼­ ½ÇÇàÁßÀ̶ó¸é,
          -p¿Í ÁÖ¼Ò¿µ¿ª À̸§À» Ãß°¡ÇÑ´Ù. ´õ ¸¹Àº Á¤º¸¸¦ º¸·Á¸é ¸í·ÉÇà¿¡
          "apache2 Help"¸¦ ÀÔ·ÂÇÑ´Ù.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="use" id="use">NetWare¿ë ¾ÆÆÄÄ¡ ¼³Á¤Çϱâ</a></h2>
      
          
      
          <p>¾ÆÆÄÄ¡´Â º¸Åë <code>conf</code> µð·ºÅ丮¿¡ ÀÖ´Â ¼³Á¤ÆÄÀÏ·Î
          ¼³Á¤ÇÑ´Ù. ÀÌ ÆÄÀÏÀº À¯´Ð½º¿ë°ú °°Áö¸¸, NetWare¿ë ¾ÆÆÄÄ¡¿¡´Â
          Á¶±Ý ´Ù¸¥ Áö½Ã¾îµéÀÌ ÀÖ´Ù. »ç¿ë°¡´ÉÇÑ ¸ðµç Áö½Ã¾î¿¡ ´ëÇØ¼­´Â
          <a href="../">¾ÆÆÄÄ¡ ¹®¼­</a>¸¦ Âü°íÇ϶ó.</p>
      
          <p>NetWare¿ë ¾ÆÆÄÄ¡ÀÇ ÁÖµÈ Â÷ÀÌÁ¡Àº:</p>
      
          <ul>
            <li>
              <p>NetWare¿ë ¾ÆÆÄÄ¡´Â ´ÙÁß¾²·¹µå ¹æ½ÄÀ» »ç¿ëÇϱ⶧¹®¿¡,
              À¯´Ð½º¿Í °°ÀÌ ¿äû¸¶´Ù ´Ù¸¥ ÇÁ·Î¼¼½º¸¦ »ç¿ëÇÏÁö ¾Ê´Â´Ù.
              ´ë½Å ¿©·¯ ¾²·¹µå¸¦ ½ÇÇàÇÑ´Ù: ºÎ¸ð ¾²·¹µå¿Í ¿äûÀ» ó¸®ÇÏ´Â
              ¿©·¯ ÀÚ½Ä È¤Àº worker ¾²·¹µåµé.</p>
      
              <p>±×·¯¹Ç·Î "ÇÁ·Î¼¼½º"-°ü¸® Áö½Ã¾î°¡ ´Ù¸£´Ù:</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#maxrequestsperchild">MaxRequestsPerChild</a></code> -
              À¯´Ð½º¿Í °°ÀÌ worker ¾²·¹µå°¡ ¿äûÀ» ¾ó¸¶¸¸Å­ ó¸®Çϰí
              Á×À»Áö¸¦ Á¶Á¤ÇÑ´Ù. ±ÇÀåÇÏ´Â ±âº»°ª
              <code>MaxRequestsPerChild 0</code>À» »ç¿ëÇÏ¸é ¾²·¹µå´Â
              Á×Áö¾Ê°í ¿µ¿øÈ÷ ¿äûÀ» ¼­ºñ½ºÇÑ´Ù. Ưº°ÇÑ ÀÌÀ¯°¡ ¾ø´Ù¸é
              NetWare¿¡¼­´Â ÀÌ Áö½Ã¾î¸¦ <code>0</code>À¸·Î ¼³Á¤Çϱæ
              ±ÇÇÑ´Ù.</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#startthreads">StartThreads</a></code> -
              ÀÌ Áö½Ã¾î´Â ¼­¹ö°¡ óÀ½¿¡ ½ÃÀÛÇÒ ¾²·¹µå °³¼ö¸¦ °áÁ¤ÇÑ´Ù.
              ±ÇÀåÇÏ´Â ±âº»°ªÀº <code>StartThreads 50</code>ÀÌ´Ù.</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#minsparethreads">MinSpareThreads</a></code> -
              ¼­¹ö´Â ½¬´Â(idle) ¾²·¹µå °³¼ö°¡ ÀÌ °ªº¸´Ù ÀûÀ¸¸é worker
              ¾²·¹µå¸¦ ´õ ¸¸µç´Ù. ±ÇÀåÇÏ´Â ±âº»°ªÀº
              <code>MinSpareThreads 10</code>ÀÌ´Ù.</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#maxsparethreads">MaxSpareThreads</a></code> -
              ¼­¹ö´Â ½¬´Â ¾²·¹µå °³¼ö°¡ ÀÌ °ªº¸´Ù ¸¹À¸¸é worker ¾²·¹µå¸¦
              Á×À̱⠽ÃÀÛÇÑ´Ù. ±ÇÀåÇÏ´Â ±âº»°ªÀº
              <code>MaxSpareThreads 100</code>ÀÌ´Ù.</p>
      
              <p><code class="directive"><a href="../mod/mpm_netware.html#maxthreads">MaxThreads</a></code> -
              ÀÌ Áö½Ã¾î´Â worker ¾²·¹µåÀÇ ÃÖ´ë °³¼ö¸¦ Á¦ÇÑÇÑ´Ù. ±ÇÀåÇÏ´Â
              ±âº»°ªÀº <code>ThreadsPerChild 250</code>ÀÌ´Ù.</p>
      
              <p><code class="directive"><a href="../mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code> -
              ÇÑ worker ¾²·¹µå°¡ »ç¿ëÇÒ ½ºÅà ũ±â¸¦ Áö½ÃÇÑ´Ù. ±ÇÀåÇÏ´Â
              ±âº»°ªÀº <code>ThreadStackSize 65536</code>ÀÌ´Ù.</p>
            </li>
      
            <li>
              <p>¾Æ±Ô¸ÕÆ®·Î ÆÄÀϸíÀ» ¹Þ´Â Áö½Ã¾î¿¡´Â À¯´Ð½º ÆÄÀϸíÀÌ
              ¾Æ´Ñ NetWare ÆÄÀϸíÀ» »ç¿ëÇØ¾ß ÇÑ´Ù. ±×·¯³ª ¾ÆÆÄÄ¡°¡
              ³»ºÎÀûÀ¸·Î À¯´Ð½º½Ä ÆÄÀϸíÀ» »ç¿ëÇϱ⶧¹®¿¡ ¹é½½·¡½¬
              ´ë½Å ½½·¡½¬¸¦ »ç¿ëÇØ¾ß ÇÑ´Ù. ¸ðµç Àý´ë°æ·Î¿¡ º¼·ý¸íÀ»
              Æ÷ÇÔÇÏ±æ ¹Ù¶õ´Ù. º¼·ý¸íÀ» »ý·«ÇÏ¸é ¾ÆÆÄÄ¡´Â
              <code>SYS:</code> º¼·ýÀ̶ó°í À߸ø °¡Á¤ÇÒ ¼ö ÀÖ´Ù.</p>
            </li>
      
            <li>
              <p>NetWare¿ë ¾ÆÆÄÄ¡´Â ¼­¹ö¸¦ ´Ù½Ã ÄÄÆÄÀÏÇÏÁö ¾Ê°í ½ÇÇàÇÒ¶§
              ¸ðµâÀ» ÀоîµéÀÏ ¼ö ÀÖ´Ù. º¸Åë ¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇϸé
              <code>\Apache2\modules</code> µð·ºÅ丮¿¡ ¿©·¯ Ãß°¡ ¸ðµâÀ»
              ¼³Ä¡ÇÑ´Ù. À̵é ȤÀº ´Ù¸¥ ¸ðµâÀ» »ç¿ëÇÏ·Á¸é <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> Áö½Ã¾î¸¦ »ç¿ëÇÑ´Ù.
              ¿¹¸¦ µé¾î status ¸ðµâÀ» »ç¿ëÇÑ´Ù¸é:</p>
      
              <div class="example"><p><code>
                LoadModule status_module modules/status.nlm
              </code></p></div>
      
              <p><a href="../mod/mod_so.html#creating">ÀоîµéÀÏ ¼ö
              ÀÖ´Â ¸ðµâ ¸¸µé±â</a>¿¡ ´ëÇÑ Á¤º¸µµ ÀÖ´Ù.</p>
            </li>
          </ul>
      
          <h3><a name="use-add" id="use-add">ÀÌ¿ÜÀÇ NetWare Àü¿ë Áö½Ã¾îµé:</a></h3>
      
            
      
            <ul>
              <li><code class="directive"><a href="../mod/core.html#cgimapextension">CGIMapExtension</a></code> -
              CGI ÆÄÀÏ È®ÀåÀÚ¸¦ ½ºÅ©¸³Æ® ÀÎÅÍÇÁ¸®ÅÍ¿Í ¿¬°áÇÑ´Ù.</li>
            </ul>
            <ul>
              <li><code class="directive"><a href="../mod/mod_nw_ssl.html#securelisten">SecureListen</a></code> -
              ƯÁ¤ Æ÷Æ®¸¦ SSL ¾ÏȣȭÇÑ´Ù.</li>
            </ul>
            <ul>
              <li><code class="directive"><a href="../mod/mod_nw_ssl.html#nwssltrustedcerts">NWSSLTrustedCerts</a></code> -
              ÇÁ·Ï½ÃÇÏ´Â ¼­¹ö¿¡ º¸¾È¿¬°áÇÒ¶§ »ç¿ëÇÒ ½Å·ÚÇÏ´Â
              ÀÎÁõ¼­(certificate)¸¦ Ãß°¡ÇÑ´Ù.</li>
            </ul>
            <ul>
              <li><code class="directive"><a href="../mod/mod_nw_ssl.html#nwsslupgradeable">NWSSLUpgradeable</a></code> -
              ƯÁ¤ ÁÖ¼Ò/Æ÷Æ®·Î ¸Î¾îÁø ¿¬°áÀ» SSL ¿¬°á·Î º¯°æÇÒ ¼ö
              ÀÖ´Ù.</li>
            </ul>
      
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="comp" id="comp">Netware¿ë ¾ÆÆÄÄ¡ ÄÄÆÄÀÏÇϱâ</a></h2>
      
          
      
          <p>¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇÏ·Á¸é MetroWerks CodeWarrior 6.x ÀÌ»óÀÌ
          ÇÊ¿äÇÏ´Ù. ¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇÏ¸é ¾î¶² Netware º¼·ý¿¡¶óµµ ¼³Ä¡ÇÒ
          ¼ö ÀÖ´Ù. ±âº»°ªÀº <code>sys:/Apache2</code> µð·ºÅ丮´Ù.</p>
      
          <p>¼­¹ö¸¦ ½ÇÇàÇϱâ Àü¿¡ <code>conf</code> µð·ºÅ丮¸¦ ÀÛ¼ºÇؾß
          ÇÑ´Ù. ¹èÆ÷º»ÀÇ <code>conf</code> µð·ºÅ丮¿¡ ÀÖ´Â
          <code>HTTPD-STD.CONF</code> ÆÄÀϸíÀ» <code>HTTPD.CONF</code>·Î
          º¯°æÇÑ´Ù. <code>HTTPD.CONF</code> ÆÄÀÏ¿¡¼­ <code>@@Value@@</code>
          Ç¥½Ã¸¦ ã¾Æ¼­ ÀûÀýÇÑ ¼³Á¤À¸·Î ´ëüÇÑ´Ù. <code>conf/magic</code>°ú
          <code>conf/mime.types</code> ÆÄÀϵµ º¹»çÇÑ´Ù. ¾Æ´Ï¸é makefileÀ»
          ½ÇÇàÇÒ¶§ <code>install</code> Ű¿öµå¸¦ »ç¿ëÇÏ¸é ¿ÏÀüÇÑ ¹èÆ÷º»À»
          ¸¸µç´Ù.</p>
      
          <h3><a name="comp-req" id="comp-req">¿ä±¸»çÇ×:</a></h3>
      
            
      
            <p>NetWare¿ë ¾ÆÆÄÄ¡ 2.0À» ÄÄÆÄÀÏÇÏ·Á¸é ´ÙÀ½ °³¹ßµµ±¸°¡
            ÇÊ¿äÇÏ´Ù:</p>
      
            <ul>
              <li>Metrowerks CodeWarrior 6.0 ÀÌ»ó°ú <a href="http://developer.novell.com/ndk/cwpdk.htm">NetWare
              PDK 3.0</a> ÀÌ»ó.</li>
      
              <li><a href="http://developer.novell.com/ndk/libc.htm">NetWare
              Libraries for C (LibC)</a></li>
      
              <li><a href="http://developer.novell.com/ndk/cldap.htm">LDAP
              Libraries for C</a></li>
      
              <li><a href="http://www.gzip.org/zlib/">ZLIB ¾ÐÃà ¶óÀ̺귯¸®
              ¼Ò½ºÄÚµå</a></li>
      
              <li>AWK µµ±¸ (awk, gawk µî). AWK´Â <a href="http://developer.novell.com/ndk/apache.htm">http://developer.novell.com/ndk/apache.htm</a>¿¡¼­
              ´Ù¿î¹ÞÀ» ¼ö ÀÖ´Ù. µµ±¸¸¦ <code>awk.exe</code>¶õ À̸§À¸·Î
              À©µµ¿ìÁî °æ·Î¿¡ µÎ¾î¾ß ÇÑ´Ù.</li>
      
              <li>makefileÀ» »ç¿ëÇÏ¿© ÄÄÆÄÀÏÇÏ·Á¸é <a href="http://developer.novell.com/ndk/apache.htm">http://developer.novell.com/ndk/apache.htm</a>¿¡
              ÀÖ´Â GNU make ¹öÀü 3.78.1 (GMake)ÀÌ ÇÊ¿äÇÏ´Ù.</li>
            </ul>
      
          
      
          <h3><a name="comp-make" id="comp-make">NetWare makefileÀ» »ç¿ëÇÏ¿© ¾ÆÆÄÄ¡ ÄÄÆÄÀÏÇϱâ:</a></h3>
      
            
      
            <ul>
              <li><code>NOVELLLIBC</code> ȯ°æº¯¼ö¸¦
              <div class="example"><p><code>Set NOVELLLIBC=c:\novell\ndk\libc</code></p></div>¿Í
              °°ÀÌ NetWare Libraries for C SDK À§Ä¡·Î ¼³Á¤ÇÑ´Ù.
              </li>
      
              <li><code>METROWERKS</code> ȯ°æº¯¼ö¸¦
              <div class="example"><p><code>Set METROWERKS=C:\Program Files\Metrowerks\CodeWarrior</code></p></div>¿Í
              °°ÀÌ Metrowerks CodeWarrior ÄÄÆÄÀÏ·¯¸¦ ¼³Ä¡ÇÑ À§Ä¡·Î
              ¼³Á¤ÇÑ´Ù. ±âº» À§Ä¡ÀÎ
              <code>C:\Program Files\Metrowerks\CodeWarrior</code>¿¡
              ¼³Ä¡ÇÏ¿´´Ù¸é, ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÒ ÇÊ¿ä´Â ¾ø´Ù.</li>
      
              <li><code>LDAPSDK</code> ȯ°æº¯¼ö¸¦
              <div class="example"><p><code>Set LDAPSDK=c:\Novell\NDK\cldapsdk\NetWare\libc</code></p></div>¿Í
              °°ÀÌ LDAP Libraries for C¸¦ ¼³Ä¡ÇÑ À§Ä¡·Î ¼³Á¤ÇÑ´Ù.
              </li>
      
              <li><code>ZLIBSDK</code> ȯ°æº¯¼ö¸¦
              <div class="example"><p><code>Set ZLIBSDK=D:\NOVELL\zlib</code></p></div>°ú °°ÀÌ
              ZLib ¶óÀ̺귯¸® ¼Ò½ºÄÚµå À§Ä¡·Î ¼³Á¤ÇÑ´Ù.
              </li>
              
              <li><code>AP_WORK</code> ȯ°æº¯¼ö¸¦ <code>\httpd-2.0</code>
              µð·ºÅ丮ÀÇ Àüü °æ·Î·Î ¼³Á¤ÇÑ´Ù.</li>
      
              <li><code>APR_WORK</code> ȯ°æº¯¼ö¸¦
              <code>\httpd-2.0\srclib\apr</code> µð·ºÅ丮ÀÇ Àüü °æ·Î·Î
              ¼³Á¤ÇÑ´Ù.</li>
      
              <li>AWK µµ±¸¿Í GNU make (<code>gmake.exe</code>) µµ±¸°¡
              ½Ã½ºÅÛÀÇ <code>PATH</code> ȯ°æº¯¼ö¿¡ Æ÷ÇÔµÇÀÖ´ÂÁö
              È®ÀÎÇÑ´Ù.</li>
      
              <li>¼Ò½ºÄڵ带 ´Ù¿î¹Þ¾Æ Àû´çÇÑ µð·ºÅ丮¿¡ ¾ÐÃàÀ» Ǭ´Ù.</li>
      
              <li><code>\httpd-2.0\srclib\apr-util\uri</code> µð·ºÅ丮¿¡¼­
              "<code>gmake -f nwgnumakefile</code>"À» ½ÇÇàÇÏ¿©
              <code>GENURI.nlm</code>À» ÄÄÆÄÀÏÇÑ´Ù.</li>
      
              <li><code>GENURI.nlm</code> ÆÄÀÏÀ» NetWare ¼­¹öÀÇ
              <code>SYS:</code> º¼·ýÀ¸·Î º¹»çÇϰí
              <div class="example"><p><code>SYS:\genuri &gt; sys:\uri_delims.h</code></p></div>
              ¸í·ÉÀ» ½ÇÇàÇÑ´Ù.
              </li>
      
              <li><code>uri_delims.h</code> ÆÄÀÏÀ» ÄÄÆÄÀÏÇÏ´Â ÄÄÇ»ÅÍÀÇ
              <code>\httpd-2.0\srclib\apr-util\uri</code> µð·ºÅ丮·Î
              º¹»çÇÑ´Ù.</li>
      
              <li><code>\httpd-2.0\srclib\apr</code> µð·ºÅ丮¿¡¼­
              "<code>gmake -f nwgnumakefile</code>"À» ½ÇÇàÇÏ¿© APRÀ»
              ÄÄÆÄÀÏÇÑ´Ù.</li>
      
              <li><code>\httpd-2.0\srclib\pcre</code> µð·ºÅ丮¿¡¼­
              "<code>gmake -f nwgnumakefile</code>"À» ½ÇÇàÇÏ¿©
              <code>DFTABLES.nlm</code>À» ÄÄÆÄÀÏÇÑ´Ù.</li>
      
              <li><code>\httpd-2.0\server</code> µð·ºÅ丮¿¡¼­
              "<code>gmake -f nwgnumakefile</code>"À» ½ÇÇàÇÏ¿©
              <code>GENCHARS.nlm</code>À» ÄÄÆÄÀÏÇÑ´Ù.</li>
      
              <li>°¢ µð·ºÅ丮ÀÇ <code>GENCHARS.nlm</code>°ú
              <code>DFTABLES.nlm</code> ÆÄÀÏÀ» NetWare ¼­¹öÀÇ
              <code>SYS:</code> º¼·ýÀ¸·Î º¹»çÇÏ°í ´ÙÀ½°ú °°ÀÌ ½ÇÇàÇÑ´Ù:
                <div class="example"><p><code>
                  SYS:\genchars &gt; sys:\test_char.h<br />
                  SYS:\dftables &gt; sys:\chartables.c<br />
                </code></p></div>
              </li>
      
              <li><code>test_char.h</code>¿Í <code>chartables.c</code>
              ÆÄÀÏÀ» ÄÄÆÄÀÏÇÏ´Â ÄÄÇ»ÅÍÀÇ <code>\httpd-2.0\os\netware</code>
              µð·ºÅ丮·Î º¹»çÇÑ´Ù.</li>
      
              <li><code>\httpd-2.0</code> µð·ºÅ丮¿¡¼­
              "<code>gmake -f nwgnumakefile</code>"À» ½ÇÇàÇÏ¿© ¾ÆÆÄÄ¡¸¦
              ÄÄÆÄÀÏÇÑ´Ù.
              <div class="example"><p><code>gmake -f nwgnumakefile install</code></p></div>°ú
              °°ÀÌ install ÆÄ¶ó¹ÌÅ͸¦ Ãß°¡ÇÏ¸é ¹èÆ÷¿ë µð·ºÅ丮¸¦ ¸¸µé
              ¼ö ÀÖ´Ù.
              </li>
            </ul>
      
          
      
          <h3><a name="comp-add" id="comp-add">Ãß°¡ make ¿É¼Ç</a></h3>
      
            
      
            <ul>
              <li><code>gmake -f nwgnumakefile</code><p>ÀÏ¹Ý ½ÇÇàÆÄÀÏÀ»
              ÄÄÆÄÀÏÇÏ¿© <code>\release</code> µð·ºÅ丮·Î º¹»çÇÑ´Ù.</p></li>
      
              <li><code>gmake -f nwgnumakefile DEBUG=1</code><p>µð¹ö±×¿ë
              ½ÇÇàÆÄÀÏÀ» ÄÄÆÄÀÏÇÏ¿© <code>\debug</code> µð·ºÅ丮·Î
              º¹»çÇÑ´Ù.</p></li>
      
              <li><code>gmake -f nwgnumakefile install</code>
              <p><code>\dist\Apache2</code> µð·ºÅ丮¿¡ ½ÇÇàÆÄÀÏ, ¹®¼­,
              Ãß°¡ Áö¿øÆÄÀÏÀ» Æ÷ÇÔÇÑ ¿ÏÀüÇÑ ¾ÆÆÄÄ¡ ¹èÆ÷º»À» ¸¸µç´Ù.</p></li>
      
              <li><code>gmake -f nwgnumakefile installdev</code>
              <p>install°ú ºñ½ÁÇÏÁö¸¸, <code>\lib</code>°ú
              <code>\include</code> µð·ºÅ丮¸¦ ¸¸µé°í Çì´õÆÄÀϰú import
              ÆÄÀÏÀ» º¹»çÇÑ´Ù.</p></li>
      
              <li><code>gmake -f nwgnumakefile clean</code>
              <p><code>DEBUG</code> Á¤ÀÇ À¯¹«¿¡ µû¶ó <code>\release</code>³ª
              <code>\debug</code>¿¡ ÀÖ´Â ¿ÀºêÁ§Æ®ÆÄÀϰú ½ÇÇàÆÄÀÏÀ»
              ¸ðµÎ Áö¿î´Ù.</p></li>
      
              <li><code>gmake -f nwgnumakefile clobber_all</code><p>clean°ú
              ºñ½ÁÇÏÁö¸¸ µð·ºÅ丮µµ Áö¿î´Ù.</p></li>
            </ul>
      
          
      
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/platform/netware.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/netware.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/netware.html" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/netware.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/win_compiling.html.fr.utf8����������������������������������������0000644�0000000�0000050�00000076512�13412755316�022326� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Compiler Apache pour Microsoft Windows - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Notes spécifiques à certaines
        plates-formes</a></div><div id="page-content"><div id="preamble"><h1>Compiler Apache pour Microsoft Windows</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/platform/win_compiling.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/win_compiling.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/win_compiling.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      
      
          <p>Il y a de nombreux points importants à connaître avant de
          compiler Le serveur HTTP Apache pour Microsoft Windows. Avant de commencer, lisez le
          document <a href="windows.html">Utiliser le serveur HTTP Apache avec Microsoft
          Windows</a>.</p>
      
          <p>httpd peut être compilé sous Windows en utilisant une chaîne de
          compilation basée sur cmake, ou à partir de fichiers projet Visual
          Studio maintenus par les développeurs de httpd. La chaîne de
          compilation basée sur cmake supporte directement davantage de
          versions de Visual Studio, mais possède actuellement des
          fonctionnalités très limitées.</p>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#requirements">Prérequis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#unixsrcbuild">Compilation à partir des sources Unix</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#commandbuild">Compilation à partir de la ligne de commandes</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#workspacebuild">Compilation depuis l'espace de travail IDE de Developer
          Studio</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exportingmakfiles">Export des fichiers .mak de la ligne de commandes</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#installation">Installation</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#projectcomponents-warn">Avertissement à propos de la compilation d'Apache à partir de
      l'arborescence de développement</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cmake">Compilation de httpd avec cmake</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="requirements" id="requirements">Prérequis</a></h2>
      
          
      
          <p>Pour compiler Apache, l'environnement doit satisfaire aux
          conditions suivantes :</p>
      
          <ul>
            <li>
              <p>Espace disque</p>
      
              <p>Assurez-vous de disposer d'un minimum de 200 Mo d'espace
      	disque disponible. Après l'installation, Apache occupe environ
      	80 Mo d'espace disque, plus l'espace réservé aux journaux et au
      	cache, la taille de ces derniers pouvant augmenter rapidement.
      	Les besoins réels en espace disque dépendent étroitement de la
      	configuration choisie et des bibliothèques ou modules tiers
      	installés, en particulier lorsqu'OpenSSL est mis en oeuvre.
      	Comme de nombreux fichiers sont au format texte et donc
      	facilement compressibles, l'utilisation de la compression du
      	système de fichiers NTFS divise ces besoins par deux.</p>
            </li>
      
            <li>
              <p>Correctifs requis</p>
      
              <p>Le binaire httpd est compilé à l'aide de nombreux correctifs
      	appliqués aux paquets tiers, ce qui permet de s'assurer que le
      	code fourni est bien compilable et déboguable. Ces correctifs
      	sont disponibles à <a href="http://www.apache.org/dist/httpd/binaries/win32/patches_applied/">http://www.apache.org/dist/httpd/binaries/win32/patches_applied/</a>,
      	et il est recommandé de les appliquer afin d'obtenir un
      	résultat identique aux binaires "officiels" distribués par
      	l'ASF.</p>
            </li>
      
            <li>
              <p>Microsoft Visual C++ 6.0 (Visual Studio 97) ou supérieur.</p>
      
              <p>Apache peut être compilé en utilisant l'outil ligne de
      	commande, ou depuis l'espace de travail IDE Visual Studio. Pour
      	la compilation depuis la ligne de commandes, l'environnement
      	doit comporter les variables the <code>PATH</code>,
      	<code>INCLUDE</code>, <code>LIB</code>, ainsi que d'autres
      	variables qui peuvent être définies via le script
      	<code>vcvars32.bat</code> :</p>
      
              <div class="note">Vous pouvez vous procurer le paquet du Processeur Visual
      	Studio pour votre ancienne version de Visual Studio, ou une
      	version complète (et non Express) d'une édition plus récente de
      	Visual Studio pour l'assembleur ml.exe. Ceci vous permettra, si
      	vous le souhaitez, de compiler OpenSSL en utilisant une
      	implémentation du code d'assemblage plus efficace.</div>
      
              <div class="note">Seule la chaîne d'outils de compilation de Microsoft est
      	supportée de manière suivie par les contributeurs actifs à httpd.
      	Bien que le projet accepte régulièrement des correctifs pour
      	s'assurer que MinGW et d'autre outils de compilation
      	fonctionnent, ou même pour les améliorer, ils ne sont pas
      	maintenus de manière suivie et sont même souvent hors d'état
      	de fonctionner à certains stades du développement normal.</div>
            </li>
      
            <li>
              <p>Le SDK de la plate-forme Windows mis à jour, février 2003 ou
      	plus récent.</p>
      
      	<p>Un SDK approprié pour la plate-forme Windows est inclus par
      	défaut dans les versions complètes (et non Express/lite) de
      	Visual C++ 7.1 (Visual Studio 2002) et supérieures ; les
      	utilisateurs peuvent ignorer ces étapes, à moins qu'ils aient
      	choisi d'utiliser une version plus récente ou différente du SDK.</p>
      
      	<p>Pour pouvoir utiliser Visual C++ 6.0 or 7.0 (Studio 2000
      	.NET), l'environnement du SDK de la plate-forme doit être préparé en utilisant le
      	script <code>setenv.bat</code> (installé par le SDK de la plate-forme) avant de
      	lancer la compilation en ligne de commande ou l'interface GUI
      	msdev/devenv. L'installation du SDK de la plate-forme pour les
      	versions Express de Visual Studio (2003 et supérieures) devrait
      	ajuster l'environnement par défaut de manière appropriée.</p>
      
              <div class="example"><p><code>
      	  "c:\Program Files\Microsoft Visual Studio\VC98\Bin\VCVARS32"<br />
                "c:\Program Files\Platform SDK\setenv.bat"
              </code></p></div>
      
      
            </li>
      
            <li>
              <p>Perl et awk</p>
      
      	<p>De nombreuses étapes recommandées ici nécessitent un
      	interpréteur perl durant le processus de préparation de la
      	compilation.</p>
      
              <p>Pour installer Apache à partir du système de compilation, de
      	nombreux fichiers sont modifiés via l'utilitaire
      	<code>awk.exe</code>. awk effectue la modification des fichiers
      	au moment de l'installation ; il a été choisi car il nécessite
      	un téléchargement de petite taille (par rapport à Perl ou
      	WSH/VB). Le site de Brian Kernighan <a href="http://www.cs.princeton.edu/~bwk/btl.mirror/">http://www.cs.princeton.edu/~bwk/btl.mirror/</a> propose un
      	binaire précompilé pour Win32, <a href="http://www.cs.princeton.edu/~bwk/btl.mirror/awk95.exe">http://www.cs.princeton.edu/~bwk/btl.mirror/awk95.exe</a>, que
      	vous devez enregistrer sous le nom <code>awk.exe</code> (plutôt
      	que <code>awk95.exe</code>).</p>
      
              <div class="note">Si awk.exe n'est pas trouvé, la cible install du fichier
      	Makefile.win n'effectuera aucune substitution dans les fichiers
      	.conf installés. Vous devez modifier manuellement les fichiers
      	.conf installés afin de permettre au serveur de démarrer.
      	Recherchez et remplacez toutes les balises "@token@" par une
      	valeur appropriée.</div>
      
              <div class="note">L'IDE Visual Studio ne trouvera le chemin de
      	<code>awk.exe</code> que dans la variable PATH, ou dans le
      	chemin des exécutables spécifié par l'option de menu Tools -&gt;
      	Options -&gt; (Projects -&gt;) Directories. Assurez-vous
      	qu'awk.exe est bien dans votre chemin système.</div>
      
              <div class="note">Notez aussi, si vous utilisez les outils Cygwin (<a href="http://www.cygwin.com/">http://www.cygwin.com/</a>), que
      	l'utilitaire awk de nomme <code>gawk.exe</code> et que le
      	fichier <code>awk.exe</code> est en fait un lien symbolique vers
      	le fichier <code>gawk.exe</code>. Le shell de commandes Windows
      	ne reconnaît pas les liens symboliques, et par conséquent la
      	compilation d'InstallBin échouera. Pour contourner le problème,
      	vous pouvez supprimer le lien <code>awk.exe</code> de
      	l'installation de Cygwin, et copier <code>gawk.exe</code> vers
      	<code>awk.exe</code>. Notez aussi que les portages cygwin/mingw
      	de gawk 3.0.x étaient bogués ; veuillez par conséquent effectuer
      	une mise à jour vers la	version 3.1.x avant l'utilisation de
      	tout portage de gawk.</div>
            </li>
      
            <li>
              <p>[Optionnel] bibliothèque zlib (pour le module
      	<code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code>)</p>
      
              <p>Zlib doit être installée dans un sous-répertoire du
      	répertoire <code>srclib</code> et nommé <code>zlib</code>. Elle
      	doit être compilée directement à cette place. Zlib est
      	disponible à l'adresse <a href="http://www.zlib.net/">http://www.zlib.net/</a> -- le
      	fonctionnement correct du module <code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code> a
      	été vérifié avec la version 1.2.3.</p>
      
              <div class="example"><p><code>
                nmake -f win32\Makefile.msc<br />
                nmake -f win32\Makefile.msc test
              </code></p></div>
            </li>
      
            <li>
              <p>[Optionnel] Bibliothèques OpenSSL (pour le module
      	<code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> et <code>ab.exe</code> avec le support
      	ssl)</p>
      
      	<div class="note">La bibliothèque OpenSSL est un logiciel de chiffrement. Le
      	pays dans lequel vous résidez peut imposer des restrictions à
      	l'importation, la possession, l'utilisation, et/ou la
      	réexportation vers un autre pays des logiciels de chiffrement.
      	AVANT d'utiliser tout logiciel de chiffrement, veuillez
      	consulter la législation de votre pays, les règles et politiques
      	d'importation, de possession, ou d'utilisation, et de
      	réexportation des logiciels de chiffrement, afin de déterminer
      	si vous en avez le droit. Voir <a href="http://www.wassenaar.org/">http://www.wassenaar.org/</a>
      	pour plus de détails.</div>
      
              <p>La configuration et la compilation d'OpenSSL nécessite
      	l'installation de perl.</p>
      
              <p>Pour pouvoir compiler <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> ou le projet
      	<code>abs.exe</code>, qui devient ab.c avec le support SSL
      	activé, vous devez
      	télécharger OpenSSL à l'adresse <a href="http://www.openssl.org/source/">http://www.openssl.org/source/</a>,
      	et l'installer dans un sous-répertoire du répertoire
      	<code>srclib</code> que vous nommerez <code>openssl</code>. Afin
      	de préparer OpenSSL à la liaison avec le module Apache mod_ssl
      	ou abs.exe, et désactiver les fonctionnalités d'Openssl grévées
      	de brevets, vous pouvez utiliser la commande de compilation
      	suivante :</p>
      
              <div class="example"><p><code>
                perl Configure no-rc5 no-idea enable-mdc2 enable-zlib VC-WIN32
                     -Ipath/to/srclib/zlib -Lpath/to/srclib/zlib<br />
                ms\do_masm.bat<br />
                nmake -f ms\ntdll.mak
              </code></p></div>
      
              <div class="note">Il est déconseillé d'utiliser zlib-dynamic, car la charge
      	de la décompression des flux SSL est alors transférée à la
      	première requête qui doit charger la dll zlib. Notez que le
      	correctif proposé active le drapeau -L afin de pouvoir
      	fonctionner avec les compilations Windows, corrige le nom de
      	zdll.lib et s'assure que les fichiers .pdb sont générés afin de
      	pouvoir résoudre les problèmes. Si l'assembleur n'est pas
      	installé, vous devez ajouter no-asm ci-dessus et utiliser le
      	script ms\do_ms.bat à la place de ms\do_masm.bat.</div>
            </li>
      
            <li>
              <p>[Optionnel] Bibliothèques de bases de données (pour
      <code class="module"><a href="../mod/mod_dbd.html">mod_dbd</a></code> et <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code>)</p>
      
              <p>La bibliothèque apr-util fournit un accès aux fonctionnalités
      	clients dbm (base de données à base de clés) et dbd (base de
      	données à base de requêtes) au serveur httpd et à certains de
      	ses modules, comme les modules d'authentification et
      	d'autorisation. Les fournisseurs sdbm dbm et odbc dbd sont
      	compilés automatiquement.</p>
      
              <p>Le support dbd inclut le paquet instantclient Oracle, MySQL,
      	PostgreSQL et sqlite. Par exemple, pour les compiler tous,
      	définissez LIB de façon à inclure le chemin des bibliothèques,
      	INCLUDE de façon à inclure le chemin des en-têtes, et PATH de
      	façon à inclure le chemin des dll et bin de chacun des quatre
      	SDK, et définissez la variable d'environnement DBD_LIST de façon
      	à indiquer au processus de compilation quels SDKs pilotes
      	clients du sont correctement installés ; par exemple :</p>
      
              <div class="example"><p><code>
                set DBD_LIST=sqlite3 pgsql oracle mysql
              </code></p></div>
      
              <p>De manière similaire, le support dbm peut être étendu avec
      	DBM_LIST pour compiler un fournisseur Berkeley DB (db) et/ou un
      	fournisseur gdbm, en configurant tout d'abord de la même manière
      	LIB, INCLUDE et PATH afin de s'assurer que les bibliothèques et
      	en-têtes de la bibliothèque client sont bien disponibles.</p>
      
              <div class="example"><p><code>
                set DBM_LIST=db gdbm
              </code></p></div>
      
              <div class="note">En fonction du choix des distributions de bases de
      	données, il peut s'avérer nécessaire de modifier le nom des
      	cibles de l'édition de liens (par exemple gdbm.lib à la place de
      	libgdb.lib) listées dans les fichiers .dsp/.mak des répertoires
      	srclib\apr-util\dbd ou ...\dbm correspondants.</div>
      
              <p>Voir le fichier README-win32.txt pour plus d'informations à
      	propos de l'obtention des différents SDKs pilotes de bases de
      	données.</p>
            </li>
      
          </ul>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="unixsrcbuild" id="unixsrcbuild">Compilation à partir des sources Unix</a></h2>
      
          
      
          <p>Le projet du serveur HTTP Apache à pour politique de ne fournir
          que des sources de type Unix. Les paquets source de type Windows
          disponibles en téléchargement ont été élaborés par des
          contributeurs, et ne seront pas forcément reconduits pour toutes les
          versions. Vous pouvez cependant compiler le serveur sous Windows à
          partir des sources Unix en ajoutant quelques étapes supplémentaires.</p>
      
          <ol>
          	<li>Téléchargez et ouvrez le tarball source Unix de la dernière
      	version du serveur HTTP Apache.</li>
          	<li>Téléchargez et ouvrez le tarball source Unix de la dernière
      	version de APR, APR-Util et APR-Iconv, et copier l'arborescence
      	obtenue dans httpd-2.x.x\srclib\apr, httpd-2.x.x\srclib\apr-util
      	et httpd-2.x.x\srclib\apr-iconv</li>
          	<li>Ouvrez la console et placez-vous au niveau du répertoire httpd-2.x.x</li>
          	<li>Exécutez l'utilitaire de conversion de fins de ligne</li>
          </ol>
      
          <div class="example"><p><code>
            perl srclib\apr\build\lineends.pl
          </code></p></div>
      
          <p>Vous pouvez maintenant compiler le serveur via l'environnement de
          développement Visual Studio en utilisant l'IDE. Les compilations
          du serveur en ligne de commande ne sont possibles avec des sources
          de type Unix que si vous exportez les fichiers .mak comme indiqué
          ci-dessous.
          </p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="commandbuild" id="commandbuild">Compilation à partir de la ligne de commandes</a></h2>
      
          
      
          <p><code>Makefile.win</code> est le makefile principal ou racine
          d'Apache. Pour compiler Apache sous Windows, utilisez simplement une
          des commandes suivantes pour compiler la version
          <code>release</code> ou <code>debug</code> :</p>
      
          <div class="example"><p><code>
            nmake /f Makefile.win _apacher<br /><br />
            nmake /f Makefile.win _apached
          </code></p></div>
      
      
          <p>Ces deux commandes effectuent la compilation d'Apache. Cependant,
          avec la deuxième, les fichiers résultants ne seront pas optimisés,
          ce qui va faciliter l'examen pas à pas du code pour trouver des
          bogues et résoudre les problèmes.</p>
      
          <p>Vous pouvez indiquer vos choix en matière de fournisseurs dbd et
          dbm à l'aide des variables (d'environnement) additionnelles de make
          DBD_LIST et DBM_LIST ; voir les commentaires à propos des
          [Optionnel] Bibliothèques de bases de données ci-dessus. Consultez
          les commentaires initiaux dans Makefile.win pour plus d'options
          pouvant être fournies lors de la compilation.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="workspacebuild" id="workspacebuild">Compilation depuis l'espace de travail IDE de Developer
          Studio</a></h2>
      
          
      
          <p>Apache peut aussi être compilé depuis l'environnement de
          développement Visual Studio de VC++. Pour simplifier ce processus,
          l'espace de travail Visual Studio <code>Apache.dsw</code> est
          fourni. Cet espace de travail expose la liste complète des projets
          <code>.dsp</code> actifs nécessaires à l'installation binaire
          complète d'Apache. Il inclut les dépendances entre projets afin que
          ces derniers soient compilés selon l'ordre approprié.</p>
      
          <p>Ouvrez l'espace de travail <code>Apache.dsw</code>, et
          sélectionnez <code>InstallBin</code> (compilation
          <code>Release</code> ou <code>Debug</code>, selon vos souhaits)
          comme Active Project. <code>InstallBin</code> provoque la
          compilation de tous les projets concernés, puis invoque
          <code>Makefile.win</code> pour installer les exécutables et dlls
          compilés. Vous pouvez modifier la valeur de <code>INSTDIR=</code>
          via la configuration de <code>InstallBin</code>, onglet Général,
          entrée ligne de commandes de compilation. La valeur par défaut de
          <code>INSTDIR</code> est le répertoire <code>/Apache2</code>. Si
          vous désirez effectuer un test de compilation (sans installation),
          sélectionnez le projet <code>BuildBin</code>.</p>
      
          <p>Les fichiers projets <code>.dsp</code> sont distribués au format
          Visual Studio 6.0 (98). Visual C++ 5.0 (97) les reconnaît. Les
          utilisateurs de Visual Studio 2002 (.NET) et versions supérieures
          doivent convertir <code>Apache.dsw</code> et les fichiers
          <code>.dsp</code> en un projet <code>Apache.sln</code>, ainsi que
          les fichiers <code>.msproj</code> ; assurez-vous de reconvertir le
          fichier <code>.msproj</code> si l'un des fichiers source
          <code>.dsp</code> est modifié ! Cette opération est vraiment très
          simple, il suffit de réouvrir <code>Apache.dsw</code> dans l'IDE
          VC++ 7.0 et de le reconvertir.</p>
      
          
          <div class="note">Il y a une erreur dans la conversion .vcproj des fichiers
          .dsp. devenv.exe interprète mal le drapeau
          /D pour les drapeaux RC contenant de grandes /D'éfinitions entourées
          de guillemets, et contenant elles-mêmes des espaces. Ainsi, la
          commande :
          <div class="example"><p><code>
            perl srclib\apr\build\cvtdsp.pl -2005
          </code></p></div>
          va convertir les drapeaux /D pour les drapeaux RC afin d'utiliser
          une syntaxe alternative, interprétable ; malheureusement, cette
          syntaxe n'est pas supportée par Visual Studio 97 ou ses fichiers
          .mak exportés. Ces drapeaux /D permettent de transmettre la longue
          description des fichiers de mod_apachemodule.so à leurs compilations
          d'identificateur de version de ressource .rc partagée.</div>
      
          
      	<div class="note"><strong>Compilation avec OpenSSL versions 1.1.0 et supérieures</strong>
          Suite à une modification de la structure de compilation d'OpenSSL à partir
          de la version 1.1.0, vous devez convertir les fichiers dsp concernés via la
          commance cvtdsp.pl fournie par APR versions 1.6 et supérieures :
          <div class="example"><p><code>
            perl srclib\apr\build\cvtdsp.pl -ossl11
          </code></p></div>
      	</div>
      
          
          <p>Les utilisateurs de Visual Studio 2002 (.NET) et versions
          supérieures doivent aussi utiliser
          la boîte de dialogue Configuration Manager du menu Build pour
          décocher les deux versions <code>Debug</code> et
          <code>Release</code> des modules <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>
          et <code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code> pour <code>abs</code>. Ces modules
          sont compilés
          en invoquant <code>nmake</code> ou directement l'IDE avec la cible
          <code>BinBuild</code> pour compiler ces modules de manière
          conditionnelle si les sous-répertoires de <code>srclib</code>
          <code>openssl</code> et/ou <code>zlib</code> existent, et en
          fonction des définitions des variables d'environnement
          <code>DBD_LIST</code> et <code>DBM_LIST</code>.</p>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exportingmakfiles" id="exportingmakfiles">Export des fichiers .mak de la ligne de commandes</a></h2>
      
          
      
      
          <p>Les fichiers <code>.mak</code> exportés posent plus de problèmes,
          mais les utilisateurs de Visual C++ 5.0 en ont besoin pour compiler
          <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>, abs (<code class="program"><a href="../programs/ab.html">ab</a></code> avec support
          SSL) et/ou <code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code>. Les fichiers .mak
          supportent aussi un choix plus large de distributions de chaînes
          d'outils C++, comme Visual Studio Express.</p>
      
          <p>Vous devez tout d'abord compiler tous les projets afin de créer
          toutes les cibles dynamiques auto-générées, de façon à ce que les
          dépendances puissent être interprétées correctement. Compilez
          l'ensemble du projet depuis l'IDE Visual Studio 6.0 (98), en
          utilisant la cible <code>BuildAll</code>, puis utilisez le menu de
          projet Export pour tous les makefiles (en cochant "with
          dependencies"). Utilisez la commande suivante pour transformer les
          chemins absolus en chemins relatifs de façon à ce que la compilation
          puisse s'effectuer depuis n'importe quelle position dans
          l'arborescence :</p>
      
          <div class="example"><p><code>
            perl srclib\apr\build\fixwin32mak.pl
          </code></p></div>
      
          <p>Vous devez exécuter cette commande depuis la <em>racine</em> de
          l'arborescence des sources de httpd. Tout fichier projet
          <code>.mak</code> et <code>.dep</code> du répertoire courant et de
          ses sous-répertoires sera corrigé, et les repères de temps ajustés
          en fonction des <code>.dsp</code>.</p>
      
          <p>Vérifiez toujours le SDK de la plate-forme ou autres chemins
          fichiers locaux, spécifiques à la machine dans les fichiers
          <code>.mak</code> et <code>.dep</code> générés. Le répertoire
          <code>DevStudio\Common\MSDev98\bin\</code> (VC6) contient un fichier
          <code>sysincl.dat</code> qui énumère toutes les exceptions. Mettez à
          jour ce fichier (en particulier les chemins avec slashes et
          anti-slashes, tels que <code>sys/time.h</code> et
          <code>sys\time.h</code>) de façon à ignorer ces nouvelles
          dépendances. Inclure les chemins d'installation locale dans un
          fichier <code>.mak</code> distribué fera échouer la
          compilation.</p>
      
          <p>Si vous soumettez un patch qui modifie les fichiers projet, nous
          devons valider la modification de ces fichiers projet au format
          Visual Studio 6.0. Les modifications doivent êtres simples, avec un
          minimum de drapeaux de compilation et d'édition de liens qui
          pourront être reconnus par tous les environnements Visual
          Studio.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="installation" id="installation">Installation</a></h2>
      
      
          
      
          <p>Une fois compilé, Apache doit être installé dans le répertoire
          racine du serveur. La valeur par défaut est le répertoire
          <code>\Apache2</code>, sur le même disque.</p>
      
          <p>Pour compiler et installer automatiquement tous les fichiers dans
          le répertoire <em>rep</em> désiré, utilisez une des commandes
          <code>nmake</code> suivantes :</p>
      
          <div class="example"><p><code>
            nmake /f Makefile.win installr INSTDIR=<em>dir</em><br />
            nmake /f Makefile.win installd INSTDIR=<em>dir</em>
          </code></p></div>
      
          <p>L'argument <em>rep</em> de <code>INSTDIR</code> permet de
          spécifier le répertoire d'installation ; il peut être omis si Apache
          doit être installé dans <code>\Apache22</code> (du lecteur de disque
          courant.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="projectcomponents-warn" id="projectcomponents-warn">Avertissement à propos de la compilation d'Apache à partir de
      l'arborescence de développement</a></h2>
      
      
      
      	<div class="note">Notez que seuls les fichiers <code>.dsp</code> sont
      	maintenus d'une distribution <code>release</code> à l'autre. Les
      	fichiers <code>.mak</code> ne sont PAS régénérés, suite à
      	l'énorme perte de temps des relecteurs . Vous ne
      	pouvez donc pas utiliser les commandes <code>NMAKE</code>
      	ci-dessus pour compiler des fichiers de projet <code>.dsp</code>
      	révisés si vous n'exporter pas ensuite vous-même tous les
      	fichiers <code>.mak</code> du projet. Ceci n'est pas nécessaire
      	si vous effectuez la compilation depuis l'environnement
      	Microsoft Developer Studio.</div>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cmake" id="cmake">Compilation de httpd avec cmake</a></h2>
        
      
        <p>La documentation principale pour ce mécanisme de compilation se trouve
        dans le fichier <code>README.cmake</code> situé dans l'arborescence
        des sources. Consultez ce fichier pour des instructions détaillées.</p>
      
        <p>Pour compiler httpd avec cmake, vous devez compiler APR et APR-util
        séparément. Consultez les fichiers <code>README.cmake</code> de ces
        projets pour obtenir des instructions.</p>
      
        <p>Les principales limitations de la compilation basée sur cmake sont
        héritées du projet APR-util et sont énumérées ci-dessous à cause de
        leur impact sur httpd :</p>
      
        <ul>
          <li>Il n'est pas possible de compiler le projet APR-iconv avec
          cmake, et la compilation de APR-util ne peut pas utiliser de projet
          APR-iconv précompilé. A cause de cela, il n'est pas possible
          d'utiliser <code class="module"><a href="../mod/mod_charset_lite.html">mod_charset_lite</a></code> et probablement
          d'autres modules tiers.</li>
          <li>La compilation du sous-projet APR-util avec cmake ne supporte
          pas la plupart des bibliothèques optionnelles DBM et DBD utilisées
          par les fichiers projet Visual Studio inclus. Cela limite les
          serveurs de bases de données d'arrière-plan supportés par de
          nombreux modules tiers ou inclus.</li>
        </ul>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/platform/win_compiling.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/win_compiling.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/win_compiling.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/win_compiling.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/rpm.html����������������������������������������������������������0000644�0000000�0000050�00000000312�13362070302�016741� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: rpm.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: rpm.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/netware.html������������������������������������������������������0000644�0000000�0000050�00000000454�13362070302�017617� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: netware.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: netware.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: netware.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/index.html.zh-cn.utf8���������������������������������������������0000644�0000000�0000050�00000012665�13412755316�021206� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="zh-cn" xml:lang="zh-cn"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>å¹³å°ç›¸å…³è¯´æ˜Ž - Apache HTTP æœåС噍 版本 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">模å—</a> | <a href="../mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="../glossary.html">术语</a> | <a href="../sitemap.html">网站导航</a></p>
      <p class="apache">Apache HTTP æœåŠ¡å™¨ç‰ˆæœ¬ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP æœåС噍</a> &gt; <a href="http://httpd.apache.org/docs/">文档</a> &gt; <a href="../">版本 2.4</a></div><div id="page-content"><div id="preamble"><h1>å¹³å°ç›¸å…³è¯´æ˜Ž</h1>
      <div class="toplang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="../en/platform/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/platform/" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">此翻译å¯èƒ½è¿‡æœŸã€‚è¦äº†è§£æœ€è¿‘的更改,请阅读英文版。</div>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#win">Microsoft Windows</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#other">其它平å°</a></li>
      </ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="win" id="win">Microsoft Windows</a></h2>
      
          
      
          <dl>
            <dt>使用 Apache</dt>
            <dd>
              <p>这篇文档解释了如何在 Microsoft Windows 中安装,é…置,以åŠè¿è¡Œ Apache 2.0 。</p>
      
              <p>å‚è§: <a href="windows.html">在 Microsoft Windows 中使用 Apache</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>编译 Apache</dt>
            <dd>
              <p>这篇文档解释了编译 Apache çš„è¦ç‚¹ã€‚</p>
      
              <p>å‚è§: <a href="win_compiling.html">为 Microsoft Windows 编译 Apache</a></p>
            </dd>
          </dl>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="other" id="other">其它平å°</a></h2>
      
          
      
          <dl>
            <dt>Novell NetWare</dt>
            <dd>
              <p>这篇文档解释了如何在 Novell NetWare 5.1 或更新的版本中,如何安装,é…置,以åŠè¿è¡Œ
              Apache 2.0 。
              </p>
      
              <p>å‚è§: <a href="netware.html">在 Novell NetWare 中使用 Apache</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>EBCDIC</dt>
            <dd>
              <p>从 Apache HTTP 版本 1.3 开始支æŒä½¿ç”¨ EBCDIC 字符集作为原生字符集的(éž ASCII)主机。</p>
      
              <div class="warning"><strong>警告:</strong>
              è¿™ç¯‡æ–‡æ¡£å°šæœªå®Œå…¨æ›´æ–°ï¼Œä»¥åæ˜ è‡ª Apache HTTP æœåŠ¡å™¨ç‰ˆæœ¬ 2.0
              之åŽçš„修改。æŸäº›ä¿¡æ¯å¯èƒ½ä»æ—§é€‚用,但请å°å¿ƒä½¿ç”¨å®ƒã€‚</div>
      
              <p>å‚è§: <a href="ebcdic.html">Apache 与 EBCDIC 系统</a></p>
            </dd>
          </dl>
      
        </div></div>
      <div class="bottomlang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="../en/platform/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/platform/" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />基于 <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> 许å¯è¯.</p>
      <p class="menu"><a href="../mod/">模å—</a> | <a href="../mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="../glossary.html">术语</a> | <a href="../sitemap.html">网站导航</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/win_compiling.html.ko.euc-kr��������������������������������������0000644�0000000�0000050�00000052442�13412755316�022624� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Microsoft Windows¿ë ¾ÆÆÄÄ¡ ÄÄÆÄÀÏ - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Platform Specific Notes</a></div><div id="page-content"><div id="preamble"><h1>Microsoft Windows¿ë ¾ÆÆÄÄ¡ ÄÄÆÄÀÏ</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/platform/win_compiling.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/win_compiling.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/win_compiling.html" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      
          <p>¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇϱâ Àü¿¡ ÁÖÀÇÇÒ Á¡ÀÌ ¸¹´Ù. ¹Ì¸® <a href="windows.html">Microsoft Windows¿¡¼­ ¾ÆÆÄÄ¡ »ç¿ë¹ý</a>À»
          Âü°íÇ϶ó.</p>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#requirements">¿ä±¸»çÇ×</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#commandbuild">¸í·ÉÇà¿¡¼­ ÄÄÆÄÀÏÇϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#workspacebuild">Developer Studio Workspace IDE¿¡¼­ ÄÄÆÄÀÏÇϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#projectcomponents">ÇÁ·ÎÁ§Æ® ±¸¼º¿ä¼Ò</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="requirements" id="requirements">¿ä±¸»çÇ×</a></h2>
      
          
      
          <p>¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇÏ·Á¸é ´ÙÀ½ÀÌ Á¤»óÀûÀ¸·Î ¼³Ä¡µÇ¾ß ÇÑ´Ù:</p>
      
          <ul>
            <li>
              <p>µð½ºÅ© °ø°£</p>
              <p>³²Àº µð½ºÅ© °ø°£ÀÌ ÃÖ¼ÒÇÑ 50 MB´Â µÇ¾ß ÇÑ´Ù. ¾ÆÆÄÄ¡
              ¼³Ä¡ÈÄ¿¡´Â »¡¸® Áõ°¡ÇÏ´Â ·Î±×¿Í ij½¬ÆÄÀÏÀ» Á¦¿ÜÇϰí
              ¾à 10 MB Á¤µµ°¡ ÇÊ¿äÇÏ´Ù. ½ÇÁ¦ µð½ºÅ© »ç¿ë·®Àº ¼±ÅÃÇÑ
              ±¸¼º°ú Á¦»ïÀÚ°¡ ¸¸µç ¸ðµâ ȤÀº ¶óÀ̺귯¸®¿¡ µû¶ó Å©°Ô
              ´Ù¸£´Ù.</p>
            </li>
      
            <li>
              <p>Microsoft Visual C++ 5.0 ÀÌ»ó.</p>
              <p>¾ÆÆÄÄ¡´Â ¸í·ÉÇà µµ±¸¸¦ »ç¿ëÇϰųª Visual Studio IDE
              Workbench ¾È¿¡¼­ ÄÄÆÄÀÏÇÒ ¼ö ÀÖ´Ù. ¸í·ÉÇà¿¡¼­ ÄÄÆÄÀÏÇÑ´Ù¸é
              <code>vcvars32</code> ¹èÄ¡ÆÄÀÏÀÌ ¼³Á¤ÇÏ´Â <code>PATH</code>,
              <code>INCLUDE</code>, <code>LIB</code> µî ȯ°æº¯¼ö°¡
              ÇÊ¿äÇÏ´Ù:</p>
      
              <div class="example"><p><code>
                "c:\Program Files\DevStudio\VC\Bin\vcvars32.bat"
              </code></p></div>
            </li>
      
            <li>
              <p>Windows Platform SDK.</p>
              <p>¾î¶² ¾ÆÆÄÄ¡ ±â´ÉÀ» »ç¿ëÇÏ·Á¸é Visual C++ 5.0¿¡ Ãß°¡·Î
              ÃֽŠMicrosoft Windows Platform SDK°¡ ÇÊ¿äÇÏ´Ù. ¸í·ÉÇà¿¡¼­
              ÄÄÆÄÀÏÇÑ´Ù¸é <code>setenv</code> ¹èÄ¡ÆÄÀÏÀÌ Platform
              SDK ȯ°æÀ» ¸¸µç´Ù:</p>
      
              <div class="example"><p><code>
                "c:\Program Files\Platform SDK\setenv.bat"
              </code></p></div>
      
              <p>Visual C++ 6.0 ÀÌ»ó¿¡ Æ÷ÇÔµÈ Platform SDK ÆÄÀÏÀº
              ÃæºÐÇÏ´Ù. ÀÌ ¹öÀüÀ» »ç¿ëÇÏ´Â »ç¿ëÀÚ´Â ÀÌ °úÁ¤À» »ý·«Çصµ
              µÈ´Ù.</p>
      
              <div class="note">¸ðµç <code class="module"><a href="../mod/mod_isapi.html">mod_isapi</a></code> ±â´ÉÀ» »ç¿ëÇÏ·Á¸é
              ÃֽŠWindows Platform SDK°¡ ÇÊ¿äÇÏ´Ù. ÃֽйöÀüÀÌ ¾Æ´Ï¸é
              MSVC++ 5.0Àº <code class="module"><a href="../mod/mod_isapi.html">mod_isapi</a></code> ±â´ÉÀÇ ÀϺθ¦
              »ç¿ëÇÒ ¼ö ¾ø´Ù°í °æ°íÇÑ´Ù. <a href="http://msdn.microsoft.com/downloads/sdks/platform/platform.asp">http://msdn.microsoft.com/downloads/sdks/platform/platform.asp</a>¿¡
              ÃֽйöÀüÀÌ ÀÖ´Ù.</div>
            </li>
      
            <li>
              <p>awk µµ±¸ (awk, gawk µî).</p>
              <p>ÄÄÆÄÀÏÇÑ ½Ã½ºÅÛ¿¡ ¾ÆÆÄÄ¡¸¦ ¼³Ä¡ÇÏ·Á¸é
              <code>awk.exe</code> µµ±¸¸¦ »ç¿ëÇÏ¿© ¿©·¯ ÆÄÀÏÀ» ¼öÁ¤Çؾß
              ÇÑ´Ù. (PerlÀ̳ª WSH/VB°ú ºñ±³ÇÏ¿©) ´Ù¿î¹Þ±â¿¡ ¸Å¿ì ÀÛ°í
              ÆÄÀÏ »ý¼º ÀÛ¾÷ÀÌ °¡´ÉÇÏ¿© awk¸¦ ¼±ÅÃÇß´Ù. Brian KernighanÀÇ
              <a href="http://cm.bell-labs.com/cm/cs/who/bwk/">http://cm.bell-labs.com/cm/cs/who/bwk/</a> »çÀÌÆ®¿¡
              ÄÄÆÄÀÏµÈ Win32 ½ÇÇàÆÄÀÏ <a href="http://cm.bell-labs.com/cm/cs/who/bwk/awk95.exe">http://cm.bell-labs.com/cm/cs/who/bwk/awk95.exe</a>ÀÌ
              ÀÖ´Ù. À̸§À» <code>awk95.exe</code> ´ë½Å
              <code>awk.exe</code>·Î º¯°æÇØ¾ß ÇÑ´Ù.</p>
      
              <div class="note">Developer Studio IDE´Â Tools ¸Þ´º Options...
              Directories ÅÇÀÇ (Developer Studio 7.0À̶ó¸é Projects
              - VC++ Directories pane) Executable files °æ·Î ¸ñ·Ï¿¡¼­¸¸
              <code>awk.exe</code>¸¦ ã´Â´Ù. ÀÌ ¸ñ·Ï¿¡ <code>awk.exe</code>
              °æ·Î¸¦ Ãß°¡Çϰí, ÇÊ¿äÇÏ´Ù¸é <code>PATH</code> ȯ°æº¯¼ö¿¡µµ
              Ãß°¡ÇÑ´Ù.</div>
      
              <div class="note">CygwinÀ» (<a href="http://www.cygwin.com/">http://www.cygwin.com/</a>) »ç¿ëÇÑ´Ù¸é
              <code>gawk.exe</code>¶ó´Â À̸§À¸·Î awk µµ±¸°¡ ÀÖÀ¸¸ç,
              <code>awk.exe</code> ÆÄÀÏÀº <code>gawk.exe</code> ÆÄÀÏÀÇ
              ½Éº¼¸µÅ©ÀÓÀ» ÁÖÀÇÇ϶ó. Windows ¸í·É ÇÁ·ÒÇÁÆ®°¡ ½Éº¼¸µÅ©¸¦
              ÀνÄÇÏÁö ¸øÇϱ⶧¹®¿¡ InstallBinÀ» ÄÄÆÄÀÏÇÒ¶§ ½ÇÆÐÇÑ´Ù.
              ÇØ°áÃ¥Àº cygwin¿¡¼­ <code>awk.exe</code>¸¦ »èÁ¦Çϰí
              <code>gawk.exe</code> À̸§À» <code>awk.exe</code>·Î
              ¹Ù²Û´Ù.</div>
            </li>
      
            <li>
              <p>[¼±ÅÃÀûÀÎ] OpenSSL ¶óÀ̺귯¸® (<code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>°ú
              <code>ab.exe</code>ÀÇ ssl Áö¿ø¿¡ »ç¿ë)</p>
              <p><strong>ÁÖÀÇ: °­·ÂÇÑ ¾Ïȣȭ¿Í ƯÇã°¡ °É¸° ÁöÀûÀç»ê±ÇÀ»
              Àü¼¼°è¿¡ ¹èÆ÷Çϴµ¥´Â »ó´çÇÑ Á¦¾àÀÌ ÀÖ´Ù.</strong>
              OpenSSLÀº ¹Ì±¹ ¼öÃâ±ÔÁ¦¹ýÀÌ ±ÔÁ¦ÇÏ¸ç ¹Ì±¹°ú ±âŸ Áö¿ª¿¡¼­
              ƯÇã·Î º¸È£µÇ´Â ÁöÀûÀç»ê±ÇÀÎ °­·ÂÇÑ ¾Ïȣȭ¸¦ Æ÷ÇÔÇÑ´Ù.
              Apache Software Foundation°ú OpenSSL ÇÁ·ÎÁ§Æ®´Â OpenSSL
              ÇÁ·ÎÁ§Æ®°¡ Á¦°øÇÏ´Â Äڵ带 ¼ÒÀ¯, »ç¿ë, ¹èÆ÷Çϴµ¥ µû¸¥
              ¹ýÀû ÀÚ¹®À» Á¦°øÇÏÁö ¾Ê´Â´Ù. <strong>Á÷Á¢ ¹ý·ü »ó´ãÀ»
              ¹Þ±æ ¹Ù¶õ´Ù. ´ç½Å ÇൿÀÇ Ã¥ÀÓÀº ´ç½Å¿¡°Ô ÀÖ´Ù.</strong></p>
      
              <p><code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>À̳ª (SSLÀ» Áö¿øÇÏ´Â
              <code>ab.exe</code>) abs ÇÁ·ÎÁ§Æ®¸¦ ÄÄÆÄÀÏÇÏ·Á¸é, OpenSSLÀ»
              <a href="http://www.openssl.org/source/">http://www.openssl.org/source/</a>¿¡¼­ ´Ù¿î¹Þ¾Æ¼­
              <code>srclib</code>ÀÇ <code>openssl</code>À̶ó´Â
              ÇÏÀ§µð·ºÅ丮¿¡ ¼³Ä¡ÇØ¾ß ÇÑ´Ù. <code>release</code>¿Í
              <code>debug</code>·Î ¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇÒ¶§ »ç¿ëÇϸç 0.9.7
              ¹öÀü¿¡ Àִ ƯÇã°¡ °É¸° ±â´ÉÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù¸é, ¾Æ·¡
              ÄÄÆÄÀÏ ¸í·É¾î¸¦ »ç¿ëÇÑ´Ù:</p>
      
              <div class="example"><p><code>
                perl Configure VC-WIN32<br />
                perl util\mkfiles.pl &gt;MINFO<br />
                perl util\mk1mf.pl dll no-asm no-mdc2 no-rc5 no-idea VC-WIN32 &gt;makefile<br />
                perl util\mk1mf.pl dll debug no-asm no-mdc2 no-rc5 no-idea VC-WIN32 &gt;makefile.dbg<br />
                perl util\mkdef.pl 32 libeay no-asm no-mdc2 no-rc5 no-idea &gt;ms\libeay32.def<br />
                perl util\mkdef.pl 32 ssleay no-asm no-mdc2 no-rc5 no-idea &gt;ms\ssleay32.def<br />
                nmake<br />
                nmake -f makefile.dbg
              </code></p></div>
      
            </li>
      
            <li>
              <p>[¼±ÅÃÀûÀÎ] zlib ¼Ò½º (<code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code>¿¡
              »ç¿ë)</p>
              <p>ZlibÀ» <code>srclib</code>ÀÇ <code>zlib</code>¶ó´Â
              ÇÏÀ§µð·ºÅ丮¿¡ ¼³Ä¡ÇØ¾ß ÇÏÁö¸¸, ¼Ò½º¸¦ ¹Ì¸® ÄÄÆÄÀÏÇÒ
              ÇÊ¿ä´Â ¾ø´Ù. ÄÄÆÄÀÏ ½Ã½ºÅÛÀº ÀÌ ¾ÐÃà¼Ò½º¸¦
              <code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code> ¸ðµâ°ú °°ÀÌ ÄÄÆÄÀÏÇÑ´Ù.
              ZlibÀº <a href="http://www.gzip.org/zlib/">http://www.gzip.org/zlib/</a>¿¡¼­ ±¸ÇÒ ¼ö ÀÖ´Ù --
              <code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code>´Â 1.1.4 ¹öÀü°ú Á¤»óÀûÀ¸·Î
              ÄÄÆÄÀϵǾú´Ù.</p>
            </li>
      
          </ul>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="commandbuild" id="commandbuild">¸í·ÉÇà¿¡¼­ ÄÄÆÄÀÏÇϱâ</a></h2>
      
          
      
          <p>¸ÕÀú Àû´çÇÑ µð·ºÅ丮¿¡ ¾ÆÆÄÄ¡ ¹èÆ÷º» ¾ÐÃàÀ» Ǭ´Ù. ¸í·ÉÇà
          ÇÁ·ÒÇÁÆ®¸¦ ¿­°í ±× µð·ºÅ丮·Î <code>cd</code>ÇÑ´Ù.</p>
      
          <p><code>Makefile.win</code> ÆÄÀÏ¿¡ ¾ÆÆÄÄ¡ makefile ¸í·ÉÀÌ
          ÀÖ´Ù. Windows NT¿¡¼­ <code>release</code>¿Í <code>debug</code>
          ÄÄÆÄÀÏÇÏ´Â ¸í·É¾î´Â °¢°¢ ´ÙÀ½°ú °°´Ù:</p>
      
          <div class="example"><pre>nmake /f Makefile.win _apacher
      
      nmake /f Makefile.win _apached</pre></div>
      
          <p>µÎ ¸í·É¾î ¸ðµÎ ¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇÑ´Ù. ÈÄÀÚ´Â °á°úÆÄÀÏ¿¡
          µð¹ö±ë Á¤º¸¸¦ Æ÷ÇÔÇÏ¿© ¹ö±×¸¦ ã°í ¹®Á¦¸¦ ÃßÀûÇϱ⠽±°Ô
          ÇÑ´Ù.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="workspacebuild" id="workspacebuild">Developer Studio Workspace IDE¿¡¼­ ÄÄÆÄÀÏÇϱâ</a></h2>
      
          
      
          <p>VC++ÀÇ Visual Studio °³¹ß ȯ°æÀ» »ç¿ëÇÏ¿© ¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇÒ
          ¼öµµ ÀÖ´Ù. °úÁ¤À» ½±°Ô ÇÏ·Á°í Visual Studio workspace
          <code>Apache.dsw</code>¸¦ Á¦°øÇÑ´Ù. ÀÌ workspace´Â ¿ÏÀüÇÑ
          ¾ÆÆÄÄ¡ ¹ÙÀ̳ʸ® ¹èÆ÷º»¿¡ ÇÊ¿äÇÑ <code>.dsp</code> ÇÁ·ÎÁ§Æ®
          ¸ñ·ÏÀ» ´ã°íÀÖ´Ù. ¶Ç, ¾Ë¸ÂÀº ¼ø¼­·Î ÄÄÆÄÀÏÇϱâÀ§ÇÑ ÇÁ·ÎÁ§Æ®°£
          ÀÇÁ¸¼º Á¤º¸µµ Æ÷ÇÔÇÑ´Ù.</p>
      
          <p><code>Apache.dsw</code> workspace¸¦ ¿­°í
          <code>InstallBin</code>À» (<code>Release</code>³ª
          <code>Debug</code> Áß ¿øÇÏ´Â °ÍÀ») Active Project·Î ¼±ÅÃÇÑ´Ù.
          <code>InstallBin</code>Àº °ü·ÃµÈ ¸ðµç ÇÁ·ÎÁ§Æ®¸¦ ÄÄÆÄÀÏÇϰí,
          ÄÄÆÄÀÏµÈ ½ÇÇàÆÄÀϰú dllÀ» ¿Å±â´Â <code>Makefile.win</code>À»
          È£ÃâÇÑ´Ù. <code>InstallBin</code>ÀÇ Settings, General ÅÇ,
          Build command line Ç׸ñÀ» ¼öÁ¤ÇÏ¿© <code>INSTDIR=</code>À»
          º¯°æÇÒ ¼ö ÀÖ´Ù. <code>INSTDIR=</code> ±âº»°ªÀº
          <code>/Apache2</code> µð·ºÅ丮ÀÌ´Ù. (¼³Ä¡ÇÏÁö¾Ê°í) Å×½ºÆ®·Î
          ÄÄÆÄÀϸ¸ ÇØº¸·Á¸é ´ë½Å <code>BuildBin</code> ÇÁ·ÎÁ§Æ®¸¦
          »ç¿ëÇÑ´Ù.</p>
      
          <p><code>.dsp</code> ÇÁ·ÎÁ§Æ® ÆÄÀÏÀº Visual C++ 6.0 Çü½ÄÀÌ´Ù.
          Visual C++ 5.0 (97)¿¡¼­µµ ÀÌ ÆÄÀÏÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù. Visual
          C++ 7.0 (.net)Àº <code>Apache.dsw</code>¿Í <code>.dsp</code>
          ÆÄÀϵéÀ» <code>Apache.sln</code>°ú <code>.msproj</code>
          ÆÄÀϵé·Î º¯È¯ÇÑ´Ù. <code>.dsp</code> ¼Ò½ºÆÄÀÏÀ» ¼öÁ¤Çϸé
          ¹Ýµå½Ã <code>.msproj</code> ÆÄÀÏ·Î ´Ù½Ã º¯È¯Ç϶ó! ±×³É VC++
          7.0 IDE¿¡¼­ <code>Apache.dsw</code>¸¦ ´Ù½Ã ¿­±â¸¸ ÇÏ¸é µÈ´Ù.</p>
      
          <p>¶Ç, Visual C++ 7.0 (.net) »ç¿ëÀÚ´Â Build ¸Þ´º, Configuration
          Manager ´ëȭâ¿¡¼­ <code>Debug</code>¿Í <code>Release</code>ÀÇ
          abs, <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>, <code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code>
          Solution modules ¼±ÅÃÀ» ÇØÁ¦ÇØ¾ß ÇÑ´Ù. <code>srclib</code>¿¡
          <code>openssl</code>À̳ª <code>zlib</code> µð·ºÅ丮°¡ ÀÖ´Â
          °æ¿ì¿¡¸¸ <code>nmake</code>¸¦ ½ÇÇàÇϰųª (ÀÌ ¸ðµâÀ» ¸í½ÃÀûÀ¸·Î
          ÄÄÆÄÀÏÇÏ´Â) IDE <code>BinBuild</code> ´ë»óÀ» »ç¿ëÇÏ¿© ¸ðµâÀ»
          ÄÄÆÄÀÏ ÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>ExportÇÑ <code>.mak</code> ÆÄÀϵéÀÌ È¥¶õ½º·´Áö¸¸, Visual
          C++ 5.0 »ç¿ëÀÚ°¡ <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>, abs (SSLÀ» Áö¿øÇÏ´Â
          ab), <code class="module"><a href="../mod/mod_deflate.html">mod_deflate</a></code>¸¦ ÄÄÆÄÀÏÇÒ¶§ ÇÊ¿äÇÏ´Ù.
          VC++ 7.0 (.net) »ç¿ëÀÚ¿¡°Ôµµ <code>binenv</code> º¸´Ù
          <code>nmake</code>¸¦ »ç¿ëÇϸé ÄÄÆÄÀÏÀÌ ´õ ºü¸£´Ù. VC++ 5.0À̳ª
          6.0 IDE¿¡¼­ Àüü ÇÁ·ÎÁ§Æ®¸¦ ÄÄÆÄÀÏÇϰí, Project ¸Þ´ºÀÇ Export
          for all makefiles¸¦ »ç¿ëÇ϶ó. µ¿ÀûÀ¸·Î ÀÚµ¿ »ý¼ºÇÏ´Â ´ë»óÀ»
          ¸ðµÎ ÄÄÆÄÀÏÇÏ°í ¿Ã¹Ù¸¥ ÀÇÁ¸¼º Á¤º¸¸¦ ¾ò±âÀ§Çؼ­´Â ¸ÕÀú
          ÇÁ·ÎÁ§Æ®¸¦ ÄÄÆÄÀÏÇØ¾ß ÇÑ´Ù. ´ÙÀ½ ¸í·É¾î¸¦ »ç¿ëÇÏ¿© °æ·Î¸¦
          ¼öÁ¤ÇÏ¸é ¾î¶² °æ·Î¿¡¼­µµ ÄÄÆÄÀÏÇÒ ¼ö ÀÖ´Ù:</p>
      
          <div class="example"><p><code>
            perl srclib\apr\build\fixwin32mak.pl
          </code></p></div>
      
          <p><code>httpd</code> ¼Ò½º <em>ÃÖ»óÀ§</em> µð·ºÅ丮¿¡¼­
          ¸í·É¾î¸¦ ½ÇÇàÇØ¾ß ÇÑ´Ù. ÇöÀç µð·ºÅ丮¿Í ÇÏÀ§µð·ºÅ丮¿¡ ÀÖ´Â
          ¸ðµç <code>.mak</code>¿Í <code>.dep</code> ÇÁ·ÎÁ§Æ®ÆÄÀÏÀ»
          ¼öÁ¤Çϰí, <code>.dsp</code>¸¦ °í·ÁÇÏ¿© ÆÄÀϽð£À» ¼öÁ¤ÇÑ´Ù.</p>
      
          <p>ÇÁ·ÎÁ§Æ®ÆÄÀÏÀ» ´Ùµë¾î¼­ ÆÐÄ¡¸¦ º¸³½´Ù¸é, ÇÁ·ÎÁ§Æ®ÆÄÀÏÀ»
          Visual Studio 6.0 Çü½ÄÀ¸·Î ¸¸µé¾î¾ß ÇÑ´Ù. º¯°æÀº °£´ÜÇϰí,
          VC++ 5.0¿¡¼­ 7.0±îÁö ¸ðµç ȯ°æ¿¡¼­ ÀνÄÇÏ´Â ÃÖ¼ÒÇÑÀÇ ÄÄÆÄÀÏ
          ¿É¼Ç°ú ¸µÄ¿ ¿É¼ÇÀ» »ç¿ëÇØ¾ß ÇÑ´Ù.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="projectcomponents" id="projectcomponents">ÇÁ·ÎÁ§Æ® ±¸¼º¿ä¼Ò</a></h2>
      
          
      
          <p><code>Apache.dsw</code> workspace¿Í <code>makefile.win</code>
          <code>nmake</code> ½ºÅ©¸³Æ®´Â ´ÙÀ½ ¼ø¼­´ë·Î ¾ÆÆÄÄ¡ ¼­¹ö
          <code>.dsp</code> ÇÁ·ÎÁ§Æ®¸¦ ÄÄÆÄÀÏÇÑ´Ù:</p>
      
          <ol>
            <li><code>srclib\apr\apr.dsp</code></li>
      
            <li><code>srclib\apr\libapr.dsp</code></li>
      
            <li><code>srclib\apr-util\uri\gen_uri_delims.dsp</code></li>
      
            <li><code>srclib\apr-util\xml\expat\lib\xml.dsp</code></li>
      
            <li><code>srclib\apr-util\aprutil.dsp</code></li>
      
            <li><code>srclib\apr-util\libaprutil.dsp</code></li>
      
            <li><code>srclib\pcre\dftables.dsp</code></li>
      
            <li><code>srclib\pcre\pcre.dsp</code></li>
      
            <li><code>srclib\pcre\pcreposix.dsp</code></li>
      
            <li><code>server\gen_test_char.dsp</code></li>
      
            <li><code>libhttpd.dsp</code></li>
      
            <li><code>Apache.dsp</code></li>
          </ol>
      
          <p>¶Ç, <code>modules\</code> ÇÏÀ§µð·ºÅ丮 ¾Æ·¡ ´ëºÎºÐÀÇ
          ¸ðµâ¿¡´Â ÇÁ·ÎÁ§Æ®ÆÄÀÏÀÌ ÀÖ´Ù.</p>
      
          <p><code>support\</code> µð·ºÅ丮¿¡´Â ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇϴµ¥
          ÇÊ¿äÇÏÁö´Â ¾ÊÁö¸¸, °ü¸®ÀÚ°¡ ¾ÆÆÄÄ¡¸¦ °Ë»çÇϰųª ¾ÏÈ£ÆÄÀϰú
          ·Î±×ÆÄÀÏÀ» °ü¸®Çϴµ¥ »ç¿ëÇÒ Ãß°¡ ÇÁ·Î±×·¥µéÀÇ ÇÁ·ÎÁ§Æ®ÆÄÀÏÀÌ
          ÀÖ´Ù. Windows Àü¿ë Áö¿ø ÇÁ·Î±×·¥Àº <code>support\win32\</code>
          µð·ºÅ丮¿¡ µû·Î ÀÖ´Ù.</p>
      
          <ol>
            <li><code>support\ab.dsp</code></li>
      
            <li><code>support\htdigest.dsp</code></li>
      
            <li><code>support\htpasswd.dsp</code></li>
      
            <li><code>support\logresolve.dsp</code></li>
      
            <li><code>support\rotatelogs.dsp</code></li>
      
            <li><code>support\win32\ApacheMonitor.dsp</code></li>
      
            <li><code>support\win32\wintty.dsp</code></li>
          </ol>
      
          <p>¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇϸé server root µð·ºÅ丮¿¡ ¼³Ä¡ÇØ¾ß ÇÑ´Ù.
          ±âº»°ªÀº °°Àº µð½ºÅ©ÀÇ <code>\Apache2</code> µð·ºÅ丮ÀÌ´Ù.</p>
      
          <p>ÄÄÆÄÀÏÇÏ°í ¸ðµç ÆÄÀÏÀ» ¿øÇÏ´Â Æú´õ <em>dir</em>¿¡ ÀÚµ¿À¸·Î
          ¼³Ä¡ÇÏ·Á¸é ´ÙÀ½ <code>nmake</code> ¸í·É¾îÁß Çϳª¸¦ »ç¿ëÇÑ´Ù:</p>
      
          <div class="example"><pre>nmake /f Makefile.win installr INSTDIR=<em>dir</em>
      
      nmake /f Makefile.win installd INSTDIR=<em>dir</em>
          </pre></div>
      
          <p><code>INSTDIR</code>ÀÇ <em>dir</em> ¾Æ±Ô¸ÕÆ®´Â ¼³Ä¡µð·ºÅ丮¸¦
          ¶æÇÑ´Ù. »ý¶ôÇϸé <code>\Apache2</code>¿¡ ¾ÆÆÄÄ¡¸¦ ¼³Ä¡ÇÑ´Ù.</p>
      
          <p>´ÙÀ½°ú °°ÀÌ ¼³Ä¡ÇÑ´Ù:</p>
      
          <ul>
            <li><code><em>dir</em>\bin\Apache.exe</code> - ¾ÆÆÄÄ¡
            ½ÇÇàÆÄÀÏ</li>
      
            <li><code><em>dir</em>\bin\ApacheMonitor.exe</code> -
            ¼­ºñ½º °¨½Ã¿ë ÀÛ¾÷Ç¥½ÃÁÙ ¾ÆÀÌÄÜ µµ±¸</li>
      
            <li><code><em>dir</em>\bin\htdigest.exe</code> - Digest
            auth ¾ÏÈ£ÆÄÀÏ µµ±¸</li>
      
            <li><code><em>dir</em>\bin\htdbm.exe</code> - SDBM auth
            µ¥ÀÌÅͺ£À̽º ¾ÏÈ£ÆÄÀÏ µµ±¸</li>
      
            <li><code><em>dir</em>\bin\htpasswd.exe</code> - Basic
            auth ¾ÏÈ£ÆÄÀÏ µµ±¸</li>
      
            <li><code><em>dir</em>\bin\logresolve.exe</code> - ·Î±×ÆÄÀÏ¿¡¼­
            dns À̸§À» ã´Â µµ±¸</li>
      
            <li><code><em>dir</em>\bin\rotatelogs.exe</code> - ·Î±×ÆÄÀÏ
            ¼øÈ¯ µµ±¸</li>
      
            <li><code><em>dir</em>\bin\wintty.exe</code> - ÄܼÖâ
            µµ±¸</li>
      
            <li><code><em>dir</em>\bin\libapr.dll</code> - Apache
            Portable Runtime °øÀ¯ ¶óÀ̺귯¸®</li>
      
            <li><code><em>dir</em>\bin\libaprutil.dll</code> - Apache
            Utility Runtime °øÀ¯ ¶óÀ̺귯¸®</li>
      
            <li><code><em>dir</em>\bin\libhttpd.dll</code> - Apache
            Core ¶óÀ̺귯¸®</li>
      
            <li><code><em>dir</em>\modules\mod_*.so</code> - ÀоîµéÀÏ
            ¼ö ÀÖ´Â ¾ÆÆÄÄ¡ ¸ðµâ</li>
      
            <li><code><em>dir</em>\conf</code> - ¼³Á¤ µð·ºÅ丮</li>
      
            <li><code><em>dir</em>\logs</code> - ºñ¾îÀÖ´Â ·Î±×
            µð·ºÅ丮</li>
      
            <li><code><em>dir</em>\include</code> - C ¾ð¾î Çì´õÆÄÀÏ</li>
      
            <li><code><em>dir</em>\lib</code> - ¸µÅ© ¶óÀ̺귯¸®ÆÄÀÏ</li>
          </ul>
      
          <h3><a name="projectcomponents-warn" id="projectcomponents-warn">°³¹ßÁßÀÎ ¾ÆÆÄÄ¡ ¹öÀüÀ» ÄÄÆÄÀÏÇÒ¶§ °æ°í</a></h3>
      
            
      
            <div class="note"><code>.dsp</code> ÆÄÀÏÀº <code>release</code>¸¶´Ù
            »õ·Î ¸¸µé¾îÁø´Ù. °³¹ßÀÚÀÇ ½Ã°£³¶ºñ¸¦ ¸·±âÀ§ÇØ
            <code>.mak</code> ÆÄÀÏÀº »õ·Î ¸¸µéÁö ¾Ê´Â´Ù. ±×·¯¹Ç·Î
            <code>NMAKE</code> ¸í·É¾î¸¦ »ç¿ëÇÏ¿© »õ·Î¿î <code>.dsp</code>
            ÇÁ·ÎÁ§Æ®ÆÄÀÏÀ» ÄÄÆÄÀÏÇÒ ¼ö ¾ø´Ù. ÇÁ·ÎÁ§Æ®¿¡¼­ Á÷Á¢ ¸ðµç
            <code>.mak</code> ÆÄÀÏÀ» exportÇØ¾ß ÇÑ´Ù. Microsoft Developer
            Studio ȯ°æ¿¡¼­ ÄÄÆÄÀÏÇÑ´Ù¸é ÀÌ ÀÛ¾÷ÀÌ ÇÊ¿ä¾ø´Ù.</div>
      
            <div class="note">¶Ç, makefileÀ» exportÇϱâ Àü¿¡ <code>BuildBin</code>
            ÇÁ·ÎÁ§Æ®¸¦ (ȤÀº <code>_apacher</code>³ª <code>_apached</code>
            ¸í·ÉÇà ´ë»ó) ÄÄÆÄÀÏÇÏ¸é ¸Å¿ì µµ¿òÀÌ µÈ´Ù. ÄÄÆÄÀÏÁß¿¡ ¸¹Àº
            ÆÄÀÏÀÌ ÀÚµ¿À¸·Î ¸¸µé¾îÁø´Ù. Àüü¸¦ ÄÄÆÄÀÏÇØ¾ß¸¸ Á¤»óÀûÀ¸·Î
            ÄÄÆÄÀÏÇÒ¶§ ÇÊ¿äÇÑ ÀÇÁ¸ÆÄÀÏÀ» ¸ðµÎ ¸¸µç´Ù.</div>
      
            <p>¹èÆ÷¿ë <code>.mak</code> ÆÄÀÏÀ» ¸¸µå·Á¸é Ç×»ó
            <code>.mak</code> (ȤÀº <code>.dep</code>)¿¡¼­ Platform
            SDK µîÀÇ ÀÇÁ¸¼ºÀ» Á¡°ËÇ϶ó.
            <code>DevStudio\SharedIDE\bin\</code> (VC5)³ª
            <code>DevStudio\Common\MSDev98\bin\</code> (VC6) µð·ºÅ丮¿¡´Â
            ¸ðµç ¿¹¿Ü ¸ñ·ÏÀÌ ´ã±ä <code>sysincl.dat</code> ÆÄÀÏÀÌ
            ÀÖ´Ù. ÀÌ ÆÄÀÏ¿¡ ÀÇÁ¸¼º Á¤º¸¸¦ Ãß°¡ÇÑ´Ù
            (<code>sys/time.h</code>¿Í <code>sys\time.h</code>¿Í °°ÀÌ,
            °æ·Î´Â ½½·¡½¬¸¦ »ç¿ëÇÑ °Í°ú ¹é½½·¡½¬¸¦ »ç¿ëÇÑ °Í ¸ðµÎ¸¦
            Ãß°¡ÇÑ´Ù). ¹èÆ÷ÇÒ <code>.mak</code> ÆÄÀÏ¿¡ ÇöÀç ÄÄÇ»ÅÍ¿¡¸¸
            ÇØ´çÇÏ´Â ¼³Ä¡°æ·Î°¡ ÀÖ´Ù¸é ÄÄÆÄÀÏÀÌ ¿ÏÀüÈ÷ ½ÇÆÐÇÑ´Ù.
            ±×·¯¹Ç·Î <code>srclib/apr/build/fixwin32mak.pl</code>À»
            ½ÇÇàÇØÇÏ¿© <code>.mak</code> ÆÄÀÏ¿¡ ÀÖ´Â Àý´ë°æ·Î¸¦ ¾ø¾Ö¾ß
            ÇÑ´Ù.</p>
      
          
      
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/platform/win_compiling.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/win_compiling.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/win_compiling.html" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/win_compiling.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/index.html��������������������������������������������������������0000644�0000000�0000050�00000000601�13362070302�017253� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: index.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: index.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: index.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: index.html.zh-cn.utf8
      Content-Language: zh-cn
      Content-type: text/html; charset=UTF-8
      �������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/windows.html������������������������������������������������������0000644�0000000�0000050�00000000454�13362070302�017644� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: windows.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: windows.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: windows.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/index.html.ko.euc-kr����������������������������������������������0000644�0000000�0000050�00000012614�13412755316�021072� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Ç÷¡Æûº° ¼³¸í - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Ç÷¡Æûº° ¼³¸í</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/platform/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/platform/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#win">Microsoft Windows</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#other">±âŸ Ç÷¡Æû</a></li>
      </ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="win" id="win">Microsoft Windows</a></h2>
      
          
      
          <dl>
            <dt>¾ÆÆÄÄ¡ »ç¿ë¹ý</dt>
            <dd>
              <p>ÀÌ ¹®¼­´Â Microsoft Windows¿¡¼­ ¾ÆÆÄÄ¡ 2.0À» ¼³Ä¡,
              ¼³Á¤, ½ÇÇàÇÏ´Â ¹æ¹ýÀ» ¼³¸íÇÑ´Ù.</p>
      
              <p>¹®¼­: <a href="windows.html">Microsoft Windows¿¡¼­
              ¾ÆÆÄÄ¡ »ç¿ë¹ý</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>¾ÆÆÄÄ¡ ÄÄÆÄÀÏ</dt>
            <dd>
              <p>¾ÆÆÄÄ¡¸¦ ÄÄÆÄÀÏÇϱâ Àü¿¡ ÁÖÀÇÇÒ Á¡ÀÌ ¸¹´Ù. ÀÌ ¹®¼­´Â
              ÀÌÁ¡À» ¼³¸íÇÑ´Ù.</p>
      
              <p>¹®¼­: <a href="win_compiling.html">Microsoft Windows¿ë ¾ÆÆÄÄ¡ ÄÄÆÄÀÏ</a></p>
            </dd>
          </dl>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="other" id="other">±âŸ Ç÷¡Æû</a></h2>
      
          
      
          <dl>
            <dt>Novell NetWare</dt>
            <dd>
              <p>ÀÌ ¹®¼­´Â Novell NetWare 5.1 À̻󿡼­ ¾ÆÆÄÄ¡ 2.0À»
              ¼³Ä¡, ¼³Á¤, ½ÇÇàÇÏ´Â ¹æ¹ýÀ» ¼³¸íÇÑ´Ù.</p>
      
              <p>¹®¼­: <a href="netware.html">Novell NetWare¿¡¼­ ¾ÆÆÄÄ¡
              »ç¿ëÇϱâ</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>EBCDIC</dt>
            <dd>
              <p>¾ÆÆÄÄ¡ À¥¼­¹ö´Â 1.3 ¹öÀü¶§ óÀ½À¸·Î EBCDIC ¹®ÀÚÁýÇÕÀ»
              ±âº» ¹®ÀÚÁýÇÕÀ¸·Î »ç¿ëÇÏ´Â (ºñ-ASCII) ¸ÞÀÎÇ÷¹ÀÓ ÄÄÇ»ÅÍ·Î
              Æ÷ÆÃµÇ¾ú´Ù.</p>
      
              <div class="warning"><strong>°æ°í:</strong> ÀÌ ¹®¼­´Â
              ¾ÆÆÄÄ¡ À¥¼­¹ö 2.0 ¹öÀü¿¡¼­ º¯°æµÈ ³»¿ëÀ» ´ã°íÀÖÁö ¾Ê´Ù.
              ¾ÆÁ÷µµ À¯È¿ÇÑ Á¤º¸°¡ ÀÖÁö¸¸, ÁÖÀÇÇØ¼­ »ç¿ëÇÏ±æ ¹Ù¶õ´Ù.</div>
      
              <p>¹®¼­: <a href="ebcdic.html">¾ÆÆÄÄ¡ EBCDIC Æ÷ÆÃ</a></p>
            </dd>
          </dl>
      
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/platform/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/platform/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/windows.html.fr.utf8����������������������������������������������0000644�0000000�0000050�00000111146�13503452341�021144� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Utilisation du serveur HTTP Apache sous Microsoft Windows - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Notes spécifiques à un
        système</a></div><div id="page-content"><div id="preamble"><h1>Utilisation du serveur HTTP Apache sous Microsoft Windows</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/platform/windows.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/windows.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/windows.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      
      
          <p>Ce document décrit l'installation, la configuration et
          l'exécution d'Apache 2.4 sous Microsoft Windows. Si vous avez des
          questions après avoir lu la documentation, ou si vous avez rencontré
          des évènements particuliers ou des rapports d'erreur, vous pouvez
          consultez la <a href="http://httpd.apache.org/userslist.html">liste
          de diffusion de la communauté des utilisateurs</a>.</p>
      
          <p>Dans ce document, nous supposons que vous installez une
          distribution binaire d'Apache. Si vous voulez compiler Apache
          vous-même (par exemple pour aider au développement ou pour
          rechercher des bogues), référez-vous au document <a href="win_compiling.html">Compilation d'Apache pour Microsoft
          Windows</a>.</p>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#req">Prérequis du système d'exploitation</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#down">Téléchargement d'Apache pour Windows</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cust">Personnaliser Apache pour Windows</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#winsvc">Exécuter Apache en tant que service</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#wincons">Exécuter Apache depuis la console</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#test">Vérification de l'installation</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#windrivemap">Configuration de l'accès aux ressources réseau</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#tuning">Personnalisation sous Windows</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="req" id="req">Prérequis du système d'exploitation</a></h2>
          
      
          <p>La plate-forme Windows de base pour l'exécution d'Apache 2.4 est
          Windows 2000 ou supérieur. Veillez à toujours vous procurer et installer le
          dernier service pack afin d'éviter les bogues du système
          d'exploitation.</p>
      
          <div class="note">Les versions du serveur HTTP Apache supérieures à 2.2 ne
          fonctionneront sous aucun système d'exploitation d'une version
          antérieure à Windows 2000.</div>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="down" id="down">Téléchargement d'Apache pour Windows</a></h2>
          
      
          <p>Le projet du serveur HTTP Apache proprement dit ne fournit pas de
          distribution binaire mais seulement le code source. Certains membres
          du projet <em>peuvent</em> mettre à disposition des paquets binaires
          à titre individuel, mais ceux-ci n'ont pas vocation à être
          distribués publiquement.</p>
          
          <p>Si vous n'êtes
          pas en mesure de compiler le serveur HTTP Apache vous-même, vous
          pouvez vous procurer un paquet binaire auprès des nombreuses
          distributions disponibles sur Internet.</p>
      
          <p>Quelques solutions populaires pour déployer Apache httpd, et
          éventuellement PHP et MySQL sous Microsoft Windows :</p>
          <ul>
          <li><a href="http://www.apachehaus.com/cgi-bin/download.plx">ApacheHaus</a></li>
          <li><a href="http://www.apachelounge.com/download/">Apache Lounge</a></li>
          <li><a href="http://bitnami.com/stack/wamp">Bitnami WAMP Stack</a></li>
          <li><a href="http://www.wampserver.com/">WampServer</a></li>
          <li><a href="http://www.apachefriends.org/en/xampp.html">XAMPP</a></li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cust" id="cust">Personnaliser Apache pour Windows</a></h2>
          
      
          <p>La configuration d'Apache est enregistrée dans les fichiers du
          sous-répertoire <code>conf</code>. Ce sont les même fichiers que
          ceux utilisés pour configurer la version Unix, mais il y a quelques
          directives spécifiques à Apache pour Windows. Voir l'<a href="../mod/directives.html">index des directives</a> pour la liste
          des directives disponibles.</p>
      
          <p>Les principales spécificités d'Apache pour Windows sont :</p>
          <ul>
            <li><p>Comme Apache pour Windows est un programme multithread, il
            ne lance pas de processus séparé pour chaque requête, comme Apache
            peut le faire sous Unix. En fait, il n'y a en général que deux
            processus Apache en exécution : un processus parent, et un
            processus enfant qui traite les requêtes. Chaque requête est
            traitée par un thread séparé au sein du processus enfant.</p>
      
            <p>Les directives de gestion de processus diffèrent également :</p>
      
            <p><code class="directive"><a href="../mod/mpm_common.html#maxconnectionsperchild">MaxConnectionsPerChild</a></code>
            : comme dans la version Unix, cette directive contrôle le nombre
            de connexions qu'un
            processus enfant particulier va traiter avant de s'arrêter.
            Cependant, à la différence d'Unix, un processus de remplacement
            n'est pas instantanément disponible. Utilisez la définition par
            défaut <code>MaxConnectionsPerChild 0</code>, sauf si vous
            risquez de manquer de mémoire dans des modules tiers ou dans des
            applications in-process.</p>
      
            <div class="warning"><strong>Attention : le fichier de
            configuration du serveur est rechargé lorsqu'un nouveau processus
            enfant est démarré. En conséquence, si vous avez modifié
            <code>httpd.conf</code>, le nouveau processus enfant peut ne pas
            démarrer, ou vous pouvez obtenir des résultats
            inattendus.</strong></div>
      
            <p><code class="directive"><a href="../mod/mpm_common.html#threadsperchild">ThreadsPerChild</a></code> : il
            s'agit d'une nouvelle directive. Elle indique au serveur le nombre
            de threads qu'il doit utiliser. Elle définit le nombre maximum de
            connexions simultanées que le serveur peut gérer ; vous devez
            donc vous assurer que ce nombre soit suffisamment grand pour les
            besoins de votre site. La valeur par défaut <code>ThreadsPerChild
            150</code> est recommandée, mais doit être ajustée à la valeur
            maximale estimée de connexions simultanées à accepter.</p></li>
      
            <li><p>Les directives qui acceptent des noms de fichiers comme
            arguments doivent utiliser des noms de fichiers Windows et non
            Unix. Cependant, comme Apache peut interpréter les anti-slashes
            comme des séquences d'échappement de caractères, vous devez
            absolument utiliser des slashes dans les noms de chemins à la
            place des anti-slashes.</p></li>
      
            <li><p>Alors que les noms de fichiers sont en général insensibles
            à la casse sous Windows, les URLs sont encore sensibles à la casse
            en interne avant d'être mises en correspondance avec le système de
            fichiers. Par exemple, les directives <code class="directive"><a href="../mod/core.html#location">&lt;Location&gt;</a></code>, <code class="directive"><a href="../mod/mod_alias.html#alias">Alias</a></code>, et <code class="directive"><a href="../mod/mod_proxy.html#proxypass">ProxyPass</a></code> utilisent toutes des
            arguments sensibles à la casse. Pour cette raison, il est
            particulièrement recommandé d'utiliser la directive <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> lorsqu'on
            désire limiter l'accès à certains contenus du système de fichiers,
            car cette directive s'applique à tout contenu d'un répertoire,
            sans tenir compte de la manière dont on y accède. Pour vous
            assurer que seules des minuscules sont utilisées dans les URLs,
            vous pouvez utiliser ceci :</p>
      
            <pre class="prettyprint lang-config">RewriteEngine On
      RewriteMap lowercase int:tolower
      RewriteCond "%{REQUEST_URI}" "[A-Z]"
      RewriteRule "(.*)" "${lowercase:$1}" [R,L]</pre>
      </li>
      
            <li><p>Lors de son exécution, Apache n'a besoin d'un accès en
            écriture qu'au répertoire des journaux et à toute arborescence de
            répertoires de cache configurée. Suite au problème d'insensibilité
            à la casse et au format de noms courts 8.3, Apache doit valider
            tous les noms de chemins fournis. Cela signifie que chaque
            répertoire qu'Apache évalue doit avoir les droits en lecture,
            listage et parcours, et ceci depuis la racine jusqu'aux feuilles.
            Si Apache2.4 est installé dans C:\Program Files, le répertoire
            racine, Program Files et Apache2.4 doivent tous être visibles pour
            Apache</p></li>
      
            <li><p>Apache peut charger divers modules sans qu'il soit nécessaire
            de recompiler le serveur. Si Apache est compilé
            normalement, il va installer de nombreux modules optionnels dans
            le répertoire <code>\Apache2.4\modules</code>. Pour activer ces
            modules ou d'autres modules, on doit utiliser la
            directive <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code>. Par
            exemple, pour activer le module status, ajoutez la ligne suivante
            (en plus des directives d'activation de status dans
            <code>access.conf</code>) :</p>
      
            <pre class="prettyprint lang-config">LoadModule status_module "modules/mod_status.so"</pre>
      
      
            <p>Des informations sont aussi à votre disposition pour <a href="../mod/mod_so.html#creating">créer des modules
            chargeables</a></p></li>
      
            <li><p>Apache peut aussi charger des extensions ISAPI (Internet
            Server Application Programming Interface), comme celles qu'utilise
            Microsoft IIS et d'autres serveurs Windows. <a href="../mod/mod_isapi.html">Voir ici pour plus
            d'informations</a>. Notez qu'Apache ne peut <strong>pas</strong>
            charger de filtres ISAPI, et que les gestionnaires ISAPI contenant
            des extensions de fonctionnalités Microsoft ne fonctionneront
            pas.</p></li>
      
            <li><p>Pour les scripts CGI, la méthode qu'utilise Apache pour
            déterminer l'interpréteur du script est configurable grâce à la
            directive <code class="directive"><a href="../mod/core.html#scriptinterpretersource">ScriptInterpreterSource</a></code></p></li>
      
            <li><p>Comme il est souvent difficile de gérer des fichiers avec
            des noms du style <code>.htaccess</code> sous Windows, vous avez
            tout intérêt à changer le nom de ce fichier de configuration par
            répertoire à l'aide de la directive <code class="directive"><a href="../mod/core.html#accessfilename">AccessFilename</a></code>.</p></li>
      
            <li><p>Toute erreur survenant au cours du processus de démarrage
            d'Apache est enregistrée dans le journal des évènements de
            Windows si l'on est sous Windows NT. Ce mécanisme fonctionne comme
            une sauvegarde pour les situations où Apache n'est pas encore prêt
            à utiliser le fichier <code>error.log</code>. Vous pouvez
            consulter le journal des évènements applicatifs Windows en
            utilisant l'observateur d'évènements : Démarrage - Paramètres -
            Panneau de configuration - Outils d'administration - Observateur
            d'évènements.</p></li>
          </ul>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="winsvc" id="winsvc">Exécuter Apache en tant que service</a></h2>
          
      
          <p>Apache fournit un utilitaire nommé Apache Service Monitor
          (Moniteur du service Apache). Grâce à lui, vous pouvez voir et gérer
          l'état de tous les services Apache installés sur toutes les machines
          du réseau. Pour pouvoir gérer un service Apache avec le moniteur,
          vous devez d'abord installer le service (soit automatiquement au
          cours de l'installation, soit manuellement).</p>
      
          <p>Vous pouvez installer Apache en tant que service Windows NT à
          partir de la ligne de commandes et depuis le sous-répertoire Apache
          <code>bin</code> comme suit :</p>
      
          <div class="example"><p><code>
            httpd.exe -k install
          </code></p></div>
      
          <p>Si vous avez installé plusieurs services Apache sur votre
          ordinateur, vous devrez spécifier le nom du service que vous voulez
          installer en utilisant la commande suivante (notez que si vous
          spécifiez un nom durant l'installation, vous devrez aussi le
          spécifier pour toute opération comportant l'option -k) :</p>
      
          <div class="example"><p><code>
            httpd.exe -k install -n "Nom-service"
          </code></p></div>
      
          <p>Si un service doit utiliser un fichier de configuration
          spécifique, utilisez ceci :</p>
      
          <div class="example"><p><code>
            httpd.exe -k install -n "Nom-service" -f "c:\fichiers\Nom-service.conf"
          </code></p></div>
      
          <p>Si vous utilisez la première commande sans paramètre particulier,
          excepté <code>-k install</code>, le service aura pour nom
          <code>Apache2.4</code> et le fichier de configuration sera censé
          être <code>conf\httpd.conf</code>.</p>
      
          <p>Supprimer un service Apache est très simple. Utilisez
          simplement :</p>
      
          <div class="example"><p><code>
            httpd.exe -k uninstall
          </code></p></div>
      
          <p>On peut spécifier un service Apache particulier en utilisant
          :</p>
      
          <div class="example"><p><code>
            httpd.exe -k uninstall -n "Nom service"
          </code></p></div>
      
          <p>Normalement, le démarrage, le redémarrage et l'arrêt d'un
          service Apache s'effectuent via le Moniteur de Service Apache, ou en
          utilisant des commandes telles que <code>NET START Apache2.4</code> et
          <code>NET STOP Apache2.4</code>, ou encore via le gestionnaire de
          services standard de Windows. Avant de démarrer Apache en tant que
          service dans quelque but que ce soit, vous devez tester le fichier
          de configuration du service en utilisant :</p>
      
          <div class="example"><p><code>
            httpd.exe -n "Nom-service" -t
          </code></p></div>
      
          <p>Vous pouvez aussi contrôler un service Apache à l'aide de ses
          options de ligne de commande. Avec cette méthode, pour démarrer un
          service Apache installé, vous utiliserez :</p>
      
          <div class="example"><p><code>
            httpd.exe -k start -n "Nom-Service"
          </code></p></div>
      
          <p>Pour arrêter un service Apache via les options de lignes de
          commande, utilisez ceci :</p>
      
          <div class="example"><p><code>
            httpd.exe -k stop -n "Nom-Service"
          </code></p></div>
      
          <p>ou</p>
      
          <div class="example"><p><code>
            httpd.exe -k shutdown -n "Nom-Service"
          </code></p></div>
      
          <p>Vous pouvez aussi redémarrer un service en exécution et le forcer
          à relire son fichier de configuration en utilisant :</p>
      
          <div class="example"><p><code>
            httpd.exe -k restart -n "Nom-Service"
          </code></p></div>
      
          <p>Par défaut, tous les services Apache sont configurés pour
          s'exécuter sous l'utilisateur system (le compte
          <code>LocalSystem</code>). Le compte <code>LocalSystem</code> n'a
          pas de privilèges sur votre réseau, que ce soit via un mécanisme
          sécurisé de Windows, y compris le système de fichiers, des tubes
          nommés, DCOM ou des RPC sécurisés. Il a cependant des privilèges
          élevés en local.</p>
      
          <div class="warning"><strong>N'accordez jamais de privilèges réseau
          au compte <code>LocalSystem</code> ! Si Apache doit pouvoir accéder
          à des ressources réseau, créez un compte séparé pour Apache comme
          indiqué ci-dessous.</strong></div>
      
          <p>Il est fortement fortement conseillé aux utilisateurs de créer un
          compte séparé pour exécuter le(s) service(s) Apache, et même
          obligatoire si vous devez accéder à des ressources réseau via
          Apache.</p>
      
          <ol>
            <li>Créez un compte d'utilisateur du domaine normal, et
            assurez-vous de retenir son mot de passe.</li>
      
            <li>Accordez à l'utilisateur nouvellement créé les privilèges
            <code>Log on as a service</code> et <code>Act as part of the
            operating system</code>. Sous Windows NT 4.0, ces privilèges sont
            accordés via le Gestionnaire des utilisateurs du Domaine, mais
            sous Windows 2000 et XP, vous aurez plutôt intérêt à utiliser une
            GPO pour propager ces configurations. Vous pouvez aussi effectuer
            ces réglages via la Politique de Sécurité Locale intégrée à la
            MMC.</li>
      
            <li>Vérifiez que le compte nouvellement créé est membre du groupe
            Utilisateurs</li>
      
            <li>Accordez à ce compte les droits Lecture et Exécution (RX) sur
            tous les documents et répertoires de scripts (<code>htdocs</code>
            et <code>cgi-bin</code> par exemple), et aussi sur l'exécutable
            binaire <code>httpd.exe</code>.</li>
      
            <li>Accordez aussi à ce compte les droits de modification sur le
            répertoire <code>logs</code>.</li>
      
          </ol>
      
          <div class="note">Il est en général de bonne pratique d'accorder à l'utilisateur
          sous lequel le service Apache s'exécute les droits en lecture et
          exécution (RX) sur l'ensemble du répertoire Apache2.4, sauf pour le
          sous-répertoire <code>logs</code>, sur lequel l'utilisateur doit
          avoir au moins les droits de modification (RWXD).</div>
      
          <p>Si vous permettez à ce compte de se connecter en tant
          qu'utilisateur et service, vous pouvez ouvrir une session sous ce
          compte et vérifier s'il a bien le droit d'exécuter les scripts, de
          lire les pages web, et si vous pouvez démarrer Apache à partir d'une
          console Windows. Si tout fonctionne, et si vous avez suivi les
          étapes ci-dessus, Apache devrait s'exécuter en tant que service sans
          problème.</p>
      
          <div class="note"><strong>Le code d'erreur 2186</strong> indique probablement
          qu'Apache ne peut pas accéder à une ressource réseau nécessaire, et
          que vous devez revoir la configuration "Log On As" (Se connecter en
          tant que ...) du service.</div>
      
          <p>Lorsqu'Apache démarre en tant que service, il se peut que vous
          obteniez un message d'erreur du Gestionnaire de Services Windows.
          Par exemple, si vous essayez de démarrer Apache en utilisant
          l'applet Services du Panneau de configuration de Windows, vous
          pouvez obtenir le message suivant :</p>
      
          <div class="example"><p><code>
            Could not start the Apache2.4 service on \\COMPUTER <br />
            Error 1067; The process terminated unexpectedly.
          </code></p></div>
      
          <p>Vous obtiendrez cette erreur à caractère général pour tout
          problème survenant au cours du démarrage du service Apache. Afin de
          déterminer exactement la cause du problème, vous devez suivre les
          instructions permettant d'exécuter Apache pour Windows depuis la
          ligne de commande.</p>
      
          <p>Si vous rencontrez des problèmes avec le service, il est
          conseillé de suivre les instructions ci-dessous afin d'essayer de
          démarrer httpd.exe depuis une console, et d'analyser les erreurs
          plutôt que vous démener à essayer de démarrer le service.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="wincons" id="wincons">Exécuter Apache depuis la console</a></h2>
          
      
          <p>Il est en général recommandé d'exécuter Apache en tant que
          service, mais il est parfois plus simple d'utiliser la ligne de
          commande, en particulier au cours de la configuration initiale et
          les tests.</p>
      
          <p>Pour exécuter Apache depuis la ligne de commande et en tant
          qu'application de console, utilisez la commande suivante :</p>
      
          <div class="example"><p><code>
            httpd.exe
          </code></p></div>
      
          <p>Apache va démarrer, et continuera son exécution jusqu'à ce qu'on
          l'arrête en tapant Ctrl-C.</p>
      
          <p>Vous pouvez également démarrer Apache via le raccourci "Démarrer
          Apache dans une console" placé dans <code>Démarrer --&gt;
          Programmes --&gt; Apache HTTP Server 2.4.xx --&gt; Control Apache
          Server</code> au cours de l'installation. Ceci va
          ouvrir une console Windows, et y démarrer Apache.
          Si vous n'avez pas installé Apache en tant que service, la
          fenêtre Windows restera ouverte jusqu'à ce que vous arrêtiez Apache
          en tapant Ctrl-C dans cette fenêtre. Le serveur va alors s'arrêter
          au bout de quelques secondes. Cependant, si vous avez installé
          Apache en tant que service, c'est ce dernier que le raccourci
          ci-dessus va lancer. Si le service Apache est déjà en cours
          d'exécution, le raccourci va rester sans effet.</p>
      
          <p>Si Apache s'exécute en tant que service, vous pouvez l'arrêter en
          ouvrant une autre console et en entrant :</p>
      
          <div class="example"><p><code>
            httpd.exe -k shutdown
          </code></p></div>
      
          <p>Plutôt que de lancer Apache à partir d'une console, il est
          préférable de l'exécuter en tant que service car dans ce cas, il
          termine proprement les opérations en cours avant de s'éteindre.</p>
      
          <p>Si le serveur a été lancé depuis une console, vous ne pouvez
          l'arrêter qu'en pressant la combinaison de touches Ctrl-C dans la
          même fenêtre.</p>
      
          <p>Vous pouvez aussi redémarrer Apache. Ceci le force à recharger
          son fichier de configuration. Toute opération en cours peut être
          achevée sans interruption. Pour redémarrer Apache, vous pouvez soit
          taper Control-Break dans la fenêtre de console que vous avez
          utilisée pour le démarrer, soit entrer :</p>
      
          <div class="example"><p><code>
            httpd.exe -k restart
          </code></p></div>
      
          <p>si le serveur s'exécute en tant que service.</p>
      
          <div class="note">Note pour les utilisateurs familiers de la version Unix
          d'Apache : les commandes ci-dessus représentent pour Windows
          l'équivalent des commandes <code>kill -TERM <em>pid</em></code> et
          <code>kill -USR1 <em>pid</em></code>. L'option de ligne de commande
          <code>-k</code> a été choisie à titre de rapprochement avec la
          commande <code>kill</code> utilisée sous Unix.</div>
      
          <p>Si la fenêtre de la console Apache se ferme immédiatement ou
          inopinément après le démarrage d'Apache, ouvrez une console Windows
          depuis le menu Démarrer --&gt; Programmes. Placez-vous dans le
          répertoire d'installation d'Apache, tapez la commande
          <code>httpd.exe</code>, et observez le message d'erreur. Allez
          ensuite dans le répertoire des journaux, et visualisez le fichier
          <code>error.log</code> pour détecter d'éventuelles erreurs de
          configuration. Si Apache a été installé dans <code>C:\Program
          Files\Apache Software Foundation\Apache2.4\</code>, vous
          pouvez entrer ce qui suit :</p>
      
          <div class="example"><p><code>
            c: <br />
            cd "\Program Files\Apache Software Foundation\Apache2.4\bin" <br />
            httpd.exe
          </code></p></div>
      
          <p>Attendez ensuite qu'Apache s'arrête ou tapez Ctrl-C. Entrez alors
          la commande suivante :</p>
      
          <div class="example"><p><code>
            cd ..\logs <br />
            more &lt; error.log
          </code></p></div>
      
          <p>Lorsqu'on travaille avec Apache, il est important de comprendre
          comment ce dernier trouve son fichier de configuration. Vous pouvez
          spécifier un fichier de configuration à partir de la ligne de
          commande de deux façons :</p>
      
          <ul>
            <li><p>L'option <code>-f</code> permet de spécifier un chemin
            absolu ou relatif vers un fichier de configuration particulier
            :</p>(sous Windows 9x, il est recommandé d'utiliser la ligne de
          commande à cause du manque de fiabilité du support des services
          fourni par ce système).
      
            <div class="example"><p><code>
              httpd.exe -f "c:\fichiers-de-mon-serveur\autre-config.conf"
            </code></p></div>
      
            <p>ou</p>
      
            <div class="example"><p><code>
              httpd.exe -f fichiers-de-mon-serveur\autre-config.conf
            </code></p></div></li>
      
            <li><p>L'option <code>-n</code> permet de spécifier le service
            Apache installé dont le fichier de configuration doit être utilisé
            :</p>
      
            <div class="example"><p><code>
              httpd.exe -n "Nom-service"
            </code></p></div>
            </li>
          </ul>
      
          <p>Dans les deux cas, la directive <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> doit être correctement définie
          dans le fichier de configuration.</p>
      
          <p>Si vous ne spécifiez aucun fichier de configuration à l'aide des
          options <code>-f</code> ou <code>-n</code>, Apache utilisera le nom
          du fichier de configuration compilé dans le serveur, en général
          <code>conf\httpd.conf</code>. Ce chemin codé en dur est relatif au
          répertoire d'installation. Vous pouvez vérifier ce chemin à partir
          de la valeur de l'étiquette <code>SERVER_CONFIG_FILE</code> en
          invoquant Apache avec l'option <code>-V</code>, comme ceci :</p>
      
          <div class="example"><p><code>
            httpd.exe -V
          </code></p></div>
      
          <p>Apache va ensuite essayer de déterminer la valeur de son
          <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> en effectuant les
          recherches suivantes, dans cet ordre :</p>
      
          <ol>
            <li>Une directive <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>
            via l'option de ligne de commande <code>-C</code>.</li>
      
            <li>L'option de ligne de commande <code>-d</code>.</li>
      
            <li>Le répertoire de travail courant.</li>
      
            <li>Une entrée de la base de registre créée dans le cas d'une
            installation binaire.</li>
      
            <li>La racine des documents (<code>DocumentRoot</code>) codée en dur
            dans le serveur. Elle
            correspond par défaut à <code>/apache</code>, et vous pouvez le
            vérifier en tapant <code>httpd.exe -V</code> et en recherchant
            l'étiquette <code>HTTPD_ROOT</code>.</li>
          </ol>
      
          <p>Si vous n'avez pas effectué d'installation binaire, dans certains
          scénarios, Apache va signaler l'absence de cette clé de registre.
          On peut passer outre cet avertissement si le serveur a été en mesure
          de trouver son fichier de configuration d'une autre manière.</p>
      
          <p>La valeur de cette clé correspond au répertoire <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> qui contient lui-même le
          sous-répertoire <code>conf</code>. Lors de son démarrage, Apache lit
          le fichier <code>httpd.conf</code> à partir de ce répertoire. Si ce
          fichier contient une directive <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> qui spécifie un répertoire
          différent de celui que contient la clé de registre ci-dessus, Apache
          oubliera la clé de registre, et utilisera le répertoire spécifié par
          le fichier de configuration. Si vous déplacez le répertoire Apache
          ou ses fichiers de configuration, il est vital de mettre à jour la
          directive <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code> dans
          <code>httpd.conf</code> afin de refléter la nouvelle
          localisation.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="test" id="test">Vérification de l'installation</a></h2>
          
      
          <p>Une fois Apache démarré (soit à partir d'une console Windows,
          soit en tant que service), ce dernier va se mettre à l'écoute sur
          le port 80 (à moins que vous ayiez modifié la directive <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> dans les fichiers de
          configuration ou que vous ayiez installé Apache pour l'utilisateur
          courant seulement). Pour vous connecter au serveur et accéder à la
          page par défaut, lancez un navigateur et entrez cette URL :</p>
      
          <div class="example"><p><code>
            http://localhost/
          </code></p></div>
      
          <p>Apache devrait renvoyer une page de bienvenue et vous devriez
          voir s'afficher "It Works!". Si rien ne se passe ou si vous obtenez
          une erreur, consultez le fichier <code>error.log</code> dans le
          sous-répertoire <code>logs</code>. Si votre serveur n'est pas
          connecté au réseau, ou si vous avez de sérieux problèmes avec la
          configuration de votre DNS (Domain Name Service), vous devez
          utiliser cette URL :</p>
      
          <div class="example"><p><code>
            http://127.0.0.1/
          </code></p></div>
      
          <p>Si Apache écoute un port non standard, vous devez le préciser
          explicitement dans l'URL :</p>
      
          <div class="example"><p><code>
            http://127.0.0.1:8080/
          </code></p></div>
      
          <p>Après que votre installation de base fonctionne, vous devez la
          configurer correctement en éditant les fichiers du sous-répertoire
          <code>conf</code>. Encore une fois, si vous modifiez la
          configuration du service Apache sous Windows NT, essayez d'abord de
          redémarrer le service depuis la ligne de commande afin de vous
          assurer de l'absence d'erreur.</p>
      
          <p>Comme Apache <strong>ne peut pas</strong> partager le même port
          avec d'autres applications TCP/IP, il se peut que vous soyez amené à
          arrêter, désinstaller ou reconfigurer certains services avant de
          démarrer Apache. Ces services entrant en conflit avec Apache
          comprennent les autres serveurs WWW, certaines implémentations de
          pare-feu, et même certaines applications client (comme Skype) qui
          utilisent le port 80 afin de contourner les pare-feu.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="windrivemap" id="windrivemap">Configuration de l'accès aux ressources réseau</a></h2>
          
      
        <p>L'accès à des fichiers par le réseau peut être spécifié via deux
        mécanismes fournis par Windows :</p>
      
        <dl>
          <dt>Association de lettres de lecteur</dt>
          <dd>Par exemple, <code>Alias "/images/" "Z:/"</code></dd>
      
          <dt>chemins UNC</dt>
          <dd>Par exemple, <code>Alias "/images/" "//imagehost/www/images/"</code></dd>
        </dl>
      
        <p>L'association de lettres de lecteur permet à l'administrateur de
        maintenir une correspondance avec une certaine machine et un certain
        chemin en dehors de la configuration d'Apache httpd. Cependant, ces
        associations ne sont possibles que dans le cadre des sessions
        interactives, et ne sont pas directement disponibles pour Apache httpd
        lorsqu'il est démarré en tant que service. <strong>N'utilisez par
        conséquent que des
        chemins UNC pour les ressources réseau dans httpd.conf,</strong> de
        façon à ce que les ressources soient accessibles quelle que soit la
        manière dont Apache httpd a été démarré (des procédures exotiques et
        probablement sujettes aux erreurs peuvent permettre de contourner la
        restriction due aux associations de lettres de lecteur, mais leur
        utilisation est déconseillée).</p>
      
        <div class="example"><h3>Exemple de DocumentRoot avec chemin UNC</h3><pre class="prettyprint lang-config">DocumentRoot "//dochost/www/html/"</pre>
      </div>
      
        <div class="example"><h3>Exemple de DocumentRoot avec adresse IP dans le chemin UNC</h3><pre class="prettyprint lang-config">DocumentRoot "//192.168.1.50/docs/"</pre>
      </div>
      
        <div class="example"><h3>Exemple d'Alias et répertoire correspondant avec
        chemin UNC</h3><pre class="prettyprint lang-config">Alias "/images/" "//imagehost/www/images/"
      
      &lt;Directory "//imagehost/www/images/"&gt;
      #...
      &lt;/Directory&gt;</pre>
      </div>
      
        <p>Lorsqu'Apache s'exécute en tant que service, vous devez créer un
        compte spécifique afin de pouvoir accéder aux ressources réseau, comme
        décrit ci-dessus.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="tuning" id="tuning">Personnalisation sous Windows</a></h2>
          
          <ul>
            <li><p>Si on utilise un grand nombre de redirections de journaux
            via des pipes, il est souvent nécessaire d'augmenter la
            taille de la mémoire du bureau ("desktop heap"). Pour une information plus
            détaillée, veuillez vous reporter à la documentation sur les <a href="../logs.html#piped">redirections de journaux</a>.</p></li>
          </ul>
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/platform/windows.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/windows.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/windows.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/windows.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/ebcdic.html.ko.euc-kr���������������������������������������������0000644�0000000�0000050�00000053401�13412755316�021173� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¾ÆÆÄÄ¡ EBCDIC Æ÷ÆÃ - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Platform Specific Notes</a></div><div id="page-content"><div id="preamble"><h1>¾ÆÆÄÄ¡ EBCDIC Æ÷ÆÃ</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/platform/ebcdic.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../ko/platform/ebcdic.html" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      
          <div class="warning">ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡ À¥¼­¹ö 2.0 ¹öÀü¿¡¼­
          º¯°æµÈ ³»¿ëÀ» ´ã°íÀÖÁö ¾Ê´Ù. ¾ÆÁ÷µµ À¯È¿ÇÑ Á¤º¸°¡ ÀÖÁö¸¸,
          ÁÖÀÇÇØ¼­ »ç¿ëÇÏ±æ ¹Ù¶õ´Ù.
          </div>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#overview">¾ÆÆÄÄ¡ EBCDIC Æ÷ÆÃ °³¿ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#design">¼³°è ¸ñÇ¥</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#technical">±â¼úÀû ÇØ°áÃ¥</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#porting">Æ÷ÆÃ¿¡ ´ëÇØ¼­</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#document">¹®¼­ ÀúÀå¿¡ ´ëÇØ¼­</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#modules">¾ÆÆÄÄ¡ ¸ðµâÀÇ »óÅÂ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#third-party">Á¦»ïÀÚ°¡ ¸¸µç ¸ðµâÀÇ »óÅÂ</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="overview" id="overview">¾ÆÆÄÄ¡ EBCDIC Æ÷ÆÃ °³¿ä</a></h2>
      
          
      
          <p>¾ÆÆÄÄ¡ À¥¼­¹ö´Â 1.3 ¹öÀü¶§ óÀ½À¸·Î EBCDIC ¹®ÀÚÁýÇÕÀ»
          ±âº» ¹®ÀÚÁýÇÕÀ¸·Î »ç¿ëÇÏ´Â (ºñ-ASCII) ¸ÞÀÎÇ÷¹ÀÓ ÄÄÇ»ÅÍ·Î
          Æ÷ÆÃµÇ¾ú´Ù.</p>
      
          <p>(<a href="http://www.siemens.de/servers/bs2osd/osdbc_us.htm">BS2000/OSD
          ¿î¿µÃ¼Á¦</a>¸¦ »ç¿ëÇÏ´Â SIEMENS °è¿­ ¸ÞÀÎÇ÷¹ÀÓÀ» ¸»ÇÑ´Ù.
          ÀÌ ¸ÞÀÎÇ÷¹ÀÓ ¿î¿µÃ¼Á¦¿¡´Â ÇöÀç SVR4°è¿­ÀÇ POSIX ÇÏÀ§½Ã½ºÅÛÀÌ
          ÀÖ´Ù).</p>
      
          <p>Æ÷ÆÃÀº óÀ½¿¡ ´ÙÀ½°ú °°Àº ¸ñÀû¿¡¼­ ½ÃÀ۵Ǿú´Ù</p>
      
          <ul>
            <li>ÀÌ Ç÷¹ÆûÀ¸·Îµµ <a href="http://dev.apache.org/">¾ÆÆÄÄ¡
            À¥¼­¹ö</a>¸¦ Æ÷ÆÃÇÒ ¼ö ÀÖ´Ù´Â °¡´É¼ºÀ» º¸À̱âÀ§Çؼ­</li>
      
            <li>(¸î³â Àü¿¡ Æ÷ÆÃµÈ) ¿À·¡µÈ <a href="http://www.w3.org/Daemon/">CERN-3.0</a> ¼­¹ö¸¦ ´ëüÇÒ
            "¾µ¸¸Çϰí À¯´ÉÇÑ" ÈİèÀÚ¸¦ ã±âÀ§ÇØ</li>
      
            <li>ÀÌ Ç÷¹Æû¿¡¼­ ¾ÆÆÄÄ¡ÀÇ prefork ÇÁ·Î¼¼½º ¹æ½ÄÀÌ CERNÀÇ
            accept-fork-serve ¹æ½Ä º¸´Ù 5¹è ÀÌ»ó ¼º´ÉÀÌ ÁÁÀ½À»
            º¸À̱âÀ§Çؼ­.</li>
          </ul>
      
          <p>ÀÌ ¹®¼­´Â Æ÷ÆÃ½Ã ¿©·¯ ¼³°è»ó °áÁ¤ÀÇ ÀÌÀ¯¸¦ ¼³¸íÇÑ´Ù.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="design" id="design">¼³°è ¸ñÇ¥</a></h2>
      
          
      
          <p>EBCDIC Æ÷ÆÃÀÇ ¸ñÀûÁß Çϳª´Â »õ·Î¿î ¼­¹ö·Î ÀüȯÀ» À¯µµÇϰí
          ½±°Ô ÀüȯÇÒ ¼ö ÀÖµµ·Ï °¡´ÉÇÑ (EBCDIC) CERN ¼­¹ö¿Í ȣȯ¼ºÀ»
          À¯ÁöÇÏ´Â °ÍÀÌ´Ù. ±×·¡¼­ HTML ¹®¼­°¡ (ÀÌÀü CERN ¼­¹ö°¡ ÀνÄÇÏ´Â
          À¯ÀÏÇÑ Çü½ÄÀÎ) ASCII¿Í (POSIX ÇÏÀ§½Ã½ºÅÛÀÇ ±âº» ¹®¼­ Çü½Ä.
          ±×·¯¹Ç·Î <code>grep</code>À̳ª <code>sed</code> °°Àº POSIX
          µµ±¸¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Â Çö½ÇÀûÀÎ Çü½ÄÀÎ) EBCDIC Áß ¾î´À Çü½ÄÀÎÁö
          ¼³Á¤ÇÒ ¼ö ÀÖ¾î¾ß ÇÑ´Ù. ÇöÀç ÇØ°áÃ¥Àº ¾ÆÆÄÄ¡ ¼­¹ö°¡ Áß°£¿¡¼­
          ¹®¼­¸¦ °¡·Îä¼­ ¹®¼­ÀÇ Çü½ÄÀ» ÆÄ¾ÇÇÏ´Â "°¡»ó MIME Çü½Ä"ÀÌ´Ù
          (¾Æ·¡ Âü°í). ´ÙÀ½ ¹öÀü¿¡¼­´Â º¯È¯ÇؾßÇÒ ¸ðµç ¹®¼­¿¡
          "ebcdic-handler"¸¦ Á¤ÀÇÇÏ´Â ¹æ¹ýÀ¸·Î ¹®Á¦¸¦ ÇØ°áÇÒ °ÍÀÌ´Ù.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="technical" id="technical">±â¼úÀû ÇØ°áÃ¥</a></h2>
      
          
      
          <p>¾ÆÆÄÄ¡°¡ BUFF ÀÚ·áÇü°ú ¸Þ½áµå¸¦ »ç¿ëÇÏ¿© ¸ðµç ÀÔÃâ·ÂÀ»
          ÇϹǷΠ°¡Àå ½¬¿î ¹æ¹ýÀº BUFF ó¸® ÇÔ¼ö¿¡ º¯È¯±â´ÉÀ» Ãß°¡ÇÏ´Â
          °ÍÀÌ´Ù. ¾ðÁ¦µçÁö º¯È¯ÇÒ ¼ö ÀÖ¾î¾ß Çϱ⶧¹®¿¡ BUFF °´Ã¼¸¦
          º¯È¯ÇØ¾ß ÇÏ´ÂÁö ¾Ë·ÁÁÖ´Â BUFF Ç¥½Ã¸¦ Ãß°¡Çß´Ù. ÀÌ Ç¥½Ã´Â
          HTTP ÇÁ·ÎÅäÄÝÀÇ ¿©·¯ ´Ü°è¿¡¼­ º¯°æµÉ ¼ö ÀÖ´Ù:</p>
      
          <ul>
            <li>¿äûÀ» ¹Þ±â Àü¿¡ <strong>º¯È¯</strong> (¿äû°ú ¿äûÇì´õ°¡
            Ç×»ó ASCII Çü½ÄÀ̱⠶§¹®¿¡)</li>
      
            <li>¿äû ³»¿ëÀ» ¹Þ¾ÒÀ»¶§ content type¿¡ µû¶ó
            <strong>º¯È¯/º¯È¯¾ÈÇÔ</strong> (¿äû ³»¿ëÀÌ ASCII ¹®ÀÚ³ª
            ¹ÙÀ̳ʸ® ÆÄÀÏÀÎ °æ¿ì º¯È¯ÇØ¾ß Çϱ⶧¹®¿¡)</li>
      
            <li>ÀÀ´äÇì´õ¸¦ º¸³»±â Àü¿¡ <strong>º¯È¯</strong> (ÀÀ´äÇì´õ´Â
            Ç×»ó ASCII Çü½ÄÀ̱⶧¹®¿¡)</li>
      
            <li>ÀÀ´ä ³»¿ëÀ» º¸³¾¶§ content type¿¡ µû¶ó
            <strong>º¯È¯/º¯È¯¾ÈÇÔ</strong> (ÀÀ´ä ³»¿ëÀÌ ¹®ÀÚ ÆÄÀÏÀ̰ųª
            ¹ÙÀ̳ʸ® ÆÄÀÏÀ̱⶧¹®¿¡)</li>
          </ul>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="porting" id="porting">Æ÷ÆÃ¿¡ ´ëÇØ¼­</a></h2>
      
          
      
          <ol>
            <li>
              <p>¼Ò½ºÀÇ º¯È­´Â µÎ°¡Áö <code>#ifdef</code>·Î ±¸ºÐÇÒ
              ¼ö ÀÖ´Ù:</p>
      
              <dl>
                <dt><code><strong>#ifdef
                CHARSET_EBCDIC</strong></code></dt>
      
                <dd>
                  <p>¸ðµç EBCDIC±â¹Ý ÄÄÇ»ÅÍ¿¡ ÇÊ¿äÇÑ ÄÚµå. ¹®ÀÚº¯È¯,
                  µÎ ¹®ÀÚÁýÇÕ°£ÀÇ ¿¬¼ÓµÈ ¹®ÀÚ°ª Â÷ÀÌ, ¾î¶² HTTP ÇÁ·ÎÅäÄÝ
                  ºÎºÐÀÌ º¯È¯µÇ¾ß ÇÏ´ÂÁö¸¦ ¾Ë·ÁÁִ ǥ½Ã <em>µî.</em></p>
                </dd>
      
                <dt><code><strong>#ifdef _OSD_POSIX</strong></code></dt>
      
                <dd>
                  <p>SIEMENS BS2000/OSD ¸ÞÀÎÇ÷¹ÀÓ Ç÷¹Æû¿¡¸¸ ÇÊ¿äÇÑ
                  ÄÚµå. BS2000/OSD Ç÷¹Æû¿¡¸¸ ÇÊ¿äÇÑ Çì´õÆÄÀÏ Â÷ÀÌ¿Í
                  ¼ÒÄÏ ±¸Çö ¹®Á¦¸¦ ´Ù·é´Ù.</p>
                </dd>
              </dl>
            </li>
      
            <li>
              <p>¼ÒÄÏ ¼öÁØ¿¡¼­ ASCII¿Í EBCDIC°£ º¯È­´Â (BS2000 POSIX¿¡´Â
              ÀÌ ±â´ÉÀ» Áö¿øÇÏ´Â ¼ÒÄÏ ¿É¼ÇÀÌ ÀÖ´Ù) HTTP ÇÁ·ÎÅäÄÝ ¼öÁØ¿¡¼­
              Àü¼ÛµÇ´Â ÀÚ·á¿¡ ÇÁ·ÎÅäÄݰü·Ã ¹®ÀÚ¿­°ú ÇÁ·ÎÅäÄݰú ¹«°üÇÑ
              ÀÏ¹ÝÆÄÀÏÀÌ ¼¯¿©Àֱ⶧¹®¿¡ ÀǵµÀûÀ¸·Î »ç¿ëÇÏÁö
              <em>¾Ê¾Ò´Ù</em>. HTTP ÇÁ·ÎÅäÄÝ ¹®ÀÚ¿­Àº (<code>GET</code>
              ¿äû, Header: ÁÙ, ±âŸ Á¤º¸ <em>µî.</em>) Ç×»ó ASCII
              Çü½ÄÀ̰í, ÆÄÀÏÀü¼Û ºÎºÐÀº (<em>Áï</em>, GIF ±×¸², CGI
              Ãâ·Â <em>µî.</em>) ¼­¹ö°¡ Ç×»ó "º¯È¯ÇÏÁö¾Ê°í ±×³É" º¸³»¾ß
              ÇÑ´Ù. ¼­¹ö ÄÚµå´Â "ÇÁ·ÎÅäÄÝ ¹®ÀÚ¿­"°ú "ÀÏ¹Ý ÀÚ·á"¸¦,
              ¹®ÀÚ¿­¿¡´Â <code>bgets()</code>³ª <code>rvputs()</code>,
              ¹ÙÀ̳ʸ® ÀÚ·á¿¡´Â <code>bgets()</code>³ª
              <code>rvputs()</code> ÇÔ¼ö¸¦ »ç¿ëÇÏ¿© ±¸º°ÇÑ´Ù. ±×·¯¹Ç·Î
              ¹«Á¶°Ç ¸ðµç °ÍÀ» º¯È¯ÇÏ´Â °ÍÀº ÀûÀýÇÏÁö ¾Ê´Ù.</p>
      
              <p>(¹°·Ð ¹®ÀÚÆÄÀÏÀÇ °æ¿ì EBCDIC ¹®¼­¸¦ Ç×»ó ASCII·Î
              ¼­ºñ½ºÇϵµ·Ï ÁغñÇØ¾ß ÇÑ´Ù)</p>
            </li>
      
            <li>
              <p>±×·¡¼­ Æ÷ÆÃ¿¡´Â (ÄÄÆÄÀÏ·¯°¡ EBCDIC ¹®ÀÚ¿­·Î º¯È¯ÇÑ)
              ¼­¹ö ³»ºÎ ¹®ÀÚ¿­°ú ¼­¹ö°¡ »ý¼ºÇÑ ¹®¼­¸¦ ±âº» ÇÁ·ÎÅäÄÝ
              ¼öÁØ¿¡¼­ º¯È¯ÇÏ´Â ±â´ÉÀÌ ÀÖ´Ù. ¼­¹ö Äڵ忡 »êÀçµÈ ASCII
              escape¹®ÀÚ <code>\012</code>¿Í <code>\015</code>´Â ¿¹¿Ü´Ù:
              À̵éÀÌ ÀÌ¹Ì ASCII <code>\n</code>°ú <code>\r</code>ÀÇ
              ¹ÙÀ̳ʸ® °ªÀ̱⶧¹®¿¡ ASCII·Î µÎ¹ø º¯È¯ÇÏ¸é ¾ÈµÈ´Ù.
              ÀÌ ¿¹¿Ü´Â ¼­¹ö°¡ »ý¼ºÇÑ ¹®ÀÚ¿­¿¡¸¸ Àû¿ëµÈ´Ù; <em>¿ÜºÎ</em>
              EBCDIC ¹®¼­´Â ASCII Áٹٲ޹®ÀÚ¸¦ Æ÷ÇÔÇÏ¸é ¾ÈµÈ´Ù.</p>
            </li>
      
            <li>
              <p>BUFF °ü¸®ÇÔ¼ö¸¦ »ç¿ëÇÏ´Â ¹æ¹ýÀ» »ìÆìº» ÈÄ ³ª´Â ¸ðµç
              puts/write/get/gets°¡ °ÅÄ¡°ÔµÇ´Â "ebcdic/ascii º¯È¯
              °èÃþ"À» Ãß°¡Çϰí, µ¿ÀûÀ¸·Î º¯È¯À¯¹«¸¦ ¼³Á¤ÇÒ ¼ö ÀÖ´Â
              º¯È¯ Ç¥½Ã¸¦ Ãß°¡Çß´Ù. ¹®¼­°¡ ¿øº»(ÆÄÀÏÀ̳ª CGI Ãâ·Â)¿¡¼­
              ´ë»ó(¿äûÇÑ Å¬¶óÀ̾ðÆ®)À¸·Î À̵¿ÇÒ¶§ Ç×»ó ÀÌ °èÃþÀ»
              µÎ¹ø Áö³­´Ù: <code>ÆÄÀÏ -&gt; ¾ÆÆÄÄ¡</code>, <code>¾ÆÆÄÄ¡
              -&gt; Ŭ¶óÀ̾ðÆ®</code>.</p>
      
              <p>¼­¹ö´Â ÀÌÁ¦ EBCDIC Çü½ÄÀ¸·Î µÈ CGI ½ºÅ©¸³Æ® Ãâ·ÂÀÇ
              Çì´õÁÙÀ» Àаí, ³ª¸ÓÁö ½ºÅ©¸³Æ® Ãâ·ÂÀÌ ASCIIÀÓÀ» ¾Ë¾Æ³¾
              ¼ö ÀÖ´Ù (WWW ¹æ¹®ÀÚ¼ö¸¦ ¼¼´Â ÇÁ·Î±×·¥°ú °°Àº °æ¿ì: ¹®¼­
              ³»¿ëÀº GIF ±×¸²ÀÌ´Ù). ±âº» EBCDIC Çü½ÄÀ¸·Î ¸ðµç Çì´õ¸¦
              ó¸®ÇÑ´Ù; ±×·± ´ÙÀ½ ¼­ºñ½ºÇÒ ¹®¼­ÀÇ type¿¡ µû¶ó ¼­¹ö´Â
              ¹®¼­ ³»¿ëÀÌ ÀÌ¹Ì ASCIIÀÎÁö ȤÀº EBCDIC¿¡¼­ º¯È¯À» ÇØ¾ß
              ÇÏ´ÂÁö °áÁ¤ÇÑ´Ù.</p>
            </li>
      
            <li>
              <p>(MIME typeÀÌ text/plain, text/html <em>µî</em>) ³»¿ëÀÌ
              ÀÏ¹Ý ¹®ÀÚÀÎ ¹®¼­¸¦ ¾Ï¹¬ÀûÀ¸·Î ASCII·Î º¯È¯Çϰųª, (»ç¿ëÀÚ¿¡°Ô
              ºü¸£°Ô ¼­ºñ½ºÇϱâÀ§ÇØ ¹Ì¸® ¹®¼­¸¦ ASCII Çü½ÄÀ¸·Î ÀúÀåÇÏ¿´°Å³ª
              NFS·Î ¸¶¿îÆ®ÇÑ µð·ºÅ丮¿¡ ÆÄÀÏÀÌ ÀÖ´Â °æ¿ì) º¯È¯¾øÀÌ
              ¼­ºñ½ºÇÒ ¼ö ÀÖ´Ù.</p>
      
              <p><strong>¿¹:</strong></p>
      
              <p>À̸§ÀÌ <code>.ahtml</code>·Î ³¡³ª´Â ÆÄÀÏÀ» ¾Ï¹¬ÀûÀÎ
              º¯È¯¾øÀÌ ASCII <code>text/html</code> ¹®¼­·Î (±×¸®°í
              <code>.ascii</code> È®ÀåÀÚ´Â ASCII
              <code>text/plain</code>À¸·Î) ¼­ºñ½ºÇÏ·Á¸é ´ÙÀ½ Áö½Ã¾î¸¦
              »ç¿ëÇÑ´Ù:</p>
      
              <div class="example"><p><code>
                AddType  text/x-ascii-html  .ahtml <br />
                AddType  text/x-ascii-plain .ascii
              </code></p></div>
      
              <p>¶Ç, <code>text/foo</code> ½ÄÀÇ MIME typeÀ»
              <code>AddType</code> "<code>text/x-ascii-foo</code>"
              ¼³Á¤ÇÏ¿© "ÀÏ¹Ý ASCII"·Î ¼­ºñ½ºÇÒ ¼ö ÀÖ´Ù.</p>
            </li>
      
            <li>
              <p>³»¿ëÀÌ ÀÏ¹Ý ¹®ÀÚ°¡ ¾Æ´Ñ ¹®¼­´Â º¯È¯¾øÀÌ Ç×»ó "¹ÙÀ̳ʸ®"·Î
              ¼­ºñ½ºÇÑ´Ù. <em>¿¹¸¦ µé¾î</em>, GIF/ZIP/AU ÆÄÀÏÇü½Ä¿¡
              °¡Àå ÀûÇÕÇÑ ¼±ÅÃÀÌ´Ù. ¹°·Ð »ç¿ëÀÚ´Â "<code>rcp -b</code>"
              ¹ÙÀ̳ʸ® ¿É¼ÇÀ» »ç¿ëÇÏ¿© ÆÄÀÏÀ» ¸ÞÀÎÇ÷¹ÀÓ È£½ºÆ®·Î
              º¹»çÇß¾î¾ß ÇÑ´Ù.</p>
            </li>
      
            <li>
              <p>¼­¹öÆÄ½Ì ÆÄÀÏÀº Ç×»ó ÄÄÇ»ÅͰ¡ »ç¿ëÇÏ´Â ±âº» Çü½ÄÀ¸·Î
              (<em>Áï</em>, EBCDIC) ÀúÀåµÇ¾ú´Ù°í °¡Á¤Çϰí, ó¸®ÈÄ¿¡
              º¯È¯ÇÑ´Ù.</p>
            </li>
      
            <li>
              <p>CGI Ãâ·ÂÀÇ °æ¿ì CGI ½ºÅ©¸³Æ®°¡ º¯È¯ÀÌ ÇÊ¿äÇÑÁö °áÁ¤ÇÑ´Ù:
              ÀûÀýÇÑ Content-TypeÀ» ¼³Á¤ÇÏ¿©, ¹®ÀÚÆÄÀÏÀº º¯È¯Çϰí,
              GIF Ãâ·ÂÀº º¯È¯¾øÀÌ º¸³¾ ¼ö ÀÖ´Ù. ¿ì¸®°¡ Æ÷ÆÃÇÑ wwwcount
              ÇÁ·Î±×·¥ÀÌ ÈÄÀÚÀÇ °æ¿ì´Ù.</p>
            </li>
      
          </ol>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="document" id="document">¹®¼­ ÀúÀå¿¡ ´ëÇØ¼­</a></h2>
      
          
      
          <h3><a name="binary" id="binary">¹ÙÀ̳ʸ® ÆÄÀÏ</a></h3>
      
            
      
            <p>¼­¹ö´Â <code>Content-Type:</code>ÀÌ <code>text/</code>·Î
            ½ÃÀÛÇÏ´Â ¾Ê´Â ÆÄÀÏÀ» <em>¹ÙÀ̳ʸ® ÆÄÀÏ</em>·Î °£ÁÖÇÏ¿©
            ¾î¶² º¯È¯µµ ÇÏÁö ¾Ê´Â´Ù. ¹ÙÀ̳ʸ® ÆÄÀÏ¿¡´Â GIF ±×¸², gzipÀ¸·Î
            ¾ÐÃàÇÑ ÆÄÀÏ µîÀÌ ÀÖ´Ù.</p>
      
            <p>¸ÞÀÎÇ÷¹ÀÓ È£½ºÆ®¿Í À¯´Ð½º ȤÀº À©µµ¿ìÁî PC°£¿¡ ¹ÙÀ̳ʸ®
            ÆÄÀÏÀ» Àü¼ÛÇÒ ¶§´Â ftp "binary" (<code>TYPE I</code>) ¸í·É¾î³ª
            ¸ÞÀÎÇ÷¹ÀÓ È£½ºÆ®¿¡¼­ (À¯´Ð½º <code>rcp</code>´Â
            <code>-b</code> ¿É¼ÇÀ» Áö¿øÇÏÁö ¾Ê´Â´Ù) <code>rcp -b</code>
            ¸í·É¾î¸¦ ¹Ýµå½Ã »ç¿ëÇ϶ó.</p>
      
          
      
          <h3><a name="text" id="text">¹®ÀÚ ¹®¼­</a></h3>
      
            
      
            <p>±âº»ÀûÀ¸·Î ¼­¹ö´Â ¹®ÀÚÆÄÀÏÀÌ (<em>Áï</em>,
            <code>Content-Type:</code>ÀÌ <code>text/</code>·Î ½ÃÀÛÇÏ´Â
            ¸ðµç ÆÄÀÏ) È£½ºÆ®ÀÇ ±âº» ¹®ÀÚÁýÇÕÀÎ EBCDICÀ¸·Î ÀúÀåµÇ¾ú´Ù°í
            °¡Á¤ÇÑ´Ù.</p>
      
          
      
          <h3><a name="ssi" id="ssi">Server Side Include ¹®¼­</a></h3>
      
            
      
            <p>SSI ¹®¼­´Â ÇöÀç EBCDIC Çü½ÄÀ¸·Î¸¸ ÀúÀåÇØ¾ß ÇÑ´Ù. ó¸®Çϱâ
            Àü¿¡ ASCII¸¦ º¯È¯ÇÏÁö ¾Ê´Â´Ù.</p>
      
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="modules" id="modules">¾ÆÆÄÄ¡ ¸ðµâÀÇ »óÅÂ</a></h2>
      
          
      
          <table class="bordered">
            <tr>
              <th>¸ðµâ</th>
              <th>»óÅÂ</th>
              <th>ºñ°í</th>
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/core.html">core</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_access.html">mod_access</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_actions.html">mod_actions</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_alias.html">mod_alias</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_asis.html">mod_asis</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_auth.html">mod_auth</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_auth_anon.html">mod_auth_anon</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_auth_dbm.html">mod_auth_dbm</a></code></td>
              <td class="centered">?</td>
              <td>ÀÚü <code>libdb.a</code>¸¦ »ç¿ëÇÏ¿©</td>
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_autoindex.html">mod_autoindex</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_cern_meta.html">mod_cern_meta</a></code></td>
              <td class="centered">?</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code>mod_digest</code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_dir.html">mod_dir</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_so.html">mod_so</a></code></td>
              <td class="centered">-</td>
              <td>°øÀ¯¶óÀ̺귯¸®°¡ ¾øÀ½</td>
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_env.html">mod_env</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_example.html">mod_example</a></code></td>
              <td class="centered">-</td>
              <td>(½ÃÇè ´Ü°è)</td>
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_expires.html">mod_expires</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_headers.html">mod_headers</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_imagemap.html">mod_imagemap</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_include.html">mod_include</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_info.html">mod_info</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code>mod_log_agent</code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code>mod_log_config</code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_log_referer.html">mod_log_referer</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_mime.html">mod_mime</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_mime_magic.html">mod_mime_magic</a></code></td>
              <td class="centered">?</td>
              <td>¾ÆÁ÷ Æ÷ÆÃ¾ÈµÊ</td>
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_negotiation.html">mod_negotiation</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_proxy.html">mod_proxy</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code></td>
              <td class="centered">+</td>
              <td>Å×½ºÆ®¾ÈµÊ</td>
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_setenvif.html">mod_setenvif</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_speling.html">mod_speling</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_status.html">mod_status</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_unique_id.html">mod_unique_id</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_userdir.html">mod_userdir</a></code></td>
              <td class="centered">+</td>
              <td />
            </tr>
      
            <tr>
              <td><code class="module"><a href="../mod/mod_usertrack.html">mod_usertrack</a></code></td>
              <td class="centered">?</td>
              <td>Å×½ºÆ®¾ÈµÊ</td>
            </tr>
          </table>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="third-party" id="third-party">Á¦»ïÀÚ°¡ ¸¸µç ¸ðµâÀÇ »óÅÂ</a></h2>
      
          
      
          <table class="bordered">
            <tr>
              <th>¸ðµâ</th>
              <th>»óÅÂ</th>
              <th>ºñ°í</th>
            </tr>
      
            <tr>
              <td><code><a href="https://tomcat.apache.org/connectors-doc-archive/jk2/">JK</a> (mod_jserv)
              </code></td>
              <td class="centered">-</td>
              <td>JAVA´Â Æ÷ÆÃÁßÀÌ´Ù.</td>
            </tr>
      
            <tr>
              <td><code><a href="http://www.php.net/">mod_php3</a></code></td>
              <td class="centered">+</td>
              <td><code>mod_php3</code>´Â LDAP, GD, FreeType ¶óÀ̺귯¸®¿Í
              ÇÔ²² Àß µ¿ÀÛÇÑ´Ù.</td>
            </tr>
      
            <tr>
              <td><code><a href="http://hpwww.ec-lyon.fr/~vincent/apache/mod_put.html">mod_put</a></code></td>
              <td class="centered">?</td>
              <td>Å×½ºÆ®¾ÈµÊ</td>
            </tr>
      
            <tr>
              <td><code><a href="ftp://hachiman.vidya.com/pub/apache/">mod_session</a></code></td>
              <td class="centered">-</td>
              <td>Å×½ºÆ®¾ÈµÊ</td>
            </tr>
          </table>
      
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/platform/ebcdic.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../ko/platform/ebcdic.html" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/ebcdic.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/perf-hp.html.en���������������������������������������������������0000644�0000000�0000050�00000020443�13412755316�020127� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Running a High-Performance Web Server on HPUX - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Platform Specific Notes</a></div><div id="page-content"><div id="preamble"><h1>Running a High-Performance Web Server on HPUX</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/platform/perf-hp.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/perf-hp.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/perf-hp.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      
      
      <pre>Date: Wed, 05 Nov 1997 16:59:34 -0800
      From: Rick Jones &lt;<a href="mailto:raj@cup.hp.com">raj@cup.hp.com</a>&gt;
      Reply-To: <a href="mailto:raj@cup.hp.com">raj@cup.hp.com</a>
      Organization: Network Performance
      Subject: HP-UX tuning tips</pre>
      
          <p>Here are some tuning tips for HP-UX to add to the tuning page.</p>
      
          <p>For HP-UX 9.X: Upgrade to 10.20<br />
          For HP-UX 10.[00|01|10]: Upgrade to 10.20</p>
      
          <p>For HP-UX 10.20:</p>
      
          <p>Install the latest cumulative ARPA Transport Patch. This
          will allow you to configure the size of the TCP connection
          lookup hash table. The default is 256 buckets and must be set
          to a power of two. This is accomplished with adb against the
          *disc* image of the kernel. The variable name is <code>tcp_hash_size</code>.
          Notice that it's critically important that you use "<code>W</code>"
          to write a 32 bit quantity, not "<code>w</code>" to write a 16 bit
          value when patching the disc image because the <code>tcp_hash_size</code>
          variable is a 32 bit quantity.</p>
      
          <p>How to pick the value? Examine the output of <a href="ftp://ftp.cup.hp.com/dist/networking/tools/connhist">ftp://ftp.cup.hp.com/dist/networking/tools/connhist</a>
          and see how many total TCP connections exist on the system. You
          probably want that number divided by the hash table size to be
          reasonably small, say less than 10. Folks can look at HP's
          SPECweb96 disclosures for some common settings. These can be
          found at <a href="http://www.specbench.org/">http://www.specbench.org/</a>.
          If an HP-UX system was performing at 1000 SPECweb96 connections
          per second, the <code>TIME_WAIT</code> time of 60 seconds would mean
          60,000 TCP "connections" being tracked.</p>
      
          <p>Folks can check their listen queue depths with <a href="ftp://ftp.cup.hp.com/dist/networking/misc/listenq">ftp://ftp.cup.hp.com/dist/networking/misc/listenq</a>.</p>
      
          <p>If folks are running Apache on a PA-8000 based system, they
          should consider "chatr'ing" the Apache executable to have a
          large page size. This would be "<code>chatr +pi L &lt;BINARY&gt;</code>".
          The GID of the running executable must have <code>MLOCK</code> privileges.
          <code>Setprivgrp(1m)</code> should be consulted for assigning
          <code>MLOCK</code>. The change can be validated by running Glance
          and examining the memory regions of the server(s) to make sure that
          they show a non-trivial fraction of the text segment being locked.</p>
      
          <p>If folks are running Apache on MP systems, they might
          consider writing a small program that uses <code>mpctl()</code>
          to bind processes to processors. A simple <code>pid % numcpu</code>
          algorithm is probably sufficient. This might even go into the
          source code.</p>
      
          <p>If folks are concerned about the number of <code>FIN_WAIT_2</code>
          connections, they can use nettune to shrink the value of
          <code>tcp_keepstart</code>. However, they should be careful there -
          certainly do not make it less than oh two to four minutes. If
          <code>tcp_hash_size</code> has been set well, it is probably OK to
          let the <code>FIN_WAIT_2</code>'s take longer to timeout (perhaps
          even the default two hours) - they will not on average have a big
          impact on performance.</p>
      
          <p>There are other things that could go into the code base, but
          that might be left for another email. Feel free to drop me a
          message if you or others are interested.</p>
      
          <p>sincerely,</p>
      
          <p>rick jones</p>
      
          <p><a href="http://www.netperf.org/netperf/">http://www.netperf.org/netperf/</a></p>
      
        </div>
      </div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/platform/perf-hp.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/perf-hp.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ko/platform/perf-hp.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/perf-hp.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/platform/rpm.html.en�������������������������������������������������������0000644�0000000�0000050�00000030225�13412755316�017363� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Using Apache With RPM Based Systems (Redhat / CentOS / Fedora) - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Platform Specific Notes</a></div><div id="page-content"><div id="preamble"><h1>Using Apache With RPM Based Systems (Redhat / CentOS / Fedora)</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/platform/rpm.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/rpm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
      
          <p>While many distributions make Apache httpd available as operating system
          supported packages, it can sometimes be desirable to install and use the
          canonical version of Apache httpd on these systems, replacing the natively
          provided versions of the packages.</p>
      
          <p>While the Apache httpd project does not currently create binary RPMs
          for the various distributions out there, it is easy to build your own
          binary RPMs from the canonical Apache httpd tarball.</p>
      
          <p>This document explains how to build, install, configure and run
          Apache httpd 2.4 under Unix systems supporting the RPM packaging format.</p>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#creating">Creating a Source RPM</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#building">Building RPMs</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#installing">Installing the Server</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#default">Configuring the Default Instance of Apache httpd</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#additional">Configuring Additional Instances of Apache httpd on the Same Machine</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="creating" id="creating">Creating a Source RPM</a></h2>
          
      
          <p>The Apache httpd source tarball can be converted into an SRPM as
          follows:</p>
      
          <div class="example"><p><code>
            rpmbuild -ts httpd-2.4.x.tar.bz2
          </code></p></div>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="building" id="building">Building RPMs</a></h2>
          
      
          <p>RPMs can be built directly from the Apache httpd source tarballs using
          the following command:</p>
      
          <div class="example"><p><code>
            rpmbuild -tb httpd-2.4.x.tar.bz2
          </code></p></div>
      
          <p>Corresponding "-devel" packages will be required to be installed on your
          build system prior to building the RPMs, the <code>rpmbuild</code> command
          will automatically calculate what RPMs are required and will list any
          dependencies that are missing on your system. These "-devel" packages will
          not be required after the build is completed, and can be safely removed.</p>
      
          <p>If successful, the following RPMs will be created:</p>
      
          <dl>
          <dt>httpd-2.4.x-1.i686.rpm</dt>
          <dd>The core server and basic module set.</dd>
      
          <dt>httpd-debuginfo-2.4.x-1.i686.rpm</dt>
          <dd>Debugging symbols for the server and all modules.</dd>
      
          <dt>httpd-devel-2.4.x-1.i686.rpm</dt>
          <dd>Headers and development files for the server.</dd>
      
          <dt>httpd-manual-2.4.x-1.i686.rpm</dt>
          <dd>The webserver manual.</dd>
      
          <dt>httpd-tools-2.4.x-1.i686.rpm</dt>
          <dd>Supporting tools for the webserver.</dd>
      
          <dt>mod_authnz_ldap-2.4.x-1.i686.rpm</dt>
          <dd><code class="module"><a href="../mod/mod_ldap.html">mod_ldap</a></code> and <code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code>, with
          corresponding dependency on openldap.</dd>
      
          <dt>mod_lua-2.4.x-1.i686.rpm</dt>
          <dd><code class="module"><a href="../mod/mod_lua.html">mod_lua</a></code> module, with
          corresponding dependency on lua.</dd>
      
          <dt>mod_proxy_html-2.4.x-1.i686.rpm</dt>
          <dd><code class="module"><a href="../mod/mod_proxy_html.html">mod_proxy_html</a></code> module, with
          corresponding dependency on libxml2.</dd>
      
          <dt>mod_socache_dc-2.4.x-1.i686.rpm</dt>
          <dd><code class="module"><a href="../mod/mod_socache_dc.html">mod_socache_dc</a></code> module, with
          corresponding dependency on distcache.</dd>
      
          <dt>mod_ssl-2.4.x-1.i686.rpm</dt>
          <dd><code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> module, with
          corresponding dependency on openssl.</dd>
      
          </dl>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="installing" id="installing">Installing the Server</a></h2>
          
      
          <p>The <code>httpd</code> RPM is the only RPM necessary to get a basic
          server to run. Install it as follows:</p>
      
          <div class="example"><p><code>
            rpm -U httpd-2.4.x-1.i686.rpm
          </code></p></div>
      
          <p>Self contained modules are included with the server. Modules that
          depend on external libraries are provided as separate RPMs to install
          if needed.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="default" id="default">Configuring the Default Instance of Apache httpd</a></h2>
          
      
          <p>The default configuration for the server is installed by default
          beneath the <code>/etc/httpd</code> directory, with logs written by
          default to <code>/var/log/httpd</code>. The environment for the
          webserver is set by default within the optional
          <code>/etc/sysconfig/httpd</code> file.</p>
      
          <p>Start the server as follows:</p>
      
          <div class="example"><p><code>
            service httpd restart
          </code></p></div>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="additional" id="additional">Configuring Additional Instances of Apache httpd on the Same Machine</a></h2>
          
      
          <p>It is possible to configure additional instances of the Apache
          httpd server running independently alongside each other on the same
          machine. These instances can have independent configurations, and
          can potentially run as separate users if so configured.</p>
      
          <p>This was done by making the httpd startup script aware of its own
          name. This name is then used to find the environment file for the
          server, and in turn, the server root of the server instance.</p>
      
          <p>To create an additional instance called
          <code>httpd-additional</code>, follow these steps:</p>
      
          <ul>
            <li>Create a symbolic link to the startup script for the additional
            server:
      
            <div class="example"><p><code>
              ln -s /etc/rc.d/init.d/httpd /etc/rc.d/init.d/httpd-additional<br />
              chkconfig --add httpd-additional
            </code></p></div>
      
            </li>
      
            <li>Create an environment file for the server, using the
            <code>/etc/sysconfig/httpd</code> file as a template:
      
            <div class="example"><p><code>
              # template from httpd<br />
              cp /etc/sysconfig/httpd /etc/sysconfig/httpd-additional
            </code></p></div>
            
            <div class="example"><p><code>
              # blank template<br />
              touch /etc/sysconfig/httpd-additional
            </code></p></div>
      
            Edit <code>/etc/sysconfig/httpd-additional</code> and pass the
            server root of the new server instance within the
            <code>OPTIONS</code> environment variable.
      
            <div class="example"><p><code>
              OPTIONS="-d /etc/httpd-additional -f conf/httpd-additional.conf"
            </code></p></div>
      
            </li>
      
            <li>Edit the server configuration file
            <code>/etc/httpd-additional/conf/httpd-additional.conf</code> to
            ensure the correct ports and paths are configured.
            </li>
      
            <li>Start the server as follows:
      
            <div class="example"><p><code>
              service httpd-additional restart
            </code></p></div>
      
            </li>
      
            <li>Repeat this process as required for each server instance.</li>
          </ul>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/platform/rpm.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/platform/rpm.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/platform/rpm.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/���������������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273357�014615� 5����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/auth.html.ja.utf8����������������������������������������������������0000644�0000000�0000050�00000130201�13412755316�017712� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>èªè¨¼ã€æ‰¿èªã€ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="../">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a> &gt; <a href="./">How-To / ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«</a></div><div id="page-content"><div id="preamble"><h1>èªè¨¼ã€æ‰¿èªã€ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/howto/auth.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/auth.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/auth.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/auth.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/auth.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/auth.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
          <p>「èªè¨¼ã€ã¨ã¯ã€èª°ã‹ãŒè‡ªåˆ†ã¯èª°ã§ã‚ã‚‹ã‹ã‚’主張ã—ãŸå ´åˆã«ã€
          ãれを確èªã™ã‚‹ãŸã‚ã®å…¨éŽç¨‹ã‚’指ã—ã¾ã™ã€‚「承èªã€ã¨ã¯ã€
          誰ã‹ãŒè¡ŒããŸã„場所ã«è¡Œã‘るよã†ã«ã€ã‚ã‚‹ã„ã¯æ¬²ã—ã„æƒ…報を
          å¾—ã‚‹ã“ã¨ãŒã§ãるよã†ã«ã™ã‚‹ãŸã‚ã®å…¨éŽç¨‹ã‚’指ã—ã¾ã™ã€‚</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">関連ã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#introduction">ã¯ã˜ã‚ã«</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#theprerequisites">準備</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#gettingitworking">動作ã•ã›ã‚‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#lettingmorethanonepersonin">
      複数ã®äººãŒå…¥ã‚Œã‚‹ã‚ˆã†ã«ã™ã‚‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#possibleproblems">èµ·ã“りãˆã‚‹å•題</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#dbmdbd">パスワードã®ä¿å­˜å½¢å¼ã‚’変ãˆã‚‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#multprovider">複数ã®ãƒ—ロãƒã‚¤ãƒ€ã‚’使用ã™ã‚‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#beyond">å˜ç´”ãªæ‰¿èªã®ãã®å…ˆ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#moreinformation">追加情報</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">関連ã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–</a></h2>
      <p>èªè¨¼ã¨æ‰¿èªã®å‡¦ç†ã«é–¢é€£ã™ã‚‹ 3 種類ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒã‚りã¾ã™ã€‚
      ãれãžã‚Œå°‘ãªãã¨ã‚‚ã²ã¨ã¤ãšã¤å¿…è¦ã§ã™ã€‚</p>
      
      <ul>
        <li>èªè¨¼ã®ã‚¿ã‚¤ãƒ— (
            <code class="directive"><a href="../mod/core.html#authtype">AuthType</a></code> ディレクティブå‚ç…§)
          <ul>
            <li><code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code></li>
            <li><code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code></li>
          </ul>
        </li>
        <li>èªè¨¼ãƒ—ロãƒã‚¤ãƒ€ (
        <code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code>,
        <code class="directive"><a href="../mod/mod_auth_digest.html#authdigestprovider">AuthDigestProvider</a></code> ディレクティブå‚ç…§)
      
          <ul>
            <li><code class="module"><a href="../mod/mod_authn_anon.html">mod_authn_anon</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_default.html">mod_authn_default</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_file.html">mod_authn_file</a></code></li>
            <li><code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></li>
          </ul>
        </li>
        <li>æ‰¿èª (
            <code class="directive"><a href="../mod/core.html#require">Require</a></code> ディレクティブå‚ç…§)
          <ul>
            <li><code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_dbm.html">mod_authz_dbm</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_dbm.html">mod_authz_dbm</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_default.html">mod_authz_default</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_groupfile.html">mod_authz_groupfile</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_owner.html">mod_authz_owner</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_user.html">mod_authz_user</a></code></li>
          </ul>
        </li>
      </ul>
      
        <p>ã“れらã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«åŠ ãˆã¦ã€<code class="module"><a href="../mod/mod_authn_core.html">mod_authn_core</a></code>
        㨠<code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code> ãŒã‚りã¾ã™ã€‚
        ã“ã® 2 ã¤ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯èªè¨¼ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«å…±é€šãªã‚³ã‚¢ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’
        実装ã—ã¦ã„ã¾ã™ã€‚</p>
      
        <p><code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code> ã¯èªè¨¼ãƒ—ロãƒã‚¤ãƒ€ã¨æ‰¿èªãƒ—ロãƒã‚¤ãƒ€ã®
        ä¸¡æ–¹ã®æ©Ÿèƒ½ã‚’æŒã£ã¦ã„ã¾ã™ã€‚
        <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code> ã¯ãƒ›ã‚¹ãƒˆåã€IP アドレスや
        リクエストã®ç‰¹å¾´ã«åŸºã¥ã„ãŸã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã‚’行ã„ã¾ã™ãŒã€
        èªè¨¼ãƒ—ロãƒã‚¤ãƒ€ã®ã‚·ã‚¹ãƒ†ãƒ ã®ä¸€éƒ¨ã§ã¯ã‚りã¾ã›ã‚“。
        mod_access ã¨ã®å¾Œæ–¹äº’æ›æ€§ã®ãŸã‚ã€
        æ–°ã—ã„モジュール㮠<code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> ãŒã‚りã¾ã™ã€‚</p>
      
        <p>様々ãªã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã®è¡Œãªã„æ–¹ã«ã¤ã„ã¦ã¯ã€
        <a href="access.html">アクセス制御</a>ã®æ–¹æ³•ã‚’ã”覧ãã ã•ã„。</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">ã¯ã˜ã‚ã«</a></h2>
          <p>ã‚‚ã—æ©Ÿå¯†ã®æƒ…報やã€ã”ãã”ã少数グループã®äººå‘ã‘ã®æƒ…報を
          ウェブサイトã«ç½®ãã®ã§ã‚れã°ã€ã“ã®æ–‡æ›¸ã«æ›¸ã‹ã‚Œã¦ã„ã‚‹
          テクニックを使ã†ã“ã¨ã§ã€ãã®ãƒšãƒ¼ã‚¸ã‚’見ã¦ã„る人ãŸã¡ãŒ
          望ã¿ã®äººãŸã¡ã§ã‚ã‚‹ã“ã¨ã‚’確実ã«ã§ãã‚‹ã§ã—ょã†ã€‚</p>
      
          <p>ã“ã®æ–‡æ›¸ã§ã¯ã€å¤šãã®äººãŒæŽ¡ç”¨ã™ã‚‹ã§ã‚ã‚ã†ã€
          ウェブサイトã®ä¸€éƒ¨åˆ†ã‚’ä¿è­·ã™ã‚‹ã€Œä¸€èˆ¬çš„ãªã€
          方法ã«ã¤ã„ã¦ã‚«ãƒãƒ¼ã—ã¦ã„ã¾ã™ã€‚</p>
      
          <div class="note"><h3>注æ„</h3>
          <p>ãƒ‡ãƒ¼ã‚¿ãŒæœ¬å½“ã«æ©Ÿå¯†ãªã®ã§ã‚れã°ã€èªè¨¼ã«åŠ ãˆã¦ã•らã«
          <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> を使ã†ã¨è‰¯ã„ã§ã—ょã†ã€‚</p>
          </div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="theprerequisites" id="theprerequisites">準備</a></h2>
          <p>ã“ã®æ–‡æ›¸ã§å–り扱ã‚れるディレクティブã¯ã€
          メインサーãƒè¨­å®šãƒ•ァイル (普通㯠
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code>
          セクション中) ã‹ã€ã‚ã‚‹ã„ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæ¯Žã®è¨­å®šãƒ•ァイル 
          (<code>.htaccess</code> ファイル) ã‹ã§ç”¨ã„ã¾ã™ã€‚</p>
      
          <p><code>.htaccess</code> ファイルを用ã„ã‚‹ã®ã§ã‚れã°ã€
          ã“れらã®ãƒ•ァイルã«èªè¨¼ç”¨ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ç½®ã‘るよã†ã«
          サーãƒã®è¨­å®šã‚’ã—ãªã„ã¨ã„ã‘ãªã„ã§ã—ょã†ã€‚ã“れã¯
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>
          ディレクティブã§å¯èƒ½ã«ãªã‚Šã¾ã™ã€‚
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>
          ディレクティブã§ã¯ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæ¯Žã®è¨­å®šãƒ•ァイル中ã«ç½®ãã“ã¨ã®ã§ãã‚‹
          ディレクティブをã€ã‚‚ã—ã‚れã°ã€æŒ‡å®šã—ã¾ã™ã€‚</p>
      
          <p>èªè¨¼ã«ã¤ã„ã¦è©±ã‚’進ã‚ã¦ã„ã‚‹ã®ã§ã€æ¬¡ã®ã‚ˆã†ãª
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>
          ディレクティブãŒå¿…è¦ã«ãªã‚‹ã§ã—ょã†ã€‚</p>
      
          <div class="example"><p><code>
            AllowOverride AuthConfig
          </code></p></div>
      
          <p>ãã†ã§ãªãã€ãƒ¡ã‚¤ãƒ³ã‚µãƒ¼ãƒè¨­å®šãƒ•ァイルã®ä¸­ã«
          直接置ãã®ã§ã‚れã°ã€å½“ç„¶ãªãŒã‚‰ãã®ãƒ•ァイルã¸ã®æ›¸ãè¾¼ã¿
          権é™ã‚’æŒã£ã¦ã„ãªã‘れã°ãªã‚‰ãªã„ã§ã—ょã†ã€‚</p>
      
          <p>ã¾ãŸã€ã©ã®ãƒ•ァイルãŒã©ã“ã«ä¿å­˜ã•れã¦ã„ã‚‹ã‹çŸ¥ã‚‹ãŸã‚ã«ã€
          サーãƒã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæ§‹é€ ã«ã¤ã„ã¦å°‘ã—知ã£ã¦ãŠã
          å¿…è¦ãŒã‚ã‚‹ã§ã—ょã†ã€‚
          ã“れã¯ãã‚“ãªã«é›£ã—ããªã„ã®ã§ã€ã“ã®æ–‡æ›¸ä¸­ã§
          ディレクトリ構造ã«ã¤ã„ã¦çŸ¥ã£ã¦ãŠãå¿…è¦ãŒã‚ã‚‹å ´é¢ã§ã¯ã€
          明らã‹ã«ãªã‚‹ã‚ˆã†ã«ã—ã¾ã™ã€‚</p>
      
          <p><code class="module"><a href="../mod/mod_authn_core.html">mod_authn_core</a></code> 㨠<code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code> 
          ã®ä¸¡æ–¹ãŒ httpd ãƒã‚¤ãƒŠãƒªã«é™çš„ã«çµ„ã¿è¾¼ã¿æ¸ˆã¿ã§ã‚ã‚‹ã‹ã€httpd.conf 
          設定ファイルã§å‹•çš„ã«ãƒ­ãƒ¼ãƒ‰ã•れるã‹ã—ã¦ã€httpd ã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ãªã‘れã°
          ãªã‚Šã¾ã›ã‚“。ã“れらã®äºŒã¤ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã€è¨­å®šãƒ•ァイルã®ãªã‹ã§éžå¸¸ã«
          é‡è¦ã§ã‚¦ã‚§ãƒ–サーãƒã®èªè¨¼ã¨æ‰¿èªã§ä½¿ç”¨ã•れるコアディレクティブã¨
          ãã®æ©Ÿèƒ½ã‚’æä¾›ã—ã¦ã„ã¾ã™ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="gettingitworking" id="gettingitworking">動作ã•ã›ã‚‹</a></h2>
          <p>ã§ã¯ã€ã‚µãƒ¼ãƒä¸Šã®ã‚るディレクトリをパスワードã§ä¿è­·ã™ã‚‹
          基本手順を示ã—ã¾ã™ã€‚</p>
      
          <p>ã¾ãšã¯ã˜ã‚ã«ã€ãƒ‘スワードファイルを作りã¾ã™ã€‚
          ã©ã®èªè¨¼ãƒ—ロãƒã‚¤ãƒ€ã‚’使ã†ã‹ã«ã‚ˆã£ã¦ã€ãƒ‘スワードファイル生æˆã®æ‰‹é †ã¯
          大ããç•°ãªã‚Šã¾ã™ã€‚ã“ã“ã§ã®ä¾‹ã§ã¯ã€æ‰‹å§‹ã‚ã«ãƒ†ã‚­ã‚¹ãƒˆãƒ‘スワードファイルを
          使ã„ã¾ã™ã€‚</p>
      
          <p>ã“ã®ãƒ‘スワードファイルã¯ã€ã‚¦ã‚§ãƒ–ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ã§ãる場所ã«
          ç½®ãã¹ãã§ã¯ã‚りã¾ã›ã‚“。他ã®äººãŒãƒ‘スワードファイルを
          ダウンロードã§ããªã„よã†ã«ã™ã‚‹ãŸã‚ã§ã™ã€‚例ãˆã°ã€
          <code>/usr/local/apache/htdocs</code> ã§ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’
          æä¾›ã—ã¦ã„ã‚‹ã®ã§ã‚れã°ã€ãƒ‘スワードファイルã¯
          <code>/usr/local/apache/passwd</code>
          ãªã©ã«ç½®ã„ãŸæ–¹ãŒè‰¯ã„ã§ã—ょã†ã€‚</p>
      
          <p>ファイルを作るãŸã‚ã«ã¯ã€Apache 付属㮠<code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> 
          を使ã„ã¾ã™ã€‚ã“ã®ã‚³ãƒžãƒ³ãƒ‰ã¯ Apache ã‚’ã©ã“ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—よã†ã¨ã‚‚ã€
          インストールディレクトリ㮠<code>bin</code> 
          ディレクトリ以下ã«ç½®ã‹ã‚Œã¾ã™ã€‚サードãƒãƒ¼ãƒ†ã‚£è£½ã®ãƒ‘ッケージã§
          インストールã—ãŸå ´åˆã¯ã€å®Ÿè¡Œãƒ‘スã®ä¸­ã§è¦‹ã¤ã‹ã‚‹ã§ã—ょã†ã€‚</p>
          
          <p>ファイルを作るã«ã¯ã€æ¬¡ã®ã‚ˆã†ã«ã‚¿ã‚¤ãƒ—ã—ã¦ãã ã•ã„。</p>
      
          <div class="example"><p><code>
            htpasswd -c /usr/local/apache/passwd/passwords rbowen
          </code></p></div>
      
          <p><code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> ã¯ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’è¦æ±‚ã—ã€ãã®å¾Œ
          確èªã®ãŸã‚ã«ã‚‚ã†ä¸€åº¦å…¥åŠ›ã™ã‚‹ã‚ˆã†ã«è¦æ±‚ã—ã¦ãã¾ã™ã€‚</p>
      
          <div class="example"><p><code>
            # htpasswd -c /usr/local/apache/passwd/passwords rbowen<br />
            New password: mypassword<br />
            Re-type new password: mypassword<br />
            Adding password for user rbowen
          </code></p></div>
      
          <p>ã‚‚ã— <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> ãŒãƒ‘スã®ä¸­ã«å…¥ã£ã¦ã„ãªã„å ´åˆã¯ã€
          ã‚‚ã¡ã‚ã‚“ã€å®Ÿè¡Œã™ã‚‹ãŸã‚ã«ãƒ—ログラムã¾ã§ã®ãƒ•ルパスを
          タイプã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚デフォルトã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«çŠ¶æ…‹ã§ã‚れã°ã€
          <code>/usr/local/apache/bin/htpasswd</code>
          ã«ãƒ—ログラムãŒç½®ã‹ã‚Œã¦ã„ã¾ã™ã€‚</p>
      
          <p>次ã«ã€ã‚µãƒ¼ãƒãŒãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’è¦æ±‚ã™ã‚‹ã‚ˆã†ã«è¨­å®šã—ã¦ã€
          ã©ã®ãƒ¦ãƒ¼ã‚¶ãŒã‚¢ã‚¯ã‚»ã‚¹ã‚’許ã•れã¦ã„ã‚‹ã‹ã‚’サーãƒã«çŸ¥ã‚‰ã›ãªã‘れã°
          ãªã‚Šã¾ã›ã‚“。 <code>httpd.conf</code> を編集ã™ã‚‹ã‹
          <code>.htaccess</code> ファイルを使用ã™ã‚‹ã‹ã§
          設定ã—ã¾ã™ã€‚例ãˆã°ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒª
          <code>/usr/local/apache/htdocs/secret</code>
          ã‚’ä¿è­·ã—ãŸã„å ´åˆã¯ã€
          <code>/usr/local/apache/htdocs/secret/.htaccess</code>
          ㋠httpd.conf 中㮠&lt;Directory
          /usr/local/apache/htdocs/secret&gt; セクションã«
          é…ç½®ã—ã¦ã€æ¬¡ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <div class="example"><p><code>
            AuthType Basic<br />
            AuthName "Restricted Files"<br />
            # (Following line optional)<br />
            AuthBasicProvider file<br />
            AuthUserFile /usr/local/apache/passwd/passwords<br />
            Require user rbowen
          </code></p></div>
      
          <p>個々ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«ã¤ã„ã¦è¦‹ã¦ã¿ã¾ã—ょã†ã€‚
          <code class="directive"><a href="../mod/core.html#authtype">AuthType</a></code>
          ディレクティブã¯ã©ã†ã„ã†èªè¨¼æ–¹æ³•ã§ãƒ¦ãƒ¼ã‚¶ã®èªè¨¼ã‚’行ã†ã‹ã‚’
          é¸æŠžã—ã¾ã™ã€‚æœ€ã‚‚ä¸€èˆ¬çš„ãªæ–¹æ³•㯠<code>Basic</code>
          ã§ã€ã“れ㯠<code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code>
          ã§å®Ÿè£…ã•れã¦ã„ã¾ã™ã€‚ã—ã‹ã—ãªãŒã‚‰ã€
          ã“ã‚Œã¯æ°—を付ã‘ã‚‹ã¹ãé‡è¦ãªãƒã‚¤ãƒ³ãƒˆãªã®ã§ã™ãŒã€
          Basic èªè¨¼ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã‚µãƒ¼ãƒã¸ã€
          パスワードを暗å·åŒ–ã›ãšã«é€ã‚Šã¾ã™ã€‚ã§ã™ã‹ã‚‰ã“ã®æ–¹æ³•ã¯ã€
          <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> ã¨çµ„ã¿åˆã‚ã›ãªã„状態ã§ã¯ã€
          ç‰¹ã«æ©Ÿå¯†æ€§ã®é«˜ã„データã«å¯¾ã—ã¦ã¯ç”¨ã„ã‚‹ã¹ãã§ã¯
          ã‚りã¾ã›ã‚“。 Apache ã§ã¯ã‚‚ã†ä¸€ã¤åˆ¥ã®èªè¨¼æ–¹æ³•:
          <code>AuthType Digest</code> をサãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã™ã€‚
          ã“ã®æ–¹æ³•㯠<code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code>
          ã§å®Ÿè£…ã•れã¦ã„ã¦ã€ã‚‚ã£ã¨å®‰å…¨ã§ã™ã€‚
          最近ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯ Digest
          èªè¨¼ã‚’サãƒãƒ¼ãƒˆã—ã¦ã„るよã†ã§ã™ã€‚</p>
      
          <p><code class="directive"><a href="../mod/core.html#authname">AuthName</a></code>
          ディレクティブã§ã¯ã€èªè¨¼ã«ä½¿ã† <dfn>Realm</dfn> (訳注: 領域)
          を設定ã—ã¾ã™ã€‚Realm ã¯å¤§ãã分ã‘ã¦äºŒã¤ã®æ©Ÿèƒ½ã‚’æä¾›ã—ã¾ã™ã€‚
          一ã¤ç›®ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒãƒ‘スワードダイアログボックスã®
          一部ã¨ã—ã¦ãƒ¦ãƒ¼ã‚¶ã«ã“ã®æƒ…報をよãæç¤ºã™ã‚‹ã€ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚
          二ã¤ç›®ã«ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒä¸Žãˆã‚‰ã‚ŒãŸèªè¨¼é ˜åŸŸã«å¯¾ã—ã¦ã©ã®ãƒ‘スワードを
          é€ä¿¡ã™ã‚Œã°è‰¯ã„ã®ã‹ã‚’決定ã™ã‚‹ãŸã‚ã«ä½¿ã‚れるã€ã¨ã„ã†æ©Ÿèƒ½ã§ã™ã€‚</p>
      
          <p>例ãˆã°ã€<code>"Restricted Files"</code> 領域中ã§
          一度èªè¨¼ã•れれã°ã€åŒä¸€ã‚µãƒ¼ãƒä¸Šã§ <code>"Restricted Files"</code>
          Realm ã¨ã—ã¦ãƒžãƒ¼ã‚¯ã•れãŸã©ã‚“ãªé ˜åŸŸã§ã‚‚ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯
          自動的ã«åŒã˜ãƒ‘スワードを使ãŠã†ã¨è©¦ã¿ã¾ã™ã€‚
          ã“ã®ãŠã‹ã’ã§ã€è¤‡æ•°ã®åˆ¶é™é ˜åŸŸã«åŒã˜ realm を共有ã•ã›ã¦ã€
          ユーザãŒãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä½•åº¦ã‚‚è¦æ±‚ã•れる事態を
          防ãã“ã¨ãŒã§ãã¾ã™ã€‚ã‚‚ã¡ã‚ã‚“ã€ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®ç†ç”±ã‹ã‚‰ã€
          サーãƒã®ãƒ›ã‚¹ãƒˆåãŒå¤‰ã‚れã°ã„ã¤ã§ã‚‚å¿…ãšã€
          クライアントã¯å†ã³ãƒ‘スワードを尋ã­ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      
          <p><code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code>
          ã¯ãƒ‡ãƒ•ォルト値㌠<code>file</code> ãªã®ã§ã€ä»Šå›žã®å ´åˆã¯ç„¡ãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“。
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> ã‚„ <code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code>
          ã¨ã„ã£ãŸä»–ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’使ã†å ´åˆã«ã¯å¿…è¦ã«ãªã‚Šã¾ã™ã€‚
          </p>
      
          <p><code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code>
          ディレクティブ㯠<code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> ã§ä½œã£ãŸ
          パスワードファイルã¸ã®ãƒ‘スを設定ã—ã¾ã™ã€‚
          ユーザ数ãŒå¤šã„å ´åˆã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆæ¯Žã®ãƒ¦ãƒ¼ã‚¶ã®èªè¨¼ã®ãŸã‚ã®
          ãƒ—ãƒ¬ãƒ¼ãƒ³ãƒ†ã‚­ã‚¹ãƒˆã®æŽ¢ç´¢ãŒéžå¸¸ã«é…ããªã‚‹ã“ã¨ãŒã‚りã¾ã™ã€‚
          Apache ã§ã¯ãƒ¦ãƒ¼ã‚¶æƒ…報を高速ãªãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãƒ•ァイルã«
          ä¿ç®¡ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> モジュールãŒ
          <code class="directive"><a href="../mod/mod_authn_dbm.html#authdbmuserfile">AuthDBMUserFile</a></code>
          ディレクティブをæä¾›ã—ã¾ã™ã€‚ã“れらã®ãƒ•ァイル㯠<code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code>
          プログラムã§ä½œæˆã—ãŸã‚Šæ“作ã—ãŸã‚Šã§ãã¾ã™ã€‚
          <a href="http://modules.apache.org/">Apache 
          モジュールデータベース</a>中ã«ã‚るサードパーティー製ã®
          モジュールã§ã€ãã®ä»–多ãã®ã‚¿ã‚¤ãƒ—ã®èªè¨¼ã‚ªãƒ—ションãŒ
          利用å¯èƒ½ã§ã™ã€‚</p>
      
          <p>最後ã«ã€<code class="directive"><a href="../mod/core.html#require">Require</a></code>
          ディレクティブãŒã€ã‚µãƒ¼ãƒã®ã“ã®é ˜åŸŸã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãるユーザを
          指定ã™ã‚‹ã“ã¨ã«ã‚ˆã£ã¦ã€ãƒ—ãƒ­ã‚»ã‚¹ã®æ‰¿èªéƒ¨åˆ†ã‚’æä¾›ã—ã¾ã™ã€‚
          次ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã§ã¯ã€<code class="directive"><a href="../mod/core.html#require">Require</a></code>
          ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æ§˜ã€…ãªç”¨æ³•ã«ã¤ã„ã¦è¿°ã¹ã¾ã™ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="lettingmorethanonepersonin" id="lettingmorethanonepersonin">
      複数ã®äººãŒå…¥ã‚Œã‚‹ã‚ˆã†ã«ã™ã‚‹</a></h2>
          <p>上記ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ãŸã ä¸€äºº (具体的ã«ã¯ãƒ¦ãƒ¼ã‚¶å
          <code>rbowen</code> ã®èª°ã‹) ãŒãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«
          入れるよã†ã«ã—ã¾ã™ã€‚多ãã®å ´åˆã¯ã€è¤‡æ•°ã®äººãŒ
          入れるよã†ã«ã—ãŸã„ã§ã—ょã†ã€‚ã“ã“ã§
          <code class="directive"><a href="../mod/mod_authz_groupfile.html#authgroupfile">AuthGroupFile</a></code>
          ã®ç™»å ´ã§ã™ã€‚</p>
      
          <p>ã‚‚ã—複数ã®äººãŒå…¥ã‚Œã‚‹ã‚ˆã†ã«ã—ãŸã„ã®ã§ã‚れã°ã€
          グループã«å±žã™ã‚‹ãƒ¦ãƒ¼ã‚¶ã®ä¸€è¦§ã®å…¥ã£ã¦ã„ã‚‹ã€ã‚°ãƒ«ãƒ¼ãƒ—åã®ã¤ã„ãŸ
          グループファイルを作る必è¦ãŒã‚りã¾ã™ã€‚ã“ã®ãƒ•ァイルã®
          書å¼ã¯ãã‚ã‚ã¦å˜ç´”ã§ã€ãŠå¥½ã¿ã®ã‚¨ãƒ‡ã‚£ã‚¿ã§ç”Ÿæˆã§ãã¾ã™ã€‚
          ファイルã®ä¸­èº«ã¯æ¬¡ã®ã‚ˆã†ãªã‚‚ã®ã§ã™ã€‚</p>
      
         <div class="example"><p><code>
           GroupName: rbowen dpitts sungo rshersey
         </code></p></div>
      
          <p>一行ã«ã‚¹ãƒšãƒ¼ã‚¹åŒºåˆ‡ã‚Šã§ã€ã‚°ãƒ«ãƒ¼ãƒ—ã«æ‰€å±žã™ã‚‹ãƒ¡ãƒ³ãƒãƒ¼ã®
          一覧をãªã‚‰ã¹ã‚‹ã ã‘ã§ã™ã€‚</p>
      
          <p>æ—¢ã«å­˜åœ¨ã™ã‚‹ãƒ‘スワードファイルã«ãƒ¦ãƒ¼ã‚¶ã‚’加ãˆã‚‹å ´åˆã¯ã€
          次ã®ã‚ˆã†ã«ã‚¿ã‚¤ãƒ—ã—ã¦ãã ã•ã„。</p>
      
          <div class="example"><p><code>
            htpasswd /usr/local/apache/passwd/passwords dpitts
          </code></p></div>
      
          <p>以å‰ã¨åŒã˜å¿œç­”ãŒè¿”ã•れã¾ã™ãŒã€æ–°ã—ã„ファイルを
          作るã®ã§ã¯ãªãã€æ—¢ã«ã‚るファイルã«è¿½åŠ ã•れã¦ã„ã¾ã™ã€‚
          (æ–°ã—ã„パスワードファイルを作るã«ã¯ <code>-c</code>
          を使ã„ã¾ã™ã€‚)</p>
      
          <p>ã“ã“ã§æ¬¡ã®ã‚ˆã†ã«ã—㦠<code>.htaccess</code> ファイルを
          修正ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      
          <div class="example"><p><code>
            AuthType Basic<br />
            AuthName "By Invitation Only"<br />
            # Optional line:<br />
            AuthBasicProvider file<br />
            AuthUserFile /usr/local/apache/passwd/passwords<br />
            AuthGroupFile /usr/local/apache/passwd/groups<br />
            Require group GroupName
          </code></p></div>
      
          <p>ã“れã§ã€ã‚°ãƒ«ãƒ¼ãƒ— <code>GroupName</code> ã«ãƒªã‚¹ãƒˆã•れã¦ã„ã¦ã€
          <code>password</code> ファイルã«ã‚¨ãƒ³ãƒˆãƒªãŒã‚る人ã¯ã€
          æ­£ã—ã„パスワードをタイプã™ã‚Œã°å…¥ã‚‹ã“ã¨ãŒã§ãã‚‹ã§ã—ょã†ã€‚</p>
      
          <p>ã‚‚ã£ã¨ç‰¹å®šã›ãšã«è¤‡æ•°ã®ãƒ¦ãƒ¼ã‚¶ãŒå…¥ã‚Œã‚‹ã‚ˆã†ã«ã™ã‚‹ã€
          ã‚‚ã†ä¸€ã¤ã®æ–¹æ³•ãŒã‚りã¾ã™ã€‚グループファイルを作るã®ã§ã¯ãªãã€
          次ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を使ãˆã°ã§ãã¾ã™ã€‚</p>
      
          <div class="example"><p><code>
            Require valid-user
          </code></p></div>
      
          <p><code>require user rbowen</code> 行ã§ãªãã€ä¸Šè¨˜ã‚’使ã†ã¨ã€
          パスワードファイルã«ãƒªã‚¹ãƒˆã•れã¦ã„る人ã§ã‚れã°èª°ã§ã‚‚
          許å¯ã•れã¾ã™ã€‚
          å˜ã«ãƒ‘スワードファイルをグループ毎ã«åˆ†ã‘ã¦ãŠãã“ã¨ã§ã€
          グループã®ã‚ˆã†ãªæŒ¯ã‚‹èˆžã„ã‚’ã•ã›ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚
          ã“ã®ã‚¢ãƒ—ローãƒã®åˆ©ç‚¹ã¯ã€Apache ã¯äºŒã¤ã§ã¯ãªãã€
          ãŸã ä¸€ã¤ã®ãƒ•ァイルã ã‘を検査ã™ã‚Œã°ã‚ˆã„ã¨ã„ã†ç‚¹ã§ã™ã€‚
          欠点ã¯ã€ãŸãã•ã‚“ã®ãƒ‘スワードファイルを管ç†ã—ã¦ã€ãã®ä¸­ã‹ã‚‰
          <code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code>
          ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«æ­£ã—ã„ファイルをå‚ç…§ã•ã›ãªã‘れã°ãªã‚‰ãªã„点ã§ã™ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="possibleproblems" id="possibleproblems">èµ·ã“りãˆã‚‹å•題</a></h2>
          <p>Basic èªè¨¼ãŒæŒ‡å®šã•れã¦ã„ã‚‹å ´åˆã¯ã€
          サーãƒã«ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’リクエストã™ã‚‹åº¦ã«
          ユーザåã¨ãƒ‘スワードを検査ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。
          ã“れã¯åŒã˜ãƒšãƒ¼ã‚¸ã€ãƒšãƒ¼ã‚¸ã«ã‚ã‚‹å…¨ã¦ã®ç”»åƒã‚’
          リロードã™ã‚‹å ´åˆã§ã‚ã£ã¦ã‚‚該当ã—ã¾ã™
           (ã‚‚ã—ç”»åƒã‚‚ä¿è­·ã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‹ã‚‰æ¥ã‚‹ã®ã§ã‚れã°) 。
          予想ã•れる通りã€ã“れã¯å‹•作を多少é…ãã—ã¾ã™ã€‚
          é…ããªã‚‹ç¨‹åº¦ã¯ãƒ‘スワードファイルã®å¤§ãã•ã¨æ¯”例ã—ã¾ã™ãŒã€
          ã“れã¯ã€ãƒ•ァイルを開ã„ã¦ã‚ãªãŸã®åå‰ã‚’発見ã™ã‚‹ã¾ã§
          ユーザåã®ãƒªã‚¹ãƒˆã‚’読ã¾ãªã‘れã°ãªã‚‰ãªã„ã‹ã‚‰ã§ã™ã€‚
          ãã—ã¦ã€ãƒšãƒ¼ã‚¸ãŒãƒ­ãƒ¼ãƒ‰ã•れる度ã«ã“れを行ã‚ãªã‘れã°
          ãªã‚Šã¾ã›ã‚“。</p>
      
          <p>çµè«–ã¨ã—ã¦ã¯ã€ä¸€ã¤ã®ãƒ‘スワードファイルã«ç½®ãã“ã¨ã®ã§ãã‚‹
          ユーザ数ã«ã¯å®Ÿè³ªçš„ãªé™ç•ŒãŒã‚りã¾ã™ã€‚
          ã“ã®é™ç•Œã¯ã‚µãƒ¼ãƒãƒžã‚·ãƒ³ã®æ€§èƒ½ã«ä¾å­˜ã—ã¦å¤‰ã‚りã¾ã™ãŒã€
          数百ã®ã‚¨ãƒ³ãƒˆãƒªã‚’è¶ŠãˆãŸã‚ãŸã‚Šã‹ã‚‰é€Ÿåº¦ä½Žä¸‹ãŒè¦‹ã‚‰ã‚Œã‚‹ã¨äºˆæœŸã•れã¦ã„ã¾ã™ã€‚
          ãã®æ™‚ã¯ä»–ã®èªè¨¼æ–¹æ³•を考慮ã«å…¥ã‚ŒãŸæ–¹ãŒè‰¯ã„ã§ã—ょã†ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="dbmdbd" id="dbmdbd">パスワードã®ä¿å­˜å½¢å¼ã‚’変ãˆã‚‹</a></h2>
      
          <p>プレーンテキストã§ãƒ‘スワードをä¿å­˜ã™ã‚‹æ–¹æ³•ã«ã¯ä¸Šè¨˜ã®å•題ãŒã‚りã€
          データベースã®ã‚ˆã†ãªåˆ¥ã®å ´æ‰€ã«ãƒ‘スワードをä¿å­˜ã—ãŸã„ã¨æ€ã†
          ã‹ã‚‚ã—れã¾ã›ã‚“。</p>
      
          <p><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> 㨠<code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code>
          を使ã†ã¨ã€ãれãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚
          <code class="directive"><a href="../mod/mod_auth_basic.html#authbasicsource">AuthBasicSource</a></code>
          ã§ file ã®ä»£ã‚りã«ã€<code>dbm</code> ã‚ã‚‹ã„㯠<code>dbd</code>
          ã‚’æ ¼ç´å½¢å¼ã¨ã—ã¦é¸ã¹ã¾ã™ã€‚</p>
      
          <p>テキストファイルã®ä»£ã‚り㫠dbm ãƒ•ã‚¡ã‚¤ãƒ«ã‚’é¸æŠžã™ã‚‹å ´åˆã¯ã€ãŸã¨ãˆã°æ¬¡ã®ã‚ˆã†ã«ã—ã¾ã™ã€‚</p>
      
          <div class="example"><p><code>
          &lt;Directory /www/docs/private&gt;<br />
          AuthName "Private"<br />
          AuthType Basic<br />
          AuthBasicProvider dbm<br />
          AuthDBMUserFile /www/passwords/passwd.dbm<br />
          Require valid-user<br />
          &lt;/Directory&gt;
          </code></p></div>
      
          <p>ã“ã®ä»–ã®ã‚ªãƒ—ションも存在ã—ã¾ã™ã€‚詳細ã«é–¢ã—ã¦ã¯
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’ã”覧ãã ã•ã„。</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="multprovider" id="multprovider">複数ã®ãƒ—ロãƒã‚¤ãƒ€ã‚’使用ã™ã‚‹</a></h2>
      
          <p>èªè¨¼æ‰¿èªã‚¢ãƒ¼ã‚­ãƒ†ã‚¯ãƒãƒ£ã«åŸºã¥ã„ã¦ã„ã‚‹æ–°ã—ã„プロãƒã‚¤ãƒ€ã‚’使ã†ã¨ã€
          èªè¨¼æ‰¿èªã®æ–¹æ³•ã‚’ã²ã¨ã¤ã«ç¸›ã‚‹å¿…è¦ãŒãªããªã‚Šã¾ã™ã€‚
          ã„ãã¤ã‚‚ã®ãƒ—ロãƒã‚¤ãƒ€ã‚’組ã¿åˆã‚ã›ã¦ã€è‡ªåˆ†ã®æœ›ã¿ã®æŒ™å‹•ã«ã§ãã¾ã™ã€‚
          次ã®ä¾‹ã§ã¯ file èªè¨¼ãƒ—ロãƒã‚¤ãƒ€ã¨ ldap èªè¨¼ãƒ—ロãƒã‚¤ãƒ€ã‚’
          組ã¿åˆã‚ã›ã¦ã„ã¾ã™ã€‚</p>
      
          <div class="example"><p><code>
          &lt;Directory /www/docs/private&gt;<br />
          AuthName "Private"<br />
          AuthType Basic<br />
          AuthBasicProvider file ldap<br />
          AuthUserFile /usr/local/apache/passwd/passwords<br />
          AuthLDAPURL ldap://ldaphost/o=yourorg<br />
          Require valid-user
          </code></p></div>
      
          <p>ã“ã®ä¾‹ã§ã¯ã€ã¾ãš file プロãƒã‚¤ãƒ€ãŒãƒ¦ãƒ¼ã‚¶èªè¨¼ã‚’試ã¿ã¾ã™ã€‚
          èªè¨¼ã§ããªã‹ã£ãŸå ´åˆã«ã¯ã€ldap プロãƒã‚¤ãƒ€ãŒå‘¼ã³å‡ºã•れã¾ã™ã€‚
          組織ã§è¤‡æ•°ã®èªè¨¼æ ¼ç´æ–¹æ³•を使ã£ã¦ã„ã‚‹éš›ãªã©ã«ã€
          ã“ã®æ–¹æ³•を使ã£ã¦èªè¨¼ã®ã‚¹ã‚³ãƒ¼ãƒ—を拡大ã§ãã¾ã™ã€‚
          ã‚‚ã†ã²ã¨ã¤ã®ã‚·ãƒŠãƒªã‚ªã¯ã€ã²ã¨ã¤ã®èªè¨¼ã‚¿ã‚¤ãƒ—ã¨ç•°ãªã‚‹æ‰¿èªã‚’
          組ã¿åˆã‚ã›ã‚‹æ–¹æ³•ã§ã—ょã†ã€‚ãŸã¨ãˆã°ã€ãƒ‘スワードファイルã§èªè¨¼ã—ã¦ã€
          ldap ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã§æ‰¿èªã‚’行ã†ã¨ã„ã£ãŸå ´åˆã§ã™ã€‚</p>
      
          <p>èªè¨¼ãƒ—ロãƒã‚¤ãƒ€ã‚’複数実装ã§ãるよã†ã«ã€æ‰¿èªæ–¹æ³•も複数使用ã§ãã¾ã™ã€‚
          ã“ã®ä¾‹ã§ã¯ file グループ承èªã¨ ldap グループ承èªã‚’使ã£ã¦ã„ã¾ã™ã€‚</p>
      
          <div class="example"><p><code>
          &lt;Directory /www/docs/private&gt;<br />
          AuthName "Private"<br />
          AuthType Basic<br />
          AuthBasicProvider file<br />
          AuthUserFile /usr/local/apache/passwd/passwords<br />
          AuthLDAPURL ldap://ldaphost/o=yourorg
          AuthGroupFile /usr/local/apache/passwd/groups<br />
          Require group GroupName<br />
          Require ldap-group cn=mygroup,o=yourorg
          </code></p></div>
      
          <p>承èªã‚’より細ã‹ã制御ã—ãŸã„å ´åˆã¯ã€
          <code class="directive"><a href="../mod/mod_authz_core.html#&lt;satisfyall&gt;">&lt;SatisfyAll&gt;</a></code> ã¨
          <code class="directive"><a href="../mod/mod_authz_core.html#&lt;satisfyone&gt;">&lt;SatisfyOne&gt;</a></code> 
          ディレクティブを使ã£ã¦ AND/OR ãƒ­ã‚¸ãƒƒã‚¯ã§æŒ‡å®šã—ã€è¨­å®šãƒ•ァイルã§
          承èªã®å‡¦ç†é †ç•ªã®åˆ¶å¾¡ãŒã§ãるよã†ã«ãªã£ã¦ã„ã¾ã™ã€‚
          ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ã©ã®ã‚ˆã†ã«ä½¿ãˆã‚‹ã‹ã€ç¶²ç¾…ã—ãŸä¾‹ã‚’ã”覧ãã ã•ã„。</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="beyond" id="beyond">å˜ç´”ãªæ‰¿èªã®ãã®å…ˆ</a></h2>
      
          <p>承èªã®æ–¹æ³•ã¯ã€ã²ã¨ã¤ã®ãƒ‡ãƒ¼ã‚¿ã‚½ãƒ¼ã‚¹ã‚’見ã¦ä¸€å›žã ã‘ãƒã‚§ãƒƒã‚¯ã™ã‚‹ã®ã¨æ¯”ã¹ã¦ã€
          ãšã£ã¨å¤šå½©ãªé©ç”¨æ–¹æ³•ãŒã§ãã¾ã™ã€‚
          承èªå‡¦ç†ã®é©ç”¨é †åºã‚„制御ã€é¸æŠžãŒã§ãるよã†ã«ãªã‚Šã¾ã—ãŸã€‚</p>
      
          <h3><a name="authandororder" id="authandororder">AND/OR ロジックã®é©ç”¨ã¨é †åºä»˜ã‘</a></h3>
              <p>承èªãŒã©ã®ã‚ˆã†ãªé †åºã§é©ç”¨ã•れã¦ã„ã‚‹ã‹ã€ã¾ãŸã€ãれをã©ã®ã‚ˆã†ã«åˆ¶å¾¡ã™ã‚‹ã‹ã¯ã€
              ã“れã¾ã§æ··ä¹±ã‚’æ‹›ã„ã¦ã„ã¾ã—ãŸã€‚
              Apache 2.2 ã§ã¯ãƒ—ロãƒã‚¤ãƒ€ãƒ™ãƒ¼ã‚¹ã®èªè¨¼ãƒ¡ã‚«ãƒ‹ã‚ºãƒ ãŒå°Žå…¥ã•れã€
              承èªå‡¦ç†ã‹ã‚‰èªè¨¼å‡¦ç†ã¨ã‚µãƒãƒ¼ãƒˆæ©Ÿèƒ½ã¨ãŒåˆ‡ã‚Šåˆ†ã‘られã¾ã—ãŸã€‚
              ã“れã«ã‚ˆã‚‹ã²ã¨ã¤ã®åŠ¹æžœã¨ã—ã¦ã€
              èªè¨¼ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ãƒ­ãƒ¼ãƒ‰é †ã‚„モジュール自体ã®é †åºã«ä¾å­˜ã™ã‚‹ã“ã¨ãªãã€
              指定ã—ãŸé †ç•ªã§èªè¨¼ãƒ—ロãƒã‚¤ãƒ€ãŒå‘¼ã³å‡ºã›ã‚‹ã‚ˆã†ã€
      	設定ã§ãるよã†ã«ãªã‚Šã¾ã—ãŸã€‚
              ã“ã®ãƒ—ロãƒã‚¤ãƒ€ãƒ¡ã‚«ãƒ‹ã‚ºãƒ ã¯æ‰¿èªå‡¦ç†ã§ã‚‚å°Žå…¥ã•れã¦ã„ã¾ã™ã€‚
              ã¤ã¾ã‚Šã€<code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>
              ディレクティブã¯å˜ã«ã©ã®æ‰¿èªæ‰‹æ³•ãŒä½¿ã‚れるã‹ã‚’指定ã™ã‚‹ã ã‘ã§ã¯ãªãã€
              ãれらã®å‘¼ã³å‡ºã—é †åºã‚‚指定ã§ãるよã†ã«ãªã‚Šã¾ã—ãŸã€‚
              è¤‡æ•°ã®æ‰¿èªæ‰‹æ³•ãŒã‚ã‚‹ã¨ãã€ãã®å‘¼ã³å‡ºã—é †ã¯ã€è¨­å®šãƒ•ァイルã®
              <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> ディレクティブ中ã§
              ç¾ã‚ŒãŸé †åºã¨åŒã˜ã«ãªã‚Šã¾ã™ã€‚</p>
      
              <p>追加ã§å°Žå…¥ã•れãŸ
              <code class="directive"><a href="../mod/mod_authz_core.html#&lt;satisfyall&gt;">&lt;SatisfyAll&gt;</a></code>,
              <code class="directive"><a href="../mod/mod_authz_core.html#&lt;satisfyone&gt;">&lt;SatisfyOne&gt;</a></code>
              ディレクティブを使ã£ã¦ã€æ‰¿èªæ‰‹æ³•ãŒã„ã¤å‘¼ã³å‡ºã•れã€ã‚¢ã‚¯ã‚»ã‚¹ãŒè¨±å¯ã•れãŸéš›ã«
              ã©ã®æ‰‹ç¶šããŒé©ç”¨ã•ã‚Œã‚‹ã‹æŒ‡å®šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
              ãŸã¨ãˆã°ã€æ¬¡ã®æ‰¿èªãƒ–ロックã®ãƒ­ã‚¸ãƒƒã‚¯ã‚’見ã¦ã¿ã¾ã—ょã†:</p>
      
              <div class="example"><p><code>
                # if ((user == "John") ||<br />
                # &nbsp;&nbsp; ((Group == "admin")<br />
                # &nbsp; &nbsp; &amp;&amp; (ldap-group &lt;ldap-object&gt; contains auth'ed_user)<br />
                # &nbsp; &nbsp; &amp;&amp; ((ldap-attribute dept == "sales")<br />
                # &nbsp; &nbsp; &nbsp; &nbsp; || (file-group contains auth'ed_user))))<br />
                # then<br />
                # &nbsp; auth_granted<br />
                # else<br />
                # &nbsp; auth_denied<br />
                #<br />
                &lt;Directory /www/mydocs&gt;<br />
                <span class="indent">
                  Authname ...<br />
                  AuthBasicProvider ...<br />
                  ...<br />
                  Require user John<br />
                  &lt;SatisfyAll&gt;<br />
                  <span class="indent">
                    Require Group admins<br />
                    Require ldap-group cn=mygroup,o=foo<br />
                    &lt;SatisfyOne&gt;<br />
                    <span class="indent">
                      Require ldap-attribute dept="sales"<br />
                      Require file-group<br />
                    </span>
                    &lt;/SatisfyOne&gt;<br />
                  </span>
                  &lt;/SatisfyAll&gt;<br />
                </span>
                &lt;/Directory&gt;
              </code></p></div>
      
              <p>デフォルトã§ã¯ <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>
              ディレクティブ㯠OR æ“作ã¨ã—ã¦æ‰±ã‚れã¾ã™ã€‚ã¤ã¾ã‚Šã€ã‚‚ã—æŒ‡å®šã—ãŸæ‰¿èªæ‰‹æ³•ã®
              ã²ã¨ã¤ã§ã‚‚åˆæ ¼ã™ã‚Œã°ã€æ‰¿èªã•れã¾ã™ã€‚
              <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> ディレクティブã®ã‚»ãƒƒãƒˆã‚’
              ã²ã¨ã¤ã® <code class="directive"><a href="../mod/mod_authz_core.html#&lt;satisfyall&gt;">&lt;SatisfyAll&gt;</a></code>
              ブロックã§å›²ã‚€ã¨AND æ“作ã¨ãªã‚Šã€å…¨ã¦ã®æ‰¿èªæ‰‹æ³•ã§åˆæ ¼ã—ãªã‘れã°è¨±å¯ã•れã¾ã›ã‚“。</p>
      
          
      
          <h3><a name="reqaccessctrl" id="reqaccessctrl">アクセス制御ã«ãŠã‘ã‚‹ Require 㨠Reject ã®ä½¿ã„æ–¹</a></h3>
              <p>ユーザåã¨ãƒ‘スワードã«ã‚ˆã‚‹èªè¨¼ã¯å…¨ä½“ã®ä¸€éƒ¨åˆ†ã§ã—ã‹ã‚りã¾ã›ã‚“。
              誰ãŒã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ããŸã‹ã¨ã„ã£ãŸæƒ…å ±ä»¥å¤–ã®æ¡ä»¶ã‚’使ã„ãŸã„ã€
      	ã¨ã‚ˆãæ€ã†ã“ã¨ã§ã—ょã†ã€‚
              ãŸã¨ãˆã°ã€ã©ã“ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ãã¦ã„ã‚‹ã‹ã€ã¨ã„ã£ãŸå…·åˆã§ã™ã€‚</p>
          
              <p>承èªãƒ—ロãƒã‚¤ãƒ€ <code class="directive"><a href="../mod/mod_authz_host.html#all">all</a></code>,
              <code class="directive"><a href="../mod/mod_authz_host.html#env">env</a></code>, 
              <code class="directive"><a href="../mod/mod_authz_host.html#host">host</a></code>,
              <code class="directive"><a href="../mod/mod_authz_host.html#ip">ip</a></code>
              を使ã†ã¨ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é€ä¿¡ã—ã¦ãã¦ã„るマシンã®ãƒ›ã‚¹ãƒˆåã‚„ IP アドレス
              ã¨ã„ã£ãŸã€ãƒ›ã‚¹ãƒˆãƒ™ãƒ¼ã‚¹ã§ã®ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ãŒã§ãã¾ã™ã€‚</p>
          
              <p>ã“れらプロãƒã‚¤ãƒ€ã®æ‰±ã„ã¯
              <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> ã‚„
              <code class="directive"><a href="../mod/mod_authz_core.html#reject">Reject</a></code> ã§
              指定ã•れã¾ã™ã€‚ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯æ‰¿èªãƒ—ロãƒã‚¤ãƒ€ã‚’登録ã—ã€
              リクエスト処ç†ã®æ‰¿èªæ®µéšŽã§å‘¼ã³å‡ºã•れã¾ã™ã€‚ãŸã¨ãˆã°:</p>
          
              <div class="example"><p><code>
                Require ip <var>address</var>
              </code></p></div>
          
              <p>ã“ã“ã§ã€<var>address</var> 㯠IP アドレス (ã‚ã‚‹ã„㯠IP アドレスã®
              一部) ㋠: </p>
          
              <div class="example"><p><code>
                Require host <var>domain_name</var>
              </code></p></div>
          
              <p>ã“ã“ã§ <var>domain_name</var> 㯠FQDN (ã‚ã‚‹ã„ã¯ãƒ‰ãƒ¡ã‚¤ãƒ³åã®ä¸€éƒ¨)
              ã§ã€å¿…è¦ã§ã‚れã°è¤‡æ•°ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚„ドメインåを書ãã“ã¨ãŒã§ãã¾ã™ã€‚</p>
          
              <p>ãŸã¨ãˆã°ã€ã‚¹ãƒ‘ムメッセージをé€ä¿¡ã—ã¦ãる誰ã‹ã‚’æ‹’å¦ã—ãŸã„å ´åˆã€
              次ã®ã‚ˆã†ã«ãªã‚Šã¾ã™ : </p>
          
              <div class="example"><p><code>
                Reject ip 10.252.46.165
              </code></p></div>
          
              <p>ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæœ‰åйãªç¯„囲ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«å¯¾ã—ã¦ã¯ã€
              ãã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ãã¦ã‚‚見るã“ã¨ãŒã§ãã¾ã›ã‚“。
              ã‚‚ã—マシンåãŒã‚ã‹ã£ã¦ã„㦠IP アドレスよりもãã¡ã‚‰ã§
              指定ã—ãŸã„ã®ã§ã‚れã°ã€ãã®ãƒžã‚·ãƒ³åãŒä½¿ãˆã¾ã™ã€‚</p>
          
              <div class="example"><p><code>
                Reject host <var>host.example.com</var>
              </code></p></div>
          
              <p>ã¾ãŸã€ç‰¹å®šã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã‹ã‚‰ã®ã‚¢ã‚¯ã‚»ã‚¹å…¨ã¦ã‚’ブロックã—ãŸã„å ´åˆã¯ã€
              IP アドレスã®ä¸€éƒ¨ã‚„ã€ãƒ‰ãƒ¡ã‚¤ãƒ³åãŒæŒ‡å®šã§ãã¾ã™ :</p>
          
              <div class="example"><p><code>
                &lt;SatisfyAll&gt;<br />
                <span class="indent">
                  Reject ip <var>192.168.205</var><br />
                  Reject host <var>phishers.example.com</var> <var>moreidiots.example</var><br />           Reject host ke<br />
                </span>
                &lt;/SatisfyAll&gt;
              </code></p></div>
          
              <p><code class="directive"><a href="../mod/mod_authz_host.html#reject">Reject</a></code> ディレクティブを
              <code class="directive"><a href="../mod/mod_authz_core.html#&lt;satisfyall&gt;">&lt;SatisfyAll&gt;</a></code> ブロックã®ä¸­ã§ä½¿ã†ã¨ã€
              許å¯ã—ãŸã„グループã«ã®ã¿ã‚¢ã‚¯ã‚»ã‚¹ãŒã§ãるよã†ã«ç¢ºèªã§ãã¾ã™ã€‚</p>
          
              <p>上記ã®ä¾‹ã§ã¯ <code class="directive"><a href="../mod/mod_authz_core.html#&lt;satisfyall&gt;">&lt;SatisfyAll&gt;</a></code>
              を使ã£ã¦ã€ã‚¢ã‚¯ã‚»ã‚¹ã«åˆæ ¼ã™ã‚‹å‰æ®µéšŽã§ã€å…¨ã¦ã® 
              <code class="directive"><a href="../mod/mod_authz_host.html#reject">Reject</a></code> ディレクティブãŒ
              満ãŸã•れã¦ã„ã‚‹ã“ã¨ã‚’確èªã—ã¦ã„ã¾ã™ã€‚</p>
          
          
      
          <h3><a name="filesystem" id="filesystem">アクセス制御ã®å¾Œæ–¹äº’æ›æ€§</a></h3>
              <p>èªè¨¼ãƒ—ロãƒã‚¤ãƒ€ãƒ™ãƒ¼ã‚¹ã®æ©Ÿæ§‹ãŒã‚ã‚‹ãŸã‚ã€ä»¥å‰ä½¿ç”¨ã•れã¦ã„ãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–
              <code class="directive"><a href="../mod/mod_access_compat.html#order">Order</a></code>,
              <code class="directive"><a href="../mod/mod_access_compat.html#allow">Allow</a></code>,
              <code class="directive"><a href="../mod/mod_access_compat.html#deny">Deny</a></code>,
              <code class="directive"><a href="../mod/mod_access_compat.html#satisfy">Satisfy</a></code>
              ã¯å¿…è¦ãªããªã‚Šã¾ã—ãŸã€‚
              ã¨ã¯ã„ã†ã‚‚ã®ã®ã€å¤ã„設定ファイルã§ã®å¾Œæ–¹äº’æ›æ€§ã‚’æä¾›ã™ã‚‹ãŸã‚ã€
              ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠<code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> モジュールã«ç§»ã•れã¾ã—ãŸã€‚</p>
      
              <p>ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æŠ±ãˆã¦ã„ãŸå•題ã®ã²ã¨ã¤ã«ã€æ‰¿èªã®è¨­å®šè¡Œã¨ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã®è¨­å®šè¡Œã®
              関係ãŒã¨ã¦ã‚‚ã‚ã„ã¾ã„ã ã£ãŸã“ã¨ãŒæŒ™ã’られã¾ã™ã€‚
              <code class="directive"><a href="../mod/mod_access_compat.html#satisfy">Satisfy</a></code> ディレクティブã¯
              リクエスト処ç†ä¸­ã§ãれ自身を呼ã³å‡ºã™ã“ã¨ã«ã‚ˆã£ã¦ã€ã“れら㮠2 ã¤ã®å‡¦ç†æ®µéšŽã‚’çµã³ã¤ã‘よã†ã¨ã—ã¾ã™ã€‚
              ç¾åœ¨ã¯ã€ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠<code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> ã«ç§»å‹•ã—ã€
              æ–°ã—ã„èªè¨¼ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¨å¤ã„アクセス制御ディレクティブを混ãœã¦ä½¿ã†ã“ã¨ã¯
              難ã—ããªã£ã¦ã„ã¾ã™ã€‚ã“ã®å•題ã®ãŸã‚ã€<code class="module"><a href="../mod/mod_authz_default.html">mod_authz_default</a></code> モジュールを
              ロードã™ã‚‹ã“ã¨ãŒã¨ã¦ã‚‚é‡è¦ã§ã€å¿…é ˆã«ãªã£ã¦ã„ã¾ã™ã€‚
              <code class="module"><a href="../mod/mod_authz_default.html">mod_authz_default</a></code> モジュールã®ä¸»ãªç›®çš„ã¯ã€ã©ã®æ‰¿èªãƒ—ロãƒã‚¤ãƒ€ã§
              処ç†ã•れãªã‹ã£ãŸæ‰¿èªãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘ã‚‹ã“ã¨ã«ã‚りã¾ã™ã€‚
              ã—ã‹ã—ã€å¤ã„アクセス制御ディレクティブãŒç”¨ã„られãŸå ´åˆã«ã¯ã€
              ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã¨æ‰¿èªã‚’çµã³ã¤ã‘ã¦ã€ã™ã¹ã¦ã®å‡¦ç†æ®µéšŽã®å‡ºåŠ›çµæžœã‚’見ã¦ã‚¢ã‚¯ã‚»ã‚¹ã«åˆæ ¼ã™ã‚‹ã‹ã‚’決ã‚ã¦ã„ã¾ã™ã€‚
              ã§ã™ã‹ã‚‰ã€å¤ã„ディレクティブãŒã†ã¾ã動作ã—ãªã„å ´åˆã¯ã€
              <code class="module"><a href="../mod/mod_authz_default.html">mod_authz_default</a></code> ãŒãƒ­ãƒ¼ãƒ‰ã•れã¦ã„ãªã„ã‹ã‚‰ã‹ã‚‚ã—れãªã„ã€
              ã¨ç–‘ã£ã¦ã¿ã¦ãã ã•ã„。</p>
      
          
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="moreinformation" id="moreinformation">追加情報</a></h2>
          <p>ã“れら全ã¦ãŒã©ã®ã‚ˆã†ã«å‹•作ã™ã‚‹ã‹ã«ã¤ã„ã¦
          ã‚‚ã£ã¨å¤šãã®æƒ…å ±ãŒæ›¸ã‹ã‚Œã¦ã„ã‚‹ <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code> ã¨
          <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code>
          ã®æ–‡æ›¸ã‚‚読むã¨ã‚ˆã„ã§ã—ょã†ã€‚
          <code class="directive"><a href="../mod/mod_authn_core.html#&lt;authnprovideralias&gt;">&lt;AuthnProviderAlias&gt;</a></code>
          ディレクティブを使ã†ã¨ã€ç‰¹å®šã®èªè¨¼è¨­å®šãŒç°¡å˜ã«æ›¸ã‘るよã†ã«ãªã‚Šã¾ã™ã€‚</p>
      
          <p><a href="access.html">アクセス制御</a>ã®æ–¹æ³•ã‚‚ã€
          関連ã™ã‚‹ãƒˆãƒ”ックãŒãŸãã•ん記載ã•れã¦ã„ã¾ã™ã®ã§ã€ã”覧ãã ã•ã„。</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/howto/auth.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/auth.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/auth.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/auth.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/auth.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/auth.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/auth.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/public_html.html.tr.utf8���������������������������������������������0000644�0000000�0000050�00000034456�13447004010�021307� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Kullanıcı Dizinleri (public_html) - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Nasıllar ve Öğreticiler</a></div><div id="page-content"><div id="preamble"><h1>Kullanıcı Dizinleri (public_html)</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/howto/public_html.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/public_html.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/public_html.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/public_html.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/public_html.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/public_html.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
        <p>Çok kullanıcılı sistemlerde, <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> yönergesi ile her kullanıcının kendi ev dizininde
          bir sitesi olması sağlanabilir.
          <code>http://example.com/~kullanıcı/</code> adresinin ziyaretçileri
          "kullanıcı" isimli kullanıcının ev dizininin içeriğini değil, <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> yönergesinde belirtilen alt
          dizinin içeriğini görürler.</p>
      
        <p>Öntanımlı olarak bu dizinlere erişimin etkin olmadığını unutmayınız.
          <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> yönergesini
          kullanırken <code>conf/httpd.conf</code> öntanımlı yapılandırma
          dosyasındaki</p>
      
          <pre class="prettyprint lang-config">#Include conf/extra/httpd-userdir.conf</pre>
      
      
        <p>satırını etkin hale getirip, gerekiyorsa <code>httpd-userdir.conf</code>
          dosyasını da düzenleyerek veya ana yapılandırma dosyasında bir
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> bloğu içine 
          uygun yönergeleri yerleştirerek bu dizinlere erişimi etkin hale 
          getirebilirsiniz.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Kullanıcı sayfaları dizinleri</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#userdir"><code>UserDir</code> ile dosya yolunun belirtilmesi</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#redirect">Harici adreslere yönlendirme</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#enable">Bu özelliği kullanacak kullanıcıların sınırlandırılması</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cgi">Her kullanıcıya bir CGI dizini tahsis etmek</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#htaccess">Kullanıcıların yapılandırmayı değiştirmesine izin vermek</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="../urlmapping.html">URL’lerin Dosya Sistemi ile
        EÅŸleÅŸtirilmesi</a></li><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Kullanıcı sayfaları dizinleri</a></h2>
          
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_userdir.html">mod_userdir</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code></li><li><code class="directive"><a href="../mod/core.html#directorymatch">DirectoryMatch</a></code></li><li><code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code></li></ul></td></tr></table>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="userdir" id="userdir"><code>UserDir</code> ile dosya yolunun belirtilmesi</a></h2>
          
      
          <p><code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> yönergesinde
           kullanıcı sayfalarının yükleneceği dizin belirtilir. Bu yönergeye değeri
           çeşitli biçimlerde atanabilir.</p>
      
          <p>Başında bölü çizgisi bulunmayan bir dosya yolu belirtilmişse,
           kullanıcının ev dizinine göreli bir dizin belirtildiği varsayılır.
           Yapılandırmada şöyle bir satır varsa:</p>
      
          <pre class="prettyprint lang-config">UserDir public_html</pre>
      
      
          <p><code>http://example.com/~orhan/dosya.html</code> adresine karşılık
            gelen dosya yolu <code>/home/orhan/public_html/dosya.html</code> olarak
            çözümlenir.</p>
      
          <p>Eğer başında bölü çizgisi bulunan bir dosya yolu belirtilirse,
            kullanıcı sayfalarının bu dizinin altında kullanıcı ismini taşıyan
            dizinlerde bulunacağı varsayılır. Yapılandırmada şöyle bir satır
            varsa:</p>
      
          <pre class="prettyprint lang-config">UserDir /var/html</pre>
      
      
          <p><code>http://example.com/~orhan/dosya.html</code> adresine karşılık
            gelen dosya yolu <code>/var/html/orhan/dosya.html</code> olarak
            çözümlenir.</p>
      
          <p>Eğer belirtilen dosya yolu bir yıldız imi (*) içeriyorsa yıldız iminin
            yerine kullanıcı ismi yerleştirilerek elde edilen dosya yolu
            kullanılır. Yapılandırmada şöyle bir satır varsa:</p>
      
          <pre class="prettyprint lang-config">UserDir /var/html/*/sayfam</pre>
      
      
          <p><code>http://example.com/~orhan/dosya.html</code> adresine karşılık
            gelen dosya yolu <code>/var/html/orhan/sayfam/dosya.html</code>
            olarak çözümlenir.</p>
      
          <p>Çok sayıda dizin veya dizin yolu belirtmek de mümkündür.</p>
      
          <pre class="prettyprint lang-config">UserDir public_html /var/html</pre>
      
      
          <p><code>http://example.com/~orhan/dosya.html</code> adresini Apache önce
            <code>/home/orhan/public_html/dosya.html</code> olarak arayacak,
            bulamazsa <code>/var/siteler/orhan/sayfam/dosya.html</code> olarak
            arayacak, bulduğunda istenen dosyayı sunacaktır.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="redirect" id="redirect">Harici adreslere yönlendirme</a></h2>
          
          <p><code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> yönergesi
            kullanıcı dizini isteklerini harici adreslere yönlendirmek için de
            kullanılabilir.</p>
      
          <pre class="prettyprint lang-config">UserDir http://example.org/users/*/</pre>
      
      
          <p>Bu yapılandırmaya göre <code>http://example.com/~bob/abc.html</code>
          için yapılan bir istek <code>http://example.org/users/bob/abc.html</code>
          adresine yönlendirilecektir.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="enable" id="enable">Bu özelliği kullanacak kullanıcıların sınırlandırılması</a></h2>
          
      
          <p><code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> yönergesinin
            açıklamasında belirtilen sözdizimini kullanarak bu işlevselliği bazı
            kullanıcılara yasaklayabilirsiniz:</p>
      
          <pre class="prettyprint lang-config">UserDir disabled root ahmet veli</pre>
      
      
          <p>Bu yapılandırma ile <code>disabled</code> deyiminin bulunduğu
            satırdaki kullanıcılar dışında kalan bütün kullanıcılar için bu özellik
            etkin olacaktır. Benzer şekilde, aşağıdaki yapılandırma ile
            işlevselliğin belli kullanıcılar dışında kullanılmamasını da
            saÄŸlayabilirsiniz:</p>
      
          <pre class="prettyprint lang-config">UserDir disabled
      UserDir enabled orhan yasar</pre>
      
      
          <p>Daha fazla örnek için <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> yönergesinin açıklamasına bakabilirsiniz.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cgi" id="cgi">Her kullanıcıya bir CGI dizini tahsis etmek</a></h2>
        
      
         <p>Her kullanıcıya kendine ait bir CGI dizini vermek isterseniz, bir
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> yönergesi
          ile kullanıcının ev dizinindeki belli bir dizini CGI-etkin duruma
          getirebilirsiniz.</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/home/*/public_html/cgi-bin/"&gt;
          Options ExecCGI
          SetHandler cgi-script
      &lt;/Directory&gt;</pre>
      
      
          <p> <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> yönergesinde
            <code>public_html</code> belirtildiği varsayımıyla
            <code>mesela.cgi</code> betiği bu dizinden şöyle bir adresle
            yüklenebilir:</p>
      
          <div class="example"><p><code>
            http://example.com/~orhan/cgi-bin/mesela.cgi
          </code></p></div>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="htaccess" id="htaccess">Kullanıcıların yapılandırmayı değiştirmesine izin vermek</a></h2>
          
      
          <p>Kullanıcıların kendilerine ayrılan bölge içinde sunucu
            yapılandırmasını değiştirebilmelerine izin vermek isterseniz,
            <code>.htaccess</code> dosyalarını kullanmalarına izin vermeniz
            gerekir. Kullanıcının değiştirmesine izin vereceğiniz yönerge türlerini
            <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> yönergesinde
            belirtmeyi ihmal etmeyin. <code>.htaccess</code> dosyalarının kullanımı
            ile ilgili daha ayrıntılı bilgi için <a href="htaccess.html">.htaccess
            öğreticisi</a>ne bakınız.</p>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/howto/public_html.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/public_html.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/public_html.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/public_html.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/public_html.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/public_html.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/public_html.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/public_html.html.en��������������������������������������������������0000644�0000000�0000050�00000032545�13412755316�020412� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Per-user web directories - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutorials</a></div><div id="page-content"><div id="preamble"><h1>Per-user web directories</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/howto/public_html.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/public_html.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/public_html.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/public_html.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/public_html.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/public_html.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      <p>On systems with multiple users, each user can be permitted to have a
          web site in their home directory using the <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> directive. Visitors
          to a URL <code>http://example.com/~username/</code> will get content
          out of the home directory of the user "<code>username</code>", out of
          the subdirectory specified by the <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> directive.</p>
      <p>Note that, by default, access to these directories is <strong>not</strong>
          enabled. You can enable access when using <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> by uncommenting the line:</p>
          <pre class="prettyprint lang-config">#Include conf/extra/httpd-userdir.conf</pre>
      
          <p>in the default config file <code>conf/httpd.conf</code>, and adapting the <code>httpd-userdir.conf</code>
          file as necessary, or by including the appropriate directives in a
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> block
          within the main config file.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Per-user web directories</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#userdir">Setting the file path with UserDir</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#redirect">Redirecting to external URLs</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#enable">Restricting what users are permitted to use this
          feature</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cgi">Enabling a cgi directory for each user</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#htaccess">Allowing users to alter configuration</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="../urlmapping.html">Mapping URLs to the Filesystem</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Per-user web directories</a></h2>
          
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_userdir.html">mod_userdir</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code></li><li><code class="directive"><a href="../mod/core.html#directorymatch">DirectoryMatch</a></code></li><li><code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code></li></ul></td></tr></table>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="userdir" id="userdir">Setting the file path with UserDir</a></h2>
          
      
          <p>The <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>
          directive specifies a directory out of which per-user
          content is loaded. This directive may take several different forms.</p>
      
          <p>If a path is given which does not start with a leading slash, it is
          assumed to be a directory path relative to the home directory of the
          specified user. Given this configuration:</p>
      
          <pre class="prettyprint lang-config">UserDir public_html</pre>
      
      
          <p>the URL <code>http://example.com/~rbowen/file.html</code> will be
          translated to the file path
          <code>/home/rbowen/public_html/file.html</code></p>
      
          <p>If a path is given starting with a slash, a directory path will be
          constructed using that path, plus the username specified. Given this
          configuration:</p>
      
          <pre class="prettyprint lang-config">UserDir /var/html</pre>
      
      
          <p>the URL <code>http://example.com/~rbowen/file.html</code> will be
          translated to the file path <code>/var/html/rbowen/file.html</code></p>
      
          <p>If a path is provided which contains an asterisk (*), a path is used
          in which the asterisk is replaced with the username. Given this
          configuration:</p>
      
          <pre class="prettyprint lang-config">UserDir /var/www/*/docs</pre>
      
      
          <p>the URL <code>http://example.com/~rbowen/file.html</code> will be
          translated to the file path
          <code>/var/www/rbowen/docs/file.html</code></p>
      
          <p>Multiple directories or directory paths can also be set.</p>
      
          <pre class="prettyprint lang-config">UserDir public_html /var/html</pre>
      
      
          <p>For the URL <code>http://example.com/~rbowen/file.html</code>,
          Apache will search for <code>~rbowen</code>. If it isn't found,
          Apache will search for <code>rbowen</code> in <code>/var/html</code>. If
          found, the above URL will then be translated to the file path
          <code>/var/html/rbowen/file.html</code></p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="redirect" id="redirect">Redirecting to external URLs</a></h2>
          
          <p>The <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> directive can be
            used to redirect user directory requests to external URLs.</p>
      
          <pre class="prettyprint lang-config">UserDir http://example.org/users/*/</pre>
      
      
          <p>The above example will redirect a request for
          <code>http://example.com/~bob/abc.html</code> to
          <code>http://example.org/users/bob/abc.html</code>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="enable" id="enable">Restricting what users are permitted to use this
          feature</a></h2>
          
      
          <p>Using the syntax shown in the UserDir documentation, you can restrict
          what users are permitted to use this functionality:</p>
      
          <pre class="prettyprint lang-config">UserDir disabled root jro fish</pre>
      
      
          <p>The configuration above will enable the feature for all users
          except for those listed in the <code>disabled</code> statement.
          You can, likewise, disable the feature for all but a few users by
          using a configuration like the following:</p>
      
          <pre class="prettyprint lang-config">UserDir disabled
      UserDir enabled rbowen krietz</pre>
      
      
          <p>See <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>
          documentation for additional examples.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cgi" id="cgi">Enabling a cgi directory for each user</a></h2>
        
      
         <p>In order to give each user their own cgi-bin directory, you can use
          a <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code>
          directive to make a particular subdirectory of a user's home directory
          cgi-enabled.</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/home/*/public_html/cgi-bin/"&gt;
          Options ExecCGI
          SetHandler cgi-script
      &lt;/Directory&gt;</pre>
      
      
          <p>Then, presuming that <code>UserDir</code> is set to
          <code>public_html</code>, a cgi program <code>example.cgi</code>
          could be loaded from that directory as:</p>
      
          <div class="example"><p><code>
          http://example.com/~rbowen/cgi-bin/example.cgi
          </code></p></div>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="htaccess" id="htaccess">Allowing users to alter configuration</a></h2>
          
      
          <p>If you want to allows users to modify the server configuration in
          their web space, they will need to use <code>.htaccess</code> files to
          make these changes. Ensure that you have set <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> to a
          value sufficient for the directives that you want to permit the users
          to modify. See the <a href="htaccess.html">.htaccess tutorial</a> for
          additional details on how this works.</p>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/howto/public_html.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/public_html.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/public_html.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/public_html.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/public_html.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/public_html.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/public_html.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/auth.html.tr.utf8����������������������������������������������������0000644�0000000�0000050�00000114670�13447004010�017743� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Kimlik Doğrulama ve Yetkilendirme - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a> &gt; <a href="./">Nasıllar ve Öğreticiler</a></div><div id="page-content"><div id="preamble"><h1>Kimlik Doğrulama ve Yetkilendirme</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/howto/auth.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/auth.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/auth.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/auth.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/auth.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/auth.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Kimlik DoÄŸrulama istediÄŸiniz kiÅŸileri teyid etme iÅŸlemidir.
            Yetkilendirme ise kiÅŸilerin nereye gireceklerine ve hangi bilgiye
            ulaşacaklarına müsaade edilmesi işlemidir.</p>
      
          <p>Genel erişim denetimi için <a href="access.html">Erişim Denetimi
            Nasıl</a> belgesine bakınız.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">İlgili modüller ve Yönergeler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#introduction">GiriÅŸ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#theprerequisites">Ön gereksinimler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#gettingitworking">Çalışmaya Başlama</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#lettingmorethanonepersonin">Birden çok kişiye izin vermek</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#possibleproblems">Olası Sorunlar</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#dbmdbd">Diğer parola depolama yöntemleri</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#multprovider">Birden çok tedarikçi kullanmak</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#beyond">Yetkilendirmenin biraz ötesi</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#socache">Kimlik DoÄŸrulama ArabelleÄŸi</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#moreinformation">Daha fazla bilgi</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">İlgili modüller ve Yönergeler</a></h2>
      
          <p>Kimlik Doğrulama ve yetkilendirme işlemi ile ilgili üç tür modül
          vardır. Genellikle her bir gruptan en az bir modül seçeceksiniz.</p>
      
          <ul>
            <li>Kimlik Doğrulama türü (bkz. <code class="directive"><a href="../mod/mod_authn_core.html#authtype">AuthType</a></code> yönergesi)
              <ul>
                <li><code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code></li>
                <li><code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code></li>
              </ul>
            </li>
      
            <li>Kimlik Doğrulayıcı (bkz.
            <code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code>
            ve <code class="directive"><a href="../mod/mod_auth_digest.html#authdigestprovider">AuthDigestProvider</a></code> yönergeleri)
              <ul>
                <li><code class="module"><a href="../mod/mod_authn_anon.html">mod_authn_anon</a></code></li>
                <li><code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code></li>
                <li><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code></li>
                <li><code class="module"><a href="../mod/mod_authn_file.html">mod_authn_file</a></code></li>
                <li><code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></li>
                <li><code class="module"><a href="../mod/mod_authn_socache.html">mod_authn_socache</a></code></li>
              </ul>
            </li>
            <li>Yetkilendirme (bkz.
                <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> yönergesi)
              <ul>
                <li><code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></li>
                <li><code class="module"><a href="../mod/mod_authz_dbd.html">mod_authz_dbd</a></code></li>
                <li><code class="module"><a href="../mod/mod_authz_dbm.html">mod_authz_dbm</a></code></li>
                <li><code class="module"><a href="../mod/mod_authz_groupfile.html">mod_authz_groupfile</a></code></li>
                <li><code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code></li>
                <li><code class="module"><a href="../mod/mod_authz_owner.html">mod_authz_owner</a></code></li>
                <li><code class="module"><a href="../mod/mod_authz_user.html">mod_authz_user</a></code></li>
              </ul>
            </li>
          </ul>
      
          <p>Bu modüllere ek olarak, <code class="module"><a href="../mod/mod_authn_core.html">mod_authn_core</a></code> ve
          <code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code> modülleri bulunur. Bu modüller
          yetkilendirme modüllerinin çekirdeğini oluşturan temel yönergeleri
          gerçekler.</p>
      
          <p><code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code> modülü kimlik doğrulama ve
          yetkilendirme işlemlerinin ikisini birden gerçekleştirir.
          <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code> modülü bu işlemleri sunucu adına, IP
          adresine ve isteğin karekteristiğine bağlı olarak gerçekleştirir.
          Ancak kimlik doğrulama sisteminin bir parçası değildir.
          <code>mod_access</code> ile geriye uyumluluk için
          <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> diye bir modül daha vardır.</p>
      
          <p>Muhtemelen göz atmak isteyeceğiniz <a href="access.html">Erişim
          Denetimi</a> nasıl belgesi, sunucuya erişimlerin çeşitli yollarından
          bahsetmektedir.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">GiriÅŸ</a></h2>
          <p>Sitenizde sadece küçük bir grup insana hitap eden ya da hassas
          bilgileriniz varsa, bu makaledeki teknikleri kullanarak dilediÄŸiniz
          kişilerin sadece dilediğiniz sayfaları görüntülemesini
          saÄŸlayabilirsiniz.</p>
      
          <p>Bu makale sitenizin bazı parçalarını korumak için kullanacağınız
          "standart" yolları içermektedir.</p>
      
          <div class="note"><h3>Bilginize:</h3>
            <p>Eğer bilgileriniz gerçekten gizliliğe ihtiyaç duyuyorsa kimlik
            doğrulamasına ilaveten <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> modülünü de
            kullanabilirsiniz.</p>
          </div>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="theprerequisites" id="theprerequisites">Ön gereksinimler</a></h2>
          
          <p>Bu makalede bahsi geçen yönergeler ya ana sunucu yapılandırma
          dosyasında (genellikle <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> bölümünde) ya da dizin içi
          yapılandırma dosyalarında (<code>.htaccess</code> dosyaları)
          bulunmak zorundadır.</p>
      
          <p>Eğer <code>.htaccess</code> dosyalarını kullanmayı
          tasarlıyorsanız, kimlik doğrulama yönergelerine bu dosyaların içine
          koymaya izin veren sunucu yapılandırmasına ihtiyacınız olacaktır.
          Bunun için, dizin içi yapılandırma dosyalarının içine hangi
          yönergelerin konacağını belirleyen <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> yönergesi kullanılır.</p>
      
          <p>Kimlik doğrulamadan sözettiğimize göre, aşağıda gösterilen
          şekilde bir <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> yönergesine ihtiyacınız olacaktır:</p>
      
          <pre class="prettyprint lang-config">AllowOverride AuthConfig</pre>
      
      
          <p>Yönergeleri doğrudan ana sunucunun yapılandırma dosyasına
          koyacaksanız bu dosyaya yazma izniniz olmalıdır.</p>
      
          <p>Bazı dosyaların nerede saklandığını bilmek için sunucunun dizin
          yapısı hakkında biraz bilgi sahibi olmanız gerekmektedir. Bu çok da
          zor olmamakla birlikte bu noktaya gelindiÄŸinde konuyu
          netleÅŸtireceÄŸiz.</p>
      
          <p>Ayrıca <code class="module"><a href="../mod/mod_authn_core.html">mod_authn_core</a></code> ve
          <code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code> modülleri ya <code>httpd</code>
          çalıştırılabilirinin içinde derlenmiş olmalı ya da
          <code>httpd.conf</code> yapılandırma dosyası ile yüklenmelidir. Bu
          iki modül HTTP sunucusunda kimlik doğrulama ve yetkilendirme
          kullanımı ve yapılandırması için büyük öneme sahip temel yönergeleri
          ve iÅŸlevselliÄŸi saÄŸlar.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="gettingitworking" id="gettingitworking">Çalışmaya Başlama</a></h2>
          <p>Burada, sunucu üzerindeki bir dizini parolayla korumak için
          gereken temel bilgiler verilecektir.</p>
      
          <p>İlk olarak bir parola dosyası oluşturmalısınız. Bunu nasıl
          yapacağınız, özellikle, seçtiğiniz kimlik doğrulayıcıya göre
          değişiklik gösterir. Bunun üzerinde ileride daha fazla duracağız.
          Başlangıç için parolaları bir metin dosyasında tutacağız.</p>
      
          <p>Bu dosya belge kök dizini altında olmamalıdır. Böylece başkaları
          parola dosyasını indiremezler. Örneğin belgeleriniz
          <code>/usr/local/apache/htdocs</code> üzerinden sunuluyorsa parola
          dosyanızı <code>/usr/local/apache/passwd</code> dizininde
          tutabilirsiniz.</p>
      
          <p>Dosyayı oluşturmak için Apache ile gelen
          <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> uygulamasını kullanacağız. Bu uygulama
          Apache'nin kurulumunda belirtilen  <code>bin</code> dizininde
          bulunur. Eğer Apache'yi üçüncü parti paketlerden  kurduysanız,
          çalıştırılabilir dosyaların bulunduğu yollar üzerinde olmalıdır.</p>
      
          <p>Bir dosya oluşturmak için şunları yazın:</p>
      
          <div class="example"><p><code>
            htpasswd -c /usr/local/apache/passwd/passwords umut
          </code></p></div>
      
          <p><code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> size parola soracaktır arkasından da
          teyit etmek için parolayı tekrar girmenizi isteyecektir:</p>
      
          <div class="example"><p><code>
            # htpasswd -c /usr/local/apache/passwd/passwords umut<br />
            New password: parolam<br />
            Re-type new password: parolam<br />
            Adding password for user umut
          </code></p></div>
      
          <p>Eğer <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> normal yollar üzerinde değilse
          çalıştırmak için dosyanın bulunduğu tam yeri belirtmeniz
          gerekecektir. Dosyanın öntanımlı kurulum yeri:
          <code>/usr/local/apache2/bin/htpasswd</code></p>
      
          <p>Bundan sonra, sunucuyu, parola sorması için ve kimlerin erişim
          izni olacağını belirlemek için yapılandıracaksınız. Bu işlemi
          <code>httpd.conf</code>dosyasını düzenleyerek ya da bir
          <code>.htaccess</code> dosyası kullanarak yapabilirsiniz. Örneğin,
          <code>/usr/local/apache/htdocs/secret</code> dizinini korumayı
          amaçlıyorsanız, şu yönergeleri kullanabilirsiniz. Bu yönergeleri
          <code>/usr/local/apache/htdocs/secret/.htaccess</code> dosyası içine
          veya <code>httpd.conf</code> içindeki &lt;Directory
          "/usr/local/apache/htdocs/secret"&gt; bölümüne koyabilirsiniz.</p>
      
          <pre class="prettyprint lang-config">AuthType Basic
      AuthName "Gizli Dosyalar"
      # (Aşağıdaki satırın kullanımı isteğe bağlıdır)
      AuthBasicProvider file
      AuthUserFile "/usr/local/apache/passwd/passwords"
      Require user umut</pre>
      
      
          <p>Bu yönergeleri tek tek inceleyelim.
          <code class="directive"><a href="../mod/mod_authn_core.html#authtype">AuthType</a></code> yönergesi
          kullanıcının kimliğini doğrulamakta kullanılacak yöntemi seçer. En
          çok kullanılan yöntem <code>Basic</code>'tir ve bu yöntem
          <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code> modülüyle gerçeklenmiştir. Temel
          (<code>Basic</code>) kimlik doğrulamasıyla gönderilen parolanın
          şifrelenmeyeceğini unutmayın. Bu yöntem, bu sebepten dolayı
          <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> eşliğinde kullanılmadığı sürece yüksek
          hassasiyete sahip bilgiler için kullanılmamalıdır. Apache bir başka
          kimlik doğrulama yöntemini daha destekler: <code>AuthType
          Digest</code>. Bu yöntem <code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code> tarafından
          gerçeklenmişti ve çok daha güvenli olacağı düşünülmüştü. Bu artık
          geçerliliğini yitirdiğinden bağlantının bundan böyle
          <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> ile ÅŸifrelenmesi gerekmektedir.</p>
      
          <p><code class="directive"><a href="../mod/mod_authn_core.html#authname">AuthName</a></code> yönergesi
          ile kimlik doğrulamada kullanılacak <dfn>Saha</dfn> da
          belirtilebilir. Saha kullanımının, başlıca iki işlevi vardır.
          Birincisi, istemci sıklıkla bu bilgiyi kullanıcıya parola diyalog
          kutusunun bir parçası olarak sunar. İkincisi, belirtilen kimlik
          doğrulamalı alan için gönderilecek parolayı belirlerken istemci
          tarafından kullanılır.</p>
      
          <p>Örneğin, bir istemcinin <code>"Gizli Dosyalar"</code> alanında
          kimliği doğrulanmış olsun. Aynı sunucu üzerinde <code>"Gizli
          Dosyalar"</code> Sahası olarak belirlenmiş alanlarda aynı parola
          özdevinimli olarak yinelenecektir. Böylece parola bir kere girilerek
          aynı Sahayı paylaşan çok sayıda kısıtlanmış alana ulaşırken oluşacak
          gecikmeden kullanıcı korunmuş olur. Güvenlik gerekçelerinden dolayı,
          her sunucu adı değiştirilişinde istemcinin parolayı yeniden sorması
          gerekir.</p>
      
          <p><code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code>
          yönergesinin öntanımlı değeri <code>file</code> olduğundan, bu
          durumda, bu yönergenin kullanımı isteğe bağlıdır. Ancak, eğer kimlik
          doğrulaması için  <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> ya da
          <code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code> gibi farklı bir kaynak seçecekseniz
          bu yönergeyi kullanmanız gerekecektir.</p>
      
          <p><code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code>
          yönergesi <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> ile oluşturduğumuz parola
          dosyasının yerini belirtmek için kullanılır. Eğer çok sayıda
          kullanıcınız varsa her bir kullanıcıyı her kimlik doğrulama isteği
          için kimlik bilgilerini bir metin dosyasında aramak gayet yavaş
          olacaktır. Apache, kullanıcı bilgilerini hızlı bir veritabanı
          dosyasında depolama özelliğine de sahiptir. Bu amaçla,
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> modülünün
          <code class="directive"><a href="../mod/mod_authn_dbm.html#authdbmuserfile">AuthDBMUserFile</a></code>
          yönergesi kullanılabilir. Bu dosyalar <code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code> ve
          <code class="program"><a href="../programs/htdbm.html">htdbm</a></code> programı ile oluşturulabilir ve değiştirilebilir.
          <a href="http://modules.apache.org/">Apache modülleri
          Veritabanı</a> içindeki üçüncü parti modüllerinde çok sayıda
          başka kimlik doğrulama türü de vardır.</p>
      
          <p>Son olarak <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>
          yönergesi, sunucunun bu bölgesine erişimine izin verilen
          kullanıcıları ayarlama işleminin kimlik doğrulamasıyla ilgili
          kısmını sağlar. Bir sonraki bölümde <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> yönergesini kullanmanın
          çeşitli yoları üzerinde duracağız.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="lettingmorethanonepersonin" id="lettingmorethanonepersonin">Birden çok kişiye izin vermek</a></h2>
          
          <p>Yukarıdaki yönergelerle bir dizinde sadece bir kişiye
          (<code>umut</code> adlı kullanıcıya) izin verir. Çoğunlukla birden
          çok kişiye izin verilmesi istenir. Bu durumda <code class="directive"><a href="../mod/mod_authz_groupfile.html#authgroupfile">AuthGroupFile</a></code> yönergesi
          devreye girer.</p>
      
          <p>Eğer birden çok kişiye izin vermek istiyorsanız içinde kullanıcı
          isimlerinin olduğu bir grup dosyası oluşturmalısınız. Bu dosyanın
          biçemi gayet basittir ve bunu herhangi bir metin düzenleyici ile
          oluşturabilirsiniz. Bu dosyanın içeriği aşağıdaki gibi
          görünecektir:</p>
      
          <div class="example"><p><code>
           GroupName: umut samet engin kubilay
          </code></p></div>
      
          <p>Dosya, sadece, boşluklarla birbirinden ayrılmış gurup üyelerinin
          isimlerinden oluşan uzun bir liste içerir.</p>
      
          <p>Varolan parola dosyasına bir kullanıcı eklemek için şunu
          yazın:</p>
      
          <div class="example"><p><code>
            htpasswd /usr/local/apache/passwd/passwords birey
          </code></p></div>
      
          <p>Evvelce almış olduğunuz yanıtı yine alacaksınız ama bu sefer yeni
          bir dosya oluÅŸturulmak yerine var olan bir dosyaya eklenecektir.
          (Yeni bir parola dosyası oluşturmak için <code>-c</code> seçeneği
          kullanılır).</p>
      
          <p>Şimdi, <code>.htaccess</code> dosyanızı veya
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> bölümünüzü
          aşağıda görüldüğü şekilde değiştirebilirsiniz:</p>
      
          <pre class="prettyprint lang-config">AuthType Basic
      AuthName "Davete Binaen"
      # Satır isteğe bağlıdır:
      AuthBasicProvider file
      AuthUserFile "/usr/local/apache/passwd/passwords"
      AuthGroupFile "/usr/local/apache/passwd/groups"
      Require group Grupismi</pre>
      
      
          <p>Artık, <code>Grupismi</code> gurubunda listelenmiş ve
          <code>password</code> dosyasında kaydı olan kişiye, parolayı doğru
          yazdığı takdirde izin verilecektir.</p>
      
          <p>Çoklu kullanıcıya izin veren biraz daha az kullanılan başka bir
          yol daha mevcuttur. Bir gurup dosyası oluşturmaktansa, şu yönergeyi
          kullanabilirsiniz:</p>
      
          <pre class="prettyprint lang-config">Require valid-user</pre>
      
      
          <p><code>Require user umut</code> satırı ile parola dosyasında
          listelenmiş ve parolayı doğru olarak giren herhangi bir kişiye izin
          vermektense, her grup için ayrı bir parola dosyası tutarak grup
          davranışını taklit edebilirsiniz.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="possibleproblems" id="possibleproblems">Olası Sorunlar</a></h2>
          <p>Temel kimlik doğrulama yolu belirtildiği için, sunucuya
          yaptığınız her belge istediğinde kullanıcı adınızın ve parolanızın
          doğrulanması gerekir. Hatta aynı sayfayı yeniden yüklerken ya da
          sayfadaki her bir resim için bu yapılmalıdır (şayet korunmakta olan
          bir dizinden geliyorsa). Bu işlem hızı azaltacaktır. Yavaşlama
          miktarı parola dosyanızın büyüklüğü ile orantılı olacaktır, çünkü bu
          işlem sırasında dosya açılacak ve kullanıcıların arasında isminiz
          bulunana kadar liste aşağı doğru taranacaktır. Bu işlem sayfa her
          yüklenişinde tekrar edilecektir.</p>
      
          <p>Buradan çıkacak sonuç, bir parola dosyasına konulan kullanıcı
          sayısında bir üst sınır olması gerekliliğidir. Bu sınır sunucunuzun
          başarımına bağlı olarak değişiklik gösterir. Bir kaç yüz kayıtın
          üstünde giriş yaptığınızda hız düşüşünü gözlemlebilirsiniz İşte bu
          anda kimlik doğrulama için başka bir yöntem aramaya başlarsınız.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="dbmdbd" id="dbmdbd">Diğer parola depolama yöntemleri</a></h2>
          
          <p>Parolaları basit bir metin dosyasında depolamak yukarıda
          bahsedilen sorunlara yol açtığından parolaları başka bir yerde
          depolamayı düşünebilirsiniz; örneğin bir veritabanında.</p>
      
          <p><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> ve <code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code>
          modülleri bunu mümkün kılan iki modüldür. Depolama yönemi olarak
          <code><code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code> file</code> yerine, <code>dbm</code>
          veya <code>dbd</code> kullanabilirsiniz.</p>
      
          <p>Bir metin dosyası yerine bir dbm dosyası kullanım örneği:</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/docs/private"&gt;
          AuthName "Private"
          AuthType Basic
          AuthBasicProvider dbm
          AuthDBMUserFile "/www/passwords/passwd.dbm"
          Require valid-user
      &lt;/Directory&gt;</pre>
      
      
          <p>Başka seçenekler de mümkündür. Ayrınılar için
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> belgesine baÅŸvurun.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="multprovider" id="multprovider">Birden çok tedarikçi kullanmak</a></h2>
          
          <p>Kimlik doğrulama ve yetkilendirme mimarisine dayalı yeni
          tedarikçiyi kullanarak tek bir yetkilendirme ya da kimlik doğrulama
          yöntemine kilitlenip kalmayacaksınız. Aslında birden çok tedarikçi
          ihtiyacınıza cevap vermek için bir arada kullanılabilir. Aşağıdaki
          örnekte dosya ve LDAP tabanlı kimlik doğrulama tedarikçileri bir
          arada kullanılmıştır.</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/docs/private"&gt;
          AuthName "Private"
          AuthType Basic
          AuthBasicProvider file ldap
          AuthUserFile "/usr/local/apache/passwd/passwords"
          AuthLDAPURL ldap://ldaphost/o=yourorg
          Require valid-user
      &lt;/Directory&gt;</pre>
      
      
          <p>Bu örnekte dosya tedarikçisi, ilk olarak kullanıcının kimliğini
          doğrulamaya teşebbüs edecektir. Kullanıcının kimliği
          doğrulanamıyorsa LDAP tedarikçisi çağırılır. Eğer kurumunuz birden
          çok kimlik doğrulama tedarikçisini yürürlüğe koyuyorsa bu, kimlik
          doğrulama faaliyet alanının genişletilmesini sağlar. Diğer kimlik
          kanıtlama ve yetkilendirme senaryoları tek bir kimlik doğrulaması
          ile birden fazla yetkilendirme türüne izin verebilir.</p>
      
          <p>Çok sayıda kimlik doğrulama tedarikçisi uygulamaya konulabileceği
          gibi, çok sayıda yetkilendirme yöntemi de kullanılabilir. Bu örnekte
          dosya için hem dosyalı hem de LDAP grup kimlik doğrulaması
          kullanılmıştır.</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/docs/private"&gt;
          AuthName "Private"
          AuthType Basic
          AuthBasicProvider file
          AuthUserFile "/usr/local/apache/passwd/passwords"
          AuthLDAPURL ldap://ldaphost/o=yourorg
          AuthGroupFile "/usr/local/apache/passwd/groups"
          Require group GroupName
          Require ldap-group cn=mygroup,o=yourorg
      &lt;/Directory&gt;</pre>
      
      
          <p>Kimlik doÄŸrulama konusunu biraz daha geniÅŸletirsek, <code class="directive"><a href="../mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code> ve
          <code class="directive"><a href="../mod/mod_authz_core.html#requireany">&lt;RequireAny&gt;</a></code> gibi yetkilendirme taşıyıcısı
          yönergelerle hangi iznin hangi sırayla uygulanacağını
          belirlenebilir. <a href="../mod/mod_authz_core.html#logic">Yetkilendirme Taşıyıcıları</a> bölümünde bunun bir uygulama
          örneğini görebilirsiniz.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="beyond" id="beyond">Yetkilendirmenin biraz ötesi</a></h2>
          <p>Tek bir veri deposundan yapılacak tek bir sınamadan çok daha
          esnek kimlik doğrulaması yapılabilir. Sıralama, mantık ve hangi
          kimlik doğrulamasının kullanılacağını seçmek mümkündür.</p>
      
          <h3><a name="authandororder" id="authandororder">Mantık ve sıralamanın uygulanması</a></h3>
            
            <p>Yetkilendirmenin hangi sırayla uygulanacağı ve nasıl
            denetleneceği geçmişte biraz gizemli bir konuydu. Apache 2.2'de,
            tedarikçi tabanlı kimlik doğrulamasının devreye girmesiyle asıl
            kimlik doÄŸrulama iÅŸlemini yetkilendirme ve destek iÅŸlevselliÄŸinden
            ayırmak mümkün oldu. Bunun faydalarından birisi de kimlik
            doğrulama tedarikçilerinin yapılandırılabilmesi ve auth modülünün
            kendi yükleme sırasından bağımsız olarak özel bir sırayla
            çağrılabilmesidir. Bu tedarikçi tabanlı mekanizmanın aynısı
            yetkilendirmeye de getirilmiştir. Bunun anlamı <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> yönergesinde hangi
            izin yönteminin kullanılması gerektiğinin belirtmesinin yanında
            hangi sırayla çağırılacaklarının da belirlenebildiğidir. Çok
            sayıda yetkilendirme yöntemi kullanıldığında, bunlar, <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> yönergelerinin
            yapılandırma dosyasında göründükleri sıra ile çağırılır.</p>
      
            <p><code class="directive"><a href="../mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code> ve <code class="directive"><a href="../mod/mod_authz_core.html#requireany">&lt;RequireAny&gt;</a></code> gibi yetkilendirme
            taşıyıcısı yönergelerin devreye girmesiyle yetkilendirme
            yöntemlerinin ne zaman çağırılacağı ve çağırıldığında ve erişime
            izin verirken hangi kuralların uygulanacağı konusunda denetim
            yapılandırmanın eline geçmektedir. Karmaşık yetkilendime mantığını
            ifade etmek için kullanılan bir örneği görmek için
            <a href="../mod/mod_authz_core.html#logic">Yetkilendirme
            Taşıyıcıları</a> bölümüne bakınız.</p>
      
            <p>Öntanımlı olarak tüm <code class="directive"><a href="../mod/mod_authz_core.html#require">
            Require</a></code> yönergeleri, <code class="directive"><a href="../mod/mod_authz_core.html#requireany">&lt;RequireAny&gt;</a></code>
            taşıyıcı yönergesinin içine konur. Başka bir deyişle eğer
            belirtilen kimlik doğrulama yöntemlerinden herhangi biri başarılı
            olursa yetkilendirme de sağlanmış olur.</p>
      
          
      
          <h3><a name="reqaccessctrl" id="reqaccessctrl">Erişim denetimi için yetkilendirme tedarikçilerinin
            kullanımı</a></h3>
            
            <p>Kullanıcı adı ve parolasına göre kimlik doğrulama hikayenin
            sadece bir bölümüdür. Sıklıkla insanlara kim olduklarına göre
            değil birşeylere dayanarak izin vermek istersiniz. Örneğin nereden
            geldikleri gibi.</p>
      
            <p><code>all</code>, <code>env</code>, <code>host</code> ve
            <code>ip</code> gibi yetkilendirme tedarikçileri ile, bir belgenin
            istendiği makinenin IP adresi veya konak ismi gibi bazı özelliklerine
            dayalı olarak erişime izin verip vermeyeceğinizi belirtebilirsiniz.</p>
      
            <p>Bu tedarikçilerin kullanımı <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> yönergesinde açıklanmıştır. Bu yönergeler,
            isteklerin işlenmesi sırasında yetkilendirme aşamasında
            çağırılacak yetkilendirme tedarikçilerini kayda geçirir. Örneğin:
            </p>
      
            <pre class="prettyprint lang-config">Require ip <var>adres</var></pre>
      
      
            <p>Burada, <var>adres</var> bir IP adresidir (veya kısmi bir IP
              addresidir)</p>
      
            <pre class="prettyprint lang-config">Require host <var>alan_adı</var></pre>
      
      
            <p>Burada, <var>alan_adı</var> bir tam nitelikli alan adıdır
            (ya da kısmi alan adıdır); gerekirse çok sayıda alan adı veya IP
            adresi de belirtilebilir.</p>
      
            <p>Örneğin, yorum alanını gereksiz iletilerle dolduran birini uzak
            tutmak istediğinizi varsayalım. Bu kişiyi uzak tutmak için şunları
            yapabilirsiniz:</p>
      
              <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not ip 10.252.46.165
      &lt;/RequireAll&gt;</pre>
      
      
            <p>Bu adresden gelen ziyaretçiler bu yönergedeki içeriği
            göremeyeceklerdir. Bunun yerine, elinizde IP adresi değil de
            makine adı varsa şunu kullanabilirsiniz:</p>
      
              <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not host host.example.com
      &lt;/RequireAll&gt;</pre>
      
      
            <p>Eğer alan adının tamanıdan gelecek olan bütün erişimleri
            engellemek isterseniz adresin ya da alan adının bir parçasını
            belirtin:</p>
      
              <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not ip 192.168.205
          Require not host phishers.example.com moreidiots.example
          Require not host ke
      &lt;/RequireAll&gt;</pre>
      
      
              <p><code class="directive"><a href="../mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code> yönergesini çok sayıda
              <code class="directive"><a href="../mod/mod_authz_core.html#require">&lt;Require&gt;</a></code> yönergesi ile birlikte kullanarak,
              sadece <code>not</code> ile olumsuzlanan tüm koşulları gerçekleyen
              bağlantılara erişim verilir. Başka bir deyişle, olumsuzlanan koşulları
              gerçeklemeyen bağlantıların erişimi engellenir.</p>
      
          
      
          <h3><a name="filesystem" id="filesystem">EriÅŸim denetimi ve geriye uyumluluk</a></h3>
            
            <p>Kimlik doğrulama için tedarik tabanlı mekanizma kullanımının
            yan etkilerinden birisi,
            <code class="directive"><a href="../mod/mod_access_compat.html#order">Order</a></code>,
            <code class="directive"><a href="../mod/mod_access_compat.html#allow">Allow</a></code>,
            <code class="directive"><a href="../mod/mod_access_compat.html#deny">Deny</a></code> ve
            <code class="directive"><a href="../mod/mod_access_compat.html#satisfy">Satisfy</a></code> eriÅŸim
            denetim yönergelerine artık ihtiyaç duyulmamasıdır. Ancak eski
            yapılandırmalarla uyumluluğu sağlamak için bu yönergeler
            <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> modülüne taşınmıştır.</p>
      
            <div class="warning"><h3>Note</h3>
              <p><code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> ile sağlanan yönergelerin 
              kullanımı artık önerilmemekte, <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code> 
              modülündeki yönergeler önerilmektedir. <code class="directive"><a href="../mod/mod_access_compat.html#order">Order</a></code>, <code class="directive"><a href="../mod/mod_access_compat.html#allow">Allow</a></code> veya <code class="directive"><a href="../mod/mod_access_compat.html#deny">Deny</a></code> ile
              <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> gibi daha yeni 
              olanlarının yenilerle karışık kullanımı teknik olarak mümkünse de 
              önerilmemektedir. <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> modülü, 2.4 
              yükseltmesini kolaylaştırmak için sadece eski yönergeleri içeren 
              yapılandırmaları desteklemek üzere oluşturulmuştur.  Daha ayrıntılı 
              bilgi için <a href="../upgrading.html">yükseltme</a> belgesine bakınız.
              </p>
            </div>
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="socache" id="socache">Kimlik DoÄŸrulama ArabelleÄŸi</a></h2>
          <p>Zaman zaman kimlik doğrulama ağınızda veya sağlayıcı(ları)nızda kabul
          edilemez yükler oluşturur. Bu çoğunlukla <code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code>
          (veya üçüncü parti/özel sağlayıcıların) kullanıcılarını etkiler. Bununla
          ilgilenmek için httpd 2.3/2.4, kimlik bilgilerini arabelleklemek ve özgün
          sağlayıcıların yüklerini azaltmak için yeni bir arabellekleme sağlayıcısı
          olarak <code class="module"><a href="../mod/mod_authn_socache.html">mod_authn_socache</a></code> modülü ile gelmektedir.</p>
          <p>Bu, bazı kullanıcılar için önemli bir başarım artışı sağlayabilir.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="moreinformation" id="moreinformation">Daha fazla bilgi</a></h2>
          <p>Daha fazla bilgi için <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code> ve
          <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code> modüllerinin belgelerine bakınız.
          <code class="directive"><a href="../mod/mod_authn_core.html#authnprovideralias">AuthnProviderAlias</a></code>
          yönergesi ile bazı yapılandırmalarınızı basitleştirebilirsiniz.</p>
      
          <p>Apache tarafından desteklenen şifrelerle ilgili bilgi için <a href="../misc/password_encryptions.html">Parola Biçemleri</a>
          belgesine bakınız.</p>
      
          <p><a href="access.html">Erişim Denetimi</a> nasıl belgesinden de
          bazı bilgiler edinebilirsiniz.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/howto/auth.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/auth.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/auth.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/auth.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/auth.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/auth.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/auth.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/public_html.html.ko.euc-kr�������������������������������������������0000644�0000000�0000050�00000026312�13412755316�021601� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>»ç¿ëÀÚº° À¥µð·ºÅ丮 - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutorials</a></div><div id="page-content"><div id="preamble"><h1>»ç¿ëÀÚº° À¥µð·ºÅ丮</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/howto/public_html.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/public_html.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/public_html.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/public_html.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/public_html.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/public_html.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      <p>¿©·¯ »ç¿ëÀÚ°¡ ÀÖ´Â ½Ã½ºÅÛ¿¡¼­ <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> Áö½Ã¾î¸¦ »ç¿ëÇϸé
          °¢ »ç¿ëÀÚ´Â ÀÚ½ÅÀÇ È¨µð·ºÅ丮 ¾È¿¡ À¥»çÀÌÆ®¸¦ ¸¸µé ¼ö ÀÖ´Ù.
          URL <code>http://example.com/~username/</code>¿¡ Á¢±ÙÇϸé
          »ç¿ëÀÚ "<code>username</code>"ÀÇ È¨µð·ºÅ丮¿¡¼­ <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> Áö½Ã¾î·Î ÁöÁ¤ÇÑ
          ÇÏÀ§µð·ºÅ丮¿¡ ÀÖ´Â ÆäÀÌÁö¸¦ °¡Á®¿À°Ô µÈ´Ù.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">»ç¿ëÀÚº° À¥µð·ºÅ丮</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#userdir">UserDir·Î ÆÄÀϰæ·Î ÁöÁ¤Çϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#enable">±â´ÉÀ» ÀÌ¿ëÇÒ »ç¿ëÀÚ Á¦ÇÑÇϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cgi">°¢ »ç¿ëÀÚº° cgi µð·ºÅ丮 ÁöÁ¤Çϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#htaccess">»ç¿ëÀÚ°¡ ¼³Á¤À» º¯°æÇÒ ¼ö ÀÖµµ·Ï ¸¸µé±â</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="../urlmapping.html">URLÀ» ÆÄÀϽýºÅÛ¿¡ ´ëÀÀ</a></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">»ç¿ëÀÚº° À¥µð·ºÅ丮</a></h2>
          
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_userdir.html">mod_userdir</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code></li><li><code class="directive"><a href="../mod/core.html#directorymatch">DirectoryMatch</a></code></li><li><code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code></li></ul></td></tr></table>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="userdir" id="userdir">UserDir·Î ÆÄÀϰæ·Î ÁöÁ¤Çϱâ</a></h2>
          
      
          <p><code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>
          Áö½Ã¾î´Â »ç¿ëÀÚº° ÆäÀÌÁö¸¦ °¡Á®¿Ã µð·ºÅ丮¸¦ ÁöÁ¤ÇÑ´Ù. ÀÌ
          Áö½Ã¾îÀÇ »ç¿ë¹ýÀº ¿©·¯°¡Áö´Ù.</p>
      
          <p>½½·¡½¬·Î ½ÃÀÛÇÏÁö¾Ê´Â °æ·Î¸¦ ÁöÁ¤ÇÏ¸é °¢ »ç¿ëÀÚÀÇ
          Ȩµð·ºÅ丮¿¡ »ó´ëÀûÀÎ µð·ºÅ丮 °æ·Î·Î ó¸®ÇÑ´Ù. ¿¹¸¦ µé¾î,
          ¾Æ·¡ ¼³Á¤ÀÇ °æ¿ì:</p>
      
          <div class="example"><p><code>
            UserDir public_html
          </code></p></div>
      
          <p>URL <code>http://example.com/~rbowen/file.html</code>˼
          ÆÄÀÏ °æ·Î <code>/home/rbowen/public_html/file.html</code>À»
          ¶æÇÑ´Ù.</p>
      
          <p>½½·¡½¬·Î ½ÃÀÛÇÏ´Â °æ·Î¸¦ ÁöÁ¤Çϸé ÁöÁ¤ÇÑ µð·ºÅ丮¿¡
          »ç¿ëÀÚ¸íÀ» ´õÇÑ µð·ºÅ丮 °æ·Î¸¦ »ç¿ëÇÑ´Ù. ¿¹¸¦ µé¾î, ¾Æ·¡
          ¼³Á¤ÀÇ °æ¿ì:</p>
      
          <div class="example"><p><code>
            UserDir /var/html
          </code></p></div>
      
          <p>URL <code>http://example.com/~rbowen/file.html</code>˼
          ÆÄÀÏ °æ·Î <code>/var/html/rbowen/file.html</code>À» ¶æÇÑ´Ù.</p>
      
          <p>º°Ç¥ (*)¸¦ Æ÷ÇÔÇÑ °æ·Î¸¦ ÁöÁ¤ÇÏ¸é º°Ç¥¸¦ »ç¿ëÀÚ¸íÀ¸·Î
          ´ëüÇÑ °æ·Î¸¦ »ç¿ëÇÑ´Ù. ¿¹¸¦ µé¾î, ¾Æ·¡ ¼³Á¤ÀÇ °æ¿ì:</p>
      
          <div class="example"><p><code>
            UserDir /var/www/*/docs
          </code></p></div>
      
          <p>URL <code>http://example.com/~rbowen/file.html</code>˼
          ÆÄÀÏ °æ·Î <code>/var/www/rbowen/docs/file.html</code>À»
          ¶æÇÑ´Ù.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="enable" id="enable">±â´ÉÀ» ÀÌ¿ëÇÒ »ç¿ëÀÚ Á¦ÇÑÇϱâ</a></h2>
          
      
          <p>UserDir ¹®¼­¿¡ ÀÖ´Â ¹®¹ýÀ» »ç¿ëÇÏ¿© »ç¿ëÀÚº° À¥µð·ºÅ丮
          ±â´ÉÀ» ÀÌ¿ëÇÒ ¼ö ÀÖ´Â »ç¿ëÀÚ¸¦ Á¦ÇÑÇÒ ¼ö ÀÖ´Ù:</p>
      
          <div class="example"><p><code>
            UserDir enabled<br />
            UserDir disabled root jro fish
          </code></p></div>
      
          <p>À§ ¼³Á¤Àº <code>disabled</code> ¹®Àå¿¡ ¿­°ÅÇÑ »ç¶÷À»
          Á¦¿ÜÇÏ°í ¸ðµç »ç¿ëÀÚ¿¡°Ô À¥µð·ºÅ丮 ±â´ÉÀ» Çã¶ôÇÑ´Ù. ¶Ç,
          ´ÙÀ½°ú °°ÀÌ ¸î¸î »ç¿ëÀÚ¸¦ Á¦¿ÜÇÏ°í ±â´ÉÀ» Çã¶ôÇÏÁö ¾ÊÀ»
          ¼öµµ ÀÖ´Ù:</p>
      
          <div class="example"><p><code>
            UserDir disabled<br />
            UserDir enabled rbowen krietz
          </code></p></div>
      
          <p><code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>
          ¹®¼­¿¡ ÀÖ´Â ´Ù¸¥ ¿¹µéµµ Âü°íÇ϶ó.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cgi" id="cgi">°¢ »ç¿ëÀÚº° cgi µð·ºÅ丮 ÁöÁ¤Çϱâ</a></h2>
        
      
         <p>»ç¿ëÀÚ¸¶´Ù cgi-bin µð·ºÅ丮¸¦ ºÎ¿©ÇÏ·Á¸é <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> Áö½Ã¾î¸¦
         »ç¿ëÇÏ¿© »ç¿ëÀÚ È¨µð·ºÅ丮ÀÇ Æ¯Á¤ ÇÏÀ§µð·ºÅ丮¸¦ cgi °¡´ÉÇϰÔ
         ¸¸µç´Ù.</p>
      
          <div class="example"><p><code>
            &lt;Directory /home/*/public_html/cgi-bin/&gt;<br />
             Options ExecCGI<br />
             SetHandler cgi-script<br />
             &lt;/Directory&gt;
          </code></p></div>
      
          <p><code>UserDir</code>ÀÌ <code>public_html</code>À̶ó°í
          °¡Á¤Çϸé, ´ÙÀ½°ú °°ÀÌ ±× ¾È¿¡ ÀÖ´Â cgi ÇÁ·Î±×·¥
          <code>example.cgi</code>¸¦ ½ÇÇàÇÒ ¼ö ÀÖ´Ù.</p>
      
          <div class="example"><p><code>
          http://example.com/~rbowen/cgi-bin/example.cgi
          </code></p></div>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="htaccess" id="htaccess">»ç¿ëÀÚ°¡ ¼³Á¤À» º¯°æÇÒ ¼ö ÀÖµµ·Ï ¸¸µé±â</a></h2>
          
      
          <p>»ç¿ëÀÚ°¡ ÀÚ½ÅÀÇ À¥°ø°£¿¡ ´ëÇÑ À¥¼­¹ö ¼³Á¤À» ¼öÁ¤ÇÏ·Á¸é,
          <code>.htaccess</code> ÆÄÀÏÀ» »ç¿ëÇÒ ¼ö ÀÖ¾î¾ß ÇÑ´Ù. <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>¸¦ »ç¿ëÀÚ°¡ ¼öÁ¤ÇÒ
          ¼ö ÀÖ´Â Áö½Ã¾î¿¡ ÀûÇÕÇÑ °ªÀ¸·Î ¼³Á¤Ç϶ó. ¾î¶»°Ô µ¿ÀÛÇÏ´ÂÁö¿¡
          ´ëÇÑ ÀÚ¼¼ÇÑ Á´º¸´Â <a href="htaccess.html">.htaccess
          ÅõÅ丮¾ó</a>À» Âü°íÇ϶ó.</p>
      
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/howto/public_html.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/public_html.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/public_html.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/public_html.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/public_html.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/public_html.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/public_html.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/htaccess.html.ko.euc-kr����������������������������������������������0000644�0000000�0000050�00000050263�13412755316�021076� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¾ÆÆÄÄ¡ ÅõÅ丮¾ó: .htaccess ÆÄÀÏ - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutorials</a></div><div id="page-content"><div id="preamble"><h1>¾ÆÆÄÄ¡ ÅõÅ丮¾ó: .htaccess ÆÄÀÏ</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/howto/htaccess.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/htaccess.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/htaccess.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/htaccess.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/htaccess.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../pt-br/howto/htaccess.html" hreflang="pt-br" rel="alternate" title="Portugu&#234;s (Brasil)">&nbsp;pt-br&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      <p><code>.htaccess</code> ÆÄÀÏÀ» »ç¿ëÇÏ¿© µð·ºÅ丮º°·Î ¼³Á¤À»
      º¯°æÇÒ ¼ö ÀÖ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">.htaccess ÆÄÀÏ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#what">¹«¾ùÀ̸ç/¾î¶»°Ô »ç¿ëÇϴ°¡</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#when">¾ðÁ¦ .htaccess ÆÄÀÏÀ» »ç¿ëÇϳª
          (ȤÀº »ç¿ëÇÏÁö ¾Ê³ª)</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#how">¾î¶»°Ô Áö½Ã¾î¸¦ Àû¿ëÇϳª</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#auth">ÀÎÁõ ¿¹Á¦</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ssi">Server Side Includes ¿¹Á¦</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cgi">CGI ¿¹Á¦</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#troubleshoot">¹®Á¦Çذá</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">.htaccess ÆÄÀÏ</a></h2>
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="../mod/core.html">core</a></code></li><li><code class="module"><a href="../mod/mod_authn_file.html">mod_authn_file</a></code></li><li><code class="module"><a href="../mod/mod_authz_groupfile.html">mod_authz_groupfile</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="../mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="../mod/mod_mime.html">mod_mime</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#accessfilename">AccessFileName</a></code></li><li><code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code></li><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="../mod/core.html#sethandler">SetHandler</a></code></li><li><code class="directive"><a href="../mod/core.html#authtype">AuthType</a></code></li><li><code class="directive"><a href="../mod/core.html#authname">AuthName</a></code></li><li><code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code></li><li><code class="directive"><a href="../mod/mod_authz_groupfile.html#authgroupfile">AuthGroupFile</a></code></li><li><code class="directive"><a href="../mod/core.html#require">Require</a></code></li></ul></td></tr></table>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="what" id="what">¹«¾ùÀ̸ç/¾î¶»°Ô »ç¿ëÇϴ°¡</a></h2>
      
      
          <p><code>.htaccess</code> ÆÄÀÏ(ȤÀº "ºÐ»ê ¼³Á¤ÆÄÀÏ")À»
          »ç¿ëÇÏ¸é µð·ºÅ丮º°·Î ¼³Á¤À» º¯°æÇÒ ¼ö ÀÖ´Ù. ¿©·¯ ¼³Á¤ Áö½Ã¾î°¡
          ÀÖ´Â ÆÄÀÏÀ» ƯÁ¤ ¹®¼­ µð·ºÅ丮¿¡ µÎ¸é, ±× µð·ºÅ丮¿Í ¸ðµç
          ÇÏÀ§µð·ºÅ丮¿¡ Áö½Ã¾î¸¦ Àû¿ëÇÑ´Ù.</p>
      
          <div class="note"><h3>ÁÖÀÇ:</h3>
            <p><code>.htaccess</code> ÆÄÀϸíÀ» ´Ù¸£°Ô »ç¿ëÇÏ°í ½Í´Ù¸é,
            <code class="directive"><a href="../mod/core.html#accessfilename">AccessFileName</a></code> Áö½Ã¾î¸¦
            »ç¿ëÇÏ¿© º¯°æÇÒ ¼ö ÀÖ´Ù. ¿¹¸¦ µé¾î, <code>.config</code>
            ÆÄÀϸíÀ» »ç¿ëÇÏ·Á¸é ¼­¹ö ¼³Á¤ÆÄÀÏ¿¡ ´ÙÀ½°ú °°ÀÌ Ãß°¡ÇÑ´Ù.</p>
      
            <div class="example"><p><code>
              AccessFileName .config
            </code></p></div>
          </div>
      
          <p>ÀϹÝÀûÀ¸·Î <code>.htaccess</code> ÆÄÀÏÀº <a href="../configuring.html#syntax">ÁÖ¼³Á¤ÆÄÀÏ</a>°ú ¹®¹ýÀÌ
          °°´Ù. <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>
          Áö½Ã¾î°¡ ÀÌ ÆÄÀÏ¿¡ ³ª¿Ã ¼ö ÀÖ´Â ³»¿ëÀ» °áÁ¤ÇÑ´Ù. ÀÌ Áö½Ã¾î´Â
          <code>.htaccess</code> ÆÄÀÏ¿¡¼­ Çã¿ëÇÏ´Â Áö½Ã¾î ºÐ·ù¸¦ ÁöÁ¤ÇÑ´Ù.
          Áö½Ã¾î¸¦ <code>.htaccess</code> ÆÄÀÏ¿¡¼­ »ç¿ëÇÒ ¼ö ÀÖ´Ù¸é,
          ÇØ´ç Áö½Ã¾î ¹®¼­ÀÇ Override Ç׸ñÀº Áö½Ã¾î¸¦ Çã¿ëÇϱâÀ§ÇØ
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>¿¡ »ç¿ëÇÒ
          °ªÀ» ¾Ë·ÁÁØ´Ù.</p>
      
          <p>¿¹¸¦ µé¾î, <code class="directive"><a href="../mod/core.html#adddefaultcharset">AddDefaultCharset</a></code>
          Áö½Ã¾î ¹®¼­¸¦ º¸¸é ÀÌ Áö½Ã¾î¸¦ <code>.htaccess</code> ÆÄÀÏ¿¡¼­
          »ç¿ëÇÒ ¼ö ÀÖ´Ù. (Áö½Ã¾î ¿ä¾à¿¡¼­ »ç¿ëÀå¼Ò Ç׸ñÀ» º¸¶ó.)
          <a href="../mod/directive-dict.html#Context">Override</a>
          ÁÙ¿¡ <code>FileInfo</code>°¡ ÀÖ´Ù. ±×·¡¼­ ÀÌ Áö½Ã¾î¸¦
          <code>.htaccess</code> ÆÄÀÏ¿¡¼­ »ç¿ëÇϱâÀ§Çؼ­´Â ÃÖ¼ÒÇÑ
          <code>AllowOverride FileInfo</code>°¡ ÇÊ¿äÇÏ´Ù.</p>
      
          <div class="example"><h3>¿¹Á¦:</h3><table>
              <tr>
                <td><a href="../mod/directive-dict.html#Context">»ç¿ëÀå¼Ò:</a></td>
                <td>ÁÖ¼­¹ö¼³Á¤, °¡»óÈ£½ºÆ®, directory, .htaccess</td>
              </tr>
      
              <tr>
                <td><a href="../mod/directive-dict.html#Override">Override:</a></td>
                <td>FileInfo</td>
              </tr>
            </table></div>
      
          <p>ƯÁ¤ Áö½Ã¾î¸¦ <code>.htaccess</code> ÆÄÀÏ¿¡¼­ »ç¿ëÇÒ
          ¼ö ÀÖ´ÂÁö ±Ã±ÝÇϸé Áö½Ã¾î ¹®¼­ÀÇ »ç¿ëÀå¼Ò Ç׸ñ¿¡ ".htaccess"°¡
          ÀÖ´ÂÁö È®ÀÎÇÑ´Ù.</p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="when" id="when">¾ðÁ¦ .htaccess ÆÄÀÏÀ» »ç¿ëÇϳª
          (ȤÀº »ç¿ëÇÏÁö ¾Ê³ª)</a></h2>
      
          <p>ÀϹÝÀûÀ¸·Î ÁÖ¼­¹öÆÄÀÏ¿¡ Á¢±ÙÇÒ ¼ö ¾ø´Â °æ¿ì°¡ ¾Æ´Ï¶ó¸é
          <code>.htaccess</code> ÆÄÀÏÀ» »ç¿ëÇÏ¸é ¾ÈµÈ´Ù. ¿¹¸¦ µé¾î,
          »ç¿ëÀÚ ÀÎÁõÀÌ Ç×»ó <code>.htaccess</code> ÆÄÀÏ¿¡ ÀÖ¾î¾ß
          ÇÑ´Ù´Â °ÍÀº À߸ø ¾Ë·ÁÁø ¿ÀÇØ´Ù. ÀÌ´Â »ç½ÇÀÌ ¾Æ´Ï´Ù. ÁÖ¼­¹ö¼³Á¤¿¡
          »ç¿ëÀÚ ÀÎÁõ ¼³Á¤À» ÀûÀ» ¼ö ÀÖ°í, »ç½Ç ÀÌ·¯±æ ±ÇÇÑ´Ù.</p>
      
          <p><code>.htaccess</code> ÆÄÀÏÀº ÄÁÅÙÃ÷ Á¦°øÀÚ°¡ µð·ºÅ丮º°·Î
          ¼­¹ö ¼³Á¤À» ´Ù¸£°ÔÇÏ°í ½ÍÁö¸¸ ¼­¹ö ½Ã½ºÅÛ¿¡ root ±ÇÇÑÀÌ
          ¾ø´Â °æ¿ì¿¡ »ç¿ëÇÑ´Ù. ¼­¹ö °ü¸®ÀÚ°¡ ¼³Á¤À» ÀÚÁÖ º¯°æÇϰí
          ½ÍÁö ¾ÊÀº °æ¿ì ÀÏ¹Ý »ç¿ëÀÚ°¡ Á÷Á¢ <code>.htaccess</code>
          ÆÄÀÏÀ» ¼öÁ¤Çϵµ·Ï Çã¿ëÇÏ´Â °ÍÀÌ ¹Ù¶÷Á÷ÇÏ´Ù. ¿¹¸¦ µé¾î, ÇÑ
          ÄÄÇ»ÅÍ¿¡ ¿©·¯ »ç¿ëÀÚ »çÀÌÆ®¸¦ ¼­ºñ½ºÇÏ´Â ISP¿¡¼­ »ç¿ëÀÚ°¡
          ÀÚ½ÅÀÇ ¼³Á¤À» º¯°æÇÏ°í ½ÍÀº °æ¿ì°¡ ±×·¯ÇÏ´Ù.</p>
      
          <p>±×·¯³ª ÀϹÝÀûÀ¸·Î <code>.htaccess</code> ÆÄÀÏÀº °¡±ÞÀû
          ÇÇÇØ¾ß ÇÑ´Ù. <code>.htaccess</code> ÆÄÀÏ¿¡¼­ Çã¿ëÇÏ´Â Áö½Ã¾î´Â
          ÁÖ¼³Á¤ÆÄÀÏÀÇ <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> ¼½¼Ç°ú °°Àº È¿°ú°¡
          ÀÖ´Ù.</p>
      
          <p>´ÙÀ½ µÎ°¡Áö Å« ÀÌÀ¯¶§¹®¿¡ <code>.htaccess</code> ÆÄÀÏ
          »ç¿ëÀ» ÇÇÇØ¾ß ÇÑ´Ù.</p>
      
          <p>ù¹øÂ°´Â ¼º´ÉÀÌ´Ù. <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>°¡ <code>.htaccess</code>
          ÆÄÀÏÀ» »ç¿ëÇϵµ·Ï Çã¿ëÇϸé, ¾ÆÆÄÄ¡´Â µð·ºÅ丮¸¶´Ù
          <code>.htaccess</code> ÆÄÀÏÀ» ã´Â´Ù. ±×·¡¼­
          <code>.htaccess</code> ÆÄÀÏÀ» Çã¿ëÇÏ¸é ½ÇÁ¦·Î ÆÄÀÏÀ» »ç¿ëÇÏÁö
          ¾Ê´Â °æ¿ì¿¡µµ ¼º´ÉÀÌ ¶³¾îÁø´Ù! ¶Ç, <code>.htaccess</code>
          ÆÄÀÏÀº ¹®¼­¸¦ ¿äûÇÒ¶§¸¶´Ù ÀоîµéÀδÙ.</p>
      
          <p>°Ô´Ù°¡ Àû¿ëÇØ¾ß ÇÏ´Â Àüü Áö½Ã¾î¸¦ ¸ðÀ¸±âÀ§ÇØ ¾ÆÆÄÄ¡´Â
          ¸ðµç »óÀ§ µð·ºÅ丮¿¡¼­ <code>.htaccess</code> ÆÄÀÏÀ» ã´Â´Ù.
          (<a href="#how">¾î¶»°Ô Áö½Ã¾î¸¦ Àû¿ëÇϳª</a> ÀýÀ» Âü°í.)
          ±×·¡¼­ <code>/www/htdocs/example</code> µð·ºÅ丮¿¡ ÀÖ´Â
          ÆÄÀÏÀ» ¿äûÇϸé, ¾ÆÆÄÄ¡´Â ´ÙÀ½ ÆÄÀϵéÀ» ã¾Æ¾ß ÇÑ´Ù.</p>
      
          <div class="example"><p><code>
            /.htaccess<br />
            /www/.htaccess<br />
            /www/htdocs/.htaccess<br />
            /www/htdocs/example/.htaccess
          </code></p></div>
      
          <p>±×·¡¼­ ±× µð·ºÅ丮¿¡ ÀÖ´Â ÆÄÀÏÀ» Á¢±ÙÇÒ ¶§¸¶´Ù ¼³Á¤ÆÄÀÏÀÌ
          ÀüÇô ¾ø¾îµµ ÆÄÀϽýºÅÛÀ» 4¹ø ´õ Á¢±ÙÇØ¾ß ÇÑ´Ù.
          (<code>/</code>¿¡¼­µµ <code>.htaccess</code> ÆÄÀÏÀ» Çã¿ëÇÑ
          °æ¿ì¸¦ ¸»ÇÑ´Ù. º¸ÅëÀº Çã¿ëÇÏÁö ¾Ê´Â´Ù.)</p>
      
          <p>µÎ¹øÂ° ÀÌÀ¯´Â º¸¾ÈÀÌ´Ù. »ç¿ëÀÚ¿¡°Ô ¼­¹ö¼³Á¤ º¯°æ ±ÇÇÑÀ»
          ÁÖ¸é ´ç½ÅÀÌ °¨´çÇÒ ¼ö ¾ø´Â º¯È­°¡ ÀϾ ¼ö ÀÖ´Ù. »ç¿ëÀÚ¿¡°Ô
          ÀÌ·± ±ÇÇÑÀ» ÁÙÁö °õ°õÀÌ »ý°¢Ç϶ó. ¶Ç, »ç¿ëÀÚ°¡ ¿øÇÏ´Â °Íº¸´Ù
          ÀûÀº ±ÇÇÑÀ» ÁÖ¸é ±â¼úÁö¿ø¿äûÀÌ µé¾î¿Â´Ù. »ç¿ëÀÚ¿¡°Ô °¡´ÉÇÑ
          ±ÇÇÑ ¼öÁØÀ» ¸íÈ®È÷ ¾Ë·Á¶ó. »ç¿ëÀÚ¿¡°Ô <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>¸¦ ¾î¶»°Ô ¼³Á¤ÇÏ¿´´ÂÁö
          Á¤È®È÷ ¾Ë¸®°í °ü·Ã ¹®¼­¸¦ Á¦°øÇÏ¸é ¾ÕÀ¸·Î È¥¶õÀ» ÇÇÇÒ ¼ö
          ÀÖ´Ù.</p>
      
          <p>Áö½Ã¾î¸¦ <code>/www/htdocs/example</code> µð·ºÅ丮ÀÇ
          <code>.htaccess</code> ÆÄÀÏÀ» µÎ´Â °Í°ú ÁÖ¼­¹ö¼³Á¤ÀÇ
          <code>&lt;Directory /www/htdocs/example&gt;</code> Directory
          ¼³Á¤¿¡ µÎ´Â °ÍÀº ¿ÏÀüÈ÷ °°´Ù.</p>
      
          <p><code>/www/htdocs/example</code>¿¡ ÀÖ´Â
          <code>.htaccess</code> ¼½¼Ç:</p>
      
          <div class="example"><h3><code>/www/htdocs/example</code>¿¡ ÀÖ´Â
          .htaccess ÆÄÀÏ ³»¿ë</h3><p><code>
              AddType text/example .exm
          </code></p></div>
      
          <div class="example"><h3><code>httpd.conf</code> ÆÄÀÏ¿¡ ÀÖ´Â ¼½¼Ç</h3><p><code>
            &lt;Directory /www/htdocs/example&gt;<br />
            <span class="indent">
              AddType text/example .exm<br />
            </span>
            &lt;/Directory&gt;
          </code></p></div>
      
          <p>±×·¯³ª ÆÄÀÏÀ» ¿äûÇÒ ¶§¸¶´Ù ¼³Á¤À» ÀÐÁö¾Ê°í ¾ÆÆÄÄ¡°¡
          ½ÃÀÛÇÒ¶§ Çѹø¸¸ ¼³Á¤À» Àб⶧¹®¿¡ °°Àº ¼³Á¤À» ¼­¹ö¼³Á¤ÆÄÀÏ¿¡
          »ç¿ëÇÏ¸é ¼º´ÉÀÌ ´õ ºü¸£´Ù.</p>
      
          <p><code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> Áö½Ã¾î¸¦
          <code>none</code>À¸·Î ¼³Á¤Çϸé <code>.htaccess</code> ÆÄÀÏÀ»
          ¿ÏÀüÈ÷ »ç¿ëÇÒ ¼ö ¾ø´Ù.</p>
      
          <div class="example"><p><code>
            AllowOverride None
          </code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="how" id="how">¾î¶»°Ô Áö½Ã¾î¸¦ Àû¿ëÇϳª</a></h2>
      
          <p><code>.htaccess</code> ÆÄÀÏÀ» ¹ß°ßÇÑ µð·ºÅ丮¿Í ±× µð·ºÅ丮ÀÇ
          ¸ðµç ÇÏÀ§µð·ºÅ丮¿¡ <code>.htaccess</code> ÆÄÀÏ¿¡ ÀÖ´Â ¼³Á¤
          Áö½Ã¾î¸¦ Àû¿ëÇÑ´Ù. ±×·¡¼­ »óÀ§µð·ºÅ丮ÀÇ <code>.htaccess</code>
          ÆÄÀÏÀ» ÁÖÀÇÇØ¾ß ÇÑ´Ù. ¹ß°ßÇÑ ¼ø¼­·Î Áö½Ã¾î¸¦ Àû¿ëÇÑ´Ù. ƯÁ¤
          µð·ºÅ丮¿¡ ÀÖ´Â <code>.htaccess</code> ÆÄÀÏÀº »óÀ§µð·ºÅ丮¿¡
          ÀÖ´Â <code>.htaccess</code> ÆÄÀÏÀÇ Áö½Ã¾î¸¦ ¹«È¿·Î ¸¸µé
          ¼ö ÀÖ°í, »óÀ§µð·ºÅ丮¿¡ ÀÖ´Â Áö½Ã¾î´Â ´õ »óÀ§µð·ºÅ丮 ȤÀº
          ÁÖ¼³Á¤ÆÄÀÏ¿¡ ÀÖ´Â Áö½Ã¾î¸¦ ¹«È¿·Î ¸¸µé ¼ö ÀÖ´Ù.</p>
      
          <p>¿¹Á¦:</p>
      
          <p><code>/www/htdocs/example1</code> µð·ºÅ丮¿¡ ´ÙÀ½°ú °°Àº
          <code>.htaccess</code> ÆÄÀÏÀÌ ÀÖ´Ù.</p>
      
          <div class="example"><p><code>
             Options +ExecCGI
          </code></p></div>
      
          <p>(ÁÖÀÇ: <code>.htaccess</code> ÆÄÀÏ¿¡ "<code class="directive"><a href="../mod/core.html#options">Options</a></code>" Áö½Ã¾î¸¦ »ç¿ëÇÏ·Á¸é
          "<code>AllowOverride Options</code>"°¡ ÇÊ¿äÇÏ´Ù.)</p>
      
          <p><code>/www/htdocs/example1/example2</code> µð·ºÅ丮¿¡´Â
          ´ÙÀ½°ú °°Àº <code>.htaccess</code> ÆÄÀÏÀÌ ÀÖ´Ù.</p>
      
          <div class="example"><p><code>
             Options Includes
          </code></p></div>
      
          <p>ÀÌ µÎ¹øÂ° <code>.htaccess</code> ÆÄÀÏÀÇ
          <code>Options Includes</code>°¡ ÀÌÀü ¼³Á¤À» ¿ÏÀüÈ÷ ¹«È¿·Î
          ¸¸µé±â¶§¹®¿¡ <code>/www/htdocs/example1/example2</code>
          µð·ºÅ丮´Â CGI ½ÇÇàÀ» Çã¿ëÇÏÁö ¾Ê´Â´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="auth" id="auth">ÀÎÁõ ¿¹Á¦</a></h2>
      
          <p>ÀÎÁõ ¹æ¹ýÀ» ¾Ë±âÀ§ÇØ ¹Ù·Î À̰÷ºÎÅÍ Àд´ٸé ÁÖÀÇÇÒ °ÍÀÌ
          ÀÖ´Ù. ¾ÏÈ£ ÀÎÁõÀ» ÇÏ·Á¸é <code>.htaccess</code> ÆÄÀÏÀÌ
          ÇÊ¿äÇÏ´Ù´Â ¿ÀÇØ°¡ ³Î¸® ÆÛÁ®ÀÖ´Ù. ÀÌ´Â »ç½ÇÀÌ ¾Æ´Ï´Ù.
          ÁÖ¼³Á¤ÆÄÀÏÀÇ <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> ¼½¼Ç¿¡ ÀÎÁõ Áö½Ã¾î¸¦
          µÎ´Â °ÍÀÌ ´õ ±ÇÀåÇÏ´Â ¹æ¹ýÀ̰í, ¼­¹öÀÇ ÁÖ¼³Á¤ÆÄÀÏÀ» ¼öÁ¤ÇÒ
          ¼ö ¾ø´Â °æ¿ì¿¡¸¸ <code>.htaccess</code> ÆÄÀÏÀ» »ç¿ëÇØ¾ß
          ÇÑ´Ù. ¾ðÁ¦ <code>.htaccess</code> ÆÄÀÏÀ» »ç¿ëÇØ¾ß ÇÏ´ÂÁö¿Í
          »ç¿ëÇÏÁö ¸»¾Æ¾ß ÇÏ´ÂÁö´Â <a href="#when">À§¿¡¼­</a>
          ¼³¸íÇÏ¿´´Ù.</p>
      
          <p>¾Õ¿¡¼­ ¸»ÇßÁö¸¸ ¾ÆÁ÷µµ <code>.htaccess</code> ÆÄÀÏÀÌ
          ÇÊ¿äÇÏ´Ù°í »ý°¢µÇ¸é ¾Æ·¡ ¼³Á¤ÀÌ µµ¿òÀÌ µÉ °ÍÀÌ´Ù.</p>
      
          <p><code>.htaccess</code> ÆÄÀÏ ³»¿ë.</p>
      
          <div class="example"><p><code>
            AuthType Basic<br />
            AuthName "Password Required"<br />
            AuthUserFile /www/passwords/password.file<br />
            AuthGroupFile /www/passwords/group.file<br />
            Require Group admins
          </code></p></div>
      
          <p>ÀÌ Áö½Ã¾î°¡ µ¿ÀÛÇϱâÀ§Çؼ­´Â
          <code>AllowOverride AuthConfig</code> Áö½Ã¾î°¡ ÇÊ¿äÇÔÀ»
          ¸í½ÉÇ϶ó.</p>
      
          <p>ÀÎÁõ°ú ±ÇÇѺο©¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ¼³¸íÀº <a href="auth.html">ÀÎÁõ
          ÅõÅ丮¾ó</a>À» º¸±æ ¹Ù¶õ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ssi" id="ssi">Server Side Includes ¿¹Á¦</a></h2>
      
          <p>¶Ç´Ù¸¥ ÀϹÝÀûÀÎ <code>.htaccess</code> ÆÄÀÏÀÇ ¿ëµµ´Â
          ƯÁ¤ µð·ºÅ丮¿¡¼­ Server Side Includes¸¦ °¡´ÉÇÏ°Ô ¸¸µå´Â
          °ÍÀÌ´Ù. ¿øÇÏ´Â µð·ºÅ丮ÀÇ <code>.htaccess</code> ÆÄÀÏ¿¡
          ´ÙÀ½°ú °°Àº ¼³Á¤ Áö½Ã¾î¸¦ »ç¿ëÇÏ¸é µÈ´Ù.</p>
      
          <div class="example"><p><code>
             Options +Includes<br />
             AddType text/html shtml<br />
             AddHandler server-parsed shtml
          </code></p></div>
      
          <p>ÀÌ Áö½Ã¾î°¡ µ¿ÀÛÇÏ·Á¸é <code>AllowOverride Options</code>¿Í
          <code>AllowOverride FileInfo</code>°¡ ¸ðµÎ ÇÊ¿äÇÔÀ» ¸í½ÉÇ϶ó.</p>
      
          <p>server-side includes¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ¼³¸íÀº <a href="ssi.html">SSI ÅõÅ丮¾ó</a>À» º¸±æ ¹Ù¶õ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cgi" id="cgi">CGI ¿¹Á¦</a></h2>
      
          <p>¸¶Áö¸·À¸·Î <code>.htaccess</code> ÆÄÀÏÀ» »ç¿ëÇÏ¿© ƯÁ¤
          µð·ºÅ丮¿¡¼­ CGI ÇÁ·Î±×·¥ ½ÇÇàÀ» Çã¿ëÇÏ°í ½Í´Ù¸é, ´ÙÀ½°ú
          °°Àº ¼³Á¤À» »ç¿ëÇÑ´Ù.</p>
      
          <div class="example"><p><code>
             Options +ExecCGI<br />
             AddHandler cgi-script cgi pl
          </code></p></div>
      
          <p>ȤÀº ÀÌ µð·ºÅ丮¿¡ ÀÖ´Â ¸ðµç ÆÄÀÏÀ» CGI ÇÁ·Î±×·¥À¸·Î
          ó¸®ÇÏ°í ½Í´Ù¸é ´ÙÀ½°ú °°Àº ¼³Á¤µµ °¡´ÉÇÏ´Ù.</p>
      
          <div class="example"><p><code>
             Options +ExecCGI<br />
             SetHandler cgi-script
          </code></p></div>
      
          <p>ÀÌ Áö½Ã¾î°¡ µ¿ÀÛÇÏ·Á¸é <code>AllowOverride Options</code>¿Í
          <code>AllowOverride FileInfo</code>°¡ ¸ðµÎ ÇÊ¿äÇÔÀ» ¸í½ÉÇ϶ó.</p>
      
          <p>CGI ÇÁ·Î±×·¡¹Ö°ú ¼³Á¤¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ¼³¸íÀº <a href="cgi.html">CGI ÅõÅ丮¾ó</a>À» º¸±æ ¹Ù¶õ´Ù.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="troubleshoot" id="troubleshoot">¹®Á¦Çذá</a></h2>
      
          <p><code>.htaccess</code> ÆÄÀÏ¿¡ µÐ ¼³Á¤ Áö½Ã¾î°¡ ¿øÇÏ´Â
          ±â´ÉÀ» ÇÏÁö ¾Ê´Â °æ¿ì ¿©·¯°¡Áö ÀÌÀ¯°¡ ÀÖÀ» ¼ö ÀÖ´Ù.</p>
      
          <p>°¡Àå ÀϹÝÀûÀÎ ¹®Á¦´Â ¼³Á¤ Áö½Ã¾î¸¦ °¡´ÉÇÏ°Ô ¸¸µå´Â <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>¸¦ ¼³Á¤ÇÏÁö ¾ÊÀº
          °æ¿ì´Ù. ¹®Á¦°¡ µÇ´Â ÆÄÀÏ ¿µ¿ª¿¡ <code>AllowOverride None</code>ÀÌ
          ¾ø´ÂÁö È®ÀÎÇÑ´Ù. <code>.htaccess</code> ÆÄÀÏÀ» ¾Æ¹«·¸°Ô³ª 
          ÀûÀº ´ÙÀ½ ÆäÀÌÁö¸¦ ´Ù½Ã Á¢±ÙÇÏ¿© ½±°Ô °Ë»çÇØº¼ ¼ö ÀÖ´Ù.
          ¼­¹ö ¿À·ù°¡ ³ª¿ÀÁö ¾ÊÀ¸¸é °ÅÀÇ È®½ÇÈ÷
          <code>AllowOverride None</code>À» »ç¿ëÇÑ °æ¿ì´Ù.</p>
      
          <p>¹Ý´ë·Î ¹®¼­¿¡ Á¢±ÙÇÒ¶§ ¼­¹ö ¿À·ù°¡ ¹ß»ýÇÏ¸é ¾ÆÆÄÄ¡ ¿À·ù·Î±×¸¦
          »ìÆìºÁ¶ó. ¾Æ¸¶µµ <code>.htaccess</code> ÆÄÀÏ¿¡ ÀÖ´Â Áö½Ã¾î¸¦
          Çã¿ëÇÏÁö ¾Ê´Â´Ù°í ÇÒ °ÍÀÌ´Ù. ¾Æ´Ï°í ¹®¹ý ¿À·ù°¡ ÀÖ´Ù¸é ¿À·ù¸¦
          °íÄ£´Ù.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/howto/htaccess.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/htaccess.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/htaccess.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/htaccess.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/htaccess.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../pt-br/howto/htaccess.html" hreflang="pt-br" rel="alternate" title="Portugu&#234;s (Brasil)">&nbsp;pt-br&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/htaccess.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/index.html.fr.utf8���������������������������������������������������0000644�0000000�0000050�00000021607�13412755316�020106� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>How-To / Tutoriels - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>How-To / Tutoriels</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/howto/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="howto" id="howto">How-To / Tutoriels</a></h2>
      
          
      
          <dl>
            <dt>Authentification et autorisation</dt>
            <dd>
              <p>L'authentification représente tout processus par lequel vous
      	vérifiez si quelqu'un correspond bien à la personne qu'il
      	prétend être. L'autorisation représente tout processus
      	permettant de savoir si une personne est autorisée à aller là où
      	elle veut aller, ou à obtenir les informations qu'elle demande.</p>
      
              <p>Voir <a href="auth.html">Authentification, Autorisation</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Contrôle d'accès</dt>
            <dd>
              <p>Le contrôle d'accès se réfère au processus permettant
      	d'interdire ou d'accorder l'accès à une ressource en fonction de
      	certains critères, et il existe de nombreuses façons d'y
      	parvenir.</p>
      
              <p>Voir <a href="access.html">Contrôle d'accès</a></p>
            </dd>
          </dl>
      
         <dl>
            <dt>Contenu dynamique avec CGI</dt>
            <dd>
              <p>L'interface CGI (Common Gateway Interface)
      	fournit au serveur web une méthode d'interaction avec des
      	programmes externes générateurs de contenu, souvent nommés
      	programmes CGI ou scripts CGI. Il s'agit d'une méthode
      	simple permettant d'ajouter du contenu
      	dynamique à votre site web. Ce document se veut une introduction
      	à la configuration de CGI sur votre serveur web Apache et à
      	l'écriture de programmes CGI.</p>
      
              <p>Voir <a href="cgi.html">CGI : contenu dynamique</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Fichiers <code>.htaccess</code></dt>
            <dd>
              <p>Les fichiers <code>.htaccess</code> permettent de modifier la
      	configuration du serveur au niveau de chaque répertoire. À cet
      	effet, un fichier est placé dans un répertoire particulier du site
      	web, et les directives de configuration qu'il contient s'appliquent à ce
      	répertoire et à tous ses sous-répertoires.</p>
      
              <p>Voir <a href="htaccess.html">Fichiers <code>.htaccess</code></a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>HTTP/2 avec httpd</dt>
            <dd>
            <p>HTTP/2 est une évolution du protocole de la couche application le plus
            connu au monde, HTTP. Les efforts se sont concentrés sur une amélioration
            de l'efficacité de l'utilisation des ressources réseau sans modifier la
            sémantique de HTTP. Ce guide explique la manière dont HTTP/2 est
            implémenté dans httpd, donne des conseils pour une configuration de base
            ainsi qu'une liste de recommandations.
            </p>
      
              <p>Voir le <a href="http2.html">guide HTTP/2</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Introduction au Inclusions côté Serveur (Server Side Includes
            ou SSI)</dt>
            <dd>
              <p>Les SSI sont des directives que l'on place dans des pages
      	HTML, et qui sont évaluées par le serveur lorsque ces pages sont
      	servies. Elles vous permettent d'ajouter du contenu généré
      	dynamiquement à une page HTML existante, sans avoir à servir
      	l'intégralité de la page via un programme CGI, ou toute autre
      	technologie dynamique.</p>
      
              <p>Voir <a href="ssi.html">Server Side Includes (SSI)</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Répertoires web de l'utilisateur</dt>
            <dd>
              <p>Sur les systèmes multi-utilisateurs, vous pouvez permettre à
      	chaque utilisateur d'avoir un site web dans son répertoire home
      	via la directive <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>. Les visiteurs de l'URL
      	<code>http://example.com/~nom-utilisateur/</code> vont recevoir
      	du contenu situé dans le répertoire home de l'utilisateur
      	"<code>nom-utilisateur</code>", et dans le sous-répertoire
      	spécifié par la directive <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>.</p>
      
              <p>Voir <a href="public_html.html">Répertoires web des utilisateurs (<code>public_html</code>)</a></p>
            </dd>
          </dl>
          <dl>
            <dt>Mandataires inverses</dt>
            <dd>
              <p>Apache httpd possède des fonctionnalités évoluées de serveur
      	mandataire inverse via ses directives <code class="directive"><a href="../mod/mod_proxy.html#proxypass">ProxyPass</a></code> et <code class="directive"><a href="../mod/mod_proxy.html#balancermember">BalancerMember</a></code> qui permettent
      	d'implémenter un système de mandataire inverse sophistiqué garantissant
      	une haute disponibilité, une répartition et une réattribution de charge,
      	un regroupement de serveurs en grappe (clustering) basé sur le cloud et
      	une reconfiguration dynamique à la volée.</p>
      
              <p>Voir le <a href="reverse_proxy.html" />Guide de configuration des
      	mandataires inverses</p>
            </dd>
          </dl>
      
          <dl>
            <dt>Réécriture d'URLs avec mod_rewrite</dt>
            <dd>
              <p>La réécriture d'URLs avec (ou sans) <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code> devient
      	l'une des questions les plus fréquentes posées dans nos listes de
      	diffusion et nos canaux IRC. C'est pourquoi nous avons dédié une <a href="../rewrite/">section entière de notre documentation</a> à des
      	howtos et recettes sur ce sujet.</p>
            </dd>
          </dl>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/howto/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/access.html.en�������������������������������������������������������0000644�0000000�0000050�00000032761�13412755316�017351� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Access Control - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutorials</a></div><div id="page-content"><div id="preamble"><h1>Access Control</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/howto/access.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/access.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/access.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>Access control refers to any means of controlling access to any
          resource. This is separate from <a href="auth.html">authentication and authorization</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Related Modules and Directives</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#host">Access control by host</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#env">Access control by arbitrary variables</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#rewrite">Access control with mod_rewrite</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#moreinformation">More information</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Related Modules and Directives</a></h2>
      
          <p>Access control can be done by several different modules. The most
          important of these are <code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code> and
          <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code>. Also discussed in this document
          is access control using <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="host" id="host">Access control by host</a></h2>
          <p>
          If you wish to restrict access to portions of your site based on the
          host address of your visitors, this is most easily done using
          <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code>.
          </p>
      
          <p>The <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>
          provides a variety of different ways to allow or deny access to
          resources. In conjunction with the <code class="directive"><a href="../mod/mod_authz_core.html#requireall">RequireAll</a></code>, <code class="directive"><a href="../mod/mod_authz_core.html#requireany">RequireAny</a></code>, and <code class="directive"><a href="../mod/mod_authz_core.html#requirenone">RequireNone</a></code> directives, these
          requirements may be combined in arbitrarily complex ways, to enforce
          whatever your access policy happens to be.</p>
      
          <div class="warning"><p>
          The <code class="directive"><a href="../mod/mod_access_compat.html#allow">Allow</a></code>,
          <code class="directive"><a href="../mod/mod_access_compat.html#deny">Deny</a></code>, and
          <code class="directive"><a href="../mod/mod_access_compat.html#order">Order</a></code> directives,
          provided by <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code>, are deprecated and
          will go away in a future version. You should avoid using them, and
          avoid outdated tutorials recommending their use.
          </p></div>
      
          <p>The usage of these directives is:</p>
      
          <pre class="prettyprint lang-config">Require host address
      Require ip ip.address</pre>
      
      
          <p>In the first form, <var>address</var> is a fully qualified
          domain name (or a partial domain name); you may provide multiple
          addresses or domain names, if desired.</p>
      
          <p>In the second form, <var>ip.address</var> is an IP address, a
          partial IP address, a network/netmask pair, or a network/nnn CIDR
          specification. Either IPv4 or IPv6 addresses may be used.</p>
      
          <p>See <a href="../mod/mod_authz_host.html#requiredirectives">the
          mod_authz_host documentation</a> for further examples of this
          syntax.</p>
      
          <p>You can insert <code>not</code> to negate a particular requirement.
          Note, that since a <code>not</code> is a negation of a value, it cannot 
          be used by itself to allow or deny a request, as <em>not true</em>
          does not constitute <em>false</em>. Thus, to deny a visit using a negation,
          the block must have one element that evaluates as true or false.
          For example, if you have someone spamming your message
          board, and you want to keep them out, you could do the
          following:</p>
      
          <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not ip 10.252.46.165
      &lt;/RequireAll&gt;</pre>
      
      
          <p>Visitors coming from that address (<code>10.252.46.165</code>)
          will not be able to see the content covered by this directive. If, 
          instead, you have a machine name, rather than an IP address, you 
          can use that.</p>
      
          <pre class="prettyprint lang-config">Require not host <var>host.example.com</var>
          </pre>
      
      
          <p>And, if you'd like to block access from an entire domain,
          you can specify just part of an address or domain name:</p>
      
          <pre class="prettyprint lang-config">Require not ip 192.168.205
      Require not host phishers.example.com moreidiots.example
      Require not host gov</pre>
      
      
          <p>Use of the <code class="directive"><a href="../mod/mod_authz_core.html#requireall">RequireAll</a></code>, <code class="directive"><a href="../mod/mod_authz_core.html#requireany">RequireAny</a></code>, and <code class="directive"><a href="../mod/mod_authz_core.html#requirenone">RequireNone</a></code> directives may be
          used to enforce more complex sets of requirements.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="env" id="env">Access control by arbitrary variables</a></h2>
      
          <p>Using the <code class="directive"><a href="../mod/core.html#if">&lt;If&gt;</a></code>,
          you can allow or deny access based on arbitrary environment
          variables or request header values. For example, to deny access
          based on user-agent (the browser type) you might do the
          following:</p>
      
          <pre class="prettyprint lang-config">&lt;If "%{HTTP_USER_AGENT} == 'BadBot'"&gt;
          Require all denied
      &lt;/If&gt;</pre>
      
      
          <p>Using the <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>
          <code>expr</code> syntax, this could also be written as:</p>
      
      
          <pre class="prettyprint lang-config">Require expr %{HTTP_USER_AGENT} != 'BadBot'</pre>
      
      
          <div class="note"><h3>Warning:</h3>
          <p>Access control by <code>User-Agent</code> is an unreliable technique,
          since the <code>User-Agent</code> header can be set to anything at all,
          at the whim of the end user.</p>
          </div>
      
          <p>See <a href="../expr.html">the expressions document</a> for a
          further discussion of what expression syntaxes and variables are
          available to you.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rewrite" id="rewrite">Access control with mod_rewrite</a></h2>
      
          <p>The <code>[F]</code> <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> flag causes a 403 Forbidden
          response to be sent. Using this, you can deny access to a resource based
          on arbitrary criteria.</p>
      
          <p>For example, if you wish to block access to a resource between 8pm
          and 7am, you can do this using <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>.</p>
      
          <pre class="prettyprint lang-config">RewriteEngine On
      RewriteCond "%{TIME_HOUR}" "&gt;=20" [OR]
      RewriteCond "%{TIME_HOUR}" "&lt;07"
      RewriteRule "^/fridge"     "-" [F]</pre>
      
      
          <p>This will return a 403 Forbidden response for any request after 8pm
          or before 7am. This technique can be used for any criteria that you wish
          to check. You can also redirect, or otherwise rewrite these requests, if
          that approach is preferred.</p>
      
          <p>The <code class="directive"><a href="../mod/core.html#if">&lt;If&gt;</a></code> directive,
          added in 2.4, replaces many things that <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code> has
          traditionally been used to do, and you should probably look there first
          before resorting to mod_rewrite.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="moreinformation" id="moreinformation">More information</a></h2>
      
          <p>The <a href="../expr.html">expression engine</a> gives you a
          great deal of power to do a variety of things based on arbitrary
          server variables, and you should consult that document for more
          detail.</p>
      
          <p>Also, you should read the <code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code>
          documentation for examples of combining multiple access requirements
          and specifying how they interact.</p>
      
          <p>See also the <a href="auth.html">Authentication and Authorization</a>
          howto.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/howto/access.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/access.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/access.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/access.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������httpd-2.4.41/docs/manual/howto/auth.html������������������������������������������������������������0000644�0000000�0000050�00000001037�13362070302�016425� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: auth.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: auth.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: auth.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: auth.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: auth.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: auth.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/index.html.en��������������������������������������������������������0000644�0000000�0000050�00000020670�13412755316�017213� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>How-To / Tutorials - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>How-To / Tutorials</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/howto/" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/howto/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="howto" id="howto">How-To / Tutorials</a></h2>
      
          
      
          <dl>
            <dt>Authentication and Authorization</dt>
            <dd>
              <p>Authentication is any process by which you verify that
              someone is who they claim they are. Authorization is any
              process by which someone is allowed to be where they want to
              go, or to have information that they want to have.</p>
      
              <p>See: <a href="auth.html">Authentication, Authorization</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Access Control</dt>
            <dd>
              <p>Access control refers to the process of restricting, or
              granting access to a resource based on arbitrary criteria. There
              are a variety of different ways that this can be
              accomplished.</p>
      
              <p>See: <a href="access.html">Access Control</a></p>
            </dd>
          </dl>
      
         <dl>
            <dt>Dynamic Content with CGI</dt>
            <dd>
              <p>The CGI (Common Gateway Interface) defines a way for a web
              server to interact with external content-generating programs,
              which are often referred to as CGI programs or CGI scripts. It
              is a simple way to put dynamic content on
              your web site. This document will be an introduction to setting
              up CGI on your Apache web server, and getting started writing
              CGI programs.</p>
      
              <p>See: <a href="cgi.html">CGI: Dynamic Content</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt><code>.htaccess</code> files</dt>
            <dd>
              <p><code>.htaccess</code> files provide a way to make configuration
              changes on a per-directory basis. A file, containing one or more
              configuration directives, is placed in a particular document directory,
              and the directives apply to that directory, and all subdirectories thereof.</p>
      
              <p>See: <a href="htaccess.html"><code>.htaccess</code> files</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>HTTP/2 with httpd</dt>
            <dd>
            <p>HTTP/2 is the evolution of the world's most successful application layer protocol, HTTP. 
              It focuses on making more efficient use of network resources without changing the semantics of HTTP.
              This guide explains how HTTP/2 is implemented in httpd, showing basic configurations tips and 
              best practices.
            </p>
      
              <p>See: <a href="http2.html">HTTP/2 guide</a></p>
            </dd>
          </dl>
      
      
          <dl>
            <dt>Introduction to Server Side Includes</dt>
            <dd>
              <p>SSI (Server Side Includes) are directives that are placed in
              HTML pages, and evaluated on the server while the pages are
              being served. They let you add dynamically generated content to
              an existing HTML page, without having to serve the entire page
              via a CGI program, or other dynamic technology.</p>
      
              <p>See: <a href="ssi.html">Server Side Includes (SSI)</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Per-user web directories</dt>
            <dd>
              <p>On systems with multiple users, each user can be permitted to have a
              web site in their home directory using the <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> directive. Visitors
              to a URL <code>http://example.com/~username/</code> will get content
              out of the home directory of the user "<code>username</code>", out of
              the subdirectory specified by the <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> directive.</p>
      
              <p>See: <a href="public_html.html">User web directories (<code>public_html</code>)</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Reverse Proxy guide</dt>
            <dd>
              <p>Apache httpd has extensive capabilities as a reverse proxy server using the
              <code class="directive"><a href="../mod/mod_proxy.html#proxypass">ProxyPass</a></code> directive as well as
              <code class="directive"><a href="../mod/mod_proxy.html#balancermember">BalancerMember</a></code> to create sophisticated
              reverse proxying implementations which provide for high-availability, load
              balancing and failover, cloud-based clustering and dynamic on-the-fly reconfiguration.</p>
      
              <p>See: <a href="reverse_proxy.html">Reverse proxy guide</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Rewriting URLs with mod_rewrite</dt>
            <dd>
              <p>Rewriting URLs with (and without)
              <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code> tends to be one of the most
              frequently asked topics on our mailing lists and IRC channels.
              We have devoted <a href="../rewrite/">and entire section of our
              documentation</a> to howtos and recipes around this topic.</p>
            </dd>
          </dl>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/howto/" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/howto/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/auth.html.fr.utf8����������������������������������������������������0000644�0000000�0000050�00000117660�13412755316�017745� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Authentification et autorisation - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Recettes / Tutoriels</a></div><div id="page-content"><div id="preamble"><h1>Authentification et autorisation</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/auth.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/auth.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/auth.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/auth.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/auth.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/auth.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>L'authentification est un processus qui vous permet de vérifier
          qu'une personne est bien celle qu'elle prétend être. L'autorisation
          est un processus qui permet à une personne d'aller là où elle veut
          aller, ou d'obtenir les informations qu'elle désire.</p>
      
          <p>Pour le contrôle d'accès en général, voir le How-To <a href="access.html">Contrôle d'accès</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Modules et directives concernés</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#introduction">Introduction</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#theprerequisites">Les prérequis</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#gettingitworking">Mise en oeuvre</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#lettingmorethanonepersonin">Autorisation d'accès à
      plusieurs personnes</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#possibleproblems">Problèmes possibles</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#dbmdbd">Autre méthode de stockage des mots de
      passe</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#multprovider">Utilisation de plusieurs fournisseurs
      d'authentification</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#beyond">Pour aller plus loin qu'une simple
      autorisation</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#socache">Mise en cache de l'authentification</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#moreinformation">Pour aller plus loin . . .</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Modules et directives concernés</a></h2>
      
      <p>Trois groupes de modules sont concernés par le processus
      d'authentification et d'autorisation. Vous devrez utiliser au moins un
      module de chaque groupe.</p>
      
      <ul>
        <li>Type d'authentification (voir la directive <code class="directive"><a href="../mod/mod_authn_core.html#authtype">AuthType</a></code>)
          <ul>
            <li><code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code></li>
            <li><code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code></li>
          </ul>
        </li>
        <li>Fournisseur d'authentification (voir les directives <code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code> et <code class="directive"><a href="../mod/mod_auth_digest.html#authdigestprovider">AuthDigestProvider</a></code>)
      
          <ul>
            <li><code class="module"><a href="../mod/mod_authn_anon.html">mod_authn_anon</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_file.html">mod_authn_file</a></code></li>
            <li><code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_socache.html">mod_authn_socache</a></code></li>
          </ul>
        </li>
        <li>Autorisation (voir la directive <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>)
          <ul>
            <li><code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_dbd.html">mod_authz_dbd</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_dbm.html">mod_authz_dbm</a></code></li>
           <li><code class="module"><a href="../mod/mod_authz_groupfile.html">mod_authz_groupfile</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_owner.html">mod_authz_owner</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_user.html">mod_authz_user</a></code></li>
          </ul>
        </li>
      </ul>
      
        <p>On peut aussi ajouter <code class="module"><a href="../mod/mod_authn_core.html">mod_authn_core</a></code> et
        <code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code>. Ces modules implémentent des
        directives générales qui opèrent au dessus de tous les modules
        d'authentification.</p>
      
        <p>Le module <code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code> est un fournisseur
        d'authentification et d'autorisation. Le module
        <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code> fournit une autorisation et un
        contrôle d'accès basés sur le nom du serveur, l'adresse IP ou
        certaines caractéristiques de la requête, mais ne fait pas partie du
        système fournisseur d'authentification. Le module
        <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> a été créé à des fins de
        compatibilité ascendante avec mod_access.</p>
      
        <p>Vous devriez aussi jeter un coup d'oeil au manuel de recettes de <a href="access.html">Contrôle d'accès</a>, qui décrit les différentes
        méthodes de contrôle d'accès à votre serveur.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">Introduction</a></h2>
          <p>Si votre site web contient des informations sensibles ou
          destinées seulement à un groupe de personnes restreint, les
          techniques exposées dans cet article vont vous aider à vous assurer
          que les personnes qui ont accès à ces pages sont bien celles
          auxquelles vous avez donné l'autorisation d'accès.</p>
      
          <p>Cet article décrit les méthodes "standards" de protection de
          parties de votre site web que la plupart d'entre vous sont appelés à
          utiliser.</p>
      
          <div class="note"><h3>Note :</h3>
          <p>Si vos données ont un réel besoin de sécurisation, prévoyez
          l'utilisation de <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> en plus de toute méthode
          d'authentification.</p>
          </div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="theprerequisites" id="theprerequisites">Les prérequis</a></h2>
          <p>Les directives décrites dans cet article devront être insérées
          soit au niveau de la configuration de votre serveur principal (en
          général dans une section <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code>), soit au niveau de la
          configuration des répertoires (fichiers <code>.htaccess</code>)</p>
      
          <p>Si vous envisagez l'utilisation de fichiers
          <code>.htaccess</code>, la configuration de votre serveur devra
          permettre l'ajout de directives d'authentification dans ces
          fichiers. Pour ce faire, on utilise la directive <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>, qui spécifie quelles
          directives pourront éventuellement contenir les fichiers de
          configuration de niveau répertoire.</p>
      
          <p>Comme il est ici question d'authentification, vous aurez besoin
          d'une directive <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>
          du style :</p>
      
          <pre class="prettyprint lang-config">AllowOverride AuthConfig</pre>
      
      
          <p>Si vous avez l'intention d'ajouter les directives directement
          dans le fichier de configuration principal, vous devrez bien entendu
          posséder les droits en écriture sur ce fichier.</p>
      
          <p>Vous devrez aussi connaître un tant soit peu la structure des
          répertoires de votre serveur, ne serait-ce que pour savoir où se
          trouvent certains fichiers. Cela ne devrait pas présenter de grandes
          difficultés, et nous essaierons de clarifier tout ça lorsque le besoin
          s'en fera sentir.</p>
      
          <p>Enfin, vous devrez vous assurer que les modules
          <code class="module"><a href="../mod/mod_authn_core.html">mod_authn_core</a></code> et <code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code>
          ont été soit compilés avec le binaire httpd, soit chargés par le
          fichier de configuration httpd.conf. Ces deux modules fournissent
          des directives générales et des fonctionnalités qui sont critiques
          quant à la configuration et l'utilisation de l'authentification et
          de l'autorisation au sein du serveur web.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="gettingitworking" id="gettingitworking">Mise en oeuvre</a></h2>
          <p>Nous décrivons ici les bases de la protection par mot de passe
          d'un répertoire de votre serveur.</p>
      
          <p>Vous devez en premier lieu créer un fichier de mots de passe. La
          méthode exacte selon laquelle vous allez créer ce fichier va varier
          en fonction du fournisseur d'authentification choisi. Mais nous
          entrerons dans les détails plus loin, et pour le moment, nous nous
          contenterons d'un fichier de mots de passe en mode texte.</p>
      
          <p>Ce fichier doit être enregistré à un endroit non accessible
          depuis le web, de façon à ce que les clients ne puissent pas le
          télécharger. Par exemple, si vos documents sont servis à partir de
          <code>/usr/local/apache/htdocs</code>, vous pouvez enregistrer le
          fichier des mots de passe dans
          <code>/usr/local/apache/passwd</code>.</p>
      
          <p>L'utilitaire <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> fourni avec Apache
          permet de créer ce fichier. Vous le trouverez dans le répertoire
          <code>bin</code> de votre installation d'Apache. Si vous avez
          installé Apache à partir d'un paquetage tiers, il sera probablement
          dans le chemin par défaut de vos exécutables.</p>
      
          <p>Pour créer le fichier, tapez :</p>
      
          <div class="example"><p><code>
            htpasswd -c /usr/local/apache/passwd/passwords rbowen
          </code></p></div>
      
          <p><code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> vous demandera d'entrer le mot de
          passe, et de le retaper pour confirmation :</p>
      
          <div class="example"><p><code>
            # htpasswd -c /usr/local/apache/passwd/passwords rbowen<br />
            New password: mot-de-passe<br />
            Re-type new password: mot-de-passe<br />
            Adding password for user rbowen
          </code></p></div>
      
          <p>Si <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> n'est pas dans le chemin par
          défaut de vos exécutables, vous devrez bien entendu entrer le chemin
          complet du fichier. Dans le cas d'une installation par défaut, il se
          trouve à <code>/usr/local/apache2/bin/htpasswd</code>.</p>
      
          <p>Ensuite, vous allez devoir configurer le serveur de façon à ce
          qu'il demande un mot de passe et lui préciser quels utilisateurs ont
          l'autorisation d'accès. Pour ce faire, vous pouvez soit éditer le
          fichier <code>httpd.conf</code>, soit utiliser un fichier
          <code>.htaccess</code>. Par exemple, si vous voulez protéger le
          répertoire <code>/usr/local/apache/htdocs/secret</code>, vous pouvez
          utiliser les directives suivantes, soit dans le fichier
          <code>/usr/local/apache/htdocs/secret/.htaccess</code>, soit dans le
          fichier <code>httpd.conf</code> à l'intérieur d'une section &lt;Directory
          "/usr/local/apache/htdocs/secret"&gt; :</p>
      
          <pre class="prettyprint lang-config">AuthType Basic
      AuthName "Restricted Files"
      # (Following line optional)
      AuthBasicProvider file
      AuthUserFile "/usr/local/apache/passwd/passwords"
      Require user rbowen</pre>
      
      
          <p>Examinons ces directives une à une. La directive <code class="directive"><a href="../mod/mod_authn_core.html#authtype">AuthType</a></code> définit la méthode
          utilisée pour authentifier l'utilisateur. La méthode la plus
          courante est <code>Basic</code>, et elle est implémentée par
          <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code>. Il faut cependant garder à l'esprit
          que l'authentification Basic transmet le mot de passe depuis le
          client vers le serveur en clair. Cette méthode ne devra donc pas
          être utilisée pour la transmission de données hautement sensibles si
          elle n'est pas associée au module <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>. Apache
          supporte une autre méthode d'authentification : <code>AuthType
          Digest</code>. Cette méthode est implémentée par le module <code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code> et a été conçue pour
          améliorer la sécurité. Ce but n'a cependant pas été atteint et il est préférable
          de chiffrer la connexion avec <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>.</p>
      
          <p>La directive <code class="directive"><a href="../mod/mod_authn_core.html#authname">AuthName</a></code> définit
          l'<dfn>Identificateur</dfn> (Realm) à utiliser avec
          l'authentification. L'identificateur possède deux fonctions. Tout
          d'abord, le client présente en général cette information à
          l'utilisateur dans le cadre de la boîte de dialogue de mot de passe.
          Ensuite, le client l'utilise pour déterminer quel mot de passe
          envoyer pour une zone authentifiée donnée.</p>
      
          <p>Ainsi par exemple, une fois un client authentifié dans la zone
          <code>"Fichiers réservés"</code>, il soumettra à nouveau
          automatiquement le même mot de passe pour toute zone du même serveur
          marquée de l'identificateur <code>"Fichiers réservés"</code>. De
          cette façon, vous pouvez éviter à un utilisateur d'avoir à saisir
          plusieurs fois le même mot de passe en faisant partager le même
          identificateur entre plusieurs zones réservées. Bien entendu et pour
          des raisons de sécurité, le client devra redemander le mot
          de passe chaque fois que le nom d'hôte du serveur sera modifié.</p>
      
          <p>La directive <code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code> est, dans ce
          cas, facultative, car <code>file</code> est la valeur par défaut
          pour cette directive. Par contre, cette directive sera obligatoire
          si vous utilisez une autre source d'authentification comme
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> ou
          <code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code>.</p>
      
          <p>La directive <code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code> définit le chemin
          du fichier de mots de passe que nous venons de créer avec
          <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code>. Si vous possédez un grand nombre
          d'utilisateurs, la durée de la recherche dans un fichier texte pour
          authentifier un utilisateur à chaque requête va augmenter
          rapidement, et pour pallier cet inconvénient, Apache peut aussi
          stocker les données relatives aux
          utilisateurs dans des bases de données rapides. Le module
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> fournit la directive <code class="directive"><a href="../mod/mod_authn_dbm.html#authdbmuserfile">AuthDBMUserFile</a></code>. Les programmes <code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code> et <code class="program"><a href="../programs/htdbm.html">htdbm</a></code> permettent de
          créer et manipuler ces fichiers. Vous
          trouverez de nombreuses options d'autres types d'authentification
          fournies par des modules tiers dans la <a href="http://modules.apache.org/">Base de données des modules
          d'Apache</a>.</p>
      
          <p>Enfin, la directive <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> implémente la partie
          autorisation du processus en définissant l'utilisateur autorisé à
          accéder à cette zone du serveur. Dans la section suivante, nous
          décrirons les différentes méthodes d'utilisation de la directive
          <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="lettingmorethanonepersonin" id="lettingmorethanonepersonin">Autorisation d'accès à
      plusieurs personnes</a></h2>
          <p>Les directives ci-dessus n'autorisent qu'une personne (quelqu'un
          possédant le nom d'utilisateur <code>rbowen</code>) à accéder au
          répertoire. Dans la plupart des cas, vous devrez autoriser
          l'accès à plusieurs personnes. C'est ici
          qu'intervient la directive <code class="directive"><a href="../mod/mod_authz_groupfile.html#authgroupfile">AuthGroupFile</a></code>.</p>
      
          <p>Si vous voulez autoriser l'accès à plusieurs personnes, vous
          devez créer un fichier de groupes qui associe des noms de groupes
          avec une liste d'utilisateurs de ce groupe. Le format de ce fichier
          est très simple, et vous pouvez le créer avec votre éditeur favori.
          Son contenu se présente comme suit :</p>
      
         <div class="example"><p><code>
           Nom-de-groupe: rbowen dpitts sungo rshersey
         </code></p></div>
      
          <p>Il s'agit simplement une liste des membres du groupe sous la
          forme d'une ligne séparée par des espaces.</p>
      
          <p>Pour ajouter un utilisateur à votre fichier de mots de passe
          préexistant, entrez :</p>
      
          <div class="example"><p><code>
            htpasswd /usr/local/apache/passwd/passwords dpitts
          </code></p></div>
      
          <p>Vous obtiendrez le même effet qu'auparavant, mais le mot de passe
          sera ajouté au fichier, plutôt que d'en créer un nouveau (C'est le
          drapeau <code>-c</code> qui permet de créer un nouveau fichier de
          mots de passe)..</p>
      
          <p>Maintenant, vous devez modifier votre fichier
          <code>.htaccess</code> ou la section <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> comme suit :</p>
      
          <pre class="prettyprint lang-config">AuthType Basic
      AuthName "By Invitation Only"
      # Optional line:
      AuthBasicProvider file
      AuthUserFile "/usr/local/apache/passwd/passwords"
      AuthGroupFile "/usr/local/apache/passwd/groups"
      Require group GroupName</pre>
      
      
          <p>Maintenant, quiconque appartient au groupe
          <code>Nom-de-groupe</code>, et possède une entrée dans le fichier
          <code>password</code> pourra accéder au répertoire s'il tape le bon
          mot de passe.</p>
      
          <p>Il existe une autre méthode moins contraignante pour autoriser
          l'accès à plusieurs personnes. Plutôt que de créer un fichier de
          groupes, il vous suffit d'ajouter la directive suivante :</p>
      
          <pre class="prettyprint lang-config">Require valid-user</pre>
      
      
          <p>Le remplacement de la ligne <code>Require user rbowen</code> par
          la ligne <code>Require valid-user</code> autorisera l'accès à
          quiconque possédant une entrée dans le fichier password, et ayant
          tapé le bon mot de passe.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="possibleproblems" id="possibleproblems">Problèmes possibles</a></h2>
          <p>L'authentification Basic est spécifiée d'une telle manière que
          vos nom d'utilisateur et mot de passe doivent être vérifiés chaque
          fois que vous demandez un document au serveur, et ceci même si vous
          rechargez la même page, et pour chaque image contenue dans la page
          (si elles sont situées dans un répertoire protégé). Comme vous
          pouvez l'imaginer, ceci ralentit un peu le fonctionnement. La mesure
          dans laquelle le fonctionnement est ralenti est proportionnelle à la
          taille du fichier des mots de passe, car ce dernier doit être ouvert
          et la liste des utilisateurs parcourue jusqu'à ce que votre nom soit
          trouvé, et ceci chaque fois qu'une page est chargée.</p>
      
          <p>En conséquence, ce ralentissement impose une limite pratique au
          nombre d'utilisateurs que vous pouvez enregistrer dans un fichier de
          mots de passe. Cette limite va varier en fonction des performances
          de votre serveur, mais vous commencerez à remarquer un
          ralentissement lorsque vous atteindrez quelques centaines
          d'utilisateurs, et serez alors appelés à utiliser une méthode
          d'authentification différente.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="dbmdbd" id="dbmdbd">Autre méthode de stockage des mots de
      passe</a></h2>
      
          <p>Suite au problème évoqué précédemment et induit par le stockage
          des mots de passe dans un fichier texte, vous pouvez être appelé à
          stocker vos mots de passe d'une autre manière, par exemple dans une
          base de données.</p>
      
          <p>Pour y parvenir, on peut utiliser les modules
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> ou <code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code>.
          Vous pouvez choisir comme format de stockage <code>dbm</code> ou
          <code>dbd</code> à la place de <code>file</code> pour la directive
          <code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code>.</p>
      
          <p>Par exemple, pour sélectionner un fichier dbm à la place d'un
          fichier texte :</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/docs/private"&gt;
      
          AuthName "Private"
          AuthType Basic
          AuthBasicProvider dbm
          AuthDBMUserFile "/www/passwords/passwd.dbm"
          Require valid-user
      
      &lt;/Directory&gt;</pre>
      
      
          <p>D'autres options sont disponibles. Consultez la documentation de
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> pour plus de détails.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="multprovider" id="multprovider">Utilisation de plusieurs fournisseurs
      d'authentification</a></h2>
      
          <p>Depuis l'arrivée des nouvelles architecture d'autorisation et
          d'authentification basées sur les fournisseurs, vous n'êtes plus
          limité à une méthode d'authentification et d'autorisation
          unique. En fait, on peut panacher autant de fournisseurs que l'on
          veut, ce qui vous permet d'élaborer l'architecture qui correspond
          exactement à vos besoins. Dans l'exemple suivant, on utilise
          conjointement les fournisseurs d'authentification
          file et LDAP :</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/docs/private"&gt;
      
          AuthName "Private"
          AuthType Basic
          AuthBasicProvider file ldap
          AuthUserFile "/usr/local/apache/passwd/passwords"
          AuthLDAPURL ldap://ldaphost/o=yourorg
          Require valid-user
      
      &lt;/Directory&gt;</pre>
      
      
          <p>Dans cet exemple, le fournisseur file va tenter d'authentifier
          l'utilisateur en premier. S'il n'y parvient pas, le fournisseur LDAP
          sera sollicité. Ceci permet l'élargissement des possibilités
          d'authentification si votre organisation implémente plusieurs types
          de bases d'authentification. D'autres scénarios d'authentification
          et d'autorisation peuvent associer un type d'authentification avec
          un autre type d'autorisation. Par exemple, une authentification
          basée sur un fichier de mots de passe peut permettre l'attribution
          d'autorisations basée sur un annuaire LDAP.</p>
      
          <p>Tout comme plusieurs fournisseurs d'authentification peuvent être
          implémentés, on peut aussi utiliser plusieurs méthodes
          d'autorisation. Dans l'exemple suivant, on utilise à la fois une
          autorisation à base de fichier de groupes et une autorisation à base
          de groupes LDAP.</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/docs/private"&gt;
      
          AuthName "Private"
          AuthType Basic
          AuthBasicProvider file
          AuthUserFile "/usr/local/apache/passwd/passwords"
          AuthLDAPURL ldap://ldaphost/o=yourorg
          AuthGroupFile "/usr/local/apache/passwd/groups"
          Require group GroupName
          Require ldap-group cn=mygroup,o=yourorg
      
      &lt;/Directory&gt;</pre>
      
      
          <p>Pour un scénario d'autorisation un peu plus avancé, des
          directives de conteneur d'autorisation comme <code class="directive"><a href="../mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code> et
          <code class="directive"><a href="../mod/mod_authz_core.html#requireany">&lt;RequireAny&gt;</a></code> permettent d'appliquer une
          logique telle que l'ordre dans lequel les autorisations sont
          appliquées peut être entièrement contrôlé au niveau de la
          configuration. Voir <a href="../mod/mod_authz_core.html#logic">Conteneurs
          d'autorisations</a> pour un exemple de ce contrôle.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="beyond" id="beyond">Pour aller plus loin qu'une simple
      autorisation</a></h2>
      
          <p>La manière dont les autorisations sont accordées est désormais
          beaucoup plus souple qu'une simple vérification auprès d'une seule
          base de données. Il est maintenant possible de choisir l'ordre, la
          logique et la manière selon lesquels une autorisation est
          accordée.</p>
      
          <h3><a name="authandororder" id="authandororder">Appliquer logique et
          ordonnancement</a></h3>
              <p>Le contrôle de la manière et de l'ordre selon lesquels le
      	processus d'autorisation était appliqué
      	constituait une sorte de mystère par
      	le passé. Dans Apache 2.2, un mécanisme d'authentification basé
      	sur les fournisseurs a été développé afin de séparer le
      	véritable processus d'authentification de l'autorisation et ses
      	différentes fonctionnalités. Un des avantages colatéraux
      	résidait dans le fait que les fournisseurs d'authentification
      	pouvaient être configurés et appelés selon un ordre particulier
      	indépendant de l'ordre de chargement du module auth proprement
      	dit. Ce mécanisme basé sur les fournisseurs a été étendu au
      	processus d'autorisation. Ceci signifie que la directive
      	<code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> définit
      	non seulement quelles méthodes d'autorisation doivent être
      	utilisées, mais aussi l'ordre dans lequel elles sont appelées.
      	Les méthodes d'autorisation sont appelées selon l'ordre dans
      	lequel les directives <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> apparaissent dans la
      	configuration.</p>
      
              <p>Avec l'introduction des directives de conteneur
      	d'autorisations <code class="directive"><a href="../mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code>
       	et <code class="directive"><a href="../mod/mod_authz_core.html#requireany">&lt;RequireAny&gt;</a></code>, la
      	configuration contrôle aussi le moment où les méthodes
      	d'autorisation sont appelées, et quels critères déterminent
      	l'autorisation d'accès. Voir <a href="../mod/mod_authz_core.html#logic">Conteneurs
      	d'autorisations</a> pour un exemple de la manière de les
      	utiliser pour exprimer des logiques d'autorisation
      	complexes.</p>
      
              <p>Par défaut, toutes les directives <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> sont
      	traitées comme si elles étaient contenues dans une directive
      	<code class="directive"><a href="../mod/mod_authz_core.html#requireany">&lt;RequireAny&gt;</a></code>. En d'autres termes, il
      	suffit
      	qu'une méthode d'autorisation s'applique avec succès pour que
      	l'autorisation soit accordée.</p>
      
          
      
          <h3><a name="reqaccessctrl" id="reqaccessctrl">Utilisation de fournisseurs
          d'autorisation pour le contrôle d'accès</a></h3>
              <p>La vérification du nom d'utilisateur et du mot de passe ne
      	constituent qu'un aspect des méthodes d'authentification.
      	Souvent, le contrôle d'accès à certaines personnes n'est pas
      	basé sur leur identité ; il peut dépendre, par exemple de leur
      	provenance.</p>
      
              <p>Les fournisseurs d'autorisation <code>all</code>,
      	<code>env</code>, <code>host</code> et <code>ip</code> vous
      	permettent d'accorder ou refuser l'accès en
      	fonction de critères tels que le nom d'hôte ou l'adresse
      	IP de la machine qui effectue la requête.</p>
      
              <p>L'utilisation de ces fournisseurs est spécifiée à l'aide de
      	la directive <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>. Cette directive
      	permet d'enregistrer quels fournisseurs d'autorisation
      	seront appelés dans le processus d'autorisation au cours du
      	traitement de la requête. Par exemple :</p>
      
              <pre class="prettyprint lang-config">Require ip <var>address</var></pre>
      
      
              <p>où <var>adresse</var> est une adresse IP (ou une adresse IP
      	partielle) ou :</p>
      
              <pre class="prettyprint lang-config">Require host <var>domain_name</var></pre>
      
      
              <p>où <var>nom_domaine</var> est un nom de domaine entièrement
      	qualifé (ou un nom de domaine partiel) ; vous pouvez indiquer
      	plusieurs adresses ou noms de domaines, si vous le désirez.</p>
      
              <p>Par exemple, si vous voulez rejeter les spams dont une
      	machine vous inonde, vous pouvez utiliser ceci :</p>
      
              <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not ip 10.252.46.165
      &lt;/RequireAll&gt;</pre>
      
      
              <p>Ainsi, les visiteurs en provenance de cette adresse ne
      	pourront pas voir le contenu concerné par cette directive. Si,
      	par contre, vous connaissez le nom de la machine, vous pouvez
      	utiliser ceci :</p>
      
              <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not host host.example.com
      &lt;/RequireAll&gt;</pre>
      
      
              <p>Et si vous voulez interdire l'accès à toutes les machines
      	d'un domaine, vous pouvez spécifier une partie seulement de
      	l'adresse ou du nom de domaine :</p>
      
              <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not ip 192.168.205
          Require not host phishers.example.com moreidiots.example
          Require not host ke
      &lt;/RequireAll&gt;</pre>
      
      
              <p>L'utilisation de la directive <code class="directive"><a href="../mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code>
      	avec de multiples directives <code class="directive"><a href="../mod/mod_authz_core.html#require">&lt;Require&gt;</a></code>, toutes avec la négation
      	<code>not</code>, n'accordera l'accès que si toutes les
      	conditions négatives sont vérifiées. En d'autres termes, l'accès
      	sera refusé si au moins une des conditions négatives n'est pas
      	vérifiée.</p>
      
          
      
          <h3><a name="filesystem" id="filesystem">Compatibilité ascendante du contrôle
          d'accès</a></h3>
              <p>L'adoption d'un mécanisme à base de fournisseurs pour
      	l'authentification, a pour effet colatéral de rendre inutiles
      	les directives <code class="directive"><a href="../mod/mod_access_compat.html#order">Order</a></code>, <code class="directive"><a href="../mod/mod_access_compat.html#allow">Allow</a></code>, <code class="directive"><a href="../mod/mod_access_compat.html#deny">Deny</a></code> et <code class="directive"><a href="../mod/mod_access_compat.html#satisfy">Satisfy</a></code>. Cependant, et à
      	des fins de compatibilité ascendante vers les anciennes
      	configurations, ces directives ont été déplacées vers le module
      	<code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code>.</p>
      
          <div class="warning"><h3>Note</h3>
            <p>Les directives fournies par le module
            <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> sont devenues obsolètes depuis
            la refonte du module <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code>. Mélanger d'anciennes
            directives comme <code class="directive"><a href="../mod/mod_access_compat.html#order">Order</a></code>, <code class="directive"><a href="../mod/mod_access_compat.html#allow">Allow</a></code> ou <code class="directive"><a href="../mod/mod_access_compat.html#deny">Deny</a></code> avec des nouvelles comme
            <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> est techniquement
            possible mais déconseillé. En effet, <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> a
            été conçu pour supporter des configurations ne contenant que des anciennes
            directives afin de faciliter le passage à la version 2.4. Voir le document
            <a href="../upgrading.html">upgrading</a> pour plus de détails.
            </p>
          </div>	
          
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="socache" id="socache">Mise en cache de l'authentification</a></h2>
          <p>Dans certains cas, l'authentification constitue une charge
          inacceptable pour un fournisseur d'authentification ou votre réseau.
          Ceci est susceptible d'affecter les utilisateurs du module
          <code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code> (ou les fournisseurs
          tiers/personnalisés). Pour résoudre ce problème, HTTPD 2.3/2.4
          propose un nouveau fournisseur de mise en cache,
          <code class="module"><a href="../mod/mod_authn_socache.html">mod_authn_socache</a></code>, qui permet de mettre en cache
          les données d'authentification, et ainsi réduire la charge du/des
          fournisseurs(s) originels.</p>
          <p>Cette mise en cache apportera un gain en performance substantiel
          à certains utilisateurs.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="moreinformation" id="moreinformation">Pour aller plus loin . . .</a></h2>
          <p>Vous pouvez aussi lire la documentation de
          <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code> et <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code>
          qui contient des informations supplémentaires à propos du
          fonctionnement de tout ceci.
          Certaines configurations d'authentification peuvent aussi être
          simplifiées à l'aide de la directive <code class="directive"><a href="../mod/mod_authn_core.html#authnprovideralias">&lt;AuthnProviderAlias&gt;</a></code>.</p>
      
          <p>Les différents algorithmes de chiffrement supportés par Apache
          pour authentifier les données sont expliqués dans <a href="../misc/password_encryptions.html">PasswordEncryptions</a>.</p>
      
          <p>Enfin vous pouvez consulter la recette <a href="access.html">Contrôle
          d'accès</a>, qui décrit un certain nombre de situations en relation
          avec le sujet.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/auth.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/auth.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/auth.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/auth.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/auth.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/auth.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/auth.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/reverse_proxy.html.en������������������������������������������������0000644�0000000�0000050�00000050153�13412755316�021017� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Reverse Proxy Guide - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutorials</a></div><div id="page-content"><div id="preamble"><h1>Reverse Proxy Guide</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/howto/reverse_proxy.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/howto/reverse_proxy.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>In addition to being a "basic" web server, and providing static and
          dynamic content to end-users, Apache httpd (as well as most other web
          servers) can also act as a reverse proxy server, also-known-as a
          "gateway" server.</p>
      
          <p>In such scenarios, httpd itself does not generate or host the data,
          but rather the content is obtained by one or several backend servers,
          which normally have no direct connection to the external network. As
          httpd receives a request from a client, the request itself is <em>proxied</em>
          to one of these backend servers, which then handles the request, generates
          the content and then sends this content back to httpd, which then
          generates the actual HTTP response back to the client.</p>
      
          <p>There are numerous reasons for such an implementation, but generally
          the typical rationales are due to security, high-availability, load-balancing
          and centralized authentication/authorization. It is critical in these
          implementations that the layout, design and architecture of the backend
          infrastructure (those servers which actually handle the requests) are
          insulated and protected from the outside; as far as the client is concerned,
          the reverse proxy server <em>is</em> the sole source of all content.</p>
      
          <p>A typical implementation is below:</p>
          <p class="centered"><img src="../images/reverse-proxy-arch.png" alt="reverse-proxy-arch" /></p>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Reverse Proxy</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#simple">Simple reverse proxying</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cluster">Clusters and Balancers</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#config">Balancer and BalancerMember configuration</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#failover">Failover</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#manager">Balancer Manager</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#health-check">Dynamic Health Checks</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#status">BalancerMember status flags</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Reverse Proxy</a></h2>
        
        <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_proxy.html">mod_proxy</a></code></li><li><code class="module"><a href="../mod/mod_proxy_balancer.html">mod_proxy_balancer</a></code></li><li><code class="module"><a href="../mod/mod_proxy_hcheck.html">mod_proxy_hcheck</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/mod_proxy.html#proxypass">ProxyPass</a></code></li><li><code class="directive"><a href="../mod/mod_proxy.html#balancermember">BalancerMember</a></code></li></ul></td></tr></table>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="simple" id="simple">Simple reverse proxying</a></h2>
          
      
          <p>
            The <code class="directive"><a href="../mod/mod_proxy.html#proxypass">ProxyPass</a></code>
            directive specifies the mapping of incoming requests to the backend
            server (or a cluster of servers known as a <code>Balancer</code>
            group). The simpliest example proxies all requests (<code>"/"</code>)
            to a single backend:
          </p>
      
          <pre class="prettyprint lang-config">ProxyPass "/"  "http://www.example.com/"</pre>
      
      
          <p>
            To ensure that and <code>Location:</code> headers generated from
            the backend are modified to point to the reverse proxy, instead of
            back to itself, the <code class="directive"><a href="../mod/mod_proxy.html#proxypassreverse">ProxyPassReverse</a></code>
            directive is most often required:
          </p>
      
          <pre class="prettyprint lang-config">ProxyPass "/"  "http://www.example.com/"
      ProxyPassReverse "/"  "http://www.example.com/"</pre>
      
      
          <p>Only specific URIs can be proxied, as shown in this example:</p>
      
          <pre class="prettyprint lang-config">ProxyPass "/images"  "http://www.example.com/"
      ProxyPassReverse "/images"  "http://www.example.com/"</pre>
      
      
          <p>In the above, any requests which start with the <code>/images</code>
            path with be proxied to the specified backend, otherwise it will be handled
            locally.
          </p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cluster" id="cluster">Clusters and Balancers</a></h2>
          
      
          <p>
            As useful as the above is, it still has the deficiencies that should
            the (single) backend node go down, or become heavily loaded, that proxying
            those requests provides no real advantage. What is needed is the ability
            to define a set or group of backend servers which can handle such
            requests and for the reverse proxy to load balance and failover among
            them. This group is sometimes called a <em>cluster</em> but Apache httpd's
            term is a <em>balancer</em>. One defines a balancer by leveraging the
            <code class="directive"><a href="../mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code> and
            <code class="directive"><a href="../mod/mod_proxy.html#balancermember">BalancerMember</a></code> directives as
            shown:
          </p>
      
          <pre class="prettyprint lang-config">&lt;Proxy balancer://myset&gt;
          BalancerMember http://www2.example.com:8080
          BalancerMember http://www3.example.com:8080
          ProxySet lbmethod=bytraffic
      &lt;/Proxy&gt;
      
      ProxyPass "/images/"  "balancer://myset/"
      ProxyPassReverse "/images/"  "balancer://myset/"</pre>
      
      
          <p>
            The <code>balancer://</code> scheme is what tells httpd that we are creating
            a balancer set, with the name <em>myset</em>. It includes 2 backend servers,
            which httpd calls <em>BalancerMembers</em>. In this case, any requests for
            <code>/images</code> will be proxied to <em>one</em> of the 2 backends.
            The <code class="directive"><a href="../mod/mod_proxy.html#proxyset">ProxySet</a></code> directive
            specifies that the <em>myset</em> Balancer use a load balancing algorithm
            that balances based on I/O bytes.
          </p>
      
          <div class="note"><h3>Hint</h3>
            <p>
            	<em>BalancerMembers</em> are also sometimes referred to as <em>workers</em>.
            </p>
         </div>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="config" id="config">Balancer and BalancerMember configuration</a></h2>
          
      
          <p>
            You can adjust numerous configuration details of the <em>balancers</em>
            and the <em>workers</em> via the various parameters defined in
            <code class="directive"><a href="../mod/mod_proxy.html#proxypass">ProxyPass</a></code>. For example,
            assuming we would want <code>http://www3.example.com:8080</code> to
            handle 3x the traffic with a timeout of 1 second, we would adjust the
            configuration as follows:
          </p>
      
          <pre class="prettyprint lang-config">&lt;Proxy balancer://myset&gt;
          BalancerMember http://www2.example.com:8080
          BalancerMember http://www3.example.com:8080 loadfactor=3 timeout=1
          ProxySet lbmethod=bytraffic
      &lt;/Proxy&gt;
      
      ProxyPass "/images"  "balancer://myset/"
      ProxyPassReverse "/images"  "balancer://myset/"</pre>
      
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="failover" id="failover">Failover</a></h2>
          
      
          <p>
            You can also fine-tune various failover scenarios, detailing which workers
            and even which balancers should be accessed in such cases. For example, the
            below setup implements three failover cases:
          </p>
          <ol>
            <li>
              <code>http://spare1.example.com:8080</code> and
              <code>http://spare2.example.com:8080</code> are only sent traffic if one
              or both of <code>http://www2.example.com:8080</code> or
              <code>http://www3.example.com:8080</code> is unavailable. (One spare
              will be used to replace one unusable member of the same balancer set.)
            </li>
            <li>
              <code>http://hstandby.example.com:8080</code> is only sent traffic if
              all other workers in balancer set <code>0</code> are not available.
            </li>
            <li>
              If all load balancer set <code>0</code> workers, spares, and the standby
              are unavailable, only then will the
              <code>http://bkup1.example.com:8080</code> and
              <code>http://bkup2.example.com:8080</code> workers from balancer set
              <code>1</code> be brought into rotation.
            </li>
          </ol>
          <p>
            Thus, it is possible to have one or more hot spares and hot standbys for
            each load balancer set.
          </p>
      
          <pre class="prettyprint lang-config">&lt;Proxy balancer://myset&gt;
          BalancerMember http://www2.example.com:8080
          BalancerMember http://www3.example.com:8080 loadfactor=3 timeout=1
          BalancerMember http://spare1.example.com:8080 status=+R
          BalancerMember http://spare2.example.com:8080 status=+R
          BalancerMember http://hstandby.example.com:8080 status=+H
          BalancerMember http://bkup1.example.com:8080 lbset=1
          BalancerMember http://bkup2.example.com:8080 lbset=1
          ProxySet lbmethod=byrequests
      &lt;/Proxy&gt;
      
      ProxyPass "/images/"  "balancer://myset/"
      ProxyPassReverse "/images/"  "balancer://myset/"</pre>
      
      
          <p>
            For failover, hot spares are used as replacements for unusable workers in
            the same load balancer set. A worker is considered unusable if it is
            draining, stopped, or otherwise in an error/failed state. Hot standbys are
            used if all workers and spares in the load balancer set are
            unavailable. Load balancer sets (with their respective hot spares and
            standbys) are always tried in order from lowest to highest.
          </p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="manager" id="manager">Balancer Manager</a></h2>
          
      
          <p>
            One of the most unique and useful features of Apache httpd's reverse proxy is
      	  the embedded <em>balancer-manager</em> application. Similar to
      	  <code class="module"><a href="../mod/mod_status.html">mod_status</a></code>, <em>balancer-manager</em> displays
      	  the current working configuration and status of the enabled
      	  balancers and workers currently in use. However, not only does it
      	  display these parameters, it also allows for dynamic, runtime, on-the-fly
      	  reconfiguration of almost all of them, including adding new <em>BalancerMembers</em>
      	  (workers) to an existing balancer. To enable these capability, the following
      	  needs to be added to your configuration:
          </p>
      
          <pre class="prettyprint lang-config">&lt;Location "/balancer-manager"&gt;
          SetHandler balancer-manager
          Require host localhost
      &lt;/Location&gt;</pre>
      
      
          <div class="warning"><h3>Warning</h3>
            <p>Do not enable the <em>balancer-manager</em> until you have <a href="../mod/mod_proxy.html#access">secured your server</a>. In
            particular, ensure that access to the URL is tightly
            restricted.</p>
          </div>
      
          <p>
            When the reverse proxy server is accessed at that url
            (eg: <code>http://rproxy.example.com/balancer-manager/</code>, you will see a
            page similar to the below:
          </p>
          <p class="centered"><img src="../images/bal-man.png" alt="balancer-manager page" /></p>
      
          <p>
            This form allows the devops admin to adjust various parameters, take
            workers offline, change load balancing methods and add new works. For
            example, clicking on the balancer itself, you will get the following page:
          </p>
          <p class="centered"><img src="../images/bal-man-b.png" alt="balancer-manager page" /></p>
      
          <p>
            Whereas clicking on a worker, displays this page:
          </p>
          <p class="centered"><img src="../images/bal-man-w.png" alt="balancer-manager page" /></p>
      
          <p>
            To have these changes persist restarts of the reverse proxy, ensure that
            <code class="directive"><a href="../mod/mod_proxy.html#balancerpersist">BalancerPersist</a></code> is enabled.
          </p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="health-check" id="health-check">Dynamic Health Checks</a></h2>
          
      
          <p>
            Before httpd proxies a request to a worker, it can <em>"test"</em> if that worker
            is available via setting the <code>ping</code> parameter for that worker using
            <code class="directive"><a href="../mod/mod_proxy.html#proxypass">ProxyPass</a></code>. Oftentimes it is
            more useful to check the health of the workers <em>out of band</em>, in a
            dynamic fashion. This is achieved in Apache httpd by the
            <code class="module"><a href="../mod/mod_proxy_hcheck.html">mod_proxy_hcheck</a></code> module.
          </p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="status" id="status">BalancerMember status flags</a></h2>
          
      
          <p>
            In the <em>balancer-manager</em> the current state, or <em>status</em>, of a worker
            is displayed and can be set/reset. The meanings of these statuses are as follows:
          </p>
            <table class="bordered">
            	<tr><th>Flag</th><th>String</th><th>Description</th></tr>
            	<tr><td>&nbsp;</td><td><em>Ok</em></td><td>Worker is available</td></tr>
            	<tr><td>&nbsp;</td><td><em>Init</em></td><td>Worker has been initialized</td></tr>
              <tr><td><code>D</code></td><td><em>Dis</em></td><td>Worker is disabled and will not accept any requests; will be
                          automatically retried.</td></tr>
              <tr><td><code>S</code></td><td><em>Stop</em></td><td>Worker is administratively stopped; will not accept requests
                          and will not be automatically retried</td></tr>
              <tr><td><code>I</code></td><td><em>Ign</em></td><td>Worker is in ignore-errors mode and will always be considered available.</td></tr>
              <tr><td><code>R</code></td><td><em>Spar</em></td><td>Worker is a hot spare. For each worker in a given lbset that is unusable
                          (draining, stopped, in error, etc.), a usable hot spare with the same lbset will be used in
                          its place. Hot spares can help ensure that a specific number of workers are always available
                          for use by a balancer.</td></tr>
              <tr><td><code>H</code></td><td><em>Stby</em></td><td>Worker is in hot-standby mode and will only be used if no other
                          viable workers or spares are available in the balancer set.</td></tr>
              <tr><td><code>E</code></td><td><em>Err</em></td><td>Worker is in an error state, usually due to failing pre-request check;
                          requests will not be proxied to this worker, but it will be retried depending on
                          the <code>retry</code> setting of the worker.</td></tr>
              <tr><td><code>N</code></td><td><em>Drn</em></td><td>Worker is in drain mode and will only accept existing sticky sessions
                          destined for itself and ignore all other requests.</td></tr>
              <tr><td><code>C</code></td><td><em>HcFl</em></td><td>Worker has failed dynamic health check and will not be used until it
                          passes subsequent health checks.</td></tr>
            </table>
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/howto/reverse_proxy.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/howto/reverse_proxy.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/reverse_proxy.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/htaccess.html.pt-br��������������������������������������������������0000644�0000000�0000050�00000057606�13412755316�020334� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="pt-br" xml:lang="pt-br"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Tutorial do Apache: arquivos .htaccess - Servidor HTTP Apache Versão 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Diretrizes</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossário</a> | <a href="../sitemap.html">Mapa do site</a></p>
      <p class="apache">Servidor HTTP Apache Versão 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentação</a> &gt; <a href="../">Versão 2.4</a> &gt; <a href="./">How-To / Tutoriais</a></div><div id="page-content"><div id="preamble"><h1>Tutorial do Apache: arquivos .htaccess</h1>
      <div class="toplang">
      <p><span>Línguas Disponíveis: </span><a href="../en/howto/htaccess.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/htaccess.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/htaccess.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/htaccess.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/htaccess.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../pt-br/howto/htaccess.html" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a></p>
      </div>
      <div class="outofdate">Esta tradução pode estar desatualizada.
              Confira a versão em Inglês para mudanças recentes.</div>
      
      <p>Arquivos <code>.htaccess</code> oferecem um meio de fazer mudanças
       nas configurações por-diretório.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Arquivos .htaccess </a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#what">O que eles são/Como usá-los</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#when">Quando (não) usar arquivos .htaccess</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#how">Como as diretrizes são aplicadas</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#auth">Exemplo de Autenticação</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ssi">Exemplo de Server Side Includes</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cgi">Exemplo de CGI</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#troubleshoot">Resolvendo Problemas</a></li>
      </ul><h3>Veja também</h3><ul class="seealso"><li><a href="#comments_section">Comentários</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Arquivos .htaccess </a></h2>
          <table class="related"><tr><th>Módulos Relacionados</th><th>Diretrizes Relacionadas</th></tr><tr><td><ul><li><code class="module"><a href="../mod/core.html">core</a></code></li><li><code class="module"><a href="../mod/mod_authn_file.html">mod_authn_file</a></code></li><li><code class="module"><a href="../mod/mod_authz_groupfile.html">mod_authz_groupfile</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="../mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="../mod/mod_mime.html">mod_mime</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#accessfilename">AccessFileName</a></code></li><li><code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code></li><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="../mod/core.html#sethandler">SetHandler</a></code></li><li><code class="directive"><a href="../mod/mod_authn_core.html#authtype">AuthType</a></code></li><li><code class="directive"><a href="../mod/mod_authn_core.html#authname">AuthName</a></code></li><li><code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code></li><li><code class="directive"><a href="../mod/mod_authz_groupfile.html#authgroupfile">AuthGroupFile</a></code></li><li><code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code></li></ul></td></tr></table>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="what" id="what">O que eles são/Como usá-los</a></h2>
      
      
          <p>Os arquivos <code>.htaccess</code> (ou "arquivos de
          configuração distribuída") oferecem um meio de fazer mudanças nas
          configurações por-diretório. Um arquivo, contendo uma ou mais
          diretrizes de configurações, é colocado em um diretório 
          em particular, e as diretrizes se aplicam para aquele diretório e todos 
          os seu subdiretórios subseqüentes.</p>
      
          <div class="note"><h3>Nota:</h3>
            <p>Se você quiser renomear o seu arquivo <code>.htaccess</code>
            para outro nome, você deve usar a diretriz <code class="directive"><a href="../mod/core.html#accessfilename">AccessFileName</a></code>. Por exemplo, se você
            prefere que o arquivo se chame <code>.config</code>, então você 
            pode adicionar a seguinte linha ao seu arquivo de configuração
            do servidor:</p>
      
            <div class="example"><p><code>
              AccessFileName .config
            </code></p></div>
          </div>
      
          <p>No geral, arquivos <code>.htaccess</code> usam a mesma sintaxe
          que os <a href="../configuring.html#syntax">arquivos de
          configuração principal</a>. O que você pode colocar nesses
          arquivos é determinado pele diretriz <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>. Essa diretriz especifica,
          em categorias, quais diretrizes serão aceitas caso sejam
          encontradas em um arquivo <code>.htaccess</code>.  Se uma diretriz
          for permitida em um arquivo <code>.htaccess</code>, a documentação
          para essa diretriz irá conter uma seção <em>Override</em>,
          especificando que valor precisa estar em <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> para que esta diretriz
          seja permitida.</p>
      
          <p>Por exemplo, se você procurar na documentação pela diretriz
          <code class="directive"><a href="../mod/core.html#adddefaultcharset">AddDefaultCharset</a></code>, você
          achará que ela é permitida nos arquivos <code>.htaccess</code>.
          (Veja a linha Contexto no sumário das diretivas.) A
          linha <a href="../mod/directive-dict.html#Context">Override</a> lê
          <code>FileInfo</code>. Então, você deve ao menos ter
          <code>AllowOverride FileInfo</code> para que essa diretriz seja
          aceita nos arquivos <code>.htaccess</code>.</p>
      
          <div class="example"><h3>Exemplo:</h3><table>
              <tr>
                <td><a href="../mod/directive-dict.html#Context">Contexto:</a></td>
                <td>configuração do servidor, hospedeiros virtuais, diretório, .htaccess</td>
              </tr>
      
              <tr>
                <td><a href="../mod/directive-dict.html#Override">Override:</a></td>
                <td>FileInfo</td>
              </tr>
            </table></div>
      
          <p>Se você estiver incerto se uma diretriz em particular é
          aceita em um arquivo <code>.htaccess</code>, procure na
          documentação por essa diretriz, e verifique a linha de
          Contexto por ".htaccess".</p> </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="when" id="when">Quando (não) usar arquivos .htaccess</a></h2>
      
          <p>No geral, você nunca deve usar arquivos <code>.htaccess</code>
          a não ser que você não tenha acesso ao arquivo de configuração
          principal do servidor. Existe, por exemplo, um erro de concepção
          que dita que a autenticação de usuários sempre deve
          ser feita usando os arquivos <code>.htaccess</code>. Esse
          simplesmente não é o caso. Você pode usar as configurações de
          autenticação de usuário no arquivo de configuração principal do
          servidor, e isso é, de fato, a maneira mais adequada de se fazer
          as coisas.</p>
      
          <p>Arquivos <code>.htaccess</code> devem ser usados em casos onde
          os provedores de conteúdo do site precisem fazer mudanças na
          configuração do servidor por-diretório, mas não tem
          acesso <em>root</em> ao sistema do servidor. Caso o administrador do 
          servidor não esteja disposto a fazer mudanças freqüentes nas
          configurações do servidor, é desejável permitir que os 
          usuários possam fazer essas mudanças através de arquivos
          <code>.htaccess</code> eles mesmos. Isso é particularmente
          verdade, por exemplo, em casos onde provedores estão fornecendo
          múltiplos sites para usuários em apenas uma máquina, e querem que
          seus usuários possam alterar suas configurações.</p>
      
          <p>No entanto, de modo geral, o uso de arquivos <code>.htaccess</code>
          deve ser evitado quando possível. Quaisquer configurações 
          que você considerar acrescentar em um arquivo <code>.htaccess</code>, podem
          ser efetivamente colocadas em uma seção <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> no arquivo principal de
          configuração de seu servidor.</p>
      
          <p>Existem duas razões principais para evitar o uso de arquivos
          <code>.htaccess</code>.</p>
      
          <p>A primeira delas é a performance. Quando <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> é configurado para
          permitir o uso de arquivos <code>.htaccess</code>, o Apache procura
          em todos diretórios por arquivos <code>.htaccess</code>.  
          Logo, permitir arquivos <code>.htaccess</code> causa um impacto na 
          performance, mesmo sem você usá-los de fato! Além disso, 
          o arquivo <code>.htaccess</code> é carregado toda vez que um documento 
          é requerido.</p>
      
          <p>Além disso, note que o Apache precisa procurar pelos arquivos
          <code>.htaccess</code> em todos os diretórios superiores, para ter
          o complemento total de todas as diretivas que devem ser
          aplicadas. (Veja a seção <a href="#how">como as diretrizes são
          aplicadas</a>.) Então, se um arquivo de um diretório
          <code>/www/htdocs/example</code> é requerido, o Apache precisa
          procurar pelos seguintes arquivos:</p>
      
          <div class="example"><p><code>
            /.htaccess<br />
            /www/.htaccess<br />
            /www/htdocs/.htaccess<br />
            /www/htdocs/example/.htaccess
          </code></p></div>
      
          <p>Assim, para cada acesso de arquivo fora desse diretório,
          existem 4 acessos ao sistema de arquivos adicionais, mesmo
          que nenhum desses arquivos estejam presentes. (Note que esse
          só será o caso se os arquivos <code>.htaccess</code>
          estiverem habilitados para <code>/</code>, o que
          normalmente não é o verdade.)</p>
      
          <p>A segunda consideração é relativa à segurança. 
          Você está permitindo que os usuários modifiquem as 
          configurações do servidor, o que pode resultar em mudanças 
          que podem fugir ao seu controle. Considere com cuidado se você quer 
          ou não dar aos seus usuários esses privilégios. Note também 
          que dar aos usuários menos privilégios que eles precisam, acarreta em 
          pedidos de suporte técnico adicionais. Tenha certeza que você comunicou
          aos usuários que nível de privilégios você os deu. 
          Especificar exatamente o que você configurou na diretriz <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>, e direcioná-los para a
          documentação relevante, irá poupá-lo de muita confusão 
          depois.</p>
      
          <p>Perceba que é exatamente equivalente colocar o arquivo
          <code>.htaccess</code> em um diretório
          <code>/www/htdocs/example</code> contendo uma diretriz, e
          adicionar a mesma diretriz em uma seção <em>Directory</em>
          <code>&lt;Directory /www/htdocs/example&gt;</code> na configuração
          principal do seu servidor:</p>
      
          <p>Arquivo <code>.htaccess</code> em <code>/www/htdocs/example</code>:</p>
      
          <div class="example"><h3>Conteúdo de um arquivo .htaccess em
          <code>/www/htdocs/example</code></h3><p><code>
              AddType text/example .exm
          </code></p></div>
      
          <div class="example"><h3>Seção do seu arquivo <code>httpd.conf</code></h3><p><code>
            &lt;Directory /www/htdocs/example&gt;<br />
            <span class="indent">
              AddType text/example .exm<br />
            </span>
            &lt;/Directory&gt;
          </code></p></div>
      
          <p>No entanto, adicionando isso ao seu arquivo de configuração do
          servidor resultará em uma menor perda de performance, na medida que
          a configuração é carregada no momento da inicialização do
          servidor, ao invés de toda que que um arquivo é requerido.</p>
      
          <p>O uso de arquivos <code>.htaccess</code> pode ser totalmente
          desabilitado, ajustando a diretriz <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> para <code>none</code>:</p>
      
          <div class="example"><p><code>
            AllowOverride None
          </code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="how" id="how">Como as diretrizes são aplicadas</a></h2>
      
          <p>As diretrizes de configuração que se encontram em um arquivo
          <code>.htaccess</code> são aplicadas para o diretório no qual o
          arquivo <code>.htaccess</code> se encontra, e para todos os
          subdiretórios ali presentes. Mas, é importante lembrar também que
          podem existir arquivos <code>.htaccess</code> no diretórios
          superiores. As diretrizes são aplicadas na ordem que são
          achadas. Logo, um arquivo <code>.htaccess</code> em um diretório
          em particular, pode sobrescrever as diretrizes encontradas em um
          diretório acima deste em sua respectiva árvore. Estes, por sua vez,
          podem ter suas diretrizes sobrescritas por diretrizes ainda mais
          acima, ou no próprio arquivo de configuração principal do
          servidor.</p>
      
          <p>Exemplo:</p>
      
          <p>No diretório <code>/www/htdocs/example1</code> nós temos
          um arquivo <code>.htaccess</code> contendo o seguinte:</p>
      
          <div class="example"><p><code>
             Options +ExecCGI
          </code></p></div>
      
          <p>(Nota: você deve ter "<code>AllowOverride Options</code>" para
          permitir o uso da diretriz "<code class="directive"><a href="../mod/core.html#options">Options</a></code>" nos arquivos
          <code>.htaccess</code> .)</p>
      
          <p>No diretório <code>/www/htdocs/example1/example2</code> nós temos
          um arquivo <code>.htaccess</code> contendo:</p>
      
          <div class="example"><p><code>
             Options Includes
          </code></p></div>
      
          <p>Devido a esse segundo arquivo <code>.htaccess</code>, no
          diretório <code>/www/htdocs/example1/example2</code>, a execução
          de scripts CGI não é permitida, pois somente <code>Options
          Includes</code> está em efeito, o que sobrescreve completamente
          quaisquer outros ajustes previamente configurados.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="auth" id="auth">Exemplo de Autenticação</a></h2>
      
          <p>Se você veio diretamente à esta parte do documento para
          aprender como fazer autenticação, é importante notar uma
          coisa. Existe uma concepção errada, mas muito comum, de que é
          necessário o uso de arquivos <code>.htaccess</code> para implementar 
          a autenticação por senha. Este não é o caso. Colocar 
          diretrizes de senha em uma seção <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code>, no seu arquivo principal de
          configuração do servidor, é a melhor maneira de se implementar
          isto, e os arquivos <code>.htaccess</code> devem ser usados apenas
          se você não tem acesso ao arquivo principal de configuração do
          servidor. Veja <a href="#when">acima</a> a discussão sobre quando
          você deve e quando não deve usar os arquivos
          <code>.htaccess</code>.</p>
      
          <p>Dito isso, se você ainda acredita que precisa usar um arquivo
          <code>.htaccess</code>, a configuração a seguir provavelmente
          funcionará para você.</p>
      
          <p>Conteúdo de um arquivo <code>.htaccess</code>:</p>
      
          <div class="example"><p><code>
            AuthType Basic<br />
            AuthName "Password Required"<br />
            AuthUserFile /www/passwords/password.file<br />
            AuthGroupFile /www/passwords/group.file<br />
            Require Group admins
          </code></p></div>
      
          <p>Note que <code>AllowOverride AuthConfig</code> precisa estar
          habilitado para que estas diretrizes tenham efeito.</p>
      
          <p>Por favor veja o <a href="auth.html">tutorial de
          autenticação</a> para uma discussão mais completa sobre
          autenticação e autorização.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ssi" id="ssi">Exemplo de Server Side Includes</a></h2>
      
          <p>Outro uso comum de arquivos <code>.htaccess</code> é ativar o
          Server Side Includes para um diretório em particular. Isto pode
          ser feito com as seguintes diretrizes de configuração, colocadas em
          um arquivo <code>.htaccess</code> no diretório desejado:</p>
      
          <div class="example"><p><code>
             Options +Includes<br />
             AddType text/html shtml<br />
             AddHandler server-parsed shtml
          </code></p></div>
      
          <p>Note que ambos <code>AllowOverride Options</code> e
          <code>AllowOverride FileInfo</code> precisam estar habilitados
          para essas diretrizes terem efeito.</p>
      
          <p>Por favor veja o <a href="ssi.html">tutorial de SSI</a> para
          uma discussão mais completa sobre server-side includes.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cgi" id="cgi">Exemplo de CGI</a></h2>
      
          <p>Finalmente, você pode querer que um arquivo
          <code>.htaccess</code> permita a execução de programas CGI em um
          diretório em particular. Isto pode ser implementado com as
          seguintes configurações:</p>
      
          <div class="example"><p><code>
             Options +ExecCGI<br />
             AddHandler cgi-script cgi pl
          </code></p></div>
      
          <p>Alternativamente, se você desejar que todos os arquivos de um
          dado diretório, sejam considerados programas CGI, isso pode ser
          feito com a seguinte configuração:</p>
      
          <div class="example"><p><code>
             Options +ExecCGI<br />
             SetHandler cgi-script
          </code></p></div>
      
          <p>Note que ambos <code>AllowOverride Options</code> e
          <code>AllowOverride FileInfo</code> precisam estar habilitados
          para que essas diretrizes tenham quaisquer efeito.</p>
      
          <p>Por favor veja o <a href="cgi.html">tutorial de CGI
          tutorial</a> para uma discussão mais completa sobre programação
          e configuração CGI.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="troubleshoot" id="troubleshoot">Resolvendo Problemas</a></h2>
      
          <p>Quando você adiciona diretrizes de configuração em um arquivo
          <code>.htaccess</code>, e não obtém o efeito desejado, existe uma
          série de pontos que podem estar errados.</p>
      
          <p>Mais comumente, o problema é que a diretriz <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> não está habilitada
          corretamente para que as suas diretrizes de configurações sejam
          honradas. Verifique se você não possui <code>AllowOverride
          None</code> ajustado para o escopo do arquivo em questão. Um bom
          meio de testar isso é colocar "lixo" em seu arquivo
          <code>.htaccess</code> e recarregá-lo. Se não for gerado nenhum
          erro do servidor, certamente você tem <code>AllowOverride
          None</code> habilitado.</p>
      
          <p>Se, por outro lado, você está obtendo erros do servidor ao
          tentar acessar documentos, verifique o registro de erros do
          Apache. Ele provavelmente irá indicar que a diretriz usada em
          seu arquivo <code>.htaccess</code> não é permitida.
          Alternativamente, ele pode acusar erros de sintaxe que você terá
          que corrigir.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Línguas Disponíveis: </span><a href="../en/howto/htaccess.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/htaccess.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/htaccess.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/htaccess.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/htaccess.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../pt-br/howto/htaccess.html" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentários</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/htaccess.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licenciado sob a <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Diretrizes</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossário</a> | <a href="../sitemap.html">Mapa do site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/htaccess.html.ja.utf8������������������������������������������������0000644�0000000�0000050�00000070343�13412755316�020560� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«: .htaccess ファイル - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="../">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a> &gt; <a href="./">How-To / ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«</a></div><div id="page-content"><div id="preamble"><h1>Apache ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«: .htaccess ファイル</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/howto/htaccess.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/htaccess.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/htaccess.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/htaccess.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/htaccess.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../pt-br/howto/htaccess.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
      <p><code>.htaccess</code> ファイルã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæ¯Žã«è¨­å®šã‚’変更ã™ã‚‹æ–¹æ³•ã‚’
      æä¾›ã—ã¾ã™ã€‚</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">.htaccess ファイル</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#what">.htaccess ファイルã¨ã¯ä½•ã‹/ãã®ä½¿ã„æ–¹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#when">ã„㤠.htaccess ファイルを使ã†(使ã‚ãªã„)ã‹ã€‚</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#how">ディレクティブã®é©ç”¨ã®ã•れ方</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#auth">èªè¨¼ã®ä¾‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ssi">SSI ã®ä¾‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cgi">CGI ã®ä¾‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#troubleshoot">å•題解決</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">.htaccess ファイル</a></h2>
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td><ul><li><code class="module"><a href="../mod/core.html">core</a></code></li><li><code class="module"><a href="../mod/mod_authn_file.html">mod_authn_file</a></code></li><li><code class="module"><a href="../mod/mod_authz_groupfile.html">mod_authz_groupfile</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="../mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="../mod/mod_mime.html">mod_mime</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#accessfilename">AccessFileName</a></code></li><li><code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code></li><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="../mod/core.html#sethandler">SetHandler</a></code></li><li><code class="directive"><a href="../mod/mod_authn_core.html#authtype">AuthType</a></code></li><li><code class="directive"><a href="../mod/mod_authn_core.html#authname">AuthName</a></code></li><li><code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code></li><li><code class="directive"><a href="../mod/mod_authz_groupfile.html#authgroupfile">AuthGroupFile</a></code></li><li><code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code></li></ul></td></tr></table>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="what" id="what">.htaccess ファイルã¨ã¯ä½•ã‹/ãã®ä½¿ã„æ–¹</a></h2>
      
      
          <p><code>.htaccess</code> ファイル (「分散設定ファイルã€) ã¯
          ディレクトリ毎ã«è¨­å®šã‚’変更ã™ã‚‹æ–¹æ³•ã‚’æä¾›ã—ã¾ã™ã€‚ディレクティブã®
          書ã‹ã‚ŒãŸãƒ•ァイルをディレクトリã«ç½®ãã“ã¨ã§ã€ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¨ãã®
          サブディレクトリã™ã¹ã¦ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’é©ç”¨ã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <div class="note"><h3>注:</h3>
            <p><code>.htaccess</code> ファイルを別ã®åå‰ã«ã—ãŸã„å ´åˆã¯ã€
            <code class="directive"><a href="../mod/core.html#accessfilename">AccessFileName</a></code> ディレクティブを
            使ã£ã¦å¤‰æ›´ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚例ãˆã°ã€ãã®ãƒ•ァイルを <code>.config</code> 
            ã¨ã„ã†åå‰ã«ã—ãŸã„å ´åˆã¯ã€ä»¥ä¸‹ã®è¨­å®šã‚’サーãƒè¨­å®šãƒ•ァイルã«å…¥ã‚Œã‚‹ã“ã¨ãŒ
            ã§ãã¾ã™:</p>
      
            <div class="example"><p><code>
              AccessFileName .config
            </code></p></div>
          </div>
      
          <p>一般ã«ã€<code>.htaccess</code> ãƒ•ã‚¡ã‚¤ãƒ«ã®æ§‹æ–‡ã¯
          <a href="../configuring.html#syntax">主設定ファイル</a>
          ã¨åŒã˜ã§ã™ã€‚ã“れらã®ãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ãã“ã¨ã®ã§ãるディレクティブ㯠<code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> ディレクティブã«ã‚ˆã‚Šæ±ºã¾ã‚Šã¾ã™ã€‚
          ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€<code>.htaccess</code> ファイルã«
          書ã‹ã‚ŒãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®ä¸­ã§ã€ã€
          ã©ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒé©ç”¨ã•れるã‹ã‚’カテゴリーå˜ä½ã§æŒ‡å®šã—ã¾ã™ã€‚
          <code>.htaccess</code> ã«æ›¸ãã“ã¨ã®ã§ãるディレクティブã§ã‚れã°ã€
          説明文書ã«ã¯ã€Œä¸Šæ›¸ãã€ã¨ã„ã†é …ç›®ãŒã‚りã€.htaccess ã«æ›¸ãã“ã¨ãŒã§ãるよã†ã«
          ãªã‚‹ãŸã‚ã® <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> ã®å€¤ãŒæŒ‡å®šã•れã¦ã„ã¾ã™ã€‚</p>
      
          <p>例ãˆã°ã€<code class="directive"><a href="../mod/core.html#adddefaultcharset">AddDefaultCharset</a></code> ディレクティブã®èª¬æ˜Žã‚’
          見るã¨ã€<code>.htaccess</code> ファイルã§ã®ä½¿ç”¨ãŒè¨±å¯ã•れã¦ã„ã‚‹ã“ã¨ãŒ
          ã‚ã‹ã‚Šã¾ã™ã€‚ (ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æ¦‚è¦ã®æ‰€ã«ã‚る「コンテキストã€ã¨æ›¸ã‹ã‚Œã¦ã„ã‚‹
          行を見ã¦ãã ã•ã„。) <a href="../mod/directive-dict.html#Context">上書ã</a>ã¨æ›¸ã‹ã‚Œã¦ã„る行ã«ã¯
          <code>FileInfo</code> ã¨ã‚りã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€<code>.htaccess</code> 中ã®
          ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæœ‰åйã«ãªã‚‹ãŸã‚ã«ã¯ã€å°‘ãªãã¨ã‚‚
          <code>AllowOverride FileInfo</code> ãŒè¨­å®šã•れã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      
          <div class="example"><h3>例:</h3><table>
              <tr>
                <td><a href="../mod/directive-dict.html#Context">コンテキスト:</a></td>
                <td>サーãƒè¨­å®šãƒ•ァイル,ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ,ディレクトリ,.htaccess</td>
              </tr>
      
              <tr>
                <td><a href="../mod/directive-dict.html#Override">上書ã:</a></td>
                <td>FileInfo</td>
              </tr>
            </table></div>
      
          <p>ã‚るディレクティブを <code>.htaccess</code> ãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ãã“ã¨ãŒã§ãã‚‹ã‹
          ã©ã†ã‹ã‚ã‹ã‚‰ãªã„ã¨ãã¯ã€ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®èª¬æ˜Žã‚’探ã—ã¦ã€".htaccess"
          ã®ãŸã‚ã®ã€Œã‚³ãƒ³ãƒ†ã‚­ã‚¹ãƒˆã€ã®è¡Œã‚’調ã¹ã¦ãã ã•ã„。</p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="when" id="when">ã„㤠.htaccess ファイルを使ã†(使ã‚ãªã„)ã‹ã€‚</a></h2>
      
          <p>一般的ã«ã€ã‚µãƒ¼ãƒã®ä¸»è¨­å®šãƒ•ァイルã«ã‚¢ã‚¯ã‚»ã‚¹ã§ããªã„å ´åˆã‚’除ã„ã¦ã€
          <code>.htaccess</code> ファイルã®ä½¿ç”¨ã¯æ¥µåŠ›é¿ã‘ã¦ãã ã•ã„。
          世ã®ä¸­ã«ã¯ã€ä¾‹ãˆã°ã€ãƒ¦ãƒ¼ã‚¶èªè¨¼ã¯å¸¸ã« <code>.htaccess</code> ファイルã§
          行ãªã‚ãªã‘れã°ãªã‚‰ãªã„ã€ã¨ã„ã†èª¤è§£ãŒåºƒã¾ã£ã¦ã„ã¾ã™ãŒã€ã¾ã£ãŸããã‚“ãªã“ã¨ã¯
          ã‚りã¾ã›ã‚“。ユーザèªè¨¼ã®è¨­å®šã¯ã‚µãƒ¼ãƒä¸»è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ãã“ã¨ãŒã§ãã€
          実際ã€ãã®æ–¹ãŒã‚ˆã‚Šè‰¯ã„設定方法ã§ã™ã€‚</p>
      
          <p><code>.htaccess</code> ファイルã¯ã‚³ãƒ³ãƒ†ãƒ³ãƒ„æä¾›è€…ãŒãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæ¯Žã®
          設定を行ãªã„ãŸã„ã‘れã©ã€ã‚µãƒ¼ãƒã‚·ã‚¹ãƒ†ãƒ ã® root アクセス権é™ã‚’æŒã£ã¦ã„ãªã„
          ã¨ã„ã†å ´åˆã«ã®ã¿ä½¿ã†ã¹ãã‚‚ã®ã§ã™ã€‚サーãƒç®¡ç†è€…ãŒé »ç¹ã«è¨­å®šå¤‰æ›´ã‚’行ãªã„ãŸãã¯
          ãªã„ã€ã¨ã„ã†ã¨ãã«ã¯å€‹ã€…ã®ãƒ¦ãƒ¼ã‚¶ãŒ <code>.htaccess</code> ファイルを使ã£ã¦
          自分ã§è¨­å®šã®å¤‰æ›´ã‚’行ãªã†ã“ã¨ã‚’許å¯ã—ãŸæ–¹ãŒè‰¯ã„ã¨ãã‚‚ã‚ã‚‹ã§ã—ょã†ã€‚
          ã“れã¯ç‰¹ã«ã€ISP ãŒè¤‡æ•°ã®ãƒ¦ãƒ¼ã‚¶ã®ã‚µã‚¤ãƒˆã‚’一ã¤ã®ãƒžã‚·ãƒ³ã§ãƒ›ã‚¹ãƒˆã—ã¦ã„ã¦ã€
          å„ユーザãŒè¨­å®šã®å¤‰æ›´ã‚’ã§ãるよã†ã«ã—ãŸã„よã†ãªã¨ãã«ã‚ã¦ã¯ã¾ã‚Šã¾ã™ã€‚</p>
      
          <p>ã—ã‹ã—ã€æ™®é€šã¯å¯èƒ½ã§ã‚れ㰠<code>.htaccess</code> ファイルã®ä½¿ç”¨ã¯
          é¿ã‘ã¦ãã ã•ã„。<code>.htaccess</code> ãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ã“ã†ã¨è€ƒãˆã‚‹ã‚ˆã†ãª
          ã™ã¹ã¦ã®è¨­å®šã¯ã€ã‚µãƒ¼ãƒã®ä¸»è¨­å®šãƒ•ァイル㮠<code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> セクションã§åŒã˜ã‚ˆã†ã«è¡Œãªã†ã“ã¨ãŒ
          ã§ãã¾ã™ã€‚</p>
      
          <p><code>.htaccess</code> ファイルã®ä½¿ç”¨ã‚’é¿ã‘ã‚‹ç†ç”±ã¯ä¸»ã«äºŒã¤ã‚りã¾ã™ã€‚</p>
      
          <p>一ã¤ç›®ã¯ã‚µãƒ¼ãƒã®æ€§èƒ½ã®å•題ã§ã™ã€‚<code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> ディレクティブãŒ
          <code>.htaccess</code> ファイルã®è¨­å®šã‚’許å¯ã—ã¦ã„ã‚‹å ´åˆã¯ã€Apache ã¯
          å„ディレクトリ㧠<code>.htaccess</code> ファイルを探ã—ã¾ã™ã€‚
          ã§ã™ã‹ã‚‰ã€<code>.htaccess</code> ファイルを許å¯ã™ã‚‹ã¨ã€å®Ÿéš›ã«ä½¿ç”¨ã—ã¦ã„ã‚‹ã‹
          ã©ã†ã‹ã«é–¢ã‚らãšã€æ€§èƒ½ã®ä½Žä¸‹ã‚’æ‹›ãã“ã¨ã«ãªã‚Šã¾ã™! ã¾ãŸã€<code>.htaccess</code>
          ãƒ•ã‚¡ã‚¤ãƒ«ã¯æ–‡æ›¸ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã•れる度ã«èª­ã¿è¾¼ã¾ã‚Œã¾ã™ã€‚</p>
      
          <p>ã•らã«ã€Apache ã¯é©ç”¨ã™ã¹ãディレクティブを集ã‚ã‚‹ãŸã‚ã«ã€ã™ã¹ã¦ã®
          上ä½ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã® <code>.htaccess</code> ファイルを探ã™å¿…è¦ãŒã‚ã‚‹ã“ã¨ã«ã‚‚
          注æ„ã—ã¦ãã ã•ã„。(<a href="#how">ディレクティブãŒé©ç”¨ã•れる方法</a>ã‚’
          å‚ç…§ã—ã¦ãã ã•ã„。)ã§ã™ã‹ã‚‰ã€<code>/www/htdocs/example</code> ã«ã‚ã‚‹
          ファイルãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã•れãŸã¨ãã¯ã€Apache ã¯ä»¥ä¸‹ã®ãƒ•ァイルを調ã¹ã¾ã™ã€‚</p>
      
          <div class="example"><p><code>
            /.htaccess<br />
            /www/.htaccess<br />
            /www/htdocs/.htaccess<br />
            /www/htdocs/example/.htaccess
          </code></p></div>
      
          <p>ã§ã™ã‹ã‚‰ã€ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ãれãžã‚Œã®ãƒ•ァイルã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã«å¯¾ã—ã¦ã€
          上ã®ä¾‹ã®ãƒ•ァイルãŒã¾ã£ãŸã存在ã—ãªã„ã¨ãã§ã‚‚ã€è¿½åŠ ã®ãƒ•ァイルシステムã®
          アクセスãŒè¡Œãªã‚れるã“ã¨ã«ãªã‚Šã¾ã™ã€‚(ã“れã¯ã€<code>.htaccess</code> ãŒ
          <code>/</code> ã«å¯¾ã—ã¦æœ‰åйã«ãªã£ã¦ã„ã‚‹ã¨ãã®å ´åˆã§ã€æ™®é€šã¯ãã†ãªã£ã¦
          ã„ãªã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。)</p>
      
          <p>二ã¤ç›®ã¯ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã§ã™ã€‚ユーザã«ã‚µãƒ¼ãƒã®è¨­å®šã‚’変更ã™ã‚‹ã“ã¨ã‚’
          許å¯ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã®ã§ã€ã‚ãªãŸè‡ªèº«ãŒç®¡ç†ã§ããªã„変更をã•れる
          æã‚ŒãŒã‚りã¾ã™ã€‚ユーザã«ã“ã®ç‰¹æ¨©ã‚’与ãˆã‚‹ã®ãŒè‰¯ã„ã®ã‹ã©ã†ã‹ã€å分
          検討ã—ã¦ãã ã•ã„。ã¾ãŸã€ãƒ¦ãƒ¼ã‚¶ã«ä¸Žãˆã‚‹æ¨©é™ãŒå¿…è¦ãªã‚‚ã®ã‚ˆã‚Šã‚‚å°‘ãªã™ãŽã‚‹ã¨ã€
          ä½™åˆ†ãªæŠ€è¡“ã‚µãƒãƒ¼ãƒˆå ±å‘Šã‚’å—ã‘å–るよã†ã«ãªã‚‹å¯èƒ½æ€§ãŒé«˜ã„ã“ã¨ã«ã‚‚
          注æ„ã—ã¦ãã ã•ã„。確実ã«ã€ãƒ¦ãƒ¼ã‚¶ã«ã©ã®ç¨‹åº¦ã®æ¨©é™ã‚’与ãˆãŸã‹æ˜Žç¢ºã«å‘Šã’るよã†ã«
          ã—ã¦ãã ã•ã„。<code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> ã«
          何を設定ã—ãŸã‹ã¨ã„ã†ã“ã¨ã¨ã€é–¢é€£ã™ã‚‹æ–‡æ›¸ã‚’示ã™ã“ã¨ã§ã€
          å¾Œã€…ã®æ··ä¹±ã‚’ãã£ã¨æ¸›ã‚‰ã™ã“ã¨ãŒ
          ã§ãã¾ã™ã€‚</p>
      
          <p>ã¨ã“ã‚ã§ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æ›¸ã‹ã‚ŒãŸ <code>.htaccess</code> ã‚’
          <code>/www/htdocs/example</code> ã«ç½®ãã“ã¨ã¨ã€åŒã˜ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’
          主サーãƒè¨­å®šã® Directory セクション
          <code>&lt;Directory /www/htdocs/example&gt;</code> ã«æ›¸ãã“ã¨ã¯
          完全ã«ç­‰ä¾¡ã§ã™:</p>
      
          <p><code>/www/htdocs/example</code> 㮠<code>.htaccess</code> ファイル:</p>
      
          <div class="example"><h3><code>/www/htdocs/example</code> ã® .htaccess ファイルã®
          内容</h3><p><code>
              AddType text/example .exm
          </code></p></div>
      
          <div class="example"><h3><code>httpd.conf ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³</code>
          file</h3><p><code>
            &lt;Directory /www/htdocs/example&gt;<br />
            <span class="indent">
              AddType text/example .exm<br />
            </span>
            &lt;/Directory&gt;
          </code></p></div>
      
          <p>ã—ã‹ã—ã€ã“ã®è¨­å®šã¯ã‚µãƒ¼ãƒè¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ã„ãŸæ–¹ãŒãƒ‘フォーマンスã®
          低下ãŒå°‘ãªããªã‚Šã¾ã™ã€‚ファイルãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã•れる度ã«
          読ã¿è¾¼ã¾ã‚Œã‚‹ä»£ã‚りã«ã€Apache ã®èµ·å‹•時㫠1 回ã ã‘読ã¿è¾¼ã‚ã°
          よããªã‚‹ã‹ã‚‰ã§ã™ã€‚</p>
      
          <p><code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> ディレクティブã®
          値を <code>none</code> ã«è¨­å®šã™ã‚‹ã“ã¨ã§ <code>.htaccess</code> ファイル
          ã®ä½¿ç”¨ã‚’完全ã«ç„¡åйã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <div class="example"><p><code>
            AllowOverride None
          </code></p></div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="how" id="how">ディレクティブã®é©ç”¨ã®ã•れ方</a></h2>
      
          <p><code>.htaccess</code> ファイルã®è¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–㯠<code>.htaccess</code>
          ファイルã®å­˜åœ¨ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¨ã€ãã®ã‚µãƒ–ディレクトリã™ã¹ã¦ã«é©ç”¨ã•れã¾ã™ã€‚
          ã—ã‹ã—ã€ä¸Šã®éšŽå±¤ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã‚‚ <code>.htaccess</code> ファイルãŒ
          存在ã™ã‚‹ã‹ã‚‚ã—れãªã„ã“ã¨ã‚’覚ãˆã¦ãŠãã“ã¨ã¯å¤§åˆ‡ã§ã™ã€‚ディレクティブã¯ç¾ã‚Œã‚‹
          順番ã«é©ç”¨ã•れã¾ã™ã€‚ã§ã™ã‹ã‚‰ã€ã‚るディレクトリ㮠<code>.htaccess</code> ã¯
          ディレクトリツリーã®ã‚ˆã‚Šä¸Šã®éšŽå±¤ã® <code>.htaccess</code> ファイルã®
          設定を上書ãã™ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。ãã—ã¦ã€ãã® <code>.htaccess</code> ã‚‚
          より上ã®éšŽå±¤ã§æ›¸ã‹ã‚ŒãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を上書ãã—ãŸã‚Šã€ä¸»ã‚µãƒ¼ãƒè¨­å®šãƒ•ァイル
          ãã®ã‚‚ã®ã®è¨­å®šã‚’上書ãã—ãŸã‚Šã—ã¦ã„ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。</p>
      
          <p>例:</p>
      
          <p>ディレクトリ <code>/www/htdocs/example1</code> ã«ä»¥ä¸‹ã®å†…容ã®
          <code>.htaccess</code> ファイルãŒã‚りã¾ã™:</p>
      
          <div class="example"><p><code>
             Options +ExecCGI
          </code></p></div>
      
          <p>(注: <code>.htaccess</code>
          ファイル㧠"<code class="directive"><a href="../mod/core.html#options">Options</a></code>" ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæœ‰åйã«ãªã‚‹ãŸã‚ã«ã¯ã€
          "<code>AllowOverride Options</code>" を有効ã«ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚)</p>
      
          <p>ディレクトリ <code>/www/htdocs/example1/example2</code> ã«ã¯
          以下ã®ã‚ˆã†ãª <code>.htaccess</code> ファイルãŒã‚りã¾ã™:</p>
      
          <div class="example"><p><code>
             Options Includes
          </code></p></div>
      
          <p>二ã¤ã‚ã® <code>.htaccess</code> ã«ã‚ˆã‚Šã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒª
          <code>/www/htdocs/example1/example2</code> ã§ã¯ CGI ã®å®Ÿè¡Œã¯
          許å¯ã•れã¾ã›ã‚“。ã“れã¯ã€<code>Options Includes</code> ã®ã¿ãŒ
          効力をæŒã¡ã€ãれãŒã™ã¹ã¦ã®ä»¥å‰ã®è¨­å®šã‚’上書ãã™ã‚‹ã‹ã‚‰ã§ã™ã€‚</p>
      
          <h3><a name="merge" id="merge">メイン設定ファイルã«å¯¾ã™ã‚‹
          .htaccess ã®ãƒžãƒ¼ã‚¸</a></h3>
      
          <p>As discussed in the documentation on <a href="../sections.html">Configuration Sections</a>,
          <code>.htaccess</code> files can override the <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> sections for
          the corresponding directory, but will be overriden by other types
          of configuration sections from the main configuration files.  This
          fact can be used to enforce certain configurations, even in the
          presence of a liberal <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> setting.  For example, to
          prevent script execution while allowing anything else to be set in
          <code>.htaccess</code> you can use:</p>
          <p><a href="../sections.html">セクションã®è¨­å®š</a>
          ã«è¨˜è¼‰ã•れã¦ã„るよã†ã«ã€<code>.htaccess</code> ファイルを使ã£ã¦
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code>
          セクションã®è¨­å®šã‚’ディレクトリ毎ã«ä¸Šæ›¸ãã§ãã¾ã™ãŒã€
          メイン設定ファイル中ã«ã‚ã‚‹ã€ä»–ã®ç¨®é¡žã®è¨­å®šã‚»ã‚¯ã‚·ãƒ§ãƒ³ã«ã‚ˆã£ã¦
          ã•らã«ä¸Šæ›¸ãã•れるã“ã¨ã‚‚ã‚りã¾ã™ã€‚
          ã“ã®ç‰¹å¾´ã‚’使ã£ã¦ã€
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>
          ã§è‡ªç”±åº¦ã®é«˜ã„設定ãŒã‚ã£ãŸã¨ã—ã¦ã‚‚ã€ã‚る特定ã®è¨­å®šãŒç¢ºå®Ÿã«
          åæ˜ ã•れるよã†ã«ã§ãã¾ã™ã€‚例ãˆã°ã€CGI スクリプトã®å®Ÿè¡Œã¯
          ä¸è¨±å¯ã«ã€ã‹ã¤ã€<code>.htaccess</code> ã§ãã®ä»–ã®é …ç›®ã¯
          設定ã§ãるよã†ã«ã€ã¨ã„ã†å ´åˆã¯æ¬¡ã®ã‚ˆã†ã«ã§ãã¾ã™ :</p>
          
          <div class="example"><p><code>
      &lt;Directory /&gt;<br />
      <span class="indent">
      Allowoverride All<br />
      </span>
      &lt;/Directory&gt;<br />
      <br />
      &lt;Location /&gt;<br />
      <span class="indent">
      Options +IncludesNoExec -ExecCGI<br />
      </span>
      &lt;/Location&gt;
          </code></p></div>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="auth" id="auth">èªè¨¼ã®ä¾‹</a></h2>
      
          <p>ã‚‚ã—èªè¨¼ã®æ–¹æ³•を知るãŸã‚ã«ã“ã®éƒ¨åˆ†ã«ç›´æŽ¥æ¥ãŸã®ã§ã‚れã°ã€æ¬¡ã®ã“ã¨ã‚’
          知ã£ã¦ãŠãã“ã¨ãŒé‡è¦ã§ã™ã€‚よãã‚る誤解ã«ã€ãƒ‘スワードèªè¨¼ã‚’行ãªã†ãŸã‚ã«ã¯
          <code>.htaccess</code> ファイルを使ã†å¿…è¦ãŒã‚ã‚‹ã€ã¨ã„ã†ã‚‚ã®ãŒã‚りã¾ã™ã€‚
          ã“ã‚Œã¯æ­£ã—ãã‚りã¾ã›ã‚“。主サーãƒè¨­å®šãƒ•ァイル㮠<code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> セクションã«
          èªè¨¼ç”¨ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’æ›¸ãæ–¹ãŒæŽ¨å¥¨ã•れる方法ã§ã€<code>.htaccess</code>
          ファイルã¯ä¸»ã‚µãƒ¼ãƒè¨­å®šãƒ•ァイルを変更ã§ããªã„ã¨ãã«ã®ã¿ä½¿ç”¨ã™ã¹ãã§ã™ã€‚
          ã„㤠<code>.htaccess</code> ファイルを使ã†ã¹ãã§ã€ã„ã¤ä½¿ã†ã¹ãã§ã¯ãªã„ã‹ã«
          ã¤ã„ã¦ã¯ <a href="#when">上</a>ã‚’å‚ç…§ã—ã¦ãã ã•ã„。</p>
      
          <p>以上ã®ã“ã¨ã‚’ãµã¾ãˆãŸä¸Šã§ã€ã‚‚ã— <code>.htaccess</code> ã®ä½¿ç”¨ãŒ
          ã¾ã å¿…è¦ã ã¨æ€ã†å ´åˆã¯ã€æ¬¡ã®ã‚ˆã†ãªã‚‚ã®ãŒæœ›ã¿ã®ã“ã¨ã‚’ã—ã¦ãれるã‹ã‚‚
          ã—れã¾ã›ã‚“。</p>
      
          <p><code>.htaccess</code> ファイルã®å†…容:</p>
      
          <div class="example"><p><code>
            AuthType Basic<br />
            AuthName "Password Required"<br />
            AuthUserFile /www/passwords/password.file<br />
            AuthGroupFile /www/passwords/group.file<br />
            Require Group admins
          </code></p></div>
      
          <p>ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæœ‰åйã«ãªã‚‹ãŸã‚ã«ã¯ã€
          <code>AllowOverride AuthConfig</code> ãŒæœ‰åйã§ãªãã¦ã¯ãªã‚‰ãªã„ã“ã¨ã«
          注æ„ã—ã¦ãã ã•ã„。</p>
      
          <p>èªè¨¼ã¨æ‰¿èªã«ã¤ã„ã¦ã¯ <a href="auth.html">èªè¨¼ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«</a>ã‚’
          å‚ç…§ã—ã¦ãã ã•ã„。</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ssi" id="ssi">SSI ã®ä¾‹</a></h2>
      
          <p>ã‚‚ã†ä¸€ã¤ã® <code>.htaccess</code> ファイルã®ã‚ˆãã‚る利用法ã¯
          特定ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã§ SSI を有効ã«ã™ã‚‹ã“ã¨ã§ã™ã€‚ã“れã¯ã€æœ›ã¿ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®
          <code>.htaccess</code> ファイルã«ä»¥ä¸‹ã®è¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を書ãã“ã¨ã§
          锿ˆã§ãã¾ã™:</p>
      
          <div class="example"><p><code>
             Options +Includes<br />
             AddType text/html shtml<br />
             AddHandler server-parsed shtml
          </code></p></div>
      
          <p>ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæœ‰åйã«ãªã‚‹ãŸã‚ã«ã¯ã€
          <code>AllowOverride Options</code> 㨠<code>AllowOverride
          FileInfo</code> ãŒæœ‰åйã«ãªã£ã¦ã„ã‚‹å¿…è¦ãŒã‚ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。</p>
      
          <p>よりã¾ã¨ã¾ã£ãŸ SSI ã®èª¬æ˜Žã¯ <a href="ssi.html">SSI ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«</a>ã‚’
          å‚ç…§ã—ã¦ãã ã•ã„。</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cgi" id="cgi">CGI ã®ä¾‹</a></h2>
      
          <p>最後ã«ã€ç‰¹å®šã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã§ CGI プログラムã®å®Ÿè¡Œã‚’許å¯ã—ãŸã„ã“ã¨ãŒ
          ã‚ã‚‹ã§ã—ょã†ã€‚ã“れã¯ä»¥ä¸‹ã®è¨­å®šã§è¡Œãªã†ã“ã¨ãŒã§ãã¾ã™:</p>
      
          <div class="example"><p><code>
             Options +ExecCGI<br />
             AddHandler cgi-script cgi pl
          </code></p></div>
      
          <p>ã‚‚ã—ãã¯ã€ã‚るディレクトリã®ã™ã¹ã¦ã®ãƒ•ァイル㌠CGI プログラムã¨
          ã¿ãªã•れるよã†ã«ã—ãŸã„ãªã‚‰ã€ä»¥ä¸‹ã®è¨­å®šã§å®Ÿç¾ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™:</p>
      
          <div class="example"><p><code>
             Options +ExecCGI<br />
             SetHandler cgi-script
          </code></p></div>
      
          <p>ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæœ‰åйã«ãªã‚‹ãŸã‚ã«ã¯ã€
          <code>AllowOverride Options</code> 㨠<code>AllowOverride
          FileInfo</code> ãŒæœ‰åйã§ã‚ã‚‹å¿…è¦ãŒã‚ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。</p>
      
          <p>CGI プログラムã¨è¨­å®šã®ã‚ˆã‚Šã¾ã¨ã¾ã£ãŸèª¬æ˜Žã¯ <a href="cgi.html">CGI ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«</a>ã‚’å‚ç…§ã—ã¦ãã ã•ã„。</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="troubleshoot" id="troubleshoot">å•題解決</a></h2>
      
          <p>設定ディレクティブを <code>.htaccess</code> ãƒ•ã‚¡ã‚¤ãƒ«ã«æ›¸ã„ãŸã‘れã©ã‚‚ã€
          期待ã—ãŸåŠ¹æžœãŒå¾—られãªã„ã¨ãã«ã¯ã€ã„ãã¤ã‹ã®åŽŸå› ãŒè€ƒãˆã‚‰ã‚Œã¾ã™ã€‚</p>
      
          <p>一番よãã‚ã‚‹ã“ã¨ã¯ã€è¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒè€ƒæ…®ã•れるよã†ã«ã¯
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> ãŒè¨­å®šã•れã¦ã„ãªã„
          ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚該当ã®ãƒ•ァイルã®ã‚¹ã‚³ãƒ¼ãƒ—ã« <code>AllowOverride None</code>
          ãŒè¨­å®šã•れã¦ã„ãªã„ã“ã¨ã‚’確èªã—ã¦ãã ã•ã„。ã“れを調ã¹ã‚‹ãŸã‚ã®è‰¯ã„方法ã¯ã€
          <code>.htaccess</code> ファイルã«ã”ã¿ã‚’書ã„ã¦ã€ãƒªãƒ­ãƒ¼ãƒ‰ã™ã‚‹ã“ã¨ã§ã™ã€‚
          サーãƒã®ã‚¨ãƒ©ãƒ¼ãŒç”Ÿæˆã•れãªã„ã¨ãã¯ã€ã»ã¼ç¢ºå®Ÿã« <code>AllowOverride
          None</code> ãŒè¨­å®šã•れã¦ã„る状態ã«ãªã£ã¦ã„ã¾ã™ã€‚</p>
      
          <p>ãã†ã§ã¯ãªãã€æ–‡æ›¸ã‚’アクセスã—よã†ã¨ã—ãŸã¨ãã«ã‚¨ãƒ©ãƒ¼ãŒç™ºç”Ÿã—ã¦ã„ã‚‹
          ã¨ãã¯ã€Apache ã®ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã‚’調ã¹ã¦ãã ã•ã„。<code>.htaccess</code> ファイルã§
          使用ã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒè¨±å¯ã•れã¦ã„ãªã„ã€ã¨ã„ã†ã“ã¨ã‚’知らã›ã¦ã„ã‚‹
          å¯èƒ½æ€§ãŒé«˜ã„ã§ã™ã€‚ã¾ãŸã¯ã€æ§‹æ–‡ã®é–“é•ã„ãŒã‚ã‚‹ã“ã¨ã‚’è¿°ã¹ã¦ã„ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。
          ãã®å ´åˆã«ã¯ã¾ãšãれを修正ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/howto/htaccess.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/htaccess.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/htaccess.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/htaccess.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/htaccess.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../pt-br/howto/htaccess.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/htaccess.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/http2.html.es��������������������������������������������������������0000644�0000000�0000050�00000066374�13412755316�017165� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Guía HTTP/2 - Servidor HTTP Apache Versión 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="../">Versión 2.4</a> &gt; <a href="./">How-To / Tutoriales</a></div><div id="page-content"><div id="preamble"><h1>Guía HTTP/2</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/http2.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/http2.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/http2.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>
              Esta es la guía para configurar HTTP/2 en Apache httpd. Ésta característica
              está <em>lista en produción</em> así que es de esperar que las interfaces
              y las directivas se mantengan consistentes en cada verión.
          </p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#protocol">El protocolo HTTP/2</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#implementation">HTTP/2 en Apache httpd</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#building">Compilar httpd con soporte HTTP/2</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#basic-config">Configuración básica</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#mpm-config">Configuración MPM</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#clients">Clientes</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#tools">Herramientas útiles para depurar HTTP/2</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#push">Server Push</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#earlyhints">"Early Hints"</a></li>
      </ul><h3>Consulte también</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code></li><li><a href="#comments_section">Comentarios</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="protocol" id="protocol">El protocolo HTTP/2</a></h2>
          
      
          <p>HTTP/2 es la evolución del protocolo de la capa de aplicación con más
          éxito, HTTP. Se centra en hacer un uso más eficiente de los recursos de red. 
          No cambia la característica fundamental de HTTP, la semántica. Todavía hay 
          olicitudes, respuestas, cabeceras y todo los elementos típicos de HTTP/1. Así 
          que, si ya conoce HTTP/1, también conoce el 95% de HTTP/2.</p>
          
          <p>Se ha escrito mucho sobre HTTP/2 y de cómo funciona. La norma más
          estándar es, por supuesto, su 
          <a href="https://tools.ietf.org/html/rfc7540">RFC 7540</a> 
          (<a href="http://httpwg.org/specs/rfc7540.html"> también disponible en un
          formato más legible, YMMV</a>). Así que, ahí encontrará toda la especificación 
          del protocolo.</p>
      
          <p>Pero, como con todos los RFC, no es ideal como primera lectura. Es mejor
          entender primero <em>qué</em> se quiere hacer y después leer el RFC sobre 
          <em>cómo</em> hacerlo. Un documento mucho mejor con el que empezar es
          <a href="https://daniel.haxx.se/http2/">http2 explicado</a>
          por Daniel Stenberg, el autor de <a href="https://curl.haxx.se">curl</a>. 
          ¡También está disponible cada vez en un mayor número lenguajes!</p>
          
          <p>Si le parece demasiado largo, o no lo ha leido, hay algunos términos
          y elementos a tener en cuenta cuando lea este documento:</p>
          <ul>
              <li>HTTP/2 es un <strong>protocolo binario</strong>, al contrario que 
              HTTP 1.1 que es texto plano. La intención para HTTP 1.1 es que sea 
              legible (por ejemplo capturando el tráfico de red) mientras que para 
              HTTP/2 no. Más información en el FAQ oficial 
              <a href="https://http2.github.io/faq/#why-is-http2-binary">¿Por qué es 
                  binario HTTP/2?</a></li>
      
              <li><strong>h2</strong> es HTTP/2 sobre TLS (negociación de protocolo a 
              través de ALPN).</li>
      
              <li><strong>h2c</strong> es HTTP/2 sobre TCP.</li>
      
              <li>Un <strong>frame</strong> es la unidad más pequeña de comunicación 
              dentro de una conexión HTTP/2, que consiste en una cabecera y una secuencia 
              de octetos de longitud variable estructurada de acuerdo con el tipo de 
              frame. Más información en la documentación oficial 
              <a href="http://httpwg.org/specs/rfc7540.html#FramingLayer">Sección de 
                  Capa de Frame</a>.</li>
      
              <li>Un <strong>stream</strong> es un flujo bidireccional de frames dentro 
              de una conexión HTTP/2. El concepto correspondiente en HTTP 1.1 es un 
              intercambio de mensajes de solicitud/respuesta. Más información en la 
              documentación oficial 
              <a href="http://httpwg.org/specs/rfc7540.html#StreamsLayer">Sección Capa 
                  de Stream</a>.</li>
      
              <li>
                  HTTP/2 es capaz de llevar <strong>múltiples streams</strong> de datos
                  sobre la misma conexión TCP, evitando la clásica solicitud lenta 
                  "head-of-line blocking" de HTTP 1.1 y evitando generar múltiples conexiones
                  TCP para cada solicitud/respuesta (KeepAlive parcheó el problema en 
                  HTTP 1.1 pero no lo resolvió completamente).
            </li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="implementation" id="implementation">HTTP/2 en Apache httpd</a></h2>
          
      
          <p>
              El protocolo HTTP/2 se implementa con su propio módulo httpd, llamado 
              acertadamente <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code>. Incluye el set completo de 
              características descritas por el RFC 7540 y soporta HTTP/2 sobre texto 
              plano (http:), así como conexiones seguras (https:). La variante de texto
              plano se llama '<code>h2c</code>', la segura '<code>h2</code>'. Para 
              <code>h2c</code> permite el modo <em>direct</em>
              y el <code>Upgrade:</code> a través de una solicitud inicial HTTP/1.
          </p>
          
          <p>
              Una característica de HTTP/2 que ofrece capacidades nuevas para 
              desarrolladores de web es <a href="#push">Server Push</a>. Vea esa sección
               para saber como su aplicación web puede hacer uso de ella.
           </p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="building" id="building">Compilar httpd con soporte HTTP/2</a></h2>
          
      
          <p>
              <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> usa la librería <a href="https://nghttp2.org">
              nghttp2</a>como su implementación base. Para compilar 
              <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> necesita al menos la versión 1.2.1 de 
              <code>libnghttp2</code> instalada en su sistema.
          </p>
      
          <p>
              Cuando usted ejecuta <code>./configure</code> en el código fuente de 
              Apache HTTPD, necesita indicarle '<code>--enable-http2</code>' como una 
              opción adicional para activar la compilación de este módulo. Si su 
              <code>libnghttp2</code> está ubicado en una ruta no habitual (cualquiera que 
              sea en su sistema operativo), puede indicar su ubicación con 
              '<code>--with-nghttp2=&lt;path&gt;</code>' para <code>./configure</code>.
          </p>
      
          <p>Aunque puede que eso sirva para la mayoría, habrá quien prefiera un <code>nghttp2</code> compilado estáticamente para este módulo. Para ellos existe la opción <code>--enable-nghttp2-staticlib-deps</code>. Funciona de manera muy similar a como uno debe enlazar openssl estáticamente para <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>.</p>
      
          <p>Hablando de SSL, necesita estar al tanto de que la mayoría de los navegadores hablan HTTP/2 solo con URLs <code>https:</code>. Así que necesita un servidor con soporte SSL. Pero no solo eso, necesitará una librería SSL que de soporte a la extensión <code>ALPN</code>. Si usa OpenSSL, necesita al menos la versión 1.0.2.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="basic-config" id="basic-config">Configuración básica</a></h2>
          
      
          <p>Cuando tiene un <code>httpd</code> compilado con <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> necesita una configuración básica para activarlo. Lo primero, como con cualquier otro módulo de Apache, es que necesita cargarlo:</p>
          
          <pre class="prettyprint lang-config">LoadModule http2_module modules/mod_http2.so</pre>
      
          
          <p>La segunda directiva que necesita añadir a la configuración de su servidor es:</p>
      
          <pre class="prettyprint lang-config">Protocols h2 http/1.1</pre>
      
          
          <p>Esto permite h2, la variante segura, para ser el protocolo preferido de las conexiones en su servidor. Cuando quiera habilitar todas las variantes de HTTP/2, entonces simplemente configure:</p>
      
          <pre class="prettyprint lang-config">Protocols h2 h2c http/1.1</pre>
      
      
          <p>Dependiendo de dónde pone esta directiva, afecta a todas las conexiones o solo a las de ciertos host virtuales. La puede anidar, como en:</p>
      
          <pre class="prettyprint lang-config">Protocols http/1.1
      &lt;VirtualHost ...&gt;
          ServerName test.example.org
          Protocols h2 http/1.1
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Esto solo permite HTTP/1, excepto conexiones SSL hacia <code>test.example.org</code> que ofrecen HTTP/2.</p>
      
          <div class="note"><h3>Escoger un SSLCipherSuite seguro</h3>
           <p>Es necesario configurar <code class="directive"><a href="../mod/mod_ssl.html#sslciphersuite">SSLCipherSuite</a></code> con una suite segura de cifrado TLS. La versión actual de mod_http2 no fuerza ningún cifrado pero la mayoría de los clientes si lo hacen. Encaminar un navegador hacia un servidor con <code>h2</code> activado con una suite inapropiada de cifrados forzará al navegador a rehusar e intentar conectar por HTTP 1.1. Esto es un error común cuando se configura httpd con HTTP/2 por primera vez, ¡así que por favor tenga en cuenta que debe evitar largas sesiones de depuración! Si quiere estar seguro de la suite de cifrados que escoja, por favor evite los listados en la <a href="http://httpwg.org/specs/rfc7540.html#BadCipherSuites">Lista Negra de TLS para HTTP/2</a>.</p>
          </div>
      
          <p>El orden de los protocolos mencionados también es relevante. Por defecto, el primero es el protocolo preferido. Cuando un cliente ofrece múltiples opciones, la que esté más a la izquierda será la escogida. En</p>
          <pre class="prettyprint lang-config">Protocols http/1.1 h2</pre>
      
          
          <p>el protocolo preferido es HTTP/1 y siempre será seleccionado a menos que el cliente <em>sólo</em> soporte h2. Puesto que queremos hablar HTTP/2 con clientes que lo soporten, el orden correcto es:</p>
          
          <pre class="prettyprint lang-config">Protocols h2 h2c http/1.1</pre>
      
      
          <p>Hay algo más respecto al orden: el cliente también tiene sus propias preferencias. Si quiere, puede configurar su servidor para seleccionar el protocolo preferido por el cliente:</p>
      
          <pre class="prettyprint lang-config">ProtocolsHonorOrder Off</pre>
      
      
          <p>Hace que el orden en que <em>usted</em> escribió los Protocols sea irrelevante y sólo el orden de preferencia del cliente será decisorio.</p>
      
          <p>Una última cosa: cuando usted configura los protocolos no se comprueba si son correctos o están bien escritos. Puede mencionar protocolos que no existen, así que no hay necesidad de proteger <code class="directive"><a href="../mod/core.html#protocols">Protocols</a></code> con ningún <code class="directive"><a href="../mod/core.html#ifmodule">&lt;IfModule&gt;</a></code> de comprobación.</p>
      
          <p>Para más consejos avanzados de configuración, vea la <a href="../mod/mod_http2.html#dimensioning">
          sección de módulos sobre dimensionamiento</a> y <a href="../mod/mod_http2.html#misdirected">
          como gestionar multiples hosts con el mismo certificado</a>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mpm-config" id="mpm-config">Configuración MPM</a></h2>
          
          
          <p>HTTP/2 está soportado en todos los módulos de multi-proceso que se ofrecen con httpd. Aun así, si usa el mpm <code class="module"><a href="../mod/prefork.html">prefork</a></code>, habrá  restricciones severas.</p>
      
          <p>En <code class="module"><a href="../mod/prefork.html">prefork</a></code>, <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> solo procesará una solicitud cada vez por conexión. Pero los clientes, como los navegadores, enviarán muchas solicitudes al mismo tiempo. Si una de ellas tarda mucho en procesarse (o hace un sondeo que dura más de la cuenta), las otras solicitudes se quedarán atascadas.</p>
      
          <p><code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> no evitará este límite por defecto. El motivo es que <code class="module"><a href="../mod/prefork.html">prefork</a></code> hoy en día solo se escoge si ejecuta motores de proceso que no están preparados para multi-hilo, p.ej. fallará con más de una solicitud.</p>
      
          <p>Si su configuración lo soporta, hoy en día <code class="module"><a href="../mod/event.html">event</a></code> es el mejor mpm que puede usar.</p>
          
          <p>Si realmente está obligado a usar <code class="module"><a href="../mod/prefork.html">prefork</a></code> y quiere multiples solicitudes, puede configurar la directiva <code class="directive"><a href="../mod/mod_http2.html#h2minworkers">H2MinWorkers</a></code> para hacerlo posible. Sin embargo, si esto falla, es bajo su cuenta y riesgo.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="clients" id="clients">Clientes</a></h2>
          
          
          <p>Casi todos los navegadores modernos dan soporte a HTTP/2, pero solo en conexiones SSL: Firefox (v43), Chrome (v45), Safari (since v9), iOS Safari (v9), Opera (v35), Chrome para Android (v49) e Internet Explorer (v11 en Windows10) (<a href="http://caniuse.com/#search=http2">Fuente</a>).</p>
      
          <p>Otros clientes, así cómo otros servidores, están listados en la 
          <a href="https://github.com/http2/http2-spec/wiki/Implementations">wiki de Implementaciones</a>, entre ellos, implementaciones para c, c++, common lisp, dart, erlang, haskell, java, nodejs, php, python, perl, ruby, rust, scala y swift.</p>
      
          <p>Muchos de las implementaciones de clientes que no son navegadores soportan HTTP/2 sobre texto plano, h2c. La más versátil es <a href="https://curl.haxx.se">curl</a>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="tools" id="tools">Herramientas útiles para depurar HTTP/2</a></h2>
          
      
          <p>La primera herramienta a mencionar es por supuesto <a href="https://curl.haxx.se">curl</a>. Por favor asegúrese de que su versión soporta HTTP/2 comprobando sus <code>Características</code>:</p>
          <pre class="prettyprint lang-config">    $ curl -V
          curl 7.45.0 (x86_64-apple-darwin15.0.0) libcurl/7.45.0 OpenSSL/1.0.2d zlib/1.2.8 nghttp2/1.3.4
          Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 [...] 
          Features: IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP <strong>HTTP2</strong>
          </pre>
      
          <div class="note"><h3>Notas sobre Mac OS homebrew</h3>
          brew install curl --with-openssl --with-nghttp2 
          </div>
          <p>Y para una inspección en gran profundidad <a href="https://wiki.wireshark.org/HTTP2">wireshark</a>.</p>
          <p>El paquete <a href="https://nghttp2.org">nghttp2</a> también incluye clientes, tales como:</p>
          <ul>
              <li><a href="https://nghttp2.org/documentation/nghttp.1.html">nghttp
              </a> - util para visualizar la frames de HTTP/2 y tener una mejor idea de como funciona el protocolo.</li>
              <li><a href="https://nghttp2.org/documentation/h2load-howto.html">h2load</a> - útil para hacer un stress-test de su servidor.</li>
          </ul>
      
          <p>Chrome ofrece logs detallados de HTTP/2 en sus conexiones a través de la <a href="chrome://net-internals/#http2">página especial de net-internals</a>. También hay una extensión interesante para <a href="https://chrome.google.com/webstore/detail/http2-and-spdy-indicator/mpbpobfflnpcgagjijhmgnchggcjblin?hl=en">Chrome</a> y <a href="https://addons.mozilla.org/en-us/firefox/addon/spdy-indicator/">Firefox</a> con la que visualizar cuando su navegador usa HTTP/2.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="push" id="push">Server Push</a></h2>
          
          
          <p>El protocolo HTTP/2 permite al servidor hacer PUSH de respuestas a un cliente que nunca las solicitó. El tono de la conversación es: "Aquí tiene una solicitud que nunca envió y la respuesta llegará pronto..."</p>
      
          <p>Pero hay restricciones: el cliente puede deshabilitar esta característica y el servidor entonces solo podrá hacer PUSH en una solicitud que hizo previamente del cliente.</p>
      
          <p>La intención es permitir al servidor enviar recursos que el cliente seguramente vaya a necesitar, p. ej. un recurso css o javascript que pertenece a una página html que el cliente solicitó, un grupo de imágenes a las que se hace referencia en un css, etc.</p>
      
          <p>La ventaja para el cliente es que ahorra tiempo para solicitudes que pueden tardar desde unos pocos milisegundos a medio segundo, dependiendo de la distancia entre el cliente y el servidor. La desventaja es que el cliente puede recibir cosas que ya tiene en su cache. Por supuesto que HTTP/2 soporta cancelación previa de tales solicitudes, pero aun así se malgastan recursos.</p>
      
          <p>Resumiendo: no hay una estrategia mejor sobre cómo usar esta característica de HTTP/2 y todo el mundo está experimentando con ella. Así que, ¿cómo experimenta usted con ella en Apache httpd?</p>
      
          <p><code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> busca e inspecciona las cabeceras de respuesta 
          <code>Link</code> con cierto formato:</p>
      
          <pre class="prettyprint lang-config">Link &lt;/xxx.css&gt;;rel=preload, &lt;/xxx.js&gt;; rel=preload</pre>
      
      
          <p>
              Si la conexión soporta PUSH, estos dos recursos se enviarán al cliente. 
              Como desarrollador web, puede configurar estas cabeceras o bien 
              directamente en la respuesta de su aplicación o configurar su servidor con:
          </p>
      
          <pre class="prettyprint lang-config">&lt;Location /xxx.html&gt;
          Header add Link "&lt;/xxx.css&gt;;rel=preload"
          Header add Link "&lt;/xxx.js&gt;;rel=preload"
      &lt;/Location&gt;</pre>
      
      
          <p>Si quiere usar enlaces con <code>preload</code> sin activar un PUSH, puede
          usar el parámetro <code>nopush</code>, como en:</p>
      
          <pre class="prettyprint lang-config">Link &lt;/xxx.css&gt;;rel=preload;nopush</pre>
      
      
          <p>o puede desactivar PUSH para su servidor por completo con la directiva </p>
      
          <pre class="prettyprint lang-config">H2Push Off</pre>
      
      
          <p>Y hay más:</p>
      
          <p>
              El módulo mantiene un registro de lo que se ha enviado con PUSH para cada
              conexión (hashes de URLs, básicamente) y no hará PUSH del mismo recurso dos
              veces. Cuando la conexión se cierra, la información es descartada.
          </p>
      
          <p>
              Hay gente pensando cómo un cliente puede decirle al servidor lo que ya
              tiene, para evitar los PUSH de esos elementos, pero eso algo muy
              experimental ahora mismo.
          </p>
      
          <p>Otro borrador experimental que ha sido implementado en 
          <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> es el <a href="https://tools.ietf.org/html/draft-ruellan-http-accept-push-policy-00"> Campo de Cabecera
          Accept-Push-Policy</a> en la que un cliente puede, para cada solicitud, definir 
          qué tipo de PUSH acepta.</p>
      
          <p>
              Puede que PUSH no siempre lance la peticion/respuesta/funcionamiento que
              uno espera. Hay varios estudios sobre este tema en internet, que explican
              el beneficio y las debilidades de como diferentes funcionalidades del
              cliente y de la red influyen en el resultado.
              Por Ejemplo, que un servidor haga "PUSH" de recursos, no significa que el 
              navegador vaya a usar dichos datos.
          </p>
          <p>
              Lo más importante que influye en la respuesta que se envía, es la solicitud
              que se simuló. La url de solicitud de un PUSH es dada por la aplicación,
              pero ¿de donde vienen las cabeceras de la petición? por ejemplo si el PUSH
              pide una cabecera <code>accept-language</code> y si es así, ¿con qué valor?
          </p>
          <p>Httpd mirará la petición original (la que originó el PUSH) y copiará las
              siguientes cabeceras a las peticiones PUSH:
              <code>user-agent</code>, <code>accept</code>, <code>accept-encoding</code>,
              <code>accept-language</code>, <code>cache-control</code>.
          </p>
          <p>
              Todas las otras cabeceras son ignorados. Las cookies tampoco serán copiadas.
              Impulsar los recursos que requieren una cookie para estar presente no
              funcionará. Esto puede ser una cuestión de debate. Pero a menos que esto se
              discuta más claramente con el navegador, evitemos el exceso de precaución y
              no expongamos las cookies donde podrían o no ser visibles.
          </p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="earlyhints" id="earlyhints">"Early Hints"</a></h2>
          
      
          <p>Una alternativa de "Pushear" recursos es mandar una cabecera 
              <code>Link</code> al cliente antes que la respuesta esté lista. Esto usa
              una caracteristica de HTTP que se llama  "Early Hints" y está descrita en
              la <a href="https://tools.ietf.org/html/rfc8297">RFC 8297</a>.</p>
          <p>Para poder usar esto, necesita habilitarlo explicitamente en el servidor 
          via</p>
          
          <pre class="prettyprint lang-config">H2EarlyHints on</pre>
      
          
          <p>(No está habilitado por defecto ya q ue algunos navegadores más antiguos 
              se caen con dichas  respuestas.)
          </p>
      
          <p>si esta funcionalidad esta activada, puede usar la directiva 
              <code class="directive"><a href="../mod/mod_http2.html#h2pushresource">H2PushResource</a></code> para que lance 
              "Early hints" y recursos mediante push:
          </p>
          <pre class="prettyprint lang-config">&lt;Location /xxx.html&gt;
          H2PushResource /xxx.css
          H2PushResource /xxx.js
      &lt;/Location&gt;</pre>
      
          <p>
              Esto lanzará una respuesta <code>"103 Early Hints"</code> a un cliente 
              tan pronto como el servidor <em>comience</em> a procesar la solicitud. 
              Esto puede ser mucho antes que en el momento en que se determinaron los 
              primeros encabezados de respuesta, dependiendo de su aplicación web.
          </p>
      
          <p>
              Si la directiva <code class="directive"><a href="../mod/mod_http2.html#h2push">H2Push</a></code> está 
              habilitada, esto comenzará el PUSH justo después de la respuesta 103.
              Sin embargo, si la directiva <code class="directive"><a href="../mod/mod_http2.html#h2push">H2Push</a></code> está dehabilitada, la respuesta 103 se le enviará al cliente.
          </p>
        </div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/http2.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/http2.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/http2.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentarios</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/http2.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/cgi.html.fr.utf8�����������������������������������������������������0000644�0000000�0000050�00000104315�13412755316�017537� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Tutoriel Apache : Contenu dynamique basé sur CGI - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Recettes et tutoriels</a></div><div id="page-content"><div id="preamble"><h1>Tutoriel Apache : Contenu dynamique basé sur CGI</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/cgi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/cgi.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/cgi.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/cgi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/cgi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#intro">Introduction</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#configuring">Configurer Apache pour autoriser CGI</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#writing">Ecrire un programme CGI</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#troubleshoot">Mais ça ne marche toujours pas !</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#behindscenes">Que se passe-t-il en coulisse</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#libraries">Bibliothèques et modules CGI</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#moreinfo">Pour plus d'informations</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="intro" id="intro">Introduction</a></h2>
          
      
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_alias.html">mod_alias</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="../mod/mod_cgid.html">mod_cgid</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code></li></ul></td></tr></table>
      
          <p>CGI (Common Gateway Interface) définit une méthode d'interaction
          entre un serveur web et des programmes générateurs de contenu
          externes, plus souvent appelés programmes CGI ou scripts CGI.
          Il s'agit d'une méthode simple pour ajouter du contenu dynamique à votre site
          web en utilisant votre langage de programmation préféré.
          Ce document est une introduction à la configuration de CGI sur votre
          serveur web Apache, et une initiation à l'écriture de programmes
          CGI.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuring" id="configuring">Configurer Apache pour autoriser CGI</a></h2>
          
      
          <p>Apache doit être configuré pour permettre l'exécution des
          programmes CGI, pour que vos programmes CGI puissent fonctionner
          correctement. Il existe plusieurs méthodes pour y parvenir.</p>
      
          <div class="warning">Note: si Apache a été compilé avec le support
          des modules partagés (DSO), vous devez vous assurer que le module CGI est
          chargé ; vous devez pour cela vérifier que la directive <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> correspondante n'a pas été
          commentée dans votre <code>httpd.conf</code>. Une directive correcte
          doit ressembler à ceci :
      
          <pre class="prettyprint lang-config">LoadModule cgid_module modules/mod_cgid.so</pre>
      
      
      
           Sous Windows, ou si l'on utilise un module MPM non-threadé comme prefork,
           une directive correctement configurée sera du style :
      
          <pre class="prettyprint lang-config">LoadModule cgi_module modules/mod_cgi.so</pre>
      </div>
      
      
          <h3><a name="scriptalias" id="scriptalias">ScriptAlias</a></h3>
            
      
            <p>La directive <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code> indique à Apache qu'un
            répertoire particulier est dédié aux programmes CGI. Apache
            considérera que tout fichier situé dans ce répertoire est un
            programme CGI, et tentera de l'exécuter lorsque cette ressource
            fera l'objet d'une requête client.</p>
      
            <p>La directive <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code> se présente comme suit
            :</p>
      
            <pre class="prettyprint lang-config">ScriptAlias "/cgi-bin/" "/usr/local/apache2/cgi-bin/"</pre>
      
      
            <p>Cet exemple est tiré de votre fichier de configuration
            <code>httpd.conf</code> par défaut, si vous avez installé Apache
            dans son répertoire par défaut. La directive <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code> est similaire à la
            directive <code class="directive"><a href="../mod/mod_alias.html#alias">Alias</a></code>, qui
            définit à quel répertoire particulier doit correspondre un préfixe
            d'URL. <code class="directive">Alias</code> et
            <code class="directive">ScriptAlias</code> sont généralement utilisés pour
            accéder à des répertoires situés en dehors du répertoire défini
            par la directive <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>. La différence entre
            <code class="directive">Alias</code> et <code class="directive">ScriptAlias</code>
            réside dans le fait que <code class="directive">ScriptAlias</code> indique
            en plus que tout ce qui se trouve sous le préfixe d'URL doit être
            considéré comme un programme CGI. Ainsi, l'exemple ci-dessus
            indique à Apache que toute requête pour une ressource commençant
            par <code>/cgi-bin/</code> doit être servie depuis le répertoire
            <code>/usr/local/apache2/cgi-bin/</code>, et doit être traitée en
            tant que programme CGI.</p>
      
            <p>Par exemple, si une requête pour l'URL
            <code>http://www.example.com/cgi-bin/test.pl</code> est
            effectuée, Apache tentera d'exécuter le fichier
            <code>/usr/local/apache2/cgi-bin/test.pl</code> et en renverra la
            sortie. Bien entendu, le fichier doit exister, être exécutable, et
            retourner sa sortie d'une manière particulière, sinon Apache
            renverra un message d'erreur.</p>
          
      
          <h3><a name="nonscriptalias" id="nonscriptalias">CGI en dehors des répertoires ScripAlias</a></h3>
            
      
            <p>Pour des raisons de sécurité, la localisation des programmes
            CGI est souvent restreinte aux
            répertoires définis par <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code>. De cette manière, les administrateurs
            peuvent contrôler précisément qui est autorisé à utiliser les
            programmes CGI. Cependant, si les précautions adéquates quant à
            la sécurité sont prises, il n'y a aucune raison pour que les
            programmes CGI ne puissent pas être exécutés depuis d'autres
            répertoires. Par exemple, vous pouvez autoriser les utilisateurs à
            enregistrer des contenus web dans leurs répertoires home à l'aide
            de la directive <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>. S'ils veulent mettre en
            oeuvre leurs propres programmes CGI, mais n'ont pas l'autorisation
            d'accès au répertoire <code>cgi-bin</code> principal, ils devront
            être en mesure d'exécuter ces programmes depuis un autre
            répertoire.</p>
      
            <p>L'autorisation d'exécution des programmes CGI dans un
            répertoire arbitraire se fait en deux étapes. En premier lieu, le
            gestionnaire <code>cgi-script</code> doit être activé à l'aide
            d'une directive <code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code> ou <code class="directive"><a href="../mod/core.html#sethandler">SetHandler</a></code>. En second lieu,
            <code>ExecCGI</code> doit être spécifié dans la directive <code class="directive"><a href="../mod/core.html#options">Options</a></code>.</p>
          
      
          <h3><a name="options" id="options">Utilisation d'options explicites pour permettre l'exécution
            des programmes CGI</a></h3>
            
      
            <p>Vous pouvez utiliser de manière explicite la directive
            <code class="directive"><a href="../mod/core.html#options">Options</a></code> dans le fichier de
            configuration de votre serveur principal, pour indiquer que
            l'exécution des programmes CGI est permise depuis un répertoire
            particulier :</p>
      
            <pre class="prettyprint lang-config">&lt;Directory "/usr/local/apache2/htdocs/somedir"&gt;
          Options +ExecCGI
      &lt;/Directory&gt;</pre>
      
      
            <p>La directive ci-dessus indique à Apache qu'il doit permettre
            l'exécution des fichiers CGI. Vous devez aussi indiquer au serveur
            quels fichiers sont des fichiers CGI. La directive <code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code> suivante indique au
            serveur qu'il doit traiter tous les fichiers possédant une
            extension <code>cgi</code> ou <code>pl</code> en tant que
            programmes CGI :</p>
      
            <pre class="prettyprint lang-config">AddHandler cgi-script .cgi .pl</pre>
      
          
      
          <h3><a name="htaccess" id="htaccess">Fichiers .htaccess</a></h3>
            
      
            <p>Le <a href="htaccess.html"><code>tutoriel
            .htaccess</code></a> montre comment activer les programmes
            CGI si vous n'avez pas accès au
            fichier <code>httpd.conf</code>.</p>
          
      
          <h3><a name="userdir" id="userdir">Répertoires utilisateurs</a></h3>
            
      
            <p>Pour permettre l'exécution en tant que programme CGI de tout
            fichier possédant l'extension <code>.cgi</code> et situé dans un
            répertoire utilisateur, vous pouvez utiliser la configuration
            suivante :</p>
      
            <pre class="prettyprint lang-config">&lt;Directory "/home/*/public_html"&gt;
          Options +ExecCGI
          AddHandler cgi-script .cgi
      &lt;/Directory&gt;</pre>
      
      
            <p>Pour indiquer un sous-répertoire <code>cgi-bin</code> d'un
            répertoire utilisateur où tout fichier sera traité en tant que
            programme CGI, vous pouvez utiliser ceci :</p>
      
            <pre class="prettyprint lang-config">&lt;Directory "/home/*/public_html/cgi-bin"&gt;
          Options ExecCGI
          SetHandler cgi-script
      &lt;/Directory&gt;</pre>
      
      
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="writing" id="writing">Ecrire un programme CGI</a></h2>
          
      
          <p>Il y a deux différences principales entre la programmation
          "standard" et la programmation CGI.</p>
      
          <p>En premier lieu, toute sortie de votre programme CGI doit être
          précédée d'un en-tête <a class="glossarylink" href="../glossary.html#mime-type" title="voir glossaire">MIME-type</a>. Il s'agit d'un
          en-tête HTTP qui indique au client quel type de contenu il reçoit.
          La plupart du temps, il se présente comme suit :</p>
      
          <div class="example"><p><code>
            Content-type: text/html
          </code></p></div>
      
          <p>En second lieu, votre sortie doit être en HTML, ou tout autre
          format qu'un navigateur est en mesure d'afficher. La plupart du
          temps, il s'agira de HTML, mais occasionnellement, vous pouvez être
          amené à écrire un programme CGI qui renvoie une image gif, ou un
          autre type de contenu non-HTML.</p>
      
          <p>A part ces deux différences, un programme CGI ressemblera à tout
          autre programme que vous pourriez être amené à écrire.</p>
      
          <h3><a name="firstcgi" id="firstcgi">Votre premier programme CGI</a></h3>
            
      
            <p>L'exemple suivant est un exemple de programme CGI qui permet
            d'afficher une ligne de caractères dans votre navigateur. Ecrivez
            ce qui suit, enregistrez le dans un fichier nommé
            <code>premier.pl</code>, et placez le dans votre répertoire
            <code>cgi-bin</code>.</p>
      
            <pre class="prettyprint lang-perl">#!/usr/bin/perl
      print "Content-type: text/html\n\n";
      print "Hello, World.";</pre>
      
      
            <p>Même si Perl ne vous est pas familier, vous devriez être
            capable de comprendre le fonctionnement de ce programme. La
            première ligne indique à Apache (ou à toute interface à partir de
            laquelle le programme s'exécute) que ce programme peut être
            exécuté en fournissant son fichier à l'interpréteur
            <code>/usr/bin/perl</code>. La seconde ligne affiche la
            déclaration du type de contenu considéré, suivie de deux paires
            "Retour chariot - Nouvelle ligne". Ceci a pour effet d'insérer une
            ligne vide après l'en-tête pour marquer la fin des en-têtes HTTP,
            et le début du corps du document. La troisième ligne affiche la
            chaîne de caractères "Bonjour tout le monde . . .". Et c'est tout
            ce dont vous avez besoin.</p>
      
            <p>Si vous ouvrez votre navigateur favori et lui indiquez
            l'adresse</p>
      
            <div class="example"><p><code>
              http://www.example.com/cgi-bin/premier.pl
            </code></p></div>
      
            <p>ou toute autre URL correspondant à votre programme CGI, Vous
            verrez la ligne <code>Bonjour tout le monde . . .</code>
            s'afficher dans la fenêtre de votre navigateur. Ce n'est pas
            extraordinaire, mais si vous y êtes parvenu, vous avez de bonnes
            chances d'y parvenir pour tout autre programme plus
            sophistiqué.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="troubleshoot" id="troubleshoot">Mais ça ne marche toujours pas !</a></h2>
          
      
          <p>Vous devriez voir au moins une des quatre sorties suivantes dans
          votre navigateur lorsque vous essayez d'accéder à votre programme
          CGI depuis le web :</p>
      
          <dl>
            <dt>Le flux de sortie de votre programme CGI</dt>
            <dd>Impeccable ! Cela signifie que tout fonctionne correctement.
            Si la sortie est correcte mais n'est pas traitée correctement par
            le navigateur, assurez-vous d'avoir défini
            <code>Content-Type</code> de manière appropriée dans votre
            programme CGI.</dd>
      
            <dt>Le code source de votre programme CGI ou un message "POST
            Method Not Allowed"</dt>
            <dd>Cela signifie que vous n'avez pas configuré Apache de manière
            à ce qu'il puisse traiter votre programme CGI. Relisez la section
            sur la <a href="#configuring">configuration d'Apache</a>, et
            essayez de trouver votre erreur.</dd>
      
            <dt>Un message commençant par "Forbidden"</dt>
            <dd>Ce type de message est révélateur d'un problème de
            droits. Consultez le <a href="#errorlogs">journal des erreurs
            d'Apache</a> et la section ci-dessous sur les <a href="#permissions">droits des fichiers</a>.</dd>
      
            <dt>Un message contenant "Internal Server Error"</dt>
            <dd>Si vous consultez le <a href="#errorlogs">journal des erreurs
            d'Apache</a>, vous y trouverez probablement des messages du type
            "Premature end of script headers" (Fin prématurée des en-têtes de
            script), éventuellement accompagnés d'un message d'erreur généré
            par votre programme CGI. Dans ce cas, il va vous falloir lire
            chacune des sections ci-dessous pour déterminer ce qui empêche
            votre programme CGI de générer les en-têtes appropriés.</dd>
          </dl>
      
          <h3><a name="permissions" id="permissions">Droits des fichiers</a></h3>
            
      
            <p>Souvenez-vous que le serveur ne s'exécute pas sous votre nom.
            En d'autres termes, lorsque le serveur a démarré, il s'exécute
            avec les droits d'un utilisateur non privilégié - en général
            <code>nobody</code>, ou <code>www</code> - et en conséquence, il
            aura besoin de droits supplémentaires pour pouvoir exécuter des
            fichiers dont vous êtes le propriétaire. En général, pour qu'un
            fichier ait des droits suffisants pour être exécutable par
            <code>nobody</code>, il suffit de lui attribuer des droits
            d'exécution pour tout le monde :</p>
      
            <div class="example"><p><code>
              chmod a+x premier.pl
            </code></p></div>
      
            <p>En outre, si votre programme doit pouvoir accéder en lecture
            et/ou écriture à d'autres fichiers, ces derniers devront avoir les
            droits appropriés.</p>
      
          
      
          <h3><a name="pathinformation" id="pathinformation">Chemin des exécutables (PATH) et variables
            d'environnement</a></h3>
            
      
            <p>Lorsque vous lancez un programme depuis la ligne de commande,
            certaines informations sont passées au shell sans que vous vous en
            doutiez. Par exemple, la variable <code>PATH</code> indique au
            shell où il doit rechercher les exécutables auxquels vous faites
            référence.</p>
      
            <p>Lorsqu'un programme s'exécute depuis le serveur web en tant que
            programme CGI, sa variable <code>PATH</code> n'aura peut-être pas
            la même valeur. Tout programme que vous invoquez dans votre
            programme CGI ( comme par exemple <code>sendmail</code>) devra
            être spécifié par son chemin complet, de façon à ce que le shell
            puisse le trouver lorsqu'il tentera d'exécuter votre programme
            CGI.</p>
      
            <p>Un exemple typique de spécification de programme est le chemin
            vers l'interpréteur de script (souvent <code>perl</code>) que l'on
            trouve à la première ligne de votre programme CGI et qui va
            ressembler à ceci :</p>
      
            <pre class="prettyprint lang-perl">#!/usr/bin/perl</pre>
      
      
            <p>Assurez-vous qu'il s'agit bien du chemin correct vers
            l'interpréteur.</p>
      
            <div class="warning">
            Lors de l'édition de scripts CGI sous Windows, il se peut que des
            caractères de fin de ligne soient ajoutés au chemin de
            l'interpréteur. Assurez-vous donc que les fichiers sont bien
            transmis au serveur en mode ASCII. Dans le cas contraire, l'OS
            pourra envoyer des avertissements "Command not found" à cause des
            caractères de fin de ligne non reconnus car considérés comme
            faisant partie du nom de fichier de l'interpréteur.
            </div>
      
            
      
          <h3><a name="missingenv" id="missingenv">Variables d'environnement manquantes</a></h3>
            
      
            <p>Si votre programme CGI dépend de <a href="#env">variables
            d'environnement</a> non standards, vous devrez vous assurez que
            ces variables lui sont bien transmises par Apache.</p>
      
            <p>Lorsque des en-têtes HTTP ne sont pas transmis à
            l'environnement, assurez-vous qu'ils sont bien formatés selon la
            <a href="http://tools.ietf.org/html/rfc2616">RFC 2616</a>, section
            4.2 : les noms d'en-têtes doivent commencer par une lettre,
            elle-même suivie de lettres, chiffres ou traits d'union. Tout
            en-tête dont le nom viole cette règle sera ignoré.</p>
      
          
      
          <h3><a name="syntaxerrors" id="syntaxerrors">Erreurs inhérentes au programme</a></h3>
            
      
            <p>La plupart des échecs dans l'exécution d'un programme CGI
            proviennent du programme lui-même. Ceci est particulièrement vrai
            lorsque ce satané programme CGI se bloque, alors que vous avez
            appris à ne plus commettre les deux erreurs précédentes. La
            première chose à faire est de vous assurer que votre programme
            s'exécute depuis la ligne de commande, avant de le tester à partir
            du serveur web. Par exemple, essayez :</p>
      
            <div class="example"><p><code>
            cd /usr/local/apache2/cgi-bin<br />
            ./premier.pl
            </code></p></div>
      
            <p>(N'invoquez pas l'interpréteur <code>perl</code>. Le shell et
            Apache doivent être capable de le déterminer à partir de <a href="#pathinformation">l'information sur le chemin</a> située sur
            la première ligne du script.)</p>
      
            <p>La première chose que vous devriez voir affichée par votre
            programme est un ensemble d'en-têtes HTTP, comprenant entre autres
            le <code>Content-Type</code>, et suivi d'une ligne vide. Si vous
            voyez quoi que ce soit d'autre, Apache renverra l'erreur
            <code>Premature end of script headers</code> si vous tentez
            d'exécuter le programme depuis le serveur. Voir <a href="#writing">Ecriture d'un programme CGI</a> ci-dessus pour
            plus de détails.</p>
          
      
          <h3><a name="errorlogs" id="errorlogs">Journalisation des erreurs</a></h3>
            
      
            <p>Les journaux d'erreurs sont vos amis. Toute anomalie de
            fonctionnement est consignée dans le journal des erreurs et c'est
            ici que vous devez regarder en premier en cas de problème. Si
            l'hébergeur de votre site ne vous donne pas accès au journal des
            erreurs, vous avez tout intérêt à vous tourner vers quelqu'un
            d'autre. Apprenez à déchiffrer les journaux d'erreurs, et vous
            vous apercevrez que la plupart des problèmes seront rapidement
            identifiés . . . et résolus.</p>
          
      
          <h3><a name="suexec" id="suexec">Suexec</a></h3>
            
      
            <p>Le programme <a href="../suexec.html">suexec</a> permet
            d'exécuter les programmes CGI avec des droits différents selon le
            serveur virtuel ou le répertoire utilisateur dans lequel ils
            se situent. Suexec effectue une vérification des droits très
            stricte, et toute anomalie détectée au cours de cette vérification
            entraînera un echec d'exécution de votre programme CGI avec
            affichage de l'erreur <code>Premature end of script
            headers</code>.</p>
      
            <p>Pour savoir si vous pouvez utiliser suexec, tapez la commande
            <code>apachectl -V</code>, et regardez le chemin indiqué par
            <code>SUEXEC_BIN</code>. Si au démarrage d'Apache, ce dernier
            trouve un exécutable <code class="program"><a href="../programs/suexec.html">suexec</a></code> dans ce chemin,
            suexec sera activé.</p>
      
            <p>Si vous ne maîtrisez pas le fonctionnement de suexec, il vous
            est déconseillé de l'utiliser. Pour désactiver suexec, supprimer
            simplement (ou renommez) l'exécutable <code class="program"><a href="../programs/suexec.html">suexec</a></code>
            pointé par <code>SUEXEC_BIN</code> et redémarrez le serveur. Si
            après une lecture de <a href="../suexec.html">suexec</a>, vous
            décidez quand-même de l'utiliser, tapez la commande <code>suexec
            -V</code> pour voir où se situe le journal de suexec, et utilisez
            ce dernier pour déterminer quelles règles vous violez
            éventuellement.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="behindscenes" id="behindscenes">Que se passe-t-il en coulisse</a></h2>
          
      
          <p>Lorsque vos compétences en programmation CGI seront plus
          poussées, il s'avérera intéressant pour vous de mieux comprendre ce
          qui se passe en coulisse, et en particulier la manière dont le
          navigateur et le serveur dialoguent entre eux. En effet, bien qu'il
          soit tout à fait louable d'écrire un programme qui affiche "Bonjour
          tout le monde . . .", cela ne sert pas à grand chose.</p>
      
          <h3><a name="env" id="env">Variables d'environnement</a></h3>
            
      
            <p>Les variables d'environnement sont des valeurs qui gravitent
            autour de vous lorsque vous utilisez votre ordinateur. Elles sont
            très utiles, à l'instar de votre chemin par défaut (où votre
            ordinateur va rechercher le fichier physique correspondant à la
            commande que vous avez tapée), votre nom d'utilisateur, le type de
            votre terminal, etc... Pour obtenir une liste complète des
            variables d'environnement standards que vous utilisez tous les
            jours, tapez <code>env</code> dans votre interpréteur
            de commandes.</p>
      
            <p>Au cours de la transaction CGI, le serveur et le navigateur
            définissent aussi des variables d'environnement, de façon à ce
            qu'ils puissent communiquer entre eux. Ces variables définissent
            entre autre le type de navigateur (Netscape, IE, Lynx), le type de
            serveur (Apache, IIS, WebSite), le nom du programme CGI en cours
            d'exécution, etc...</p>
      
            <p>Ces variables sont à la disposition du programmeur CGI, et
            elles constituent 50% de la communication client-serveur. La liste
            complète des variables requises se trouve à
            <a href="http://www.ietf.org/rfc/rfc3875">Common Gateway
            Interface RFC</a>.</p>
      
            <p>Ce programme CGI basique en Perl permet d'afficher toutes les
            variables d'environnement qui sont échangées. Deux programmes
            similaires sont fournis avec la distribution d'Apache et situés
            dans le répertoire <code>cgi-bin</code>.
            Notez que certaines variables sont
            obligatoires, alors que d'autres sont optionnelles, si bien que
            vous verrez s'afficher certaines variables qui ne font pas partie
            de la liste officielle. De plus, Apache vous propose de nombreuses
            méthodes pour <a href="../env.html">ajouter vos propres
            variables d'environnement</a> aux variables de base fournies par
            défaut.</p>
      
            <pre class="prettyprint lang-perl">#!/usr/bin/perl
      use strict;
      use warnings;
      
      print "Content-type: text/html\n\n";
      foreach my $key (keys %ENV) {
          print "$key --&gt; $ENV{$key}&lt;br&gt;";
      }</pre>
      
          
      
          <h3><a name="stdin" id="stdin">STDIN et STDOUT</a></h3>
            
      
            <p>L'entrée standard (<code>STDIN</code>) et la sortie standard
            (<code>STDOUT</code>) constituent d'autres voies de communication
            entre le client et le serveur. Dans un contexte normal,
            <code>STDIN</code> correspond au clavier, ou à un fichier fourni
            au programme à des fins de traitement, et <code>STDOUT</code> à la
            console ou à l'écran.</p>
      
            <p>Lorsque vous transmettez un formulaire web à un programme CGI
            par la méthode <code>POST</code>, les données de ce formulaire
            sont transcrites dans un format spécial et transmises à votre
            programme CGI via <code>STDIN</code>. Le programme peut alors les
            traiter comme si elles provenaient du clavier ou d'un
            fichier.</p>
      
            <p>Ce "format spécial" est très simple. Un nom de champ et sa
            valeur sont reliés entre eux par un signe "égal" (=), et chacune
            de ces paires nom champ/valeur est séparée de la suivante par un
            "et" commercial (&amp;). Les caractères
            spéciaux comme les espaces, les "et" commerciaux, et les signes
            "égal" sont convertis en leur équivalent hexadécimal pour éviter
            qu'ils ne gâchent le travail. La chaîne contenant les données doit
            ressembler à ceci :</p>
      
            <div class="example"><p><code>
              name=Rich%20Bowen&amp;city=Lexington&amp;state=KY&amp;sidekick=Squirrel%20Monkey
            </code></p></div>
      
            <p>Vous verrez aussi parfois une chaîne de ce type accolée à une
            URL. Dans ce cas, le serveur enregistre cette chaîne dans la
            variable d'environnement appelée <code>QUERY_STRING</code>. On a
            alors affaire à une requête de type <code>GET</code>. Votre
            formulaire HTML indique laquelle des méthodes <code>GET</code> ou
            <code>POST</code> est utilisée pour transmettre les données, en
            définissant l'attribut <code>METHOD</code> au niveau de la balise
            <code>FORM</code>.</p>
      
            <p>Votre programme est ensuite chargé d'extraire les informations
            utiles de cette chaîne. Heureusement, des bibliothèques et des
            modules sont à votre disposition pour vous aider à traiter ces
            données, et à gérer les différents aspects de votre programme
            CGI.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="libraries" id="libraries">Bibliothèques et modules CGI</a></h2>
          
      
          <p>Pour écrire un programme CGI, il vous est conseillé d'utiliser
          une bibliothèque de code, ou un module, qui effectueront une grande
          partie du travail de base pour vous. Ceci vous permettra de diminuer
          le nombre d'erreurs et d'accélérer le développement.</p>
      
          <p>Si vous écrivez des programmes CGI en Perl, des modules sont à
          votre disposition à <a href="http://www.cpan.org/">CPAN</a>. A ce
          sujet, le module le plus populaire est <code>CGI.pm</code>. Vous
          pouvez aussi essayer <code>CGI::Lite</code>, qui implémente les
          fonctionnalités strictement nécessaires, mais suffisantes pour
          la majorité des programmes.</p>
      
          <p>Si vous écrivez des programmes CGI en C, vous disposez de
          nombreuses options. L'une d'elles est la bibliothèque
          <code>CGIC</code> de <a href="http://www.boutell.com/cgic/">http://www.boutell.com/cgic/</a>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="moreinfo" id="moreinfo">Pour plus d'informations</a></h2>
          
      
          <p>La spécification CGI actuelle est disponible dans la <a href="http://www.ietf.org/rfc/rfc3875">Common Gateway
          Interface RFC</a>.</p>
      
          <p>Lorsque vous postez une question à propos d'un problème CGI que
          vous rencontrez, que ce soit dans une liste de diffusion ou dans un
          newsgroup, faites en sorte de fournir suffisamment d'informations
          sur le problème rencontré, ce que vous attendiez exactement, et en
          quoi ce qui se produit est réellement différent de ce que vous
          attendiez, quel serveur vous utilisez, en quel langage votre
          programme CGI a été écrit, et, si possible, son code source. Ceci
          permettra une résolution plus aisée de votre problème.</p>
      
          <p>Notez que les questions à propos de problèmes CGI ne doivent
          <strong>jamais</strong> être postées dans la base de données de
          bogues d'Apache, à moins que vous ne soyez sûr d'avoir trouvé un
          problème dans le code source d'Apache.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/cgi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/cgi.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/cgi.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/cgi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/cgi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/cgi.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/htaccess.html.fr.utf8������������������������������������������������0000644�0000000�0000050�00000074464�13412755316�020605� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Tutoriel du serveur HTTP Apache : fichiers .htaccess - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Recettes / Tutoriels</a></div><div id="page-content"><div id="preamble"><h1>Tutoriel du serveur HTTP Apache : fichiers .htaccess</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/htaccess.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/htaccess.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/htaccess.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/htaccess.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/htaccess.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../pt-br/howto/htaccess.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a></p>
      </div>
      
      <p>Les fichiers <code>.htaccess</code> fournissent une méthode pour
      modifier la configuration du serveur au niveau de chaque répertoire.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Fichiers .htaccess</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#what">Que sont ce fichiers, comment les utiliser ?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#when">Quand doit-on (ne doit-on pas) utiliser
          les fichiers .htaccess ?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#how">Comment sont appliquées les directives ?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#auth">Exemple d'authentification</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ssi">Exemple d'Inclusion Côté Serveur (Server Side
      Includes - SSI)</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#rewrite">Les règles de réécriture dans les fichiers .htaccess</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cgi">Exemple de CGI</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#troubleshoot">Résolution des problèmes</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Fichiers .htaccess</a></h2>
          
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="../mod/core.html">core</a></code></li><li><code class="module"><a href="../mod/mod_authn_file.html">mod_authn_file</a></code></li><li><code class="module"><a href="../mod/mod_authz_groupfile.html">mod_authz_groupfile</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="../mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="../mod/mod_mime.html">mod_mime</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#accessfilename">AccessFileName</a></code></li><li><code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code></li><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="../mod/core.html#sethandler">SetHandler</a></code></li><li><code class="directive"><a href="../mod/mod_authn_core.html#authtype">AuthType</a></code></li><li><code class="directive"><a href="../mod/mod_authn_core.html#authname">AuthName</a></code></li><li><code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code></li><li><code class="directive"><a href="../mod/mod_authz_groupfile.html#authgroupfile">AuthGroupFile</a></code></li><li><code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code></li></ul></td></tr></table>
          <div class="note">Les fichiers <code>.htaccess</code> ne doivent être utilisés
          que si vous n'avez pas accès au fichier de configuration du serveur
          principal. L'utilisation des fichiers <code>.htaccess</code>
          ralentit le fonctionnement de votre serveur HTTP Apache. Il est toujours
          préférable de définir les directives que vous pouvez inclure dans un
          fichier <code>.htaccess</code> dans une section <code class="directive"><a href="../mod/core.html#directory">Directory</a></code>, car elles produiront le
          même effet avec de meilleures performances.</div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="what" id="what">Que sont ce fichiers, comment les utiliser ?</a></h2>
      
      
          <p>Les fichiers <code>.htaccess</code> (ou "fichiers de
          configuration distribués") fournissent une méthode pour modifier la
          configuration du serveur au niveau d'un répertoire. Un fichier,
          contenant une ou plusieurs directives de configuration, est placé
          dans un répertoire de documents particulier, et ses directives
          s'appliquent à ce répertoire et à tous ses sous-répertoires.</p>
      
          <div class="note"><h3>Note :</h3>
            <p>Si vous voulez donner un autre nom à votre fichier
            <code>.htaccess</code>, vous pouvez le faire en utilisant la
            directive <code class="directive"><a href="../mod/core.html#accessfilename">AccessFileName</a></code>. Par
            exemple, si vous préférez nommer votre fichier
            <code>.config</code>, vous pouvez mettre ceci dans le fichier de
            configuration de votre serveur :</p>
      
            <pre class="prettyprint lang-config">AccessFileName ".config"</pre>
      
          </div>
      
          <p>En général, les fichiers <code>.htaccess</code> utilisent la même
          syntaxe que les <a href="../configuring.html#syntax">fichiers de
          configuration principaux</a>. Ce que vous pouvez mettre dans ces
          fichier est déterminé par la directive <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>. Cette directive spécifie,
          sous forme de catégories, quelles directives seront traitées si
          elles se trouvent dans un fichier <code>.htaccess</code>. Si une
          directive est permise dans un fichier <code>.htaccess</code> file,
          la documentation de cette directive contiendra une section Override,
          spécifiant quelle valeur doit prendre <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> pour que cette directive
          soit traitée.</p>
      
          <p>Par exemple, si vous regardez la documentation de la directive
          <code class="directive"><a href="../mod/core.html#adddefaultcharset">AddDefaultCharset</a></code>, vous verrez
          que cette dernière est permise dans les fichiers
          <code>.htaccess</code> (Voir la ligne de contexte dans le résumé de
          la directive). La ligne <a href="../mod/directive-dict.html#Context">Override</a> indique
          <code>FileInfo</code>. Vous devez donc avoir au moins
          <code>AllowOverride FileInfo</code> pour que cette directive soit
          traitée dans les fichiers <code>.htaccess</code>.</p>
      
          <div class="example"><h3>Exemple :</h3><table>
              <tr>
                <td><a href="../mod/directive-dict.html#Context">Contexte :</a></td>
                <td>configuration du serveur, serveur virtuel, directory, .htaccess</td>
              </tr>
      
              <tr>
                <td><a href="../mod/directive-dict.html#Override">Override:</a></td>
                <td>FileInfo</td>
              </tr>
            </table></div>
      
          <p>Si vous n'êtes pas sûr qu'une directive particulière soit permise
          dans un fichier <code>.htaccess</code>, lisez la documentation de
          cette directive, et consultez la ligne de contexte pour
          ".htaccess".</p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="when" id="when">Quand doit-on (ne doit-on pas) utiliser
          les fichiers .htaccess ?</a></h2>
      
          <p>En principe, vous ne devriez utiliser les fichiers
          <code>.htaccess</code> que lorsque vous n'avez pas accès au fichier de
          configuration du serveur principal. Par exemple, la fausse
          idée
          selon laquelle l'authentification de l'utilisateur devrait toujours
          être faite dans les fichiers <code>.htaccess</code> est très
          répandue. Il est aussi souvent avancé, ces dernières
          années, que les directives de <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code> doivent
          être définies dans les fichiers <code>.htaccess</code>. Ceci est
          tout simplement faux. Vous pouvez configurer
          l'authentification des utilisateurs au niveau de la configuration du
          serveur principal, et c'est en fait cette méthode qui doit être
          privilégiée. De même, les directives de
          <code>mod_rewrite</code> fonctionneront mieux, à de nombreux égards,
          dans le contexte du serveur principal.</p>
      
          <p>Les fichiers <code>.htaccess</code> ne devraient être utilisés
          que dans le cas où les fournisseurs de contenu ont besoin de
          modifier la configuration du serveur au niveau d'un répertoire, mais
          ne possèdent pas l'accès root sur le système du serveur. Si
          l'administrateur du serveur ne souhaite pas effectuer des
          modifications de configuration incessantes, il peut être intéressant
          de permettre aux utilisateurs isolés d'effectuer eux-mêmes ces
          modifications par le biais de fichiers <code>.htaccess</code>. Ceci
          est particulièrement vrai dans le cas où le fournisseur d'accès à
          Internet héberge de nombreux sites d'utilisateurs sur un seul
          serveur, et souhaite que ces utilisateurs puissent modifier
          eux-mêmes leurs configurations.</p>
      
          <p>Cependant et d'une manière générale, il vaut mieux éviter
          d'utiliser les fichiers <code>.htaccess</code>. Tout élément de
          configuration que vous pourriez vouloir mettre dans un fichier
          <code>.htaccess</code>, peut aussi être mis, et avec la même
          efficacité, dans une section <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> du fichier de configuration de
          votre serveur principal.</p>
      
          <p>Il y a deux raisons principales d'éviter l'utilisation des
          fichiers <code>.htaccess</code>.</p>
      
          <p>La première est liée aux performances. Lorsque la directive
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> est définie de
          façon à autoriser l'utilisation des fichiers <code>.htaccess</code>,
          httpd va rechercher leur présence dans chaque répertoire. Ainsi,
          permettre l'utilisation des fichiers <code>.htaccess</code> est déjà
          en soi une cause de dégradation des performances, que vous utilisiez
          effectivement ces fichiers ou non ! De plus, le fichier
          <code>.htaccess</code> est chargé en mémoire chaque fois qu'un
          document fait l'objet d'une requête.</p>
      
          <p>Notez aussi que httpd doit rechercher les fichiers
          <code>.htaccess</code> dans tous les répertoires de niveau
          supérieur, afin de rassembler toutes les directives qui s'appliquent
          au répertoire courant (Voir la section <a href="#how">comment sont
          appliquées les directives</a>). Ainsi, si un fichier fait l'objet
          d'une requête à partir d'un répertoire
          <code>/www/htdocs/exemple</code>, httpd doit rechercher les
          fichiers suivants :</p>
      
          <div class="example"><p><code>
            /.htaccess<br />
            /www/.htaccess<br />
            /www/htdocs/.htaccess<br />
            /www/htdocs/exemple/.htaccess
          </code></p></div>
      
          <p>En conséquence, chaque accès à un fichier de ce répertoire
          nécessite 4 accès au système de fichiers supplémentaires pour
          rechercher des fichiers <code>.htaccess</code>, même si
          aucun de ces fichiers n'est présent. Notez que cet exemple ne peut
          se produire que si les fichiers <code>.htaccess</code> ont été
          autorisés pour le répertoire <code>/</code>, ce qui est rarement le
          cas.</p>
      
          <p>La seconde raison d'éviter l'utilisation des fichiers
          <code>.htaccess</code> est liée à la sécurité. Si vous permettez aux
          utilisateurs de modifier la configuration du serveur, il peut en
          résulter des conséquences sur lesquelles vous n'aurez aucun
          contrôle. Réfléchissez bien avant de donner ce privilège à vos
          utilisateurs. Notez aussi que ne pas donner aux utilisateurs les
          privilèges dont ils ont besoin va entraîner une augmentation des
          demandes de support technique. Assurez-vous d'avoir informé
          clairement vos utilisateurs du niveau de privilèges que vous leur
          avez attribué. Indiquer exactement comment vous avez défini la
          directive <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> et
          diriger les utilisateurs vers la documentation correspondante vous
          évitera bien des confusions ultérieures.</p>
      
          <p>Notez que mettre un fichier <code>.htaccess</code> contenant une
          directive dans un répertoire <code>/www/htdocs/exemple</code>
          revient exactement au même que mettre la même directive dans une
          section Directory <code>&lt;Directory "/www/htdocs/exemple"&gt;</code>
          du fichier de configuration de votre serveur principal :</p>
      
          <p>Fichier <code>.htaccess</code> dans
          <code>/www/htdocs/exemple</code> :</p>
      
          <div class="example"><h3>Contenu du fichier .htaccess dans
          <code>/www/htdocs/exemple</code></h3><pre class="prettyprint lang-config">AddType text/example ".exm"</pre>
      </div>
      
          <div class="example"><h3>Section de votre fichier
          <code>httpd.conf</code></h3><pre class="prettyprint lang-config">&lt;Directory "/www/htdocs/example"&gt;
          AddType text/example .exm
      &lt;/Directory&gt;</pre>
      </div>
      
          <p>Cependant, la perte de performances sera moindre si vous
          définissez cette directive dans la configuration de
          votre serveur principal, car cette dernière ne sera chargée qu'une
          seule fois au moment du démarrage du serveur, alors qu'elle le sera
          à chaque accès dans le cas d'un fichier <code>.htaccess</code>.</p>
      
          <p>L'utilisation des fichiers <code>.htaccess</code> peut être
          entièrement désactivée en définissant la directive <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> à <code>none</code> :</p>
      
          <pre class="prettyprint lang-config">AllowOverride None</pre>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="how" id="how">Comment sont appliquées les directives ?</a></h2>
      
          <p>Les directives de configuration situées dans un fichier
          <code>.htaccess</code> s'appliquent au répertoire dans lequel ce
          fichier <code>.htaccess</code> se trouve, ainsi qu'à tous ses
          sous-répertoires. Cependant, il est important de garder à l'esprit
          qu'il peut y avoir des fichiers <code>.htaccess</code> dans les
          répertoires de niveau supérieur. Les directives sont appliquées
          selon l'ordre dans lequel elles sont rencontrées. Ainsi, les
          directives d'un fichier <code>.htaccess</code> situé dans un
          répertoire particulier peuvent écraser les directives se trouvant
          dans des fichiers <code>.htaccess</code> situés à un niveau
          supérieur dans l'arborescence des répertoires. Et ces dernières
          peuvent elles-mêmes avoir écrasé des directives d'un fichier
          <code>.htaccess</code> situé à un niveau encore plus haut, ou dans
          le fichier de configuration du serveur principal.</p>
      
          <p>Exemple :</p>
      
          <p>Dans le répertoire <code>/www/htdocs/exemple1</code> se trouve un
          fichier <code>.htaccess</code> contenant ce qui suit :</p>
      
          <pre class="prettyprint lang-config">Options +ExecCGI</pre>
      
      
          <p>Note : "<code>AllowOverride Options</code>" doit être présent
          pour permettre l'utilisation de la directive "<code class="directive"><a href="../mod/core.html#options">Options</a></code>"  dans les fichiers
          <code>.htaccess</code>.</p>
      
          <p>Dans le répertoire <code>/www/htdocs/exemple1/exemple2</code> se
          trouve un fichier <code>.htaccess</code> contenant ce qui suit
          :</p>
      
          <pre class="prettyprint lang-config">Options Includes</pre>
      
      
          <p>Ainsi, à cause de ce second fichier <code>.htaccess</code> du
          répertoire <code>/www/htdocs/exemple1/exemple2</code>, l'exécution
          des CGI est interdite, car la dernière définition d'options
          <code>Options Includes</code> écrase toute autre définition
          d'options d'un fichier <code>.htaccess</code> situé dans un
          répertoire de niveau supérieur.</p>
      
          <h3><a name="merge" id="merge">Interactions entre les fichiers .htaccess
          et les fichiers de configuration du serveur principal</a></h3>
      
          <p>Comme indiqué dans la documentation sur les <a href="../sections.html">Sections de configuration</a>, les fichiers
          <code>.htaccess</code> peuvent écraser les directives des sections
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> pour
          le répertoire correspondant, mais peuvent eux-mêmes être écrasés
          par d'autres types de sections des fichiers de la
          configuration principale. Cette possibilité peut s'avérer utile pour
          forcer certaines configurations, même en cas de présence de l'option
          libérale <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>. Par
          exemple, pour interdire l'exécution de scripts en autorisant la
          définition de toute autre option dans les fichiers
          <code>.htaccess</code>, vous pouvez utiliser :</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/htdocs"&gt;
          AllowOverride All
      &lt;/Directory&gt;
      
      &lt;Location "/"&gt;
          Options +IncludesNoExec -ExecCGI
      &lt;/Location&gt;</pre>
      
      
          <div class="note">Dans cet exemple, on considère que le chemin défini par la
          directive <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code> est
          <code>/www/htdocs</code>.</div>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="auth" id="auth">Exemple d'authentification</a></h2>
      
          <p>Si vous accédez directement à ce point du document pour apprendre
          à effectuer une authentification, il est important de noter ceci. Il
          existe une fausse idée selon laquelle il serait nécessaire
          d'utiliser les fichiers <code>.htaccess</code> pour implémenter
          l'authentification par mot de passe. Ceci est tout simplement faux.
          Pour y parvenir, il est préférable de mettre les directives
          d'authentification dans une section <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> du fichier de configuration de
          votre serveur principal, et les fichiers <code>.htaccess</code> ne
          devraient être utilisés que dans le cas où vous n'avez pas accès au
          fichier de configuration du serveur principal. Voir <a href="#when">ci-dessus</a> pour savoir dans quels cas vous devez ou
          ne devez pas utiliser les fichiers <code>.htaccess</code>.</p>
      
          <p>Ceci étant dit, si vous pensez que vous devez quand-même utiliser
          un fichier <code>.htaccess</code>, vous pouvez utiliser la
          configuration suivante :</p>
      
          <p>Contenu du fichier <code>.htaccess</code> :</p>
      
          <pre class="prettyprint lang-config">AuthType Basic
      AuthName "Password Required"
      AuthUserFile "/www/passwords/password.file"
      AuthGroupFile "/www/passwords/group.file"
      Require group admins</pre>
      
      
          <p>Notez que <code>AllowOverride AuthConfig</code> doit être présent
          pour que ces directives produisent leur effet.</p>
      
          <p>Vous pouvez vous référer au <a href="auth.html">tutoriel sur
          l'authentification</a> pour une description plus détaillée de
          l'authentification et de l'autorisation.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ssi" id="ssi">Exemple d'Inclusion Côté Serveur (Server Side
      Includes - SSI)</a></h2>
      
          <p>Les fichiers <code>.htaccess</code> sont aussi couramment
          utilisés pour activer les SSI pour un répertoire particulier. Pour y
          parvenir, on utilise les directives de configuration suivantes,
          placées dans un fichier <code>.htaccess</code> enregistré dans le
          répertoire considéré :</p>
      
          <pre class="prettyprint lang-config">Options +Includes
      AddType text/html shtml
      AddHandler server-parsed shtml</pre>
      
      
          <p>Notez que <code>AllowOverride Options</code> et <code>AllowOverride
          FileInfo</code> doivent être tous les deux présents pour que ces
          directives puissent produire leur effet.</p>
      
          <p>Vous pouvez vous référer au <a href="ssi.html">tutoriel SSI</a>
          pour une description plus détaillée des SSI.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rewrite" id="rewrite">Les règles de réécriture dans les fichiers .htaccess</a></h2>
      <p>Sivous utilisez des directives <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> dans un fichier
      <code>.htaccess</code>, gardez à l'esprit que les choses sont légèrement
      différentes dans un contexte de répertoire. En particulier, les règles
      sont relatives au répertoire courant, et non à l'URI original. Considérez
      les exemples suivants :</p>
      
      <pre class="prettyprint lang-config"># Dans httpd.conf
      RewriteRule "^/images/(.+)\.jpg" "/images/$1.png"
      
      # Dans un fichier .htaccess situé dans le répertoire racine de vos
      # documents
      RewriteRule "^images/(.+)\.jpg" "images/$1.png"
      
      # Dans un fichier .htaccess situé dans le répertoire images/
      RewriteRule "^(.+)\.jpg" "$1.png"</pre>
      
      
      <p>On voit que si le fichier <code>.htaccess</code> se situe à la racine
      de vos documents, le slash de tête est supprimé de la valeur de
      remplacement spécifiée pour la règle <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code>, et que si le fichier
      <code>.htaccess</code> se situe dans le répertoire <code>images</code>,
      la chaîne <code>/images/</code> disparaît de cette même valeur de
      remplacement. Il doit donc en être de même dans votre expression
      rationnelle.</p>
      
      <p>Veuillez vous référer à cette <a href="../rewrite/">documentation</a>
      pour une étude détaillée de l'utilisation du module
      <code>mod_rewrite</code>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cgi" id="cgi">Exemple de CGI</a></h2>
      
          <p>En fin de compte, vous avez décidé d'utiliser un fichier
          <code>.htaccess</code> pour permettre l'exécution des programmes CGI
          dans un répertoire particulier. Pour y parvenir, vous pouvez
          utiliser la configuration suivante :</p>
      
          <pre class="prettyprint lang-config">Options +ExecCGI
      AddHandler cgi-script cgi pl</pre>
      
      
          <p>Alternativement, si vous souhaitez que tous les fichiers d'un
          répertoire donné soient considérés comme des programmes CGI, vous
          pouvez utiliser la configuration suivante :</p>
      
          <pre class="prettyprint lang-config">Options +ExecCGI
      SetHandler cgi-script</pre>
      
      
          <p>Notez que <code>AllowOverride Options</code> et <code>AllowOverride
          FileInfo</code> doivent être tous les deux présents pour que ces
          directives puissent produire leur effet.</p>
      
          <p>Vous pouvez vous référer au <a href="cgi.html">tutoriel CGI</a>
          pour une description plus détaillée de la configuration et de la
          proprammation CGI.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="troubleshoot" id="troubleshoot">Résolution des problèmes</a></h2>
      
          <p>De nombreuses raisons peuvent être à l'origine du fait que
          les directives que vous avez mises dans un fichier
          <code>.htaccess</code> ne produisent pas l'effet désiré.</p>
      
          <p>Le plus souvent, le problème vient du fait que la définition de
          la directive <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>
          ne permet pas l'activation des directives de votre fichier
          <code>.htaccess</code>. Vérifiez si une directive
          <code>AllowOverride None</code> n'affecte pas le répertoire où se
          trouve votre fichier. Un bon test consiste à mettre des directives
          dont la syntaxe est erronée dans votre ficher <code>.htaccess</code>
          et de recharger la page. Si aucune erreur n'est générée par le
          serveur, il est pratiquement certain qu'une directive
          <code>AllowOverride None</code> affecte votre répertoire.</p>
      
          <p>Par contre, si vous obtenez des erreurs de serveur lorsque vous
          tentez d'accéder à des documents, consultez votre journal des
          erreurs de httpd. Il vous indiquera probablement que la directive
          utilisée dans votre fichier <code>.htaccess</code> n'est pas
          permise.</p>
      
      <div class="example"><p><code>
      	[Fri Sep 17 18:43:16 2010] [alert] [client 192.168.200.51] /var/www/html/.htaccess: DirectoryIndex not allowed here
      </code></p></div>
      	<p>Cela signifie soit que vous utilisez une directive qui n'est
      	jamais permise dans les fichiers <code>.htaccess</code>, soit
      	que vous n'avez tout simplement pas défini la directive
      	<code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> à un niveau
      	suffisant pour la directive que vous utilisez. Consultez la
      	documentation de cette directive pour déterminer quel cas
      	s'applique.</p>
      
      	<p>Le journal des erreurs peut aussi vous signaler une erreur de
      	syntaxe dans l'usage de la directive elle-même.</p>
      
          <div class="example"><p><code>
          [Sat Aug 09 16:22:34 2008] [alert] [client 192.168.200.51] /var/www/html/.htaccess: RewriteCond: bad flag delimiters
          </code></p></div>
      
      	<p>Dans ce cas, le message d'erreur sera spécifique à l'erreur
      	de syntaxe que vous avez commise.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/htaccess.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/htaccess.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/htaccess.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/htaccess.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/htaccess.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../pt-br/howto/htaccess.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/htaccess.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/access.html.es�������������������������������������������������������0000644�0000000�0000050�00000034410�13520523022�017332� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Control de Acceso - Servidor HTTP Apache Versión 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="../">Versión 2.4</a> &gt; <a href="./">How-To / Tutoriales</a></div><div id="page-content"><div id="preamble"><h1>Control de Acceso</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/access.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/access.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/access.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>El control de acceso, hace referencia a todos los medios que proporcionan
              una forma de controlar el acceso a cualquier recurso. Esta parte está
              separada de <a href="auth.html">autenticación y autorización</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Módulos y Directivas relacionados</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#host">Control de Acceso por host</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#env">Control de acceso por variables arbitrarias.</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#rewrite">Control de acceso con mod_rewrite</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#moreinformation">Más información</a></li>
      </ul><h3>Consulte también</h3><ul class="seealso"><li><a href="#comments_section">Comentarios</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Módulos y Directivas relacionados</a></h2>
      
          <p>El control de acceso puede efectuarse mediante diferentes módulos. Los 
          más importantes de éstos son <code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code> y
          <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code>. También se habla en este documento de
          el control de acceso usando el módulo <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="host" id="host">Control de Acceso por host</a></h2>
          <p>
          Si lo que se quiere es restringir algunas zonas del sitio web, basándonos
          en la dirección del visitante, esto puede ser realizado de manera 
          fácil con el módulo <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code>.
          </p>
      
          <p>La directiva <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>
          proporciona una variedad de diferentes maneras de permitir o denegar el acceso a los recursos. Además puede ser usada junto con las directivas:<code class="directive"><a href="../mod/mod_authz_core.html#requireall">RequireAll</a></code>, <code class="directive"><a href="../mod/mod_authz_core.html#requireany">RequireAny</a></code>, y <code class="directive"><a href="../mod/mod_authz_core.html#requirenone">RequireNone</a></code>, estos requerimientos pueden
          ser combinados de forma compleja y arbitraria, para cumplir cualquiera que
          sean tus políticas de acceso.</p>
      
          <div class="warning"><p>
          Las directivas <code class="directive"><a href="../mod/mod_access_compat.html#allow">Allow</a></code>,
          <code class="directive"><a href="../mod/mod_access_compat.html#deny">Deny</a></code>, y
          <code class="directive"><a href="../mod/mod_access_compat.html#order">Order</a></code>,
          proporcionadas por <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code>, están obsoletas y
          serán quitadas en futuras versiones. Deberá evitar su uso, y también
          los tutoriales desactualizaos que recomienden su uso.
          </p></div>
      
          <p>El uso de estas directivas es:</p>
      
       
          <pre class="prettyprint lang-config">Require host <var>address</var> <br />
      Require ip <var>ip.address</var>
          </pre>
      
      
          <p>En la primera línea, <var>address</var> es el FQDN de un nombre de 
          dominio (o un nombre parcial del dominio); puede proporcionar múltiples
          direcciones o nombres de dominio, si se desea.
          </p>
      
          <p>En la segunda línea, <var>ip.address</var> es la dirección IP, una
          dirección IP parcial, una red con su máscara, o una especificación red/nnn 
          CIDR. Pueden usarse tanto IPV4 como IPV6.</p>
      
          <p>Consulte también <a href="../mod/mod_authz_host.html#requiredirectives">la 
          documentación de mod_authz_host </a> para otros ejemplos de esta sintaxis.
          </p>
      
          <p>Puede ser insertado <code>not</code> para negar un requisito en particular.
          Note que, ya que <code>not</code> es una negación de un valor, no puede ser 
          usado por si solo para permitir o denegar una petición, como <em>not true</em>
          que no contituye ser <em>false</em>. En consecuencia, para denegar una 
          visita usando una negación, el bloque debe tener un elemento que se evalúa como
          verdadero o falso. Por ejemplo, si tienes a alguien espameandote tu tablón de 
          mensajes, y tu quieres evitar que entren o dejarlos fuera, puedes realizar
          lo siguiente:
          </p>
      
          <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not ip 10.252.46.165
      &lt;/RequireAll&gt;</pre>
      
      
          <p>Los visitantes que vengan desde la IP que se configura (<code>10.252.46.165</code>)
          no tendrán acceso al contenido que cubre esta directiva. Si en cambio, lo que se 
          tiene es el nombre de la máquina, en vez de la IP, podrás usar:</p>
      
          <pre class="prettyprint lang-config">Require not host <var>host.example.com</var>
          </pre>
      
      
          <p>Y, Si lo que se quiere es bloquear el acceso desde dominio especifico, 
              podrás especificar parte de una dirección o nombre de dominio:</p>
      
          <pre class="prettyprint lang-config">Require not ip 192.168.205
      Require not host phishers.example.com moreidiots.example
      Require not host gov</pre>
      
      
          <p>Uso de las directivas <code class="directive"><a href="../mod/mod_authz_core.html#requireall">RequireAll</a></code>, <code class="directive"><a href="../mod/mod_authz_core.html#requireany">RequireAny</a></code>, y <code class="directive"><a href="../mod/mod_authz_core.html#requirenone">RequireNone</a></code> pueden ser usadas
          para forzar requisitos más complejos.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="env" id="env">Control de acceso por variables arbitrarias.</a></h2>
      
          <p>Haciendo el uso de <code class="directive"><a href="../mod/core.html#if">&lt;If&gt;</a></code>,
          puedes permitir o denegar el acceso basado en variables de entrono arbitrarias
          o en los valores de las cabeceras de las peticiones. Por ejemplo para denegar 
          el acceso basándonos en el "user-agent" (tipo de navegador así como Sistema Operativo)
          puede que hagamos lo siguiente:
          </p>
      
          <pre class="prettyprint lang-config">&lt;If "%{HTTP_USER_AGENT} == 'BadBot'"&gt;
          Require all denied
      &lt;/If&gt;</pre>
      
      
          <p>Usando la sintaxis de <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>
          <code>expr</code> , esto también puede ser escrito de la siguiente forma:
          </p>
      
      
          <pre class="prettyprint lang-config">Require expr %{HTTP_USER_AGENT} != 'BadBot'</pre>
      
      
          <div class="note"><h3>Advertencia:</h3>
          <p>El control de acceso por <code>User-Agent</code> es una técnica poco fiable,
          ya que la cabecera de <code>User-Agent</code> puede ser modificada y establecerse 
          al antojo del usuario.</p>
          </div>
      
          <p>Vea también la página de  <a href="../expr.html">expresiones</a>
          para una mayor aclaración de que sintaxis tienen las expresiones y que
          variables están disponibles.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rewrite" id="rewrite">Control de acceso con mod_rewrite</a></h2>
      
          <p>El flag <code>[F]</code> de <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> causa una respuesta 403 Forbidden
          para ser enviada. USando esto, podrá denegar el acceso a recursos basándose
          en criterio arbitrario.</p>
      
          <p>Por ejemplo, si lo que desea es bloquear un recurso entre las 8pm y las 
              7am, podrá hacerlo usando <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>:</p>
      
          <pre class="prettyprint lang-config">RewriteEngine On
      RewriteCond "%{TIME_HOUR}" "&gt;=20" [OR]
      RewriteCond "%{TIME_HOUR}" "&lt;07"
      RewriteRule "^/fridge"     "-"       [F]</pre>
      
      
          <p>Esto devolverá una respuesta de error 403 Forbidden para cualquier  petición 
          después de las 8pm y antes de las 7am. Esta técnica puede ser usada para cualquier 
          criterio que desee usar. También puede redireccionar, o incluso reescribir estas 
          peticiones, si se prefiere ese enfoque.
          </p>
      
          <p>La directiva <code class="directive"><a href="../mod/core.html#if">&lt;If&gt;</a></code>,
           añadida en la 2.4, sustituye muchas cosas que <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>
           tradicionalmente solía hacer, y deberá comprobar estas antes de recurrir a 
          </p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="moreinformation" id="moreinformation">Más información</a></h2>
      
          <p>El <a href="../expr.html">motor de expresiones</a> le da una gran
          capacidad de poder para hacer una gran variedad de cosas basadas en 
          las variables arbitrarias del servidor, y debe consultar este 
          documento para más detalles.</p>
      
          <p>También, deberá leer la documentación de <code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code>
          para ejemplos de combinaciones de múltiples requisitos de acceso y especificar
          cómo interactúan.
          </p>
      
          <p>Vea también los howtos de <a href="auth.html">Authenticación y Autorización</a>
          </p>
      </div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/access.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/access.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/access.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentarios</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/access.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/htaccess.html��������������������������������������������������������0000644�0000000�0000050�00000001075�13362070302�017263� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: htaccess.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: htaccess.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: htaccess.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: htaccess.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: htaccess.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: htaccess.html.pt-br
      Content-Language: pt-br
      Content-type: text/html; charset=ISO-8859-1
      �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/public_html.html.fr.utf8���������������������������������������������0000644�0000000�0000050�00000034460�13412755316�021302� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Répertoires web utilisateurs - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Recettes et tutoriels</a></div><div id="page-content"><div id="preamble"><h1>Répertoires web utilisateurs</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/public_html.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/public_html.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/public_html.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/public_html.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/public_html.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/public_html.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      <p>Sur les systèmes multi-utilisateurs, on peut permettre à chaque
      utilisateur d'avoir un site web dans son répertoire home à l'aide de la
      directive <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>. Les
      visiteurs de l'URL <code>http://example.com/~nom_utilisateur/</code>
      recevront un contenu situé dans le répertoire home de l'utilisateur
      "<code>nom_utilisateur</code>", et dans le sous-répertoire spécifié par
      la directive <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>.</p>
      <p>Notez que par défaut, l'accès à ces répertoires n'est
      <strong>pas</strong> permis. Vous pouvez en permettre l'accès à l'aide
      de la directive <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> en
      décommentant la ligne :</p>
          <pre class="prettyprint lang-config">#Include conf/extra/httpd-userdir.conf</pre>
      
          <p>dans le fichier de configuration par défaut
          <code>conf/httpd.conf</code>, et en adaptant le
          fichier <code>httpd-userdir.conf</code> selon vos besoins, ou en
          incluant les directives appropriées dans une section
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> du fichier de
          configuration principal.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Répertoires web utilisateurs</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#userdir">Définition du chemin des fichiers avec UserDir</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#redirect">Redirection vers des URLs externes</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#enable">Définition de la liste des utilisateurs autorisés à utiliser
          cette fonctionnalité</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cgi">Définition d'un répertoire CGI pour chaque utilisateur</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#htaccess">Permettre aux utilisateurs de modifier la
          configuration</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="../urlmapping.html">Mise en correspondance des URLs
      avec le système de fichiers</a></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Répertoires web utilisateurs</a></h2>
          
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_userdir.html">mod_userdir</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code></li><li><code class="directive"><a href="../mod/core.html#directorymatch">DirectoryMatch</a></code></li><li><code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code></li></ul></td></tr></table>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="userdir" id="userdir">Définition du chemin des fichiers avec UserDir</a></h2>
          
      
          <p>La directive <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>
          permet de spécifier un répertoire à partir duquel le contenu de
          l'utilisateur pourra être chargé. Elle peut revêtir plusieurs
          formes.</p>
      
          <p>Si le chemin spécifié ne commence pas par un slash, il sera
          interprété comme chemin relatif au répertoire home de l'utilisateur
          considéré. Par exemple, avec cette configuration :</p>
      
          <pre class="prettyprint lang-config">UserDir public_html</pre>
      
      
          <p>l'URL <code>http://example.com/~rbowen/fichier.html</code>
          correspondra au chemin fichier
          <code>/home/rbowen/public_html/fichier.html</code></p>
      
          <p>Si le chemin spécifié commence par un slash, le chemin du fichier
          sera construit en utilisant ce chemin, suivi du nom de l'utilisateur
          considéré. Par exemple, avec cette configuration :</p>
      
          <pre class="prettyprint lang-config">UserDir /var/html</pre>
      
      
          <p>l'URL <code>http://example.com/~rbowen/fichier.html</code>
          correspondra au chemin fichier
          <code>/var/html/rbowen/fichier.html</code></p>
      
          <p>Si le chemin spécifié contient un astérisque (*), ce dernier sera
          remplacé par le nom de l'utilisateur dans le chemin du fichier
          correspondant. Par exemple, avec cette configuration :</p>
      
          <pre class="prettyprint lang-config">UserDir /var/www/*/docs</pre>
      
      
          <p>l'URL <code>http://example.com/~rbowen/fichier.html</code>
          correspondra au chemin fichier
          <code>/var/www/rbowen/docs/fichier.html</code></p>
      
          <p>On peut aussi définir plusieurs répertoires ou chemins de
          répertoires.</p>
      
          <pre class="prettyprint lang-config">UserDir public_html /var/html</pre>
      
      
          <p>Avec l'URL <code>http://example.com/~rbowen/fichier.html</code>,
          Apache va rechercher <code>~rbowen</code>. S'il ne le trouve pas,
          Apache va rechercher <code>rbowen</code> dans
          <code>/var/html</code>. S'il le trouve, l'URL ci-dessus correspondra
          au chemin fichier <code>/var/html/rbowen/file.html</code></p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="redirect" id="redirect">Redirection vers des URLs externes</a></h2>
          
          <p>On peut utiliser la directive <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> pour rediriger les requêtes
          relatives aux répertoires utilisateurs vers des URLs externes.</p>
      
          <pre class="prettyprint lang-config">UserDir http://example.org/users/*/</pre>
      
      
          <p>L'exemple ci-dessus va rediriger une requête pour
          <code>http://example.com/~bob/abc.html</code> vers
          <code>http://exemple.org/users/bob/abc.html</code>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="enable" id="enable">Définition de la liste des utilisateurs autorisés à utiliser
          cette fonctionnalité</a></h2>
          
      
          <p>En suivant la syntaxe décrite dans la documentation de UserDir,
          vous pouvez définir quels utilisateurs sont autorisés à utiliser
          cette fonctionnalité :</p>
      
          <pre class="prettyprint lang-config">UserDir disabled root jro fish</pre>
      
      
          <p>La configuration ci-dessus va autoriser l'utilisation de la
          fonctionnalité pour tous les utilisateurs, à l'exception de ceux
          listés à la suite de l'argument <code>disabled</code>. De même, vous
          pouvez interdire l'utilisation de la fonctionnalité à tous les
          utilisateurs sauf certains d'entre eux en utilisant une
          configuration du style :</p>
      
          <pre class="prettyprint lang-config">UserDir disabled
      UserDir enabled rbowen krietz</pre>
      
      
          <p>Vous trouverez d'autres exemples dans la documentation de
          <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cgi" id="cgi">Définition d'un répertoire CGI pour chaque utilisateur</a></h2>
        
      
         <p>Afin de réserver un répertoire cgi-bin pour chaque utilisateur,
         vous pouvez utiliser une section <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> pour activer CGI dans un
         sous-répertoire particulier d'un répertoire home utilisateur.</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/home/*/public_html/cgi-bin/"&gt;
          Options ExecCGI
          SetHandler cgi-script
      &lt;/Directory&gt;</pre>
      
      
          <p>Avec la configuration ci-dessus, et en supposant que
          <code>UserDir</code> est défini à <code>public_html</code>, un
          programme CGI <code>exemple.cgi</code> pourra être chargé depuis ce
          répertoire en passant par l'URL :</p>
      
          <div class="example"><p><code>
          http://example.com/~rbowen/cgi-bin/exemple.cgi
          </code></p></div>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="htaccess" id="htaccess">Permettre aux utilisateurs de modifier la
          configuration</a></h2>
          
      
          <p>Si vous voulez que vos utilisateurs puissent modifier la
          configuration du serveur pour ce qui concerne leur espace web, ils
          devront utiliser des fichiers <code>.htaccess</code> pour effectuer
          ces modifications. Assurez-vous d'avoir défini la directive
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> à une valeur
          appropriée pour les directives dont vous voulez permettre la
          modification aux utilisateurs. Voir le <a href="htaccess.html">tutoriel .htaccess</a> pour plus de détails sur
          la manière dont tout ceci fonctionne.</p>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/public_html.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/public_html.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/public_html.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/public_html.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/public_html.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/public_html.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/public_html.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/cgi.html�������������������������������������������������������������0000644�0000000�0000050�00000000706�13362070302�016230� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: cgi.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: cgi.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: cgi.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: cgi.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: cgi.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      ����������������������������������������������������������httpd-2.4.41/docs/manual/howto/auth.html.en���������������������������������������������������������0000644�0000000�0000050�00000111544�13412755316�017046� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Authentication and Authorization - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutorials</a></div><div id="page-content"><div id="preamble"><h1>Authentication and Authorization</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/howto/auth.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/auth.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/auth.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/auth.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/auth.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/auth.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Authentication is any process by which you verify that
          someone is who they claim they are. Authorization is any
          process by which someone is allowed to be where they want to
          go, or to have information that they want to have.</p>
      
          <p>For general access control, see the <a href="access.html">Access
          Control How-To</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Related Modules and Directives</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#introduction">Introduction</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#theprerequisites">The Prerequisites</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#gettingitworking">Getting it working</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#lettingmorethanonepersonin">Letting more than one
      person in</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#possibleproblems">Possible problems</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#dbmdbd">Alternate password storage</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#multprovider">Using multiple providers</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#beyond">Beyond just authorization</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#socache">Authentication Caching</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#moreinformation">More information</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Related Modules and Directives</a></h2>
      
      <p>There are three types of modules involved in the authentication and
      authorization process.  You will usually need to choose at least one
      module from each group.</p>
      
      <ul>
        <li>Authentication type (see the
            <code class="directive"><a href="../mod/mod_authn_core.html#authtype">AuthType</a></code> directive)
          <ul>
            <li><code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code></li>
            <li><code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code></li>
          </ul>
        </li>
        <li>Authentication provider (see the
        <code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code> and
        <code class="directive"><a href="../mod/mod_auth_digest.html#authdigestprovider">AuthDigestProvider</a></code> directives)
      
          <ul>
            <li><code class="module"><a href="../mod/mod_authn_anon.html">mod_authn_anon</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_file.html">mod_authn_file</a></code></li>
            <li><code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_socache.html">mod_authn_socache</a></code></li>
          </ul>
        </li>
        <li>Authorization (see the
            <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> directive)
          <ul>
            <li><code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_dbd.html">mod_authz_dbd</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_dbm.html">mod_authz_dbm</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_groupfile.html">mod_authz_groupfile</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_owner.html">mod_authz_owner</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_user.html">mod_authz_user</a></code></li>
          </ul>
        </li>
      </ul>
      
        <p>In addition to these modules, there are also
        <code class="module"><a href="../mod/mod_authn_core.html">mod_authn_core</a></code> and
        <code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code>.  These modules implement core
        directives that are core to all auth modules.</p>
      
        <p>The module <code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code> is both an
        authentication and authorization provider.  The module
        <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code> provides authorization
        and access control based on hostname, IP address or characteristics
        of the request, but is not part of the authentication provider
        system. For backwards compatibility with the mod_access, there is
        a new module <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code>.</p>
      
        <p>You probably also want to take a look at the <a href="access.html">Access Control</a> howto, which discusses the
        various ways to control access to your server.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">Introduction</a></h2>
          <p>If you have information on your web site that is sensitive
          or intended for only a small group of people, the techniques in
          this article will help you make sure that the people that see
          those pages are the people that you wanted to see them.</p>
      
          <p>This article covers the "standard" way of protecting parts
          of your web site that most of you are going to use.</p>
      
          <div class="note"><h3>Note:</h3>
          <p>If your data really needs to be secure, consider using
          <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> in addition to any authentication.</p>
          </div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="theprerequisites" id="theprerequisites">The Prerequisites</a></h2>
          <p>The directives discussed in this article will need to go
          either in your main server configuration file (typically in a
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> section), or
          in per-directory configuration files (<code>.htaccess</code> files).</p>
      
          <p>If you plan to use <code>.htaccess</code> files, you will
          need to have a server configuration that permits putting
          authentication directives in these files. This is done with the
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> directive, which
          specifies which directives, if any, may be put in per-directory
          configuration files.</p>
      
          <p>Since we're talking here about authentication, you will need
          an <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> directive like the
          following:</p>
      
          <pre class="prettyprint lang-config">AllowOverride AuthConfig</pre>
      
      
          <p>Or, if you are just going to put the directives directly in
          your main server configuration file, you will of course need to
          have write permission to that file.</p>
      
          <p>And you'll need to know a little bit about the directory
          structure of your server, in order to know where some files are
          kept. This should not be terribly difficult, and I'll try to
          make this clear when we come to that point.</p>
      
          <p>You will also need to make sure that the modules
          <code class="module"><a href="../mod/mod_authn_core.html">mod_authn_core</a></code> and <code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code>
          have either been built into the httpd binary or loaded by the
          httpd.conf configuration file. Both of these modules provide core
          directives and functionality that are critical to the configuration
          and use of authentication and authorization in the web server.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="gettingitworking" id="gettingitworking">Getting it working</a></h2>
          <p>Here's the basics of password protecting a directory on your
          server.</p>
      
          <p>First, you need to create a password file. Exactly how you do
          this will vary depending on what authentication provider you have
          chosen. More on that later. To start with, we'll use a text password
          file.</p>
      
          <p>This file should be
          placed somewhere not accessible from the web. This is so that
          folks cannot download the password file. For example, if your
          documents are served out of <code>/usr/local/apache/htdocs</code>, you
          might want to put the password file(s) in
          <code>/usr/local/apache/passwd</code>.</p>
      
          <p>To create the file, use the <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> utility that
          came with Apache. This will be located in the <code>bin</code> directory
          of wherever you installed Apache. If you have installed Apache from
          a third-party package, it may be in your execution path.</p>
      
          <p>To create the file, type:</p>
      
          <div class="example"><p><code>
            htpasswd -c /usr/local/apache/passwd/passwords rbowen
          </code></p></div>
      
          <p><code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> will ask you for the password, and
          then ask you to type it again to confirm it:</p>
      
          <div class="example"><p><code>
            # htpasswd -c /usr/local/apache/passwd/passwords rbowen<br />
            New password: mypassword<br />
            Re-type new password: mypassword<br />
            Adding password for user rbowen
          </code></p></div>
      
          <p>If <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> is not in your path, of course
          you'll have to type the full path to the file to get it to run.
          With a default installation, it's located at
          <code>/usr/local/apache2/bin/htpasswd</code></p>
      
          <p>Next, you'll need to configure the server to request a
          password and tell the server which users are allowed access.
          You can do this either by editing the <code>httpd.conf</code>
          file or using an <code>.htaccess</code> file. For example, if
          you wish to protect the directory
          <code>/usr/local/apache/htdocs/secret</code>, you can use the
          following directives, either placed in the file
          <code>/usr/local/apache/htdocs/secret/.htaccess</code>, or
          placed in <code>httpd.conf</code> inside a &lt;Directory
          "/usr/local/apache/htdocs/secret"&gt; section.</p>
      
          <pre class="prettyprint lang-config">AuthType Basic
      AuthName "Restricted Files"
      # (Following line optional)
      AuthBasicProvider file
      AuthUserFile "/usr/local/apache/passwd/passwords"
      Require user rbowen</pre>
      
      
          <p>Let's examine each of those directives individually. The <code class="directive"><a href="../mod/mod_authn_core.html#authtype">AuthType</a></code> directive selects
          that method that is used to authenticate the user. The most
          common method is <code>Basic</code>, and this is the method
          implemented by <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code>. It is important to be aware,
          however, that Basic authentication sends the password from the client to
          the server unencrypted. This method should therefore not be used for
          highly sensitive data, unless accompanied by <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>.
          Apache supports one other authentication method:
          <code>AuthType Digest</code>. This method is implemented by <code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code> and was intended to be more secure. This is no
          longer the case and the connection should be encrypted with <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> instead.</p>
      
          <p>The <code class="directive"><a href="../mod/mod_authn_core.html#authname">AuthName</a></code> directive sets
          the <dfn>Realm</dfn> to be used in the authentication. The realm serves
          two major functions. First, the client often presents this information to
          the user as part of the password dialog box. Second, it is used by the
          client to determine what password to send for a given authenticated
          area.</p>
      
          <p>So, for example, once a client has authenticated in the
          <code>"Restricted Files"</code> area, it will automatically
          retry the same password for any area on the same server that is
          marked with the <code>"Restricted Files"</code> Realm.
          Therefore, you can prevent a user from being prompted more than
          once for a password by letting multiple restricted areas share
          the same realm. Of course, for security reasons, the client
          will always need to ask again for the password whenever the
          hostname of the server changes.</p>
      
          <p>The <code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code> is,
          in this case, optional, since <code>file</code> is the default value
          for this directive. You'll need to use this directive if you are
          choosing a different source for authentication, such as
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> or <code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code>.</p>
      
          <p>The <code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code>
          directive sets the path to the password file that we just
          created with <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code>. If you have a large number
          of users, it can be quite slow to search through a plain text
          file to authenticate the user on each request. Apache also has
          the ability to store user information in fast database files.
          The <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> module provides the <code class="directive"><a href="../mod/mod_authn_dbm.html#authdbmuserfile">AuthDBMUserFile</a></code> directive. These
          files can be created and manipulated with the <code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code> and <code class="program"><a href="../programs/htdbm.html">htdbm</a></code> programs. Many
          other types of authentication options are available from third
          party modules in the <a href="http://modules.apache.org/">Apache Modules
          Database</a>.</p>
      
          <p>Finally, the <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>
          directive provides the authorization part of the process by
          setting the user that is allowed to access this region of the
          server. In the next section, we discuss various ways to use the
          <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> directive.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="lettingmorethanonepersonin" id="lettingmorethanonepersonin">Letting more than one
      person in</a></h2>
          <p>The directives above only let one person (specifically
          someone with a username of <code>rbowen</code>) into the
          directory. In most cases, you'll want to let more than one
          person in. This is where the <code class="directive"><a href="../mod/mod_authz_groupfile.html#authgroupfile">AuthGroupFile</a></code> comes in.</p>
      
          <p>If you want to let more than one person in, you'll need to
          create a group file that associates group names with a list of
          users in that group. The format of this file is pretty simple,
          and you can create it with your favorite editor. The contents
          of the file will look like this:</p>
      
         <div class="example"><p><code>
           GroupName: rbowen dpitts sungo rshersey
         </code></p></div>
      
          <p>That's just a list of the members of the group in a long
          line separated by spaces.</p>
      
          <p>To add a user to your already existing password file,
          type:</p>
      
          <div class="example"><p><code>
            htpasswd /usr/local/apache/passwd/passwords dpitts
          </code></p></div>
      
          <p>You'll get the same response as before, but it will be
          appended to the existing file, rather than creating a new file.
          (It's the <code>-c</code> that makes it create a new password
          file).</p>
      
          <p>Now, you need to modify your <code>.htaccess</code> file or
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> block
          to look like the following:</p>
      
          <pre class="prettyprint lang-config">AuthType Basic
      AuthName "By Invitation Only"
      # Optional line:
      AuthBasicProvider file
      AuthUserFile "/usr/local/apache/passwd/passwords"
      AuthGroupFile "/usr/local/apache/passwd/groups"
      Require group GroupName</pre>
      
      
          <p>Now, anyone that is listed in the group <code>GroupName</code>,
          and has an entry in the <code>password</code> file, will be let in, if
          they type the correct password.</p>
      
          <p>There's another way to let multiple users in that is less
          specific. Rather than creating a group file, you can just use
          the following directive:</p>
      
          <pre class="prettyprint lang-config">Require valid-user</pre>
      
      
          <p>Using that rather than the <code>Require user rbowen</code>
          line will allow anyone in that is listed in the password file,
          and who correctly enters their password.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="possibleproblems" id="possibleproblems">Possible problems</a></h2>
          <p>Because of the way that Basic authentication is specified,
          your username and password must be verified every time you
          request a document from the server. This is even if you're
          reloading the same page, and for every image on the page (if
          they come from a protected directory). As you can imagine, this
          slows things down a little. The amount that it slows things
          down is proportional to the size of the password file, because
          it has to open up that file, and go down the list of users
          until it gets to your name. And it has to do this every time a
          page is loaded.</p>
      
          <p>A consequence of this is that there's a practical limit to
          how many users you can put in one password file. This limit
          will vary depending on the performance of your particular
          server machine, but you can expect to see slowdowns once you
          get above a few hundred entries, and may wish to consider a
          different authentication method at that time.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="dbmdbd" id="dbmdbd">Alternate password storage</a></h2>
      
          <p>Because storing passwords in plain text files has the above
          problems, you may wish to store your passwords somewhere else, such
          as in a database.</p>
      
          <p><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> and <code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code> are two
          modules which make this possible. Rather than selecting <code><code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code> file</code>, instead
          you can choose <code>dbm</code> or <code>dbd</code> as your storage
          format.</p>
      
          <p>To select a dbm file rather than a text file, for example:</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/docs/private"&gt;
          AuthName "Private"
          AuthType Basic
          AuthBasicProvider dbm
          AuthDBMUserFile "/www/passwords/passwd.dbm"
          Require valid-user
      &lt;/Directory&gt;</pre>
      
      
          <p>Other options are available. Consult the
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> documentation for more details.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="multprovider" id="multprovider">Using multiple providers</a></h2>
      
          <p>With the introduction of the new provider based authentication and
          authorization architecture, you are no longer locked into a single
          authentication or authorization method. In fact any number of the
          providers can be mixed and matched to provide you with exactly the
          scheme that meets your needs. In the following example, both the
          file and LDAP based authentication providers are being used.</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/docs/private"&gt;
          AuthName "Private"
          AuthType Basic
          AuthBasicProvider file ldap
          AuthUserFile "/usr/local/apache/passwd/passwords"
          AuthLDAPURL ldap://ldaphost/o=yourorg
          Require valid-user
      &lt;/Directory&gt;</pre>
      
      
          <p>In this example the file provider will attempt to authenticate
          the user first. If it is unable to authenticate the user, the LDAP
          provider will be called. This allows the scope of authentication
          to be broadened if your organization implements more than
          one type of authentication store. Other authentication and authorization
          scenarios may include mixing one type of authentication with a
          different type of authorization. For example, authenticating against
          a password file yet authorizing against an LDAP directory.</p>
      
          <p>Just as multiple authentication providers can be implemented, multiple
          authorization methods can also be used. In this example both file group
          authorization as well as LDAP group authorization is being used.</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/docs/private"&gt;
          AuthName "Private"
          AuthType Basic
          AuthBasicProvider file
          AuthUserFile "/usr/local/apache/passwd/passwords"
          AuthLDAPURL ldap://ldaphost/o=yourorg
          AuthGroupFile "/usr/local/apache/passwd/groups"
          Require group GroupName
          Require ldap-group cn=mygroup,o=yourorg
      &lt;/Directory&gt;</pre>
      
      
          <p>To take authorization a little further, authorization container
          directives such as
          <code class="directive"><a href="../mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code>
          and
          <code class="directive"><a href="../mod/mod_authz_core.html#requireany">&lt;RequireAny&gt;</a></code>
          allow logic to be applied so that the order in which authorization
          is handled can be completely controlled through the configuration.
          See <a href="../mod/mod_authz_core.html#logic">Authorization
          Containers</a> for an example of how they may be applied.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="beyond" id="beyond">Beyond just authorization</a></h2>
      
          <p>The way that authorization can be applied is now much more flexible
          than just a single check against a single data store. Ordering, logic
          and choosing how authorization will be done is now possible.</p>
      
          <h3><a name="authandororder" id="authandororder">Applying logic and ordering</a></h3>
              <p>Controlling how and in what order authorization will be applied
              has been a bit of a mystery in the past. In Apache 2.2 a provider-based
              authentication mechanism was introduced to decouple the actual
              authentication process from authorization and supporting functionality.
              One of the side benefits was that authentication providers could be
              configured and called in a specific order which didn't depend on the
              load order of the auth module itself. This same provider based mechanism
              has been brought forward into authorization as well. What this means is
              that the <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> directive
              not only specifies which authorization methods should be used, it also
              specifies the order in which they are called. Multiple authorization
              methods are called in the same order in which the
              <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> directives
              appear in the configuration.</p>
      
              <p>With the introduction of authorization container directives
              such as
              <code class="directive"><a href="../mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code>
              and
              <code class="directive"><a href="../mod/mod_authz_core.html#requireany">&lt;RequireAny&gt;</a></code>,
              the configuration also has control over when the
              authorization methods are called and what criteria determines when
              access is granted.  See
              <a href="../mod/mod_authz_core.html#logic">Authorization Containers</a>
              for an example of how they may be used to express complex
              authorization logic.</p>
      
              <p>By default all
              <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>
              directives are handled as though contained within a
              <code class="directive"><a href="../mod/mod_authz_core.html#requireany">&lt;RequireAny&gt;</a></code>
              container directive.  In other words, if
              any of the specified authorization methods succeed, then authorization
              is granted.</p>
      
          
      
          <h3><a name="reqaccessctrl" id="reqaccessctrl">Using authorization providers for access control</a></h3>
              <p>Authentication by username and password is only part of the
              story. Frequently you want to let people in based on something
              other than who they are. Something such as where they are
              coming from.</p>
      
              <p>The authorization providers <code>all</code>,
              <code>env</code>, <code>host</code> and <code>ip</code> let you
              allow or deny access based on other host based criteria such as
              host name or ip address of the machine requesting a
              document.</p>
      
              <p>The usage of these providers is specified through the
              <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> directive.
              This directive registers the authorization providers
              that will be called during the authorization stage of the request
              processing. For example:</p>
      
              <pre class="prettyprint lang-config">Require ip <var>address</var></pre>
      
      
              <p>where <var>address</var> is an IP address (or a partial IP
              address) or:</p>
      
              <pre class="prettyprint lang-config">Require host <var>domain_name</var></pre>
      
      
              <p>where <var>domain_name</var> is a fully qualified domain name
              (or a partial domain name); you may provide multiple addresses or
              domain names, if desired.</p>
      
              <p>For example, if you have someone spamming your message
              board, and you want to keep them out, you could do the
              following:</p>
      
              <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not ip 10.252.46.165
      &lt;/RequireAll&gt;</pre>
      
      
              <p>Visitors coming from that address will not be able to see
              the content covered by this directive. If, instead, you have a
              machine name, rather than an IP address, you can use that.</p>
      
              <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not host host.example.com
      &lt;/RequireAll&gt;</pre>
      
      
              <p>And, if you'd like to block access from an entire domain,
              you can specify just part of an address or domain name:</p>
      
              <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not ip 192.168.205
          Require not host phishers.example.com moreidiots.example
          Require not host ke
      &lt;/RequireAll&gt;</pre>
      
      
              <p>Using <code class="directive"><a href="../mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code>
              with multiple <code class="directive"><a href="../mod/mod_authz_core.html#require">&lt;Require&gt;</a></code> directives, each negated with <code>not</code>,
              will only allow access, if all of negated conditions are true. In other words,
              access will be blocked, if any of the negated conditions fails.</p>
      
          
      
          <h3><a name="filesystem" id="filesystem">Access Control backwards compatibility</a></h3>
              <p>One of the side effects of adopting a provider based mechanism for
              authentication is that the previous access control directives
              <code class="directive"><a href="../mod/mod_access_compat.html#order">Order</a></code>,
              <code class="directive"><a href="../mod/mod_access_compat.html#allow">Allow</a></code>,
              <code class="directive"><a href="../mod/mod_access_compat.html#deny">Deny</a></code> and
              <code class="directive"><a href="../mod/mod_access_compat.html#satisfy">Satisfy</a></code> are no longer needed.
              However to provide backwards compatibility for older configurations, these
              directives have been moved to the <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> module.</p>
      
              <div class="warning"><h3>Note</h3>
              <p>The directives provided by <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> have
              been deprecated by <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code>.
              Mixing old directives like <code class="directive"><a href="../mod/mod_access_compat.html#order">Order</a></code>, <code class="directive"><a href="../mod/mod_access_compat.html#allow">Allow</a></code> or <code class="directive"><a href="../mod/mod_access_compat.html#deny">Deny</a></code> with new ones like
              <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> is technically possible
              but discouraged. The <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> module was created to support
              configurations containing only old directives to facilitate the 2.4 upgrade.
              Please check the <a href="../upgrading.html">upgrading</a> guide for more
              information.
              </p>
              </div>
          
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="socache" id="socache">Authentication Caching</a></h2>
          <p>There may be times when authentication puts an unacceptable load
          on a provider or on your network.  This is most likely to affect users
          of <code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code> (or third-party/custom providers).
          To deal with this, HTTPD 2.3/2.4 introduces a new caching provider
          <code class="module"><a href="../mod/mod_authn_socache.html">mod_authn_socache</a></code> to cache credentials and reduce
          the load on the origin provider(s).</p>
          <p>This may offer a substantial performance boost to some users.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="moreinformation" id="moreinformation">More information</a></h2>
          <p>You should also read the documentation for
          <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code> and <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code>
          which contain some more information about how this all works.  The
          directive <code class="directive"><a href="../mod/mod_authn_core.html#authnprovideralias">&lt;AuthnProviderAlias&gt;</a></code> can also help
          in simplifying certain authentication configurations.</p>
      
          <p>The various ciphers supported by Apache for authentication data are
          explained in <a href="../misc/password_encryptions.html">Password
          Encryptions</a>.</p>
      
          <p>And you may want to look at the <a href="access.html">Access
          Control</a> howto, which discusses a number of related topics.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/howto/auth.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/auth.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/auth.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/auth.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/auth.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/auth.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/auth.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/public_html.html�����������������������������������������������������0000644�0000000�0000050�00000001111�13362070302�017757� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: public_html.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: public_html.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: public_html.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: public_html.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: public_html.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: public_html.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/ssi.html.es����������������������������������������������������������0000644�0000000�0000050�00000064405�13412755316�016713� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Tutorial de Apache httpd: Introducción a los Server Side Includes
       - Servidor HTTP Apache Versión 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="../">Versión 2.4</a> &gt; <a href="./">How-To / Tutoriales</a></div><div id="page-content"><div id="preamble"><h1>Tutorial de Apache httpd: Introducción a los Server Side Includes
      </h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/ssi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/ssi.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/ssi.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/ssi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/ssi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      
      <p>Los Server Side Includes (Inclusiones en la parte Servidor) facilitan un método para añadir contenido dinámico a documentos HTML existentes.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Introducción</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#what">¿Qué son los SSI?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#configuring">Configurar su servidor para permitir SSI</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#basic">Directivas SSI básicas</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#additionalexamples">Más ejemplos</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#config">¿Qué más puedo configurar?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exec">Ejecutando comandos</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#advanced">Técnicas avanzadas de SSI</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#conclusion">Conclusión</a></li>
      </ul><h3>Consulte también</h3><ul class="seealso"><li><a href="#comments_section">Comentarios</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Introducción</a></h2>
       <table class="related"><tr><th>Módulos Relacionados</th><th>Directivas Relacionadas</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="../mod/mod_expires.html">mod_expires</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code></li><li><code class="directive"><a href="../mod/mod_mime.html#addtype">AddType</a></code></li><li><code class="directive"><a href="../mod/core.html#setoutputfilter">SetOutputFilter</a></code></li><li><code class="directive"><a href="../mod/mod_setenvif.html#browsermatchnocase">BrowserMatchNoCase</a></code></li></ul></td></tr></table>
      
          <p>Este artículo trata sobre los Server Side Includes, generalmente llamados SSI.
           En este artículo, hablaremos sobre cómo configurar su servidor para permitir SSI,
            y de técnicas básicas de SSI para añadir contenido dinámico a sus páginas 
            HTML existentes.</p>
      
          <p>Más adelante también hablaremos de algunas técnicas más avanzadas que 
          pueden usarse con SSI, tales como declaraciones condicionales en sus directivas SSI.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="what" id="what">¿Qué son los SSI?</a></h2>
      
          <p>SSI (Server Side Includes) son directivas que se introducen en páginas HTML y son 
              evaluadas por el servidor mientras éste las sirve. Le permiten añadir 
              contenido generado de manera dinámica a sus páginas HTML existentes sin tener 
              que servir una página entera a través de un programa CGI, u otra tecnología 
              para generar contenido dinámico.</p>
      
          <p>Por ejemplo, podría colocar una directiva en una página existente de HTML 
              de esta manera:</p>
      
          <div class="example"><p><code>
          &lt;!--#echo var="DATE_LOCAL" --&gt;
          </code></p></div>
      
          <p>Y, cuando se sirve la página, este fragmento será evaluado y sustituido con su resultado:</p>
      
          <div class="example"><p><code>
          Tuesday, 15-Jan-2013 19:28:54 EST
          </code></p></div>
      
          <p>La decisión sobre cuándo usar SSI, o de cuándo generar una página al completo con algún programa, suele depender generalmente de la cantidad de contenido estático que contiene, y cuánto de esa página tiene que ser recalculado cada vez que ésta se sirve. SSI es un buen método para añadir pequeñas partes de información, tales como la hora actual - como se ha mostrado más arriba. Pero si la mayoría de su página se tiene que generar en el momento en el que se está sirviendo, necesita buscar otra opción más adecuada que no sea SSI.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuring" id="configuring">Configurar su servidor para permitir SSI</a></h2>
      
      
          <p>Para permitir SSI en su servidor, debe tener la siguiente directiva en su fichero <code>httpd.conf</code> , o en un fichero 
          <code>.htaccess</code>:</p>
      <pre class="prettyprint lang-config">Options +Includes</pre>
      
      
          <p>Esto le dice a Apache que quiere permitir que se examinen los ficheros buscando directivas SSI. Tenga en cuenta que la mayoría de las configuraciones contienen múltiples directivas <code class="directive"><a href="../mod/core.html#options">Options</a></code> que pueden sobreescribirse las unas a las otras. Probablemente necesitará aplicar <code>Options</code> al directorio específico donde quiere SSI activado para asegurarse de que se evalúa en último lugar y por tanto se acabará aplicando.</p>
      
          <p>No todos los ficheros se examinan buscando directivas SSI. Usted Le tiene que indicar a Apache qué ficheros se tienen que examinar. Hay dos formas de hacer esto. Puede decirle a Apache que examine cualquier fichero con una extensión determinada, como por ejemplo <code>.shtml</code>, con las siguientes directivas:</p>
      <pre class="prettyprint lang-config">AddType text/html .shtml
      AddOutputFilter INCLUDES .shtml</pre>
      
      
          <p>Una desventaja de este método es que si quisiera añadir directivas SSI a una página ya existente, tendría que cambiar el nombre de la página, y todos los enlaces que apuntasen a esa página, todo para poder darle la extensión <code>.shtml</code> y que esas directivas sean interpretadas.</p>
      
          <p>El otro método es usar la directiva <code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code> :</p>
      <pre class="prettyprint lang-config">XBitHack on</pre>
      
      
          <p><code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code> le dice a Apache que examine ficheros buscando directivas SSI si los ficheros tienen el bit de ejecución configurado. Asi que para añadir directivas SSI a una página existente, en lugar de tener que cambiarle el nombre, solo tendría que convertirla en ejecutable usando <code>chmod</code>.</p>
      <div class="example"><p><code>
              chmod +x pagename.html
      </code></p></div>
      
          <p>Una breve recomendación de qué no hay que hacer. Ocasionalmente vemos gente recomendar que le diga a Apache que examine todos los ficheros 
          <code>.html</code> para activar SSI, para no tener que lidiar renombrando los ficheros a <code>.shtml</code>. Quizás estas personas no hayan oido hablar de <code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code>. Lo que hay que tener en cuenta, es que haciendo eso, está pidiendo al Apache que lea cada uno de los ficheros que manda al cliente, incluso si no contenien directivas SSI. Esto puede ralentizar bastante el servidor, y no es una buena idea.</p>
      
          <p>Por supuesto, en Windows, no hay tal cosa como la configuración del bit de ejecución, así que esto limita las opciones un poco.</p>
      
          <p>En su configuración por defecto, Apache no envía la fecha de última modificación o la longitud de contenido de páginas SSI porque es dificil calcular estos valores para contenido dinámico. Esto puede impedir que se cachee un documento, y dar como resultado en apareciencia un rendimiento más lento del cliente. Hay dos maneras de solucionar esto:</p>
      
          <ol>
            <li>Usando la configuración <code>XBitHack Full</code>. Esto le indica a apache que determine la fecha de última modificación mirando sólo la fecha del fichero que se ha solicitado originalmente, obviando la modificación de cualquier otro fichero al que se hace referencia mediante SSI.</li>
      
            <li>Use las directivas facilitadas por <code class="module"><a href="../mod/mod_expires.html">mod_expires</a></code> para configurar una expiración específica de tiempo en sus ficheros, y así hacer saber a proxies o navegadores web que es aceptable cachearlos.</li>
          </ol>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="basic" id="basic">Directivas SSI básicas</a></h2>
      
          <p>Las directivas SSI tienen la sintaxis siguiente:</p>
      <div class="example"><p><code>
              &lt;!--#function attribute=value attribute=value ... --&gt;
      </code></p></div>
      
          <p>Se formatean como comentarios HTML, así si no tiene SSI habilitado correctamente, el navegador las obviará, pero todavía serán visibles en el fichero HTML. Si tiene SSI configurado correctamente, la directiva será reemplazada con su propio resultado.</p>
      
          <p>Esta función es una de tantas, y hablaremos de algunas de ellas más adelante. Por ahora, aquí mostramos unos ejemplos de lo que puede hacer con SSI.</p>
      
      <h3><a name="todaysdate" id="todaysdate">La fecha de hoy</a></h3>
      
      <div class="example"><p><code>
              &lt;!--#echo var="DATE_LOCAL" --&gt;
      </code></p></div>
      
          <p>La función <code>echo</code> sencillamente muestra el valor de una variable. Hay muchas variables estándar que incluyen un conjunto de variables de entorno disponibles para programas CGI. También puede definir sus propias variables con la función <code>set</code>.</p>
      
          <p>Si no le gusta el formato en el que se imprime la fecha, puede usar la función <code>config</code>, con un atributo
          <code>timefmt</code> para modificar ese formato.</p>
      
      <div class="example"><p><code>
              &lt;!--#config timefmt="%A %B %d, %Y" --&gt;<br />
              Today is &lt;!--#echo var="DATE_LOCAL" --&gt;
      </code></p></div>
      
      
      <h3><a name="lastmodified" id="lastmodified">Fecha de modificación del fichero</a></h3>
      
      <div class="example"><p><code>
              La última modificación de este documento &lt;!--#flastmod file="index.html" --&gt;
      </code></p></div>
      
          <p>Esta función también está sujeta a configuraciones de formato de 
              <code>timefmt</code>.</p>
      
      
      <h3><a name="cgi" id="cgi">Incluyendo los resultados de un programa CGI</a></h3>
      
          <p>Este es uno de los usos más comunes de SSI - para sacar el resultado de un programa CGI, tal y como ocurre con el que fuera el programa favorito de todos, un ``contador de visitas.''</p>
      
      <div class="example"><p><code>
              &lt;!--#include virtual="/cgi-bin/counter.pl" --&gt;
      </code></p></div>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="additionalexamples" id="additionalexamples">Más ejemplos</a></h2>
      
      
          <p>A continuación hay algunos ejemplos específicos de cosas que puede hacer con SSI en sus documentos HTML.</p>
      
      <h3><a name="docmodified" id="docmodified">¿Cuándo fue modificado este documento?</a></h3>
      
          <p>Antes mencionamos que puede usar SSI para informar al usuario cuando el documento ha sido modificado por última vez. Aun así, el método actual para hacerlo se dejó en cuestión. El código que se muestra a continuación, puesto en un documento HTML, pondrá ese sello de tiempo en su página. Por descontado, tendrá que tener SSI habilitado correctamente, como se indicó más arriba.</p>
      <div class="example"><p><code>
              &lt;!--#config timefmt="%A %B %d, %Y" --&gt;<br />
              Ultima modificación de este fichero &lt;!--#flastmod file="ssi.shtml" --&gt;
      </code></p></div>
      
          <p>Obviamente, necesitará sustituir el nombre de fichero
          <code>ssi.shtml</code> con el nombre real del fichero al que usted hace referencia. Esto puede ser inconveniente si solo está buscando un trozo genérico de código que pueda copiar y pegar en cualquier fichero, asi que probablemente necesite usar la variable <code>LAST_MODIFIED</code> en su lugar:</p>
      <div class="example"><p><code>
              &lt;!--#config timefmt="%D" --&gt;<br />
              Última modificación de este fichero &lt;!--#echo var="LAST_MODIFIED" --&gt;
      </code></p></div>
      
          <p>Para más detalles sobre el formato <code>timefmt</code>, vaya a su buscador favorito y busque <code>strftime</code>. La sintaxis es la misma.</p>
      
      
      <h3><a name="standard-footer" id="standard-footer">Incluyendo un pie de página estándar</a></h3>
      
      
          <p>Si gestiona un sitio que tiene más de unas cuantas páginas, probablemente se de cuenta de que modificar todas esa páginas es un auténtico engorro, especialmente si trata de mantener una apareciencia homogénea en todas ellas.</p>
      
          <p>Si usa un Include de fichero para la cabecera y/o pie de página puede reducir la carga de trabajo de estas actualizaciones. Solo tiene que hacer un sólo pie de página, y después incluirlo en cada página con el comando SSI <code>include</code>. La función <code>include</code>
          puede determinar qué fichero incluir cuando usa el atributo
          <code>file</code>, o el atributo <code>virtual</code>. El atributo <code>file</code> es una ruta de fichero, <em>relativa al directorio actual</em>. Eso significa que no puede ser una ruta de fichero absoluta (que comienza con /), ni tampoco puede contener ../ como parte de la ruta. El atributo <code>virtual</code> es probablemente más útil, y debería especificar una URL relativa al documento que se está sirviendo. Puede empezar con una /, pero debe estar en el mismo servidor que el fichero que se está sirviendo.</p>
      <div class="example"><p><code>
              &lt;!--#include virtual="/footer.html" --&gt;
      </code></p></div>
      
          <p>Frecuentemente combinaremos las dos últimas, poniendo una directiva
          <code>LAST_MODIFIED</code> dentro de un fichero de pie de página que va a ser incluido. Se pueden encontrar directivas SSI en el fichero que se incluye, las inclusiones pueden anidarse - lo que quiere decir, que el fichero incluido puede incluir otro fichero, y así sucesivamente.</p>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="config" id="config">¿Qué más puedo configurar?</a></h2>
      
      
          <p>Además de poder configurar el formato de la hora, también puede configurar dos cosas más.</p> 
      
          <p>Generalmente, cuando algo sale mal con sus directivas SSI, obtiene el mensaje (ha ocurrido un error procesando esta directiva)</p>
      <div class="example"><p><code>
              [an error occurred while processing this directive]
      </code></p></div>
      
          <p>Si quiere cambiar ese mensaje por otra cosa, puede hacerlo con el atributo <code>errmsg</code> para la función
          <code>config</code>:</p>
      <div class="example"><p><code>
              &lt;!--#config errmsg="[Parece que no sabe cómo usar SSI]" --&gt;
      </code></p></div>
      
          <p>Afortunadamente, los usuarios finales nunca verán este mensaje, porque habrá resuelto todos los problemas con sus directivas SSI antes de publicar su página web. (¿Verdad?)</p>
      
          <p>Y puede configurar el formato en el que los tamaños de fichero se muestran con el formato <code>sizefmt</code>. Puede especificar
          <code>bytes</code> para un recuento total en bytes, o
          <code>abbrev</code> para un número abreviado en Kb o Mb, según sea necesario.</p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exec" id="exec">Ejecutando comandos</a></h2>
          
      
          <p> Puede usar la función <code>exec</code> para ejecutar comandos. Y SSI puede ejecutar un comando usando la shell (<code>/bin/sh</code>, para ser más precisos - o la shell de DOS , si está en Win32). Lo siguiente, por ejemplo, le dará un listado de ficheros en un directorio.</p>
      <div class="example"><p><code>
              &lt;pre&gt;<br />
              &lt;!--#exec cmd="ls" --&gt;<br />
              &lt;/pre&gt;
      </code></p></div>
      
          <p>o, en Windows</p>
      <div class="example"><p><code>
              &lt;pre&gt;<br />
              &lt;!--#exec cmd="dir" --&gt;<br />
              &lt;/pre&gt;
      </code></p></div>
      
          <p>Notará un formato estraño con esta directiva en Windows, porque el resultado de <code>dir</code> contiene la cadena de caracterers ``&lt;<code>dir</code>&gt;'' ,que confunde a los navegadores.</p>
      
          <p>Tenga en cuenta de que esta característica es muy peligrosa, puesto que ejecutará cualquier código que esté especificado con la etiqueta 
          <code>exec</code>. Si tiene una situación en la que los usuarios pueden editar contenido en sus páginas web, tales como por ejemplo un ``registro de visitas'', asegúrese de tener esta característica deshabilitada. Puede permitir SSI, pero no la característica <code>exec</code>, con el argumento <code>IncludesNOEXEC</code> en la directiva <code>Options</code>.</p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="advanced" id="advanced">Técnicas avanzadas de SSI</a></h2>
      
      
          <p>Además de mostrar contenido, SSI en Apache da la opción de configurar variables y usar esas variables en comparaciones y condicionales.</p>
      
      <h3><a name="variables" id="variables">Configurando Variables</a></h3>
      
          <p>Usando la directiva <code>set</code>, puede configurar variables para su uso posterior. La sintaxis es como sigue:</p>
      <div class="example"><p><code>
              &lt;!--#set var="name" value="Rich" --&gt;
      </code></p></div>
      
          <p>Además de configurar valores literales como esto, puede usar cualquier otra variable, incluyendo <a href="../env.html">variables de entorno</a> o las variables que se han mencionado antes (como por ejemplo <code>LAST_MODIFIED</code>) para dar valores a sus variables. Podrá especificar que algo es una vaiable, en lugar de una cadena de caracters literal, usando el símbolo del dolar ($) antes del nombre de la variable.</p>
      
          <div class="example"><p><code> &lt;!--#set var="modified" value="$LAST_MODIFIED" --&gt;
          </code></p></div>
      
          <p>Para poner el símbolo del dolar de manera literal en un valor de su variable tendrá que escapar el símbolo del dolar con una barra "\".</p>
      <div class="example"><p><code>
              &lt;!--#set var="cost" value="\$100" --&gt;
      </code></p></div>
      
          <p>Por último, si quiere poner una variable entre medias de una cadena de caracteres más larga, y se da la coincidencia de que el nombre de la variable se encontrará con otros caracteres, y de esta manera se confundirá con otros caracteres, puedes poner el nombre de la variable entre llaves, y así eliminar la confusión. (Es dificil encontrar un buen ejemplo para esto, pero con éste a lo mejor entiende lo que tratamos de transmitir.)</p>
      <div class="example"><p><code>
              &lt;!--#set var="date" value="${DATE_LOCAL}_${DATE_GMT}" --&gt;
      </code></p></div>
      
      
      <h3><a name="conditional" id="conditional">Expresiones condicionales</a></h3>
      
      
          <p>Ahora que tenemos variables, y somos capaces de comparar sus valores, podemos usarlas para expresar condicionales. Esto permite a SSI ser un cierto tipo de lenguaje de programación diminuto.
          <code class="module"><a href="../mod/mod_include.html">mod_include</a></code> provee una estrucura <code>if</code>,
          <code>elif</code>, <code>else</code>, <code>endif</code>
          para construir declaraciones condicionales. Esto le permite generar de manera efectiva multitud de páginas lógicas desde tan solo una página.</p>
      
          <p>La estructura de este sistema condicional es:</p>
      <div class="example"><p><code>
          &lt;!--#if expr="test_condition" --&gt;<br />
          &lt;!--#elif expr="test_condition" --&gt;<br />
          &lt;!--#else --&gt;<br />
          &lt;!--#endif --&gt;
      </code></p></div>
      
          <p>Una <em>test_condition</em> puede ser cualquier tipo de comparación lógica - o bien comparando valores entre ellos, o probando la ``verdad'' (o falsedad) de un valor en particular. (Una cadena de caracteres cualquiera es verdadera si no está vacía.) Para una lista completa de operadores de comparación, vea la documentación de <code class="module"><a href="../mod/mod_include.html">mod_include</a></code>.</p>
      
          <p>Por ejemplo, si quiere personalizar el texto en su página web basado en la hora actual, puede usar la siguiente receta, colocada en su página HTML:</p>
      
          <div class="example"><p><code>
          Good
          &lt;!--#if expr="%{TIME_HOUR} &lt;12" --&gt;<br />
          morning!<br />
          &lt;!--#else --&gt;<br />
          afternoon!<br />
          &lt;!--#endif --&gt;<br />
          </code></p></div>
      
          <p>Cualquier otra variable (o bien las que defina usted, o variables de entorno normales) puede usarse en declaraciones condicionales.
          Vea <a href="../expr.html">Expresiones en el Servidor Apache HTTP</a> para más información sobre el motor de evaluación de expresiones.</p>
      
          <p>Con la habilidad de Apache de configurar variables de entorno con directivas <code>SetEnvIf</code>, y otras directivas relacionadas,
          esta funcionalidad puede llevarle a hacer una gran variedad de contenido dinámico en la parte de servidor sin tener que depender de una aplicación web al completo.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="conclusion" id="conclusion">Conclusión</a></h2>
      
          <p>Desde luego SSI no es un reemplazo para CGI u otras tecnologías que se usen para generar páginas web dinámicas. Pero es un gran método para añadir pequeñas cantidaddes de contenido dinámico a páginas web, sin hacer mucho más trabajo extra.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/ssi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/ssi.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/ssi.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/ssi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/ssi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentarios</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/ssi.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/index.html.ja.utf8���������������������������������������������������0000644�0000000�0000050�00000017472�13412755316�020076� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>How-To / ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ« - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="../">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>How-To / ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/howto/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/howto/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="howto" id="howto">How-To / ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«</a></h2>
      
          
      
          <dl>
            <dt>èªè¨¼ã¨æ‰¿èª</dt>
            <dd>
              <p>èªè¨¼ã¨ã¯ã€èª°ã‹ãŒè‡ªåˆ†ã¯èª°ã§ã‚ã‚‹ã‹ã‚’åä¹—ã£ã¦ã„ã‚‹ã‚‚ã®ã‚’検証ã™ã‚‹
              処ç†ã®ã“ã¨ã§ã™ã€‚承èªã¨ã¯ã€èª°ã‹ãŒæœ›ã¿ã®å ´æ‰€ã«è¾¿ã‚Šç€ã‘ãŸã‚Šã€
              望ã¿ã®æƒ…報を手ã«å…¥ã‚ŒãŸã‚Šã™ã‚‹ã“ã¨ã‚’許å¯ã™ã‚‹å‡¦ç†ã®ã“ã¨ã§ã™ã€‚</p>
      
              <p>å‚ç…§: <a href="auth.html">èªè¨¼ã¨æ‰¿èª</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>アクセス制御</dt>
            <dd>
              <p>アクセス制御ã¯ã€ã•ã¾ã–ã¾ãªæ¡ä»¶ã§ãƒªã‚½ãƒ¼ã‚¹ã«å¯¾ã™ã‚‹ã‚¢ã‚¯ã‚»ã‚¹ã‚’
              許å¯ã—ãŸã‚Šåˆ¶é™ã—ãŸã‚Šã™ã‚‹ã“ã¨ã‚’指ã—ã¾ã™ã€‚
              å®Ÿç¾æ–¹æ³•ã«ã¯æ§˜ã€…ãªç•°ãªã‚‹æ‰‹æ³•ãŒã‚りã¾ã™ã€‚</p>
      
              <p>å‚ç…§: <a href="access.html">アクセス制御</a></p>
            </dd>
          </dl>
      
         <dl>
            <dt>CGI ã«ã‚ˆã‚‹å‹•的コンテンツ</dt>
            <dd>
              <p>CGI (Common Gateway Interface) ã¯ã‚¦ã‚§ãƒ–サーãƒãŒå¤–部ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„
              生æˆãƒ—ログラムã¨ã©ã®ã‚ˆã†ã«ç›¸äº’動作をã™ã‚‹ã‹ã‚’定義ã—ã¾ã™ã€‚
              ãã®å¤–部プログラムã¯é€šå¸¸ CGI プログラムや CGI スクリプトã¨å‘¼ã°ã‚Œã¾ã™ã€‚
              CGI ã¯ã‚¦ã‚§ãƒ–サイトã«å‹•çš„ãªã‚³ãƒ³ãƒ†ãƒ³ãƒ„を追加ã™ã‚‹ãŸã‚ã®ã€
              å˜ç´”ãªæ–¹æ³•ã§ã™ã€‚ã“ã®æ–‡æ›¸ã¯ Apache ウェブサーãƒã«
              CGI を設定ã—ã€CGI プログラムを書ãå§‹ã‚ã‚‹ãŸã‚ã®ã‚¤ãƒ³ãƒˆãƒ­ãƒ€ã‚¯ã‚·ãƒ§ãƒ³ã§ã™ã€‚</p>
      
              <p>å‚ç…§: <a href="cgi.html">CGI: 動的コンテンツ</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt><code>.htaccess</code> ファイル</dt>
            <dd>
              <p><code>.htaccess</code> ファイルã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæ¯Žã«è¨­å®šã‚’変更ã™ã‚‹ãŸã‚ã®
              方法をæä¾›ã—ã¾ã™ã€‚è¨­å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæ›¸ã‹ã‚ŒãŸãƒ•ァイルãŒã€ã‚るドキュメント
              ディレクトリã«ç½®ã‹ã‚Œã‚‹ã¨ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¨
              ã™ã¹ã¦ã®ã‚µãƒ–ディレクトリã«é©ç”¨ã•れã¾ã™ã€‚</p>
      
              <p>å‚ç…§: <a href="htaccess.html"><code>.htaccess</code> ファイル</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Server Side Includes イントロダクション</dt>
            <dd>
              <p>SSI (Server Side Includes) 㯠HTML ãƒšãƒ¼ã‚¸ä¸­ã«æ›¸ã‹ã‚Œã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§ã€
              ページãŒé€ã‚‰ã‚Œã‚‹æ™‚ã«ã‚µãƒ¼ãƒã«ã‚ˆã‚Šè©•価ã•れã¾ã™ã€‚ã“れã«ã‚ˆã‚Šã€ãƒšãƒ¼ã‚¸å…¨ä½“ã‚’
              CGI プログラムã§ç”Ÿæˆã—ãŸã‚Šã€ä»–ã®å‹•çš„ãªæŠ€è¡“ã‚’ä½¿ã†ã“ã¨ãªãã€æ—¢å­˜ã® HTML
              ページã«å‹•çš„ã«ç”Ÿæˆã•れãŸå†…容を付加ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
              <p>å‚ç…§: <a href="ssi.html">Server Side Includes (SSI)</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>ユーザ毎ã®ã‚¦ã‚§ãƒ–ディレクトリ</dt>
            <dd>
              <p>複数ユーザã®å­˜åœ¨ã™ã‚‹ã‚·ã‚¹ãƒ†ãƒ ã§ã¯ã€ãれãžã‚Œã®ãƒ¦ãƒ¼ã‚¶ã¯ <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> ディレクティブを使ã†ã“ã¨ã«ã‚ˆã£ã¦
              ホームディレクトリ上ã«ã‚¦ã‚§ãƒ–サイトを作æˆã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
              URL <code>http://example.com/~username/</code> を訪れãŸäººã¯
              ユーザ "<code>username</code>" ã®ãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ã€<code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã•れãŸ
             サブディレクトリã‹ã‚‰ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’å¾—ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚</p>
      
              <p>å‚ç…§: <a href="public_html.html">ユーザウェブディレクトリ (<code>public_html</code>)</a></p>
            </dd>
          </dl>
      
        </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/howto/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/howto/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/reverse_proxy.html.fr.utf8�������������������������������������������0000644�0000000�0000050�00000053651�13412755316�021717� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Guide de configuration d'un mandataire inverse - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Recettes / Tutoriels</a></div><div id="page-content"><div id="preamble"><h1>Guide de configuration d'un mandataire inverse</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/reverse_proxy.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/howto/reverse_proxy.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>En plus de ses fonctions de serveur web "basique", à savoir fournir du
          contenu statique et dynamique à l'utilisateur, Apache httpd (comme la
          plupart des autres serveurs web) peut aussi assurer les fonctions de serveur
          mandataire inverse, connu aussi sous le nom de serveur "passerelle".</p>
      
          <p>Dans un tel scénario, httpd ne génère et n'héberge pas lui-même les
          données, le contenu étant en général obtenu à partir d'un ou plusieurs serveurs
          d'arrière-plan qui n'ont normalement aucune connexion directe avec le réseau
          externe. Lorsque httpd reçoit une requête en provenance d'un client, la
          requête proprement dite est <em>mandatée</em> vers un de ces serveurs
          d'arrière-plan qui traite la requête, génère le contenu et l'envoie à httpd,
          ce dernier générant la véritable réponse HTTP à destination du client.</p>
      
          <p>De nombreuses raisons peuvent vous motiver à utiliser cette
          fonctionnalité, mais elles sont souvent du domaine de la sécurité, de
          la haute disponibilité, de la répartition de charge et de
          l'authentification/autorisation centralisée. Il est alors indispensable que
          l'organisation, la conception et l'architecture de l'infrastructure
          d'arrière-plan (les serveurs qui traitent au sens propre les requêtes) soient
          isolées et protégées de l'extérieur ; vu du client, le serveur mandataire
          inverse <em>est</em> le seul serveur accessible pouvant lui fournir du
          contenu.</p>
      
          <p>Voici un exemple typique d'implémentation de cette fonctionnalité :</p>
          <p class="centered"><img src="../images/reverse-proxy-arch.png" alt="reverse-proxy-arch" /></p>
      
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Mandataire inverse</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#simple">Mandatement inverse simple</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cluster">Clusters et Balancers</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#config">Configuration du Balancer et des BalancerMembers</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#failover">Gestion des indisponibilités (Failover)</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#manager">Gestion du répartiteur de charge</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#health-check">Vérification dynamique du bon fonctionnement d'un serveur
          d'arrière-plan</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#status">Drapeaux d'état d'un membre du groupe de répartition de charge</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Mandataire inverse</a></h2>
        
        <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_proxy.html">mod_proxy</a></code></li><li><code class="module"><a href="../mod/mod_proxy_balancer.html">mod_proxy_balancer</a></code></li><li><code class="module"><a href="../mod/mod_proxy_hcheck.html">mod_proxy_hcheck</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/mod_proxy.html#proxypass">ProxyPass</a></code></li><li><code class="directive"><a href="../mod/mod_proxy.html#balancermember">BalancerMember</a></code></li></ul></td></tr></table>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="simple" id="simple">Mandatement inverse simple</a></h2>
          
      
          <p>
            La directive <code class="directive"><a href="../mod/mod_proxy.html#proxypass">ProxyPass</a></code> permet de
            rediriger les requêtes entrantes vers un serveur d'arrière-plan (ou un
            cluster de serveurs plus connu sous le nom de groupe
            <code>Balancer</code>). Dans cet exemple le plus simple, toutes les
            requêtes (<code>"/"</code>) sont redirigées vers un serveur d'arrière-plan
            unique :
          </p>
      
          <pre class="prettyprint lang-config">ProxyPass "/"  "http://www.example.com/"</pre>
      
      
          <p>
            Pour être sur que cette redirection soit effectuée et que les en-têtes
            <code>Location:</code> générés par le serveur d'arrière-plan soient
            modifiés pour pointer vers le mandataire inverse, et non vers le serveur
            d'arrière-plan, la directive <code class="directive"><a href="../mod/mod_proxy.html#proxypassreverse">ProxyPassReverse</a></code> est souvent requise :
          </p>
      
          <pre class="prettyprint lang-config">ProxyPass "/"  "http://www.example.com/"
      ProxyPassReverse "/"  "http://www.example.com/"</pre>
      
      
          <p>Seules des URIs spécifiques peuvent être mandatées, comme le montre
          l'exemple suivant :</p>
      
          <pre class="prettyprint lang-config">ProxyPass "/images"  "http://www.example.com/"
      ProxyPassReverse "/images"  "http://www.example.com/"</pre>
      
      
          <p>Dans l'exemple précédent, si le chemin d'une requête commence par
          <code>/images</code>, elle sera redirigée vers le serveur d'arrière-plan
          spécifié ; dans le cas contraire, elle sera traitée localement.
          </p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cluster" id="cluster">Clusters et Balancers</a></h2>
          
      
          <p>
            Utiliser un serveur d'arrière-plan unique n'est cependant pas une solution
            idéale car ce dernier peut devenir indisponible ou surchargé, et le
            mandatement inverse vers ce serveur ne présente alors plus aucun avantage.
            La solution réside dans la définition d'un groupe de serveurs
            d'arrière-plan qui vont se partager le traitement des requêtes via un
            mécanisme de répartition de charge et de gestion des indisponibilités pris
            en charge par le mandataire. Ce groupe de répartition est plus connu sous le nom de
            <em>cluster</em>, mais dans la terminologie d'Apache httpd, on utilise
            plutôt le terme de <em>balancer</em>. Un balancer se définit en
            utilisant les directives <code class="directive"><a href="../mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code> et <code class="directive"><a href="../mod/mod_proxy.html#balancermember">BalancerMember</a></code> comme suit :
          </p>
      
          <pre class="prettyprint lang-config">&lt;Proxy balancer://myset&gt;
          BalancerMember http://www2.example.com:8080
          BalancerMember http://www3.example.com:8080
          ProxySet lbmethod=bytraffic
      &lt;/Proxy&gt;
      
      ProxyPass "/images/"  "balancer://myset/"
      ProxyPassReverse "/images/"  "balancer://myset/"</pre>
      
      
          <p>
            Le protocole <code>balancer://</code> indique à httpd que l'on souhaite
            créer un balancer nommé <em>myset</em>. Ce balancer comporte deux serveurs
            d'arrière-plan référencés dans la terminologie httpd sous le nom de
            <em>BalancerMembers</em>. Avec cet exemple, toute requête dont le chemin
            commence par <code>/images</code> sera mandatée vers <em>un</em> des deux
            serveurs d'arrière-plan. La directive <code class="directive"><a href="../mod/mod_proxy.html#proxyset">ProxySet</a></code> définit ici pour le balancer
            <em>myset</em> un algorithme de
            répartition de charge basé sur le trafic entrées/sorties.
          </p>
      
          <div class="note"><h3>Remarque</h3>
            <p>
            	Les <em>BalancerMembers</em> sont aussi souvent référencés sous le terme
      	<em>workers</em>.
            </p>
         </div>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="config" id="config">Configuration du Balancer et des BalancerMembers</a></h2>
          
      
          <p>
            Vous pouvez configurer de manière détaillée les <em>balancers</em> et
            <em>workers</em> via les nombreux paramètres de la directive <code class="directive"><a href="../mod/mod_proxy.html#proxypass">ProxyPass</a></code>. Par exemple, si vous souhaitez
            que <code>http://www3.example.com:8080</code> traite avec un facteur 3 le
            trafic avec un timeout d'une seconde, utilisez la configuration suivante :
          </p>
      
          <pre class="prettyprint lang-config">&lt;Proxy balancer://myset&gt;
          BalancerMember http://www2.example.com:8080
          BalancerMember http://www3.example.com:8080 loadfactor=3 timeout=1
          ProxySet lbmethod=bytraffic
      &lt;/Proxy&gt;
      
      ProxyPass "/images"  "balancer://myset/"
      ProxyPassReverse "/images"  "balancer://myset/"</pre>
      
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="failover" id="failover">Gestion des indisponibilités (Failover)</a></h2>
          
      
          <p>
            Vous pouvez aussi définir finement des scénarios pour les cas
            d'indisponibilité d'un ou plusieurs serveurs d'arrière-plan en spécifiant
            quels serveurs doivent alors prendre le relai. Dans l'exemple suivant,
            trois scénarios sont envisagés :
          </p>
          <ol>
            <li>
              <code>http://spare1.example.com:8080</code> et
              <code>http://spare2.example.com:8080</code> ne sont sollicités que si
      	<code>http://www2.example.com:8080</code> ou
      	<code>http://www3.example.com:8080</code> est indisponible (un serveur
      	de remplacement sera utilisé à la place d'un membre indisponible du même
      	jeu de serveurs cibles).
            </li>
            <li>
              <code>http://hstandby.example.com:8080</code> n'est sollicité que si
      	tous les autres serveurs cibles du jeu de serveurs <code>0</code> sont
      	indisponibles.
            </li>
            <li>
              Les serveurs <code>http://bkup1.example.com:8080</code> et
      	<code>http://bkup2.example.com:8080</code> du jeu <code>1</code> ne seront sollicités que si
      	tous les serveurs du jeu <code>0</code>, tous les serveurs de
      	remplacement et tous les serveurs de standby sont indisponibles.
            </li>
          </ol>
          <p>
            Il est ainsi possible de définir un ou plusieurs serveurs de remplacement
            ou de standby pour chaque jeu de serveurs du répartiteur de charge.
          </p>
      
          <pre class="prettyprint lang-config">&lt;Proxy balancer://myset&gt;
          BalancerMember http://www2.example.com:8080
          BalancerMember http://www3.example.com:8080 loadfactor=3 timeout=1
          BalancerMember http://spare1.example.com:8080 status=+R
          BalancerMember http://spare2.example.com:8080 status=+R
          BalancerMember http://hstandby.example.com:8080 status=+H
          BalancerMember http://bkup1.example.com:8080 lbset=1
          BalancerMember http://bkup2.example.com:8080 lbset=1
          ProxySet lbmethod=byrequests
      &lt;/Proxy&gt;
      
      ProxyPass "/images/"  "balancer://myset/"
      ProxyPassReverse "/images/"  "balancer://myset/"</pre>
      
      
          <p>
            Les serveurs de remplacement à chaud remplacent les serveurs indisponibles
            du même jeu de serveurs du répartiteur de charge. Un serveur est
            considéré comme indisponible s'il est en maintenance, arrêté ou en erreur.
            Les serveurs de standby à chaud sont utilisés si tous les serveurs et
            serveurs de remplacement du jeu de serveurs du répartiteur de charge sont
            indisponibles. Les jeux de serveurs du répartiteur de charge (avec leurs
            serveurs de standby et de remplacement à chaud respectifs) sont toujours
            sollicités dans l'ordre du plus bas lbset vers le plus haut.
          </p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="manager" id="manager">Gestion du répartiteur de charge</a></h2>
          
      
          <p>
           L'application <em>balancer-manager</em> fournie avec le mandataire inverse
           d'Apache httpd en est un des outils les plus utiles. Comme
           <code class="module"><a href="../mod/mod_status.html">mod_status</a></code>, <em>balancer-manager</em> affiche la
           configuration et l'activité actuelles des balancers actifs. L'affichage de
           ces informations n'est cependant pas sa seule fonction ; il permet aussi de
           modifier la plupart d'entre elles et même d'ajouter des membres au groupe
           de répartition de charge en temps réel. Pour activer ces fonctionnalités,
           vous devez ajouter les lignes suivantes à votre fichier de configuration : 
          </p>
      
          <pre class="prettyprint lang-config">&lt;Location "/balancer-manager"&gt;
          SetHandler balancer-manager
          Require host localhost
      &lt;/Location&gt;</pre>
      
      
          <div class="warning"><h3>Avertissement</h3>
            <p>N'activez le <em>balancer-manager</em> que si vous avez déjà <a href="../mod/mod_proxy.html#access">sécurisé votre serveur</a>.
            Assurez-vous en particulier que l'accès à l'URL soit fortement restreint.</p>
          </div>
      
          <p>
            Lorsque vous accédez au serveur mandataire avec une adresse du style
            <code>http://rproxy.example.com/balancer-manager/</code>, la page suivante
            s'affiche :
          </p>
          <p class="centered"><img src="../images/bal-man.png" alt="balancer-manager page" /></p>
      
          <p>
            Ce formulaire permet à l'administrateur de modifier certains paramètres,
            de désactiver ou d'ajouter certains serveurs d'arrière-plan, et de
            modifier les règles de répartition de charge. Par exemple, si on clique
            sur le répartiteur, la page suivante s'affiche : 
          </p>
          <p class="centered"><img src="../images/bal-man-b.png" alt="balancer-manager page" /></p>
      
          <p>
            Si on clique sur un membre du groupe de répartition de charge, la page
            suivante s'affiche :
          </p>
          <p class="centered"><img src="../images/bal-man-w.png" alt="balancer-manager page" /></p>
      
          <p>
            Si vous souhaitez que ces modifications soient conservées après un
            redémarrage du serveur, assurez-vous que la directive <code class="directive"><a href="../mod/mod_proxy.html#balancerpersist">BalancerPersist</a></code> soit définie à On.
          </p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="health-check" id="health-check">Vérification dynamique du bon fonctionnement d'un serveur
          d'arrière-plan</a></h2>
          
      
          <p>
            Avant que le mandataire httpd ne fasse appel à un serveur d'arrière-plan, il
            peut <em>"tester"</em> si ce dernier est disponible en définissant le
            paramètre <code>ping</code> de ce serveur via la directive <code class="directive"><a href="../mod/mod_proxy.html#proxypass">ProxyPass</a></code>. Cependant, il est souvent plus
            judicieux de vérifier le bon fonctionnement d'un serveur <em>hors
            bande</em> et de manière dynamique via le module
            <code class="module"><a href="../mod/mod_proxy_hcheck.html">mod_proxy_hcheck</a></code> d'Apache httpd.
          </p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="status" id="status">Drapeaux d'état d'un membre du groupe de répartition de charge</a></h2>
          
      
          <p>
            <em>balancer-manager</em> permet d'afficher et de modifier l'état d'un
            membre du groupe de répartition de charge. Les différents états et leurs
            significations sont les suivants :
          </p>
            <table class="bordered">
            	<tr><th>Drapeau</th><th>Sigle</th><th>Description</th></tr>
            	<tr><td>&nbsp;</td><td><em>Ok</em></td><td>Le serveur est disponible</td></tr>
            	<tr><td>&nbsp;</td><td><em>Init</em></td><td>Le serveur a été initialisé</td></tr>
              <tr><td><code>D</code></td><td><em>Dis</em></td><td>Le serveur est
      	désactivé et n'accepte aucune requête ; il sera retesté automatiquement.</td></tr>
              <tr><td><code>S</code></td><td><em>Stop</em></td><td>Le serveur a été
      	arrêté par l'administrateur ; il n'accepte aucune requête et il ne sera
      	pas retesté automatiquement.</td></tr>
              <tr><td><code>I</code></td><td><em>Ign</em></td><td>Les erreurs
      	concernant ce serveur sont ignorées et il sera donc toujours considéré
      	comme disponible.</td></tr>
      	<tr><td><code>R</code></td><td><em>Spar</em></td><td>Le serveur cible sert de remplaçant à
      	 chaud. Lorsqu'un serveur cible avec un lbset donné est inutilisable
      	 (maintenance, arrêt, en erreur, etc...), un serveur de remplacement à
      	 chaud libre de même lbset sera utilisé à sa place. Les remplaçants à
      	 chaud permettent de s'assurer qu'un nombre déterminé de serveurs cibles
      	 sera toujours disponible pour un répartiteur de charge.</td></tr>
              <tr><td><code>H</code></td><td><em>Stby</em></td><td>Le serveur est en
      	mode hot-standby et ne sera donc utilisé que si aucun autre serveur ou
      	serveur de remplacement	n'est disponible dans le jeu de serveurs du
      	répartiteur de charge.</td></tr>
              <tr><td><code>E</code></td><td><em>Err</em></td><td>Le serveur est en
      	erreur, en général suite à un test préalable à une requête ; aucune
      	requête ne lui sera soumise, mais il sera retesté en fonction de la
      	valeur de son paramètre <code>retry</code>.</td></tr>
              <tr><td><code>N</code></td><td><em>Drn</em></td><td>Le serveur est en
      	mode drain ; il n'acceptera de requêtes que dans le cadre des sessions
      	persistantes qui lui sont réservées et ignorera toutes les autres.</td></tr>
              <tr><td><code>C</code></td><td><em>HcFl</em></td><td>Le serveur a échoué
      	au test dynamique de bon fonctionnement et ne sera utilisé que lorsqu'il
      	aura réussi un test ultérieur.</td></tr>
            </table>
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/reverse_proxy.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/howto/reverse_proxy.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/reverse_proxy.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/auth.html.ko.euc-kr��������������������������������������������������0000644�0000000�0000050�00000051075�13412755316�020244� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>ÀÎÁõ(Authentication), ±ÇÇѺο©(Authorization),
      Á¢±ÙÁ¦¾î(Access Control) - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutorials</a></div><div id="page-content"><div id="preamble"><h1>ÀÎÁõ(Authentication), ±ÇÇѺο©(Authorization),
      Á¢±ÙÁ¦¾î(Access Control)</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/howto/auth.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/auth.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/auth.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/auth.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/auth.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/auth.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p>ÀÎÁõ(authentication)Àº ÀÚ½ÅÀÌ ´©±¸¶ó°í ÁÖÀåÇÏ´Â »ç¶÷À»
          È®ÀÎÇÏ´Â ÀýÂ÷ÀÌ´Ù. ±ÇÇѺο©(authorization)´Â °¡°í ½ÍÀº °÷À¸·Î
          °¡µµ·Ï ȤÀº ¿øÇÏ´Â Á¤º¸¸¦ ¾òµµ·Ï Çã¿ëÇÏ´Â °úÁ¤ÀÌ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">°ü·Ã ¸ðµâ°ú Áö½Ã¾î</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#introduction">¼Ò°³</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#theprerequisites">±âº» Áö½Ä</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#gettingitworking">±âº»ÀûÀÎ ¼³Á¤Çϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#lettingmorethanonepersonin">¿©·¯¸íÀ» µé¿©º¸³»±â</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#possibleproblems">¹ß»ýÇÒ ¼ö ÀÖ´Â ¹®Á¦Á¡</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#whatotherneatstuffcanido">´Ù¸¥ ¹æ¹ýµµ °¡´ÉÇѰ¡?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#moreinformation">´õ ¸¹Àº Á¤º¸</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">°ü·Ã ¸ðµâ°ú Áö½Ã¾î</a></h2>
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code></li><li><code class="module"><a href="../mod/mod_authn_file.html">mod_authn_file</a></code></li><li><code class="module"><a href="../mod/mod_authz_groupfile.html">mod_authz_groupfile</a></code></li><li><code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/mod_authz_host.html#allow">Allow</a></code></li><li><code class="directive"><a href="../mod/mod_authz_groupfile.html#authgroupfile">AuthGroupFile</a></code></li><li><code class="directive"><a href="../mod/core.html#authname">AuthName</a></code></li><li><code class="directive"><a href="../mod/core.html#authtype">AuthType</a></code></li><li><code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code></li><li><code class="directive"><a href="../mod/mod_authz_host.html#deny">Deny</a></code></li><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/core.html#require">Require</a></code></li></ul></td></tr></table>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">¼Ò°³</a></h2>
          <p>´ç½ÅÀÇ À¥»çÀÌÆ®¿¡ ÀÖ´Â Á¤º¸°¡ ¼Ò¼öÀÇ »ç¶÷µé¸¸ÀÇ ºñ¹ÐÀ̰ųª
          À̵鸸À» À§ÇÑ Á¤º¸¶ó¸é, ÀÌ ±Û¿¡¼­ ¼³¸íÇÏ´Â ±â¹ýÀ» »ç¿ëÇÏ¿©
          ´ç½ÅÀÌ º¸±æ ¿øÇÏ´Â »ç¶÷¸¸ ÆäÀÌÁö¸¦ º¸µµ·Ï ÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>ÀÌ ±ÛÀº À¥»çÀÌÆ®ÀÇ ÀϺθ¦ º¸È£ÇϱâÀ§ÇØ ¸¹Àº »ç¶÷µéÀÌ
          »ç¿ëÇÏ´Â "Ç¥ÁØÀûÀÎ" ¹æ¹ýÀ» ´Ù·é´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="theprerequisites" id="theprerequisites">±âº» Áö½Ä</a></h2>
          <p>ÀÌ ±Û¿¡¼­ ´Ù·ç´Â Áö½Ã¾î´Â ¼­¹öÀÇ ÁÖ¼³Á¤ÆÄÀÏ(ÀϹÝÀûÀ¸·Î
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code>
          ¼½¼Ç)À̳ª µð·ºÅ丮º° ¼³Á¤ÆÄÀÏ(<code>.htaccess</code> ÆÄÀÏ)¿¡¼­
          »ç¿ëÇÑ´Ù.</p>
      
          <p><code>.htaccess</code> ÆÄÀÏÀ» »ç¿ëÇÏ·Á¸é ÀÌ ÆÄÀÏ¿¡ ÀÖ´Â
          ÀÎÁõ Áö½Ã¾î¸¦ Çã¿ëÇϵµ·Ï ¼­¹ö¸¦ ¼³Á¤ÇØ¾ß ÇÑ´Ù. À̸¦ À§ÇØ
          µð·ºÅ丮º° ¼³Á¤ÆÄÀÏ¿¡ ¾î¶² Áö½Ã¾î¸¦ »ç¿ëÇÒ ¼ö ÀÖ´ÂÁö¸¦ °áÁ¤ÇÏ´Â
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> Áö½Ã¾î¸¦
          »ç¿ëÇÑ´Ù.</p>
      
          <p>¿©±â¼­´Â ÀÎÁõÀ» ´Ù·ç±â ¶§¹®¿¡, ´ÙÀ½°ú °°Àº
          <code>AllowOverride</code> Áö½Ã¾î°¡ ÇÊ¿äÇÏ´Ù.</p>
      
          <div class="example"><p><code>
            AllowOverride AuthConfig
          </code></p></div>
      
          <p>ȤÀº Áö½Ã¾î¸¦ Á÷Á¢ ¼­¹ö ÁÖ¼³Á¤ÆÄÀÏ¿¡ Àû´Â´Ù¸é, ±× ÆÄÀÏ¿¡
          ¾²±â ±ÇÇÑÀÌ ¹°·Ð ÀÖ¾î¾ß ÇÑ´Ù.</p>
      
          <p>±×¸®°í º¸È£ÇÒ ÆÄÀÏÀÌ ¾îµðÀÖ´ÂÁö ¾Ë±âÀ§ÇØ ¼­¹öÀÇ µð·ºÅ丮
          ±¸Á¶¿¡ ´ëÇØ Á¶±Ý ¾Ë¾Æ¾ßÇÑ´Ù. ÀÌ ÀÏÀº ¾î·ÆÁö¾Ê°í, Àû´çÇÑ
          ¶§¿¡ ÀÚ¼¼È÷ ¼³¸íÇÒ °ÍÀÌ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="gettingitworking" id="gettingitworking">±âº»ÀûÀÎ ¼³Á¤Çϱâ</a></h2>
          <p>ÀÌÁ¦ ¼­¹öÀÇ µð·ºÅ丮¸¦ ¾ÏÈ£·Î º¸È£ÇÏ´Â ±âº»ÀûÀÎ ¹æ¹ýÀ»
          ¼³¸íÇÑ´Ù.</p>
      
          <p>¸ÕÀú ¾ÏÈ£ÆÄÀÏÀ» ¸¸µé¾î¾ß ÇÑ´Ù. ÀÌ ÆÄÀÏÀº À¥¿¡¼­ Á¢±ÙÇÒ
          ¼ö ¾ø´Â °÷¿¡ ÀÖ¾î¾ß ÇÑ´Ù. ´Ù¸¥»ç¶÷ÀÌ ¾ÏÈ£ÆÄÀÏÀ» ´Ù¿î·ÎµåÇÏÁö
          ¸øÇϰÔÇϱâ À§Çؼ­´Ù. ¿¹¸¦ µé¾î, ¹®¼­µéÀÌ
          <code>/usr/local/apache/htdocs</code>¿¡ ÀÖ´Ù¸é ¾ÏÈ£ÆÄÀÏ(µé)Àº
          <code>/usr/local/apache/passwd</code>¿¡ µÐ´Ù.</p>
      
          <p>¾ÆÆÄÄ¡¿¡ Æ÷ÇÔµÈ <a href="../programs/htpasswd.html">htpasswd</a> µµ±¸¸¦ »ç¿ëÇÏ¿©
          ¾ÏÈ£ÆÄÀÏÀ» ¸¸µç´Ù. ÀÌ ÇÁ·Î±×·¥Àº ¾ÆÆÄÄ¡¸¦ ¼³Ä¡ÇÑ °÷ÀÇ
          <code>bin</code> µð·ºÅ丮¿¡ ÀÖ´Ù. ÆÄÀÏÀ» ¸¸µé·Á¸é ´ÙÀ½°ú
          °°ÀÌ ÀÔ·ÂÇÑ´Ù.</p>
      
          <div class="example"><p><code>
            htpasswd -c /usr/local/apache/passwd/passwords rbowen
          </code></p></div>
      
          <p><code>htpasswd</code>´Â ¾ÏÈ£¸¦ ¹°¾îº¸°í, È®ÀÎÀ» À§ÇØ
          ¾ÏÈ£¸¦ ´Ù½Ã ÀÔ·ÂÇ϶ó°í ¿äûÇÑ´Ù.</p>
      
          <div class="example"><p><code>
            # htpasswd -c /usr/local/apache/passwd/passwords rbowen<br />
            New password: mypassword<br />
            Re-type new password: mypassword<br />
            Adding password for user rbowen
          </code></p></div>
      
          <p>¹°·Ð <code>htpasswd</code>ÀÌ ½ÇÇàÆÄÀÏ °æ·Î¿¡ ¾ø´Ù¸é
          ½ÇÇàÆÄÀÏÀÇ Àüü °æ·Î¸¦ ÀÔ·ÂÇØ¾ß ÇÑ´Ù. ³»°¡ »ç¿ëÇÏ´Â ¼­¹ö¿¡¼­´Â
          <code>/usr/local/apache/bin/htpasswd</code>¿¡ ½ÇÇàÆÄÀÏÀÌ
          ÀÖ´Ù.</p>
      
          <p>´ÙÀ½À¸·Î ¼­¹ö°¡ ¾ÏÈ£¸¦ ¿äûÇϵµ·Ï ¼³Á¤Çϰí, ¼­¹ö¿¡°Ô
          ¾î¶² »ç¿ëÀÚÀÇ Á¢±ÙÀ» Çã¿ëÇÒÁö ¾Ë·ÁÁà¾ß ÇÑ´Ù.
          <code>httpd.conf</code>¸¦ ÆíÁýÇϰųª <code>.htaccess</code>
          ÆÄÀÏÀ» »ç¿ëÇÏ¿© ¼³Á¤ÇÑ´Ù. ¿¹¸¦ µé¾î,
          <code>/usr/local/apache/htdocs/secret</code> µð·ºÅ丮¸¦
          º¸È£ÇÏ·Á¸é, ¾Æ·¡ Áö½Ã¾î¸¦
          <code>/usr/local/apache/htdocs/secret/.htaccess</code> ÆÄÀÏÀ̳ª
          <code>httpd.conf</code>ÀÇ &lt;Directory
          /usr/local/apache/apache/htdocs/secret&gt; ¼½¼Ç¿¡ Àû¾î¾ß
          ÇÑ´Ù.</p>
      
          <div class="example"><p><code>
            AuthType Basic<br />
            AuthName "Restricted Files"<br />
            AuthUserFile /usr/local/apache/passwd/passwords<br />
            Require user rbowen
          </code></p></div>
      
          <p>Áö½Ã¾î¸¦ Çϳª¾¿ »ìÆìº¸ÀÚ. <code class="directive"><a href="../mod/core.html#authtype">AuthType</a></code> Áö½Ã¾î´Â »ç¿ëÀÚ¸¦ ÀÎÁõÇÒ
          ¹æ¹ýÀ» ¼±ÅÃÇÑ´Ù. °¡Àå ÀϹÝÀûÀÎ ¹æ¹ýÀº <code>Basic</code>À¸·Î,
          <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code>ÀÌ ±¸ÇöÇÑ´Ù. ±×·¯³ª Basic
          ÀÎÁõÀº ºê¶ó¿ìÀú°¡ ¼­¹ö·Î ¾ÏÈ£¸¦ ¾ÏȣȭÇÏÁö ¾Ê°í º¸³½´Ù.
          ±×·¯¹Ç·Î ±â¹Ð ÀڷḦ º¸È£ÇϱâÀ§ÇØ ÀÌ ¹æ¹ýÀ» »ç¿ëÇÏ¸é ¾ÈµÈ´Ù.
          ¾ÆÆÄÄ¡´Â <code>AuthType Digest</code>¶ó´Â ÀÎÁõ ¹æ¹ýµµ Áö¿øÇÑ´Ù.
          ÀÌ ¹æ¹ýÀº <code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code>°¡ ±¸ÇöÇϸç, ¸Å¿ì
          ¾ÈÀüÇÏ´Ù. °¡Àå Ãֱ٠Ŭ¶óÀÌ¾ðÆ®µé¸¸ÀÌ Digest ÀÎÁõÀ» Áö¿øÇÑ´Ù°í
          ÇÑ´Ù.</p>
      
          <p><code class="directive"><a href="../mod/core.html#authname">AuthName</a></code> Áö½Ã¾î´Â
          ÀÎÁõ¿¡ »ç¿ëÇÒ <dfn>¿µ¿ª(realm)</dfn>À» ÁöÁ¤ÇÑ´Ù. ¿µ¿ªÀº
          µÎ°¡Áö ¿ªÇÒÀ» ÇÑ´Ù. ù¹øÂ°´Â Ŭ¶óÀÌ¾ðÆ®°¡ º¸Åë ÀÌ Á¤º¸¸¦
          ¾ÏÈ£ ´ëȭâ¿¡ º¸¿©ÁØ´Ù. µÎ¹øÂ°´Â ¿µ¿ª Á¤º¸¸¦ »ç¿ëÇÏ¿©
          Ŭ¶óÀÌ¾ðÆ®°¡ ƯÁ¤ ÀÎÁõ±¸¿ª¿¡ ¾î¶² ¾ÏÈ£¸¦ º¸³¾Áö °áÁ¤ÇÑ´Ù.</p>
      
          <p>¿¹¸¦ µé¾î, ÀÏ´Ü Å¬¶óÀÌ¾ðÆ®°¡ <code>"Restricted Files"</code>
          ¿µ¿ª¿¡ ÀÎÁõÀÌ ¼º°øÇÏ¿´´Ù¸é, Ŭ¶óÀÌ¾ðÆ®´Â ÀÚµ¿À¸·Î °°Àº ¼­¹ö¿¡¼­
          <code>"Restricted Files"</code> ¿µ¿ªÀ¸·Î Ç¥½ÃµÈ ±¸¿ª¿¡ ´ëÇØ
          µ¿ÀÏÇÑ ¾ÏÈ£¸¦ ½ÃµµÇÑ´Ù. ±×·¡¼­ ¿©·¯ Á¦ÇÑ ±¸¿ªÀÌ °°Àº ¿µ¿ªÀ»
          °øÀ¯ÇÏ¸é »ç¿ëÀÚ°¡ ¿©·¯¹ø ¾ÏÈ£¸¦ ÀÔ·ÂÇÏÁö ¾Ê¾Æµµ µÈ´Ù. ¹°·Ð
          º¸¾È»ó ÀÌÀ¯·Î Ŭ¶óÀÌ¾ðÆ®´Â ¼­¹öÀÇ È£½ºÆ®¸íÀÌ ´Ù¸£¸é Ç×»ó
          »õ·Î ¾ÏÈ£¸¦ ¹°¾îº»´Ù.</p>
      
          <p><code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code>
          Áö½Ã¾î´Â ¿ì¸®°¡ ¹æ±Ý <code>htpasswd</code>·Î ¸¸µç ¾ÏÈ£ÆÄÀÏÀÇ
          °æ·Î¸¦ ¼³Á¤ÇÑ´Ù. »ç¿ëÀÚ°¡ ¸¹´Ù¸é ¿äû¸¶´Ù ¸Å¹ø »ç¿ëÀÚ¸¦
          ÀÎÁõÇϱâÀ§ÇØ ÀÏ¹Ý ¹®¼­ÆÄÀÏÀ» °Ë»öÇϴµ¥ ½Ã°£ÀÌ »ó´çÈ÷ ¸¹ÀÌ
          °É¸± ¼ö ÀÖ´Ù. ¾ÆÆÄÄ¡´Â ºü¸¥ µ¥ÀÌŸº£À̽º ÆÄÀÏ¿¡ »ç¿ëÀÚ Á¤º¸¸¦
          ÀúÀåÇÒ ¼ö ÀÖ´Ù. <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> ¸ðµâÀº <code class="directive"><a href="../mod/mod_authn_dbm.html#authdbmuserfile">AuthDBMUserFile</a></code> Áö½Ã¾î¸¦
          Á¦°øÇÑ´Ù. <a href="../programs/dbmmanage.html">dbmmanage</a>
          ÇÁ·Î±×·¥À» »ç¿ëÇÏ¿© ¾ÏÈ£ÆÄÀÏÀ» ¸¸µé°í ´Ù·é´Ù. <a href="http://modules.apache.org/">¾ÆÆÄÄ¡ ¸ðµâ
          µ¥ÀÌŸº£À̽º</a>¿¡´Â ¿©·¯ ´Ù¸¥ ÀÎÁõ ¹æ½ÄÀ» Á¦°øÇÏ´Â Á¦»ïÀÚ°¡
          ¸¸µç ¸ðµâµéÀÌ ÀÖ´Ù.</p>
      
          <p>¸¶Áö¸·À¸·Î <code class="directive"><a href="../mod/core.html#require">Require</a></code>
          Áö½Ã¾î´Â ¼­¹öÀÇ Æ¯Á¤ ¿µ¿ª¿¡ Á¢±ÙÇÒ ¼ö ÀÖ´Â »ç¿ëÀÚ¸¦ ÁöÁ¤ÇÏ¿©
          ±ÇÇѺο©¸¦ ÇÑ´Ù. ´ÙÀ½ ÀýÀº <code>require</code> Áö½Ã¾î¸¦
          »ç¿ëÇÏ´Â ´Ù¾çÇÑ ¹æ¹ýÀ» ¼³¸íÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="lettingmorethanonepersonin" id="lettingmorethanonepersonin">¿©·¯¸íÀ» µé¿©º¸³»±â</a></h2>
          <p>À§ÀÇ Áö½Ã¾î´Â µð·ºÅ丮·Î (»ç¿ëÀÚ¸íÀÌ <code>rbowen</code>ÀÎ)
          ÇÑ »ç¶÷¸¸À» µé¿©º¸³½´Ù. ´ëºÎºÐÀÇ °æ¿ì ¿©·¯ »ç¶÷À» µé¿©º¸³»°í
          ½ÍÀ» °ÍÀÌ´Ù. ÀÌÁ¦ <code class="directive"><a href="../mod/mod_authz_groupfile.html#authgroupfile">AuthGroupFile</a></code>À»
          »ç¿ëÇÒ ¶§´Ù.</p>
      
          <p>¿©·¯ »ç¶÷À» µé¿©º¸³»°í ½Í´Ù¸é ±×·ì¸í°ú ±× ±×·ì¿¡ ¾î¶²
          »ç¿ëÀÚµéÀÌ ÀÖ´ÂÁö ¾Ë·ÁÁÖ´Â ±×·ìÆÄÀÏÀÌ ÇÊ¿äÇÏ´Ù. ÀÌ ÆÄÀÏÀÇ
          Çü½ÄÀº ¸Å¿ì °£´ÜÇÏ¿©, ¾Æ¹« ÆíÁý±â·Î³ª ¸¸µé ¼ö ÀÖ´Ù. ÆÄÀϳ»¿ëÀº
          ´ÙÀ½°ú °°´Ù.</p>
      
         <div class="example"><p><code>
           GroupName: rbowen dpitts sungo rshersey
         </code></p></div>
      
          <p>±×³É °ø¹éÀ¸·Î ±¸ºÐÇÑ ±ä ±×·ì ±¸¼º¿ø ¸ñ·ÏÀÏ »ÓÀÌ´Ù.</p>
      
          <p>±âÁ¸ÀÇ ¾ÏÈ£ÆÄÀÏ¿¡ »ç¿ëÀÚ¸¦ Ãß°¡ÇÏ·Á¸é ´ÙÀ½°ú °°ÀÌ ÀÔ·ÂÇÑ´Ù</p>
      
          <div class="example"><p><code>
            htpasswd /usr/local/apache/passwd/passwords dpitts
          </code></p></div>
      
          <p>Àü°ú °°Áö¸¸, »õ·Î ÆÄÀÏÀ» ¸¸µéÁö ¾Ê°í ±âÁ¸ ÆÄÀÏ¿¡ »ç¿ëÀÚ¸¦
          Ãß°¡ÇÑ´Ù. (<code>-c</code> ¿É¼ÇÀº »õ·Î ¾ÏÈ£ÆÄÀÏÀ» ¸¸µç´Ù).</p>
      
          <p>ÀÌÁ¦ <code>.htaccess</code> ÆÄÀÏÀ» ´ÙÀ½°ú °°ÀÌ ¼öÁ¤ÇÑ´Ù.</p>
      
          <div class="example"><p><code>
            AuthType Basic<br />
            AuthName "By Invitation Only"<br />
            AuthUserFile /usr/local/apache/passwd/passwords<br />
            AuthGroupFile /usr/local/apache/passwd/groups<br />
            Require group GroupName
          </code></p></div>
      
          <p>±×·¯¸é <code>GroupName</code> ±×·ì¿¡ ¼ÓÇϸç
          <code>password</code> ÆÄÀÏ¿¡ Ç׸ñÀÌ ÀÖ´Â »ç¿ëÀÚ°¡ ¿Ã¹Ù¸¥
          ¾ÏÈ£¸¦ ÀÔ·ÂÇϸé Á¢±ÙÀ» Çã¿ëÇÑ´Ù.</p>
      
          <p>¿©·¯ ÀÏ¹Ý »ç¿ëÀÚ¸¦ µé¿©º¸³»´Â ´Ù¸¥ ¹æ¹ýÀÌ ÀÖ´Ù. ±×·ìÆÄÀÏÀ»
          ¸¸µé ÇÊ¿ä¾øÀÌ ´ÙÀ½ Áö½Ã¾î¸¦ »ç¿ëÇϱ⸸ ÇÏ¸é µÈ´Ù.</p>
      
          <div class="example"><p><code>
            Require valid-user
          </code></p></div>
      
          <p><code>Require user rbowen</code> ´ë½Å ÀÌ Áö½Ã¾î¸¦ »ç¿ëÇϸé
          ¾ÏÈ£ÆÄÀÏ¿¡ ÀÖ´Â ´©±¸¶óµµ ¿Ã¹Ù¸¥ ¾ÏÈ£¸¦ ÀÔ·ÂÇϱ⸸ Çϸé Á¢±ÙÀ»
          Çã¿ëÇÑ´Ù. ±×·ìº°·Î ´Ù¸¥ ¾ÏÈ£ÆÄÀÏÀ» »ç¿ëÇÏ¿© ±×·ì°ú ºñ½ÁÇÑ
          È¿°ú¸¦ ¾òÀ» ¼öµµ ÀÖ´Ù. ÀÌ °æ¿ì ¾ÆÆÄÄ¡°¡ ÆÄÀÏ µÎ°³(¾ÏÈ£ÆÄÀϰú
          ±×·ìÆÄÀÏ)°¡ ¾Æ´Ñ ÆÄÀÏ ÇѰ³(¾ÏÈ£ÆÄÀÏ)¸¸ °Ë»çÇÏ¸é µÈ´Ù´Â °ÍÀÌ
          ÀåÁ¡ÀÌ´Ù. ±×·¯³ª ¿©·¯ ¾ÏÈ£ÆÄÀÏÀ» °ü¸®ÇØ¾ß Çϰí, <code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code> Áö½Ã¾î¿¡
          Á¤È®ÇÑ ¾ÏÈ£ÆÄÀÏÀ» ÁöÁ¤ÇØ¾ß ÇÏ´Â °ÍÀº ´ÜÁ¡ÀÌ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="possibleproblems" id="possibleproblems">¹ß»ýÇÒ ¼ö ÀÖ´Â ¹®Á¦Á¡</a></h2>
          <p>Basic ÀÎÁõ ¹æ½ÄÀº ¼­¹ö¿¡¼­ ¹®¼­¸¦ ¿äûÇÒ ¶§¸¶´Ù »ç¿ëÀÚ¸í°ú
          ¾ÏÈ£¸¦ È®ÀÎÇÑ´Ù. ½ÉÁö¾î °°Àº ÆäÀÌÁö¸¦ »õ·Î °íħÇÒ ¶§µµ ÆäÀÌÁö¿Í
          (±×¸²ÀÌ ¾ÏÈ£·Î º¸È£ÇÏ´Â µð·ºÅ丮¿¡ ÀÖ´Â °æ¿ì) ÆäÀÌÁö¿¡ ÀÖ´Â
          ¸ðµç ±×¸²¿¡ ´ëÇØ ´Ù½Ã È®ÀÎÇÑ´Ù. ÁüÀÛÇϵíÀÌ ¼Óµµ°¡ Á¶±Ý ´À·ÁÁø´Ù.
          ¾ÏÈ£ÆÄÀÏÀ» ¿­¾î¼­ »ç¿ëÀÚ¸íÀ» ãÀ» ¶§±îÁö »ç¿ëÀÚ ¸ñ·ÏÀ» »ìÆìºÁ¾ß
          Çϱ⶧¹®¿¡ ¾ÏÈ£ÆÄÀÏ Å©±â°¡ Ä¿Áú ¼ö·Ï ´õ ´À·ÁÁø´Ù. ±×¸®°í
          ÀÌ ÀÛ¾÷À» ÆäÀÌÁö¸¦ ¿äûÇÒ ¶§¸¶´Ù ÁøÇàÇÑ´Ù.</p>
      
          <p>±×·¡¼­ Çö½ÇÀûÀ¸·Î ÇÑ ¾ÏÈ£ÆÄÀÏ¿¡ ÀúÀåÇÒ ¼ö ÀÖ´Â »ç¿ëÀÚ¼ö¿¡´Â
          ÇѰ谡 ÀÖ´Ù. ÀÌ ÇѰè´Â »ç¿ëÇÏ´Â ¼­¹öÀÇ ¼º´É¿¡ µû¶ó ´Ù¸£Áö¸¸,
          Ç׸ñÀÌ ¼ö¹é°³°¡ ³Ñ´Â´Ù¸é ´À·ÁÁø´Ù°í »ý°¢ÇÏ°í ´Ù¸¥ ÀÎÁõ ¹æ¹ýÀ»
          °í·ÁÇØ¾ß ÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="whatotherneatstuffcanido" id="whatotherneatstuffcanido">´Ù¸¥ ¹æ¹ýµµ °¡´ÉÇѰ¡?</a></h2>
          <p>»ç¿ëÀÚ¸í°ú ¾ÏÈ£¸¦ »ç¿ëÇÑ ÀÎÁõÀÌ ´Ù°¡ ¾Æ´Ï´Ù. Á¾Á¾ Á¢¼ÓÇÑ
          Àå¼Ò¿Í °°Àº ´Ù¸¥ Á¤º¸¸¦ °¡Áö°í »ç¿ëÀÚ¸¦ µé¿©º¸³»°í ½ÍÀ»
          ¶§°¡ ÀÖ´Ù.</p>
      
          <p><code class="directive"><a href="../mod/mod_authz_host.html#allow">Allow</a></code>¿Í
          <code class="directive"><a href="../mod/mod_authz_host.html#deny">Deny</a></code> Áö½Ã¾î´Â
          ¹®¼­¸¦ ¿äûÇÑ ÄÄÇ»ÅÍÀÇ È£½ºÆ®¸í ȤÀº È£½ºÆ® ÁÖ¼Ò¸¦ °¡Áö°í
          Á¢±ÙÀ» Çã¿ëÇϰųª °ÅºÎÇÑ´Ù. <code class="directive"><a href="../mod/mod_authz_host.html#order">Order</a></code> Áö½Ã¾î´Â ÀÌ µÎ
          Áö½Ã¾î¿Í °°ÀÌ »ç¿ëÇÏ¿©, ¾ÆÆÄÄ¡¿¡°Ô ¾î¶² ¼ø¼­·Î ±ÔÄ¢À» Àû¿ëÇÒÁö
          ¾Ë¸°´Ù.</p>
      
          <p>À̵é Áö½Ã¾î »ç¿ë¹ýÀº ´ÙÀ½°ú °°´Ù.</p>
      
          <div class="example"><p><code>
            Allow from <var>address</var>
          </code></p></div>
      
          <p>¿©±â¼­ <var>address</var>´Â IP ÁÖ¼Ò(ȤÀº IP ÁÖ¼Ò ÀϺÎ)³ª
          ¿ÏÀüÇÑ µµ¸ÞÀθí(ȤÀº µµ¸ÞÀθí ÀϺÎ)ÀÌ´Ù. ¿øÇÑ´Ù¸é ¿©·¯ ÁÖ¼Ò³ª
          µµ¸ÞÀθíÀ» »ç¿ëÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>¿¹¸¦ µé¾î, ´©±º°¡°¡ °Ô½ÃÆÇ¿¡ ±¤°í¸¦ ¿Ã¸®°í ÀÖ´Ù¸é ´ÙÀ½°ú
          °°ÀÌ Á¢±ÙÀ» ¸·À» ¼ö ÀÖ´Ù.</p>
      
          <div class="example"><p><code>
            Deny from 205.252.46.165
          </code></p></div>
      
          <p>±× ÁÖ¼Ò¿¡¼­ µé¾î¿À´Â ¹æ¹®ÀÚ´Â ÀÌ Áö½Ã¾î°¡ º¸È£ÇÏ´Â ÆäÀÌÁö¸¦
          º¼ ¼ö ¾ø´Ù. IP ÁÖ¼Ò ´ë½Å ´ÙÀ½°ú °°ÀÌ ÄÄÇ»Å͸íÀ» »ç¿ëÇÒ ¼öµµ
          ÀÖ´Ù.</p>
      
          <div class="example"><p><code>
            Deny from <var>host.example.com</var>
          </code></p></div>
      
          <p>¶Ç, Àüü µµ¸ÞÀÎÀÇ Á¢±ÙÀ» ¸·À¸·Á¸é ÁÖ¼Ò³ª µµ¸ÞÀθíÀÇ ÀϺθ¦
          »ç¿ëÇÑ´Ù.</p>
      
          <div class="example"><p><code>
            Deny from <var>192.101.205</var><br />
            Deny from <var>cyberthugs.com</var> <var>moreidiots.com</var><br />
            Deny from ke
          </code></p></div>
      
          <p><code class="directive"><a href="../mod/mod_authz_host.html#order">Order</a></code>¸¦
          <code class="directive"><a href="../mod/mod_authz_host.html#deny">Deny</a></code>¿Í <code class="directive"><a href="../mod/mod_authz_host.html#allow">Allow</a></code> Áö½Ã¾î¿Í °°ÀÌ
          »ç¿ëÇÏ¿© ½ÇÁ¦·Î ¿øÇÏ´Â ´ë»óÀ» ¸·À» ¼ö ÀÖ´Ù.</p>
      
          <div class="example"><p><code>
            Order deny,allow<br />
            Deny from all<br />
            Allow from <var>dev.example.com</var>
          </code></p></div>
      
          <p><code class="directive"><a href="../mod/mod_authz_host.html#allow">Allow</a></code>
          Áö½Ã¾î¸¸ »ç¿ëÇϸé, ÇØ´ç È£½ºÆ®ÀÇ »ç¿ëÀÚ¸¦ Çã¿ëÇÏ°í °Å±â¿¡
          Ãß°¡·Î ¸ðµç »ç¶÷À» Çã¿ëÇϹǷΠ¿øÇÏ´Â °á°ú¸¦ ¾òÁö ¸øÇÑ´Ù.
          ´ç½ÅÀº ƯÁ¤ »ç¶÷<em>¸¸</em> Çã¿ëÇÏ±æ ¿øÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="moreinformation" id="moreinformation">´õ ¸¹Àº Á¤º¸</a></h2>
          <p><code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code>°ú
          <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code> ¹®¼­¿¡ Á¢±ÙÁ¦¾î°¡ µ¿ÀÛÇÏ´Â
          ¹æ¹ý¿¡ ´ëÇÑ ´õ ¸¹Àº Á¤º¸°¡ ÀÖ´Ù.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/howto/auth.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/auth.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/auth.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/auth.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/auth.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/auth.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/auth.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/access.html����������������������������������������������������������0000644�0000000�0000050�00000000446�13362070302�016730� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: access.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: access.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: access.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/cgi.html.es����������������������������������������������������������0000644�0000000�0000050�00000104075�13412755316�016655� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Tutorial de Apache: Contenido Dinámico con CGI - Servidor HTTP Apache Versión 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="../">Versión 2.4</a> &gt; <a href="./">How-To / Tutoriales</a></div><div id="page-content"><div id="preamble"><h1>Tutorial de Apache: Contenido Dinámico con CGI</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/cgi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/cgi.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/cgi.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/cgi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/cgi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#intro">Introducción</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#configuring">Configurando Apache para permitir CGI</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#writing">Escribiendo un programa CGI</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#troubleshoot">¡Pero todavía no funciona!</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#behindscenes">¿Qué ocurre entre bastidores?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#libraries">Módulos/librerías CGI</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#moreinfo">Para más información</a></li>
      </ul><h3>Consulte también</h3><ul class="seealso"><li><a href="#comments_section">Comentarios</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="intro" id="intro">Introducción</a></h2>
      	    
      		<table class="related"><tr><th>Módulos Relacionados</th><th>Directivas Relacionadas</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_alias.html">mod_alias</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="../mod/mod_cgid.html">mod_cgid</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code></li></ul></td></tr></table>
      
          	<p>CGI (Common Gateway Interface) es un método por el cual
      		un servidor web puede interactuar con programas externos de 
      		generación de contenido, a ellos nos referimos comúnmente como 
      		programas CGI o scripts CGI. Es el método más común y sencillo de
              mostrar contenido dinámico en su sitio web. Este documento es una 
      		introducción para configurar CGI en su servidor web Apache, y de
      		iniciación para escribir programas CGI.</p>
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuring" id="configuring">Configurando Apache para permitir CGI</a></h2>
      		
      
              <p>Para conseguir que sus programas CGI funcionen correctamente,
      	    deberá configurar Apache para que permita la ejecución de CGI. Hay
      	    distintas formas de hacerlo.</p>
      
              <div class="warning">Nota: Si Apache ha sido compilado con soporte
              de módulos compartidos, necesitará que el módulo de CGI esté cargado;
              en su <code>httpd.conf</code> tiene que asegurarse de que la directiva
              <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code>
              no ha sido comentada. Una directiva configurada correctamente sería así:
                  
                  <pre class="prettyprint lang-config">LoadModule cgid_module modules/mod_cgid.so</pre>
      
      
              En Windows, o si usa un mpm que no es multihilo, como prefork, una 
              directiva configurada correctamente podría definirse así: 
      
              <pre class="prettyprint lang-config">LoadModule cgi_module modules/mod_cgi.so</pre>
      </div>
      
              <h3><a name="scriptalias" id="scriptalias">ScriptAlias</a></h3>
                  
      
                  <p>La directiva
                  <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code>
                  indica a Apache que un directorio se ha configurado específicamente
                  para programas CGI. Apache asumirá que cada fichero en este 
                  directorio es un programa CGI, e intentará ejecutarlos cuando un
                  cliente solicita este recurso.</p>
              
                  <p>La directiva 
                  <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code> se puede 
                  definir así:</p>
      
                  <pre class="prettyprint lang-config">ScriptAlias "/cgi-bin/" "/usr/local/apache2/cgi-bin/"</pre>
      
              
                  <p>El ejemplo que se muestra es de un archivo de configuración
                  <code>httpd.conf</code> por defecto si usted instaló Apache
                  en la ubicación por defecto. La directiva
                  <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code> es muy 
                  parecida a la directiva <code class="directive"><a href="../mod/mod_alias.html#alias">Alias</a></code>,
                  ésta define un prefijo de URL que se enlaza a un directorio 
                  en particular. <code class="directive">Alias</code> y
                  <code class="directive">ScriptAlias</code> se usan generalmente para 
                  directorios que se encuentran fuera del directorio 
                  <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>. La diferencia
                  entre <code class="directive">Alias</code> y <code class="directive">ScriptAlias</code>
                  es que en <code class="directive">ScriptAlias</code> cualquier elemento
                  debajo de ese prefijo de URL será considerado un programa CGI. Así, 
                  el ejemplo de más arriba le indica a Apache que
                  cualquier solicitud para un recurso que comience con 
                  <code>/cgi-bin/</code> debería servirse desde el directorio
                  <code>/usr/local/apache2/cgi-bin/</code>, y debería tratarse como un
                  programa CGI.</p>
      
                  <p>Por ejemplo, si se solicita la URL
                  <code>http://www.example.com/cgi-bin/test.pl</code>,
                  Apache intentará ejecutar el archivo
                  <code>/usr/local/apache2/cgi-bin/test.pl</code> y dar
                  el resultado. Por supuesto el archivo debe existir y ser ejecutable, 
                  y dar el resultado de una manera específica o Apache devolverá
                  un mensaje de error.</p>
              
      
              <h3><a name="nonscriptalias" id="nonscriptalias">CGI fuera de directorios ScriptAlias</a></h3>
                  
      
                  <p>Los programas CGI habitualmente se restringen a los directorios de
                  <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code> por razones de
                  seguridad. De esta manera, los administradores pueden controlar de una
                  manera más segura quien puede ejecutar programas CGI. Aun así, si no
                  se toman suficientes precauciones, no hay ninguna razón por la que
                  programas CGI no se puedan ejecutar desde directorios seleccionados de 
                  manera arbitraria. Por ejemplo, quizás quiera permitir que usuarios del
                  sistema tengan contenido web en sus directorios home con la directiva
                  <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>. Si quieren 
                  tener sus propios programas CGI, pero no tienen acceso al directorio 
                  principal <code>cgi-bin</code>, necesitarán ser capaces de 
                  ejecutar sus scripts CGI en algún otro sitio.</p>
            
                  <p>Hay dos pasos a seguir para permitir la ejecución CGI en directorios
                  seleccionados de manera arbitraria. Primero, el handler 
                  <code>cgi-script</code> debe estar activado usando la directiva 
                  <code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code> o la directiva 
                  <code class="directive"><a href="../mod/core.html#sethandler">SetHandler</a></code>. Segundo, el parámetro
                  <code>ExecCGI</code> debe estar definido en la directiva
                  <code class="directive"><a href="../mod/core.html#options">Options</a></code>.</p>
              
      
              <h3><a name="options" id="options">Usando Options de manera explícita para permitir ejecución de 
                  CGI</a></h3>
                  
      
                  <p>Puede usar la directiva 
                  <code class="directive"><a href="../mod/core.html#options">Options</a></code>, en el archivo de 
                  configuración principal para especificar que se permite la ejecución 
                  de CGI en un directorio en particular:</p>
      
                  <pre class="prettyprint lang-config">&lt;Directory "/usr/local/apache2/htdocs/somedir"&gt;
          Options +ExecCGI
      &lt;/Directory&gt;</pre>
      
                  
                  <p>Esta directiva de aquí arriba le indica a Apache que debe 
                  permitir la ejecución de archivos CGI. También necesitará indicarle 
                  al servidor que los archivos son archivos CGI. La directiva 
                  <code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code> le indica al 
                  servidor que debe tratar a todos los archivos con la extensión 
                  <code>cgi</code> o <code>pl</code> como programas CGI:</p>
      
                  <pre class="prettyprint lang-config">AddHandler cgi-script .cgi .pl</pre>
      
              
      
              <h3><a name="htaccess" id="htaccess">Ficheros .htaccess</a></h3>
                  
      
                  <p>El <a href="htaccess.html">tutorial <code>.htaccess</code></a>
                  enseña como activar programas CGI si no tienes acceso a 
                  <code>httpd.conf</code>.</p>
              
      
              <h3><a name="userdir" id="userdir">Directorios de Usuario</a></h3>
                  
      
                  <p>Para permitir la ejecución de programas CGI para cualquier 
                  archivo que acabe en <code>.cgi</code> en directorios de usuario, 
                  puedes usar la siguiente configuración:</p>
      
                  <pre class="prettyprint lang-config">&lt;Directory "/home/*/public_html"&gt;
          Options +ExecCGI
          AddHandler cgi-script .cgi
      &lt;/Directory&gt;</pre>
      
      
                  <p>Si quiere designar un subdirectorio <code>cgi-bin</code> dentro 
                  de un directorio de usuario en el que todos los ficheros serán 
                  tratados como un programa CGI, puede usar lo siguiente:</p>
      
                  <pre class="prettyprint lang-config">&lt;Directory "/home/*/public_html/cgi-bin"&gt;
          Options ExecCGI
          SetHandler cgi-script
      &lt;/Directory&gt;</pre>
      
              
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="writing" id="writing">Escribiendo un programa CGI</a></h2>
              
      
              <p>Hay dos diferencias principales entre programación ``regular'' y 
              programación en CGI.</p>
      
              <p>Primera, el resultado al completo de tu programa CGI debe estar 
              precedido de una cabecera <a class="glossarylink" href="../glossary.html#mime-type" title="ver glosario">MIME-type</a>. Esta
              cabecera HTTP le indica al cliente que tipo de contenido está
              recibiendo. La mayor parte de las veces, ésto será algo como:</p>
      
              <div class="example"><p><code>
                  Content-type: text/html
              </code></p></div>
      
              <p>Segunda, el resultado debe estar en formato HTML, o cualquier 
              otro formato que su navegador sea capaz de mostrar. La mayor
              parte de las veces, será HTML, pero otras escribirá un programa
              CGI que devuelve una imagen gif, u otro contenido no-HTML.</p>
      
              <p>Aparte de estas dos cosas, escribir un programa en CGI se 
              parecerá bastante a cualquier otro programa que vaya a escribir.
              </p>
      
      
              <h3><a name="firstcgi" id="firstcgi">Su primer programa CGI</a></h3>
                  
      
                  <p>A continuación podrá ver un ejemplo de programa CGI que muestra
                  una línea de texto en su navegador. Escriba lo siguiente, 
                  guárdelo en un archivo con el nombre <code>first.pl</code>, y 
                  póngalo en su directorio <code>cgi-bin</code>.</p>
      
                  <pre class="prettyprint lang-perl">#!/usr/bin/perl
      print "Content-type: text/html\n\n";
      print "Hola, Mundo.";</pre>
      
      
                  <p>Incluso si Perl no le resulta familiar, podrá ver lo que está
                  ocurriendo aquí. La primera línea le dice a Apache (o a
                  cualquier shell en la que se esté ejecutando) que este programa
                  puede ejecutarse con el intérprete en la ubicación
                  <code>/usr/bin/perl</code>. La segunda línea imprime la
                  declaración de Content-Type que mencionamos antes, seguida de 
                  dos pares de retornos de carro. Esto pone una línea en blanco 
                  después de la cabecera para indicar el final de las cabeceras
                  HTTP, y el comienzo del cuerpo del contenido. La tercera 
                  imprime la cadena de caracteres "Hola, Mundo.". Y ese es el 
                  final del programa.</p>
      
                  <p>Si lo abre con su navegador favorito y le dice que solicite la 
                  dirección</p>
      
                  <div class="example"><p><code>
                      http://www.example.com/cgi-bin/first.pl
                  </code></p></div>
      
                  <p>o donde quiera que pusiera el archivo, verá una línea
                  <code>Hola, Mundo.</code> aparecerán la ventana del navegador. No es 
                  muy emocionante, pero una vez que consiga que funcione podrá hacer 
                  lo mismo con casi cualquier programa.</p>
              
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="troubleshoot" id="troubleshoot">¡Pero todavía no funciona!</a></h2>
              
      
              <p>Hay 4 cosas básicas que puede llegar a ver en su navegador cuando
              intenta acceder a un programa CGI desde la web:</p>
      
              <dl>
                  <dt>El resultado del programa CGI</dt>
                  <dd>¡Genial! Esto indica que todo funcionó correctamente. Si el
                  resultado es correcto, pero el navegador no lo procesa
                  correctamente, asegúrese de que tiene especificado 
                  correctamente el <code>Content-Type</code> en su programa 
                  CGI.</dd>
      
                  <dt>El código fuente de su programa CGI o un mensaje del tipo 
                  "POST Method Not Allowed".</dt>
      
                  <dd>Eso significa que no ha configurado Apache de manera
                  apropiada para interpretar su programa CGI. Relea la sección
                  de <a href="#configuring">Configurando Apache</a> e intente
                  encontrar qué le falta.</dd>
      
                  <dt>Un mensaje que empieza con "Forbidden"</dt>
                  <dd>Eso significa que hay un problema de permisos. Compruebe el
                  <a href="#errorlogs">Log de Errores de Apache</a> y la
                  sección de más abajo de <a href="#permissions">Permisos de
                  Fichero</a>.</dd>
      
                  <dt>Un mensaje indicando "Internal Server Error"</dt>
                  <dd>Si comprueba el <a href="#errorlogs">Log de errores de
                  Apache</a>, probablemente encontrará que indica "Premature 
                  end of script headers", posiblemente acompañado de otro 
                  mensaje de error generado por su programa CGI. En este caso, 
                  querrá comprobar cada una de las secciones de más adelante 
                  para ver qué impide que su programa CGI genere las cabeceras 
                  HTTP adecuadas.</dd>
                  </dl>
      
              <h3><a name="permissions" id="permissions">Permisos de Fichero</a></h3>
                  
      
                  <p>Recuerde que el servidor no se ejecuta con su usuario. Es decir,
                  cuando el servidor arranca, está funcionando con un usuario sin
                  privilegios, generalmente el usuario <code>nobody</code>, o
                  <code>www-data</code>, así que necesitará permisos extra para
                  ejecutar los archivos de los que usted es dueño. Generalmente, 
                  el método para dar permisos suficientes para que se pueda 
                  ejecutar con <code>nobody</code> es dar permisos de ejecución a 
                  todo el mundo en el fichero:</p>
      
                  <div class="example"><p><code>
                      chmod a+x first.pl
                  </code></p></div>
      
                  <p>Además, si su programa lee desde o escribe a cualquier otro/s
                  archivo/s, esos archivos necesitarán tener los permisos correctos
                  para permitir esas acciones.</p>
      
              
      
              <h3><a name="pathinformation" id="pathinformation">Información de Ruta y Entorno</a></h3>
                  
      
                  <p>Cuando ejecuta un programa desde la línea de comandos, usted tiene
                  cierta información que se le pasa a la shell sin que usted se
                  percate de ello. Por ejemplo, usted tiene un <code>PATH</code>,
                  que le indica a la shell dónde debe buscar archivos a los que usted
                  hace referencia.</p>
      
                  <p>Cuando un programa se ejecuta a través del servidor web como un
                  programa CGI, puede que no tenga el mismo <code>PATH</code>. 
                  Cualquier programa que invoque desde su programa CGI (como por
                  ejemplo <code>sendmail</code>) necesitará que se le indique la
                  ruta absoluta, así la shell puede encontrarlos cuando intenta 
                  ejecutar su programa CGI.</p>
      
                  <p>Una manifestación común de esto es la ruta del intérprete del 
                  script (a menudo <code>perl</code>) indicado en la primera línea
                  de su programa CGI, que parecerá algo como:</p>
      
                  <pre class="prettyprint lang-perl">#!/usr/bin/perl</pre>
      
      
                  <p>Asegúrese de que éste es de hecho el path de su intérprete.</p>
                  <div class="warning">
                  Cuando edita scripts CGI en Windows, los caracteres de retorno de
                  carro podrían añadirse a la línea donde se especifica el intérprete. 
                  Asegúrese de que los archivos se transfieren al servidor en modo 
                  ASCII. Fallar en esto puede acabar con avisos del tipo "Command not 
                  found" del Sistema Operativo, debido a que éste no reconoce los 
                  caracteres de final de línea interpretados como parte del nombre
                  de fichero del intérprete.
                  </div>
              
      
              <h3><a name="missingenv" id="missingenv">Faltan Variables de Entorno</a></h3>
                  
      
                  <p>Si su programa CGI depende de <a href="#env">variables de entorno</a> no estándar, necesitará
                  asegurarse de que Apache pasa esas variables.</p>
      
                  <p>Cuando no encuentra ciertas cabeceras HTTP del entorno, asegúrese 
                  de que están formateadas según el 
                  <a href="http://tools.ietf.org/html/rfc2616">RFC 2616</a>, 
                  sección 4.2: Nombres de Cabeceras deben empezar con una letra, 
                  seguida solo de letras, números o guión. Cualquier cabecera 
                  que no cumpla esta regla será ignorada de manera silenciosa.</p>
      
              
      
              <h3><a name="syntaxerrors" id="syntaxerrors">Errores de Programa</a></h3>
                  
      
                  <p>La mayor parte de las veces cuando un programa CGI falla, es por un 
                  problema en el programa mismo. Esto ocurre generalmente cuando se 
                  maneja bien con "esto del CGI", y ya no comete los dos errores
                  mencionados más arriba. Lo primero que hay que hacer es asegurarse
                  de que su programa se ejecuta correctamente en línea de comandos 
                  antes de probarlo a través del servidor web.  Por ejemplo, 
                  intente:</p>
      
                  <div class="example"><p><code>
                      cd /usr/local/apache2/cgi-bin<br />
                      ./first.pl
                  </code></p></div>
      
                  <p>(No llame al intérprete de <code>perl</code>. La consola y Apache 
                  tienen que poder encontrar el intérprete usando línea 
                  <a href="#pathinformation">línea de información</a> en la primera 
                  línea del script.)</p>
      
                  <p>Lo primero que debe ver escrito por su programa es un conjunto de 
                  cabeceras HTTP, incluyendo el <code>Content-Type</code>,
                  seguido de una línea en blanco.  Si ve alguna otra cosa, Apache
                  devolverá el error <code>Premature end of script headers</code> si
                  intenta lanzar el script en el servidor web. Vea 
                  <a href="#writing">Escribiendo un programa CGI</a> más arriba para
                  más detalle.</p>
              
      
              <h3><a name="errorlogs" id="errorlogs">Log de Errores</a></h3>
                  
      
                  <p>El log de errores es su amigo. Cualquier cosa que vaya mal generará 
                  un mensaje en el log de errores. Debería mirar siempre ahí primero. 
                  Si el lugar donde está alojando su sitio web no permite que acceda
                  al log de errores, probablemente debería alojarlo en otro sitio.
                  Aprenda a leer el log de errores y se dará cuenta de que enseguida
                  averiguará el motivo del error y lo solucionará rápidamente.</p>
              
      
              <h3><a name="suexec" id="suexec">Suexec</a></h3>
                  
      
                  <p>El programa de soporte <a href="../suexec.html">suexec</a> permite
                  que programas CGI se ejecuten con permisos de usuario distintos,
                  dependiendo del virtualhost o el directorio home donde se 
                  encuentren. Suexec tiene una comprobación de permisos muy estricta, 
                  y cualquier fallo en esa comprobación dará como resultado un error
                  con el mensaje <code>Premature end of script headers</code>.</p>
      
                  <p>Para comprobar si está usando Suexec, ejecute 
                  <code>apachectl -V</code> y compruebe la ubicación de 
                  <code>SUEXEC_BIN</code>. Si Apache encuentra un binario 
                  <code class="program"><a href="../programs/suexec.html">suexec</a></code> al arrancar, suexec se activará.</p>
      
                  <p>A menos que comprenda suxec perfectamente, no debería usarlo.
                  Para desactivar suexec, basta con eliminar el binario 
                  <code class="program"><a href="../programs/suexec.html">suexec</a></code> al que apunta <code>SUEXEC_BIN</code> y 
                  reiniciar el servidor. Si después de leer sobre 
                  <a href="../suexec.html">suexec</a> todavía quiere usarlo, entonces
                  ejecute <code>suexec -V</code> para encontrar la ubicación del 
                  fichero log de suexec, y use ese log para encontrar que política no
                  está cumpliendo.</p>
              
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="behindscenes" id="behindscenes">¿Qué ocurre entre bastidores?</a></h2>
              
      
              <p>En cuanto tenga conocimiento avanzado de programación CGI, le será 
              útil comprender más de lo que ocurre entre bastidores. 
              Específicamente, cómo el navegador y el servidor se comunican el uno
              con el otro. Porque aunque esté muy bien escribir un programa que 
              diga "Hola, Mundo.", no tiene una gran utilidad.</p>
      
              <h3><a name="env" id="env">Variables de Entorno</a></h3>
                  
      
                  <p>Las variables de entorno son valores que están ahí cuando 
                  usa el ordenador. Son cosas útiles como el path (donde su ordenador
                  busca el archivo específico que se lanza cuando usted escribe un 
                  comando), su nombre de usuario, el tipo de terminal que usa, etc. 
                  Para una lista completa de la variables de entorno normales que se 
                  se usan en su día a día escriba <code>env</code> en la línea de 
                  comandos.</p>
      
                  <p>Durante la transacción CGI, el servidor y el navegador también 
                  configuran variables de entorno, y así pueden comunicarse entre 
                  ellos. Cosas como el tipo de navegador (Netscape, IE, Lynx), el tipo
                  de servidor (Apache, IIS, WebSite), el nombre del programa CGI que
                  se está ejecutando, etc.</p>
      
                  <p>Estas variables están disponibles para el programador de CGI, y son 
                  la mitad de la historia de la comunicación cliente-servidor. La 
                  lista completa de las variables necesarias se encuentra en 
                  <a href="http://www.ietf.org/rfc/rfc3875">el RFC de Common Gateway
                  Interface</a>.</p>
      
                  <p>Este sencillo programa CGI en Perl mostrará todas las variables 
                  de entorno que se están pasando entre el cliente y el navegador. Dos
                  programas similares están incluidos en el directorio 
                  <code>cgi-bin</code> de la distribución de Apache. Tenga en cuenta
                  que algunas variables son necesarias mientras que otras son 
                  opcionales, así que es posible que vea algunas variables que no 
                  están en la lista oficial. Adicionalmente, Apache aporta distintas
                  maneras diferentes para que pueda
                  <a href="../env.html">añadir sus variables de entorno</a> a las 
                  básicas que se proveen por defecto.</p>
      
                  <pre class="prettyprint lang-perl">#!/usr/bin/perl
      use strict;
      use warnings;
      
      print "Content-type: text/html\n\n";
                
      foreach my $key (keys %ENV) {
          print "$key --&gt; $ENV{$key}&lt;br&gt;";
      }</pre>
      
              
      
              <h3><a name="stdin" id="stdin">STDIN y STDOUT</a></h3>
                  
      
                  <p>Otra comunicación entre el servidor y el cliente ocurre en la 
                  entrada estándar (<code>STDIN</code>) y la salida estándar 
                  (<code>STDOUT</code>). En el contexto normal de cada día, 
                  <code>STDIN</code> es la entrada con el teclado, o un fichero que se 
                  le da a un programa para que actúe sobre él, y <code>STDOUT</code>
                  generalmente es la consola o la pantalla.</p>
      
                  <p>Cuando hace <code>POST</code> con un formulario de web a un programa 
                  CGI, los datos en ese formulario se empaquetan en un formato especial
                  que se entrega a su programa CGI en el <code>STDIN</code>.
                  Entonces el programa puede procesar la información como si le llegara
                  desde el teclado, o desde un fichero.</p>
      
                  <p>El "formato especial" es muy sencillo. Un nombre de campo y su 
                  valor se asocian juntos con el signo igual (=), y pares de valores 
                  se asocian juntos con el ampersand ó et en español (&amp;). 
                  Caracteres inconvenientes como los espacios, ampersands y signos de 
                  igual, se convierten en su equivalente hexadecimal para no impidan 
                  el funcionamiento correcto del programa. La cadena de datos al 
                  completo será algo como:</p>
      
        <div class="example"><p><code>
              name=Rich%20Bowen&amp;city=Lexington&amp;state=KY&amp;sidekick=Squirrel%20Monkey
        </code></p></div>
      
                  <p>A veces tendrá este tipo de cadena de caracteres al final de una 
                  URL. Cuando esto ocurre, el servidor pone esa cadena en una variable 
                  de entorno que se llama <code>QUERY_STRING</code>. Esto se llama 
                  solicitud <code>GET</code>. Su formulario HTML especifica si se usa 
                  un <code>GET</code> o un <code>POST</code> para entregar la 
                  información, configurando el atributo <code>METHOD</code> en la 
                  etiqueta <code>FORM</code>.</p>
      
                  <p>Su programa es el responsable de convertir esa cadena de 
                  caracteres en información útil. Afortunadamente, hay librerías y 
                  módulos disponibles que ayudan a procesar la información, así como a 
                  gestionar los distintos aspectos de su programa CGI.</p>
              
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="libraries" id="libraries">Módulos/librerías CGI</a></h2>
              
      
              <p>Cuando escribe programas CGI, debería considerar usar una librería de
              código, o módulo, para hacer todo el trabajo más arduo por usted.
              Esto lleva a tener menos errores y un desarrollo de código más 
              rápido.</p>
      
              <p>Si está escribiendo un programa CGI en Perl, existen módulos 
              disponibles en <a href="http://www.cpan.org/">CPAN</a>. El módulo más
              conocido para este propósito es <code>CGI.pm</code>. Quizás quiera
              considerar <code>CGI::Lite</code>, que implementa una funcionalidad 
              mínima, que es todo lo que se necesita en la mayoría de los programas.</p>
      
              <p>Si está escribiendo programas CGI en C, hay varidad de opciones. Una
              de estas es la librería <code>CGIC</code>, de
              <a href="http://www.boutell.com/cgic/">http://www.boutell.com/cgic/</a>.
              </p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="moreinfo" id="moreinfo">Para más información</a></h2>
              
      
              <p>La especificación actual de CGI está disponible en el
              <a href="http://www.ietf.org/rfc/rfc3875">RFC de Common Gateway
              Interface</a>.</p>
      
              <p>Cuando envíe una pregunta sobre un problema de CGI, o bien a una 
              lista de correo, o a un grupo de noticias, asegúrese de que facilita suficiente
              información de lo que ha ocurrido, de lo que espera que ocurra, y de 
              lo que está ocurriendo en su lugar que es diferente, el servidor que 
              está ejecutando, en qué lenguaje CGI está hecho su programa, y si es
              posible, el código que falla. Esto hará encontrar el problema mucho más 
              fácil.</p>
      
              <p>Tenga en cuenta que las preguntas sobre problemas CGI 
              <strong>nunca</strong> deberían enviarse a la base de datos de bugs de
              bugs de Apache a menos que esté seguro de haber encontrado un 
              problema en el código fuente de Apache.</p>
          </div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/cgi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/cgi.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/cgi.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/cgi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/cgi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentarios</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/cgi.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/ssi.html.en����������������������������������������������������������0000644�0000000�0000050�00000063117�13412755316�016705� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache httpd Tutorial: Introduction to Server Side Includes - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutorials</a></div><div id="page-content"><div id="preamble"><h1>Apache httpd Tutorial: Introduction to Server Side Includes</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/howto/ssi.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/ssi.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/ssi.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/ssi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/ssi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      
      <p>Server-side includes provide a means to add dynamic content to
      existing HTML documents.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Introduction</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#what">What are SSI?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#configuring">Configuring your server to permit SSI</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#basic">Basic SSI directives</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#additionalexamples">Additional examples</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#config">What else can I config?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exec">Executing commands</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#advanced">Advanced SSI techniques</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#conclusion">Conclusion</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Introduction</a></h2>
       <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="../mod/mod_expires.html">mod_expires</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code></li><li><code class="directive"><a href="../mod/mod_mime.html#addtype">AddType</a></code></li><li><code class="directive"><a href="../mod/core.html#setoutputfilter">SetOutputFilter</a></code></li><li><code class="directive"><a href="../mod/mod_setenvif.html#browsermatchnocase">BrowserMatchNoCase</a></code></li></ul></td></tr></table>
      
          <p>This article deals with Server Side Includes, usually called
          simply SSI. In this article, I'll talk about configuring your
          server to permit SSI, and introduce some basic SSI techniques
          for adding dynamic content to your existing HTML pages.</p>
      
          <p>In the latter part of the article, we'll talk about some of
          the somewhat more advanced things that can be done with SSI,
          such as conditional statements in your SSI directives.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="what" id="what">What are SSI?</a></h2>
      
          <p>SSI (Server Side Includes) are directives that are placed in
          HTML pages, and evaluated on the server while the pages are
          being served. They let you add dynamically generated content to
          an existing HTML page, without having to serve the entire page
          via a CGI program, or other dynamic technology.</p>
      
          <p>For example, you might place a directive into an existing HTML
          page, such as:</p>
      
          <div class="example"><p><code>
          &lt;!--#echo var="DATE_LOCAL" --&gt;
          </code></p></div>
      
          <p>And, when the page is served, this fragment will be evaluated and replaced with its value:</p>
      
          <div class="example"><p><code>
          Tuesday, 15-Jan-2013 19:28:54 EST
          </code></p></div>
      
          <p>The decision of when to use SSI, and when to have your page
          entirely generated by some program, is usually a matter of how
          much of the page is static, and how much needs to be
          recalculated every time the page is served. SSI is a great way
          to add small pieces of information, such as the current time - shown
          above.  But if a majority of your page is being generated at the time
          that it is served, you need to look for some other solution.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuring" id="configuring">Configuring your server to permit SSI</a></h2>
      
      
          <p>To permit SSI on your server, you must have the following
          directive either in your <code>httpd.conf</code> file, or in a
          <code>.htaccess</code> file:</p>
      <pre class="prettyprint lang-config">Options +Includes</pre>
      
      
          <p>This tells Apache that you want to permit files to be parsed
          for SSI directives.  Note that most configurations contain
          multiple <code class="directive"><a href="../mod/core.html#options">Options</a></code> directives
          that can override each other.  You will probably need to apply the
          <code>Options</code> to the specific directory where you want SSI
          enabled in order to assure that it gets evaluated last.</p>
      
          <p>Not just any file is parsed for SSI directives. You have to
          tell Apache which files should be parsed. There are two ways to
          do this. You can tell Apache to parse any file with a
          particular file extension, such as <code>.shtml</code>, with
          the following directives:</p>
      <pre class="prettyprint lang-config">AddType text/html .shtml
      AddOutputFilter INCLUDES .shtml</pre>
      
      
          <p>One disadvantage to this approach is that if you wanted to
          add SSI directives to an existing page, you would have to
          change the name of that page, and all links to that page, in
          order to give it a <code>.shtml</code> extension, so that those
          directives would be executed.</p>
      
          <p>The other method is to use the <code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code> directive:</p>
      <pre class="prettyprint lang-config">XBitHack on</pre>
      
      
          <p><code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code>
          tells Apache to parse files for SSI
          directives if they have the execute bit set. So, to add SSI
          directives to an existing page, rather than having to change
          the file name, you would just need to make the file executable
          using <code>chmod</code>.</p>
      <div class="example"><p><code>
              chmod +x pagename.html
      </code></p></div>
      
          <p>A brief comment about what not to do. You'll occasionally
          see people recommending that you just tell Apache to parse all
          <code>.html</code> files for SSI, so that you don't have to
          mess with <code>.shtml</code> file names. These folks have
          perhaps not heard about <code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code>. The thing to
          keep in mind is that, by doing this, you're requiring that
          Apache read through every single file that it sends out to
          clients, even if they don't contain any SSI directives. This
          can slow things down quite a bit, and is not a good idea.</p>
      
          <p>Of course, on Windows, there is no such thing as an execute
          bit to set, so that limits your options a little.</p>
      
          <p>In its default configuration, Apache does not send the last
          modified date or content length HTTP headers on SSI pages,
          because these values are difficult to calculate for dynamic
          content. This can prevent your document from being cached, and
          result in slower perceived client performance. There are two
          ways to solve this:</p>
      
          <ol>
            <li>Use the <code>XBitHack Full</code> configuration. This
            tells Apache to determine the last modified date by looking
            only at the date of the originally requested file, ignoring
            the modification date of any included files.</li>
      
            <li>Use the directives provided by
            <code class="module"><a href="../mod/mod_expires.html">mod_expires</a></code> to set an explicit expiration
            time on your files, thereby letting browsers and proxies
            know that it is acceptable to cache them.</li>
          </ol>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="basic" id="basic">Basic SSI directives</a></h2>
      
          <p>SSI directives have the following syntax:</p>
      <div class="example"><p><code>
              &lt;!--#function attribute=value attribute=value ... --&gt;
      </code></p></div>
      
          <p>It is formatted like an HTML comment, so if you don't have
          SSI correctly enabled, the browser will ignore it, but it will
          still be visible in the HTML source. If you have SSI correctly
          configured, the directive will be replaced with its
          results.</p>
      
          <p>The function can be one of a number of things, and we'll talk
          some more about most of these in the next installment of this
          series. For now, here are some examples of what you can do with
          SSI</p>
      
      <h3><a name="todaysdate" id="todaysdate">Today's date</a></h3>
      
      <div class="example"><p><code>
              &lt;!--#echo var="DATE_LOCAL" --&gt;
      </code></p></div>
      
          <p>The <code>echo</code> function just spits out the value of a
          variable. There are a number of standard variables, which
          include the whole set of environment variables that are
          available to CGI programs. Also, you can define your own
          variables with the <code>set</code> function.</p>
      
          <p>If you don't like the format in which the date gets printed,
          you can use the <code>config</code> function, with a
          <code>timefmt</code> attribute, to modify that formatting.</p>
      
      <div class="example"><p><code>
              &lt;!--#config timefmt="%A %B %d, %Y" --&gt;<br />
              Today is &lt;!--#echo var="DATE_LOCAL" --&gt;
      </code></p></div>
      
      
      <h3><a name="lastmodified" id="lastmodified">Modification date of the file</a></h3>
      
      <div class="example"><p><code>
              This document last modified &lt;!--#flastmod file="index.html" --&gt;
      </code></p></div>
      
          <p>This function is also subject to <code>timefmt</code> format
          configurations.</p>
      
      
      <h3><a name="cgi" id="cgi">Including the results of a CGI program</a></h3>
      
          <p>This is one of the more common uses of SSI - to output the
          results of a CGI program, such as everybody's favorite, a ``hit
          counter.''</p>
      
      <div class="example"><p><code>
              &lt;!--#include virtual="/cgi-bin/counter.pl" --&gt;
      </code></p></div>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="additionalexamples" id="additionalexamples">Additional examples</a></h2>
      
      
          <p>Following are some specific examples of things you can do in
          your HTML documents with SSI.</p>
      
      <h3><a name="docmodified" id="docmodified">When was this document
      modified?</a></h3>
      
          <p>Earlier, we mentioned that you could use SSI to inform the
          user when the document was most recently modified. However, the
          actual method for doing that was left somewhat in question. The
          following code, placed in your HTML document, will put such a
          time stamp on your page. Of course, you will have to have SSI
          correctly enabled, as discussed above.</p>
      <div class="example"><p><code>
              &lt;!--#config timefmt="%A %B %d, %Y" --&gt;<br />
              This file last modified &lt;!--#flastmod file="ssi.shtml" --&gt;
      </code></p></div>
      
          <p>Of course, you will need to replace the
          <code>ssi.shtml</code> with the actual name of the file that
          you're referring to. This can be inconvenient if you're just
          looking for a generic piece of code that you can paste into any
          file, so you probably want to use the
          <code>LAST_MODIFIED</code> variable instead:</p>
      <div class="example"><p><code>
              &lt;!--#config timefmt="%D" --&gt;<br />
              This file last modified &lt;!--#echo var="LAST_MODIFIED" --&gt;
      </code></p></div>
      
          <p>For more details on the <code>timefmt</code> format, go to
          your favorite search site and look for <code>strftime</code>. The
          syntax is the same.</p>
      
      
      <h3><a name="standard-footer" id="standard-footer">Including a standard footer</a></h3>
      
      
          <p>If you are managing any site that is more than a few pages,
          you may find that making changes to all those pages can be a
          real pain, particularly if you are trying to maintain some kind
          of standard look across all those pages.</p>
      
          <p>Using an include file for a header and/or a footer can
          reduce the burden of these updates. You just have to make one
          footer file, and then include it into each page with the
          <code>include</code> SSI command. The <code>include</code>
          function can determine what file to include with either the
          <code>file</code> attribute, or the <code>virtual</code>
          attribute. The <code>file</code> attribute is a file path,
          <em>relative to the current directory</em>. That means that it
          cannot be an absolute file path (starting with /), nor can it
          contain ../ as part of that path. The <code>virtual</code>
          attribute is probably more useful, and should specify a URL
          relative to the document being served. It can start with a /,
          but must be on the same server as the file being served.</p>
      <div class="example"><p><code>
              &lt;!--#include virtual="/footer.html" --&gt;
      </code></p></div>
      
          <p>I'll frequently combine the last two things, putting a
          <code>LAST_MODIFIED</code> directive inside a footer file to be
          included. SSI directives can be contained in the included file,
          and includes can be nested - that is, the included file can
          include another file, and so on.</p>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="config" id="config">What else can I config?</a></h2>
      
      
          <p>In addition to being able to <code>config</code> the time
          format, you can also <code>config</code> two other things.</p>
      
          <p>Usually, when something goes wrong with your SSI directive,
          you get the message</p>
      <div class="example"><p><code>
              [an error occurred while processing this directive]
      </code></p></div>
      
          <p>If you want to change that message to something else, you
          can do so with the <code>errmsg</code> attribute to the
          <code>config</code> function:</p>
      <div class="example"><p><code>
              &lt;!--#config errmsg="[It appears that you don't know how to use SSI]" --&gt;
      </code></p></div>
      
          <p>Hopefully, end users will never see this message, because
          you will have resolved all the problems with your SSI
          directives before your site goes live. (Right?)</p>
      
          <p>And you can <code>config</code> the format in which file
          sizes are returned with the <code>sizefmt</code> attribute. You
          can specify <code>bytes</code> for a full count in bytes, or
          <code>abbrev</code> for an abbreviated number in Kb or Mb, as
          appropriate.</p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exec" id="exec">Executing commands</a></h2>
          
      
          <p>Here's something else that you can do with the <code>exec</code>
          function. You can actually have SSI execute a command using the
          shell (<code>/bin/sh</code>, to be precise - or the DOS shell,
          if you're on Win32). The following, for example, will give you
          a directory listing.</p>
      <div class="example"><p><code>
              &lt;pre&gt;<br />
              &lt;!--#exec cmd="ls" --&gt;<br />
              &lt;/pre&gt;
      </code></p></div>
      
          <p>or, on Windows</p>
      <div class="example"><p><code>
              &lt;pre&gt;<br />
              &lt;!--#exec cmd="dir" --&gt;<br />
              &lt;/pre&gt;
      </code></p></div>
      
          <p>You might notice some strange formatting with this directive
          on Windows, because the output from <code>dir</code> contains
          the string ``&lt;<code>dir</code>&gt;'' in it, which confuses
          browsers.</p>
      
          <p>Note that this feature is exceedingly dangerous, as it will
          execute whatever code happens to be embedded in the
          <code>exec</code> tag. If you have any situation where users
          can edit content on your web pages, such as with a
          ``guestbook'', for example, make sure that you have this
          feature disabled. You can allow SSI, but not the
          <code>exec</code> feature, with the <code>IncludesNOEXEC</code>
          argument to the <code>Options</code> directive.</p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="advanced" id="advanced">Advanced SSI techniques</a></h2>
      
      
          <p>In addition to spitting out content, Apache SSI gives you
          the option of setting variables, and using those variables in
          comparisons and conditionals.</p>
      
      <h3><a name="variables" id="variables">Setting variables</a></h3>
      
          <p>Using the <code>set</code> directive, you can set variables
          for later use. We'll need this later in the discussion, so
          we'll talk about it here. The syntax of this is as follows:</p>
      <div class="example"><p><code>
              &lt;!--#set var="name" value="Rich" --&gt;
      </code></p></div>
      
          <p>In addition to merely setting values literally like that, you
          can use any other variable, including <a href="../env.html">environment variables</a> or the variables
          discussed above (like <code>LAST_MODIFIED</code>, for example) to
          give values to your variables. You will specify that something is
          a variable, rather than a literal string, by using the dollar sign
          ($) before the name of the variable.</p>
      
          <div class="example"><p><code> &lt;!--#set var="modified" value="$LAST_MODIFIED" --&gt;
          </code></p></div>
      
          <p>To put a literal dollar sign into the value of your
          variable, you need to escape the dollar sign with a
          backslash.</p>
      <div class="example"><p><code>
              &lt;!--#set var="cost" value="\$100" --&gt;
      </code></p></div>
      
          <p>Finally, if you want to put a variable in the midst of a
          longer string, and there's a chance that the name of the
          variable will run up against some other characters, and thus be
          confused with those characters, you can place the name of the
          variable in braces, to remove this confusion. (It's hard to
          come up with a really good example of this, but hopefully
          you'll get the point.)</p>
      <div class="example"><p><code>
              &lt;!--#set var="date" value="${DATE_LOCAL}_${DATE_GMT}" --&gt;
      </code></p></div>
      
      
      <h3><a name="conditional" id="conditional">Conditional expressions</a></h3>
      
      
          <p>Now that we have variables, and are able to set and compare
          their values, we can use them to express conditionals. This
          lets SSI be a tiny programming language of sorts.
          <code class="module"><a href="../mod/mod_include.html">mod_include</a></code> provides an <code>if</code>,
          <code>elif</code>, <code>else</code>, <code>endif</code>
          structure for building conditional statements. This allows you
          to effectively generate multiple logical pages out of one
          actual page.</p>
      
          <p>The structure of this conditional construct is:</p>
      <div class="example"><p><code>
          &lt;!--#if expr="test_condition" --&gt;<br />
          &lt;!--#elif expr="test_condition" --&gt;<br />
          &lt;!--#else --&gt;<br />
          &lt;!--#endif --&gt;
      </code></p></div>
      
          <p>A <em>test_condition</em> can be any sort of logical
          comparison - either comparing values to one another, or testing
          the ``truth'' of a particular value. (A given string is true if
          it is nonempty.) For a full list of the comparison operators
          available to you, see the <code class="module"><a href="../mod/mod_include.html">mod_include</a></code>
          documentation.</p>
         
          <p>For example, if you wish to customize the text on your web page
          based on the time of day, you could use the following recipe, placed
          in the HTML page:</p>
      
          <div class="example"><p><code>
          Good
          &lt;!--#if expr="%{TIME_HOUR} &lt;12" --&gt;<br />
          morning!<br />
          &lt;!--#else --&gt;<br />
          afternoon!<br />
          &lt;!--#endif --&gt;<br />
          </code></p></div>
      
          <p>Any other variable (either ones that you define, or normal
          environment variables) can be used in conditional statements.
          See <a href="../expr.html">Expressions in Apache HTTP Server</a> for
          more information on the expression evaluation engine.</p>
      
          <p>With Apache's ability to set environment variables with the
          <code>SetEnvIf</code> directives, and other related directives,
          this functionality can let you do a wide variety of dynamic content
          on the server side without resorting a full web application.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="conclusion" id="conclusion">Conclusion</a></h2>
      
          <p>SSI is certainly not a replacement for CGI, or other
          technologies used for generating dynamic web pages. But it is a
          great way to add small amounts of dynamic content to pages,
          without doing a lot of extra work.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/howto/ssi.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/ssi.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/ssi.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/ssi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/ssi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/ssi.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/index.html.es��������������������������������������������������������0000644�0000000�0000050�00000017570�13412755316�017225� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>How-To / Tutoriales - Servidor HTTP Apache Versión 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="../">Versión 2.4</a></div><div id="page-content"><div id="preamble"><h1>How-To / Tutoriales</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/howto/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="howto" id="howto">How-To / Tutoriales</a></h2>
      
          
      
          <dl>
            <dt>Autenticación y Autorización</dt>
            <dd>
              <p>Autenticación es un proceso en el cual se verifica 
      		que alguien es quien afirma ser. Autorización es cualquier
      		proceso en el que se permite a alguien acceder donde quiere ir,
              o a obtener la información que desea tener.</p>
      
              <p>Ver: <a href="auth.html">Autenticación, Autorización</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Control de Acceso</dt>
            <dd>
              <p>Control de acceso hace referencia al proceso de restringir, o 
      		garantizar el acceso a un recurso en base a un criterio arbitrario.
      		Esto se puede conseguir de distintas formas.</p>
      
              <p>Ver: <a href="access.html">Control de Acceso</a></p>
            </dd>
          </dl>
      
         <dl>
            <dt>Contenido Dinámico con CGI</dt>
            <dd>
              <p>El CGI (Common Gateway Interface) es un método por el cual
      		un servidor web puede interactuar con programas externos de 
      		generación de contenido, a ellos nos referimos comúnmente como 
      		programas CGI o scripts CGI. Es un método sencillo para mostrar
      		contenido dinámico en tu sitio web. Este documento es una 
      		introducción para configurar CGI en tu servidor web Apache, y de
      		inicio para escribir programas CGI.</p>
      
              <p>Ver: <a href="cgi.html">CGI: Contenido Dinámico</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Ficheros <code>.htaccess</code></dt>
            <dd>
              <p>Los ficheros <code>.htaccess</code> facilitan una forma de 
      		hacer configuraciones por-directorio. Un archivo, que 
      		contiene una o más directivas de configuración, se coloca en un
      		directorio específico y las directivas especificadas solo aplican
      		sobre ese directorio y los subdirectorios del mismo.</p>
      
              <p>Ver: <a href="htaccess.html"><code>.htaccess</code> files</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>HTTP/2 con httpd</dt>
            <dd>
            <p>HTTP/2 es la evolución del protocolo de capa de aplicación más conocido, HTTP. 
              Se centra en hacer un uso más eficiente de los recursos de red sin cambiar la
      		semántica de HTTP. Esta guía explica como se implementa HTTP/2 en httpd,
      		mostrando buenas prácticas y consejos de configuración básica.
            </p>
      
              <p>Ver: <a href="http2.html">Guía HTTP/2</a></p>
            </dd>
          </dl>
      
      
          <dl>
            <dt>Introducción a los SSI</dt>
            <dd>
              <p>Los SSI (Server Side Includes) son directivas que se colocan
      		en las páginas HTML, y son evaluadas por el servidor mientras 
      		éste las sirve. Le permiten añadir contenido generado 
      		dinámicamente a una página HTML existente, sin tener que servir
      		la página entera a través de un programa CGI u otro método 
      		dinámico.</p>
      
              <p>Ver: <a href="ssi.html">Server Side Includes (SSI)</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Directorios web Por-usuario</dt>
            <dd>
              <p>En sistemas con múltiples usuarios, cada usuario puede tener
      		su directorio "home" compartido usando la directiva
      		<code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>. Aquellos
      		que visiten la URL <code>http://example.com/~username/</code>
      		obtendrán contenido del directorio del usuario "<code>username</code>"
      		que se encuentra en el directorio "home" del sistema.</p>
      
              <p>Ver: <a href="public_html.html">
      		Directorios Web de Usuario (<code>public_html</code>)</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Guía de Proxy Inverso</dt>
            <dd>
              <p>Apache httpd ofrece muchas posibilidades como proxy inverso. Usando la
      		directiva <code class="directive"><a href="../mod/mod_proxy.html#proxypass">ProxyPass</a></code> así como
      		<code class="directive"><a href="../mod/mod_proxy.html#balancermember">BalancerMember</a></code> puede crear
      		sofisticadas configuraciones de proxy inverso que proveen de alta 
      		disponibilidad, balanceo de carga, clustering basado en la nube y 
      		reconfiguración dinámica en caliente.</p>
      
              <p>Ver: <a href="reverse_proxy.html">Guía de Proxy Inverso</a></p>
            </dd>
          </dl>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/howto/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/ssi.html.ja.utf8�����������������������������������������������������0000644�0000000�0000050�00000075132�13412755316�017562� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«: Server Side Includes 入門 - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="../">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a> &gt; <a href="./">How-To / ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«</a></div><div id="page-content"><div id="preamble"><h1>Apache ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«: Server Side Includes 入門</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/howto/ssi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/ssi.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/ssi.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/ssi.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/ssi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
      <p>サーãƒã‚µã‚¤ãƒ‰ã‚¤ãƒ³ã‚¯ãƒ«ãƒ¼ãƒ‰ã«ã‚ˆã£ã¦ã€æ—¢å­˜ã® HTML
      ドキュメントã«å‹•çš„ãªã‚³ãƒ³ãƒ†ãƒ³ãƒ„を追加ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">ã¯ã˜ã‚ã«</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#what">SSI ã¨ã¯ ?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#configuring">SSI を許å¯ã™ã‚‹ãŸã‚ã®ã‚µãƒ¼ãƒã®è¨­å®š</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#basic">基本的㪠SSI ディレクティブ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#additionalexamples">追加ã®ä¾‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#config">ä»–ã«ä½•ãŒè¨­å®šã§ãã‚‹ã®ã‹ ?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exec">コマンドã®å®Ÿè¡Œ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#advanced">高度㪠SSI テクニック</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#conclusion">終ã‚りã«</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">ã¯ã˜ã‚ã«</a></h2>
       <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="../mod/mod_expires.html">mod_expires</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code></li><li><code class="directive"><a href="../mod/mod_mime.html#addtype">AddType</a></code></li><li><code class="directive"><a href="../mod/core.html#setoutputfilter">SetOutputFilter</a></code></li><li><code class="directive"><a href="../mod/mod_setenvif.html#browsermatchnocase">BrowserMatchNoCase</a></code></li></ul></td></tr></table>
      
          <p>ã“ã®è¨˜äº‹ã¯ã€é€šå¸¸ã¯å˜ã« SSI ã¨å‘¼ã°ã‚Œã‚‹ Server Side Includes
          を扱ã„ã¾ã™ã€‚ã“ã®è¨˜äº‹ã«ãŠã„ã¦ã¯ã€ã‚µãƒ¼ãƒã§ã® SSI を許å¯ã™ã‚‹ãŸã‚ã®è¨­å®šã¨ã€
          ç¾åœ¨ã® HTML ページã«å‹•çš„ãªã‚³ãƒ³ãƒ†ãƒ³ãƒ„を加ãˆã‚‹ãŸã‚ã®ã„ãã¤ã‹ã®åŸºæœ¬çš„ãª
          SSI 技術を紹介ã—ã¾ã™ã€‚</p>
      
          <p>記事ã®å¾ŒåŠã§ã¯ã€SSI ディレクティブ㧠SSI
          ã¨å…±ã«å®Ÿè¡Œã™ã‚‹ã“ã¨ãŒã§ãã‚‹æ¡ä»¶æ–‡ã®ã‚ˆã†ãª
          幾分高度ãªäº‹æŸ„ã«ã¤ã„ã¦è¿°ã¹ã¦ã„ã¾ã™ã€‚</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="what" id="what">SSI ã¨ã¯ ?</a></h2>
      
          <p>SSI (Server Side Includes) ã¯ã€HTML
          ページ中ã«é…ç½®ã•れるディレクティブã§ã‚りã€
          サーãƒã§ãƒšãƒ¼ã‚¸ã‚’æä¾›ã™ã‚‹æ™‚ã«è©•価ã•れã¾ã™ã€‚SSI ã¯ã€CGI
          プログラムやãã®ä»–ã®å‹•çš„ãªæŠ€è¡“ã§å…¨ã¦ã®ãƒšãƒ¼ã‚¸ã‚’æä¾›ã›ãšã«ã€
          å‹•çš„ã«ç”Ÿæˆã•れãŸã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ç¾åœ¨ã® HTML ページã«åŠ ãˆã¾ã™ã€‚</p>
      
          <p>ã©ã†ã„ã†å ´åˆã« SSI を使ã„ã€ã©ã†ã„ã†å ´åˆã«ãƒ—ログラムã§
          ページを完全ã«ç”Ÿæˆã™ã‚‹ã‹ã¯ã€ãƒšãƒ¼ã‚¸ã®ã†ã¡ã©ã®ç¨‹åº¦ãŒé™çš„ã§ã‚りã€
          ãƒšãƒ¼ã‚¸ãŒæä¾›ã•れるãŸã³ã«å†è¨ˆç®—ã™ã‚‹å¿…è¦ãŒã©ã®ç¨‹åº¦ã‚ã‚‹ã‹ã§é€šå¸¸ã¯æ±ºå®šã—ã¾ã™ã€‚
          SSI ã¯ç¾åœ¨æ™‚刻ã®ã‚ˆã†ãªå°ã•ã„æƒ…報を加ãˆã‚‹ã«ã¯ã†ã£ã¦ã¤ã‘ã®æ–¹æ³•ã§ã™ã€‚
          ã—ã‹ã—ã€ãã®ãƒšãƒ¼ã‚¸ã®ã»ã¨ã‚“ã©ã®éƒ¨åˆ†ãŒæä¾›æ™‚ã«ç”Ÿæˆã•れる場åˆã¯ã€
          ä»–ã®æ–¹æ³•を探ã™å¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuring" id="configuring">SSI を許å¯ã™ã‚‹ãŸã‚ã®ã‚µãƒ¼ãƒã®è¨­å®š</a></h2>
      
      
          <p>サーãƒã§ SSI を許å¯ã™ã‚‹ã«ã¯ã€<code>httpd.conf</code>
          ファイルã¾ãŸã¯ <code>.htaccess</code>
          ãƒ•ã‚¡ã‚¤ãƒ«ã«æ¬¡ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を指定ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™:</p>
      <div class="example"><p><code>
              Options +Includes
      </code></p></div>
      
          <p>ã“ã®æŒ‡å®šã¯ã€ãƒ•ァイルを SSI
          ディレクティブã§è§£æžã•ã›ã‚‹ã“ã¨ã‚’許å¯ã™ã‚‹ã¨ã„ã†ã“ã¨ã‚’ Apache
          ã«ä¼ãˆã¾ã™ã€‚ã»ã¨ã‚“ã©ã®è¨­å®šã§ã¯ãŠäº’ã„を上書ãã§ãã‚‹ã€è¤‡æ•°ã®
          <code class="directive"><a href="../mod/core.html#options">Options</a></code> ãŒã‚ã‚‹ã“ã¨ã«
          注æ„ã—ã¦ãã ã•ã„。ãŠãらãã€è¨­å®šãŒæœ€å¾Œã«è©•価ã•れるã“ã¨ã‚’
          ä¿è¨¼ã•れるãŸã‚ã«ã€SSI を使用ã—ãŸã„ディレクトリ㫠<code>Options</code>
          ディレクティブをé©ç”¨ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã§ã—ょã†ã€‚</p>
      
          <p>å…¨ã¦ã®ãƒ•ァイル㌠SSI
          ディレクティブã§è§£æžã•れるã¨ã„ã†ã‚ã‘ã§ã¯ã‚りã¾ã›ã‚“。
          ã©ã®ãƒ•ァイルãŒè§£æžã•れるã‹ã‚’ Apache ã«ä¼ãˆã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
          ã“れを行ãªã†ã«ã¯äºŒã¤æ–¹æ³•ãŒã‚りã¾ã™ã€‚
          次ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を使ã†ã“ã¨ã§ã€ä¾‹ãˆã° <code>.shtml</code>
          ã®ã‚ˆã†ãªç‰¹åˆ¥ãªãƒ•ァイル拡張å­ã‚’æŒã¤ãƒ•ァイルを解æžã™ã‚‹ã‚ˆã†
          Apache ã«ä¼ãˆã‚‹ã“ã¨ãŒã§ãã¾ã™:</p>
      <div class="example"><p><code>
              AddType text/html .shtml<br />
              AddOutputFilter INCLUDES .shtml
      </code></p></div>
      
          <p>ã“ã®æ–¹æ³•ã®æ¬ ç‚¹ã¯ã€ã‚‚ã—ç¾åœ¨ã®ãƒšãƒ¼ã‚¸ã« SSI ディレクティブを加ãˆãŸã„å ´åˆã€
          ãれらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒå®Ÿè¡Œã•れるよã†ã« 
          <code>.shtml</code> æ‹¡å¼µå­ã«ã™ã‚‹ãŸã‚ã€ãã®ãƒšãƒ¼ã‚¸ã®åå‰ã¨ã€
          ãã®ãƒšãƒ¼ã‚¸ã¸ã®å…¨ã¦ã®ãƒªãƒ³ã‚¯ã‚’変更ã—ãªã‘れã°ãªã‚‰ãªã„ã“ã¨ã§ã™ã€‚</p>
      
          <p>ã‚‚ã†ä¸€ã¤ã®æ–¹æ³•ã¯ã€<code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code>
          ディレクティブを使用ã™ã‚‹ã“ã¨ã§ã™:</p>
      <div class="example"><p><code>
              XBitHack on
      </code></p></div>
      
          <p><code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code> 
          ã¯ã€ãƒ•ァイルã®å®Ÿè¡Œãƒ“ットãŒç«‹ã£ã¦ã„ã‚‹å ´åˆã€
          SSI ディレクティブã«ã‚ˆã‚Šè§£æžã™ã‚‹ã“ã¨ã‚’ Apache ã«ä¼ãˆã¾ã™ã€‚
          従ã£ã¦ã€SSI ディレクティブをç¾åœ¨ã®ãƒšãƒ¼ã‚¸ã«åŠ ãˆã‚‹ãŸã‚ã«ã¯ã€
          ファイルåを変更ã—ãªãã¦ã‚‚よãã€å˜ã« <code>chmod</code>
          を使用ã—ã¦ãƒ•ァイルを実行å¯èƒ½ã«ã™ã‚‹ã ã‘ã§æ¸ˆã¿ã¾ã™ã€‚</p>
      <div class="example"><p><code>
              chmod +x pagename.html
      </code></p></div>
      
          <p>行ãªã†ã¹ãã§ã¯ãªã„ã“ã¨ã«é–¢ã™ã‚‹çŸ­ã„コメント。時々誰ã‹ãŒã€å…¨ã¦ã®
          <code>.html</code> ファイルを SSI ã§è§£æžã™ã‚‹ã‚ˆã† Apache ã«ä¼ãˆã‚Œã°ã€
          ã‚ã–ã‚ã– <code>.shtml</code> ã¨ã„ã†ãƒ•ァイルåã«ã™ã‚‹å¿…è¦ãŒãªã„ã¨ã„ã£ã¦
          è–¦ã‚ã‚‹ã®ã‚’見るã“ã¨ã§ã—ょã†ã€‚ã“ã†ã„ã†äººãŸã¡ã¯ã€ãŠãらã
          <code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code>
          ã«ã¤ã„ã¦èžã„ãŸã“ã¨ãŒãªã„ã®ã§ã—ょã†ã€‚
          ã“ã®æ–¹æ³•ã«ã¤ã„ã¦æ³¨æ„ã™ã‚‹ã“ã¨ã¯ã€ãŸã¨ãˆ SSI
          ディレクティブを全ãå«ã¾ãªã„å ´åˆã§ã‚‚ã€Apache ãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«
          é€ã‚‹å…¨ã¦ã®ãƒ•ァイルを最後ã¾ã§èª­ã¿è¾¼ã¾ã›ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚
          ã“ã®æ–¹æ³•ã¯ã‹ãªã‚Šå‡¦ç†ã‚’é…ãã™ã‚‹ã‚‚ã®ã§ã‚りã€è‰¯ããªã„アイデアã§ã™ã€‚</p>
      
          <p>ã‚‚ã¡ã‚ã‚“ã€Windows ã§ã¯ãã®ã‚ˆã†ãªå®Ÿè¡Œãƒ“ットをセット
          ã™ã‚‹ã‚ˆã†ãªã‚‚ã®ã¯ã‚りã¾ã›ã‚“ã®ã§ã‚ªãƒ—ションãŒå°‘ã—制é™ã•れã¦ã„ã¾ã™ã€‚</p>
      
          <p>デフォルトã®è¨­å®šã§ã¯ã€Apache 㯠SSI ページã«ã¤ã„ã¦æœ€çµ‚変更時刻や
          コンテンツã®é•·ã•ã‚’ HTTP ヘッダã«é€ã‚Šã¾ã›ã‚“。
          å‹•çš„ãªã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã§ã‚ã‚‹ãŸã‚ã€ãれらã®å€¤ã‚’計算ã™ã‚‹ã®ãŒé›£ã—ã„ã‹ã‚‰ã§ã™ã€‚
          ã“ã®ãŸã‚ドキュメントãŒã‚­ãƒ£ãƒƒã‚·ãƒ¥ã•れãªããªã‚Šã€
          çµæžœã¨ã—ã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®æ€§èƒ½ãŒé…ããªã£ãŸã‚ˆã†ã«æ„Ÿã˜ã•ã›ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚
          ã“れを解決ã™ã‚‹æ–¹æ³•ãŒäºŒã¤ã‚りã¾ã™:</p>
      
          <ol>
            <li><code>XBitHack Full</code> 設定を使用ã™ã‚‹ã€‚
            ã“ã®è¨­å®šã«ã‚ˆã‚Šã€ã‚‚ã¨ã‚‚ã¨è¦æ±‚ã•れãŸãƒ•ã‚¡ã‚¤ãƒ«ã®æ™‚刻をå‚ç…§ã—ã€
            読ã¿è¾¼ã¾ã‚Œã‚‹ãƒ•ァイルã®å¤‰æ›´æ™‚刻を無視ã—ã¦æœ€çµ‚変更時刻を決定ã™ã‚‹ã‚ˆã†
            Apache ã«ä¼ãˆã¾ã™ã€‚</li>
      
            <li><a href="../mod/mod_expires.html">mod_expires</a>
            ã§æä¾›ã•れã¦ã„るディレクティブを使用ã—ã¦ã€
            ファイルãŒç„¡åйã«ãªã‚‹æ™‚刻を明示ã—ã¾ã™ã€‚ã“れã«ã‚ˆã‚Šã€
            ブラウザã¨ãƒ—ロキシã«ã‚­ãƒ£ãƒƒã‚·ãƒ¥ãŒæœ‰åйã§ã‚ã‚‹ã“ã¨ã‚’通知ã—ã¾ã™ã€‚</li>
          </ol>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="basic" id="basic">基本的㪠SSI ディレクティブ</a></h2>
      
          <p>SSI ディレクティブã¯ä»¥ä¸‹ã®æ–‡æ³•ã§è¨˜è¿°ã—ã¾ã™:</p>
      <div class="example"><p><code>
              &lt;!--#element attribute=value attribute=value ... --&gt;
      </code></p></div>
      
          <p>HTML ã®ã‚³ãƒ¡ãƒ³ãƒˆã®ã‚ˆã†ãªæ›¸å¼ã‚’ã—ã¦ã„ã‚‹ã®ã§ã€ã‚‚ã— SSI
          ã‚’æ­£ã—ã動作å¯èƒ½ã«ã—ãªã‘れã°ã€ãƒ–ラウザã¯ãれを無視ã™ã‚‹ã§ã—ょã†ã€‚
          ã—ã‹ã—ã€HTML ソース中ã§ã¯è¦‹ãˆã¾ã™ã€‚ã‚‚ã— SSI ã‚’æ­£ã—ã設定ã—ãŸãªã‚‰ã€
          ディレクティブã¯ãã®çµæžœã¨ç½®ãæ›ãˆã‚‰ã‚Œã¾ã™ã€‚</p>
      
          <p>element ã¯ãŸãã•ã‚“ã‚ã‚‹ã‚‚ã®ã‹ã‚‰ä¸€ã¤æŒ‡å®šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          指定ã§ãã‚‹ã‚‚ã®ã®å¤§å¤šæ•°ã«ã¤ã„ã¦ã¯ã€æ¬¡å›žã‚‚ã†å°‘ã—詳ã—ã説明ã—ã¾ã™ã€‚
          ã“ã“ã§ã¯ã€SSI ã§è¡Œãªã†ã“ã¨ãŒã§ãる例をã„ãã¤ã‹ç¤ºã—ã¾ã™ã€‚</p>
      
      <h3><a name="todaysdate" id="todaysdate">ä»Šæ—¥ã®æ—¥ä»˜</a></h3>
      
      <div class="example"><p><code>
              &lt;!--#echo var="DATE_LOCAL" --&gt;
      </code></p></div>
      
          <p><code>echo</code> è¦ç´ ã¯å˜ã«å¤‰æ•°ã®å€¤ã‚’出力ã—ã¾ã™ã€‚
          CGI プログラムã«åˆ©ç”¨å¯èƒ½ãªç’°å¢ƒå¤‰æ•°ã®å…¨ã¦ã®
          セットをå«ã‚€å¤šãã®æ¨™æº–変数ãŒã‚りã¾ã™ã€‚ã¾ãŸã€<code>set</code>
          è¦ç´ ã‚’用ã„ã‚‹ã“ã¨ã§ã€ç‹¬è‡ªã®å¤‰æ•°ã‚’定義ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          </p>
      
          <p>出力ã•ã‚Œã‚‹æ—¥ä»˜ã®æ›¸å¼ãŒå¥½ãã§ã¯ãªã„å ´åˆã€ãã®æ›¸å¼ã‚’修正ã™ã‚‹ãŸã‚ã«ã€
          <code>config</code> è¦ç´ ã« <code>timefmt</code>
          属性を使用ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
              &lt;!--#config timefmt="%A %B %d, %Y" --&gt;<br />
              Today is &lt;!--#echo var="DATE_LOCAL" --&gt;
      </code></p></div>
      
      
      <h3><a name="lastmodified" id="lastmodified">ファイルã®å¤‰æ›´æ—¥</a></h3>
      
      <div class="example"><p><code>
              This document last modified &lt;!--#flastmod file="index.html" --&gt;
      </code></p></div>
      
          <p>ã“ã®è¦ç´ ã‚‚ <code>timefmt</code>
          フォーマットã®è¨­å®šã«å¾“ã„ã¾ã™ã€‚</p>
      
      
      <h3><a name="cgi" id="cgi">CGI プログラムã®çµæžœã‚’å–り込む</a></h3>
      
          <p>ã“れã¯ã€å…¨ã¦ã®äººã®ãŠæ°—ã«å…¥ã‚Šã§ã‚ã‚‹ ``ヒットカウンタ'' ã®ã‚ˆã†ãª
          CGI プログラムã®çµæžœã‚’出力ã™ã‚‹ SSI
          ã®ã‚ˆã‚Šä¸€èˆ¬çš„ãªä½¿ç”¨ã®ã†ã¡ã®ä¸€ã¤ã§ã™ã€‚</p>
      
      <div class="example"><p><code>
              &lt;!--#include virtual="/cgi-bin/counter.pl" --&gt;
      </code></p></div>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="additionalexamples" id="additionalexamples">追加ã®ä¾‹</a></h2>
      
      
          <p>以下ã¯ã€SSI を使用ã—㦠HTML
          ドキュメントã«ãŠã„ã¦ã§ãã‚‹ã“ã¨ã®ã„ãã¤ã‹ã®ç‰¹åˆ¥ãªä¾‹ã§ã™ã€‚</p>
      
      <h3><a name="docmodified" id="docmodified">ã„ã¤ã“ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã¯ä¿®æ­£ã•れãŸã®ã‹
      ?</a></h3>
      
          <p>å…ˆã«ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆãŒæœ€å¾Œã«å¤‰æ›´ã•れãŸã®ã¯ã„ã¤ã‹ã‚’
          ユーザã«é€šçŸ¥ã™ã‚‹ãŸã‚ã« SSI を使用ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã“ã¨ã‚’è¿°ã¹ã¾ã—ãŸã€‚
          ã—ã‹ã—ãªãŒã‚‰ã€å®Ÿéš›ã®æ–¹æ³•ã¯ã€ã„ãã¶ã‚“å•題ã®ã¾ã¾ã«ã—ã¦ãŠãã¾ã—ãŸã€‚
          HTML ドキュメントã«é…ç½®ã•ã‚ŒãŸæ¬¡ã®ã‚³ãƒ¼ãƒ‰ã¯ã€ãƒšãƒ¼ã‚¸ã«ãã®ã‚ˆã†ãª
          タイムスタンプを入れるã§ã—ょã†ã€‚ã‚‚ã¡ã‚ã‚“ã€ä¸Šè¿°ã®ã‚ˆã†ã«ã€
          SSI ã‚’æ­£ã—ã動作å¯èƒ½ã«ã—ã¦ãŠãå¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      <div class="example"><p><code>
              &lt;!--#config timefmt="%A %B %d, %Y" --&gt;<br />
              This file last modified &lt;!--#flastmod file="ssi.shtml" --&gt;
      </code></p></div>
      
          <p>ã‚‚ã¡ã‚ã‚“ã€<code>ssi.shtml</code>
          ã®éƒ¨åˆ†ã‚’実際ã®å½“該ファイルåã¨ç½®ãæ›ãˆã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
          ã‚‚ã—ã€ã‚らゆるファイルã«å¼µã‚‹ã“ã¨ãŒã§ãる一般的ãªã‚³ãƒ¼ãƒ‰ã‚’探ã—ã¦ã„ã‚‹ãªã‚‰ã€
          ã“れã¯ä¸ä¾¿ã§ã‚ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。ãŠãらããã®å ´åˆã¯ã€
          ãã†ã™ã‚‹ä»£ã‚りã«å¤‰æ•° <code>LAST_MODIFIED</code>
          を使用ã—ãŸã„ã¨è€ƒãˆã‚‹ã§ã—ょã†:</p>
      <div class="example"><p><code>
              &lt;!--#config timefmt="%D" --&gt;<br />
              This file last modified &lt;!--#echo var="LAST_MODIFIED" --&gt;
      </code></p></div>
      
          <p><code>timefmt</code>
          書å¼ã«ã¤ã„ã¦ã®ã‚ˆã‚Šè©³ç´°ã«ã¤ã„ã¦ã¯ã€ãŠå¥½ã¿ã®æ¤œç´¢ã‚µã‚¤ãƒˆã«è¡Œãã€
          <code>strftime</code> ã§æ¤œç´¢ã—ã¦ã¿ã¦ãã ã•ã„。文法ã¯åŒã˜ã§ã™ã€‚</p>
      
      
      <h3><a name="standard-footer" id="standard-footer">標準ã®ãƒ•ッタを挿入ã™ã‚‹</a></h3>
      
      
          <p>ã‚‚ã—æ•°ãƒšãƒ¼ã‚¸ã‚’è¶…ãˆã‚‹ãƒšãƒ¼ã‚¸ã‚’æŒã¤ã‚µã‚¤ãƒˆã‚’管ç†ã—ã¦ã„ã‚‹ãªã‚‰ã°ã€
          全ページã«å¯¾ã—ã¦å¤‰é …を行ãªã†ã“ã¨ãŒæœ¬å½“ã«è‹¦ç—›ã¨ãªã‚Šå¾—ã‚‹ã“ã¨ãŒ
          分ã‹ã‚‹ã§ã—ょã†ã€‚å…¨ã¦ã®ãƒšãƒ¼ã‚¸ã«æ¸¡ã£ã¦ã‚ã‚‹ç¨®ã®æ¨™æº–çš„ãªå¤–観を
          ç¶­æŒã—よã†ã¨ã—ã¦ã„ã‚‹ãªã‚‰ã°ç‰¹ã«ãã†ã§ã—ょã†ã€‚</p>
      
          <p>ãƒ˜ãƒƒãƒ€ã‚„ãƒ•ãƒƒã‚¿ç”¨ã®æŒ¿å…¥ç”¨ãƒ•ァイルを使用ã™ã‚‹ã“ã¨ã§ã€
          ã“ã®ã‚ˆã†ãªæ›´æ–°ã«ã‹ã‹ã‚‹è² æ‹…を減らã™ã“ã¨ãŒã§ãã¾ã™ã€‚
          一ã¤ã®ãƒ•ッタファイルを作æˆã—ã€ãれを <code>include</code>
          SSI コマンドã§å„ページã«å…¥ã‚Œã‚‹ã ã‘ã§æ¸ˆã¿ã¾ã™ã€‚<code>include</code>
          è¦ç´ ã¯ã€<code>file</code> 属性ã¾ãŸã¯ <code>virtual</code>
          属性ã®ã„ãšã‚Œã‹ã‚’使用ã—ã¦ã©ã®ãƒ•ァイルを挿入ã™ã‚‹ã‹ã‚’決ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          <code>file</code> 属性ã¯ã€<em>カレントディレクトリã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã§ç¤ºã•れãŸ
          </em>ファイルパスã§ã™ã€‚
          ãれ㯠/ ã§å§‹ã¾ã‚‹çµ¶å¯¾ãƒ•ァイルパスã«ã¯ã§ããšã€ã¾ãŸã€ãã®ãƒ‘スã®ä¸€éƒ¨ã« ../
          ã‚’å«ã‚€ã“ã¨ãŒã§ããªã„ã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚<code>virtual</code>
          属性ã¯ã€ãŠãらãより便利ã ã¨æ€ã„ã¾ã™ãŒã€æä¾›ã™ã‚‹ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‹ã‚‰ã®ç›¸å¯¾
          URL ã§æŒ‡å®šã™ã¹ãã§ã™ã€‚ãれ㯠/ ã§å§‹ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã™ãŒã€
          æä¾›ã™ã‚‹ãƒ•ァイルã¨åŒã˜ã‚µãƒ¼ãƒä¸Šã«å­˜åœ¨ã—ãªãã¦ã¯ãªã‚Šã¾ã›ã‚“。</p>
      <div class="example"><p><code>
              &lt;!--#include virtual="/footer.html" --&gt;
      </code></p></div>
      
          <p>ç§ã¯æœ€å¾Œã®äºŒã¤ã‚’組ã¿åˆã‚ã›ã¦ã€<code>LAST_MODIFIED</code>
          ディレクティブをフッタファイルã®ä¸­ã«ç½®ãã“ã¨ãŒã‚ˆãã‚りã¾ã™ã€‚
          SSI ディレクティブã¯ã€æŒ¿å…¥ç”¨ã®ãƒ•ァイルã«å«ã¾ã›ãŸã‚Šã€
          挿入ファイルã®ãƒã‚¹ãƒˆã‚’ã—ãŸã‚Šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã™ãªã‚ã¡ã€
          挿入用ã®ãƒ•ァイルã¯ä»–ã®ãƒ•ァイルをå†å¸°çš„ã«æŒ¿å…¥ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="config" id="config">ä»–ã«ä½•ãŒè¨­å®šã§ãã‚‹ã®ã‹ ?</a></h2>
      
      
          <p>時刻書å¼ã‚’ <code>config</code> ã§è¨­å®šã§ãã‚‹ã“ã¨ã«åŠ ãˆã¦ã€
          æ›´ã«äºŒã¤ <code>config</code> ã§è¨­å®šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>通常ã€SSI ディレクティブã§ä½•ã‹ãŒã†ã¾ãã„ã‹ãªã„ã¨ãã¯ã€
          次ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒå‡ºåŠ›ã•れã¾ã™ã€‚</p>
      <div class="example"><p><code>
              [an error occurred while processing this directive]
      </code></p></div>
      
          <p>ã“ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’ä»–ã®ã‚‚ã®ã«ã—ãŸã„å ´åˆã€<code>config</code>
          è¦ç´ ã® <code>errmsg</code> 属性ã§å¤‰æ›´ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™:</p>
      <div class="example"><p><code>
              &lt;!--#config errmsg="[It appears that you don't know how to use SSI]" --&gt;
      </code></p></div>
      
          <p>ãŠãらãã€ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ã¯ã“ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’決ã—ã¦è¦‹ã‚‹ã“ã¨ã¯ã‚りã¾ã›ã‚“。
          ãªãœãªã‚‰ã€ãã®ã‚µã‚¤ãƒˆãŒç”ŸããŸçŠ¶æ…‹ã«ãªã‚‹å‰ã« SSI ディレクティブã«é–¢ã™ã‚‹
          å…¨ã¦ã®å•題を解決ã—ã¦ã„ã‚‹ã¯ãšã ã‹ã‚‰ã§ã™ã€‚(ãã†ã§ã™ã‚ˆã­?)</p>
      
          <p>ãã—ã¦ã€<code>config</code> ã«ãŠã„㦠<code>sizefmt</code>
          属性を使用ã™ã‚‹ã“ã¨ã§ã€
          è¿”ã•ã‚Œã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã‚µã‚¤ã‚ºã®æ›¸å¼ã‚’設定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          ãƒã‚¤ãƒˆæ•°ã«ã¯ <code>bytes</code> ã‚’ã€é©å½“ã« Kb ã‚„ Mb
          ã«çŸ­ç¸®ã•ã›ã‚‹ã«ã¯ <code>abbrev</code> を指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exec" id="exec">コマンドã®å®Ÿè¡Œ</a></h2>
          
      
          <p>今後数ヶ月ã®ã†ã¡ã«ã€å°ã•㪠CGI プログラム㨠SSI
          を使用ã™ã‚‹è¨˜äº‹ã‚’出ã—ãŸã„ã¨è€ƒãˆã¦ã„ã¾ã™ã€‚ã“ã“ã§ã¯ãれã¨ã¯åˆ¥ã«ã€
          <code>exec</code> è¦ç´ ã«ã‚ˆã£ã¦è¡Œãªã†ã“ã¨ãŒã§ãã‚‹ã“ã¨ã‚’示ã—ã¾ã™ã€‚
          SSI ã«ã‚·ã‚§ãƒ« (正確ã«ã¯ <code>/bin/sh</code>。Win32 ãªã‚‰ã° DOS シェル)
          を使用ã—ã¦ã‚³ãƒžãƒ³ãƒ‰ã‚’実行ã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          下記ã®ä¾‹ã§ã¯ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒªã‚¹ãƒˆå‡ºåŠ›ã‚’è¡Œãªã„ã¾ã™ã€‚</p>
      <div class="example"><p><code>
              &lt;pre&gt;<br />
              &lt;!--#exec cmd="ls" --&gt;<br />
              &lt;/pre&gt;
      </code></p></div>
      
          <p>Windows 上ã§ã¯ã€</p>
      <div class="example"><p><code>
              &lt;pre&gt;<br />
              &lt;!--#exec cmd="dir" --&gt;<br />
              &lt;/pre&gt;
      </code></p></div>
      
          <p>Windows 上ã§ã¯ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«ã‚ˆã£ã¦ã„ãã¤ã‹ã®å¥‡å¦™ãª
          書å¼ã«æ°—ã¥ãã§ã—ょã†ã€‚ãªãœãªã‚‰ <code>dir</code> ã®å‡ºåŠ›ãŒæ–‡å­—列
          ``&lt;<code>dir</code>&gt;'' ã‚’å«ã¿ã€ãƒ–ラウザを混乱ã•ã›ã‚‹ã‹ã‚‰ã§ã™ã€‚</p>
      
          <p>ã“ã®æ©Ÿèƒ½ã¯éžå¸¸ã«å±é™ºã§ã‚りã€ã©ã‚“ãªã‚³ãƒ¼ãƒ‰ã§ã‚‚ <code>exec</code>
          ã‚¿ã‚°ã«åŸ‹ã‚è¾¼ã¾ã‚Œã¦ã—ã¾ãˆã°å®Ÿè¡Œã™ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。例ãˆã° 
          `` ゲストブック '' ã®ã‚ˆã†ã«ã€ã‚‚ã—ã€
          ユーザãŒãƒšãƒ¼ã‚¸ã®å†…容を編集ã§ãる状æ³ã«ã‚ã‚‹ãªã‚‰ã°ã€
          ã“ã®æ©Ÿèƒ½ã‚’ç¢ºå®Ÿã«æŠ‘åˆ¶ã—ã¦ãã ã•ã„。<code>Options</code>
          ディレクティブ㮠<code>IncludesNOEXEC</code> 引数を指定ã™ã‚‹ã“ã¨ã§ã€
          SSI ã¯è¨±å¯ã™ã‚‹ã‘れ㩠<code>exec</code>
          機能ã¯è¨±å¯ã—ãªã„よã†ã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="advanced" id="advanced">高度㪠SSI テクニック</a></h2>
      
      
          <p>コンテンツを出力ã™ã‚‹ã“ã¨ã«åŠ ãˆã€Apache SSI ã¯å¤‰æ•°ã‚’設定ã—ã€
          ãã—ã¦æ¯”è¼ƒã¨æ¡ä»¶åˆ†å²ã«ãã®å¤‰æ•°ã‚’使用ã§ãる機能をæä¾›ã—ã¦ã„ã¾ã™ã€‚
          </p>
      
      <h3><a name="caveat" id="caveat">警告</a></h3>
      
          <p>ã“ã®è¨˜äº‹ã§è¿°ã¹ãŸå¤§éƒ¨åˆ†ã®æ©Ÿèƒ½ã¯ã€Apache 1.2
          以é™ã‚’使用ã—ã¦ã„ã‚‹å ´åˆã®ã¿åˆ©ç”¨å¯èƒ½ã§ã™ã€‚ã‚‚ã¡ã‚ã‚“ã€ã‚‚ã— Apache 1.2
          以é™ã‚’使用ã—ã¦ãªã„å ´åˆã€ç›´ã¡ã«ã‚¢ãƒƒãƒ—グレードã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
          ã•ãã€ä»Šãれを行ãªã„ãªã•ã„。ãれã¾ã§å¾…ã£ã¦ã„ã¾ã™ã€‚</p>
      
      
      <h3><a name="variables" id="variables">変数を設定ã™ã‚‹</a></h3>
      
          <p><code>set</code> ディレクティブを使用ã—ã¦ã€
          後ã§ä½¿ç”¨ã™ã‚‹ãŸã‚ã«å¤‰æ•°ã‚’設定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          ã“れã¯å¾Œã®èª¬æ˜Žã§å¿…è¦ã«ãªã‚‹ã®ã§ã€ã“ã“ã§ãれã«ã¤ã„ã¦è¿°ã¹ã¦ã„ã¾ã™ã€‚
          文法ã¯ä»¥ä¸‹ã®ã¨ãŠã‚Šã§ã™:</p>
      <div class="example"><p><code>
              &lt;!--#set var="name" value="Rich" --&gt;
      </code></p></div>
      
          <p>ã“ã®ã‚ˆã†ã«å˜ç´”ã«æ–‡å­—ã©ãŠã‚Šã«è¨­å®šã™ã‚‹ã“ã¨ã«åŠ ãˆã€
          <a href="../env.html">環境変数</a>や上記ã®å¤‰æ•°
          (例ãˆã° <code>LAST_MODIFIED</code> ã®ã‚ˆã†ãª)
          ã‚’å«ã‚€ä»–ã®ã‚らゆる変数を値を設定ã™ã‚‹ã®ã«ä½¿ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          変数åã®å‰ã«ãƒ‰ãƒ«è¨˜å· ($) を使用ã™ã‚‹ã“ã¨ã§ã€
          ãれãŒãƒªãƒ†ãƒ©ãƒ«æ–‡å­—列ã§ã¯ãªãã¦å¤‰æ•°ã§ã‚ã‚‹ã“ã¨ã‚’示ã—ã¾ã™ã€‚</p>
      <div class="example"><p><code>
              &lt;!--#set var="modified" value="$LAST_MODIFIED" --&gt;
      </code></p></div>
      
          <p>ãƒ‰ãƒ«è¨˜å· ($) を文字ã¨ã—ã¦å¤‰æ•°ã®å€¤ã«å…¥ã‚Œã‚‹ã«ã¯ã€
          ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã«ã‚ˆã£ã¦ãƒ‰ãƒ«è¨˜å·ã‚’エスケープã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      <div class="example"><p><code>
              &lt;!--#set var="cost" value="\$100" --&gt;
      </code></p></div>
      
          <p>最後ã«ãªã‚Šã¾ã™ãŒã€é•·ã„文字列ã®ä¸­ã«å¤‰æ•°ã‚’ç½®ããŸã„å ´åˆã§ã€
          変数åãŒä»–ã®æ–‡å­—ã¨ã¶ã¤ã‹ã‚‹å¯èƒ½æ€§ãŒã‚りã€
          ãã‚Œã‚‰ã®æ–‡å­—ã«ã¤ã„ã¦æ··ä¹±ã—ã¦ã—ã¾ã†å ´åˆã€ã“ã®æ··ä¹±ã‚’å–り除ããŸã‚ã€
          変数åを中括弧ã§å›²ã‚€ã“ã¨ãŒã§ãã¾ã™
          (ã“れã«ã¤ã„ã¦ã®è‰¯ã„例を示ã™ã®ã¯é›£ã—ã„ã®ã§ã™ãŒã€
          ãŠãらã分ã‹ã£ã¦ã„ãŸã ã‘ã‚‹ã§ã—ょã†)。
          </p>
      <div class="example"><p><code>
              &lt;!--#set var="date" value="${DATE_LOCAL}_${DATE_GMT}" --&gt;
      </code></p></div>
      
      
      <h3><a name="conditional" id="conditional">æ¡ä»¶å¼</a></h3>
      
      
          <p>ã•ã¦ã€å¤‰æ•°ã‚’æŒã£ã¦ã„ã¦ã€
          ãれらã®å€¤ã‚’設定ã—ã¦æ¯”較ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã®ã§ã™ã‹ã‚‰ã€
          æ¡ä»¶ã‚’表ã™ãŸã‚ã«ãれらを使用ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã“れã«ã‚ˆã‚Š
          SSI ã¯ã‚る種ã®å°ã•ãªãƒ—ログラミング言語ã«ãªã£ã¦ã„ã¾ã™ã€‚
          <code class="module"><a href="../mod/mod_include.html">mod_include</a></code> ã¯æ¡ä»¶ã‚’表ç¾ã™ã‚‹ãŸã‚ã« <code>if</code>,
          <code>elif</code>, <code>else</code>, <code>endif</code>
          構造をæä¾›ã—ã¦ã„ã¾ã™ã€‚ã“れã«ã‚ˆã£ã¦ã€
          一ã¤ã®å®Ÿéš›ã®ãƒšãƒ¼ã‚¸ã‹ã‚‰è¤‡æ•°ã®è«–ç†ãƒšãƒ¼ã‚¸ã‚’効果的ã«ç”Ÿæˆã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>æ¡ä»¶æ§‹é€ ã¯ä»¥ä¸‹ã®ã¨ãŠã‚Šã§ã™:</p>
      <div class="example"><p><code>
          &lt;!--#if expr="test_condition" --&gt;<br />
          &lt;!--#elif expr="test_condition" --&gt;<br />
          &lt;!--#else --&gt;<br />
          &lt;!--#endif --&gt;
      </code></p></div>
      
          <p><em>test_condition</em>
          ã¯ã‚らゆる種類ã®è«–ç†çš„æ¯”較をã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          値を比較ã—ãŸã‚Šã€ãã®å€¤ãŒ ``真'' ã‹ã©ã†ã‹ã‚’評価ã—ã¾ã™
          (空ã§ãªã„ãªã‚‰ä¸Žãˆã‚‰ã‚ŒãŸæ–‡å­—列ã¯çœŸã§ã™)。
          利用å¯èƒ½ãªæ¯”較演算å­ã®å…¨ã¦ã®ãƒªã‚¹ãƒˆã«ã¤ã„ã¦ã¯ã€
          <code class="module"><a href="../mod/mod_include.html">mod_include</a></code> ドキュメンテーションをå‚ç…§ã—ã¦ãã ã•ã„。
          ã“ã“ã§ã¯ã€ã“ã®æ§‹é€ ã‚’ã©ã†ä½¿ç”¨ã™ã‚‹ã‹ã®ä¾‹ã‚’ã„ãã¤ã‹ç¤ºã—ã¾ã™ã€‚</p>
      
          <p>è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ã§æ¬¡ã®è¡Œã‚’記述ã—ã¾ã™:</p>
      <div class="example"><p><code>
              BrowserMatchNoCase macintosh Mac<br />
              BrowserMatchNoCase MSIE InternetExplorer
      </code></p></div>
      
          <p>ã“れã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒ Macintosh
          上ã§ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚¨ã‚¯ã‚¹ãƒ—ローラãŒå‹•ã„ã¦ã„ã‚‹å ´åˆã€ç’°å¢ƒå¤‰æ•°
          ``Mac'' 㨠``InternetExplorer'' を真ã¨è¨­å®šã—ã¾ã™ã€‚</p>
      
          <p>次ã«ã€SSI ãŒå¯èƒ½ã«ãªã£ãŸãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã§ä»¥ä¸‹ã‚’行ãªã„ã¾ã™:
          </p>
      <div class="example"><p><code>
              &lt;!--#if expr="${Mac} &amp;&amp; ${InternetExplorer}" --&gt;<br />
              Apologetic text goes here<br />
              &lt;!--#else --&gt;<br />
              Cool JavaScript code goes here<br />
              &lt;!--#endif --&gt;
      </code></p></div>
      
          <p>Mac 上㮠IE ã«å¯¾ã—ã¦ä½•ã‹æ€ã†ã¨ã“ã‚ãŒã‚ã‚‹ã‚ã‘ã§ã‚りã¾ã›ã‚“。
          ä»–ã§ã¯å®Ÿè¡Œã§ãã¦ã„ã‚‹ã„ãã¤ã‹ã® JavaScript ã‚’ Mac 上㮠IE
          ã§å®Ÿè¡Œã•ã›ã‚‹ã®ã«ã€å…ˆé€±æ•°æ™‚間苦労ã—ãŸã¨ã„ã†ã ã‘ã®ã“ã¨ã§ã™ã€‚
          上ã®ä¾‹ã¯ãã®æš«å®šçš„ãªå¯¾å‡¦æ–¹æ³•ã§ã™ã€‚</p>
      
          <p>ä»–ã®ã©ã‚“ãªå¤‰æ•° (ã‚ãªãŸãŒå®šç¾©ã™ã‚‹ã‚‚ã®ã€
          ã¾ãŸã¯æ™®é€šã®ç’°å¢ƒå¤‰æ•°ã®ã„ãšã‚Œã‹) ã‚‚ã€æ¡ä»¶æ–‡ã«ä½¿ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          Apache 㯠<code>SetEnvIf</code> ディレクティブや他ã®é–¢é€£
          ディレクティブを使用ã—ã¦ç’°å¢ƒå¤‰æ•°ã‚’設定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          ã“ã®æ©Ÿèƒ½ã«ã‚ˆã‚Šã€CGI
          ã«é ¼ã‚‹ã“ã¨ãªãã‹ãªã‚Šè¤‡é›‘ãªå‹•çš„ãªã“ã¨ã‚’ã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="conclusion" id="conclusion">終ã‚りã«</a></h2>
      
          <p>SSI ã¯ç¢ºã‹ã« CGI
          ã‚„å‹•çš„ãªã‚¦ã‚§ãƒ–ページを生æˆã™ã‚‹ä»–ã®æŠ€è¡“ã«ä»£ã‚ã‚‹ã‚‚ã®ã§ã¯ã‚りã¾ã›ã‚“。
          ã—ã‹ã—ã€ãŸãã•ã‚“ã®ä½™åˆ†ãªä½œæ¥­ã‚’ã›ãšã«ã€
          å°‘é‡ã®å‹•çš„ãªã‚³ãƒ³ãƒ†ãƒ³ãƒ„を加ãˆã‚‹ã«ã¯ã™ãã‚ŒãŸæ–¹æ³•ã§ã™ã€‚</p>
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/howto/ssi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/ssi.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/ssi.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/ssi.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/ssi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/ssi.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/cgi.html.en����������������������������������������������������������0000644�0000000�0000050�00000074443�13412755316�016655� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache Tutorial: Dynamic Content with CGI - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutorials</a></div><div id="page-content"><div id="preamble"><h1>Apache Tutorial: Dynamic Content with CGI</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/howto/cgi.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/cgi.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/cgi.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/cgi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/cgi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#intro">Introduction</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#configuring">Configuring Apache to permit CGI</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#writing">Writing a CGI program</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#troubleshoot">But it's still not working!</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#behindscenes">What's going on behind the scenes?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#libraries">CGI modules/libraries</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#moreinfo">For more information</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="intro" id="intro">Introduction</a></h2>
          
      
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_alias.html">mod_alias</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="../mod/mod_cgid.html">mod_cgid</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code></li></ul></td></tr></table>
      
          <p>The CGI (Common Gateway Interface) defines a way for a web
          server to interact with external content-generating programs,
          which are often referred to as CGI programs or CGI scripts. It
          is a simple way to put dynamic content on
          your web site, using whatever programming language you're most
          familiar with. This document will be an introduction to setting
          up CGI on your Apache web server, and getting started writing
          CGI programs.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuring" id="configuring">Configuring Apache to permit CGI</a></h2>
          
      
          <p>In order to get your CGI programs to work properly, you'll
          need to have Apache configured to permit CGI execution. There
          are several ways to do this.</p>
      
          <div class="warning">Note: If Apache has been built with shared module
          support you need to ensure that the module is loaded; in your
          <code>httpd.conf</code> you need to make sure the
          <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code>
          directive has not been commented out.  A correctly configured directive
          may look like this:
      
          <pre class="prettyprint lang-config">LoadModule cgid_module modules/mod_cgid.so</pre>
      
      
      
           On Windows, or using a non-threaded MPM like prefork,  A correctly 
           configured directive may look like this:
      
          <pre class="prettyprint lang-config">LoadModule cgi_module modules/mod_cgi.so</pre>
      </div>
      
      
          <h3><a name="scriptalias" id="scriptalias">ScriptAlias</a></h3>
            
      
            <p>The
            <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code>
      
            directive tells Apache that a particular directory is set
            aside for CGI programs. Apache will assume that every file in
            this directory is a CGI program, and will attempt to execute
            it, when that particular resource is requested by a
            client.</p>
      
            <p>The <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code>
            directive looks like:</p>
      
            <pre class="prettyprint lang-config">ScriptAlias "/cgi-bin/" "/usr/local/apache2/cgi-bin/"</pre>
      
      
            <p>The example shown is from your default <code>httpd.conf</code>
            configuration file, if you installed Apache in the default
            location. The <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code>
            directive is much like the <code class="directive"><a href="../mod/mod_alias.html#alias">Alias</a></code> directive, which defines a URL prefix that
            is to mapped to a particular directory. <code class="directive">Alias</code>
            and <code class="directive">ScriptAlias</code> are usually used for
            directories that are outside of the <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code> directory. The difference between
            <code class="directive">Alias</code> and <code class="directive">ScriptAlias</code>
            is that <code class="directive">ScriptAlias</code> has the added meaning
            that everything under that URL prefix will be considered a CGI
            program. So, the example above tells Apache that any request for a
            resource beginning with <code>/cgi-bin/</code> should be served from
            the directory  <code>/usr/local/apache2/cgi-bin/</code>, and should be
            treated as a CGI program.</p>
      
            <p>For example, if the URL
            <code>http://www.example.com/cgi-bin/test.pl</code>
            is requested, Apache will attempt to execute the file
            <code>/usr/local/apache2/cgi-bin/test.pl</code>
            and return the output. Of course, the file will have to
            exist, and be executable, and return output in a particular
            way, or Apache will return an error message.</p>
          
      
          <h3><a name="nonscriptalias" id="nonscriptalias">CGI outside of ScriptAlias directories</a></h3>
            
      
            <p>CGI programs are often restricted to <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code>'ed directories for security reasons.
            In this way, administrators can tightly control who is allowed to
            use CGI programs. However, if the proper security precautions are
            taken, there is no reason why CGI programs cannot be run from
            arbitrary directories. For example, you may wish to let users
            have web content in their home directories with the
            <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> directive.
            If they want to have their own CGI programs, but don't have access to
            the main <code>cgi-bin</code> directory, they will need to be able to
            run CGI programs elsewhere.</p>
      
            <p>There are two steps to allowing CGI execution in an arbitrary
            directory.  First, the <code>cgi-script</code> handler must be
            activated using the <code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code> or <code class="directive"><a href="../mod/core.html#sethandler">SetHandler</a></code> directive.  Second,
            <code>ExecCGI</code> must be specified in the <code class="directive"><a href="../mod/core.html#options">Options</a></code> directive.</p>
          
      
          <h3><a name="options" id="options">Explicitly using Options to permit CGI execution</a></h3>
            
      
            <p>You could explicitly use the <code class="directive"><a href="../mod/core.html#options">Options</a></code> directive, inside your main server configuration
            file, to specify that CGI execution was permitted in a particular
            directory:</p>
      
            <pre class="prettyprint lang-config">&lt;Directory "/usr/local/apache2/htdocs/somedir"&gt;
          Options +ExecCGI
      &lt;/Directory&gt;</pre>
      
      
            <p>The above directive tells Apache to permit the execution
            of CGI files. You will also need to tell the server what
            files are CGI files. The following <code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code> directive tells the server to treat all
            files with the <code>cgi</code> or <code>pl</code> extension as CGI
            programs:</p>
      
            <pre class="prettyprint lang-config">AddHandler cgi-script .cgi .pl</pre>
      
          
      
          <h3><a name="htaccess" id="htaccess">.htaccess files</a></h3>
            
      
            <p>The <a href="htaccess.html"><code>.htaccess</code> tutorial</a>
            shows how to activate CGI programs if you do not have
            access to <code>httpd.conf</code>.</p>
          
      
          <h3><a name="userdir" id="userdir">User Directories</a></h3>
            
      
            <p>To allow CGI program execution for any file ending in
            <code>.cgi</code> in users' directories, you can use the
            following configuration.</p>
      
            <pre class="prettyprint lang-config">&lt;Directory "/home/*/public_html"&gt;
          Options +ExecCGI
          AddHandler cgi-script .cgi
      &lt;/Directory&gt;</pre>
      
      
            <p>If you wish designate a <code>cgi-bin</code> subdirectory of
            a user's directory where everything will be treated as a CGI
            program, you can use the following.</p>
      
            <pre class="prettyprint lang-config">&lt;Directory "/home/*/public_html/cgi-bin"&gt;
          Options ExecCGI
          SetHandler cgi-script
      &lt;/Directory&gt;</pre>
      
      
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="writing" id="writing">Writing a CGI program</a></h2>
          
      
          <p>There are two main differences between ``regular''
          programming, and CGI programming.</p>
      
          <p>First, all output from your CGI program must be preceded by
          a <a class="glossarylink" href="../glossary.html#mime-type" title="see glossary">MIME-type</a> header. This is HTTP header that tells the client
          what sort of content it is receiving. Most of the time, this
          will look like:</p>
      
          <div class="example"><p><code>
            Content-type: text/html
          </code></p></div>
      
          <p>Secondly, your output needs to be in HTML, or some other
          format that a browser will be able to display. Most of the
          time, this will be HTML, but occasionally you might write a CGI
          program that outputs a gif image, or other non-HTML
          content.</p>
      
          <p>Apart from those two things, writing a CGI program will look
          a lot like any other program that you might write.</p>
      
          <h3><a name="firstcgi" id="firstcgi">Your first CGI program</a></h3>
            
      
            <p>The following is an example CGI program that prints one
            line to your browser. Type in the following, save it to a
            file called <code>first.pl</code>, and put it in your
            <code>cgi-bin</code> directory.</p>
      
            <pre class="prettyprint lang-perl">#!/usr/bin/perl
      print "Content-type: text/html\n\n";
      print "Hello, World.";</pre>
      
      
            <p>Even if you are not familiar with Perl, you should be able
            to see what is happening here. The first line tells Apache
            (or whatever shell you happen to be running under) that this
            program can be executed by feeding the file to the
            interpreter found at the location <code>/usr/bin/perl</code>.
            The second line prints the content-type declaration we
            talked about, followed by two carriage-return newline pairs.
            This puts a blank line after the header, to indicate the end
            of the HTTP headers, and the beginning of the body. The third
            line prints the string "Hello, World.". And that's the end
            of it.</p>
      
            <p>If you open your favorite browser and tell it to get the
            address</p>
      
            <div class="example"><p><code>
              http://www.example.com/cgi-bin/first.pl
            </code></p></div>
      
            <p>or wherever you put your file, you will see the one line
            <code>Hello, World.</code> appear in your browser window.
            It's not very exciting, but once you get that working, you'll
            have a good chance of getting just about anything working.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="troubleshoot" id="troubleshoot">But it's still not working!</a></h2>
          
      
          <p>There are four basic things that you may see in your browser
          when you try to access your CGI program from the web:</p>
      
          <dl>
            <dt>The output of your CGI program</dt>
            <dd>Great! That means everything worked fine.  If the output is correct,
            but the browser is not processing it correctly, make sure you have the
            correct <code>Content-Type</code> set in your CGI program.</dd>
      
            <dt>The source code of your CGI program or a "POST Method Not
            Allowed" message</dt>
            <dd>That means that you have not properly configured Apache
            to process your CGI program. Reread the section on
            <a href="#configuring">configuring
            Apache</a> and try to find what you missed.</dd>
      
            <dt>A message starting with "Forbidden"</dt>
            <dd>That means that there is a permissions problem. Check the
            <a href="#errorlogs">Apache error log</a> and the section below on
            <a href="#permissions">file permissions</a>.</dd>
      
            <dt>A message saying "Internal Server Error"</dt>
            <dd>If you check the
            <a href="#errorlogs">Apache error log</a>, you will probably
            find that it says "Premature end of
            script headers", possibly along with an error message
            generated by your CGI program. In this case, you will want to
            check each of the below sections to see what might be
            preventing your CGI program from emitting the proper HTTP
            headers.</dd>
          </dl>
      
          <h3><a name="permissions" id="permissions">File permissions</a></h3>
            
      
            <p>Remember that the server does not run as you. That is,
            when the server starts up, it is running with the permissions
            of an unprivileged user - usually <code>nobody</code>, or
            <code>www</code> - and so it will need extra permissions to
            execute files that are owned by you. Usually, the way to give
            a file sufficient permissions to be executed by <code>nobody</code>
            is to give everyone execute permission on the file:</p>
      
            <div class="example"><p><code>
              chmod a+x first.pl
            </code></p></div>
      
            <p>Also, if your program reads from, or writes to, any other
            files, those files will need to have the correct permissions
            to permit this.</p>
      
          
      
          <h3><a name="pathinformation" id="pathinformation">Path information and environment</a></h3>
            
      
            <p>When you run a program from your command line, you have
            certain information that is passed to the shell without you
            thinking about it. For example, you have a <code>PATH</code>,
            which tells the shell where it can look for files that you
            reference.</p>
      
            <p>When a program runs through the web server as a CGI program,
            it may not have the same <code>PATH</code>. Any programs that you
            invoke in your CGI program (like <code>sendmail</code>, for
            example) will need to be specified by a full path, so that the
            shell can find them when it attempts to execute your CGI
            program.</p>
      
            <p>A common manifestation of this is the path to the script
            interpreter (often <code>perl</code>) indicated in the first
            line of your CGI program, which will look something like:</p>
      
            <pre class="prettyprint lang-perl">#!/usr/bin/perl</pre>
      
      
            <p>Make sure that this is in fact the path to the
            interpreter.</p>
            <div class="warning">
            When editing CGI scripts on Windows, end-of-line characters may be
            appended to the interpreter path. Ensure that files are then
            transferred to the server in ASCII mode. Failure to do so may
            result in "Command not found" warnings from the OS, due to the
            unrecognized end-of-line character being interpreted as a part of
            the interpreter filename.
            </div>
          
      
          <h3><a name="missingenv" id="missingenv">Missing environment variables</a></h3>
            
      
            <p>If your CGI program depends on non-standard <a href="#env">environment variables</a>, you will need to
            assure that those variables are passed by Apache.</p>
      
            <p>When you miss HTTP headers from the environment, make
            sure they are formatted according to
            <a href="http://tools.ietf.org/html/rfc2616">RFC 2616</a>,
            section 4.2: Header names must start with a letter,
            followed only by letters, numbers or hyphen. Any header
            violating this rule will be dropped silently.</p>
      
          
      
          <h3><a name="syntaxerrors" id="syntaxerrors">Program errors</a></h3>
            
      
            <p>Most of the time when a CGI program fails, it's because of
            a problem with the program itself. This is particularly true
            once you get the hang of this CGI stuff, and no longer make
            the above two mistakes.  The first thing to do is to make
            sure that your program runs from the command line before
            testing it via the web server.  For example, try:</p>
      
            <div class="example"><p><code>
            cd /usr/local/apache2/cgi-bin<br />
            ./first.pl
            </code></p></div>
      
            <p>(Do not call the <code>perl</code> interpreter.  The shell
            and Apache should find the interpreter using the <a href="#pathinformation">path information</a> on the first line of
            the script.)</p>
      
            <p>The first thing you see written by your program should be
            a set of HTTP headers, including the <code>Content-Type</code>,
            followed by a blank line.  If you see anything else, Apache will
            return the <code>Premature end of script headers</code> error if
            you try to run it through the server. See <a href="#writing">Writing a CGI program</a> above for more
            details.</p>
          
      
          <h3><a name="errorlogs" id="errorlogs">Error logs</a></h3>
            
      
            <p>The error logs are your friend. Anything that goes wrong
            generates message in the error log. You should always look
            there first. If the place where you are hosting your web site
            does not permit you access to the error log, you should
            probably host your site somewhere else. Learn to read the
            error logs, and you'll find that almost all of your problems
            are quickly identified, and quickly solved.</p>
          
      
          <h3><a name="suexec" id="suexec">Suexec</a></h3>
            
      
            <p>The <a href="../suexec.html">suexec</a> support program
            allows CGI programs to be run under different user permissions,
            depending on which virtual host or user home directory they are
            located in. Suexec has very strict permission checking, and any
            failure in that checking will result in your CGI programs
            failing with <code>Premature end of script headers</code>.</p>
      
            <p>To check if you are using suexec, run <code>apachectl
            -V</code> and check for the location of <code>SUEXEC_BIN</code>.
            If Apache finds an <code class="program"><a href="../programs/suexec.html">suexec</a></code> binary there on startup,
            suexec will be activated.</p>
      
            <p>Unless you fully understand suexec, you should not be using it.
            To disable suexec, simply remove (or rename) the <code class="program"><a href="../programs/suexec.html">suexec</a></code>
            binary pointed to by <code>SUEXEC_BIN</code> and then restart the
            server.  If, after reading about <a href="../suexec.html">suexec</a>,
            you still wish to use it, then run <code>suexec -V</code> to find
            the location of the suexec log file, and use that log file to
            find what policy you are violating.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="behindscenes" id="behindscenes">What's going on behind the scenes?</a></h2>
          
      
          <p>As you become more advanced in CGI programming, it will
          become useful to understand more about what's happening behind
          the scenes. Specifically, how the browser and server
          communicate with one another. Because although it's all very
          well to write a program that prints "Hello, World.", it's not
          particularly useful.</p>
      
          <h3><a name="env" id="env">Environment variables</a></h3>
            
      
            <p>Environment variables are values that float around you as
            you use your computer. They are useful things like your path
            (where the computer searches for the actual file
            implementing a command when you type it), your username, your
            terminal type, and so on. For a full list of your normal,
            every day environment variables, type
            <code>env</code> at a command prompt.</p>
      
            <p>During the CGI transaction, the server and the browser
            also set environment variables, so that they can communicate
            with one another. These are things like the browser type
            (Netscape, IE, Lynx), the server type (Apache, IIS, WebSite),
            the name of the CGI program that is being run, and so on.</p>
      
            <p>These variables are available to the CGI programmer, and
            are half of the story of the client-server communication. The
            complete list of required variables is at
            <a href="http://www.ietf.org/rfc/rfc3875">Common Gateway
            Interface RFC</a>.</p>
      
            <p>This simple Perl CGI program will display all of the
            environment variables that are being passed around. Two
            similar programs are included in the
            <code>cgi-bin</code>
      
            directory of the Apache distribution. Note that some
            variables are required, while others are optional, so you may
            see some variables listed that were not in the official list.
            In addition, Apache provides many different ways for you to
            <a href="../env.html">add your own environment variables</a>
            to the basic ones provided by default.</p>
      
            <pre class="prettyprint lang-perl">#!/usr/bin/perl
      use strict;
      use warnings;
      
      print "Content-type: text/html\n\n";
      foreach my $key (keys %ENV) {
          print "$key --&gt; $ENV{$key}&lt;br&gt;";
      }</pre>
      
          
      
          <h3><a name="stdin" id="stdin">STDIN and STDOUT</a></h3>
            
      
            <p>Other communication between the server and the client
            happens over standard input (<code>STDIN</code>) and standard
            output (<code>STDOUT</code>). In normal everyday context,
            <code>STDIN</code> means the keyboard, or a file that a
            program is given to act on, and <code>STDOUT</code>
            usually means the console or screen.</p>
      
            <p>When you <code>POST</code> a web form to a CGI program,
            the data in that form is bundled up into a special format
            and gets delivered to your CGI program over <code>STDIN</code>.
            The program then can process that data as though it was
            coming in from the keyboard, or from a file</p>
      
            <p>The "special format" is very simple. A field name and
            its value are joined together with an equals (=) sign, and
            pairs of values are joined together with an ampersand
            (&amp;). Inconvenient characters like spaces, ampersands, and
            equals signs, are converted into their hex equivalent so that
            they don't gum up the works. The whole data string might look
            something like:</p>
      
            <div class="example"><p><code>
              name=Rich%20Bowen&amp;city=Lexington&amp;state=KY&amp;sidekick=Squirrel%20Monkey
            </code></p></div>
      
            <p>You'll sometimes also see this type of string appended to
            a URL. When that is done, the server puts that string
            into the environment variable called
            <code>QUERY_STRING</code>. That's called a <code>GET</code>
            request. Your HTML form specifies whether a <code>GET</code>
            or a <code>POST</code> is used to deliver the data, by setting the
            <code>METHOD</code> attribute in the <code>FORM</code> tag.</p>
      
            <p>Your program is then responsible for splitting that string
            up into useful information. Fortunately, there are libraries
            and modules available to help you process this data, as well
            as handle other of the aspects of your CGI program.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="libraries" id="libraries">CGI modules/libraries</a></h2>
          
      
          <p>When you write CGI programs, you should consider using a
          code library, or module, to do most of the grunt work for you.
          This leads to fewer errors, and faster development.</p>
      
          <p>If you're writing CGI programs in Perl, modules are
          available on <a href="http://www.cpan.org/">CPAN</a>. The most
          popular module for this purpose is <code>CGI.pm</code>. You might
          also consider <code>CGI::Lite</code>, which implements a minimal
          set of functionality, which is all you need in most programs.</p>
      
          <p>If you're writing CGI programs in C, there are a variety of
          options. One of these is the <code>CGIC</code> library, from
          <a href="http://www.boutell.com/cgic/">http://www.boutell.com/cgic/</a>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="moreinfo" id="moreinfo">For more information</a></h2>
          
      
          <p>The current CGI specification is available in the
          <a href="http://www.ietf.org/rfc/rfc3875">Common Gateway
          Interface RFC</a>.</p>
      
          <p>When you post a question about a CGI problem that you're
          having, whether to a mailing list, or to a newsgroup, make sure
          you provide enough information about what happened, what you
          expected to happen, and how what actually happened was
          different, what server you're running, what language your CGI
          program was in, and, if possible, the offending code. This will
          make finding your problem much simpler.</p>
      
          <p>Note that questions about CGI problems should <strong>never</strong>
          be posted to the Apache bug database unless you are sure you
          have found a problem in the Apache source code.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/howto/cgi.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/cgi.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/cgi.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/cgi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/cgi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/cgi.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/cgi.html.ja.utf8�����������������������������������������������������0000644�0000000�0000050�00000107715�13412755316�017531� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache Tutorial: CGI ã«ã‚ˆã‚‹å‹•的コンテンツ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="../">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a> &gt; <a href="./">How-To / ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«</a></div><div id="page-content"><div id="preamble"><h1>Apache Tutorial: CGI ã«ã‚ˆã‚‹å‹•的コンテンツ</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/howto/cgi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/cgi.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/cgi.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/cgi.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/cgi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#intro">ã¯ã˜ã‚ã«</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#configuring">CGI を許å¯ã™ã‚‹ã‚ˆã†ã« Apache を設定ã™ã‚‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#writing">CGI プログラムを書ã</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#troubleshoot">ã—ã‹ã—ã€ã¾ã å‹•ã‹ãªã„ !</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#behindscenes">è£ã§ä½•ãŒèµ·ã“ã£ã¦ã„ã‚‹ã®ã‹?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#libraries">CGI モジュール/ライブラリ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#moreinfo">æ›´ãªã‚‹æƒ…å ±</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="intro" id="intro">ã¯ã˜ã‚ã«</a></h2>
          
      
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_alias.html">mod_alias</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code></li></ul></td></tr></table>
      
          <p>CGI (Common Gateway Interface) ã¯ã€ã‚¦ã‚§ãƒ–サーãƒãŒ
          コンテンツ生æˆã‚’ã™ã‚‹å¤–部プログラムã¨å”調ã—ã¦å‹•作ã™ã‚‹ãŸã‚ã®æ–¹æ³•ã‚’
          定義ã—ã¦ã„ã¾ã™ã€‚ãã®ãƒ—ログラムã¯ã—ã°ã—ã° CGI プログラムや
          CGI スクリプトã¨å‘¼ã°ã‚Œã¾ã™ã€‚CGI ã¯ã€ã‚¦ã‚§ãƒ–サイトã«å‹•çš„ãª
          コンテンツを置ããŸã‚ã®æœ€ã‚‚ç°¡å˜ã§ä¸€èˆ¬çš„ãªæ–¹æ³•ã§ã™ã€‚ã“ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã¯ã€
          Apache ウェブサーãƒã§ CGI を設定ã—ã€
          CGI プログラムを書ãå§‹ã‚ã‚‹ãŸã‚ã®å…¥é–€æ›¸ã¨ãªã‚‹ã§ã—ょã†ã€‚</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuring" id="configuring">CGI を許å¯ã™ã‚‹ã‚ˆã†ã« Apache を設定ã™ã‚‹</a></h2>
          
      
          <p>CGI プログラムを正ã—ã動作ã•ã›ã‚‹ã«ã¯ã€CGI を許å¯ã™ã‚‹ã‚ˆã†ã«
          Apache ã®è¨­å®šã‚’行ã†å¿…è¦ãŒã‚りã¾ã™ã€‚
          ã“れを行ãªã†ãŸã‚ã®æ–¹æ³•ãŒã„ãã¤ã‹ã‚りã¾ã™ã€‚</p>
      
          <div class="warning">
          注: Apache ãŒå…±æœ‰ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«æ©Ÿèƒ½ç€ãã§ãƒ“ルドã•れã¦ã„ã‚‹å ´åˆã€
          モジュールãŒãƒ­ãƒ¼ãƒ‰ã•れã¦ã„ã‚‹ã“ã¨ã‚’確èªã—ã¦ãã ã•ã„。
          ã¤ã¾ã‚Š <code>httpd.conf</code> ã§ 
          <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code>
          ãŒã‚³ãƒ¡ãƒ³ãƒˆã‚¢ã‚¦ãƒˆã•れã¦ã„ãªã„ã“ã¨ã‚’確èªã—ã¦ãã ã•ã„。
          正常ã«è¨­å®šã•れã¦ã„ã‚Œã°æ¬¡ã®ã‚ˆã†ã«ãªã‚‹ã¯ãšã§ã™:
      
          <div class="example"><p><code>
            LoadModule cgi_module modules/mod_cgi.so
          </code></p></div></div>
      
          <h3><a name="scriptalias" id="scriptalias">ScriptAlias</a></h3>
            
      
            <p><code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code>
            ディレクティブを使用ã—ã¦ã€
            CGI プログラム用ã®ç‰¹åˆ¥ãªåˆ¥ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’ Apache ã«è¨­å®šã—ã¾ã™ã€‚
            Apache ã¯ã€ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªä¸­ã®å…¨ã¦ã®ãƒ•ァイルを CGI
            プログラムã§ã‚ã‚‹ã¨ä»®å®šã—ã¾ã™ã€‚
            ãã—ã¦ã€ã“ã®ç‰¹åˆ¥ãªãƒªã‚½ãƒ¼ã‚¹ãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰è¦æ±‚ã•れるã¨ã€
            ãã®ãƒ—ログラムã®å®Ÿè¡Œã‚’試ã¿ã¾ã™ã€‚</p>
      
            <p><code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code>
            ディレクティブã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ä½¿ç”¨ã—ã¾ã™:</p>
      
            <div class="example"><p><code>
              ScriptAlias /cgi-bin/ /usr/local/apache2/cgi-bin/
            </code></p></div>
      
            <p>デフォルトä½ç½®ã« Apache をインストールã—ãŸãªã‚‰ã°ã€
            ã“ã®ä¾‹ã¯ãƒ‡ãƒ•ォルト状態㮠<code>httpd.conf</code>
            設定ファイルã«å«ã¾ã‚Œã¦ã„ã¾ã™ã€‚
            <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code>
            ディレクティブã¯ã€URL ã®å‰ã«ä»˜åŠ ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’定義ã™ã‚‹
            <code class="directive"><a href="../mod/mod_alias.html#alias">Alias</a></code>
            ディレクティブã¨ã‹ãªã‚Šä¼¼ã¦ã„ã¾ã™ã€‚
            <code class="directive">Alias</code> 㨠<code class="directive">ScriptAlias</code>
            ã¯é€šå¸¸ã€<code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code>
            ディレクトリ外ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ãŸã‚ã«ä½¿ç”¨ã•れã¾ã™ã€‚
            <code class="directive">Alias</code> 㨠<code class="directive">ScriptAlias</code>
            ã¨ã®å·®ã¯ã€<code class="directive">ScriptAlias</code> ãŒæŽ¥é ­è¾žã§å§‹ã¾ã‚‹ã™ã¹ã¦ã®
            URL 㯠CGI プログラムã¨ã¿ãªã•れるã¨ã„ã†è¿½åŠ ã®æ„味をå«ã‚“ã§ã„ã‚‹ã“ã¨ã§ã™ã€‚
            従ã£ã¦ã€ä¸Šè¨˜ã®ä¾‹ã§ã¯ã€<code>/cgi-bin/</code>
            ã§å§‹ã¾ã‚‹ãƒªã‚½ãƒ¼ã‚¹ã¸ã®ã‚らゆるリクエストã«å¯¾ã—ã¦ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒª
            <code>/usr/local/apache2/cgi-bin/</code> ã‹ã‚‰æä¾›ã—ã€ãれらを
            CGI プログラムã¨ã—ã¦æ‰±ã†ã‚ˆã† Apache ã«ç¤ºã—ã¾ã™ã€‚</p>
      
            <p>例ãˆã°ã€URL <code>http://www.example.com/cgi-bin/test.pl</code>
            ãŒè¦æ±‚ã•れãŸå ´åˆã€Apache 㯠ファイル
            <code>/usr/local/apache2/cgi-bin/test.pl</code>
            を実行ã—ã€ãã®å‡ºåŠ›ã‚’è¿”ã™ã“ã¨ã‚’試ã¿ã¾ã™ã€‚
            ã‚‚ã¡ã‚ã‚“ã€ãƒ•ァイルãŒå­˜åœ¨ã—ã€å®Ÿè¡Œå¯èƒ½ã§ã‚ã‚Šã€æ±ºã‚ã‚‰ã‚ŒãŸæ–¹æ³•ã§å‡ºåŠ›ã‚’è¿”ã—ã¾ã™ã€‚
            ãã†ã§ãªã‘れã°ã€Apache ã¯ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’è¿”ã—ã¾ã™ã€‚</p>
          
      
          <h3><a name="nonscriptalias" id="nonscriptalias">ScriptAlias ディレクトリ外㮠CGI</a></h3>
            
      
            <p>CGI プログラムã¯ã€ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®ç†ç”±ã‹ã‚‰ 
            <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code>
            ã•れãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«åˆ¶é™ã•れるã“ã¨ãŒã—ã°ã—ã°ã‚りã¾ã™ã€‚ã“ã®æ–¹æ³•ã«ã‚ˆã‚Šã€
            CGI プログラムを使用ã§ãるユーザを管ç†è€…ãŒå޳ã—ã制御ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
            ã—ã‹ã—ãªãŒã‚‰ã€é©åˆ‡ãªã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£äº‹å‰å¯¾ç­–ãŒã¨ã‚‰ã‚Œã‚‹ãªã‚‰ã°ã€CGI
            プログラムを任æ„ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã§å®Ÿè¡Œã§ããªã„よã†ã«ã™ã‚‹ç†ç”±ã¯ã‚りã¾ã›ã‚“。
            例ãˆã°ã€ãƒ¦ãƒ¼ã‚¶ã« <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>
            ディレクティブã§å½¼ã‚‰ã®ãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªé…下ã«ã‚¦ã‚§ãƒ–コンテンツをæŒãŸã›ãŸã„ã¨ã—ã¾ã™ã€‚
            ã‚‚ã—ã€å½¼ã‚‰ãŒ CGI プログラムをæŒã¤ã“ã¨ã‚’望んã§ã„ã¦ã‚‚ã€ãƒ¡ã‚¤ãƒ³ã®
            <code>cgi-bin</code> ディレクトリã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒã§ããªã„å ´åˆã€
            CGI プログラムを実行ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ä»–ã®å ´æ‰€ãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚</p>
      
            <p>ä»»æ„ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã§ CGI ã®å®Ÿè¡Œã‚’許å¯ã™ã‚‹ã«ã¯äºŒæ®µéšŽã®è¨­å®šãŒå¿…è¦ã§ã™ã€‚
            ã¾ãšã€<code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code> ã‚„ <code class="directive"><a href="../mod/core.html#sethandler">SetHandler</a></code> ディレクティブã«ã‚ˆã£ã¦
            <code>cgi-script</code> ãƒãƒ³ãƒ‰ãƒ©ãŒå¯èƒ½ã«ãªã£ã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
            次ã«ã€<code class="directive"><a href="../mod/core.html#options">Options</a></code> ディレクティブã§
            <code>ExecCGI</code> ãŒæŒ‡å®šã•れã¦ã„ãªã‘れã°ãªã‚Šã¾ã›ã‚“。</p>
          
      
          <h3><a name="options" id="options">CGI ã®å®Ÿè¡Œã‚’å¯èƒ½ã«ã™ã‚‹ãŸã‚ã« Options を明示的ã«ä½¿ç”¨ã™ã‚‹</a></h3>
            
      
            <p>サーãƒã®ãƒ¡ã‚¤ãƒ³ã®è¨­å®šãƒ•ァイル中㧠<code class="directive"><a href="../mod/core.html#options">Options</a></code>
            ディレクティブを明示的ã«ä½¿ç”¨ã™ã‚‹ã“ã¨ã§ã€ç‰¹å®šã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªé…下ã§
            CGI ã®å®Ÿè¡Œã‚’許å¯ã™ã‚‹ã‚ˆã†ã«æŒ‡å®šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™:</p>
      
            <div class="example"><p><code>
              &lt;Directory /usr/local/apache2/htdocs/somedir&gt;<br />
              <span class="indent">
                Options +ExecCGI<br />
              </span>
              &lt;/Directory&gt;
            </code></p></div>
      
            <p>上記ディレクティブã¯ã€CGI ファイルã®å®Ÿè¡Œã‚’å¯èƒ½ã«ã™ã‚‹ã‚ˆã†
            Apache ã«ä¼ãˆã¾ã™ã€‚ã¾ãŸã€ã©ã®ãƒ•ァイル㌠CGI ファイルã‹ã‚’
            サーãƒã«ä¼ãˆã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚次ã®
            <code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code>
            ディレクティブã®ä¾‹ã§ã¯ã€<code>cgi</code> ã¾ãŸã¯ <code>pl</code>
            ã‚’æ‹¡å¼µå­ã«æŒã¤ã™ã¹ã¦ã®ãƒ•ァイルを CGI
            プログラムã¨ã—ã¦ã¿ãªã™ã“ã¨ã‚’サーãƒã«ä¼ãˆã¾ã™:</p>
      
            <div class="example"><p><code>
              AddHandler cgi-script .cgi .pl
            </code></p></div>
          
      
          <h3><a name="htaccess" id="htaccess">.htaccess ファイル</a></h3>
            
      
            <p><a href="htaccess.html"><code>.htaccess</code> ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«</a>
            㯠<code>httpd.conf</code> を変更ã§ããªã„å ´åˆã«ã©ã†ã‚„ã£ã¦ CGI プログラムを
            使ãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ã‹ã‚’説明ã—ã¦ã„ã¾ã™ã€‚</p>
          
      
          <h3><a name="userdir" id="userdir">User ディレクトリ</a></h3>
            
      
            <p><code>.cgi</code> ã§çµ‚ã‚ã‚‹ã™ã¹ã¦ã®ãƒ•ァイルã«å¯¾ã—㦠CGI プログラムã®
            実行を許å¯ã™ã‚‹ã«ã¯ã€ä»¥ä¸‹ã®è¨­å®šã‚’使用ã§ãã¾ã™ã€‚</p>
      
            <div class="example"><p><code>
            &lt;Directory /home/*/public_html&gt;<br />
            <span class="indent">
              Options +ExecCGI<br />
              AddHandler cgi-script .cgi<br />
            </span>
            &lt;/Directory&gt;
            </code></p></div>
      
            <p>ユーザディレクトリ㮠<code>cgi-bin</code> サブディレクトリã®
            ã™ã¹ã¦ã®ãƒ•ァイルを CGI プログラムã¨ã—ã¦æŒ‡å®šã—ãŸã„å ´åˆã«ã¯
            以下ã®ã‚ˆã†ãªã‚‚ã®ã‚’使ã„ã¾ã™ã€‚</p>
      
            <div class="example"><p><code>
            &lt;Directory /home/*/public_html/cgi-bin&gt;<br />
            <span class="indent">
              Options ExecCGI<br />
              SetHandler cgi-script<br />
            </span>
            &lt;/Directory&gt;
            </code></p></div>
      
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="writing" id="writing">CGI プログラムを書ã</a></h2>
          
      
          <p>「通常ã®ã€ãƒ—ログラミング㨠CGI
          プログラミングã®é–“ã«ã¯ä¸»ã«äºŒã¤ã®é•ã„ãŒã‚りã¾ã™ã€‚</p>
      
          <p>一ã¤ã¯ã€CGI プログラムã®ã™ã¹ã¦ã®å‡ºåŠ›ã«ã¯<a class="glossarylink" href="../glossary.html#mime-type" title="用語集をå‚ç…§">MIME タイプ</a>
          ヘッダを付ã‘ãªã‘れã°ãªã‚Šã¾ã›ã‚“。
          ã“れã¯ã©ã®ã‚ˆã†ãªç¨®é¡žã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’å—ã‘å–ã£ã¦ã„ã‚‹ã‹ã‚’クライアントã«ç¤ºã™
          HTTP ヘッダã§ã™ã€‚ã»ã¨ã‚“ã©ã®å ´åˆã§ã¯ã€æ¬¡ã®ã‚ˆã†ã«å‡ºåŠ›ã—ã¾ã™:</p>
      
          <div class="example"><p><code>
            Content-type: text/html
          </code></p></div>
      
          <p>ã‚‚ã†ä¸€ã¤ã¯ã€å‡ºåŠ›ã‚’ HTML
          ã‹ã€ãƒ–ラウザãŒè¡¨ç¤ºã™ã‚‹ã“ã¨ãŒã§ãる何ã‹ä»–ã®å½¢å¼ã«ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
          大抵ã®å ´åˆã¯ HTML ã§ã—ょã†ãŒã€GIF イメージや他ã®éž HTML
          コンテンツを出力ã™ã‚‹ CGI プログラムを書ãã“ã¨ã‚‚ã‚ã‚‹ã§ã—ょã†ã€‚</p>
      
          <p>ã“れら二点以外ã§ã¯ã€CGI プログラムを書ãã“ã¨ã¯ã€
          ã‚ãªãŸãŒæ›¸ã„ã¦ã„ã‚‹ä»–ã®ãƒ—ログラムã¨ã‚ˆãä¼¼ã¦ã„ã‚‹ã§ã—ょã†ã€‚</p>
      
          <h3><a name="firstcgi" id="firstcgi">最åˆã® CGI プログラム</a></h3>
            
      
            <p>次ã«ç¤ºã™ã®ã¯ã€ãƒ–ラウザ㫠1 行å°å­—ã™ã‚‹ CGI
            プログラムã®ä¾‹ã§ã™ã€‚以下を入力ã—ã€<code>first.pl</code>
            ã¨ã„ã†ãƒ•ァイルã«ä¿å­˜ã—ã€ãれを <code>cgi-bin</code>
            ディレクトリã«ç½®ã„ã¦ãã ã•ã„。</p>
      
            <div class="example"><p><code>
              #!/usr/bin/perl<br />
              print "Content-type: text/html\n\n";<br />
              print "Hello, World.";
            </code></p></div>
      
            <p>Perl ã«ç²¾é€šã—ã¦ã„ãªãã¦ã‚‚ã€
            何ãŒèµ·ã“ã‚‹ã‹ã‚’ç†è§£ã™ã‚‹ã“ã¨ã¯ã§ãã‚‹ã§ã—ょã†ã€‚1 行目ã¯ã€
            <code>/usr/bin/perl</code> ã§è¦‹ã¤ã‘られるインタプリタã«
            ã“ã®ãƒ•ァイルを供給ã™ã‚‹ã“ã¨ã§ã“ã®ãƒ—ログラムãŒå®Ÿè¡Œã•れるã“ã¨ã‚’
            Apache ã« (シェル上ã§å®Ÿè¡Œã—よã†ã¨ã—ã¦ã„ã‚‹ãªã‚‰ã°ã€ãã®ã‚·ã‚§ãƒ«ã« ) 
            示ã—ã¾ã™ã€‚2 行目ã¯ã€å‰è¿°ã—ãŸã¨ãŠã‚Š content-type ã®å®šç¾©ã‚’å°å­—ã—ã¾ã™ã€‚
            ã“れã«ã¯å¾©å¸°æ”¹è¡Œã®äºŒã¤ã®çµ„を後ã«ä»˜åŠ ã—ã¾ã™ã€‚
            ã“れã«ã‚ˆã‚Šã€ãƒ˜ãƒƒãƒ€ã®çµ‚りã«ç©ºè¡ŒãŒç½®ã‹ã‚Œã€HTTP
            ヘッダã®çµ‚りã¨ãƒœãƒ‡ã‚£ã®å§‹ã¾ã‚Šã‚’示ã—ã¾ã™ã€‚3 行目ã¯ã€"Hello, World."
            ã¨ã„ã†æ–‡å­—列をå°å­—ã—ã€ã“れã§çµ‚りã¨ãªã‚Šã¾ã™ã€‚</p>
      
            <p>好ã¿ã®ãƒ–ラウザを開ãã€ã‚¢ãƒ‰ãƒ¬ã‚¹</p>
      
            <div class="example"><p><code>
              http://www.example.com/cgi-bin/first.pl
            </code></p></div>
      
            <p>ã‚ã‚‹ã„ã¯ãƒ•ァイルを置ã„ãŸãƒ­ã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’指定ã™ã‚‹ã¨ã€
            <code>Hello, World.</code>
            ã¨ã„ㆠ1 行ãŒãƒ–ラウザウィンドã«ç¾ã‚Œã‚‹ã§ã—ょã†ã€‚
            ãれã¯ã‚ã¾ã‚Šã‚¨ã‚­ã‚µã‚¤ãƒ†ã‚£ãƒ³ã‚°ãªã“ã¨ã§ã¯ã‚りã¾ã›ã‚“。
            ã—ã‹ã—ã€ã“れãŒã†ã¾ãå‹•ã‘ã°ã€
            ä»–ã®ã©ã®ã‚ˆã†ãªã‚‚ã®ã§ã‚‚å‹•ã‹ã™ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="troubleshoot" id="troubleshoot">ã—ã‹ã—ã€ã¾ã å‹•ã‹ãªã„ !</a></h2>
          
      
          <p>ウェブã‹ã‚‰ CGI プログラムã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’行ãªã£ãŸã¨ãã€
          ブラウザã§è¦‹ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹å››ã¤ã®åŸºæœ¬çš„ãªã“ã¨ãŒã‚りã¾ã™:</p>
      
          <dl>
            <dt>CGI プログラムã®å‡ºåŠ›</dt>
            <dd>素晴らã—ã„ ! ãれã¯ã™ã¹ã¦ãŒã†ã¾ãå‹•ã„ãŸã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚
            å‡ºåŠ›ãŒæ­£å¸¸ã ã‘れã©ã‚‚ã€ãƒ–ãƒ©ã‚¦ã‚¶ãŒæ­£å¸¸ã«å‡¦ç†ã—ã¦ãれãªã„å ´åˆã¯ã€
            æ­£ã—ã„ <code>Content-Type</code> ã‚’ CGI プログラム内ã§
            セットã—ãŸã‹ã‚’確èªã—ã¦ãã ã•ã„。</dd>
      
            <dt>CGI プログラムã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã€ã¾ãŸã¯ "POST Method Not Allowed"
            ã¨ã„ã†ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸</dt> 
            <dd>ã“れã¯ã€CGI プログラムを処ç†ã§ãるよㆠApache
            ã‚’é©åˆ‡ã«è¨­å®šã—ã¦ã„ãªã‹ã£ãŸã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚<a href="#configuring">「CGI を許å¯ã™ã‚‹ã‚ˆã†ã«
            Apache を設定ã™ã‚‹ã€</a>ã®ç« ã‚’読ã¿ç›´ã—ã€
            ã‚ãªãŸãŒä½•ã‚’é–“é•ãˆãŸã‹ã‚’探ã—ã¦ã¿ã¦ãã ã•ã„。
            </dd>
      
            <dt>メッセージ㌠"Forbidden" ã§å§‹ã¾ã£ã¦ã„ã‚‹</dt>
            <dd>ã“れã¯ãƒ‘ーミッションã®å•題ã¨ã„ã†ã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚
            <a href="#errorlogs">Apache ã®ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°</a>ã¨ã€å¾Œè¿°ã®<a href="#permissions">「ファイルã®ãƒ‘ーミッションã€</a>
            ã®ç« ã‚’ãƒã‚§ãƒƒã‚¯ã—ã¦ãã ã•ã„。
            </dd>
      
            <dt>"Internal Server Error" ã¨ã„ã†ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸</dt>
            <dd><a href="#errorlogs">Apache
            ã®ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°</a>ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹ã¨ã€"Premature end of script headers"
            ã¨ã„ã†ãƒ­ã‚°ãŒè¨˜éŒ²ã•れã¦ã„ã‚‹ã¨æ€ã„ã¾ã™ã€‚ãã—ã¦ã€ãŠãらã CGI
            プログラムã«ã‚ˆã£ã¦ç”Ÿæˆã•れãŸã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚‚記録ã•れã¦ã„ã‚‹ã§ã—ょã†ã€‚
            ã“ã®å ´åˆã€CGI プログラムãŒé©åˆ‡ãª
            HTTP ヘッダを出力ã§ããªã„原因を知るãŸã‚ã«ã€
            以下ã®å„ç« ã§ãƒã‚§ãƒƒã‚¯ã—ã¦ã¿ã¦ãã ã•ã„。</dd>
          </dl>
      
          <h3><a name="permissions" id="permissions">ファイルã®ãƒ‘ーミッション</a></h3>
            
      
            <p>サーãƒã¯ã‚ãªãŸã®æ¨©é™ã§å®Ÿè¡Œã•れã¦ã„ãªã„ã®ã‚’忘れãªã„よã†ã«ã€‚
            ã¤ã¾ã‚Šã€èµ·å‹•ã™ã‚‹ã¨ãã€ã‚µãƒ¼ãƒã¯ç‰¹æ¨©ã‚’ã‚‚ãŸãªã„ユーザ - 通常 <code>nobody</code>
            ã‚„ <code>www</code> ã®æ¨©é™ã§å®Ÿè¡Œã•れã¾ã™ã€‚ã—ãŸãŒã£ã¦ã€ã‚ãªãŸãŒæ‰€æœ‰ã™ã‚‹
            ファイルを実行ã™ã‚‹ã«ã¯åˆ¥ã®ãƒ‘ーミッションãŒå¿…è¦ã¨ãªã‚Šã¾ã™ã€‚
            通常ã€<code>nobody</code> ãŒå®Ÿè¡Œã™ã‚‹ã®ã«å分ãªãƒ‘ーミッションを与ãˆã‚‹æ–¹æ³•ã¯ã€
            ファイルã«èª°ã§ã‚‚実行å¯èƒ½ã¨ã™ã‚‹ãƒ‘ーミッションを与ãˆã‚‹ã“ã¨ã§ã™:</p>
      
            <div class="example"><p><code>
              chmod a+x first.pl
            </code></p></div>
      
            <p>ã¾ãŸã€ã‚‚ã—ã‚ãªãŸã®ãƒ—ログラムãŒä»–ã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’èª­ã¿æ›¸ãã™ã‚‹ãªã‚‰ã°ã€
            ãれらã®ãƒ•ァイルã¯ã€ã“れãŒå¯èƒ½ã¨ãªã‚‹æ­£ã—ã„パーミッション
            ã‚’æŒã£ã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      
          
      
          <h3><a name="pathinformation" id="pathinformation">パス情報ã¨ç’°å¢ƒ</a></h3>
            
      
            <p>コマンドラインã‹ã‚‰ãƒ—ログラムを実行ã™ã‚‹ã¨ãã€
            æ„è­˜ã—ãªãã¦ã‚‚ã‚·ã‚§ãƒ«ã«æ¸¡ã•れる情報ãŒã‚りã¾ã™ã€‚
            例ãˆã°ã€å‚ç…§ã™ã‚‹ãƒ•ァイルã®ãŸã‚ã«ã©ã“を検索ã—ãŸã‚‰ã‚ˆã„ã‹ã‚’
            シェルã«ä¼ãˆã‚‹ <code>PATH</code> ãŒã‚りã¾ã™ã€‚</p>
      
            <p>プログラム㌠CGI プログラムã¨ã—ã¦ã‚¦ã‚§ãƒ–サーãƒã«ã‚ˆã£ã¦å®Ÿè¡Œã•れるã¨ãã€
            ãれã¯åŒã˜ <code>PATH</code> ã§ã¯ãªã„ã‹ã‚‚ã—れã¾ã›ã‚“。
            CGI プログラム内ã§å‘¼ã³å‡ºã™ã‚らゆるプログラム
            (例ãˆã°ã€<code>sendmail</code> ã®ã‚ˆã†ãªã‚‚ã®) ã¯ã€
            ãƒ•ãƒ«ãƒ‘ã‚¹ã§æŒ‡å®šã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã§ã—ょã†ã€‚ãれã«ã‚ˆã‚Šã€CGI
            プログラムを実行ã—よã†ã¨ã—ãŸã¨ãã€
            シェルã¯ãã®ã‚ˆã†ãªãƒ—ログラムを見ã¤ã‘ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
            <p>åŒæ§˜ãªã“ã¨ã¯ã€ã‚¹ã‚¯ãƒªãƒ—トã®ã‚¤ãƒ³ã‚¿ãƒ—リタ (ã—ã°ã—ã° <code>perl</code>)
            ã¸ã®ãƒ‘スã§ã€CGI プログラム㮠1 è¡Œç›®ã«æ¬¡ã®ã‚ˆã†ã«ç¤ºã•れã¾ã™:</p>
      
            <div class="example"><p><code>
              #!/usr/bin/perl
            </code></p></div>
      
            <p>ã“れãŒã‚¤ãƒ³ã‚¿ãƒ¼ãƒ—リタã¸ã®å®Ÿéš›ã®ãƒ‘スã§ã‚ã‚‹ã“ã¨ã‚’確èªã—ã¦ãŠãã¾ã™ã€‚</p>
          
      
            <p>ã¾ãŸã€CGI プログラムãŒä»–ã®<a href="#env">環境変数</a>ã«ä¾å­˜ã—ã¦ã„ã‚‹å ´åˆã¯ã€ãã®ç’°å¢ƒå¤‰æ•°ãŒ
            Apache ã‹ã‚‰æ¸¡ã•れるよã†ã«ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      
          <h3><a name="syntaxerrors" id="syntaxerrors">プログラムエラー</a></h3>
            
      
            <p>CGI
            プログラムãŒå¤±æ•—ã™ã‚‹ã®ã¯å¤§æŠµã€ãƒ—ログラム自身ã«å•題ãŒã‚ã‚‹å ´åˆã§ã™ã€‚
            一度 CGI ã®ä½¿ã„方をç†è§£ã—ã€å‰è¿°ã®äºŒã¤ã®èª¤ã‚Šã‚’犯ã—ã¦ã„ãªã„ãªã‚‰ã°ã€
            ã¾ãšé–“é•ã„ãªããã†ã§ã—ょã†ã€‚ブラウザを使ã£ã¦ãƒ†ã‚¹ãƒˆã™ã‚‹å‰ã«
            ã¾ãšç¢ºèªã™ã‚‹ã“ã¨ã¯ã€ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‹ã‚‰ãƒ—ログラムãŒå®Ÿè¡Œã§ãã‚‹ã“ã¨ã§ã™ã€‚
            例ãˆã°ã€ä»¥ä¸‹ã‚’実行ã—ã¦ã¿ã¦ãã ã•ã„:</p>
      
            <div class="example"><p><code>
            cd /usr/local/apache2/cgi-bin<br />
            ./first.pl
            </code></p></div>
      
            <p>(<code>perl</code> インタプリタã¯å‘¼ã°ãªã„ã§ãã ã•ã„。
            シェル㨠Apache ãŒã‚¹ã‚¯ãƒªãƒ—ãƒˆã®æœ€åˆã®è¡Œã® <a href="#pathinformation">パス情報</a> を使ã£ã¦è¦‹ã¤ã‘ã¾ã™ã€‚)</p>
      
            <p>最åˆã«ãƒ—ログラムã‹ã‚‰å‡ºåŠ›ã•れるã®ã¯ <code>Content-Type</code> ã‚’å«ã¿ã€
            後ã«ç©ºè¡Œã®ç¶šã HTTP ヘッダã§ãªã‘れã°ãªã‚Šã¾ã›ã‚“。他ã®ã‚‚ã®ãŒå‡ºåŠ›ã•れã¦ã„ã‚‹
            å ´åˆã¯ã€Apache ã¯ã“ã®ãƒ—ログラムをサーãƒçµŒç”±ã§å®Ÿè¡Œã—よã†ã¨ã—ãŸã¨ãã«ã¯
            <code>Premature end of script headers</code> エラーを出力ã—ã¾ã™ã€‚詳細ã¯
            上記㮠<a href="#writing">CGI プログラムを書ã</a> を読んã§ãã ã•ã„。</p>
          
      
          <h3><a name="errorlogs" id="errorlogs">エラーログ</a></h3>
            
      
            <p>エラーログã¯å‹é”ã§ã™ã€‚
            å…¨ã¦ã®ã†ã¾ãã„ã‹ãªã„ã“ã¨ã¯ã€ã‚¨ãƒ©ãƒ¼ãƒ­ã‚°ã«ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’生æˆã—ã¾ã™ã€‚
            å¿…ãšãれを最åˆã«è¦‹ã‚‹ã¹ãã§ã™ã€‚
            ã‚‚ã—ã€ã‚ãªãŸãŒã‚¦ã‚§ãƒ–サイトを主催ã—ã¦ã„る場所ãŒ
            エラーログã®å‚照を許ã—ã¦ã„ãªã„ãªã‚‰ã°ã€ãã£ã¨ä»–ã®ã‚µã‚¤ãƒˆã§ä¸»å‚¬ã™ã‚‹ã¹ãã§ã™ã€‚
            エラーログã®èª­ã¿æ–¹ã‚’å­¦ã¶ã“ã¨ã§ã€ã»ã¨ã‚“ã©å…¨ã¦ã®å•題ãŒè¿…速ã«ç¢ºèªã•れã€
            迅速ã«è§£æ±ºã•れるã¨ã„ã†ã“ã¨ãŒåˆ†ã‹ã‚‹ã§ã—ょã†ã€‚</p>
          
      
          <h3><a name="suexec" id="suexec">Suexec</a></h3>
            
      
            <p><a href="../suexec.html">suexec</a> サãƒãƒ¼ãƒˆãƒ—ログラムã¯
            ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã‚„ユーザã®ãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®å ´æ‰€ã«ä¾ã£ã¦
            CGI プログラムをé•ã†ãƒ¦ãƒ¼ã‚¶æ¨©é™ã®ä¸‹ã§èµ°ã‚‰ã›ã‚‹ã“ã¨ã‚’å¯èƒ½ã«ã—ã¾ã™ã€‚
            Suexec ã®æ¨©é™ã®ãƒã‚§ãƒƒã‚¯ã¯éžå¸¸ã«å޳ã—ãã€ãれを満ãŸã•ãªã„å ´åˆã¯
            CGI プログラム㌠<code>Premature end of script headers</code> エラーã§
            実行ã•れã¾ã›ã‚“。</p>
      
            <p>suexec を使ã£ã¦ã„ã‚‹ã‹ã©ã†ã‹ã‚’調ã¹ãŸã‚ã«ã¯ <code>apachectl
            -V</code> を実行ã—ã¦ã€<code>SUEXEC_BIN</code> ã®å ´æ‰€ã‚’調ã¹ã¦ãã ã•ã„。
            Apache ãŒãã“ã« <code class="program"><a href="../programs/suexec.html">suexec</a></code> ã®ãƒã‚¤ãƒŠãƒªã‚’発見ã—ãŸå ´åˆã¯ã€suexec ãŒ
            使用ã•れã¾ã™ã€‚</p>
      
            <p>suexec を完全ã«ç†è§£ã—ã¦ã„ãªã„é™ã‚Šã€ä½¿ã†ã¹ãã§ã¯ã‚りã¾ã›ã‚“。
            suexec を無効ã«ã™ã‚‹ã«ã¯ã€<code>SUEXEC_BIN</code> ã‹ã‚‰æŒ‡ã•れã¦ã„ã‚‹
            <code class="program"><a href="../programs/suexec.html">suexec</a></code> ãƒã‚¤ãƒŠãƒªã‚’削除 (ã‹åå‰ã‚’変更) ã™ã‚‹ã ã‘ã§ã™ã€‚
            <a href="../suexec.html">suexec</a> を読んã å¾Œã§ã€ã¾ã ãれを
            使ã„ãŸã„ã®ã§ã‚れã°ã€<code>suexec -V</code> を実行ã—㦠suexec ã®
            ログファイルã®ä½ç½®ã‚’調ã¹ã€ãã®ãƒ­ã‚°ãƒ•ァイルを使ã£ã¦ãƒãƒªã‚·ãƒ¼é•åã‚’
            見ã¤ã‘ã¦ãã ã•ã„。</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="behindscenes" id="behindscenes">è£ã§ä½•ãŒèµ·ã“ã£ã¦ã„ã‚‹ã®ã‹?</a></h2>
          
      
          <p>CGI プログラミングã«ç¿’熟ã™ã‚‹ã¨ã€
          è£ã§èµ·ã“ã£ã¦ã„ã‚‹ã“ã¨ã«ã¤ã„ã¦æ›´ã«ç†è§£ã™ã‚‹ã“ã¨ã®å½¹ã«ç«‹ã¡ã¾ã™ã€‚
          ブラウザã¨ã‚µãƒ¼ãƒãŒã©ã®ã‚ˆã†ã«ç›¸äº’通信ã™ã‚‹ã‹ã«ã¤ã„ã¦ã¯ç‰¹ã«ãã†ã§ã™ã€‚
          ãªãœãªã‚‰ã€"Hello, World."
          ã‚’å°å­—ã™ã‚‹ãƒ—ログラムを書ãã“ã¨ã¯ãŠãŠã„ã«çµæ§‹ã§ã™ãŒã€
          ãれã¯ç‰¹ã«æœ‰ç›Šã§ã¯ã‚りã¾ã›ã‚“。</p>
      
          <h3><a name="env" id="env">環境変数</a></h3>
            
      
            <p>環境変数ã¯ã€
            ã‚ãªãŸãŒã‚³ãƒ³ãƒ”ュータを使ã†ã¨ãã«è¾ºã‚Šã«å­˜åœ¨ã—ã¦ã„る値ã§ã™ã€‚
            ãれらã¯ã€ãƒ‘ス
            (コマンドをタイプã—ãŸã¨ãã«å®Ÿè¡Œã™ã‚‹å®Ÿéš›ã®ãƒ•ァイルを探ã—出ã™ã¨ã“ã‚)ã€
            ユーザåã€ç«¯æœ«åž‹ãªã©ã®ã‚ˆã†ãªä¾¿åˆ©ãªã‚‚ã®ã§ã™ã€‚
            é€šå¸¸ã€æ™®æ®µä½¿ç”¨ã—ã¦ã„る環境変数ã®å®Œå…¨ãªãƒªã‚¹ãƒˆã‚’調ã¹ã‚‹ã«ã¯ã€
            コマンドプロンプト㧠<code>env</code> を入力ã—ã¾ã™ã€‚</p>
      
            <p>CGI ã®å‡¦ç†ä¸­ã€ã‚µãƒ¼ãƒã¨ãƒ–ラウザも環境変数を設定ã—ã€
            ãれã«ã‚ˆã‚Šç›¸äº’ã«é€šä¿¡ã™ã‚‹ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚
            ãã®ç’°å¢ƒå¤‰æ•°ã¯ã€ãƒ–ラウザタイプ (Netscape, IE, Lynx)ã€ã‚µãƒ¼ãƒã‚¿ã‚¤ãƒ—
            (Apache, IIS, WebSite)ã€å®Ÿè¡Œã•れã¦ã„ã‚‹ CGI
            プログラムã®åå‰ãªã©ã§ã™ã€‚</p>
      
            <p>ã“れらã®å¤‰æ•°ã¯ CGI プログラマãŒä½¿ç”¨ã§ãã¾ã™ã€‚
            ãã—ã¦ã€ãれã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒã®é€šä¿¡ã®è©±ã®åŠåˆ†ã§ã™ã€‚
            å¿…è¦ãªå¤‰æ•°ã®å®Œå…¨ãªãƒªã‚¹ãƒˆã¯ <a href="http://hoohoo.ncsa.uiuc.edu/cgi/env.html">http://hoohoo.ncsa.uiuc.edu/cgi/env.html</a> ã«ã‚りã¾ã™ã€‚</p>
      
            <p>以下ã®å˜ç´”㪠Perl CGI
            プログラムã¯ã€æ¸¡ã•れる全ã¦ã®ç’°å¢ƒå¤‰æ•°ã‚’表示ã—ã¾ã™ã€‚åŒæ§˜ã®ãƒ—ログラムã¯ã€
            Apache ディストリビューション㮠<code>cgi-bin</code>
            ディレクトリã«äºŒã¤å«ã¾ã‚Œã¦ã„ã¾ã™ã€‚
            ã„ãã¤ã‹ã®å¤‰æ•°ãŒå¿…é ˆã§ã‚りã€ã„ãã¤ã‹ã¯ä»»æ„ã§ã‚ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。
            ãã—ã¦ã€å…¬å¼ã®ãƒªã‚¹ãƒˆã«ã¯ãªã„ã„ãã¤ã‹ã®å¤‰æ•°ãŒè¡¨ç¤ºã•れã¦ã„ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。
            ã•らã«ã€Apache ã¯ãƒ‡ãƒ•ォルトã§ç”¨æ„ã•れã¦ã„る基本的ãªã‚‚ã®ã«
            <a href="../env.html">ã‚ãªãŸè‡ªèº«ã®ç’°å¢ƒå¤‰æ•°ã‚’加ãˆã‚‹</a>ãŸã‚ã®ã€
            多ãã®ç•°ãªã‚‹æ–¹æ³•を用æ„ã—ã¦ã—ã¾ã™ã€‚</p>
      
            <div class="example"><p><code>
              #!/usr/bin/perl<br />
              print "Content-type: text/html\n\n";<br />
              foreach $key (keys %ENV) {<br />
              <span class="indent">
                print "$key --&gt; $ENV{$key}&lt;br&gt;";<br />
              </span>
              }
            </code></p></div>
          
      
          <h3><a name="stdin" id="stdin">STDIN 㨠STDOUT</a></h3>
            
      
            <p>サーãƒã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆé–“ã®ã‚‚ã†ä¸€ã¤ã®é€šä¿¡ã¯ã€æ¨™æº–入力
            (<code>STDIN</code>)ã¨æ¨™æº–出力 (<code>STDOUT</code>)
            を通ã˜ã¦è¡Œãªã‚れã¾ã™ã€‚é€šå¸¸ã®æ–‡è„ˆã«ãŠã„ã¦ã€<code>STDIN</code>
            ã¯ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚„プログラムãŒå‹•作ã™ã‚‹ãŸã‚ã«ä¸Žãˆã‚‰ã‚Œã‚‹ãƒ•ァイルをæ„味ã—ã€
            <code>STDOUT</code> ã¯é€šå¸¸ã‚³ãƒ³ã‚½ãƒ¼ãƒ«ã¾ãŸã¯ã‚¹ã‚¯ãƒªãƒ¼ãƒ³ã‚’æ„味ã—ã¾ã™ã€‚</p>
      
            <p>ウェブフォームã‹ã‚‰ CGI プログラムã¸<code>POST</code>
            ã—ãŸã¨ãã€ãƒ•ォームã®ãƒ‡ãƒ¼ã‚¿ã¯ç‰¹åˆ¥ãªãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã§æŸã­ã‚‰ã‚Œã€
            <code>STDIN</code> を通ã—ã¦ã€CGI プログラムã«å¼•ãæ¸¡ã•れã¾ã™ã€‚
            プログラムã¯ãƒ‡ãƒ¼ã‚¿ãŒã‚­ãƒ¼ãƒœãƒ¼ãƒ‰
            ã‚‚ã—ãã¯ãƒ•ァイルã‹ã‚‰æ¥ã¦ã„ãŸã‹ã®ã‚ˆã†ã«å‡¦ç†ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
            <p>「特別ãªãƒ•ォーマットã€ã¯ã¨ã¦ã‚‚å˜ç´”ã§ã™ã€‚フィールドåã¨å€¤ã¯ã‚¤ã‚³ãƒ¼ãƒ«
            (=) ã§çµã°ã‚Œã¾ã™ã€‚ãã—ã¦å€¤ã®çµ„ã¯ã‚¢ãƒ³ãƒ‘サンド (&amp;) ã§çµã°ã‚Œã¾ã™ã€‚
            スペースã€ã‚¢ãƒ³ãƒ‘サンドã€ã‚¤ã‚³ãƒ¼ãƒ«ã®ã‚ˆã†ãªé¢å€’ãªæ–‡å­—ã¯ã€
            ãれらãŒå‹•作を駄目ã«ã—ãªã„よã†ã«ãã®æ–‡å­—ã«ç›¸å½“ã™ã‚‹ 16 進ã«å¤‰æ›ã•れã¾ã™ã€‚
            全データ文字列ã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ã«ãªã‚Šã¾ã™:
            </p>
      
            <div class="example"><p><code>
              name=Rich%20Bowen&amp;city=Lexington&amp;state=KY&amp;sidekick=Squirrel%20Monkey
            </code></p></div>
      
            <p>時々ã€ã“ã®ã‚ˆã†ãªæ–‡å­—列㌠URL
            ã«ä»˜åŠ ã•れるã®ã‚’見るã§ã—ょã†ã€‚ãã®å ´åˆã€ã‚µãƒ¼ãƒã¯
            <code>QUERY_STRING</code> ã¨ã„ã†ç’°å¢ƒå¤‰æ•°ã«ãã®æ–‡å­—列を入れã¾ã™ã€‚ãれã¯
            <code>GET</code> リクエストã¨å‘¼ã°ã‚Œã¾ã™ã€‚
            HTML フォームã§ã¯ã€ãƒ‡ãƒ¼ã‚¿ã‚’渡ã™ãŸã‚ã« <code>GET</code> ã¨
            <code>POST</code> ã®ã©ã¡ã‚‰ã‚’使用ã™ã‚‹ã‹ã‚’ã€<code>FORM</code> ã‚¿ã‚°ã®
            <code>METHOD</code> 属性ã®è¨­å®šã§æŒ‡å®šã—ã¾ã™ã€‚</p>
      
            <p>CGI プログラムã¯ã€ãã®æ–‡å­—列を役ã«ç«‹ã¤æƒ…å ±ã«åˆ†å‰²ã™ã‚‹è²¬ä»»ãŒã‚りã¾ã™ã€‚
            幸ã„ã«ã‚‚ã€ãã®ãƒ‡ãƒ¼ã‚¿å‡¦ç†ã‚’助ã‘るライブラリやモジュールãŒå­˜åœ¨ã—ã¾ã™ã€‚
            ã“れらã¯ã€CGI プログラムã®ä»–ã®é¢ã§ã‚‚åŒæ§˜ã«å½¹ã«ç«‹ã¡ã¾ã™ã€‚</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="libraries" id="libraries">CGI モジュール/ライブラリ</a></h2>
          
      
          <p>CGI プログラムを書ãã¨ãã€é¢å€’ãªä»•事ã®å¤§éƒ¨åˆ†ã‚’ã—ã¦ãれる
          コードライブラリã¾ãŸã¯ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’使ã†ã“ã¨ã‚’検討ã™ã¹ãã§ã™ã€‚
          ã“れã¯ã‚¨ãƒ©ãƒ¼ã‚’減らã—ã€æ—©ã„開発ã«ã¤ãªãŒã‚Šã¾ã™ã€‚</p>
      
          <p>Perl ã§ CGI プログラムを書ã„ã¦ã„ã‚‹ãªã‚‰ã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ <a href="http://www.cpan.org/">CPAN</a> ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚
          ã“ã®ç›®çš„ã®ãŸã‚ã®æœ€ã‚‚æ™®åŠã—ã¦ã„るモジュール㯠<code>CGI.pm</code> ã§ã™ã€‚
          <code>CGI::Lite</code> も検討ã—ã¾ã—ょã†ã€‚ã“れã¯ã€ã»ã¨ã‚“ã©ã®ãƒ—ログラム
          ã«ãŠã„ã¦å¿…è¦ã¨ã™ã‚‹ã™ã¹ã¦ã®æ©Ÿèƒ½ã®æœ€å°ã‚»ãƒƒãƒˆã®å®Ÿè£…ã§ã™ã€‚</p>
      
          <p>C ã§ CGI プログラムを書ã„ã¦ã„ã‚‹ãªã‚‰ã€ã„ã‚ã„ã‚ãª
          オプションãŒã‚りã¾ã™ã€‚ã“れらã®å†…ã®ä¸€ã¤ã¯ <a href="http://www.boutell.com/cgic/">http://www.boutell.com/cgic/</a>
          ã§æä¾›ã•れã¦ã„ã‚‹ <code>CGIC</code> ライブラリã§ã™ã€‚</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="moreinfo" id="moreinfo">æ›´ãªã‚‹æƒ…å ±</a></h2>
          
      
          <p>CGI ã«é–¢ã™ã‚‹æƒ…å ±ã¯ã‚¦ã‚§ãƒ–ã§æ•°å¤šãæä¾›ã•れã¦ã„ã¾ã™ã€‚CGI
          ã®å•題ã«ã¤ã„ã¦ã¯ Usenet ã® <a href="news:comp.infosystems.www.authoring.cgi">comp.infosystems.www.authoring.cgi</a> ã§ã€
          ä»–ã®ãƒ¦ãƒ¼ã‚¶ã¨è«–è­°ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚HTML Writers Guide ã®
          -servers メーリングリストã¯ã€ã‚ãªãŸã®è³ªå•ã«å›žç­”ã—ã¦ãれるå‰å¤§ãªãƒªã‚½ãƒ¼ã‚¹ã§ã™ã€‚
          <a href="http://www.hwg.org/lists/hwg-servers/">http://www.hwg.org/lists/hwg-servers/</a>
          ã§æ›´ã«å¤šãを探ã—出ã™ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>ãã—ã¦ã‚‚ã¡ã‚ã‚“ã€ãŠãらã CGI
          プログラムã®å‹•作ã«é–¢ã™ã‚‹è©³ç´°ã®å…¨ã¦ãŒè¨˜è¿°ã•れã¦ã„ã‚‹
          CGI ã®ä»•様を読むã¹ãã§ã™ã€‚オリジナルãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’
          <a href="http://hoohoo.ncsa.uiuc.edu/cgi/interface.html">NCSA</a>
          ã§ã€ã‚¢ãƒƒãƒ—デートã•れãŸãƒ‰ãƒ©ãƒ•トを
          <a href="http://web.golux.com/coar/cgi/">Common Gateway Interface RFC
          プロジェクト</a>ã§å‚ç…§ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>CGI ã®å•題ã«ã¤ã„ã¦ã€åŠ ã‚ã£ã¦ã„るメーリングリストã¾ãŸã¯ãƒ‹ãƒ¥ãƒ¼ã‚¹
          グループã«è³ªå•ã‚’é€ã‚‹ã¨ãã€èµ·ã“ã£ãŸã‚‚ã®ã€èµ·ã“ã£ã¦ã»ã—ã„ã“ã¨ã€
          実際ã«èµ·ã“ã£ãŸã“ã¨ãŒã©ã†é•ã†ã‹ã€ä½¿ç”¨ã—ã¦ã„るサーãƒã€
          CGI プログラムを記述ã—ã¦ã„る言語ã«é–¢ã™ã‚‹ååˆ†ãªæƒ…å ±ã¨ã€
          å¯èƒ½ã§ã‚れã°å•題ã®ã‚³ãƒ¼ãƒ‰ã‚’æä¾›ã™ã‚‹ã‚ˆã†ã«ã—ã¦ãã ã•ã„。
          ãã†ã™ã‚‹ã“ã¨ã§ã€å•題ãŒã‚ˆã‚Šé–“å˜ã«è¦‹ã¤ã‹ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚</p>
      
          <p>Apache ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã«ãŠã„ã¦å•題を発見ã—ãŸã“ã¨ã‚’確信ã—ã¦ã„ãªã„é™ã‚Šã€
          CGI ã®å•題ã«é–¢ã™ã‚‹è³ªå•ã‚’ Apache
          ãƒã‚°ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã«<strong>é€ã‚‹ã¹ãã§ãªã„</strong>
          ã“ã¨ã«æ³¨ç›®ã—ã¦ãã ã•ã„。</p>
        </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/howto/cgi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/cgi.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/cgi.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/cgi.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/cgi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/cgi.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������httpd-2.4.41/docs/manual/howto/public_html.html.ja.utf8���������������������������������������������0000644�0000000�0000050�00000036041�13412755316�021262� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>ユーザ毎ã®ã‚¦ã‚§ãƒ–ディレクトリ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="../">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a> &gt; <a href="./">How-To / ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«</a></div><div id="page-content"><div id="preamble"><h1>ユーザ毎ã®ã‚¦ã‚§ãƒ–ディレクトリ</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/howto/public_html.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/public_html.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/public_html.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/public_html.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/public_html.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/public_html.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
      <p>複数ã®ãƒ¦ãƒ¼ã‚¶ã®ã„るシステムã§ã¯ã€<code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> ディレクティブを使ã£ã¦
          å„ユーザãŒãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã‚¦ã‚§ãƒ–サイトを構築ã§ãるよã†ã«è¨­å®šã™ã‚‹ã“ã¨ãŒ
          å¯èƒ½ã§ã™ã€‚URL <code>http://example.com/~username/</code> を訪れãŸäººã¯
          "<code>username</code>" ã¨ã„ã†ãƒ¦ãƒ¼ã‚¶ã® <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã•れãŸ
          サブディレクトリã‹ã‚‰ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’å¾—ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚</p>
      
          <p>in the default config file, and adapting the <code>httpd-userdir.conf</code>
          file as necessary, or by including the appropriate directives in a
          <code>Directory</code> block within the main config file.</p>
          <p>デフォルトã§ã¯ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã¯<strong>許å¯ã•れã¦ã„ã¾ã›ã‚“</strong>。
          <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> を使ã£ã¦æœ‰åйã«ã§ãã¾ã™ã€‚
          有効ã«ã™ã‚‹ã«ã¯ã€ãƒ‡ãƒ•ォルトã®è¨­å®šãƒ•ァイルã§ä»˜éšã™ã‚‹
          <code>httpd-userdir.conf</code> ファイルãŒå¿…è¦ã§ã€
          ãã®ä¸­ã®æ¬¡ã®è¡Œã®ã‚³ãƒ¡ãƒ³ãƒˆã‚¢ã‚¦ãƒˆã‚’外ã—ã¦æœ‰åйã«ã™ã‚‹ã‹ã€
          </p>
          <div class="example"><p><code>
            #Include conf/extra/httpd-userdir.conf
          </code></p></div>
          <p>ã‚ã‚‹ã„ã¯ã€ãƒ¡ã‚¤ãƒ³ã®è¨­å®šãƒ•ァイル中㮠<code>Directory</code> 
          ブロックã®ä¸­ã«é©åˆ‡ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–を記述ã—ã¦ãŠãã¾ã™ã€‚</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">ユーザ毎ã®ã‚¦ã‚§ãƒ–ディレクトリ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#userdir">UserDir を使ã£ã¦ãƒ•ァイルã®ãƒ‘スを設定ã™ã‚‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#redirect">外部 URL ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã™ã‚‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#enable">ã“ã®æ©Ÿèƒ½ã‚’使用ã§ãるユーザを制é™ã™ã‚‹</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cgi">ユーザ毎㮠CGI ディレクトリ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#htaccess">ユーザã«ã‚ˆã‚‹è¨­å®šå¤‰æ›´ã‚’許å¯</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="../urlmapping.html">URL ã‹ã‚‰ãƒ•ァイルシステムã¸ã®ãƒžãƒƒãƒ”ング</a></li><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">ユーザ毎ã®ã‚¦ã‚§ãƒ–ディレクトリ</a></h2>
          
          <table class="related"><tr><th>関連モジュール</th><th>関連ディレクティブ</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_userdir.html">mod_userdir</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code></li><li><code class="directive"><a href="../mod/core.html#directorymatch">DirectoryMatch</a></code></li><li><code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code></li></ul></td></tr></table>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="userdir" id="userdir">UserDir を使ã£ã¦ãƒ•ァイルã®ãƒ‘スを設定ã™ã‚‹</a></h2>
          
      
          <p><code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> ディレクティブã¯
          ユーザ毎ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ãŒèª­ã¿è¾¼ã¾ã‚Œã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’指定ã—ã¾ã™ã€‚
          ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã„ã‚ã„ã‚é•ã£ãŸå½¢å¼ã‚’å–ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>スラッシュã§å§‹ã¾ã‚‰ãªã„パスãŒä¸Žãˆã‚‰ã‚ŒãŸã¨ãã¯ã€ãƒ¦ãƒ¼ã‚¶ã®ãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒª
          ã‹ã‚‰ã®ç›¸å¯¾ãƒ‘スã¨ã¿ãªã•れã¾ã™ã€‚次ã®è¨­å®šãŒã‚ã£ãŸã¨ãã«:</p>
      
          <pre class="prettyprint lang-config">UserDir public_html</pre>
      
      
          <p>URL <code>http://example.com/~rbowen/file.html</code> ã¯
          パス <code>/home/rbowen/public_html/file.html</code> ã¸
          変æ›ã•れã¾ã™ã€‚</p>
      
          <p>パスãŒã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§å§‹ã¾ã‚‹ã¨ãã¯ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒ‘スã¯ãã®ãƒ‘スã«
          ユーザåを加ãˆãŸã‚‚ã®ã‹ã‚‰ãªã‚Šã¾ã™ã€‚次ã®è¨­å®šã®ã¨ã:</p>
      
          <pre class="prettyprint lang-config">UserDir /var/html</pre>
      
      
          <p>URL <code>http://example.com/~rbowen/file.html</code> ã¯
          パス <code>/var/html/rbowen/file.html</code> ã¸å¤‰æ›ã•れã¾ã™ã€‚</p>
      
          <p>アスタリスク (*) ã‚’å«ã‚€ãƒ‘ã‚¹ãŒæŒ‡å®šã•れãŸã¨ãã¯ã€ã‚¢ã‚¹ã‚¿ãƒªã‚¹ã‚¯ã‚’
          ユーザåã§ç½®æ›ã—ãŸã‚‚ã®ãŒä½¿ç”¨ã•れã¾ã™ã€‚ã“ã®ã‚ˆã†ãªè¨­å®šã ã¨:</p>
      
          <pre class="prettyprint lang-config">UserDir /var/www/*/docs</pre>
      
      
          <p>URL <code>http://example.com/~rbowen/file.html</code> ã¯
          パス <code>/var/www/rbowen/docs/file.html</code> ã¸å¤‰æ›ã•れã¾ã™ã€‚</p>
      
          <p>ディレクトリやディレクトリパスを複数設定ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚</p>
      
          <pre class="prettyprint lang-config">UserDir public_html /var/html</pre>
      
      
      
          <p><code>http://example.com/~rbowen/file.html</code> ã¨ã„ã†
          URL ã«å¯¾ã—ã¦ã¯ <code>~rbowen</code> を探ã—ã¾ã™ã€‚見ã¤ã‹ã‚‰ãªã‘れã°ã€
          <code>/var/html</code> ã®ä¸‹ã«ã‚ã‚‹ <code>rbowen</code> を探ã—ã¾ã™ã€‚
          ã‚‚ã—見ã¤ã‹ã‚Œã°ä¸Šè¨˜ã® URL 㯠<code>/var/html/rbowen/file.html</code>
          ã¨ã„ã†ãƒ•ァイルパスã«å¤‰æ›ã•れã¾ã™ã€‚</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="redirect" id="redirect">外部 URL ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã™ã‚‹</a></h2>
          
          <p><code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>
          ディレクティブを使ã£ã¦å¤–部 URL ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚</p>
      
          <pre class="prettyprint lang-config">UserDir http://example.org/users/*/</pre>
      
      
          
          <p>上記例ã§ã¯ <code>http://example.com/~bob/abc.html</code>
          ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ <code>http://example.org/users/bob/abc.html</code>
          ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•れã¾ã™ã€‚</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="enable" id="enable">ã“ã®æ©Ÿèƒ½ã‚’使用ã§ãるユーザを制é™ã™ã‚‹</a></h2>
          
      
          <p>UserDir ã®ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã«ç¤ºã•れã¦ã„る構文を使ã†ã“ã¨ã§ã€
          ã©ã®ãƒ¦ãƒ¼ã‚¶ãŒã“ã®æ©Ÿèƒ½ã‚’使ã†ã“ã¨ãŒã§ãã‚‹ã‹ã‚’制é™ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™:</p>
      
          <div class="example"><p><code>
            UserDir enabled<br />
            UserDir disabled root jro fish
          </code></p></div>
      
          <p>上ã®è¨­å®šã¯ <code>dissabled</code> æ–‡ã®ãƒ¦ãƒ¼ã‚¶ä»¥å¤–ã®ã™ã¹ã¦ã®ãƒ¦ãƒ¼ã‚¶ã«
          対ã—㦠UserDir ã®æ©Ÿèƒ½ã‚’有効ã«ã—ã¾ã™ã€‚åŒæ§˜ã«ã—ã¦ã€ä»¥ä¸‹ã®ã‚ˆã†ã«
          æ•°åã®ãƒ¦ãƒ¼ã‚¶ä»¥å¤–ã«å¯¾ã—ã¦ã“ã®æ©Ÿèƒ½ã‚’無効ã«ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™:</p>
      
          <pre class="prettyprint lang-config">      UserDir disabled<br />
            UserDir enabled rbowen krietz</pre>
      
      
          <p>ä»–ã®ä¾‹ã¯ <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>
          ã®èª¬æ˜Žã‚’å‚ç…§ã—ã¦ãã ã•ã„。</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cgi" id="cgi">ユーザ毎㮠CGI ディレクトリ</a></h2>
        
      
         <p>ãれãžã‚Œã®ãƒ¦ãƒ¼ã‚¶ã«å°‚用㮠cgi-bin ディレクトリを与ãˆã‚‹ãŸã‚ã«ã€
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code>
          を使ã£ã¦ãƒ¦ãƒ¼ã‚¶ã®ãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®æŒ‡å®šã•れãŸé ˜åŸŸã«å¯¾ã—㦠CGI を有効ã«
          ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <pre class="prettyprint lang-config">&lt;Directory /home/*/public_html/cgi-bin/&gt;
          Options ExecCGI
          SetHandler cgi-script
      &lt;/Directory&gt;</pre>
      
      
          <p>ãã—ã¦ã€<code>UserDir</code> ãŒ
          <code>public_html</code> ã«è¨­å®šã•れã¦ã„ã‚‹ã¨ä»®å®šã™ã‚‹ã¨ã€
          ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã® CGI プログラム <code>example.cgi</code>
          ã¯ä»¥ä¸‹ã®æ§˜ã«å‘¼ã³å‡ºã•れるã“ã¨ãŒã§ãã¾ã™:</p>
      
          <div class="example"><p><code>
          http://example.com/~rbowen/cgi-bin/example.cgi
          </code></p></div>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="htaccess" id="htaccess">ユーザã«ã‚ˆã‚‹è¨­å®šå¤‰æ›´ã‚’許å¯</a></h2>
          
      
          <p>ユーザã«å½¼ã‚‰ã®ã‚¦ã‚§ãƒ–空間ã§ã®ã‚µãƒ¼ãƒã®è¨­å®šã®å¤‰æ›´ã‚’許å¯ã™ã‚‹å ´åˆã€
          ユーザ㯠<code>.htaccess</code> ファイルを使ã£ã¦è¨­å®šã‚’変更ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> ã®å€¤ã‚’
          ユーザãŒå¤‰æ›´ã™ã‚‹ã“ã¨ã‚’許å¯ã—ãŸã„ディレクティブã«å¯¾ã—ã¦å分ãªã‚‚ã®ã«
          設定ã—ã¦ã„ã‚‹ã“ã¨ã‚’確èªã—ã¦ãã ã•ã„。ã“ã®æ©Ÿèƒ½ãŒã©ã®ã‚ˆã†ã«ã—ã¦å‹•作ã—ã¦ã„ã‚‹ã‹
          ã®è©³ç´°ã¯ <a href="htaccess.html">.htaccess ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«</a> を読んã§
          ãã ã•ã„。</p>
      
        </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/howto/public_html.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/public_html.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/public_html.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/public_html.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/public_html.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/public_html.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/public_html.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/ssi.html�������������������������������������������������������������0000644�0000000�0000050�00000000706�13362070302�016264� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: ssi.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: ssi.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: ssi.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: ssi.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: ssi.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      ����������������������������������������������������������httpd-2.4.41/docs/manual/howto/ssi.html.ko.euc-kr���������������������������������������������������0000644�0000000�0000050�00000054454�13412755316�020105� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¾ÆÆÄÄ¡ ÅõÅ丮¾ó: Server Side Includes ¼Ò°³ - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutorials</a></div><div id="page-content"><div id="preamble"><h1>¾ÆÆÄÄ¡ ÅõÅ丮¾ó: Server Side Includes ¼Ò°³</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/howto/ssi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/ssi.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/ssi.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/ssi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/ssi.html" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      <p>Server-side includes¸¦ »ç¿ëÇÏ¿© HTML ¹®¼­¿¡ µ¿ÀûÀÎ ³»¿ëÀ»
      Ãß°¡ÇÒ ¼ö ÀÖ´Ù.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">¼Ò°³</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#what">SSI°¡ ¹«¾ùÀΰ¡?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#configuring">SSI°¡ °¡´ÉÇϵµ·Ï ¼­¹ö ¼³Á¤Çϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#basic">±âº» SSI Áö½Ã¾î</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#additionalexamples">Ãß°¡ ¿¹Á¦</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#config">À̿ܿ¡ ¼³Á¤ÇÒ ¼ö ÀÖ´Â °ÍÀº?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exec">¸í·É¾î ½ÇÇàÇϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#advanced">°í±Þ SSI ±â¹ý</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#conclusion">°á·Ð</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">¼Ò°³</a></h2>
       <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="../mod/mod_expires.html">mod_expires</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code></li><li><code class="directive"><a href="../mod/mod_mime.html#addtype">AddType</a></code></li><li><code class="directive"><a href="../mod/core.html#setoutputfilter">SetOutputFilter</a></code></li><li><code class="directive"><a href="../mod/mod_setenvif.html#browsermatchnocase">BrowserMatchNoCase</a></code></li></ul></td></tr></table>
      
          <p>ÀÌ ±ÛÀº º¸Åë SSI¶ó°í ºÎ¸£´Â Server Side Includes¸¦ ¼³¸íÇÑ´Ù.
          SSI°¡ °¡´ÉÇϵµ·Ï ¼­¹ö¸¦ ¼³Á¤ÇÏ´Â ¹æ¹ý°ú HTML ÆäÀÌÁö¿¡ µ¿ÀûÀÎ
          ³»¿ëÀ» Ãß°¡ÇÏ´Â ±âº»ÀûÀÎ SSI »ç¿ë¹ýÀ» ¼Ò°³ÇÑ´Ù.</p>
      
          <p>ÀÌ ±ÛÀÇ µÞºÎºÐÀº SSI Áö½Ã¾î Á¶°Ç¹®°ú °°Àº °í±Þ±â¹ýÀ»
          ¼³¸íÇÑ´Ù.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="what" id="what">SSI°¡ ¹«¾ùÀΰ¡?</a></h2>
      
          <p>SSI (Server Side Includes)´Â HTML ÆäÀÌÁö¿¡ »ç¿ëÇÏ´Â Áö½Ã¾î·Î,
          ÆäÀÌÁö¸¦ ¼­ºñ½ºÇÒ¶§ ¼­¹ö°¡ ó¸®ÇÑ´Ù. SSI¸¦ »ç¿ëÇϸé CGI
          ÇÁ·Î±×·¥À̳ª ´Ù¸¥ µ¿ÀûÀÎ ±â¼ú·Î ÆäÀÌÁö Àüü¸¦ ¸¸µé¾î¼­
          ¼­ºñ½ºÇÏÁö ¾Ê°íµµ HTML ÆäÀÌÁö¿¡ µ¿ÀûÀ¸·Î »ý¼ºÇÑ ³»¿ëÀ» Ãß°¡ÇÒ
          ¼ö ÀÖ´Ù.</p>
      
          <p>SSI¸¦ »ç¿ëÇÒÁö ¾Æ´Ï¸é ÇÁ·Î±×·¥À¸·Î ÆäÀÌÁö Àüü¸¦ »ý¼ºÇÒÁö
          °áÁ¤Àº ÆäÀÌÁö¿¡¼­ Á¤ÀûÀÎ ºÎºÐÀÌ ¸¹ÀºÁö¿Í ÆäÀÌÁö¸¦ ¼­ºñ½ºÇÒ
          ¶§¸¶´Ù ¾î´ÀÁ¤µµ¸¦ ´Ù½Ã °è»êÇØ¾ßÇÒÁö¿¡ ´Þ·È´Ù. SSI´Â ÇöÀç
          ½Ã°£°ú °°ÀÌ ÀûÀº Á¤º¸¸¦ Ãß°¡Çϴµ¥ ÁÁ´Ù. ±×·¯³ª ÆäÀÌÁö¸¦
          ¼­ºñ½ºÇÒ¶§ ÆäÀÌÁöÀÇ ´ëºÎºÐÀ» »ý¼ºÇØ¾ß ÇÑ´Ù¸é ´Ù¸¥ ¹æ¹ýÀ»
          ã¾ÆºÁ¾ß ÇÑ´Ù.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuring" id="configuring">SSI°¡ °¡´ÉÇϵµ·Ï ¼­¹ö ¼³Á¤Çϱâ</a></h2>
      
      
          <p>¼­¹ö°¡ SSI¸¦ ó¸®ÇÏ·Á¸é <code>httpd.conf</code> ÆÄÀÏÀ̳ª
          <code>.htaccess</code> ÆÄÀÏ¿¡¼­ ´ÙÀ½ Áö½Ã¾î¸¦ »ç¿ëÇØ¾ß ÇÑ´Ù.</p>
      <div class="example"><p><code>
              Options +Includes
      </code></p></div>
      
          <p>±×·¯¸é ¾ÆÆÄÄ¡´Â ÆÄÀÏ¿¡¼­ SSI Áö½Ã¾î¸¦ ó¸®ÇÑ´Ù. ¼³Á¤¿¡´Â
          º¸Åë ¿©·¯ <code class="directive"><a href="../mod/core.html#options">Options</a></code> Áö½Ã¾î°¡
          ÀÖ°í, ÀÌ Áö½Ã¾îµéÀº ¼­·Î µ¤¾î½á¼­ ¹«È¿·Î ¸¸µé´Ù. ±×·¡¼­
          Áö½Ã¾î¸¦ ¸Ç¸¶Áö¸·¿¡ ó¸®ÇϱâÀ§ÇØ º¸Åë SSI¸¦ ¿øÇϴ ƯÁ¤
          µð·ºÅ丮¿¡¼­ <code>Options</code>¸¦ »ç¿ëÇÑ´Ù.</p>
      
          <p>¸ðµç ÆÄÀÏ¿¡¼­ SSI Áö½Ã¾î¸¦ ó¸®ÇÏ´Â °ÍÀº ¾Æ´Ï´Ù. ¾ÆÆÄÄ¡¿¡°Ô
          ¾î¶² ÆÄÀÏÀ» ó¸®ÇÒÁö ¾Ë·ÁÁà¾ß ÇÑ´Ù. µÎ°¡Áö ¹æ¹ýÀÌ ÀÖ´Ù.
          Çϳª´Â ´ÙÀ½°ú °°Àº Áö½Ã¾î·Î <code>.shtml</code>°ú °°Àº ƯÁ¤
          ÆÄÀÏ È®ÀåÀÚ¸¦ °¡Áø ÆÄÀÏÀ» ó¸®ÇÏ´Â ¹æ¹ýÀÌ´Ù.</p>
      <div class="example"><p><code>
              AddType text/html .shtml<br />
              AddOutputFilter INCLUDES .shtml
      </code></p></div>
      
          <p>ÀÌ ¹æ¹ýÀÇ ´ÜÁ¡Àº ÀÌ¹Ì ÀÖ´Â ÆäÀÌÁö¿¡ SSI Áö½Ã¾î¸¦ Ãß°¡ÇÏ´Â
          °æ¿ì SSI Áö½Ã¾î¸¦ ó¸®ÇϱâÀ§ÇØ <code>.shtml</code> È®ÀåÀÚ¸¦
          ºÎ¿©Çϱ⶧¹®¿¡ ÆÄÀϸí°ú ÀÌ ÆäÀÌÁöÀÇ ¸ðµç ¸µÅ©¸¦ º¯°æÇؾß
          ÇÏ´Â Á¡ÀÌ´Ù.</p>
      
          <p>´Ù¸¥ ¹æ¹ýÀº <code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code>
          Áö½Ã¾î¸¦ »ç¿ëÇÏ´Â ¹æ¹ýÀÌ´Ù.</p>
      <div class="example"><p><code>
              XBitHack on
      </code></p></div>
      
          <p><code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code>´Â
          ½ÇÇà±ÇÇÑÀÌ ÀÖ´Â ÆÄÀÏ¿¡¼­ SSI Áö½Ã¾î¸¦ ó¸®ÇÑ´Ù. ±×·¡¼­ À̹Ì
          ÀÖ´Â ÆäÀÌÁö¿¡ SSI Áö½Ã¾î¸¦ Ãß°¡ÇÑ´Ù¸é ÆÄÀϸíÀ» º¯°æÇÏÁö
          ¾Ê°í <code>chmod</code>·Î ÆÄÀÏ¿¡ ½ÇÇà±ÇÇÑÀ» ÁÖ¸é µÈ´Ù.</p>
      <div class="example"><p><code>
              chmod +x pagename.html
      </code></p></div>
      
          <p>ÇÏÁö ¸»¾Æ¾ß ÇÒ °Í Çϳª. °¡²û <code>.shtml</code> ÆÄÀÏ¸í¿¡
          °ñÄ¡¸¦ ¾ÎÁö¸»°í ¸ðµç <code>.html</code> ÆÄÀÏÀ» SSI ó¸®Ç϶ó°í
          Ãæ°íÇÏ´Â »ç¶÷ÀÌ ÀÖ´Ù. ÀÌ »ç¶÷µéÀº ¾Æ¸¶µµ <code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code>¿¡ ´ëÇØ ¸ð¸£´Â
          °Í °°´Ù. ¸í½ÉÇÒ Á¡Àº ÀÌ·¸°Ô ÇÏ¸é ¾ÆÆÄÄ¡´Â ÆÄÀÏ¿¡ SSI Áö½Ã¾î°¡
          ¾ø´õ¶óµµ Ŭ¶óÀÌ¾ðÆ®·Î º¸³»´Â ¸ðµç ÆÄÀÏÀ» »ìÆìºÁ¾ß ÇÑ´Ù´Â
          °ÍÀÌ´Ù. ¼º´ÉÀÌ ¸Å¿ì ´À·ÁÁú ¼ö ÀÖÀ¸¸ç, ÁÁÀº »ý°¢ÀÌ ¾Æ´Ï´Ù.</p>
      
          <p>¹°·Ð À©µµ¿ìÁî¿¡¼­´Â ½ÇÇà±ÇÇÑÀ̶õ °ÍÀÌ ¾ø±â¶§¹®¿¡ ÈÄÀÚ¸¦
          »ç¿ëÇÒ ¼ö ¾ø´Ù.</p>
      
          <p>³»¿ëÀÌ µ¿ÀûÀÌ¿©¼­ °è»êÇÏ±â ¾î·Æ±â¶§¹®¿¡ ¾ÆÆÄÄ¡ ±âº» ¼³Á¤Àº
          SSI ÆäÀÌÁöÀÇ ÃÖ±Ù¼öÁ¤Àϰú content length HTTP Çì´õ¸¦ º¸³»Áö
          ¾Ê´Â´Ù. ±×·¡¼­ ¹®¼­¸¦ ij½¬ÇÏÁö ¸øÇϰí Ŭ¶óÀÌ¾ðÆ®°¡ ´À³¢´Â
          ¼º´ÉÀÌ ¶³¾îÁø´Ù. µÎ°¡Áö ÇØ°á¹æ¹ýÀÌ ÀÖ´Ù.</p>
      
          <ol>
            <li><code>XBitHack Full</code> ¼³Á¤Àº »ç¿ëÇÑ´Ù. ±×·¯¸é
            ¾ÆÆÄÄ¡´Â Æ÷ÇÔÇÏ´Â(include) ÆÄÀϵéÀÇ ¼öÁ¤ÀÏÀº ¹«½ÃÇÑü
            ¿ø·¡ ¿äûÇÑ ÆÄÀÏÀÇ ³¯Â¥¸¸ º¸°í ÃÖ±Ù¼öÁ¤ÀÏÀ» ¾Ë¾Æ³½´Ù.</li>
      
            <li><code class="module"><a href="../mod/mod_expires.html">mod_expires</a></code>¿¡ ÀÖ´Â Áö½Ã¾î¸¦ »ç¿ëÇÏ¿©
            ÆÄÀÏ¿¡ Á÷Á¢ ¸¸±âÀÏÀ» ¼³Á¤ÇÏ¸é ºê¶ó¿ìÀú¿Í ÇÁ·Ï½Ã°¡ ¹®¼­¸¦
            ij½¬ÇÒ ¼ö ÀÖ´Ù.</li>
          </ol>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="basic" id="basic">±âº» SSI Áö½Ã¾î</a></h2>
      
          <p>SSI Áö½Ã¾îÀÇ »ç¿ë¹ýÀº ´ÙÀ½°ú °°´Ù.</p>
      <div class="example"><p><code>
              &lt;!--#element attribute=value attribute=value ... --&gt;
      </code></p></div>
      
          <p>HTML ÁÖ¼®°°ÀÌ »ý°å±â¶§¹®¿¡ SSI ±â´ÉÀ» °¡µ¿ÇÏÁö ¾Ê¾Æµµ
          HTML ¼Ò½º¿¡´Â ³ª¿ÀÁö¸¸ ºê¶ó¿ìÀú´Â ¹«½ÃÇÑ´Ù. SSI¸¦ ¿Ã¹Ù·Î
          ¼³Á¤Çϸé Áö½Ã¾î¸¦ °á°ú°ªÀ¸·Î ¹Ù²Û´Ù.</p>
      
          <p>element´Â ´ÙÀ½Áß Çϳª´Ù. ´ÙÀ½ ȸ¿¡ ´õ ÀÚ¼¼È÷ ¼³¸íÇÒ °ÍÀÌ´Ù.
          Áö±ÝÀº SSI·Î ÇÒ ¼ö ÀÖ´Â ¸î°¡Áö ¿¹¸¦ º¸ÀδÙ</p>
      
      <h3><a name="todaysdate" id="todaysdate">¿À´Ã ³¯Â¥</a></h3>
      
      <div class="example"><p><code>
              &lt;!--#echo var="DATE_LOCAL" --&gt;
      </code></p></div>
      
          <p><code>echo</code> element´Â º¯¼ö°ªÀ» ±×´ë·Î Ãâ·ÂÇÑ´Ù.
          CGI ÇÁ·Î±×·¥¿¡ Á¦°øÇϴ ȯ°æº¯¼öµé ¿Ü¿¡µµ ¿©·¯ Ç¥ÁØ º¯¼ö°¡
          ÀÖ´Ù. ¶Ç, <code>set</code> element¸¦ »ç¿ëÇÏ¿© Á÷Á¢ º¯¼ö¸¦
          Á¤ÀÇÇÒ ¼öµµ ÀÖ´Ù.</p>
      
          <p>³¯Â¥ Ãâ·Â Çü½ÄÀÌ ¸¶À½¿¡ µéÁö ¾Ê´Â´Ù¸é, ´ÙÀ½°ú °°ÀÌ
          <code>config</code> elementÀÇ <code>timefmt</code> attribute¸¦
          »ç¿ëÇÑ´Ù.</p>
      
      <div class="example"><p><code>
              &lt;!--#config timefmt="%A %B %d, %Y" --&gt;<br />
              Today is &lt;!--#echo var="DATE_LOCAL" --&gt;
      </code></p></div>
      
      
      <h3><a name="lastmodified" id="lastmodified">ÆÄÀÏÀÇ ¼öÁ¤ÀÏ</a></h3>
      
      <div class="example"><p><code>
              ÀÌ ¹®¼­´Â &lt;!--#flastmod file="index.html" --&gt;¿¡ ¸¶Áö¸·À¸·Î ¼öÁ¤µÇ¾ú´Ù
      </code></p></div>
      
          <p>ÀÌ elementµµ <code>timefmt</code> Çü½Ä ¼³Á¤¿¡ ´Þ·È´Ù.</p>
      
      
      <h3><a name="cgi" id="cgi">CGI ÇÁ·Î±×·¥ °á°ú¸¦ Æ÷ÇÔÇϱâ</a></h3>
      
          <p>ÀϹÝÀûÀÎ SSI »ç¿ë¹ýÁß Çϳª·Î, ¸¹ÀÌµé ¾Ö¿ëÇÏ´Â ``¹æ¹®¼ö
          Ä«¿îÅÍ'' °°Àº CGI ÇÁ·Î±×·¥ °á°ú¸¦ Ãâ·ÂÇÑ´Ù.</p>
      
      <div class="example"><p><code>
              &lt;!--#include virtual="/cgi-bin/counter.pl" --&gt;
      </code></p></div>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="additionalexamples" id="additionalexamples">Ãß°¡ ¿¹Á¦</a></h2>
      
      
          <p>´ÙÀ½Àº HTML ¹®¼­¿¡ »ç¿ëÇÒ ¼ö ÀÖ´Â ¸î°¡Áö SSI ¿¹Á¦´Ù.</p>
      
      <h3><a name="docmodified" id="docmodified">ÀÌ ¹®¼­°¡ ¾ðÁ¦ ¸¶Áö¸·À¸·Î
      ¼öÁ¤µÇ¾ú³ª?</a></h3>
      
          <p>¾Õ¿¡¼­ SSI¸¦ »ç¿ëÇÏ¿© »ç¿ëÀÚ¿¡°Ô ¹®¼­ÀÇ ÃÖ±Ù¼öÁ¤ÀÏÀ»
          ¾Ë¸± ¼ö ÀÖ´Ù°í ¸»Çß´Ù. ±×·¯³ª ½ÇÁ¦ ¹æ¹ýÀº ¾Ë·ÁÁÖÁö ¾Ê¾Ò´Ù.
          ´ÙÀ½ Äڵ带 HTML ¹®¼­¿¡ »ç¿ëÇÏ¸é ÆäÀÌÁö¿¡ ½Ã°£ ±â·ÏÀ» ³²±ä´Ù.
          ¹°·Ð À§¿¡¼­ ¼³¸íÇÑ´ë·Î SSI°¡ ¿Ã¹Ù·Î ÀÛµ¿ÇØ¾ß ÇÑ´Ù.</p>
      <div class="example"><p><code>
              &lt;!--#config timefmt="%A %B %d, %Y" --&gt;<br />
              ÀÌ ¹®¼­´Â &lt;!--#flastmod file="ssi.shtml" --&gt;¿¡ ¸¶Áö¸·À¸·Î ¼öÁ¤µÇ¾ú´Ù;
      </code></p></div>
      
          <p>¹°·Ð <code>ssi.shtml</code>´ë½Å ¿øÇÏ´Â ½ÇÁ¦ ÆÄÀϸíÀ»
          »ç¿ëÇÑ´Ù. ¾Æ¹« ÆäÀÌÁö¿¡¶óµµ ºÙ¿©³ÖÀ» ¼ö ÀÖ´Â ¹ü¿ëÄڵ带
          ¿øÇÑ´Ù¸é, ÆÄÀÏ¸í ´ë½Å <code>LAST_MODIFIED</code> º¯¼ö¸¦
          »ç¿ëÇÑ´Ù.</p>
      <div class="example"><p><code>
              &lt;!--#config timefmt="%D" --&gt;<br />
              This file last modified &lt;!--#echo var="LAST_MODIFIED" --&gt;
      </code></p></div>
      
          <p><code>timefmt</code> Çü½Ä¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ Á¤º¸´Â °Ë»ö¿£Áø¿¡¼­
          <code>strftime</code>À» ã¾ÆºÁ¶ó. ¹®¹ýÀº °°´Ù.</p>
      
      
      <h3><a name="standard-footer" id="standard-footer">Ç¥ÁØ ÆäÀÌÁö ÇÏ´ÜÀ» Æ÷ÇÔÇϱâ</a></h3>
      
      
          <p>¿©·¯ ÆäÀÌÁö°¡ ÀÖ´Â »çÀÌÆ®¸¦ °ü¸®ÇÑ´Ù¸é ÆäÀÌÁö Àüü¸¦
          ¼öÁ¤ÇÏ´Â °ÍÀº, ƯÈ÷ ÆäÀÌÁöµéÀÌ Ç¥ÁØ ¿Ü°üÀ» °¡Áöµµ·Ï ¼öÁ¤ÇÏ´Â
          °ÍÀº Á¤¸»·Î ±«·Ó´Ù.</p>
      
          <p>ÆäÀÌÁö »ó´Ü(header)°ú ÇÏ´Ü(footer)À» ÆÄÀÏ·Î Æ÷ÇÔÇÏ¿©
          ÀÌ·± ¼öÁ¤ÀÇ ºÎ´ãÀ» ´ú ¼ö ÀÖ´Ù. ¸ðµç ÆäÀÌÁö¿¡¼­
          <code>include</code> SSI ¸í·É¾î¸¦ »ç¿ëÇÏ¿© ÆäÀÌÁö ÇÏ´Ü ÆÄÀÏ
          Çϳª¸¦ Æ÷ÇÔÇÏ¸é µÈ´Ù. <code>include</code> elementÀÇ
          <code>file</code> attribute³ª <code>virtual</code> attribute·Î
          Æ÷ÇÔÇÒ ÆÄÀÏÀ» ÁöÁ¤ÇÑ´Ù. <code>file</code> attribute´Â <em>ÇöÀç
          µð·ºÅ丮¿¡ »ó´ëÀûÀÎ</em> ÆÄÀϰæ·Î´Ù. Áï, (/·Î ½ÃÀÛÇÏ´Â)
          Àý´ëÆÄÀϰæ·Î³ª °æ·Î ¾È¿¡ ../¸¦ »ç¿ëÇÒ ¼ö ¾ø´Ù. ¾Æ¸¶µµ ¼­ºñ½ºÇÏ´Â
          ¹®¼­ÀÇ »ó´ë URLÀ» ÁöÁ¤ÇÒ ¼ö ÀÖ´Â <code>virtual</code> attribute°¡
          ´õ À¯¿ëÇÒ °ÍÀÌ´Ù. °æ·Î¸¦ /·Î ½ÃÀÛÇÒ ¼ö ÀÖÁö¸¸, Æ÷ÇÔÇÏ·Á´Â
          ÆÄÀÏÀÌ ¼­ºñ½ºÇÏ´Â ÆÄÀϰú °°Àº ¼­¹ö¿¡ ÀÖ¾î¾ß ÇÑ´Ù.</p>
      <div class="example"><p><code>
              &lt;!--#include virtual="/footer.html" --&gt;
      </code></p></div>
      
          <p>³ª´Â º¸Åë ÀÌ µÎ°¡Áö¸¦ ÇÕÃļ­ Æ÷ÇÔÇÒ ÆäÀÌÁö ÇÏ´Ü ÆÄÀÏ¿¡
          <code>LAST_MODIFIED</code> Áö½Ã¾î¸¦ ³Ö´Â´Ù. Æ÷ÇÔÇÏ·Á´Â ÆÄÀÏ¿¡µµ
          SSI Áö½Ã¾î°¡ ³ª¿Ã ¼ö ÀÖÀ¸¸ç, ÀÌ·¸°Ô Æ÷ÇÔÇÑ ÆÄÀÏÀÌ ´Ù¸¥ ÆÄÀÏÀ»
          Æ÷ÇÔÇÏ´Â ½ÄÀ¸·Î ¿©·¯¹ø °è¼Ó Æ÷ÇÔÇÒ ¼öµµ ÀÖ´Ù.</p>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="config" id="config">À̿ܿ¡ ¼³Á¤ÇÒ ¼ö ÀÖ´Â °ÍÀº?</a></h2>
      
      
          <p>½Ã°£ Çü½Ä <code>config</code>(¼³Á¤) ¿Ü¿¡ µÎ°¡Áö¸¦ ´õ
          <code>config</code>(¼³Á¤)ÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>º¸Åë SSI Áö½Ã¾î°¡ À߸øµÇ¸é ´ÙÀ½°ú °°Àº ¹®±¸°¡ ³ª¿Â´Ù</p>
      <div class="example"><p><code>
              [an error occurred while processing this directive]
      </code></p></div>
      
          <p>ÀÌ ¹®±¸¸¦ º¯°æÇÏ°í ½Í´Ù¸é <code>config</code> elementÀÇ
          <code>errmsg</code> attribute¸¦ »ç¿ëÇÏ¿© º¯°æÇÑ´Ù.</p>
      <div class="example"><p><code>
              &lt;!--#config errmsg="[It appears that you don't know how to use SSI]" --&gt;
      </code></p></div>
      
          <p>»çÀÌÆ®¸¦ ¼­ºñ½ºÇϱâ Àü¿¡ ¸ðµç SSI Áö½Ã¾î ¹®Á¦¸¦ ÇØ°áÇÏ¿©
          »ç¿ëÀÚ°¡ ÀÌ·± ¹®±¸¸¦ º¸Áö ¾Ê±æ ¹Ù¶õ´Ù. (±×·¸Áö?)</p>
      
          <p>±×¸®°í <code>sizefmt</code> attribute°¡ ¹ÝȯÇÏ´Â ÆÄÀÏÅ©±â
          Çü½ÄÀ» <code>config</code>(¼³Á¤)ÇÒ ¼ö ÀÖ´Ù. ¹ÙÀÌÆ®·Î Å©±â¸¦
          º¸¿©ÁÖ·Á¸é <code>bytes</code>, ÀûÀýÈ÷ Kb³ª Mb·Î Å©±â¸¦
          º¸¿©ÁÖ·Á¸é <code>abbrev</code>¸¦ »ç¿ëÇÑ´Ù.</p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exec" id="exec">¸í·É¾î ½ÇÇàÇϱâ</a></h2>
          
      
          <p>³ª´Â ´ÙÀ½ ´Þ¿¡ ÀÛÀº CGI ÇÁ·Î±×·¥°ú SSI¸¦ °°ÀÌ »ç¿ëÇÏ´Â
          ±ÛÀ» ¾µ ¿¹Á¤ÀÌ´Ù. Áö±ÝÀº <code>exec</code> element·Î ÇÒ
          ¼ö ÀÖ´Â ´Ù¸¥ °ÍµéÀ» ¼³¸íÇÒ °ÍÀÌ´Ù. SSI´Â ½ÇÁ¦ ½©À» (Á¤È®È÷´Â
          <code>/bin/sh</code>³ª Win32¸¦ »ç¿ëÇÑ´Ù¸é DOS ½©) »ç¿ëÇÏ¿©
          ¸í·É¾î¸¦ ½ÇÇàÇÑ´Ù. ¿¹¸¦ µé¾î, ´ÙÀ½Àº µð·ºÅ丮 ¸ñ·ÏÀ» º¸¿©ÁØ´Ù.</p>
      <div class="example"><p><code>
              &lt;pre&gt;<br />
              &lt;!--#exec cmd="ls" --&gt;<br />
              &lt;/pre&gt;
      </code></p></div>
      
          <p>or, on Windows</p>
      <div class="example"><p><code>
              &lt;pre&gt;<br />
              &lt;!--#exec cmd="dir" --&gt;<br />
              &lt;/pre&gt;
      </code></p></div>
      
          <p><code>dir</code> Ãâ·Â¿¡ ºê¶ó¿ìÀú°¡ È¥µ¿ÇÒ
          ``&lt;<code>dir</code>&gt;'' ¹®ÀÚ¿­ÀÌ Æ÷ÇÔµÇÀֱ⶧¹®¿¡,
          À©µµ¿ìÁî¿¡¼­ ÀÌ Áö½Ã¾î¸¦ »ç¿ëÇÏ¸é °á°ú°¡ Á¶±Ý ÀÌ»óÇÒ °ÍÀÌ´Ù.</p>
      
          <p>ÀÌ ±â´ÉÀº <code>exec</code> ű׿¡ »ç¿ëÇÑ ¾î¶² ¸í·É¾î¶óµµ
          ½ÇÇàÇÒ ¼ö Àֱ⶧¹®¿¡ ¸Å¿ì À§ÇèÇÏ´Ù. ``¹æ¸í·Ï''°ú °°ÀÌ »ç¿ëÀÚ°¡
          À¥ÆäÀÌÁö ³»¿ëÀ» ¼öÁ¤ÇÒ ¼ö Àִ ȯ°æÀ̶ó¸é, ÀÌ ±â´ÉÀ» Àý´ë·Î
          »ç¿ëÇØ¼± ¾ÈµÈ´Ù. <code>Options</code> Áö½Ã¾î¿¡
          <code>IncludesNOEXEC</code> ¾Æ±Ô¸ÕÆ®¸¦ »ç¿ëÇÏ¿© SSI¸¦ Çã¿ëÇÏÁö¸¸
          <code>exec</code> ±â´ÉÀ» ¸·À» ¼ö ÀÖ´Ù.</p> 
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="advanced" id="advanced">°í±Þ SSI ±â¹ý</a></h2>
      
      
          <p>³»¿ëÀ» Ãâ·ÂÇÏ´Â ±â´É ¿Ü¿¡ ¾ÆÆÄÄ¡ SSI´Â º¯¼ö ¼³Á¤ÀÌ °¡´ÉÇϰí,
          ºñ±³¹®°ú Á¶°Ç¹®¿¡ ÀÌ º¯¼ö¸¦ »ç¿ëÇÒ ¼ö ÀÖ´Ù.</p>
      
      <h3><a name="caveat" id="caveat">°æ°í</a></h3>
      
          <p>ÀÌ ±Û¿¡¼­ ¼³¸íÇÏ´Â ´ëºÎºÐÀÇ ±â´ÉÀº ¾ÆÆÄÄ¡ 1.2 ÀÌÈĺÎÅÍ
          »ç¿ëÇÒ ¼ö ÀÖ´Ù. ¹°·Ð, ¾ÆÆÄÄ¡ 1.2 ÀÌ»óÀ» »ç¿ëÇÏÁö ¾Ê´Â´Ù¸é
          ¾Æ¸¶µµ »¡¸® ¾÷±×·¹À̵åÇØ¾ß ÇÑ´Ù. ÇØ¶ó. Áö±Ý ÇØ¶ó. ±â´Ù¸±
          °ÍÀÌ´Ù.</p>
      
      
      <h3><a name="variables" id="variables">º¯¼ö ¼³Á¤</a></h3>
      
          <p><code>set</code> Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ³ªÁß¿¡ »ç¿ëÇÒ º¯¼ö¸¦
          ¼³Á¤ÇÒ ¼ö ÀÖ´Ù. ¾ÕÀ¸·Î º¯¼ö°¡ ÇÊ¿äÇϱ⶧¹®¿¡ ¸ÕÀú ¼³¸íÇÑ´Ù.
          ¹®¹ýÀº ´ÙÀ½°ú °°´Ù.</p>
      <div class="example"><p><code>
              &lt;!--#set var="name" value="Rich" --&gt;
      </code></p></div>
      
          <p>´ÙÀ½°ú °°ÀÌ °ªÀ» ¹®ÀÚ±×´ë·Î ¼³Á¤ÇÏÁö ¾Ê°í <a href="../env.html">ȯ°æº¯¼ö</a>³ª À§¿¡¼­ ¼³¸íÇÑ º¯¼ö(¿¹¸¦
          µé¾î, <code>LAST_MODIFIED</code>)¿Í °°ÀÌ ´Ù¸¥ º¯¼ö¸¦ »ç¿ëÇÏ¿©
          º¯¼ö°ªÀ» ¼³Á¤ÇÒ ¼öµµ ÀÖ´Ù. À̶§ º¯¼ö¸í ¾Õ¿¡ ´Þ·¯ Ç¥½Ã($)¸¦
          ºÙ¿©¼­ ¹®ÀÚ¿­ÀÌ ¾Æ´Ñ º¯¼öÀÓÀ» Ç¥½ÃÇÑ´Ù.</p>
      
          <div class="example"><p><code> &lt;!--#set var="modified" value="$LAST_MODIFIED" --&gt;
          </code></p></div>
      
          <p>º¯¼ö°ª¿¡ ´Þ·¯ ¹®ÀÚ¸¦ ±×´ë·Î ÀÔ·ÂÇÏ·Á¸é ´Þ·¯ Ç¥½Ã ¾Õ¿¡
          ¹é½½·¡½¬¸¦ »ç¿ëÇÑ´Ù.</p>
      <div class="example"><p><code>
              &lt;!--#set var="cost" value="\$100" --&gt;
      </code></p></div>
      
          <p>¸¶Áö¸·À¸·Î ±ä ¹®ÀÚ¿­ Áß°£¿¡ º¯¼ö¸¦ »ç¿ëÇϴµ¥ µÚ¿¡ ÀÖ´Â
          ¹®ÀÚµµ º¯¼ö¸íÀ¸·Î ¿ÀÀÎÇÏ¿© È¥µ¿µÇ´Â °æ¿ì, º¯¼ö¸íÀ» ´ë°ýÈ£·Î
          ¹­¾î¼­ È®½ÇÈ÷ ÇÑ´Ù. (ÁÁÀº ¿¹¸¦ ã±â ÈûµéÁö¸¸, ¹«½¼ ¸»ÀÎÁö
          ÀÌÇØÇÏ±æ ¹Ù¶õ´Ù.)</p>
      <div class="example"><p><code>
              &lt;!--#set var="date" value="${DATE_LOCAL}_${DATE_GMT}" --&gt;
      </code></p></div>
      
      
      <h3><a name="conditional" id="conditional">Á¶°Ç Ç¥Çö½Ä</a></h3>
      
      
          <p>º¯¼ö¸¦ ¼³Á¤ÇÏ°í ºñ±³ÇÒ ¼ö ÀÖÀ¸´Ï Á¶°Ç¹®ÀÌ °¡´ÉÇÏ´Ù. ÀÌÁ¦
          SSI°¡ ÀÏÁ¾ÀÇ °£´ÜÇÑ ÇÁ·Î±×·¡¹Ö¾ð¾î°¡ µÈ´Ù.
          <code class="module"><a href="../mod/mod_include.html">mod_include</a></code>´Â Á¶°Ç¹®À» ¸¸µå´Â <code>if</code>,
          <code>elif</code>, <code>else</code>, <code>endif</code>
          ±¸Á¶¸¦ Á¦°øÇÑ´Ù. ½ÇÁ¦ ÇÑ ÆäÀÌÁö·Î ¿©·¯ ³í¸®ÀûÀÎ ÆäÀÌÁö¸¦
          ¸¸µé ¼ö ÀÖ´Ù.</p>
      
          <p>Á¶°Ç¹® ±¸Á¶´Â ´ÙÀ½°ú °°´Ù.</p>
      <div class="example"><p><code>
          &lt;!--#if expr="test_condition" --&gt;<br />
          &lt;!--#elif expr="test_condition" --&gt;<br />
          &lt;!--#else --&gt;<br />
          &lt;!--#endif --&gt;
      </code></p></div>
      
          <p><em>test_condition</em>¿¡´Â ¾î¶² ³í¸®ºñ±³¶óµµ »ç¿ëÇÒ
          ¼ö ÀÖ´Ù. °ªÀ» ´Ù¸¥ °ª°ú ºñ±³Çϰųª, ƯÁ¤ °ªÀÌ ``Âü''ÀÎÁö
          °Ë»çÇÑ´Ù. (¹®ÀÚ¿­ÀÌ ºñ¾îÀÖÁö ¾ÊÀ¸¸é ÂüÀÌ´Ù.) »ç¿ë°¡´ÉÇÑ
          ºñ±³ ¿¬»êÀÚ¸¦ ¸ðµÎ º¸·Á¸é, <code class="module"><a href="../mod/mod_include.html">mod_include</a></code>
          ¹®¼­¸¦ Âü°íÇ϶ó. ´ÙÀ½Àº Á¶°Ç¹®À» »ç¿ëÇÑ ¸î°¡Áö ¿¹Á¦´Ù.</p>
      
          <p>¼³Á¤ÆÄÀÏ¿¡ ´ÙÀ½ ÁÙÀ» Ãß°¡ÇÑ´Ù.</p>
      <div class="example"><p><code>
              BrowserMatchNoCase macintosh Mac<br />
              BrowserMatchNoCase MSIE InternetExplorer
      </code></p></div>
      
          <p>Ŭ¶óÀÌ¾ðÆ®°¡ ¸ÆÅ²Åä½Ã¿¡¼­ ½ÇÇàÇÏ´Â Internet Explorer¶ó¸é
          ȯ°æº¯¼ö ``Mac''°ú ``InternetExplorer'' ¸ðµÎ ÂüÀ¸·Î ¼³Á¤ÇÑ´Ù.</p>
      
          <p>±×¸®°í SSI ¹®¼­¿¡ ´ÙÀ½°ú °°ÀÌ Àû´Â´Ù.</p>
      <div class="example"><p><code>
              &lt;!--#if expr="${Mac} &amp;&amp; ${InternetExplorer}" --&gt;<br />
              ¿©±â¿¡ »ç°ú¹®°¡ ³ª¿Â´Ù<br />
              &lt;!--#else --&gt;<br />
              ¿©±â¿¡ ¸ÚÁø JavaScript Äڵ尡 ³ª¿Â´Ù<br />
              &lt;!--#endif --&gt;
      </code></p></div>
      
          <p>³»°¡ ¸ÅŲÅä½Ã IE¿¡ ¹Ý°¨ÀÌ ÀÖ´Â °ÍÀº ¾Æ´Ï´Ù. ³ª´Â ´ÜÁö
          Àú¹øÁÖ¿¡ ´Ù¸¥ °÷¿¡¼­´Â ¹®Á¦°¡ ¾ø´Â JavaScript Äڵ尡 ¸ÅŲÅä½Ã
          IE¿¡¼­´Â µ¿ÀÛÇÏÁö ¾Ê¾Æ¼­ ¸î½Ã°£À» °í»ýÇß´Ù. À§´Â ÀÓ½Ã
          ÇØ°áÃ¥ÀÌ´Ù.</p>
      
          <p>(Á÷Á¢ Á¤ÀÇÇÏ¿´°Ç ÀÏ¹Ý È¯°æº¯¼öÀ̰Ç) ¾î¶² º¯¼ö¶óµµ Á¶°Ç¹®¿¡
          »ç¿ëÇÒ ¼ö ÀÖ´Ù. ¾Æ¶óÄ¡´Â <code>SetEnvIf</code>³ª ´Ù¸¥ °ü·Ã
          Áö½Ã¾î·Î ȯ°æº¯¼ö¸¦ ¼³Á¤ÇÒ ¼ö Àֱ⶧¹®¿¡ CGI ¾øÀ̵µ ¸ÚÁö°Ô
          µ¿ÀûÀÎ ³»¿ëÀ» ¸¸µé ¼ö ÀÖ´Ù.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="conclusion" id="conclusion">°á·Ð</a></h2>
      
          <p>SSI´Â È®½ÇÈ÷ CGI³ª µ¿ÀûÀÎ À¥ÆäÀÌÁö¸¦ »ý¼ºÇÏ´Â ´Ù¸¥ ±â¼úÀ»
          ´ëüÇÒ ¼ö ¾ø´Ù. ±×·¯³ª ¸¹Àº Ãß°¡ ÀÛ¾÷¾øÀÌ ÆäÀÌÁö¿¡ µ¿ÀûÀÎ
          ³»¿ëÀ» Á¶±Ý Ãß°¡Çϱ⿡´Â ÈǸ¢ÇÑ ¹æ¹ýÀÌ´Ù.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/howto/ssi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/ssi.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/ssi.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/ssi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/ssi.html" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/ssi.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/public_html.html.es��������������������������������������������������0000644�0000000�0000050�00000033524�13412755316�020415� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Directorios web por usuario - Servidor HTTP Apache Versión 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="../">Versión 2.4</a> &gt; <a href="./">How-To / Tutorials</a></div><div id="page-content"><div id="preamble"><h1>Directorios web por usuario</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/public_html.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/public_html.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/public_html.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/public_html.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/public_html.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/public_html.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      	<p>En sistemas con múltiples usuarios, cada usuario puede tener un website 
          en su directorio home usando la directiva <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>. Los visitantes de una URL 
          <code>http://example.com/~username/</code> recibirán el contenido del 
          directorio home del usuario "<code>username</code>", en el subdirectorio 
          especificado por la directiva <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>.</p>
      
      	<p>Tenga en cuenta que, por defecto, el acceso a estos directorios 
          <strong>NO</strong> está activado. Puede permitir acceso cuando usa 
          <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> quitando el comentario de la línea:</p>
      
          <pre class="prettyprint lang-config">#Include conf/extra/httpd-userdir.conf</pre>
      
      
          <p>En el fichero por defecto de configuración <code>conf/httpd.conf</code>, 
          y adaptando el fichero <code>httpd-userdir.conf</code> según sea necesario, 
          o incluyendo las directivas apropiadas en un bloque 
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> dentro del fichero 
          principal de configuración.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Directorios web por usuario</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#userdir">Configurando la ruta del fichero con UserDir</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#redirect">Redirigiendo a URLs externas</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#enable">Restringiendo qué usuarios pueden usar esta característica</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cgi">Activando un directorio cgi para cada usuario</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#htaccess">Permitiendo a usuarios cambiar la configuración</a></li>
      </ul><h3>Consulte también</h3><ul class="seealso"><li><a href="../urlmapping.html">Mapeando URLs al sistema de ficheros</a></li><li><a href="#comments_section">Comentarios</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Directorios web por usuario</a></h2>
          
          <table class="related"><tr><th>Módulos Relacionados</th><th>Directivas Relacionadas</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_userdir.html">mod_userdir</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code></li><li><code class="directive"><a href="../mod/core.html#directorymatch">DirectoryMatch</a></code></li><li><code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code></li></ul></td></tr></table>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="userdir" id="userdir">Configurando la ruta del fichero con UserDir</a></h2>
          
      
          <p>La directiva <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>
          especifica un directorio del que cargar contenido por usuario. Esta directiva 
          puede tener muchas formas distintas.</p>
      
          <p>Si se especifica una ruta que no empieza con una barra ("/"), se asume que 
            va a ser una ruta de directorio relativa al directorio home del usuario 
            especificado. Dada ésta configuración:</p>
      
          <pre class="prettyprint lang-config">UserDir public_html</pre>
      
      
          <p>La URL <code>http://example.com/~rbowen/file.html</code> se traducirá en 
          la ruta del fichero <code>/home/rbowen/public_html/file.html</code></p>
      
          <p>Si la ruta que se especifica comienza con una barra ("/"), la ruta del 
            directorio se construirá usando esa ruta, más el usuario especificado en la 
            configuración:</p>
      
          <pre class="prettyprint lang-config">UserDir /var/html</pre>
      
      
          <p>La URL <code>http://example.com/~rbowen/file.html</code> se traducirá en 
          la ruta del fichero <code>/var/html/rbowen/file.html</code></p>
      
          <p>Si se especifica una ruta que contiene un asterisco (*), se usará una ruta 
            en la que el asterisco se reemplaza con el nombre de usuario. Dada ésta configuración:</p>
      
          <pre class="prettyprint lang-config">UserDir /var/www/*/docs</pre>
      
      
          <p>La URL <code>http://example.com/~rbowen/file.html</code> se traducirá en 
          la ruta del fichero <code>/var/www/rbowen/docs/file.html</code></p>
      
          <p>También se pueden configurar múltiples directorios o rutas de directorios.</p>
      
          <pre class="prettyprint lang-config">UserDir public_html /var/html</pre>
      
      
          <p>Para la URL <code>http://example.com/~rbowen/file.html</code>,
          Apache buscará <code>~rbowen</code>. Si no lo encuentra, Apache buscará
          <code>rbowen</code> en <code>/var/html</code>. Si lo encuentra, la URL de más 
          arriba se traducirá en la ruta del fichero 
          <code>/var/html/rbowen/file.html</code></p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="redirect" id="redirect">Redirigiendo a URLs externas</a></h2>
          
          <p>La directiva <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> puede 
          usarse para redirigir solcitudes de directorios de usuario a URLs externas.</p>
      
          <pre class="prettyprint lang-config">UserDir http://example.org/users/*/</pre>
      
      
          <p>El ejemplo de aquí arriba redirigirá una solicitud para
          <code>http://example.com/~bob/abc.html</code> hacia
          <code>http://example.org/users/bob/abc.html</code>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="enable" id="enable">Restringiendo qué usuarios pueden usar esta característica</a></h2>
          
      
          <p>Usando la sintaxis que se muestra en la documentación de UserDir, usted 
            puede restringir a qué usuarios se les permite usar esta funcionalidad:</p>
      
          <pre class="prettyprint lang-config">UserDir disabled root jro fish</pre>
      
      
          <p>La configuración de aquí arriba permitirá a todos los usuarios excepto a 
            los que se listan con la declaración <code>disabled</code>. Usted puede, 
            del mismo modo, deshabilitar esta característica para todos excepto algunos 
            usuarios usando una configuración como la siguiente:</p>
      
          <pre class="prettyprint lang-config">UserDir disabled
      UserDir enabled rbowen krietz</pre>
      
      
          <p>Vea la documentación de <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> para más 
          ejemplos.</p>
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cgi" id="cgi">Activando un directorio cgi para cada usuario</a></h2>
        
      
         <p>Para dar a cada usuario su propio directorio cgi-bin, puede usar una directiva 
         	<code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code>
         para activar cgi en un subdirectorio en particular del directorio home del usuario.</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/home/*/public_html/cgi-bin/"&gt;
          Options ExecCGI
          SetHandler cgi-script
      &lt;/Directory&gt;</pre>
      
      
          <p>Entonces, asumiendo que <code>UserDir</code> está configurado con la 
          declaración <code>public_html</code>, un programa cgi <code>example.cgi</code> 
          podría cargarse de ese directorio así:</p>
      
          <div class="example"><p><code>
          http://example.com/~rbowen/cgi-bin/example.cgi
          </code></p></div>
      
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="htaccess" id="htaccess">Permitiendo a usuarios cambiar la configuración</a></h2>
          
      
          <p>Si quiere permitir que usuarios modifiquen la configuración del servidor en 
          	su espacio web, necesitarán usar ficheros <code>.htaccess</code> para hacer 
          	estos cambios. Asegúrese de tener configurado <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> con un valor suficiente que permita a 
          los usuarios modificar las directivas que quiera permitir. 
          Vea el <a href="htaccess.html">tutorial de .htaccess</a> para obtener detalles adicionales sobre cómo funciona.</p>
      
        </div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/public_html.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/public_html.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/public_html.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/public_html.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/public_html.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/public_html.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentarios</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/public_html.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/index.html.zh-cn.utf8������������������������������������������������0000644�0000000�0000050�00000014736�13412755316�020523� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="zh-cn" xml:lang="zh-cn"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>å¸¸è§æ“作/教程 - Apache HTTP æœåС噍 版本 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">模å—</a> | <a href="../mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="../glossary.html">术语</a> | <a href="../sitemap.html">网站导航</a></p>
      <p class="apache">Apache HTTP æœåŠ¡å™¨ç‰ˆæœ¬ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP æœåС噍</a> &gt; <a href="http://httpd.apache.org/docs/">文档</a> &gt; <a href="../">版本 2.4</a></div><div id="page-content"><div id="preamble"><h1>å¸¸è§æ“作/教程</h1>
      <div class="toplang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="../en/howto/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/howto/" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">此翻译å¯èƒ½è¿‡æœŸã€‚è¦äº†è§£æœ€è¿‘的更改,请阅读英文版。</div>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="howto" id="howto">å¸¸è§æ“作/教程</a></h2>
      
          
      
          <dl>
            <dt>认è¯ä¸ŽæŽˆæƒ</dt>
            <dd>
              <p>è®¤è¯æ˜¯ä½ éªŒè¯æŸäººæ˜¯æ‰€å£°ç§°çš„人。
              æŽˆæƒæ˜¯å…许æŸäººæ‰§è¡Œä»–想è¦çš„æ“ä½œï¼Œæˆ–è€…èŽ·å¾—æƒ³è¦çš„ä¿¡æ¯ã€‚</p>
      
              <p>å‚è§: <a href="auth.html">认è¯ï¼ŒæŽˆæƒä¸Žè®¿é—®æŽ§åˆ¶</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>访问控制</dt>
            <dd>
              <p>访问控制是æ“作é™åˆ¶ï¼Œæˆ–åŸºäºŽä»»æ„æ¡ä»¶è®¿é—®èµ„æºã€‚è¿™å¯ä»¥é€šè¿‡å¤šç§æ–¹æ³•完æˆã€‚</p>
      
              
            </dd>
          </dl>
      
         <dl>
            <dt>CGI 与动æ€å†…容</dt>
            <dd>
              <p>CGI (通用网管接å£) 为 web æœåŠ¡å™¨å®šä¹‰äº†ä¸Žå¤–éƒ¨çš„å†…å®¹ç”Ÿæˆç¨‹åºçš„æ“ä½œæŽ¥å£ï¼Œ
              通常称为 CGI ç¨‹åºæˆ– CGI 脚本。它是在 web 站点放入动æ€å†…容的最简å•,
              也最常用的方法。 本文简å•介ç»äº†åœ¨ Apache æœåС噍䏭é…ç½® CGI 的方法,
              以åŠå¦‚何编写 CGI 程åºã€‚</p>
      
              <p>å‚è§: <a href="cgi.html">CGI 与动æ€å†…容</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt><code>.htaccess</code> 文件</dt>
            <dd>
              <p><code>.htaccess</code> files provide a way to make configuration
              changes on a per-directory basis. A file, containing one or more
              configuration directives, is placed in a particular document directory,
              and the directives apply to that directory, and all subdirectories thereof.</p>
      
              <p>See: <a href="htaccess.html"><code>.htaccess</code> files</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>æœåŠ¡å™¨ç«¯æ’入简介</dt>
            <dd>
              <p>SSI (æœåŠ¡å™¨ç«¯æ’å…¥) 是在 HTML 页é¢ä¸­æ”¾å…¥çš„æŒ‡ä»¤ï¼Œåœ¨é¡µé¢è¢«è®¿é—®çš„æ—¶å€™æ‰§è¡Œã€‚
              它å…许你在现有的 HTML 页é¢å¢žåŠ åŠ¨æ€ç”Ÿæˆçš„内容,ä¸éœ€è¦é€šè¿‡ CGI
              ç¨‹åºæˆ–其它动æ€è®¡æ•°æ¥ç”Ÿæˆæ•´ä¸ªé¡µé¢ã€‚</p>
      
              <p>å‚è§: <a href="ssi.html">æœåŠ¡å™¨ç«¯æ’å…¥ (SSI)</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>用户ç§äººç½‘站目录</dt>
            <dd>
              <p>在有多个用户的系统中,使用 <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> 指令,å¯ä»¥å…许æ¯ä¸ªç”¨æˆ·åœ¨ä»–们的根目录中都有一个
              web 站点。 访问 URL <code>http://example.com/~username/</code> 会得到ä½äºŽç”¨æˆ·
              "<code>username</code>" 根目录中由 <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> 指定的å­ç›®å½•中的内容。</p>
      
              <p>å‚è§: <a href="public_html.html">用户ç§äººç½‘站目录 (<code>public_html</code>)</a></p>
            </dd>
          </dl>
      
        </div></div>
      <div class="bottomlang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="../en/howto/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/howto/" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />基于 <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> 许å¯è¯.</p>
      <p class="menu"><a href="../mod/">模å—</a> | <a href="../mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="../glossary.html">术语</a> | <a href="../sitemap.html">网站导航</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������httpd-2.4.41/docs/manual/howto/index.html�����������������������������������������������������������0000644�0000000�0000050�00000001053�13362070302�016571� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: index.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: index.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: index.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: index.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: index.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: index.html.zh-cn.utf8
      Content-Language: zh-cn
      Content-type: text/html; charset=UTF-8
      �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/auth.html.es���������������������������������������������������������0000644�0000000�0000050�00000121413�13412755316�017047� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Autenticación y Autorización - Servidor HTTP Apache Versión 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="../">Versión 2.4</a> &gt; <a href="./">How-To / Tutoriales</a></div><div id="page-content"><div id="preamble"><h1>Autenticación y Autorización</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/auth.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/auth.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/auth.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/auth.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/auth.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/auth.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Autenticación es cualquier proceso por el cuál se verifica que uno es 
          quien dice ser. Autorización es cualquier proceso en el cuál cualquiera
          está permitido a estar donde se quiera, o tener información la cuál se
          quiera tener.
          </p>
      
          <p>Para información de control de acceso de forma genérica visite<a href="access.html">How to de Control de Acceso</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Módulos y Directivas Relacionados</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#introduction">Introducción</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#theprerequisites">Los Prerequisitos</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#gettingitworking">Conseguir que funcione</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#lettingmorethanonepersonin">Dejar que más de una persona 
      	entre</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#possibleproblems">Posibles Problemas</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#dbmdbd">Método alternativo de almacenamiento de las 
      	contraseñas</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#multprovider">Uso de múltiples proveedores</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#beyond">Más allá de la Autorización</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#socache">Cache de Autenticación</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#moreinformation">Más información</a></li>
      </ul><h3>Consulte también</h3><ul class="seealso"><li><a href="#comments_section">Comentarios</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Módulos y Directivas Relacionados</a></h2>
      
      <p>Hay tres tipos de módulos involucrados en los procesos de la autenticación 
      	y autorización. Normalmente deberás escoger al menos un módulo de cada grupo.</p>
      
      <ul>
        <li>Modos de Autenticación (consulte la directiva
            <code class="directive"><a href="../mod/mod_authn_core.html#authtype">AuthType</a></code> )
          <ul>
            <li><code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code></li>
            <li><code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code></li>
          </ul>
        </li>
        <li>Proveedor de Autenticación (consulte la directiva
        <code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code> y
        <code class="directive"><a href="../mod/mod_auth_digest.html#authdigestprovider">AuthDigestProvider</a></code>)
      
          <ul>
            <li><code class="module"><a href="../mod/mod_authn_anon.html">mod_authn_anon</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_file.html">mod_authn_file</a></code></li>
            <li><code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></li>
            <li><code class="module"><a href="../mod/mod_authn_socache.html">mod_authn_socache</a></code></li>
          </ul>
        </li>
        <li>Autorización (consulte la directiva
            <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>)
          <ul>
            <li><code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_dbd.html">mod_authz_dbd</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_dbm.html">mod_authz_dbm</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_groupfile.html">mod_authz_groupfile</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_owner.html">mod_authz_owner</a></code></li>
            <li><code class="module"><a href="../mod/mod_authz_user.html">mod_authz_user</a></code></li>
          </ul>
        </li>
      </ul>
      
        <p>A parte de éstos módulos, también están
        <code class="module"><a href="../mod/mod_authn_core.html">mod_authn_core</a></code> y
        <code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code>. Éstos módulos implementan las directivas 
        esenciales que son el centro de todos los módulos de autenticación.</p>
      
        <p>El módulo <code class="module"><a href="../mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code> es tanto un proveedor de 
        autenticación como de autorización. El módulo
        <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code> proporciona autorización y control de acceso
        basado en el nombre del Host, la dirección IP o características de la propia
        petición, pero no es parte del sistema proveedor de 
        autenticación. Para tener compatibilidad inversa con el mod_access, 
        hay un nuevo modulo llamado <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code>.</p>
      
        <p>También puedes mirar el how-to de <a href="access.html">Control de Acceso </a>, donde se plantean varias formas del control de acceso al servidor.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">Introducción</a></h2>
          <p>Si se tiene información en nuestra página web que sea información 
          	sensible o pensada para un grupo reducido de usuarios/personas,
          	las técnicas que se describen en este manual, le servirán  
          	de ayuda para asegurarse de que las personas que ven esas páginas sean 
          	las personas que uno quiere.</p>
      
          <p>Este artículo cubre la parte "estándar" de cómo proteger partes de un 
          	sitio web que muchos usarán.</p>
      
          <div class="note"><h3>Nota:</h3>
          <p>Si de verdad es necesario que tus datos estén en un sitio seguro, 
          	considera usar <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>  como método de autenticación adicional a cualquier forma de autenticación.</p>
          </div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="theprerequisites" id="theprerequisites">Los Prerequisitos</a></h2>
          <p>Las directivas que se usan en este artículo necesitaran ponerse ya sea 
          	en el fichero de configuración principal del servidor ( típicamente en 
          	la sección 
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> de httpd.conf ), o
          en cada uno de los ficheros de configuraciones del propio directorio
          (los archivos <code>.htaccess</code>).</p>
      
          <p>Si planea usar los ficheros <code>.htaccess</code> , necesitarás
          tener en la configuración global del servidor, una configuración que permita
          poner directivas de autenticación en estos ficheros. Esto se hace con la
          directiva <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>, la cual especifica
          que directivas, en su caso, pueden ser puestas en cada fichero de configuración
          por directorio.</p>
      
          <p>Ya que estamos hablando aquí de autenticación, necesitarás una directiva 
          	<code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> como la siguiente:
          	</p>
      
          <pre class="prettyprint lang-config">AllowOverride AuthConfig</pre>
      
      
          <p>O, si solo se van a poner las directivas directamente en la configuración
          	principal del servidor, deberás tener, claro está, permisos de escritura
          	en el archivo. </p>
      
          <p>Y necesitarás saber un poco de como está estructurado el árbol de 
          	directorios de tu servidor, para poder saber donde se encuentran algunos 
          	archivos. Esto no debería ser una tarea difícil, aún así intentaremos 
          	dejarlo claro llegado el momento de comentar dicho aspecto.</p>
      
          <p>También deberás de asegurarte de que los módulos 
          <code class="module"><a href="../mod/mod_authn_core.html">mod_authn_core</a></code> y <code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code>
          han sido incorporados, o añadidos a la hora de compilar en tu binario httpd o
          cargados mediante el archivo de configuración <code>httpd.conf</code>. Estos 
          dos módulos proporcionan directivas básicas y funcionalidades que son críticas
          para la configuración y uso de autenticación y autorización en el servidor web.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="gettingitworking" id="gettingitworking">Conseguir que funcione</a></h2>
          <p>Aquí está lo básico de cómo proteger con contraseña un directorio en tu
           servidor.</p>
      
          <p>Primero, necesitarás crear un fichero de contraseña. Dependiendo de que 
          	proveedor de autenticación se haya elegido, se hará de una forma u otra. Para empezar, 
          	usaremos un fichero de contraseña de tipo texto.</p>
      
          <p>Este fichero deberá estar en un sitio que no se pueda tener acceso desde
           la web. Esto también implica que nadie pueda descargarse el fichero de 
           contraseñas. Por ejemplo, si tus documentos están guardados fuera de
           <code>/usr/local/apache/htdocs</code>, querrás poner tu archivo de contraseñas en 
           <code>/usr/local/apache/passwd</code>.</p>
      
          <p>Para crear el fichero de contraseñas, usa la utilidad 
          	<code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> que viene con Apache. Esta herramienta se 
          	encuentra en el directorio <code>/bin</code> en donde sea que se ha 
          	instalado el Apache. Si ha instalado Apache desde un paquete de terceros, 
          	puede ser que se encuentre en su ruta de ejecución.</p>
      
          <p>Para crear el fichero, escribiremos:</p>
      
          <div class="example"><p><code>
            htpasswd -c /usr/local/apache/passwd/passwords rbowen
          </code></p></div>
      
          <p><code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> te preguntará por una contraseña, y después 
          te pedirá que la vuelvas a escribir para confirmarla:</p>
      
          <div class="example"><p><code>
            $ htpasswd -c /usr/local/apache/passwd/passwords rbowen<br />
            New password: mypassword<br />
            Re-type new password: mypassword<br />
            Adding password for user rbowen
          </code></p></div>
      
          <p>Si <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code> no está en tu variable de entorno "path" del 
          sistema, por supuesto deberás escribir la ruta absoluta del ejecutable para 
          poder hacer que se ejecute. En una instalación por defecto, está en:
          <code>/usr/local/apache2/bin/htpasswd</code></p>
      
          <p>Lo próximo que necesitas, será configurar el servidor para que pida una 
          	contraseña y así decirle al servidor que usuarios están autorizados a acceder.
          	Puedes hacer esto ya sea editando el fichero <code>httpd.conf</code>
          de configuración  o usando in fichero <code>.htaccess</code>. Por ejemplo, 
          si quieres proteger el directorio
          <code>/usr/local/apache/htdocs/secret</code>, puedes usar las siguientes 
          directivas, ya sea en el fichero <code>.htaccess</code> localizado en
          following directives, either placed in the file
          <code>/usr/local/apache/htdocs/secret/.htaccess</code>, o
          en la configuración global del servidor <code>httpd.conf</code> dentro de la
          sección &lt;Directory  
          "/usr/local/apache/htdocs/secret"&gt; , como se muestra a continuación:</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/usr/local/apache/htdocs/secret"&gt;
      AuthType Basic
      AuthName "Restricted Files"
      # (Following line optional)
      AuthBasicProvider file
      AuthUserFile "/usr/local/apache/passwd/passwords"
      Require user rbowen
      &lt;/Directory&gt;</pre>
      
      
          <p>Vamos a explicar cada una de las directivas individualmente.
          	La directiva <code class="directive"><a href="../mod/mod_authn_core.html#authtype">AuthType</a></code> selecciona el método
          que se usa para autenticar al usuario. El método más común es 
          <code>Basic</code>, y éste es el método que implementa 
          <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code>. Es muy importante ser consciente,
          de que la autenticación básica, envía las contraseñas desde el cliente 
          al servidor sin cifrar.
          Este método por tanto, no debe ser utilizado para proteger datos muy sensibles,
          a no ser que, este método de autenticación básica, sea acompañado del módulo
          <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>.
          Apache soporta otro método más de autenticación  que es del tipo 
          <code>AuthType Digest</code>. Este método, es implementado por el módulo <code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code> y con el se pretendía crear una autenticación más
          segura. Este ya no es el caso, ya que la conexión deberá realizarse con  <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> en su lugar.
          </p>
      
          <p>La directiva <code class="directive"><a href="../mod/mod_authn_core.html#authname">AuthName</a></code> 
          establece el <dfn>Realm</dfn> para ser usado en la autenticación. El 
          <dfn>Realm</dfn> tiene dos funciones principales.
          La primera, el cliente presenta a menudo esta información al usuario como 
          parte del cuadro de diálogo de contraseña. La segunda, que es utilizado por 
          el cliente para determinar qué contraseña enviar a para una determinada zona 
          de autenticación.</p>
      
          <p>Así que, por ejemple, una vez que el cliente se ha autenticado en el área de
          los <code>"Ficheros Restringidos"</code>, entonces re-intentará automáticamente
          la misma contraseña para cualquier área en el mismo servidor que es marcado 
          con el Realm de <code>"Ficheros Restringidos"</code>
          Por lo tanto, puedes prevenir que a un usuario se le pida mas de una vez por su
          contraseña, compartiendo así varias áreas restringidas el mismo Realm
          Por supuesto, por razones de seguridad, el cliente pedirá siempre por una contraseña, 
          siempre y cuando el nombre del servidor cambie.
          </p>
      
          <p>La directiva <code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code> es,
          en este caso, opcional, ya que <code>file</code> es el valor por defecto
          para esta directiva. Deberás usar esta directiva si estas usando otro medio
          diferente para la autenticación, como por ejemplo
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> o <code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code>.</p>
      
          <p>La directiva <code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code>
          establece el path al fichero de contraseñas que acabamos de crear con el 
          comando <code class="program"><a href="../programs/htpasswd.html">htpasswd</a></code>. Si tiene un número muy grande de usuarios, 
          puede ser realmente lento el buscar el usuario en ese fichero de texto plano 
          para autenticar a los usuarios en cada petición.
          Apache también tiene la habilidad de almacenar información de usuarios en 
          unos ficheros de rápido acceso a modo de base de datos.
          El módulo <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> proporciona la directiva <code class="directive"><a href="../mod/mod_authn_dbm.html#authdbmuserfile">AuthDBMUserFile</a></code>. Estos ficheros pueden ser creados y
          manipulados con el programa <code class="program"><a href="../programs/dbmmanage.html">dbmmanage</a></code> y <code class="program"><a href="../programs/htdbm.html">htdbm</a></code>. 
          Muchos otros métodos de autenticación así como otras opciones, están disponibles en 
          módulos de terceros 
          <a href="http://modules.apache.org/">Base de datos de Módulos disponibles</a>.</p>
      
          <p>Finalmente, la directiva <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>
          proporciona la parte del proceso de autorización estableciendo el o los
          usuarios que se les está permitido acceder a una región del servidor.
          En la próxima sección, discutiremos las diferentes vías de utilizar la 
          directiva <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="lettingmorethanonepersonin" id="lettingmorethanonepersonin">Dejar que más de una persona 
      	entre</a></h2>
          <p>Las directivas mencionadas arriba sólo permiten a una persona 
          (especialmente con un usuario que en ej ejemplo es <code>rbowen</code>) 
          en el directorio. En la mayoría de los casos, se querrá permitir el acceso
          a más de una persona. Aquí es donde la directiva 
          <code class="directive"><a href="../mod/mod_authz_groupfile.html#authgroupfile">AuthGroupFile</a></code> entra en juego.</p>
      
          <p>Si lo que se desea es permitir a más de una persona el acceso, necesitarás
           crear un archivo de grupo que asocie los nombres de grupos con el de personas
           para permitirles el acceso. El formato de este fichero es bastante sencillo, 
           y puedes crearlo con tu editor de texto favorito. El contenido del fichero 
           se parecerá a:</p>
      
         <div class="example"><p><code>
           GroupName: rbowen dpitts sungo rshersey
         </code></p></div>
      
          <p>Básicamente eso es la lista de miembros los cuales están en un mismo fichero
           de grupo en una sola linea separados por espacios.</p>
      
          <p>Para añadir un usuario a tu fichero de contraseñas existente teclee:</p>
      
          <div class="example"><p><code>
            htpasswd /usr/local/apache/passwd/passwords dpitts
          </code></p></div>
      
          <p>Te responderá lo mismo que anteriormente, pero se añadirá al fichero 
          	existente en vez de crear uno nuevo. (Es decir el flag <code>-c</code> será 
          	el que haga que se genere un nuevo 
          fichero de contraseñas).</p>
      
          <p>Ahora, tendrá que modificar su fichero <code>.htaccess</code> para que sea 
          parecido a lo siguiente:</p>
      
          <pre class="prettyprint lang-config">AuthType Basic
      AuthName "By Invitation Only"
      # Optional line:
      AuthBasicProvider file
      AuthUserFile "/usr/local/apache/passwd/passwords"
      AuthGroupFile "/usr/local/apache/passwd/groups"
      Require group GroupName</pre>
      
      
          <p>Ahora, cualquiera que esté listado en el grupo <code>GroupName</code>,
          y tiene una entrada en el fichero de <code>contraseñas</code>, se les 
          permitirá el acceso, si introducen su contraseña correctamente.</p>
      
          <p>Hay otra manera de dejar entrar a varios usuarios, que es menos específica.
          En lugar de crear un archivo de grupo, sólo puede utilizar la siguiente 
          directiva:</p>
      
          <pre class="prettyprint lang-config">Require valid-user</pre>
      
      
          <p>Usando ésto en vez de la línea <code>Require user rbowen</code>
           permitirá a cualquier persona acceder, la cuál aparece en el archivo de 
           contraseñas, y que introduzca correctamente su contraseña. Incluso puede 
           emular el comportamiento del grupo aquí, sólo manteniendo un fichero de 
           contraseñas independiente para cada grupo. La ventaja de este enfoque es 
           que Apache sólo tiene que comprobar un archivo, en lugar de dos. La desventaja 
           es que se tiene que mantener un montón de ficheros de contraseña de grupo, y 
           recuerde hacer referencia al fichero correcto en la directiva
          <code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="possibleproblems" id="possibleproblems">Posibles Problemas</a></h2>
          <p>Debido a la forma en que se especifica la autenticación básica,
          su nombre de usuario y la contraseña deben ser verificados cada vez 
          que se solicita un documento desde el servidor. Esto es, incluso si&nbsp;
          se&nbsp; vuelve a cargar la misma página, y para cada imagen de la página (si
      &nbsp;&nbsp;&nbsp;&nbsp;provienen de un directorio protegido). Como se puede imaginar, esto
      &nbsp;&nbsp;&nbsp;&nbsp;ralentiza las cosas un poco. La cantidad que ralentiza las cosas es 
          proporcional al tamaño del archivo de contraseñas, porque tiene que 
          abrir ese archivo, recorrer&nbsp;lista de usuarios hasta que llega a su nombre.
          Y tiene que hacer esto cada vez que se carga una página.</p>
      
          <p>Una consecuencia de esto, es que hay un limite práctico de cuantos 
          usuarios puedes introducir en el fichero de contraseñas. Este límite
          variará dependiendo de la máquina en la que tengas el servidor,
          pero puedes notar ralentizaciones en cuanto se metan cientos de entradas,
          y por lo tanto consideraremos entonces otro método de autenticación
          en ese momento.
      	</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="dbmdbd" id="dbmdbd">Método alternativo de almacenamiento de las 
      	contraseñas</a></h2>
      
          <p>Debido a que el almacenamiento de las contraseñas en texto plano tiene 
          	el problema mencionado anteriormente, puede que se prefiera guardar 
          	las contraseñas en otro lugar como por ejemplo una base de datos.
          	</p>
      
          <p>Los módulos <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> y <code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code> son
          dos módulos que hacen esto posible. En vez de seleccionar la directiva de fichero
          <code><code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code> </code>, en su lugar
          se puede elegir <code>dbm</code> o <code>dbd</code> como formato de almacenamiento.</p>
      
          <p>Para seleccionar los ficheros de tipo dbm en vez de texto plano, podremos hacer algo parecido a lo siguiente:</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/docs/private"&gt;
          AuthName "Private"
          AuthType Basic
          AuthBasicProvider dbm
          AuthDBMUserFile "/www/passwords/passwd.dbm"
          Require valid-user
      &lt;/Directory&gt;</pre>
      
      
          <p>Hay otras opciones disponibles. Consulta la documentación de
          <code class="module"><a href="../mod/mod_authn_dbm.html">mod_authn_dbm</a></code> para más detalles.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="multprovider" id="multprovider">Uso de múltiples proveedores</a></h2>
      
          <p>Con la introducción de la nueva autenticación basada en un proveedor y
           una arquitectura de autorización, ya no estaremos restringidos a un único
           método de autenticación o autorización. De hecho, cualquier número de 
           los proveedores pueden ser mezclados y emparejados para ofrecerle 
           exactamente el esquema que se adapte a sus necesidades. 
           En el siguiente ejemplo, veremos como ambos proveedores tanto el fichero 
           como el LDAP son usados en la autenticación:
           </p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/docs/private"&gt;
          AuthName "Private"
          AuthType Basic
          AuthBasicProvider file ldap
          AuthUserFile "/usr/local/apache/passwd/passwords"
          AuthLDAPURL ldap://ldaphost/o=yourorg
          Require valid-user
      &lt;/Directory&gt;</pre>
      
      
          <p>En este ejemplo el fichero, que actúa como proveedor, intentará autenticar 
          	primero al usuario. Si no puede autenticar al usuario, el proveedor del LDAP
          	será llamado para que realice la autenticación.
          	Esto permite al ámbito de autenticación ser amplio, si su organización 
          	implementa más de un tipo de almacén de autenticación. 
          	Otros escenarios de autenticación y autorización pueden incluir la 
          	mezcla de un tipo de autenticación con un tipo diferente de autorización.
          	Por ejemplo, autenticar contra un fichero de contraseñas pero autorizando
          	dicho acceso mediante el directorio del LDAP.</p>
      
          <p>Así como múltiples métodos y proveedores de autenticación pueden 
          	ser implementados, también pueden usarse múltiples formas de 
          	autorización.
          	En este ejemplo ambos ficheros de autorización de grupo así como 
          	autorización de grupo mediante LDAP va a ser usado:
          </p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/docs/private"&gt;
          AuthName "Private"
          AuthType Basic
          AuthBasicProvider file
          AuthUserFile "/usr/local/apache/passwd/passwords"
          AuthLDAPURL ldap://ldaphost/o=yourorg
          AuthGroupFile "/usr/local/apache/passwd/groups"
          Require group GroupName
          Require ldap-group cn=mygroup,o=yourorg
      &lt;/Directory&gt;</pre>
      
      
          <p>Para llevar la autorización un poco más lejos, las directivas 
          	de autorización de contenedores tales como
          <code class="directive"><a href="../mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code>
          and
          <code class="directive"><a href="../mod/mod_authz_core.html#requireany">&lt;RequireAny&gt;</a></code>
          nos permiten aplicar una lógica de en qué orden se manejará la autorización dependiendo
          de la configuración y controlada a través de ella.
          Mire también <a href="../mod/mod_authz_core.html#logic">Contenedores de
          Autorización</a> para ejemplos de cómo pueden ser aplicados.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="beyond" id="beyond">Más allá de la Autorización</a></h2>
      
          <p>El modo en que la autorización puede ser aplicada es ahora mucho más flexible
          	que us solo chequeo contra un almacén de datos (contraseñas). Ordenando la 
          	lógica y escoger la forma en que la autorización es realizada, ahora es posible 
          </p>
      
          <h3><a name="authandororder" id="authandororder">Aplicando la lógica y ordenación</a></h3>
              <p>Controlar el cómo y en qué orden se va a aplicar la autorización ha 
              	sido un misterio en el pasado. En Apache 2.2 un proveedor del 
              	mecanismo de autenticación fue introducido para disociar el proceso actual
              	de autenticación y soportar funcionalidad.
              	Uno de los beneficios secundarios fue que los proveedores de autenticación
              	podían ser configurados y llamados en un orden especifico que no dependieran
              	en el orden de carga del propio modulo. 
              	Este proveedor de dicho mecanismo, ha sido introducido en la autorización
              	también. Lo que esto significa es que la directiva 
              	<code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> 
              	no sólo especifica que método de autorización deberá ser usado, si no
              	también especifica el orden en que van a ser llamados. Múltiples
              	métodos de autorización son llamados en el mismo orden en que la directiva
                  <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> aparece en la
                  configuración.
              </p>
      
              <p>
              	Con la Introducción del contenedor de directivas de autorización tales como
      	        <code class="directive"><a href="../mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code>
      	        y
      	        <code class="directive"><a href="../mod/mod_authz_core.html#requireany">&lt;RequireAny&gt;</a></code>,
      	        La configuración también tiene control sobre cuándo se llaman a los métodos
      	        de autorización y qué criterios determinan cuándo se concede el acceso.
      	        Vease
      	        <a href="../mod/mod_authz_core.html#logic">Contenedores de autorización</a>
      	        Para un ejemplo de cómo pueden ser utilizados para expresar una lógica 
      	        más compleja de autorización.
      	    </p>
      
              <p>
              	Por defecto todas las directivas 
              	<code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>
             		son manejadas como si estuvieran contenidas en una directiva
             		<code class="directive"><a href="../mod/mod_authz_core.html#requireany">&lt;RequireAny&gt;</a></code>.
             		En otras palabras, Si alguno de los métodos de autorización 
             		especificados tiene éxito, se concede la autorización.
             	</p>
      
          
      
          <h3><a name="reqaccessctrl" id="reqaccessctrl">Uso de los proveedores de autorización para 
          	el control de acceso</a></h3>
      
          	<p>
          		La autenticación de nombre de usuario y contraseña es sólo parte
          		de toda la historia que conlleva el proceso. Frecuentemente quiere
          		dar acceso a la gente en base a algo más que lo que son.
          		Algo como de donde vienen.
          	</p>
      
              <p>
              	Los proveedores de autorización <code>all</code>,
              	<code>env</code>, <code>host</code> y <code>ip</code>
              	te permiten denegar o permitir el acceso basándose en otros
              	criterios como el nombre de la máquina o la IP de la máquina que
              	realiza la consulta para un documento.
              </p>
      
              <p>
              	El uso de estos proveedores se especifica a través de la directiva
              	<code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>.
              	La directiva registra los proveedores de autorización que serán llamados
              	durante la solicitud de la fase del proceso de autorización. Por ejemplo:
              </p>
      
              <pre class="prettyprint lang-config">Require ip <var>address</var>
              </pre>
      
      
              <p>
              	Donde <var>address</var> es una dirección IP (o una dirección IP parcial) 
              	o bien:
              </p>
      
              <pre class="prettyprint lang-config">Require host <var>domain_name</var>
              </pre>
      
      
              <p>
              	Donde <var>domain_name</var> es el nombre completamente cualificado de un nombre 
      	        de dominio (FQDN) (o un nombre parcial del dominio);
      	        puede proporcionar múltiples direcciones o nombres de dominio, si se desea.
              </p>
      
              <p>
              	Por ejemplo, si alguien envía spam a su tablón de mensajes y desea
              	mantenerlos alejados, podría hacer lo siguiente:</p>
      
              <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not ip 10.252.46.165
      &lt;/RequireAll&gt;</pre>
      
      
              <p>
              	Visitantes que vengan desde esa IP no serán capaces de ver el contenido
              	que cubre esta directiva. Si, en cambio, lo que se tiene es el nombre de
              	la máquina, en vez de la dirección IP, podría usar:
              </p>
      
              <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not host host.example.com
      &lt;/RequireAll&gt;</pre>
      
      
              <p>
              	Y, si lo que se quiere es bloquear el acceso desde un determinado dominio
              	(bloquear el acceso desde el dominio entero), puede especificar parte 
              	de la dirección o del propio dominio a bloquear:
              </p>
      
              <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not ip 192.168.205
          Require not host phishers.example.com moreidiots.example
          Require not host ke
      &lt;/RequireAll&gt;</pre>
      
      
              <p>
              	Usando <code class="directive"><a href="../mod/mod_authz_core.html#requireall">&lt;RequireAll&gt;</a></code>
      	        con múltiples directivas <code class="directive"><a href="../mod/mod_authz_core.html#require">&lt;Require&gt;</a></code>, cada una negada con un <code>not</code>,
      	        Sólo permitirá el acceso, si todas las condiciones negadas son verdaderas.
      	        En otras palabras, el acceso será bloqueado, si cualquiera de las condiciones
      	        negadas fallara.
              </p>
      
          
      
          <h3><a name="filesystem" id="filesystem">Compatibilidad de Control de Acceso con versiones 
          	anteriores </a></h3>
      
              <p>
              	Uno de los efectos secundarios de adoptar proveedores basados en 
              	mecanismos de autenticación es que las directivas anteriores
      	        <code class="directive"><a href="../mod/mod_access_compat.html#order">Order</a></code>,
      	        <code class="directive"><a href="../mod/mod_access_compat.html#allow">Allow</a></code>,
      	        <code class="directive"><a href="../mod/mod_access_compat.html#deny">Deny</a></code> y
              	<code class="directive"><a href="../mod/mod_access_compat.html#satisfy">Satisfy</a></code> ya no son necesarias.
              	Sin embargo, para proporcionar compatibilidad con configuraciones antiguas,
              	estas directivas se han movido al módulo <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code>.
              </p>
      
              <div class="warning"><h3>Nota:</h3>
      	        <p>
      	        	Las directivas proporcionadas por <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> 
      	        	han quedado obsoletas por <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code>. Mezclar 
      	        	directivas antiguas como
      	        	<code class="directive"><a href="../mod/mod_access_compat.html#order">Order</a></code>, 
      	            <code class="directive"><a href="../mod/mod_access_compat.html#allow">Allow</a></code> ó 
      	            <code class="directive"><a href="../mod/mod_access_compat.html#deny">Deny</a></code> con las nuevas 
      	            como 
      	            <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> 
      	            es técnicamente posible pero desaconsejable. El módulo 
      	            <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> se creó para soportar configuraciones
      	            que contuvieran sólo directivas antiguas para facilitar la actualización
      	            a la versión 2.4.
      	            Por favor revise la documentación de 
      	            <a href="../upgrading.html">actualización</a> para más información al
      	            respecto.
      	        </p>
      	    </div>
      	
      
      	</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="socache" id="socache">Cache de Autenticación</a></h2>
      	<p>
      		Puede haber momentos en que la autenticación ponga una carga 
      		inaceptable en el proveedor (de autenticación) o en tu red.
      		Esto suele afectar a los usuarios de <code class="module"><a href="../mod/mod_authn_dbd.html">mod_authn_dbd</a></code> 
      		(u otros proveedores de terceros/personalizados).
      		Para lidiar con este problema, HTTPD 2.3/2.4 introduce un nuevo proveedor
      		de caché  <code class="module"><a href="../mod/mod_authn_socache.html">mod_authn_socache</a></code> para cachear las credenciales 
      		y reducir la carga en el proveedor(es) original.
      	</p>
          <p>
          	Esto puede ofrecer un aumento de rendimiento sustancial para algunos usuarios.
          </p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="moreinformation" id="moreinformation">Más información</a></h2>
      
          <p>
          	También debería leer la documentación para
          	<code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code> y <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code>
          	la cuál contiene más información de como funciona todo esto.
          	La directiva <code class="directive"><a href="../mod/mod_authn_core.html#authnprovideralias">&lt;AuthnProviderAlias&gt;</a></code> puede también ayudar 
      	    a la hora de simplificar ciertas configuraciones de autenticación.
      	</p>
      
          <p>
          	Los diferentes algoritmos de cifrado que están soportados por Apache
          	para la autenticación se explican en
          	<a href="../misc/password_encryptions.html">Cifrado de Contraseñas</a>.
          </p>
      
          <p>
          	Y tal vez quiera ojear la documentación de "how to"  
          	<a href="access.html">Control de Acceso</a>  donde se mencionan temas 
          	relacionados.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/auth.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/auth.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/auth.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/auth.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/auth.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../tr/howto/auth.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentarios</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/auth.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/ssi.html.fr.utf8�����������������������������������������������������0000644�0000000�0000050�00000067266�13412755316�017610� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Tutoriel Apache httpd : Introduction aux "Inclusions Côté Serveur"
      (Server Side Includes - SSI) - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">Recettes et tutoriels</a></div><div id="page-content"><div id="preamble"><h1>Tutoriel Apache httpd : Introduction aux "Inclusions Côté Serveur"
      (Server Side Includes - SSI)</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/ssi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/ssi.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/ssi.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/ssi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/ssi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      
      <p>Les SSI permettent d'ajouter du contenu dynamique à des documents
      HTML préexistants.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Introduction</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#what">Qu'est-ce que SSI ?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#configuring">Configurer votre serveur pour permettre les SSI</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#basic">Directives SSI de base</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#additionalexamples">Exemples additionnels</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#config">Que puis-je configurer d'autre ?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#exec">Exécution de commandes</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#advanced">Techniques SSI avancées</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#conclusion">Conclusion</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Introduction</a></h2>
       <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="../mod/mod_expires.html">mod_expires</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code></li><li><code class="directive"><a href="../mod/mod_mime.html#addtype">AddType</a></code></li><li><code class="directive"><a href="../mod/core.html#setoutputfilter">SetOutputFilter</a></code></li><li><code class="directive"><a href="../mod/mod_setenvif.html#browsermatchnocase">BrowserMatchNoCase</a></code></li></ul></td></tr></table>
      
          <p>Cet article traite des Inclusions Côté Serveur (Server Side
          Includes), plus communément appelés SSI. Vous trouverez ici la
          manière de configurer votre serveur pour permettre les SSI, ainsi
          qu'une introduction à quelques techniques SSI de base permettant
          d'ajouter du contenu dynamique à vos pages HTML préexistantes.</p>
      
          <p>La dernière partie de cet article sera consacrée aux
          configurations SSI plus avancées, telles que les expressions
          conditionnelles dans les directives SSI.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="what" id="what">Qu'est-ce que SSI ?</a></h2>
      
          <p>SSI (Server Side Includes) est constitué de directives placées dans
          des pages HTML, et évaluées par le serveur au moment où les pages
          sont servies. Elles vous permettent d'ajouter du contenu généré
          dynamiquement à une page HTML préexistante, sans avoir à servir la
          page entière via un programme CGI, ou toute autre technologie de
          contenu dynamique.</p>
      
          <p>Par exemple, vous pouvez insérer la directive suivante dans une
          page HTML existante :</p>
      
          <div class="example"><p><code>
          &lt;!--#echo var="DATE_LOCAL" --&gt;
          </code></p></div>
      
          <p>Ainsi, lorsque la page sera servie, la directive sera évaluée et
          remplacée par sa valeur :</p>
      
          <div class="example"><p><code>
          Tuesday, 15-Jan-2013 19:28:54 EST
          </code></p></div>
      
          <p>Le choix entre l'utilisation des SSI et la génération entière de
          la page par un programme quelconque, est en général dicté par la
          proportion de contenu statique et de contenu devant être généré
          chaque fois que la page est servie. SSI est idéal pour ajouter de
          petites quantités d'information, comme l'heure courante dans
          l'exemple précédent. Mais si la
          plus grande partie de votre page est générée au moment où elle est
          servie, vous devez vous tourner vers une autre solution.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuring" id="configuring">Configurer votre serveur pour permettre les SSI</a></h2>
      
      
          <p>Pour permettre l'utilisation des SSI sur votre serveur, vous
          devez ajouter la directive suivante dans votre fichier
          <code>httpd.conf</code>, ou dans un fichier <code>.htaccess</code>
          :</p>
      <pre class="prettyprint lang-config">Options +Includes</pre>
      
      
          <p>Cette directive indique à Apache que vous désirez permettre la
          recherche de directives SSI lors de l'interprétation des fichiers.
          Notez cependant que la plupart des configurations contiennent de
          nombreuses directives <code class="directive"><a href="../mod/core.html#options">Options</a></code>
          qui peuvent s'écraser les unes les autres. Vous devrez probablement
          appliquer ces directives <code>Options</code> au répertoire
          spécifique pour lequel vous voulez activer les SSI, afin d'être sûr
          qu'elles y seront bien activées.</p>
      
          <p>Tout fichier ne fera cependant pas l'objet de recherche de
          directives SSI. Vous devez indiquer à Apache quels fichiers seront
          concernés. Vous pouvez y parvenir en indiquant une extension, comme
          <code>.shtml</code>, à l'aide des directives suivantes :</p>
      <pre class="prettyprint lang-config">AddType text/html .shtml
      AddOutputFilter INCLUDES .shtml</pre>
      
      
          <p>Un des désavantages de cette approche réside dans le fait que si
          vous voulez ajouter des directives SSI à une page préexistante, vous
          devrez changer le nom de cette page, et donc tout lien qui la
          contient, de façon à ce qu'elle possède l'extension
          <code>.shtml</code>, condition nécessaire pour que les directives
          SSI qu'elle contient soient traitées.</p>
      
          <p>Une autre méthode consiste à utiliser la directive <code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code> :</p>
      <pre class="prettyprint lang-config">XBitHack on</pre>
      
      
          <p>La directive <code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code>
          indique à Apache qu'il doit rechercher des directivves SSI dans les
          fichiers si leur bit d'exécution est positionné. Il n'est ainsi plus
          nécessaire de changer le nom du fichier pour ajouter des directives
          SSI à une page préexistante ; vous devez simplement attribuer les
          droits d'exécution au fichier à l'aide de <code>chmod</code>.</p>
      <div class="example"><p><code>
              chmod +x pagename.html
      </code></p></div>
      
          <p>Un bref commentaire sur ce qu'il ne faut pas faire. Certaines
          personnes peuvent vous conseiller de tout simplement indiquer à
          Apache de rechercher des directives SSI dans tous les fichiers
          <code>.html</code>, ce qui vous évite d'avoir à gérer les noms de
          fichiers avec extension <code>.shtml</code>. Ils n'ont probablement
          pas entendu parler de la directive <code class="directive"><a href="../mod/mod_include.html#xbithack">XBitHack</a></code>. En effet, vous devez
          garder à l'esprit qu'en faisant ceci, Apache va devoir rechercher
          des directives SSI dans chaque fichier qu'il sert, même s'il n'en
          contient aucune. Ce n'est donc pas une bonne idée car les
          performances peuvent en être sensiblement affectées.</p>
      
          <p>Bien entendu, sous Windows, il n'y a pas de bit d'exécution à
          positionner, ce qui limite un peu vos choix.</p>
      
          <p>Dans sa configuration par défaut, Apache n'envoie pas la date de
          dernière modification ou les en-têtes HTTP relatifs à la taille des
          contenus dans les pages SSI, car ses valeurs sont difficiles à
          calculer pour les contenus dynamiques. Ceci peut induire une
          impression de diminution des performances côté client, en empêchant
          la mise en cache de votre document. Il existe deux méthodes pour
          résoudre ce problème :</p>
      
          <ol>
            <li>Utilisez la configuration <code>XBitHack Full</code>. Elle
            indique à Apache de déterminer la date de dernière modification en
            ne regardant que la date du fichier à l'origine de la requête,
            tout en ignorant la date de modification de tout fichier inclus.</li>
      
            <li>Utilisez les directives fournies par le module
            <code class="module"><a href="../mod/mod_expires.html">mod_expires</a></code> pour définir de manière explicite la
            date d'expiration de vos fichiers, laissant par la-même
            aux navigateurs et aux mandataires le soin de déterminer s'il est
            opportun ou non de les mettre en cache.</li>
          </ol>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="basic" id="basic">Directives SSI de base</a></h2>
      
          <p>Les directives SSI adoptent la syntaxe suivante :</p>
      <div class="example"><p><code>
              &lt;!--#fonction attribut=valeur attribut=valeur ... --&gt;
      </code></p></div>
      
          <p>Le format d'une directive SSI étant similaire à celui d'un
          commentaire HTML, si vous n'avez pas activé correctement SSI, le
          navigateur l'ignorera, mais elle sera encore visible dans le source
          HTML. Si SSI est correctement configuré, la directive sera remplacée
          par ses résultats.</p>
      
          <p>"fonction" peut prendre de nombreuses formes, et nous décrirons
          plus précisément la plupart d'entre eux dans la prochaine version de
          ce document. Pour le moment, voici quelques exemples de ce que vous
          pouvez faire avec SSI.</p>
      
      <h3><a name="todaysdate" id="todaysdate">La date courante</a></h3>
      
      <div class="example"><p><code>
              &lt;!--#echo var="DATE_LOCAL" --&gt;
      </code></p></div>
      
          <p>La fonction <code>echo</code> permet d'afficher la valeur d'une
          variable. Il existe un grand nombre de variables standards, y
          compris l'ensemble des variables d'environnement disponibles pour
          les programmes CGI. De plus, vous pouvez définir vos propres
          variables à l'aide de la fonction <code>set</code>.</p>
      
          <p>Si vous n'aimez pas le format sous lequel la date s'affiche, vous
          pouvez utiliser la fonction <code>config</code> avec un attribut
          <code>timefmt</code>, pour le modifier.</p>
      
      <div class="example"><p><code>
              &lt;!--#config timefmt="%A %B %d, %Y" --&gt;<br />
              Today is &lt;!--#echo var="DATE_LOCAL" --&gt;
      </code></p></div>
      
      
      <h3><a name="lastmodified" id="lastmodified">Date de modification du fichier</a></h3>
      
      <div class="example"><p><code>
              Dernière modification du document &lt;!--#flastmod file="index.html" --&gt;
      </code></p></div>
      
          <p>Le format peut là aussi être modifié à l'aide de l'attribut
          <code>timefmt</code>.</p>
      
      
      <h3><a name="cgi" id="cgi">Inclusion des résultats d'un programme CGI</a></h3>
      
          <p>C'est le cas le plus courant d'utilisation des SSI - afficher les
          résultats d'un programme CGI, comme l'universellement adoré
          "compteur d'accès".</p>
      
      <div class="example"><p><code>
              &lt;!--#include virtual="/cgi-bin/counter.pl" --&gt;
      </code></p></div>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="additionalexamples" id="additionalexamples">Exemples additionnels</a></h2>
      
      
          <p>Vous trouverez dans ce qui suit quelques exemples spécifiques de
          ce que vous pouvez faire de vos documents HTML avec SSI.</p>
      
      <h3><a name="docmodified" id="docmodified">Quand ce document a-t-il été modifié ?</a></h3>
      
          <p>Nous avons mentionné plus haut que vous pouviez utiliser SSI pour
          informer l'utilisateur de la date de dernière modification du
          document. Cependant, la méthode pour y parvenir n'a pas été vraiment
          abordée. Placé dans votre document HTML, le code suivant va insérer
          un repère de temps dans votre page. Bien entendu, SSI devra avoir
          été correctement activé, comme décrit plus haut.</p>
      <div class="example"><p><code>
              &lt;!--#config timefmt="%A %B %d, %Y" --&gt;<br />
              Dernière modification du fichier &lt;!--#flastmod file="ssi.shtml" --&gt;
      </code></p></div>
      
          <p>Bien entendu, vous devez remplacer <code>ssi.shtml</code> par le
          nom du fichier auquel vous faites référence. Ceci ne conviendra pas
          si vous recherchez un morceau de code générique que vous pourrez
          insérer dans tout fichier ; dans ce cas, il est préférable
          d'utiliser la variable <code>LAST_MODIFIED</code> :</p>
      <div class="example"><p><code>
              &lt;!--#config timefmt="%D" --&gt;<br />
              This file last modified &lt;!--#echo var="LAST_MODIFIED" --&gt;
      </code></p></div>
      
          <p>Pour plus de détails sur le format <code>timefmt</code>, tapez
          <code>strftime</code> dans votre moteur de recherche préferé. La
          syntaxe est identique.</p>
      
      
      <h3><a name="standard-footer" id="standard-footer">Inclusion d'un pied de page standard</a></h3>
      
      
          <p>Si le site que vous gérez comporte plus que quelques pages, vous
          allez vite vous apercevoir qu'effectuer des modifications sur toutes
          ces pages peut devenir très contraignant, en particulier si vous
          voulez qu'elles conservent un aspect homogène.</p>
      
          <p>Inclure un fichier pour un en-tête et/ou un pied de page peut
          simplifier cette corvée de mises à jour. Il vous suffit de
          confectionner un fichier de pied de page, et de l'inclure dans
          chaque page à l'aide de l'élément SSI <code>include</code>. Pour
          définir le fichier à inclure, la fonction <code>include</code> peut
          utiliser soit l'attribut <code>file</code>, soit l'attribut
          <code>virtual</code>. L'attribut <code>file</code> est un chemin de
          fichier <em>relatif au répertoire courant</em>. C'est à dire qu'il
          ne peut ni avoir pour valeur un chemin absolu (commençant par /), ni
          comporter "../" dans son chemin. L'attribut <code>virtual</code> est
          probablement plus commode, et peut spécifier une URL relative au
          document servi. Elle peut commencer par un /, mais le fichier inclus
          et le fichier servi doivent résider sur le même serveur.</p>
      <div class="example"><p><code>
              &lt;!--#include virtual="/footer.html" --&gt;
      </code></p></div>
      
          <p>Je combinerai souvent ces deux derniers points, en ajoutant une
          directive <code>LAST_MODIFIED</code> dans un fichier de pied de page
          destiné à être inclus. Le fichier inclus peut contenir des
          directives SSI, et les inclusions peuvent être imbriquées - à
          savoir, le fichier inclus peut inclure un autre fichier, etc...</p>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="config" id="config">Que puis-je configurer d'autre ?</a></h2>
      
      
          <p>En plus du format de date, vous pouvez utiliser l'élément
          <code>config</code> pour configurer deux autres choses.</p>
      
          <p>En général, lorsque quelque chose se passe mal avec votre
          directive SSI, vous recevez le message :</p>
      <div class="example"><p><code>
              [an error occurred while processing this directive]
      </code></p></div>
      
          <p>Pour modifier ce message, vous pouvez utiliser l'attribut
          <code>errmsg</code> avec la fonction <code>config</code> :</p>
      <div class="example"><p><code>
              &lt;!--#config errmsg="[Il semblerait que vous ne sachiez pas
      	utiliser les SSI]" --&gt;
      </code></p></div>
      
          <p>Il est cependant probable que les utilisateurs finaux ne voient
          jamais ce message, car vous aurez résolu tous les problèmes issus de
          vos directives SSI avant que votre site ne soit mis en production.
          (N'est-ce pas ?)</p>
      
          <p>Vous pouvez aussi modifier le format sous lequel les tailles de
          fichiers sont affichées à l'aide de l'attribut <code>sizefmt</code>.
          Vous pouvez spécifier <code>bytes</code> pour un affichage en
          octets, ou <code>abbrev</code> pour un affichage plus concis en Ko
          ou Mo, selon le cas.</p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="exec" id="exec">Exécution de commandes</a></h2>
          
      
          <p>Voici autre chose que vous pouvez faire avec la fonction
          <code>exec</code>. Vous pouvez vraiment faire exécuter une commande
          par SSI en utilisant le shell (<code>/bin/sh</code>, pour être plus
          précis - ou le shell DOS, si vous êtes sous Win32). Par exemple, ce
          qui suit vous permet d'afficher le contenu d'un répertoire.</p>
      <div class="example"><p><code>
              &lt;pre&gt;<br />
              &lt;!--#exec cmd="ls" --&gt;<br />
              &lt;/pre&gt;
      </code></p></div>
      
          <p>ou, sous Windows</p>
      <div class="example"><p><code>
              &lt;pre&gt;<br />
              &lt;!--#exec cmd="dir" --&gt;<br />
              &lt;/pre&gt;
      </code></p></div>
      
          <p>Vous noterez probablement l'étrange formatage provoqué par cette
          directive sous Windows, car la sortie de <code>dir</code> contient
          la chaîne  de caractères "&lt;<code>dir</code>&gt;", ce qui trompe le
          navigateur.</p>
      
          <p>Notez que cette fonctionnalité est très dangereuse, car elle va
          permettre d'exécuter tout code associé à l'élément
          <code>exec</code>. Si vous êtes dans la situation où les
          utilisateurs peuvent éditer le contenu de vos pages web, dans le cas
          d'un "livre d'or" par exemple, assurez-vous de désactiver cette
          fonctionnalité. Vous pouvez, tout en permettant les SSI, désactiver
          la fonctionnalité <code>exec</code> à l'aide de l'argument
          <code>IncludesNOEXEC</code> de la directive
          <code>Options</code>.</p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="advanced" id="advanced">Techniques SSI avancées</a></h2>
      
      
          <p>Outre l'affichage de contenu, les SSI d'Apache vous permettent de
          définir des variables, et de les utiliser dans des comparaisons et
          des conditions.</p>
      
      <h3><a name="variables" id="variables">Définition de variables</a></h3>
      
          <p>Avec l'élément <code>set</code>, vous pouvez définir des
          variables pour un usage ultérieur. Comme nous en aurons besoin plus
          loin, nous allons en parler tout de suite. La syntaxe se présente
          comme suit :</p>
      <div class="example"><p><code>
              &lt;!--#set var="name" value="Rich" --&gt;
      </code></p></div>
      
          <p>Pour affecter une valeur à vos variables, en plus de la
          définition littérale de l'exemple ci-dessus, vous pouvez utiliser
          une autre variable, y compris les <a href="../env.html">variables d'environnement</a>, ou les variables
          décrites plus haut (comme <code>LAST_MODIFIED</code> par exemple).
          Pour indiquer qu'il s'agit d'une variable et non d'une chaîne, vous
          devez utiliser le symbole dollar ($) devant le nom de la
          variable.</p>
      
          <div class="example"><p><code> &lt;!--#set var="modified" value="$LAST_MODIFIED" --&gt;
          </code></p></div>
      
          <p>Pour insérer un caractère $ dans la valeur de votre variable,
          vous devez l'échapper à l'aide d'un backslash.</p>
      <div class="example"><p><code>
              &lt;!--#set var="cost" value="\$100" --&gt;
      </code></p></div>
      
          <p>Enfin, si vous voulez insérer une variable dans une chaîne, et
          s'il y a une chance pour que le nom de la variable se confonde avec
          le reste de la chaîne, vous pouvez l'entourer d'accolades pour
          eviter toute confusion (Il est difficile de trouver un bon exemple
          pour illustrer ceci, mais j'espère que vous comprendrez).</p>
      <div class="example"><p><code>
              &lt;!--#set var="date" value="${DATE_LOCAL}_${DATE_GMT}" --&gt;
      </code></p></div>
      
      
      <h3><a name="conditional" id="conditional">Expressions conditionnelles</a></h3>
      
      
          <p>Maintenent que nous avons des variables, et que nous pouvons
          définir et comparer leurs valeurs, nous sommes à même de les
          utiliser dans des expressions conditionnelles. Ceci confère à SSI le
          statut de petit langage de programmation.
          <code class="module"><a href="../mod/mod_include.html">mod_include</a></code> fournit une structure <code>if</code>,
          <code>elif</code>, <code>else</code>, <code>endif</code> pour la
          construction d'expressions conditionnelles, ce qui vous permet de
          générer plusieurs pages logiques à partir d'une seule vraie
          page.</p>
      
          <p>La structure de l'expression conditionnelle est :</p>
      <div class="example"><p><code>
          &lt;!--#if expr="condition" --&gt;<br />
          &lt;!--#elif expr="condition" --&gt;<br />
          &lt;!--#else --&gt;<br />
          &lt;!--#endif --&gt;
      </code></p></div>
      
          <p>Une <em>condition</em> peut revêtir la forme de toute comparaison
          logique - soit une comparaison de valeurs avec une autre, soit une
          vérification de la "vérité" d'une valeur particulière (Une chaîne
          donnée est vraie si elle n'est pas vide). Pour une liste exhaustive
          des opérateurs de comparaison disponibles, voir la documentation du
          module <code class="module"><a href="../mod/mod_include.html">mod_include</a></code>.</p>
      
          <p>Par exemple, spour insérer l'heure du jour dans votre page web,
          vous pouvez ajouter ces lignes dans la page HTML :</p>
      
          <div class="example"><p><code>
          Good
          &lt;!--#if expr="%{TIME_HOUR} &lt;12" --&gt;<br />
          morning!<br />
          &lt;!--#else --&gt;<br />
          afternoon!<br />
          &lt;!--#endif --&gt;<br />
          </code></p></div>    
      
          <p>Toute autre variable (que vous avez définie, ou une variable
          d'environnement normale) peut être utilisée dans les expressions
          conditionnelles. Voir le document <a href="../expr.html">Expressions
          rationnelles dans le serveur HTTP Apache</a> pour plus de détails à
          propos du fonctionnement du moteur d'évaluation des expressions
          rationnelles.</p>
          
          <p>Associée à la possibilité avec Apache de définir
          des variables d'environnement à l'aide de directives
          <code>SetEnvIf</code>, ainsi que d'autres directives en rapport,
          cette fonctionnalité vous permet d'ajouter une grande variété
          de contenus dynamiques côté serveur sans avoir à concevoir une
          application web de A à Z.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="conclusion" id="conclusion">Conclusion</a></h2>
      
          <p>SSI ne remplace certainement pas CGI, ou d'autres technologies
          utilisées pour la génération de pages web dynamiques. Mais c'est une
          bonne méthode pour ajouter des petits contenus dynamiques à vos
          pages, sans devoir fournir un gros effort supplémentaire.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/ssi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/ssi.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/ssi.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/ssi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/ssi.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/ssi.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/cgi.html.ko.euc-kr���������������������������������������������������0000644�0000000�0000050�00000063475�13412755316�020054� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¾ÆÆÄÄ¡ ÅõÅ丮¾ó: CGI¸¦ »ç¿ëÇÑ µ¿Àû ÆäÀÌÁö »ý¼º - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutorials</a></div><div id="page-content"><div id="preamble"><h1>¾ÆÆÄÄ¡ ÅõÅ丮¾ó: CGI¸¦ »ç¿ëÇÑ µ¿Àû ÆäÀÌÁö »ý¼º</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/howto/cgi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/cgi.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/cgi.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/cgi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/cgi.html" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#intro">¼Ò°³</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#configuring">CGI¸¦ Çã¿ëÇϵµ·Ï ¾ÆÆÄÄ¡ ¼³Á¤Çϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#writing">CGI ÇÁ·Î±×·¥ ÀÛ¼ºÇϱâ</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#troubleshoot">±×·¯³ª ¾ÆÁ÷ µ¿ÀÛÇÏÁö ¾Ê¾Æ¿ä!</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#behindscenes">µÚ¿¡¼­´Â ¹«½¼ ÀÏÀÌ ¹ú¾îÁö´Â°¡?</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#libraries">CGI ¸ðµâ/¶óÀ̺귯¸®</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#moreinfo">´õ ¸¹Àº Á¤º¸...</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="intro" id="intro">¼Ò°³</a></h2>
          
      
          <table class="related"><tr><th>°ü·ÃµÈ ¸ðµâ</th><th>°ü·ÃµÈ Áö½Ã¾î</th></tr><tr><td><ul><li><code class="module"><a href="../mod/mod_alias.html">mod_alias</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code></li></ul></td></tr></table>
      
          <p>CGI (Common Gateway Interface)´Â À¥¼­¹ö°¡ º¸Åë CGI ÇÁ·Î±×·¥
          ȤÀº CGI ½ºÅ©¸³Æ®¶ó°í ºÎ¸£´Â, (À¥ÆäÀÌÁö ³»¿ëÀ» ¸¸µå´Â) ¿ÜºÎ
          ÇÁ·Î±×·¥°ú Åë½ÅÇÏ´Â ¹æ¹ýÀ» Á¤ÀÇÇÑ´Ù. À¥»çÀÌÆ®¿¡¼­ µ¿ÀûÀÎ
          ÆäÀÌÁö¸¦ ¸¸µå´Â °¡Àå ÈçÇÏ°í °£´ÜÇÑ ¹æ¹ýÀÌ´Ù. ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡
          À¥¼­¹ö¿¡ CGI¸¦ ±¸¼ºÇÏ´Â ¹æ¹ýÀ» ¼Ò°³Çϰí, CGI ÇÁ·Î±×·¥À»
          ÀÛ¼ºÇغ»´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuring" id="configuring">CGI¸¦ Çã¿ëÇϵµ·Ï ¾ÆÆÄÄ¡ ¼³Á¤Çϱâ</a></h2>
          
      
          <p>CGI ÇÁ·Î±×·¥ÀÌ ¿Ã¹Ù·Î µ¿ÀÛÇÏ·Á¸é CGI ½ÇÇàÀÌ °¡´ÉÇϵµ·Ï
          ¾ÆÆÄÄ¡¸¦ ¼³Á¤ÇØ¾ß ÇÑ´Ù. ¼³Á¤ÇÏ´Â ¹æ¹ýÀº ¿©·¯°¡Áö´Ù.</p>
      
          <h3><a name="scriptalias" id="scriptalias">ScriptAlias</a></h3>
            
      
            <p><code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code>
            Áö½Ã¾î¸¦ »ç¿ëÇÏ¸é ¾ÆÆÄÄ¡´Â ƯÁ¤ µð·ºÅ丮¸¦ CGI ÇÁ·Î±×·¥¿ëÀ¸·Î
            µÐ´Ù. ¾ÆÆÄÄ¡´Â ÀÌ µð·ºÅ丮¿¡ ÀÖ´Â ¸ðµç ÆÄÀÏÀÌ CGI
            ÇÁ·Î±×·¥À̶ó°í °¡Á¤ÇÏ¿© Ŭ¶óÀÌ¾ðÆ®°¡ ÀÚ¿øÀ» ¿äûÇϸé ÀÚ¿øÀ»
            ½ÇÇàÇÏ·Á°í ½ÃµµÇÑ´Ù.</p>
      
            <p><code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code>
            Áö½Ã¾î´Â ´ÙÀ½°ú °°ÀÌ »ç¿ëÇÑ´Ù.</p>
      
            <div class="example"><p><code>
              ScriptAlias /cgi-bin/ /usr/local/apache2/cgi-bin/
            </code></p></div>
      
            <p>À§ ¿¹Á¦´Â ¾ÆÆÄÄ¡¸¦ ±âº» Àå¼Ò¿¡ ¼³Ä¡ÇÑ °æ¿ì
            <code>httpd.conf</code> ¼³Á¤ÆÄÀÏ¿¡ ÀÖ´Â ³»¿ëÀÌ´Ù. <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code> Áö½Ã¾î´Â <code class="directive"><a href="../mod/mod_alias.html#alias">Alias</a></code> Áö½Ã¾î¿Í °°ÀÌ URL
            ¾ÕºÎºÐÀ» ƯÁ¤ µð·ºÅ丮·Î ´ëÀÀÇÑ´Ù.
            <code class="directive">Alias</code>¿Í
            <code class="directive">ScriptAlias</code>´Â º¸Åë <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code> µð·ºÅ丮 ¹Û¿¡ ÀÖ´Â
            µð·ºÅ丮¿¡ »ç¿ëÇÑ´Ù. <code class="directive">Alias</code>¿Í
            <code class="directive">ScriptAlias</code>ÀÇ Â÷ÀÌÁ¡Àº
            <code class="directive">ScriptAlias</code>°¡ Ãß°¡·Î URL ¾ÕºÎºÐÀ¸·Î
            ½ÃÀÛÇÏ´Â ¸ðµç ÆÄÀÏÀ» CGI ÇÁ·Î±×·¥À¸·Î Ãë±ÞÇÏ´Â Á¡ÀÌ´Ù.
            ±×·¡¼­ À§ÀÇ ¼³Á¤Àº ¾ÆÆÄÄ¡¿¡°Ô <code>/cgi-bin/</code>À¸·Î
            ½ÃÀÛÇÏ´Â ÀÚ¿øÀ» ¿äûÇϸé
            <code>/usr/local/apache2/cgi-bin/</code> µð·ºÅ丮¿¡¼­
            ã¾Æ¼­ CGI ÇÁ·Î±×·¥À¸·Î ó¸®Ç϶ó°í ¾Ë¸°´Ù.</p>
      
            <p>¿¹¸¦ µé¾î, URL
            <code>http://www.example.com/cgi-bin/test.pl</code>À»
            ¿äûÇÏ¸é ¾ÆÆÄÄ¡´Â
            <code>/usr/local/apache2/cgi-bin/test.pl</code> ÆÄÀÏÀ»
            ½ÇÇàÇÏ¿© °á°ú¸¦ ¹ÝȯÇÑ´Ù. ¹°·Ð ÆÄÀÏÀÌ Á¸ÀçÇÏ°í ½ÇÇà°¡´ÉÇϸç
            ¾î¶² ¹æ¹ýÀ¸·Îµç Ãâ·ÂÀ» ÇØ¾ß ÇÑ´Ù. ±×·¸Áö ¾ÊÀ¸¸é ¾ÆÆÄÄ¡´Â
            ¿À·ù¹®À» º¸³½´Ù.</p>
          
      
          <h3><a name="nonscriptalias" id="nonscriptalias">ScriptAlias µð·ºÅ丮 ¹Û¿¡ ÀÖ´Â CGI</a></h3>
            
      
            <p>º¸Åë º¸¾È»ó ÀÌÀ¯¶§¹®¿¡ CGI ÇÁ·Î±×·¥Àº <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code>ÇÑ µð·ºÅ丮¿¡
            ÇÑÁ¤ÇÑ´Ù. ±×·¡¼­ °ü¸®ÀÚ´Â ´©°¡ CGI ÇÁ·Î±×·¥À» »ç¿ëÇÒ ¼ö
            ÀÖ´ÂÁö ¾ö°ÝÈ÷ °¨µ¶ÇÒ ¼ö ÀÖ´Ù. ±×·¯³ª Àû´çÇÑ º¸¾ÈÁ¶Ä¡¸¦
            ÃëÇß´Ù¸é ¾Æ¹« µð·ºÅ丮¿¡¼­³ª CGI ÇÁ·Î±×·¥À» ½ÇÇàÇÏÁö ¾ÊÀ»
            ÀÌÀ¯°¡ ¾ø´Ù. ¿¹¸¦ µé¾î, <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> Áö½Ã¾î¸¦ »ç¿ëÇÏ¿©
            »ç¿ëÀÚ°¡ ÀÚ½ÅÀÇ È¨µð·ºÅ丮¿¡ À¥ÆäÀÌÁö¸¦ °¡Áö´Â °æ¿ì¸¦
            °¡Á¤ÇÏÀÚ. »ç¿ëÀÚ°¡ ÀÚ½ÅÀÇ CGI ÇÁ·Î±×·¥À» »ç¿ëÇÏ°í ½ÍÀºµ¥
            <code>cgi-bin</code> µð·ºÅ丮¿¡ Á¢±Ù±ÇÇÑÀÌ ¾ø´Ù¸é, ´Ù¸¥
            °÷¿¡¼­¶óµµ CGI ÇÁ·Î±×·¥À» ½ÇÇàÇÏ°í ½ÍÀ» °ÍÀÌ´Ù.</p>
      
            <p>¾Æ¹« µð·ºÅ丮¿¡¼­³ª CGI ½ÇÇàÀ» Çã¿ëÇÏ·Á¸é µÎ °úÁ¤ÀÌ
            ÇÊ¿äÇÏ´Ù. ¸ÕÀú, <code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code>³ª <code class="directive"><a href="../mod/core.html#sethandler">SetHandler</a></code> Áö½Ã¾î¸¦ »ç¿ëÇÏ¿©
            <code>cgi-script</code> Çڵ鷯¸¦ ÀÛµ¿ÇØ¾ß ÇÑ´Ù. µÎ¹øÂ°·Î,
            <code class="directive"><a href="../mod/core.html#options">Options</a></code> Áö½Ã¾î¿¡
            <code>ExecCGI</code>¸¦ ÁöÁ¤ÇØ¾ß ÇÑ´Ù.</p>
          
      
          <h3><a name="options" id="options">Options¸¦ »ç¿ëÇÏ¿© ¸í½ÃÀûÀ¸·Î CGI ½ÇÇàÀ» Çã¿ëÇϱâ</a></h3>
            
      
            <p>¼­¹öÀÇ ÁÖ¼³Á¤ÆÄÀÏ¿¡ Á÷Á¢ <code class="directive"><a href="../mod/core.html#options">Options</a></code> Áö½Ã¾î¸¦ »ç¿ëÇÏ¿© ƯÁ¤
            µð·ºÅ丮¿¡¼­ CGI ½ÇÇàÀ» Çã¿ëÇÒ ¼ö ÀÖ´Ù.</p>
      
            <div class="example"><p><code>
              &lt;Directory /usr/local/apache2/htdocs/somedir&gt;<br />
              <span class="indent">
                Options +ExecCGI<br />
              </span>
              &lt;/Directory&gt;
            </code></p></div>
      
            <p>À§ Áö½Ã¾î·Î ¾ÆÆÄÄ¡´Â CGI ÆÄÀÏÀÇ ½ÇÇàÀ» Çã¿ëÇÑ´Ù. ¾î¶²
            ÆÄÀÏÀÌ CGI ÆÄÀÏÀÎÁöµµ ¼­¹ö¿¡°Ô ¾Ë·Á¾ß ÇÑ´Ù. ´ÙÀ½ <code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code> Áö½Ã¾î´Â ¼­¹ö¿¡°Ô
            È®ÀåÀÚ°¡ <code>cgi</code>³ª <code>pl</code>ÀÎ ÆÄÀÏÀº ¸ðµÎ
            CGI ÇÁ·Î±×·¥À̶ó°í ¾Ë¸°´Ù.</p>
      
            <div class="example"><p><code>
              AddHandler cgi-script .cgi .pl
            </code></p></div>
          
      
          <h3><a name="htaccess" id="htaccess">.htaccess ÆÄÀÏ</a></h3>
            
      
            <p><a href="htaccess.html"><code>.htaccess</code> ÅõÅ丮¾ó</a>Àº
            <code>httpd.conf</code>¿¡ Á¢±Ù±ÇÇÑÀÌ ¾ø´Â °æ¿ì¿¡ CGI ÇÁ·Î±×·¥À»
            »ç¿ëÇÒ ¼ö ÀÖ´Â ¹æ¹ýÀ» ¾Ë·ÁÁØ´Ù.</p>
          
      
          <h3><a name="userdir" id="userdir">»ç¿ëÀÚ µð·ºÅ丮</a></h3>
            
      
            <p>¾Æ·¡ ¼³Á¤À» »ç¿ëÇÏ¸é »ç¿ëÀÚ µð·ºÅ丮¿¡¼­ <code>.cgi</code>·Î
            ³¡³ª´Â ÆÄÀÏÀ» CGI ÇÁ·Î±×·¥À¸·Î ½ÇÇàÇÑ´Ù.</p>
      
            <div class="example"><p><code>
            &lt;Directory /home/*/public_html&gt;<br />
            <span class="indent">
              Options +ExecCGI<br />
              AddHandler cgi-script .cgi<br />
            </span>
            &lt;/Directory&gt;
            </code></p></div>
      
            <p>´ÙÀ½À» »ç¿ëÇÏ¸é »ç¿ëÀÚ µð·ºÅ丮ÀÇ <code>cgi-bin</code>
            ÇÏÀ§µð·ºÅ丮¿¡ ÀÖ´Â ¸ðµç ÆÄÀÏÀ» CGI ÇÁ·Î±×·¥À¸·Î ÀνÄÇÑ´Ù.</p>
      
            <div class="example"><p><code>
            &lt;Directory /home/*/public_html/cgi-bin&gt;<br />
            <span class="indent">
              Options ExecCGI<br />
              SetHandler cgi-script<br />
            </span>
            &lt;/Directory&gt;
            </code></p></div>
      
          
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="writing" id="writing">CGI ÇÁ·Î±×·¥ ÀÛ¼ºÇϱâ</a></h2>
          
      
          <p>``ÀϹÝÀûÀÎ'' ÇÁ·Î±×·¡¹Ö°ú CGI ÇÁ·Î±×·¡¹Ö »çÀÌ¿¡´Â µÎ°¡Áö
          ÁÖµÈ Â÷ÀÌÁ¡ÀÌ ÀÖ´Ù.</p>
      
          <p>ù¹øÂ° Â÷ÀÌ´Â CGI ÇÁ·Î±×·¥Àº ´Ù¸¥ Ãâ·ÂÀ» ÇϱâÀü¿¡ ¸ÕÀú
          MIME-type Çì´õ¸¦ Ãâ·ÂÇØ¾ß ÇÑ´Ù´Â Á¡ÀÌ´Ù. HTTP Çì´õ´Â
          Ŭ¶óÀÌ¾ðÆ®¿¡°Ô Ŭ¶óÀÌ¾ðÆ®°¡ ¾î¶² ³»¿ëÀ» ¹Þ°ÔµÉÁö ¹Ì¸® ¾Ë¸°´Ù.
          º¸Åë ´ÙÀ½°ú °°´Ù.</p>
      
          <div class="example"><p><code>
            Content-type: text/html
          </code></p></div>
      
          <p>µÎ¹øÂ° Â÷ÀÌ´Â HTML ȤÀº ºê¶ó¿ìÀú°¡ º¸¿©ÁÙ ¼ö ÀÖ´Â Çü½ÄÀ¸·Î
          Ãâ·ÂÇØ¾ß ÇÑ´Ù´Â Á¡ÀÌ´Ù. ´ëºÎºÐÀÇ °æ¿ì HTMLÀ» Ãâ·ÂÇÏÁö¸¸,
          ¶§¶§·Î gif ±×¸²°ú °°ÀÌ HTMLÀÌ ¾Æ´Ñ ³»¿ëÀ» Ãâ·ÂÇÏ´Â CGI
          ÇÁ·Î±×·¥À» ÀÛ¼ºÇÏ´Â °æ¿ìµµ ÀÖ´Ù.</p>
      
          <p>µÎ°¡Áö¸¦ Á¦¿ÜÇϰí´Â CGI ÇÁ·Î±×·¥ ÀÛ¼ºÀº ÀÌ¹Ì ¸¸µé¾î º¸¾ÒÀ»
          ´Ù¸¥ ÇÁ·Î±×·¥µé°ú ¸Å¿ì ºñ½ÁÇÏ´Ù.</p>
      
          <h3><a name="firstcgi" id="firstcgi">óÀ½À¸·Î ¸¸µç CGI ÇÁ·Î±×·¥</a></h3>
            
      
            <p>´ÙÀ½Àº ºê¶ó¿ìÀú¿¡ ÇÑ ÁÙÀ» Âï´Â CGI ÇÁ·Î±×·¥ ¿¹Á¦´Ù.
            ±×´ë·Î <code>first.pl</code>À̶ó´Â ÆÄÀÏ¿¡ ÀúÀåÇϰí,
            <code>cgi-bin</code> µð·ºÅ丮¿¡ º¹»çÇÑ´Ù.</p>
      
            <div class="example"><p><code>
              #!/usr/bin/perl<br />
              print "Content-type: text/html\n\n";<br />
              print "Hello, World.";
            </code></p></div>
      
            <p>Perl¿¡ Àͼ÷ÇÏÁö ¾Ê´õ¶óµµ ¹«½¼ ÀÏÀÌ ÀϾ´ÂÁö ¾Ë ¼ö
            ÀÖ´Ù. ù¹øÂ° ÁÙÀº ¾ÆÆÄÄ¡(ȤÀº »ç¿ëÇÏ´Â ½©)¿¡°Ô
            <code>/usr/bin/perl</code> À§Ä¡¿¡ ÀÖ´Â ÀÎÅÍÇÁ¸®ÅÍÀ» »ç¿ëÇÏ¿©
            ÀÌ ÇÁ·Î±×·¥ ÆÄÀÏÀ» ½ÇÇàÇ϶ó°í ¾Ë¸°´Ù. µÎ¹øÂ° ÁÙÀº ¹æ±Ý
            ¸»ÇÑ content-type ¼±¾ðÀ» Ãâ·ÂÇϰí carriage-return ÁٹٲÞÀ»
            µÎ¹ø Ãâ·ÂÇÑ´Ù. ±×·¯¸é Çì´õ µÚ¿¡ HTTP Çì´õÀÇ ³¡À» ¶æÇÏ´Â
            ºóÁÙÀÌ »ý±â°í, º»¹®ÀÌ ½ÃÀÛÇÑ´Ù. ¼¼¹øÂ° ÁÙÀº "Hello, World."
            ¹®ÀÚ¿­À» Ãâ·ÂÇÑ´Ù. À̰ÍÀ¸·Î ³¡ÀÌ´Ù.</p>
      
            <p>ºê¶ó¿ìÀú¸¦ ½ÇÇàÇϰí ÁÖ¼Ò¸¦ ÀÔ·ÂÇÑ´Ù</p>
      
            <div class="example"><p><code>
              http://www.example.com/cgi-bin/first.pl
            </code></p></div>
      
            <p>ÆÄÀÏ Àå¼Ò¸¦ ÀÔ·ÂÇϸé, ºê¶ó¿ìÀúâ¿¡ <code>Hello, World.</code>
            ÇÑ ÁÙÀÌ º¸ÀδÙ. ÈïºÐµÇÁö´Â ¾ÊÁö¸¸, Çѹø µ¿ÀÛÇÏ´Â °ÍÀ»
            º¸¾ÒÀ¸´Ï ÀÌÁ¦ ´Ù¸¥ °ÍÀ» ½ÃµµÇØ º¼ ¼ö ÀÖ´Ù.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="troubleshoot" id="troubleshoot">±×·¯³ª ¾ÆÁ÷ µ¿ÀÛÇÏÁö ¾Ê¾Æ¿ä!</a></h2>
          
      
          <p>À¥¿¡¼­ CGI ÇÁ·Î±×·¥¿¡ Á¢±ÙÇÒ¶§ ºê¶ó¿ìÀú¿¡ ³ª¿Ã ¼ö ÀÖ´Â
          ³»¿ëÀº ±âº»ÀûÀ¸·Î ³×°¡Áö´Ù.</p>
      
          <dl>
            <dt>CGI ÇÁ·Î±×·¥ÀÇ Ãâ·Â</dt>
            <dd>ÁÁ´Ù! ¸ðµç °ÍÀÌ Àß µ¿ÀÛÇÑ´Ù´Â ¶æÀÌ´Ù. Ãâ·ÂÀº Á¤È®ÇÏÁö¸¸
            ºê¶ó¿ìÀú°¡ ¿Ã¹Ù·Î ó¸®ÇÏÁö ¸øÇÑ´Ù¸é, CGI ÇÁ·Î±×·¥¿¡¼­
            ¿Ã¹Ù¸¥ <code>Content-Type</code>À» ¼³Á¤ÇÏ¿´´ÂÁö È®ÀÎÇÑ´Ù.</dd>
      
            <dt>CGI ÇÁ·Î±×·¥ ¼Ò½ºÄÚµå ȤÀº "POST Method Not Allowed"
            ¹®±¸</dt>
            <dd>CGI ÇÁ·Î±×·¥À» ½ÇÇàÇϵµ·Ï ¾ÆÆÄÄ¡¸¦ ÀûÀýÈ÷ ¼³Á¤ÇÏÁö
            ¾Ê¾Ò´Ù´Â ¶æÀÌ´Ù. <a href="#configuring">¾ÆÆÄÄ¡ ¼³Á¤Çϱâ</a>
            ÀýÀ» ´Ù½Ã ÀÐ°í »©¸ÔÀº ºÎºÐÀÌ ÀÖ´ÂÁö ã¾ÆºÁ¶ó.</dd>
      
            <dt>"Forbidden"À¸·Î ½ÃÀÛÇÏ´Â ¹®±¸</dt>
            <dd>±ÇÇÑ ¹®Á¦°¡ ÀÖ´Ù´Â ¶æÀÌ´Ù. <a href="#errorlogs">¾ÆÆÄÄ¡
            ¿À·ù ·Î±×</a>¿Í ¾Æ·¡ <a href="#permissions">ÆÄÀϱÇÇÑ</a>
            ÀýÀ» È®ÀÎÇ϶ó.</dd>
      
            <dt>"Internal Server Error"¶ó´Â ¹®±¸</dt>
            <dd><a href="#errorlogs">¾ÆÆÄÄ¡ ¿À·ù ·Î±×</a>¸¦ º¸¸é ¾Æ¸¶µµ
            CGI ÇÁ·Î±×·¥ÀÌ Ãâ·ÂÇÑ ¿À·ù¹®°ú ÇÔ²² "Premature end of
            script headers"°¡ º¸ÀÏ °ÍÀÌ´Ù. ÀÌ °æ¿ì ¾Æ·¡ ³»¿ëµéÀ» Çϳª¾¿
            È®ÀÎÇÏ¿© ¾î¶² ÀÌÀ¯·Î CGI ÇÁ·Î±×·¥ÀÌ ÀûÀýÇÑ HTTP Çì´õ¸¦
            Ãâ·ÂÇÏÁö ¸øÇß´ÂÁö ¾Ë¾Æº»´Ù.</dd>
          </dl>
      
          <h3><a name="permissions" id="permissions">ÆÄÀϱÇÇÑ</a></h3>
            
      
            <p>¼­¹ö´Â ´ç½Å°ú µ¿ÀÏÇÑ °èÁ¤À¸·Î µ¿ÀÛÇÏÁö ¾ÊÀ½À» ¸í½ÉÇ϶ó.
            Áï, ¼­¹ö°¡ ½ÃÀÛÇÏ¸é ¼­¹ö´Â ºñƯ±Ç »ç¿ëÀÚ ±ÇÇÑ(º¸Åë
            <code>nobody</code>³ª <code>www</code>)À¸·Î µ¿ÀÛÇÑ´Ù.
            ±×·¡¼­ ´ç½ÅÀÌ ¼ÒÀ¯ÇÑ ÆÄÀÏÀ» ½ÇÇàÇÏ·Á¸é ±ÇÇÑÀÌ ÇÊ¿äÇÏ´Ù.
            ÆÄÀÏ¿¡ <code>nobody</code>°¡ ½ÇÇàÇϱ⿡ ÃæºÐÇÑ ±ÇÇÑÀ»
            ÁÖ±âÀ§ÇØ º¸Åë ¸ðµÎ¿¡°Ô ÆÄÀÏÀÇ ½ÇÇà ±ÇÇÑÀ» ÁØ´Ù.</p>
      
            <div class="example"><p><code>
              chmod a+x first.pl
            </code></p></div>
      
            <p>¶Ç, ÇÁ·Î±×·¥ÀÌ ´Ù¸¥ ÆÄÀÏÀ» Àаųª ¾´´Ù¸é ÀÌ ÆÄÀÏ¿¡µµ
            ÀûÀýÇÑ ±ÇÇÑÀÌ ÇÊ¿äÇÏ´Ù.</p>
      
          
      
          <h3><a name="pathinformation" id="pathinformation">°æ·Î Á¤º¸¿Í ȯ°æ</a></h3>
            
      
            <p>¸í·ÉÇà¿¡¼­ ÇÁ·Î±×·¥À» ½ÇÇàÇϸé ÀÚµ¿À¸·Î ¾î¶² Á¤º¸°¡
            ½©·Î Àü´ÞµÈ´Ù. ¿¹¸¦ µé¾î, <code>PATH</code>´Â ½©¿¡°Ô ´ç½ÅÀÌ
            ¸»ÇÑ ÆÄÀÏÀ» ãÀ» Àå¼Ò¸¦ ¾Ë·ÁÁØ´Ù.</p>
      
            <p>À¥¼­¹ö°¡ ÇÁ·Î±×·¥À» CGI ÇÁ·Î±×·¥À¸·Î ½ÇÇàÇÒ¶§´Â
            <code>PATH</code>°¡ ´Ù¸¦ ¼ö ÀÖ´Ù. (¿¹¸¦ µé¾î,
            <code>sendmail</code> °°ÀÌ) CGI ÇÁ·Î±×·¥ ¾È¿¡¼­ ½ÇÇàÇÏ´Â
            ¸í·É¾î´Â ¿ÏÀüÇÑ °æ·Î·Î ¸í½ÃÇØ¾ß ½©ÀÌ ¸í·É¾î¸¦ ãÀ» ¼ö
            ÀÖ´Ù.</p>
      
            <p>°æ·Î ¹®Á¦´Â ´ÙÀ½°ú °°ÀÌ CGI ÇÁ·Î±×·¥ ù¹øÂ° ÁÙ¿¡ ³ª¿À´Â
            ½ºÅ©¸³Æ® ÀÎÅÍÇÁ¸®ÅÍ (º¸Åë <code>perl</code>) °æ·Î¿¡¼­
            ÀÚÁÖ ¹ß»ýÇÑ´Ù.</p>
      
            <div class="example"><p><code>
              #!/usr/bin/perl
            </code></p></div>
      
            <p>½ÇÁ¦·Î ÀÎÅÍÇÁ¸®ÅÍÀÇ °æ·ÎÀÎÁö È®ÀÎÇÑ´Ù.</p>
      
            <p>¶Ç, CGI ÇÁ·Î±×·¥ÀÌ ´Ù¸¥ <a href="#env">ȯ°æº¯¼ö</a>¸¦
            »ç¿ëÇÑ´Ù¸é ¾ÆÆÄÄ¡°¡ ÀÌ º¯¼öµéÀ» ÇÁ·Î±×·¥¿¡°Ô Àü´ÞÇØ¾ß
            ÇÑ´Ù.</p>
      
          
      
          <h3><a name="syntaxerrors" id="syntaxerrors">ÇÁ·Î±×·¥ ¿À·ù</a></h3>
            
      
            <p>CGI ÇÁ·Î±×·¥ÀÌ ½ÇÆÐÇÏ´Â °æ¿ì ´ëºÎºÐ ÇÁ·Î±×·¥ ÀÚü
            ¹®Á¦¶§¹®ÀÌ´Ù. ƯÈ÷ À§ÀÇ µÎ°¡Áö ½Ç¼ö¸¦ ÇÏÁö ¾Ê¾Ò°í ÀÌ ±ÛÀ»
            °è¼Ó º¸°í ÀÖ´Ù¸é ´õ´õ¿í ±×·¸´Ù. ¸ÕÀú À¥¼­¹ö¿¡¼­ ½ÇÇàÇϱâ
            Àü¿¡ ¸í·ÉÇà¿¡¼­ ÇÁ·Î±×·¥À» ½ÇÇàÇØº»´Ù. ¿¹¸¦ µé¾î, ´ÙÀ½°ú
            °°ÀÌ ½ÇÇàÇÑ´Ù.</p>
      
            <div class="example"><p><code>
            cd /usr/local/apache2/cgi-bin<br />
            ./first.pl
            </code></p></div>
      
            <p>(<code>perl</code> ÀÎÅÍÇÁ¸®Å͸¦ ½ÇÇàÇÏÁö ¸¶¶ó. ½©°ú
            ¾ÆÆÄÄ¡´Â ½ºÅ©¸³Æ® ù¹øÂ° ÁÙ¿¡ ÀÖ´Â <a href="#pathinformation">°æ·Î Á¤º¸</a>¸¦ »ç¿ëÇÏ¿© ÀÎÅÍÇÁ¸®Å͸¦
            ã¾Æ¾ß ÇÑ´Ù.)</p>
      
            <p>ÇÁ·Î±×·¥Àº Á¦ÀÏ ¸ÕÀú <code>Content-Type</code>À» Æ÷ÇÔÇÑ
            HTTP Çì´õµéÀ» Ãâ·ÂÇÏ°í ºó ÁÙÀ» Ãâ·ÂÇØ¾ß ÇÑ´Ù. ´Ù¸¥ °ÍÀ»
            Ãâ·ÂÇÑ´Ù¸é À¥¼­¹ö¿¡¼­ ½ÇÇàÇÒ °æ¿ì ¾ÆÆÄÄ¡´Â <code>Premature
            end of script headers</code>¸¦ ¹ÝȯÇÑ´Ù. ÀÚ¼¼ÇÑ ³»¿ëÀº
            À§ÀÇ <a href="#writing">CGI ÇÁ·Î±×·¥ ÀÛ¼ºÇϱâ</a>¸¦ Âü°íÇ϶ó.</p>
          
      
          <h3><a name="errorlogs" id="errorlogs">¿À·ù ·Î±×</a></h3>
            
      
            <p>¿À·ù ·Î±×´Â ´ç½Å ÆíÀÌ´Ù. ¹«¾ð°¡ À߸øµÇ¸é ¿À·ù ·Î±×¿¡
            ¹®±¸°¡ »ý±ä´Ù. ¿À·ù ·Î±×¸¦ Á¦ÀÏ ¸ÕÀú »ìÆìºÁ¾ß ÇÑ´Ù. À¥»çÀÌÆ®¸¦
            È£½ºÆÃÇÏ´Â °÷¿¡¼­ ¿À·ù ·Î±×¸¦ º¸Áö ¸øÇÏ°Ô ÇÑ´Ù¸é, ¾Æ¸¶µµ
            ´Ù¸¥ ¾÷ü¸¦ ¾Ë¾ÆºÁ¾ß ÇÑ´Ù. ¿À·ù ·Î±×¸¦ º¸´Â ¹æ¹ýÀ» ÀÍÈ÷¸é,
            ´ëºÎºÐÀÇ ¹®Á¦¸¦ »¡¸® ÆÄ¾ÇÇÏ¿© ÇØ°áÇÒ ¼ö ÀÖ´Ù.</p>
          
      
          <h3><a name="suexec" id="suexec">Suexec</a></h3>
            
      
            <p><a href="../suexec.html">suexec</a> Áö¿ø ÇÁ·Î±×·¥À»
            »ç¿ëÇÏ¸é ¾î¶² °¡»óÈ£½ºÆ® ȤÀº ¾î¶² »ç¿ëÀÚ µð·ºÅ丮¿¡ ÀÖ´ÂÁö¿¡
            µû¶ó CGI ÇÁ·Î±×·¥À» ´Ù¸¥ »ç¿ëÀÚ ±ÇÇÑÀ¸·Î ½ÇÇàÇÒ ¼ö ÀÖ´Ù.
            Suexec´Â ¸Å¿ì ¾ö°ÝÇÏ°Ô ±ÇÇÑÀ» °Ë»çÇϸç, °Ë»ç¸¦ Çϳª¶óµµ
            Åë°úÇÏÁö ¸øÇϸé CGI ÇÁ·Î±×·¥À» ½ÇÇàÇÏÁö ¾Ê°í <code>Premature
            end of script headers</code>¸¦ ¹ÝȯÇÑ´Ù.</p>
      
            <p>suexec¸¦ »ç¿ëÇϰí ÀÖ´ÂÁö ¾Ë·Á¸é <code>apachectl -V</code>¸¦
            ½ÇÇàÇÏ¿© <code>SUEXEC_BIN</code> À§Ä¡¸¦ È®ÀÎÇÑ´Ù. ¾ÆÆÄÄ¡°¡
            ½ÃÀÛÇÒ¶§ ±× Àå¼Ò¿¡¼­ suexec ½ÇÇàÆÄÀÏÀ» ¹ß°ßÇϸé, suexec¸¦
            »ç¿ëÇÒ ¼ö ÀÖ´Ù.</p>
      
            <p>suexec¸¦ ¿ÏÀüÈ÷ ÀÌÇØÇÏÁö ¸øÇß´Ù¸é »ç¿ëÇØ¼­´Â ¾ÈµÈ´Ù.
            suexec¸¦ »ç¿ëÇÏÁö ¾ÊÀ¸·Á¸é <code>SUEXEC_BIN</code> À§Ä¡¿¡
            ÀÖ´Â <code>suexec</code> ½ÇÇàÆÄÀÏÀ» Áö¿ì°í (ȤÀº ÆÄÀϸíÀ»
            ¹Ù²Ù°í) ¼­¹ö¸¦ Àç½ÃÀÛÇÏ¸é µÈ´Ù. <a href="../suexec.html">suexec</a>¿¡ ´ëÇØ ÀÐÀº ´ÙÀ½ ±×·¡µµ
            »ç¿ëÇÏ°í ½Í´Ù¸é, <code>suexec -V</code>¸¦ ½ÇÇàÇÏ¿© suexec
            ·Î±×ÆÄÀÏ À§Ä¡¸¦ ¾Ë¾Æ³»°í ·Î±×ÆÄÀÏ¿¡¼­ ´ç½ÅÀÌ ¾î¶² ±ÔÄ¢À»
            ¾î±â°í ÀÖ´ÂÁö ã´Â´Ù.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="behindscenes" id="behindscenes">µÚ¿¡¼­´Â ¹«½¼ ÀÏÀÌ ¹ú¾îÁö´Â°¡?</a></h2>
          
      
          <p>CGI ÇÁ·Î±×·¡¹Ö¿¡ Àͼ÷ÇØÁú¼ö·Ï µÚ¿¡¼­ ¹ú¾îÁö´Â ÀÏÀ» ÀÌÇØÇϸé
          µµ¿òÀÌ µÈ´Ù. ±¸Ã¼ÀûÀ¸·Î ºê¶ó¿ìÀú¿Í ¼­¹ö°¡ ¼­·Î Åë½ÅÇÏ´Â
          ¹æ¹ýÀ» ¸»ÇÏ´Â °ÍÀÌ´Ù. ¸ô¶óµµ "Hello, World."¸¦ Ãâ·ÂÇÏ´Â
          ÇÁ·Î±×·¥À» ÀÛ¼ºÇÒ ¼ö ÀÖÁö¸¸ ÀÌ·± ÇÁ·Î±×·¥Àº º°·Î ¾µ¸ð°¡
          ¾ø±â¶§¹®ÀÌ´Ù.</p>
      
          <h3><a name="env" id="env">ȯ°æº¯¼ö</a></h3>
            
      
            <p>ȯ°æº¯¼ö´Â ´ç½ÅÀÌ ÄÄÇ»Å͸¦ »ç¿ëÇÏ´Â µ¿¾È ´ç½Å ÁÖÀ§¸¦
            ¶°´Ù´Ï´Â °ªÀÌ´Ù. ȯ°æº¯¼ö´Â path (ÄÄÇ»ÅͰ¡ ´ç½ÅÀÌ ÀÔ·ÂÇÑ
            ¸í·É¾î¿¡ ÇØ´çÇÏ´Â ½ÇÁ¦ ÆÄÀÏÀ» ã´Â Àå¼Ò), »ç¿ëÀÚ¸í, Å͹̳Î
            Á¾·ù¿Í °°ÀÌ À¯¿ëÇÑ Á¤º¸´Ù. ÀϹÝÀûÀΠȯ°æº¯¼ö¸¦ ¸ðµÎ º¸·Á¸é
            ¸í·ÉÇà ÇÁ·ÒÇÁÆ®¿¡¼­ <code>env</code>¸¦ ÀÔ·ÂÇÑ´Ù.</p>
      
            <p>CGI¸¦ ½ÇÇàÇÒ¶§µµ ¼­¹ö¿Í ºê¶ó¿ìÀú´Â °¢ÀÚÀÇ È¯°æº¯¼ö¸¦
            ¼­·Î ±³È¯ÇÑ´Ù. ÀÌ Á¤º¸¿¡´Â ºê¶ó¿ìÀú Á¾·ù (Netscape, IE,
            Lynx), ¼­¹ö Á¾·ù (¾ÆÆÄÄ¡, IIS, WebSite), ½ÇÇàÇÏ´Â CGI
            ÇÁ·Î±×·¥¸í µîÀÌ ÀÖ´Ù.</p>
      
            <p>CGI ÇÁ·Î±×·¡¸Ó´Â ÀÌ·± º¯¼öµéÀ» »ç¿ëÇÒ ¼ö ÀÖ°í,
            ȯ°æº¯¼ö´Â Ŭ¶óÀ̾ðÆ®-¼­¹ö Åë½Å¿¡´Â ÀϺκÐÀ» Â÷ÁöÇÑ´Ù.
            Àüü Çʼö º¯¼ö ¸ñ·ÏÀº <a href="http://hoohoo.ncsa.uiuc.edu/cgi/env.html">http://hoohoo.ncsa.uiuc.edu/cgi/env.html</a>¿¡ ÀÖ´Ù.</p>
      
            <p>¾Æ·¡ °£´ÜÇÑ Perl CGI ÇÁ·Î±×·¥Àº Àڽſ¡°Ô Àü´ÞµÈ ¸ðµç
            ȯ°æº¯¼ö¸¦ º¸¿©ÁØ´Ù. ¾ÆÆÄÄ¡ ¹èÆ÷º»ÀÇ <code>cgi-bin</code>
            µð·ºÅ丮¿¡ ÀÌ¿Í ºñ½ÁÇÑ ÇÁ·Î±×·¥ÀÌ µÎ°³ ÀÖ´Ù. ¸î¸î º¯¼ö´Â
            ÇʼöÀÌ°í ³ª¸ÓÁö´Â ¼±ÅÃÀûÀÌ´Ù. ±×·¡¼­ °ø½Ä ¸ñ·Ï¿¡ ¾ø´Â
            º¯¼öµµ º¸ÀδÙ. ¶Ç, ¾ÆÆÄÄ¡´Â ±âº»ÀûÀ¸·Î Á¦°øÇϴ ȯ°æº¯¼ö
            ¿Ü¿¡ ¿©·¯°¡Áö ¹æ¹ýÀ¸·Î <a href="../env.html">Á÷Á¢ ȯ°æº¯¼ö¸¦
            Ãß°¡ÇÒ ¼ö ÀÖ´Ù</a>.</p>
      
            <div class="example"><p><code>
              #!/usr/bin/perl<br />
              print "Content-type: text/html\n\n";<br />
              foreach $key (keys %ENV) {<br />
              <span class="indent">
                print "$key --&gt; $ENV{$key}&lt;br&gt;";<br />
              </span>
              }
            </code></p></div>
          
      
          <h3><a name="stdin" id="stdin">STDIN°ú STDOUT</a></h3>
            
      
            <p>¶Ç, ¼­¹ö¿Í Ŭ¶óÀÌ¾ðÆ®´Â Ç¥ÁØÀÔ·Â(<code>STDIN</code>)°ú
            Ç¥ÁØÃâ·Â(<code>STDOUT</code>)À¸·Î Åë½ÅÇÑ´Ù. ÀÏ»óÀûÀÎ °æ¿ì
            <code>STDIN</code>Àº Űº¸µå³ª ÇÁ·Î±×·¥ÀÌ Ã³¸®ÇÏ´Â ÆÄÀÏÀ»
            ³ªÅ¸³»°í, <code>STDOUT</code>Àº º¸Åë ÄܼÖÀ̳ª È­¸éÀ» ¶æÇÑ´Ù.</p>
      
            <p>CGI ÇÁ·Î±×·¥¿¡°Ô À¥ ¾ç½Ä(form)À» <code>POST</code>Çϸé
            ¾ç½Ä¿¡ ÀÔ·ÂÇÑ ÀڷḦ Ưº°ÇÑ Çü½ÄÀ¸·Î ¹­¾î¼­ CGI ÇÁ·Î±×·¥ÀÇ
            <code>STDIN</code>À¸·Î Àü´ÞÇÑ´Ù. ±×·¯¸é ÇÁ·Î±×·¥Àº Űº¸µå³ª
            ÆÄÀÏ¿¡¼­ ¾òÀº ÀڷḦ ó¸®ÇϵíÀÌ ÀڷḦ ó¸®ÇÒ ¼ö ÀÖ´Ù.</p>
      
            <p>"Ưº°ÇÑ Çü½Ä"Àº ¸Å¿ì °£´ÜÇÏ´Ù. Ç׸ñ À̸§°ú °ªÀ» µîÈ£(=)·Î
            ¿¬°áÇϰí, Ç׸ñ À̸§°ú °ªÀÇ ½ÖµéÀ» ¼­·Î ¾ØÆÛ»÷µå(&amp;)·Î
            ¿¬°áÇÑ´Ù. °ø¹é, ¾ÚÆÛ»÷µå, µîÈ£ °°Àº ºÎÀÚ¿¬½º·¯¿î ¹®ÀÚ´Â
            È¥µ¿ÇÏÁö ¾Êµµ·Ï 16Áø¼ö·Î º¯È¯ÇÑ´Ù. ¿ÏÀüÇÑ ÀÚ·á ¹®ÀÚ¿­Àº
            ´ÙÀ½°ú °°ÀÌ »ý°å´Ù.</p>
      
            <div class="example"><p><code>
              name=Rich%20Bowen&amp;city=Lexington&amp;state=KY&amp;sidekick=Squirrel%20Monkey
            </code></p></div>
      
            <p>Á¾Á¾ URL µÚ¿¡¼­ ÀÌ·± ¹®ÀÚ¿­À» º¸°Ô µÈ´Ù. ÀÌ °æ¿ì ¼­¹ö´Â
            ¹®ÀÚ¿­À» <code>QUERY_STRING</code>À̶ó´Â ȯ°æº¯¼ö¿¡ ÀúÀåÇÑ´Ù.
            À̸¦ <code>GET</code> ¿äûÀ̶ó°í ÇÑ´Ù. <code>FORM</code>
            ű×ÀÇ <code>METHOD</code> ¼Ó¼ºÀ» ÁöÁ¤ÇÏ¿© HTML ¾ç½Ä(form)ÀÌ
            ÀڷḦ <code>GET</code>ÇÒÁö <code>POST</code>ÇÒÁö °áÁ¤ÇÑ´Ù.</p>
      
            <p>ÀÌÁ¦ ÇÁ·Î±×·¥Àº ÀÌ·± ¹®ÀÚ¿­À» À¯¿ëÇÑ Á¤º¸·Î Âɰ³¾ß
            ÇÑ´Ù.  ´ÙÇàÈ÷µµ ÀÌ·± ÀÚ·á 󸮸¦ µ½°í CGI ÇÁ·Î±×·¥ÀÇ ´Ù¸¥
            ¿©·¯ ¸éÀ» »ìÇÇ´Â ¶óÀ̺귯¸®¿Í ¸ðµâµéÀÌ ÀÖ´Ù.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="libraries" id="libraries">CGI ¸ðµâ/¶óÀ̺귯¸®</a></h2>
          
      
          <p>CGI ÇÁ·Î±×·¥À» ÀÛ¼ºÇÒ¶§ Áö·çÇÑ ÀÛ¾÷À» ´ë½ÅÇØÁÖ´Â ÄÚµå
          ¶óÀ̺귯¸® ȤÀº ¸ðµâÀ» »ç¿ëÇÒÁö °í·ÁÇØºÁ¾ß ÇÑ´Ù. ÀÌ·± °ÍÀ»
          »ç¿ëÇÏ¸é ¹ö±×°¡ ÁÙ°í ´õ »¡¸® ÇÁ·Î±×·¥À» °³¹ßÇÒ ¼ö ÀÖ´Ù.</p>
      
          <p>Perl·Î CGI ÇÁ·Î±×·¥À» ÀÛ¼ºÇÑ´Ù¸é <a href="http://www.cpan.org/">CPAN</a>¿¡¼­ °ü·Ã ¸ðµâµéÀ» ãÀ»
          ¼ö ÀÖ´Ù. CGI °³¹ß¿¡ °¡Àå ³Î¸® »ç¿ëµÇ´Â ¸ðµâÀº
          <code>CGI.pm</code>ÀÌ´Ù. ´ëºÎºÐÀÇ ÇÁ·Î±×·¥¿¡ ÃæºÐÇÑ ÃÖ¼Ò
          ±â´ÉÀ» ±¸ÇöÇÑ <code>CGI::Lite</code>µµ °í·ÁÇØ º¼ ¼ö ÀÖ´Ù.</p>
      
          <p>C·Î CGI ÇÁ·Î±×·¥À» ÀÛ¼ºÇÑ´Ù¸é ¼±ÅÃÀÇ ¿©Áö°¡ ¸¹´Ù. ÀÌÁß
          Çϳª°¡ <a href="http://www.boutell.com/cgic/">http://www.boutell.com/cgic/</a>¿¡
          ÀÖ´Â <code>CGIC</code> ¶óÀ̺귯¸®´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="moreinfo" id="moreinfo">´õ ¸¹Àº Á¤º¸...</a></h2>
          
      
          <p>À¥¿¡ ¸Å¿ì ¸¹Àº CGI Á¤º¸°¡ ÀÖ´Ù. ´º½º±×·ì <a href="news:comp.infosystems.www.authoring.cgi">comp.infosystems.www.authoring.cgi</a>¿¡¼­ ¿©·¯ »ç¶÷µé°ú
          CGI ¹®Á¦¸¦ ³íÀÇÇÒ ¼ö ÀÖ´Ù. HTML Writers GuildÀÇ -servers
          ¸ÞÀϸµ¸®½ºÆ®´Â Áú¹®¿¡ ´ëÇÑ ´äÀ» ã±â¿¡ ÈǸ¢ÇÑ Àå¼Ò´Ù. <a href="http://www.hwg.org/lists/hwg-servers/">http://www.hwg.org/lists/hwg-servers/</a>¿¡¼­ ´õ ¸¹Àº °ÍÀ»
          ¾Ë ¼ö ÀÖ´Ù.</p>
      
          <p>±×¸®°í ¹°·Ð CGI ÇÁ·Î±×·¥ µ¿ÀÛ¿¡ ´ëÇÑ ¸ðµç ³»¿ëÀ» ¼³¸íÇÑ
          CGI ±Ô¾àÀ» Àоî¾ß ÇÒÁöµµ ¸ð¸¥´Ù. <a href="http://hoohoo.ncsa.uiuc.edu/cgi/interface.html">NCSA</a>¿¡
          ¿øº» ¹®¼­°¡ ÀÖ°í, ¼öÁ¤ÇÑ ÃʾÈÀº <a href="http://web.golux.com/coar/cgi/">Common Gateway Interface
          RFC ÇÁ·ÎÁ§Æ®</a>¿¡ ÀÖ´Ù.</p>
      
          <p>¸ÞÀϸµ¸®½ºÆ®³ª ´º½º±×·ì¿¡ ÇöÀç °Ý°í ÀÖ´Â CGI ¹®Á¦¿¡ ´ëÇØ
          Áú¹®ÇÒ¶§´Â ¹ß»ýÇÑ Çö»ó°ú ¿ø·¡ ±â´ëÇÑ °á°ú, ½ÇÁ¦·Î ¹ß»ýÇÑ
          Çö»óÀÌ ¾î¶»°Ô ´Ù¸¥Áö, »ç¿ëÇÏ´Â ¼­¹ö, CGI ÇÁ·Î±×·¥À» ÀÛ¼ºÇÑ
          ¾ð¾î, °¡´ÉÇϸé ÇØ´ç Äڵ带 ÀÚ¼¼È÷ Àû¾î¶ó. ±×·¯¸é ÇØ°áÃ¥À»
          ã±â ½¬¿öÁø´Ù.</p>
      
          <p>¾ÆÆÄÄ¡ ¼Ò½ºÄڵ尡 À߸øµÇ¾ú´Ù°í È®½ÅÇÏÁö ¾Ê´Â ÇÑ CGI Áú¹®À»
          ¾ÆÆÄÄ¡ ¹ö±× µ¥ÀÌÅͺ£À̽º¿¡ ¿Ã¸®¸é <strong>Àý´ë·Î</strong>
          ¾ÈµÈ´Ù.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/howto/cgi.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/cgi.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/cgi.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/cgi.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/cgi.html" title="Korean">&nbsp;ko&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/cgi.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/htaccess.html.es�����������������������������������������������������0000644�0000000�0000050�00000071270�13412755316�017710� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Tutorial del Servidor Apache HTTP: Ficheros .htaccess - Servidor HTTP Apache Versión 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="../">Versión 2.4</a> &gt; <a href="./">How-To / Tutoriales</a></div><div id="page-content"><div id="preamble"><h1>Tutorial del Servidor Apache HTTP: Ficheros .htaccess</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/htaccess.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/htaccess.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/htaccess.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/htaccess.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/htaccess.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../pt-br/howto/htaccess.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a></p>
      </div>
      
          <p>Los ficheros <code>.htaccess</code> facilitan una forma de realizar 
          cambios en la configuración en contexto directorio.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Ficheros .htaccess</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#what">Qué son/Cómo usarlos</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#when">Cuando (no) usar ficheros .htaccess</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#how">How directives are applied</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#auth">Ejemplo de Autenticación</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ssi">Ejemplo de Server Side Includes</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#rewrite">Reglas de Rewrite en ficheros .htaccess</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cgi">Ejemplo de CGI</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#troubleshoot">Resolución de problemas</a></li>
      </ul><h3>Consulte también</h3><ul class="seealso"><li><a href="#comments_section">Comentarios</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Ficheros .htaccess</a></h2>
          <table class="related"><tr><th>Módulos Relacionados</th><th>Directivas Relacionadas</th></tr><tr><td><ul><li><code class="module"><a href="../mod/core.html">core</a></code></li><li><code class="module"><a href="../mod/mod_authn_file.html">mod_authn_file</a></code></li><li><code class="module"><a href="../mod/mod_authz_groupfile.html">mod_authz_groupfile</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="../mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="../mod/mod_mime.html">mod_mime</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#accessfilename">AccessFileName</a></code></li><li><code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code></li><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="../mod/core.html#sethandler">SetHandler</a></code></li><li><code class="directive"><a href="../mod/mod_authn_core.html#authtype">AuthType</a></code></li><li><code class="directive"><a href="../mod/mod_authn_core.html#authname">AuthName</a></code></li><li><code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code></li><li><code class="directive"><a href="../mod/mod_authz_groupfile.html#authgroupfile">AuthGroupFile</a></code></li><li><code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code></li></ul></td></tr></table>
      
          <div class="note">Debería evitar usar ficheros <code>.htaccess</code> completamente si
          tiene acceso al fichero de configuración principal de httpd. Usar ficheros 
          <code>.htaccess</code> ralentiza su servidor Apache http. Cualquier 
          directiva que pueda incluir en un fichero <code>.htaccess</code> 
          estará mejor configurada dentro de una sección 
          <code class="directive"><a href="../mod/core.html#directory">Directory</a></code>, tendrá el mismo efecto y
          mejor rendimiento.</div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="what" id="what">Qué son/Cómo usarlos</a></h2>
      
      
          <p>Los ficheros <code>.htaccess</code> (o "ficheros de configuración
          distribuida") facilitan una forma de realizar cambios en la configuración
          en contexto directorio. Un fichero, que contiene una o más directivas, se 
          coloca en un documento específico de un directorio, y estas directivas 
          aplican a ese directorio y todos sus subdirectorios.</p>
      
          <div class="note"><h3>Nota:</h3>
            <p>Si quiere llamar a su fichero <code>.htaccess</code> de otra manera, 
            puede cambiar el nombre del fichero usando la directiva <code class="directive"><a href="../mod/core.html#accessfilename">AccessFileName</a></code>. Por ejemplo, si usted prefiere
            llamar al fichero <code>.config</code>, entonces puede poner lo siguiente
            en el fichero de configuración de su servidor:</p>
      
            <pre class="prettyprint lang-config">AccessFileName ".config"</pre>
      
          </div>
      
          <p>Generalmente, los ficheros <code>.htaccess</code> usan la misma sintáxis 
          que los <a href="../configuring.html#syntax">ficheros de la configuración
          principal</a>. Lo que puede utilizar en estos ficheros lo determina la 
          directiva <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>. Esta directiva
          especifica, en categorías, qué directivas tendrán efecto si se encuentran en 
          un fichero <code>.htaccess</code>. Si se permite una directiva en un fichero 
          <code>.htaccess</code>, la documentación para esa directiva contendrá una 
          sección Override, especificando qué valor debe ir en 
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> para que se permita esa
          directiva.</p>
      
          <p>Por ejemplo, si busca en la documentación la directiva <code class="directive"><a href="../mod/core.html#adddefaultcharset">AddDefaultCharset</a></code>, encontrará que se permite en
          ficheros <code>.htaccess</code>. (Vea la línea de Contexto en el sumario de
          la directiva.) La línea <a href="../mod/directive-dict.html#Context">Override</a> muestra
          <code>FileInfo</code>. De este modo, debe tener al menos
          <code>AllowOverride FileInfo</code> para que esta directiva se aplique en
          ficheros <code>.htaccess</code>.</p>
      
          <div class="example"><h3>Ejemplo:</h3><table>
              <tr>
                <td><a href="../mod/directive-dict.html#Context">Context:</a></td>
                <td>server config, virtual host, directory, .htaccess</td>
              </tr>
      
              <tr>
                <td><a href="../mod/directive-dict.html#Override">Override:</a></td>
                <td>FileInfo</td>
              </tr>
            </table></div>
      
          <p>Si no está seguro de cuándo, una directiva en concreto, se puede usar en un 
          fichero <code>.htaccess</code>, consulte la documentación para esa directiva, 
          y compruebe la línea Context buscando ".htaccess".</p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="when" id="when">Cuando (no) usar ficheros .htaccess</a></h2>
      
          <p>Generalmente, solo debería usar ficheros <code>.htaccess</code> cuando no
          tiene acceso al fichero principal de configuración del servidor. Hay, por
          ejemplo, una creencia errónea de que la autenticación de usuario debería 
          hacerse siempre dentro de ficheros <code>.htaccess</code>, y, más recientemente, otra creencia errónea de que las directivas de 
          <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code> deben ir en ficheros <code>.htaccess</code>. 
          Esto sencillamente no es el caso. Puede poner las configuraciones de 
          autenticación de usuario en la configuración principal del servidor, y esto 
          es de hecho, el método preferido de configurar Apache. Del mismo modo, las 
          directivas <code>mod_rewrite</code> funcionan mejor, en muchos sentidos, en 
          el fichero de configuración principal del servidor.</p>
      
          <p>Los ficheros <code>.htaccess</code> deberían usarse cuando su proveedor 
          de contenidos le permite hacer modificaciones de configuración 
          en contexto directorio, pero usted no tiene acceso de root en el servidor.
          En el caso de que el administrador no esté dispuesto a hacer cambios 
          frecuentes en la configuración, puede que sea necesario permitir a usuarios
          individuales realizar estos cambios de configuración en ficheros 
          <code>.htaccess</code> por ellos mismos. Lo cual ocurre a menudo, por 
          ejemplo, en casos donde los ISP están albergando múltiples sitios web de 
          usuario en una sola máquina, y quieren que sus usuarios tengan la 
          posibilidad de modificar sus configuraciones.</p>
      
          <p>Aun así, generalmente, el uso de ficheros <code>.htaccess</code> debería
          evitarse cuando sea posible. Cualquier configuración que consideraría poner
          en un fichero <code>.htaccess</code>, puede usarse con la misma efectividad
          en una sección <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> en el fichero de configuración 
          del servidor.</p>
      
          <p>Hay dos razones para evitar el uso de ficheros <code>.htaccess</code>.</p>
      
          <p>La primera es el rendimiento. Cuando <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>
          está configurado para permitir el uso de ficheros <code>.htaccess</code>, 
          httpd buscará ficheros <code>.htaccess</code> en cada directorio. Así,
          permitiendo ficheros <code>.htaccess</code> provoca una pérdida de 
          rendimiento, ¡incluso aunque no los use! Además, los ficheros 
          <code>.htaccess</code> se cargan cada vez que se solicita un documento.</p>
      
          <p>Además tenga en cuenta que httpd debe buscar ficheros 
          <code>.htaccess</code> en todos los directorios de mayor jerarquía, 
          para poder terner la lista completa de directivas que debe aplicar. (Vea
          la sección sobre <a href="#how">Cómo se aplican las directivas</a>.) Así, si
          se solicita un fichero de un directorio <code>/www/htdocs/example</code>, 
          httpd debe buscar los siguientes ficheros:</p>
      
          <div class="example"><p><code>
            /.htaccess<br />
            /www/.htaccess<br />
            /www/htdocs/.htaccess<br />
            /www/htdocs/example/.htaccess
          </code></p></div>
      
          <p>De esta manera, por cada acceso a un fichero de ese directorio, hay 4 
          accesos adicionales al sistema de ficheros, incluso si ninguno de esos 
          ficheros está presente. (Tenga en cuenta que este caso solo se daría si los 
          ficheros <code>.htaccess</code> están activados en <code>/</code>, que 
          generalmente no es el caso.).</p>
      
          <p>En el caso de las directivas <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code>, en el contexto de
          <code>.htaccess</code> estas expresiones regulares deben recompilarse con 
          cada solicitud a ese directorio, cuando en el contexto de configuración del
          servidor solo se compilan una vez y se cachean. Adicionalmente, las reglas
          en sí mismas son más complicadas, puesto que uno debe sortear las 
          restricciones que vienen acompañadas del contexto directorio y 
          <code>mod_rewrite</code>. Consulte la  <a href="../rewrite/intro.html#htaccess">Guía de Rewrite</a> para un mayor 
          detalle sobre este tema.</p>
      
          <p>La segunda consideración es de seguridad. Estará permitiendo que usuarios
          modifiquen la configuración del servidor, lo cual puede dar lugar a cambios sobre los que usted no tendrá ningún control. Medite profundamente si debe 
          dar a sus usuarios ese privilegio. Además tenga en cuenta que dar a los usuarios menos privilegios de los que necesitan dará lugar a más peticiones 
          de soporte. Asegúrese de que le indica a sus usuarios claramente el nivel de privilegios que les está dando. Especificando exactamente cómo ha 
          configurado <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>, e invíteles 
          a revisar la documentación relacionada, lo cual le ahorrará 
          bastantes confusiones más adelante.</p>
      
          <p>Tenga en cuenta que esto es equivalente por completo a poner un fichero
          <code>.htaccess</code> en un directorio <code>/www/htdocs/example</code> 
          con una directiva, y poner la misma directiva en una sección 
          Directory <code>&lt;Directory "/www/htdocs/example"&gt;</code> en su 
          configuración principal del servidor:</p>
      
          <p>Fichero <code>.htaccess</code> en <code>/www/htdocs/example</code>:</p>
      
          <div class="example"><h3>Contenido de fichero .htaccess en
          <code>/www/htdocs/example</code></h3><pre class="prettyprint lang-config">AddType text/example ".exm"</pre>
      </div>
      
          <div class="example"><h3>Sección de su fichero <code>httpd.conf</code></h3><pre class="prettyprint lang-config">&lt;Directory "/www/htdocs/example"&gt;
          AddType text/example ".exm"
      &lt;/Directory&gt;</pre>
      </div>
      
          <p>Aun así, poniendo ésta en el fichero de configuración dará como resultado
          una menor pérdida de rendimiento, y como la configuración se carga una vez
          cuando el httpd arranca, en lugar de cada vez que se solicita un fichero.</p>
      
          <p>El uso de ficheros <code>.htaccess</code> puede desactivarse por completo
          configurando la directiva <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>
          a <code>none</code>:</p>
      
          <pre class="prettyprint lang-config">AllowOverride None</pre>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="how" id="how">How directives are applied</a></h2>
      
          <p>Las directivas de configuración que se encuentran en el fichero
          <code>.htaccess</code> se aplican al directorio en el que el fichero
          <code>.htaccess</code> se encuentra, y a todos sus subdirectorios. Sin 
          embargo, es importante recordar que puede haber otros ficheros 
          <code>.htaccess</code> en directorios previos. Las directivas se aplican en
          el orden en el que se encuentran. Por lo tanto, un fichero 
          <code>.htaccess</code> puede sobrescribir directivas que se encuentran
          en ficheros <code>.htaccess</code> que se encuentran en directorios previos 
          del árbol de directorios. Y estos, en cambio, pueden haber sobrescrito 
          directivas que se encontraban más arriba, o en el fichero principal de 
          configuración del servidor mismo.</p>
      
          <p>Ejemplo:</p>
      
          <p>En el directorio <code>/www/htdocs/example1</code> tenemos un fichero
          <code>.htaccess</code> que contiene lo siguiente:</p>
      
          <pre class="prettyprint lang-config">Options +ExecCGI</pre>
      
      
          <p>(Nota: debe terner "<code>AllowOverride Options</code>" configurado para
          permitir el uso de la directiva "<code class="directive"><a href="../mod/core.html#options">Options</a></code>" en ficheros 
          <code>.htaccess</code> files.)</p>
      
          <p>En el directorio <code>/www/htdocs/example1/example2</code> tenemos un
          fichero <code>.htaccess</code> que contiene:</p>
      
          <pre class="prettyprint lang-config">Options Includes</pre>
      
      
          <p>Por este segundo fichero <code>.htaccess</code>, en el directorio
          <code>/www/htdocs/example1/example2</code>, la ejecución de CGI execution no
          está permitida, porque solo se ha definido <code>Options Includes</code>, 
          que sobrescribe completamente una configuración previa que se pudiera haber
          definido.</p>
      
          <h3><a name="merge" id="merge">Incorporando el .htaccess en los ficheros de 
          configuración principal</a></h3>
      
          <p>Como se ha comentado en la documentación en las <a href="../sections.html">Secciones de Configuración</a>, los ficheros
          <code>.htaccess</code> pueden sobrescribir las secciones <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> por el directorio
          correspondiente, pero se sobrescribirán por otros tipos de secciones de 
          configuración de los ficheros de configuración principal. Este hecho se
          puede usar para forzar ciertas configuraciones, incluso en presencia
          de una configuración laxa de 
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>. Por ejemplo, para 
          prevenir la ejecución de un script mientras se permite cualquier otra cosa 
          en <code>.htaccess</code> puede usar:</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/htdocs"&gt;
          AllowOverride All
      &lt;/Directory&gt;
      
      &lt;Location "/"&gt;
          Options +IncludesNoExec -ExecCGI
      &lt;/Location&gt;</pre>
      
      
          <div class="note">Este ejemplo asume que su <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code> es <code>/www/htdocs</code>.</div>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="auth" id="auth">Ejemplo de Autenticación</a></h2>
      
          <p>Si saltó directamente a esta parte del documento para averiguar como 
          hacer la autenticación, es important que tenga en cuenta una cosa. Hay una 
          creencia errónea de que necesita usar ficheros <code>.htaccess</code> para
          configurar autenticación con contraseña. Este no es el caso. Colocar las
          directivas de autenticación en una sección 
          <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code>, en su fichero
          de configuración principal, es el método recomendado para configurar esto, 
          y los ficheros <code>.htaccess</code> deberían usarse solamente si no tiene 
          acceso al fichero de configuración principal del servidor. Vea <a href="#when">más arriba</a> una explicación de cuando debería y cuando no
          debería usar ficheros <code>.htaccess</code>.</p>
      
          <p>Dicho esto, si todavía cree que debe usar el fichero
          <code>.htaccess</code>, podrá ver que una configuración como la que sigue 
          podría servirle.</p>
      
          <p>Contenido del fichero <code>.htaccess</code>:</p>
      
          <pre class="prettyprint lang-config">AuthType Basic
      AuthName "Password Required"
      AuthUserFile "/www/passwords/password.file"
      AuthGroupFile "/www/passwords/group.file"
      Require group admins</pre>
      
      
          <p>Tenga en cuenta que <code>AllowOverride AuthConfig</code> debe estar
          habilitado para que estas directivas tengan algún efecto.</p>
      
          <p>Por favor vea el <a href="auth.html">tutorial de autenticación</a> para
          una explicación más completa de la autenticación y la autorización.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ssi" id="ssi">Ejemplo de Server Side Includes</a></h2>
      
          <p>Otro uso común de ficheros <code>.htaccess</code> es activar Server Side 
          Includes para un directorio en particular. Esto puede hacerse 
          con las siguientes directivas de configuración, colocadas en un fichero
          <code>.htaccess</code> y el directorio deseado:</p>
      
          <pre class="prettyprint lang-config">Options +Includes
      AddType text/html "shtml"
      AddHandler server-parsed shtml</pre>
      
      
          <p>Tenga en cuenta que <code>AllowOverride Options</code> y 
          <code>AllowOverride FileInfo</code> deben estar activadas para que estas 
          directivas tengan efecto.</p>
      
          <p>Por favor vea el <a href="ssi.html">tutorial de SSI</a> para una
          explicación más completa de server-side includes.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rewrite" id="rewrite">Reglas de Rewrite en ficheros .htaccess</a></h2>
          <p>Cuando use <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> en
          ficheros <code>.htaccess</code>, tenga en cuenta que el contexto 
          directorio cambia las cosas un poco. En concreto, las reglas son 
          relativas al directorio actual, en lugar de serlo de la petición de URI 
          solicitada originalmente.
          Considere los siguientes ejemplos:</p>
      
      <pre class="prettyprint lang-config"># En httpd.conf
      RewriteRule "^/images/(.+)\.jpg" "/images/$1.png"
      
      # En .htaccess en el directorio raíz
      RewriteRule "^images/(.+)\.jpg" "images/$1.png"
      
      # En .htaccess en images/
      RewriteRule "^(.+)\.jpg" "$1.png"</pre>
      
      
          <p>En un <code>.htaccess</code> en cualquier directorio del DocumentRoot, la 
          barra ("/") inicial se elimina del valor facilitado a <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code>, y en el subdirectorio 
          <code>images</code>, se elimina <code>/images/</code> también de este valor. 
          Así, su expresión regular necesita omitir también esa parte.</p>
      
          <p>Consulte la <a href="../rewrite/">documentación de mod_rewrite</a> para 
          más detalles al usar <code>mod_rewrite</code>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cgi" id="cgi">Ejemplo de CGI</a></h2>
      
          <p>Finalmente, puede que quiera usar un fichero <code>.htaccess</code> para
          permitir la ejecución de programas CGI en un directorio en particular. Esto
          se puede implementar con la siguiente configuración:</p>
      
          <pre class="prettyprint lang-config">Options +ExecCGI
      AddHandler cgi-script "cgi" "pl"</pre>
      
      
          <p>Alternativamente, si quiere considerar como programas CGI todos los 
          ficheros de un directorio concreto, esto se puede conseguir con la siguiente 
          configuración:</p>
      
          <pre class="prettyprint lang-config">Options +ExecCGI
      SetHandler cgi-script</pre>
      
      
          <p>Tenga en cuenta que <code>AllowOverride Options</code> y 
          <code>AllowOverride FileInfo</code> deben estar ambas activadas para que 
          estas directivas tengan efecto.</p>
      
          <p>Por favor vea el <a href="cgi.html">tutorial CGI</a> para mayor detalle
          sobre programación y configuración de CGI.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="troubleshoot" id="troubleshoot">Resolución de problemas</a></h2>
      
          <p>Cuando pone directivas en un fichero <code>.htaccess</code> y no obtiene 
          el efecto deseado hay una serie de cosas que pueden haber ido mal.</p>
      
          <p>El problema más común es que <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride
          </a></code> no está configurada para que sus directivas puedan surtir
          efecto. Asegúrese de que no tiene <code>AllowOverride None</code> 
          configurado para el directorio en cuestión. Una buena forma de probar esto
          es poner "basura" en su fichero <code>.htaccess</code> y recargar la página. 
          Si no se genera un error en el servidor, casi seguro que tiene configurado 
          <code>AllowOverride None</code>.</p>
      
          <p>Si, por otro lado, obtiene errores de servidor al intentar acceder a 
          documentos, compruebe el log de errores de httpd. Seguramente le indiquen 
          que la directiva en uso en su fichero <code>.htaccess</code> no está 
          permitida.</p>
      
          <div class="example"><p><code>
          [Fri Sep 17 18:43:16 2010] [alert] [client 192.168.200.51] /var/www/html/.htaccess: DirectoryIndex not allowed here
          </code></p></div>
      
          <p>Esto indicará que o bien ha usado una directiva que no se permite nunca 
          en ficheros <code>.htaccess</code>, o que simplementa no tiene
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> configurado
          a un nivel suficiente para la directiva que ha usado. Consulte la
          documentación para esa directiva en particular para determinar cual es el 
          caso.</p>
      
          <p>Alternativamente, puede que le indique que hay un error de sintaxis en 
          el uso de la propia directiva.</p>
      
          <div class="example"><p><code>
          [Sat Aug 09 16:22:34 2008] [alert] [client 192.168.200.51] /var/www/html/.htaccess: RewriteCond: bad flag delimiters
          </code></p></div>
      
          <p>En este caso, el mensaje de error debería ser específico para el error de
          sintaxis concreto que ha cometido.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="../en/howto/htaccess.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/htaccess.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/htaccess.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/htaccess.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/htaccess.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../pt-br/howto/htaccess.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentarios</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/htaccess.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Módulos</a> | <a href="../mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="../glossary.html">Glosario</a> | <a href="../sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/reverse_proxy.html���������������������������������������������������0000644�0000000�0000050�00000000336�13362070302�020401� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: reverse_proxy.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: reverse_proxy.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/htaccess.html.en�����������������������������������������������������0000644�0000000�0000050�00000066642�13412755316�017712� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache HTTP Server Tutorial: .htaccess files - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutorials</a></div><div id="page-content"><div id="preamble"><h1>Apache HTTP Server Tutorial: .htaccess files</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/howto/htaccess.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/htaccess.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/htaccess.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/htaccess.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/htaccess.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../pt-br/howto/htaccess.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a></p>
      </div>
      
      <p><code>.htaccess</code> files provide a way to make configuration
      changes on a per-directory basis.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">.htaccess files</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#what">What they are/How to use them</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#when">When (not) to use .htaccess files</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#how">How directives are applied</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#auth">Authentication example</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ssi">Server Side Includes example</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#rewrite">Rewrite Rules in .htaccess files</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#cgi">CGI example</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#troubleshoot">Troubleshooting</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">.htaccess files</a></h2>
          <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="../mod/core.html">core</a></code></li><li><code class="module"><a href="../mod/mod_authn_file.html">mod_authn_file</a></code></li><li><code class="module"><a href="../mod/mod_authz_groupfile.html">mod_authz_groupfile</a></code></li><li><code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="../mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="../mod/mod_mime.html">mod_mime</a></code></li></ul></td><td><ul><li><code class="directive"><a href="../mod/core.html#accessfilename">AccessFileName</a></code></li><li><code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code></li><li><code class="directive"><a href="../mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="../mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="../mod/core.html#sethandler">SetHandler</a></code></li><li><code class="directive"><a href="../mod/mod_authn_core.html#authtype">AuthType</a></code></li><li><code class="directive"><a href="../mod/mod_authn_core.html#authname">AuthName</a></code></li><li><code class="directive"><a href="../mod/mod_authn_file.html#authuserfile">AuthUserFile</a></code></li><li><code class="directive"><a href="../mod/mod_authz_groupfile.html#authgroupfile">AuthGroupFile</a></code></li><li><code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code></li></ul></td></tr></table>
      
          <div class="note">You should avoid using <code>.htaccess</code> files completely if you have access to
          httpd main server config file. Using <code>.htaccess</code> files slows down your Apache http server.
          Any directive that you can include in a <code>.htaccess</code> file is better set in a <code class="directive"><a href="../mod/core.html#directory">Directory</a></code> block, as it will have the same effect with better performance.</div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="what" id="what">What they are/How to use them</a></h2>
      
      
          <p><code>.htaccess</code> files (or "distributed configuration files")
          provide a way to make configuration changes on a per-directory basis. A
          file, containing one or more configuration directives, is placed in a
          particular document directory, and the directives apply to that
          directory, and all subdirectories thereof.</p>
      
          <div class="note"><h3>Note:</h3>
            <p>If you want to call your <code>.htaccess</code> file something
            else, you can change the name of the file using the <code class="directive"><a href="../mod/core.html#accessfilename">AccessFileName</a></code> directive. For example,
            if you would rather call the file <code>.config</code> then you
            can put the following in your server configuration file:</p>
      
            <pre class="prettyprint lang-config">AccessFileName ".config"</pre>
      
          </div>
      
          <p>In general, <code>.htaccess</code> files use the same syntax as
          the <a href="../configuring.html#syntax">main configuration
          files</a>. What you can put in these files is determined by the
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> directive. This
          directive specifies, in categories, what directives will be
          honored if they are found in a <code>.htaccess</code> file. If a
          directive is permitted in a <code>.htaccess</code> file, the
          documentation for that directive will contain an Override section,
          specifying what value must be in <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> in order for that
          directive to be permitted.</p>
      
          <p>For example, if you look at the documentation for the <code class="directive"><a href="../mod/core.html#adddefaultcharset">AddDefaultCharset</a></code>
          directive, you will find that it is permitted in <code>.htaccess</code>
          files. (See the Context line in the directive summary.) The <a href="../mod/directive-dict.html#Context">Override</a> line reads
          <code>FileInfo</code>. Thus, you must have at least
          <code>AllowOverride FileInfo</code> in order for this directive to be
          honored in <code>.htaccess</code> files.</p>
      
          <div class="example"><h3>Example:</h3><table>
              <tr>
                <td><a href="../mod/directive-dict.html#Context">Context:</a></td>
                <td>server config, virtual host, directory, .htaccess</td>
              </tr>
      
              <tr>
                <td><a href="../mod/directive-dict.html#Override">Override:</a></td>
                <td>FileInfo</td>
              </tr>
            </table></div>
      
          <p>If you are unsure whether a particular directive is permitted in a
          <code>.htaccess</code> file, look at the documentation for that
          directive, and check the Context line for ".htaccess".</p>
          </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="when" id="when">When (not) to use .htaccess files</a></h2>
      
          <p>In general, you should only use <code>.htaccess</code> files when
          you don't have access to the main server configuration file. There is,
          for example, a common misconception that user authentication should
          always be done in <code>.htaccess</code> files, and, in more recent years,
          another misconception that <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code> directives
          must go in <code>.htaccess</code> files. This is simply not the
          case. You can put user authentication configurations in the main server
          configuration, and this is, in fact, the preferred way to do
          things. Likewise, <code>mod_rewrite</code> directives work better,
          in many respects, in the main server configuration.</p>
      
          <p><code>.htaccess</code> files should be used in a case where the
          content providers need to make configuration changes to the server on a
          per-directory basis, but do not have root access on the server system.
          In the event that the server administrator is not willing to make
          frequent configuration changes, it might be desirable to permit
          individual users to make these changes in <code>.htaccess</code> files
          for themselves. This is particularly true, for example, in cases where
          ISPs are hosting multiple user sites on a single machine, and want
          their users to be able to alter their configuration.</p>
      
          <p>However, in general, use of <code>.htaccess</code> files should be
          avoided when possible. Any configuration that you would consider
          putting in a <code>.htaccess</code> file, can just as effectively be
          made in a <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> section in your main server
          configuration file.</p>
      
          <p>There are two main reasons to avoid the use of
          <code>.htaccess</code> files.</p>
      
          <p>The first of these is performance. When <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>
          is set to allow the use of <code>.htaccess</code> files, httpd will
          look in every directory for <code>.htaccess</code> files. Thus,
          permitting <code>.htaccess</code> files causes a performance hit,
          whether or not you actually even use them! Also, the
          <code>.htaccess</code> file is loaded every time a document is
          requested.</p>
      
          <p>Further note that httpd must look for <code>.htaccess</code> files
          in all higher-level directories, in order to have a full complement of
          directives that it must apply. (See section on <a href="#how">how
          directives are applied</a>.) Thus, if a file is requested out of a
          directory <code>/www/htdocs/example</code>, httpd must look for the
          following files:</p>
      
          <div class="example"><p><code>
            /.htaccess<br />
            /www/.htaccess<br />
            /www/htdocs/.htaccess<br />
            /www/htdocs/example/.htaccess
          </code></p></div>
      
          <p>And so, for each file access out of that directory, there are 4
          additional file-system accesses, even if none of those files are
          present. (Note that this would only be the case if
          <code>.htaccess</code> files were enabled for <code>/</code>, which
          is not usually the case.)</p>
      
          <p>In the case of <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> directives, in
          <code>.htaccess</code> context these regular expressions must be
          re-compiled with every request to the directory, whereas in main
          server configuration context they are compiled once and cached.
          Additionally, the rules themselves are more complicated, as one must
          work around the restrictions that come with per-directory context
          and <code>mod_rewrite</code>. Consult the <a href="../rewrite/intro.html#htaccess">Rewrite Guide</a> for more
          detail on this subject.</p>
      
          <p>The second consideration is one of security. You are permitting
          users to modify server configuration, which may result in changes over
          which you have no control. Carefully consider whether you want to give
          your users this privilege. Note also that giving users less
          privileges than they need will lead to additional technical support
          requests. Make sure you clearly tell your users what level of
          privileges you have given them. Specifying exactly what you have set
          <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> to, and pointing them
          to the relevant documentation, will save yourself a lot of confusion
          later.</p>
      
          <p>Note that it is completely equivalent to put a <code>.htaccess</code>
          file in a directory <code>/www/htdocs/example</code> containing a
          directive, and to put that same directive in a Directory section
          <code>&lt;Directory "/www/htdocs/example"&gt;</code> in your main server
          configuration:</p>
      
          <p><code>.htaccess</code> file in <code>/www/htdocs/example</code>:</p>
      
          <div class="example"><h3>Contents of .htaccess file in
          <code>/www/htdocs/example</code></h3><pre class="prettyprint lang-config">AddType text/example ".exm"</pre>
      </div>
      
          <div class="example"><h3>Section from your <code>httpd.conf</code>
          file</h3><pre class="prettyprint lang-config">&lt;Directory "/www/htdocs/example"&gt;
          AddType text/example ".exm"
      &lt;/Directory&gt;</pre>
      </div>
      
          <p>However, putting this configuration in your server configuration
          file will result in less of a performance hit, as the configuration is
          loaded once when httpd starts, rather than every time a file is
          requested.</p>
      
          <p>The use of <code>.htaccess</code> files can be disabled completely
          by setting the <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code>
          directive to <code>none</code>:</p>
      
          <pre class="prettyprint lang-config">AllowOverride None</pre>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="how" id="how">How directives are applied</a></h2>
      
          <p>The configuration directives found in a <code>.htaccess</code> file
          are applied to the directory in which the <code>.htaccess</code> file
          is found, and to all subdirectories thereof. However, it is important
          to also remember that there may have been <code>.htaccess</code> files
          in directories higher up. Directives are applied in the order that they
          are found. Therefore, a <code>.htaccess</code> file in a particular
          directory may override directives found in <code>.htaccess</code> files
          found higher up in the directory tree. And those, in turn, may have
          overridden directives found yet higher up, or in the main server
          configuration file itself.</p>
      
          <p>Example:</p>
      
          <p>In the directory <code>/www/htdocs/example1</code> we have a
          <code>.htaccess</code> file containing the following:</p>
      
          <pre class="prettyprint lang-config">Options +ExecCGI</pre>
      
      
          <p>(Note: you must have "<code>AllowOverride Options</code>" in effect
          to permit the use of the "<code class="directive"><a href="../mod/core.html#options">Options</a></code>" directive in
          <code>.htaccess</code> files.)</p>
      
          <p>In the directory <code>/www/htdocs/example1/example2</code> we have
          a <code>.htaccess</code> file containing:</p>
      
          <pre class="prettyprint lang-config">Options Includes</pre>
      
      
          <p>Because of this second <code>.htaccess</code> file, in the directory
          <code>/www/htdocs/example1/example2</code>, CGI execution is not
          permitted, as only <code>Options Includes</code> is in effect, which
          completely overrides any earlier setting that may have been in
          place.</p>
      
          <h3><a name="merge" id="merge">Merging of .htaccess with the main
          configuration files</a></h3>
      
          <p>As discussed in the documentation on <a href="../sections.html">Configuration Sections</a>,
          <code>.htaccess</code> files can override the <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code> sections for
          the corresponding directory, but will be overridden by other types
          of configuration sections from the main configuration files. This
          fact can be used to enforce certain configurations, even in the
          presence of a liberal <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> setting. For example, to
          prevent script execution while allowing anything else to be set in
          <code>.htaccess</code> you can use:</p>
      
          <pre class="prettyprint lang-config">&lt;Directory "/www/htdocs"&gt;
          AllowOverride All
      &lt;/Directory&gt;
      
      &lt;Location "/"&gt;
          Options +IncludesNoExec -ExecCGI
      &lt;/Location&gt;</pre>
      
      
          <div class="note">This example assumes that your <code class="directive"><a href="../mod/core.html#documentroot">DocumentRoot</a></code> is <code>/www/htdocs</code>.</div>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="auth" id="auth">Authentication example</a></h2>
      
          <p>If you jumped directly to this part of the document to find out how
          to do authentication, it is important to note one thing. There is a
          common misconception that you are required to use
          <code>.htaccess</code> files in order to implement password
          authentication. This is not the case. Putting authentication directives
          in a <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code>
          section, in your main server configuration file, is the preferred way
          to implement this, and <code>.htaccess</code> files should be used only
          if you don't have access to the main server configuration file. See <a href="#when">above</a> for a discussion of when you should and should
          not use <code>.htaccess</code> files.</p>
      
          <p>Having said that, if you still think you need to use a
          <code>.htaccess</code> file, you may find that a configuration such as
          what follows may work for you.</p>
      
          <p><code>.htaccess</code> file contents:</p>
      
          <pre class="prettyprint lang-config">AuthType Basic
      AuthName "Password Required"
      AuthUserFile "/www/passwords/password.file"
      AuthGroupFile "/www/passwords/group.file"
      Require group admins</pre>
      
      
          <p>Note that <code>AllowOverride AuthConfig</code> must be in effect
          for these directives to have any effect.</p>
      
          <p>Please see the <a href="auth.html">authentication tutorial</a> for a
          more complete discussion of authentication and authorization.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ssi" id="ssi">Server Side Includes example</a></h2>
      
          <p>Another common use of <code>.htaccess</code> files is to enable
          Server Side Includes for a particular directory. This may be done with
          the following configuration directives, placed in a
          <code>.htaccess</code> file in the desired directory:</p>
      
          <pre class="prettyprint lang-config">Options +Includes
      AddType text/html shtml
      AddHandler server-parsed shtml</pre>
      
      
          <p>Note that <code>AllowOverride Options</code> and <code>AllowOverride
          FileInfo</code> must both be in effect for these directives to have any
          effect.</p>
      
          <p>Please see the <a href="ssi.html">SSI tutorial</a> for a more
          complete discussion of server-side includes.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rewrite" id="rewrite">Rewrite Rules in .htaccess files</a></h2>
      <p>When using <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> in
      <code>.htaccess</code> files, be aware that the per-directory context
      changes things a bit. In particular, rules are taken to be relative to
      the current directory, rather than being the original requested URI.
      Consider the following examples:</p>
      
      <pre class="prettyprint lang-config"># In httpd.conf
      RewriteRule "^/images/(.+)\.jpg" "/images/$1.png"
      
      # In .htaccess in root dir
      RewriteRule "^images/(.+)\.jpg" "images/$1.png"
      
      # In .htaccess in images/
      RewriteRule "^(.+)\.jpg" "$1.png"</pre>
      
      
      <p>In a <code>.htaccess</code> in your document directory, the leading
      slash is removed from the value supplied to <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code>, and in the
      <code>images</code> subdirectory, <code>/images/</code> is removed from
      it. Thus, your regular expression needs to omit that portion as
      well.</p>
      
      <p>Consult the <a href="../rewrite/">mod_rewrite documentation</a> for
      further details on using <code>mod_rewrite</code>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cgi" id="cgi">CGI example</a></h2>
      
          <p>Finally, you may wish to use a <code>.htaccess</code> file to permit
          the execution of CGI programs in a particular directory. This may be
          implemented with the following configuration:</p>
      
          <pre class="prettyprint lang-config">Options +ExecCGI
      AddHandler cgi-script cgi pl</pre>
      
      
          <p>Alternately, if you wish to have all files in the given directory be
          considered to be CGI programs, this may be done with the following
          configuration:</p>
      
          <pre class="prettyprint lang-config">Options +ExecCGI
      SetHandler cgi-script</pre>
      
      
          <p>Note that <code>AllowOverride Options</code> and <code>AllowOverride
          FileInfo</code> must both be in effect for these directives to have any
          effect.</p>
      
          <p>Please see the <a href="cgi.html">CGI tutorial</a> for a more
          complete discussion of CGI programming and configuration.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="troubleshoot" id="troubleshoot">Troubleshooting</a></h2>
      
          <p>When you put configuration directives in a <code>.htaccess</code>
          file, and you don't get the desired effect, there are a number of
          things that may be going wrong.</p>
      
          <p>Most commonly, the problem is that <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> is not
          set such that your configuration directives are being honored. Make
          sure that you don't have a <code>AllowOverride None</code> in effect
          for the file scope in question. A good test for this is to put garbage
          in your <code>.htaccess</code> file and reload the page. If a server error is
          not generated, then you almost certainly have <code>AllowOverride
          None</code> in effect.</p>
      
          <p>If, on the other hand, you are getting server errors when trying to
          access documents, check your httpd error log. It will likely tell you
          that the directive used in your <code>.htaccess</code> file is not
          permitted.</p>
      
          <div class="example"><p><code>
          [Fri Sep 17 18:43:16 2010] [alert] [client 192.168.200.51] /var/www/html/.htaccess: DirectoryIndex not allowed here
          </code></p></div>
      
          <p>This will indicate either that you've used a directive that is
          never permitted in <code>.htaccess</code> files, or that you simply
          don't have <code class="directive"><a href="../mod/core.html#allowoverride">AllowOverride</a></code> set to
          a level sufficient for the directive you've used. Consult the
          documentation for that particular directive to determine which is
          the case.</p>
      
          <p>Alternately, it may tell you that you had a syntax error in your
          usage of the directive itself.</p>
      
          <div class="example"><p><code>
          [Sat Aug 09 16:22:34 2008] [alert] [client 192.168.200.51] /var/www/html/.htaccess: RewriteCond: bad flag delimiters
          </code></p></div>
      
          <p>In this case, the error message should be specific to the
          particular syntax error that you have committed.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/howto/htaccess.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/htaccess.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/htaccess.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/htaccess.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/htaccess.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../pt-br/howto/htaccess.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/htaccess.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/http2.html.fr.utf8���������������������������������������������������0000644�0000000�0000050�00000072560�13412755316�020044� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Guide HTTP/2 - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutoriels</a></div><div id="page-content"><div id="preamble"><h1>Guide HTTP/2</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/http2.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/http2.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/http2.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>Ce document est le guide de l'utilisateur de l'implémentation de HTTP/2
          dans Apache httpd. Cette fonctionnalité en est au stade
          <em>de production</em>, et les interfaces et directives devraient donc être
          dorénavant relativement stables.
          </p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#protocol">Le protocole HTTP/2</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#implementation">HTTP/2 dans Apache httpd</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#building">Compilation de httpd avec le support de HTTP/2</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#basic-config">Configuration de base</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#mpm-config">Configuration du MPM</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#clients">Clients</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#tools">Outils efficaces pour déboguer HTTP/2</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#push">Push serveur</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#earlyhints">Suggestions précoces</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="protocol" id="protocol">Le protocole HTTP/2</a></h2>
          
          <p>HTTP/2 est une évolution du protocole de la couche application le plus
          utilisé au monde, HTTP. Cette évolution permet en particulier une utilisation
          plus efficace des ressources réseau. Il ne modifie pas les aspects
          fondamentaux de HTTP (sa sémantique). Entre autres, il y a toujours des
          requêtes, des réponses et des en-têtes. Par conséquent, si vous connaissez
          HTTP/1, vous connaissez déjà 95% de HTTP/2.</p>
          <p>Beaucoup a déjà été écrit à propos de HTTP/2 et de son fonctionnement. La
          documentation la plus officielle est bien entendu sa <a href="https://tools.ietf.org/html/rfc7540">RFC 7540</a> (ou <a href="http://httpwg.org/specs/rfc7540.html">cette version au format plus
          lisible</a>). Vous trouverez ici une description des rouages de HTTP/2 dans
          leurs moindres détails.</p>
          <p>Le premier document à lire lorsqu'on ne connaît pas un mécanisme n'est
          cependant pas sa RFC. Il est préférable de comprendre tout d'abord <em>ce
          que</em> ce mécanisme est censé faire, et seulement ensuite de lire sa RFC
          pour comprendre <em>comment</em> il fonctionne. <a href="https://daniel.haxx.se/http2/">http2  explained</a> de Daniel Stenberg
          (l'auteur de <a href="https://curl.haxx.se">curl</a>)
          est un bien meilleur document pour démarrer l'étude de HTTP/2. En outre, de
          nouveaux langages s'ajoutent régulièrement à sa liste de traductions
          disponibles !</p>
          <p>Si vous n'avez pas envie de le lire parce que vous le trouvez trop long,
          voici certains pièges à éviter et nouveaux termes à connaître avant de lire
          ce document :</p>
          <ul>
              <li>A la différence de HTTP/1 qui est en texte pur, HTTP/2 est un
      	<strong>protocole binaire</strong>, et alors que le premier est lisible par
      	un humain (par exemple pour sniffer le trafic réseau), le second ne
      	l'est pas. Voir la <a href="https://http2.github.io/faq/#why-is-http2-binary">FAQ
      	officielle</a> pour plus de détails.</li>
              <li><strong>h2</strong> correspond à HTTP/2 sur TLS (négociation de
      	protocole via ALPN).</li>
              <li><strong>h2c</strong> correspond à HTTP/2 sur TCP.</li>
      	<li>Une <strong>frame</strong> ou trame est la plus petite unité de
      	communication au sein d'une connexion HTTP/2 et comporte une en-tête et
      	une séquence d'octets de longueur variable dont la structure correspond
      	au type de trame. Voir la <a href="http://httpwg.org/specs/rfc7540.html#FramingLayer">section
      	correspondante</a> de la documentation officielle pour plus de
      	détails.</li>
              <li>Un <strong>stream</strong> est un flux bidirectionnel de frames au
      	sein d'une connexion HTTP/2. La notion correspondante dans HTTP/1 est un
      	échange de messages de type requête et réponse. Voir la <a href="http://httpwg.org/specs/rfc7540.html#StreamsLayer">section
      	correspondante</a> de la documentation officielle pour plus de détails.</li>
              <li>HTTP/2 peut gérer <strong>plusieurs streams</strong> de données sur
      	la même connexion TCP, ce qui permet d'éviter le point de blocage
      	classique de HTTP/1 pour les requêtes lentes, et de ne pas avoir à
      	ouvrir de nouvelles connexions TCP pour chaque requête/réponse (les
      	connexions persistantes ou KeepAlive avaient contourné le problème dans
      	HTTP/1 mais ne l'avaient pas entièrement résolu)</li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="implementation" id="implementation">HTTP/2 dans Apache httpd</a></h2>
          
          <p>Le protocole HTTP/2 est implémenté dans Apache httpd via un module
          propre, pertinemment nommé <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code>. Ce
          module implémente toutes les fonctionnalités décrites par la RFC 7540 et
          supporte les connexions en texte pur (http:), ou sécurisées (https:).
          La variante texte pur se nomme '<code>h2c</code>', et la variante sécurisée
          '<code>h2</code>'. <code>h2c</code> peut être en mode <em>direct</em> ou
          <code>Upgrade:</code> via une requête initiale en HTTP/1.</p>
          <p><a href="#push">Server Push</a> est une nouvelle fonctionnalité offerte
          aux développeurs web par HTTP/2. La section correspondante de ce document
          vous indiquera comment votre application peut en tirer parti.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="building" id="building">Compilation de httpd avec le support de HTTP/2</a></h2>
          
          <p><code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> se base sur la bibliothèque
          de <a href="https://nghttp2.org">nghttp2</a> pour son implémentation. Pour
          pouvoir compiler <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code>, <code>libnghttp2</code> version
          1.2.1. ou supérieure doit être installée dans votre système.</p>
          <p>Pour déclencher la compilation de <code>mod_http2</code>, vous devez
          ajouter l'argument '<code>--enable-http2</code>' au script
          <code>./configure</code> que vous exécutez à la racine de l'arborescence des
          sources de httpd. Si <code>libnghttp2</code> est installée dans un
          répertoire non connu du chemin de vos bibliothèques, vous devez indiquer ce
          répertoire au script <code>./configure</code> via l'argument
          '<code>--with-nghttp2=&lt;path&gt;</code>'.</p>
          <p>Alors que cette méthode de compilation conviendra à la plupart, certains
          préféreront lier statiquement <code>nghttp2</code> à ce module. Pour ce
          faire, utilisez l'argument <code>--enable-nghttp2-staticlib-deps</code>.
          Cette méthode est pratiquement la même que celle utilisée pour lier
          statiquement openssl à <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>.</p>
          <p>En parlant de SSL, vous devez savoir que la plupart des navigateurs ne
          communiqueront en HTTP/2 que sur des URLs sécurisées de type
          <code>https:</code> ; votre serveur doit donc supporter SSL. Mais de plus,
          votre bibliothèque SSL devra supporter l'extension <code>ALPN</code>. Enfin,
          si la bibliothèque que vous utilisez est OpenSSL, sa version devra être
          1.0.2. ou supérieure.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="basic-config" id="basic-config">Configuration de base</a></h2>
          
      
          <p>Maintenant que vous disposez d'un binaire <code>httpd</code> compilé avec le
          module <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code>, l'activation de ce dernier nécessite un
          minimum de configuration supplémentaire. En premier lieu, comme pour tout
          module Apache, vous devez le charger :</p>
          <pre class="prettyprint lang-config">LoadModule http2_module modules/mod_http2.so</pre>
      
      
          <p>La seconde directive que vous devez ajouter à votre fichier de
          configuration est</p>
          <pre class="prettyprint lang-config">Protocols h2 http/1.1</pre>
      
          <p>Ceci permet de définir h2, la variante sécurisée, comme le protocole
          préféré pour les connexions à votre serveur. Si vous souhaitez que toutes les
          variantes soient disponibles, utilisez la directive suivante :</p>
          <pre class="prettyprint lang-config">Protocols h2 h2c http/1.1</pre>
      
          <p>Selon l'endroit où vous placez cette directive, elle affectera l'ensemble
          de votre serveur, ou seulement un ou plusieurs serveurs virtuels. Vous
          pouvez aussi l'imbriquer comme dans l'exemple suivant :</p>
          <pre class="prettyprint lang-config">Protocols http/1.1
      &lt;VirtualHost ...&gt;
          ServerName test.example.org
          Protocols h2 http/1.1
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>Seules les connexions en HTTP/1 seront alors permises, sauf pour le serveur
          virtuel <code>test.example.org</code> qui acceptera aussi les connexions SSL
          en HTTP/2.</p>
          <div class="note"><h3>Utilisez une chaîne d'algorithmes de chiffrement forte</h3>
          <p>La directive <code class="directive"><a href="../mod/mod_ssl.html#sslciphersuite">SSLCipherSuite</a></code> doit
          être définie avec une chaîne d'algorithmes de chiffrement TLS forte. Même si
          la version actuelle de <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> n'impose pas d'algorithmes de chiffrement
          particuliers, la plupart des clients le font. Faire pointer un navigateur
          vers un serveur où <code>h2</code> est activé avec une chaîne d'algorithmes
          de chiffrement inappropriée entraînera un rejet et une retrogradation vers
          HTTP 1.1. C'est une erreur que l'on fait couramment lorsqu'on configure
          httpd pour HTTP/2 pour la première fois ; donc gardez la à l'esprit si vous
          voulez éviter de longues sessions de débogage ! Si vous voulez être sûr de
          définir une chaîne d'algorithmes de chiffrement appropriée, évitez ceux qui
          sont listés dans la <a href="http://httpwg.org/specs/rfc7540.html#BadCipherSuites">blacklist TLS HTTP/2
          </a>.</p>
          </div>
          <p>L'ordre des protocoles indiqués est aussi important. Par défaut, le
          premier sera le protocole préféré. Lorsqu'un client offre plusieurs choix,
          c'est le plus à gauche qui sera sélectionné. Dans</p>
          <pre class="prettyprint lang-config">Protocols http/1.1 h2</pre>
      
          <p>le protocole préféré sera HTTP/1 et il sera toujours sélectionné sauf si
          un client ne supporte <em>que</em> h2. Comme nous souhaitons communiquer en
          HTTP/2 avec les clients qui le supportent, la meilleure définition de la
          directive est</p>
          <pre class="prettyprint lang-config">Protocols h2 h2c http/1.1</pre>
      
      
          <p>Toujours à propos de l'ordre des protocoles, le client a lui aussi ses
          propres préférences en la matière. À ce titre, si vous le souhaitez, vous
          pouvez configurer votre serveur pour qu'il sélectionne non plus son
          protocole préféré, mais au contraire le protocole préféré
          du client :</p>
          <pre class="prettyprint lang-config">ProtocolsHonorOrder Off</pre>
      
          <p>Avec cette directive, l'ordre des protocoles que <em>vous</em> avez
          défini devient caduque et seul l'ordre défini par le client sera pris en
          compte.</p>
          <p>Une dernière chose : les protocoles que vous définissez ne sont pas
          vérifiés quant à leurs validité ou orthographe. Vous pouvez très bien
          définir des protocoles qui n'existent pas, et il n'est donc pas nécessaire
          de filtrer le contenu de la directive <code class="directive"><a href="../mod/core.html#protocols">Protocols</a></code> avec des vérifications de type
          <code class="directive"><a href="../mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>.</p>
          <p>Pour des conseils plus avancés à propos de la configuration, voir la <a href="../mod/mod_http2.html">Documentation de mod_http2</a>, et en particulier
          la section à propos de la <a href="../mod/mod_http2.html#dimensioning">consommation supplémentaire de
          ressources</a>, ainsi que la section expliquant comment gérer les <a href="../mod/mod_http2.html#misdirected">serveurs multiples avec certificat
          commun</a>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mpm-config" id="mpm-config">Configuration du MPM</a></h2>
          
      
          <p>Tous les modules multiprocessus (MPM) fournis avec httpd supportent
          HTTP/2. Cependant, si vous utilisez le MPM <code class="module"><a href="../mod/prefork.html">prefork</a></code>, vous allez
          faire face à de sévères restrictions.</p>
          <p>Avec le MPM <code class="module"><a href="../mod/prefork.html">prefork</a></code>, <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> ne traitera
          qu'une requête à la fois par connexion alors que les clients tels que les
          navigateurs internet envoient de nombreuses requêtes au même moment. Si
          l'une d'entre elles est longue à traiter (ou implique une longue
          interrogation), les autres requêtes seront mises en attente.</p>
          <p>Par défaut, <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> ne passe pas outre cette limitation pour
          la simple et bonne raison que le MPM <code class="module"><a href="../mod/prefork.html">prefork</a></code> n'est aujourd'hui
          choisi que si vous exécutez des moteurs de traitement qui ne sont pas préparés
          pour le multithreading (par exemple qui se crashent lorsque plusieurs
          requêtes arrivent).</p>
          <p>Si votre plateforme et votre installation de httpd le supportent, la
          meilleur solution consiste actuellement à utiliser le MPM
          <code class="module"><a href="../mod/event.html">event</a></code>.
          </p>
          <p>Si vous n'avez pas d'autre choix que d'utiliser le MPM
          <code class="module"><a href="../mod/prefork.html">prefork</a></code>, mais souhaitez tout de même traiter plusieurs requêtes
          simultanément, vous pouvez jouer avec la directive <code class="directive"><a href="../mod/mod_http2.html#h2minworkers">H2MinWorkers</a></code>, sans garantie que cela
          fonctionne.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="clients" id="clients">Clients</a></h2>
          
          <p>La plupart des navigateurs modernes supportent HTTP/2, mais seulement sur
          des connexions SSL : Firefox v43, Chrome v45, Safari v9, iOS Safari v9,
          Opera v35, Chrome pour Android v49 et
          Internet Explorer v11 sous Windows10 (selon cette <a href="http://caniuse.com/#search=http2">source</a>).</p>
          <p>D'autres clients et serveurs sont listés dans le <a href="https://github.com/http2/http2-spec/wiki/Implementations">wiki des
          implémentations</a> ; entre autres des implémentations pour c, c++, common
          lisp, dart, erlang, haskell, java, nodejs, php, python, perl, ruby, rust,
          scala et swift.</p>
          <p>De nombreuses implémentations clientes autres que les navigateurs
          supportent HTTP/2 en texte pur, h2c. L'une des plus efficaces d'entre elles
          est <a href="https://curl.haxx.se">curl</a>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="tools" id="tools">Outils efficaces pour déboguer HTTP/2</a></h2>
          
          <p>Le premier d'entre eux est bien entendu <a href="https://curl.haxx.se">curl</a>. Assurez-vous au préalable que votre
          version supporte HTTP/2 en vérifiant ses <code>Fonctionnalités</code> :</p>
          <pre class="prettyprint lang-config">    $ curl -V
          curl 7.45.0 (x86_64-apple-darwin15.0.0) libcurl/7.45.0 OpenSSL/1.0.2d zlib/1.2.8 nghttp2/1.3.4
          Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 [...]
          Features: IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP <strong>HTTP2</strong>
          </pre>
      
          <div class="note"><h3>homebrew sous Mac OS :</h3>
          brew install curl --with-openssl --with-nghttp2
          </div>
          <p>Pour une inspection en profondeur : <a href="https://wiki.wireshark.org/HTTP2">wireshark</a>.</p>
          <p>Le paquet <a href="https://nghttp2.org">nghttp2</a> inclut aussi des
          outils comme :</p>
          <ul>
              <li><a href="https://nghttp2.org/documentation/nghttp.1.html">nghttp</a>
      	- permet de visualiser les trames HTTP/2 et ainsi de se faire une meilleure
      	  idée du protocole.</li>
              <li><a href="https://nghttp2.org/documentation/h2load-howto.html">h2load</a> -
      	permet de tester votre serveur dans des conditions extremes.</li>
          </ul>
          <p>Chrome fournit des journaux détaillés des connexions HTTP/2 via la page
          <a href="chrome://net-internals/#http2">special net-internals page</a>. Il y
          a aussi cette extension intéressante pour <a href="https://chrome.google.com/webstore/detail/http2-and-spdy-indicator/mpbpobfflnpcgagjijhmgnchggcjblin?hl=en">Chrome</a>
          et <a href="https://addons.mozilla.org/en-us/firefox/addon/spdy-indicator/">Firefox</a>
          qui permet d'indiquer que votre navigateur utilise HTTP/2.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="push" id="push">Push serveur</a></h2>
          
          <p>Le protocole HTTP/2 permet au serveur de proposer (PUSH) des réponses
          pour lesquelles le client n'a rien demandé. La communication autour de ces
          réponses est du style : "voici une requête que vous n'avez jamais
          envoyée, et la réponse vous parviendra bientôt tout de même ..."</p>
          <p>Il y a cependant des conditions : le client peut désactiver cette
          fonctionnalité et le serveur ne pourra alors lui proposer des réponses que
          pour les requêtes qu'il a effectivement envoyées.</p>
          <p>Cette fonctionnalité a pour but de permettre au serveur d'envoyer au
          client des ressources dont il va probablement avoir besoin : par exemple une
          ressource css ou javascript appartenant à une page html que le client a
          demandée, un jeu d'images référencé par un css, etc...</p>
          <p>Cette anticipation a pour avantage de permettre au client d'économiser le
          temps qu'il lui aurait fallu pour envoyer une requête, quelques
          millisecondes à une demi-seconde en fonction de l'éloignement du serveur.
          Elle a cependant pour inconvénient d'imposer au client le téléchargement de
          ressources qu'il possède peut-être déjà dans son cache. Bien entendu, HTTP/2
          permet d'annuler prématurément de telles requêtes, mais des ressources sont
          tout de même gaspillées.</p>
          <p>En résumé : il n'existe pas encore de stratégie efficace pour faire le
          meilleur usage de cette fonctionnalité de HTTP/2 et tout le monde en est
          encore au stade de l'expérimentation. À ce titre, voici des conseils pour
          procéder vous-même à ces expérimentations :</p>
          <p><code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> inspecte l'en-tête de la réponse et recherche les
          en-têtes <code>Link</code> sous un certain format :</p>
          <pre class="prettyprint lang-config">Link &lt;/xxx.css&gt;;rel=preload, &lt;/xxx.js&gt;; rel=preload</pre>
      
          <p>Si la connexion supporte PUSH, ces deux ressources seront envoyées au
          client. En tant que développeur web vous pouvez définir ces en-têtes soit
          directement au niveau de la réponse de votre application, soit en
          configurant votre serveur via</p>
          <pre class="prettyprint lang-config">&lt;Location /xxx.html&gt;
          Header add Link "&lt;/xxx.css&gt;;rel=preload"
          Header add Link "&lt;/xxx.js&gt;;rel=preload"
      &lt;/Location&gt;</pre>
      
          <p>Si vous souhaitez utiliser des liens <code>preload</code> sans déclencher
          de PUSH, vous pouvez utiliser le paramètre <code>nopush</code> comme suit :</p>
          <pre class="prettyprint lang-config">Link &lt;/xxx.css&gt;;rel=preload;nopush</pre>
      
          <p>Vous pouvez aussi désactiver les PUSHes pour l'ensemble de votre
          serveur via la directive</p>
          <pre class="prettyprint lang-config">H2Push Off</pre>
      
          <p>À savoir aussi :</p>
          <p>Le module maintient un journal des ressources ayant fait l'objet d'un
          PUSH pour chaque connexion (en général des condensés hash des URLs), et
          n'effectuera pas deux fois un PUSH pour la même ressource. Cependant,
          lorsque la connexion est fermée, le journal de ses PUSHes est supprimé.</p>
          <p>Certains développeurs planchent sur la manière de permettre au client
          d'informer le serveur des ressources qu'il possède déjà dans son cache afin
          d'éviter les PUSHes pour ces dernières, mais ceci n'en est actuellement qu'à
          un stade très expérimental.</p>
          <p>L'<a href="https://tools.ietf.org/html/draft-ruellan-http-accept-push-policy-00">
          en-tête Accept-Push-Policy</a> est un autre dispositif expérimental
          implémenté dans <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> ; il permet au client de définir pour
          chaque requête quels genres de PUSHes il accepte.</p>
        
      
          <p>
          La fonctionnalité PUSH n'apportera pas toujours le gain de performances dans
          l'obtention de réponses aux requêtes. Vous trouverez plusieurs études sur ce
          sujet sur internet qui en expliquent les avantages et inconvénients et
          comment les particularités des clients et du réseau en influencent le
          fonctionnement. Par exemple, le seul fait que le serveur PUSHes une
          ressource n'implique pas forcément que le navigateur l'utilisera.</p>
          <p>Ce qui influence le plus la réponse PUSHed, c'est la requête qui a été
          simulée. En effet, l'URL de la requête pour un PUSH est fournie par
          l'application, mais d'où viennent les en-têtes ? Par exemple, La requête
          PUSH requiert-elle un en-tête <code>accept-language</code> et si oui, quelle
          sera sa valeur ?</p>
          <p>httpd va consulter la requête originale (celle qui a déclenché le PUSH)
          et copier les en-têtes suivants vers la requête PUSH :
          <code>user-agent</code>, <code>accept</code>, <code>accept-encoding</code>,
          <code>accept-language</code> et <code>cache-control</code>.</p>
          <p>Tous les autres en-têtes sont ignorés. Les cookies eux non plus ne seront
          pas copiés. PUSHer des ressources qui requièrent la présence d'un cookie ne
          fonctionnera pas. Ceci peut être sujet à débat, mais tant que ce ne sera pas
          clairement discuté avec les navigateurs, restons prudents et évitons
          d'exposer les cookies là où ils ne sont pas censés être visibles.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="earlyhints" id="earlyhints">Suggestions précoces</a></h2>
          
          <p>A l'instar des ressources PUSHées, une autre méthode consiste à envoyer
          des en-têtes <code>Link</code> au client avant même que la réponse ne soit
          prête. Cette méthode utilise la fonctionnalité appelée "Suggestions
          précoces" (Early Hints) décrite dans la <a href="https://tools.ietf.org/html/rfc8297">RFC 8297</a>.</p>
          <p>Pour utiliser cette fonctionnalité, vous devez l'activer explicitement
          sur le serveur via :</p>
          <pre class="prettyprint lang-config">H2EarlyHints on</pre>
      
          <p>Elle n'est en effet pas activée par défaut car certains navigateurs
          anciens perdent pied avec de telles réponses.</p>
          <p>Une fois cette fonctionnalité activée, vous pouvez utiliser la directive
          <code class="directive"><a href="../mod/mod_http2.html#h2pushresource">H2PushResource</a></code> pour déclencher les
          suggestions précoces et les PUSHes de ressources :</p>
          <pre class="prettyprint lang-config">&lt;Location /xxx.html&gt;
          H2PushResource /xxx.css
          H2PushResource /xxx.js
      &lt;/Location&gt;</pre>
      
          <p>Le serveur enverra alors au client une réponse <code>"103 Early
          Hints"</code> dès qu'il <em>commencera</em> à traiter la requête. Selon
          votre application web, cet envoi peut intervenir beaucoup plus tôt que le
          moment où les premiers en-têtes de réponse auront été déterminés.</p>
          <p>Si <code class="directive"><a href="../mod/mod_http2.html#h2push">H2Push</a></code> est activé, ceci
          déclenchera aussi le PUSH juste après la réponse 103. Mais si <code class="directive"><a href="../mod/mod_http2.html#h2push">H2Push</a></code> n'est pas activé, la réponse 103 sera
          quand-même envoyée au client.</p>
          </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/http2.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/http2.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/http2.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/http2.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/access.html.fr.utf8��������������������������������������������������0000644�0000000�0000050�00000035265�13412755316�020245� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Contrôle d'accès - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutoriels</a></div><div id="page-content"><div id="preamble"><h1>Contrôle d'accès</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/access.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/access.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/access.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>Le contrôle d'accès fait référence à tout concept de contrôle
          d'accès à une ressource quelconque. Il est distinct du processus d'<a href="auth.html">authentification et d'autorisation</a>.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#related">Modules et directives concernés</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#host">Contrôle d'accès en fonction de l'hôte du
      client</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#env">Contrôle d'accès en fonction de variables
      arbitraires</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#rewrite">Utilisation de mod_rewrite pour le contrôle
      d'accès</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#moreinformation">Informations complémentaires</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Modules et directives concernés</a></h2>
      
          <p>Plusieurs modules peuvent intervenir dans le contrôle d'accès.
          Les plus importants sont <code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code> et
          <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code>. Ce document illustre aussi comment
          utiliser <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code> pour le contrôle
          d'accès.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="host" id="host">Contrôle d'accès en fonction de l'hôte du
      client</a></h2>
          <p>
          Si vous souhaitez restreindre l'accès à certaines parties de votre
          site web en fonction de l'addresse de l'hôte de vos visiteurs, le
          plus simple pour y parvenir consiste à utiliser le module
          <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code>.
          </p>
      
          <p>La directive <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> permet d'accorder ou
          d'interdire l'accès à certaines ressources de différentes manières.
          Ces critères d'accès, en conjonction avec les directives <code class="directive"><a href="../mod/mod_authz_core.html#requireall">RequireAll</a></code>, <code class="directive"><a href="../mod/mod_authz_core.html#requireany">RequireAny</a></code>, et <code class="directive"><a href="../mod/mod_authz_core.html#requirenone">RequireNone</a></code>, peuvent être
          combinés d'une manière suffisamment complexe pour
          satisfaire votre politique de contrôle d'accès.</p>
      
          <div class="warning"><p>
          Les directives <code class="directive"><a href="../mod/mod_access_compat.html#allow">Allow</a></code>, <code class="directive"><a href="../mod/mod_access_compat.html#deny">Deny</a></code>, et <code class="directive"><a href="../mod/mod_access_compat.html#order">Order</a></code> fournies par le module
          <code class="module"><a href="../mod/mod_access_compat.html">mod_access_compat</a></code> sont obsolètes, et sont appelées à
          disparaître dans les versions futures. Il est donc déconseillé de
          les utiliser, et de se fier aux tutoriels qui recommandent leur
          utilisation.
          </p></div>
      
          <p>Les directives Require s'utilisent comme suit :</p>
      
          <pre class="prettyprint lang-config">Require host address
      Require ip ip.address</pre>
      
      
          <p>Dans la première forme, <var>nom-hôte</var> est un nom de domaine
          pleinement qualifié (fqdn), ou un nom de domaine partiel ; vous
          pouvez spécifier plusieurs noms de domaines, si vous le désirez.</p>
      
          <p>Dans la seconde forme, <var>adresse-ip</var> est une adresse IP
          complète, une adresse IP partielle, une paire réseau/masque de
          sous-réseau ou une spécification CIDR de la forme réseau/nnn. Il est
          possible de spécifier des adresses IPv4 ou IPv6.</p>
      
          <p>Voir <a href="../mod/mod_authz_host.html#requiredirectives">la
          documentation de mod_authz_host</a> pour d'autres exemples de cette
          syntaxe.</p>
      
          <p>Vous pouvez insérer le mot-clé <code>not</code> pour inverser un
          critère particulier. Notez que le mot <code>not</code> étant la
          négation d'une valeur, il ne peut pas être utilisé pour autoriser
          ou interdire une requête, car <em>non vrai</em> ne
          sera pas interpreté par httpd comme <em>faux</em>. Ainsi, pour interdire la
          visite d'une page à l'aide d'une négation, le bloc doit contenir un
          élément évalué à vrai ou faux.
          Par exemple, si quelqu'un est en train d'inonder
          votre forum de messages indésirables, vous pouvez ajouter cette ligne pour lui refuser
          l'accès :</p>
      
          <pre class="prettyprint lang-config">&lt;RequireAll&gt;
          Require all granted
          Require not ip 10.252.46.165
      &lt;/RequireAll&gt;</pre>
      
      
          <p>Les visiteurs possédant cette adresse (<code>10.252.46.165</code>) ne pourront pas voir le
          contenu concerné par cette directive. Si vous voulez interdire
          l'accès à une machine en fonction de son nom, vous pouvez ajouter
          ceci :</p>
      
          <pre class="prettyprint lang-config">Require not host <var>host.example.com</var>
          </pre>
      
      
          <p>Et si vous voulez interdire l'accès à un domaine particulier,
          vous pouvez spécifier des adresses IP partielles ou des noms de
          domaine, comme ceci :</p>
      
          <pre class="prettyprint lang-config">Require not ip 192.168.205
      Require not host phishers.example.com moreidiots.example
      Require not host gov</pre>
      
      
          <p>Les directives <code class="directive"><a href="../mod/mod_authz_core.html#requireall">RequireAll</a></code>, <code class="directive"><a href="../mod/mod_authz_core.html#requireany">RequireAny</a></code>, et <code class="directive"><a href="../mod/mod_authz_core.html#requirenone">RequireNone</a></code> permettent également de préciser des
          critères d'accès plus complexes.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="env" id="env">Contrôle d'accès en fonction de variables
      arbitraires</a></h2>
      
          <p>Vous pouvez accorder ou refuser l'accès en fonction de variables
          d'environnement arbitraires ou de valeurs d'en-têtes de la requête
          en utilisant la directive <code class="directive"><a href="../mod/core.html#if">&lt;If&gt;</a></code>. Par exemple, pour interdire l'accès en
          fonction du user-agent (le type de navigateur), vous pouvez
          spécifier ceci :</p>
      
          <pre class="prettyprint lang-config">&lt;If "%{HTTP_USER_AGENT} == 'BadBot'"&gt;
          Require all denied
      &lt;/If&gt;</pre>
      
      
          <p>La syntaxe <code>expr</code> de la directive <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> permet de réécrire
          l'exemple précédent de la manière suivante :</p>
      
      
          <pre class="prettyprint lang-config">Require expr %{HTTP_USER_AGENT} != 'BadBot'</pre>
      
      
          <div class="note"><h3>Avertissement :</h3>
          <p>Contrôler l'accès en fonction de l'en-tête
          <code>User-Agent</code> n'est pas une technique fiable, car cet
          en-tête peut être défini à une valeur quelconque, selon le bon
          vouloir de l'utilisateur.</p>
          </div>
      
          <p>Voir le document à propos des <a href="../expr.html">expressions</a> pour une description plus
          approfondie des syntaxes d'expressions et des variables disponibles.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rewrite" id="rewrite">Utilisation de mod_rewrite pour le contrôle
      d'accès</a></h2>
      
          <p>Le drapeau <code>[F]</code> de la directive <code class="directive"><a href="../mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> permet d'envoyer une
          réponse de type 403 Forbidden. Il vous permet donc d'interdire
          l'accès à une ressource en fonction d'un critère arbitraire.</p>
      
          <p>Par exemple, pour bloquer l'accès à une ressources entre 20h et
          7h du matin, vous pouvez utiliser <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code> :</p>
      
          <pre class="prettyprint lang-config">RewriteEngine On
      RewriteCond "%{TIME_HOUR}" "&gt;=20" [OR]
      RewriteCond "%{TIME_HOUR}" "&lt;07"
      RewriteRule "^/fridge"     "-" [F]</pre>
      
      
          <p>Toute requête arrivant après 20h ou avant 7h du matin provoquera
          l'envoi d'une réponse de type 403 Forbidden. Vous pouvez utiliser
          cette technique pour vérifier toutes sortes de critères. En outre,
          si vous le préférez, vous pouvez rediriger ou réécrire la requête.</p>
      
          <p>Notez que la directive <code class="directive"><a href="../mod/core.html#if">&lt;If&gt;</a></code>, introduite à partir de la version 2.4,
          permet de remplacer le module <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code> dans de
          nombreuses situations où il était traditionnellement utilisé, et
          il sera probablement préférable pour vous de tenter de l'utiliser
          avant de vous tourner vers mod_rewrite.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="moreinformation" id="moreinformation">Informations complémentaires</a></h2>
      
          <p>Le <a href="../expr.html">moteur d'expressions</a> vous fournit
          une grande puissance d'action en fonction de variables du serveur
          arbitraires, et il vous est conseillé de consulter le document
          correspondant pour plus de détails.</p>
      
          <p>De même, vous devez lire la documentation du module
          <code class="module"><a href="../mod/mod_authz_core.html">mod_authz_core</a></code> pour des exemples de combinaison de
          critères d'accès multiples, et en particulier la manière dont ces
          derniers interagissent.</p>
      
          <p>Voir aussi le How-To <a href="auth.html">Authentification and
          autorisation</a>.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/howto/access.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/access.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/access.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/access.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/index.html.ko.euc-kr�������������������������������������������������0000644�0000000�0000050�00000014446�13412755316�020413� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>How-To / ÅõÅ丮¾ó - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>How-To / ÅõÅ丮¾ó</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/howto/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/howto/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="howto" id="howto">How-To / ÅõÅ丮¾ó</a></h2>
      
          
      
          <dl>
            <dt>ÀÎÁõ</dt>
            <dd>
              <p>ÀÎÁõ(authentication)Àº ÀÚ½ÅÀÌ ´©±¸¶ó°í ÁÖÀåÇÏ´Â »ç¶÷À»
              È®ÀÎÇÏ´Â ÀýÂ÷ÀÌ´Ù. ±ÇÇѺο©(authorization)´Â °¡°í ½ÍÀº
              °÷À¸·Î °¡µµ·Ï ȤÀº ¿øÇÏ´Â Á¤º¸¸¦ ¾òµµ·Ï Çã¿ëÇÏ´Â °úÁ¤ÀÌ´Ù.</p>
      
              <p>Âü°í: <a href="auth.html">ÀÎÁõ, ±ÇÇѺο©, Á¢±ÙÁ¦¾î</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>CGI¸¦ »ç¿ëÇÑ µ¿Àû ÆäÀÌÁö »ý¼º</dt>
            <dd>
              <p>CGI (Common Gateway Interface)´Â À¥¼­¹ö°¡ º¸Åë CGI
              ÇÁ·Î±×·¥ ȤÀº CGI ½ºÅ©¸³Æ®ÇÏ°í ºÎ¸£´Â, (À¥ÆäÀÌÁö ³»¿ëÀ»
              ¸¸µå´Â) ¿ÜºÎ ÇÁ·Î±×·¥°ú »óÈ£ÀÛ¿ëÇÏ´Â ¹æ¹ýÀ» Á¤ÀÇÇÑ´Ù.
              À¥»çÀÌÆ®¿¡¼­ µ¿ÀûÀÎ ÆäÀÌÁö¸¦ ¸¸µå´Â °¡Àå ÈçÇÏ°í °£´ÜÇÑ
              ¹æ¹ýÀÌ´Ù. ÀÌ ¹®¼­´Â ¾ÆÆÄÄ¡ À¥¼­¹ö¿¡ CGI¸¦ ±¸¼ºÇÏ´Â ¹æ¹ýÀ»
              ¼Ò°³Çϰí, CGI ÇÁ·Î±×·¥À» ÀÛ¼ºÇغ»´Ù.</p>
      
              <p>Âü°í: <a href="cgi.html">CGI: µ¿Àû ÆäÀÌÁö »ý¼º</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt><code>.htaccess</code> ÆÄÀÏ</dt>
            <dd>
              <p><code>.htaccess</code> ÆÄÀÏÀ» »ç¿ëÇÏ¿© µð·ºÅ丮º°·Î
              ¼³Á¤À» º¯°æÇÒ ¼ö ÀÖ´Ù. ¿©·¯ ¼³Á¤ Áö½Ã¾î°¡ ÀÖ´Â ÆÄÀÏÀ»
              ƯÁ¤ ¹®¼­ µð·ºÅ丮¿¡ µÎ¸é, ±× µð·ºÅ丮¿Í ¸ðµç ÇÏÀ§µð·ºÅ丮¿¡
              Áö½Ã¾î¸¦ Àû¿ëÇÑ´Ù.</p>
      
              <p>Âü°í: <a href="htaccess.html"><code>.htaccess</code>
              ÆÄÀÏ</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>Server Side Includes ¼Ò°³</dt>
            <dd>
              <p>SSI (Server Side Includes)´Â HTML ÆäÀÌÁö¿¡ »ç¿ëÇÏ´Â
              Áö½Ã¾î·Î, ÆäÀÌÁö¸¦ ¼­ºñ½ºÇÒ¶§ ¼­¹ö°¡ ó¸®ÇÑ´Ù. SSI¸¦
              »ç¿ëÇϸé CGI ÇÁ·Î±×·¥À̳ª ´Ù¸¥ µ¿ÀûÀÎ ±â¼ú·Î ÆäÀÌÁö
              Àüü¸¦ ¸¸µé¾î¼­ ¼­ºñ½ºÇÏÁö ¾Ê°íµµ HTML ÆäÀÌÁö¿¡ µ¿ÀûÀ¸·Î
              »ý¼ºÇÑ ³»¿ëÀ» Ãß°¡ÇÒ ¼ö ÀÖ´Ù.</p>
      
              <p>Âü°í: <a href="ssi.html">Server Side Includes (SSI)</a></p>
            </dd>
          </dl>
      
          <dl>
            <dt>»ç¿ëÀÚº° À¥µð·ºÅ丮</dt>
            <dd>
              <p>¿©·¯ »ç¿ëÀÚ°¡ ÀÖ´Â ½Ã½ºÅÛ¿¡¼­ <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> Áö½Ã¾î¸¦ »ç¿ëÇϸé
              °¢ »ç¿ëÀÚ´Â ÀÚ½ÅÀÇ È¨µð·ºÅ丮 ¾È¿¡ À¥»çÀÌÆ®¸¦ ¸¸µé ¼ö
              ÀÖ´Ù. URL <code>http://example.com/~username/</code>¿¡
              Á¢±ÙÇÏ¸é »ç¿ëÀÚ "<code>username</code>"ÀÇ È¨µð·ºÅ丮¿¡¼­
              <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code>
              Áö½Ã¾î·Î ÁöÁ¤ÇÑ ÇÏÀ§µð·ºÅ丮¿¡ ÀÖ´Â ÆäÀÌÁö¸¦ °¡Á®¿À°Ô
              µÈ´Ù.</p>
      
              <p>Âü°í: <a href="public_html.html">»ç¿ëÀÚ À¥µð·ºÅ丮
              (<code>public_html</code>)</a></p>
            </dd>
          </dl>
      
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="../en/howto/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="../ja/howto/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../ko/howto/" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="../zh-cn/howto/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">¸ðµâ</a> | <a href="../mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">¿ë¾î</a> | <a href="../sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/http2.html�����������������������������������������������������������0000644�0000000�0000050�00000000443�13362070302�016525� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: http2.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: http2.html.es
      Content-Language: es
      Content-type: text/html; charset=ISO-8859-1
      
      URI: http2.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/howto/http2.html.en��������������������������������������������������������0000644�0000000�0000050�00000063242�13412755316�017147� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>HTTP/2 guide - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">How-To / Tutorials</a></div><div id="page-content"><div id="preamble"><h1>HTTP/2 guide</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/howto/http2.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/http2.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/http2.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
          <p>This is the howto guide for the HTTP/2 implementation in Apache httpd. This
          feature is <em>production-ready</em> and you may expect interfaces and directives to
          remain consistent releases.
          </p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#protocol">The HTTP/2 protocol</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#implementation">HTTP/2 in Apache httpd</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#building">Build httpd with HTTP/2 support</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#basic-config">Basic Configuration</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#mpm-config">MPM Configuration</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#clients">Clients</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#tools">Useful tools to debug HTTP/2</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#push">Server Push</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#earlyhints">Early Hints</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="protocol" id="protocol">The HTTP/2 protocol</a></h2>
          
          <p>HTTP/2 is the evolution of the world's most successful application layer protocol, HTTP.
          It focuses on making more efficient use of network resources. It does not change the fundamentals
          of HTTP, the semantics. There are still request and responses and headers and all that. So, if
          you already know HTTP/1, you know 95% about HTTP/2 as well.</p>
          <p>There has been a lot written about HTTP/2 and how it works. The most normative is, of course,
          its <a href="https://tools.ietf.org/html/rfc7540">RFC 7540</a> 
          (<a href="http://httpwg.org/specs/rfc7540.html">also available in more readable formatting, YMMV</a>).
          So, there you'll find the nuts and bolts.</p>
          <p>But, as RFC do, it's not really a good thing to read first. It's better to first understand
          <em>what</em> a thing wants to do and then read the RFC about <em>how</em> it is done. A much
          better document to start with is <a href="https://daniel.haxx.se/http2/">http2  explained</a>
          by Daniel Stenberg, the author of <a href="https://curl.haxx.se">curl</a>. It is available in
          an ever growing list of languages, too!</p>
          <p>Too Long, Didn't read: there are some new terms and gotchas that need to be kept in mind while reading this document:</p>
          <ul>
              <li>HTTP/2 is a <strong>binary protocol</strong>, as opposed to HTTP 1.1 that is plain text. The latter is meant to be human readable (for example sniffing network traffic) meanwhile the former is not. More info in the official FAQ <a href="https://http2.github.io/faq/#why-is-http2-binary">question</a>.</li>
              <li><strong>h2</strong> is HTTP/2 over TLS (protocol negotiation via ALPN).</li>
              <li><strong>h2c</strong> is HTTP/2 over TCP.</li>
              <li>A <strong>frame</strong> is the smallest unit of communication within an HTTP/2 connection, consisting of a header and a variable-length sequence of octets structured according to the frame type. More info in the official documentation <a href="http://httpwg.org/specs/rfc7540.html#FramingLayer"> section</a>.</li>
              <li>A <strong>stream</strong> is a bidirectional flow of frames within the HTTP/2 connection. The correspondent concept in HTTP 1.1 is a request/response message exchange. More info in the official documentation <a href="http://httpwg.org/specs/rfc7540.html#StreamsLayer"> section</a>.</li>
              <li>HTTP/2 is able to run <strong>multiple streams</strong> of data over the same TCP connection, avoiding the classic HTTP 1.1 head of blocking slow request and avoiding to re-instantiate TCP connections for each request/response (KeepAlive patched the problem in HTTP 1.1 but did not fully solve it).</li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="implementation" id="implementation">HTTP/2 in Apache httpd</a></h2>
          
          <p>The HTTP/2 protocol is implemented by its own httpd module, aptly named
          <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code>. It implements the complete set
          of features described by RFC 7540 and supports HTTP/2 over cleartext (http:), as
          well as secure (https:) connections. The cleartext variant is named '<code>h2c</code>', 
          the secure one '<code>h2</code>'. For <code>h2c</code> it allows the <em>direct</em>
          mode and the <code>Upgrade:</code> via an initial HTTP/1 request.</p>
          <p>One feature of HTTP/2 that offers new capabilities for web developers is
          <a href="#push">Server Push</a>. See that section on how your web application
          can make use of it.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="building" id="building">Build httpd with HTTP/2 support</a></h2>
          
          <p><code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> uses the library of <a href="https://nghttp2.org">nghttp2</a>
          as its implementation base. In order to build <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> you need at least version 1.2.1 of
          <code>libnghttp2</code> installed on your system.</p>
          <p>When you <code>./configure</code> you Apache httpd source tree, you need to give it 
          '<code>--enable-http2</code>' as additional argument to trigger the build of the module.
          Should your <code>libnghttp2</code> reside in an unusual place (whatever that is on your
          operating system), you may announce its location with '<code>--with-nghttp2=&lt;path&gt;</code>'
          to <code>configure</code>.</p>
          <p>While that should do the trick for most, they are people who might prefer a statically
          linked <code>nghttp2</code> in this module. For those, the option <code>--enable-nghttp2-staticlib-deps</code>
          exists. It works quite similar to how one statically links openssl to <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>.</p>
          <p>Speaking of SSL, you need to be aware that most browsers will speak HTTP/2 only on <code>https:</code>
          URLs, so you need a server with SSL support. But not only that, you will need a SSL library
          that supports the <code>ALPN</code> extension. If OpenSSL is the library you use, you need
          at least version 1.0.2.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="basic-config" id="basic-config">Basic Configuration</a></h2>
          
      
          <p>When you have a <code>httpd</code> built with <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> you need some
          basic configuration for it becoming active. The first thing, as with every Apache module,
          is that you need to load it:</p>
          <pre class="prettyprint lang-config">LoadModule http2_module modules/mod_http2.so</pre>
      
          
          <p>The second directive you need to add to your server configuration is</p>
          <pre class="prettyprint lang-config">Protocols h2 http/1.1</pre>
      
          <p>This allows h2, the secure variant, to be the preferred protocol on your server
          connections. When you want to enable all HTTP/2 variants, you simply write:</p>
          <pre class="prettyprint lang-config">Protocols h2 h2c http/1.1</pre>
      
          <p>Depending on where you put this directive, it affects all connections or just
          the ones to a certain virtual host. You can nest it, as in:</p>
          <pre class="prettyprint lang-config">Protocols http/1.1
      &lt;VirtualHost ...&gt;
          ServerName test.example.org
          Protocols h2 http/1.1
      &lt;/VirtualHost&gt;</pre>
      
      
          <p>This allows only HTTP/1 on connections, except SSL connections to <code>test.example.org</code>
          which offer HTTP/2.</p>
          <div class="note"><h3>Choose a strong SSLCipherSuite</h3>
          <p>The <code class="directive"><a href="../mod/mod_ssl.html#sslciphersuite">SSLCipherSuite</a></code> needs to be configured with
          a strong TLS cipher suite. The current version of <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> does not enforce any cipher but most
          clients do so. Pointing a browser to a <code>h2</code> enabled server with a inappropriate
          cipher suite will force it to simply refuse and fall back to HTTP 1.1. This is a common mistake
          that is done while configuring httpd for HTTP/2 the first time, so please keep it in mind to avoid
          long debugging sessions! If you want to be sure about the cipher suite to choose please avoid
          the ones listed in the <a href="http://httpwg.org/specs/rfc7540.html#BadCipherSuites">HTTP/2 TLS blacklist</a>.</p>
          </div>
          <p>The order of protocols mentioned is also relevant. By default, the first one is the 
          most preferred protocol. When a client offers multiple choices, the one most to the 
          left is selected. In</p>
          <pre class="prettyprint lang-config">Protocols http/1.1 h2</pre>
      
          <p>the most preferred protocol is HTTP/1 and it will always be selected unless a 
          client <em>only</em> supports h2. Since we want to talk HTTP/2 to clients that
          support it, the better order is</p>
          <pre class="prettyprint lang-config">Protocols h2 h2c http/1.1</pre>
      
      
          <p>There is one more thing to ordering: the client has its own preferences, too. If
          you want, you can configure your server to select the protocol most preferred by
          the client:</p>
          <pre class="prettyprint lang-config">ProtocolsHonorOrder Off</pre>
      
          <p>makes the order <em>you</em> wrote the Protocols irrelevant and only the client's
          ordering will decide.</p>
          <p>A last thing: the protocols you configure are not checked for correctness
          or spelling. You can mention protocols that do not exist, so there is no need
          to guard <code class="directive"><a href="../mod/core.html#protocols">Protocols</a></code> with any
          <code class="directive"><a href="../mod/core.html#ifmodule">&lt;IfModule&gt;</a></code> checks.</p>
          <p>For more advanced tips on configuration, see the <a href="../mod/mod_http2.html#dimensioning">
          modules section about dimensioning</a> and <a href="../mod/mod_http2.html#misdirected">
          how to manage multiple hosts with the same certificate</a>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mpm-config" id="mpm-config">MPM Configuration</a></h2>
          
          
          <p>HTTP/2 is supported in all multi-processing modules that come with httpd. However, if
          you use the <code class="module"><a href="../mod/prefork.html">prefork</a></code> mpm, there will be severe restrictions.</p>
          <p>In <code class="module"><a href="../mod/prefork.html">prefork</a></code>, <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> will only process one request at at time
          per connection. But clients, such as browsers, will send many requests at the same time.
          If one of these takes long to process (or is a long polling one), the other requests will
          stall.</p>
          <p><code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> will not work around this limit by default. The reason is that
          <code class="module"><a href="../mod/prefork.html">prefork</a></code> is today only chosen, if you run processing engines that are not
          prepared for multi-threading, e.g. will crash with more than one request.</p>
          <p>If your setup can handle it, configuring <code class="module"><a href="../mod/event.html">event</a></code> mpm is nowadays
          the best one (if supported on your platform).</p>
          <p>If you are really stuck with <code class="module"><a href="../mod/prefork.html">prefork</a></code> and want multiple requests,
          you can tweak the <code class="directive"><a href="../mod/mod_http2.html#h2minworkers">H2MinWorkers</a></code> to make
          that possible. If it breaks, however, you own both parts.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="clients" id="clients">Clients</a></h2>
          
          <p>Almost all modern browsers support HTTP/2, but only over SSL connections: Firefox (v43),
          Chrome (v45), Safari (since v9), iOS Safari (v9), Opera (v35), Chrome for Android (v49)
          and Internet Explorer (v11 on Windows10) (<a href="http://caniuse.com/#search=http2">source</a>).</p>
          <p>Other clients, as well as servers, are listed 
          <a href="https://github.com/http2/http2-spec/wiki/Implementations">on the Implementations wiki</a>,
          among them implementations for c, c++, common lisp, dart, erlang, haskell, java, nodejs,  php, 
          python, perl, ruby, rust, scala and swift.</p>
          <p>Several of the non-browser client implementations support HTTP/2 over cleartext, h2c. The
          most versatile being <a href="https://curl.haxx.se">curl</a>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="tools" id="tools">Useful tools to debug HTTP/2</a></h2>
          
          <p>The first tool to mention is of course <a href="https://curl.haxx.se">curl</a>. Please make sure that
          your version supports HTTP/2 checking its <code>Features</code>:</p>
          <pre class="prettyprint lang-config">    $ curl -V
          curl 7.45.0 (x86_64-apple-darwin15.0.0) libcurl/7.45.0 OpenSSL/1.0.2d zlib/1.2.8 nghttp2/1.3.4
          Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 [...] 
          Features: IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP <strong>HTTP2</strong>
          </pre>
      
          <div class="note"><h3>Mac OS homebrew notes</h3>
          brew install curl --with-openssl --with-nghttp2 
          </div>
          <p>And for really deep inspection <a href="https://wiki.wireshark.org/HTTP2">wireshark</a>.</p>
          <p>The <a href="https://nghttp2.org">nghttp2</a> package also includes clients, such as:</p>
          <ul>
              <li><a href="https://nghttp2.org/documentation/nghttp.1.html">nghttp</a> - useful to visualize the HTTP/2 frames and get a better idea of the protocol.</li>
              <li><a href="https://nghttp2.org/documentation/h2load-howto.html">h2load</a> - useful to stress-test your server.</li>
          </ul>
          <p>Chrome offers detailed HTTP/2 logs on its connections via the 
          <a href="chrome://net-internals/#http2">special net-internals page</a>. There is also an
          interesting extension for <a href="https://chrome.google.com/webstore/detail/http2-and-spdy-indicator/mpbpobfflnpcgagjijhmgnchggcjblin?hl=en">Chrome</a>
          and <a href="https://addons.mozilla.org/en-us/firefox/addon/spdy-indicator/">Firefox</a>
          to visualize when your browser is using HTTP/2.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="push" id="push">Server Push</a></h2>
          
          <p>The HTTP/2 protocol allows the server to PUSH responses to a client it never
          asked for. The tone of the conversation is: "here is a request that you
          never sent and the response to it will arrive soon..."</p>
          <p>But there are restrictions: the client can disable this feature and the
          server may only ever PUSH on a request that came from the client.</p>
          <p>The intention is to allow the server to send resources to the client that
          it will most likely need: a css or javascript resource that belongs to a html
          page the client requested. A set of images that is referenced by a css, etc.</p>
          <p>The advantage for the client is that it saves the time to send the request which
          may range from a few milliseconds to half a second, depending on where on the 
          globe both are located. The disadvantage is that the client may get sent
          things it already has in its cache. Sure, HTTP/2 allows for the early cancellation
          of such requests, but still there are resources wasted.</p>
          <p>To summarize: there is no one good strategy on how to make best use of this 
          feature of HTTP/2 and everyone is still experimenting. So, how do you experiment
          with it in Apache httpd?</p>
          <p><code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code> inspect response header for <code>Link</code> headers
          in a certain format:</p>
          <pre class="prettyprint lang-config">Link &lt;/xxx.css&gt;;rel=preload, &lt;/xxx.js&gt;; rel=preload</pre>
      
          <p>If the connection supports PUSH, these two resources will be sent to the
          client. As a web developer, you may set these headers either directly in
          your application response or you configure the server via</p>
          <pre class="prettyprint lang-config">&lt;Location /xxx.html&gt;
          Header add Link "&lt;/xxx.css&gt;;rel=preload"
          Header add Link "&lt;/xxx.js&gt;;rel=preload"
      &lt;/Location&gt;</pre>
      
          <p>If you want to use <code>preload</code> links without triggering a PUSH, you
          can use the <code>nopush</code> parameter, as in</p>
          <pre class="prettyprint lang-config">Link &lt;/xxx.css&gt;;rel=preload;nopush</pre>
      
          <p>or you may disable PUSHes for your server entirely with the directive</p>
          <pre class="prettyprint lang-config">H2Push Off</pre>
      
          <p>And there is more:</p>
          <p>The module will keep a diary of what has been PUSHed for each connection
          (hashes of URLs, basically) and will not PUSH the same resource twice. When
          the connection closes, this information is discarded.</p>
          <p>There are people thinking about how a client can tell a server what it
          already has, so PUSHes for those things can be avoided, but this is all
          highly experimental right now.</p>
          <p>Another experimental draft that has been implemented in <code class="module"><a href="../mod/mod_http2.html">mod_http2</a></code>
          is the <a href="https://tools.ietf.org/html/draft-ruellan-http-accept-push-policy-00">
          Accept-Push-Policy Header Field</a> where a client can, for each request, define
          what kind of PUSHes it accepts.</p>
          <p>
          PUSH might not always trigger the request/response/performance that one expects or 
          hopes for. There are various studies on this topic to be found on the web that explain
          benefits and weaknesses and how different features of client and network influence
          the outcome. For example: just because the server PUSHes a resource does not mean
          a browser will actually use the data.</p>
          <p>The major thing that influences the response being PUSHed is the request that was
          simulated. The request URL for a PUSH is given by the application, but where do the
          request headers come from? For example, will the PUSH request a <code>accept-language</code>
          header and if yes with what value?</p>
          <p>Apache will look at the original request (the one that triggered the PUSH) and copy the 
          following headers over to PUSH requests: <code>user-agent</code>, <code>accept</code>, 
          <code>accept-encoding</code>, <code>accept-language</code>, <code>cache-control</code>.</p>
          <p>All other headers are ignored. Cookies will also not be copied over. PUSHing resources
          that require a cookie to be present will not work. This can be a matter of debate. But 
          unless this is more clearly discussed with browser, let's err on the side of caution and
          not expose cookie where they might oridinarily not be visible.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="earlyhints" id="earlyhints">Early Hints</a></h2>
          
          <p>An alternative to PUSHing resources is to send <code>Link</code> headers to the
          client before the response is even ready. This uses the HTTP feature called "Early Hints" and
          is described in <a href="https://tools.ietf.org/html/rfc8297">RFC 8297</a>.</p>
          <p>In order to use this, you need to explicitly enable it on the server via</p>
          <pre class="prettyprint lang-config">H2EarlyHints on</pre>
      
          <p>(It is not enabled by default since some older browser tripped on such responses.)</p>
          <p>If this feature is on, you can use the directive <code class="directive"><a href="../mod/mod_http2.html#h2pushresource">H2PushResource</a></code> to 
          trigger early hints and resource PUSHes:</p>
          <pre class="prettyprint lang-config">&lt;Location /xxx.html&gt;
          H2PushResource /xxx.css
          H2PushResource /xxx.js
      &lt;/Location&gt;</pre>
      
          <p>This will send out a <code>"103 Early Hints"</code> response to a client as soon
          as the server <em>starts</em> processing the request. This may be much early than
          the time the first response headers have been determined, depending on your web
          application.</p>
          <p>If <code class="directive"><a href="../mod/mod_http2.html#h2push">H2Push</a></code> is enabled, this will also start the PUSH right after the
          103 response. If <code class="directive"><a href="../mod/mod_http2.html#h2push">H2Push</a></code> is disabled however, the 103 response will be send
          nevertheless to the client.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/howto/http2.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../es/howto/http2.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="../fr/howto/http2.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/howto/http2.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/dns-caveats.html.ko.euc-kr�������������������������������������������������0000644�0000000�0000050�00000032743�13412755316�020354� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>DNS¿Í ¾ÆÆÄÄ¡¿Í °ü·ÃµÈ »çÇ× - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>DNS¿Í ¾ÆÆÄÄ¡¿Í °ü·ÃµÈ »çÇ×</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/dns-caveats.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/dns-caveats.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/dns-caveats.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/dns-caveats.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/dns-caveats.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
          <p>ÀÌ ¹®¼­¸¦ ÇÑ ¹®ÀåÀ¸·Î ¿ä¾àÇÒ ¼ö ÀÖ´Ù. ¾ÆÆÄÄ¡°¡ ¼³Á¤ÆÄÀÏÀ»
          ÀÐÀ»¶§ DNS¸¦ ÀÇÁ¸ÇÏÁö¾Êµµ·Ï Ç϶ó. ¾ÆÆÄÄ¡°¡ ¼³Á¤ÆÄÀÏÀ» Àдµ¥
          DNS°¡ ÇÊ¿äÇÏ´Ù¸é ¼­¹ö´Â ½Å·Ú¼º ¹®Á¦ (½ÃÀÛÀÌ ¾ÈµÉ ¼öµµ ÀÖ´Ù)
          ȤÀº ¼­ºñ½º°ÅºÎ °ø°Ý°ú (»ç¿ëÀÚ°¡ ´Ù¸¥ »ç¿ëÀÚ¿¡ ´ëÇÑ Á¢±ÙÀ»
          °¡·Îä´Â °ÍÀ» Æ÷ÇÔÇÏ¿©) ¼­ºñ½ºµµµÏ(theft of service) °ø°Ý¿¡
          ½Ã´Þ¸± ¼ö ÀÖ´Ù.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#example">°£´ÜÇÑ ¿¹Á¦</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#denial">¼­ºñ½º°ÅºÎ (Denial of Service)</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#main">"ÁÖ¼­¹ö" ÁÖ¼Ò</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#tips">ÀÌ ¹®Á¦¸¦ ÇÇÇϱâÀ§ÇÑ ÆÁ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#appendix">ºÎ·Ï: ¾ÕÀ¸·Î´Â</a></li>
      </ul><h3>Âü°í</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="example" id="example">°£´ÜÇÑ ¿¹Á¦</a></h2>
          
      
          <div class="example"><p><code>
            &lt;VirtualHost www.abc.dom&gt; <br />
            ServerAdmin webgirl@abc.dom <br />
            DocumentRoot /www/abc <br />
            &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>¾ÆÆÄÄ¡°¡ Á¤»óÀûÀ¸·Î µ¿ÀÛÇϱâÀ§Çؼ­´Â °¢ °¡»óÈ£½ºÆ®¿¡
          ´ëÇØ µÎ°¡Áö Á¤º¸°¡ Àý´ëÀûÀ¸·Î ÇÊ¿äÇÏ´Ù. ÀÌ Á¤º¸´Â
          <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>°ú ¼­¹ö°¡
          ±â´Ù¸®°í ÀÀ´äÇÒ ÃÖ¼Ò ÇѰ³ÀÇ IP ÁÖ¼ÒÀÌ´Ù. ÀÌ ¿¹´Â IP ÁÖ¼Ò°¡
          ¾ø±â¶§¹®¿¡, ¾ÆÆÄÄ¡´Â DNS¸¦ »ç¿ëÇÏ¿© <code>www.abc.dom</code>ÀÇ
          ÁÖ¼Ò¸¦ ã¾Æ¾ß ÇÑ´Ù. ¼­¹ö°¡ ¼³Á¤ÆÄÀÏÀ» ÀÐÀ»¶§ ¾î¶² ÀÌÀ¯¿¡¼­°Ç
          DNS¸¦ »ç¿ëÇÒ ¼ö ¾ø´Ù¸é °¡»óÈ£½ºÆ®¸¦ <strong>¸¸µé ¼ö ¾ø´Ù</strong>.
          ÀÌ °¡»óÈ£½ºÆ®´Â ¿äû¿¡ ÀÀ´äÇÒ ¼ö ¾ø´Ù. (¾ÆÆÄÄ¡ 1.2 ÀÌÀü
          ¹öÀü¿¡¼­´Â ½ÉÁö¾î ¼­¹ö°¡ ºÎÆÃµµ ¾ÈÇÑ´Ù.)</p>
      
          <p><code>www.abc.dom</code>ÀÇ ÁÖ¼Ò°¡ 192.0.2.1À̶ó°í °¡Á¤ÇÏÀÚ.
          ±×¸®°í ´ÙÀ½ ¼³Á¤À» º¸¶ó:</p>
      
          <div class="example"><p><code>
            &lt;VirtualHost 192.0.2.1&gt; <br />
            ServerAdmin webgirl@abc.dom <br />
            DocumentRoot /www/abc <br />
            &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>ÀÌÁ¦ ¾ÆÆÄÄ¡´Â ÀÌ °¡»óÈ£½ºÆ®ÀÇ <code>ServerName</code>À»
          ã±âÀ§ÇØ ¿ªDNS¸¦ »ç¿ëÇØ¾ß ÇÑ´Ù. ¿ªÃ£±â°¡ ½ÇÆÐÇÏ¸é ¾ÆÆÄÄ¡´Â
          °¡»óÈ£½ºÆ®¸¦ ºÎºÐÀûÀ¸·Î ²ö´Ù. (¾ÆÆÄÄ¡ 1.2 ÀÌÀü ¹öÀü¿¡¼­´Â
          ½ÉÁö¾î ¼­¹ö°¡ ºÎÆÃµµ ¾ÈÇÑ´Ù.) Áï, ÀÌ °æ¿ì À̸§±â¹Ý
          °¡»óÈ£½ºÆ®¶ó¸é °¡»óÈ£½ºÆ®´Â ¿ÏÀüÈ÷ µ¿ÀÛÇÏÁö¾Ê°í, ip±â¹ÝÀ̶ó¸é
          ´ëºÎºÐ µ¿ÀÛÇÑ´Ù. ±×·¯³ª ¾ÆÆÄÄ¡°¡ ¼­¹ö¸íÀ» Æ÷ÇÔÇÏ¿© ¼­¹öÀÇ
          Àüü URLÀ» ¸¸µé¾î¾ß ÇÑ´Ù¸é Á¤»óÀûÀÎ URLÀ» ¸¸µéÁö ¸øÇÑ´Ù.</p>
      
          <p>¾Æ·¡ °æ¿ì ÀÌ µÎ°¡Áö ¹®Á¦°¡ ¾ø´Ù.</p>
      
          <div class="example"><p><code>
            &lt;VirtualHost 192.0.2.1&gt; <br />
            ServerName www.abc.dom <br />
            ServerAdmin webgirl@abc.dom <br />
            DocumentRoot /www/abc <br />
            &lt;/VirtualHost&gt;
          </code></p></div>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="denial" id="denial">¼­ºñ½º°ÅºÎ (Denial of Service)</a></h2>
          
      
          <p>(ÃÖ¼ÒÇÑ) µÎ°¡Áö Á¾·ùÀÇ ¼­ºñ½º°ÅºÎ°¡ ¹ß»ýÇÒ ¼ö ÀÖ´Ù.
          ¾ÆÆÄÄ¡ 1.2 ÀÌÀü ¹öÀüÀÇ °æ¿ì ¾î¶² °¡»óÈ£½ºÆ®¿¡¼­¶óµµ
          À§¿¡¼­ ¸»ÇÑ µÎ DNS °Ë»öÀÌ ½ÇÆÐÇÏ¸é ¼­¹ö°¡ ÄÑÁöÁöµµ ¾Ê´Â´Ù.
          DNS°¡ ´ç½ÅÀÇ ±ÇÇÑ ¹ÛÀÇ ¹®Á¦ÀÏ ¼öµµ ÀÖ´Ù. ¿¹¸¦ µé¾î,
          <code>abc.dom</code>ÀÌ °í°´ »çÀÌÆ®ÀÌ°í °í°´ÀÌ ÀÚ½ÅÀÇ DNS¸¦
          °ü¸®ÇÑ´Ù¸é, <code>www.abc.dom</code> ·¹Äڵ带 Áö¿ì±â¸¸ ÇØµµ
          (1.2 ÀÌÀü) ¼­¹ö´Â ½ÃÀÛÇÏÁö ¸øÇÑ´Ù.</p>
      
          <p>ÈξÀ ´õ ±³È°ÇÑ ¹æ¹ýµµ ÀÖ´Ù. ´ÙÀ½ ¼³Á¤À» »ìÆìº¸ÀÚ:</p>
      
          <div class="example"><p><code>
            &lt;VirtualHost www.abc.dom&gt; <br />
            &nbsp;&nbsp;ServerAdmin webgirl@abc.dom <br />
            &nbsp;&nbsp;DocumentRoot /www/abc <br />
            &lt;/VirtualHost&gt; <br />
            <br />
            &lt;VirtualHost www.def.dom&gt; <br />
            &nbsp;&nbsp;ServerAdmin webguy@def.dom <br />
            &nbsp;&nbsp;DocumentRoot /www/def <br />
            &lt;/VirtualHost&gt;
          </code></p></div>
      
          <p>´ç½ÅÀÌ <code>www.abc.dom</code>¿¡ 192.0.2.1,
          <code>www.def.dom</code>¿¡ 192.0.2.2¸¦ ÇÒ´çÇß´Ù°í ÇÏÀÚ.
          ¶Ç, <code>def.dom</code>Àº ÀÚü DNS¸¦ »ç¿ëÇÑ´Ù°í °¡Á¤ÇÏÀÚ.
          ÀÌ ¼³Á¤°ú ÇÔ²² <code>def.dom</code>À» <code>abc.dom</code>À¸·Î
          °¡´Â ¸ðµç Åë½ÅÀ» °¡·Îç ¼ö ÀÖ´Â Àå¼Ò¿¡ µÎ¾ú´Ù. ±×·¸´Ù¸é ±×µéÀº
          <code>www.def.dom</code>À» 192.0.2.1·Î ¼³Á¤Çϱ⸸ ÇÏ¸é µÈ´Ù.
          ±×µéÀÌ ÀÚü DNS¸¦ »ç¿ëÇϱ⶧¹®¿¡ ´ç½ÅÀº ±×µéÀÌ ¿øÇϴµ¥·Î
          <code>www.def.dom</code> ·¹Äڵ带 ¼³Á¤ÇÏ´Â °ÍÀ» ¸·À» ¼ö
          ¾ø´Ù.</p>
      
          <p>(»ç¿ëÀÚ°¡ <code>http://www.abc.dom/whatever</code> Çü½ÄÀÇ
          URLÀ» ÀÔ·ÂÇÏ´Â °æ¿ì¸¦ Æ÷ÇÔÇÏ¿©) 192.0.2.1·Î ¿À´Â ¸ðµç ¿äûÀ»
          <code>def.dom</code> °¡»óÈ£½ºÆ®°¡ ¼­ºñ½ºÇÏ°Ô µÈ´Ù. ¿Ö ÀÌ·±
          ÀÏÀÌ ÀϾ´ÂÁö ÀÌÇØÇÏ·Á¸é ¾ÆÆÄÄ¡°¡ ¾î¶»°Ô °¡»óÈ£½ºÆ®·Î
          ¿À´Â ¿äûÀ» ó¸®ÇÏ´ÂÁö¿¡ ´ëÇÑ ¼³¸íÀÌ ÇÊ¿äÇÏ´Ù.
          <a href="vhosts/details.html">¿©±â</a>¿¡ ´ë°­ ¼³¸íµÇÀÖ´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="main" id="main">"ÁÖ¼­¹ö" ÁÖ¼Ò</a></h2>
          
      
          <p>¾ÆÆÄÄ¡ 1.1¿¡¼­ <a href="vhosts/name-based.html">À̸§±â¹Ý
          °¡»óÈ£½ºÆ® Áö¿ø</a>ÀÌ Æ÷ÇԵǾú±â¶§¹®¿¡ ¾ÆÆÄÄ¡´Â À¥¼­¹ö¸¦
          ½ÇÇàÇϴ ȣ½ºÆ®ÀÇ IP ÁÖ¼Ò(µé)¸¦ ¾Ë Çʿ䰡 »ý°å´Ù. ÀÌ ÁÖ¼Ò´Â
          (ÀÖ´Ù¸é) Àü¿ª <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>
          ȤÀº C ÇÔ¼ö <code>gethostname</code>À¸·Î (¸í·ÉÇÁ·ÒÇÁÆ®¿¡
          "hostname"À» ÀÔ·ÂÇßÀ»¶§¿Í °°Àº °á°ú) ¾ò´Â´Ù. ±×·¯¸é ÀÌ ÁÖ¼Ò·Î
          DNS °Ë»öÀ» ÇÑ´Ù. ÇöÀç ÀÌ °Ë»öÀº ÇÇÇÒ ¼ö ¾ø´Ù.</p>
      
          <p>DNS ¼­¹ö°¡ Á׾ ÀÌ °Ë»öÀÌ ½ÇÆÐÇÒ °Í °°´Ù¸é
          <code>/etc/hosts</code>¿¡ È£½ºÆ®¸íÀ» Áý¾î³ÖÀ» ¼ö ÀÖ´Ù.
          (ÄÄÇ»ÅͰ¡ Á¤»óÀûÀ¸·Î ºÎÆÃµÇ¾ú´Ù¸é ¾Æ¸¶ ÀÌ¹Ì µé¾îÀÖÀ» °ÍÀÌ´Ù.)
          ±×¸®°í DNS°¡ ½ÇÆÐÇÏ¸é ¼­¹ö°¡ <code>/etc/hosts</code>¸¦
          »ç¿ëÇÏ´ÂÁö È®ÀÎÇ϶ó. »ç¿ëÇÏ´Â ¿î¿µÃ¼Á¦¿¡ µû¶ó
          <code>/etc/resolv.conf</code> ȤÀº <code>/etc/nsswitch.conf</code>¸¦
          ¼öÁ¤ÇÏ¸é µÉ °ÍÀÌ´Ù.</p>
      
          <p>¼­¹ö°¡ ¾î¶² ÀÌÀ¯¿¡¼­°Ç DNS¸¦ °Ë»öÇÏ¸é ¾ÈµÈ´Ù¸é
          <code>HOSTRESORDER</code> ȯ°æº¯¼ö¸¦ "local"·Î ¼³Á¤Çϰí
          ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÒ ¼ö ÀÖ´Ù. <code class="module"><a href="./mod/mod_env.html">mod_env</a></code>¸¦
          »ç¿ëÇÏ¿© ȯ°æÀ» º¯°æÇÏÁö ¾Ê´Â´Ù¸é ÀÌ È¯°æº¯¼ö´Â
          CGI¿¡µµ ¿µÇâÀ» ÁØ´Ù. ¿î¿µÃ¼Á¦ÀÇ manpage³ª FAQ¸¦ Âü°íÇÏ´Â
          °ÍÀÌ ÁÁ´Ù.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="tips" id="tips">ÀÌ ¹®Á¦¸¦ ÇÇÇϱâÀ§ÇÑ ÆÁ</a></h2>
          
      
          <ul>
            <li>
              <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code>¿¡ IP
              ÁÖ¼Ò¸¦ »ç¿ëÇ϶ó
            </li>
      
            <li>
              <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>¿¡
              IP ÁÖ¼Ò¸¦ »ç¿ëÇ϶ó
            </li>
      
            <li>
              ¸ðµç °¡»óÈ£½ºÆ®´Â ¸í½ÃÀûÀ¸·Î
              <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>À»
              °¡Áö°Ô Ç϶ó
            </li>
      
            <li>¾î¶² ÆäÀÌÁöµµ ¼­ºñ½ºÇÏÁö¾Ê´Â
            <code>&lt;VirtualHost _default_:*&gt;</code> ¼­¹ö¸¦
            ¸¸µé¾î¶ó</li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="appendix" id="appendix">ºÎ·Ï: ¾ÕÀ¸·Î´Â</a></h2>
          
      
          <p>DNS¿Í °ü·ÃµÈ »óȲÀº ¸Å¿ì ¹Ù¶÷Á÷ÇÏÁö ¸øÇÏ´Ù. ¾ÆÆÄÄ¡ 1.2¿¡¼­
          ¿ì¸®´Â DNS°¡ ½ÇÆÐÇÑ °æ¿ì¿¡µµ ÃÖ¼ÒÇÑ ¼­¹ö°¡ ÄÑÁöµµ·Ï ³ë·ÂÇßÁö¸¸
          °á°ú´Â ³ª»¦´Ù. ¾î·µç ¼³Á¤ÆÄÀÏ¿¡ Á÷Á¢ IP ÁÖ¼Ò¸¦ ¿ä±¸ÇÏ´Â
          °ÍÀº ¹øÈ£¸¦ ´Ù½Ã ¼³Á¤ÇؾßÇÒ ¿äÁò ÀÎÅͳݿ¡ ¸Å¿ì ¹Ù¶÷Á÷ÇÏÁö
          ¸øÇÏ´Ù.</p>
      
          <p>À§¿¡¼­ ¼³¸íÇÑ ¼­ºñ½ºµµµÏ °ø°ÝÀ» ¸·´Â ÇѰ¡Áö ¹æ¹ýÀº °Ë»öÇÑ
          IP ÁÖ¼Ò¿¡ ´Ù½Ã ¿ªDNS °Ë»öÀ» ÇÏ¿© µÎ À̸§À» ºñ±³ÇÏ´Â °ÍÀÌ´Ù.
          ¼­·Î ´Ù¸¥ °æ¿ì °¡»óÈ£½ºÆ®¸¦ °¡µ¿ÇÏÁö ¾ÊÀ» ¼ö ÀÖ´Ù. ÀÌ ¹æ¹ýÀº
          ¿ªDNS°¡ ¿Ã¹Ù·Î ¼³Á¤µÇ¾ß ÇÑ´Ù. (FTP ¼­¹ö³ª TCP wrapper°¡
          "Áߺ¹-¿ª" DNS °Ë»öÀ» ÀÚÁÖ »ç¿ëÇϱ⶧¹®¿¡ ´ëºÎºÐÀÇ °ü¸®ÀÚ¿¡°Ô
          Àͼ÷ÇÒ °ÍÀÌ´Ù.)</p>
      
          <p>¾î·µç IP ÁÖ¼Ò¸¦ »ç¿ëÇÏÁö¾ÊÀ¸¸é DNS°¡ ½ÇÆÐÇÑ °æ¿ì °¡»óÈ£½ºÆ®
          À¥¼­¹ö¸¦ ¹ÏÀ» ¼ö ÀÖ°Ô ½ÃÀÛÇÒ ¼ö ¾ø´Ù. ¼³Á¤ÀÇ ÀϺθ¦ ¹«½ÃÇÏ´Â
          °Í°ú °°Àº ºÎºÐÀûÀÎ ÇØ°áÃ¥Àº À¥¼­¹ö Àüü¸¦ ½ÃÀÛÇÏÁö¾Ê´Â °Íº¸´Ù
          ´õ ³ª»Ü ¼öµµ ÀÖ´Ù.</p>
      
          <p>HTTP/1.1ÀÌ ³ª¿Ô°í ºê¶ó¿ìÀú¿Í ÇÁ·Ï½Ã°¡ <code>Host</code>
          Çì´õ¸¦ º¸³»±â ½ÃÀÛÇßÀ¸¹Ç·Î IP±â¹Ý °¡»óÈ£½ºÆ®¸¦ ¿ÏÀüÈ÷
          »ç¿ëÇÏÁö¾Ê´Â °ÍÀÌ °¡´ÉÇØÁú °ÍÀÌ´Ù. ±×·¯¸é À¥¼­¹ö´Â ¼³Á¤Áß¿¡¼­
          DNS °Ë»öÀ» ÇÒ Çʿ䰡 ¾ø¾îÁø´Ù. ±×·¯³ª 1997³â 3¿ù¿¡´Â Áß¿äÇÑ
          À¥¼­¹ö¿¡ Æ÷ÇÔÇÒ Á¤µµ·Î À̸§±â¹Ý °¡»óÈ£½ºÆ®°¡ ³Î¸® »ç¿ëµÇÁö
          ¾Ê¾Ò´Ù.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./en/dns-caveats.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/dns-caveats.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/dns-caveats.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/dns-caveats.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/dns-caveats.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/dns-caveats.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������httpd-2.4.41/docs/manual/glossary.html.ko.euc-kr����������������������������������������������������0000644�0000000�0000050�00000051606�13412755316�020006� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>¿ë¾î - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>¿ë¾î</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/glossary.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/glossary.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/glossary.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/glossary.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/glossary.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/glossary.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/glossary.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      
      <p>ÀÌ ¹®¼­´Â À¥ ¼­ºñ½º ÀϹݿ¡ ´ëÇÑ, ƯÈ÷ ¾ÆÆÄÄ¡¿Í °ü·ÃµÈ, ¿ë¾îµéÀ»
      Á¤ÀÇÇÑ´Ù. °¢ °³³ä¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ Á¤º¸´Â ¸µÅ©¸¦ Âü°íÇ϶ó.
      <span class="transnote">(<em>¿ªÁÖ;</em> ÇöÀç ´Ü¾îÀÇ ¼ø¼­´Â ÇÑ±Û ¼ø¼­°¡ ¾Æ´Ï¶ó, ¿µ¹®ÀÚ
      ¼ø¼­ÀÔ´Ï´Ù. ¿ë¾î¹ø¿ªÇ¥´Â <a href="http://www.whiterabbitpress.com/osp/apache/">¿©±â</a>¸¦
      Âü°íÇÏ±æ ¹Ù¶ø´Ï´Ù.)</span></p>
      </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="definitions" id="definitions">Á¤ÀÇ</a></h2>
      
      <dl>
      <dt><a name="accesscontrol">Á¢±ÙÁ¦¾î (Access Control)</a></dt>
      <dd>³×Æ®¿÷ ¿µ¿ª¿¡ ´ëÇÑ Á¢±ÙÀ» Á¦ÇÑ. ¾ÆÆÄÄ¡¿¡¼­´Â º¸Åë Æ¯Á¤
      <em>URL</em>ÀÇ Á¢±ÙÀ» Á¦ÇÑÇϱâÀ§ÇØ »ç¿ëÇÑ´Ù.<br /> Âü°í: <a href="howto/auth.html">ÀÎÁõ, ±ÇÇѺο©, Á¢±ÙÁ¦¾î</a></dd>
      
      <dt><a name="algorithm">¾Ë°í¸®Áò (Algorithm)</a></dt>
      <dd>À¯ÇÑÇÑ ´Ü°è¸¦ °ÅÃÄ ¹®Á¦¸¦ Ǫ´Â ¸íÈ®ÇÑ °ø½Ä ȤÀº ±ÔÄ¢µé.
      ¾Ïȣȭ¸¦ À§ÇÑ ¾Ë°í¸®ÁòÀ» º¸Åë <dfn>¾ÏÈ£±â(Ciphers)</dfn>¶ó°í
      ºÎ¸¥´Ù.</dd>
      
      <dt><a name="apacheextensiontool">APache eXtension Tool</a>
      <a name="apxs">(apxs)</a></dt> <dd><a href="#module">¸ðµâ
      (module)</a> ¼Ò½º¸¦ µ¿Àû°øÀ¯°´Ã¼ (<a href="#dso">DSO</a>)·Î
      ÄÄÆÄÀÏÇÏ°í ¾ÆÆÄÄ¡ À¥¼­¹ö¿¡ ¼³Ä¡ÇÏ´Â ÀÛ¾÷À» µ½´Â perl
      ½ºÅ©¸³Æ®.<br /> Âü°í: <a href="programs/apxs.html">Manpage:
      apxs</a></dd>
      
      <dt><a name="authentication">ÀÎÁõ (Authentication)</a></dt>
      <dd>¼­¹ö, Ŭ¶óÀ̾ðÆ®, »ç¿ëÀÚ µî ³×Æ®¿÷ ½Çü¿¡ ´ëÇÑ
      È®ÀÎ.<br /> Âü°í: <a href="howto/auth.html">ÀÎÁõ, ±ÇÇѺο©,
      Á¢±ÙÁ¦¾î</a></dd>
      
      <dt><a name="certificate">ÀÎÁõ¼­ (Certificate)</a></dt>
      <dd>¼­¹ö³ª Ŭ¶óÀÌ¾ðÆ®¿Í °°Àº ³×Æ®¿÷ ½Çü¸¦ ÀÎÁõÇÏ´Â ÀÚ·á.
          ÀÎÁõ¼­¿¡´Â ¼ÒÀ¯ÀÚ (subject¶ó°í ÇÔ), ¼­¸í <a href="#certificationauthority">ÀÎÁõ±â°ü (Certificate
          Authority)</a> (issuer¶ó°í ÇÔ), ¼ÒÀ¯ÀÚÀÇ <a href="#publickey">°ø°³Å°</a>, CA°¡ ¸¸µç ¼­¸í µî¿¡ ´ëÇÑ
          X.509 Á¤º¸°¡ ÀÖ´Ù. ³×Æ®¿÷ ½Çü´Â CA ÀÎÁõ¼­¸¦ »ç¿ëÇÏ¿©
          ¼­¸íÀ» °Ë»çÇÑ´Ù.<br />
      Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ</a></dd>
      
      <dt><a name="certificatsigningrequest">ÀÎÁõ ¼­¸í ¿äû (Certificate
      Signing Request</a>, <a name="csr">CSR)</a></dt> <dd><a href="#certificationauthority">ÀÎÁõ±â°ü (Certification
      Authority)</a>¿¡ Á¦ÃâÇÏ¿© CA <em>ÀÎÁõ¼­ (Certificate)</em>ÀÇ
      <a href="#privatekey">°³ÀÎŰ (Private Key)</a>·Î ¼­¸íµÉ ¾ÆÁ÷
      ¼­¸íµÇÁö¾ÊÀº <a href="#certificate">ÀÎÁõ¼­</a>. CSRÀÌ ¼­¸íµÇ¸é
      ½ÇÁ¦ ÀÎÁõ¼­°¡ µÈ´Ù.<br />
      Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ</a></dd>
      
      <dt><a name="certificationauthority">ÀÎÁõ±â°ü (Certification
      Authority</a>, <a name="ca">CA)</a></dt> <dd>¾ÈÀüÇÑ ¹æ¹ýÀ¸·Î
      ³×Æ®¿÷ ½Çü¿¡ ´ëÇÑ ÀÎÁõÀ» ¼­¸íÇÏ´Â ½Å·ÚÇÏ´Â Á¦»ïÀÚ. ´Ù¸¥ ³×Æ®¿÷
      ½ÇüµéÀº ¼­¸íÀ¸·Î CA°¡ ÀÎÁõ¼­ ¼ÒÀ¯ÀÚ¸¦ ÀÎÁõÇß´ÂÁö È®ÀÎÇÒ ¼ö
      ÀÖ´Ù.<br />
      Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ</a></dd>
      
      <dt><a name="cipher">¾ÏÈ£±â (Cipher)</a></dt> <dd>ÀڷḦ
      ¾ÏȣȭÇÏ´Â ¾Ë°í¸®ÁòÀ̳ª ½Ã½ºÅÛ. ¿¹¸¦ µé¾î, DES, IDEA, RC4 µîÀÌ ÀÖ´Ù.<br />
      Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ</a></dd>
      
      <dt><a name="ciphertext">¾ÏÈ£¹® (Ciphertext)</a></dt> <dd><a href="#plaintext">Æò¹® (Plaintext)</a>À» <a href="#cipher">¾ÏÈ£±â
      (Cipher)</a>·Î ó¸®ÇÑ °á°ú.<br /> Âü°í: <a href="ssl/">SSL/TLS
      ¾Ïȣȭ</a></dd>
      
      <dt><a name="commongatewayinterface">°øÅë °ÔÀÌÆ®¿þÀÌ ÀÎÅÍÆäÀ̽º
      (Common Gateway Interface</a>, <a name="cgi">CGI)</a></dt>
      <dd>¿ÜºÎ ÇÁ·Î±×·¥ÀÌ ¿äûÀ» ¼­ºñ½ºÇÒ ¼ö ÀÖµµ·Ï ¸¸µç À¥¼­¹ö¿Í ¿ÜºÎ
      ÇÁ·Î±×·¥ »çÀÌÀÇ ÀÎÅÍÆäÀ̽º Ç¥ÁØ. ÀÎÅÍÆäÀ̽º´Â ¿ø·¡ <a href="http://hoohoo.ncsa.uiuc.edu/cgi/overview.html">NCSA</a>°¡
      Á¤ÀÇÇßÁö¸¸, <a href="http://cgi-spec.golux.com/">RFC
      ÇÁ·ÎÁ§Æ®</a>À̱⵵ ÇÏ´Ù.<br />
      Âü°í: <a href="howto/cgi.html">CGI·Î µ¿Àû ÆäÀÌÁö »ý¼º</a></dd>
      
      
      <dt><a name="configurationdirective">¼³Á¤ Áö½Ã¾î (Configuration
      Directive)</a></dt>
      <dd>Âü°í: <a href="#directive">Áö½Ã¾î</a></dd>
      
      <dt><a name="configurationfile">¼³Á¤ÆÄÀÏ (Configuration File)</a></dt>
      <dd>¾ÆÆÄÄ¡¸¦ ¼³Á¤ÇÏ´Â <a href="#directive">Áö½Ã¾î (directive)</a>¸¦
      Àû¾îµÐ ÅØ½ºÆ®ÆÄÀÏ.<br />
      Âü°í: <a href="configuring.html">¼³Á¤ÆÄÀÏ</a></dd>
      
      <dt><a name="connect">CONNECT</a></dt>
      <dd>HTTP¸¦ ÅëÇØ ÀÚ·áÈ帧À» ÇÁ·Ï½ÃÇÏ´Â HTTP <a href="#method">¸Þ½áµå
      (method)</a>. SSL ÇÁ·ÎÅäÄÝ µî ´Ù¸¥ ÇÁ·ÎÅäÄÝÀ» °¨½Î±âÀ§ÇØ »ç¿ëÇÑ´Ù.</dd>
      
      <dt><a name="context">»ç¿ëÀå¼Ò (Context)</a></dt> <dd><a href="#configurationfile">¼³Á¤ÆÄÀÏ (configuration file)</a>¿¡¼­
      ƯÁ¤ <a href="#directive">Áö½Ã¾î (directive)</a>¸¦ »ç¿ëÇÒ ¼ö
      ÀÖ´Â Àå¼Ò.<br /> Âü°í: <a href="mod/directive-dict.html#Context">¾ÆÆÄÄ¡ Áö½Ã¾î¸¦ ¼³¸íÇϴµ¥
      »ç¿ëÇÑ ¿ë¾îÁ¤ÀÇ</a></dd>
      
      <dt><a name="digitalsignature">ÀüÀÚ¼­¸í (Digital Signature)</a></dt>
      <dd>ÀÎÁõ¼­³ª ´Ù¸¥ ÆÄÀÏÀ» °Ë»çÇÏ´Â ¾ÏȣȭµÈ ¹®ÀÚµé. <a href="#certificationauthority">ÀÎÁõ±â°ü (Certification
          Authority)</a>Àº <em>ÀÎÁõ¼­ (Certificate)</em>¿¡ Æ÷ÇÔµÈ
          <em>°ø°³Å° (Public Key)</em>¸¦ ÇØ½¬ÇÑ °á°ú¸¦ ÀÚ½ÅÀÇ
          <em>°³ÀÎŰ (Private Key)</em>·Î ¾ÏȣȭÇÏ¿© ¼­¸íÀ» ¸¸µç´Ù.
          ¿ÀÁ÷ CAÀÇ °ø°³Å°¸¸ÀÌ ¼­¸íÀ» Ç® ¼ö Àֱ⶧¹®¿¡, CA°¡ <em>ÀÎÁõ¼­
          (Certificate)</em>¸¦ °¡Áø ³×Æ®¿÷ ½Çü¸¦ ÀÎÁõÇßÀ½À» Áõ¸íÇÒ
          ¼ö ÀÖ´Ù.<br />
      Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ</a></dd>
      
      <dt><a name="directive">Áö½Ã¾î (Directive)</a></dt> <dd>¾ÆÆÄÄ¡ÀÇ
      ¿©·¯ ±â´ÉÀ» Á¶ÀýÇÏ´Â ¼³Á¤ ¸í·É¾î. Áö½Ã¾î´Â <a href="#configurationfile">¼³Á¤ÆÄÀÏ (Configuration File)</a>¿¡¼­
      »ç¿ëÇÑ´Ù.<br /> Âü°í: <a href="mod/directives.html">Áö½Ã¾î ¸ñ·Ï</a></dd>
      
      <dt><a name="dynamicsharedobject">µ¿Àû°øÀ¯°´Ã¼ (Dynamic Shared
      Object)</a> <a name="dso">(DSO)</a></dt> <dd> ¾ÆÆÄÄ¡ httpd
      ½ÇÇàÆÄÀϰú º°µµ·Î ÄÄÆÄÀÏÇÏ¿© ÇÊ¿äÇÒ¶§ ÀоîµéÀÏ ¼ö ÀÖ´Â <a href="#module">¸ðµâ (Module)</a>.<br />
      Âü°í: <a href="dso.html">µ¿Àû°øÀ¯°´Ã¼ Áö¿ø</a></dd>
      
      <dt><a name="environmentvariable">ȯ°æº¯¼ö (Environment Variable)</a>
      <a name="env-variable">(env-variable)</a></dt>
      <dd>Á¤º¸¸¦ ÀúÀåÇϰí ÇÁ·Î±×·¥°£¿¡ Åë½ÅÀ» À§ÇØ ¿î¿µÃ¼Á¦ ½©ÀÌ °ü¸®ÇÏ´Â
      º¯¼ö. ¾ÆÆÄÄ¡¿¡µµ ȯ°æº¯¼ö¶ó´Â ³»ºÎ º¯¼ö°¡ ÀÖÁö¸¸, ½© ȯ°æÀÌ
      ¾Æ´Ï¶ó ¾ÆÆÄÄ¡ ³»ºÎ¿¡ ÀúÀåµÈ´Ù.<br />
      Âü°í: <a href="env.html">¾ÆÆÄÄ¡ÀÇ È¯°æº¯¼ö</a></dd>
      
      <dt><a name="export-crippled">¼öÃâ¿ë (Export-Crippled)</a></dt>
      <dd>¹Ì±¹ ¼öÃâ°ü¸®±ÔÁ¦(Export Administration Regulations, EAR)¸¦
          ÁؼöÇϱâÀ§ÇØ ¾ÏÈ£(¿Í º¸¾È)ÀÇ °­µµ¸¦ ³·Ãã. ¼öÃâ¿ë ¾Ïȣȭ
          ¼ÒÇÁÆ®¿þ¾î´Â Ű Å©±â°¡ ÀÛ°Ô Á¦ÇѵǾî, <em>¾ÏÈ£¹®
          (Ciphertext)</em>À» ¹«½ÄÇÑ ¹æ¹ý(brute force)À¸·Î Ç® ¼ö ÀÖ´Ù.<br />
      Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ (SSL/TLS Encryption)</a></dd>
      
      <dt><a name="filter">ÇÊÅÍ (Filter)</a></dt>
      <dd>¼­¹ö°¡ º¸³»°Å³ª ¹Þ´Â ÀڷḦ ó¸®ÇÏ´Â °úÁ¤. ÀÔ·ÂÇÊÅÍ´Â
      Ŭ¶óÀÌ¾ðÆ®°¡ ¼­¹ö·Î º¸³»´Â ÀڷḦ ó¸®Çϰí, Ãâ·ÂÇÊÅÍ´Â ¼­¹ö°¡
      Ŭ¶óÀÌ¾ðÆ®¿¡°Ô º¸³¾ ¹®¼­¸¦ ó¸®ÇÑ´Ù. ¿¹¸¦ µé¾î,
      <code>INCLUDES</code> Ãâ·ÂÇÊÅÍ´Â ¹®¼­ÀÇ <a href="#ssi">Server
      Side Includes</a>¸¦ ó¸®ÇÑ´Ù.<br />
      Âü°í: <a href="filter.html">ÇÊÅÍ</a></dd>
      
      <dt><a name="fully-qualifieddomain-name">¿ÏÀüÇÑ µµ¸ÞÀθí
      (Fully-Qualified Domain-Name)</a> <a name="fqdn">(FQDN)</a></dt>
      <dd>IP ÁÖ¼Ò¿¡ ´ëÀÀÇÏ´Â, È£½ºÆ®¸í°ú µµ¸ÞÀθíÀ¸·Î ±¸¼ºµÈ ³×Æ®¿÷
      ½ÇüÀÇ À¯ÀÏÇÑ À̸§. ¿¹¸¦ µé¾î, <code>www</code>°¡ È£½ºÆ®¸íÀ̰í
      <code>example.com</code>ÀÌ µµ¸ÞÀθíÀ϶§,
      <code>www.example.com</code>Àº ¿ÏÀüÇÑ µµ¸ÞÀθíÀÌ´Ù.</dd>
      
      <dt><a name="handler">Çڵ鷯 (Handler)</a></dt>
      <dd>ÆÄÀÏÀ» ¿äûÇÒ¶§ ¼öÇàÇÏ´Â ÀÛ¾÷¿¡ ´ëÇÑ ¾ÆÆÄÄ¡ ³»ºÎ Ç¥Çö.
      ÀϹÝÀûÀ¸·Î ÆÄÀÏÀº ÆÄÀÏ Á¾·ù¿¡ µû¶ó ¾Ï¹¬ÀûÀÎ Çڵ鷯¸¦ °¡Áø´Ù.
      º¸Åë ¸ðµç ÆÄÀÏÀº ¼­¹ö°¡ °£´ÜÈ÷ ¼­ºñ½ºÇÏÁö¸¸, ¾î¶² ÆÄÀÏ Á¾·ù´Â
      µû·Î "󸮵ȴÙ(handled)". ¿¹¸¦ µé¾î, <code>cgi-script</code>
      Çڵ鷯´Â <a href="#cgi">CGI</a>·Î ó¸®ÇÒ ÆÄÀÏÀ» ÁöÁ¤ÇÑ´Ù.<br />
      Âü°í: <a href="handler.html">¾ÆÆÄÄ¡¿¡¼­ Çڵ鷯 »ç¿ë</a></dd>
      
      <dt><a name="header">Çì´õ (Header)</a></dt>
      <dd><a href="#http">HTTP</a> ¿äû°ú ÀÀ´ä¿¡¼­ ½ÇÁ¦ ³»¿ë ÀÌÀü¿¡
      º¸³»´Â ºÎºÐÀ¸·Î ³»¿ëÀ» ¼³¸íÇÏ´Â Á¤º¸°¡ ÀÖ´Ù.</dd>
      
      <dt><a name="htaccess">.htaccess</a></dt> <dd>À¥¹®¼­µé ¾È¿¡ ÀÖ´Â
      <a href="#configurationfile">¼³Á¤ÆÄÀÏ (configuration file)</a>·Î,
      ¼³Á¤ <a href="#directive">Áö½Ã¾î (directive)</a>¸¦ ÀÚ½ÅÀÌ À§Ä¡ÇÑ
      µð·ºÅ丮¿Í ¸ðµç ÇÏÀ§µð·ºÅ丮¿¡ Àû¿ëÇÑ´Ù. À̸§°ú ´Þ¸® ÀÌ
      ÆÄÀÏ¿¡¼­´Â ´Ü¼øÇÑ Á¢±ÙÁ¦¾î Áö½Ã¾î¿Ü¿¡ °ÅÀÇ ¸ðµç Á¾·ùÀÇ Áö½Ã¾î¸¦
      »ç¿ëÇÒ ¼ö ÀÖ´Ù.<br />
      Âü°í: <a href="configuring.html">¼³Á¤ÆÄÀÏ</a></dd>
      
      <dt><a name="httpd.conf">httpd.conf</a></dt>
      <dd>¾ÆÆÄÄ¡ ÁÖ <a href="#configurationfile">¼³Á¤ÆÄÀÏ (configuration
      file)</a>. ±âº»ÀûÀÎ À§Ä¡´Â
      <code>/usr/local/apache2/conf/httpd.conf</code>ÀÌÁö¸¸, ½ÇÇàÇÒ¶§
      ȤÀº ÄÄÆÄÀ϶§ ¼³Á¤À¸·Î º¯°æÇÒ ¼ö ÀÖ´Ù.<br />
      Âü°í: <a href="configuring.html">¼³Á¤ÆÄÀÏ</a></dd>
      
      <dt><a name="hypertexttransferprotocol">HyperText Transfer
      Protocol</a> <a name="http">(HTTP)</a></dt>
      <dd>¿ùµå¿ÍÀ̵åÀ¥¿¡¼­ »ç¿ëÇϴ ǥÁØ Àü¼Û ÇÁ·ÎÅäÄÝ. ¾ÆÆÄÄ¡´Â
      <a href="http://ietf.org/rfc/rfc2616.txt">RFC 2616</a>¿¡¼­
      Á¤ÀÇÇÑ HTTP/1.1À̶ó´Â ÇÁ·ÎÅäÄÝÀÇ 1.1 ¹öÀüÀ» ±¸ÇöÇÑ´Ù.</dd>
      
      <dt><a name="https">HTTPS</a></dt>
      <dd>¿ùµåÈ­À̵åÀ¥ÀÇ Ç¥ÁØ ¾ÏÈ£Åë½Å ¹æ¹ý, HyperText Transfer
          Protocol (Secure). »ç½Ç ¹Ø´Ü¿¡ <a href="#ssl">SSL</a>À»
          »ç¿ëÇÑ HTTPÀÌ´Ù.<br />
      Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ</a></dd>
      
      <dt><a name="method">¸Þ½áµå (Method)</a></dt> <dd>Ŭ¶óÀÌ¾ðÆ®°¡
      º¸³»´Â <a href="#http">HTTP</a> ¿äûÁÙÀÌ
      ÀÚ¿ø¿¡ ¼öÇàÇϵµ·Ï Áö½ÃÇÑ Çൿ. HTTP ¸Þ½áµå¿¡´Â <code>GET</code>,
      <code>POST</code>, <code>PUT</code> µîÀÌ ÀÖ´Ù.</dd>
      
      <dt><a name="messagedigest">¸Þ½ÃÁö ¿ä¾à (Message Digest)</a></dt>
      <dd>¸Þ½ÃÁö ³»¿ëÀÌ Àü¼ÛÁß º¯°æµÇÁö ¾Ê¾ÒÀ½À» Áõ¸íÇϱâÀ§ÇÑ
          ¸Þ½ÃÁöÀÇ ÇØ½¬.<br />
      Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ</a></dd>
      
      <dt><a name="mime-type">MIME-type</a></dt> <dd>Àü¼ÛÇÒ ¹®¼­ÀÇ
      Á¾·ù¸¦ ¼³¸íÇÏ´Â ¹æ½Ä. Multipurpose Internet Mail Extensions
      Çü½ÄÀ» ºô·Á¿Ô±â¶§¹®¿¡ ÀÌ·¸°Ô À̸§À» Áö¾ú´Ù. ½½·¡½¬¸¦ »çÀÌ¿¡
      µÐ major type°ú minor typeÀ¸·Î ÀÌ·ç¾îÁø´Ù. ¿¹¸¦ µé¸é,
      <code>text/html</code>, <code>image/gif</code>,
      <code>application/octet-stream</code> µîÀÌ´Ù. MIME-typeÀº HTTPÀÇ
      <code>Content-Type</code> <a href="#header">Çì´õ (header)</a>·Î
      Àü¼ÛÇÑ´Ù.<br /> Âü°í: <a href="mod/mod_mime.html">mod_mime</a></dd>
      
      <dt><a name="module">¸ðµâ (Module)</a></dt> <dd>ÇÁ·Î±×·¥ÀÇ µ¶¸³µÈ
      ºÎºÐ. ¸¹Àº ¾ÆÆÄÄ¡ ±â´ÉÀº ´ç½ÅÀÌ Æ÷ÇÔ¿©ºÎ¸¦ ¼±ÅÃÇÒ ¼ö ÀÖ´Â ¸ðµâ¿¡
      µé¾îÀÖ´Ù. ¾ÆÆÄÄ¡ httpd ½ÇÇàÆÄÀϰú °°ÀÌ ÄÄÆÄÀÏÇÑ ¸ðµâÀ» <em>Á¤Àû
      ¸ðµâ</em>À̶ó°í Çϸç, µû·Î ºÐ¸®µÇ¾î ½ÇÇà½Ã ¼±ÅÃÀûÀ¸·Î ÀоîµéÀÏ
      ¼ö ÀÖ´Â ¸ðµâÀ» <em>µ¿Àû ¸ðµâ</em> ȤÀº <a href="#dso">DSO</a>¶ó°í
      ÇÑ´Ù. ±âº»ÀûÀ¸·Î Æ÷ÇÔÇÏ´Â ¸ðµâÀ» <em>base ¸ðµâ</em>À̶ó°í ÇÑ´Ù.
      ¾ÆÆÄÄ¡ À¥¼­¹ö <a href="#tarball">Ÿº¼ (tarball)</a>°ú °°ÀÌ
      ¹èÆ÷µÇÁö´Â ¾ÊÁö¸¸ ¾ÆÆÄÄ¡¿¡´Â ¸¹Àº ¸ðµâµéÀÌ ÀÖ´Ù. À̵éÀ»
      <em>Á¦»ïÀÚ°¡ ¸¸µç(third-party) ¸ðµâ</em>À̶ó°í ÇÑ´Ù.<br />
      Âü°í: <a href="mod/">¸ðµâ ¸ñ·Ï</a></dd>
      
      <dt><a name="modulemagicnumber">¸ðµâ ¸¶¹ý¼ö (Module Magic Number)</a>
      (<a name="mmn">MMN</a>)</dt>
      <dd>¸ðµâ ¸¶¹ý¼ö´Â ¾ÆÆÄÄ¡ ¼Ò½ºÄڵ尡 Á¤ÀÇÇÑ »ó¼ö·Î, ¸ðµâÀÇ
      ÀÌÁøÈ£È¯¼º°ú °ü·ÃÀÌ ÀÖ´Ù. ¸ðµâ ¸¶¹ý¼ö´Â ÀÌÁøÈ£È¯¼ºÀ» ´õ ÀÌ»ó º¸ÀåÇÒ
      ¼ö ¾øµµ·Ï ¾ÆÆÄÄ¡ ³»ºÎ ±¸Á¶³ª ÇÔ¼ö È£Ãâ, ´Ù¸¥ API ÀϺΰ¡ º¯°æµÈ
      °æ¿ì¿¡ ¹Ù²ï´Ù. MMNÀÌ º¯Çϸé Á¦»ïÀÚ°¡ ¸¸µç ¸ðµâÀº ¸ðµÎ ÃÖ¼ÒÇÑ ´Ù½Ã
      ÄÄÆÄÀÏµÇ¾ß ÇÑ´Ù. »õ ¾ÆÆÄÄ¡ ¹öÀü¿¡ ¸Âµµ·Ï Á¶±Ý ¼öÁ¤ÇؾßÇÒ °æ¿ìµµ
      ÀÖ´Ù.
      </dd>
      
      <dt><a name="openssl">OpenSSL</a></dt>
      <dd>SSL/TLS¸¦ À§ÇÑ ¿ÀǼҽº µµ±¸<br />
          Âü°í <a href="http://www.openssl.org/">http://www.openssl.org/</a></dd>
      
      <dt><a name="passphrase">Pass Phrase</a></dt>
      <dd>°³ÀÎŰ ÆÄÀÏÀ» º¸È£ÇÏ´Â ¹®±¸. ÀÎÁõÇÏÁö¾ÊÀº »ç¿ëÀÚ°¡ ÀÌ °³ÀÎŰ
      ÆÄÀÏÀ» »ç¿ëÇÏ¿© ¾ÏȣȭÇÏÁö ¸øÇϵµ·Ï ÇÑ´Ù. º¸Åë <a name="cipher">¾ÏÈ£±â
      (Ciphers)</a>°¡ »ç¿ëÇÏ´Â ºñ¹Ð½º·± ¾ÏÈ£/ÇØµ¶ ŰÀÌ´Ù.<br /> Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ</a></dd>
      
      <dt><a name="plaintext">Æò¹® (Plaintext)</a></dt>
      <dd>¾ÏȣȭÇÏÁö ¾ÊÀº ±Û.</dd>
      
      <dt><a name="privatekey">°³ÀÎŰ (Private Key)</a></dt> <dd>¹ÞÀº
      ÀڷḦ ÇØµ¶ÇÏ°í º¸³»´Â ÀڷḦ ¼­¸íÇϱâÀ§ÇÑ <a href="#publickeycryptography">°ø°³Å° ¾Ïȣȭ (Public Key
      Cryptography)</a> ½Ã½ºÅÛÀÇ ¾ÏȣŰ.<br />
      Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ</a></dd>
      
      <dt><a name="proxy">ÇÁ·Ï½Ã (Proxy)</a></dt> <dd>Ŭ¶óÀÌ¾ðÆ®¿Í
      <em>½ÇÁ¦ ¼­¹ö</em> »çÀÌ¿¡ ÀÖ´Â Áß°£ ¼­¹ö. Ŭ¶óÀÌ¾ðÆ®¿¡°Ô ¿äûÀ»
      ¹Þ¾Æ ½ÇÁ¦ ¼­¹ö·Î º¸³»°í, ½ÇÁ¦ ¼­¹ö¿¡°Ô¼­ ¹ÞÀº ÀÀ´äÀ» ´Ù½Ã
      Ŭ¶óÀÌ¾ðÆ®¿¡°Ô º¸³½´Ù. ¿©·¯ Ŭ¶óÀÌ¾ðÆ®°¡ °°Àº ³»¿ëÀ» ¿äûÇϸé
      ÇÁ·Ï½Ã´Â ¸Å¹ø ¼­¹ö¿¡ ¿äûÇÏÁö¾Ê°í ij½¬¿¡ ÀúÀåµÈ ³»¿ëÀ» »ç¿ëÇÏ¿©
      ÀÀ´ä½Ã°£À» ÁÙÀÏ ¼ö ÀÖ´Ù.<br />
      Âü°í: <a href="mod/mod_proxy.html">mod_proxy</a></dd>
      
      <dt><a name="publickey">°ø°³Å° (Public Key)</a></dt> <dd><a href="#publickeycryptography">°ø°³Å° ¾Ïȣȭ (Public Key
      Cryptography)</a> ½Ã½ºÅÛ¿¡¼­ ŰÀÇ ¼ÒÀ¯ÀÚ¿¡°Ô º¸³»´Â ¹®±¸¸¦ ¾ÏȣȭÇϰųª
      ¼ÒÀ¯ÀÚ°¡ ¸¸µç ¼­¸íÀ» Ç®±âÀ§ÇÑ °ø°³µÈ Ű.<br />
      Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ</a></dd>
      
      <dt><a name="publickeycryptography">°ø°³Å° ¾Ïȣȭ (Public Key
      Cryptography)</a></dt>
      <dd>¾ÏÈ£¿Í ÇØµ¶¿¡ ¼­·Î ´Ù¸¥ ۸¦ »ç¿ëÇÏ´Â ºñ´ëĪ(asymmetric)
      ¾Ïȣȭ ½Ã½ºÅÛÀÇ ¿¬±¸ ¹× Ȱ¿ë. ¾ÏÈ£¿Í ÇØµ¶¿¡ »ç¿ëÇÏ´Â µÎ°³ÀÇ Å°´Â
      Ű½Ö(key pair)À» ÀÌ·é´Ù. ºñ´ëĪ ¾Ïȣȭ¶ó°íµµ ºÎ¸¥´Ù.<br />
      Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ</a></dd>
      
      <dt><a name="regularexpresion">Á¤±ÔÇ¥Çö½Ä (Regular Expression)</a> <a name="regex">(Regex)</a></dt> <dd>±ÛÀÇ ÆÐÅÏÀ» ±â¼úÇÏ´Â ¹æ½Ä.
      ¿¹¸¦ µé¾î, "¹®ÀÚ A·Î ½ÃÀÛÇÏ´Â ¸ðµç ´Ü¾î", "¼ýÀÚ 10°³·ÎµÈ ÀüÈ­¹øÈ£",
      ½ÉÁö¾î "½°Ç¥°¡ µÎ°³ÀÖ°í ´ë¹®ÀÚ Q°¡ ¾ø´Â ¹®Àå" µîÀ» Ç¥ÇöÇÒ ¼ö ÀÖ´Ù.
      Á¤±ÔÇ¥Çö½ÄÀ» »ç¿ëÇÏ¸é ¸Å¿ì À¯¿¬ÇÏ°Ô ÆÄÀÏÀ̳ª ÀÚ¿ø¿¡ ¾î¶² ¼ºÁúÀ» Àû¿ëÇÒ
      ¼ö ÀÖ´Ù. ¿¹¸¦ µé¾î, "images"¶õ µð·ºÅ丮 ¾Æ·¡¿¡ ÀÖ´Â ¸ðµç .gif¿Í
      .jpg ÆÄÀÏÀº "<code>/images/.*(jpg|gif)$</code>"·Î ÁöĪÇÒ ¼ö
      ÀÖ´Ù. ¾ÆÆÄÄ¡´Â <a href="http://www.pcre.org/">PCRE</a> ¶óÀ̺귯¸®¸¦
      »ç¿ëÇÏ¿© Perlȣȯ Á¤±ÔÇ¥Çö½ÄÀ» Áö¿øÇÑ´Ù.</dd>
      
      <dt><a name="reverseproxy">¿ªÇÁ·Ï½Ã (Reverse Proxy)</a></dt>
      <dd>Ŭ¶óÀÌ¾ðÆ®¿¡°Ô <em>½ÇÁ¦ ¼­¹ö</em>ó·³ º¸ÀÌ´Â <a href="#proxy">ÇÁ·Ï½Ã (proxy)</a> ¼­¹ö. º¸¾È»ó ÀÌÀ¯ ȤÀº ºÎÇϸ¦
      ºÐ»êÇϱâÀ§ÇØ Å¬¶óÀÌ¾ðÆ®¿¡°Ô ½ÇÁ¦ ¼­¹ö¸¦ ¼û±æ¶§ À¯¿ëÇÏ´Ù.</dd>
      
      <dt><a name="securesocketslayer">Secure Sockets Layer</a> <a name="ssl">(SSL)</a></dt> <dd>Netscape Communications»ç°¡ TCP/IP
      ³×Æ®¿÷ÀÇ ÀϹÝÀûÀÎ Åë½Å ÀÎÁõ°ú ¾Ïȣȭ¸¦ À§ÇØ ¸¸µç ÇÁ·ÎÅäÄÝ.
      °¡Àå ÀϹÝÀûÀÎ ¿ëµµ´Â <em>HTTPS</em> (HyperText Transfer Protocol
      (HTTP) over SSL)ÀÌ´Ù.<br />
      Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ</a></dd>
      
      <dt><a name="serversideincludes">Server Side Includes</a> <a name="ssi">(SSI)</a></dt> <dd>HTML ÆÄÀÏ ¾È¿¡ ó¸®Áö½Ã¾î¸¦ Æ÷ÇÔÇÏ´Â
      ±â¼ú.<br /> Âü°í: <a href="howto/ssi.html">Server Side Includes ¼Ò°³</a></dd>
      
      <dt><a name="session">¼¼¼Ç (Session)</a></dt>
      <dd>ÀϹÝÀûÀ¸·Î Åë½ÅÀÇ »óȲ(context) Á¤º¸.</dd>
      
      <dt><a name="ssleay">SSLeay</a></dt>
      <dd>Eric A. YoungÀÌ °³¹ßÇÑ ¿ø·¡ SSL/TLS ±¸Çö ¶óÀ̺귯¸®</dd>
      
      <dt><a name="symmetriccryptophraphy">´ëĪÀû ¾ÏÈ£¹ý (Symmetric
      Cryptography)</a></dt>
      <dd>¾ÏÈ£¿Í ÇØµ¶ ÀÛ¾÷¿¡ °°Àº ¾Ïȣ۸¦ »ç¿ëÇÏ´Â <em>¾ÏÈ£±â
          (Ciphers)</em>ÀÇ ¿¬±¸ ¹× Ȱ¿ë.<br />
      Âü°í: <a href="ssl/">SSL/TLS Encryption</a></dd>
      
      <dt><a name="tarball">Ÿº¼ (Tarball)</a></dt>
      <dd><code>tar</code> µµ±¸¸¦ »ç¿ëÇÏ¿© ÆÄÀϵéÀ» ¸ðÀº ¹­À½. ¾ÆÆÄÄ¡´Â
      tar ÆÄÀÏÀ» ¾ÐÃàÇϰųª pkzipÀ¸·Î ¾ÐÃàÇÏ¿© ¹èÆ÷µÈ´Ù.</dd>
      
      <dt><a name="transportlayersecurity">Transport Layer Security</a> <a name="tls">(TLS)</a></dt>
      <dd>ÀÎÅͳݱâ¼ú °ü·Ã ±¹Á¦Ç¥ÁØÈ­±â±¸(Internet Engineering Task
      Force, IETF)°¡ TCP/IP ³×Æ®¿÷ÀÇ ÀϹÝÀûÀÎ Åë½Å ÀÎÁõ°ú ¾Ïȣȭ¸¦
      À§ÇØ ¸¸µç SSLÀÇ ÈÄ¼Ó ÇÁ·ÎÅäÄÝ. TLS ¹öÀü 1Àº SSL ¹öÀü 3°ú °ÅÀÇ
      À¯»çÇÏ´Ù.<br />
      Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ</a></dd>
      
      <dt><a name="uniformresourcelocator">Uniform Resource Locator</a>
      <a name="url">(URL)</a></dt>
      <dd>ÀÎÅͳݿ¡ ÀÖ´Â ÀÚ¿øÀÇ À̸§/ÁÖ¼Ò. Á¤½ÄÀ¸·Î´Â <a href="#uniformresourceidentifier">Uniform Resource
      Identifier</a>¶ó°í ÇÏ´Â °ÍÀÇ ÀÏ»óÀûÀÎ ºñ°ø½Ä ¸íĪÀÌ´Ù. º¸Åë URLÀº
      <code>http</code>³ª <code>https</code>°°Àº ½ºÅ´(scheme), È£½ºÆ®¸í,
      °æ·Î·Î ±¸¼ºµÈ´Ù. ÀÌ ÆäÀÌÁöÀÇ URLÀº
      <code>http://httpd.apache.org/docs/2.4/glossary.html</code>ÀÌ´Ù.</dd>
      
      <dt><a name="uniformresourceidentifier">Uniform Resource Identifier</a>
      <a name="URI">(URI)</a></dt>
      <dd>Ãß»óÀûÀÎ ÀÚ¿øÀ̳ª ½ÇÁ¦ ÀÚ¿øÀ» ÁöĪÇϱâÀ§ÇÑ °£°áÇÑ ¹®ÀÚ¿­.
      °ø½ÄÀûÀ¸·Î <a href="http://www.ietf.org/rfc/rfc2396.txt">RFC
      2396</a>¿¡¼­ Á¤ÀÇÇÑ´Ù. ¿ùµå¿ÍÀ̵åÀ¥¿¡¼­ »ç¿ëÇÏ´Â URI¸¦ º¸Åë
      <a href="#url">URL</a>À̶ó°í ºÎ¸¥´Ù.</dd>
      
      <dt><a name="virtualhosting">°¡»óÈ£½ºÆ® (Virtual Hosting)</a></dt>
      <dd>¾ÆÆÄÄ¡ Çϳª·Î ¿©·¯ À¥»çÀÌÆ®¸¦ ¼­ºñ½ºÇϱâ. <em>IP °¡»óÈ£½ºÆ®</em>´Â
      À¥»çÀÌÆ®¸¶´Ù IP ÁÖ¼Ò°¡ ´Ù¸£´Ù. <em>À̸§±â¹Ý(name-based)
      °¡»óÈ£½ºÆ®</em>´Â È£½ºÆ®¸í¸¸À» »ç¿ëÇϹǷΠÇÑ IP ÁÖ¼Ò¿¡¼­ ¿©·¯
      »çÀÌÆ®¸¦ ¼­ºñ½ºÇÒ ¼ö ÀÖ´Ù.<br />
      Âü°í: <a href="vhosts/">¾ÆÆÄÄ¡ °¡»óÈ£½ºÆ® ¹®¼­</a></dd>
      
      <dt><a name="x.509">X.509</a></dt>
      <dd>±¹Á¦Àü±âÅë½Å¿¬ÇÕ(International Telecommunication Union,
      ITU-T)ÀÌ ±ÇÀåÇÏ´Â ÀÎÁõ¼­ ¾ç½Ä. SSL/TLS ÀÎÁõ¿¡¼­ »ç¿ëÇÑ´Ù.<br />
      Âü°í: <a href="ssl/">SSL/TLS ¾Ïȣȭ</a></dd>
      </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./de/glossary.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/glossary.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/glossary.html" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/glossary.html" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/glossary.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/glossary.html" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/glossary.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/glossary.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/urlmapping.html.en���������������������������������������������������������0000644�0000000�0000050�00000064030�13412755316�017120� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Mapping URLs to Filesystem Locations - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Mapping URLs to Filesystem Locations</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/urlmapping.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/urlmapping.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/urlmapping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/urlmapping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/urlmapping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>This document explains how the Apache HTTP Server uses the URL of a request
          to determine the filesystem location from which to serve a
          file.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#related">Related Modules and Directives</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#documentroot">DocumentRoot</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#outside">Files Outside the DocumentRoot</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#user">User Directories</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#redirect">URL Redirection</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#proxy">Reverse Proxy</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#rewrite">Rewriting Engine</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#notfound">File Not Found</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#other">Other URL Mapping Modules</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="related" id="related">Related Modules and Directives</a></h2>
      
      <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_actions.html">mod_actions</a></code></li><li><code class="module"><a href="./mod/mod_alias.html">mod_alias</a></code></li><li><code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code></li><li><code class="module"><a href="./mod/mod_dir.html">mod_dir</a></code></li><li><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code></li><li><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></li><li><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li><li><code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code></li><li><code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code></li><li><code class="module"><a href="./mod/mod_vhost_alias.html">mod_vhost_alias</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_alias.html#alias">Alias</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code></li><li><code class="directive"><a href="./mod/mod_speling.html#checkspelling">CheckSpelling</a></code></li><li><code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code></li><li><code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code></li><li><code class="directive"><a href="./mod/core.html#options">Options</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreverse">ProxyPassReverse</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiedomain">ProxyPassReverseCookieDomain</a></code></li><li><code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiepath">ProxyPassReverseCookiePath</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#redirect">Redirect</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#redirectmatch">RedirectMatch</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#scriptalias">ScriptAlias</a></code></li><li><code class="directive"><a href="./mod/mod_alias.html#scriptaliasmatch">ScriptAliasMatch</a></code></li><li><code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code></li></ul></td></tr></table>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="documentroot" id="documentroot">DocumentRoot</a></h2>
      
          <p>In deciding what file to serve for a given request, httpd's
          default behavior is to take the URL-Path for the request (the part
          of the URL following the hostname and port) and add it to the end
          of the <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> specified
          in your configuration files. Therefore, the files and directories
          underneath the <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>
          make up the basic document tree which will be visible from the
          web.</p>
      
          <p>For example, if <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>
          were set to <code>/var/www/html</code> then a request for
          <code>http://www.example.com/fish/guppies.html</code> would result
          in the file <code>/var/www/html/fish/guppies.html</code> being
          served to the requesting client.</p>
      
          <p>If a directory is requested (i.e. a path ending with
          <code>/</code>), the file served from that directory is defined by
          the <code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code> directive.
          For example, if <code>DocumentRoot</code> were set as above, and 
          you were to set:</p>
      
          <div class="example"><p><code>DirectoryIndex index.html index.php</code></p></div>
      
          <p>Then a request for <code>http://www.example.com/fish/</code> will
          cause httpd to attempt to serve the file
          <code>/var/www/html/fish/index.html</code>. In the event that
          that file does not exist, it will next attempt to serve the file
          <code>/var/www/html/fish/index.php</code>.</p>
      
          <p>If neither of these files existed, the next step is to
          attempt to provide a directory index, if
          <code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code> is loaded and configured to permit
          that.</p>
      
          <p>httpd is also capable of <a href="vhosts/">Virtual
          Hosting</a>, where the server receives requests for more than one
          host. In this case, a different <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> can be specified for each
          virtual host, or alternatively, the directives provided by the
          module <code class="module"><a href="./mod/mod_vhost_alias.html">mod_vhost_alias</a></code> can
          be used to dynamically determine the appropriate place from which
          to serve content based on the requested IP address or
          hostname.</p>
      
          <p>The <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> directive
          is set in your main server configuration file
          (<code>httpd.conf</code>) and, possibly, once per additional <a href="vhosts/">Virtual Host</a> you create.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="outside" id="outside">Files Outside the DocumentRoot</a></h2>
      
          <p>There are frequently circumstances where it is necessary to
          allow web access to parts of the filesystem that are not strictly
          underneath the <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>. httpd offers several
          different ways to accomplish this. On Unix systems, symbolic links
          can bring other parts of the filesystem under the <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code>. For security reasons,
          httpd will follow symbolic links only if the <code class="directive"><a href="./mod/core.html#options">Options</a></code> setting for the relevant
          directory includes <code>FollowSymLinks</code> or
          <code>SymLinksIfOwnerMatch</code>.</p>
      
          <p>Alternatively, the <code class="directive"><a href="./mod/mod_alias.html#alias">Alias</a></code> directive will map any part
          of the filesystem into the web space. For example, with</p>
      
      <pre class="prettyprint lang-config">Alias "/docs" "/var/web"</pre>
      
      
          <p>the URL <code>http://www.example.com/docs/dir/file.html</code>
          will be served from <code>/var/web/dir/file.html</code>. The
          <code class="directive"><a href="./mod/mod_alias.html#scriptalias">ScriptAlias</a></code> directive
          works the same way, with the additional effect that all content
          located at the target path is treated as <a class="glossarylink" href="./glossary.html#cgi" title="see glossary">CGI</a> scripts.</p>
      
          <p>For situations where you require additional flexibility, you
          can use the <code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code>
          and <code class="directive"><a href="./mod/mod_alias.html#scriptaliasmatch">ScriptAliasMatch</a></code>
          directives to do powerful <a class="glossarylink" href="./glossary.html#regex" title="see glossary">regular
          expression</a> based matching and substitution. For
          example,</p>
      
          <pre class="prettyprint lang-config">ScriptAliasMatch "^/~([a-zA-Z0-9]+)/cgi-bin/(.+)"   "/home/$1/cgi-bin/$2"</pre>
      
      
          <p>will map a request to
          <code>http://example.com/~user/cgi-bin/script.cgi</code> to the
          path <code>/home/user/cgi-bin/script.cgi</code> and will treat
          the resulting file as a CGI script.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="user" id="user">User Directories</a></h2>
      
          <p>Traditionally on Unix systems, the home directory of a
          particular <em>user</em> can be referred to as
          <code>~user/</code>. The module <code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code>
          extends this idea to the web by allowing files under each user's
          home directory to be accessed using URLs such as the
          following.</p>
      
      <div class="example"><p><code>http://www.example.com/~user/file.html</code></p></div>
      
          <p>For security reasons, it is inappropriate to give direct
          access to a user's home directory from the web. Therefore, the
          <code class="directive"><a href="./mod/mod_userdir.html#userdir">UserDir</a></code> directive
          specifies a directory underneath the user's home directory
          where web files are located. Using the default setting of
          <code>Userdir public_html</code>, the above URL maps to a file
          at a directory like
          <code>/home/user/public_html/file.html</code> where
          <code>/home/user/</code> is the user's home directory as
          specified in <code>/etc/passwd</code>.</p>
      
          <p>There are also several other forms of the
          <code>Userdir</code> directive which you can use on systems
          where <code>/etc/passwd</code> does not contain the location of
          the home directory.</p>
      
          <p>Some people find the "~" symbol (which is often encoded on the
          web as <code>%7e</code>) to be awkward and prefer to use an
          alternate string to represent user directories. This functionality
          is not supported by mod_userdir. However, if users' home
          directories are structured in a regular way, then it is possible
          to use the <code class="directive"><a href="./mod/mod_alias.html#aliasmatch">AliasMatch</a></code>
          directive to achieve the desired effect. For example, to make
          <code>http://www.example.com/upages/user/file.html</code> map to
          <code>/home/user/public_html/file.html</code>, use the following
          <code>AliasMatch</code> directive:</p>
      
          <pre class="prettyprint lang-config">AliasMatch "^/upages/([a-zA-Z0-9]+)(/(.*))?$"   "/home/$1/public_html/$3"</pre>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="redirect" id="redirect">URL Redirection</a></h2>
      
          <p>The configuration directives discussed in the above sections
          tell httpd to get content from a specific place in the filesystem
          and return it to the client. Sometimes, it is desirable instead to
          inform the client that the requested content is located at a
          different URL, and instruct the client to make a new request with
          the new URL. This is called <em>redirection</em> and is
          implemented by the <code class="directive"><a href="./mod/mod_alias.html#redirect">Redirect</a></code> directive. For example, if
          the contents of the directory <code>/foo/</code> under the
          <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> are moved
          to the new directory <code>/bar/</code>, you can instruct clients
          to request the content at the new location as follows:</p>
      
          <pre class="prettyprint lang-config">Redirect permanent "/foo/"   "http://www.example.com/bar/"</pre>
      
      
          <p>This will redirect any URL-Path starting in
          <code>/foo/</code> to the same URL path on the
          <code>www.example.com</code> server with <code>/bar/</code>
          substituted for <code>/foo/</code>. You can redirect clients to
          any server, not only the origin server.</p>
      
          <p>httpd also provides a <code class="directive"><a href="./mod/mod_alias.html#redirectmatch">RedirectMatch</a></code> directive for more
          complicated rewriting problems. For example, to redirect requests
          for the site home page to a different site, but leave all other
          requests alone, use the following configuration:</p>
      
          <pre class="prettyprint lang-config">RedirectMatch permanent "^/$"    "http://www.example.com/startpage.html"</pre>
      
      
          <p>Alternatively, to temporarily redirect all pages on one site
          to a particular page on another site, use the following:</p>
      
          <pre class="prettyprint lang-config">RedirectMatch temp ".*"  "http://othersite.example.com/startpage.html"</pre>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="proxy" id="proxy">Reverse Proxy</a></h2>
      
      <p>httpd also allows you to bring remote documents into the URL space
      of the local server.  This technique is called <em>reverse
      proxying</em> because the web server acts like a proxy server by
      fetching the documents from a remote server and returning them to the
      client.  It is different from normal (forward) proxying because, to the client,
      it appears the documents originate at the reverse proxy server.</p>
      
      <p>In the following example, when clients request documents under the
      <code>/foo/</code> directory, the server fetches those documents from
      the <code>/bar/</code> directory on <code>internal.example.com</code>
      and returns them to the client as if they were from the local
      server.</p>
      
      <pre class="prettyprint lang-config">ProxyPass "/foo/" "http://internal.example.com/bar/"
      ProxyPassReverse "/foo/" "http://internal.example.com/bar/"
      ProxyPassReverseCookieDomain internal.example.com public.example.com
      ProxyPassReverseCookiePath "/foo/" "/bar/"</pre>
      
      
      <p>The <code class="directive"><a href="./mod/mod_proxy.html#proxypass">ProxyPass</a></code> configures
      the server to fetch the appropriate documents, while the
      <code class="directive"><a href="./mod/mod_proxy.html#proxypassreverse">ProxyPassReverse</a></code>
      directive rewrites redirects originating at
      <code>internal.example.com</code> so that they target the appropriate
      directory on the local server.  Similarly, the
      <code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiedomain">ProxyPassReverseCookieDomain</a></code>
      and <code class="directive"><a href="./mod/mod_proxy.html#proxypassreversecookiepath">ProxyPassReverseCookiePath</a></code>
      rewrite cookies set by the backend server.</p>
      <p>It is important to note, however, that
      links inside the documents will not be rewritten. So any absolute
      links on <code>internal.example.com</code> will result in the client
      breaking out of the proxy server and requesting directly from
      <code>internal.example.com</code>. You can modify these links (and other
      content) in a page as it is being served to the client using
      <code class="module"><a href="./mod/mod_substitute.html">mod_substitute</a></code>.</p>
      
      <pre class="prettyprint lang-config">Substitute "s/internal\.example\.com/www.example.com/i"</pre>
      
      
      <p>For more sophisticated rewriting of links in HTML and XHTML, the 
      <code class="module"><a href="./mod/mod_proxy_html.html">mod_proxy_html</a></code> module is also available. It allows you
      to create maps of URLs that need to be rewritten, so that complex
      proxying scenarios can be handled.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="rewrite" id="rewrite">Rewriting Engine</a></h2>
      
          <p>When even more powerful substitution is required, the rewriting
          engine provided by <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>
          can be useful. The directives provided by this module can use
          characteristics of the request such as browser type or source IP
          address in deciding from where to serve content. In addition,
          mod_rewrite can use external database files or programs to
          determine how to handle a request. The rewriting engine is capable
          of performing all three types of mappings discussed above:
          internal redirects (aliases), external redirects, and proxying.
          Many practical examples employing mod_rewrite are discussed in the
          <a href="rewrite/">detailed mod_rewrite documentation</a>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="notfound" id="notfound">File Not Found</a></h2>
      
          <p>Inevitably, URLs will be requested for which no matching
          file can be found in the filesystem. This can happen for
          several reasons. In some cases, it can be a result of moving
          documents from one location to another. In this case, it is
          best to use <a href="#redirect">URL redirection</a> to inform
          clients of the new location of the resource. In this way, you
          can assure that old bookmarks and links will continue to work,
          even though the resource is at a new location.</p>
      
          <p>Another common cause of "File Not Found" errors is
          accidental mistyping of URLs, either directly in the browser,
          or in HTML links. httpd provides the module
          <code class="module"><a href="./mod/mod_speling.html">mod_speling</a></code> (sic) to help with
          this problem. When this module is activated, it will intercept
          "File Not Found" errors and look for a resource with a similar
          filename. If one such file is found, mod_speling will send an
          HTTP redirect to the client informing it of the correct
          location. If several "close" files are found, a list of
          available alternatives will be presented to the client.</p>
      
          <p>An especially useful feature of mod_speling, is that it will
          compare filenames without respect to case. This can help
          systems where users are unaware of the case-sensitive nature of
          URLs and the unix filesystem. But using mod_speling for
          anything more than the occasional URL correction can place
          additional load on the server, since each "incorrect" request
          is followed by a URL redirection and a new request from the
          client.</p>
      
          <p><code class="module"><a href="./mod/mod_dir.html">mod_dir</a></code> provides <code class="directive"><a href="./mod/mod_dir.html#fallbackresource">FallbackResource</a></code>, which can be used to map virtual
          URIs to a real resource, which then serves them. This is a very
          useful replacement for <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> when implementing
          a 'front controller'</p>
      
          <p>If all attempts to locate the content fail, httpd returns
          an error page with HTTP status code 404 (file not found). The
          appearance of this page is controlled with the
          <code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code> directive
          and can be customized in a flexible manner as discussed in the
          <a href="custom-error.html">Custom error responses</a>
          document.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="other" id="other">Other URL Mapping Modules</a></h2>
      
      
      
          <p>Other modules available for URL mapping include:</p>
      
          <ul>
          <li><code class="module"><a href="./mod/mod_actions.html">mod_actions</a></code> - Maps a request to a CGI script
          based on the request method, or resource MIME type.</li>
          <li><code class="module"><a href="./mod/mod_dir.html">mod_dir</a></code> - Provides basic mapping of a trailing
          slash into an index file such as <code>index.html</code>.</li>
          <li><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code> - Maps a request to a URL based
          on where a user clicks on an image embedded in a HTML document.</li>
          <li><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> - Selects an appropriate
          document based on client preferences such as language or content
          compression.</li>
          </ul>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/urlmapping.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/urlmapping.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/urlmapping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/urlmapping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/urlmapping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/urlmapping.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/dso.html.en����������������������������������������������������������������0000644�0000000�0000050�00000046427�13412755316�015541� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Dynamic Shared Object (DSO) Support - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Dynamic Shared Object (DSO) Support</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/dso.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/dso.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/dso.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/dso.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/dso.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>The Apache HTTP Server is a modular program where the
          administrator can choose the functionality to include in the
          server by selecting a set of modules.
          Modules will be compiled as Dynamic Shared Objects (DSOs)
          that exist separately from the main <code class="program"><a href="./programs/httpd.html">httpd</a></code>
          binary file. DSO modules may be compiled at the time the server
          is built, or they may be compiled and added at a later time
          using the Apache Extension Tool (<code class="program"><a href="./programs/apxs.html">apxs</a></code>).</p>
          <p>Alternatively, the modules can be statically compiled into
          the <code class="program"><a href="./programs/httpd.html">httpd</a></code> binary when the server is built.</p>
      
          <p>This document describes how to use DSO modules as well as
          the theory behind their use.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#implementation">Implementation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#usage">Usage Summary</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#background">Background</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#advantages">Advantages and Disadvantages</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="implementation" id="implementation">Implementation</a></h2>
      
      <table class="related"><tr><th>Related Modules</th><th>Related Directives</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_so.html">mod_so</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code></li></ul></td></tr></table>
      
          <p>The DSO support for loading individual Apache httpd modules is based
          on a module named <code class="module"><a href="./mod/mod_so.html">mod_so</a></code> which must be statically
          compiled into the Apache httpd core. It is the only module besides
          <code class="module"><a href="./mod/core.html">core</a></code> which cannot be put into a DSO
          itself. Practically all other distributed Apache httpd modules will then
          be placed into a DSO. After a module is compiled into a DSO named
          <code>mod_foo.so</code> you can use <code class="module"><a href="./mod/mod_so.html">mod_so</a></code>'s <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> directive in your
          <code>httpd.conf</code> file to load this module at server startup
          or restart.</p>
          <p>The DSO builds for individual modules can be disabled via
          <code class="program"><a href="./programs/configure.html">configure</a></code>'s <code>--enable-mods-static</code>
          option as discussed in the <a href="install.html">install
          documentation</a>.</p>
      
          <p>To simplify this creation of DSO files for Apache httpd modules
          (especially for third-party modules) a support program
          named <code class="program"><a href="./programs/apxs.html">apxs</a></code> (<dfn>APache
          eXtenSion</dfn>) is available. It can be used to build DSO based
          modules <em>outside of</em> the Apache httpd source tree. The idea is
          simple: When installing Apache HTTP Server the <code class="program"><a href="./programs/configure.html">configure</a></code>'s
          <code>make install</code> procedure installs the Apache httpd C
          header files and puts the platform-dependent compiler and
          linker flags for building DSO files into the <code class="program"><a href="./programs/apxs.html">apxs</a></code>
          program. This way the user can use <code class="program"><a href="./programs/apxs.html">apxs</a></code> to compile
          his Apache httpd module sources without the Apache httpd distribution
          source tree and without having to fiddle with the
          platform-dependent compiler and linker flags for DSO
          support.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="usage" id="usage">Usage Summary</a></h2>
      
          <p>To give you an overview of the DSO features of Apache HTTP Server 2.x,
          here is a short and concise summary:</p>
      
          <ol>
            <li>
              <p>Build and install a <em>distributed</em> Apache httpd module, say
              <code>mod_foo.c</code>, into its own DSO
              <code>mod_foo.so</code>:</p>
      
      <div class="example"><p><code>
      $ ./configure --prefix=/path/to/install --enable-foo<br />
      $ make install
      </code></p></div>
            </li>
      
            <li>
            <p>Configure Apache HTTP Server with all modules enabled. Only a basic
            set will be loaded during server startup. You can change the set of loaded
            modules by activating or deactivating the <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> directives in
            <code>httpd.conf</code>.</p>
      
      <div class="example"><p><code>
      $ ./configure --enable-mods-shared=all<br />
      $ make install
      </code></p></div>
            </li>
      
            <li>
            <p>Some modules are only useful for developers and will not be build.
            when using the module set <em>all</em>. To build all available modules
            including developer modules use <em>reallyall</em>. In addition the
            <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code> directives for all
            built modules can be activated via the configure option
            <code>--enable-load-all-modules</code>.</p>
      
      <div class="example"><p><code>
      $ ./configure --enable-mods-shared=reallyall --enable-load-all-modules<br />
      $ make install
      </code></p></div>
            </li>
      
            <li>
              Build and install a <em>third-party</em> Apache httpd module, say
              <code>mod_foo.c</code>, into its own DSO
              <code>mod_foo.so</code> <em>outside of</em> the Apache httpd
              source tree using <code class="program"><a href="./programs/apxs.html">apxs</a></code>:
      
      <div class="example"><p><code>
      $ cd /path/to/3rdparty<br />
      $ apxs -cia mod_foo.c
      </code></p></div>
            </li>
          </ol>
      
          <p>In all cases, once the shared module is compiled, you must
          use a <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code>
          directive in <code>httpd.conf</code> to tell Apache httpd to activate
          the module.</p>
      
          <p>See the <a href="programs/apxs.html">apxs documentation</a> for more details.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="background" id="background">Background</a></h2>
      
          <p>On modern Unix derivatives there exists a mechanism
          called dynamic linking/loading of <em>Dynamic Shared
          Objects</em> (DSO) which provides a way to build a piece of
          program code in a special format for loading it at run-time
          into the address space of an executable program.</p>
      
          <p>This loading can usually be done in two ways: automatically
          by a system program called <code>ld.so</code> when an
          executable program is started or manually from within the
          executing program via a programmatic system interface to the
          Unix loader through the system calls
          <code>dlopen()/dlsym()</code>.</p>
      
          <p>In the first way the DSO's are usually called <em>shared
          libraries</em> or <em>DSO libraries</em> and named
          <code>libfoo.so</code> or <code>libfoo.so.1.2</code>. They
          reside in a system directory (usually <code>/usr/lib</code>)
          and the link to the executable program is established at
          build-time by specifying <code>-lfoo</code> to the linker
          command. This hard-codes library references into the executable
          program file so that at start-time the Unix loader is able to
          locate <code>libfoo.so</code> in <code>/usr/lib</code>, in
          paths hard-coded via linker-options like <code>-R</code> or in
          paths configured via the environment variable
          <code>LD_LIBRARY_PATH</code>. It then resolves any (yet
          unresolved) symbols in the executable program which are
          available in the DSO.</p>
      
          <p>Symbols in the executable program are usually not referenced
          by the DSO (because it's a reusable library of general code)
          and hence no further resolving has to be done. The executable
          program has no need to do anything on its own to use the
          symbols from the DSO because the complete resolving is done by
          the Unix loader. (In fact, the code to invoke
          <code>ld.so</code> is part of the run-time startup code which
          is linked into every executable program which has been bound
          non-static). The advantage of dynamic loading of common library
          code is obvious: the library code needs to be stored only once,
          in a system library like <code>libc.so</code>, saving disk
          space for every program.</p>
      
          <p>In the second way the DSO's are usually called <em>shared
          objects</em> or <em>DSO files</em> and can be named with an
          arbitrary extension (although the canonical name is
          <code>foo.so</code>). These files usually stay inside a
          program-specific directory and there is no automatically
          established link to the executable program where they are used.
          Instead the executable program manually loads the DSO at
          run-time into its address space via <code>dlopen()</code>. At
          this time no resolving of symbols from the DSO for the
          executable program is done. But instead the Unix loader
          automatically resolves any (yet unresolved) symbols in the DSO
          from the set of symbols exported by the executable program and
          its already loaded DSO libraries (especially all symbols from
          the ubiquitous <code>libc.so</code>). This way the DSO gets
          knowledge of the executable program's symbol set as if it had
          been statically linked with it in the first place.</p>
      
          <p>Finally, to take advantage of the DSO's API the executable
          program has to resolve particular symbols from the DSO via
          <code>dlsym()</code> for later use inside dispatch tables
          <em>etc.</em> In other words: The executable program has to
          manually resolve every symbol it needs to be able to use it.
          The advantage of such a mechanism is that optional program
          parts need not be loaded (and thus do not spend memory) until
          they are needed by the program in question. When required,
          these program parts can be loaded dynamically to extend the
          base program's functionality.</p>
      
          <p>Although this DSO mechanism sounds straightforward there is
          at least one difficult step here: The resolving of symbols from
          the executable program for the DSO when using a DSO to extend a
          program (the second way). Why? Because "reverse resolving" DSO
          symbols from the executable program's symbol set is against the
          library design (where the library has no knowledge about the
          programs it is used by) and is neither available under all
          platforms nor standardized. In practice the executable
          program's global symbols are often not re-exported and thus not
          available for use in a DSO. Finding a way to force the linker
          to export all global symbols is the main problem one has to
          solve when using DSO for extending a program at run-time.</p>
      
          <p>The shared library approach is the typical one, because it
          is what the DSO mechanism was designed for, hence it is used
          for nearly all types of libraries the operating system
          provides.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="advantages" id="advantages">Advantages and Disadvantages</a></h2>
      
          <p>The above DSO based features have the following
          advantages:</p>
      
          <ul>
            <li>The server package is more flexible at run-time because
            the server process can be assembled at run-time via
            <code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code>
            <code>httpd.conf</code> configuration directives instead of
            <code class="program"><a href="./programs/configure.html">configure</a></code> options at build-time. For instance,
            this way one is able to run different server instances
            (standard &amp; SSL version, minimalistic &amp; dynamic
            version [mod_perl, mod_php], <em>etc.</em>) with only one Apache httpd
            installation.</li>
      
            <li>The server package can be easily extended with
            third-party modules even after installation. This is
            a great benefit for vendor package maintainers, who can create
            an Apache httpd core package and additional packages containing
            extensions like PHP, mod_perl, mod_security, <em>etc.</em></li>
      
            <li>Easier Apache httpd module prototyping, because with the
            DSO/<code class="program"><a href="./programs/apxs.html">apxs</a></code> pair you can both work outside the
            Apache httpd source tree and only need an <code>apxs -i</code>
            command followed by an <code>apachectl restart</code> to
            bring a new version of your currently developed module into
            the running Apache HTTP Server.</li>
          </ul>
      
          <p>DSO has the following disadvantages:</p>
      
          <ul>
            <li>The server is approximately 20% slower at startup time
            because of the symbol resolving overhead the Unix loader now
            has to do.</li>
      
            <li>The server is approximately 5% slower at execution time
            under some platforms, because position independent code (PIC)
            sometimes needs complicated assembler tricks for relative
            addressing, which are not necessarily as fast as absolute
            addressing.</li>
      
            <li>Because DSO modules cannot be linked against other
            DSO-based libraries (<code>ld -lfoo</code>) on all platforms
            (for instance a.out-based platforms usually don't provide
            this functionality while ELF-based platforms do) you cannot
            use the DSO mechanism for all types of modules. Or in other
            words, modules compiled as DSO files are restricted to only
            use symbols from the Apache httpd core, from the C library
            (<code>libc</code>) and all other dynamic or static libraries
            used by the Apache httpd core, or from static library archives
            (<code>libfoo.a</code>) containing position independent code.
            The only chances to use other code is to either make sure the
            httpd core itself already contains a reference to it or
            loading the code yourself via <code>dlopen()</code>.</li>
          </ul>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/dso.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/dso.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/dso.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/dso.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/dso.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/dso.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/convenience.map������������������������������������������������������������0000644�0000000�0000050�00000105660�13523273316�016451� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# Mapping from directive names to URLs
      # GENERATED FROM XML -- DO NOT EDIT
      # You may use it as follows:
      # RewriteEngine On
      # RewriteMap dir2url txt:/path/to/convenience.map
      # RewriteCond ${dir2url:$1} (.+)
      # RewriteRule ^/+([^/]+)$ /manual/%1 [R=301,NE,L]
      
      acceptfilter	mod/core.html#acceptfilter
      acceptpathinfo	mod/core.html#acceptpathinfo
      accessfilename	mod/core.html#accessfilename
      action	mod/mod_actions.html#action
      addalt	mod/mod_autoindex.html#addalt
      addaltbyencoding	mod/mod_autoindex.html#addaltbyencoding
      addaltbytype	mod/mod_autoindex.html#addaltbytype
      addcharset	mod/mod_mime.html#addcharset
      adddefaultcharset	mod/core.html#adddefaultcharset
      adddescription	mod/mod_autoindex.html#adddescription
      addencoding	mod/mod_mime.html#addencoding
      addhandler	mod/mod_mime.html#addhandler
      addicon	mod/mod_autoindex.html#addicon
      addiconbyencoding	mod/mod_autoindex.html#addiconbyencoding
      addiconbytype	mod/mod_autoindex.html#addiconbytype
      addinputfilter	mod/mod_mime.html#addinputfilter
      addlanguage	mod/mod_mime.html#addlanguage
      addmoduleinfo	mod/mod_info.html#addmoduleinfo
      addoutputfilter	mod/mod_mime.html#addoutputfilter
      addoutputfilterbytype	mod/mod_filter.html#addoutputfilterbytype
      addtype	mod/mod_mime.html#addtype
      alias	mod/mod_alias.html#alias
      aliasmatch	mod/mod_alias.html#aliasmatch
      allow	mod/mod_access_compat.html#allow
      allowconnect	mod/mod_proxy_connect.html#allowconnect
      allowencodedslashes	mod/core.html#allowencodedslashes
      allowmethods	mod/mod_allowmethods.html#allowmethods
      allowoverride	mod/core.html#allowoverride
      allowoverridelist	mod/core.html#allowoverridelist
      anonymous	mod/mod_authn_anon.html#anonymous
      anonymous_logemail	mod/mod_authn_anon.html#anonymous_logemail
      anonymous_mustgiveemail	mod/mod_authn_anon.html#anonymous_mustgiveemail
      anonymous_nouserid	mod/mod_authn_anon.html#anonymous_nouserid
      anonymous_verifyemail	mod/mod_authn_anon.html#anonymous_verifyemail
      asyncrequestworkerfactor	mod/event.html#asyncrequestworkerfactor
      authbasicauthoritative	mod/mod_auth_basic.html#authbasicauthoritative
      authbasicfake	mod/mod_auth_basic.html#authbasicfake
      authbasicprovider	mod/mod_auth_basic.html#authbasicprovider
      authbasicusedigestalgorithm	mod/mod_auth_basic.html#authbasicusedigestalgorithm
      authdbduserpwquery	mod/mod_authn_dbd.html#authdbduserpwquery
      authdbduserrealmquery	mod/mod_authn_dbd.html#authdbduserrealmquery
      authdbmgroupfile	mod/mod_authz_dbm.html#authdbmgroupfile
      authdbmtype	mod/mod_authn_dbm.html#authdbmtype
      authdbmuserfile	mod/mod_authn_dbm.html#authdbmuserfile
      authdigestalgorithm	mod/mod_auth_digest.html#authdigestalgorithm
      authdigestdomain	mod/mod_auth_digest.html#authdigestdomain
      authdigestnoncelifetime	mod/mod_auth_digest.html#authdigestnoncelifetime
      authdigestprovider	mod/mod_auth_digest.html#authdigestprovider
      authdigestqop	mod/mod_auth_digest.html#authdigestqop
      authdigestshmemsize	mod/mod_auth_digest.html#authdigestshmemsize
      authformauthoritative	mod/mod_auth_form.html#authformauthoritative
      authformbody	mod/mod_auth_form.html#authformbody
      authformdisablenostore	mod/mod_auth_form.html#authformdisablenostore
      authformfakebasicauth	mod/mod_auth_form.html#authformfakebasicauth
      authformlocation	mod/mod_auth_form.html#authformlocation
      authformloginrequiredlocation	mod/mod_auth_form.html#authformloginrequiredlocation
      authformloginsuccesslocation	mod/mod_auth_form.html#authformloginsuccesslocation
      authformlogoutlocation	mod/mod_auth_form.html#authformlogoutlocation
      authformmethod	mod/mod_auth_form.html#authformmethod
      authformmimetype	mod/mod_auth_form.html#authformmimetype
      authformpassword	mod/mod_auth_form.html#authformpassword
      authformprovider	mod/mod_auth_form.html#authformprovider
      authformsitepassphrase	mod/mod_auth_form.html#authformsitepassphrase
      authformsize	mod/mod_auth_form.html#authformsize
      authformusername	mod/mod_auth_form.html#authformusername
      authgroupfile	mod/mod_authz_groupfile.html#authgroupfile
      authldapauthorizeprefix	mod/mod_authnz_ldap.html#authldapauthorizeprefix
      authldapbindauthoritative	mod/mod_authnz_ldap.html#authldapbindauthoritative
      authldapbinddn	mod/mod_authnz_ldap.html#authldapbinddn
      authldapbindpassword	mod/mod_authnz_ldap.html#authldapbindpassword
      authldapcharsetconfig	mod/mod_authnz_ldap.html#authldapcharsetconfig
      authldapcompareasuser	mod/mod_authnz_ldap.html#authldapcompareasuser
      authldapcomparednonserver	mod/mod_authnz_ldap.html#authldapcomparednonserver
      authldapdereferencealiases	mod/mod_authnz_ldap.html#authldapdereferencealiases
      authldapgroupattribute	mod/mod_authnz_ldap.html#authldapgroupattribute
      authldapgroupattributeisdn	mod/mod_authnz_ldap.html#authldapgroupattributeisdn
      authldapinitialbindasuser	mod/mod_authnz_ldap.html#authldapinitialbindasuser
      authldapinitialbindpattern	mod/mod_authnz_ldap.html#authldapinitialbindpattern
      authldapmaxsubgroupdepth	mod/mod_authnz_ldap.html#authldapmaxsubgroupdepth
      authldapremoteuserattribute	mod/mod_authnz_ldap.html#authldapremoteuserattribute
      authldapremoteuserisdn	mod/mod_authnz_ldap.html#authldapremoteuserisdn
      authldapsearchasuser	mod/mod_authnz_ldap.html#authldapsearchasuser
      authldapsubgroupattribute	mod/mod_authnz_ldap.html#authldapsubgroupattribute
      authldapsubgroupclass	mod/mod_authnz_ldap.html#authldapsubgroupclass
      authldapurl	mod/mod_authnz_ldap.html#authldapurl
      authmerging	mod/mod_authz_core.html#authmerging
      authname	mod/mod_authn_core.html#authname
      authncachecontext	mod/mod_authn_socache.html#authncachecontext
      authncacheenable	mod/mod_authn_socache.html#authncacheenable
      authncacheprovidefor	mod/mod_authn_socache.html#authncacheprovidefor
      authncachesocache	mod/mod_authn_socache.html#authncachesocache
      authncachetimeout	mod/mod_authn_socache.html#authncachetimeout
      authnprovideralias	mod/mod_authn_core.html#authnprovideralias
      authnzfcgicheckauthnprovider	mod/mod_authnz_fcgi.html#authnzfcgicheckauthnprovider
      authnzfcgidefineprovider	mod/mod_authnz_fcgi.html#authnzfcgidefineprovider
      authtype	mod/mod_authn_core.html#authtype
      authuserfile	mod/mod_authn_file.html#authuserfile
      authzdbdlogintoreferer	mod/mod_authz_dbd.html#authzdbdlogintoreferer
      authzdbdquery	mod/mod_authz_dbd.html#authzdbdquery
      authzdbdredirectquery	mod/mod_authz_dbd.html#authzdbdredirectquery
      authzdbmtype	mod/mod_authz_dbm.html#authzdbmtype
      authzprovideralias	mod/mod_authz_core.html#authzprovideralias
      authzsendforbiddenonfailure	mod/mod_authz_core.html#authzsendforbiddenonfailure
      balancergrowth	mod/mod_proxy.html#balancergrowth
      balancerinherit	mod/mod_proxy.html#balancerinherit
      balancermember	mod/mod_proxy.html#balancermember
      balancerpersist	mod/mod_proxy.html#balancerpersist
      brotlialteretag	mod/mod_brotli.html#brotlialteretag
      brotlicompressionmaxinputblock	mod/mod_brotli.html#brotlicompressionmaxinputblock
      brotlicompressionquality	mod/mod_brotli.html#brotlicompressionquality
      brotlicompressionwindow	mod/mod_brotli.html#brotlicompressionwindow
      brotlifilternote	mod/mod_brotli.html#brotlifilternote
      browsermatch	mod/mod_setenvif.html#browsermatch
      browsermatchnocase	mod/mod_setenvif.html#browsermatchnocase
      bufferedlogs	mod/mod_log_config.html#bufferedlogs
      buffersize	mod/mod_buffer.html#buffersize
      cachedefaultexpire	mod/mod_cache.html#cachedefaultexpire
      cachedetailheader	mod/mod_cache.html#cachedetailheader
      cachedirlength	mod/mod_cache_disk.html#cachedirlength
      cachedirlevels	mod/mod_cache_disk.html#cachedirlevels
      cachedisable	mod/mod_cache.html#cachedisable
      cacheenable	mod/mod_cache.html#cacheenable
      cachefile	mod/mod_file_cache.html#cachefile
      cacheheader	mod/mod_cache.html#cacheheader
      cacheignorecachecontrol	mod/mod_cache.html#cacheignorecachecontrol
      cacheignoreheaders	mod/mod_cache.html#cacheignoreheaders
      cacheignorenolastmod	mod/mod_cache.html#cacheignorenolastmod
      cacheignorequerystring	mod/mod_cache.html#cacheignorequerystring
      cacheignoreurlsessionidentifiers	mod/mod_cache.html#cacheignoreurlsessionidentifiers
      cachekeybaseurl	mod/mod_cache.html#cachekeybaseurl
      cachelastmodifiedfactor	mod/mod_cache.html#cachelastmodifiedfactor
      cachelock	mod/mod_cache.html#cachelock
      cachelockmaxage	mod/mod_cache.html#cachelockmaxage
      cachelockpath	mod/mod_cache.html#cachelockpath
      cachemaxexpire	mod/mod_cache.html#cachemaxexpire
      cachemaxfilesize	mod/mod_cache_disk.html#cachemaxfilesize
      cacheminexpire	mod/mod_cache.html#cacheminexpire
      cacheminfilesize	mod/mod_cache_disk.html#cacheminfilesize
      cachenegotiateddocs	mod/mod_negotiation.html#cachenegotiateddocs
      cachequickhandler	mod/mod_cache.html#cachequickhandler
      cachereadsize	mod/mod_cache_disk.html#cachereadsize
      cachereadtime	mod/mod_cache_disk.html#cachereadtime
      cacheroot	mod/mod_cache_disk.html#cacheroot
      cachesocache	mod/mod_cache_socache.html#cachesocache
      cachesocachemaxsize	mod/mod_cache_socache.html#cachesocachemaxsize
      cachesocachemaxtime	mod/mod_cache_socache.html#cachesocachemaxtime
      cachesocachemintime	mod/mod_cache_socache.html#cachesocachemintime
      cachesocachereadsize	mod/mod_cache_socache.html#cachesocachereadsize
      cachesocachereadtime	mod/mod_cache_socache.html#cachesocachereadtime
      cachestaleonerror	mod/mod_cache.html#cachestaleonerror
      cachestoreexpired	mod/mod_cache.html#cachestoreexpired
      cachestorenostore	mod/mod_cache.html#cachestorenostore
      cachestoreprivate	mod/mod_cache.html#cachestoreprivate
      cgidscripttimeout	mod/mod_cgid.html#cgidscripttimeout
      cgimapextension	mod/core.html#cgimapextension
      cgipassauth	mod/core.html#cgipassauth
      cgivar	mod/core.html#cgivar
      charsetdefault	mod/mod_charset_lite.html#charsetdefault
      charsetoptions	mod/mod_charset_lite.html#charsetoptions
      charsetsourceenc	mod/mod_charset_lite.html#charsetsourceenc
      checkcaseonly	mod/mod_speling.html#checkcaseonly
      checkspelling	mod/mod_speling.html#checkspelling
      chrootdir	mod/mod_unixd.html#chrootdir
      contentdigest	mod/core.html#contentdigest
      cookiedomain	mod/mod_usertrack.html#cookiedomain
      cookieexpires	mod/mod_usertrack.html#cookieexpires
      cookiename	mod/mod_usertrack.html#cookiename
      cookiestyle	mod/mod_usertrack.html#cookiestyle
      cookietracking	mod/mod_usertrack.html#cookietracking
      coredumpdirectory	mod/mpm_common.html#coredumpdirectory
      customlog	mod/mod_log_config.html#customlog
      dav	mod/mod_dav.html#dav
      davdepthinfinity	mod/mod_dav.html#davdepthinfinity
      davgenericlockdb	mod/mod_dav_lock.html#davgenericlockdb
      davlockdb	mod/mod_dav_fs.html#davlockdb
      davmintimeout	mod/mod_dav.html#davmintimeout
      dbdexptime	mod/mod_dbd.html#dbdexptime
      dbdinitsql	mod/mod_dbd.html#dbdinitsql
      dbdkeep	mod/mod_dbd.html#dbdkeep
      dbdmax	mod/mod_dbd.html#dbdmax
      dbdmin	mod/mod_dbd.html#dbdmin
      dbdparams	mod/mod_dbd.html#dbdparams
      dbdpersist	mod/mod_dbd.html#dbdpersist
      dbdpreparesql	mod/mod_dbd.html#dbdpreparesql
      dbdriver	mod/mod_dbd.html#dbdriver
      defaulticon	mod/mod_autoindex.html#defaulticon
      defaultlanguage	mod/mod_mime.html#defaultlanguage
      defaultruntimedir	mod/core.html#defaultruntimedir
      defaulttype	mod/core.html#defaulttype
      define	mod/core.html#define
      deflatebuffersize	mod/mod_deflate.html#deflatebuffersize
      deflatecompressionlevel	mod/mod_deflate.html#deflatecompressionlevel
      deflatefilternote	mod/mod_deflate.html#deflatefilternote
      deflateinflatelimitrequestbody	mod/mod_deflate.html#deflateinflatelimitrequestbody
      deflateinflateratioburst	mod/mod_deflate.html#deflateinflateratioburst
      deflateinflateratiolimit	mod/mod_deflate.html#deflateinflateratiolimit
      deflatememlevel	mod/mod_deflate.html#deflatememlevel
      deflatewindowsize	mod/mod_deflate.html#deflatewindowsize
      deny	mod/mod_access_compat.html#deny
      directory	mod/core.html#directory
      directorycheckhandler	mod/mod_dir.html#directorycheckhandler
      directoryindex	mod/mod_dir.html#directoryindex
      directoryindexredirect	mod/mod_dir.html#directoryindexredirect
      directorymatch	mod/core.html#directorymatch
      directoryslash	mod/mod_dir.html#directoryslash
      documentroot	mod/core.html#documentroot
      dtraceprivileges	mod/mod_privileges.html#dtraceprivileges
      dumpioinput	mod/mod_dumpio.html#dumpioinput
      dumpiooutput	mod/mod_dumpio.html#dumpiooutput
      else	mod/core.html#else
      elseif	mod/core.html#elseif
      enableexceptionhook	mod/mpm_common.html#enableexceptionhook
      enablemmap	mod/core.html#enablemmap
      enablesendfile	mod/core.html#enablesendfile
      error	mod/core.html#error
      errordocument	mod/core.html#errordocument
      errorlog	mod/core.html#errorlog
      errorlogformat	mod/core.html#errorlogformat
      example	mod/mod_example_hooks.html#example
      expiresactive	mod/mod_expires.html#expiresactive
      expiresbytype	mod/mod_expires.html#expiresbytype
      expiresdefault	mod/mod_expires.html#expiresdefault
      extendedstatus	mod/core.html#extendedstatus
      extfilterdefine	mod/mod_ext_filter.html#extfilterdefine
      extfilteroptions	mod/mod_ext_filter.html#extfilteroptions
      fallbackresource	mod/mod_dir.html#fallbackresource
      fileetag	mod/core.html#fileetag
      files	mod/core.html#files
      filesmatch	mod/core.html#filesmatch
      filterchain	mod/mod_filter.html#filterchain
      filterdeclare	mod/mod_filter.html#filterdeclare
      filterprotocol	mod/mod_filter.html#filterprotocol
      filterprovider	mod/mod_filter.html#filterprovider
      filtertrace	mod/mod_filter.html#filtertrace
      forcelanguagepriority	mod/mod_negotiation.html#forcelanguagepriority
      forcetype	mod/core.html#forcetype
      forensiclog	mod/mod_log_forensic.html#forensiclog
      globallog	mod/mod_log_config.html#globallog
      gprofdir	mod/core.html#gprofdir
      gracefulshutdowntimeout	mod/mpm_common.html#gracefulshutdowntimeout
      group	mod/mod_unixd.html#group
      h2copyfiles	mod/mod_http2.html#h2copyfiles
      h2direct	mod/mod_http2.html#h2direct
      h2earlyhints	mod/mod_http2.html#h2earlyhints
      h2maxsessionstreams	mod/mod_http2.html#h2maxsessionstreams
      h2maxworkeridleseconds	mod/mod_http2.html#h2maxworkeridleseconds
      h2maxworkers	mod/mod_http2.html#h2maxworkers
      h2minworkers	mod/mod_http2.html#h2minworkers
      h2moderntlsonly	mod/mod_http2.html#h2moderntlsonly
      h2padding	mod/mod_http2.html#h2padding
      h2push	mod/mod_http2.html#h2push
      h2pushdiarysize	mod/mod_http2.html#h2pushdiarysize
      h2pushpriority	mod/mod_http2.html#h2pushpriority
      h2pushresource	mod/mod_http2.html#h2pushresource
      h2serializeheaders	mod/mod_http2.html#h2serializeheaders
      h2streammaxmemsize	mod/mod_http2.html#h2streammaxmemsize
      h2tlscooldownsecs	mod/mod_http2.html#h2tlscooldownsecs
      h2tlswarmupsize	mod/mod_http2.html#h2tlswarmupsize
      h2upgrade	mod/mod_http2.html#h2upgrade
      h2windowsize	mod/mod_http2.html#h2windowsize
      header	mod/mod_headers.html#header
      headername	mod/mod_autoindex.html#headername
      heartbeataddress	mod/mod_heartbeat.html#heartbeataddress
      heartbeatlisten	mod/mod_heartmonitor.html#heartbeatlisten
      heartbeatmaxservers	mod/mod_heartmonitor.html#heartbeatmaxservers
      heartbeatstorage	mod/mod_lbmethod_heartbeat.html#heartbeatstorage
      heartbeatstorage	mod/mod_heartmonitor.html#heartbeatstorage
      hostnamelookups	mod/core.html#hostnamelookups
      httpprotocoloptions	mod/core.html#httpprotocoloptions
      identitycheck	mod/mod_ident.html#identitycheck
      identitychecktimeout	mod/mod_ident.html#identitychecktimeout
      if	mod/core.html#if
      ifdefine	mod/core.html#ifdefine
      ifdirective	mod/core.html#ifdirective
      iffile	mod/core.html#iffile
      ifmodule	mod/core.html#ifmodule
      ifsection	mod/core.html#ifsection
      ifversion	mod/mod_version.html#ifversion
      imapbase	mod/mod_imagemap.html#imapbase
      imapdefault	mod/mod_imagemap.html#imapdefault
      imapmenu	mod/mod_imagemap.html#imapmenu
      include	mod/core.html#include
      includeoptional	mod/core.html#includeoptional
      indexheadinsert	mod/mod_autoindex.html#indexheadinsert
      indexignore	mod/mod_autoindex.html#indexignore
      indexignorereset	mod/mod_autoindex.html#indexignorereset
      indexoptions	mod/mod_autoindex.html#indexoptions
      indexorderdefault	mod/mod_autoindex.html#indexorderdefault
      indexstylesheet	mod/mod_autoindex.html#indexstylesheet
      inputsed	mod/mod_sed.html#inputsed
      isapiappendlogtoerrors	mod/mod_isapi.html#isapiappendlogtoerrors
      isapiappendlogtoquery	mod/mod_isapi.html#isapiappendlogtoquery
      isapicachefile	mod/mod_isapi.html#isapicachefile
      isapifakeasync	mod/mod_isapi.html#isapifakeasync
      isapilognotsupported	mod/mod_isapi.html#isapilognotsupported
      isapireadaheadbuffer	mod/mod_isapi.html#isapireadaheadbuffer
      keepalive	mod/core.html#keepalive
      keepalivetimeout	mod/core.html#keepalivetimeout
      keptbodysize	mod/mod_request.html#keptbodysize
      languagepriority	mod/mod_negotiation.html#languagepriority
      ldapcacheentries	mod/mod_ldap.html#ldapcacheentries
      ldapcachettl	mod/mod_ldap.html#ldapcachettl
      ldapconnectionpoolttl	mod/mod_ldap.html#ldapconnectionpoolttl
      ldapconnectiontimeout	mod/mod_ldap.html#ldapconnectiontimeout
      ldaplibrarydebug	mod/mod_ldap.html#ldaplibrarydebug
      ldapopcacheentries	mod/mod_ldap.html#ldapopcacheentries
      ldapopcachettl	mod/mod_ldap.html#ldapopcachettl
      ldapreferralhoplimit	mod/mod_ldap.html#ldapreferralhoplimit
      ldapreferrals	mod/mod_ldap.html#ldapreferrals
      ldapretries	mod/mod_ldap.html#ldapretries
      ldapretrydelay	mod/mod_ldap.html#ldapretrydelay
      ldapsharedcachefile	mod/mod_ldap.html#ldapsharedcachefile
      ldapsharedcachesize	mod/mod_ldap.html#ldapsharedcachesize
      ldaptimeout	mod/mod_ldap.html#ldaptimeout
      ldaptrustedclientcert	mod/mod_ldap.html#ldaptrustedclientcert
      ldaptrustedglobalcert	mod/mod_ldap.html#ldaptrustedglobalcert
      ldaptrustedmode	mod/mod_ldap.html#ldaptrustedmode
      ldapverifyservercert	mod/mod_ldap.html#ldapverifyservercert
      limit	mod/core.html#limit
      limitexcept	mod/core.html#limitexcept
      limitinternalrecursion	mod/core.html#limitinternalrecursion
      limitrequestbody	mod/core.html#limitrequestbody
      limitrequestfields	mod/core.html#limitrequestfields
      limitrequestfieldsize	mod/core.html#limitrequestfieldsize
      limitrequestline	mod/core.html#limitrequestline
      limitxmlrequestbody	mod/core.html#limitxmlrequestbody
      listen	mod/mpm_common.html#listen
      listenbacklog	mod/mpm_common.html#listenbacklog
      listencoresbucketsratio	mod/mpm_common.html#listencoresbucketsratio
      loadfile	mod/mod_so.html#loadfile
      loadmodule	mod/mod_so.html#loadmodule
      location	mod/core.html#location
      locationmatch	mod/core.html#locationmatch
      logformat	mod/mod_log_config.html#logformat
      logiotrackttfb	mod/mod_logio.html#logiotrackttfb
      loglevel	mod/core.html#loglevel
      logmessage	mod/mod_log_debug.html#logmessage
      luaauthzprovider	mod/mod_lua.html#luaauthzprovider
      luacodecache	mod/mod_lua.html#luacodecache
      luahookaccesschecker	mod/mod_lua.html#luahookaccesschecker
      luahookauthchecker	mod/mod_lua.html#luahookauthchecker
      luahookcheckuserid	mod/mod_lua.html#luahookcheckuserid
      luahookfixups	mod/mod_lua.html#luahookfixups
      luahookinsertfilter	mod/mod_lua.html#luahookinsertfilter
      luahooklog	mod/mod_lua.html#luahooklog
      luahookmaptostorage	mod/mod_lua.html#luahookmaptostorage
      luahooktranslatename	mod/mod_lua.html#luahooktranslatename
      luahooktypechecker	mod/mod_lua.html#luahooktypechecker
      luainherit	mod/mod_lua.html#luainherit
      luainputfilter	mod/mod_lua.html#luainputfilter
      luamaphandler	mod/mod_lua.html#luamaphandler
      luaoutputfilter	mod/mod_lua.html#luaoutputfilter
      luapackagecpath	mod/mod_lua.html#luapackagecpath
      luapackagepath	mod/mod_lua.html#luapackagepath
      luaquickhandler	mod/mod_lua.html#luaquickhandler
      luaroot	mod/mod_lua.html#luaroot
      luascope	mod/mod_lua.html#luascope
      macro	mod/mod_macro.html#macro
      maxconnectionsperchild	mod/mpm_common.html#maxconnectionsperchild
      maxkeepaliverequests	mod/core.html#maxkeepaliverequests
      maxmemfree	mod/mpm_common.html#maxmemfree
      maxrangeoverlaps	mod/core.html#maxrangeoverlaps
      maxrangereversals	mod/core.html#maxrangereversals
      maxranges	mod/core.html#maxranges
      maxrequestworkers	mod/mpm_common.html#maxrequestworkers
      maxspareservers	mod/prefork.html#maxspareservers
      maxsparethreads	mod/mpm_common.html#maxsparethreads
      maxthreads	mod/mpm_netware.html#maxthreads
      mdbaseserver	mod/mod_md.html#mdbaseserver
      mdcachallenges	mod/mod_md.html#mdcachallenges
      mdcertificateagreement	mod/mod_md.html#mdcertificateagreement
      mdcertificateauthority	mod/mod_md.html#mdcertificateauthority
      mdcertificatefile	mod/mod_md.html#mdcertificatefile
      mdcertificatekeyfile	mod/mod_md.html#mdcertificatekeyfile
      mdcertificateprotocol	mod/mod_md.html#mdcertificateprotocol
      mdcertificatestatus	mod/mod_md.html#mdcertificatestatus
      mdchallengedns01	mod/mod_md.html#mdchallengedns01
      mddrivemode	mod/mod_md.html#mddrivemode
      mdhttpproxy	mod/mod_md.html#mdhttpproxy
      mdmember	mod/mod_md.html#mdmember
      mdmembers	mod/mod_md.html#mdmembers
      mdmessagecmd	mod/mod_md.html#mdmessagecmd
      mdmuststaple	mod/mod_md.html#mdmuststaple
      mdnotifycmd	mod/mod_md.html#mdnotifycmd
      mdomain	mod/mod_md.html#mdomain
      mdomainset	mod/mod_md.html#mdomainset
      mdportmap	mod/mod_md.html#mdportmap
      mdprivatekeys	mod/mod_md.html#mdprivatekeys
      mdrenewmode	mod/mod_md.html#mdrenewmode
      mdrenewwindow	mod/mod_md.html#mdrenewwindow
      mdrequirehttps	mod/mod_md.html#mdrequirehttps
      mdserverstatus	mod/mod_md.html#mdserverstatus
      mdstoredir	mod/mod_md.html#mdstoredir
      mdwarnwindow	mod/mod_md.html#mdwarnwindow
      memcacheconnttl	mod/mod_socache_memcache.html#memcacheconnttl
      mergeslashes	mod/core.html#mergeslashes
      mergetrailers	mod/core.html#mergetrailers
      metadir	mod/mod_cern_meta.html#metadir
      metafiles	mod/mod_cern_meta.html#metafiles
      metasuffix	mod/mod_cern_meta.html#metasuffix
      mimemagicfile	mod/mod_mime_magic.html#mimemagicfile
      minspareservers	mod/prefork.html#minspareservers
      minsparethreads	mod/mpm_common.html#minsparethreads
      mmapfile	mod/mod_file_cache.html#mmapfile
      modemstandard	mod/mod_dialup.html#modemstandard
      modmimeusepathinfo	mod/mod_mime.html#modmimeusepathinfo
      multiviewsmatch	mod/mod_mime.html#multiviewsmatch
      mutex	mod/core.html#mutex
      namevirtualhost	mod/core.html#namevirtualhost
      noproxy	mod/mod_proxy.html#noproxy
      nwssltrustedcerts	mod/mod_nw_ssl.html#nwssltrustedcerts
      nwsslupgradeable	mod/mod_nw_ssl.html#nwsslupgradeable
      options	mod/core.html#options
      order	mod/mod_access_compat.html#order
      outputsed	mod/mod_sed.html#outputsed
      passenv	mod/mod_env.html#passenv
      pidfile	mod/mpm_common.html#pidfile
      privilegesmode	mod/mod_privileges.html#privilegesmode
      protocol	mod/core.html#protocol
      protocolecho	mod/mod_echo.html#protocolecho
      protocols	mod/core.html#protocols
      protocolshonororder	mod/core.html#protocolshonororder
      proxy	mod/mod_proxy.html#proxy
      proxy100continue	mod/mod_proxy.html#proxy100continue
      proxyaddheaders	mod/mod_proxy.html#proxyaddheaders
      proxybadheader	mod/mod_proxy.html#proxybadheader
      proxyblock	mod/mod_proxy.html#proxyblock
      proxydomain	mod/mod_proxy.html#proxydomain
      proxyerroroverride	mod/mod_proxy.html#proxyerroroverride
      proxyexpressdbmfile	mod/mod_proxy_express.html#proxyexpressdbmfile
      proxyexpressdbmtype	mod/mod_proxy_express.html#proxyexpressdbmtype
      proxyexpressenable	mod/mod_proxy_express.html#proxyexpressenable
      proxyfcgibackendtype	mod/mod_proxy_fcgi.html#proxyfcgibackendtype
      proxyfcgisetenvif	mod/mod_proxy_fcgi.html#proxyfcgisetenvif
      proxyftpdircharset	mod/mod_proxy_ftp.html#proxyftpdircharset
      proxyftpescapewildcards	mod/mod_proxy_ftp.html#proxyftpescapewildcards
      proxyftplistonwildcard	mod/mod_proxy_ftp.html#proxyftplistonwildcard
      proxyhcexpr	mod/mod_proxy_hcheck.html#proxyhcexpr
      proxyhctemplate	mod/mod_proxy_hcheck.html#proxyhctemplate
      proxyhctpsize	mod/mod_proxy_hcheck.html#proxyhctpsize
      proxyhtmlbufsize	mod/mod_proxy_html.html#proxyhtmlbufsize
      proxyhtmlcharsetout	mod/mod_proxy_html.html#proxyhtmlcharsetout
      proxyhtmldoctype	mod/mod_proxy_html.html#proxyhtmldoctype
      proxyhtmlenable	mod/mod_proxy_html.html#proxyhtmlenable
      proxyhtmlevents	mod/mod_proxy_html.html#proxyhtmlevents
      proxyhtmlextended	mod/mod_proxy_html.html#proxyhtmlextended
      proxyhtmlfixups	mod/mod_proxy_html.html#proxyhtmlfixups
      proxyhtmlinterp	mod/mod_proxy_html.html#proxyhtmlinterp
      proxyhtmllinks	mod/mod_proxy_html.html#proxyhtmllinks
      proxyhtmlmeta	mod/mod_proxy_html.html#proxyhtmlmeta
      proxyhtmlstripcomments	mod/mod_proxy_html.html#proxyhtmlstripcomments
      proxyhtmlurlmap	mod/mod_proxy_html.html#proxyhtmlurlmap
      proxyiobuffersize	mod/mod_proxy.html#proxyiobuffersize
      proxymatch	mod/mod_proxy.html#proxymatch
      proxymaxforwards	mod/mod_proxy.html#proxymaxforwards
      proxypass	mod/mod_proxy.html#proxypass
      proxypassinherit	mod/mod_proxy.html#proxypassinherit
      proxypassinterpolateenv	mod/mod_proxy.html#proxypassinterpolateenv
      proxypassmatch	mod/mod_proxy.html#proxypassmatch
      proxypassreverse	mod/mod_proxy.html#proxypassreverse
      proxypassreversecookiedomain	mod/mod_proxy.html#proxypassreversecookiedomain
      proxypassreversecookiepath	mod/mod_proxy.html#proxypassreversecookiepath
      proxypreservehost	mod/mod_proxy.html#proxypreservehost
      proxyreceivebuffersize	mod/mod_proxy.html#proxyreceivebuffersize
      proxyremote	mod/mod_proxy.html#proxyremote
      proxyremotematch	mod/mod_proxy.html#proxyremotematch
      proxyrequests	mod/mod_proxy.html#proxyrequests
      proxyscgiinternalredirect	mod/mod_proxy_scgi.html#proxyscgiinternalredirect
      proxyscgisendfile	mod/mod_proxy_scgi.html#proxyscgisendfile
      proxyset	mod/mod_proxy.html#proxyset
      proxysourceaddress	mod/mod_proxy.html#proxysourceaddress
      proxystatus	mod/mod_proxy.html#proxystatus
      proxytimeout	mod/mod_proxy.html#proxytimeout
      proxyvia	mod/mod_proxy.html#proxyvia
      qualifyredirecturl	mod/core.html#qualifyredirecturl
      readmename	mod/mod_autoindex.html#readmename
      receivebuffersize	mod/mpm_common.html#receivebuffersize
      redirect	mod/mod_alias.html#redirect
      redirectmatch	mod/mod_alias.html#redirectmatch
      redirectpermanent	mod/mod_alias.html#redirectpermanent
      redirecttemp	mod/mod_alias.html#redirecttemp
      redisconnpoolttl	mod/mod_socache_redis.html#redisconnpoolttl
      redistimeout	mod/mod_socache_redis.html#redistimeout
      reflectorheader	mod/mod_reflector.html#reflectorheader
      regexdefaultoptions	mod/core.html#regexdefaultoptions
      registerhttpmethod	mod/core.html#registerhttpmethod
      remoteipheader	mod/mod_remoteip.html#remoteipheader
      remoteipinternalproxy	mod/mod_remoteip.html#remoteipinternalproxy
      remoteipinternalproxylist	mod/mod_remoteip.html#remoteipinternalproxylist
      remoteipproxiesheader	mod/mod_remoteip.html#remoteipproxiesheader
      remoteipproxyprotocol	mod/mod_remoteip.html#remoteipproxyprotocol
      remoteipproxyprotocolexceptions	mod/mod_remoteip.html#remoteipproxyprotocolexceptions
      remoteiptrustedproxy	mod/mod_remoteip.html#remoteiptrustedproxy
      remoteiptrustedproxylist	mod/mod_remoteip.html#remoteiptrustedproxylist
      removecharset	mod/mod_mime.html#removecharset
      removeencoding	mod/mod_mime.html#removeencoding
      removehandler	mod/mod_mime.html#removehandler
      removeinputfilter	mod/mod_mime.html#removeinputfilter
      removelanguage	mod/mod_mime.html#removelanguage
      removeoutputfilter	mod/mod_mime.html#removeoutputfilter
      removetype	mod/mod_mime.html#removetype
      requestheader	mod/mod_headers.html#requestheader
      requestreadtimeout	mod/mod_reqtimeout.html#requestreadtimeout
      require	mod/mod_authz_core.html#require
      requireall	mod/mod_authz_core.html#requireall
      requireany	mod/mod_authz_core.html#requireany
      requirenone	mod/mod_authz_core.html#requirenone
      rewritebase	mod/mod_rewrite.html#rewritebase
      rewritecond	mod/mod_rewrite.html#rewritecond
      rewriteengine	mod/mod_rewrite.html#rewriteengine
      rewritemap	mod/mod_rewrite.html#rewritemap
      rewriteoptions	mod/mod_rewrite.html#rewriteoptions
      rewriterule	mod/mod_rewrite.html#rewriterule
      rlimitcpu	mod/core.html#rlimitcpu
      rlimitmem	mod/core.html#rlimitmem
      rlimitnproc	mod/core.html#rlimitnproc
      satisfy	mod/mod_access_compat.html#satisfy
      scoreboardfile	mod/mpm_common.html#scoreboardfile
      script	mod/mod_actions.html#script
      scriptalias	mod/mod_alias.html#scriptalias
      scriptaliasmatch	mod/mod_alias.html#scriptaliasmatch
      scriptinterpretersource	mod/core.html#scriptinterpretersource
      scriptlog	mod/mod_cgi.html#scriptlog
      scriptlogbuffer	mod/mod_cgi.html#scriptlogbuffer
      scriptloglength	mod/mod_cgi.html#scriptloglength
      scriptsock	mod/mod_cgid.html#scriptsock
      securelisten	mod/mod_nw_ssl.html#securelisten
      seerequesttail	mod/core.html#seerequesttail
      sendbuffersize	mod/mpm_common.html#sendbuffersize
      serveradmin	mod/core.html#serveradmin
      serveralias	mod/core.html#serveralias
      serverlimit	mod/mpm_common.html#serverlimit
      servername	mod/core.html#servername
      serverpath	mod/core.html#serverpath
      serverroot	mod/core.html#serverroot
      serversignature	mod/core.html#serversignature
      servertokens	mod/core.html#servertokens
      session	mod/mod_session.html#session
      sessioncookiename	mod/mod_session_cookie.html#sessioncookiename
      sessioncookiename2	mod/mod_session_cookie.html#sessioncookiename2
      sessioncookieremove	mod/mod_session_cookie.html#sessioncookieremove
      sessioncryptocipher	mod/mod_session_crypto.html#sessioncryptocipher
      sessioncryptodriver	mod/mod_session_crypto.html#sessioncryptodriver
      sessioncryptopassphrase	mod/mod_session_crypto.html#sessioncryptopassphrase
      sessioncryptopassphrasefile	mod/mod_session_crypto.html#sessioncryptopassphrasefile
      sessiondbdcookiename	mod/mod_session_dbd.html#sessiondbdcookiename
      sessiondbdcookiename2	mod/mod_session_dbd.html#sessiondbdcookiename2
      sessiondbdcookieremove	mod/mod_session_dbd.html#sessiondbdcookieremove
      sessiondbddeletelabel	mod/mod_session_dbd.html#sessiondbddeletelabel
      sessiondbdinsertlabel	mod/mod_session_dbd.html#sessiondbdinsertlabel
      sessiondbdperuser	mod/mod_session_dbd.html#sessiondbdperuser
      sessiondbdselectlabel	mod/mod_session_dbd.html#sessiondbdselectlabel
      sessiondbdupdatelabel	mod/mod_session_dbd.html#sessiondbdupdatelabel
      sessionenv	mod/mod_session.html#sessionenv
      sessionexclude	mod/mod_session.html#sessionexclude
      sessionexpiryupdateinterval	mod/mod_session.html#sessionexpiryupdateinterval
      sessionheader	mod/mod_session.html#sessionheader
      sessioninclude	mod/mod_session.html#sessioninclude
      sessionmaxage	mod/mod_session.html#sessionmaxage
      setenv	mod/mod_env.html#setenv
      setenvif	mod/mod_setenvif.html#setenvif
      setenvifexpr	mod/mod_setenvif.html#setenvifexpr
      setenvifnocase	mod/mod_setenvif.html#setenvifnocase
      sethandler	mod/core.html#sethandler
      setinputfilter	mod/core.html#setinputfilter
      setoutputfilter	mod/core.html#setoutputfilter
      ssiendtag	mod/mod_include.html#ssiendtag
      ssierrormsg	mod/mod_include.html#ssierrormsg
      ssietag	mod/mod_include.html#ssietag
      ssilastmodified	mod/mod_include.html#ssilastmodified
      ssilegacyexprparser	mod/mod_include.html#ssilegacyexprparser
      ssistarttag	mod/mod_include.html#ssistarttag
      ssitimeformat	mod/mod_include.html#ssitimeformat
      ssiundefinedecho	mod/mod_include.html#ssiundefinedecho
      sslcacertificatefile	mod/mod_ssl.html#sslcacertificatefile
      sslcacertificatepath	mod/mod_ssl.html#sslcacertificatepath
      sslcadnrequestfile	mod/mod_ssl.html#sslcadnrequestfile
      sslcadnrequestpath	mod/mod_ssl.html#sslcadnrequestpath
      sslcarevocationcheck	mod/mod_ssl.html#sslcarevocationcheck
      sslcarevocationfile	mod/mod_ssl.html#sslcarevocationfile
      sslcarevocationpath	mod/mod_ssl.html#sslcarevocationpath
      sslcertificatechainfile	mod/mod_ssl.html#sslcertificatechainfile
      sslcertificatefile	mod/mod_ssl.html#sslcertificatefile
      sslcertificatekeyfile	mod/mod_ssl.html#sslcertificatekeyfile
      sslciphersuite	mod/mod_ssl.html#sslciphersuite
      sslcompression	mod/mod_ssl.html#sslcompression
      sslcryptodevice	mod/mod_ssl.html#sslcryptodevice
      sslengine	mod/mod_ssl.html#sslengine
      sslfips	mod/mod_ssl.html#sslfips
      sslhonorcipherorder	mod/mod_ssl.html#sslhonorcipherorder
      sslinsecurerenegotiation	mod/mod_ssl.html#sslinsecurerenegotiation
      sslocspdefaultresponder	mod/mod_ssl.html#sslocspdefaultresponder
      sslocspenable	mod/mod_ssl.html#sslocspenable
      sslocspnoverify	mod/mod_ssl.html#sslocspnoverify
      sslocspoverrideresponder	mod/mod_ssl.html#sslocspoverrideresponder
      sslocspproxyurl	mod/mod_ssl.html#sslocspproxyurl
      sslocsprespondercertificatefile	mod/mod_ssl.html#sslocsprespondercertificatefile
      sslocsprespondertimeout	mod/mod_ssl.html#sslocsprespondertimeout
      sslocspresponsemaxage	mod/mod_ssl.html#sslocspresponsemaxage
      sslocspresponsetimeskew	mod/mod_ssl.html#sslocspresponsetimeskew
      sslocspuserequestnonce	mod/mod_ssl.html#sslocspuserequestnonce
      sslopensslconfcmd	mod/mod_ssl.html#sslopensslconfcmd
      ssloptions	mod/mod_ssl.html#ssloptions
      sslpassphrasedialog	mod/mod_ssl.html#sslpassphrasedialog
      sslprotocol	mod/mod_ssl.html#sslprotocol
      sslproxycacertificatefile	mod/mod_ssl.html#sslproxycacertificatefile
      sslproxycacertificatepath	mod/mod_ssl.html#sslproxycacertificatepath
      sslproxycarevocationcheck	mod/mod_ssl.html#sslproxycarevocationcheck
      sslproxycarevocationfile	mod/mod_ssl.html#sslproxycarevocationfile
      sslproxycarevocationpath	mod/mod_ssl.html#sslproxycarevocationpath
      sslproxycheckpeercn	mod/mod_ssl.html#sslproxycheckpeercn
      sslproxycheckpeerexpire	mod/mod_ssl.html#sslproxycheckpeerexpire
      sslproxycheckpeername	mod/mod_ssl.html#sslproxycheckpeername
      sslproxyciphersuite	mod/mod_ssl.html#sslproxyciphersuite
      sslproxyengine	mod/mod_ssl.html#sslproxyengine
      sslproxymachinecertificatechainfile	mod/mod_ssl.html#sslproxymachinecertificatechainfile
      sslproxymachinecertificatefile	mod/mod_ssl.html#sslproxymachinecertificatefile
      sslproxymachinecertificatepath	mod/mod_ssl.html#sslproxymachinecertificatepath
      sslproxyprotocol	mod/mod_ssl.html#sslproxyprotocol
      sslproxyverify	mod/mod_ssl.html#sslproxyverify
      sslproxyverifydepth	mod/mod_ssl.html#sslproxyverifydepth
      sslrandomseed	mod/mod_ssl.html#sslrandomseed
      sslrenegbuffersize	mod/mod_ssl.html#sslrenegbuffersize
      sslrequire	mod/mod_ssl.html#sslrequire
      sslrequiressl	mod/mod_ssl.html#sslrequiressl
      sslsessioncache	mod/mod_ssl.html#sslsessioncache
      sslsessioncachetimeout	mod/mod_ssl.html#sslsessioncachetimeout
      sslsessionticketkeyfile	mod/mod_ssl.html#sslsessionticketkeyfile
      sslsessiontickets	mod/mod_ssl.html#sslsessiontickets
      sslsrpunknownuserseed	mod/mod_ssl.html#sslsrpunknownuserseed
      sslsrpverifierfile	mod/mod_ssl.html#sslsrpverifierfile
      sslstaplingcache	mod/mod_ssl.html#sslstaplingcache
      sslstaplingerrorcachetimeout	mod/mod_ssl.html#sslstaplingerrorcachetimeout
      sslstaplingfaketrylater	mod/mod_ssl.html#sslstaplingfaketrylater
      sslstaplingforceurl	mod/mod_ssl.html#sslstaplingforceurl
      sslstaplingrespondertimeout	mod/mod_ssl.html#sslstaplingrespondertimeout
      sslstaplingresponsemaxage	mod/mod_ssl.html#sslstaplingresponsemaxage
      sslstaplingresponsetimeskew	mod/mod_ssl.html#sslstaplingresponsetimeskew
      sslstaplingreturnrespondererrors	mod/mod_ssl.html#sslstaplingreturnrespondererrors
      sslstaplingstandardcachetimeout	mod/mod_ssl.html#sslstaplingstandardcachetimeout
      sslstrictsnivhostcheck	mod/mod_ssl.html#sslstrictsnivhostcheck
      sslusername	mod/mod_ssl.html#sslusername
      sslusestapling	mod/mod_ssl.html#sslusestapling
      sslverifyclient	mod/mod_ssl.html#sslverifyclient
      sslverifydepth	mod/mod_ssl.html#sslverifydepth
      startservers	mod/mpm_common.html#startservers
      startthreads	mod/mpm_common.html#startthreads
      substitute	mod/mod_substitute.html#substitute
      substituteinheritbefore	mod/mod_substitute.html#substituteinheritbefore
      substitutemaxlinelength	mod/mod_substitute.html#substitutemaxlinelength
      suexec	mod/mod_unixd.html#suexec
      suexecusergroup	mod/mod_suexec.html#suexecusergroup
      threadlimit	mod/mpm_common.html#threadlimit
      threadsperchild	mod/mpm_common.html#threadsperchild
      threadstacksize	mod/mpm_common.html#threadstacksize
      timeout	mod/core.html#timeout
      traceenable	mod/core.html#traceenable
      transferlog	mod/mod_log_config.html#transferlog
      typesconfig	mod/mod_mime.html#typesconfig
      undefine	mod/core.html#undefine
      undefmacro	mod/mod_macro.html#undefmacro
      unsetenv	mod/mod_env.html#unsetenv
      use	mod/mod_macro.html#use
      usecanonicalname	mod/core.html#usecanonicalname
      usecanonicalphysicalport	mod/core.html#usecanonicalphysicalport
      user	mod/mod_unixd.html#user
      userdir	mod/mod_userdir.html#userdir
      vhostcgimode	mod/mod_privileges.html#vhostcgimode
      vhostcgiprivs	mod/mod_privileges.html#vhostcgiprivs
      vhostgroup	mod/mod_privileges.html#vhostgroup
      vhostprivs	mod/mod_privileges.html#vhostprivs
      vhostsecure	mod/mod_privileges.html#vhostsecure
      vhostuser	mod/mod_privileges.html#vhostuser
      virtualdocumentroot	mod/mod_vhost_alias.html#virtualdocumentroot
      virtualdocumentrootip	mod/mod_vhost_alias.html#virtualdocumentrootip
      virtualhost	mod/core.html#virtualhost
      virtualscriptalias	mod/mod_vhost_alias.html#virtualscriptalias
      virtualscriptaliasip	mod/mod_vhost_alias.html#virtualscriptaliasip
      watchdoginterval	mod/mod_watchdog.html#watchdoginterval
      xbithack	mod/mod_include.html#xbithack
      xml2encalias	mod/mod_xml2enc.html#xml2encalias
      xml2encdefault	mod/mod_xml2enc.html#xml2encdefault
      xml2startparse	mod/mod_xml2enc.html#xml2startparse
      ��������������������������������������������������������������������������������httpd-2.4.41/docs/manual/stopping.html.de�����������������������������������������������������������0000644�0000000�0000050�00000046240�13412755316�016576� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="de" xml:lang="de"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Beenden und Neustarten - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP-Server</a> &gt; <a href="http://httpd.apache.org/docs/">Dokumentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Beenden und Neustarten</h1>
      <div class="toplang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/stopping.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/stopping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/stopping.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/stopping.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/stopping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/stopping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/stopping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">Diese Übersetzung ist möglicherweise
                  nicht mehr aktuell. Bitte prüfen Sie die englische Version auf
                  die neuesten Änderungen.</div>
      
          <p>Dieses Dokument umfasst das Beenden und Neustarten des
          Apache auf Unix-ähnlichen Systemen. Anwender von Windows NT, 2000
          und XP sollten <a href="platform/windows.html#winsvc">Betreiben
          des Apache als Dienst</a> lesen, während hingegen Anwender von
          Windows 9x sowie ME <a href="platform/windows.html#wincons">Betreiben
          des Apache als Konsolenanwendung</a> lesen sollten, um mehr Informationen
          zur Handhabung des Apache auf diesen Systemen zu erhalten.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#introduction">Einleitung</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#term">Beenden</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#graceful">Unterbrechungsfreier Neustart</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#hup">Neustarten</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#race">Anhang: Signale und Wettkampfsituationen</a></li>
      </ul><h3>Siehe auch</h3><ul class="seealso"><li><code class="program"><a href="./programs/httpd.html">httpd</a></code></li><li><code class="program"><a href="./programs/apachectl.html">apachectl</a></code></li><li><a href="#comments_section">Kommentare</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">Einleitung</a></h2>
      
          <p>Um den Apache zu stoppen oder neu zu starten, müssen Sie
          ein Signal an den laufenden <code class="program"><a href="./programs/httpd.html">httpd</a></code>-Prozess senden. Es gibt
          zwei Möglichkeiten, diese Signale zu senden. Zum einen können
          Sie den Unix-Befehl <code>kill</code> verwenden, um den Prozessen
          direkt Signale zu senden. Sie werden feststellen, dass auf Ihrem
          System mehrere <code class="program"><a href="./programs/httpd.html">httpd</a></code>-Programme laufen. Sie sollten
          jedoch nicht jedem dieser Prozesse ein Signal senden, sondern nur dem
          Elternprozess, dessen PID im <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code> steht. Das heißt, Sie
          sollten es niemals nötig haben, einem anderen Prozess, als dem
          Elternprozess, ein Signal zu senden. Es gibt drei Signale, die Sie an den
          Elternprozess senden können: <code><a href="#term">TERM</a></code>,
          <code><a href="#hup">HUP</a></code> und
          <code><a href="#graceful">USR1</a></code>, die nachfolgend beschrieben
          werden.</p>
      
          <p>Um dem Elternprozess ein Signal zu senden, verwenden Sie einen
          Befehl wie z.B.:</p>
      
          <div class="example"><p><code>kill -TERM `cat /usr/local/apache2/logs/httpd.pid`</code></p></div>
      
          <p>Die zweite Methode, dem <code class="program"><a href="./programs/httpd.html">httpd</a></code>-Prozess zu
          signalisieren, ist die Verwendung der <code>-k</code>-Befehlszeilenoptionen
          <code>stop</code>, <code>restart</code> und <code>graceful</code>, wie
          unten beschrieben. Dies sind Argumente des <code class="program"><a href="./programs/httpd.html">httpd</a></code>-Programms, es wird jedoch
          empfohlen, sie unter Verwendung des Steuerskripts <code class="program"><a href="./programs/apachectl.html">apachectl</a></code> zu senden, welches diese
          an <code class="program"><a href="./programs/httpd.html">httpd</a></code> durchreicht.</p>
      
          <p>Nachdem Sie <code class="program"><a href="./programs/httpd.html">httpd</a></code> signalisiert haben, können Sie
          dessen Fortschritt beobachten, indem Sie eingeben:</p>
      
          <div class="example"><p><code>tail -f /usr/local/apache2/logs/error_log</code></p></div>
      
          <p>Passen Sie diese Beispiele entsprechend Ihren <code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code>- und <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code>-Einstellungen an.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="term" id="term">Beenden</a></h2>
      
          <dl><dt>Signal: TERM</dt>
            <dd><code>apachectl -k stop</code></dd>
          </dl>
      
          <p>Das Senden des <code>TERM</code>- oder <code>stop</code>-Signals an
          den Elternprozess veranlasst diesen, sofort zu versuchen, alle seine
          Kindprozesse zu beenden. Es kann einige Sekunden dauern, bis alle
          Kindprozesse komplett beendet sind. Danach beendet sich der Elternprozess
          selbst. Alle gerade bearbeiteten Anfragen werden abgebrochen.
          Es werden keine weiteren Anfragen mehr bedient.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="graceful" id="graceful">Unterbrechungsfreier Neustart</a></h2>
      
          <dl><dt>Signal: USR1</dt>
            <dd><code>apachectl -k graceful</code></dd>
          </dl>
      
          <p>Das <code>USR1</code>- oder <code>graceful</code>-Signal
          veranlasst den Elternprozess, die Kinder <em>anzuweisen</em>, sich
          nach Abschluß ihrer momentanen bearbeiteten Anfrage zu beenden
          (oder sich sofort zu beenden, wenn sie gerade keine Anfrage bedienen).
          Der Elternprozess liest seine Konfigurationsdateien erneut ein und
          öffnet seine Logdateien neu. Wenn ein Kindprozess stirbt,
          ersetzt der Elternprozess ihn durch ein Kind der neuen
          Konfigurations-<em>Generation</em>. Dieses beginnt sofort damit,
          neue Anfragen zu bedienen.</p>
      
          <div class="note">Auf bestimmten Plattformen, welche kein <code>USR1</code>
          für einen unterbrechungsfreien Neustart erlauben, kann ein
          alternatives Signal verwendet werden (wie z.B.
          <code>WINCH</code>). Der Befehl <code>apachectl graceful</code>
          sendet das jeweils richtige Signal für Ihre Platform.</div>
      
          <p>Der Code ist dafür ausgelegt, stets die MPM-Direktiven
          zur Prozesssteuerung zu beachten, so dass die Anzahl der Prozesse
          und Threads, die zur Bedienung der Clients bereitstehen, während
          des Neustarts auf die entsprechenden Werte gesetzt werden.
          Weiterhin wird <code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code>
          auf folgende Art und Weise interpretiert: Wenn nach einer Sekunde
          nicht mindestens <code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code>
          neue Kindprozesse erstellt wurden, dann werden, um den Durchsatz zu
          beschleunigen, entsprechend weitere erstellt. Auf diese Weise versucht
          der Code sowohl die Anzahl der Kinder entsprechend der Serverlast
          anzupassen als auch Ihre Wünsche hinsichtlich des Parameters
          <code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code> zu
          berücksichtigen.</p>
      
          <p>Benutzer von <code class="module"><a href="./mod/mod_status.html">mod_status</a></code> werden feststellen,
          dass die Serverstatistiken <strong>nicht</strong> auf Null
          zurückgesetzt werden, wenn ein <code>USR1</code> gesendet
          wurde. Der Code wurde so geschrieben, dass sowohl die Zeit minimiert
          wird, in der der Server nicht in der Lage ist, neue Anfragen zu
          bedienen (diese werden vom Betriebssystem in eine Warteschlange
          gestellt, so dass sie auf keinen Fall verloren gehen) als auch
          Ihre Parameter zur Feinabstimmung berücksichtigt werden.
          Um dies zu erreichen, muss die <em>Statustabelle</em> (Scoreboard),
          die dazu verwendet wird, alle Kinder über mehrere Generationen
          zu verfolgen, erhalten bleiben.</p>
      
          <p>Das Statusmodul benutzt außerdem ein <code>G</code>, um
          diejenigen Kinder zu kennzeichen, die noch immer Anfragen bedienen,
          welche gestartet wurden, bevor ein unterbrechungsfreier Neustart
          veranlaßt wurde.</p>
      
          <p>Derzeit gibt es keine Möglichkeit für ein
          Log-Rotationsskript, das <code>USR1</code> verwendet, sicher
          festzustellen, dass alle Kinder, die in ein vor dem Neustart
          geöffnetes Log schreiben, beendet sind. Wir schlagen vor, dass
          Sie nach dem Senden des Signals <code>USR1</code> eine angemessene
          Zeitspanne warten, bevor Sie das alte Log anfassen. Wenn beispielsweise
          die meisten Ihrer Zugriffe bei Benutzern mit niedriger Bandbreite
          weniger als 10 Minuten für eine vollständige Antwort
          benötigen, dann könnten Sie 15 Minuten warten, bevor Sie auf
          das alte Log zugreifen.</p>
      
          <div class="note">Wenn Ihre Konfigurationsdatei Fehler enthält, während
          Sie einen Neustart anweisen, dann wird Ihr Elternprozess nicht neu starten,
          sondern sich mit einem Fehler beenden. Im Falle eines unterbrechungsfreien
          Neustarts läßt er die Kinder weiterlaufen, wenn er sich beendet.
          (Dies sind die Kinder, die sich "sanft beenden", indem sie ihre letzte
          Anfrage erledigen.) Das verursacht Probleme, wenn Sie versuchen,
          den Server neu zu starten -- er ist nicht in der Lage, sich an die Ports zu
          binden, an denen er lauschen soll. Bevor Sie einen Neustart
          durchführen, können Sie die Syntax der Konfigurationsdateien
          mit dem Befehlszeilenargument <code>-t</code> überprüfen
          (siehe auch <code class="program"><a href="./programs/httpd.html">httpd</a></code>). Das garantiert
          allerdings nicht, dass der Server korrekt starten wird. Um sowohl die
          Syntax als auch die Semantik der Konfigurationsdateien zu prüfen,
          können Sie versuchen, <code class="program"><a href="./programs/httpd.html">httpd</a></code> als nicht-root-Benutzer
          zu starten. Wenn dabei keine Fehler auftreten, wird er versuchen, seine
          Sockets und Logdateien zu öffnen und fehlschlagen, da er nicht root
          ist (oder weil sich der gegenwärtig laufende <code class="program"><a href="./programs/httpd.html">httpd</a></code>
          bereits diese Ports gebunden hat). Wenn er aus einem anderen Grund
          fehlschlägt, dann liegt wahrscheinlich ein Konfigurationsfehler vor.
          Der Fehler sollte behoben werden, bevor der unterbrechungsfreie Neustart
          angewiesen wird.</div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="hup" id="hup">Neustarten</a></h2>
      
          <dl><dt>Signal: HUP</dt>
            <dd><code>apachectl -k restart</code></dd>
          </dl>
      
          <p>Das Senden des Signals <code>HUP</code> oder <code>restart</code>
          veranlaßt den Elternprozess, wie bei <code>TERM</code> alle seine
          Kinder zu beenden. Der Elternprozess beendet sich jedoch nicht. Er liest
          seine Konfigurationsdateien neu ein und öffnet alle Logdateien
          erneut. Dann erzeugt er einen neuen Satz Kindprozesse und setzt die
          Bedienung von Zugriffen fort.</p>
      
          <p>Benutzer von <code class="module"><a href="./mod/mod_status.html">mod_status</a></code> werden feststellen, dass
          die Serverstatistiken auf Null gesetzt werden, wenn ein <code>HUP</code>
          gesendet wurde.</p>
      
          <div class="note">Wenn Ihre Konfigurationsdatei einen Fehler enthält,
          während Sie einen Neustart anweisen, dann wird Ihr Elternprozess
          nicht neu starten, sondern sich mit einem Fehler beenden. Lesen Sie oben,
          wie Sie das vermeiden können.</div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="race" id="race">Anhang: Signale und Wettkampfsituationen</a></h2>
      
          <p>Vor der Version 1.2b9 des Apache existierten verschiedene
          <em>Wettkampfsituationen</em> (race conditions), die den Neustart und
          die Signale beeinflußt haben. (Einfach erklärt ist eine
          Wettkampfsituation ein zeitabhängiges Problem - wenn
          etwas zum falschen Zeitpunkt erfolgt oder Dinge in der falschen
          Reihenfolge passieren, ist unerwartetes Verhalten die Folge. Wenn die
          gleichen Dinge zur richtigen Zeit geschehen, funktioniert alles korrekt.)
          Bei Architekturen mit dem "richtigen" Funktionsumfang
          haben wir so viele eliminiert wie wir nur konnten. Dennoch
          sollte beachtet werden, dass noch immer Wettkampfsituationen auf
          bestimmten Architekturen existieren.</p>
      
          <p>Bei Architekturen, die ein <code class="directive"><a href="./mod/mpm_common.html#scoreboardfile">ScoreBoardFile</a></code> auf Platte verwenden,
          besteht die Gefahr, dass die Statustabelle beschädigt wird.
          Das kann zu "bind: Address already in use" ("bind: Adresse wird
          bereits verwendet", nach einem <code>HUP</code>) oder "long lost
          child came home!" ("Der verlorene Sohn ist heimgekehrt", nach einem
          <code>USR1</code>) führen. Ersteres ist ein schwerer Fehler,
          wärend letzteres lediglich bewirkt, dass der Server einen Eintrag
          in der Statustabelle verliert. So kann es ratsam sein, unterbrechungsfreie
          Neustarts zusammen mit einem gelegentlichen harten Neustart zu verwenden.
          Diese Probleme lassen sich nur sehr schwer umgehen, aber
          glücklicherweise benötigen die meisten Architekturen keine
          Statustabelle in Form einer Datei. Bitte lesen Sie für Architekturen,
          die sie benötigen, die Dokumentation zu <code class="directive"><a href="./mod/mpm_common.html#scoreboardfile">ScoreBoardFile</a></code>.</p>
      
          <p>Alle Architekturen haben in jedem Kindprozess eine kleine
          Wettkampfsituation, welche die zweite und nachfolgende Anfragen
          einer persistenten HTTP-Verbindung (KeepAlive) umfaßt. Der Prozess
          kann nach dem Lesen der Anfragezeile aber vor dem Lesen der Anfrage-Header
          enden. Es existiert eine Korrektur, die für 1.2 zu spät kam.
          Theoretisch sollte das kein Problem darstellen, da
          der KeepAlive-Client derartige Ereignisse aufgrund von
          Netzwerk-Latenzzeiten und Auszeiten des Servers erwarten sollte.
          In der Praxis scheint keiner von beiden beeinflußt zu werden
          -- in einem Testfall wurde der Server zwanzig mal
          pro Sekunde neu gestartet, während Clients das Angebot abgegrast
          haben, ohne kaputte Bilder oder leere Dokumente zu erhalten.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Verfügbare Sprachen: </span><a href="./de/stopping.html" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/stopping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/stopping.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/stopping.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/stopping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/stopping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/stopping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Kommentare</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/stopping.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Lizenziert unter der <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Module</a> | <a href="./mod/directives.html">Direktiven</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossar</a> | <a href="./sitemap.html">Seitenindex</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/getting-started.html.en����������������������������������������������������0000644�0000000�0000050�00000036032�13412755316�020050� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Getting Started - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Getting Started</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/getting-started.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/getting-started.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
      <p>If you're completely new to the Apache HTTP Server, or even to running
      a website at all, you might not know where to start, or what questions to
      ask. This document walks you through the basics.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#clientserver">Clients, Servers, and URLs</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#dns">Hostnames and DNS</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#configuration">Configuration Files and Directives</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#content">Web Site Content</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#logs">Log Files and Troubleshooting</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#other">What's next?</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="clientserver" id="clientserver">Clients, Servers, and URLs</a></h2>
      
      
      <p>
      Addresses on the Web are expressed with URLs - Uniform Resource Locators
      - which specify a protocol (e.g. <code>http</code>), a servername (e.g.
      <code>www.apache.org</code>), a URL-path (e.g.
      <code>/docs/current/getting-started.html</code>), and possibly a query
      string (e.g. <code>?arg=value</code>) used to pass additional
      arguments to the server.
      </p>
      
      <p>A client (e.g., a web browser) connects to a server (e.g., your Apache HTTP Server),
      with the specified protocol, and makes a <strong>request</strong> for a resource using the
      URL-path.</p>
      
      <p>The URL-path may represent any number of things on the server. It may
      be a file (like <code>getting-started.html</code>) a handler (like <a href="mod/mod_status.html">server-status</a>) or some kind of program
      file (like <code>index.php</code>). We'll discuss this more below in
      the <a href="#content">Web Site Content</a> section.</p>
      
      <p>
      The server will send a <strong>response</strong> consisting of a status
      code and, optionally, a response body.
      The status code indicates whether the request was successful, and, if not, what
      kind of error condition there was. This tells the client what it should
      do with the response. You can read about the possible response codes in
      <a href="http://wiki.apache.org/httpd/CommonHTTPStatusCodes">HTTP Server
      wiki</a>.</p>
      
      <p>Details of the transaction, and any error conditions, are written to
      log files. This is discussed in greater detail below in the <a href="#logs">Logs Files and Troubleshooting</a> section.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="dns" id="dns">Hostnames and DNS</a></h2>
      
      
      <p>In order to connect to a server, the client will first have to resolve
      the servername to an IP address - the location on the Internet where the
      server resides. Thus, in order for your web server to be reachable, it
      is necessary that the servername be in DNS.</p>
      
      <p>If you don't know how to do this, you'll need to contact your network
      administrator, or Internet service provider, to perform this step for
      you.</p>
      
      <p>More than one hostname may point to the same IP address, and more
      than one IP address can be attached to the same physical server. Thus, you
      can run more than one web site on the same physical server, using a
      feature called <a href="vhosts/">virtual hosts</a>.</p>
      
      <p>If you are testing a server that is not Internet-accessible, you
      can put host names in your hosts file in order to do local resolution.
      For example, you might want to put a record in your hosts file to map a
      request for <code>www.example.com</code> to your local system, for
      testing purposes. This entry would look like:</p>
      
      <div class="example"><p><code>
      127.0.0.1 www.example.com
      </code></p></div>
      
      <p>A hosts file will probably be located at <code>/etc/hosts</code> or
      <code>C:\Windows\system32\drivers\etc\hosts</code>.</p>
      
      <p>You can read more about the hosts file at <a href="http://en.wikipedia.org/wiki/Hosts_(file)">Wikipedia.org/wiki/Hosts_(file)</a>, and
      more about DNS at <a href="http://en.wikipedia.org/wiki/Domain_Name_System">Wikipedia.org/wiki/Domain_Name_System</a>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuration" id="configuration">Configuration Files and Directives</a></h2>
      
      
      <p>The Apache HTTP Server is configured via simple text files.
      These files may be located any of a variety of places, depending on how
      exactly you installed the server. Common locations for these files may
      be found <a href="http://wiki.apache.org/httpd/DistrosDefaultLayout">in
      the httpd wiki</a>. If you installed httpd from source, the default
      location of the configuration files is
      <code>/usr/local/apache2/conf</code>. The default configuration file is
      usually called <code>httpd.conf</code>. This, too, can vary in
      third-party distributions of the server.</p>
      
      <p>The configuration is frequently broken into multiple smaller files,
      for ease of management. These files are loaded via the <code class="directive"><a href="./mod/core.html#include">Include</a></code> directive. The names or locations of
      these sub-files are not magical, and may vary greatly from one
      installation to another. Arrange and subdivide these files as
      makes the most sense to <strong>you</strong>. If the file arrangement
      you have by default doesn't make sense to you, feel free to rearrange it.</p>
      
      <p>The server is configured by placing <a href="mod/quickreference.html">configuration directives</a> in these
      configuration files. A directive is a keyword followed by one or more
      arguments that set its value.</p>
      
      <p>The question of "<em>Where should I put that
      directive?</em>" is generally answered by considering where you want a
      directive to be effective. If it is a global setting, it should appear
      in the configuration file, outside of any <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>, <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>, or other section. If it is to
      apply only to a particular directory, then it should go inside a
      <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code> section referring to
      that directory, and so on. See the <a href="sections.html">Configuration
      Sections</a> document for further discussion of these sections.</p>
      
      <p>In addition to the main configuration files, certain directives may go in
      <code>.htaccess</code> files located in the content directories.
      <code>.htaccess</code> files are primarily for people who do not have
      access to the main server configuration file(s). You can read more about
      <code>.htaccess</code> files in the <a href="howto/htaccess.html"><code>.htaccess</code> howto</a>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="content" id="content">Web Site Content</a></h2>
      
      
      <p>Web site content can take many different forms, but may be broadly
      divided into static and dynamic content.</p>
      
      <p>Static content is things like HTML files, image files, CSS files,
      and other files that reside in the filesystem. The <code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code> directive specifies where in your
      filesystem you should place these files. This directive is either set
      globally, or per virtual host. Look in your configuration file(s) to
      determine how this is set for your server.</p>
      
      <p>Typically, a document called <code>index.html</code> will be served
      when a directory is requested without a file name being specified. For
      example, if <code>DocumentRoot</code> is set to
      <code>/var/www/html</code> and a request is made for
      <code>http://www.example.com/work/</code>, the file
      <code>/var/www/html/work/index.html</code> will be served to the
      client.</p>
      
      <p>Dynamic content is anything that is generated at request
      time, and may change from one request to another. There are numerous
      ways that dynamic content may be generated. Various <a href="handler.html">handlers</a> are available to generate content. <a href="howto/cgi.html">CGI programs</a> may be written to generate
      content for your site.</p>
      
      <p>Third-party modules like mod_php may be used to write code that does a
      variety of things. Many third-party applications, written using a
      variety of languages and tools, are available for download and
      installation on your Apache HTTP Server. Support of these third-party
      things is beyond the scope of this documentation, and you should find
      their documentation or other support forums to answer your questions
      about them.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="logs" id="logs">Log Files and Troubleshooting</a></h2>
      
      <p>As an Apache HTTP Server administrator, your most valuable assets are
      the log files, and, in particular, the error log. Troubleshooting any
      problem without the error log is like driving with your eyes closed.</p>
      
      <p>The location of the error log is defined by the <code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code> directive, which may be set globally,
      or per virtual host. Entries in the error log tell you what went wrong,
      and when. They often also tell you how to fix it. Each error log message
      contains an error code, which you can search for online for even more
      detailed descriptions of how to address the problem. You can also
      configure your error log to contain a log ID which you can then
      correlate to an access log entry, so that you can determine what request
      caused the error condition.</p>
      
      <p>You can read more about logging in the <a href="logs.html">logs
      documentation</a>.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="other" id="other">What's next?</a></h2>
      
      
      <p>Once you have the prerequisites under your belt, it's time to move
      on.</p>
      
      <p>This document covers only the bare basics. We hope that this gets you
      started, but there are many other things that you might need to
      know.</p>
      
      <ul>
      <li><a href="http://httpd.apache.org/download.cgi">Download</a></li>
      <li><a href="install.html">Install</a></li>
      <li><a href="configuring.html">Configure</a></li>
      <li><a href="invoking.html">Start</a></li>
      <li><a href="http://wiki.apache.org/httpd/FAQ">Frequently Asked Questions</a></li>
      </ul>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/getting-started.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/getting-started.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/getting-started.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/index.html.ko.euc-kr�������������������������������������������������������0000644�0000000�0000050�00000020101�13412755316�017234� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="EUC-KR"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
      <meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache HTTP Server Version 2.4 ¹®¼­ - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="index-page">
      <div id="page-header">
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="http://httpd.apache.org/docs-project/"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a></div>
      <div id="page-content"><h1>Apache HTTP Server Version 2.4 ¹®¼­</h1>
      <div class="toplang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./da/" hreflang="da" rel="alternate" title="Dansk">&nbsp;da&nbsp;</a> |
      <a href="./de/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/" hreflang="pt-br" rel="alternate" title="Portugu&#234;s (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">ÀÌ ¹®¼­´Â ÃÖ½ÅÆÇ ¹ø¿ªÀÌ ¾Æ´Õ´Ï´Ù.
                  ÃÖ±Ù¿¡ º¯°æµÈ ³»¿ëÀº ¿µ¾î ¹®¼­¸¦ Âü°íÇϼ¼¿ä.</div>
      <form method="get" action="http://www.google.com/search"><p><input name="as_q" value="" type="text" /> <input value="Google °Ë»ö" type="submit" /><input value="10" name="num" type="hidden" /><input value="ko" name="hl" type="hidden" /><input value="EUC-KR" name="ie" type="hidden" /><input value="Google Search" name="btnG" type="hidden" /><input name="as_epq" value="Version 2.4" type="hidden" /><input name="as_oq" value="" type="hidden" /><input name="as_eq" value="&quot;List-Post&quot;" type="hidden" /><input value="" name="lr" type="hidden" /><input value="i" name="as_ft" type="hidden" /><input value="" name="as_filetype" type="hidden" /><input value="all" name="as_qdr" type="hidden" /><input value="any" name="as_occt" type="hidden" /><input value="i" name="as_dt" type="hidden" /><input value="httpd.apache.org" name="as_sitesearch" type="hidden" /><input value="off" name="safe" type="hidden" /></p></form>
      <table id="indextable"><tr><td class="col1"><div class="category"><h2><a name="release" id="release">¹ßÇ¥¹®</a></h2>
      <ul><li><a href="new_features_2_0.html">¹öÀü 2.0ÀÇ »õ·Î¿î ±â´É</a></li>
      <li><a href="upgrading.html">1.3¿¡¼­ 2.0 ¹öÀüÀ¸·Î ¾÷±×·¹À̵å</a></li>
      <li><a href="license.html">¾ÆÆÄÄ¡ ¶óÀ̼±½º</a></li>
      </ul>
      </div><div class="category"><h2><a name="manual" id="manual">ÂüÁ¶ ¼³¸í¼­</a></h2>
      <ul><li><a href="install.html">ÄÄÆÄÀϰú ¼³Ä¡</a></li>
      <li><a href="invoking.html">½ÃÀÛ</a></li>
      <li><a href="stopping.html">Áߴܰú Àç½ÃÀÛ</a></li>
      <li><a href="mod/directives.html">¼³Á¤ Áö½Ã¾î</a></li>
      <li><a href="mod/quickreference.html">Áö½Ã¾î ºü¸¥ÂüÁ¶</a></li>
      <li><a href="mod/">¸ðµâ</a></li>
      <li><a href="mpm.html">´ÙÁß󸮸ðµâ (MPM)</a></li>
      <li><a href="filter.html">ÇÊÅÍ</a></li>
      <li><a href="handler.html">Çڵ鷯</a></li>
      <li><a href="programs/">¼­¹ö¿Í Áö¿ø ÇÁ·Î±×·¥</a></li>
      <li><a href="glossary.html">¿ë¾î</a></li>
      </ul>
      </div></td><td><div class="category"><h2><a name="usersguide" id="usersguide">»ç¿ëÀÚ Áöħ¼­</a></h2>
      <ul><li><a href="bind.html">ÁÖ¼Ò¿Í Æ÷Æ® ÁöÁ¤</a></li>
      <li><a href="configuring.html">¼³Á¤ÆÄÀÏ</a></li>
      <li><a href="sections.html">¼½¼Ç ¼³Á¤</a></li>
      <li><a href="content-negotiation.html">³»¿ëÇù»ó (content negotiation)</a></li>
      <li><a href="dso.html">µ¿Àû°øÀ¯°´Ã¼ (DSO)</a></li>
      <li><a href="env.html">ȯ°æº¯¼ö</a></li>
      <li><a href="logs.html">·Î±×ÆÄÀÏ</a></li>
      <li><a href="urlmapping.html">URLÀ» ÆÄÀϽýºÅÛ¿¡ ´ëÀÀ</a></li>
      <li><a href="misc/perf-tuning.html">¼º´ÉÇâ»ó</a></li>
      <li><a href="misc/security_tips.html">º¸¾È ÆÁ</a></li>
      <li><a href="server-wide.html">¼­¹ö Àü¿ª ¼³Á¤</a></li>
      <li><a href="ssl/">SSL/TLS ¾Ïȣȭ</a></li>
      <li><a href="suexec.html">CGIÀÇ Suexec ½ÇÇà</a></li>
      <li><a href="rewrite/">URL ÀçÀÛ¼º(rewriting) Áöħ¼­</a></li>
      <li><a href="vhosts/">°¡»óÈ£½ºÆ®</a></li>
      </ul>
      </div></td><td class="col3"><div class="category"><h2><a name="howto" id="howto">How-To / ÅõÅ丮¾ó</a></h2>
      <ul><li><a href="howto/auth.html">ÀÎÁõ, ±ÇÇѺο©,
          Á¢±ÙÁ¦¾î</a></li>
      <li><a href="howto/cgi.html">CGI: µ¿Àû ÆäÀÌÁö »ý¼º</a></li>
      <li><a href="howto/htaccess.html">.htaccess ÆÄÀÏ</a></li>
      <li><a href="howto/ssi.html">Server Side Includes (SSI)</a></li>
      <li><a href="howto/public_html.html">»ç¿ëÀÚº° À¥µð·ºÅ丮
          (public_html)</a></li>
      </ul>
      </div><div class="category"><h2><a name="platform" id="platform">Ç÷¡Æûº° ¼³¸í</a></h2>
      <ul><li><a href="platform/windows.html">Microsoft Windows</a></li>
      <li><a href="platform/netware.html">Novell NetWare</a></li>
      <li><a href="platform/ebcdic.html">EBCDIC Æ÷ÆÃ</a></li>
      </ul>
      </div><div class="category"><h2><a name="other" id="other">´Ù¸¥ ÁÖÁ¦</a></h2>
      <ul><li><a href="faq/">ÀÚÁÖ ¹°¾îº¸´Â Áú¹® (FAQ)</a></li>
      <li><a href="sitemap.html">»çÀÌÆ®¸Ê</a></li>
      <li><a href="developer/">°³¹ßÀÚ¸¦ À§ÇÑ ¹®¼­</a></li>
      <li><a href="misc/">±âŸ</a></li>
      </ul>
      </div></td></tr></table></div>
      <div class="bottomlang">
      <p><span>°¡´ÉÇÑ ¾ð¾î: </span><a href="./da/" hreflang="da" rel="alternate" title="Dansk">&nbsp;da&nbsp;</a> |
      <a href="./de/" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/" hreflang="es" rel="alternate" title="Espa&#241;ol">&nbsp;es&nbsp;</a> |
      <a href="./fr/" hreflang="fr" rel="alternate" title="Fran&#231;ais">&nbsp;fr&nbsp;</a> |
      <a href="./ja/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/" hreflang="pt-br" rel="alternate" title="Portugu&#234;s (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">¸ðµâ</a> | <a href="./mod/directives.html">Áö½Ã¾îµé</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">¿ë¾î</a> | <a href="./sitemap.html">»çÀÌÆ®¸Ê</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/content-negotiation.html.en������������������������������������������������0000644�0000000�0000050�00000103412�13412755316�020730� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Content Negotiation - Apache HTTP Server Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Content Negotiation</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="./en/content-negotiation.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/content-negotiation.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/content-negotiation.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/content-negotiation.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/content-negotiation.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      
          <p>Apache HTTPD supports content negotiation as described in
          the HTTP/1.1 specification. It can choose the best
          representation of a resource based on the browser-supplied
          preferences for media type, languages, character set and
          encoding. It also implements a couple of features to give
          more intelligent handling of requests from browsers that send
          incomplete negotiation information.</p>
      
          <p>Content negotiation is provided by the
          <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> module, which is compiled in
          by default.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#about">About Content Negotiation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#negotiation">Negotiation in httpd</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#methods">The Negotiation Methods</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#better">Fiddling with Quality
          Values</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#extensions">Extensions to Transparent Content
      Negotiation</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#naming">Note on hyperlinks and naming conventions</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#caching">Note on Caching</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="about" id="about">About Content Negotiation</a></h2>
      
          <p>A resource may be available in several different
          representations. For example, it might be available in
          different languages or different media types, or a combination.
          One way of selecting the most appropriate choice is to give the
          user an index page, and let them select. However it is often
          possible for the server to choose automatically. This works
          because browsers can send, as part of each request, information
          about what representations they prefer. For example, a browser
          could indicate that it would like to see information in French,
          if possible, else English will do. Browsers indicate their
          preferences by headers in the request. To request only French
          representations, the browser would send</p>
      
      <div class="example"><p><code>Accept-Language: fr</code></p></div>
      
          <p>Note that this preference will only be applied when there is
          a choice of representations and they vary by language.</p>
      
          <p>As an example of a more complex request, this browser has
          been configured to accept French and English, but prefer
          French, and to accept various media types, preferring HTML over
          plain text or other text types, and preferring GIF or JPEG over
          other media types, but also allowing any other media type as a
          last resort:</p>
      
      <div class="example"><p><code>
        Accept-Language: fr; q=1.0, en; q=0.5<br />
        Accept: text/html; q=1.0, text/*; q=0.8, image/gif; q=0.6, image/jpeg; q=0.6, image/*; q=0.5, */*; q=0.1
      </code></p></div>
      
          <p>httpd supports 'server driven' content negotiation, as
          defined in the HTTP/1.1 specification. It fully supports the
          <code>Accept</code>, <code>Accept-Language</code>,
          <code>Accept-Charset</code> and <code>Accept-Encoding</code>
          request headers. httpd also supports 'transparent'
          content negotiation, which is an experimental negotiation
          protocol defined in RFC 2295 and RFC 2296. It does not offer
          support for 'feature negotiation' as defined in these RFCs.</p>
      
          <p>A <strong>resource</strong> is a conceptual entity
          identified by a URI (RFC 2396). An HTTP server like Apache HTTP Server
          provides access to <strong>representations</strong> of the
          resource(s) within its namespace, with each representation in
          the form of a sequence of bytes with a defined media type,
          character set, encoding, etc. Each resource may be associated
          with zero, one, or more than one representation at any given
          time. If multiple representations are available, the resource
          is referred to as <strong>negotiable</strong> and each of its
          representations is termed a <strong>variant</strong>. The ways
          in which the variants for a negotiable resource vary are called
          the <strong>dimensions</strong> of negotiation.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="negotiation" id="negotiation">Negotiation in httpd</a></h2>
      
          <p>In order to negotiate a resource, the server needs to be
          given information about each of the variants. This is done in
          one of two ways:</p>
      
          <ul>
            <li>Using a type map (<em>i.e.</em>, a <code>*.var</code>
            file) which names the files containing the variants
            explicitly, or</li>
      
            <li>Using a 'MultiViews' search, where the server does an
            implicit filename pattern match and chooses from among the
            results.</li>
          </ul>
      
         <h3><a name="type-map" id="type-map">Using a type-map file</a></h3>
      
          <p>A type map is a document which is associated with the handler
          named <code>type-map</code> (or, for backwards-compatibility with
          older httpd configurations, the <a class="glossarylink" href="./glossary.html#mime-type" title="see glossary">MIME-type</a>
          <code>application/x-type-map</code>). Note that to use this
          feature, you must have a handler set in the configuration that
          defines a file suffix as <code>type-map</code>; this is best done
          with</p>
      
      <pre class="prettyprint lang-config">AddHandler type-map .var</pre>
      
      
          <p>in the server configuration file.</p>
      
          <p>Type map files should have the same name as the resource
          which they are describing, followed by the extension
          <code>.var</code>. In the examples shown below, the resource is
          named <code>foo</code>, so the type map file is named
          <code>foo.var</code>.</p>
      
          <p>This file should have an entry for each available
          variant; these entries consist of contiguous HTTP-format header
          lines. Entries for different variants are separated by blank
          lines. Blank lines are illegal within an entry. It is
          conventional to begin a map file with an entry for the combined
          entity as a whole (although this is not required, and if
          present will be ignored). An example map file is shown below.</p>
      
          <p>URIs in this file are relative to the location of the type map
          file. Usually, these files will be located in the same directory as
          the type map file, but this is not required. You may provide
          absolute or relative URIs for any file located on the same server as
          the map file.</p>
      
      <div class="example"><p><code>
        URI: foo<br />
      <br />
        URI: foo.en.html<br />
        Content-type: text/html<br />
        Content-language: en<br />
      <br />
        URI: foo.fr.de.html<br />
        Content-type: text/html;charset=iso-8859-2<br />
        Content-language: fr, de<br />
      </code></p></div>
      
          <p>Note also that a typemap file will take precedence over the
          filename's extension, even when Multiviews is on. If the
          variants have different source qualities, that may be indicated
          by the "qs" parameter to the media type, as in this picture
          (available as JPEG, GIF, or ASCII-art): </p>
      
      <div class="example"><p><code>
        URI: foo<br />
      <br />
        URI: foo.jpeg<br />
        Content-type: image/jpeg; qs=0.8<br />
      <br />
        URI: foo.gif<br />
        Content-type: image/gif; qs=0.5<br />
      <br />
        URI: foo.txt<br />
        Content-type: text/plain; qs=0.01<br />
      </code></p></div>
      
          <p>qs values can vary in the range 0.000 to 1.000. Note that
          any variant with a qs value of 0.000 will never be chosen.
          Variants with no 'qs' parameter value are given a qs factor of
          1.0. The qs parameter indicates the relative 'quality' of this
          variant compared to the other available variants, independent
          of the client's capabilities. For example, a JPEG file is
          usually of higher source quality than an ASCII file if it is
          attempting to represent a photograph. However, if the resource
          being represented is an original ASCII art, then an ASCII
          representation would have a higher source quality than a JPEG
          representation. A qs value is therefore specific to a given
          variant depending on the nature of the resource it
          represents.</p>
      
          <p>The full list of headers recognized is available in the <a href="mod/mod_negotiation.html#typemaps">mod_negotiation
          typemap</a> documentation.</p>
      
      
      <h3><a name="multiviews" id="multiviews">Multiviews</a></h3>
      
          <p><code>MultiViews</code> is a per-directory option, meaning it
          can be set with an <code class="directive"><a href="./mod/core.html#options">Options</a></code>
          directive within a <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> or <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code> section in
          <code>httpd.conf</code>, or (if <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> is properly set) in
          <code>.htaccess</code> files. Note that <code>Options All</code>
          does not set <code>MultiViews</code>; you have to ask for it by
          name.</p>
      
          <p>The effect of <code>MultiViews</code> is as follows: if the
          server receives a request for <code>/some/dir/foo</code>, if
          <code>/some/dir</code> has <code>MultiViews</code> enabled, and
          <code>/some/dir/foo</code> does <em>not</em> exist, then the
          server reads the directory looking for files named foo.*, and
          effectively fakes up a type map which names all those files,
          assigning them the same media types and content-encodings it
          would have if the client had asked for one of them by name. It
          then chooses the best match to the client's requirements.</p>
      
          <p><code>MultiViews</code> may also apply to searches for the file
          named by the <code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code> directive, if the
          server is trying to index a directory. If the configuration files
          specify</p>
      <pre class="prettyprint lang-config">DirectoryIndex index</pre>
      
          <p>then the server will arbitrate between <code>index.html</code>
          and <code>index.html3</code> if both are present. If neither
          are present, and <code>index.cgi</code> is there, the server
          will run it.</p>
      
          <p>If one of the files found when reading the directory does not
          have an extension recognized by <code>mod_mime</code> to designate
          its Charset, Content-Type, Language, or Encoding, then the result
          depends on the setting of the <code class="directive"><a href="./mod/mod_mime.html#multiviewsmatch">MultiViewsMatch</a></code> directive.  This
          directive determines whether handlers, filters, and other
          extension types can participate in MultiViews negotiation.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="methods" id="methods">The Negotiation Methods</a></h2>
      
          <p>After httpd has obtained a list of the variants for a given
          resource, either from a type-map file or from the filenames in
          the directory, it invokes one of two methods to decide on the
          'best' variant to return, if any. It is not necessary to know
          any of the details of how negotiation actually takes place in
          order to use httpd's content negotiation features. However the
          rest of this document explains the methods used for those
          interested. </p>
      
          <p>There are two negotiation methods:</p>
      
          <ol>
            <li><strong>Server driven negotiation with the httpd
            algorithm</strong> is used in the normal case. The httpd
            algorithm is explained in more detail below. When this
            algorithm is used, httpd can sometimes 'fiddle' the quality
            factor of a particular dimension to achieve a better result.
            The ways httpd can fiddle quality factors is explained in
            more detail below.</li>
      
            <li><strong>Transparent content negotiation</strong> is used
            when the browser specifically requests this through the
            mechanism defined in RFC 2295. This negotiation method gives
            the browser full control over deciding on the 'best' variant,
            the result is therefore dependent on the specific algorithms
            used by the browser. As part of the transparent negotiation
            process, the browser can ask httpd to run the 'remote
            variant selection algorithm' defined in RFC 2296.</li>
          </ol>
      
      <h3><a name="dimensions" id="dimensions">Dimensions of Negotiation</a></h3>
      
          <table>
            
            <tr valign="top">
              <th>Dimension</th>
      
              <th>Notes</th>
            </tr>
      
            <tr valign="top">
              <td>Media Type</td>
      
              <td>Browser indicates preferences with the <code>Accept</code>
              header field. Each item can have an associated quality factor.
              Variant description can also have a quality factor (the "qs"
              parameter).</td>
            </tr>
      
            <tr valign="top">
              <td>Language</td>
      
              <td>Browser indicates preferences with the
              <code>Accept-Language</code> header field. Each item can have
              a quality factor. Variants can be associated with none, one or
              more than one language.</td>
            </tr>
      
            <tr valign="top">
              <td>Encoding</td>
      
              <td>Browser indicates preference with the
              <code>Accept-Encoding</code> header field. Each item can have
              a quality factor.</td>
            </tr>
      
            <tr valign="top">
              <td>Charset</td>
      
              <td>Browser indicates preference with the
              <code>Accept-Charset</code> header field. Each item can have a
              quality factor. Variants can indicate a charset as a parameter
              of the media type.</td>
            </tr>
          </table>
      
      
      <h3><a name="algorithm" id="algorithm">httpd Negotiation Algorithm</a></h3>
      
          <p>httpd can use the following algorithm to select the 'best'
          variant (if any) to return to the browser. This algorithm is
          not further configurable. It operates as follows:</p>
      
          <ol>
            <li>First, for each dimension of the negotiation, check the
            appropriate <em>Accept*</em> header field and assign a
            quality to each variant. If the <em>Accept*</em> header for
            any dimension implies that this variant is not acceptable,
            eliminate it. If no variants remain, go to step 4.</li>
      
            <li>
              Select the 'best' variant by a process of elimination. Each
              of the following tests is applied in order. Any variants
              not selected at each test are eliminated. After each test,
              if only one variant remains, select it as the best match
              and proceed to step 3. If more than one variant remains,
              move on to the next test.
      
              <ol>
                <li>Multiply the quality factor from the <code>Accept</code>
                header with the quality-of-source factor for this variants
                media type, and select the variants with the highest
                value.</li>
      
                <li>Select the variants with the highest language quality
                factor.</li>
      
                <li>Select the variants with the best language match,
                using either the order of languages in the
                <code>Accept-Language</code> header (if present), or else
                the order of languages in the <code>LanguagePriority</code>
                directive (if present).</li>
      
                <li>Select the variants with the highest 'level' media
                parameter (used to give the version of text/html media
                types).</li>
      
                <li>Select variants with the best charset media
                parameters, as given on the <code>Accept-Charset</code>
                header line.  Charset ISO-8859-1 is acceptable unless
                explicitly excluded. Variants with a <code>text/*</code>
                media type but not explicitly associated with a particular
                charset are assumed to be in ISO-8859-1.</li>
      
                <li>Select those variants which have associated charset
                media parameters that are <em>not</em> ISO-8859-1. If
                there are no such variants, select all variants
                instead.</li>
      
                <li>Select the variants with the best encoding. If there
                are variants with an encoding that is acceptable to the
                user-agent, select only these variants. Otherwise if
                there is a mix of encoded and non-encoded variants,
                select only the unencoded variants. If either all
                variants are encoded or all variants are not encoded,
                select all variants.</li>
      
                <li>Select the variants with the smallest content
                length.</li>
      
                <li>Select the first variant of those remaining. This
                will be either the first listed in the type-map file, or
                when variants are read from the directory, the one whose
                file name comes first when sorted using ASCII code
                order.</li>
              </ol>
            </li>
      
            <li>The algorithm has now selected one 'best' variant, so
            return it as the response. The HTTP response header
            <code>Vary</code> is set to indicate the dimensions of
            negotiation (browsers and caches can use this information when
            caching the resource).  End.</li>
      
            <li>To get here means no variant was selected (because none
            are acceptable to the browser). Return a 406 status (meaning
            "No acceptable representation") with a response body
            consisting of an HTML document listing the available
            variants. Also set the HTTP <code>Vary</code> header to
            indicate the dimensions of variance.</li>
          </ol>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="better" id="better">Fiddling with Quality
          Values</a></h2>
      
          <p>httpd sometimes changes the quality values from what would
          be expected by a strict interpretation of the httpd
          negotiation algorithm above. This is to get a better result
          from the algorithm for browsers which do not send full or
          accurate information. Some of the most popular browsers send
          <code>Accept</code> header information which would otherwise
          result in the selection of the wrong variant in many cases. If a
          browser sends full and correct information these fiddles will not
          be applied.</p>
      
      <h3><a name="wildcards" id="wildcards">Media Types and Wildcards</a></h3>
      
          <p>The <code>Accept:</code> request header indicates preferences
          for media types. It can also include 'wildcard' media types, such
          as "image/*" or "*/*" where the * matches any string. So a request
          including:</p>
      
      <div class="example"><p><code>Accept: image/*, */*</code></p></div>
      
          <p>would indicate that any type starting "image/" is acceptable,
          as is any other type.
          Some browsers routinely send wildcards in addition to explicit
          types they can handle. For example:</p>
      
      <div class="example"><p><code>
        Accept: text/html, text/plain, image/gif, image/jpeg, */*
      </code></p></div>
          <p>The intention of this is to indicate that the explicitly listed
          types are preferred, but if a different representation is
          available, that is ok too.  Using explicit quality values,
          what the browser really wants is something like:</p>
      <div class="example"><p><code>
        Accept: text/html, text/plain, image/gif, image/jpeg, */*; q=0.01
      </code></p></div>
          <p>The explicit types have no quality factor, so they default to a
          preference of 1.0 (the highest). The wildcard */* is given a
          low preference of 0.01, so other types will only be returned if
          no variant matches an explicitly listed type.</p>
      
          <p>If the <code>Accept:</code> header contains <em>no</em> q
          factors at all, httpd sets the q value of "*/*", if present, to
          0.01 to emulate the desired behavior. It also sets the q value of
          wildcards of the format "type/*" to 0.02 (so these are preferred
          over matches against "*/*". If any media type on the
          <code>Accept:</code> header contains a q factor, these special
          values are <em>not</em> applied, so requests from browsers which
          send the explicit information to start with work as expected.</p>
      
      
      <h3><a name="exceptions" id="exceptions">Language Negotiation Exceptions</a></h3>
      
          <p>New in httpd 2.0, some exceptions have been added to the
          negotiation algorithm to allow graceful fallback when language
          negotiation fails to find a match.</p>
      
          <p>When a client requests a page on your server, but the server
          cannot find a single page that matches the
          <code>Accept-language</code> sent by
          the browser, the server will return either a "No Acceptable
          Variant" or "Multiple Choices" response to the client.  To avoid
          these error messages, it is possible to configure httpd to ignore
          the <code>Accept-language</code> in these cases and provide a
          document that does not explicitly match the client's request.  The
          <code class="directive"><a href="./mod/mod_negotiation.html#forcelanguagepriority">ForceLanguagePriority</a></code>
          directive can be used to override one or both of these error
          messages and substitute the servers judgement in the form of the
          <code class="directive"><a href="./mod/mod_negotiation.html#languagepriority">LanguagePriority</a></code>
          directive.</p>
      
          <p>The server will also attempt to match language-subsets when no
          other match can be found.  For example, if a client requests
          documents with the language <code>en-GB</code> for British
          English, the server is not normally allowed by the HTTP/1.1
          standard to match that against a document that is marked as simply
          <code>en</code>.  (Note that it is almost surely a configuration
          error to include <code>en-GB</code> and not <code>en</code> in the
          <code>Accept-Language</code> header, since it is very unlikely
          that a reader understands British English, but doesn't understand
          English in general.  Unfortunately, many current clients have
          default configurations that resemble this.)  However, if no other
          language match is possible and the server is about to return a "No
          Acceptable Variants" error or fallback to the <code class="directive"><a href="./mod/mod_negotiation.html#languagepriority">LanguagePriority</a></code>, the server
          will ignore the subset specification and match <code>en-GB</code>
          against <code>en</code> documents.  Implicitly, httpd will add
          the parent language to the client's acceptable language list with
          a very low quality value.  But note that if the client requests
          "en-GB; q=0.9, fr; q=0.8", and the server has documents
          designated "en" and "fr", then the "fr" document will be returned.
          This is necessary to maintain compliance with the HTTP/1.1
          specification and to work effectively with properly configured
          clients.</p>
      
          <p>In order to support advanced techniques (such as cookies or
          special URL-paths) to determine the user's preferred language,
          since httpd 2.0.47 <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> recognizes
          the <a href="env.html">environment variable</a>
          <code>prefer-language</code>. If it exists and contains an
          appropriate language tag, <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> will
          try to select a matching variant. If there's no such variant,
          the normal negotiation process applies.</p>
      
          <div class="example"><h3>Example</h3><pre class="prettyprint lang-config">SetEnvIf Cookie "language=(.+)" prefer-language=$1
      Header append Vary cookie</pre>
      </div>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="extensions" id="extensions">Extensions to Transparent Content
      Negotiation</a></h2>
      
      <p>httpd extends the transparent content negotiation protocol (RFC
      2295) as follows. A new <code>{encoding ..}</code> element is used in
      variant lists to label variants which are available with a specific
      content-encoding only. The implementation of the RVSA/1.0 algorithm
      (RFC 2296) is extended to recognize encoded variants in the list, and
      to use them as candidate variants whenever their encodings are
      acceptable according to the <code>Accept-Encoding</code> request
      header. The RVSA/1.0 implementation does not round computed quality
      factors to 5 decimal places before choosing the best variant.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="naming" id="naming">Note on hyperlinks and naming conventions</a></h2>
      
          <p>If you are using language negotiation you can choose between
          different naming conventions, because files can have more than
          one extension, and the order of the extensions is normally
          irrelevant (see the <a href="mod/mod_mime.html#multipleext">mod_mime</a> documentation
          for details).</p>
      
          <p>A typical file has a MIME-type extension (<em>e.g.</em>,
          <code>html</code>), maybe an encoding extension (<em>e.g.</em>,
          <code>gz</code>), and of course a language extension
          (<em>e.g.</em>, <code>en</code>) when we have different
          language variants of this file.</p>
      
          <p>Examples:</p>
      
          <ul>
            <li>foo.en.html</li>
      
            <li>foo.html.en</li>
      
            <li>foo.en.html.gz</li>
          </ul>
      
          <p>Here some more examples of filenames together with valid and
          invalid hyperlinks:</p>
      
          <table class="bordered">
            
            <tr>
              <th>Filename</th>
      
              <th>Valid hyperlink</th>
      
              <th>Invalid hyperlink</th>
            </tr>
      
            <tr>
              <td><em>foo.html.en</em></td>
      
              <td>foo<br />
               foo.html</td>
      
              <td>-</td>
            </tr>
      
            <tr>
              <td><em>foo.en.html</em></td>
      
              <td>foo</td>
      
              <td>foo.html</td>
            </tr>
      
            <tr>
              <td><em>foo.html.en.gz</em></td>
      
              <td>foo<br />
               foo.html</td>
      
              <td>foo.gz<br />
               foo.html.gz</td>
            </tr>
      
            <tr>
              <td><em>foo.en.html.gz</em></td>
      
              <td>foo</td>
      
              <td>foo.html<br />
               foo.html.gz<br />
               foo.gz</td>
            </tr>
      
            <tr>
              <td><em>foo.gz.html.en</em></td>
      
              <td>foo<br />
               foo.gz<br />
               foo.gz.html</td>
      
              <td>foo.html</td>
            </tr>
      
            <tr>
              <td><em>foo.html.gz.en</em></td>
      
              <td>foo<br />
               foo.html<br />
               foo.html.gz</td>
      
              <td>foo.gz</td>
            </tr>
          </table>
      
          <p>Looking at the table above, you will notice that it is always
          possible to use the name without any extensions in a hyperlink
          (<em>e.g.</em>, <code>foo</code>). The advantage is that you
          can hide the actual type of a document rsp. file and can change
          it later, <em>e.g.</em>, from <code>html</code> to
          <code>shtml</code> or <code>cgi</code> without changing any
          hyperlink references.</p>
      
          <p>If you want to continue to use a MIME-type in your
          hyperlinks (<em>e.g.</em> <code>foo.html</code>) the language
          extension (including an encoding extension if there is one)
          must be on the right hand side of the MIME-type extension
          (<em>e.g.</em>, <code>foo.html.en</code>).</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="caching" id="caching">Note on Caching</a></h2>
      
          <p>When a cache stores a representation, it associates it with
          the request URL. The next time that URL is requested, the cache
          can use the stored representation. But, if the resource is
          negotiable at the server, this might result in only the first
          requested variant being cached and subsequent cache hits might
          return the wrong response. To prevent this, httpd normally
          marks all responses that are returned after content negotiation
          as non-cacheable by HTTP/1.0 clients. httpd also supports the
          HTTP/1.1 protocol features to allow caching of negotiated
          responses.</p>
      
          <p>For requests which come from a HTTP/1.0 compliant client
          (either a browser or a cache), the directive <code class="directive"><a href="./mod/mod_negotiation.html#cachenegotiateddocs">CacheNegotiatedDocs</a></code> can be
          used to allow caching of responses which were subject to
          negotiation. This directive can be given in the server config or
          virtual host, and takes no arguments. It has no effect on requests
          from HTTP/1.1 clients.</p>
      
          <p>For HTTP/1.1 clients, httpd sends a <code>Vary</code> HTTP
          response header to indicate the negotiation dimensions for the
          response.  Caches can use this information to determine whether a
          subsequent request can be served from the local copy.  To
          encourage a cache to use the local copy regardless of the
          negotiation dimensions, set the <code>force-no-vary</code> <a href="env.html#special">environment variable</a>.</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="./en/content-negotiation.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/content-negotiation.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/content-negotiation.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/content-negotiation.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/content-negotiation.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/content-negotiation.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/handler.html.fr.utf8�������������������������������������������������������0000644�0000000�0000050�00000031145�13412755316�017252� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Utilisation des gestionnaires d'Apache (handlers) - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Utilisation des gestionnaires d'Apache (handlers)</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./en/handler.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/handler.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/handler.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/handler.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/handler.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/handler.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/handler.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
          <p>Ce document décrit l'utilisation des gestionnaires d'Apache (handlers).</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#definition">Qu'est-ce qu'un gestionnaire ?</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#examples">Exemples</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programmer">Note du développeur</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="definition" id="definition">Qu'est-ce qu'un gestionnaire ?</a></h2>
          
          <table class="related"><tr><th>Modules Apparentés</th><th>Directives Apparentées</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_actions.html">mod_actions</a></code></li><li><code class="module"><a href="./mod/mod_asis.html">mod_asis</a></code></li><li><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code></li><li><code class="module"><a href="./mod/mod_info.html">mod_info</a></code></li><li><code class="module"><a href="./mod/mod_mime.html">mod_mime</a></code></li><li><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></li><li><code class="module"><a href="./mod/mod_status.html">mod_status</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_actions.html#action">Action</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#addhandler">AddHandler</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#removehandler">RemoveHandler</a></code></li><li><code class="directive"><a href="./mod/core.html#sethandler">SetHandler</a></code></li></ul></td></tr></table>
      
      
          <p>Un "gestionnaire" est une représentation interne à Apache de l'action
          qui doit être entreprise quand un fichier est appelé. En général, les
          fichiers ont des gestionnaires implicites, basés sur le type du fichier.
          Normalement, tous les fichiers sont traités simplement par le serveur,
          mais certains types de fichiers sont "gérés" séparément.</p>
      
          <p>Les gestionnaires peuvent aussi être configurés explicitement,
          soit en fonction des extensions des noms de fichier, soit en fonction
          du chemin du fichier,
          sans faire référence au type de fichier. Ceci a le double avantage d'être
          une solution plus élégante, et aussi d'autoriser à associer à la fois
          un type <strong>et</strong> un gestionnaire avec un fichier. (Voir aussi <a href="mod/mod_mime.html#multipleext">Fichiers avec extensions
          multiples</a>.)</p>
      
          <p>Les gestionnaires peuvent être soit partie intégrante
          du serveur ou inclus dans un module, soit ajoutés à l'aide de la directive
          <code class="directive"><a href="./mod/mod_actions.html#action">Action</a></code>. Les gestionnaires
          intégrés dans la distribution standard se présentent comme suit :</p>
      
          <ul>
            <li><strong>default-handler</strong>: envoie le fichier en utilisant
            le <code>default_handler()</code>, qui est le gestionnaire utilisé par
            défaut pour traiter les contenus statiques. (core)</li>
      
            <li><strong>send-as-is</strong>: envoie les fichiers avec en-têtes HTTP
            tels quels. (<code class="module"><a href="./mod/mod_asis.html">mod_asis</a></code>)</li>
      
            <li><strong>cgi-script</strong>: traite le fichier comme un
            script CGI. (<code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code>)</li>
      
            <li><strong>imap-file</strong>: Traite le fichier comme un ensemble
            de règles de descriptions d'images (imagemap).
            (<code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code>)</li>
      
            <li><strong>server-info</strong>: Extrait des informations sur la
            configuration du serveur. (<code class="module"><a href="./mod/mod_info.html">mod_info</a></code>)</li>
      
            <li><strong>server-status</strong>: Rédige un rapport sur le statut
            du serveur. (<code class="module"><a href="./mod/mod_status.html">mod_status</a></code>)</li>
      
            <li><strong>type-map</strong>: Traite le fichier comme une description
            de type pour la négociation du contenu.
            (<code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>)</li>
          </ul>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Exemples</a></h2>
          
      
          <h3><a name="example1" id="example1">Modification d'un contenu statique à l'aide d'un script CGI</a></h3>
            
      
            <p>Les directives suivantes vont faire en sorte que les requêtes pour
            des fichiers possédant une extension <code>html</code> déclenchent
            l'exécution du script CGI <code>footer.pl</code>.</p>
      
            <pre class="prettyprint lang-config">Action add-footer /cgi-bin/footer.pl
      AddHandler add-footer .html</pre>
      
      
            <p>À ce moment-là, le script CGI se charge d'envoyer le document
            initialement demandé (référencé par la variable d'environnement
            <code>PATH_TRANSLATED</code>) et d'effectuer tous ajout ou modification
            voulus.</p>
      
          
          <h3><a name="example2" id="example2">Fichiers avec en-têtes HTTP</a></h3>
            
      
            <p>Les directives suivantes vont activer le gestionnaire
            <code>send-as-is</code>, qui est utilisé pour les fichiers qui possèdent
            leurs propres en-têtes HTTP. Tous les fichiers situés dans le répertoire
            <code>/web/htdocs/asis/</code> seront traités par le gestionnaire
            <code>send-as-is</code>, sans tenir compte de l'extension
            de leur nom de fichier.</p>
      
            <pre class="prettyprint lang-config">&lt;Directory "/web/htdocs/asis"&gt;
          SetHandler send-as-is
      &lt;/Directory&gt;</pre>
      
      
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="programmer" id="programmer">Note du développeur</a></h2>
          
      
          <p>Pour implémenter la fonctionnalité des gestionnaires, l'
          <a href="developer/API.html">API Apache</a> a fait l'objet d'un ajout
          que vous pourriez être amené à utiliser.
      
          Plus précisément, un nouvel enregistrement a été ajouté à la structure
          <code>request_rec</code> :</p>
      
          <pre class="prettyprint lang-c">char *handler</pre>
      
      
          <p>Si vous voulez que votre module déclenche l'utilisation d'un
          gestionnaire, il vous suffit de définir <code>r-&gt;handler</code> avec
          le nom du gestionnaire à n'importe quel moment avant l'étape
          <code>invoke_handler</code>
          de la requête. Les gestionnaires sont implémentés comme auparavant,
          quoique l'on utilise le nom du gestionnaire à la place d'un type
          de contenu. Bien que ce ne soit pas obligatoire, la convention de nommage
          des gestionnaires stipule l'utilisation d'un mot composé séparé par des
          tirets, sans slashes, afin de ne pas interférer avec l'espace de nommage
          des types de média.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./en/handler.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/handler.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/handler.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/handler.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/handler.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/handler.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="./zh-cn/handler.html" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/handler.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/content-negotiation.html.ja.utf8�������������������������������������������0000644�0000000�0000050�00000121740�13412755316�021611� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/content-negotiation.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/content-negotiation.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/content-negotiation.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/content-negotiation.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/content-negotiation.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
      
          <p>Apache 㯠HTTP/1.1 ã®è¦æ ¼ã«è¨˜è¿°ã•れã¦ã„るコンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã‚’
          サãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã™ã€‚
          ブラウザã«ã‚ˆã‚Šæä¾›ã•れãŸãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã€
          è¨€èªžã€æ–‡å­—セットã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã®å„ªå…ˆå‚¾å‘ã«åŸºã¥ã„ã¦ã€
          最é©ãªãƒªã‚½ãƒ¼ã‚¹ã®è¡¨ç¾ã‚’é¸æŠžã§ãã¾ã™ã€‚
          ã¾ãŸã€ä¸å®Œå…¨ãªãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³æƒ…報をé€ã£ã¦ãるブラウザã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’
          ã‚‚ã£ã¨è³¢ãå–り扱ãˆã‚‹ã‚ˆã†ã€ã„ãã¤ã‹æ©Ÿèƒ½ã‚‚実装ã—ã¦ã‚りã¾ã™ã€‚</p>
      
          <p>コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã¯
          <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>
          モジュールã«ã‚ˆã£ã¦æä¾›ã•れã¦ã„ã¦ã€ãƒ‡ãƒ•ォルトã§çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ã¾ã™ã€‚</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#about">コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã«ã¤ã„ã¦</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#negotiation">Apache ã«ãŠã‘ã‚‹ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#methods">ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³æ–¹æ³•</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#better">å“質ã®å€¤ã‚’変ãˆã‚‹</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#extensions">Transparent Content Negotiation
      ã®æ‹¡å¼µ</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#naming">リンクã¨åå‰ã®å¤‰æ›ã«é–¢ã™ã‚‹æ³¨æ„点</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#caching">キャッシュã«é–¢ã™ã‚‹æ³¨æ„事項</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="about" id="about">コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã«ã¤ã„ã¦</a></h2>
      
          <p>リソースã¯ã€å¹¾ã¤ã‹ç•°ãªã£ãŸè¡¨ç¾ã§åˆ©ç”¨ã§ãã‚‹å ´åˆãŒã‚りã¾ã™ã€‚
          例ãˆã°ã€ç•°ãªã‚‹è¨€èªžã‚„ç•°ãªã‚‹ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã€
          ã¾ãŸã¯ãれらã®çµ„ã¿åˆã‚ã›ã§åˆ©ç”¨ã§ãã‚‹ã‹ã‚‚知れã¾ã›ã‚“。
          ã‚‚ã£ã¨ã‚‚é©ã—ãŸé¸æŠžã‚’ã™ã‚‹æ–¹æ³•ã®ä¸€ã¤ã«ã¯ã€ã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ãƒšãƒ¼ã‚¸ã‚’
          ユーザã«è¦‹ã›ã¦ã€ãƒ¦ãƒ¼ã‚¶ã«é¸ã‚“ã§ã‚‚ã‚‰ã†æ–¹æ³•ãŒã‚りã¾ã™ã€‚
          ã—ã‹ã—ã€ã‚µãƒ¼ãƒãŒè‡ªå‹•çš„ã«é¸ã¶ã“ã¨ãŒã§ãã‚‹å ´åˆãŒå¤šãã‚りã¾ã™ã€‚
          ã“れã¯ã€ãƒ–ラウザãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆæ¯Žã«ã€
          ã©ã®è¡¨ç¾ã‚’嗜好ã™ã‚‹ã‹ã¨ã„ã†æƒ…報をé€ã‚‹ã“ã¨ã§å‹•作ã—ã¦ã„ã¾ã™ã€‚
          例ãˆã°ãƒ–ラウザã¯ã€å¯èƒ½ãªã‚‰ãƒ•ãƒ©ãƒ³ã‚¹èªžã§æƒ…報を見ãŸã„ã€
          ä¸å¯èƒ½ãªã‚‰ãã®ä»£ã‚りã«è‹±èªžã§ã‚‚よã„ã¨ã€
          自分ã®å—œå¥½ã‚’知らã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          ブラウザã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ˜ãƒƒãƒ€ã§è‡ªåˆ†ã®å„ªå…ˆå‚¾å‘を知らã›ã¾ã™ã€‚
          フランス語ã®ã¿ã®è¡¨ç¾ã‚’è¦æ±‚ã™ã‚‹å ´åˆã¯ã€ãƒ–ãƒ©ã‚¦ã‚¶ã¯æ¬¡ã‚’é€ã‚Šã¾ã™ã€‚</p>
      
      <div class="example"><p><code>Accept-Language: fr</code></p></div>
      
          <p>ã“ã®å„ªå…ˆå‚¾å‘ã¯ã€é¸æŠžå¯èƒ½ãªè¡¨ç¾ãŒå­˜åœ¨ã—ã¦ã€
          言語ã«ã‚ˆã£ã¦æ§˜ã€…ãªè¡¨ç¾ãŒã‚ã‚‹å ´åˆã«ã®ã¿é©ç”¨ã•れる
          ã¨ã„ã†ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。</p>
      
          <p>ã‚‚ã£ã¨è¤‡é›‘ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ä¾‹ã‚’挙ã’ã¾ã—ょã†ã€‚
          ã“ã®ãƒ–ラウザã¯ãƒ•ランス語ã¨è‹±èªžã‚’å—ã‘付ã‘ã‚‹ã€ã—ã‹ã—フランス語を好むã€
          ãã—ã¦æ§˜ã€…ãªãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã‚’å—ã‘付ã‘ã‚‹ãŒã€
          プレインテキストや他ã®ã‚¿ã‚¤ãƒ—より㯠HTML を好むã€
          ä»–ã®ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—より㯠GIF ã‚„ JPEG を好むã€ã—ã‹ã—最終手段ã¨ã—ã¦
          ä»–ã®ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã‚‚å—ã‘付ã‘ã‚‹ã€ã¨è¨­å®šã•れã¦ã„ã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
        Accept-Language: fr; q=1.0, en; q=0.5<br />
        Accept: text/html; q=1.0, text/*; q=0.8, image/gif; q=0.6, image/jpeg; q=0.6, image/*; q=0.5, */*; q=0.1
      </code></p></div>
      
          <p>Apache 㯠HTTP/1.1 è¦æ ¼ã§å®šç¾©ã•れã¦ã„ã‚‹ 'server
          driven' コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã‚’サãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã™ã€‚
          <code>Accept</code>, <code>Accept-Language</code>, 
          <code>Accept-Charset</code>, <code>Accept-Encoding</code>
          リクエストヘッダを完全ã«ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã™ã€‚Apache ã¯
          'transparent' コンテントãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã‚‚サãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã™ãŒã€
          ã“れ㯠RFC 2295 㨠RFC 2296 ã§å®šç¾©ã•れã¦ã„る試験的ãª
          ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ãƒ—ロトコルã§ã™ã€‚
          ã“れら㮠RFCã§å®šç¾©ã•れã¦ã„ã‚‹ 'feature negotiation'
          ã¯ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã›ã‚“。</p>
      
          <p><strong>リソース</strong>ã¨ã¯ URI
          ã§ç‰¹å®šã•れる概念上ã®ã‚‚ã®ã®ã“ã¨ã§ã™ (RFC 2396)。 Apache
          ã®ã‚ˆã†ãª HTTP サーãƒã¯ã€ãã®åå‰ç©ºé–“ã®ä¸­ã§ã®
          リソースã®<strong>表ç¾</strong>ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’æä¾›ã—ã¾ã™ã€‚
          ãれãžã‚Œã®è¡¨ç¾ã¯
          定義ã•れãŸãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã€æ–‡å­—セットã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ç­‰ã®
          付属ã—ãŸã€ãƒã‚¤ãƒˆåˆ—ã®å½¢å¼ã§ã™ã€‚
          ãれãžã‚Œã®ãƒªã‚½ãƒ¼ã‚¹ã¯ã‚る時点㧠0 個ã€1 個ã€ãれ以上ã®è¡¨ç¾ã¨
          関連付ã‘られるå¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚複数ã®è¡¨ç¾ãŒåˆ©ç”¨ã§ãã‚‹å ´åˆã¯ã€
          リソースã¯<strong>ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³å¯èƒ½ã§ã‚ã‚‹</strong>ã¨ã•れã€
          個々ã®è¡¨ç¾ã¯ <strong>variant</strong> ã¨å‘¼ã°ã‚Œã¾ã™ã€‚
          ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³å¯èƒ½ãªãƒªã‚½ãƒ¼ã‚¹ã® variant ãŒç•°ãªã‚‹ã€
          ãã®çŠ¶æ…‹ã‚’æŒ‡ã—ã¦ã€
          ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã®<strong>次元</strong>ã¨å‘¼ã³ã¾ã™ã€‚</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="negotiation" id="negotiation">Apache ã«ãŠã‘ã‚‹ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³</a></h2>
      
          <p>リソースをãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã™ã‚‹ãŸã‚ã«ã¯ã€
          サーãƒã¯ variant ãれãžã‚Œã«ã¤ã„ã¦ã®æƒ…報を知ã£ã¦ãŠãå¿…è¦ãŒã‚りã¾ã™ã€‚
          ã“れã¯ä»¥ä¸‹ã®äºŒã¤ã®æ–¹æ³•ã®ã©ã¡ã‚‰ã‹ã§è¡Œã‚れã¾ã™ã€‚</p>
      
          <ul>
            <li>タイプマップ
            (<em>ã™ãªã‚ã¡</em> <code>*.var</code> ファイル)
            ã‚’ä½¿ã†æ–¹æ³•。 ã“れ㯠variant
            ã‚’æ˜Žç¤ºçš„ã«æŒ™ã’ã¦ã„るファイルを指定ã—ã¾ã™ã€‚</li>
      
            <li>'Multiviews'
            を使ã£ã¦ã€ã‚µãƒ¼ãƒãŒæš—é»™ã®å†…ã«ãƒ•ァイルåã«ãƒ‘ターン照åˆã‚’
            行ãªã£ã¦ãã®çµæžœã‹ã‚‰é¸æŠžã™ã‚‹æ–¹æ³•。</li>
          </ul>
      
         <h3><a name="type-map" id="type-map">type-map ファイルを使ã†</a></h3>
      
          <p>タイプマップ㯠<code>type-map</code> ãƒãƒ³ãƒ‰ãƒ©
          (ã‚‚ã—ãã¯ã€å¤ã„ Apache
          ã®è¨­å®šã¨ä¸‹ä½äº’æ›ã§ã‚ã‚‹ <a class="glossarylink" href="./glossary.html#mime-type" title="用語集をå‚ç…§">MIME タイプ</a>
          <code>application/x-type-map</code>)
          ã«é–¢é€£ä»˜ã‘られãŸãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã§ã™ã€‚
          ã“ã®æ©Ÿèƒ½ã‚’使ã†ãŸã‚ã«ã¯ã€ã‚ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µå­ã‚’
          <code>type-map</code>
          ã¨ã—ã¦å®šç¾©ã™ã‚‹ã‚ˆã†ãªãƒãƒ³ãƒ‰ãƒ©ã‚’ã€
          設定ファイル中ã«ç½®ãå¿…è¦ãŒã‚ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。
          ã“れã¯</p>
      
      <div class="example"><p><code>AddHandler type-map .var</code></p></div>
      
          <p>をサーãƒè¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ä¸­ã«æ›¸ãã“ã¨ãŒä¸€ç•ªè‰¯ã„方法ã§ã™ã€‚</p>
      
          <p>タイプマップファイルã¯è¨˜è¿°ã™ã‚‹ãƒªã‚½ãƒ¼ã‚¹ã¨åŒã˜åå‰ã‚’æŒã£ã¦ã„ã¦ã€
          利用å¯èƒ½ãª variant ãれãžã‚Œã®ã‚¨ãƒ³ãƒˆãƒªã‚’æŒã£ã¦ã„ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
          ãã—ã¦ã€ã“ã®ã‚¨ãƒ³ãƒˆãƒªã¯é€£ç¶šã—㟠HTTP ã®ãƒ˜ãƒƒãƒ€è¡Œã§æ§‹æˆã•れã¾ã™ã€‚
          ç•°ãªã‚‹ variant ã®ãŸã‚ã®ã‚¨ãƒ³ãƒˆãƒªã¯ç©ºè¡Œã§åŒºåˆ‡ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚
          エントリ中ã«ç©ºè¡ŒãŒè¤‡æ•°ã‚ã£ã¦ã¯ã„ã‘ã¾ã›ã‚“。
          習慣的ã«ã¯ã€ãƒžãƒƒãƒ—ファイルã¯å…¨ä½“ã‚’çµåˆã—ãŸã‚‚ã®ã®ã‚¨ãƒ³ãƒˆãƒªã‹ã‚‰å§‹ã¾ã‚Šã¾ã™
          (ã—ã‹ã—ã“れã¯å¿…é ˆã§ã¯ãªãã€ã‚ã£ãŸã¨ã—ã¦ã‚‚無視ã•れるもã®ã§ã™)。
          次ã«ä¾‹ã‚’示ã—ã¾ã™ã€‚ã“ã®ãƒ•ァイルã¯ãƒªã‚½ãƒ¼ã‚¹ <code>foo</code> 
          を記述ã—ã¦ã„ã‚‹ã®ã§ã€<code>foo.var</code> ã¨ã„ã†åå‰ã«ãªã‚Šã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
        URI: foo<br />
      <br />
        URI: foo.en.html<br />
        Content-type: text/html<br />
        Content-language: en<br />
      <br />
        URI: foo.fr.de.html<br />
        Content-type: text/html;charset=iso-8859-2<br />
        Content-language: fr, de<br />
      </code></p></div>
          <p>ãŸã¨ãˆ MultiViews を使用ã™ã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ãŸã¨ã—ã¦ã‚‚ã€
          ファイルåã®æ‹¡å¼µå­ã‚ˆã‚Šã‚¿ã‚¤ãƒ—ãƒžãƒƒãƒ—ã®æ–¹ãŒå„ªå…ˆæ¨©ã‚’æŒã¤ã¨ã„ã†ã“ã¨ã«ã‚‚
          注æ„ã—ã¦ãã ã•ã„。
          variant ã®å“質ãŒé•ã†ã¨ãã¯ã€ã“ã®ç”»åƒã®ã‚ˆã†ã« (JPEG, GIF, ASCII
          アートãŒã‚りã¾ã™) メディアタイプ㮠"qs"
          ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã§æŒ‡å®šã•れã¾ã™ã€‚</p>
      
      <div class="example"><p><code>
        URI: foo<br />
      <br />
        URI: foo.jpeg<br />
        Content-type: image/jpeg; qs=0.8<br />
      <br />
        URI: foo.gif<br />
        Content-type: image/gif; qs=0.5<br />
      <br />
        URI: foo.txt<br />
        Content-type: text/plain; qs=0.01<br />
      </code></p></div>
      
          <p>qs 値ã®ç¯„囲㯠0.000 ã‹ã‚‰ 1.000 ã§ã™ã€‚qs 値ãŒ
          0.000 ã® variant ã¯æ±ºã—ã¦
          é¸æŠžã•れãªã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。'qs' 値ã®ãªã„ variant
          㯠qs 値 1.0 ã‚’ 与ãˆã‚‰ã‚Œã¾ã™ã€‚qs
          パラメータã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®èƒ½åŠ›ã«é–¢ä¿‚ç„¡ãã€ä»–ã® variant ã¨
          比較ã—ãŸã¨ãã® variant
          ã®ç›¸å¯¾çš„ãªã€Œå“質ã€ã‚’示ã—ã¾ã™ã€‚
          例ãˆã°ã€å†™çœŸã‚’表ç¾ã—よã†ã¨ã—ã¦ã„ã‚‹ã¨ã㯠JPEG
          ãƒ•ã‚¡ã‚¤ãƒ«ã®æ–¹ãŒæ™®é€šã¯ ASCII
          ファイルよりも高ã„å“質ã«ãªã‚Šã¾ã™ã€‚ã—ã‹ã—ã€ãƒªã‚½ãƒ¼ã‚¹ãŒå…ƒã€…
          ASCII アートã§è¡¨ç¾ã•れã¦ã„ã‚‹ã¨ãã¯ã€ASCII ファイルã®
          方㌠JPEG ファイルよりも高ã„å“質ã«ãªã‚Šã¾ã™ã€‚ã“ã®ã‚ˆã†ã«ã€qs
          㯠表ç¾ã•ã‚Œã‚‹ãƒªã‚½ãƒ¼ã‚¹ã®æ€§è³ªã«ã‚ˆã£ã¦ variant
          毎ã«ç‰¹æœ‰ã®å€¤ã‚’å–りã¾ã™ã€‚</p>
      
          <p>èªè­˜ã•れるヘッダã®ä¸€è¦§ã¯
          <a href="mod/mod_negotiation.html#typemaps">mod_negotiation</a>
          ドキュメントã«ã‚りã¾ã™ã€‚</p>
      
      
      <h3><a name="multiviews" id="multiviews">Multiviews</a></h3>
      
          <p><code>MultiViews</code> ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæ¯Žã®ã‚ªãƒ—ションã§ã€
          <code>httpd.conf</code>ファイルã®
          <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, 
          <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code>, 
          <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>
          セクション中やã€(<code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code>
          ãŒé©åˆ‡ãªå€¤ã« 設定ã•れã¦ã„ã‚‹ã¨) <code>.htaccess</code>
          ファイル㧠<code class="directive"><a href="./mod/core.html#options">Options</a></code>
          ディレクティブã«ã‚ˆã£ã¦è¨­å®šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          <code>Options All</code> ã¯
          <code>MultiViews</code>
          をセットã—ãªã„ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。明示的ã«
          ãã®åå‰ã‚’書ãå¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      
          <p><code>MultiViews</code> ã®åŠ¹æžœã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ãªã‚Šã¾ã™:
          サーãƒãŒ <code>/some/dir/foo</code>
          ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘å–りã€<code>/some/dir</code> ã§
          <code>MultiViews</code> ãŒæœ‰åйã§ã‚ã£ã¦ã€
          <code>/some/dir/foo</code> ãŒå­˜åœ¨<em>ã—ãªã„</em>å ´åˆã€
          サーãƒã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’読ん㧠<code>foo.*</code>
          ã«ã‚ã¦ã¯ã¾ã‚‹å…¨ã¦ã®ãƒ•ァイルを探ã—ã€
          事実上ãれらã®ãƒ•ァイルをマップã™ã‚‹ã‚¿ã‚¤ãƒ—マップを作りã¾ã™ã€‚
          ãã®ã¨ãã€ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã¨ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã¯ã€ãã®ãƒ•ァイルåã‚’
          直接指定ã—ãŸã¨ãã¨åŒã˜ã‚‚ã®ãŒå‰²ã‚Šå½“ã¦ã‚‰ã‚Œã¾ã™ã€‚
          ãれã‹ã‚‰ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®è¦æ±‚ã«ä¸€ç•ªåˆã†ã‚‚ã®ã‚’é¸ã³ã¾ã™ã€‚</p>
      
          <p>サーãƒãŒãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®ç´¢å¼•を作ã‚ã†ã¨ã—ã¦ã„ã‚‹å ´åˆã€
          <code>MultiViews</code>
          㯠<code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code>
          ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã§æŒ‡å®šã•れãŸãƒ•ァイルを探ã™éŽç¨‹ã«ã‚‚
          é©ç”¨ã•れã¾ã™ã€‚設定ファイルã«</p>
      <div class="example"><p><code>DirectoryIndex index</code></p></div>
          <p>ãŒæ›¸ã‹ã‚Œã¦ã„ã¦ã€<code>index.html</code> ã¨
          <code>index.html3</code> ãŒ
          両方存在ã—ã¦ã„ã‚‹ã¨ã€ã‚µãƒ¼ãƒã¯ãã®ä¸­ã‹ã‚‰ã©ã¡ã‚‰ã‹ã‚’é©å½“ã«é¸ã³ã¾ã™ã€‚
          ã‚‚ã—ãã®ä¸¡æ–¹ãŒå­˜åœ¨ã›ãšã« <code>index.cgi</code>
          ãŒå­˜åœ¨ã—ã¦ã„ã‚‹ã¨ã€ サーãƒã¯ãれを実行ã—ã¾ã™ã€‚</p>
      
          <p>ã‚‚ã—ディレクトリを読んã§ã„ã‚‹éš›ã«ã€
          文字セットã€ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã€è¨€èªžã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’
          指定ã™ã‚‹ãŸã‚ã® <code>mod_mime</code> 
          ã§èªè­˜ã§ãã‚‹æ‹¡å¼µå­ã‚’æŒãŸãªã„ファイルãŒè¦‹ã¤ã‹ã‚‹ã¨ã€çµæžœã¯
          <code class="directive"><a href="./mod/mod_mime.html#multiviewsmatch">MultiViewsMatch</a></code>
          ディレクティブã®è¨­å®šã«ä¾å­˜ã—ã¾ã™ã€‚ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯
          ãƒãƒ³ãƒ‰ãƒ©ã€ãƒ•ィルタã€ä»–ã®ãƒ•ァイル拡張å­ã‚¿ã‚¤ãƒ—ã®ã©ã‚ŒãŒ
          MultiViews ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã§ä½¿ç”¨ã§ãã‚‹ã‹ã‚’決定ã—ã¾ã™ã€‚</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="methods" id="methods">ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³æ–¹æ³•</a></h2>
      
          <p>Apache ã¯ãƒªã‚½ãƒ¼ã‚¹ã® variant ã®ä¸€è¦§ã‚’ã€ã‚¿ã‚¤ãƒ—マップファイルã‹
          ディレクトリ内ã®ãƒ•ァイルåã‹ã‚‰ã‹ã§å–å¾—ã—ãŸå¾Œã€
          「最é©ãªã€ variant を決定ã™ã‚‹ãŸã‚ã«äºŒã¤ã®æ–¹æ³•ã®
          ã©ã¡ã‚‰ã‹ã‚’èµ·å‹•ã—ã¾ã™ã€‚
          Apache ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒˆãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã®æ©Ÿèƒ½ã‚’使ã†ãŸã‚ã«ã€
          ã©ã®ã‚ˆã†ã«ã—ã¦ã“ã®èª¿åœãŒè¡Œã‚れるã‹è©³ç´°ã‚’知る必è¦ã¯ã‚りã¾ã›ã‚“。
          ã—ã‹ã—ãªãŒã‚‰ã€ã“ã®æ–‡æ›¸ã®æ®‹ã‚Šã§ã¯é–¢å¿ƒã®ã‚る人ã®ãŸã‚ã«ã€
          使用ã•れã¦ã„る方法ã«ã¤ã„ã¦èª¬æ˜Žã—ã¦ã„ã¾ã™ã€‚</p>
      
          <p>ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³æ–¹æ³•ã¯äºŒã¤ã‚りã¾ã™ã€‚</p>
      
          <ol>
            <li>通常㯠<strong>Apache ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’用ã„㟠Server
            driven negotiation</strong> ãŒä½¿ç”¨ã•れã¾ã™ã€‚Apache
            ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¯å¾Œã«è©³ç´°ã«èª¬æ˜Žã•れã¦ã„ã¾ã™ã€‚
            ã“ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒä½¿ç”¨ã•れãŸå ´åˆã€Apache
            ã¯ã‚ˆã‚Šè‰¯ã„çµæžœã«ãªã‚‹ã‚ˆã†ã«ã€ç‰¹å®šã®æ¬¡å…ƒã«ãŠã„ã¦å“質ã®å€¤ã‚’
            「変ãˆã‚‹ã€ã“ã¨ãŒã§ãã¾ã™ã€‚Apache
            ãŒå“質ã®å€¤ã‚’変ãˆã‚‹æ–¹æ³•ã¯å¾Œã§è©³ç´°ã«èª¬æ˜Žã•れã¦ã„ã¾ã™ã€‚</li>
      
            <li>RFC 2295
            ã§å®šç¾©ã•れã¦ã„る機構を用ã„ã¦ãƒ–ラウザãŒç‰¹ã«æŒ‡å®šã—ãŸå ´åˆã€
            <strong>transparent content negotiation</strong>
            ãŒä½¿ç”¨ã•れã¾ã™ã€‚ã“ã®ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³æ–¹æ³•ã§ã¯ã€ã€Œæœ€é©ãªã€
            variant ã®æ±ºå®šã‚’ブラウザãŒå®Œå…¨ã«åˆ¶å¾¡ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
            ã§ã™ã‹ã‚‰ã€çµæžœã¯ãƒ–ラウザãŒä½¿ç”¨ã—ã¦ã„るアルゴリズムã«ä¾å­˜ã—ã¾ã™ã€‚
            Transparent negotiation ã®å‡¦ç†ã®éŽç¨‹ã§ã€ãƒ–ラウザ㯠RFC 2296
            㧠定義ã•れã¦ã„ã‚‹ 'remote variant selection algorithm'
            を実行ã™ã‚‹ã‚ˆã†ã«é ¼ã‚€ã“ã¨ãŒã§ãã¾ã™ã€‚</li>
          </ol>
      
      <h3><a name="dimensions" id="dimensions">ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã®æ¬¡å…ƒ</a></h3>
      
          <table>
            
            <tr valign="top">
              <th>次元</th>
      
              <th>説明</th>
            </tr>
      
            <tr valign="top">
              <td>メディアタイプ</td>
      
              <td>ブラウザ㯠<code>Accept</code>
      	ヘッダフィールドã§å„ªå…ˆå‚¾å‘を指定ã—ã¾ã™ã€‚
      	アイテムãれãžã‚Œã¯ã€é–¢é€£ã—ãŸå“質数値をæŒã¤ã“ã¨ãŒã§ãã¾ã™ã€‚
      	variant ã®èª¬æ˜Žã‚‚å“質数値をæŒã¤ã“ã¨ãŒã§ãã¾ã™
      	("qs" パラメータをã”覧下ã•ã„)。</td>
            </tr>
      
            <tr valign="top">
              <td>言語</td>
      
      	<td>ブラウザ㯠<code>Accept-Language</code>
      	ヘッダフィールドã§å„ªå…ˆå‚¾å‘を指定ã—ã¾ã™ã€‚
      	è¦ç´ ãれãžã‚Œã«å“質数値をæŒãŸã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
      	variants 㯠0 ã‹ 1 ã¤ã‹ãれ以上ã®è¨€èªžã¨
      	関連ã¥ã‘ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</td>
            </tr>
      
            <tr valign="top">
              <td>エンコーディング</td>
      
      	<td>ブラウザ㯠<code>Accept-Encoding</code>
      	ヘッダフィールドã§å„ªå…ˆå‚¾å‘を指定ã—ã¾ã™ã€‚
      	è¦ç´ ãれãžã‚Œã«å“質数値をæŒãŸã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</td>
            </tr>
      
            <tr valign="top">
              <td>文字セット</td>
      
      	<td>ブラウザ㯠<code>Accept-Charset</code>
      	ヘッダフィールドã§å„ªå…ˆå‚¾å‘を指定ã—ã¾ã™ã€‚
      	è¦ç´ ãれãžã‚Œã«å“質数値をæŒãŸã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
      	variant ã¯ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã®ãƒ‘ラメータã¨ã—ã¦æ–‡å­—セットを
      	指定ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚</td>
            </tr>
          </table>
      
      
      <h3><a name="algorithm" id="algorithm">Apache ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ </a></h3>
      
          <p>ブラウザã«è¿”ã™ã€Œæœ€é©ãªã€variant ã‚’ (ã‚‚ã—ã‚れã°) é¸æŠžã™ã‚‹ã‚ˆã†ã«
          Apache ã¯æ¬¡ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’使ã†ã“ã¨ãŒã§ãã¾ã™ã€‚
          ã“ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’設定ã«ã‚ˆã‚Šå¤‰æ›´ã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“。
          次ã®ã‚ˆã†ã«å‹•作ã—ã¾ã™:</p>
      
          <ol>
            <li>ã¾ãšã¯ã˜ã‚ã«ã€ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã®æ¬¡å…ƒãれãžã‚Œã«ã¤ã„ã¦é©åˆ‡ãª
            <em>Accept*</em> ヘッダフィールドを調ã¹ã€
            variant ãれãžã‚Œã«å“質を割り当ã¦ã¾ã™ã€‚
            ã‚‚ã—ã‚る次元㮠<em>Accept*</em> ヘッダã§ãã® variant
            ãŒè¨±å®¹ã§ããªã„ã“ã¨ãŒç¤ºã•れã¦ã„れã°ã€ãれを削除ã—ã¾ã™ã€‚
            variant ãŒä¸€ã¤ã‚‚残ã£ã¦ã„ãªã‘れã°ã€ã‚¹ãƒ†ãƒƒãƒ— 4 ã«è¡Œãã¾ã™ã€‚</li>
      
            <li>
      	消去法ã§ã€Œæœ€é©ãªã€ variant ã‚’é¸ã³ã¾ã™ã€‚
      	次ã®ãƒ†ã‚¹ãƒˆãŒé †ç•ªã«é©ç”¨ã•れã¾ã™ã€‚
      	テストã§é¸æŠžã•れãªã‹ã£ãŸ variant ã¯å‰Šé™¤ã•れã¦ã„ãã¾ã™ã€‚
      	テスト後 variant ãŒä¸€ã¤ã ã‘残ã£ã¦ã„れã°ã€ãれを最é©ãªã‚‚ã®ã¨ã—ã¦
      	ステップ 3 ã«é€²ã¿ã¾ã™ã€‚
      	複数 variant ãŒæ®‹ã£ã¦ã„れã°ã€æ¬¡ã®ãƒ†ã‚¹ãƒˆã«é€²ã¿ã¾ã™ã€‚
      
              <ol>
      	  <li>variant ã®ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã®å“質数値㨠<code>Accept</code>
      	  ヘッダã®å“質数値ã¨ã®ç©ã‚’計算ã—ã¦ã€æœ€é«˜å€¤ã® variant
      	  ã‚’é¸ã³ã¾ã™ã€‚</li>
      
      	  <li>言語å“è³ªæ•°å€¤ãŒæœ€é«˜ã® variant ã‚’é¸ã³ã¾ã™ã€‚</li>
      
      	  <li>(ã‚‚ã—ã‚れã°) <code>Accept-Language</code> ヘッダã®è¨€èªžé †ã‹ã€
      	  (ã‚‚ã—ã‚れã°)
      	  <code class="directive"><a href="./mod/mod_negotiation.html#languagepriority">LanguagePriority</a></code> 
      	  ディレクティブã®è¨€èªžé †ã§æœ€é©ãªè¨€èªžã® variant ã‚’é¸ã³ã¾ã™ã€‚</li>
      
      	  <li>最高「レベルã€ã®ãƒ¡ãƒ‡ã‚£ã‚¢ãƒ‘ラメータ
      	  (text/html メディアタイプã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’与ãˆã‚‹ãŸã‚ã«ä½¿ã‚れã¾ã™)
      	  ã‚’æŒã¤ variant ã‚’é¸ã³ã¾ã™ã€‚</li>
      
      	  <li><code>Accept-Charset</code> ヘッダ行ã§ä¸Žãˆã‚‰ã‚Œã¦ã„ã‚‹æœ€é«˜ã®æ–‡å­—セット
      	  メディアパラメータをæŒã¤ variant ã‚’é¸ã³ã¾ã™ã€‚
      	  明示的ã«é™¤å¤–ã•れã¦ã„ãªã„é™ã‚Šã€ISO-8859-1
      	  ãŒè¨±å®¹ã•れるよã†ã«ãªã£ã¦ã„ã¾ã™ã€‚
      	  <code>text/*</code> メディアタイプã§ã‚ã‚‹ã‘れã©ã‚‚
      	  ç‰¹å®šã®æ–‡å­—ã‚»ãƒƒãƒˆã«æ˜Žç¤ºçš„ã«é–¢é€£ã¥ã‘られã¦ã„ã‚‹ã‚ã‘ã§ã¯ãªã„
      	  variant 㯠ISO-8859-1 ã§ã‚ã‚‹ã¨ä»®å®šã•れã¾ã™ã€‚</li>
      
      	  <li>ISO-8859-1 <em>ã§ã¯ãªã„</em>文字セットメディアパラメータã¨
      	  関連ã¥ã‘られã¦ã„ã‚‹ variant ã‚’é¸ã³ã¾ã™ã€‚
      	  ãã®ã‚ˆã†ãª variant ãŒãªã„å ´åˆã¯ã€ä»£ã‚りã«å…¨ã¦ã®
      	  variant ã‚’é¸ã³ã¾ã™ã€‚</li>
      
      	  <li>最é©ãªã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã® variant ã‚’é¸ã³ã¾ã™ã€‚
      	  ã‚‚ã— user-agent ãŒè¨±å®¹ã™ã‚‹ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãŒã‚れã°ã€
      	  ãã® variant ã®ã¿ã‚’é¸ã³ã¾ã™ã€‚
      	  ãã†ã§ã¯ãªãã€ã‚‚ã—エンコードã•れãŸã‚‚ã®ã¨ãã†ã§ãªã„
      	  variant ãŒæ··ã–ã£ã¦å­˜åœ¨ã—ã¦ã„ãŸã‚‰ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れã¦ã„ãªã„
      	  variant ã®ã¿ã‚’é¸ã³ã¾ã™ã€‚
      	  variant ãŒå…¨éƒ¨ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れã¦ã„ã‚‹ã‹
      	  variant ãŒå…¨éƒ¨ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れã¦ã„ãªã„ã¨ã„ã†å ´åˆã¯ã€
      	  å…¨ã¦ã® variant ã‚’é¸ã³ã¾ã™ã€‚</li>
      
      	  <li>å†…å®¹ã®æœ€ã‚‚短ㄠvariant ã‚’é¸ã³ã¾ã™ã€‚</li>
      
      	  <li>残ã£ã¦ã„ã‚‹ variant ã®æœ€åˆã®ã‚‚ã®ã‚’é¸ã³ã¾ã™ã€‚
      	  ã‚¿ã‚¤ãƒ—ãƒžãƒƒãƒ—ãƒ•ã‚¡ã‚¤ãƒ«ã®æœ€åˆã«ãƒªã‚¹ãƒˆã•れã¦ã„ã‚‹ã‹ã€
      	  variant ãŒãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‹ã‚‰æœ€åˆã«èª­ã¿è¾¼ã¾ã‚Œã‚‹æ™‚ã«
      	  ASCIIé †ã§ã‚½ãƒ¼ãƒˆã—ã¦ãƒ•ァイルåãŒå…ˆé ­ã«ãªã£ãŸã‹ã€ã®ã©ã¡ã‚‰ã‹ã§ã™ã€‚</li>
              </ol>
            </li>
      
            <li>アルゴリズムを使ã£ã¦ä¸€ã¤ã®ã€Œæœ€é©ãªã€variant ã‚’é¸ã³ã¾ã—ãŸã®ã§ã€
            ãれを応答ã¨ã—ã¦è¿”ã—ã¾ã™ã€‚ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã®æ¬¡å…ƒã‚’指定ã™ã‚‹ãŸã‚ã«
            HTTP レスãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ <code>Vary</code> ãŒè¨­å®šã•れã¾ã™
            (リソースã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’ã™ã‚‹æ™‚ã«ã€
            ブラウザやキャッシュã¯ã“ã®æƒ…報を使ã†ã“ã¨ãŒã§ãã¾ã™)。
            以上ã§çµ‚ã‚り。</li>
      
            <li>ã“ã“ã«æ¥ãŸã¨ã„ã†ã“ã¨ã¯ã€variant ãŒä¸€ã¤ã‚‚é¸æŠžã•れãªã‹ã£ãŸ
            (ブラウザãŒè¨±å®¹ã™ã‚‹ã‚‚ã®ãŒãªã‹ã£ãŸãŸã‚) ã¨ã„ã†ã“ã¨ã§ã™ã€‚
            406 ステータス ("No Acceptable representation" ã‚’æ„味ã™ã‚‹)
            ãŒã€åˆ©ç”¨å¯èƒ½ãª variant ã®ãƒªã‚¹ãƒˆã®ã¤ã„㟠HTML 
            ドキュメントã¨ã¨ã‚‚ã«è¿”ã•れã¾ã™ã€‚
            相é•ã®æ¬¡å…ƒã‚’示㙠HTTP <code>Vary</code> ヘッダも設定ã•れã¾ã™ã€‚</li>
          </ol>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="better" id="better">å“質ã®å€¤ã‚’変ãˆã‚‹</a></h2>
      
          <p>上記㮠Apache ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®åŽ³æ ¼ãªè§£é‡ˆã§
          得られるã§ã‚ã‚ã†å€¤ã‹ã‚‰ã€Apache ã¯å“質数値を時々変ãˆã¾ã™ã€‚
          ã“れã¯ã€ã“ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã§å®Œå…¨ã§ã¯ãªã„ã€ã‚ã‚‹ã„ã¯æ­£ç¢ºã§ãªã„情報をé€ã‚‹
          ブラウザå‘ã‘ã«ã‚ˆã‚Šã‚ˆã„çµæžœã‚’å¾—ã‚‹ãŸã‚ã«è¡Œã‚れã¾ã™ã€‚
          ã‹ãªã‚Šãƒãƒ”ュラーãªãƒ–ラウザã§ã€ã‚‚ã—ãªã„ã¨é–“é•ã£ãŸ variant
          ã‚’é¸æŠžã™ã‚‹çµæžœã«ãªã£ã¦ã—ã¾ã†ã‚ˆã†ãª <code>Accept</code>
          ヘッダ情報をé€ã‚‹ã‚‚ã®ã‚‚ã‚りã¾ã™ã€‚
          ブラウザãŒå®Œå…¨ã§æ­£ã—ã„æƒ…報をé€ã£ã¦ã„れã°ã€
          ã“ã®æ•°å€¤å¤‰åŒ–ã¯é©ç”¨ã•れã¾ã›ã‚“。</p>
      
      <h3><a name="wildcards" id="wildcards">メディアタイプã¨ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰</a></h3>
      
          <p><code>Accept:</code> リクエストヘッダã¯ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã®å„ªå…ˆå‚¾å‘を指定ã—ã¾ã™ã€‚
          ã“れã¯ã¾ãŸã€"image/*" ã‚„ "*/*"
          ã¨ã„ã£ãŸã€Œãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã€ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã‚’å«ã‚€ã“ã¨ãŒã§ãã¾ã™ã€‚
          ã“ã“ã§ * ã¯ä»»æ„ã®æ–‡å­—列ã«ãƒžãƒƒãƒã—ã¾ã™ã€‚
          ã§ã™ã‹ã‚‰ã€æ¬¡ã®:</p>
      
      <div class="example"><p><code>Accept: image/*, */*</code></p></div>
      
          <p>ã‚’å«ã‚€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ã€"image/" ã§ã¯ã˜ã¾ã‚‹ã‚¿ã‚¤ãƒ—å…¨ã¦ãŒè¨±å®¹ã§ãã‚‹ã€
          ãã—ã¦ä»–ã®ã©ã‚“ãªã‚¿ã‚¤ãƒ—も許容ã§ãã‚‹
          (ã“ã®å ´åˆã¯ã˜ã‚ã® "image/*" ã¯å†—é•·ã«ãªã‚Šã¾ã™)
          ã“ã¨ã‚’示ã—ã¾ã™ã€‚
          扱ã†ã“ã¨ã®ã§ãる明示的ãªã‚¿ã‚¤ãƒ—ã«åŠ ãˆã¦ã€æ©Ÿæ¢°çš„ã«
          ワイルドカードをé€ã‚‹ãƒ–ラウザもã‚りã¾ã™ã€‚例ãˆã°:</p>
      
      <div class="example"><p><code>
        Accept: text/html, text/plain, image/gif, image/jpeg, */*
      </code></p></div>
          <p>ã“ã†ã™ã‚‹ã“ã¨ã®ç‹™ã„ã¯ã€æ˜Žç¤ºçš„ã«ãƒªã‚¹ãƒˆã—ã¦ã„るタイプãŒå„ªå…ˆã•れるã‘れã©ã‚‚ã€
          ç•°ãªã‚‹è¡¨ç¾ãŒåˆ©ç”¨å¯èƒ½ã§ã‚れã°ãれã§ã‚‚良ã„ã€ã¨ã„ã†ã“ã¨ã§ã™ã€‚
          ã—ã‹ã—ãªãŒã‚‰ã€ä¸Šã®åŸºæœ¬çš„ãªã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã§ã¯ã€
          */* ワイルドカードã¯ä»–ã®å…¨ã¦ã®ã‚¿ã‚¤ãƒ—ã¨å…¨ãåŒç­‰ãªã®ã§å„ªå…ˆã•れã¾ã›ã‚“。
          ブラウザ㯠*/* ã«ã‚‚ã£ã¨ä½Žã„å“質 (優先) 
          値を付ã‘ã¦ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é€ã‚‹ã¹ããªã®ã§ã™ã€‚例ãˆã°:</p>
      <div class="example"><p><code>
        Accept: text/html, text/plain, image/gif, image/jpeg, */*; q=0.01
      </code></p></div>
          <p>明示的ãªã‚¿ã‚¤ãƒ—ã«ã¯å“質数値ãŒä»˜ã‘られã¦ã„ã¾ã›ã‚“ã®ã§ã€
          デフォルト㮠1.0 (最高値) ã®å„ªå…ˆã«ãªã‚Šã¾ã™ã€‚
          ワイルドカード */* ã¯ä½Žã„優先度 0.01 を与ãˆã‚‰ã‚Œã¦ã„ã‚‹ã®ã§ã€
          明示的ã«ãƒªã‚¹ãƒˆã•れã¦ã„るタイプã«åˆè‡´ã™ã‚‹ variant ãŒãªã„å ´åˆã«ã®ã¿ã€
          ä»–ã®ã‚¿ã‚¤ãƒ—ãŒè¿”ã•れã¾ã™ã€‚</p>
      
          <p>ã‚‚ã— <code>Accept:</code> ヘッダ㌠q 値を全ãå«ã‚“ã§<em>ã„ãªã‘れã°</em>ã€
          望ã¿ã®æŒ™å‹•ã‚’ã™ã‚‹ãŸã‚ã«ã€
          Apache 㯠"*/*" ãŒã‚れ㰠0.01 ã® q 値を設定ã—ã¾ã™ã€‚
          ã¾ãŸã€"type/*" ã®å½¢ã®ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã«ã¯ 0.02 ã® q 値を設定ã—ã¾ã™
          (ã§ã™ã‹ã‚‰ã“れら㯠"*/*" ã®ãƒžãƒƒãƒã‚ˆã‚Šã‚‚優先ã•れã¾ã™)。
          ã‚‚ã— <code>Accept:</code> ヘッダ中ã®ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã®ã©ã‚Œã‹ãŒ q
          値をå«ã‚“ã§ã„れã°ã€ã“れらã®ç‰¹æ®Šãªå€¤ã¯é©å¿œ<em>ã•れãš</em>ã€
          æ­£ã—ã„æƒ…報をé€ã‚‹ãƒ–ラウザã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯æœŸå¾…通りã«
          動作ã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚</p>
      
      
      <h3><a name="exceptions" id="exceptions">言語ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã®ä¾‹å¤–処ç†</a></h3>
      
          <p>Apache 2.0 ã§ã¯æ–°ãŸã«ã€è¨€èªžãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ãŒé©åˆã™ã‚‹ã‚‚ã®ã‚’
          見ã¤ã‘ã‚‹ã®ã«å¤±æ•—ã—ãŸæ™‚ã«ã€å„ªé›…ã«ãƒ•ォールãƒãƒƒã‚¯ã§ãるよã†ãª
          ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒå¹¾ã¤ã‹è¿½åŠ ã•れã¾ã—ãŸã€‚</p>
      
          <p>サーãƒã®ãƒšãƒ¼ã‚¸ã‚’クライアントãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã—ãŸã‘れã©ã‚‚ã€
          ブラウザã®é€ã£ã¦ã㟠<code>Accept-Language</code> ã«åˆè‡´ã™ã‚‹ãƒšãƒ¼ã‚¸ãŒä¸€ã¤ã‚‚
          見ã¤ã‹ã‚‰ãªã‹ã£ãŸå ´åˆã«ã€ã‚µãƒ¼ãƒã¯ "No Acceptable Variant"
          ã‹ "Multiple Choices" レスãƒãƒ³ã‚¹ã‚’クライアントã«è¿”ã—ã¾ã™ã€‚
          ã“れらã®ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’è¿”ã•ãªã„よã†ã«ã€
          ã“ã®ã‚ˆã†ãªå ´åˆã«ã¯ Apache ㌠<code>Accept-Language</code> を無視ã—ã¦ã€
          クライアントã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«æ˜Žç¤ºçš„ã«ã¯åˆè‡´ã—ãªã„ドキュメントを
          æä¾›ã™ã‚‹ã‚ˆã†ã«è¨­å®šã§ãã¾ã™ã€‚
          <code class="directive"><a href="./mod/mod_negotiation.html#forcelanguagepriority">ForceLanguagePriority</a></code>
          ディレクティブã¯ã€ã“れらã®ã‚¨ãƒ©ãƒ¼ã®ä¸€ã¤ã‹ä¸¡æ–¹ã‚’オーãƒãƒ¼ãƒ©ã‚¤ãƒ‰ã™ã‚‹ãŸã‚ã«
          使用ã§ãã¦ã€
          <code class="directive"><a href="./mod/mod_negotiation.html#languagepriority">LanguagePriority</a></code>
          ディレクティブã®å†…容を使ã£ã¦ã‚µãƒ¼ãƒã®åˆ¤æ–­ã‚’代行ã™ã‚‹ã‚ˆã†ã«ã§ãã¾ã™ã€‚</p>
      
          <p>サーãƒã¯ä»–ã«é©åˆã™ã‚‹ã‚‚ã®ãŒè¦‹ã¤ã‹ã‚‰ãªã‘れã°ã€
          言語サブセットã§é©åˆã™ã‚‹ã‚‚ã®ã‚’試ãã†ã¨ã‚‚ã—ã¾ã™ã€‚
          例ãˆã°ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒè‹±å›½è‹±èªžã§ã‚ã‚‹ <code>en-GB</code> 言語ã§
          ドキュメントをリクエストã—ãŸå ´åˆã€ã‚µãƒ¼ãƒã¯ HTTP/1.1
          è¦æ ¼ã§ã¯ã€å˜ã« <code>en</code> ã¨ãƒžãƒ¼ã‚¯ã•れã¦ã„るドキュメントを
          マッãƒã™ã‚‹ã‚‚ã®ã¨ã™ã‚‹ã“ã¨ã¯é€šå¸¸ã¯è¨±ã•れã¦ã„ã¾ã›ã‚“。
          (英国英語ã¯ç†è§£ã§ãã‚‹ã‘ã©ä¸€èˆ¬çš„ãªè‹±èªžã¯ç†è§£ã§ããªã„ã¨ã„ã†èª­ã¿æ‰‹ã¯
          考ãˆã‚‰ã‚Œãªã„ã®ã§ã€Accept-Language ヘッダ㧠<code>en-GB</code> 
          ã‚’å«ã‚“ã§ <code>en</code> ã‚’å«ã¾ãªã„ã®ã¯ã»ã¼ç¢ºå®Ÿã«è¨­å®šã®é–“é•ã„ã§ã‚ã‚‹ã€
          ã¨ã„ã†ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。
          ã§ã™ãŒä¸å¹¸ãªã“ã¨ã«ã€å¤šãã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã§ã¯ãƒ‡ãƒ•ォルトã§
          ã“ã®ã‚ˆã†ãªè¨­å®šã«ãªã£ã¦ã„ã¾ã™ã€‚)
          ã—ã‹ã—ãªãŒã‚‰ã€ä»–ã®è¨€èªžã«ã¯ãƒžãƒƒãƒã›ãšã€"No Acceptable Variants"
          エラーを返ã—ãŸã‚Šã€
          <code class="directive"><a href="./mod/mod_negotiation.html#languagepriority">LanguagePriority</a></code>
          ã«ãƒ•ォールãƒãƒƒã‚¯ã—よã†ã¨ã—ã¦ã„ã‚‹ã¨ãã¯ã€
          サブセット指定を無視ã—ã¦ã€<code>en-GB</code> ã‚’ <code>en</code>
          ã«ãƒžãƒƒãƒã—ã¾ã™ã€‚
          Apache ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®è¨±å®¹è¨€èªžãƒªã‚¹ãƒˆã«æš—é»™ã«
          éžå¸¸ã«ä½Žã„å“質値ã®è¦ªè¨€èªžã‚’加ãˆã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚
          ã—ã‹ã—ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒ "en-GB; q=0.9, fr; q=0.8" ã¨ãƒªã‚¯ã‚¨ã‚¹ãƒˆã—ã¦ã€
          サーãƒãŒ "en" 㨠"fr" ã¨è¨­è¨ˆã•れãŸãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’æŒã£ã¦ã„ã‚‹å ´åˆã¯ã€
          "fr" ドキュメントãŒè¿”ã•れるã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。
          ã“ã®ã‚ˆã†ãªå‡¦ç†ã¯ã€HTTP 1.1 è¦æ ¼ã¨ã®æ•´åˆæ€§ã‚’ç¶­æŒã—ã¦ã€
          é©åˆ‡ã«è¨­å®šã•れãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚‚ãã¡ã‚“ã¨å‹•作ã™ã‚‹ãŸã‚ã«
          å¿…è¦ã§ã™ã€‚</p>
      
          <p>より高度ãªãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ (Cookie や特殊㪠URL パス等)
          ã«ãŠã„ã¦ã‚‚ユーザã®è¨€èªžé¸æŠžã‚’サãƒãƒ¼ãƒˆã™ã‚‹ãŸã‚ã€
          Apache 2.0.47 ã‹ã‚‰ã¯ã€<code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code>
          ãŒ<a href="env.html">環境変数</a> <code>prefer-language</code>
          ã‚’èªè­˜ã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚
          ã“ã®å¤‰æ•°ãŒå­˜åœ¨ã—ã¦ã€é©åˆ‡ãªè¨€èªžã‚¿ã‚°ãŒä»£å…¥ã•れã¦ã„ã‚‹ã®ã§ã‚れã°ã€
          <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> ã¯åˆè‡´ã™ã‚‹ variant
          ã‚’é¸æŠžã—よã†ã¨ã—ã¾ã™ã€‚åˆè‡´ã™ã‚‹ã‚‚ã®ãŒç„¡ã‘れã°ã€
          通常ã®ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³æ‰‹é †ãŒé©ç”¨ã•れã¾ã™ã€‚</p>
      
          <div class="example"><h3>Example</h3><p><code>
            SetEnvIf Cookie "language=(.+)" prefer-language=$1<br />
            Header append Vary cookie 
          </code></p></div>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="extensions" id="extensions">Transparent Content Negotiation
      ã®æ‹¡å¼µ</a></h2> 
      
      <p>Apache 㯠transparent content negotiation プロトコル
      (RFC 2295) を次ã®ã‚ˆã†ã«æ‹¡å¼µã—ã¦ã„ã¾ã™ã€‚
      特定ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã®ã¿ãŒåˆ©ç”¨å¯èƒ½ã§ã‚ã‚‹ variant 
      ã«å°ã‚’付ã‘ã‚‹ãŸã‚ã«ã€æ–°ãŸã« <code>{encoding ..}</code> 
      è¦ç´ ã‚’ variant リスト中ã«ä½¿ã£ã¦ã„ã¾ã™ã€‚
      リスト中ã®ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•れ㟠variant ã‚’èªè­˜ã—ã€
      <code>Accept-Encoding</code> リクエストヘッダã«å¾“ã£ã¦è¨±å®¹ã•れる
      エンコードをもã£ãŸ variant ã¯ã€ã©ã‚Œã§ã‚‚候補 variant
      ã¨ã—ã¦ä½¿ç”¨ã™ã‚‹ã‚ˆã†ã«ã€
      RVSA/1.0 アルゴリズム (RFC 2296) ã®å®Ÿè£…ãŒæ‹¡å¼µã•れã¾ã—ãŸã€‚
      RVSA/1.0 ã®å®Ÿè£…ã§ã¯ã€æœ€é©ãª variant ãŒè¦‹ã¤ã‹ã‚‹ã¾ã§ã€
      計算ã—ãŸå“質数値ã¯å°æ•°ç‚¹ä»¥ä¸‹ 5 æ¡ã¾ã§ä¸¸ã‚ã¾ã›ã‚“。</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="naming" id="naming">リンクã¨åå‰ã®å¤‰æ›ã«é–¢ã™ã‚‹æ³¨æ„点</a></h2>
      
          <p>言語ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã‚’使ã£ã¦ã„ã‚‹å ´åˆã¯ã€
          ファイルãŒä¸€ã¤ä»¥ä¸Šã®æ‹¡å¼µå­ã‚’æŒã¦ã¦ã€
          æ‹¡å¼µå­ã®é †ç•ªã¯é€šå¸¸ã¯è€ƒæ…®ã•れãªã„
          (詳細㯠<a href="mod/mod_mime.html#multipleext">mod_mime</a> 
          ã‚’å‚ç…§) ã®ã§ã€
          å¹¾ã¤ã‹ã®ç•°ãªã‚‹åå‰ã®å¤‰æ›ã‚’é¸ã¹ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚</p>
      
          <p>典型的ãªãƒ•ァイルã§ã¯ã€MIME ã‚¿ã‚¤ãƒ—æ‹¡å¼µå­ (<em>例ãˆã°</em>
          <code>html</code>) ã‚’æŒã£ã¦ã„ã¦ã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°æ‹¡å¼µå­
          (<em>例ãˆã°</em> <code>gz</code>) ã‚’æŒã£ã¦ã„ã‚‹ã‹ã‚‚ã—れãªãã¦ã€
          ã“ã®ãƒ•ァイルã«ç•°ãªã‚‹è¨€èªž variant を用æ„ã—ã¦ã„れã°ã€
          ã‚‚ã¡ã‚ã‚“è¨€èªžæ‹¡å¼µå­ (<em>例ãˆã°</em> <code>en</code>)
          ã‚’æŒã£ã¦ã„ã‚‹ã§ã—ょã†ã€‚</p>
      
          <p>例:</p>
      
          <ul>
            <li>foo.en.html</li>
      
            <li>foo.html.en</li>
      
            <li>foo.en.html.gz</li>
          </ul>
      
          <p>ファイルåã¨ã€ãれã«å¯¾ã—ã¦ä½¿ãˆã‚‹ãƒªãƒ³ã‚¯ã¨ä½¿ãˆãªã„リンクã®ä¾‹ã§ã™:</p>
      
          <table class="bordered">
            
            <tr>
              <th>ファイルå</th>
      
              <th>使ãˆã‚‹ãƒªãƒ³ã‚¯</th>
      
              <th>使ãˆãªã„リンク</th>
            </tr>
      
            <tr>
              <td><em>foo.html.en</em></td>
      
              <td>foo<br />
               foo.html</td>
      
              <td>-</td>
            </tr>
      
            <tr>
              <td><em>foo.en.html</em></td>
      
              <td>foo</td>
      
              <td>foo.html</td>
            </tr>
      
            <tr>
              <td><em>foo.html.en.gz</em></td>
      
              <td>foo<br />
               foo.html</td>
      
              <td>foo.gz<br />
               foo.html.gz</td>
            </tr>
      
            <tr>
              <td><em>foo.en.html.gz</em></td>
      
              <td>foo</td>
      
              <td>foo.html<br />
               foo.html.gz<br />
               foo.gz</td>
            </tr>
      
            <tr>
              <td><em>foo.gz.html.en</em></td>
      
              <td>foo<br />
               foo.gz<br />
               foo.gz.html</td>
      
              <td>foo.html</td>
            </tr>
      
            <tr>
              <td><em>foo.html.gz.en</em></td>
      
              <td>foo<br />
               foo.html<br />
               foo.html.gz</td>
      
              <td>foo.gz</td>
            </tr>
          </table>
      
          <p>上ã®è¡¨ã‚’見ã¦ã€æ‹¡å¼µå­ãªã—ã®ãƒªãƒ³ã‚¯ (<em>例ãˆã°</em> <code>foo</code>) 
          ãŒã„ã¤ã§ã‚‚使ãˆã‚‹ã“ã¨ã«æ°—ãŒä»˜ãã§ã—ょã†ã€‚
          ã“ã®åˆ©ç‚¹ã¯ã€ãƒ‰ã‚­ãƒ¥ãƒ¡ãƒ³ãƒˆã¨ã—ã¦å¿œç­”ã™ã‚‹ãƒ•ァイルã®
          実際ã®ãƒ•ァイルタイプを隠蔽ã—ã¦ã€ãƒªãƒ³ã‚¯ã®å‚照を変更ã™ã‚‹ã“ã¨ãªã
          後ã‹ã‚‰ãƒ•ァイルを変更ã§ãã‚‹ã€
          <em>例ãˆã°</em> <code>html</code> ã‹ã‚‰ <code>shtml</code>
          ã«ã€ã‚ã‚‹ã„㯠<code>cgi</code> ã«å¤‰æ›´ã§ãる点ã§ã™ã€‚</p>
      
          <p>リンク㫠MIME タイプを使ã„ç¶šã‘ãŸã„ (<em>例ãˆã°</em>
          <code>foo.html</code>)時ã¯ã€è¨€èªžæ‹¡å¼µå­ã¯
          (エンコーディング拡張å­ã‚‚ã‚れã°ãれもå«ã‚ã¦)
          MIME タイプ拡張å­ã®å³å´ã«ãªã‘れã°ãªã‚Šã¾ã›ã‚“
          (<em>例ãˆã°</em> <code>foo.html.en</code>)。</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="caching" id="caching">キャッシュã«é–¢ã™ã‚‹æ³¨æ„事項</a></h2>
      
          <p>キャッシュãŒä¸€ã¤ã®è¡¨ç¾ã‚’ä¿å­˜ã—ã¦ã„ã‚‹ã¨ãã¯ã€
          リクエスト URL ã¨é–¢é€£ã¥ã‘られã¦ã„ã¾ã™ã€‚
          次ã«ãã® URL ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã•ã‚ŒãŸæ™‚ã«ã€ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã¯
          ä¿å­˜ã•れã¦ã„る表ç¾ã‚’使用ã§ãã¾ã™ã€‚ã—ã‹ã—ã€
          リソースãŒã‚µãƒ¼ãƒã§ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³å¯èƒ½ã§ã‚れã°ã€
          最åˆã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã§ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã•れã¦ç¶šãキャッシュヒットã§ã¯
          é–“é•ã£ãŸå¿œç­”ã‚’è¿”ã—ã¦ã—ã¾ã†ã¨ã„ã†ã“ã¨ã«ãªã‚Šã‹ã­ã¾ã›ã‚“。
          ã“れを防ããŸã‚ã«ã€Apache ã¯ã‚³ãƒ³ãƒ†ãƒ³ãƒˆãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã®
          後ã«è¿”ã•れãŸå¿œç­”å…¨ã¦ã«ã€HTTP/1.0 クライアントã§ã¯
          キャッシュä¸å¯èƒ½ã®å°ã‚’ã¤ã‘ã¾ã™ã€‚
          ã¾ãŸã€ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã•れãŸå¿œç­”ã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’å¯èƒ½ã«ã™ã‚‹
          HTTP/1.1 ãƒ—ãƒ­ãƒˆã‚³ãƒ«ã®æ©Ÿèƒ½ã‚‚ Apache ã¯ã‚µãƒãƒ¼ãƒˆã—ã¾ã™ã€‚</p>
      
          <p>HTTP/1.0 準拠ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—ã¦ã¯ã€
          (ブラウザã§ã‚ã‚ã†ã¨ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã§ã‚ã‚ã†ã¨)
          ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å—ã‘ãŸå¿œç­”ã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã‚’許ã™ãŸã‚ã«ã€
          <code class="directive"><a href="./mod/mod_negotiation.html#cachenegotiateddocs">CacheNegotiatedDocs</a></code>
          ディレクティブを使用ã§ãã¾ã™ã€‚
          ã“ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€ã‚µãƒ¼ãƒè¨­å®šãƒ•ァイルやãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã«æ›¸ãã“ã¨ãŒã§ãã€
          引数をã¨ã‚Šã¾ã›ã‚“。
          HTTP/1.1 クライアントã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ã¯åŠ¹åŠ›ã‚’æŒã¡ã¾ã›ã‚“。</p>
      
          <p>HTTP/1.1 クライアントã«å¯¾ã—ã¦ã¯ã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³æ¬¡å…ƒ
          を示ã™ãŸã‚ã« <code>Vary</code> HTTP レスãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ã‚’é€ã‚Šã¾ã™ã€‚
          キャッシュã¯ã€ã“れを使ã£ã¦å¾Œç¶šã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—ã¦ãƒ­ãƒ¼ã‚«ãƒ«ã‚³ãƒ”ーã§å¿œç­”ã§ãã‚‹ã‹
          ã©ã†ã‹ã‚’決定ã§ãã¾ã™ã€‚
          ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³æ¬¡å…ƒã¨ã¯é–¢ä¿‚ãªã—ã«ãƒ­ãƒ¼ã‚«ãƒ«ã‚³ãƒ”ーã®ä½¿ç”¨ã‚’優先ã™ã‚‹ã‚ˆã†ã«ã™ã‚‹ã«ã¯ã€
          <code>force-no-vary</code> <a href="env.html#special">環境変数</a>を
          設定ã—ã¾ã™ã€‚</p>
      
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/content-negotiation.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/content-negotiation.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/content-negotiation.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/content-negotiation.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/content-negotiation.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/content-negotiation.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������httpd-2.4.41/docs/manual/configuring.html.tr.utf8���������������������������������������������������0000644�0000000�0000050�00000045105�13447004010�020150� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Yapılandırma Dosyaları - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Yapılandırma Dosyaları</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./de/configuring.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/configuring.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/configuring.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/configuring.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/configuring.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/configuring.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
      <p>Bu belgede Apache HTTP Sunucusunu yapılandırmakta kullanılan dosyalar
      açıklanmıştır.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#main">Ana Yapılandırma Dosyaları</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#syntax">Yapılandırma Dosyalarının Sözdizimi</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#modules">Modüller</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#scope">Yönergelerin Etki Alanı</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#htaccess">.htaccess Dosyaları</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="main" id="main">Ana Yapılandırma Dosyaları</a></h2>
          
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_mime.html">mod_mime</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#include">Include</a></code></li><li><code class="directive"><a href="./mod/mod_mime.html#typesconfig">TypesConfig</a></code></li></ul></td></tr></table>
      
          <p>Apache HTTP Sunucusu düz metin yapılandırma dosyalarına <a href="mod/directives.html">yönergeler</a> yerleştirilerek yapılandırılır.
          Ana yapılandırma dosyasının ismi normalde <code>httpd.conf</code>’tur.
          Bu dosyanın yeri derleme sırasında belirlenir, ancak çalıştırma
          sırasında <code>-f</code> komut satırı seçeneği ile başka bir yer
          belirtilebilir. Ayrıca, <code class="directive"><a href="./mod/core.html#include">Include</a></code>
          yönergesi kullanılarak başka yapılandırma dosyaları da eklenebilir
          ve bu dosyaların isimleri belirtilirken dosya ismi şablonları
          kullanılabilir. Bu dosyaların içine de ana yapılandırma dosyasında
          olduğu gibi her türlü yönerge yerleştirilebilir. Ana yapılandırma
          dosyalarındaki değişiklikler httpd tarafından sadece başlatma veya
          yeniden başlatma sırasında etkin kılınır.</p>
      
          <p>Sunucu ayrıca MIME belge türlerini içeren bir dosya daha okur;
          dosya ismi öntanımlı olarak <code>mime.types</code> olup <code class="directive"><a href="./mod/mod_mime.html#typesconfig">TypesConfig</a></code> yönergesi ile başka bir dosya
          belirtilebilir.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="syntax" id="syntax">Yapılandırma Dosyalarının Sözdizimi</a></h2>
          
      
          <p>httpd yapılandırma dosyalarının her satırında sadece bir yönerge
          bulunur ve bir yönergenin birden fazla satıra yayılması daha iyi
          olacaksa satır katlanabilir; devamı bir alt satırda olan her satırın
          son karakteri “\†(tersbölü) olmalı, satırsonu karakteri ile bu tersbölü
          karakteri arasında başka karakter bulunmamalıdır.</p>
      
          <p>Yönergelerdeki değiştirgeler boşluklarla ayrılır. Eğer bir değiştirge
          kendi içinde boşluklar içeriyorsa tırnak içine alınır.</p>
      
          <p>Yapılandırma dosyalarındaki yönergelerin isimleri harf büyüklüğüne
          duyarlı olduğu halde argümanları genellikle harf büyüklüğüne duyarlı
          deÄŸildir. Diyez (“#â€) karakteri ile baÅŸlayan satırlar açıklama olarak
          ele alınır ve yok sayılırlar. Yapılandırma yönergesi içeren satırlara
          açıklama yerleştirilemez. Yönerge isminden önce yer alan boşluklar
          yoksayılır; bu özellik, okunabilirliği sağlamak için yönergelerin
          girintilenebilmesi olanağını verir. Ayrıca, boş satırlar da
          yoksayılır.</p>
      
      
          <p><code class="directive"><a href="./mod/core.html#define">Define</a></code> ile veya kabuÄŸun ortam
          değişkenleri ile tanımlanmış değişkenlerin değerleri, yapılandırma
          dosyasının satırlarında <code>${VAR}</code> sözdizimi ile kullanılabilir.
          "VAR" geçerli bir değişkenin adı olduğu takdirde, bu değişkenin değeri
          yapılandırma dosyasının bu noktasında yerine konacak ve orada zaten
          değişken yerine değeri varmış gibi işlem kaldığı yerden devam edecektir.
          <code class="directive"><a href="./mod/core.html#define">Define</a></code> ile tanımlanmış değişkenler
          kabuğun ortam değişkenlerinden önceliklidir. "VAR" diye bir değişken yoksa
          <code>${VAR}</code> içindeki karakterler değişmeden kalır ve günlüğe bir
          uyarı çıktılanır. <code class="directive"><a href="./mod/mod_rewrite.html#rewritemap">RewriteMap</a></code>
          sözdizimi ile olası bir karışıklığı önlemek için, değişken isimleri iki
          nokta imini (":") içeremez.</p>
      
          <p>Kabuğun ortam değişkenlerinin, sadece, sunucu başlatılmadan önce
          tanımlanmış değerleri kullanılabilir.  Yapılandırma dosyasının kendisinde
          tanımlanmış ortam değişkenleri (örneğin,
          <code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code> ile), yapılandırma
          dosyasındaki işlemlerde çok daha sonra yer alır.</p>
      
          <p>Yapılandırma dosyasındaki bir satırın uzunluğu, değişken ikamesi
          yapıldıkta, devam satırları eklenditen sonra en fazla 16MiB olabilir. <a href="configuring.html#htaccess">.htaccess dosyalarında</a> azami uzunluk
          8190 karakterdir.</p>
      
          <p>Sunucuyu başlatmadan önce <code>apachectl configtest</code> ile veya
          <code>-t</code> komut satırı seçeneği ile yapılandırma dosyalarınızı
          sözdizimi hatalarına karşı sınayabilirsiniz.</p>
      
          <p>EÅŸleÅŸmeyen <code class="directive"><a href="./mod/core.html#ifdefine">&lt;IfDefine&gt;</a></code>
          ve <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code> bölümleri
          kaldırılmış, tüm açıklamalar, çözümlenmiş ortam değişkenleri ve içerilmiş
          tüm dosyalar dahil yapılandırmanın bir dökümünü almak için
          <code class="module"><a href="./mod/mod_info.html">mod_info</a></code>'nun <code>-DDUMP_CONFIG</code> seçeneğini
          kullanabilirsiniz. Ancak, çıktı yinelenen yönergeler için katıştırılan veya
          geçersiz kılınanları yansıtmayacaktır.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="modules" id="modules">Modüller</a></h2>
          
      
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_so.html">mod_so</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code></li><li><code class="directive"><a href="./mod/mod_so.html#loadmodule">LoadModule</a></code></li></ul></td></tr></table>
      
          <p>httpd modüler yapıda bir sunucudur. Bu, çekirdek sunucunun sadece en
          temel işlevselliği içermesi demektir. Ek özellikler, httpd’ye <a href="mod/">modüller</a> halinde yüklenebilir. Öntanımlı olarak, derleme
          sırasında sunucunun <a href="mod/module-dict.html#Status">temel</a> bir
          modül kümesi içermesi sağlanır. Eğer sunucu  <a href="dso.html">devingen
          yüklenen</a> modülleri kullanmak üzere yapılandırılarak derlenirse modüller
          ayrı olarak derlenip gerektiği zaman <code class="directive"><a href="./mod/mod_so.html#loadmodule">
          LoadModule</a></code> yönergesi kullanılarak yüklenebilir. Aksi takdirde,
          ek modülleri yükleyebilmek veya kaldırabilmek için httpd’nin yeniden
          derlenmesi gerekir. Yapılandırma yönergeleri belli bir modülün varlığına
          dayalı olarak bir <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code>
          bloku içine alınmak suretiyle sunucuya koşullu olarak eklenebilir. Ancak,
          <code class="directive"><a href="./mod/core.html#ifmodule">&lt;IfModule&gt;</a></code> yönergeleri
          gerekli değildir, önemli bir modülün yokluğu gibi durumlarda
          maskelenebilir.</p>
      
          <p>Sunucunun içinde derlenmiş modüllerin listesini görmek için
          <code>-l</code> komut satırı seçeneğini kullanabilirsiniz. Ayrıca,
          <code>-M</code> komut satırı seçeneği ile hangi modüllerin devingen olarak
          yüklendiğini görebilirsiniz.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="scope" id="scope">Yönergelerin Etki Alanı</a></h2>
          
      
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code></li><li><code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code></li></ul></td></tr></table>
      
          <p>Ana yapılandırma dosyasına yerleştirilen yönergeler sunucunun tamamına
          uygulanır. Yapılandırmanızı sunucunun belli bir parçası için değiştirmek
          isterseniz yönergelerinizi <code class="directive"><a href="./mod/core.html#directory">&lt;Directory&gt;</a></code>, <code class="directive"><a href="./mod/core.html#directorymatch">&lt;DirectoryMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#files">&lt;Files&gt;</a></code>, <code class="directive"><a href="./mod/core.html#filesmatch">&lt;FilesMatch&gt;</a></code>, <code class="directive"><a href="./mod/core.html#location">&lt;Location&gt;</a></code> ve <code class="directive"><a href="./mod/core.html#locationmatch">&lt;LocationMatch&gt;</a></code> bölümleri içine yerleştirerek etki
          alanlarını değiştirebilirsiniz. Bu bölümler yönergelerin etkilediği
          alanları dosya sistemininin belli yerleri veya belli URL’lerle sınırlar.
          Yerine göre daha hassas ayarlamalar yapmak için bu bölgeler iç içe de
          kullanılabilir.</p>
      
          <p>httpd, çok sayıda farklı siteyi aynı anda sunabilecek yetenektedir.
          Buna <a href="vhosts/">Sanal Konaklık</a> adı verilir. Yönergelerin etki
          alanları ayrıca <code class="directive"><a href="./mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          bölümleri içine konarak da değiştirilebilir. Böylece belli bir siteye gelen
          isteklere farklı bir uygulama yapılabilir.</p>
      
          <p>Yönergelerin çoğu bu bölümlere yerleştirilebilirse de bazı yönergelerin
          bazı bağlamlarda bir etkisi olmaz. Örneğin, süreç oluşturmayı denetleyen
          yönergeler sadece ana sunucu bağlamına yerleştirilebilir. Hangi yönergenin
          hangi bağlama yerleştirilebileceğini bulmak için yönergenin <a href="mod/directive-dict.html#Context">bağlamına</a> bakınız. Bu konuda daha
          ayrıntılı bilgi edinmek için: <a href="sections.html">Directory, Location ve
          Files Bölümleri Nasıl Çalışır</a>.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="htaccess" id="htaccess">.htaccess Dosyaları</a></h2>
          
      
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#accessfilename">AccessFileName</a></code></li><li><code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code></li></ul></td></tr></table>
      
          <p>httpd yapılandırma sorumluluğunu dağıtmak için site ağaçları içine özel
          dosyalar yerleştirilmesine izin verir. Bu özel dosyalar normalde
          <code>.htaccess</code> dosyaları olmakla birlikte <code class="directive"><a href="./mod/core.html#accessfilename">AccessFileName</a></code> yönergesi kullanılarak rasgele bir isim
          belirtilebilir. <code>.htaccess</code> dosyalarına yerleştirilen yönergeler
          sadece dosyanın bulunduğu dizine ve alt dizinlerine uygulanır.
          <code>.htaccess</code> dosyalarında da ana yapılandırma dosyalarında geçerli
          sözdizimi kullanılır. <code>.htaccess</code> dosyaları her istek gelişinde
          yeniden okunduğundan bu dosyalarda yapılan değişiklikler hemen etkisini
          gösterir.</p>
      
          <p><code>.htaccess</code> dosyalarına hangi yönergelerin
          yerleştirilebileceğini bulmak için yönerge <a href="mod/directive-dict.html#Context">bağlamına</a> bakınız.
          Sunucunun yöneticisi <code>.htaccess</code> dosyalarına hangi yönergelerin
          yerleştirilebileceğini ana yapılandırma dosyalarında
          <code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> yönergesini kullanarak
          belirleyebilir.</p>
      
          <p><code>.htaccess</code> dosyaları hakkında daha ayrıntılı bilgi edinmek
          için <a href="howto/htaccess.html">.htaccess öğreticisi</a>ne bakabilirsiniz.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./de/configuring.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/configuring.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/configuring.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/configuring.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/configuring.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/configuring.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/configuring.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/env.html.tr.utf8�����������������������������������������������������������0000644�0000000�0000050�00000101171�13447004010�016422� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache’de Ortam Değişkenleri - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache’de Ortam Değişkenleri</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./en/env.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/env.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/env.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/env.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/env.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Apache HTTP Sunucusunu etkileyen ortam değişkenleri iki çeşittir.</p>
      
          <p>İlki, işletim sisteminin denetimindeki ortam değişkenleridir. Bu
            değişkenlere değer atama işlemi sunucu başlatılmadan önce yapılır.
            Bunlar yapılandırma dosyalarının içinde kullanılabilir. Ayrıca,
            istenirse PassEnv yönergesi kullanılarak bunlar CGI betiklerine ve
            SSI sayfalarına da aktarılabilir.</p>
      
          <p>İkincisi ise, Apache HTTP Sunucusunun kendi ortam değişkenleridir.
            Bu değişkenlerde saklanan bilgi erişim denetimi, günlük kaydı gibi
            çeşitli işlemleri denetlemekte kullanılabilir. Değişkenler ayrıca, CGI
            betikleri gibi harici uygulamalarla iletişim mekanizması olarak da
            kullanılabilir. Bu belgede bu değişkenler üzerindeki işlemlere ve
            kullanım şekillerine değinilmiştir.</p>
      
          <p>Bu deÄŸiÅŸkenlere <em>ortam deÄŸiÅŸkenleri</em> dense de iÅŸletim sisteminin
            ortam değişkenleri gibi değillerdir. Bunlar sadece Apache ortamında
            geçerli değişkenler olup işletim sisteminin bu değişkenlerden haberi
            olmaz. Sadece CGI betikleri ve SSI sayfaları gibi harici uygulamalar
            tarafından üretilen ortam değişkenleri sistem ortamının değişkenleri
            haline gelirler. İşletim sistemi ortamına çalışmakta olan sunucudan
            müdahale etmek isterseniz işletim sisteminizin kabuğu tarafından sağlanan
            standart ortam müdahale mekanizmalarını kullanmalısınız.</p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#setting">Ortam Değişkenlerinin Atanması</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#using">Ortam Değişkenlerinin Kullanımı</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#special">Özel Amaçlı Ortam Değişkenleri</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#examples">Örnekler</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="setting" id="setting">Ortam Değişkenlerinin Atanması</a></h2>
          
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code></li><li><code class="module"><a href="./mod/mod_env.html">mod_env</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li><li><code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code></li><li><code class="module"><a href="./mod/mod_unique_id.html">mod_unique_id</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_setenvif.html#browsermatch">BrowserMatch</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#browsermatchnocase">BrowserMatchNoCase</a></code></li><li><code class="directive"><a href="./mod/mod_env.html#passenv">PassEnv</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code></li><li><code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code></li><li><code class="directive"><a href="./mod/mod_setenvif.html#setenvifnocase">SetEnvIfNoCase</a></code></li><li><code class="directive"><a href="./mod/mod_env.html#unsetenv">UnsetEnv</a></code></li></ul></td></tr></table>
      
          <h3><a name="basic-manipulation" id="basic-manipulation">Temel Ortamda DeÄŸiÅŸiklik</a></h3>
              
      
              <p>Apache ortamında bir ortam değişkenine müdahale etmenin en temel
                yolu hiçbir koşula tabi olmayan <code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code> yönergesini kullanmaktır. Bu değişkenleri Apache
                başlatılırken sistem ortam değişkenleri haline getirmek için
                <code class="directive"><a href="./mod/mod_env.html#passenv">PassEnv</a></code> yönergesi
                kullanılabilir.</p>
      
          
          <h3><a name="conditional" id="conditional">İsteğe Bağlı Şartlı Atamalar</a></h3>
              
      
              <p>Esnekliği arttırmak için, <code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code> modülü ile
                isteğin özelliklerine uygun olarak her isteğe özel değişkenler
                atayabilmek mümkün kılınmıştır. Örneğin, bir değişken sadece isteği
                yapan tarayıcıya özgü bir değerle veya sadece belli bir başlık
                alanınına bağlı olarak atanabilir. Daha da esnek bir mekanizma,
                ortam değişkeni atamak için <code>[E=...]</code> seçeneğinin
                kullanıldığı <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> modülünün <code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code> yönergesi ile
                sağlanmıştır.</p>
      
          
          <h3><a name="unique-identifiers" id="unique-identifiers">EÅŸsiz Betimleyiciler</a></h3>
              
      
              <p>Son olarak, <code class="module"><a href="./mod/mod_unique_id.html">mod_unique_id</a></code> <code>UNIQUE_ID</code>
                ortam değişkenine her istek için o isteğin çok özel koşullar altında
                tüm diğer istekler arasında eşsizliğini garanti edecek bir değer
                atar.</p>
      
          
          <h3><a name="standard-cgi" id="standard-cgi">Standart CGI DeÄŸiÅŸkenleri</a></h3>
              
      
              <p>Apache yapılandırmasıyla atanan ve kabuğa aktarılan ortam
                deÄŸiÅŸkenlerinden baÅŸka <a href="http://www.ietf.org/rfc/rfc3875">CGI
                Belirtimi</a>nin gerektirdiği istekler hakkında temel bilgileri
                içeren ortam değişkenlerinin CGI betikleri ve SSI sayfalarınca
                atanabilmesi sağlanmıştır.</p>
      
          
          <h3><a name="caveats" id="caveats">Bazı Yetersizlikler</a></h3>
              
      
              <ul>
                <li>Standart CGI değişkenlerini ortam değişkenlerine müdahale
                  yönergelerini kullanarak değiştirmek veya geçersiz kılmak mümkün
                  deÄŸildir.</li>
      
                <li>CGI betiklerini çalıştırmak için <code class="program"><a href="./programs/suexec.html">suexec</a></code>
                  kullanıldığında ortam, CGI betikleri çalıştırılmadan önce
                  <em>güvenilir</em> değişkenler kalacak şekilde temizlenir.
                  <em>Güvenilir</em> değişken listesi <code>suexec.c</code> içinde
                  derleme sırasında tanımlanır.</li>
      
                <li>Taşınabilirlik adına, ortam değişkenlerinin isimleri sadece
                  harfler, rakamlar ve alt çizgi imlerini içerebilir. Bunlara ek
                  olarak ismin ilk karakteri bir rakam olmamalıdır. Değişkenler CGI
                  betiklerine ve SSI sayfalarına aktarılırken bu sınırlamalara uygun
                  olmayan karakterlerin yerlerine alt çizgi imleri konur.</li>
      
                <li>Bir özel durum, CGI betiklerine ve benzerlerine ortam
                  değişkenleri üzerinden aktarılan HTTP başlıklarıdır (aşağıya
                  bakın). Bunlar büyük harfe dönüştürülür ve sadece tireler
                  altçizgilere dönüştürülür. Eğer HTTP başlığı geçersiz karakter
                  içeriyorsa başlığın tamamı yoksayılır. Böyle bir durumda ne
                  yapılacağı öğrenmek için <a href="#fixheader">aşağıya</a>
                  bakın.</li>
      
                <li>İsteklerin işleme konması sırasında <code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code> yönergesi geç çalıştırılır,
                  yani <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code> ve
                  <code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code> gibi
                  yönergeler <code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code> ile
                  atanan değişken değerlerini görmezler.</li>
      
                <li><code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code> ile dizin listesi oluşturulması
                  veya bir <code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code>
                  için yol aranması gibi bir dahili <a class="glossarylink" href="./glossary.html#subrequest" title="sözlüğe bakınız">alt
                  istek</a> için sunucu yol araması yaparken isteklere özgü
                  ortam değişkenleri alt istekler tarafından miras alınMAZ. Buna ek
                  olarak, <code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code> modülünün devreye girdiği API
                  fazlarından dolayı yapılan alt isteklerde
                  <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code> yönergeleri
                  ayrı ayrı değerlendirilMEZ.</li>
            </ul>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="using" id="using">Ortam Değişkenlerinin Kullanımı</a></h2>
          
      
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td><ul><li><code class="module"><a href="./mod/mod_authz_host.html">mod_authz_host</a></code></li><li><code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code></li><li><code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code></li><li><code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code></li><li><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></li><li><code class="module"><a href="./mod/mod_log_config.html">mod_log_config</a></code></li><li><code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code></li></ul></td><td><ul><li><code class="directive"><a href="./mod/mod_authz_core.html#require">Require</a></code></li><li><code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code></li><li><code class="directive"><a href="./mod/mod_access_compat.html#deny">Deny</a></code></li><li><code class="directive"><a href="./mod/mod_ext_filter.html#extfilterdefine">ExtFilterDefine</a></code></li><li><code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code></li><li><code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code></li><li><code class="directive"><a href="./mod/mod_rewrite.html#rewriterule">RewriteRule</a></code></li></ul></td></tr></table>
      
          <h3><a name="cgi-scripts" id="cgi-scripts">CGI Betikleri</a></h3>
              
      
              <p>Ortam değişkenlerinin başlıca amaçlarından biri CGI betikleriyle
                iletişim kurmaktır. Yukarıda bahsedildiği gibi CGI betiklerine
                aktarılan ortam Apache yapılandırmasında atanan değişkenlere ek
                olarak istek hakkında standart temel bilgileri de içerir. Bu konuda
                ayrıntılı bilgi edinmek için <a href="howto/cgi.html">CGI
                Öğreticisi</a>ne bakabilirsiniz.</p>
      
          
          <h3><a name="ssi-pages" id="ssi-pages">SSI Sayfaları</a></h3>
              
      
              <p>Sunucu tarafında <code class="module"><a href="./mod/mod_include.html">mod_include</a></code> modülünün
                <code>INCLUDES</code> süzgeci ile yorumlanan SSI sayfalarında ortam
                değişkenleri <code>echo</code> elemanı ile basılabilir ve sayfayı
                isteğin özelliklerine uygun olarak oluşturmak için ortam
                değişkenleri akış denetim elemanları içinde kullanılabilir. Apache
                ayrıca, yukarıda bahsedildiği gibi standart CGI ortam değişkenli SSI
                sayfalarını da sağlayabilmektedir. Daha ayrıntılı bilgi edinmek için
                <a href="howto/ssi.html">SSI Öğreticisi</a>ne bakabilirsiniz.</p>
      
          
          <h3><a name="access-control" id="access-control">EriÅŸim Denetimi</a></h3>
              
      
              <p><code>allow from env=</code> ve <code>deny from env=</code>
                yönergeleri sayesinde ortam değişkenlerine dayalı olarak sunucuya
                erişim denetim altında tutulabilir. Bunlar <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code> yönergesi ile birlikte
                kullanılmak suretiyle sunucuya erişim isteğin özelliklerine bağlı
                olarak daha esnek bir tarzda denetlenebilir. Örneğin, belli bir
                tarayıcının sunucuya erişimi bu yönergelerle engellenebilir.</p>
      
          
          <h3><a name="logging" id="logging">Şartlı Günlük Kaydı</a></h3>
              
      
              <p>Ortam değişkenleri <code class="directive"><a href="./mod/mod_log_config.html#logformat">LogFormat</a></code> yönergesinin <code>%e</code> seçeneği
                kullanılarak erişim günlüğüne kaydedilebilir. Bundan başka,
                <code class="directive"><a href="./mod/mod_log_config.html#customlog">CustomLog</a></code> yönergesi
                sayesinde isteklerin günlüğe kaydedilip kaydedilmeyeceğine ortam
                değişkenlerine dayalı olarak karar verilmesi sağlanabilir. Bunlar
                <code class="directive"><a href="./mod/mod_setenvif.html#setenvif">SetEnvIf</a></code> yönergesi ile
                birlikte kullanılmak suretiyle günlük kayıtları isteğin
                özelliklerine bağlı olarak daha esnek bir tarzda denetlenebilir.
                Örneğin, <code>gif</code> uzantılı dosyalar için yapılan isteklerin
                günlüğe kaydedilmemesi veya sadece alt ağınızın dışından gelen
                isteklerin günlüğe kaydedilmesini isteyebilirsiniz.</p>
      
          
          <h3><a name="response-headers" id="response-headers">Şartlı Yanıt Başlıkları</a></h3>
              
      
              <p><code class="directive"><a href="./mod/mod_headers.html#header">Header</a></code> yönergesi belli
                bir yanıt başlığının istemciye gönderilip gönderilmeyeceğine belli
                bir ortam değişkeninin varlığına bakarak karar vermek için
                kullanılabilir. Böylece örneğin, belli bir başlığın istemciye
                gönderilmesine istemciden belli bir başlığın alınıp alınmadığına
                bağlı olarak karar verilebilir.</p>
      
          
      
          <h3><a name="external-filter" id="external-filter">Harici Süzgeçlerin Etkinleştirilmesi</a></h3>
              
      
              <p><code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code> tarafından yapılandırılan harici
                süzgeçler <code class="directive"><a href="./mod/mod_ext_filter.html#extfilterdefine">ExtFilterDefine</a></code> yönergesinin <code>disableenv=</code> ve
                <code>enableenv=</code> seçenekleri kullanılarak bir ortam
                değişkenine bağlı olarak etkinleştirilebilir.</p>
          
      
          <h3><a name="url-rewriting" id="url-rewriting">URL Kurgulaması</a></h3>
              
      
              <p><code class="directive"><a href="./mod/mod_rewrite.html#rewritecond">RewriteCond</a></code>
                yönergesinin <em>SınamaDizgesi</em> olarak kullanılan
                <code>%{ENV:<em>değişken</em>}</code> biçemi
                <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code> yeniden yazma motorunun ortam
                değişkenlerine bağlı kararlar almasını mümkün kılar. Yalnız şuna
                dikkat ediniz: <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>’ta <code>ENV:</code>
                öneki kullanılmadan belirtilen değişkenler ortam değişkenleri
                değillerdir. Onlar <code class="module"><a href="./mod/mod_rewrite.html">mod_rewrite</a></code>’a özgü diğer
                modüllerden erişilemeyen özel değişkenlerdir.</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="special" id="special">Özel Amaçlı Ortam Değişkenleri</a></h2>
          
      
              <p>Birlikte çalışabilirlik sorunları Apache’nin belli istemcilerle
                veri alışverişi sırasında davranışını değiştirmesini gerektirebilir.
                Genellikle <code class="directive"><a href="./mod/mod_env.html#setenv">SetEnv</a></code> ve
                <code class="directive"><a href="./mod/mod_env.html#passenv">PassEnv</a></code> yönergelerinden
                baÅŸka <code class="directive"><a href="./mod/mod_setenvif.html#browsermatch">BrowserMatch</a></code>
                gibi yönergelerle ortam değişkenleri atanarak bunu sağlayan
                mekanizmaların olabildiğince esnek davranabilmesi sağlanabilir.</p>
      
          <h3><a name="downgrade" id="downgrade"><code>downgrade-1.0</code></a></h3>
              
      
              <p>İstek, daha yüksek bir HTTP protokolüyle yapılmış olsa bile
                HTTP/1.0 isteği olarak ele alınır.</p>
      
          
          <h3><a name="force-gzip" id="force-gzip"><code>force-gzip</code></a></h3>
              
                <p><code>DEFLATE</code> süzgeci etkinse tarayıcının tercih ettiği
                  kodlama koşulsuz olarak yoksayılarak sıkıştırılmış çıktı
                  gönderilir.</p>
          
          <h3><a name="force-no-vary" id="force-no-vary"><code>force-no-vary</code></a></h3>
              
      
              <p>İstemciye gönderilmeden önce yanıttan <code>Vary</code> alanının
                çıkarılmasına sebep olur. Bazı istemciler bu alanı gerektiği gibi
                yorumlayamazlar, bu değişken atanarak bu sorunla karşılaşılmamaya
                çalışılır. Bu değişkenin atanması ayrıca
                <strong>force-response-1.0</strong> değişkeninin de atanmasına sebep
                olur.</p>
      
          
          <h3><a name="force-response" id="force-response"><code>force-response-1.0</code></a></h3>
              
      
            <p>HTTP/1.0 isteği yapan istemcilere HTTP/1.0 yanıtı verilmesini zorunlu
              kılar. AOL vekillerindeki bir sorun nedeniyle gerçeklenmiştir. Bazı
              HTTP/1.0 istemciler HTTP/1.1 yanıtlarında doğru davranmayabilirler; bu
              değişken atanarak bunların sorunları giderilebilir.</p>
      
          
      
          <h3><a name="gzip-only-text-html" id="gzip-only-text-html"><code>gzip-only-text/html</code></a></h3>
              
      
              <p>Bu değişkene "1" değeri atandığında <code>text/html</code>’den
                farklı içerik türleri için <code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code> modülü
                tarafından sağlanan <code>DEFLATE</code>  çıktı süzgeci iptal
                edilir. Sıkıştırılmış olarak saklanan dosyalar kullanıyorsanız bu
                değişkeni <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> modülü de dikkate alır
                (kimliğine bakarak sadece gzip için değil, tüm kodlamalar için bunu
                yapar).</p>
          
      
          <h3><a name="no-gzip" id="no-gzip"><code>no-gzip</code></a></h3>
      
              <p>Bu değişken atandığında, <code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code> modülünün
                <code>DEFLATE</code> süzgeci kapatılır ve
                <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> modülü kodlanmış kaynak teslimatını
                reddeder.</p>
      
          
      
          <h3><a name="no-cache" id="no-cache">no-cache</a></h3>
              <p><em>2.2.12 sürümünden beri kullanılabilmektedir.</em></p>
      
              <p>Atandığı takdirde, <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> artık
              önbelleklenebilecek yanıtları kaydetmeyecektir. Bu ortam değişkeni bir
              yanıtın halihazırda mevcut bir isteğe sunulmak üzere önbellekte olup
              olmadığından etkilenmez.</p>
      
          
      
          <h3><a name="nokeepalive" id="nokeepalive"><code>nokeepalive</code></a></h3>
              
      
              <p>Bu değişken atandığında, <code class="directive"><a href="./mod/core.html#keepalive">KeepAlive</a></code> yönergesi iptal edilir.</p>
      
          
      
          <h3><a name="prefer-language" id="prefer-language"><code>prefer-language</code></a></h3>
              
      
              <p>DeÄŸer olarak <code>en</code>, <code>ja</code> veya
                <code>x-klingon</code> gibi bir dil kısaltması verilerek atanmışsa
                <code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code> modülünün normal davranışını
                değiştirerek belirtilen dilde bir teslimat yapılmaya çalışılır.
                Böyle bir belge yoksa normal <a href="content-negotiation.html">uzlaşım</a> süreci uygulanır.</p>
      
          
      
          <h3><a name="redirect-carefully" id="redirect-carefully"><code>redirect-carefully</code></a></h3>
              
      
              <p>İstemciye bir yönlendirme gönderirken sunucuyu daha dikkatli olmaya
                zorlar. Bu genellikle istemcinin yönlendirmeler konusunda sorunlu
                olduğu bilindiği takdirde yararlı olur. Bu değişkenin gerçeklenme
                sebebi, dizin kaynaklarına yönlendirmeler için DAV yöntemlerini
                kullanan Microsoft'un WebFolders yazılımındaki bir sorundur.</p>
      
          
      
         <h3><a name="suppress-error-charset" id="suppress-error-charset"><code>suppress-error-charset</code></a></h3>
             
      
          <p><em>2.0.54 sürümünden beri mevcuttur.</em></p>
      
          <p>Apache bir isteğe bir yönlendirme ile yanıt verdiğinde istemci
            yönlendirmeyi kendiliğinden yapmaz veya yapamazsa kullanıcıya yanıtla
            birlikte gönderilen metin gösterilir. Apache normal olarak bu metni
            ISO-8859-1 ile kodlar.</p>
      
          <p>Ancak, yönlendirmenin yapıldığı sayfa farklı bir karakter kümesine
            sahipse bazı tarayıcı sürümleri asıl sayfanın karakter kodlaması yerine
            yönlendirmenin kodlamasını kullanmaya çalışırlar. Bu özellikle Yunanca
            gibi dillerde hedef sayfanın hatalı yorumlanmasına yol açar.</p>
      
          <p>Bu ortam değişkeninin atanması Apache’nin yönlendirme için karakter
            kümesi belirtmemesini sağlamak suretiyle hatalı tarayıcıların hedef
            sayfayı yanlış karakter kodlamasıyla yorumlamasını önler.</p>
      
          <div class="warning">
            <h3>Güvenlik Uyarısı</h3>
      
            <p>Hata sayfalarının bir karakter kümesi belirtilmeksizin yollanması,
              HTTP/1.1 belirtimine uymayan ve karakter kümesini içeriğe bakarak
              tahmin etmeye çalışan tarayıcılarda (MSIE) karşı siteden betik
              saldırısı yorumuna sebep olabilir.  Girdi verisindeki UTF-7 içerik
              (istek betimleyici gibi) karşı siteden betik saldırılarını engellemek
              için tasarlanmış normal önceleme mekanizmalarıyla öncelenmeyeceği için
              böyle tarayıcılar UTF-7 karakter kodlaması kullanılarak kolayca
              aldatılabilir.</p>
          </div>
      
         
      
         <h3><a name="proxy" id="proxy"><code>force-proxy-request-1.0</code>,
          <code>proxy-nokeepalive</code>, <code>proxy-sendchunked</code> ve
          <code>proxy-sendcl</code>, <code>proxy-chain-auth</code>,
          <code>proxy-interim-response</code>, <code>proxy-initial-not-pooled</code>
          </a></h3>
      
         <p>Bu yönergeler <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> modülünün normal protokol
          davranışını değiştirirler. Daha ayrıntılı bilgi için
          <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> ve <code class="module"><a href="./mod/mod_proxy_http.html">mod_proxy_http</a></code>
          belgelerine bakınız.</p>
         
      
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="examples" id="examples">Örnekler</a></h2>
          
      
          <h3><a name="fixheader" id="fixheader">Bozuk başlıkların CGI betiklerine aktarılması</a></h3>
            
      
            <p>2.4 sürümünden itibaren, <code class="module"><a href="./mod/mod_cgi.html">mod_cgi</a></code> modülü ve diğer
              modüllerde HTTP başlıklarının ortam değişkenlerine dönüştürülmesi
              bağlamında Apache daha seçici davranmaktadır. Önce HTTP başlığındaki
              geçersiz karakterlerin tamamı altçizgilere dönüştürülür. Bu, başlık
              zerki yoluyla yapılan karşı-site-betiklerini-çalıştırma saldırısını
              önlemeye yöneliktir. (Bakınız: <a href="http://events.ccc.de/congress/2007/Fahrplan/events/2212.en.html">Unusual Web Bugs</a>, slide 19/20).</p>
      
            <p>Bozuk başlıklar gönderdiği halde bunlara dokunulmamasını gerektiren
              bir istemciniz varsa, <code class="module"><a href="./mod/mod_setenvif.html">mod_setenvif</a></code> ve
              <code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code> modüllerinin sunduğu yapıyı örnekteki gibi
              kullanarak bu sorunun üstesinden gelebilirsiniz:</p>
      
            <pre class="prettyprint lang-config">#
      # Aşağıdaki satırlarla bir istemcinin gönderdiği bozuk
      # Accept_Encoding başlıklarının istenildiği gibi işlenmesi
      # saÄŸlanabilir.
      #
      SetEnvIfNoCase ^Accept.Encoding$ ^(.*)$ fix_accept_encoding=$1
      RequestHeader set Accept-Encoding %{fix_accept_encoding}e env=fix_accept_encoding</pre>
      
      
          
      
          <h3><a name="misbehaving" id="misbehaving">Protokolü yanlış yorumlayan tarayıcıların davranışlarının
              deÄŸiÅŸtirilmesi</a></h3>
              
      
              <p>Önceki sürümlerde bilinen istemci davranışlarına karşı önlem olarak
                aşağıdaki satırların <code>httpd.conf</code> içinde bulunması
                önerilirdi. Fakat, böyle tarayıcılar artık ortalıkta görünmediğinden
                bu yapılandırmaya da artık gerek kalmamıştır.</p>
      
              <pre class="prettyprint lang-config">#
      # Aşağıdaki yönergeler normal HTTP yanıt davranışını değiştirirler.
      # İlk yönerge Netscape 2.x ve kendini öyle gösteren tarayıcılar için
      # kalıcı bağlantıyı (keepalive) iptal eder. İkinci yönerge ise HTTP/1.1
      # protokolü bozuk olan ve 301/302 durum kodlu yönlendirme yanıtları
      # kullanıldığında kalıcı bağlantıları gerektiği gibi desteklemeyen
      # Microsoft Internet Explorer 4.0b2 içindir.
      #
      BrowserMatch "Mozilla/2" nokeepalive
      BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
      
      #
      # Aşağıdaki yönergeler HTTP/1.0 yanıtlarından başkasına yabancı olan
      # tarayıcılara HTTP/1.1 yanıtlarının gönderilmesini iptal eder.
      #
      BrowserMatch "RealPlayer 4\.0" force-response-1.0
      BrowserMatch "Java/1\.0" force-response-1.0
      BrowserMatch "JDK/1\.0" force-response-1.0</pre>
      
      
          
          <h3><a name="no-img-log" id="no-img-log">Resim isteklerinin erişim günlüğüne kaydedilmemesi</a></h3>
              
      
              <p>Bu örnek resim isteklerinin erişim günlüğüne yazılmasını engeller.
                Bu örnek değiştirilerek belli dizinlerin veya belli konaklardan
                gelen isteklerin günlüğe kaydedilmesini engellemek amacıyla da
                kullanılabilir.</p>
      
              <pre class="prettyprint lang-config">SetEnvIf Request_URI \.gif image-request
      SetEnvIf Request_URI \.jpg image-request
      SetEnvIf Request_URI \.png image-request
      CustomLog logs/access_log common env=!image-request</pre>
      
      
      
          
          <h3><a name="image-theft" id="image-theft">“Resim Hırsızlığı†için önlem alınması</a></h3>
              
      
              <p>Bu örnekte sunucunuzda bulunmayan sayfalarda sunucunuzdaki
                resimlerin kullanılmasının nasıl önleneceği gösterilmiştir. Bu
                yapılandırma önerilmemekle birlikte nadir durumlarda işe yarar. Tüm
                resimlerin <code>/siteler/resimler</code> dizini altında tutulduğu
                varsayılmıştır.</p>
      
              <pre class="prettyprint lang-config">SetEnvIf Referer "^http://www\.example\.com/" local_referal
      # Referrer bilgisi göndermeyen tarayıcılara izin verelim
      SetEnvIf Referer "^$" local_referal
      &lt;Directory "/siteler/resimler"&gt;
        Require env local_referal
      &lt;/Directory&gt;</pre>
      
      
              <p>Bu teknik hakkında daha ayrıntılı bilgi edinmek için ServerWatch
                üzerindeki  "<a href="http://www.serverwatch.com/tutorials/article.php/1132731">Diğer sitelerin sizin resimlerinizle donatılmasını engellemek</a>"
                belgesine bakınız.</p>
          
        </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./en/env.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/env.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/env.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/env.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/env.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/env.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/server-wide.html.tr.utf8���������������������������������������������������0000644�0000000�0000050�00000030640�13447004010�020070� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Sunucu Genelinde Yapılandırma - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Sunucu Genelinde Yapılandırma</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./en/server-wide.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/server-wide.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/server-wide.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/server-wide.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/server-wide.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Bu belgede <code class="module"><a href="./mod/core.html">core</a></code> modülü ile sağlanan ve  sunucunun temel
          işlemlerini yapılandırmakta kullanılan yönergelerden bazıları
          açıklanmıştır.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#identification">Sunucu KimliÄŸi</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#locations">Dosyaların Yerleri</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#resource">Özkaynak Kullanımının Sınırlanması</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#implementation">Gerçeklenimle ilgili Seçimler</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="identification" id="identification">Sunucu KimliÄŸi</a></h2>
          
      
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#servername">ServerName</a></code></li><li><code class="directive"><a href="./mod/core.html#serveradmin">ServerAdmin</a></code></li><li><code class="directive"><a href="./mod/core.html#serversignature">ServerSignature</a></code></li><li><code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code></li><li><code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code></li><li><code class="directive"><a href="./mod/core.html#usecanonicalphysicalport">UseCanonicalPhysicalPort</a></code></li></ul></td></tr></table>
      
          <p><code class="directive"><a href="./mod/core.html#serveradmin">ServerAdmin</a></code> ve <code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code> yönergeleri, hata iletileri gibi
            sunucu tarafından üretilen belgelerde sunucu ile ilgili hangi bilgilerin
            sunulacağını belirlerler. <code class="directive"><a href="./mod/core.html#servertokens">ServerTokens</a></code> yönergesi sunucunun HTTP yanıt başlığı
            alanının değerini belirler.</p>
      
          <p><code class="directive"><a href="./mod/core.html#servername">ServerName</a></code>,
            <code class="directive"><a href="./mod/core.html#usecanonicalname">UseCanonicalName</a></code> ve
            <code class="directive"><a href="./mod/core.html#usecanonicalphysicalport">UseCanonicalPhysicalPort</a></code>
            yönergeleri, sunucu tarafından, özüne yönelik URL’leri nasıl
            oluşturacağını saptamak için kullanılır. Örneğin bir istemci bir dizin
            isteğinde bulunurken URL’nin sonuna bölü çizgisi eklemese bile
            Apache httpd’nin istemciyi bölü çizgisi ile bitirilmiş URL yoluna
            yönlendirmesi gerekir; böylece istemci belge içindeki göreli
            bağlantıları doğru şekilde çözümleyebilir.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="locations" id="locations">Dosyaların Yerleri</a></h2>
          
      
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/mpm_common.html#coredumpdirectory">CoreDumpDirectory</a></code></li><li><code class="directive"><a href="./mod/core.html#documentroot">DocumentRoot</a></code></li><li><code class="directive"><a href="./mod/core.html#errorlog">ErrorLog</a></code></li><li><code class="directive"><a href="./mod/core.html#mutex">Mutex</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#scoreboardfile">ScoreBoardFile</a></code></li><li><code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code></li></ul></td></tr></table>
      
          <p>Bu yönergeler Apache httpd’nin doğru işlem yapması için gereksinim
            duyduğu çeşitli dosyaların yerlerini belirlerler. Bölü çizgisi (/) ile
            başlamayan dosya yolları kullanıldığında bu dosyaların yerlerinin
            <code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code> yönergesinde belirtilen
            dizine göre belirtildiği varsayılır; root olmayan kullanıcılar
            tarafından yazılabilen dosya yollarına dosya yerleştirmemeye dikkat
            ediniz. Bu konuda daha ayrıntılı bilgi edinmek için <a href="misc/security_tips.html#serverroot">güvenlik ipuçları</a>
            belgesine bakınız.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="resource" id="resource">Özkaynak Kullanımının Sınırlanması</a></h2>
          
      
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#limitrequestbody">LimitRequestBody</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestfields">LimitRequestFields</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestfieldsize">LimitRequestFieldsize</a></code></li><li><code class="directive"><a href="./mod/core.html#limitrequestline">LimitRequestLine</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitcpu">RLimitCPU</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitmem">RLimitMEM</a></code></li><li><code class="directive"><a href="./mod/core.html#rlimitnproc">RLimitNPROC</a></code></li><li><code class="directive"><a href="./mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code></li></ul></td></tr></table>
      
          <p><code>LimitRequest*</code> yönergeleri, Apache httpd’nin istemcilerden
            gelen istekleri okumak için kullanacağı özkaynakların miktarları ile
            ilgili sınırlamalar koymak için kullanılırlar. Bu değerleri sınırlamak
            suretiyle bazı hizmet reddi saldırılarının etkileri azaltılabilir.</p>
      
          <p><code>RLimit*</code> yönergeleri ise Apache httpd’nin çocuk süreçleri
            tarafından çatallanabilen özkaynakların miktarlarını sınırlamakta
            kullanılırlar. Özellikle de CGI betikleri ve SSI çalıştırma komutları
            tarafından kullanılan özkaynakları denetlemekte kullanılırlar.</p>
      
          <p><code class="directive"><a href="./mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code> yönergesi
            bazı platformlarda yığıt boyutunu denetim altında tutmak için
            kullanılır.</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="implementation" id="implementation">Gerçeklenimle ilgili Seçimler</a></h2>
          
      
          <table class="related"><tr><th>İlgili Modüller</th><th>İlgili Yönergeler</th></tr><tr><td /><td><ul><li><code class="directive"><a href="./mod/core.html#mutex">Mutex</a></code></li></ul></td></tr></table>
      
          <p><code class="directive">Mutex</code> yönergesi, <a class="glossarylink" href="./glossary.html#apr" title="sözlüğe bakınız">APR</a>'nin
            öntanımlı seçimi ile ilgili işlevsel ve başarımsal sorunlarına çare
            bulmada ilgili gerçeklenimi mutex'ler için değiştirmekte
            kullanılabilir.</p>
        </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./en/server-wide.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/server-wide.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/server-wide.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/server-wide.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/server-wide.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/server-wide.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/�����������������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273357�014256� 5����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/index.html.fr.utf8�����������������������������������������������������0000644�0000000�0000050�00000012166�13412755316�017547� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache et le Chiffrement SSL/TLS - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache et le Chiffrement SSL/TLS</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/ssl/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../tr/ssl/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/ssl/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
      <p>Le module <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> du serveur HTTP Apache fournit une
      interface avec la bibliothèque <a href="http://www.openssl.org/">OpenSSL</a>, qui permet d'effectuer un
      chiffrement fort en s'appuyant sur les protocoles "Couche Points d'accès
      Sécurisés" (Secure Sockets Layer - SSL) et "Sécurité de la Couche Transport"
      (Transport Layer Security - TLS).</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#documentation">Documentation</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#mod-ssl">mod_ssl</a></li>
      </ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="documentation" id="documentation">Documentation</a></h2>
      <ul>
      <li><a href="ssl_howto.html">Comment configurer SSL ?</a></li>
      <li><a href="ssl_intro.html">Introduction à SSL</a></li>
      <li><a href="ssl_compat.html">Compatibilité</a></li>
      <li><a href="ssl_faq.html">Foire aux questions</a></li>
      <li><a href="../glossary.html">Glossaire</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mod-ssl" id="mod-ssl">mod_ssl</a></h2>
      <p>La documentation complète sur les directives et les variables
      d'environnement fournies par ce module se trouve dans la
      <a href="../mod/mod_ssl.html">documentation de référence de mod_ssl</a>.
      </p>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/ssl/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../tr/ssl/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/ssl/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/index.html.en����������������������������������������������������������0000644�0000000�0000050�00000011740�13412755316�016652� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache SSL/TLS Encryption - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache SSL/TLS Encryption</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/ssl/" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../tr/ssl/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/ssl/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
      <p>The Apache HTTP Server module <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>
      provides an interface to the <a href="http://www.openssl.org/">OpenSSL</a> library, which provides
      Strong Encryption using the Secure Sockets Layer and Transport Layer
      Security protocols.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#documentation">Documentation</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#mod-ssl">mod_ssl</a></li>
      </ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="documentation" id="documentation">Documentation</a></h2>
      <ul>
      <li><a href="ssl_howto.html">mod_ssl Configuration How-To</a></li>
      <li><a href="ssl_intro.html">Introduction To SSL</a></li>
      <li><a href="ssl_compat.html">Compatibility</a></li>
      <li><a href="ssl_faq.html">Frequently Asked Questions</a></li>
      <li><a href="../glossary.html">Glossary</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mod-ssl" id="mod-ssl">mod_ssl</a></h2>
      <p>Extensive documentation on the directives and environment variables
      provided by this module is provided in the <a href="../mod/mod_ssl.html">mod_ssl reference documentation</a>.
      </p>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/ssl/" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../tr/ssl/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/ssl/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������httpd-2.4.41/docs/manual/ssl/ssl_compat.html��������������������������������������������������������0000644�0000000�0000050�00000000330�13362070302�017264� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: ssl_compat.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: ssl_compat.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/ssl_howto.html.fr.utf8�������������������������������������������������0000644�0000000�0000050�00000062032�13412755316�020456� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Chiffrement fort SSL/TLS : Mode d'emploi - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">SSL/TLS</a></div><div id="page-content"><div id="preamble"><h1>Chiffrement fort SSL/TLS : Mode d'emploi</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/ssl/ssl_howto.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_howto.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
      
      <p>Ce document doit vous permettre de démarrer et de faire fonctionner
      une configuration de base. Avant de vous lancer dans l'application de
      techniques avancées, il est fortement recommandé de lire le reste
      de la documentation SSL afin d'en comprendre le fonctionnement de
      manière plus approfondie.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#configexample">Exemple de configuration basique</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ciphersuites">Suites de chiffrement et mise en application de la sécurité
      de haut niveau</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ocspstapling">Agrafage OCSP</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#accesscontrol">Authentification du client et contrôle d'accès</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#logging">Journalisation</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configexample" id="configexample">Exemple de configuration basique</a></h2>
      
      
      <p>Votre configuration SSL doit comporter au moins les directives
      suivantes :</p>
      
      <pre class="prettyprint lang-config">LoadModule ssl_module modules/mod_ssl.so
      
      Listen 443
      &lt;VirtualHost *:443&gt;
          ServerName www.example.com
          SSLEngine on
          SSLCertificateFile "/path/to/www.example.com.cert"
          SSLCertificateKeyFile "/path/to/www.example.com.key"
      &lt;/VirtualHost&gt;</pre>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ciphersuites" id="ciphersuites">Suites de chiffrement et mise en application de la sécurité
      de haut niveau</a></h2>
      
      <ul>
      <li><a href="#onlystrong">Comment créer un serveur SSL
      qui n'accepte que le chiffrement fort ?</a></li>
      <li><a href="#strongurl">Comment créer un serveur qui accepte tous les types de
      chiffrement en général, mais exige un chiffrement fort pour pouvoir
      accéder à une URL particulière ?</a></li>
      </ul>
      
      
      <h3><a name="onlystrong" id="onlystrong">Comment créer un serveur SSL qui n'accepte
      que le chiffrement fort ?</a></h3>
      
          <p>Les directives suivantes ne permettent que les
          chiffrements de plus haut niveau :</p>
          <pre class="prettyprint lang-config">SSLCipherSuite HIGH:!aNULL:!MD5</pre>
      
      
       <p>Avec la configuration qui suit, vous indiquez une préférence pour
       des algorityhmes de chiffrement spécifiques optimisés en matière de
       rapidité (le choix final sera opéré par mod_ssl, dans la mesure ou le
       client les supporte) :</p>
      
          <pre class="prettyprint lang-config">SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5
      SSLHonorCipherOrder on</pre>
      
      
      
      <h3><a name="strongurl" id="strongurl">Comment créer un serveur qui accepte tous les types de
      chiffrement en général, mais exige un chiffrement fort pour pouvoir
      accéder à une URL particulière ?</a></h3>
      
          <p>Dans ce cas bien évidemment, une directive <code class="directive"><a href="../mod/mod_ssl.html#sslciphersuite">SSLCipherSuite</a></code> au niveau du serveur principal
          qui restreint le choix des suites de chiffrement aux versions les plus
          fortes ne conviendra pas. <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> peut cependant être
          reconfiguré au sein de blocs <code>Location</code> qui permettent
          d'adapter la configuration générale à un répertoire spécifique ;
          <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> peut alors forcer automatiquement une
          renégociation des paramètres SSL pour parvenir au but recherché.
          Cette configuration peut se présenter comme suit :</p>
          <pre class="prettyprint lang-config"># soyons très tolérant a priori
      SSLCipherSuite ALL:!aNULL:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP:+eNULL
      
      &lt;Location "/strong/area"&gt;
      # sauf pour https://hostname/strong/area/ et ses sous-répertoires
      # qui exigent des chiffrements forts
      SSLCipherSuite HIGH:!aNULL:!MD5
      &lt;/Location&gt;</pre>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ocspstapling" id="ocspstapling">Agrafage OCSP</a></h2>
      
      
      <p>Le protocole de contrôle du statut des certificats en ligne (Online
      Certificate Status Protocol - OCSP) est un mécanisme permettant de
      déterminer si un certificat a été révoqué ou non, et l'agrafage OCSP en
      est une fonctionnalité particulière par laquelle le serveur, par exemple
      httpd et mod_ssl, maintient une liste des réponses OCSP actuelles pour
      ses certificats et l'envoie aux clients qui communiquent avec lui. La
      plupart des certificats contiennent l'adresse d'un répondeur OCSP maintenu
      par l'Autorité de Certification (CA) spécifiée, et mod_ssl peut requérir
      ce répondeur pour obtenir une réponse signée qui peut être envoyée aux
      clients qui communiquent avec le serveur.</p>
      
      <p>L'agrafage OCSP est la méthode la plus performante pour obtenir le
      statut d'un certificat car il est disponible au niveau du serveur, et le
      client n'a donc pas besoin d'ouvrir une nouvelle connexion vers
      l'autorité de certification. Autres avantages de l'absence de
      communication entre le client et l'autorité de certification :
      l'autorité de certification n'a pas accès à l'historique de navigation
      du client, et l'obtention du statut du certificat est plus efficace car
      elle n'est plus assujettie à une surcharge éventuelle des serveurs de
      l'autorité de certification.</p>
      
      <p>La charge du serveur est moindre car la réponse qu'il a obtenu du
      répondeur OCSP peut être réutilisée par tous les clients qui utilisent
      le même certificat dans la limite du temps de validité de la réponse.</p>
      
      <p>Une fois le support général SSL correctement configuré, l'activation
      de l'agrafage OCSP ne requiert que des modifications mineures
      à la configuration de httpd et il suffit en général de l'ajout de ces
      deux directives :</p>
      
          <pre class="prettyprint lang-config">SSLUseStapling On
      SSLStaplingCache "shmcb:ssl_stapling(32768)"</pre>
      
      
      <p>Ces directives sont placées de façon à ce qu'elles aient une portée
      globale (et particulièrement en dehors de toute section VirtualHost), le
      plus souvent où sont placées les autres directives de configuration
      globales SSL, comme <code>conf/extra/httpd-ssl.conf</code> pour les
      installations de httpd à partir des sources, ou
      <code>/etc/apache2/mods-enabled/ssl.conf</code> pour Ubuntu ou Debian,
      etc...</p>
      
      <p>Le chemin spécifié par la directive
      <code class="directive">SSLStaplingCache</code> (par exemple <code>logs/</code>)
      doit être le même que celui spécifié par la directive
      <code class="directive">SSLSessionCache</code>. Ce chemin est relatif au chemin
      spécifié par la directive <code class="directive">ServerRoot</code>.</p>
      
      <p>Cette directive <code class="directive">SSLStaplingCache</code> particulière
      nécessite le chargement du module <code class="module"><a href="../mod/mod_socache_shmcb.html">mod_socache_shmcb</a></code> (à
      cause du préfixe <code>shmcb</code> de son argument). Ce module est en
      général déjà activé pour la directive
      <code class="directive">SSLSessionCache</code>, ou pour des modules autres que
      <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>. Si vous activez un cache de session SSL
      utilisant un mécanisme autre que <code class="module"><a href="../mod/mod_socache_shmcb.html">mod_socache_shmcb</a></code>,
      utilisez aussi ce mécanisme alternatif pour la directive
      <code class="directive">SSLStaplingCache</code>. Par exemple :</p>
      
          <pre class="prettyprint lang-config">SSLSessionCache "dbm:ssl_scache"
      SSLStaplingCache "dbm:ssl_stapling"</pre>
      
      
      <p>Vous pouvez utiliser la commande openssl pour vérifier que votre
      serveur envoie bien une réponse OCSP :</p>
      
      <pre>$ openssl s_client -connect www.example.com:443 -status -servername www.example.com
      ...
      OCSP response: 
      ======================================
      OCSP Response Data:
          OCSP Response Status: successful (0x0)
          Response Type: Basic OCSP Response
      ...
          Cert Status: Good
      ...</pre>
      
      <p>Les sections suivantes explicitent les situations courantes qui
      requièrent des modifications supplémentaires de la configuration. Vous
      pouvez aussi vous référer au manuel de référence de
      <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>.</p>
      
      <h3>Si l'on utilise plus que quelques certificats SSL pour le serveur</h3>
      
      <p>Les réponses OCSP sont stockées dans le cache d'agrafage SSL. Alors
      que les réponses ont une taille de quelques centaines à quelques
      milliers d'octets, mod_ssl supporte des réponses d'une taille jusqu'à
      environ 10 ko. Dans notre cas, le nombre de certificats est conséquent
      et la taille du cache (32768 octets dans l'exemple ci-dessus) doit être
      augmentée. En cas d'erreur lors du stockage d'une réponse, le
      message AH01929 sera enregistré dans le journal.</p>
      
      
      <h3>Si le certificat ne spécifie pas de répondeur OCSP, ou si une
      adresse différente doit être utilisée</h3>
      
      <p>Veuillez vous référer à la documentation de la directive <code class="directive"><a href="../mod/mod_ssl.html#sslstaplingforceurl">SSLStaplingForceURL</a></code>.</p>
      
      <p>Vous pouvez vérifier si un certificat spécifie un répondeur OCSP en
      utilisant la commande openssl comme suit :</p>
      
      <pre>$ openssl x509 -in ./www.example.com.crt -text | grep 'OCSP.*http'
      OCSP - URI:http://ocsp.example.com</pre>
      
      <p>Si un URI OCSP est fourni et si le serveur web peut communiquer
      directement avec lui sans passer par un mandataire, aucune modification
      supplémentaire de la configuration n'est requise. Notez que les règles
      du pare-feu qui contrôlent les connexions sortantes en provenance du
      serveur web devront peut-être subir quelques ajustements.</p>
      
      <p>Si aucun URI OCSP n'est fourni, contactez votre autorité de
      certification pour savoir s'il en existe une ; si c'est le
      cas, utilisez la directive <code class="directive"><a href="../mod/mod_ssl.html#sslstaplingforceurl">SSLStaplingForceURL</a></code> pour la spécifier dans
      la configuration du serveur virtuel qui utilise le certificat.</p>
      
      
      <h3>Si plusieurs serveurs virtuels sont configurés pour utiliser SSL
      et si l'agrafage OCSP doit être désactivé pour certains d'entre eux</h3>
      
      
      <p>Ajoutez la directive <code>SSLUseStapling Off</code> à la
      configuration des serveurs virtuels pour lesquels l'agrafage OCSP doit
      être désactivé.</p>
      
      
      <h3>Si le répondeur OCSP est lent ou instable</h3>
      
      <p>De nombreuses directives permettent de gérer les temps de réponse et
      les erreurs. Référez-vous à la documentation de <code class="directive"><a href="../mod/mod_ssl.html#sslstaplingfaketrylater">SSLStaplingFakeTryLater</a></code>, <code class="directive"><a href="../mod/mod_ssl.html#sslstaplingrespondertimeout">SSLStaplingResponderTimeout</a></code>, et <code class="directive"><a href="../mod/mod_ssl.html#sslstaplingreturnrespondererrors">SSLStaplingReturnResponderErrors</a></code>.</p>
      
      
      <h3>Si mod_ssl enregistre l'erreur AH02217 dans le journal</h3>
      
      <pre>AH02217: ssl_stapling_init_cert: Can't retrieve issuer certificate!</pre>
      <p>Afin de pouvoir supporter l'agrafage OCSP lorsqu'un certificat de
      serveur particulier est utilisé, une chaîne de certification pour ce
      certificat doit être spécifiée. Si cela n'a pas été fait lors de
      l'activation de SSL, l'erreur AH02217 sera enregistrée lorsque
      l'agrafage OCSP sera activé, et les clients qui utilisent le certificat
      considéré ne recevront pas de réponse OCSP.</p>
      
      <p>Veuillez vous référer à la documentation des directives <code class="directive"><a href="../mod/mod_ssl.html#sslcertificatechainfile">SSLCertificateChainFile</a></code> et <code class="directive"><a href="../mod/mod_ssl.html#sslcertificatefile">SSLCertificateFile</a></code> pour spécifier une
      chaîne de certification.</p>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="accesscontrol" id="accesscontrol">Authentification du client et contrôle d'accès</a></h2>
      
      <ul>
      <li><a href="#allclients">Comment forcer les clients
      à s'authentifier à l'aide de certificats ?</a></li>
      <li><a href="#arbitraryclients">Comment forcer les clients
      à s'authentifier à l'aide de certificats pour une URL particulière,
      mais autoriser quand-même tout client anonyme
      à accéder au reste du serveur ?</a></li>
      <li><a href="#certauthenticate">Comment n'autoriser l'accès à une URL
      particulière qu'aux clients qui possèdent des certificats, mais autoriser
      l'accès au reste du serveur à tous les clients ?</a></li>
      <li><a href="#intranet">Comment imposer HTTPS avec chiffrements forts,
      et soit authentification de base, soit possession de certificats clients,
      pour l'accès à une partie de l'Intranet, pour les clients en
      provenance de l'Internet ?</a></li>
      </ul>
      
      <h3><a name="allclients" id="allclients">Comment forcer les clients
      à s'authentifier à l'aide de certificats ?
      </a></h3>
      
      
          <p>Lorsque vous connaissez tous vos clients (comme c'est en général le cas
          au sein d'un intranet d'entreprise), vous pouvez imposer une
          authentification basée uniquement sur les certificats. Tout ce dont vous
          avez besoin pour y parvenir est de créer des certificats clients signés par
          le certificat de votre propre autorité de certification
          (<code>ca.crt</code>), et d'authentifier les clients à l'aide de ces
          certificats.</p>
          <pre class="prettyprint lang-config"># exige un certificat client signé par le certificat de votre CA
      # contenu dans ca.crt
      SSLVerifyClient require
      SSLVerifyDepth 1
      SSLCACertificateFile "conf/ssl.crt/ca.crt"</pre>
      
      
      
      <h3><a name="arbitraryclients" id="arbitraryclients">Comment forcer les clients
      à s'authentifier à l'aide de certificats pour une URL particulière,
      mais autoriser quand-même tout client anonyme
      à accéder au reste du serveur ?</a></h3>
      
      
      <p>Pour forcer les clients à s'authentifier à l'aide de certificats pour une
      URL particulière, vous pouvez utiliser les fonctionnalités de reconfiguration
      de <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> en fonction du répertoire :</p>
      
          <pre class="prettyprint lang-config">SSLVerifyClient none
      SSLCACertificateFile "conf/ssl.crt/ca.crt"
      
      &lt;Location "/secure/area"&gt;
      SSLVerifyClient require
      SSLVerifyDepth 1
      &lt;/Location&gt;</pre>
      
      
      
      <h3><a name="certauthenticate" id="certauthenticate">Comment n'autoriser l'accès à une URL
      particulière qu'aux clients qui possèdent des certificats, mais autoriser
      l'accès au reste du serveur à tous les clients ?</a></h3>
      
      
          <p>La clé du problème consiste à vérifier si une partie du certificat
          client correspond à ce que vous attendez. Cela signifie en général
          consulter tout ou partie du nom distinctif (DN), afin de vérifier s'il
          contient une chaîne connue. Il existe deux méthodes pour y parvenir ;
          on utilise soit le module <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code>, soit la
          directive <code class="directive"><a href="../mod/mod_ssl.html#sslrequire">SSLRequire</a></code>.</p>
      
          <p>La méthode du module <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code> est en général
          incontournable lorsque les certificats ont un contenu arbitraire, ou
          lorsque leur DN ne contient aucun champ connu
          (comme l'organisation, etc...). Dans ce cas, vous devez construire une base
          de données de mots de passe contenant <em>tous</em> les clients
          autorisés, comme suit :</p>
      
          <pre class="prettyprint lang-config">SSLVerifyClient      none
      SSLCACertificateFile "conf/ssl.crt/ca.crt"
      SSLCACertificatePath "conf/ssl.crt"
      
      &lt;Directory "/usr/local/apache2/htdocs/secure/area"&gt;
      SSLVerifyClient      require
          SSLVerifyDepth       5
          SSLOptions           +FakeBasicAuth
          SSLRequireSSL
          AuthName             "Snake Oil Authentication"
          AuthType             Basic
          AuthBasicProvider    file
          AuthUserFile         "/usr/local/apache2/conf/httpd.passwd"
          Require              valid-user
      &lt;/Directory&gt;</pre>
      
          
      
          <p>Le mot de passe utilisé dans cet exemple correspond à la chaîne de
          caractères "password" chiffrée en DES. Voir la documentation de la
          directive <code class="directive"><a href="../mod/mod_ssl.html#ssloptions">SSLOptions</a></code> pour
          plus de détails.</p>
      
          <div class="example"><h3>httpd.passwd</h3><pre>/C=DE/L=Munich/O=Snake Oil, Ltd./OU=Staff/CN=Foo:xxj31ZMTZzkVA
      /C=US/L=S.F./O=Snake Oil, Ltd./OU=CA/CN=Bar:xxj31ZMTZzkVA
      /C=US/L=L.A./O=Snake Oil, Ltd./OU=Dev/CN=Quux:xxj31ZMTZzkVA</pre></div>
      
          <p>Lorsque vos clients font tous partie d'une même hiérarchie, ce qui
          apparaît dans le DN, vous pouvez les authentifier plus facilement en
          utilisant la directive <code class="directive"><a href="../mod/mod_ssl.html#sslrequire">SSLRequire</a></code>, comme suit :</p>
      
      
          <pre class="prettyprint lang-config">SSLVerifyClient      none
      SSLCACertificateFile "conf/ssl.crt/ca.crt"
      SSLCACertificatePath "conf/ssl.crt"
      
      &lt;Directory "/usr/local/apache2/htdocs/secure/area"&gt;
        SSLVerifyClient      require
        SSLVerifyDepth       5
        SSLOptions           +FakeBasicAuth
        SSLRequireSSL
        SSLRequire       %{SSL_CLIENT_S_DN_O}  eq "Snake Oil, Ltd." \
                     and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"}
      &lt;/Directory&gt;</pre>
      
      
      
      <h3><a name="intranet" id="intranet">Comment imposer HTTPS avec chiffrements forts,
      et soit authentification de base, soit possession de certificats clients,
      pour l'accès à une partie de l'Intranet, pour les clients en
      provenance de l'Internet ? Je souhaite quand-même autoriser l'accès en HTTP
      aux clients de l'intranet.</a></h3>
      
      
         <p>On suppose dans ces exemples que les clients de l'intranet ont des
         adresses IP dans la gamme 192.168.1.0/24, et que la partie de l'intranet
         à laquelle vous voulez autoriser l'accès depuis l'Internet est
         <code>/usr/local/apache2/htdocs/subarea</code>. Ces lignes de configuration
         doivent se trouver en dehors de votre hôte virtuel HTTPS, afin qu'elles
         s'appliquent à la fois à HTTP et HTTPS.</p>
      
          <pre class="prettyprint lang-config">SSLCACertificateFile "conf/ssl.crt/company-ca.crt"
      
      &lt;Directory "/usr/local/apache2/htdocs"&gt;
      #   En dehors de subarea, seul l'accès depuis l'intranet est
      #   autorisé
          Require              ip 192.168.1.0/24
      &lt;/Directory&gt;
      
      &lt;Directory "/usr/local/apache2/htdocs/subarea"&gt;
      #   Dans subarea, tout accès depuis l'intranet est autorisé
      #   mais depuis l'Internet, seul l'accès par HTTPS + chiffrement fort + Mot de passe
      #   ou HTTPS + chiffrement fort + certificat client n'est autorisé.
      
      #   Si HTTPS est utilisé, on s'assure que le niveau de chiffrement est fort.
      #   Autorise en plus les certificats clients comme une alternative à
      #   l'authentification basique.
          SSLVerifyClient      optional
          SSLVerifyDepth       1
          SSLOptions           +FakeBasicAuth +StrictRequire
          SSLRequire           %{SSL_CIPHER_USEKEYSIZE} &gt;= 128
          
          #   ON oblige les clients venant d'Internet à utiliser HTTPS
          RewriteEngine        on
          RewriteCond          "%{REMOTE_ADDR}" "!^192\.168\.1\.[0-9]+$"
          RewriteCond          "%{HTTPS}" "!=on"
          RewriteRule          "." "-" [F]
          
          #   On permet l'accès soit sur les critères réseaux, soit par authentification Basique
          Satisfy              any
          
          #   Contrôle d'accès réseau
          Require              ip 192.168.1.0/24
          
          #   Configuration de l'authentification HTTP Basique
          AuthType             basic
          AuthName             "Protected Intranet Area"
          AuthBasicProvider    file
          AuthUserFile         "conf/protected.passwd"
          Require              valid-user
      &lt;/Directory&gt;</pre>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="logging" id="logging">Journalisation</a></h2>
          
      
          <p><code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> peut enregistrer des informations de
          débogage très verbeuses dans le journal des erreurs, lorsque sa
          directive <code class="directive"><a href="../mod/core.html#loglevel">LogLevel</a></code> est définie
          à des niveaux de trace élevés. Par contre, sur un serveur très
          sollicité, le niveau <code>info</code> sera probablement déjà trop
          élevé. Souvenez-vous que vous pouvez configurer la directive
          <code class="directive"><a href="../mod/core.html#loglevel">LogLevel</a></code> par module afin de
          pourvoir à vos besoins.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/ssl/ssl_howto.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_howto.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/ssl/ssl_howto.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/ssl_faq.html.en��������������������������������������������������������0000644�0000000�0000050�00000141450�13412755316�017175� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>SSL/TLS Strong Encryption: FAQ - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">SSL/TLS</a></div><div id="page-content"><div id="preamble"><h1>SSL/TLS Strong Encryption: FAQ</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/ssl/ssl_faq.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_faq.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
      <blockquote>
      <p>The wise man doesn't give the right answers,
      he poses the right questions.</p>
      <p class="cite">-- <cite>Claude Levi-Strauss</cite></p>
      
      </blockquote>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#installation">Installation</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#aboutconfig">Configuration</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#aboutcerts">Certificates</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#aboutssl">The SSL Protocol</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#support">mod_ssl Support</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="installation" id="installation">Installation</a></h2>
      <ul>
      <li><a href="#mutex">Why do I get permission errors related to
      SSLMutex when I start Apache?</a></li>
      <li><a href="#entropy">Why does mod_ssl stop with the error "Failed to
      generate temporary 512 bit RSA private key" when I start Apache?</a></li>
      </ul>
      
      <h3><a name="mutex" id="mutex">Why do I get permission errors related to
              SSLMutex when I start Apache?</a></h3>
          <p>Errors such as ``<code>mod_ssl: Child could not open
          SSLMutex lockfile /opt/apache/logs/ssl_mutex.18332 (System error follows)
          [...] System: Permission denied (errno: 13)</code>'' are usually
          caused by overly restrictive permissions on the <em>parent</em> directories.
          Make sure that all parent directories (here <code>/opt</code>,
          <code>/opt/apache</code> and <code>/opt/apache/logs</code>) have the x-bit
          set for, at minimum, the UID under which Apache's children are running (see
          the <code class="directive"><a href="../mod/mod_unixd.html#user">User</a></code> directive).</p>
      
      
      <h3><a name="entropy" id="entropy">Why does mod_ssl stop with the error
              "Failed to generate temporary 512 bit RSA private key" when I start
              Apache?</a></h3>
          <p>Cryptographic software needs a source of unpredictable data
          to work correctly. Many open source operating systems provide
          a "randomness device" that serves this purpose (usually named
          <code>/dev/random</code>). On other systems, applications have to
          seed the OpenSSL Pseudo Random Number Generator (PRNG) manually with
          appropriate data before generating keys or performing public key
          encryption. As of version 0.9.5, the OpenSSL functions that need
          randomness report an error if the PRNG has not been seeded with
          at least 128 bits of randomness.</p>
          <p>To prevent this error, <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> has to provide
          enough entropy to the PRNG to allow it to work correctly. This can
          be done via the <code class="directive"><a href="../mod/mod_ssl.html#sslrandomseed">SSLRandomSeed</a></code>
          directive.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="aboutconfig" id="aboutconfig">Configuration</a></h2>
      <ul>
      <li><a href="#parallel">Is it possible to provide HTTP and HTTPS from
      the same server?</a></li>
      <li><a href="#ports">Which port does HTTPS use?</a></li>
      <li><a href="#httpstest">How do I speak HTTPS manually for testing
      purposes?</a></li>
      <li><a href="#hang">Why does the connection hang when I connect to my
      SSL-aware Apache server?</a></li>
      <li><a href="#refused">Why do I get ``Connection Refused'' errors, when
      trying to access my newly installed Apache+mod_ssl server via HTTPS?</a></li>
      <li><a href="#envvars">Why are the <code>SSL_XXX</code> variables not
      available to my CGI &amp; SSI scripts?</a></li>
      <li><a href="#relative">How can I switch between HTTP and HTTPS in
      relative hyperlinks?</a></li>
      </ul>
      
      <h3><a name="parallel" id="parallel">Is it possible to provide HTTP and HTTPS
              from the same server?</a></h3>
          <p>Yes. HTTP and HTTPS use different server ports (HTTP binds to
          port 80, HTTPS to port 443), so there is no direct conflict between
          them. You can either run two separate server instances bound to
          these ports, or use Apache's elegant virtual hosting facility to
          create two virtual servers, both served by the same instance of Apache
          - one responding over HTTP to requests on port 80, and the other
          responding over HTTPS to requests on port 443.</p>
      
      
      <h3><a name="ports" id="ports">Which port does HTTPS use?</a></h3>
      <p>You can run HTTPS on any port, but the standards specify port 443, which
          is where any HTTPS compliant browser will look by default. You can force
          your browser to look on a different port by specifying it in the URL. For
          example, if your server is set up to serve pages over HTTPS on port 8080,
          you can access them at <code>https://example.com:8080/</code></p>
      
      
      <h3><a name="httpstest" id="httpstest">How do I speak HTTPS manually for testing purposes?</a></h3>
       <p>While you usually just use</p>
      
          <div class="example"><p><code>$ telnet localhost 80<br />
          GET / HTTP/1.0</code></p></div>
      
          <p>for simple testing of Apache via HTTP, it's not so easy for
          HTTPS because of the SSL protocol between TCP and HTTP. With the
          help of OpenSSL's <code>s_client</code> command, however, you can
          do a similar check via HTTPS:</p>
      
          <div class="example"><p><code>$ openssl s_client -connect localhost:443 -state -debug<br />
          GET / HTTP/1.0</code></p></div>
      
          <p>Before the actual HTTP response you will receive detailed
          information about the SSL handshake. For a more general command
          line client which directly understands both HTTP and HTTPS, can
          perform GET and POST operations, can use a proxy, supports byte
          ranges, etc. you should have a look at the nifty
          <a href="http://curl.haxx.se/">cURL</a> tool. Using this, you can
          check that Apache is responding correctly to requests via HTTP and
          HTTPS as follows:</p>
      
          <div class="example"><p><code>$ curl http://localhost/<br />
          $ curl https://localhost/</code></p></div>
      
      
      <h3><a name="hang" id="hang">Why does the connection hang when I connect
          to my SSL-aware Apache server?</a></h3>
      
      <p>This can happen when you try to connect to a HTTPS server (or virtual
          server) via HTTP (eg, using <code>http://example.com/</code> instead of
          <code>https://example.com</code>). It can also happen when trying to
          connect via HTTPS to a HTTP server (eg, using
          <code>https://example.com/</code> on a server which doesn't support HTTPS,
          or which supports it on a non-standard port). Make sure that you're
          connecting to a (virtual) server that supports SSL.</p>
      
      <h3><a name="refused" id="refused">Why do I get ``Connection Refused'' messages,
          when trying to access my newly installed Apache+mod_ssl server via HTTPS?</a></h3>
      <p>
          This error can be caused by an incorrect configuration.
          Please make sure that your <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> directives match your
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
          directives. If all else fails, please start afresh, using the default
          configuration provided by <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>.</p>
      
      
      <h3><a name="envvars" id="envvars">Why are the <code>SSL_XXX</code> variables
          not available to my CGI &amp; SSI scripts?</a></h3>
      <p>Please make sure you have ``<code>SSLOptions +StdEnvVars</code>''
          enabled for the context of your CGI/SSI requests.</p>
      
      
      <h3><a name="relative" id="relative">How can I switch between HTTP and HTTPS in relative
          hyperlinks?</a></h3>
      
      <p>Usually, to switch between HTTP and HTTPS, you have to use
          fully-qualified hyperlinks (because you have to change the URL
          scheme).  Using <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code> however, you can
          manipulate relative hyperlinks, to achieve the same effect.</p>
          <pre class="prettyprint lang-config">RewriteEngine on
      RewriteRule   "^/(.*)_SSL$"   "https://%{SERVER_NAME}/$1" [R,L]
      RewriteRule   "^/(.*)_NOSSL$" "http://%{SERVER_NAME}/$1"  [R,L]</pre>
      
      
          <p>This rewrite ruleset lets you use hyperlinks of the form
          <code>&lt;a href="document.html_SSL"&gt;</code>, to switch to HTTPS
          in a relative link. (Replace SSL with NOSSL to switch to HTTP.)</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="aboutcerts" id="aboutcerts">Certificates</a></h2>
      <ul>
      <li><a href="#keyscerts">What are RSA Private Keys, CSRs and
      Certificates?</a></li>
      <li><a href="#startup">Is there a difference on startup between
      a non-SSL-aware Apache and an SSL-aware Apache?</a></li>
      <li><a href="#selfcert">How do I create a self-signed SSL
      Certificate for testing purposes?</a></li>
      <li><a href="#realcert">How do I create a real SSL Certificate?</a></li>
      <li><a href="#ownca">How do I create and use my own Certificate
      Authority (CA)?</a></li>
      <li><a href="#passphrase">How can I change the pass-phrase on my private
      key file?</a></li>
      <li><a href="#removepassphrase">How can I get rid of the pass-phrase
      dialog at Apache startup time?</a></li>
      <li><a href="#verify">How do I verify that a private key matches its
      Certificate?</a></li>
      <li><a href="#pemder">How can I convert a certificate from PEM to DER
      format?</a></li>
      <li><a href="#gid">Why do browsers complain that they cannot
      verify my server certificate?</a></li>
      </ul>
      
      <h3><a name="keyscerts" id="keyscerts">What are RSA Private Keys, CSRs and Certificates?</a></h3>
      <p>An RSA private key file is a digital file that you can use to decrypt
          messages sent to you. It has a public component which you distribute (via
          your Certificate file) which allows people to encrypt those messages to
          you.</p>
          <p>A Certificate Signing Request (CSR) is a digital file which contains
          your public key and your name. You send the CSR to a Certifying Authority
          (CA), who will convert it into a real Certificate, by signing it.</p>
          <p>A Certificate contains your
          RSA public key, your name, the name of the CA, and is digitally signed by
          the CA. Browsers that know the CA can verify the signature on that
          Certificate, thereby obtaining your RSA public key. That enables them to
          send messages which only you can decrypt.</p>
          <p>See the <a href="ssl_intro.html">Introduction</a> chapter for a general
          description of the SSL protocol.</p>
      
      
      <h3><a name="startup" id="startup">Is there a difference on startup between
          a non-SSL-aware Apache and an SSL-aware Apache?</a></h3>
      <p>Yes. In general, starting Apache with
          <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> built-in is just like starting Apache
          without it. However, if you have a passphrase on your SSL private
          key file, a startup dialog will pop up which asks you to enter the
          pass phrase.</p>
      
          <p>Having to manually enter the passphrase when starting the server
          can be problematic - for example, when starting the server from the
          system boot scripts. In this case, you can follow the steps
          <a href="#removepassphrase">below</a> to remove the passphrase from
          your private key. Bear in mind that doing so brings additional security
          risks - proceed with caution!</p>
      
      
      <h3><a name="selfcert" id="selfcert">How do I create a self-signed SSL
      Certificate for testing purposes?</a></h3>
          <ol>
          <li>Make sure OpenSSL is installed and in your <code>PATH</code>.<br />
          <br />
          </li>
          <li>Run the following command, to create <code>server.key</code> and
              <code>server.crt</code> files:<br />
              <code><strong>$ openssl req -new -x509 -nodes -out server.crt
                              -keyout server.key</strong></code><br />
              These can be used as follows in your <code>httpd.conf</code>
              file:
              <pre class="prettyprint lang-config">SSLCertificateFile    "/path/to/this/server.crt"
      SSLCertificateKeyFile "/path/to/this/server.key"</pre>
      
          </li>
          <li>It is important that you are aware that this
              <code>server.key</code> does <em>not</em> have any passphrase.
              To add a passphrase to the key, you should run the following
              command, and enter &amp; verify the passphrase as requested.<br />
              <p><code><strong>$ openssl rsa -des3 -in server.key -out
              server.key.new</strong></code><br />
              <code><strong>$ mv server.key.new server.key</strong></code><br /></p>
              Please backup the <code>server.key</code> file, and the passphrase
              you entered, in a secure location.
          </li>
          </ol>
      
      
      <h3><a name="realcert" id="realcert">How do I create a real SSL Certificate?</a></h3>
      <p>Here is a step-by-step description:</p>
          <ol>
          <li>Make sure OpenSSL is installed and in your <code>PATH</code>.
          <br />
          <br />
          </li>
          <li>Create a RSA private key for your Apache server
             (will be Triple-DES encrypted and PEM formatted):<br />
             <br />
             <code><strong>$ openssl genrsa -des3 -out server.key 2048</strong></code><br />
             <br />
             Please backup this <code>server.key</code> file and the
             pass-phrase you entered in a secure location.
             You can see the details of this RSA private key by using the command:<br />
      
             <br />
             <code><strong>$ openssl rsa -noout -text -in server.key</strong></code><br />
             <br />
             If necessary, you can also create a decrypted PEM version (not
             recommended) of this RSA private key with:<br />
             <br />
             <code><strong>$ openssl rsa -in server.key -out server.key.unsecure</strong></code><br />
             <br />
      
          </li>
          <li>Create a Certificate Signing Request (CSR) with the server RSA private
             key (output will be PEM formatted):<br />
             <br />
             <code><strong>$ openssl req -new -key server.key -out server.csr</strong></code><br />
             <br />
             Make sure you enter the FQDN ("Fully Qualified Domain Name") of the
             server when OpenSSL prompts you for the "CommonName", i.e. when you
             generate a CSR for a website which will be later accessed via
             <code>https://www.foo.dom/</code>, enter "www.foo.dom" here.
             You can see the details of this CSR by using<br />
      
             <br />
             <code><strong>$ openssl req -noout -text -in server.csr</strong></code><br />
             <br />
          </li>
          <li>You now have to send this Certificate Signing Request (CSR) to
             a Certifying Authority (CA) to be signed. Once the CSR has been
             signed, you will have a real Certificate, which can be used by
             Apache. You can have a CSR signed by a commercial CA, or you can
             create your own CA to sign it.<br />
             Commercial CAs usually ask you to post the CSR into a web form,
             pay for the signing, and then send a signed Certificate, which
             you can store in a server.crt file.<br />
      
             For details on how to create your own CA, and use this to sign
             a CSR, see <a href="#ownca">below</a>.<br />
      
             Once your CSR has been signed, you can see the details of the
             Certificate as follows:<br />
             <br />
             <code><strong>$ openssl x509 -noout -text -in server.crt</strong></code><br />
      
          </li>
          <li>You should now have two files: <code>server.key</code> and
          <code>server.crt</code>. These can be used as follows in your
          <code>httpd.conf</code> file:
             <pre class="prettyprint lang-config">SSLCertificateFile    "/path/to/this/server.crt"
      SSLCertificateKeyFile "/path/to/this/server.key"</pre>
      
             The <code>server.csr</code> file is no longer needed.
          </li>
      
          </ol>
      
      
      <h3><a name="ownca" id="ownca">How do I create and use my own Certificate Authority (CA)?</a></h3>
          <p>The short answer is to use the <code>CA.sh</code> or <code>CA.pl</code>
          script provided by OpenSSL. Unless you have a good reason not to,
          you should use these for preference. If you cannot, you can create a
          self-signed certificate as follows:</p>
      
          <ol>
          <li>Create a RSA private key for your server
             (will be Triple-DES encrypted and PEM formatted):<br />
             <br />
             <code><strong>$ openssl genrsa -des3 -out server.key 2048</strong></code><br />
             <br />
             Please backup this <code>server.key</code> file and the
             pass-phrase you entered in a secure location.
             You can see the details of this RSA private key by using the
             command:<br />
             <br />
             <code><strong>$ openssl rsa -noout -text -in server.key</strong></code><br />
             <br />
             If necessary, you can also create a decrypted PEM version (not
             recommended) of this RSA private key with:<br />
             <br />
             <code><strong>$ openssl rsa -in server.key -out server.key.unsecure</strong></code><br />
             <br />
          </li>
          <li>Create a self-signed certificate (X509 structure)
             with the RSA key you just created (output will be PEM formatted):<br />
             <br />
             <code><strong>$ openssl req -new -x509 -nodes -sha1 -days 365
                             -key server.key -out server.crt -extensions usr_cert</strong></code><br />
             <br />
             This signs the server CSR and results in a <code>server.crt</code> file.<br />
             You can see the details of this Certificate using:<br />
             <br />
             <code><strong>$ openssl x509 -noout -text -in server.crt</strong></code><br />
             <br />
          </li>
          </ol>
      
      
      <h3><a name="passphrase" id="passphrase">How can I change the pass-phrase on my private key file?</a></h3>
      <p>You simply have to read it with the old pass-phrase and write it again,
          specifying the new pass-phrase. You can accomplish this with the following
          commands:</p>
      
      
          <p><code><strong>$ openssl rsa -des3 -in server.key -out server.key.new</strong></code><br />
          <code><strong>$ mv server.key.new server.key</strong></code><br /></p>
      
          <p>The first time you're asked for a PEM pass-phrase, you should
          enter the old pass-phrase. After that, you'll be asked again to
          enter a pass-phrase - this time, use the new pass-phrase. If you
          are asked to verify the pass-phrase, you'll need to enter the new
          pass-phrase a second time.</p>
      
      
      <h3><a name="removepassphrase" id="removepassphrase">How can I get rid of the pass-phrase dialog at Apache startup time?</a></h3>
      <p>The reason this dialog pops up at startup and every re-start
          is that the RSA private key inside your server.key file is stored in
          encrypted format for security reasons. The pass-phrase is needed to decrypt
          this file, so it can be read and parsed. Removing the pass-phrase
          removes a layer of security from your server - proceed with caution!</p>
          <ol>
          <li>Remove the encryption from the RSA private key (while
             keeping a backup copy of the original file):<br />
             <br />
             <code><strong>$ cp server.key server.key.org</strong></code><br />
             <code><strong>$ openssl rsa -in server.key.org -out server.key</strong></code><br />
      
             <br />
          </li>
          <li>Make sure the server.key file is only readable by root:<br />
             <br />
             <code><strong>$ chmod 400 server.key</strong></code><br />
             <br />
          </li>
          </ol>
      
          <p>Now <code>server.key</code> contains an unencrypted copy of the key.
          If you point your server at this file, it will not prompt you for a
          pass-phrase. HOWEVER, if anyone gets this key they will be able to
          impersonate you on the net. PLEASE make sure that the permissions on this
          file are such that only root or the web server user can read it
          (preferably get your web server to start as root but run as another
          user, and have the key readable only by root).</p>
      
          <p>As an alternative approach you can use the ``<code>SSLPassPhraseDialog
          exec:/path/to/program</code>'' facility. Bear in mind that this is
          neither more nor less secure, of course.</p>
      
      
      <h3><a name="verify" id="verify">How do I verify that a private key matches its Certificate?</a></h3>
      <p>A private key contains a series of numbers. Two of these numbers form
          the "public key", the others are part of the "private key". The "public
          key" bits are included when you generate a CSR, and subsequently form
          part of the associated Certificate.</p>
          <p>To check that the public key in your Certificate matches the public
          portion of your private key, you simply need to compare these numbers.
          To view the Certificate and the key run the commands:</p>
      
          <p><code><strong>$ openssl x509 -noout -text -in server.crt</strong></code><br />
          <code><strong>$ openssl rsa -noout -text -in server.key</strong></code></p>
      
          <p>The `modulus' and the `public exponent' portions in the key and the
          Certificate must match. As the public exponent is usually 65537
          and it's difficult to visually check that the long modulus numbers
          are the same, you can use the following approach:</p>
      
          <p><code><strong>$ openssl x509 -noout -modulus -in server.crt | openssl md5</strong></code><br />
          <code><strong>$ openssl rsa -noout -modulus -in server.key | openssl md5</strong></code></p>
      
          <p>This leaves you with two rather shorter numbers to compare. It is,
          in theory, possible that these numbers may be the same, without the
          modulus numbers being the same, but the chances of this are
          overwhelmingly remote.</p>
          <p>Should you wish to check to which key or certificate a particular
          CSR belongs you can perform the same calculation on the CSR as
          follows:</p>
      
          <p><code><strong>$ openssl req -noout -modulus -in server.csr | openssl md5</strong></code></p>
      
      
      <h3><a name="pemder" id="pemder">How can I convert a certificate from PEM to DER format?</a></h3>
      <p>The default certificate format for OpenSSL is PEM, which is simply
          Base64 encoded DER, with header and footer lines. For some applications
          (e.g. Microsoft Internet Explorer) you need the certificate in plain DER
          format. You can convert a PEM file <code>cert.pem</code> into the
          corresponding DER file <code>cert.der</code> using the following command:
          <code><strong>$ openssl x509 -in cert.pem -out cert.der -outform DER</strong></code></p>
      
      
      <h3><a name="gid" id="gid">Why do browsers complain that they cannot verify my server certificate?</a></h3>
      
          <p>One reason this might happen is because your server certificate is signed
          by an intermediate CA. Various CAs, such as Verisign or Thawte, have started
          signing certificates not with their root certificate but with intermediate
          certificates.</p>
      
          <p>Intermediate CA certificates lie between the root CA certificate (which is
          installed in the browsers) and the server certificate (which you installed
          on the server). In order for the browser to be able to traverse and verify
          the trust chain from the server certificate to the root certificate it
          needs need to be given the intermediate certificates. The CAs should
          be able to provide you such intermediate certificate packages that can be
          installed on the server.</p>
      
          <p>You need to include those intermediate certificates with the
          <code class="directive"><a href="../mod/mod_ssl.html#sslcertificatechainfile">SSLCertificateChainFile</a></code>
          directive.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="aboutssl" id="aboutssl">The SSL Protocol</a></h2>
      <ul>
      <li><a href="#random">Why do I get lots of random SSL protocol
      errors under heavy server load?</a></li>
      <li><a href="#load">Why does my webserver have a higher load, now
      that it serves SSL encrypted traffic?</a></li>
      <li><a href="#establishing">Why do HTTPS connections to my server
      sometimes take up to 30 seconds to establish a connection?</a></li>
      <li><a href="#ciphers">What SSL Ciphers are supported by mod_ssl?</a></li>
      <li><a href="#adh">Why do I get ``no shared cipher'' errors, when
      trying to use Anonymous Diffie-Hellman (ADH) ciphers?</a></li>
      <li><a href="#sharedciphers">Why do I get a 'no shared ciphers'
      error when connecting to my newly installed server?</a></li>
      <li><a href="#vhosts">Why can't I use SSL with name-based/non-IP-based
      virtual hosts?</a></li>
      <li><a href="#vhosts2">Is it possible to use Name-Based Virtual
      Hosting to identify different SSL virtual hosts?</a></li>
      <li><a href="#comp">How do I get SSL compression working?</a></li>
      <li><a href="#lockicon">When I use Basic Authentication over HTTPS
      the lock icon in Netscape browsers stays unlocked when the dialog pops up.
      Does this mean the username/password is being sent unencrypted?</a></li>
      <li><a href="#msie">Why do I get I/O errors when connecting via
      HTTPS to an Apache+mod_ssl server with Microsoft Internet Explorer
      (MSIE)?</a></li>
      <li><a href="#srp">How do I enable TLS-SRP?</a></li>
      <li><a href="#javadh">Why do I get handshake failures with Java-based clients when using a certificate with more than 1024 bits?</a></li>
      </ul>
      
      <h3><a name="random" id="random">Why do I get lots of random SSL protocol
      errors under heavy server load?</a></h3>
      <p>There can be a number of reasons for this, but the main one
          is problems with the SSL session Cache specified by the
          <code class="directive"><a href="../mod/mod_ssl.html#sslsessioncache">SSLSessionCache</a></code> directive. The DBM session
          cache is the most likely source of the problem, so using the SHM session cache (or
          no cache at all) may help.</p>
      
      
      <h3><a name="load" id="load">Why does my webserver have a higher load, now
      that it serves SSL encrypted traffic?</a></h3>
      <p>SSL uses strong cryptographic encryption, which necessitates a lot of
          number crunching. When you request a webpage via HTTPS, everything (even
          the images) is encrypted before it is transferred. So increased HTTPS
          traffic leads to load increases.</p>
      
      
      <h3><a name="establishing" id="establishing">Why do HTTPS connections to my server
      sometimes take up to 30 seconds to establish a connection?</a></h3>
      <p>This is usually caused by a <code>/dev/random</code> device for
          <code class="directive"><a href="../mod/mod_ssl.html#sslrandomseed">SSLRandomSeed</a></code> which blocks the
          read(2) call until enough entropy is available to service the
          request. More information is available in the reference
          manual for the <code class="directive"><a href="../mod/mod_ssl.html#sslrandomseed">SSLRandomSeed</a></code>
          directive.</p>
      
      
      <h3><a name="ciphers" id="ciphers">What SSL Ciphers are supported by mod_ssl?</a></h3>
      <p>Usually, any SSL ciphers supported by the version of OpenSSL in use,
          are also supported by <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>. Which ciphers are
          available can depend on the way you built OpenSSL. Typically, at
          least the following ciphers are supported:</p>
      
          <ol>
          <li>RC4 with SHA1</li>
          <li>AES with SHA1</li>
          <li>Triple-DES with SHA1</li>
          </ol>
      
          <p>To determine the actual list of ciphers available, you should run
          the following:</p>
          <div class="example"><p><code>$ openssl ciphers -v</code></p></div>
      
      
      <h3><a name="adh" id="adh">Why do I get ``no shared cipher'' errors, when
      trying to use Anonymous Diffie-Hellman (ADH) ciphers?</a></h3>
      <p>By default, OpenSSL does <em>not</em> allow ADH ciphers, for security
          reasons. Please be sure you are aware of the potential side-effects
          if you choose to enable these ciphers.</p>
          <p>In order to use Anonymous Diffie-Hellman (ADH) ciphers, you must
          build OpenSSL with ``<code>-DSSL_ALLOW_ADH</code>'', and then add
          ``<code>ADH</code>'' into your <code class="directive"><a href="../mod/mod_ssl.html#sslciphersuite">SSLCipherSuite</a></code>.</p>
      
      
      <h3><a name="sharedciphers" id="sharedciphers">Why do I get a 'no shared ciphers'
      error when connecting to my newly installed server?</a></h3>
      <p>Either you have made a mistake with your
          <code class="directive"><a href="../mod/mod_ssl.html#sslciphersuite">SSLCipherSuite</a></code>
          directive (compare it with the pre-configured example in
          <code>extra/httpd-ssl.conf</code>) or you chose to use DSA/DH
          algorithms instead of RSA when you generated your private key
          and ignored or overlooked the warnings. If you have chosen
          DSA/DH, then your server cannot communicate using RSA-based SSL
          ciphers (at least until you configure an additional RSA-based
          certificate/key pair). Modern browsers like NS or IE can only
          communicate over SSL using RSA ciphers. The result is the
          "no shared ciphers" error. To fix this, regenerate your server
          certificate/key pair, using the RSA algorithm.</p>
      
      
      <h3><a name="vhosts" id="vhosts">Why can't I use SSL with name-based/non-IP-based virtual hosts?</a></h3>
      <p>The reason is very technical, and a somewhat "chicken and egg" problem.
          The SSL protocol layer stays below the HTTP protocol layer and
          encapsulates HTTP. When an SSL connection (HTTPS) is established
          Apache/mod_ssl has to negotiate the SSL protocol parameters with the
          client. For this, mod_ssl has to consult the configuration of the virtual
          server (for instance it has to look for the cipher suite, the server
          certificate, etc.). But in order to go to the correct virtual server
          Apache has to know the <code>Host</code> HTTP header field. To do this, the
          HTTP request header has to be read. This cannot be done before the SSL
          handshake is finished, but the information is needed in order to
          complete the SSL handshake phase. See the next question for how to
          circumvent this issue.</p>
          
          <p>Note that if you have a wildcard SSL certificate, or a
          certificate that has multiple hostnames on it using subjectAltName
          fields, you can use SSL on name-based virtual hosts without further
          workarounds.</p>
      
      
      <h3><a name="vhosts2" id="vhosts2">Is it possible to use Name-Based
      Virtual Hosting to identify different SSL virtual hosts?</a></h3>
          <p>Name-Based Virtual Hosting is a very popular method of identifying
          different virtual hosts. It allows you to use the same IP address and
          the same port number for many different sites. When people move on to
          SSL, it seems natural to assume that the same method can be used to have
          lots of different SSL virtual hosts on the same server.</p>
      
          <p>It is possible, but only if using a 2.2.12 or later web server,
          built with 0.9.8j or later OpenSSL.  This is because it requires a
          feature that only the most recent revisions of the SSL
          specification added, called Server Name Indication (SNI).</p>
      
          <p>Note that if you have a wildcard SSL certificate, or a
          certificate that has multiple hostnames on it using subjectAltName
          fields, you can use SSL on name-based virtual hosts without further
          workarounds.</p>
      
          <p>The reason is that the SSL protocol is a separate layer which
          encapsulates the HTTP protocol. So the SSL session is a separate
          transaction, that takes place before the HTTP session has begun.
          The server receives an SSL request on IP address X and port Y
          (usually 443). Since the SSL request did not contain any Host:
          field, the server had no way to decide which SSL virtual host to use.
          Usually, it just used the first one it found which matched the
          port and IP address specified.</p>
      
          <p>If you are using a version of the web server and OpenSSL that
          support SNI, though, and the client's browser also supports SNI,
          then the hostname is included in the original SSL request, and the
          web server can select the correct SSL virtual host.</p>
      
          <p>You can, of course, use Name-Based Virtual Hosting to identify many
          non-SSL virtual hosts (all on port 80, for example) and then
          have a single SSL virtual host (on port 443). But if you do this,
          you must make sure to put the non-SSL port number on the NameVirtualHost
          directive, e.g.</p>
      
          <pre class="prettyprint lang-config">NameVirtualHost 192.168.1.1:80</pre>
      
      
          <p>Other workaround solutions include: </p>
      
          <p>Using separate IP addresses for different SSL hosts.
          Using different port numbers for different SSL hosts.</p>
      
      
      <h3><a name="comp" id="comp">How do I get SSL compression working?</a></h3>
      <p>Although SSL compression negotiation was defined in the specification
      of SSLv2 and TLS, it took until May 2004 for RFC 3749 to define DEFLATE as
      a negotiable standard compression method.
      </p>
      <p>OpenSSL 0.9.8 started to support this by default when compiled with the
      <code>zlib</code> option. If both the client and the server support compression,
      it will be used. However, most clients still try to initially connect with an
      SSLv2 Hello. As SSLv2 did not include an array of preferred compression algorithms
      in its handshake, compression cannot be negotiated with these clients.
      If the client disables support for SSLv2, either an SSLv3 or TLS Hello
      may be sent, depending on which SSL library is used, and compression may
      be set up. You can verify whether clients make use of SSL compression by
      logging the <code>%{SSL_COMPRESS_METHOD}x</code> variable.
      </p>
      
      
      <h3><a name="lockicon" id="lockicon">When I use Basic Authentication over HTTPS
      the lock icon in Netscape browsers stays unlocked when the dialog pops up.
      Does this mean the username/password is being sent unencrypted?</a></h3>
      <p>No, the username/password is transmitted encrypted. The icon in
          Netscape browsers is not actually synchronized with the SSL/TLS layer.
          It only toggles to the locked state when the first part of the actual
          webpage data is transferred, which may confuse people. The Basic
          Authentication facility is part of the HTTP layer, which is above
          the SSL/TLS layer in HTTPS. Before any HTTP data communication takes
          place in HTTPS, the SSL/TLS layer has already completed its handshake
          phase, and switched to encrypted communication. So don't be
          confused by this icon.</p>
      
      
      <h3><a name="msie" id="msie">Why do I get I/O errors when connecting via
      HTTPS to an Apache+mod_ssl server with older versions of Microsoft Internet
      Explorer (MSIE)?</a></h3>
      <p>The first reason is that the SSL implementation in some MSIE versions has
          some subtle bugs related to the HTTP keep-alive facility and the SSL close
          notify alerts on socket connection close. Additionally the interaction
          between SSL and HTTP/1.1 features are problematic in some MSIE versions.
          You can work around these problems by forcing Apache not to use HTTP/1.1,
          keep-alive connections or send the SSL close notify messages to MSIE clients.
          This can be done by using the following directive in your SSL-aware
          virtual host section:</p>
          <pre class="prettyprint lang-config">SetEnvIf User-Agent "MSIE [2-5]" \
               nokeepalive ssl-unclean-shutdown \
               downgrade-1.0 force-response-1.0</pre>
      
          <p>Further, some MSIE versions have problems with particular ciphers.
          Unfortunately, it is not possible to implement a MSIE-specific
          workaround for this, because the ciphers are needed as early as the
          SSL handshake phase. So a MSIE-specific
          <code class="directive"><a href="../mod/mod_setenvif.html#setenvif">SetEnvIf</a></code> won't solve these
          problems. Instead, you will have to make more drastic
          adjustments to the global parameters. Before you decide to do
          this, make sure your clients really have problems. If not, do not
          make these changes - they will affect <em>all</em> your clients, MSIE
          or otherwise.</p>
      
      
      <h3><a name="srp" id="srp">How do I enable TLS-SRP?</a></h3>
          <p>TLS-SRP (Secure Remote Password key exchange for TLS, specified in RFC 5054)
          can supplement or replace certificates in authenticating an SSL connection.
          To use TLS-SRP, set the
          <code class="directive"><a href="../mod/mod_ssl.html#sslsrpverifierfile">SSLSRPVerifierFile</a></code> directive to
          point to an OpenSSL SRP verifier file. To create the verifier file, use the
          <code>openssl</code> tool:</p>
          <div class="example"><p><code>
          openssl srp -srpvfile passwd.srpv -add username
          </code></p></div>
          <p>After creating this file, specify it in the SSL server configuration:</p>
          <div class="example"><p><code>
          SSLSRPVerifierFile /path/to/passwd.srpv
          </code></p></div>
          <p>To force clients to use non-certificate TLS-SRP cipher suites, use the
          following directive:</p>
          <div class="example"><p><code>
          SSLCipherSuite "!DSS:!aRSA:SRP"
          </code></p></div>
      
      
      <h3><a name="javadh" id="javadh">Why do I get handshake failures with Java-based clients when using a certificate with more than 1024 bits?</a></h3>
          <p>Beginning with version 2.4.7,
          <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> will use DH parameters which include primes
          with lengths of more than 1024 bits. Java 7 and earlier limit their
          support for DH prime sizes to a maximum of 1024 bits, however.</p>
      
          <p>If your Java-based client aborts with exceptions such as
          <code>java.lang.RuntimeException: Could not generate DH keypair</code> and
          <code>java.security.InvalidAlgorithmParameterException: Prime size must be
          multiple of 64, and can only range from 512 to 1024 (inclusive)</code>,
          and httpd logs <code>tlsv1 alert internal error (SSL alert number 80)</code>
          (at <code class="directive"><a href="../mod/core.html#loglevel">LogLevel</a></code> <code>info</code>
          or higher), you can either rearrange mod_ssl's cipher list with
          <code class="directive"><a href="../mod/mod_ssl.html#sslciphersuite">SSLCipherSuite</a></code>
          (possibly in conjunction with <code class="directive"><a href="../mod/mod_ssl.html#sslhonorcipherorder">SSLHonorCipherOrder</a></code>),
          or you can use custom DH parameters with a 1024-bit prime, which
          will always have precedence over any of the built-in DH parameters.</p>
      
          <p>To generate custom DH parameters, use the <code>openssl dhparam 1024</code>
          command. Alternatively, you can use the following standard 1024-bit DH
          parameters from <a href="http://www.ietf.org/rfc/rfc2409.txt">RFC 2409</a>,
          section 6.2:</p>
          <div class="example"><pre>-----BEGIN DH PARAMETERS-----
      MIGHAoGBAP//////////yQ/aoiFowjTExmKLgNwc0SkCTgiKZ8x0Agu+pjsTmyJR
      Sgh5jjQE3e+VGbPNOkMbMCsKbfJfFDdP4TVtbVHCReSFtXZiXn7G9ExC6aY37WsL
      /1y29Aa37e44a/taiZ+lrp8kEXxLH+ZJKGZR7OZTgf//////////AgEC
      -----END DH PARAMETERS-----</pre></div>
          <p>Add the custom parameters including the "BEGIN DH PARAMETERS" and
          "END DH PARAMETERS" lines to the end of the first certificate file
          you have configured using the
          <code class="directive"><a href="../mod/mod_ssl.html#sslcertificatefile">SSLCertificateFile</a></code> directive.</p>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="support" id="support">mod_ssl Support</a></h2>
      <ul>
      <li><a href="#resources">What information resources are available in
      case of mod_ssl problems?</a></li>
      <li><a href="#contact">What support contacts are available in case of
      mod_ssl problems?</a></li>
      <li><a href="#reportdetails">What information should I
      provide when writing a bug report?</a></li>
      <li><a href="#coredumphelp">I had a core dump, can you help me?</a></li>
      <li><a href="#backtrace">How do I get a backtrace, to help find the reason
      for my core dump?</a></li>
      </ul>
      
      <h3><a name="resources" id="resources">What information resources are available in case of mod_ssl problems?</a></h3>
      <p>The following information resources are available.
          In case of problems you should search here first.</p>
      
          <dl>
          <dt>Answers in the User Manual's F.A.Q. List (this)</dt>
          <dd><a href="http://httpd.apache.org/docs/2.4/ssl/ssl_faq.html">
              http://httpd.apache.org/docs/2.4/ssl/ssl_faq.html</a><br />
              First check the F.A.Q. (this text). If your problem is a common
              one, it may have been answered several times before, and been included
              in this doc.
          </dd>
          </dl>
      
      
      <h3><a name="contact" id="contact">What support contacts are available in case
      of mod_ssl problems?</a></h3>
       <p>The following lists all support possibilities for mod_ssl, in order of
               preference. Please go through these possibilities
               <em>in this order</em> - don't just pick the one you like the look of. </p>
          <ol>
      
          <li><em>Send a Problem Report to the Apache httpd Users Support Mailing List</em><br />
              <a href="mailto:users@httpd.apache.org">
              users@httpd.apache.org</a><br />
              This is the second way of submitting your problem report. Again, you must
              subscribe to the list first, but you can then easily discuss your problem
              with the whole Apache httpd user community.
          </li>
      
          <li><em>Write a Problem Report in the Bug Database</em><br />
              <a href="http://httpd.apache.org/bug_report.html">
              http://httpd.apache.org/bug_report.html</a><br />
              This is the last way of submitting your problem report. You should only
              do this if you've already posted to the mailing lists, and had no success.
              Please follow the instructions on the above page <em>carefully</em>.
          </li>
          </ol>
      
      
      <h3><a name="reportdetails" id="reportdetails">What information should I
      provide when writing a bug report?</a></h3>
      <p>You should always provide at least the following information:</p>
      
          <dl>
          <dt>Apache httpd and OpenSSL version information</dt>
          <dd>The Apache version can be determined
              by running <code>httpd -v</code>. The OpenSSL version can be
              determined by running <code>openssl version</code>. Alternatively, if
              you have Lynx installed, you can run the command <code>lynx -mime_header
              http://localhost/ | grep Server</code> to gather this information in a
              single step.
          </dd>
      
          <dt>The details on how you built and installed Apache httpd and OpenSSL</dt>
          <dd>For this you can provide a logfile of your terminal session which shows
          the configuration and install steps. If this is not possible, you
          should at least provide the <code class="program"><a href="../programs/configure.html">configure</a></code> command line you used.
          </dd>
      
          <dt>In case of core dumps please include a Backtrace</dt>
          <dd>If your Apache httpd dumps its core, please attach
          a stack-frame ``backtrace'' (see <a href="#backtrace">below</a>
          for information on how to get this). This information is required
          in order to find a reason for your core dump.
          </dd>
      
          <dt>A detailed description of your problem</dt>
          <dd>Don't laugh, we really mean it! Many problem reports don't
          include a description of what the actual problem is. Without this,
          it's very difficult for anyone to help you. So, it's in your own
          interest (you want the problem be solved, don't you?) to include as
          much detail as possible, please. Of course, you should still include
          all the essentials above too.
          </dd>
          </dl>
      
      
      <h3><a name="coredumphelp" id="coredumphelp">I had a core dump, can you help me?</a></h3>
      <p>In general no, at least not unless you provide more details about the code
          location where Apache dumped core. What is usually always required in
          order to help you is a backtrace (see next question). Without this
          information it is mostly impossible to find the problem and help you in
          fixing it.</p>
      
      
      <h3><a name="backtrace" id="backtrace">How do I get a backtrace, to help find
      the reason for my core dump?</a></h3>
      <p>Following are the steps you will need to complete, to get a backtrace:</p>
          <ol>
          <li>Make sure you have debugging symbols available, at least
              in Apache. On platforms where you use GCC/GDB, you will have to build
              Apache+mod_ssl with ``<code>OPTIM="-g -ggdb3"</code>'' to get this. On
              other platforms at least ``<code>OPTIM="-g"</code>'' is needed.
          </li>
      
          <li>Start the server and try to reproduce the core-dump. For this you may
              want to use a directive like ``<code>CoreDumpDirectory /tmp</code>'' to
              make sure that the core-dump file can be written. This should result
              in a <code>/tmp/core</code> or <code>/tmp/httpd.core</code> file. If you
              don't get one of these, try running your server under a non-root UID.
              Many modern kernels do not allow a process to dump core after it has
              done a <code>setuid()</code> (unless it does an <code>exec()</code>) for
              security reasons (there can be privileged information left over in
              memory). If necessary, you can run <code>/path/to/httpd -X</code>
              manually to force Apache to not fork.
          </li>
      
          <li>Analyze the core-dump. For this, run <code>gdb /path/to/httpd
              /tmp/httpd.core</code> or a similar command. In GDB, all you
              have to do then is to enter <code>bt</code>, and voila, you get the
              backtrace. For other debuggers consult your local debugger manual.
          </li>
          </ol>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/ssl/ssl_faq.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_faq.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/ssl/ssl_faq.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/index.html.ja.utf8�����������������������������������������������������0000644�0000000�0000050�00000012274�13412755316�017532� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache ã® SSL/TLS æš—å·åŒ– - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="../">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache ã® SSL/TLS æš—å·åŒ–</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/ssl/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../tr/ssl/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/ssl/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
      <p>Apache HTTP サーãƒãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> ãŒ
      <a href="http://www.openssl.org/">OpenSSL</a>
      ライブラリã¸ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ェースをæä¾›ã—ã¦ã„ã¾ã™ãŒã€ã“れã¯
      Secure Sockts Layer 㨠Transport Layer Security
      プロトコルを用ã„ãŸå¼·åŠ›ãªæš—å·åŒ–ã‚’æä¾›ã—ã¾ã™ã€‚</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#documentation">Documentation</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#mod-ssl">mod_ssl</a></li>
      </ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="documentation" id="documentation">Documentation</a></h2>
      <ul>
      <li><a href="ssl_howto.html">mod_ssl Configuration How-To</a></li>
      <li><a href="ssl_intro.html">Introduction To SSL</a></li>
      <li><a href="ssl_compat.html">äº’æ›æ€§</a></li>
      <li><a href="ssl_faq.html">よãã‚る質å•</a></li>
      <li><a href="../glossary.html">用語</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mod-ssl" id="mod-ssl">mod_ssl</a></h2>
      <p>ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§æä¾›ã•れるディレクティブや環境変数ã«é–¢ã™ã‚‹
      詳ã—ã„æ–‡æ›¸ã¯ã€<a href="../mod/mod_ssl.html">mod_ssl
      リファレンス</a>ã‚’ã”覧下ã•ã„。</p>
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/ssl/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../tr/ssl/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/ssl/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/ssl_howto.html.en������������������������������������������������������0000644�0000000�0000050�00000055132�13412755316�017567� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>SSL/TLS Strong Encryption: How-To - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">SSL/TLS</a></div><div id="page-content"><div id="preamble"><h1>SSL/TLS Strong Encryption: How-To</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/ssl/ssl_howto.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_howto.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
      
      <p>This document is intended to get you started, and get a few things
      working. You are strongly encouraged to read the rest of the SSL
      documentation, and arrive at a deeper understanding of the material,
      before progressing to the advanced techniques.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#configexample">Basic Configuration Example</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ciphersuites">Cipher Suites and Enforcing Strong Security</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ocspstapling">OCSP Stapling</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#accesscontrol">Client Authentication and Access Control</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#logging">Logging</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configexample" id="configexample">Basic Configuration Example</a></h2>
      
      
      <p>Your SSL configuration will need to contain, at minimum, the
      following directives.</p>
      
      <pre class="prettyprint lang-config">LoadModule ssl_module modules/mod_ssl.so
      
      Listen 443
      &lt;VirtualHost *:443&gt;
          ServerName www.example.com
          SSLEngine on
          SSLCertificateFile "/path/to/www.example.com.cert"
          SSLCertificateKeyFile "/path/to/www.example.com.key"
      &lt;/VirtualHost&gt;</pre>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ciphersuites" id="ciphersuites">Cipher Suites and Enforcing Strong Security</a></h2>
      
      <ul>
      <li><a href="#onlystrong">How can I create an SSL server which accepts strong encryption only?</a></li>
      <li><a href="#strongurl">How can I create an SSL server which accepts all types of ciphers in general, but
      requires a strong cipher for access to a particular URL?</a></li>
      </ul>
      
      <h3><a name="onlystrong" id="onlystrong">How can I create an SSL server which accepts strong encryption
      only?</a></h3>
      
          <p>The following enables only the strongest ciphers:</p>
          <pre class="prettyprint lang-config">SSLCipherSuite HIGH:!aNULL:!MD5</pre>
      
      
          <p>While with the following configuration you specify a preference
          for specific speed-optimized ciphers (which will be selected by
          mod_ssl, provided that they are supported by the client):</p>
      
          <pre class="prettyprint lang-config">SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5
      SSLHonorCipherOrder on</pre>
      
      
      
      <h3><a name="strongurl" id="strongurl">How can I create an SSL server which accepts all types of ciphers
      in general, but requires a strong ciphers for access to a particular
      URL?</a></h3>
      
          <p>Obviously, a server-wide <code class="directive"><a href="../mod/mod_ssl.html#sslciphersuite">SSLCipherSuite</a></code> which restricts
          ciphers to the strong variants, isn't the answer here. However,
          <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> can be reconfigured within <code>Location</code>
          blocks, to give a per-directory solution, and can automatically force
          a renegotiation of the SSL parameters to meet the new configuration.
          This can be done as follows:</p>
          <pre class="prettyprint lang-config"># be liberal in general
      SSLCipherSuite ALL:!aNULL:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP:+eNULL
      
      &lt;Location "/strong/area"&gt;
      # but https://hostname/strong/area/ and below
      # requires strong ciphers
      SSLCipherSuite HIGH:!aNULL:!MD5
      &lt;/Location&gt;</pre>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ocspstapling" id="ocspstapling">OCSP Stapling</a></h2>
      
      
      <p>The Online Certificate Status Protocol (OCSP) is a mechanism for
      determining whether or not a server certificate has been revoked, and OCSP
      Stapling is a special form of this in which the server, such as httpd and
      mod_ssl, maintains current OCSP responses for its certificates and sends
      them to clients which communicate with the server.  Most certificates
      contain the address of an OCSP responder maintained by the issuing
      Certificate Authority, and mod_ssl can communicate with that responder to
      obtain a signed response that can be sent to clients communicating with
      the server.</p>
      
      <p>Because the client can obtain the certificate revocation status from
      the server, without requiring an extra connection from the client to the
      Certificate Authority, OCSP Stapling is the preferred way for the
      revocation status to be obtained.  Other benefits of eliminating the 
      communication between clients and the Certificate Authority are that the
      client browsing history is not exposed to the Certificate Authority and
      obtaining status is more reliable by not depending on potentially heavily
      loaded Certificate Authority servers.</p>
      
      <p>Because the response obtained by the server can be reused for all clients
      using the same certificate during the time that the response is valid, the
      overhead for the server is minimal.</p>
      
      <p>Once general SSL support has been configured properly, enabling OCSP
      Stapling generally requires only very minor modifications to the httpd
      configuration &#8212; the addition of these two directives:</p>
      
          <pre class="prettyprint lang-config">SSLUseStapling On
      SSLStaplingCache "shmcb:logs/ssl_stapling(32768)"</pre>
      
      
      <p>These directives are placed at global scope (i.e., not within a virtual
      host definition) wherever other global SSL configuration directives are
      placed, such as in <code>conf/extra/httpd-ssl.conf</code> for normal 
      open source builds of httpd, <code>/etc/apache2/mods-enabled/ssl.conf</code>
      for the Ubuntu or Debian-bundled httpd, etc.</p>
      
      <p>The path on the <code class="directive">SSLStaplingCache</code> directive
      (e.g., <code>logs/</code>) should match the one on the 
      <code class="directive">SSLSessionCache</code> directive.  This path is relative
      to <code class="directive">ServerRoot</code>.</p>
      
      <p>This particular <code class="directive">SSLStaplingCache</code> directive requires
      <code class="module"><a href="../mod/mod_socache_shmcb.html">mod_socache_shmcb</a></code> (from the <code>shmcb</code> prefix on the
      directive's argument).  This module is usually enabled already for
      <code class="directive">SSLSessionCache</code> or on behalf of some module other than
      <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>.  If you enabled an SSL session cache using a 
      mechanism other than <code class="module"><a href="../mod/mod_socache_shmcb.html">mod_socache_shmcb</a></code>, use that alternative
      mechanism for <code class="directive">SSLStaplingCache</code> as well.  For example:</p>
      
          <pre class="prettyprint lang-config">SSLSessionCache "dbm:logs/ssl_scache"
      SSLStaplingCache "dbm:logs/ssl_stapling"</pre>
      
      
      <p>You can use the openssl command-line program to verify that an OCSP response
      is sent by your server:</p>
      
      <pre>$ openssl s_client -connect www.example.com:443 -status -servername www.example.com
      ...
      OCSP response: 
      ======================================
      OCSP Response Data:
          OCSP Response Status: successful (0x0)
          Response Type: Basic OCSP Response
      ...
          Cert Status: Good
      ...</pre>
      
      <p>The following sections highlight the most common situations which require
      further modification to the configuration.  Refer also to the 
      <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> reference manual.</p>
      
      <h3>If more than a few SSL certificates are used for the server</h3>
      
      <p>OCSP responses are stored in the SSL stapling cache.  While the responses
      are typically a few hundred to a few thousand bytes in size, mod_ssl 
      supports OCSP responses up to around 10K bytes in size.  With more than a 
      few certificates, the stapling cache size (32768 bytes in the example above) 
      may need to be increased.  Error message AH01929 will be logged in case of
      an error storing a response.</p>
      
      
      <h3>If the certificate does not point to an OCSP responder, or if a
      different address must be used</h3>
      
      <p>Refer to the 
      <code class="directive"><a href="../mod/mod_ssl.html#sslstaplingforceurl">SSLStaplingForceURL</a></code> directive.</p>
      
      <p>You can confirm that a server certificate points to an OCSP responder
      using the openssl command-line program, as follows:</p>
      
      <pre>$ openssl x509 -in ./www.example.com.crt -text | grep 'OCSP.*http'
      OCSP - URI:http://ocsp.example.com</pre>
      
      <p>If the OCSP URI is provided and the web server can communicate to it
      directly without using a proxy, no configuration is required.  Note that
      firewall rules that control outbound connections from the web server may
      need to be adjusted.</p>
      
      <p>If no OCSP URI is provided, contact your Certificate Authority to
      determine if one is available; if so, configure it with
      <code class="directive"><a href="../mod/mod_ssl.html#sslstaplingforceurl">SSLStaplingForceURL</a></code> in the virtual
      host that uses the certificate.</p>
      
      
      <h3>If multiple SSL-enabled virtual hosts are configured and OCSP
      Stapling should be disabled for some</h3>
      
      
      <p>Add <code>SSLUseStapling Off</code> to the virtual hosts for which OCSP
      Stapling should be disabled.</p>
      
      
      <h3>If the OCSP responder is slow or unreliable</h3>
      
      <p>Several directives are available to handle timeouts and errors.  Refer
      to the documentation for the
      <code class="directive"><a href="../mod/mod_ssl.html#sslstaplingfaketrylater">SSLStaplingFakeTryLater</a></code>,
      <code class="directive"><a href="../mod/mod_ssl.html#sslstaplingrespondertimeout">SSLStaplingResponderTimeout</a></code>, and
      <code class="directive"><a href="../mod/mod_ssl.html#sslstaplingreturnrespondererrors">SSLStaplingReturnResponderErrors</a></code>
      directives.</p>
      
      
      <h3>If mod_ssl logs error AH02217</h3>
      
      <pre>AH02217: ssl_stapling_init_cert: Can't retrieve issuer certificate!</pre>
      <p>In order to support OCSP Stapling when a particular server certificate is
      used, the certificate chain for that certificate must be configured.  If it 
      was not configured as part of enabling SSL, the AH02217 error will be issued
      when stapling is enabled, and an OCSP response will not be provided for clients
      using the certificate.</p>
      
      <p>Refer to the <code class="directive"><a href="../mod/mod_ssl.html#sslcertificatechainfile">SSLCertificateChainFile</a></code>
      and <code class="directive"><a href="../mod/mod_ssl.html#sslcertificatefile">SSLCertificateFile</a></code> for instructions
      for configuring the certificate chain.</p>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="accesscontrol" id="accesscontrol">Client Authentication and Access Control</a></h2>
      
      <ul>
      <li><a href="#allclients">How can I force clients to authenticate using certificates?</a></li>
      <li><a href="#arbitraryclients">How can I force clients to authenticate using certificates for a
              particular URL, but still allow arbitrary clients to access the rest of the server?</a></li>
      <li><a href="#certauthenticate">How can I allow only clients who have certificates to access a
              particular URL, but allow all clients to access the rest of the server?</a></li>
      <li><a href="#intranet">How can I require HTTPS with strong ciphers, and either
      basic authentication or client certificates, for access to part of the
      Intranet website, for clients coming from the Internet?</a></li>
      </ul>
      
      <h3><a name="allclients" id="allclients">How can I force clients to authenticate using certificates?</a></h3>
      
      
          <p>When you know all of your users (eg, as is often the case on a corporate
          Intranet), you can require plain certificate authentication. All you
          need to do is to create client certificates signed by your own CA
          certificate (<code>ca.crt</code>) and then verify the clients against this
          certificate.</p>
          <pre class="prettyprint lang-config"># require a client certificate which has to be directly
      # signed by our CA certificate in ca.crt
      SSLVerifyClient require
      SSLVerifyDepth 1
      SSLCACertificateFile "conf/ssl.crt/ca.crt"</pre>
      
      
      
      <h3><a name="arbitraryclients" id="arbitraryclients">How can I force clients to authenticate using certificates for a
        particular URL, but still allow arbitrary clients to access the rest of the server?</a></h3>
      
      
          <p>To force clients to authenticate using certificates for a particular URL,
          you can use the per-directory reconfiguration features of
          <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>:</p>
      
          <pre class="prettyprint lang-config">SSLVerifyClient none
      SSLCACertificateFile "conf/ssl.crt/ca.crt"
      
      &lt;Location "/secure/area"&gt;
      SSLVerifyClient require
      SSLVerifyDepth 1
      &lt;/Location&gt;</pre>
      
      
      
      <h3><a name="certauthenticate" id="certauthenticate">How can I allow only clients who have certificates to access a
        particular URL, but allow all clients to access the rest of the server?</a></h3>
      
      
          <p>The key to doing this is checking that part of the client certificate
          matches what you expect. Usually this means checking all or part of the
          Distinguished Name (DN), to see if it contains some known string.
          There are two ways to do this, using either <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code> or
          <code class="directive"><a href="../mod/mod_ssl.html#sslrequire">SSLRequire</a></code>.</p>
      
          <p>The <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code> method is generally required when
          the certificates are completely arbitrary, or when their DNs have
          no common fields (usually the organisation, etc.). In this case,
          you should establish a password database containing <em>all</em>
          clients allowed, as follows:</p>
      
          <pre class="prettyprint lang-config">SSLVerifyClient      none
      SSLCACertificateFile "conf/ssl.crt/ca.crt"
      SSLCACertificatePath "conf/ssl.crt"
      
      &lt;Directory "/usr/local/apache2/htdocs/secure/area"&gt;
          SSLVerifyClient      require
          SSLVerifyDepth       5
          SSLOptions           +FakeBasicAuth
          SSLRequireSSL
          AuthName             "Snake Oil Authentication"
          AuthType             Basic
          AuthBasicProvider    file
          AuthUserFile         "/usr/local/apache2/conf/httpd.passwd"
          Require              valid-user
      &lt;/Directory&gt;</pre>
      
      
          <p>The password used in this example is the DES encrypted string "password".
          See the <code class="directive"><a href="../mod/mod_ssl.html#ssloptions">SSLOptions</a></code> docs for more
          information.</p>
      
          <div class="example"><h3>httpd.passwd</h3><pre>/C=DE/L=Munich/O=Snake Oil, Ltd./OU=Staff/CN=Foo:xxj31ZMTZzkVA
      /C=US/L=S.F./O=Snake Oil, Ltd./OU=CA/CN=Bar:xxj31ZMTZzkVA
      /C=US/L=L.A./O=Snake Oil, Ltd./OU=Dev/CN=Quux:xxj31ZMTZzkVA</pre></div>
      
          <p>When your clients are all part of a common hierarchy, which is encoded
          into the DN, you can match them more easily using <code class="directive"><a href="../mod/mod_ssl.html#sslrequire">SSLRequire</a></code>, as follows:</p>
      
      
          <pre class="prettyprint lang-config">SSLVerifyClient      none
      SSLCACertificateFile "conf/ssl.crt/ca.crt"
      SSLCACertificatePath "conf/ssl.crt"
      
      &lt;Directory "/usr/local/apache2/htdocs/secure/area"&gt;
        SSLVerifyClient      require
        SSLVerifyDepth       5
        SSLOptions           +FakeBasicAuth
        SSLRequireSSL
        SSLRequire       %{SSL_CLIENT_S_DN_O}  eq "Snake Oil, Ltd." \
                     and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"}
      &lt;/Directory&gt;</pre>
      
      
      
      <h3><a name="intranet" id="intranet">How can I require HTTPS with strong ciphers, and either basic
      authentication or client certificates, for access to part of the
      Intranet website, for clients coming from the Internet? I still want to allow
      plain HTTP access for clients on the Intranet.</a></h3>
      
      
         <p>These examples presume that clients on the Intranet have IPs in the range
         192.168.1.0/24, and that the part of the Intranet website you want to allow
         internet access to is <code>/usr/local/apache2/htdocs/subarea</code>.
         This configuration should remain outside of your HTTPS virtual host, so
         that it applies to both HTTPS and HTTP.</p>
      
          <pre class="prettyprint lang-config">SSLCACertificateFile "conf/ssl.crt/company-ca.crt"
      
      &lt;Directory "/usr/local/apache2/htdocs"&gt;
          #   Outside the subarea only Intranet access is granted
          Require              ip 192.168.1.0/24
      &lt;/Directory&gt;
      
      &lt;Directory "/usr/local/apache2/htdocs/subarea"&gt;
          #   Inside the subarea any Intranet access is allowed
          #   but from the Internet only HTTPS + Strong-Cipher + Password
          #   or the alternative HTTPS + Strong-Cipher + Client-Certificate
          
          #   If HTTPS is used, make sure a strong cipher is used.
          #   Additionally allow client certs as alternative to basic auth.
          SSLVerifyClient      optional
          SSLVerifyDepth       1
          SSLOptions           +FakeBasicAuth +StrictRequire
          SSLRequire           %{SSL_CIPHER_USEKEYSIZE} &gt;= 128
          
          #   Force clients from the Internet to use HTTPS
          RewriteEngine        on
          RewriteCond          "%{REMOTE_ADDR}" "!^192\.168\.1\.[0-9]+$"
          RewriteCond          "%{HTTPS}" "!=on"
          RewriteRule          "." "-" [F]
          
          #   Allow Network Access and/or Basic Auth
          Satisfy              any
          
          #   Network Access Control
          Require              ip 192.168.1.0/24
          
          #   HTTP Basic Authentication
          AuthType             basic
          AuthName             "Protected Intranet Area"
          AuthBasicProvider    file
          AuthUserFile         "conf/protected.passwd"
          Require              valid-user
      &lt;/Directory&gt;</pre>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="logging" id="logging">Logging</a></h2>
          
      
          <p><code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> can log extremely verbose debugging information
          to the error log, when its <code class="directive"><a href="../mod/core.html#loglevel">LogLevel</a></code> is
          set to the higher trace levels. On the other hand, on a very busy server,
          level <code>info</code> may already be too much. Remember that you can
          configure the <code class="directive"><a href="../mod/core.html#loglevel">LogLevel</a></code> per module to
          suite your needs.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/ssl/ssl_howto.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_howto.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/ssl/ssl_howto.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/index.html.tr.utf8�����������������������������������������������������0000644�0000000�0000050�00000012156�13412755316�017564� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache SSL/TLS Şifrelemesi - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="../">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache SSL/TLS Şifrelemesi</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="../en/ssl/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../tr/ssl/" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/ssl/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      
        <p>Apache HTTP Sunucusunun <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> modülü, Güvenli Soketler
          Katmanı (SSL) ve Aktarım Katmanı Güvenliği (TLS) protokollerinin
          kullanıldığı Sağlam Şifreleme desteğini sağlayan <a href="http://www.openssl.org/">OpenSSL</a> kütüphanesine bir arayüz
          içerir.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#documentation">Belgeler</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#mod-ssl"><code>mod_ssl</code> Modülü</a></li>
      </ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="documentation" id="documentation">Belgeler</a></h2>
        <ul>
          <li><a href="ssl_howto.html">mod_ssl Yapılandırması Nasıl</a></li>
          <li><a href="ssl_intro.html">SSL'ye GiriÅŸ</a></li>
          <li><a href="ssl_compat.html">Uyumluluk</a></li>
          <li><a href="ssl_faq.html">Sıkça Sorulan Sorular</a></li>
          <li><a href="../glossary.html">Terimler</a></li>
        </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mod-ssl" id="mod-ssl"><code>mod_ssl</code> Modülü</a></h2>
        <p>Bu modülce sağlanan yönergeler ve ortam değişkenleri
          <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> başvuru kılavuzunda ayrıntılı olarak
          açıklanmıştır.</p>
      </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="../en/ssl/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../tr/ssl/" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/ssl/" hreflang="zh-cn" rel="alternate" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="../mod/">Modüller</a> | <a href="../mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="../glossary.html">Terimler</a> | <a href="../sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/ssl_intro.html���������������������������������������������������������0000644�0000000�0000050�00000000457�13362070302�017146� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: ssl_intro.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: ssl_intro.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: ssl_intro.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/ssl_intro.html.ja.utf8�������������������������������������������������0000644�0000000�0000050�00000121311�13412755316�020430� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>SSL/TLS æš—å·åŒ–: ã¯ã˜ã‚ã« - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="../">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a> &gt; <a href="./">SSL/TLS</a></div><div id="page-content"><div id="preamble"><h1>SSL/TLS æš—å·åŒ–: ã¯ã˜ã‚ã«</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/ssl/ssl_intro.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_intro.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/ssl_intro.html" title="Japanese">&nbsp;ja&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
      <blockquote>
      <p>æ¨™æº–è¦æ ¼ã®è‰¯ã„所ã¯ã€ãŸãã•ã‚“ã®è¦æ ¼ã‹ã‚‰é¸ã¹ã‚‹ã¨ã„ã†ã“ã¨ã ã€‚
      ãã—ã¦ã€ã‚‚ã—æœ¬å½“ã«ã©ã®è¦æ ¼ã‚‚æ°—ã«å…¥ã‚‰ãªã‘れã°ã€
      一年待ã¤ã ã‘ã§æŽ¢ã—ã¦ã„ãŸè¦æ ¼ãŒç¾ã‚Œã‚‹ã€‚</p>
      
      <p class="cite">-- <cite>A. Tanenbaum</cite>, "Introduction to
      Computer Networks"</p>
      </blockquote>
      
      <p>
      入門ã¨ã„ã†ã“ã¨ã§ã€ã“ã®ç« ã¯ Webã€HTTPã€Apache ã«é€šã˜ã¦ã„ã‚‹
      読者å‘ã‘ã§ã™ãŒã€ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£å°‚門家å‘ã‘ã§ã¯ã‚りã¾ã›ã‚“。
      SSL ãƒ—ãƒ­ãƒˆã‚³ãƒ«ã®æ±ºå®šçš„ãªæ‰‹å¼•ãã§ã‚ã‚‹ã¤ã‚‚りã¯ã‚りã¾ã›ã‚“。
      ã¾ãŸã€çµ„織内ã®èªè¨¼ç®¡ç†ã®ãŸã‚ã®ç‰¹å®šã®ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ã‚„ã€
      特許や輸出è¦åˆ¶ãªã©ã®é‡è¦ãªæ³•çš„ãªå•題ã«ã¤ã„ã¦ã‚‚扱ã„ã¾ã›ã‚“。
      ã‚€ã—ã‚ã€æ›´ãªã‚‹ç ”ç©¶ã¸ã®å‡ºç™ºç‚¹ã¨ã—ã¦è‰²ã€…ãªæ¦‚念ã€å®šç¾©ã€ä¾‹ã‚’並ã¹ã‚‹ã“ã¨ã§
      <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> ã®ãƒ¦ãƒ¼ã‚¶ã«åŸºç¤ŽçŸ¥è­˜ã‚’æä¾›ã™ã‚‹äº‹ã‚’目的ã¨ã—ã¦ã„ã¾ã™ã€‚</p>
      
      <p>ã“ã“ã«ç¤ºã•れãŸå†…容ã¯ä¸»ã«ã€åŽŸè‘—è€…ã®è¨±å¯ã®ä¸‹
      The Open Group Research Institute ã® <a href="http://home.earthlink.net/~fjhirsch/">Frederick J. Hirsch</a>
       æ°ã®è¨˜äº‹ <a href="http://home.earthlink.net/~fjhirsch/Papers/wwwj/">
      Introducing SSL and Certificates using SSLeay</a> を基ã«ã—ã¦ã„ã¾ã™ã€‚
      æ°ã®è¨˜äº‹ã¯ <a href="http://www.ora.com/catalog/wjsum97/">Web Security: A Matter of
      Trust</a>, World Wide Web Journal, Volume 2, Issue 3, Summer 1997
      ã«æŽ²è¼‰ã•れã¾ã—ãŸã€‚
      è‚¯å®šçš„ãªæ„見㯠<a href="mailto:hirsch@fjhirsch.com">Frederick Hirsch</a> æ°
       (元記事ã®è‘—者) ã¸å…¨ã¦ã®è‹¦æƒ…㯠<a href="mailto:rse@engelschall.com">Ralf S. Engelschall</a> (
      <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> ã®ä½œè€…) ã¸ãŠé¡˜ã„ã—ã¾ã™ã€‚
      <span class="transnote">(<em>訳注:</em> 訳ã«ã¤ã„ã¦ã¯ <a href="mailto:apache-docs@ml.apache.or.jp">
      Apache ドキュメント翻訳プロジェクト</a>
      ã¸ãŠé¡˜ã„ã—ã¾ã™ã€‚)</span></p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#cryptographictech">æš—å·åŒ–技術</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#certificates">証明書</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ssl">Secure Sockets Layer (SSL)</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#references">å‚考文献</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cryptographictech" id="cryptographictech">æš—å·åŒ–技術</a></h2>
      
      <p>SSL ã‚’ç†è§£ã™ã‚‹ã«ã¯ã€æš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã€
      メッセージダイジェスト関数(別å: 一方å‘関数ã€ãƒãƒƒã‚·ãƒ¥é–¢æ•°)ã€
      é›»å­ç½²åãªã©ã¸ã®ç†è§£ãŒå¿…è¦ã§ã™ã€‚
      ã“ã‚Œã‚‰ã®æŠ€è¡“ã¯æœ¬ãŒä¸¸ã”ã¨å¿…è¦ãªé¡Œç›®ã§
      (例ãˆã° [<a href="#AC96">AC96</a>] ã‚’å‚ç…§)ã€
      プライãƒã‚·ãƒ¼ã€ä¿¡ç”¨ã€èªè¨¼ãªã©ã®æŠ€è¡“ã®åŸºç¤Žã¨ãªã£ã¦ã„ã¾ã™ã€‚</p>
      
      <h3><a name="cryptographicalgo" id="cryptographicalgo">æš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ </a></h3>
      
          <p>例ãˆã°ã€ã‚¢ãƒªã‚¹ãŒé€é‡‘ã®ãŸã‚ã«éŠ€è¡Œã«ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’é€ã‚ŠãŸã„ã¨ã—ã¾ã™ã€‚
          å£åº§ç•ªå·ã‚„é€é‡‘ã®é‡‘é¡ãŒå«ã¾ã‚Œã‚‹ãŸã‚ã€
          アリスã¯ãã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’秘密ã«ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚
          解決方法ã®ä¸€ã¤ã¯æš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’使ã£ã¦ã€ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’
          復å·ã•れるã¾ã§èª­ã‚€ã“ã¨ãŒã§ããªã„æš—å·åŒ–ã•れãŸ
          形態ã«å¤‰ãˆã¦ã—ã¾ã†ã“ã¨ã§ã™ã€‚
          ãã®å½¢æ…‹ã«ãªã‚‹ã¨ã€
          メッセージã¯ç§˜å¯†ã®éµã«ã‚ˆã£ã¦ã®ã¿å¾©å·åŒ–ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          éµãªã—ã§ã¯ã€ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯å½¹ã«ç«‹ã¡ã¾ã›ã‚“。
          è‰¯ã„æš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¯ã€ä¾µå…¥è€…ãŒå…ƒã®ãƒ†ã‚­ã‚¹ãƒˆã‚’解読ã™ã‚‹ã“ã¨ã‚’
          éžå¸¸ã«é›£ã—ãã™ã‚‹ãŸã‚ã€åŠªåŠ›ãŒå‰²ã«åˆã‚ãªãã•ã›ã¾ã™ã€‚</p>
      
          <p>æš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã«ã¯
          従æ¥åž‹ã¨å…¬é–‹éµã®äºŒã¤ã®ç¨®é¡žãŒã‚りã¾ã™ã€‚</p>
      
          <dl>
          <dt>従æ¥åž‹æš—å·</dt>
          <dd>対称暗å·ã¨ã—ã¦ã‚‚知られã€
          é€ä¿¡è€…ã¨å—信者ãŒéµã‚’共有ã™ã‚‹ã“ã¨ãŒå¿…è¦ã§ã™ã€‚
          éµã¨ã¯ã€ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’æš—å·åŒ–ã—ãŸã‚Šå¾©å·ã™ã‚‹ã®ã«ä½¿ã‚れる秘密
          ã®æƒ…å ±ã®ã“ã¨ã§ã™ã€‚
          ã“ã®éµãŒç§˜å¯†ã«ãªã£ã¦ã„ã‚‹é™ã‚Šã€é€ä¿¡è€…ã¨å—信者以外ã¯èª°ã‚‚メッセージを読
          ã‚€ã“ã¨ãŒã§ãã¾ã›ã‚“。
          ã‚‚ã—ã‚‚ã€ã‚¢ãƒªã‚¹ã¨éŠ€è¡ŒãŒç§˜å¯†ã®éµã‚’知ã£ã¦ã„ã‚‹ãªã‚‰ã€
          彼らã¯ãŠäº’ã„ã«ç§˜å¯†ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’é€ã‚‹ã“ã¨ãŒã§ãã‚‹ã§ã—ょã†ã€‚
          ãŸã ã—交信ã®å‰ã«ã€äº‹å‰ã«å†…密ã«éµã‚’共有ã™ã‚‹ã¨ã„ã†ä½œæ¥­è‡ªä½“ã¯é›£é¡Œã‹ã‚‚ã—れã¾ã›ã‚“。</dd>
      
          <dt>公開鵿š—å·</dt>
          <dd>éžå¯¾ç§°æš—å·ã¨ã—ã¦ã‚‚知られã€
          メッセージを暗å·åŒ–ã™ã‚‹ã“ã¨ã®ã§ãる二ã¤ã®éµ
          を使用ã™ã‚‹ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’定義ã™ã‚‹ã“ã¨ã§éµã®ã‚„りå–りã®å•題を解決
          ã—ã¾ã™ã€‚
          ã‚‚ã—ã€ã‚ã‚‹éµãŒæš—å·åŒ–ã«ä½¿ã‚れãŸãªã‚‰ã€
          ã‚‚ã†ç‰‡æ–¹ã®éµã§å¾©å·ã—ãªã‘れã°ã„ã‘ã¾ã›ã‚“。
          ã“ã®æ–¹å¼ã«ã‚ˆã£ã¦ã€ä¸€ã¤ã®éµã‚’公表ã—ã¦(公開éµ)ã€
          ã‚‚ã†ç‰‡æ–¹ã‚’秘密ã«ã—ã¦ãŠã(秘密éµ)ã ã‘ã§ã€
          安全ãªãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’å—ã‘å–ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</dd>
          </dl>
      
          <p>公開éµã‚’使ã£ã¦èª°ã‚‚ãŒãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’æš—å·åŒ–ã§ãã¾ã™ãŒã€ç§˜
          密éµã®æŒã¡ä¸»ã ã‘ãŒãれを読むã“ã¨ãŒã§ãã¾ã™ã€‚
          ã“ã®æ–¹æ³•ã§ã€éŠ€è¡Œã®å…¬é–‹éµã‚’使ã£ã¦æš—å·åŒ–ã™ã‚‹ã“ã¨ã§ã€
          アリスã¯ç§˜å¯†ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’é€ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          銀行ã®ã¿ãŒé€ã‚‰ã‚ŒãŸãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’復å·ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
      
      <h3><a name="messagedigests" id="messagedigests">メッセージダイジェスト</a></h3>
      
          <p>アリスã¯ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’秘密ã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ãŒã€
          誰ã‹ãŒä¾‹ãˆã°è‡ªåˆ†ã«é€é‡‘ã™ã‚‹ã‚ˆã†ã«ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’変更ã—ãŸã‚Šã€
          別ã®ã‚‚ã®ã«ç½®ãæ›ãˆã¦ã—ã¾ã†ã‹ã‚‚ã—れãªã„ã¨ã„ã†å•題ãŒã‚りã¾ã™ã€‚
          アリスã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã ã¨ã„ã†ä¿¡æ†‘性をä¿è¨¼ã™ã‚‹æ–¹æ³•ã®ä¸€ã¤ã¯ã€
          メッセージã®ç°¡æ½”ãªãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã‚’作ã£ã¦ã€ãれも銀行ã«é€ã‚‹ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚
          メッセージをå—ã‘å–ã‚‹ã¨éŠ€è¡Œå´ã§ã‚‚ダイジェストを作æˆã—ã€
          アリスãŒé€ã£ãŸãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã¨æ¯”ã¹ã¾ã™ã€‚ã‚‚ã—一致ã—ãŸãªã‚‰ã€
          å—ã‘å–ã£ãŸãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯ç„¡å‚·ã ã¨ã„ã†ã“ã¨ã«ãªã‚Šã¾ã™ã€‚</p>
      
          <p>ã“ã®ã‚ˆã†ãªè¦ç´„ã¯<dfn>メッセージダイジェスト</dfn>ã€
          <em>一方行関数</em>ã€ã¾ãŸã¯<em>ãƒãƒƒã‚·ãƒ¥é–¢æ•°</em>ã¨å‘¼ã°ã‚Œã¾ã™ã€‚
          メッセージダイジェストã¯é•·ã„å¯å¤‰é•·ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‹ã‚‰
          短ã„固定長ã®è¡¨ç¾ã‚’作るã®ã«ä½¿ã‚れã¾ã™ã€‚
          ダイジェストアルゴリズムã¯ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‹ã‚‰
          一æ„ãªãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã‚’生æˆã™ã‚‹ã‚ˆã†ã«ä½œã‚‰ã‚Œã¦ã„ã¾ã™ã€‚
          メッセージダイジェストã¯ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã‹ã‚‰å…ƒã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’
          判定ã™ã‚‹ã®ãŒã¨ã¦ã‚‚難ã—ã„よã†ã«ã§ãã¦ã„ã¦ã€
          åŒã˜è¦ç´„を作æˆã™ã‚‹äºŒã¤ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’探ã™ã®ã¯(ç†è«–上)ä¸å¯èƒ½ã§ã™ã€‚
          ã“れã«ã‚ˆã£ã¦ã€è¦ç´„を変更ã™ã‚‹ã“ã¨ãªããƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’ç½®ãæ›ãˆã‚‰ã‚Œã‚‹
          å¯èƒ½æ€§ã‚’排除ã—ã¦ã„ã¾ã™ã€‚</p>
      
          <p>アリスã¸ã®ã‚‚ã†ä¸€ã¤ã®å•題ã¯ã€ã“ã®ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã‚’安全ã«é€ã‚‹æ–¹æ³•を探ã™ã“ã¨ã§ã™ã€‚
          ダイジェストãŒå®‰å…¨ã«é€ã‚‰ã‚Œã‚Œã°ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã®ä¿¡æ†‘性ãŒä¿éšœã•れã¦ã€
          ダイジェストã®ä¿¡æ†‘性をもã£ã¦ã‚ªãƒªã‚¸ãƒŠãƒ«ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®ä¿¡æ†‘性を得るã“ã¨ãŒã§ãã¾ã™ã€‚
          ダイジェストを安全ã«é€ã£ãŸå ´åˆã«ã®ã¿ã€ãã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®
          信憑性ãŒå¾—られã¾ã™ã€‚</p>
      
          <p>ダイジェスト安全ã«é€ã‚‹æ–¹æ³•ã®ä¸€ã¤ã¯ã€é›»å­ç½²åã«å«ã‚る方法ã§ã™ã€‚</p>
      
      
      <h3><a name="digitalsignatures" id="digitalsignatures">é›»å­ç½²å</a></h3>
      <p>アリスãŒéŠ€è¡Œã«ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’é€ã£ãŸã¨ãã€
      侵入者ãŒå½¼å¥³ã«ãªã‚Šã™ã¾ã—ã¦å½¼å¥³ã®å£åº§ã¸ã®å–引を申請ã§ããªã„よã†ã«ã€
      銀行å´ã§ã¯ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒæœ¬å½“ã«å½¼å¥³ã‹ã‚‰ã®ã‚‚ã®ã‹ç¢ºå®Ÿã«åˆ†ã‹ã‚‹ã‚ˆã†ã«ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。
      アリスã«ã‚ˆã£ã¦ä½œæˆã•れã¦ã€ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã«å«ã¾ã‚ŒãŸ
      <em>é›»å­ç½²å</em>ãŒã“ã“ã§å½¹ã«ç«‹ã¡ã¾ã™ã€‚</p>
      
      <p>é›»å­ç½²åã¯ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã‚„ãã®ä»–ã®æƒ…å ±(処ç†ç•ªå·ãªã©)ã‚’
      é€ä¿¡è€…ã®ç§˜å¯†éµã§æš—å·åŒ–ã™ã‚‹ã“ã¨ã§ä½œã‚‰ã‚Œã¾ã™ã€‚
      誰もãŒå…¬é–‹éµã‚’使ã£ã¦ç½²åã‚’<em>復å·</em>ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ãŒã€
      é€ä¿¡è€…ã®ã¿ãŒç§˜å¯†éµã‚’知ã£ã¦ã„ã¾ã™ã€‚
      ã“れã¯é€ä¿¡è€…ã®ã¿ãŒç½²åã—ãˆãŸã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚
      ダイジェストを電å­ç½²åã«å«ã‚€ã“ã¨ã¯ã€
      ãã®ç½²åãŒãã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®ã¿ã«æœ‰åйã§ã‚ã‚‹ã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚
      ã“れã¯ã€èª°ã‚‚ダイジェストを変ãˆã¦ç½²åã‚’ã™ã‚‹ã“ã¨ãŒã§ããªã„ãŸã‚ã€
      メッセージã®ä¿¡ç”¨ã‚‚ä¿è¨¼ã—ã¾ã™ã€‚</p>
      
      <p>侵入者ãŒç½²åã‚’å‚å—ã—ã¦å¾Œæ—¥ã«å†åˆ©ç”¨ã™ã‚‹ã®ã‚’防ããŸã‚
      é›»å­ç½²åã«ã¯ä¸€æ„ãªå‡¦ç†ç•ªå·ãŒå«ã¾ã‚Œã¾ã™ã€‚
      ã“れã¯ã€ã‚¢ãƒªã‚¹ãŒãã‚“ãªãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯é€ã£ã¦ã„ãªã„ã¨è¨€ã†è©æ¬º
      ã‹ã‚‰éŠ€è¡Œã‚’å®ˆã‚Šã¾ã™ã€‚
      彼女ã ã‘ãŒç½²åã—ãˆãŸã‹ã‚‰ã§ã™ã€‚(å¦èªé˜²æ­¢)</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="certificates" id="certificates">証明書</a></h2>
      
      <p>アリスã¯ç§˜å¯†ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’銀行ã«é€ã‚Šã€
      ç½²åã‚’ã—ã¦ã€ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®ä¿¡ç”¨ã‚’ä¿è¨¼ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ãŠã†ã«ãªã‚Šã¾ã—ãŸãŒã€
      通信ã—ã¦ã„ã‚‹ç›¸æ‰‹ãŒæœ¬å½“ã«éŠ€è¡Œãªã®ã‹ç¢ºã‹ã‚ãªãã¦ã¯ã„ã‘ã¾ã›ã‚“。
      ã¤ã¾ã‚Šå½¼å¥³ãŒä½¿ãŠã†ã¨ã—ã¦ã„る公開éµãŒã€éŠ€è¡Œã®ç§˜å¯†éµã¨å¯¾ã«ãªã£ã¦ã„ã¦ã€
      侵入者ã®ç§˜å¯†éµã¨å¯¾ã«ãªã£ã¦ã„ã‚‹ã‚ã‘ã§ã¯ãªã„ã“ã¨ã‚’
      確ã‹ã‚ãªãã¦ã¯ã„ã‘ãªã„ã“ã¨ã‚’æ„味ã—ã¦ã„ã¾ã™ã€‚
      åŒæ§˜ã«éŠ€è¡Œã¯ã€ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®ç½²åãŒæœ¬å½“ã«ã‚¢ãƒªã‚¹ã®æŒã£ã¦ã„ã‚‹
      秘密éµã§ç½²åã•れãŸç½²åã‹ã‚’確èªã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚</p>
      
      <p>ã‚‚ã—両者ã«èº«å…ƒã‚’証明ã—ã€å…¬é–‹éµã‚’確èªã—ã€ã¾ãŸä¿¡é ¼ã•ã‚ŒãŸæ©Ÿé–¢ãŒç½²å
      ã—ãŸè¨¼æ˜Žæ›¸ãŒã‚れã°ã€ä¸¡è€…ã¨ã‚‚通信相手ã«ã¤ã„ã¦æ­£ã—ã„相手ã ã¨
      確信ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
      ãã®ã‚ˆã†ãªä¿¡é ¼ã•ã‚ŒãŸæ©Ÿé–¢ã¯<em>èªè¨¼å±€</em>
       (Certificate Authority ã¾ãŸã¯ CA) ã¨å‘¼ã°ã‚Œã€
      証明書 (certificate) ãŒèªè¨¼ (authentication) ã«ä½¿ã‚れã¾ã™ã€‚</p>
      
      <h3><a name="certificatecontents" id="certificatecontents">証明書ã®å†…容</a></h3>
      
          <p>証明書ã¯å…¬é–‹éµã¨å€‹äººã€ã‚µãƒ¼ãƒã€ãã®ä»–ã®ä¸»ä½“ã®å®Ÿåœ¨ã®èº«å…ƒã‚’
          関連付ã‘ã¾ã™ã€‚
          <a href="#table1">表1</a>ã«ç¤ºã•れるよã†ã«è¨¼æ˜Žå¯¾è±¡ã®æƒ…å ±ã¯
          èº«å…ƒè¨¼æ˜Žã®æƒ…å ±(識別å)ã¨å…¬é–‹éµãŒå«ã¾ã‚Œã¾ã™ã€‚
          証明書ã¯ã¾ãŸã€èªè¨¼å±€ã®èº«å…ƒè¨¼æ˜Žã¨ç½²åã€ãã—ã¦è¨¼æ˜Žæ›¸ã®æœ‰åŠ¹æœŸé–“ã‚’
          å«ã¿ã¾ã™ã€‚
          シリアルナンãƒãƒ¼ãªã©ã®èªè¨¼å±€ã®ç®¡ç†ä¸Šã®æƒ…報や
          ãã®ä»–ã®è¿½åŠ ã®æƒ…å ±ãŒå«ã¾ã‚Œã¦ã„ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。</p>
      
          <h4><a name="table1" id="table1">表1: 証明書情報</a></h4>
          
          <table>
          
          <tr><th>証明対象</th>
              <td>識別åã€å…¬é–‹éµ</td></tr>
          <tr><th>発行者</th>
              <td>識別åã€å…¬é–‹éµ</td></tr>
          <tr><th>有効期間</th>
              <td>é–‹å§‹æ—¥ã€å¤±åŠ¹æ—¥</td></tr>
          <tr><th>ç®¡ç†æƒ…å ±</th>
              <td>ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã€ã‚·ãƒªã‚¢ãƒ«ãƒŠãƒ³ãƒãƒ¼</td></tr>
          <tr><th>拡張情報</th>
              <td>基本的ãªåˆ¶ç´„ã€ãƒãƒƒãƒˆã‚¹ã‚±ãƒ¼ãƒ—フラッグã€ãã®ä»–</td></tr>
          </table>
          
      
          <p>識別å(ディスティングイッシュ・ãƒãƒ¼ãƒ )ã¯ç‰¹å®šã®çжæ³ã«ãŠã‘ã‚‹
          身分証明をæä¾›ã™ã‚‹ã®ã«ä½¿ã‚れã¦ã„ã¾ã™ã€‚例ãˆã°ã€ã‚る人ã¯
          ç§ç”¨ã¨ä¼šç¤¾ã¨ã§åˆ¥ã€…ã®èº«åˆ†è¨¼æ˜Žã‚’æŒã¤ã‹ã‚‚ã—れã¾ã›ã‚“。
          
          識別å㯠X.509 æ¨™æº–è¦æ ¼ [<a href="#X509">X509</a>] ã§å®šç¾©ã•れã¦ã„ã¾ã™ã€‚
          X.509 æ¨™æº–è¦æ ¼ã¯ã€é …ç›®ã€é …ç›®åã€ãã—ã¦é …ç›®ã®ç•¥ç§°ã‚’定義ã—ã¦ã„ã¾ã™ã€‚(<a href="#table2">表
          2</a> å‚ç…§)</p>
      
          <h4><a name="table2" id="table2">表 2: è­˜åˆ¥åæƒ…å ±</a></h4>
          
          <table class="bordered">
          
          <tr><th>識別åé …ç›®</th>
              <th>略称</th>
              <th>説明</th>
              <th>例</th></tr>
          <tr><td>Common Name (コモンãƒãƒ¼ãƒ )</td>
              <td>CN</td>
              <td>èªè¨¼ã•れるåå‰<br />
              SSL接続ã™ã‚‹URL</td>
              <td>CN=www.example.com</td></tr>
          <tr><td>Organization or Company (組織å)</td>
              <td>O</td>
              <td>å›£ä½“ã®æ­£å¼è‹±èªžçµ„ç¹”å</td>
              <td>O=Example Japan K.K.</td></tr>
          <tr><td>Organizational Unit (部門å)</td>
              <td>OU</td>
              <td>部署åãªã©</td>
              <td>OU=Customer Service</td></tr>
          <tr><td>City/Locality (市区町æ‘)</td>
              <td>L</td>
              <td>所在ã—ã¦ã‚‹å¸‚区町æ‘</td>
              <td>L=Sapporo</td></tr>
          <tr><td>State/Province (都é“府県)</td>
              <td>ST</td>
              <td>所在ã—ã¦ã‚‹éƒ½é“府県</td>
              <td>ST=Hokkaido</td></tr>
          <tr><td>Country(国)</td>
              <td>C</td>
              <td>所在ã—ã¦ã„る国åã® ISO コード<br />
              日本ã®å ´åˆ JP
              </td>
              <td>C=JP</td></tr>
          </table>
          
      
          <p>èªè¨¼å±€ã¯ã©ã®é …ç›®ãŒçœç•¥å¯èƒ½ã§ã©ã‚ŒãŒå¿…é ˆã‹ã®æ–¹é‡ã‚’定義ã™ã‚‹
          ã‹ã‚‚ã—れã¾ã›ã‚“。項目ã®å†…容ã«ã¤ã„ã¦ã‚‚èªè¨¼å±€ã‚„証明書ã®ãƒ¦ãƒ¼ã‚¶ã‹ã‚‰ã®
          è¦ä»¶ãŒã‚ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。
          例ãˆã°ãƒãƒƒãƒˆã‚¹ã‚±ãƒ¼ãƒ—ã®ãƒ–ラウザã¯ã€ã‚µãƒ¼ãƒã®è¨¼æ˜Žæ›¸ã®
           Common Name (コモンãƒãƒ¼ãƒ )ãŒã‚µãƒ¼ãƒã®ãƒ‰ãƒ¡ã‚¤ãƒ³åã®
           <code>*.snakeoil.com</code> 
          ã¨ã„ã†ã‚ˆã†ãªãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã®ãƒ‘ターンã«ãƒžãƒƒãƒã™ã‚‹ã“ã¨
          ã‚’è¦æ±‚ã—ã¾ã™ã€‚</p>
      
          <p>ãƒã‚¤ãƒŠãƒªå½¢å¼ã®è¨¼æ˜Žæ›¸ã¯ ASN.1 表記法
           [<a href="#X208">X208</a>] [<a href="#PKCS">PKCS</a>] ã§
          定義ã•れã¦ã„ã¾ã™ã€‚
          ã“ã®è¡¨è¨˜æ³•ã¯å†…容をã©ã®ã‚ˆã†ã«è¨˜è¿°ã™ã‚‹ã‹ã‚’定義ã—ã€
          符å·åŒ–ã®è¦å®šãŒã“ã®æƒ…å ±ãŒã©ã®ã‚ˆã†ã«ãƒã‚¤ãƒŠãƒªå½¢å¼ã«å¤‰æ›ã•れるã‹ã‚’
          定義ã—ã¾ã™ã€‚
          証明書ã®ãƒã‚¤ãƒŠãƒªç¬¦å·åŒ–㯠Distinguished Encoding
          Rules (DER) ã§å®šç¾©ã•れã€ãれã¯ã‚ˆã‚Šä¸€èˆ¬çš„㪠Basic Encoding Rules
          (BER) ã«åŸºã¥ã„ã¦ã„ã¾ã™ã€‚
          ãƒã‚¤ãƒŠãƒªå½¢å¼ã‚’扱ã†ã“ã¨ã®ã§ããªã„é€ä¿¡ã§ã¯ã€
          ãƒã‚¤ãƒŠãƒªå½¢å¼ã¯ Base64 符å·åŒ– [<a href="#MIME">MIME</a>] ã§
          ASCII å½¢å¼ã«å¤‰æ›ã•れるã“ã¨ãŒã‚りã¾ã™ã€‚
          開始デリミタ行ã¨çµ‚了デリミタ行ã§å›²ã¾ã‚ŒãŸã€ã“ã®å½¢å¼ã®ã“ã¨ã‚’
          PEM ("Privacy Enhanced Mail") 符å·åŒ–ã•れãŸè¨¼æ˜Žæ›¸ã¨è¨€ã„ã¾ã™ã€‚</p>
      
          <div class="example"><h3>PEM 符å·åŒ–ã•れãŸè¨¼æ˜Žæ›¸ã®ä¾‹ (example.crt)</h3><pre>-----BEGIN CERTIFICATE-----
      MIIC7jCCAlegAwIBAgIBATANBgkqhkiG9w0BAQQFADCBqTELMAkGA1UEBhMCWFkx
      FTATBgNVBAgTDFNuYWtlIERlc2VydDETMBEGA1UEBxMKU25ha2UgVG93bjEXMBUG
      A1UEChMOU25ha2UgT2lsLCBMdGQxHjAcBgNVBAsTFUNlcnRpZmljYXRlIEF1dGhv
      cml0eTEVMBMGA1UEAxMMU25ha2UgT2lsIENBMR4wHAYJKoZIhvcNAQkBFg9jYUBz
      bmFrZW9pbC5kb20wHhcNOTgxMDIxMDg1ODM2WhcNOTkxMDIxMDg1ODM2WjCBpzEL
      MAkGA1UEBhMCWFkxFTATBgNVBAgTDFNuYWtlIERlc2VydDETMBEGA1UEBxMKU25h
      a2UgVG93bjEXMBUGA1UEChMOU25ha2UgT2lsLCBMdGQxFzAVBgNVBAsTDldlYnNl
      cnZlciBUZWFtMRkwFwYDVQQDExB3d3cuc25ha2VvaWwuZG9tMR8wHQYJKoZIhvcN
      AQkBFhB3d3dAc25ha2VvaWwuZG9tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
      gQDH9Ge/s2zcH+da+rPTx/DPRp3xGjHZ4GG6pCmvADIEtBtKBFAcZ64n+Dy7Np8b
      vKR+yy5DGQiijsH1D/j8HlGE+q4TZ8OFk7BNBFazHxFbYI4OKMiCxdKzdif1yfaa
      lWoANFlAzlSdbxeGVHoT0K+gT5w3UxwZKv2DLbCTzLZyPwIDAQABoyYwJDAPBgNV
      HRMECDAGAQH/AgEAMBEGCWCGSAGG+EIBAQQEAwIAQDANBgkqhkiG9w0BAQQFAAOB
      gQAZUIHAL4D09oE6Lv2k56Gp38OBDuILvwLg1v1KL8mQR+KFjghCrtpqaztZqcDt
      2q2QoyulCgSzHbEGmi0EsdkPfg6mp0penssIFePYNI+/8u9HT4LuKMJX15hxBam7
      dUHzICxBVC1lnHyYGjDuAMhe396lYAn8bCld1/L4NMGBCQ==
      -----END CERTIFICATE-----</pre></div>
      
      
      <h3><a name="certificateauthorities" id="certificateauthorities">èªè¨¼å±€</a></h3>
      
          <p>証明書を承èªã™ã‚‹å‰ã«ã€è¨¼æ˜Žæ›¸è¦æ±‚ã«è¨˜è¼‰ã•れã¦ã„る情報を確èªã—ã€
          èªè¨¼å±€ã¯éµã®æ‰€æœ‰è€…ã®èº«å…ƒã‚’確èªã—ã¾ã™ã€‚
          例ãˆã°ã€ã‚¢ãƒªã‚¹ãŒå€‹äººè¨¼æ˜Žæ›¸ã‚’申請ã—ãŸã¨ã™ã‚‹ã¨ã€
          èªè¨¼å±€ã¯ã‚¢ãƒªã‚¹ãŒè¨¼æ˜Žæ›¸ã®ç”³è«‹ãŒä¸»å¼µã™ã‚‹é€šã‚Šã®
          å½“ã®æœ¬äººã ã¨ã„ã†ã“ã¨ã‚’確èªã—ãªãã¦ã¯ã„ã‘ã¾ã›ã‚“。</p>
      
          <h4><a name="certificatechains" id="certificatechains">証明書ã®é€£éŽ–</a></h4>
          
              <p>èªè¨¼å±€ã¯ä»–ã®èªè¨¼å±€ã¸ã®è¨¼æ˜Žæ›¸ã‚’発行ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
              未知ã®è¨¼æ˜Žæ›¸ã‚’調ã¹ã‚‹æ™‚ã«ã€ã‚¢ãƒªã‚¹ã¯ãã®è¨¼æ˜Žæ›¸ã®ç™ºè¡Œè€…
              ã«è‡ªä¿¡ãŒæŒã¦ã‚‹ã¾ã§ã€ç™ºè¡Œè€…ã®è¨¼æ˜Žæ›¸ã‚’
              ãã®ä¸Šä½éšŽå±¤ã®èªè¨¼å±€ã‚’ãŸã©ã£ã¦èª¿ã¹ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
              「悪質ãªã€è¨¼æ˜Žæ›¸ã®å±é™ºæ€§ã‚’減らã™ãŸã‚ã€
              彼女ã¯é™ã‚‰ã‚ŒãŸé€£éŽ–ã®ç™ºè¡Œè€…ã®ã¿ä¿¡é ¼ã™ã‚‹ã‚ˆã†ã«
              決ã‚ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚</p>
          
      
          <h4><a name="rootlevelca" id="rootlevelca">最上ä½èªè¨¼å±€ã®ä½œæˆ</a></h4>
          
              <p>å‰ã«è¿°ã¹ãŸã‚ˆã†ã«ã€å…¨ã¦ã®è¨¼æ˜Žæ›¸ã«ã¤ã„ã¦ã€
              最上ä½ã®èªè¨¼å±€(CA)ã¾ã§ãれãžã‚Œã®ç™ºè¡Œè€…ãŒ
              対象ã®èº«å…ƒè¨¼æ˜Žã®æœ‰åŠ¹æ€§ã‚’æ˜Žã‚‰ã‹ã«ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
              å•題ã¯ã€èª°ãŒãã®æœ€ä¸Šä½ã®èªè¨¼æ©Ÿé–¢ã®è¨¼æ˜Žæ›¸ã‚’ä¿è¨¼ã™ã‚‹ã®ã‹ã€
              ã¨ã„ã†ã“ã¨ã§ã™ã€‚
              ã“ã®ã‚ˆã†ãªå ´åˆã«é™ã‚Šã€è¨¼æ˜Žæ›¸ã¯ã€Œè‡ªå·±ç½²åã€ã•れã¾ã™ã€‚
              ブラウザã«ã¯ã€ã¨ã¦ã‚‚よã知られã¦ã„ã‚‹èªè¨¼å±€ãŒåˆæœŸç™»éŒ²ã•れã¦ã„ã¾ã™ãŒã€
              自己署åã•れãŸè¨¼æ˜Žæ›¸ã‚’信用ã™ã‚‹éš›ã«ã¯
              ç´°å¿ƒã®æ³¨æ„ãŒå¿…è¦ã§ã™ã€‚
              最上ä½èªè¨¼å±€ãŒå…¬é–‹éµã‚’広ã公表ã™ã‚‹ã“ã¨ã§ã€
              ãã®éµã‚’ä¿¡é ¼ã™ã‚‹ãƒªã‚¹ã‚¯ã‚’低ãã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
              ã‚‚ã—ã€ä»–人ãŒãã®èªè¨¼å±€ã«ãªã‚Šã™ã¾ã—ãŸæ™‚ã«ã€ãれãŒéœ²è¦‹ã—ã‚„
              ã™ã„ã‹ã‚‰ã§ã™ã€‚</p>
      
              <p><a href="http://www.thawte.com/">Thawte</a> 
              ã‚„ <a href="http://www.verisign.com/">VeriSign</a> 
              ã®ã‚ˆã†ãªå¤šãã®ä¼šç¤¾ãŒèªè¨¼å±€ã¨ã—ã¦é–‹è¨­ã—ã¾ã—ãŸã€‚
              ã“ã®ã‚ˆã†ãªä¼šç¤¾ã¯ä»¥ä¸‹ã®ã‚µãƒ¼ãƒ“スをæä¾›ã—ã¾ã™:</p>
      
              <ul>
              <li>証明書申請ã®ç¢ºèª</li>
              <li>証明書申請ã®å‡¦ç†</li>
              <li>証明書ã®ç™ºè¡Œã¨ç®¡ç†</li>
              </ul>
      
              <p>自分ã§èªè¨¼å±€ã‚’作るã“ã¨ã‚‚å¯èƒ½ã§ã™ã€‚
              インターãƒãƒƒãƒˆç’°å¢ƒã§ã¯å±é™ºã§ã™ãŒã€
              個人やサーãƒã®èº«å…ƒè¨¼æ˜ŽãŒç°¡å˜ã«è¡Œãˆã‚‹çµ„ç¹”ã®
              イントラãƒãƒƒãƒˆå†…ã§ã¯å½¹ã«ç«‹ã¤ã‹ã‚‚ã—れã¾ã›ã‚“。</p>
          
      
          <h4><a name="certificatemanagement" id="certificatemanagement">証明書管ç†</a></h4>
          
              <p>èªè¨¼å±€ã®é–‹è¨­ã¯å¾¹åº•ã—ãŸç®¡ç†ã€æŠ€è¡“ã€é‹ç”¨ã®ä½“制を必è¦ã¨ã™ã‚‹
              責任ã®ã‚る仕事ã§ã™ã€‚
              èªè¨¼å±€ã¯è¨¼æ˜Žæ›¸ã‚’発行ã™ã‚‹ã ã‘ã§ãªãã€
              管ç†ã‚‚ã—ãªã‘れã°ãªã‚Šã¾ã›ã‚“。
              具体的ã«ã¯ã€è¨¼æ˜Žæ›¸ãŒã„ã¤ã¾ã§æœ‰åйã§ã‚り続ã‘ã‚‹ã‹ã‚’決定ã—ã€æ›´æ–°ã—ã€
              ã¾ãŸéŽåŽ»ç™ºè¡Œã•れã¦å¤±åйã—ãŸè¨¼æ˜Žæ›¸ã®ãƒªã‚¹ãƒˆ
              (Certificate Revocation Lists ã¾ãŸã¯ CRL)
              を管ç†ã—ãªã‘れã°ã„ã‘ã¾ã›ã‚“。</p>
              
              <p>例ãˆã°ã‚¢ãƒªã‚¹ãŒéŽåŽ»ã€ä¼šç¤¾ã®ç¤¾å“¡ã§ã‚ã‚‹ã“ã¨ã‚’証明ã™ã‚‹è¨¼æ˜Žæ›¸ã‚’æŒã£ã¦ã„ãŸãŒã€
              ç¾åœ¨ã¯é€€è·ã—ã¦ã„ãŸéš›ã€ãã®è¨¼æ˜Žæ›¸ã¯å¤±åйã•れãªã‘れã°ãªã‚Šã¾ã›ã‚“。
              è¨¼æ˜Žæ›¸ã¯æ¬¡ã€…ã¨äººã«æ¸¡ã•れã¦ã„ãã‚‚ã®ãªã®ã§ã€
              証明書ãã®ã‚‚ã®ã‹ã‚‰ã€ãれãŒå–り消ã•れãŸã‹åˆ¤æ–­ã™ã‚‹ã“ã¨ã¯
              ä¸å¯èƒ½ã§ã™ã€‚
              よã£ã¦ã€è¨¼æ˜Žæ›¸ã®æœ‰åŠ¹æ€§ã‚’èª¿ã¹ã‚‹ã¨ãã«ã¯ã€
              èªè¨¼å±€ã«é€£çµ¡ã—㦠CRL ã‚’ç…§åˆã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
              普通ã“ã®éŽç¨‹ã¯è‡ªå‹•化ã•れã¦ã„ã‚‹ã‚‚ã®ã§ã¯ã‚りã¾ã›ã‚“。</p>
      
              <div class="note"><h3>注æ„</h3>
              <p>ブラウザã«ä¿¡ç”¨ã§ãã‚‹èªè¨¼å±€ã¨ã—ã¦ãƒ‡ãƒ•ォルトã§ç™»éŒ²ã•れã¦ã„ãªã„
              èªè¨¼å±€ã‚’使ãŠã†ã¨ã—ãŸå ´åˆã€
              èªè¨¼å±€ã®è¨¼æ˜Žæ›¸ã‚’ブラウザã«èª­ã¿è¾¼ã‚“ã§ã€
              ブラウザãŒãã®èªè¨¼å±€ã«ã‚ˆã£ã¦ç½²åã•れãŸã‚µãƒ¼ãƒã®è¨¼æ˜Žæ›¸ã‚’
              有効ã«ã™ã‚‹å¿…è¦ãŒã‚りã¾ã™ã€‚
              一度読ã¿è¾¼ã¾ã‚Œã‚‹ã¨ã€ãã®èªè¨¼å±€ã«ã‚ˆã£ã¦ç½²åã•れãŸå…¨ã¦ã®
              証明書をå—ã‘入れるãŸã‚ã€å±é™ºã‚’ä¼´ã„ã¾ã™ã€‚</p>
              </div>
          
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ssl" id="ssl">Secure Sockets Layer (SSL)</a></h2>
      
      <p>Secure Sockets Layer プロトコルã¯ä¿¡é ¼æ€§ã®ã‚るコãƒã‚¯ã‚·ãƒ§ãƒ³åž‹ã®
      ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯å±¤ã®ãƒ—ロトコル(例ãˆã°ã€TCP/IP)ã¨
      アプリケーション層ã®ãƒ—ロトコル(例ãˆã°ã€HTTP)
      ã®é–“ã«ç½®ãã“ã¨ãŒã§ãã¾ã™ã€‚
      SSL ã¯ã€ç›¸äº’èªè¨¼ã«ã‚ˆã£ã¦ã‚µãƒ¼ãƒã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆé–“ã®å®‰å…¨ãªé€šä¿¡ã‚’ã€
      é›»å­ç½²åã«ã‚ˆã£ã¦ãƒ‡ãƒ¼ã‚¿ã®å®Œå…¨æ€§ã‚’ã€
      ãã—ã¦æš—å·åŒ–ã«ã‚ˆã£ã¦ãƒ—ライãƒã‚·ã‚’æä¾›ã—ã¾ã™ã€‚</p>
      
      <p>SSL ãƒ—ãƒ­ãƒˆã‚³ãƒ«ã¯æš—å·åŒ–ã€ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã€é›»å­ç½²åã«ã¤ã„ã¦ã€
      様々ãªã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’サãƒãƒ¼ãƒˆã™ã‚‹ã‚ˆã†ã«ã§ãã¦ã„ã¾ã™ã€‚
      ã“ã†ã™ã‚‹ã“ã¨ã§ã€æ³•や輸出ã®è¦åˆ¶ã‚’考慮ã«å…¥ã‚Œã¦ã€ã‚µãƒ¼ãƒã«åˆã‚ã›ãŸ
      アルゴリズムをé¸ã¶ã“ã¨ãŒã§ãã€ã¾ãŸã€æ–°ã—ã„アルゴリズムを
      利用ã—ã¦ã„ãã“ã¨ã‚‚å¯èƒ½ã«ã—ã¦ã„ã¾ã™ã€‚
      アルゴリズムã®é¸æŠžã¯ãƒ—ロトコルセッション開始時ã«
      サーãƒã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆé–“ã§å–り決ã‚られã¾ã™ã€‚</p>
      
      <h3><a name="table4" id="table4">表4: SSL プロトコルã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³</a></h3>
      
          <table class="bordered">
          
          <tr><th>ãƒãƒ¼ã‚¸ãƒ§ãƒ³</th>
              <th>出典</th>
              <th>説明</th>
              <th>ブラウザã®ã‚µãƒãƒ¼ãƒˆ</th></tr>
          <tr><td>SSL v2.0</td>
              <td>Vendor Standard (Netscape Corp. より) [<a href="#SSL2">SSL2</a>]</td>
              <td>実装ãŒç¾å­˜ã™ã‚‹åˆã‚ã¦ã® SSL プロトコル</td>
              <td>- NS Navigator 1.x/2.x<br />
              - MS IE 3.x<br />
              - Lynx/2.8+OpenSSL</td></tr>
          <tr><td>SSL v3.0</td>
              <td>Expired Internet Draft (Netscape Corp. より) [<a href="#SSL3">SSL3</a>]</td>
              <td>特定ã®ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£æ”»æ’ƒã‚’防ããŸã‚ã®æ”¹è¨‚ã€
              éžRSA æš—å·ã®è¿½åŠ ã€è¨¼æ˜Žæ›¸éšŽå±¤æ§‹é€ ã®ã‚µãƒãƒ¼ãƒˆ</td>
              <td>- NS Navigator 2.x/3.x/4.x<br />
              - MS IE 3.x/4.x<br />
              - Lynx/2.8+OpenSSL</td></tr>
          <tr><td>TLS v1.0</td>
              <td>Proposed Internet Standard (IETF より) [<a href="#TLS1">TLS1</a>]</td>
              <td>MAC レイヤを HMAC ã¸æ›´æ–°ã€ãƒ–ロック暗å·ã® block
              paddingã€ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸é †åºã®æ¨™æº–化ã€è­¦å‘Šæ–‡ã®å……実ãªã©ã®ãŸã‚
              SSL 3.0 を改訂。</td>
              <td>- Lynx/2.8+OpenSSL</td></tr>
          </table>
      
      
      <p><a href="#table4">表4</a>ã«ç¤ºã•れるã¨ãŠã‚Šã€SSL プロトコルã«ã¯
      ã„ãã¤ã‚‚ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒã‚りã¾ã™ã€‚
      表ã«ã‚‚書ã‹ã‚Œã¦ã„るよã†ã«ã€SSL 3.0 ã®åˆ©ç‚¹ã®ä¸€ã¤ã¯
      証明書階層構造をサãƒãƒ¼ãƒˆã™ã‚‹ã“ã¨ã§ã™ã€‚
      ã“ã®æ©Ÿèƒ½ã«ã‚ˆã£ã¦ã€ã‚µãƒ¼ãƒã¯è‡ªåˆ†ã®è¨¼æ˜Žæ›¸ã«åŠ ãˆã¦ã€
      発行者ã®è¨¼æ˜Žæ›¸ã‚’ãƒ–ãƒ©ã‚¦ã‚¶ã«æ¸¡ã™ã“ã¨ãŒã§ãã¾ã™ã€‚
      証明書階層構造ã«ã‚ˆã£ã¦ã€
      ブラウザã«ç™ºè¡Œè€…ã®è¨¼æ˜Žæ›¸ãŒç›´æŽ¥ç™»éŒ²ã•れã¦ã„ãªãã¦ã‚‚ã€
      階層ã®ä¸­ã«å«ã¾ã‚Œã¦ã„れã°ã€
      ブラウザã¯ã‚µãƒ¼ãƒã®è¨¼æ˜Žæ›¸ã‚’有効化ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
      SSL 3.0 ã¯ç¾åœ¨ Internet Engineering Task Force (IETF) 
      ã«ã‚ˆã£ã¦é–‹ç™ºã•れã¦ã„ã‚‹ Transport Layer Security 
      [<a href="#TLS1">TLS</a>] ãƒ—ãƒ­ãƒˆã‚³ãƒ«æ¨™æº–è¦æ ¼ã®åŸºç¤Žã¨ãªã£ã¦ã„ã¾ã™ã€‚</p>
      
      <h3><a name="session" id="session">セッションã®ç¢ºç«‹</a></h3>
      
          <p><a href="#figure1">図1</a>ã§ç¤ºã•れるよã†ã«ã€
          セッションã®ç¢ºç«‹ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒé–“ã®
          ãƒãƒ³ãƒ‰ã‚·ã‚§ãƒ¼ã‚¯ã‚·ãƒ¼ã‚¯ã‚¨ãƒ³ã‚¹ã«ã‚ˆã£ã¦è¡Œãªã‚れã¾ã™ã€‚
          サーãƒãŒè¨¼æ˜Žæ›¸ã‚’æä¾›ã™ã‚‹ã‹ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®è¨¼æ˜Žæ›¸ã‚’リクエストã™ã‚‹ã‹
          ã¨ã„ã†ã‚µãƒ¼ãƒã®è¨­å®šã«ã‚ˆã‚Šã€ã“ã®ã‚·ãƒ¼ã‚¯ã‚¨ãƒ³ã‚¹ã¯ç•°ãªã‚‹ã‚‚ã®ã¨ãªã‚Šã¾ã™ã€‚
          æš—å·æƒ…å ±ã®ç®¡ç†ã®ãŸã‚ã«ã€è¿½åŠ ã®ãƒãƒ³ãƒ‰ã‚·ã‚§ãƒ¼ã‚¯éŽç¨‹ãŒå¿…è¦ã«ãªã‚‹
          å ´åˆã‚‚ã‚りã¾ã™ãŒã€ã“ã®è¨˜äº‹ã§ã¯
          よãã‚るシナリオを手短ã«èª¬æ˜Žã—ã¾ã™ã€‚
          å…¨ã¦ã®å¯èƒ½æ€§ã«ã¤ã„ã¯ã€SSL 仕様書をå‚ç…§ã—ã¦ãã ã•ã„。</p>
      
          <div class="note"><h3>注æ„</h3>
          <p>一度 SSL セッションãŒç¢ºç«‹ã™ã‚‹ã¨ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’å†åˆ©ç”¨ã™ã‚‹ã“ã¨ã§ã€
          セッションを開始ã™ã‚‹ãŸã‚ã®å¤šãã®éŽç¨‹ã‚’繰り返ã™ã¨ã„ã†
          ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ã®æå¤±ã‚’é˜²ãŽã¾ã™ã€‚
          ãã®ãŸã‚ã€ã‚µãƒ¼ãƒã¯å…¨ã¦ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«ä¸€æ„ãªã‚»ãƒƒã‚·ãƒ§ãƒ³è­˜åˆ¥åã‚’
          割り当ã¦ã€ã‚µãƒ¼ãƒã«ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã—ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯æ¬¡å›žã‹ã‚‰
          (識別åãŒã‚µãƒ¼ãƒã®ã‚­ãƒ£ãƒƒã‚·ãƒ¥ã§æœŸé™åˆ‡ã‚Œã«ãªã‚‹ã¾ã§ã¯)
          ãƒãƒ³ãƒ‰ã‚·ã‚§ãƒ¼ã‚¯ãªã—ã§æŽ¥ç¶šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
          </div>
      
          <p class="figure">
          <img src="../images/ssl_intro_fig1.gif" alt="" width="423" height="327" /><br />
          <a id="figure1" name="figure1"><dfn>図1</dfn></a>: SSL
          ãƒãƒ³ãƒ‰ã‚·ã‚§ãƒ¼ã‚¯ã‚·ãƒ¼ã‚¯ã‚¨ãƒ³ã‚¹æ¦‚ç•¥</p>
      
          <p>サーãƒã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã§ä½¿ã‚れる
          ãƒãƒ³ãƒ‰ã‚·ã‚§ãƒ¼ã‚¯ã‚·ãƒ¼ã‚¯ã‚¨ãƒ³ã‚¹ã®è¦ç´ ã‚’以下ã«ç¤ºã—ã¾ã™:</p>
      
          <ol>
          <li>データ通信ã«ä½¿ã‚れる暗å·ã‚¹ã‚¤ãƒ¼ãƒˆã®å–り決ã‚</li>
          <li>クライアントã¨ã‚µãƒ¼ãƒé–“ã§ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³éµã®ç¢ºç«‹ã¨å…±æœ‰</li>
          <li>オプションã¨ã—ã¦ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«å¯¾ã™ã‚‹ã‚µãƒ¼ãƒã®èªè¨¼</li>
          <li>オプションã¨ã—ã¦ã€ã‚µãƒ¼ãƒã«å¯¾ã™ã‚‹ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®èªè¨¼</li>
          </ol>
      
          <p>ç¬¬ä¸€ã‚¹ãƒ†ãƒƒãƒ—ã®æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆå–り決ã‚ã«ã‚ˆã£ã¦ã€
          サーãƒã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯ãれãžã‚Œã«ã‚ã£ãŸ
          æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆã‚’é¸ã¶ã“ã¨ãŒã§ãã¾ã™ã€‚
          SSL3.0 プロトコルã®ä»•様書㯠31 ã®æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆã‚’定義ã—ã¦ã„ã¾ã™ã€‚
          æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆã¯ä»¥ä¸‹ã®ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã«ã‚ˆã‚Šå®šç¾©ã•れã¦ã„ã¾ã™:</p>
      
          <ul>
          <li>éµã®äº¤æ›æ‰‹æ®µ</li>
          <li>ãƒ‡ãƒ¼ã‚¿é€šä¿¡ã®æš—å·è¡“</li>
          <li>Message Authentication Code (MAC) 作æˆã®ãŸã‚ã®
          メッセージダイジェスト</li>
          </ul>
      
          <p>ã“れらã®ä¸‰ã¤ã®è¦ç´ ã¯ä»¥ä¸‹ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã§èª¬æ˜Žã•れã¦ã„ã¾ã™ã€‚</p>
      
      
      <h3><a name="keyexchange" id="keyexchange">éµã®äº¤æ›æ‰‹æ®µ</a></h3>
      
          <p>éµã®äº¤æ›æ‰‹æ®µã¯ã‚¢ãƒ—リケーションã®ãƒ‡ãƒ¼ã‚¿é€šä¿¡ã«ä½¿ã‚れã€
          共有ã•れる対称暗å·éµã‚’ã©ã®ã‚ˆã†ã«ãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒã§
          å–り決ã‚ã‚‹ã‹ã‚’定義ã—ã¾ã™ã€‚
          SSL 2.0 㯠RSA éµäº¤æ›ã—ã‹ä½¿ã„ã¾ã›ã‚“ãŒã€
          SSL 3.0 㯠(証明書ãŒä½¿ã‚れるã¨ãã®) RSA éµäº¤æ›ã‚„ã€
          (証明書無ã—ã®å ´åˆã‚„クライアントã¨ã‚µãƒ¼ãƒã®äº‹å‰ã®é€šä¿¡ãŒç„¡ã„å ´åˆã®)
          Diffie-Hellman éµäº¤æ›
          ãªã©æ§˜ã€…ãªéµäº¤æ›ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’サãƒãƒ¼ãƒˆã—ã¾ã™ã€‚</p>
      
          <p>éµã®äº¤æ›æ–¹æ³•ã«ãŠã‘る一ã¤ã®é¸æŠžè‚¢ã¯é›»å­ç½²åã§ã™ã€‚
          é›»å­ç½²åを使ã†ã‹ã©ã†ã‹ã€ã¾ãŸã€
          ã©ã®ç¨®é¡žã®ç½²åを使ã†ã‹ã¨ã„ã†é¸æŠžãŒã‚りã¾ã™ã€‚
          秘密éµã§ç½²åã™ã‚‹ã“ã¨ã§å…±æœ‰éµã‚’ä¿è­·ã—ã€æƒ…報交æ›ã™ã‚‹æ™‚ã®
          マン・イン・ザ・ミドル攻撃を防ãã“ã¨ãŒã§ãã¾ã™ã€‚
          [<a href="#AC96">AC96</a>, p516]</p>
      
      
      <h3><a name="ciphertransfer" id="ciphertransfer">ãƒ‡ãƒ¼ã‚¿é€šä¿¡ã®æš—å·è¡“</a></h3>
      
          <p>SSL ã¯ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®æš—å·åŒ–ã«å‰è¿°ã—ãŸ
          å¯¾ç§°æš—å·æ–¹å¼ã‚’用ã„ã¾ã™ã€‚
          æš—å·åŒ–ã—ãªã„ã¨ã„ã†é¸æŠžè‚¢ã‚‚å«ã‚ä¹ã¤ã®æš—å·æ–¹å¼ã®é¸æŠžè‚¢ãŒã‚りã¾ã™:</p>
      
          <ul>
          <li>æš—å·åŒ–ãªã—</li>
          <li>ストリーム暗å·
              <ul>
              <li>40-bit éµã§ã® RC4</li>
              <li>128-bit éµã§ã® RC4</li>
              </ul></li>
          <li>CBC ブロック暗å·
              <ul><li>40 bit éµã§ã® RC2</li>
              <li>40 bit éµã§ã® DES</li>
              <li>56 bit éµã§ã® DES</li>
              <li>168 bit éµã§ã® Triple-DES</li>
              <li>Idea (128 bit éµ)</li>
              <li>Fortezza (96 bit éµ)</li>
              </ul></li>
          </ul>
      
          <p>CBC ã¨ã¯æš—å·ãƒ–ロック連鎖 (Cipher Block Chaining)
           ã®ç•¥ã§ã€ä¸€ã¤å‰ã®æš—å·åŒ–ã•ã‚ŒãŸæš—å·æ–‡ã®ä¸€éƒ¨ãŒ
          ãƒ–ãƒ­ãƒƒã‚¯ã®æš—å·åŒ–ã«ä½¿ã‚れるã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚
          DES ã¯ãƒ‡ãƒ¼ã‚¿æš—å·åŒ–æ¨™æº–è¦æ ¼ (Data Encryption Standard)
           [<a href="#AC96">AC96</a>, ch12] ã®ç•¥ã§ã€
          DES40 ã‚„ 3DES_EDE ã‚’å«ã‚€ã„ãã¤ã‚‚ã®ç¨®é¡žãŒã‚りã¾ã™ã€‚
          Idea ã¯ç¾åœ¨æœ€é«˜ãªã‚‚ã®ã®ä¸€ã¤ã§ã€æš—å·è¡“çš„ã«ã¯ç¾åœ¨ã‚る中ã§
          最も強力ãªã‚‚ã®ã§ã™ã€‚
          RC2 㯠RSA DSI ã«ã‚ˆã‚‹ç‹¬å çš„ãªã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã§ã™ã€‚
           [<a href="#AC96">AC96</a>,
          ch13]</p>
      
      
      <h3><a name="digestfuntion" id="digestfuntion">ダイジェスト関数</a></h3>
      
          <p>
          ダイジェスト関数ã®é¸æŠžã¯ãƒ¬ã‚³ãƒ¼ãƒ‰ãƒ¦ãƒ‹ãƒƒãƒˆã‹ã‚‰ã©ã®ã‚ˆã†ã«ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆãŒç”Ÿæˆã•れるã‹ã‚’決定ã—ã¾ã™ã€‚
          SSL ã¯ä»¥ä¸‹ã‚’サãƒãƒ¼ãƒˆã—ã¾ã™:</p>
      
          <ul>
          <li>ダイジェストãªã—</li>
          <li>MD5 (128-bit ãƒãƒƒã‚·ãƒ¥)</li>
          <li>Secure Hash Algorithm (SHA-1) (160-bit ãƒãƒƒã‚·ãƒ¥)</li>
          </ul>
      
          <p>メッセージダイジェスト㯠Message Authentication Code (MAC) 
          ã®ç”Ÿæˆã«ä½¿ã‚れã€ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¨å…±ã«æš—å·åŒ–ã•れã€ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®ä¿¡æ†‘性を
          確èªã—ã€ãƒªãƒ—レイ攻撃を防ãŽã¾ã™ã€‚</p>
      
      
      <h3><a name="handshake" id="handshake">ãƒãƒ³ãƒ‰ã‚·ã‚§ãƒ¼ã‚¯ã‚·ãƒ¼ã‚¯ã‚¨ãƒ³ã‚¹ãƒ—ロトコル</a></h3>
      
          <p>ãƒãƒ³ãƒ‰ã‚·ã‚§ãƒ¼ã‚¯ã‚·ãƒ¼ã‚¯ã‚¨ãƒ³ã‚¹ã¯ä¸‰ã¤ã®ãƒ—ロトコルを使ã„ã¾ã™:</p>
      
          <ul>
          <li><dfn>SSL ãƒãƒ³ãƒ‰ã‚·ã‚§ãƒ¼ã‚¯ãƒ—ロトコル</dfn>ã¯
          クライアントã¨ã‚µãƒ¼ãƒé–“ã§ã® SSL セッションã®ç¢ºç«‹ã«ä½¿ã‚れã¾ã™ã€‚</li>
          <li><dfn>SSL æš—å·ä»•様変更プロトコル</dfn>ã¯
          セッションã§ã®æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆã®å–り決ã‚ã«ä½¿ã‚れã¾ã™ã€‚</li>
          <li><dfn>SSL 警告プロトコル</dfn>ã¯
          クライアントサーãƒé–“ã§ SSL エラーをä¼é”ã™ã‚‹ã®ã«ä½¿ã‚れã¾ã™ã€‚</li>
          </ul>
      
          <p>三ã¤ã®ãƒ—ロトコルã¯ã€ã‚¢ãƒ—リケーションプロトコルデータã¨ã¨ã‚‚ã«ã€
          <a href="#figure2">図2</a>ã«ç¤ºã™ã¨ãŠã‚Š <dfn>SSL レコードプロトコル</dfn>
          ã§ã‚«ãƒ—セル化ã•れã¾ã™ã€‚
          カプセル化ã•れãŸãƒ—ロトコルã¯ãƒ‡ãƒ¼ã‚¿ã‚’検査ã—ãªã„
          下層ã®ãƒ—ロトコルã«ã‚ˆã£ã¦ãƒ‡ãƒ¼ã‚¿ã¨ã—ã¦ä¼é”ã•れã¾ã™ã€‚
          カプセル化ã•れãŸãƒ—ロトコルã¯ä¸‹å±¤ã®ãƒ—ロトコルã«é–¢ã—ã¦ä¸€åˆ‡é–¢çŸ¥ã—ã¾ã›ã‚“。</p>
      
          <p class="figure">
          <img src="../images/ssl_intro_fig2.gif" alt="" width="428" height="217" /><br />
          <a id="figure2" name="figure2"><dfn>図2</dfn></a>: SSL プロトコルスタック
          </p>
      
          <p>
          レコードプロトコル㧠SSL コントロールプロトコルãŒã‚«ãƒ—セル化ã•れã¦ã„ã‚‹ã¨ã„ã†ã“ã¨ã¯ã€
          アクティブãªã‚»ãƒƒã‚·ãƒ§ãƒ³ä¸Šã§å†ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã•れãŸã¨ãã«ã‚‚ã€
          コントロールプロトコルã¯å®‰å…¨ã§ã‚ã‚‹ã“ã¨ã‚’æ„味ã—ã¾ã™ã€‚
          既存ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ãŒç„¡ã„å ´åˆã¯ã€Null æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆãŒä½¿ã‚れã€
          æš—å·åŒ–ã¯è¡Œãªã‚れãšã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ãŒç¢ºç«‹ã™ã‚‹ã¾ã§ã¯
          ダイジェストも無ã„状態ã¨ãªã‚Šã¾ã™ã€‚</p>
      
      
      <h3><a name="datatransfer" id="datatransfer">データ通信</a></h3>
      
          <p><a href="#figure3">図3</a>ã«ç¤ºã•れる SSL レコードプロトコル
          ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒé–“ã®ã‚¢ãƒ—リケーションや
          SSL コントロールデータã®é€šä¿¡ã«ä½¿ã‚れã¾ã™ã€‚
          å¿…è¦ã«å¿œã˜ã¦ã“ã®ãƒ‡ãƒ¼ã‚¿ã¯ã‚ˆã‚Šå°ã•ã„ユニットã«åˆ†ã‘られãŸã‚Šã€
          ã„ãã¤ã‹ã®é«˜ç´šãƒ—ロトコルをã¾ã¨ã‚ã¦ä¸€ãƒ¦ãƒ‹ãƒƒãƒˆã¨ã—ã¦é€šä¿¡ãŒ
          行ãªã‚れるã“ã¨ã‚‚ã‚りã¾ã™ã€‚
          データを圧縮ã—ã€ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆç½²åを添付ã—ã¦ã€
          ã“れらã®ãƒ¦ãƒ‹ãƒƒãƒˆã‚’æš—å·åŒ–ã—ãŸã®ã¡ã€ãƒ™ãƒ¼ã‚¹ã¨ãªã£ã¦ã„ã‚‹
          信頼性ã®ã‚るトランスãƒãƒ¼ãƒˆãƒ—ロトコルを用ã„ã‚‹ã‹ã‚‚ã—れã¾ã›ã‚“。
          (注æ„: ç¾åœ¨ãƒ¡ã‚¸ãƒ£ãƒ¼ãª SLL 実装ã§åœ§ç¸®ã‚’サãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã‚‚ã®ã¯ã‚りã¾ã›ã‚“)</p>
      
          <p class="figure">
          <img src="../images/ssl_intro_fig3.gif" alt="" width="423" height="323" /><br />
          <a id="figure3" name="figure3"><dfn>図 3</dfn></a>: SSL レコードプロトコル
          </p>
      
      
      <h3><a name="securehttp" id="securehttp">HTTP 通信ã®å®‰å…¨åŒ–</a></h3>
      
          <p>よãã‚ã‚‹ SSL ã®ä½¿ã„æ–¹ã¯ãƒ–ラウザã¨ã‚¦ã‚§ãƒ–サーãƒé–“ã® HTTP 通信
          ã®å®‰å…¨åŒ–ã§ã™ã€‚
          ã“れã¯ã€å¾“æ¥ã®å®‰å…¨ã§ã¯ãªã„ HTTP ã®ä½¿ç”¨ã‚’除外ã™ã‚‹ã‚‚ã®ã§ã¯ã‚りã¾ã›ã‚“。
          安全化ã•れãŸã‚‚ã® (HTTPS ã¨å‘¼ã°ã‚Œã¾ã™) ã¯ã€SSL 上ã§ã®æ™®é€šã® HTTP ã§ã€
          URL スキーム㫠<code>http</code> ã®ä»£ã‚り㫠<code>https</code>
          を用ã„ã€ã‚µãƒ¼ãƒã§åˆ¥ã®ãƒãƒ¼ãƒˆã‚’使ã†ã“ã¨ã§ã™ (デフォルトã§ã¯443)。
          ã“れãŒä¸»ã« <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> ㌠Apache 
          ウェブサーãƒã«æä¾›ã™ã‚‹æ©Ÿèƒ½ã§ã™ã€‚</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="references" id="references">å‚考文献</a></h2>
      
      <dl>
      <dt><a id="AC96" name="AC96">[AC96]</a></dt>
      <dd>Bruce Schneier, <q>Applied Cryptography</q>, 2nd Edition, Wiley,
      1996. See <a href="http://www.counterpane.com/">http://www.counterpane.com/</a> for various other materials by Bruce
      Schneier.</dd>
      
      <dt><a id="X208" name="X208">[X208]</a></dt>
      <dd>ITU-T Recommendation X.208, <q>Specification of Abstract Syntax Notation
      One (ASN.1)</q>, 1988. See for instance <a href="http://www.itu.int/rec/recommendation.asp?type=items&amp;lang=e&amp;parent=T-REC-X.208-198811-I">http://www.itu.int/rec/recommendation.asp?type=items&amp;lang=e&amp;parent=T-REC-X.208-198811-I</a>.
      </dd>
      
      <dt><a id="X509" name="X509">[X509]</a></dt>
      <dd>ITU-T Recommendation X.509, <q>The Directory - Authentication
      Framework</q>. See for instance <a href="http://www.itu.int/rec/recommendation.asp?type=folders&amp;lang=e&amp;parent=T-REC-X.509">http://www.itu.int/rec/recommendation.asp?type=folders&amp;lang=e&amp;parent=T-REC-X.509</a>.
      </dd>
      
      <dt><a id="PKCS" name="PKCS">[PKCS]</a></dt>
      <dd><q>Public Key Cryptography Standards (PKCS)</q>, 
      RSA Laboratories Technical Notes, See <a href="http://www.rsasecurity.com/rsalabs/pkcs/">http://www.rsasecurity.com/rsalabs/pkcs/</a>.</dd>
      
      <dt><a id="MIME" name="MIME">[MIME]</a></dt>
      <dd>N. Freed, N. Borenstein, <q>Multipurpose Internet Mail Extensions
      (MIME) Part One: Format of Internet Message Bodies</q>, RFC2045.
      See for instance <a href="http://ietf.org/rfc/rfc2045.txt">http://ietf.org/rfc/rfc2045.txt</a>.</dd>
      
      <dt><a id="SSL2" name="SSL2">[SSL2]</a></dt>
      <dd>Kipp E.B. Hickman, <q>The SSL Protocol</q>, 1995. See <a href="http://www.netscape.com/eng/security/SSL_2.html">http://www.netscape.com/eng/security/SSL_2.html</a>.</dd>
      
      <dt><a id="SSL3" name="SSL3">[SSL3]</a></dt>
      <dd>Alan O. Freier, Philip Karlton, Paul C. Kocher, <q>The SSL Protocol
      Version 3.0</q>, 1996. See <a href="http://www.netscape.com/eng/ssl3/draft302.txt">http://www.netscape.com/eng/ssl3/draft302.txt</a>.</dd>
      
      <dt><a id="TLS1" name="TLS1">[TLS1]</a></dt>
      <dd>Tim Dierks, Christopher Allen, <q>The TLS Protocol Version 1.0</q>,
      1999. See <a href="http://ietf.org/rfc/rfc2246.txt">http://ietf.org/rfc/rfc2246.txt</a>.</dd>
      </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="../en/ssl/ssl_intro.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_intro.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/ssl_intro.html" title="Japanese">&nbsp;ja&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/ssl/ssl_intro.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="../mod/">モジュール</a> | <a href="../mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">用語</a> | <a href="../sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/ssl_howto.html���������������������������������������������������������0000644�0000000�0000050�00000000326�13362070302�017146� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: ssl_howto.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: ssl_howto.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/index.html.zh-cn.utf8��������������������������������������������������0000644�0000000�0000050�00000011724�13412755316�020156� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="zh-cn" xml:lang="zh-cn"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache SSL/TLS 加密 - Apache HTTP æœåС噍 版本 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">模å—</a> | <a href="../mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="../glossary.html">术语</a> | <a href="../sitemap.html">网站导航</a></p>
      <p class="apache">Apache HTTP æœåŠ¡å™¨ç‰ˆæœ¬ 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="../"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP æœåС噍</a> &gt; <a href="http://httpd.apache.org/docs/">文档</a> &gt; <a href="../">版本 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache SSL/TLS 加密</h1>
      <div class="toplang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="../en/ssl/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../tr/ssl/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/ssl/" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div>
      <div class="outofdate">此翻译å¯èƒ½è¿‡æœŸã€‚è¦äº†è§£æœ€è¿‘的更改,请阅读英文版。</div>
      
      <p>Apache HTTP æœåŠ¡å™¨æ¨¡å— <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>
      æä¾›äº†ä¸Ž <a href="http://www.openssl.org/">OpenSSL</a>
      的接å£ï¼Œå®ƒä½¿ç”¨å®‰å…¨å¥—接字层和传输层安全åè®®æä¾›äº†å¼ºåŠ å¯†ã€‚
      此模å—与这篇文档都基于
      Ralf S. Engelschall 的 mod_ssl 项目。</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#documentation">文档</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#mod-ssl">mod_ssl</a></li>
      </ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="documentation" id="documentation">文档</a></h2>
      <ul>
      <li><a href="ssl_intro.html">简介</a></li>
      <li><a href="ssl_compat.html">兼容性</a></li>
      <li><a href="ssl_howto.html">å¸¸è§æ“作</a></li>
      <li><a href="ssl_faq.html">常è§é—®é¢˜</a></li>
      <li><a href="../glossary.html">术语</a></li>
      </ul>
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="mod-ssl" id="mod-ssl">mod_ssl</a></h2>
      <p>æ­¤æ¨¡å—æä¾›çš„æŒ‡ä»¤å’ŒçŽ¯å¢ƒå˜é‡çš„æ–‡æ¡£ä½äºŽ <a href="../mod/mod_ssl.html">mod_ssl å‚考手册</a>。
      </p>
      </div></div>
      <div class="bottomlang">
      <p><span>å¯ç”¨è¯­è¨€: </span><a href="../en/ssl/" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="../tr/ssl/" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a> |
      <a href="../zh-cn/ssl/" title="Simplified Chinese">&nbsp;zh-cn&nbsp;</a></p>
      </div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />基于 <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> 许å¯è¯.</p>
      <p class="menu"><a href="../mod/">模å—</a> | <a href="../mod/directives.html">指令</a> | <a href="http://wiki.apache.org/httpd/FAQ">常è§é—®é¢˜</a> | <a href="../glossary.html">术语</a> | <a href="../sitemap.html">网站导航</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������httpd-2.4.41/docs/manual/ssl/ssl_faq.html�����������������������������������������������������������0000644�0000000�0000050�00000000322�13362070302�016551� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: ssl_faq.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: ssl_faq.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/ssl_faq.html.fr.utf8���������������������������������������������������0000644�0000000�0000050�00000156554�13412755316�020102� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Chiffrement SSL/TLS fort: foire aux questions - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">SSL/TLS</a></div><div id="page-content"><div id="preamble"><h1>Chiffrement SSL/TLS fort: foire aux questions</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/ssl/ssl_faq.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_faq.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
      <blockquote>
      <p>Le sage n'apporte pas de bonnes réponses, il pose les bonnes questions</p>
      <p class="cite">-- <cite>Claude Levi-Strauss</cite></p>
      
      </blockquote>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#installation">Installation</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#aboutconfig">Configuration</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#aboutcerts">Certificats</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#aboutssl">Le protocole SSL</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#support">Support de mod_ssl</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="installation" id="installation">Installation</a></h2>
      <ul>
      <li><a href="#mutex">Pourquoi le démarrage d'Apache provoque-t-il des
      erreurs de permission en rapport avec SSLMutex ?</a></li>
      <li><a href="#entropy">Pourquoi mod_ssl s'arrête-t-il avec l'erreur
      "Failed to generate temporary 512 bit RSA private key" au démarrage
      d'Apache ?</a></li>
      </ul>
      
      <h3><a name="mutex" id="mutex">Pourquoi le démarrage d'Apache provoque-t-il des
      erreurs de permission en rapport avec SSLMutex ?</a></h3>
          <p>Des erreurs telles que ``<code>mod_ssl: Child could not open
          SSLMutex lockfile /opt/apache/logs/ssl_mutex.18332 (avec l'erreur
          système qui suit) [...] System: Permission denied (errno: 13)</code>''
          sont souvent provoquées par des permissions trop restrictives sur les
          répertoires <em>parents</em>. Assurez-vous que tous les répertoires
          parents (ici <code>/opt</code>, <code>/opt/apache</code> et
          <code>/opt/apache/logs</code>) ont le bit x positionné au moins pour
          l'UID sous lequel les processus enfants d'Apache s'exécutent (voir la
          directive <code class="directive"><a href="../mod/mod_unixd.html#user">User</a></code>).</p>
      
      
      <h3><a name="entropy" id="entropy">Pourquoi mod_ssl s'arrête-t-il avec l'erreur
      "Failed to generate temporary 512 bit RSA private key" au démarrage
      d'Apache ?</a></h3>
          <p>Pour fonctionner correctement, les logiciels de cryptographie ont
          besoin d'une source de données aléatoires. De nombreux systèmes
          d'exploitation libres proposent un "périphérique source d'entropie"
          qui fournit ce service (il se nomme en général
          <code>/dev/random</code>). Sur d'autres systèmes, les applications
          doivent amorcer manuellement
          le Générateur de Nombres Pseudo-Aléatoires d'OpenSSL
          (Pseudo Random Number Generator -PRNG) à l'aide de données appropriées
          avant de générer des clés ou d'effectuer un chiffrement à clé
          publique. Depuis la version 0.9.5, les fonctions d'OpenSSL qui nécessitent
          des données aléatoires provoquent une erreur si le PRNG n'a pas été amorcé
          avec une source de données aléatoires d'au moins 128 bits.</p>
          <p>Pour éviter cette erreur, <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> doit fournir
          suffisamment d'entropie au PRNG pour lui permettre de fonctionner
          correctement. Ce niveau d'entropie est défini par la directive
          <code class="directive"><a href="../mod/mod_ssl.html#sslrandomseed">SSLRandomSeed</a></code>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="aboutconfig" id="aboutconfig">Configuration</a></h2>
      <ul>
      <li><a href="#parallel">Peut-on faire cohabiter HTTP et HTTPS sur le même
      serveur ?</a></li>
      <li><a href="#ports">Quel port HTTPS utilise-t-il ?</a></li>
      <li><a href="#httpstest">Comment s'exprimer en langage HTTPS à des fins
      de test ?</a></li>
      <li><a href="#hang">Pourquoi la communication se bloque-t-elle lorsque je
      me connecte à mon serveur Apache configuré pour SSL ?</a></li>
      <li><a href="#refused">Pourquoi, lorsque je tente d'accéder en HTTPS à mon
      serveur Apache+mod_ssl fraîchement installé, l'erreur ``Connection Refused''
      s'affiche-t-elle ?</a></li>
      <li><a href="#envvars">Pourquoi les variables <code>SSL_XXX</code>
      ne sont-elles pas disponibles dans mes scripts CGI et SSI ?</a></li>
      <li><a href="#relative">Comment puis-je basculer entre les protocoles HTTP et
      HTTPS dans les hyperliens relatifs ?</a></li>
      </ul>
      
      <h3><a name="parallel" id="parallel">Peut-on faire cohabiter HTTP et HTTPS sur le même
      serveur ?</a></h3>
          <p>Oui. HTTP et HTTPS utilisent des ports différents (HTTP écoute le port
          80 et HTTPS le port 443), si bien qu'il n'y a pas de conflit direct entre
          les deux. Vous pouvez soit exécuter deux instances séparées du serveur,
          chacune d'entre elles écoutant l'un de ces ports, soit utiliser l'élégante
          fonctionnalité d'Apache que constituent les hôtes virtuels pour créer
          deux serveurs virtuels gérés par la même instance d'Apache - le
          premier serveur répondant en HTTP aux requêtes sur le port 80,
          le second répondant en HTTPS aux requêtes sur le port
          443.</p>
      
      
      <h3><a name="ports" id="ports">Quel port HTTPS utilise-t-il ?</a></h3>
      <p>Vous pouvez associer le protocole HTTPS à n'importe quel port, mais le port
      standard est le port 443, que tout navigateur compatible HTTPS va utiliser par
      défaut. Vous pouvez forcer votre navigateur à utiliser un port différent en le
      précisant dans l'URL. Par exemple, si votre serveur est configuré pour
      servir des pages en HTTPS sur le port 8080, vous pourrez y accéder par
      l'adresse <code>https://example.com:8080/</code>.</p>
      
      
      <h3><a name="httpstest" id="httpstest">Comment s'exprimer en langage HTTPS à des fins
      de test ?</a></h3>
       <p>Alors que vous utilisez simplement</p>
      
          <div class="example"><p><code>$ telnet localhost 80<br />
          GET / HTTP/1.0</code></p></div>
      
          <p>pour tester facilement Apache via HTTP, les choses ne sont pas si
          simples pour HTTPS à cause du protocole SSL situé entre TCP et HTTP.
          La commande OpenSSL <code>s_client</code> vous permet cependant
          d'effectuer un test similaire via HTTPS :</p>
      
          <div class="example"><p><code>$ openssl s_client -connect localhost:443 -state -debug<br />
          GET / HTTP/1.0</code></p></div>
      
          <p>Avant la véritable réponse HTTP, vous recevrez des informations
          détaillées à propos de l'établissement de la connexion SSL. Si vous
          recherchez un client en ligne de commande à usage plus général qui comprend
          directement HTTP et HTTPS, qui peut effectuer des opérations GET et POST,
          peut utiliser un mandataire, supporte les requêtes portant sur une partie
          d'un fichier (byte-range), etc..., vous devriez vous tourner vers
          l'excellent outil <a href="http://curl.haxx.se/">cURL</a>. Grâce à lui,
          vous pouvez vérifier si Apache répond correctement aux requêtes via
          HTTP et HTTPS comme suit :</p>
      
          <div class="example"><p><code>$ curl http://localhost/<br />
          $ curl https://localhost/</code></p></div>
      
      
      <h3><a name="hang" id="hang">Pourquoi la communication se bloque-t-elle lorsque je
      me connecte à mon serveur Apache configuré pour SSL ?</a></h3>
      <p>Ceci peut arriver si vous vous connectez à un serveur HTTPS (ou à
      un serveur virtuel) via HTTP (par exemple, en utilisant
      <code>http://example.com/</code> au lieu de <code>https://example.com</code>).
      Cela peut aussi arriver en essayant de vous connecter via HTTPS à un
      serveur HTTP (par exemple, en utilisant <code>https://example.com/</code>
      avec un serveur qui ne supporte pas HTTPS, ou le supporte, mais sur un
      port non standard). Assurez-vous que vous vous connectez bien à un
      serveur (virtuel) qui supporte SSL.</p>
      
      
      <h3><a name="refused" id="refused">Pourquoi, lorsque je tente d'accéder en HTTPS à mon
      serveur Apache+mod_ssl fraîchement installé, l'erreur ``Connection Refused''
      s'affiche-t-elle ?</a></h3>
      <p>Une configuration incorrecte peut provoquer ce type d'erreur.
      Assurez-vous que vos directives <code class="directive"><a href="../mod/mpm_common.html#listen">Listen</a></code> s'accordent avec vos directives
          <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>. Si
          l'erreur persiste, recommencez depuis le début en restaurant la
          configuration par défaut fournie par<code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>.</p>
      
      
      <h3><a name="envvars" id="envvars">Pourquoi les variables <code>SSL_XXX</code>
      ne sont-elles pas disponibles dans mes scripts CGI et SSI ?</a></h3>
      <p>Assurez-vous que la directive ``<code>SSLOptions +StdEnvVars</code>'' est
      bien présente dans le contexte de vos requêtes CGI/SSI.</p>
      
      
      <h3><a name="relative" id="relative">Comment puis-je basculer entre les protocoles HTTP et
      HTTPS dans les hyperliens relatifs ?</a></h3>
      
      <p>Normalement, pour basculer entre HTTP et HTTPS, vous devez utiliser des
      hyperliens pleinement qualifiés (car vous devez modifier le schéma de l'URL).
      Cependant, à l'aide du module <code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>, vous pouvez
      manipuler des hyperliens relatifs, pour obtenir le même effet.</p>
          <pre class="prettyprint lang-config">RewriteEngine on
      RewriteRule   "^/(.*)_SSL$"   "https://%{SERVER_NAME}/$1" [R,L]
      RewriteRule   "^/(.*)_NOSSL$" "http://%{SERVER_NAME}/$1"  [R,L]</pre>
      
      
          <p>Ce jeu de règles rewrite vous permet d'utiliser des hyperliens de la
          forme <code>&lt;a href="document.html_SSL"&gt;</code> pour passer en HTTPS
          dans les liens relatifs. (Remplacez SSL par NOSSL pour passer en HTTP.)</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="aboutcerts" id="aboutcerts">Certificats</a></h2>
      <ul>
      <li><a href="#keyscerts">Qu'est-ce qu'un clé privée RSA, un certificat,
      une demande de signature de certificat (CSR) ?</a></li>
      <li><a href="#startup">Y a-t-il une différence au démarrage entre un serveur
      Apache non SSL et un serveur Apache supportant SSL ?</a></li>
      <li><a href="#selfcert">Comment créer un certificat auto-signé SSL à des
      fins de test ?</a></li>
      <li><a href="#realcert">Comment créer un vrai certificat SSL ?</a></li>
      <li><a href="#ownca">Comment créer et utiliser sa propre Autorité de
      certification (CA) ?</a></li>
      <li><a href="#passphrase">Comment modifier le mot de passe
      de ma clé privée ?</a></li>
      <li><a href="#removepassphrase">Comment démarrer Apache sans avoir à entrer de
      mot de passe ?</a></li>
      <li><a href="#verify">Comment vérifier si une clé privée correspond bien
      à son certificat ?</a></li>
      <li><a href="#pemder">Comment convertir un certificat du format PEM
      au format DER ?</a></li>
      <li><a href="#gid">Pourquoi les navigateurs se plaignent-ils de ne pas pouvoir
      vérifier mon certificat de serveur ?</a></li>
      </ul>
      
      <h3><a name="keyscerts" id="keyscerts">Qu'est-ce qu'un clé privée RSA, un certificat,
      une demande de signature de certificat (CSR) ?</a></h3>
      <p>Un fichier de clé privée RSA est un fichier numérique que vous pouvez
      utiliser pour déchiffrer des messages que l'on vous a envoyés. Il a son
      pendant à caractère public que vous pouvez distribuer (par le biais de votre
      certificat), ce qui permet aux utilisateurs de chiffrer les messages qu'ils
      vous envoient.</p>
          <p>Une Demande de Signature de Certificat (CSR) est un fichier numérique
          qui contient votre clé publique et votre nom. La CSR doit être envoyée à
          une Autorité de Certification (CA), qui va la convertir en vrai certificat
          en la signant.</p>
          <p>Un certificat contient votre clé publique RSA, votre nom, le nom
          de la CA, et est signé numériquement par cette dernière. Les navigateurs
          qui reconnaissent la CA peuvent vérifier la signature du certificat, et
          ainsi en extraire votre clé publique RSA. Ceci leur permet de vous envoyer
          des messages chiffrés que vous seul pourrez déchiffrer.</p>
          <p>Se référer au chapitre <a href="ssl_intro.html">Introduction</a>
          pour une description générale du protocole SSL.</p>
      
      
      <h3><a name="startup" id="startup">Y a-t-il une différence au démarrage entre un serveur
      Apache non SSL et un serveur Apache supportant SSL ?</a></h3>
      <p>Oui. En général, avec ou sans <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> intégré, le démarrage
      d'Apache ne présente pas de différences. Cependant, si votre fichier de clé
      privée SSL possède un mot de passe, vous devrez le taper au démarrage
      d'Apache.</p>
      
          <p>Devoir entrer manuellement le mot de passe au démarrage du serveur peut
          poser quelques problèmes - par exemple, quand le serveur est démarré au
          moyen de scripts au lancement du système. Dans ce cas, vous pouvez suivre
          les étapes <a href="#removepassphrase">ci-dessous</a> pour supprimer le
          mot de passe de votre clé privée. Gardez à l'esprit qu'agir ainsi augmente
          les risques de sécurité - agissez avec précaution !</p>
      
      
      <h3><a name="selfcert" id="selfcert">Comment créer un certificat auto-signé SSL à des
      fins de test ?</a></h3>
          <ol>
          <li>Vérifiez qu'OpenSSL est installé et l'exécutable openssl dans votre
          <code>PATH</code>.<br />
          <br />
          </li>
          <li>Exécuter la commande suivante pour créer les fichiers
          <code>server.key</code> et <code>server.crt</code> :<br />
      	<code><strong>$ openssl req -new -x509 -nodes -out server.crt
      			-keyout server.key</strong></code><br />
      	Ces fichiers seront utilisés comme suit dans votre
      	<code>httpd.conf</code> :
              <pre class="prettyprint lang-config">SSLCertificateFile    "/path/to/this/server.crt"
      SSLCertificateKeyFile "/path/to/this/server.key"</pre>
      
          </li>
          <li>Il est important de savoir que le fichier <code>server.key</code> n'a
          <em>pas</em> de mot de passe. Pour ajouter un mot de passe à la clé, vous
          devez exécuter la commande suivante et confirmer le mot de passe comme
          demandé.<br />
      	<p><code><strong>$ openssl rsa -des3 -in server.key -out
      	server.key.new</strong></code><br />
      	<code><strong>$ mv server.key.new server.key</strong></code><br /></p>
      	Sauvegardez le fichier <code>server.key</code> ainsi que son mot de
      	passe en lieu sûr.
          </li>
          </ol>
      
      
      <h3><a name="realcert" id="realcert">Comment créer un vrai certificat SSL ?</a></h3>
      <p>Voici la marche à suivre pas à pas :</p>
          <ol>
          <li>Assurez-vous qu'OpenSSL est bien installé et dans votre <code>PATH</code>.
          <br />
          <br />
          </li>
          <li>Créez une clé privée RSA pour votre serveur Apache
          	(elle sera au format PEM et chiffrée en Triple-DES):<br />
             <br />
             <code><strong>$ openssl genrsa -des3 -out server.key 2048</strong></code><br />
             <br />
             Enregistrez le fichier <code>server.key</code> et le mot de passe
             éventuellement défini en lieu sûr.
             Vous pouvez afficher les détails de cette clé privée RSA à l'aide de la
             commande :<br />
      
             <br />
             <code><strong>$ openssl rsa -noout -text -in server.key</strong></code><br />
             <br />
             Si nécessaire, vous pouvez aussi créer une version PEM non chiffrée
             (non recommandé) de clé privée RSA avec :<br />
             <br />
             <code><strong>$ openssl rsa -in server.key -out server.key.unsecure</strong></code><br />
             <br />
      
          </li>
          <li>Créez une Demande de signature de Certificat (CSR) à l'aide de la
          clé privée précédemment générée (la sortie sera au format PEM):<br />
             <br />
             <code><strong>$ openssl req -new -key server.key -out server.csr</strong></code><br />
             <br />
             Vous devez entrer le Nom de Domaine Pleinement Qualifié
             ("Fully Qualified Domain Name" ou FQDN) de votre serveur lorsqu'OpenSSL
             vous demande le "CommonName", c'est à dire que si vous générez une CSR
             pour un site web auquel on accèdera par l'URL
             <code>https://www.foo.dom/</code>, le FQDN sera "www.foo.dom". Vous
             pouvez afficher les détails de ce CSR avec :<br />
      
             <br />
             <code><strong>$ openssl req -noout -text -in server.csr</strong></code><br />
             <br />
          </li>
          <li>Vous devez maintenant envoyer la CSR à une Autorité de Certification
          (CA), afin que cette dernière puisse la signer. Une fois la CSR signée,
          vous disposerez d'un véritable certificat que vous pourrez utiliser avec
          Apache. Vous pouvez faire signer votre CSR par une CA commerciale ou par
          votre propre CA.<br />
             Les CAs commerciales vous demandent en général de leur envoyer la CSR
             par l'intermédiaire d'un formulaire web, de régler le montant de la
             signature, puis vous envoient un certificat signé que vous pouvez
             enregistrer dans un fichier server.crt.
      
             Pour plus de détails sur la manière de créer sa propre CA, et de
             l'utiliser pour signer une CSR, voir <a href="#ownca">ci-dessous</a>.<br />
      
             Une fois la CSR signée, vous pouvez afficher les détails du certificat
             comme suit :<br />
             <br />
             <code><strong>$ openssl x509 -noout -text -in server.crt</strong></code><br />
      
          </li>
          <li>Vous devez maintenant disposer de deux fichiers :
          <code>server.key</code> et <code>server.crt</code>. Ils sont précisés dans
          votre fichier <code>httpd.conf</code> comme suit :
             <pre class="prettyprint lang-config">SSLCertificateFile    "/path/to/this/server.crt"
      SSLCertificateKeyFile "/path/to/this/server.key"</pre>
      
             Le fichier <code>server.csr</code> n'est plus nécessaire.
          </li>
      
          </ol>
      
      
      <h3><a name="ownca" id="ownca">Comment créer et utiliser sa propre Autorité de
      certification (CA) ?</a></h3>
          <p>La solution la plus simple consiste à utiliser les scripts
          <code>CA.sh</code> ou <code>CA.pl</code> fournis avec OpenSSL. De
          préférence, utilisez cette solution, à moins que vous ayez de bonnes
          raisons de ne pas le faire. Dans ce dernier cas, vous pouvez créer un
          certificat auto-signé comme suit :</p>
      
          <ol>
          <li>Créez une clé privée RSA pour votre serveur
          	(elle sera au format PEM et chiffrée en Triple-DES) :<br />
             <br />
             <code><strong>$ openssl genrsa -des3 -out server.key 2048</strong></code><br />
             <br />
             Sauvegardez le fichier <code>server.key</code> et le mot de passe
             éventuellement défini en lieu sûr.
             Vous pouvez afficher les détails de cette clé privée RSA à l'aide de la
             commande :<br />
             <br />
             <code><strong>$ openssl rsa -noout -text -in server.key</strong></code><br />
             <br />
             Si nécessaire, vous pouvez aussi créer une version PEM non chiffrée
             (non recommandé) de cette clé privée RSA	 avec :<br />
             <br />
             <code><strong>$ openssl rsa -in server.key -out server.key.unsecure</strong></code><br />
             <br />
          </li>
          <li>Créez un certificat auto-signé (structure X509) à l'aide de la clé RSA
          que vous venez de générer (la sortie sera au format PEM) :<br />
             <br />
             <code><strong>$ openssl req -new -x509 -nodes -sha1 -days 365
      		       -key server.key -out server.crt -extensions usr_cert</strong></code><br />
             <br />
             Cette commande signe le certificat du serveur et produit un fichier
             <code>server.crt</code>. Vous pouvez afficher les détails de ce
             certificat avec :<br />
             <br />
             <code><strong>$ openssl x509 -noout -text -in server.crt</strong></code><br />
             <br />
          </li>
          </ol>
      
      
      <h3><a name="passphrase" id="passphrase">Comment modifier le mot de passe
      de ma clé privée ?</a></h3>
      <p>Vous devez simplement lire la clé avec l'ancien mot de passe et la
      réécrire en spécifiant le nouveau mot de passe. Pour cela, vous pouvez
      utiliser les commandes suivantes :</p>
      
      
          <p><code><strong>$ openssl rsa -des3 -in server.key -out server.key.new</strong></code><br />
          <code><strong>$ mv server.key.new server.key</strong></code><br /></p>
      
          <p>La première fois qu'il vous est demandé un mot de passe PEM, vous
          devez entrer l'ancien mot de passe. Ensuite, on vous demandera d'entrer
          encore un mot de passe - cette fois, entrez le nouveau mot de passe. Si on
          vous demande de vérifier le mot de passe, vous devrez entrer le nouveau
          mot de passe une seconde fois.</p>
      
      
      <h3><a name="removepassphrase" id="removepassphrase">Comment démarrer Apache sans avoir à entrer de
      mot de passe ?</a></h3>
      <p>L'apparition de ce dialogue au démarrage et à chaque redémarrage provient
      du fait que la clé privée RSA contenue dans votre fichier server.key est
      enregistrée sous forme chiffrée pour des raisons de sécurité. Le
      déchiffrement de ce fichier nécessite un mot de passe, afin de pouvoir être
      lu et interprété. Cependant, La suppression du mot de passe diminue le niveau de
      sécurité du serveur - agissez avec précautions !</p>
          <ol>
          <li>Supprimer le chiffrement de la clé privée RSA (tout en conservant une
          copie de sauvegarde du fichier original) :<br />
             <br />
             <code><strong>$ cp server.key server.key.org</strong></code><br />
             <code><strong>$ openssl rsa -in server.key.org -out server.key</strong></code><br />
      
             <br />
          </li>
          <li>Assurez-vous que le fichier server.key n'est lisible que par root :<br />
             <br />
             <code><strong>$ chmod 400 server.key</strong></code><br />
             <br />
          </li>
          </ol>
      
          <p>Maintenant, <code>server.key</code> contient une copie non chiffrée de
          la clé. Si vous utilisez ce fichier pour votre serveur, il ne vous
          demandera plus de mot de passe. CEPENDANT, si quelqu'un arrive à obtenir
          cette clé, il sera en mesure d'usurper votre identité sur le réseau.
          Vous DEVEZ par conséquent vous assurer que seuls root ou le serveur web
          peuvent lire ce fichier (de préférence, démarrez le serveur web sous
          root et faites le s'exécuter sous un autre utilisateur, en n'autorisant
          la lecture de la clé que par root).</p>
      
          <p>Une autre alternative consiste à utiliser la directive
          ``<code>SSLPassPhraseDialog exec:/chemin/vers/programme</code>''. Gardez
          cependant à l'esprit que ce n'est bien entendu ni plus ni moins
          sécurisé.</p>
      
      
      <h3><a name="verify" id="verify">Comment vérifier si une clé privée correspond bien
      à son certificat ?</a></h3>
      <p>Une clé privée contient une série de nombres. Deux de ces nombres forment la
      "clé publique", les autres appartiennent à la "clé privée". Les bits de la
      "clé publique" sont inclus quand vous générez une CSR, et font par
      conséquent partie du certificat associé.</p>
          <p>Pour vérifier que la clé publique contenue dans votre certificat
          correspond bien à la partie publique de votre clé privée, il vous suffit
          de comparer ces nombres. Pour afficher le certificat et la clé,
          utilisez cette commande :</p>
      
          <p><code><strong>$ openssl x509 -noout -text -in server.crt</strong></code><br />
          <code><strong>$ openssl rsa -noout -text -in server.key</strong></code></p>
      
          <p>Les parties `modulus' et `public exponent' doivent être identiques dans
          la clé et le certificat. Comme le `public exponent' est habituellement
          65537, et comme il est difficile de vérifier visuellement que les nombreux
          nombres du `modulus' sont identiques, vous pouvez utiliser l'approche
          suivante :</p>
      
          <p><code><strong>$ openssl x509 -noout -modulus -in server.crt | openssl md5</strong></code><br />
          <code><strong>$ openssl rsa -noout -modulus -in server.key | openssl md5</strong></code></p>
      
          <p>Il ne vous reste ainsi que deux nombres relativement courts à comparer.
          Il est possible, en théorie que ces deux nombres soient les mêmes, sans que
          les nombres du modulus soient identiques, mais les chances en sont infimes.</p>
          <p>Si vous souhaitez vérifier à quelle clé ou certificat appartient une CSR
          particulière, vous pouvez effectuer le même calcul
          sur la CSR comme suit :</p>
      
          <p><code><strong>$ openssl req -noout -modulus -in server.csr | openssl md5</strong></code></p>
      
      
      <h3><a name="pemder" id="pemder">Comment convertir un certificat du format PEM
      au format DER ?</a></h3>
      <p>Le format des certificats par défaut pour OpenSSL est le format PEM,
      qui est tout simplement un format DER codé en Base64, avec des lignes
      d'en-têtes et des annotations. Certaines applications, comme
      Microsoft Internet Explorer, ont besoin d'un certificat au format DER de base.
      Vous pouvez convertir un fichier PEM <code>cert.pem</code> en son équivalent
      au format DER <code>cert.der</code> à l'aide de la commande suivante :
      <code><strong>$ openssl x509 -in cert.pem -out cert.der
      -outform DER</strong></code></p>
      
      
      <h3><a name="gid" id="gid">Pourquoi les navigateurs se plaignent-ils de ne pas pouvoir
      vérifier mon certificat de serveur ?</a></h3>
      
          <p>Ceci peut se produire si votre certificat de serveur est signé
          par une autorité de certification intermédiaire. Plusieurs CAs,
          comme Verisign ou Thawte, ont commencé à signer les certificats avec
          des certificats intermédiaires au lieu de leur certificat racine.</p>
      
          <p>Les certificats de CA intermédiaires se situe à un niveau
          intermédiaire entre le certificat racine de la CA (qui est installé dans les
          navigateurs) et le certificat du serveur (que vous avez installé sur
          votre serveur). Pour que le navigateur puisse traverser et vérifier
          la chaîne de confiance depuis le certificat du serveur jusqu'au
          certificat racine, il faut lui fournir les certificats
          intermédiaires. Les CAs devraient pouvoir fournir de tels
          paquetages de certificats intermédiaires à installer sur les
          serveurs.</p>
      
          <p>Vous devez inclure ces certificats intermédiaires via la
          directive <code class="directive"><a href="../mod/mod_ssl.html#sslcertificatechainfile">SSLCertificateChainFile</a></code>.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="aboutssl" id="aboutssl">Le protocole SSL</a></h2>
      <ul>
      <li><a href="#random">Pourquoi de nombreuses et aléatoires erreurs de
      protocole SSL apparaissent-elles en cas de forte charge du serveur ?</a></li>
      <li><a href="#load">Pourquoi la charge de mon serveur est-elle plus
      importante depuis qu'il sert des ressources chiffrées en SSL ?</a></li>
      <li><a href="#establishing">Pourquoi les connexions en HTTPS à mon serveur
      prennent-elles parfois jusqu'à 30 secondes pour s'établir ?</a></li>
      <li><a href="#ciphers">Quels sont les algorithmes de chiffrement
      supportés par mod_ssl ?</a></li>
      <li><a href="#adh">Pourquoi une erreur ``no shared cipher'' apparaît-elle
      quand j'essaie d'utiliser un algorithme de chiffrement
      Diffie-Hellman anonyme (ADH) ?</a></li>
      <li><a href="#sharedciphers">Pourquoi une erreur ``no shared cipher''
      apparaît-elle lorsqu'on se connecte à mon serveur
      fraîchement installé ?</a></li>
      <li><a href="#vhosts">Pourquoi ne peut-on pas utiliser SSL avec des hôtes
      virtuels identifiés par un nom et non par une adresse IP ?</a></li>
      <li><a href="#vhosts2">Est-il possible d'utiliser
      l'hébergement virtuel basé sur le nom d'hôte
      pour différencier plusieurs hôtes virtuels ?</a></li>
      <li><a href="#comp">Comment mettre en oeuvre la compression SSL ?</a></li>
      <li><a href="#lockicon">Lorsque j'utilise l'authentification de base sur HTTPS,
      l'icône de verrouillage des navigateurs Netscape reste ouverte quand la boîte
      de dialogue d'authentification apparaît. Cela signifie-t-il que les utilisateur
      et mot de passe sont envoyés en clair ?</a></li>
      <li><a href="#msie">Pourquoi des erreurs d'entrée/sortie apparaissent-elles
      lorsqu'on se connecte à un serveur Apache+mod_ssl avec
      Microsoft Internet Explorer (MSIE) ?</a></li>
      <li><a href="#srp">Comment activer TLS-SRP ?</a></li>
      <li><a href="#javadh">Pourquoi des erreurs de négociation apparaissent
      avec les clients basés sur Java lorsqu'on utilise un certificat de plus
      de 1024 bits ?</a></li>
      </ul>
      
      <h3><a name="random" id="random">Pourquoi de nombreuses et aléatoires erreurs de
      protocole SSL apparaissent-elles en cas de forte charge du serveur ?</a></h3>
      <p>Ce problème peut avoir plusieurs causes, mais la principale réside dans le
      cache de session SSL défini par la directive
      <code class="directive"><a href="../mod/mod_ssl.html#sslsessioncache">SSLSessionCache</a></code>. Le cache de session
      DBM est souvent à la source du problème qui peut être résolu en utilisant le
      cache de session SHM (ou en n'utilisant tout simplement pas de cache).</p>
      
      
      <h3><a name="load" id="load">Pourquoi la charge de mon serveur est-elle plus
      importante depuis qu'il sert des ressources chiffrées en SSL ?</a></h3>
      <p>SSL utilise un procédé de chiffrement fort qui nécessite la manipulation
      d'une quantité très importante de nombres. Lorsque vous effectuez une requête
      pour une page web via HTTPS, tout (même les images) est chiffré avant d'être
      transmis. C'est pourquoi un accroissement du traffic HTTPS entraîne une
      augmentation de la charge.</p>
      
      
      <h3><a name="establishing" id="establishing">Pourquoi les connexions en HTTPS à mon serveur
      prennent-elles parfois jusqu'à 30 secondes pour s'établir ?</a></h3>
      <p>Ce problème provient en général d'un périphérique <code>/dev/random</code>
      qui bloque l'appel système read(2) jusqu'à ce que suffisamment d'entropie
      soit disponible pour servir la requête. Pour plus d'information, se référer au
      manuel de référence de la directive
      <code class="directive"><a href="../mod/mod_ssl.html#sslrandomseed">SSLRandomSeed</a></code>.</p>
      
      
      <h3><a name="ciphers" id="ciphers">Quels sont les algorithmes de chiffrement
      supportés par mod_ssl ?</a></h3>
      <p>En général, tous les algorithmes de chiffrement supportés par la version
      d'OpenSSL installée, le sont aussi par <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>. La liste des
      algorithmes disponibles peut dépendre de la manière dont vous avez installé
      OpenSSL. Typiquement, au moins les algorithmes suivants sont supportés :</p>
      
          <ol>
          <li>RC4 avec SHA1</li>
          <li>AES avec SHA1</li>
          <li>Triple-DES avec SHA1</li>
          </ol>
      
          <p>Pour déterminer la liste réelle des algorithmes disponibles, vous
          pouvez utiliser la commande suivante :</p>
          <div class="example"><p><code>$ openssl ciphers -v</code></p></div>
      
      
      <h3><a name="adh" id="adh">Pourquoi une erreur ``no shared cipher'' apparaît-elle
      quand j'essaie d'utiliser un algorithme de chiffrement
      Diffie-Hellman anonyme (ADH) ?</a></h3>
      <p>Par défaut et pour des raisons de sécurité, OpenSSl ne permet <em>pas</em>
      l'utilisation des algorithmes de chiffrements ADH. Veuillez vous informer
      sur les effets pervers potentiels si vous choisissez d'activer le support
      de ces algorithmes de chiffrements.</p>
      <p>Pour pouvoir utiliser les algorithmes de chiffrements Diffie-Hellman
      anonymes (ADH), vous devez compiler OpenSSL avec
      ``<code>-DSSL_ALLOW_ADH</code>'', puis ajouter ``<code>ADH</code>'' à votre
      directive <code class="directive"><a href="../mod/mod_ssl.html#sslciphersuite">SSLCipherSuite</a></code>.</p>
      
      
      <h3><a name="sharedciphers" id="sharedciphers">Pourquoi une erreur ``no shared cipher''
      apparaît-elle lorsqu'on se connecte à mon serveur
      fraîchement installé ?</a></h3>
      <p>Soit vous avez fait une erreur en définissant votre directive
      <code class="directive"><a href="../mod/mod_ssl.html#sslciphersuite">SSLCipherSuite</a></code> (comparez-la avec
      l'exemple préconfiguré dans <code>extra/httpd-ssl.conf</code>), soit vous avez
      choisi d'utiliser des algorithmes DSA/DH au lieu de RSA lorsque vous avez
      généré votre clé privée, et avez ignoré ou êtes passé outre les
      avertissements. Si vous avez choisi DSA/DH, votre serveur est incapable de
      communiquer en utilisant des algorithmes de chiffrements SSL basés sur RSA
      (du moins tant que vous n'aurez pas configuré une paire clé/certificat RSA
      additionnelle). Les navigateurs modernes tels que NS ou IE ne peuvent
      communiquer par SSL qu'avec des algorithmes RSA. C'est ce qui provoque l'erreur
      "no shared ciphers". Pour la corriger, générez une nouvelle paire
      clé/certificat pour le serveur en utilisant un algorithme de chiffrement
      RSA.</p>
      
      
      <h3><a name="vhosts" id="vhosts">Pourquoi ne peut-on pas utiliser SSL avec des hôtes
      virtuels identifiés par un nom et non par une adresse IP ?</a></h3>
      <p>La raison est très technique, et s'apparente au problème de la primauté de
      l'oeuf ou de la poule. La couche du protocole SSL se trouve en dessous de la
      couche de protocole HTTP qu'elle encapsule. Lors de l'établissement d'une
      connexion SSL (HTTPS), Apache/mod_ssl doit négocier les paramètres du
      protocole SSL avec le client. Pour cela, mod_ssl doit consulter la
      configuration du serveur virtuel (par exemple, il doit accéder à la suite
      d'algorithmes de chiffrement, au certificat du serveur, etc...). Mais afin de
      sélectionner le bon serveur virtuel, Apache doit connaître le contenu du champ
      d'en-tête HTTP <code>Host</code>. Pour cela, il doit lire l'en-tête de la
      requête HTTP. Mais il ne peut le faire tant que la négociation SSL n'est pas
      terminée, or, la phase de négociation SSL a besoin du nom d'hôte contenu
      dans l'en-tête de la requête. Voir la question suivante pour
      contourner ce problème.</p>
      
          <p>Notez que si votre certificat comporte un nom de serveur avec
          caractères génériques, ou des noms de serveurs multiples dans le
          champ subjectAltName, vous pouvez utiliser SSL avec les serveurs
          virtuels à base de noms sans avoir à contourner ce problème.</p>
      
      
      <h3><a name="vhosts2" id="vhosts2">Est-il possible d'utiliser
      l'hébergement virtuel basé sur le nom d'hôte
      pour différencier plusieurs hôtes virtuels ?</a></h3>
          <p>L'hébergement virtuel basé sur le nom est une méthode très populaire
          d'identification des différents hôtes virtuels. Il permet d'utiliser la
          même adresse IP et le même numéro de port pour de nombreux sites
          différents. Lorsqu'on se tourne vers SSL, il semble tout naturel de penser
          que l'on peut appliquer la même méthode pour gérer plusieurs hôtes
          virtuels SSL sur le même serveur.</p>
      
          <p>C'est possible, mais seulement si on utilise une version 2.2.12
          ou supérieure du serveur web compilée avec OpenSSL
          version 0.9.8j ou supérieure. Ceci est du au fait que
          l'utilisation de l'hébergement virtuel à base de nom
          avec SSL nécessite une fonctionnalité appelée
          Indication du Nom de Serveur (Server Name Indication - SNI) que
          seules les révisions les plus récentes de la
          spécification SSL supportent.</p>
      
          <p>Notez que si votre certificat comporte un nom de serveur avec
          caractères génériques, ou des noms de serveurs multiples dans le
          champ subjectAltName, vous pouvez utiliser SSL avec les serveurs
          virtuels à base de noms sans avoir à contourner ce problème.</p>
      
          <p>La raison en est que le protocole SSL constitue une couche séparée qui
          encapsule le protocole HTTP. Aini, la session SSL nécessite une
          transaction séparée qui prend place avant que la session HTTP n'ait débuté.
          Le serveur reçoit une requête SSL sur l'adresse IP X et le port Y
          (habituellement 443). Comme la requête SSL ne contenait aucun
          en-tête Host:, le serveur n'avait aucun moyen de déterminer quel hôte virtuel SSL il
          devait utiliser. En général, il utilisait le premier
          qu'il trouvait et qui
          correspondait à l'adresse IP et au port spécifiés.</p>
      
          <p>Par contre, si vous utilisez des versions du serveur web et
          d'OpenSSL qui supportent SNI, et si le navigateur du client le
          supporte aussi, alors le nom d'hôte sera inclus dans la
          requête SSL originale, et le serveur web pourra
          sélectionner le bon serveur virtuel SSL.</p>
      
          <p>Bien entendu, vous pouvez utiliser l'hébergement virtuel basé sur le nom
          pour identifier de nombreux hôtes virtuels non-SSL
          (tous sur le port 80 par exemple), et ne gérer qu'un seul hôte virtuel SSL
          (sur le port 443). Mais dans ce cas, vous devez définir le numéro de port
          non-SSL à l'aide de la directive NameVirtualHost dans ce style :</p>
      
          <pre class="prettyprint lang-config">NameVirtualHost 192.168.1.1:80</pre>
      
      
          <p>il existe d'autres solutions alternatives comme :</p>
      
          <p>Utiliser des adresses IP différentes pour chaque hôte SSL.
          Utiliser des numéros de port différents pour chaque hôte SSL.</p>
      
      
      <h3><a name="comp" id="comp">Comment mettre en oeuvre la compression SSL ?</a></h3>
      <p>Bien que la négociation pour la compression SSL ait été définie dans la
      spécification de SSLv2 et TLS, ce n'est qu'en mai 2004 que la RFC 3749 a
      défini DEFLATE comme une méthode de compression standard négociable.
      </p>
      <p>Depuis la version 0.9.8, OpenSSL supporte cette compression par défaut
      lorsqu'il est compilé avec l'option <code>zlib</code>. Si le client et le
      serveur supportent la compression, elle sera utilisée. Cependant, la
      plupart des clients essaient encore de se connecter avec un Hello SSLv2.
      Comme SSLv2 ne comportait pas de table des algorithmes de compression préférés
      dans sa négociation, la compression ne peut pas être négociée avec ces clients.
      Si le client désactive le support SSLv2, un Hello SSLv3 ou TLS peut être
      envoyé, selon la bibliothèque SSL utilisée, et la compression peut être mise
      en oeuvre. Vous pouvez vérifier si un client utilise la compression SSL en
      journalisant la variable <code>%{SSL_COMPRESS_METHOD}x</code>.
      </p>
      
      
      <h3><a name="lockicon" id="lockicon">Lorsque j'utilise l'authentification de base sur HTTPS,
      l'icône de verrouillage des navigateurs Netscape reste ouverte quand la boîte
      de dialogue d'authentification apparaît. Cela signifie-t-il que les utilisateur
      et mot de passe sont envoyés en clair ?</a></h3>
      <p>Non, le couple utilisateur/mot de passe est transmis sous forme chiffrée.
      	L'icône de chiffrement dans les navigateurs Netscape n'est pas vraiment
      	synchronisé avec la couche SSL/TLS. Il ne passe à l'état verrouillé
      	qu'au moment où la première partie des données relatives à la page web
      	proprement dite sont transférées, ce qui peut prêter à confusion. Le
      	dispositif d'authentification de base appartient à la couche HTTP, qui
      	est située au dessus de la couche SSL/TLS dans HTTPS. Avant tout
      	transfert de données HTTP sous HTTPS, la couche SSL/TLS a déjà achevé
      	sa phase de négociation et basculé dans le mode de communication
      	chiffrée. Ne vous laissez donc pas abuser par l'état de cet icône.</p>
      
      
      <h3><a name="msie" id="msie">Pourquoi des erreurs d'entrée/sortie apparaissent-elles
      lorsqu'on se connecte via HTTPS à un serveur Apache+mod_ssl avec des
      versions anciennes de
      Microsoft Internet Explorer (MSIE) ?</a></h3>
      <p>La première raison en est la présence dans l'implémentation SSL de
      certaines versions de MSIE de bogues subtils en rapport avec le
      dispositif de "maintien en vie" (keep-alive) HTTP, et les alertes de
      notification de fermeture de session SSL en cas de coupure de la
      connexion au point d'entrée (socket). De plus, l'interaction entre
      SSL et les fonctionnalités HTTP/1.1 pose problème avec certaines
      versions de MSIE. Vous pouvez contourner ces problèmes en interdisant
      à Apache l'utilisation de HTTP/1.1, les connexions avec maintien en vie
      ou l'envoi de messages de notification de fermeture de session SSL aux
      clients MSIE. Pour cela, vous pouvez utiliser la directive suivante
      dans votre section d'hôte virtuel avec support SSL :</p>
          <pre class="prettyprint lang-config">SetEnvIf User-Agent "MSIE [2-5]" \
               nokeepalive ssl-unclean-shutdown \
               downgrade-1.0 force-response-1.0</pre>
      
          <p>En outre, certaines versions de MSIE ont des problèmes avec des
          algorithmes de chiffrement particuliers. Hélas, il n'est pas
          possible d'apporter une solution spécifique à MSIE pour ces
          problèmes, car les algorithmes de chiffrement sont utilisés dès la
          phase de négociation SSL. Ainsi, une directive
          <code class="directive"><a href="../mod/mod_setenvif.html#setenvif">SetEnvIf</a></code> spécifique
          à MSIE ne peut être d'aucun secours. Par contre, vous devrez
          ajuster les paramètres généraux de manière drastique. Avant de
          vous décider, soyez sûr que vos clients rencontrent vraiment des
          problèmes. Dans la négative, n'effectuez pas ces ajustements car
          ils affecteront <em>tous</em> vos clients, ceux utilisant MSIE,
          mais aussi les autres.</p>
      
      
      
      <h3><a name="srp" id="srp">Comment activer TLS-SRP ?</a></h3>
          <p>Le protocole TLS-SRP (Echange de clés sécurisé par mot de passe
          pour TLS comme spécifié dans la RFC 5054) peut compléter ou même
          remplacer les certificats lors du processus d'authentification des
          connexions SSL. Pour utiliser TLS-SRP, spécifiez un fichier de
          vérification SRP OpenSSL via la directive <code class="directive"><a href="../mod/mod_ssl.html#sslsrpverifierfile">SSLSRPVerifierFile</a></code>. Vous pouvez créer
          le fichier de vérification via l'utilitaire <code>openssl</code> :</p>
          <div class="example"><p><code>
          openssl srp -srpvfile passwd.srpv -add username
          </code></p></div>
          <p>Une fois ce fichier créé, vous devez le référencer dans la
          configuration du serveur SSL :</p>
          <div class="example"><p><code>
          SSLSRPVerifierFile /path/to/passwd.srpv
          </code></p></div>
          <p>Pour forcer les clients à utiliser des algorithmes de chiffrement
          basés sur TLS-SRP et s'affranchissant des certificats, utilisez la
          directive suivante :</p>
          <div class="example"><p><code>
          SSLCipherSuite "!DSS:!aRSA:SRP"
          </code></p></div>
      
      
      <h3><a name="javadh" id="javadh">Pourquoi des erreurs de négociation apparaissent
      avec les clients basés sur Java lorsqu'on utilise un certificat de plus
      de 1024 bits ?</a></h3>
          <p>Depuis la version 2.4.7,
          <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> utilise des paramètres DH qui comportent
          des nombres premiers de plus de 1024 bits. Cependant, java 7 et ses versions
          antérieures ne supportent que les nombres premiers DH d'une longueur
          maximale de 1024 bits.</p>
      
          <p>Si votre client basé sur Java s'arrête avec une exception telle
          que <code>java.lang.RuntimeException: Could not generate DH
          keypair</code> et
          <code>java.security.InvalidAlgorithmParameterException: Prime size
          must be multiple of 64, and can only range from 512 to 1024
          (inclusive)</code>, et si httpd enregistre le message <code>tlsv1
          alert internal error (SSL alert number 80)</code> dans son journal
          des erreurs (avec un <code class="directive"><a href="../mod/core.html#loglevel">LogLevel</a></code>
          <code>info</code> ou supérieur), vous pouvez soit réarranger la
          liste d'algorithmes de mod_ssl via la directive <code class="directive"><a href="../mod/mod_ssl.html#sslciphersuite">SSLCipherSuite</a></code> (éventuellement en
          conjonction avec la directive <code class="directive"><a href="../mod/mod_ssl.html#sslhonorcipherorder">SSLHonorCipherOrder</a></code>), soit utiliser des
          paramètres DH personnalisés avec un nombre
          premier de 1024 bits, paramètres qui seront toujours prioritaires
          par rapport à tout autre paramètre DH par défaut.</p>
      
          <p>Pour générer des paramètres DH personnalisés, utilisez la
          commande <code>openssl dhparam 1024</code>. Vous pouvez aussi
          utiliser les
          paramètres DH standards issus de la <a href="http://www.ietf.org/rfc/rfc2409.txt">RFC 2409</a>, section 6.2 :</p>
          <div class="example"><pre>-----BEGIN DH PARAMETERS-----
      MIGHAoGBAP//////////yQ/aoiFowjTExmKLgNwc0SkCTgiKZ8x0Agu+pjsTmyJR
      Sgh5jjQE3e+VGbPNOkMbMCsKbfJfFDdP4TVtbVHCReSFtXZiXn7G9ExC6aY37WsL
      /1y29Aa37e44a/taiZ+lrp8kEXxLH+ZJKGZR7OZTgf//////////AgEC
      -----END DH PARAMETERS-----</pre></div>
          <p>Ajoute les paramètres personnalisés incluant les lignes "BEGIN DH
          PARAMETERS" et "END DH PARAMETERS" à la fin du premier fichier de
          certificat défini via la directive <code class="directive"><a href="../mod/mod_ssl.html#sslcertificatefile">SSLCertificateFile</a></code>.</p>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="support" id="support">Support de mod_ssl</a></h2>
      <ul>
      <li><a href="#resources">Quelles sont les sources d'informations
      disponibles en cas de problème avec mod_ssl ?</a></li>
      <li><a href="#contact">Qui peut-on contacter pour un support en cas de
      problème avec mod_ssl ?</a></li>
      <li><a href="#reportdetails">Quelles informations dois-je fournir lors
      de l'écriture d'un rapport de bogue ?</a></li>
      <li><a href="#coredumphelp">Un vidage mémoire s'est produit,
      pouvez-vous m'aider ?</a></li>
      <li><a href="#backtrace">Comment puis-je obtenir une journalisation de
      ce qui s'est passé, pour m'aider à trouver la raison de ce vidage
      mémoire ?</a></li>
      </ul>
      
      <h3><a name="resources" id="resources">Quelles sont les sources d'informations
      disponibles en cas de problème avec mod_ssl ?</a></h3>
      <p>Voici les sources d'informations disponibles ; vous devez chercher
      ici en cas de problème.</p>
      
          <dl>
          <dt>Vous trouverez des réponses dans la Foire Aux Questions du
          manuel utilisateur (ce document)</dt>
          <dd><a href="http://httpd.apache.org/docs/2.4/ssl/ssl_faq.html">
          	http://httpd.apache.org/docs/2.4/ssl/ssl_faq.html</a><br />
      	Cherchez tout d'abord dans la foire aux questions
      	(ce document). Si votre question est courante, on a déjà dû y
      	répondre de nombreuses fois, et elle fait probablement partie
      	de ce document.
          </dd>
          </dl>
      
      
      <h3><a name="contact" id="contact">Qui peut-on contacter pour un support en cas de
      problème avec mod_ssl ?</a></h3>
       <p>Voici toutes les possibilités de support pour mod_ssl, par ordre
       de préférence. Merci d'utiliser ces possibilités
       <em>dans cet ordre</em> - ne vous précipitez pas sur celle qui vous
       paraît la plus alléchante. </p>
          <ol>
          <li><em>Envoyez un rapport de problème à la liste de diffusion de
          support des utilisateurs d'Apache httpd</em><br />
              <a href="mailto:users@httpd.apache.org">
              users@httpd.apache.org</a><br />
              C'est la deuxième manière de soumettre votre rapport de
      	problème. Ici aussi, vous devez d'abord vous abonner à la
      	liste, mais vous pourrez ensuite discuter facilement de votre
      	problème avec l'ensemble de la communauté d'utilisateurs
      	d'Apache httpd.
          </li>
      
          <li><em>Ecrire un rapport de problème dans la base de données des
          bogues</em><br />
      	<a href="http://httpd.apache.org/bug_report.html">
      	http://httpd.apache.org/bug_report.html</a><br />
              C'est la dernière manière de soumettre votre rapport de
      	problème. Vous ne devez utiliser cette solution que si vous
      	avez déjà écrit aux listes de diffusion, et n'avez pas trouvé
      	de solution. Merci de suivre les instructions de la page
      	mentionnée ci-dessus <em>avec soin</em>.
          </li>
          </ol>
      
      
      <h3><a name="reportdetails" id="reportdetails">Quelles informations dois-je fournir lors
      de l'écriture d'un rapport de bogue ?</a></h3>
      <p>Vous devez toujours fournir au moins les informations
      suivantes :</p>
      
          <dl>
          <dt>Les versions d'Apache httpd et OpenSSL installées</dt>
          <dd>La version d'Apache peut être déterminée en exécutant
          <code>httpd -v</code>. La version d'OpenSSL peut être déterminée
          en exécutant <code>openssl version</code>. Si Lynx est installé,
          vous pouvez aussi exécuter la commande<code>lynx -mime_header
          http://localhost/ | grep Server</code> et ainsi obtenir ces
          informations en une seule fois.
          </dd>
      
          <dt>Les détails de votre installation d'Apache httpd et OpenSSL</dt>
          <dd>A cet effet, vous pouvez fournir un fichier journal de votre
          session de terminal qui montre les étapes de la configuration et
          de l'installation. En cas d'impossibilité, vous devez au moins
          fournir la ligne de commande <code class="program"><a href="../programs/configure.html">configure</a></code> que
          vous avez utilisée.
          </dd>
      
          <dt>En cas de vidage mémoire, inclure une trace de ce qui s'est
          passé</dt>
          <dd>Si votre serveur Apache httpd fait un vidage de sa
          mémoire, merci de fournir en pièce jointe un fichier contenant
          une trace de la zone dédiée à la pile (voir
          <a href="#backtrace">ci-dessous</a> pour des informations sur la manière
          de l'obtenir). Il est nécessaire de disposer de ces informations
          afin de pouvoir déterminer la raison de votre vidage mémoire.
          </dd>
      
          <dt>Une description détaillée de votre problème</dt>
      
          <dd>Ne riez pas, nous sommes sérieux ! De nombreux rapports
          n'incluent pas de description de la véritable nature du problème.
          Sans ces informations, il est très difficile pour quiconque de
          vous aider. Donc, et c'est votre propre intérêt (vous souhaitez
          que le problème soit résolu, n'est-ce pas ?), fournissez, s'il vous
          plait, le maximum de détails possible. Bien entendu, vous devez
          aussi inclure tout ce qui a été dit précédemment.
          </dd>
          </dl>
      
      
      <h3><a name="coredumphelp" id="coredumphelp">Un vidage mémoire s'est produit,
      pouvez-vous m'aider ?</a></h3>
      <p>En général non, du moins tant que vous n'aurez pas fourni plus de
      détails à propos de la localisation dans le code où Apache a effectué
      son vidage mémoire. Ce dont nous avons en général besoin pour vous
      aider est une trace de ce qui s'est passé (voir la question suivante).
      Sans cette information, il est pratiquement impossible de déterminer
      la nature du problème et de vous aider à le résoudre.</p>
      
      
      <h3><a name="backtrace" id="backtrace">Comment puis-je obtenir une journalisation de
      ce qui s'est passé, pour m'aider à trouver la raison de ce vidage
      mémoire ?</a></h3>
      <p>Vous trouverez ci-dessous les différentes étapes permettant
      d'obtenir une journalisation des évènements (backtrace) :</p>
          <ol>
          <li>Assurez-vous que les symboles de débogage sont disponibles, au
          moins pour Apache. Pour cela, sur les plates-formes où GCC/GDB est
          utilisé, vous devez compiler Apache+mod_ssl avec l'option
          ``<code>OPTIM="-g -ggdb3"</code>''. Sur les autres plates-formes,
          l'option ``<code>OPTIM="-g"</code>'' est un minimum.
          </li>
      
          <li>Démarrez le serveur et essayez de reproduire le vidage mémoire.
          A cet effet, vous pouvez utiliser une directive du style
          ``<code>CoreDumpDirectory /tmp</code>'' pour être sûr que le
          fichier de vidage mémoire puisse bien être écrit. Vous devriez
          obtenir un fichier <code>/tmp/core</code> ou
          <code>/tmp/httpd.core</code>. Si ce n'est pas le cas, essayez de
          lancer votre serveur sous un UID autre que root.
          Pour des raisons de sécurité, de nombreux
          noyaux modernes de permettent pas à un processus de vider sa
          mémoire une fois qu'il a accompli un <code>setuid()</code> (à moins
          qu'il effectue un <code>exec()</code>) car des informations d'un
          niveau privilégié pourraient être transmises en mémoire. Si
          nécessaire, vous pouvez exécuter <code>/chemin/vers/httpd -X</code>
          manuellement afin de ne pas permettre à Apache de se clôner (fork).
          </li>
      
          <li>Analysez le vidage mémoire. Pour cela, exécutez
          <code>gdb /path/to/httpd /tmp/httpd.core</code> ou une commande
          similaire. Dans GDB, tout ce que vous avez à faire est d'entrer
          <code>bt</code>, et voila, vous obtenez la backtrace. Pour les
          débogueurs autres que GDB consulter le manuel correspondant.
          </li>
          </ol>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/ssl/ssl_faq.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_faq.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/ssl/ssl_faq.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/index.html�������������������������������������������������������������0000644�0000000�0000050�00000000723�13362070302�016235� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: index.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: index.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: index.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: index.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      
      URI: index.html.zh-cn.utf8
      Content-Language: zh-cn
      Content-type: text/html; charset=UTF-8
      ���������������������������������������������httpd-2.4.41/docs/manual/ssl/ssl_compat.html.en�����������������������������������������������������0000644�0000000�0000050�00000052375�13412755316�017720� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>SSL/TLS Strong Encryption: Compatibility - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">SSL/TLS</a></div><div id="page-content"><div id="preamble"><h1>SSL/TLS Strong Encryption: Compatibility</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/ssl/ssl_compat.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_compat.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
      <p>
      This page covers backwards compatibility between mod_ssl and other
      SSL solutions.  mod_ssl is not the only SSL solution for Apache; four
      additional products are (or were) also available: Ben Laurie's freely
      available <a href="http://www.apache-ssl.org/">Apache-SSL</a> (from
      where mod_ssl were originally derived in 1998), Red Hat's commercial
      Secure Web Server (which was based on mod_ssl), Covalent's commercial
      Raven SSL Module (also based on
      mod_ssl) and finally C2Net's (now Red Hat's) commercial product <a href="http://www.redhat.com/explore/stronghold/">Stronghold</a> (based
      on a different evolution branch, named Sioux up to Stronghold 2.x, and
      based on mod_ssl since Stronghold 3.x).</p>
      
      <p>
      mod_ssl mostly provides a superset of the functionality of all the other
      solutions, so it's simple to migrate from one of the older modules to
      mod_ssl. The configuration directives and environment variable names
      used by the older SSL solutions vary from those used in mod_ssl;
      mapping tables are included here to give the equivalents used by mod_ssl.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#configuration">Configuration Directives</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#variables">Environment Variables</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#customlog">Custom Log Functions</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuration" id="configuration">Configuration Directives</a></h2>
      <p>The mapping between configuration directives used by Apache-SSL
      1.x and mod_ssl 2.0.x is given in <a href="#table1">Table
      1</a>. The mapping from Sioux 1.x and Stronghold 2.x is only partial
      because of special functionality in these interfaces which mod_ssl
      doesn't provide.</p>
      
      
      <h3><a name="table1" id="table1">Table 1: Configuration Directive Mapping</a></h3>
      
      <table><tr class="header"><th>Old Directive</th><th>mod_ssl Directive</th><th>Comment</th></tr>
      <tr class="header"><th colspan="3">Apache-SSL 1.x &amp; mod_ssl 2.0.x compatibility:</th></tr>
      <tr><td><code>SSLEnable</code></td><td><code>SSLEngine on</code></td><td>compactified</td></tr>
      <tr class="odd"><td><code>SSLDisable</code></td><td><code>SSLEngine off</code></td><td>compactified</td></tr>
      <tr><td><code>SSLLogFile</code> <em>file</em></td><td><code /></td><td>Use per-module <code class="directive"><a href="../mod/core.html#loglevel">LogLevel</a></code> setting instead.</td></tr>
      <tr class="odd"><td><code>SSLRequiredCiphers</code> <em>spec</em></td><td><code>SSLCipherSuite</code> <em>spec</em></td><td>renamed</td></tr>
      <tr><td><code>SSLRequireCipher</code> <em>c1</em> ...</td><td><code>SSLRequire %{SSL_CIPHER} in {"</code><em>c1</em><code>",
      ...}</code></td><td>generalized</td></tr>
      <tr class="odd"><td><code>SSLBanCipher</code> <em>c1</em> ...</td><td><code>SSLRequire not (%{SSL_CIPHER} in {"</code><em>c1</em><code>",
      ...})</code></td><td>generalized</td></tr>
      <tr><td><code>SSLFakeBasicAuth</code></td><td><code>SSLOptions +FakeBasicAuth</code></td><td>merged</td></tr>
      <tr class="odd"><td><code>SSLCacheServerPath</code> <em>dir</em></td><td>-</td><td>functionality removed</td></tr>
      <tr><td><code>SSLCacheServerPort</code> <em>integer</em></td><td>-</td><td>functionality removed</td></tr>
      <tr class="header"><th colspan="3">Apache-SSL 1.x compatibility:</th></tr>
      <tr class="odd"><td><code>SSLExportClientCertificates</code></td><td><code>SSLOptions +ExportCertData</code></td><td>merged</td></tr>
      <tr><td><code>SSLCacheServerRunDir</code> <em>dir</em></td><td>-</td><td>functionality not supported</td></tr>
      <tr class="header"><th colspan="3">Sioux 1.x compatibility:</th></tr>
      <tr class="odd"><td><code>SSL_CertFile</code> <em>file</em></td><td><code>SSLCertificateFile</code> <em>file</em></td><td>renamed</td></tr>
      <tr><td><code>SSL_KeyFile</code> <em>file</em></td><td><code>SSLCertificateKeyFile</code> <em>file</em></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_CipherSuite</code> <em>arg</em></td><td><code>SSLCipherSuite</code> <em>arg</em></td><td>renamed</td></tr>
      <tr><td><code>SSL_X509VerifyDir</code> <em>arg</em></td><td><code>SSLCACertificatePath</code> <em>arg</em></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_Log</code> <em>file</em></td><td><code>-</code></td><td>Use per-module <code class="directive"><a href="../mod/core.html#loglevel">LogLevel</a></code> setting instead.</td></tr>
      <tr><td><code>SSL_Connect</code> <em>flag</em></td><td><code>SSLEngine</code> <em>flag</em></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_ClientAuth</code> <em>arg</em></td><td><code>SSLVerifyClient</code> <em>arg</em></td><td>renamed</td></tr>
      <tr><td><code>SSL_X509VerifyDepth</code> <em>arg</em></td><td><code>SSLVerifyDepth</code> <em>arg</em></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_FetchKeyPhraseFrom</code> <em>arg</em></td><td>-</td><td>not directly mappable; use SSLPassPhraseDialog</td></tr>
      <tr><td><code>SSL_SessionDir</code> <em>dir</em></td><td>-</td><td>not directly mappable; use SSLSessionCache</td></tr>
      <tr class="odd"><td><code>SSL_Require</code> <em>expr</em></td><td>-</td><td>not directly mappable; use SSLRequire</td></tr>
      <tr><td><code>SSL_CertFileType</code> <em>arg</em></td><td>-</td><td>functionality not supported</td></tr>
      <tr class="odd"><td><code>SSL_KeyFileType</code> <em>arg</em></td><td>-</td><td>functionality not supported</td></tr>
      <tr><td><code>SSL_X509VerifyPolicy</code> <em>arg</em></td><td>-</td><td>functionality not supported</td></tr>
      <tr class="odd"><td><code>SSL_LogX509Attributes</code> <em>arg</em></td><td>-</td><td>functionality not supported</td></tr>
      <tr class="header"><th colspan="3">Stronghold 2.x compatibility:</th></tr>
      <tr><td><code>StrongholdAccelerator</code> <em>engine</em></td><td><code>SSLCryptoDevice</code> <em>engine</em></td><td>renamed</td></tr>
      <tr class="odd"><td><code>StrongholdKey</code> <em>dir</em></td><td>-</td><td>functionality not needed</td></tr>
      <tr><td><code>StrongholdLicenseFile</code> <em>dir</em></td><td>-</td><td>functionality not needed</td></tr>
      <tr class="odd"><td><code>SSLFlag</code> <em>flag</em></td><td><code>SSLEngine</code> <em>flag</em></td><td>renamed</td></tr>
      <tr><td><code>SSLSessionLockFile</code> <em>file</em></td><td><code>SSLMutex</code> <em>file</em></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSLCipherList</code> <em>spec</em></td><td><code>SSLCipherSuite</code> <em>spec</em></td><td>renamed</td></tr>
      <tr><td><code>RequireSSL</code></td><td><code>SSLRequireSSL</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSLErrorFile</code> <em>file</em></td><td>-</td><td>functionality not supported</td></tr>
      <tr><td><code>SSLRoot</code> <em>dir</em></td><td>-</td><td>functionality not supported</td></tr>
      <tr class="odd"><td><code>SSL_CertificateLogDir</code> <em>dir</em></td><td>-</td><td>functionality not supported</td></tr>
      <tr><td><code>AuthCertDir</code> <em>dir</em></td><td>-</td><td>functionality not supported</td></tr>
      <tr class="odd"><td><code>SSL_Group</code> <em>name</em></td><td>-</td><td>functionality not supported</td></tr>
      <tr><td><code>SSLProxyMachineCertPath</code> <em>dir</em></td><td><code>SSLProxyMachineCertificatePath</code> <em>dir</em></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSLProxyMachineCertFile</code> <em>file</em></td><td><code>SSLProxyMachineCertificateFile</code> <em>file</em></td><td>renamed</td></tr>
      <tr><td><code>SSLProxyCipherList</code> <em>spec</em></td><td><code>SSLProxyCipherSpec</code> <em>spec</em></td><td>renamed</td></tr>
      </table>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="variables" id="variables">Environment Variables</a></h2>
      
      <p>The mapping between environment variable names used by the older
      SSL solutions and the names used by mod_ssl is given in <a href="#table2">Table 2</a>.</p>
      
      <h3><a name="table2" id="table2">Table 2: Environment Variable Derivation</a></h3>
      
      <table><tr class="header"><th>Old Variable</th><th>mod_ssl Variable</th><th>Comment</th></tr>
      <tr><td><code>SSL_PROTOCOL_VERSION</code></td><td><code>SSL_PROTOCOL</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSLEAY_VERSION</code></td><td><code>SSL_VERSION_LIBRARY</code></td><td>renamed</td></tr>
      <tr><td><code>HTTPS_SECRETKEYSIZE</code></td><td><code>SSL_CIPHER_USEKEYSIZE</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>HTTPS_KEYSIZE</code></td><td><code>SSL_CIPHER_ALGKEYSIZE</code></td><td>renamed</td></tr>
      <tr><td><code>HTTPS_CIPHER</code></td><td><code>SSL_CIPHER</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>HTTPS_EXPORT</code></td><td><code>SSL_CIPHER_EXPORT</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_SERVER_KEY_SIZE</code></td><td><code>SSL_CIPHER_ALGKEYSIZE</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_CERTIFICATE</code></td><td><code>SSL_SERVER_CERT</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_SERVER_CERT_START</code></td><td><code>SSL_SERVER_V_START</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_CERT_END</code></td><td><code>SSL_SERVER_V_END</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_SERVER_CERT_SERIAL</code></td><td><code>SSL_SERVER_M_SERIAL</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_SIGNATURE_ALGORITHM</code></td><td><code>SSL_SERVER_A_SIG</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_SERVER_DN</code></td><td><code>SSL_SERVER_S_DN</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_CN</code></td><td><code>SSL_SERVER_S_DN_CN</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_SERVER_EMAIL</code></td><td><code>SSL_SERVER_S_DN_Email</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_O</code></td><td><code>SSL_SERVER_S_DN_O</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_SERVER_OU</code></td><td><code>SSL_SERVER_S_DN_OU</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_C</code></td><td><code>SSL_SERVER_S_DN_C</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_SERVER_SP</code></td><td><code>SSL_SERVER_S_DN_SP</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_L</code></td><td><code>SSL_SERVER_S_DN_L</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_SERVER_IDN</code></td><td><code>SSL_SERVER_I_DN</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_ICN</code></td><td><code>SSL_SERVER_I_DN_CN</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_SERVER_IEMAIL</code></td><td><code>SSL_SERVER_I_DN_Email</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_IO</code></td><td><code>SSL_SERVER_I_DN_O</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_SERVER_IOU</code></td><td><code>SSL_SERVER_I_DN_OU</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_IC</code></td><td><code>SSL_SERVER_I_DN_C</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_SERVER_ISP</code></td><td><code>SSL_SERVER_I_DN_SP</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_IL</code></td><td><code>SSL_SERVER_I_DN_L</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_CLIENT_CERTIFICATE</code></td><td><code>SSL_CLIENT_CERT</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_CERT_START</code></td><td><code>SSL_CLIENT_V_START</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_CLIENT_CERT_END</code></td><td><code>SSL_CLIENT_V_END</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_CERT_SERIAL</code></td><td><code>SSL_CLIENT_M_SERIAL</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_CLIENT_SIGNATURE_ALGORITHM</code></td><td><code>SSL_CLIENT_A_SIG</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_DN</code></td><td><code>SSL_CLIENT_S_DN</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_CLIENT_CN</code></td><td><code>SSL_CLIENT_S_DN_CN</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_EMAIL</code></td><td><code>SSL_CLIENT_S_DN_Email</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_CLIENT_O</code></td><td><code>SSL_CLIENT_S_DN_O</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_OU</code></td><td><code>SSL_CLIENT_S_DN_OU</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_CLIENT_C</code></td><td><code>SSL_CLIENT_S_DN_C</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_SP</code></td><td><code>SSL_CLIENT_S_DN_SP</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_CLIENT_L</code></td><td><code>SSL_CLIENT_S_DN_L</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_IDN</code></td><td><code>SSL_CLIENT_I_DN</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_CLIENT_ICN</code></td><td><code>SSL_CLIENT_I_DN_CN</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_IEMAIL</code></td><td><code>SSL_CLIENT_I_DN_Email</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_CLIENT_IO</code></td><td><code>SSL_CLIENT_I_DN_O</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_IOU</code></td><td><code>SSL_CLIENT_I_DN_OU</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_CLIENT_IC</code></td><td><code>SSL_CLIENT_I_DN_C</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_ISP</code></td><td><code>SSL_CLIENT_I_DN_SP</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_CLIENT_IL</code></td><td><code>SSL_CLIENT_I_DN_L</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_EXPORT</code></td><td><code>SSL_CIPHER_EXPORT</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_KEYSIZE</code></td><td><code>SSL_CIPHER_ALGKEYSIZE</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_SECKEYSIZE</code></td><td><code>SSL_CIPHER_USEKEYSIZE</code></td><td>renamed</td></tr>
      <tr><td><code>SSL_SSLEAY_VERSION</code></td><td><code>SSL_VERSION_LIBRARY</code></td><td>renamed</td></tr>
      <tr class="odd"><td><code>SSL_STRONG_CRYPTO</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
      <tr><td><code>SSL_SERVER_KEY_EXP</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_KEY_ALGORITHM</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
      <tr><td><code>SSL_SERVER_KEY_SIZE</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_SESSIONDIR</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
      <tr><td><code>SSL_SERVER_CERTIFICATELOGDIR</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_CERTFILE</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
      <tr><td><code>SSL_SERVER_KEYFILE</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_KEYFILETYPE</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
      <tr><td><code>SSL_CLIENT_KEY_EXP</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_KEY_ALGORITHM</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
      <tr><td><code>SSL_CLIENT_KEY_SIZE</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
      </table>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="customlog" id="customlog">Custom Log Functions</a></h2>
      <p>
      When mod_ssl is enabled, additional functions exist for the <a href="../mod/mod_log_config.html#formats">Custom Log Format</a> of
      <code class="module"><a href="../mod/mod_log_config.html">mod_log_config</a></code> as documented in the Reference
      Chapter. Beside the ``<code>%{</code><em>varname</em><code>}x</code>''
      eXtension format function which can be used to expand any variables provided
      by any module, an additional Cryptography
      ``<code>%{</code><em>name</em><code>}c</code>'' cryptography format function
      exists for backward compatibility. The currently implemented function calls
      are listed in <a href="#table3">Table 3</a>.</p>
      
      <h3><a name="table3" id="table3">Table 3: Custom Log Cryptography Function</a></h3>
      
      <table>
      
      <tr><th>Function Call</th><th>Description</th></tr>
      
      <tr><td><code>%...{version}c</code></td>   <td>SSL protocol version</td></tr>
      <tr><td><code>%...{cipher}c</code></td>    <td>SSL cipher</td></tr>
      <tr><td><code>%...{subjectdn}c</code></td> <td>Client Certificate Subject Distinguished Name</td></tr>
      <tr><td><code>%...{issuerdn}c</code></td>  <td>Client Certificate Issuer Distinguished Name</td></tr>
      <tr><td><code>%...{errcode}c</code></td>   <td>Certificate Verification Error (numerical)</td></tr>
      
      <tr><td><code>%...{errstr}c</code></td>    <td>Certificate Verification Error (string)</td></tr>
      </table>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/ssl/ssl_compat.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_compat.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/ssl/ssl_compat.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/ssl_intro.html.fr.utf8�������������������������������������������������0000644�0000000�0000050�00000117151�13412755316�020454� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Chiffrement SSL/TLS fort :  Introduction - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">SSL/TLS</a></div><div id="page-content"><div id="preamble"><h1>Chiffrement SSL/TLS fort :  Introduction</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/ssl/ssl_intro.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_intro.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/ssl_intro.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a></p>
      </div>
      
      
      <p>Ce chapitre en guise d'introduction est destiné aux lecteurs pour lesquels
      le Web, HTTP et Apache sont familiers, mais ne sont pas des experts en matière
      de sécurité. Il n'a pas la prétention d'être un guide détaillé sur le
      protocole SSL, il ne traitera pas non plus des techniques spécifiques de gestion
      des certificats dans une organisation, ni des importants problèmes légaux de
      brevets ou des restrictions d'importation ou d'exportation. Il se veut plutôt
      une base de travail pour les utilisateurs de <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> en
      rassemblant différents concepts, définitions et exemples comme point de départ
      pour une exploration plus détaillée.</p>
      
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#cryptographictech">Techniques de chiffrement</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#certificates">Certificats</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ssl">Couche Points d'Accès Sécurisés - Secure Sockets Layer (SSL)</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#references">Références</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cryptographictech" id="cryptographictech">Techniques de chiffrement</a></h2>
      
      <p>La maîtrise de SSL nécessite la compréhension des algorithmes de
      chiffrement, des fonctions relatives aux empreintes de messages (comme les
      fonctions de type hash ou non réversibles), et des signatures numériques. Ces
      techniques pourraient faire l'objet d'un ouvrage à elles seules (voir par
      exemple [<a href="#AC96">AC96</a>]) et constituent les bases de la
      confidentialité, de l'intégrité et de l'authentification.</p>
      
      <h3><a name="cryptographicalgo" id="cryptographicalgo">Algorithmes de chiffrement</a></h3>
      
          <p>Supposons qu'Alice veuille envoyer un message à sa banque pour
          transférer une certaine somme. Alice souhaiterait que le message soit
          privé, car il contient des informations comme son numéro de compte et le
          montant du transfert. Une solution consisterait à utiliser un algorithme de
          chiffrement, technique qui permet de remplacer un message par sa version
          chiffrée, illisible jusqu'à ce qu'elle soit déchiffrée.
          Sous sa forme chiffrée,
          le message ne peut être déchiffré qu'en utilisant une clé secrète. Sans la
          clé, le message est inutilisable : les bons algorithmes de chiffrement
          rendent si difficile la restitution du texte original par des intrus que
          ceux-ci y gaspilleraient leurs efforts.</p>
      
          <p>Il existe deux catégories d'algorithmes de chiffrement : conventionnel
          ou à clé publique.</p>
      
          <dl>
          <dt>Chiffrement conventionnel</dt>
          <dd>aussi connu sous le nom de chiffrement symétrique, il nécessite le
          partage d'une clé entre l'expéditeur et le destinataire : une portion
          d'information secrète permettant de chiffrer et déchiffrer un message.
          Tant que cette clé reste secrète, personne à part l'expéditeur et le
          destinataire ne peut lire le message. Si Alice et sa banque partagent une
          clé secrète, ils peuvent donc s'envoyer l'un à l'autre des messages privés.
          Le fait de partager une clé entre l'expéditeur et le destinataire avant
          de communiquer, tout en la maintenant secrète vis à vis des autres, peut
          toutefois poser des problèmes.</dd>
      
          <dt>Chiffrement à clé publique</dt>
          <dd>aussi connu sous le nom de chiffrement asymétrique, il résoud le
          problème d'échange de clé en définissant un algorithme qui utilise deux
          clés, chacune d'entre elles pouvant être utilisée pour chiffrer un message.
          Si une des clés a été utilisée pour chiffrer le message, on doit utiliser
          l'autre clé pour le déchiffrer. Il est ainsi possible de recevoir des
          messages sécurisés simplement en rendant publique une des clés (la clé
          publique), et en gardant l'autre clé secrète (la clé privée).</dd>
          </dl>
      
          <p>Tout le monde peut chiffrer un message en utilisant la clé publique,
          mais seul le propriétaire de la clé privée sera en mesure de le lire. De
          cette façon, Alice peut envoyer des messages privés au propriétaire d'une
          paire de clés (sa banque), en les chiffrant à l'aide de la clé publique.
          Seule la banque sera en mesure de les déchiffrer.</p>
      
      
      <h3><a name="messagedigests" id="messagedigests">Empreinte d'un message</a></h3>
      
          <p>Bien qu'Alice puisse chiffrer son message pour le rendre privé, il
          subsiste toujours le risque que quelqu'un puisse modifier le message
          original ou le remplacer par un autre, afin d'effectuer le transfert de
          fonds à son profit, par exemple. Une solution pour garantir l'intégrité du
          message consisterait pour Alice à créer un résumé concentré de son message
          qu'elle enverrait à sa banque avec ce dernier. A la réception du message,
          la banque crée son propre résumé et le compare avec celui qu'Alice a
          envoyé. Si les deux résumés sont identiques, le message reçu n'a pas
          été modifié.</p>
      
          <p>Un résumé tel que celui-ci est appelé
          <dfn>empreinte numérique de message</dfn> (message digest),
          <em>fonction irréversible</em> (one-way function) ou
          <em>fonction de hashage</em> (hash function). Une empreinte de message
          constitue une représentation courte et de longueur fixe, d'un message plus
          long et de longueur variable. Les algorithmes de création d'empreintes sont
          conçus pour produire une empreinte unique pour chaque message. Les
          empreintes de messages sont conçues pour que la restitution du message
          à partir de l'empreinte soit d'une difficulté insurmontable, et qu'il soit
          (en théorie) impossible de trouver deux messages différents qui produisent
          la même empreinte -- ce qui élimine la possibilité de remplacer un message
          par un autre en conservant la même empreinte.</p>
      
          <p>Trouver le moyen d'envoyer l'empreinte de manière sécurisée à la banque
          constitue un autre défit auquel Alice doit faire face ; si l'empreinte
          n'est pas envoyée de manière sécurisée, son intégrité peut être compromise,
          et avec elle, la possibilité pour la banque de vérifier l'intégrité du
          message original. L'intégrité du message ne peut être vérifiée que si
          l'empreinte qui lui est associée est envoyée de manière sécurisée.</p>
      
          <p>Une solution pour envoyer l'empreinte de manière sécurisée consiste à
          l'inclure dans une signature numérique.</p>
      
      
      <h3><a name="digitalsignatures" id="digitalsignatures">Signatures numériques</a></h3>
      <p>Quand Alice envoie un message à sa banque, cette dernière doit s'assurer
      que le message a bien été envoyé par elle, pour éviter qu'un intrus puisse
      effectuer une transaction sur son compte. Une <em>signature numérique</em>,
      créée par Alice et incluse dans le message, permet d'atteindre cet
      objectif.</p>
      
      <p>Les signatures numériques peuvent être créées en chiffrant une empreinte de
      message, ainsi que d'autres informations (comme un numéro d'ordre) avec la clé
      privée de l'expéditeur. Bien que tout le monde puisse <em>déchiffrer</em> la
      signature à l'aide de la clé publique, seul l'expéditeur connait la clé privée.
      Ce qui implique que seul l'expéditeur peut avoir signé le message. Inclure
      l'empreinte dans la signature entraîne que cette dernière n'est valable que
      pour ce message ; ceci assure aussi l'intégrité du message car personne ne
      peut modifier l'empreinte et ensuite signer le message.</p>
      <p>Afin de se prémunir contre l'interception et la réutilisation de la
      signature par un intrus quelques jours plus tard, la signature contient un
      numéro d'ordre unique. Ceci protège la banque contre une plainte frauduleuse
      de la part d'Alice alléguant qu'elle n'a pas envoyé le message --
      elle seule peut l'avoir signé (non-répudiation).</p>
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="certificates" id="certificates">Certificats</a></h2>
      
      <p>Bien qu'Alice soit parvenue à envoyer un message privé à sa banque, après
      l'avoir signé et avoir ainsi assuré l'intégrité du message, elle doit encore vérifier
      qu'elle communique réellement avec la banque. C'est à dire qu'elle doit
      s'assurer que la clé publique qu'elle utilise appartient bien à la paire de
      clés de la banque, et non à celle d'un intrus.
      De même, la banque doit vérifier que la
      signature du message a bien été construite avec la clé privée d'Alice.</p>
      
      <p>Si chaque partie possède un certificat qui valide l'identité de l'autre,
      confirme la clé publique, et est signé par un organisme de confiance, alors
      les deux protagonistes peuvent être sûrs que la personne avec laquelle ils
      communiquent est bien celle avec laquelle ils désirent le faire. Un tel
      organisme de confiance s'appelle une <em>Autorité de Certification</em>, et
      on utilise les certificats à des fins d'authentification.</p>
      
      <h3><a name="certificatecontents" id="certificatecontents">Contenu d'un certificat</a></h3>
      
          <p>Un certificat associe une clé publique avec l'identité réelle d'un
          individu, d'un serveur, ou d'une autre entité plus connue sous le nom de
          sujet. Comme on le voit dans le <a href="#table1">Tableau 1</a>, les
          information concernant le sujet comprennent des informations
          d'identification (le nom distinctif ou distinguished name - dn), ainsi que
          la clé publique. Il comporte aussi l'identification et la signature de
          l'autorité de certification qui a délivré le certificat, ainsi que la
          période de validité de ce dernier. Il peut aussi contenir des informations
          supplémentaires (ou extensions) telles que des informations de gestion
          destinées à l'autorité de certification, comme un numéro de série.</p>
      
          <h4><a name="table1" id="table1">Tableau 1: Information contenues dans un certificat</a></h4>
          
          <table>
          
          <tr><th>Sujet</th>
              <td>Nom distinctif, Clé publique</td></tr>
          <tr><th>Fournisseur</th>
              <td>Nom distinctif, Signature</td></tr>
          <tr><th>Période de validité</th>
              <td>Pas avant, Pas après</td></tr>
          <tr><th>Informations de gestion</th>
              <td>Version, Numéro de série</td></tr>
          <tr><th>Extensions</th>
              <td>Contraintes de base, Drapeaux Netscape, etc.</td></tr>
          </table>
          
      
          <p>Un nom distinctif sert à fournir une identité dans un contexte
          spécifique -- par exemple, un individu peut posséder un certificat
          personnel, et aussi un certificat en tant qu'employé. Les noms distinctifs
          doivent respecter le standard X509 [<a href="#X509">X509</a>], qui définit
          les champs, les noms de champs, et les abréviations utilisées pour faire
          référence aux champs (voir <a href="#table2">Tableau 2</a>).</p>
      
          <h4><a name="table2" id="table2">Tableau 2: Informations contenues dans le nom distinctif</a></h4>
          
          <table class="bordered">
          
          <tr><th>Champ du DN</th>
              <th>Abrév.</th>
              <th>Description</th>
              <th>Exemple</th></tr>
          <tr><td>Nom complet (Common Name)</td>
              <td>CN</td>
              <td>Nom certifié</td>
              <td>CN=Joe Average</td></tr>
          <tr><td>Organisation or Entreprise</td>
              <td>O</td>
              <td>Nom est associé à cette<br />organisation</td>
              <td>O=Snake Oil, Ltd.</td></tr>
          <tr><td>Unité organisationnelle (Organizational Unit)</td>
              <td>OU</td>
              <td>Nom est associé avec cette <br />unité organisationnelle,
      	par exemple un département</td>
              <td>OU=Research Institute</td></tr>
          <tr><td>Ville/Localisation</td>
              <td>L</td>
              <td>Nom est localisé dans cette ville</td>
              <td>L=Snake City</td></tr>
          <tr><td>Etat/Province</td>
              <td>ST</td>
              <td>Nom est localisé dans cet état/province</td>
              <td>ST=Desert</td></tr>
          <tr><td>Pays</td>
              <td>C</td>
              <td>Nom est localisé dans ce pays (code ISO)</td>
              <td>C=XZ</td></tr>
          </table>
          
      
          <p>Une autorité de certification peut définir une contrainte spécifiant
          quels champs du nom distinctif sont optionnels et lesquels sont
          obligatoires. Elle peut aussi imposer des contraintes sur le contenu des
          champs, ce que peuvent aussi faire les utilisateurs de certificats. Par
          exemple, un navigateur Netscape peut exiger, dans le cas d'un certificat
          de serveur, que le nom complet (Common Name) corresponde à un nom générique
          contenant le nom de domaine du serveur, comme
          <code>*.snakeoil.com</code>.</p>
      
          <p>Le format binaire d'un certificat est défini en utilisant la
          notation ASN.1 [<a href="#ASN1">ASN1</a>] [<a href="#PKCS">PKCS</a>].
          Cette notation definit la manière de spécifier les contenus, et les règles
          d'encodage définissent la manière dont ces information sont converties au
          format binaire. L'encodage binaire du certificat est défini par les Règles
          d'Encodage Distinctives (Distinguished Encoding Rules - DER), qui se basent
          d'une manière plus générale sur les Règles d'Encodage de Base (Basic
          Encoding Rules - BER). Pour les transmissions qui ne supportent pas le
          format binaire, ce dernier peut être converti au format ASCII en utilisant
          le codage Base64 [<a href="#MIME">MIME</a>]. Lorsqu'il est placé entre des
          délimiteurs de début et de fin (comme ci-dessous), on dit que le certificat
          est encodé au format PEM ("Privacy Enhanced Mail").</p>
      
          <div class="example"><h3>Exemple de certificat encodé au format PEM (snakeoil.crt)</h3><pre>-----BEGIN CERTIFICATE-----
      MIIC7jCCAlegAwIBAgIBATANBgkqhkiG9w0BAQQFADCBqTELMAkGA1UEBhMCWFkx
      FTATBgNVBAgTDFNuYWtlIERlc2VydDETMBEGA1UEBxMKU25ha2UgVG93bjEXMBUG
      A1UEChMOU25ha2UgT2lsLCBMdGQxHjAcBgNVBAsTFUNlcnRpZmljYXRlIEF1dGhv
      cml0eTEVMBMGA1UEAxMMU25ha2UgT2lsIENBMR4wHAYJKoZIhvcNAQkBFg9jYUBz
      bmFrZW9pbC5kb20wHhcNOTgxMDIxMDg1ODM2WhcNOTkxMDIxMDg1ODM2WjCBpzEL
      MAkGA1UEBhMCWFkxFTATBgNVBAgTDFNuYWtlIERlc2VydDETMBEGA1UEBxMKU25h
      a2UgVG93bjEXMBUGA1UEChMOU25ha2UgT2lsLCBMdGQxFzAVBgNVBAsTDldlYnNl
      cnZlciBUZWFtMRkwFwYDVQQDExB3d3cuc25ha2VvaWwuZG9tMR8wHQYJKoZIhvcN
      AQkBFhB3d3dAc25ha2VvaWwuZG9tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
      gQDH9Ge/s2zcH+da+rPTx/DPRp3xGjHZ4GG6pCmvADIEtBtKBFAcZ64n+Dy7Np8b
      vKR+yy5DGQiijsH1D/j8HlGE+q4TZ8OFk7BNBFazHxFbYI4OKMiCxdKzdif1yfaa
      lWoANFlAzlSdbxeGVHoT0K+gT5w3UxwZKv2DLbCTzLZyPwIDAQABoyYwJDAPBgNV
      HRMECDAGAQH/AgEAMBEGCWCGSAGG+EIBAQQEAwIAQDANBgkqhkiG9w0BAQQFAAOB
      gQAZUIHAL4D09oE6Lv2k56Gp38OBDuILvwLg1v1KL8mQR+KFjghCrtpqaztZqcDt
      2q2QoyulCgSzHbEGmi0EsdkPfg6mp0penssIFePYNI+/8u9HT4LuKMJX15hxBam7
      dUHzICxBVC1lnHyYGjDuAMhe396lYAn8bCld1/L4NMGBCQ==
      -----END CERTIFICATE-----</pre></div>
      
      
      <h3><a name="certificateauthorities" id="certificateauthorities">Autorités de certification</a></h3>
      
          <p>En vérifiant les informations contenues dans une demande de certificat
          avant de l'accorder, l'autorité de certification s'assure de l'identité du
          propriétaire de la clé privée issue de sa paire de clés. Par exemple, Si
          Alice demande un certificat personnel, l'autorité de certification doit
          d'abord s'assurer qu'elle correspond vraiment à la personne à laquelle
          la demande de certificat fait référence.</p>
      
          <h4><a name="certificatechains" id="certificatechains">Chaînes de certification</a></h4>
          
              <p>Une autorité de certification peut aussi émettre un certificat à
      	destination d'une
      	autre autorité de certification. Pour vérifier un certificat, Alice
      	peut être amenée à vérifier le certificat de l'émetteur pour chaque
      	autorité de certification parente, jusqu'à ce qu'elle en atteigne une
      	en qui elle a confiance. Elle peut aussi ne faire confiance qu'aux
      	certificats faisant l'objet d'une chaîne limitée d'émetteurs, afin
      	de réduire le risque de rencontrer un "mauvais" certificat dans la
      	chaîne.</p>
          
      
          <h4><a name="rootlevelca" id="rootlevelca">Création d'une autorité de certification racine</a></h4>
          
              <p>Comme indiqué plus haut, chaque certificat nécessite la validation
      	de l'identité du sujet par un émetteur de certificats
      	de niveau supérieur, et ceci en
      	remontant jusqu'à l'Autorité de Certification (CA) racine. Ceci pose un
      	problème : qui va se porter garant du certificat de l'autorité racine
      	qui ne possède pas d'émetteur de certificat ? C'est uniquement dans ce
      	cas que le certificat est auto-signé, l'émetteur du certificat et son
      	sujet étant confondus. Les navigateurs sont préconfigurés avec une
      	liste d'autorités de certification de confiance, mais il est important
      	d'être extrèmement prudent avant de faire confiance à un certificat
      	auto-signé. La large publication d'une clé publique par l'autorité
      	racine réduit cependant les risques encourus
      	en faisant confiance à cette clé --
      	si quelqu'un publiait une clé en se faisant passer pour l'autorité, il
      	serait vite démasqué.</p>
      
              <p>Quelques compagnies, comme <a href="http://www.thawte.com/">Thawte</a> et <a href="http://www.verisign.com/">VeriSign</a>,
      	se sont proclamées elles-mêmes Autorités de Certification. Ces
      	compagnies proposent les services suivant :</p>
      
              <ul>
              <li>Vérification des demandes de certificats</li>
              <li>Traitement des demandes de certificats</li>
              <li>Emission et gestion des certificats</li>
              </ul>
      
              <p>Vous pouvez aussi créer votre propre autorité de certification. Bien
      	que risqué dans l'environnement de l'Internet, ceci peut s'avérer utile
      	dans un Intranet, où l'organisme peut vérifier facilement les identités
      	des individus et des serveurs.</p>
          
      
          <h4><a name="certificatemanagement" id="certificatemanagement">Gestion des certificats</a></h4>
          
              <p>Constituer une autorité de certification représente une
      	responsabilité qui nécessite une solide infrastructure administrative,
      	technique et gestionnaire. Les autorités de certification ne se
      	contentent pas d'émettre des certificats, elles doivent aussi les gérer
      	-- à savoir elles déterminent leur durée de validité, elles les
      	renouvellent, et elles maintiennent des listes de certificats qui ont
      	été émis dans le passé mais ne sont plus valides (Listes de révocations
      	de certificats, ou CRLs).</p>
      
              <p>Par exemple, si Alice est titulaire d'un certificat en tant
      	qu'employée d'une compagnie, mais vient de quitter cette compagnie,
      	son certificat doit être révoqué. Comme les certificats ne sont émis
      	qu'après vérification de l'identité du sujet, et peuvent être envoyés
      	à tous ceux avec lesquels le sujet peut communiquer, il est impossible
      	de discerner à partir du seul certificat s'il a été révoqué. Pour
      	vérifier la validité d'un certificat, il est donc nécessaire de
      	contacter l'autorité de certification qui l'a émis afin de pouvoir
      	consulter ses listes de révocations de certificats -- ce qui n'est
      	en général pas une partie automatique du processus.</p>
      
              <div class="note"><h3>Note</h3>
              <p>Si votre autorité de certification ne fait pas partie de la liste
      	des autorités de confiance de votre navigateur, il faut enregistrer le
      	certificat de l'autorité de certification dans ce dernier, ce qui lui
      	permettra de valider les certificats de serveurs signés par cette
      	autorité de certification. Ceci peut être dangereux, car une fois le
      	certificat enregistré, le navigateur acceptera tous les certificats
      	signés par cette autorité de certification.</p>
              </div>
          
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ssl" id="ssl">Couche Points d'Accès Sécurisés - Secure Sockets Layer (SSL)</a></h2>
      
      <p>Le protocole Couche Points d'Accès Sécurisés est une couche protocolaire
      qui pourrait s'intercaler entre un protocole d'une couche réseau orientée
      connexion (comme TCP/IP) et une couche protocolaire d'application (comme HTTP).
      SSL fournit une communication sécurisée entre client et serveur en permettant
      l'authentification mutuelle, l'utilisation des signatures numériques pour la
      vérification de l'intégrité des données, et le chiffrement pour la
      confidentialité.</p>
      
      <p>Ce protocole est conçu pour supporter un grand choix d'algorithmes
      spécifiques utilisés pour la cryptographie, les empreintes et les signatures.
      Ceci permet la sélection d'un algorithme pour des serveurs spécifiques en
      respectant la légalité, les règles d'exportation ou autres contraintes, et
      permet aussi au protocole de tirer parti des nouveaux algorithmes. Ces choix
      font l'objet d'une négociation entre client et serveur lors de
      l'établissement de la session protocolaire.</p>
      
      <h3><a name="table4" id="table4">Tableau 4: Versions du protocole SSL</a></h3>
      
          <table class="bordered">
          
          <tr><th>Version</th>
              <th>Source</th>
              <th>Description</th>
          </tr>
          <tr><td>SSL v2.0</td>
              <td>Standard du fournisseur (de Netscape Corp.)</td>
              <td>Premier protocole SSL pour lequel il existe des implémentations</td>
          </tr>
          <tr><td>SSL v3.0</td>
              <td>Projet Internet arrivé à expiration (de Netscape Corp.) [<a href="#SSL3">SSL3</a>]</td>
              <td>Comporte des révisions permettant de prévenir certaines attaques de
      	sécurité spécifiques, ajout de chiffrements non RSA, et support des
      	chaînes de certification</td>
          </tr>
          <tr><td>TLS v1.0</td>
              <td>Standard proposé pour l'Internet (de l'IETF) [<a href="#TLS1">TLS1</a>]</td>
              <td>Révision de SSL 3.0 pour mettre à jour la couche MAC vers HMAC,
      	ajout du bourrage de bloc pour le chiffrement de bloc, standardisation
      	de l'ordonnancement des messages et plus de messages d'alerte.</td>
          </tr>
      	<tr><td>TLS v1.1</td>
              <td>Standard proposé pour l'Internet (de l'IETF) [<a href="#TLS11">TLS11</a>]</td>
              <td>Mise à jour de TLS 1.0 pour la protection contre les
      	attaques de type Cipher block chaining (CBC).</td>
          </tr>
          <tr><td>TLS v1.2</td>
              <td>Standard proposé pour l'Internet (de l'IETF) [<a href="#TLS12">TLS12</a>]</td>
              <td>Mise à jour de TLS 1.1 rendant les condensés MD5 obsolètes,
      	et introduisant une incompatibilité avec SSL ce qui interdit toute
      	négociation en vue d'une utilisation de SSLv2.</td>
          </tr>
          </table>
      
      
      <p>Il existe plusieurs versions du protocole SSL, comme le montre le
      <a href="#table4">Tableau 4</a>. Comme indiqué dans ce dernier, un des apports
      de SSL 3.0 est le support du chargement des chaînes de certification. Cette
      fonctionnalité permet à un serveur de passer au navigateur un certificat de
      serveur accompagné du certificat de l'émetteur. Le chargement de la
      chaîne permet aussi au navigateur de valider le certificat du serveur, même si
      les certificats de l'autorité de certification ne sont pas installés pour les
      émetteurs intermédiaires, car ils sont inclus dans la chaîne de certification.
      SSL 3.0 sert de base au standard du protocole Sécurité de la Couche Transport
      ou Transport Layer Security
      [<a href="#TLS1">TLS</a>], actuellement en développement au sein de
      l'Internet Engineering Task Force (IETF).</p>
      
      <h3><a name="session" id="session">Etablissement d'une session</a></h3>
      
          <p>La session SSL est établie en suivant une séquence d'échanges
          d'informations entre client et serveur, comme le montre la
          <a href="#figure1">Figure 1</a>. Cette séquence peut varier, selon que
          le serveur est configuré pour fournir un certificat de serveur ou
          réclame un certificat client. Bien que dans certains cas, des étapes
          d'échanges d'informations supplémentaires soient nécessaires pour la
          gestion des informations de chiffrement, cet article résume un scénario
          courant. Se reporter aux spécifications SSL pour avoir la liste de
          toutes les possibilités.</p>
      
          <div class="note"><h3>Note</h3>
          <p>Une fois la session SSL établie, elle peut être réutilisée. Ceci
          permet d'éviter la perte de performances due à la répétition des nombreuses
          étapes nécessaires à l'établissement d'une session. Pour parvenir à ceci,
          le serveur assigne un identifiant de session unique à chaque session SSL ;
          cet identifiant est mis en cache dans le serveur et le client peut
          l'utiliser pour des connexions ultérieures afin de réduire la durée des
          échanges d'informations (et ceci jusqu'à ce que l'identifiant de session
          arrive à expiration dans le cache du serveur).</p>
          </div>
      
          <p class="figure">
          <img src="../images/ssl_intro_fig1.gif" alt="" width="423" height="327" /><br />
          <a id="figure1" name="figure1"><dfn>Figure 1</dfn></a> : Séquence
          simplifiée d'échanges d'informations SSL</p>
      
          <p>Les éléments de la séquence d'échanges d'informations, tels qu'ils
          sont utilisés par le client et le serveur, sont énumérés ci-après :</p>
      
          <ol>
          <li>Négociation de la suite de chiffrement à utiliser durant le transfert des données</li>
          <li>Elaboration et échange d'une clé de session entre le client et le serveur</li>
          <li>Authentification éventuelle du serveur par le client</li>
          <li>Authentification éventuelle du client par le serveur</li>
          </ol>
      
          <p>La première étape, la négociation de la suite de chiffrement, permet au
          client et au serveur de choisir une suite de chiffrement qu'ils supportent
          tous les deux. La spécification du protocole SSL 3.0 définit 31 suites de
          chiffrement. Une suite de chiffrement se compose des éléments
          suivants :</p>
      
          <ul>
          <li>Méthode d'échange de la clé</li>
          <li>Chiffrement du transfert des données</li>
          <li>Empreinte du message servant à créer le code d'authentification du
          message (MAC)</li>
          </ul>
      
          <p>Ces trois éléments sont décrits dans les sections suivantes.</p>
      
      
      <h3><a name="keyexchange" id="keyexchange">Méthode d'échange de la clé</a></h3>
      
          <p>La méthode d'échange de la clé définit la manière
          dont la clé de chiffrement
          symétrique secrète et partagée utilisée pour le transfert des données de
          l'application sera acceptée par le client et le serveur. SSL 2.0 utilise
          l'échange de clé RSA seulement, tandis que SSL 3.0 supporte tout un choix
          d'algorithmes d'échange de clé incluant l'échange de clé RSA (quand les
          certificats sont utilisés), et l'échange de clés Diffie-Hellman (pour
          échanger des clés sans certificat, ou en l'absence de communication
          préalable entre le client et le serveur).</p>
      
          <p>Les signatures numériques constituent une variante dans le choix des
          méthodes d'échange de clé -- utiliser les signatures ou pas, et dans
          l'affirmative, quel genre de signatures utiliser. La signature à l'aide
          d'une clé privée fournit une protection contre une attaque
          "man-in-the-middle" au cours de laquelle
          l'échange d'informations destiné à générer la
          clé partagée peut être intercepté [<a href="#AC96">AC96</a>, p516].</p>
      
      
      <h3><a name="ciphertransfer" id="ciphertransfer">Chiffrement du transfert de données</a></h3>
      
          <p>Comme décrit plus haut, SSL utilise le chiffrement symétrique
          conventionnel pour chiffrer les messages au cours d'une session. Il existe
          neuf choix possibles pour le chiffrement, y compris l'option du transfert
          non chiffré :</p>
      
          <ul>
          <li>Pas de chiffrement</li>
          <li>Chiffrement en continu (Stream Ciphers)
              <ul>
              <li>RC4 avec clés de 40 bits</li>
              <li>RC4 avec clés de 128 bits</li>
              </ul></li>
          <li>Chiffrement par blocs CBC (CBC Block Ciphers)
              <ul><li>RC2 avec clé de 40 bits</li>
              <li>DES avec clé de 40 bits</li>
              <li>DES avec clé de 56 bits</li>
              <li>Triple-DES avec clé de 168 bits</li>
              <li>Idea (clé de 128 bits)</li>
              <li>Fortezza (clé de 96 bits)</li>
              </ul></li>
          </ul>
      
          <p>"CBC" signifie Cipher Block Chaining (Chaînage de blocs chiffrés),
          c'est à dire qu'une portion du bloc de texte chiffré précédent est utilisée
          pour le chiffrement du bloc courant. "DES" signifie Data Encryption
          Standard (Standard de Chiffrement des Données)
          [<a href="#AC96">AC96</a>, ch12], et possède de nombreuses variantes
          (telles que DES40 et 3DES_EDE). Parmi les algorithmes disponibles, "Idea"
          est actuellement un des meilleurs et des plus puissants sur le plan
          cryptographique, et "RC2" est un algorithme propriétaire de RSA DSI
          [<a href="#AC96">AC96</a>, ch13].</p>
      
      
      <h3><a name="digestfunction" id="digestfunction">Fonction de création d'empreinte</a></h3>
      
          <p>Le choix d'une fonction de création d'empreinte détermine la manière
          dont une empreinte est créée à partir d'une unité de données. SSL supporte
          les fonctions suivantes :</p>
      
          <ul>
          <li>Pas d'empreinte (choix Null)</li>
          <li>MD5, une empreinte de 128 bits</li>
          <li>Algorithme d'Empreinte Sécurisée (Secure Hash Algorithm - SHA-1), une
          empreinte de 160 bits</li>
          </ul>
      
          <p>On utilise l'empreinte de message pour créer un Code d'Authentification
          de Message (Message Authentication Code - MAC) qui est chiffré avec le
          message afin de vérifier son intégrité et de se protéger contre les
          attaques de type "rejeu".</p>
      
      
      <h3><a name="handshake" id="handshake">Protocole de la séquence d'échanges d'informations</a></h3>
      
          <p>La séquence d'échanges d'informations utilise trois protocoles :</p>
      
          <ul>
          <li>Le <dfn>Protocole d'échanges d'informations SSL</dfn> pour établir
          la session SSl entre le client et le serveur.</li>
          <li>Le <dfn>Protocole de spécification du chiffrement SSL</dfn> pour
          l'agrément effectif de la suite de chiffrement à utiliser
          pour la session.</li>
          <li>Le <dfn>Protocole d'alertes SSL</dfn> pour la transmission de
          messages d'erreur SSL entre le client et le serveur.</li>
          </ul>
      
          <p>Ces protocoles, ainsi que les données du protocole de l'application,
          sont encapsulés dans le <dfn>Protocole d'enregistrement SSL
          (SSL Record Protocol)</dfn>, comme
          le montre la <a href="#figure2">Figure 2</a>. Un protocole encapsulé est
          tranféré en tant que données par le protocole de la couche de niveau
          inférieur, qui ne se préoccupe pas du contenu des données. Le protocole
          encapsulé n'a aucune connaissance du protocole sous-jacent.</p>
      
          <p class="figure">
          <img src="../images/ssl_intro_fig2.gif" alt="" width="428" height="217" /><br />
          <a id="figure2" name="figure2"><dfn>Figure 2</dfn></a>:
          Pile du protocole SSL</p>
      
          <p>L'encapsulation des protocoles de contrôle SSL dans le protocole
          d'enregistrement signifie que si une session active est renégociée, les
          protocoles de contrôle seront transmis de manière sécurisée. S'il n'y
          avait pas de session préalable, la suite de chiffrement Null est utilisée,
          ce qui signifie que les messages ne seront pas chiffrés et ne possèderont
          pas d'empreinte d'intégrité, jusqu'à ce que la session ait été établie.</p>
      
      
      <h3><a name="datatransfer" id="datatransfer">Transmission des données</a></h3>
      
          <p>Le protocole d'enregistrement SSL, comme le montre la
          <a href="#figure3">Figure 3</a>, est utilisé pour transmettre les données
          de l'application et les données de contrôle SSL entre le client et le
          serveur, les données étant nécessairement fragmentées en éléments plus
          petits, ou plusieurs messages de données avec protocole de niveau
          supérieur pouvant être combinés en un seul élément. Ce protocole peut
          joindre des signatures d'empreintes, compresser et chiffrer ces éléments
          avant de les transmettre en utilisant le protocole fiable de transport
          sous-jacent (Note : actuellement, aucune implémentation majeure de SSL
          n'inclut le support de la compression).</p>
      
          <p class="figure">
          <img src="../images/ssl_intro_fig3.gif" alt="" width="423" height="323" /><br />
          <a id="figure3" name="figure3"><dfn>Figure 3</dfn></a>:
          Protocole d'enregistrement SSL</p>
      
      
      <h3><a name="securehttp" id="securehttp">Sécurisation des communications HTTP</a></h3>
      
          <p>Une des utilisations courantes de SSL est la sécurisation des
          communication HTTP sur le Web entre un navigateur et un serveur web. Ceci
          n'exclut pas l'utilisation de HTTP non sécurisé - la version sécurisée
          (appelée HTTPS) est identique à du vrai HTTP sur SSL,
          mais utilise le préfixe
          d'URL <code>https</code> au lieu de <code>http</code>, et un port
          de serveur différent (par défaut le port 443).
          Ceci constitue pour une large part
          ce qu'apporte <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> au serveur web Apache.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="references" id="references">Références</a></h2>
      
      <dl>
      <dt><a id="AC96" name="AC96">[AC96]</a></dt>
      <dd>Bruce Schneier, <q>Applied Cryptography</q>, 2nd Edition, Wiley,
      1996. Voir <a href="http://www.counterpane.com/">http://www.counterpane.com/</a> pour diverses autres productions de Bruce
      Schneier.</dd>
      
      <dt><a id="ASN1" name="ASN1">[ASN1]</a></dt>
      <dd>ITU-T Recommendation X.208, <q>Specification of Abstract Syntax Notation
      One (ASN.1)</q>, dernière mise à jour en 2008. Voir <a href="http://www.itu.int/ITU-T/asn1/">http://www.itu.int/ITU-T/asn1/</a>.
      </dd>
      
      <dt><a id="X509" name="X509">[X509]</a></dt>
      <dd>ITU-T Recommendation X.509, <q>The Directory - Authentication
      Framework</q>. A titre de référence, voir <a href="http://en.wikipedia.org/wiki/X.509">http://en.wikipedia.org/wiki/X.509</a>.
      </dd>
      
      <dt><a id="PKCS" name="PKCS">[PKCS]</a></dt>
      <dd><q>Public Key Cryptography Standards (PKCS)</q>,
      RSA Laboratories Technical Notes, Voir <a href="http://www.rsasecurity.com/rsalabs/pkcs/">http://www.rsasecurity.com/rsalabs/pkcs/</a>.</dd>
      
      <dt><a id="MIME" name="MIME">[MIME]</a></dt>
      <dd>N. Freed, N. Borenstein, <q>Multipurpose Internet Mail Extensions
      (MIME) Part One: Format of Internet Message Bodies</q>, RFC2045.
      Voir par exemple <a href="http://tools.ietf.org/html/rfc2045">http://tools.ietf.org/html/rfc2045</a>.</dd>
      
      <dt><a id="SSL3" name="SSL3">[SSL3]</a></dt>
      <dd>Alan O. Freier, Philip Karlton, Paul C. Kocher, <q>The SSL Protocol
      Version 3.0</q>, 1996. Voir <a href="http://www.netscape.com/eng/ssl3/draft302.txt">http://www.netscape.com/eng/ssl3/draft302.txt</a>.</dd>
      
      <dt><a id="TLS1" name="TLS1">[TLS1]</a></dt>
      <dd>Tim Dierks, Christopher Allen, <q>The TLS Protocol Version 1.0</q>,
      1999. Voir <a href="http://ietf.org/rfc/rfc2246.txt">http://ietf.org/rfc/rfc2246.txt</a>.</dd>
      
      <dt><a id="TLS11" name="TLS11">[TLS11]</a></dt>
      <dd><q>Le protocole TLS Version 1.1</q>,
      2006. Voir <a href="http://tools.ietf.org/html/rfc4346">http://tools.ietf.org/html/rfc4346</a>.</dd>
      
      <dt><a id="TLS12" name="TLS12">[TLS12]</a></dt>
      <dd><q>Le protocole TLS Version 1.2</q>,
      2008. Voir <a href="http://tools.ietf.org/html/rfc5246">http://tools.ietf.org/html/rfc5246</a>.</dd>
      </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/ssl/ssl_intro.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_intro.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/ssl_intro.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/ssl/ssl_intro.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/ssl_intro.html.en������������������������������������������������������0000644�0000000�0000050�00000105406�13412755316�017562� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>SSL/TLS Strong Encryption: An Introduction - Apache HTTP Server Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
      <p class="apache">Apache HTTP Server Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">SSL/TLS</a></div><div id="page-content"><div id="preamble"><h1>SSL/TLS Strong Encryption: An Introduction</h1>
      <div class="toplang">
      <p><span>Available Languages: </span><a href="../en/ssl/ssl_intro.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_intro.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/ssl_intro.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a></p>
      </div>
      
      
      <p>As an introduction this chapter is aimed at readers who are familiar
      with the Web, HTTP, and Apache, but are not security experts. It is not
      intended to be a definitive guide to the SSL protocol, nor does it discuss
      specific techniques for managing certificates in an organization, or the
      important legal issues of patents and import and export restrictions.
      Rather, it is intended to provide a common background to <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> users by pulling together various concepts, definitions,
      and examples as a starting point for further exploration.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#cryptographictech">Cryptographic Techniques</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#certificates">Certificates</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#ssl">Secure Sockets Layer (SSL)</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#references">References</a></li>
      </ul><h3>See also</h3><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="cryptographictech" id="cryptographictech">Cryptographic Techniques</a></h2>
      
      <p>Understanding SSL requires an understanding of cryptographic
      algorithms, message digest functions (aka. one-way or hash functions), and
      digital signatures. These techniques are the subject of entire books (see
      for instance [<a href="#AC96">AC96</a>]) and provide the basis for privacy,
      integrity, and authentication.</p>
      
      <h3><a name="cryptographicalgo" id="cryptographicalgo">Cryptographic Algorithms</a></h3>
      
          <p>Suppose Alice wants to send a message to her bank to transfer some
          money. Alice would like the message to be private, since it will
          include information such as her account number and transfer amount. One
          solution is to use a cryptographic algorithm, a technique that would
          transform her message into an encrypted form, unreadable until it is
          decrypted. Once in this form, the message can only be
          decrypted by using a secret key. Without the key the message is useless:
          good cryptographic algorithms make it so difficult
          for intruders to decode the original text that it isn't worth their
          effort.</p>
      
          <p>There are two categories of cryptographic algorithms: conventional
          and public key.</p>
      
          <dl>
          <dt>Conventional cryptography</dt>
          <dd>also known as symmetric cryptography, requires the sender and
          receiver to share a key: a secret piece of information that may be
          used to encrypt or decrypt a message. As long as this key is kept
          secret, nobody other than the sender or recipient can read the message.
          If Alice and the bank know a secret key, then they can send each other
          private messages. The task of sharing a key between sender and recipient
          before communicating, while also keeping it secret from others, can be
          problematic.</dd>
      
          <dt>Public key cryptography</dt>
          <dd>also known as asymmetric cryptography, solves the key exchange
          problem by defining an algorithm which uses two keys, each of which
          may be used to encrypt a message. If one key is used to encrypt a
          message then the other must be used to decrypt it. This makes it
          possible to receive secure messages by simply publishing one key
          (the public key) and keeping the other secret (the private key).</dd>
          </dl>
      
          <p>Anyone can encrypt a message using the public key, but only the
          owner of the private key will be able to read it. In this way, Alice
          can send private messages to the owner of a key-pair (the bank), by
          encrypting them using their public key. Only the bank will be able to
          decrypt them.</p>
      
      
      <h3><a name="messagedigests" id="messagedigests">Message Digests</a></h3>
      
          <p>Although Alice may encrypt her message to make it private, there
          is still a concern that someone might modify her original message or
          substitute it with a different one, in order to transfer the money
          to themselves, for instance. One way of guaranteeing the integrity
          of Alice's message is for her to create a concise summary of her
          message and send this to the bank as well. Upon receipt of the message,
          the bank creates its own summary and compares it with the one Alice
          sent. If the summaries are the same then the message has been received
          intact.</p>
      
          <p>A summary such as this is called a <dfn>message digest</dfn>, <em>one-way
          function</em> or <em>hash function</em>. Message digests are used to create
          a short, fixed-length representation of a longer, variable-length message.
          Digest algorithms are designed to produce a unique digest for each
          message. Message digests are designed to make it impractically difficult
          to determine the message from the digest and (in theory) impossible to
          find two different messages which create the same digest -- thus
          eliminating the possibility of substituting one message for another while
          maintaining the same digest.</p>
      
          <p>Another challenge that Alice faces is finding a way to send the digest
          to the bank securely; if the digest is not sent securely, its integrity may
          be compromised and with it the possibility for the bank to determine the
          integrity of the original message. Only if the digest is sent securely can
          the integrity of the associated message be determined.</p>
      
          <p>One way to send the digest securely is to include it in a digital
          signature.</p>
      
      
      <h3><a name="digitalsignatures" id="digitalsignatures">Digital Signatures</a></h3>
      <p>When Alice sends a message to the bank, the bank needs to ensure that the
      message is really from her, so an intruder cannot request a transaction
      involving her account. A <em>digital signature</em>, created by Alice and
      included with the message, serves this purpose.</p>
      
      <p>Digital signatures are created by encrypting a digest of the message and
      other information (such as a sequence number) with the sender's private key.
      Though anyone can <em>decrypt</em> the signature using the public key, only the
      sender knows the private key. This means that only the sender can have signed
      the message. Including the digest in the signature means the signature is only
      good for that message; it also ensures the integrity of the message since no one
      can change the digest and still sign it.</p>
      <p>To guard against interception and reuse of the signature by an intruder at a
      later date, the signature contains a unique sequence number. This protects
      the bank from a fraudulent claim from Alice that she did not send the message
      -- only she could have signed it (non-repudiation).</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="certificates" id="certificates">Certificates</a></h2>
      
      <p>Although Alice could have sent a private message to the bank, signed
      it and ensured the integrity of the message, she still needs to be sure
      that she is really communicating with the bank. This means that she needs
      to be sure that the public key she is using is part of the bank's key-pair,
      and not an intruder's. Similarly, the bank needs to verify that the message
      signature really was signed by the private key that belongs to Alice.</p>
      
      <p>If each party has a certificate which validates the other's identity,
      confirms the public key and is signed by a trusted agency, then both
      can be assured that they are communicating with whom they think they are.
      Such a trusted agency is called a <em>Certificate Authority</em> and
      certificates are used for authentication.</p>
      
      <h3><a name="certificatecontents" id="certificatecontents">Certificate Contents</a></h3>
      
          <p>A certificate associates a public key with the real identity of
          an individual, server, or other entity, known as the subject. As
          shown in <a href="#table1">Table 1</a>, information about the subject
          includes identifying information (the distinguished name) and the
          public key. It also includes the identification and signature of the
          Certificate Authority that issued the certificate and the period of
          time during which the certificate is valid. It may have additional
          information (or extensions) as well as administrative information
          for the Certificate Authority's use, such as a serial number.</p>
      
          <h4><a name="table1" id="table1">Table 1: Certificate Information</a></h4>
          
          <table>
          
          <tr><th>Subject</th>
              <td>Distinguished Name, Public Key</td></tr>
          <tr><th>Issuer</th>
              <td>Distinguished Name, Signature</td></tr>
          <tr><th>Period of Validity</th>
              <td>Not Before Date, Not After Date</td></tr>
          <tr><th>Administrative Information</th>
              <td>Version, Serial Number</td></tr>
          <tr><th>Extended Information</th>
              <td>Basic Constraints, Netscape Flags, etc.</td></tr>
          </table>
          
      
          <p>A distinguished name is used to provide an identity in a specific
          context -- for instance, an individual might have a personal
          certificate as well as one for their identity as an employee.
          Distinguished names are defined by the X.509 standard [<a href="#X509">X509</a>], which defines the fields, field names and
          abbreviations used to refer to the fields (see <a href="#table2">Table
          2</a>).</p>
      
          <h4><a name="table2" id="table2">Table 2: Distinguished Name Information</a></h4>
          
          <table class="bordered">
          
          <tr><th>DN Field</th>
              <th>Abbrev.</th>
              <th>Description</th>
              <th>Example</th></tr>
          <tr><td>Common Name</td>
              <td>CN</td>
              <td>Name being certified</td>
              <td>CN=Joe Average</td></tr>
          <tr><td>Organization or Company</td>
              <td>O</td>
              <td>Name is associated with this<br />organization</td>
              <td>O=Snake Oil, Ltd.</td></tr>
          <tr><td>Organizational Unit</td>
              <td>OU</td>
              <td>Name is associated with this <br />organization unit, such
              as a department</td>
              <td>OU=Research Institute</td></tr>
          <tr><td>City/Locality</td>
              <td>L</td>
              <td>Name is located in this City</td>
              <td>L=Snake City</td></tr>
          <tr><td>State/Province</td>
              <td>ST</td>
              <td>Name is located in this State/Province</td>
              <td>ST=Desert</td></tr>
          <tr><td>Country</td>
              <td>C</td>
              <td>Name is located in this Country (ISO code)</td>
              <td>C=XZ</td></tr>
          </table>
          
      
          <p>A Certificate Authority may define a policy specifying which
          distinguished field names are optional and which are required. It
          may also place requirements upon the field contents, as may users of
          certificates. For example, a Netscape browser requires that the
          Common Name for a certificate representing a server matches a wildcard
          pattern for the domain name of that server, such
          as <code>*.snakeoil.com</code>.</p>
      
          <p>The binary format of a certificate is defined using the ASN.1
          notation [<a href="#ASN1">ASN1</a>] [<a href="#PKCS">PKCS</a>]. This
          notation defines how to specify the contents and encoding rules
          define how this information is translated into binary form. The binary
          encoding of the certificate is defined using Distinguished Encoding
          Rules (DER), which are based on the more general Basic Encoding Rules
          (BER). For those transmissions which cannot handle binary, the binary
          form may be translated into an ASCII form by using Base64 encoding
          [<a href="#MIME">MIME</a>]. When placed between begin and end delimiter
          lines (as below), this encoded version is called a PEM ("Privacy Enhanced
          Mail") encoded certificate.</p>
      
          <div class="example"><h3>Example of a PEM-encoded certificate (snakeoil.crt)</h3><pre>-----BEGIN CERTIFICATE-----
      MIIC7jCCAlegAwIBAgIBATANBgkqhkiG9w0BAQQFADCBqTELMAkGA1UEBhMCWFkx
      FTATBgNVBAgTDFNuYWtlIERlc2VydDETMBEGA1UEBxMKU25ha2UgVG93bjEXMBUG
      A1UEChMOU25ha2UgT2lsLCBMdGQxHjAcBgNVBAsTFUNlcnRpZmljYXRlIEF1dGhv
      cml0eTEVMBMGA1UEAxMMU25ha2UgT2lsIENBMR4wHAYJKoZIhvcNAQkBFg9jYUBz
      bmFrZW9pbC5kb20wHhcNOTgxMDIxMDg1ODM2WhcNOTkxMDIxMDg1ODM2WjCBpzEL
      MAkGA1UEBhMCWFkxFTATBgNVBAgTDFNuYWtlIERlc2VydDETMBEGA1UEBxMKU25h
      a2UgVG93bjEXMBUGA1UEChMOU25ha2UgT2lsLCBMdGQxFzAVBgNVBAsTDldlYnNl
      cnZlciBUZWFtMRkwFwYDVQQDExB3d3cuc25ha2VvaWwuZG9tMR8wHQYJKoZIhvcN
      AQkBFhB3d3dAc25ha2VvaWwuZG9tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
      gQDH9Ge/s2zcH+da+rPTx/DPRp3xGjHZ4GG6pCmvADIEtBtKBFAcZ64n+Dy7Np8b
      vKR+yy5DGQiijsH1D/j8HlGE+q4TZ8OFk7BNBFazHxFbYI4OKMiCxdKzdif1yfaa
      lWoANFlAzlSdbxeGVHoT0K+gT5w3UxwZKv2DLbCTzLZyPwIDAQABoyYwJDAPBgNV
      HRMECDAGAQH/AgEAMBEGCWCGSAGG+EIBAQQEAwIAQDANBgkqhkiG9w0BAQQFAAOB
      gQAZUIHAL4D09oE6Lv2k56Gp38OBDuILvwLg1v1KL8mQR+KFjghCrtpqaztZqcDt
      2q2QoyulCgSzHbEGmi0EsdkPfg6mp0penssIFePYNI+/8u9HT4LuKMJX15hxBam7
      dUHzICxBVC1lnHyYGjDuAMhe396lYAn8bCld1/L4NMGBCQ==
      -----END CERTIFICATE-----</pre></div>
      
      
      <h3><a name="certificateauthorities" id="certificateauthorities">Certificate Authorities</a></h3>
      
          <p>By verifying the information in a certificate request
          before granting the certificate, the Certificate Authority assures
          itself of the identity of the private key owner of a key-pair.
          For instance, if Alice requests a personal certificate, the
          Certificate Authority must first make sure that Alice really is the
          person the certificate request claims she is.</p>
      
          <h4><a name="certificatechains" id="certificatechains">Certificate Chains</a></h4>
          
              <p>A Certificate Authority may also issue a certificate for
              another Certificate Authority. When examining a certificate,
              Alice may need to examine the certificate of the issuer, for each
              parent Certificate Authority, until reaching one which she has
              confidence in. She may decide to trust only certificates with a
              limited chain of issuers, to reduce her risk of a "bad" certificate
              in the chain.</p>
          
      
          <h4><a name="rootlevelca" id="rootlevelca">Creating a Root-Level CA</a></h4>
          
              <p>As noted earlier, each certificate requires an issuer to assert
              the validity of the identity of the certificate subject, up to
              the top-level Certificate Authority (CA). This presents a problem:
              who can vouch for the certificate of the top-level
              authority, which has no issuer? In this unique case, the
              certificate is "self-signed", so the issuer of the certificate is
              the same as the subject. Browsers are preconfigured to trust well-known
              certificate authorities, but it is important to exercise extra care in
              trusting a self-signed certificate. The wide publication of a
              public key by the root authority reduces the risk in trusting this
              key -- it would be obvious if someone else publicized a key
              claiming to be the authority.</p>
      
              <p>A number of companies, such as <a href="http://www.thawte.com/">Thawte</a> and <a href="http://www.verisign.com/">VeriSign</a>
              have established themselves as Certificate Authorities. These
              companies provide the following services:</p>
      
              <ul>
              <li>Verifying certificate requests</li>
              <li>Processing certificate requests</li>
              <li>Issuing and managing certificates</li>
              </ul>
      
              <p>It is also possible to create your own Certificate Authority.
              Although risky in the Internet environment, it may be useful
              within an Intranet where the organization can easily verify the
              identities of individuals and servers.</p>
          
      
          <h4><a name="certificatemanagement" id="certificatemanagement">Certificate Management</a></h4>
          
              <p>Establishing a Certificate Authority is a responsibility which
              requires a solid administrative, technical and management
              framework. Certificate Authorities not only issue certificates,
              they also manage them -- that is, they determine for how long
              certificates remain valid, they renew them and keep lists of
              certificates that were issued in the past but are no longer valid
              (Certificate Revocation Lists, or CRLs).</p>
      
              <p>For example, if Alice is entitled to a certificate as an
              employee of a company but has now left
              that company, her certificate may need to be revoked.
              Because certificates are only issued after the subject's identity has
              been verified and can then be passed around to all those with whom
              the subject may communicate, it is impossible to tell from the
              certificate alone that it has been revoked.
              Therefore when examining certificates for validity
              it is necessary to contact the issuing Certificate Authority to
              check CRLs -- this is usually not an automated part of the process.</p>
      
              <div class="note"><h3>Note</h3>
              <p>If you use a Certificate Authority that browsers are not configured
              to trust by default, it is necessary to load the Certificate
              Authority certificate into the browser, enabling the browser to
              validate server certificates signed by that Certificate Authority.
              Doing so may be dangerous, since once loaded, the browser will
              accept all certificates signed by that Certificate Authority.</p>
              </div>
          
      
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="ssl" id="ssl">Secure Sockets Layer (SSL)</a></h2>
      
      <p>The Secure Sockets Layer protocol is a protocol layer which may be
      placed between a reliable connection-oriented network layer protocol
      (e.g. TCP/IP) and the application protocol layer (e.g. HTTP). SSL provides
      for secure communication between client and server by allowing mutual
      authentication, the use of digital signatures for integrity and encryption
      for privacy.</p>
      
      <p>The protocol is designed to support a range of choices for specific
      algorithms used for cryptography, digests and signatures. This allows
      algorithm selection for specific servers to be made based on legal, export
      or other concerns and also enables the protocol to take advantage of new
      algorithms. Choices are negotiated between client and server when
      establishing a protocol session.</p>
      
      <h3><a name="table4" id="table4">Table 4: Versions of the SSL protocol</a></h3>
      
          <table class="bordered">
          
          <tr><th>Version</th>
              <th>Source</th>
              <th>Description</th>
          </tr>
          <tr><td>SSL v2.0</td>
              <td>Vendor Standard (from Netscape Corp.)</td>
              <td>First SSL protocol for which implementations exist</td>
          </tr>
          <tr><td>SSL v3.0</td>
              <td>Expired Internet Draft (from Netscape Corp.) [<a href="#SSL3">SSL3</a>]</td>
              <td>Revisions to prevent specific security attacks, add non-RSA
              ciphers and support for certificate chains</td>
          </tr>
          <tr><td>TLS v1.0</td>
              <td>Proposed Internet Standard (from IETF) [<a href="#TLS1">TLS1</a>]</td>
              <td>Revision of SSL 3.0 to update the MAC layer to HMAC, add block
              padding for block ciphers, message order standardization and more
              alert messages.</td>
          </tr>
          <tr><td>TLS v1.1</td>
              <td>Proposed Internet Standard (from IETF) [<a href="#TLS11">TLS11</a>]</td>
              <td>Update of TLS 1.0 to add protection against Cipher block chaining
              (CBC) attacks.</td>
          </tr>
          <tr><td>TLS v1.2</td>
              <td>Proposed Internet Standard (from IETF) [<a href="#TLS12">TLS12</a>]</td>
              <td>Update of TLS 1.1 deprecating MD5 as hash, and adding incompatibility
              to SSL so it will never negotiate the use of SSLv2.</td>
          </tr>
          </table>
      
      
      <p>There are a number of versions of the SSL protocol, as shown in
      <a href="#table4">Table 4</a>. As noted there, one of the benefits in
      SSL 3.0 is that it adds support of certificate chain loading. This feature
      allows a server to pass a server certificate along with issuer certificates
      to the browser. Chain loading also permits the browser to validate the
      server certificate, even if Certificate Authority certificates are not
      installed for the intermediate issuers, since they are included in the
      certificate chain. SSL 3.0 is the basis for the Transport Layer Security
      [<a href="#TLS1">TLS</a>] protocol standard, currently in development by
      the Internet Engineering Task Force (IETF).</p>
      
      <h3><a name="session" id="session">Establishing a Session</a></h3>
      
          <p>The SSL session is established by following a handshake sequence
          between client and server, as shown in <a href="#figure1">Figure 1</a>. This sequence may vary, depending on whether the server
          is configured to provide a server certificate or request a client
          certificate. Although cases exist where additional handshake steps
          are required for management of cipher information, this article
          summarizes one common scenario. See the SSL specification for the full
          range of possibilities.</p>
      
          <div class="note"><h3>Note</h3>
          <p>Once an SSL session has been established, it may be reused. This
          avoids the performance penalty of repeating the many steps needed
          to start a session. To do this, the server assigns each SSL session a
          unique session identifier which is cached in the server and which the
          client can use in future connections to reduce the handshake time
          (until the session identifier expires from the cache of the server).</p>
          </div>
      
          <p class="figure">
          <img src="../images/ssl_intro_fig1.gif" alt="" width="423" height="327" /><br />
          <a id="figure1" name="figure1"><dfn>Figure 1</dfn></a>: Simplified SSL
          Handshake Sequence</p>
      
          <p>The elements of the handshake sequence, as used by the client and
          server, are listed below:</p>
      
          <ol>
          <li>Negotiate the Cipher Suite to be used during data transfer</li>
          <li>Establish and share a session key between client and server</li>
          <li>Optionally authenticate the server to the client</li>
          <li>Optionally authenticate the client to the server</li>
          </ol>
      
          <p>The first step, Cipher Suite Negotiation, allows the client and
          server to choose a Cipher Suite supported by both of them. The SSL3.0
          protocol specification defines 31 Cipher Suites. A Cipher Suite is
          defined by the following components:</p>
      
          <ul>
          <li>Key Exchange Method</li>
          <li>Cipher for Data Transfer</li>
          <li>Message Digest for creating the Message Authentication Code (MAC)</li>
          </ul>
      
          <p>These three elements are described in the sections that follow.</p>
      
      
      <h3><a name="keyexchange" id="keyexchange">Key Exchange Method</a></h3>
      
          <p>The key exchange method defines how the shared secret symmetric
          cryptography key used for application data transfer will be agreed
          upon by client and server. SSL 2.0 uses RSA key exchange only, while
          SSL 3.0 supports a choice of key exchange algorithms including
          RSA key exchange (when certificates are used), and Diffie-Hellman key
          exchange (for exchanging keys without certificates, or without prior
          communication between client and server).</p>
      
          <p>One variable in the choice of key exchange methods is digital
          signatures -- whether or not to use them, and if so, what kind of
          signatures to use. Signing with a private key provides protection
          against a man-in-the-middle-attack during the information exchange
          used to generating the shared key [<a href="#AC96">AC96</a>, p516].</p>
      
      
      <h3><a name="ciphertransfer" id="ciphertransfer">Cipher for Data Transfer</a></h3>
      
          <p>SSL uses conventional symmetric cryptography, as described earlier,
          for encrypting messages in a session.
          There are nine choices of how to encrypt, including the option not to
          encrypt:</p>
      
          <ul>
          <li>No encryption</li>
          <li>Stream Ciphers
              <ul>
              <li>RC4 with 40-bit keys</li>
              <li>RC4 with 128-bit keys</li>
              </ul></li>
          <li>CBC Block Ciphers
              <ul><li>RC2 with 40 bit key</li>
              <li>DES with 40 bit key</li>
              <li>DES with 56 bit key</li>
              <li>Triple-DES with 168 bit key</li>
              <li>Idea (128 bit key)</li>
              <li>Fortezza (96 bit key)</li>
              </ul></li>
          </ul>
      
          <p>"CBC" refers to Cipher Block Chaining, which means that a
          portion of the previously encrypted cipher text is used in the
          encryption of the current block. "DES" refers to the Data Encryption
          Standard [<a href="#AC96">AC96</a>, ch12], which has a number of
          variants (including DES40 and 3DES_EDE). "Idea" is currently one of
          the best and cryptographically strongest algorithms available,
          and "RC2" is a proprietary algorithm from RSA DSI [<a href="#AC96">AC96</a>, ch13].</p>
      
      
      <h3><a name="digestfunction" id="digestfunction">Digest Function</a></h3>
      
          <p>The choice of digest function determines how a digest is created
          from a record unit. SSL supports the following:</p>
      
          <ul>
          <li>No digest (Null choice)</li>
          <li>MD5, a 128-bit hash</li>
          <li>Secure Hash Algorithm (SHA-1), a 160-bit hash</li>
          </ul>
      
          <p>The message digest is used to create a Message Authentication Code
          (MAC) which is encrypted with the message to verify integrity and to
          protect against replay attacks.</p>
      
      
      <h3><a name="handshake" id="handshake">Handshake Sequence Protocol</a></h3>
      
          <p>The handshake sequence uses three protocols:</p>
      
          <ul>
          <li>The <dfn>SSL Handshake Protocol</dfn>
          for performing the client and server SSL session establishment.</li>
          <li>The <dfn>SSL Change Cipher Spec Protocol</dfn> for actually
          establishing agreement on the Cipher Suite for the session.</li>
          <li>The <dfn>SSL Alert Protocol</dfn> for conveying SSL error
          messages between client and server.</li>
          </ul>
      
          <p>These protocols, as well as application protocol data, are
          encapsulated in the <dfn>SSL Record Protocol</dfn>, as shown in
          <a href="#figure2">Figure 2</a>. An encapsulated protocol is
          transferred as data by the lower layer protocol, which does not
          examine the data. The encapsulated protocol has no knowledge of the
          underlying protocol.</p>
      
          <p class="figure">
          <img src="../images/ssl_intro_fig2.gif" alt="" width="428" height="217" /><br />
          <a id="figure2" name="figure2"><dfn>Figure 2</dfn></a>: SSL Protocol Stack
          </p>
      
          <p>The encapsulation of SSL control protocols by the record protocol
          means that if an active session is renegotiated the control protocols
          will be transmitted securely. If there was no previous session,
          the Null cipher suite is used, which means there will be no encryption and
          messages will have no integrity digests, until the session has been
          established.</p>
      
      
      <h3><a name="datatransfer" id="datatransfer">Data Transfer</a></h3>
      
          <p>The SSL Record Protocol, shown in <a href="#figure3">Figure 3</a>,
          is used to transfer application and SSL Control data between the
          client and server, where necessary fragmenting this data into smaller units,
          or combining multiple higher level protocol data messages into single
          units. It may compress, attach digest signatures, and encrypt these
          units before transmitting them using the underlying reliable transport
          protocol (Note: currently, no major SSL implementations include support
          for compression).</p>
      
          <p class="figure">
          <img src="../images/ssl_intro_fig3.gif" alt="" width="423" height="323" /><br />
          <a id="figure3" name="figure3"><dfn>Figure 3</dfn></a>: SSL Record Protocol
          </p>
      
      
      <h3><a name="securehttp" id="securehttp">Securing HTTP Communication</a></h3>
      
          <p>One common use of SSL is to secure Web HTTP communication between
          a browser and a webserver. This does not preclude the use of
          non-secured HTTP - the secure version (called HTTPS) is the same as
          plain HTTP over SSL, but uses the URL scheme <code>https</code>
          rather than <code>http</code>, and a different server port (by default,
          port 443). This functionality is a large part of what <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> provides for the Apache webserver.</p>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="references" id="references">References</a></h2>
      
      <dl>
      <dt><a id="AC96" name="AC96">[AC96]</a></dt>
      <dd>Bruce Schneier, <q>Applied Cryptography</q>, 2nd Edition, Wiley,
      1996. See <a href="http://www.counterpane.com/">http://www.counterpane.com/</a> for various other materials by Bruce
      Schneier.</dd>
      
      <dt><a id="ASN1" name="ASN1">[ASN1]</a></dt>
      <dd>ITU-T Recommendation X.208, <q>Specification of Abstract Syntax Notation
      One (ASN.1)</q>, last updated 2008. See <a href="http://www.itu.int/ITU-T/asn1/">http://www.itu.int/ITU-T/asn1/</a>.
      </dd>
      
      <dt><a id="X509" name="X509">[X509]</a></dt>
      <dd>ITU-T Recommendation X.509, <q>The Directory - Authentication
      Framework</q>. For references, see <a href="http://en.wikipedia.org/wiki/X.509">http://en.wikipedia.org/wiki/X.509</a>.
      </dd>
      
      <dt><a id="PKCS" name="PKCS">[PKCS]</a></dt>
      <dd><q>Public Key Cryptography Standards (PKCS)</q>,
      RSA Laboratories Technical Notes, See <a href="http://www.rsasecurity.com/rsalabs/pkcs/">http://www.rsasecurity.com/rsalabs/pkcs/</a>.</dd>
      
      <dt><a id="MIME" name="MIME">[MIME]</a></dt>
      <dd>N. Freed, N. Borenstein, <q>Multipurpose Internet Mail Extensions
      (MIME) Part One: Format of Internet Message Bodies</q>, RFC2045.
      See for instance <a href="http://tools.ietf.org/html/rfc2045">http://tools.ietf.org/html/rfc2045</a>.</dd>
      
      <dt><a id="SSL3" name="SSL3">[SSL3]</a></dt>
      <dd>Alan O. Freier, Philip Karlton, Paul C. Kocher, <q>The SSL Protocol
      Version 3.0</q>, 1996. See <a href="http://www.netscape.com/eng/ssl3/draft302.txt">http://www.netscape.com/eng/ssl3/draft302.txt</a>.</dd>
      
      <dt><a id="TLS1" name="TLS1">[TLS1]</a></dt>
      <dd>Tim Dierks, Christopher Allen, <q>The TLS Protocol Version 1.0</q>,
      1999. See <a href="http://ietf.org/rfc/rfc2246.txt">http://ietf.org/rfc/rfc2246.txt</a>.</dd>
      
      <dt><a id="TLS11" name="TLS11">[TLS11]</a></dt>
      <dd><q>The TLS Protocol Version 1.1</q>,
      2006. See <a href="http://tools.ietf.org/html/rfc4346">http://tools.ietf.org/html/rfc4346</a>.</dd>
      
      <dt><a id="TLS12" name="TLS12">[TLS12]</a></dt>
      <dd><q>The TLS Protocol Version 1.2</q>,
      2008. See <a href="http://tools.ietf.org/html/rfc5246">http://tools.ietf.org/html/rfc5246</a>.</dd>
      </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Available Languages: </span><a href="../en/ssl/ssl_intro.html" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_intro.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="../ja/ssl/ssl_intro.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/ssl/ssl_intro.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/ssl/ssl_compat.html.fr.utf8������������������������������������������������0000644�0000000�0000050�00000054162�13412755316�020606� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Chiffrement fort SSL/TLS : Compatibilité - Serveur HTTP Apache Version 2.4</title>
      <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
      <script src="../style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="../images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="../images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="../images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.4</a> &gt; <a href="./">SSL/TLS</a></div><div id="page-content"><div id="preamble"><h1>Chiffrement fort SSL/TLS : Compatibilité</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="../en/ssl/ssl_compat.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_compat.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div>
      
      
      <p>Ce document couvre la compatibilité ascendante entre mod_ssl et
      d'autres solutions SSL. mod_ssl n'est pas la seule solution SSL pour Apache ;
      quatre autres produits sont (ou ont été) également disponibles :
      <a href="http://www.apache-ssl.org/">Apache-SSL</a>, le produit libre de
      Ben Laurie (d'où mod_ssl est issu à l'origine en 1998), Secure
      Web Server, un produit commercial de Red Hat (basé sur mod_ssl),
      Raven SSL Module, un produit commercial
      de Covalent (basé lui aussi sur mod_ssl), et enfin <a href="http://www.redhat.com/explore/stronghold/">Stronghold</a>, produit
      commercial de C2Net et maintenant de Red Hat, (basé sur une branche
      d'évolution différente appelée Sioux jusqu'à Stronghold 2.x et basé sur
      mod_ssl depuis Stronghold 3.x).</p>
      
      <p>En plus de ses fonctionnalités propres, mod_ssl rassemble la plupart de
      celles des autres solutions SSL, si bien qu'il est très simple de
      migrer depuis un module plus ancien vers mod_ssl. Les directives de
      configuration et les noms des variables d'environnement utilisés par les
      solutions SSL plus anciennes diffèrent de ceux qu'utilise mod_ssl ;
      les tableaux de correspondance ci-dessous fournissent les équivalences
      de termes utilisés par mod_ssl.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#configuration">Directives de configuration</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#variables">Variables d'environnement</a></li>
      <li><img alt="" src="../images/down.gif" /> <a href="#customlog">Fonctions de personnalisation des journaux</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuration" id="configuration">Directives de configuration</a></h2>
      <p>La correspondance entre les directives de configuration qu'utilise
      Apache-SSL 1.x et mod_ssl 2.0.x est fournie dans le <a href="#table1">Tableau
      1</a>. La correspondance depuis Sioux 1.x et Stronghold 2.x n'est que
      partielle car certaines fonctionnalités de ces interfaces ne sont pas
      supportées par mod_ssl.</p>
      
      
      <h3><a name="table1" id="table1">Tableau 1: Correspondance entre les directives de configuration</a></h3>
      
      <table><tr class="header"><th>Ancienne directive</th><th>Directive mod_ssl</th><th>Commentaires</th></tr>
      <tr class="header"><th colspan="3">Compatibilité entre Apache-SSL 1.x et mod_ssl 2.0.x :</th></tr>
      <tr><td><code>SSLEnable</code></td><td><code>SSLEngine on</code></td><td>plus compacte</td></tr>
      <tr class="odd"><td><code>SSLDisable</code></td><td><code>SSLEngine off</code></td><td>plus compacte</td></tr>
      <tr><td><code>SSLLogFile</code>
      <em>file</em></td><td><code /></td><td>Utilisez plutôt la directive
      de niveau module <code class="directive"><a href="../mod/core.html#loglevel">LogLevel</a></code>.</td></tr>
      <tr class="odd"><td><code>SSLRequiredCiphers</code> <em>spec</em></td><td><code>SSLCipherSuite</code> <em>spec</em></td><td>renommée</td></tr>
      <tr><td><code>SSLRequireCipher</code> <em>c1</em> ...</td><td><code>SSLRequire %{SSL_CIPHER} in {"</code><em>c1</em><code>",
      ...}</code></td><td>plus générale</td></tr>
      <tr class="odd"><td><code>SSLBanCipher</code> <em>c1</em> ...</td><td><code>SSLRequire not (%{SSL_CIPHER} in {"</code><em>c1</em><code>",
      ...})</code></td><td>plus générale</td></tr>
      <tr><td><code>SSLFakeBasicAuth</code></td><td><code>SSLOptions +FakeBasicAuth</code></td><td>rassemblées</td></tr>
      <tr class="odd"><td><code>SSLCacheServerPath</code> <em>dir</em></td><td>-</td><td>fonctionnalité supprimée</td></tr>
      <tr><td><code>SSLCacheServerPort</code> <em>integer</em></td><td>-</td><td>fonctionnalité supprimée</td></tr>
      <tr class="header"><th colspan="3">Compatibilité avec Apache-SSL 1.x :</th></tr>
      <tr class="odd"><td><code>SSLExportClientCertificates</code></td><td><code>SSLOptions +ExportCertData</code></td><td>rassemblées</td></tr>
      <tr><td><code>SSLCacheServerRunDir</code> <em>dir</em></td><td>-</td><td>fonctionnalité non supportée</td></tr>
      <tr class="header"><th colspan="3">Compatibilité avec Sioux 1.x :</th></tr>
      <tr class="odd"><td><code>SSL_CertFile</code> <em>file</em></td><td><code>SSLCertificateFile</code> <em>file</em></td><td>renommée</td></tr>
      <tr><td><code>SSL_KeyFile</code> <em>file</em></td><td><code>SSLCertificateKeyFile</code> <em>file</em></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_CipherSuite</code> <em>arg</em></td><td><code>SSLCipherSuite</code> <em>arg</em></td><td>renommée</td></tr>
      <tr><td><code>SSL_X509VerifyDir</code> <em>arg</em></td><td><code>SSLCACertificatePath</code> <em>arg</em></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_Log</code>
      <em>file</em></td><td><code>-</code></td><td>Utilisez plutôt la directive
      de niveau module <code class="directive"><a href="../mod/core.html#loglevel">LogLevel</a></code></td></tr>
      <tr><td><code>SSL_Connect</code> <em>flag</em></td><td><code>SSLEngine</code> <em>flag</em></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_ClientAuth</code> <em>arg</em></td><td><code>SSLVerifyClient</code> <em>arg</em></td><td>renommée</td></tr>
      <tr><td><code>SSL_X509VerifyDepth</code> <em>arg</em></td><td><code>SSLVerifyDepth</code> <em>arg</em></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_FetchKeyPhraseFrom</code> <em>arg</em></td><td>-</td><td>pas de véritable équivalent ; utiliser SSLPassPhraseDialog</td></tr>
      <tr><td><code>SSL_SessionDir</code> <em>dir</em></td><td>-</td><td>pas de véritable équivalent ; utiliser SSLSessionCache</td></tr>
      <tr class="odd"><td><code>SSL_Require</code> <em>expr</em></td><td>-</td><td>pas de véritable équivalent ; utiliser SSLRequire</td></tr>
      <tr><td><code>SSL_CertFileType</code> <em>arg</em></td><td>-</td><td>fonctionnalité non supportée</td></tr>
      <tr class="odd"><td><code>SSL_KeyFileType</code> <em>arg</em></td><td>-</td><td>fonctionnalité non supportée</td></tr>
      <tr><td><code>SSL_X509VerifyPolicy</code> <em>arg</em></td><td>-</td><td>fonctionnalité non supportée</td></tr>
      <tr class="odd"><td><code>SSL_LogX509Attributes</code> <em>arg</em></td><td>-</td><td>fonctionnalité non supportée</td></tr>
      <tr class="header"><th colspan="3">Compatibilité avec Stronghold 2.x :</th></tr>
      <tr><td><code>StrongholdAccelerator</code> <em>engine</em></td><td><code>SSLCryptoDevice</code> <em>engine</em></td><td>renommée</td></tr>
      <tr class="odd"><td><code>StrongholdKey</code> <em>dir</em></td><td>-</td><td>sans objet</td></tr>
      <tr><td><code>StrongholdLicenseFile</code> <em>dir</em></td><td>-</td><td>sans objet</td></tr>
      <tr class="odd"><td><code>SSLFlag</code> <em>flag</em></td><td><code>SSLEngine</code> <em>flag</em></td><td>renommée</td></tr>
      <tr><td><code>SSLSessionLockFile</code> <em>file</em></td><td><code>SSLMutex</code> <em>file</em></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSLCipherList</code> <em>spec</em></td><td><code>SSLCipherSuite</code> <em>spec</em></td><td>renommée</td></tr>
      <tr><td><code>RequireSSL</code></td><td><code>SSLRequireSSL</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSLErrorFile</code> <em>file</em></td><td>-</td><td>fonctionnalité non supportée</td></tr>
      <tr><td><code>SSLRoot</code> <em>dir</em></td><td>-</td><td>fonctionnalité non supportée</td></tr>
      <tr class="odd"><td><code>SSL_CertificateLogDir</code> <em>dir</em></td><td>-</td><td>fonctionnalité non supportée</td></tr>
      <tr><td><code>AuthCertDir</code> <em>dir</em></td><td>-</td><td>fonctionnalité non supportée</td></tr>
      <tr class="odd"><td><code>SSL_Group</code> <em>name</em></td><td>-</td><td>fonctionnalité non supportée</td></tr>
      <tr><td><code>SSLProxyMachineCertPath</code> <em>dir</em></td><td><code>SSLProxyMachineCertificatePath</code> <em>dir</em></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSLProxyMachineCertFile</code> <em>file</em></td><td><code>SSLProxyMachineCertificateFile</code> <em>file</em></td><td>renommée</td></tr>
      <tr><td><code>SSLProxyCipherList</code> <em>spec</em></td><td><code>SSLProxyCipherSpec</code> <em>spec</em></td><td>renommée</td></tr>
      </table>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="variables" id="variables">Variables d'environnement</a></h2>
      
      <p>La correspondance entre les noms des variables d'environnement utilisés par
      les solutions SSL plus anciennes et les noms utilisés par mod_ssl est fournie
      dans le <a href="#table2">Tableau 2</a>.</p>
      
      <h3><a name="table2" id="table2">Tableau 2: Dérivation des variables d'environnement</a></h3>
      
      <table><tr class="header"><th>Ancienne variable</th><th>Variable mod_ssl</th><th>Commentaires</th></tr>
      <tr><td><code>SSL_PROTOCOL_VERSION</code></td><td><code>SSL_PROTOCOL</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSLEAY_VERSION</code></td><td><code>SSL_VERSION_LIBRARY</code></td><td>renommée</td></tr>
      <tr><td><code>HTTPS_SECRETKEYSIZE</code></td><td><code>SSL_CIPHER_USEKEYSIZE</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>HTTPS_KEYSIZE</code></td><td><code>SSL_CIPHER_ALGKEYSIZE</code></td><td>renommée</td></tr>
      <tr><td><code>HTTPS_CIPHER</code></td><td><code>SSL_CIPHER</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>HTTPS_EXPORT</code></td><td><code>SSL_CIPHER_EXPORT</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_SERVER_KEY_SIZE</code></td><td><code>SSL_CIPHER_ALGKEYSIZE</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_CERTIFICATE</code></td><td><code>SSL_SERVER_CERT</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_SERVER_CERT_START</code></td><td><code>SSL_SERVER_V_START</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_CERT_END</code></td><td><code>SSL_SERVER_V_END</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_SERVER_CERT_SERIAL</code></td><td><code>SSL_SERVER_M_SERIAL</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_SIGNATURE_ALGORITHM</code></td><td><code>SSL_SERVER_A_SIG</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_SERVER_DN</code></td><td><code>SSL_SERVER_S_DN</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_CN</code></td><td><code>SSL_SERVER_S_DN_CN</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_SERVER_EMAIL</code></td><td><code>SSL_SERVER_S_DN_Email</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_O</code></td><td><code>SSL_SERVER_S_DN_O</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_SERVER_OU</code></td><td><code>SSL_SERVER_S_DN_OU</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_C</code></td><td><code>SSL_SERVER_S_DN_C</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_SERVER_SP</code></td><td><code>SSL_SERVER_S_DN_SP</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_L</code></td><td><code>SSL_SERVER_S_DN_L</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_SERVER_IDN</code></td><td><code>SSL_SERVER_I_DN</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_ICN</code></td><td><code>SSL_SERVER_I_DN_CN</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_SERVER_IEMAIL</code></td><td><code>SSL_SERVER_I_DN_Email</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_IO</code></td><td><code>SSL_SERVER_I_DN_O</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_SERVER_IOU</code></td><td><code>SSL_SERVER_I_DN_OU</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_IC</code></td><td><code>SSL_SERVER_I_DN_C</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_SERVER_ISP</code></td><td><code>SSL_SERVER_I_DN_SP</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_IL</code></td><td><code>SSL_SERVER_I_DN_L</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_CLIENT_CERTIFICATE</code></td><td><code>SSL_CLIENT_CERT</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_CERT_START</code></td><td><code>SSL_CLIENT_V_START</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_CLIENT_CERT_END</code></td><td><code>SSL_CLIENT_V_END</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_CERT_SERIAL</code></td><td><code>SSL_CLIENT_M_SERIAL</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_CLIENT_SIGNATURE_ALGORITHM</code></td><td><code>SSL_CLIENT_A_SIG</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_DN</code></td><td><code>SSL_CLIENT_S_DN</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_CLIENT_CN</code></td><td><code>SSL_CLIENT_S_DN_CN</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_EMAIL</code></td><td><code>SSL_CLIENT_S_DN_Email</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_CLIENT_O</code></td><td><code>SSL_CLIENT_S_DN_O</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_OU</code></td><td><code>SSL_CLIENT_S_DN_OU</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_CLIENT_C</code></td><td><code>SSL_CLIENT_S_DN_C</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_SP</code></td><td><code>SSL_CLIENT_S_DN_SP</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_CLIENT_L</code></td><td><code>SSL_CLIENT_S_DN_L</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_IDN</code></td><td><code>SSL_CLIENT_I_DN</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_CLIENT_ICN</code></td><td><code>SSL_CLIENT_I_DN_CN</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_IEMAIL</code></td><td><code>SSL_CLIENT_I_DN_Email</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_CLIENT_IO</code></td><td><code>SSL_CLIENT_I_DN_O</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_IOU</code></td><td><code>SSL_CLIENT_I_DN_OU</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_CLIENT_IC</code></td><td><code>SSL_CLIENT_I_DN_C</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_ISP</code></td><td><code>SSL_CLIENT_I_DN_SP</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_CLIENT_IL</code></td><td><code>SSL_CLIENT_I_DN_L</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_EXPORT</code></td><td><code>SSL_CIPHER_EXPORT</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_KEYSIZE</code></td><td><code>SSL_CIPHER_ALGKEYSIZE</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_SECKEYSIZE</code></td><td><code>SSL_CIPHER_USEKEYSIZE</code></td><td>renommée</td></tr>
      <tr><td><code>SSL_SSLEAY_VERSION</code></td><td><code>SSL_VERSION_LIBRARY</code></td><td>renommée</td></tr>
      <tr class="odd"><td><code>SSL_STRONG_CRYPTO</code></td><td><code>-</code></td><td>Non supportée par mod_ssl</td></tr>
      <tr><td><code>SSL_SERVER_KEY_EXP</code></td><td><code>-</code></td><td>Non supportée par mod_ssl</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_KEY_ALGORITHM</code></td><td><code>-</code></td><td>Non supportée par mod_ssl</td></tr>
      <tr><td><code>SSL_SERVER_KEY_SIZE</code></td><td><code>-</code></td><td>Non supportée par mod_ssl</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_SESSIONDIR</code></td><td><code>-</code></td><td>Non supportée par mod_ssl</td></tr>
      <tr><td><code>SSL_SERVER_CERTIFICATELOGDIR</code></td><td><code>-</code></td><td>Non supportée par mod_ssl</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_CERTFILE</code></td><td><code>-</code></td><td>Non supportée par mod_ssl</td></tr>
      <tr><td><code>SSL_SERVER_KEYFILE</code></td><td><code>-</code></td><td>Non supportée par mod_ssl</td></tr>
      <tr class="odd"><td><code>SSL_SERVER_KEYFILETYPE</code></td><td><code>-</code></td><td>Non supportée par mod_ssl</td></tr>
      <tr><td><code>SSL_CLIENT_KEY_EXP</code></td><td><code>-</code></td><td>Non supportée par mod_ssl</td></tr>
      <tr class="odd"><td><code>SSL_CLIENT_KEY_ALGORITHM</code></td><td><code>-</code></td><td>Non supportée par mod_ssl</td></tr>
      <tr><td><code>SSL_CLIENT_KEY_SIZE</code></td><td><code>-</code></td><td>Non supportée par mod_ssl</td></tr>
      </table>
      
      </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="customlog" id="customlog">Fonctions de personnalisation des journaux</a></h2>
      <p>Quand mod_ssl est activé, le <a href="../mod/mod_log_config.html#formats">Format de journal courant
      (Custom Log Format)</a> du module <code class="module"><a href="../mod/mod_log_config.html">mod_log_config</a></code> possède
      des fonctions supplémentaires comme indiqué dans le chapitre de référence.
      En plus de la fonction de format étendu
      ``<code>%{</code><em>varname</em><code>}x</code>'' que l'on peut utiliser pour
      extraire le contenu d'une variable fournie par n'importe quel module,
      la fonction
      de format cryptographique ``<code>%{</code><em>name</em><code>}c</code>'' a
      été ajoutée à des fins de compatibilité ascendante. Les appels de fonctions
      actuellement implémentés sont énumérés dans le
      <a href="#table3">Tableau 3</a>.</p>
      
      <h3><a name="table3" id="table3">Table 3: Fonctions cryptographiques du format de journal courant</a></h3>
      
      <table>
      
      <tr><th>Appel de fonction</th><th>Description</th></tr>
      
      <tr><td><code>%...{version}c</code></td>   <td>Version du protocole SSL</td></tr>
      <tr><td><code>%...{cipher}c</code></td>    <td>Chiffrement SSL</td></tr>
      <tr><td><code>%...{subjectdn}c</code></td> <td>Nom distinctif du sujet du certificat du client</td></tr>
      <tr><td><code>%...{issuerdn}c</code></td>  <td>Nom distinctif de l'émetteur du certificat du client</td></tr>
      <tr><td><code>%...{errcode}c</code></td>   <td>Erreur lors de la vérification du certificat (numérique)</td></tr>
      
      <tr><td><code>%...{errstr}c</code></td>    <td>Erreur lors de la vérification du certificat (chaîne de caractères)</td></tr>
      </table>
      
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="../en/ssl/ssl_compat.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="../fr/ssl/ssl_compat.html" title="Français">&nbsp;fr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/ssl/ssl_compat.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossaire</a> | <a href="../sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/glossary.html.fr.utf8������������������������������������������������������0000644�0000000�0000050�00000104013�13412755316�017473� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Glossaire - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page" class="no-sidebar"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Glossaire</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./de/glossary.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/glossary.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/glossary.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/glossary.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/glossary.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/glossary.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/glossary.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
          <p>Ce glossaire définit la terminologie courante relative à Apache en
          particulier, et aux serveurs web en général. Vous trouverez plus
          d'informations sur chaque concept dans les liens fournis.</p>
        </div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="definitions" id="definitions">Définitions</a></h2>
      <dl>
      <dt><a name="algorithm" id="algorithm">Algorithme</a></dt>
      
          <dd>Une formule sans ambiguité ou un jeu de règles destinées à
          résoudre un problème en un nombre fini d'étapes. Les algorithmes de
          chiffrement sont en général appelés
            <dfn>Ciphers</dfn>.
          </dd>
      
          <dt><a name="cipher" id="cipher">Algorithme de chiffrement
          (Cipher)</a></dt>
          <dd>Un algorithme ou un système de chiffrement des données.
          Quelques exemples : DES, IDEA, RC4, etc.<br />
            Voir : <a href="ssl/">chiffrement SSL/TLS</a>
          </dd>
      
          <dt><a name="apr" id="APR">APR</a></dt>
          <dd>Voir "Bibliothèques pour la portabilité d'Apache"
          </dd>
      
          <dt><a name="tarball" id="tarball">Archive Tar (Tarball)</a></dt>
        <dd>Un paquetage de fichiers rassemblés dans une archive
        à l'aide de l'utilitaire <code>tar</code>.
          Les distributions d'Apache sont stockées dans des Archives Tar compressées
          ou en utilisant pkzip.
        </dd>
      
          <dt><a name="authentication" id="authentication">Authentification </a></dt>
          <dd>L'identification formelle d'une entité du réseau comme un serveur, un
          client, ou un utilisateur.<br />
            Voir : <a href="howto/auth.html">Authentification, Autorisation, et
            contrôle d'accès</a>
          </dd>
      
          <dt><a name="certificationauthority" id="certificationauthority">Autorité de Certification
      	(Certification Authority)</a>
            <a name="ca" id="ca">(CA)</a></dt>
          <dd>Un tiers de confiance habilité à signer des certificats pour des entités
          du réseau qu'il a authentifiées selon des critères basés sur la sécurité.
          Les autres entités du réseau peuvent alors utiliser la signature pour
          vérifier qu'une CA a authentifié le porteur du certificat.<br />
            Voir : <a href="ssl/">chiffrement SSL/TLS</a>
          </dd>
      
          <dt><a name="apacheportableruntime" id="apacheportableruntime">Bibliothèques pour la portabilité d'Apache
             (Apache Portable Runtime)</a> <a name="apr" id="apr">(APR)</a></dt>
          <dd>Un jeu de bibliothèques qui fournit la plupart des interfaces de base
            entre le serveur et le système d'exploitation.  APR est développé
            parallèlement au serveur HTTP Apache comme projet indépendant.<br />
            Voir : <a href="http://apr.apache.org/">Apache Portable Runtime
            Project</a>
          </dd>
      
      
      <dt><a name="certificate" id="certificate">Certificat (Certificate)</a></dt>
          <dd>Un ensemble de données servant à authentifier des entités du
          réseau comme un serveur ou un client. Un certificat contient des ensembles
          d'informations X509 à propos de son propriétaire (appelé sujet/subject)
          et de l'<a class="glossarylink" href="./glossary.html#certificationauthority" title="voir glossaire">Autorité de Certification
            (Certification Authority) ou CA</a> signataire (appelée
            le fournisseur/issuer), ainsi que la
            <a class="glossarylink" href="./glossary.html#publickey" title="voir glossaire">clé publique (public
            key)</a> du propriétaire et la
            signature de la CA. Les entités du réseau vérifient ces signatures
            en utilisant les certificats des Autorités de Certification.<br />
            Voir : <a href="ssl/">chiffrement SSL/TLS</a>
          </dd>
      
          <dt><a name="publickeycryptography" id="publickeycryptography">Chiffrement à Clé Publique
            (Public Key Cryptography)</a></dt>
          <dd>L'étude et l'application des systèmes de chiffrement asymétriques,
          qui utilisent une clé pour le chiffrement et une autre pour le
          déchiffrement. Les deux clés correspondantes constituent une paire de clés.
          Appelé aussi chiffrement asymétrique.
            <br />
            Voir : <a href="ssl/">chiffrement SSL/TLS</a>
          </dd>
      
          <dt><a name="privatekey" id="privatekey">Clé Privée (Private Key)</a></dt>
          <dd>La clé secrète dans un système de
          <a class="glossarylink" href="./glossary.html#publickeycryptography" title="voir glossaire">chiffrement à clé publique</a>,
          utilisée pour déchiffrer les messages entrants et signer
          les messages sortants.<br />
            Voir : <a href="ssl/">chiffrement SSL/TLS</a>
          </dd>
      
      <dt><a name="publickey" id="publickey">Clé Publique (Public Key)</a></dt>
          <dd>La clé accessible au public dans un système de <a class="glossarylink" href="./glossary.html#publickeycryptography" title="voir glossaire">Chiffrement à clé publique</a>,
            utilisée pour chiffrer les messages destinés uniquement à son
            propriétaire et déchiffrer les signatures
            faites par son propriétaire.<br />
            Voir : <a href="ssl/">chiffrement SSL/TLS</a>
          </dd>
      
      <dt><a name="connect" id="connect">CONNECT</a></dt>
          <dd>Une <a class="glossarylink" href="./glossary.html#method" title="voir glossaire">méthode</a> HTTP pour encapsuler
          des données brutes dans HTTP. Elle peut aussi être utilisée pour encapsuler
          d'autres protocoles, comme le protocole SSL.
          </dd>
      
          <dt><a name="context" id="context">Contexte (Context)</a></dt>
          <dd>Une portion des <a class="glossarylink" href="./glossary.html#configurationfile" title="voir glossaire">
          fichiers de configuration</a> dans laquelle certains types de
          <a class="glossarylink" href="./glossary.html#directive" title="voir glossaire">directives</a> sont autorisés.<br />
            Voir : <a href="mod/directive-dict.html#Context">Termes utilisés
            pour décrire les directives d'Apache</a>
          </dd>
      
          <dt><a name="accesscontrol" id="accesscontrol">Contrôle d'accès
          (Access Control)</a></dt>
          <dd>La restriction d'accès à des zones du réseau. Habituellement
          dans un contexte Apache,
            la restriction d'accès à certaines <em>URLs</em>.<br />
            Voir :  <a href="howto/auth.html">Authentification, Autorisation et
            Contrôle d'accès</a>
          </dd>
      
          <dt><a name="securesocketslayer" id="securesocketslayer">
          Couche des Points de connexion Sécurisés
          (Secure Sockets Layer)
            </a> <a name="ssl" id="ssl">(SSL)</a></dt>
        <dd>Un protocole créé par Netscape Communications Corporation pour
        l'authentification et le chiffrement généraux des communications dans les
        réseaux TCP/IP.  L'utilisation la plus connue est <em>HTTPS</em>, autrement dit
        le Protocole de Transfert Hypertexte (HTTP) au dessus de SSL.<br />
          Voir : <a href="ssl/">chiffrement SSL/TLS</a>
        </dd>
      
        <dt><a name="subrequest" id="subrequest">Sous-requête</a></dt>
          <dd>Apache possède une API des sous-requêtes pour les modules qui
          permettent l'évaluation complète ou partielle par le serveur de
          chemins d'autres systèmes de fichiers ou d'URL. Par exemple, la
          directive <code class="directive"><a href="./mod/mod_dir.html#directoryindex">DirectoryIndex</a></code>,
          les modules <code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code> et
          <code class="module"><a href="./mod/mod_include.html">mod_include</a></code> utilisent cette API.
          </dd>
      
        <dt><a name="symmetriccryptophraphy" id="symmetriccryptophraphy">
        Cryptographie Symétrique (Symmetric Cryptography)</a></dt>
        <dd>L'étude et l'application des <em>Algorithmes de chiffrement</em> qui
        utilisent une clé secrète unique pour les opérations de chiffrement et de
        déchiffrement.<br />
          Voir : <a href="ssl/">chiffrement SSL/TLS</a>
        </dd>
      
      
          <dt><a name="export-crippled" id="export-crippled">
          Dégradé pour l'exportation
          (Export-Crippled)</a></dt>
          <dd>Diminué en terme de puissance cryptographique (et de sécurité)
          afin de respecter les Règles de l'Administration des Exportations
           des Etats-Unis (Export Administration Regulations ou EAR).
            Les logiciels de cryptographie dégradés pour l'exportation sont limités
            à une clé de petite taille, et produisent un
            <em>Texte crypté</em> qui peut en général être décrypté
            par force brute.<br />
            Voir : <a href="ssl/">chiffrement SSL/TLS</a>
          </dd>
      
      
          <dt><a name="certificatsigningrequest" id="certificatsigningrequest">Demande de signature de certificat
            (Certificate Signing Request)</a>
            <a name="csr" id="csr">(CSR)</a></dt>
          <dd>La soumission d'un <a class="glossarylink" href="./glossary.html#certificate" title="voir glossaire">certificat</a>
          non signé à une <a class="glossarylink" href="./glossary.html#certificationauthority" title="voir glossaire">Autorité de
          certification</a>, qui le signe avec la <a class="glossarylink" href="./glossary.html#privatekey" title="voir glossaire">Clé privée</a> de leur
            <em>Certificat</em> de CA. Une fois le CSR signé, il devient un vrai
            certificat.<br />
            Voir : <a href="ssl/">chiffrement SSL/TLS</a>
          </dd>
      
          <dt><a name="directive" id="directive">Directive</a></dt>
          <dd>Une commande de configuration qui contrôle un ou plusieurs aspects du
          comportement d'Apache.  Les directives sont placées dans le <a class="glossarylink" href="./glossary.html#configurationfile" title="voir glossaire">Fichier de configuration</a><br />
          Voir : <a href="mod/directives.html">Index des directives</a>
          </dd>
      
      <dt><a name="configurationdirective" id="configurationdirective">Directive de configuration
      	(Configuration Directive)</a></dt>
          <dd>Voir : <a class="glossarylink" href="./glossary.html#directive" title="voir glossaire">Directive</a></dd>
      
          <dt><a name="header" id="header">En-tête (Header)</a></dt>
          <dd>La partie de la requête et de la réponse
          <a class="glossarylink" href="./glossary.html#http" title="voir glossaire">HTTP</a> qui est envoyée avant le contenu
          proprement dit, et contient des méta-informations décrivant le contenu.
          </dd>
      
          <dt><a name="regularexpression" id="regularexpression">Expression Rationnelle
          (Regular Expression)</a>
            <a name="regex" id="regex">(Regex)</a></dt>
          <dd>Une méthode pour décrire un modèle sous forme de texte - par exemple,
          "tous les mots qui commencent par la lettre A" ou "tous les numéros de
          téléphone à 10 chiffres" ou encore "Toutes les phrases contenant 2 virgules,
          et aucun Q majuscule". Les expressions rationnelles sont très utiles dans
          Apache car elles vous permettent d'appliquer certains attributs à des
          ensembles de fichiers ou ressources avec une grande flexibilité
            - par exemple, tous les fichiers .gif et .jpg situés dans tout répertoire
            nommé "images", pourraient être enregistrés comme
            "<code>/images/.*(jpg|gif)$</code>".  Lorsque l'on utilise des
            expressions rationnelles pour la substitution de chaînes, les
            variables spéciales $1 ... $9 contiennent des références arrières
            vers les parties regroupées (entre parenthèses) de l'expression
            qui correspond. La variable spéciale $0 contient une référence
            arrière vers l'ensemble de l'expression qui correspond. Pour
            insérer un caractère littéral "dollar" dans la chaîne de
            remplacement, il faut l'échapper avec un anti-slash. Pour des
            raisons historiques, la variable &amp; peut être utilisée en tant
            qu'alias de $0 dans certains cas, mais ceci n'est plus possible
            depuis la version 2.3.6. Apache utilise les Expressions
            Rationnelles Compatibles avec Perl fournies par la librairie <a href="http://www.pcre.org/">PCRE</a>. Vous trouverez plus
            d'information à propos de la syntaxe des expressions rationnelles
            PCRE sur ce site, ou dans le <a href="http://en.wikipedia.org/wiki/PCRE">Wikipedia de la PCRE</a>.
        </dd>
      
          <dt><a name="configurationfile" id="configurationfile">
          Fichier de configuration
          (Configuration File)</a></dt>
          <dd>Un fichier texte contenant des
          <a class="glossarylink" href="./glossary.html#directive" title="voir glossaire">Directives</a>
            qui contrôlent la configuration d'Apache.<br />
            Voir : <a href="configuring.html">Fichiers de configuration</a>
          </dd>
      
          <dt><a name="filter" id="filter">Filtre (Filter)</a></dt>
          <dd>Un traitement appliqué aux données envoyées ou reçues par le serveur.
            Les filtres en entrée traitent les données envoyées au serveur par le
            client, alors que les filtres en sortie traitent les documents sur le
            serveur avant qu'ils soient envoyés au client.
            Par exemple, le filtre en sortie
            <code>INCLUDES</code>
            traite les documents pour les
            <a class="glossarylink" href="./glossary.html#ssi" title="voir glossaire">Server Side Includes (Inclusions côté Serveur)
            </a>.<br />
            Voir : <a href="filter.html">Filtres</a>
          </dd>
      
      <dt><a name="handler" id="handler">Gestionnaire (Handler)</a></dt>
          <dd>Une représentation interne à Apache de l'action à entreprendre
          quand un fichier est appelé. En général, les fichiers ont des gestionnaires
          implicites, basés sur le type de fichier. Normalement, tous les
          fichiers sont directement servis par le serveur, mais certains
          types de fichiers sont "gérés" séparément.  Par exemple, le gestionnaire
            <code>cgi-script</code> désigne les fichiers qui doivent être traités
            comme <a class="glossarylink" href="./glossary.html#cgi" title="voir glossaire">CGIs</a>.<br />
            Voir : <a href="handler.html">Utilisation des gestionnaires d'Apache</a>
          </dd>
      
          <dt><a name="hash" id="hash">Hachage (Hash)</a></dt>
          <dd>Un algorithme mathématique à sens unique, irréversible, générant une
          chaîne de longueur fixe à partir d'une autre chaîne de longueur quelconque.
          Des chaînes différentes en entrée vont normalement produire des chaînes
          différentes en sortie (selon la fonction de hachage).
          </dd>
      
          <dt><a name="virtualhosting" id="virtualhosting">Hébergement Virtuel
          (Virtual Hosting)</a></dt>
        <dd>Servir des sites web multiples en utilisant une seule instance d'Apache.
        Les <em>Hôtes virtuels basés sur IP</em> différencient les sites web en se
        basant sur leur adresse IP, alors que les
        <em>Hôtes virtuels basés sur le nom</em> utilisent uniquement le nom d'hôte
        et peuvent en conséquence héberger de nombreux sites avec la même
        adresse IP.<br />
          Voir la <a href="vhosts/">Documentation des Hôtes Virtuels d'Apache</a>
        </dd>
      
      
          <dt><a name="htaccess" id="htaccess">.htaccess</a></dt>
          <dd>Un <a class="glossarylink" href="./glossary.html#configurationfile" title="voir glossaire">fichier de configuration</a>
          placé à un certain niveau de l'arborescence du site web, et appliquant des
          <a class="glossarylink" href="./glossary.html#directive" title="voir glossaire">directives</a> de configuration au
          répertoire dans lequel il est placé, ainsi qu'à tous ses sous-répertoires.
          En dépit de son nom, ce fichier peut contenir pratiquement tout type de
          directive, et pas seulement des directives de contrôle d'accès.<br />
            Voir : <a href="configuring.html">Fichiers de configuration</a>
          </dd>
      
      <dt><a name="httpd.conf" id="httpd.conf">httpd.conf</a></dt>
          <dd>Le <a class="glossarylink" href="./glossary.html#configurationfile" title="voir glossaire">fichier de configuration
          </a> principal d'Apache.  Sa localisation par défaut est
            <code>/usr/local/apache2/conf/httpd.conf</code>, mais ceci peut être
            changé en utilisant des options de compilation ou d'exécution.<br />
            Voir : <a href="configuring.html">Fichiers de configuration</a>
          </dd>
      
           <dt><a name="https" id="https">HTTPS</a></dt>
          <dd>Le Protocole de Transfert Hypertexte (Sécurisé), le mécanisme de
          communication cryptée standard sur le World Wide Web.
          Il s'agit en fait de HTTP au dessus de
          <a class="glossarylink" href="./glossary.html#ssl" title="voir glossaire">SSL</a>.<br />
            Voir : <a href="ssl/">chiffrement SSL/TLS</a>
          </dd>
      
          <dt><a name="uniformresourceidentifier" id="uniformresourceidentifier">Identificateur de Ressource Uniformisé
          (Uniform Resource Identifier)</a>
          <a name="URI" id="URI">(URI)</a></dt>
        <dd>Une chaîne de caractères compacte servant à identifier une ressource
        abstraite ou physique.  Elle est formellement définie par la <a href="http://www.ietf.org/rfc/rfc2396.txt">RFC 2396</a>.  Les URIs
            utilisées sur le world-wide web sont souvent appelées <a class="glossarylink" href="./glossary.html#url" title="voir glossaire">URLs</a>.
        </dd>
      
          <dt><a name="serversideincludes" id="serversideincludes">
          Inclusions Côté Serveur
          (Server Side Includes)</a> <a name="ssi" id="ssi">(SSI)
            </a></dt>
        <dd>Une technique permettant d'englober des directives de traitement dans
        des fichiers HTML.<br />
          Voir : <a href="howto/ssi.html">Introduction aux Inclusions Côté Serveur</a>
        </dd>
      
        <dt><a name="servernameindication" id="servernameindication">Indication du nom du serveur</a> <a name="sni" id="sni">(SNI)</a></dt>
          <dd>Une fonctionnalité SSL permettant de spécifier le
          nom du serveur désiré dans le message initial de la
          négociation SSL, de façon à ce que le serveur web
          puisse choisir la bonne configuration de serveur virtuel à
          utiliser pendant le déroulement de la négociation SSL.
          Cette fonctionnalité a été ajoutée
          à SSL lorsque sont apparues les extensions TLS, RFC 3546.<br />
            Voir <a href="ssl/ssl_faq.html">la FAQ SSL</a>
            et <a href="http://www.ietf.org/rfc/rfc3546.txt">la RFC 3546</a>
          </dd>
      
      
      
      <dt><a name="commongatewayinterface" id="commongatewayinterface">
      Interface commune avec les programmes externes
      (Common Gateway Interface)</a>
      	 <a name="cgi" id="cgi">(CGI)</a></dt>
          <dd>La définition standard d'une interface entre un serveur web et un
          programme externe pour permettre à ce dernier de traiter des requêtes.
           Il existe une <a href="http://www.ietf.org/rfc/rfc3875">RFC
           informationnelle</a> qui en couvre les spécificités.<br />
            Voir : <a href="howto/cgi.html">Contenu dynamique avec CGI</a>
          </dd>
      
      
      
      <dt><a name="uniformresourcelocator" id="uniformresourcelocator">
      Localisation de Ressource Uniformisée
      (Uniform Resource Locator)
            </a> <a name="url" id="url">(URL)</a></dt>
        <dd>Le nom/adresse d'une ressource sur l'Internet.  Il s'agit du terme
        informel commun pour ce qui est formellement défini comme <a class="glossarylink" href="./glossary.html#uniformresourceidentifier" title="voir glossaire">
            Identificateur de Ressource Uniformisé</a>.
          Les URLs sont généralement construites selon un schéma, comme
          <code>http</code> ou
          <code>https</code>, un nom d'hôte, et un chemin.  Une URL pour cette page
          pourrait être
          <code>http://httpd.apache.org/docs/2.4/glossary.html</code>.
        </dd>
      
      
          <dt><a name="proxy" id="proxy">Mandataire (Proxy)</a></dt>
          <dd>Un serveur intermédiaire qui se situe entre le client et le
          <em>serveur d'origine</em>.
          Il prend en compte les requêtes des clients, les transmet au serveur
          d'origine, puis renvoie la réponse du serveur d'origine au client.
          Si plusieurs clients demandent le même contenu, le mandataire peut l'extraire
          de son cache, plutôt que le demander au serveur d'origine
          à chaque fois, ce qui réduit le temps de réponse.<br />
            Voir : <a href="mod/mod_proxy.html">mod_proxy</a>
          </dd>
      
          <dt><a name="reverseproxy" id="reverseproxy">Mandataire inverse
          (Reverse Proxy)</a></dt>
        <dd>Un serveur <a class="glossarylink" href="./glossary.html#proxy" title="voir glossaire">mandataire</a> qui est vu du client
          comme un <em>serveur d'origine</em>.  Ceci peut s'avérer utile pour
          dissimuler le serveur d'origine réel au client pour des raisons de sécurité,
          ou pour répartir la charge.
        </dd>
      
          <dt><a name="method" id="method">Méthode (Method)</a></dt>
          <dd>Dans le contexte <a class="glossarylink" href="./glossary.html#http" title="voir glossaire">HTTP</a>, une action à
            effectuer sur une ressource spécifiée dans la ligne de requête
            par le client.  Parmi les méthodes disponibles dans HTTP, on trouve
            <code>GET</code>, <code>POST</code>,
            et <code>PUT</code>.
          </dd>
      
          <dt><a name="module" id="module">Module</a></dt>
          <dd>Une partie indépendante d'un programme.  De nombreuses fonctionnalités
          d'Apache sont fournies par des modules que vous pouvez choisir d'inclure
          ou d'exclure.  Les modules qui sont compilés dans le binaire
          <code class="program"><a href="./programs/httpd.html">httpd</a></code> sont appelés <dfn>modules statiques</dfn>, alors
          que les modules qui existent séparément et peuvent être chargés
          optionnellement à l'exécution sont appelés
            <dfn>modules dynamiques</dfn> ou <a class="glossarylink" href="./glossary.html#dso" title="voir glossaire">DSOs</a>.
            Les modules qui sont inclus par défaut sont appelés
            <dfn>modules de base</dfn>. De nombreux modules disponibles pour Apache
            ne se trouvent pas dans l'<a class="glossarylink" href="./glossary.html#tarball" title="voir glossaire">archive</a>
            du Serveur HTTP Apache .  Il sont appelés
            <dfn>modules tiers</dfn>.<br />
            Voir : <a href="mod/">Index des modules</a>
          </dd>
      
      <dt><a name="passphrase" id="passphrase">Mot de Passe (Pass Phrase)</a></dt>
          <dd>Le mot ou la phrase qui protège les fichiers de clés privées.
          Il empêche les utilisateurs non autorisés de les déchiffrer. En général,
          il s'agit simplement de la clé secrète de chiffrement/déchiffrement
            utilisée pour les <a class="glossarylink" href="./glossary.html#cipher" title="voir glossaire">Algorithmes de chiffrement</a>.<br />
            Voir : <a href="ssl/">chiffrement SSL/TLS</a>
          </dd>
      
          <dt><a name="fully-qualifieddomain-name" id="fully-qualifieddomain-name">Nom de domaine entièrement qualifié
      	(Fully-Qualified Domain-Name)</a>
            <a name="fqdn" id="fqdn">(FQDN)</a></dt>
          <dd>Le nom unique d'une entité du réseau, comprenant un nom d'hôte et un
          nom de domaine qui peuvent être résolus en une adresse IP. Par exemple,
            <code>www</code> est un nom d'hôte, <code>example.com</code> est un nom
            de domaine, et <code>www.example.com</code> est un nom de domaine
            entièrement qualifié.
          </dd>
      
          <dt><a name="modulemagicnumber" id="modulemagicnumber">
          Nombre Magique des Modules
          (Module Magic Number)</a>
            (<a name="mmn" id="mmn">MMN</a>)</dt>
          <dd>Le Nombre Magique des Modules est une constante définie dans le code
          source d'Apache et associée à la compatibilité binaire des modules.
          Sa valeur est modifiée quand des structures internes d'Apache, des appels
          de fonctions et d'autres parties significatives de l'API sont modifiées
          de telle façon que la compatibilité binaire ne peut plus être garantie.
          En cas de changement de MMN, tous les modules tiers doivent être au
          moins recompilés, et parfois même légèrement modifiés afin de pouvoir
          fonctionner avec la nouvelle version d'Apache.
          </dd>
      
          <dt><a name="dynamicsharedobject" id="dynamicsharedobject">
          Objet Dynamique Partagé (Dynamic Shared Object)
      	</a> <a name="dso" id="dso">(DSO)</a></dt>
          <dd><a class="glossarylink" href="./glossary.html#module" title="voir glossaire">Modules</a> compilés en dehors du binaire
            Apache <code class="program"><a href="./programs/httpd.html">httpd</a></code> et qui peuvent être
            chargés à la demande.<br />
            Voir : <a href="dso.html">Support des objets dynamiques partagés</a>
          </dd>
      
      <dt><a name="openssl" id="openssl">OpenSSL</a></dt>
          <dd>L'ensemble d'outils Open Source pour SSL/TLS<br />
            Voir <a href="http://www.openssl.org/">http://www.openssl.org/</a>#
          </dd>
      
      <dt><a name="apacheextensiontool" id="apacheextensiontool">
          Outil de gestion des extensions Apache
          (APache eXtension Tool)</a>
          <a name="apxs" id="apxs">(apxs)</a></dt>
          <dd>Un script Perl qui aide à la compilation des sources de <a class="glossarylink" href="./glossary.html#module" title="voir glossaire">module</a> sous forme d'Objets Dynamiques Partagés
            (Dynamic Shared Objects ou
            <a class="glossarylink" href="./glossary.html#dso" title="voir glossaire">DSO</a>s) et facilite leur installation
            dans le serveur Web Apache.<br />
            Voir : Page de manuel : <code class="program"><a href="./programs/apxs.html">apxs</a></code>
          </dd>
      
      <dt><a name="plaintext" id="plaintext">Plein Texte (Plaintext)</a></dt>
          <dd>Le texte non chiffré.</dd>
      
      
      
          <dt><a name="hypertexttransferprotocol" id="hypertexttransferprotocol">Protocole de Transfert Hypertexte
            (HyperText Transfer Protocol)</a>
            <a name="http" id="hhtp">(HTTP)</a></dt>
          <dd>Le protocole de transmission standard utilisé sur le World Wide Web.
          Apache implémente la version 1.1 du protocole, référencée comme HTTP/1.1 et
            définie par la
            <a href="http://ietf.org/rfc/rfc2616.txt">RFC 2616</a>.
          </dd>
      
          <dt><a name="messagedigest" id="messagedigest">Résumé de message
          (Message Digest)</a></dt>
          <dd>Un hachage du message, qui peut être utilisé pour vérifier
          que son contenu n'a pas été altéré durant le transfert.<br />
            Voir : <a href="ssl/">chiffrement SSL/TLS</a>
          </dd>
      
          <dt><a name="transportlayersecurity" id="transportlayersecurity">
          Sécurité de la couche Transport
          (Transport Layer Security)
            </a> <a name="tls" id="tls">(TLS)</a></dt>
        <dd>Le protocole successeur de SSL, créé par l'Internet Engineering Task
          Force (IETF) pour l'authentification et le chiffrement généraux des
          communications dans les réseaux TCP/IP. TLS version 1 est pratiquement
          identique à SSL version 3.<br />
          Voir : <a href="ssl/">chiffrement SSL/TLS</a>
        </dd>
      
          <dt><a name="session" id="session">Session</a></dt>
        <dd>Les informations sur le contexte d'une communication en général.</dd>
      
          <dt><a name="digitalsignature" id="digitalsignature">Signature numérique
          (Digital Signature)</a></dt>
          <dd>Un bloc de texte crypté qui valide un certificat ou un autre fichier.
          Une <a class="glossarylink" href="./glossary.html#certificationauthority" title="voir glossaire">Autorité de certification</a>
            crée une signature en générant une empreinte de la <em>Clé publique</em>
            fournie avec le <em>Certificat</em>; la CA chiffre ensuite l'empreinte
            avec sa propre <em>Clé privée</em>. Seule la clé publique de la CA
            peut décrypter la signature, ce qui permet de vérifier que la CA a bien
            authentifié l'entité du réseau qui possède le
            <em>Certificat</em>.<br />
            Voir : <a href="ssl/">chiffrement SSL/TLS</a>
          </dd>
      
      <dt><a name="ssleay" id="ssleay">SSLeay</a></dt>
        <dd>La bibliothèque originelle d'implémentation de SSL/TLS développée par
        Eric A. Young
        </dd>
      
      <dt><a name="ciphertext" id="ciphertext">Texte crypté
      (Ciphertext)</a></dt>
          <dd>Le résultat du passage d'un document
          <a class="glossarylink" href="./glossary.html#plaintext" title="voir glossaire">Plaintext</a> (Plein texte) par un
          <a class="glossarylink" href="./glossary.html#cipher" title="voir glossaire">Cipher</a>.<br />
          Voir : <a href="ssl/">chiffrement SSL/TLS</a>
          </dd>
      
          <dt><a name="mime-type" id="mime-type">Type MIME (MIME-type)</a></dt>
          <dd>Une méthode pour décrire le type de document transmis.  Son nom
          vient du fait que son format est issu des Multipurpose
            Internet Mail Extensions (Extensions Multi-usages de la
            Messagerie par Internet) .  Il comprend un type majeur et un type
            mineur, séparés par un slash (barre oblique).  On trouve
            entre autres types <code>text/html</code>,
            <code>image/gif</code>, et <code>application/octet-stream</code>. Dans
            HTTP, le type MIME est transmis dans l'
            <a class="glossarylink" href="./glossary.html#header" title="voir glossaire">en-tête</a> <code>Content-Type</code>.<br />
            Voir : <a href="mod/mod_mime.html">mod_mime</a>
          </dd>
      
      
          <dt><a name="environmentvariable" id="environmentvariable">
          Variable d'environnement
          (Environment Variable)</a> <a name="env-variable" id="env-variable">(env-variable)</a></dt>
          <dd>Ce sont des variables nommées gérées par le shell du système
          d'exploitation, et servant au stockage d'informations et à la
          communication entre les programmes. Apache possède aussi des variables
          internes considérées comme variables d'environnement, mais stockées dans
          des structures internes à Apache, et non dans l'environnement
          du shell.<br />
            Voir : <a href="env.html">Les variables d'environnement dans Apache</a>
          </dd>
      
           <dt><a name="x.509" id="x.509">X.509</a></dt>
        <dd>Une norme de certificat d'authentification recommandée par l'International
          Telecommunication Union (ITU-T) et utilisée pour
          l'authentification SSL/TLS.<br /> Voir : <a href="ssl/">chiffrement SSL/TLS</a>
        </dd>
      </dl>
      </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./de/glossary.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/glossary.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/glossary.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/glossary.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/glossary.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/glossary.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/glossary.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/glossary.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/caching.html���������������������������������������������������������������0000644�0000000�0000050�00000000451�13362070302�015717� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: caching.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: caching.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: caching.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/custom-error.html.ja.utf8��������������������������������������������������0000644�0000000�0000050�00000032334�13412755316�020262� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>カスタムエラーレスãƒãƒ³ã‚¹ - Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p>
      <p class="apache">Apache HTTP サームãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP サーãƒ</a> &gt; <a href="http://httpd.apache.org/docs/">ドキュメンテーション</a> &gt; <a href="./">ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4</a></div><div id="page-content"><div id="preamble"><h1>カスタムエラーレスãƒãƒ³ã‚¹</h1>
      <div class="toplang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/custom-error.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/custom-error.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/custom-error.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/custom-error.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/custom-error.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/custom-error.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">ã“ã®æ—¥æœ¬èªžè¨³ã¯ã™ã§ã«å¤ããªã£ã¦ã„ã‚‹
                  å¯èƒ½æ€§ãŒã‚りã¾ã™ã€‚
                  最近更新ã•れãŸå†…容を見るã«ã¯è‹±èªžç‰ˆã‚’ã”覧下ã•ã„。
              </div>
      
          <p>ウェブマスターãŒä½•らã‹ã®ã‚¨ãƒ©ãƒ¼ã‚„å•題ã«å¯¾ã™ã‚‹
          Apache ã®å応を設定ã§ãるよã†ã«ã™ã‚‹è¿½åŠ æ©Ÿèƒ½ã‚’æä¾›ã—ã¾ã™ã€‚</p>
      
          <p>サーãƒãŒã‚¨ãƒ©ãƒ¼ã‚„å•題を発見ã—ãŸå ´åˆã®å応をã€
          カスタマイズã—ã¦å®šç¾©ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
          <p>スクリプトã®å®Ÿè¡ŒãŒå¤±æ•—ã—㦠"500 Server Error"
          を発生ã•ã›ãŸã¨ã—ã¾ã™ã€‚ã“ã®å ´åˆã®å応をã€ã‚ˆã‚Šå¥½ã¾ã—ã„テキストやã€åˆ¥ã®
          URL (内部åŠã³å¤–部) ã¸ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ã‚·ãƒ§ãƒ³ã«ç½®ãæ›ãˆã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚
          </p>
        </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#behavior">動作</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#configuration">設定</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#custom">カスタムエラーレスãƒãƒ³ã‚¹ã¨ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆ</a></li>
      </ul><h3>å‚ç…§</h3><ul class="seealso"><li><a href="#comments_section">コメント</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="behavior" id="behavior">動作</a></h2>
          
      
          <h3>å¤ã„動作</h3>
            
      
            <p>NCSA httpd 1.3 ã¯ã€å¤ãã¦é€€å±ˆãªã‚¨ãƒ©ãƒ¼/å•題メッセージを
            è¿”ã—ã¦ã„ã¾ã—ãŸã€‚ãれã¯ã—ã°ã—ã°ãƒ¦ãƒ¼ã‚¶ã«ã¯ç„¡æ„味ã§ã‚りã€
            ã¾ãŸãれを発生ã•ã›ãŸåŽŸå› ã‚’è¨˜éŒ²ã™ã‚‹æ–¹æ³•ã‚‚æä¾›ã—ã¦ã„ã¾ã›ã‚“ã§ã—ãŸã€‚</p>
          
      
          <h3>æ–°ã—ã„動作</h3>
            
      
              <ol>
                <li>NCSA ã®ãƒãƒ¼ãƒ‰ã‚³ãƒ¼ãƒ‰ã•れãŸãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®ä»£ã‚りã«
                ä»–ã®ãƒ†ã‚­ã‚¹ãƒˆã‚’表示</li>
      
                <li>ローカル㮠URL ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆ</li>
      
                <li>外部㮠URL ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆ</li>
              </ol>
      
              <p>ã™ã‚‹ã‚ˆã†ã«ã‚µãƒ¼ãƒã‚’設定ã§ãã¾ã™ã€‚</p>
      
              <p>別㮠URL ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã™ã‚‹ã“ã¨ã¯å½¹ã«ç«‹ã¡ã¾ã™ãŒã€
              ãれã¯èª¬æ˜Žã‚’ã—ãŸã‚Šã€ã‚ˆã‚Šæ˜Žç¢ºã«èª¤ã‚Š/å•題を記録ã—ãŸã‚Šã™ã‚‹ãŸã‚ã«
              ä½•ã‹æƒ…報をä¼ãˆã‚‰ã‚Œã‚‹ã¨ãã«é™ã‚Šã¾ã™ã€‚</p>
      
              <p>ã“れを実ç¾ã™ã‚‹ãŸã‚ã«ã€ Apache ã¯æ–°ã—ã CGI ã®ã‚ˆã†ãªç’°å¢ƒå¤‰æ•°ã‚’
              定義ã—ã¾ã™:</p>
      
              <div class="example"><p><code>
                REDIRECT_HTTP_ACCEPT=*/*, image/gif,
                image/x-xbitmap, image/jpeg<br />
                 REDIRECT_HTTP_USER_AGENT=Mozilla/1.1b2 (X11; I; HP-UX
                A.09.05 9000/712)<br />
                 REDIRECT_PATH=.:/bin:/usr/local/bin:/etc<br />
                 REDIRECT_QUERY_STRING=<br />
                 REDIRECT_REMOTE_ADDR=121.345.78.123<br />
                 REDIRECT_REMOTE_HOST=ooh.ahhh.com<br />
                 REDIRECT_SERVER_NAME=crash.bang.edu<br />
                 REDIRECT_SERVER_PORT=80<br />
                 REDIRECT_SERVER_SOFTWARE=Apache/0.8.15<br />
                 REDIRECT_URL=/cgi-bin/buggy.pl
              </code></p></div>
      
              <p>é ­ã«ä»˜ã <code>REDIRECT_</code> ã«æ³¨ç›®ã—ã¦ãã ã•ã„。</p>
      
              <p>å°‘ãªãã¨ã‚‚ <code>REDIRECT_URL</code> ã¨
              <code>REDIRECT_QUERY_STRING</code> ã¯æ–°ã—ã„ URL (CGI スクリプトã‹
              CGI インクルードã§ã‚ã‚‹ã¨ä»®å®šã•れã¾ã™) ã«æ¸¡ã•れã¾ã™ã€‚
              ä»–ã®å¤‰æ•°ã¯ã€ã‚¨ãƒ©ãƒ¼ã‚„å•題ãŒèµ·ãã‚‹å‰ã«å­˜åœ¨ã—ãŸå ´åˆã«ã ã‘存在ã—ã¾ã™ã€‚
              ã‚‚ã—ã‚ãªãŸã®è¨­å®šã—㟠<code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code> ㌠<em>外部</em>リダイレクト
              (<em>ã™ãªã‚ã¡</em>ã€<code>http:</code> 
              ã®ã‚ˆã†ãªä½“ç³»åã‹ã‚‰å§‹ã¾ã‚‹ã™ã¹ã¦ã®ã‚‚ã®ã€‚ãŸã¨ãˆåŒã˜ãƒ›ã‚¹ãƒˆã‚’指ã—ã¦ã„ã¦ã‚‚)
              ãªã‚‰ã°ã€ã“れらã¯<strong>ã¾ã£ãŸã</strong>設定ã•れã¾ã›ã‚“。</p>
          
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="configuration" id="configuration">設定</a></h2>
          
      
          <p><code class="directive"><a href="./mod/core.html#allowoverride">AllowOverride</a></code> ãŒé©åˆ‡ã«è¨­å®šã•れã¦ã„れã°ã€
          .htaccess ファイル㧠<code class="directive"><a href="./mod/core.html#errordocument">ErrorDocument</a></code>
          を使用ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
      
              <p>ã“ã“ã«ã€ã„ãã¤ã‹ã®ä¾‹ã‚’挙ã’ã¾ã™ã€‚</p>
      
          <div class="example"><p><code>
            ErrorDocument 500 /cgi-bin/crash-recover <br />
            ErrorDocument 500 "Sorry, our script crashed. Oh dear" <br />
            ErrorDocument 500 http://xxx/ <br />
            ErrorDocument 404 /Lame_excuses/not_found.html <br />
            ErrorDocument 401 /Subscription/how_to_subscribe.html
          </code></p></div>
      
          <p>æ§‹æ–‡</p>
      
          <div class="example"><p><code>
            ErrorDocument &lt;3-digit-code&gt; &lt;action&gt;
          </code></p></div>
      
              <p>action (動作) ã¯ã€ä¸‹è¨˜ã®ã„ãšã‚Œã‹ã§ã™</p>
      
              <ol>
                <li>表示ã™ã‚‹ãƒ†ã‚­ã‚¹ãƒˆã€‚テキストã¯å¼•用符 (") ã§å›²ã‚“ã§æŒ‡å®šã—ã¾ã™ã€‚</li>
      
                <li>リダイレクト先ã®å¤–部 URL </li>
      
                <li>リダイレクト先ã®ãƒ­ãƒ¼ã‚«ãƒ« URL </li>
              </ol>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="custom" id="custom">カスタムエラーレスãƒãƒ³ã‚¹ã¨ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆ</a></h2>
          
      
            <p>スクリプト/SSI ã«è¿½åŠ ã®ç’°å¢ƒå¤‰æ•°ãŒåˆ©ç”¨å¯èƒ½ã«ãªã‚‹ã‚ˆã†ã«ã€
            リダイレクトã•れ㟠URL ã«å¯¾ã™ã‚‹ Apache ã®å‹•作ãŒå¤‰æ›´ã•れã¾ã—ãŸã€‚</p>
      
          <h3>å¤ã„動作</h3>
            
      
            <p>リダイレクトã•れãŸã‚¹ã‚¯ãƒªãƒ—ãƒˆã¯æ¨™æº–ã® CGI
            環境変数を利用å¯èƒ½ã§ã—ãŸã€‚ã—ã‹ã—ã€ã©ã“ã‹ã‚‰ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆ
            ã•れãŸã‹ã®æƒ…å ±ã¯æä¾›ã•れã¦ã„ã¾ã›ã‚“ã§ã—ãŸã€‚</p>
          
      
          <h3>æ–°ã—ã„動作</h3>
            
      
            <p>リダイレクトã•れãŸå…ˆã®ã‚¹ã‚¯ãƒªãƒ—トãŒä½¿ç”¨å¯èƒ½ãªã‚ˆã†ã«ã€
            æ–°ã—ã„ãŸãã•ã‚“ã®ç’°å¢ƒå¤‰æ•°ãŒåˆæœŸåŒ–ã•れã¾ã™ã€‚æ–°ã—ã„変数ã¯ã€ãれãžã‚Œ
            <code>REDIRECT_</code> ã§å§‹ã¾ã‚Šã¾ã™ã€‚
            <code>REDIRECT_</code> ã§å§‹ã¾ã‚‹ç’°å¢ƒå¤‰æ•°ã¯ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•れるå‰ã«å­˜åœ¨ã—ã¦ã„ãŸ
            CGI 環境変数ã®é ­ã« <code>REDIRECT_</code> を付ã‘ã¦ä½œæˆã•れã¾ã™ã€‚
            <em>ã™ãªã‚ã¡</em>ã€<code>HTTP_USER_AGENT</code> 㯠
            <code>REDIRECT_HTTP_USER_AGENT</code> ã«ãªã‚Šã¾ã™ã€‚
            ã“ã‚Œã‚‰ã®æ–°ã—ã„変数ã«åŠ ãˆã¦ã€Apache ã¯ã€
            スクリプトãŒãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå…ƒã®ãƒˆãƒ¬ãƒ¼ã‚¹ã‚’助ã‘ã‚‹ãŸã‚ã«
            <code>REDIRECT_URL</code> 㨠<code>REDIRECT_STATUS</code>
            を定義ã—ã¾ã™ã€‚アクセスログã«ã¯å…ƒã® URL ã¨ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•れ㟠URL
            ã®ä¸¡æ–¹ãŒè¨˜éŒ²ã•れã¾ã™ã€‚</p>
      
          <p>ErrorDocument ㌠CGI スクリプトã¸ã®ãƒ­ãƒ¼ã‚«ãƒ«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚’
          指定ã—ã¦ã„ã‚‹å ´åˆã¯ã€ãれを起動ã™ã‚‹ã“ã¨ã«ãªã£ãŸã‚¨ãƒ©ãƒ¼ã®çŠ¶æ…‹ã‚’
          クライアントã¾ã§ç¢ºå®Ÿã«ä¼ãˆã‚‹ãŸã‚ã« <code>"Status:" </code>
          ヘッダをå«ã‚€ã¹ãã§ã™ã€‚例ãˆã°ã€ErrorDocument 用㮠Perl
          スクリプトã¯ä»¥ä¸‹ã®ã‚ˆã†ãªã‚‚ã®ã‚’å«ã‚€ã‹ã‚‚ã—れã¾ã›ã‚“。
          </p>
      
            <div class="example"><p><code>
              ... <br />
              print  "Content-type: text/html\n"; <br />
              printf "Status: %s Condition Intercepted\n", $ENV{"REDIRECT_STATUS"}; <br />
              ...
            </code></p></div>
      
          <p>スクリプト㌠<code>404 Not Found</code> ã®ã‚ˆã†ãª
          特定ã®ã‚¨ãƒ©ãƒ¼ã‚³ãƒ³ãƒ‡ã‚£ã‚·ãƒ§ãƒ³ã‚’扱ã†ãŸã‚ã ã‘ã«ä½¿ã‚れる場åˆã¯ã€
          代ã‚りã«ç‰¹å®šã®ã‚³ãƒ¼ãƒ‰ã¨ã‚¨ãƒ©ãƒ¼ãƒ†ã‚­ã‚¹ãƒˆã‚’使用ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚</p>
          
        </div></div>
      <div class="bottomlang">
      <p><span>翻訳済ã¿è¨€èªž: </span><a href="./en/custom-error.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/custom-error.html" hreflang="es" rel="alternate" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/custom-error.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/custom-error.html" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/custom-error.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/custom-error.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">コメント</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/custom-error.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />ã“ã®æ–‡æ›¸ã¯ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã§æä¾›ã•れã¦ã„ã¾ã™ã€‚.</p>
      <p class="menu"><a href="./mod/">モジュール</a> | <a href="./mod/directives.html">ディレクティブ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">用語</a> | <a href="./sitemap.html">サイトマップ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_2.html.tr.utf8����������������������������������������������0000644�0000000�0000050�00000050663�13447004010�020774� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="tr" xml:lang="tr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Apache HTTP Sunucusu 2.2’de Yeni olan Özellikler - Apache HTTP Sunucusu Sürüm 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p>
      <p class="apache">Apache HTTP Sunucusu Sürüm 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Sunucusu</a> &gt; <a href="http://httpd.apache.org/docs/">Belgeleme</a> &gt; <a href="./">Sürüm 2.4</a></div><div id="page-content"><div id="preamble"><h1>Apache HTTP Sunucusu 2.2’de Yeni olan Özellikler</h1>
      <div class="toplang">
      <p><span>Mevcut Diller: </span><a href="./en/new_features_2_2.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_2.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ko/new_features_2_2.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_2.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/new_features_2_2.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
        <p>Bu belgede Apache HTTP Sunucusunun 2.0 ve 2.2 sürümleri arasındaki
          başlıca farklara değinilmiştir. 1.3 sürümüne göre yeni özellikler için <a href="new_features_2_0.html">Apache 2.0’da Yeni olan Özellikler</a>
          belgesine bakınız.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#core">Çekirdekteki Gelişmeler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#module">Modüllerdeki Gelişmeler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#programs">Programlardaki GeliÅŸmeler</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#developer">Modül Geliştirici Değişiklikleri</a></li>
      </ul><h3>Ayrıca bakınız:</h3><ul class="seealso"><li><a href="#comments_section">Yorumlar</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="core" id="core">Çekirdekteki Gelişmeler</a></h2>
          
          <dl>
      
            <dt>Authn/Authz</dt>
            <dd>Mevcut kimlik doğrulama ve yetkilendirme modüllerinin iç işleyişi
              yeniden düzenlendi. Yeni <code>mod_authn_alias</code> modülü
              (2.3/2.4 sürümlerinde kaldırılmıştır) belli kimlik doğrulama
              yapılandırmalarını büyük oranda basitleştirebilir. Bu değişikliklerin
              kullanıcıları ve modül yazarlarını nasıl etkilediğini öğrenmek için
              <a href="#module">modül değişikliklerine</a> ve <a href="#developer">geliştirici değişikliklerine</a> bakabilirsiniz.</dd>
      
            <dt>Önbellekleme</dt>
            <dd><code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>, <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code> ve
              <code>mod_mem_cache</code> (2.3/2.4 sürümlerinde kaldırılmıştır)
              modüllerinde büyük oranda değişikliğe gidilerek bunlar deneysel
              olmaktan çıkarılıp üretim amaçlı modüller haline getirildiler.
              <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code> tarafından kullanılan disk
              alanının  <code class="program"><a href="./programs/htcacheclean.html">htcacheclean</a></code> tarafından
              düzenli aralıklarla temizlenebilmesi sağlandı.</dd>
      
            <dt>Yapılandırma</dt>
            <dd>Öntanımlı yapılandırma basitleştirildi ve modüler bir yapıya
              kavuşturuldu. Sık kullanılan ortak özellikleri etkinleştirmekte
              kullanılan yapılandırmalar gruplanarak bunların Apache ile gelmesi ve
              ana sunucu yapılandırılırken yapılandırmaya kolayca eklenebilmesi
              sağlandı.</dd>
      
            <dt>Nazikçe Durdurma</dt>
            <dd><code class="module"><a href="./mod/prefork.html">prefork</a></code>, <code class="module"><a href="./mod/worker.html">worker</a></code> ve
              <code class="module"><a href="./mod/event.html">event</a></code>  MPM’leri artık <code class="program"><a href="./programs/httpd.html">httpd</a></code>’yi <a href="stopping.html#gracefulstop"><code>graceful-stop</code></a>
              sinyali sayesinde nazikçe durdurabilmektedir.
              <code class="program"><a href="./programs/httpd.html">httpd</a></code> programının sonlandırılmasındaki gecikmelere
              karşı bir önlem olarak, isteğe bağlı bir zaman aşımı belirtmeyi
              mümkün kılan <code class="directive"><a href="./mod/mpm_common.html#gracefulshutdowntimeout">GracefulShutdownTimeout</a></code> yönergesi
              sayesinde sunum sürüyor olsa bile <code class="program"><a href="./programs/httpd.html">httpd</a></code>
              sonlandırılabilmektedir.</dd>
      
            <dt>Vekil Sunucu</dt>
            <dd>Yeni <code class="module"><a href="./mod/mod_proxy_balancer.html">mod_proxy_balancer</a></code> modülü ile
              <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code> için yük dengeleme hizmetleri sağlanmış,
              yeni <code class="module"><a href="./mod/mod_proxy_ajp.html">mod_proxy_ajp</a></code> modülü ile <a href="http://tomcat.apache.org/">Apache Tomcat</a> tarafından
              kullanılan <em>Apache JServ Protokolünün 1.3 sürümü</em> için destek
              eklenmiÅŸtir.</dd>
      
            <dt>Düzenli İfade Kütüphanesi Güncellemesi</dt>
            <dd>Apache, <a href="http://www.pcre.org/">Perl uyumlu düzenli ifade
              kütüphanesinin 5.0 sürümünü</a> (PCRE) içermektedir.
              <code class="program"><a href="./programs/configure.html">configure</a></code> betiÄŸinin <code>--with-pcre</code>
              seçeneği sayesinde <code class="program"><a href="./programs/httpd.html">httpd</a></code> programı PCRE destekli
              olarak derlenebilmektedir.</dd>
      
            <dt>Akıllı Süzme</dt>
            <dd><code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code> çıktı süzgeç zincirinin devingen olarak
              yapılandırılmasını sağlar. Süzgeçlerin herhangi bir istek veya yanıt
              başlığına veya bir ortam değişkenine dayanarak koşullu olarak
              yerleştirilmesini mümkün kılar ve bunu yaparken 2.0 mimarisindeki
              sorunlu bağımlılıklar ve sıralama sorunlarının da üstesinden
              gelir.</dd>
      
            <dt>Büyük Dosya (&gt;2GB) Desteği</dt>
            <dd><code class="program"><a href="./programs/httpd.html">httpd</a></code> artık günümüzün 32 bitlik Unix
              sistemlerinde bulunan 2 GB’lık büyük dosyaları destekleyecek tarzda
              derlenebilmektedir. 2 GB’lık istek gövdelerine destek de ayrıca
              eklenmiÅŸtir.</dd>
      
            <dt>Event MPM</dt>
            <dd><code class="module"><a href="./mod/event.html">event</a></code> MPM modülü sürekli bağlantı isteklerinin
              işlenmesi ve bağlantıların kabul edilmesi için ayrı bir evre
              kullanır. Sürekli bağlantı (keepalive) isteklerinin işlenmesi
              geleneksel olarak httpd’nin buna bir <code class="module"><a href="./mod/worker.html">worker</a></code>
              adamasını gerektirirdi. Bu adanmış <code class="module"><a href="./mod/worker.html">worker</a></code> bağlantı
              zaman aşımına uğrayıncaya değin tekrar kullanılamazdı.</dd>
      
            <dt>SQL Veritabanı Desteği</dt>
            <dd><code class="module"><a href="./mod/mod_dbd.html">mod_dbd</a></code> modülü <code>apr_dbd</code> arayüzü ile
              birlikte, ihtiyacı olan modüllere SQL desteği sağlar. Evreli MPM’ler
              için bağlantı havuzlamasını destekler.</dd>
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="module" id="module">Modüllerdeki Gelişmeler</a></h2>
          
          <dl>
            <dt>Authn/Authz</dt>
            <dd>Kimlik DoÄŸrulama, Yetkilendirme ve EriÅŸim Denetimi ile ilgili
              modüller özetli kimlik doğrulamasına daha iyi destek sağlamak
              amacıyla yeniden isimlendirildi. Örneğin, <code>mod_auth</code>
              modülü şimdi <code class="module"><a href="./mod/mod_auth_basic.html">mod_auth_basic</a></code> ve
              <code class="module"><a href="./mod/mod_authn_file.html">mod_authn_file</a></code> diye iki modüle bölünmüştür.;
              <code>mod_auth_dbm</code> modülünün ismi
              <code class="module"><a href="./mod/mod_authn_dbm.html">mod_authn_dbm</a></code> ve <code>mod_access</code>  modülünün
              ismi de <code class="module"><a href="./mod/mod_authz_host.html">mod_authz_host</a></code> olarak deÄŸiÅŸtirilmiÅŸtir.
              Ayrıca, belli kimlik doğrulama yapılandırmalarını basitleştirmek
              üzere <code>mod_authn_alias</code> diye yeni bir modül vardır
              (2.3/2.4 sürümlerinde kaldırılmıştır).
            </dd>
      
            <dt><code class="module"><a href="./mod/mod_authnz_ldap.html">mod_authnz_ldap</a></code></dt>
            <dd>Bu modül 2.0 sürümü <code>mod_auth_ldap</code> modülünün 2.2
              <code>Authn/Authz</code> arayüzüne bir uyarlamasıdır. <code class="directive"><a href="./mod/mod_authz_core.html#require">Require</a></code> yönergesine LDAP
              öznitelik değerlerinin ve karmaşık arama süzgeçlerinin kullanımı gibi
              yeni özellikler eklenmiştir.</dd>
      
            <dt><code class="module"><a href="./mod/mod_authz_owner.html">mod_authz_owner</a></code></dt>
            <dd>Dosya sistemi üzerindeki dosyalara erişimi dosya sahibine göre
              düzenleyebilmeyi sağlayan yeni bir modüldür.</dd>
      
            <dt><code class="module"><a href="./mod/mod_version.html">mod_version</a></code></dt>
            <dd>Çalışan sunucunun sürüm numarasına göre belli yapılandırma
              bloklarını etkinleştirebilen bir modüldür.</dd>
      
            <dt><code class="module"><a href="./mod/mod_info.html">mod_info</a></code></dt>
            <dd>Apache tarafından çözümlenen haliyle yapılandırma yönergelerinin
              gösterilmesini sağlayan yeni <code>?config</code> parametresini
              ekler. Modül ayrıca, <code>httpd -V</code>’nin yaptığı gibi ek olarak
              derleme bilgisini ve tüm istek kancalarının sırasını da gösterir.</dd>
      
            <dt><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></dt>
            
            <dd>TLS şifrelemesini HTTP/1.1 için güncelleyen <a href="http://www.ietf.org/rfc/rfc2817.txt">RFC 2817</a> için destek
              saÄŸlar.</dd>
      
            <dt><code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code></dt>
            <dd><code>mod_imap</code> modülünün ismi yanlış anlamalara meydan
              vermemek için <code class="module"><a href="./mod/mod_imagemap.html">mod_imagemap</a></code> olarak değiştirildi.</dd>
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="programs" id="programs">Programlardaki GeliÅŸmeler</a></h2>
          
          <dl>
            <dt><code class="program"><a href="./programs/httpd.html">httpd</a></code></dt>
            <dd>Mevcut yapılandırmaya göre yüklenen modülleri listelemek için
              <code>-M</code> diye yeni bir komut satırı seçeneği eklendi.
              <code>-l</code> seçeneğinin aksine, bu seçenekle elde edilen liste
              <code class="module"><a href="./mod/mod_so.html">mod_so</a></code> üzerinden yüklenen DSO’ları içerir.</dd>
      
            <dt><code class="program"><a href="./programs/httxt2dbm.html">httxt2dbm</a></code></dt>
            <dd><code class="directive"><a href="./mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> yönergesinde
              <code>dbm</code> eşlem türü ile kullanmak üzere metin girdilerden DBM
              dosyaları üretmek için kullanılan yeni bir program.</dd>
          </dl>
        </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="developer" id="developer">Modül Geliştirici Değişiklikleri</a></h2>
          
          <dl>
            <dt><a class="glossarylink" href="./glossary.html#apr" title="sözlüğe bakınız">APR</a> 1.0 Programlama Arayüzü</dt>
      
            <dd>Apache 2.2’de APR 1.0 API kullanılmıştır.  Kullanımı önerilmeyen
              tüm işlevler ve simgeler <code>APR</code> ve
              <code>APR-Util</code>’den kaldırılmıştır. Ayrıntılar için <a href="http://apr.apache.org/">APR Sitesine bakınız</a>.</dd>
      
            <dt>Authn/Authz</dt>
            <dd>Dağıtımla gelen kimlik doğrulama ve yetkilendirme modüllerinin
                isimleri aşağıdaki gibi değiştirildi:
                <ul>
                <li><code>mod_auth_*</code>  -&gt; HTTP kimlik doğrulamasını
                  gerçekleştiren modüller.</li>
                <li><code>mod_authn_*</code> -&gt; Kimlik doğrulamasının artalanına
                  destek sağlayan modüller.</li>
                <li><code>mod_authz_*</code> -&gt; Yetkilendirmeyi (veya eriÅŸimi)
                  gerçekleştiren modüller.</li>
                <li><code>mod_authnz_*</code> -&gt; Kimlik doÄŸrulama ve
                  yetkilendirmeyi birlikte gerçekleştiren modüller.</li>
                </ul>
                Yeni kimlik doğrulama artalanının oluşturulmasını büyük oranda
                kolaylaştıran yeni bir kimlik doğrulama artalanı sağlayıcı şeması
                vardır.</dd>
      
            <dt>Bağlantı Hatalarının Günlüklenmesi</dt>
      
            <dd>İstemci bağlantısında ortaya çıkan hataları günlüğe kaydetmek için
              <code>ap_log_cerror</code> isminde yeni bir işlev eklendi. Böyle bir
              durumda günlük kaydı istemcinin IP adresini içermektedir.</dd>
      
            <dt>Deneme Yapılandırma Kancası Eklendi</dt>
      
            <dd>Kullanıcı, <code class="program"><a href="./programs/httpd.html">httpd</a></code>’yi sadece <code>-t</code>
              seçeneği ile kullandığı takdirde özel kod icra edilmesini isteyen
              modüllere yardımcı olmak üzere <code>test_config</code> diye yeni bir
              kanca iÅŸlev eklendi.</dd>
      
            <dt>Evreli MPM’lerin Yığıt Boyutunun Ayarlanması</dt>
      
            <dd>Tüm evreli MPM’lerin yığıt boyutunu ayarlamak üzere <code class="directive"><a href="./mod/mpm_common.html#threadstacksize">ThreadStackSize</a></code> isminde yeni bir
              yönerge eklendi. Öntanımlı yığıt boyutunun küçük olduğu platformlarda
              bazı üçüncü parti modüller tarafından buna ihtiyaç duyulmaktadır.</dd>
      
            <dt>Çıktı süzgeçlerinde protokoller</dt>
      
            <dd>Evvelce her süzgeç etkilediğini yanıt başlıklarının doğru olarak
              üretilmesini sağlamak zorundaydı. Süzgeçler artık protokol yönetimini
              <code>ap_register_output_filter_protocol</code> veya
              <code>ap_filter_protocol</code> işlevi üzerinden
              <code class="module"><a href="./mod/mod_filter.html">mod_filter</a></code> modülüne devredebilmektedir.</dd>
      
            <dt>İzleme kancası eklendi</dt>
            <dd>İzleme kancası, modüllerin ana (tepe) süreçteki sıradan/zamanlanmış
              işlerini yapacak modülleri etkinleştirir.</dd>
      
            <dt>Düzenli ifade programlama aryüzü değişti</dt>
      
            <dd><code>pcreposix.h</code> başlık dosyası artık yok; yerine
              <code>ap_regex.h</code> dosyası geçti. Eski başlık dosyasınca ifade
              olunan POSIX.2 <code>regex.h</code> gerçeklenimi şimdi
              <code>ap_</code> isim alanı altında <code>ap_regex.h</code> başlık
              dosyasındadır. <code>regcomp</code>, <code>regexec</code> gibi
              işlevlerin yerine de artık <code>ap_regcomp</code>,
              <code>ap_regexec</code> işlevleri geçerlidir.</dd>
      
            <dt>DBD Arayüzü (SQL Veritabanı API)</dt>
      
            <dd><p>Apache 1.x ve 2.0’da, modüller, SQL veritabanlarını kendileri
              yönetebilmek için sorumluluğu alacak bir SQL artalanına ihtiyaç
              duymaktadır. Her biri kendi bağlantısına sahip bir sürü modül
              olduğunda bu yöntem çok verimsiz olabilmektedir.</p>
      
            <p>Apache 2.1 ve sonrasında veritabanı bağlantılarını (evreli olsun
              olmasın MPM’lerin eniyilenmiş stratejileri dahil) yönetmek için
              <code>ap_dbd</code> arayüzü kullanılmıştır. APR 1.2 ve sonrasında ise
              veritabanı ile etkileşim <code>apr_dbd</code> arayüzüyle
              sağlanmıştır.</p>
      
            <p>Yeni modüllerin tüm SQL veritabanı işlemlerinde bu arayüzü
              kullanmaları ÖNERİlir.  Mevcut uygulamaların uygulanabildiği takdirde
              hem kullanıcılarına önerilen bir seçenek olarak hem de şeffaf olarak
              kullanmak üzere kendilerini güncellemeleri ÖNERİir.</p></dd>
          </dl>
        </div></div>
      <div class="bottomlang">
      <p><span>Mevcut Diller: </span><a href="./en/new_features_2_2.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_2.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ko/new_features_2_2.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_2.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./tr/new_features_2_2.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Yorumlar</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/new_features_2_2.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br /><a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a> altında lisanslıdır.</p>
      <p class="menu"><a href="./mod/">Modüller</a> | <a href="./mod/directives.html">Yönergeler</a> | <a href="http://wiki.apache.org/httpd/FAQ">SSS</a> | <a href="./glossary.html">Terimler</a> | <a href="./sitemap.html">Site Haritası</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������������������������������������������������������������httpd-2.4.41/docs/manual/stopping.html.es�����������������������������������������������������������0000644�0000000�0000050�00000045067�13412755316�016623� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es"><head>
      <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Iniciar y Parar el servidor Apache - Servidor HTTP Apache Versión 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="./glossary.html">Glosario</a> | <a href="./sitemap.html">Mapa del sitio web</a></p>
      <p class="apache">Versión 2.4 del Servidor HTTP Apache</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Servidor HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentación</a> &gt; <a href="./">Versión 2.4</a></div><div id="page-content"><div id="preamble"><h1>Iniciar y Parar el servidor Apache</h1>
      <div class="toplang">
      <p><span>Idiomas disponibles: </span><a href="./de/stopping.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/stopping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/stopping.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/stopping.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/stopping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/stopping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/stopping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      <div class="outofdate">Esta traducción podría estar
                  obsoleta. Consulte la versión en inglés de la
                  documentación para comprobar si se han producido cambios
                  recientemente.</div>
      
          <p>Este documento explica como iniciar y parar el servidor Apache
           en sistemas tipo Unix. Los usuarios de Windows NT, 2000 y XP
           deben consultar la sección <a href="platform/windows.html#winsvc">Ejecutar Apache como un
           servicio</a> y los usuario de Windows 9x y ME deben consultar <a href="platform/windows.html#wincons">Ejecutar Apache como una
           Aplicación de Consola</a> para obtener información
           sobre como controlar Apache en esas plataformas.</p>
      </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#introduction">Introducción</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#term">Parar Apache</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#graceful">Reinicio Graceful</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#hup">Reiniciar Apache</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#race">Apéndice: señales y race conditions</a></li>
      </ul><h3>Consulte también</h3><ul class="seealso"><li><a href="programs/httpd.html">httpd</a></li><li><a href="programs/apachectl.html">apachectl</a></li><li><a href="#comments_section">Comentarios</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="introduction" id="introduction">Introducción</a></h2>
      
          <p>Para parar y reiniciar Apache, hay que enviar la señal
          apropiada al proceso padre <code>httpd</code> que se esté
          ejecutando.  Hay dos maneras de enviar estas señales.  En
          primer lugar, puede usar el comando de Unix <code>kill</code> que
          envía señales directamente a los procesos. Puede que
          tenga varios procesos <code>httpd</code> ejecutandose en su
          sistema, pero las señales deben enviarse solamente al proceso
          padre, cuyo pid está especificado en la directiva <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code>. Esto quiere decir que no
          debe necesitar enviar señales a ningún proceso excepto
          al proceso padre. Hay tres señales que puede enviar al
          proceso padre: <code><a href="#term">TERM</a></code>, <code><a href="#hup">HUP</a></code>, y <code><a href="#graceful">USR1</a></code>, que van a ser descritas a
          continuación.</p>
      
          <p>Para enviar una señal al proceso padre debe escribir un
          comando como el que se muestra en el ejemplo:</p>
      
      <div class="example"><p><code>kill -TERM `cat /usr/local/apache2/logs/httpd.pid`</code></p></div>
      
          <p>La segunda manera de enviar señales a los procesos
          <code>httpd</code> es usando las opciones de línea de
          comandos <code>-k</code>: <code>stop</code>, <code>restart</code>,
          y <code>graceful</code>, como se muestra más abajo.  Estas
          opciones se le pueden pasar al binario <a href="programs/httpd.html">httpd</a>, pero se recomienda que se
          pasen al script de control <a href="programs/apachectl.html">apachectl</a>, que a su vez los
          pasará a <code>httpd</code>.</p>
      
          <p>Después de haber enviado las señales que desee a
          <code>httpd</code>, puede ver como progresa el proceso
          escribiendo:</p>
      
      <div class="example"><p><code>tail -f /usr/local/apache2/logs/error_log</code></p></div>
      
          <p>Modifique estos ejemplos para que coincidan con la
          configuración que tenga especificada en las directivas
          <code class="directive"><a href="./mod/core.html#serverroot">ServerRoot</a></code> y <code class="directive"><a href="./mod/mpm_common.html#pidfile">PidFile</a></code> en su fichero principal de
          configuración.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="term" id="term">Parar Apache</a></h2>
      
      <dl><dt>Señal: TERM</dt>
      <dd><code>apachectl -k stop</code></dd>
      </dl>
      
          <p>Enviar las señales <code>TERM</code> o <code>stop</code>
          al proceso padre hace que se intenten eliminar todos los procesos
          hijo inmediatamente. Esto puede tardar algunos minutos. Una vez
          que hayan terminado todos los procesos hijo, terminará el
          proceso padre. Cualquier petición en proceso terminará
          inmediatanmente, y ninguna petición posterior será
          atendida.</p>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="graceful" id="graceful">Reinicio Graceful</a></h2>
      
      <dl><dt>Señal: USR1</dt>
      <dd><code>apachectl -k graceful</code></dd>
      </dl>
      
          <p>Las señales <code>USR1</code> o <code>graceful</code>
          hacen que el proceso padre <em>indique</em> a sus hijos que
          terminen después de servir la petición que estén
          atendiendo en ese momento (o de inmediato si no están
          sirviendo ninguna petición). El proceso padre lee de nuevo
          sus ficheros de configuración y vuelve a abrir sus ficheros
          log. Conforme cada hijo va terminando, el proceso padre lo va
          sustituyendo con un hijo de una nueva <em>generación</em> con
          la nueva configuración, que empeciezan a servir peticiones
          inmediatamente.</p>
      
          <div class="note">En algunas plataformas que no permiten usar
          <code>USR1</code> para reinicios graceful, puede usarse una
          señal alternativa (como <code>WINCH</code>). Tambien puede
          usar <code>apachectl graceful</code> y el script de control
          enviará la señal adecuada para su plataforma.</div>
      
          <p>Apache está diseñado para respetar en todo momento la
          directiva de control de procesos de los MPM, así como para
          que el número de procesos y hebras disponibles para servir a
          los clientes se mantenga en los valores adecuados durante el
          proceso de reinicio.  Aún más, está diseñado
          para respetar la directiva <code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code> de la siguiente
          manera: si después de al menos un segundo el nuevo hijo de la
          directiva <code class="directive"><a href="./mod/mpm_common.html#startservers">StartServers</a></code>
          no ha sido creado, entonces crea los suficientes para se atienda
          el trabajo que queda por hacer. Así, se intenta mantener
          tanto el número de hijos adecuado para el trabajo que el
          servidor tenga en ese momento, como respetar la configuración
          determinada por los parámetros de la directiva
          <code class="directive">StartServers</code>.</p>
      
          <p>Los usuarios del módulo <code class="module"><a href="./mod/mod_status.html">mod_status</a></code>
          notarán que las estadísticas del servidor
          <strong>no</strong> se ponen a cero cuando se usa la señal
          <code>USR1</code>. Apache fue escrito tanto para minimizar el
          tiempo en el que el servidor no puede servir nuevas peticiones
          (que se pondrán en cola por el sistema operativo, de modo que
          se no se pierda ningún evento), como para respetar sus
          parámetros de ajuste. Para hacer esto, tiene que guardar el
          <em>scoreboard</em> usado para llevar el registro de los procesos
          hijo a través de las distintas generaciones.</p>
      
          <p>El mod_status también usa una <code>G</code> para indicar
          que esos hijos están todavía sirviendo peticiones
          previas al reinicio graceful.</p>
      
          <p>Actualmente no existe ninguna manera de que un script con un
          log de rotación usando <code>USR1</code> sepa con seguridad
          que todos los hijos que se registraron en el log con anterioridad
          al reinicio han terminado. Se aconseja que se use un retardo
          adecuado después de enviar la señal <code>USR1</code>
          antes de hacer nada con el log antiguo. Por ejemplo, si la mayor
          parte las visitas que recibe de usuarios que tienen conexiones de
          baja velocidad tardan menos de 10 minutos en completarse, entoces
          espere 15 minutos antes de hacer nada con el log antiguo.</p>
      
          <div class="note">Si su fichero de configuración tiene errores cuando
          haga el reinicio, entonces el proceso padre no se reinciciará
          y terminará con un error. En caso de un reinicio graceful,
          también dejará a los procesos hijo ejecutandose mientras
          existan.  (Estos son los hijos de los que se está saliendo de
          forma graceful y que están sirviendo sus últimas
          peticiones.) Esto provocará problemas si intenta reiniciar el
          servidor -- no será posible conectarse a la lista de puertos
          de escucha. Antes de reiniciar, puede comprobar que la sintaxis de
          sus ficheros de configuracion es correcta con la opción de
          línea de comandos <code>-t</code> (consulte <a href="programs/httpd.html">httpd</a>). No obstante, esto no
          garantiza que el servidor se reinicie correctamente. Para
          comprobar que no hay errores en los ficheros de
          configuración, puede intentar iniciar <code>httpd</code> con
          un usuario diferente a root. Si no hay errores, intentará
          abrir sus sockets y logs y fallará porque el usuario no es
          root (o porque el <code>httpd</code> que se está ejecutando
          en ese momento ya está conectado a esos puertos). Si falla
          por cualquier otra razón, entonces casi seguro que hay
          algún error en alguno de los ficheros de configuración y
          debe corregir ese o esos errores antes de hacer un reinicio
          graceful.</div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="hup" id="hup">Reiniciar Apache</a></h2>
      
      <dl><dt>Señal: HUP</dt>
      <dd><code>apachectl -k restart</code></dd>
      </dl>
      
          <p>El envío de las señales <code>HUP</code> o
          <code>restart</code> al proceso padre hace que los procesos hijo
          terminen como si le enviá ramos la señal
          <code>TERM</code>, para eliminar el proceso padre. La diferencia
          está en que estas señales vuelven a leer los archivos de
          configuración y vuelven a abrir los ficheros log. Se genera
          un nuevo conjunto de hijos y se continúa sirviendo
          peticiones.</p>
      
          <p>Los usuarios del módulo <code class="module"><a href="./mod/mod_status.html">mod_status</a></code>
          notarán que las estadísticas del servidor se ponen a
          cero cuando se envía la señal <code>HUP</code>.</p>
      
      <div class="note">Si su fichero de configuración contiene errores, cuando
      intente reiniciar, el proceso padre del servidor no se
      reiniciará, sino que terminará con un error. Consulte
      más arriba cómo puede solucionar este problema.</div>
      </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="race" id="race">Apéndice: señales y race conditions</a></h2>
      
          <p>Con anterioridad a la versión de Apache 1.2b9 había
          varias <em>race conditions</em> implicadas en las señales
          para parar y reiniciar procesos (una descripción sencilla de
          una race condition es: un problema relacionado con el momento en
          que suceden las cosas, como si algo sucediera en momento en que no
          debe, y entonces el resultado esperado no se corresponde con el
          obtenido). Para aquellas arquitecturas que tienen el conjunto de
          características "adecuadas", se han eliminado tantas race
          conditions como ha sido posible. Pero hay que tener en cuenta que
          todavía existen race conditions en algunas arquitecturas.</p>
      
          <p>En las arquitecturas que usan un <code class="directive"><a href="./mod/mpm_common.html#scoreboardfile">ScoreBoardFile</a></code> en disco, existe la
          posibilidad de que se corrompan los scoreboards. Esto puede hacer
          que se produzca el error "bind: Address already in use"
          (después de usar<code>HUP</code>) o el error "long lost child
          came home!"  (después de usar <code>USR1</code>). En el
          primer caso se trata de un error irrecuperable, mientras que en el
          segundo, solo ocurre que el servidor pierde un slot del
          scoreboard. Por lo tanto, sería aconsejable usar reinicios
          graceful, y solo hacer reinicios normales de forma
          ocasional. Estos problemas son bastante complicados de solucionar,
          pero afortunadamente casi ninguna arquitectura necesita un fichero
          scoreboard. Consulte la documentación de la directiva
          <code class="directive"><a href="./mod/mpm_common.html#scoreboardfile">ScoreBoardFile</a></code> para ver
          las arquitecturas que la usan.</p>
      
          <p>Todas las arquitecturas tienen una pequeña race condition
          en cada proceso hijo implicada en la segunda y subsiguientes
          peticiones en una conexión HTTP persistente
          (KeepAlive). Puede ser que el servidor termine después de
          leer la línea de petición pero antes de leer cualquiera
          de las cebeceras de petición. Hay una solución que fue
          descubierta demasiado tarde para la incluirla en versión
          1.2. En teoria esto no debe suponer ningún problema porque el
          cliente KeepAlive ha de esperar que estas cosas pasen debido a los
          retardos de red y a los timeouts que a veces dan los
          servidores. En la practica, parece que no afecta a nada más
          -- en una sesión de pruebas, un servidor se reinició
          veinte veces por segundo y los clientes pudieron navegar sin
          problemas por el sitio web sin encontrar problemas ni para
          descargar una sola imagen ni encontrar un solo enlace roto. </p>
      </div></div>
      <div class="bottomlang">
      <p><span>Idiomas disponibles: </span><a href="./de/stopping.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/stopping.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./es/stopping.html" title="Español">&nbsp;es&nbsp;</a> |
      <a href="./fr/stopping.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/stopping.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/stopping.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./tr/stopping.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comentarios</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/stopping.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Licencia bajo los términos de la <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Módulos</a> | <a href="./mod/directives.html">Directivas</a> | <a href="http://wiki.apache.org/httpd/FAQ">Preguntas Frecuentes</a> | <a href="./glossary.html">Glosario</a> | <a href="./sitemap.html">Mapa del sitio web</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/new_features_2_0.html.fr.utf8����������������������������������������������0000644�0000000�0000050�00000044751�13412755316�020773� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
      <!--
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
                    This file is generated from xml source: DO NOT EDIT
              XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
            -->
      <title>Vue d'ensemble des nouvelles fonctionnalités de la
          version 2.0 du serveur HTTP Apache - Serveur HTTP Apache Version 2.4</title>
      <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
      <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
      <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
      <script src="./style/scripts/prettify.min.js" type="text/javascript">
      </script>
      
      <link href="./images/favicon.ico" rel="shortcut icon" /></head>
      <body id="manual-page"><div id="page-header">
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p>
      <p class="apache">Serveur HTTP Apache Version 2.4</p>
      <img alt="" src="./images/feather.png" /></div>
      <div class="up"><a href="./"><img title="&lt;-" alt="&lt;-" src="./images/left.gif" /></a></div>
      <div id="path">
      <a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">Serveur HTTP</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>Vue d'ensemble des nouvelles fonctionnalités de la
          version 2.0 du serveur HTTP Apache</h1>
      <div class="toplang">
      <p><span>Langues Disponibles: </span><a href="./de/new_features_2_0.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/new_features_2_0.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_0.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/new_features_2_0.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/new_features_2_0.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_0.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./ru/new_features_2_0.html" hreflang="ru" rel="alternate" title="Russian">&nbsp;ru&nbsp;</a> |
      <a href="./tr/new_features_2_0.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div>
      
              <p>Ce document décrit les changements majeurs apportés entre les 
              versions 1.3 et 2.0 du serveur HTTP Apache.</p>
          </div>
      <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#core">Améliorations du Système de Base</a></li>
      <li><img alt="" src="./images/down.gif" /> <a href="#module">Amélioration des Modules</a></li>
      </ul><h3>Voir aussi</h3><ul class="seealso"><li><a href="upgrading.html">Migrer à 2.0 depuis la version 1.3</a></li><li><a href="#comments_section">Commentaires</a></li></ul></div>
      <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="core" id="core">Améliorations du Système de Base</a></h2>
              
      
              <dl>
                  <dt>Threading Unix</dt>
      
                  <dd>Sur les systèmes Unix qui supportent les threads
      	    POSIX, Apache httpd
                  peut à présent tourner en mode hybride multi-processus et 
                  multi-threadé, ce qui augmente l'extensibilité et la performance 
                  du serveur pour la plupart des configurations.</dd>
      
                  <dt>Nouveau Système de Compilation</dt>
      
                  <dd>Le processus de compilation a été refait de A à Z; 
                  il utilise à présent <code>autoconf</code> et <code>libtool</code>, 
                  ce qui rend la compilation d'Apache httpd plus familière aux utilisateurs 
                  d'autre logiciels de mème type.</dd>
      
                  <dt>Support Multiprotocole</dt>
      
                  <dd>Le serveur HTTP Apache dispose désormais de
      	    l'infrastructure nécessaire pour supporter
                  d'autres protocoles. Le module <code class="module"><a href="./mod/mod_echo.html">mod_echo</a></code> illustre ces 
                  possibilités.</dd>
      
                  <dt>Support amélioré des Plate-formes non-Unix</dt>
              
                  <dd>Le serveur HTTP Apache 2.0 se montre plus rapide et plus stable sur les plate-formes 
                  non Unix, telles BeOS, OS/2, NetWare et Windows. L'apparition des 
                  <a href="mpm.html">Modules Multi-Processus</a> (MPMs), ainsi que de 
                  la bibliothèque "Apache Portable Runtime" (APR) permet à Apache de 
                  tirer parti des API natives de ces plate-formes, sans s'appuyer sur leurs 
                  couches POSIX souvent boguées et peu optimisées.</dd>
      
                  <dt>Nouvelle API d'Apache httpd</dt>
      
                  <dd>L'Interface de Programmation (API) des modules a beaucoup changé 
                  avec le passage à la version 2.0.
                  Les problèmes d'ordre et de priorité des modules, rencontrés 
                  avec la version 1.3, devraient maintenant être résolus. Apache 2.0 
                  gère ces problèmes de façon automatique. L'ordre des modules 
                  est géré au moyen de "crochets" (hooks), ce qui rend la gestion 
                  flexible. De nouveaux appels ont été également créés 
                  afin de permettre l'implémentation d'autres fonctions dans les modules, 
                  sans devoir corriger le noyau du serveur HTTP Apache.</dd>
      
                  <dt>Support IPv6</dt>
      
                  <dd>Sur les systèmes où la bibliothèque Apache Portable Runtime 
                  supporte IPv6, Apache peut par défaut écouter sur des interfaces 
                  de connexions IPv6. Les directives <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code>, 
                  <code class="directive"><a href="./mod/core.html#namevirtualhost">NameVirtualHost</a></code> et 
                  <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code> supportent également 
                  les adresses IPv6 (comme par exemple, dans "<code>Listen[2001:db8::1]:8080</code>").</dd>
      
                  <dt>Filtering</dt>
      
                  <dd>Il est maintenant possible d'écrire des modules
      	    pour Apache  httpd pour filtrer
                  les flux de données entrant ou sortant du serveur. A titre d'exemple, 
                  il est possible de filtrer des directives Server Side Include de la sortie 
                  standard d'un script CGI, au moyen du filtre <code>INCLUDES</code> fourni
                  par le module <code class="module"><a href="./mod/mod_include.html">mod_include</a></code>. Le module
                  <code class="module"><a href="./mod/mod_ext_filter.html">mod_ext_filter</a></code> permet quant à lui l'utilisation comme
                  filtres de programmes externes à Apache, de la même manière 
                  qu'on peut utiliser des programmes CGI comme Handlers.</dd>
      
                  <dt>Réponses d'Erreurs Multilangues</dt>
      
                  <dd>Les messages d'erreur envoyés au navigateur existent à présent en
                  plusieurs langues avec des documents SSI. Ces messages peuvent être
                  personnalisés par l'administrateur afin de s'intégrer avec le site web.</dd>
      
                  <dt>Simplification de la Configuration</dt>
      
                  <dd>Beaucoup de directives, auparavant peu claires, ont été simplifiées.
                  Les directives <code>Port</code> et <code>BindAddress</code>, souvent
                  sources d'incompréhension, ont disparus. Désormais seule la directive 
                  <code class="directive"><a href="./mod/mpm_common.html#listen">Listen</a></code> sert de liaison pour les 
                  adresses IP; la directive <code class="directive"><a href="./mod/core.html#servername">ServerName</a></code> ne 
                  précise le nom du serveur et son port que pour les redirections et la
                  gestion des hôtes virtuels.</dd>
      
                  <dt>Support natif de l'Unicode sous Windows NT</dt>
      
                  <dd>Apache httpd 2.0 sur Windows NT utilise à présent l'utf-8 pour tous les 
                  noms de fichiers. Ces noms de fichiers sont directement traduits vers
                  l'encodage Unicode du système de fichiers, ce qui permet le support
                  multilangue pour toutes les installations sur la famille NT de Windows, y
                  compris Windows 2000 et Windows XP.<em>Ce support n'est pas fonctionnel
                  pour Windows 95, 98 ni ME, qui utilisent les pages de code locales pour
                  les accès au système de fichiers, comme auparavant.</em></dd>
      
                  <dt>Mise à jour de la Bibliothèque d'Expressions Rationnelles</dt>
      
                  <dd>Apache httpd 2.0 contient la <a href="http://www.pcre.org/">bibliothèque 
                  d'expressions rationnelles compatible Perl </a>(Perl Compatible Regular 
                  Expression Library - PCRE). Toutes les expressions rationnelles sont dont
                  gérées avec la syntaxe de Perl 5, plus puissante.</dd>
      
              </dl>
          </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
      <div class="section">
      <h2><a name="module" id="module">Amélioration des Modules</a></h2>
              
      
              <dl>
                  <dt><code class="module"><a href="./mod/mod_ssl.html">mod_ssl</a></code></dt>
      
                  <dd>Apparu dans Apache httpd 2.0, ce module est une interface aux protocoles de 
                  chiffrement SSL/TLS fournis par OpenSSL.</dd>
      
                  <dt><code class="module"><a href="./mod/mod_dav.html">mod_dav</a></code></dt>
      
                  <dd>Apparu dans Apache httpd 2.0, ce module implémente les spécifications HTTP de 
                  gestion distribuée de versions et de rédaction (Distributed Authoring and 
                  Versioning - DAV), destinées à la mise en ligne et à la maintenance des 
                  contenus Web.</dd>
      
                  <dt><code class="module"><a href="./mod/mod_deflate.html">mod_deflate</a></code></dt>
      
                  <dd>Module apparu dans Apache httpd 2.0, mod_deflate permet aux navigateurs qui 
                  le supportent de demander la compression des contenus envoyés par le serveur. 
                  Cela a l'avantage de réduite l'occupation de la bande passante.</dd>
      
                  <dt><code class="module">mod_auth_ldap</code></dt>
      
                  <dd>Apparu dans Apache httpd 2.0.41, ce module permet aux administrateurs
                  d'utiliser un arbre LDAP pour gérer la base d'utilisateurs pour les 
                  Authentifications Basiques HTTP. Un module voisin,
                  <code class="module"><a href="./mod/mod_ldap.html">mod_ldap</a></code>, permet de globaliser les connexions à l'arbre LDAP
                  et de garder en mémoire cache ces accès.</dd>
          
                  <dt><code class="module"><a href="./mod/mod_auth_digest.html">mod_auth_digest</a></code></dt>
      
                  <dd>Améliore les fonctions de cache sur une session entre les différents
                  processus, en utilisant de la mémoire partagée.</dd>
      
                  <dt><code class="module"><a href="./mod/mod_charset_lite.html">mod_charset_lite</a></code></dt>
      
                  <dd>Apparu dans Apache httpd 2.0, ce module expérimental permet la conversion 
                  et l'enregistrement entre jeux de caractères.</dd>
      
                  <dt><code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code></dt>
      
                  <dd>Apparu dans Apache httpd 2.0, ce module implémente les fonctionnalités du 
                  module <code>mod_mmap_static</code> présent du serveur
      	    HTTP Apache 1.3, et offre des 
                  fonctions plus avancées pour la gestion du cache.</dd>
      
                  <dt><code class="module"><a href="./mod/mod_headers.html">mod_headers</a></code></dt>
      
                  <dd>Ce module gagne beaucoup de flexibilité avec Apache
      	    httpd 2.0 : on peut 
                  désormais l'utiliser pour modifier les en-têtes des requêtes 
                  utilisés par <code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code>, et pour positionner les 
                  en-têtes des réponses de manière conditionnelle.</dd>
      
                  <dt><code class="module"><a href="./mod/mod_proxy.html">mod_proxy</a></code></dt>
      
                  <dd>Le module proxy a été réécrit de A à Z. Il tire 
                  maintenant avantage de la nouvelle infrastructure de filtrage, et implémente 
                  un mandataire plus fiable, et conforme aux normes HTTP/1.1. De nouvelles 
                  sections de configuration ajoutées à 
                  <code class="directive"><a href="./mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code> 
                  donnent un contrôle plus lisible et un traitement plus rapide des requêtes 
                  mandatées ; les configurations surchargées <code>&lt;Directory 
                  "proxy:..."&gt;</code> ne sont pas supportées. Le module a aussi été 
                  fragmenté en plusieurs modules qui gèrent chacun leur protocole : 
                  <code>proxy_connect</code>, <code>proxy_ftp</code> et 
                  <code>proxy_http</code>.</dd>
      
                  <dt><code class="module"><a href="./mod/mod_negotiation.html">mod_negotiation</a></code></dt>
      
                  <dd>Une nouvelle directive, <code class="directive"><a href="./mod/mod_negotiation.html#forcelanguagepriority">ForceLanguagePriority</a></code> a été ajoutée, 
                  elle permet de garantir que le client reçoit un seul document dans tous les 
                  cas, au lieu de réponses NOT ACCEPTABLE ou MULTIPLE CHOICES. Les 
                  algorithmes gérant la négociation et les vues multiples (MultiViews) ont 
                  été nettoyés et donnent des réponses plus logiques. Un nouveau format de 
                  carte de types (map type) qui peut gérer le contenu de documents a 
                  aussi été ajouté.</dd>
          
                  <dt><code class="module"><a href="./mod/mod_autoindex.html">mod_autoindex</a></code></dt>
      
                  <dd>Les listes auto-générées par Autoindex sont à présent 
                  configurables, et peuvent utiliser des tables HTML pour une mise en forme plus propre. 
                  L'ordre d'affichage des fichiers est également finement paramètrable, 
                  comme pour le tri par version, et le filtrage par caractères jokers du 
                  listage du répertoire.</dd>
      
                  <dt><code class="module"><a href="./mod/mod_include.html">mod_include</a></code></dt>
      
                  <dd>De nouvelles directives permettent de modifier la valeur par défaut 
                  des drapeaux <em>start</em> et <em>end</em> des éléments SSI. Ces directives 
                  permettent à la configuration d'affichage de dates et heures d'être 
                  effectuée dans le fichier de configuration principal, plutôt que dans le 
                  document SSI. Les réponses données par des recherches par expressions 
                  rationnelles (qui gèrent à présent les regex Perl) sont 
                  recupérées au moyen des variables <code>$0</code> à <code>$9</code>.</dd>
      
                  <dt><code class="module">mod_auth_dbm</code></dt>
      
                  <dd>Plusieurs bases de données DBM sont supportées, et sélectionnables 
                  via la directive <code class="directive">AuthDBMType</code>.</dd>
              </dl>
          </div></div>
      <div class="bottomlang">
      <p><span>Langues Disponibles: </span><a href="./de/new_features_2_0.html" hreflang="de" rel="alternate" title="Deutsch">&nbsp;de&nbsp;</a> |
      <a href="./en/new_features_2_0.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |
      <a href="./fr/new_features_2_0.html" title="Français">&nbsp;fr&nbsp;</a> |
      <a href="./ja/new_features_2_0.html" hreflang="ja" rel="alternate" title="Japanese">&nbsp;ja&nbsp;</a> |
      <a href="./ko/new_features_2_0.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
      <a href="./pt-br/new_features_2_0.html" hreflang="pt-br" rel="alternate" title="Português (Brasil)">&nbsp;pt-br&nbsp;</a> |
      <a href="./ru/new_features_2_0.html" hreflang="ru" rel="alternate" title="Russian">&nbsp;ru&nbsp;</a> |
      <a href="./tr/new_features_2_0.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
      </div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
      <script type="text/javascript"><!--//--><![CDATA[//><!--
      var comments_shortname = 'httpd';
      var comments_identifier = 'http://httpd.apache.org/docs/2.4/new_features_2_0.html';
      (function(w, d) {
          if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
              d.write('<div id="comments_thread"><\/div>');
              var s = d.createElement('script');
              s.type = 'text/javascript';
              s.async = true;
              s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
              (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
          }
          else { 
              d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
          }
      })(window, document);
      //--><!]]></script></div><div id="footer">
      <p class="apache">Copyright 2019 The Apache Software Foundation.<br />Autorisé sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
      <p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossaire</a> | <a href="./sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
      if (typeof(prettyPrint) !== 'undefined') {
          prettyPrint();
      }
      //--><!]]></script>
      </body></html>�����������������������httpd-2.4.41/docs/manual/new_features_2_0.html������������������������������������������������������0000644�0000000�0000050�00000001460�13362070302�017453� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: new_features_2_0.html.de
      Content-Language: de
      Content-type: text/html; charset=ISO-8859-1
      
      URI: new_features_2_0.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: new_features_2_0.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: new_features_2_0.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: new_features_2_0.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: new_features_2_0.html.pt-br
      Content-Language: pt-br
      Content-type: text/html; charset=ISO-8859-1
      
      URI: new_features_2_0.html.ru.koi8-r
      Content-Language: ru
      Content-type: text/html; charset=KOI8-R
      
      URI: new_features_2_0.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/docs/manual/urlmapping.html������������������������������������������������������������0000644�0000000�0000050�00000000751�13362070302�016504� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������# GENERATED FROM XML -- DO NOT EDIT
      
      URI: urlmapping.html.en
      Content-Language: en
      Content-type: text/html; charset=ISO-8859-1
      
      URI: urlmapping.html.fr.utf8
      Content-Language: fr
      Content-type: text/html; charset=UTF-8
      
      URI: urlmapping.html.ja.utf8
      Content-Language: ja
      Content-type: text/html; charset=UTF-8
      
      URI: urlmapping.html.ko.euc-kr
      Content-Language: ko
      Content-type: text/html; charset=EUC-KR
      
      URI: urlmapping.html.tr.utf8
      Content-Language: tr
      Content-type: text/html; charset=UTF-8
      �����������������������httpd-2.4.41/buildconf������������������������������������������������������������������������������0000755�0000000�0000050�00000024667�13154520653�013152� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh
      #
      # Licensed to the Apache Software Foundation (ASF) under one or more
      # contributor license agreements.  See the NOTICE file distributed with
      # this work for additional information regarding copyright ownership.
      # The ASF licenses this file to You under the Apache License, Version 2.0
      # (the "License"); you may not use this file except in compliance with
      # the License.  You may obtain a copy of the License at
      #
      #     http://www.apache.org/licenses/LICENSE-2.0
      #
      # Unless required by applicable law or agreed to in writing, software
      # distributed under the License is distributed on an "AS IS" BASIS,
      # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
      # See the License for the specific language governing permissions and
      # limitations under the License.
      #
      #
      # buildconf: Build the support scripts needed to compile from a
      #            checked-out version of the source code.
      
      # version check for AC_PROG_CC_C99
      ac_version=`${AUTOCONF:-autoconf} --version 2>/dev/null|sed -e 's/^[^0-9]*//;s/[a-z]* *$//;q'`
      case "$ac_version" in
      # versions older than 2.50 are denied by AC_PREREQ
      2.5*)
          echo WARNING: You are using an outdated version of autoconf.
          echo WARNING: This may lead to less than optimal performance of httpd.
          echo WARNING: You should use autoconf 2.60 or newer.
          sleep 1
          ;;
      esac
      
      # set a couple of defaults for where we should be looking for our support libs.
      # can be overridden with --with-apr=[dir] and --with-apr-util=[dir]
      
      apr_src_dir="srclib/apr ../apr"
      apu_src_dir=""
      
      while test $# -gt 0 
      do
          # Normalize
          case "$1" in
          -*=*) optarg=`echo "$1" | sed 's/[-_a-zA-Z0-9]*=//'` ;;
          *) optarg= ;;
          esac
      
          case "$1" in
          --with-apr=*)
              apr_src_dir=$optarg
              ;;
      
          --with-apr-util=*)
              apu_src_dir=$optarg
              ;;
      
          -h|--help)
              cat <<EOF
      buildconf: generates the files needed to configure httpd.
      
      Usage: $0 [OPTION]...
      
      Configuration:
        -h, --help               display this help and exit
      
        --with-apr=SRCDIR        define a space-separated list of directories to
                                 search for the APR source code. If, instead of a
                                 directory, an apr-config executable name is passed,
                                 APR-Config Mode is enabled (see below). Defaults to
                                 "srclib/apr ../apr"
        --with-apr-util=SRCDIR   define a space-separated list of directories to
                                 search for the APR-util source code. Defaults to the
                                 same location as the --with-apr SRCDIR, but with
                                 "apr" replaced with "apr-util" or "aprutil". Ignored
                                 in APR-Config Mode.
      
      APR-Config Mode:
      
        When passing an apr-config executable to --with-apr, buildconf will attempt to
        copy build scripts from various installed locations on your system instead of
        an APR source tree. This allows you to configure httpd from source without
        also requiring you to download the APR and/or APR-util sources.
      
        For example:
      
            ./buildconf --with-apr=apr-1-config
      
        For this functionality to work reliably, you must have automake >= 1.12 and be
        using a distribution that includes both find_apr.m4 and find_apu.m4 in the
        --installbuilddir pointed to by apr-config.
      
      Environment variables used by buildconf:
        AUTOCONF           autoconf executable name [autoconf]
        AUTOMAKE           automake executable name [automake]
        AUTOHEADER         autoheader executable name [autoheader]
      EOF
              exit
              ;;
      
          *)
              echo "unknown option $1 (try --help for usage)"
              exit 1
              ;;
          esac
      
          shift
      done
      
      #
      # Check to be sure that we have the srclib dependencies checked-out, or that a
      # working apr-config installation has been specified.
      #
      
      should_exit=0
      apr_config=         # path to apr-config (empty if using a source directory)
      apr_found=0
      apu_found=0
      apr_major_version=2
      
      for dir in $apr_src_dir
      do
          if [ -f "${dir}/build/apr_common.m4" ]; then
              echo "found apr source: ${dir}"
              apr_src_dir=$dir
              apr_found=1
              break
          elif which "${dir}" >/dev/null 2>&1; then
              # We're using apr-config. Do a sanity check.
              apr_config=`which "${dir}"`
              echo "testing apr-config executable: ${apr_config}"
      
              version=`"${apr_config}" --version`
              version=`echo "${version}" | sed -n '/^[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*$/p'`
      
              if [ -z "${version}" ]; then
                  echo "apr-config gave us an invalid --version"
                  apr_config=
                  continue
              fi
      
              echo "using apr-config version ${version}"
              apr_major_version=${version} # we'll make a real "major version" later
              apr_src_dir=`"${apr_config}" --installbuilddir`
              apr_found=1
              break
          fi
      done
      
      if [ $apr_found -lt 1 ]; then
          echo ""
          echo "You don't have a copy of the apr source in srclib/apr. "
          echo "Please get the source using the following instructions," 
          echo "or specify the location of the source with " 
          echo "--with-apr=[path to apr] :"
          echo ""
          echo "   svn co http://svn.apache.org/repos/asf/apr/apr/trunk srclib/apr"
          echo ""
          should_exit=1
      elif [ -n "${apr_config}" ]; then
          apr_major_version=`echo "${apr_major_version}" | sed 's/\..*//'`
      else
          apr_major_version=`grep "#define APR_MAJOR_VERSION" \
                            $apr_src_dir/include/apr_version.h | sed 's/[^0-9]//g'`
      fi
      
      # Find APR-util. Note: if we're using apr-config, we can completely skip this,
      # even if APR is version 1. That's because we only end up caring about
      # find_apu.m4, which is not actually installed in the standard APR-util
      # distribution to begin with.
      if [ -z "${apr_config}" -a $apr_major_version -lt 2 ] ; then
          if test -z "$apu_src_dir"; then
              apu_src_dir=`echo $apr_src_dir | sed -e 's#/apr#/apr-util#g;'`
              apu_src_dir="$apu_src_dir `echo $apr_src_dir | sed -e 's#/apr#/aprutil#;g'`"
              apu_src_dir="$apu_src_dir srclib/apr-util ../apr-util"
          fi
      
          for dir in $apu_src_dir
          do
              if [ -f "${dir}/Makefile.in" ]; then
                  echo "found apr-util source: ${dir}"
                  apu_src_dir=$dir
                  apu_found=1
                  break
              fi
          done
      
          if [ $apu_found -lt 1 ]; then
              echo ""
              echo "You don't have a copy of the apr-util source in srclib/apr-util. "
              echo "Please get one the source using the following instructions, "
              echo "or specify the location of the source with "
              echo "--with-apr-util=[path to apr-util]:"
              echo ""
              echo "   svn co http://svn.apache.org/repos/asf/apr/apr-util/branches/1.5.x srclib/apr-util"
              echo ""
              should_exit=1
          fi
      fi
      
      if [ $should_exit -gt 0 ]; then
          exit 1
      fi
      
      # These are temporary until Roy finishes the other build changes
      #
      touch .deps
      rm -f aclocal.m4
      rm -f generated_lists
      
      # Remove autoconf 2.5x cache directories
      rm -rf autom4te*.cache
      
      case "`uname`" in
      *BSD/OS*)
          ./build/bsd_makefile;;
      esac
      #
      # end temporary stuff
      
      apr_configure="$apr_src_dir/configure"
      if [ $apr_major_version -lt 2 ] ; then
          aprutil_configure="$apu_src_dir/configure"
      fi
      config_h_in="include/ap_config_auto.h.in"
      
      cross_compile_warning="warning: AC_TRY_RUN called without default to allow cross compiling"
      
      if [ "$apr_src_dir" = "srclib/apr" ]; then
          echo rebuilding $apr_configure
          (cd srclib/apr && ./buildconf) || {
              echo "./buildconf failed for apr"
              exit 1
          }
          rm -f srclib/apr/apr.spec
      fi
      
      apr_src_dir=`cd $apr_src_dir && pwd` 
      
      if [ $apr_major_version -lt 2 ] ; then
          if [ "$apu_src_dir" = "srclib/apr-util" ]; then
              echo rebuilding $aprutil_configure
              (cd srclib/apr-util && ./buildconf --with-apr=$apr_src_dir) || {
                  echo "./buildconf failed for apr-util" 
                  exit 1
              }
              rm -f srclib/apr-util/apr-util.spec
          fi
      
          apu_src_dir=`cd $apu_src_dir && pwd`
      fi
      
      echo copying build files
      if [ -n "${apr_config}" ]; then
          # If we're using apr-config, we switch things up a little bit:
          # - use automake's config.* scripts instead of APR's
          # - use the included PrintPath instead of copying from APR
          # - assume find_apu.m4 is also in APR's --installbuilddir
      
          # Figure out where to copy config.* from.
          automake=${AUTOMAKE:-automake}
          am_libdir=`"${automake}" --print-libdir`
          cp "${am_libdir}/config.guess" "${am_libdir}/config.sub" build
      
          # Remember that in this case, $apr_src_dir points to the build directory.
          cp "$apr_src_dir/apr_common.m4" "$apr_src_dir/find_apr.m4" build
          if [ $apr_major_version -lt 2 ] ; then
              cp "$apr_src_dir/find_apu.m4" build
          fi
      else
          cp $apr_src_dir/build/config.guess $apr_src_dir/build/config.sub \
             $apr_src_dir/build/PrintPath $apr_src_dir/build/apr_common.m4 \
             $apr_src_dir/build/find_apr.m4 build
          if [ $apr_major_version -lt 2 ] ; then
              cp $apu_src_dir/build/find_apu.m4 build
          fi
      fi
      
      # Remove any libtool files so one can switch between libtool 1.3
      # and libtool 1.4 by simply rerunning the buildconf script.
      (cd build ; rm -f ltconfig ltmain.sh)
      
      if [ -z "${apr_config}" ]; then
          # Optionally copy libtool-1.3.x files
          if [ -f $apr_src_dir/build/ltconfig ]; then
              cp $apr_src_dir/build/ltconfig build
          fi
          if [ -f $apr_src_dir/build/ltmain.sh ]; then
              cp $apr_src_dir/build/ltmain.sh build
          fi
      fi
      
      echo rebuilding $config_h_in
      rm -f $config_h_in
      ${AUTOHEADER:-autoheader} 2>&1 | grep -v "$cross_compile_warning"
      
      echo rebuilding configure
      rm -f config.cache
      ${AUTOCONF:-autoconf} 2>&1 | grep -v "$cross_compile_warning"
      
      # Remove autoconf 2.5x cache directories
      rm -rf autom4te*.cache
      
      if [ -f `which cut` ]; then
        echo rebuilding rpm spec file
        ( VMMN=`build/get-version.sh mmn include/ap_mmn.h MODULE_MAGIC_NUMBER`
          EPOCH=`build/get-version.sh epoch include/ap_release.h AP_SERVER`
          REVISION=`build/get-version.sh all include/ap_release.h AP_SERVER`
          VERSION=`echo $REVISION | cut -d- -s -f1`
          RELEASE=`echo $REVISION | cut -d- -s -f2`
          if [ "x$VERSION" = "x" ]; then
            VERSION=$REVISION
            RELEASE=1
          fi
          cat ./build/rpm/httpd.spec.in | \
          sed -e "s/APACHE_VERSION/$VERSION/" \
              -e "s/APACHE_RELEASE/$RELEASE/" \
              -e "s/APACHE_MMN/$VMMN/" \
              -e "s/APACHE_EPOCH/$EPOCH/" \
          > httpd.spec )
      fi
      
      # ensure that the ap_expr expression parser sources are never regenerated
      # when running make
      echo fixing timestamps for ap_expr sources
      cd server
      touch util_expr_parse.y util_expr_scan.l
      sleep 1
      touch util_expr_parse.c util_expr_parse.h util_expr_scan.c
      cd ..
      
      exit 0
      �������������������������������������������������������������������������httpd-2.4.41/Makefile.in����������������������������������������������������������������������������0000644�0000000�0000050�00000025636�13332554177�013327� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������
      SUBDIRS = srclib os server modules support
      CLEAN_SUBDIRS = test
      
      PROGRAM_NAME         = $(progname)
      PROGRAM_SOURCES      = modules.c
      PROGRAM_LDADD        = buildmark.o $(HTTPD_LDFLAGS) $(PROGRAM_DEPENDENCIES) $(PCRE_LIBS) $(EXTRA_LIBS) $(AP_LIBS) $(LIBS)
      PROGRAM_PRELINK      = $(COMPILE) -c $(top_srcdir)/server/buildmark.c
      PROGRAM_DEPENDENCIES = \
        server/libmain.la \
        $(BUILTIN_LIBS) \
        $(MPM_LIB) \
        os/$(OS_DIR)/libos.la
      
      sbin_PROGRAMS   = $(PROGRAM_NAME)
      TARGETS         = $(sbin_PROGRAMS) $(shared_build) $(other_targets)
      INSTALL_TARGETS = install-conf install-htdocs install-error install-icons \
      	install-other install-cgi install-include install-suexec install-build \
      	install-man
      
      DISTCLEAN_TARGETS  = include/ap_config_auto.h include/ap_config_layout.h \
      	include/apache_probes.h \
      	modules.c config.cache config.log config.status build/config_vars.mk \
      	build/rules.mk docs/conf/httpd.conf docs/conf/extra/*.conf shlibtool \
      	build/pkg/pkginfo build/config_vars.sh
      EXTRACLEAN_TARGETS = configure include/ap_config_auto.h.in generated_lists \
      	httpd.spec
      
      include $(top_builddir)/build/rules.mk
      include $(top_srcdir)/build/program.mk
      
      install-conf:
      	@echo Installing configuration files
      	@$(MKINSTALLDIRS) $(DESTDIR)$(sysconfdir) $(DESTDIR)$(sysconfdir)/extra
      	@$(MKINSTALLDIRS) $(DESTDIR)$(sysconfdir)/original/extra
      	@cd $(top_srcdir)/docs/conf; \
      	for i in mime.types magic; do \
      	    if test ! -f $(DESTDIR)$(sysconfdir)/$$i; then \
      	        $(INSTALL_DATA) $$i $(DESTDIR)$(sysconfdir); \
      	    fi; \
      	done; \
      	for j in $(top_srcdir)/docs/conf $(top_builddir)/docs/conf ; do \
      	    cd $$j ; \
      	    for i in httpd.conf extra/*.conf; do \
      	    	if [ -f $$i ] ; then \
      	    	( \
      	    		n_lm=`awk 'BEGIN {n=0} /@@LoadModule@@/ {n+=1} END {print n}' < $$i`; \
      	    		if test $$n_lm -eq 0 -o "x$(MPM_MODULES)$(DSO_MODULES)" = "x"; then \
      	    			sed -e 's#@@ServerRoot@@#$(prefix)#g' \
      	    				-e 's#@@Port@@#$(PORT)#g' \
      	    				-e 's#@@SSLPort@@#$(SSLPORT)#g' \
      	    				-e '/@@LoadModule@@/d' \
      	    				< $$i; \
      	    		else \
      	    			sed -n -e '/@@LoadModule@@/q' \
      	    				-e 's#@@ServerRoot@@#$(prefix)#g' \
      	    				-e 's#@@Port@@#$(PORT)#g' \
      	    				-e 's#@@SSLPort@@#$(SSLPORT)#g' \
      	    				-e 'p' \
      	    				< $$i; \
      	    			if echo " $(DSO_MODULES) "|$(EGREP) " cgi " > /dev/null ; then \
      	    				have_cgi="1"; \
      	    			else \
      	    				have_cgi="0"; \
      	    			fi; \
      	    			if echo " $(DSO_MODULES) "|$(EGREP) " cgid " > /dev/null ; then \
      	    				have_cgid="1"; \
      	    			else \
      	    				have_cgid="0"; \
      	    			fi; \
      	    			for j in $(MPM_MODULES) "^EOL^"; do \
      	    				if test $$j != "^EOL^"; then \
      	    					if echo ",$(ENABLED_MPM_MODULE),"|$(EGREP) ",$$j," > /dev/null ; then \
      	    						loading_disabled=""; \
      	    					else \
      	    						loading_disabled="#"; \
      	    					fi; \
      						echo "$${loading_disabled}LoadModule $${j}_module $(rel_libexecdir)/mod_$${j}.so"; \
      					fi; \
      	    			done; \
      	    			for j in $(DSO_MODULES) "^EOL^"; do \
      	    				if test $$j != "^EOL^"; then \
      	    					if echo ",$(ENABLED_DSO_MODULES),"|$(EGREP) ",$$j," > /dev/null ; then \
      	    						loading_disabled=""; \
      	    					else \
      	    						loading_disabled="#"; \
      		    					if test "$(LOAD_ALL_MODULES)" = "yes"; then \
      		    						loading_disabled=""; \
      	    						fi; \
      	    					fi; \
      						if test $$j = "cgid" -a "$$have_cgi" = "1"; then \
      							echo "<IfModule !mpm_prefork_module>"; \
      							echo "	$${loading_disabled}LoadModule $${j}_module $(rel_libexecdir)/mod_$${j}.so"; \
      							echo "</IfModule>"; \
      						elif test $$j = "cgi" -a "$$have_cgid" = "1"; then \
      							echo "<IfModule mpm_prefork_module>"; \
      							echo "	$${loading_disabled}LoadModule $${j}_module $(rel_libexecdir)/mod_$${j}.so"; \
      							echo "</IfModule>"; \
      						else \
      							echo "$${loading_disabled}LoadModule $${j}_module $(rel_libexecdir)/mod_$${j}.so"; \
      						fi; \
      					fi; \
      	    			done; \
      	    			sed -e '1,/@@LoadModule@@/d' \
      	    				-e '/@@LoadModule@@/d' \
      	    				-e 's#@@ServerRoot@@#$(prefix)#g' \
      	    				-e 's#@@Port@@#$(PORT)#g' \
      	    				-e 's#@@SSLPort@@#$(SSLPORT)#g' \
      	    				< $$i; \
      	    		fi \
      	    	) > $(DESTDIR)$(sysconfdir)/original/$$i; \
      	    	chmod 0644 $(DESTDIR)$(sysconfdir)/original/$$i; \
      	    	file=$$i; \
      	    	if [ "$$i" = "httpd.conf" ]; then \
      	    		file=`echo $$i|sed s/.*.conf/$(PROGRAM_NAME).conf/`; \
      	    	fi; \
      	    	if test ! -f $(DESTDIR)$(sysconfdir)/$$file; then \
      	    		$(INSTALL_DATA) $(DESTDIR)$(sysconfdir)/original/$$i $(DESTDIR)$(sysconfdir)/$$file; \
      	    	fi; \
      	    	fi; \
      	    done ; \
      	done ; \
      	if test -f "$(builddir)/envvars-std"; then \
      	    cp -p envvars-std $(DESTDIR)$(sbindir); \
      	    if test ! -f $(DESTDIR)$(sbindir)/envvars; then \
      	        cp -p envvars-std $(DESTDIR)$(sbindir)/envvars ; \
      	    fi ; \
      	fi
      
      # Create a sanitized config_vars.mk
      build/config_vars.out: build/config_vars.mk
      	@$(SHELL) build/config_vars.sh < build/config_vars.mk > build/config_vars.out
      
      install-build: build/config_vars.out
      	@echo Installing build system files 
      	@$(MKINSTALLDIRS) $(DESTDIR)$(installbuilddir) 
      	@for f in $(top_srcdir)/build/*.mk build/*.mk; do \
      	 $(INSTALL_DATA) $$f $(DESTDIR)$(installbuilddir); \
      	done
      	@for f in $(top_builddir)/config.nice \
      		  $(top_srcdir)/build/mkdir.sh \
      		  $(top_srcdir)/build/instdso.sh; do \
      	 $(INSTALL_PROGRAM) $$f $(DESTDIR)$(installbuilddir); \
      	done
      	@$(INSTALL_DATA) build/config_vars.out $(DESTDIR)$(installbuilddir)/config_vars.mk
      	@rm build/config_vars.out
      
      htdocs-srcdir = $(top_srcdir)/docs/docroot
      
      docs:
      	@if test -d $(top_srcdir)/docs/manual/build; then \
      	    cd $(top_srcdir)/docs/manual/build && ./build.sh all; \
      	else \
      	    echo 'For details on generating the docs, please read:'; \
      	    echo '  http://httpd.apache.org/docs-project/docsformat.html'; \
      	fi
      
      validate-xml:
      	@if test -d $(top_srcdir)/docs/manual/build; then \
      	    cd $(top_srcdir)/docs/manual/build && ./build.sh validate-xml; \
      	else \
      	    echo 'For details on generating the docs, please read:'; \
      	    echo '  http://httpd.apache.org/docs-project/docsformat.html'; \
      	fi
      
      dox:
      	doxygen $(top_srcdir)/docs/doxygen.conf
      
      install-htdocs:
      	-@if [ -d $(DESTDIR)$(htdocsdir) ]; then \
                 echo "[PRESERVING EXISTING HTDOCS SUBDIR: $(DESTDIR)$(htdocsdir)]"; \
              else \
      	    echo Installing HTML documents ; \
      	    $(MKINSTALLDIRS) $(DESTDIR)$(htdocsdir) ; \
      	    if test -d $(htdocs-srcdir) && test "x$(RSYNC)" != "x" && test -x $(RSYNC) ; then \
      		$(RSYNC) --exclude .svn -rlpt --numeric-ids $(htdocs-srcdir)/ $(DESTDIR)$(htdocsdir)/; \
      	    else \
      		test -d $(htdocs-srcdir) && (cd $(htdocs-srcdir) && cp -rp * $(DESTDIR)$(htdocsdir)) ; \
      		cd $(DESTDIR)$(htdocsdir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
      	    fi; \
      	fi
      
      install-error:
      	-@if [ -d $(DESTDIR)$(errordir) ]; then \
                 echo "[PRESERVING EXISTING ERROR SUBDIR: $(DESTDIR)$(errordir)]"; \
              else \
      	    echo Installing error documents ; \
      	    $(MKINSTALLDIRS) $(DESTDIR)$(errordir) ; \
      	    cd $(top_srcdir)/docs/error && cp -rp * $(DESTDIR)$(errordir) ; \
      	    test "x$(errordir)" != "x" && cd $(DESTDIR)$(errordir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
      	fi
      
      install-icons:
      	-@if [ -d $(DESTDIR)$(iconsdir) ]; then \
                 echo "[PRESERVING EXISTING ICONS SUBDIR: $(DESTDIR)$(iconsdir)]"; \
              else \
      	    echo Installing icons ; \
      	    $(MKINSTALLDIRS) $(DESTDIR)$(iconsdir) ; \
      	    cd $(top_srcdir)/docs/icons && cp -rp * $(DESTDIR)$(iconsdir) ; \
      	    test "x$(iconsdir)" != "x" && cd $(DESTDIR)$(iconsdir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
      	fi
      
      install-cgi:
      	-@if [ -d $(DESTDIR)$(cgidir) ];then \
      	    echo "[PRESERVING EXISTING CGI SUBDIR: $(DESTDIR)$(cgidir)]"; \
      	else \
      	   echo Installing CGIs ; \
      	   $(MKINSTALLDIRS) $(DESTDIR)$(cgidir) ; \
      	   cd $(top_srcdir)/docs/cgi-examples && cp -rp * $(DESTDIR)$(cgidir) ; \
      	   test "x$(cgidir)" != "x" && cd $(DESTDIR)$(cgidir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
      	fi
      
      install-other:
      	@test -d $(DESTDIR)$(logfiledir) || $(MKINSTALLDIRS) $(DESTDIR)$(logfiledir)
      	@test -d $(DESTDIR)$(runtimedir) || $(MKINSTALLDIRS) $(DESTDIR)$(runtimedir)
      	@for ext in dll x; do \
      		file=apachecore.$$ext; \
      		if test -f $$file; then \
      			cp -p $$file $(DESTDIR)$(libdir); \
      		fi; \
      	done; \
      	file=httpd.dll; \
      	if test -f $$file; then \
      		cp -p $$file $(DESTDIR)$(bindir); \
      	fi;
      
      INSTALL_HEADERS = \
      	include/*.h \
      	$(srcdir)/include/*.h \
      	$(srcdir)/os/$(OS_DIR)/os.h \
      	$(srcdir)/modules/arch/unix/mod_unixd.h \
      	$(srcdir)/modules/core/mod_so.h \
      	$(srcdir)/modules/core/mod_watchdog.h \
      	$(srcdir)/modules/cache/mod_cache.h \
      	$(srcdir)/modules/cache/cache_common.h \
      	$(srcdir)/modules/database/mod_dbd.h \
      	$(srcdir)/modules/dav/main/mod_dav.h \
      	$(srcdir)/modules/filters/mod_include.h \
      	$(srcdir)/modules/filters/mod_xml2enc.h \
      	$(srcdir)/modules/generators/mod_cgi.h \
      	$(srcdir)/modules/generators/mod_status.h \
      	$(srcdir)/modules/loggers/mod_log_config.h \
      	$(srcdir)/modules/mappers/mod_rewrite.h \
      	$(srcdir)/modules/proxy/mod_proxy.h \
              $(srcdir)/modules/session/mod_session.h \
      	$(srcdir)/modules/ssl/mod_ssl.h \
      	$(srcdir)/modules/ssl/mod_ssl_openssl.h \
      	$(srcdir)/os/$(OS_DIR)/*.h
      
      install-include:
      	@echo Installing header files
      	@$(MKINSTALLDIRS) $(DESTDIR)$(includedir)
      	@for hdr in $(INSTALL_HEADERS); do \
      	  $(INSTALL_DATA) $$hdr $(DESTDIR)$(includedir); \
      	done
      
      install-man:
      	@echo Installing man pages and online manual
      	@test -d $(DESTDIR)$(mandir)      || $(MKINSTALLDIRS) $(DESTDIR)$(mandir)
      	@test -d $(DESTDIR)$(mandir)/man1 || $(MKINSTALLDIRS) $(DESTDIR)$(mandir)/man1
      	@test -d $(DESTDIR)$(mandir)/man8 || $(MKINSTALLDIRS) $(DESTDIR)$(mandir)/man8
      	@test -d $(DESTDIR)$(manualdir)   || $(MKINSTALLDIRS) $(DESTDIR)$(manualdir)
      	@cp -p $(top_srcdir)/docs/man/*.1 $(DESTDIR)$(mandir)/man1
      	@cp -p $(top_srcdir)/docs/man/*.8 $(DESTDIR)$(mandir)/man8
      	@if test "x$(RSYNC)" != "x" && test -x $(RSYNC) ; then \
      	  $(RSYNC) --exclude .svn -rlpt --numeric-ids $(top_srcdir)/docs/manual/ $(DESTDIR)$(manualdir)/; \
      	else \
      	  cd $(top_srcdir)/docs/manual && cp -rp * $(DESTDIR)$(manualdir); \
      	  cd $(DESTDIR)$(manualdir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
      	fi
      
      install-suexec: install-suexec-$(INSTALL_SUEXEC)
      
      install-suexec-binary:
      	@if test -f $(builddir)/support/suexec; then \
                  test -d $(DESTDIR)$(sbindir) || $(MKINSTALLDIRS) $(DESTDIR)$(sbindir); \
                  $(INSTALL_PROGRAM) $(top_builddir)/support/suexec $(DESTDIR)$(sbindir); \
      	fi
      
      install-suexec-setuid: install-suexec-binary
      	@if test -f $(builddir)/support/suexec; then \
      	    chmod 4755 $(DESTDIR)$(sbindir)/suexec; \
      	fi
      
      install-suexec-caps: install-suexec-binary
      	@if test -f $(builddir)/support/suexec; then \
                  setcap 'cap_setuid,cap_setgid+pe' $(DESTDIR)$(sbindir)/suexec; \
      	fi
      
      suexec:
      	cd support && $(MAKE) suexec
      
      x-local-distclean:
      	@rm -rf autom4te.cache
      
      # XXX: This looks awfully platform-specific [read: bad form and style]
      include $(top_srcdir)/os/os2/core.mk
      ��������������������������������������������������������������������������������������������������httpd-2.4.41/srclib/��������������������������������������������������������������������������������0002755�0000000�0000050�00000000000�13523273357�012526� 5����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������httpd-2.4.41/srclib/Makefile.in���������������������������������������������������������������������0000644�0000000�0000050�00000000171�10203136130�014543� 0����������������������������������������������������������������������������������������������������ustar  �root����������������������������src��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������
      BUILD_SUBDIRS = $(AP_BUILD_SRCLIB_DIRS)
      CLEAN_SUBDIRS = $(AP_CLEAN_SRCLIB_DIRS)
      
      include $(top_builddir)/build/rules.mk
      �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������

    * For a fairly comprehensive set of languages see the * README * file that came with this source. At a minimum, the lexer should work on a * number of languages including C and friends, Java, Python, Bash, SQL, HTML, * XML, CSS, Javascript, and Makefiles. It works passably on Ruby, PHP and Awk * and a subset of Perl, but, because of commenting conventions, doesn't work on * Smalltalk, Lisp-like, or CAML-like languages without an explicit lang class. *